security_framework_sys/
code_signing.rs

1use core_foundation_sys::base::CFTypeID;
2use core_foundation_sys::base::OSStatus;
3use core_foundation_sys::dictionary::CFDictionaryRef;
4use core_foundation_sys::string::CFStringRef;
5use core_foundation_sys::url::CFURLRef;
6
7pub enum OpaqueSecRequirementRef {}
8pub type SecRequirementRef = *mut OpaqueSecRequirementRef;
9
10pub enum OpaqueSecCodeRef {}
11pub type SecCodeRef = *mut OpaqueSecCodeRef;
12
13pub enum OpaqueSecStaticCodeRef {}
14pub type SecStaticCodeRef = *mut OpaqueSecStaticCodeRef;
15
16pub type SecCSFlags = u32;
17pub const kSecCSCheckAllArchitectures: SecCSFlags = 1 << 0;
18pub const kSecCSDoNotValidateExecutable: SecCSFlags = 1 << 1;
19pub const kSecCSDoNotValidateResources: SecCSFlags = 1 << 2;
20pub const kSecCSBasicValidateOnly: SecCSFlags =
21    kSecCSDoNotValidateExecutable | kSecCSDoNotValidateResources;
22pub const kSecCSCheckNestedCode: SecCSFlags = 1 << 3;
23pub const kSecCSStrictValidate: SecCSFlags = 1 << 4;
24pub const kSecCSFullReport: SecCSFlags = 1 << 5;
25pub const kSecCSCheckGatekeeperArchitectures: SecCSFlags = (1 << 6) | kSecCSCheckAllArchitectures;
26pub const kSecCSRestrictSymlinks: SecCSFlags = 1 << 7;
27pub const kSecCSRestrictToAppLike: SecCSFlags = 1 << 8;
28pub const kSecCSRestrictSidebandData: SecCSFlags = 1 << 9;
29pub const kSecCSUseSoftwareSigningCert: SecCSFlags = 1 << 10;
30pub const kSecCSValidatePEH: SecCSFlags = 1 << 11;
31pub const kSecCSSingleThreaded: SecCSFlags = 1 << 12;
32// 13 - 15 are unused
33// This is only available in macOS 11.3:
34// pub const kSecCSAllowNetworkAccess: SecCSFlags = 1 << 16;
35// 17 - 25 are unused
36pub const kSecCSQuickCheck: SecCSFlags = 1 << 26;
37pub const kSecCSCheckTrustedAnchors: SecCSFlags = 1 << 27;
38pub const kSecCSReportProgress: SecCSFlags = 1 << 28;
39pub const kSecCSNoNetworkAccess: SecCSFlags = 1 << 29;
40pub const kSecCSEnforceRevocationChecks: SecCSFlags = 1 << 30;
41pub const kSecCSConsiderExpiration: SecCSFlags = 1 << 31;
42
43extern "C" {
44    pub static kSecGuestAttributeArchitecture: CFStringRef;
45    pub static kSecGuestAttributeAudit: CFStringRef;
46    pub static kSecGuestAttributeCanonical: CFStringRef;
47    pub static kSecGuestAttributeDynamicCode: CFStringRef;
48    pub static kSecGuestAttributeDynamicCodeInfoPlist: CFStringRef;
49    pub static kSecGuestAttributeHash: CFStringRef;
50    pub static kSecGuestAttributeMachPort: CFStringRef;
51    pub static kSecGuestAttributePid: CFStringRef;
52    pub static kSecGuestAttributeSubarchitecture: CFStringRef;
53
54    pub fn SecCodeGetTypeID() -> CFTypeID;
55    pub fn SecStaticCodeGetTypeID() -> CFTypeID;
56    pub fn SecRequirementGetTypeID() -> CFTypeID;
57
58    pub fn SecCodeCheckValidity(
59        code: SecCodeRef,
60        flags: SecCSFlags,
61        requirement: SecRequirementRef,
62    ) -> OSStatus;
63
64    pub fn SecCodeCopyGuestWithAttributes(
65        host: SecCodeRef,
66        attrs: CFDictionaryRef,
67        flags: SecCSFlags,
68        guest: *mut SecCodeRef,
69    ) -> OSStatus;
70
71    pub fn SecCodeCopyPath(
72        code: SecStaticCodeRef,
73        flags: SecCSFlags,
74        path: *mut CFURLRef,
75    ) -> OSStatus;
76
77    pub fn SecCodeCopySelf(flags: SecCSFlags, out: *mut SecCodeRef) -> OSStatus;
78
79    pub fn SecRequirementCreateWithString(
80        text: CFStringRef,
81        flags: SecCSFlags,
82        requirement: *mut SecRequirementRef,
83    ) -> OSStatus;
84
85    pub fn SecStaticCodeCheckValidity(
86        code: SecStaticCodeRef,
87        flags: SecCSFlags,
88        requirement: SecRequirementRef,
89    ) -> OSStatus;
90
91    pub fn SecStaticCodeCreateWithPath(
92        path: CFURLRef,
93        flags: SecCSFlags,
94        code: *mut SecStaticCodeRef,
95    ) -> OSStatus;
96}
security_framework_sys/code_signing.rs

security_framework_sys/
code_signing.rs
