Commit Graph

239 Commits

Author SHA1 Message Date
openharmony_ci 3dc288d7ed !202 merge dev into master
#150 Fix container_escape_detection and xpm apply scripts

Created-by: handyohos
Commit-by: handyohos
Merged-by: openharmony_ci
Description: #150

## Summary
- Fix path quoting issue in container_escape_detection/apply_ced.sh
- Add xpm header symlinks in xpm/apply_xpm.sh  
- Use mkdir -p for safer directory creation
- Add ohoe_headers directory for OpenHarmony specific headers

## Test plan
- [ ] Test container escape detection build
- [ ] Test XPM module build

See merge request: openharmony/kernel_linux_common_modules!202
2026-05-19 16:59:35 +08:00
handyohos be5d41ea4a ohoe_headers: Remove apply_ohoe_headers.sh
For linux-6.6, OpenHarmony headers are now directly injected into the
kernel source tree (include/linux/), so the separate header injection
script is no longer needed.

Related: #150

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Signed-off-by: handyohos <zhangxiaotian@huawei.com>
Change-Id: I5fab59cba72bc6b7a555df8accc910a88c4ef03c
2026-05-18 21:53:43 +08:00
handyohos 2e433f4cc0 xpm: Remove header symlink creation for linux-6.6
For linux-6.6, OpenHarmony headers are directly injected into the kernel
source tree, so we no longer need to create symlinks from linux-5.10.

This change:
- Removes XPM_HEADER_SOURCE_ROOT variable pointing to linux-5.10 headers
- Removes symlink creation for xpm.h and xpm_types.h

Related: #150

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Signed-off-by: handyohos <zhangxiaotian@huawei.com>
Change-Id: If4c6fac20fd7aaaed0052c91e69f24a21747e62c
2026-05-18 21:25:40 +08:00
handyohos 6b6669ca45 移除 xpm 头文件从 ohoe_headers
xpm 头文件将通过 xpm 模块单独处理。

Co-Authored-By: Agent
Signed-off-by: handyohos <zhangxiaotian@huawei.com>
Change-Id: I7fd3480421c7c846ebe19325a6cfc6343f5291ed
2026-05-15 18:23:01 +08:00
handyohos 3041dfa8d2 #150 Fix container_escape_detection and xpm apply scripts
- Fix path quoting issue in container_escape_detection/apply_ced.sh
- Add xpm header symlinks in xpm/apply_xpm.sh
- Use mkdir -p for safer directory creation
- Add ohoe_headers directory for OpenHarmony specific headers

Co-Authored-By: Agent <noreply@anthropic.com>
Signed-off-by: handyohos <zhangxiaotian@huawei.com>
Change-Id: Ibb407412ab60cea209d0a3b40f17b1febf0ffedb
2026-05-15 10:22:25 +08:00
openharmony_ci 8855197bbb !196 merge master into master
add code sign file verification

Created-by: zfeixiang
Commit-by: zfeixiang
Merged-by: openharmony_ci
Description: ### 一、内容说明(相关的Issue)



### 二、建议测试周期和提测地址  
  建议测试完成时间:xxxx.xx.xx  
  投产上线时间:xxxx.xx.xx  
  提测地址:CI环境/压测环境  
  测试账号:  

### 三、变更内容
  * 3.1 关联PR列表

  * 3.2 数据库和部署说明  
    1. 常规更新 
    2. 重启unicorn
    3. 重启sidekiq
    4. 迁移任务:是否有迁移任务,没有写 "无"
    5. rake脚本:`bundle exec xxx RAILS_ENV = production`;没有写 "无"

  * 3.4 其他技术优化内容(做了什么,变更了什么)
    - 重构了 xxxx 代码
    - xxxx 算法优化


  * 3.5 废弃通知(什么字段、方法弃用?)



  * 3.6  后向不兼容变更(是否有无法向后兼容的变更?)


  
### 四、研发自测点(自测哪些?冒烟用例全部自测?)
  自测测试结论:


### 五、测试关注点(需要提醒QA重点关注的、可能会忽略的地方)
  检查点:

| 需求名称 | 是否影响xx公共模块 | 是否需要xx功能 | 需求升级是否依赖其他子产品 |
|------|------------|----------|---------------|
| xxx  | 否          | 需要       | 不需要           |
|      |            |          |               |

  接口测试:

  性能测试:

  并发测试:

  其他:



See merge request: openharmony/kernel_linux_common_modules!196
OpenHarmony-v7.0-Beta1
2026-02-27 15:39:26 +08:00
openharmony_ci ca2ccdd7ee !190 merge fix-cal-cert-chain-depth into master
fix: fix logic defects in certificate chain length calculation

Created-by: Kira_GYT
Commit-by: Guo Yitao
Merged-by: openharmony_ci
Description: ### 一、内容说明(相关的Issue)



### 二、建议测试周期和提测地址  
  建议测试完成时间:xxxx.xx.xx  
  投产上线时间:xxxx.xx.xx  
  提测地址:CI环境/压测环境  
  测试账号:  

### 三、变更内容
  * 3.1 关联PR列表

  * 3.2 数据库和部署说明  
    1. 常规更新 
    2. 重启unicorn
    3. 重启sidekiq
    4. 迁移任务:是否有迁移任务,没有写 "无"
    5. rake脚本:`bundle exec xxx RAILS_ENV = production`;没有写 "无"

  * 3.4 其他技术优化内容(做了什么,变更了什么)
    - 重构了 xxxx 代码
    - xxxx 算法优化


  * 3.5 废弃通知(什么字段、方法弃用?)



  * 3.6  后向不兼容变更(是否有无法向后兼容的变更?)


  
### 四、研发自测点(自测哪些?冒烟用例全部自测?)
  自测测试结论:


### 五、测试关注点(需要提醒QA重点关注的、可能会忽略的地方)
  检查点:

| 需求名称 | 是否影响xx公共模块 | 是否需要xx功能 | 需求升级是否依赖其他子产品 |
|------|------------|----------|---------------|
| xxx  | 否          | 需要       | 不需要           |
|      |            |          |               |

  接口测试:

  性能测试:

  并发测试:

  其他:



See merge request: openharmony/kernel_linux_common_modules!190
2026-02-26 15:24:03 +08:00
zfeixiang b72d5f15f4 add file verification
Signed-off-by: zfeixiang <zhangfeixiang9@h-partners.com>
2026-02-26 14:35:43 +08:00
Guo Yitao 8d3f74bd9e fix: fix logic defects in certificate chain length calculation
1.Avoid infinite loops caused by circular certificate chains.

2.Prevent potential integer overflow issues.

Signed-off-by: Guo Yitao <414989582@qq.com>
2026-02-26 11:06:17 +08:00
openharmony_ci 69bf1c469f !183 merge master into master
modify dec file api return error code.

Created-by: ligongshao
Commit-by: ligongshaospace
Merged-by: openharmony_ci
Description: ### 一、内容说明(相关的Issue)
https://gitcode.com/openharmony/kernel_linux_common_modules/issues/147


### 二、建议测试周期和提测地址  
  建议测试完成时间:xxxx.xx.xx  
  投产上线时间:xxxx.xx.xx  
  提测地址:CI环境/压测环境  
  测试账号:  

### 三、变更内容
  * 3.1 关联PR列表

  * 3.2 数据库和部署说明  
    1. 常规更新 
    2. 重启unicorn
    3. 重启sidekiq
    4. 迁移任务:是否有迁移任务,没有写 "无"
    5. rake脚本:`bundle exec xxx RAILS_ENV = production`;没有写 "无"

  * 3.4 其他技术优化内容(做了什么,变更了什么)
    - 重构了 xxxx 代码
    - xxxx 算法优化


  * 3.5 废弃通知(什么字段、方法弃用?)



  * 3.6  后向不兼容变更(是否有无法向后兼容的变更?)


  
### 四、研发自测点(自测哪些?冒烟用例全部自测?)
  自测测试结论:


### 五、测试关注点(需要提醒QA重点关注的、可能会忽略的地方)
  检查点:

| 需求名称 | 是否影响xx公共模块 | 是否需要xx功能 | 需求升级是否依赖其他子产品 |
|------|------------|----------|---------------|
| xxx  | 否          | 需要       | 不需要           |
|      |            |          |               |

  接口测试:

  性能测试:

  并发测试:

  其他:



See merge request: openharmony/kernel_linux_common_modules!183
2026-02-09 10:22:36 +08:00
ligongshaospace 55a746a6a9 modify dec file api return error code.
Signed-off-by: ligongshaospace <ligongshao2@huawei.com>
2026-02-05 18:25:42 +08:00
openharmony_ci 566af47cf8 !182 merge master into master
add dec test script

Created-by: staralien
Commit-by: staralien
Merged-by: openharmony_ci
Description: ### 一、内容说明(相关的Issue)

https://gitcode.com/openharmony/kernel_linux_common_modules/issues/145

### 二、建议测试周期和提测地址  
  建议测试完成时间:xxxx.xx.xx  
  投产上线时间:xxxx.xx.xx  
  提测地址:CI环境/压测环境  
  测试账号:  

### 三、变更内容
  * 3.1 关联PR列表

  * 3.2 数据库和部署说明  
    1. 常规更新 
    2. 重启unicorn
    3. 重启sidekiq
    4. 迁移任务:是否有迁移任务,没有写 "无"
    5. rake脚本:`bundle exec xxx RAILS_ENV = production`;没有写 "无"

  * 3.4 其他技术优化内容(做了什么,变更了什么)
    - 重构了 xxxx 代码
    - xxxx 算法优化


  * 3.5 废弃通知(什么字段、方法弃用?)



  * 3.6  后向不兼容变更(是否有无法向后兼容的变更?)


  
### 四、研发自测点(自测哪些?冒烟用例全部自测?)
  自测测试结论:


### 五、测试关注点(需要提醒QA重点关注的、可能会忽略的地方)
  检查点:

| 需求名称 | 是否影响xx公共模块 | 是否需要xx功能 | 需求升级是否依赖其他子产品 |
|------|------------|----------|---------------|
| xxx  | 否          | 需要       | 不需要           |
|      |            |          |               |

  接口测试:

  性能测试:

  并发测试:

  其他:



See merge request: openharmony/kernel_linux_common_modules!182
2026-01-30 21:32:55 +08:00
staralien adafc22688 add dec test script
Signed-off-by: staralien <chengxin@servicecenter-harmonytsc.com>
2026-01-30 17:01:19 +08:00
openharmony_ci 30ccdfecef !178 merge master into master
security:dec:Enable DEC(Dynamic Enhance Control) control policy

Created-by: staralien
Commit-by: staralien
Merged-by: openharmony_ci
Description: ### 一、内容说明(相关的Issue)



### 二、建议测试周期和提测地址  
  建议测试完成时间:xxxx.xx.xx  
  投产上线时间:xxxx.xx.xx  
  提测地址:CI环境/压测环境  
  测试账号:  

### 三、变更内容
  * 3.1 关联PR列表

  * 3.2 数据库和部署说明  
    1. 常规更新 
    2. 重启unicorn
    3. 重启sidekiq
    4. 迁移任务:是否有迁移任务,没有写 "无"
    5. rake脚本:`bundle exec xxx RAILS_ENV = production`;没有写 "无"

  * 3.4 其他技术优化内容(做了什么,变更了什么)
    - 重构了 xxxx 代码
    - xxxx 算法优化


  * 3.5 废弃通知(什么字段、方法弃用?)



  * 3.6  后向不兼容变更(是否有无法向后兼容的变更?)


  
### 四、研发自测点(自测哪些?冒烟用例全部自测?)
  自测测试结论:


### 五、测试关注点(需要提醒QA重点关注的、可能会忽略的地方)
  检查点:

| 需求名称 | 是否影响xx公共模块 | 是否需要xx功能 | 需求升级是否依赖其他子产品 |
|------|------------|----------|---------------|
| xxx  | 否          | 需要       | 不需要           |
|      |            |          |               |

  接口测试:

  性能测试:

  并发测试:

  其他:



See merge request: openharmony/kernel_linux_common_modules!178
2026-01-26 12:11:20 +08:00
staralien 0afc82cd6f security:dec:Enable DEC(Dynamic Enhance Control) control policy
---------------------------------------
DEC(Dynamic Enhance Control) is a dynamic file access enhancement mechanism. It resolves DAC interception and sharefs security risks, precisely controlling file access via a kernel permission database, ioctl interfaces and LSM framework.

DEC will bind the token ID of the application and the paths it can access. The user-level sandboxmanager module and appspawn module will configure the relevant policies. When the application accesses the control paths under the sharefs file system, DEC checks the:
	create,
	read,
	write,
	remove,
	rename,
	move,
	access
of files by the application.

Signed-off-by: staralien <chengxin@servicecenter-harmonytsc.com>
2026-01-21 21:32:28 +08:00
openharmony_ci 887d41a09b !170 update restriction for EXEC
Merge pull request !170 from carmincol/master
OpenHarmony-v6.0.0.1-Release OpenHarmony-v6.0-Release OpenHarmony-v6.0.0.2-Release
2025-06-25 09:28:37 +00:00
carmincol 300e3dfa11 update restriction for EXEC
Signed-off-by: carmincol <changchen6@huawei.com>
2025-06-25 16:04:53 +08:00
openharmony_ci ccf666fa22 !159 avoid rt qos
Merge pull request !159 from edwardcaoyue/master
OpenHarmony-v6.0-Beta1
2025-03-18 01:59:56 +00:00
edwardcaoyue 5a9deebe20 avoid rt qos
Signed-off-by: edwardcaoyue <caoyue24@huawei.com>
2025-03-17 09:28:35 +08:00
openharmony_ci 25c3d60580 !157 Clean code warnings for NewIP
Merge pull request !157 from liangbotong/master
OpenHarmony-v5.1.0-Release
2025-01-15 07:11:37 +00:00
liangbotong 490201934a Clean code warnings for NewIP
Signed-off-by: liangbotong <liangbotong@huawei.com>
2025-01-14 12:13:43 +08:00
openharmony_ci d74531926a !156 CODE SIGN编译依赖问题解决
Merge pull request !156 from 团辉/master
2025-01-08 11:32:48 +00:00
团辉 5ce3950137 code sign 编译依赖问题修改
Signed-off-by: 团辉 <shituanhui@huawei.com>
2025-01-06 20:37:33 +08:00
openharmony_ci 67e427c9c6 !155 仓库中冗余定义 README.OpenSource文件
Merge pull request !155 from zhangshuqi/master
2025-01-02 03:51:36 +00:00
zhangshuqi 6577c716c1 delete useless opensource file
Signed-off-by: zhangshuqi <zhangshuqi3@huawei.com>
2024-12-31 10:31:03 +08:00
openharmony_ci bf84ebbcb4 !150 xpm: 坚盾模式下禁止 anon + x内存申请
Merge pull request !150 from luyifan/master
2024-11-05 11:17:48 +00:00
luyifan 467236e122 Xpm: check secure shield and disable jit
Signed-off-by: luyifan<842825214@qq.com>
2024-11-05 14:21:01 +08:00
openharmony_ci c0c3d97d4d !143 修复code_sign模块锁以及引用计数编码错误,导致的reboot开关机测试高概率出现卡在DAYU界面不开机问题
Merge pull request !143 from 施运理/1015fix
2024-10-18 09:02:03 +00:00
施运理 557bf02b5a update xpm/core/xpm_security_hooks.c.
Signed-off-by: 施运理 <shiyunli@huawei.com>
2024-10-17 13:20:42 +00:00
shiyunli 05e1fad4ed fix
Signed-off-by: shiyunli <shiyunli@huawei.com>
2024-10-15 16:12:51 +08:00
openharmony_ci 9a3bb44771 !141 xpm模块适配linux6.6内核
Merge pull request !141 from 团辉/master
2024-09-13 06:17:39 +00:00
团辉 8d15813344 xpm模块适配linux6.6
Signed-off-by: 团辉 <shituanhui@huawei.com>
2024-09-12 18:25:54 +08:00
openharmony_ci d640a82211 !140 代码签名模块适配linux6.6内核-common_modules
Merge pull request !140 from blc/master
2024-09-12 02:14:56 +00:00
cbl dac3ee979b code_sign 适配6.6内核
Signed-off-by: cbl <caobaolong5@huawei.com>
2024-09-11 18:13:52 +08:00
openharmony_ci 97595f9ca9 !139 安全特性适配linux6.6内核-common_modules
Merge pull request !139 from blc/origin
2024-09-05 08:33:11 +00:00
cbl ec6c1bf379 安全特性适配linux内核6.6
Signed-off-by: cbl <caobaolong5@huawei.com>
2024-08-29 17:51:45 +08:00
openharmony_ci 2e1b469799 !134 check pgtpeinfo off
Merge pull request !134 from Jasonye/master
2024-08-26 04:36:27 +00:00
yeyuning e09c289401 skipping xpm check not elf file
Signed-off-by: yeyuning <yeyuning2@huawei.com>
Change-Id: I817b906944ae8de8af20ba22e9c8167ee3d781dd
2024-08-20 21:39:02 +08:00
openharmony_ci d85522278e !127 rss 默认添加 qos 权限
Merge pull request !127 from plusOneSecond/master
2024-08-14 10:02:12 +00:00
openharmony_ci b4a313edc5 !129 不解压so
Merge pull request !129 from Jasonye/master
2024-08-07 02:31:44 +00:00
openharmony_ci 774f43a748 !132 支持统一采集获取线程名称信息
Merge pull request !132 from negegne/master
2024-08-06 10:46:58 +00:00
negegne 733fdac1dc add thread name to ucollection
Signed-off-by: negegne <zhengshunxin@huawei.com>
2024-08-05 18:02:50 +08:00
openharmony_ci f4b30d239b !131 mac kernel_linux_common_modules
Merge pull request !131 from ligongshao/master
2024-08-05 03:52:42 +00:00
ligongshao 950bac51dc common add mac
Signed-off-by: ligongshao <flamingsword1953@163.com>
Change-Id: I4ce475213751ac2239aea974653c58d6a0e13d90
Signed-off-by: ligongshao <flamingsword1953@163.com>
2024-08-02 16:17:25 +08:00
yeyuning 963c2a2298 不解压
Signed-off-by: yeyuning <yeyuning2@huawei.com>
Change-Id: I56b612316f3d63e16dee0b1303aa312ded86f8ad
2024-07-31 15:54:20 +08:00
openharmony_ci c3adf85085 !128 内核公共模块兼容Linux-6.6内核
Merge pull request !128 from AlgoIdeas/master
2024-07-02 11:35:11 +00:00
minjie.yu b52fba7668 feat: common modules compatible with linux-6.6
Signed-off-by: minjie.yu <minjie.yu@unionman.com.cn>
2024-07-02 09:19:51 +08:00
Brian 839dbbcf03 rss 添加 ioctl 权限
Signed-off-by: Brian <ling.qiwei@foxmail.com>
2024-07-01 20:24:12 +08:00
openharmony_ci 31854cff3e !126 add retry when set cmd buffer
Merge pull request !126 from WoolenSky/master
2024-06-13 13:41:03 +00:00
Sword-Destiny 4531f02f3d add retry when set cmd buffer
Signed-off-by: Sword-Destiny <yuanhonglong@outlook.com>
2024-06-12 21:18:33 +08:00