Developers guidelines Signing applications
WriteDeviceData
Grants write access to sensitive system data.
SWEvent
Grants read access to confidential system data. System data that is not confidential does not need to be protected by this capability.
API examples: Test utilities, FEP
ProtServ
Grants the right to a server to register with a pro- Mainly granted to system servers. tected name. Protected names begins with a “!”.
The kernel will prevent servers without this capa- bility from using such a name, and will therefore prevent impersonation of protected servers.
PowerMgmt
Grants the right to kill any process in the system, to power off unused periferals, to put the device into standby state and wake it up again, or power it down completely. Note however, that this does not control anything that might drain battery power.
API examples:
WSERV
SurroundingsDD
Grants access to logical device drivers providing input information about the device surroundings.
TrustedUI
Grants the right to create a trusted UI session, and thereby display dialogs in a secure UI envi- ronment.
Mainly granted to SWInstall and token servers.
Phone manufacturer capabilities
DRM
Grants access to protected content subject to DRM rights restrictions.
NetworkControl
Grants the right to modify or access network pro- tocol controls.
MultimediaDD
Controls access to all multimedia device drivers, audio, camera, and so on.
API examples: MMF, ICL, ECam
TCB
17 | October 2006 |
