MASVS v1 MSTG-STORAGE-6
MASVS v2 MASVS-PLATFORM-1
Determining Whether Sensitive Data Is Exposed via IPC Mechanisms
The following section summarizes keywords that you should look for to identify IPC implementations within iOS source code.
Several classes may be used to implement the NSXPCConnection API:
You can set security attributes for the connection. The attributes should be verified.
Check for the following two files in the Xcode project for the XPC Services API (which is C-based):
Keywords to look for in low-level implementations:
Keywords to look for in high-level implementations (Core Foundation and Foundation wrappers):
Keywords to look for:
Verify IPC mechanisms with static analysis of the iOS source code. No iOS tool is currently available to verify IPC usage.