securityd/src/acl_partition.h

   1 /*
   2  * Copyright (c) 2015 Apple Inc. All Rights Reserved.
   3  *
   4  * @APPLE_LICENSE_HEADER_START@
   5  *
   6  * This file contains Original Code and/or Modifications of Original Code
   7  * as defined in and that are subject to the Apple Public Source License
   8  * Version 2.0 (the 'License'). You may not use this file except in
   9  * compliance with the License. Please obtain a copy of the License at
  10  * http://www.opensource.apple.com/apsl/ and read it before using this
  11  * file.
  12  *
  13  * The Original Code and all software distributed under the License are
  14  * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER
  15  * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES,
  16  * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY,
  17  * FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT.
  18  * Please see the License for the specific language governing rights and
  19  * limitations under the License.
  20  *
  21  * @APPLE_LICENSE_HEADER_END@
  22  */
  23
  24
  25 //
  26 // acl_partition - "ignore" ACL subject type
  27 //
  28 // A pseudo-ACL that stores partition identifier data.
  29 //
  30 // A PartitionAclSubject always fails to verify.
  31 //
  32 #ifndef _ACL_PARTITION
  33 #define _ACL_PARTITION
  34
  35 #include <security_cdsa_utilities/cssmacl.h>
  36 #include <security_utilities/cfutilities.h>
  37
  38
  39 namespace Security
  40 {
  41
  42 //
  43 // The ANY subject simply matches everything. No sweat.
  44 //
  45 class PartitionAclSubject : public AclSubject {
  46 public:
  47         PartitionAclSubject()
  48         : AclSubject(CSSM_ACL_SUBJECT_TYPE_PARTITION), payload(Allocator::standard()) { }
  49         PartitionAclSubject(Allocator& alloc, const CssmData &data)
  50         : AclSubject(CSSM_ACL_SUBJECT_TYPE_PARTITION), payload(alloc, data) { }
  51
  52 public:
  53         CssmAutoData payload;
  54         CFDictionaryRef createDictionaryPayload() const;
  55         void setDictionaryPayload(Allocator& alloc, CFDictionaryRef dict);
  56
  57 public:
  58         bool validates(const AclValidationContext &ctx) const;
  59         CssmList toList(Allocator &alloc) const;
  60
  61     void exportBlob(Writer::Counter &pub, Writer::Counter &priv);
  62     void exportBlob(Writer &pub, Writer &priv);
  63
  64         class Maker : public AclSubject::Maker {
  65         public:
  66                 Maker() : AclSubject::Maker(CSSM_ACL_SUBJECT_TYPE_PARTITION) { }
  67                 PartitionAclSubject *make(const TypedList &list) const;
  68         PartitionAclSubject *make(Version, Reader &pub, Reader &priv) const;
  69         };
  70 };
  71
  72 } // end namespace Security
  73
  74
  75 #endif //_ACL_PARTITION