Do Keychain reauthorization at update time

chrome/installer/mac/dmgdiffer.sh

 #!/bin/bash -p
 
-# Copyright (c) 2011 The Chromium Authors. All rights reserved.
+# Copyright (c) 2012 The Chromium Authors. All rights reserved.
 # Use of this source code is governed by a BSD-style license that can be
 # found in the LICENSE file.
 
 # usage: dmgdiffer.sh product_name old_dmg new_dmg patch_dmg
 #
 # dmgdiffer creates a disk image containing a binary update able to patch
 # a product originally distributed in old_dmg to the version in new_dmg. Much
 # of this script is generic, but the make_patch_fs function is specific to
 # a product: in this case, Google Chrome.
 #
@@ skipping 121 matching lines @@
 make_patch_fs() {
   local product_name="${1}"
   local old_fs="${2}"
   local new_fs="${3}"
   local patch_fs="${4}"
 
   readonly APP_NAME="${product_name}.app"
   readonly APP_NAME_RE="${product_name}\\.app"
   readonly APP_PLIST="Contents/Info"
   readonly APP_VERSION_KEY="CFBundleShortVersionString"
+  readonly APP_BUNDLEID_KEY="CFBundleIdentifier"
   readonly KS_VERSION_KEY="KSVersion"
   readonly KS_PRODUCT_KEY="KSProductID"
   readonly KS_CHANNEL_KEY="KSChannelID"
   readonly VERSIONS_DIR="Contents/Versions"
   readonly BUILD_RE="^[0-9]+\\.[0-9]+\\.([0-9]+)\\.[0-9]+\$"
   readonly MIN_BUILD=434
 
   local product_url="http://www.google.com/chrome/"
   if [[ "${product_name}" = "Google Chrome Canary" ]]; then
     product_url="http://tools.google.com/dlpage/chromesxs"
   fi
 
   local old_app_path="${old_fs}/${APP_NAME}"
   local old_app_plist="${old_app_path}/${APP_PLIST}"
   local old_app_version
   if ! old_app_version="$(defaults read "${old_app_plist}" \
                                         "${APP_VERSION_KEY}")"; then
     err "could not read old app version"
     exit 10
   fi
   if ! [[ "${old_app_version}" =~ ${BUILD_RE} ]]; then
     err "old app version not of expected format"
     exit 10
   fi
   local old_app_version_build="${BASH_REMATCH[1]}"
 
+  local old_app_bundleid
+  if ! old_app_bundleid="$(defaults read "${old_app_plist}" \
+                                         "${APP_BUNDLEID_KEY}")"; then
+    err "could not read old app bundle ID"
+    exit 10
+  fi
+
   local old_ks_plist="${old_app_plist}"
   local old_ks_version
   if ! old_ks_version="$(defaults read "${old_ks_plist}" \
                                        "${KS_VERSION_KEY}")"; then
     err "could not read old Keystone version"
     exit 10
   fi
 
   local new_app_path="${new_fs}/${APP_NAME}"
   local new_app_plist="${new_app_path}/${APP_PLIST}"
@@ skipping 47 matching lines @@
 
   local old_versioned_dir="${old_app_path}/${VERSIONS_DIR}/${old_app_version}"
   local new_versioned_dir="${new_app_path}/${VERSIONS_DIR}/${new_app_version}"
 
   if ! cp -p "${SCRIPT_DIR}/keystone_install.sh" \
              "${patch_fs}/.keystone_install"; then
     err "could not copy .keystone_install"
     exit 13
   fi
 
+  local patch_keychain_reauthorize_dir="${patch_fs}/.keychain_reauthorize"
+  if ! mkdir "${patch_keychain_reauthorize_dir}"; then
+    err "could not mkdir patch_keychain_reauthorize_dir"
+    exit 13
+  fi
+
+  if ! cp -p "${SCRIPT_DIR}/.keychain_reauthorize/${old_app_bundleid}" \
+             "${patch_keychain_reauthorize_dir}/${old_app_bundleid}"; then
+    err "could not copy keychain_reauthorize"
+    exit 13
+  fi
+
   local patch_dotpatch_dir="${patch_fs}/.patch"
   if ! mkdir "${patch_dotpatch_dir}"; then
     err "could not mkdir patch_dotpatch_dir"
     exit 13
   fi
 
   if ! cp -p "${SCRIPT_DIR}/dirpatcher.sh" \
              "${SCRIPT_DIR}/goobspatch" \
              "${SCRIPT_DIR}/liblzma_decompress.dylib" \
              "${SCRIPT_DIR}/xzdec" \
@@ skipping 202 matching lines @@
   trap - EXIT
 }
 
 if [[ ${#} -ne 4 ]]; then
   usage
   exit 2
 fi
 
 main "${@}"
 exit ${?}