-
Notifications
You must be signed in to change notification settings - Fork 30
/
chkcs.c
89 lines (78 loc) · 1.8 KB
/
chkcs.c
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
/*-
* xnumon - monitor macOS for malicious activity
* https://www.roe.ch/xnumon
*
* Copyright (c) 2017-2019, Daniel Roethlisberger <daniel@roe.ch>.
* All rights reserved.
*
* Licensed under the Open Software License version 3.0.
*/
/*
* Simple code signature extraction utility that uses the xnumon code signature
* code to acquire code signature metadata from either a process or a path.
*/
#include "codesign.h"
#include <string.h>
#include <stdbool.h>
#include <stdlib.h>
#include <stdio.h>
#ifndef __BSD__
#include <getopt.h>
#endif /* !__BSD__ */
static void
fusage(FILE *f, const char *argv0) {
fprintf(f,
"Usage: %s [-v] <path>\n"
" %s [-v] <pid>\n"
" %s -h\n"
" -v verbose: print diagnostic messages\n"
" -h print usage and exit\n"
, argv0, argv0, argv0);
}
int
main(int argc, char *argv[]) {
int ch;
config_t cfg;
bzero(&cfg, sizeof(config_t));
while ((ch = getopt(argc, argv, "vh")) != -1) {
switch (ch) {
case 'v':
cfg.debug = true;
break;
case 'h':
fusage(stdout, argv[0]);
exit(EXIT_SUCCESS);
case '?':
exit(EXIT_FAILURE);
default:
fusage(stderr, argv[0]);
exit(EXIT_FAILURE);
}
}
if (argc != optind + 1) {
fusage(stderr, argv[0]);
exit(EXIT_FAILURE);
}
argc -= optind;
argv += optind;
if (codesign_init(&cfg) != 0) {
fprintf(stderr, "Failed to initialize codesign module\n");
codesign_fini();
exit(EXIT_FAILURE);
}
bool good;
codesign_t *cs;
if (argv[0][0] >= '0' && argv[0][0] <= '9')
cs = codesign_new(NULL, atoi(argv[0]));
else
cs = codesign_new(argv[0], -1);
if (!cs) {
fprintf(stderr, "Failed to acquire code signature!\n");
exit(EXIT_FAILURE);
}
codesign_fprint(stdout, cs);
good = codesign_is_good(cs);
codesign_free(cs);
codesign_fini();
exit(good ? EXIT_SUCCESS : EXIT_FAILURE);
}