NewLC - CAPABILITY NetworkControl problem - Comments

Re: CAPABILITY NetworkControl problem

puterman — Thu, 17 Aug 2006 05:45:59 +0200

OldLC: What you're saying is that platsec is bad for developers. I'm sure everyone agrees with that.

Re: CAPABILITY NetworkControl problem

OldLC — Wed, 16 Aug 2006 11:26:37 +0200

Quote from: puterman

Ping might be "simple", but it's fairly low-level. (On Unix you need to run it as root (or install it suid root).)

On Unix, ping comes with the operating system. On SymbianOS 9, the only one who can provide a ping tool is the phone manufacturer, and he doesn't.

Re: CAPABILITY NetworkControl problem

puterman — Wed, 16 Aug 2006 08:11:19 +0200

Quote from: OldLC

You need NetworkControl even for writing a simple ping tool. That's ridiculous.

Ping might be "simple", but it's fairly low-level. (On Unix you need to run it as root (or install it suid root).)

Re: CAPABILITY NetworkControl problem

OldLC — Tue, 15 Aug 2006 21:21:04 +0200

Quote from: mudhalvan

why do you need "network control" capability for normal TCP/IP services... to my knowledge "network control" capability will be needed when you use any kind PRT protocol module for monitoring all kind of packet traffic...

You need NetworkControl even for writing a simple ping tool. That's ridiculous.

Re: CAPABILITY NetworkControl problem

dennisr — Tue, 08 Aug 2006 08:25:30 +0200

Hi,

It was my misunderstanding of the SDK documentation that caused this problem. I changed my .mmp file statement from

CAPABILITY NetworkService NetworkControl

to just

CAPABILITY NetworkService

and now the application installs and connects. Thanks, all.

Dennis

Re: CAPABILITY NetworkControl problem

dennisr — Tue, 08 Aug 2006 08:10:59 +0200

Hi msa and mudhalvan,

I am trying to understand what capabilities I need for TCP/IP I am not trying to do anything unusual--just a normal socket connection. I read the following in the SDK documentation in an article titled 'Symbian OS changes for platform security':

<quote>
For instance, a process needs the NetworkServices capability to open a TCP or UDP socket. Hence a process also needs the NetworkServices capability to transfer a TCP or UDP socket. Similarly, a process needs the NetworkControl capability to open an IP or ICMP socket. Hence a process also needs the NetworkControl capability to transfer a IP or ICMP socket.
</quote>

I suppose it's my ignorance of the TCP/IP protocol, but doesn't this mean that I need NetworkControl capability for a "normal" socket connection? In any event, I have not been able to install the application on an N80 device without the "Required application access not granted" error during the install. I tried removing the CAPABILITY statement from the .mmp file (which I read is equivalent to CAPABILITY None), and the application installs, but always times out on a TCP/IP connect attempt.

Thanks for your help,
Dennis

Re: CAPABILITY NetworkControl problem

mudhalvan — Sat, 05 Aug 2006 12:34:25 +0200

ya... even i had this doubt as msa2 asked... why do u need "network control" capability for normal TCP/IP services... to my knowledge "network control" capability will be needed when u use any kind PRT protocol module for monitoring all kind of packet traffic... are u using any such PRT modules in ur code??

Re: CAPABILITY NetworkControl problem

msa2 — Sat, 05 Aug 2006 12:17:26 +0200

NetworkService is sufficient for normal TCPIP (clients and servers).

Just out of curiosity, what do you need the NetworkControl for?

Re: CAPABILITY NetworkControl problem

mudhalvan — Fri, 04 Aug 2006 10:32:20 +0200

Hi Dennis,

Its really hard to obtain a certificate with "network control" capability for a normal 3rd party developer as the certificate with network control capability is highly dependent on both "ACS publisherID" and "Phone Manufacturer's approval".

especially for a normal 3rd party developer ,"phone manufacturer's approval" is very hard to obtain. if u r working in any organisation, that organisation should have some kind partnership like "Symbian PLATINUM partner" with NOKIA, so that u can request for that certificate. but im really not aware of the process to obtain "phon. man. approval".

anyway ALL THE BEST....

Re: CAPABILITY NetworkControl problem

dennisr — Thu, 03 Aug 2006 10:07:46 +0200

Thank you for your replies. I really do appreciate this forum since for me it's the best place to get answers for Symbian development questions.

I got a manufacturer's developer certificate from Nokia. Actually, I am still not quite certain what capabilities this certificate grants me even though I followed the instructions at symbiansigned.com carefully. I suspect that all this certificate grants me is the basic set of capabilities that I get with a regular (non-manufacturer dev certificate). I need NetworkControl capability for the application since it uses TCP/IP to connect to the Internet.

On the second step of the Certificate Request Wizard, it asks for an ACS Publisher ID. Since we don't have one (yet), I checked the 'No' radio button and then it asks me to select a 'Private Key file', and for a password, which I supplied. Then on step 4, it lists the capabilities that I am requesting. NetworkControl is not one of the capabilities listed here.

I used this very same certificate request file (.csr) to request the manufacturer's certificate from Nokia. So now I'm thinking that since step 4 only had the basic set of capabilities listed (I selected all of them) then the .csr file only included that basic set and does not include NetworkControl as a capability and so the Nokia certificate doesn't include that.

My question now is -- if all that is true, then how do I get the Certificate Request Wizard to show NetworkControl capability on step 4? Must I supply an ACS Publisher ID in order for NetworkControl to be listed in Step 4 of the Wizard? Or does a manufacturer's dev cert automatically contain the basic plus the extended set of capabilites and is not dependent on the .csr file?

Any help would be greatly appreciated.

Thanks,
Dennis

Re: CAPABILITY NetworkControl problem

NumptyAlert — Tue, 01 Aug 2006 19:57:43 +0200

Can you clarify what type of certificate you got - i.e. is it a developer certificate or a real certificate? When you requested it did you have to specify which capabilites it was to endorse?

Re: CAPABILITY NetworkControl problem

kaisub — Tue, 01 Aug 2006 15:20:14 +0200

You need to sign the application.
"CAPABILITY" in .mmp files just states capabilities your application wants to use.
Read some more documentation on signing application in SDK and on symbiansigned page.

CAPABILITY NetworkControl problem

dennisr — Tue, 01 Aug 2006 09:48:38 +0200