Security-57031.1.35.tar.gz

[apple/security.git] / Security / libsecurity_cdsa_utilities / lib / aclsubject.cpp

diff --git a/Security/libsecurity_cdsa_utilities/lib/aclsubject.cpp b/Security/libsecurity_cdsa_utilities/lib/aclsubject.cpp
new file mode 100644 (file)
index 0000000..70ec05e
--- /dev/null
+++ b/Security/libsecurity_cdsa_utilities/lib/aclsubject.cpp
@@ -0,0 +1,160 @@
+/*
+ * Copyright (c) 2000-2004,2006,2011,2014 Apple Inc. All Rights Reserved.
+ * 
+ * @APPLE_LICENSE_HEADER_START@
+ * 
+ * This file contains Original Code and/or Modifications of Original Code
+ * as defined in and that are subject to the Apple Public Source License
+ * Version 2.0 (the 'License'). You may not use this file except in
+ * compliance with the License. Please obtain a copy of the License at
+ * http://www.opensource.apple.com/apsl/ and read it before using this
+ * file.
+ * 
+ * The Original Code and all software distributed under the License are
+ * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER
+ * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES,
+ * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY,
+ * FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT.
+ * Please see the License for the specific language governing rights and
+ * limitations under the License.
+ * 
+ * @APPLE_LICENSE_HEADER_END@
+ */
+
+
+//
+// aclsubject - abstract ACL subject implementation
+//
+#include <security_cdsa_utilities/cssmacl.h>
+#include <security_cdsa_utilities/cssmbridge.h>
+#include <security_utilities/endian.h>
+#include <security_utilities/debugging.h>
+#include <algorithm>
+#include <cstdarg>
+
+
+//
+// Validation contexts
+//
+AclValidationContext::~AclValidationContext()
+{ /* virtual */ }
+
+
+void AclValidationContext::init(ObjectAcl *acl, AclSubject *subject)
+{
+       mAcl = acl;
+       mSubject = subject;
+}
+
+
+const char *AclValidationContext::credTag() const
+{
+       return mCred ? mCred->tag() : NULL;
+}
+
+std::string AclValidationContext::s_credTag() const
+{
+       const char *s = this->credTag();
+       return s ? s : "";
+}
+
+const char *AclValidationContext::entryTag() const
+{
+       return mEntryTag;
+}
+
+void AclValidationContext::entryTag(const char *tag)
+{
+       mEntryTag = (tag && tag[0]) ? tag : NULL;
+}
+
+void AclValidationContext::entryTag(const std::string &tag)
+{
+       mEntryTag = tag.empty() ? NULL : tag.c_str();
+}
+
+
+//
+// Common (basic) features of AclSubjects
+//
+AclSubject::AclSubject(uint32 type, Version v /* = 0 */)
+       : mType(type), mVersion(v)
+{
+       assert(!(type & versionMask));
+}
+
+AclSubject::~AclSubject()
+{ }
+
+AclValidationEnvironment::~AclValidationEnvironment()
+{ }
+
+Adornable &AclValidationEnvironment::store(const AclSubject *subject)
+{
+       CssmError::throwMe(CSSM_ERRCODE_ACL_SUBJECT_TYPE_NOT_SUPPORTED);
+}
+
+void AclSubject::exportBlob(Writer::Counter &, Writer::Counter &)
+{ }
+
+void AclSubject::exportBlob(Writer &, Writer &)
+{ }
+
+void AclSubject::importBlob(Reader &, Reader &)
+{ }
+
+void AclSubject::reset()
+{ }
+
+AclSubject::Maker::~Maker()
+{
+}
+
+
+//
+// A SimpleAclSubject accepts only a single type of sample, validates
+// samples independently, and makes no use of certificates.
+//
+bool SimpleAclSubject::validate(const AclValidationContext &ctx) const
+{
+    for (uint32 n = 0; n < ctx.count(); n++) {
+        const TypedList &sample = ctx[n];
+        if (!sample.isProper())
+            CssmError::throwMe(CSSM_ERRCODE_INVALID_SAMPLE_VALUE);
+        if (sample.type() == type() && validate(ctx, sample)) {
+                       ctx.matched(ctx[n]);
+            return true;       // matched this sample; validation successful
+               }
+    }
+    return false;
+}
+
+
+//
+// AclSubjects always have a (virtual) dump method.
+// It's empty unless DEBUGDUMP is enabled.
+//
+void AclSubject::debugDump() const
+{
+#if defined(DEBUGDUMP)
+       switch (type()) {
+       case CSSM_ACL_SUBJECT_TYPE_ANY:
+               Debug::dump("ANY");
+               break;
+       default:
+               Debug::dump("subject type=%d", type());
+               break;
+       }
+#endif //DEBUGDUMP
+}
+
+#if defined(DEBUGDUMP)
+
+void AclSubject::dump(const char *title) const
+{
+       Debug::dump(" ** %s ", title);
+       this->debugDump();
+       Debug::dump("\n");
+}
+
+#endif //DEBUGDUMP