Yoann Gini ygini

Reversing 10.13 RootGate, hands notes

Inital discovery process

Original state of the root.plist

Dict {
    smb_sid = Array {
        S-1-5-18

Allow java binary to open ports below 1024

setcap 'cap_net_bind_service=+ep' $(find /usr/lib/jvm -type f -name java)

Allow java to load third part so

dirname $(find /usr/lib/jvm -name libjli.so) > /etc/ld.so.conf.d/java.conf

Sources

Extra Packages for Enterprise Linux

yum install -y epel-release

MongoDB

cat << EOF > /etc/yum.repos.d/mongodb-org-3.2.repo
[mongodb-org-3.2]

Validated Recipes

The goal of this special recipes repository for AutoPkg is to build trust into the thousands of available AutoPkg recipes.

In order to accomplish this, we will have a team of vetted reviewers ensuring that the recipes in this repository follow strict rules. These rules limit recipes' capabilities, and defining and enforcing those rules will require a lot of work on the part of our community. But we hope that the benefits of establishing a core of trusted recipes will be well worth it.

What kind of trust?

We intend to build trust in recipes — not in payload. We will verify that the recipe plist content is correctly identified, comes from a trusted source, and behaves in a reasonable manner. However, we will not guarantee that the software packaged by the recipe is secure or trusted.

	<dict>
	<key>PayloadContent</key>
	<dict>
	<key>us.zoom.config</key>
	<dict>
	<key>Forced</key>
	<array>
	<dict>
	<key>mcx_preference_settings</key>
	<dict>

	#!/bin/bash

	killall ZoomOpener

	while read homeFolder
	do
	if [ -d "$homeFolder/.zoomus" ]
	then
	rm -rf "$homeFolder/.zoomus"
	touch "$homeFolder/.zoomus"

	Privacy Policy

	Yoann Gini built the MobileCertificate app as a Commercial app. This product is provided by Yoann Gini and is intended for use as is.

	This page is used to inform visitors regarding my policies with the collection, use, and disclosure of Personal Information if anyone decided to use my app.

	If you choose to use my app, then you agree to the collection and use of information in relation to this policy. The Personal Information that I collect is used for providing and improving the app. I will not use or share your information with anyone except as described in this Privacy Policy.

	The terms used in this Privacy Policy have the same meanings as in our Terms and Conditions, which is accessible at MobileCertificate unless otherwise defined in this Privacy Policy.

	### To run this script you must install Windows Management Framework 5.0 before https://www.microsoft.com/en-us/download/details.aspx?id=50395
	### Be careful to get the right installation package for your server, 2012R2 isn't 2012

	### Run
	$clearFiles = $false
	$dryRun = $false

	### School settings

	$asmLogin = "[email protected]"

	# For a 500 GB vmdk available at /dev/sdb

	pvcreate /dev/sdb
	vgextend centos /dev/sdb
	lvcreate -L 499G -n data centos /dev/sdb
	cp /etc/fstab /etc/fstab.bck
	cat << EOF >> /etc/fstab

	# additional storage
	/dev/mapper/centos-data /mnt/data xfs defaults 0 0