August 2007 - Darwin-kernel

Re: KUNCUserNotificationCallBack
by Quinn 20 Aug '07

20 Aug '07

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com Well, that is the fundamental problem. launchd is seriously broken on 10.4.x. It attempts to launch gui agents in non-gui sessions. The only option left is a log-in item. I can make an app to keep up my agent in place of launchd, but it doesn't get run as root, so it's vulnerable. o Running a GUI program as root is /strongly/ discouraged. o Vulnerable to what, exactly? Share and Enjoy -- Quinn "The Eskimo!" <http://www.apple.com/developer/> Apple Developer Relations, Developer Technical Support, Core OS/Hardware _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… At 23:28 -0700 17/8/07, Eric Long wrote: I think you're mixing up what launchd will do. By definition an agent is running on behalf of a particular user, and thus doesn't run as root. Also: o Authorization Services already has an architecture for running GUI-oriented security code as a trusted user that is not run (uid 92, "securityagent"). This is the user that displays the standard authorisation dialogs, and that's one of the many reasons we recommend that you do authorisation via Authorization Services. This email sent to site_archiver(a)lists.apple.com

1 0

Re: KPI Documentation
by Arvind Dalvi 18 Aug '07

18 Aug '07

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com Dkim-signature: a=rsa-sha1; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:references; b=g/deabut2A0DI0vuL7v4PVixTFIpbgHigr2Ls+9/LpCBWBzL/Nw4hMH5Ej1hDHjZ3trk6Sp9PrCnEHi6hFfskOEdjeuvSTRPjRBDc+n11yXeeyywHiu3D+fDT4Tzse8omX8hpVd5d4yp7N4fXAPa/nhZblpyE+RF7lycZ69OeGg= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:references; b=E6P4SM981cOXd0tz1diYi6uE5woA0uDGLrdmgxcTFzjClmvju4haxwLS2UVbrk+GEbYE2fORc0HUNdouPYWXLhdWcYuc72mPGOYR9//lXOQ9zmGtv3Ub1msRWXWCXpG9Dy0n5xZqGPR+FoOnVZQzY44e5CY82fKX009bD54ZiBE= _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

Re: KUNCUserNotificationCallBack
by Eric Long 18 Aug '07

18 Aug '07

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com Thread-index: AcfhYQhCRvOnyE1UEdy8HwAX8si2KA== Thread-topic: KUNCUserNotificationCallBack User-agent: Microsoft-Entourage/11.3.6.070618 > ; I would encourage you to > check into what launchd can do for you. Well, that is the fundamental problem. launchd is seriously broken on 10.4.x. It attempts to launch gui agents in non-gui sessions. The only option left is a log-in item. I can make an app to keep up my agent in place of launchd, but it doesn't get run as root, so it's vulnerable. Eric _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

Re: KUNCUserNotificationCallBack
by Eric Long 17 Aug '07

17 Aug '07

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com Thread-index: AcfhC9GOEFiqwUz/EdyYSwAX8si2KA== Thread-topic: KUNCUserNotificationCallBack User-agent: Microsoft-Entourage/11.3.6.070618 > Also, KUNC is deprecated. Your code won't last long if it depends on KUNC. So you are saying that a kext has no supported means even to alert a user that something is awry? If my agent is brought down, what else is available? Eric _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

Re: KUNCUserNotificationCallBack
by Garth Cummings 17 Aug '07

17 Aug '07

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

KUNCUserNotificationCallBack
by Eric Long 17 Aug '07

17 Aug '07

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com Thread-index: Acfg/tMFEVLINEzyEdyYSwAX8si2KA== Thread-topic: KUNCUserNotificationCallBack User-agent: Microsoft-Entourage/11.3.6.070618 Hi, I see a documented example of using KUNCUserNotificationDisplayFromBundle to display an authentication dialog from a kext. I want to use this functionality in case my daemon or agent gets into trouble somehow, and I need to give the user some options. In my KUNCUserNotificationCallBack, after I get the user's name/password, how do I validate that this is a user name and password for a user with admin privileges? I haven't been able to find the way to do this in the kernel. Eric _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

Re: KPI Documentation
by Josh Graessley 17 Aug '07

17 Aug '07

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

KPI Documentation
by Arvind Dalvi 17 Aug '07

17 Aug '07

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com Dkim-signature: a=rsa-sha1; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:to:subject:mime-version:content-type; b=R1yjQVTsdH7qQuEe4G1TSINgPPbmLU+Y1hI3mX9Bmi8T60l2kF3hhenML5xxEVr6PEcnTMdzO5vJdd/SfOAxnKzDXMQBYwAOuzEINUeaxceJQesWXrJWutSX2YOczgtovll0aaVIOyDTez2X6Xydek6kFF1aLku4zce4GadUxP8= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:to:subject:mime-version:content-type; b=qN89BEqw75V692C6oJ8PVMUldcwhqP9UDieW6ij8t8BusmXm9OgzGr3DqPRIUk2KaCYgK7ihPAPAFPfg1OUbiLuKLV+ipTgRGbtd5bbcHz+IMvLigRo4ze/DOaQ2dK1FHtVAl3K6V6KNY9bNbKFw/fA4NL3zOqMWCLhHpu0YZk4= _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

Virtual display driver, prevent from shifting to secondary ID.
by PowerPC 16 Aug '07

16 Aug '07

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com Dkim-signature: a=rsa-sha1; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:to:subject:mime-version:content-type; b=UwXFuzu+xIkkSwrrUqhLpGtgnFgEaxu5P9ZwHyb49goMr0p+L4y3IfSV2dRQyL+2apuN5M9bJ1Yh4JdWtlPNPfLqp+TbMKHBclpFTQ0t2hvtXLd1dlQKxq9QzCBY/X9jfu4jPKj/FDwD97nsSjYp+wfpImgxiaE1+hbi482P8VE= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:to:subject:mime-version:content-type; b=btCEg534NNd6ZZiuJpd/Ldf8MhcIoCja2JVPzNBLXKoNy+ZHI3D3xqJEAmCvmAi4k1faprnNGIWzOwnXVPy7D8OTzh7ZIgizqUVeIXEm4uKYxUcMC3FhWw3jy1VvnGaw+ei9yZ7wi2JChaSWIoTeSwt0EA9mFa4gfQRX0OPf4CM= _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Filtering disk vs. partitions
by Eric Long 15 Aug '07

15 Aug '07

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com Thread-index: Acffi/SRMyvZxkt/EdytCgAX8si2KA== Thread-topic: Filtering disk vs. partitions User-agent: Microsoft-Entourage/11.3.6.070618 > Add: > > <key>Whole<key> > <true/> > > to your Info.plist. That should get you matching the whole disk. It does indeed. Someone else also suggested this to me offlist. I had tried it previously, but thought it didn't help. I must have erred checking it then. Thanks to all for the assistance. Eric _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0