Re: KAuth and switching nodes
Re: KAuth and switching nodes
- Subject: Re: KAuth and switching nodes
- From: Mike Smith <email@hidden>
- Date: Fri, 27 Jan 2006 10:26:24 -0800
On Jan 27, 2006, at 5:10 AM, David Allouch wrote: Ok, so I went through the KAuth and I am really impressed.
This is going to be really useful for anti-viruses and auth. Not talking about the blocking of traced calls.
Now there is one thing I am missing in my kext. I am going to spend the week on it so I was wondering if anyone could point me to the right direction.
Kauth pass a vnode to the listener which is fine for allow/deny functionality.
What I have in the code I am porting (on top of allow/deny) is the additional functionality of replacing the vnode with a different pointer. (Don’t ask why, too long to explain)
This is not permitted.
Don't ask why, it would take too long to explain.(1) The direction I am heading to right now is to look at the process structure and compare/replace the vnode. Ugly but actually may work.
No, it won't work. The proc structure is opaque to loaded kauth modules, and assuming you are referring to the text vnode for a newly-starting process, it's not in there anyway. = Mike
(1) I would consider an exchange of hostages. Show me yours and I'll show you mine; that sort of thing...
|
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Darwin-kernel mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden