Editing Devices
Jump to navigation
Jump to search
The edit can be undone. Please check the comparison below to verify that this is what you want to do, and then publish the changes below to finish undoing the edit.
Latest revision | Your text | ||
Line 1: | Line 1: | ||
Note for ioctls: * indicates name is assumed from RE and may not be accurate. | Note for ioctls: * indicates name is assumed from RE and may not be accurate. | ||
== Device Listing == | == Device Listing == | ||
Note: only unique devices are listed. Benign devices like /dev/null are omitted for brevity's sake. | |||
{| class="wikitable sortable" | {| class="wikitable sortable" | ||
|- | |- | ||
! | ! Path !! Device Name !! Notes | ||
|- | |- | ||
| | | /dev/a53{io,mm,mmsys} || A53 Input/Output, Memory Management (sys) || See MP4 section | ||
|- | |- | ||
| | | /dev/ajm{i} || Audio Job Manager || - | ||
|- | |- | ||
| | | /dev/auditpipe || - || - | ||
|- | |- | ||
| | | /dev/authmgr || Authentication Manager || - | ||
|- | |- | ||
| | | /dev/az{1,ctl} || - || Audio-related | ||
|- | |- | ||
| | | /dev/bar || Backup and Restore || Used by shellcore for backup and recovery | ||
|- | |- | ||
| | | /dev/bfs/ctl || - || - | ||
|- | |- | ||
| | | /dev/bluetooth_hid || - || - | ||
|- | |- | ||
| | | /dev/bt || - || - | ||
|- | |- | ||
| | | /dev/camera || Camera || - | ||
|- | |- | ||
| | | /dev/cloudsd || Cloud SaveData || - | ||
|- | |- | ||
| | | /dev/console || Console || Usermode logging | ||
|- | |- | ||
| | | /dev/crepo || Crash Report || Used for crash reporting service (coredump, gpudump, shellcore) | ||
|- | |- | ||
| | | /dev/ctrlp{_sync} || - || Used by libScePad (controller) | ||
|- | |- | ||
| | | /dev/dbggc{_control} || Debug GPU? || - | ||
|- | |- | ||
| | | /dev/deci_coredump || Debug Com. Interface (DECI) coredump || - | ||
|- | |- | ||
| | | /dev/deci_mp4_ioc || DECI I/O Control? || - | ||
|- | |- | ||
| | | /dev/deci_mp4_mmc || - || - | ||
|- | |- | ||
| | | /dev/deci_std{in,out,err} || DECI Input/Output/Error || - | ||
|- | |- | ||
| | | /dev/deci_tty* || DECI Terminals || - | ||
|- | |- | ||
| | | /dev/devctl || - || - | ||
|- | |- | ||
| | | /dev/diag || - || - | ||
|- | |- | ||
| | | /dev/dipsw || Dip Switch || - | ||
|- | |- | ||
| | | /dev/dldbg || Dynamic Library Debug || - | ||
|- | |- | ||
| | | /dev/dmem{0,1,2} || - || - | ||
|- | |- | ||
| | | /dev/dngl || - || - | ||
|- | |- | ||
| | | /dev/duid || Disc Unique ID || - | ||
|- | |- | ||
| | | /dev/encdec || EncDec || - | ||
|- | |- | ||
| | | /dev/envelope || Envelope Format Crypto || - | ||
|- | |- | ||
| | | /dev/evlg{0,1} || Event Log || Intended to be used with read syscall | ||
|- | |- | ||
| | | /dev/exthdd || External HDD || - | ||
|- | |- | ||
| | | /dev/fcram || - || - | ||
|- | |- | ||
| | | /dev/fsctrl || - || - | ||
|- | |- | ||
| | | /dev/fttrm || - || Used by bluray app | ||
|- | |- | ||
| | | /dev/gbase || - || - | ||
|- | |- | ||
| | | /dev/gc || GPU command || - | ||
|- | |- | ||
| | | /dev/geom.ctl || - || - | ||
|- | |- | ||
| | | /dev/gic || - || - | ||
|- | |- | ||
| | | /dev/gsched_bds.ctl || - || - | ||
|- | |- | ||
| | | /dev/hdmi || HDMI || - | ||
|- | |- | ||
| | | /dev/hid || - || - | ||
|- | |- | ||
| | | /dev/hmd2_* || VR 2? || - | ||
|- | |- | ||
| | | /dev/hmd_* || VR || - | ||
|- | |- | ||
| | | /dev/iccnvs{0,1,2,4,6} || ICC_NVS (sectors) || Location of Sectors 0, 1, 2, 4 and 6 of sflash0 non volatile storage | ||
|- | |- | ||
| | | /dev/icc_configuration || ICC Config || - | ||
|- | |- | ||
| | | /dev/icc_crash_report || ICC Crash Report || - | ||
|- | |- | ||
| | | /dev/icc_device_power || ICC Device Power || - | ||
|- | |- | ||
| | | /dev/icc_fan || ICC Fan || - | ||
|- | |- | ||
| | | /dev/icc_floyd || ICC TPM? || SNVS Storage Device | ||
|- | |- | ||
| | | /dev/icc_indicator || ICC LED || - | ||
|- | |- | ||
| | | /dev/icc_nvs || ICC NVS || - | ||
|- | |- | ||
| | | /dev/icc_power || ICC Power || - | ||
|- | |- | ||
| | | /dev/icc_sc_config || ICC Syscon? Config || - | ||
|- | |- | ||
| | | /dev/icc_thermal || ICC Thermal || - | ||
|- | |- | ||
| | | /dev/klog || Kernel Log || Read syscall on this device can be used to get kernel log if privileged | ||
|- | |- | ||
| | | /dev/kmbp || - || - | ||
|- | |- | ||
| | | /dev/lvdctl || Layered Vnode Device Control || - | ||
|- | |- | ||
| | | /dev/lvd{0,1} || Layered Vnode Device || - | ||
|- | |- | ||
| | | /dev/m2.ctl || m.2 NVMe Control? || - | ||
|- | |- | ||
| | | /dev/manuauth || Manufacturer Auth|| - | ||
|- | |- | ||
| | | /dev/mbus || Event bus || - | ||
|- | |- | ||
| | | /dev/mbus_av || Event bus (audio video?) || - | ||
|- | |- | ||
| | | /dev/md0 || Kernel Md0 || Main System modules are located here for Kernel (Not System Modules!) | ||
|- | |- | ||
| | | /dev/md2 || - || - | ||
|- | |- | ||
| | | /dev/mdctl || - || - | ||
|- | |- | ||
| | | /dev/metadbg || - || - | ||
|- | |- | ||
| | | /dev/mp1 || System Management Unit (SMU) || Power management, thermals, etc. (see mp1 section) | ||
|- | |- | ||
| | | /dev/mp3 || Trusted Execution Environment (TEE) || See mp3 section | ||
|- | |- | ||
| | | /dev/mp4/dump{_for_decid} || A53 (mdbg?) || See mp4 section | ||
|- | |- | ||
| | | /dev/notification{0-9} || Notification || - | ||
|- | |- | ||
| | | /dev/npdrm || Network Product Digital Rights Management interface || - | ||
|- | |- | ||
| | | /dev/nsfsctl || Namespace Filesystem (NSFS) Control || - | ||
|- | |- | ||
| | | /dev/nsid1.ctl || - || - | ||
|- | |- | ||
| | | /dev/otpaccess || One-Time Programmable Access? || - | ||
|- | |- | ||
| | | /dev/pfsctldev || Playstation Filesystem (PFS) Control || - | ||
|- | |- | ||
| | | /dev/pfsmgr || PFS Manager || Used for trophies, savegames, keystone | ||
|- | |- | ||
| | | /dev/playgo_emu_param{1,2,3} || PlayGo emulator params || - | ||
|- | |- | ||
| | | /dev/pltauth{0,1} || Platform Authentication (PSN) || - | ||
|- | |- | ||
| | | /dev/pup_update0 || PUP Update || - | ||
|- | |- | ||
| | | /dev/qafutkn || QA flag / Utoken || - | ||
|- | |- | ||
| | | /dev/rnps || React Native PS || PSN related | ||
|- | |- | ||
| | | /dev/rootparam || Root Param || Used by shellcore for verifying root param sfo/json | ||
|- | |- | ||
| | | /dev/s3da || 3D Audio || - | ||
|- | |- | ||
| | | /dev/sbl_secreg || SBL Secure Region || - | ||
|- | |- | ||
| | | /dev/sbl_srv || SBL Service || Used exclusively by playready | ||
|- | |- | ||
| | | /dev/scanin || - || - | ||
|- | |- | ||
| | | /dev/sce_zlib{_sys} || zlib || zlib (de)compression | ||
|- | |- | ||
| | | /dev/sc_fw_update0 || (syscon?) firmware update || - | ||
|- | |- | ||
| | | /dev/sflash0 || SPI flash || 2MB. Has EMC firmware and (non-secure) NVS. | ||
|- | |- | ||
| | | /dev/srtc || Secure Real Time Clock || - | ||
|- | |- | ||
| | | /dev/ssd0.* || Internal SSD partitions || - | ||
|- | |- | ||
| | | /dev/sshot || Screenshot || - | ||
|- | |- | ||
| | | /dev/transactionid.ctl || - || - | ||
|- | |- | ||
| | | /dev/ufssuspend || - || - | ||
|- | |- | ||
| | | /dev/usbctl || USB control || - | ||
|- | |- | ||
| | | /dev/uvd_{dec/enc/bgt} || Unified Video Decoder? || - | ||
|- | |- | ||
| | | /dev/wlanbt || Wireless LAN + Bluetooth || - | ||
|- | |- | ||
| | | /dev/xpt0 || XPT Transport Interface || CAM Transport Layer | ||
|} | |} | ||
== Platform Security Processor Core (PSP) (MP0) == | == Platform Security Processor Core (PSP) (MP0) == | ||
* All the fun things are here | |||
* All the fun things | * Named SMU PSP as well | ||
* Named | * Named ASP as well (AMD Secure Processor) | ||
== System Management Unit (SMU) (MP1) == | == System Management Unit (SMU) (MP1) == | ||
MP1 (System Management Unit or "SMU") is an xtensa CPU responsible for power management, clock management, sampling sensor data, and other power/thermal-related tasks. The /dev/mp1 device can be used to issue commands to it. Below are known commands. | MP1 (System Management Unit or "SMU") is an xtensa CPU responsible for power management, clock management, sampling sensor data, and other power/thermal-related tasks. The /dev/mp1 device can be used to issue commands to it. Below are known commands. | ||
Line 261: | Line 231: | ||
== Sensor Fusion Processor (SFP) (MP2) == | == Sensor Fusion Processor (SFP) (MP2) == | ||
* | * doesn't exist on ps5 | ||
* mainly for mobiles | |||
== Trusted Execution Environment (TEE) (MP3) == | == Trusted Execution Environment (TEE) (MP3) == | ||
MP3 consists of the Trusted Execution Environment (TEE) running on the AMD Platform Security Processor (PSP/SP). Its primary function is Digital Rights Management (DRM) via [https://www.microsoft.com/playready/features/EnhancedContentProtection.aspx PlayReady SL3000]. In userspace, the libSceTEEClient library is used for interfacing with it, which internally uses /dev/mp3 to load secure binaries (sbins) and establish sessions. Below are known commands. | |||
MP3 consists of the Trusted Execution Environment (TEE) running on the | |||
{| class="wikitable sortable" | {| class="wikitable sortable" | ||
|- | |- | ||
! IOCTL # !! Name !! Notes | ! IOCTL # !! Name !! Notes | ||
|- | |- | ||
| 0xC010B403 || TEE_IOC_INVOKE || Invoke commands | | 0xC010B403 || TEE_IOC_INVOKE || Invoke commands | ||
|- | |- | ||
| 0xC010B408 || TEE_IOC_DLM_GET_DEBUG_TOKEN || - | | 0xC010B408 || TEE_IOC_DLM_GET_DEBUG_TOKEN || - | ||
Line 303: | Line 261: | ||
== A53MM/A53IO (MP4) == | == A53MM/A53IO (MP4) == | ||
MP4, which consists of /dev/a53mm, /dev/a53mmsys, and /dev/a53io, is used for various tasks, and its overall purpose is not fully understood. Some of the things it includes are debugging (mdbg), video encode/decode, and other various memory-management related things. Below are known commands. | MP4, which consists of /dev/a53mm, /dev/a53mmsys, and /dev/a53io, is used for various tasks, and its overall purpose is not fully understood. Some of the things it includes are debugging (mdbg), video encode/decode, and other various memory-management related things. Below are known commands. | ||
Line 377: | Line 334: | ||
! IOCTL # !! Name !! Notes | ! IOCTL # !! Name !! Notes | ||
|- | |- | ||
| 0x80046101 || | | 0x80046101 || A53IO_OPEN_NAND || Exposes NAND groups for reading | ||
|- | |- | ||
| | | 0x80046104 || A53IO_DISABLE_CONTROLLER || Disables A53 controller (warning: this will put the console in a bad state) | ||
|- | |- | ||
| 0x80046105 || ???? || Maybe used for M.2 formatting | |||
| 0x80046105 || | |||
|- | |- | ||
| 0x80186111 || BFS_A53IO_READ_DEVICE? || - | | 0x80186111 || BFS_A53IO_READ_DEVICE? || - | ||
Line 405: | Line 358: | ||
== Backup and Restore == | == Backup and Restore == | ||
Backup and Restore (BAR) is used by shellcore via /dev/bar. Below are known commands. | |||
Backup and Restore (BAR) is used by | |||
{| class="wikitable sortable" | {| class="wikitable sortable" | ||
Line 430: | Line 382: | ||
== Disc UID == | == Disc UID == | ||
Disc UID (/dev/duid) has its own library (libSceDiscId). It's unknown what this is used for at present. It has 2 known ioctls. | |||
Disc UID (/dev/duid) has its own library (libSceDiscId). It's unknown what this is used for at present. It has | |||
{| class="wikitable sortable" | {| class="wikitable sortable" | ||
Line 443: | Line 394: | ||
== Dynamic Library Debug == | == Dynamic Library Debug == | ||
Dynamic Lib Debug (/dev/dldbg) is used by the library for debugging syscore. Given the name, it's likely used for debugging sprx libs. Below are known commands. | Dynamic Lib Debug (/dev/dldbg) is used by the library for debugging syscore. Given the name, it's likely used for debugging sprx libs. Below are known commands. | ||
Line 459: | Line 409: | ||
== FTTRM == | == FTTRM == | ||
FTTRM's full purpose is unknown, but it's likely DRM-related. It's used by the Bluray app (BdmvPlayerCore, BdvdPlayerCore, UHDBdPlayerCore) via /dev/fttrm. There are only 2 known commands. | |||
FTTRM's full purpose is unknown, but it | |||
{| class="wikitable sortable" | {| class="wikitable sortable" | ||
Line 472: | Line 421: | ||
== ICC Floyd (TPM) == | == ICC Floyd (TPM) == | ||
The /dev/icc_floyd is for interacting with the floyd Trusted Platform Module (TPM) over ICC. It only has one known command. | The /dev/icc_floyd is for interacting with the floyd Trusted Platform Module (TPM) over ICC. It only has one known command. | ||
Line 486: | Line 434: | ||
== Manufacturer Authorization == | == Manufacturer Authorization == | ||
The /dev/manuauth device seems to be for manufacturer authorization or authentication. It's used in various updaters. Below are known commands. | |||
The /dev/manuauth device seems to be for manufacturer authorization or authentication. It | |||
{| class="wikitable sortable" | {| class="wikitable sortable" | ||
Line 502: | Line 449: | ||
== Namespace Filesystem Control == | == Namespace Filesystem Control == | ||
The Namespace Filesystem (NSFS) is used by Virtual Shell (Vsh) and shellcore. It's critical to processes running on the system. Below are known commands. | |||
The Namespace Filesystem (NSFS) is used by Virtual Shell (Vsh) and | |||
{| class="wikitable sortable" | {| class="wikitable sortable" | ||
Line 521: | Line 467: | ||
== PFS Control == | == PFS Control == | ||
Playstation Filesystem (PFS) Control and /dev/pfsctldev is used internally for VSH. Below are known commands. | |||
Playstation | |||
{| class="wikitable sortable" | {| class="wikitable sortable" | ||
Line 552: | Line 497: | ||
== PFS Manager == | == PFS Manager == | ||
PFS Manager (/dev/pfsmgr) is used by shellcore. It handles trophy related tasks, savedata, and keystone verification. Below are known commands. | |||
PFS Manager (/dev/pfsmgr) is used by | |||
{| class="wikitable sortable" | {| class="wikitable sortable" | ||
Line 583: | Line 527: | ||
== PUP Updater == | == PUP Updater == | ||
The /dev/pup_update0 device is used to perform firmware updates. | The /dev/pup_update0 device is used to perform firmware updates. | ||
Line 622: | Line 565: | ||
== Root Param == | == Root Param == | ||
Root Param is used by shellcore to verify root param sfos (for PS4) or jsons (for PS5, aka PPR for ProsPeRo). Below are known commands. | |||
Root Param is used by | |||
{| class="wikitable sortable" | {| class="wikitable sortable" | ||
Line 637: | Line 579: | ||
== CAM Transport Layer == | == CAM Transport Layer == | ||
CAM (Common Access Method) storage subsystem provides a method for implementing drivers to control various known storage devices. | CAM (Common Access Method) storage subsystem provides a method for implementing drivers to control various known storage devices. | ||
Attaches any devices it finds to the appropriate drivers. | Attaches any devices it finds to the appropriate drivers. | ||
Line 650: | Line 591: | ||
|} | |} | ||
== Wireless LAN | == Wireless LAN + Bluetooth == | ||
WLAN and Bluetooth functionality is reachable via /dev/wlanbt. Below are known commands. | WLAN and Bluetooth functionality is reachable via /dev/wlanbt. Below are known commands. | ||