• Open Menu Close Menu
  • Apple
  • Shopping Bag
  • Apple
  • Mac
  • iPad
  • iPhone
  • Watch
  • TV
  • Music
  • Support
  • Search apple.com
  • Shopping Bag

Lists

Open Menu Close Menu
  • Terms and Conditions
  • Lists hosted on this site
  • Email the Postmaster
  • Tips for posting to public mailing lists
Kernel authorization (Kauth) from user space
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Kernel authorization (Kauth) from user space


  • Subject: Kernel authorization (Kauth) from user space
  • From: "Liviu Andron" <email@hidden>
  • Date: Thu, 11 Oct 2007 16:05:53 +0300

Hi,

 I have some troubles in accessing files from user space using Kauth. Access means read or write.
 
 1) The recommended way from the technical documentation is to read/write in kernel, but all the mailing lists discussions say to do it in user space.

 2) Assuming that I send the path from kernel  to the user space daemon (returned by vn_getpath from the vnode parameter) , I have the following issues:
        - for files with paths longer than MATXPAHTLEN (1024) , which can be created with Finder:
                - vn_getpath returns error 28 (KERN_INVALID_POLICY)
                - the callback for OPEN/CLOSE actions is called with empty path (arg1) or it's not called at all

 3) A second option could be to have a file descriptor in the daemon's files table, directly created from kernel space from vnode parameter:
        - but it seems that there's no KPI for this, not even some exported BSD functions (falloc)
 
 4) Another possible solution seems  to be using VNOP_READ/VNOP_WRITE in kernel space and transfer data to daemon

Thanks in advance,

Liviu
 _______________________________________________
Do not post admin requests to the list. They will be ignored.
Darwin-kernel mailing list      (email@hidden)
Help/Unsubscribe/Update your Subscription:

This email sent to email@hidden

  • Follow-Ups:
    • Reading the version of a kext
      • From: RĂ©gis Duchesne <email@hidden>
    • Re: Kernel authorization (Kauth) from user space
      • From: Michael Smith <email@hidden>
    • RE: Kernel authorization (Kauth) from user space
      • From: "Jernej Azarija" <email@hidden>
  • Prev by Date: How to proxy a non blocking connect with a socket filter?
  • Next by Date: RE: Kernel authorization (Kauth) from user space
  • Previous by thread: How to proxy a non blocking connect with a socket filter?
  • Next by thread: RE: Kernel authorization (Kauth) from user space
  • Index(es):
    • Date
    • Thread