1/* 2 * Copyright (c) 2003-2004 Apple Computer, Inc. All Rights Reserved. 3 * 4 * @APPLE_LICENSE_HEADER_START@ 5 * 6 * This file contains Original Code and/or Modifications of Original Code 7 * as defined in and that are subject to the Apple Public Source License 8 * Version 2.0 (the 'License'). You may not use this file except in 9 * compliance with the License. Please obtain a copy of the License at 10 * http://www.opensource.apple.com/apsl/ and read it before using this 11 * file. 12 * 13 * The Original Code and all software distributed under the License are 14 * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER 15 * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES, 16 * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY, 17 * FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT. 18 * Please see the License for the specific language governing rights and 19 * limitations under the License. 20 * 21 * @APPLE_LICENSE_HEADER_END@ 22 * 23 * keychain_lock.c 24 */ 25 26#include "keychain_lock.h" 27 28#include "keychain_utilities.h" 29#include "readline.h" 30#include "security.h" 31 32#include <stdio.h> 33#include <stdlib.h> 34#include <string.h> 35#include <unistd.h> 36#include <Security/SecKeychain.h> 37 38static int 39do_lock_all(void) 40{ 41 OSStatus result = SecKeychainLockAll(); 42 if (result) 43 sec_perror("SecKeychainLockAll", result); 44 45 return result; 46} 47 48static int 49do_lock(const char *keychainName) 50{ 51 SecKeychainRef keychain = NULL; 52 OSStatus result; 53 54 if (keychainName) 55 { 56 keychain = keychain_open(keychainName); 57 if (!keychain) 58 { 59 result = 1; 60 goto loser; 61 } 62 } 63 64 result = SecKeychainLock(keychain); 65 if (result) 66 { 67 sec_error("SecKeychainLock %s: %s", keychainName ? keychainName : "<NULL>", sec_errstr(result)); 68 } 69 70loser: 71 if (keychain) 72 CFRelease(keychain); 73 74 return result; 75} 76 77int 78keychain_lock(int argc, char * const *argv) 79{ 80 char *keychainName = NULL; 81 int ch, result = 0; 82 Boolean lockAll = FALSE; 83 while ((ch = getopt(argc, argv, "ah")) != -1) 84 { 85 switch (ch) 86 { 87 case 'a': 88 lockAll = TRUE; 89 break; 90 case '?': 91 default: 92 return 2; /* @@@ Return 2 triggers usage message. */ 93 } 94 } 95 argc -= optind; 96 argv += optind; 97 98 if (argc == 1 && !lockAll) 99 { 100 keychainName = argv[0]; 101 if (*keychainName == '\0') 102 { 103 result = 2; 104 goto loser; 105 } 106 } 107 else if (argc != 0) 108 return 2; 109 110 if (lockAll) 111 result = do_lock_all(); 112 else 113 result = do_lock(keychainName); 114 115loser: 116 117 return result; 118} 119