Use AuthorizedInstall to move Chrome into place and set up permissions

chrome/installer/mac/app/AppDelegate.m

 // Copyright 2016 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #import "AppDelegate.h"
 
 #import "Downloader.h"
 #import "InstallerWindowController.h"
 #import "NSError+ChromeInstallerAdditions.h"
 #import "NSAlert+ChromeInstallerAdditions.h"
@@ skipping 96 matching lines @@
 
 // Bridge method from Downloader to InstallerWindowController. Allows Downloader
 // to update the progressbar without having direct access to any UI obejcts.
 - (void)downloader:(Downloader*)download percentProgress:(double)percentage {
   [installerWindowController_ updateDownloadProgress:(double)percentage];
 }
 
 - (void)downloader:(Downloader*)download onSuccess:(NSURL*)diskImageURL {
   [installerWindowController_ updateStatusDescription:@"Installing..."];
   [installerWindowController_ enableLaunchButton];
-  // TODO: Add unpacking step here and pass the path to the app bundle inside
-  // the mounted disk image path to startInstall. Currently passing hardcoded
-  // path to preunpacked app bundle.
-  //[authorizedInstall_
-  //    startInstall:@"$HOME/Downloads/Google Chrome.app"];
 
   Unpacker* unpacker = [[Unpacker alloc] init];
   unpacker.delegate = self;
   [unpacker mountDMGFromURL:diskImageURL];
 }
 
 - (void)downloader:(Downloader*)download onFailure:(NSError*)error {
   NSError* downloadError =
       [NSError errorForAlerts:@"Download Failure"
               withDescription:@"Unable to download Google Chrome."
                 isRecoverable:NO];
   [self displayError:downloadError];
 }
 
 - (void)unpacker:(Unpacker*)unpacker onMountSuccess:(NSString*)tempAppPath {
+  SecStaticCodeRef diskStaticCode;
+  SecRequirementRef diskRequirement;
+  SecStaticCodeCreateWithPath(
+      (CFURLRef)CFBridgingRetain(
+          [NSURL fileURLWithPath:tempAppPath isDirectory:NO]),
+      kSecCSDefaultFlags, &diskStaticCode);
+  // TODO: update the requirement in here
+  SecRequirementCreateWithString((CFStringRef) @"anchor apple generic",
+                                 kSecCSDefaultFlags, &diskRequirement);
+  OSStatus oserror = 0;
+  if ((oserror = SecStaticCodeCheckValidity(diskStaticCode, kSecCSDefaultFlags,
+                                            diskRequirement)) !=
+      errSecSuccess) {
+    // TODO: add in more reasonable error handling
+    NSLog(@"verification failed: %d", oserror);
+  }
+
   // Calling this function will change the progress bar into an indeterminate
   // one. We won't need to update the progress bar any more after this point.
   [installerWindowController_ updateDownloadProgress:-1.0];
   // By disabling closing the window or quitting, we can tell the user that
   // closing the application at this point is not a good idea.
   window_.styleMask &= ~NSClosableWindowMask;
   preventTermination_ = YES;
 
-  // TODO: move the below code into AuthorizedInstall
-  NSString* chromeInApplicationsFolder = @"/Applications/Google Chromo.app";
+  NSString* chromeInApplicationsFolder =
+      [authorizedInstall_ startInstall:tempAppPath];
 
   NSError* error = nil;
-  if ([[NSFileManager defaultManager]
-          fileExistsAtPath:chromeInApplicationsFolder]) {
-    [[NSFileManager defaultManager] moveItemAtPath:chromeInApplicationsFolder
-                                            toPath:tempAppPath
-                                             error:nil];
-  }
-  if (![[NSFileManager defaultManager] moveItemAtPath:tempAppPath
-                                               toPath:chromeInApplicationsFolder
-                                                error:&error]) {
-    NSLog(@"%@", error);
-  }
-  // TODO: move the above code into AuthorizedInstall
-
   [[NSWorkspace sharedWorkspace]
       launchApplicationAtURL:[NSURL fileURLWithPath:chromeInApplicationsFolder
                                         isDirectory:NO]
                      options:NSWorkspaceLaunchDefault
                configuration:@{}
                        error:&error];
   if (error) {
     NSLog(@"Chrome failed to launch: %@", error);
   }
 
@@ skipping 37 matching lines @@
                            if (returnCode != [alertForUser quitResponse]) {
                              [self startDownload];
                            } else {
                              [NSApp terminate:nil];
                            }
                          }];
   });
 }
 
 @end