Re: how to trace files opening from a specific folder
Re: how to trace files opening from a specific folder
- Subject: Re: how to trace files opening from a specific folder
- From: Laurent Vinet <email@hidden>
- Date: Tue, 22 Feb 2011 16:27:08 +0100
Hello,
I test the "tcplognke" sample and its seems really implement the type of communication I need.
Just a remark; I can't unload it...
> sudo kextunload -v /tmp/tcplognke.kext
(kernel) Kext com.apple.dts.kext.tcplognke did not stop (return code 0x5).
(kernel) Kext com.apple.dts.kext.tcplognke can't unload - module stop returned 0xdc008017.
Failed to unload com.apple.dts.kext.tcplognke - (libkern/kext) kext (kmod) start/stop routine failed.
Now, I need to test the same effect with KauthORama as the KE, and here it's not clear what I must do: redesign all the "Control Functions" like in tcplognke.c? and on the client side? Is the "socket filter" exist for KAUT architecture?
Thanks in advance
Regards
Laurent
Le 10 févr. 2011 à 18:31, Quinn The Eskimo! a écrit :
>
> On 10 Feb 2011, at 16:10, Laurent Vinet wrote:
>
>> I searched but not really found the solution for "Communicating from a KEXT to a userland process"... I read about kernel control sockets and sysctl but I am not sure of the recommended way [...]
>
> The best approach depends on your context. In this case I'd probably recommend you use a kernel control socket. IIRC the "tcplognke" sample shows how to do this (I'm on a /really/ slow network right now, so I can't check this myself).
>
> S+E
> --
> Quinn "The Eskimo!" <http://www.apple.com/developer/>
> Apple Developer Relations, Developer Technical Support, Core OS/Hardware
>
>
> _______________________________________________
> Do not post admin requests to the list. They will be ignored.
> Filesystem-dev mailing list (email@hidden)
> Help/Unsubscribe/Update your Subscription:
>
> This email sent to email@hidden
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Filesystem-dev mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden