January 2009 - Darwin-dev - lists.apple.com

Re: task_for_pid never returns KERN_SUCCESS, any ideas?
by Jason Coco 12 Jan '09

12 Jan '09

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:cc:message-id:from:to :in-reply-to:content-type:content-transfer-encoding:mime-version :subject:date:references:x-mailer; bh=6jGOFPu9+d/GbFILu11njxooXj8bGJxzY0qCs8luW6M=; b=ldMAwQ+HSgURa4HZr01jhETs9nU8exYWguhaHUNZ/5SaajCpMyCfnrY4rZeH9eO32Y DXZvilYI26mX3062MaeTggTTkToKhlqa5fpZWAPpe78XPFJaC8mL/UOB/s/7V7ERxziu OTygfWDb4SW+Qh1nSnDaQJxAs/C7p+RRTHA4A= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=cc:message-id:from:to:in-reply-to:content-type :content-transfer-encoding:mime-version:subject:date:references :x-mailer; b=uz3fdUNQ0T2H75RZMFf63GXCCiTclZw+/l77CWhtrgk4Ro/ceK5au+gVhpAbI5QQcr LRRjtYPLakfKDCVU5nlIpIYCItEK1WOtf0+Dd/hkdTvIvokdT9xj9rT91+STsj8Kb4Rw 6F0qqUdSQoC+Jp4IrJM7KlueyjG2lYxeFL3hU= On Jan 12, 2009, at 14:01 , Jean-Daniel Dupas wrote: It was until Mac OS 10.4 Intel version and Mac OS 10.5 for PPC and Intel (IIRC) Yeah, it was definitely after the Intel release, but not at the exact moment... I remember because it was with release 10.4.5 or something... one of the big releases, but it was slightly memorable because that release broke Microsoft Office 2004 (which relied on task_for_pid() to run). _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com

1 0

Re: task_for_pid never returns KERN_SUCCESS, any ideas?
by Jean-Daniel Dupas 12 Jan '09

12 Jan '09

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Le 12 janv. 09 à 19:37, Gary Fung a écrit : On Jan 12, 2009, at 12:54 , Gary Fung wrote: Tried to retrieve task_info_t by using task_for_pid but the following code does not equate to true task_t task = MACH_PORT_NULL; struct task_basic_info tinf; if(task_for_pid(mach_task_self(), pid, &task) == KERN_SUCCESS) { ... //not reached } mach_task_self returns non null value so that should be ok. But task_for_pid does not return anything for &task. Any ideas? I've iterated through all the pids currently running, same result. Ran it on Leopard. The easiest way to deal with this (although, probably not the best way) is to execute the application as root. You can see the man page for taskgated(8) for more information on task_for_pid() and its security issues. Jason _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… Jason Coco wrote: task_for_pid() requires special privileges to execute. Instead of testing for KERN_SUCCESS in the future, I suggest using a variable to test, then you can see exactly what failed (in this case, you will not have privileges to execute it). It returns 5 for all pids, which is a KERN_FAILURE correct? This doesn't provide much information at all. It only returns KERN_SUCCESS for the running process itself. I thought you have permission to retrieve task_info for other processes under the same user? It was until Mac OS 10.4 Intel version and Mac OS 10.5 for PPC and Intel (IIRC) Is there an easier way to retrieve the memory usage of a process? Retrieving the pid and process name was not this difficult. I think you can get some value about memory usage usign sysctl to retreive the distant kproc_info struct. This email sent to site_archiver(a)lists.apple.com

1 0

Re: task_for_pid never returns KERN_SUCCESS, any ideas?
by Jason Coco 12 Jan '09

12 Jan '09

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:cc:message-id:from:to :in-reply-to:content-type:content-transfer-encoding:mime-version :subject:date:references:x-mailer; bh=DZLh5n7P+4uFcNpQlhO4yVXjcTg6l327OpeDWUk8KMw=; b=FL6G1mxROs1h8zHiP1k9mfM6G6KbF+9SXszGB9QwTANlCRvm5DsOpXMvd2fDtz6UOM KVgkT2xUvENtov6BJnNY9/H7Ehy6z+foxU2O9VWN0nbUOLaYgKUcfmphEzAyHNov/WoB 3vtgfWwZI4xl/C6dEOGKF+x/lTXcyadIkekfE= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=cc:message-id:from:to:in-reply-to:content-type :content-transfer-encoding:mime-version:subject:date:references :x-mailer; b=o9B5CGo/owA9iUX87Gu7kywbE5meEYvO9Qnr2nOdAkmik/wVQnipoeEVm2hOyHmgb3 GxalkBx9r0KRLSDGr7ywyIVX67dzdjyxSGDnv20mw4p4M+M+unH4KY3sUMFTd+PBKd/5 svGSLK8vArEbsRXZgGguelV3nWXt4CN2NZ9vk= On Jan 12, 2009, at 13:37 , Gary Fung wrote: On Jan 12, 2009, at 12:54 , Gary Fung wrote: Tried to retrieve task_info_t by using task_for_pid but the following code does not equate to true task_t task = MACH_PORT_NULL; struct task_basic_info tinf; if(task_for_pid(mach_task_self(), pid, &task) == KERN_SUCCESS) { ... //not reached } mach_task_self returns non null value so that should be ok. But task_for_pid does not return anything for &task. Any ideas? I've iterated through all the pids currently running, same result. Ran it on Leopard. The easiest way to deal with this (although, probably not the best way) is to execute the application as root. You can see the man page for taskgated(8) for more information on task_for_pid() and its security issues. Jason Jason Coco wrote: task_for_pid() requires special privileges to execute. Instead of testing for KERN_SUCCESS in the future, I suggest using a variable to test, then you can see exactly what failed (in this case, you will not have privileges to execute it). It returns 5 for all pids, which is a KERN_FAILURE correct? This doesn't provide much information at all. It only returns KERN_SUCCESS for the running process itself. I thought you have permission to retrieve task_info for other processes under the same user? No, it was deemed a security risk in one of the patches to tiger (close to the release of leopard), and since that patch, you have to have privileges to execute task_for_pid(), even for tasks owned by the same user as the process. If the process is in the procmod or procview group, it may be given access, or if it has the system.privilege.taskport right, it will be given access. See taskgated(8) for more information. And yes, unfortunately 5 is just the general KERN_FAILURE, but it's still good practice :) Is there an easier way to retrieve the memory usage of a process? Retrieving the pid and process name was not this difficult. It is difficult because once you have the task port right, you can inject anything into that task that you feel like. For instance, you can start a new thread that the process knows nothing about and inject it directly into the running process. _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com

1 0

Re: task_for_pid never returns KERN_SUCCESS, any ideas?
by Gary Fung 12 Jan '09

12 Jan '09

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com User-agent: Thunderbird 2.0.0.19 (Windows/20081209) On Jan 12, 2009, at 12:54 , Gary Fung wrote: Tried to retrieve task_info_t by using task_for_pid but the following code does not equate to true task_t task = MACH_PORT_NULL; struct task_basic_info tinf; if(task_for_pid(mach_task_self(), pid, &task) == KERN_SUCCESS) { ... //not reached } mach_task_self returns non null value so that should be ok. But task_for_pid does not return anything for &task. Any ideas? I've iterated through all the pids currently running, same result. Ran it on Leopard. task_for_pid() requires special privileges to execute. Instead of testing for KERN_SUCCESS in the future, I suggest using a variable to test, then you can see exactly what failed (in this case, you will not have privileges to execute it). The easiest way to deal with this (although, probably not the best way) is to execute the application as root. You can see the man page for taskgated(8) for more information on task_for_pid() and its security issues. Jason _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com

1 0

Re: task_for_pid never returns KERN_SUCCESS, any ideas?
by Jason Coco 12 Jan '09

12 Jan '09

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:cc:message-id:from:to :in-reply-to:content-type:content-transfer-encoding:mime-version :subject:date:references:x-mailer; bh=nKIrZO1P7tFlf7ytuCQX0rUQQPhjxkdC6p5AFgKngiQ=; b=t4ZCPqtqw2ds9Xx6WIt744+S6XV23Eaabp2WhrGdxDgYQOPq17uwSIOGRD28RnP8rM 5Z70VM1xH97qhfMp8BWPfTn9Ivym17OWfLhKyyeIDxAf15n2L/7IgAsBjd2DASReOOmG EwBHD/P9PVXZcCaIxCKCzBw+4jshTagV+4gDE= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=cc:message-id:from:to:in-reply-to:content-type :content-transfer-encoding:mime-version:subject:date:references :x-mailer; b=rN0frfeeDhzQNm/2N3bUYL1ZHhLvB3/yRGmC0lVpvufh95rkK0sqk/NQKb/2D6FUPv Q6Q7H4Z6PDVOqjtMsKhLSVdxAK06bfwYk8w8I3flXLSgPnVWcMtn9+utdO5BbxDq+Z6L LJeCVzjkwffHut1RJggDnmpuWyGMu0jk69cOU= On Jan 12, 2009, at 12:54 , Gary Fung wrote: task_t task = MACH_PORT_NULL; struct task_basic_info tinf; if(task_for_pid(mach_task_self(), pid, &task) == KERN_SUCCESS) { ... //not reached } Jason _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… Tried to retrieve task_info_t by using task_for_pid but the following code does not equate to true mach_task_self returns non null value so that should be ok. But task_for_pid does not return anything for &task. Any ideas? I've iterated through all the pids currently running, same result. Ran it on Leopard. task_for_pid() requires special privileges to execute. Instead of testing for KERN_SUCCESS in the future, I suggest using a variable to test, then you can see exactly what failed (in this case, you will not have privileges to execute it). The easiest way to deal with this (although, probably not the best way) is to execute the application as root. You can see the man page for taskgated(8) for more information on task_for_pid() and its security issues. This email sent to site_archiver(a)lists.apple.com

1 0

Re: task_for_pid never returns KERN_SUCCESS, any ideas?
by Jean-Daniel Dupas 12 Jan '09

12 Jan '09

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Le 12 janv. 09 à 18:54, Gary Fung a écrit : task_t task = MACH_PORT_NULL; struct task_basic_info tinf; if(task_for_pid(mach_task_self(), pid, &task) == KERN_SUCCESS) { ... //not reached } There is note about it here (at the end of the page) : http://developer.apple.com/releasenotes/Security/RN-CodeSigning/ and you can also see man taskgated for other infos. _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… Tried to retrieve task_info_t by using task_for_pid but the following code does not equate to true mach_task_self returns non null value so that should be ok. But task_for_pid does not return anything for &task. Any ideas? I've iterated through all the pids currently running, same result. Ran it on Leopard. May trying to see what the returned value is may be a good starting point. Is all mach functions return error code, it's to help to find what append. That said, is probably a permission issue, as task_for_pid is restricted. This email sent to site_archiver(a)lists.apple.com

1 0

task_for_pid never returns KERN_SUCCESS, any ideas?
by Gary Fung 12 Jan '09

12 Jan '09

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com User-agent: Thunderbird 2.0.0.19 (Windows/20081209) task_t task = MACH_PORT_NULL; struct task_basic_info tinf; if(task_for_pid(mach_task_self(), pid, &task) == KERN_SUCCESS) { ... //not reached } Tried to retrieve task_info_t by using task_for_pid but the following code does not equate to true mach_task_self returns non null value so that should be ok. But task_for_pid does not return anything for &task. Any ideas? I've iterated through all the pids currently running, same result. Ran it on Leopard. _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Stop and start daemon
by Jason Coco 12 Jan '09

12 Jan '09

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:cc:message-id:from:to :in-reply-to:content-type:content-transfer-encoding:mime-version :subject:date:references:x-mailer; bh=LsZCzYTSgmYtoelr8Qkq/Egk/nFy6sDqkUNN0MHDJOY=; b=Y2PqbT+oWCOwgt8266t2Pu/YOzzr6KQ4I6+vRbgJCeYmg3jsju7WjDShVXybEMrZ4f KdxcJkBDm72OmC8/FBuGeXCPrk6lKoCDvkUSEAONUYnKLwgTvR+yWeYeApp78QUPswGY 2XTQyzW9lyqNNOweJIaj1v6uMGrawD6lAW6Eo= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=cc:message-id:from:to:in-reply-to:content-type :content-transfer-encoding:mime-version:subject:date:references :x-mailer; b=I6IxtJ/YxXLS0n+Rocg2i6HWLjmdDLUJY/1UBiN39R/H8aKJ8uKHHmxO9nCqNZVT16 8VoZN4beZDmSAFp+VdH0F7K9/P0KpEGFZI6CjyEWAj5sFsXs0+jHeML0LV+ZTx5ynBJu 5UKZFKrDtiVwXg6xeFpbcIHVV9NiIZCwfyC9s= On Jan 12, 2009, at 08:55 , Rakesh Singhal wrote: Hi Jason, Thanks but I knew this thing. Is there any other way to do the same thing only on the basis of name of daemon application. launchctl start mydaemon launchctl stop mydaemon #!/bin/bash case "$1" in stop) /bin/launchctl stop com.mycompany.mydaemon.daemon ;; restart) /bin/launchctl stop com.mycompany.mydaemon.daemon ;; *) echo "Usage $0 { stop|start|restart|status } exit 1 esac HTH, Jason _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… I think we can not do even by using StartupItems. Using the dot notation for your daemon is just the suggested form (although it's suggested for a good reason). You can use whatever label you wish. Just make the label in the plist the same as the name of the daemon and then you can start and stop it using just the daemon's name. That's basically the way it's done. If you want to give users something else to start and stop the daemon, you can create a simple script that calls launchctl. For example: start) /bin/launchctl start com.mycompany.mydaemon.daemon # use whatever label is in the plist ;; status) if (/bin/launchctl list | grep com.mycompany.mydaemon.daemon >/ dev/null); then echo Daemon is running else echo Daemon is not running fi ;; You can also write an application which uses the launchd api to programatically start and stop the daemon. This way you could write a little gui app to control it or a system panel to toggle it on or off. If you wish to do it this way, see the API in /usr/include/launch.h This email sent to site_archiver(a)lists.apple.com

1 0

Re: Stop and start daemon
by Rakesh Singhal 12 Jan '09

12 Jan '09

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from:to :subject:cc:in-reply-to:mime-version:content-type :content-transfer-encoding:content-disposition:references; bh=FdNLgGwujzq/XVEHI+mK9Ealp3QRJJDVbVs7OfLBXuY=; b=i5kPXqzJ0+VcwGURbbY3ORHKyFk3zHRLMVOUBHMTFi70smb0NF2rrV45BrP6arklH6 NlX7k5g0rUiUvpJJ2Asg0L936v6mquY4m+OP9za6+gllwMEWNaNyjkDw655gvFYbj0Qc 7MmMw7ag7W1hSYh8XT7eCL/odMOHDZ23WeZl4= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:to:subject:cc:in-reply-to:mime-version :content-type:content-transfer-encoding:content-disposition :references; b=orJ/0RVcF/0xUz9O7tj2x9l4UlEuYsWBkq1M5aVR/eNAl/4idSnIXduEQIhlaFdTA0 efFmOeA8VWvt6SO8Vm52YU61pD/gXF6kxiwEIS/cjxK0o0rYtKJ0A4K/mKHE8cpj/yvb MTl6tYMQDHW59mC7x0SWNGRLkiulm9I5iZvQY= Hi Jason, Thanks but I knew this thing. Is there any other way to do the same thing only on the basis of name of daemon application. I think we can not do even by using StartupItems. Regards rksinghal On Mon, Jan 12, 2009 at 7:20 PM, Jason Coco <jason.coco(a)gmail.com> wrote: > > On Jan 12, 2009, at 07:40 , Rakesh Singhal wrote: > >> Hi all, >> >> I have careted one daemon application and written plist file to launch >> it at boot time. I have kept plist file in launchAgents folder. Now, >> if I quit daemon then it will be killed and to launch it again, I >> should know the path where I kept it. >> >> I want to stop and restart the daemon whenever I need requires without >> knowing the path of damon. How can I do it? It is ok if I have to do >> from terminal. > > You can do this using launchctl. You use the start and stop commands with > launchctl to start and stop the job respectively. You identify the job by > the label you gave it in the plist. So, for example, if your job's label is > com.somecompany.someapp.daemon and you wanted to stop and then start it > (restart), you would do: > > launchctl stop com.somecompany.someapp.daemon > launchctl start com.somecompany.someapp.daemon > > One thing to keep in mind, if your daemon is not a launch agent and is run > at boot-time by root, it's not gonna be located in your namespace, so you > will have to execute launchctl with sudo in order to locate the job. To see > all the jobs running right now, you can use launchctl list. So, to quickly > see if your job is running from the terminal: > > launchctl list | grep com.somecompany.someapp.daemon > > HTH, Jason > _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Stop and start daemon
by Jason Coco 12 Jan '09

12 Jan '09

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:cc:message-id:from:to :in-reply-to:content-type:content-transfer-encoding:mime-version :subject:date:references:x-mailer; bh=KGg32lm55Zv3Hs40Pj/6oSE2q/HedXrxn1XkxE7YDGA=; b=CGUp46RhBs215q04AXCete9PaAYEEtnhoERuvsKNdfnBR3y93/B+cFeMAs7E82bc0a JTKt7vflI+H47dpU9J2vYqEQnHuLfNsCAKojgZyrcucAindPWjFpSqX3vP/CVKawzaBb W0ymmadoggFvhTaY2osuEZoOkJq1MJH7268kY= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=cc:message-id:from:to:in-reply-to:content-type :content-transfer-encoding:mime-version:subject:date:references :x-mailer; b=tJTiJxl6gElC/B0J2JGMVPz8FBoKoA8xEHPXUykUGdtMG/CJVt/Q7A6peseNFXO/c+ jpxJ/4R5AawCNdOi7/wklymQOjxLt2DwgDZO3LuEk0Z8qIOyIivzf9RiJ7javlUszsHN 6AcNLmmoUcQyONmYORgee9NE6t2U6F2pVexDU= On Jan 12, 2009, at 07:40 , Rakesh Singhal wrote: Hi all, I have careted one daemon application and written plist file to launch it at boot time. I have kept plist file in launchAgents folder. Now, if I quit daemon then it will be killed and to launch it again, I should know the path where I kept it. I want to stop and restart the daemon whenever I need requires without knowing the path of damon. How can I do it? It is ok if I have to do from terminal. launchctl stop com.somecompany.someapp.daemon launchctl start com.somecompany.someapp.daemon launchctl list | grep com.somecompany.someapp.daemon HTH, Jason _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… You can do this using launchctl. You use the start and stop commands with launchctl to start and stop the job respectively. You identify the job by the label you gave it in the plist. So, for example, if your job's label is com.somecompany.someapp.daemon and you wanted to stop and then start it (restart), you would do: One thing to keep in mind, if your daemon is not a launch agent and is run at boot-time by root, it's not gonna be located in your namespace, so you will have to execute launchctl with sudo in order to locate the job. To see all the jobs running right now, you can use launchctl list. So, to quickly see if your job is running from the terminal: This email sent to site_archiver(a)lists.apple.com

1 0