mirror of
https://github.com/openharmony/kernel_linux_common_modules.git
synced 2026-08-27 01:31:36 -04:00
staralien
0afc82cd6f
--------------------------------------- DEC(Dynamic Enhance Control) is a dynamic file access enhancement mechanism. It resolves DAC interception and sharefs security risks, precisely controlling file access via a kernel permission database, ioctl interfaces and LSM framework. DEC will bind the token ID of the application and the paths it can access. The user-level sandboxmanager module and appspawn module will configure the relevant policies. When the application accesses the control paths under the sharefs file system, DEC checks the: create, read, write, remove, rename, move, access of files by the application. Signed-off-by: staralien <chengxin@servicecenter-harmonytsc.com>
18 lines
632 B
Makefile
18 lines
632 B
Makefile
# SPDX-License-Identifier: GPL-2.0-or-later
|
|
# Copyright (c) 2024 Huawei Device Co., Ltd.
|
|
#
|
|
obj-$(CONFIG_SECURITY_DEC) += \
|
|
dec_constraint_tree.o dec_kernel_interface.o dec_misc.o dec_path_tree.o dec_security_hook.o dec_utils.o sysctl.o
|
|
|
|
ccflags-$(CONFIG_SECURITY_DEC) += \
|
|
-I$(srctree)/fs/dec
|
|
|
|
$(addprefix $(obj)/,$(obj-y)): $(obj)/flask.h
|
|
|
|
quiet_cmd_flask = GEN $(obj)/flask.h $(obj)/av_permissions.h
|
|
cmd_flask = scripts/selinux/genheaders/genheaders $(obj)/flask.h $(obj)/av_permissions.h
|
|
|
|
targets += flask.h av_permissions.h
|
|
$(obj)/flask.h: $(srctree)/security/selinux/include/classmap.h FORCE
|
|
$(call if_changed,flask)
|