1  /*
 2   * Copyright (c) 2019 Apple Inc. All Rights Reserved.
 3   *
 4   * @APPLE_LICENSE_HEADER_START@
 5   *
 6   * This file contains Original Code and/or Modifications of Original Code
 7   * as defined in and that are subject to the Apple Public Source License
 8   * Version 2.0 (the 'License'). You may not use this file except in
 9   * compliance with the License. Please obtain a copy of the License at
10   * http://www.opensource.apple.com/apsl/ and read it before using this
11   * file.
12   *
13   * The Original Code and all software distributed under the License are
14   * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER
15   * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES,
16   * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY,
17   * FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT.
18   * Please see the License for the specific language governing rights and
19   * limitations under the License.
20   *
21   * @APPLE_LICENSE_HEADER_END@
22   */
23  
24  #import <Foundation/Foundation.h>
25  #import <objc/runtime.h>
26  #import <Foundation/NSXPCConnection_Private.h>
27  
28  #import "utilities/debugging.h"
29  #import <Security/SecEntitlements.h>
30  #import "keychain/escrowrequest/EscrowRequestServer.h"
31  #import "keychain/escrowrequest/EscrowRequestXPCServer.h"
32  #import "keychain/escrowrequest/EscrowRequestXPCProtocol.h"
33  #import "keychain/categories/NSError+UsefulConstructors.h"
34  
35  @interface EscrowRequestXPCServer : NSObject <NSXPCListenerDelegate>
36  @end
37  
38  @implementation EscrowRequestXPCServer
39  
40  - (BOOL)listener:(__unused NSXPCListener *)listener shouldAcceptNewConnection:(NSXPCConnection *)newConnection
41  {
42      NSNumber *num = [newConnection valueForEntitlement:kSecEntitlementPrivateEscrowRequest];
43      if (![num isKindOfClass:[NSNumber class]] || ![num boolValue]) {
44          secerror("escrow-update: Client pid: %d doesn't have entitlement: %@",
45                   [newConnection processIdentifier], kSecEntitlementPrivateEscrowRequest);
46          return NO;
47      }
48  
49      secnotice("escrowrequest", "received connection from client pid %d", [newConnection processIdentifier]);
50      newConnection.exportedInterface = SecEscrowRequestSetupControlProtocol([NSXPCInterface interfaceWithProtocol:@protocol(EscrowRequestXPCProtocol)]);
51  
52      newConnection.exportedObject = [EscrowRequestServer server];
53  
54      [newConnection resume];
55  
56      return YES;
57  }
58  @end
59  
60  void
61  EscrowRequestXPCServerInitialize(void)
62  {
63      static dispatch_once_t once;
64      static EscrowRequestXPCServer *server;
65      static NSXPCListener *listener;
66  
67      dispatch_once(&once, ^{
68          @autoreleasepool {
69              server = [EscrowRequestXPCServer new];
70  
71              listener = [[NSXPCListener alloc] initWithMachServiceName:@(kSecuritydEscrowRequestServiceName)];
72              listener.delegate = server;
73              [listener resume];
74          }
75      });
76  }