Secure Device (Manually) on Harmattan? - Page 2 - maemo.org

Active Topics

Sailfish OS for the Motorola Moto G7 Power (XT1955-5) - (ocean) (3)
to SailfishOS by edp17 - 2 hrs, 33 mins ago
The N900 is now 15 years old! (6)
to Nokia N900 by Macros - 1 day, 6 hrs ago
F(x)tec Pro1x (QWERTY) for sale (0)
to Buy & Sell by aln00000 - 1 day, 19 hrs ago
n770 youtube video (0)
to General by nmdv - 5 days, 18 hrs ago
more...

Page 2 of 2

< Prev

Thread Tools

	Schturman	2013-03-28 , 02:19
	Posts: 5,339 \| Thanked: 4,133 times \| Joined on Jan 2010 @ Israel	#11

Originally Posted by rainisto

Run following command with exploited capas:

You can pretty easily make desktop icon for it, but you need incepted opensh to make it run because of aegis capabilities.

PS. and word of warning: don't play with variables there, just use copy & paste. Since if you change the parameter values, you can for example force secure wipe of the device (without asking any confirmations), and most likely you dont want that

It work perfectly for me when I just installed it:

Code:

[Desktop Entry]
Encoding=UTF-8
Version=1.0
Type=Application
Terminal=false
Name=Secure Phone
Exec=/opt/N950QTweak/Secure/device_secure.sh
Icon=/usr/share/icons/hicolor/80x80/apps/device_secure80.png
X-Window-Icon=
X-HildonDesk-ShowInToolbar=true
X-Osso-Type=application/x-executable

and

Code:

#!/bin/sh

echo root | ariadne sh -c "dbus-send --system --type=method_call --print-reply --dest=com.nokia.devicelock /request com.nokia.devicelock.setState int32:1 int32:1;dbus-send --system --type=method_call --dest=com.nokia.mce /com/nokia/mce/request com.nokia.mce.request.req_tklock_mode_change string:locked"

exit 0

Why it stopped to work after reboot ? It cause reboot + Malfunction window -> reboot again and load your phone normally...

Thanks

__________________
Lausanne & Lyon de descente...
----------------
Schturman's home page
Schturman's repo on openrepos
RPM packaging directly on your Jolla phone.
Root & User SSH access to Jolla via WinSCP.
Root and User SSH access to Jolla via Nautilus on Linux PC.

Last edited by Schturman; 2013-03-28 at 02:26.

Quote & Reply |

	Schturman	2013-03-28 , 03:42
	Posts: 5,339 \| Thanked: 4,133 times \| Joined on Jan 2010 @ Israel	#12

Ok, i got it work after reboot with .conf file... But it take 3-5 min after reboot, harmattan limitation as we know...
Any other ideas ?

Quote & Reply |

Kallela	2013-03-28 , 08:56
Posts: 49 \| Thanked: 93 times \| Joined on Jan 2012 @ Finland	#13

Originally Posted by Schturman

Code:

#!/bin/sh

echo root | ariadne sh -c "dbus-send --system --type=method_call --print-reply --dest=com.nokia.devicelock /request com.nokia.devicelock.setState int32:1 int32:1;dbus-send --system --type=method_call --dest=com.nokia.mce /com/nokia/mce/request com.nokia.mce.request.req_tklock_mode_change string:locked"

exit 0

Of course, you cannot make assumptions about the root password, so you cannot use script like this in N9QT.

Maybe creating a deb package of the script & desktop file, granting the required security token for the script file in the aegis manifest and then incepting the package when activating the tweak? Otherwise you have to depend on and use opensh instead, like in rainisto's example, which may not be the best approach for N9QT as having opensh installed is kind of security risk. Maybe playing with refhashlist, restok, etc. is one option to grant tokens for the script without packaging, but messing them up is a risk too.

Don't know about that rebooting and MALF problem you faced, unfortunately.

Quote & Reply |

The Following User Says Thank You to Kallela For This Useful Post:
Schturman

	Schturman	2013-03-28 , 11:31
	Posts: 5,339 \| Thanked: 4,133 times \| Joined on Jan 2010 @ Israel	#14

Thanks, I already got it work
http://talk.maemo.org/showpost.php?p...postcount=5930

Quote & Reply |

The Following User Says Thank You to Schturman For This Useful Post:
HtheB

Page 2 of 2

< Prev

Active Topics

Sailfish OS for the Motorola Moto G7 Power (XT1955-5) - (ocean) (3)

The N900 is now 15 years old! (6)

F(x)tec Pro1x (QWERTY) for sale (0)

n770 youtube video (0)