staralien 0afc82cd6f security:dec:Enable DEC(Dynamic Enhance Control) control policy
---------------------------------------
DEC(Dynamic Enhance Control) is a dynamic file access enhancement mechanism. It resolves DAC interception and sharefs security risks, precisely controlling file access via a kernel permission database, ioctl interfaces and LSM framework.

DEC will bind the token ID of the application and the paths it can access. The user-level sandboxmanager module and appspawn module will configure the relevant policies. When the application accesses the control paths under the sharefs file system, DEC checks the:
	create,
	read,
	write,
	remove,
	rename,
	move,
	access
of files by the application.

Signed-off-by: staralien <chengxin@servicecenter-harmonytsc.com>
2026-01-21 21:32:28 +08:00
2023-11-25 20:13:30 +08:00
2025-01-14 12:13:43 +08:00
2025-03-17 09:28:35 +08:00
2023-11-25 11:45:59 +08:00
2024-08-02 16:17:25 +08:00
2024-08-02 16:17:25 +08:00
2023-03-31 09:11:25 +00:00
2023-11-30 19:57:34 +08:00

kernel_linux_common_modules

Description

{When you're done, you can delete the content in this README and update the file with details for others getting started with your repository}

Software Architecture

Software architecture description

Installation

  1. xxxx
  2. xxxx
  3. xxxx

Instructions

  1. xxxx
  2. xxxx
  3. xxxx

Contribution

  1. Fork the repository
  2. Create Feat_xxx branch
  3. Commit your code
  4. Create Pull Request

Gitee Feature

  1. You can use Readme_XXX.md to support different languages, such as Readme_en.md, Readme_zh.md
  2. Gitee blog blog.gitee.com
  3. Explore open source project https://gitee.com/explore
  4. The most valuable open source project GVP
  5. The manual of Gitee https://gitee.com/help
  6. The most popular members https://gitee.com/gitee-stars/
S
Description
该仓为Linux内核通用模块仓。通用内核模块可在OpenHarmony支持的任何linux内核版本上使用。新增模块需要通过内核SIG会议评审,模块规则及评审流程详见本仓README。
Readme 4.4 MiB
Languages
C 79.4%
Shell 14.8%
C++ 2.8%
Makefile 1.2%
Lua 1.1%
Other 0.6%