xnu

I would like to retrieve the path of a process from a PID in a kext, like so: Get name from PID? However, sys/proc_info.h and libproc.h are not available anymore (afaik). Is there any other way to retrieve proc_info for a process struct proc *p from a kext? The function that is supposed to return a process's main executable's vnode , proc_getexecutablevnode() is in the private KPI, which is only available to kexts published by Apple. The information it relies on is supposedly stored in the p_textvp field of struct proc , which once again is not part of the public ABI - Apple can choose to