staralien
0afc82cd6f
security:dec:Enable DEC(Dynamic Enhance Control) control policy
...
---------------------------------------
DEC(Dynamic Enhance Control) is a dynamic file access enhancement mechanism. It resolves DAC interception and sharefs security risks, precisely controlling file access via a kernel permission database, ioctl interfaces and LSM framework.
DEC will bind the token ID of the application and the paths it can access. The user-level sandboxmanager module and appspawn module will configure the relevant policies. When the application accesses the control paths under the sharefs file system, DEC checks the:
create,
read,
write,
remove,
rename,
move,
access
of files by the application.
Signed-off-by: staralien <chengxin@servicecenter-harmonytsc.com >
2026-01-21 21:32:28 +08:00
openharmony_ci
887d41a09b
!170 update restriction for EXEC
...
Merge pull request !170 from carmincol/master
OpenHarmony-v6.0.0.1-Release
OpenHarmony-v6.0-Release
OpenHarmony-v6.0.0.2-Release
2025-06-25 09:28:37 +00:00
carmincol
300e3dfa11
update restriction for EXEC
...
Signed-off-by: carmincol <changchen6@huawei.com >
2025-06-25 16:04:53 +08:00
openharmony_ci
ccf666fa22
!159 avoid rt qos
...
Merge pull request !159 from edwardcaoyue/master
OpenHarmony-v6.0-Beta1
2025-03-18 01:59:56 +00:00
edwardcaoyue
5a9deebe20
avoid rt qos
...
Signed-off-by: edwardcaoyue <caoyue24@huawei.com >
2025-03-17 09:28:35 +08:00
openharmony_ci
25c3d60580
!157 Clean code warnings for NewIP
...
Merge pull request !157 from liangbotong/master
OpenHarmony-v5.1.0-Release
2025-01-15 07:11:37 +00:00
liangbotong
490201934a
Clean code warnings for NewIP
...
Signed-off-by: liangbotong <liangbotong@huawei.com >
2025-01-14 12:13:43 +08:00
openharmony_ci
d74531926a
!156 CODE SIGN编译依赖问题解决
...
Merge pull request !156 from 团辉/master
2025-01-08 11:32:48 +00:00
团辉
5ce3950137
code sign 编译依赖问题修改
...
Signed-off-by: 团辉 <shituanhui@huawei.com >
2025-01-06 20:37:33 +08:00
openharmony_ci
67e427c9c6
!155 仓库中冗余定义 README.OpenSource文件
...
Merge pull request !155 from zhangshuqi/master
2025-01-02 03:51:36 +00:00
zhangshuqi
6577c716c1
delete useless opensource file
...
Signed-off-by: zhangshuqi <zhangshuqi3@huawei.com >
2024-12-31 10:31:03 +08:00
openharmony_ci
bf84ebbcb4
!150 xpm: 坚盾模式下禁止 anon + x内存申请
...
Merge pull request !150 from luyifan/master
2024-11-05 11:17:48 +00:00
luyifan
467236e122
Xpm: check secure shield and disable jit
...
Signed-off-by: luyifan<842825214@qq.com >
2024-11-05 14:21:01 +08:00
openharmony_ci
c0c3d97d4d
!143 修复code_sign模块锁以及引用计数编码错误,导致的reboot开关机测试高概率出现卡在DAYU界面不开机问题
...
Merge pull request !143 from 施运理/1015fix
2024-10-18 09:02:03 +00:00
施运理
557bf02b5a
update xpm/core/xpm_security_hooks.c.
...
Signed-off-by: 施运理 <shiyunli@huawei.com >
2024-10-17 13:20:42 +00:00
shiyunli
05e1fad4ed
fix
...
Signed-off-by: shiyunli <shiyunli@huawei.com >
2024-10-15 16:12:51 +08:00
openharmony_ci
9a3bb44771
!141 xpm模块适配linux6.6内核
...
Merge pull request !141 from 团辉/master
2024-09-13 06:17:39 +00:00
团辉
8d15813344
xpm模块适配linux6.6
...
Signed-off-by: 团辉 <shituanhui@huawei.com >
2024-09-12 18:25:54 +08:00
openharmony_ci
d640a82211
!140 代码签名模块适配linux6.6内核-common_modules
...
Merge pull request !140 from blc/master
2024-09-12 02:14:56 +00:00
cbl
dac3ee979b
code_sign 适配6.6内核
...
Signed-off-by: cbl <caobaolong5@huawei.com >
2024-09-11 18:13:52 +08:00
openharmony_ci
97595f9ca9
!139 安全特性适配linux6.6内核-common_modules
...
Merge pull request !139 from blc/origin
2024-09-05 08:33:11 +00:00
cbl
ec6c1bf379
安全特性适配linux内核6.6
...
Signed-off-by: cbl <caobaolong5@huawei.com >
2024-08-29 17:51:45 +08:00
openharmony_ci
2e1b469799
!134 check pgtpeinfo off
...
Merge pull request !134 from Jasonye/master
2024-08-26 04:36:27 +00:00
yeyuning
e09c289401
skipping xpm check not elf file
...
Signed-off-by: yeyuning <yeyuning2@huawei.com >
Change-Id: I817b906944ae8de8af20ba22e9c8167ee3d781dd
2024-08-20 21:39:02 +08:00
openharmony_ci
d85522278e
!127 rss 默认添加 qos 权限
...
Merge pull request !127 from plusOneSecond/master
2024-08-14 10:02:12 +00:00
openharmony_ci
b4a313edc5
!129 不解压so
...
Merge pull request !129 from Jasonye/master
2024-08-07 02:31:44 +00:00
openharmony_ci
774f43a748
!132 支持统一采集获取线程名称信息
...
Merge pull request !132 from negegne/master
2024-08-06 10:46:58 +00:00
negegne
733fdac1dc
add thread name to ucollection
...
Signed-off-by: negegne <zhengshunxin@huawei.com >
2024-08-05 18:02:50 +08:00
openharmony_ci
f4b30d239b
!131 mac kernel_linux_common_modules
...
Merge pull request !131 from ligongshao/master
2024-08-05 03:52:42 +00:00
ligongshao
950bac51dc
common add mac
...
Signed-off-by: ligongshao <flamingsword1953@163.com >
Change-Id: I4ce475213751ac2239aea974653c58d6a0e13d90
Signed-off-by: ligongshao <flamingsword1953@163.com >
2024-08-02 16:17:25 +08:00
yeyuning
963c2a2298
不解压
...
Signed-off-by: yeyuning <yeyuning2@huawei.com >
Change-Id: I56b612316f3d63e16dee0b1303aa312ded86f8ad
2024-07-31 15:54:20 +08:00
openharmony_ci
c3adf85085
!128 内核公共模块兼容Linux-6.6内核
...
Merge pull request !128 from AlgoIdeas/master
2024-07-02 11:35:11 +00:00
minjie.yu
b52fba7668
feat: common modules compatible with linux-6.6
...
Signed-off-by: minjie.yu <minjie.yu@unionman.com.cn >
2024-07-02 09:19:51 +08:00
Brian
839dbbcf03
rss 添加 ioctl 权限
...
Signed-off-by: Brian <ling.qiwei@foxmail.com >
2024-07-01 20:24:12 +08:00
openharmony_ci
31854cff3e
!126 add retry when set cmd buffer
...
Merge pull request !126 from WoolenSky/master
2024-06-13 13:41:03 +00:00
Sword-Destiny
4531f02f3d
add retry when set cmd buffer
...
Signed-off-by: Sword-Destiny <yuanhonglong@outlook.com >
2024-06-12 21:18:33 +08:00
openharmony_ci
23b0bc43ab
!123 修正xpm模块文本描述中存在语序不通且有歧义的问题
...
Merge pull request !123 from 柳金/master
2024-05-22 08:11:03 +00:00
柳金
ed633de43e
修正xpm模块文本描述中存在语序不同且有歧义的问题
...
Signed-off-by: 柳金 <ljin0613@163.com >
2024-05-21 08:25:01 +00:00
openharmony_ci
0a6c5b69fc
!120 非开发者模式下开机后下发开发者证书
...
Merge pull request !120 from yangyangyang/20240507
2024-05-16 13:50:57 +00:00
yang1946
4f5290c65f
非开发者模式下开机后下发开发者证书
...
Signed-off-by: yang1946 <yuzhaoyang1@huawei.com >
2024-05-15 09:53:41 +08:00
openharmony_ci
11ccadcd4f
!121 进程cpu三方采集线程负载安全优化
...
Merge pull request !121 from 杨世琦_hw/master
2024-05-13 06:21:53 +00:00
杨世琦_hw
768b13b1f9
add app thread count ioctrol
...
Signed-off-by: 杨世琦_hw <670097973@qq.com >
2024-05-10 21:11:04 +08:00
openharmony_ci
4b48e9228d
!119 NewIP增加READ_ONCE读取sk->sk_prot;增加INET_PROTOSW_ICSK标志时的初始化
...
Merge pull request !119 from 史云飞/master
OpenHarmony-v5.0-Beta1
2024-04-26 03:29:03 +00:00
shiyunfei
1bca2b6443
kernel_linux_5.10 master 分支已合入CVE同步至NewIP
...
https://gitee.com/openharmony/kernel_linux_5.10/pulls/1348
https://gitee.com/openharmony/kernel_linux_5.10/pulls/531
Signed-off-by: shiyunfei <shiyunfei3@huawei.com >
2024-04-24 17:16:40 +08:00
openharmony_ci
1d3dbf5051
!118 采集cpu负载pid 校验修改为current->tgid
...
Merge pull request !118 from 杨世琦_hw/master
2024-04-19 01:41:02 +00:00
杨世琦_hw
0429f24602
current pid verify change to tgid
...
Signed-off-by: 杨世琦_hw <670097973@qq.com >
2024-04-18 19:32:47 +08:00
openharmony_ci
529d3d613f
!115 进程cpu负载信息采集优化
...
Merge pull request !115 from 杨世琦_hw/master
2024-04-02 01:35:55 +00:00
杨世琦_hw
65e17e77e7
optimise collect process count
...
Signed-off-by: 杨世琦_hw <670097973@qq.com >
2024-04-01 11:17:05 +08:00
openharmony_ci
5ce39b27e1
!113 code check 整改
...
Merge pull request !113 from 杨世琦_hw/master
2024-03-27 11:41:58 +00:00
杨世琦_hw
86f445eeb2
fix code check
...
Signed-off-by: 杨世琦_hw <670097973@qq.com >
2024-03-27 18:35:37 +08:00