

# msa_rp.xpf



# Copyright (c) 2004-2005 By Symbian Software Ltd. All rights reserved.



# This file defines MSA 248 Security RP security policy



FormatVersion: 1.0



Domains



  Domain: "*MFD*"



  Domain: "*ODOPD*"



  Domain: "*OPD*"



  Domain: "*TTPD*"



  Domain: [UNTRUSTED]



    ConnectionFilters



      NegativePortFilter: "datagram"



        Port: "9200"



        Port: "9201"



        Port: "9202"



        Port: "9203"



      EndNegativePortFilter



      NegativePortFilter: "socket"



        Port:  "80"



        Port:  "443"



        Port: "8080"



      EndNegativePortFilter



      NegativePortFilter: "ssl"



        Port:  "443"



      EndNegativePortFilter



    EndConnectionFilters



  EndDomain



EndDomains



FunctionGroups



  FunctionGroup: "Application Auto Invocation"



    Permissions

      	javax.microedition.io.PushRegistry

	javax.microedition.content.ContentHandler

    EndPermissions



  EndFunctionGroup



  FunctionGroup: "Authentication"



    Permissions

      javax.microedition.securityservice.CMSMessageSignatureService

    EndPermissions



  EndFunctionGroup



  FunctionGroup: "Landmark"



    Permissions

      javax.microedition.location.LandmarkStore.read

      javax.microedition.location.LandmarkStore.write

      javax.microedition.location.LandmarkStore.category

      javax.microedition.location.LandmarkStore.management

    EndPermissions



  EndFunctionGroup



  FunctionGroup: "Local Connectivity"



    Permissions

      javax.microedition.io.Connector.comm

      javax.microedition.io.Connector.bluetooth.client

      javax.microedition.io.Connector.obex.client

      javax.microedition.io.Connector.bluetooth.server

      javax.microedition.io.Connector.obex.server

    EndPermissions



  EndFunctionGroup



  FunctionGroup: "Location"



    Permissions

      javax.microedition.location.Location

      javax.microedition.location.Orientation

      javax.microedition.location.ProximityListener

    EndPermissions



  EndFunctionGroup



  FunctionGroup: "Messaging"



    Permissions

      javax.microedition.io.Connector.sms

      javax.wireless.messaging.sms.send

      javax.wireless.messaging.sms.receive

      javax.microedition.io.Connector.mms

      javax.wireless.messaging.mms.send

      javax.wireless.messaging.mms.receive

      javax.microedition.io.Connector.cbs

      javax.wireless.messaging.cbs.receive

    EndPermissions



  EndFunctionGroup



  FunctionGroup: "Multimedia Recording"



    Permissions

      javax.microedition.media.control.RecordControl

      javax.microedition.media.control.VideoControl.getSnapshot

      javax.microedition.amms.control.camera.enableShutterFeedback

    EndPermissions



  EndFunctionGroup



  FunctionGroup: "Net Access"



    Permissions

      javax.microedition.io.Connector.http

      javax.microedition.io.Connector.https

      javax.microedition.io.Connector.obex.client.tcp

      javax.microedition.io.Connector.obex.server.tcp

      javax.microedition.io.Connector.datagram

      javax.microedition.io.Connector.datagramreceiver

      javax.microedition.io.Connector.socket

      javax.microedition.io.Connector.serversocket

      javax.microedition.io.Connector.ssl

      javax.microedition.io.Connector.rtsp

    EndPermissions



  EndFunctionGroup



  FunctionGroup: "Platform Request"



    Permissions

      com.nokia.midp.platformrequest.netaccess

      com.nokia.midp.platformrequest.tel

      com.nokia.midp.platformrequest.localapp

    EndPermissions



  EndFunctionGroup



  FunctionGroup: "Read User Data Access"



    Permissions

      javax.microedition.pim.ContactList.read

      javax.microedition.pim.EventList.read

      javax.microedition.pim.ToDoList.read

      javax.microedition.io.Connector.file.read

    EndPermissions



  EndFunctionGroup



  FunctionGroup: "Smart Card Communication"



    Permissions

      javax.microedition.apdu.aid

      javax.microedition.jcrmi

    EndPermissions



  EndFunctionGroup



  FunctionGroup: "Write User Data Access"



    Permissions

      javax.microedition.pim.ContactList.write

      javax.microedition.pim.EventList.write

      javax.microedition.pim.ToDoList.write

      javax.microedition.io.Connector.file.write

      javax.microedition.amms.control.tuner.setPreset

    EndPermissions



  EndFunctionGroup



  FunctionGroup: "API Extensions"



    Permissions

      com.nokia.mid.ActiveIdle.set

      com.nokia.mid.sasf.set

      com.nokia.mid.sasf.get

      com.nokia.mid.SoftNotification.set

      com.nokia.mid.NewMailLED.set

    EndPermissions



  EndFunctionGroup



  FunctionGroup: "Restricted API Extensions"



    Permissions

      com.nokia.mid.Mobinfo.IMSI

    EndPermissions



  EndFunctionGroup



  FunctionGroup: "Unassigned APIs"



    Permissions

      javax.microedition.apdu.sat

      javax.microedition.payment.process

    EndPermissions



  EndFunctionGroup



  FunctionGroup: "Mobile Broadcasting Service"

    Permissions
      javax.microedition.broadcast.recording.RecordingScheduler.add
      javax.microedition.broadcast.recording.RecordingScheduler.remove
      javax.microedition.broadcast.recording.RecordingScheduler.access
      javax.microedition.broadcast.esg.ServiceGuide.access
      javax.microedition.broadcast.ServiceContext.create
      javax.microedition.broadcast.ServiceContext.default
      javax.microedition.broadcast.ServiceContext.select   
      javax.microedition.broadcast.purchase.SubscriptionManager.getSubscriptions
      javax.microedition.broadcast.ServiceContext.broadcastdatagram
    EndPermissions

  EndFunctionGroup

  FunctionGroup: "Mobile Broadcasting Service Allowed"

    Permissions
      javax.microedition.broadcast.purchase.PurchaseObject.purchase
      javax.microedition.broadcast.purchase.PurchaseObject.cancel
      javax.microedition.io.Connector.broadcastfile.read
    EndPermissions

  EndFunctionGroup



EndFunctionGroups



Bindings



  DomainBindings: "*MFD*"



    FunctionGroupBinding: "Application Auto Invocation"



      Permission: Allowed



    EndFunctionGroupBinding



    FunctionGroupBinding: "Authentication"



      Permission: Allowed



    EndFunctionGroupBinding



    FunctionGroupBinding: "Landmark"



      Permission: Allowed



    EndFunctionGroupBinding



    FunctionGroupBinding: "Local Connectivity"



      Permission: Allowed



    EndFunctionGroupBinding



    FunctionGroupBinding: "Location"



      Permission: Allowed



    EndFunctionGroupBinding



    FunctionGroupBinding: "Messaging"



      Permission: Allowed



    EndFunctionGroupBinding



    FunctionGroupBinding: "Multimedia Recording"



      Permission: Allowed



    EndFunctionGroupBinding



    FunctionGroupBinding: "Net Access"



      Permission: Allowed



    EndFunctionGroupBinding



    FunctionGroupBinding: "Read User Data Access"



      Permission: Allowed



    EndFunctionGroupBinding



    FunctionGroupBinding: "Write User Data Access"



      Permission: Allowed



    EndFunctionGroupBinding



    FunctionGroupBinding: "API Extensions"



      Permission: Allowed



    EndFunctionGroupBinding



    FunctionGroupBinding: "Restricted API Extensions"



      Permission: Allowed



    EndFunctionGroupBinding



    FunctionGroupBinding: "Platform Request"



      Permission: Allowed



    EndFunctionGroupBinding



    FunctionGroupBinding: "Unassigned APIs"



      Permission: Allowed



    EndFunctionGroupBinding



    FunctionGroupBinding: "Mobile Broadcasting Service"



      Permission: Allowed



    EndFunctionGroupBinding



    FunctionGroupBinding: "Mobile Broadcasting Service Allowed"



      Permission: Allowed



    EndFunctionGroupBinding



  EndDomainBindings



  DomainBindings: "*ODOPD*"



    FunctionGroupBinding: "Application Auto Invocation"



      Permission: Allowed



    EndFunctionGroupBinding



    FunctionGroupBinding: "Authentication"



      Permission: Allowed



    EndFunctionGroupBinding



    FunctionGroupBinding: "Landmark"



      Permission: Allowed



    EndFunctionGroupBinding



    FunctionGroupBinding: "Smart Card Communication"



      Permission: Allowed



    EndFunctionGroupBinding



    FunctionGroupBinding: "Local Connectivity"



      Permission: Allowed



    EndFunctionGroupBinding



    FunctionGroupBinding: "Location"



      Permission: Allowed



    EndFunctionGroupBinding



    FunctionGroupBinding: "Messaging"



      Permission: Allowed



    EndFunctionGroupBinding



    FunctionGroupBinding: "Multimedia Recording"



      Permission: Allowed



    EndFunctionGroupBinding



    FunctionGroupBinding: "Net Access"



      Permission: Allowed



    EndFunctionGroupBinding



    FunctionGroupBinding: "Read User Data Access"



      Permission: Allowed



    EndFunctionGroupBinding



    FunctionGroupBinding: "Write User Data Access"



      Permission: Allowed



    EndFunctionGroupBinding



    FunctionGroupBinding: "API Extensions"



      Permission: Allowed



    EndFunctionGroupBinding



    FunctionGroupBinding: "Restricted API Extensions"



      Permission: Allowed



    EndFunctionGroupBinding



    FunctionGroupBinding: "Platform Request"



      Permission: Allowed



    EndFunctionGroupBinding



    FunctionGroupBinding: "Unassigned APIs"



      Permission: Allowed



    EndFunctionGroupBinding



    FunctionGroupBinding: "Mobile Broadcasting Service"



      Permission: Allowed



    EndFunctionGroupBinding



    FunctionGroupBinding: "Mobile Broadcasting Service Allowed"



      Permission: Allowed



    EndFunctionGroupBinding



  EndDomainBindings



  DomainBindings: "*OPD*"



    FunctionGroupBinding: "Application Auto Invocation"



      Permission: Allowed



    EndFunctionGroupBinding



    FunctionGroupBinding: "Authentication"



      Permission: Allowed



    EndFunctionGroupBinding



    FunctionGroupBinding: "Landmark"



      Permission: Allowed



    EndFunctionGroupBinding



    FunctionGroupBinding: "Smart Card Communication"



      Permission: Allowed



    EndFunctionGroupBinding



    FunctionGroupBinding: "Local Connectivity"



      Permission: Allowed



    EndFunctionGroupBinding



    FunctionGroupBinding: "Location"



      Permission: Allowed



    EndFunctionGroupBinding



    FunctionGroupBinding: "Messaging"



      Permission: Allowed



    EndFunctionGroupBinding



    FunctionGroupBinding: "Multimedia Recording"



      Permission: Allowed



    EndFunctionGroupBinding



    FunctionGroupBinding: "Net Access"



      Permission: Allowed



    EndFunctionGroupBinding



    FunctionGroupBinding: "Read User Data Access"



      Permission: Allowed



    EndFunctionGroupBinding



    FunctionGroupBinding: "Write User Data Access"



      Permission: Allowed



    EndFunctionGroupBinding



    FunctionGroupBinding: "API Extensions"



      Permission: Allowed



    EndFunctionGroupBinding



    FunctionGroupBinding: "Restricted API Extensions"



      Permission: Allowed



    EndFunctionGroupBinding



    FunctionGroupBinding: "Platform Request"



      Permission: Allowed



    EndFunctionGroupBinding



    FunctionGroupBinding: "Unassigned APIs"



      Permission: Allowed



    EndFunctionGroupBinding



    FunctionGroupBinding: "Mobile Broadcasting Service"



      Permission: Allowed



    EndFunctionGroupBinding



    FunctionGroupBinding: "Mobile Broadcasting Service Allowed"



      Permission: Allowed



    EndFunctionGroupBinding



  EndDomainBindings



# MIDlets in thirdparty MIDlet suites need user permission before doing certain things



  DomainBindings: "*TTPD*"



    FunctionGroupBinding: "Application Auto Invocation"



      Permission:   User



      DefaultMode:  Oneshot



      MaximumMode:  Blanket



    EndFunctionGroupBinding



    FunctionGroupBinding: "Authentication"



      Permission:   User



      DefaultMode:  Session



      MaximumMode:  Blanket



    EndFunctionGroupBinding



    FunctionGroupBinding: "Landmark"



      Permission:   User



      DefaultMode:  Session



      MaximumMode:  Blanket



    EndFunctionGroupBinding



    FunctionGroupBinding: "Smart Card Communication"



      Permission:   User



      DefaultMode:  Session



      MaximumMode:  Blanket



    EndFunctionGroupBinding



    FunctionGroupBinding: "Local Connectivity"



      Permission:   User



      DefaultMode:  Session



      MaximumMode:  Blanket



    EndFunctionGroupBinding



    FunctionGroupBinding: "Location"



      Permission:   User



      DefaultMode:  Session



      MaximumMode:  Blanket



    EndFunctionGroupBinding



    FunctionGroupBinding: "Messaging"



      Permission:   User



      DefaultMode:  Oneshot



      MaximumMode:  Blanket



      Rules



        SimpleMapping: javax.microedition.io.Connector.sms



          FunctionGroupMode:  Oneshot



          PermissionMode:  Blanket



          FunctionGroupMode:  Session



          PermissionMode:  Blanket



        EndSimpleMapping



        SimpleMapping: javax.wireless.messaging.sms.receive



          FunctionGroupMode:  Oneshot



          PermissionMode:  Blanket



          FunctionGroupMode:  Session



          PermissionMode:  Blanket



        EndSimpleMapping



        SimpleMapping: javax.microedition.io.Connector.cbs



          FunctionGroupMode:  Oneshot



          PermissionMode:  Blanket



          FunctionGroupMode:  Session



          PermissionMode:  Blanket



        EndSimpleMapping



        SimpleMapping: javax.wireless.messaging.cbs.receive



          FunctionGroupMode:  Oneshot



          PermissionMode:  Blanket



          FunctionGroupMode:  Session



          PermissionMode:  Blanket



        EndSimpleMapping



        SimpleMapping: javax.microedition.io.Connector.mms



          FunctionGroupMode:  Oneshot



          PermissionMode:  Blanket



          FunctionGroupMode:  Session



          PermissionMode:  Blanket



        EndSimpleMapping



        SimpleMapping: javax.wireless.messaging.mms.receive



          FunctionGroupMode:  Oneshot



          PermissionMode:  Blanket



          FunctionGroupMode:  Session



          PermissionMode:  Blanket



        EndSimpleMapping



      EndRules



    EndFunctionGroupBinding



    FunctionGroupBinding: "Multimedia Recording"



      Permission:   User



      DefaultMode:  Session



      MaximumMode:  Blanket



    EndFunctionGroupBinding



    FunctionGroupBinding: "Net Access"



      Permission:   User



      DefaultMode:  Session



      MaximumMode:  Blanket



    EndFunctionGroupBinding



    FunctionGroupBinding: "Platform Request"



      Permission:   User



      DefaultMode:  Oneshot



      MaximumMode:  Oneshot



    EndFunctionGroupBinding



    FunctionGroupBinding: "Mobile Broadcasting Service"



      Permission:   User



      DefaultMode:  Session



      MaximumMode:  Blanket



    EndFunctionGroupBinding



    FunctionGroupBinding: "Read User Data Access"



      Permission:   User



      DefaultMode:  Oneshot



      MaximumMode:  Blanket



    EndFunctionGroupBinding



    FunctionGroupBinding: "Write User Data Access"



      Permission:   User



      DefaultMode:  Oneshot



      MaximumMode:  Blanket



    EndFunctionGroupBinding



    FunctionGroupBinding: "Mobile Broadcasting Service Allowed"



      Permission: Allowed



    EndFunctionGroupBinding



  EndDomainBindings



# MIDlets in untrusted MIDlet suites need user permission before doing anything



  DomainBindings: [UNTRUSTED]



    FunctionGroupBinding: "Application Auto Invocation"



      Permission:   User



      DefaultMode:  Oneshot



      MaximumMode:  Session



    EndFunctionGroupBinding



    FunctionGroupBinding: "Landmark"



      Permission:   User



      DefaultMode:  Oneshot



      MaximumMode:  Session



    EndFunctionGroupBinding



    FunctionGroupBinding: "Local Connectivity"



      Permission:   User



      DefaultMode:  Oneshot



      MaximumMode:  Blanket



    EndFunctionGroupBinding



    FunctionGroupBinding: "Location"



      Permission:   User



      DefaultMode:  Oneshot



      MaximumMode:  Session



    EndFunctionGroupBinding



    FunctionGroupBinding: "Messaging"



      Permission:   User



      DefaultMode:  Oneshot



      MaximumMode:  Oneshot



      Rules



        SimpleMapping: javax.microedition.io.Connector.sms



          FunctionGroupMode:  Oneshot



          PermissionMode:  Blanket



        EndSimpleMapping



        SimpleMapping: javax.wireless.messaging.sms.receive



          FunctionGroupMode:  Oneshot



          PermissionMode:  Blanket



        EndSimpleMapping



        SimpleMapping: javax.microedition.io.Connector.cbs



          FunctionGroupMode:  Oneshot



          PermissionMode:  Blanket



        EndSimpleMapping



        SimpleMapping: javax.wireless.messaging.cbs.receive



          FunctionGroupMode:  Oneshot



          PermissionMode:  Blanket



        EndSimpleMapping



        SimpleMapping: javax.microedition.io.Connector.mms



          FunctionGroupMode:  Oneshot



          PermissionMode:  Blanket



        EndSimpleMapping



        SimpleMapping: javax.wireless.messaging.mms.receive



          FunctionGroupMode:  Oneshot



          PermissionMode:  Blanket



        EndSimpleMapping



      EndRules



    EndFunctionGroupBinding



    FunctionGroupBinding: "Multimedia Recording"



      Permission:   User



      DefaultMode:  Oneshot



      MaximumMode:  Session



    EndFunctionGroupBinding



    FunctionGroupBinding: "Net Access"



      Permission:   User



      DefaultMode:  Oneshot



      MaximumMode:  Session



    EndFunctionGroupBinding



    FunctionGroupBinding: "Platform Request"



      Permission:   User



      DefaultMode:  Oneshot



      MaximumMode:  Oneshot



    EndFunctionGroupBinding



    FunctionGroupBinding: "Mobile Broadcasting Service"



      Permission:   User



      DefaultMode:  Oneshot



      MaximumMode:  Session



    EndFunctionGroupBinding



    FunctionGroupBinding: "Read User Data Access"



      Permission:   User



      DefaultMode:  Oneshot



      MaximumMode:  Oneshot



    EndFunctionGroupBinding



    FunctionGroupBinding: "Write User Data Access"



      Permission:   User



      DefaultMode:  Oneshot



      MaximumMode:  Oneshot



    EndFunctionGroupBinding



    FunctionGroupBinding: "Mobile Broadcasting Service Allowed"



      Permission: Allowed



    EndFunctionGroupBinding



  EndDomainBindings



EndBindings

