Skip to content

Instantly share code, notes, and snippets.

Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save argp/1db8611c0a1c06d6086673789e23cf9f to your computer and use it in GitHub Desktop.
Save argp/1db8611c0a1c06d6086673789e23cf9f to your computer and use it in GitHub Desktop.
Sandboxhelper log for the i11p 13.4.1 kernelcache
[+] Sandboxhelper | argp@CENSUS-labs.com
[+] Processed __text for additional functions
[+] _variables_populate() at: 0xfffffff008ee4824
[+] _profile_init() at: 0xfffffff008ee46c8
[+] _hook_policy_init() at: 0xfffffff008ede9d4
[+] _profile_create() at: 0xfffffff008ee4e90
[+] _the_real_platform_profile_data at: 0xfffffff00740f300
[+] _the_real_platform_profile_data size: 0xad62
[+] iOS version identified: 13.x+
[+] Sandbox operations found at: 0xfffffff007b65e88
[+] Number of sandbox operations: 145
[+] Starting parsing the platform profile: 2020-05-17 20:39:37.223843
[+] Number of sandbox operations nodes for the platform profile: 0xa07
[+] Platform profile message string found (at: 0xfffffff0074144ca): MAP_JIT requires sandboxing
[+] Platform profile message string found (at: 0xfffffff0074144ea): MAP_JIT requires the dynamic-codesigning entitlement
[+] Platform profile message string found (at: 0xfffffff00741823a): Unenforced EDS access violation
[+] Platform profile message string found (at: 0xfffffff0074182d2): Unenforced REVERSE EDS access violation
[+] Platform profile message string found (at: 0xfffffff007419132): container
[+] Platform profile message string found (at: 0xfffffff0074168aa): SiriInference
[+] Platform profile message string found (at: 0xfffffff00741681a): BulletinDistributor
[+] Platform profile message string found (at: 0xfffffff00741674a): Lockdown
[+] Platform profile message string found (at: 0xfffffff0074166e2): triald
[+] Platform profile message string found (at: 0xfffffff007416682): TCC
[+] Platform profile message string found (at: 0xfffffff0074164ba): Safari
[+] Platform profile message string found (at: 0xfffffff007414652): Photos
[+] Platform profile message string found (at: 0xfffffff007414662): PhotosCaches
[+] Platform profile message string found (at: 0xfffffff007414672): DCIM
[+] Platform profile message string found (at: 0xfffffff00741467a): adprivacyd
[+] Platform profile message string found (at: 0xfffffff00741468a): Shortcuts
[+] Platform profile message string found (at: 0xfffffff00741469a): CallHistory
[+] Platform profile message string found (at: 0xfffffff0074146aa): Health
[+] Platform profile message string found (at: 0xfffffff0074146ba): Voicemail
[+] Platform profile message string found (at: 0xfffffff0074146ca): Notes
[+] Platform profile message string found (at: 0xfffffff0074146d2): Messages
[+] Platform profile message string found (at: 0xfffffff0074146e2): IdentityServices
[+] Platform profile message string found (at: 0xfffffff0074146fa): pipelined
[+] Platform profile message string found (at: 0xfffffff007417e8a): WebClips
[+] Platform profile message string found (at: 0xfffffff00741470a): Mail
[+] Platform profile message string found (at: 0xfffffff007414712): AppStoreCache
[+] Platform profile message string found (at: 0xfffffff007414722): AppDataContainers
[+] Platform profile message string found (at: 0xfffffff007417e9a): AppBundles
[+] Platform profile message string found (at: 0xfffffff007417eaa): mis-profiles
[+] Platform profile variable found (at: 0xfffffff00741a052): FRONT_USER_HOME
[+] Parsing platform profile operations nodes: 2020-05-17 20:39:37.238240
[+] Platform profile operations nodes parsed: 2020-05-17 20:39:39.164797
[+] Platform profile saved at: i11p_13.4.1_17E262_kernelcache_platform_profile.sb
[+] Finished parsing the platform profile: 2020-05-17 20:39:53.648968
[+] _collection_init() at: 0xfffffff008ee4f68
[+] Found packed sandbox profiles (_the_real_collection_data) at: 0xfffffff00741a070
[+] Sandbox profiles discovered: 225 (at: 0xfffffff00741a076)
[+] Number of sandbox operations nodes: 0xcc6d
[+] Message string found (at: 0xfffffff007493bd2): Create a radar and set it as a blocker to rdar://problem/48527566
[+] Message string found (at: 0xfffffff007493ed2): To be removed with rdar://problem/36354098
[+] Message string found (at: 0xfffffff007498c9a): This rule is being removed in rdar://15713112 -- please report this violation to Sandbox_profiles | all
[+] Message string found (at: 0xfffffff00749a12a): rdar://56314535
[+] Message string found (at: 0xfffffff0074a0b52): iokit-open:process
[+] Message string found (at: 0xfffffff0074b5a5a): To be removed with rdar://problem/32876920
[+] Message string found (at: 0xfffffff0074beae2): THIS WILL NOT BE PERMITTED WITHOUT A SANDBOX/ENTITLEMENT CHANGE!
[+] Message string found (at: 0xfffffff0074bebca): PLEASE DISCUSS THIS WITH OS-SECURITY BEFORE MAKING CHANGES!
[+] Profile variable found (at: 0xfffffff0074c12f2): HOME
[+] Profile variable found (at: 0xfffffff0074c12fa): FRONT_USER_HOME
[+] Profile variable found (at: 0xfffffff0074c12da): PROCESS_TEMP_DIR
[+] Profile variable found (at: 0xfffffff0074c11aa): ENTITLEMENT:com.apple.security.ts.nano-paired-storage.subpath.read-only
[+] Profile variable found (at: 0xfffffff0074c12ca): ANY_UUID
[+] Profile variable found (at: 0xfffffff0074c11fa): ENTITLEMENT:com.apple.security.ts.nano-paired-storage.subpath.read-write
[+] Profile variable found (at: 0xfffffff0074c124a): ENTITLEMENT:com.apple.security.ts.nano-preference.read-only
[+] Profile variable found (at: 0xfffffff0074c128a): ENTITLEMENT:com.apple.security.ts.nano-preference.read-write
[+] Profile variable found (at: 0xfffffff0074c113a): ENTITLEMENT:com.apple.security.ts.ipc-posix-shm
[+] Profile variable found (at: 0xfffffff0074c10fa): ENTITLEMENT:com.apple.security.ts.ipc-posix-shm.read-only
[+] Profile variable found (at: 0xfffffff0074c1172): ENTITLEMENT:com.apple.security.ts.ipc-posix-sem
[+] Parsing operations nodes: 2020-05-17 20:39:54.756569
[+] Operations nodes parsed: 2020-05-17 20:54:54.068658
[+] Starting parsing profiles: 2020-05-17 20:54:54.267487
[+] Processing sandbox profile: AGXCompilerService
[+] Processing sandbox profile: ANECompilerService
[+] Processing sandbox profile: AVKitSharedPreferences
[+] Processing sandbox profile: AdSheet
[+] Processing sandbox profile: AirTraffic
[+] Processing sandbox profile: AnnotationKit.MigratorService
[+] Processing sandbox profile: ArchiveService
[+] Processing sandbox profile: AutoFillHelper
[+] Processing sandbox profile: BTServer
[+] Processing sandbox profile: BlueTool
[+] Processing sandbox profile: CFNetworkAgent
[+] Processing sandbox profile: CPLDiagnose
[+] Processing sandbox profile: CVMServer
[+] Processing sandbox profile: CacheDeleteAppContainerCaches
[+] Processing sandbox profile: CommCenter
[+] Processing sandbox profile: CoreSpotlightService
[+] Processing sandbox profile: CredentialProviderExtensionHelper
[+] Processing sandbox profile: DPSubmissionService
[+] Processing sandbox profile: DataActivation
[+] Processing sandbox profile: EscrowSecurityAlert
[+] Processing sandbox profile: FilesystemMetadataSnapshotService
[+] Processing sandbox profile: FontProviderLoader
[+] Processing sandbox profile: HeuristicInterpreter
[+] Processing sandbox profile: IDSCredentialsAgent
[+] Processing sandbox profile: IDSRemoteURLConnectionAgent
[+] Processing sandbox profile: IMDPersistenceAgent
[+] Processing sandbox profile: IMRemoteURLConnectionAgent
[+] Processing sandbox profile: IMTranscoderAgent
[+] Processing sandbox profile: IMTransferAgent
[+] Processing sandbox profile: ImageDecoder
[+] Processing sandbox profile: MIDIServer
[+] Processing sandbox profile: MTLCompilerService
[+] Processing sandbox profile: MetricMeasurementHelper
[+] Processing sandbox profile: MobileBackup
[+] Processing sandbox profile: MobileSlideShow
[+] Processing sandbox profile: PasteBoard
[+] Processing sandbox profile: Safari.History
[+] Processing sandbox profile: SafariBookmarksSyncAgent
[+] Processing sandbox profile: SafariCloudHistoryPushAgent
[+] Processing sandbox profile: SafariSafeBrowsing
[+] Processing sandbox profile: ScreenSharingServer
[+] Processing sandbox profile: ScreenTimeAgent
[+] Processing sandbox profile: ScreenshotService
[+] Processing sandbox profile: SensorKitALSHelper
[+] Processing sandbox profile: StreamingUnzipService
[+] Processing sandbox profile: UsageTrackingAgent
[+] Processing sandbox profile: VideoSubscriberAccountDeveloperService
[+] Processing sandbox profile: VideoSubscriberAccountPrivacyService
[+] Processing sandbox profile: accessoryd
[+] Processing sandbox profile: accountsd
[+] Processing sandbox profile: adservicesd
[+] Processing sandbox profile: adtrackingd
[+] Processing sandbox profile: afcd
[+] Processing sandbox profile: akd
[+] Processing sandbox profile: analyticsd
[+] Processing sandbox profile: aned
[+] Processing sandbox profile: appaudiod
[+] Processing sandbox profile: appconduitd
[+] Processing sandbox profile: appsso
[+] Processing sandbox profile: appstored
[+] Processing sandbox profile: apsd
[+] Processing sandbox profile: asd
[+] Processing sandbox profile: assetsd
[+] Processing sandbox profile: assistivetouchd
[+] Processing sandbox profile: avatarsd
[+] Processing sandbox profile: backboardd
[+] Processing sandbox profile: barcode_helper
[+] Processing sandbox profile: barcode_notification
[+] Processing sandbox profile: barcode_parser
[+] Processing sandbox profile: bulletindistributord
[+] Processing sandbox profile: businesschatd
[+] Processing sandbox profile: callservicesd
[+] Processing sandbox profile: cfprefsd
[+] Processing sandbox profile: ckdiscretionaryd
[+] Processing sandbox profile: classification-ui
[+] Processing sandbox profile: cloudphotod
[+] Processing sandbox profile: com.apple.AssetCacheLocatorService
[+] Processing sandbox profile: com.apple.GSSCred
[+] Processing sandbox profile: com.apple.WebKit.GPU
[+] Processing sandbox profile: com.apple.WebKit.Networking
[+] Processing sandbox profile: com.apple.WebKit.WebContent
[+] Processing sandbox profile: com.apple.assistant.assistantd
[+] Processing sandbox profile: com.apple.bird
[+] Processing sandbox profile: com.apple.captiveagent
[+] Processing sandbox profile: com.apple.cloudd
[+] Processing sandbox profile: com.apple.datadetectors.AddToRecentsService
[+] Processing sandbox profile: com.apple.homed
[+] Processing sandbox profile: com.apple.nehelper
[+] Processing sandbox profile: com.apple.nesessionmanager
[+] Processing sandbox profile: com.apple.networkserviceproxy
[+] Processing sandbox profile: com.apple.quicklook.QLThumbnailsService
[+] Processing sandbox profile: com.apple.rtcreportingd
[+] Processing sandbox profile: com.apple.sandboxd
[+] Processing sandbox profile: com.apple.siri.ClientFlow.ClientScripter
[+] Processing sandbox profile: com.apple.snhelper
[+] Processing sandbox profile: com.apple.tccd
[+] Processing sandbox profile: com.apple.tzlinkd
[+] Processing sandbox profile: com.apple.wirelessproxd
[+] Processing sandbox profile: contactsd
[+] Processing sandbox profile: container
[+] Processing sandbox profile: containermanagerd
[+] Processing sandbox profile: coreidvd
[+] Processing sandbox profile: coresymbolicationd
[+] Processing sandbox profile: ctkd
[+] Processing sandbox profile: dataaccessd
[+] Processing sandbox profile: datadetectors
[+] Processing sandbox profile: debugserver
[+] Processing sandbox profile: deferredmediad
[+] Processing sandbox profile: deleted
[+] Processing sandbox profile: devicecheckd
[+] Processing sandbox profile: devicedataresetd
[+] Processing sandbox profile: distnoted
[+] Processing sandbox profile: druid
[+] Processing sandbox profile: duetexpertd
[+] Processing sandbox profile: eapolclient
[+] Processing sandbox profile: fileproviderd
[+] Processing sandbox profile: findmydeviced
[+] Processing sandbox profile: fmfd
[+] Processing sandbox profile: fontservicesd
[+] Processing sandbox profile: ftp-proxy-embedded
[+] Processing sandbox profile: gamed
[+] Processing sandbox profile: geocorrectiond
[+] Processing sandbox profile: geod
[+] Processing sandbox profile: gputoolsd
[+] Processing sandbox profile: handwritingd
[+] Processing sandbox profile: healthcloudd
[+] Processing sandbox profile: healthd
[+] Processing sandbox profile: honeybeed
[+] Processing sandbox profile: iWorkXPC
[+] Processing sandbox profile: iapd
[+] Processing sandbox profile: identityservicesd
[+] Processing sandbox profile: imagent
[+] Processing sandbox profile: installd
[+] Processing sandbox profile: intents-helper
[+] Processing sandbox profile: iomfb_bics
[+] Processing sandbox profile: itunesstored
[+] Processing sandbox profile: kbd
[+] Processing sandbox profile: keyboard
[+] Processing sandbox profile: limitadtrackingd
[+] Processing sandbox profile: locationd
[+] Processing sandbox profile: lockdownd
[+] Processing sandbox profile: logd
[+] Processing sandbox profile: lsuseractivityd
[+] Processing sandbox profile: mDNSResponder
[+] Processing sandbox profile: maild
[+] Processing sandbox profile: mediaanalysisd
[+] Processing sandbox profile: medialibraryd
[+] Processing sandbox profile: mediaserverd
[+] Processing sandbox profile: message-filter
[+] Processing sandbox profile: metrickitd
[+] Processing sandbox profile: mobile-house-arrest
[+] Processing sandbox profile: mobile_storage_mounter
[+] Processing sandbox profile: mobile_storage_proxy
[+] Processing sandbox profile: mobileactivationd
[+] Processing sandbox profile: mobileassetd
[+] Processing sandbox profile: mstreamd
[+] Processing sandbox profile: nanomapscd
[+] Processing sandbox profile: navd
[+] Processing sandbox profile: nearbyd
[+] Processing sandbox profile: network-filter
[+] Processing sandbox profile: nfcd
[+] Processing sandbox profile: nlcd
[+] Processing sandbox profile: nointernet
[+] Processing sandbox profile: nsurlsessiond
[+] Processing sandbox profile: nsurlstoraged
[+] Processing sandbox profile: online-auth-agent
[+] Processing sandbox profile: otpaird
[+] Processing sandbox profile: parsecd
[+] Processing sandbox profile: passd
[+] Processing sandbox profile: personad
[+] Processing sandbox profile: pfd
[+] Processing sandbox profile: photoanalysisd
[+] Processing sandbox profile: pkd
[+] Processing sandbox profile: playground-devtools
[+] Processing sandbox profile: powerlogd
[+] Processing sandbox profile: printd
[+] Processing sandbox profile: proactiveeventtrackerd
[+] Processing sandbox profile: progressd
[+] Processing sandbox profile: ptpd
[+] Processing sandbox profile: quicklook-preview
[+] Processing sandbox profile: quicklook-thumbnail
[+] Processing sandbox profile: quicklookd
[+] Processing sandbox profile: racoon
[+] Processing sandbox profile: rapportd
[+] Processing sandbox profile: remotemanagementd
[+] Processing sandbox profile: replayd
[+] Processing sandbox profile: reversetemplated
[+] Processing sandbox profile: revisiond
[+] Processing sandbox profile: routined
[+] Processing sandbox profile: runningboardd
[+] Processing sandbox profile: securechanneld
[+] Processing sandbox profile: securityd
[+] Processing sandbox profile: securityuploadd
[+] Processing sandbox profile: seld
[+] Processing sandbox profile: sensorkitd
[+] Processing sandbox profile: sharingd
[+] Processing sandbox profile: signpost_notificationd
[+] Processing sandbox profile: silent-nse
[+] Processing sandbox profile: siriactionsd
[+] Processing sandbox profile: social-services
[+] Processing sandbox profile: softwareupdated
[+] Processing sandbox profile: streaming_zip_conduit
[+] Processing sandbox profile: studentd
[+] Processing sandbox profile: suggestd
[+] Processing sandbox profile: syncdefaultsd
[+] Processing sandbox profile: syslog_relay
[+] Processing sandbox profile: temporary-sandbox
[+] Processing sandbox profile: terminusd
[+] Processing sandbox profile: test-common
[+] Processing sandbox profile: testmanagerd
[+] Processing sandbox profile: tonelibraryd
[+] Processing sandbox profile: transitd
[+] Processing sandbox profile: trustd
[+] Processing sandbox profile: uiautomationd
[+] Processing sandbox profile: userfs_helper
[+] Processing sandbox profile: userfsd
[+] Processing sandbox profile: videosubscriptionsd
[+] Processing sandbox profile: voicememod
[+] Processing sandbox profile: vpn-plugins
[+] Processing sandbox profile: watchlistd
[+] Processing sandbox profile: wcd
[+] Processing sandbox profile: webinspectord
[+] Processing sandbox profile: wifiFirmwareLoader
[+] Processing sandbox profile: wifianalyticsd
[+] Processing sandbox profile: wifip2pd
[+] Sandboxhelper finished: 2020-05-17 22:07:19.326933
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment