How to generate the Aegis file?

[Alicemirror]

bq. Finally I remembered where I have found about aegis: http://www.developer.nokia.com/Community/Wiki/Harmattan:Developer_Library/Developing_for_Harmattan/Harmattan_security/Security_guide/Aegis_manifest_file_generation_tool

It is in the Harmattan section of developer.nokia.com not on the developer network. I think this link may be helpful for you.

@gri: It is the second time that someone of us tells it to @mismael :) Seems that we are discussing alone :D

[theoriginalgri]

The developer.nokia.com site is much older than the harmattan-dev site. It also contains no reference to the list of credentials and is less structured in my point of view :) So it is not the same for me.

Edit: Ok, I was wrong, it has detailed information but different :) So it's better to look at both of them.

[Alicemirror]

@gri: the question was about the owner of this thread :) ... I have seen your link for the first time today, nice! Thank you.

[mismail]

I tried to put the aegis file while qt creator packaging the application and i used the following credentials in it
@<aegis>
<request>
<credential name="TrackerReadAccess" />
<credential name="TrackerWriteAccess" />
<credential name="GRP::metadata-users" />
<credential name="GRP::pulse-access" />
<credential name="GRP::video" />
<credential name="mce::DeviceModeControl" />
<credential name="mce::TKLockControl" />
<for path="/usr/bin/userdatamanager" />
</request>
</aegis>@

but still the application does not execute because of the credentials.

[theoriginalgri]

Do you run the application with debugger attached or without? On the N950 beta1 firmware, there was an error where the applications' credentials are lost when running with debugger.

I don't know exactly which version the emulator is running. If the application works without the debugger, this may be the same.

In this case you would need to:

• Login as developer via ssh
• Execute "cat /etc/passwd | grep developer" and see if you read /bin/sh or /bin/develsh
• If there is /bin/sh, become root and open "/etc/shells" with an editor, add "/bin/develsh"
• Become developer again and run "chsh", choose "/bin/develsh"

[mismail]

I am running the application in the release mode

[theoriginalgri]

Even in release mode you can run the debugger :) Please start the application with "CTRL + R" or the "Play" icon without overlay on bottom left to be sure.
Also take a look at the _aegis file in your project folder and tell me if it contains the lines you've written to your manifest.aegis.

If it does not work, I suppose the best idea would be to zip your code and upload it somewhere for testing. If you don't want to publish it to all, send me a private message with a link to the sources - I won't steal your code.

[mismail]

1- how can i get back to developer user (excuse me i am new to linux world)
2- when i tried to use "chch" as devel-su user it says that "chch" not found

thank you for your help

[theoriginalgri]

You can check which user you are with "whoami". To become developer again from devel-su, you have to run "exit". The sign in front of your cursor also indicates who you are: "$" is user; "#" is root.

The command you have to run is "chsh", short for "change shell", not "chch". You have to add "/bin/develsh" to "/etc/shells" in order to be able to change the shell. Your favourite editor for editing might be "nano" (if available in emulator), which can be controlled by CTRL + "key number on the bottom of your screen".

If "chsh" is not available in the emulator, you can also change the entry of developer in "/etc/passwd" but be warned if you mess up the file, your emulator may not work anymore!

[mismail]

hi gri,

the _aegis file contains what i wrote in the *.aegis file.
I run the application with "CTRL + R"

[theoriginalgri]

Ok, then I'm out of ideas now. Could you either provide a zip package with your code or the .deb file that I could test it on an actual device since I don't have the emulator?