[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Kernel authorization (Kauth) from user space

Subject: Kernel authorization (Kauth) from user space
From: "Liviu Andron" <email@hidden>
Date: Thu, 11 Oct 2007 16:05:53 +0300
Delivered-to: email@hidden
Delivered-to: email@hidden
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:to:subject:mime-version:content-type; bh=A4wrwWJDZlgqs17X7vf668yD+UOJTh7F45qisCbor8Q=; b=ZYlGbTK0XjmxEU8hiyauTOs2tE95P101K+iEIeAVq2uiG99Mgs3YkNZl3GLr9CAPPXExKfBLg8D7lCl/nvWWYeSquko7eVnGfkg7aBNPGR5fmN4rkiAGsMgdjpvXEGXvdrH5pS69nnjZQ6s8JzLh8qurzHiocHlTnvSiXK77wok=
Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:to:subject:mime-version:content-type; b=hvYyw4RQaiLxHmJ062ZTMI76K8Vb/GIT9fwHm8j2/gh14adln72xhyNhSpn+2Jpfezb2D+/9f0UH2S0wrJEWFLhERLTxrCZJRls4n74oifFOyUYkZYRgo28pmzaJ2LgVwMCa1qbv+RqqybLjB6WguZiPgNlpV8wPi35zTWOOyW4=

Hi,

I have some troubles in accessing files from user space using Kauth. Access means read or write.

1) The recommended way from the technical documentation is to read/write in kernel, but all the mailing lists discussions say to do it in user space.

2) Assuming that I send the path from kernel to the user space daemon (returned by vn_getpath from the vnode parameter) , I have the following issues:
       - for files with paths longer than MATXPAHTLEN (1024) , which can be created with Finder:
               - vn_getpath returns error 28 (KERN_INVALID_POLICY)
               - the callback for OPEN/CLOSE actions is called with empty path (arg1) or it's not called at all

3) A second option could be to have a file descriptor in the daemon's files table, directly created from kernel space from vnode parameter:
       - but it seems that there's no KPI for this, not even some exported BSD functions (falloc)

4) Another possible solution seems to be using VNOP_READ/VNOP_WRITE in kernel space and transfer data to daemon

Thanks in advance,

Liviu

 _______________________________________________
Do not post admin requests to the list. They will be ignored.
Darwin-kernel mailing list      (email@hidden)
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/darwin-kernel/email@hidden

This email sent to email@hidden

Follow-Ups:
- Reading the version of a kext
  - From: Régis Duchesne <email@hidden>
- Re: Kernel authorization (Kauth) from user space
  - From: Michael Smith <email@hidden>
- RE: Kernel authorization (Kauth) from user space
  - From: "Jernej Azarija" <email@hidden>

Prev by Date: How to proxy a non blocking connect with a socket filter?
Next by Date: RE: Kernel authorization (Kauth) from user space
Previous by thread: How to proxy a non blocking connect with a socket filter?
Next by thread: RE: Kernel authorization (Kauth) from user space
Index(es):
- Date
- Thread

Home