Information Technology Reference
In-Depth Information
user data partition is copied, so the actual file size will be less than the iPhone size.
Double-clicking on the DMG file mounts it in read-write mode and might effect the image
integrity. To maintain the integrity, you can use the hdiutil command to mount the im-
age in read-only mode, as shown in the following command. (Note that the file path re-
flects the DMG file you created.)
$hdiutil attach -readonly
b716de79051ef093a98fc3ff1c46ca5e36faabc3/
data_20131209-1956.dmg
/dev/disk3
/Volumes/Data
The output of the hdiutil command shows that the disk image has been attached to the
/dev/disk3 device file and can be mounted on /Volumes/Data with the following
command:
$cd /Volumes/Data/
You can now browse the file system in /Volumes/Data/ and observe that all file con-
tents are encrypted, as shown in the following command:
$hexdump -C mobile/Library/AddressBook/AddressBook.sqlitedb
| head
The output is as shown in the following screenshot:
The encrypted addressBook file
To unmount the image, use the hdiutil eject command as follows:
$cd /
$hdiutil eject /Volumes/Data/
"disk3" unmounted.
"disk3" ejected.
Search WWH ::




Custom Search