RE: copy some kernel extensions to /tmp directory and then load that kext when program Launches
RE: copy some kernel extensions to /tmp directory and then load that kext when program Launches
- Subject: RE: copy some kernel extensions to /tmp directory and then load that kext when program Launches
- From: Rahulkumar Tibdewal <email@hidden>
- Date: Tue, 2 Jun 2009 22:01:18 +0530
- Acceptlanguage: en-US, en-IN
- Thread-topic: copy some kernel extensions to /tmp directory and then load that kext when program Launches
Hi,
Yes!!! Rightly said so.
Well here are basic steps taken to implement feature.
1. Setup the tag value associated with this NKE in preparation for swallowing pack and re-injecting them using mbuf_tag_id_find()
2. Register the Network Kernel Extension, so it will attach the filter to every socket that system created using sflt_register()
3. Register the IPV4 with domain AF_INET, type of SOCK_STREAm and TCP protocol. Using sflt_register()
4. Register the IPV6 with domain AF_INET, type of SOCK_STREAm and TCP protocol. Using sflt_register()
5. Now we register our control structure so that we can be found/communicated by user level process. Using ctl_register()
-- this all is done in kext.
6. Now use setsockopt() so that block and unblock can be done. This is done Externally.
I hope this information is enough. When I block Internet, it takes 5-6 seconds. Whereas when we unblock, it works on a click.
Can u suggest something.
> there are ways to force the door.
May I know what ways are u talking about.
Thanks
Rahul
-----Original Message-----
From: darwin-kernel-bounces+rahulkumar_tibdewal=email@hidden [mailto:darwin-kernel-bounces+rahulkumar_tibdewal=email@hidden] On Behalf Of mm w
Sent: Tuesday, June 02, 2009 9:15 PM
To: email@hidden
Subject: Re: copy some kernel extensions to /tmp directory and then load that kext when program Launches
Hello, it's hard to say without seeing something there are several
options, timeouts, it's not because you are asking something that the
system won't delay your request (there are ways to force the door), if
you could describe your mechanism? anyway you could "block/redirect"
the traffic just by applying an ipfw rule, did you make a kext for
making a kext (the same privilege issue? ) or there are some other
reasons?, if you answer to those questions maybe people could answer,
we are not behind your computer or inside your project, so people need
to have a valuable description to make assumptions
Best,
On Tue, Jun 2, 2009 at 2:58 AM, Rahulkumar Tibdewal
<email@hidden> wrote:
> Hi,
>
> Well If you remember I was working on developing a kext which can block the access to the internet of the Standard user(client) once server drops the message block internet.
> It's done. But the problem is delay. It takes normally 10 seconds to execute the command of stop internet on client machine. Is it due to kext or some thing else?
> How can we take care of this?
>
> Thanks
> Rahul
>
>
>
> DISCLAIMER
> ==========
> This e-mail may contain privileged and confidential information which is the property of Persistent Systems Ltd. It is intended only for the use of the individual or entity to which it is addressed. If you are not the intended recipient, you are not authorized to read, retain, copy, print, distribute or use this message. If you have received this communication in error, please notify the sender and delete all copies of this message. Persistent Systems Ltd. does not accept any liability for virus infected mails.
>
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Darwin-kernel mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden
DISCLAIMER
==========
This e-mail may contain privileged and confidential information which is the property of Persistent Systems Ltd. It is intended only for the use of the individual or entity to which it is addressed. If you are not the intended recipient, you are not authorized to read, retain, copy, print, distribute or use this message. If you have received this communication in error, please notify the sender and delete all copies of this message. Persistent Systems Ltd. does not accept any liability for virus infected mails.
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Darwin-kernel mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden