Resource permission processing method and apparatus, storage medium, and chip

1. A resource permission processing method, comprising:

when a system software version in a terminal device is upgraded, obtaining a first resource permission configuration file, wherein the first resource permission configuration file comprises at least one piece of first path information and a label corresponding to the at least one piece of the first path information in a second resource permission configuration file, the second resource permission configuration file corresponding to a new system software version, and the label corresponding to the first path information in the second resource permission configuration file is different from a previous label corresponding to the first path information in a third resource permission configuration file that corresponds to an earlier system software version; and

updating a resource label in the terminal device based on the first resource permission configuration file.

2. The method according to claim 1 , wherein before the obtaining the first resource permission configuration file, the method further comprises:

obtaining the second resource permission configuration file and the third resource permission configuration file;

comparing a label corresponding to each piece of path information in the second resource permission configuration file with a label corresponding to each piece of the path information in the third resource permission configuration file, and using the path information with different labels as the first path information;

generating the first resource permission configuration file based on each piece of the first path information and a label corresponding to each piece of the first path information in the second resource permission configuration file; and

storing the first resource permission configuration file.

3. The method according to claim 2 , wherein before the storing the first resource permission configuration file, the method further comprises:

encrypting and signing the first resource permission configuration file.

4. The method according to claim 2 , wherein the obtaining the second resource permission configuration file and the third resource permission configuration file comprises:

before a system software version upgrade package is parsed, obtaining the third resource permission configuration file stored in the terminal device; and

when the system software version upgrade package is parsed, obtaining the second resource permission configuration file carried in the system software version upgrade package.

5. The method according to claim 1 , wherein the updating the resource label in the terminal device based on the first resource permission configuration file comprises:

when the first path information comprises a regular expression character, updating all resource labels in an upper-level path of a first path based on the label corresponding to the first path information in the second resource permission configuration file.

6. The method according to claim 1 , wherein the updating the resource label in the terminal device based on the first resource permission configuration file comprises:

when the first path information comprises a regular expression character string in a preset format, updating all resource labels in a first path based on the label corresponding to the first path information in the second resource permission configuration file.

7. The method according to claim 1 , wherein the method further comprises:

when the first resource permission configuration file fails to be obtained, updating the resource label in the terminal device based on the second resource permission configuration file.

8. The method according to claim 1 , wherein the method further comprises:

when duration for updating the resource label in the terminal device exceeds preset duration, restarting the terminal device, and re-obtaining the first resource permission configuration file.

9. The method according to claim 1 , wherein an operating system of the terminal device is a Linux operating system, and the method further comprises:

after an operation of updating the resource label in the terminal device is completed, updating, by using a hash value corresponding to the second resource permission configuration file, a hash value corresponding to a currently used resource permission configuration file stored in the terminal device.

10. A resource permission processing apparatus, comprising:

a processor; and

a memory coupled to the processor to store instructions, which when executed by the processor, cause the processor to:

when a system software version in a terminal device is upgraded, obtain a first resource permission configuration file, wherein the first resource permission configuration file comprises at least one piece of first path information and a label corresponding to the at least one piece of the first path information in a second resource permission configuration file, the second resource permission configuration file corresponding to a new system software version, and the label corresponding to the first path information in the second resource permission configuration file is different from a previous label corresponding to the first path information in a third resource permission configuration file that corresponds to an earlier system software version; and

update a resource label in the terminal device based on the first resource permission configuration file.

11. The apparatus according to claim 10 , wherein the processor is further to:

before the apparatus obtains the first resource permission configuration file, obtain the second resource permission configuration file and the third resource permission configuration file;

compare a label corresponding to each piece of path information in the second resource permission configuration file with a label corresponding to each piece of the path information in the third resource permission configuration file, use the path information with different labels as the first path information, and generate the first resource permission configuration file based on each piece of the first path information and a label corresponding to each piece of the first path information in the second resource permission configuration file; and

store the first resource permission configuration file.

12. The apparatus according to claim 11 , wherein the processor is further to encrypt and sign the first resource permission configuration file before the apparatus stores the first resource permission configuration file.

13. The apparatus according to claim 11 , wherein the processor is to: before a system software version upgrade package is parsed, obtain the third resource permission configuration file stored in the terminal device; and when the system software version upgrade package is parsed, obtain the second resource permission configuration file carried in the system software version upgrade package.

14. The apparatus according to claim 10 , wherein the processor is to: when the first path information comprises a regular expression character, update all resource labels in an upper-level path of a first path based on the label corresponding to the first path information in the second resource permission configuration file.

15. The apparatus according to claim 10 , wherein the processor is to: when the first path information comprises a regular expression character string in a preset format, update all resource labels in a first path based on the label corresponding to the first path information in the second resource permission configuration file.

16. The apparatus according to claim 10 , wherein the processor is further to: when the apparatus fails to obtain the first resource permission configuration file, update the resource label in the terminal device based on the second resource permission configuration file.

17. The apparatus according to claim 10 , wherein the processor is further to:

restart the terminal device when duration in which the apparatus updates the resource label in the terminal device exceeds preset duration, wherein

the processor is further to re-obtain the first resource permission configuration file.

18. The apparatus according to claim 10 , wherein an operating system of the terminal device is a Linux operating system, and the processor is further to: after an operation of updating the resource label in the terminal device is completed, update, by using a hash value corresponding to the second resource permission configuration file, a hash value corresponding to a currently used resource permission configuration file stored in the terminal device.

19. A non-transitory machine-readable storage medium having instructions stored therein, which when executed by a processor, cause the processor to perform operations, the operations comprising:

when a system software version in a terminal device is upgraded, obtaining a first resource permission configuration file, wherein the first resource permission configuration file comprises at least one piece of first path information and a label corresponding to the at least one piece of the first path information in a second resource permission configuration file, the second resource permission configuration file corresponding to a new system software version, and the label corresponding to the first path information in the second resource permission configuration file is different from a previous label corresponding to the first path information in a third resource permission configuration file that corresponds to an earlier system software version; and

updating a resource label in the terminal device based on the first resource permission configuration file.

20. The non-transitory machine-readable storage medium according to claim 19 , wherein the operations further comprises:

obtaining the second resource permission configuration file and the third resource permission configuration file;

comparing a label corresponding to each piece of path information in the second resource permission configuration file with a label corresponding to each piece of the path information in the third resource permission configuration file, and using the path information with different labels as the first path information;

generating the first resource permission configuration file based on each piece of the first path information and a label corresponding to each piece of the first path information in the second resource permission configuration file; and

storing the first resource permission configuration file.