Re: Integrity checks for Mac kernel extensions
Re: Integrity checks for Mac kernel extensions
- Subject: Re: Integrity checks for Mac kernel extensions
- From: Shantonu Sen <email@hidden>
- Date: Fri, 24 Aug 2012 10:51:46 -0700
What happens if the root filesystem isn't mounted (which it typically isn't when 99% of kernel extensions are loaded, which is what the OP asked for)?
Shantonu
On Aug 24, 2012, at 7:19 AM, Ken Hornstein <email@hidden> wrote:
>> I would like to perform self integrity checks (validate against a known
>> hash value) for my kernel extensions when they gets loaded into the memory.
>> Since i can't access files from the kernel extension, what is the best way
>> of achieving this within kernel extesions?
>
> You CAN read files from kernel extensions. The API exists. Some say that
> it's is very hard to use, but I personally didn't have a problem with it.
> I wouldn't want to do a lot of complicated stuff, but if you just need to
> read a file it should be doable.
>
> --Ken
> _______________________________________________
> Do not post admin requests to the list. They will be ignored.
> Darwin-kernel mailing list (email@hidden)
> Help/Unsubscribe/Update your Subscription:
>
> This email sent to email@hidden
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Darwin-kernel mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden