. Re: API to determine status of System Integrity Protection?

2015-09-15 Thread Stephane Madrau
2015-09-14 21:00 GMT+02:00 : > > The open() API returns EPERM when you try to access something protected by > SIP, but EACCES for normal permission errors. So, you could just try to > write to create a file at /System/foo without root access using open(), and >

Re: . Re: API to determine status of System Integrity Protection?

2015-09-15 Thread Charles Srstka
> On Sep 15, 2015, at 1:37 AM, Stephane Madrau wrote: > > What's wrong with using csr_check() and csr_get_active_config(). That's > nothing else than what csrutil uses... Are these functions considered as > SPI ? They are in the kernel sources... > And using SPI shouldn be

Re: API to determine status of System Integrity Protection?

2015-09-14 Thread Jean-Daniel Dupas
> Le 14 sept. 2015 à 01:33, Ed Wynne a écrit : > > > On Sep 13, 2015, at 5:47 PM, Stephane Sudre wrote: > That document doesn't mention an API… Hence, since that is the current documentation, my conclusion : “Don’t think so”. >>> There

Re: API to determine status of System Integrity Protection?

2015-09-14 Thread Ed Wynne
On Sep 14, 2015, at 7:05 AM, Jean-Daniel Dupas wrote: >> Le 14 sept. 2015 à 01:33, Ed Wynne a écrit : >> On Sep 13, 2015, at 5:47 PM, Stephane Sudre wrote: >> That document doesn't mention an API… > Hence, since that is

Re: API to determine status of System Integrity Protection?

2015-09-14 Thread Charles Srstka
> On Sep 13, 2015, at 6:33 PM, Ed Wynne wrote: > > > On Sep 13, 2015, at 5:47 PM, Stephane Sudre > wrote: > That document doesn't mention an API… Hence, since that is the current documentation, my conclusion :

Re: API to determine status of System Integrity Protection?

2015-09-13 Thread Stephane Sudre
On Sat, Sep 12, 2015 at 9:53 PM, Ed Wynne wrote: > > On Sep 12, 2015, at 1:45 PM, sqwarqDev wrote: > >> >>> On 13 Sep 2015, at 00:43, SevenBits wrote: >>> >>> That document doesn't mention an API… >>> >> Hence, since that is the

Re: API to determine status of System Integrity Protection?

2015-09-13 Thread Ed Wynne
On Sep 13, 2015, at 5:47 PM, Stephane Sudre wrote: That document doesn't mention an API… >>> Hence, since that is the current documentation, my conclusion : “Don’t >>> think so”. >> There is an API. Much like with sandboxing it just may not be public, which >> means

Re: API to determine status of System Integrity Protection?

2015-09-12 Thread sqwarqDev
> On 13 Sep 2015, at 00:43, SevenBits wrote: > > That document doesn't mention an API… > Hence, since that is the current documentation, my conclusion : “Don’t think so”. ___ Cocoa-dev mailing list

Re: API to determine status of System Integrity Protection?

2015-09-12 Thread Ed Wynne
On Sep 12, 2015, at 1:45 PM, sqwarqDev wrote: > >> On 13 Sep 2015, at 00:43, SevenBits wrote: >> >> That document doesn't mention an API… >> > Hence, since that is the current documentation, my conclusion : “Don’t think > so”. There is an

Re: API to determine status of System Integrity Protection?

2015-09-12 Thread sqwarqDev
> On 9 Sep 2015, at 02:06, James Bucanek wrote: > > I'll assume by the raging silence that there is no such API. Don’t think so. The current documentation is here:

Re: API to determine status of System Integrity Protection?

2015-09-12 Thread SevenBits
That document doesn't mention an API... On Saturday, September 12, 2015, sqwarqDev wrote: > > On 9 Sep 2015, at 02:06, James Bucanek > wrote: > > > > I'll assume by the raging silence that there is no such API. > > Don’t think so.