|
The iPhone Wiki is no longer updated. Visit this article on The Apple Wiki for current information. |
sandbox
Apple's software based Hypervisor that was introduced in firmware 2.0 is named Sandbox.
Problem's
- In addition to the new set of frameworks in 2.0, applications had to be tweaked to use the new Sandbox.
- For applications to run, they need to have a folder called _Codesign with a file inside called CodeResources
- If a userland exploit was discovered in an App Store app, the CodeResources would become invalid when a file was injected.
- The checks are not as hard on built in applications in the firmware [[1]] (only version.plist is checked to prevent a soft_upgrade )
Exploits
The dependency on the CodeResources file makes it vulnerable to the Incomplete Codesign Exploit
