1/*
2 * Copyright (c) 2003-2004 Apple Computer, Inc. All Rights Reserved.
3 *
4 * @APPLE_LICENSE_HEADER_START@
5 *
6 * This file contains Original Code and/or Modifications of Original Code
7 * as defined in and that are subject to the Apple Public Source License
8 * Version 2.0 (the 'License'). You may not use this file except in
9 * compliance with the License. Please obtain a copy of the License at
10 * http://www.opensource.apple.com/apsl/ and read it before using this
11 * file.
12 *
13 * The Original Code and all software distributed under the License are
14 * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER
15 * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES,
16 * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY,
17 * FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT.
18 * Please see the License for the specific language governing rights and
19 * limitations under the License.
20 *
21 * @APPLE_LICENSE_HEADER_END@
22 *
23 * keychain_lock.c
24 */
25
26#include "keychain_lock.h"
27
28#include "keychain_utilities.h"
29#include "readline.h"
30#include "security.h"
31
32#include <stdio.h>
33#include <stdlib.h>
34#include <string.h>
35#include <unistd.h>
36#include <Security/SecKeychain.h>
37
38static int
39do_lock_all(void)
40{
41	OSStatus result = SecKeychainLockAll();
42    if (result)
43        sec_perror("SecKeychainLockAll", result);
44
45	return result;
46}
47
48static int
49do_lock(const char *keychainName)
50{
51	SecKeychainRef keychain = NULL;
52	OSStatus result;
53
54	if (keychainName)
55	{
56		keychain = keychain_open(keychainName);
57		if (!keychain)
58		{
59			result = 1;
60			goto loser;
61		}
62	}
63
64	result = SecKeychainLock(keychain);
65	if (result)
66	{
67		sec_error("SecKeychainLock %s: %s", keychainName ? keychainName : "<NULL>", sec_errstr(result));
68	}
69
70loser:
71	if (keychain)
72		CFRelease(keychain);
73
74	return result;
75}
76
77int
78keychain_lock(int argc, char * const *argv)
79{
80	char *keychainName = NULL;
81	int ch, result = 0;
82	Boolean lockAll = FALSE;
83	while ((ch = getopt(argc, argv, "ah")) != -1)
84	{
85		switch  (ch)
86		{
87		case 'a':
88			lockAll = TRUE;
89			break;
90		case '?':
91		default:
92			return 2; /* @@@ Return 2 triggers usage message. */
93		}
94	}
95	argc -= optind;
96	argv += optind;
97
98	if (argc == 1 && !lockAll)
99	{
100		keychainName = argv[0];
101		if (*keychainName == '\0')
102		{
103			result = 2;
104			goto loser;
105		}
106	}
107	else if (argc != 0)
108		return 2;
109
110	if (lockAll)
111		result = do_lock_all();
112	else
113		result = do_lock(keychainName);
114
115loser:
116
117	return result;
118}
119