Overcoming Permissions
Hi, I have written an NKE and everything is working great now, except in my send function, basically an extension of the userland socket that is sending information on it, it calls soconnect, but a process in order to connect to my listening socket has to be running as root. But when Safari or Mails traffic is intercepted it trys to call soconnect, but it denies since it doesn't have access. Sorry that sounds like a lot of garbage in other words, those familiar with a NKE the send function is intercepting everything sent on a socket, the way i chose to do IPC with my daemon is with sockets as well. But if the intercepted process is a process like smbd, netinfod, pppd, basically those processes running as root they can connect to my listening daemon socket, but Safari, Mail, and those running as user processes when it goes through the intercepted send function, it can't connect to my userland listening socket. But after it is connected with cupsd, netinfod, etc... sending and receiving works fine no matter what mode the process is running under. Any help would be appreciated, I can change my user daemon to run under as a user process and connecting to it works just fine, but a startup daemon always is started up as root. And I would like my daemon to run under root too for the protection from kill. Thanks, Matt _______________________________________________ darwin-kernel mailing list | darwin-kernel@lists.apple.com Help/Unsubscribe/Archives: http://www.lists.apple.com/mailman/listinfo/darwin-kernel Do not post admin requests to the list. They will be ignored.
participants (1)
-
Matt Jaffa