Sandbox - Revision history

Britta: adding links

2014-09-19T20:31:34Z

adding links

2012-01-31T03:01:49Z

2012-01-30T23:36:02Z

2011-12-14T16:13:42Z

2010-10-28T13:45:35Z

‎Problem's

2010-10-28T13:45:14Z

2010-10-27T17:11:32Z

2010-10-27T15:50:45Z

Undo revision 11472 by Liamchat (Talk)Just contact dialexio to delete

2010-10-27T01:18:01Z

Removing all content from page

2010-10-27T00:19:03Z

← Older revision		Revision as of 20:31, 19 September 2014
Line 11:		Line 11:

	== More Info ==		== More Info ==
−	http://iphonedevwiki.net/index.php/Seatbelt	+	* [http://iphonedevwiki.net/index.php/Seatbelt Seatbelt article on iPhoneDevWiki]
		+	* [https://developer.apple.com/app-sandboxing/ Apple's articles about App Sandboxing for developers]

@@ Line 1: / Line 1: @@
 Apple's software based [[Wikipedia:Mandatory access control|mandatory access control]] that was introduced in [[iOS]] 2.0. It is a higher level layer on top of the XNU implementation of the TrustedBSD MAC framework.
-== Problem's ==
+== Problems ==
 *In addition to the new set of frameworks in 2.0, applications had to be tweaked to use the new sandbox.
 *For applications to run, they need to have a folder called [[_Codesign]] with a file inside called [[CodeResources]]

← Older revision		Revision as of 23:36, 30 January 2012
Line 1:		Line 1:
−	Apple's software based [[Wikipedia:~~Hypervisor~~\|~~Hypervisor~~]] that was introduced in [[iOS]] 2.0.	+	Apple's software based [[Wikipedia:Mandatory access control\|mandatory access control]] that was introduced in [[iOS]] 2.0. It is a higher level layer on top of the XNU implementation of the TrustedBSD MAC framework.

	== Problem's ==		== Problem's ==

@@ Line 1: / Line 1: @@
 == Problem's ==
-*In addition to the new set of frameworks in 2.0, applications had to be tweaked to use the new Sandbox.
+*In addition to the new set of frameworks in 2.0, applications had to be tweaked to use the new sandbox.
 *For applications to run, they need to have a folder called [[_Codesign]] with a file inside called [[CodeResources]]
 *If a [[userland]] exploit was discovered in an [[App Store]] app, the [[CodeResources]] would become invalid when a file was injected.
-*The checks are not as hard on built in applications in the [[firmware]] [[http://pastebin.com/6C55pTxf]] (only version.plist is checked to prevent a [[soft_upgrade]] )
+*The checks are not as hard on built in applications in the [[firmware]] [http://pastebin.com/6C55pTxf] (only version.plist is checked to prevent a [[soft upgrade]] )
 == Exploits ==

@@ Line 6: / Line 6: @@
 *For applications to run, they need to have a folder called [[_Codesign]] with a file inside called [[CodeResources]]
 *If a [[userland]] exploit was discovered in an [[App Store]] app, the [[CodeResources]] would become invalid when a file was injected.
-*The checks are not as hard on app's in the [[firmware]] [[http://pastebin.com/6C55pTxf]] (only version.plist is checked to prevent a [[soft_upgrade]] )
+*The checks are not as hard on built in applications in the [[firmware]] [[http://pastebin.com/6C55pTxf]] (only version.plist is checked to prevent a [[soft_upgrade]] )
 == Exploits ==

@@ Line 1: / Line 1: @@
 {{DISPLAYTITLE:sandbox}}
-It is apple's software based [[Wikipedia:Hypervisor|Hypervisor]] that was introduced in [[firmware]] 2.0 called [[sandbox]]
+Apple's software based [[Wikipedia:Hypervisor|Hypervisor]] that was introduced in [[firmware]] 2.0 is named [[Sandbox]].
 == Problem's ==
-*For app's to run they needed to have a folder called [[_Codesign]] in it was a file called [[CodeResources]]
+*For applications to run, they need to have a folder called [[_Codesign]] with a file inside called [[CodeResources]]
-*If a [[userland]] exploit was discovered in an [[App Store]] app the [[CodeResources]] would become invalid when a file was injected
+*If a [[userland]] exploit was discovered in an [[App Store]] app, the [[CodeResources]] would become invalid when a file was injected.
 *The checks are not as hard on app's in the [[firmware]] [[http://pastebin.com/6C55pTxf]] (only version.plist is checked to prevent a [[soft_upgrade]] )
-== Exploit's ==
+== Exploits ==
 The dependency on the [[CodeResources]] file makes it vulnerable to the [[Incomplete Codesign Exploit]]

← Older revision		Revision as of 17:11, 27 October 2010
Line 1:		Line 1:
		+	{{DISPLAYTITLE:sandbox}}
−	#REDIRECT [[User:liamchat/Sandbox]]
		+	It is apple's software based [[Wikipedia:Hypervisor\|Hypervisor]] that was introduced in [[firmware]] 2.0 called [[sandbox]]
		+
		+	== Problem's ==
		+	*This made all [[App Store]]'s apps need updating to work on the new [[iOS]]
		+	*For app's to run they needed to have a folder called [[_Codesign]] in it was a file called [[CodeResources]]
		+	*If a [[userland]] exploit was discovered in an [[App Store]] app the [[CodeResources]] would become invalid when a file was injected
		+	*The checks are not as hard on app's in the [[firmware]] [[http://pastebin.com/6C55pTxf]] (only version.plist is checked to prevent a [[soft_upgrade]] )
		+
		+	== Exploit's ==
		+	The dependency on the [[CodeResources]] file makes it vulnerable to the [[Incomplete Codesign Exploit]]

← Older revision	Revision as of 15:50, 27 October 2010
Line 1:	Line 1:
	+	#REDIRECT [[User:liamchat/Sandbox]]

← Older revision		Revision as of 01:18, 27 October 2010
Line 1:		Line 1:
−	#REDIRECT [[User:liamchat/Sandbox]]

← Older revision		Revision as of 00:19, 27 October 2010
Line 1:		Line 1:
		+	#REDIRECT [[User:liamchat/Sandbox]]
−	this is apple's software based [[Wikipedia:Hypervisor\|Hypervisor]] that was introduced in [[firmware]] 2.0
−
−	== Problem's ==
−	*this made all [[App Store]]'s apps need updating to work on the new [[iOS]]
−
−	*for app's to run they needed to have a folder called [[_Codesign]] in it was a file called [[CodeResources]]
−	*if a [[userland]] exploit was discovered in an [[App Store]] app the [[CodeResources]] would become invalid when a file was injected
−	*the checks are not as hard on app's in the [[firmware]] [[http://pastebin.com/6C55pTxf]] (only version.plist is checked to prevent a [[soft_upgrade]] )
−
−	== Exploit's ==
−	because of the dependancy on the CodeResources file it is venerable to the [[Incomplete Codesign Exploit]]