site_archiver@lists.apple.com Delivered-To: darwin-dev@lists.apple.com On Aug 15, 2007, at 5:40 PM, Matt Burnett wrote: -- Shaun Wexler MacFOH http://www.macfoh.com "Anger dwells only in the bosom of fools." - Albert Einstein _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev@lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.appl... This email sent to site_archiver@lists.apple.com You didnt answer my question, and you jumped to conclusions. I all ready have functioning code to arbitrarily hook kernel functions. I didn't ask for help on how to do this, i just asked if there are any IOKit classes that implement features similar to mprotect/ vm_protect, and why IOKit based KEXTs have issues resolving symbols in the kernel. Not answering these questions wont prevent me from accomplishing my task. - I can still use mprotect/vm_protect - For the symbols issue, i can at the very worst use some script hackery to resolve the symbols in user space and transfer their addresses to my KEXT. I know there are tables in the kernel where i could resolve the symbols manually as well. I would like to remind you that hurling insults at me such as "unscrupulous" (definition: having or showing no moral principles; not honest or fair) does nothing other than provoke me to release a SDK to the public which would allow people to hook kernel functions. Dude, take some Midol and re-read Terry's reply. He implied nothing, and simply chose to answer your 2nd question instead of the 1st, and did so quite well. BTW, you won't get many offers of help around here with that attitude. smime.p7s