xolo-admin 1.0.1 → 2.0.2

data/lib/xolo/core/security_cmd.rb

@@ -0,0 +1,128 @@
+# Copyright 2025 Pixar
+#
+#    Licensed under the terms set forth in the LICENSE.txt file available at
+#    at the root of this project.
+#
+#
+
+# frozen_string_literal: true
+
+# main module
+module Xolo
+
+  module Core
+
+    # Personal credentials for users of 'xadm', stored in the login keychain
+    #
+    module SecurityCmd
+
+      # Constants
+      ##############################
+      ##############################
+
+      # The security command
+      SEC_COMMAND = '/usr/bin/security'
+
+      # exit status when the login keychain can't be accessed because we aren't in a GUI session
+      SEC_STATUS_NO_GUI_ERROR = 36
+
+      # exit status when the keychain password provided is incorrect
+      SEC_STATUS_AUTH_ERROR = 51
+
+      # exit status when the desired item isn't found in the keychain
+      SEC_STATUS_NOT_FOUND_ERROR = 44
+
+      # Module methods
+      ##############################
+      ##############################
+
+      # when this module is included
+      def self.included(includer)
+        Xolo.verbose_include includer, self
+      end
+
+      # Instance Methods
+      ##########################
+      ##########################
+
+      # Run the security command in interactive mode on a given keychain,
+      # passing in a subcommand and its arguments. so that they don't appear in the
+      # `ps` output
+      #
+      # @param cmd [String] the subcommand being passed to 'security' with
+      #   all needed options. It will not be visible outide this process, so
+      #   its OK to put passwords into the options.
+      #
+      # @return [String] the stdout of the 'security' command.
+      #
+      ######
+      def run_security(cmd)
+        output = Xolo::BLANK
+        errs = Xolo::BLANK
+
+        Open3.popen3("#{SEC_COMMAND} -i") do |stdin, stdout, stderr, wait_thr|
+          # pid = wait_thr.pid # pid of the started process.
+          stdin.puts cmd
+          stdin.close
+
+          output = stdout.read
+          errs = stderr.read
+
+          @security_exit_status = wait_thr.value # Process::Status object returned.
+        end
+
+        # exit 44 is 'The specified item could not be found in the keychain'
+        return output.chomp if @security_exit_status.success?
+
+        case @security_exit_status.exitstatus
+        when SEC_STATUS_AUTH_ERROR
+          raise Xolo::KeychainError, 'Problem accessing login keychain. Is it locked?'
+
+        when SEC_STATUS_NOT_FOUND_ERROR
+          raise Xolo::NoSuchItemError, "No xolo admin password. Please run 'xadm config'"
+
+        else
+          errs.chomp!
+          errs =~ /: returned\s+(-?\d+)$/
+          errnum = Regexp.last_match(1)
+          desc = errnum ? security_error_desc(errnum) : errs
+          desc ||= errs
+          raise Xolo::KeychainError, "#{desc.gsub("\n", '; ')}; exit status #{@security_exit_status.exitstatus}"
+        end # case
+      end # run_security
+
+      # use `security error` to get a description of an error number
+      ##############
+      def security_error_desc(num)
+        desc = `#{SEC_COMMAND} error #{num}`
+        return if desc.include?('unknown error')
+
+        desc.chomp.split(num).last
+      rescue
+        nil
+      end
+
+      # given a string, wrap it in single quotes and escape internal single quotes
+      # and backslashes so it can be used in the interactive 'security' command
+      #
+      # @param str[String] the string to escape
+      #
+      # @return [String] the escaped string
+      ###################
+      def security_escape(str)
+        # first escape backslashes
+        str = str.to_s.gsub '\\', '\\\\\\'
+
+        # then single quotes
+        str.gsub! "'", "\\\\'"
+
+        # if other things need escaping, add them here
+
+        "'#{str}'"
+      end # security_escape
+
+    end # module Prefs
+
+  end # module Admin
+
+end # module Xolo

data/lib/xolo/core/version.rb

@@ -12,7 +12,7 @@ module Xolo
 
     module Version
 
-      VERSION = '1.0.1'.freeze
+      VERSION = '2.0.2'.freeze
 
     end
 

data/lib/xolo/core.rb

@@ -39,6 +39,7 @@ module Xolo
 end # module Xolo
 
 require 'xolo/core/json_wrappers'
+require 'xolo/core/security_cmd'
 require 'xolo/core/base_classes/configuration'
 require 'xolo/core/base_classes/server_object'
 require 'xolo/core/base_classes/title'

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: xolo-admin
 version: !ruby/object:Gem::Version
-  version: 1.0.1
+  version: 2.0.2
 platform: ruby
 authors:
 - Chris Lasell
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2025-10-03 00:00:00.000000000 Z
+date: 2026-05-16 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: faraday
@@ -68,14 +68,8 @@ dependencies:
         version: '2.1'
 description: |
   == Xolo
-  Xolo (sorta pronounced 'show-low') is an HTTPS server and set of command-line tools for macOS that provide automatable access to the software deployment and patch management aspects of {Jamf Pro}[https://www.jamf.com/products/jamf-pro/] and the {Jamf Title Editor}[https://learn.jamf.com/en-US/bundle/title-editor/page/About_Title_Editor.html]. It enhances Jamf Pro's abilities in many ways:
+  Xolo (sorta pronounced 'show-low') is an HTTPS server and set of command-line tools for macOS that provide automatable access to the software deployment and patch management aspects of {Jamf Pro}[https://www.jamf.com/products/jamf-pro/] and the {Jamf Title Editor}[https://learn.jamf.com/en-US/bundle/title-editor/page/About_Title_Editor.html]. It enhances Jamf Pro's abilities in many ways.
 
-  * Management of titles and versions/patches is scriptable and automatable, allowing developers and admins to integrate with CI/CD workflows.
-  * Simplifies and standardizes the complex, multistep manual process of managing titles and patches using the Title Editor and Patch Management web interfaces.
-  * Client installs can be performed by remotely via ssh and/or MDM
-  * Automated pre-release piloting of new versions/patches
-  * Titles can be expired (auto-uninstalled) after a period of disuse, reclaiming unused licenses.
-  * And more!
 
   The xolo-admin gem packages the code needed to run 'xadm', the command-line tool for system administrators to deploy and maintain software titles using Xolo.
 email: xolo@pixar.com
@@ -118,6 +112,7 @@ files:
 - lib/xolo/core/json_wrappers.rb
 - lib/xolo/core/loading.rb
 - lib/xolo/core/output.rb
+- lib/xolo/core/security_cmd.rb
 - lib/xolo/core/version.rb
 homepage: https://pixaranimationstudios.github.io/xolo-home/
 licenses: