From df2a8c1b31865d4dbf18d354d48413d6dc52b5ba Mon Sep 17 00:00:00 2001 From: Michael Woolweaver Date: Tue, 31 Jan 2017 01:17:42 -0600 Subject: [PATCH 1/2] edit /etc/fstab to remove nosuid on /private/var/ cause stashing. . . . --- yalu102/jailbreak.m | 1 + 1 file changed, 1 insertion(+) diff --git a/yalu102/jailbreak.m b/yalu102/jailbreak.m index 96d6368..daa0320 100644 --- a/yalu102/jailbreak.m +++ b/yalu102/jailbreak.m @@ -929,6 +929,7 @@ void exploit(void* btn, mach_port_t pt, uint64_t kernbase, uint64_t allprocs) chmod("/private/var/mobile/Library", 0777); chmod("/private/var/mobile/Library/Preferences", 0777); system("rm -rf /var/MobileAsset/Assets/com_apple_MobileAsset_SoftwareUpdate; touch /var/MobileAsset/Assets/com_apple_MobileAsset_SoftwareUpdate; chmod 000 /var/MobileAsset/Assets/com_apple_MobileAsset_SoftwareUpdate; chown 0:0 /var/MobileAsset/Assets/com_apple_MobileAsset_SoftwareUpdate"); + system("sed -i .bak 's/var hfs rw,nosuid,nodev/var hfs rw,nodev/' /etc/fstab"); system("(echo 'really jailbroken'; /bin/launchctl load /Library/LaunchDaemons/0.reload.plist)&"); WriteAnywhere64(bsd_task+0x100, orig_cred); sleep(2); From 5c7ce812ac6723429c3c438c4f49475cda641f77 Mon Sep 17 00:00:00 2001 From: Michael Woolweaver Date: Tue, 31 Jan 2017 01:27:03 -0600 Subject: [PATCH 2/2] remove second system(); --- yalu102/jailbreak.m | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/yalu102/jailbreak.m b/yalu102/jailbreak.m index daa0320..7d35965 100644 --- a/yalu102/jailbreak.m +++ b/yalu102/jailbreak.m @@ -928,8 +928,7 @@ void exploit(void* btn, mach_port_t pt, uint64_t kernbase, uint64_t allprocs) chmod("/private/var/mobile", 0777); chmod("/private/var/mobile/Library", 0777); chmod("/private/var/mobile/Library/Preferences", 0777); - system("rm -rf /var/MobileAsset/Assets/com_apple_MobileAsset_SoftwareUpdate; touch /var/MobileAsset/Assets/com_apple_MobileAsset_SoftwareUpdate; chmod 000 /var/MobileAsset/Assets/com_apple_MobileAsset_SoftwareUpdate; chown 0:0 /var/MobileAsset/Assets/com_apple_MobileAsset_SoftwareUpdate"); - system("sed -i .bak 's/var hfs rw,nosuid,nodev/var hfs rw,nodev/' /etc/fstab"); + system("rm -rf /var/MobileAsset/Assets/com_apple_MobileAsset_SoftwareUpdate; touch /var/MobileAsset/Assets/com_apple_MobileAsset_SoftwareUpdate; chmod 000 /var/MobileAsset/Assets/com_apple_MobileAsset_SoftwareUpdate; chown 0:0 /var/MobileAsset/Assets/com_apple_MobileAsset_SoftwareUpdate"; sed -i .bak 's/var hfs rw,nosuid,nodev/var hfs rw,nodev/' /etc/fstab"); system("(echo 'really jailbroken'; /bin/launchctl load /Library/LaunchDaemons/0.reload.plist)&"); WriteAnywhere64(bsd_task+0x100, orig_cred); sleep(2);