June 2009 - Darwin-kernel - lists.apple.com

Re: Sources of _execve and __posix_spawn
by Hans Aberg 03 Jun '09

03 Jun '09

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com On 3 Jun 2009, at 11:00, Chris Suter wrote: I've found that I can find stuff using Google. Not sure if it always works, but adding site:opensource.apple.com to a Google search has worked for me recently. I know it didn't used to work. In the past, I have used "strings" to search for project strings embedded within the binaries. Not every binary has them though. I tried both the Apple sites and Google, and they didn't give hits. For 'mach_', there seems to in general no man-pages. Hans _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Sources of _execve and __posix_spawn
by Chris Suter 03 Jun '09

03 Jun '09

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com Hi, On Wed, Jun 3, 2009 at 6:52 PM, Anton Altaparmakov <aia21(a)cam.ac.uk> wrote: > Apple actually have a great search engine that contains all of the source > code present in each Mac OS X release. It is a fantastic tool. > Unfortunately you have to be inside the Apple VPN to be able to use it > as it contains all non-public stuff, too... It would be great if a clone > of that tool could be made available covering all the OSS parts of Mac OS > X. I've found that I can find stuff using Google. Not sure if it always works, but adding site:opensource.apple.com to a Google search has worked for me recently. I know it didn't used to work. In the past, I have used "strings" to search for project strings embedded within the binaries. Not every binary has them though. Regards, Chris _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Sources of _execve and __posix_spawn
by Anton Altaparmakov 03 Jun '09

03 Jun '09

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com On Wed, 3 Jun 2009, Hans Aberg wrote: > On 3 Jun 2009, at 09:06, Michael Smith wrote: > > > http://www.opensource.apple.com/release/mac-os-x-1057/ > > > - My problem is that I don't want to take them down all and there seems to > > > be no on-line search facility so search the contents. > > > > Robert Watson maintains a searchable index of a number of kernel > > distributions at fxr.watson.org. > > That might be useful - the link above would benefit having that, plus some > 'grep' like search. (__posix_spawn does not show up in the identifier search - > only in the full text, so one still needs to tweak it a bit.) > > It strikes me that it might be efficient to have the Xcode feature "Jump to > declaration/definition" extended, so that if the source is not available > locally, one can jump to it on the site. Apple actually have a great search engine that contains all of the source code present in each Mac OS X release. It is a fantastic tool. Unfortunately you have to be inside the Apple VPN to be able to use it as it contains all non-public stuff, too... It would be great if a clone of that tool could be made available covering all the OSS parts of Mac OS X. Best regards, Anton -- Anton Altaparmakov <aia21 at cam.ac.uk> (replace at with @) Unix Support, Computing Service, University of Cambridge, CB2 3QH, UK Linux NTFS maintainer, http://www.linux-ntfs.org/ _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Sources of _execve and __posix_spawn
by Hans Aberg 03 Jun '09

03 Jun '09

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com On 3 Jun 2009, at 09:06, Michael Smith wrote: Hans = Mike You haven't had that dream where you still are in high school? :-) _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… http://www.opensource.apple.com/release/mac-os-x-1057/ - My problem is that I don't want to take them down all and there seems to be no on-line search facility so search the contents. Robert Watson maintains a searchable index of a number of kernel distributions at fxr.watson.org. That might be useful - the link above would benefit having that, plus some 'grep' like search. (__posix_spawn does not show up in the identifier search - only in the full text, so one still needs to tweak it a bit.) It strikes me that it might be efficient to have the Xcode feature "Jump to declaration/definition" extended, so that if the source is not available locally, one can jump to it on the site. -- True terror is to wake up one morning and discover that your high school class is running the country. -- Kurt Vonnegut This email sent to site_archiver(a)lists.apple.com

1 0

Re: Sources of _execve and __posix_spawn
by Michael Smith 03 Jun '09

03 Jun '09

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

RE: copy some kernel extensions to /tmp directory and then load that kext when program Launches
by Rahulkumar Tibdewal 03 Jun '09

03 Jun '09

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com Thread-index: AcnjpDDvF+UbhYkzSTehPOzvuK25IQAchNQQ Thread-topic: copy some kernel extensions to /tmp directory and then load that kext when program Launches Hi there, >Hello, just a really quick comment, imagine (when you are requesting >and attaching your filter), you have 2 or 3 other "applications" using >blocking sockets, what's happening? Internet facility for those applications is also blocked till server allows. Sorry for late reply. In last message you were talking about forceful ways to get processed our request from system. Will you please share idea behind it and how can we implement it? Rahul -----Original Message----- From: darwin-kernel-bounces+rahulkumar_tibdewal=persistent.co.in(a)lists.apple.com [mailto:darwin-kernel-bounces+rahulkumar_tibdewal=persistent.co.in@lists.apple.com] On Behalf Of mm w Sent: Tuesday, June 02, 2009 10:34 PM To: darwin-kernel(a)lists.apple.com Subject: Re: copy some kernel extensions to /tmp directory and then load that kext when program Launches Hello, just a really quick comment, imagine (when you are requesting and attaching your filter), you have 2 or 3 other "applications" using blocking sockets, what's happening? Best, On Tue, Jun 2, 2009 at 9:31 AM, Rahulkumar Tibdewal <rahulkumar_tibdewal(a)persistent.co.in> wrote: > Hi, > > Yes!!! Rightly said so. > > Well here are basic steps taken to implement feature. > > > 1. Setup the tag value associated with this NKE in preparation for swallowing pack and re-injecting them using mbuf_tag_id_find() > 2. Register the Network Kernel Extension, so it will attach the filter to every socket that system created using sflt_register() > 3. Register the IPV4 with domain AF_INET, type of SOCK_STREAm and TCP protocol. Using sflt_register() > 4. Register the IPV6 with domain AF_INET, type of SOCK_STREAm and TCP protocol. Using sflt_register() > 5. Now we register our control structure so that we can be found/communicated by user level process. Using ctl_register() > > -- this all is done in kext. > > 6. Now use setsockopt() so that block and unblock can be done. This is done Externally. > > > I hope this information is enough. When I block Internet, it takes 5-6 seconds. Whereas when we unblock, it works on a click. > Can u suggest something. > >> there are ways to force the door. > May I know what ways are u talking about. > > Thanks > Rahul > > -----Original Message----- > From: darwin-kernel-bounces+rahulkumar_tibdewal=persistent.co.in(a)lists.apple.com [mailto:darwin-kernel-bounces+rahulkumar_tibdewal=persistent.co.in@lists.apple.com] On Behalf Of mm w > Sent: Tuesday, June 02, 2009 9:15 PM > To: darwin-kernel(a)lists.apple.com > Subject: Re: copy some kernel extensions to /tmp directory and then load that kext when program Launches > > Hello, it's hard to say without seeing something there are several > options, timeouts, it's not because you are asking something that the > system won't delay your request (there are ways to force the door), if > you could describe your mechanism? anyway you could "block/redirect" > the traffic just by applying an ipfw rule, did you make a kext for > making a kext (the same privilege issue? ) or there are some other > reasons?, if you answer to those questions maybe people could answer, > we are not behind your computer or inside your project, so people need > to have a valuable description to make assumptions > > Best, > > On Tue, Jun 2, 2009 at 2:58 AM, Rahulkumar Tibdewal > <rahulkumar_tibdewal(a)persistent.co.in> wrote: >> Hi, >> >> Well If you remember I was working on developing a kext which can block the access to the internet of the Standard user(client) once server drops the message block internet. >> It's done. But the problem is delay. It takes normally 10 seconds to execute the command of stop internet on client machine. Is it due to kext or some thing else? >> How can we take care of this? >> >> Thanks >> Rahul >> >> >> >> DISCLAIMER >> ========== >> This e-mail may contain privileged and confidential information which is the property of Persistent Systems Ltd. It is intended only for the use of the individual or entity to which it is addressed. If you are not the intended recipient, you are not authorized to read, retain, copy, print, distribute or use this message. If you have received this communication in error, please notify the sender and delete all copies of this message. Persistent Systems Ltd. does not accept any liability for virus infected mails. >> > _______________________________________________ > Do not post admin requests to the list. They will be ignored. > Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) > Help/Unsubscribe/Update your Subscription: > http://lists.apple.com/mailman/options/darwin-kernel/rahulkumar_tibdewal%40… > > This email sent to rahulkumar_tibdewal(a)persistent.co.in > > DISCLAIMER > ========== > This e-mail may contain privileged and confidential information which is the property of Persistent Systems Ltd. It is intended only for the use of the individual or entity to which it is addressed. If you are not the intended recipient, you are not authorized to read, retain, copy, print, distribute or use this message. If you have received this communication in error, please notify the sender and delete all copies of this message. Persistent Systems Ltd. does not accept any liability for virus infected mails. > _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/rahulkumar_tibdewal%40… This email sent to rahulkumar_tibdewal(a)persistent.co.in DISCLAIMER ========== This e-mail may contain privileged and confidential information which is the property of Persistent Systems Ltd. It is intended only for the use of the individual or entity to which it is addressed. If you are not the intended recipient, you are not authorized to read, retain, copy, print, distribute or use this message. If you have received this communication in error, please notify the sender and delete all copies of this message. Persistent Systems Ltd. does not accept any liability for virus infected mails. _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Sources of _execve and __posix_spawn
by Hans Aberg 02 Jun '09

02 Jun '09

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com Thank you very much. Hans On 3 Jun 2009, at 00:24, William Kucharski wrote: -- Bill On 3 Jun 2009, at 00:21, Kevin Van Vechten wrote: _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… <http://www.opensource.apple.com/source/xnu/xnu-1228.12.14/bsd/kern/kern_exe… > The component is "xnu". This email sent to site_archiver(a)lists.apple.com

1 0

Re: Sources of _execve and __posix_spawn
by William Kucharski 02 Jun '09

02 Jun '09

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com User-agent: Thunderbird 2.0.0.21 (X11/20090311) Hans Aberg wrote: <http://www.opensource.apple.com/source/xnu/xnu-1228.12.14/bsd/kern/kern_exe…> -- Bill _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… Thanks. Which component is that here? http://www.opensource.apple.com/release/mac-os-x-1057/ - My problem is that I don't want to take them down all and there seems to be no on-line search facility so search the contents. This email sent to site_archiver(a)lists.apple.com

1 0

Re: Sources of _execve and __posix_spawn
by Kevin Van Vechten 02 Jun '09

02 Jun '09

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com The component is "xnu". On Jun 2, 2009, at 3:20 PM, Hans Aberg wrote: On 2 Jun 2009, at 23:57, Dan Heller wrote: _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… They're in bsd/kern/kern_exec.c. Thanks. Which component is that here? http://www.opensource.apple.com/release/mac-os-x-1057/ - My problem is that I don't want to take them down all and there seems to be no on-line search facility so search the contents. Hans This email sent to site_archiver(a)lists.apple.com

1 0

Re: Sources of _execve and __posix_spawn
by Hans Aberg 02 Jun '09

02 Jun '09

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com On 2 Jun 2009, at 23:57, Dan Heller wrote: Hans _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… They're in bsd/kern/kern_exec.c. Thanks. Which component is that here? http://www.opensource.apple.com/release/mac-os-x-1057/ - My problem is that I don't want to take them down all and there seems to be no on-line search facility so search the contents. This email sent to site_archiver(a)lists.apple.com

1 0