View Full Version : Nokia java midlets permissions policy cracked by me [EXCLUSIVE]
hannan123 11th May 2008, 19:32 hi all,
I have got an exclusive info for you now you can change the permissions of all your untrusted java midlets to always allowed . First apply the famous c2z patch by fca (thanks to him for his great discovery) and then copy the two files (jtwi_r1.xpf and midp2_rp.xpf) which i am attaching here to c:\system\data\midp2\security\policy\
And you will gain all the java permissions. Now after this you can say that symbian is completely open.
Now go to app.manager to change the permission setting of all your apps according to your will.
For your convenience i am also attaching the c2z patch file.
Note:this is only possible with the newest update of c2z patch by fca it will not work with old patch delete the old patch and apply this patch.
After applying this method you will not get any more annoying prompts like READ USER DATA or WRITE USER DATA.
note:the new c2z patch works fully with the latest version of rom patcher by zorn. This is because this c2z.rmp file contain three patches inside a single file which can only be fully interpretted by the latest rom patcher.
If any one is still having problem with this method then pm me your jwti_r1.xpf and midp2_rp.xpf files from z:\system\data\midp2\security\policy\
I will mod them for you and this the best i can do.
You can also mod the files by your self just to increase or decrease the capabilities
Firstly i will explain you some terms.
No=no file access
Oneshot=this mean that permission is needed before every act.(ask every time)
Session=this means that you have to permit permissons to every java midlet at every startup.(ask once).
Blanket=this means that no permission needed. (never ask)
To do any thing by your self you can open the midp2_rp.xpf file and cheak the capabilities for different acts read user data, write user data, connectivity.network connectivity etc. Different policy is defined for different domains MFD=manufacture domain
Opd, ttpd etc
At the bottom of the page the policy is defined for the untrusted midlets ie midlets without any cert.
Here you will see the permissions for different capcilities of unsigned java apps.
Here the word function group refers to function like( read user data, write user data) for example
function group bindings:"local connectivity"
Means the ability to use local connectivity
Under it there would be two options ie
Default means the capability which you want to give to untrusted apps just after Installation
If default=Blanket it means always allowed
Which is the highest abllity granted to any midlet but if you want to provide full acess from default then the line beneath it ie maximum which means the maximum access you want to provide untrusted midlets for local connectivity must also be at Blanket because how can you give always allowed access to any domain when its maximum ability is one shot ie ask every time.
i have made the modifications so you don,t need to do any thing just copy and paste the attached file.
How it works.
1.Why you need the c2z patch?
Efsrv.dll is the file which collects the info from the z:\drive and provide it the phone to process it. When fca realized that making these small small patches would not help him to do what he want because most of the files in the z drive are not present in rom, and the other patches except the c2z patch cover only a single file he tried to patch the big fish ie the EFSrv.dll and programmed this file to cheak any required file requested from any phone process first from c drive and the from z drive. Mean if any file is present in c drive at the same root as it is in z drive then the phone will prefer the c drive. Thanks to fca for his excellent work.
1.Why i recomend to use c2z patch instead of patching the dll file ie midpsecuritypolicyv2.dll this is because in simple words you can say the midptosecuritypolicyv2.dll is non_patchable file. You can,t patch this file in fp1 phones as in my nokia 5700 the rom patcher gives an error when tried to patch that file because in my phone and some other fp1 phones it cannot find the .dll file because it is stored in the z drive but does not comes under rom just like most of the similar processes in these phones maybe in some phones the rom patcher can patch this file but it would not be able to force the phone to use the function
epoc:allocshadowpage
Mean use patched file insted of real file because the control is in the hands of Efsrv.dll file.
so most easiest way to escape from this mess was to wait for fca to release another alpha version of c2z patch which he did today. There are no limitations of prefp1 or fp1 so you would be able to use it on any 3rd edition phone and change the permisions.
Warning:According to fca this patch is still an alpha version and the testers may damage their phone so use this at your own risk.
c2z patch removed since it is already posted HERE (http://www.ipmart-forum.com/showthread.php?t=253109) - swankyleo
Attachment updated.
Some restriction were present on ssl port, http port, socket port.
The untrusted midlets only had access to c:\data now you can access any folder on c:\drive.
Change log. 12 may 2008. 1.ssl port restriction, socket post restriction and http port restriction removed. Now you would be able to use all network ports just like MFD(manufacture domain)
2.Full access to all folders on c:\ and e:\ provided..
spaciodino 11th May 2008, 19:40 Just Curious, But What Does This Mean?? What Can We Do With This Permission?
illegible 11th May 2008, 19:52 This is already done! :sorry:
If you have fallowed the news in the ROMPatcher thread, this has been already done in by Disabled long ago(it was a patch, but the concept is the same, so every a little smarter guy should know to do what you are saying).
jarbamare 11th May 2008, 20:10 Just Curious, But What Does This Mean?? What Can We Do With This Permission?
Me too ...
I was thinking that this patch allow all J2ME application to run without annoying screen: "allow application *** to read user data?", but this is not a fact -> still i must accept this annoying permissions every time when i run and use java app functions(example MobyExplorer etc.) ...
What is purpose of this "patch" than? I cannot understand?
hannan123 11th May 2008, 20:11 now it was not done i tried to do it but it was not possible to interact with the security policy because this file comes under the EFSrv.dll file which in the last c2z was not reading this file through c drive
But now with this new patch its possible.
hannan123 11th May 2008, 20:16 [QUOTE=jarbamare;2011880]Me too ...
I was thinking that this patch allow all J2ME application to run without annoying screen: "allow application *** to read user data?", but this is not a fact -> still i must accept this annoying permissions every time when i run and use java app functions(example MobyExplorer etc.) ...
YEH no more annoying prompts like read user data and write user data while using moby explorer just enjoy.
jarbamare 11th May 2008, 20:21 I have Nokia N95 fw 20.0.015 and i just apply patch, but nothing change ... Still i must manualy allow application *** to read user data?".
This is annoying.
Not helping if i copy provided .xpf files to c:\system\midp2\security\policy\ and running ROMPatcher and apply c2z.rmp, ... still the same ...
?!?
ARE YOU SHURE THIS WORKING ON THE FP1 DEVICES? Somebody else can confirm this*?
spaciodino 11th May 2008, 20:26 dude, when i apply the c2z(latest) patch my phone restarts =))....how unlucky is that????????
hannan123 11th May 2008, 20:36 dude, when i apply the c2z(latest) patch my phone restarts =))....how unlucky is that????????
Thats because you don,t have latest rom patcher version . Tell me which phone are you using.
hannan123 11th May 2008, 20:42 I have Nokia N95 fw 20.0.015 and i just apply patch, but nothing change ... Still i must manualy allow application *** to read user data?".
This is annoying.
Not helping if i copy provided .xpf files to c:\system\midp2\security\policy\ and running ROMPatcher and apply c2z.rmp, ... still the same ...
?!?
ARE YOU SHURE THIS WORKING ON THE FP1 DEVICES? Somebody else can confirm this*?
Yeh its working on my nokia 5700 which is a FP1 phone.
jarbamare 11th May 2008, 20:51 hannan123
I use this .rmp file and modified midp2_rp.xpf(from atachment) and now working like a charm.;)
BTW. YOU MADE A MISTAKE in first place: default path for .xpf files is c:\system\data\midp2\security\policy\
It's more important to set all default mode strings to DefaultMode: Blanket in midp2_rp.xpf file(atachment file is modified from N95) ...
@jarbamare
Thanks for pointing out the correct path & the Blanket mode to be used...the attachments in the first post have been updated by the author. Disabled's patch has been removed from here since it is already posted in the ROMPatcher thread. Moreover there has been no positive feedback for it till now. - swankyleo
avishayil 11th May 2008, 21:05 hannan123
I use this .rmp file and modified midp2_rp.xpf(from atachment) and now working like a charm.;)
BTW. YOU MADE A MISTAKE in first place: default path for .xpf files is c:\system\data\midp2\security\policy\
YOU ARE MY HERO :>
WORKING ON N95 V21
hannan123 11th May 2008, 21:09 hannan123
I use this .rmp file and modified midp2_rp.xpf(from atachment) and now working like a charm.;)
BTW. YOU MADE A MISTAKE in first place: default path for .xpf files is c:\system\data\midp2\security\policy\
No you don,t need these small small patches when you have big c2z patch.
Sorry for my mistake for the path i knew it would work.
jarbamare 11th May 2008, 21:12 Never mind, it's nice to have more option than one :) now working great ... lastly i don't have problems with java permissions anymore!!!
Btw. hannan123 thanx for info and topic, "must spread some ..."!;)
hannan123 11th May 2008, 21:15 hannan123
I use this .rmp file and modified midp2_rp.xpf(from atachment) and now working like a charm.;)
BTW. YOU MADE A MISTAKE in first place: default path for .xpf files is c:\system\data\midp2\security\policy\
P.S. another good tutorial(i use this one):
It's more important to set all default mode strings to DefaultMode: Blanket in midp2_rp.xpf file(atachment file is modified from N95) ...
No you must not set all default modes to blanket doing this will automatically give all your java files all permissions which is not needed.
Mafteah 11th May 2008, 22:20 Someone got it working on 6120c?
spaciodino 11th May 2008, 22:23 dude i'm using the latest 30 april ROmpatcher..I've applied the latest c2z patch.
I've kept these two files in the requires place(checked spelling mistakes too but none).
I got it right the 1st time i applied the patch. then when i removed and repatched it and tried again, its saying the same thing ...Allow APP ** to read user data
What to do...???
hannan123 11th May 2008, 22:57 dude i'm using the latest 30 april ROmpatcher..I've applied the latest c2z patch.
I've kept these two files in the requires place(checked spelling mistakes too but none).
I got it right the 1st time i applied the patch. then when i removed and repatched it and tried again, its saying the same thing ...Allow APP ** to read user data
What to do...???
Go to app manager to change the permission setting or use the updated attachment so it will do every thing by it self.
Mafteah 12th May 2008, 08:39 Works!!! (6120c)
Thanks!
NIGRA 12th May 2008, 13:25 Works!!! (6120c)
Thanks!
yes it works great on my 6120c too. thanks mate...
spaciodino 12th May 2008, 13:37 Go to app manager to change the permission setting or use the updated attachment so it will do every thing by it self.
Yeah dude, i figured that out some how later on...Thanks anyway..
:good2:
But which new files are u talking about, the one from the 1st post or from a different post attached in this thread??
hannan123 12th May 2008, 13:57 Yeah dude, i figured that out some how later on...Thanks anyway..
:good2:
But which new files are u talking about, the one from the 1st post or from a different post attached in this thread?? i have modified my files now you don,t even need to go to app.manager to change the permissions.
i am also posting another version modded by me which will even disable some invisible restrictions like port restrictions and ability to read all c drive folders until now you can only access c:\data.
Airian 12th May 2008, 17:15 This is for s60v3 only?
spaciodino 12th May 2008, 20:24 no luck dude, have to go back to app.manager to set it right again
hannan123 13th May 2008, 01:53 no luck dude, have to go back to app.manager to set it right again
Mate use the updated post i have modded both the files to remove all hidden restrictions as well and copy both the files to c:\system\data\midp2\security\policy\
You will surely be successful.
flodis79 13th May 2008, 16:55 I am trying to get this to work on my E51, but it does not... I have 2 files copied to the policy folder, and then apply the c2z patch in ROMpatcher. After that, in my understanding, I do not have to change any midlet permissions at all? The thing is that I still get the prompts for all midlets, and I get a kernel error when trying to open the App manager. Kern-exec2 - program closed.
Has anyone got this to work on an E51?
hannan123 13th May 2008, 17:10 I am trying to get this to work on my E51, but it does not... I have 2 files copied to the policy folder, and then apply the c2z patch in ROMpatcher. After that, in my understanding, I do not have to change any midlet permissions at all? The thing is that I still get the prompts for all midlets, and I get a kernel error when trying to open the App manager. Kern-exec2 - program closed.
Has anyone got this to work on an E51?now remove both the files without disabiling the patch and open the app.manager what does it do does it open?
If yes then pm me the two files from z:\system\data\midp2\security\policy
I will mod them for you. May be they are different for E51.
flodis79 13th May 2008, 17:17 now remove both the files without disabiling the patch and open the app.manager what does it do does it open?
If yes then pm me the two files from z:\system\data\midp2\security\policy
I will mod them for you. May be they are different for E51.
no it still does not open when I remove those files... Does this mean there's some incompatibility with c2z and e51?
hannan123 13th May 2008, 17:24 no it still does not open when I remove those files... Does this mean there's some incompatibility with c2z and e51?
May be, please post here your EFSrv.dll file.
I will be glad to cheak it for you.
flodis79 13th May 2008, 17:32 Alright here we go. Thanks in advance, hannan!
I was just thinking that I might have the wrong ROMPatcher model?
From http://www.ipmart-forum.com/showpost.php?p=1969676&postcount=2
Update:30-APR-08
If you have already applied Leftup's root certificate as mentioned HERE, then you can directly install the ROMPatcher from this SIS file and then skip to the Patches section below, otherwise proceed through the tutorial.
That is the SIS file I have since I am using the leftup root cert hack. So I should not use the ROMPatcher_FP1.rar file, posted in the bottom of that post #2 in the thread above?
hannan123 13th May 2008, 17:37 Alright here we go. Thanks in advance, hannan!
Ok may be you have to wait for some time.
swankyleo 13th May 2008, 18:10 Alright here we go. Thanks in advance, hannan!
I was just thinking that I might have the wrong ROMPatcher model?
From http://www.ipmart-forum.com/showpost.php?p=1969676&postcount=2
....
That is the SIS file I have since I am using the leftup root cert hack. So I should not use the ROMPatcher_FP1.rar file, posted in the bottom of that post #2 in the thread above?Do not worry mate if you have used that SIS file, all the attachments in that post are the latest ones released on 30-APR-08 ;)
tnt666 13th May 2008, 18:48 I could'nt find the c:\system\data\midp2 folder.I m using N73ME.Where is the midp2 folder in N73ME?Plz help.
swankyleo 13th May 2008, 19:22 I could'nt find the c:\system\data\midp2 folder.I m using N73ME.Where is the midp2 folder in N73ME?Plz help.You need to create it manually.
flodis79 13th May 2008, 20:11 Ok may be you have to wait for some time.
No problems, mate! Just get back to me when you have time. Thank you very much indeed.
hannan123 13th May 2008, 20:44 No problems, mate! Just get back to me when you have time. Thank you very much indeed.
I forwarded it to fca he told me that its strange and i will work on it and will find some way out. I am sorry but you have to wait for any update.
flodis79 15th May 2008, 14:53 I forwarded it to fca he told me that its strange and i will work on it and will find some way out. I am sorry but you have to wait for any update.
That's fine. Just tell me if he needs any more files, e.g. from my Z: drive.
jefbuan 16th May 2008, 01:46 w8 man..i have E51 and works perpectly.. here's my c2z.rmp 396986
flodis79 16th May 2008, 11:07 w8 man..i have E51 and works perpectly.. here's my c2z.rmp 396986
Thanks for posting that file. But it does not work for me... How did you get the c2z file, did you just generate with the c2z.exe or did you tweak it in some way? And could you please send on the other files you put on the c: drive? Thanks!
jefbuan 16th May 2008, 11:48 Thanks for posting that file. But it does not work for me... How did you get the c2z file, did you just generate with the c2z.exe or did you tweak it in some way? And could you please send on the other files you put on the c: drive? Thanks!
i take EFSrv.dll from my z:\sys\bin\EFSrv.dll and generate my c2z patch.copy twi_r1.xpf and midp2_rp.xpf from my z: to c:that's it
swankyleo 16th May 2008, 11:54 Thanks for posting that file. But it does not work for me... How did you get the c2z file, did you just generate with the c2z.exe or did you tweak it in some way? And could you please send on the other files you put on the c: drive? Thanks!The simple answer is that you have a different firmware version. The EFSrv.dll you had posted is definitely not gonna work with the existing c2z.exe. Either change your firmware or wait for a solution.
flodis79 16th May 2008, 12:16 i take EFSrv.dll from my z:\sys\bin\EFSrv.dll and generate my c2z patch.copy twi_r1.xpf and midp2_rp.xpf from my z: to c:that's it
What is the firmware of your phone? 100.34.20/29-09-2007/RM-244/Nokia E51-1 (03.1)?
And did you change anything in the xpf files?
The simple answer is that you have a different firmware version. The EFSrv.dll you had posted is definitely not gonna work with the existing c2z.exe. Either change your firmware or wait for a solution.
Yes, I guess you are right, even if the 100.34.20 fw is in 99 percent of all E51 phones. They have only release the 150.xx.xx fw to some operator-specific branding, e.g. Swisscom and Vodafone.
freeman3 17th May 2008, 02:14 works fine expect i can't run some applications. i have created some apps and some of them don't work when patch is on. do you have same problem?
hannan123 17th May 2008, 06:31 works fine expect i can't run some applications. i have created some apps and some of them don't work when patch is on. do you have same problem?
Can you explain that which apps don,t work mean java or sis apps which one.Or built in system apps.
hnyuk49 17th May 2008, 08:05 doesnt work on N80! It freezes my fone when I apply the patch & I have to unplug the battery. I did everything as instructed, so what's wrong?
hannan123 17th May 2008, 12:10 doesnt work on N80! It freezes my fone when I apply the patch & I have to unplug the battery. I did everything as instructed, so what's wrong?
Please update your firmware and rom patcher version it will surely work for you.
freeman3 17th May 2008, 12:39 Can you explain that which apps don,t work mean java or sis apps which one.Or built in system apps.
sorry i thought java apps. i have made some apps and some of them don't work. i can't run them at all
hnyuk49 17th May 2008, 13:00 Please update your firmware and rom patcher version it will surely work for you.
My fone is already updated with latest firmware & other patches work just fine but this...:confused:
swankyleo 17th May 2008, 13:05 My fone is already updated with latest firmware & other patches work just fine but this...:confused:Mate the c2z patch file is a multi-patch...has 3-patches-1 and will only work with the latest ROMPatcher. Are you using the latest one.
tobulide 18th May 2008, 02:50 its working fine on N73 ME .:)
data read/write is gone in java app. especilly in mobilerar.jar file/.:hehe:
hannan123 18th May 2008, 10:08 sorry i thought java apps. i have made some apps and some of them don't work. i can't run them at all
Now do one thing disable the c2z patch and again run them do they work. If they don,t work even after disabiling the patch then reinstall them because some apps just hang on and don,t open like in my phone morange 3.4.0 and operamini 4.1 signed hanged for me many times and they don,t open and the only way i got was to reinstall them.
and if they start after disabiling the patch then send me the copy of the apps i will be glad to cheak them out for you and providing a solution
eks_are 21st May 2008, 10:43 i've followed all the way but it still not working with my 5700...finally used attached files and it works...thanks...
hannan123 21st May 2008, 11:42 ha ha i knew you were a genius and my advice for you is that don,t stuff your head with the things you don,t understand
freeman3 22nd May 2008, 23:16 Now do one thing disable the c2z patch and again run them do they work. If they don,t work even after disabiling the patch then reinstall them because some apps just hang on and don,t open like in my phone morange 3.4.0 and operamini 4.1 signed hanged for me many times and they don,t open and the only way i got was to reinstall them.
and if they start after disabiling the patch then send me the copy of the apps i will be glad to cheak them out for you and providing a solution
when i turn it off it runs again
here's the app
hannan123 23rd May 2008, 08:01 when i turn it off it runs again
here's the app
You mean that this app starts automatically without opening it am i right.
hannan123 23rd May 2008, 08:17 i have cheaked that application but can,t understand its language and i am unable to configure it secondly its not starting automatically for me.
Please tell me that am i right that the problem is that it starts automatically without opening it. If this is the problem then i will post the solution as soon as you confirm it.
freeman3 23rd May 2008, 09:07 You mean that this app starts automatically without opening it am i right.
ehm no
i meant that i can't run the app when patch is on. when i turn it off i can run it again. it's java no autostart
hannan123 23rd May 2008, 11:03 on my phone its running ok with the patch and even without the patch. I am using nokia 5700.
hannan123 23rd May 2008, 11:04 i think there must be some kind of incompatibility of c2z patch with your phone.
gmagesh14 3rd July 2008, 21:38 thank you very much..works greatly in my 5700xm after updating the .rpm file....
tiagokenta 14th July 2008, 06:33 Hello to all!!! I have a problem, when i apply the c2z patch my phone reboots, please i need help!!! very thanks a lot to all!!!, sorry for my bad english, my phone is a 5700.
favas0 2nd October 2008, 13:25 Pardon my post but everyone here is gettin this "removal of java restrictions" successfull in thier s60v3 phones . M using n70 (s60v2) . Will this work in my phone ? If not could anyone tell me ?
favas0 3rd October 2008, 05:26 Is it possible for me to edit my n70 flash file with a hex editor and change d untrusted midlet "Maximum mode: blanket" ? . . . Its a theory but problem is m using winhex editor and m not able to find d function bindings line :( help pls
|