October 2009 - Darwin-dev - lists.apple.com

Re: kqueue EVFILT_PROC and child process pid
by Michael Smith 12 Oct '09

12 Oct '09

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com

1 0

Re: kqueue EVFILT_PROC and child process pid
by Stacey Son 11 Oct '09

11 Oct '09

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com On Oct 11, 2009, at 3:01 PM, Dave Keck wrote: As far as getting the the new child's PID, I don't think it's possible using the kevent APIs from userland. (sys/event.h mentions "lower bits contain the PID of the child", but I think this is kernel-only.) FWIW: Best Regards, -stacey. _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This depends on which version of Mac OS you are using... Before 10.5 I believe you could use NOTE_TRACK and NOTE_CHILD to get the PID of the child. The PID of the child would be stored in the ident field and the PID of the parent (aka. PPID) would be stored in the data field. I guess this is no longer the case. See sys/event.h: /* * DEPRECATED!!!!!!!!! * NOTE_TRACK, NOTE_TRACKERR, and NOTE_CHILD are no longer supported as of 10.5 */ This email sent to site_archiver(a)lists.apple.com

1 0

Re: kqueue EVFILT_PROC and child process pid
by Terry Lambert 11 Oct '09

11 Oct '09

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com There's popen of ps, which is much preferred to sysctl. -- Terry On Oct 11, 2009, at 1:01 PM, Dave Keck <dave(a)docdave.com> wrote: kevents are perfectly capable of monitoring another, unrelated process. It's become quite a hobby of mine, actually. :) As far as getting the the new child's PID, I don't think it's possible using the kevent APIs from userland. (sys/event.h mentions "lower bits contain the PID of the child", but I think this is kernel-only.) Of course you could always iterate over the process list checking each process' parent PID... there's probably a better way, though. _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… Other than that, we're not going to alert you on new process creation other than by return code if you are the creator, and at some point we might even take steps to make it hard for you to do so, like randomizing pids. You cannot watch for all processes, only processes you created. After you fork, you can add a kqueue to watch for the new process' death, in lieu of waitpid() or a SIGCHLD signal. You cannot however sit there, watching for any random process' death. Mac OS X has no such mechanism, AFAIK. This email sent to site_archiver(a)lists.apple.com

1 0

Re: kqueue EVFILT_PROC and child process pid
by Dave Keck 11 Oct '09

11 Oct '09

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:sender:received:in-reply-to :references:from:date:x-google-sender-auth:message-id:subject:to:cc :content-type; bh=AC5mRItjr9iZEB7aXvYUo0awNLFEsvm141AQnRzXdRg=; b=XNovN1tHSXNV5ZpsvDuOV1Jth+7A0GgDlv0RhERbrFixtejaYDIlmOGxZOl6tVLGyu hEmzXY8JEF2HvuJu8c2AptpLEtCxwDoORfbUp/ZffTYyEwEQO5GL598Q9eqWYQKwP3BV Enivdet8MIBf5bdu8f7ccxcAP1hVhF/ZfIF+s= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:sender:in-reply-to:references:from:date :x-google-sender-auth:message-id:subject:to:cc:content-type; b=tQuNR8ZKBiHRqAu0sTbDp/Il54oA3Te2A87U3WfHmwqFnRxcpdEuBhdx0P0PQhed8G DawPPrRxG5FGGtteEvL6yISxMI3CU5g99Gff/ZrNyFJW89rh+frFfUpxKOcwWtAWjj3t nY8AUYIo2DXfaXI12+QJ83XEVv99saZnCJisM= > You cannot watch for all processes, only processes you created. After you > fork, you can add a kqueue to watch for the new process' death, in lieu of > waitpid() or a SIGCHLD signal. You cannot however sit there, watching for > any random process' death. Mac OS X has no such mechanism, AFAIK. kevents are perfectly capable of monitoring another, unrelated process. It's become quite a hobby of mine, actually. :) As far as getting the the new child's PID, I don't think it's possible using the kevent APIs from userland. (sys/event.h mentions "lower bits contain the PID of the child", but I think this is kernel-only.) Of course you could always iterate over the process list checking each process' parent PID... there's probably a better way, though. _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com

1 0

Re: kqueue EVFILT_PROC and child process pid
by Damien Sorresso 11 Oct '09

11 Oct '09

site_archiver(a)lists.apple.com Delivered-To: Darwin-dev(a)lists.apple.com On Oct 11, 2009, at 9:18 AM, Rustam Muginov wrote: > Then using kqueue with EVFILT_PROC i can get the notification that observed process forked/execed a child process. Yes. > How could I know the pid of child process? Unfortunately, you cannot get this information directly from kqueue(3). You can do some sysctl(3) magic, but that's a very large club for this problem. > Additionaly, how much overhead for the system adds observing all of the running processes? Is it any other, more lightweight way to watch for newer spawned processes then kqueue? On Mac OS X, launchd attaches kevents to most PIDs on the system. It's a very lightweight mechanism, and your process' contribution to this overhead in the kernel would negligible compared to what's already there anyway. -- Damien Sorresso BSD Engineering Apple Inc. _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com

1 0

Re: kqueue EVFILT_PROC and child process pid
by Ryan McGann 11 Oct '09

11 Oct '09

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Then using kqueue with EVFILT_PROC i can get the notification that observed process forked/execed a child process. Yes that is correct. Additionaly, how much overhead for the system adds observing all of the running processes? Is it any other, more lightweight way to watch for newer spawned processes then kqueue? See this technote: http://developer.apple.com/mac/library/technotes/tn/tn2050.html Ryan _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… How could I know the pid of child process? I am guessing by this statement and the one below you are misunderstanding what a child process is. A child process is a process that you yourself created using fork/exec. Therefore, you know the PID because that's the PID returned from fork(). You cannot watch for all processes, only processes you created. After you fork, you can add a kqueue to watch for the new process' death, in lieu of waitpid() or a SIGCHLD signal. You cannot however sit there, watching for any random process' death. Mac OS X has no such mechanism, AFAIK. Depending on what processes you care about, it might be possible to watch process creation/deaths for all processes of a certain type. But the mechanisms I am aware of only work on GUI processes, not faceless (daemon) processes--in short, it only works on processes that connect to the WindowServer, and only in the same bootstrap context as your own application, meaning you will need to have multiple instances of the application running for every user logged into the system. This email sent to site_archiver(a)lists.apple.com

1 0

kqueue EVFILT_PROC and child process pid
by Rustam Muginov 11 Oct '09

11 Oct '09

site_archiver(a)lists.apple.com Delivered-To: Darwin-dev(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:from:to :content-type:content-transfer-encoding:mime-version:subject:date :x-mailer; bh=f5FxhQd/U6YLBL/f1K9sht3bHE4+2rds/wV7Op7C/QI=; b=DpgJj9PoLDfw7CAej4aIdkO3b5bhKjVVuAcEFVGzMkBCkK7HGKsmjZF1bRvif/r8Cw eCZIgc0mGRjZWyuQDchZhofZodTfFDTB1yeL9BYDurJE97/yyZf9zLnOnJ0OWsyBm0BF DZSOox2sLzVBLqV7Xq0q1r6BPi8Y3+GuuSUrg= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:from:to:content-type:content-transfer-encoding :mime-version:subject:date:x-mailer; b=e7hXIuhQMDjEHYqpBnYnpxI9Bu4Fmn+Qlh8jk0Q3NVvtPnTS0z6vwI1/6kqg43RS18 EdKL0yhbIW6/skvMULfYnl/41cghD6xaNt/SxbizkHJ0oWg0r0NSe+wJTKDJOMLFzlkw fspO0L2TX7uR1bNmuvzU3QRps0lcF5Sp1VfcU= How could I know the pid of child process? Thank you in advance. -- Sincerely, Rustam Muginov _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… Then using kqueue with EVFILT_PROC i can get the notification that observed process forked/execed a child process. Additionaly, how much overhead for the system adds observing all of the running processes? Is it any other, more lightweight way to watch for newer spawned processes then kqueue? This email sent to site_archiver(a)lists.apple.com

1 0

Re: new malloc calls
by Brian Bergstrand 09 Oct '09

09 Oct '09

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com These are probably the malloc routines to support libcache/NSCache. http://developer.apple.com/mac/library/releasenotes/MacOSX/WhatsNewInOSX/Ar… On Oct 9, 2009, at 5:31 PM, ariel.burton(a)totalviewtech.com wrote: Hello, I'm looking at <malloc/malloc.h>, and I see a number of what appear to be new calls: extern malloc_zone_t *malloc_default_purgeable_zone(void); /* Returns a pointer to the default purgeable_zone. */ extern int malloc_make_nonpurgeable(void *ptr); /* Makes an allocation from the purgeable zone nonpurgeable. * Returns zero if the contents were not purged since the last * call to malloc_make_purgeable, else returns non-zero. */ What are purgeable zones? Where are these calls documented? Many thanks, Ariel Burton Brian Bergstrand <http://www.bergstrand.org/brian/> PGP Key ID: 0xB6C7B6A2 _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… extern void malloc_make_purgeable(void *ptr); /* Make an allocation from the purgeable zone purgeable if possible. */ This email sent to site_archiver(a)lists.apple.com

1 0

new malloc calls
by ariel.burton＠totalviewtech.com 09 Oct '09

09 Oct '09

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com User-agent: nail 11.25 7/29/05 Hello, I'm looking at <malloc/malloc.h>, and I see a number of what appear to be new calls: extern malloc_zone_t *malloc_default_purgeable_zone(void); /* Returns a pointer to the default purgeable_zone. */ extern void malloc_make_purgeable(void *ptr); /* Make an allocation from the purgeable zone purgeable if possible. */ extern int malloc_make_nonpurgeable(void *ptr); /* Makes an allocation from the purgeable zone nonpurgeable. * Returns zero if the contents were not purged since the last * call to malloc_make_purgeable, else returns non-zero. */ What are purgeable zones? Where are these calls documented? Many thanks, Ariel Burton _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com

1 0

launchd & launchctl Aqua session type on OSX Tiger
by James Mead 09 Oct '09

09 Oct '09

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com User-agent: Thunderbird 2.0.0.23 (Macintosh/20090812) Does anyone have any ideas how I might get this working on OSX Tiger? _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… I have a script which I can successfully schedule using on OSX Leopard as follows :- launchctl load -w -S Aqua com.floehopper.script Apparently I need the Aqua session type because the script accesses the keychain using the SecKeychainFindGenericPassword function. If I don't set the session type to Aqua, I get a errSecInteractionNotAllowed "Interaction with the Security Server is not allowed" error (-25308). However, I also want to schedule the script on OSX Tiger, but the session type -S option is not available for launchctl. I've tried calling the SecKeychainSetUserInteractionAllowed function with the state parameter set to false, but then I end up with a errSecAuthFailed "Authorization/Authentication failed" error (-25293). This email sent to site_archiver(a)lists.apple.com

1 0