May 2007 - Darwin-kernel - lists.apple.com

Re: Problem building darwin kernel
by mstpfh 31 May '07

31 May '07

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com Dkim-signature: a=rsa-sha1; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:user-agent:mime-version:to:cc:subject:references:in-reply-to:content-type:content-transfer-encoding; b=RmvSLeIDKgmYKjV9tTkujaTzlhMIIirRM8tqg07LJvYbT5BFNW7EuMWctIGZIchQ+irCe92GiBEMHcBRfD3OR5X8uJTMi1xf1QLEIzPY+e+3ZCnjYVt9eg9mEmBB0BSeBaF6A1MMvvXKj47V09wsfY9/O/kKxz8jnuUKL68J5qY= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:user-agent:mime-version:to:cc:subject:references:in-reply-to:content-type:content-transfer-encoding; b=kdTDwszYwNOlRe89lchQL2YVQKz/IMZbquH8VxrKzEVP7Yf/gt7rUYXeScfS0hA4YIv/tyQN1Yt31NlhNzXhXMF9D9DdA9uAOtmP2u0TsQ7zWCbaDGEnNQoYj/Hlw5Oy8zae0PCRbPp7G8fjta7Z9+PPaHqYIKL+yHZH6YqI/Hc= User-agent: Thunderbird 1.5.0.10 (Macintosh/20070221) Hi, When i am at this step: make RC_OS=macos kld_build I stumbled upon an error which says seg_hack __KLD ./prehack_libkld.a -o ./static_libkld.o make[1]: seg_hack: Command not found make[1]: *** [libkld.a] Error 127 make: *** [kld_build] Error 2 You either skipped this step: Or this step: This isn't very complicated. Just apply yourself. Best regards. Mustapha 'mstpfh' Abiola _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… Terry Lambert wrote: On May 31, 2007, at 12:53 PM, Billy Lau wrote: As I am following through the instructions on how to build the darwin kernel, I was stuck with an error that I cannot resolve. The manual for the kernel building is at http://developer.apple.com/DOCUMENTATION/Darwin/Conceptual/KernelProgrammin… Can anyone help? Thanks "Also, make sure that /usr/local/bin is in your PATH environment variable..." "Get the bootstrap_cmds, Libstreams, kext_tools, IOKitUser, and cctools packages from http://www.opensource.apple.com. Extract the files from these .tar packages..." ...probably the second one, since the current Makefile infrastructure directly references it by path. -- Terry Billy, Upon receiving your email, and reading what Terry has said, I think the matter is simple. It's a matter of you acquiring the sources from www.opensource.apple.com and extract the files (including cctools) from it's gzipped archive. This email sent to site_archiver(a)lists.apple.com

1 0

Re: Problem building darwin kernel
by Terry Lambert 31 May '07

31 May '07

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com Hi, The manual for the kernel building is at http://developer.apple.com/DOCUMENTATION/Darwin/Conceptual/KernelProgrammin… When i am at this step: make RC_OS=macos kld_build I stumbled upon an error which says seg_hack __KLD ./prehack_libkld.a -o ./static_libkld.o make[1]: seg_hack: Command not found make[1]: *** [libkld.a] Error 127 make: *** [kld_build] Error 2 You either skipped this step: Or this step: -- Terry _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… On May 31, 2007, at 12:53 PM, Billy Lau wrote: As I am following through the instructions on how to build the darwin kernel, I was stuck with an error that I cannot resolve. Can anyone help? Thanks "Also, make sure that /usr/local/bin is in your PATH environment variable..." "Get the bootstrap_cmds, Libstreams, kext_tools, IOKitUser, and cctools packages from http://www.opensource.apple.com. Extract the files from these .tar packages..." ...probably the second one, since the current Makefile infrastructure directly references it by path. This email sent to site_archiver(a)lists.apple.com

1 0

Re: a Bootstrap Namespace question
by Terry Lambert 31 May '07

31 May '07

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com #!/bin/bash StartupItemContext $@ -- Terry _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… On May 31, 2007, at 6:30 AM, Serge Cohen wrote: Le 31 mai 07 à 11:32, Quinn a écrit : At 23:04 +0200 30/5/07, Serge Cohen wrote: PS : Another question is : is there anyway to see the difference between running in a deactivated namespace vs. an activated one but not having the necessary permissions to ope a port? Namespaces don't have permissions as such [1]: if you have a send right for a the namespace's, you can manipulate it. In my experience, a BOOTSTRAP_NOT_PRIVILEGED error always implies a deactivated namespace. I'll try to get further now. Sorry to be lengthy, but I have the impression that my reasonning gets wrong at some point and I hope that by putting it as clearly as possible here, you or someone else might be able to point me to my error : I've indeed first get to the xGrid mailing list (as I'm registered there for some time). I've seen there also a post about this type of java.awt problem before but did not find answer in the archive nor get any answer to my specific question (post http://lists.apple.com/archives/Xgrid-users/2007/May/msg00026.html ). Indeed the link to the technote I cite was found during this initial search. >From those readings, my first opinion was also that somehow launching a process within xGrid resulted in getting a deactivated namespace. I've tried to trace the process ids to check if eg. my process had PPID=1 (that's what happens in the ssh example of namespace deactivation, right); here is the result : I think that it's pretty clear from the fact that the PPID is 1 that your process is being reparented to init (launchd), and that because of this, the intermediate process that started your process has exitted. This would destroy your bootstrap namespace, since a bootstrap namespace only lives as long as the last process that references it. This effectively means that, in order for your application to get a persistent reference, it needs to do so before it's parent process exits, and it gets reparented to launchd, for lack of its parent sticking around. Obviously, as you have discovered, to access the bootstrap namespace for the top level launchd, you have to be root. The normal way this is accomplished is by having a plist and activating your code via launchctl, and then dropping privilege after the fact - since launchd will be launching your application, at the behest of Xgrid, rather than launching it itself. Frankly, I don't know how Xgrid does session management, so I could not tell you how to do this, or at what points there are hooks in order to be able to get this done. You really need an Xgrid expert here, and explain to them your issue, in the context of needing access to the bootstrap namespace for an inherited parent. FWIW, you _could_ have Xgrid start a process, and then have that process _not_ exit, and start the Java process; this would give you access to the parents bootstrap namespace -- but since I don't know why in the heck anyone would need a bootstrap namespace in this context, I can't tell if this would be sufficient for your needs. The normal reason for needing one is to be able to rendezvous between processes in the namespace via Mach ports. Obviously, if you went this route, the parent process would need to wait for all its children to exit before it exits itself. At 23:04 +0200 30/5/07, Serge Cohen wrote: The only solution I've found so far is to write a small C program with set-uid to ROOT which first get to the root bootstrap namespace (the one attached to launchd process), then create a sub- namespace (using bootstrap_subset()) and then after going back to real-UID exec whatever I was trying to run. The best way to get into the root bootstrap is via <x-man-page://8/StartupItemContext >. Alternatively, you might look at bootstrap_parent (but I'd really prefer you use StartupItemContext). I've tried that ... This requires that I have a set-uid shell script running StartupItemContext (because it can only be run as root). I had a short shell script installed on the node computers, with set- uid to root and containing basically something like : Actually, SUID shell scripts don't work by default on recent systems due to security considerations. You can make them work via a sysctl that must be executed as the root user in order to enable them (on a system-wide basis), but I believe that this change went into all 10.4.x systems a while back. I did not managed to get that running, indeed StartupItemContext was complaining that it should be run as root... I have to admit I've not spent to much time on that because I was not really happy to have a set-uid shell script intstalled on the machines. This is what's expected, as the SUID-ness of shells scripts is no longer valid by default. You'd need to write a small wrapper program. Also , going further in this direction means that the program run by xGrid will run in the top namespace; the result is that 'All subsequent Mach port bootstrap registrations perfomed by the program will be visible system-wide.' which I'd really rather avoid. That is why I tried to make a sub-namespace under the top one so that whatever the process run by xGrid do, it can NOT affect any other parts of the system. Again, you're going to need an Xgrid expert to tell you how new processes are started under Xgrid to get to where you need to be. My personal preferrence, since this application is not graphical, would be to avoid any IPC mechanism that expects access to a bootstrap namespace in the first place (but, again, that may not be good enough for your purposes). I'd strongly recommend against getting launchd's bootstrap. While this will give you the root bootstrap on current systems, it probably won't on future systems. Sorry I was not clear here : indeed I'm using the 'top' namespace : recursing using bootstrap_parent() until the current is equal to its parent. Then I do a sub-namespace (using bootstrap_subset()). Sounds like a wrapper parent process is your best bet, if you absolutely _must_ have this... my best advice would be to go back to the Xgrid list and ask them how processes are started up, and how you maintain access to the bootstrap namespace (which will lead to them asking you why you need it). Good luck, and let us know what they say so it gets archived over here, as well! This email sent to site_archiver(a)lists.apple.com

1 0

Problem building darwin kernel
by Billy Lau 31 May '07

31 May '07

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com Hi, As I am following through the instructions on how to build the darwin kernel, I was stuck with an error that I cannot resolve. The manual for the kernel building is at http://developer.apple.com/DOCUMENTATION/Darwin/Conceptual/KernelProgrammin… When i am at this step: make RC_OS=macos kld_build I stumbled upon an error which says seg_hack __KLD ./prehack_libkld.a -o ./static_libkld.o make[1]: seg_hack: Command not found make[1]: *** [libkld.a] Error 127 make: *** [kld_build] Error 2 Can anyone help? Thanks -- Billy _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

Re: a Bootstrap Namespace question
by Serge Cohen 31 May '07

31 May '07

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi Quinn; Thanks for the answer. Le 31 mai 07 à 11:32, Quinn a écrit : Boostrap port for the task is : 4107 Bootstrap's parent is : 779 Now recursing up : ... Recursion parent is : 779 #!/bin/bash StartupItemContext $@ Hope this was not too long; thanks again; (thick?) Serge. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.3 (Darwin) iD8DBQFGXs325EPeG5y7WPsRApCEAKD1COGNuT/QRzGxcsBX7QHjx39nCQCeJEP/ L2WlyAlQrIj4jN2wiJqKoks= =3MKF -----END PGP SIGNATURE----- _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… At 23:04 +0200 30/5/07, Serge Cohen wrote: PS : Another question is : is there anyway to see the difference between running in a deactivated namespace vs. an activated one but not having the necessary permissions to ope a port? Namespaces don't have permissions as such [1]: if you have a send right for a the namespace's, you can manipulate it. In my experience, a BOOTSTRAP_NOT_PRIVILEGED error always implies a deactivated namespace. I'll try to get further now. Sorry to be lengthy, but I have the impression that my reasonning gets wrong at some point and I hope that by putting it as clearly as possible here, you or someone else might be able to point me to my error : I've indeed first get to the xGrid mailing list (as I'm registered there for some time). I've seen there also a post about this type of java.awt problem before but did not find answer in the archive nor get any answer to my specific question (post http://lists.apple.com/ archives/Xgrid-users/2007/May/msg00026.html ). Indeed the link to the technote I cite was found during this initial search. >From those readings, my first opinion was also that somehow launching a process within xGrid resulted in getting a deactivated namespace. I've tried to trace the process ids to check if eg. my process had PPID=1 (that's what happens in the ssh example of namespace deactivation, right); here is the result : UID PID PPID CPU PRI NI VSZ RSS WCHAN STAT TT TIME COMMAND 0 1 0 0 32 -1 28348 472 - S<s ?? 0:34.81 /sbin/launchd 86 4016 1 0 31 0 42780 2564 - Ss ?? 0:00.28 xgridagentd 0 4019 4016 0 31 0 29196 1212 - Ss ?? 0:00.03 /usr/libexec/xgrid/xgridagenthelper 1100 4045 4019 0 11 20 27812 1092 - SNs ?? 0:00.02 /bin/bash /var/xgrid/agent/tasks/HiqANG2L/working/./test.sh If I'm correct (which I'm absolutely NOT confident on), the namespace I'm running in should be connected to one of those processes ? The only info I got was that very likely the processes launched by xGrid get the same context as daemons/agents, hence the one that StartUpItemContext gives as well. I then tested a bit with bootstrap_parent() : launching a small program that is trying to go up the chain of bootstrap namespaces (the idea was to see how many of those were in between my process and the top one -the one having itself as parent-). From that I saw that "bootstrap_parent()" is only allowed if EUID=0 (at least in the xGrid and normal session context), so I made the program set-uid to root. Here are the results I get when running this program through xGrid (this is running as root, set-uid is set...) To me this looks like indeed the program launched by xGrid are running in the 'root' namespace... again if I'm not wrong that also means that I'll get the same context when executing my program using "StartUpItemContext" ? To me this also means that I can not believe that this particular bootstrap namespace is genuinly deactivated. At 23:04 +0200 30/5/07, Serge Cohen wrote: The only solution I've found so far is to write a small C program with set-uid to ROOT which first get to the root bootstrap namespace (the one attached to launchd process), then create a sub- namespace (using bootstrap_subset()) and then after going back to real-UID exec whatever I was trying to run. The best way to get into the root bootstrap is via <x-man-page://8/ StartupItemContext>. Alternatively, you might look at bootstrap_parent (but I'd really prefer you use StartupItemContext). I've tried that ... This requires that I have a set-uid shell script running StartupItemContext (because it can only be run as root). I had a short shell script installed on the node computers, with set- uid to root and containing basically something like : I did not managed to get that running, indeed StartupItemContext was complaining that it should be run as root... I have to admit I've not spent to much time on that because I was not really happy to have a set-uid shell script intstalled on the machines. Also , going further in this direction means that the program run by xGrid will run in the top namespace; the result is that 'All subsequent Mach port bootstrap registrations perfomed by the program will be visible system-wide.' which I'd really rather avoid. That is why I tried to make a sub-namespace under the top one so that whatever the process run by xGrid do, it can NOT affect any other parts of the system. I'd strongly recommend against getting launchd's bootstrap. While this will give you the root bootstrap on current systems, it probably won't on future systems. Sorry I was not clear here : indeed I'm using the 'top' namespace : recursing using bootstrap_parent() until the current is equal to its parent. Then I do a sub-namespace (using bootstrap_subset()). But before getting into any of this, it would be a good idea to understand who is deactivating your bootstrap namespace and why. I don't know a lot about Xgrid, so I don't know the answer. Have you tried asking this over on xgrid-users? The only specific info I got on that issue was an indirect post (another participant in the list forwarded me some info he got from Ernest Prabhakar at apple) : For more information see <http://developer.apple.com/technotes/ tn2005/tn2083.html>. Tasks run under Xgrid have the same basic restrictions as daemons and agents. In Josh's particular case, he is getting error 1100, which is due to "deactivated bootstrap namespace". It looks to me like the agent is started in a particular bootstrap namespace (ie, an ssh session) and then that bootstrap namespace is deactivated (the ssh session ends.). I think Josh needs to start the agent in to root bootstrap namespace using the StartupItemContext tool, something like this: However in my case the agent is started on the node computers (running under OS-X server) via the Server Admin application, and as mentioned above it looks (to me at least) like they are in a bootstrap namespace which is it self parent (the reason why I guess it is the 'root'). S+E -- Quinn "The Eskimo!" <http://www.apple.com/ developer/> Apple Developer Relations, Developer Technical Support, Core OS/ Hardware [1] Well, there is bootstrap_unprivileged, but I've never seen it used. This email sent to site_archiver(a)lists.apple.com

1 0

Re: a Bootstrap Namespace question
by Quinn 31 May '07

31 May '07

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com S+E -- Quinn "The Eskimo!" <http://www.apple.com/developer/> Apple Developer Relations, Developer Technical Support, Core OS/Hardware [1] Well, there is bootstrap_unprivileged, but I've never seen it used. _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… At 23:04 +0200 30/5/07, Serge Cohen wrote: PS : Another question is : is there anyway to see the difference between running in a deactivated namespace vs. an activated one but not having the necessary permissions to ope a port? Namespaces don't have permissions as such [1]: if you have a send right for a the namespace's, you can manipulate it. In my experience, a BOOTSTRAP_NOT_PRIVILEGED error always implies a deactivated namespace. At 23:04 +0200 30/5/07, Serge Cohen wrote: The only solution I've found so far is to write a small C program with set-uid to ROOT which first get to the root bootstrap namespace (the one attached to launchd process), then create a sub-namespace (using bootstrap_subset()) and then after going back to real-UID exec whatever I was trying to run. The best way to get into the root bootstrap is via <x-man-page://8/StartupItemContext>. Alternatively, you might look at bootstrap_parent (but I'd really prefer you use StartupItemContext). I'd strongly recommend against getting launchd's bootstrap. While this will give you the root bootstrap on current systems, it probably won't on future systems. But before getting into any of this, it would be a good idea to understand who is deactivating your bootstrap namespace and why. I don't know a lot about Xgrid, so I don't know the answer. Have you tried asking this over on xgrid-users? This email sent to site_archiver(a)lists.apple.com

1 0

Re: Reload VM hint?
by Quinn 31 May '07

31 May '07

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com As a backup utility, you are probably reading a lot of files; as Brian notes if you apply the F_NOCACHE fcntl to these files immediately after opening them, you will avoid evicting other applications' pages in favour of file cache pages. If you do the F_NOCACHE thing, try to meet the following criteria: o page align your memory buffers <x-man-page://3/valloc> o make them an even multiple of the page size <x-man-page://3/getpagesize> o read at an offset into the file that's an even multiple of the page size o read an even multiple of a page size bytes (except at the end, of course) Share and Enjoy -- Quinn "The Eskimo!" <http://www.apple.com/developer/> Apple Developer Relations, Developer Technical Support, Core OS/Hardware _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… At 14:53 -0700 30/5/07, James Bucanek wrote: Michael Smith <mailto:drivers@mu.org> wrote (Wednesday, May 30, 2007 12:36 PM -0700): I hadn't thought of that, and that's an excellent suggestion (thanks also extended to Brian and Matt). By doing all of the above, you increase the effectiveness of F_NOCACHE (that is, your minimise the amount of caching). This email sent to site_archiver(a)lists.apple.com

1 0

Re: glibc (makecontext) port (user context switching)
by Terry Lambert 31 May '07

31 May '07

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com -- Terry _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… On May 27, 2007, at 7:37 PM, James Shimer wrote: Has there been a port of glibc or makcontext, getcontex, swapcontext? I'm trying to port an application that uses these APIs to perform user space context switching. Any ideas of similar threading APIs to create and swap in and out a thread context? You have to have kernel cooperation through sigreturn() (which is what sets the thread context), so it''s not a straight port in user space, since you can't necessarily do the necessary manipulation in user space alone. This email sent to site_archiver(a)lists.apple.com

1 0

Re: Reload VM hint?
by James Bucanek 30 May '07

30 May '07

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com No, there isn't. The system has no way of telling the difference between pages that were evicted but still relevant and pages that were evicted and not relevant; it has to wait for other applications to need them. Brian's somewhat terse observation might bear a little expansion, though I think he may be on the right path. You say your application is a backup utility, and that it uses hundreds of megabytes of RAM. What do you mean by "uses"? Do you make large allocations inside your application's address space? Why? If you are buffering for a device, you can probably get by with much less buffer than you think; certainly not hundreds of megabytes. As a backup utility, you are probably reading a lot of files; as Brian notes if you apply the F_NOCACHE fcntl to these files immediately after opening them, you will avoid evicting other applications' pages in favour of file cache pages. HTH; feel free to ask more questions. Your users, incidentally, should buy more RAM. 8) -- James Bucanek _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… Michael Smith <mailto:drivers@mu.org> wrote (Wednesday, May 30, 2007 12:36 PM -0700): On May 30, 2007, at 7:47 AM, James Bucanek wrote: Is there anyway for my application to send a "hint" or command to the VM manager that will cause it to reload the recently paged out memory pages? I have a supervisory process (a scheduler daemon) that can do this after the process terminates. True, but I hoping that there was still some way of restoring the most recently pushed out pages using the logic that the cost of re-reading unneeded pages now would outweigh the cost of stalling to re-read needed pages later. Hash and lookup tables, mostly. The application is QRecall (<http://www.qrecall.com/>). It breaks every file down into individual data blocks, then builds a massive database of those blocks. Every block of data is first compared against the set of blocks that have already been captured so that no duplicate data is ever added to the backup data set. Works pretty well, except (apparently) for the huge amount of RAM and CPU resources it needs. No, all of my file buffers are pretty small (in the 1MB range). And that's mostly so I can read in a chunk of data and then get several threads working on the problem. I hadn't thought of that, and that's an excellent suggestion (thanks also extended to Brian and Matt). The source file data is only read once, so at least I can eliminate that from being cashed. Come to think of it, that might improve my overall performance since the reading the source file blocks also competes with the caching of my database file blocks. I agree. Maybe I should create a bundle deal where every copy of the application comes with a RAM upgrade? ;) This email sent to site_archiver(a)lists.apple.com

1 0

a Bootstrap Namespace question
by Serge Cohen 30 May '07

30 May '07

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi list; Thanks for any advices/comments. Serge. iD8DBQFGXea+5EPeG5y7WPsRAjKlAKCt1PsKqqbQAC5yCVCYgEpLm3xHnwCfYaCF h1XeEUbtoHH/O7WejzwNxns= =BWPc -----END PGP SIGNATURE----- _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… Indeed I realise that the problem I have is not in the "kernel space"; nevertheless form my reading I have the impression that kernel programming is the only place that one can sometime have to deal with bootstrap-namespace... I have the following problem : I'm trying to run a java AWT program inside something which is close to a daemon context (indeed it is run through xGrid with kerberos, hence with a UID of the person who submitted the job). To be able to have AWT NOT needing GUI, I've set the java.awt.headless to true (as mentioned in http://developer.apple.com/ technotes/tn2005/tn2083.html#SECFRAMEWORKCROSSREFERENCE ). Still the java program crashes with a message : 2007-05-23 16:48:29.572 java[3974] CFLog (0): CFMessagePort: bootstrap_register(): failed 1100 (0x44c), port = 0xe603, name = 'Processes-2.3974' See /usr/include/servers/bootstrap_defs.h for the error codes. 2007-05-23 16:48:29.587 java[3974] CFLog (99): CFMessagePortCreateLocal(): failed to name Mach port (Processes-2.3974) CFMessagePortCreateLocal failed (name = Processes-2.3974 error = 0) Going through more web search I've found http://lists.apple.com/ archives/java-dev/2006/Apr/msg00302.html which explains that most of these messages are coming from de-activated bootstrap-namespace. The only solution I've found so far is to write a small C program with set-uid to ROOT which first get to the root bootstrap namespace (the one attached to launchd process), then create a sub-namespace (using bootstrap_subset()) and then after going back to real-UID exec whatever I was trying to run. This does work, however I'm wondering what are the risks I'm taking when doing this sort of thing. Given the very limited number of users (3 to 5 who have access to the machines) I'm pretty sure no-one will have bad intention some I'm more curious of advices about what type of accident might be caused by the creation of this type of 'mini bootstrap namespace'? PS : Another question is : is there anyway to see the difference between running in a deactivated namespace vs. an activated one but not having the necessary permissions to ope a port? -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.3 (Darwin) This email sent to site_archiver(a)lists.apple.com

1 0