Commit Graph

55 Commits

Author SHA1 Message Date
Haryslee c182b89a6d feat: support new feature
Signed-off-by: Haryslee <lihao189@huawei.com>
2025-11-29 16:14:16 +08:00
BaoYang 356dab61d0 fix coverage tdd
Signed-off-by: BaoYang <baoyang9@h-partners.com>
Change-Id: I8074f92b3b636fd9d5f7728e5a44b729beaa052c
2025-11-18 09:46:32 +08:00
BaoYang 9575cef789 fix coverage tdd
Signed-off-by: BaoYang <baoyang9@h-partners.com>
Change-Id: I8074f92b3b636fd9d5f7728e5a44b729beaa052c
2025-11-17 19:38:04 +08:00
BaoYang 248c0b583e add mutex
Signed-off-by: BaoYang <baoyang9@h-partners.com>
Change-Id: Ifb6873fa0f98d6191f2b0f3e62d138e475afc751
2025-11-05 18:06:30 +08:00
lsq f8e46f1f82 开机启动一次安全控件服务
Signed-off-by: lsq <linshuqing2@huawei.com>
Change-Id: I05dbb13704473a75d87ccf5685f6a2a5d516a42a
2025-10-27 18:29:47 +08:00
openharmony_ci 40fde41262 !353 merge add_check into master
add service check

Created-by: BaoYang
Commit-by: BaoYang
Merged-by: openharmony_ci
Description: ### 关联的issue:
https://gitcode.com/openharmony/security_security_component_manager/issues/313
### 修改描述:
add check
### 测试用例(附上截图):
TDD:
![image.png](https://raw.gitcode.com/user-images/assets/4378957/cd467d1c-e7f1-4e7a-9020-05e9e0305aa8/image.png 'image.png')
XTS:
![image.png](https://raw.gitcode.com/user-images/assets/4378957/4b0a220a-b266-43ae-9d12-8bcc1023634d/image.png 'image.png')
手工用例:
pass
### 兼容性上库自检:
- [x] 不涉及组件视觉效果发生变化
- [x] 不涉及组件布局调整
- [x] 不涉及组件交互体验发生变化
- [x] 不涉及组件动效发生变化
- [x] 不涉及组件无障碍、适老化、全球化规格变化
- [x] 不涉及API功能发生变化
- [x] 不涉及改变回调函数或生命周期的触发时机或时序,或删除生命周期和回调函数
- [x] 不涉及参数的规格发生了变化,例如取值范围缩小等
- [x] 不涉及对外接口新增权限校验
- [x] 不涉及接口的使用约束规格收紧,例如权限开放范围变化
- [x] 不涉及系统可创建的实例数量收紧
- [x] 不涉及修改了接口返回的数据
- [x] 未新增错误抛出,包括新增错误码、对已有的场景从不会抛错误码变成会抛出错误
- [x] 未修改已有的错误码,对于相同的输入原本抛出A错误码变成了抛出B错误码
- [x] 接口性能未出现明显劣化

### 日志规范自检:
- [x] 【规则】高频代码的正常流程中禁止打印日志
- [x] 【规则】在基本不可能发生的点必须要打印日志
- [x] 【规则】事件记录的日志使用who do what 主谓宾的形式打印
- [x] 【规则】状态变化的日志打印使用state_name:s1->s2, reason:msg的形式打印
- [x] 【规则】参数值的日志打印使用name1=value1, name2=value2…的形式打印
- [x] 【规则】代码运行成功的日志使用xxx successful的形式打印
- [x] 【规则】代码运行失败的日志使用xxx failed, please xxx的形式打印

### 安全编码自检:
- [x] 裸指针避免通过隐式转换构造为sptr
- [x] json对象在取值之前必须先判断类型,避免类型不匹配
- [x] 序列化时必须对传入的数组大小进行校验,避免出现超大数组
- [x] 避免使用未明确位宽的整型,选择使用int8_t、uint8_t等类型
- [x] 外部传入的路径要做规范化校验,对路径中的.、..、../等特殊字符严格校验
- [x] 指针变量、表示资源描述符的变量、bool变量必须赋初值
- [x] readParcelable获取的对象使用前需要判空
- [x] 分配和释放内存的函数需要成对出现
- [x] 申请内存后异常退出前需要及时进行内存释放
- [x] 内存申请前必须对内存大小进行合法性校验
- [x] 内存分配后必须判断是否成功
- [x] 禁止使用realloc、alloc函数
- [x] 禁止打印文件路径、口令等敏感信息,如有需要,使用private修饰
- [x] 禁止打印内存地址
- [x] 整数之间运算时必须严格检查,确保不会出现溢出、反转、除0
- [x] 禁止对有符号整数进行位操作符运算
- [x] 禁止对指针进行逻辑或位运算
- [x] 循环次数如果收外部数据控制,需要检验其合法性
- [x] 禁止使用内存操作类危险函数,需要使用安全函数
- [x] 谨慎使用不可重入函数
- [x] 必须检查安全函数的返回值,并进行正确处理
- [x] 禁止仅通过TokenType类型判断绕过权限校验


See merge request: openharmony/security_security_component_manager!353
2025-10-16 11:20:06 +08:00
BaoYang 6327592d56 add service check
Signed-off-by: BaoYang <baoyang9@h-partners.com>
Change-Id: I1b32d570e8fecb3afe5a1da078a4eb6b86bde534
2025-10-15 18:17:31 +08:00
Haryslee 6243fa98bb fix: optimize for security component
Signed-off-by: Haryslee <lihao189@huawei.com>
2025-10-14 15:37:57 +08:00
openharmony_ci 65719d5050 !350 merge skip_check into master
skip register check

Created-by: BaoYang
Commit-by: BaoYang
Merged-by: openharmony_ci
Description: ### 关联的issue:
https://gitcode.com/openharmony/security_security_component_manager/issues/309?ref=&did=3339924#tid-3339924
### 修改描述:
skip register check
### 测试用例(附上截图):
TDD:
![image.png](https://raw.gitcode.com/user-images/assets/4378957/a3675186-ea77-4b04-9a03-d4e677cfa620/image.png 'image.png')
XTS:
![image.png](https://raw.gitcode.com/user-images/assets/4378957/96dd94e7-cb2a-4f83-8c09-2c912db0771e/image.png 'image.png')
手工用例:
pass

### 兼容性上库自检:
- [x] 不涉及组件视觉效果发生变化
- [x] 不涉及组件布局调整
- [x] 不涉及组件交互体验发生变化
- [x] 不涉及组件动效发生变化
- [x] 不涉及组件无障碍、适老化、全球化规格变化
- [x] 不涉及API功能发生变化
- [x] 不涉及改变回调函数或生命周期的触发时机或时序,或删除生命周期和回调函数
- [x] 不涉及参数的规格发生了变化,例如取值范围缩小等
- [x] 不涉及对外接口新增权限校验
- [x] 不涉及接口的使用约束规格收紧,例如权限开放范围变化
- [x] 不涉及系统可创建的实例数量收紧
- [x] 不涉及修改了接口返回的数据
- [x] 未新增错误抛出,包括新增错误码、对已有的场景从不会抛错误码变成会抛出错误
- [x] 未修改已有的错误码,对于相同的输入原本抛出A错误码变成了抛出B错误码
- [x] 接口性能未出现明显劣化

### 日志规范自检:
- [x] 【规则】高频代码的正常流程中禁止打印日志
- [x] 【规则】在基本不可能发生的点必须要打印日志
- [x] 【规则】事件记录的日志使用who do what 主谓宾的形式打印
- [x] 【规则】状态变化的日志打印使用state_name:s1->s2, reason:msg的形式打印
- [x] 【规则】参数值的日志打印使用name1=value1, name2=value2…的形式打印
- [x] 【规则】代码运行成功的日志使用xxx successful的形式打印
- [x] 【规则】代码运行失败的日志使用xxx failed, please xxx的形式打印

### 安全编码自检:
- [x] 裸指针避免通过隐式转换构造为sptr
- [x] json对象在取值之前必须先判断类型,避免类型不匹配
- [x] 序列化时必须对传入的数组大小进行校验,避免出现超大数组
- [x] 避免使用未明确位宽的整型,选择使用int8_t、uint8_t等类型
- [x] 外部传入的路径要做规范化校验,对路径中的.、..、../等特殊字符严格校验
- [x] 指针变量、表示资源描述符的变量、bool变量必须赋初值
- [x] readParcelable获取的对象使用前需要判空
- [x] 分配和释放内存的函数需要成对出现
- [x] 申请内存后异常退出前需要及时进行内存释放
- [x] 内存申请前必须对内存大小进行合法性校验
- [x] 内存分配后必须判断是否成功
- [x] 禁止使用realloc、alloc函数
- [x] 禁止打印文件路径、口令等敏感信息,如有需要,使用private修饰
- [x] 禁止打印内存地址
- [x] 整数之间运算时必须严格检查,确保不会出现溢出、反转、除0
- [x] 禁止对有符号整数进行位操作符运算
- [x] 禁止对指针进行逻辑或位运算
- [x] 循环次数如果收外部数据控制,需要检验其合法性
- [x] 禁止使用内存操作类危险函数,需要使用安全函数
- [x] 谨慎使用不可重入函数
- [x] 必须检查安全函数的返回值,并进行正确处理
- [x] 禁止仅通过TokenType类型判断绕过权限校验


See merge request: openharmony/security_security_component_manager!350
2025-10-13 16:24:51 +08:00
BaoYang 768b0ff34c skip register check
Signed-off-by: BaoYang <baoyang9@h-partners.com>
Change-Id: I3cafcd310a7d34f68b1c632c6c7dca876ba8e00d
2025-10-11 15:50:31 +08:00
lsq ad1ee16569 安全控件稳定性加固
Signed-off-by: lsq <linshuqing2@huawei.com>
Change-Id: Iff11f03825ef45141e6bd8447dd8316cb82231fa
2025-09-28 21:49:47 +08:00
baoyang ba2b2183a0 add userCancelEvent
Signed-off-by: baoyang <baoyang9@h-partners.com>
Change-Id: I7e7506a6790274b6e28d33c756738d6ecb268b21
2025-09-04 19:29:30 +08:00
openharmony_ci d3872fe523 !341 TDD修改
Merge pull request !341 from 陈铭洋/tddverify
2025-08-14 12:31:54 +00:00
AXYChen 3b32da3c12 TDD修改
Signed-off-by: AXYChen <chenmingyang14@huawei.com>
Change-Id: I40aeca53cff57375b0f46385e4d4c9639c705904
2025-08-14 17:11:11 +08:00
AXYChen 1fdae2de5c 补充安全控件TDD
Signed-off-by: AXYChen <chenmingyang14@huawei.com>
Change-Id: I7f670098cd6522e429faa8b31be81c4be233f029
2025-08-06 15:17:25 +08:00
openharmony_ci 450fc2fb2f !335 保存控件放开部分校验
Merge pull request !335 from 陈铭洋/release
2025-07-29 09:46:59 +00:00
baoyang 9ba22d7241 fix difference
Signed-off-by: baoyang <baoyang9@h-partners.com>
Change-Id: If1e9d6aa20351cb689d7f462bdae9f6fe6f01811
2025-07-28 22:02:56 +08:00
AXYChen 830358d249 保存控件放开部分校验
Signed-off-by: AXYChen <chenmingyang14@huawei.com>
Change-Id: Ia58882935e8b6fb053c006be6d5e9928d6eb8cd3
2025-07-28 17:45:40 +08:00
baoyang 4b115e3308 fix alert
Signed-off-by: baoyang <baoyang9@h-partners.com>
Change-Id: I042f041b0a3c674b5b79698ca767dacaf4d6960a
2025-07-07 22:28:04 +08:00
Haryslee 1b3aed7b76 fix: adjust HasCustomPermission interface from security component
Signed-off-by: Haryslee <lihao189@huawei.com>
2025-06-28 14:25:05 +08:00
baoyang 57e0793a67 add retry when sa exit
Signed-off-by: baoyang <baoyang9@h-partners.com>
Change-Id: If534adfae3c97df80836d285b2955f2476f58c3d
2025-06-25 17:59:57 +08:00
openharmony_ci 2eec9f6aa4 !323 无障碍模式适配HMAC校验
Merge pull request !323 from baoyang/HMAC
2025-06-20 08:03:43 +00:00
baoyang 3bce57dd77 HMAC
Signed-off-by: baoyang <baoyang9@h-partners.com>
Change-Id: Ia62a91f8c18eb9aa226e90de33ab1d76145163df
2025-06-20 10:19:50 +08:00
Haryslee f5391f3ebc fix: Add unitest
Signed-off-by: Haryslee <lihao189@huawei.com>
2025-06-19 15:10:56 +08:00
fanchenxuan bc88faa99c module_out_path修改
Signed-off-by: fanchenxuan <fanchenxuan@huawei.com>
2025-06-05 15:41:03 +08:00
li-li-wang 4e20b8b370 独立编译整改
Signed-off-by: li-li-wang <wangliliang5@huawei.com>
2025-05-27 17:04:54 +08:00
Haryslee f6dc863286 feat: customize for save button
Signed-off-by: Haryslee <lihao189@huawei.com>
2025-05-16 00:27:57 +08:00
baoyang 8eb372ae17 fix oversize functions
Signed-off-by: baoyang <baoyang9@huawei.com>
2025-05-10 14:43:16 +08:00
baoyang 11d29914ab fix cfi
Signed-off-by: baoyang <baoyang9@huawei.com>
Change-Id: I355741149fd32878d321706d15a6effca6a01266
2025-04-27 17:37:51 +08:00
fanchenxuan 61c252dd87 Level级别调整
Signed-off-by: fanchenxuan <fanchenxuan@huawei.com>
2025-04-14 15:06:18 +08:00
AXYChen 3d66812011 传回错误message
Signed-off-by: AXYChen <chenmingyang14@huawei.com>
Change-Id: I9f5d1eb5df9c05920ea3e928b90221e6a18f110c
2025-04-12 15:21:56 +08:00
li-li-wang 039714026a TDD修改
Signed-off-by: li-li-wang <wangliliang5@huawei.com>
2025-04-06 19:30:48 +08:00
baoyang 6bd5c8b965 fix tdd
Signed-off-by: baoyang <baoyang9@huawei.com>
Change-Id: I3fb1bf775bc0f3f3f0b60d2be29f7788ccfd8177
2025-04-01 20:14:38 +08:00
AXYChen 99ff6f29c1 seccomp idl 3.28
Signed-off-by: AXYChen <chenmingyang14@huawei.com>
Change-Id: Id70dcca9e5525381e603928501198edfa86eee4c
2025-03-29 22:27:02 +08:00
openharmony_ci 8b3cea5a9b !273 fix scId reuse problem
Merge pull request !273 from baoyang/reuse_scid
2025-03-26 10:06:34 +00:00
baoyang bbfd8a21ec fix scId reuse problem
Signed-off-by: baoyang <baoyang9@huawei.com>
Change-Id: Iddb02f15ad950d9307c118e560b4453d48678af5
2025-03-25 22:25:13 +08:00
baoyang 3ce33b742a remove public_external_deps
Signed-off-by: baoyang <baoyang9@huawei.com>
Change-Id: Ie57c113ccff635a20b72d76080c2543f72e08d9d
2025-03-24 15:11:39 +08:00
openharmony_ci 33671cb885 !264 add hisysevent
Merge pull request !264 from baoyang/transform
2025-03-19 04:56:33 +00:00
Haryslee 2dfc98ac2b feat: 安全控件新增打点
Signed-off-by: Haryslee <lihao189@huawei.com>
2025-03-14 12:37:27 +08:00
baoyang 6856c1c859 add hisysevent
Signed-off-by: baoyang <baoyang9@huawei.com>
Change-Id: I80fd079eb0b9cc63bd11fe5a389092f0aa2cc12f
2025-03-13 22:13:33 +08:00
baoyang ad2eed37ea add hisysevent
Signed-off-by: baoyang <baoyang9@huawei.com>
Change-Id: I15051a8346db340e375944f2fe272df6f7f53a63
2025-03-01 20:35:34 +08:00
baoyang 7217f4f653 add out-of-screen algorithm
Signed-off-by: baoyang <baoyang9@huawei.com>
Change-Id: I1b9a9268bb2afc87778b8131333d929307da4c7a
2025-02-27 21:18:47 +08:00
chenliming 653bbd247f 安全控件参数设置错误引起的参数解析失败增加message输出
Signed-off-by: chenliming <chenliming20@huawei-partners.com>
2025-02-25 10:49:50 +08:00
Haryslee da17b741fc feat: 安全控件支持cross axis
Signed-off-by: Haryslee <lihao189@huawei.com>
2025-02-07 20:53:33 +08:00
baoyang ae07715fac 回退 'Pull Request !235 : add retry' 2025-01-22 08:06:57 +00:00
孙旭辉 c0928e6c63 update frameworks/inner_api/security_component/src/sec_comp_caller_authorization.cpp.
Signed-off-by: 孙旭辉 <sunxuhui7@huawei.com>
2025-01-20 11:56:05 +00:00
openharmony_ci 05aaac7364 !238 安全控件调试信息增强
Merge pull request !238 from 孙旭辉/master
2025-01-20 01:57:26 +00:00
sunxuhui 65f9d94795 fix fuzz crash
Signed-off-by: sunxuhui <sunxuhui7@huawei.com>
2025-01-18 18:36:23 +08:00
sunxuhui c3d107594d 安全控件调试信息增强
Signed-off-by: sunxuhui <sunxuhui7@huawei.com>
2025-01-08 16:24:10 +08:00
baoyang 55d50f98ce add retry
Signed-off-by: baoyang <baoyang9@huawei.com>
Change-Id: I2e2ab715c82f5d0bb777e8ac71d222737530111d
2025-01-04 10:08:26 +08:00