December 2009 - Darwin-dev - lists.apple.com

Re: ucontext switch problem
by Roger Pau Monné 31 Dec '09

31 Dec '09

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references :date:message-id:subject:from:to:cc:content-type; bh=VtpC/KTOku+14RXxxpMKXwGnkR/ynzDEISUyWznvGw4=; b=LWUbqpeCzVZ8z6Qzr66hQLMmZ4STYw36wG40JG6q5VQyiQnO2+SOxac+1oIw6DAT2Z gdOhjE7Rxh+B7v8xJ978t9Svx9hYQY51yf5Ggb1FlsitWzHdxs0BVGoDZfRyceJWZnLk ftj+XzIjqHK+pmVKu1tsb9p5qCV5Y5qDtNoFA= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; b=WhArFh1ivu6cBRnd7B4ezpjQ5MLnoqCDfmyJ2XCKQkQARFbqW9T0oxtvvKBXVFt9Xu HCNAdMCVc/RhJifaI0aeiVd2D2tlYWFEhDRJ9KLCVZRafAJyMRd2XEVBPyGFDckdOHQm I5T2kFF8zvZmAQv9qsmApcjcBV8c9J/3xBYsU= _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com ariso.c ariso.h main.c

1 0

Re: How to get encrypted user password
by Alastair Houghton 30 Dec '09

30 Dec '09

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha1; c=relaxed; d=alastairs-place.net; h= subject:mime-version:content-type:from:in-reply-to:date:cc: content-transfer-encoding:message-id:references:to; q=dns/txt; s= aug07; bh=sU+il5kU3NIt7/7sVDPiZlrSKyY=; b=XJNJ6Hagy/CKKUV45lctx1 FqJgPPV66XRjjPRQ49djAh5ZQAHtg0VufISlaIsHi5acAuxj1ymwzT+u2rqFYunv BSvE1HLxUg9963yhW6lxrfi4iMgsETYsKgQjZPk59o8xMomOti25oxG+gWxAllLY qN89yfq1bnWQs28L01qvY= On 30 Dec 2009, at 16:18, Dave Keck wrote: > Directory Services being as painful of an API as it is, perhaps the > Security framework is a better route... I did briefly consider suggesting that, but then realised that it either implies that there is an appropriate right configured in the authorization database. Whether "system.login.tty" is such a right is a matter of debate, I think. One could conceivably create an appropriate right on installation, however---e.g. it might genuinely make sense to create a right "com.example.ftp" or even a whole suite of such rights. Then again, it might be better to do something similar in Open Directory, since the authorization database is presently local (at least, as far as I know... I'd love for that not to be true). Kind regards, Alastair. -- http://alastairs-place.net _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com

1 0

Re: How to get encrypted user password
by Dave Keck 30 Dec '09

30 Dec '09

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:sender:received:in-reply-to :references:from:date:x-google-sender-auth:message-id:subject:to:cc :content-type; bh=HwI07lJ8V2JVc5CWFn9AmOHzpklTWIBvqIbo5SD58fU=; b=fOkmKI7YkYTToKLMQw7W23sqSPoZaPXiiOjCGvZQNg8as8HIIwqNWVnPA3EyzqA7Wm DT18uTBvCvNcHre38e9sY39vqYSXbSkl0bMY9dQKYA/WQUs9UXGV0T9+1gKYsmO/oEWh GsGg6T6Er5ej2PdtUmc7u8LwapTUnYQ7/SADc= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:sender:in-reply-to:references:from:date :x-google-sender-auth:message-id:subject:to:cc:content-type; b=Gf46XhCneCGDkvDX/m+8EpllWjKEzmEsDLwm8D/HreHGDoih+IJLyUs/yTKUqkZEgF zWiID16+TOTHqNKb//SW5kU375ESGev2ycunB2kCChCceJCh7bBWof9HGlcb9/mnOoVY 79S5ZfPF4uBWNFiM+antZQEvGuuxPLuEhMl70= Directory Services being as painful of an API as it is, perhaps the Security framework is a better route... bool authenticateUser(const char *userName, const char *password) { AuthorizationRef authRef = nil; AuthorizationRights authRights; AuthorizationEnvironment authEnvironment; AuthorizationItem authRightItems[1], authEnvironmentItems[2]; OSStatus authResult = 0; bool result = false; assert(userName && strlen(userName)); assert(password); authRightItems[0].name = "system.login.tty"; authRightItems[0].value = nil; authRightItems[0].valueLength = 0; authRightItems[0].flags = 0; authRights.items = authRightItems; authRights.count = 1; authEnvironmentItems[0].name = kAuthorizationEnvironmentUsername; authEnvironmentItems[0].value = (void *)userName; authEnvironmentItems[0].valueLength = strlen(userName); authEnvironmentItems[0].flags = 0; authEnvironmentItems[1].name = kAuthorizationEnvironmentPassword; authEnvironmentItems[1].value = (void *)password; authEnvironmentItems[1].valueLength = strlen(password); authEnvironmentItems[1].flags = 0; authEnvironment.items = authEnvironmentItems; authEnvironment.count = 2; authResult = AuthorizationCreate(&authRights, &authEnvironment, kAuthorizationFlagDefaults, &authRef); if (authResult != errAuthorizationSuccess || !authRef) goto cleanup; result = true; cleanup: { if (authRef) AuthorizationFree(authRef, kAuthorizationFlagDefaults), authRef = nil; } return result; } _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com

1 0

Re: -all_load for selected archives
by Joel Reymont 30 Dec '09

30 Dec '09

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:content-type:mime-version :subject:from:in-reply-to:date:content-transfer-encoding:message-id :references:to:x-mailer; bh=KsQZElDBs0ojdnC4Rdkk1ZJ26E3rVYkHdy0fB/AEblw=; b=Z/HUASvBD+g8ihMiz/Ki6AhFDhaCAvlK7ll9KYHW5OWV45HjwniGc32e1TO5mxfI0P IqRhlMyz0nBr4r0hZA4Xr85hUoRlXj40zBYtOxOYkOl+aF2GsZLSNxzI/qTZnqX+qobD 9V27d2W4WipIdn6wccU/1a4YMJ8brxeJhaJsk= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=content-type:mime-version:subject:from:in-reply-to:date :content-transfer-encoding:message-id:references:to:x-mailer; b=XOaXX/2tEESvPV8pu4Ya4Lmi3IMg/PXMiOnfdVVVTfhV6OxVEoPqh0QPaoPjlNjzv7 4vLdERncXVBDMx4Zb4gmYF/t/a/ltjzS2SYm7xh/ppvCrA6pkPwgvCaFEXhZ10vGzfy8 3jCkDb9viKUChKoXCt/QwI3bvk440E1g3tWIs= Ignore me, please, I discovered -force_load. Happy New Year! On Dec 30, 2009, at 3:49 PM, Joel Reymont wrote: > Is there a way to turn all_load on for selected archives? > > I need all symbols from just a single library since a dylib compiled with '-undefined dynamic_lookup' will be using these symbols down the road. > > I tried -all_load -lmylib -noall_load but disabling all_load does not seem to take effect. --- Mac hacker with a performance bent http://www.linkedin.com/in/joelreymont _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com

1 0

-all_load for selected archives
by Joel Reymont 30 Dec '09

30 Dec '09

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:from:content-type :content-transfer-encoding:subject:date:message-id:to:mime-version :x-mailer; bh=D7k+ofF4TjCGzLoYq6n513WZjz8qPpbJmLrDYSAT1t8=; b=xAM/yw40ohwhL/TxpdcnIj6o8XEch4k2r1tCiaR9bNbtdJb1NvOVHlqj4QzzEASkMa AhkWW13GZCcWYpip36KVeXyGtS9KfpyUY6fNs+n5VX/2MZi9PIAcyVe296URtoKYya/V QBViTrGLEdjHazTIroZWCYnxjn580kow31dvQ= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=from:content-type:content-transfer-encoding:subject:date:message-id :to:mime-version:x-mailer; b=ei8mqSUWXH2M5DbL6Un1tYXMWmNxFbiUhL4F2xVnA5cdUKl+cEEKXJsvAm9wfxKa0d gLD/tAyecyt1O74AMS56GIHyFrS12Ck3RNHV4qz2V0mSd22PkD629QxLKAGvloVpo6++ 5HqxSC5s1S7HuH63lopo6/KKKHH2/MgtjH9cg= Is there a way to turn all_load on for selected archives? I need all symbols from just a single library since a dylib compiled with '-undefined dynamic_lookup' will be using these symbols down the road. I tried -all_load -lmylib -noall_load but disabling all_load does not seem to take effect. Thanks, Joel --- Mac hacker with a performance bent http://www.linkedin.com/in/joelreymont _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com

1 0

Re: How to get encrypted user password
by Alastair Houghton 30 Dec '09

30 Dec '09

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha1; c=relaxed; d=alastairs-place.net; h= subject:mime-version:content-type:from:in-reply-to:date:cc: content-transfer-encoding:message-id:references:to; q=dns/txt; s= aug07; bh=y09kgtrDrpshnixhVOg+vc4aJ4c=; b=MKxPI+frsbCEa/Qooqfcvj kckFGc47Ku5SHcvA+OgSfEYCvLri5Jjs4jvnb9ZYlT4YaftCGHhf4gHowtRr4+rr PGUGzHsE3C67Kk3VQkkEplbAktq/z32qM9qCh4R2u7E4zMRV2+5VpDMluRUtkIvY SJQv6aLT+SlUrYFinWQcc= On 30 Dec 2009, at 02:57, Stephen J. Butler wrote: > In modern security architectures you don't ever handle (or even have > access to) the password in your program. What you do is pass the > credentials (user and password in this case) to some authentication > framework. For OS X and Linux, the best solution is PAM: > > <http://www.kernel.org/pub/linux/libs/pam/> FWIW, on OS X, the native API for this is either the Directory Services framework (prior to 10.6), or the Open Directory framework (10.6 and above). These do have some advantages over PAM (particularly the fact that you don't have to write files into /etc/pam.d, which is a fairly un-Mac-like thing to be doing), although their primary disadvantage is that PAM is widely implemented by other UNIX-like platforms. If you're interested in these, you can see how to use the new Open Directory framework here: <http://www.opensource.apple.com/source/OpenDirectory/OpenDirectory-57/TestS…> and the older Directory Services framework here: <http://developer.apple.com/mac/library/samplecode/CryptNoMore/index.html> or here: <http://developer.apple.com/mac/library/samplecode/NetworkAuthentication/ind…> The latter two also demonstrate the use of PAM (in the case of CryptNoMore) and GSSAPI (in the case of NetworkAuthentication). The Directory Services framework appears to be deprecated on 10.6 (I assume in favour of the newer Open Directory framework). In a way, that is also a disadvantage for these two, in that you can't use the Open Directory framework before 10.6, but you'll get warnings if you use Directory Services there. In any case, CryptNoMore has at least a sample of PAM use if that's helpful to you :-) Kind regards, Alastair. -- http://alastairs-place.net _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com

1 0

Re: How to get encrypted user password
by Roger Pau Monné 30 Dec '09

30 Dec '09

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references :date:message-id:subject:from:to:content-type; bh=6R9jbR2vBgOjchbVP14K5uydBZ0GJ+pQWper4FsWWtk=; b=XNWxDfPtIdY1YdsnE2vBqhyySIPGRSE2q/m+g2K27Zll/L7OCrEBUEOq8iClwDWHH+ S3dTfTmk2R72q/d6y9m8fiwHOB5pcg54IL4+ejc4FXN68i69t8KNtv45ab2Cz/tKjUna Fh6a6Jb1Dl8S36WGc9352nrK0C5Up1FEQuqGc= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type; b=EBqv7Gsp0W/ZJMHt86dH3E1kD3YZCcLCizxJQAa0Dzy1v52Nj1sijwOmMhd9+EKHGN 46r0Z1VBV9YHoGa84avBzIrtUq+q1elord2YbYK8sTa6Aw2dGHG+I6w+A6uIe5XgsriV ptbhO6DUSFQ028ZMRTDREGZoSzxEi8DcHmk/Y= _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com

1 0

Re: How to get encrypted user password
by Stephen J. Butler 30 Dec '09

30 Dec '09

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references :date:message-id:subject:from:to:content-type :content-transfer-encoding; bh=6lNTSauPXalFe9/uP0L5gCXpmFYqw92JNPMf4fkCYyQ=; b=Q5Hhb3n0gZOOrKBoK+PgVUIuFjDoKSG3Ff57tgUlxVQldHEwHLv0p22iaxSL1EckSV RjrXavEfa2MiDfao0S/Q4UwE9FVEJgIrvL3Pro0lBeEhZWqPZaUSZEH68r8lQOcUr2xz J+IYCOfyLZZyQvparoG+Ko7nukALm+idGb/0A= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type:content-transfer-encoding; b=VMJNGGPfTRGHka+GUsyfJVx8m/CKlZVwRL3DNkfcDQqowz5kv26sRMZZ1ebsLnmzuM cbTHFYrFqnO/KxMDUx/88e61wyFKu3TSaoLllzHfQS6Bs7sLM4Gv2RFI0+o11J7lCn+Z kxcDSwXd7JS7tePgUwNMCiWY92cuGTGDHZqsI= On Tue, Dec 29, 2009 at 8:21 PM, Roger Pau Monné <royger(a)gmail.com> wrote: > Hello, I'm implementing a very simple FTP client, and to do the login I > would like to check against system users instead of using my own database, > so that I can give the proper permissions to the newly created process that > I've spawned with fork. What's the best way for doing this in C? I've read > about the getpwnam function, that returns a struct passwd that has the field > pw_passwd to compare against (using the crypt function), but this field only > contains asterisks in Mac OS X and an x in Linux. Is there any common way to > get the encrypted password of a user across POSIX systems? In modern security architectures you don't ever handle (or even have access to) the password in your program. What you do is pass the credentials (user and password in this case) to some authentication framework. For OS X and Linux, the best solution is PAM: <http://www.kernel.org/pub/linux/libs/pam/> _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com

1 0

How to get encrypted user password
by Roger Pau Monné 30 Dec '09

30 Dec '09

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:date:message-id:subject :from:to:content-type; bh=FW3sbK1S7aSSsKuRTCq7SQVhu094rmV/SJgMWch/bsg=; b=vAMY13CC+L/zbndawV5O4WCwdTdupwM3P6V97jt4XIIjXicN7DdVqOVWNHEjA5F9Os bqO5X0llDe8BXU9Wh4hhSv9mcFiM9OVzIvWue+GYIgj08YvpMZYZo2uXs5wCyd86B3r5 VUjunpseK9wYkcBvhYSbATMG/fHqnrRyF2k3s= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:date:message-id:subject:from:to:content-type; b=xM+RuT3J4YZGEqlyJl/NFlbSwRWLnug8KlkFLCX/8uTqTMFR6yRzwQB6Ko9Jbqffha bY4YD6/97SAPbiM+PuMXrudup3wfUjjQz9q0RlQuaOAQLPC2IsPJKA5AX2PrzBwYUg3t 8knyQ+WF22hED6De96i9afXZK5G6BTSa2xoQU= _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com

1 0

Where is IOKit memory ?
by Jean-Daniel Dupas 22 Dec '09

22 Dec '09

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Hello, I'm working on a video player, and I have some issue with memory leak tracking. While the process is running, the 'real memory' and 'private memory' of the Activity monitor grow up slowly. I used a bunch of tool to track down what cause this issue (leaks, vmmap, heap, Instrument's ObjectAlloc) but I don't see any obvious leak. leaks does not reveal anything (no more than 20kB after 6 hours, so I think it safe to call it nothing). heap and ObjectAlloc's reports are stable too. The *All Allocations* line see not significant increase in memory usage. The only tools that report memory growth are vmmap and Activity Monitor. And from vmmap's reports I can see that the only region that significantly grow is IOKit region. Does IOKit has a special way to allocate memory that ObjectAlloc and heap are not able to track ? If yes, is there a way to track IOKit memory allocation specifically ? Or maybe this is an expected behavior and it's safe to ignore it ? Don't know if it's relevant, but I'm not playing the audio/video in the screen, but I'm using some SDI video card. -- Jean-Daniel _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com

1 0