+ Reply
Results 1 to 3 of 3
  1. #1
    Green Apple
    Join Date
    Jan 2011
    Posts
    30
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Default Root privilege enforcement mechanism

    What is the mechanism that prevents an external device (program running on a computer) from accessing the root partition on an iDevice? Is it possible that a program access the root partition without a jailbreak by simply ignoring permissions and privileges similar to how some programs can ignore the DRM on DVDs?
    Last edited by Melab; 01-16-2011 at 08:15 PM. Reason: Automerged Doublepost

  2. #2
    Super Moderator iYeow's Avatar
    Join Date
    Feb 2008
    Location
    Vancouver, Canada
    Posts
    13,014
    Thanks
    67
    Thanked 2,658 Times in 2,549 Posts

    You have to ask OrbyOrb regarding this, he can explain to you in technical terms.

  3. #3
    Super Otiose Mod Orby's Avatar
    Join Date
    Aug 2010
    Location
    Elsewhere.
    Posts
    3,740
    Thanks
    37
    Thanked 346 Times in 315 Posts

    A program, say, SSH or SCP, on a stock OS install?

    It's all in the kernel's sandboxing plus code-signing requirements, the fact the root partition is mounted as read-only, all executable non-system code in userland is run from the non-superuser "mobile" (as opposed to root) and the fact that Apple has several enforcement programs in the OS (lockdownd and securityd being the two biggest pains in the arse). Plus there are a lot of locked-out inbound ports (such as SSH, FTP, or telnet).

    Effective? Fairly (under normal circumstances). Once root access is gained through mounting the system as read-write plus kernel patches (axing the code-signing requirements and getting the privileges straight)? Wet paper bag...

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts