February 2009 - Darwin-dev - lists.apple.com

Re: xnu vulnerability question
by Finlay Dobbie 25 Feb '09

25 Feb '09

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:reply-to:in-reply-to :references:date:message-id:subject:from:to:cc:content-type :content-transfer-encoding; bh=6Djsbkrbt0igK9fDqh60Sz+1KwnJ1SimtAiE7/EW2n0=; b=kZ7MCc1WZWeOnLeCH4q7LRUcGs+crekLmLId4/pnDzPI4xXH6S6Kko9N7yi+KvR9+u y9/pKFYXTb/4JzEgUrEhPfbFZsAITUeETItj8+tEI29hLyblmfj3dAzB3bwtffEx2lO6 YZ65t8WJ18ld1PyG877nKCiv6R6F84tArxsXk= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:reply-to:in-reply-to:references:date:message-id :subject:from:to:cc:content-type:content-transfer-encoding; b=hnan/7Nl4qx1VF4W3NcE1/m1i+esk2LAphVq8oOTNG7xuTDXEGPL2Vc0LYeZaLqO02 VVPmJdIp0IUBjUf1qc0XlFbq9+mNyqgPMIpdRf+lv6MDnyeXq27FUZYTZKKeZuncka3Z ArvLeknp8kt3ezdLin7zTy26iKj/PNz+Mvj2g= On Wed, Feb 25, 2009 at 8:39 PM, Jaime Magiera <jaime(a)sensoryresearch.net> wrote: > Hey folks, > > I just came across this... > > http://www.milw0rm.com/exploits/8108 > > Did 10.5.6 or any of the security updates patch this? I notice the current > xnu is 1228.9.59. http://support.apple.com/kb/HT3338 About the security content of Security Update 2008-008 / Mac OS X v10.5.6 Kernel CVE-ID: CVE-2008-4218 Available for: Mac OS X v10.5 through v10.5.5, Mac OS X Server v10.5 through v10.5.5 Impact: A local user may obtain system privileges Description: Integer overflow issues exist within the i386_set_ldt and i386_get_ldt system calls, which may allow a local user to execute arbitrary code with system privileges. This update addresses the issues through improved bounds checking. These issues do not affect PowerPC systems. Credit to Richard Vaneeden of IOActive, Inc. for reporting these issues. -- Finlay _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Some questions about DirectoryServices
by Finlay Dobbie 25 Feb '09

25 Feb '09

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:reply-to:in-reply-to :references:date:message-id:subject:from:to:cc:content-type :content-transfer-encoding; bh=Eb/XxWOrE+s4hGGxRH/WgJMSmdGe3w+5srxTPDlb6pg=; b=UdeU1pkUBnIpU6auktrR/9b+rBuRgB5mkRW4deJnKP5tyXcsVUGyYvwTGDdN2GWlZL 9/7HzQro3Y8ugc/lBqkfx0HEJVg/MzIwsu6AtqTtMmULMPL6+FJs3NVsGgSbUsIc08NJ 5AeFlMaPoziZiIbW3MRWORJ7dWVRjdosnXrGk= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:reply-to:in-reply-to:references:date:message-id :subject:from:to:cc:content-type:content-transfer-encoding; b=CsOcVrLRQYceSrhRA2TB2OQ97O9IGjcyWs4KwJ3Vp1Xq50W/HooSW5vUljKLEH7RVH GL9m3bCQbvipdP2dpwL2Dh9vu77K7/lk1zM7h4XQ3r5EDxSufQQ/+38yQND3RAoVQ67a aWKq8FRIx06vHO3KLBT71qRxHjjFDtgCzXv18= Oh, right. Well, dsconfigldap is open source, as is the LDAPv3 plugin. They use DS plugin custom calls, in particular eDSCustomCallLDAPv3WriteConfigData may do what you want (seems to let you just supply a new XML configuration data which gets written out to DSLDAPv3PlugInConfig.plist and then the server is told to re-read its configuration). Of course this should be treated with care, since it's kind of all internals (but then, you were already relying on internals for the keys/values of the plugin configuration file). -- Finlay On Wed, Feb 25, 2009 at 7:04 PM, Eli Bach <ebach2(a)gmail.com> wrote: > > On Feb 25, 2009, at 11:01 AM, Finlay Dobbie wrote: > >> On Tue, Feb 24, 2009 at 8:23 AM, Eli Bach <ebach2(a)gmail.com> wrote: >>> >>> 1. What is the preferred method to get DirectoryServices to re-read it's >>> configurations files (in particular, it's LDAP configuration). Right >>> now, I >>> do a 'killall -TERM DirectoryService', which does the job, but in a >>> relatively heavyhanded way. >> >> You may have better luck using dsconfigldap. >> >> -- Finlay > > From the original message: > > On Feb 24, 2009, at 12:23 AM, Eli Bach wrote: > >> I'm configuring some ldap settings that the dsconfigldap cli tool doesn't >> support > > > _______________________________________________ > Do not post admin requests to the list. They will be ignored. > Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) > Help/Unsubscribe/Update your Subscription: > http://lists.apple.com/mailman/options/darwin-dev/finlay.dobbie%40gmail.com > > This email sent to finlay.dobbie(a)gmail.com > _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com

1 0

xnu vulnerability question
by Jaime Magiera 25 Feb '09

25 Feb '09

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Hey folks, I just came across this... http://www.milw0rm.com/exploits/8108 Jaime Magiera Sensory Research http://www.sensoryresearch.net _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… Did 10.5.6 or any of the security updates patch this? I notice the current xnu is 1228.9.59. This email sent to site_archiver(a)lists.apple.com

1 0

Re: Some questions about DirectoryServices
by Eli Bach 25 Feb '09

25 Feb '09

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:from:to :in-reply-to:content-type:content-transfer-encoding:subject :mime-version:date:references:x-mailer; bh=Qq/KLiybwUgxd7Vf1dBGmTfzMmTwiFrLKqDVu0DjmG8=; b=ZCz+RfENOnqb9aYnM8mXJo/QGLXRaBvl83KmNV2oFrSAcs3ZSJuNsYXHqIFCxjRNAP e7ntj7G6WC+OUcusVqUF0h8pZ4b6X8J3hYhme+r6fTNzlBugeIgOnCZHK7tS2caMre38 hwGRD+7mxYzHj7MTZ2QEB8I0hNRMZTJo0zfvk= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:from:to:in-reply-to:content-type :content-transfer-encoding:subject:mime-version:date:references :x-mailer; b=x7tSbB+U+g0/xEh8qG72lUSavhbcAvlY0LBj9aGkqconFmsnKvTJxcakhshe583KuV u3Dq41LzPMuWuerYnH7r4xGiWnKQDWasr5aM2lVVCIT6My17JksXngh4X2LxGQhKI8dW H6hb+v4dmOhl+Lmp1KC9TdLbHEDX+Qf/0MVfI= On Feb 25, 2009, at 11:01 AM, Finlay Dobbie wrote: You may have better luck using dsconfigldap. >From the original message: On Feb 24, 2009, at 12:23 AM, Eli Bach wrote: _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… On Tue, Feb 24, 2009 at 8:23 AM, Eli Bach <ebach2(a)gmail.com> wrote: 1. What is the preferred method to get DirectoryServices to re- read it's configurations files (in particular, it's LDAP configuration). Right now, I do a 'killall -TERM DirectoryService', which does the job, but in a relatively heavyhanded way. -- Finlay I'm configuring some ldap settings that the dsconfigldap cli tool doesn't support This email sent to site_archiver(a)lists.apple.com

1 0

Re: Some questions about DirectoryServices
by Finlay Dobbie 25 Feb '09

25 Feb '09

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:reply-to:in-reply-to :references:date:message-id:subject:from:to:cc:content-type :content-transfer-encoding; bh=+g96Isso0yyKAGQ+KR5/pUmsYE+WiioFExLHN1bbUiI=; b=vUZlYSEtEr5571z9LqoEP+eYrDRb6TZiDxLuPDvaej9IUDUV8ohQ/tlTfIPt55iMzj tPT0SKTenN3JEpBHQ9HKG/r6eh0QN6Vm2Lw9g/MNJM+xsoxFKxLO485iE4yokKDv0vfT EJHSkf1LB4ClsUyDZGp/Isz8mCAISdjwsw9ok= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:reply-to:in-reply-to:references:date:message-id :subject:from:to:cc:content-type:content-transfer-encoding; b=H8jsYLhxLxRJIEp/yr1YeNCVKUhxrwi7R3A8VHdLdVokJsUi6wSpS2YOYs6KTHiGjG met0pjt0kO/Qp+gja64nkNPcQa6bIno++sZFIKPXF3dxoLKQVzzV0x+a7H7Ticy2TZ+u xvZ1NrmpzQ+ETOyFAGmLqbJVK3nRU70kIIl4M= On Tue, Feb 24, 2009 at 8:23 AM, Eli Bach <ebach2(a)gmail.com> wrote: > 1. What is the preferred method to get DirectoryServices to re-read it's > configurations files (in particular, it's LDAP configuration). Right now, I > do a 'killall -TERM DirectoryService', which does the job, but in a > relatively heavyhanded way. You may have better luck using dsconfigldap. -- Finlay _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com

1 0

Re: need help on understanding the crashreporter traces
by Axel Luttgens 25 Feb '09

25 Feb '09

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Le 25 févr. 09 à 14:26, Arnab Ganguly a écrit : Hi, Guys sorry if it is a wrong group. Hello Arnab, Perhaps may those links be of some help: http://developer.apple.com/documentation/Cocoa/Conceptual/Multithreading/Th… http://developer.apple.com/qa/qa2001/qa1184.html Axel _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… I am analysing the Apple crash report.So I launched my application and tried to forcibly (kill -11 pid) crash the application.The app crashed and even the Apple crash report got generated. The crash report says Thread 1 crashed, but when I go through the stack trace of Thread 0 I see sigtramp is being received by Thread 0.Is this correct report? How is the thread received signal is different from the thread that got crashed as per the report ?Any help or suggestion would be of great help. [...] This email sent to site_archiver(a)lists.apple.com

1 0

Total Physical Memory
by Rohitash Panda 25 Feb '09

25 Feb '09

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Organization: Oracle Corporation User-agent: Thunderbird 2.0.0.19 (Windows/20081209) _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com

1 0

need help on understanding the crashreporter traces
by Arnab Ganguly 25 Feb '09

25 Feb '09

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:date:message-id:subject :from:to:content-type; bh=SMctKMIUn61/YPdSyC2gTrbWLYjpaztW3v3i+cDeAVg=; b=J8dQGCIq0dzElVngVG76IRYmqnfnbzXUFmkI0Hvir4lCL9+bOjOBA1V8Db1dxCtqYe lV5Yzl/gRFKj2+Ck6CV2n9JlyyLVKqabykVc8p64eq03ljJerZMwwFmeQDnfeA2o2cGY t6RrjY5onGr1LO45nbu312wZAr62zG2pcUl00= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:date:message-id:subject:from:to:content-type; b=iS4yzQ4bi81+3F4hgR/ULt1Mg2BG/kgRwYj9Zn1pQBqM8mISltR0EyBzrcOJJTm1Ow Uab5cxHgxtbs3rPEltCD4QYVl4BIUKkcJT18cQsAk+2sANpEdZDi/mqZvE181U0AwCdn 7xF9o0ZO1xGXthydPpra7JcbLV4erZ/2+XWiE= _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Launching a GUI using execl()
by Rakesh Singhal 25 Feb '09

25 Feb '09

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references :date:message-id:subject:from:to:cc:content-type; bh=woAccSBNI2bDhpI6YIYBXQmysWf6vT+Ibr/ENicb8Bo=; b=JSrZEX6uT0pf/3qPiDdSvgtXu1VH9kF8Eqni1MkP1R8ieldkyobTnA5qnEMxAIdo0L BYJUXLMmPB6j0xovAKWv7zkizXS6hRHsJTh06AWA4gIJSpFC4ZdxxNgWFSnQaAwr4ovd dQASkf8jPm5M4P2aTAEl9Y6CqmvvJ5IRuV2Lk= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; b=buZHV1qtUi3pwexs/SLDwYWu0XBFUGh/T/evJYB8+2uAZFB8KYS5/oupElu2FyagJK jG6cVpppBhxkSIVnARpgNoQL6LH9ymKxZmV7CgqVVuPk+83OvICehC2YT2fYkFubQdhg 28Av0NTvbs0DuZHd/6NRvibowtldqRoCB89nI= _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Launching a GUI using execl()
by Rakesh Singhal 25 Feb '09

25 Feb '09

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:date:message-id:subject :from:to:content-type:content-transfer-encoding; bh=PUKvuYWGeBvLdOlfadX+nBXbEm9aoV67OroHVBXJhT0=; b=nnQThT1pDqgSml4s9N+1lmrU6FXiDl9Kh79TYyS/DlQ1B7+nn6/E25Y9IlYC94T5Od IEyEkQYlfOnidAIBa1EDpU8vRBKcn6NpTjCeZpI7uzK/Hx5UWhp17hv9tcvLcxXf/uKR fYEZEw9BUMarDXOX6kKgFHQMd1p+Hh9wW/hT8= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:date:message-id:subject:from:to:content-type :content-transfer-encoding; b=J8ZGPJ/Yraxbh+wacs9BoODyCSSSl9Yd1ZeqtFXVPEyxcrpm0GewOx3Qi6YfCyXWyu +S+eVN8mO5xIBdJN2Z5ft69U98tbMgpjMjyvNtD4rs2wxEnHBy8oDXc26ea2ZZnBfL+a PZ9QBtD7CGgQlaakNWK7lhshEGly2xklNugaE= Thanks Eli. I am using SCDynamicStoreCopyConsoleUser() api to know about the current user. The daemon does not need to communicate with agents. If agents can launch the GUI properly whenever it is required using launch services framework, then my problem is solved. Regards On Feb 24, 2009, at 3:55 PM, Rakesh Singhal wrote: Thanks a lot. Sorry for trouble. My answers are as follows: 1. Child process is not going to run as root. My intention is child to run as user. I am setting the uid and gid of current user using setuid(), seteuid(), setgid() and setegid() APIs. >From the context of the daemon, how it is going to figure out who the current user is? 3. Before launching the GUI, I am checking that if any user is logged in or not. If not then I do not launch. What about when multiple users are logged in? 4. I want to start my GUI app through a background app. I am using daemon app for this purpose and for some other functionality also. I choose daemon cause it does not get terminated when user logs out, that I need for other functionality. To launch GUI, I can use launchAgents then I will need to use both daemon and agents. But now I have one query that when user logs out the agents will be terminated and when user logs in again then? Your daemon needs to communicate with one or more agents, which in turn perform the operation, such as launching a GUI app, on the daemon's behalf. The daemon and the agents (as there may 0 to n agents running at any time, and they come and go when users log in and out) need to work together to figure out which user should be interacted with. Alternately, you could outsource this work to a more experienced Mac developer. _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com

1 0