| fix:add CODEOWNERS Feature or Bugfix:Bugfix Binary Source: No Signed-off-by: liveery <liangming712@huawei.com> | 2 年前 |
| helper && hnp Co-Authored-By: Agent Reviewed-by: yh Signed-off-by: yh <yanghao236@h-partners.com> AI[0%] Human Fixed[0%] Human[100%] AI Adopted[0%] | 1 个月前 |
| initmd Co-Authored-By: Agent Reviewed-by: yh Signed-off-by: yh <yanghao236@huawei.com> AI[0%] Human Fixed[0%] Human[100%] AI Adopted[0%] | 1 个月前 |
| feat: appspawn 解耦基建 P1+P2(引擎原语抽离 + 策略表框架) P1 引擎原语抽离:抽离 5 安全原语 SetUidGid/SetCapabilities/ SetAmbientCapabilities/SetSelinuxCon/ExecvTarget 到 libappspawn_module_engine, 经 stub JSON 导出;appspawn_common.c 的 SetCapabilities 改调原语(行为保持), 冲突的 app wrapper 重命名 SetAppUidGid/SetAppAmbientCapabilities/ SetAppSelinuxCon(均 internal,无 ABI 影响)。MountSandbox 原语随 P3 沙箱改造。 P2 策略表框架:新增 spawn_policy.{h,c} + appspawn-spawn-policy.json, main 启动期 SpawnPolicyInit 加载,ResolvePolicy P2 旁路态返回 app 策略 (值=原硬编码),未被共享 Hook 消费(P3)。app/native/nweb 行为 100% 不变。 stub JSON 导出 5 原语 + SpawnPolicyInit/ResolvePolicy(ABI,需 engine owner 评审); caps 代码行为保持(需安全 owner sign-off)。 hb build appspawn PASS。 Co-Authored-By: Agent Signed-off-by: wangfenging <wangfenging@users.noreply.gitcode.com> AI[100%] Human Fixed[0%] Human[0%] AI Adopted[100%] Co-authored-by: opencode (glm-5.2) <ai@local> Change-Id: I6c46964624c1f1fc40ff3444feccf730e6078046 | 11 天前 |
| update appspawn readme Signed-off-by: laiguizhong <laiguizhong@huawei.com> | 4 年前 |
| fix: 解耦c_utils Signed-off-by: fan-jingle <fanjingle@h-partners.com> | 23 天前 |
| Optimize logs and trace Signed-off-by: nianyuu <zhouwenqiang12@h-partners.com> AI[77%] Human Fixed[0%] Human[23%] AI Adopted[100%] Co-authored-by: opencode (glm-5.1) <ai@local> | 1 个月前 |
| feat: appspawn 解耦基建 P1+P2(引擎原语抽离 + 策略表框架) P1 引擎原语抽离:抽离 5 安全原语 SetUidGid/SetCapabilities/ SetAmbientCapabilities/SetSelinuxCon/ExecvTarget 到 libappspawn_module_engine, 经 stub JSON 导出;appspawn_common.c 的 SetCapabilities 改调原语(行为保持), 冲突的 app wrapper 重命名 SetAppUidGid/SetAppAmbientCapabilities/ SetAppSelinuxCon(均 internal,无 ABI 影响)。MountSandbox 原语随 P3 沙箱改造。 P2 策略表框架:新增 spawn_policy.{h,c} + appspawn-spawn-policy.json, main 启动期 SpawnPolicyInit 加载,ResolvePolicy P2 旁路态返回 app 策略 (值=原硬编码),未被共享 Hook 消费(P3)。app/native/nweb 行为 100% 不变。 stub JSON 导出 5 原语 + SpawnPolicyInit/ResolvePolicy(ABI,需 engine owner 评审); caps 代码行为保持(需安全 owner sign-off)。 hb build appspawn PASS。 Co-Authored-By: Agent Signed-off-by: wangfenging <wangfenging@users.noreply.gitcode.com> AI[100%] Human Fixed[0%] Human[0%] AI Adopted[100%] Co-authored-by: opencode (glm-5.2) <ai@local> Change-Id: I6c46964624c1f1fc40ff3444feccf730e6078046 | 11 天前 |
| helper && hnp Co-Authored-By: Agent Reviewed-by: yh Signed-off-by: yh <yanghao236@h-partners.com> AI[0%] Human Fixed[0%] Human[100%] AI Adopted[0%] | 1 个月前 |
| feat: appspawn 解耦基建 P1+P2(引擎原语抽离 + 策略表框架) P1 引擎原语抽离:抽离 5 安全原语 SetUidGid/SetCapabilities/ SetAmbientCapabilities/SetSelinuxCon/ExecvTarget 到 libappspawn_module_engine, 经 stub JSON 导出;appspawn_common.c 的 SetCapabilities 改调原语(行为保持), 冲突的 app wrapper 重命名 SetAppUidGid/SetAppAmbientCapabilities/ SetAppSelinuxCon(均 internal,无 ABI 影响)。MountSandbox 原语随 P3 沙箱改造。 P2 策略表框架:新增 spawn_policy.{h,c} + appspawn-spawn-policy.json, main 启动期 SpawnPolicyInit 加载,ResolvePolicy P2 旁路态返回 app 策略 (值=原硬编码),未被共享 Hook 消费(P3)。app/native/nweb 行为 100% 不变。 stub JSON 导出 5 原语 + SpawnPolicyInit/ResolvePolicy(ABI,需 engine owner 评审); caps 代码行为保持(需安全 owner sign-off)。 hb build appspawn PASS。 Co-Authored-By: Agent Signed-off-by: wangfenging <wangfenging@users.noreply.gitcode.com> AI[100%] Human Fixed[0%] Human[0%] AI Adopted[100%] Co-authored-by: opencode (glm-5.2) <ai@local> Change-Id: I6c46964624c1f1fc40ff3444feccf730e6078046 | 11 天前 |
| refactor: 将系统调用 stub defines 从测试源码提升到 BUILD.gn 将 opendir/mount/stat 等 10 个系统调用 stub 宏定义从 app_spawn_unlock_mount_sandbox_test.cpp 移到 BUILD.gn 的 defines 中, 使源码更干净, 便于其他测试复用 Signed-off-by: yh <yanghao236@h-partners.com> Co-Authored-By: Agent Reviewed-by: yh AI[0%] Human Fixed[0%] Human[100%] AI Adopted[0%] Co-Authored-By: Agent Reviewed-by: yh Signed-off-by: yh <yanghao236@h-partners.com> | 15 天前 |
| fix: 解耦c_utils Signed-off-by: fan-jingle <fanjingle@h-partners.com> | 23 天前 |
| update OpenHarmony 2.0 Canary | 5 年前 |
| agentmd Co-Authored-By: Agent Reviewed-by: yh Signed-off-by: yh <yanghao236@huawei.com> AI[100%] Human Fixed[0%] Human[0%] AI Adopted[100%] Co-authored-by: claude (glm-5.2) <ai@local> | 1 个月前 |
| spm Change-Id: I2ef351dee08ce2695f53d92ae1ec1f47259c45b3 Signed-off-by: yh <yanghao236@huawei.com> | 3 个月前 |
| fix: modify codeowner Feature or Bugfix:Feature Binary Source: No Signed-off-by: liveery <liangming712@huawei.com> | 5 个月前 |
| update OpenHarmony 2.0 Canary | 5 年前 |
| Description:Code optimization Feature or Bugfix:Bugfix Binary Source:No Signed-off-by: lwx1281857 <linnanmu@h-partners.com> | 2 年前 |
| move appspawn_standard to appspawn Signed-off-by: laiguizhong <laiguizhong@huawei.com> Change-Id: I4d7543447d8bb3619b5bab1b0b34364d75283527 | 4 年前 |
| update README_zh.md. Signed-off-by: cheng_jinsong <chengjinsong2@huawei.com> Signed-off-by: cheng_jinsong <chengjinsong2@huawei.com> | 3 年前 |
| 移动配置项 Signed-off-by: fan-jingle <fanjingle@h-partners.com> | 10 个月前 |
| 字体管理沙箱目录挂载 Signed-off-by: OningO <zhangning134@huawei.com> | 9 个月前 |
| Change sandbox Signed-off-by: yww_00 <yiweiwei@huawei.com> | 18 天前 |
| fix testcode diff Signed-off-by: nianyuu <zhouwenqiang12@huawei.com> | 7 个月前 |
| feat: appspawn 解耦基建 P1+P2(引擎原语抽离 + 策略表框架) P1 引擎原语抽离:抽离 5 安全原语 SetUidGid/SetCapabilities/ SetAmbientCapabilities/SetSelinuxCon/ExecvTarget 到 libappspawn_module_engine, 经 stub JSON 导出;appspawn_common.c 的 SetCapabilities 改调原语(行为保持), 冲突的 app wrapper 重命名 SetAppUidGid/SetAppAmbientCapabilities/ SetAppSelinuxCon(均 internal,无 ABI 影响)。MountSandbox 原语随 P3 沙箱改造。 P2 策略表框架:新增 spawn_policy.{h,c} + appspawn-spawn-policy.json, main 启动期 SpawnPolicyInit 加载,ResolvePolicy P2 旁路态返回 app 策略 (值=原硬编码),未被共享 Hook 消费(P3)。app/native/nweb 行为 100% 不变。 stub JSON 导出 5 原语 + SpawnPolicyInit/ResolvePolicy(ABI,需 engine owner 评审); caps 代码行为保持(需安全 owner sign-off)。 hb build appspawn PASS。 Co-Authored-By: Agent Signed-off-by: wangfenging <wangfenging@users.noreply.gitcode.com> AI[100%] Human Fixed[0%] Human[0%] AI Adopted[100%] Co-authored-by: opencode (glm-5.2) <ai@local> Change-Id: I6c46964624c1f1fc40ff3444feccf730e6078046 | 11 天前 |
| nativespawn support asan Co-authored-by: Agent Signed-off-by: nianyuu <zhouwenqiang12@huawei.com> | 5 个月前 |
| 受控应用进行条件挂载需求 Signed-off-by: lzw101025 <3063419981@qq.com> | 1 个月前 |
| fix: inner source issue Signed-off-by: xionglei6 <xionglei6@huawei.com> | 4 年前 |
| prelink: Enable by default Signed-off-by: coolypf- <pf.yuan@huawei.com> | 4 个月前 |
| >> rm invalid file config >> >> Signed-off-by: liangyl_end <liangyunlong5@huawei.com> >> | 1 个月前 |
| mangling modify Signed-off-by: jichunjiang-30079441 <jichunjiang1@h-partners.com> | 7 个月前 |
| add dlopen Signed-off-by: yh <yanghao236@huawei.com> Change-Id: Ie2a01076f047c71519761bbf425f9daf207d647a | 1 年前 |
| Signed-off-by: xxb-wzy <xuxiaobo5@huawei.com> Change-Id: I160626996313deb5011aac925273772672cbdf53 Change-Id: Ic17f76dd7d7ca103fa4621208656af288437c9d0 | 6 个月前 |
| fix codecheck for controlled sandbox Signed-off-by: nianyuu <zhouwenqiang12@h-partners.com> AI[0%] Human Fixed[0%] Human[100%] AI Adopted[0%] | 29 天前 |
| add setuid Signed-off-by: yh <yanghao236@huawei.com> Change-Id: I0c281a950a3fb924d43ba4103f378459ff451a52 | 1 年前 |
| fix diff and sync code Signed-off-by: nianyuu <zhouwenqiang12@h-partners.com> | 3 个月前 |
| Enhance the functionality of hybridspawn Signed-off-by: nianyuu <zhouwenqiang12@huawei.com> | 8 个月前 |
| nativespawn support dec and add dec error log Signed-off-by: nianyuu <zhouwenqiang12@h-partners.com> | 4 个月前 |
| fix testcode diff Signed-off-by: nianyuu <zhouwenqiang12@huawei.com> | 7 个月前 |
| fix: 修改appspawn 异常退出打点事件 Signed-off-by: 樊景乐 <fanjingle@h-partners.com> | 1 年前 |