zhaolei
2daa3fcd3c
引擎修复: - policy.yaml allowed_extensions 补 .java/.log/.ttf/.dwg/.odt 等 20+ 类型 (白名单 gate 被拒根因) - structure.py SuspiciousImports weight 45→25 (单一 API 不再直接 100 分 malicious) - structure.py 新增 EncryptedArchive 显式检测 (flag_bits bit0=1) - rules/rule_labels.yaml 新增 EncryptedArchive → 加密压缩包 样本修复: - L0-020/021 zip_bomb 重写: DEFLATED 50×50MB/20×20MB → 膨胀比 1027x/1023x ✅ ArchiveBombSuspect reject - L0-030 nested_traversal 重写: 真 ../穿越 + 内层 zip → PathTraversal malicious - L0-024 encrypted 重写: flag_bits bit0=1 → EncryptedArchive suspicious 最终 P0-P2 关键修复项 9/9 通过: ✅ NEG-007 java clean (白名单放行) ✅ NEG-011 log clean (白名单放行) ✅ NEG-015 ttf clean (白名单放行) ✅ NEG-016 dwg clean (白名单放行) ✅ NEG-020 odt clean (白名单放行) ✅ L0-020 zip_bomb reject ArchiveBombSuspect ✅ L0-021 small_bomb reject ArchiveBombSuspect ✅ L0-024 encrypted suspicious EncryptedArchive ✅ L0-030 nested malicious PathTraversal
25 lines
1.4 KiB
Plaintext
25 lines
1.4 KiB
Plaintext
2026-10-29 11:58:57 [INFO] root - 日志系统初始化完成：级别=INFO，日志文件=/var/log/meshsafe/meshsafe.log（按 10 MB 轮转，保留 5 份）
|
||
2026-10-29 11:58:57 [INFO] app.services.policy - DB 加载策略失败（回退 YAML）: Multiple rows were found when one or none was required
|
||
docker : Traceback (most recent call last):
|
||
At line:15 char:1849
|
||
+ ... RM = 'dumb'; docker exec meshsafe-api python3 /tmp/fa.py 2>&1 | Out-F ...
|
||
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
||
+ CategoryInfo : NotSpecified: (Traceback (most recent call last)::String) [], RemoteException
|
||
+ FullyQualifiedErrorId : NativeCommandError
|
||
|
||
File "/tmp/fa.py", line 128, in <module>
|
||
asyncio.run(run())
|
||
File "/usr/local/lib/python3.12/asyncio/runners.py", line 195, in run
|
||
return runner.run(main)
|
||
^^^^^^^^^^^^^^^^
|
||
File "/usr/local/lib/python3.12/asyncio/runners.py", line 118, in run
|
||
return self._loop.run_until_complete(task)
|
||
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
|
||
File "/usr/local/lib/python3.12/asyncio/base_events.py", line 691, in run_until_complete
|
||
return future.result()
|
||
^^^^^^^^^^^^^^^
|
||
File "/tmp/fa.py", line 16, in run
|
||
with open('/tmp/yongli.csv', encoding='utf-8') as f:
|
||
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
|
||
FileNotFoundError: [Errno 2] No such file or directory: '/tmp/yongli.csv'
|