Hi all,
I've set a breakpoint on kauth vnode scope and printed the vnode in order to reveal which file is represented by this object.
here's the trace :
* frame #1: 0xffffff7f9517a9e3 my_vnode_scope_callback(credential=0xffffff802167fb40, idata=0xffffff8019ab5a00, action=-2147483644, arg0=18446743524518536336, arg1=18446743524439358736, arg2=0, arg3=18446743525870581024) at SantaDecisionManager.cc:822
frame #2: 0xffffff8013343243 kernel`kauth_authorize_action(scope=<unavailable>, credential=<unavailable>, action=<unavailable>, arg0=<unavailable>, arg1=<unavailable>, arg2=<unavailable>, arg3=<unavailable>) at kern_authorization.c:422 [opt]From `my_vnode_scope_callback` i've tried to print the vnode and the v_name field was missing, and so does it's parent v_name.
v_name = 0x0000000000000000 <no value available>
Although the value of 'path' which is the variable represented by arg0 in my callback function was indeed valid.
Aren't they suppose to be related (the path and the vnode->v_name field) ?
P.S. also the v_parent->v_name was missing. I did expect to find the parent directory name over there.
thanks for your help !
Irad
