OSX/libsecurity_codesigning/lib/SecAssessment.cpp

   1 /*
   2  * Copyright (c) 2011-2014 Apple Inc. All Rights Reserved.
   3  *
   4  * @APPLE_LICENSE_HEADER_START@
   5  *
   6  * This file contains Original Code and/or Modifications of Original Code
   7  * as defined in and that are subject to the Apple Public Source License
   8  * Version 2.0 (the 'License'). You may not use this file except in
   9  * compliance with the License. Please obtain a copy of the License at
  10  * http://www.opensource.apple.com/apsl/ and read it before using this
  11  * file.
  12  *
  13  * The Original Code and all software distributed under the License are
  14  * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER
  15  * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES,
  16  * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY,
  17  * FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT.
  18  * Please see the License for the specific language governing rights and
  19  * limitations under the License.
  20  *
  21  * @APPLE_LICENSE_HEADER_END@
  22  */
  23 #include "cs.h"
  24 #include "SecAssessment.h"
  25 #include "policydb.h"
  26 #include "policyengine.h"
  27 #include "xpcengine.h"
  28 #include "csutilities.h"
  29 #include "xar++.h"
  30 #include <CoreFoundation/CFRuntime.h>
  31 #include <CoreFoundation/CFBundlePriv.h>
  32 #include <security_utilities/globalizer.h>
  33 #include <security_utilities/unix++.h>
  34 #include <security_utilities/cfmunge.h>
  35 #include <notify.h>
  36
  37 using namespace CodeSigning;
  38
  39 //
  40 // CF Objects
  41 //
  42 struct _SecAssessment : private CFRuntimeBase {
  43 public:
  44         _SecAssessment(CFURLRef p, AuthorityType typ, CFDictionaryRef r) : path(p), type(typ), result(r) { }
  45
  46         CFCopyRef<CFURLRef> path;
  47         AuthorityType type;
  48         CFRef<CFDictionaryRef> result;
  49
  50 public:
  51         static _SecAssessment &ref(SecAssessmentRef r)
  52                 { return *(_SecAssessment *)r; }
  53
  54         // CF Boiler-plate
  55         void *operator new (size_t size)
  56         {
  57                 return (void *)_CFRuntimeCreateInstance(NULL, SecAssessmentGetTypeID(),
  58                         sizeof(_SecAssessment) - sizeof(CFRuntimeBase), NULL);
  59         }
  60
  61         static void finalize(CFTypeRef obj)
  62         { ((_SecAssessment *)obj)->~_SecAssessment(); }
  63 };
  64
  65 typedef _SecAssessment SecAssessment;
  66
  67
  68 static const CFRuntimeClass assessmentClass = {
  69         0,                                                              // version
  70         "SecAssessment",                                // name
  71         NULL,                                                   // init
  72         NULL,                                                   // copy
  73         SecAssessment::finalize,                // finalize
  74         NULL,                                                   // equal
  75         NULL,                                                   // hash
  76         NULL,                                                   // formatting
  77         NULL                                                    // debug string
  78 };
  79
  80
  81 static dispatch_once_t assessmentOnce;
  82 CFTypeID assessmentType = _kCFRuntimeNotATypeID;
  83
  84 CFTypeID SecAssessmentGetTypeID()
  85 {
  86         dispatch_once(&assessmentOnce, ^void() {
  87                 if ((assessmentType = _CFRuntimeRegisterClass(&assessmentClass)) == _kCFRuntimeNotATypeID)
  88                         abort();
  89         });
  90         return assessmentType;
  91 }
  92
  93
  94 //
  95 // Common dictionary constants
  96 //
  97 CFStringRef kSecAssessmentContextKeyOperation = CFSTR("operation");
  98 CFStringRef kSecAssessmentOperationTypeExecute = CFSTR("operation:execute");
  99 CFStringRef kSecAssessmentOperationTypeInstall = CFSTR("operation:install");
 100 CFStringRef kSecAssessmentOperationTypeOpenDocument = CFSTR("operation:lsopen");
 101
 102
 103 //
 104 // Read-only in-process access to the policy database
 105 //
 106 class ReadPolicy : public PolicyDatabase {
 107 public:
 108         ReadPolicy() : PolicyDatabase(defaultDatabase) { }
 109 };
 110 ModuleNexus<ReadPolicy> gDatabase;
 111
 112
 113 //
 114 // An on-demand instance of the policy engine
 115 //
 116 ModuleNexus<PolicyEngine> gEngine;
 117
 118
 119 //
 120 // Policy evaluation ("assessment") operations
 121 //
 122 CFStringRef kSecAssessmentContextKeyUTI = CFSTR("context:uti");
 123
 124 CFStringRef kSecAssessmentContextKeyFeedback = CFSTR("context:feedback");
 125 CFStringRef kSecAssessmentFeedbackProgress = CFSTR("feedback:progress");
 126 CFStringRef kSecAssessmentFeedbackInfoCurrent = CFSTR("current");
 127 CFStringRef kSecAssessmentFeedbackInfoTotal = CFSTR("total");
 128
 129 CFStringRef kSecAssessmentContextKeyPrimarySignature = CFSTR("context:primary-signature");
 130
 131 CFStringRef kSecAssessmentAssessmentVerdict = CFSTR("assessment:verdict");
 132 CFStringRef kSecAssessmentAssessmentOriginator = CFSTR("assessment:originator");
 133 CFStringRef kSecAssessmentAssessmentAuthority = CFSTR("assessment:authority");
 134 CFStringRef kSecAssessmentAssessmentSource = CFSTR("assessment:authority:source");
 135 CFStringRef kSecAssessmentAssessmentAuthorityRow = CFSTR("assessment:authority:row");
 136 CFStringRef kSecAssessmentAssessmentAuthorityOverride = CFSTR("assessment:authority:override");
 137 CFStringRef kSecAssessmentAssessmentAuthorityOriginalVerdict = CFSTR("assessment:authority:verdict");
 138 CFStringRef kSecAssessmentAssessmentAuthorityFlags = CFSTR("assessment:authority:flags");
 139 CFStringRef kSecAssessmentAssessmentFromCache = CFSTR("assessment:authority:cached");
 140 CFStringRef kSecAssessmentAssessmentWeakSignature = CFSTR("assessment:authority:weak");
 141 CFStringRef kSecAssessmentAssessmentCodeSigningError = CFSTR("assessment:cserror");
 142 CFStringRef kSecAssessmentAssessmentNotarizationDate = CFSTR("assessment:notarization-date");
 143
 144 CFStringRef kDisabledOverride = CFSTR("security disabled");
 145
 146 SecAssessmentRef SecAssessmentCreate(CFURLRef path,
 147         SecAssessmentFlags flags,
 148         CFDictionaryRef context,
 149         CFErrorRef *errors)
 150 {
 151         BEGIN_CSAPI
 152
 153         if (flags & kSecAssessmentFlagAsynchronous)
 154                 MacOSError::throwMe(errSecCSUnimplemented);
 155
 156         AuthorityType type = typeFor(context, kAuthorityExecute);
 157         CFRef<CFMutableDictionaryRef> result = makeCFMutableDictionary();
 158
 159         SYSPOLICY_ASSESS_API(cfString(path).c_str(), int(type), flags);
 160
 161         try {
 162                 if (flags & kSecAssessmentFlagDirect) {
 163                         // ask the engine right here to do its thing
 164                         SYSPOLICY_ASSESS_LOCAL();
 165                         gEngine().evaluate(path, type, flags, context, result);
 166                 } else {
 167                         // relay the question to our daemon for consideration
 168                         SYSPOLICY_ASSESS_REMOTE();
 169                         xpcEngineAssess(path, flags, context, result);
 170                 }
 171         } catch (CommonError &error) {
 172                 switch (error.osStatus()) {
 173                 case CSSMERR_TP_CERT_REVOKED:
 174                         throw;
 175                 default:
 176                         if (!overrideAssessment(flags))
 177                                 throw;          // let it go as an error
 178                         break;
 179                 }
 180                 // record the error we would have returned
 181                 cfadd(result, "{%O=#F,'assessment:error'=%d}}", kSecAssessmentAssessmentVerdict, error.osStatus());
 182         } catch (...) {
 183                 // catch stray errors not conforming to the CommonError scheme
 184                 if (!overrideAssessment(flags))
 185                         throw;          // let it go as an error
 186                 cfadd(result, "{%O=#F}", kSecAssessmentAssessmentVerdict);
 187         }
 188
 189         return new SecAssessment(path, type, result.yield());
 190
 191         END_CSAPI_ERRORS1(NULL)
 192 }
 193
 194
 195 static void traceResult(CFURLRef target, MessageTrace &trace, std::string &sanitized)
 196 {
 197         static const char *interestingBundles[] = {
 198                 "UNBUNDLED",
 199                 "com.apple.",
 200                 "com.install4j.",
 201                 "com.MindVision.",
 202                 "com.yourcompany.",
 203
 204                 "com.adobe.flashplayer.installmanager",
 205                 "com.adobe.Installers.Setup",
 206                 "com.adobe.PDApp.setup",
 207                 "com.bittorrent.uTorrent",
 208                 "com.divx.divx6formacinstaller",
 209                 "com.getdropbox.dropbox",
 210                 "com.google.Chrome",
 211                 "com.Google.GoogleEarthPlugin.plugin",
 212                 "com.Google.GoogleEarthPlus",
 213                 "com.hp.Installer",
 214                 "com.macpaw.CleanMyMac",
 215                 "com.microsoft.SilverlightInstaller",
 216                 "com.paragon-software.filesystems.NTFS.pkg",
 217                 "com.RealNetworks.RealPlayer",
 218                 "com.skype.skype",
 219                 "it.alfanet.squared5.MPEGStreamclip",
 220                 "org.mozilla.firefox",
 221                 "org.videolan.vlc",
 222
 223                 NULL    // sentinel
 224         };
 225
 226         string identifier = "UNBUNDLED";
 227         string version = "UNKNOWN";
 228         if (CFRef<CFBundleRef> bundle = _CFBundleCreateUnique(NULL, target)) {
 229                 if (CFStringRef ident = CFBundleGetIdentifier(bundle))
 230                         identifier = cfString(ident);
 231                 if (CFStringRef vers = CFStringRef(CFBundleGetValueForInfoDictionaryKey(bundle, CFSTR("CFBundleShortVersionString"))))
 232                         version = cfString(vers);
 233         }
 234
 235         CFRef<CFURLRef> url = CFURLCopyAbsoluteURL(target);
 236         sanitized = cfString(url);
 237         string::size_type rslash = sanitized.rfind('/');
 238         if (rslash != string::npos)
 239                 sanitized = sanitized.substr(rslash+1);
 240         bool keepFilename = false;
 241         for (const char **pfx = interestingBundles; *pfx; pfx++) {
 242                 size_t pfxlen = strlen(*pfx);
 243                 if (identifier.compare(0, pfxlen, *pfx, pfxlen) == 0)
 244                         if (pfxlen == identifier.size() || (*pfx)[pfxlen-1] == '.') {
 245                                 keepFilename = true;
 246                                 break;
 247                         }
 248         }
 249         if (!keepFilename) {
 250                 string::size_type dot = sanitized.rfind('.');
 251                 if (dot != string::npos)
 252                         sanitized = sanitized.substr(dot);
 253                 else
 254                         sanitized = "(none)";
 255         }
 256
 257         trace.add("signature2", "bundle:%s", identifier.c_str());
 258         trace.add("signature3", "%s", sanitized.c_str());
 259         trace.add("signature5", "%s", version.c_str());
 260 }
 261
 262 static void traceAssessment(SecAssessment &assessment, AuthorityType type, CFDictionaryRef result)
 263 {
 264         if (CFDictionaryGetValue(result, CFSTR("assessment:remote")))
 265                 return;         // just traced in syspolicyd
 266
 267         string authority = "UNSPECIFIED";
 268         bool overridden = false;
 269         bool old_overridden = false;
 270         if (CFDictionaryRef authdict = CFDictionaryRef(CFDictionaryGetValue(result, kSecAssessmentAssessmentAuthority))) {
 271                 if (CFStringRef auth = CFStringRef(CFDictionaryGetValue(authdict, kSecAssessmentAssessmentSource)))
 272                         authority = cfString(auth);
 273                 else
 274                         authority = "no authority";
 275                 if (CFTypeRef override = CFDictionaryGetValue(authdict, kSecAssessmentAssessmentAuthorityOverride))
 276                         if (CFEqual(override, kDisabledOverride)) {
 277                                 old_overridden = true;
 278                                 if (CFDictionaryGetValue(authdict, kSecAssessmentAssessmentAuthorityOriginalVerdict) == kCFBooleanFalse)
 279                                         overridden = true;
 280                         }
 281         }
 282
 283         MessageTrace trace("com.apple.security.assessment.outcome2", NULL);
 284         std::string sanitized;
 285         traceResult(assessment.path, trace, sanitized);
 286         trace.add("signature4", "%d", type);
 287
 288         if (CFDictionaryGetValue(result, kSecAssessmentAssessmentVerdict) == kCFBooleanFalse) {
 289                 trace.add("signature", "denied:%s", authority.c_str());
 290                 trace.send("assessment denied for %s", sanitized.c_str());
 291         } else if (overridden) {                // would have failed except for override
 292                 trace.add("signature", "defeated:%s", authority.c_str());
 293                 trace.send("assessment denied for %s but overridden", sanitized.c_str());
 294         } else if (old_overridden) {    // would have succeeded even without override
 295                 trace.add("signature", "override:%s", authority.c_str());
 296                 trace.send("assessment granted for %s and overridden", sanitized.c_str());
 297         } else {
 298                 trace.add("signature", "granted:%s", authority.c_str());
 299                 trace.send("assessment granted for %s by %s", sanitized.c_str(), authority.c_str());
 300         }
 301 }
 302
 303 static void traceUpdate(CFTypeRef target, CFDictionaryRef context, CFDictionaryRef result)
 304 {
 305         // only trace add operations on URL targets
 306         if (target == NULL || CFGetTypeID(target) != CFURLGetTypeID())
 307                 return;
 308         CFStringRef edit = CFStringRef(CFDictionaryGetValue(context, kSecAssessmentContextKeyUpdate));
 309         if (!CFEqual(edit, kSecAssessmentUpdateOperationAdd))
 310                 return;
 311         MessageTrace trace("com.apple.security.assessment.update", NULL);
 312         std::string sanitized;
 313         traceResult(CFURLRef(target), trace, sanitized);
 314         trace.send("added rule for %s", sanitized.c_str());
 315 }
 316
 317
 318 //
 319 // At present, CopyResult simply retrieves the result already formed by Create.
 320 // In the future, this will be more lazy.
 321 //
 322 CFDictionaryRef SecAssessmentCopyResult(SecAssessmentRef assessmentRef,
 323         SecAssessmentFlags flags,
 324         CFErrorRef *errors)
 325 {
 326         BEGIN_CSAPI
 327
 328         SecAssessment &assessment = SecAssessment::ref(assessmentRef);
 329         CFCopyRef<CFDictionaryRef> result = assessment.result;
 330         if (overrideAssessment(flags)) {
 331                 // turn rejections into approvals, but note that we did that
 332                 CFTypeRef verdict = CFDictionaryGetValue(result, kSecAssessmentAssessmentVerdict);
 333                 if (verdict == kCFBooleanFalse) {
 334                         CFRef<CFMutableDictionaryRef> adulterated = makeCFMutableDictionary(result.get());
 335                         CFDictionarySetValue(adulterated, kSecAssessmentAssessmentVerdict, kCFBooleanTrue);
 336                         if (CFDictionaryRef authority = CFDictionaryRef(CFDictionaryGetValue(adulterated, kSecAssessmentAssessmentAuthority))) {
 337                                 CFRef<CFMutableDictionaryRef> authority2 = makeCFMutableDictionary(authority);
 338                                 CFDictionarySetValue(authority2, kSecAssessmentAssessmentAuthorityOverride, kDisabledOverride);
 339                                 CFDictionarySetValue(authority2, kSecAssessmentAssessmentAuthorityOriginalVerdict, verdict);
 340                                 CFDictionarySetValue(adulterated, kSecAssessmentAssessmentAuthority, authority2);
 341                         } else {
 342                                 cfadd(adulterated, "{%O={%O=%O}}",
 343                                         kSecAssessmentAssessmentAuthority, kSecAssessmentAssessmentAuthorityOverride, kDisabledOverride);
 344                         }
 345                         result = adulterated.get();
 346                 }
 347         }
 348         traceAssessment(assessment, assessment.type, result);
 349         return result.yield();
 350
 351         END_CSAPI_ERRORS1(NULL)
 352 }
 353
 354
 355 //
 356 // Policy editing operations.
 357 // These all make permanent changes to the system-wide authority records.
 358 //
 359 CFStringRef kSecAssessmentContextKeyUpdate = CFSTR("update");
 360 CFStringRef kSecAssessmentUpdateOperationAdd = CFSTR("update:add");
 361 CFStringRef kSecAssessmentUpdateOperationRemove = CFSTR("update:remove");
 362 CFStringRef kSecAssessmentUpdateOperationEnable = CFSTR("update:enable");
 363 CFStringRef kSecAssessmentUpdateOperationDisable = CFSTR("update:disable");
 364 CFStringRef kSecAssessmentUpdateOperationFind = CFSTR("update:find");
 365
 366 CFStringRef kSecAssessmentUpdateKeyAuthorization = CFSTR("update:authorization");
 367 CFStringRef kSecAssessmentUpdateKeyPriority = CFSTR("update:priority");
 368 CFStringRef kSecAssessmentUpdateKeyLabel = CFSTR("update:label");
 369 CFStringRef kSecAssessmentUpdateKeyExpires = CFSTR("update:expires");
 370 CFStringRef kSecAssessmentUpdateKeyAllow = CFSTR("update:allow");
 371 CFStringRef kSecAssessmentUpdateKeyRemarks = CFSTR("update:remarks");
 372
 373 CFStringRef kSecAssessmentUpdateKeyRow = CFSTR("update:row");
 374 CFStringRef kSecAssessmentUpdateKeyCount = CFSTR("update:count");
 375 CFStringRef kSecAssessmentUpdateKeyFound = CFSTR("update:found");
 376
 377 CFStringRef kSecAssessmentRuleKeyID = CFSTR("rule:id");
 378 CFStringRef kSecAssessmentRuleKeyPriority = CFSTR("rule:priority");
 379 CFStringRef kSecAssessmentRuleKeyAllow = CFSTR("rule:allow");
 380 CFStringRef kSecAssessmentRuleKeyLabel = CFSTR("rule:label");
 381 CFStringRef kSecAssessmentRuleKeyRemarks = CFSTR("rule:remarks");
 382 CFStringRef kSecAssessmentRuleKeyRequirement = CFSTR("rule:requirement");
 383 CFStringRef kSecAssessmentRuleKeyType = CFSTR("rule:type");
 384 CFStringRef kSecAssessmentRuleKeyExpires = CFSTR("rule:expires");
 385 CFStringRef kSecAssessmentRuleKeyDisabled = CFSTR("rule:disabled");
 386 CFStringRef kSecAssessmentRuleKeyBookmark = CFSTR("rule:bookmark");
 387
 388
 389 Boolean SecAssessmentUpdate(CFTypeRef target,
 390         SecAssessmentFlags flags,
 391         CFDictionaryRef context,
 392         CFErrorRef *errors)
 393 {
 394         if (CFDictionaryRef outcome = SecAssessmentCopyUpdate(target, flags, context, errors)) {
 395                 CFRelease(outcome);
 396                 return true;
 397         } else {
 398                 return false;
 399         }
 400 }
 401
 402 CFDictionaryRef SecAssessmentCopyUpdate(CFTypeRef target,
 403         SecAssessmentFlags flags,
 404         CFDictionaryRef context,
 405         CFErrorRef *errors)
 406 {
 407         BEGIN_CSAPI
 408
 409         CFDictionary ctx(context, errSecCSInvalidAttributeValues);
 410         CFRef<CFDictionaryRef> result;
 411
 412         // make context exist and writable
 413         CFRef<CFMutableDictionaryRef> mcontext = context ? makeCFMutableDictionary(context) : makeCFMutableDictionary();
 414
 415         if (CFDictionaryGetValue(mcontext, kSecAssessmentUpdateKeyAuthorization) == NULL) {
 416                 // no authorization passed in. Make an empty one in this context
 417                 AuthorizationRef authorization;
 418                 MacOSError::check(AuthorizationCreate(NULL, NULL, kAuthorizationFlagDefaults, &authorization));
 419                 AuthorizationExternalForm extform;
 420                 MacOSError::check(AuthorizationMakeExternalForm(authorization, &extform));
 421                 CFDictionaryAddValue(mcontext, kSecAssessmentUpdateKeyAuthorization, CFTempData(&extform, sizeof(extform)));
 422                 if (!(flags & kSecAssessmentFlagDirect))
 423                         AuthorizationFree(authorization, kAuthorizationFlagDefaults);
 424         }
 425
 426         if (flags & kSecAssessmentFlagDirect) {
 427                 // ask the engine right here to do its thing
 428                 result = gEngine().update(target, flags, ctx);
 429         } else {
 430                 // relay the question to our daemon for consideration
 431                 result = xpcEngineUpdate(target, flags, ctx);
 432         }
 433
 434         traceUpdate(target, context, result);
 435         return result.yield();
 436
 437         END_CSAPI_ERRORS1(NULL)
 438 }
 439
 440 static Boolean
 441 updateAuthority(const char *authority, bool enable, CFErrorRef *errors)
 442 {
 443         CFStringRef updateValue = enable ? kSecAssessmentUpdateOperationEnable : kSecAssessmentUpdateOperationDisable;
 444         CFTemp<CFDictionaryRef> ctx("{%O=%s, %O=%O}", kSecAssessmentUpdateKeyLabel, authority, kSecAssessmentContextKeyUpdate, updateValue);
 445         return SecAssessmentUpdate(NULL, kSecCSDefaultFlags, ctx, errors);
 446 }
 447
 448
 449 //
 450 // The fcntl of System Policies.
 451 // For those very special requests.
 452 //
 453 Boolean SecAssessmentControl(CFStringRef control, void *arguments, CFErrorRef *errors)
 454 {
 455         BEGIN_CSAPI
 456
 457         if (CFEqual(control, CFSTR("ui-enable"))) {
 458                 setAssessment(true);
 459                 MessageTrace trace("com.apple.security.assessment.state", "enable");
 460                 trace.send("enable assessment outcomes");
 461                 return true;
 462         } else if (CFEqual(control, CFSTR("ui-disable"))) {
 463                 setAssessment(false);
 464                 MessageTrace trace("com.apple.security.assessment.state", "disable");
 465                 trace.send("disable assessment outcomes");
 466                 return true;
 467         } else if (CFEqual(control, CFSTR("ui-status"))) {
 468                 CFBooleanRef &result = *(CFBooleanRef*)(arguments);
 469                 if (overrideAssessment())
 470                         result = kCFBooleanFalse;
 471                 else
 472                         result = kCFBooleanTrue;
 473                 return true;
 474         } else if (CFEqual(control, CFSTR("ui-enable-devid"))) {
 475                 updateAuthority("Developer ID", true, errors);
 476                 updateAuthority("Notarized Developer ID", true, errors);
 477                 MessageTrace trace("com.apple.security.assessment.state", "enable-devid");
 478                 trace.send("enable Developer ID approval");
 479                 return true;
 480         } else if (CFEqual(control, CFSTR("ui-disable-devid"))) {
 481                 updateAuthority("Developer ID", false, errors);
 482                 MessageTrace trace("com.apple.security.assessment.state", "disable-devid");
 483                 trace.send("disable Developer ID approval");
 484                 return true;
 485     } else if (CFEqual(control, CFSTR("ui-get-devid"))) {
 486         xpcEngineCheckDevID((CFBooleanRef*)(arguments));
 487         return true;
 488     } else if (CFEqual(control, CFSTR("ui-get-devid-local"))) {
 489                 CFBooleanRef &result = *(CFBooleanRef*)(arguments);
 490                 if (gEngine().value<int>("SELECT disabled FROM authority WHERE label = 'Developer ID';", true))
 491                         result = kCFBooleanFalse;
 492                 else
 493                         result = kCFBooleanTrue;
 494                 return true;
 495         } else if (CFEqual(control, CFSTR("ui-enable-notarized"))) {
 496                 updateAuthority("Notarized Developer ID", true, errors);
 497                 updateAuthority("Unnotarized Developer ID", true, errors);
 498                 MessageTrace trace("com.apple.security.assessment.state", "enable-notarized");
 499                 trace.send("enable Notarized Developer ID approval");
 500                 return true;
 501         } else if (CFEqual(control, CFSTR("ui-disable-notarized"))) {
 502                 updateAuthority("Notarized Developer ID", false, errors);
 503                 updateAuthority("Unnotarized Developer ID", false, errors);
 504                 MessageTrace trace("com.apple.security.assessment.state", "disable-notarized");
 505                 trace.send("disable Notarized Developer ID approval");
 506                 return true;
 507         } else if (CFEqual(control, CFSTR("ui-get-notarized"))) {
 508                 xpcEngineCheckNotarized((CFBooleanRef*)(arguments));
 509                 return true;
 510         } else if (CFEqual(control, CFSTR("ui-get-notarized-local"))) {
 511                 CFBooleanRef &result = *(CFBooleanRef*)(arguments);
 512                 if (gEngine().value<int>("SELECT disabled FROM authority WHERE label = 'Notarized Developer ID';", true))
 513                         result = kCFBooleanFalse;
 514                 else
 515                         result = kCFBooleanTrue;
 516                 return true;
 517         } else if (CFEqual(control, CFSTR("ui-record-reject"))) {
 518                 // send this through syspolicyd for update validation
 519                 xpcEngineRecord(CFDictionaryRef(arguments));
 520                 return true;
 521         } else if (CFEqual(control, CFSTR("ui-record-reject-local"))) {
 522                 // perform the local operation (requires root)
 523                 gEngine().recordFailure(CFDictionaryRef(arguments));
 524                 return true;
 525         } else if (CFEqual(control, CFSTR("ui-recall-reject"))) {
 526                 // no special privileges required for this, so read directly
 527                 CFDictionaryRef &result = *(CFDictionaryRef*)(arguments);
 528                 CFRef<CFDataRef> infoData = cfLoadFile(lastRejectFile);
 529                 if (infoData)
 530                         result = makeCFDictionaryFrom(infoData);
 531                 else
 532                         result = NULL;
 533                 return true;
 534         } else if (CFEqual(control, CFSTR("rearm-status"))) {
 535                 CFTimeInterval &result = *(CFTimeInterval*)(arguments);
 536                 if (!queryRearmTimer(result))
 537                         result = 0;
 538                 return true;
 539         } else
 540                 MacOSError::throwMe(errSecCSInvalidAttributeValues);
 541
 542         END_CSAPI_ERRORS1(false)
 543 }
 544
 545 Boolean SecAssessmentTicketRegister(CFDataRef ticketData, CFErrorRef *errors)
 546 {
 547         BEGIN_CSAPI
 548
 549         xpcEngineTicketRegister(ticketData);
 550         return true;
 551
 552         END_CSAPI_ERRORS1(false)
 553 }
 554
 555 Boolean SecAssessmentRegisterPackageTicket(CFURLRef packageURL, CFErrorRef* errors)
 556 {
 557         BEGIN_CSAPI
 558
 559         string path = cfString(packageURL);
 560         Xar xar(path.c_str());
 561
 562         if (!xar) {
 563                 MacOSError::throwMe(errSecParam);
 564         }
 565
 566         xar.registerStapledNotarization();
 567         return true;
 568
 569         END_CSAPI_ERRORS1(false)
 570 }
 571
 572 Boolean SecAssessmentTicketLookup(CFDataRef hash, SecCSDigestAlgorithm hashType, SecAssessmentTicketFlags flags, double *date, CFErrorRef *errors)
 573 {
 574         BEGIN_CSAPI
 575
 576         xpcEngineTicketLookup(hash, hashType, flags, date);
 577         return true;
 578
 579         END_CSAPI_ERRORS1(false)
 580 }
 581
 582 Boolean SecAssessmentLegacyCheck(CFDataRef hash, SecCSDigestAlgorithm hashType, CFStringRef teamID, CFErrorRef *errors)
 583 {
 584         BEGIN_CSAPI
 585
 586         xpcEngineLegacyCheck(hash, hashType, teamID);
 587         return true;
 588
 589         END_CSAPI_ERRORS1(false)
 590 }
 591