1  /*
  2   * Copyright (c) 2006-2011,2014 Apple Inc. All Rights Reserved.
  3   * 
  4   * @APPLE_LICENSE_HEADER_START@
  5   * 
  6   * This file contains Original Code and/or Modifications of Original Code
  7   * as defined in and that are subject to the Apple Public Source License
  8   * Version 2.0 (the 'License'). You may not use this file except in
  9   * compliance with the License. Please obtain a copy of the License at
 10   * http://www.opensource.apple.com/apsl/ and read it before using this
 11   * file.
 12   * 
 13   * The Original Code and all software distributed under the License are
 14   * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER
 15   * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES,
 16   * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY,
 17   * FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT.
 18   * Please see the License for the specific language governing rights and
 19   * limitations under the License.
 20   * 
 21   * @APPLE_LICENSE_HEADER_END@
 22   */
 23  
 24  //
 25  // singlediskrep - semi-abstract diskrep for a single file of some kind
 26  //
 27  #include "singlediskrep.h"
 28  #include "csutilities.h"
 29  #include <security_utilities/cfutilities.h>
 30  #include <sys/stat.h>
 31  
 32  namespace Security {
 33  namespace CodeSigning {
 34  
 35  using namespace UnixPlusPlus;
 36  
 37  
 38  //
 39  // Construct a SingleDiskRep
 40  //
 41  SingleDiskRep::SingleDiskRep(const std::string &path)
 42  	: mPath(path)
 43  {
 44  }
 45  
 46  
 47  //
 48  // The default binary identification of a SingleDiskRep is the (SHA-1) hash
 49  // of the entire file itself.
 50  //
 51  CFDataRef SingleDiskRep::identification()
 52  {
 53  	SHA1 hash;
 54  	this->fd().seek(0);
 55  	hashFileData(this->fd(), &hash);
 56  	SHA1::Digest digest;
 57  	hash.finish(digest);
 58  	return makeCFData(digest, sizeof(digest));
 59  }
 60  
 61  
 62  //
 63  // Both the canonical and main executable path of a SingleDiskRep is, well, its path.
 64  //
 65  CFURLRef SingleDiskRep::copyCanonicalPath()
 66  {
 67  	return makeCFURL(mPath);
 68  }
 69  
 70  string SingleDiskRep::mainExecutablePath()
 71  {
 72  	return mPath;
 73  }
 74  
 75  
 76  //
 77  // The default signing limit is the size of the file.
 78  // This will do unless the signing data gets creatively stuck in there somewhere.
 79  //
 80  size_t SingleDiskRep::signingLimit()
 81  {
 82  	return fd().fileSize();
 83  }
 84  
 85  //
 86  // No executable segment in non-machO files.
 87  //
 88  size_t SingleDiskRep::execSegLimit(const Architecture *)
 89  {
 90  	return 0;
 91  }
 92  
 93  //
 94  // A lazily opened read-only file descriptor for the path.
 95  //
 96  FileDesc &SingleDiskRep::fd()
 97  {
 98  	if (!mFd)
 99  		mFd.open(mPath, O_RDONLY);
100  	return mFd;
101  }
102  
103  //
104  // Flush cached state
105  //
106  void SingleDiskRep::flush()
107  {
108  	mFd.close();
109  }
110  
111  //Check the magic darwinup xattr
112  bool SingleDiskRep::appleInternalForcePlatform() const
113  {
114  	return mFd.hasExtendedAttribute("com.apple.root.installed");
115  }
116  
117  //
118  // The recommended identifier of a SingleDiskRep is, absent any better clue,
119  // the basename of its path.
120  //
121  string SingleDiskRep::recommendedIdentifier(const SigningContext &)
122  {
123  	return canonicalIdentifier(mPath);
124  }
125  	
126  	
127  //
128  // Paranoid validation
129  //
130  void SingleDiskRep::strictValidate(const CodeDirectory* cd, const ToleratedErrors& tolerated, SecCSFlags flags)
131  {
132  	DiskRep::strictValidate(cd, tolerated, flags);
133  
134  	if (flags & kSecCSRestrictSidebandData)
135  		if (fd().hasExtendedAttribute(XATTR_RESOURCEFORK_NAME) || fd().hasExtendedAttribute(XATTR_FINDERINFO_NAME))
136  			if (tolerated.find(errSecCSInvalidAssociatedFileData) == tolerated.end())
137  				MacOSError::throwMe(errSecCSInvalidAssociatedFileData);
138  	
139  	// code limit must cover (exactly) the entire file
140  	if (cd && cd->signingLimit() != signingLimit())
141  		MacOSError::throwMe(errSecCSSignatureInvalid);
142  }
143  
144  
145  
146  //
147  // Prototype Writers
148  //
149  FileDesc &SingleDiskRep::Writer::fd()
150  {
151  	if (!mFd)
152  		mFd.open(rep->path(), O_RDWR);
153  	return mFd;
154  }
155  
156  
157  } // end namespace CodeSigning
158  } // end namespace Security