Regd. tracking 'child pid' during 'fork'
Regd. tracking 'child pid' during 'fork'
- Subject: Regd. tracking 'child pid' during 'fork'
- From: Charu Tiwari <email@hidden>
- Date: Fri, 15 Jul 2016 13:41:24 +0530
Hi Everyone,
Is there a way we can track 'child' in 'kext' when process does a fork(). Requirement is to take certain decision while holding 'fork' call for a particular 'child process'.
In MAC framework we have below mentioned 'hook' (for fork()) but it doesn't provide 'child pid' as 'pid' is assigned after the call (after a call to mpo_proc_check_fork).
int mpo_proc_check_fork_t(
kauth_cred_t cred,
struct proc *proc
);
Not every child process calls EXEC after FORK so tracking 'exec' won't help.
KAUTH also doesn't provide a hook for 'FORK'.
Thanks and Regards,
~Charu
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Darwin-kernel mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden