The iPhone Wiki is no longer updated. Visit this article on The Apple Wiki for current information. |
Difference between revisions of "Sandbox"
(REALLY LIAM?) |
|||
Line 1: | Line 1: | ||
this is apple's software based [[Wikipedia:Hypervisor|Hypervisor]] that was introduced in [[firmware]] 2.0 |
this is apple's software based [[Wikipedia:Hypervisor|Hypervisor]] that was introduced in [[firmware]] 2.0 |
||
− | == |
+ | == Problem's == |
− | *this made all [[ |
+ | *this made all [[App Store]]'s apps need updating to work on the new [[iOS]] |
*for app's to run they needed to have a folder called [[_Codesign]] in it was a file called [[CodeResources]] |
*for app's to run they needed to have a folder called [[_Codesign]] in it was a file called [[CodeResources]] |
||
− | *if a [[userland]] exploit was discovered in an [[ |
+ | *if a [[userland]] exploit was discovered in an [[App Store]] app the [[CodeResources]] would become invalid when a file was injected |
− | *the checks are not as hard on app's in the [[firmware]] [[http://pastebin.com/6C55pTxf]] ( |
+ | *the checks are not as hard on app's in the [[firmware]] [[http://pastebin.com/6C55pTxf]] (only version.plist is checked to prevent a [[soft_upgrade]] ) |
− | == |
+ | == Exploit's == |
because of the dependancy on the [[CodeResources]] file it is vonrable to the [[Incomplete_Codesign_Exploit]] |
because of the dependancy on the [[CodeResources]] file it is vonrable to the [[Incomplete_Codesign_Exploit]] |
Revision as of 00:11, 27 October 2010
this is apple's software based Hypervisor that was introduced in firmware 2.0
Problem's
- for app's to run they needed to have a folder called _Codesign in it was a file called CodeResources
- if a userland exploit was discovered in an App Store app the CodeResources would become invalid when a file was injected
- the checks are not as hard on app's in the firmware [[1]] (only version.plist is checked to prevent a soft_upgrade )
Exploit's
because of the dependancy on the CodeResources file it is vonrable to the Incomplete_Codesign_Exploit