<?xml version="1.0" encoding="utf-8"?>
<!-- Copyright (c) 2007-2010 Nokia Corporation and/or its subsidiary(-ies) All rights reserved. -->
<!-- This component and the accompanying materials are made available under the terms of the License 
"Eclipse Public License v1.0" which accompanies this distribution, 
and is available at the URL "http://www.eclipse.org/legal/epl-v10.html". -->
<!-- Initial Contributors:
    Nokia Corporation - initial contribution.
Contributors: 
-->
<!DOCTYPE concept
  PUBLIC "-//OASIS//DTD DITA Concept//EN" "concept.dtd">
<concept id="GUID-6849E256-6719-5788-BCB2-7557F09AAAD0" xml:lang="en"><title>UPS
Configuration</title><prolog><metadata><keywords/></metadata></prolog><conbody>
<p>User Prompt Service (UPS) configuration component (<codeph>\securityconfig\ups\</codeph>)
includes a <filepath>backup.xml</filepath> file and a ROM stub SIS file for
configuring a UPS policy file. Device creators must modify the configuration
files of UPS and rebuild the <filepath>securityconfig</filepath> component,
to customise the behavior of the UPS component. </p>
<section><title> Introduction</title> <p>UPS policy files are resource files
that specify whether application requests to access services are silently
accepted or denied or whether they require the user to be prompted. Each service
has a policy file. The policy file lists policies for various applications.
The configuration of policy file involves configuring ROM stub package file
and backup XML file.  </p> </section>
<section><title> Installing and Configuring UPS Policy file</title> <p><b>Installing
policy files</b> </p> <p>A policy file on the system drive eclipses a policy
file on the Z drive if it has the same filename. If the policy file on the
system drive is corrupt, the policy file on the Z drive (if it exists) is
used instead. The policy files should be installed (and upgraded) through
Software Install to the private directory of the UPS on the system drive.
The private directory is <filepath>\private\10283558\policies</filepath>. </p> <p><b>Upgrading
package file</b> </p> <p>The SIS file must either contain the executable or
be an upgrade to the base package which supplied the executable, for delivering
files into the private directory of an executable. </p> <p>The following is
a default implementation of a package file for UPS server ROM stub SIS file: </p> <codeblock id="GUID-51117852-B051-5E7F-8216-44A8B7EFF6A1" xml:space="preserve">; Package file for User Prompt Service server ROM stub SIS file
;
; A ROM stub SIS file is required to allow UPS policy files to be
; provisioned post-manufacture because policy files are loaded from
; the policies subdirectory of the UPS server's private directory.

&amp;EN

#{"User Prompt Service"}, (0x10285777), 1, 0 , 0, TYPE=SA

%{"Nokia Corporation and/or its subsidiary(-ies)"}
:"Nokia Corporation and/or and/or its subsidiary(-ies)"

; UPS policy files on the Z drive must also be included here if
; upgrades (eclipsing) is required post-manufacture.

""-"z:\sys\bin\upsserver.exe"
</codeblock> <p>Device creators must create a ROM stub SIS file if they want
to allow policy files to be delivered after-market (since the UPS server is
delivered in the ROM). </p> <note>To ensure that policy file upgrades are
approved by manufacturers or Symbian Signed, SIS files that modify the private
directory of the UPS must be signed by a certificate where CA has the <codeph>AllFiles</codeph> capability. </note> <p><b>Verifying
hash of the policy</b> </p> <p>The <codeph>VERIFY</codeph> option must be
added to the line in the package file that installs the UPS policy file to
ensure that the Software Install checks the hash of the policy at restore
time. The following sample package file uses the <codeph>VERIFY</codeph> flag. </p> <codeblock id="GUID-E62C7BEF-A0C8-5BD2-B011-2E1ED211FE61" xml:space="preserve">; tupspolicies1.pkg
;
; 

; Checks the installation of UPS policies files

&amp;EN
#{"UPS Policy Files"}, (0x10285777), 1, 0, 0, TYPE=SP
%{"Symbian Foundation"}
:"Symbian Foundation"

; The VERIFY option is used to flag the files as non-modifiable so that SWI
; checks the hashes during restore

"data\ups_01041000_01041001.rsc"-"$:\private\10283558\policies\ups_01041000_01041001.rsc", VERIFY
"data\ups_01041000_01041002.rsc"-"$:\private\10283558\policies\ups_01041000_01041002.rsc", VERIFY
"data\ups_01042000_01042001.rsc"-"$:\private\10283558\policies\ups_01042000_01042001.rsc", VERIFY
"data\ups_01043000_01043001.rsc"-"$:\private\10283558\policies\ups_01043000_01043001.rsc", VERIFY
</codeblock><note><ul>
<li><p>Version 5.1.0.1 or higher of makesis should be used because the VERIFY
flag is not supported in older versions.  </p></li>
<li><p>The major and minor versions field in the policy header of the policy
file can be used to provide information that is used in upgrades. If the major
version number is changed when a policy file is upgraded, all decision records
for that policy file are deleted (because the major version number is stored
in the decision record). </p></li>
<li><p>Upgrading the plug-ins does not delete the decision records. If device
creators want to delete decision records with a plug-in upgrade they must
either update associated policy files or provide a run-on-install executable
that calls the management API to delete decision records. </p></li>
</ul></note> <p><b>Back up and restoring</b> </p> <p>UPS policy files may
be backed up and restored providing that a valid <filepath>backup.xml</filepath> file
is provided. The following is a sample backup file provided by Symbian. </p> <codeblock id="GUID-3BFD715C-68FB-5F87-9557-DB95D18168FB" xml:space="preserve">&lt;?xml version="1.0" standalone="yes" ?&gt;
- &lt;backup_registration&gt;
- &lt;passive_backup&gt;
  &lt;include_directory name="policies" /&gt;
  &lt;/passive_backup&gt;
  &lt;restore requires_reboot="no" /&gt;
  &lt;/backup_registration&gt;
</codeblock> </section>
</conbody></concept>