MASTG-TEST-0299: Data Protection Classes for Files in Private Storage

Overview

This test retrieves the data protection classes of files created or modified in the app's private storage during typical app usage. The goal is to ensure that files containing sensitive data are assigned appropriate data protection classes to safeguard them when the device is locked.

Ensure the device / simulator is in a clean state (no prior test artifacts). When exercising the app, ensure to trigger typical workflows (authentication, profile loading, messaging, caching, offline usage, cryptographic operations).

Steps

1. Use Installing Apps to install the app.
2. Exercise the app extensively to trigger as many flows as possible and enter sensitive data wherever you can.
3. Use Accessing App Data Directories to retrieve the list of files from the app's private storage (sandbox) directory tree (/var/mobile/Containers/Data/Application/<UUID>/) including the data protection classes.

Observation

The output should contain:

• List of files in private storage including at least path and data protection class.

Evaluation

The test case fails if files containing sensitive data have the data protection class set to NSFileProtectionNone.

Best Practices

MASTG-BEST-0024: Store Data Encrypted in App Sandbox Directory