aboutsummaryrefslogtreecommitdiff
path: root/doc
diff options
context:
space:
mode:
authorAntti Kervinen <antti.kervinen@nokia.com>2010-10-15 15:42:58 +0300
committerAntti Kervinen <antti.kervinen@nokia.com>2010-10-20 15:11:02 +0300
commitde79d0c99c3d6235c3bc5811e0257c42f488754a (patch)
tree74197e541c3861c6b9e001c65bab27774c9762ed /doc
parent3bf22ea08f4b5bc9b0e9831bb65678061c551e5e (diff)
Changes: security documentation for boosted applications changed
RevBy: Tomas Junnonen Details: Boosted applications need to modify aegis manifest files.
Diffstat (limited to 'doc')
-rw-r--r--doc/src/launcher.dox45
1 files changed, 43 insertions, 2 deletions
diff --git a/doc/src/launcher.dox b/doc/src/launcher.dox
index 400f7c7e..9b8d1644 100644
--- a/doc/src/launcher.dox
+++ b/doc/src/launcher.dox
@@ -286,8 +286,49 @@ package.
\section security Platform security
-Harmattan platform security works fine with launcher. Note, that you
-must use <application_name>.launch as the name of the application binary in the Aegis file.
+If an application does not have an aegis manifest file, no actions are
+needed for platform security.
+
+If an application has a manifest file, an addition needs to be made
+there: everything that is requested for the application binary must be
+requested to the application launcher binary as well.
+
+For instance, manifest file for an application that needs only an
+automatically generated application ID:
+
+\code
+<aegis>
+ <request>
+ <for path="/usr/bin/application_name.launch" />
+ <for path="applauncherd-launcher::/usr/bin/applauncherd.bin" id="" />
+ </request>
+</aegis>
+\endcode
+
+If an application has a user-defined ID:
+
+\code
+<aegis>
+ <request>
+ <for path="/usr/bin/application_name.launch" id="myownid" />
+ <for path="applauncherd-launcher::/usr/bin/applauncherd.bin" id="myownid" />
+ </request>
+</aegis>
+\endcode
+
+Finally, if an application has some security tokens:
+
+\code
+<aegis>
+ <request>
+ <credential name="GlobalToken" />
+ <credential name="OwnToken" />
+ <credential name="package::OtherToken" />
+ <for path="/usr/bin/application_name.launch" />
+ <for path="applauncherd-launcher::/usr/bin/applauncherd.bin" id="" />
+ </request>
+</aegis>
+\endcode
\section limitations Limitations and known issues