October 2008 - Darwin-dev - lists.apple.com

errno global vx. errno pthread...
by Michael Andronov 03 Oct '08

03 Oct '08

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from:sender :to:subject:mime-version:content-type:x-google-sender-auth; bh=Nq4SvCV6UljHXkspeF42yOrh3w27qXoNpTC1EGBI2DA=; b=MC8azuTOYmJxhsKLHwj2vEjV/fURlt8xkHLRm3WUJXRH3TSe2QBC191Aps6Jv6lWZ4 mtK+4Iexl4m3Sv7qYscBvFebmQS/KVqHwN6+s86HmmZlEdSDvKY/pS78NgnhYbvJJ/X3 Kagjkos++LOAH1ucJf+d6TQSgLwsHUULR3TwI= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:sender:to:subject:mime-version:content-type :x-google-sender-auth; b=apbhH8j96cG40FQ8cSr27ewK6rwUOvsiLAGjb632RmAk5iqetpPTmo9wO4AIIFofVp GCJ3FGlw484J7rD5Z+Iuop+uI4O6Vh6qu0+QJQTl9Ne+FMRSd2YiaR7p3jgggQ/4cz4T tdiqyAUCIxeo6pLrrYyLL9tiJHu0CXNbRTIMg= _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com

1 0

Re: launchd and programmatic access
by Jason Coco 03 Oct '08

03 Oct '08

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:cc:message-id:from:to :in-reply-to:content-type:mime-version:subject:date:references :x-mailer; bh=CPGZS9Wkbe57KdMoHPOikNLtcIaU0Za2erSTbx9zlBE=; b=uIIyLspAF92qD9xvvu7NtXQFlc9R+aQMNz3dlj65DrNApg2eGNGSWe6xYwtk0Kwnt+ +BP9b+gcL8OT1WZPY7hujryrC0v2MM/OFdnrthAYtUiu1TftK83Me6Tg9yG04mvb2IUA JJMTQvdppHcCGmYZKwAS6y3Rpx3RasUZW6uyw= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=cc:message-id:from:to:in-reply-to:content-type:mime-version:subject :date:references:x-mailer; b=WFISMlO4WEttKR72C7FsqNwCZeUF0W/dktP0v42ex/Jnuvt1ebSzLj9UwgWUkIWGja CyL1zbR5kPZZaHvTDvyNdkCWT1/NpYhKqBxMIQTeJcPd0mWcpugBFZ7UlncequIZHxbq HOaN0b6rL90IWIePeTUKWcIPkfJ9gpIc5zU08= On Oct 3, 2008, at 16:48 , Damien Sorresso wrote: Actually, it is because it needs to bind to a privileged port. J _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com On Oct 3, 2008, at 1:36 PM, Jason Coco wrote: On Oct 3, 2008, at 16:26 , Damien Sorresso wrote: On Oct 3, 2008, at 1:05 PM, Jordan K. Hubbard wrote: On Oct 3, 2008, at 8:02 PM, Damien Sorresso wrote: The pref pane includes a setuid helper application that does proper authorization, etc. Your privileged operations should be done in your daemon. We heavily discourage the use of setuid tools, and we're actively trying to cleanse the system of them. Just so I understand what you're advocating here... Are you seriously suggesting that the entire daemon should be privileged rather than using a privilege-separated helper tool? That seems to run counter to generally accepted security practices (make privileged things as small as possible), so I must be mis-parsing your recommendations here... He mentioned that his daemon's plist lives in /Library/ LaunchDaemons and that it was a privileged operation to talk to it, and I mistakenly interpreted that as "My daemon is running as root", which is not necessarily true. So no, I'm not advocating that all system-wide daemons run as root; I mistakenly concluded that his was. I have another question, tho, Damien. If I want to use a UNIX socket to do the IPC, do I have to create the socket myself? launchd doesn't seem to create and bind it when I use the SockPathName key... launchctl will create the socket for you when you load your job. It will give a file descriptor for that socket to launchd, and launchd will give that descriptor to your job when you check in via the launch(3) API. How are you specifying your socket in your launchd.plist(5)? I was creating it with the SocketNamePath key in a dictionary I called IPC in the Sockets dictionary... I realized my problem though, I was using an intermediate directory that didn't exist and I guess launchctl didn't want to create for me :) I changed it to use a full path that already exists and it works just fine now. Thanks!! Did you get a chance to read my other question about the design? I was wondering if you had any opinion one way or the other... two launchd entries with the java one dependent on the wrapper or having the wrapper fork/exec the java process and then manage it actively. smime.p7s

1 0

Re: launchd and programmatic access
by Damien Sorresso 03 Oct '08

03 Oct '08

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Actually, it is because it needs to bind to a privileged port. How are you specifying your socket in your launchd.plist(5)? -- Damien Sorresso BSD Engineering Apple Inc. _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com On Oct 3, 2008, at 1:36 PM, Jason Coco wrote: On Oct 3, 2008, at 16:26 , Damien Sorresso wrote: On Oct 3, 2008, at 1:05 PM, Jordan K. Hubbard wrote: On Oct 3, 2008, at 8:02 PM, Damien Sorresso wrote: The pref pane includes a setuid helper application that does proper authorization, etc. Your privileged operations should be done in your daemon. We heavily discourage the use of setuid tools, and we're actively trying to cleanse the system of them. Just so I understand what you're advocating here... Are you seriously suggesting that the entire daemon should be privileged rather than using a privilege-separated helper tool? That seems to run counter to generally accepted security practices (make privileged things as small as possible), so I must be mis-parsing your recommendations here... He mentioned that his daemon's plist lives in /Library/ LaunchDaemons and that it was a privileged operation to talk to it, and I mistakenly interpreted that as "My daemon is running as root", which is not necessarily true. So no, I'm not advocating that all system-wide daemons run as root; I mistakenly concluded that his was. I have another question, tho, Damien. If I want to use a UNIX socket to do the IPC, do I have to create the socket myself? launchd doesn't seem to create and bind it when I use the SockPathName key... launchctl will create the socket for you when you load your job. It will give a file descriptor for that socket to launchd, and launchd will give that descriptor to your job when you check in via the launch (3) API. smime.p7s

1 0

Re: launchd and programmatic access
by Jason Coco 03 Oct '08

03 Oct '08

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:cc:message-id:from:to :in-reply-to:content-type:mime-version:subject:date:references :x-mailer; bh=liOIP26MtAkLzoYEcNcBPn45JqW4S5p4gu5DT2szLjU=; b=QTnuXWon0zkytKgriwnCyBcWB9XpCdBM3fl4ZupX39PgYD8llRSB2ocrLt7Y/436th SSrF8uK9gZe+3SXwJ6/2YQKtJ2Htc4yHlS6nfZlebhRMHWlMWuKEBx+01QqhLWFquY9W o4+FCYKq3aaukXaQx66TqxyPpTSzUJWKjIilI= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=cc:message-id:from:to:in-reply-to:content-type:mime-version:subject :date:references:x-mailer; b=KkBLx0ix6p/FgFBT0WfHmVI7LBdBjRvITAJ7aDIEAuN20eb+FPs8APp1SRo/D+4tnO 2khsBPh7xylLlhTYLK7amOHEjXMu+aIMO+ygWmJufATyg5avpouL2/NmuyNB2T/6Kgnj 9IZM+p2eVYXjz2/QknoLvcOoAnxDhljskAM+4= On Oct 3, 2008, at 16:26 , Damien Sorresso wrote: Actually, it is because it needs to bind to a privileged port. J _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com On Oct 3, 2008, at 1:05 PM, Jordan K. Hubbard wrote: On Oct 3, 2008, at 8:02 PM, Damien Sorresso wrote: The pref pane includes a setuid helper application that does proper authorization, etc. Your privileged operations should be done in your daemon. We heavily discourage the use of setuid tools, and we're actively trying to cleanse the system of them. Just so I understand what you're advocating here... Are you seriously suggesting that the entire daemon should be privileged rather than using a privilege-separated helper tool? That seems to run counter to generally accepted security practices (make privileged things as small as possible), so I must be mis-parsing your recommendations here... He mentioned that his daemon's plist lives in /Library/LaunchDaemons and that it was a privileged operation to talk to it, and I mistakenly interpreted that as "My daemon is running as root", which is not necessarily true. So no, I'm not advocating that all system-wide daemons run as root; I mistakenly concluded that his was. I have another question, tho, Damien. If I want to use a UNIX socket to do the IPC, do I have to create the socket myself? launchd doesn't seem to create and bind it when I use the SockPathName key... smime.p7s

1 0

Re: launchd and programmatic access
by Damien Sorresso 03 Oct '08

03 Oct '08

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com On Oct 3, 2008, at 1:05 PM, Jordan K. Hubbard wrote: On Oct 3, 2008, at 8:02 PM, Damien Sorresso wrote: The pref pane includes a setuid helper application that does proper authorization, etc. Your privileged operations should be done in your daemon. We heavily discourage the use of setuid tools, and we're actively trying to cleanse the system of them. Just so I understand what you're advocating here... Are you seriously suggesting that the entire daemon should be privileged rather than using a privilege-separated helper tool? That seems to run counter to generally accepted security practices (make privileged things as small as possible), so I must be mis-parsing your recommendations here... He mentioned that his daemon's plist lives in /Library/LaunchDaemons and that it was a privileged operation to talk to it, and I mistakenly interpreted that as "My daemon is running as root", which is not necessarily true. So no, I'm not advocating that all system-wide daemons run as root; I mistakenly concluded that his was. -- Damien Sorresso BSD Engineering Apple Inc. smime.p7s

1 0

Re: launchd and programmatic access
by Jordan K. Hubbard 03 Oct '08

03 Oct '08

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com On Oct 3, 2008, at 8:02 PM, Damien Sorresso wrote: - Jordan _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… The pref pane includes a setuid helper application that does proper authorization, etc. Your privileged operations should be done in your daemon. We heavily discourage the use of setuid tools, and we're actively trying to cleanse the system of them. Just so I understand what you're advocating here... Are you seriously suggesting that the entire daemon should be privileged rather than using a privilege-separated helper tool? That seems to run counter to generally accepted security practices (make privileged things as small as possible), so I must be mis-parsing your recommendations here... This email sent to site_archiver(a)lists.apple.com

1 0

Re: launchd and programmatic access
by Jason Coco 03 Oct '08

03 Oct '08

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:cc:message-id:from:to :in-reply-to:content-type:mime-version:subject:date:references :x-mailer; bh=iHufPcuHl91GjeJ9dYP9+VQQCBNunCsCQXgXfR0Ry2s=; b=Ftn/d6DRyJrEA972syxVD7tRPIlQP8pa6usd9F8CBT5LiUhUCkKSrKqM2LT2gDkSDA Sduud8CyFpxjDnkkWS/g3nKIfv2J1Zc5kFEGG9ZyzcGC529UlxNUyC/vuRM17Mw/a0xJ BOciFat7BgFEERiKQEldK8fhDjRBpgYsWLGKY= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=cc:message-id:from:to:in-reply-to:content-type:mime-version:subject :date:references:x-mailer; b=GQVx7AluQkD//P5VsufgeT65IPnsPJf3gIYwCOBfx39T/kg4JPMtvKGxlGyPVBxpak jF6EFybMmhY78NH9W4gVg+Ls602h4+X/4c3hAj4BGpZOaW/mARxxFKtyAsDycBpeXKgD dIlIVJEswkUO/PiPU8bC7/yRpBPaSqqYbPhVs= On Oct 3, 2008, at 14:02 , Damien Sorresso wrote: Hello all, I have a question about the launchd API from launch.h... background: Thanks again, Jason _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com On Oct 3, 2008, at 10:17 AM, Jason Coco wrote: I have a daemon application that is using launchd but is a cross- platform application so I can't make it totally launchd aware (it's written in Java). It has a plist that lives in /Library/ LaunchDaemons and starts up properly without any issues. My problem is that I have created a preference pane that I want the console use to be able to use to get status, set some configuration options and start/stop the service. Your preference pane should talk to the application via IPC (in your case, probably a Unix domain socket). You can specify the socket path in your daemon's property list and get a file descriptor to the socket when you check in with launchd. I don't know much about Java, but I believe you can call C libraries from it. If that's not feasible, create a C wrapper that grabs the file descriptor sets a flag somewhere in the process' environment and then exec(2)s your Java application. Then your Java app can look at its environment and find where the previous occupant of the address space stashed the descriptor. Thanks for the advice, Damien. I'll re-work it to do something like this... although, unfortunately, I can't alter the Java code at this point so I'll have to have the wrapper program manage the without using exec. I will have the wrapper manage everything, as you suggest, and use IPC from the pref pane to do configuration. I do have one more question on how you'd recommend the design of this... since I can't alter the Java source right now, do you think it makes sense to add 2 plists to launchd... one being the wrapper and one being the Java app. Then I could have the Java app depend on the wrapper and have the wrapper instruct launchd to load and unload the app as needed. This way I can check-in with launchd and communicate appropriately. Or... do you think it's better to simply add the wrapper daemon to launchd and then have the wrapper manage a fork/exec of the Java process? The pref pane includes a setuid helper application that does proper authorization, etc. Your privileged operations should be done in your daemon. We heavily discourage the use of setuid tools, and we're actively trying to cleanse the system of them. I agree... I didn't want to do it that way, but I didn't think of your solution... smime.p7s

1 0

Re: Open Firmware on Pismo
by Joe van Tunen 03 Oct '08

03 Oct '08

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Thread-index: Acklh/DyL7b2eJF7Ed2/jgAwZbwyQg== Thread-topic: Open Firmware on Pismo User-agent: Microsoft-Entourage/11.4.0.080122 I googled "thermal-info" "power-mgt" and found this <http://lxr-itec.uni-klu.ac.at/linux-2.6.4/source/drivers/macintosh/therm_wi ndtunnel.c> It's not the same hardware (the expected ID is different) but the thermal-info property seems to be similar enough. Look at apple_thermal_info and temp_range in that source file. If that interpretation is also correct for Pismo (I'm just guessing), then 4843 is the high and low temperatures 72 and 67 degrees Celsius. What you did was set those to 1, 2, or 0 degrees Celsius. > From: James Little <jkal(a)talk21.com> > Date: Wed, 1 Oct 2008 22:10:34 +0000 (GMT) > > Hi, > > Thanks very much. Using the commands, after amending the settings for > thermal-info I got the fan to turn on straight after booting, by setting them > to 01010200 00000000 01010200 00000000. > > With the open firmware dump below of the values for via-pmu / power-mgt could > anyone explain what the values present could likely be. i.e. are the set of 4 > hex values likely to be 2 sets of values, or 4 separate ones? > > I decoded each of the hex values and got 16843264 for hex 01010200 and > 1213468963 for hex 48434843. I think these refer to temperature values > (perhaps F?). > > ff918050: /pci@f2000000/mac-io@17/via-pmu@16000/power-mgt > > compatible 7669612d 706d752d 393900.. ........ "via-pmu-99" > device_type 706f7765 722d6d67 7400.... ........ "power-mgt" > max-aux-power 00000000 ........ ........ ........ .... > name 706f7765 722d6d67 7400.... ........ "power-mgt" > prim-info 000000ff 00000060 00003e80 00017fb5 .......`..>..... > 0010: 0000d607 00000000 00021300 46000220 ............F.. > 0020: 101400.. ........ ........ ........ ... > registry-name 65787469 6e742d67 70696f31 00...... extint-gpio1. > thermal-info 01010200 00000000 48434843 00000000 ........HCHC.... > > Any knowledge people may have on this and Open Firmware properties would be > much appreciated. > > Thanks, > > James. > > > ----- Original Message ---- > From: Josh de Cesare <decesare(a)apple.com> > To: James Little <jkal(a)talk21.com> > Sent: Wednesday, 1 October, 2008 2:55:00 PM > > James, > You can build up properties with encode+. > > The following code: > > 0 encode-int 1 encode-int encode+ 2 encode-int encode+ 3 encode-int > encode+ > > should leave on the stack the length 4*4 and address of 16 bytes > containing the long words 0, 1, 2, and 3. > > Josh > > > On Oct 1, 2008, at 4:16 AM, James Little wrote: > >> Hi, >> >> I hope this is not too off-topic: >> >> I've been delving around in open firmware on my Pismo to see if I >> can control the internal fan, or at least set a better temp. for it >> to come on at. >> >> In the device tree I've found the via-pmu, and under this is a node >> called 'power-mgt'. A property of this is called 'thermal-info'. >> As far as I know this must be related to the temp sensor in the >> Pismo because the G4 chip I have in it doesn't have the thermal >> assist temp diode on the chip enabled. >> >> To check that this was specific to the Pismo I found the same 'power- >> mgt' property on a Digital Audio G4, which had everything listed the >> same, apart from the 'thermal-info', which was missing. >> >> I've now hit a problem. There are 4 values of data encoded in open >> firmware for the 'thermal-info'. I believe they are the limits for >> the fan, as they do not change from boot up o when the computer is >> definitely toasty. >> >> I can write one value by using the following command: >> >> [code]12345678 encode-int " thermal-info" property[/code] >> >> However, I need to be able to write all 4 values - and I don't know >> the open firmware commands to do this... could anyone help? >> >> Thanks (and sorry for the rambling post), >> >> James. >> _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com

1 0

Re: [darwin-dev] Building dyld: /usr/local/system/lib/libc.a ?
by Peter O'Gorman 03 Oct '08

03 Oct '08

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com User-agent: Thunderbird 2.0.0.14 (X11/20080501) Alexander von Below wrote: > Hello, > > I am trying to build dyld from source (1). > > Forgive me if this is a stupd or silly question, but when just pressing > the Build button, the linker looks for /usr/local/system/lib/libc.a > > Yes, /usr/local > > Which prerequisites do I need to build dyld? Who puts libc.a into that > location? dyld must be statically linked, for obvious reasons. Darwinbuild seems likely to be your best bet to getting dyld built, if you want to try it without, you'll need at least the Libc project. Peter -- Peter O'Gorman http://pogma.com _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com

1 0

Re: launchd and programmatic access
by Damien Sorresso 03 Oct '08

03 Oct '08

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Hello all, I have a question about the launchd API from launch.h... background: _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com On Oct 3, 2008, at 10:17 AM, Jason Coco wrote: I have a daemon application that is using launchd but is a cross- platform application so I can't make it totally launchd aware (it's written in Java). It has a plist that lives in /Library/ LaunchDaemons and starts up properly without any issues. My problem is that I have created a preference pane that I want the console use to be able to use to get status, set some configuration options and start/stop the service. Your preference pane should talk to the application via IPC (in your case, probably a Unix domain socket). You can specify the socket path in your daemon's property list and get a file descriptor to the socket when you check in with launchd. I don't know much about Java, but I believe you can call C libraries from it. If that's not feasible, create a C wrapper that grabs the file descriptor sets a flag somewhere in the process' environment and then exec(2)s your Java application. Then your Java app can look at its environment and find where the previous occupant of the address space stashed the descriptor. The pref pane includes a setuid helper application that does proper authorization, etc. Your privileged operations should be done in your daemon. We heavily discourage the use of setuid tools, and we're actively trying to cleanse the system of them. however, I can't seem to find my job through the launchd API in order to perform operaitons on it (start/stop, list status, etc). You should do this over an IPC channel. Set your job's KeepAlive to false and send a command over the socket telling it to exit if the user wishes. The next time you write data to the socket, the job will respawn on-demand. -- Damien Sorresso BSD Engineering Apple Inc. smime.p7s

1 0