Re: Integrity checks for Mac kernel extensions
Re: Integrity checks for Mac kernel extensions
- Subject: Re: Integrity checks for Mac kernel extensions
- From: al ameen shah <email@hidden>
- Date: Fri, 24 Aug 2012 11:15:30 -0700
If the KEXT could be installed in a custom location (/Library/Application Support/foo/bar for example) so that the system will not load it automatically, then a launchd daemon could be used to verify the KEXT's integrity before loading it.
Thanks,
Ameen.
On Fri, Aug 24, 2012 at 11:04 AM, Ken Hornstein
<email@hidden> wrote:
>What happens if the root filesystem isn't mounted (which it typically
>isn't when 99% of kernel extensions are loaded, which is what the
>OP asked for)?
Wait ... the root filesystem isn't mounted when kexts are loaded? And
kextd is running? How does THAT work? I will freely confess that when
I did this it was well pass system boot time, so obviously the root filesystem
was mounted.
--Ken
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Darwin-kernel mailing list (
email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to
email@hidden