Editing Devices

The PS4 has many kernel devices that can be accessed through [[IOCTL]]. Some of them have usermode module equivalents, some like "sbl" consist in [[Secure Modules]] and some like "camera" make use of a dedicated firmware stored in kernel memory.

See also [https://psdevwiki.com/ps5/Devices PS5 devices].

== Device Listing ==

Unique devices are listed here without the "/dev/" prefix for readability.

{| class="wikitable sortable"
|-
! Device Path !! Accessible ?by kernel? !! Device Long Name !! Notes
|-
| gc || Yes || ?GPU/Graphics? ?Controller/Core? || It could also stand for Graphics Core (from [https://en.wikipedia.org/wiki/Graphics_Core_Next])
|-
| fd || ? || File Descriptor || Opening the file /dev/fd/n is equivalent to duplicating descriptor n (assuming that descriptor n is open).
|-
| dce || ? || Display Controller Engine || -
|-
| dmem{0,1?,2?} || ? || ?Direct? Memory || -
|-
| dipsw || ? || [[DIP Switches]] || -
|-
| hmd || ? || Head-mounted Display || [[Morpheus]]. https://en.wikipedia.org/wiki/Head-mounted_display
|-
| mas || ? || ?Mass Storage? || -
|-
| bt || ? || Bluetooth || -
|-
| sdma || ? || (GPU) System DMA Kernel || -
|-
| hdmi || ? || HDMI || -
|-
| s3da || ?System/Software? 3D Acceleration || || See Marcan's slides about PS4 GPU Linux driver.
|-
| dbggc || Yes || Debug ?GPU/Graphics? ?Controller/Core? || -
|-
| deci_stderr || ? || [[DECI4]] stderr || -
|-
| deci_stdin || ? || [[DECI4]] stdin || -
|-
| deci_stdout || ? || [[DECI4]] stdout || -
|-
| deci_tty{2-7} || ? || [[DECI4]] tty{2-7} || -
|-
| deci_tty{a-c}0 || ? || [[DECI4]] deci_tty{a-c}0 || -
|-
| ctrlp || ? || Control ?Process? || Like on PS Vita DevKit. See [https://wiki.henkaku.xyz/vita/SceDeci4pCtrlp].
|-
| camera || Yes || Camera || Module for the [[PlayStation 4 Camera]].
|-
| wlan || ? || Wireless LAN || -
|-
| wlanbt || Wireless LAN Bluetooth|| - || -
|-
| regmgr || Yes || Registry Manager || -
|-
| vce || ? || Video Coding/Codec Engine || -
|-
| hmddfu || Yes || Head-mounted Display Device Firmware Update || [[Morpheus]] firmware updater
|-
| mbus || ? || ?Media/Memory/Management? Bus || See libSceMbus.sprx.
|-
| uvd || ? || Unified Video Decoder || GPKMD?
|-
| hid || Yes || Human Interface Device || -
|-
| sbl || Yes || [[SBL Kernel module]] || -
|-
| av_control || ? || Audio/Video Controller || -
|-
| ipmimgr || Yes || IPMI Manager || Used by ShellCore for tasks.
|-
| ajm || Yes || Audio Co-processor Job Manager || -
|-
| bpf || ? || BSD Packet Filter || Since System Software 5.50, opening BPF has been blocked for unprivileged processes such as WebKit and applications/games. Attempting to open it yields EPERM.
|-
| bpf0 || ? || BSD Packet Filter 0 || -
|-
| console || ? || Console || Probably a debug log console. It provides the kernel a guaranteed place to output its log messages, especially during boot time. It is a symbolic link pointing to another device, usually tty0.
|-
| ctty || ? || ?Console? TTY || Probably an alias to the terminal of the active process (tty0), regardless of the type of terminal.
|-
| sdbgp || ? || System Debug ?Process? || Like on PS Vita DevKit. See [https://wiki.henkaku.xyz/vita/SceDeci4pSDbgp].
|-
| audioout || ? || Audio Out || -
|-
| screenshot || ? || Screenshot || -
|-
| bluetooth_hid || ? || Bluetooth Human Interface Device || -
|-
| icc_configuration || ? || ICC Configuration || -
|-
| icc_device_power || ? || ICC Device Power || -
|-
| icc_indicator || ? || ICC Indicator || -
|-
| icc_nvs || ? || ICC [[NVS]] || -
|-
| icc_power || ? || ICC Power || -
|-
| notification0 || ? || Notification 0 || -
|-
| notification1 || ? || Notification 1 || -
|-
| null || ? || Null device || -
|-
| random || ? || Blocking CSPRNG || -
|-
| rng || ? || Random number generator || -
|-
| sce_zlib || ? || Sony Computer Entertainment zlib || -
|-
| srtc || ? || Secure Real Time Clock || -
|-
| ugen0.4 || ? || ? || -
|-
| urandom || ? || Never-blocking CSPRNG || -
|-
| usb || ? || USB || -
|-
| usbctl || ? || USB Control || -
|-
| zero || ? || Zero || -
|}

=== Disk Device Listing ===

Some devices acts as RW storage devices and aim to be mounted as partitions.

See also [[Partitions]], [https://docs.freebsd.org/en/books/handbook/geom FreeBSD GEOM handbook] and [https://docs.freebsd.org/en/books/handbook/disks/ FreeBSD Storage handbook].

Format:
<code><Device Name><ID><Optional: .crypt><Optional: XN where X is "s" for segment or "x" for partition and N is a decimal number><Optional: .crypt><Optional: XN where X is "s" for segment or "x" for partition and N is a decimal number><Optional: b for (active or inactive) backup bank></code>

Type can be:
* cd: [[Bluray Drive]]
* da: [[HDD SSD|Internal HDD]] and [[USB]] storage removable devices
* es: [[USB Extended Storage]]
* pup_update: Maybe alias for da0x12.crypt
* sc_fw_update: Unknown physical location
* sflash: [[Serial Flash]]
* sbram: [[Southbridge#Southbridge_RAM|Southbridge RAM]]

{| class="wikitable"
! Device Name !! Description !! Notes !! Used in
|-
| cd0 || /mnt/disc0 (CD, DVD or BD) || contains 4XXR || 80010002, https://pastebin.com/zP8EZFrW
|-
| da0 || Internal HDD (raw) || contains 4002XXXX || 80010002, https://pastebin.com/BxqFjFts
|-
| da0x0.crypt || preinst || contains preinst image || 80010002, mini-syscore.elf, safemode.elf, SceShellCore.elf, orbis_swu.self
|-
| da0x1.crypt || preinst2 || contains preinst2 image || 80010002, mini-syscore.elf, safemode.elf, SceShellCore.elf, orbis_swu.self
|-
| da0x2 || eap_kernel || contains eap_kernel. 16 MB. Usually named like /dev/sdX5. || 80010002, safemode.elf, SceShellCore.elf, orbis_swu.self 
|-
| da0x3.crypt || eap_vsh || contains eap_vsh img || 80010002, mini-syscore.elf, safemode.elf, SceShellCore.elf, orbis_swu.self
|-
| da0x4.crypt, da0x4b.crypt || system || contains active/inactive system img || 80010002, safemode.elf, SceShellCore.elf, orbis_swu.self (mini-syscore.elf and safemode.elf only 4)
|-
| da0x5.crypt, da0x5b.crypt || system_ex || contains active/inactive system_ex img || 80010002, safemode.elf, SceShellCore.elf, orbis_swu.self (mini-syscore.elf included 5)
|-
| da0x6.crypt || old swap || contains old swap || 
|-
| da0x6x0.crypt || new swap || contains new swap || 80010002, mini-syscore.elf, SceSysCore.elf
|-
| da0x6x1.crypt || kernel_log || contains kernel log || 80010002
|-
| da0x6x2.crypt || user_log || contains user log || 80010002, mini-syscore.elf
|-
| da0x8.crypt || app_tmp || contains app_tmp || safemode.elf, SceShellCore.elf
|-
| da0x9.crypt || system_data || contains system_data img || mini-syscore.elf, safemode.elf, SceSysCore.elf, SceShellCore.elf, orbis_swu.self
|-
| da0x12.crypt || update || contains update img || mini-syscore.elf, safemode.elf, SceShellCore.elf, orbis_swu.self
|-
| da0x13.crypt || user || contains user img ||  mini-syscore.elf, safemode.elf, SceShellCore.elf, orbis_swu.self
|-
| da0x14.crypt || eap_user || contains eap_user img || mini-syscore.elf, safemode.elf, SceShellCore.elf, orbis_swu.self
|-
| da0x15.crypt || app_reserved || contains app_reserved || safemode.elf, libkernel_sys.sprx, SceShellCore.elf
|-
| da1 || USB Storage device (raw) ||  || 80010002, mini-syscore.elf, safemode.elf, libSceWebKit2.sprx, libSceWebKit2Secure.sprx, mscorlib.dll.sprx, System.Core.dll.sprx, NPXS20001 app.exe.sprx, orbis_swu.self
|-
| da1s1 || /mnt/usb0 (USB Storage device first partition) ||  || 80010002, mini-syscore.elf, safemode.elf, libSceWebKit2.sprx, libSceWebKit2Secure.sprx, mscorlib.dll.sprx, System.Core.dll.sprx, NPXS20001 app.exe.sprx, orbis_swu.self
|-
| es0.crypt || ext_hdd (Extended Storage 0) ||  || AES-XTS decrypted USB Extended Storage
|-
| pup_update0 || Alias of ?da0x12.crypt? || contains PUP || 80010002, safemode.elf, SceShellCore.elf, orbis_swu.self
|-
| sc_fw_update0 || Unknown physical location || contains 4000XXXX/4001XXXX || 80010002, safemode.elf, SceShellCore.elf, orbis_swu.self
|-
| sflash0 || Entire [[Serial Flash]] || 32MB (0x2000000) || 
|-
| sflash0s0 || [[Serial Flash]] segment 0 || 2MB (0x200000) || 
|-
| sflash0s1 || [[Serial Flash]] segment 1 || 30MB (0x1E00000) || 
|-
| sflash0s0x0 || Unknown (SceSysCore related) || contains blank/0xFF data. 192kB (0x30000) || SceSysCore.elf
|-
| sflash0s0x32, sflash0s0x32b || emc_ipl || contains active/inactive emc_ipl (0xC000XXXX). 384kB (0x60000) || 80010002, safemode.elf, SceShellCore.elf, orbis_swu.self
|-
| sflash0s0x33 || eap_kbl || contains eap_kbl (C001XXXX). 512kB (0x80000) || 80010002, safemode.elf, SceShellCore.elf, orbis_swu.self
|-
| sflash0s0x34 || nvs || contains [[Serial Flash]] [[Non Volatile Storage]]. 48kB (0xC000) || 
|-
| sflash0s0x38 || torus2_fw || contains torus firmware (C002XXXX). 512kB (0x80000) || 80010002, safemode.elf, SceShellCore.elf, orbis_swu.self
|-
| sflash0s1.cryptx1 || idata || contains individual data || 80010002, SceShellCore.elf
|-
| sflash0s1.cryptx2, sflash0s1.cryptx2b || sam_ipl || contains active/inactive [[Secure Loader]] (8000XXXX) || 80010002, safemode.elf, SceShellCore.elf, orbis_swu.self
|-
| sflash0s1.cryptx3, sflash0s1.cryptx3b || coreos || contains active/inactive CoreOS (Secure Kernel, Kernel, Secure Modules) (8001XXXX) || 80010002, safemode.elf, SceShellCore.elf, orbis_swu.self, BdmvPlayerCore.elf, BdvdPlayerCore.elf
|-
| sflash0s1.cryptx6 || vtrm || contains [[VTRM]] || 
|-
| sflash0s1.cryptx39 || bd_hrl || contains bd revocation list || 80010002, BdmvPlayerCore.elf , BdvdPlayerCore.elf
|-
| sflash0s1.cryptx40 || Unknown (safemode related) || contains blank/0xFF data || 80010002, mini-syscore.elf, safemode.elf, SceShellCore.elf, orbis_swu.self
|-
| sbram0 || [[Southbridge#Southbridge_RAM|Southbridge RAM]] ||  || Maybe not accessible from x86 kernel. Accessible from ?EAP or EMC?.
|-
| iccnvs{0-4} || [[Serial Flash]] [[Non Volatile Storage]] segment 0, 1, 2, 3, 4 ||  || 
|}

source: https://web.archive.org/web/20161013104012/http://pastie.org/pastes/9706000

{{Reverse Engineering}}
<noinclude>[[Category:Main]]</noinclude>