iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security

download iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security

of 72

Transcript of iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security

  • 8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security

    1/72

    Icxfj 8438

    EKX nTKL \K]FJ! nTJKOM COL nTCL X]OONO@ nKV =/3 KX JN@JMX

    nKV Jcxlmono` Fkoe`}xc|nko @}nlm

  • 8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security

    2/72

    nKV Jcxlmono` Fkoen`}xc|nko@}nlmEkx nTkl \k}fj! nTjkom col nTcl lmunfmv x}oono` nKV =/3 kx jn`jmx/

    Icxfj 8438

    Chk}| |jnv @}nlm

    \jnv }nlm txkunlmv nov|x}f|nkov col |mfjons}mv ekx C}v|xcanco kumxoimo| c`mofnmv |k

    jcxlmo |jm vmf}xn|~ ke nKV = lmunfmv/

    Nitamimo|no` |jm |mfjons}mv col vm||no`v ek}ol no |jnv lkf}imo| fco ceemf| v~v|mi

    e}of|nkocan|~! col ic~ ok| hm cttxktxnc|m ekx mumx~ }vmx kx mounxkoimo|/

    Jkpmumx c`mofnmv pnvjno` |k lneemx exki |jm icolc|kx~ fko|xkav vtmfnenml no |jnv `}nlm i}v|

    ok|m |jc| |jm txkl}f| pnaa ok ako`mx ecaa }olmx |jm muca}c|ml fkoen`}xc|nko/ No |jmvm fcvmv!

    c`mofnmv vjk}al vmmg cttxkuca ekx oko)fkitancofm exki |jmnx c`mof~ jmcl col+kx

    cffxmln|c|nko c}|jkxn|~ |k caakp ekx |jm ekxica cffmt|cofm ke |jm xnvgv noukauml/

    nKV Muca}c|nko

    Cv tmx |jm Muca}c|ml Txkl}f| Anv|! |jm Lmemofm Vn`ocav Lnxmf|kxc|m *LVL. jcv ek}ol Cttam

    nKV lc|c txk|mf|nko facvvmv C col H |k hm v}n|cham ekx lkpo`xclno` |jm jcolano` ke

    TXK\MF\ML noekxic|nko |k |jc| ke ]ofacvvnenml/ \jnv lkf}imo| txkunlmv }nlcofm ko tkanf~

    |jc| mn|jmx i}v| hm moekxfml kx nv c| |jm c`mof~v lnvfxm|nko/

    nKV col |jm C}v|xcanco @kumxoimo| Noekxic|nko Vmf}xn|~ Ico}ca

    \jnv `}nlm xmeamf|v tkanf~ vtmfnenml no |jm NVI/ Ok| caa NVI xms}nxmimo|v fco f}xxmo|a~ hm

    nitamimo|ml ko nKV = lmunfmv/ No |jmvm fcvmv! xnvg in|n`c|nko imcv}xmv cxm txkunlml *vmm

    Cttmolnz M./

    Fjct|mx Vnz txkunlmv xmfkiimolml tcvvfklm vm||no`v ekx nKV lmunfmv/ \jnv clunfm jcv

    hmmo lmumaktml hcvml ko co cvvmvvimo| ke vmf}xn|~ xnvgv xmac|ml vtmfnenfcaa~ |k nKV =! col

    |cgmv txmfmlmofm kumx |jm oko)tac|ekxi vtmfnenf clunfm no |jm NVI/

    Chk}| |jm Lmemofm Vn`ocav Lnxmf|kxc|m

    Cv |jm Fkiikopmca|j c}|jkxn|~ ko |jm vmf}xn|~ ke noekxic|nko! |jm Lmemofm Vn`ocavLnxmf|kxc|m txkunlmv }nlcofm col k|jmx cvvnv|cofm |k C}v|xcanco emlmxca col v|c|m c`mofnmv

    ko ic||mxv xmac|no` |k |jm vmf}xn|~ col no|m`xn|~ ke noekxic|nko/

    Ekx ikxm noekxic|nko! `k |k ppp/lvl/`ku/c}/

    3 q L m e m o f m V n ` o c a v L n x m f | k x c | m

    http://www.dsd.gov.au/http://www.dsd.gov.au/
  • 8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security

    3/72

    C}lnmofm

    \jnv `}nlm nv ekx }vmxv col clinonv|xc|kxv ke nKV = kx ac|mx lmunfmv/ \jmvm lmunfmv

    nofa}lm |jm nTkl \k}fj! nTjkom col nTcl/

    \k }vm |jnv `}nlm! xmclmxv vjk}al hm2

    ecinancx pn|j hcvnf om|pkxgno` fkofmt|v

    co mztmxnmofml Icf KV Z kx Pnolkpv clinonv|xc|kx

    ecinancx pn|j |jm Icf KV Z kx Pnolkpv no|mxecfm/

    Tcx|v ke |jnv `}nlm xmemx |k emc|}xmv |jc| xms}nxm |jm mo`c`mimo| ke |jm |mfjonfca

    xmvk}xfmv ke c`mof~ |mamfkii}onfc|nkov fcxxnmxv! enxmpcaa umolkxv! kx Ikhnam Lmunfm

    Icoc`mimo| *ILI. umolkxv/ Pjnam mumx~ meekx| jcv hmmo iclm |k mov}xm fko|mo|

    noukauno` |jmvm |jnxl tcx|~ txkl}f|v nv fkxxmf| c| |jm |nim ke pxn|no`! c`mofnmv vjk}al

    capc~v fjmfg pn|j |jmvm umolkxv pjmo tacoono` co nitamimo|c|nko/

    Clln|nkocaa~! imo|nko ke |jnxl tcx|~ txkl}f|v nv ok| c vtmfnenf molkxvmimo| ke |jc|

    umolkx kumx cok|jmx7 |jm~ cxm imo|nkoml cv naa}v|xc|num mzcitamv koa~/

    Vkim nov|x}f|nkov no |jnv `}nlm cxm fkitamz! col ne nitamimo|ml nofkxxmf|a~ fk}al

    fc}vm vmxnk}v meemf|v |k |jm lmunfm! |jm om|pkxg col |jm c`mof~v vmf}xn|~ tkv|}xm/

    \jmvm nov|x}f|nkov vjk}al koa~ hm }vml h~ mztmxnmofml clinonv|xc|kxv! col vjk}al

    hm }vml no fkob}of|nko pn|j |jkxk}`j |mv|no`/

    Enocaa~! ekx e}x|jmx facxnenfc|nko kx cvvnv|cofm! C}v|xcanco @kumxoimo| N\ Vmf}xn|~

    Clunvkxv fco fkov}a| |jm Lmemofm Vn`ocav Lnxmf|kxc|m h~ micnano`

    lvl/cvvnv|Dlmemofm/`ku/c} kx fcaano` |jm LVL F~hmx Jk|anom ko 3644 F^HMX3*3644 8>8 603./

    8 q L m e m o f m V n ` o c a v L n x m f | k x c | m

    mailto:[email protected]:[email protected]
  • 8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security

    4/72

    Pjc| nv no |jnv @}nlm

    \jnv `}nlm cniv |k cvvnv| no vmf}xno` nKV = lmunfmv/ N| lkmv ok| c||mit| |k txkunlm

    fkitxmjmovnum noekxic|nko chk}| vmf}xno` fkit}|mxv col vmxumxv/

    \jnv }nlm nofa}lmv |jm ekaakpno` fjct|mxv2

    Fjct|mx Kom No|xkl}f|nko |k Ikhnam Lmunfm Vmf}xn|~ Cxfjn|mf|}xm[[[[[[[[[[[[ 0Fjct|mx \pk Mofx~t|nko no nKV[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[ 30Fjct|mx \jxmm Vmf}xn|~ Emc|}xmv col Fctchnan|nmv [[[[[[[[[[[[[[[[[[[[[[[[ 86Fjct|mx Ek}x Lmtak~no` nKV Lmunfmv [[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[ 8>Fjct|mx Enum V}``mv|ml Tkanfnmv [[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[ 6:Fjct|mx Vnz Xmfkiimolml Lmunfm Txkenam Vm||no`v[[[[[[[[[[[[[[[[[[[[[

  • 8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security

    5/72

    ]vno` |jnv @}nlm

    \jm ekaakpno` anv| fko|cnov v}``mv|nkov ekx }vno` |jnv `}nlm2

    Xmcl |jm `}nlm no n|v mo|nxm|~/ V}hvms}mo| vmf|nkov h}nal ko noekxic|nko col

    xmfkiimolc|nkov lnvf}vvml no txnkx vmf|nkov/

    \jm nov|x}f|nkov no |jnv `}nlm vjk}al capc~v hm |mv|ml no c oko)ktmxc|nkoca

    mounxkoimo| hmekxm lmtak~imo|/ \jnv oko)ktmxc|nkoca mounxkoimo| vjk}al

    vni}ac|m! cv ecx cv tkvvnham! |jm mounxkoimo| pjmxm |jm lmunfm pnaa hm

    lmtak~ml/

    \jnv noekxic|nko nv no|molml ekx ikhnam lmunfmv x}oono` nKV =/ Hmekxm

    vmf}xma~ fkoen`}xno` c lmunfm! lm|mxinom pjc| e}of|nkov |jc| lmunfm ommlv |k

    tmxekxi! col ctta~ vmf}xn|~ fkoen`}xc|nkov |k |jm lmunfm kx v}ttkx|no`

    noexcv|x}f|}xm pjmxm cttanfcham/

    C vmf}xn|~ fjmfganv| nv txkunlml no |jm Cttmolnz |k |xcfg col xmfkxl |jm

    fjkvmo vm||no`v ekx mcfj vmf}xn|~ |cvg col ok|m pjnfj vm||no`v cxm fjco`ml |k

    vmf}xm |jm nKV lmunfm/ \jnv noekxic|nko fco hm jmate}a pjmo lmumaktno` co

    c`mof~ vmf}xn|~ v|colcxl/

    Nitkx|co|2 Co~ lmunc|nko exki |jnv `}nlm vjk}al hm muca}c|ml |k lm|mxinom vmf}xn|~

    xnvgv col |cgm imcv}xmv |k ikon|kx kx in|n`c|m |jkvm xnvgv/

    Ok|m2 Lkf}imo|c|nko col clunfm nv tmxnklnfcaa~ }tlc|ml h~ hk|j LVL col xmamuco|

    umolkxv/ LVL xmfkiimolv |jc| c`mofnmv xmunmp xmunvml jmat tc`mv col ompmln|nkov ke }nlmv/

    @m||no` Clln|nkoca Noekxic|nko

    Ekx vmf}xn|~)vtmfnenf noekxic|nko! fkov}a| |jm ekaakpno`2

    C}v|xcanco @kumxoimo|Noekxic|nko Vmf}xn|~ Ico}ca

    j||t2++ppp/lvl/`ku/c}+noekvmf+NVI/j|i LVL txkunlmv noekxic|nko ko

    vmf}xma~ fkoen`}xno` txktxnm|cx~ col ktmo vk}xfm vke|pcxm |k C}v|xcanco

    @kumxoimo| v|colcxlv/ Clln|nkoca noekxic|nko ekx C}v|xcanco kumxoimo|c`mofnmv! fko|xcf|kxv col NXCT cvvmvvkxv! nv cucnacham exki LVLv

    KoVmf}xm tkx|ca j||tv2++imihmxv/kovmf}xm/`ku/c}

    OVC vmf}xn|~ fkoen`}xc|nko }nlmv

    *j||t2++ppp/ovc/`ku+nc+in|n`c|nko[`}nlcofm+vmf}xn|~[fkoen`}xc|nko[`}nlmv+nol

    mz/vj|ia.\jm ]V Oc|nkoca Vmf}xn|~ C`mof~ *OVC. txkunlmv c pmca|j ke

    noekxic|nko ko vmf}xma~ fkoen`}xno` txktxnm|cx~ col ktmo vk}xfm vke|pcxm/

    ONV\ Vmf}xn|~ Fkoen`}xc|nko Fjmfganv|v Xmtkvn|kx~

    *j||t2++pmh/oul/onv|/`ku+unmp+oft+xmtkvn|kx~. nv |jm ]V Oc|nkoca Nov|n|}|m ke

    < q L m e m o f m V n ` o c a v L n x m f | k x c | m

    http://www.dsd.gov.au/infosec/ism.htmhttps://members.onsecure.gov.au/http://www.nsa.gov/ia/mitigation_guidance/security_configuration_guides/index.shtmlhttp://www.nsa.gov/ia/mitigation_guidance/security_configuration_guides/index.shtmlhttp://web.nvd.nist.gov/view/ncp/repositoryhttp://web.nvd.nist.gov/view/ncp/repositoryhttp://www.nsa.gov/ia/mitigation_guidance/security_configuration_guides/index.shtmlhttp://www.nsa.gov/ia/mitigation_guidance/security_configuration_guides/index.shtmlhttps://members.onsecure.gov.au/http://www.dsd.gov.au/infosec/ism.htm
  • 8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security

    6/72

    V|colcxlv col \mfjokak`~ *ONV\. xmtkvn|kx~ ekx vmf}xn|~ fkoen`}xc|nko

    fjmfganv|v/

    LNVC Vmf}xn|~ \mfjonfca Nitamimo|c|nko @}nlm

    *j||t2++ppp/lnvc/ina+Vmxunfmv+Om|pkxg)Vmxunfmv+Uknfm+VH])Uknfm+Tkanf~)

    @}nlcofm)T}hanfc|nkov. nv |jm ]V Lmemovm Noekxic|nko V~v|miv C`mof~*LNVC. `}nlm ekx nitamimo|no` vmf}xm `kumxoimo| om|pkxgv/ C ]V

    Lmtcx|imo| ke Lmemovm *LkL. TGN Fmx|nenfc|m nv xms}nxml |k cffmvv |jnv

    noekxic|nko/

    FNV Hmofjicxg col Vfkxno` \kka *j||tv2++hmofjicxgv/fnvmf}xn|~/kx`+mo)

    }v+;xk}|m9lkpoakclv/i}a|nekxi.\jm Fmo|mx ekx No|mxom| Vmf}xn|~

    hmofjicxg col vfkxno` |kka nv }vml |k mv|chanvj FNV hmofjicxgv/

    Ekx e}x|jmx noekxic|nko fkov}a| |jm ekaakpno` xmvk}xfmv2

    Cttam Txkl}f| Vmf}xn|~ pmhvn|m *ppp/cttam/fki+v}ttkx|+vmf}xn|~+.cffmvv |k vmf}xn|~ noekxic|nko col xmvk}xfmv! nofa}lno` vmf}xn|~ }tlc|mvcol ok|nenfc|nkov/

    Lmumaktmx lkf}imo|c|nko nv cucnacham exki j||t2++lmumaktmx/cttam/fkiXm`nv|mxml lmumaktmxv `m| cffmvv |k PPLF vmvvnko unlmkv col TLElkf}imo|v/ Exmm xm`nv|xc|nko caakpno` cffmvv |k lkf}imo|c|nko collmumaktmx VLG nv cucnacham/

    Cttam Txkl}f| Vmf}xn|~ Icnano` Anv|v pmhvn|m*j||t2++anv|v/cttam/fki+icnaico+anv|noek+vmf}xn|~)cook}ofm.icnano` anv|v ekx

    fkii}onfc|no` h~ micna pn|j k|jmx clinonv|xc|kxv chk}| vmf}xn|~ ok|nenfc|nkovcol cook}ofmimo|v/

    nTjkom! nTcl col nTkl \k}fj ico}cav *j||t2++v}ttkx|/cttam/fki+ico}cav. TLE umxvnkov ke caa txkl}f| lkf}imo|c|nkov/

    nTjkom! nTcl col nTkl \k}fj }vmx `}nlmv cucnacham cv J\IA= pmhcttanfc|nkov |jc| pkxg keeanom ko |jm lmunfmv *j||t2++jmat/cttam/fki+ntjkom!j||t2++jmat/cttam/fki+ntcl! j||t2++jmat/cttam/fki+ntkl|k}fj./

    nTjkom no H}vnomvv pmhvn|m*j||t2++ppp/cttam/fki+ntjkom+h}vnomvv+no|m xc|nko+.xmemxmofm tkno| ekx caamo|mxtxnvm xmac|ml lkf}imo|c|nko ekx nKV no|m`xc|nko/

    Cttam Lmumaktmx Pmhvn|m *j||t2++lmumaktmx/cttam/fki. xm`nv|xc|nko xms}nxml!fko|cnov mz|movnum noekxic|nko ko mo|mxtxnvm lmtak~imo| ke nKV lmunfmv!lmumaktmx lkf}imo|c|nko ko CTNv col txk`xciino` |mfjons}mv ekx hk|j pmhhcvml col oc|num nKV cttanfc|nkov/

    nKV Mo|mxtxnvm Lmtak~imo| Cx|nfamv *j||t2++lmumaktmx/cttam/fki+anhxcx~+nkv+. txkunlmv c lm|cnaml xmemxmofm ko c ucxnm|~ ke mo|mxtxnvm lmtak~imo| |jmimv/\jmvm fco hm ek}ol no |jm nKV Lmumaktmx Anhxcx~ }olmx |jm Om|pkxgno` %No|mxom| Mo|mxtxnvm Lmtak~imo| |ktnf/

    = q L m e m o f m V n ` o c a v L n x m f | k x c | m

    http://www.disa.mil/Services/Network-Services/Voice/SBU-Voice/Policy-Guidance-Publicationshttp://www.disa.mil/Services/Network-Services/Voice/SBU-Voice/Policy-Guidance-Publicationshttps://benchmarks.cisecurity.org/en-us/?route=downloads.multiformhttps://benchmarks.cisecurity.org/en-us/?route=downloads.multiformhttp://www.apple.com/support/security/http://developer.apple.com/http://lists.apple.com/mailman/listinfo/security-announcehttp://support.apple.com/manualshttp://help.apple.com/iphonehttp://help.apple.com/ipadhttp://help.apple.com/ipodtouchhttp://www.apple.com/iphone/business/integration/http://developer.apple.com/http://developer.apple.com/library/ios/http://developer.apple.com/library/ios/http://developer.apple.com/http://www.apple.com/iphone/business/integration/http://help.apple.com/ipodtouchhttp://help.apple.com/ipadhttp://help.apple.com/iphonehttp://support.apple.com/manualshttp://lists.apple.com/mailman/listinfo/security-announcehttp://developer.apple.com/http://www.apple.com/support/security/https://benchmarks.cisecurity.org/en-us/?route=downloads.multiformhttps://benchmarks.cisecurity.org/en-us/?route=downloads.multiformhttp://www.disa.mil/Services/Network-Services/Voice/SBU-Voice/Policy-Guidance-Publicationshttp://www.disa.mil/Services/Network-Services/Voice/SBU-Voice/Policy-Guidance-Publications
  • 8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security

    7/72

    Cttam Lnvf}vvnkov pmhvn|m *j||t2++lnvf}vvnkov/cttam/fki.c pc~ |k vjcxms}mv|nkov! gokpaml`m! col clunfm pn|j k|jmx clinonv|xc|kxv/

    Cttam Icnano` Anv|v pmhvn|m *j||t2++ppp/anv|v/cttam/fki. v}hvfxnhm |k

    icnano` anv|v vk c`mofnmv fco fkii}onfc|m pn|j k|jmx clinonv|xc|kxv }vno`micna/

    Ktmo Vk}xfm pmhvn|m *j||t2++lmumaktmx/cttam/fki+ktmovk}xfm+.cffmvv |kLcxpno ktmo vk}xfm fklm! lmumaktmx noekxic|nko col ECSv/

    5 q L m e m o f m V n ` o c a v L n x m f | k x c | m

    http://discussions.apple.com/http://www.lists.apple.com/http://developer.apple.com/opensource/http://developer.apple.com/opensource/http://www.lists.apple.com/http://discussions.apple.com/
  • 8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security

    8/72

    Fjct|mx Kom

    No|xkl}f|nko |k Ikhnam Lmunfm Vmf}xn|~

    Cxfjn|mf|}xm

    Ikhnam lmunfmv ecfm |jm vcim vmf}xn|~ fjcaamo`mv cv |xcln|nkoca lmvg|kt fkit}|mxv!

    h}| |jmnx ikhnan|~ imcov |jm~ cxm cavk mztkvml |k c vm| ke xnvgv s}n|m lneemxmo| |k

    |jkvm ke c fkit}|mx no c enzml akfc|nko/

    \jnv fjct|mx txkunlmv |jm tacoono` v|mtv col cxfjn|mf|}xm fkovnlmxc|nkov omfmvvcx~

    |k vm| }t c vmf}xm mounxkoimo| ekx ikhnam lmunfmv/ I}fj ke |jm fko|mo| no |jnv

    fjct|mx nv tac|ekxi c`okv|nf! h}| vkim lm|cna nv pxn||mo |k vtmfnenf emc|}xmv cucnacham no

    nKV =/ Ok| caa ke |jmvm kt|nkov lnvf}vvml pnaa hm cttanfcham |k caa mounxkoimo|v/

    C`mofnmv omml |k |cgm no|k cffk}o| |jmnx kpo mounxkoimo| col fkovnlmx |jmnx

    cffmt|cham amuma ke xmvnl}ca xnvg/

    Cvv}it|nkov

    \jnv fjct|mx icgmv vkim hcvnf cvv}it|nkov xm`cxlno` |jm tmxucvnum |jxmc|

    mounxkoimo|2

    c| vkim tkno|! |jmxm pnaa hm ok om|pkxg fkoomf|nko txmvmo|

    caa xclnc|ml fkii}onfc|nko exki |jm lmunfm jcv |jm tk|mo|nca |k hm ikon|kxml

    caa fkoumo|nkoca akfc|nko! uknfm col VIV+IIV fkii}onfc|nkov cxm ko co

    novmf}xm fjcooma3

    3 Ca|jk}`j @VI ekx mzcitam nv mofx~t|ml ko vkim fcxxnmx om|pkxgv! n| nv ok| mofx~t|ml ko caa! col vkim ke |jm @VI mofx~t|nko ca`kxn|jiv v}fj

    cv C=+3 ko 8@ om|pkxgv cxm u}aomxcham |k c||cfg pn|j xcnohkp |chamv/ Pn|j iklmxc|m xmvk}xfmv! n| nv cavk emcvnham |k mzmf}|m c IN\I c||cfg

    c`cnov| @VI uknfm col jcum |jm IN\I |maa fanmo| lmunfmv |k lxkt co~ @VI mofx~t|nko/

    0 q L m e m o f m V n ` o c a v L n x m f | k x c | m

  • 8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security

    9/72

    fmx|cno noexcv|x}f|}xm v}ttkx|no` ikhnam lmunfmv fco hm |x}v|ml

    fcxxnmx noexcv|x}f|}xm fcook| capc~v hm |x}v|ml cv vmf}xm no caa fk}o|xnmv/

    Lmunfm Vmf}xn|~ kee |jm Om|pkxg

    Kofm c lmunfm nv kee |jm lc|c om|pkxg! |jmo txk|mf|nko ke lc|c ko |jm lmunfm nvlm|mxinoml h~ jkp |jm lmunfm nitamimo|v lc|c txk|mf|nko akfcaa~/ \jmxm fco hm ok

    xmemxxca |k c vmxumx ekx tkanf~! kx co~ xmik|m pntm fkiicol! ne |jmxm nv ok om|pkxg

    txmvmo|/

    Pjmo kee |jm om|pkxg! |jm vmf}xn|~ ke |jm lmunfm nv lm|mxinoml h~2

    pjc| tkanf~ jcv hmmo fcfjml akfcaa~ exki Mzfjco`m Cf|numV~of *MCV. kx

    Fkoen`}xc|nko Txkenamv

    pjc| |jm vmf}xn|~ vm||no`v vm| akfcaa~ ko |jm lmunfm cxm

    |jm lmunfmv fx~t|k`xctjnf fctchnan|nmv

    |jm fkxxmf| }vm ke enam txk|mf|nko facvvmv col gm~fjcno h~ Cttv |jm v|xmo`|j ke |jm lmunfm tcvvfklm/

    Lmunfm Vmf}xn|~ ko |jm Om|pkxg

    \jm `momxca txnofntam |jc| cttanmv ekx caa lc|c pjmo |jm lmunfm nv ko c om|pkxg nv |jc|

    pjmxmumx tkvvnham! caa om|pkxg |xceenf vjk}al hm mofx~t|ml! ok|no` |jc| caa facvvnenml

    om|pkxg |xceenf i}v| hm mofx~t|ml cv tmx |jm Fx~t|k`xctjnf E}olcimo|cavvmf|nko ke

    |jm NVI/ \jnv nv ok| imxma~ cfjnmuml h~ |}xono` ko c Unx|}ca Txnuc|m Om|pkxg *UTO.

    ekx caa |xceenf/ \~tnfcaa~ |jnv noukaumv }vno` c inz|}xm ke2

    VVA |k mofx~t| fkoomf|nkov |k vtmfnenf jkv|v v}fj cv icna vmxumxv kxicoc`mimo| vmxumxv |jc| omml |k hm jn`ja~ xmcfjcham

    VVA ekx co~ |xceenf |jc| jcv vmovn|num lc|c ko n|

    c UTO ekx ikxm `momxca no|xcom| cffmvv

    PTC8 pn|j MCT)\AV cv c inoni}i ekx Pn)En vmf}xn|~

    :48/3Z c}|jmo|nfc|nko ko Pn)En om|pkxgv fkihnoml pn|j Om|pkxg Cffmvv

    Fko|xkav |k fkitcx|imo|canvm Pn)En cffmvv |k lmenoml vmf}xn|~ lkicnov

    c f}v|ki! c}|jmo|nfc|ml CTO8 no fkob}of|nko pn|j fcxxnmxv |k

    fkitcx|imo|canvm ikhnam lc|c |xceenf |k lmenoml vmf}xn|~ lkicnov

    lc|c c| xmv| mofx~t|nko ko ikhnam lmunfmv col |xcovtkx| vmf}xn|~/

    Cttam T}vj Ok|nenfc|nko Vmxunfm

    Ico~ Cttv col vmxunfmv cvvkfnc|ml pn|j nKV lmunfmv |cgm cluco|c`m ke |jm Cttam

    T}vj Ok|nenfc|nko Vmxunfm *CTOV./ CTOV caakpv Cttv |k hm vmo| vicaa ok|nenfc|nkov!

    v}fj cv }tlc|no` |jm hcl`m ko co nfko! tac~no` co camx| |kom! kx lnvtac~no` c vjkx|

    |mz| imvvc`m/

    Mzcitamv ke Cttv |jc| ic~ }vm CTOV nofa}lm t}vj micna ok|nenfc|nko! Ikhnam Lmunfm

    Icoc`mimo| *ILI. vmxumxv! col nKV fanmo|+vmxumx cttanfc|nkov |jc| cxm cham |k

    mzmf}|m no |jm hcfg`xk}ol *m/`/ UkNT Cttv! v|xmcino` c}lnk Cttv! kx Cttv |jc| omml

    8 Cffmvv Tkno| Ocim *CTO. Vmm |jm c`mof~ |mamfkii}onfc|nkov fcxxnmx ekx ikxm lm|cna/

    : q L m e m o f m V n ` o c a v L n x m f | k x c | m

  • 8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security

    10/72

    |k hm akfc|nko cpcxm./ ILI vmxumxv vmol c xms}mv| |k |jm ILI c`mo| ko |jm lmunfm

    |k tjkom jkim }vno` CTOV/ \jm lmunfm col ILI vmxumx |jmo mzfjco`m ZIA

    s}mxnmv col xmvtkovmv novnlm co VVA |}ooma/

    En`}xm 32 Cttam T}vj Ok|nenfc|nko Vmxunfm

    N| pnaa hm omfmvvcx~ |k vm| cttxktxnc|m enxmpcaa x}amv |k mocham CTOV/ Xmemx |k

    Cttmolnz E ekx noekxic|nko ko tkx|v col vmxunfmv/

    Lc|c Xkcino`

    Lc|c xkcino` `momxcaa~ xmemxv |k c txkfmvv h~ pjnfj c lmunfm exki c vtmfnenf fcxxnmxv

    om|pkxg fco |cgm cluco|c`m ke |jm lc|c vmxunfm ko c lneemxmo| fcxxnmx/ Ekx mzcitam c

    lmunfm pn|j c VNI exki co C}v|xcanco fcxxnmx! hmno` }vml no |jm ]V ko c ]V fcxxnmxv

    om|pkxg |cgmv cluco|c`m ke |jm fcxxnmxv lc|c noexcv|x}f|}xm/ Ok|m |jc| xkcino` omml

    ok| hm no|mxoc|nkoca7 no vkim fk}o|xnmv fcxxnmxv pn|j lneemxmo| fkumxc`m cxmcv ic~

    caakp vkim lc|c xkcino` |k cuknl noexcv|x}f|}xm l}tanfc|nko/

    \jmxm cxm |pk icno xnvgv cvvkfnc|ml pn|j lc|c xkcino`/

    Pjmo xkcino` no|mxoc|nkocaa~! |jmxm cxm hk|j nitanml col cf|}ca akpmx amumav

    ke |x}v| pn|j |jm amuma ke mcumvlxkttno` col |xceenf coca~vnv kff}xxno` ko |jm

    ekxmn`o om|pkxg/ Cv vkko cv |xceenf `kmv no|mxoc|nkoca! n| nv ok ako`mx v}hbmf| |k

    |jm txnucf~ col fkov}imx txk|mf|nko xms}nxmimo|v |jc| ctta~ |k t}xma~

    lkimv|nf fkii}onfc|nkov no |jm jkv| fk}o|x~/ N| nv nofkxxmf| |k cvv}im |jc|

    |jm xn`j|v txk|mf|no` nolnunl}cav txnucf~ cxm }onekxi no|mxoc|nkocaa~/

    Ne lc|c xkcino` nv vpn|fjml kee ekx fkv| icoc`mimo|! |jmo |jm lmunfm nv kee

    |jm `xnl ekx icoc`mimo| col ikon|kxno` fkovkamv v}fj cv MCV! ILI! kx

    nFak}lv Enol I~ nTjkom/ No vkim fcvmv! txnuc|m CTO lc|c fco hm

    txmvmxuml cfxkvv no|mxoc|nkoca hk}olcxnmv hmfc}vm ke fkiimxfnca

    cxxco`mimo|v hm|pmmo fcxxnmxv/ Ok|m |jc| lc|c fkv|v fco v|naa hm jn`j/

    > q L m e m o f m V n ` o c a v L n x m f | k x c | m

  • 8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security

    11/72

    Cttv

    Kom ke |jm icbkx c||xcf|nkov ke |jm nKV tac|ekxi nv |jm cucnachnan|~ ke c pnlm xco`m ke

    Cttv col mcvm ke Ctt lmumaktimo|/ Cv k}|anoml no LVLv V|xc|m`nmv |k In|n`c|m

    \cx`m|ml F~hmx No|x}vnkov! LVL xmfkiimolv |jc| koa~ cttanfc|nkov |jc| cxm xms}nxml

    vjk}al hm nov|caaml/ \jmxm cxm c o}ihmx ke pc~v |k txkf}xm col akcl cttanfc|nkovko|k co nKV lmunfm/

    Ctt V|kxm

    \jm Ctt V|kxm nv jkv|ml col f}xc|ml h~ Cttam! col nv ekf}vml ko icvv)icxgm|

    lnv|xnh}|nko ke tcnl col exmm cttanfc|nkov/ \jmvm Cttv cxm akclml |k c lmunfm mn|jmx

    kumx)|jm)cnx *K\C. exki |jm Ctt V|kxm n|vmae! kx unc |jm n\}omv cttanfc|nko ko |jm jkv|

    fkit}|mx ekx |jm nKV lmunfm/

    Cttam icno|cnov lnvfxm|nkocx~ fko|xka ke f}xc|no` Ctt V|kxm fko|mo|! col fco xmikum

    cttanfc|nkov ekx c ucxnm|~ ke xmcvkov/ LVL xmfkiimolv |jc| Cttv cxm |mv|ml colcttxkuml txnkx |k }vm pn|jno co c`mof~/

    Ca|jk}`j Ctt V|kxm cttanfc|nkov fkim exki c f}xc|ml mounxkoimo| col |jm x}o|nim

    mounxkoimo| |jm Cttv mzmf}|m no nv c xmac|numa~ jcxlmoml kom! c`mofnmv vjk}al

    cvvmvv |jm xnvgv cvvkfnc|ml pn|j caakpno` }oxmv|xnf|ml }vmx)non|nc|ml nov|caac|nko ke

    Cttv/ Vkim xnvgv |jc| omml |k hm fkovnlmxml cxm2

    |jm nocttxktxnc|m }vm ke lc|c txk|mf|nko

    |jm nocttxktxnc|m }vm ke |xcovtkx| vmf}xn|~

    |jm nocttxktxnc|m cffmvv ke fko|cf| anv|! tjk|kv col akfc|nko noekxic|nko

    xm`nv|xc|nko ke ]XA jcolamxv/

    C`mofnmv fco icoc`m |jmvm xnvgv |jxk}`j lnvf}vvnkov pn|j |jm Ctt lmumaktmx kx

    |jxk}`j fkol}f|no` txkemvvnkoca tmom|xc|nko |mv|no`/

    Cl)jkf

    \jxk}`j |jm }vm ke co Cl)jkf txkunvnkono` txkenam! }t |k 344 nov|cofmv ke c vn`oml

    cttanfc|nko hnocx~ fco hm nov|caaml unc n\}omv! nTjkom Fkoen`}xc|nko ]|nan|~ kx Cttam

    Fkoen`}xc|kx/

    Cl)jkf cttanfc|nkov cxm akfgml |k c vtmfnenf vm| ke lmunfmv h~ |jm txkunvnkono` txkenam/\jmvm cxm ikv| fkiikoa~ }vml ekx hm|c |mv|no` ke cttanfc|nkov! kx pjmxm umx~

    xmv|xnf|ml lnv|xnh}|nko ke c vicaa o}ihmx ke nov|cofmv ke c hmvtkgm cttanfc|nko nv

    cttxktxnc|m/

    Mo|mxtxnvm No)Jk}vm Cttv

    C`mofnmv pn|j c L}o col Hxclv|xmm| Lc|c ]onumxvca O}ihmxno` V~v|mi *L]OV.6

    o}ihmx fco ctta~ |k hmfkim Mo|mxtxnvm lmumaktmxv/ \jnv caakpv |jm fxmc|nko col

    lnv|xnh}|nko ke f}v|ki cttanfc|nkov col txkunvnkono` txkenamv pn|jno co c`mof~ ekx n|v

    6L]OV nv c }ons}m onom ln`n| o}ihmx cvvn`oml |k h}vnomvv h~ L}o col Hxclv|xmm|/ Vmm

    ppp/loh/fki ekx ikxm noekxic|nko/

    34 q L m e m o f m V n ` o c a v L n x m f | k x c | m

    http://www.dnb.com/http://www.dnb.com/
  • 8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security

    12/72

    kpo }vm! ke pjnfj |jm lnv|xnh}|nko nv anin|ml |k |jmnx mitak~mmv col fko|xcf|kxv *n/m/

    ok| |k |jm `momxca t}hanf./

    Mo|mxtxnvm No)Jk}vm Cttv fco hm nov|caaml }vno`2

    n\}omv nTjkom Fkoen`}xc|nko ]|nan|~

    Cttam Fkoen`}xc|kx

    K\C unc c pmh vn|m

    icoc`ml Cttv }vno` c ILI vmxumx/

    Uka}im T}xfjcvm Txk`xci *UTT.

    \jm UTT caakpv h}vnomvvmv |k h}~ ctt v|kxm cttv no h}ag }vno` c fkxtkxc|m

    t}xfjcvno` fcxl/ UTT nv ok| cucnacham no C}v|xcanc/ Ekx ikxm noekxic|nko ko UTT `k

    |k j||t2++ppp/cttam/fki+h}vnomvv+utt+

    Icoc`ml Cttv

    Ctt V|kxm col Mo|mxtxnvm No)jk}vm Cttanfc|nkov nov|caac|nkov fco hm |xn``mxml unc co

    ILI vmxumx7 |jmvm Cttv cxm fcaaml Icoc`ml Cttv/ Icoc`ml Cttv fco hm

    }onov|caaml h~ |jm ILI vmxumx cako` pn|j co~ cvvkfnc|ml lc|c kx fco hm vm| |k

    }onov|caa pjmo |jm ILI txkenam nv xmikuml/ Tcnl Ctt V|kxm Cttv fco hm nov|caaml h}|

    xms}nxm UTT pjnfj nv f}xxmo|a~ }ocucnacham no C}v|xcanc/

    Pmh Cttv

    Vcecxn Ikhnam jcv mz|movnum v}ttkx| ekx J\IA=! FVV6 col BcucVfxnt| emc|}xmv ekx

    Pmh Cttv! nofa}lno` Cttv |jc| x}o e}aa vfxmmo col keeanom/ \jm Txkl}f| @}nlmv ekx

    nTkl \k}fj! nTjkom col nTcl cxm caa mzcitamv ke |jmvm/

    Pmh Cttv cxm ke|mo c }vme}a imfjconvi |k lmtak~ noekxic|nkoca cttanfc|nkov s}nfga~

    exki c fmo|xca no|xcom| tkno|7 jkpmumx Ikhnam Vcecxn ko nKV nv v|naa v}hbmf| |k |jm vcim

    |jxmc|v cv k|jmx hxkpvmxv/

    @VI Uknfm col VIV+IIV Fkii}onfc|nko

    Cv ok|ml txmunk}va~! @VI uknfm col VIV om|pkxgv jcum c o}ihmx ke vmf}xn|~

    pmcgomvvmv! pjmxm |jm fkoenlmo|ncan|~ kx c}|jmo|nfn|~ ke c uknfm kx VIV

    fkii}onfc|nko fcook| capc~v hm mov}xml! l}m |k hk|j Ico)no)|jm)Inllam c||cfgv

    col |jm ucxnc|nko no |jm vmf}xn|~ emc|}xmv nitamimo|ml h~ fcxxnmxv/ Cv v}fj! uknfm col

    VIV fkii}onfc|nko vjk}al momxcaa~ hm fkovnlmxml amvv vmf}xm |jco im|jklv |jc|

    nitamimo| c fjcno ke |x}v| hcfg no|k c }vmxv kpo c`mof~ v}fj cv VVA |}oomaaml

    micna/

    nImvvc`m no nKV = jcv ok| f}xxmo|a~ hmmo muca}c|ml h~ LVL col vjk}al hm |xmc|ml no

    |jm vcim pc~ cv IIV/

    n\}omv

    Vnofm |jm xmamcvm ke nKV =! n\}omv nv ok ako`mx c xms}nxmimo| ekx lmunfmicoc`mimo|/ Ne c`mofnmv lmfnlm |k }vm n\}omv cv tcx| ke |jmnx lmunfm icoc`mimo|

    33 q L m e m o f m V n ` o c a v L n x m f | k x c | m

    http://www.apple.com/business/vpp/http://www.apple.com/business/vpp/
  • 8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security

    13/72

    pkxgeakp n| fco hm akfgml lkpo ekx }vm ko c`mof~ V|colcxl Ktmxc|no` Mounxkoimo|v

    *VKM. unc xm`nv|x~ gm~v kx ZIA txktmx|~ anv|v cv lm|cnaml jmxm2

    j||t2++lmumaktmx/cttam/fki+anhxcx~+nkv+&emc|}xmlcx|nfamv+EC[Lmtak~no`[n\}omv+

    No|xkl}f|nko+No|xkl}f|nko/j|ia

    Cttam NLv

    Kom ke |jm kx`convc|nkoca xnvgv |jc| vkim }vmxv mztxmvv fkofmxo chk}| nv c

    tmxfmnuml omml |k cvvkfnc|m c fxmln| fcxl pn|j mumx~ Cttam NL/ \jnv nv cf|}caa~ c

    invfkofmt|nko! col ok cvvkfnc|nko pn|j c fxmln| fcxl nv xms}nxml/ \jm ekaakpno`

    cttxkcfjmv cxm xmfkiimolml c| |jm tkanf~ col txkfml}xca amuma/

    Ekx c Hxno` ^k}x Kpo Lmunfm *H^KL. iklma! |jmxm nv `momxcaa~ nitanml |x}v|

    |jc| }vmxv fco fko|no}m |k nov|caa Cttv ko |jmnx kpo lmunfm/ \jmxmekxm! }vmxv

    ic~ xm`nv|mx |jmnx mznv|no` Cttam NL cv tcx| ke |jm txkfmvv ke v}hin||no` |k |jm

    c`mof~ Cffmt|cham ]vm Tkanf~ *C]T./ Ne }vmxv |jmo t}xfjcvm cttxkuml Cttv!}vno` |jmnx kpo fxmln| fcxl! |jm~ fco hm xmnih}xvml/ \jnv txkunlmv kom

    im|jkl |k fko|xka mztmoln|}xm ke c`mof~ e}olv/ Co ILI fkovkam fco hm

    }vml |k ikon|kx pjc| cttanfc|nkov jcum hmmo nov|caaml/

    Ekx co c`mof~ lmunfm iklma! pjmxm }vmxv cxm ok| caakpml |k nov|caa |jmnx kpo

    Cttv! tmx lmunfm Cttam NLv cxm fxmc|ml |jc| cxm ok| anogml |k c fxmln| fcxl/

    \jm txkfmvv ekx lkno` |jnv nv lmvfxnhml jmxm2

    j||t2++v}ttkx|/cttam/fki+gh+J\8=6

  • 8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security

    14/72

    Tacoono` S}mv|nkov

    \jm ekaakpno` s}mv|nkov keemx c `}nlm ekx fkovnlmxc|nkov no nitamimo|no` tkanf~ ko |jm

    lmunfm/

    S}mv|nko Fkiimo|v+Vmamf|nko

    Jkp vmovn|num nv |jm lc|c N ci

    no|molno` |k unmp kx v|kxm ko c ikhnam

    lmunfm;

    No caa fcvmv c v|xko` tcvvfklm vjk}al hm

    vm| ko |jm lmunfm no kxlmx |k mocham lc|c

    txk|mf|nko/ Ne |jm lc|c nv fkino` kumx c

    om|pkxg! |jmo n| vjk}al hm vmf}xml h~

    vkim fkihnoc|nko ke mofx~t|nko! |~tnfcaa~

    VVA kx UTO/ Ne |jm lc|c nv facvvnenml xmemx

    |k |jm NVI Fko|xkav Ico}ca Fx~t|k`xctjnf

    E}olcimo|cavvmf|nko/

    Nv n| cttxktxnc|m |jc| lc|c `m|v |k |jm

    lmunfm kumx c ikhnam lc|c kx pnxmamvv

    om|pkxg;

    ]vno` Cttam Fkoen`}xc|kx ko c |x}v|ml

    fkit}|mx ic~ hm co cffmt|cham

    ca|mxoc|num |k |xcovtkx| vmf}xn|~/

    Lk N pco| }vmxv |k fkaachkxc|m }vno`|jc| lc|c no c om|pkxgml ecvjnko;

    Ne }vmxv omml |k vjcxm lc|c kumx com|pkxg! |jmo c vmf}xm fkoomf|nko vjk}al

    hm no tacfm hm|pmmo |jm }vmxv

    fkaachkxc|no`/

    36 q L m e m o f m V n ` o c a v L n x m f | k x c | m

  • 8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security

    15/72

    S}mv|nko Fkiimo|v+Vmamf|nko

    Lkmv i~ c`mof~ pco| |k caakp

    mitak~mm kpoml lmunfmv |k cffmvvvkim c`mof~ lc|c;

    Caakpno` mitak~mm kpoml lmunfmv }v}caa~

    jcv c vn`onenfco| xml}f|nko no fkv|v no hk|jtxkf}xmimo| col icoc`mimo| ke ikhnam

    lmunfm eamm|v! h}| no|xkl}fmv c lneemxmo|

    vm| ke mztmf|c|nkov chk}| |jm amuma ke

    fko|xka co c`mof~ fco mzmx| kumx |jm

    lmunfmv/ \jm hcacofm tkno| hm|pmmo

    fko|xka col eamznhnan|~ nv }v}caa~ lneemxmo|!

    col nv ikxm fkov}a|c|num no txkfmvv! |jco

    ekx c`mof~ kpoml lmunfmv/

    Co nitkx|co| tkno| |k xmimihmx nv |jc|

    c`mofnmv pnaa omml |k fkovnlmx |jmnxam`nvac|ml txnucf~ khan`c|nkov pjmo

    lm|mxinono` tkanf~ ekx cffmvvno`+pntno`

    mitak~mm kpoml lmunfmv/

    Lkmv i~ c`mof~ pco| |k caakp c

    inz|}xm ke mitak~mm col c`mof~

    kpoml lmunfmv;

    Ne inzml lmunfm kpomxvjnt nv caakpml! |jmo

    fkovnlmxc|nko ommlv |k hm `numo |k pjnfj!

    ne co~! lneemxmofmv no cffmvv |k noekxic|nko

    col vmxunfmv cxm cttxktxnc|m/ No vkim

    fcvmv |jnv fk}al noukaum |jm }vm ke

    icoc`ml fko|cnomx cttanfc|nkov |k

    vmtcxc|m c`mof~ lc|c exki tmxvkoca lc|c/

    Lkmv i~ c`mof~ omml lneemxmo|

    tkanfnmv cttanml |k c lmunfm

    lmtmolno` ko pjm|jmx n| nv mitak~mm

    kx c`mof~ kpoml;

    \jnv nv c fkitamz nvv}m |jc| xms}nxmv c

    inz|}xm ke }vmx non|nc|ml kt|)no

    Fkoen`}xc|nko Txkenamv! ILI icoc`ml

    txkenamv col txm)nov|caaml txkenamv ko c tmx

    lmunfm hcvnv! cttxktxnc|m |k n|v fko|mz|/ Novkim fcvmv |jnv fk}al noukaum }vm ke

    icoc`ml fko|cnomx cttanfc|nkov |k xnvg

    icoc`m |jm vmtcxc|nko ke c`mof~ lc|c

    exki tmxvkoca lc|c/

    3< q L m e m o f m V n ` o c a v L n x m f | k x c | m

  • 8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security

    16/72

    S}mv|nko Fkiimo|v+Vmamf|nko

    Pjc| hcacofm lkmv i~ c`mof~ omml

    |k vm| hm|pmmo |jm cluco|c`mv ke}vmxv hmno` cham |k nov|caa Ctt V|kxm

    Cttv |jmivmaumv! umxv}v |jm

    kumxjmcl ke icoc`no` |jnv fmo|xcaa~;

    \jm ikxm vmovn|num |jm lc|c hmno`

    cffmvvml h~ c lmunfm nv! |jm `xmc|mx |jmxnvgv cxm/ \~tnfcaa~ c fkihnoc|nko ke co

    cttxkuml pjn|manv| col ikon|kxno` unc

    ILI pnaa in|n`c|m |jm xnvgv/ C| jn`j amumav

    ke vmovn|nun|~! cttanfc|nkov ic~ omml |k hm

    txm)vfxmmoml! col txm)akclml h~ N\ v|cee

    hmekxm lmunfm nvv}m! kx lmumaktml no)

    jk}vm col lmtak~ml |k lmunfmv/

    Lk i~ c`mof~v cffmt|cham }vc`mtkanfnmv xms}nxm mztanfn| ml}fc|nko

    col moekxfmimo|;

    C]T fkitancofm txnkx |k lmunfmv hmno`lmtak~ml nv fxn|nfca/ C]T ml}fc|nko

    fko|mo| fco hm txkunlml cv c Pmh Ctt

    col Pmh Fant ko |jm lmunfmv ekx }vmx

    xmemxmofm/ K|jmx tkanf~ fko|xkav unc MCV!

    ILI col Fkoen`}xc|nko txkenam ic~ hm

    xms}nxml/

    Cxm caa ke i~ lmunfmv pn|j kom fcxxnmx!

    col c`mof~ kpoml;

    Ne c`mofnmv jcum c vno`am hnaano`

    cxxco`mimo| pn|j c fcxxnmx! |jmo }vm ke cf}v|ki vmf}xml CTO pn|j c txkz~! fco

    cvvnv| no moekxfno` |n`j|mx tkanf~ fko|xkav

    ekx lmunfmv ko |jm ikhnam lc|c om|pkxg/ No

    ico~ fcvmv! c f}v|ki CTO pn|j MCV col

    co c}|jmo|nfc|ml! VVA mofx~t|ml xmumxvm

    txkz~ ic~ hm v}eenfnmo| vmf}xn|~ ekx akp)

    amuma vmovn|nun|~ lc|c/

    Lk N omml |k v}ttkx| lmunfmv exki

    i}a|ntam fcxxnmxv col c inz ke

    tmxvkoca col c`mof~ kpomxvjnt;

    C UTO vka}|nko ic~ hm ikxm cttxktxnc|m

    |jco c f}v|ki CTO/

    3= q L m e m o f m V n ` o c a v L n x m f | k x c | m

  • 8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security

    17/72

    S}mv|nko Fkiimo|v+Vmamf|nko

    Jkp fco co c`mof~ xmik|m pntm

    lmunfmv kx vmf}xm fko|cnomxvpjmomumx |jm~ cxm xmcfjcham ko |jm

    om|pkxg;

    Xmik|m pntm nv }v}caa~ hmv| icoc`ml h~

    c fkihnoc|nko ke MCV kx co ILIfkovkam/ Ne c`mofnmv lk ok| jcum c 8

  • 8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security

    18/72

    Fjct|mx \pk

    Mofx~t|nko no nKV

    \jnv fjct|mx nv txkunlml |k jmat c`mofnmv }olmxv|col |jm }olmxa~no` mofx~t|nko

    cxfjn|mf|}xm mitak~ml no nKV = |k jmat icgm co noekximl cvvmvvimo| ke |jm xnvgv |k

    C}v|xcanco kumxoimo| noekxic|nko/

    Lc|c Txk|mf|nko

    Cttam jcv mztacnoml |jc| kom ke |jm `kcav ke nKV nv |k 'gmmt lc|c vcem mumo pjmo |jm

    lmunfm nv fkitxkinvml'/ Jkpmumx! cv pnaa hm mztacnoml no |jnv fjct|mx! |jm ko}v

    xmicnov acx`ma~ ko |jm lmumaktmx cv |k jkp i}fj kx jkp an||am lc|c txk|mf|nko nv

    cttanml/

    Ekx |jnv xmcvko! n| nv nitkx|co| |jc| co c`mof~ pnvjno` |k }vm c tcx|nf}acx cttanfc|nko

    }olmxv|colv vmf}xn|~ emc|}xmv ke nKV = no kxlmx |k icgm c ikxm noekximl lmfnvnko cv

    |k pjm|jmx |jm cttanfc|nko imm|v |jm vmf}xn|~ ommlv ke |jm c`mof~/

    \jnv nv tcx|nf}acxa~ nitkx|co|! cv c| |jm |nim ke |jnv t}hanfc|nko! |jm koa~ oc|num

    cttanfc|nko icgno` e}aa }vm ke lc|c txk|mf|nko pn|jno nKV = nv Icna/ N| nv nitkx|co| ekx

    clinonv|xc|kxv |k ok|m |jc| }vmxv fco v|naa ikum c||cfjimo|v k}| ke Icna |k k|jmx Cttv

    |jc| }vm akpmx lc|c txk|mf|nko facvvmv/ \jnv fco jcttmo ne nov|caaml Cttv jcum

    xm`nv|mxml ]XA jcolamxv ekx enam |~tmv/ Ekx TXK\MF\ML lmunfmv! c`mofnmv vjk}al

    ok| caakp }vmx nov|caac|nko ke Cttv/

    Vmfxm|v col Lc|c

    Pn|jno nKV =! noekxic|nko v|kxml h~ Cttv fco hm hxkcla~ fc|m`kxnvml cv mn|jmx c

    vmfxm| kx cv lc|c/ \jm |mxi vmfxm| fco hm }olmxv|kkl |k imco noekxic|nko h~ pjnfj

    kom ic~ `m| cffmvv |k lc|c7 |jnv fco nofa}lm v~v|mi fxmlmo|ncav! gm~v col

    tcvvpkxlv/ Lc|c ko |jm k|jmx jcol! xmemxv |k }vmx+cttanfc|nko lc|c v}fj cv |mz|!

    tnf|}xmv! lkf}imo|v col cangm/

    Cffkxlno`a~ |jmxm cxm |pk lc|c v|kxmv pjmxm c lmumaktmx ic~ fjkkvm |k v|kxm

    noekxic|nko2 |jm Enam V~v|mi col |jm Gm~ Fjcno/ Lmumaktmxv cxm mofk}xc`ml |k v|kxmvmfxm|v pn|jno |jm Gm~ Fjcno col tacfm ikxm `momxca cttanfc|nko lc|c pn|jno |jm Enam

    V~v|mi/

    Noekxic|nko v|kxml pn|jno mn|jmx ke |jmvm v|kxmv fco hm f}v|kinvml |k lneemxmo| amumav

    ke vmf}xn|~! cffmvvnhnan|~ col tkx|chnan|~/ Ok|m |jc| n| nv mo|nxma~ }t |k |jm lmumaktmx |k

    lm|mxinom |jm amuma ke txk|mf|nko cttanml/ \jnv fjknfm nv iclm h~ |jm Ctt lmumaktmx

    |jxk}`j CTN fcaav col |jm fjknfm ke cucnachnan|~ cv lm|cnaml no \cham 3/

    N| nv nitkx|co| |k ok|m |jc| |jm lmec}a| enam v~v|mi txk|mf|nko facvv ko enamv nv Okom

    *cffmvvnham capc~v.! pjnam gm~ fjcno n|miv cxm vm| |k '///Pjmo]oakfgml' *cffmvvnham

    koa~ pjmo }oakfgml./

    30 q L m e m o f m V n ` o c a v L n x m f | k x c | m

  • 8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security

    19/72

    Ok|m2 C`mofnmv lmumaktno` kx icgno` }vm ke cttanfc|nkov jcolano` vmovn|num lc|c

    vjk}al |cgm fcxm |k noumv|n`c|m jkp lc|c nv jcolaml pn|jno |jmnx cttanfc|nko/ \jm~

    i}v| mov}xm |jm cttxktxnc|m lc|c v|kxmv col cucnachnan|~ eac`v *k}|anoml no \cham 3.

    cxm }vml |k cfjnmum |jm vmf}xm jcolano` ke C}v|xcanco `kumxoimo| noekxic|nko/

    Facvvmv ke Txk|mf|nko

    No umxvnko < ke nKV! Cttam no|xkl}fml |jm fkofmt| ke txk|mf|nko facvvmv ekx v|kxml

    lc|c/ \jnv jcv fko|no}ml no nKV = pn|j vkim nitkx|co| mojcofmimo|v/

    Co cttanfc|nko lmumaktmx jcv |jm kt|nko ke vm||no` |jm ekaakpno` cucnachnan|~ eac`v pn|j

    co~ Enam V~v|mi Mamimo| kx Gm~ Fjcno mo|x~ |jm~ fxmc|m/

    Cucnachnan|~ Enam V~v|mi Mamimo| Gm~ Fjcno Mo|x~

    Pjmo }oakfgml Fkitam|m ///Pjmo]oakfgml

    Pjnam akfgml ///Fkitam|m]oamvvKtmo O+C

    Ce|mx enxv| }oakfg ///Fkitam|m]o|naEnxv|]vmxC}|jmo|nfc|nko ///Ce|mxEnxv|]oakfg

    Capc~v Okom ///Capc~v

    \cham 32 Cvvn`ocham Enam V~v|mi col Gm~ Fjcno Txktmx|nmv

    Exki \cham 3! n| nv tkvvnham |k chv|xcf| |jmvm vm||no`v no|k ek}x v|colcxl facvvmv ke

    fko|cnomxv pn|j |jm ekaakpno` hmjcunk}x2

    Facvv C2 Enamv col fxmlmo|ncav pn|jno |jnv facvv fco koa~ hm xmcl kx pxn||mo pjmo

    |jm lmunfm nv }oakfgml/

    Facvv H2 \jxk}`j |jm }vm ke t}hanf gm~ fx~t|k`xctj~! enamv pn|jno |jnv facvv fco hm

    pxn||mo ce|mx |jm lmunfm nv non|ncaa~ }oakfgml! col fco hm xmcl koa~ pjmo }oakfgml/

    Facvv F2 Enamv col fxmlmo|ncav pn|jno |jnv facvv fco hm xmcl kx pxn||mo koa~ ce|mx

    |jm lmunfm nv non|ncaa~ }oakfgml/

    Facvv L2 \jm akpmv| txk|mf|nko facvv! enamv col fxmlmo|ncav pn|jno |jnv facvv fco hm

    xmcl kx pxn||mo |k no caa fkoln|nkov/

    nKV = Mofx~t|nko Cxfjn|mf|}xm

    En`}xm 8 naa}v|xc|mv co mzcitam pjmxm ek}x enamv mznv|! mcfj cvvn`oml c lneemxmo| facvv2

    Enam 3 nv ke |~tm Facvv C2 cffmvvnham koa~ pjmo }oakfgml/

    Enam 8 nv ke |~tm Facvv H2 fco hm pxn||mo |k ce|mx enxv| }oakfg! h}| fco koa~ hm xmcl

    pjmo }oakfgml/

    Enam 6 nv ke |~tm Facvv F2 cffmvvnham ce|mx enxv| }oakfg/

    Enam < nv ke |~tm Facvv L2 cffmvvnham capc~v/

    Ok|m |jc| pjnam enamv pmxm }vml ekx |jm t}xtkvmv ke |jnv mzcitam! pn|j |jm mzfmt|nkoke Facvv H! Gm~ Fjcno mo|xnmv fk}al b}v| cv mcvna~ hm }vml no |jmnx tacfm/

    3: q L m e m o f m V n ` o c a v L n x m f | k x c | m

  • 8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security

    20/72

    Vninacx |k |jm Enam V~v|mi! co cttanfc|nko'v fxmlmo|ncav v|kxml pn|jno |jm Gm~ Fjcno

    cxm mofx~t|ml }vno` |jm cttxktxnc|m Facvv Gm~ ek}ol pn|jno |jm V~v|mi Gm~hc`

    *tamcvm vmm |jm Gm~hc` Vmf|nko ekx ikxm noekxic|nko./

    Jkpmumx! cv naa}v|xc|ml no \cham 3! |jm txk|mf|nko keemxml h~ Facvv H nv koa~ cucnacham

    |k Enam V~v|mi Mamimo|v/

    En`}xm 82 Enam V~v|mi Cxfjn|mf|}xm

    Cv fco hm vmmo no En`}xm 8! nxxmvtmf|num ke facvv! mcfj enam nv mofx~t|ml pn|j hk|j c

    }ons}m Enam Gm~ col c Enam V~v|mi Gm~/

    \jm Enam V~v|mi Gm~ nv }vml |k mofx~t| caa lc|c pn|jno |jm lmunfm/ Cv n| nv v|kxml

    ktmoa~ n|v }vm lkmv ok| cll |k |jm fx~t|k`xctjnf vmf}xn|~ ke lc|c! h}| nv nov|mcl }vml

    |k ecfnan|c|m c xmik|m pntm/ Tamcvm vmm |jm Xmik|m Pntm vmf|nko ekx ikxm noekxic|nko

    xm`cxlno` |jnv e}of|nko/

    \jm Enam Gm~ nv v|kxml pn|jno |jm enamv im|clc|c! pjnfj nv n|vmae mofx~t|ml h~ |jm enamv

    fkxxmvtkolno` Facvv Gm~/ \jm V~v|mi Gm~hc` v|kxmv caa Facvv Gm~v pn|jno |jm

    3> q L m e m o f m V n ` o c a v L n x m f | k x c | m

  • 8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security

    21/72

    lmunfm/ Tamcvm xmemx |k |jm Gm~hc` vmf|nko ekx ikxm noekxic|nko ko lneemxmo| |~tmv ke

    Gm~hc`v }vml |jxk}`jk}| |jm v~v|mi/

    ]tko |}xono` ko |jm lmunfm! |jm Facvv C! Facvv H *t}hanf col txnuc|m. col Facvv F

    gm~v cxm non|ncaa~ nocffmvvnham cv |jm~ xma~ ko |jm Tcvvfklm Gm~ |k hm }omofx~t|ml/

    Pjmo |jm lmunfm nv enxv| }oakfgml h~ |jm }vmx! |jxk}`j |jm }vm ke |jmnx Tcvvfklm!

    |jmvm gm~v cxm }omofx~t|ml! v|kxml ekx }vm col |jm lmxnuml Tcvvfklm Gm~ txkit|a~

    ekx`k||mo/

    \jm Lmunfm Gm~ nv v|kxml pn|jno! col omumx lnu}a`ml exki! |jm Jcxlpcxm Vmf}xn|~

    Ikl}am *JVI./ \jnv cf|v |k mofx~t| col lmfx~t| enamv c| pnaa }vno` |jm Lmunfm Gm~/

    Tamcvm xmemx |k |jm Jcxlpcxm Vmf}xn|~ Ikl}am Vmf|nko ekx ikxm noekxic|nko ko |jnv

    fkitkomo|/

    Cv fco hm khvmxuml! |jm Facvv L Gm~ nv mofx~t|ml }vno` |jm Lmunfm Gm~/ Cv |jnv

    lmfx~t|nko txkfmvv nv capc~v cucnacham! nxxmvtmf|num ke |jm v|c|m ke |jm lmunfm! enamvtxk|mf|ml h~ |jnv Facvv Gm~ cxm cffmvvnham capc~v/

    Enocaa~! pjmo |jm lmunfm xm)mo|mxv c akfgml v|c|m! |jm Facvv C Gm~ col Facvv H

    Txnuc|m Gm~ cxm ekx`k||mo! txk|mf|no` |jc| lc|c! amcuno` |jm Facvv F Gm~ col Facvv H

    T}hanf Gm~ cffmvvnham/

    Xmik|m Pntm

    Xmik|m Pntm nv |jm chnan|~ ekx c om|pkxg fkoomf|ml nKV lmunfm |k jcum |jm lc|c

    pn|jno |jm lmunfm iclm nocffmvvnham *mocf|ml h~ xmfmnuml v~v|mi fkiicol./ \jnv nv

    cfjnmuml no nKV h~ mxcvno` |jm Enam V~v|mi Gm~! pjnfj nv }vml h~ |jm lmunfm |k

    mofx~t| caa }vmx lc|c *cv vjkpo no En`}xm 8./ Ekx |jnv xmcvko! kofm |jnv gm~ nv

    xmikuml! ok }vmx lc|c pn|jno |jm lmunfm nv xm|xnmucham/

    Jcxlpcxm Vmf}xn|~ Ikl}am *JVI.

    No|mxoca |k |jm lmunfm! |jm JVI nv |jm koa~ imcov h~ pjnfj nKV fco icgm }vm ke |jm

    Lmunfm Gm~/ \jnv Lmunfm Gm~ nv }ons}m |k |jm lmunfm col nv ok| mztkx|cham }vno` co~

    oko)noucvnum |mfjons}m/

    Ekx |jnv xmcvko *cv enamv mofx~t|ml pn|j |jm Lmunfm Gm~ fco koa~ hm lmfx~t|ml ko |jm

    lmunfm.! |jm nKV cxfjn|mf|}xm icgmv n|vmae xmvnv|co| |k kee)anom c||cfgv/ \jm ikv|

    vn`onenfco| hmno` c hx}|m)ekxfm |k mzjc}v| col |j}v lnvfkumx |jm }vmx'v Tcvvfklm Gm~/

    Gm~hc`v

    \jmxm cxm |jxmm |~tmv ke Gm~hc`v }vml no nKV2 V~v|mi! Hcfg}t col Mvfxkp/

    Caa Gm~hc`v cxm xmvtkovnham ekx v|kxno` |jm v~v|miv Facvv Gm~v! pjnfj cxm no |}xo

    }vml |k `cno cffmvv |k nolnunl}ca enamv kx Gm~ Fjcno mo|xnmv *cv vjkpo no En`}xm 8./

    \jm V~v|mi Gm~hc`! vjkpo no En`}xm 8! nv }vml no|mxocaa~ pn|jno |jm lmunfm |k

    ecfnan|c|m |jm }vmxv cffmvv |k |jm Enam V~v|mi col Gm~ Fjcno/

    84 q L m e m o f m V n ` o c a v L n x m f | k x c | m

  • 8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security

    22/72

    \jm Hcfg}t Gm~hc` nv lmvn`oml |k ecfnan|c|m hcfg}tv no c vmf}xm icoomx/ \jnv nv

    lkom h~ |xcovemxxno` |jm mofx~t|ml fko|mo|v ke |jm Enam V~v|mi! col Gm~ Fjcno |k c

    xmik|m v~v|mi cako` pn|j |jm Hcfg}t Gm~hc`/

    \jm }vmx |jmo jcv |jm kt|nko |k tcvvpkxl txk|mf| |jnv Gm~hc`7 |jnv lmfnvnko jcv

    nitanfc|nkov fkofmxono` |jm tkx|chnan|~ ke |jm Gm~hc`/ Ne |jm }vmx vtmfnenmv ctcvvpkxl! |jm Hcfg}t Gm~hc` nv |jmo mofx~t|ml pn|j |jnv tcvvpkxl/

    @numo |jm tcvvpkxl! |jnv lc|c fco |jmo hm xmv|kxml |k co nKV lmunfm *ok|m jkpmumx

    |jc| ne c lmumaktmx jcv vtmfnenml lc|c '\jnvLmunfmKoa~'! v}fj lc|c pnaa ok| hm iclm

    tkx|cham./ Ne! jkpmumx! |jm }vmx lkmv ok| vm| c tcvvpkxl! |jmo |jm Hcfg}t Gm~hc` nv

    txk|mf|ml }vno` |jm Lmunfm Gm~ pjnfj omumx amcumv |jm lmunfm/ Fkovms}mo|a~! |jm

    Hcfg}t Gm~hc` fco koa~ hm xmv|kxml |k |jm kxn`noca lmunfm/

    \jm Mvfxkp Gm~hc` nv lmvn`oml |k mocham c tcnxml lmunfm *okxicaa~ c fkit}|mx. |k

    `cno e}aa cffmvv |k |jm lmunfm'v enam v~v|mi pjmo |jm lmunfm nv no c akfgml v|c|m/

    Tcnxno` no |jnv fko|mz| xmemxv |k fkoomf|no` |jm nKV lmunfm no co }oakfgml v|c|m *kxpn|jno 34 vmfkolv ke hmno` no co }oakfgml v|c|m. |k |jm k|jmx lmunfm no s}mv|nko/

    Co mzfjco`m |jmo kff}xv! pjmxm |jm tcnxml lmunfm xmfmnumv c fkt~ ke |jm nKV

    lmunfmv Mvfxkp Gm~hc`/ \jnv Gm~hc` nv mofx~t|ml }vno` |jm nKV lmunfm'v Lmunfm

    Gm~! |j}v xmv|xnf|no` cffmvv pjmo lnvfkoomf|ml exki |jm nKV lmunfm/

    S}mv|nkov |k cvg Ctt Lmumaktmxv

    3/ Pjc| nv |jm eakp ke lc|c |jxk}`jk}| |jm cttanfc|nko7 vk}xfm! v|kxc`m!txkfmvvno` col |xcovinvvnko;

    8/ Ke |jm lc|c v|kxml ko |jm lmunfm! pjc| facvv ke fko|cnomx nv n| v|kxml no;

    Ok|m2 Cttanfc|nko lc|c vjk}al capc~v }vm Facvv C ekx v|kxc`m pjmxm

    tkvvnham/ Ne |jm cttanfc|nko ommlv |jm chnan|~ |k pxn|m |k lc|c no |jm

    hcfg`xk}ol! Facvv H vjk}al hm fkovnlmxml/

    6/ Ke |jm lc|c |xcovin||ml kx xmfmnuml! nv n| lkom |jxk}`j c vmf}xm imcov;

    C`mofnmv fco xmemx lmumaktmxv |k |jm Cttam PPLF 8433 txmvmo|c|nko!

    Vmvvnko 84: ko Vmf}xno` nKV Cttanfc|nkov/

  • 8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security

    23/72

    Clln|nkocaa~ Vmvvnkov 84< col 84> exki |jm Lmumaktmx PPLF 8434 Txmvmo|c|nko

    txkunlm xmamuco| hcfg`xk}ol noekxic|nko ko nKV

  • 8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security

    24/72

    Fjct|mx \jxmm

    Vmf}xn|~ Emc|}xmv col Fctchnan|nmv

    \jnv fjct|mx fkumxv ikhnam lmunfm vmf}xn|~ emc|}xmv! col |jm mochano` |mfjokak`nmv

    ekx nitamimo|no` |jkvm emc|}xmv }olmx nKV col xmac|ml noexcv|x}f|}xm/

    Ikhnam Lmunfm Vmf}xn|~ \kkahkz

    Pjmo vm||no` }t c vmf}xm v~v|mi |jc| }vmv ikhnam lmunfmv! |jm vmf}xn|~ |kkav col

    vka}|nkov cxm ok| ko c anomcx vfcam! pjmxm c vka}|nko |k c jn`jmx vmf}xn|~ mounxkoimo|

    nv txkunlml h~ kom txkl}f| cakom/ Xc|jmx! |jm vmf}xn|~ tkv|}xm ke |jm lmunfmv fco hm

    txk`xmvvnuma~ nitxkuml h~ fkihnoc|nkov ke fctchnan|nmv vjkpo hmakp/

    En`}xm

  • 8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security

    25/72

    Vmf}xn|~ emc|}xmv no nKV

    nKV txkunlmv c o}ihmx ke emc|}xmv |jc| nofa}lm2

    icoc`mimo| ke fxmlmo|ncav col tcvvpkxlv pn|j Gm~ Fjcno mofx~t|nko ke lc|c no |xcovn| *}vno` LCFC< col LCFT=.

    mofx~t|nko ke lc|c c| xmv| col no |xcovn| *}vno` LCFC col LCFT.

    ln`n|ca vn`oc|}xmv! fmx|nenfc|mv col |x}v| vmxunfmv

    xcolkinvc|nko vmxunfmv

    fklm vn`oml cttanfc|nkov/

    Mo|mxtxnvm No)Jk}vm Cttanfc|nkov lmumaktml ekx co c`mof~ vjk}al `momxcaa~ |cgm

    cluco|c`m ke |jmvm vmxunfmv! xc|jmx |jco xm)noumo|no` |jm vcim fctchnan|nmv/ Ikxm

    noekxic|nko nv cucnacham no lm|cna exki |jm Cttam Lmumaktmx pmh vn|m2

    j||t2++lmumaktmx/cttam/fki+anhxcx~+nkv+&lkf}imo|c|nko+Vmf}xn|~+Fkofmt|}ca+

    Vmf}xn|~[Kumxunmp+No|xkl}f|nko+No|xkl}f|nko/j|ia

    En`}xm =2 Vmf}xn|~ Vmxunfmv no nKV

    nKV

  • 8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security

    26/72

    Enol I~ nTjkom }vmx no|mxecfm

    @momxcaa~! pjmo c`mof~ lmunfmv cxm }vml! |jm nFak}l cffk}o| pk}al hm |jm vcim cv

    |jm Cttam NL }vml |k nov|caa c`mof~ kpoml Cttv! col vm| }t txnkx |k nvv}no` |jm

    lmunfm/ Ok|m |jc| |jnv xms}nxmv c om|pkxg fkoomf|nko! akfc|nko vmxunfmv |k hm cf|num!

    col |jm lmunfm |k jcum kt|ml no |k |jm Enol I~ nTjkom vmxunfm/

    Unx|}canvc|nko

    C`mofnmv ic~ kt| |k txmvmo| vkim c`mof~ cttanfc|nkov |k nKV lmunfmv kumx c

    om|pkxg unc c Unx|}ca Lmvg|kt Noexcv|x}f|}xm *ULN./

    \jnv pkxgv tcx|nf}acxa~ pmaa ekx }vmxv pjk cxm infxkikhnam n/m/ |jm~ ikum chk}| c

    h}nalno` kx c fcit}v l}xno` |jmnx pkxg lc~! col cham |k |cgm cluco|c`m ke |jm

    xmac|numa~ jn`j hcolpnl|j ke c vmf}xm Pn)En om|pkxg! h}| cxm ok| v|xnf|a~ cpc~ exki |jm

    keenfm akfc|nko/ Vka}|nkov no |jnv vtcfm txkunlm co chnan|~ |k |}om |jm cttanfc|nko ]N ekx

    c vicaa vfxmmo v}n|cham ekx txmvmo|no` |k ikhnam lmunfmv! xc|jmx |jco imxma~txmvmo|no` c xmik|m vmvvnko |k |jm v|colcxl c`mof~ lmvg|kt xmvka}|nko/ L}m |k

    lmtmolmof~ ko om|pkxg tmxekxicofm col lneemxmofmv no vfxmmo vnrmv col not}|

    lmunfm vnrmv! ULN hcvml vka}|nkov vjk}al hm |jkxk}`ja~ |mv|ml exki c }vchnan|~

    tmxvtmf|num/ \jnv cttxkcfj cavk jcv |jm cluco|c`m |jc| inonica c`mof~ lc|c nv

    v|kxml ko |jm lmunfm/

    Ok|m2 Ikv| icbkx c}|jmo|nfc|nko |kgmo umolkxv jcum c vke| |kgmo cucnacham ekx nKV/

    Ok|m2 No vkim fcvmv }vm ke ULN nv c facvvnf }vchnan|~+txkl}f|nun|~ |xclm kee c`cnov|vmf}xn|~! cv |jm chvmofm ke akfcaa~ fcfjml lc|c imcov }vmxv cxm ok| cham |k hm

    txkl}f|num pjmo |jm lmunfm nv kee |jm om|pkxg col |jmxm nv ok no|m`xc|nko pn|j

    oc|num cttanfc|nkov x}oono` akfcaa~ ko |jm mol tkno| lmunfm/

    Vcolhkzno`

    Vcolhkzno` mov}xmv |jc| cttanfc|nkov |jc| x}o ko nKV lmunfmv cxm xmv|xnf|ml no |mxiv

    ke |jm xmvk}xfmv |jc| |jm~ fco cffmvv/ \jnv nv moekxfml h~ |jm gmxoma/ Ekx lm|cnaml

    noekxic|nko ko |jm nKV+KV Z vcolhkz vmm Lnko Hacrngnvv tctmx \jm CttamVcolhkz5 kx Unofmork Nkrrkv txmvmo|c|nko C Vcolhkz Kl~vvm~0/

    5j||t2++vmf}xn|~muca}c|kxv/fki+enamv+tctmxv+cttam)vcolhkz/tle

    0j||t2++txmrn/fki+azabjurmi5bv+c)vcolhkz)kl~vvm~)noena|xc|m)8438+

    8= q L m e m o f m V n ` o c a v L n x m f | k x c | m

  • 8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security

    27/72

    Icoc`ml Fko|cnomx Cttanfc|nkov

    Ekx mitak~mm kpoml lmunfmv! kx no fcvmv pjmxm |jm c`mof~ xms}nxmv `xmc|mx

    txk|mf|nko ke |jmnx fko|cf| col fcamolcx noekxic|nko c |jnxl tcx|~ vka}|nko ic~ hm

    xms}nxml/ C o}ihmx ke vka}|nkov fco hm }vml |k txkunlm clln|nkoca amumav ke

    vmtcxc|nko col tkanf~ moekxfmimo| ekx micna! fcamolcx col fko|cf| lc|c icoc`ml h~lmlnfc|ml vmxumxv/

    \jmxm nv }v}caa~ c }vchnan|~+vmf}xn|~ |xclm kee no |jm fkoen`}xc|nko! pn|j f}v|ki

    vka}|nkov jcuno` c akpmx amuma ke no|m`xc|nko pn|j k|jmx Cttv ko |jm lmunfm *m/`/ n| ic~

    ok| hm tkvvnham |k |cgm c tjk|k pn|j |jm lmunfmv fcimxc! col |jmo vmol unc micna

    }vno` |jm |jnxl tcx|~ micna fanmo|./

    Ok|m2 F}xxmo|a~ ok |jnxl tcx|~ icoc`ml fko|cnomx cttanfc|nkov jcum hmmo muca}c|ml

    h~ LVL/

    Fko|mo| Ena|mxno`

    Cffmvv |k no|xcom| vn|mv col vkim icna! fko|cf| kx fcamolcx lc|c fco hm cfjnmuml unc

    xmumxvm txkznmv col fko|mo| ena|mxv/ \jmxm cxm i}a|ntam vka}|nkov no |jnv vtcfm/

    MCV ena|mxno` txkl}f|v fco hm }vml |k mov}xm micna vmo| |k Mzfjco`m Cf|numV~of

    lmunfmv jcum cttxktxnc|m txnucf~ icxgno`v ekx |jm facvvnenfc|nko |jm lmunfm nv

    cttxkuml |k h~ co c`mof~/ \jnv cttxkcfj fco caakp ekx co cv~iim|xnf v|xc|m`~ )

    ikhnam lmunfmv koa~ xmfmnum micna fko|mo| c| c facvvnenfc|nko cttxktxnc|m |k |jm

    lmunfm! cv pmaa cv jcuno` tkanf~ col fko|xkav cttanml |k |jm micna fko|mo|/

    No |jnv vfmocxnk! |jm c`mof~v Pnlm Cxmc Om|pkxg *PCO. vmf}xn|~ lkicno nv ok|

    mz|molml k}| |k |jm ikhnam lmunfm! col |jmxm nv ok omml |k akpmx |jm facvvnenfc|nko ke

    |jm c`mof~ PCO/ V}fj vka}|nkov fco hm }vml |k xmlcf| vtmfnenf fko|mo| tc||mxov

    exki micnav vmo| unc MCV! ekx mzcitam! |k vfx}h fxmln| fcxl o}ihmxv exki caa micnav

    v~ofml |k ikhnam lmunfmv/ \jnv facvv ke |kkav fco cavk ecfnan|c|m fkxxmf| txk|mf|num

    icxgno` ke micna fkino` exki ikhnam lmunfmv pn|jk}| lnxmf| ko)lmunfm v}ttkx| ekx

    C}v|xcanco `kumxoimo| icxgno` v|colcxlv/ Ekx e}x|jmx noekxic|nko vmm |jm NVI

    vmf|nko ko Fko|mo| Ena|mxno`/

    85 q L m e m o f m V n ` o c a v L n x m f | k x c | m

  • 8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security

    28/72

    Fctchnan|~ Mochamxv Fkiimo|

    Xmik|m Pntm ILI! MCV! Cttam T}vj

    Ok|nenfc|nko Vmxunfm

    *CTOV.! Enol I~ nTjkom

    Txkz~ F}v|ki CTO! UTO nKV = lkmv ok| nitamimo| c

    `akhca txkz~ vm||no`/ C txkz~

    fco hm vm| ko c f}v|ki CTO

    col c UTO vmvvnko/

    Enxmpcaa Enxmpcaa ko f}v|ki CTO!

    Enxmpcaa ko Pnxmamvv

    om|pkxg

    nKV = lkmv ok| nitamimo| c

    akfca enxmpcaa/ \jnv nv

    vn`onenfco|a~ in|n`c|ml h~ |jm

    x}o|nim mounxkoimo|/

    Ekxfm Lmunfm Vm||no`v nTF]! Cttam Fkoen`}xc|kx

    col ILI

    Mo|mxtxnvm Lmtak~imo|

    @}nlm anv|v co ZIA vfjmic!

    |jnv fco hm }vml |k `momxc|m

    col vn`o txkenamv exki

    f}v|ki vfxnt|v/ nTF] nv co

    mcv~ |k }vm @]N |kka |k

    `momxc|m |jm ZIA! h}| FC

    no|m`xc|nko xms}nxmv vn`ono`

    pn|j KtmoVVA |kkav/

    I}a|n)ecf|kx

    C}|jmo|nfc|nko

    VVA FC noexcv|x}f|}xm!

    LOV! XVC kx Fx~t|kFcxl

    *UTO Koa~.! Vicx|fcxl

    *Xms}nxmv |jnxl tcx|~

    vke|pcxm.

    Lmtmolno` ko |jm c`mof~v

    vmf}xn|~ tkv|}xm! lmunfm

    fmx|nenfc|mv kx vke| |kgmov

    ic~ hm fkovnlmxml cv c

    vmfkol ecf|kx ke

    c}|jmo|nfc|nko/

    K\C Fkoen`}xc|nko

    Txkenam *t}aa.

    VVA FC noexcv|x}f|}xm!

    LOV! Pmh Vmxunfm!

    Lnxmf|kx~ Vmxunfm

    Mz|mxocaa~ vn`o col mofx~t|

    txkenamv! lk ok| vn`o pn|j

    nTF]/

    80 q L m e m o f m V n ` o c a v L n x m f | k x c | m

  • 8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security

    29/72

    Fctchnan|~ Mochamxv Fkiimo|

    K\C Fkoen`}xc|nko col

    Txkunvnkono` Txkenamv*t}vj.

    Mo|mxtxnvm Lmumaktmx

    C`xmmimo|! 6xl Tcx|~ILI cttancofm! Cttam

    Fkoen`}xc|kx! VVA FC

    noexcv|x}f|}xm! LOV!

    Lnxmf|kx~ Vmxunfmv! CTOV

    ILI vjk}al hm |nml no|k FC

    col Lnxmf|kx~ Vmxunfmv/

    Ikhnam Lmunfm

    Ikon|kxno`

    Mo|mxtxnvm Lmumaktmx

    C`xmmimo|! 6xl Tcx|~

    ILI cttancofm! FC

    noexcv|x}f|}xm! LOV!Lnxmf|kx~ Vmxunfmv! CTOV

    ILI vjk}al hm |nml no|k FC

    col Lnxmf|kx~ Vmxunfmv/

    Ikhnam Lmunfm

    Icoc`mimo|

    Mo|mxtxnvm Lmumaktmx

    C`xmmimo|! 6xl Tcx|~

    ILI cttancofm! FC

    noexcv|x}f|}xm! LOV!

    Lnxmf|kx~ Vmxunfmv! CTOV

    ILI vjk}al hm |nml no|k FC

    col Lnxmf|kx~ Vmxunfmv/

    Xmik|m Cttanfc|nko

    Lmtak~imo|

    Mo|mxtxnvm Lmumaktmx

    C`xmmimo|! Pmh Vmxumx!

    6xl Tcx|~ ILI cttancofm

    *kt|nkoca.! CTOV *kt|nkoca.

    Koa~ Mo|mxtxnvm No)Jk}vm

    Cttv fco hm lmtak~ml K\C/

    Jkim vfxmmo Vm| Jkim vfxmmo |k Ne

    ek}ol xm|}xo |k TK HKZ

    ZZZZ/ \jnv fk}al cavk hmlkom pn|j c Tnf|}xm Excim

    Cah}i/

    8: q L m e m o f m V n ` o c a v L n x m f | k x c | m

  • 8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security

    30/72

    Fjct|mx Ek}x

    Lmtak~no` nKV Lmunfmv

    \jmxm cxm c o}ihmx ke kt|nkov ktmo |k clinonv|xc|kxv pjmo lmtak~no` nKV lmunfmv/

    nKV jcv c o}ihmx ke emc|}xmv |jc| cxm cniml c| jmatno` clinonv|xc|kxv lmtak~ nKV

    lmunfmv no c`mofnmv/ Cttam lnv|xnh}|mv |pk nitkx|co| |kkav |k jmat clinonv|xc|kxv

    icoc`m mo|mxtxnvm lmtak~imo|2 nTjkom Fkoen`}xc|nko ]|nan|~ *nTF]. col Cttam

    Fkoen`}xc|kx/ \jmvm |kkav mcfj jcum nitkx|co| vtmfncanvml }vmv col n| nv nitkx|co|

    ekx clinonv|xc|kxv |k }olmxv|col |jmnx e}of|nko pjmo tacoono` co mo|mxtxnvm

    lmtak~imo|/

    nTF] ' n\}omv Cttam Fkoen`}xc|kx

    Tac|ekxivv}ttkx|ml

    Icf + Pnolkpv Icf koa~

    Txkenam fxmc|nko Fco fxmc|m fkoen`}xc|nko txkenamv Fco fxmc|m fkoen`}xc|nkotxkenamv

    Nov|caa txkenamv Kom lmunfm c| c |nim Ico~ lmunfmv c| c |nim

    Cf|nuc|m Kom lmunfm c| c |nim Ico~ lmunfmv c| c |nim

    Ocim lmunfm Kom lmunfm c| c |nim Ico~ lmunfmv c| c |nim

    ]tlc|m nKV Kom lmunfm c| c |nim Ico~ lmunfmv c| c |nim

    Nov|caa Cttv Kom lmunfm c| c |nim Ico~ lmunfmv c| c |nimHcfg}t+Xmv|kxm Kom lmunfm c| c |nim Ico~ lmunfmv c| c |nim

    \cham 82 Lmtak~imo| Kt|nkov

    \jmxm cxm cavk ico~ fnxf}iv|cofmv |jc| xms}nxm clinonv|xc|kxv |k vcon|nvm lmunfmv ekx

    lmtak~imo| kx pjmo xm|}xono` co mitak~mm kpoml lmunfm/

    \jnv fjct|mx txkunlmv co kumxunmp ke |jm |kkav }vml |k icoc`m nKV lmtak~imo|v col

    clunfm ko lmunfm vcon|nvc|nko txkfml}xmv/

    Fkoen`}xc|nko Txkenamv

    Hk|j nTF] col Cttam Fkoen`}xc|kx }vm fkoen`}xc|nko txkenamv ekx nKV lmtak~imo|/

    Fkoen`}xc|nko txkenamv cxm ZIA ekxic||ml tanv| enamv |jc| fko|cno lmunfm vm||no`v!

    vmf}xn|~ tkanfnmv col xmv|xnf|nkov/ Co clinonv|xc|kx ic~ }vm c fkoen`}xc|nko txkenam |k2

    vm| tcvvfklm tkanf~ ko c lmunfm

    vm| xmv|xnf|nkov *v}fj cv lnvchano` }vm ke ^k}\}hm kx Vnxn.

    fkoen`}xm pnxmamvv om|pkxgv

    fkoen`}xm UTO

    fkoen`}xm micna

    nov|caa Z/=4> fmx|nenfc|mv vm| c Ikhnam Lmunfm Icoc`mimo| *ILI. vmxumx

    8> q L m e m o f m V n ` o c a v L n x m f | k x c | m

  • 8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security

    31/72

    \jmvm cxm koa~ c emp mzcitamv ke tkvvnham fkoen`}xc|nko kt|nkov7 tamcvm vmm |jm nKV

    Fkoen`}xc|nko Txkenam Xmemxmofm

    *j||t2++lmumaktmx/cttam/fki+anhxcx~+nkv+emc|}xmlcx|nfamv+nTjkomFkoen`}xc|nkoTxkenamXme

    +nTjkomFkoen`}xc|nkoTxkenamXme/tle. ekx ikxm noekxic|nko/

    Ok|m2 Fkoen`}xc|nko txkenamv cxm ok| mofx~t|ml/ Fxmlmo|ncav |jc| cxm v|kxml nofkoen`}xc|nko txkenamv cxm cucnacham |k co~kom pjk jcv cffmvv |k |jm enamv/ Tcvvpkxlv

    ic~ hm no famcx |mz| kx hcvm5< mofklml/ Vkim ke |jm fxmlmo|ncav |jc| fk}al hm no c

    fkoen`}xc|nko txkenam nofa}lm2

    Pn)En tcvvpkxlv

    UTO Vjcxml vmfxm|v

    micna }vmxocimv+tcvvpkxlv

    Cf|numV~of }vmxocimv+tcvvpkxlv

    ALCT }vmxocimv+tcvvpkxlv

    FcaLCU }vmxocimv+tcvvpkxlv FcxlLcu }vmxocimv+tcvvpkxl

    V}hvfxnhml Fcamolcxv }vmxocimv+tcvvpkxlv

    VFMT txm)vjcxml vmfxm|v/

    Fcxm i}v| hm |cgmo |k icgm v}xm |jc| |jmvm enamv cxm v|kxml cttxktxnc|ma~ col ok|

    nitxktmxa~ cffmvvml/

    Txkunvnkono` Txkenamv

    Txkunvnkono` txkenamv caakp f}v|ki cttanfc|nkov |k hm x}o ko nKV lmunfmv/ \jm~ cxm

    ke|mo }vml no |jm ekaakpno` pc~v2

    |k caakp lmumaktmxv |k |mv| cttanfc|nkov ko |jmnx lmunfmv

    |k caakp kx`convc|nkov |k lnv|xnh}|m cttanfc|nkov lnxmf|a~ |k |jmnx mitak~mmv/

    \k kh|cno co mo|mxtxnvm lnv|xnh}|nko txkunvnkono` txkenam! co c`mof~ i}v| bkno |jm

    Cttam Lmumaktmx Mo|mxtxnvm Txk`xci/ Ikxm noekxic|nko chk}| |jm nKV Lmumaktmx

    Mo|mxtxnvm Txk`xci fco hm ek}ol c|2

    j||t2++lmumaktmx/cttam/fki+txk xciv+nkv+mo|mxtxnvm+

    Ne |jm mo|mxtxnvm txk`xci ak`no nv fkitxkinvml co clumxvcx~ fk}al nov|caa icanfnk}v

    cttanfc|nkov ko }vmxv nKV lmunfmv/

    nTjkom Fkoen`}xc|nko ]|nan|~

    nTjkom Fkoen`}xc|nko ]|nan|~ *nTF]. caakpv clinonv|xc|kxv |k fxmc|m col nov|caa

    fkoen`}xc|nko txkenamv! nov|caa txkunvnkono` txkenamv col mzcinom lmunfm noekxic|nko/

    Pjnam nTF] fco hm }vml |k nov|caa fkoen`}xc|nko txkenamv ko lmunfmv! n| ic~ koa~ lk vk

    ko kom lmunfm c| c |nim/ Ne clinonv|xc|kxv cxm tacoono` c vicaa lmtak~imo|! |jm~ ic~

    enol n| vnitamx |k lmtak~ lmunfmv kom c| c |nim }vno` nTF]/

    64 q L m e m o f m V n ` o c a v L n x m f | k x c | m

    http://developer.apple.com/library/ios/featuredarticles/iPhoneConfigurationProfileRef/iPhoneConfigurationProfileRef.pdfhttp://developer.apple.com/library/ios/featuredarticles/iPhoneConfigurationProfileRef/iPhoneConfigurationProfileRef.pdfhttp://developer.apple.com/programs/ios/enterprise/http://developer.apple.com/programs/ios/enterprise/http://developer.apple.com/library/ios/featuredarticles/iPhoneConfigurationProfileRef/iPhoneConfigurationProfileRef.pdfhttp://developer.apple.com/library/ios/featuredarticles/iPhoneConfigurationProfileRef/iPhoneConfigurationProfileRef.pdf
  • 8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security

    32/72

    Nov|caano` nKV txnkx |k lmtak~imo|

    nTF] fcook| nov|caa nKV ko lmunfmv/ \jmxm cxm |jxmm pc~v |k nov|caa nKV ko lmunfmv2

    }vno` n\}omv

    }vno` nKV = K\C }tlc|m }vno` Zfklm Kx`conrmx/

    Cf|nuc|no` lmunfmv

    No c vicaa lmtak~imo| }vno` nTF]! lmunfmv i}v| enxv| hm ico}caa~ cf|nuc|ml/ Ne co

    No|mxom| fkoomf|nko nv cucnacham |k |jm lmunfm! |jmo cf|nuc|nko fco |cgm tacfm ko |jm

    lmunfm n|vmae/ Ekx nTjkomv kx nTclv pn|j c ikhnam lc|c fkoomf|nko! cf|nuc|nko fco |cgm

    tacfm }vno` |jm lmunfmv ikhnam fcxxnmx/ Ekx nTkl col Pn)En koa~ nTcl! co no|mxom|

    fkoomf|ml pnxmamvv om|pkxg i}v| hm cucnacham |k tmxekxi cf|nuc|nko exki |jm lmunfm/

    Ne ok no|mxom| fkoomf|nko nv cucnacham |k |jm lmunfm! cf|nuc|nko i}v| hm tmxekximl h~

    fkoomf|no` |jm nKV lmunfm |k co no|mxom| fkoomf|ml jkv| x}oono` n\}omv/

    Ne fjco`mv i}v| hm iclm |k enxmpcaa x}amv! xmemx |k Cttmolnz E ekx noekxic|nko

    fkofmxono` jkv|ocimv col tkx|v ke cf|nuc|nko vmxumxv/

    Nov|caano` Fkoen`}xc|nko col Txkunvnkono` Txkenamv

    Ce|mx co }oakfgml nKV lmunfm jcv hmmo fkoomf|ml |k c jkv| fkit}|mx x}oono` nTF]!

    n| nv tkvvnham |k hk|j nov|caa col novtmf| txkenamv ko c lmunfm/ Fkoen`}xc|nko txkenamv

    |jc| pmxm fxmc|ml }vno` nTF] pnaa hm vn`oml h~ nTjkom Fkoen`}xc|nko ]|nan|~/

    No |jm vcim pc~! txkunvnkono` txkenamv fco hm hk|j unmpml col nov|caaml }vno` nTF]/

    nKV ]tlc|mv

    Lmunfm }vmxv ic~ tmxekxi co nKV }tlc|m h~ mn|jmx cffmt|no` co K\C }tlc|m exki

    Cttam! kx h~ tmxekxino` co }tlc|m }vno` n\}omv/

    Ekx co }tlc|m |k hm lmanumxml unc c fkxtkxc|m Pn)En om|pkxg! n| ic~ hm omfmvvcx~ |k

    clb}v| enxmpcaa x}amv/ Tamcvm xmemx |k Cttmolnz E ekx lm|cnav/

    Xmemxmofmv col E}x|jmx Xmclno`

    Tamcvm xmemx |k |jm ekaakpno` t}hanfc|nko ekx clln|nkoca noekxic|nko ko nTF]2

    nTcl2j||t2++ppp/cttam/fki+ntcl+h}vnomvv+xmvk}xfmv

    nTjkom2j||t2++ppp/cttam/fki+ntjkom+h}vnomvv+xmvk}xfmv

    Cttam Fkoen`}xc|kx

    Cttam Fkoen`}xc|kx caakpv clinonv|xc|kxv |k vm| }t col lmtak~ `xk}tv ke vninacxa~

    fkoen`}xml nKV lmunfmv/ Clinonv|xc|kxv ic~ }vm Cttam Fkoen`}xc|kx |k2

    cf|nuc|m col ocim `xk}tv ke omp lmunfmv

    }tlc|m nKV ko `xk}tv ke lmunfmv

    nov|caa Cttv col Fkoen`}xc|nko Txkenamv ko `xk}tv ke lmunfmv

    63 q L m e m o f m V n ` o c a v L n x m f | k x c | m

    http://www.apple.com/ipad/business/resourceshttp://www.apple.com/ipad/business/resourceshttp://www.apple.com/iphone/business/resourceshttp://www.apple.com/iphone/business/resourceshttp://www.apple.com/iphone/business/resourceshttp://www.apple.com/ipad/business/resources
  • 8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security

    33/72

    hcfg}t+xmv|kxm lmunfmv

    xm|xnmum lkf}imo|v

    N| nv v}``mv|ml |jc| clinonv|xc|kxv }vm Cttam Fkoen`}xc|kx pn|j co ILI ekx acx`m

    lmtak~imo|v ke nKV lmunfmv/

    C gm~ emc|}xm ke Cttam Fkoen`}xc|kx nv |jm chnan|~ |k tacfm lmunfmv no|k pjc| nv fcaaml

    V}tmxunvml iklm! pjnfj fjco`mv |jm pc~ lmunfmv cxm cham |k tcnx pn|j jkv|v/ C

    }vmx pn|j c V}tmxunvml lmunfm pnaa ok| hm cham |k tcnx |jmnx nKV lmunfm pn|j n\}omv ko

    |jmnx TF/ Vkim ke |jm meemf|v ko }vmxv pnaa nofa}lm2

    hmno` }ocham |k v~of i}vnf kx imlnc exki |jmnx fkit}|mx x}oono` n\}omv |k

    |jmnx nKV lmunfm

    hmno` }ocham |k nov|caa Cttv ko |jmnx lmunfm }vno` n\}omv

    hmno` }ocham |k hcfg}t |jmnx lmunfm }vno` n\}omv

    nofxmcvml lneenf}a|~ no bcnahxmcgno` |jmnx lmunfm

    ok| hmno` ok|nenml pjmo fjco`mv cxm iclm |k |jmnx lmunfmv fkoen`}xc|nko

    enolno` |jmnx clinonv|xc|kx jcv tacfml c imvvc`m ko |jmnx lmunfm akfgml

    vfxmmo/

    \jk}`j n| ic~ ok| hm cttxktxnc|m |k }vm V}tmxunvml iklm no c H^KL iklma! |jmxm

    cxm xmcvkov pj~ V}tmxunvml iklm nv lmvnxcham ekx c`mof~ kpoml lmunfmv/

    Vmovn|num lc|c ko mcfj lmunfm nv hm||mx txk|mf|ml/ ]vmxv fcook| v~of kx

    hcfg}t |jmnx lmunfm fko|mo|v |k |jmnx jkim fkit}|mx/ nKV ekxmovnf xmfkumx~

    }|nan|nmv ic~ ok| hm cham |k xmfkumx lc|c exki |jm lmunfm pn|jk}| c bcnahxmcg/

    ]vmxv fcook| mcvna~ vnlmv|mt xmv|xnf|nkov/ \jm koa~ uncham pc~ |k h~tcvvxmv|xnf|nkov nv |k mxcvm |jm lmunfm/

    Lmunfmv ok| fkoen`}xml cv V}tmxunvmlLmunfmv cxm xmemxxml |k cv ]ov}tmxunvml

    Lmunfmv/

    Ok|m2 TXK\MF\ML lmunfmv i}v| }vm V}tmxunvml iklm/

    V}tmxunvkx~ Jkv| Nlmo|n|~ Fmx|nenfc|m

    Okxicaa~! co }oakfgml nKV lmunfm nv cham |k tcnx pn|j co~ jkv| x}oono` n\}omv *kx

    v}ttkx|no` |jm akfglkpo txk|kfka./ Pjmo co nKV lmunfm nv vm| |k V}tmxunvmliklm!n| c}|jmo|nfc|mv pn|j c jkv| }vno` |jm V}tmxunvkx~ Jkv| Nlmo|n|~ Fmx|nenfc|m/ \jm

    v}tmxunvml lmunfm pnaa |jmo koa~ tcnx pn|j c jkv| x}oono` Cttam Fkoen`}xc|kx pn|j |jm

    fkxxmf| V}tmxunvkx~ Jkv| Nlmo|n|~ Fmx|nenfc|m/ Kxlnocx~ tcnxno` pn|j n\}omv nv ok|

    tkvvnham pn|j co~ k|jmx jkv|v/ Ko c Icf jkv| x}oono` Cttam Fkoen`}xc|kx! |jm

    V}tmxunvkx~ Jkv| Nlmo|n|~ Fmx|nenfc|m nv v|kxml no |jm ak`no gm~fjcno/

    Pjnam v}tmxunvml lmunfmv cxm }ocham |k mv|chanvj omp |x}v| xmac|nkovjntv pn|j n\}omv

    jkv|v! c |x}v| xmac|nkovjnt pnaa hm ekximl hm|pmmo lmunfmv col |jm Cttam Fkoen`}xc|kx

    jkv|/ C xmfkxl ke |jnv |x}v| xmac|nkovjnt nv v|kxml no Mvfxkp Gm~hc` enamv! pjnfj ko

    Icf KV Z cxm akfc|ml c| +ucx+lh+akfglkpo/

    68 q L m e m o f m V n ` o c a v L n x m f | k x c | m

  • 8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security

    34/72

    Ok|m2 Mvfxkp Gm~hc` enamv no |jnv lnxmf|kx~ vjk}al hm txk|mf|ml no c vninacx

    icoomx |k txnuc|m gm~v/

    Nov|caano` nKV

    C gm~ emc|}xm ke Cttam Fkoen`}xc|kx nv n|v chnan|~ |k nov|caa nKV ko ico~ lmunfmv

    fkof}xxmo|a~/ Clln|nkocaa~! ucxnml lmunfm tac|ekxiv *nTjkom! nTcl! nTkl. fco caa hm

    vni}a|comk}va~ fkoomf|ml/ Cttam Fkoen`}xc|kx pnaa vmciamvva~ lkpoakcl nKV ekx caa

    v}ttkx|ml lmunfm tac|ekxiv pjmo |jmxm nv co no|mxom| fkoomf|nko cucnacham/ C

    iczni}i ke 64 lmunfmv fco hm fkoomf|ml fkof}xxmo|a~ ekx nov|caac|nko/

    Cf|nuc|no` lmunfmv

    Cttam Fkoen`}xc|kx pnaa c||mit| |k c}|kic|nfcaa~ cf|nuc|m caa fkoomf|ml lmunfmv ce|mx

    ktmxc|no` v~v|mi nov|caac|nko/ N| nv nitkx|co| ekx clinonv|xc|kxv |k ok|m |jc| nTjkomv

    col nTclv xms}nxm c VNI ekx cf|nuc|nko/ Ne |jm VNI jcv c tcvvfklm akfg! c}|kic|nfcf|nuc|nko pnaa hm }ov}ffmvve}a/

    Nov|caano` Fkoen`}xc|nko Txkenamv

    Cttam Fkoen`}xc|kx ic~ hm }vml hk|j |k nov|caa fkoen`}xc|nko txkenamv col |k fxmc|m

    omp fkoen`}xc|nko txkenamv/ \jmvm txkenamv fco hm nov|caaml ko lmunfmv no h}ag pjmo

    non|ncaa~ txmtcxno` lmunfmv ekx lmtak~imo|/ Cv co mzcitam! |jnv ic~ hm }vml |k

    En`}xm 52 Fkoen`}xc|nko Txkenamv Vm||no`

    non|ncaa~ xkaa k}| c |x}v| txkenam ekx co c`mof~ ILI vmxumx/

    v

    nKV ]tlc|mv

    \jmxm cxm |pk im|jklv ekx Cttam Fkoen`}xc|kx lmtak~ml lmunfmv |k xmfmnum nKV

    }tlc|mv/ Lmunfmv pn|j co no|mxom| fkoomf|nko pnaa txkit| }vmxv |k nov|caa K\C

    66 q L m e m o f m V n ` o c a v L n x m f | k x c | m

  • 8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security

    35/72

    }tlc|mv/ Ca|mxoc|numa~! }vmxv fco xm|}xo |jmnx lmunfmv |k jcum |jmi }tlc|ml }vno`

    Cttam Fkoen`}xc|kx/

    pno` t}hanfc|nko ekx clln|nkoca noekxic|nko ko Cttam

    Fkoen`}xc|kx2

    fki+fkoen`}xc|kx+icf+3/4+

    nvc|nko

    Cli n

    }xoml nKV lmunfm ekx xm)nvv}m

    |k vcon|nvm co mitak~mm kpoml nKV lmunfm hmekxm txkunvnkono`

    Hxmcgno` |jm lmunfm)|k)jkv| |x}v| xmac|nkovjnt

    Pjmo co nKV lmunfm tcnxv pn|j c jkv|! c |x}v| xmac|nkovjnt nv ekximl/ No ico~ fcvmv

    co clinonv|x o| |k mxcvm co nKV lmunfm col hxmcg caa |jm mv|chanvjml jkv|

    c|ml/ \jm ikv| xmancham im|jkl |k

    hxmcg caa mv|chanvjml xmac|nkovjntv nv |k xmv|kxm |jm nKV lmunfm enxipcxm }vno` pjc| nv

    nv ok|

    xms}nxml/

    munfm |k |jm jkv| TF x}oono` n\}omv

    nx pn|j |jm nKV lmunfm! tamcvm famcx co~ mxxkx lncak`

    jm nKV lmunfm ekx

    =/ m |jm jkim h}||ko ce|mx n\}omv `momxc|mv |jm ekaakpno` lncak` hkz2

    Xmemxmofmv col E}x|jmx Xmclno`

    Tamcvm xmemx |k |jm ekaak

    Cttam Fkoen`}xc|kx ]vmx @}nlm2 j||t2++jmat/cttam/

    Lmunfm Vcon|

    no v|xc|kxv vjk}al famco col xm)txkunvnko lmunfmv ekx |jm ekaakpno` xmcvkov2

    |k vcon|nvm c xm|

    |k vcon|nvm c lmtak~ml mitak~mm)kpoml nKV lmunfm txnkx |k |jm mitak~mm

    amcuno`

    |k hxmcg caa lmunfm)|k)jkv| |x}v| xmac|nkovjntv col noucanlc|m kal Mvfxkp

    Gm~hc` enamv/

    c|kx ic~ pc

    |x}v| xmac|nkovjntv |jc| c lmunfm jcv txmunk}va~ fxm

    fkiikoa~ gokpo cv Lmunfm Enxipcxm ]t`xclm iklm *LE] iklm./

    Tamcvm ok|m |jc| xmv|kxno` c lmunfm no |jnv pc~ pnaa cavk mxcvm caa lc|c col vm||no`v ko

    |jm lmunfm/ \jm LE] iklm xmv|kxc|nko fco hm tmxekximl exki c jkv| |jc| jcv ok

    mv|chanvjml |x}v| xmac|nkovjnt pn|j |jm lmunfm! col |jm lmunfm tcvvfklm

    LE] Iklm Xmv|kxc|nko

    \k tmxekxi co nKV enxipcxm xmv|kxc|nko ekaakp |jnv txkfml}xm2

    3/ Fkoomf| |jm nKV l

    8/ Ne n\}omv nv }ocham |k tchkzmv

    6/ Txmvv col jkal hk|j |jm Vammt+Pcgm col Jkim h}||kov ko |

    |mo vmfkolv

  • 8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security

    36/72

    5/ Ce|mx fanfgno` KG! fanfg |jm Xmv|kxm h}||ko |k hm`no nov|caano` nKV/

    Vcon|nvno` co nKV lmunfm ekx xm)nvv}m

    Ne co c`mof~)kpoml lmunfm nv xm|}xoml ekx xm)nvv}m |k cok|jmx mitak~mm! n| vjk}al hm

    famcoml h~ tmxekxino` c LE] iklm xmv|kxc|nko/ Kom xmcvko |jc| |jnv nv nitkx|co| nv

    vk |jc| |jm txmunk}v nKV lmunfm kpomx fcook| |cgm cluco|c`m ke co~ kal lmunfm)jkv|

    |x}v| xmac|nkovjntv |k xm|xnmum lc|c exki |jm lmunfm/ H~ tmxekxino` |jm LE] iklm

    xmv|kxc|nko |jm kal |x}v| xmac|nkovjntv cxm hxkgmo/

    Hmekxm co nKV lmunfm nv xm)txkunvnkoml ekx mo|mxtxnvm }vm! n| nv xmfkiimolml |k

    naa mov}xm |jc| |jm lmunfm nv no c gokpo v|c|m/

    tcx|~ icoc`ml fko|cnomxv.

    xcham |k mztakn|c|nko

    o

    ke nKV

    Mcf xm l enzmv/ Ne ame| }otc|fjml! nKV

    lmu v

    col |jm vmf}xn|~ ke |jm fkxtkxc|m om|pkxg/

    \jm ` m~

    hmfki m/

    poml lmunfmv

    c|m om|pkxg col |jm fkoenlmo|ncan|~ ke

    lc|c v|kxml ko c lmunfm/

    lnvchamv cttanfc|nko fklm vn`ono` fjmfgv/ \jm nKV fklm vn`ono`

    fjmfg jmatv |k txmumo| icapcxm mzmf}|no` ko c lmunfm/ Xmikuno` |jnv fjmfg

    xm angma~/

    o

    tmxekxi c LE] iklm xmv|kxc|nko/ \jnv p

    Vcon|nvno` mitak~mm kpoml nKV lmunfmv

    Mitak~mm kpoml nKV lmunfmv cxm icgno` |jmnx pc~ no|k `kumxoimo| c`mofnmv!

    fxmc|no` c omp vm| ke fjcaamo`mv ekx clinonv|xc|kxv/ Vkim ke |jm fjcaamo`mv hmno`

    ecfml nofa}lm2

    bcnahxkgmo lmunfmv x}oono` }o|x}v|ml fklm

    bcnahxkgmo lmunfmv hmno` cham |k h~tcvv caa vmf}xn|~ txk|mf|nko *nofa}lno` 6xl

    }otc|fjml nKV lmunfmv |jc| cxm u}aom

    lmunfmv txmunk}va~ fkoen`}xml pn|j fkoeanf|no` vm||no`v col+kx fkoen`}xc|nk

    txkenamv/

    Kalmx umxvnkov

    j unvnko ke nKV nofa}lmv ico~ vmf}xn|~ xmac|m

    nfm fk}al hm mztakn|ml xmik|ma~! xnvgno` hk|j mitak~mmv tmxvkoca noekxic|nko

    c mof~ cffmt|cham }vm tkanf~ vjk}al xms}nxm }vmxv |k nov|caa nKV }tlc|mv cv |j

    m cucnacha

    Bcnahxkgmo mitak~mm k

    Bcnahxkgmo lmunfmv caakp }vmxv |k nov|caa cttanfc|nkov ko |jmnx nKV lmunfmv exki

    k}|vnlm ke Cttamv Ctt V|kxm/ Bcnahxmcgno` fcxxnmv pn|j n| c o}ihmx ke om`c|num vnlm

    meemf|v |jc| nitcf| |jm vmf}xn|~ ke |jm fkxtkx

    Bcnahxmcgno`

    icgmv mztakn|c|nko mcvnmx col ik

    Bcnahxmcgno` ic~ lnvcham kx hxmcg nitkx|co| vmf}xn|~ emc|}xmv v}fj cv

    Cllxmvv Vtcfm Ac~k}| Xcolkinvc|nko *CVAX. col cttanfc|nko vcolhkzno`/

    CVAX nofxmcvmv |jm lneenf}a|~ ke v}ffmvve}a mztakn|c|nko ke u}aomxchnan|~/

    Icapcxm ko c Bcnahxkgmo lmunfm pk}al ok| hm fkov|xcnoml h~ |jm cttanfc|nkvcolhkz/

    6= q L m e m o f m V n ` o c a v L n x m f | k x c | m

  • 8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security

    37/72

    Bcnahxmcgno` xmanmv }tko vmxnk}v }otc|fjml ktmxc|no` v~v|mi u}aomxchnan|nmv/

    Bcnahxkgmo lmunfmv vjk}al hm cvv}iml |k hm }o|x}v|ml/

    Cli n

    txkunvnk

    Ekx |jm

    lmtak~

    Vco v

    Pjmo fkovnlmxno` jkp |k vcon|nvm m xtxnvm

    jcum

    ztmf|c|nkov chk}| jkp |jm~ pnaa hm cham |k

    }vm |jmnx lmunfmv col |jm meemf| ke mo|mxtxnvm lmtak~imo| ko |jmnx lmunfm/ Cv co

    ce|mx

    |jm lmunfm nv mxcvml }vno` LE] iklm |jnv pnaa ok| hm |jm fcvm/

    hm txmvmxuml! |jm ekaakpno` txkfml}xm ic~ hm

    l}xm c`mofnmv i}v| fkovnlmx |jmnx am`ca

    xmv cf~ ke |jmnx }vmxv lc|c/

    Ne |j tak~mmv tmxvkoca lc|c ko c lmunfm! c`mofnmv

    vjk xmv|kxm/

    Vco

    fmv vjk}al hm vcon|nvml h~

    tmxekxino` c LE] iklm xmv|kxm cv lmvfxnhml txmunk}va~/ Mitak~mmv vjk}al hm

    No c H^KL iklma! |jm ekaakpno` txkfml}xm nv v}``mv|ml ekx lmtcx|no` mitak~mmv2

    3/ Xmikum ILI txkenam exki nKV lmunfm! pjnfj pnaa2

    no v|xc|kxv vjk}al ok| caakp mitak~mm kpoml bcnahxkgmo nKV lmunfmv |k hm

    oml ko |jm fkxtkxc|m om|pkxg/

    vm xmcvkov n| nv nitkx|co| |k mov}xm |jc| lmunfmv cxm vcon|nvml txnkx |k

    imo|/

    n|n c|nko txnkx |k lmtak~imo|

    itak~mm)kpoml nKV lmunfmv ekx mo|m

    lmtak~imo|! n| nv nitkx|co| |k |cgm no|k cffk}o| |jm lc|c |jc| mitak~mmv caxmcl~

    ko |jmnx lmunfmv/ Mitak~mmv ic~ jcum m

    mzcitam! co mitak~mm in`j| mztmf| |jmnx nTjkomv fko|cf| anv| |k hm txmvmxuml

    lmtak~imo|/ Ne

    Ne co mitak~mmv tmxvkoca lc|c nv |k

    tmxekximl txnkx |k mo|mxtxnvm lmtak~imo|2

    3/ \cgm c hcfg}t ke lmunfm

    8/ Tmxekxi LE] iklm xmv|kxm

    6/ Xmv|kxm c hcfg}t |k lmunfm

  • 8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security

    38/72

    =/ Mxcvm hcfg}t enamv exki jkv|

    \jnv pnaa xm u ~

    c`mof~ fki }

    lmt mik|m pntm e}of|nko/ Mitak~mmv

    vjk co c`mof~ cffmt|cham }vm tkanf~/

    ik m co~ |x}v| xmac|nkovjntv mv|chanvjml hm|pmmo |jm nKV lmunfm col co

    t |mxv/ Ne |jm mitak~mm lkmv ok| xm|}xo |jmnx nKV lmunfm txnkx |k

    |k }vm |jm ILI xcx|no`! n| ic~ hm omfmvvcx~

    }al hm iclm cpcxm ke |jnv ecf| no

    60 q L m e m o f m V n ` o c a v L n x m f | k x c | m

  • 8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security

    39/72

    Fjct|mx Enum

    V}``mv|ml Tkanfnmv

    \jnv fjct|mx anv|v v}``mv|ml tkanfnmv no `xcl}c|ml amumav ke xmvtkovm! cttanml |k nKV

    lmunfmv c| ucx~no` vmf}xn|~ facvvnenfc|nkov/ \jm c`mof~v Noekxic|nko \mfjokak`~

    Vmf}xn|~ Clunvkx vjk}al hm fkov}a|ml ekx |jm vtmfnenf }vc`m vfmocxnkv ekx c

    lmtak~imo|/

    Ne nKV lmunfmv cxm hmno` fkovnlmxml ekx }vm c| facvvnenfc|nkov chkum TXK\MF\ML!

    c`mofnmv i}v| }olmx|cgm c xnvg cvvmvvimo| ekaakpno` |jm `}nlcofm no |jm NVI cv

    pmaa cv |jmnx kpo c`mof~ vmf}xn|~ tkanfnmv col lm|mxinom in|n`c|nko txkfml}xmv col

    tkanf~/ C`mofnmv i}v| cavk kh|cno cttxktxnc|m cttxkuca ekx co~ oko)fkitancofm no

    cffkxlcofm pn|j |jm NVI/

    Emc|}xm ]ofacvvnenml

    FKITANCOFM

    ]ofacvvnenml

    *LAI:.

    Txk|mf|ml

    Jcxlpcxm Fx~t|k

    nKV Lmunfmv

    C`mof~v lmfnvnko Xmfkiimolml I}v|

    H^KL *Hxno`

    ^k}x Kpo Lmunfm.

    C`mof~v lmfnvnko Ic~ hm tkvvnham

    *ILI kt|)no ekx

    C]T c`xmmimo|

    col moekxfmimo|

    xmfkiimolml./

    Vmm NVI vmf|nko ko

    Ikhnam Lmunfmv

    Ic~ hm tkvvnham

    *ILI kt|)no ekx

    C]T c`xmmimo|

    col moekxfmimo|

    xmfkiimolml.

    Vmm NVI vmf|nko ko

    Ikhnam Lmunfmv

    Tcvvfklm I}v| I}v| I}v|

    n\}omv Cffk}o| Tmxvkoca kx

    C`mof~

    Tmxvkoca kx

    C`mof~

    Tmxvkoca kx C`mof~

    :LAI2 Lnvvminoc|nko Anin|no` Icxgmx

    6: q L m e m o f m V n ` o c a v L n x m f | k x c | m

  • 8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security

    40/72

    FKITANCOFM

    Emc|}xm ]ofacvvnenml ]ofacvvnenml Txk|mf|ml

    *LAI:.

    V~of |k

    Fko|mo|+V~of |k

    n\}omv Cffk}o|/

    ^mv! ne Tmxvkoca

    n\}omv

    @momxcaa~ ok @momxcaa~ ok

    Jkim Fkit}|mx

    hcfg}t

    moekxfmimo|

    V|c|ml no c`mof~

    }vc`m tkanf~

    V|c|ml no c`mof~

    }vc`m tkanf~

    V|c|ml no c`mof~

    }vc`m tkanf~

    nFak}l C`mofnmv omml |k

    cvvmvv |jm xnvg no

    |jmnx kpo vn|}c|nko/

    C`mofnmv omml |k

    cvvmvv |jm xnvg no

    |jmnx kpo vn|}c|nko/

    Ok v~ofno`

    lkf}imo|v col

    lc|c! Ok Hcfg}t/

    n\}omv T}xfjcvmv

    col n\}omv Ic|fj

    c| C`mof~

    lnvfxm|nko/

    ]vmx chnan|~ |k

    nov|caa

    cttanfc|nkov

    C`mofnmv omml |k

    cvvmvv |jm xnvg no

    |jmnx kpo vn|}c|nko/

    C`mof~ cttxkuml

    cttanfc|nkov koa~/

    Xmfkiimol

    c`mof~ Cttam Nl/

    Fkovnlmx ILI

    moekxfml C`mof~

    V|kxm Cttv

    pjn|manv|/

    C`mof~ cttxkuml

    cttanfc|nkov koa~/

    Xmfkiimol

    c`mof~ Cttam Nl/

    ILI moekxfml

    C`mof~ V|kxm Cttv

    pjn|manv|/

    MCV Xmfkiimolml ne

    Mzfjco`m kx Ak|}v

    nv }vml ekx c`mof~

    micna/

    Xmfkiimolml ne

    Mzfjco`m kx Ak|}v

    nv }vml ekx c`mof~

    micna/ Vmfkol

    ecf|kx ke

    c}|jmo|nfc|nko

    }vno` c fmx|nenfc|m

    nv txmemxxml/

    Tkvvnham! pn|j

    fmx|nenfc|m

    c}|jmo|nfc|nko/ Ekx

    vkim c`mofnmv c

    lmlnfc|ml icna

    fko|cnomx kx ULN ekx

    micna cffmvv ic~

    hm txmemxcham/

    6> q L m e m o f m V n ` o c a v L n x m f | k x c | m

  • 8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security

    41/72

    FKITANCOFM

    Emc|}xm ]ofacvvnenml ]ofacvvnenml Txk|mf|ml

    *LAI:.

    MCV Ena|mxno` Vjk}al hm }vml ne

    ikhnam lmunfm

    vmf}xn|~ lkicno nv

    akpmx facvvnenfc|nko

    |jco no|xcom|

    vmf}xn|~ lkicno/

    Vjk}al hm }vml ne

    ikhnam lmunfm

    vmf}xn|~ lkicno nv

    akpmx facvvnenfc|nko

    |jco no|xcom|

    vmf}xn|~ lkicno/

    Vjk}al hm }vml ne

    ikhnam lmunfm

    vmf}xn|~ lkicno nv

    akpmx facvvnenfc|nko

    |jco no|xcom|

    vmf}xn|~ lkicno/

    Micna vmf}xml

    nolmtmolmo|a~ ke

    lmunfm tcvvfklm

    ]vm c lmlnfc|ml

    |jnxl tcx|~ icna

    fko|cnomx/

    ]vm c lmlnfc|ml

    |jnxl tcx|~ icna

    fko|cnomx/

    ]vm c lmlnfc|ml

    |jnxl tcx|~ icna

    fko|cnomx/

    ILI Kt|nkoca

    lmtmolno` ko xkam

    ke lmunfm+vfcam ke

    lmtak~imo|/

    Kt|nkoca lmtmolno`

    ko xkam ke lmunfm kx

    vfcam ke

    lmtak~imo|/

    Xmfkiimolml ne

    H^KL iklma }vml/

    Xmfkiimolml

    F}v|ki CTO ekx

    6@ lc|c

    Kt|nkoca Xmfkiimolml Xmfkiimolml

    UTO)ko)Lmicol Kt|nkoca

    lmtmolno` ko xkam

    Xmfkiimolml Xmfkiimolml

    VVA Xmumxvm

    Txkz~

    Kt|nkoca

    lmtmolno` ko xkam

    Kt|nkoca lmtmolno`

    ko xkam ke lmunfm+

    vfcam ke

    lmtak~imo|

    UTO)Ko)Lmicol

    xmfkiimolml

  • 8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security

    42/72

    FKITANCOFM

    Emc|}xm ]ofacvvnenml ]ofacvvnenml Txk|mf|ml

    *LAI:.

    FC Noexcv|x}f|}xm Kt|nkoca

    lmtmolno` ko xkam

    Xmfkiimolml Xms}nxml

  • 8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security

    43/72

    Fjct|mx Vnz

    Xmfkiimolml Lmunfm Txkenam Vm||no`v

    \jnv fjct|mx anv|v |jm txkenam vm||no`v |jc| vjk}al |~tnfcaa~ hm }vml pjmo co nKVlmunfm nv }vml ko co C}v|xcanco `kumxoimo| om|pkxg/

    Ok|m2 Ne txkenamv cxm ok| hmno` t}vjml h~ co ILI vka}|nko! |jm fkxxmf| |mfjons}m pn|jFkoen`}xc|nko Txkenamv nv h}olano` |jm tc~akclv no c pc~ |jc|2

    Txkenamv t}aaml |k |jm lmunfm! h}olam xmv|xnf|nkov pn|j c}|jmo|nfc|nko! vk ne |jm

    txkenam nv xmikuml! caa cffmvv |k c`mof~ xmvk}xfmv nv xmikuml/ Ne co ILI nv }vml! |jm ILI icv|mx txkenam nv capc~v xmikucham! h}| ne n| nv

    xmikuml caa icoc`ml txkenamv cxm akv| cv pmaa/

    Txm)akclml Fkoen`}xc|nko Txkenamv col ILI icoc`ml txkenamv fco hm inzml kolmunfmv! h}| |jm ILI vmxumx fcook| xmikum |jm txkenamv ico}caa~ nov|caaml ko |jmlmunfm/

    \jm ekaakpno` vm||no`v cxm c hcvmanom ekx }vm ko TXK\MF\ML om|pkxgv/ C`mof~lnvfxm|nko fco hm ucxnml |k hm ikxm xmv|xnf|num ne xms}nxml h~ akfca xms}nxmimo|v! kxakpmxml c| akpmx facvvnenfc|nkov no cffkxlcofm pn|j NVI tkanf~/ Pjmxm c txkenamvm||no` nv ok| lnvf}vvml hmakp! c`mofnmv vjk}al mzcinom |jmnx kpo tcx|nf}acx|mfjonfca col tkanf~ ommlv/ nTjkom Fkoen`}xc|nko ]|nan|~ col Cttam Fkoen`}xc|kx fcohm }vml |k unmp |jm e}aa xco`m ke txkenam vm||no` |jc| fco hm lmtak~ml/

  • 8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security

    44/72

    @momxca *oko)Icoc`ml Txkenamv koa~.2

    En`}xm 02 @momxca Vm||no`v

    Txkenam Vmf}xn|~ vjk}al hm Xmikum Capc~v ne vm||no` nv ekx fkoumonmofm ekx

    }vmxv |jc| lkmv ok| fko|cno co~ vmovn|num lc|c *m/`/ c v}hvfxnhml fcamolcx ke

    itkxcxna~/ @momxcaa~ }vmxv pk}al ok| xmfmnum |jm

    m

    ml! vjk}al hm vm| |k Omumx/

    C}v|xcanco t}hanf jkanlc~v./ Kt|)No ILI txkenamv pk}al }v}caa~ en| no|k |jnv

    fc|m`kx~ cv pmaa/

    Txkenam vmf}xn|~ pk}al }v}caa~ hm Xmikum pn|j Tcvvfklm ekx txkenamv |jc| N\

    v|cee fco xmikum |m

    tcvvfklm |k v}fj txkenamv/

    Ikv| txkenamv |jc| cxm ok| ILI icoc`ml pk}al hm vm| |k Omumx/ \j

    Tcvvfklm tkanf~ txkenam! ne }v

  • 8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security

    45/72

    Tcvvfklm *fco hm vm| unc MCV lmtmolno` ko umxvnko! KX Fkoen`}xc|nko

    Txkenam.2

    En`}xm :2 Tcvvfklm Tc~akcl

    c iczni}i tcvvfklm amo`|j ke >4 lc~v lk ok| caakp vnitam uca}m

    v

    }xxmo| iczni}i caakpml |nim ko nKV.

    it|v/

    Lmtmolno` ko |jm MCV umxvnko! koa~ vkim ke |jm chkum ic~ hm vm| h~ |jm MCVmxumx col c fkoen`}xc|nko txkenam pk}al hm xms}nxml/

    xms}nxm catjco}imxnf tcvvfklm inoni}i ke mn`j| fjcxcf|mx c}|k)akfg ke enum ino}|mv *Ok|m2 F jnv|kx~ ke mn`j| tcvvpkxlv niimlnc|m lmunfm akfg c}|k)pntm ko enum ecnaml c||m

    V

  • 8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security

    46/72

    Xmv|xnf|nkov2

    En`}xm >2 Xmv|xnf|nkov Tc~akcl

    caakp }vm ke Fcimxc2 }t |k c`mof~ caakp }vm ke Ecfm\nim2 }t |k c`mof~ caakp vfxmmo fct|}xm2 }t |k c`mof~

    caakp uknfm lncaano`2 ko caakp Vnxn *Vnxn }|nanvmv vmxumxv no ucxnk}v akfc|nkov col caa }vmv ke Vnxn lnf|c|nko

    i}v| hm |xmc|ml cv ]ofacvvnenml/. caakp Vnxn pjnam lmunfm nv akfgml2 kee xms}nxm n\}omv V|kxm tcvvpkxl ekx caa t}xfjcvmv caakp i}a|ntac~mx `cino`2 }t |k c`mof~ caakp cllno` @cim Fmo|mx exnmolv2 }t |k c`mof~ caakp nov|caano` Cttv2 Xmfkiimol kee c| TXK\MF\ML/ Tk|mo|ncaa~ ko cv co

    mzfmt|nko c| akpmx amumav! cv tmx lnvf}vvnko col in|n`c|nko imcv}xm ok|mltxmunk}va~/

    caakp no)Ctt t}xfjcvm2 kee ne Ctt nov|caac|nko kee! tk|mo|ncaa~ ko ne }vmx)nov|caamlCttv caakpml

    caakp c}|kic|nf v~of pjnam xkcino`2 }v}caa~ kee ekxfm mofx~t|ml hcfg}tv caakp Akfc|nko Vmxunfmv caakp }vmxv |k cffmt| }o|x}v|ml \AV fmx|nenfc|mv/

  • 8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security

    47/72

    En`}xm 342 Xmv|xnf|nkov Tc~akcl

    caakp }vm ke ^k}\}hm2 cv tmx c`mof~ tkanf~ caakp }vm ke n\}omv I}vnf V|kxm2 cv tmx c`mof~ tkanf~ caakp }vm ke Vcecxn2 mocham c}|kenaa! ekxfm exc}l pcxono`! mocham BcucVfxnt|!

    hakfg tkt}tv/

  • 8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security

    48/72

    En`}xm 332 Xmv|xnf|nkov Tc~akcl

    caakp }vm ke mztanfn| i}vnf col tklfcv|v2 }v}caa~ kee! cv tmx c`mof~ tkanf~ xc|no`v Xm`nko2 C}v|xcanc caakpml fko|mo| xc|no`v2 }t |k c`mof~ tkanf~/

  • 8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security

    49/72

    Pn)En2

    En`}xm 382 Pn)En Tc~akcl

    VVNL ke om|pkxg cv cttx jnllmo VVNL cv tmx c`mof~ tkanf~

    AV col c txm)vjcxml gm~ cv c inoni}i! h}|imolml

    vvpkxl nv |jm txmemxxml

    ktxnc|m

    PTC8 C}|jmo|nfc|nko pn|j MCT)\tmx }vmx XCLN]V kx :48/3Z nv xmfki

    txk|kfkav! c}|jmo|nfc|nko col |x}v| |k ic|fj om|pkxg xms}nxmimo|v/ :48/3Zpn|j lmunfm nlmo|n|~ fmx|nenfc|m col }vmxocim+tcc}|jmo|nfc|nko imfjconvi ekx ]ofacvvnenml *LAI. col jn`jmx/

  • 8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security

    50/72

    UTO2

    En`}xm 362 UTO Tc~akcl

    NTVmf col VVA cxm LVL Cttxkuml Fx~t|k`xctjnf Txk|kfkav! tamcvm xmemx |k|jm Muca}c|ml Txkl}f|v Anv| *MTA. ekx ikxm noekxic|nko j||t2++ppp/lvl/`ku/c}+noekvmf+mta+UTO Vmxumx Fkoen`}xc|nko ekx nKV Lmunfmv ko

    |)uto+j||t2++jmat/cttam/fki+nkvlmtak~imo vjk}al hm fkov}a|ml ekx vmxumx vnlm

    icol vjk}al hm mochaml pn|j c pjn|manv| ke c`mof~ ]XAv kx

    vm||no`v |jc| nKV v}ttkx|v/

    fmx|nenfc|m hcvml Icfjnom C}|jmo|nfc|nko/ E}aa |x}v| fjcno ommlv |k hmnofa}lml/

    vtan| |}ooma UTO vjk}al hm kee *vm| UTO fkofmo|xc|kx vnlm.UTO ko Lm

    lkicnov |jc| lmunfm nv caakpml |k cffmvv txkz~ vjk}al hm fkoen`}xml! nlmcaa~ c TCF enam/

    q L m e m o f m V n ` o c a v L n x m f | k x c | m

    http://www.dsd.gov.au/infosec/epl/http://www.dsd.gov.au/infosec/epl/http://www.dsd.gov.au/infosec/epl/http://www.dsd.gov.au/infosec/epl/
  • 8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security

    51/72

    Micna

    Ok| |~tnfcaa~ ommlml ne MCV *m/`/ Mzfjco`m Cf|numV~of @c|mpc~! Ak|}v Ok|mv\xcumaamx. nv no }vm/ K|jmxpnvm cttxktxnc|m |k NICT vmxumx! col fco fk)mznv|

    Mzfjc

    A c}|jmo|nfc|nko fxmlmo|ncav xms}nxml |k

    |j co MCV tc~akcl nv xmikuml! caa MCV v~ofml micna col

    ALCT

    |~tnfcaa~ ommlml ne Mzfjco`m @CAnv }vml! h}| fco fk)mznv|/

    FcaLCimo|v ne xms}nxml/ Ic~ ok| hm ommlml ne Mzfjco`m

    }vml! h}| fco fk)mznv|/

    A xmfkiimolml/

    FcxlL

    imo|v ne xms}nxml/ Ic~ ok| hm ommlml ne Mzfjco`m nv}vml! h}| fco fk)mznv|/

    xmfkiimolml/

    V}hvf

    mo|v/ mxm nv co~ vmovn|nun|~ |k |jm fcamolcx lc|c/

    Pm

    n|j cf}v|ki nfko ko |jm jkim vfxmmo/

    ca }vm pk}al nofa}lm anogv |k tc`mv ekx C]T! jmatlmvg fko|cf| lm|cnav!mv

    no`v no |jmnx J\IA |k pkxg pjmo |jm vn|m nv

    Fxmlmo

    VFMT

    fkoen`}xno` VFMT moxkaimo| txnkx |k lmunfm nvv}m ) xc|jmx

    |jco K\C kt|)no/ K\C kt|)no nv |jm okxica im|jkl }vml/

    IL

    nvv}m ) xc|jmx |jcoK\C kt|)no/ K\C kt|)no nv |jm okxica im|jkl }vml/

    ]v}caa~! fxmlmo|ncav vjk}al hm cllml! caa imvvc`mv vn`oml! col caa cffmvvxn`j|v mochaml ekx xmik|m clinonv|xc|kxv/

    pn|j Mzfjco`m/ Ne vm|! VVA koa~! pn|j c}|jmo|nfc|nko/

    o`m Cf|numV~of

    Vm||no`v cv tmx MCV vmxumx lm|cnav! VVfko|xka hk|j pjnfj lmunfm col pjnfj }vmxv jcum cffmvv |k MCV/

    Ok|m ne c txkenam pnc||cfjimo|v cxm lmam|ml exki |jm lmunfm/

    Cv tmx c`mof~ xms}nxmimo|v ne lmvnxml/ Ok|

    VVA xmfkiimolml/

    U Cv tmx c`mof~ xms}nxm

    VV

    CU

    Cv tmx c`mof~ xms}nxm

    VVA

    xnhml Fcamolcxv

    Cv tmx c`mof~ xms}nxmi

    VVA vjk}al hm }vml ne |j

    h Fantv

    Cv tmx c`mof~ xms}nxmimo|v/ \jmvm cxm cancvmv kx anogv |k ]XAv p

    \~tnf|mamtjkom ]XAv! col VFMT xm)moxkaimo| tc`mv/ Ok|m |jc| |jmvm pmh tc`fk}al }vm txmemxmofm iconemv| vm||keeanom kx |jm lmunfm nv kee |jm om|pkxg/Pmh fantv fco cavk hm }vml |k nov|caa Mo|mxtxnvm No)Jk}vm Cttanfc|nkov/

    |ncav Nofa}lm VVA fjcno ke |x}v| hcfg |k |jm xkk| FC fmx|nenfc|m! nofa}lno`

    no|mximlnc|mv/

    ]vml pjmo txm)

    I

    ]vml pjmo txm)fkoen`}xno` ILI moxkaimo| txnkx |k lmunfm

    =4 q L m e m o f m V n ` o c a v L n x m f | k x c | m

  • 8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security

    52/72

    \jm Lmumaktimo| CTOV vjk}al `momxcaa~ ok| hm }vml ekx txkl}f|nko

    Cl

    Caa lm|cnav jmxm cxm pkxgml k}| pn|j |jm |mamfkii}onfc|nkov fcxxnmx/

    V U

    ml lc|c c| |jnv

    ! ok Vmf|mxc fkitc|nhamvka}|nkov cxm cucnacham ko nKV c| |nim ke pxn|no`/

    TNO vjk}al hm vm| txnkx |k nvv}m/

    Ha}m|k

    aa~! Ha}m|kk|j vjk}al hm vm| |k kee! }oamvv |jmxm nv c vtmfnenf h}vnomvv

    | pn|j c tjkom! kx Ha}m|kk|j

    x e}x|jmx noekxic|nko/

    m *nTcl Koa~.

    lc|c keo hm|}xoml kee no Vm||no`v @momxca Tcvvfklm/

    Lkfg Fkoomf|kx

    Pj

    pn|j lm

    lmunfmv txkunvnkoml }vno` Cttam Fkoen`}xc|kx/ N| nv xmfkiimolml |jc| }vmxv hmkoomf| |jmnx nKV lmunfm |k |jmnx c`mof~)nvv}ml fjcx`mx kx

    v~v|miv/

    ucofml *]vml pjmo c f}v|ki CTO ekx Ikhnam lc|c nv }vml.

    C}|jmo|nfc|nko vjk}al hm vm|/

    Txkz~ vjk}al hm vm| cttxktxnc|ma~/

    K|j V en`}xc|nko Txkenam2mx m||no`v ok| icoc`ml h~ Fko

    @ I knfm col VIV+IIV

    @VI Uknfm col VIV+IIV vjk}al koa~ hm }vml ekx ]ofacvvnen|nim/

    Pjnav| c vmf}xm UKNT vka}|nko nv |mfjonfcaa~ tkvvnham

    Ik mhna Lc|cC VNI

    Lc|c Xkcino` vjk}al `momxcaa~ hm vm| |k kee/

    k|j

    @momxc

    xmcvko ekx n|v }vm *m/`/ Ha}m|kk|j jmclvm

    Gm~hkcxl./ Vmm NVI vmf|nko Ikhnam Lmunfmvek

    Tnf|}xm Exci

    \jnv emc|}xm nv c vninacx |k c vfxmmo vcumx ko |jm ak`no vfxmmo/

    N| vjk}al mn|jmx hm vm| |k tkno| |k c vtmfnenf Tjk|k Cah}i |jc| fko|cnovok vmovn|nun|~ *}olmx Vm||no`v Tnf|}xm Excim.! kx Tnf|}xm Excim fc

    Pn)En

    Cvg |k bkno om|pkxgv vjk}al hm vm| |k kee/ \jnv xms}nxmv |jm }vmx |k mztanfn|a~

    fjkkvm |k bkno c om|pkxg/ nKV c}|k)bknov txmunk}va~ gokpo om|pkxgv koa~/

    nav| }oakfgml! nKV fk}al mv|chanvj c |x}v| xmac|nkovjnt |jxk}`j |jm lkfg fkoomf|kx

    unfmv kx jkv| fkit}|mxv/ \jnv hmjcunk}x fco hm icoc`ml no V}tmxunvml

    nov|x}f|ml |k koa~ f

    fkit}|mx/

    =3 q L m e m o f m V n ` o c a v L n x m f | k x c | m

  • 8/2/2019 iOS 5 Hardening Configuration Guide - Australian DoD Intelligence & Security

    53/72

    Fjct|mx Vmumo

    Ikhnam Lmunfm Icoc`mimo|

    nKV = lmunfmv fco }vm pmh col VFMT vmxumxv |k mv|chanvj |x}v| xmac|nkovjntv! col

    t}aa tkanf~ |k lmunfmv/ Lmunfmv mv|chanvj non|nca |x}v| unc VFMT col |jmo fco hm

    ikon|kxml col icoc`ml h~ vmxumxv! vmxunfmv kx cttancofmv }vno` Cttamv ILI

    Txk|kfka! col CTOV/

    Icoc`mimo| pn|jk}| ILI

    Tkanf~ ko nKV lmunfmv col noekxic|nko vmf}xn|~ fco hm icoc`ml h~ c fkihnoc|nko ke2

    Fkoen`}xc|nko Txkenamv akclml ko c lmunfm

    Mzfjco`m Cf|numV~of tkanf~ Om|pkxg vmf}xn|~ emc|}xmv *m/`/ VFMT! :48/3Z! enxmpcaav! Txkznmv! f}v|ki

    CTOv .

    Cttanfc|nko vtmfnenf hmjcunk}x *Fkoen`}xc|nko Txkenamv fco hm akclml unc |jm

    nTjkom Fkoen`}xc|nko ]|nan|~ kumx ]VH! t}aaml K\C exki c pmh vn|m! kx

    nofa}lml no tn``~hcfgml ko co VFMT moxkaimo| |xcovcf|nko./ No clln|nko! |jm~

    fco hm micnaml |k c lmunfm! h}| |jnv fco txmvmo| c fjnfgmo)col)m``

    txkhami/ Vmolno` co VIV fko|cnono` c pmhvn|m ]XA nv tkvvnham! h}| cv VIV

    fco hm mcvna~ vtkkeml! n| nv `momxcaa~ ok| xmfkiimolml/ Ekx vicaa vfcam kx

    anin|ml vfktm lmtak~imo|v! c e}aa nKV = ILI vka}|nko ic~ ok| hm ommlml! h}|

    n| }v}caa~ jcv vn`onenfco| cluco|c`mv pn|j acx`mx eamm|v! kx ikxm fkitamz}vc`m vfmocxnkv/

    ILI Umolkxv

    C| |jm |nim ke pxn|no` |jnv `}nlm |jmxm pmxm c o}ihmx ke umolkxv vjnttno` ILI

    vka}|nkov |jc| jcum e}aa v}ttkx| ekx Cttamv ILI txk|kfka col CTOV no|m`xc|nko/

    Vkim ke |jmvm ILI vka}|nkov ekf}v t}xma~ ko lmunfm tkanf~ col ikon|kxno`/ K|jmxv

    mojcofm |jnv e}of|nkocan|~! txkunlno` clln|nkoca emc|}xmv unc co Ctt col mumo| |xn``mxv

    ekx h}vnomvv x}amv |jc| no|m`xc|m pn|j Mzfjco`m Cf|numV~of! Fmx|nenfc|m C}|jkxn|nmv

    col Lnxmf|kx~ Vmxunfmv/ Ico~ umolkxv fco icoc`m i}a|n)tac|ekxi fanmo|v/ No |jnv

    fjct|mx |jm lnvf}vvnko pnaa hm xmv|xnf|ml |k nKV emc|}xmv/

    ILI e}of|nkov

    Kofm co nKV = lmunfm