SXE - Customizing Domains

Modifying application level policy

Application level policy is defined in a file called sxe.profiles. Domains typically follow the following format:

    [Domain]
    requests
    ...
    #

The SXE Discovery Mode can be used to determine what requests a particular application makes as it runs. In this mode all requests are allowed and logged, but doing this has a severe impact on performance. To operate qpe in SXE Discovery Mode, ensure Qt Embedded is compiled in debug mode and that and the SXE_DISCOVERY_MODE environment variable is exported. The requests will all be logged in /tmp/qtopia-0/sxe_discovery.log (where 0 is the session). The requests can be compared with sxe.profiles to see if the domain is lacking requests used by the application.

Alternatively, an application can run without SXE discovery mode and if there is a request made that is not in the application's declared domain then it will breach policy and the qpe console output and/or security log can be viewed to see what request was needed.

If sxe.profiles needs to be updated simply add any extra requests to the appropriate domain. It is helpful to note that the wildcard * maybe be placed at the end of a request. This is useful for situations where a family of requests, which share the same prefix, can be added as one entry.

Note: After changing policy, ensure that sxe.profiles in the image directory is up to date. If shadow building, most of the time copying <qt-extended-root-dir>/etc/sxe.profiles to <image-dir>/etc/sxe.profiles is sufficient.