[apple/libsecurity_codesigning.git] / lib / cskernel.h

/*
 * Copyright (c) 2006 Apple Computer, Inc. All Rights Reserved.
 * 
 * @APPLE_LICENSE_HEADER_START@
 * 
 * This file contains Original Code and/or Modifications of Original Code
 * as defined in and that are subject to the Apple Public Source License
 * Version 2.0 (the 'License'). You may not use this file except in
 * compliance with the License. Please obtain a copy of the License at
 * http://www.opensource.apple.com/apsl/ and read it before using this
 * file.
 * 
 * The Original Code and all software distributed under the License are
 * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER
 * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES,
 * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY,
 * FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT.
 * Please see the License for the specific language governing rights and
 * limitations under the License.
 * 
 * @APPLE_LICENSE_HEADER_END@
 */

//
// cskernel - Kernel implementation of the Code Signing Host Interface
//
#ifndef _H_CSKERNEL
#define _H_CSKERNEL

#include "Code.h"
#include "StaticCode.h"
#include <security_utilities/utilities.h>

namespace Security {
namespace CodeSigning {


class ProcessCode;


//
// The nominal StaticCode representing the kernel on disk.
// This is barely used, since we don't validate the kernel (it's the root of trust)
// and we don't activate new kernels at runtime.
//
class KernelStaticCode : public SecStaticCode {
public:
	KernelStaticCode();

private:
};


//
// A SecCode that represents the system's running kernel.
// We usually only have one of those in the system at one time. :-)
//
class KernelCode : public SecCode {
public:
	KernelCode();

	SecCode *locateGuest(CFDictionaryRef attributes);
	SecStaticCode *identifyGuest(SecCode *guest, CFDataRef *cdhash);
	SecCodeStatus getGuestStatus(SecCode *guest);
	void changeGuestStatus(SecCode *guest, SecCodeStatusOperation operation, CFDictionaryRef arguments);
	
	static KernelCode *active()		{ return globals().code; }
	
public:
	struct Globals {
		Globals();
		SecPointer<KernelCode> code;
		SecPointer<KernelStaticCode> staticCode;
	};
	static ModuleNexus<Globals> globals;

protected:
	void identify();
	void csops(ProcessCode *proc, unsigned int op, void *addr = NULL, size_t length = 0);
};


} // end namespace CodeSigning
} // end namespace Security

#endif // !_H_CSKERNEL
Commit	Line	Data
7d31e928 A	1	/*
	2	* Copyright (c) 2006 Apple Computer, Inc. All Rights Reserved.
	3	*
	4	* @APPLE_LICENSE_HEADER_START@
	5	*
	6	* This file contains Original Code and/or Modifications of Original Code
	7	* as defined in and that are subject to the Apple Public Source License
	8	* Version 2.0 (the 'License'). You may not use this file except in
	9	* compliance with the License. Please obtain a copy of the License at
	10	* http://www.opensource.apple.com/apsl/ and read it before using this
	11	* file.
	12	*
	13	* The Original Code and all software distributed under the License are
	14	* distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER
	15	* EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES,
	16	* INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY,
	17	* FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT.
	18	* Please see the License for the specific language governing rights and
	19	* limitations under the License.
	20	*
	21	* @APPLE_LICENSE_HEADER_END@
	22	*/
	23
	24	//
	25	// cskernel - Kernel implementation of the Code Signing Host Interface
	26	//
	27	#ifndef _H_CSKERNEL
	28	#define _H_CSKERNEL
	29
	30	#include "Code.h"
	31	#include "StaticCode.h"
	32	#include <security_utilities/utilities.h>
	33
	34	namespace Security {
	35	namespace CodeSigning {
	36
	37
d1c1ab47 A	38	class ProcessCode;
	39
	40
7d31e928 A	41	//
	42	// The nominal StaticCode representing the kernel on disk.
	43	// This is barely used, since we don't validate the kernel (it's the root of trust)
	44	// and we don't activate new kernels at runtime.
	45	//
	46	class KernelStaticCode : public SecStaticCode {
	47	public:
	48	KernelStaticCode();
	49
	50	private:
	51	};
	52
	53
	54	//
	55	// A SecCode that represents the system's running kernel.
	56	// We usually only have one of those in the system at one time. :-)
	57	//
	58	class KernelCode : public SecCode {
	59	public:
	60	KernelCode();
	61
	62	SecCode *locateGuest(CFDictionaryRef attributes);
d1c1ab47 A	63	SecStaticCode identifyGuest(SecCode guest, CFDataRef *cdhash);
	64	SecCodeStatus getGuestStatus(SecCode *guest);
	65	void changeGuestStatus(SecCode *guest, SecCodeStatusOperation operation, CFDictionaryRef arguments);
7d31e928 A	66
	67	static KernelCode *active() { return globals().code; }
	68
	69	public:
	70	struct Globals {
	71	Globals();
	72	SecPointer<KernelCode> code;
	73	SecPointer<KernelStaticCode> staticCode;
	74	};
	75	static ModuleNexus<Globals> globals;
	76
	77	protected:
d1c1ab47 A	78	void identify();
d1c1ab47 A	79	void csops(ProcessCode proc, unsigned int op, void addr = NULL, size_t length = 0);
7d31e928 A	80	};
	81
	82
	83	} // end namespace CodeSigning
	84	} // end namespace Security
	85
	86	#endif // !_H_CSKERNEL