gfwleak/tango-verify-policy
Archived
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

TSG-14553 策略验证同条件下Deny高于Shunt

Browse Source
This commit is contained in:
fengweihao
2023-04-06 18:37:02 +08:00
parent 1aa056aaf8
commit 57e21ab6d0
2 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
platform/src/verify_matcher.cpp
View File

@@ -223,6 +223,7 @@ void __policy_action_weight_init()
policy_action_weight[PG_ACTION_MANIPULATE] = 3; policy_action_weight[PG_ACTION_MANIPULATE] = 3;
policy_action_weight[PG_ACTION_REJECT] = 4; policy_action_weight[PG_ACTION_REJECT] = 4;
policy_action_weight[PG_ACTION_WHITELIST] = 5; policy_action_weight[PG_ACTION_WHITELIST] = 5;
policy_action_weight[PX_ACTION_SHUNT] = 6;
} }
static inline int action_cmp(enum policy_action a1, enum policy_action a2) static inline int action_cmp(enum policy_action a1, enum policy_action a2)

1
platform/src/verify_policy.cpp
View File

@@ -395,6 +395,7 @@ cJSON *get_query_from_request(const char *data, int thread_id)
{ {
verify_policy->vsys_id = item->valueint; verify_policy->vsys_id = item->valueint;
} }
mesa_runtime_log(RLOG_LV_DEBUG, "[I] vsysId= %d", verify_policy->vsys_id);
item = cJSON_GetObjectItem(subitem,"verifySession"); item = cJSON_GetObjectItem(subitem,"verifySession");
if(item == NULL || item->type!=cJSON_Object) if(item == NULL || item->type!=cJSON_Object)