One other example for a system DLL that needs less capabilities than ALL -TCB, but still requires PowerMgmt, is Animation DLLs.

They require PowerMgmt ReadDeviceData WriteDeviceData ProtServ.

PowerMgmt is needed to Kill process.

I have other question:
When Symbian/Nokia release tool that shows which API required which capability.

The quite interesting API is SendA, could you explain which exact capability it require?

In general documentation is too poor against capabilities.

Carbide has "Capabilitie Scanner" feature. It works in 85% of cases

@igor That is obvious, but why and how freqently do your application need to kill processes?

You are right about the capability requirements documentation problem but the tool exists (see jaggernod's comment) and for static analysis 85% success rate is pretty OK in my opinion. The emulator gives you run time solutions with a 99.3443% acuracy. ;)

As I remember Symbian have API for restarting device programmatically. Its was private, not sure if its in Kernel Kit now, but i will post function name anyway as Symbian goes opensource sooner or later: SysStartup::ShutdownAndRestart().
Not shure, but i suppose its require PowerMgmt. Anyway, I think you will found couple API's with PowerMgmt or TrustedUI requirements if you drill down to Symbian private API's.

True again, although that API does not exist any more ;) (IIRC)

The question is however not as much which API need such capability (there are lists with them in SDK's docs) but which ones are really used, and why? How frequently did you use SysStartup::ShutdownAndRestart()?

Part I, my original comments was too big, thus I split it into two. :(

I recall when we were contributing to the implementation of a Device Management solution it needed this feature. When a device was stolen, we disabled a lot of stuff (maybe changed PIN code as well? can't remember) then we rebooted the device. It was such a feature that was rarely used, but essential for that kind of program.

Back in 2003 when the idea was first introduced we were told there would be such components that would give visual indication as to e.g. a dialog is safe to ask for a PIN or password. An ISV can write such a dialog and TrustedUI capability ensures that some extra LED will light or some part of the screen will change indicating that everything is okay. Did it happen? Are you aware of such LEDs, protected video memory area reserved for this purpose? This idea has proved to be a dead one from day one.

If you want to re-install damaged/removed shared components (like the OpenC plugin) in runtime, TrustedUI would be required for doing that silently.

Power Management is must in 3G phones. 3G phones are consuming lots of resources, so there is need for the higher power management in 3G's.

boat accessories

Amazing ...

Thank you very much for the information provided! I was looking for this data for a long time, bit I was not able to find the trusted source