跳到主要内容

更新安全管控策略

场景介绍

Enterprise Data Guard Kit为应用提供下发管控策略的能力,相关策略会被分发到HarmonyOS系统中执行。

接口说明

详细接口说明可参考接口文档

接口名描述
updatePolicy(policy: string, callback: AsyncCallback<void>): void使用Callback方式更新安全管控策略。
updatePolicy(policy: string): Promise<void>使用Promise方式更新安全管控策略。

开发步骤

  1. 导入模块。

    import { fileGuard } from '@kit.EnterpriseDataGuardKit';
    import { BusinessError } from '@kit.BasicServicesKit';
  2. 初始化FileGuard对象guard,调用接口updatePolicy,更新安全管控策略。

    • 通过回调函数方式,更新安全管控策略。

      function updatePolicyCallback() {
      let guard: fileGuard.FileGuard = new fileGuard.FileGuard();
      let policy: string = '{' +
      '"net_intercept_toggle":1,' +
      '"default_policy":1,' +
      '"net_reject_cache_time":30,' +
      '"boundary":["10.0.0.0-10.255.255.255","172.16.0.0-172.31.255.255"],' +
      '"netsegment_trustlist":["10.0.0.0-10.255.255.255"],' +
      '"netsegment_blocklist":["172.16.0.0-172.31.255.255","192.168.0.0-192.168.255.255"],' +
      '"netsegment_update_type": 0,' +
      '"usb_intercept_toggle":1,' +
      '"smb_client_intercept_toggle":1,' +
      '"smb_server_intercept_toggle":1,' +
      '"new_file_audit_toggle":1,' +
      '"kia_variant_toggle":1,' +
      '"audit_filter_toggle":1,' +
      '"bluetooth_intercept_toggle":["bt_socket","bt_ble","bt_opp"],' +
      '"bluetooth_intercept_time":30,' +
      '"nearlink_intercept_toggle":["nearlink_ssap","nearlink_dataTransfer"],' +
      '"nearlink_intercept_time":30,' +
      '"trust_app_list":["ohos.app.hap.myapplication_BPch04bPYBrkJX8RAsmiGDbHFaG+BYvhkg4TK4fHQzJOL4VnoBCZU3boBBXGVEB+M/j0X2nnd7KVeyWuEORVxI2g="],' +
      '"Tag1":{' +
      ' "tag":"sensitive",' +
      ' "usb_intercept_toggle":1,' +
      ' "net_intercept_toggle":1,' +
      ' "boundary":["10.0.0.0-10.255.255.255"],' +
      ' "netsegment_trustlist":["10.0.0.0-10.255.255.255"],' +
      ' "netsegment_blocklist":["192.168.0.0-192.168.255.255"]' +
      ' }' +
      '}';
      guard.updatePolicy(policy, (err: BusinessError) => {
      if (err) {
      console.error(`Failed to update policy. Code: ${err.code}, message: ${err.message}.`);
      } else {
      console.info(`Succeeded in updating policy.`);
      }
      });
      }
    • 通过Promise方式,更新安全管控策略。

      function updatePolicyPromise() {
      let guard: fileGuard.FileGuard = new fileGuard.FileGuard();
      let policy: string = '{' +
      '"net_intercept_toggle":1,' +
      '"default_policy":1,' +
      '"net_reject_cache_time":30,' +
      '"boundary":["10.0.0.0-10.255.255.255","172.16.0.0-172.31.255.255"],' +
      '"netsegment_trustlist":["10.0.0.0-10.255.255.255"],' +
      '"netsegment_blocklist":["172.16.0.0-172.31.255.255","192.168.0.0-192.168.255.255"],' +
      '"netsegment_update_type": 0,' +
      '"usb_intercept_toggle":1,' +
      '"smb_client_intercept_toggle":1,' +
      '"smb_server_intercept_toggle":1,' +
      '"new_file_audit_toggle":1,' +
      '"kia_variant_toggle":1,' +
      '"audit_filter_toggle":1,' +
      '"bluetooth_intercept_toggle":["bt_socket","bt_ble","bt_opp"],' +
      '"bluetooth_intercept_time":30,' +
      '"nearlink_intercept_toggle":["nearlink_ssap","nearlink_dataTransfer"],' +
      '"nearlink_intercept_time":30,' +
      '"trust_app_list":["ohos.app.hap.myapplication_BPch04bPYBrkJX8RAsmiGDbHFaG+BYvhkg4TK4fHQzJOL4VnoBCZU3boBBXGVEB+M/j0X2nnd7KVeyWuEORVxI2g="],' +
      '"Tag1":{' +
      ' "tag":"sensitive",' +
      ' "usb_intercept_toggle":1,' +
      ' "net_intercept_toggle":1,' +
      ' "boundary":["10.0.0.0-10.255.255.255"],' +
      ' "netsegment_trustlist":["10.0.0.0-10.255.255.255"],' +
      ' "netsegment_blocklist":["192.168.0.0-192.168.255.255"]' +
      ' }' +
      '}';
      guard.updatePolicy(policy).then(() => {
      console.info(`Succeeded in updating policy.`);
      }).catch((err: BusinessError) => {
      console.error(`Failed to update policy. Code: ${err.code}, message: ${err.message}.`);
      });
      }