|
1 <?xml version="1.0" encoding="utf-8"?> |
|
2 <!-- Copyright (c) 2007-2010 Nokia Corporation and/or its subsidiary(-ies) All rights reserved. --> |
|
3 <!-- This component and the accompanying materials are made available under the terms of the License |
|
4 "Eclipse Public License v1.0" which accompanies this distribution, |
|
5 and is available at the URL "http://www.eclipse.org/legal/epl-v10.html". --> |
|
6 <!-- Initial Contributors: |
|
7 Nokia Corporation - initial contribution. |
|
8 Contributors: |
|
9 --> |
|
10 <!DOCTYPE concept |
|
11 PUBLIC "-//OASIS//DTD DITA Concept//EN" "concept.dtd"> |
|
12 <concept id="GUID-30647807-A0D2-4D96-975A-BF1800749977" xml:lang="en"><title>Configuring |
|
13 the application’s platform security settings in the emulator</title><prolog><metadata><keywords/></metadata></prolog><conbody> |
|
14 <p>You can adjust certain security settings in the emulator. The emulator's |
|
15 platform security settings are all enabled by default.</p> |
|
16 <p>Typical use cases include: </p> |
|
17 <ul> |
|
18 <li><p>Turning platform security diagnostics on or off</p></li> |
|
19 <li><p>Turning platform security enforcement on or off</p></li> |
|
20 <li><p>Disabling a set of capabilities</p></li> |
|
21 </ul> |
|
22 <p>Important implementation considerations include:</p> |
|
23 <ul> |
|
24 <li><p>You need to use the emulator to set platform security settings. |
|
25 The feature is not available on production mobile devices.</p></li> |
|
26 </ul> |
|
27 <section id="GUID-25876C58-7EE1-46F3-8800-E0CD398170B6"><title>Configuring the |
|
28 settings in the emulator</title> |
|
29 <p>You can enable or disable platform security settings in the emulator |
|
30 through the <b>Tools > Preferences</b> menu or by editing the <codeph>epoc.ini</codeph> file. |
|
31 The following illustration shows the options you have in the <b>Platform security</b> tab |
|
32 of the Preferences window.</p> |
|
33 <fig id="GUID-F4DDFC46-AF97-45B5-816C-D4F94182BA2C"><title>Preferences window in the emulator</title><image href="GUID-11E35C60-12DF-4014-AB3F-0314D8536AC0_d0e13567_href.png"/></fig> |
|
34 <p>To set the platform security settings:</p> |
|
35 <ol> |
|
36 <li id="GUID-6ECF89E5-CCF5-431D-9A38-3A472F3B628F"><p>In the emulator, |
|
37 open the <b>Tools > Preferences</b> menu and go to the <b>Platform Security</b> tab.</p> |
|
38 <p>Alternatively, open the <codeph>epoc.ini</codeph> file which is located |
|
39 in the <codeph>...\Epoc32\Data\</codeph> folder on your computer.</p></li> |
|
40 <li id="GUID-26508845-D52B-476F-96AC-BE3AB0F64124"><p>Modify the |
|
41 desired settings:</p> |
|
42 <ul> |
|
43 <li><p>To allow platform security to emit a diagnostics message |
|
44 when a check fails, tick the <b>Enable security debug messages</b> checkbox |
|
45 in the Platform Security tab. </p><p>To enable this setting in the <codeph>Epoc.ini</codeph> file, |
|
46 include the line <codeph>PlatSecDiagnostics ON</codeph>. To disable this setting, |
|
47 modify the line to <codeph>PlatSecDiagnostics OFF</codeph>. </p><p>When |
|
48 the settings is enabled, the diagnostics messages are logged to <xref format="" href="http://developer.symbian.org/wiki/index.php/Symbian_Emulator/The_Epocwind.out_File" scope="external"><codeph>epocwind.out</codeph></xref> in |
|
49 a Windows temporary directory. The following is an example of a diagnostics |
|
50 message:</p> |
|
51 <codeblock id="GUID-FE9A46AF-D0A4-40D7-847D-9BF67FE1BFBD" xml:space="preserve">153.600 *PlatSec* WARNING - Capability check would have failed - A |
|
52 Message (function number=0x00000000) from Thread |
|
53 Screenshot[20000555]0002::screenshot, sent to Server !MsvServer, was checked by |
|
54 Thread !MsvServer[1000484b]0001::!MsvServer and was found to be missing the |
|
55 capability: ReadUserData.</codeblock> |
|
56 </li> |
|
57 <li><p>To enable platform security to take action after a check |
|
58 fails and a diagnostics message is sent, tick the <b>Perform capability checks</b> checkbox |
|
59 in the Platform Security tab.</p><p>To enable this setting in the <codeph>Epoc.ini</codeph> file, |
|
60 include the line <codeph>PlatSecEnforcement ON</codeph>. To disable this setting, |
|
61 modify the line to <codeph>PlatSecEnforcement OFF</codeph>.</p></li> |
|
62 <li><p>To disable a check for specific capabilities, choose the |
|
63 ones you wish to disable in the <b>Granted capabilities for all applications:</b> list |
|
64 in the Platform Security tab.</p><p>To disable a check in the <codeph>Epoc.ini</codeph> file, |
|
65 include <codeph>PlatSecDisabledCaps</codeph>, followed by the capabilities |
|
66 to be disabled. For example, <codeph>PlatSecDisabledCaps ReadUserData+WriteUserData+UserEnvironment</codeph>.</p> |
|
67 </li> |
|
68 </ul> |
|
69 </li> |
|
70 </ol> |
|
71 </section> |
|
72 <section id="GUID-BFB4DE7F-AC98-42AB-8763-FBA6D390D92A"><title>Additional information |
|
73 on platform security settings in the emulator</title> |
|
74 <p>For information on troubleshooting options, see <xref href="http://wiki.forum.nokia.com/index.php/How_to_troubleshoot_Platform_Security_issues" scope="external">How to troubleshoot Platform Security issues</xref> on Forum Nokia.</p> |
|
75 </section> |
|
76 </conbody></concept> |