SecHostSelectGuest
Makes the calling thread the proxy for a specified guest.
Declaration
OSStatus SecHostSelectGuest(SecGuestRef guestRef, SecCSFlags flags);Parameters
- guestRef:
A guest code object identifying the code on whose behalf the calling thread is to act. To indicate that the calling thread will act on its own behalf, rather than for any guest, pass Ksecnoguest.
- flags:
Optional flags; see Seccsflags for possible values. Pass Kseccsdefaultflags for standard behavior.
Return Value
A result code. See Code Signing Services Result Codes.
Discussion
The specified guest must be dynamically valid. This function works both for hosts acting in proxy mode and those acting in dynamic mode. The selected guest setting remains in effect until it is changed or the thread terminates.
This function tells the system that your application is acting on behalf of the selected guest (or on its own behalf if you specify kSecNoGuest for the guestRef parameter). This function acts on a per-thread basis; that is, each of your application’s threads can call this function to select a guest for that thread. Thereafter, the system assumes that any action taken by your application on that thread is on behalf of the selected guest. For example, if your application attempts to access the keychain, the system assumes that the selected guest is the application that is attempting to access the keychain and acts accordingly. You can call this function as often as necessary to act on behalf of as many guests as you wish.
Note that if you are using blocks to implement concurrency, you can’t tell which thread your code will be running on. Therefore, you must make this function call at the beginning of each block to be sure that the guest selection is set correctly for the thread.