June 2007 - Darwin-kernel - lists.apple.com

Re: kdb with serial port
by Herb Petschauer 01 Jun '07

01 Jun '07

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com Dkim-signature: a=rsa-sha1; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:references; b=X+OgG8GZVT2w7Ii80fDpeTFh+RDtmkJSTDmwjw4oxYpSd6sRii2ic7NXAk8RV3DYw81LiBrvPmSTzn3daPV/PX4v8c053upLIWURBV6r68HILZORF53bmBnIcRzpk77A9n6Iu4SOCzplSMd6RsPdSZcZYvoIP+ExVn6HYru01SY= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:references; b=qkic1xCKK0z/ao/Q9O1wKoF8MAWDvdrrL61Z6Z5wdK4HYELOyCs1MCBNMLf1JDHX6KduasdQZtvvJwhi5hYJfk8XccNrdCKuSE541pj6vroBgbwYllwcdhKDhZeZuk9kXuV0iEHVeXsWXKKQ/IqMQzAMgYhEdOjuedifnOcQZVc= _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

Re: kdb with serial port
by apic | puredarwin.org 01 Jun '07

01 Jun '07

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com PGP.sig

1 0

Re: kdb with serial port
by Herb Petschauer 01 Jun '07

01 Jun '07

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com Dkim-signature: a=rsa-sha1; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:references; b=NNZ2656150AZoP6d2jbCOh2gFIPEgTZ6BjOW28AnjDjt74optKhm+qXe1bns7aOKst0TmknMkh6cV0Wq3Scd9P6QJdKDsvpLAXXaSqvjaifKFlYBCs05iEg27ZnJmbXZH08rsWsPJ85dz1esWHzHtmSvXqRW/y3Pz5HgG411sXQ= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:references; b=MJKqdvwST3lNBCRlYb/fIfPZClEaqibtAMYFFAip1IAwDpZ3SGmWq6k7iYM5dGPlbyCHRBL/WSm/DS1WFH8PuzYAj/J6shK1/9q+t1aLtiIm1zAfMOC38e4BE+eDh1PfZFU5gK8xz7rrvaK9Z3Xdo5kq13HuQrIlHALtMq6BQ18= _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

Modify CPU registers
by Raul Flores 01 Jun '07

01 Jun '07

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com User-agent: Thunderbird 2.0.0.0 (Windows/20070326) Thanks, Raul Flores --- avast! Antivirus: Outbound message clean. Virus Database (VPS): 000746-2, 06/01/2007 Tested on: 6/1/2007 1:54:29 PM avast! - copyright (c) 1988-2007 ALWIL Software. http://www.avast.com _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… I would like to lock/invalidate/flush cache areas and or set other cpu registers on a 7447A processor (Apple G4 PowerBook) with OS X (Darwin) 10.4. Not sure how to proceed, as many of the commands are "supervisor mode". A simple example would be reading HID0 and HID1 registers. Trying to perform an "mfspr" command for any other than 1,8,or 9 results in an illegal exception, when executed from the user state. Any ideas on how to approach/implement this type of functionality from my software? It appears that the CHUD framework installs a KEXT to control the performance counter registers. Am I looking at the same type of implementation (KEXT) to have my user application query/modify some of the register settings? This email sent to site_archiver(a)lists.apple.com

1 0

Re: kdb with serial port
by Shawn Erickson 01 Jun '07

01 Jun '07

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com Dkim-signature: a=rsa-sha1; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=ajyjdSPwEgvP74xetE0xr5uDKcyg+6ex+EAdJNZv0BeysN6/Q3gZADzgRcht0PQfW3eP4mGsmVYGKIEoySaZjU3WtH5efEvVdQAGnN61qCh3KOVwvXmr1B1BCNLz9dElf02sJ/cQhmAxBV/O+MrppRJvjERxNEx04Yvhq586ayU= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=JpnJLCPpTJ62KDLSMKWfPVth2XsipGOVUFO6I0DNkbcUHjg2hVGWREYuq+Guwd+PeJ/3v/GbwVI4nAysBhHchAZHjOVM1UN/33GRTKT9JCIts5FNnBMPVNms+w2YW+KFUUXXq8kESTPuVydLKtK2Oak8A87VG8qKJ1fEDuNx+Rs= -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello list, I am looking for a list of nvram flags to specify with "debug". I found such a list quite some time ago but I cannot find it again. Can someone help me out with that? Especially intresting is the flag which will stop kernel on boot (early as possible) and wait for a connect of gdb via serial. Try the following search in Google: "kernel debugging site:developer.apple.com" <http://developer.apple.com/DOCUMENTATION/Darwin/Conceptual/KernelProgrammin…> <http://developer.apple.com/documentation/Darwin/Conceptual/KEXTConcept/KEXT…> -Shawn _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… On 6/1/07, apic | puredarwin.org <apic(a)puredarwin.org> wrote: This email sent to site_archiver(a)lists.apple.com

1 0

kdb with serial port
by apic | puredarwin.org 01 Jun '07

01 Jun '07

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello list, Thanks, apic - puredarwin project -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (Darwin) iD8DBQFGYFj1BDxoGUAtYxoRAmRTAJ97C1bVr/pgbmcarSL7RWZ3wrwh9gCfXjky N+/qo/9hK8SUP3bKrHxH0Nc= =J0Z7 -----END PGP SIGNATURE----- _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… I am looking for a list of nvram flags to specify with "debug". I found such a list quite some time ago but I cannot find it again. Can someone help me out with that? Especially intresting is the flag which will stop kernel on boot (early as possible) and wait for a connect of gdb via serial. This email sent to site_archiver(a)lists.apple.com

1 0

Re: Problem building darwin kernel
by Billy Lau 01 Jun '07

01 Jun '07

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com Thanks for the help given so far. Say now that I assume that the tools has been properly installed, and I proceed all the way to compile the kernel, and by the way, this is done on a powerPC. As I was executing "make exporthdrs", everything went well, however, when I execute "make all", it proceeded all the way until it gave me this: [ building mach_kernel ] /bin/sh: line 1: /Users/blau2/xnu-792.17.14/config/newvers.pl: Permission denied make[2]: *** [do_build_mach_kernel] Error 1 make[1]: *** [build_all] Error 2 make: *** [all] Error 2 What possibly went wrong? And by the way, I am very new to this development environment. I really don't know much about what does errors stand for, and how do you guys check for interdependencies and so on. Thanks. Billy _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Regarding Route Command source code
by Michael Smith 01 Jun '07

01 Jun '07

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com On Jun 1, 2007, at 7:07 AM, subodh singh wrote: Whether the same command is working fine. I have verified the source code also and it already used setuid(uid); uid=0; So kindly suggest me the reason of this problem, and also that how can I solve it. = Mike _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… The problem is that you do not understand the Unix process security model, and thus the solution would necessarily begin with your enlightenment. In this particular example, what you're missing is that a process running with your login credential cannot change its UID to zero (i.e. it cannot become root) merely by calling setuid(0). This should be obvious, and if it's not and you plan to keep writing driver software for MacOS then I cannot encourage you strongly enough to stop everything else you're doing until you understand why. This may sound a little harsh, and I'm only picking on you because you stood up and asked a question, but it is exactly this lack of comprehension that forms a major part of Microsoft's ongoing problems with local security holes in Windows, and MacOS is much better off without it. Because the system calls that route(8) uses affect the whole system, not just the user making them, they require root privilege. In the normal case, this is achieved by installing the route command setuid; this is an expression of trust by the system in the sanity checking in the route(8) binary. This delegation of trust allows an administrator to further control which users have access to routing information by altering permissions on (or removing entirely) the route(8) binary, effectively achieving a degree of separation of privilege. In your specific case, while you are making changes to route(8), you can use sudo(8) to temporarily become root while running the command. Please note that your product must not replace the system's route(8) binary when it is installed - at most, you should carry a private copy in your application/driver bundle. This email sent to site_archiver(a)lists.apple.com

1 0

Regarding Route Command source code
by subodh singh 01 Jun '07

01 Jun '07

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com Dkim-signature: a=rsa-sha1; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:to:subject:mime-version:content-type:content-transfer-encoding:content-disposition; b=YNdkPids1OdIncEi0udred9YLvI9rEoDJEa++420GS0R7+PcNwutjFO8AIIxKBSb38L43XUWnHAsLE3Plcgv3DfAGmt3y7I2IuGUssIHo4bXC4bjV6D53uIB2dCFmj/WL5JFn95Xcz4pbXfZ8n8iUFxKsuYwGdgxx3DYiWWDn+Y= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:to:subject:mime-version:content-type:content-transfer-encoding:content-disposition; b=ZhKYv0f7apcmy3jUhsrExd2VscdlyBTUfHPDZk/hPJ13VeMfZZA2xViCXDtJJEx2jM8AxzWyMsq4WN5uANjgk1a5A+Si0sddxhVoQOKY18rHxTwAPwwd8jxlC11PnoTLA4+/ErI5SwzqCi19QSwI/TC6Rf0AbJo0bpYbKmYwtmQ= Hello Guys, I have retrieved the source code of route command from open source, and it sowrking fine on Mac OS X 10.3.x and above. But the problem is on Mac OS X 10.2.X, I can compile the code successfully but when I run the executable by command line "./a.out get default", I got a run time error, i.e. socket: Operation not permitted Whether the same command is working fine. I have verified the source code also and it already used setuid(uid); uid=0; So kindly suggest me the reason of this problem, and also that how can I solve it. Thanks in advance Subodh _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

Re: a Bootstrap Namespace question
by Serge Cohen 01 Jun '07

01 Jun '07

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Le 1 juin 07 à 00:24, Terry Lambert a écrit : #!/bin/bash StartupItemContext $@ I'll post solution here as well, that is, if I find a 'decent' one. Thanks again. Serge. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.3 (Darwin) iD8DBQFGX8hM5EPeG5y7WPsRAv8mAJ0QNjwfyWqEYHG+A8ZLkQgo2/NnTgCdErsu cVSQQuMbaAInpaMoQ1viGhM= =6CcG -----END PGP SIGNATURE----- _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… On May 31, 2007, at 6:30 AM, Serge Cohen wrote: Le 31 mai 07 à 11:32, Quinn a écrit : At 23:04 +0200 30/5/07, Serge Cohen wrote: PS : Another question is : is there anyway to see the difference between running in a deactivated namespace vs. an activated one but not having the necessary permissions to ope a port? Namespaces don't have permissions as such [1]: if you have a send right for a the namespace's, you can manipulate it. In my experience, a BOOTSTRAP_NOT_PRIVILEGED error always implies a deactivated namespace. I'll try to get further now. Sorry to be lengthy, but I have the impression that my reasonning gets wrong at some point and I hope that by putting it as clearly as possible here, you or someone else might be able to point me to my error : I've indeed first get to the xGrid mailing list (as I'm registered there for some time). I've seen there also a post about this type of java.awt problem before but did not find answer in the archive nor get any answer to my specific question (post http:// lists.apple.com/archives/Xgrid-users/2007/May/msg00026.html ). Indeed the link to the technote I cite was found during this initial search. >From those readings, my first opinion was also that somehow launching a process within xGrid resulted in getting a deactivated namespace. I've tried to trace the process ids to check if eg. my process had PPID=1 (that's what happens in the ssh example of namespace deactivation, right); here is the result : I think that it's pretty clear from the fact that the PPID is 1 that your process is being reparented to init (launchd), and that because of this, the intermediate process that started your process has exitted. Please read carefully : this "PPID=1" is in a conditional, explaining the motivation of my search... Two lines below that is an actual exert from 'ps -axl', in which one clearly see that PPID is NOT 1 . More precisely here is the process tree (child to parent) : /bin/bash ..../test.sh <- xgridagenthelper <- xgridagentd <- /sbin/ launchd they are all still running as long as the job (here the bash process) is not finished. I'm sorry this was not clear enough, I hope it is now. This would destroy your bootstrap namespace, since a bootstrap namespace only lives as long as the last process that references it. This effectively means that, in order for your application to get a persistent reference, it needs to do so before it's parent process exits, and it gets reparented to launchd, for lack of its parent sticking around. Obviously, as you have discovered, to access the bootstrap namespace for the top level launchd, you have to be root. The normal way this is accomplished is by having a plist and activating your code via launchctl, and then dropping privilege after the fact - since launchd will be launching your application, at the behest of Xgrid, rather than launching it itself. Frankly, I don't know how Xgrid does session management, so I could not tell you how to do this, or at what points there are hooks in order to be able to get this done. You really need an Xgrid expert here, and explain to them your issue, in the context of needing access to the bootstrap namespace for an inherited parent. It looks like there is not such thing, the parent process are here, still the bootstrap namespace is the root one. FWIW, you _could_ have Xgrid start a process, and then have that process _not_ exit, and start the Java process; this would give you access to the parents bootstrap namespace -- but since I don't know why in the heck anyone would need a bootstrap namespace in this context, I can't tell if this would be sufficient for your needs. The normal reason for needing one is to be able to rendezvous between processes in the namespace via Mach ports. Obviously, if you went this route, the parent process would need to wait for all its children to exit before it exits itself. That is more or less what I did, but instead of forking after setting the bootstrap namespace I just 'execve'... To be honest I don't see why java.awt is asking a context where it can open port when it is set in headless mode (but I guess this question has to go to the java mailing list). At 23:04 +0200 30/5/07, Serge Cohen wrote: The only solution I've found so far is to write a small C program with set-uid to ROOT which first get to the root bootstrap namespace (the one attached to launchd process), then create a sub-namespace (using bootstrap_subset()) and then after going back to real-UID exec whatever I was trying to run. The best way to get into the root bootstrap is via <x-man-page:// 8/StartupItemContext>. Alternatively, you might look at bootstrap_parent (but I'd really prefer you use StartupItemContext). I've tried that ... This requires that I have a set-uid shell script running StartupItemContext (because it can only be run as root). I had a short shell script installed on the node computers, with set-uid to root and containing basically something like : Actually, SUID shell scripts don't work by default on recent systems due to security considerations. You can make them work via a sysctl that must be executed as the root user in order to enable them (on a system-wide basis), but I believe that this change went into all 10.4.x systems a while back. Thanks for the information, it is now much clearer why we did not achieve anything using this route.... If the SUID shell scripts are deactivated, I guess it is for a proper reason, and I'd rather stay with that default settings. Is this overly cautious to keep them deactivated ? I did not managed to get that running, indeed StartupItemContext was complaining that it should be run as root... I have to admit I've not spent to much time on that because I was not really happy to have a set-uid shell script intstalled on the machines. This is what's expected, as the SUID-ness of shells scripts is no longer valid by default. You'd need to write a small wrapper program. Also , going further in this direction means that the program run by xGrid will run in the top namespace; the result is that 'All subsequent Mach port bootstrap registrations perfomed by the program will be visible system-wide.' which I'd really rather avoid. That is why I tried to make a sub-namespace under the top one so that whatever the process run by xGrid do, it can NOT affect any other parts of the system. Again, you're going to need an Xgrid expert to tell you how new processes are started under Xgrid to get to where you need to be. My personal preferrence, since this application is not graphical, would be to avoid any IPC mechanism that expects access to a bootstrap namespace in the first place (but, again, that may not be good enough for your purposes). Well, indeed I'd also prefer process which do not require IPC, the fact is that some computation are done by a program which can have a GUI and is in java (awt). Even after setting java.awt.headless to true (which disable all the windowing), instantiating a color (without even really using it) is making java trying to open a port.... I guess I don't have much options here, either re-write all the program to totally avoid java.awt (I don't even have access to the sources) or let java open ports and just make sure they don't bother any other process... :-( I'll send the question again on the xGrid list, and let you know the answer (but I'm not sure that I'll manage to get more info than the 'process tree' I gave above). I'd strongly recommend against getting launchd's bootstrap. While this will give you the root bootstrap on current systems, it probably won't on future systems. Sorry I was not clear here : indeed I'm using the 'top' namespace : recursing using bootstrap_parent() until the current is equal to its parent. Then I do a sub-namespace (using bootstrap_subset()). Sounds like a wrapper parent process is your best bet, if you absolutely _must_ have this... my best advice would be to go back to the Xgrid list and ask them how processes are started up, and how you maintain access to the bootstrap namespace (which will lead to them asking you why you need it). Good luck, and let us know what they say so it gets archived over here, as well! -- Terry This email sent to site_archiver(a)lists.apple.com

1 0