June 2009 - Darwin-kernel - lists.apple.com

Re: File regular expression matching in KAuth
by Jacques Vidrine 19 Jun '09

19 Jun '09

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com Yep. Cheers, -- Jacques _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… On Jun 19, 2009, at 9:47 AM, Todd Heberlein wrote: You can accomplish your example by using Sandbox in Leopard and later releases. It provides a flexible mechanism for defining what operating system resources a process may or may not obtain. Unfortunately, that mechanism is not API, and may change from release to release. I though Apple's sandbox was a "voluntary" thing, where the application chooses to sandbox itself, and if it doesn't call the sandbox APIs itself, then no sandboxing. (???) That’s correct, but the sandbox is inherited. Therefore, a parent can force its child into the sandbox. $ sandbox-exec -p '(version 1) (allow default) (deny file-read* file-write* (regex #"^/private/etc/p"))' zsh So it looks like you are putting zsh in a sandbox, and then wc just inherits that sandbox when it is launched from zsh. Is that correct? This email sent to site_archiver(a)lists.apple.com

1 0

Re: File regular expression matching in KAuth
by Todd Heberlein 19 Jun '09

19 Jun '09

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com Todd _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… You can accomplish your example by using Sandbox in Leopard and later releases. It provides a flexible mechanism for defining what operating system resources a process may or may not obtain. Unfortunately, that mechanism is not API, and may change from release to release. I though Apple's sandbox was a "voluntary" thing, where the application chooses to sandbox itself, and if it doesn't call the sandbox APIs itself, then no sandboxing. (???) $ sandbox-exec -p '(version 1) (allow default) (deny file-read* file- write* (regex #"^/private/etc/p"))' zsh So it looks like you are putting zsh in a sandbox, and then wc just inherits that sandbox when it is launched from zsh. Is that correct? This email sent to site_archiver(a)lists.apple.com

1 0

Re: check memory consumption (kernel address space) and cpu consumption by kext
by Michael Smith 19 Jun '09

19 Jun '09

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Logging Facility
by Michael Smith 19 Jun '09

19 Jun '09

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

Re: File regular expression matching in KAuth
by Jacques Vidrine 19 Jun '09

19 Jun '09

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com For example: Cheers, -- Jacques On Jun 19, 2009, at 1:24 AM, evaluador evaluador wrote: Hello, _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… You can accomplish your example by using Sandbox in Leopard and later releases. It provides a flexible mechanism for defining what operating system resources a process may or may not obtain. Unfortunately, that mechanism is not API, and may change from release to release. $ wc /private/etc/profile 9 30 189 /private/etc/profile $ sandbox-exec -p '(version 1) (allow default) (deny file-read* file- write* (regex #"^/private/etc/p"))' zsh $ wc /private/etc/profile wc: /private/etc/profile: open: Permission denied You can see a few other example Sandbox definitions in /usr/share/ sandbox. I want to implement a kauth filter based on regular expression filename matching. I would like to, for example, deny open to "/etc/ p*". How could I implement this from kernel without having to parse the mask myself? _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/nectar %40apple.com This email sent to nectar(a)apple.com This email sent to site_archiver(a)lists.apple.com

1 0

File regular expression matching in KAuth
by evaluador evaluador 19 Jun '09

19 Jun '09

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:date:message-id:subject :from:to:content-type; bh=WdQj8bt7BvPBzt4iiOJqqa65fxfxSpMsNASPFa89aqI=; b=twJv8K0/wE0QLnIub7HxXKGRkqksn4vW8MlBHPSwKgcNN5nKtv6KmBaRNNPVR9pfN5 TnhehbwNeVkuvT9e1/iYTLwSLK11sS23Fl9nC/00WnZElc9bwJvdHFJ/Mpl6cdyckqIb QZYObGmBb4dzvH951fWALeUo9V/lnMSbpAK+g= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:date:message-id:subject:from:to:content-type; b=OINC5bV7YpYO6VeV2XKRPiSgtjj7cpjcUXrVBl59R3ss+94OGh3JXCCiGmMOxDRaIX Ic5kideLXqmM9z3/zQDF8u1oC2mlQzLcRsahTJnY43DS4lMxxvi1l0pXHq2iEQLxjyz5 1GpBJN0Ga++zKNF2qEopgZJFpAmHANve3idec= _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

Re: check memory consumption (kernel address space) and cpu consumption by kext
by Terry Lambert 19 Jun '09

19 Jun '09

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com Hi All, -- Terry _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… On Jun 18, 2009, at 2:58 AM, Rahulkumar Tibdewal wrote: Is there any way to check memory consumption (kernel address space) and cpu consumption done by kext? It may sound silly question but I want to make sure efficient resource utilization. Generally, no. You can find out how much memory the kext's data and text sections take up bdefault (kextstat and a little math will give you that). Individual allocations of data are not easily attributable to a KEXT, since it runs in the kernel address space There's no way to tell allocations made as a result of the inferior call graph (allocations by the KEXT directly or allocations made on behalf of the KEXT by KPI called from the KEXT) from those not made on behalf of the KEXT, and there's no way to tell service allocations made by other threads or KEXTs on behalf of the KEXT as a result of requests it's made to threads outside of itself. Similarly, there's no way to attribute CPU utulization on any but a per-thread basis. While you could (maybe) identify threads created in the kernel task by the KEXT due to detailed knowledge of the KEXT itself, and then aggregate those numbers, but there's not way to get information about CPU cycles spent on behalf of the KEXT as a result of requests it's made to threads outside itself. This email sent to site_archiver(a)lists.apple.com

1 0

look for hints about libstdc++
by mm w 19 Jun '09

19 Jun '09

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:date:message-id:subject :from:to:content-type:content-transfer-encoding; bh=kJ/pSmUMcmrxzbOiI4GfL3JnNDl2VFaaKSz+YkQ8eyk=; b=wLxlpaWOSb1pXvKOsE7k9dYva9PwzrjW6Bmqbq+sRSgIOIMzQMLegEnSF9iZ/aDalM X5Z1cF3o2sFYKtAZ+DRQS3PAepZWzfFI/PS6drUECqfzQiQ5BZt0QNsTkOK87P1gT/hE Uvi0kEI4TI+UEsdnGGZeUbGZ8/YQUifVFv38A= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:date:message-id:subject:from:to:content-type :content-transfer-encoding; b=TqcQaWOA+KoTuvkHWvgIx3Yg1HMmJLH87cRcqw+d/dHpKpU+j2gMQQVqtFhGoKfGV/ 07lYtVuWhSF9c2aEAquCd/+l9i5qlP27RFVVwCF2+BNPHwToGb2IiwVdQOqZabYdcnJD PPOrs/e+hu84GK+Ql1B36W55tj402145J7kAc= Hello there, what is the most appropriate list for internal problems regarding libSystem/libC and libstdc++? I get a deep leak from operator new inside the stdc++. Best, _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Logging Facility
by Carlos Calderon 18 Jun '09

18 Jun '09

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com >From kernel space: kprintf, FireLog, trace >From user space: FireLog, trace // carlos On Jun 18, 2009, at 3:02 PM, shailesh jain wrote: _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… For more info on collecting kprintf over FireWire, see the man page for "fwkpfv". For more info on FireLog, please see the FireWire SDK. Tracepoints are quite useful, but they're somewhat complicated to implement. Hi, It seems that IOLog has relatively small buffer size and it is overwrites many of the log messages generated my kext. Is there any other alternative apart from writing your own Logging facility ? Shailesh Jain _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/carlos %40apple.com This email sent to carlos(a)apple.com This email sent to site_archiver(a)lists.apple.com

1 0

Re: Logging Facility
by Michael Crawford 18 Jun '09

18 Jun '09

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references :date:message-id:subject:from:to:cc:content-type :content-transfer-encoding; bh=0n+wssW+yt1FTOte76VdMqhtCUC4PlG+7WIWoAOvxCg=; b=ukXGXprEXjDh0Yyw1PJah2XcdERKKEIWBJ7PTO5QkjAN9YIfQlVhiEsNUfwNOdJ/5A BJavJ5MUYbxrualggwhZOPupRqB8T/e77AtxDpbI0aYqKRymm8dqjgXPezena3qic+/C UnlTXie4sZH7+KHWZeYr5h+nD2dki9tebU8g8= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type:content-transfer-encoding; b=FKEFjn1UVOx9vQIC1Qb9jKIJl8wIeFW9WWOQTQRPNucBVzCpiDOEHL4SM9fNe5xdqh yuUh4RYLDdYxoBWfoFFDxKbSLtTxGfUeG4erENk0HtkAjOkjKo1SVOL+hhlgQollb52b oPJpkEfZgdYT8prFRuAY/zzuwtQGcz1ToYTZM= FireLog works really well. You can find it in the FireWire SDK, that you can download from ADC. It requires a second Mac. The logging messages are sent over a FireWire cable to a GUI on the other Macintosh. There is also some manner of logging facility available as part of USB, but I haven't used it. A big advantage of FireLog is that if your Mac crashes, you'll still be able to see the last few messages, that IOLog would not have gotten out to the system log file yet. Mike On Thu, Jun 18, 2009 at 3:02 PM, shailesh jain<coolworldofshail(a)gmail.com> wrote: > Hi, > It seems that IOLog has relatively small buffer size and it is overwrites > many of the log messages generated my kext. Is there any other alternative > apart from writing your own Logging facility ? > > > Shailesh Jain > > _______________________________________________ > Do not post admin requests to the list. They will be ignored. > Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) > Help/Unsubscribe/Update your Subscription: > http://lists.apple.com/mailman/options/darwin-kernel/mdcrawford%40gmail.com > > This email sent to mdcrawford(a)gmail.com > -- Michael David Crawford mdcrawford at gmail dot com GoingWare's Bag of Programming Tricks http://www.goingware.com/tips/ _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0