iOS 6 KASLR Consequences for jailbreak

Kernel Address Space Layout Randomization on iOS

 
Devices which make use of iOS may, in principle, only code that has been signed by Apple. A common method for this limitation is the use of Return-Oriented Programming (ROP), with bits of code can be reused in an unforeseen manner. For ROP requires that an attacker or jail breaker knows where they want to reuse code found in memory. ASLR ensures that the location of objects in memory are no longer in a fixed position to be picked, and thus complicates the use of ROP. Generally, this means that an attacker or jail breaker two userland vulnerabilities need, one for injecting code and a memory address to find out that ROP can be applied.

Kernel Address Space Layout Randomization and jail breaks 

The exploits that we knew so far, and which made possible so far JailBreak will now insignificant.Indeed, Apple has included a new additional security: the KASLR. Nobody really knows what the 'K' means, but means ASLR Address Space Layout Randomization.

We still have an unburned kernel vuln, so I guess we will see whether we can get it working even with KASLR.

— planetbeing (@planetbeing) jun 11, 2012

This kind of security was already present in the iOS5, and were able to pass this Jailbreak security after some time. But this is not enough, the 'K' would be a higher level of security with the addition of a building like this with every release of iOS.

The team that among other things was responsible for most recent Absinthe jailbreak iOS 5.1.1 seems not (yet) from the field beaten by introducing KASLR iOS. Besides introducing KASLR shows also the administrative control tool racoonctl , who played an important role in the jailbreak for iOS 5.0.1 and 5.1.1, in iOS 6 to be removed . The hackers have also not yet released a vulnerability in the kernel of IOS, which normally can be used for the kernel-level security that is enforced by means of off-kernel patches. The question is whether the vulnerability even after the introduction of KASLR used for this purpose will be. The hacker po
d2g , who was largely responsible for the iOS 5.1.1 jailbreak is at least one of the first iOS 6 users.