November 2004 - Darwin-dev - lists.apple.com

Re: Intercepting file system calls (read, write, open, close, etc)
by Mike Smith 16 Nov '04

16 Nov '04

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com On Nov 15, 2004, at 10:58 PM, calcmach(a)actcom.net.il wrote: Hi Mike, Let's make things easier; read the dyld manpage. = Mike _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… Let's make things harder. I have NO control over the building of the application I want to intercept..... At the worst, you'll have to build a replacement for libSystem that simply patches through to the system copy in 99% of the cases. This email sent to site_archiver(a)lists.apple.com

1 0

RE: Intercepting file system calls (read, write, open, close, etc)
by Al Ameen Shah 16 Nov '04

16 Nov '04

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Hmmm. --I'm not 100% sure of this, but I reckon you need an "IOMedia Filter Scheme" driver. --See http://developer.apple.com/documentation/DeviceDrivers/Conceptual/IOKitFunda --mentals/Families_Ref/chapter_11_section_15.html This is quite low level, and you will have to deal with streams of data rather than file handles/file paths. 1. Try VFS Stacking ? Or over-riding V-node ops ? OR 2. Get Syscall table and modify the appropriate syscalls ? OR 3. Modify environ variables that affect dynamic linking ? _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com

1 0

RE: Intercepting file system calls (read, write, open, close, etc)
by Kenny Millar 16 Nov '04

16 Nov '04

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Thread-index: AcTLqjGVk7I4uLDuQOyYHvm9mrs9RAAEQokQ Hmmm. I'm not 100% sure of this, but I reckon you need an "IOMedia Filter Scheme" driver. See http://developer.apple.com/documentation/DeviceDrivers/Conceptual/IOKitFunda mentals/Families_Ref/chapter_11_section_15.html For details. -Kenny > -----Original Message----- > From: darwin-dev-bounces+kennymillar=mac.com(a)lists.apple.com > [mailto:darwin-dev-bounces+kennymillar=mac.com@lists.apple.com > ] On Behalf Of calcmach(a)actcom.net.il > Sent: 16 November 2004 06:58 > To: darwin-dev(a)lists.apple.com > Cc: Mike Smith > Subject: Re: Intercepting file system calls (read, write, > open, close, etc) > > > -- > Hi Mike, > > Let's make things harder. > I have NO control over the building of the application I want > to intercept..... > > DM > > > _______________________________________________ > Do not post admin requests to the list. They will be ignored. > Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) > Help/Unsubscribe/Update your Subscription: > http://lists.apple.com/mailman/options/darwin-dev/kennymillar% > 40mac.com > > This email sent to kennymillar(a)mac.com _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Intercepting file system calls (read, write, open, close, etc)
by calcmach＠actcom.net.il 16 Nov '04

16 Nov '04

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com -- Hi Mike, Let's make things harder. I have NO control over the building of the application I want to intercept..... DM _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com

1 0

Re: trying to find right list
by Matt Watson 16 Nov '04

16 Nov '04

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com matt. _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… Can you rephrase the question? If you post a compilable, self-contained program that exhibits the issue you're trying to illustrate, it would be easier to respond. A good problem report will include: 1) OS versions being used/compared (uname -a will tell you this) 2) Compiler versions being used/compared (cc -v will tell you this) 3) Machine configurations being used/compared (/usr/sbin/system_profiler SPHardwareDataType will tell you this) 4) Self-contained compilable code example (a single .c file with main()) 5) The compiler invocation being used (cc -Os -mdynamic-no-pic -prebind -o foo foo.c) 6) What you observed/expected ("took 125 seconds on 400MHz G4, took 99 seconds on 300MHz G3. I would have expected the G4 to be faster...") This should only take a couple of minutes, though it might take longer to isolate the problem to a single file. Just send what you have if it can't be isolated. We'd be glad to help if we can reproduce what you're describing ourselves... This email sent to site_archiver(a)lists.apple.com

1 0

Re: Intercepting file system calls (read, write, open, close, etc)
by Mike Smith 16 Nov '04

16 Nov '04

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com On Nov 15, 2004, at 12:04 PM, darwin-dev-request(a)lists.apple.com wrote: = Mike _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… I would like to implement a OSX file system calls interception. (read, write, open, close, etc) I would like to have full control so I can overwrite these calls or let the system handle them. I have looked at all the Apple's OSX kext device examples but did not find what I was looking for. OSX 10.3, Xcode 1.5 PS - my implementation does not have to be wide, it can be application based Any advice, help, pointers, sample projects. etc would be much appreciated. Your best bet for this will be to override the various library calls at the application level; all applications ultimately call through libSystem. The dyld manpage describes inserting libraries into the runtime link order; within your override functions you can then call through into the covered functions (this is the utility of the two-level namespace). http://developer.apple.com/releasenotes/DeveloperTools/ TwoLevelNamespaces.html This email sent to site_archiver(a)lists.apple.com

1 0

trying to find right list
by Steven J Abner 16 Nov '04

16 Nov '04

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com On 10.3.6 a process timing non-system using first "do": 400G4 129sec 350G3 118sec Thanks for listening and hope you can direct me Steve <tauvan(a)starpower.net> Please don't say "Apple" because I already know their response: "Buy a new computer". _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… Hi, I'm looking for the correct list for a processor-specific problem. This is code ran on MacOSX, 10.1.5 and 10.3.6, a PCI G4 computer. The reason it is processor- specific is that a G3 building the same code runs faster than the faster(Mhz) G4. I think it may be the way the OS sets up for simple math, then again it could be the compiler setting simple math for an alti-vec processor. The 10.3.6 base timings for a given system processes are: 400G4 178sec 350G3 176sec 400G4 100sec 350G3 99sec 400G4 188sec 350G3 186sec What caught my eye was: "do *--strPtr = ((val_ul & 7) + 48); while ((val_ul >>= 3));" ran 2sec slower than "do *--strPtr = _lowerhexstr[(val_ul & 7)]; while ((val_ul >>= 3));" on 400G4 10.1.5 but on the G3 it ran 5sec faster. Earlier system tests of 300G3(not typo) to 400G4 both under 10.1.5 showed times like 400G4 76sec 300G3 102sec 400G4 103sec 300G3 141sec This email sent to site_archiver(a)lists.apple.com

1 0

Re: Building SAMBA 3.0.8
by Andrew Cunningham 15 Nov '04

15 Nov '04

site_archiver(a)lists.apple.com Delivered-To: Darwin-dev(a)lists.apple.com Disable kerberos support if you don't need it. That should bypass those errors in the krb5 lib. _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… Actually, I did manage to build by downloading the samba release (3.0.5) from the Darwin sources and then applying the patches that are applied to the standard 3.0.5 distribution to the 3.0.8 distribution. On Tue, 9 Nov 2004 10:14:59 -0800, Andrew Cunningham <andrewc(a)mac.com> wrote: Hi, I need to build SAMBA 3.0.8 for our OX Server 10.3.6 system. Samba 3.0.4-3.0.5 breaks our backup system which uses Retrospect on a Windows box to backup XServe SMB volumes. This problem is noted in a Dantz KB article as well as alluded to in SAMBA 3.0.6-3.0.8 release notes. This email sent to site_archiver(a)lists.apple.com

1 0

Re: Intercepting file system calls (read, write, open, close, etc)
by Felix Kronlage 15 Nov '04

15 Nov '04

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Nov 15, 2004, at 08:54 Uhr, Erez Kaplan wrote: - -fkr iD8DBQFBmGj5DTGb09msdNARAotOAJ4qoj6LrccFcbCpOMMV4Ur/00HingCeOdMa 4FxweQ1Z5YG/pvlhNFVlWVQ= =rykv -----END PGP SIGNATURE----- _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… Intercepting file system calls (read, write, open, close, etc) I would like to implement a OSX file system calls interception. (read, write, open, close, etc) I would like to have full control so I can overwrite these calls or let the system handle them. I have looked at all the Apple's OSX kext device examples but did not find what I was looking for. OSX 10.3, Xcode 1.5 PS - my implementation does not have to be wide, it can be application based I think, you're looking for something like systrace. Niels Provos did an initial port back in the 10.2.x days[1]. Me and others have hacked on it occasionally since, but nothing close to being complete. [1] <url: http://www.citi.umich.edu/u/provos/systrace/> - -- gpg-fingerprint: 076E 1E87 3E05 1C7F B1A0 8A48 0D31 9BD3 D9AC 74D0 http://fkr.hazardous.org | http://opendarwin.org/~fkr/ | FKR-RIPE -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (Darwin) This email sent to site_archiver(a)lists.apple.com

1 0

Intercepting file system calls (read, write, open, close, etc)
by Erez Kaplan 15 Nov '04

15 Nov '04

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com -- Intercepting file system calls (read, write, open, close, etc) Any advice, help, pointers, sample projects. etc would be much appreciated. Thanks, DM _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… I would like to implement a OSX file system calls interception. (read, write, open, close, etc) I would like to have full control so I can overwrite these calls or let the system handle them. I have looked at all the Apple's OSX kext device examples but did not find what I was looking for. OSX 10.3, Xcode 1.5 PS - my implementation does not have to be wide, it can be application based This email sent to site_archiver(a)lists.apple.com

1 0