Application access for framework created files & keys

Question

Created Jul ’20

Replies 1

Boosts 0

Participants 2

I'm creating a framework for iOS that needs to store files and keys (mostly symmetric keys). I was wondering if I can prevent the parent app from accessing:

Keys/SecItems I create in Keychain
Files I create/store on the device

Answered by DTS Engineer in 618486022

I was wondering if I can prevent the parent app from accessing

No. The access control for each item is determined by the calling app, with no referenced at all to the calling framework.

You could wrap the keys with a ‘secret’ that’s embedded in your framework. It’s not at all secure, but it will block casual access.

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@apple.com"

Boost

Answer 1

DTS Engineer OP

Apple

Jul ’20

Accepted Answer

I was wondering if I can prevent the parent app from accessing

No. The access control for each item is determined by the calling app, with no referenced at all to the calling framework.

You could wrap the keys with a ‘secret’ that’s embedded in your framework. It’s not at all secure, but it will block casual access.

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@apple.com"

0