Search results

Try using lsof or levin's lsof functionality in his procexp tool.

Status: Open.

#30 In malus-security/ioracle;

· alecdeshotels opened on Jun 19, 2017

backtracer sometimes needs information about policies or context that could be provided by iOracle.

Status: Open.

#29 In malus-security/ioracle;

· alecdeshotels opened on Jun 19, 2017

Should we just run backtracer on every function and for r0-r3? Then we could just query for the functions we care about.

Status: Open.

#28 In malus-security/ioracle;

· alecdeshotels opened on Jun 19, 2017

The ----; in ida doesn't necessarily mean there are 2 parent basic blocks.

Status: Open.

#27 In malus-security/ioracle;

· alecdeshotels opened on Jun 19, 2017

query to find sandbox profiles that allow a process to grant itself arbitrary sandbox extensions and access any file. quicklookd and afcd can do this.

Status: Open.

#26 In malus-security/ioracle;

· alecdeshotels opened on May 25, 2017

Briefly discuss access control enforcement in the background section, but keep the emphasis on policy analysis.

Status: Open.

#25 In malus-security/ioracle;

· alecdeshotels opened on May 25, 2017

When debugserver launches neagent, does neagent use debugserver's sandbox?

Status: Open.

#24 In malus-security/ioracle;

· alecdeshotels opened on May 23, 2017

Write Evaluation

Status: Open.

#23 In malus-security/ioracle;

· alecdeshotels opened on May 23, 2017

Produce Small Step Semantics for Prolog Rule explanation.

Status: Open.

#22 In malus-security/ioracle;

· alecdeshotels opened on May 23, 2017

We claim that no root process is sandboxed. Is this true? Make queries.

Status: Open.

#21 In malus-security/ioracle;

· alecdeshotels opened on May 23, 2017

determine which jailbreaks could have been fixed with changes to the sandbox and explain why.

Status: Open.

#18 In malus-security/ioracle;

· alecdeshotels opened on May 23, 2017

Further testing of iOS 9 exploit where third party app puts symlink in com.apple.itunes.lock_sync and then afcd makes link to this link. This bypasses restrictions that should stop afcd from making links to places out of Media/

Status: Open.

#17 In malus-security/ioracle;

· alecdeshotels opened on May 23, 2017