Re: how to trace files opening from a specific folder
Re: how to trace files opening from a specific folder
- Subject: Re: how to trace files opening from a specific folder
- From: Laurent Vinet <email@hidden>
- Date: Mon, 7 Feb 2011 15:48:33 +0100
As a starting point for discovering kext I tryed to build and install "KauthORama Sample Code" unfortunately it don't seem updated for 10.6 or xcode3...
So I build it under xcode3 but the installation failed....
....
Feb 7 15:22:24 Halebopp sudo[1570]: Vinet : TTY=ttys000 ; PWD=/Users/Vinet/Developer/Build/Debug ; USER=root ; COMMAND=/usr/sbin/chown -R root:wheel /KauthORama.kext
Feb 7 15:22:29 Halebopp sudo[1571]: Vinet : TTY=ttys000 ; PWD=/Users/Vinet/Developer/Build/Debug ; USER=root ; COMMAND=/sbin/kextload -t /KauthORama.kext
Feb 7 15:22:29 Halebopp com.apple.kextd[10]: Can't load /KauthORama.kext - validation problems.
Feb 7 15:22:29 Halebopp com.apple.kextd[10]: Failed to load /KauthORama.kext - (libkern/kext) validation failure (plist/executable).
If I try with kextutil :
kextutil -n /KauthORama.kext
No kernel file specified; using running kernel for linking.
/KauthORama.kext is invalid; can't resolve dependencies.
/KauthORama.kext is invalid; can't resolve dependencies.
/KauthORama.kext has problems:
Validation Failures:
Info dictionary property value is illegal:
OSBundleLibraries
Info dictionary missing required property/value:
OSBundleLibraries
Warnings:
Executable does not contain code for architecture:
i386
Is it possible to use this example with snow leopard?
I obtain the same error with a new xcode kext empty project
Laurent
Le 4 févr. 2011 à 15:05, Quinn The Eskimo! a écrit :
>
> On 4 Feb 2011, at 09:51, Laurent Vinet wrote:
>
>> More or less, I need to receive "events" notifying that some files have been opened.
>
> I'd definitely recommend you avoid DTrace for this. As I mentioned in my previous post, DTrace is intended to be a debugging tool, and doesn't really present a stable API for application development.
>
> You best option for this might be a Kauth KEXT, as described in TN2127 "Kernel Authorization".
>
> <http://developer.apple.com/library/mac/#technotes/tn2005/tn2127.html>
>
> It's hard to know for sure whether this will give you all the information you need to complete this task, but it's a good start.
>
> S+E
> --
> Quinn "The Eskimo!" <http://www.apple.com/developer/>
> Apple Developer Relations, Developer Technical Support, Core OS/Hardware
>
>
> _______________________________________________
> Do not post admin requests to the list. They will be ignored.
> Filesystem-dev mailing list (email@hidden)
> Help/Unsubscribe/Update your Subscription:
>
> This email sent to email@hidden
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Filesystem-dev mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden