Commit Graph

226 Commits

Author SHA1 Message Date
openharmony_ci 30ccdfecef !178 merge master into master
security:dec:Enable DEC(Dynamic Enhance Control) control policy

Created-by: staralien
Commit-by: staralien
Merged-by: openharmony_ci
Description: ### 一、内容说明(相关的Issue)



### 二、建议测试周期和提测地址  
  建议测试完成时间:xxxx.xx.xx  
  投产上线时间:xxxx.xx.xx  
  提测地址:CI环境/压测环境  
  测试账号:  

### 三、变更内容
  * 3.1 关联PR列表

  * 3.2 数据库和部署说明  
    1. 常规更新 
    2. 重启unicorn
    3. 重启sidekiq
    4. 迁移任务:是否有迁移任务,没有写 "无"
    5. rake脚本:`bundle exec xxx RAILS_ENV = production`;没有写 "无"

  * 3.4 其他技术优化内容(做了什么,变更了什么)
    - 重构了 xxxx 代码
    - xxxx 算法优化


  * 3.5 废弃通知(什么字段、方法弃用?)



  * 3.6  后向不兼容变更(是否有无法向后兼容的变更?)


  
### 四、研发自测点(自测哪些?冒烟用例全部自测?)
  自测测试结论:


### 五、测试关注点(需要提醒QA重点关注的、可能会忽略的地方)
  检查点:

| 需求名称 | 是否影响xx公共模块 | 是否需要xx功能 | 需求升级是否依赖其他子产品 |
|------|------------|----------|---------------|
| xxx  | 否          | 需要       | 不需要           |
|      |            |          |               |

  接口测试:

  性能测试:

  并发测试:

  其他:



See merge request: openharmony/kernel_linux_common_modules!178
2026-01-26 12:11:20 +08:00
staralien 0afc82cd6f security:dec:Enable DEC(Dynamic Enhance Control) control policy
---------------------------------------
DEC(Dynamic Enhance Control) is a dynamic file access enhancement mechanism. It resolves DAC interception and sharefs security risks, precisely controlling file access via a kernel permission database, ioctl interfaces and LSM framework.

DEC will bind the token ID of the application and the paths it can access. The user-level sandboxmanager module and appspawn module will configure the relevant policies. When the application accesses the control paths under the sharefs file system, DEC checks the:
	create,
	read,
	write,
	remove,
	rename,
	move,
	access
of files by the application.

Signed-off-by: staralien <chengxin@servicecenter-harmonytsc.com>
2026-01-21 21:32:28 +08:00
openharmony_ci 887d41a09b !170 update restriction for EXEC
Merge pull request !170 from carmincol/master
OpenHarmony-v6.0.0.1-Release OpenHarmony-v6.0-Release OpenHarmony-v6.0.0.2-Release
2025-06-25 09:28:37 +00:00
carmincol 300e3dfa11 update restriction for EXEC
Signed-off-by: carmincol <changchen6@huawei.com>
2025-06-25 16:04:53 +08:00
openharmony_ci ccf666fa22 !159 avoid rt qos
Merge pull request !159 from edwardcaoyue/master
OpenHarmony-v6.0-Beta1
2025-03-18 01:59:56 +00:00
edwardcaoyue 5a9deebe20 avoid rt qos
Signed-off-by: edwardcaoyue <caoyue24@huawei.com>
2025-03-17 09:28:35 +08:00
openharmony_ci 25c3d60580 !157 Clean code warnings for NewIP
Merge pull request !157 from liangbotong/master
OpenHarmony-v5.1.0-Release
2025-01-15 07:11:37 +00:00
liangbotong 490201934a Clean code warnings for NewIP
Signed-off-by: liangbotong <liangbotong@huawei.com>
2025-01-14 12:13:43 +08:00
openharmony_ci d74531926a !156 CODE SIGN编译依赖问题解决
Merge pull request !156 from 团辉/master
2025-01-08 11:32:48 +00:00
团辉 5ce3950137 code sign 编译依赖问题修改
Signed-off-by: 团辉 <shituanhui@huawei.com>
2025-01-06 20:37:33 +08:00
openharmony_ci 67e427c9c6 !155 仓库中冗余定义 README.OpenSource文件
Merge pull request !155 from zhangshuqi/master
2025-01-02 03:51:36 +00:00
zhangshuqi 6577c716c1 delete useless opensource file
Signed-off-by: zhangshuqi <zhangshuqi3@huawei.com>
2024-12-31 10:31:03 +08:00
openharmony_ci bf84ebbcb4 !150 xpm: 坚盾模式下禁止 anon + x内存申请
Merge pull request !150 from luyifan/master
2024-11-05 11:17:48 +00:00
luyifan 467236e122 Xpm: check secure shield and disable jit
Signed-off-by: luyifan<842825214@qq.com>
2024-11-05 14:21:01 +08:00
openharmony_ci c0c3d97d4d !143 修复code_sign模块锁以及引用计数编码错误,导致的reboot开关机测试高概率出现卡在DAYU界面不开机问题
Merge pull request !143 from 施运理/1015fix
2024-10-18 09:02:03 +00:00
施运理 557bf02b5a update xpm/core/xpm_security_hooks.c.
Signed-off-by: 施运理 <shiyunli@huawei.com>
2024-10-17 13:20:42 +00:00
shiyunli 05e1fad4ed fix
Signed-off-by: shiyunli <shiyunli@huawei.com>
2024-10-15 16:12:51 +08:00
openharmony_ci 9a3bb44771 !141 xpm模块适配linux6.6内核
Merge pull request !141 from 团辉/master
2024-09-13 06:17:39 +00:00
团辉 8d15813344 xpm模块适配linux6.6
Signed-off-by: 团辉 <shituanhui@huawei.com>
2024-09-12 18:25:54 +08:00
openharmony_ci d640a82211 !140 代码签名模块适配linux6.6内核-common_modules
Merge pull request !140 from blc/master
2024-09-12 02:14:56 +00:00
cbl dac3ee979b code_sign 适配6.6内核
Signed-off-by: cbl <caobaolong5@huawei.com>
2024-09-11 18:13:52 +08:00
openharmony_ci 97595f9ca9 !139 安全特性适配linux6.6内核-common_modules
Merge pull request !139 from blc/origin
2024-09-05 08:33:11 +00:00
cbl ec6c1bf379 安全特性适配linux内核6.6
Signed-off-by: cbl <caobaolong5@huawei.com>
2024-08-29 17:51:45 +08:00
openharmony_ci 2e1b469799 !134 check pgtpeinfo off
Merge pull request !134 from Jasonye/master
2024-08-26 04:36:27 +00:00
yeyuning e09c289401 skipping xpm check not elf file
Signed-off-by: yeyuning <yeyuning2@huawei.com>
Change-Id: I817b906944ae8de8af20ba22e9c8167ee3d781dd
2024-08-20 21:39:02 +08:00
openharmony_ci d85522278e !127 rss 默认添加 qos 权限
Merge pull request !127 from plusOneSecond/master
2024-08-14 10:02:12 +00:00
openharmony_ci b4a313edc5 !129 不解压so
Merge pull request !129 from Jasonye/master
2024-08-07 02:31:44 +00:00
openharmony_ci 774f43a748 !132 支持统一采集获取线程名称信息
Merge pull request !132 from negegne/master
2024-08-06 10:46:58 +00:00
negegne 733fdac1dc add thread name to ucollection
Signed-off-by: negegne <zhengshunxin@huawei.com>
2024-08-05 18:02:50 +08:00
openharmony_ci f4b30d239b !131 mac kernel_linux_common_modules
Merge pull request !131 from ligongshao/master
2024-08-05 03:52:42 +00:00
ligongshao 950bac51dc common add mac
Signed-off-by: ligongshao <flamingsword1953@163.com>
Change-Id: I4ce475213751ac2239aea974653c58d6a0e13d90
Signed-off-by: ligongshao <flamingsword1953@163.com>
2024-08-02 16:17:25 +08:00
yeyuning 963c2a2298 不解压
Signed-off-by: yeyuning <yeyuning2@huawei.com>
Change-Id: I56b612316f3d63e16dee0b1303aa312ded86f8ad
2024-07-31 15:54:20 +08:00
openharmony_ci c3adf85085 !128 内核公共模块兼容Linux-6.6内核
Merge pull request !128 from AlgoIdeas/master
2024-07-02 11:35:11 +00:00
minjie.yu b52fba7668 feat: common modules compatible with linux-6.6
Signed-off-by: minjie.yu <minjie.yu@unionman.com.cn>
2024-07-02 09:19:51 +08:00
Brian 839dbbcf03 rss 添加 ioctl 权限
Signed-off-by: Brian <ling.qiwei@foxmail.com>
2024-07-01 20:24:12 +08:00
openharmony_ci 31854cff3e !126 add retry when set cmd buffer
Merge pull request !126 from WoolenSky/master
2024-06-13 13:41:03 +00:00
Sword-Destiny 4531f02f3d add retry when set cmd buffer
Signed-off-by: Sword-Destiny <yuanhonglong@outlook.com>
2024-06-12 21:18:33 +08:00
openharmony_ci 23b0bc43ab !123 修正xpm模块文本描述中存在语序不通且有歧义的问题
Merge pull request !123 from 柳金/master
2024-05-22 08:11:03 +00:00
柳金 ed633de43e 修正xpm模块文本描述中存在语序不同且有歧义的问题
Signed-off-by: 柳金 <ljin0613@163.com>
2024-05-21 08:25:01 +00:00
openharmony_ci 0a6c5b69fc !120 非开发者模式下开机后下发开发者证书
Merge pull request !120 from yangyangyang/20240507
2024-05-16 13:50:57 +00:00
yang1946 4f5290c65f 非开发者模式下开机后下发开发者证书
Signed-off-by: yang1946 <yuzhaoyang1@huawei.com>
2024-05-15 09:53:41 +08:00
openharmony_ci 11ccadcd4f !121 进程cpu三方采集线程负载安全优化
Merge pull request !121 from 杨世琦_hw/master
2024-05-13 06:21:53 +00:00
杨世琦_hw 768b13b1f9 add app thread count ioctrol
Signed-off-by: 杨世琦_hw <670097973@qq.com>
2024-05-10 21:11:04 +08:00
openharmony_ci 4b48e9228d !119 NewIP增加READ_ONCE读取sk->sk_prot;增加INET_PROTOSW_ICSK标志时的初始化
Merge pull request !119 from 史云飞/master
OpenHarmony-v5.0-Beta1
2024-04-26 03:29:03 +00:00
shiyunfei 1bca2b6443 kernel_linux_5.10 master 分支已合入CVE同步至NewIP
https://gitee.com/openharmony/kernel_linux_5.10/pulls/1348
https://gitee.com/openharmony/kernel_linux_5.10/pulls/531

Signed-off-by: shiyunfei <shiyunfei3@huawei.com>
2024-04-24 17:16:40 +08:00
openharmony_ci 1d3dbf5051 !118 采集cpu负载pid 校验修改为current->tgid
Merge pull request !118 from 杨世琦_hw/master
2024-04-19 01:41:02 +00:00
杨世琦_hw 0429f24602 current pid verify change to tgid
Signed-off-by: 杨世琦_hw <670097973@qq.com>
2024-04-18 19:32:47 +08:00
openharmony_ci 529d3d613f !115 进程cpu负载信息采集优化
Merge pull request !115 from 杨世琦_hw/master
2024-04-02 01:35:55 +00:00
杨世琦_hw 65e17e77e7 optimise collect process count
Signed-off-by: 杨世琦_hw <670097973@qq.com>
2024-04-01 11:17:05 +08:00
openharmony_ci 5ce39b27e1 !113 code check 整改
Merge pull request !113 from 杨世琦_hw/master
2024-03-27 11:41:58 +00:00