NewLC - Platform Security - Comments

Re: platform security

alh — Mon, 31 Mar 2008 11:33:08 +0200

- removed - someone else answered while I was writing the answer, and answered better too -

Re: platform security

N_A — Mon, 31 Mar 2008 11:11:26 +0200

In Symbian 9 and later, the security boundary is between processes, and as DLLs are run inside a single process, from Symbian 9 ownawards each app has to run in its own process (*.exe).

Symbian 9 also changed to a newer ARM instruction set (contributing to why older apps cannot be binary compatible).

For a good introduction, read this wiki article:

http://developer.symbian.com/wiki/display/pub/Platform+Security+-+a+Technical+Overview

and this book, too, perhaps:

http://developer.symbian.com/main/learning/press/books/sops/index.jsp

And for more details, this book:

http://developer.symbian.com/main/learning/press/books/os_internals/index.jsp

Re: Trouble sending forward-locked DRM 3gp video to NOKIA 3230,N

nitin79 — Wed, 17 Oct 2007 08:54:03 +0200

Even I have the same problem...

The file format is unknown in 3230 when i send the .dm file to 3230. It seems to me that Nokia does not allow to send files through bluetooth or PC suite.

But i think its possible over OTA or sms push, but have'nt tried that.

But even i read somewhere its possible in Nokia 3rd edition phone like E61 and E62. Though i have tried in these phone also, but no success ...

Somewhere even i have read to create a PIP file, to transfer the files via bluetooth or pc-suite...... but but but i could not find any information on google, about how to create these pip files, what are these files....

any idea how to go about it...????

Thanks....

Re: Trouble sending forward-locked DRM 3gp NOKIA 3230,N72 etc.

onika_i — Sat, 06 Oct 2007 10:46:43 +0200

I have also same problem . Please give me solution ,if u find .
Thanks
Rahul

Re: DRM Testing in Symbian OS ver8.1b - DCF File, DRM File

ckumarv — Wed, 22 Aug 2007 09:02:11 +0200

Hi,
Do u want to Test DRM2 or DRM ? first u need one content server,which is having all the DRM files.First u need to download key rights and then download the file.

BR
Kanna

Re: Porting to 9.1

bkarthik_be — Wed, 06 Dec 2006 13:24:19 +0100

hi to all!

i created one app for symbian os9.1(N3250)on s60 3rd edition. My application installed successfully.I can see my app on the device also.

If i invoked my application its giving the error like"App. closed:test".

My .pkg file looks like,

;
; Installation file for test application
;
;Languages
&EN
;
; UID is the app's UID
;
#{"test"},(0xA0001DFD),1,0,0
;

;Localised Vendor name
%{"Vendor-EN"}

;Unique Vendor name
:"Vendor"

;Supports Series 60 v 3.0
[0x101F7961], 0, 0, 0, {"Series60ProductID"}
;

; Four files to install
; The PKG file has been set up with a default SDK root.
; Symbols set up for the source location are Carbide.c++ specific symbols
"$(EPOCROOT)Epoc32\release\$(PLATFORM)\$(TARGET)\test.exe" -"!:\sys\bin\test.exe"
"$(EPOCROOT)Epoc32\data\z\test.rsc" -"!:\resource\apps\test.rsc"
"$(EPOCROOT)Epoc32\data\z\test_reg.rsc" -"!:\private\10003a3f\import\apps\test_reg.rsc"
"$(EPOCROOT)Epoc32\data\z\Icon001.mbm" -"!:\resource\apps\Icon001.mbm"
"$(EPOCROOT)Epoc32\data\z\Icon002.mbm" -"!:\resource\apps\Icon002.mbm"
"$(EPOCROOT)Epoc32\data\z\Icon003.mbm" -"!:\resource\apps\Icon003.mbm"

wat could be the props?

If anybody help me out?

Thanx in Advance!!!

By,
Karthikeyan.B

Re: Capabilities and executables

tote — Thu, 11 May 2006 23:15:33 +0200

Fructose,

You're right, server B can hide server C's APIs so that it doesn't enforce those strict capabilities that C does. Please note, though, that it's not trivial to write such a server (B) as holding strong capabilities requires signing the program. And signing means that server B will be reviewed and the author of that component must have good arguments for hiding the system capability enforcement of another component.

Tote

Re: Capabilities and executables

puterman — Wed, 10 May 2006 09:15:03 +0200

I suppose C feels that it has a good reason to trust A, and that it has a way to check that the request actually comes from A and not from D (which is a very destructive app, intent on destroying the universe).

Re: Capabilities for device drivers

tote — Sun, 29 Jan 2006 01:06:11 +0100

Practically, in the MMP file of an EXE, you have to list those capabilities that you'd like your EXE to be able to do. E.g. if you want your EXE to perform HTTP comms (over TCP/IP), then you have to add NetworkServices capability. If you don't add it to the list, then your EXE will not be able to perform network comms.

However, the meaning of asssigned capabilities is a little bit different for executables other than EXE (like a device driver, a special DLL). For these binaries, capabilities indicates the level of trust, what you can do with the library IF the hosting process (i.e. the EXE) holds that capability. That is, you can assign NetworkServices capability to your device driver (strange, though), it won't necessarily work unless the hosting process has NetworkServices capability, too. The more capabilities a library has, the more you can trust it.

Finally, answering your question: the target should be to assign as many capabilities to your device driver as you can (yes, including NetworkServices, too). Nevertheless, you might have some hard moments when you try to sign your device driver and people are asking questions about the capabilities of your module.

tOtE

Re: Capabilities for device drivers

Mr. Buttington F. Phucque Lewis — Fri, 13 Jan 2006 20:07:17 +0100

See if you can get some answers at the security newsgroup

http://www.symbian.com/developer/public/index.html

Re: Porting to 9.1

puterman — Thu, 22 Dec 2005 09:15:35 +0100

A bit more detail would be helpful. Which function returns that error? Have you bothered to try to find out what '-20' might mean in that context?