March 2019 - Darwin-dev - lists.apple.com

Re: Wish the beta(s) for developers are paired with KDKs
by Prokash Sinha 18 Mar '19

18 Mar '19

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Never mind, I can always replace the kernel file from a close enough KDK… Thanks > On Mar 18, 2019, at 1:28 PM, Prokash Sinha <prokash(a)garlic.com> wrote: > > All, > > IIRC, during 10.6 to about 10.11, even if there is a close KDK ( build number > wise), we could do the kernel debugging of the kexts. > > Now, I see there are gaps in KDKs and corresponding betas for developers. And > source level debugging is not possible. > > Is it something I’m missing ??? Or some lldb commands to force the symbol > mappings ??? Even Call stack does not have function symbols > > Thanks, > Prokash _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.ap… This email sent to site_archiver(a)lists.apple.com

1 0

Wish the beta(s) for developers are paired with KDKs
by Prokash Sinha 18 Mar '19

18 Mar '19

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com All, IIRC, during 10.6 to about 10.11, even if there is a close KDK ( build number wise), we could do the kernel debugging of the kexts. Now, I see there are gaps in KDKs and corresponding betas for developers. And source level debugging is not possible. Is it something I’m missing ??? Or some lldb commands to force the symbol mappings ??? Even Call stack does not have function symbols Thanks, Prokash _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.ap… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Does hard coded breakpoint like __asm int3; works on Mojave Kext ?
by Prokash Sinha 09 Mar '19

09 Mar '19

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Never mind, problem solved…. > On Mar 7, 2019, at 12:54 PM, Prokash Sinha <prokash(a)garlic.com> wrote: > > Hi All, > > The question is on the subject line. > > Thanks, > Pro _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.ap… This email sent to site_archiver(a)lists.apple.com

1 0

Does hard coded breakpoint like __asm int3; works on Mojave Kext ?
by Prokash Sinha 07 Mar '19

07 Mar '19

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Hi All, The question is on the subject line. Thanks, Pro _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.ap… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Building Apple Open Source Tool
by Sandor Szatmari 07 Mar '19

07 Mar '19

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=tIDmrN9A2TRcXa0BNawiFb01pgCET39icJbkNznMTcE=; b=pls8R4tx+ooS0cuJuYNEVICv6VpbASQDu8jwrHAHGsFtnpEqN7Gfn1h7qFe3eF8SWp nBMeJcYYvTcV49NHyY8+YhEaa04lg4M+VKn1FhONoKa599aongti4gzgMKOVSMayXwaa tiKgZOmImhnpd2xG4XoNM/hHMTrW2Vj7pme7Fs9OtIgkQeoiEMZQdgFB9d2V2a4hVmhB Rtof8Llf9p4GgkBSH3Xq4geM2exfvHHwV4a3nHklMhDE8dlJyWsfraerTFnWTV3PknCA ftfbukJh3cNS8/LMGdQ2zaEz1B8LebiHO7K+MjpVsKro7A8hkd++eCBXjwL97PpOt1aA GfqA== > On Mar 7, 2019, at 01:18, Alastair Houghton <alastair(a)alastairs-place.net> > wrote: > >> On 6 Mar 2019, at 15:42, Sandor Szatmari <admin.szatmari.net(a)gmail.com> >> wrote: >> >> So… one solution, that works, ;) is to chown root:wheel and chmod u+s. This >> gives the binary the privs it needs. But Apple’s binary in /usr/bin does >> not employ this solution. I thought maybe I could sign it with my dev cert >> and go that route. But not sure what/how to configure. If nothing better >> comes along I can at least do this. > > Apple’s version works by having the entitlement > com.apple.private.network.reserved-port, which AFAIK only works if the code > signature on the binary belongs to Apple (otherwise it’d be a massive > security hole). I think third-party software probably has to run as root in > order for rresvport() to work. That’s what I was afraid of, but just wasn’t confident enough about to be sure of that conclusion. Thanks, Sandor > > Kind regards, > > Alastair. > > -- > http://alastairs-place.net > _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.ap… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Building Apple Open Source Tool
by Alastair Houghton 07 Mar '19

07 Mar '19

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com On 6 Mar 2019, at 15:42, Sandor Szatmari <admin.szatmari.net(a)gmail.com> wrote: > > So… one solution, that works, ;) is to chown root:wheel and chmod u+s. This > gives the binary the privs it needs. But Apple’s binary in /usr/bin does not > employ this solution. I thought maybe I could sign it with my dev cert and > go that route. But not sure what/how to configure. If nothing better comes > along I can at least do this. Apple’s version works by having the entitlement com.apple.private.network.reserved-port, which AFAIK only works if the code signature on the binary belongs to Apple (otherwise it’d be a massive security hole). I think third-party software probably has to run as root in order for rresvport() to work. Kind regards, Alastair. -- http://alastairs-place.net _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.ap… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Building Apple Open Source Tool
by Sandor Szatmari 06 Mar '19

06 Mar '19

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=b6cCpYRblizL5lhUCJakb3+PRdo2i6PM2ox2QpsffhY=; b=rpxTucQPyxik8TV83UcnhBWqjP9khFjGod/s4ncp7NbEk7dQg0y/R6rK+D3IXwtBKU hs2wZgdbM84B7898OeHb0OhDQFFnBBRENeWL8YcvM8/YTNcNr76u4EOwXfete2aYacwk VDzZM1WIc4uNqI7HNmPh26gT6IiGq/Rw0QcF5xt5adsqIdjhJ/yKXV1Z2B1cacqI63AL c/9qWTFV0CLCynV3cBxvTJFfS6kDUJPcFjf8v0bLVoxvOSboPPw/NY8IRhgPbKGkRlrR 26pwiPhfrTisvXMKEzsZwc3n84lhcPYYpMvpjPPvd3YVawtIY4we/5+fcu/eKsVS5e5N vRyg== Thanks, I’ll check them out, maybe their source would be better to modify. Sandor > On Mar 6, 2019, at 14:16, Brendan Shanks <brendan(a)bslabs.net> wrote: > > There are other rlogin clients you could try building, I don’t see built-in > support for custom ports in either one but it might avoid the other issues > you’ve been seeing. > > - GNU inetutils (https://www.gnu.org/software/inetutils/) > - FreeBSD bsdrcmds (https://github.com/jlehen/bsdrcmds) > > Brendan > >> On Mar 6, 2019, at 7:42 AM, Sandor Szatmari <admin.szatmari.net(a)gmail.com> >> wrote: >> >> So… one solution, that works, ;) is to chown root:wheel and chmod u+s. This >> gives the binary the privs it needs. But Apple’s binary in /usr/bin does >> not employ this solution. I thought maybe I could sign it with my dev cert >> and go that route. But not sure what/how to configure. If nothing better >> comes along I can at least do this. >> >> Sandor >> >>> On Mar 6, 2019, at 07:15, Sandor Szatmari <admin.szatmari.net(a)gmail.com> >>> wrote: >>> >>> Alistair, >>> >>>>> On Mar 6, 2019, at 00:57, Alastair Houghton >>>>> <alastair(a)alastairs-place.net> wrote: >>>>> >>>>> On 5 Mar 2019, at 21:43, Sandor Szatmari <admin.szatmari.net(a)gmail.com> >>>>> wrote: >>>>> >>>>> I have a need to build rlogin to allow it to connect to a rlogin server >>>>> accessible on a non-standard specific port. >>>> I’m sure you’ve already considered this, but it’s worth having it in the >>>> mailing list archives anyway: rlogin is generally not a good idea, and >>>> unless there is some overwhelming reason why you can’t use it, ssh or >>>> slogin is a much better plan. >>> >>> Sage advice, but one our companies products supports a system integration >>> (via rlogin) with infrastructure installed decades ago, and is not going >>> away and cannot be changed. One, it’s not in our purview to change this, >>> two the equipment operates in what is considered a trusted environment. ie >>> not my choice, not my design, not in my control. But, having had to deal >>> with this over the years has given me great appreciation for the sentiment >>> you convey. >>>> >>>> If you can replace the use of rlogin, with one of the latter two, it will >>>> save you the trouble of building it. >>> >>> My goal is to have rlogin connect to a higher randomly selected port, but >>> the rlogin client provided on macOS does not appear to have a flag to >>> specify an alternate port. I want to rebuild the rlogin client with this >>> functionality grafted on. Any and all suggestions are welcome. >>> >>> Thanks, >>> Sandor >>> >>>> >>>> Kind regards, >>>> >>>> Alastair. >>>> >>>> -- >>>> http://alastairs-place.net >>>> >> _______________________________________________ >> Do not post admin requests to the list. They will be ignored. >> Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) >> Help/Unsubscribe/Update your Subscription: >> https://lists.apple.com/mailman/options/darwin-dev/brendan%40bslabs.net >> >> This email sent to brendan(a)bslabs.net > _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.ap… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Building Apple Open Source Tool
by Brendan Shanks 06 Mar '19

06 Mar '19

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=bslabs-net.20150623.gappssmtp.com; s=20150623; h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=u+T69D2kO2QjM5IHr6iNocA+wt3MudK3c36EEPzmW5U=; b=KOu5m/riSN1HJeU44Bw6UXCSGfuj4xMiPVya/HfQFBwl0KE7gvtjjYovhBGKNfb4U/ eUNzedo/VxvDTnm8P6lEcPCo4Y6svNEbOm6FuolICGTsHaJfLxhOYxvj80h3m7YoPHts OWdgPTP9gQ7MXFaxpZ+Xi08TVDRhYzMQyDzFOHEqFC0p23JEggTxt2e2lLdu9LDAUXRc MBCXTgMWQqyC46rnIBzHLMCSPYs636yCQmEyuJxSX56AtyGKlDndG9XWqczEf2lzMK/H sH1aBjOfeJLU5UA9CwH1In2ZuSI/3wj4p69XK4HV9C/zZ0+WNcWFAU3yzrbYCur6/vjn /dXg== There are other rlogin clients you could try building, I don’t see built-in support for custom ports in either one but it might avoid the other issues you’ve been seeing. - GNU inetutils (https://www.gnu.org/software/inetutils/) - FreeBSD bsdrcmds (https://github.com/jlehen/bsdrcmds) Brendan > On Mar 6, 2019, at 7:42 AM, Sandor Szatmari <admin.szatmari.net(a)gmail.com> > wrote: > > So… one solution, that works, ;) is to chown root:wheel and chmod u+s. This > gives the binary the privs it needs. But Apple’s binary in /usr/bin does not > employ this solution. I thought maybe I could sign it with my dev cert and > go that route. But not sure what/how to configure. If nothing better comes > along I can at least do this. > > Sandor > >> On Mar 6, 2019, at 07:15, Sandor Szatmari <admin.szatmari.net(a)gmail.com> >> wrote: >> >> Alistair, >> >>>> On Mar 6, 2019, at 00:57, Alastair Houghton <alastair(a)alastairs-place.net> >>>> wrote: >>>> >>>> On 5 Mar 2019, at 21:43, Sandor Szatmari <admin.szatmari.net(a)gmail.com> >>>> wrote: >>>> >>>> I have a need to build rlogin to allow it to connect to a rlogin server >>>> accessible on a non-standard specific port. >>> I’m sure you’ve already considered this, but it’s worth having it in the >>> mailing list archives anyway: rlogin is generally not a good idea, and >>> unless there is some overwhelming reason why you can’t use it, ssh or >>> slogin is a much better plan. >> >> Sage advice, but one our companies products supports a system integration >> (via rlogin) with infrastructure installed decades ago, and is not going >> away and cannot be changed. One, it’s not in our purview to change this, >> two the equipment operates in what is considered a trusted environment. ie >> not my choice, not my design, not in my control. But, having had to deal >> with this over the years has given me great appreciation for the sentiment >> you convey. >>> >>> If you can replace the use of rlogin, with one of the latter two, it will >>> save you the trouble of building it. >> >> My goal is to have rlogin connect to a higher randomly selected port, but >> the rlogin client provided on macOS does not appear to have a flag to >> specify an alternate port. I want to rebuild the rlogin client with this >> functionality grafted on. Any and all suggestions are welcome. >> >> Thanks, >> Sandor >> >>> >>> Kind regards, >>> >>> Alastair. >>> >>> -- >>> http://alastairs-place.net >>> > _______________________________________________ > Do not post admin requests to the list. They will be ignored. > Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) > Help/Unsubscribe/Update your Subscription: > https://lists.apple.com/mailman/options/darwin-dev/brendan%40bslabs.net > > This email sent to brendan(a)bslabs.net _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.ap… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Building Apple Open Source Tool
by Sandor Szatmari 06 Mar '19

06 Mar '19

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=96zDI1lXH1+0q0dCdyll2/fU8nV+4/BJXoN0CzPhumU=; b=hKURnkzpuggv/2C3asTgCJzU68bANQevctSOWXXvsfK2FPD6r/xj+pNVnB56lftnnN 5GrLyMPrVYd6rxm8Ldp7pVpnbMMhYfyzPPuAYTMpZs/8hE6a2D2PPYDGD+2iwHCuI+04 ZiXriklxrVglqW9LZfciKwLh1ARbA6yzMw+bW9z9AIdgVLALV37l5+o6V/buLdFdRNT/ Fj1k3LvL/N7zTOrigF97SfZASX74FkEvRkPcDVzVTpauA8KMkM9862tOg1crHGCf/85b SZQjiuIMwQzCYyKKyuiyNdlLKSQ/e8UpH/AJkrTARos5I2cGA7Shir1G3YROFWY+fpF4 gcvw== So… one solution, that works, ;) is to chown root:wheel and chmod u+s. This gives the binary the privs it needs. But Apple’s binary in /usr/bin does not employ this solution. I thought maybe I could sign it with my dev cert and go that route. But not sure what/how to configure. If nothing better comes along I can at least do this. Sandor > On Mar 6, 2019, at 07:15, Sandor Szatmari <admin.szatmari.net(a)gmail.com> > wrote: > > Alistair, > >>> On Mar 6, 2019, at 00:57, Alastair Houghton <alastair(a)alastairs-place.net> >>> wrote: >>> >>> On 5 Mar 2019, at 21:43, Sandor Szatmari <admin.szatmari.net(a)gmail.com> >>> wrote: >>> >>> I have a need to build rlogin to allow it to connect to a rlogin server >>> accessible on a non-standard specific port. >> I’m sure you’ve already considered this, but it’s worth having it in the >> mailing list archives anyway: rlogin is generally not a good idea, and >> unless there is some overwhelming reason why you can’t use it, ssh or slogin >> is a much better plan. > > Sage advice, but one our companies products supports a system integration > (via rlogin) with infrastructure installed decades ago, and is not going away > and cannot be changed. One, it’s not in our purview to change this, two the > equipment operates in what is considered a trusted environment. ie not my > choice, not my design, not in my control. But, having had to deal with this > over the years has given me great appreciation for the sentiment you convey. >> >> If you can replace the use of rlogin, with one of the latter two, it will >> save you the trouble of building it. > > My goal is to have rlogin connect to a higher randomly selected port, but the > rlogin client provided on macOS does not appear to have a flag to specify an > alternate port. I want to rebuild the rlogin client with this functionality > grafted on. Any and all suggestions are welcome. > > Thanks, > Sandor > >> >> Kind regards, >> >> Alastair. >> >> -- >> http://alastairs-place.net >> _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.ap… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Building Apple Open Source Tool
by Sandor Szatmari 06 Mar '19

06 Mar '19

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=Bg8QVi4pzDHs9/GSbJMoOdtztUz3GETFCkDSnj/iap8=; b=PMJEpYY/wxqx/dB+NrTtvqszx8LZTRcdipXB3X1X+Ak+awUIqr4FiQJo4IlwtlqzGY w09P4nVnJPtimNv0FcgLD/+9xA3G4fV7War0Gl4FKd4zOLg4yq9xKHnxWostVor1Wo27 INm7cKH9uTeMaS72NOwz/u4iyWmT2hxFxSXL2HPs5BIFkrqiHnvmCOqUlQ4o0yhdN2qj kA+06HZ+dNuKQtk//wQTK19LLV80NGcZM/m/WchMN/uPHOQRinzbwE7rfm6Jg/hc/kRu dNh4uwSUr6EXiisoW/D/JSE5KYcHPA1rl1vP7J+GUHZtBaRQMl3P3s8/vgR5h6uGqqdI y5GQ== Alistair, > On Mar 6, 2019, at 00:57, Alastair Houghton <alastair(a)alastairs-place.net> > wrote: > >> On 5 Mar 2019, at 21:43, Sandor Szatmari <admin.szatmari.net(a)gmail.com> >> wrote: >> >> I have a need to build rlogin to allow it to connect to a rlogin server >> accessible on a non-standard specific port. > I’m sure you’ve already considered this, but it’s worth having it in the > mailing list archives anyway: rlogin is generally not a good idea, and unless > there is some overwhelming reason why you can’t use it, ssh or slogin is a > much better plan. Sage advice, but one our companies products supports a system integration (via rlogin) with infrastructure installed decades ago, and is not going away and cannot be changed. One, it’s not in our purview to change this, two the equipment operates in what is considered a trusted environment. ie not my choice, not my design, not in my control. But, having had to deal with this over the years has given me great appreciation for the sentiment you convey. > > If you can replace the use of rlogin, with one of the latter two, it will > save you the trouble of building it. My goal is to have rlogin connect to a higher randomly selected port, but the rlogin client provided on macOS does not appear to have a flag to specify an alternate port. I want to rebuild the rlogin client with this functionality grafted on. Any and all suggestions are welcome. Thanks, Sandor > > Kind regards, > > Alastair. > > -- > http://alastairs-place.net > _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.ap… This email sent to site_archiver(a)lists.apple.com

1 0