September 2012 - Darwin-kernel

How to read /dev/fsevents in Lion & Mountain Lion
by Mathu kannan 21 Sep '12

21 Sep '12

_______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Future of Kauth?
by Berni McCoy 21 Sep '12

21 Sep '12

Thank you for the fast response. :-) No apology necessary. The sample is still a good one despite the lack of update. Thanks again, Berni On 9/21/12 10:31 AM, "Quinn "The Eskimo!"" <eskimo1(a)apple.com> wrote: > >On 21 Sep 2012, at 14:36, Berni McCoy <bmccoy(a)bit9.com> wrote: > >> Is this basically because the sample needs updating [...] > >Yes. There's a bug in my queue to update this sample ><rdar://problem/9272790> but the way my queue looks at right now that >won't happen any time soon. > >I'm sorry about the confusion here. I'm working with our DevPubs folks ><rdar://problem/12024149> to improve the wording on samples, like this >one, that were retired due to simple build errors and not because they >have any serious problems. > >Share and Enjoy >-- >Quinn "The Eskimo!" <http://www.apple.com/developer/> >Apple Developer Relations, Developer Technical Support, Core OS/Hardware > > > > _______________________________________________ >Do not post admin requests to the list. They will be ignored. >Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) >Help/Unsubscribe/Update your Subscription: >https://lists.apple.com/mailman/options/darwin-kernel/bmccoy%40bit9.com > >This email sent to bmccoy(a)bit9.com _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Future of Kauth?
by Quinn "The Eskimo!" 21 Sep '12

21 Sep '12

On 21 Sep 2012, at 14:36, Berni McCoy <bmccoy(a)bit9.com> wrote: > Is this basically because the sample needs updating [...] Yes. There's a bug in my queue to update this sample <rdar://problem/9272790> but the way my queue looks at right now that won't happen any time soon. I'm sorry about the confusion here. I'm working with our DevPubs folks <rdar://problem/12024149> to improve the wording on samples, like this one, that were retired due to simple build errors and not because they have any serious problems. Share and Enjoy -- Quinn "The Eskimo!" <http://www.apple.com/developer/> Apple Developer Relations, Developer Technical Support, Core OS/Hardware _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists… This email sent to site_archiver(a)lists.apple.com

1 0

Future of Kauth?
by Berni McCoy 21 Sep '12

21 Sep '12

_______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Passing pointers as UIDs | kernel<->userspace communication
by Jean Suisse 20 Sep '12

20 Sep '12

_______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Best way to implement multiple UserClient connections?
by James Wise 20 Sep '12

20 Sep '12

_______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Passing pointers as UIDs | kernel<->userspace communication
by Michael Smith 19 Sep '12

19 Sep '12

_______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Best way to implement multiple UserClient connections?
by Phil Jordan 19 Sep '12

19 Sep '12

_______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Passing pointers as UIDs | kernel<->userspace communication
by Jean Suisse 19 Sep '12

19 Sep '12

On 18 sept. 2012, at 23:50, comex wrote: > On Tue, Sep 18, 2012 at 5:48 PM, comex <comexk(a)gmail.com> wrote: >> On Tue, Sep 18, 2012 at 5:22 PM, Jean Suisse <jean.lists(a)gmail.com> wrote: >> That's not sufficient: for an attacker to even know the value of the >> heap pointer compromises KASLR > > Er, and that's assuming that "only the kernel can write to the > structure" means that only kernel-originated requests can modify or > delete the structure. If user requests are allowed to modify it, as > you said in your original message, it's pretty much an immediate game > over. Yes, sorry about that. I wanted to make it short. The modifications the app can request are behavior modifications from the kext towards a particular data structure. But that doesn't matters. You and John CRISWELL have convinced me. And adding new security holes is unacceptable. I will change the design and probably use a system of slots + combined handle/UID to track data structures. The only drawback will be for automatic old data structures removal. But that should not happen so frequently. Many thanks to both of you for your advices. Jean _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Passing pointers as UIDs | kernel<->userspace communication
by comex 18 Sep '12

18 Sep '12

On Tue, Sep 18, 2012 at 5:48 PM, comex <comexk(a)gmail.com> wrote: > On Tue, Sep 18, 2012 at 5:22 PM, Jean Suisse <jean.lists(a)gmail.com> wrote: > That's not sufficient: for an attacker to even know the value of the > heap pointer compromises KASLR Er, and that's assuming that "only the kernel can write to the structure" means that only kernel-originated requests can modify or delete the structure. If user requests are allowed to modify it, as you said in your original message, it's pretty much an immediate game over. _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists… This email sent to site_archiver(a)lists.apple.com

1 0