Skip to content

RDKB-64133: Allow restoreConfig in business devices #355

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
snayak002c merged 13 commits into from
Jun 30, 2026
Merged

RDKB-64133: Allow restoreConfig in business devices #355

Changes from all commits
Commits
Show all changes
13 commits
Select commit Hold shift + click to select a range
2c29616
RDKB-64133: Allow restoreConfig in business devices
pavankumar464 Jun 25, 2026
cd68743
RDKB-64133: Fix linker error - use isFeatureSupportedInCurrentMode fo…
pavankumar464 Jun 25, 2026
908d74a
RDKB-64133: Link -ldevicemode in firewall for OneStack business mode …
pavankumar464 Jun 25, 2026
54dade9
RDKB-64133: Add devicemode.h include for is_devicemode_business in fi…
pavankumar464 Jun 25, 2026
faa919f
Apply suggestions from code review
pavankumar464 Jun 25, 2026
79e55bd
RDKB-64133: Scope libdevicemode linkage to firewall target only
pavankumar464 Jun 25, 2026
e1c6aab
replace business mode check with feature-mode gate
pavankumar464 Jun 29, 2026
620e270
Apply suggestions from code review
pavankumar464 Jun 29, 2026
c3de90b
firewall: remove extra blank line in Makefile.am
pavankumar464 Jun 29, 2026
aba8c72
firewall: append restoreConfig whitelist rule to preserve attack-sign…
pavankumar464 Jun 29, 2026
cef2583
Merge branch 'develop' into bug/RDKB-64133
pavankumar464 Jun 29, 2026
7b479cc
firewall: align restoreConfig RETURN rule with ONESTACK feature-gate …
pavankumar464 Jun 30, 2026
bcae2a5
Merge branch 'develop' into bug/RDKB-64133
snayak002c Jun 30, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 8 additions & 0 deletions source/firewall/firewall.c
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -1567,6 +1567,14 @@ void do_webui_attack_filter(FILE *filter_fp)
fprintf(filter_fp, "-A UPLOAD_ATTACK_FILTER -m string --algo bm --string \"%s\" -j DROP \n", ".pi");
fprintf(filter_fp, "-A UPLOAD_ATTACK_FILTER -m string --algo bm --string \"%s\" -j DROP \n", ".sh");
fprintf(filter_fp, "-A UPLOAD_ATTACK_FILTER -m string --algo bm --string \"%s\" -j DROP \n", ".py");
#if defined(_CBR2_PRODUCT_REQ_) || defined(_ONESTACK_PRODUCT_REQ_)
#ifdef _ONESTACK_PRODUCT_REQ_
if(isFeatureSupportedInCurrentMode(FEATURE_SAVE_RESTORE))
#endif
{
fprintf(filter_fp, "-A UPLOAD_ATTACK_FILTER -p tcp -m string --algo bm --from 0 --to 64 --string \"%s\" -j RETURN \n", "POST /restoreConfig.jst HTTP");
}
#endif
fprintf(filter_fp, "-A UPLOAD_ATTACK_FILTER -m string --algo bm --string \"%s\" -j DROP \n", "multipart/form-data");
FIREWALL_DEBUG("Exiting do_webui_attack_filter\n");
}
Expand Down
Loading