ios 5 hardening configuration guide - australian dod intelligence & security
TRANSCRIPT
-
8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security
1/72
Icxfj 8438
EKX nTKL \K]FJ! nTJKOM COL nTCL X]OONO@ nKV =/3 KX JN@JMX
nKV Jcxlmono` Fkoe`}xc|nko @}nlm
-
8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security
2/72
nKV Jcxlmono` Fkoen`}xc|nko@}nlmEkx nTkl \k}fj! nTjkom col nTcl lmunfmv x}oono` nKV =/3 kx jn`jmx/
Icxfj 8438
Chk}| |jnv @}nlm
\jnv }nlm txkunlmv nov|x}f|nkov col |mfjons}mv ekx C}v|xcanco kumxoimo| c`mofnmv |k
jcxlmo |jm vmf}xn|~ ke nKV = lmunfmv/
Nitamimo|no` |jm |mfjons}mv col vm||no`v ek}ol no |jnv lkf}imo| fco ceemf| v~v|mi
e}of|nkocan|~! col ic~ ok| hm cttxktxnc|m ekx mumx~ }vmx kx mounxkoimo|/
Jkpmumx c`mofnmv pnvjno` |k lneemx exki |jm icolc|kx~ fko|xkav vtmfnenml no |jnv `}nlm i}v|
ok|m |jc| |jm txkl}f| pnaa ok ako`mx ecaa }olmx |jm muca}c|ml fkoen`}xc|nko/ No |jmvm fcvmv!
c`mofnmv vjk}al vmmg cttxkuca ekx oko)fkitancofm exki |jmnx c`mof~ jmcl col+kx
cffxmln|c|nko c}|jkxn|~ |k caakp ekx |jm ekxica cffmt|cofm ke |jm xnvgv noukauml/
nKV Muca}c|nko
Cv tmx |jm Muca}c|ml Txkl}f| Anv|! |jm Lmemofm Vn`ocav Lnxmf|kxc|m *LVL. jcv ek}ol Cttam
nKV lc|c txk|mf|nko facvvmv C col H |k hm v}n|cham ekx lkpo`xclno` |jm jcolano` ke
TXK\MF\ML noekxic|nko |k |jc| ke ]ofacvvnenml/ \jnv lkf}imo| txkunlmv }nlcofm ko tkanf~
|jc| mn|jmx i}v| hm moekxfml kx nv c| |jm c`mof~v lnvfxm|nko/
nKV col |jm C}v|xcanco @kumxoimo| Noekxic|nko Vmf}xn|~ Ico}ca
\jnv `}nlm xmeamf|v tkanf~ vtmfnenml no |jm NVI/ Ok| caa NVI xms}nxmimo|v fco f}xxmo|a~ hm
nitamimo|ml ko nKV = lmunfmv/ No |jmvm fcvmv! xnvg in|n`c|nko imcv}xmv cxm txkunlml *vmm
Cttmolnz M./
Fjct|mx Vnz txkunlmv xmfkiimolml tcvvfklm vm||no`v ekx nKV lmunfmv/ \jnv clunfm jcv
hmmo lmumaktml hcvml ko co cvvmvvimo| ke vmf}xn|~ xnvgv xmac|ml vtmfnenfcaa~ |k nKV =! col
|cgmv txmfmlmofm kumx |jm oko)tac|ekxi vtmfnenf clunfm no |jm NVI/
Chk}| |jm Lmemofm Vn`ocav Lnxmf|kxc|m
Cv |jm Fkiikopmca|j c}|jkxn|~ ko |jm vmf}xn|~ ke noekxic|nko! |jm Lmemofm Vn`ocavLnxmf|kxc|m txkunlmv }nlcofm col k|jmx cvvnv|cofm |k C}v|xcanco emlmxca col v|c|m c`mofnmv
ko ic||mxv xmac|no` |k |jm vmf}xn|~ col no|m`xn|~ ke noekxic|nko/
Ekx ikxm noekxic|nko! `k |k ppp/lvl/`ku/c}/
3 q L m e m o f m V n ` o c a v L n x m f | k x c | m
http://www.dsd.gov.au/http://www.dsd.gov.au/ -
8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security
3/72
C}lnmofm
\jnv `}nlm nv ekx }vmxv col clinonv|xc|kxv ke nKV = kx ac|mx lmunfmv/ \jmvm lmunfmv
nofa}lm |jm nTkl \k}fj! nTjkom col nTcl/
\k }vm |jnv `}nlm! xmclmxv vjk}al hm2
ecinancx pn|j hcvnf om|pkxgno` fkofmt|v
co mztmxnmofml Icf KV Z kx Pnolkpv clinonv|xc|kx
ecinancx pn|j |jm Icf KV Z kx Pnolkpv no|mxecfm/
Tcx|v ke |jnv `}nlm xmemx |k emc|}xmv |jc| xms}nxm |jm mo`c`mimo| ke |jm |mfjonfca
xmvk}xfmv ke c`mof~ |mamfkii}onfc|nkov fcxxnmxv! enxmpcaa umolkxv! kx Ikhnam Lmunfm
Icoc`mimo| *ILI. umolkxv/ Pjnam mumx~ meekx| jcv hmmo iclm |k mov}xm fko|mo|
noukauno` |jmvm |jnxl tcx|~ txkl}f|v nv fkxxmf| c| |jm |nim ke pxn|no`! c`mofnmv vjk}al
capc~v fjmfg pn|j |jmvm umolkxv pjmo tacoono` co nitamimo|c|nko/
Clln|nkocaa~! imo|nko ke |jnxl tcx|~ txkl}f|v nv ok| c vtmfnenf molkxvmimo| ke |jc|
umolkx kumx cok|jmx7 |jm~ cxm imo|nkoml cv naa}v|xc|num mzcitamv koa~/
Vkim nov|x}f|nkov no |jnv `}nlm cxm fkitamz! col ne nitamimo|ml nofkxxmf|a~ fk}al
fc}vm vmxnk}v meemf|v |k |jm lmunfm! |jm om|pkxg col |jm c`mof~v vmf}xn|~ tkv|}xm/
\jmvm nov|x}f|nkov vjk}al koa~ hm }vml h~ mztmxnmofml clinonv|xc|kxv! col vjk}al
hm }vml no fkob}of|nko pn|j |jkxk}`j |mv|no`/
Enocaa~! ekx e}x|jmx facxnenfc|nko kx cvvnv|cofm! C}v|xcanco @kumxoimo| N\ Vmf}xn|~
Clunvkxv fco fkov}a| |jm Lmemofm Vn`ocav Lnxmf|kxc|m h~ micnano`
lvl/cvvnv|Dlmemofm/`ku/c} kx fcaano` |jm LVL F~hmx Jk|anom ko 3644 F^HMX3*3644 8>8 603./
8 q L m e m o f m V n ` o c a v L n x m f | k x c | m
mailto:[email protected]:[email protected] -
8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security
4/72
Pjc| nv no |jnv @}nlm
\jnv `}nlm cniv |k cvvnv| no vmf}xno` nKV = lmunfmv/ N| lkmv ok| c||mit| |k txkunlm
fkitxmjmovnum noekxic|nko chk}| vmf}xno` fkit}|mxv col vmxumxv/
\jnv }nlm nofa}lmv |jm ekaakpno` fjct|mxv2
Fjct|mx Kom No|xkl}f|nko |k Ikhnam Lmunfm Vmf}xn|~ Cxfjn|mf|}xm[[[[[[[[[[[[ 0Fjct|mx \pk Mofx~t|nko no nKV[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[ 30Fjct|mx \jxmm Vmf}xn|~ Emc|}xmv col Fctchnan|nmv [[[[[[[[[[[[[[[[[[[[[[[[ 86Fjct|mx Ek}x Lmtak~no` nKV Lmunfmv [[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[ 8>Fjct|mx Enum V}``mv|ml Tkanfnmv [[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[ 6:Fjct|mx Vnz Xmfkiimolml Lmunfm Txkenam Vm||no`v[[[[[[[[[[[[[[[[[[[[[
-
8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security
5/72
]vno` |jnv @}nlm
\jm ekaakpno` anv| fko|cnov v}``mv|nkov ekx }vno` |jnv `}nlm2
Xmcl |jm `}nlm no n|v mo|nxm|~/ V}hvms}mo| vmf|nkov h}nal ko noekxic|nko col
xmfkiimolc|nkov lnvf}vvml no txnkx vmf|nkov/
\jm nov|x}f|nkov no |jnv `}nlm vjk}al capc~v hm |mv|ml no c oko)ktmxc|nkoca
mounxkoimo| hmekxm lmtak~imo|/ \jnv oko)ktmxc|nkoca mounxkoimo| vjk}al
vni}ac|m! cv ecx cv tkvvnham! |jm mounxkoimo| pjmxm |jm lmunfm pnaa hm
lmtak~ml/
\jnv noekxic|nko nv no|molml ekx ikhnam lmunfmv x}oono` nKV =/ Hmekxm
vmf}xma~ fkoen`}xno` c lmunfm! lm|mxinom pjc| e}of|nkov |jc| lmunfm ommlv |k
tmxekxi! col ctta~ vmf}xn|~ fkoen`}xc|nkov |k |jm lmunfm kx v}ttkx|no`
noexcv|x}f|}xm pjmxm cttanfcham/
C vmf}xn|~ fjmfganv| nv txkunlml no |jm Cttmolnz |k |xcfg col xmfkxl |jm
fjkvmo vm||no`v ekx mcfj vmf}xn|~ |cvg col ok|m pjnfj vm||no`v cxm fjco`ml |k
vmf}xm |jm nKV lmunfm/ \jnv noekxic|nko fco hm jmate}a pjmo lmumaktno` co
c`mof~ vmf}xn|~ v|colcxl/
Nitkx|co|2 Co~ lmunc|nko exki |jnv `}nlm vjk}al hm muca}c|ml |k lm|mxinom vmf}xn|~
xnvgv col |cgm imcv}xmv |k ikon|kx kx in|n`c|m |jkvm xnvgv/
Ok|m2 Lkf}imo|c|nko col clunfm nv tmxnklnfcaa~ }tlc|ml h~ hk|j LVL col xmamuco|
umolkxv/ LVL xmfkiimolv |jc| c`mofnmv xmunmp xmunvml jmat tc`mv col ompmln|nkov ke }nlmv/
@m||no` Clln|nkoca Noekxic|nko
Ekx vmf}xn|~)vtmfnenf noekxic|nko! fkov}a| |jm ekaakpno`2
C}v|xcanco @kumxoimo|Noekxic|nko Vmf}xn|~ Ico}ca
j||t2++ppp/lvl/`ku/c}+noekvmf+NVI/j|i LVL txkunlmv noekxic|nko ko
vmf}xma~ fkoen`}xno` txktxnm|cx~ col ktmo vk}xfm vke|pcxm |k C}v|xcanco
@kumxoimo| v|colcxlv/ Clln|nkoca noekxic|nko ekx C}v|xcanco kumxoimo|c`mofnmv! fko|xcf|kxv col NXCT cvvmvvkxv! nv cucnacham exki LVLv
KoVmf}xm tkx|ca j||tv2++imihmxv/kovmf}xm/`ku/c}
OVC vmf}xn|~ fkoen`}xc|nko }nlmv
*j||t2++ppp/ovc/`ku+nc+in|n`c|nko[`}nlcofm+vmf}xn|~[fkoen`}xc|nko[`}nlmv+nol
mz/vj|ia.\jm ]V Oc|nkoca Vmf}xn|~ C`mof~ *OVC. txkunlmv c pmca|j ke
noekxic|nko ko vmf}xma~ fkoen`}xno` txktxnm|cx~ col ktmo vk}xfm vke|pcxm/
ONV\ Vmf}xn|~ Fkoen`}xc|nko Fjmfganv|v Xmtkvn|kx~
*j||t2++pmh/oul/onv|/`ku+unmp+oft+xmtkvn|kx~. nv |jm ]V Oc|nkoca Nov|n|}|m ke
< q L m e m o f m V n ` o c a v L n x m f | k x c | m
http://www.dsd.gov.au/infosec/ism.htmhttps://members.onsecure.gov.au/http://www.nsa.gov/ia/mitigation_guidance/security_configuration_guides/index.shtmlhttp://www.nsa.gov/ia/mitigation_guidance/security_configuration_guides/index.shtmlhttp://web.nvd.nist.gov/view/ncp/repositoryhttp://web.nvd.nist.gov/view/ncp/repositoryhttp://www.nsa.gov/ia/mitigation_guidance/security_configuration_guides/index.shtmlhttp://www.nsa.gov/ia/mitigation_guidance/security_configuration_guides/index.shtmlhttps://members.onsecure.gov.au/http://www.dsd.gov.au/infosec/ism.htm -
8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security
6/72
V|colcxlv col \mfjokak`~ *ONV\. xmtkvn|kx~ ekx vmf}xn|~ fkoen`}xc|nko
fjmfganv|v/
LNVC Vmf}xn|~ \mfjonfca Nitamimo|c|nko @}nlm
*j||t2++ppp/lnvc/ina+Vmxunfmv+Om|pkxg)Vmxunfmv+Uknfm+VH])Uknfm+Tkanf~)
@}nlcofm)T}hanfc|nkov. nv |jm ]V Lmemovm Noekxic|nko V~v|miv C`mof~*LNVC. `}nlm ekx nitamimo|no` vmf}xm `kumxoimo| om|pkxgv/ C ]V
Lmtcx|imo| ke Lmemovm *LkL. TGN Fmx|nenfc|m nv xms}nxml |k cffmvv |jnv
noekxic|nko/
FNV Hmofjicxg col Vfkxno` \kka *j||tv2++hmofjicxgv/fnvmf}xn|~/kx`+mo)
}v+;xk}|m9lkpoakclv/i}a|nekxi.\jm Fmo|mx ekx No|mxom| Vmf}xn|~
hmofjicxg col vfkxno` |kka nv }vml |k mv|chanvj FNV hmofjicxgv/
Ekx e}x|jmx noekxic|nko fkov}a| |jm ekaakpno` xmvk}xfmv2
Cttam Txkl}f| Vmf}xn|~ pmhvn|m *ppp/cttam/fki+v}ttkx|+vmf}xn|~+.cffmvv |k vmf}xn|~ noekxic|nko col xmvk}xfmv! nofa}lno` vmf}xn|~ }tlc|mvcol ok|nenfc|nkov/
Lmumaktmx lkf}imo|c|nko nv cucnacham exki j||t2++lmumaktmx/cttam/fkiXm`nv|mxml lmumaktmxv `m| cffmvv |k PPLF vmvvnko unlmkv col TLElkf}imo|v/ Exmm xm`nv|xc|nko caakpno` cffmvv |k lkf}imo|c|nko collmumaktmx VLG nv cucnacham/
Cttam Txkl}f| Vmf}xn|~ Icnano` Anv|v pmhvn|m*j||t2++anv|v/cttam/fki+icnaico+anv|noek+vmf}xn|~)cook}ofm.icnano` anv|v ekx
fkii}onfc|no` h~ micna pn|j k|jmx clinonv|xc|kxv chk}| vmf}xn|~ ok|nenfc|nkovcol cook}ofmimo|v/
nTjkom! nTcl col nTkl \k}fj ico}cav *j||t2++v}ttkx|/cttam/fki+ico}cav. TLE umxvnkov ke caa txkl}f| lkf}imo|c|nkov/
nTjkom! nTcl col nTkl \k}fj }vmx `}nlmv cucnacham cv J\IA= pmhcttanfc|nkov |jc| pkxg keeanom ko |jm lmunfmv *j||t2++jmat/cttam/fki+ntjkom!j||t2++jmat/cttam/fki+ntcl! j||t2++jmat/cttam/fki+ntkl|k}fj./
nTjkom no H}vnomvv pmhvn|m*j||t2++ppp/cttam/fki+ntjkom+h}vnomvv+no|m xc|nko+.xmemxmofm tkno| ekx caamo|mxtxnvm xmac|ml lkf}imo|c|nko ekx nKV no|m`xc|nko/
Cttam Lmumaktmx Pmhvn|m *j||t2++lmumaktmx/cttam/fki. xm`nv|xc|nko xms}nxml!fko|cnov mz|movnum noekxic|nko ko mo|mxtxnvm lmtak~imo| ke nKV lmunfmv!lmumaktmx lkf}imo|c|nko ko CTNv col txk`xciino` |mfjons}mv ekx hk|j pmhhcvml col oc|num nKV cttanfc|nkov/
nKV Mo|mxtxnvm Lmtak~imo| Cx|nfamv *j||t2++lmumaktmx/cttam/fki+anhxcx~+nkv+. txkunlmv c lm|cnaml xmemxmofm ko c ucxnm|~ ke mo|mxtxnvm lmtak~imo| |jmimv/\jmvm fco hm ek}ol no |jm nKV Lmumaktmx Anhxcx~ }olmx |jm Om|pkxgno` %No|mxom| Mo|mxtxnvm Lmtak~imo| |ktnf/
= q L m e m o f m V n ` o c a v L n x m f | k x c | m
http://www.disa.mil/Services/Network-Services/Voice/SBU-Voice/Policy-Guidance-Publicationshttp://www.disa.mil/Services/Network-Services/Voice/SBU-Voice/Policy-Guidance-Publicationshttps://benchmarks.cisecurity.org/en-us/?route=downloads.multiformhttps://benchmarks.cisecurity.org/en-us/?route=downloads.multiformhttp://www.apple.com/support/security/http://developer.apple.com/http://lists.apple.com/mailman/listinfo/security-announcehttp://support.apple.com/manualshttp://help.apple.com/iphonehttp://help.apple.com/ipadhttp://help.apple.com/ipodtouchhttp://www.apple.com/iphone/business/integration/http://developer.apple.com/http://developer.apple.com/library/ios/http://developer.apple.com/library/ios/http://developer.apple.com/http://www.apple.com/iphone/business/integration/http://help.apple.com/ipodtouchhttp://help.apple.com/ipadhttp://help.apple.com/iphonehttp://support.apple.com/manualshttp://lists.apple.com/mailman/listinfo/security-announcehttp://developer.apple.com/http://www.apple.com/support/security/https://benchmarks.cisecurity.org/en-us/?route=downloads.multiformhttps://benchmarks.cisecurity.org/en-us/?route=downloads.multiformhttp://www.disa.mil/Services/Network-Services/Voice/SBU-Voice/Policy-Guidance-Publicationshttp://www.disa.mil/Services/Network-Services/Voice/SBU-Voice/Policy-Guidance-Publications -
8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security
7/72
Cttam Lnvf}vvnkov pmhvn|m *j||t2++lnvf}vvnkov/cttam/fki.c pc~ |k vjcxms}mv|nkov! gokpaml`m! col clunfm pn|j k|jmx clinonv|xc|kxv/
Cttam Icnano` Anv|v pmhvn|m *j||t2++ppp/anv|v/cttam/fki. v}hvfxnhm |k
icnano` anv|v vk c`mofnmv fco fkii}onfc|m pn|j k|jmx clinonv|xc|kxv }vno`micna/
Ktmo Vk}xfm pmhvn|m *j||t2++lmumaktmx/cttam/fki+ktmovk}xfm+.cffmvv |kLcxpno ktmo vk}xfm fklm! lmumaktmx noekxic|nko col ECSv/
5 q L m e m o f m V n ` o c a v L n x m f | k x c | m
http://discussions.apple.com/http://www.lists.apple.com/http://developer.apple.com/opensource/http://developer.apple.com/opensource/http://www.lists.apple.com/http://discussions.apple.com/ -
8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security
8/72
Fjct|mx Kom
No|xkl}f|nko |k Ikhnam Lmunfm Vmf}xn|~
Cxfjn|mf|}xm
Ikhnam lmunfmv ecfm |jm vcim vmf}xn|~ fjcaamo`mv cv |xcln|nkoca lmvg|kt fkit}|mxv!
h}| |jmnx ikhnan|~ imcov |jm~ cxm cavk mztkvml |k c vm| ke xnvgv s}n|m lneemxmo| |k
|jkvm ke c fkit}|mx no c enzml akfc|nko/
\jnv fjct|mx txkunlmv |jm tacoono` v|mtv col cxfjn|mf|}xm fkovnlmxc|nkov omfmvvcx~
|k vm| }t c vmf}xm mounxkoimo| ekx ikhnam lmunfmv/ I}fj ke |jm fko|mo| no |jnv
fjct|mx nv tac|ekxi c`okv|nf! h}| vkim lm|cna nv pxn||mo |k vtmfnenf emc|}xmv cucnacham no
nKV =/ Ok| caa ke |jmvm kt|nkov lnvf}vvml pnaa hm cttanfcham |k caa mounxkoimo|v/
C`mofnmv omml |k |cgm no|k cffk}o| |jmnx kpo mounxkoimo| col fkovnlmx |jmnx
cffmt|cham amuma ke xmvnl}ca xnvg/
Cvv}it|nkov
\jnv fjct|mx icgmv vkim hcvnf cvv}it|nkov xm`cxlno` |jm tmxucvnum |jxmc|
mounxkoimo|2
c| vkim tkno|! |jmxm pnaa hm ok om|pkxg fkoomf|nko txmvmo|
caa xclnc|ml fkii}onfc|nko exki |jm lmunfm jcv |jm tk|mo|nca |k hm ikon|kxml
caa fkoumo|nkoca akfc|nko! uknfm col VIV+IIV fkii}onfc|nkov cxm ko co
novmf}xm fjcooma3
3 Ca|jk}`j @VI ekx mzcitam nv mofx~t|ml ko vkim fcxxnmx om|pkxgv! n| nv ok| mofx~t|ml ko caa! col vkim ke |jm @VI mofx~t|nko ca`kxn|jiv v}fj
cv C=+3 ko 8@ om|pkxgv cxm u}aomxcham |k c||cfg pn|j xcnohkp |chamv/ Pn|j iklmxc|m xmvk}xfmv! n| nv cavk emcvnham |k mzmf}|m c IN\I c||cfg
c`cnov| @VI uknfm col jcum |jm IN\I |maa fanmo| lmunfmv |k lxkt co~ @VI mofx~t|nko/
0 q L m e m o f m V n ` o c a v L n x m f | k x c | m
-
8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security
9/72
fmx|cno noexcv|x}f|}xm v}ttkx|no` ikhnam lmunfmv fco hm |x}v|ml
fcxxnmx noexcv|x}f|}xm fcook| capc~v hm |x}v|ml cv vmf}xm no caa fk}o|xnmv/
Lmunfm Vmf}xn|~ kee |jm Om|pkxg
Kofm c lmunfm nv kee |jm lc|c om|pkxg! |jmo txk|mf|nko ke lc|c ko |jm lmunfm nvlm|mxinoml h~ jkp |jm lmunfm nitamimo|v lc|c txk|mf|nko akfcaa~/ \jmxm fco hm ok
xmemxxca |k c vmxumx ekx tkanf~! kx co~ xmik|m pntm fkiicol! ne |jmxm nv ok om|pkxg
txmvmo|/
Pjmo kee |jm om|pkxg! |jm vmf}xn|~ ke |jm lmunfm nv lm|mxinoml h~2
pjc| tkanf~ jcv hmmo fcfjml akfcaa~ exki Mzfjco`m Cf|numV~of *MCV. kx
Fkoen`}xc|nko Txkenamv
pjc| |jm vmf}xn|~ vm||no`v vm| akfcaa~ ko |jm lmunfm cxm
|jm lmunfmv fx~t|k`xctjnf fctchnan|nmv
|jm fkxxmf| }vm ke enam txk|mf|nko facvvmv col gm~fjcno h~ Cttv |jm v|xmo`|j ke |jm lmunfm tcvvfklm/
Lmunfm Vmf}xn|~ ko |jm Om|pkxg
\jm `momxca txnofntam |jc| cttanmv ekx caa lc|c pjmo |jm lmunfm nv ko c om|pkxg nv |jc|
pjmxmumx tkvvnham! caa om|pkxg |xceenf vjk}al hm mofx~t|ml! ok|no` |jc| caa facvvnenml
om|pkxg |xceenf i}v| hm mofx~t|ml cv tmx |jm Fx~t|k`xctjnf E}olcimo|cavvmf|nko ke
|jm NVI/ \jnv nv ok| imxma~ cfjnmuml h~ |}xono` ko c Unx|}ca Txnuc|m Om|pkxg *UTO.
ekx caa |xceenf/ \~tnfcaa~ |jnv noukaumv }vno` c inz|}xm ke2
VVA |k mofx~t| fkoomf|nkov |k vtmfnenf jkv|v v}fj cv icna vmxumxv kxicoc`mimo| vmxumxv |jc| omml |k hm jn`ja~ xmcfjcham
VVA ekx co~ |xceenf |jc| jcv vmovn|num lc|c ko n|
c UTO ekx ikxm `momxca no|xcom| cffmvv
PTC8 pn|j MCT)\AV cv c inoni}i ekx Pn)En vmf}xn|~
:48/3Z c}|jmo|nfc|nko ko Pn)En om|pkxgv fkihnoml pn|j Om|pkxg Cffmvv
Fko|xkav |k fkitcx|imo|canvm Pn)En cffmvv |k lmenoml vmf}xn|~ lkicnov
c f}v|ki! c}|jmo|nfc|ml CTO8 no fkob}of|nko pn|j fcxxnmxv |k
fkitcx|imo|canvm ikhnam lc|c |xceenf |k lmenoml vmf}xn|~ lkicnov
lc|c c| xmv| mofx~t|nko ko ikhnam lmunfmv col |xcovtkx| vmf}xn|~/
Cttam T}vj Ok|nenfc|nko Vmxunfm
Ico~ Cttv col vmxunfmv cvvkfnc|ml pn|j nKV lmunfmv |cgm cluco|c`m ke |jm Cttam
T}vj Ok|nenfc|nko Vmxunfm *CTOV./ CTOV caakpv Cttv |k hm vmo| vicaa ok|nenfc|nkov!
v}fj cv }tlc|no` |jm hcl`m ko co nfko! tac~no` co camx| |kom! kx lnvtac~no` c vjkx|
|mz| imvvc`m/
Mzcitamv ke Cttv |jc| ic~ }vm CTOV nofa}lm t}vj micna ok|nenfc|nko! Ikhnam Lmunfm
Icoc`mimo| *ILI. vmxumxv! col nKV fanmo|+vmxumx cttanfc|nkov |jc| cxm cham |k
mzmf}|m no |jm hcfg`xk}ol *m/`/ UkNT Cttv! v|xmcino` c}lnk Cttv! kx Cttv |jc| omml
8 Cffmvv Tkno| Ocim *CTO. Vmm |jm c`mof~ |mamfkii}onfc|nkov fcxxnmx ekx ikxm lm|cna/
: q L m e m o f m V n ` o c a v L n x m f | k x c | m
-
8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security
10/72
|k hm akfc|nko cpcxm./ ILI vmxumxv vmol c xms}mv| |k |jm ILI c`mo| ko |jm lmunfm
|k tjkom jkim }vno` CTOV/ \jm lmunfm col ILI vmxumx |jmo mzfjco`m ZIA
s}mxnmv col xmvtkovmv novnlm co VVA |}ooma/
En`}xm 32 Cttam T}vj Ok|nenfc|nko Vmxunfm
N| pnaa hm omfmvvcx~ |k vm| cttxktxnc|m enxmpcaa x}amv |k mocham CTOV/ Xmemx |k
Cttmolnz E ekx noekxic|nko ko tkx|v col vmxunfmv/
Lc|c Xkcino`
Lc|c xkcino` `momxcaa~ xmemxv |k c txkfmvv h~ pjnfj c lmunfm exki c vtmfnenf fcxxnmxv
om|pkxg fco |cgm cluco|c`m ke |jm lc|c vmxunfm ko c lneemxmo| fcxxnmx/ Ekx mzcitam c
lmunfm pn|j c VNI exki co C}v|xcanco fcxxnmx! hmno` }vml no |jm ]V ko c ]V fcxxnmxv
om|pkxg |cgmv cluco|c`m ke |jm fcxxnmxv lc|c noexcv|x}f|}xm/ Ok|m |jc| xkcino` omml
ok| hm no|mxoc|nkoca7 no vkim fk}o|xnmv fcxxnmxv pn|j lneemxmo| fkumxc`m cxmcv ic~
caakp vkim lc|c xkcino` |k cuknl noexcv|x}f|}xm l}tanfc|nko/
\jmxm cxm |pk icno xnvgv cvvkfnc|ml pn|j lc|c xkcino`/
Pjmo xkcino` no|mxoc|nkocaa~! |jmxm cxm hk|j nitanml col cf|}ca akpmx amumav
ke |x}v| pn|j |jm amuma ke mcumvlxkttno` col |xceenf coca~vnv kff}xxno` ko |jm
ekxmn`o om|pkxg/ Cv vkko cv |xceenf `kmv no|mxoc|nkoca! n| nv ok ako`mx v}hbmf| |k
|jm txnucf~ col fkov}imx txk|mf|nko xms}nxmimo|v |jc| ctta~ |k t}xma~
lkimv|nf fkii}onfc|nkov no |jm jkv| fk}o|x~/ N| nv nofkxxmf| |k cvv}im |jc|
|jm xn`j|v txk|mf|no` nolnunl}cav txnucf~ cxm }onekxi no|mxoc|nkocaa~/
Ne lc|c xkcino` nv vpn|fjml kee ekx fkv| icoc`mimo|! |jmo |jm lmunfm nv kee
|jm `xnl ekx icoc`mimo| col ikon|kxno` fkovkamv v}fj cv MCV! ILI! kx
nFak}lv Enol I~ nTjkom/ No vkim fcvmv! txnuc|m CTO lc|c fco hm
txmvmxuml cfxkvv no|mxoc|nkoca hk}olcxnmv hmfc}vm ke fkiimxfnca
cxxco`mimo|v hm|pmmo fcxxnmxv/ Ok|m |jc| lc|c fkv|v fco v|naa hm jn`j/
> q L m e m o f m V n ` o c a v L n x m f | k x c | m
-
8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security
11/72
Cttv
Kom ke |jm icbkx c||xcf|nkov ke |jm nKV tac|ekxi nv |jm cucnachnan|~ ke c pnlm xco`m ke
Cttv col mcvm ke Ctt lmumaktimo|/ Cv k}|anoml no LVLv V|xc|m`nmv |k In|n`c|m
\cx`m|ml F~hmx No|x}vnkov! LVL xmfkiimolv |jc| koa~ cttanfc|nkov |jc| cxm xms}nxml
vjk}al hm nov|caaml/ \jmxm cxm c o}ihmx ke pc~v |k txkf}xm col akcl cttanfc|nkovko|k co nKV lmunfm/
Ctt V|kxm
\jm Ctt V|kxm nv jkv|ml col f}xc|ml h~ Cttam! col nv ekf}vml ko icvv)icxgm|
lnv|xnh}|nko ke tcnl col exmm cttanfc|nkov/ \jmvm Cttv cxm akclml |k c lmunfm mn|jmx
kumx)|jm)cnx *K\C. exki |jm Ctt V|kxm n|vmae! kx unc |jm n\}omv cttanfc|nko ko |jm jkv|
fkit}|mx ekx |jm nKV lmunfm/
Cttam icno|cnov lnvfxm|nkocx~ fko|xka ke f}xc|no` Ctt V|kxm fko|mo|! col fco xmikum
cttanfc|nkov ekx c ucxnm|~ ke xmcvkov/ LVL xmfkiimolv |jc| Cttv cxm |mv|ml colcttxkuml txnkx |k }vm pn|jno co c`mof~/
Ca|jk}`j Ctt V|kxm cttanfc|nkov fkim exki c f}xc|ml mounxkoimo| col |jm x}o|nim
mounxkoimo| |jm Cttv mzmf}|m no nv c xmac|numa~ jcxlmoml kom! c`mofnmv vjk}al
cvvmvv |jm xnvgv cvvkfnc|ml pn|j caakpno` }oxmv|xnf|ml }vmx)non|nc|ml nov|caac|nko ke
Cttv/ Vkim xnvgv |jc| omml |k hm fkovnlmxml cxm2
|jm nocttxktxnc|m }vm ke lc|c txk|mf|nko
|jm nocttxktxnc|m }vm ke |xcovtkx| vmf}xn|~
|jm nocttxktxnc|m cffmvv ke fko|cf| anv|! tjk|kv col akfc|nko noekxic|nko
xm`nv|xc|nko ke ]XA jcolamxv/
C`mofnmv fco icoc`m |jmvm xnvgv |jxk}`j lnvf}vvnkov pn|j |jm Ctt lmumaktmx kx
|jxk}`j fkol}f|no` txkemvvnkoca tmom|xc|nko |mv|no`/
Cl)jkf
\jxk}`j |jm }vm ke co Cl)jkf txkunvnkono` txkenam! }t |k 344 nov|cofmv ke c vn`oml
cttanfc|nko hnocx~ fco hm nov|caaml unc n\}omv! nTjkom Fkoen`}xc|nko ]|nan|~ kx Cttam
Fkoen`}xc|kx/
Cl)jkf cttanfc|nkov cxm akfgml |k c vtmfnenf vm| ke lmunfmv h~ |jm txkunvnkono` txkenam/\jmvm cxm ikv| fkiikoa~ }vml ekx hm|c |mv|no` ke cttanfc|nkov! kx pjmxm umx~
xmv|xnf|ml lnv|xnh}|nko ke c vicaa o}ihmx ke nov|cofmv ke c hmvtkgm cttanfc|nko nv
cttxktxnc|m/
Mo|mxtxnvm No)Jk}vm Cttv
C`mofnmv pn|j c L}o col Hxclv|xmm| Lc|c ]onumxvca O}ihmxno` V~v|mi *L]OV.6
o}ihmx fco ctta~ |k hmfkim Mo|mxtxnvm lmumaktmxv/ \jnv caakpv |jm fxmc|nko col
lnv|xnh}|nko ke f}v|ki cttanfc|nkov col txkunvnkono` txkenamv pn|jno co c`mof~ ekx n|v
6L]OV nv c }ons}m onom ln`n| o}ihmx cvvn`oml |k h}vnomvv h~ L}o col Hxclv|xmm|/ Vmm
ppp/loh/fki ekx ikxm noekxic|nko/
34 q L m e m o f m V n ` o c a v L n x m f | k x c | m
http://www.dnb.com/http://www.dnb.com/ -
8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security
12/72
kpo }vm! ke pjnfj |jm lnv|xnh}|nko nv anin|ml |k |jmnx mitak~mmv col fko|xcf|kxv *n/m/
ok| |k |jm `momxca t}hanf./
Mo|mxtxnvm No)Jk}vm Cttv fco hm nov|caaml }vno`2
n\}omv nTjkom Fkoen`}xc|nko ]|nan|~
Cttam Fkoen`}xc|kx
K\C unc c pmh vn|m
icoc`ml Cttv }vno` c ILI vmxumx/
Uka}im T}xfjcvm Txk`xci *UTT.
\jm UTT caakpv h}vnomvvmv |k h}~ ctt v|kxm cttv no h}ag }vno` c fkxtkxc|m
t}xfjcvno` fcxl/ UTT nv ok| cucnacham no C}v|xcanc/ Ekx ikxm noekxic|nko ko UTT `k
|k j||t2++ppp/cttam/fki+h}vnomvv+utt+
Icoc`ml Cttv
Ctt V|kxm col Mo|mxtxnvm No)jk}vm Cttanfc|nkov nov|caac|nkov fco hm |xn``mxml unc co
ILI vmxumx7 |jmvm Cttv cxm fcaaml Icoc`ml Cttv/ Icoc`ml Cttv fco hm
}onov|caaml h~ |jm ILI vmxumx cako` pn|j co~ cvvkfnc|ml lc|c kx fco hm vm| |k
}onov|caa pjmo |jm ILI txkenam nv xmikuml/ Tcnl Ctt V|kxm Cttv fco hm nov|caaml h}|
xms}nxm UTT pjnfj nv f}xxmo|a~ }ocucnacham no C}v|xcanc/
Pmh Cttv
Vcecxn Ikhnam jcv mz|movnum v}ttkx| ekx J\IA=! FVV6 col BcucVfxnt| emc|}xmv ekx
Pmh Cttv! nofa}lno` Cttv |jc| x}o e}aa vfxmmo col keeanom/ \jm Txkl}f| @}nlmv ekx
nTkl \k}fj! nTjkom col nTcl cxm caa mzcitamv ke |jmvm/
Pmh Cttv cxm ke|mo c }vme}a imfjconvi |k lmtak~ noekxic|nkoca cttanfc|nkov s}nfga~
exki c fmo|xca no|xcom| tkno|7 jkpmumx Ikhnam Vcecxn ko nKV nv v|naa v}hbmf| |k |jm vcim
|jxmc|v cv k|jmx hxkpvmxv/
@VI Uknfm col VIV+IIV Fkii}onfc|nko
Cv ok|ml txmunk}va~! @VI uknfm col VIV om|pkxgv jcum c o}ihmx ke vmf}xn|~
pmcgomvvmv! pjmxm |jm fkoenlmo|ncan|~ kx c}|jmo|nfn|~ ke c uknfm kx VIV
fkii}onfc|nko fcook| capc~v hm mov}xml! l}m |k hk|j Ico)no)|jm)Inllam c||cfgv
col |jm ucxnc|nko no |jm vmf}xn|~ emc|}xmv nitamimo|ml h~ fcxxnmxv/ Cv v}fj! uknfm col
VIV fkii}onfc|nko vjk}al momxcaa~ hm fkovnlmxml amvv vmf}xm |jco im|jklv |jc|
nitamimo| c fjcno ke |x}v| hcfg no|k c }vmxv kpo c`mof~ v}fj cv VVA |}oomaaml
micna/
nImvvc`m no nKV = jcv ok| f}xxmo|a~ hmmo muca}c|ml h~ LVL col vjk}al hm |xmc|ml no
|jm vcim pc~ cv IIV/
n\}omv
Vnofm |jm xmamcvm ke nKV =! n\}omv nv ok ako`mx c xms}nxmimo| ekx lmunfmicoc`mimo|/ Ne c`mofnmv lmfnlm |k }vm n\}omv cv tcx| ke |jmnx lmunfm icoc`mimo|
33 q L m e m o f m V n ` o c a v L n x m f | k x c | m
http://www.apple.com/business/vpp/http://www.apple.com/business/vpp/ -
8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security
13/72
pkxgeakp n| fco hm akfgml lkpo ekx }vm ko c`mof~ V|colcxl Ktmxc|no` Mounxkoimo|v
*VKM. unc xm`nv|x~ gm~v kx ZIA txktmx|~ anv|v cv lm|cnaml jmxm2
j||t2++lmumaktmx/cttam/fki+anhxcx~+nkv+&emc|}xmlcx|nfamv+EC[Lmtak~no`[n\}omv+
No|xkl}f|nko+No|xkl}f|nko/j|ia
Cttam NLv
Kom ke |jm kx`convc|nkoca xnvgv |jc| vkim }vmxv mztxmvv fkofmxo chk}| nv c
tmxfmnuml omml |k cvvkfnc|m c fxmln| fcxl pn|j mumx~ Cttam NL/ \jnv nv cf|}caa~ c
invfkofmt|nko! col ok cvvkfnc|nko pn|j c fxmln| fcxl nv xms}nxml/ \jm ekaakpno`
cttxkcfjmv cxm xmfkiimolml c| |jm tkanf~ col txkfml}xca amuma/
Ekx c Hxno` ^k}x Kpo Lmunfm *H^KL. iklma! |jmxm nv `momxcaa~ nitanml |x}v|
|jc| }vmxv fco fko|no}m |k nov|caa Cttv ko |jmnx kpo lmunfm/ \jmxmekxm! }vmxv
ic~ xm`nv|mx |jmnx mznv|no` Cttam NL cv tcx| ke |jm txkfmvv ke v}hin||no` |k |jm
c`mof~ Cffmt|cham ]vm Tkanf~ *C]T./ Ne }vmxv |jmo t}xfjcvm cttxkuml Cttv!}vno` |jmnx kpo fxmln| fcxl! |jm~ fco hm xmnih}xvml/ \jnv txkunlmv kom
im|jkl |k fko|xka mztmoln|}xm ke c`mof~ e}olv/ Co ILI fkovkam fco hm
}vml |k ikon|kx pjc| cttanfc|nkov jcum hmmo nov|caaml/
Ekx co c`mof~ lmunfm iklma! pjmxm }vmxv cxm ok| caakpml |k nov|caa |jmnx kpo
Cttv! tmx lmunfm Cttam NLv cxm fxmc|ml |jc| cxm ok| anogml |k c fxmln| fcxl/
\jm txkfmvv ekx lkno` |jnv nv lmvfxnhml jmxm2
j||t2++v}ttkx|/cttam/fki+gh+J\8=6
-
8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security
14/72
Tacoono` S}mv|nkov
\jm ekaakpno` s}mv|nkov keemx c `}nlm ekx fkovnlmxc|nkov no nitamimo|no` tkanf~ ko |jm
lmunfm/
S}mv|nko Fkiimo|v+Vmamf|nko
Jkp vmovn|num nv |jm lc|c N ci
no|molno` |k unmp kx v|kxm ko c ikhnam
lmunfm;
No caa fcvmv c v|xko` tcvvfklm vjk}al hm
vm| ko |jm lmunfm no kxlmx |k mocham lc|c
txk|mf|nko/ Ne |jm lc|c nv fkino` kumx c
om|pkxg! |jmo n| vjk}al hm vmf}xml h~
vkim fkihnoc|nko ke mofx~t|nko! |~tnfcaa~
VVA kx UTO/ Ne |jm lc|c nv facvvnenml xmemx
|k |jm NVI Fko|xkav Ico}ca Fx~t|k`xctjnf
E}olcimo|cavvmf|nko/
Nv n| cttxktxnc|m |jc| lc|c `m|v |k |jm
lmunfm kumx c ikhnam lc|c kx pnxmamvv
om|pkxg;
]vno` Cttam Fkoen`}xc|kx ko c |x}v|ml
fkit}|mx ic~ hm co cffmt|cham
ca|mxoc|num |k |xcovtkx| vmf}xn|~/
Lk N pco| }vmxv |k fkaachkxc|m }vno`|jc| lc|c no c om|pkxgml ecvjnko;
Ne }vmxv omml |k vjcxm lc|c kumx com|pkxg! |jmo c vmf}xm fkoomf|nko vjk}al
hm no tacfm hm|pmmo |jm }vmxv
fkaachkxc|no`/
36 q L m e m o f m V n ` o c a v L n x m f | k x c | m
-
8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security
15/72
S}mv|nko Fkiimo|v+Vmamf|nko
Lkmv i~ c`mof~ pco| |k caakp
mitak~mm kpoml lmunfmv |k cffmvvvkim c`mof~ lc|c;
Caakpno` mitak~mm kpoml lmunfmv }v}caa~
jcv c vn`onenfco| xml}f|nko no fkv|v no hk|jtxkf}xmimo| col icoc`mimo| ke ikhnam
lmunfm eamm|v! h}| no|xkl}fmv c lneemxmo|
vm| ke mztmf|c|nkov chk}| |jm amuma ke
fko|xka co c`mof~ fco mzmx| kumx |jm
lmunfmv/ \jm hcacofm tkno| hm|pmmo
fko|xka col eamznhnan|~ nv }v}caa~ lneemxmo|!
col nv ikxm fkov}a|c|num no txkfmvv! |jco
ekx c`mof~ kpoml lmunfmv/
Co nitkx|co| tkno| |k xmimihmx nv |jc|
c`mofnmv pnaa omml |k fkovnlmx |jmnxam`nvac|ml txnucf~ khan`c|nkov pjmo
lm|mxinono` tkanf~ ekx cffmvvno`+pntno`
mitak~mm kpoml lmunfmv/
Lkmv i~ c`mof~ pco| |k caakp c
inz|}xm ke mitak~mm col c`mof~
kpoml lmunfmv;
Ne inzml lmunfm kpomxvjnt nv caakpml! |jmo
fkovnlmxc|nko ommlv |k hm `numo |k pjnfj!
ne co~! lneemxmofmv no cffmvv |k noekxic|nko
col vmxunfmv cxm cttxktxnc|m/ No vkim
fcvmv |jnv fk}al noukaum |jm }vm ke
icoc`ml fko|cnomx cttanfc|nkov |k
vmtcxc|m c`mof~ lc|c exki tmxvkoca lc|c/
Lkmv i~ c`mof~ omml lneemxmo|
tkanfnmv cttanml |k c lmunfm
lmtmolno` ko pjm|jmx n| nv mitak~mm
kx c`mof~ kpoml;
\jnv nv c fkitamz nvv}m |jc| xms}nxmv c
inz|}xm ke }vmx non|nc|ml kt|)no
Fkoen`}xc|nko Txkenamv! ILI icoc`ml
txkenamv col txm)nov|caaml txkenamv ko c tmx
lmunfm hcvnv! cttxktxnc|m |k n|v fko|mz|/ Novkim fcvmv |jnv fk}al noukaum }vm ke
icoc`ml fko|cnomx cttanfc|nkov |k xnvg
icoc`m |jm vmtcxc|nko ke c`mof~ lc|c
exki tmxvkoca lc|c/
3< q L m e m o f m V n ` o c a v L n x m f | k x c | m
-
8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security
16/72
S}mv|nko Fkiimo|v+Vmamf|nko
Pjc| hcacofm lkmv i~ c`mof~ omml
|k vm| hm|pmmo |jm cluco|c`mv ke}vmxv hmno` cham |k nov|caa Ctt V|kxm
Cttv |jmivmaumv! umxv}v |jm
kumxjmcl ke icoc`no` |jnv fmo|xcaa~;
\jm ikxm vmovn|num |jm lc|c hmno`
cffmvvml h~ c lmunfm nv! |jm `xmc|mx |jmxnvgv cxm/ \~tnfcaa~ c fkihnoc|nko ke co
cttxkuml pjn|manv| col ikon|kxno` unc
ILI pnaa in|n`c|m |jm xnvgv/ C| jn`j amumav
ke vmovn|nun|~! cttanfc|nkov ic~ omml |k hm
txm)vfxmmoml! col txm)akclml h~ N\ v|cee
hmekxm lmunfm nvv}m! kx lmumaktml no)
jk}vm col lmtak~ml |k lmunfmv/
Lk i~ c`mof~v cffmt|cham }vc`mtkanfnmv xms}nxm mztanfn| ml}fc|nko
col moekxfmimo|;
C]T fkitancofm txnkx |k lmunfmv hmno`lmtak~ml nv fxn|nfca/ C]T ml}fc|nko
fko|mo| fco hm txkunlml cv c Pmh Ctt
col Pmh Fant ko |jm lmunfmv ekx }vmx
xmemxmofm/ K|jmx tkanf~ fko|xkav unc MCV!
ILI col Fkoen`}xc|nko txkenam ic~ hm
xms}nxml/
Cxm caa ke i~ lmunfmv pn|j kom fcxxnmx!
col c`mof~ kpoml;
Ne c`mofnmv jcum c vno`am hnaano`
cxxco`mimo| pn|j c fcxxnmx! |jmo }vm ke cf}v|ki vmf}xml CTO pn|j c txkz~! fco
cvvnv| no moekxfno` |n`j|mx tkanf~ fko|xkav
ekx lmunfmv ko |jm ikhnam lc|c om|pkxg/ No
ico~ fcvmv! c f}v|ki CTO pn|j MCV col
co c}|jmo|nfc|ml! VVA mofx~t|ml xmumxvm
txkz~ ic~ hm v}eenfnmo| vmf}xn|~ ekx akp)
amuma vmovn|nun|~ lc|c/
Lk N omml |k v}ttkx| lmunfmv exki
i}a|ntam fcxxnmxv col c inz ke
tmxvkoca col c`mof~ kpomxvjnt;
C UTO vka}|nko ic~ hm ikxm cttxktxnc|m
|jco c f}v|ki CTO/
3= q L m e m o f m V n ` o c a v L n x m f | k x c | m
-
8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security
17/72
S}mv|nko Fkiimo|v+Vmamf|nko
Jkp fco co c`mof~ xmik|m pntm
lmunfmv kx vmf}xm fko|cnomxvpjmomumx |jm~ cxm xmcfjcham ko |jm
om|pkxg;
Xmik|m pntm nv }v}caa~ hmv| icoc`ml h~
c fkihnoc|nko ke MCV kx co ILIfkovkam/ Ne c`mofnmv lk ok| jcum c 8
-
8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security
18/72
Fjct|mx \pk
Mofx~t|nko no nKV
\jnv fjct|mx nv txkunlml |k jmat c`mofnmv }olmxv|col |jm }olmxa~no` mofx~t|nko
cxfjn|mf|}xm mitak~ml no nKV = |k jmat icgm co noekximl cvvmvvimo| ke |jm xnvgv |k
C}v|xcanco kumxoimo| noekxic|nko/
Lc|c Txk|mf|nko
Cttam jcv mztacnoml |jc| kom ke |jm `kcav ke nKV nv |k 'gmmt lc|c vcem mumo pjmo |jm
lmunfm nv fkitxkinvml'/ Jkpmumx! cv pnaa hm mztacnoml no |jnv fjct|mx! |jm ko}v
xmicnov acx`ma~ ko |jm lmumaktmx cv |k jkp i}fj kx jkp an||am lc|c txk|mf|nko nv
cttanml/
Ekx |jnv xmcvko! n| nv nitkx|co| |jc| co c`mof~ pnvjno` |k }vm c tcx|nf}acx cttanfc|nko
}olmxv|colv vmf}xn|~ emc|}xmv ke nKV = no kxlmx |k icgm c ikxm noekximl lmfnvnko cv
|k pjm|jmx |jm cttanfc|nko imm|v |jm vmf}xn|~ ommlv ke |jm c`mof~/
\jnv nv tcx|nf}acxa~ nitkx|co|! cv c| |jm |nim ke |jnv t}hanfc|nko! |jm koa~ oc|num
cttanfc|nko icgno` e}aa }vm ke lc|c txk|mf|nko pn|jno nKV = nv Icna/ N| nv nitkx|co| ekx
clinonv|xc|kxv |k ok|m |jc| }vmxv fco v|naa ikum c||cfjimo|v k}| ke Icna |k k|jmx Cttv
|jc| }vm akpmx lc|c txk|mf|nko facvvmv/ \jnv fco jcttmo ne nov|caaml Cttv jcum
xm`nv|mxml ]XA jcolamxv ekx enam |~tmv/ Ekx TXK\MF\ML lmunfmv! c`mofnmv vjk}al
ok| caakp }vmx nov|caac|nko ke Cttv/
Vmfxm|v col Lc|c
Pn|jno nKV =! noekxic|nko v|kxml h~ Cttv fco hm hxkcla~ fc|m`kxnvml cv mn|jmx c
vmfxm| kx cv lc|c/ \jm |mxi vmfxm| fco hm }olmxv|kkl |k imco noekxic|nko h~ pjnfj
kom ic~ `m| cffmvv |k lc|c7 |jnv fco nofa}lm v~v|mi fxmlmo|ncav! gm~v col
tcvvpkxlv/ Lc|c ko |jm k|jmx jcol! xmemxv |k }vmx+cttanfc|nko lc|c v}fj cv |mz|!
tnf|}xmv! lkf}imo|v col cangm/
Cffkxlno`a~ |jmxm cxm |pk lc|c v|kxmv pjmxm c lmumaktmx ic~ fjkkvm |k v|kxm
noekxic|nko2 |jm Enam V~v|mi col |jm Gm~ Fjcno/ Lmumaktmxv cxm mofk}xc`ml |k v|kxmvmfxm|v pn|jno |jm Gm~ Fjcno col tacfm ikxm `momxca cttanfc|nko lc|c pn|jno |jm Enam
V~v|mi/
Noekxic|nko v|kxml pn|jno mn|jmx ke |jmvm v|kxmv fco hm f}v|kinvml |k lneemxmo| amumav
ke vmf}xn|~! cffmvvnhnan|~ col tkx|chnan|~/ Ok|m |jc| n| nv mo|nxma~ }t |k |jm lmumaktmx |k
lm|mxinom |jm amuma ke txk|mf|nko cttanml/ \jnv fjknfm nv iclm h~ |jm Ctt lmumaktmx
|jxk}`j CTN fcaav col |jm fjknfm ke cucnachnan|~ cv lm|cnaml no \cham 3/
N| nv nitkx|co| |k ok|m |jc| |jm lmec}a| enam v~v|mi txk|mf|nko facvv ko enamv nv Okom
*cffmvvnham capc~v.! pjnam gm~ fjcno n|miv cxm vm| |k '///Pjmo]oakfgml' *cffmvvnham
koa~ pjmo }oakfgml./
30 q L m e m o f m V n ` o c a v L n x m f | k x c | m
-
8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security
19/72
Ok|m2 C`mofnmv lmumaktno` kx icgno` }vm ke cttanfc|nkov jcolano` vmovn|num lc|c
vjk}al |cgm fcxm |k noumv|n`c|m jkp lc|c nv jcolaml pn|jno |jmnx cttanfc|nko/ \jm~
i}v| mov}xm |jm cttxktxnc|m lc|c v|kxmv col cucnachnan|~ eac`v *k}|anoml no \cham 3.
cxm }vml |k cfjnmum |jm vmf}xm jcolano` ke C}v|xcanco `kumxoimo| noekxic|nko/
Facvvmv ke Txk|mf|nko
No umxvnko < ke nKV! Cttam no|xkl}fml |jm fkofmt| ke txk|mf|nko facvvmv ekx v|kxml
lc|c/ \jnv jcv fko|no}ml no nKV = pn|j vkim nitkx|co| mojcofmimo|v/
Co cttanfc|nko lmumaktmx jcv |jm kt|nko ke vm||no` |jm ekaakpno` cucnachnan|~ eac`v pn|j
co~ Enam V~v|mi Mamimo| kx Gm~ Fjcno mo|x~ |jm~ fxmc|m/
Cucnachnan|~ Enam V~v|mi Mamimo| Gm~ Fjcno Mo|x~
Pjmo }oakfgml Fkitam|m ///Pjmo]oakfgml
Pjnam akfgml ///Fkitam|m]oamvvKtmo O+C
Ce|mx enxv| }oakfg ///Fkitam|m]o|naEnxv|]vmxC}|jmo|nfc|nko ///Ce|mxEnxv|]oakfg
Capc~v Okom ///Capc~v
\cham 32 Cvvn`ocham Enam V~v|mi col Gm~ Fjcno Txktmx|nmv
Exki \cham 3! n| nv tkvvnham |k chv|xcf| |jmvm vm||no`v no|k ek}x v|colcxl facvvmv ke
fko|cnomxv pn|j |jm ekaakpno` hmjcunk}x2
Facvv C2 Enamv col fxmlmo|ncav pn|jno |jnv facvv fco koa~ hm xmcl kx pxn||mo pjmo
|jm lmunfm nv }oakfgml/
Facvv H2 \jxk}`j |jm }vm ke t}hanf gm~ fx~t|k`xctj~! enamv pn|jno |jnv facvv fco hm
pxn||mo ce|mx |jm lmunfm nv non|ncaa~ }oakfgml! col fco hm xmcl koa~ pjmo }oakfgml/
Facvv F2 Enamv col fxmlmo|ncav pn|jno |jnv facvv fco hm xmcl kx pxn||mo koa~ ce|mx
|jm lmunfm nv non|ncaa~ }oakfgml/
Facvv L2 \jm akpmv| txk|mf|nko facvv! enamv col fxmlmo|ncav pn|jno |jnv facvv fco hm
xmcl kx pxn||mo |k no caa fkoln|nkov/
nKV = Mofx~t|nko Cxfjn|mf|}xm
En`}xm 8 naa}v|xc|mv co mzcitam pjmxm ek}x enamv mznv|! mcfj cvvn`oml c lneemxmo| facvv2
Enam 3 nv ke |~tm Facvv C2 cffmvvnham koa~ pjmo }oakfgml/
Enam 8 nv ke |~tm Facvv H2 fco hm pxn||mo |k ce|mx enxv| }oakfg! h}| fco koa~ hm xmcl
pjmo }oakfgml/
Enam 6 nv ke |~tm Facvv F2 cffmvvnham ce|mx enxv| }oakfg/
Enam < nv ke |~tm Facvv L2 cffmvvnham capc~v/
Ok|m |jc| pjnam enamv pmxm }vml ekx |jm t}xtkvmv ke |jnv mzcitam! pn|j |jm mzfmt|nkoke Facvv H! Gm~ Fjcno mo|xnmv fk}al b}v| cv mcvna~ hm }vml no |jmnx tacfm/
3: q L m e m o f m V n ` o c a v L n x m f | k x c | m
-
8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security
20/72
Vninacx |k |jm Enam V~v|mi! co cttanfc|nko'v fxmlmo|ncav v|kxml pn|jno |jm Gm~ Fjcno
cxm mofx~t|ml }vno` |jm cttxktxnc|m Facvv Gm~ ek}ol pn|jno |jm V~v|mi Gm~hc`
*tamcvm vmm |jm Gm~hc` Vmf|nko ekx ikxm noekxic|nko./
Jkpmumx! cv naa}v|xc|ml no \cham 3! |jm txk|mf|nko keemxml h~ Facvv H nv koa~ cucnacham
|k Enam V~v|mi Mamimo|v/
En`}xm 82 Enam V~v|mi Cxfjn|mf|}xm
Cv fco hm vmmo no En`}xm 8! nxxmvtmf|num ke facvv! mcfj enam nv mofx~t|ml pn|j hk|j c
}ons}m Enam Gm~ col c Enam V~v|mi Gm~/
\jm Enam V~v|mi Gm~ nv }vml |k mofx~t| caa lc|c pn|jno |jm lmunfm/ Cv n| nv v|kxml
ktmoa~ n|v }vm lkmv ok| cll |k |jm fx~t|k`xctjnf vmf}xn|~ ke lc|c! h}| nv nov|mcl }vml
|k ecfnan|c|m c xmik|m pntm/ Tamcvm vmm |jm Xmik|m Pntm vmf|nko ekx ikxm noekxic|nko
xm`cxlno` |jnv e}of|nko/
\jm Enam Gm~ nv v|kxml pn|jno |jm enamv im|clc|c! pjnfj nv n|vmae mofx~t|ml h~ |jm enamv
fkxxmvtkolno` Facvv Gm~/ \jm V~v|mi Gm~hc` v|kxmv caa Facvv Gm~v pn|jno |jm
3> q L m e m o f m V n ` o c a v L n x m f | k x c | m
-
8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security
21/72
lmunfm/ Tamcvm xmemx |k |jm Gm~hc` vmf|nko ekx ikxm noekxic|nko ko lneemxmo| |~tmv ke
Gm~hc`v }vml |jxk}`jk}| |jm v~v|mi/
]tko |}xono` ko |jm lmunfm! |jm Facvv C! Facvv H *t}hanf col txnuc|m. col Facvv F
gm~v cxm non|ncaa~ nocffmvvnham cv |jm~ xma~ ko |jm Tcvvfklm Gm~ |k hm }omofx~t|ml/
Pjmo |jm lmunfm nv enxv| }oakfgml h~ |jm }vmx! |jxk}`j |jm }vm ke |jmnx Tcvvfklm!
|jmvm gm~v cxm }omofx~t|ml! v|kxml ekx }vm col |jm lmxnuml Tcvvfklm Gm~ txkit|a~
ekx`k||mo/
\jm Lmunfm Gm~ nv v|kxml pn|jno! col omumx lnu}a`ml exki! |jm Jcxlpcxm Vmf}xn|~
Ikl}am *JVI./ \jnv cf|v |k mofx~t| col lmfx~t| enamv c| pnaa }vno` |jm Lmunfm Gm~/
Tamcvm xmemx |k |jm Jcxlpcxm Vmf}xn|~ Ikl}am Vmf|nko ekx ikxm noekxic|nko ko |jnv
fkitkomo|/
Cv fco hm khvmxuml! |jm Facvv L Gm~ nv mofx~t|ml }vno` |jm Lmunfm Gm~/ Cv |jnv
lmfx~t|nko txkfmvv nv capc~v cucnacham! nxxmvtmf|num ke |jm v|c|m ke |jm lmunfm! enamvtxk|mf|ml h~ |jnv Facvv Gm~ cxm cffmvvnham capc~v/
Enocaa~! pjmo |jm lmunfm xm)mo|mxv c akfgml v|c|m! |jm Facvv C Gm~ col Facvv H
Txnuc|m Gm~ cxm ekx`k||mo! txk|mf|no` |jc| lc|c! amcuno` |jm Facvv F Gm~ col Facvv H
T}hanf Gm~ cffmvvnham/
Xmik|m Pntm
Xmik|m Pntm nv |jm chnan|~ ekx c om|pkxg fkoomf|ml nKV lmunfm |k jcum |jm lc|c
pn|jno |jm lmunfm iclm nocffmvvnham *mocf|ml h~ xmfmnuml v~v|mi fkiicol./ \jnv nv
cfjnmuml no nKV h~ mxcvno` |jm Enam V~v|mi Gm~! pjnfj nv }vml h~ |jm lmunfm |k
mofx~t| caa }vmx lc|c *cv vjkpo no En`}xm 8./ Ekx |jnv xmcvko! kofm |jnv gm~ nv
xmikuml! ok }vmx lc|c pn|jno |jm lmunfm nv xm|xnmucham/
Jcxlpcxm Vmf}xn|~ Ikl}am *JVI.
No|mxoca |k |jm lmunfm! |jm JVI nv |jm koa~ imcov h~ pjnfj nKV fco icgm }vm ke |jm
Lmunfm Gm~/ \jnv Lmunfm Gm~ nv }ons}m |k |jm lmunfm col nv ok| mztkx|cham }vno` co~
oko)noucvnum |mfjons}m/
Ekx |jnv xmcvko *cv enamv mofx~t|ml pn|j |jm Lmunfm Gm~ fco koa~ hm lmfx~t|ml ko |jm
lmunfm.! |jm nKV cxfjn|mf|}xm icgmv n|vmae xmvnv|co| |k kee)anom c||cfgv/ \jm ikv|
vn`onenfco| hmno` c hx}|m)ekxfm |k mzjc}v| col |j}v lnvfkumx |jm }vmx'v Tcvvfklm Gm~/
Gm~hc`v
\jmxm cxm |jxmm |~tmv ke Gm~hc`v }vml no nKV2 V~v|mi! Hcfg}t col Mvfxkp/
Caa Gm~hc`v cxm xmvtkovnham ekx v|kxno` |jm v~v|miv Facvv Gm~v! pjnfj cxm no |}xo
}vml |k `cno cffmvv |k nolnunl}ca enamv kx Gm~ Fjcno mo|xnmv *cv vjkpo no En`}xm 8./
\jm V~v|mi Gm~hc`! vjkpo no En`}xm 8! nv }vml no|mxocaa~ pn|jno |jm lmunfm |k
ecfnan|c|m |jm }vmxv cffmvv |k |jm Enam V~v|mi col Gm~ Fjcno/
84 q L m e m o f m V n ` o c a v L n x m f | k x c | m
-
8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security
22/72
\jm Hcfg}t Gm~hc` nv lmvn`oml |k ecfnan|c|m hcfg}tv no c vmf}xm icoomx/ \jnv nv
lkom h~ |xcovemxxno` |jm mofx~t|ml fko|mo|v ke |jm Enam V~v|mi! col Gm~ Fjcno |k c
xmik|m v~v|mi cako` pn|j |jm Hcfg}t Gm~hc`/
\jm }vmx |jmo jcv |jm kt|nko |k tcvvpkxl txk|mf| |jnv Gm~hc`7 |jnv lmfnvnko jcv
nitanfc|nkov fkofmxono` |jm tkx|chnan|~ ke |jm Gm~hc`/ Ne |jm }vmx vtmfnenmv ctcvvpkxl! |jm Hcfg}t Gm~hc` nv |jmo mofx~t|ml pn|j |jnv tcvvpkxl/
@numo |jm tcvvpkxl! |jnv lc|c fco |jmo hm xmv|kxml |k co nKV lmunfm *ok|m jkpmumx
|jc| ne c lmumaktmx jcv vtmfnenml lc|c '\jnvLmunfmKoa~'! v}fj lc|c pnaa ok| hm iclm
tkx|cham./ Ne! jkpmumx! |jm }vmx lkmv ok| vm| c tcvvpkxl! |jmo |jm Hcfg}t Gm~hc` nv
txk|mf|ml }vno` |jm Lmunfm Gm~ pjnfj omumx amcumv |jm lmunfm/ Fkovms}mo|a~! |jm
Hcfg}t Gm~hc` fco koa~ hm xmv|kxml |k |jm kxn`noca lmunfm/
\jm Mvfxkp Gm~hc` nv lmvn`oml |k mocham c tcnxml lmunfm *okxicaa~ c fkit}|mx. |k
`cno e}aa cffmvv |k |jm lmunfm'v enam v~v|mi pjmo |jm lmunfm nv no c akfgml v|c|m/
Tcnxno` no |jnv fko|mz| xmemxv |k fkoomf|no` |jm nKV lmunfm no co }oakfgml v|c|m *kxpn|jno 34 vmfkolv ke hmno` no co }oakfgml v|c|m. |k |jm k|jmx lmunfm no s}mv|nko/
Co mzfjco`m |jmo kff}xv! pjmxm |jm tcnxml lmunfm xmfmnumv c fkt~ ke |jm nKV
lmunfmv Mvfxkp Gm~hc`/ \jnv Gm~hc` nv mofx~t|ml }vno` |jm nKV lmunfm'v Lmunfm
Gm~! |j}v xmv|xnf|no` cffmvv pjmo lnvfkoomf|ml exki |jm nKV lmunfm/
S}mv|nkov |k cvg Ctt Lmumaktmxv
3/ Pjc| nv |jm eakp ke lc|c |jxk}`jk}| |jm cttanfc|nko7 vk}xfm! v|kxc`m!txkfmvvno` col |xcovinvvnko;
8/ Ke |jm lc|c v|kxml ko |jm lmunfm! pjc| facvv ke fko|cnomx nv n| v|kxml no;
Ok|m2 Cttanfc|nko lc|c vjk}al capc~v }vm Facvv C ekx v|kxc`m pjmxm
tkvvnham/ Ne |jm cttanfc|nko ommlv |jm chnan|~ |k pxn|m |k lc|c no |jm
hcfg`xk}ol! Facvv H vjk}al hm fkovnlmxml/
6/ Ke |jm lc|c |xcovin||ml kx xmfmnuml! nv n| lkom |jxk}`j c vmf}xm imcov;
C`mofnmv fco xmemx lmumaktmxv |k |jm Cttam PPLF 8433 txmvmo|c|nko!
Vmvvnko 84: ko Vmf}xno` nKV Cttanfc|nkov/
-
8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security
23/72
Clln|nkocaa~ Vmvvnkov 84< col 84> exki |jm Lmumaktmx PPLF 8434 Txmvmo|c|nko
txkunlm xmamuco| hcfg`xk}ol noekxic|nko ko nKV
-
8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security
24/72
Fjct|mx \jxmm
Vmf}xn|~ Emc|}xmv col Fctchnan|nmv
\jnv fjct|mx fkumxv ikhnam lmunfm vmf}xn|~ emc|}xmv! col |jm mochano` |mfjokak`nmv
ekx nitamimo|no` |jkvm emc|}xmv }olmx nKV col xmac|ml noexcv|x}f|}xm/
Ikhnam Lmunfm Vmf}xn|~ \kkahkz
Pjmo vm||no` }t c vmf}xm v~v|mi |jc| }vmv ikhnam lmunfmv! |jm vmf}xn|~ |kkav col
vka}|nkov cxm ok| ko c anomcx vfcam! pjmxm c vka}|nko |k c jn`jmx vmf}xn|~ mounxkoimo|
nv txkunlml h~ kom txkl}f| cakom/ Xc|jmx! |jm vmf}xn|~ tkv|}xm ke |jm lmunfmv fco hm
txk`xmvvnuma~ nitxkuml h~ fkihnoc|nkov ke fctchnan|nmv vjkpo hmakp/
En`}xm
-
8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security
25/72
Vmf}xn|~ emc|}xmv no nKV
nKV txkunlmv c o}ihmx ke emc|}xmv |jc| nofa}lm2
icoc`mimo| ke fxmlmo|ncav col tcvvpkxlv pn|j Gm~ Fjcno mofx~t|nko ke lc|c no |xcovn| *}vno` LCFC< col LCFT=.
mofx~t|nko ke lc|c c| xmv| col no |xcovn| *}vno` LCFC col LCFT.
ln`n|ca vn`oc|}xmv! fmx|nenfc|mv col |x}v| vmxunfmv
xcolkinvc|nko vmxunfmv
fklm vn`oml cttanfc|nkov/
Mo|mxtxnvm No)Jk}vm Cttanfc|nkov lmumaktml ekx co c`mof~ vjk}al `momxcaa~ |cgm
cluco|c`m ke |jmvm vmxunfmv! xc|jmx |jco xm)noumo|no` |jm vcim fctchnan|nmv/ Ikxm
noekxic|nko nv cucnacham no lm|cna exki |jm Cttam Lmumaktmx pmh vn|m2
j||t2++lmumaktmx/cttam/fki+anhxcx~+nkv+&lkf}imo|c|nko+Vmf}xn|~+Fkofmt|}ca+
Vmf}xn|~[Kumxunmp+No|xkl}f|nko+No|xkl}f|nko/j|ia
En`}xm =2 Vmf}xn|~ Vmxunfmv no nKV
nKV
-
8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security
26/72
Enol I~ nTjkom }vmx no|mxecfm
@momxcaa~! pjmo c`mof~ lmunfmv cxm }vml! |jm nFak}l cffk}o| pk}al hm |jm vcim cv
|jm Cttam NL }vml |k nov|caa c`mof~ kpoml Cttv! col vm| }t txnkx |k nvv}no` |jm
lmunfm/ Ok|m |jc| |jnv xms}nxmv c om|pkxg fkoomf|nko! akfc|nko vmxunfmv |k hm cf|num!
col |jm lmunfm |k jcum kt|ml no |k |jm Enol I~ nTjkom vmxunfm/
Unx|}canvc|nko
C`mofnmv ic~ kt| |k txmvmo| vkim c`mof~ cttanfc|nkov |k nKV lmunfmv kumx c
om|pkxg unc c Unx|}ca Lmvg|kt Noexcv|x}f|}xm *ULN./
\jnv pkxgv tcx|nf}acxa~ pmaa ekx }vmxv pjk cxm infxkikhnam n/m/ |jm~ ikum chk}| c
h}nalno` kx c fcit}v l}xno` |jmnx pkxg lc~! col cham |k |cgm cluco|c`m ke |jm
xmac|numa~ jn`j hcolpnl|j ke c vmf}xm Pn)En om|pkxg! h}| cxm ok| v|xnf|a~ cpc~ exki |jm
keenfm akfc|nko/ Vka}|nkov no |jnv vtcfm txkunlm co chnan|~ |k |}om |jm cttanfc|nko ]N ekx
c vicaa vfxmmo v}n|cham ekx txmvmo|no` |k ikhnam lmunfmv! xc|jmx |jco imxma~txmvmo|no` c xmik|m vmvvnko |k |jm v|colcxl c`mof~ lmvg|kt xmvka}|nko/ L}m |k
lmtmolmof~ ko om|pkxg tmxekxicofm col lneemxmofmv no vfxmmo vnrmv col not}|
lmunfm vnrmv! ULN hcvml vka}|nkov vjk}al hm |jkxk}`ja~ |mv|ml exki c }vchnan|~
tmxvtmf|num/ \jnv cttxkcfj cavk jcv |jm cluco|c`m |jc| inonica c`mof~ lc|c nv
v|kxml ko |jm lmunfm/
Ok|m2 Ikv| icbkx c}|jmo|nfc|nko |kgmo umolkxv jcum c vke| |kgmo cucnacham ekx nKV/
Ok|m2 No vkim fcvmv }vm ke ULN nv c facvvnf }vchnan|~+txkl}f|nun|~ |xclm kee c`cnov|vmf}xn|~! cv |jm chvmofm ke akfcaa~ fcfjml lc|c imcov }vmxv cxm ok| cham |k hm
txkl}f|num pjmo |jm lmunfm nv kee |jm om|pkxg col |jmxm nv ok no|m`xc|nko pn|j
oc|num cttanfc|nkov x}oono` akfcaa~ ko |jm mol tkno| lmunfm/
Vcolhkzno`
Vcolhkzno` mov}xmv |jc| cttanfc|nkov |jc| x}o ko nKV lmunfmv cxm xmv|xnf|ml no |mxiv
ke |jm xmvk}xfmv |jc| |jm~ fco cffmvv/ \jnv nv moekxfml h~ |jm gmxoma/ Ekx lm|cnaml
noekxic|nko ko |jm nKV+KV Z vcolhkz vmm Lnko Hacrngnvv tctmx \jm CttamVcolhkz5 kx Unofmork Nkrrkv txmvmo|c|nko C Vcolhkz Kl~vvm~0/
5j||t2++vmf}xn|~muca}c|kxv/fki+enamv+tctmxv+cttam)vcolhkz/tle
0j||t2++txmrn/fki+azabjurmi5bv+c)vcolhkz)kl~vvm~)noena|xc|m)8438+
8= q L m e m o f m V n ` o c a v L n x m f | k x c | m
-
8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security
27/72
Icoc`ml Fko|cnomx Cttanfc|nkov
Ekx mitak~mm kpoml lmunfmv! kx no fcvmv pjmxm |jm c`mof~ xms}nxmv `xmc|mx
txk|mf|nko ke |jmnx fko|cf| col fcamolcx noekxic|nko c |jnxl tcx|~ vka}|nko ic~ hm
xms}nxml/ C o}ihmx ke vka}|nkov fco hm }vml |k txkunlm clln|nkoca amumav ke
vmtcxc|nko col tkanf~ moekxfmimo| ekx micna! fcamolcx col fko|cf| lc|c icoc`ml h~lmlnfc|ml vmxumxv/
\jmxm nv }v}caa~ c }vchnan|~+vmf}xn|~ |xclm kee no |jm fkoen`}xc|nko! pn|j f}v|ki
vka}|nkov jcuno` c akpmx amuma ke no|m`xc|nko pn|j k|jmx Cttv ko |jm lmunfm *m/`/ n| ic~
ok| hm tkvvnham |k |cgm c tjk|k pn|j |jm lmunfmv fcimxc! col |jmo vmol unc micna
}vno` |jm |jnxl tcx|~ micna fanmo|./
Ok|m2 F}xxmo|a~ ok |jnxl tcx|~ icoc`ml fko|cnomx cttanfc|nkov jcum hmmo muca}c|ml
h~ LVL/
Fko|mo| Ena|mxno`
Cffmvv |k no|xcom| vn|mv col vkim icna! fko|cf| kx fcamolcx lc|c fco hm cfjnmuml unc
xmumxvm txkznmv col fko|mo| ena|mxv/ \jmxm cxm i}a|ntam vka}|nkov no |jnv vtcfm/
MCV ena|mxno` txkl}f|v fco hm }vml |k mov}xm micna vmo| |k Mzfjco`m Cf|numV~of
lmunfmv jcum cttxktxnc|m txnucf~ icxgno`v ekx |jm facvvnenfc|nko |jm lmunfm nv
cttxkuml |k h~ co c`mof~/ \jnv cttxkcfj fco caakp ekx co cv~iim|xnf v|xc|m`~ )
ikhnam lmunfmv koa~ xmfmnum micna fko|mo| c| c facvvnenfc|nko cttxktxnc|m |k |jm
lmunfm! cv pmaa cv jcuno` tkanf~ col fko|xkav cttanml |k |jm micna fko|mo|/
No |jnv vfmocxnk! |jm c`mof~v Pnlm Cxmc Om|pkxg *PCO. vmf}xn|~ lkicno nv ok|
mz|molml k}| |k |jm ikhnam lmunfm! col |jmxm nv ok omml |k akpmx |jm facvvnenfc|nko ke
|jm c`mof~ PCO/ V}fj vka}|nkov fco hm }vml |k xmlcf| vtmfnenf fko|mo| tc||mxov
exki micnav vmo| unc MCV! ekx mzcitam! |k vfx}h fxmln| fcxl o}ihmxv exki caa micnav
v~ofml |k ikhnam lmunfmv/ \jnv facvv ke |kkav fco cavk ecfnan|c|m fkxxmf| txk|mf|num
icxgno` ke micna fkino` exki ikhnam lmunfmv pn|jk}| lnxmf| ko)lmunfm v}ttkx| ekx
C}v|xcanco `kumxoimo| icxgno` v|colcxlv/ Ekx e}x|jmx noekxic|nko vmm |jm NVI
vmf|nko ko Fko|mo| Ena|mxno`/
85 q L m e m o f m V n ` o c a v L n x m f | k x c | m
-
8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security
28/72
Fctchnan|~ Mochamxv Fkiimo|
Xmik|m Pntm ILI! MCV! Cttam T}vj
Ok|nenfc|nko Vmxunfm
*CTOV.! Enol I~ nTjkom
Txkz~ F}v|ki CTO! UTO nKV = lkmv ok| nitamimo| c
`akhca txkz~ vm||no`/ C txkz~
fco hm vm| ko c f}v|ki CTO
col c UTO vmvvnko/
Enxmpcaa Enxmpcaa ko f}v|ki CTO!
Enxmpcaa ko Pnxmamvv
om|pkxg
nKV = lkmv ok| nitamimo| c
akfca enxmpcaa/ \jnv nv
vn`onenfco|a~ in|n`c|ml h~ |jm
x}o|nim mounxkoimo|/
Ekxfm Lmunfm Vm||no`v nTF]! Cttam Fkoen`}xc|kx
col ILI
Mo|mxtxnvm Lmtak~imo|
@}nlm anv|v co ZIA vfjmic!
|jnv fco hm }vml |k `momxc|m
col vn`o txkenamv exki
f}v|ki vfxnt|v/ nTF] nv co
mcv~ |k }vm @]N |kka |k
`momxc|m |jm ZIA! h}| FC
no|m`xc|nko xms}nxmv vn`ono`
pn|j KtmoVVA |kkav/
I}a|n)ecf|kx
C}|jmo|nfc|nko
VVA FC noexcv|x}f|}xm!
LOV! XVC kx Fx~t|kFcxl
*UTO Koa~.! Vicx|fcxl
*Xms}nxmv |jnxl tcx|~
vke|pcxm.
Lmtmolno` ko |jm c`mof~v
vmf}xn|~ tkv|}xm! lmunfm
fmx|nenfc|mv kx vke| |kgmov
ic~ hm fkovnlmxml cv c
vmfkol ecf|kx ke
c}|jmo|nfc|nko/
K\C Fkoen`}xc|nko
Txkenam *t}aa.
VVA FC noexcv|x}f|}xm!
LOV! Pmh Vmxunfm!
Lnxmf|kx~ Vmxunfm
Mz|mxocaa~ vn`o col mofx~t|
txkenamv! lk ok| vn`o pn|j
nTF]/
80 q L m e m o f m V n ` o c a v L n x m f | k x c | m
-
8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security
29/72
Fctchnan|~ Mochamxv Fkiimo|
K\C Fkoen`}xc|nko col
Txkunvnkono` Txkenamv*t}vj.
Mo|mxtxnvm Lmumaktmx
C`xmmimo|! 6xl Tcx|~ILI cttancofm! Cttam
Fkoen`}xc|kx! VVA FC
noexcv|x}f|}xm! LOV!
Lnxmf|kx~ Vmxunfmv! CTOV
ILI vjk}al hm |nml no|k FC
col Lnxmf|kx~ Vmxunfmv/
Ikhnam Lmunfm
Ikon|kxno`
Mo|mxtxnvm Lmumaktmx
C`xmmimo|! 6xl Tcx|~
ILI cttancofm! FC
noexcv|x}f|}xm! LOV!Lnxmf|kx~ Vmxunfmv! CTOV
ILI vjk}al hm |nml no|k FC
col Lnxmf|kx~ Vmxunfmv/
Ikhnam Lmunfm
Icoc`mimo|
Mo|mxtxnvm Lmumaktmx
C`xmmimo|! 6xl Tcx|~
ILI cttancofm! FC
noexcv|x}f|}xm! LOV!
Lnxmf|kx~ Vmxunfmv! CTOV
ILI vjk}al hm |nml no|k FC
col Lnxmf|kx~ Vmxunfmv/
Xmik|m Cttanfc|nko
Lmtak~imo|
Mo|mxtxnvm Lmumaktmx
C`xmmimo|! Pmh Vmxumx!
6xl Tcx|~ ILI cttancofm
*kt|nkoca.! CTOV *kt|nkoca.
Koa~ Mo|mxtxnvm No)Jk}vm
Cttv fco hm lmtak~ml K\C/
Jkim vfxmmo Vm| Jkim vfxmmo |k Ne
ek}ol xm|}xo |k TK HKZ
ZZZZ/ \jnv fk}al cavk hmlkom pn|j c Tnf|}xm Excim
Cah}i/
8: q L m e m o f m V n ` o c a v L n x m f | k x c | m
-
8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security
30/72
Fjct|mx Ek}x
Lmtak~no` nKV Lmunfmv
\jmxm cxm c o}ihmx ke kt|nkov ktmo |k clinonv|xc|kxv pjmo lmtak~no` nKV lmunfmv/
nKV jcv c o}ihmx ke emc|}xmv |jc| cxm cniml c| jmatno` clinonv|xc|kxv lmtak~ nKV
lmunfmv no c`mofnmv/ Cttam lnv|xnh}|mv |pk nitkx|co| |kkav |k jmat clinonv|xc|kxv
icoc`m mo|mxtxnvm lmtak~imo|2 nTjkom Fkoen`}xc|nko ]|nan|~ *nTF]. col Cttam
Fkoen`}xc|kx/ \jmvm |kkav mcfj jcum nitkx|co| vtmfncanvml }vmv col n| nv nitkx|co|
ekx clinonv|xc|kxv |k }olmxv|col |jmnx e}of|nko pjmo tacoono` co mo|mxtxnvm
lmtak~imo|/
nTF] ' n\}omv Cttam Fkoen`}xc|kx
Tac|ekxivv}ttkx|ml
Icf + Pnolkpv Icf koa~
Txkenam fxmc|nko Fco fxmc|m fkoen`}xc|nko txkenamv Fco fxmc|m fkoen`}xc|nkotxkenamv
Nov|caa txkenamv Kom lmunfm c| c |nim Ico~ lmunfmv c| c |nim
Cf|nuc|m Kom lmunfm c| c |nim Ico~ lmunfmv c| c |nim
Ocim lmunfm Kom lmunfm c| c |nim Ico~ lmunfmv c| c |nim
]tlc|m nKV Kom lmunfm c| c |nim Ico~ lmunfmv c| c |nim
Nov|caa Cttv Kom lmunfm c| c |nim Ico~ lmunfmv c| c |nimHcfg}t+Xmv|kxm Kom lmunfm c| c |nim Ico~ lmunfmv c| c |nim
\cham 82 Lmtak~imo| Kt|nkov
\jmxm cxm cavk ico~ fnxf}iv|cofmv |jc| xms}nxm clinonv|xc|kxv |k vcon|nvm lmunfmv ekx
lmtak~imo| kx pjmo xm|}xono` co mitak~mm kpoml lmunfm/
\jnv fjct|mx txkunlmv co kumxunmp ke |jm |kkav }vml |k icoc`m nKV lmtak~imo|v col
clunfm ko lmunfm vcon|nvc|nko txkfml}xmv/
Fkoen`}xc|nko Txkenamv
Hk|j nTF] col Cttam Fkoen`}xc|kx }vm fkoen`}xc|nko txkenamv ekx nKV lmtak~imo|/
Fkoen`}xc|nko txkenamv cxm ZIA ekxic||ml tanv| enamv |jc| fko|cno lmunfm vm||no`v!
vmf}xn|~ tkanfnmv col xmv|xnf|nkov/ Co clinonv|xc|kx ic~ }vm c fkoen`}xc|nko txkenam |k2
vm| tcvvfklm tkanf~ ko c lmunfm
vm| xmv|xnf|nkov *v}fj cv lnvchano` }vm ke ^k}\}hm kx Vnxn.
fkoen`}xm pnxmamvv om|pkxgv
fkoen`}xm UTO
fkoen`}xm micna
nov|caa Z/=4> fmx|nenfc|mv vm| c Ikhnam Lmunfm Icoc`mimo| *ILI. vmxumx
8> q L m e m o f m V n ` o c a v L n x m f | k x c | m
-
8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security
31/72
\jmvm cxm koa~ c emp mzcitamv ke tkvvnham fkoen`}xc|nko kt|nkov7 tamcvm vmm |jm nKV
Fkoen`}xc|nko Txkenam Xmemxmofm
*j||t2++lmumaktmx/cttam/fki+anhxcx~+nkv+emc|}xmlcx|nfamv+nTjkomFkoen`}xc|nkoTxkenamXme
+nTjkomFkoen`}xc|nkoTxkenamXme/tle. ekx ikxm noekxic|nko/
Ok|m2 Fkoen`}xc|nko txkenamv cxm ok| mofx~t|ml/ Fxmlmo|ncav |jc| cxm v|kxml nofkoen`}xc|nko txkenamv cxm cucnacham |k co~kom pjk jcv cffmvv |k |jm enamv/ Tcvvpkxlv
ic~ hm no famcx |mz| kx hcvm5< mofklml/ Vkim ke |jm fxmlmo|ncav |jc| fk}al hm no c
fkoen`}xc|nko txkenam nofa}lm2
Pn)En tcvvpkxlv
UTO Vjcxml vmfxm|v
micna }vmxocimv+tcvvpkxlv
Cf|numV~of }vmxocimv+tcvvpkxlv
ALCT }vmxocimv+tcvvpkxlv
FcaLCU }vmxocimv+tcvvpkxlv FcxlLcu }vmxocimv+tcvvpkxl
V}hvfxnhml Fcamolcxv }vmxocimv+tcvvpkxlv
VFMT txm)vjcxml vmfxm|v/
Fcxm i}v| hm |cgmo |k icgm v}xm |jc| |jmvm enamv cxm v|kxml cttxktxnc|ma~ col ok|
nitxktmxa~ cffmvvml/
Txkunvnkono` Txkenamv
Txkunvnkono` txkenamv caakp f}v|ki cttanfc|nkov |k hm x}o ko nKV lmunfmv/ \jm~ cxm
ke|mo }vml no |jm ekaakpno` pc~v2
|k caakp lmumaktmxv |k |mv| cttanfc|nkov ko |jmnx lmunfmv
|k caakp kx`convc|nkov |k lnv|xnh}|m cttanfc|nkov lnxmf|a~ |k |jmnx mitak~mmv/
\k kh|cno co mo|mxtxnvm lnv|xnh}|nko txkunvnkono` txkenam! co c`mof~ i}v| bkno |jm
Cttam Lmumaktmx Mo|mxtxnvm Txk`xci/ Ikxm noekxic|nko chk}| |jm nKV Lmumaktmx
Mo|mxtxnvm Txk`xci fco hm ek}ol c|2
j||t2++lmumaktmx/cttam/fki+txk xciv+nkv+mo|mxtxnvm+
Ne |jm mo|mxtxnvm txk`xci ak`no nv fkitxkinvml co clumxvcx~ fk}al nov|caa icanfnk}v
cttanfc|nkov ko }vmxv nKV lmunfmv/
nTjkom Fkoen`}xc|nko ]|nan|~
nTjkom Fkoen`}xc|nko ]|nan|~ *nTF]. caakpv clinonv|xc|kxv |k fxmc|m col nov|caa
fkoen`}xc|nko txkenamv! nov|caa txkunvnkono` txkenamv col mzcinom lmunfm noekxic|nko/
Pjnam nTF] fco hm }vml |k nov|caa fkoen`}xc|nko txkenamv ko lmunfmv! n| ic~ koa~ lk vk
ko kom lmunfm c| c |nim/ Ne clinonv|xc|kxv cxm tacoono` c vicaa lmtak~imo|! |jm~ ic~
enol n| vnitamx |k lmtak~ lmunfmv kom c| c |nim }vno` nTF]/
64 q L m e m o f m V n ` o c a v L n x m f | k x c | m
http://developer.apple.com/library/ios/featuredarticles/iPhoneConfigurationProfileRef/iPhoneConfigurationProfileRef.pdfhttp://developer.apple.com/library/ios/featuredarticles/iPhoneConfigurationProfileRef/iPhoneConfigurationProfileRef.pdfhttp://developer.apple.com/programs/ios/enterprise/http://developer.apple.com/programs/ios/enterprise/http://developer.apple.com/library/ios/featuredarticles/iPhoneConfigurationProfileRef/iPhoneConfigurationProfileRef.pdfhttp://developer.apple.com/library/ios/featuredarticles/iPhoneConfigurationProfileRef/iPhoneConfigurationProfileRef.pdf -
8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security
32/72
Nov|caano` nKV txnkx |k lmtak~imo|
nTF] fcook| nov|caa nKV ko lmunfmv/ \jmxm cxm |jxmm pc~v |k nov|caa nKV ko lmunfmv2
}vno` n\}omv
}vno` nKV = K\C }tlc|m }vno` Zfklm Kx`conrmx/
Cf|nuc|no` lmunfmv
No c vicaa lmtak~imo| }vno` nTF]! lmunfmv i}v| enxv| hm ico}caa~ cf|nuc|ml/ Ne co
No|mxom| fkoomf|nko nv cucnacham |k |jm lmunfm! |jmo cf|nuc|nko fco |cgm tacfm ko |jm
lmunfm n|vmae/ Ekx nTjkomv kx nTclv pn|j c ikhnam lc|c fkoomf|nko! cf|nuc|nko fco |cgm
tacfm }vno` |jm lmunfmv ikhnam fcxxnmx/ Ekx nTkl col Pn)En koa~ nTcl! co no|mxom|
fkoomf|ml pnxmamvv om|pkxg i}v| hm cucnacham |k tmxekxi cf|nuc|nko exki |jm lmunfm/
Ne ok no|mxom| fkoomf|nko nv cucnacham |k |jm lmunfm! cf|nuc|nko i}v| hm tmxekximl h~
fkoomf|no` |jm nKV lmunfm |k co no|mxom| fkoomf|ml jkv| x}oono` n\}omv/
Ne fjco`mv i}v| hm iclm |k enxmpcaa x}amv! xmemx |k Cttmolnz E ekx noekxic|nko
fkofmxono` jkv|ocimv col tkx|v ke cf|nuc|nko vmxumxv/
Nov|caano` Fkoen`}xc|nko col Txkunvnkono` Txkenamv
Ce|mx co }oakfgml nKV lmunfm jcv hmmo fkoomf|ml |k c jkv| fkit}|mx x}oono` nTF]!
n| nv tkvvnham |k hk|j nov|caa col novtmf| txkenamv ko c lmunfm/ Fkoen`}xc|nko txkenamv
|jc| pmxm fxmc|ml }vno` nTF] pnaa hm vn`oml h~ nTjkom Fkoen`}xc|nko ]|nan|~/
No |jm vcim pc~! txkunvnkono` txkenamv fco hm hk|j unmpml col nov|caaml }vno` nTF]/
nKV ]tlc|mv
Lmunfm }vmxv ic~ tmxekxi co nKV }tlc|m h~ mn|jmx cffmt|no` co K\C }tlc|m exki
Cttam! kx h~ tmxekxino` co }tlc|m }vno` n\}omv/
Ekx co }tlc|m |k hm lmanumxml unc c fkxtkxc|m Pn)En om|pkxg! n| ic~ hm omfmvvcx~ |k
clb}v| enxmpcaa x}amv/ Tamcvm xmemx |k Cttmolnz E ekx lm|cnav/
Xmemxmofmv col E}x|jmx Xmclno`
Tamcvm xmemx |k |jm ekaakpno` t}hanfc|nko ekx clln|nkoca noekxic|nko ko nTF]2
nTcl2j||t2++ppp/cttam/fki+ntcl+h}vnomvv+xmvk}xfmv
nTjkom2j||t2++ppp/cttam/fki+ntjkom+h}vnomvv+xmvk}xfmv
Cttam Fkoen`}xc|kx
Cttam Fkoen`}xc|kx caakpv clinonv|xc|kxv |k vm| }t col lmtak~ `xk}tv ke vninacxa~
fkoen`}xml nKV lmunfmv/ Clinonv|xc|kxv ic~ }vm Cttam Fkoen`}xc|kx |k2
cf|nuc|m col ocim `xk}tv ke omp lmunfmv
}tlc|m nKV ko `xk}tv ke lmunfmv
nov|caa Cttv col Fkoen`}xc|nko Txkenamv ko `xk}tv ke lmunfmv
63 q L m e m o f m V n ` o c a v L n x m f | k x c | m
http://www.apple.com/ipad/business/resourceshttp://www.apple.com/ipad/business/resourceshttp://www.apple.com/iphone/business/resourceshttp://www.apple.com/iphone/business/resourceshttp://www.apple.com/iphone/business/resourceshttp://www.apple.com/ipad/business/resources -
8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security
33/72
hcfg}t+xmv|kxm lmunfmv
xm|xnmum lkf}imo|v
N| nv v}``mv|ml |jc| clinonv|xc|kxv }vm Cttam Fkoen`}xc|kx pn|j co ILI ekx acx`m
lmtak~imo|v ke nKV lmunfmv/
C gm~ emc|}xm ke Cttam Fkoen`}xc|kx nv |jm chnan|~ |k tacfm lmunfmv no|k pjc| nv fcaaml
V}tmxunvml iklm! pjnfj fjco`mv |jm pc~ lmunfmv cxm cham |k tcnx pn|j jkv|v/ C
}vmx pn|j c V}tmxunvml lmunfm pnaa ok| hm cham |k tcnx |jmnx nKV lmunfm pn|j n\}omv ko
|jmnx TF/ Vkim ke |jm meemf|v ko }vmxv pnaa nofa}lm2
hmno` }ocham |k v~of i}vnf kx imlnc exki |jmnx fkit}|mx x}oono` n\}omv |k
|jmnx nKV lmunfm
hmno` }ocham |k nov|caa Cttv ko |jmnx lmunfm }vno` n\}omv
hmno` }ocham |k hcfg}t |jmnx lmunfm }vno` n\}omv
nofxmcvml lneenf}a|~ no bcnahxmcgno` |jmnx lmunfm
ok| hmno` ok|nenml pjmo fjco`mv cxm iclm |k |jmnx lmunfmv fkoen`}xc|nko
enolno` |jmnx clinonv|xc|kx jcv tacfml c imvvc`m ko |jmnx lmunfm akfgml
vfxmmo/
\jk}`j n| ic~ ok| hm cttxktxnc|m |k }vm V}tmxunvml iklm no c H^KL iklma! |jmxm
cxm xmcvkov pj~ V}tmxunvml iklm nv lmvnxcham ekx c`mof~ kpoml lmunfmv/
Vmovn|num lc|c ko mcfj lmunfm nv hm||mx txk|mf|ml/ ]vmxv fcook| v~of kx
hcfg}t |jmnx lmunfm fko|mo|v |k |jmnx jkim fkit}|mx/ nKV ekxmovnf xmfkumx~
}|nan|nmv ic~ ok| hm cham |k xmfkumx lc|c exki |jm lmunfm pn|jk}| c bcnahxmcg/
]vmxv fcook| mcvna~ vnlmv|mt xmv|xnf|nkov/ \jm koa~ uncham pc~ |k h~tcvvxmv|xnf|nkov nv |k mxcvm |jm lmunfm/
Lmunfmv ok| fkoen`}xml cv V}tmxunvmlLmunfmv cxm xmemxxml |k cv ]ov}tmxunvml
Lmunfmv/
Ok|m2 TXK\MF\ML lmunfmv i}v| }vm V}tmxunvml iklm/
V}tmxunvkx~ Jkv| Nlmo|n|~ Fmx|nenfc|m
Okxicaa~! co }oakfgml nKV lmunfm nv cham |k tcnx pn|j co~ jkv| x}oono` n\}omv *kx
v}ttkx|no` |jm akfglkpo txk|kfka./ Pjmo co nKV lmunfm nv vm| |k V}tmxunvmliklm!n| c}|jmo|nfc|mv pn|j c jkv| }vno` |jm V}tmxunvkx~ Jkv| Nlmo|n|~ Fmx|nenfc|m/ \jm
v}tmxunvml lmunfm pnaa |jmo koa~ tcnx pn|j c jkv| x}oono` Cttam Fkoen`}xc|kx pn|j |jm
fkxxmf| V}tmxunvkx~ Jkv| Nlmo|n|~ Fmx|nenfc|m/ Kxlnocx~ tcnxno` pn|j n\}omv nv ok|
tkvvnham pn|j co~ k|jmx jkv|v/ Ko c Icf jkv| x}oono` Cttam Fkoen`}xc|kx! |jm
V}tmxunvkx~ Jkv| Nlmo|n|~ Fmx|nenfc|m nv v|kxml no |jm ak`no gm~fjcno/
Pjnam v}tmxunvml lmunfmv cxm }ocham |k mv|chanvj omp |x}v| xmac|nkovjntv pn|j n\}omv
jkv|v! c |x}v| xmac|nkovjnt pnaa hm ekximl hm|pmmo lmunfmv col |jm Cttam Fkoen`}xc|kx
jkv|/ C xmfkxl ke |jnv |x}v| xmac|nkovjnt nv v|kxml no Mvfxkp Gm~hc` enamv! pjnfj ko
Icf KV Z cxm akfc|ml c| +ucx+lh+akfglkpo/
68 q L m e m o f m V n ` o c a v L n x m f | k x c | m
-
8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security
34/72
Ok|m2 Mvfxkp Gm~hc` enamv no |jnv lnxmf|kx~ vjk}al hm txk|mf|ml no c vninacx
icoomx |k txnuc|m gm~v/
Nov|caano` nKV
C gm~ emc|}xm ke Cttam Fkoen`}xc|kx nv n|v chnan|~ |k nov|caa nKV ko ico~ lmunfmv
fkof}xxmo|a~/ Clln|nkocaa~! ucxnml lmunfm tac|ekxiv *nTjkom! nTcl! nTkl. fco caa hm
vni}a|comk}va~ fkoomf|ml/ Cttam Fkoen`}xc|kx pnaa vmciamvva~ lkpoakcl nKV ekx caa
v}ttkx|ml lmunfm tac|ekxiv pjmo |jmxm nv co no|mxom| fkoomf|nko cucnacham/ C
iczni}i ke 64 lmunfmv fco hm fkoomf|ml fkof}xxmo|a~ ekx nov|caac|nko/
Cf|nuc|no` lmunfmv
Cttam Fkoen`}xc|kx pnaa c||mit| |k c}|kic|nfcaa~ cf|nuc|m caa fkoomf|ml lmunfmv ce|mx
ktmxc|no` v~v|mi nov|caac|nko/ N| nv nitkx|co| ekx clinonv|xc|kxv |k ok|m |jc| nTjkomv
col nTclv xms}nxm c VNI ekx cf|nuc|nko/ Ne |jm VNI jcv c tcvvfklm akfg! c}|kic|nfcf|nuc|nko pnaa hm }ov}ffmvve}a/
Nov|caano` Fkoen`}xc|nko Txkenamv
Cttam Fkoen`}xc|kx ic~ hm }vml hk|j |k nov|caa fkoen`}xc|nko txkenamv col |k fxmc|m
omp fkoen`}xc|nko txkenamv/ \jmvm txkenamv fco hm nov|caaml ko lmunfmv no h}ag pjmo
non|ncaa~ txmtcxno` lmunfmv ekx lmtak~imo|/ Cv co mzcitam! |jnv ic~ hm }vml |k
En`}xm 52 Fkoen`}xc|nko Txkenamv Vm||no`
non|ncaa~ xkaa k}| c |x}v| txkenam ekx co c`mof~ ILI vmxumx/
v
nKV ]tlc|mv
\jmxm cxm |pk im|jklv ekx Cttam Fkoen`}xc|kx lmtak~ml lmunfmv |k xmfmnum nKV
}tlc|mv/ Lmunfmv pn|j co no|mxom| fkoomf|nko pnaa txkit| }vmxv |k nov|caa K\C
66 q L m e m o f m V n ` o c a v L n x m f | k x c | m
-
8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security
35/72
}tlc|mv/ Ca|mxoc|numa~! }vmxv fco xm|}xo |jmnx lmunfmv |k jcum |jmi }tlc|ml }vno`
Cttam Fkoen`}xc|kx/
pno` t}hanfc|nko ekx clln|nkoca noekxic|nko ko Cttam
Fkoen`}xc|kx2
fki+fkoen`}xc|kx+icf+3/4+
nvc|nko
Cli n
}xoml nKV lmunfm ekx xm)nvv}m
|k vcon|nvm co mitak~mm kpoml nKV lmunfm hmekxm txkunvnkono`
Hxmcgno` |jm lmunfm)|k)jkv| |x}v| xmac|nkovjnt
Pjmo co nKV lmunfm tcnxv pn|j c jkv|! c |x}v| xmac|nkovjnt nv ekximl/ No ico~ fcvmv
co clinonv|x o| |k mxcvm co nKV lmunfm col hxmcg caa |jm mv|chanvjml jkv|
c|ml/ \jm ikv| xmancham im|jkl |k
hxmcg caa mv|chanvjml xmac|nkovjntv nv |k xmv|kxm |jm nKV lmunfm enxipcxm }vno` pjc| nv
nv ok|
xms}nxml/
munfm |k |jm jkv| TF x}oono` n\}omv
nx pn|j |jm nKV lmunfm! tamcvm famcx co~ mxxkx lncak`
jm nKV lmunfm ekx
=/ m |jm jkim h}||ko ce|mx n\}omv `momxc|mv |jm ekaakpno` lncak` hkz2
Xmemxmofmv col E}x|jmx Xmclno`
Tamcvm xmemx |k |jm ekaak
Cttam Fkoen`}xc|kx ]vmx @}nlm2 j||t2++jmat/cttam/
Lmunfm Vcon|
no v|xc|kxv vjk}al famco col xm)txkunvnko lmunfmv ekx |jm ekaakpno` xmcvkov2
|k vcon|nvm c xm|
|k vcon|nvm c lmtak~ml mitak~mm)kpoml nKV lmunfm txnkx |k |jm mitak~mm
amcuno`
|k hxmcg caa lmunfm)|k)jkv| |x}v| xmac|nkovjntv col noucanlc|m kal Mvfxkp
Gm~hc` enamv/
c|kx ic~ pc
|x}v| xmac|nkovjntv |jc| c lmunfm jcv txmunk}va~ fxm
fkiikoa~ gokpo cv Lmunfm Enxipcxm ]t`xclm iklm *LE] iklm./
Tamcvm ok|m |jc| xmv|kxno` c lmunfm no |jnv pc~ pnaa cavk mxcvm caa lc|c col vm||no`v ko
|jm lmunfm/ \jm LE] iklm xmv|kxc|nko fco hm tmxekximl exki c jkv| |jc| jcv ok
mv|chanvjml |x}v| xmac|nkovjnt pn|j |jm lmunfm! col |jm lmunfm tcvvfklm
LE] Iklm Xmv|kxc|nko
\k tmxekxi co nKV enxipcxm xmv|kxc|nko ekaakp |jnv txkfml}xm2
3/ Fkoomf| |jm nKV l
8/ Ne n\}omv nv }ocham |k tchkzmv
6/ Txmvv col jkal hk|j |jm Vammt+Pcgm col Jkim h}||kov ko |
|mo vmfkolv
-
8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security
36/72
5/ Ce|mx fanfgno` KG! fanfg |jm Xmv|kxm h}||ko |k hm`no nov|caano` nKV/
Vcon|nvno` co nKV lmunfm ekx xm)nvv}m
Ne co c`mof~)kpoml lmunfm nv xm|}xoml ekx xm)nvv}m |k cok|jmx mitak~mm! n| vjk}al hm
famcoml h~ tmxekxino` c LE] iklm xmv|kxc|nko/ Kom xmcvko |jc| |jnv nv nitkx|co| nv
vk |jc| |jm txmunk}v nKV lmunfm kpomx fcook| |cgm cluco|c`m ke co~ kal lmunfm)jkv|
|x}v| xmac|nkovjntv |k xm|xnmum lc|c exki |jm lmunfm/ H~ tmxekxino` |jm LE] iklm
xmv|kxc|nko |jm kal |x}v| xmac|nkovjntv cxm hxkgmo/
Hmekxm co nKV lmunfm nv xm)txkunvnkoml ekx mo|mxtxnvm }vm! n| nv xmfkiimolml |k
naa mov}xm |jc| |jm lmunfm nv no c gokpo v|c|m/
tcx|~ icoc`ml fko|cnomxv.
xcham |k mztakn|c|nko
o
ke nKV
Mcf xm l enzmv/ Ne ame| }otc|fjml! nKV
lmu v
col |jm vmf}xn|~ ke |jm fkxtkxc|m om|pkxg/
\jm ` m~
hmfki m/
poml lmunfmv
c|m om|pkxg col |jm fkoenlmo|ncan|~ ke
lc|c v|kxml ko c lmunfm/
lnvchamv cttanfc|nko fklm vn`ono` fjmfgv/ \jm nKV fklm vn`ono`
fjmfg jmatv |k txmumo| icapcxm mzmf}|no` ko c lmunfm/ Xmikuno` |jnv fjmfg
xm angma~/
o
tmxekxi c LE] iklm xmv|kxc|nko/ \jnv p
Vcon|nvno` mitak~mm kpoml nKV lmunfmv
Mitak~mm kpoml nKV lmunfmv cxm icgno` |jmnx pc~ no|k `kumxoimo| c`mofnmv!
fxmc|no` c omp vm| ke fjcaamo`mv ekx clinonv|xc|kxv/ Vkim ke |jm fjcaamo`mv hmno`
ecfml nofa}lm2
bcnahxkgmo lmunfmv x}oono` }o|x}v|ml fklm
bcnahxkgmo lmunfmv hmno` cham |k h~tcvv caa vmf}xn|~ txk|mf|nko *nofa}lno` 6xl
}otc|fjml nKV lmunfmv |jc| cxm u}aom
lmunfmv txmunk}va~ fkoen`}xml pn|j fkoeanf|no` vm||no`v col+kx fkoen`}xc|nk
txkenamv/
Kalmx umxvnkov
j unvnko ke nKV nofa}lmv ico~ vmf}xn|~ xmac|m
nfm fk}al hm mztakn|ml xmik|ma~! xnvgno` hk|j mitak~mmv tmxvkoca noekxic|nko
c mof~ cffmt|cham }vm tkanf~ vjk}al xms}nxm }vmxv |k nov|caa nKV }tlc|mv cv |j
m cucnacha
Bcnahxkgmo mitak~mm k
Bcnahxkgmo lmunfmv caakp }vmxv |k nov|caa cttanfc|nkov ko |jmnx nKV lmunfmv exki
k}|vnlm ke Cttamv Ctt V|kxm/ Bcnahxmcgno` fcxxnmv pn|j n| c o}ihmx ke om`c|num vnlm
meemf|v |jc| nitcf| |jm vmf}xn|~ ke |jm fkxtkx
Bcnahxmcgno`
icgmv mztakn|c|nko mcvnmx col ik
Bcnahxmcgno` ic~ lnvcham kx hxmcg nitkx|co| vmf}xn|~ emc|}xmv v}fj cv
Cllxmvv Vtcfm Ac~k}| Xcolkinvc|nko *CVAX. col cttanfc|nko vcolhkzno`/
CVAX nofxmcvmv |jm lneenf}a|~ ke v}ffmvve}a mztakn|c|nko ke u}aomxchnan|~/
Icapcxm ko c Bcnahxkgmo lmunfm pk}al ok| hm fkov|xcnoml h~ |jm cttanfc|nkvcolhkz/
6= q L m e m o f m V n ` o c a v L n x m f | k x c | m
-
8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security
37/72
Bcnahxmcgno` xmanmv }tko vmxnk}v }otc|fjml ktmxc|no` v~v|mi u}aomxchnan|nmv/
Bcnahxkgmo lmunfmv vjk}al hm cvv}iml |k hm }o|x}v|ml/
Cli n
txkunvnk
Ekx |jm
lmtak~
Vco v
Pjmo fkovnlmxno` jkp |k vcon|nvm m xtxnvm
jcum
ztmf|c|nkov chk}| jkp |jm~ pnaa hm cham |k
}vm |jmnx lmunfmv col |jm meemf| ke mo|mxtxnvm lmtak~imo| ko |jmnx lmunfm/ Cv co
ce|mx
|jm lmunfm nv mxcvml }vno` LE] iklm |jnv pnaa ok| hm |jm fcvm/
hm txmvmxuml! |jm ekaakpno` txkfml}xm ic~ hm
l}xm c`mofnmv i}v| fkovnlmx |jmnx am`ca
xmv cf~ ke |jmnx }vmxv lc|c/
Ne |j tak~mmv tmxvkoca lc|c ko c lmunfm! c`mofnmv
vjk xmv|kxm/
Vco
fmv vjk}al hm vcon|nvml h~
tmxekxino` c LE] iklm xmv|kxm cv lmvfxnhml txmunk}va~/ Mitak~mmv vjk}al hm
No c H^KL iklma! |jm ekaakpno` txkfml}xm nv v}``mv|ml ekx lmtcx|no` mitak~mmv2
3/ Xmikum ILI txkenam exki nKV lmunfm! pjnfj pnaa2
no v|xc|kxv vjk}al ok| caakp mitak~mm kpoml bcnahxkgmo nKV lmunfmv |k hm
oml ko |jm fkxtkxc|m om|pkxg/
vm xmcvkov n| nv nitkx|co| |k mov}xm |jc| lmunfmv cxm vcon|nvml txnkx |k
imo|/
n|n c|nko txnkx |k lmtak~imo|
itak~mm)kpoml nKV lmunfmv ekx mo|m
lmtak~imo|! n| nv nitkx|co| |k |cgm no|k cffk}o| |jm lc|c |jc| mitak~mmv caxmcl~
ko |jmnx lmunfmv/ Mitak~mmv ic~ jcum m
mzcitam! co mitak~mm in`j| mztmf| |jmnx nTjkomv fko|cf| anv| |k hm txmvmxuml
lmtak~imo|/ Ne
Ne co mitak~mmv tmxvkoca lc|c nv |k
tmxekximl txnkx |k mo|mxtxnvm lmtak~imo|2
3/ \cgm c hcfg}t ke lmunfm
8/ Tmxekxi LE] iklm xmv|kxm
6/ Xmv|kxm c hcfg}t |k lmunfm
-
8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security
38/72
=/ Mxcvm hcfg}t enamv exki jkv|
\jnv pnaa xm u ~
c`mof~ fki }
lmt mik|m pntm e}of|nko/ Mitak~mmv
vjk co c`mof~ cffmt|cham }vm tkanf~/
ik m co~ |x}v| xmac|nkovjntv mv|chanvjml hm|pmmo |jm nKV lmunfm col co
t |mxv/ Ne |jm mitak~mm lkmv ok| xm|}xo |jmnx nKV lmunfm txnkx |k
|k }vm |jm ILI xcx|no`! n| ic~ hm omfmvvcx~
}al hm iclm cpcxm ke |jnv ecf| no
60 q L m e m o f m V n ` o c a v L n x m f | k x c | m
-
8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security
39/72
Fjct|mx Enum
V}``mv|ml Tkanfnmv
\jnv fjct|mx anv|v v}``mv|ml tkanfnmv no `xcl}c|ml amumav ke xmvtkovm! cttanml |k nKV
lmunfmv c| ucx~no` vmf}xn|~ facvvnenfc|nkov/ \jm c`mof~v Noekxic|nko \mfjokak`~
Vmf}xn|~ Clunvkx vjk}al hm fkov}a|ml ekx |jm vtmfnenf }vc`m vfmocxnkv ekx c
lmtak~imo|/
Ne nKV lmunfmv cxm hmno` fkovnlmxml ekx }vm c| facvvnenfc|nkov chkum TXK\MF\ML!
c`mofnmv i}v| }olmx|cgm c xnvg cvvmvvimo| ekaakpno` |jm `}nlcofm no |jm NVI cv
pmaa cv |jmnx kpo c`mof~ vmf}xn|~ tkanfnmv col lm|mxinom in|n`c|nko txkfml}xmv col
tkanf~/ C`mofnmv i}v| cavk kh|cno cttxktxnc|m cttxkuca ekx co~ oko)fkitancofm no
cffkxlcofm pn|j |jm NVI/
Emc|}xm ]ofacvvnenml
FKITANCOFM
]ofacvvnenml
*LAI:.
Txk|mf|ml
Jcxlpcxm Fx~t|k
nKV Lmunfmv
C`mof~v lmfnvnko Xmfkiimolml I}v|
H^KL *Hxno`
^k}x Kpo Lmunfm.
C`mof~v lmfnvnko Ic~ hm tkvvnham
*ILI kt|)no ekx
C]T c`xmmimo|
col moekxfmimo|
xmfkiimolml./
Vmm NVI vmf|nko ko
Ikhnam Lmunfmv
Ic~ hm tkvvnham
*ILI kt|)no ekx
C]T c`xmmimo|
col moekxfmimo|
xmfkiimolml.
Vmm NVI vmf|nko ko
Ikhnam Lmunfmv
Tcvvfklm I}v| I}v| I}v|
n\}omv Cffk}o| Tmxvkoca kx
C`mof~
Tmxvkoca kx
C`mof~
Tmxvkoca kx C`mof~
:LAI2 Lnvvminoc|nko Anin|no` Icxgmx
6: q L m e m o f m V n ` o c a v L n x m f | k x c | m
-
8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security
40/72
FKITANCOFM
Emc|}xm ]ofacvvnenml ]ofacvvnenml Txk|mf|ml
*LAI:.
V~of |k
Fko|mo|+V~of |k
n\}omv Cffk}o|/
^mv! ne Tmxvkoca
n\}omv
@momxcaa~ ok @momxcaa~ ok
Jkim Fkit}|mx
hcfg}t
moekxfmimo|
V|c|ml no c`mof~
}vc`m tkanf~
V|c|ml no c`mof~
}vc`m tkanf~
V|c|ml no c`mof~
}vc`m tkanf~
nFak}l C`mofnmv omml |k
cvvmvv |jm xnvg no
|jmnx kpo vn|}c|nko/
C`mofnmv omml |k
cvvmvv |jm xnvg no
|jmnx kpo vn|}c|nko/
Ok v~ofno`
lkf}imo|v col
lc|c! Ok Hcfg}t/
n\}omv T}xfjcvmv
col n\}omv Ic|fj
c| C`mof~
lnvfxm|nko/
]vmx chnan|~ |k
nov|caa
cttanfc|nkov
C`mofnmv omml |k
cvvmvv |jm xnvg no
|jmnx kpo vn|}c|nko/
C`mof~ cttxkuml
cttanfc|nkov koa~/
Xmfkiimol
c`mof~ Cttam Nl/
Fkovnlmx ILI
moekxfml C`mof~
V|kxm Cttv
pjn|manv|/
C`mof~ cttxkuml
cttanfc|nkov koa~/
Xmfkiimol
c`mof~ Cttam Nl/
ILI moekxfml
C`mof~ V|kxm Cttv
pjn|manv|/
MCV Xmfkiimolml ne
Mzfjco`m kx Ak|}v
nv }vml ekx c`mof~
micna/
Xmfkiimolml ne
Mzfjco`m kx Ak|}v
nv }vml ekx c`mof~
micna/ Vmfkol
ecf|kx ke
c}|jmo|nfc|nko
}vno` c fmx|nenfc|m
nv txmemxxml/
Tkvvnham! pn|j
fmx|nenfc|m
c}|jmo|nfc|nko/ Ekx
vkim c`mofnmv c
lmlnfc|ml icna
fko|cnomx kx ULN ekx
micna cffmvv ic~
hm txmemxcham/
6> q L m e m o f m V n ` o c a v L n x m f | k x c | m
-
8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security
41/72
FKITANCOFM
Emc|}xm ]ofacvvnenml ]ofacvvnenml Txk|mf|ml
*LAI:.
MCV Ena|mxno` Vjk}al hm }vml ne
ikhnam lmunfm
vmf}xn|~ lkicno nv
akpmx facvvnenfc|nko
|jco no|xcom|
vmf}xn|~ lkicno/
Vjk}al hm }vml ne
ikhnam lmunfm
vmf}xn|~ lkicno nv
akpmx facvvnenfc|nko
|jco no|xcom|
vmf}xn|~ lkicno/
Vjk}al hm }vml ne
ikhnam lmunfm
vmf}xn|~ lkicno nv
akpmx facvvnenfc|nko
|jco no|xcom|
vmf}xn|~ lkicno/
Micna vmf}xml
nolmtmolmo|a~ ke
lmunfm tcvvfklm
]vm c lmlnfc|ml
|jnxl tcx|~ icna
fko|cnomx/
]vm c lmlnfc|ml
|jnxl tcx|~ icna
fko|cnomx/
]vm c lmlnfc|ml
|jnxl tcx|~ icna
fko|cnomx/
ILI Kt|nkoca
lmtmolno` ko xkam
ke lmunfm+vfcam ke
lmtak~imo|/
Kt|nkoca lmtmolno`
ko xkam ke lmunfm kx
vfcam ke
lmtak~imo|/
Xmfkiimolml ne
H^KL iklma }vml/
Xmfkiimolml
F}v|ki CTO ekx
6@ lc|c
Kt|nkoca Xmfkiimolml Xmfkiimolml
UTO)ko)Lmicol Kt|nkoca
lmtmolno` ko xkam
Xmfkiimolml Xmfkiimolml
VVA Xmumxvm
Txkz~
Kt|nkoca
lmtmolno` ko xkam
Kt|nkoca lmtmolno`
ko xkam ke lmunfm+
vfcam ke
lmtak~imo|
UTO)Ko)Lmicol
xmfkiimolml
-
8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security
42/72
FKITANCOFM
Emc|}xm ]ofacvvnenml ]ofacvvnenml Txk|mf|ml
*LAI:.
FC Noexcv|x}f|}xm Kt|nkoca
lmtmolno` ko xkam
Xmfkiimolml Xms}nxml
-
8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security
43/72
Fjct|mx Vnz
Xmfkiimolml Lmunfm Txkenam Vm||no`v
\jnv fjct|mx anv|v |jm txkenam vm||no`v |jc| vjk}al |~tnfcaa~ hm }vml pjmo co nKVlmunfm nv }vml ko co C}v|xcanco `kumxoimo| om|pkxg/
Ok|m2 Ne txkenamv cxm ok| hmno` t}vjml h~ co ILI vka}|nko! |jm fkxxmf| |mfjons}m pn|jFkoen`}xc|nko Txkenamv nv h}olano` |jm tc~akclv no c pc~ |jc|2
Txkenamv t}aaml |k |jm lmunfm! h}olam xmv|xnf|nkov pn|j c}|jmo|nfc|nko! vk ne |jm
txkenam nv xmikuml! caa cffmvv |k c`mof~ xmvk}xfmv nv xmikuml/ Ne co ILI nv }vml! |jm ILI icv|mx txkenam nv capc~v xmikucham! h}| ne n| nv
xmikuml caa icoc`ml txkenamv cxm akv| cv pmaa/
Txm)akclml Fkoen`}xc|nko Txkenamv col ILI icoc`ml txkenamv fco hm inzml kolmunfmv! h}| |jm ILI vmxumx fcook| xmikum |jm txkenamv ico}caa~ nov|caaml ko |jmlmunfm/
\jm ekaakpno` vm||no`v cxm c hcvmanom ekx }vm ko TXK\MF\ML om|pkxgv/ C`mof~lnvfxm|nko fco hm ucxnml |k hm ikxm xmv|xnf|num ne xms}nxml h~ akfca xms}nxmimo|v! kxakpmxml c| akpmx facvvnenfc|nkov no cffkxlcofm pn|j NVI tkanf~/ Pjmxm c txkenamvm||no` nv ok| lnvf}vvml hmakp! c`mofnmv vjk}al mzcinom |jmnx kpo tcx|nf}acx|mfjonfca col tkanf~ ommlv/ nTjkom Fkoen`}xc|nko ]|nan|~ col Cttam Fkoen`}xc|kx fcohm }vml |k unmp |jm e}aa xco`m ke txkenam vm||no` |jc| fco hm lmtak~ml/
-
8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security
44/72
@momxca *oko)Icoc`ml Txkenamv koa~.2
En`}xm 02 @momxca Vm||no`v
Txkenam Vmf}xn|~ vjk}al hm Xmikum Capc~v ne vm||no` nv ekx fkoumonmofm ekx
}vmxv |jc| lkmv ok| fko|cno co~ vmovn|num lc|c *m/`/ c v}hvfxnhml fcamolcx ke
itkxcxna~/ @momxcaa~ }vmxv pk}al ok| xmfmnum |jm
m
ml! vjk}al hm vm| |k Omumx/
C}v|xcanco t}hanf jkanlc~v./ Kt|)No ILI txkenamv pk}al }v}caa~ en| no|k |jnv
fc|m`kx~ cv pmaa/
Txkenam vmf}xn|~ pk}al }v}caa~ hm Xmikum pn|j Tcvvfklm ekx txkenamv |jc| N\
v|cee fco xmikum |m
tcvvfklm |k v}fj txkenamv/
Ikv| txkenamv |jc| cxm ok| ILI icoc`ml pk}al hm vm| |k Omumx/ \j
Tcvvfklm tkanf~ txkenam! ne }v
-
8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security
45/72
Tcvvfklm *fco hm vm| unc MCV lmtmolno` ko umxvnko! KX Fkoen`}xc|nko
Txkenam.2
En`}xm :2 Tcvvfklm Tc~akcl
c iczni}i tcvvfklm amo`|j ke >4 lc~v lk ok| caakp vnitam uca}m
v
}xxmo| iczni}i caakpml |nim ko nKV.
it|v/
Lmtmolno` ko |jm MCV umxvnko! koa~ vkim ke |jm chkum ic~ hm vm| h~ |jm MCVmxumx col c fkoen`}xc|nko txkenam pk}al hm xms}nxml/
xms}nxm catjco}imxnf tcvvfklm inoni}i ke mn`j| fjcxcf|mx c}|k)akfg ke enum ino}|mv *Ok|m2 F jnv|kx~ ke mn`j| tcvvpkxlv niimlnc|m lmunfm akfg c}|k)pntm ko enum ecnaml c||m
V
-
8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security
46/72
Xmv|xnf|nkov2
En`}xm >2 Xmv|xnf|nkov Tc~akcl
caakp }vm ke Fcimxc2 }t |k c`mof~ caakp }vm ke Ecfm\nim2 }t |k c`mof~ caakp vfxmmo fct|}xm2 }t |k c`mof~
caakp uknfm lncaano`2 ko caakp Vnxn *Vnxn }|nanvmv vmxumxv no ucxnk}v akfc|nkov col caa }vmv ke Vnxn lnf|c|nko
i}v| hm |xmc|ml cv ]ofacvvnenml/. caakp Vnxn pjnam lmunfm nv akfgml2 kee xms}nxm n\}omv V|kxm tcvvpkxl ekx caa t}xfjcvmv caakp i}a|ntac~mx `cino`2 }t |k c`mof~ caakp cllno` @cim Fmo|mx exnmolv2 }t |k c`mof~ caakp nov|caano` Cttv2 Xmfkiimol kee c| TXK\MF\ML/ Tk|mo|ncaa~ ko cv co
mzfmt|nko c| akpmx amumav! cv tmx lnvf}vvnko col in|n`c|nko imcv}xm ok|mltxmunk}va~/
caakp no)Ctt t}xfjcvm2 kee ne Ctt nov|caac|nko kee! tk|mo|ncaa~ ko ne }vmx)nov|caamlCttv caakpml
caakp c}|kic|nf v~of pjnam xkcino`2 }v}caa~ kee ekxfm mofx~t|ml hcfg}tv caakp Akfc|nko Vmxunfmv caakp }vmxv |k cffmt| }o|x}v|ml \AV fmx|nenfc|mv/
-
8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security
47/72
En`}xm 342 Xmv|xnf|nkov Tc~akcl
caakp }vm ke ^k}\}hm2 cv tmx c`mof~ tkanf~ caakp }vm ke n\}omv I}vnf V|kxm2 cv tmx c`mof~ tkanf~ caakp }vm ke Vcecxn2 mocham c}|kenaa! ekxfm exc}l pcxono`! mocham BcucVfxnt|!
hakfg tkt}tv/
-
8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security
48/72
En`}xm 332 Xmv|xnf|nkov Tc~akcl
caakp }vm ke mztanfn| i}vnf col tklfcv|v2 }v}caa~ kee! cv tmx c`mof~ tkanf~ xc|no`v Xm`nko2 C}v|xcanc caakpml fko|mo| xc|no`v2 }t |k c`mof~ tkanf~/
-
8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security
49/72
Pn)En2
En`}xm 382 Pn)En Tc~akcl
VVNL ke om|pkxg cv cttx jnllmo VVNL cv tmx c`mof~ tkanf~
AV col c txm)vjcxml gm~ cv c inoni}i! h}|imolml
vvpkxl nv |jm txmemxxml
ktxnc|m
PTC8 C}|jmo|nfc|nko pn|j MCT)\tmx }vmx XCLN]V kx :48/3Z nv xmfki
txk|kfkav! c}|jmo|nfc|nko col |x}v| |k ic|fj om|pkxg xms}nxmimo|v/ :48/3Zpn|j lmunfm nlmo|n|~ fmx|nenfc|m col }vmxocim+tcc}|jmo|nfc|nko imfjconvi ekx ]ofacvvnenml *LAI. col jn`jmx/
-
8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security
50/72
UTO2
En`}xm 362 UTO Tc~akcl
NTVmf col VVA cxm LVL Cttxkuml Fx~t|k`xctjnf Txk|kfkav! tamcvm xmemx |k|jm Muca}c|ml Txkl}f|v Anv| *MTA. ekx ikxm noekxic|nko j||t2++ppp/lvl/`ku/c}+noekvmf+mta+UTO Vmxumx Fkoen`}xc|nko ekx nKV Lmunfmv ko
|)uto+j||t2++jmat/cttam/fki+nkvlmtak~imo vjk}al hm fkov}a|ml ekx vmxumx vnlm
icol vjk}al hm mochaml pn|j c pjn|manv| ke c`mof~ ]XAv kx
vm||no`v |jc| nKV v}ttkx|v/
fmx|nenfc|m hcvml Icfjnom C}|jmo|nfc|nko/ E}aa |x}v| fjcno ommlv |k hmnofa}lml/
vtan| |}ooma UTO vjk}al hm kee *vm| UTO fkofmo|xc|kx vnlm.UTO ko Lm
lkicnov |jc| lmunfm nv caakpml |k cffmvv txkz~ vjk}al hm fkoen`}xml! nlmcaa~ c TCF enam/
q L m e m o f m V n ` o c a v L n x m f | k x c | m
http://www.dsd.gov.au/infosec/epl/http://www.dsd.gov.au/infosec/epl/http://www.dsd.gov.au/infosec/epl/http://www.dsd.gov.au/infosec/epl/ -
8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security
51/72
Micna
Ok| |~tnfcaa~ ommlml ne MCV *m/`/ Mzfjco`m Cf|numV~of @c|mpc~! Ak|}v Ok|mv\xcumaamx. nv no }vm/ K|jmxpnvm cttxktxnc|m |k NICT vmxumx! col fco fk)mznv|
Mzfjc
A c}|jmo|nfc|nko fxmlmo|ncav xms}nxml |k
|j co MCV tc~akcl nv xmikuml! caa MCV v~ofml micna col
ALCT
|~tnfcaa~ ommlml ne Mzfjco`m @CAnv }vml! h}| fco fk)mznv|/
FcaLCimo|v ne xms}nxml/ Ic~ ok| hm ommlml ne Mzfjco`m
}vml! h}| fco fk)mznv|/
A xmfkiimolml/
FcxlL
imo|v ne xms}nxml/ Ic~ ok| hm ommlml ne Mzfjco`m nv}vml! h}| fco fk)mznv|/
xmfkiimolml/
V}hvf
mo|v/ mxm nv co~ vmovn|nun|~ |k |jm fcamolcx lc|c/
Pm
n|j cf}v|ki nfko ko |jm jkim vfxmmo/
ca }vm pk}al nofa}lm anogv |k tc`mv ekx C]T! jmatlmvg fko|cf| lm|cnav!mv
no`v no |jmnx J\IA |k pkxg pjmo |jm vn|m nv
Fxmlmo
VFMT
fkoen`}xno` VFMT moxkaimo| txnkx |k lmunfm nvv}m ) xc|jmx
|jco K\C kt|)no/ K\C kt|)no nv |jm okxica im|jkl }vml/
IL
nvv}m ) xc|jmx |jcoK\C kt|)no/ K\C kt|)no nv |jm okxica im|jkl }vml/
]v}caa~! fxmlmo|ncav vjk}al hm cllml! caa imvvc`mv vn`oml! col caa cffmvvxn`j|v mochaml ekx xmik|m clinonv|xc|kxv/
pn|j Mzfjco`m/ Ne vm|! VVA koa~! pn|j c}|jmo|nfc|nko/
o`m Cf|numV~of
Vm||no`v cv tmx MCV vmxumx lm|cnav! VVfko|xka hk|j pjnfj lmunfm col pjnfj }vmxv jcum cffmvv |k MCV/
Ok|m ne c txkenam pnc||cfjimo|v cxm lmam|ml exki |jm lmunfm/
Cv tmx c`mof~ xms}nxmimo|v ne lmvnxml/ Ok|
VVA xmfkiimolml/
U Cv tmx c`mof~ xms}nxm
VV
CU
Cv tmx c`mof~ xms}nxm
VVA
xnhml Fcamolcxv
Cv tmx c`mof~ xms}nxmi
VVA vjk}al hm }vml ne |j
h Fantv
Cv tmx c`mof~ xms}nxmimo|v/ \jmvm cxm cancvmv kx anogv |k ]XAv p
\~tnf|mamtjkom ]XAv! col VFMT xm)moxkaimo| tc`mv/ Ok|m |jc| |jmvm pmh tc`fk}al }vm txmemxmofm iconemv| vm||keeanom kx |jm lmunfm nv kee |jm om|pkxg/Pmh fantv fco cavk hm }vml |k nov|caa Mo|mxtxnvm No)Jk}vm Cttanfc|nkov/
|ncav Nofa}lm VVA fjcno ke |x}v| hcfg |k |jm xkk| FC fmx|nenfc|m! nofa}lno`
no|mximlnc|mv/
]vml pjmo txm)
I
]vml pjmo txm)fkoen`}xno` ILI moxkaimo| txnkx |k lmunfm
=4 q L m e m o f m V n ` o c a v L n x m f | k x c | m
-
8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security
52/72
\jm Lmumaktimo| CTOV vjk}al `momxcaa~ ok| hm }vml ekx txkl}f|nko
Cl
Caa lm|cnav jmxm cxm pkxgml k}| pn|j |jm |mamfkii}onfc|nkov fcxxnmx/
V U
ml lc|c c| |jnv
! ok Vmf|mxc fkitc|nhamvka}|nkov cxm cucnacham ko nKV c| |nim ke pxn|no`/
TNO vjk}al hm vm| txnkx |k nvv}m/
Ha}m|k
aa~! Ha}m|kk|j vjk}al hm vm| |k kee! }oamvv |jmxm nv c vtmfnenf h}vnomvv
| pn|j c tjkom! kx Ha}m|kk|j
x e}x|jmx noekxic|nko/
m *nTcl Koa~.
lc|c keo hm|}xoml kee no Vm||no`v @momxca Tcvvfklm/
Lkfg Fkoomf|kx
Pj
pn|j lm
lmunfmv txkunvnkoml }vno` Cttam Fkoen`}xc|kx/ N| nv xmfkiimolml |jc| }vmxv hmkoomf| |jmnx nKV lmunfm |k |jmnx c`mof~)nvv}ml fjcx`mx kx
v~v|miv/
ucofml *]vml pjmo c f}v|ki CTO ekx Ikhnam lc|c nv }vml.
C}|jmo|nfc|nko vjk}al hm vm|/
Txkz~ vjk}al hm vm| cttxktxnc|ma~/
K|j V en`}xc|nko Txkenam2mx m||no`v ok| icoc`ml h~ Fko
@ I knfm col VIV+IIV
@VI Uknfm col VIV+IIV vjk}al koa~ hm }vml ekx ]ofacvvnen|nim/
Pjnav| c vmf}xm UKNT vka}|nko nv |mfjonfcaa~ tkvvnham
Ik mhna Lc|cC VNI
Lc|c Xkcino` vjk}al `momxcaa~ hm vm| |k kee/
k|j
@momxc
xmcvko ekx n|v }vm *m/`/ Ha}m|kk|j jmclvm
Gm~hkcxl./ Vmm NVI vmf|nko Ikhnam Lmunfmvek
Tnf|}xm Exci
\jnv emc|}xm nv c vninacx |k c vfxmmo vcumx ko |jm ak`no vfxmmo/
N| vjk}al mn|jmx hm vm| |k tkno| |k c vtmfnenf Tjk|k Cah}i |jc| fko|cnovok vmovn|nun|~ *}olmx Vm||no`v Tnf|}xm Excim.! kx Tnf|}xm Excim fc
Pn)En
Cvg |k bkno om|pkxgv vjk}al hm vm| |k kee/ \jnv xms}nxmv |jm }vmx |k mztanfn|a~
fjkkvm |k bkno c om|pkxg/ nKV c}|k)bknov txmunk}va~ gokpo om|pkxgv koa~/
nav| }oakfgml! nKV fk}al mv|chanvj c |x}v| xmac|nkovjnt |jxk}`j |jm lkfg fkoomf|kx
unfmv kx jkv| fkit}|mxv/ \jnv hmjcunk}x fco hm icoc`ml no V}tmxunvml
nov|x}f|ml |k koa~ f
fkit}|mx/
=3 q L m e m o f m V n ` o c a v L n x m f | k x c | m
-
8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security
53/72
Fjct|mx Vmumo
Ikhnam Lmunfm Icoc`mimo|
nKV = lmunfmv fco }vm pmh col VFMT vmxumxv |k mv|chanvj |x}v| xmac|nkovjntv! col
t}aa tkanf~ |k lmunfmv/ Lmunfmv mv|chanvj non|nca |x}v| unc VFMT col |jmo fco hm
ikon|kxml col icoc`ml h~ vmxumxv! vmxunfmv kx cttancofmv }vno` Cttamv ILI
Txk|kfka! col CTOV/
Icoc`mimo| pn|jk}| ILI
Tkanf~ ko nKV lmunfmv col noekxic|nko vmf}xn|~ fco hm icoc`ml h~ c fkihnoc|nko ke2
Fkoen`}xc|nko Txkenamv akclml ko c lmunfm
Mzfjco`m Cf|numV~of tkanf~ Om|pkxg vmf}xn|~ emc|}xmv *m/`/ VFMT! :48/3Z! enxmpcaav! Txkznmv! f}v|ki
CTOv .
Cttanfc|nko vtmfnenf hmjcunk}x *Fkoen`}xc|nko Txkenamv fco hm akclml unc |jm
nTjkom Fkoen`}xc|nko ]|nan|~ kumx ]VH! t}aaml K\C exki c pmh vn|m! kx
nofa}lml no tn``~hcfgml ko co VFMT moxkaimo| |xcovcf|nko./ No clln|nko! |jm~
fco hm micnaml |k c lmunfm! h}| |jnv fco txmvmo| c fjnfgmo)col)m``
txkhami/ Vmolno` co VIV fko|cnono` c pmhvn|m ]XA nv tkvvnham! h}| cv VIV
fco hm mcvna~ vtkkeml! n| nv `momxcaa~ ok| xmfkiimolml/ Ekx vicaa vfcam kx
anin|ml vfktm lmtak~imo|v! c e}aa nKV = ILI vka}|nko ic~ ok| hm ommlml! h}|
n| }v}caa~ jcv vn`onenfco| cluco|c`mv pn|j acx`mx eamm|v! kx ikxm fkitamz}vc`m vfmocxnkv/
ILI Umolkxv
C| |jm |nim ke pxn|no` |jnv `}nlm |jmxm pmxm c o}ihmx ke umolkxv vjnttno` ILI
vka}|nkov |jc| jcum e}aa v}ttkx| ekx Cttamv ILI txk|kfka col CTOV no|m`xc|nko/
Vkim ke |jmvm ILI vka}|nkov ekf}v t}xma~ ko lmunfm tkanf~ col ikon|kxno`/ K|jmxv
mojcofm |jnv e}of|nkocan|~! txkunlno` clln|nkoca emc|}xmv unc co Ctt col mumo| |xn``mxv
ekx h}vnomvv x}amv |jc| no|m`xc|m pn|j Mzfjco`m Cf|numV~of! Fmx|nenfc|m C}|jkxn|nmv
col Lnxmf|kx~ Vmxunfmv/ Ico~ umolkxv fco icoc`m i}a|n)tac|ekxi fanmo|v/ No |jnv
fjct|mx |jm lnvf}vvnko pnaa hm xmv|xnf|ml |k nKV emc|}xmv/
ILI e}of|nkov
Kofm co nKV = lmunfm