Knox Service Plugin 23.03 release notes

New policy for disabling import and export of SIM contacts

The ability to import contacts from and export contacts to a SIM card may present a potential security issue. A new policy Allow copy contact to SIM operation is introduced to allow IT admins to disable the import and export of SIM contacts.

When this policy is disabled, import and export of SIM contacts is restricted to internal storage only. Device users won’t be able to copy, edit, or add contacts to the SIM card.

New policy for allowing specific app notifications to be blocked

Currently, IT admins can define an allowlist for lock screen notifications, which specifies the apps that can display notifications on the lock screen (all other apps are blocked). A new policy is introduced to allow IT admins to do the opposite — define a blocklist, which specifies the apps that are blocked from displaying notifications on the lock screen (all other apps are allowed).

Entries support the * and ? wildcard characters, to block notifications of several apps.

For example, you can specify com.xyz.* to block lock screen notifications for all apps whose package names begin with com.xyz.