Re: how to trace files opening from a specific folder
Re: how to trace files opening from a specific folder
- Subject: Re: how to trace files opening from a specific folder
- From: Laurent Vinet <email@hidden>
- Date: Thu, 10 Feb 2011 17:10:15 +0100
Ouch. Yes, I upgraded to Xcode 3.2.5 and everything is ok.
Kauth then seems to be a good candidate to solve my problem.
I searched but not really found the solution for "Communicating from a KEXT to a userland process"... I read about kernel control sockets and sysctl but I am not sure of the recommended way: Ideally I would like to receive a notification in my application... Is it possible to notify from KEXT (for example in FileOpScopeListener of KauthORama.c instead of writing in kernel.log) ?
Laurent
Le 8 févr. 2011 à 11:29, Quinn The Eskimo! a écrit :
>
> On 7 Feb 2011, at 14:48, Laurent Vinet wrote:
>
>> Is it possible to use this example with snow leopard?
>
> While it's true that KauthORama hasn't been updated recently (sorry about that), I'm not seeing the problems you're seeing. First things first, I downloaded the sample and verified the pre-built binary. That worked as expected:
>
> $ sudo cp -R build/Debug/KauthORama.kext /KauthORama.kext
> Password:********
> $ sudo chown -R root:wheel /KauthORama.kext
> $ kextutil -n -t /KauthORama.kext
> No kernel file specified; using running kernel for linking.
> /KauthORama.kext appears to be loadable (including linkage for on-disk libraries).
>
> I then opened the project in Xcode (3.2.5) and tried building it. I had to correct some build time errors, including:
>
> o change the base SDK to Latest Mac OS X
>
> o change one instance of sprintf to snprintf -- Calculating the right length proved to be tricky, so I just entered 11 (-:
>
> o cast arg0 (which is a uintptr_t) to (void *) in a bunch of places, and likewise for some other argument parameters
>
> After that I built the KEXT and it verified as expected (using the same instructions as I used for the pre-built binary).
>
>> Validation Failures:
>> Info dictionary property value is illegal:
>> OSBundleLibraries
>
> This would imply that there's something messed up with your "Info.plist".
>
> S+E
> --
> Quinn "The Eskimo!" <http://www.apple.com/developer/>
> Apple Developer Relations, Developer Technical Support, Core OS/Hardware
>
>
> _______________________________________________
> Do not post admin requests to the list. They will be ignored.
> Filesystem-dev mailing list (email@hidden)
> Help/Unsubscribe/Update your Subscription:
>
> This email sent to email@hidden
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Filesystem-dev mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden