Security-57336.1.9.tar.gz

[apple/security.git] / OSX / libsecurity_cdsa_client / lib / keychainacl.cpp

diff --git a/OSX/libsecurity_cdsa_client/lib/keychainacl.cpp b/OSX/libsecurity_cdsa_client/lib/keychainacl.cpp
new file mode 100644 (file)
index 0000000..271774c
--- /dev/null
+++ b/OSX/libsecurity_cdsa_client/lib/keychainacl.cpp
@@ -0,0 +1,133 @@
+/*
+ * Copyright (c) 2000-2001,2011,2014 Apple Inc. All Rights Reserved.
+ * 
+ * The contents of this file constitute Original Code as defined in and are
+ * subject to the Apple Public Source License Version 1.2 (the 'License').
+ * You may not use this file except in compliance with the License. Please obtain
+ * a copy of the License at http://www.apple.com/publicsource and read it before
+ * using this file.
+ * 
+ * This Original Code and all software distributed under the License are
+ * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESS
+ * OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES, INCLUDING WITHOUT
+ * LIMITATION, ANY WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR
+ * PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT. Please see the License for the
+ * specific language governing rights and limitations under the License.
+ */
+
+
+//
+// keychainacl - Keychain-related ACL and credential forms
+//
+#ifdef __MWERKS__
+#define _CPP_KEYCHAINACL
+#endif
+
+#include "keychainacl.h"
+#include <security_cdsa_utilities/cssmwalkers.h>
+
+using namespace CssmClient;
+
+
+//
+// Construct the factory.
+// @@@ Leaks.
+//
+KeychainAclFactory::KeychainAclFactory(Allocator &alloc)
+: allocator(alloc), nullCred(alloc, 1), kcCred(alloc, 2), kcUnlockCred(alloc, 1)
+{
+       // the credential objects self-initialize to empty
+       nullCred.sample(0) = TypedList(alloc, CSSM_SAMPLE_TYPE_THRESHOLD);
+       
+       kcCred.sample(0) = TypedList(alloc, CSSM_SAMPLE_TYPE_KEYCHAIN_PROMPT);
+       kcCred.sample(1) = TypedList(alloc, CSSM_SAMPLE_TYPE_THRESHOLD,
+               new(alloc) ListElement(TypedList(alloc, CSSM_SAMPLE_TYPE_KEYCHAIN_PROMPT)));
+
+       // @@@ This leaks a ListElement(CSSM_SAMPLE_TYPE_KEYCHAIN_PROMPT)
+       kcUnlockCred.sample(0) = TypedList(alloc, CSSM_SAMPLE_TYPE_KEYCHAIN_LOCK,
+                                                                         new(alloc) ListElement(CSSM_SAMPLE_TYPE_KEYCHAIN_PROMPT));
+}
+
+KeychainAclFactory::~KeychainAclFactory()
+{
+}
+
+
+//
+// Produce credentials.
+// These are constants that don't need to be allocated per use.
+//
+const AccessCredentials *KeychainAclFactory::nullCredentials()
+{
+       return &nullCred;
+}
+
+const AccessCredentials *KeychainAclFactory::keychainPromptCredentials()
+{
+       return &kcCred;
+}
+
+const AccessCredentials *KeychainAclFactory::keychainPromptUnlockCredentials()
+{
+       return &kcUnlockCred;
+}
+
+const AutoCredentials *KeychainAclFactory::passwordChangeCredentials(const CssmData &password)
+{
+       AutoCredentials *cred = new AutoCredentials(allocator, 1);
+       // @@@ This leaks a ListElement(CSSM_SAMPLE_TYPE_KEYCHAIN_PROMPT) and ListElement(password)
+       cred->sample(0) = TypedList(allocator, CSSM_SAMPLE_TYPE_KEYCHAIN_CHANGE_LOCK,
+                                                               new(allocator) ListElement(CSSM_SAMPLE_TYPE_PASSWORD),
+                                                               new(allocator) ListElement(password));
+       return cred;
+}
+
+const AutoCredentials *KeychainAclFactory::passwordUnlockCredentials(const CssmData &password)
+{
+       AutoCredentials *cred = new AutoCredentials(allocator, 1);
+       // @@@ This leaks a ListElement(CSSM_SAMPLE_TYPE_KEYCHAIN_PROMPT) and ListElement(password)
+       cred->sample(0) = TypedList(allocator, CSSM_SAMPLE_TYPE_KEYCHAIN_LOCK,
+                                                               new(allocator) ListElement(CSSM_SAMPLE_TYPE_PASSWORD),
+                                                               new(allocator) ListElement(password));
+       return cred;
+}
+
+
+//
+// 
+AclEntryInput *KeychainAclFactory::keychainPromptOwner(const CssmData &description)
+{
+       // @@@ Make sure this works for a NULL description
+       AclEntryPrototype proto(TypedList(allocator, CSSM_ACL_SUBJECT_TYPE_KEYCHAIN_PROMPT,
+               new(allocator) ListElement(allocator, description)));
+       return new(allocator) AclEntryInput(proto);
+}
+
+AclEntryInput *KeychainAclFactory::anyOwner()
+{
+       AclEntryPrototype proto(TypedList(allocator, CSSM_ACL_SUBJECT_TYPE_ANY));
+       return new(allocator) AclEntryInput(proto);
+}
+
+void KeychainAclFactory::release(AclEntryInput *input)
+{
+       DataWalkers::chunkFree(input, allocator);
+}
+
+
+//
+// ACL editing
+//
+void KeychainAclFactory::comment(TypedList &subject)
+{
+       subject.insert(new(allocator) ListElement(CSSM_ACL_SUBJECT_TYPE_COMMENT),
+               subject.first());
+}
+
+void KeychainAclFactory::uncomment(TypedList &subject)
+{
+       ListElement *first = subject.first();
+       assert(*first == CSSM_ACL_SUBJECT_TYPE_COMMENT);
+       subject -= first;
+       destroy(first, allocator);
+}