Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Debug check crashes on iOS 9 Beta #8

Open
editdb opened this issue Jul 9, 2015 · 6 comments
Open

Debug check crashes on iOS 9 Beta #8

editdb opened this issue Jul 9, 2015 · 6 comments

Comments

@editdb
Copy link

editdb commented Jul 9, 2015

If you peruse https://nabla-c0d3.github.io/blog/2015/06/16/ios9-security-privacy/ you’ll see the following section:


Apple has closed three privacy gaps that allowed Apps to detect which other Apps were installed on the device.
The first technique was to use the sysctl() function to retrieve the process table (a remnant of OS X), which includes the list of running Apps. In iOS 9, sysctl() was modified to no longer allow sandboxed Apps to retrieve information about other running processes.


IMAS uses sysctl to detect the pid.

Solution:
The IMAS function dbgGetPid() can be replaced with the built-in function getpid()

@rolmaz
Copy link

rolmaz commented Sep 22, 2015

i have the same issue

@ghe0106
Copy link

ghe0106 commented Sep 23, 2015

Yup - me too - can u provide a code example of the above solution ?

@editdb
Copy link
Author

editdb commented Sep 23, 2015

Search for dbgGetPid() and replace it with getpid()

You'll find it within SecurityCheck.xcodeproj > debugCheck.h module debugCheck(cb)

Be careful not to remove the backslash from the end of the line

@Emmo213
Copy link

Emmo213 commented Sep 23, 2015

Since I don't trust Apple I added an if check in my code where it'll use getpid on iOS9 but keep dbgGetPid on older versions.

@ghe0106
Copy link

ghe0106 commented Sep 23, 2015

Got that to work thanks !

@mmesutt
Copy link

mmesutt commented Oct 12, 2015

This solution does not work for me.

heikkihautala added a commit to henris42/security-check that referenced this issue Mar 14, 2016
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

5 participants