April 2005 - Darwin-kernel - lists.apple.com

Re: Determine if user can admin
by Eric Long 19 Apr '05

19 Apr '05

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com User-agent: Microsoft-Entourage/11.1.0.040913 > 1) Something like "id | grep admin". >> 1. Maybe this information is stored in the Open Directory information >> on this user account. >> >> 2. Otherwise, you can find the group of the user and the additional >> group and look for the gid for the admin group. >>> The Carbon way: >>> >>> err = AuthorizationCreate(&user_rights, >>> kAuthorizationEmptyEnvironment, user_flags, &user_authorizationRef); >>> >>> See Authorization Services docs for more details .. > I'll check out these suggestions. Thanks for your ideas. I was really wondering if it is sufficient to check if a user is root or in the admin group. I'm trying to set things up in a manner that is more convenient for a user who is allowed to administer the computer. Sort of like how the OS used to require you to authorize constantly to do just about anything, then things were made easier for users who are designated administrators, so they only have to authenticate to perform tasks that actually alter the system. I noticed the OS adds users with the "Allow user to administer this computer" checkbox set to the sudoers file. I was just looking for a means that would ensure whatever I do is in sync with whether or not a user has that checkbox set for his or her account. Eric _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Using ctl_enqueuembuf
by Justin Walker 19 Apr '05

19 Apr '05

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com On Apr 19, 2005, at 8:17, Carl Smith wrote: I am using the function ctl_enqueuembuf to pass data up to my userland process from my NKE. My problem lies in that I am passing a structure that has some pointers to buffers within this structure and these buffers are always showing empty/zeros when I receive them on the userland side. I am using the example from TCPlogger, in how TCPlogger is passing a structure up to it's user land, but for some reason for me it is not working. Regards, Justin -- Justin C. Walker, Curmudgeon-At-Large Institute for General Semantics -------- If you're not confused, You're not paying attention -------- _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… Here's a hint: how much data are you copying up to user space, and what is in that data? This email sent to site_archiver(a)lists.apple.com

1 0

Re: Using ctl_enqueuembuf
by Stephane Sudre 19 Apr '05

19 Apr '05

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com On 19 avr. 05, at 17:17, Carl Smith wrote: You will need to serialize your struct. _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… I am using the function ctl_enqueuembuf to pass data up to my userland process from my NKE. My problem lies in that I am passing a structure that has some pointers to buffers within this structure and these buffers are always showing empty/zeros when I receive them on the userland side. I am using the example from TCPlogger, in how TCPlogger is passing a structure up to it's user land, but for some reason for me it is not working. I get all the correct values for ints/booleans and etc. that are in my structure but the _MALLOCed buffers, from the NKE are empty. I suspect it has to do something with the way I filling out the mbuf because like I said I can receive the struct on the userland side, the pointers seem good to the buffers with in the structure but these buffers are just empty, zeroed out. Maybe if someone can take a look at the code below they have some suggestions or see something I do not. This email sent to site_archiver(a)lists.apple.com

1 0

Using ctl_enqueuembuf
by Carl Smith 19 Apr '05

19 Apr '05

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com Thread-index: AcVE8umE1cfHYnqvSSSFfqy8VPWz8w== Thread-topic: Using ctl_enqueuembuf _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Determine if user can admin
by Jay Vaughan 19 Apr '05

19 Apr '05

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com When setting up accounts in Mac OS X, the Accounts pref panel has a checkbox for user accounts labeled, "Allow user to administer this computer". How can I programmatically determine if my application is being run for a user who is allowed to administer the computer vs. one who isn't? The Carbon way: See Authorization Services docs for more details .. -- ; Jay Vaughan _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… err = AuthorizationCreate(&user_rights, kAuthorizationEmptyEnvironment, user_flags, &user_authorizationRef); This email sent to site_archiver(a)lists.apple.com

1 0

Re: Determine if user can admin
by Stephane Sudre 19 Apr '05

19 Apr '05

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com On 19 avr. 05, at 01:44, Eric Long wrote: Hi, See grp.h among others. _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… When setting up accounts in Mac OS X, the Accounts pref panel has a checkbox for user accounts labeled, "Allow user to administer this computer". How can I programmatically determine if my application is being run for a user who is allowed to administer the computer vs. one who isn't? 1. Maybe this information is stored in the Open Directory information on this user account. 2. Otherwise, you can find the group of the user and the additional group and look for the gid for the admin group. This email sent to site_archiver(a)lists.apple.com

1 0

Re: Determine if user can admin
by Markus Hitter 19 Apr '05

19 Apr '05

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com Am 19.04.2005 um 01:44 schrieb Eric Long: 1) Something like "id | grep admin". 2) Try to execute you task anyways and watch for errors. HTH, Markus - - - - - - - - - - - - - - - - - - - Dipl. Ing. Markus Hitter http://www.jump-ing.de/ _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… When setting up accounts in Mac OS X, the Accounts pref panel has a checkbox for user accounts labeled, "Allow user to administer this computer". This is a checkbox wether the user is member of the group "admin" or not. How can I programmatically determine if my application is being run for a user who is allowed to administer the computer vs. one who isn't? 3) Ask for privileged execution always. This would allow admins, currently logged in as somebody else, as well. Guys like myself do their work as an unprivileged user just to be sure to get asked for a password before some app tries to "improve" the system. :-) This email sent to site_archiver(a)lists.apple.com

1 0

RE: passing buffer from User Client to Driver
by Imran 19 Apr '05

19 Apr '05

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com Thread-index: AcVEP9SThI3v50iuQV6b8HgpSUd99gAZ2UCw Hi GodFrey, As per your reply, I had eliminated the mapping calls and change variables (vInStruct to InStruct)in my userclient. But still I am facing the same problem, my IOMemoryDescriptor buffer is not getting passed from userclient to driver. When I print the IOMemoryDescriptor address in driver it shows the following output: IOMemoryDescriptor address value in driver = 0x11b2680 The Output of readBytes is as follows. MyFilterScheme:: readBytes = 512 byteStart = 0 bufLength = 512 buffer = Please take your time to go through the code segment of my driver. Or do we need to use vm_allocate for achieving the buffer passing from user space application to the driver through user client. *********************************************************** // kMyDoWrite IOReturn com_MySoftwareCompany_driver_MyFilterScheme::DoDriverWrite(IOMemoryDescripto r * inBuffer) { IOLog("\n Inside com_MySoftwareCompany_driver_MyFilterScheme::myDoWrite call\n"); IOLog("%s[%p]::%s\n", getName(), this, __FUNCTION__); IOLog("\n IOMemoryDescriptor value in driver = %p\n", inBuffer); IOLog("\n IOMemoryDescriptor buffer in driver = %s\n", inBuffer); IOReturn retDrWrite = kIOReturnSuccess; IOStorageCompletion completion; // If the user client's 'open' method was never called, return kIOReturnNotOpen. if (!isOpen()) /* if-else Added - 15 Apr 2005 */ { IOLog("\n Failed to open userclient for the driver....\n"); return kIOReturnNotOpen; } else { IOLog("\n Userclient is open for the driver....\n"); } IOByteCount readBytes; UInt64 byteStart = 0; IOByteCount bufLength = inBuffer->getLength(); IOLog("\n bufLength = %lu\n", bufLength); //char *myBuff = new char[bufLength]; char myBuff[512]; IOLog("\n Calling readbytes.......in driver\n"); readBytes = inBuffer->readBytes(0, myBuff, bufLength); IOLog("MyFilterScheme:: readBytes = %lu byteStart = %lu bufLength = %lu buffer = %s \n", (long)readBytes, (long)byteStart, (long)bufLength, myBuff); getProvider()->write(this, byteStart, inBuffer, completion); return retWrite; } The Outputs are: IOMemoryDescriptor value in driver = 0x11b2680 IOMemoryDescriptor buffer in driver = bufLength = 512 MyFilterScheme:: readBytes = 512 byteStart = 0 bufLength = 512 buffer = _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

Determine if user can admin
by Eric Long 18 Apr '05

18 Apr '05

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com User-agent: Microsoft-Entourage/11.1.0.040913 Hi, When setting up accounts in Mac OS X, the Accounts pref panel has a checkbox for user accounts labeled, "Allow user to administer this computer". How can I programmatically determine if my application is being run for a user who is allowed to administer the computer vs. one who isn't? Thanks, Eric _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

Re: xnu-517.12.7
by Kevin Van Vechten 18 Apr '05

18 Apr '05

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com Hi Josh, - Kevin On Apr 16, 2005, at 11:08 AM, quest wrote: _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… The xnu-517.12.7 tar.gz has been updated to correct this issue. Thanks for reporting this. I am having issues with xnu-517.12.7 not building. I was wondering if anyone had a similar problem, or better yet a fix =) /usr/local/src/xnu-517.12.7/osfmk/ppc/chud/chud_cpu.c /usr/local/src/xnu-517.12.7/osfmk/ppc/chud/chud_cpu.c: In function `chudxnu_set_shadowed_spr': /usr/local/src/xnu-517.12.7/osfmk/ppc/chud/chud_cpu.c:224: error: `chud_7400_msscr1' undeclared (first use in this function) /usr/local/src/xnu-517.12.7/osfmk/ppc/chud/chud_cpu.c:224: error: (Each undeclared identifier is reported only once /usr/local/src/xnu-517.12.7/osfmk/ppc/chud/chud_cpu.c:224: error: for each function it appears in.) /usr/local/src/xnu-517.12.7/osfmk/ppc/chud/chud_cpu.c: In function `chudxnu_set_shadowed_spr64': /usr/local/src/xnu-517.12.7/osfmk/ppc/chud/chud_cpu.c:260: error: `chud_970_hid0' undeclared (first use in this function) /usr/local/src/xnu-517.12.7/osfmk/ppc/chud/chud_cpu.c:272: error: `chud_970_hid1' undeclared (first use in this function) /usr/local/src/xnu-517.12.7/osfmk/ppc/chud/chud_cpu.c:284: error: `chud_970_hid4' undeclared (first use in this function) /usr/local/src/xnu-517.12.7/osfmk/ppc/chud/chud_cpu.c:296: error: `chud_970_hid5' undeclared (first use in this function) /usr/local/src/xnu-517.12.7/osfmk/ppc/chud/chud_cpu.c: In function `chudxnu_clear_cpu_rupt_counters': /usr/local/src/xnu-517.12.7/osfmk/ppc/chud/chud_cpu.c:444: warning: passing arg 1 of `bzero' from incompatible pointer type - Josh Ellithorpe This email sent to site_archiver(a)lists.apple.com

1 0