Collapse all Symbian^3 Product Developer Library

Policy Files

The policy files specify the Service ID (SID) and the options to be passed to the user interface using the dialog box. The policy files are resource files, which are compiled into .rsc files. A default policy is required to check the IP connections.

Resource files

The policy files are installed in either z:\private\10283558\policies or c:\private\10283558\policies. The UPS server checks the policy folders when it receives an authorisation request. Each process has an associated policy file, if a corresponding policy file is not found, the UPS server responds with platform security check result for that particular application. The following resource file example is a sample policy file located at z:\system\data\ups_101F7989_xxxxxxxx.rsc, where xxxxxxxx is a service ID (SID) of the application.

Policy evaluator

The policy evaluator is an ECom plug-in which stores the user decision for network access to each process. The user decisions are stored in a database. When an application requests network connection access, the policy evaluator checks the database for the user's previous decision. If there is no entry found in the database, a new dialog is prompted to the user and the response to the dialog is stored as a new entry in the database.

Resource file example

#include <ups/policies.rh>

UID2 KUidUpsPolicyResourceFile
UID3 0xXXXXXXXX        //Unique identifier for this policy file
//Simple IP service

RESOURCE POLICIES IP_Default_policies
    {
    header = POLICY_HEADER
        {
        dialogcreator = 0x10283694;             <- Example value
        policyevaluator = 0x10283698;           <- Example value
        };
        policies = 
            {
            POLICY
                {
                sid_classes = KProtectedSids;
                destination = “*”;
                options = KSessYes | KSessNo | KAlways | KNever;
                flags = 0x00;
                },
        POLICY
                {
                sid_classes = KAllSids;
                destination = “*”;
                options = KSessYes | KSessNo | KAlways| KNever;
                flags = 0x01;
                }
         };
    }

The above policy file specifies that any request from a client with unprotected SID will invoke a user prompt. The user dialog options specified in the policy file are:

Session Yes
Session No
Always
Never

The two processes which do not require a user prompt to be created are the Dynamic Host Controller Protocol (DHCP) and the Domain Name Daemon (DND).

Parent topic: Concepts

Related concepts

User Prompt Service Configuration