Re: Finding loaded kext binaries
site_archiver@lists.apple.com Delivered-To: darwin-dev@lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:cc:message-id:from:to :in-reply-to:content-type:content-transfer-encoding:mime-version :subject:date:references:x-mailer; bh=WnRBnmzEobtb8lqQ4bdCqx4Vyyj8o8WDCvRMNOC/5hI=; b=I2RGIrApP0O+g0e0gf9omXNfwD4U68bTH+oh1wbVMe7nU06rvh8NBFowpPWkJtwpQk soolSNeJ55GXVh0VFfHq9HDf4VcZqM/wxOOmBLWGwRmzPpmbncuoZCkwQtsV+HKNN2kw IWR6yUF6N8aE8M3+CG5EyBRi+U0B65VGsbWXg= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=cc:message-id:from:to:in-reply-to:content-type :content-transfer-encoding:mime-version:subject:date:references :x-mailer; b=nlKps+mqDx0pTTrg0M4nOz3gm5eeX6o0wqVCzGpLiUc1TK7sX0Ewv6oDX6fepXcoax y90K64T3z2CZ74Qo71YQotqpkZnqCzWrf7uGzyK7YtR8SFPRiMA0SMQiD4O4esfS1cRb D0h6/xq5Qugghsq7k/ZB2iojfD6TI5bN2hKQo= On Oct 17, 2009, at 7:58 AM, Michael Smith wrote: = Mike Thank you for your advices. -- Sincerely, Rustam Muginov _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev@lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.appl... If you were to tell us a bit more about the problem you're trying to solve, we might be able to offer some more constructive suggestions... Hello, Mike. I am trying to implement security software, which would analize running processes and loaded kexts. First step would be if the processes/kexts are signed by Apple. If yes and if signature is valid, then they are considered "good". If not, then closer attenstion would be paid for them, like calculating checksum, gathering metainfo and sending it onto the server to analize. This email sent to site_archiver@lists.apple.com
participants (1)
-
Rustam Muginov