OSX/authd/rule.h

   1 /* Copyright (c) 2012-2013 Apple Inc. All Rights Reserved. */
   2
   3 #ifndef _SECURITY_AUTH_RULE_H_
   4 #define _SECURITY_AUTH_RULE_H_
   5
   6 #include "authdb.h"
   7 #include <CoreFoundation/CoreFoundation.h>
   8 #include <Security/SecRequirement.h>
   9
  10 #if defined(__cplusplus)
  11 extern "C" {
  12 #endif
  13
  14 typedef bool (^mechanism_iterator_t)(mechanism_t mechanism);
  15 typedef bool (^delegate_iterator_t)(rule_t delegate);
  16
  17 typedef enum {
  18     RT_RIGHT = 1,
  19     RT_RULE
  20 } RuleType;
  21
  22 typedef enum {
  23     RC_USER = 1,
  24     RC_RULE,
  25     RC_MECHANISM,
  26     RC_ALLOW,
  27     RC_DENY
  28 } RuleClass;
  29
  30 enum {
  31     RuleFlagShared              = 1 << 0,
  32     RuleFlagAllowRoot           = 1 << 1,
  33     RuleFlagSessionOwner        = 1 << 2,
  34     RuleFlagAuthenticateUser    = 1 << 3,
  35     RuleFlagExtractPassword     = 1 << 4,
  36     RuleFlagEntitled            = 1 << 5,
  37     RuleFlagEntitledAndGroup    = 1 << 6,
  38     RuleFlagRequireAppleSigned  = 1 << 7,
  39     RuleFlagVPNEntitledAndGroup = 1 << 8,
  40         RuleFlagPasswordOnly            = 1 << 9
  41 };
  42 typedef uint32_t RuleFlags;
  43
  44 typedef enum  {
  45     rule_insert,
  46     rule_update,
  47     rule_delete,
  48 } RuleOperation;
  49
  50 AUTH_WARN_RESULT AUTH_MALLOC AUTH_NONNULL_ALL AUTH_RETURNS_RETAINED
  51 rule_t rule_create_default(void);
  52
  53 AUTH_WARN_RESULT AUTH_MALLOC AUTH_NONNULL_ALL AUTH_RETURNS_RETAINED
  54 rule_t rule_create_preauthorization(void);
  55
  56 AUTH_WARN_RESULT AUTH_MALLOC AUTH_NONNULL1 AUTH_RETURNS_RETAINED
  57 rule_t rule_create_with_string(const char *,authdb_connection_t);
  58
  59 AUTH_WARN_RESULT AUTH_MALLOC AUTH_NONNULL_ALL AUTH_RETURNS_RETAINED
  60 rule_t rule_create_with_plist(RuleType,CFStringRef,CFDictionaryRef,authdb_connection_t);
  61
  62 AUTH_NONNULL_ALL
  63 size_t rule_get_mechanisms_count(rule_t);
  64
  65 AUTH_NONNULL_ALL
  66 CFArrayRef rule_get_mechanisms(rule_t);
  67
  68 AUTH_NONNULL_ALL
  69 bool rule_mechanisms_iterator(rule_t,mechanism_iterator_t iter);
  70
  71 AUTH_NONNULL_ALL
  72 size_t rule_get_delegates_count(rule_t);
  73
  74 AUTH_NONNULL_ALL
  75 bool rule_delegates_iterator(rule_t,delegate_iterator_t iter);
  76
  77 AUTH_NONNULL_ALL
  78 bool rule_sql_fetch(rule_t,authdb_connection_t);
  79
  80 AUTH_NONNULL1 AUTH_NONNULL2
  81 bool rule_sql_commit(rule_t,authdb_connection_t,CFAbsoluteTime,process_t);
  82
  83 AUTH_NONNULL_ALL
  84 bool rule_sql_remove(rule_t,authdb_connection_t,process_t);
  85
  86 AUTH_NONNULL_ALL
  87 CFMutableDictionaryRef rule_copy_to_cfobject(rule_t,authdb_connection_t);
  88
  89 AUTH_NONNULL_ALL
  90 int64_t rule_get_id(rule_t);
  91
  92 AUTH_NONNULL_ALL
  93 const char * rule_get_name(rule_t);
  94
  95 AUTH_NONNULL_ALL
  96 RuleType rule_get_type(rule_t);
  97
  98 AUTH_NONNULL_ALL
  99 RuleClass rule_get_class(rule_t);
 100
 101 AUTH_NONNULL_ALL
 102 const char * rule_get_group(rule_t);
 103
 104 AUTH_NONNULL_ALL
 105 int64_t rule_get_kofn(rule_t);
 106
 107 AUTH_NONNULL_ALL
 108 int64_t rule_get_timeout(rule_t);
 109
 110 AUTH_NONNULL_ALL
 111 bool rule_check_flags(rule_t,RuleFlags);
 112
 113 AUTH_NONNULL_ALL
 114 bool rule_get_shared(rule_t);
 115
 116 AUTH_NONNULL_ALL
 117 bool rule_get_allow_root(rule_t);
 118
 119 AUTH_NONNULL_ALL
 120 bool rule_get_session_owner(rule_t);
 121
 122 AUTH_NONNULL_ALL
 123 bool rule_get_authenticate_user(rule_t);
 124
 125 AUTH_NONNULL_ALL
 126 bool rule_get_extract_password(rule_t);
 127
 128 AUTH_NONNULL_ALL
 129 bool rule_get_password_only(rule_t);
 130
 131 AUTH_NONNULL_ALL
 132 int64_t rule_get_tries(rule_t);
 133
 134 AUTH_NONNULL_ALL
 135 const char * rule_get_comment(rule_t);
 136
 137 AUTH_NONNULL_ALL
 138 int64_t rule_get_version(rule_t);
 139
 140 AUTH_NONNULL_ALL
 141 double rule_get_created(rule_t);
 142
 143 AUTH_NONNULL_ALL
 144 double rule_get_modified(rule_t);
 145
 146 AUTH_NONNULL_ALL
 147 const char * rule_get_identifier(rule_t);
 148
 149 AUTH_NONNULL_ALL
 150 CFDataRef rule_get_requirement_data(rule_t);
 151
 152 AUTH_NONNULL_ALL
 153 SecRequirementRef rule_get_requirement(rule_t);
 154
 155 AUTH_NONNULL1 AUTH_NONNULL2
 156 void rule_log_manipulation(authdb_connection_t dbconn, rule_t rule, RuleOperation operation, process_t source);
 157
 158 #if defined(__cplusplus)
 159 }
 160 #endif
 161
 162 #endif /* !_SECURITY_AUTH_RULE_H_ */