master

Ddeepin-bot[bot]fix: correct directory ownership when creating cache dirs with sudo

7d03d0ce创建于 9月30日历史提交

文件	最后提交记录	最后更新时间
dldbushandler.cpp	fix(security): sink home log reads to frontend, enable ProtectHome=tmpfs Add UserLogAccess class in the frontend to read home-directory logs locally instead of via the privileged DBus backend service. 新增前端 UserLogAccess 类，家目录日志改由用户进程本地读取，不再 经后端提权 DBus 服务访问；后端启用 ProtectHome=tmpfs 安全隔离。 Log: 家目录日志读取下沉前端，后端启用ProtectHome=tmpfs PMS: BUG-376053 Influence: 后端不再直接访问/home、/root、/run/user，安全隔离增强；移除whiteListOutPaths，新增exportOpsLog；前端依赖由PolkitQt切换为gio-qt。	1 个月前
dldbushandler.h	fix(security): sink home log reads to frontend, enable ProtectHome=tmpfs Add UserLogAccess class in the frontend to read home-directory logs locally instead of via the privileged DBus backend service. 新增前端 UserLogAccess 类，家目录日志改由用户进程本地读取，不再 经后端提权 DBus 服务访问；后端启用 ProtectHome=tmpfs 安全隔离。 Log: 家目录日志读取下沉前端，后端启用ProtectHome=tmpfs PMS: BUG-376053 Influence: 后端不再直接访问/home、/root、/run/user，安全隔离增强；移除whiteListOutPaths，新增exportOpsLog；前端依赖由PolkitQt切换为gio-qt。	1 个月前
dldbusinterface.cpp	chore: More logs. resfactor the log tags and add more logs. 总体覆盖率: 80.35% Log: More logs.	1 年前
dldbusinterface.h	fix: cleanup residual Log_extract file on export failure When exportLog() pre-creates the target file via ::open(O_CREAT) before the DBus call, a backend failure leaves a stale Log_extract_XXXXXX.txt in the export directory. Add waitForFinished() + QFile::remove() in exportLog() to clean up the pre-created file when export fails, following the "creator cleans up" principle. Log: 修复全部导出时导出目录残留 Log_extract 空文件问题 Influence: 1. 测试导出失败后导出目录无残留 Log_extract txt 文件 2. 测试正常导出行为不受影响 PMS: TASK-395141	1 个月前
userlogaccess.cpp	fix: correct directory ownership when creating cache dirs with sudo When running sudo deepin-log-viewer --reportcoredump, directories created under ~/.cache/deepin/deepin-log-viewer/ are owned by root, causing subsequent normal launches to fail writing to them. Add Utils::fixDirOwnership() to chown newly created directories to the real logged-in user (detected via lstat(homePath)) when getuid() differs from the real user UID. Apply it to all mkpath call sites that create cache directories under the user's home: updateRepeatCoredumpExePaths, UserLogAccess constructor, and UserLogAccess::createExtractSubdir. Harden fixDirOwnership() against symlink attacks: walk the target path from root using openat(O_DIRECTORY | O_NOFOLLOW) at each level, then fchown() the resulting fd. This prevents a non-privileged user from pre-creating a symlink along the path to trick the privileged sudo process into chowning arbitrary targets outside the home directory. Add error handling for createExtractSubdir() returning empty string (mkpath failure) at all three call sites: skip unzip and fall back to returning original file paths directly, preventing silent file loss. Also add qCWarning logging for unchecked mkpath return values across the project. PMS: TASK-395141	1 个月前
userlogaccess.h	fix(security): sink home log reads to frontend, enable ProtectHome=tmpfs Add UserLogAccess class in the frontend to read home-directory logs locally instead of via the privileged DBus backend service. 新增前端 UserLogAccess 类，家目录日志改由用户进程本地读取，不再 经后端提权 DBus 服务访问；后端启用 ProtectHome=tmpfs 安全隔离。 Log: 家目录日志读取下沉前端，后端启用ProtectHome=tmpfs PMS: BUG-376053 Influence: 后端不再直接访问/home、/root、/run/user，安全隔离增强；移除whiteListOutPaths，新增exportOpsLog；前端依赖由PolkitQt切换为gio-qt。	1 个月前