On 12 Sep 2016, at 04:44, Charu Tiwari <cctiwari@gmail.com> wrote:
Is there any way we can get "full path" (command line) of process in 'kext' (given a 'pid' is available).
Not directly. A common approach here is to bounce the work out to user space. And once you do that you can user other APIs, like that code signing API, that are generally better for identifying code anyway. Share and Enjoy -- Quinn "The Eskimo!" <http://www.apple.com/developer/> Apple Developer Relations, Developer Technical Support, Core OS/Hardware _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel@lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.... This email sent to site_archiver@lists.apple.com