September 2008 - Darwin-kernel

Re: pointers for newbie wanting to write a 'window' logger
by Joel Sherriff 08 Sep '08

08 Sep '08

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com User-agent: Thunderbird 2.0.0.16 (Macintosh/20080707) Philip, thanks, after a brief look that seems like the perfect solution. Joel On Sep 5, 2008, at 2:43 PM, Joel Sherriff wrote: Philip Aker echo astwta@lvpc.dslh@nl | tr a-z@. p-za-o.@ Democracy: Two wolves and a sheep voting on lunch. _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… Philip Aker wrote: New to OS X, but I need to write an app that records activity similiar to a keylogger - only that I don't want the keys that are recorded, only to know that a key or mouse button was pressed and what the window title of the window that got the event was. A window-activity logger, versus a keylogger. I'd prefer not to go to as low a level as a kernel extension, Sounds like you could do this with the event tap and window facilities available in CoreGraphics (CGEvent.h for starters). Look here <http://prefabsoftware.com/> to see an illustration of the tap portion of your needs. as I'd really like to keep this in user space (but I will, if I have to). I've done the same thing in Windows (using hooks) and Linux (X11 using the XRecord extension to the X server), but I know little or nothing about Quartz, Aqua, Carbon, kernel extensions, etc, etc, so I'm asking for guidance as to the right layer to target and technology to use. In the X11 version, the monitor loads from the Xsession config - that is it starts when the user logs in and runs only while the user is logged in... ideally I'd like to mimic that. Can someone with more experience on OS X features give me some pointers? Btw, I know this isn't specifically a kernel question, but I figure the kernel guru's would know best when something shouldn't be done in a kernel extension. If a kernel extension is the only way to do it though, then that's the way I'll go. This email sent to site_archiver(a)lists.apple.com

1 0

Re: pointers for newbie wanting to write a 'window' logger
by Philip Aker 06 Sep '08

06 Sep '08

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com On Sep 5, 2008, at 2:43 PM, Joel Sherriff wrote: Philip Aker echo astwta@lvpc.dslh@nl | tr a-z@. p-za-o.@ Democracy: Two wolves and a sheep voting on lunch. _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… New to OS X, but I need to write an app that records activity similiar to a keylogger - only that I don't want the keys that are recorded, only to know that a key or mouse button was pressed and what the window title of the window that got the event was. A window- activity logger, versus a keylogger. I'd prefer not to go to as low a level as a kernel extension, Sounds like you could do this with the event tap and window facilities available in CoreGraphics (CGEvent.h for starters). Look here <http://prefabsoftware.com/ > to see an illustration of the tap portion of your needs. as I'd really like to keep this in user space (but I will, if I have to). I've done the same thing in Windows (using hooks) and Linux (X11 using the XRecord extension to the X server), but I know little or nothing about Quartz, Aqua, Carbon, kernel extensions, etc, etc, so I'm asking for guidance as to the right layer to target and technology to use. In the X11 version, the monitor loads from the Xsession config - that is it starts when the user logs in and runs only while the user is logged in... ideally I'd like to mimic that. Can someone with more experience on OS X features give me some pointers? Btw, I know this isn't specifically a kernel question, but I figure the kernel guru's would know best when something shouldn't be done in a kernel extension. If a kernel extension is the only way to do it though, then that's the way I'll go. This email sent to site_archiver(a)lists.apple.com

1 0

Re: pointers for newbie wanting to write a 'window' logger
by mm w 05 Sep '08

05 Sep '08

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from:to :subject:cc:in-reply-to:mime-version:content-type :content-transfer-encoding:content-disposition:references; bh=G1mwtmbZndpgPPPngj9eysoCP22MNq2UNqek2y83sTU=; b=DZ0/jDTdqAasa2WZEtjoKFOkXRLA1y8l7ulhj6djnKJyi1v2pVf+GXFynauBbCktkG gtUhtDdpCITzCRrCVWXavcrRyLX8cEImKZhwSTg1Vr/B8SD/vHHh20hhphJ0585/Eigg 8GuQj0ZPXqOGzCUsTxwaSN76WN1roXWVzi7gw= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:to:subject:cc:in-reply-to:mime-version :content-type:content-transfer-encoding:content-disposition :references; b=FAUyRjlf5FcKNp23EyG9WNybH4t4rBfHs8/PHcYckDxZ7mqbsRkEy7jjyFTqh0CGIx vQYsag7E9IsLDeofjfqUlm1gveyk8Kyd8z8ANxn4w2VGcT+jK3TgS4XyNLpQ3emprGri w963u6I5xoHau4Rf0Ek2nfau5XlJlwVeiVHYI= Hi Joel, a start: this is only an example http://code.google.com/p/logkext/ there are other existing ways, I don't know the goal on top of this, if you want a proper and deeper answer, I guess you should be more "didactic", as far as I can understand it's only a part of something else Cheers! On Fri, Sep 5, 2008 at 2:43 PM, Joel Sherriff <joel(a)6sa.com> wrote: > New to OS X, but I need to write an app that records activity similiar to a > keylogger - only that I don't want the keys that are recorded, only to know > that a key or mouse button was pressed and what the window title of the > window that got the event was. A window-activity logger, versus a keylogger. > I'd prefer not to go to as low a level as a kernel extension, as I'd really > like to keep this in user space (but I will, if I have to). I've done the > same thing in Windows (using hooks) and Linux (X11 using the XRecord > extension to the X server), but I know little or nothing about Quartz, Aqua, > Carbon, kernel extensions, etc, etc, so I'm asking for guidance as to the > right layer to target and technology to use. In the X11 version, the monitor > loads from the Xsession config - that is it starts when the user logs in and > runs only while the user is logged in... ideally I'd like to mimic that. Can > someone with more experience on OS X features give me some pointers? > > Btw, I know this isn't specifically a kernel question, but I figure the > kernel guru's would know best when something shouldn't be done in a kernel > extension. If a kernel extension is the only way to do it though, then > that's the way I'll go. > > Thanks. > _______________________________________________ > Do not post admin requests to the list. They will be ignored. > Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) > Help/Unsubscribe/Update your Subscription: > http://lists.apple.com/mailman/options/darwin-kernel/openspecies%40gmail.com > > This email sent to openspecies(a)gmail.com > -- -mmw _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

pointers for newbie wanting to write a 'window' logger
by Joel Sherriff 05 Sep '08

05 Sep '08

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com User-agent: Thunderbird 2.0.0.16 (Macintosh/20080707) Thanks. _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… New to OS X, but I need to write an app that records activity similiar to a keylogger - only that I don't want the keys that are recorded, only to know that a key or mouse button was pressed and what the window title of the window that got the event was. A window-activity logger, versus a keylogger. I'd prefer not to go to as low a level as a kernel extension, as I'd really like to keep this in user space (but I will, if I have to). I've done the same thing in Windows (using hooks) and Linux (X11 using the XRecord extension to the X server), but I know little or nothing about Quartz, Aqua, Carbon, kernel extensions, etc, etc, so I'm asking for guidance as to the right layer to target and technology to use. In the X11 version, the monitor loads from the Xsession config - that is it starts when the user logs in and runs only while the user is logged in... ideally I'd like to mimic that. Can someone with more experience on OS X features give me some pointers? Btw, I know this isn't specifically a kernel question, but I figure the kernel guru's would know best when something shouldn't be done in a kernel extension. If a kernel extension is the only way to do it though, then that's the way I'll go. This email sent to site_archiver(a)lists.apple.com

1 0

Re: kernel threads invalidating caches
by alejandro 01 Sep '08

01 Sep '08

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com User-agent: Mozilla Thunderbird 1.0.6 (Windows/20050716) Terry, Michael, Thank you, Alejandro -- Alejandro Palencia Open Studio Networks +34 667 440 770 _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… I made changes to avoid all of the dynamic memory allocations, and changed to static structures. The problem didn't change. It seems to me that when two threads acess the same object (read or write contiguous memory variables) at a time, there is a lock. Is this possible? Things changed when I updated from 10.5.2 to 10.5.4 this morning. It seems that the problem dissapeared, while I am still testing, but after 10 hours it has not arised at all! Do you know if any modification has been done from 10.5.2 to 10.5.4 in this area? This would help me to be confident on the system as it is. This email sent to site_archiver(a)lists.apple.com

1 0