What happens if the root filesystem isn't mounted (which it typically isn't when 99% of kernel extensions are loaded, which is what the OP asked for)? Shantonu On Aug 24, 2012, at 7:19 AM, Ken Hornstein <kenh@cmf.nrl.navy.mil> wrote:

...

I would like to perform self integrity checks (validate against a known hash value) for my kernel extensions when they gets loaded into the memory. Since i can't access files from the kernel extension, what is the best way of achieving this within kernel extesions?

You CAN read files from kernel extensions. The API exists. Some say that it's is very hard to use, but I personally didn't have a problem with it. I wouldn't want to do a lot of complicated stuff, but if you just need to read a file it should be doable.

--Ken _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel@lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/darwin-kernel/ssen%40apple.com

This email sent to ssen@apple.com

_______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel@lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.... This email sent to site_archiver@lists.apple.com