Re: Register a task's exception port from a kext
Re: Register a task's exception port from a kext
- Subject: Re: Register a task's exception port from a kext
- From: "nicolas vide" <email@hidden>
- Date: Sat, 4 Oct 2008 12:51:02 +1000
On Sat, Oct 4, 2008 at 1:52 AM, Quinn <email@hidden> wrote:
> Specifically, if you link against the entire kernel
Just to be sure, when you say link against the kernel, that means
building a new kernel with my IOService built-in?
I don't know if it is right but I have the feeling that Apple tries to
prevent as much as possible kext's accesses to the kernel functions &
data. I am neither a driver person nor a kernel programmer but I
played a little with Windows and FreeBSD and I could directly access
to processes data structures for example: It is ease to hide a process
just by modifying kernel data from a dynamic loadable driver.
Obviously, this is a big advantage to prevent anyone to play with
kernel internals data, however it means that third party software like
anti virus software or monitoring tools will suffer of performance and
security issues, right ?
> <http://www.opensource.apple.com/darwinsource/10.5/xnu-1228//bsd/uxkern/ux_exception.c>
Thank you very much for pointing this out!
Nicolas
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Darwin-kernel mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden