site_archiver@lists.apple.com Delivered-To: darwin-kernel@lists.apple.com -Ed On Feb 27, 2010, at 8:27 AM, Dave Keck wrote: Hey list, After exhausting all other options, I've determined that I need to write a KEXT that will take advantage of the Kauth KPIs, which will tighten the security around a specific process and its children. The KEXT will be loaded by a daemon process, which will then register itself with the KEXT as the process needing protection. My problem is that of robustness: should the daemon crash, ideally the KEXT would notice and tear down the resources that it held. Unfortunately I'm not sure it's possible for a KEXT to be notified when a process exits. I'm pretty certain it's impossible using the BSD kernel KPIs, but perhaps there's a way with the Mach ones? Thanks for any insight! This email sent to arwyn@phasic.com _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel@lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.a... This is a common problem with a supported solution. Your daemon just needs to hold open a user client connection to the kext. When your daemon exits cleanly, clientClose() will be called, otherwise clientDied() will be called. The IOKit infrastructure provides this for you. David _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel@lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/arwyn %40phasic.com This email sent to site_archiver@lists.apple.com