X-Git-Url: https://git.saurik.com/apple/security.git/blobdiff_plain/5dd5f9ec28f304ca377c42fd7f711d6cf12b90e1..5c19dc3ae3bd8e40a9c028b0deddd50ff337692c:/OSX/libsecurity_cdsa_client/lib/keychainacl.cpp

diff --git a/OSX/libsecurity_cdsa_client/lib/keychainacl.cpp b/OSX/libsecurity_cdsa_client/lib/keychainacl.cpp
new file mode 100644
index 00000000..271774c9
--- /dev/null
+++ b/OSX/libsecurity_cdsa_client/lib/keychainacl.cpp
@@ -0,0 +1,133 @@
+/*
+ * Copyright (c) 2000-2001,2011,2014 Apple Inc. All Rights Reserved.
+ * 
+ * The contents of this file constitute Original Code as defined in and are
+ * subject to the Apple Public Source License Version 1.2 (the 'License').
+ * You may not use this file except in compliance with the License. Please obtain
+ * a copy of the License at http://www.apple.com/publicsource and read it before
+ * using this file.
+ * 
+ * This Original Code and all software distributed under the License are
+ * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESS
+ * OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES, INCLUDING WITHOUT
+ * LIMITATION, ANY WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR
+ * PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT. Please see the License for the
+ * specific language governing rights and limitations under the License.
+ */
+
+
+//
+// keychainacl - Keychain-related ACL and credential forms
+//
+#ifdef __MWERKS__
+#define _CPP_KEYCHAINACL
+#endif
+
+#include "keychainacl.h"
+#include <security_cdsa_utilities/cssmwalkers.h>
+
+using namespace CssmClient;
+
+
+//
+// Construct the factory.
+// @@@ Leaks.
+//
+KeychainAclFactory::KeychainAclFactory(Allocator &alloc)
+: allocator(alloc), nullCred(alloc, 1), kcCred(alloc, 2), kcUnlockCred(alloc, 1)
+{
+	// the credential objects self-initialize to empty
+	nullCred.sample(0) = TypedList(alloc, CSSM_SAMPLE_TYPE_THRESHOLD);
+	
+	kcCred.sample(0) = TypedList(alloc, CSSM_SAMPLE_TYPE_KEYCHAIN_PROMPT);
+	kcCred.sample(1) = TypedList(alloc, CSSM_SAMPLE_TYPE_THRESHOLD,
+		new(alloc) ListElement(TypedList(alloc, CSSM_SAMPLE_TYPE_KEYCHAIN_PROMPT)));
+
+	// @@@ This leaks a ListElement(CSSM_SAMPLE_TYPE_KEYCHAIN_PROMPT)
+	kcUnlockCred.sample(0) = TypedList(alloc, CSSM_SAMPLE_TYPE_KEYCHAIN_LOCK,
+									  new(alloc) ListElement(CSSM_SAMPLE_TYPE_KEYCHAIN_PROMPT));
+}
+
+KeychainAclFactory::~KeychainAclFactory()
+{
+}
+
+
+//
+// Produce credentials.
+// These are constants that don't need to be allocated per use.
+//
+const AccessCredentials *KeychainAclFactory::nullCredentials()
+{
+	return &nullCred;
+}
+
+const AccessCredentials *KeychainAclFactory::keychainPromptCredentials()
+{
+	return &kcCred;
+}
+
+const AccessCredentials *KeychainAclFactory::keychainPromptUnlockCredentials()
+{
+	return &kcUnlockCred;
+}
+
+const AutoCredentials *KeychainAclFactory::passwordChangeCredentials(const CssmData &password)
+{
+	AutoCredentials *cred = new AutoCredentials(allocator, 1);
+	// @@@ This leaks a ListElement(CSSM_SAMPLE_TYPE_KEYCHAIN_PROMPT) and ListElement(password)
+	cred->sample(0) = TypedList(allocator, CSSM_SAMPLE_TYPE_KEYCHAIN_CHANGE_LOCK,
+								new(allocator) ListElement(CSSM_SAMPLE_TYPE_PASSWORD),
+								new(allocator) ListElement(password));
+	return cred;
+}
+
+const AutoCredentials *KeychainAclFactory::passwordUnlockCredentials(const CssmData &password)
+{
+	AutoCredentials *cred = new AutoCredentials(allocator, 1);
+	// @@@ This leaks a ListElement(CSSM_SAMPLE_TYPE_KEYCHAIN_PROMPT) and ListElement(password)
+	cred->sample(0) = TypedList(allocator, CSSM_SAMPLE_TYPE_KEYCHAIN_LOCK,
+								new(allocator) ListElement(CSSM_SAMPLE_TYPE_PASSWORD),
+								new(allocator) ListElement(password));
+	return cred;
+}
+
+
+//
+// 
+AclEntryInput *KeychainAclFactory::keychainPromptOwner(const CssmData &description)
+{
+	// @@@ Make sure this works for a NULL description
+	AclEntryPrototype proto(TypedList(allocator, CSSM_ACL_SUBJECT_TYPE_KEYCHAIN_PROMPT,
+		new(allocator) ListElement(allocator, description)));
+	return new(allocator) AclEntryInput(proto);
+}
+
+AclEntryInput *KeychainAclFactory::anyOwner()
+{
+	AclEntryPrototype proto(TypedList(allocator, CSSM_ACL_SUBJECT_TYPE_ANY));
+	return new(allocator) AclEntryInput(proto);
+}
+
+void KeychainAclFactory::release(AclEntryInput *input)
+{
+	DataWalkers::chunkFree(input, allocator);
+}
+
+
+//
+// ACL editing
+//
+void KeychainAclFactory::comment(TypedList &subject)
+{
+	subject.insert(new(allocator) ListElement(CSSM_ACL_SUBJECT_TYPE_COMMENT),
+		subject.first());
+}
+
+void KeychainAclFactory::uncomment(TypedList &subject)
+{
+	ListElement *first = subject.first();
+	assert(*first == CSSM_ACL_SUBJECT_TYPE_COMMENT);
+	subject -= first;
+	destroy(first, allocator);
+}