February 2019 - Darwin-kernel

RE: Unexpected behavior using msleep in a KAUTH_SCOPE_VNODE handler - Update.
by Matt Riley 13 Feb '19

13 Feb '19

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pcpitstop.com; s=google; h=from:to:subject:thread-topic:thread-index:date:message-id :accept-language:content-language:mime-version; bh=rrzvPOtY8a8BMrsuNAckuhZArRYfhq3rJ2ModZfnBuQ=; b=e2Q9jGN2gqlVewLAlwRRsDkR1aCZsZejr9rLycjvfytwmbGoMvONy1gK6m7Xs4c/k5 T8xDvXkF2KYjriMl3YtdD5crr8orapcvcbRBFjnUTezT4wkflQukdtJ3j88OBxwbEqQ3 BMZfeBOWhMn1zXG43t/1aYNQfZqe++gw7NamY= Thread-index: AQHUwzc5cBzJsuaWu0qQ5M0ep7hVFw== Thread-topic: Unexpected behavior using msleep in a KAUTH_SCOPE_VNODE handler - Update. I have tested this modified kauth code on Yosemite and it works as I would expect. While the “chess” program is IOSleeping, others will continue to launch and run seemingly correctly. I am not sure I am using this list correctly, as my posts do not seem to thread. I apologize for that. _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists… This email sent to site_archiver(a)lists.apple.com

1 0

RE: Unexpected behavior using msleep in a KAUTH_SCOPE_VNODE handler
by Matt Riley 08 Feb '19

08 Feb '19

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pcpitstop.com; s=google; h=from:to:subject:thread-topic:thread-index:date:message-id :accept-language:content-language:mime-version; bh=5Yo9lyw030lUHw+0JIXEKspxPOZP/xTRfu1rL1aOCQc=; b=SzXlJSBtrW/jd39kXWfcP5m9nQ8IKjdinOJJrlB9rvTSfDUrFkqbdg0TJDeeusPi91 XF0e8x0gCIQL4VzJcjlvbdFobFSWIxMJw0xjd9ZTV93GoAjwO2XZMfEVfzJY5WvK5SdY wVxFoK8PSjiaqMcT24O+c3ouyRoxHfNw3UnU0= Thread-index: AQHUv8acwyXpnDJ9Fk+l3O7G3TGsEA== Thread-topic: Unexpected behavior using msleep in a KAUTH_SCOPE_VNODE handler I do not think my previous question was clear. I have created a minimal change to the KauthORama.c sample code is https://pastebin.com/sWddwSp4 The only line added to KauthORama.c was on line 476 and looks like this: if ((action & KAUTH_VNODE_EXECUTE) && strcmp(vpPath, "/Applications/Chess.app/Contents/MacOS/Chess")==0) IOSleep(20000); //ONLY CHANGE. I also had to add com.apple.kip.iokit to the OSBundleLibraries In this video (https://youtu.be/mwFDIPHcMUo) you can see the behavior clearly. When I launch /Applications/Chess.app/Contents/MacOS/Chess at about 31 seconds into the video - from ~31 seconds to ~51 seconds the terminal output is frozen, safari bounces on the task bar, but the Mail app launches correctly during this time. _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists… This email sent to site_archiver(a)lists.apple.com

1 0

Unexpected behavior using msleep in a KAUTH_SCOPE_VNODE handler
by Matt Riley 07 Feb '19

07 Feb '19

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pcpitstop.com; s=google; h=from:to:subject:thread-topic:thread-index:date:message-id :accept-language:content-language:mime-version; bh=kenwLzUZHQ3lObASi9AvXWSccmfs46xtTzE6tVxR51k=; b=lBJ5sXkQ8EgM2GX4ycHg1WGIpBV9SEjAodq+adbHuwzrnysJo69jzxPxWzIHPejUYw ZABxpVclNfmsCtr4iGAznfjjyBlTFXG+4WTxR6v+I1B3bE9wYUIQ0DaJc9ZRKeYnO3x3 jFGdjjmB7rbcGDaqdve71BOvQS/oHQ7J2/N1Y= Thread-index: AQHUvw9rl8vv0pdDSEOWrbDB0st79g== Thread-topic: Unexpected behavior using msleep in a KAUTH_SCOPE_VNODE handler Currently, we are using a KAUTH_SCOPE_VNODE listener and are waiting for results from a user level process with an msleep call. When sleeping in this context we see that when executing some applications we do not see any activity in the listener until the msleep finishes while other applications seem to correctly flow to the handler. We also see some applications become non-responsive even though they are not trying to execute anything at the time, specifically Terminal output appears frozen, while other applications appear to continue running correctly. I guess my question is – what is the proper way to wait in the kernel extension if not msleep/wakeup? Or is it simply not possible to wait in the listener and expect other applications to continue correctly? _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists… This email sent to site_archiver(a)lists.apple.com

1 0