App Shielding configuration options lookup table

Mis à jour le 22 Jan 2025
2 Minutes à lire

Partager
Sombre
Lumière
PDF

The content is currently unavailable in French. You are viewing the default English version.

Résumé de l’article

Avez-vous trouvé ce résumé utile ?

Merci pour vos commentaires

The following configuration options are always enforced in release mode for protected apps, and cannot be disabled unless using debug mode.

Debug-only mode options	Valid values	Default value	Short description
List of debug-only mode configuration options
blockJavaDebugger	boolean	true	Block Java debugger from attaching to the app
checkDebugger	boolean	true	Enable Java debugger checks
checkEmulator	boolean	true	Enable detection of app execution on emulator
checkHookingFrameworks	boolean	true	Enable Hooking Frameworks checks
checkNativeCodeHooks	boolean	true	Check for hooks in native code
checkRepackaging	boolean	true	Check if app is repackaged. Requires applicationSignerCertificate
checkRooting	boolean	true	Enable rooting checks in App Shielding
exitOnDebugger	boolean	true	Exit app if Java debugger check triggered
exitOnEmulator	boolean	true	Exit app if attempted executed in Emulator
exitOnNativeCodeHooks	boolean	true	Exit app if native hooks are detected
exitOnRepackaging	boolean	true	Exit app if repackaged

The following configuration options can be configured individually by the app publisher for both release and debug mode.

Release mode options	Valid values	Default value	Short description
List of release mode configuration options
advancedDebugGuard	boolean	false	Execute security checks to ensure authenticity of the App Shielding guard component
blockScreenMirroring	boolean	false	Block external screens
blockScreenshots	boolean	true	Block screenshots from being taken of the app
blockUntrustedScreenreaders	boolean	true	Block screen readers if currently active untrusted screen reader is found
checkRootingDeepScan	boolean	false	Perform additional scanning of system for anomalies. Read details before enabling
checkScreenMirroring	boolean	false	Check for external screens or screen mirroring
checkTrustedKeyboard	boolean	false	Check if the currently used software keyboard is trusted. 3rd party keyboards can be added using addTrustedKeyboardSigner
checkTrustedScreenreaders	boolean	true	Check if any currently active screen readers are trusted
enableCodeTracingDetection	boolean	false	Detect code tracers that follow the application at runtime
exitOnHookingFrameworks	boolean	true	Exit app if hooking frameworks checks trigger
exitOnRooting	boolean	false	Exit app if rooting checks trigger
exitOnRootingHeuristicsThreshold	integer	0 (disabled)	Value of rooting heuristics to trigger exit of app, should be 0 or <25
exitOnUntrustedKeyboard	boolean	fasle	Exit the app if untrusted software keyboard is used in the app
exitOnUntrustedScreenreaders	boolean	false	Exit the app if untrusted screen reader is active, and blockUntrustedScreenreaders is not enabled
processNameCloak	string	N/A	String for cloaking application id in/proc/self/cmdline
shutdownImmediately	boolean	false	Exit app immediately when a security detection check is triggered. Will not throw a Java exception, and may have side effects

The following configuration options are used to add values for certain mechanisms for trusted sources.

Allowlist options	Value Type	Default value	Short description
List of allowlist configuration options
addTrustedKeyboardSigner	fingerprint	N/A	Signing certificate of a trusted software keyboard, multiple entries allowed
addTrustedScreenReaderSigner	fingerprint	N/A	Signing certificate of a trusted screen reader, multiple entries allowed
applicationSignerCertificate	certificate	auto	Trusted certificate for signing the app, multiple entries allowed

The following configuration options are used to specify a URL for App Shielding to open, if the security check is triggered and App Shielding is configured to exit when triggered.

Allowlist options	Value Type	Default value	Short description
List of Exit URL configuration options
exitOnDebuggerURL	URL	N/A	Exit app, and open to URL if debugging check trigger
exitOnHookingFrameworksURL	URL	N/A	Exit app, and open to URL if hooking frameworks trigger
exitOnNativeCodeHooksURL	URL	N/A	Exit app, and open to URL if native hooks check trigger
exitOnRootingURL	URL	N/A	Exit app, and open to URL if rooting checks trigger
exitOnUntrustedKeyboardURL	URL	N/A	Exit app, and open to URL if untrusted keyboard check trigger
exitOnUntrustedScreenreadersURL	URL	N/A	Exit app, and open to URL if untrusted screen reader is active, and blockUntrustedScreenreaders is not enabled

Cet article vous a-t-il été utile ?

What's Next

Technical support