!1369 系统属性开启DAC校验

Merge pull request !1369 from cheng_jinsong/master_cc_opendDAC

services/etc/group

@@ -29,7 +29,7 @@ shared_relro:x:1037:
 audio:x:1041:
 cameraserver:x:1047:
 uiserver:x:1048:
-servicectrl:x:1050:root,shell,system,samgr,hdf_devmgr
+servicectrl:x:1050:root,shell,system,samgr,hdf_devmgr,foundation
 powerctrl:x:1051:root,shell,system,update,power_host
 bootctrl:x:1052:root,shell,system
 deviceprivate:x:1053:root,shell,system,samgr,hdf_devmgr,deviceinfo,dsoftbus,dms,account,useriam,access_token,device_manager,foundation,dbms,deviceauth,huks_server,dlp_credential

services/etc/param/ohos.para.size

@@ -18,16 +18,16 @@ startup_param=40960
 persist_param=40960
 const_param=40960
 persist_sys_param=4096
-hw_sc_param=4096
-hw_sc_build_os_param=4096
-init_param=4096
-init_svc_param=4096
-const_postinstall_param=4096
-const_postinstall_fstab_param=4096
-const_allow_param=4096
-const_allow_mock_param=4096
+hw_sc_param=512
+hw_sc_build_os_param=512
+init_param=512
+init_svc_param=512
+const_postinstall_param=512
+const_postinstall_fstab_param=512
+const_allow_param=512
+const_allow_mock_param=512
 devinfo_public_param=30720
-security_param=4096
+security_param=512
 sys_param=4096
 bootevent_param=4096
 startup_init_param=40960

services/param/adapter/param_dac.c

@@ -266,9 +266,6 @@ static int DacCheckParamPermission(const ParamSecurityLabel *srcLabel, const cha
     if (ret != DAC_RESULT_PERMISSION) {
         PARAM_LOGW("Param '%s' label gid:%d uid:%d mode 0%o", name, srcLabel->cred.gid, srcLabel->cred.uid, localMode);
         PARAM_LOGW("Cfg label %d gid:%d uid:%d mode 0%o ", labelIndex, node->gid, node->uid, node->mode);
-#ifndef STARTUP_INIT_TEST
-        ret = DAC_RESULT_PERMISSION;
-#endif
     }
     return ret;
 }

services/param/include/param_osadp.h

@@ -45,7 +45,7 @@ extern "C" {
 #endif
 
 #define PARAM_WORKSPACE_INVALID ((uint32_t)-1)
-#define PARAM_WORKSPACE_MIN (4096)
+#define PARAM_WORKSPACE_MIN (512)
 #if (defined __LITEOS_A__ || defined __LITEOS_M__)
 #define DAC_DEFAULT_MODE 0777
 #ifdef STARTUP_INIT_TEST

services/param/linux/param_request.c

@@ -39,7 +39,7 @@ __attribute__((constructor)) static void ParameterInit(void)
     if (getpid() == 1) {
         return;
     }
-    EnableInitLog(INIT_ERROR);
+    EnableInitLog(INIT_INFO);
     PARAM_WORKSPACE_OPS ops = {0};
     ops.updaterMode = 0;
 #ifdef PARAM_BASE_LOG