Talk:Sandbox

Incorrect info

There was no app store before 2.0. The device sandboxes applications it does not use a hypervisor. "A jail is a set of resource limits imposed on programs by the operating system kernel. It can include I/O bandwidth caps, disk quotas, network access restrictions and a restricted filesystem namespace. Jails are most commonly used in virtual hosting." (from [1]). --GreySyntax 21:06, 27 October 2010 (UTC)

ok i just noticed the difference between 2 files ( from an ipsw [2] ) ( from an appstore app [3] ) and i thought the files described what the apps are allowed to do ( because there are lots of exploits on appstore apps that could be used with a kernel exploit ) --liamchat 00:39, 28 October 2010 (UTC)

All applications are ran sandboxed under the 'mobile' account, things like cydia break out of the sandbox and run as root. --GreySyntax 13:44, 28 October 2010 (UTC)