Open post Liang Qi @liangqi@mastodon.social · 13mo ago Replying to @liangqi@mastodon.social @sven Dataflow Forensics https://www.df-f.com/blog/ios17 https://www.df-f.com/blog/ios-17round2 https://www.df-f.com/blog/sptm3 @sven Just read https://oftc.catirclogs.org/asahi-dev/2024-07-14 . Nothing new from internet for this topic then. Thanks a lot for the effort from you and Asahi Linux project. oftc.catirclogs.org #asahi-dev on 2024-07-14 — irc logs at oftc.catirclogs.org
Open post Liang Qi @liangqi@mastodon.social · 13mo ago Replying to @sven@social.treehouse.systems <p>Looks like M4 support for <a href="https://social.treehouse.systems/tags/asahilinux" class="mention hashtag" rel="tag">#<span>asahilinux</span></a> is going be rather painful. We’re still focusing on upstreaming M1/M2 support but other people have been trying to bring up m1n1 on M4 and it looks like a few things changed:</p><p>When configuring a macho boot object we now get dropped into an environment where Apple’s SPTM is running in GL2 and we are supposed to talk to it from EL2 with MMU already enabled to setup pagetables. This neither works for Linux nor for running XNU under our hypervisor to reverse engineer the new hardware.</p><p>When configuring a raw boot object we’re dropped into EL2 with GL2 and most (all?) Apple specific extensions disabled. This is totally fine for Linux but we can’t run XNU under our hypervisor that we use to reverse engineer the hardware in this state. This also seems to be broken for >=15.2 right now because it probably isn’t very well tested 😕</p> @sven Based on https://support.apple.com/en-au/guide/security/sec8b776536b/web , Secure Page Table Monitor was added from M2. Apple Support Operating system integrity Apple’s operating systems use their purpose-built silicon-based hardware capabilities to help prevent exploitation as the system runs.
Open post Liang Qi @liangqi@mastodon.social · 13mo ago Replying to @sven@social.treehouse.systems @liangqi so? @sven Only found some materials about SPTM on iPhone/iOS, not sure whether they could help a bit or not. https://exploitreversing.com/wp-content/uploads/2025/02/exploit_reversing_04.pdf https://proteas.github.io/ios/2023/06/09/some-quick-and-discrete-notes-on-sptm.html exploitreversing.com