https://pastein.ru/t/WwW
Загрузка данных
MobileContainerManager and MobileGestalt complete map
MHA-MCM means the MobileHouseArrest identity-trust bypass in MobileContainerManager.
Build-specific proof is labeled below. The current device is Version 27.0 (Build 24A5355q).
The map records roots and preselected probe subpaths. It does not enumerate files inside target containers.
Root-cause map
Issue A — MobileHouseArrest identity-trust bypass
Component: MobileContainerManager and containermanagerd.
Trigger: the app has the signed code identifier com.apple.mobile.MobileHouseArrest.
Primitive: MobileContainerManager accepts that caller identity and issues foreign-container sandbox extensions.
Current 24A5390f proof: class-2 Safari, class-2 Notes, and class-7 Notes-group roots passed token activation and readdir. The stock-identity control denied all three targets. A nonexistent target was denied.
Relation: the labeled Filza folders below use this one identity-trust bypass with different container classes.
Issue B — built-in class-12 geod lookup and part-domain traversal
Component: MobileContainerManager and containermanagerd.
Trigger: class 12 with identifier com.apple.geod. ContainerManagerCommon includes geod in its built-in lookup-bypass list.
Current 24A5390f proof: container_system_path_for_identifier returned /private/var/containers/Data/System/com.apple.geod, and readdir listed Documents, Library, tmp, and the metadata plist. Opening the metadata plist still failed with EPERM.
Archived 24A5380h proof: class 12, part 3, flags 0x8100000000, and a traversal part-domain reached the MobileGestalt Caches directory. A 275-byte read-write extension allowed a chosen plist marker. The test restored the original inode and SHA-256.
Relation: this route does not require the MobileHouseArrest identity. The geod allow path and unchecked part-domain are separate authorization defects.
Issue C — class-13 well-known MobileGestalt group authorization gap
Component: MobileContainerManager and containermanagerd.
Trigger: class 13, group systemgroup.com.apple.mobilegestaltcache, part 3, and flags 0x8100000000.
Target root: /private/var/containers/Shared/SystemGroup/systemgroup.com.apple.mobilegestaltcache/Library/Caches
Target file: /private/var/containers/Shared/SystemGroup/systemgroup.com.apple.mobilegestaltcache/Library/Caches/com.apple.MobileGestalt.plist
Archived 24A5380h proof: an ordinary sandboxed caller received a 275-byte read-write extension. The caller installed a chosen CodexMCMWriteProof marker, verified the bytes, and restored the original inode and SHA-256.
Current 24A5390f boundary: simple system-group path and class-13 queries were denied. Those simple queries did not repeat the archived part-3 read-write request.
Relation: this authorization gap is separate from the MobileHouseArrest identity-trust bypass.
Rejected route — raw ProxyForClient spoof
Current 24A5390f proof: raw containermanagerd command 39 rejected MobileHouseArrest, mobile_installation_proxy, filecoordinationd, accountsd, and Safari.History identities. No reply contained a container path or sandbox token.
MobileGestalt route summary
Direct route: class-13 well-known-group authorization gap -> MobileGestalt Caches.
Pivot route: class-12 geod allow path -> part-3 domain traversal -> MobileGestalt Caches.
Both routes reach the same fixed target. Neither route proves arbitrary /var access.
No result here claims root, kernel, Keychain, TCC, or app-bundle access.
Current Filza access
The sections below are generated during the current launch.
Only direct symlinks created after token activation and a directory-open check appear as enabled roots.
Experimental sections also show each checked subpath and its current open status.
SpringBoard preferences exact write-authority check
Target: /private/var/mobile/Library/Preferences/com.apple.springboard.plist
Method: open with O_RDWR | O_CLOEXEC | O_NOFOLLOW after all current MCM routes were activated.
Result: DENIED; open errno=1 (Operation not permitted).
Read-only open: denied; errno=1 (Operation not permitted).
Target metadata: lstat=unavailable; errno=1 (Operation not permitted); mode=0000; uid=0; gid=0.
No bytes were written. The probe did not rename, replace, truncate, or unlink the target.
Host notification: local.research.mcm.springboardprefs.denied; notify_post=0.
[MHA-C2] App Data
Primitive: MHA-MCM class 2 application-data lookup and sandbox extension
Enabled roots:
• ai.pocketpal
root: /private/var/mobile/Containers/Data/Application/615DB65F-0FD4-4FB4-9479-7B6380B1CCAA
• ai.polycam.polycam
root: /private/var/mobile/Containers/Data/Application/051A66B3-EEAE-4751-88B7-C896F0757829
• app.garnet8366.jade4946
root: /private/var/mobile/Containers/Data/Application/752E3CD6-7D89-4F3C-B289-5F70D63B9558
• app.ish.iSH
root: /private/var/mobile/Containers/Data/Application/170797EB-87CA-4293-B24F-98C187361822
• app.nicegram
root: /private/var/mobile/Containers/Data/Application/38330FB1-D5F6-4D65-B48E-B416619C19DA
• app.swiftgram.ios
root: /private/var/mobile/Containers/Data/Application/51D95179-4775-4D1A-AF1D-241C59E52CB9
• ch.protonmail.vpn
root: /private/var/mobile/Containers/Data/Application/43B7EC61-AB0A-4B1F-A4C2-288546521667
• com.180.buildingdestruction
root: /private/var/mobile/Containers/Data/Application/E99A44FB-3475-4A8C-8F3B-92FD8F76BC43
• com.505games.terraria
root: /private/var/mobile/Containers/Data/Application/D156DA7A-866C-4D4A-AE66-4D67C439C1B9
• com.aksioma.aksiomapitanie
root: /private/var/mobile/Containers/Data/Application/EDE14846-465D-4509-ACBC-B1D53BF174AC
• com.akusayang.itd
root: /private/var/mobile/Containers/Data/Application/04B18789-999C-474B-B167-FADD2AC52787
• com.alohabrowser.alohabrowser
root: /private/var/mobile/Containers/Data/Application/91B6AA4C-3B41-4107-B429-1E1E44E8CC9E
• com.anthropic.claude
root: /private/var/mobile/Containers/Data/Application/75B9459F-7460-479F-B37E-453FA59F2119
• com.anydesk.AnyDesk
root: /private/var/mobile/Containers/Data/Application/74EA1944-958B-4A19-9EBA-A5710BC56C6E
• com.apple.AAUIViewService
root: /private/var/mobile/Containers/Data/Application/6EFCFD94-7706-49EB-83CD-07D5B3338F67
• com.apple.accessibility.AccessibilityReader
root: /private/var/mobile/Containers/Data/Application/EDFA8B44-0AFB-45AD-B2AE-D930172E5ACA
• com.apple.accessibility.MagnifierAngel
root: /private/var/mobile/Containers/Data/Application/D2895DC9-E9CF-4D4F-BDA6-F1AD0DA594AF
• com.apple.AccessoryNotifications.SourceSelection
root: /private/var/mobile/Containers/Data/Application/E4BA122B-E0A5-412C-A5A2-110252165640
• com.apple.AccessorySetupUI
root: /private/var/mobile/Containers/Data/Application/04144DE1-9E4E-4C64-BD72-3864CCA267A0
• com.apple.AccountAuthenticationDialog
root: /private/var/mobile/Containers/Data/Application/060EFBFA-CFAE-4DC9-9F43-58836E1D56BD
• com.apple.ActivityMessagesApp
root: /private/var/mobile/Containers/Data/Application/E618EB6C-BC23-40F3-83B3-7961D5FF035A
• com.apple.ActivityProgress.ActivityProgressUI
root: /private/var/mobile/Containers/Data/Application/381D954B-0F1A-4EFD-8218-72E3B70CA3E3
• com.apple.AdaptiveMusicApp
root: /private/var/mobile/Containers/Data/Application/9B186924-F417-42E3-9C7A-F50009985C1D
• com.apple.AMSEngagementViewService
root: /private/var/mobile/Containers/Data/Application/CF3C279E-D8E2-481C-A533-3042F06342EC
• com.apple.AMSUIAuthenticationViewService
root: /private/var/mobile/Containers/Data/Application/2F86A4B9-3C41-4C51-8D10-C4F6AA9E777A
• com.apple.Animoji.StickersApp
root: /private/var/mobile/Containers/Data/Application/09BDCA7D-B0C2-4DAE-8120-B1368D12030B
• com.apple.AppDeletionUIHost
root: /private/var/mobile/Containers/Data/Application/D0F7C786-ED3A-49FD-AF31-8548155CAB01
• com.apple.AppDistributionLaunchAngel
root: /private/var/mobile/Containers/Data/Application/BB766BA5-77D9-4C64-8E9F-94F1EED33CAC
• com.apple.AppleCashStickerPackHost
root: /private/var/mobile/Containers/Data/Application/1D0D6BE1-B000-4CEF-BB1C-3B5E1CFE3E80
• com.apple.AppleIDSetupUIService
root: /private/var/mobile/Containers/Data/Application/4466F84D-B23C-42D2-8156-D41B04F336A2
• com.apple.appleseed.FeedbackAssistant
root: /private/var/mobile/Containers/Data/Application/F20CEA03-40C0-4B62-8C83-E36E5FAE6E26
• com.apple.appManagedFeatures.Restrictions
root: /private/var/mobile/Containers/Data/Application/0CB93C85-3EDD-4C18-99BA-18C2DBBA2EF9
• com.apple.AppProtectionUIHost
root: /private/var/mobile/Containers/Data/Application/B03D4AE0-FDAC-4EB6-807B-A756189D75A9
• com.apple.AppSSOUIService
root: /private/var/mobile/Containers/Data/Application/8276BED9-E081-4287-9CF0-BCEB7138AF1C
• com.apple.AppStore
root: /private/var/mobile/Containers/Data/Application/8CE22731-6BC0-432E-8E3D-C455B3157A43
• com.apple.APSUIApp
root: /private/var/mobile/Containers/Data/Application/972F24BB-EEA3-42A7-BEB1-F18FED3610B4
• com.apple.AskPermissionUI
root: /private/var/mobile/Containers/Data/Application/76C2CBEA-14AC-4260-BAB1-08927FBF7075
• com.apple.AskToUIHost
root: /private/var/mobile/Containers/Data/Application/BC8832B8-CCAA-4F2B-BAE1-F3BE9A24ED9D
• com.apple.AuthenticationServicesUI
root: /private/var/mobile/Containers/Data/Application/EDF116AC-0CE1-4FD3-BA30-E98EC82ADEB7
• com.apple.AuthKitUIService
root: /private/var/mobile/Containers/Data/Application/0EA253BF-821E-4DE5-8E08-0F76B39D36E6
• com.apple.AutoFillSuggestions
root: /private/var/mobile/Containers/Data/Application/DD3A92AC-3841-46D2-ADB2-9A42BB887971
• com.apple.AutoSettings
root: /private/var/mobile/Containers/Data/Application/DFEC2E7C-8ED9-400A-9499-D4482D288B00
• com.apple.avkit.AVKitRoutingService
root: /private/var/mobile/Containers/Data/Application/DCD01B26-4A5C-455F-9C02-BFCA062CE610
• com.apple.AXRemoteViewService
root: /private/var/mobile/Containers/Data/Application/9EA1EA1B-73FF-4289-9562-AC8DB3F7B790
• com.apple.AXUIViewService
root: /private/var/mobile/Containers/Data/Application/5905849A-413E-4E03-82FD-DAB7827541A0
• com.apple.BacklinkIndicator
root: /private/var/mobile/Containers/Data/Application/6D4C3B5D-A01A-4274-884B-0D5A7B330ECB
• com.apple.BarcodeScanner
root: /private/var/mobile/Containers/Data/Application/45290AA1-C72E-4B64-AFEF-680B2665E031
• com.apple.Batteries
root: /private/var/mobile/Containers/Data/Application/EAE7F31B-7A2F-4525-B3E8-D3C64AE5010D
• com.apple.Bridge
root: /private/var/mobile/Containers/Data/Application/18CB2FAB-4D01-4517-82B2-AE8B92C24DB5
• com.apple.BrowserKitViewService
root: /private/var/mobile/Containers/Data/Application/1A916902-7EFF-472F-9F05-7094037BC679
• com.apple.BusinessActionSheet
root: /private/var/mobile/Containers/Data/Application/E2B8AF69-2968-4397-B389-1C299EC1ADAA
• com.apple.BusinessChatViewService
root: /private/var/mobile/Containers/Data/Application/47129535-964D-4DFE-BE2C-297490BB4088
• com.apple.calculator
root: /private/var/mobile/Containers/Data/Application/40C031EC-87CB-4D5E-8930-2D98207C8CA2
• com.apple.CameraOverlayAngel
root: /private/var/mobile/Containers/Data/Application/8DA05F89-470F-48FF-A69D-C28055246AA2
• com.apple.CarCamera
root: /private/var/mobile/Containers/Data/Application/0547ABBC-0DDB-4680-B7FA-E656D41838A2
• com.apple.CarCharge
root: /private/var/mobile/Containers/Data/Application/37C07BD0-3E03-4E9C-9217-35F331B8498A
• com.apple.CarClimate
root: /private/var/mobile/Containers/Data/Application/95B593F9-D94B-4A14-81D4-F3E4DB321756
• com.apple.CarClosures
root: /private/var/mobile/Containers/Data/Application/24945694-3B5B-4B70-BBD4-C9B566AE3C81
• com.apple.CarPlaySettings
root: /private/var/mobile/Containers/Data/Application/F864A471-4428-48F4-ABD7-50BAE31E19A2
• com.apple.CarPlaySetupApp
root: /private/var/mobile/Containers/Data/Application/1BFCCF6D-2AEE-4EA7-9507-FFDB54BEF950
• com.apple.CarPlaySplashScreen
root: /private/var/mobile/Containers/Data/Application/5FC92C79-FAE0-4D69-9CBA-20A7E3D4C23B
• com.apple.CarPlayWallpaper
root: /private/var/mobile/Containers/Data/Application/DA7FB7E0-EDE8-4AE7-BDCD-ACB8A8668C61
• com.apple.CarRadio
root: /private/var/mobile/Containers/Data/Application/E4DA5EC3-9377-4E8D-B2DB-DE0D1DB0D009
• com.apple.CarTirePressure
root: /private/var/mobile/Containers/Data/Application/2E970B5B-E58B-42F1-ABEB-76FE2EB077EB
• com.apple.CarTrip
root: /private/var/mobile/Containers/Data/Application/71058E6D-E330-4533-B374-6AACDC2ED36B
• com.apple.CBRemoteSetup
root: /private/var/mobile/Containers/Data/Application/B415B464-4C84-4CF7-9324-3037C1F0DF5D
• com.apple.chrono.WidgetRenderer-Activities
root: /private/var/mobile/Containers/Data/Application/8176AB32-1B66-4A9E-BA18-40C7F57B65B9
• com.apple.chrono.WidgetRenderer-CarPlay
root: /private/var/mobile/Containers/Data/Application/55E853D9-7BD1-4A01-A389-CDEA1B7485B7
• com.apple.chrono.WidgetRenderer-Default
root: /private/var/mobile/Containers/Data/Application/783D1545-B2A9-433C-BB65-0528F0A9C115
• com.apple.chrono.WidgetRenderer-Snapshots
root: /private/var/mobile/Containers/Data/Application/E32A0FC7-E5E8-4F1A-AFE5-152D1C46DD2A
• com.apple.chrono.WidgetRenderer-WatchFaces
root: /private/var/mobile/Containers/Data/Application/6F32D961-A21E-42D1-840F-0CE6C18DAFB9
• com.apple.ClarityCamera
root: /private/var/mobile/Containers/Data/Application/1C197532-D7CA-48C3-8C2E-29F3C9B9BA9F
• com.apple.ClarityPhotos
root: /private/var/mobile/Containers/Data/Application/A02E6C60-1FB3-4294-9007-56F513342C2B
• com.apple.ClipViewService
root: /private/var/mobile/Containers/Data/Application/6D248904-219D-4897-B990-4B3A2C367662
• com.apple.ClockAngel
root: /private/var/mobile/Containers/Data/Application/1F67ACDA-27B5-4AB1-A8D2-32BDB29BB9D4
• com.apple.CloudKit.ShareBear
root: /private/var/mobile/Containers/Data/Application/C22507F7-8A2C-4D85-A212-4F13C05E17B4
• com.apple.CompanionSetup
root: /private/var/mobile/Containers/Data/Application/8E4BE37F-C367-4461-A2C9-314899DA1834
• com.apple.CompanionViewService
root: /private/var/mobile/Containers/Data/Application/25F06921-0539-4B56-A565-22954096446B
• com.apple.compass
root: /private/var/mobile/Containers/Data/Application/B3E38178-7EF4-4314-928F-E03E8431FF82
• com.apple.CompassCalibrationViewService
root: /private/var/mobile/Containers/Data/Application/46524ACC-282A-41DA-BC7F-DD7C78C02811
• com.apple.ContactsUI.Carousel
root: /private/var/mobile/Containers/Data/Application/4B416C44-480C-4132-8990-CA1EA1E5C289
• com.apple.ContactsUI.LimitedAccessPromptView
root: /private/var/mobile/Containers/Data/Application/569CC27F-E0D0-4E8D-9075-FDF66E250A82
• com.apple.ContinuityCaptureShieldUI
root: /private/var/mobile/Containers/Data/Application/165C3904-AB44-4E77-AE33-F82F83512A42
• com.apple.ContinuitySingShieldUI
root: /private/var/mobile/Containers/Data/Application/71B0C9B9-13B2-4EF0-BB44-CB2009953D7B
• com.apple.coreidv.CoreIDVUIService
root: /private/var/mobile/Containers/Data/Application/51294E39-B290-4DFB-9797-034A36C4169A
• com.apple.CredentialSharingService
root: /private/var/mobile/Containers/Data/Application/5FEB10E1-65E1-485A-9BF8-54B97B5FE446
• com.apple.CTCarrierSpaceAuth
root: /private/var/mobile/Containers/Data/Application/B16539EA-571F-489D-A446-CDD81F6F3DDC
• com.apple.ctkui
root: /private/var/mobile/Containers/Data/Application/96EF56F2-8A7B-4547-A6FC-B138C41FEF48
• com.apple.CTNotifyUIService
root: /private/var/mobile/Containers/Data/Application/30CB6235-57E8-40D9-87BB-7A0423232782
• com.apple.CustomerEngagementUIService
root: /private/var/mobile/Containers/Data/Application/A84A24F2-9C60-473C-87F8-D8F0EB0B6B34
• com.apple.datadetectors.DDActionsService
root: /private/var/mobile/Containers/Data/Application/535D3C7C-5E87-4D86-95BE-3E9644C66792
• com.apple.DemoApp
root: /private/var/mobile/Containers/Data/Application/712B9EB0-7139-410E-872D-FE87FC219FC3
• com.apple.Diagnostics
root: /private/var/mobile/Containers/Data/Application/6908BF49-8068-4DE4-82DF-BDA9272F40F5
• com.apple.DiagnosticsReporter
root: /private/var/mobile/Containers/Data/Application/ED4220AB-7780-4218-B278-CEE3C43AF76B
• com.apple.DiagnosticsService
root: /private/var/mobile/Containers/Data/Application/598A9B03-75D5-4C48-8EC3-2DD7F7846C7D
• com.apple.DictationExperience
root: /private/var/mobile/Containers/Data/Application/93351669-C873-4CB7-8043-20165FE7A990
• com.apple.dockkit.pairinguiservice
root: /private/var/mobile/Containers/Data/Application/E414D904-8982-42C9-9440-CBCFCB3D89F0
• com.apple.DocumentManager.DockFolderViewService
root: /private/var/mobile/Containers/Data/Application/1510CE24-CF0D-4E4E-8DA1-283D978C1800
• com.apple.DocumentsApp
root: /private/var/mobile/Containers/Data/Application/5C549398-7FF7-4741-AFB2-812C2BCC9584
• com.apple.EnhancedLogging
root: /private/var/mobile/Containers/Data/Application/2F34EFE8-3150-4D6B-A559-59DDACFB1DAE
• com.apple.EventViewService
root: /private/var/mobile/Containers/Data/Application/E81E3A30-CE86-4A7F-83C2-F301CF650BED
• com.apple.EyeReliefUI
root: /private/var/mobile/Containers/Data/Application/BAEEAD8A-79FF-46AB-9278-00F80C30474F
• com.apple.facetime
root: /private/var/mobile/Containers/Data/Application/87F349BD-DF70-4782-8CBE-7C7DFFB604BA
• com.apple.FaceTimeLinkTrampoline
root: /private/var/mobile/Containers/Data/Application/8A9B811C-0F1E-4E9F-AF94-A3BC11E59311
• com.apple.FamilyExtensionHost
root: /private/var/mobile/Containers/Data/Application/3BC5E4F8-B15E-4B2D-A84E-61F3BB831D10
• com.apple.FCAuthenticationUI
root: /private/var/mobile/Containers/Data/Application/A4FC1A8E-225B-4489-88EA-9BAB3B50CAF8
• com.apple.feedback.remote
root: /private/var/mobile/Containers/Data/Application/66B02C6B-E4BF-4836-9BED-AFEE5E593CEF
• com.apple.FinanceStub
root: /private/var/mobile/Containers/Data/Application/7F9B1890-8BDD-4869-818E-EE6B525471DD
• com.apple.FinanceUIService
root: /private/var/mobile/Containers/Data/Application/BE1D9776-2C74-4798-A14A-3119394EEEEF
• com.apple.findmy
root: /private/var/mobile/Containers/Data/Application/5C85898D-0374-4503-932C-BF068A8F72DB
• com.apple.findmy.FindingUIAngel
root: /private/var/mobile/Containers/Data/Application/BC1D84A1-9596-472A-A336-8D288B516ACC
• com.apple.findmy.remoteuiservice
root: /private/var/mobile/Containers/Data/Application/F79CA7CB-B924-4F90-9111-33E352C1EA1B
• com.apple.Fitness
root: /private/var/mobile/Containers/Data/Application/C74D4823-E07E-4F10-A3EE-FD10C4AEB7A1
• com.apple.FMDMagSafeSetupRemoteUI
root: /private/var/mobile/Containers/Data/Application/CC3A9763-7CF9-4D67-8210-9F7AB6ED4294
• com.apple.FontInstallViewService
root: /private/var/mobile/Containers/Data/Application/FCA2CDCC-1629-4285-812B-6D9F048E856F
• com.apple.freeform
root: /private/var/mobile/Containers/Data/Application/1F7710E9-5F65-45D6-B22D-2B0A43065118
• com.apple.FTMInternal
root: /private/var/mobile/Containers/Data/Application/9C3B9792-181B-4E55-B9AE-654FD1B48E8C
• com.apple.fullkeyboardaccess
root: /private/var/mobile/Containers/Data/Application/5C9CEEE1-BC6D-4BCB-9A16-502EEE3103E9
• com.apple.gamecenter.GameCenterUIService
root: /private/var/mobile/Containers/Data/Application/3FDB6643-88D4-4523-9C30-A3240F781CA2
• com.apple.GameCenterRemoteAlert
root: /private/var/mobile/Containers/Data/Application/796E2BEA-AA88-4B34-BC6E-9A528E4C9A2C
• com.apple.GameOverlayUI
root: /private/var/mobile/Containers/Data/Application/4AABA54D-B237-4627-9F58-B2C444A18C20
• com.apple.games
root: /private/var/mobile/Containers/Data/Application/F9CEC9C6-3C5E-4231-AC2B-489F00E17511
• com.apple.GameTrampoline
root: /private/var/mobile/Containers/Data/Application/562D5A82-BA3B-4D94-8ACE-B93834F42680
• com.apple.GAXApp
root: /private/var/mobile/Containers/Data/Application/D6370CD1-8026-4BBE-B028-A0D99351B58A
• com.apple.GuestUserHandoverSetup
root: /private/var/mobile/Containers/Data/Application/34A4E7FA-0FDC-4DE1-98E4-47E49F2696AD
• com.apple.HDSViewService
root: /private/var/mobile/Containers/Data/Application/80F7B576-7B37-4194-9CA4-1643759A311D
• com.apple.HeadphoneProxService
root: /private/var/mobile/Containers/Data/Application/0D8D220C-BDC2-4517-A575-4A407D0ECE4C
• com.apple.Health
root: /private/var/mobile/Containers/Data/Application/4A4268C4-CC0C-4071-9C65-45C48D4F635A
• com.apple.Health.Sleep
root: /private/var/mobile/Containers/Data/Application/E12D23D8-802F-411C-BF28-0F3A3FE042D9
• com.apple.HealthENBuddy
root: /private/var/mobile/Containers/Data/Application/7902C444-2BA6-4D22-B35B-24E60563E007
• com.apple.HealthENLauncher
root: /private/var/mobile/Containers/Data/Application/3CE63183-EA87-4FCB-9607-E1B1E984F202
• com.apple.HealthPrivacyService
root: /private/var/mobile/Containers/Data/Application/CEA9ED38-CE88-468C-80A9-BD49F8F0A8F0
• com.apple.HearingApp
root: /private/var/mobile/Containers/Data/Application/9F7AF4B7-45AE-49E3-8767-11392012ACAE
• com.apple.Home
root: /private/var/mobile/Containers/Data/Application/2BD83FF6-3C0C-4F5A-ADAE-2CCC65FD4563
• com.apple.Home.HomeControlService
root: /private/var/mobile/Containers/Data/Application/7AB4F934-B380-40D6-8FE5-1375266E68DF
• com.apple.HomeCaptiveViewService
root: /private/var/mobile/Containers/Data/Application/9758800C-39F1-4C33-9FC4-90F6307262F7
• com.apple.iBooks
root: /private/var/mobile/Containers/Data/Application/0CEA588E-03E1-4EB7-9434-6CA089C91ABC
• com.apple.icloud.apps.messages.business
root: /private/var/mobile/Containers/Data/Application/BC2EFF30-488A-4AC4-B6A9-13B00D777623
• com.apple.icloud.FindMyDevice.FindMyExtensionContainer
root: /private/var/mobile/Containers/Data/Application/D45F5281-6E17-4457-8C88-50B141123169
• com.apple.icq
root: /private/var/mobile/Containers/Data/Application/605EB0DC-5644-4D15-9564-FEDA742FAB7E
• com.apple.iMessageAppsViewService
root: /private/var/mobile/Containers/Data/Application/D5999FFF-B22C-4A24-927A-DCF1E83B9F77
• com.apple.InCallService
root: /private/var/mobile/Containers/Data/Application/3CAF412C-C0E5-4B63-8388-F32E7B2A5250
• com.apple.InputUI
root: /private/var/mobile/Containers/Data/Application/9311FCED-48A5-4030-AED2-5E39BF44424B
• com.apple.internal.ScreenTimeSettingsShield
root: /private/var/mobile/Containers/Data/Application/D8D46247-D156-4A9D-B385-D8FCBA5A43EC
• com.apple.ios.StoreKitUIService
root: /private/var/mobile/Containers/Data/Application/AC712E6B-153E-4C38-ABCC-F959DEAB6A25
• com.apple.Jellyfish
root: /private/var/mobile/Containers/Data/Application/FC3729D8-9849-4687-94A0-86948E582C14
• com.apple.journal
root: /private/var/mobile/Containers/Data/Application/46EECE61-8699-4632-908B-F97582958E84
• com.apple.LocalAuthenticationUIService
root: /private/var/mobile/Containers/Data/Application/FD65DA01-71F2-4A37-9D7A-A924B0FD3E4E
• com.apple.Magnifier
root: /private/var/mobile/Containers/Data/Application/E67DBB30-09B3-4A8A-B9BF-18D79D9AC317
• com.apple.MailCompositionService
root: /private/var/mobile/Containers/Data/Application/C040654D-3C16-4CF1-8666-BAC3A5021814
• com.apple.MBHelperApp
root: /private/var/mobile/Containers/Data/Application/2E1B8860-254E-4B8D-A53A-04E76E3CCCCA
• com.apple.measure
root: /private/var/mobile/Containers/Data/Application/A512C009-F39A-47C5-9DCF-E7248BC697A6
• com.apple.MediaRemoteUI
root: /private/var/mobile/Containers/Data/Application/02A3CEF9-38F4-460C-BA35-579B52D0603F
• com.apple.MediaRemoteUIService
root: /private/var/mobile/Containers/Data/Application/9DC2706C-566D-4642-8B18-D527FEDF4DC2
• com.apple.messages.RemoteAlerts
root: /private/var/mobile/Containers/Data/Application/9F5D989B-3D74-40BA-B2B2-500DECF2176E
• com.apple.Migration
root: /private/var/mobile/Containers/Data/Application/11427439-C6AB-42A0-95EE-80489F07AAB9
• com.apple.mobile.MobileHouseArrest
root: /private/var/mobile/Containers/Data/Application/66788AED-4BA0-4A3B-8168-335B8BEEFE85
• com.apple.MobileAddressBook
root: /private/var/mobile/Containers/Data/Application/9B8E5F3E-712D-41D2-B7A3-91EB3485AA80
• com.apple.mobilecal
root: /private/var/mobile/Containers/Data/Application/54642B13-9820-40AE-95C1-7DF7FB75574E
• com.apple.mobilemail
root: /private/var/mobile/Containers/Data/Application/8128B633-0253-4F9E-9F0D-D074849EFF90
• com.apple.mobilenotes
root: /private/var/mobile/Containers/Data/Application/6069F630-B2A9-4FFA-94E0-02923EDDA3A9
• com.apple.mobilephone
root: /private/var/mobile/Containers/Data/Application/3D82C74C-5FCC-4FB4-A4C8-3BBA482B60D3
• com.apple.MobileReplayer
root: /private/var/mobile/Containers/Data/Application/91CF89CD-DA58-4A36-9078-2F5940E3B36F
• com.apple.mobilesafari
root: /private/var/mobile/Containers/Data/Application/D9A0A7A1-2FF8-4FB2-B7F7-7F33F54865EB
• com.apple.MobileSMS
root: /private/var/mobile/Containers/Data/Application/778CE5C3-7634-4107-A41D-47E561094E79
• com.apple.MobileStore
root: /private/var/mobile/Containers/Data/Application/EB369DEA-2055-42F4-B4BD-6C49C71C07C3
• com.apple.mobiletimer
root: /private/var/mobile/Containers/Data/Application/35E0B329-47ED-4CC5-B3E2-AE9C2B2759F4
• com.apple.MomentsUIService
root: /private/var/mobile/Containers/Data/Application/04300345-4E64-4C77-BE86-4CB3C6CCF593
• com.apple.MTLReplayer
root: /private/var/mobile/Containers/Data/Application/F8972DE8-DFEB-4507-ACFC-4E79277A6D11
• com.apple.Music
root: /private/var/mobile/Containers/Data/Application/5BAD482D-1C69-47C9-A1C7-166901248F5D
• com.apple.MusicKit.UI
root: /private/var/mobile/Containers/Data/Application/2E3B852D-33ED-4BA3-B060-864EB27C6D75
• com.apple.musicrecognition
root: /private/var/mobile/Containers/Data/Application/4284F417-698B-4359-B2DC-FBD45A1F2F0E
• com.apple.MXUIService
root: /private/var/mobile/Containers/Data/Application/677CE345-37FF-4087-AE5E-E161F8B46B4D
• com.apple.NetworkEndpointPickerUI
root: /private/var/mobile/Containers/Data/Application/2FB4DF80-85AB-4359-93C8-A967CF80A583
• com.apple.NewDeviceOutreachApp
root: /private/var/mobile/Containers/Data/Application/B0B3D1DC-7094-47A6-9363-2FC78A78BCA1
• com.apple.NewDeviceSetupUIService
root: /private/var/mobile/Containers/Data/Application/37B487D5-518C-481B-B590-6BAACBC086DA
• com.apple.news
root: /private/var/mobile/Containers/Data/Application/F73C06C3-ED74-456F-84DB-C2301E2871FE
• com.apple.NFCUISceneService
root: /private/var/mobile/Containers/Data/Application/4C1527F4-F730-4E12-B493-829F9469242F
• com.apple.Passbook
root: /private/var/mobile/Containers/Data/Application/D46E4351-CC8D-4F4F-BDD3-AF0A41CBF49D
• com.apple.PassbookSecureUIService
root: /private/var/mobile/Containers/Data/Application/45DEB82F-BC3B-40D0-8E72-B447B481F785
• com.apple.PassbookUISceneService
root: /private/var/mobile/Containers/Data/Application/2A709082-267A-456B-9324-F1E21EC1A04B
• com.apple.PassbookUIService
root: /private/var/mobile/Containers/Data/Application/04D5F454-1CD2-4C7C-9790-518E91D8FED8
• com.apple.Passwords
root: /private/var/mobile/Containers/Data/Application/17BE5C8D-2AAD-4DA7-A90F-A28D897DBE61
• com.apple.PASViewService
root: /private/var/mobile/Containers/Data/Application/9BC05F1E-2801-4538-AA28-9F0E6E86CBDA
• com.apple.PCViewService
root: /private/var/mobile/Containers/Data/Application/E1E17D9D-BD2B-4716-B685-36D99E8E3A91
• com.apple.PDUIApp
root: /private/var/mobile/Containers/Data/Application/CD5F4837-257F-4500-BEBD-1E7C26E8AB24
• com.apple.PeopleMessageService
root: /private/var/mobile/Containers/Data/Application/F4BEBC45-68F3-4A2E-B5F0-8355E09C9C0C
• com.apple.PeopleViewService
root: /private/var/mobile/Containers/Data/Application/677965F3-E725-4AB6-99A2-C317E68B4CBA
• com.apple.Photos.PhotosUIService
root: /private/var/mobile/Containers/Data/Application/3919E66A-C4A1-41DA-93B2-6BFE36FB34A8
• com.apple.PhotosViewService
root: /private/var/mobile/Containers/Data/Application/17AD7F63-7AB6-407C-9381-75106C358A0B
• com.apple.podcasts
root: /private/var/mobile/Containers/Data/Application/BB8E22DB-06E9-4B03-9730-BDB1449B1A8A
• com.apple.PosterBoard
root: /private/var/mobile/Containers/Data/Application/9BA5476F-5991-4026-8BD9-F3C5CEE45B89
• com.apple.Preview
root: /private/var/mobile/Containers/Data/Application/F62EA95D-6229-4DF8-B3EB-E02A16FCCDE8
• com.apple.PreviewShell
root: /private/var/mobile/Containers/Data/Application/F0CEB616-FB58-4BEE-B8AA-74CD4078B36C
• com.apple.printcenter
root: /private/var/mobile/Containers/Data/Application/83A85624-3B80-4B59-B320-06EF61669B23
• com.apple.ProximityReaderSceneUI
root: /private/var/mobile/Containers/Data/Application/27A87745-34CE-403A-BF5E-DD310971B20C
• com.apple.ProximityReaderUIService
root: /private/var/mobile/Containers/Data/Application/EDE452DC-FF6D-4CE7-858C-258E3D1B9FC5
• com.apple.PublicHealthRemoteUI
root: /private/var/mobile/Containers/Data/Application/206E6B00-58B4-414A-A586-AE9125FA69B2
• com.apple.RecoverDeviceUI
root: /private/var/mobile/Containers/Data/Application/EFAB3A36-5FB4-4E84-A11D-77F13B36B10C
• com.apple.reminders
root: /private/var/mobile/Containers/Data/Application/6EAFC6A6-69FC-4807-A006-EDA0E1973CFB
• com.apple.RemoteiCloudQuotaUI
root: /private/var/mobile/Containers/Data/Application/A7285FEB-DB8C-4336-ABE0-95EA028EDE27
• com.apple.RemotePassUIService
root: /private/var/mobile/Containers/Data/Application/7A4E7CA0-46C9-42DB-B7DA-E28E190763AD
• com.apple.replaykitangel
root: /private/var/mobile/Containers/Data/Application/57981938-C74D-4A11-858F-3BC6823EBC52
• com.apple.SafariViewService
root: /private/var/mobile/Containers/Data/Application/15663C27-4E71-4854-8328-DF59E300F62E
• com.apple.SafetyMonitorApp
root: /private/var/mobile/Containers/Data/Application/CA3AD989-7AE1-4582-87AB-84389F29571C
• com.apple.ScreenContinuityShell
root: /private/var/mobile/Containers/Data/Application/05F3296F-DB21-4AD3-BAE3-CA6CC5020679
• com.apple.screensharing.TermsAndConditionsViewService
root: /private/var/mobile/Containers/Data/Application/D132BD62-CDB9-41BA-B516-36D37EED57C6
• com.apple.ScreenSharingViewService
root: /private/var/mobile/Containers/Data/Application/FA83D31C-9955-452B-A9F8-CFB47593B17F
• com.apple.ScreenshotServicesService
root: /private/var/mobile/Containers/Data/Application/CB7E9762-D3A0-4DFB-923C-DF392DB50429
• com.apple.ScreenTimeUnlock
root: /private/var/mobile/Containers/Data/Application/635B03DF-5D66-403D-BDF8-29FDC7522785
• com.apple.ScreenTimeWidgetApplication
root: /private/var/mobile/Containers/Data/Application/45C0D058-BFAC-44F3-A31D-1CDFAF914901
• com.apple.ServicesPaymentAngel
root: /private/var/mobile/Containers/Data/Application/B1936E01-102E-4899-B61F-D2E4A4774C7E
• com.apple.SESUIServiceApp
root: /private/var/mobile/Containers/Data/Application/5C56A388-AB4F-4F89-97D7-3570453EB9ED
• com.apple.Sharing.AirDropUI
root: /private/var/mobile/Containers/Data/Application/4A2FF463-B730-48B6-88A5-E92985F5105B
• com.apple.SharingUIService
root: /private/var/mobile/Containers/Data/Application/AEF8DD1C-FB5F-46C0-9ABE-321B0CB739A1
• com.apple.SharingViewService
root: /private/var/mobile/Containers/Data/Application/69AEAC85-27DB-4B8E-A513-230A532E57F3
• com.apple.ShazamEventsApp
root: /private/var/mobile/Containers/Data/Application/C0D50C8B-0F9F-455F-A69C-BAC7EF598C50
• com.apple.shortcuts
root: /private/var/mobile/Containers/Data/Application/317D8194-2634-4600-B279-BC47C60F7955
• com.apple.ShortcutsUI
root: /private/var/mobile/Containers/Data/Application/8F4F0618-7967-42C5-9BC4-A462280C3006
• com.apple.sidecar
root: /private/var/mobile/Containers/Data/Application/3D3F299C-626E-4748-A847-B23AD4D1402F
• com.apple.SIMSetupUIBannerService
root: /private/var/mobile/Containers/Data/Application/23882B57-8241-4238-8C99-D9448F0BAE64
• com.apple.SIMSetupUIService
root: /private/var/mobile/Containers/Data/Application/66487ADE-E9B8-468A-AD14-0591AEACA8D6
• com.apple.siri
root: /private/var/mobile/Containers/Data/Application/28836C66-254B-4D03-BB6F-37C68F70142C
• com.apple.siri.parsec.HashtagImagesApp
root: /private/var/mobile/Containers/Data/Application/FE59B2C2-D8AB-4091-803F-60EC69381D6F
• com.apple.SleepLockScreen
root: /private/var/mobile/Containers/Data/Application/C862601F-6049-4E8B-ACB6-E43B1460A43F
• com.apple.smsFilter
root: /private/var/mobile/Containers/Data/Application/A2326BBB-E34E-4D5E-986D-1ABBF4DC8689
• com.apple.SOSBuddy
root: /private/var/mobile/Containers/Data/Application/65BBCD2A-A6B3-442C-9DA7-98178257998F
• com.apple.SpringBoardEducation
root: /private/var/mobile/Containers/Data/Application/EED51084-7772-438C-8F02-CF6C3E7CC0CB
• com.apple.StickerKit.StickerPickerService
root: /private/var/mobile/Containers/Data/Application/E690307B-D650-4CDA-B36C-1067373FE546
• com.apple.Stickers.UserGenerated
root: /private/var/mobile/Containers/Data/Application/9A47FB9A-925E-4149-9F6D-A75D68E9026A
• com.apple.stocks
root: /private/var/mobile/Containers/Data/Application/FE500063-4419-4530-A7F7-58694C57355D
• com.apple.StoreDemoViewService
root: /private/var/mobile/Containers/Data/Application/DC56CB11-C951-4FE5-8029-F69A9038FE6E
• com.apple.StoreKitUISceneService
root: /private/var/mobile/Containers/Data/Application/5DB5BD54-F520-44EF-9A33-EA19C968C484
• com.apple.SubcredentialUIService
root: /private/var/mobile/Containers/Data/Application/D6663C73-18A0-48E0-A41D-61AE126D0C6C
• com.apple.SupportFlow
root: /private/var/mobile/Containers/Data/Application/882EC8CD-FB55-4797-8C29-4C4B18D3A8E9
• com.apple.SystemPaperViewService
root: /private/var/mobile/Containers/Data/Application/37149E60-064C-45BA-AE8B-7290C13E5B7D
• com.apple.SystemVoiceAssistant
root: /private/var/mobile/Containers/Data/Application/6B43C4E1-3102-4F8F-8B52-C820A33FFC12
• com.apple.tcc.AuthorizationPromptService
root: /private/var/mobile/Containers/Data/Application/0BE9342E-41DF-4298-9A96-E9E32365FBB4
• com.apple.TDGSharingViewService
root: /private/var/mobile/Containers/Data/Application/F7FB43B7-C5B6-4A6D-A1DF-A1DB155F27E9
• com.apple.TestFlight
root: /private/var/mobile/Containers/Data/Application/3690DD4C-5E92-4324-9F10-665280920ADD
• com.apple.tips
root: /private/var/mobile/Containers/Data/Application/29EA1406-A837-456B-BF75-0F04E459793F
• com.apple.Translate
root: /private/var/mobile/Containers/Data/Application/9E6BDC0C-0D7A-42C4-A144-FC6947D3018D
• com.apple.TrustInsightsUIService
root: /private/var/mobile/Containers/Data/Application/59DFBCD4-AA19-4D20-97F1-547779C25553
• com.apple.tv
root: /private/var/mobile/Containers/Data/Application/DDF878C8-2E3E-4FDF-9C29-4DF4159E36ED
• com.apple.TVAccessViewService
root: /private/var/mobile/Containers/Data/Application/34FEF22A-8A6D-4535-8E19-0E7E73ACB138
• com.apple.TVRemoteApp
root: /private/var/mobile/Containers/Data/Application/35E80562-5CA6-4656-9F48-E7187D64B40F
• com.apple.TVSetupUIService
root: /private/var/mobile/Containers/Data/Application/CD08666D-6EB3-4CA4-AFCE-D32CCD1B2AC5
• com.apple.UIKit.ColorPickerUIService
root: /private/var/mobile/Containers/Data/Application/DBCCC531-35A1-4065-815C-6E1660600832
• com.apple.UIKit.FontPickerUIService
root: /private/var/mobile/Containers/Data/Application/E1798C1C-A311-49D2-B613-747670834C3D
• com.apple.VoiceMemos
root: /private/var/mobile/Containers/Data/Application/4D86F577-C125-407F-A67D-55718648FC75
• com.apple.VoiceOverTouch
root: /private/var/mobile/Containers/Data/Application/71BF864D-EE55-48F3-9CF3-AA3C4FA43494
• com.apple.VSViewService
root: /private/var/mobile/Containers/Data/Application/A46E84F6-ADE1-4A54-BCA7-0AD3EF0F51FD
• com.apple.weather
root: /private/var/mobile/Containers/Data/Application/687E360A-D9B6-4B7A-933F-6C692DAA7BE3
• com.apple.webapp
root: /private/var/mobile/Containers/Data/Application/87F7D895-2FD2-4C62-9B52-EF1C2EF0D310
• com.apple.WebContentFilter.remoteUI.WebContentAnalysisUI
root: /private/var/mobile/Containers/Data/Application/5CF5CFE3-CEB9-4CF5-9D31-E382D48536C1
• com.apple.WebKit.PushBundle.0B87FA83B04E490AAC52F423B95A8B8B
root: /private/var/mobile/Containers/Data/Application/6142ED04-0489-42E9-B8FB-E9B5A23534DC
• com.apple.WebKit.PushBundle.49E624E18FB4440998AF22D9A2564786
root: /private/var/mobile/Containers/Data/Application/47A5E42A-3CFB-4C6C-A519-C8707A691B8A
• com.apple.WebKit.PushBundle.53C4E586D62647FEB3B5B4856E065F3A
root: /private/var/mobile/Containers/Data/Application/C22968DE-4CBD-4928-BFFF-3DDE8BE73E77
• com.apple.WebKit.PushBundle.81B6F27123C3489CA83647FAB23296B5
root: /private/var/mobile/Containers/Data/Application/1C6EFC25-C2C3-4CF9-B594-198A8A1E5FD8
• com.apple.WebKit.PushBundle.896C51DFCE3D4A09B29FE95A073B5EFD
root: /private/var/mobile/Containers/Data/Application/FCF81EEA-1664-48E2-9753-146B0E73D474
• com.apple.WebKit.PushBundle.748137B3BA664EE18CD5EFDB4FB02272
root: /private/var/mobile/Containers/Data/Application/4F6541BC-8393-4EFA-A17B-ACDFAFC22E92
• com.apple.WebKit.PushBundle.BF7BFA1139A4457C90587B981B198DBB
root: /private/var/mobile/Containers/Data/Application/334CEE3F-C35B-4212-871E-F769C54287DA
• com.apple.WebKit.PushBundle.E05F6144B95E42F1A03F229A72CF4A8D
root: /private/var/mobile/Containers/Data/Application/960C8C75-140E-4DD0-A0CC-B4E17F4C8F98
• com.apple.WebSheet
root: /private/var/mobile/Containers/Data/Application/09C0C1BA-A7E5-4F76-9C27-204F514B6CB4
• com.apple.WorkoutRemoteViewService
root: /private/var/mobile/Containers/Data/Application/875B8578-B898-43D1-80A5-54CA758B3390
• com.apple.WritingToolsUIService
root: /private/var/mobile/Containers/Data/Application/B94E8555-79AF-41B6-961C-DC1CB2E66A9A
• com.APSQA.MetisTest
root: /private/var/mobile/Containers/Data/Application/91BAA2A4-09C2-49AC-BF91-F8B20A3D59B2
• com.AXgamesoft.TurbopropFS
root: /private/var/mobile/Containers/Data/Application/D32FD879-B473-459C-BB76-20F3F3003936
• com.AXgamesoft.TurbopropFSt
root: /private/var/mobile/Containers/Data/Application/91BCFCD1-175E-462B-98EA-BA5FD3EACEE4
• com.bricklife.ios.boost-remote
root: /private/var/mobile/Containers/Data/Application/16D56C9E-CD80-46A9-8646-2B563F2EA310
• com.cloudflare.1dot1dot1dot1
root: /private/var/mobile/Containers/Data/Application/A157BF72-EAE0-4D2B-8640-C43D38762280
• com.crystalnix.ServerAuditor
root: /private/var/mobile/Containers/Data/Application/E18E3EA2-7302-477D-8CC2-3420E2D84991
• com.ction.4playergames
root: /private/var/mobile/Containers/Data/Application/1456122E-0C7D-45D8-A75A-5E8606651240
• com.databridges.privacy.v2RayTun
root: /private/var/mobile/Containers/Data/Application/0CB9B724-D059-4355-95EC-7C66C98226EB
• com.deepseek.chat
root: /private/var/mobile/Containers/Data/Application/BF04DD86-26D3-414B-A815-B132D065D80D
• com.dev47apps.droidcam
root: /private/var/mobile/Containers/Data/Application/4A3B4FAD-703E-49E5-84DB-3736E42FFCAA
• com.doglobal.ESFileExplorer
root: /private/var/mobile/Containers/Data/Application/4F4A5B77-098C-4011-9ED5-11C92029A4BF
• com.duolingo.DuolingoMobile
root: /private/var/mobile/Containers/Data/Application/4D6C90A4-8D60-4D9A-87DD-136C2D858CF6
• com.effect.streisand
root: /private/var/mobile/Containers/Data/Application/5C6E4ED8-4F5F-450C-A5B7-52CA884EB22E
• com.eventur.Hide.me
root: /private/var/mobile/Containers/Data/Application/03509C05-1476-4DA7-B641-0959D184675D
• com.fancyforce.happywheels
root: /private/var/mobile/Containers/Data/Application/A69E29D8-5F40-4F16-BA02-4BEF8E712323
• com.frizzle.sideinstaller
root: /private/var/mobile/Containers/Data/Application/CAADAE8F-255F-4DF9-AD7F-706F2079C25D
• com.gamebytes.gamebytes
root: /private/var/mobile/Containers/Data/Application/DE09DA70-0590-4E44-A6F3-B38EC76BCBFC
• com.geode.launcher
root: /private/var/mobile/Containers/Data/Application/EA07B724-15E5-446C-8811-B080B458AA36
• com.geodeapp.app
root: /private/var/mobile/Containers/Data/Application/0D3500F1-07DF-4C68-A947-82B6F0E03ADE
• com.github.stormbreaker.prod
root: /private/var/mobile/Containers/Data/Application/1ADC8095-A2C3-4E30-93FC-29B1D3BE892F
• com.golyeos.3DDriveClass
root: /private/var/mobile/Containers/Data/Application/D71D5467-5C57-44E5-A7A4-805283275ABD
• com.google.Authenticator
root: /private/var/mobile/Containers/Data/Application/80530EE5-1A4F-4CE6-9EFA-ED38F3DEABD8
• com.google.gemini
root: /private/var/mobile/Containers/Data/Application/8F171F74-A81D-4E98-BF7B-60F71A7A581F
• com.google.Gmail
root: /private/var/mobile/Containers/Data/Application/1A46520E-9230-460E-9AB7-9C33A371CF9A
• com.google.GoogleMobile
root: /private/var/mobile/Containers/Data/Application/B2342992-4A64-4BBC-BA18-0900091823D8
• com.google.ios.youtube
root: /private/var/mobile/Containers/Data/Application/CCE5700F-8025-4093-9FDF-ED8088A79E1A
• com.google.Tachyon
root: /private/var/mobile/Containers/Data/Application/19F5ED81-D4E9-4C98-8A88-CBA7CAC5DCD1
• com.gorod.sputnik
root: /private/var/mobile/Containers/Data/Application/F689D813-264B-47B7-B5B9-E9F5F11AB6A8
• com.happychaos.artsyfartsy.staging
root: /private/var/mobile/Containers/Data/Application/B2E43705-99C6-47B5-A844-58EC4609B7BC
• com.honanStudio.driveX
root: /private/var/mobile/Containers/Data/Application/C8C04D25-9CAA-4F87-9219-CA4EA033E26B
• com.imapps.irazor
root: /private/var/mobile/Containers/Data/Application/851FA09D-2BBF-4DCB-8B0C-96E5AA553B7C
• com.ipaside.escapeos
root: /private/var/mobile/Containers/Data/Application/CACBB492-7C70-421B-943D-7618930EA40A
• com.ipopgame.izipfree
root: /private/var/mobile/Containers/Data/Application/91EE6BE7-AFB3-4D44-8A60-F9FBB91770DB
• com.jcutting.ghosttubesls
root: /private/var/mobile/Containers/Data/Application/62E53759-B8A1-4881-9101-D5ED4635E528
• com.JindoBlu.OfflineGamesIOS
root: /private/var/mobile/Containers/Data/Application/E6459410-4C5F-45CC-9F1B-CCE0DE9862E9
• com.jixianghao.zipextract
root: /private/var/mobile/Containers/Data/Application/BC5B13C7-BFE2-4CE0-803C-7E5A6AFAE844
• com.jkcoxson.LocalDevVPN
root: /private/var/mobile/Containers/Data/Application/7B4B7F7C-0365-4954-96F6-3F5C8B78F310
• com.kdt.livecontainer
root: /private/var/mobile/Containers/Data/Application/C0000C9C-D2EA-47BA-B875-40195E5DE0E2
• com.kiloo.subwaysurfers
root: /private/var/mobile/Containers/Data/Application/7C12EBBC-BD91-4FA4-8DEC-87C7CBF81E4B
• com.kw.gc.autoclicker.robloxhelper
root: /private/var/mobile/Containers/Data/Application/CBC4A5F2-D72E-47E6-A3D8-5FBB47E7027D
• com.laminarresearch.X-Plane10
root: /private/var/mobile/Containers/Data/Application/FE40F403-F81B-4555-9320-0A94C07578A7
• com.lego.retail.mindstorms.robotinventor
root: /private/var/mobile/Containers/Data/Application/6C7EA9CD-3590-462E-862D-A8563475D07B
• com.lemon.lvoverseas
root: /private/var/mobile/Containers/Data/Application/5C642233-F01C-4488-82A6-88BAE04F54FD
• com.lenovo.anyshare
root: /private/var/mobile/Containers/Data/Application/6E143594-2CB0-4C23-B9EC-6F9F7ED24118
• com.liguangming.Shadowrocket
root: /private/var/mobile/Containers/Data/Application/446D38CE-B566-4818-A51E-DEB7935F21F9
• com.local.clicker
root: /private/var/mobile/Containers/Data/Application/38F687A9-E6BC-41C3-86C1-E1173B2B6ADC
• com.local.gdash
root: /private/var/mobile/Containers/Data/Application/652BFCD7-5872-4B78-AAB3-FC3782E5F4C8
• com.mak5er.Pocket-Poster
root: /private/var/mobile/Containers/Data/Application/DC72F177-DFA7-452A-A6FE-E7127C046B3D
• com.martinmagni.fancade
root: /private/var/mobile/Containers/Data/Application/BD5B1CAD-5CCF-4CEC-AB30-3492E406C837
• com.miketigas.OnionBrowser
root: /private/var/mobile/Containers/Data/Application/F64A1162-48E2-4C5B-8D7A-0B54822F3134
• com.minsvyaz.gosuslugi.school
root: /private/var/mobile/Containers/Data/Application/3EAC7F4D-BC21-46D4-BE8C-22825D68CF0C
• com.mojang.minecraftpe
root: /private/var/mobile/Containers/Data/Application/F799C766-9DC5-4C88-9227-FD81C271221E
• com.moonlight-stream.Moonlight
root: /private/var/mobile/Containers/Data/Application/999205DA-45F0-46BA-83FA-7E3454C27F06
• com.ndemiccreations.plagueinc
root: /private/var/mobile/Containers/Data/Application/9826FB5A-ABC0-4B29-B5C4-68C0C67553AB
• com.ndemiccreations.plagueinch
root: /private/var/mobile/Containers/Data/Application/BE4CAF0D-7E61-41DC-BF1B-E5138F247EA4
• com.nebula.clashmi
root: /private/var/mobile/Containers/Data/Application/ECF1E00D-C180-46BB-936D-B20668E71B09
• com.nikolaostheodoridis.handit
root: /private/var/mobile/Containers/Data/Application/C17196C4-F6C2-4181-B8A9-4CFD95B98FF1
• com.nintendo.zara
root: /private/var/mobile/Containers/Data/Application/105E6026-F0A8-4330-8047-1572ACAF66CE
• com.notdoppler.EarntoDie2
root: /private/var/mobile/Containers/Data/Application/50CDC481-283D-49BB-B97C-37FA498654A0
• com.opa334.FuckYou
root: /private/var/mobile/Containers/Data/Application/BD12C8CB-0E4A-4DBE-9F9E-3DC124CDC82A
• com.openai.chat
root: /private/var/mobile/Containers/Data/Application/E062808B-BE4E-4BA9-8AC0-358490F55FC7
• com.rileytestut.Delta
root: /private/var/mobile/Containers/Data/Application/58D37727-67E0-4AA1-B197-7B8419692406
• com.roblox.robloxmobile
root: /private/var/mobile/Containers/Data/Application/8F06991E-F770-440D-85A9-34DC46649077
• com.roborisen.scratchmobile
root: /private/var/mobile/Containers/Data/Application/CAF47836-C7BA-4E5C-8074-7B54D07F0CED
• com.robtop.geometrydashsubzero
root: /private/var/mobile/Containers/Data/Application/76B887D5-8622-432F-8B38-9372FFB4A8C4
• com.robtop.geometryjump
root: /private/var/mobile/Containers/Data/Application/75D6342B-02AE-4713-9A85-CED798800E92
• com.rockstargames.gta3sa
root: /private/var/mobile/Containers/Data/Application/9C099373-ACB4-432B-8671-1E58861C3447
• com.roooot.mond
root: /private/var/mobile/Containers/Data/Application/D78DE013-666B-4A5C-A343-E1F1D6AF5118
• com.scn.brickcontroller2
root: /private/var/mobile/Containers/Data/Application/D71B7630-56F8-4348-A6D5-D54CEBAA4EBA
• com.seran.mecchachameleon
root: /private/var/mobile/Containers/Data/Application/13E45E65-0DAC-44F7-8FFB-5752736E4D37
• com.skyjos.ftpmanagerfree
root: /private/var/mobile/Containers/Data/Application/D146322E-1636-484F-88D8-418EA1D5C03F
• com.sp67.flero
root: /private/var/mobile/Containers/Data/Application/C47F8E96-D50A-4ADD-AF0D-2EF8F6C223D6
• com.spotify.client
root: /private/var/mobile/Containers/Data/Application/CC528A37-F704-483C-99AA-07DFFBCB56A9
• com.StefMorojna.SpaceflightSimulator
root: /private/var/mobile/Containers/Data/Application/11FBB35F-82C2-4C94-BCE4-D5860E2409E9
• com.stik.stikdebug
root: /private/var/mobile/Containers/Data/Application/8A5AAEB3-7300-4976-8609-FCB49311FFF3
• com.supercell.laser
root: /private/var/mobile/Containers/Data/Application/DC78B06A-09EE-4EF9-A9FF-D0E5FC7FFDCD
• com.timeplusq.drawnguess
root: /private/var/mobile/Containers/Data/Application/33DE6665-E745-48BA-B67D-9C398080E4E0
• com.toastmaster.app
root: /private/var/mobile/Containers/Data/Application/67C2AD6A-A25E-4370-9F59-2BC45BA8D097
• com.turkcell.bip
root: /private/var/mobile/Containers/Data/Application/ADC572A3-92E2-40D1-B65F-93017AB24B2D
• com.TwentySeven.MelonPlayground
root: /private/var/mobile/Containers/Data/Application/62E8BDE2-23F5-4C24-B922-440A4DCDBF10
• com.utmapp.UTM
root: /private/var/mobile/Containers/Data/Application/E652889D-5E4D-4018-A87A-0117E92BC284
• com.vitastudio.mahjong
root: /private/var/mobile/Containers/Data/Application/EAEF6F8A-94FD-4B75-BB2A-C97DC7747D79
• com.vk.vkclient
root: /private/var/mobile/Containers/Data/Application/F4BDE5EF-EE99-40E2-92C5-71C7D8D259CA
• com.vonmatrix.NapsternetV
root: /private/var/mobile/Containers/Data/Application/7A42A7FF-D0E8-41AC-8BDD-BF312ED132D4
• com.watfaq.ChocLite
root: /private/var/mobile/Containers/Data/Application/51FD7D58-D60C-4025-8760-DF9CDF114A40
• com.wsfu.puuush
root: /private/var/mobile/Containers/Data/Application/2FA65BA6-51EC-4722-83F5-D6694358C6A7
• com.yandex.fintech.bank-app
root: /private/var/mobile/Containers/Data/Application/B41347E1-49AE-4E5D-9747-223861E10FEA
• com.yandex.iot
root: /private/var/mobile/Containers/Data/Application/C0D69924-BD1A-46A7-9D47-94E213711B01
• com.yoshisuga.GenZDZero
root: /private/var/mobile/Containers/Data/Application/63C16F58-528C-42A5-875D-923710B20D29
• com.zhiliaoapp.musicallyrtff5
root: /private/var/mobile/Containers/Data/Application/6658E405-3576-4A1C-AD81-103FF89C27D1
• cz.gdmt.Annelids
root: /private/var/mobile/Containers/Data/Application/A4EB18EE-96DA-4A5D-87E9-518E1C7A0A28
• dev.rockylabs.TrollInstaller
root: /private/var/mobile/Containers/Data/Application/AD6810C5-A85F-4D06-B1C6-71341AE49F6B
• dev.y.nobu.ReversePlay
root: /private/var/mobile/Containers/Data/Application/5D21A89A-7BCB-4B82-BED4-30E4E77E5D65
• developer.apple.wwdc-Release
root: /private/var/mobile/Containers/Data/Application/9E9AEBC1-4700-42FF-A87E-E32A4C923C86
• hossin.asaadi.V2Box
root: /private/var/mobile/Containers/Data/Application/3C275559-DF9D-4B43-97B0-AA5B4BA1E144
• imapps.taser
root: /private/var/mobile/Containers/Data/Application/0A7D2445-73B4-4BB5-B5DB-A5D602F474B6
• io.speedtop.app
root: /private/var/mobile/Containers/Data/Application/3639EE15-5A28-4445-9C18-9DC9EC7511A3
• jetong.Ar-App
root: /private/var/mobile/Containers/Data/Application/0D2F9EF4-62EC-446A-A0A8-BDCE5801FCCD
• jetong.bad-query
root: /private/var/mobile/Containers/Data/Application/1976A328-9E89-4522-A812-F3BA9FD3C252
• llc.itdev.incy
root: /private/var/mobile/Containers/Data/Application/70DC7382-4C24-4CCD-AC60-9A3062DEF683
• me.oatmealdome.DolphiniOS-njb-patreon-beta
root: /private/var/mobile/Containers/Data/Application/BFF27644-EAC6-4C5F-ADFA-400ED9EC17F7
• me.ssus.gestaltedit
root: /private/var/mobile/Containers/Data/Application/4E7ACA58-05C1-48EE-91E3-8FC90699DD21
• nt.nb.ios
root: /private/var/mobile/Containers/Data/Application/4D1DB455-743F-4CCD-B546-0F4BB9F5598B
• nya.asami.ksign
root: /private/var/mobile/Containers/Data/Application/C119D621-58FB-40F1-9C17-733480E58391
• org.amnezia.AmneziaVPN
root: /private/var/mobile/Containers/Data/Application/C9637D03-0090-4942-92FE-DC2ECC04B546
• org.openobservatory.ooniprobe
root: /private/var/mobile/Containers/Data/Application/08F8DDE4-45EC-485A-BFCF-9F5842BDFE6F
• org.torproject.orbot
root: /private/var/mobile/Containers/Data/Application/FF4C5A0A-BBAB-4D19-9C7E-40B3F10784E6
• p3.xyz.yyyue.esign
root: /private/var/mobile/Containers/Data/Application/645AC804-0506-4825-B1D6-4286C720E4CA
• ru.beeline.mobile
root: /private/var/mobile/Containers/Data/Application/EF98A5B7-BAB7-4442-918D-BE31DD915FDD
• ru.beeline.tveapp
root: /private/var/mobile/Containers/Data/Application/127619B0-6313-49C5-8A63-DAC68336F323
• ru.doublegis.grymmobile
root: /private/var/mobile/Containers/Data/Application/378B74CD-A55A-4C87-B303-16E7A826FB75
• ru.kinopoisk
root: /private/var/mobile/Containers/Data/Application/7154C4E4-3881-4C6B-A550-3956E42B2362
• ru.komet.app
root: /private/var/mobile/Containers/Data/Application/DD1578BE-AA04-4D76-9EF2-A1E2E2ABCF74
• ru.mchs
root: /private/var/mobile/Containers/Data/Application/D556B743-7D7D-4F64-AC26-741D4E5C228E
• ru.oneme.app
root: /private/var/mobile/Containers/Data/Application/67594A8A-8D97-48F8-8614-5482EAC8B88A
• ru.plus.bookmate
root: /private/var/mobile/Containers/Data/Application/6CDDAB02-BF62-425D-9072-D2D487DD0270
• RU.WILDBERRIES.MOBILEAPP
root: /private/var/mobile/Containers/Data/Application/60F12D11-D141-4936-94DF-4A5A9B539D2B
• ru.yandex.blue.market
root: /private/var/mobile/Containers/Data/Application/1B13F145-CFE2-4A9D-ADB2-94175E0BFE33
• ru.yandex.mobile.keyboard
root: /private/var/mobile/Containers/Data/Application/CB46787D-4B52-4470-8AB5-132F135348C9
• ru.yandex.mobile.music
root: /private/var/mobile/Containers/Data/Application/4D92ED2C-15E2-4D6F-92B3-173DB54BA92A
• ru.yandex.mobile.search
root: /private/var/mobile/Containers/Data/Application/F0A7FA59-262E-44A6-B1CE-605CC28B16B6
• ru.yandex.mobile.yamb
root: /private/var/mobile/Containers/Data/Application/E0CAB04A-BDCC-4BA9-BC63-0321ECD7F78D
• ru.yandex.traffic
root: /private/var/mobile/Containers/Data/Application/B2790341-EAD4-4093-A91C-134931C78765
• ru.yandex.ytaxi
root: /private/var/mobile/Containers/Data/Application/6DC6D60D-3EDF-4039-9D7B-7AF2EB05BDB7
• su.ffg.happ.plus
root: /private/var/mobile/Containers/Data/Application/E8528DA9-3C30-41F8-94DC-FC65188911C7
• thewonderofyou.Feather
root: /private/var/mobile/Containers/Data/Application/9396E849-6E8B-42D3-953B-1AD47EC6E6E3
• uk.nouvborne.ketamine
root: /private/var/mobile/Containers/Data/Application/D70D33DF-0B0E-4A96-AE28-81995AB041C2
The sandbox extension covers each listed root. Descendant access still depends on filesystem and Data Protection controls.
[MHA-C7] App Groups
Primitive: MHA-MCM class 7 app-group lookup and sandbox extension
Enabled roots:
• group.06798bb47cd91ecf.1
root: /private/var/mobile/Containers/Shared/AppGroup/BDC0DBAC-F4BC-43DA-91C7-FCAC286C7AC4
• group.06798bb47cd91ecf.2
root: /private/var/mobile/Containers/Shared/AppGroup/2C2D49A2-EC93-4572-A996-065CB0D81225
• group.06798bb47cd91ecf.3
root: /private/var/mobile/Containers/Shared/AppGroup/7E2D6879-D63F-4611-B815-EA6736D1EC9F
• group.06798bb47cd91ecf.4
root: /private/var/mobile/Containers/Shared/AppGroup/6FF8628F-3A9A-4421-9260-A896B039B842
• group.06798bb47cd91ecf.5
root: /private/var/mobile/Containers/Shared/AppGroup/D23E42B5-2810-45CF-BE50-19F0EEBD744C
• group.com.apple.notes
root: /private/var/mobile/Containers/Shared/AppGroup/F186A534-DA4E-440A-9CC0-EA62EDCEE009
• group.com.apple.safari
root: /private/var/mobile/Containers/Shared/AppGroup/B51C5831-BD10-41D8-84F1-E35539FCD1B9
• group.com.apple.stocks
root: /private/var/mobile/Containers/Shared/AppGroup/95F31AFD-75BA-49EF-B341-8BFDDA01733B
• group.com.apple.weather
root: /private/var/mobile/Containers/Shared/AppGroup/5A4E127D-62ED-4604-8889-222BBCE23F28
The sandbox extension covers each listed root. Descendant access still depends on filesystem and Data Protection controls.
[MHA-C4] Extension Data
Primitive: MHA-MCM class 4 extension-data lookup and sandbox extension
Status: folder absent; no root was enabled.
[MHA-C6] VPN Data
Primitive: MHA-MCM class 6 VPN-data lookup and sandbox extension
Status: folder absent; no root was enabled.
[MHA-C10] Service Data
Primitive: MHA-MCM class 10 service-data lookup and sandbox extension
Enabled roots:
• com.apple.familycircled
root: /private/var/mobile/Containers/Data/InternalDaemon/C8E32067-429D-4FC9-A402-F2D3A0BB607A
• com.apple.installd
root: /private/var/mobile/Containers/Data/InternalDaemon/EC867097-24DB-47D5-9CC4-6C6917BD92D0
• com.apple.locationd
root: /private/var/mobile/Containers/Data/InternalDaemon/A7FF6AB6-16AE-4441-BBC0-E8959A3A0E03
• com.apple.swcd
root: /private/var/mobile/Containers/Data/InternalDaemon/3F89E179-6BEC-4C18-A16C-5FC8D62546BB
The sandbox extension covers each listed root. Descendant access still depends on filesystem and Data Protection controls.
[MHA-C12] System Data
Primitive: MHA-MCM class 12 system-data lookup and sandbox extension
Enabled roots:
• com.apple.geod
root: /private/var/containers/Data/System/com.apple.geod
The sandbox extension covers each listed root. Descendant access still depends on filesystem and Data Protection controls.
[MHA-C13] System Groups
Primitive: MHA-MCM class 13 system-group lookup and sandbox extension
Enabled roots:
• systemgroup.com.apple.lsd.iconscache
root: /private/var/containers/Shared/SystemGroup/systemgroup.com.apple.lsd.iconscache
The sandbox extension covers each listed root. Descendant access still depends on filesystem and Data Protection controls.
[MHA-C15] Protected Data
Primitive: MHA-MCM class 15 protected-data lookup and sandbox extension
Enabled roots:
• com.apple.appmanagedfeaturesd
root: /private/var/containers/Data/ProtectedSystem/DD664378-7713-4084-9456-3795213D9CDE/Data
The sandbox extension covers each listed root. Descendant access still depends on filesystem and Data Protection controls.
[MHA-C13 Scoped] Additional Locations
Primitive: MHA-MCM class 13 scoped part-domain lookup and sandbox extension
Enabled roots:
• [MHA-C13] Install Coordination
root: /private/var/containers/Shared/SystemGroup/systemgroup.com.apple.installcoordinationd/Library/Caches/../InstallCoordination
• [MHA-C13] MobileGestalt Cache
root: /private/var/containers/Shared/SystemGroup/systemgroup.com.apple.mobilegestaltcache/Library/Caches
The sandbox extension covers each listed root. Descendant access still depends on filesystem and Data Protection controls.
[MHA-Mixed EXP] Experimental
Primitive: MHA-MCM scoped class 10, 12, 13, and 15 probes
Enabled roots:
• 01 [MHA-C13] Install Coordination
root: /private/var/containers/Shared/SystemGroup/systemgroup.com.apple.installcoordinationd/Library/Caches/../InstallCoordination
• 02 [MHA-C13] MobileGestalt Cache
root: /private/var/containers/Shared/SystemGroup/systemgroup.com.apple.mobilegestaltcache/Library/Caches
• 03 [MHA-C12] Eligibility Overrides
root: /private/var/containers/Data/System/4A71F930-05C6-4944-884D-F91946042D70/Library/Caches/NeverRestore
• 04 [MHA-C15] App Managed Data
root: /private/var/containers/Data/ProtectedSystem/DD664378-7713-4084-9456-3795213D9CDE/Data
• 06 [MHA-C10] Shared Web Credentials Root
root: /private/var/mobile/Containers/Data/InternalDaemon/3F89E179-6BEC-4C18-A16C-5FC8D62546BB
• 07 [MHA-C12] System Data Library Control
root: /private/var/containers/Data/System/com.apple.geod/Library/Caches/..
• 08 [MHA-C12] MobileGestalt via System Data
root: /private/var/containers/Data/System/com.apple.geod/Library/Caches/../../../../../../containers/Shared/SystemGroup/systemgroup.com.apple.mobilegestaltcache/Library/Caches
The sandbox extension covers each listed root. Descendant access still depends on filesystem and Data Protection controls.
Experimental returned paths and checked subpaths:
• 01 [MHA-C13] Install Coordination — status=linked
returned root: /private/var/containers/Shared/SystemGroup/systemgroup.com.apple.installcoordinationd/Library/Caches/../InstallCoordination
checked subpath: /private/var/containers/Shared/SystemGroup/systemgroup.com.apple.installcoordinationd/Library/Caches/../InstallCoordination/Coordinators — exists=yes readable=yes writable=yes open=yes
checked subpath: /private/var/containers/Shared/SystemGroup/systemgroup.com.apple.installcoordinationd/Library/Caches/../InstallCoordination/DataPromises — exists=yes readable=yes writable=yes open=yes
checked subpath: /private/var/containers/Shared/SystemGroup/systemgroup.com.apple.installcoordinationd/Library/Caches/../InstallCoordination/PromiseStaging — exists=yes readable=yes writable=yes open=yes
• 02 [MHA-C13] MobileGestalt Cache — status=linked
returned root: /private/var/containers/Shared/SystemGroup/systemgroup.com.apple.mobilegestaltcache/Library/Caches
checked subpath: /private/var/containers/Shared/SystemGroup/systemgroup.com.apple.mobilegestaltcache/Library/Caches/com.apple.MobileGestalt.plist — exists=yes readable=yes writable=yes open=yes
• 03 [MHA-C12] Eligibility Overrides — status=linked
returned root: /private/var/containers/Data/System/4A71F930-05C6-4944-884D-F91946042D70/Library/Caches/NeverRestore
checked subpath: /private/var/containers/Data/System/4A71F930-05C6-4944-884D-F91946042D70/Library/Caches/NeverRestore/eligibility_overrides.data — exists=yes readable=yes writable=no open=yes
• 04 [MHA-C15] App Managed Data — status=linked
returned root: /private/var/containers/Data/ProtectedSystem/DD664378-7713-4084-9456-3795213D9CDE/Data
checked subpath: /private/var/containers/Data/ProtectedSystem/DD664378-7713-4084-9456-3795213D9CDE/Data/com.apple.appmanagedfeaturesd/ConfigurationPersistence — exists=no readable=no writable=no open=no
checked subpath: /private/var/containers/Data/ProtectedSystem/DD664378-7713-4084-9456-3795213D9CDE/Data/com.apple.appmanagedfeaturesd/Archive/ConfigurationPersistence — exists=no readable=no writable=no open=no
• 05 [MHA-C13] Configuration Profiles Root — status=failed
• 06 [MHA-C10] Shared Web Credentials Root — status=linked
returned root: /private/var/mobile/Containers/Data/InternalDaemon/3F89E179-6BEC-4C18-A16C-5FC8D62546BB
checked subpath: /private/var/mobile/Containers/Data/InternalDaemon/3F89E179-6BEC-4C18-A16C-5FC8D62546BB/com.apple.SharedWebCredentials/swc.db — exists=no readable=no writable=no open=no
• 07 [MHA-C12] System Data Library Control — status=linked
returned root: /private/var/containers/Data/System/com.apple.geod/Library/Caches/..
checked subpath: /private/var/containers/Data/System/com.apple.geod/Library/Caches/../Caches — exists=yes readable=yes writable=yes open=yes
checked subpath: /private/var/containers/Data/System/com.apple.geod/Library/Caches/../Preferences — exists=yes readable=yes writable=yes open=yes
• 08 [MHA-C12] MobileGestalt via System Data — status=linked
returned root: /private/var/containers/Data/System/com.apple.geod/Library/Caches/../../../../../../containers/Shared/SystemGroup/systemgroup.com.apple.mobilegestaltcache/Library/Caches
checked subpath: /private/var/containers/Data/System/com.apple.geod/Library/Caches/../../../../../../containers/Shared/SystemGroup/systemgroup.com.apple.mobilegestaltcache/Library/Caches/com.apple.MobileGestalt.plist — exists=yes readable=yes writable=yes open=yes
[MHA-C2] Wallpaper Lab
Primitive: MHA-MCM class 2 application-data lookup for com.apple.PosterBoard.
Status: this folder is local staging. PosterBoard access starts only during a Wallpaper Lab action.
Potential target root: the class-2 com.apple.PosterBoard data container returned during that action.
Files Traversal
Primitive: Apple Files relative-symlink portal experiment.
Status: disabled. This build removes the folder and enables no Files Traversal path.
Boundary: no arbitrary /var, Keychain, TCC, root, kernel, or app-bundle access is claimed.
