1  /*
  2   * Copyright (c) 2003-2004,2006,2008-2009,2012,2014 Apple Inc. All Rights Reserved.
  3   *
  4   * @APPLE_LICENSE_HEADER_START@
  5   * 
  6   * This file contains Original Code and/or Modifications of Original Code
  7   * as defined in and that are subject to the Apple Public Source License
  8   * Version 2.0 (the 'License'). You may not use this file except in
  9   * compliance with the License. Please obtain a copy of the License at
 10   * http://www.opensource.apple.com/apsl/ and read it before using this
 11   * file.
 12   * 
 13   * The Original Code and all software distributed under the License are
 14   * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER
 15   * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES,
 16   * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY,
 17   * FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT.
 18   * Please see the License for the specific language governing rights and
 19   * limitations under the License.
 20   * 
 21   * @APPLE_LICENSE_HEADER_END@
 22   *
 23   * user_trust_enable.cpp
 24   */
 25  
 26  #include "security_tool.h"
 27  #include "user_trust_enable.h"
 28  #include <errno.h>
 29  #include <unistd.h>
 30  #include <security_utilities/simpleprefs.h>
 31  #include <Security/TrustSettingsSchema.h>		/* private SPI */
 32  #include <CoreFoundation/CFNumber.h>
 33  
 34  typedef enum {
 35  	utoSet = 0,
 36  	utoShow
 37  } UserTrustOp;
 38  
 39  int
 40  user_trust_enable(int argc, char * const *argv)
 41  {
 42  	extern int optind;
 43  	int arg;
 44  	UserTrustOp op = utoShow;
 45  	CFBooleanRef disabledBool = kCFBooleanFalse;	/* what we write to prefs */
 46  	optind = 1;
 47  	int ourRtn = 0;
 48  
 49  	while ((arg = getopt(argc, argv, "deh")) != -1) {
 50  		switch (arg) {
 51  			case 'd':
 52  				op = utoSet;
 53  				disabledBool = kCFBooleanTrue;
 54  				break;
 55  			case 'e':
 56  				op = utoSet;
 57  				disabledBool = kCFBooleanFalse;
 58  				break;
 59  			default:
 60  			case 'h':
 61  				return SHOW_USAGE_MESSAGE;
 62  		}
 63  	}
 64  	if(optind != argc) {
 65  		return SHOW_USAGE_MESSAGE;
 66  	}
 67  
 68  	if(op == utoShow) {
 69  		bool utDisable = false;
 70  
 71  #if !defined MAC_OS_X_VERSION_10_6 || MAC_OS_X_VERSION_MAX_ALLOWED < MAC_OS_X_VERSION_10_6
 72  		Dictionary* prefsDict = new Dictionary(kSecTrustSettingsPrefsDomain, Dictionary::US_System);
 73  #else
 74  		Dictionary* prefsDict = Dictionary::CreateDictionary(kSecTrustSettingsPrefsDomain, Dictionary::US_System);
 75  #endif
 76  		if (prefsDict != NULL)
 77  		{
 78  			utDisable = prefsDict->getBoolValue(kSecTrustSettingsDisableUserTrustSettings);
 79  			delete prefsDict;
 80  		}
 81  
 82  		fprintf(stdout, "User-level Trust Settings are %s\n",
 83  			utDisable ? "Disabled" : "Enabled");
 84  		return 0;
 85  	}
 86  
 87  	/*  set the pref... */
 88  	if(geteuid() != 0) {
 89  		fprintf(stderr, "You must be root to set this preference.\n");
 90  		return 1;
 91  	}
 92  
 93  	/* get a mutable copy of the existing prefs, or a fresh empty one */
 94  #if !defined MAC_OS_X_VERSION_10_6 || MAC_OS_X_VERSION_MAX_ALLOWED < MAC_OS_X_VERSION_10_6
 95  	MutableDictionary *prefsDict = new MutableDictionary(kSecTrustSettingsPrefsDomain, Dictionary::US_System);
 96  #else
 97  	MutableDictionary *prefsDict = MutableDictionary::CreateMutableDictionary(kSecTrustSettingsPrefsDomain, Dictionary::US_System);
 98  #endif
 99  	if (prefsDict == NULL)
100  	{
101  		prefsDict = new MutableDictionary();
102  	}
103  
104  	prefsDict->setValue(kSecTrustSettingsDisableUserTrustSettings, disabledBool);
105  	if(prefsDict->writePlistToPrefs(kSecTrustSettingsPrefsDomain, Dictionary::US_System)) {
106  		fprintf(stdout, "...User-level Trust Settings are %s\n",
107  			(disabledBool == kCFBooleanTrue) ? "Disabled" : "Enabled");
108  	}
109  	else {
110  		fprintf(stderr, "Could not write system preferences.\n");
111  		ourRtn = 1;
112  	}
113  	delete prefsDict;
114  	return ourRtn;
115  }