securityd/src/tokenaccess.cpp

   1 /*
   2  * Copyright (c) 2004,2006 Apple Computer, Inc. All Rights Reserved.
   3  *
   4  * @APPLE_LICENSE_HEADER_START@
   5  *
   6  * This file contains Original Code and/or Modifications of Original Code
   7  * as defined in and that are subject to the Apple Public Source License
   8  * Version 2.0 (the 'License'). You may not use this file except in
   9  * compliance with the License. Please obtain a copy of the License at
  10  * http://www.opensource.apple.com/apsl/ and read it before using this
  11  * file.
  12  *
  13  * The Original Code and all software distributed under the License are
  14  * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER
  15  * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES,
  16  * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY,
  17  * FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT.
  18  * Please see the License for the specific language governing rights and
  19  * limitations under the License.
  20  *
  21  * @APPLE_LICENSE_HEADER_END@
  22  */
  23
  24
  25 //
  26 // tokenaccess - access management to a TokenDatabase's Token's TokenDaemon's tokend
  27 //
  28 #include "tokenaccess.h"
  29
  30
  31 //
  32 // Process an exception thrown (presumably) by a TokenDaemon interface call.
  33 //
  34 void Access::operator () (const CssmError &err)
  35 {
  36         if (++mIteration > 2) {
  37                 secinfo("tokendb", "retry failed; aborting operation");
  38                 throw;
  39         }
  40
  41         //@@@ hack until tokend returns RESET
  42         if (err.error == -1) {
  43                 secinfo("tokendb", "TEMP HACK (error -1) action - reset and retry");
  44                 token.resetAcls();
  45                 return;
  46         }
  47
  48         if (CSSM_ERR_IS_CONVERTIBLE(err.error))
  49                 switch (CSSM_ERRCODE(err.error)) {
  50                 case CSSM_ERRCODE_OPERATION_AUTH_DENIED:
  51                 case CSSM_ERRCODE_OBJECT_USE_AUTH_DENIED:
  52                         // @@@ do something more focused here, but for now...
  53                         secinfo("tokendb", "tokend denies auth; we're punting for now");
  54                         throw;
  55                 case CSSM_ERRCODE_DEVICE_RESET:
  56                         secinfo("tokendb", "tokend signals reset; clearing and retrying");
  57                         token.resetAcls();
  58                         return; // induce retry
  59                 }
  60         // all others are non-recoverable
  61         secinfo("tokendb", "non-recoverable error in Access(): %d", err.error);
  62         throw;
  63 }