Determining specific file sessions
site_archiver@lists.apple.com Delivered-To: darwin-kernel@lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from:to :subject:mime-version:content-type:content-transfer-encoding :content-disposition; bh=EDkao/UdkDeeTTBL4rS8aGqM8fYX/5pYcOyfVkptY+0=; b=rQwQmZkI2EGH4g8DWqzblMD5O5E1HOF+CqOhGHTJGVWzxjGhcXWH6gks8gWgnRrr5l 5s1gfCr++4GVHrylrmP+L1ctDVmdmnDoMJKi6CtUxwTnEaWKI0C8VYqXLN4u3hfUwmgY D8+VUpaexOoo0883WLklj8dJGJtvpI8Hnu34g= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:to:subject:mime-version:content-type :content-transfer-encoding:content-disposition; b=e2c1M//Tz4wF8HFSADk6+zp8lcxQsOXX9runYx+U0q1+ppc3PHbf5RRH5zdbt2GSFF 6ThtJlWm+WfGBKnwizP50Yw1YOc5kQgrNBzGe4kCnF6QxJo1YSY5FrJsFvyIzxEjEN2q B6XNK60q5M85BRSacW5nOqMVF7WVuSqm6TRW4= Hello, in my current project I'm using Kauth for a security application. Part of the application deals with file operation checking and therefore uses KAUTH_SCOPE_VNODE. It is required for the application to exactly know when a specific process open/closed a file. For example, the file `foo.bar' may be accessed by many processes each holding more than one file descriptor associated with the given file. It is therefore not enough to know the time a file was opened/closed as it may relate to different processes and/or file descriptors within the process. The only valid idea I could think of to distinguish between various instances of opened files is to relate each open session with the process ID and process FD associated with the file. As to my knowledge, this is impossible within the VNODE scope, and I'm afraid there is no legal way to do it either (am I right?). I'd be really thankful is someone could tell me if there is a way to achieve what I've specified, or alternatively anoher way to get the same result (either in kernel or user mode). Thanks, Jernej Azarija _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel@lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.a... This email sent to site_archiver@lists.apple.com
participants (1)
-
Jernej Azarija