December 2004 - Darwin-dev - lists.apple.com

Re: inet_aton family in kernel space
by Justin Walker 16 Dec '04

16 Dec '04

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com On Dec 15, 2004, at 18:58, Andrew White wrote: int inet_aton(char * cp, struct in_addr * pin) Regards, Justin -- Justin C. Walker, Curmudgeon-At-Large * Institute for General Semantics | When LuteFisk is outlawed | Only outlaws will have | LuteFisk *--------------------------------------*-------------------------------* _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… Is there a version of inet_aton which is safe to use inside an IOKit device driver? How do I include it? The kernel appears to export it, so it's safe to use. I believe the implementation uses this signature: and is found in xnu/bsd/kern/netboot.c. This, of course, may change across releases. This email sent to site_archiver(a)lists.apple.com

1 0

inet_aton family in kernel space
by Andrew White 16 Dec '04

16 Dec '04

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com User-agent: Mozilla Thunderbird 0.9 (Macintosh/20041103) Is there a version of inet_aton which is safe to use inside an IOKit device driver? How do I include it? -- Andrew White _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com

1 0

Opening, and blocking on, a mach port.
by Michael Bishop 15 Dec '04

15 Dec '04

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Hi fellow developers, Here is the problem I'm trying to solve. - cmd-line program awakens because of the write to the mach port - cmd-line program closes port and exits. - opening ports - blocking waiting for a message - sending a message. Thank you, _ michael _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… I've got a specific problem that I have been able to solve with the Darwin notification APIs. The problem is, I just discovered these are not available prior to Panther so I need to do the same thing using a lower layer. I was wondering if any of you had some suggestions or documentation you could point me to. - cmd-line program opens up mach port - cmd-line program sends apple event to running GUI application and includes the port id in message - cmd-lin program blocks waiting for a message on the mach port - GUI program receives apple event, does some operation - finished operation and writes to the mach port passed in through the apple event - GUI program disposes of any references to the mach port This was really easy with the notify apis. The cmd-line could just register for a notification and get a file handle. Then, it could call select() on the file which would block. Through the notification apis, the file would have a notification written to it which would awaken the cmd-line program. I'm all set to use raw mach ports now, I just don't know where to begin. Can someone help me find documentation for: I'm pretty unfamiliar with this stuff so at this point, I'm pretty much a novice. This email sent to site_archiver(a)lists.apple.com

1 0

file last access time late sync
by Alain Bench 15 Dec '04

15 Dec '04

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Mail-followup-to: Alain Bench <albench(a)oreka.com>, Darwin development ml <darwin-dev(a)lists.apple.com> User-agent: Mutt/1.4i-ja.1 Hello, Some people using Darwin 7.6.0 and HFS+ journaled filesystem have a problem where a file's last access time is not updated immediately on a file read. | $ cd ~/Mail | $ ls -ul testbox; cat testbox >/dev/null; date; ls -ul testbox | -rw------- 1 chris chris 943280 10 Dec 02:56 testbox | Fri Dec 10 03:00:47 CET 2004 | -rw------- 1 chris chris 943280 10 Dec 02:56 testbox Atime is updated to the right 03:00 something as about 5 minutes later. Journaling enabled or disabled same problem. Allegedly Darwin 6.x had no problem. Is this late atime a bug? Or is it a setting somewhere? Note: I know nothing about Darwin or MacOS. The problem was found during a report of misbehaviour of the MUA Mutt on comp.mail.mutt, see full context in thread <2004-12-01.07-28-53(a)krille.blacktrash.org>, or <URL:http://www.google.com/groups?threadm=2004-12-01.07-28-53@krille.blacktr…>. I am not subscribed, can you please CC me? Bye! Alain. -- Give your computer's unused idle processor cycles to a scientific goal: The Folding@home project at <URL:http://folding.stanford.edu/>. _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com

1 0

Darwin 7.7 Source Code Available
by Kevin Van Vechten 15 Dec '04

15 Dec '04

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… The Darwin team is pleased to announce the availability of the source code for Darwin 7.7. These sources correspond to Mac OS X 10.3.7, and are available via the web at <http://www.opensource.apple.com/darwinsource/>. [Dec 15 2004] -- Kevin Van Vechten <kvv(a)apple.com> Open Source Software Engineer Apple Computer This email sent to site_archiver(a)lists.apple.com

1 0

Re: [APPL:DarwinDev] How Do I Run a Java App with Superuser Privileges?
by Jay A. Kreibich 14 Dec '04

14 Dec '04

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com User-agent: Mutt/1.4.2.1i On Mon, Dec 13, 2004 at 08:55:37PM -0800, William C. McCain scratched on the wall: > It works fine in a shell when I prefix my application with "sudo". But > I can't ask users to do that! I have also been able to get it to work > from an AppleScript (something like 'do shell script "sudo open > MyApp"'). That will be what I will have to ship, unless there is a > better, more "transparent" solution. > > Any ideas? One of the things I've done to access privileged ports in complex perl applications (e.g. stuff that would never run "tainted") is to write a small external C/C++ wrapper. The C program can be setuid or run via sudo and can route communications to some other non-privileged networking port, UNIX socket, or stdin/out. In my case, it was for outgoing connections (a legacy application that depended on some aspects of the auth/auth system wanting privileged ports-- don't get me started...). Incoming are a bit trickier since you can have more than one, but something that just bounces to the privileged port to another port (including multiple connections) that your non-root application can listen on should only be a ~100 line C program. -j -- Jay A. Kreibich | Comm. Technologies, R&D jak(a)uiuc.edu | Campus IT & Edu. Svcs. <http://www.uiuc.edu/~jak> | University of Illinois at U/C _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com

1 0

Re: How Do I Run a Java App with Superuser Privileges?
by Justin Walker 14 Dec '04

14 Dec '04

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com On Dec 14, 2004, at 0:54, Michael Maibaum wrote: On Dec 13, 2004, at 21:45, James Berry wrote: Well, well, well, .... On Dec 14, 2004, at 6:01, Allan Nathanson wrote: Change bar.sh to be : #!/bin/bash -p id ps -utp1 Geez, what a tangled web... Thanks for the clarifications. Regards, Justin -- Justin C. Walker, Curmudgeon-At-Large * Institute for General Semantics | If you're not confused, | You're not paying attention *--------------------------------------*-------------------------------* _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… On Mon, Dec 13, 2004 at 10:08:59PM -0800, Justin Walker wrote: On Dec 13, 2004, at 9:24 PM, Justin Walker wrote: On Dec 13, 2004, at 21:11, James Berry wrote: [snip] Most systems will not permit shell scripts to execute 'setuid'. Works for me... (TM). (Note the euid...) It'll take me a while to figure this one out. Seems that bash and sh have somewhat different behaviors: Historically bash when run as sh gives up setuid privs as a security precaution. Apple changed this in bash because zsh doesn't do this and people had written scripts to be executed by sh (which was zsh then) which relied on the elevated privs. Thus the recent Adobe Version Cue security flaw (which is really an Apple derived problem). I think the BSD people were a bit unhappy with this change ;) ... and note the "-p" bash argument which is described in the last paragraph of the "INVOCATION" section of the man page. It seems simpler to me to just drop the setuid bit and be done with it. This is so complicated that it invites abuse... This email sent to site_archiver(a)lists.apple.com

1 0

Re: How Do I Run a Java App with Superuser Privileges?
by Allan Nathanson 14 Dec '04

14 Dec '04

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Change bar.sh to be : #!/bin/bash -p id ps -utp1 - Allan On Dec 14, 2004, at 1:08 AM, Justin Walker wrote: On Dec 13, 2004, at 21:45, James Berry wrote: Well, well, well, .... Thanks for digging in further... Regards, Justin _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/ajn%40apple.com _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… ... and note the "-p" bash argument which is described in the last paragraph of the "INVOCATION" section of the man page. On Dec 13, 2004, at 9:24 PM, Justin Walker wrote: On Dec 13, 2004, at 21:11, James Berry wrote: [snip] Most systems will not permit shell scripts to execute 'setuid'. Works for me... (TM). (Note the euid...) It'll take me a while to figure this one out. Seems that bash and sh have somewhat different behaviors: $ cat foo.sh #!/bin/sh id ps -utp1 $ cat bar.sh #!/bin/bash id ps -utp1 $ls -l *.sh -r-sr-xr-x 1 root staff 24 13 Dec 22:01 bar.sh -r-sr-xr-x 1 root staff 22 13 Dec 22:00 foo.sh $ foo.sh uid=10180(justin) euid=0(root) gid=20(staff) groups=20(staff), 79(appserverusr), 80(admin), 81(appserveradm) USER PID %CPU %MEM VSZ RSS TT STAT STARTED TIME COMMAND justin 281 0.2 0.2 18644 1392 std S 4Dec04 0:01.57 -bash root 279 0.0 0.3 27540 2000 std Ss 4Dec04 0:00.04 login -pf ju root 4373 0.0 0.1 18644 564 std S+ 10:00PM 0:00.03 sh ./foo.sh root 4375 0.0 0.1 18076 684 std R+ 10:00PM 0:00.02 ps -utp1 $ bar.sh uid=10180(justin) gid=20(staff) groups=20(staff), 79(appserverusr), 80(admin), 81(appserveradm) USER PID %CPU %MEM VSZ RSS TT STAT STARTED TIME COMMAND justin 4378 3.0 0.1 18644 1012 std S+ 10:01PM 0:00.01 bash ./bar.s root 279 0.0 0.3 27540 2000 std Ss 4Dec04 0:00.04 login -pf ju justin 281 0.0 0.2 18644 1392 std S 4Dec04 0:01.57 -bash root 4380 0.0 0.0 18076 308 std R+ 10:01PM 0:00.01 ps -utp1 Looks to me like there is either a compatibility issue at play, or a bug in the system somewhere... 'tcsh' and 'bash' behave the same: scripts can't execute as setuid root. For 'sh', it appears they can...weird. -- Justin C. Walker, Curmudgeon-At-Large * Institute for General Semantics | "Weaseling out of things is what | separates us from the animals. | Well, except the weasel." | - Homer J Simpson *-------------------------------------- *-------------------------------* This email sent to ajn(a)apple.com This email sent to site_archiver(a)lists.apple.com

1 0

Re: How Do I Run a Java App with Superuser Privileges?
by Michael Maibaum 14 Dec '04

14 Dec '04

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Mail-followup-to: darwin-dev(a)lists.apple.com User-agent: Mutt/1.5.6i On Dec 13, 2004, at 21:45, James Berry wrote: Well, well, well, .... Historically bash when run as sh gives up setuid privs as a security precaution. Apple changed this in bash because zsh doesn't do this and people had written scripts to be executed by sh (which was zsh then) which relied on the elevated privs. Thus the recent Adobe Version Cue security flaw (which is really an Apple derived problem). I think the BSD people were a bit unhappy with this change ;) Michael Thanks for digging in further... Regards, Justin _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/michaelm%40opendarwin.org This email sent to michaelm(a)opendarwin.org On Mon, Dec 13, 2004 at 10:08:59PM -0800, Justin Walker wrote: On Dec 13, 2004, at 9:24 PM, Justin Walker wrote: On Dec 13, 2004, at 21:11, James Berry wrote: [snip] Most systems will not permit shell scripts to execute 'setuid'. Works for me... (TM). (Note the euid...) It'll take me a while to figure this one out. Seems that bash and sh have somewhat different behaviors: $ cat foo.sh #!/bin/sh id ps -utp1 $ cat bar.sh #!/bin/bash id ps -utp1 $ls -l *.sh -r-sr-xr-x 1 root staff 24 13 Dec 22:01 bar.sh -r-sr-xr-x 1 root staff 22 13 Dec 22:00 foo.sh $ foo.sh uid=10180(justin) euid=0(root) gid=20(staff) groups=20(staff), 79(appserverusr), 80(admin), 81(appserveradm) USER PID %CPU %MEM VSZ RSS TT STAT STARTED TIME COMMAND justin 281 0.2 0.2 18644 1392 std S 4Dec04 0:01.57 -bash root 279 0.0 0.3 27540 2000 std Ss 4Dec04 0:00.04 login -pf ju root 4373 0.0 0.1 18644 564 std S+ 10:00PM 0:00.03 sh ./foo.sh root 4375 0.0 0.1 18076 684 std R+ 10:00PM 0:00.02 ps -utp1 $ bar.sh uid=10180(justin) gid=20(staff) groups=20(staff), 79(appserverusr), 80(admin), 81(appserveradm) USER PID %CPU %MEM VSZ RSS TT STAT STARTED TIME COMMAND justin 4378 3.0 0.1 18644 1012 std S+ 10:01PM 0:00.01 bash ./bar.s root 279 0.0 0.3 27540 2000 std Ss 4Dec04 0:00.04 login -pf ju justin 281 0.0 0.2 18644 1392 std S 4Dec04 0:01.57 -bash root 4380 0.0 0.0 18076 308 std R+ 10:01PM 0:00.01 ps -utp1 Looks to me like there is either a compatibility issue at play, or a bug in the system somewhere... 'tcsh' and 'bash' behave the same: scripts can't execute as setuid root. For 'sh', it appears they can...weird. -- Justin C. Walker, Curmudgeon-At-Large * Institute for General Semantics | "Weaseling out of things is what | separates us from the animals. | Well, except the weasel." | - Homer J Simpson *--------------------------------------*-------------------------------* -- Dr Michael A. Maibaum internet: mike(a)maibaum.org http://mike.maibaum.org/ voice: [m] 07813 713 952 [w] (020) 7679 3890 _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com

1 0

Re: How Do I Run a Java App with Superuser Privileges?
by William C. McCain 14 Dec '04

14 Dec '04

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com User-agent: Mozilla/5.0 (Windows; U; Win98; en-US; rv:1.7.3) Gecko/20040910 Hey -- I *DID* say my reasons were not particularly persuasive, didn't I? Bill See MHO answered point by point below: William C. McCain wrote: Or you could let Apache still run. _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… But do try to understand my app in its context. It's a CD changer automation program for audiophiles. It's strictly targeted to home users, not businesses. Sure Mac OS X is a multi-user OS, but hardly anybody ever uses it that way in a home environment. (Not often in a business "desktop" environment either, except at Kinko's and kiosks.) I don't expect users to run my app on a Mac OS server, since few home users have them, but in practice a long-running, unattended app like mine has more the flavor of a "system app" than a "user app". If there were a way to install it as such, I would. I truly did not and do not expect that my users will want to run another "personal Web server" on the same machine. So far, only one of my users of the Windoze version has had a conflict on port 80 -- and it turned out that the other app wasn't really a Web server, it was ANOTHER audio/video application that also was binding to port 80, for roughly the same reasons that my app does! But the user wasn't using the service that app provided on port 80, and it was easy to "turn it off". I *DO* expect that eventually I will get around to making my HTTP port configurable. I'm just "putting it off". (My app also uses another IP port for a proprietary, non-HTTP protocol, and I made that port number configurable in the private port number range long ago.) Paul Forgey wrote: 1. Apple lets users run Apache on their Macs, though few non-geek end-users do so. So why not my app, too? At risk of misunderstanding your point and going into facts you probably already know, it's a _system wide_ app running as root (initially, before dropping to the apache user), and the only process which may bind to port 80 while it is running. The per-user stuff you see is part of the apache configuration, and not the result of any daemon listening on port 80 running directly because of that user. Are you requiring users not run any other web server if they run your server? 2. My app has been available for some time on the dominant monopolist's OS, and it runs fine there without any privileges (even on XP SP2). Yeah. Winsuck lets non-priviledged users do a lot of horrible things. Because Microsoft lets you do it doesn't mean it's a good idea. You should see the resulting ms-specific twists on SO_REUSEADDR and related bizarre behaviors which have been needed to hack around this in a way that still lets most applications work while reducing the risk of allowing this. But all that's for another list. On multi users system, privileged ports are privileged for a reason, unless you are Windows where any joe user who can log in can subvert the web server, or any other server, for their own purposes. Windows is not, nor ever will be, a system where unprivileged interactive access may be allowed without significant compromise to security. While this is more or less true for any system, it is especially true for Windows. 3. If I change the port number, I'll have to make it configurable, which is a real PITA (not that I'm lazy, mind you). Of course, if one of my users ever DOES want to run both Apache and my app on the same machine, at least ONE of us will have to be re-configured ... Why not use Rendezvous? Pick a port automatically and advertise it. If your app also runs on Windows, you may want to look into Howl which gives you the same interface on both Windows and Mac-OS. The best way to listen on a free port is to bind to port 0 and then use getsockname after the socket is bound to find out which port the kernel atomically found free and bound the socket to listen on. This doesn't work on all platforms (it isn't part of the original BSD sockets behavior), but it does work at least on Linux, Mac-OS and even Windows. For users that don't want to use Rendezvous or would like to set up firewall rules, make the listening port an application preference. It may be a pain to do, but so else is writing software. 4. It's actually rather convenient for my built-in Web server to be "standard", as it has other uses besides the master/remote interface. For instance, users (and I) can check my product's "log files" from their Web browsers on the remote machines. (Yes, I know you can specify a non-standard port in a URL, but I said this was a "convenience" issue.) If you use Rendezvous, Safari will list your service automatically in the bookmarks menu. You need to find a much better reason to bind to port 80 than to save users' typing. Are you really the only web server on the machine? Unless you have convinced IANA that you deserve to be a known port, you will need to do a combination of automatically finding your own dynamic port to bind to and letting the user set it. This email sent to site_archiver(a)lists.apple.com

1 0