search

checkra1n / PongoOS

pongoOS
https://checkra.in
Other
2.49k stars 405 forks source link

kpf: Add patch to disable Protobox on iOS 16+ #182

Open opa334 opened 8 months ago

opa334 commented 8 months ago

This patch disables Protobox, which was introduced in iOS 16 and adds syscall masks (whitelists) to certain system daemons. It also includes a mechanism that makes certain processes crash on sandbox violations, amongst other things.

This PR disables Protobox globally, which fixes several issues with dylib injection and Frida in these processes.

The patchfinding metric is verified working on 16.0 - 17.4b1.

asdfugil commented 8 months ago

This patch appears to be broken on bridgeOS kernels. bridgeOS probably doesn't have protobox

opa334 commented 8 months ago

Just check if there is a string with "Protobox" in it in the sandbox kext, if there is not, then it indeed does not have Protobox.

asdfugil commented 8 months ago

Protobox string exists since bridgeOS 8. The patch still fails on those kernels though.

opa334 commented 8 months ago

hm idk then, maybe the string exists but the feature is still unused.