2 * Copyright (c) 2000-2009 Apple Inc. All Rights Reserved.
4 * @APPLE_LICENSE_HEADER_START@
6 * This file contains Original Code and/or Modifications of Original Code
7 * as defined in and that are subject to the Apple Public Source License
8 * Version 2.0 (the 'License'). You may not use this file except in
9 * compliance with the License. Please obtain a copy of the License at
10 * http://www.opensource.apple.com/apsl/ and read it before using this
13 * The Original Code and all software distributed under the License are
14 * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER
15 * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES,
16 * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY,
17 * FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT.
18 * Please see the License for the specific language governing rights and
19 * limitations under the License.
21 * @APPLE_LICENSE_HEADER_END@
26 // process - track a single client process and its belongings
31 #include "structure.h"
33 #include <security_utilities/refcount.h>
34 #include <security_utilities/ccaudit.h>
35 #include <security_utilities/vproc++.h>
39 #include "notifications.h"
42 using MachPlusPlus::Port
;
43 using MachPlusPlus::TaskPort
;
47 class AuthorizationToken
;
51 // A Process object represents a UNIX process (and associated Mach Task) that has
52 // had contact with us and may have some state associated with it. It primarily tracks
53 // the process nature of the client. Individual threads in the client are tracked by
54 // Connection objects.
56 // Code Signing-style Guest identities are managed in two of our mix-ins. The two play
57 // distinct but related roles:
58 // * CodeSigningHost manages the public identity of guests within the client.
59 // In this relationship, securityd provides registry and proxy services to the client.
60 // * ClientIdentification tracks the identity of guests in the client *as securityd clients*.
61 // It is concerned with which guest is asking for securityd services, and whether this
63 // Often, the two form a loop: ClientIdentification uses CodeSigningHost to determine
64 // the guest client identity, but it does so through public (Mach IPC) interfaces, because
65 // clients may implement their own proxy (though currently not registry) services.
66 // We could short-circuit the IPC leg in those cases where securityd serves itself,
67 // but there's no evidence (yet) that this is worth the trouble.
69 class Process
: public PerProcess
,
70 public CodeSigningHost
,
71 public ClientIdentification
,
72 private VProc::Transaction
{
74 Process(TaskPort tPort
, const ClientSetupInfo
*info
, const CommonCriteria::AuditToken
&audit
);
77 void reset(TaskPort tPort
, const ClientSetupInfo
*info
, const CommonCriteria::AuditToken
&audit
);
79 uid_t
uid() const { return mUid
; }
80 gid_t
gid() const { return mGid
; }
81 pid_t
pid() const { return mPid
; }
82 Security::CommonCriteria::AuditToken
const &audit_token() const { return mAudit
; }
83 TaskPort
taskPort() const { return mTaskPort
; }
84 bool byteFlipped() const { return mByteFlipped
; }
86 using PerProcess::kill
;
89 void changeSession(Session::SessionId sessionId
);
91 Session
& session() const;
92 void checkSession(const audit_token_t
&auditToken
);
94 LocalDatabase
&localStore();
95 Key
*makeTemporaryKey(const CssmKey
&key
, CSSM_KEYATTR_FLAGS moreAttributes
,
96 const AclEntryPrototype
*owner
);
98 // aclSequence is taken to serialize ACL validations to pick up mutual changes
101 // Dumping is buggy and only hurts debugging. It's dead Jim.
102 //IFDUMP(void dumpNode());
105 void setup(const ClientSetupInfo
*info
);
108 // peer state: established during connection startup; fixed thereafter
109 TaskPort mTaskPort
; // task port
110 bool mByteFlipped
; // client's byte order is reverse of ours
111 pid_t mPid
; // process id
112 uid_t mUid
; // UNIX uid credential
113 gid_t mGid
; // primary UNIX gid credential
114 Security::CommonCriteria::AuditToken
const mAudit
; // audit token
116 // canonical local (transient) key store
117 RefPointer
<LocalDatabase
> mLocalStore
;
122 // Convenience comparison
124 inline bool operator == (const Process
&p1
, const Process
&p2
)