88 Commits

Author SHA1 Message Date
panyongchaox cb3e3799ad fix(tokensync): validate socket descriptors
Issue: https://gitcode.com/openharmony/security_security_component_manager/issues/415

Signed-off-by: panyongchao <panyongchao3@huawei.com>

Co-Authored-By: Agent

AI[100%] Human Fixed[0%] Human[0%] AI Adopted[100%]
Co-authored-by: codex (gpt-5.6-sol) <ai@local>

Change-Id: Ib6c3661512f1960dd7eddfa83459e0173b6dc6f2
2026-08-21 12:36:31 +08:00
chennian 93e3480a7a 修改告警问题-2
Signed-off-by: chennian <chennian1@huawei.com>

AI[99%] Human Fixed[0%] Human[1%] AI Adopted[100%]
Co-authored-by: codex (gpt-5.6-terra) <ai@local>
Co-authored-by: codex (unknown) <ai@local>
Co-authored-by: codex (gpt-5.6-terra) <ai@local>
Co-authored-by: codex (unknown) <ai@local>

Change-Id: Ib2ad66026f1672e4858562079033da1c0266a3cf
2026-08-06 23:45:50 +08:00
lihehe 250a27cb12 simplify app docments
Signed-off-by: lihehe <lihehao@huawei.com>

🤖‍ AI[12%] 👌 AI Adopted[12%] 🧑 Human[88%]

Change-Id: I133bc77fb39d569b22d3857ce58ced115c0dfc31
2026-07-28 14:12:10 +08:00
xia-bubai e999a7b0ca revert spm code
Signed-off-by: xia-bubai <xiacong5@huawei.com>

🤖 AI[0%] 🔧 Human Fixed[0%] 🧑 Human[100%] 👌 AI Adopted[0%]

Change-Id: I02659caf0f6043bf415ee70325ced4a78bf8d947
2026-07-16 23:30:24 +08:00
chennian 8d70d2b1c2 增加基于subProfileId的权限弹框和权限记录接口
Co-Authored-By: Agent

Signed-off-by: chennian <chennian1@huawei.com>
Change-Id: I56c294e911b594a117108ec7f11012ed6d16596b
2026-07-13 19:49:16 +08:00
LSQ 33afc3c696 测试验证
Signed-off-by: LSQ <linshuqing2@huawei.com>
2026-06-13 20:00:19 +08:00
LSQ 171bdfd417 补充测试,调整提示词
Signed-off-by: LSQ <linshuqing2@huawei.com>
2026-06-11 09:29:48 +08:00
LSQ 8462c502e4 app 通过 CLI 通道 拉起二进制进程,给这个 app process 的 tokenId 打 tag
Signed-off-by: LSQ <linshuqing2@huawei.com>
2026-06-06 18:18:36 +08:00
wangyinghao 42eb76419e Add spm
Signed-off-by: wangyinghao <wangyinghao12@huawei.com>
Change-Id: Ic6547beb0b1306c436f3bdf2135670f8274c1fb1
Signed-off-by: wangyinghao <wangyinghao12@huawei.com>
2026-05-30 09:40:30 +08:00
openharmony_ci 147d2ac14a !4463 merge master into master
优化atm dump回显

Created-by: chennian
Commit-by: chennian
Merged-by: openharmony_ci
Description: ### 关联的issue:
https://gitcode.com/openharmony/security_access_token/issues/3281
### 修改描述(修改功能描述,规格变更说明):

### 测试用例(附上截图,不涉及不需要说明不涉及原因):
1、TDD:
![image.png](https://raw.gitcode.com/user-images/assets/4390047/d117219a-3b7a-414d-8928-6cf0adc2a0f3/image.png 'image.png')
2、XTS:

3、手工用例(自验证步骤/预期结果/实际结果):
![image.png](https://raw.gitcode.com/user-images/assets/4390047/fa910501-f93f-4693-bd2b-04d31636a41e/image.png 'image.png')
### 兼容性上库自检:
- [x] 不涉及API功能发生变化
- [x] 不涉及改变回调函数或生命周期的触发时机或时序,或删除生命周期和回调函数
- [x] 不涉及参数的规格发生了变化,例如取值范围缩小等
- [x] 不涉及对外接口新增权限校验
- [x] 不涉及接口的使用约束规格收紧,例如权限开放范围变化
- [x] 不涉及系统可创建的实例数量收紧
- [x] 不涉及修改了接口返回的数据
- [x] 未新增错误抛出,包括新增错误码、对已有的场景从不会抛错误码变成会抛出错误
- [x] 未修改已有的错误码,对于相同的输入原本抛出A错误码变成了抛出B错误码
- [x] 接口性能未出现明显劣化

### 权限合入自检:
- [ ] 是否需要合入权限定义
    - [ ] 仅向系统服务开放的权限(availableType为SERVICE的权限)不允许合入global_system_resources仓
    - [ ] 非SERVICE的权限与global_system_resources联合构建,即两笔pr关联同一个issue
    - [ ] 填入必要参数name/grantMode/availableLevel/since/provisionEnable/distributedSceneEnable, 且与global_system_resources中声明(如果有)一致
    - [ ] 声明权限生效的设备平台范围deviceTypes,以列表方式声明("deviceTypes" : [ "xxx", "xxx"]),权限在所有设备通用为"general",非全平台生效按需填写,包括但不限于"phone"、"wearable"、"tablet"、"2in1"、"tv"、"car"

### 安全编码自检:
- [x] 裸指针避免通过隐式转换构造为sptr
- [x] json对象在取值之前必须先判断类型,避免类型不匹配
- [x] 序列化时必须对传入的数组大小进行校验,避免出现超大数组
- [x] 避免使用未明确位宽的整型,选择使用int8_t、uint8_t等类型
- [x] 外部传入的路径要做规范化校验,对路径中的.、..、../等特殊字符严格校验
- [x] 指针变量、表示资源描述符的变量、bool变量必须赋初值
- [x] readParcelable获取的对象使用前需要判空
- [x] 分配和释放内存的函数需要成对出现
- [x] 申请内存后异常退出前需要及时进行内存释放
- [x] 内存申请前必须对内存大小进行合法性校验
- [x] 内存分配后必须判断是否成功
- [x] 禁止打印文件路径、口令等敏感信息,如有需要,使用private修饰
- [x] 禁止打印内存地址
- [x] 整数之间运算时必须严格检查,确保不会出现溢出、反转、除0
- [x] 禁止对有符号整数进行位操作符运算
- [x] 循环次数如果收外部数据控制,需要检验其合法性
- [x] 必须检查安全函数的返回值,并进行正确处理

### 日志规范自检:
- [x] 【规则】高频代码的正常流程中禁止打印日志
- [x] 【规则】在基本不可能发生的点必须要打印日志
- [x] 【规则】事件记录的日志使用who do what 主谓宾的形式打印
- [x] 【规则】状态变化的日志打印使用state_name:s1->s2, reason:msg的形式打印
- [x] 【规则】参数值的日志打印使用name1=value1, name2=value2…的形式打印


See merge request: openharmony/security_access_token!4463
2026-05-22 19:12:54 +08:00
chennian 4ac8afcfc3 优化atm dump回显
Co-Authored-By: Agent

Signed-off-by: chennian <chennian1@huawei.com>
2026-05-22 16:09:06 +08:00
xia-bubai be23411c00 add native spm adapter
Signed-off-by: xia-bubai <xiacong5@huawei.com>
Change-Id: I2580d4ed65823b5f5d369541523125d8060d021d
2026-05-22 14:36:22 +08:00
chennian 3590f0df77 add ut for atm and short grant permission
Co-Authored-By: Agent

Signed-off-by: chennian <chennian1@huawei.com>
Change-Id: I96dbe5b65cab5e151bb391735beb09a4ff103c78
2026-03-23 17:31:14 +08:00
chennian 785d6ce23b add DATM_BUILD_VARIANT_USER_ENABL for atm
Signed-off-by: chennian <chennian1@huawei.com>
Change-Id: Ifb3db18732bf822dde41da487ffff3f27f31e6b0
2026-03-18 19:51:51 +08:00
chennian ec011380e6 add extra of AddPermissionUsedRecord
Co-Authored-By: Agent

Signed-off-by: chennian <chennian1@huawei.com>
Change-Id: Ife4b303601d2050f22e42d69d39ec76e96e85d13
2026-03-16 12:59:59 +08:00
chennian 7dada8bf8b add atm tdd
Co-Authored-By: Agent
Signed-off-by: chennian <chennian1@huawei.com>
Change-Id: I45e0dac6b0ad5b15d6bd3f44017ae337f87f5f9f
2026-03-06 14:58:08 +08:00
chennian 24b190fa19 atm bugfix
Co-Authored-By: Agent
Signed-off-by: chennian <chennian1@huawei.com>
Change-Id: I2162517003cd2073ea66286871bf498139fec993
2026-03-01 16:07:11 +08:00
chennian d8a432b298 add atm tdd
Co-Authored-By: Agent
Signed-off-by: chennian <chennian1@huawei.com>
Change-Id: I61eabe4cea67700cc931c5c40040e4f31984781a
2026-02-28 18:46:52 +08:00
chennian f3c76d8bc6 添加批量查询接口
Signed-off-by: chennian <chennian1@huawei.com>
Change-Id: I31c291bb4d5689ed8abe10916e78490b8777aeb6
2026-02-27 15:46:52 +08:00
chennian c093480850 add submodle agent
Signed-off-by: chennian <chennian1@huawei.com>
Change-Id: I41810dca499d7a45998392153d5e310805370b6f
2026-02-12 21:46:03 +08:00
chennian d8462b1df0 测试用例重构优化
Signed-off-by: chennian <chennian1@huawei.com>
Change-Id: Ife191840e8f011e0a12674bc92315674e566a582
2026-01-30 12:39:41 +08:00
wu-liushuan 3ae06c63d8 命名修改20250915
Signed-off-by: wu-liushuan <wuliushuan.30044128@h-partners.com>
Change-Id: I4b584f67ec38accebcd5151256158b6d8b6707bc
2025-09-18 21:09:33 +08:00
bigtea 9192fe2085 Add MANUAL_SETTING type v2
Signed-off-by: bigtea <tianqushen@h-partners.com>
2025-08-28 22:02:04 +08:00
chennian 19c109e048 修改user版本编译问题
Signed-off-by: chennian <chennian1@huawei.com>
2025-08-24 01:46:59 +00:00
chennian 8a5ff08dd9 Modify ai warning
Signed-off-by: chennian <chennian1@huawei.com>
Change-Id: Id0eca7ba635bbf8066dfd1ac8636b91cdde00513
2025-08-22 16:30:47 +08:00
chennian b1ddd0517a Modify dump info
Signed-off-by: chennian <chennian1@huawei.com>
Change-Id: Idb59809eecc8a2022ce348519366d211261a7363
2025-08-18 17:15:43 +08:00
zhouyan d8d48cfd4c atm工具添加权限定义打印
Signed-off-by: zhouyan <zhouyan160@huawei.com>
Change-Id: If6520e87c4d405334cab81c510ea0238c946160f
2025-03-14 11:51:04 +08:00
sunxuhui a985c0ab97 修复atm toggle命令传非法status能够设置成功的问题
Signed-off-by: sunxuhui <sunxuhui7@huawei.com>
2025-01-21 15:44:40 +08:00
sunxuhui 5ed8e4cccf 支持一键开关控制权限使用记录
Signed-off-by: sunxuhui <sunxuhui7@huawei.com>
2025-01-04 14:10:56 +08:00
zhouyan 9288bbb02e 权限使用记录查询结果中添加安全访问次数字段
Signed-off-by: zhouyan <zhouyan160@huawei.com>
Change-Id: I1dedcad50b71b7653c331aaa9770fa546e5ee715
2024-11-15 16:53:21 +08:00
AXYChen 3bc392e907 sasdk privacy部分回退
Signed-off-by: AXYChen <chenmingyang14@huawei.com>
Change-Id: Ib44907d8e1d05d764ebd30aa8bacb0aed0c7a524
2024-10-30 14:21:36 +08:00
openharmony_ci 29c9862ca4 !2390 sasdk privacy整改
Merge pull request !2390 from 陈铭洋/pr_2387
2024-10-18 03:43:44 +00:00
AXYChen 6ab1d30ffa sasdk整改
Signed-off-by: AXYChen <chenmingyang14@huawei.com>
Change-Id: I10b9c1724cbcf8d43c16d9e0cec47ffb62074cb2
2024-10-17 21:53:29 +08:00
zhouyan 16ccef1ad3 atm dump -t与-r删除deviceID的打印
Signed-off-by: zhouyan <zhouyan160@huawei.com>
Change-Id: Id24501de6b23b1148507821f234e8695b71ac171
2024-10-12 10:11:42 +08:00
openharmony_ci 11861bcc13 !2357 Atm dump -t仅返回包名/进程和tokenid
Merge pull request !2357 from chennian/0927
2024-10-11 01:07:42 +00:00
chennian 93186b872c Atm dump -t仅返回包名/进程和tokenid
Signed-off-by: chennian <chennian1@huawei.com>
Change-Id: Ia70cd88c8b8467d73ec72b50333d819841a1fc0b
2024-09-29 08:34:00 +00:00
AXYChen b6e6c05e50 atm命令user版本隔离
Signed-off-by: AXYChen <chenmingyang14@huawei.com>
Change-Id: I360f15d8f3110f505888b44bcdb4627ae5d48c3e
2024-09-27 16:16:31 +08:00
wuliushuan c48011c3bb tdd修复&&接口下线
Signed-off-by: wuliushuan <wuliushuan.30044128@huawei.com>
Change-Id: Ie38fd3e2a995f6284b0b679614384c1876328a0a
2024-09-03 14:39:12 +00:00
wuliushuan 52143f2fb8 tdd修复&&接口下线
Signed-off-by: wuliushuan <wuliushuan.30044128@huawei.com>
Change-Id: I82634c0fed66263eaf98265da267bcc2bc180b17
2024-09-03 12:28:58 +00:00
wuliushuan 786ecea894 CFI整改
Signed-off-by: wuliushuan <wuliushuan.30044128@huawei.com>
Change-Id: Iea30f7b7e6afa3f9c421c88535eb428f7bb694bb
2024-06-28 12:24:50 +00:00
Haryslee f49695120a feat: support dfx for toggle status of setting permission dialog
Signed-off-by: Haryslee <lihao189@huawei.com>
Change-Id: I2e307ca6ebd329e058c6a1aeb21553e8ca6701a0
2024-04-02 17:20:49 +08:00
Haryslee da4064a009 eat: feat: set/get permission request toggle status
Signed-off-by: Haryslee <lihao189@huawei.com>
2024-03-18 21:42:55 +08:00
zhouyan 758a3dda8d 添加隐私新api接口napi层逻辑
Signed-off-by: zhouyan <zhouyan160@huawei.com>
Change-Id: Ie0bec924e4c0b7fbbb8b2af293964bb536ab32c1
2024-03-12 16:29:42 +08:00
zhouyan 2be72cc606 atm工具添加包名和进程名查询tokenID的参数
Signed-off-by: zhouyan <zhouyan160@huawei.com>
Change-Id: I113a7d581b8eee92b72c001ef8cfd0d93d0c4046
2024-01-10 09:57:36 +08:00
zhouyan fdbac7bce1 开放隐私访问记录明细查询数量限制
Signed-off-by: zhouyan <zhouyan160@huawei.com>
Change-Id: I3e94e6acab6e29941563a6a70446481ec6360ac8
2023-11-13 18:33:43 +08:00
y1585740638 43104eec0a 整改错误码隐私mute
Signed-off-by: y1585740638 <yulei99@huawei.com>
Change-Id: Ib918925ff0ed6579415179baeb803c19e818a859
2023-11-11 17:46:59 +08:00
y1585740638 9ca1aed2d4 AT代码&错误码整改
Signed-off-by: y1585740638 <yulei99@huawei.com>
Change-Id: I3709453a0cf84e4b6111c9b2c25bdb3ee9282b1f
2023-11-11 15:33:38 +08:00
y1585740638 1e9785ab91 Merge branch 'master' of gitee.com:openharmony/security_access_token into paste10101
Change-Id: I2c451b576c870ee6a93431baa388b3f42fe4f2da
2023-10-14 11:53:53 +08:00
openharmony_ci e6c2a7688e !1350 权限访问记录添加锁屏状态字段
Merge pull request !1350 from 杨海龙2023/master
2023-10-10 14:40:25 +00:00
y1585740638 d06fb905a4 仅本次允许
Signed-off-by: y1585740638 <yulei99@huawei.com>
Change-Id: Ibddff31a9c36bdac66c2e0a319e56c4612bef611
2023-10-10 22:27:59 +08:00