[TrollStroe App Developer] TrollStore wrongly allocated the widget sandbox path

[DevelopCubeLab]

No Duplicates Issue

• I'm sure I've searched on the issue tracker before creating one.

Expected Behavior?

Widget can get it own sandbox

Current Behavior?

Widget get and return 'com.icraze.gtatracker' sandbox path.
In iOS 14 and iOS 17.0 it show: /var/mobile/Containers/Data/Application/{com.icraze.gtatracker}
In iOS 15 and iOS 16 it show: /var/mobile/Containers/Data/PluginKitPlugin/{com.icraze.gtatracker}

Possible Solution?

I didn't come up with a solution, I can only try to get the Widget and the incorrect Sandbox directory in my application.
And I reviewed the source code of TrollStore, and I did not find any information about com.icraze.gtatracker, but I remember that gtatracker is the installer for devices with A12 and above on TrollStore 1.

Steps to Reproduce

1. I try to develop a battery info TrollStore application, and this is my code: WidgetController (Sorry more Chinese comment) currently an unreleased version, still under test.
2. getWidgetBatteryData()this function. Widget will use NSLog output there sandbox path.
3. When I finished building this Widget, it couldn't access the data, so I tried using NSLog to make the Widget output its own sandbox directory.
4. In iOS 14 and iOS 17.0 it show: /var/mobile/Containers/Data/Application/{com.icraze.gtatracker}In iOS 15 and iOS 16 it show: /var/mobile/Containers/Data/PluginKitPlugin/{com.icraze.gtatracker}
   I expect it to access its own sandbox, I did not use AppGroup to share data; I let the main program search for PluginKitPlugin to get its directory. You can check getWidgetSandboxDirectory() -> [String]

I don't know why it's like this, I think maybe it's a problem with my list of rights? I still let iOS allocate a sandbox for me.

This bug is very strange, because I remember that TrollStore 2 no longer uses gtatracker to install TrollStore on iOS 16 and iOS 17.0, yet gtatracker still appears.

TrollStore Version

TrollStroe 2.1

iOS/iPadOS version

iOS 14.3 iOS 15.3.1 iOS 15.4.1 iOS 15.5 iOS 16.5 iOS 16.6 iOS 17.0

iDevice Model

iPhone 12 mini iPhone 13 mini iPhone 13 Pro iPhone 13 Pro Max iPhone 11 iPhone SE 3

Other info of your environment

macOS 15.2 Xcode 16.2 Theos 2.5

[opa334]

We use the certificate of the GTA Tracker app in the CoreTrust bypass, so iOS will see that from certain APIs.

This issue came up right after the release of 2.0 and I fixed it by adding the entitlement

<key>com.apple.private.security.container-required</key>
<string><actual_identifier></string>

to every binary that's signed by TrollStore here.

Maybe it doesn't fix it correctly or there is some other issue impacting this.

[DevelopCubeLab]

I've tried adding to the entitlement list
<key>com.apple.private.security.container-required</key> <string>com.developallab.BatteryInfo.BatteryInfoWidget</string>, this problem can be solved, but it is necessary to provide a list of rights to the Widget separately. If the main MachO also adds this entitlement, it will cause the main program to lose Unsandbox permission.
Anyway, this problem has been solved!!
Should we add this part of the explanation in README.md?

[opa334]

I've tried adding to the entitlement list <key>com.apple.private.security.container-required</key> <string>com.developallab.BatteryInfo.BatteryInfoWidget</string>, this problem can be solved, but it is necessary to provide a list of rights to the Widget separately. If the main MachO also adds this entitlement, it will cause the main program to lose Unsandbox permission. Anyway, this problem has been solved!! Should we add this part of the explanation in README.md?

Yeah if the binary has an entitlement to run unsandboxed, I do not add this entitlement since I thought it wasn't neccessary, maybe it is?

[DevelopCubeLab]

I don't have more idea or suggestions, maybe just what the developers know is enough.
Just providing a rights list for the Widget Extension is enough to solve this bug.