Learning Application Permissions & Firewall

I want to learn how to use the Application Permissions & Firewall. I know how to change the settings, and sort of what they're for - at least as far as it's covered in the OS User Guides. I am looking for more specific and detailed information. What the implications may be for each individual setting - what's the range of possibilities - what each permission could possibly mean and can not ever mean. and for the Firewall I would like to understand what the basic pop-up messages and warnings, errors etc mean.
So far I have checked various Blackberry User forums, searched the www, tried local (and online) Bookshops, called technical support (spoke with both my service provider and Blackberry)... Was hoping to find maybe a "Blackberry: The Missing Manual" type guide or something. Or even just a downloadable guide would be great. It seems like it would be in ALL our best interest Security-Wise (& Blackberry's too) if every user had easy access to this basic information. As it is now, the typical (non business) user eventually gives up (because *Nobody knows*) and just goes with "Allow ALL" and Disables the Firewall.
If I have to enroll in a "Training & Certification" class to get this info - or buy a Book meant for developers - please let me know (and which one). Or hopefully the info's available for free on this site somewhere. Thanks!

you can find some RIM courses over here : http://na.blackberry.com/eng/support/programs/training.jsp#tab_tab_course_list
The search box on top-right of this page is your true friend, and the public Knowledge Base too:

Similar Messages

Has anyone restored from Time Machine and Application permissions okay?

Greetings Apple Discussions:
Has anyone restored their system from Time Machine yet and had a successful restore of their application permissions from Time Machine?
I just wanted to get confirmation.

I've done several. In fact I did many during beta testing and I've done at least one after installing 10.5 and 10.5.1. Each one done under 10.5 and 10.5.1 were successful without any noticeable issues with permissions.

9.2 taking over OS X no applications/permissions/start up disk on OS X

I think I found the problem, somehow file maker 4.1 got installed on my imac but I don`t know where to begin, I have no Preferences/applications/permissions on OS X and there is no access too the start up disk so what 9.2 seems to want to take over does not work correctly and I cannot download anything, I can download but it will
not mount.

hh: I have tried rEFIt before and it didn't help (pre Archive and install the only boot option under Start-up Disk was the network ie. neither OS X drive was visible).
Hatter: no MacFuse or Paragon NTFS. My drive set-up is:
1. OS X plus other apps (31gb on 500gb drive)
2. Scratch + temp (500gb)
3. Data (1000gb)
4. Vista (1000gb) - a waste I know
Firewire external 2000gb as jbod partitioned into a bootable back-up, aperture Vault, and Time Machine. Are you suggesting that I would be better off with OS X on a separate drive from my other apps (say the scratch/temp drive)? or had you thought that it shared a drive with Vista?

Controlling Application Layer Firewall from Command Line Not Working

We are trying to manage the OS X Application Layer Firewall for Mountain Lion from the command-line. We have several hundred Macs that we need to manage and it isn't possible to have someone log in to each one to modify settings. We have used socketfilterfw in the past, and can still use it to add items but we can't seem to manage it at all. We are also having issues trying to remove certain items although it appears we can still add items.
When we try to block or unblock the feedback we get is that the item has been configured however when we do a list the item attributes haven't changed.
When we try to verify if the item has been signed we get an error Killed: 9
When we try to sign an item we get the same error, Killed: 9
With one item specifically, when we try to remove it we get a Segmentation Fault 11 although we can add that same item just fine.
It should be noted that doing all of this through the GUI works fine.
Does anyone have any ideas on how to manage the firewall from te command-line that works? Has socketfilterfw been depricated and replaced by something else? Is this just a bug? I am placing the same information in a bugreport but just wanted to check with the co

It's a known issue that apparently hasn't been fixed. Not a high priority for Apple Engineering, it seems.

BB10 cant block apps from internet access in Application Permissions?

I have a Q10. BB 10.1 OS.
It appears I cant prevent third party apps from gaining access to the internet among other settings under the Securities/Application Permissions. This is in huge contrast to my 9700 where I can very specifically dictate what program has access to, whether that be Wifi, Data, Bluetooth etc.
Is there another way to do this or is this OS not complete yet and these functions will be included back in future iterations? Or is my OS a dated version?
This is problematic for me. Seems this problem presents as both a security issue in cases where the third party app has mal-intensions, as well as being a data leech should the program constantly utilize data unbeknownst to the user.
Internet is just one thing. What about the camera, mic etc? How do we know ID thieves are not making BB10 disguised as something useful so they can data mine the users and send all of their personal information back to them via unfettered internet access, mic access, camera access, GPS location access (hence know home + work addresses) and then perform criminal activities using your data?
Im shocked. I thought Blackberry is supposed to be better in the security department compared to Apple. THis is what I expected from Apple and Android. Or is this the new thing? All third party apps purposefully get internet access whether the user agrees or not?

Great question. Unfortunately I don't have an answer, but can comment that these preloaded apps are using MB from my datapak that I paid money to have for MY personal use! Not theirs! I believe it's theft when they use what we pay for. Time to check legalities in my opinion.

Change Application-Based firewall via command line

I'm looking for the command line method of changing the application-based firewall. I am not referring to ipfw, which I already have configured. Basically, all I want to do is change "Set access for specific services and applications" to "Allow all incoming connections" under Security > Firewall. However, I need to do this via ssh, so I need the command line method.

sysadmin wrote:
It has been included in several Apple packages dating back to Tiger. However, you have to dig it out of one of the packages in /Library/Receipts. Use the "locate" command and you'll find it in a few packages. Apparently they were using it internally long before they included it in the OS.
Interesting. The same thing was true for SetFile, which was/is present in Developer Tools. If you hadn't installed the latter, you could still find it in some of the system update for Tiger.
Using 'defaults' for nested values can be downright painful,
Yes

Applications permissions (Explained Here)

I have that a number of users have reported not understanding the purpose of the applications remissions the Android developers has setup with their apps and what they do exactly in a nut shell, well I for a nice post at http://www.androidcentral.com/look-application-permissions that explains this information for thw users... Check it out because I think it may help with the level of confusion..

It isnt complete but it covers a number of questions that users has asked and concerned themselves with when it came to what access a app is asking for and why... With them understanding how clearances work a bit better this will clearify things and allow them how to handles the apps request.

Applications permissions

I'm seeing some strange things going on in my Applications permissions. Depending on which application I check with "Get Info", the Sharing and Permissions section will show "Fetching" within the owner privileges or it will show the group privileges as "Custom." Also, on some of these the Group permissions appear before the Owner permissions!
I had a similar problem with files in my Home folder, but corrected them by going to the R partition and using the reset password utility to reset the ACLs.
Of course, this fix doesn't work for my Applications...so I'm wondering what I can do. Will a simple terminal command fix this?
Thanks.

Hi,
If you are happy in the Terminal I would check the permissons for your Applications folder. Here the owner should be 'root'. See:
http://www.amsys.co.uk/2013/blog/using-terminal-to-set-file-permissions/#.UtMI8p Fhep0
If it helps mine shows:
drwxrwxr-x+ 125 root admin 4250 11 Jan 14:22 Application
Best wishes
John

Interactive Learning Application?

Hi, I need to create a learning application that will allow users to read through various pieces of information and then test their knowledge in a series of multichoice questions.
My knowledge of flash is very basic (in the past I have only done basic flash animations) and I do not have a clue on how to go about making a multichoice quiz with a score count. I am aware that there are pre-made templates available but these are no good as I need to make the application without the use of templates.
If anyone could point me in the right direction of some useful tutorials or reccomend the best way to go about creating this application please let me know.
Thanks

you can create your project in multiple swf's like index.swf clients.swf portfolio.swf..... etc...
first of all main file is index.swf which contains index and when user click on any section then it loads other swf in it
for that make a movieclip on your stage for example blankMC, and load swf which you want loadMovie("portfolio.swf",blankMC)
by this method you can make your project in multiple swf's

Book for learning application development

I need a good book for learning application development for ios.
If you have a website, it will be good.
If I can buy through the site, it's even better.

Use the resources you pay for with a dev account in the iOS Dev Center(s).
iOS Human Interface Guidelines
iOS Starting Point
Start Developing iOS Apps Today
App Development Overview
App Store Review Guidelines for iOS Apps
Your First iOS App
iTunes Connect Developer Guide
iTunes Connect Guide
Learning Objective-C: A Primer
Also: iTunes U

Standard (application-based) firewall with one additional port open?

Lion and Snow Leopard both have application based firewalls. I want to allow access to a Minecraft server on port 25565 but I don't want to allow all of Java. How can I open one port in addition to leaving the standard firewall in place?

Hi
The Zone based firewall uses "inspect" statements, that's just what it does.
A simple zone-based firewall that will inspect all traffic going from the local network to the internet and protecting the outside interface of the router, but allowing anyconnect connections would look something like this:
ip access-list standard INSIDE-NETWORK_ACL
permit 192.168.1.0 255.255.255.0
class-map type inspect INSIDE-NETWORK_CMAP
match access-group name INSIDE-NETWORK_ACL
class-map type inspect HTTPS_CMAP
match protocol https
policy-map type inspect INSIDE-TO-OUTSIDE_PMAP
class type inspect INSIDE-NETWORK_CMAP
inspect
policy-map type inspect OUTSIDE-TO-SELF
class type inspect HTTPS_CMAP
pass
zone-pair security INSIDE-TO-OUTSIDE_ZP source INSIDE destination OUTISDE
service-policy type inspect INSIDE-TO-OUTSIDE_PMAP
zone-pair security OUTSIDE-TO-SELF_ZP source OUTSIDE destination self
service-policy type inspect OUTSIDE-TO-SELF
I haven't personally configured Zone Based Firewall with anyconnect. So if this doesn't work you can look at this link: https://supportforums.cisco.com/document/46481/anyconnect-ios-zone-based-firewall-zbfw

Changes in HCM learning application

Hi All,
According to my requirement I have to change code in standard BSP application i.e. HCM Learning
I have to put authorization in it for employees according to roles.
Please tell me how to do the changes in standard BSP application? and
where in the code i can put the authorization.?
Thanks in advance
s@chin

Dear Baljinder,
We are having the same requiremnt to change the information page in HCM learning
Can you please explain in detail what you have done to get the desired result.
I mean how did you maintain LSPAGE_ALIAS_C and LS_PAGE_ALIAS tables.
Thanks a lot in advance,
Reagards,
Sai

How do I open up a specific port in the Application Level Firewall?

Currently, my system blocks port 2336 and I want to open this up. To be precise: port 2336 is listening on the local system, both on 127.0.0.1 and its 192.168.x.x address, but no client on the LAN can connect to port 2336.
IPFW and PF are not running. When I turn ALF off in System Preferences, I can connect to port 2336 from a LAN client. So ALF is blocking port 2336. How can I open this up?

Linc, thatnks for the reply. I dived into this a bit more and studied the setup of the ALF. I find it confusing, on the one hand it is mentioned in the packet filter firewall setup in /etc/pf.anchors/com.apple:
# Application Firewall anchor point.
anchor "250.ApplicationFirewall/*"
OTOH, such an entry is nowhere to be found on my system and the ALF command socketfilterfw somehow seems to suggest it is a socket filter and not a packet filter and that it is indeed working at a different level, namely the level that decides which executable is allowed to listen on which socket (port).
I am trying to find out what program is being started when I connect to port 2336 (service appleugcontrol according to /etc/services) so I can enable it with socketfilterfw. But I can't find out which program I have to enable.
I can turn off my ALF altogether, but I am used to running a firewall on my system, even if it is behind a NAT and ports are not as easily reached from the outside. I want my internal network to have some security too. In the 10.6 days, that was ipfw. Now it is PF which is off by default. I tried IceFloor to manage the PF firewall (so I can turn the ALF off) but the result was negative. Whatever I put in the settings, it blocked about everything.
The reason I want to open this port is that without it server-side file tracking for mobile home sync does not work and mobile home syncing by clients becomes very slow. Server-side file tracking for mobile home syncing requires that the FileSyncAgent on the client is able to create a SSH connection to port 2336 on the server. But as it stands now, ALF is blocking that.

Adding application to firewall changes md5 sum

I was playing World of Warcraft and the application stopped connecting to the server. Firefox worked, mail worked, even Ventrilo worked, but the warcraft app would not connect. I figured maybe i needed to add the application to the firewall exclusion list, so i added it. Apparently the act of doing so caused its checksum to be changed by the application firewall when it was added to the list of allowed applications.
When the client connects to the server, the validation based on the checksum fails and i am unable to play the game. The only solution put forward by blizzard is to delete the game and re-install from scratch.

Girish,
You have a couple of choices here....
1) Use PDK-Java to make your JSP application a portlet. You would install the PDK-Java Framework and then add your JSP application as a portlet. For this, you would need to take a look at the PDK ... PDK-Java and Download/install the jpdk and also follow the "How to" article on create a JSP portlet.
2) Use PDK-URL Services. URL Services allows you to take your exisitng application and add it as a portlet without modification.
Go to the PDK, PDK-URL Services section.
Thanks,
Sue

All Applications Cause Firewall's "Accept Incoming Connections" Prompt

Every time I open a "Save," "Save As," or "Open" dialog box, in any application, I get multiple prompts from the firewall to allow or deny incoming connections for that application. The prompt disappears almost immediately. This occurs in applications I've listed as exceptions as well as those unlisted.
A few other things I've observed:
- This happens while I'm connected to my Windows 7 machine on over the home network.
- If I unmount the other computer, I no longer get the prompt.
- It doesn't happen when I've mounted another Mac.
- It doesn't happen when I block all incoming connections, but then file sharing doesn't work either.
- It happens in every application, including System Preferences.
What I've tried:
- Deleting the firewall's plist file in /Library/Preferences
- Removing all exceptions and disabling/reenabling the firewall and the option to block all incoming connections.
I've seen this question asked numerous times in various places on the internet, and I have yet to find a solution. Some suggest reinstalling every application that does this, while others recommend disabling the firewall altogether. I don't see either of these is a solution. None of the other versions of this question have referenced the presence of a mounted network computer.
Thanks for your input.

Try adding
/System/Library/CoreServices/Finder.app
to the Apple Menu -> System Preferences -> Security -> Firewall -> Advanced (after unlocking lock) -> "+" symbol
to add the Finder app to list of applications accepting incoming connections.
Not sure if this is a secure method, but it might be better than turning the firewall off altogether. Works for me for the time being, and I just thought of this after looking all over for a solution myself.

Learning Application Permissions & Firewall

Similar Messages

Maybe you are looking for