mirror of
https://github.com/veracrypt/VeraCrypt.git
synced 2026-05-17 10:01:31 +00:00
77e4830c99
APFS volume creation can still fail with Permission denied after preparing the raw and block device aliases because newfs_apfs performs privileged APFS container and volume operations beyond opening the device nodes. Route APFS formatting through the elevated CoreService path for non-root macOS runs. Keep the elevated interface narrow by sending only the target device and invoking user UID/GID, validate the device path on the privileged side, rebuild the formatter arguments there, and execute /sbin/newfs_apfs by absolute path to avoid PATH shadowing. Pass -U/-G so the created filesystem preserves the invoking user ownership. Apply the same path to GUI and text-mode creation.
139 lines
3.8 KiB
C++
139 lines
3.8 KiB
C++
/*
|
|
Derived from source code of TrueCrypt 7.1a, which is
|
|
Copyright (c) 2008-2012 TrueCrypt Developers Association and which is governed
|
|
by the TrueCrypt License 3.0.
|
|
|
|
Modifications and additions to the original source code (contained in this file)
|
|
and all other portions of this file are Copyright (c) 2013-2025 AM Crypto
|
|
and are governed by the Apache License 2.0 the full text of which is
|
|
contained in the file License.txt included in VeraCrypt binary and source
|
|
code distribution packages.
|
|
*/
|
|
|
|
#include "CoreServiceResponse.h"
|
|
#include "Platform/SerializerFactory.h"
|
|
|
|
namespace VeraCrypt
|
|
{
|
|
// CheckFilesystemResponse
|
|
void CheckFilesystemResponse::Deserialize (shared_ptr <Stream> stream)
|
|
{
|
|
}
|
|
|
|
void CheckFilesystemResponse::Serialize (shared_ptr <Stream> stream) const
|
|
{
|
|
Serializable::Serialize (stream);
|
|
}
|
|
|
|
// DismountFilesystemResponse
|
|
void DismountFilesystemResponse::Deserialize (shared_ptr <Stream> stream)
|
|
{
|
|
}
|
|
|
|
void DismountFilesystemResponse::Serialize (shared_ptr <Stream> stream) const
|
|
{
|
|
Serializable::Serialize (stream);
|
|
}
|
|
|
|
// DismountVolumeResponse
|
|
void DismountVolumeResponse::Deserialize (shared_ptr <Stream> stream)
|
|
{
|
|
DismountedVolumeInfo = Serializable::DeserializeNew <VolumeInfo> (stream);
|
|
}
|
|
|
|
void DismountVolumeResponse::Serialize (shared_ptr <Stream> stream) const
|
|
{
|
|
Serializable::Serialize (stream);
|
|
Serializer sr (stream);
|
|
DismountedVolumeInfo->Serialize (stream);
|
|
}
|
|
|
|
// GetDeviceSectorSizeResponse
|
|
void GetDeviceSectorSizeResponse::Deserialize (shared_ptr <Stream> stream)
|
|
{
|
|
Serializer sr (stream);
|
|
sr.Deserialize ("Size", Size);
|
|
}
|
|
|
|
void GetDeviceSectorSizeResponse::Serialize (shared_ptr <Stream> stream) const
|
|
{
|
|
Serializable::Serialize (stream);
|
|
Serializer sr (stream);
|
|
sr.Serialize ("Size", Size);
|
|
}
|
|
|
|
// GetDeviceSizeResponse
|
|
void GetDeviceSizeResponse::Deserialize (shared_ptr <Stream> stream)
|
|
{
|
|
Serializer sr (stream);
|
|
sr.Deserialize ("Size", Size);
|
|
}
|
|
|
|
void GetDeviceSizeResponse::Serialize (shared_ptr <Stream> stream) const
|
|
{
|
|
Serializable::Serialize (stream);
|
|
Serializer sr (stream);
|
|
sr.Serialize ("Size", Size);
|
|
}
|
|
|
|
// GetHostDevicesResponse
|
|
void GetHostDevicesResponse::Deserialize (shared_ptr <Stream> stream)
|
|
{
|
|
Serializable::DeserializeList (stream, HostDevices);
|
|
}
|
|
|
|
void GetHostDevicesResponse::Serialize (shared_ptr <Stream> stream) const
|
|
{
|
|
Serializable::Serialize (stream);
|
|
Serializable::SerializeList (stream, HostDevices);
|
|
}
|
|
|
|
#ifdef TC_MACOSX
|
|
// ExecuteMacOSXAPFSFormatterResponse
|
|
void ExecuteMacOSXAPFSFormatterResponse::Deserialize (shared_ptr <Stream> stream)
|
|
{
|
|
}
|
|
|
|
void ExecuteMacOSXAPFSFormatterResponse::Serialize (shared_ptr <Stream> stream) const
|
|
{
|
|
Serializable::Serialize (stream);
|
|
}
|
|
#endif
|
|
|
|
// MountVolumeResponse
|
|
void MountVolumeResponse::Deserialize (shared_ptr <Stream> stream)
|
|
{
|
|
Serializer sr (stream);
|
|
MountedVolumeInfo = Serializable::DeserializeNew <VolumeInfo> (stream);
|
|
}
|
|
|
|
void MountVolumeResponse::Serialize (shared_ptr <Stream> stream) const
|
|
{
|
|
Serializable::Serialize (stream);
|
|
Serializer sr (stream);
|
|
MountedVolumeInfo->Serialize (stream);
|
|
}
|
|
|
|
// SetFileOwnerResponse
|
|
void SetFileOwnerResponse::Deserialize (shared_ptr <Stream> stream)
|
|
{
|
|
}
|
|
|
|
void SetFileOwnerResponse::Serialize (shared_ptr <Stream> stream) const
|
|
{
|
|
Serializable::Serialize (stream);
|
|
}
|
|
|
|
TC_SERIALIZER_FACTORY_ADD_CLASS (CheckFilesystemResponse);
|
|
TC_SERIALIZER_FACTORY_ADD_CLASS (DismountFilesystemResponse);
|
|
TC_SERIALIZER_FACTORY_ADD_CLASS (DismountVolumeResponse);
|
|
TC_SERIALIZER_FACTORY_ADD_CLASS (GetDeviceSectorSizeResponse);
|
|
TC_SERIALIZER_FACTORY_ADD_CLASS (GetDeviceSizeResponse);
|
|
TC_SERIALIZER_FACTORY_ADD_CLASS (GetHostDevicesResponse);
|
|
#ifdef TC_MACOSX
|
|
TC_SERIALIZER_FACTORY_ADD_CLASS (ExecuteMacOSXAPFSFormatterResponse);
|
|
#endif
|
|
TC_SERIALIZER_FACTORY_ADD_CLASS (MountVolumeResponse);
|
|
TC_SERIALIZER_FACTORY_ADD_CLASS (SetFileOwnerResponse);
|
|
}
|