Revision [296]

This is an old revision of secCanCreatePathOfSize made by JohnMcIntosh on 2008-10-21 03:46:23.

 

These are file based security callbacks. If they do not exist in the SecurityPlugin or if the SecurityPlugin does not exist they they are not used.

These security plugin calls then call the platform api calls

secCanCreatePathOfSize ioCanCreatePathOfSize if allowFileAccess return 1, otherwise call isAccessiblePathName
secCanDeletePathOfSize ioCanDeletePathOfSize if allowFileAccess return 1, otherwise call isAccessiblePathName
secCanGetFileTypeOfSize ioCanGetFileTypeOfSize return 1
secCanListPathOfSize ioCanListPathOfSize if allowFileAccess return 1, otherwise call isAccessiblePathName
secCanSetFileTypeOfSize ioCanSetFileTypeOfSize return 1
secDisableFileAccess ioDisableFileAccess allowFileAccess = 0
secCanDeleteFileOfSize ioCanDeleteFileOfSize if allowFileAccess return 1, otherwise call isAccessibleFileName
secCanOpenFileOfSizeWritable ioCanOpenFileOfSizeWritable if allowFileAccess return 1, otherwise call isAccessibleFileName
secCanRenameFileOfSize ioCanRenameFileOfSize if allowFileAccess return 1, otherwise call isAccessibleFileName
secHasFileAccess ioHasFileAccess return allowFileAccess


isAccessibleFileName
check to see if the filename is in the untrustedUserDirectory path

isAccessiblePathName
check to see if the path is in the untrustedUserDirectory path


MacIntosh
os-9/OSXCarbon

Cocoa:
TBD

iPhone

Unix

Windows
Check for c:\My Squeak\allowed\..\..\"

BUGS
macintosh does not check for ../../../ etc...
Also macintosh and windows not check lengths properly, see unix version for proper implementation
Also question about encoding, what is encoding for incoming data, versus trusted and untrusted directories




There are no comments on this page.
Valid XHTML :: Valid CSS: :: Powered by WikkaWiki