October 2013 - Darwin-kernel

Re: To Monitor file activities
by simran charley 30 Oct '13

30 Oct '13

_______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Programmatic Interface to pf (firewall)
by Scott Davies 18 Oct '13

18 Oct '13

Hi Comex and Vincent, Thank you for your quick replies! I believe I will explore the ioctls for personal interest, but will not rely on then for the product as you note they are fragile between releases. I suppose the best solution, then, is to wrap pfctl and pass rules via anchors. A problem I can think with this is that the anchors will have to be appended to the existing pf.conf file, but because the last rule that applies takes effect in pf, it is possible that my rules being blindly added will compromise someone's existing configuration. Can anyone think of a work around to that ? Thanks again, - Scott On 2013-10-17, at 7:41 PM, Vincent Lubet <vlubet(a)apple.com> wrote: > > On Oct 17, 2013, at 1:50 PM, comex <comexk(a)gmail.com> wrote: > >> On Thu, Oct 17, 2013 at 2:02 AM, Scott Davies <code-poet(a)hotmail.com> wrote: >>> I have begun research on this and have just started to read about Network Kernel Extensions, however, I am curious if there is a way to do this from user space or if it is only a kernel space option. In particular, an Objective-C interface for this to use from user space would be beneficial. >> >> The /dev/pf ioctl interface is the same as the one documented in BSD: >> >> http://www.freebsd.org/cgi/man.cgi?query=pf&sektion=4 > > A word of caution: the PF ioctls are not a public API for OS X and they exist in xnu only to support the needs of pfctl(8). That means the PF ioctls are not supported and may be modified or even removed from any release without advance notice. > > Vincent > _______________________________________________ > Do not post admin requests to the list. They will be ignored. > Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) > Help/Unsubscribe/Update your Subscription: > https://lists.apple.com/mailman/options/darwin-kernel/code-poet%40hotmail.c… > > This email sent to code-poet(a)hotmail.com _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Programmatic Interface to pf (firewall)
by Vincent Lubet 17 Oct '13

17 Oct '13

On Oct 17, 2013, at 1:50 PM, comex <comexk(a)gmail.com> wrote: > On Thu, Oct 17, 2013 at 2:02 AM, Scott Davies <code-poet(a)hotmail.com> wrote: >> I have begun research on this and have just started to read about Network Kernel Extensions, however, I am curious if there is a way to do this from user space or if it is only a kernel space option. In particular, an Objective-C interface for this to use from user space would be beneficial. > > The /dev/pf ioctl interface is the same as the one documented in BSD: > > http://www.freebsd.org/cgi/man.cgi?query=pf&sektion=4 A word of caution: the PF ioctls are not a public API for OS X and they exist in xnu only to support the needs of pfctl(8). That means the PF ioctls are not supported and may be modified or even removed from any release without advance notice. Vincent _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Programmatic Interface to pf (firewall)
by comex 17 Oct '13

17 Oct '13

On Thu, Oct 17, 2013 at 2:02 AM, Scott Davies <code-poet(a)hotmail.com> wrote: > I have begun research on this and have just started to read about Network Kernel Extensions, however, I am curious if there is a way to do this from user space or if it is only a kernel space option. In particular, an Objective-C interface for this to use from user space would be beneficial. The /dev/pf ioctl interface is the same as the one documented in BSD: http://www.freebsd.org/cgi/man.cgi?query=pf&sektion=4 _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists… This email sent to site_archiver(a)lists.apple.com

1 0

Programmatic Interface to pf (firewall)
by Scott Davies 17 Oct '13

17 Oct '13

Hello, I am currently working on a product that will dynamically alter the pf firewall that was first included with Lion (I note that ipfw has been deprecated). I have begun research on this and have just started to read about Network Kernel Extensions, however, I am curious if there is a way to do this from user space or if it is only a kernel space option. In particular, an Objective-C interface for this to use from user space would be beneficial. It is entirely possible that I have missed this documentation on developer.apple.com - is there documentation on this ? I suppose another option is to spawn a process that wraps the pf command line utilities, but this seems kludgy at best. Thank you for your time, - Scott _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists… This email sent to site_archiver(a)lists.apple.com

1 0

Re: FreeBSD 9.2 NFS server and Mac 10.8/7/6 clients s-l-o-w finder
by Eric Browning 16 Oct '13

16 Oct '13

_______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists… This email sent to site_archiver(a)lists.apple.com

1 0

FreeBSD 9.2 NFS server and Mac 10.8/7/6 clients s-l-o-w finder
by Eric Browning 16 Oct '13

16 Oct '13

_______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists… This email sent to site_archiver(a)lists.apple.com

1 0

Re: To Monitor file activities
by Todd Heberlein 11 Oct '13

11 Oct '13

_______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists… This email sent to site_archiver(a)lists.apple.com

1 0

To Monitor file activities
by simran charley 11 Oct '13

11 Oct '13

_______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists… This email sent to site_archiver(a)lists.apple.com

1 0

Re: kgmacros for 10.9 GM kernel debug Kit
by Shantonu Sen 10 Oct '13

10 Oct '13

Please don’t cross-post. OS X 10.9 is pre-release software, and cannot be discussed on these public mailing lists. Please us devforums.apple.com for further questions on NDA-covered software. Shantonu On Oct 10, 2013, at 2:10 PM, Pratima Kudale <Pratima.Kudale(a)harmonicinc.com> wrote: > I could not find kgmacros for OS X 10.9 build 13A598. > > And if I use kgmacros from 10.8.5 , showallstacks , showallthreads command fail with below error: > > (gdb) showallthreads > task vm_map ipc_space #acts pid process io_policy wq_state command > 0xffffff804907fc00 0xffffff800f8a6f00 0xffffff8048c70f30 166 0 0xffffff800ccfbcc0 There is no member named ext_appliedstate. > > Where can I find kgmacros for 10.9? > > Thanks, > Pratima > _______________________________________________ > Do not post admin requests to the list. They will be ignored. > Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) > Help/Unsubscribe/Update your Subscription: > https://lists.apple.com/mailman/options/darwin-kernel/ssen%40apple.com > > This email sent to ssen(a)apple.com _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists… This email sent to site_archiver(a)lists.apple.com

1 0