|
The iPhone Wiki is no longer updated. Visit this article on The Apple Wiki for current information. |
Difference between revisions of "Jailbreak"
.::Rizwan::. (talk | contribs) m |
.::Rizwan::. (talk | contribs) m |
||
| Line 1: | Line 1: | ||
This is the process by which full execute and write access is obtained on all the partitions of the iPhone. It is done by patching /etc/fstab to mount the System partition as read-write. This is entirely different from an [[unlock]]. Jailbreaking is the first action that must be taken before things like unofficial [[activation]] (hacktivation), and unofficial unlocking can be applied. |
This is the process by which full execute and write access is obtained on all the partitions of the iPhone. It is done by patching /etc/fstab to mount the System partition as read-write. This is entirely different from an [[unlock]]. Jailbreaking is the first action that must be taken before things like unofficial [[activation]] (hacktivation), and unofficial unlocking can be applied. |
||
| − | The original jailbreak also included modifying the [[AFC|afc]] service (used by [[iTunes]] to access the filesystem) to give full filesystem access from root. This was later updated to create a new service [[AFC| |
+ | The original jailbreak also included modifying the [[AFC|afc]] service (used by [[iTunes]] to access the filesystem) to give full filesystem access from root. This was later updated to create a new service ([[AFC|afc2]]) that allows access to the full filesystem. |
Modern jailbreaks also include patching the kernel to get around code signing and other restrictions. |
Modern jailbreaks also include patching the kernel to get around code signing and other restrictions. |
||
Revision as of 23:21, 26 March 2010
This is the process by which full execute and write access is obtained on all the partitions of the iPhone. It is done by patching /etc/fstab to mount the System partition as read-write. This is entirely different from an unlock. Jailbreaking is the first action that must be taken before things like unofficial activation (hacktivation), and unofficial unlocking can be applied.
The original jailbreak also included modifying the afc service (used by iTunes to access the filesystem) to give full filesystem access from root. This was later updated to create a new service (afc2) that allows access to the full filesystem.
Modern jailbreaks also include patching the kernel to get around code signing and other restrictions.
Contents
Exploits which were used in order to jailbreak (in chronological order)
1.0.2
- Restore Mode (iBoot had a command named cp, which had access to the whole filesystem)
1.1.1
- Symlinks (an upgrade jailbreak)
- libtiff exploit (Adapted from the PSP scene, used by Jailbreakme)
1.1.2
- Mknod (an upgrade jailbreak)
1.1.3 / 1.1.4
- Soft Upgrade (an upgrade jailbreak)
- Ramdisk Hack
Exploits which are used in order to jailbreak 2.0 and above
iPhone / iPhone 3G / iPod Touch
- Pwnage and Pwnage 2.0 (together)
iPod Touch 2G
- ARM7 Go (used by tethered jailbreaks)
- 0x24000 Segment Overflow
iPhone 3GS
- iBoot Environment Variable Overflow (also uses the 24kPwn exploit to make it untethered)
- usb_control_msg(0x21, 2) Exploit (also uses the 24kPwn exploit to make it untethered)
