June 2008 - Darwin-dev - lists.apple.com

How to build darwin packages like netinfo?
by Michael Grigoni 06 Jun '08

06 Jun '08

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Organization: Cybertheque Museum User-agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.7.2) Gecko/20040804 Netscape/7.2 (ax) Greetings, How does one build Apple-packaged system code like netinfo (I need to add debugging to 'lookupd') on Darwin (as opposed to OS-X)? Some things like 'launchd' come with autoconf scripts and build with just a few glitches, but 'netinfo' depends on a system build framework and 'Project Builder' which isn't part of the Darwin distribution. IDE's like XCode require OS-X and the GUI. Where do I get the stuff necessary to build the o/s code and tools? It doesn't look like there is any sort of full source and toolchain distribution that could 'make world' like in some other *BSD flavors. I am working on Darwin8. All help appreciated. Michael _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com

1 0

question about lo_unix_scall
by Dmitry Markman 06 Jun '08

06 Jun '08

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com

1 0

Re: TCP Socket Filter and SSL problem
by Terry Lambert 05 Jun '08

05 Jun '08

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Hello all, -- Terry _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… On Jun 5, 2008, at 7:43 AM, Thorsten Kramp wrote: I've written a TPC socket filter that I'm currently using only to pass all incoming data to the user space and back without any modifications. That is, (1) the sf_data_in function copies the data from the mbufs (via mbuf_copydata) and enqueues them into the control socket, (2) the user-level process reads the data from the control socket and simply writes them back, (3) the ctl_send callback finally injects the data packet in new mbufs back into the TCP stack. This seems to work fine most of the time but fails with some SSL (https) connections (even though it works fine with others). Can anyone imagine why? Any help would be highly appreciated -- thanks a lot in advance! My guess would be a botched packet checksum or a difference in the option bits. The easiest way to find out for sure would be to compare the data you got back with the data you sent up, including all portions of the packet. This email sent to site_archiver(a)lists.apple.com

1 0

TCP Socket Filter and SSL problem
by Thorsten Kramp 05 Jun '08

05 Jun '08

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Hello all, Best, Thorsten _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com I've written a TPC socket filter that I'm currently using only to pass all incoming data to the user space and back without any modifications. That is, (1) the sf_data_in function copies the data from the mbufs (via mbuf_copydata) and enqueues them into the control socket, (2) the user-level process reads the data from the control socket and simply writes them back, (3) the ctl_send callback finally injects the data packet in new mbufs back into the TCP stack. This seems to work fine most of the time but fails with some SSL (https) connections (even though it works fine with others). Can anyone imagine why? Any help would be highly appreciated -- thanks a lot in advance! smime.p7s

1 0

RE: Kext dependent on another kext
by Andy Green 05 Jun '08

05 Jun '08

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Thread-index: AcjHE/u5JIRN0q5aSq621vgowEaR3Q== Thread-topic: RE: Kext dependent on another kext All my fault: twas a plist error! _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Control socket communication gets truncated...
by Josh Graessley 05 Jun '08

05 Jun '08

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Did you check to see if there was another mbuf in the chain (mbuf_next)? -josh On Jun 5, 2008, at 12:58 AM, Thorsten Kramp wrote: Hello all, Best, Thorsten _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/jgraessley%40apple.com _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… I'm developing a TCP filter NKE for 10.5, with a user-level process communicating with the NKE via a control socket in stream mode. The user-level process waits for data from the NKE by calling select and read/write, respectively. However, sometimes when the user-level process writes to the control socket some data, not all the data seems to be passed to the NKE (even though the return value of write indicates that all bytes have been passed to the socket). More precisely, for some reason the NKE only gets the first 204 bytes in the m parameter of the NKE's ctl_send_func. Interestingly, it's always precisely 204 bytes even though the user-level process sometimes writes 217 bytes, 218 bytes, 300 bytes... Does anybody has ever seen this behaviour? All suggestions are very welcome! Thanks in advance. This email sent to jgraessley(a)apple.com This email sent to site_archiver(a)lists.apple.com

1 0

Re: task_for_pid return dsChkErr
by Jean-Daniel Dupas 05 Jun '08

05 Jun '08

site_archiver(a)lists.apple.com Delivered-To: Darwin-dev(a)lists.apple.com Le 5 juin 08 à 10:30, Graham.Lee(a)sophos.com a écrit : darwin-dev-bounces+graham.lee=sophos.com(a)lists.apple.com wrote on 2008-06-05 09:26:08: http://developer.apple.com/releasenotes/Security/RN-CodeSigning/ "[…]unsigned code will not be allowed to execute the task_for_pid(3) system call unless it is running as root." Cheers, Graham. _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com Oh, when I run this with sudo, it works well. And I found this comment in /private/etc/authorization: Used by task_for_pid(...). Task_for_pid is called by programs requesting full control over another program for things like debugging or performance analysis. This authorization only applies if the requesting and target programs are run by the same user; it will never authorize access to the program of another user. But why task_for_pid() still failed though same user? How does gdb can work without sudo? I just want to implement a tool to collect some information of my application. As taskgated is launched using the -p argument (according to the corresponding launchd propertylist), using the Tiger way should works too, and does not require that you sign the code (ie, a process with a primary effective group of procmod or procview is allowed to get task ports). smime.p7s

1 0

Re: task_for_pid return dsChkErr
by abandon 05 Jun '08

05 Jun '08

site_archiver(a)lists.apple.com Delivered-To: Darwin-dev(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:cc:message-id:from:to :in-reply-to:content-type:content-transfer-encoding:mime-version :subject:date:references:x-mailer; bh=OfuHHLZjkALvtdoXRPtwPgo4AQscAXosRcUicJTj4ak=; b=ZVrRI6RjV+FJu/9XwyGix5WxWt5QBo6w7aleFJ8IFbJ8WomKB+nZ4L9FiRtCDUVMw2 5KFY/GUYm6FGIdVdnUGEVr4JcpcyoB9VDh/q94Q2HYTY93UN1owoLM9mNzT4Tbg/E7gF fq5z/16lwwDeP92c9lK+uDx4VlQISWYVp5AxM= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=cc:message-id:from:to:in-reply-to:content-type :content-transfer-encoding:mime-version:subject:date:references :x-mailer; b=bIj/bJX2ZTHJbAqUFWPfrRPzWuIb8MOVmA3JhuZofjlfRjKHzMHIMPBB/GidosxlFz xeJ5On8BzqDw4c9DB82rc2EEOTFfn3f9jZzG4ZLIpGg+VYc9s2InCv7qv2PeQ9wmX+W5 1HeVgMHcyAyeCCJrYcPtN/HoAQTPEI62tElyI= Oh, got it, thanks :-) On 2008-6-5, at 下午4:30, Graham.Lee(a)sophos.com wrote: darwin-dev-bounces+graham.lee=sophos.com(a)lists.apple.com wrote on 2008-06-05 09:26:08: http://developer.apple.com/releasenotes/Security/RN-CodeSigning/ "[…]unsigned code will not be allowed to execute the task_for_pid(3) system call unless it is running as root." Cheers, Graham. -- Graham Lee Senior Macintosh Software Engineer, Sophos Tel: 01235 540266 (Direct) Web: http://www.sophos.com Sophos - Security and Control Sophos Plc, The Pentagon, Abingdon Science Park, Abingdon, OX14 3YP, United Kingdom. Company Reg No 2096520. VAT Reg No GB 348 3873 20. _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… Oh, when I run this with sudo, it works well. And I found this comment in /private/etc/authorization: Used by task_for_pid(...). Task_for_pid is called by programs requesting full control over another program for things like debugging or performance analysis. This authorization only applies if the requesting and target programs are run by the same user; it will never authorize access to the program of another user. But why task_for_pid() still failed though same user? How does gdb can work without sudo? I just want to implement a tool to collect some information of my application. This email sent to site_archiver(a)lists.apple.com

1 0

Re: task_for_pid return dsChkErr
by Graham.Lee＠sophos.com 05 Jun '08

05 Jun '08

site_archiver(a)lists.apple.com Delivered-To: Darwin-dev(a)lists.apple.com darwin-dev-bounces+graham.lee=sophos.com(a)lists.apple.com wrote on 2008-06-05 09:26:08: > Oh, when I run this with sudo, it works well. And I found this comment > in /private/etc/authorization: > Used by task_for_pid(...). Task_for_pid is called by programs > requesting full control over another program for things like debugging > or performance analysis. This authorization only applies if the > requesting and target programs are run by the same user; it will never > authorize access to the program of another user. > > But why task_for_pid() still failed though same user? How does gdb can > work without sudo? I just want to implement a tool to collect some > information of my application. http://developer.apple.com/releasenotes/Security/RN-CodeSigning/ "[…]unsigned code will not be allowed to execute the task_for_pid(3) system call unless it is running as root." Cheers, Graham. -- Graham Lee Senior Macintosh Software Engineer, Sophos Tel: 01235 540266 (Direct) Web: http://www.sophos.com Sophos - Security and Control Sophos Plc, The Pentagon, Abingdon Science Park, Abingdon, OX14 3YP, United Kingdom. Company Reg No 2096520. VAT Reg No GB 348 3873 20. _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com

1 0

Re: task_for_pid return dsChkErr
by abandon 05 Jun '08

05 Jun '08

site_archiver(a)lists.apple.com Delivered-To: Darwin-dev(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:cc:message-id:from:to :in-reply-to:content-type:content-transfer-encoding:mime-version :subject:date:references:x-mailer; bh=W99Y2Lqu9Qz8CI+J2Hw8RXWuH9XX6xmgnfIz9YO+iJw=; b=Ff7uQnbNgEJJLwC6kmNl4kS1A8OX9TBXKvq+aZv3Sn5CW+3JZsy48U9p3FK7mjvcJs snMSQHzMEQoL9H1ViO6Q/eAieSPKYLjdZPm0P/N1w8iLx4IsXMnuBQGp89K2Bum8wm8c CjmRUlidjZVDdOEwMLFIqj3J0Du7aYnBJyyTc= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=cc:message-id:from:to:in-reply-to:content-type :content-transfer-encoding:mime-version:subject:date:references :x-mailer; b=Ck1+0WmJAQDDHQNpUVfgEP+CyP8NL37+nv64k83KF/kNpVPHU+y3Q5MhbXV5FpQhM8 UIm2Z8VAqxEolKF6o8Vrv9tFK/mvNWDKjzb/71guSUrM2tc2Anlk2AUHY4eiG6fifsaU G3WqzwV4llefl31jPTv5LPzIg2ZmrxhpcI0ak= On 2008-6-5, at 下午3:30, Jean-Daniel Dupas wrote: I don't think this functions returns an OSStatus, isn't it ? Le 5 juin 08 à 08:41, abandon a écrit : Hi, all, #include <sys/sysctl.h> #include <mach-o/dyld.h> #include <mach/mach_traps.h> #include <mach/mach_init.h> #include <mach/message.h> #include <mach/vm_map.h> #include <mach/vm_region.h> #include <mach/mach_port.h> #include <mach-o/fat.h> #include <mach-o/nlist.h> #include <Carbon/Carbon.h> _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/devlists%40shadowlab.org _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… Oh, when I run this with sudo, it works well. And I found this comment in /private/etc/authorization: Used by task_for_pid(...). Task_for_pid is called by programs requesting full control over another program for things like debugging or performance analysis. This authorization only applies if the requesting and target programs are run by the same user; it will never authorize access to the program of another user. But why task_for_pid() still failed though same user? How does gdb can work without sudo? I just want to implement a tool to collect some information of my application. Using GetMacOSStatusErrorString() will not returns anything usefull, but mach_error_string() will. Since Mac OS 10.4 Tiger Intel, this function need special rights to be used (for obvious security reasons). See man taskgated, this is a good starting point to find information about those restrictions. Is task_for_pid still supported on Leopard 10.5.3(9D34)? I found when I call this function it will always return dsChkErr( code 5). Following my simple test program, use gcc test.c -o test -framework carbon to compile and ./test pid to run. int main(int argc, char* argv[]) { mach_port_name_t task; int pid = atoi(argv[1]); int error = task_for_pid((mach_port_name_t)task_self_trap(), pid, (mach_port_name_t *) &task); if (error) { printf("task_for_pid return error %d : %s\n", error, GetMacOSStatusErrorString(error)); } else { printf("Get the process %d's task port : %x\n", pid, task); } return 0; } This email sent to devlists(a)shadowlab.org This email sent to site_archiver(a)lists.apple.com

1 0