-
Notifications
You must be signed in to change notification settings - Fork 3
/
listing61.html
executable file
·770 lines (635 loc) · 30.8 KB
/
listing61.html
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"
"http://www.w3.org/TR/1999/REC-html401-19991224/loose.dtd">
<html>
<head>
<!-- BEGIN META TAG INFO -->
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<link rel="home" href="http://developer.apple.com/">
<link rel="find" href="http://developer.apple.com/search/">
<link rel="stylesheet" type="text/css" href="../../documentation/css/adcstyle.css" title="fonts">
<script language="JavaScript" src="../../documentation/js/adc.js" type="text/javascript"></script>
<!-- END META TAG INFO -->
<!-- BEGIN TITLE -->
<title>QISA - /QISAPlatformMach-O/QISASetupTool.c</title>
<!-- END TITLE -->
<script language="JavaScript">
function JumpToNewPage() {
window.location=document.scpopupmenu.gotop.value;
return true;
}
</script>
</head>
<!-- BEGIN BODY OPEN -->
<body>
<!--END BODY OPEN -->
<!-- START CENTER OPEN -->
<center>
<!-- END CENTER OPEN -->
<!-- BEGIN LOGO AND SEARCH -->
<!--#include virtual="/includes/adcnavbar"-->
<!-- END LOGO AND SEARCH -->
<!-- START BREADCRUMB -->
<div id="breadcrumb">
<table width="680" border="0" cellpadding="0" cellspacing="0">
<tr>
<td scope="row"><img width="340" height="10" src="images/1dot.gif" alt=""></td>
<td><img width="340" height="10" src="images/1dot.gif" alt=""></td>
</tr>
<tr valign="middle">
<td align="left" colspan="2">
<a href="http://developer.apple.com/">ADC Home</a> > <a href="../../referencelibrary/index.html">Reference Library</a> > <a href="../../samplecode/index.html">Sample Code</a> > <a href="../../samplecode/Networking/index.html">Networking</a> > <a href="../../samplecode/Networking/idxDarwin-date.html">Darwin</a> > <A HREF="javascript:location.replace('index.html');">QISA</A> >
</td>
</tr>
<tr>
<td colspan="2" scope="row"><img width="680" height="35" src="images/1dot.gif" alt=""></td>
</tr>
</table>
</div>
<!-- END BREADCRUMB -->
<!-- START MAIN CONTENT -->
<!-- START TITLE GRAPHIC AND INTRO-->
<table width="680" border="0" cellpadding="0" cellspacing="0">
<tr align="left" valign="top">
<td><h1><div id="pagehead">QISA</div></h1></td>
</tr>
</table>
<!-- END TITLE GRAPHIC AND INTRO -->
<!-- START WIDE COLUMN -->
<table width="680" border="0" cellpadding="0" cellspacing="0">
<tr align="left" valign="top">
<td id="scdetails">
<h2>/QISAPlatformMach-O/QISASetupTool.c</h2>
<form name="scpopupmenu" onSubmit="return false;" method=post>
<p><strong>View Source Code:</strong>
<select name="gotop" onChange="JumpToNewPage();" style="width:340px"><option selected value="ingnore">Select File</option>
<option value="listing1.html">/MoreIsBetter Bits/MoreIsBetter/MIB-Libraries/MoreAppearance/MoreAppearance.cp</option>
<option value="listing2.html">/MoreIsBetter Bits/MoreIsBetter/MIB-Libraries/MoreAppearance/MoreAppearance.h</option>
<option value="listing3.html">/MoreIsBetter Bits/MoreIsBetter/MIB-Libraries/MoreAppleEvents/MoreAEDataModel.c</option>
<option value="listing4.html">/MoreIsBetter Bits/MoreIsBetter/MIB-Libraries/MoreAppleEvents/MoreAEDataModel.h</option>
<option value="listing5.html">/MoreIsBetter Bits/MoreIsBetter/MIB-Libraries/MoreAppleEvents/MoreAEObjects.c</option>
<option value="listing6.html">/MoreIsBetter Bits/MoreIsBetter/MIB-Libraries/MoreAppleEvents/MoreAEObjects.h</option>
<option value="listing7.html">/MoreIsBetter Bits/MoreIsBetter/MIB-Libraries/MoreAppleEvents/MoreAppleEvents.cp</option>
<option value="listing8.html">/MoreIsBetter Bits/MoreIsBetter/MIB-Libraries/MoreAppleEvents/MoreAppleEvents.h</option>
<option value="listing9.html">/MoreIsBetter Bits/MoreIsBetter/MIB-Libraries/MoreCarbonEvents/MoreCarbonEvents.c</option>
<option value="listing10.html">/MoreIsBetter Bits/MoreIsBetter/MIB-Libraries/MoreCarbonEvents/MoreCarbonEvents.h</option>
<option value="listing11.html">/MoreIsBetter Bits/MoreIsBetter/MIB-Libraries/MoreCFQ/MoreCFQ.c</option>
<option value="listing12.html">/MoreIsBetter Bits/MoreIsBetter/MIB-Libraries/MoreCFQ/MoreCFQ.h</option>
<option value="listing13.html">/MoreIsBetter Bits/MoreIsBetter/MIB-Libraries/MoreControls/MoreControls.cp</option>
<option value="listing14.html">/MoreIsBetter Bits/MoreIsBetter/MIB-Libraries/MoreControls/MoreControls.h</option>
<option value="listing15.html">/MoreIsBetter Bits/MoreIsBetter/MIB-Libraries/MoreDialogs/MoreDialogs.cp</option>
<option value="listing16.html">/MoreIsBetter Bits/MoreIsBetter/MIB-Libraries/MoreDialogs/MoreDialogs.h</option>
<option value="listing17.html">/MoreIsBetter Bits/MoreIsBetter/MIB-Libraries/MoreInterfaceLib/MoreInterfaceLib.c</option>
<option value="listing18.html">/MoreIsBetter Bits/MoreIsBetter/MIB-Libraries/MoreInterfaceLib/MoreInterfaceLib.h</option>
<option value="listing19.html">/MoreIsBetter Bits/MoreIsBetter/MIB-Libraries/MoreInterfaceLib/RemoteAccessInterface.h</option>
<option value="listing20.html">/MoreIsBetter Bits/MoreIsBetter/MIB-Libraries/MoreMemory/MoreMemory.c</option>
<option value="listing21.html">/MoreIsBetter Bits/MoreIsBetter/MIB-Libraries/MoreMemory/MoreMemory.h</option>
<option value="listing22.html">/MoreIsBetter Bits/MoreIsBetter/MIB-Libraries/MoreOSUtils/MoreOSUtils.c</option>
<option value="listing23.html">/MoreIsBetter Bits/MoreIsBetter/MIB-Libraries/MoreOSUtils/MoreOSUtils.h</option>
<option value="listing24.html">/MoreIsBetter Bits/MoreIsBetter/MIB-Libraries/MoreProcesses/MoreProcesses.cp</option>
<option value="listing25.html">/MoreIsBetter Bits/MoreIsBetter/MIB-Libraries/MoreProcesses/MoreProcesses.h</option>
<option value="listing26.html">/MoreIsBetter Bits/MoreIsBetter/MIB-Libraries/MoreQuickDraw/MoreQuickDraw.cp</option>
<option value="listing27.html">/MoreIsBetter Bits/MoreIsBetter/MIB-Libraries/MoreQuickDraw/MoreQuickDraw.h</option>
<option value="listing28.html">/MoreIsBetter Bits/MoreIsBetter/MIB-Libraries/MoreSCF/MoreSCF.c</option>
<option value="listing29.html">/MoreIsBetter Bits/MoreIsBetter/MIB-Libraries/MoreSCF/MoreSCF.h</option>
<option value="listing30.html">/MoreIsBetter Bits/MoreIsBetter/MIB-Libraries/MoreSCF/MoreSCFCCLScanner.c</option>
<option value="listing31.html">/MoreIsBetter Bits/MoreIsBetter/MIB-Libraries/MoreSCF/MoreSCFCCLScanner.h</option>
<option value="listing32.html">/MoreIsBetter Bits/MoreIsBetter/MIB-Libraries/MoreSCF/MoreSCFDigest.c</option>
<option value="listing33.html">/MoreIsBetter Bits/MoreIsBetter/MIB-Libraries/MoreSCF/MoreSCFDigest.h</option>
<option value="listing34.html">/MoreIsBetter Bits/MoreIsBetter/MIB-Libraries/MoreSCF/MoreSCFHelpers.c</option>
<option value="listing35.html">/MoreIsBetter Bits/MoreIsBetter/MIB-Libraries/MoreSCF/MoreSCFHelpers.h</option>
<option value="listing36.html">/MoreIsBetter Bits/MoreIsBetter/MIB-Libraries/MoreSCF/MoreSCFPortScanner.c</option>
<option value="listing37.html">/MoreIsBetter Bits/MoreIsBetter/MIB-Libraries/MoreSCF/MoreSCFPortScanner.h</option>
<option value="listing38.html">/MoreIsBetter Bits/MoreIsBetter/MIB-Libraries/MoreSecurity/MoreSecurity.c</option>
<option value="listing39.html">/MoreIsBetter Bits/MoreIsBetter/MIB-Libraries/MoreSecurity/MoreSecurity.h</option>
<option value="listing40.html">/MoreIsBetter Bits/MoreIsBetter/MIB-Libraries/MoreSetup.h</option>
<option value="listing41.html">/MoreIsBetter Bits/MoreIsBetter/MIB-Libraries/MoreTextUtils/MoreTextUtils.cp</option>
<option value="listing42.html">/MoreIsBetter Bits/MoreIsBetter/MIB-Libraries/MoreTextUtils/MoreTextUtils.h</option>
<option value="listing43.html">/MoreIsBetter Bits/MoreIsBetter/MIB-Libraries/MoreUNIX/MoreUNIX.c</option>
<option value="listing44.html">/MoreIsBetter Bits/MoreIsBetter/MIB-Libraries/MoreUNIX/MoreUNIX.h</option>
<option value="listing45.html">/MoreIsBetter Bits/MoreIsBetter/MIB-Libraries/MoreWindows/MoreWindows.cp</option>
<option value="listing46.html">/MoreIsBetter Bits/MoreIsBetter/MIB-Libraries/MoreWindows/MoreWindows.h</option>
<option value="listing47.html">/MoreIsBetter Bits/MoreIsBetter/MIB-Libraries/NetworkSetup/MoreNetworkSetup.c</option>
<option value="listing48.html">/MoreIsBetter Bits/MoreIsBetter/MIB-Libraries/NetworkSetup/MoreNetworkSetup.h</option>
<option value="listing49.html">/MoreIsBetter Bits/MoreIsBetter/MIB-Libraries/NetworkSetup/NetworkSetupHelpers.c</option>
<option value="listing50.html">/MoreIsBetter Bits/MoreIsBetter/MIB-Libraries/NetworkSetup/NetworkSetupHelpers.h</option>
<option value="listing51.html">/MoreIsBetter Bits/MoreIsBetter/MIB-Libraries/NetworkSetup/OldStyleAPI/OldOTConfigLib.h</option>
<option value="listing52.html">/QISA.c</option>
<option value="listing53.html">/QISA.h</option>
<option value="listing54.html">/QISAPanels.c</option>
<option value="listing55.html">/QISAPanels.h</option>
<option value="listing56.html">/QISAPlatform.c</option>
<option value="listing57.html">/QISAPlatform.h</option>
<option value="listing58.html">/QISAPlatformCFM/QISAPlatformCFM.c</option>
<option value="listing59.html">/QISAPlatformCFM/QISAPlatformCFMPrefix.h</option>
<option value="listing60.html">/QISAPlatformMach-O/QISAPlatformMach-O.c</option>
<option value="listing61.html">/QISAPlatformMach-O/QISASetupTool.c</option>
<option value="listing62.html">/ReadMeAboutQISA.html</option></select>
</p>
</form>
<p><strong><a href="QISA.zip">Download Sample</a></strong> (“QISA.zip”, 610.6K)<BR>
<strong><a href="QISA.dmg">Download Sample</a></strong> (“QISA.dmg”, 903.9K)</p>
<!--
<p><strong><a href="#">Download Sample</a></strong> (“filename.sit”, 500K)</p>
-->
</td>
</tr>
<tr>
<td scope="row"><img width="680" height="10" src="images/1dot.gif" alt=""><br>
<img height="1" width="680" src="images/1dot_919699.gif" alt=""><br>
<img width="680" height="20" src="images/1dot.gif" alt=""></td>
</tr>
<tr>
<td scope="row">
<!--googleon: index -->
<pre class="sourcecodebox">/* File: QISASetupTool.c Contains: Implementation of the setuid setup tool for the Mac OS X platform. Written by: DTS Copyright: Copyright © 2002 by Apple Computer, Inc., All Rights Reserved. Disclaimer: IMPORTANT: This Apple software is supplied to you by Apple Computer, Inc. ("Apple") in consideration of your agreement to the following terms, and your use, installation, modification or redistribution of this Apple software constitutes acceptance of these terms. If you do not agree with these terms, please do not use, install, modify or redistribute this Apple software. In consideration of your agreement to abide by the following terms, and subject to these terms, Apple grants you a personal, non-exclusive license, under Apple's copyrights in this original Apple software (the "Apple Software"), to use, reproduce, modify and redistribute the Apple Software, with or without modifications, in source and/or binary forms; provided that if you redistribute the Apple Software in its entirety and without modifications, you must retain this notice and the following text and disclaimers in all such redistributions of the Apple Software. Neither the name, trademarks, service marks or logos of Apple Computer, Inc. may be used to endorse or promote products derived from the Apple Software without specific prior written permission from Apple. Except as expressly stated in this notice, no other rights or licenses, express or implied, are granted by Apple herein, including but not limited to any patent rights that may be infringed by your derivative works or by other works in which the Apple Software may be incorporated. The Apple Software is provided by Apple on an "AS IS" basis. APPLE MAKES NO WARRANTIES, EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION THE IMPLIED WARRANTIES OF NON-INFRINGEMENT, MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE, REGARDING THE APPLE SOFTWARE OR ITS USE AND OPERATION ALONE OR IN COMBINATION WITH YOUR PRODUCTS. IN NO EVENT SHALL APPLE BE LIABLE FOR ANY SPECIAL, INDIRECT, INCIDENTAL OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) ARISING IN ANY WAY OUT OF THE USE, REPRODUCTION, MODIFICATION AND/OR DISTRIBUTION OF THE APPLE SOFTWARE, HOWEVER CAUSED AND WHETHER UNDER THEORY OF CONTRACT, TORT (INCLUDING NEGLIGENCE), STRICT LIABILITY OR OTHERWISE, EVEN IF APPLE HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. Change History (most recent first):*//////////////////////////////////////////////////////////////////// System interfaces#include <stdio.h>#include <unistd.h>#include <sys/stat.h>// MoreIsBetter interfaces#include "MoreSCFPortScanner.h"#include "MoreSCF.h"#include "MoreSCFHelpers.h"#include "MoreCFQ.h"#include "MoreSecurity.h"#include "MoreUNIX.h"// QISA interfaces#include "QISA.h"/////////////////////////////////////////////////////////////////// Set the following to 1 to get extra debugging output.#if MORE_DEBUG #define MORE_DEBUG_EXTRA 0#endif// The Mach-O platform plug-in's bundle. It's passed to us // as part of the configuration dictionary. We store it in a // global so that it can be accessed by MyPortNameCallback.static CFBundleRef gPlatformBundle;static pascal kern_return_t MyPortNameCallback(io_object_t interface, CFMutableDictionaryRef interfaceInfo, CFStringRef proposedUserVisibleName, CFStringRef *userVisibleName) // This is a port name callback used to provide localised // port names to MoreSCFPortScanner. See the comments in // "MoreSCFPortScanner.h" for more detials.{ #pragma unused(interface) #pragma unused(interfaceInfo) assert(gPlatformBundle != NULL); *userVisibleName = CFBundleCopyLocalizedString(gPlatformBundle, proposedUserVisibleName, NULL, NULL); // If there is no localised name, *userVisibleName will just // be a copy of proposedUserVisibleName. However, MoreSCF wants // us to return NULL in that case. if ( (*userVisibleName != NULL) && CFEqual(*userVisibleName, proposedUserVisibleName) ) { CFQRelease(*userVisibleName); *userVisibleName = NULL; } return 0;}// This string is used as an entity name. Whenever this tool creates // a set, it creates an entity within that set with this key. Later // if it goes to overwrite a set, it makes sure that the set contains // the same global entity. Thus, you can only use this tool to create // a new set or overwrite a set that you created; you can't use it // to overwrite a set created by someone else.// // Note that this is a key security measure, so it has to be hard-wired // into the tool. Passing it as a parameter in the configuration // dictionary would defeat this (limited) security.#define kQISASetIdentifier CFSTR("com.apple.dts.QISA")static OSStatus CopyCustomDictionary(CFStringRef setID, CFStringRef dictKey, CFDictionaryRef *dict) // This routine copies a dictionary from the set's preferences. // The dictionary path is "/Sets/<setID/<dictKey>", where in the // case of this product <dictKey> is "com.apple.dts.QISA". This // is the recommended place to store application-specific preferences // within the SCF preferences. This routine should probably be // moved into MoreSCF proper, once i have a little more experience // with this idea.{ OSStatus err; CFStringRef path; assert(setID != NULL); assert(dictKey != NULL); assert( dict != NULL); assert( *dict == NULL); assert( MoreSCGetSCPreferencesRef() != NULL ); // You must be inside MoreSCOpen/MoreSCClose pair when calling this routine. path = NULL; path = CFStringCreateWithFormat(NULL, NULL, CFSTR("/%@/%@/%@"), kSCPrefSets, setID, dictKey); err = CFQError(path); if (err == noErr) { *dict = (CFDictionaryRef) CFQRetain( SCPreferencesPathGetValue(MoreSCGetSCPreferencesRef(), path) ); err = MoreSCError(*dict); } CFQRelease(path); assert( (err == noErr) == (*dict != NULL) ); return err;}static OSStatus SetCustomDictionary(CFStringRef setID, CFStringRef dictKey, CFDictionaryRef dict) // This routine stores a dictionary in the set's preferences. // The dictionary path is "/Sets/<setID/<dictKey>", where in the // case of this product <dictKey> is "com.apple.dts.QISA". This // is the recommended place to store application-specific preferences // within the SCF preferences. This routine should probably be // moved into MoreSCF proper, once i have a little more experience // with this idea.{ OSStatus err; CFStringRef path; assert(setID != NULL); assert(dictKey != NULL); assert( dict != NULL); assert( MoreSCGetSCPreferencesRef() != NULL ); // You must be inside MoreSCOpen/MoreSCClose pair when calling this routine. path = NULL; path = CFStringCreateWithFormat(NULL, NULL, CFSTR("/%@/%@/%@"), kSCPrefSets, setID, dictKey); err = CFQError(path); if (err == noErr) { err = MoreSCErrorBoolean( SCPreferencesPathSetValue(MoreSCGetSCPreferencesRef(), path, dict) ); } CFQRelease(path); return err;}static OSStatus DeleteSet(CFStringRef setID) // This routines is called to delete a set that we want to overwrite // in the SCF preferences. It has to jump through some hoops to keep // the SCF preferences database consistent. Also, it checks to make // sure that we're not deleting a set that we didn't create.{ OSStatus err; CFDictionaryRef junkEntityDict; CFArrayRef setIDs; CFIndex indexOfCurrentSet; setIDs = NULL; junkEntityDict = NULL; // Check to see that the set we're about to delete has our custom entity. // If not, that's an error. err = CopyCustomDictionary(setID, kQISASetIdentifier, &junkEntityDict); if (err != noErr) { err = errAuthorizationDenied; } // Get a list of sets and see whether the current set is the one we're trying to delete. if (err == noErr) { err = MoreSCCopySetIDs(&setIDs, &indexOfCurrentSet); } if ( (err == noErr) && CFEqual(CFArrayGetValueAtIndex(setIDs, indexOfCurrentSet), setID) ) { // If so, switch to another set. What happens if there is no other set? // Well, we create a default one. if ( CFArrayGetCount(setIDs) == 1 ) { err = MoreSCNewSet(CFSTR("Automatic"), NULL); } else { CFIndex newSetIndex; if (indexOfCurrentSet == 0) { newSetIndex = 1; } else { newSetIndex = 0; } err = MoreSCSetCurrentSet(CFArrayGetValueAtIndex(setIDs, newSetIndex)); } } if (err == noErr) { err = MoreSCDeleteSet(setID); } CFQRelease(setIDs); CFQRelease(junkEntityDict); return err;}static OSStatus StartPrivilegedMode(mode_t *oldUMask) // SCF requires that the EUID be 0 in order to open the database // with the lock held, and to commit changes. Also, if you // commit changes with a 077 umask (which was set that way by // MoreSecDestroyInheritedEnvironment), bad things happen // (non-privileged programs can no longer read the prefs!), so we // have to reset umask to the default before committing changes.{ *oldUMask = umask(S_IWGRP | S_IWOTH); return EXXXToOSStatus( MoreSecSetPrivilegedEUID() );}static void StopPrivilegedMode(mode_t oldUMask) // Undoes what StartPrivilegedMode did.{ int junk; (void) umask(oldUMask); junk = MoreSecTemporarilySetNonPrivilegedEUID(); assert(junk == 0);}static OSStatus QISAMakeNetworkConfig( CFStringRef userName, CFStringRef password, CFStringRef number, Boolean useTerminal, CFStringRef userVisibleName, CFStringRef chosenCCL, CFStringRef bsdName) // A sub-routine called by SetupToolCommandProc to actually create // a network configuration.{ OSStatus err; OSStatus err2; MoreSCModemDigest modem; MoreSCPPPDigest ppp; MoreSCPPPOptions pppOptions; MoreSCIPv4Digest ipv4; CFStringRef existingSetID; CFStringRef newSetID; mode_t oldUMask; newSetID = NULL; existingSetID = NULL; // Open the databask with the expect umask and EUID 0, then do // the rest of the work with umask 077 and EUID == REUID. err = StartPrivilegedMode(&oldUMask); if (err == noErr) { err = MoreSCOpen(true, true); StopPrivilegedMode(oldUMask); } if (err == noErr) { // If the set already exists, delete it. if (err == noErr) { err = MoreSCFindSetByUserVisibleNameAndCopyID(userVisibleName, &existingSetID); } if (err == noErr && existingSetID != NULL) { #if MORE_DEBUG_EXTRA fprintf(stderr, "QISASetupTool: deleting set\n"); CFShow(existingSetID); #endif err = DeleteSet(existingSetID); } // Create the set based on our input parameters. if (err == noErr) { #if MORE_DEBUG_EXTRA fprintf(stderr, "QISASetupTool: creating set\n"); CFShow(userVisibleName); #endif memset(&modem, 0, sizeof(modem)); modem.connectionScript = chosenCCL; modem.dataCompressionErrorCorrection = true; modem.speaker = true; modem.pulseDial = false; modem.waitForDialTone = true; pppOptions = *MoreSCGetDefaultPPPOptions(false); pppOptions.commDisplayTerminalWindow = useTerminal; memset(&ppp, 0, sizeof(ppp)); ppp.active = true; ppp.authName = userName; ppp.authPassword = password; ppp.commRemoteAddress = number; ppp.options = &pppOptions; memset(&ipv4, 0, sizeof(ipv4)); ipv4.configMethod = kSCValNetIPv4ConfigMethodPPP; err = MoreSCMakeNewDialupSet( bsdName, userVisibleName, &modem, &ppp, NULL, NULL, &newSetID); } // Our our custom entity. This marks the set as created by us. // If we're asked to overwrite a set, we check that this entity // exists and fail if it doesn't (in DeleteSet). That way we // can only create a new set or overwrite a set that we previously // created. if (err == noErr) { CFDictionaryRef emptyDict; emptyDict = CFDictionaryCreate(NULL, NULL, NULL, 0, &kCFTypeDictionaryKeyCallBacks, &kCFTypeDictionaryValueCallBacks); err = CFQError(emptyDict); if (err == noErr) { err = SetCustomDictionary(newSetID, kQISASetIdentifier, emptyDict); } CFQRelease(emptyDict); } // Switch to the new set. if (err == noErr) { #if MORE_DEBUG_EXTRA fprintf(stderr, "QISASetupTool: Switching to set\n"); CFShow(newSetID); #endif err = MoreSCSetCurrentSet(newSetID); } err2 = StartPrivilegedMode(&oldUMask); MoreSCClose(&err, (err != noErr)); if (err2 == noErr) { StopPrivilegedMode(oldUMask); } else if (err == noErr) { // I'm going to ignore err2 in this case. We didn't manage to switch // to EUID 0 and yet the call to MoreSCClose worked, so who cares? } } CFQRelease(existingSetID); CFQRelease(newSetID); return err;}static OSStatus SetupToolCommandProc(AuthorizationRef auth, CFDictionaryRef request, CFDictionaryRef *result) // This routine is a callback passed to MoreSecHelperToolMain. // See the description of that routine (in "MoreSecurity.h") // for more information about how it's executed. The 30,000 // foot summary is that the helper tool's main function calls // MoreSecHelperToolMain which organises to call back this // routine in a privileged context with the configuration that // originated from the application. This routine does the // actual configuration and then returns any results in // *result, which is passed back to the application.{ OSStatus err; CFStringRef username; CFStringRef password; CFStringRef number; CFBooleanRef useTerminal; Boolean useTerminalBool; CFStringRef userVisibleName; CFStringRef chosenCCL; CFDictionaryRef chosenPort; CFStringRef bsdName; CFStringRef platformBundle; CFURLRef platformBundleURL; assert(auth != NULL); assert(request != NULL); assert( result != NULL); assert(*result == NULL); platformBundleURL = NULL; #if MORE_DEBUG_EXTRA fprintf(stderr, "QISASetupTool: request = \n"); CFShow(request); #endif // Extract parameters from dictionary and do some basic checks. if ( CFDictionaryContainsKey(request, kQISAKeyTemporary) ) { username = CFDictionaryGetValue(request, kQISAKeySetupUsername); password = CFDictionaryGetValue(request, kQISAKeySetupPassword); number = CFDictionaryGetValue(request, kQISAKeySetupNumber); useTerminal = CFDictionaryGetValue(request, kQISAKeySetupUseTerminal); } else { username = CFDictionaryGetValue(request, kQISAKeyUsername); password = CFDictionaryGetValue(request, kQISAKeyPassword); number = CFDictionaryGetValue(request, kQISAKeyNumber); useTerminal = CFDictionaryGetValue(request, kQISAKeyUseTerminal); } userVisibleName = CFDictionaryGetValue(request, kQISAKeyUserVisibleName); chosenCCL = CFDictionaryGetValue(request, kQISAKeyChosenCCL); chosenPort = CFDictionaryGetValue(request, kQISAKeyChosenPort); platformBundle = CFDictionaryGetValue(request, kQISAKeyPlatformBundle); err = noErr; if ( username == NULL || CFGetTypeID(username) != CFStringGetTypeID() ) { err = paramErr; } if ( password == NULL || CFGetTypeID(password) != CFStringGetTypeID() ) { err = paramErr; } if ( number == NULL || CFGetTypeID(number) != CFStringGetTypeID() ) { err = paramErr; } if ( useTerminal == NULL || CFGetTypeID(useTerminal) != CFBooleanGetTypeID() ) { err = paramErr; } else { useTerminalBool = CFBooleanGetValue(useTerminal); } if ( userVisibleName == NULL || CFGetTypeID(userVisibleName) != CFStringGetTypeID() ) { err = paramErr; } if ( chosenCCL == NULL || CFGetTypeID(chosenCCL) != CFStringGetTypeID() ) { err = paramErr; } if ( chosenPort == NULL || CFGetTypeID(chosenPort) != CFDictionaryGetTypeID() ) { err = paramErr; } else { bsdName = CFDictionaryGetValue(chosenPort, kSCPropNetInterfaceDeviceName); if ( bsdName == NULL || CFGetTypeID(bsdName) != CFStringGetTypeID() ) { err = paramErr; } } if ( platformBundle == NULL || CFGetTypeID(platformBundle) != CFStringGetTypeID() ) { err = paramErr; } // Create gPlatformBundle from the string in the dictionary. if (err == noErr) { platformBundleURL = CFURLCreateWithString(NULL, platformBundle, NULL); err = CFQError(platformBundleURL); } if (err == noErr) { gPlatformBundle = CFBundleCreate(NULL, platformBundleURL); err = CFQError(gPlatformBundle); } // Go do the work. if (err == noErr) { MoreSCFSetPortNameCallback(MyPortNameCallback); err = QISAMakeNetworkConfig(username, password, number, useTerminalBool, userVisibleName, chosenCCL, bsdName); } #if MORE_DEBUG_EXTRA fprintf(stderr, "QISASetupTool: response = %ld\n", err); #endif CFQRelease(platformBundleURL); return err;}int main(int argc, const char *argv[]) // The helper tool's main function. This follows the template // described in "MoreSecurity.h" very closely.{ int err; int result; AuthorizationRef auth; // If you enable the "pause" call below, the helper tool will stop // here and wait for a signal. You can then debug it by attaching // to its PID from GDB. #if MORE_DEBUG_EXTRA fprintf(stderr, "QISASetupTool: PID %qd starting\n", (long long) getpid()); fprintf(stderr, " EUID = %ld\n", (long) geteuid()); fprintf(stderr, " RUID = %ld\n", (long) getuid()); if (0) { fprintf(stderr, "Waiting for debugger\n"); (void) pause(); } #endif // Get any auth ref passed to us from AuthorizationExecuteWithPrivileges // before we call MoreSecDestroyInheritedEnvironment, because AEWP passes // its auth ref to us via the environment. auth = MoreSecHelperToolCopyAuthRef(); // Because we're normally running as a setuid root program, it's // important that we not trust any information coming to us from // our potentially malicious parent process. err = MoreSecDestroyInheritedEnvironment(kMoreSecKeepStandardFilesMask, argv); // Mask SIGPIPE, otherwise stuff won't work properly. if (err == 0) { err = MoreUNIXIgnoreSIGPIPE(); } // Call the MoreSecurity helper routine. if (err == 0) { err = MoreSecHelperToolMain(STDIN_FILENO, STDOUT_FILENO, auth, SetupToolCommandProc, argc, argv); } // Map the error code to a tool result. result = MoreSecErrorToHelperToolResult(err); #if MORE_DEBUG_EXTRA fprintf(stderr, "QISASetupTool: PID %qd stopping\n", (long long) getpid()); fprintf(stderr, " err = %d\n", err); fprintf(stderr, " result = %d\n", result); #endif return result;}</pre>
<!--googleoff: index -->
</td>
</tr>
</table>
<!-- END WIDE COLUMN -->
<!-- END MAIN CONTENT -->
<table width="680" border="0" cellpadding="0" cellspacing="0">
<tr>
<td><div style="width: 100%; height: 1px; background-color: #919699; margin-top: 5px; margin-bottom: 15px"></div></td>
</tr>
<tr>
<td align="center"><br/>
<table border="0" cellpadding="0" cellspacing="0" class="graybox">
<tr>
<th>Did this document help you?</th>
</tr>
<tr>
<td>
<div style="margin-bottom: 8px"><a href="http://developer.apple.com/feedback/?v=1&url=/samplecode/QISA/listing61.html%3Fid%3DDTS10000714-1.0&media=dvd" target=_new>Yes</a>: Tell us what works for you.</div>
<div style="margin-bottom: 8px"><a href="http://developer.apple.com/feedback/?v=2&url=/samplecode/QISA/listing61.html%3Fid%3DDTS10000714-1.0&media=dvd" target=_new>It’s good, but:</a> Report typos, inaccuracies, and so forth.</div>
<div><a href="http://developer.apple.com/feedback/?v=3&url=/samplecode/QISA/listing61.html%3Fid%3DDTS10000714-1.0&media=dvd" target=_new>It wasn’t helpful</a>: Tell us what would have helped.</div>
</td>
</tr>
</table>
</td>
</tr>
</table>
<!-- START BOTTOM APPLE NAVIGATION -->
<!--#include virtual="/includes/footer"-->
<!-- END BOTTOM APPLE NAVIGATION -->
<!-- START CENTER CLOSE -->
</center>
<!-- END CENTER CLOSE -->
</body>
</html>