gfwleak/tango-verify-policy
Archived
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

TSG-9756 修改默认工作线程数为3，拆分安全策略和管控策略maat句柄

Browse Source
This commit is contained in:
fengweihao
2022-02-28 14:53:04 +08:00
parent 2f1dfd6580
commit 3dce53c1da
4 changed files with 22 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
common/src/verify_policy_logging.cpp
View File

@@ -42,7 +42,7 @@ void * verify_syslog_init(const char *config)
goto finish; goto finish;
} }
logging_sc_lid.run_log_handle = MESA_create_runtime_log_handle("./logs", RLOG_LV_DEBUG); logging_sc_lid.run_log_handle = MESA_create_runtime_log_handle("verify_policy", RLOG_LV_DEBUG);
if(logging_sc_lid.run_log_handle == NULL){ if(logging_sc_lid.run_log_handle == NULL){
mesa_runtime_log(RLOG_LV_FATAL, MODULE_NAME, "Create log runtime_log_handle error, init failed!"); mesa_runtime_log(RLOG_LV_FATAL, MODULE_NAME, "Create log runtime_log_handle error, init failed!");
goto finish; goto finish;

2
conf/verify_policy.conf
View File

@@ -13,7 +13,7 @@ breakpad_upload_url="http://127.0.0.1/"
[CONFIG] [CONFIG]
#Number of running threads #Number of running threads
thread-nu = 4 thread-nu = 3
[maat] [maat]
# 0:json 1: redis 2: iris # 0:json 1: redis 2: iris

5
conf/zlog.conf
View File

@@ -8,6 +8,7 @@ INFO=20
FATAL=30 FATAL=30
[rules] [rules]
*.fatal "./logs/error.log.%d(%F)"; *.fatal "./logs/error.log.%d(%F)";
!*.debug "./logs/verify_policy.log.%d(%F)" verify_policy.fatal "./logs/verify_policy.log.%d(%F)";
!*.info "./logs/verify_policy.log.%d(%F)" proxy_policy_maat.fatal "./logs/proxy_policy_maat.log.%d(%F)";
security_policy_maat.fatal "./logs/security_policy_maat.log.%d(%F)";

19
scan/src/policy_scan.cpp
View File

@@ -1342,12 +1342,19 @@ error_out:
int proxy_policy_init(struct verify_policy * verify, const char* profile_path) int proxy_policy_init(struct verify_policy * verify, const char* profile_path)
{ {
int ret = -1; int ret = -1;
void *local_logger = NULL;
g_pangu_rt = ALLOC(struct pangu_rt, 1); g_pangu_rt = ALLOC(struct pangu_rt, 1);
g_pangu_rt->thread_num = verify->nr_work_threads; local_logger = MESA_create_runtime_log_handle("proxy_policy_maat", RLOG_LV_DEBUG);
if(local_logger == NULL)
{
mesa_runtime_log(RLOG_LV_FATAL, MODULE_NAME, "Create log runtime_log_handle error, init failed!");
}
g_pangu_rt->local_logger = verify->logger; g_pangu_rt->local_logger = verify->logger;
g_pangu_rt->maat[PXY_TABLE_MANIPULATION] = create_maat_feather("static", profile_path, "MAAT", "table_info", g_pangu_rt->thread_num, g_pangu_rt->local_logger); g_pangu_rt->thread_num = verify->nr_work_threads;
g_pangu_rt->maat[PXY_TABLE_MANIPULATION] = create_maat_feather("static", profile_path, "MAAT", "table_info", g_pangu_rt->thread_num, local_logger);
if (!g_pangu_rt->maat[PXY_TABLE_MANIPULATION]) if (!g_pangu_rt->maat[PXY_TABLE_MANIPULATION])
{ {
goto error_out; goto error_out;
@@ -1392,7 +1399,13 @@ int security_policy_init(struct verify_policy * verify, const char* profile_path
{ {
int ret = -1; int ret = -1;
g_pangu_rt->maat[PXY_TABLE_SECURITY] = create_maat_feather("static", profile_path, "MAAT", "table_info_tsg", g_pangu_rt->thread_num, g_pangu_rt->local_logger); void *local_logger = MESA_create_runtime_log_handle("security_policy_maat", RLOG_LV_DEBUG);
if(local_logger == NULL)
{
mesa_runtime_log(RLOG_LV_FATAL, MODULE_NAME, "Create log runtime_log_handle error, init failed!");
}
g_pangu_rt->maat[PXY_TABLE_SECURITY] = create_maat_feather("static", profile_path, "MAAT", "table_info_tsg", g_pangu_rt->thread_num, local_logger);
if (!g_pangu_rt->maat[PXY_TABLE_SECURITY]) if (!g_pangu_rt->maat[PXY_TABLE_SECURITY])
{ {
goto error_out; goto error_out;