Comments (3)
It's currently "all or nothing", but I suppose this makes sense as a feature request.
from pongoos.
Following this issue as well.
I was rather surprised to find out checkra1n's sandbox behaviour allows read access to not only /var but also the entirety of /var/mobile. Granted I'm not the most knowledgeable on this and the team probably had a good reason to do this other than for loading the bootstrap onto the device, but from a security and usability standpoint I'm not sure this is the most sensible kinda implementation especially when you compare it to the sandbox behaviour on other app based jailbreaks, let alone there's detection implications as well. I wasn't paying a lot of attention to this issue until whilst I was executing a-Shell/LibTerm and noticed that App Store apps had no problem reading my private keys under ~/.ssh and ~/.local which turned out quite concerning for an app directly downloaded from an official source. Being able to adjust the sandbox patches/an option to make it a bit more strict at boot time would be a nice addition.
from pongoos.
I second this, as for now some apps are clever enough to detect jailbreak via sandbox behavior differences(for example SYS_open to "/var/mobile" would success, and SYS_csops would always have CS_PLATFORM_BINARY flag set when booted by checkra1n, and more). Pairing with SYS_access detection to jailbreak bootstrap files makes those apps invincible to any jailbreak detection bypass tweaks. Something made to activate these changes for certain processes on the go instead of just hooking them all would be nice IMO.
By the way are there any ways to load a pongo module without breaking sandbox or loading kpf at all? I tried a couple of ways to disable kpf including disabling kpf at all(boot via Pongo.bin) or commenting out flag changes in amfi_execve_hook but either the module wouldn't load or CS_PLATFORM_BINARY still got set.
from pongoos.
Related Issues (20)
- Cannot build on macOS 13 HOT 3
- Running fetch_stdout.py triggers kernel panic HOT 1
- It is work in windows?? HOT 1
- variable ... set but not used HOT 2
- Timed out waiting for download mode HOT 2
- Can't build testmodule example (iOS15 Branch) HOT 1
- PongoOS image is too large: must be at most 0x7fe00, have 0xa5060 HOT 1
- ld: symbol(s) not found for architecture arm64 HOT 7
- quick question do i have permission to use some or your code in the repo's on this org? HOT 1
- use framebuffer after lowlevel_cleanup()
- T2 ssh HOT 9
- Ubuntu Build Error : ld: could not process llvm bitcode object file HOT 10
- Android on iOS15 branch currently broken HOT 11
- [Checkra1n development status]
- Questions about PongoOS
- ld: symbol(s) not found for architecture arm64 HOT 1
- Stuck in Booting PongoOS HOT 1
- .asc gpg key checkra1n???? HOT 1
- Support for ipod touch? HOT 2
- Unfortunately, it's a pity that pongoOS can no longer be compiled... HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from pongoos.