Re: Finding loaded kext binaries
Re: Finding loaded kext binaries
- Subject: Re: Finding loaded kext binaries
- From: Rustam Muginov <email@hidden>
- Date: Sat, 17 Oct 2009 08:48:49 +0400
What i am trying to do is: enumerate all loaded kexts and check if they are codesigned and if signing authority is by apple. As far as I understand this is impossible to check codesign info of the kext loaded into kernel from userspace, so i am trying to check the on-disk binaries.
On Oct 17, 2009, at 7:58 AM, Michael Smith wrote: Is it possible to locate the binary for an arbitrary kext, which may
be outside of /System/Library/Extensions folder?
kextfind utility, as far as I understand, performing folder iteration
and need to scan all the disk if kext binary is not located at the
standard place.
In the general case, no. Loaded kexts don't hold a reference on the file that they were loaded from, so the kext bundle may be (and often is) moved or deleted immediately after the kext is loaded.
The kext may also not have ever come from a regular kext bundle; it may have been loaded via one of several other mechanisms.
If you were to tell us a bit more about the problem you're trying to solve, we might be able to offer some more constructive suggestions...
= Mike -- The lyf so short, the craft so long to lerne -- Chaucer
-- Sincerely, Rustam Muginov
|
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Darwin-dev mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden