February 2011 - Darwin-kernel

Is it possible to disable "turbo boost" on core i5/i7 based Macs ?
by Rimas Avizienis 28 Feb '11

28 Feb '11

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com Greetings, pardon me if this isn't the most appropriate forum for this question but I sent a message to the "boot-dev" list last week and haven't received any responses. If there's a better place to ask, please let me know. I'd like to disable "turbo boost" (i.e. hardware controlled opportunistic frequency scaling) on a recent Mac Pro for the purpose of doing some deterministic/reproducible benchmarking of some computationally intensive code. There is usually a BIOS option to disable this on PCs and I'm wondering if there's some way to disable it using EFI or some other method on the Mac Pro (and other core i5/i7 based Macs). I have both MacOS and Linux (using reFIT) installed on the machine in question. Any advice would be greatly appreciated! Thanks, -Rimas _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

Cannot read HID reports using IO Kit APIs
by modx 23 Feb '11

23 Feb '11

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:date:message-id:subject:from:to :content-type; bh=7swrbKS482QalxmWUnsYMbgtc40OD+0StsaqsOuGBqM=; b=jPpeSTEz82eHnCzGnHVVnGO+74fZg/Kr4Z5OYfRCVFnTEnn7/N7gris+TUoDtsY4nV +yyY2yCrieLNopP83gYV4reMpVmXUV8RWsxw8TKBTRhOUhjnR0Xnz00lLqAkG8XlBmut OQG8ukrs1fAR2teMbn3bCdF/y8hMGWPvGW3sU= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:date:message-id:subject:from:to:content-type; b=vxFGrO3/1bbOxmAWOYbB+USkwr9VILrK2WleNEifWtuPNkGv1MJBizXGGmU0rLXqjb tK19OidmQnEe2wdni4bwLB+1HMPJofeLmkDEMouCLnM7Cng75rdOK0EFzNe/OeadgmBk qGiXuSyoOBmyXYT1R5Yydmx5xqjGYJXmy0uDg= _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

Re: vpn extension
by Thomas Reifferscheid 09 Feb '11

09 Feb '11

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com User-agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; de; rv:1.9.2.13) Gecko/20101207 Thunderbird/3.1.7 Quinn, On Feb 9, 2011, at 9:40 PM, Quinn The Eskimo! wrote: o write a program to configure Apple's VPN o use the kernel's IPsec implementation, but not any of Apple's higher level infrastructure o entirely custom I have "encryption tokens" stored on removable USB devices on both ends of a connection and I'm using AES-256 encryption. The easiest approach would be to somehow use the token as pre-shared key (PSK) for authentication of a TLS session using GnuTLS. Other than that, I just need to use the my security tokens to encrypt the connection and I have no prior familiarity with the infrastructure available for my scenario on the Mac. This is why I'm asking the list :-). What do you suggest? Thanks, Joel -------------------------------------------------------------------------- - mac osx device driver ninja, kernel extensions and user-land usb drivers ---------------------+------------+--------------------------------------- http://wagerlabs.com | @wagerlabs | http://www.linkedin.com/in/joelreymont ---------------------+------------+--------------------------------------- _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/thomas%40reifferscheid… This email sent to thomas(a)reifferscheid.org _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

Re: vpn extension
by Joel Reymont 09 Feb '11

09 Feb '11

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:subject:mime-version:content-type:from :in-reply-to:date:cc:content-transfer-encoding:message-id:references :to:x-mailer; bh=ZIopIXdCeq4bU4W0sQRVDsdaITaSgrZHsTlwiMdArpU=; b=NCeGn+Nx3CY2SjtLLLyiYOahktxPtKmFElpRlpu0CHuTrRL78seu/EDWnBDHyPI+jP Gwk4VCxNgOI8eEzMq2qvzod0W2SFErzNn94AMOT07Xf27KxfmeAoaRXc3Vw1gc+enIda PvJBtcuqpXTyafHCChNdFkksb6AW/ZtJQyaEE= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=subject:mime-version:content-type:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to:x-mailer; b=B1iYpeH4/seeLSKowF+3tVnLCyAqodzT4Fgv63PkzmxiI9OU0Fihk/kNlnfxUoZGrI R1dakQfp3fArP2KF86eXbUo1Vtc4CaCo2T/lerXJ+uWFj/09Q1PoVT2xhp/gTZgzots6 4tylCHFY0ms1ib5cpgs24M1iWJlLA3TMO4ATo= Quinn, On Feb 9, 2011, at 9:40 PM, Quinn The Eskimo! wrote: > o write a program to configure Apple's VPN > > o use the kernel's IPsec implementation, but not any of Apple's higher level infrastructure > > o entirely custom I have "encryption tokens" stored on removable USB devices on both ends of a connection and I'm using AES-256 encryption. The easiest approach would be to somehow use the token as pre-shared key (PSK) for authentication of a TLS session using GnuTLS. Other than that, I just need to use the my security tokens to encrypt the connection and I have no prior familiarity with the infrastructure available for my scenario on the Mac. This is why I'm asking the list :-). What do you suggest? Thanks, Joel -------------------------------------------------------------------------- - mac osx device driver ninja, kernel extensions and user-land usb drivers ---------------------+------------+--------------------------------------- http://wagerlabs.com | @wagerlabs | http://www.linkedin.com/in/joelreymont ---------------------+------------+--------------------------------------- _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

Re: vpn extension
by Quinn "The Eskimo!" 09 Feb '11

09 Feb '11

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com On 9 Feb 2011, at 13:33, Joel Reymont wrote: > Is there any sample code to study to implement a custom VPN extension? > > Is this simply a matter of an NKE that encrypts the packets? This really depends on the approach you plan to take. There are at least 3 approaches that I can think of: o write a program to configure Apple's VPN o use the kernel's IPsec implementation, but not any of Apple's higher level infrastructure o entirely custom What are you shooting for? S+E -- Quinn "The Eskimo!" <http://www.apple.com/developer/> Apple Developer Relations, Developer Technical Support, Core OS/Hardware _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

vpn extension
by Joel Reymont 09 Feb '11

09 Feb '11

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:from:content-type:content-transfer-encoding :subject:date:message-id:to:mime-version:x-mailer; bh=xfYEEuuSLUfos3Fy0P7MBzRH3z1DUm6jOk72obBznvw=; b=vzISbkHiLzzjrzoho7nkxFN2Krg9H1SqaQ3I5TFWIAC1qDPzjYp/xPr078iFXneE1o AXweGgNnH+7W6FSNz+BSNwz3c1TPXkfVKkZkX89F3Wx95gPF06FEJXY3o2x25BCX2nVh u3iGGmgUm2CZrVOkBAoP91SaNK6wjTSKkVEf4= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=from:content-type:content-transfer-encoding:subject:date:message-id :to:mime-version:x-mailer; b=l/NfWm+A3bSaMkSLDsfHoIgQDRMWRtCLmIB8b+k7i+8NZTJL9B1d7NDKeVI2AtD02K +FCE2IfQBK5Q3o3Jl/iZ06FIAz/xF62VAxITIU+GniGudxbKT2H1vPlGH+aK37vmGoz3 J36aHBWVYTCa8CON3toNWBIXeZVkjvzdlXaz8= Is there any sample code to study to implement a custom VPN extension? Is this simply a matter of an NKE that encrypts the packets? Thanks, Joel -------------------------------------------------------------------------- - mac osx device driver ninja, kernel extensions and user-land usb drivers ---------------------+------------+--------------------------------------- http://wagerlabs.com | @wagerlabs | http://www.linkedin.com/in/joelreymont ---------------------+------------+--------------------------------------- _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

Re: How to intercept packets during handshake using Socket Filters in NKE?
by eveningnick eveningnick 09 Feb '11

09 Feb '11

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc:content-type; bh=4k00T4ylBWMVcDTZuwAqs3ELSkqP4TKv3Py5NzBl+Z8=; b=uU7pMy1mbfRLuKxY+D8stmL15Q0Ba1uDgWbN2mzR8lArrMr1oM1JHVQKEfe8f+sSLo /gd6SYNPl2YoEpHS7lraV7iocMYmqUzofyTOIzJ2qmPlfop7NVbbHAHs/CK6Z+VAWl8h RDr4o1TugvsaEZSt/mMZB2XiXFzy1lpdprvok= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; b=NGZ1v2jxN7HCMwvzaE6YeatDwl4VCpiP7hGECJFEiph+tMd+P77LCOt6Sr5CK6wYy2 x43iX+FJ8xmzHNIZdIyaGQXwFOCebcR6QETVN3uLLpAZ3T914FXKrX9Z8ZJTW4nMr6/7 vDs4SxzOksErlyyp0OjDtG5gnlxxn3l3WdpVs= >Is there any way to get the TCP parameters of a particular socket_t >without using filters? What is the problem with using filter in here? >Is there any way of intercepting packets during handshake using >Socket filters? If you read the NKE doc, you would have noticed that "socket filters" are high level entities, and they have callback functions like "on connected" "on data received" "on attached". Recommend you to read it again rather than just read code samples. For low level things (like connection establishment details) you have IP filters. >But that could mean a ton of works and potentially buggy kernel extension. Depends on you. Theres not so much mess there actually, apple provided a neat wrapper around this stuff (unlike NDIS in windows). _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

How to intercept packets during handshake using Socket Filters in NKE?
by Mike Chen 09 Feb '11

09 Feb '11

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:from:date:message-id:subject:to :content-type; bh=wmJoHQdvBHRMUOaycFtLyWkbP6fy2XkkAwGdAp7pGGE=; b=q0cFezyjjJxcDEAMH9vgoy1YA+wa6BcgxXmDyl8QPtwfwdU2gdRzzkgjfoQz9q4yet 4VJFoFHuaARXwsfDmWeeTp387keuQLDi9ZOl+4V/47ZqhMije1SItcMBgTHEMIX64Sfz q02v6QcJZ7aDZLI/dYqzFsZg/AhgNeNz90b24= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:from:date:message-id:subject:to:content-type; b=dAD079TvAKWX8cck15x7Vo/5iLwWhhcOHlvq1upS6mbT+rIVKNd6/sVnv5goMmNA6w ZNfOLF76N108nQw4HrauNPQrLhxc9oNXkYVev5zs0mAMqRHjiB2x3AEvLoEWIpzo1nlV yZk1PyDhRaRGUcRurfPBXcsxxPxlPF9XkaDD4= Hi fellow kernel developers, I'm writing this network kernel extension to inject packets during TCP handshake. The client initiating a TCP connection sends a packet, with a selected sequence number and SYN flag on, to the remote server. As soon as the server receives client's request, it replies with a packet containing both SYN+ACK numbers. I'll inject my packets after server's confirmation, using the SYN and ACK numbers provided in packet sent by server. I tried to intercept the data I need in sf_data_in_func, yet packets during handshake don't go though sf_data_in_func (or out). Therefore, 1) Is there any way to get the TCP parameters of a particular socket_t without using filters? 2) Is there any way of intercepting packets during handshake using Socket filters? I was also thinking that I can use both IP and Socket filters, former for reading TCP parameters and latter for connection tracking. But that could mean a ton of works and potentially buggy kernel extension. Can you suggest me of a better solution if the existing kernel APIs don't fit? Thanks, Mike Chen. _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

Re: IODataQueueDequeue problem in user mode
by Slava Imameyev 07 Feb '11

07 Feb '11

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc:content-type; bh=rApdxv+QmQTGNYUnLKR8VS4s2BUc2uj72QQO8EBuLdg=; b=lwG3+VNpam8dwLo0DdKogVOsnaDwUFl/Ncdq5OeKmXahZX1hD/RlTR75QfOxQ4fMsx 6alQ45o6hSuWDT8lLVRtTir91e3NW3YiKfUFdn15GkEjAzw0H1m6BhChggSFdJi2Eq3B ItuxCtcA+2nDIsYONfOUqlnVxjUj3vuu/nejg= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; b=oiQwgKbZZa/+H7NBhGd3WzcgESG21145AbRoBgm2X2fIs0tAwgGE7Wg0ouBpnyiGqo Mhv8LCnjqNrCgRP80pRMMPqO/+awSVRdLRDusZ3arRT6JIuZxwnapatyUrcWWtNtBd95 XBsjTMwLht+pBP5yYOkWSfx6waq8AjJHS9roI= _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Build SharedIP open source project on MAC OS X
by Quinn "The Eskimo!" 04 Feb '11

04 Feb '11

site_archiver(a)lists.apple.com Delivered-To: Darwin-kernel(a)lists.apple.com On 4 Feb 2011, at 08:02, Deena Awate wrote: > But for mail servers and clients that do not communicate over SSL how can we intercept the email at the NKE level / listener / filter and modify it as desired. Is this feasible ? Yes. You need to look at socket filter NKEs. The tcplognke is an example. <http://developer.apple.com/library/mac/#samplecode/tcplognke/> I should stress that it's a whole lot of work doing this stuff in kernel. I think you would be better off doing it in user space, and then reconfiguring the mail client to talk to your server via loopback TCP. This has the added advantage that it lets you work with TLS-protected servers. The mail client would talk to you via plaintext loopback TCP (plaintext is pretty safe here because its loopback only) and then your server would talk to the real server via TLS. S+E -- Quinn "The Eskimo!" <http://www.apple.com/developer/> Apple Developer Relations, Developer Technical Support, Core OS/Hardware _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0