Re: Block access to removable drives.
Re: Block access to removable drives.
- Subject: Re: Block access to removable drives.
- From: Kevin Elliott <email@hidden>
- Date: Wed, 10 Apr 2013 13:45:39 -0700
I'm not sure what your actual product goal is, but based on your description I would not try and do this at the vnode level. To start with, it won't prevent dev nodes from showing up, so the user can still write/read directly from the device. If you're actually trying to prevent devices from appearing completely, I'd do it at the whole media layer in IOKit where you can control dev node publication.
-Kevin
On Apr 9, 2013, at 5:56 AM, simran charley <email@hidden> wrote:
> Hi,
>
>
>
> I want to block write or complete access to Removable devices (USB drives, pen drive, memory card including CD) in MAC OS.
>
>
>
> it possible to do this in KAUTH?
>
> Can We identify whether request is of removable device in vnode ?
>
>
>
> Can I use mac_policy api's with vnode listener?
>
> http://developer.apple.com/library/Mac/#documentation/Kernel/Reference/mac_policy_header_reference/Reference/reference.html
>
>
>
> (this question is repeated in darwin-driver. as it is related to BSD I have added here.)
>
>
>
> Thanks,
>
> Simran.
>
> _______________________________________________
> Do not post admin requests to the list. They will be ignored.
> Darwin-kernel mailing list (email@hidden)
> Help/Unsubscribe/Update your Subscription:
>
> This email sent to email@hidden
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Darwin-kernel mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden