openharmony/security_code_signature
1
0
Fork 0
mirror of https://gitee.com/openharmony/security_code_signature synced 2024-11-27 08:20:23 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

控制不同形态的xpm_mode

Browse Source 
Signed-off-by: yeyuning <yeyuning2@huawei.com>
Change-Id: I0265af3b1cacb0f8df94ed5a8c7c379a7a3abc7e
This commit is contained in:
yeyuning 2023-12-25 16:19:49 +08:00
parent 05c6b6e471
commit 292fcd74b9
5 changed files with 68 additions and 29 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
bundle.json
View File

@ -17,7 +17,8 @@
"//base/security/code_signature/hisysevent.yaml"
],
"features": [
"code_signature_support_oh_code_sign"
"code_signature_support_oh_code_sign",
"code_signature_enable_xpm_mode"
],
"adapted_system_type": [ "standard" ],
"rom": "1024KB",

1
code_signature.gni
View File

@ -21,4 +21,5 @@ third_party_securec_dir = "//third_party/bounds_checking_function"
declare_args() {
code_signature_support_openharmony_ca = true
code_signature_support_oh_code_sign = false
code_signature_enable_xpm_mode = false
}

6
services/key_enable/BUILD.gn
View File

@ -82,7 +82,11 @@ ohos_prebuilt_etc("trusted_cert_path_test") {
}
ohos_prebuilt_etc("key_enable.cfg") {
source = "key_enable.cfg"
if (code_signature_enable_xpm_mode) {
source = "cfg/key_enable.enable_xpm.cfg"
} else {
source = "cfg/key_enable.disable_xpm.cfg"
}
relative_install_dir = "init"
subsystem_name = "security"
part_name = "code_signature"

54
services/key_enable/key_enable.cfg → services/key_enable/cfg/key_enable.disable_xpm.cfg
View File

@ -1,28 +1,28 @@
{
"jobs" : [{
"name" : "post-fs-data",
"cmds" : [
"write /proc/sys/fs/verity/require_signatures 1",
"mkdir /data/service/el0/profiles 0655 installs installs",
"mkdir /data/service/el0/profiles/developer 0655 installs installs",
"mkdir /data/service/el0/profiles/debug 0655 installs installs"
]
}, {
"name" : "init",
"cmds" : [
"start key_enable"
]
}
],
"services" : [{
"name" : "key_enable",
"path" : ["/system/bin/key_enable"],
"importance" : -20,
"uid" : "root",
"gid" : ["root"],
"secon" : "u:r:key_enable:s0",
"start-mode": "condition",
"once": 1
}
]
{
"jobs" : [{
"name" : "post-fs-data",
"cmds" : [
"write /proc/sys/fs/verity/require_signatures 1",
"mkdir /data/service/el0/profiles 0655 installs installs",
"mkdir /data/service/el0/profiles/developer 0655 installs installs",
"mkdir /data/service/el0/profiles/debug 0655 installs installs"
]
}, {
"name" : "init",
"cmds" : [
"start key_enable"
]
}
],
"services" : [{
"name" : "key_enable",
"path" : ["/system/bin/key_enable"],
"importance" : -20,
"uid" : "root",
"gid" : ["root"],
"secon" : "u:r:key_enable:s0",
"start-mode": "condition",
"once": 1
}
]
}

33
services/key_enable/cfg/key_enable.enable_xpm.cfg Normal file
View File

@ -0,0 +1,33 @@
{
"jobs" : [{
"name" : "post-fs-data",
"cmds" : [
"write /proc/sys/fs/verity/require_signatures 1",
"mkdir /data/service/el0/profiles 0655 installs installs",
"mkdir /data/service/el0/profiles/developer 0655 installs installs",
"mkdir /data/service/el0/profiles/debug 0655 installs installs"
]
}, {
"name" : "init",
"cmds" : [
"start key_enable"
]
}, {
"name" : "pre-init",
"cmds" : [
"write /proc/sys/kernel/xpm/xpm_mode 1",
]
}
],
"services" : [{
"name" : "key_enable",
"path" : ["/system/bin/key_enable"],
"importance" : -20,
"uid" : "root",
"gid" : ["root"],
"secon" : "u:r:key_enable:s0",
"start-mode": "condition",
"once": 1
}
]
}