2 posts tagged ‘Extended Attributes’
TCC and Gatekeeper Bypasses
mjtsai,
Wojciech Reguła (September 2021, tweet): I was looking for code injection opportunities that may allow reaching TCC bypasses. My simple shell script discovered a potential victim - /System/Library/CoreServices/Applications/Directory Utility.app. It had (and has) the following private TCC entitlement[…] This entitlement allows the Directory Utility to modify the user’s records stored in the /var/db/dslocal/nodes directory. […] […]
Rescuing Files From Classic Mac OS...with Swift
Jordan Rose: The biggest benefits of doing this project in Swift are very similar to what the benefits would have been for using C++, back in the 90s, but with even more safety. Take directory walking. In C, this looks something like the following: FSIterator *iter; OSStatus err = FSOpenIterator(&directory, kFSIterateFlat, &iter); if (err != […]