June 2007 - Darwin-kernel - lists.apple.com

Re: lsof
by Todd Heberlein 11 Jun '07

11 Jun '07

site_archiver(a)lists.apple.com Delivered-To: Darwin-kernel(a)lists.apple.com On Jun 11, 2007, at 1:37 PM, cristian pancià wrote: Was lsof also rebuilt during your rebuild? Todd _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… After rebuiding the kernel in debug version xnu-792.17.14/BUILD/obj/ RELEASE_PPC lsof is not giving me any result,just got lsof: can't read process table Anyone can pointng' me to the light? Way back in the early 1990s we were using lsof embedded in an application suite on SunOS computers, and kernel updates regularly forced us to reinstall a freshly compiled version of lsof. It turns out (15 years ago, anyways), lsof was very tightly tied to the kernel's internal data structures. This email sent to site_archiver(a)lists.apple.com

1 0

lsof
by cristian pancià 11 Jun '07

11 Jun '07

site_archiver(a)lists.apple.com Delivered-To: Darwin-kernel(a)lists.apple.com Dkim-signature: a=rsa-sha1; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:to:subject:mime-version:content-type; b=W9MdXLeyH42DZYHPABoOVryqVO1ZShQkMkGSm9mXoMQlGAb2ZpzvAqfDSvo0ZSwxNWpw3RsUCFGlyIyce9lXrr6xLTk3sHqf9+50jfg8xmaZ+89LrzYCSgXSxCW3ahxzJN/TFH+hzehcKzdQwYn4VYwVJXDdQ17rDyqySdYEVFI= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:to:subject:mime-version:content-type; b=twAxOWxIr5NmohrRaNmu8IzXq4alnjY3sLBBI2nMsd5XB0syO1VVq409Te5i8rnPGnWARMZNSoiOJHZREnlNii6AJqDPF/jehFDIxK6idz/0DGPyms9vKXkLtsYExKj0ljSGjMS5HB8rBCKZs/MsAmTK4IorH1TdH5GYfNCnVlA= _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

Re: IOMedia filter
by Michael Smith 09 Jun '07

09 Jun '07

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com On Jun 8, 2007, at 3:33 PM, Eric Long wrote: Not necessarily. = Mike _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… I'm looking at writing an IOMedia filter. This is pretty new to me. I have a couple of questions I hope are not too ambitious. Before attaching my childMedia object to the driver in my start() method, I may need to talk to a userland agent. - Can I do that from within the start method? Will I have time-out issues? You should not do it there. Publish a per-instance UserClient and leave it at that. The userland agent should register interest in the appearance of instances of your Userclient and drive the actual manifestation of your childMedia object. I'd like to communicate information to identify the volume being mounted to my agent, like the volume's UUID, display name, and such. - Can I get this information at this point in the kernel? I saw a kIOMediaUUIDKey, but when I try to get that property, I get back NULL. Maybe its not available yet in start()? I don't see a key for the display name of the volume/partition. The display name is not typically available for raw media; it's often not known until the volume is presented to a filesystem. This email sent to site_archiver(a)lists.apple.com

1 0

Re: Log of deleted files
by Terry Lambert 08 Jun '07

08 Jun '07

site_archiver(a)lists.apple.com Delivered-To: Darwin-kernel(a)lists.apple.com If there's a manual page for "audit", then it's there. -- Terry _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… On Jun 8, 2007, at 3:05 PM, Todd Heberlein wrote: On Jun 8, 2007, at 2:11 PM, Terry Lambert wrote: BSM auditing will do this; tha's practically what it's designed for. Has there been any official announcement (or availability in recent betas) from Apple regarding its commitment to BSM for Leopard? Apple does not make forward looking statements about unreleased products. The last I checked, BSM wasn't even "officially" available for Tiger on Intel hardware. This email sent to site_archiver(a)lists.apple.com

1 0

IOMedia filter
by Eric Long 08 Jun '07

08 Jun '07

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com Thread-index: AceqHQPtQpSiixYQEdyoKwAX8si2KA== Thread-topic: IOMedia filter User-agent: Microsoft-Entourage/11.3.2.061213 I'm looking at writing an IOMedia filter. This is pretty new to me. I have a couple of questions I hope are not too ambitious. Before attaching my childMedia object to the driver in my start() method, I may need to talk to a userland agent. - Can I do that from within the start method? Will I have time-out issues? I'd like to communicate information to identify the volume being mounted to my agent, like the volume's UUID, display name, and such. - Can I get this information at this point in the kernel? I saw a kIOMediaUUIDKey, but when I try to get that property, I get back NULL. Maybe its not available yet in start()? I don't see a key for the display name of the volume/partition. Thanks for any advice, Eric _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Log of deleted files
by Todd Heberlein 08 Jun '07

08 Jun '07

site_archiver(a)lists.apple.com Delivered-To: Darwin-kernel(a)lists.apple.com On Jun 8, 2007, at 2:11 PM, Terry Lambert wrote: Thanks, Todd _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… BSM auditing will do this; tha's practically what it's designed for. Has there been any official announcement (or availability in recent betas) from Apple regarding its commitment to BSM for Leopard? The last I checked, BSM wasn't even "officially" available for Tiger on Intel hardware. This email sent to site_archiver(a)lists.apple.com

1 0

Re: Log of deleted files
by Terry Lambert 08 Jun '07

08 Jun '07

site_archiver(a)lists.apple.com Delivered-To: Darwin-kernel(a)lists.apple.com BSM auditing will do this; tha's practically what it's designed for. -- Terry _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… On Jun 8, 2007, at 2:09 PM, Mike wrote: Is there anything in OS X that keeps a log of files deleted on an OS X volume? I would like to be able to see what files were in any given directory on a given date that have been deleted. This email sent to site_archiver(a)lists.apple.com

1 0

Log of deleted files
by Mike 08 Jun '07

08 Jun '07

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com User-agent: Thunderbird 2.0.0.0 (Macintosh/20070326) Thanks, Mike _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… Is there anything in OS X that keeps a log of files deleted on an OS X volume? I would like to be able to see what files were in any given directory on a given date that have been deleted. This email sent to site_archiver(a)lists.apple.com

1 0

BSM argument bug?
by Todd Heberlein 08 Jun '07

08 Jun '07

site_archiver(a)lists.apple.com Delivered-To: Darwin-kernel(a)lists.apple.com header,103,1,ioctl(2),0,Wed May 30 09:39:31 2007, + 11 msec argument,2,0x8004667e,cmd argument,1,0xbfffef40,arg argument,1,0x8,fd subject,heberlei,heberlei,staff,heberlei,staff,270,76,50331650,0.0.0.0 return,success,0 trailer,103 Is this a bug, or have I misinterpreted the specifications again? Thanks, Todd I don't know if the Darwin-kernel is the right location for question/ observations about the BSM auditing in Mac OS X (10.4.9 for PowerPC), but I couldn't find a more appropriate list. There might be a bug in the generation of ioctl() audit records in some instances. The argument descriptors are out of order (from what is specified in the Sun document for AUE_IOCTL), and two different arguments are listed as "argument 1": PS. If there is a more appropriate location to post questions/ observations about BSM auditing, please let me know. _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Newbie question - missing vop* structures/functions in sys/vnode.h on 10.4
by Ratheesh Ramachandran 07 Jun '07

07 Jun '07

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com Domainkey-signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:Cc:MIME-Version:Content-Type:Message-ID; b=nOMp38DejVolNzzQzxq1c/3TVpvImW75hV7QqFBhGCIos17XyJ1gfPcgkWuiD1kCOJVaLDaTTGKQJD1uwe97V7hM9wdxDQi8bKhxWvOl6W+9FbELqiMpgCSL3kWQUmSTRL9XppdBo7bUkH8FYmfZzq+YKEQ6xcvArGOqRqX28UI=; _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0