openharmony/startup_appspawn
1
0
Fork 0
mirror of https://gitee.com/openharmony/startup_appspawn synced 2024-11-23 07:00:17 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

!1268 限制dev/pids.的权限other 不可读

Browse Source 
Merge pull request !1268 from 樊景乐/master
This commit is contained in:
openharmony_ci 2024-07-12 10:10:54 +00:00 committed by Gitee
commit 27ae29effd
No known key found for this signature in database
GPG Key ID: 173E9B9CA92EEF8F
2 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
appspawn.cfg
View File

@ -17,9 +17,9 @@
"chown root appspawn /dev/pids",
"chown root appspawn /dev/pids/tasks",
"chown root appspawn /dev/pids/cgroup.procs",
"chmod 0755 /dev/pids",
"chmod 0755 /dev/pids/tasks",
"chmod 0755 /dev/pids/cgroup.procs"
"chmod 0750 /dev/pids",
"chmod 0750 /dev/pids/tasks",
"chmod 0750 /dev/pids/cgroup.procs"
]
}
],

2
modules/common/appspawn_cgroup.c
View File

@ -194,7 +194,7 @@ static int ProcessMgrAddApp(const AppSpawnMgr *content, const AppSpawnedProcessI
APPSPAWN_LOGV("ProcessMgrAddApp %{public}d %{public}d to cgroup ", appInfo->pid, appInfo->uid);
int ret = GetCgroupPath(appInfo, path, sizeof(path));
APPSPAWN_CHECK(ret == 0, return -1, "Failed to get real path errno: %{public}d", errno);
(void)CreateSandboxDir(path, 0755); // 0755 default mode
(void)CreateSandboxDir(path, 0750); // 0750 default mode
uint32_t pathLen = strlen(path);
ret = strcat_s(path, sizeof(path), "cgroup.procs");
APPSPAWN_CHECK(ret == 0, return ret, "Failed to strcat_s errno: %{public}d", errno);