Skip to content

RDK-61551: Revssh Hardening - Entertainement devices #622

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
Lasya-Prakarsha-D-V wants to merge 9 commits into
base: develop
Choose a base branch
from
Open

RDK-61551: Revssh Hardening - Entertainement devices #622

Changes from all commits
Commits
Show all changes
9 commits
Select commit Hold shift + click to select a range
7285c22
RDK-61551: Revssh Hardening - Entertainement devices
Sep 3, 2026
b82ee56
Improv telemetry markers
Sep 14, 2026
8062ffc
Merge branch 'develop' into topic/RDK-61551
Lasya-Prakarsha-D-V Sep 16, 2026
153d96e
After latest review comments
Sep 16, 2026
eefbcbd
Update startStunnel.sh
Lasya-Prakarsha-D-V Sep 16, 2026
911d5c3
Update startStunnel.sh
Lasya-Prakarsha-D-V Sep 16, 2026
d5c972b
Update startStunnel.sh
Lasya-Prakarsha-D-V Sep 17, 2026
598884e
Update startStunnel.sh
Lasya-Prakarsha-D-V Sep 21, 2026
5b7aecd
Update startStunnel.sh
Lasya-Prakarsha-D-V Sep 21, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
28 changes: 22 additions & 6 deletions lib/rdk/startStunnel.sh
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -45,6 +45,13 @@ usage()
echo_t "STUNNEL USAGE: startSTunnel.sh <localport> <jumpfqdn> <jumpserverip> <jumpserverport> <reverseSSHArgs>"
}

echo_t "STUNNEL: Build type is $BUILD_TYPE"

is_non_prod_build()
{
[ -n "$BUILD_TYPE" ] && [ "$BUILD_TYPE" != "prod" ]
}

if [ $# -lt 5 ]; then
usage
exit 1
Expand Down Expand Up @@ -78,10 +85,17 @@ echo_t "NONSHORTSARGS :$NONSHORTSARGS"
t2ValNotify "SSH_INFO_SOURCE_IP" "$JUMP_SERVER"

isShortsenabled=`tr181 Device.DeviceInfo.X_RDKCENTRAL-COM_RFC.Feature.SHORTS.Enable 2>&1 > /dev/null`
echo_t "isShortsenabled = $isShortsenabled "
if [ "$isShortsenabled" == "false" ];then
/bin/sh /lib/rdk/startTunnel.sh start ${REVERSESSHARGS}${NONSHORTSARGS}
exit 0
if is_non_prod_build; then
echo_t "isShortsenabled = $isShortsenabled "
if [ "$isShortsenabled" = "false" ]; then
/bin/sh /lib/rdk/startTunnel.sh start ${REVERSESSHARGS}${NONSHORTSARGS}
exit 0
fi
else
if [ "$isShortsenabled" = "false" ]; then
echo_t "STUNNEL: SHORTS RFC is false on PROD build; enforcing SHORTS."
t2CountNotify "SHORTS_MANDATORY_NON_SHORTS_BLOCKED"
fi
fi

STUNNEL_PID_FILE=/tmp/stunnel_$LOCAL_PORT.pid
Expand Down Expand Up @@ -127,8 +141,9 @@ if [ ! -z "$DEVICETYPE" ]; then
echo "checkHost = $PROD_SAN" >> $STUNNEL_CONF_FILE
fi
else
echo_t "STUNNEL: Device type is Unknown"
t2CountNotify "SHORTS_DEVICE_TYPE_UNKNOWN"
echo_t "STUNNEL: Device type is Unknown, applying PROD SAN policy."
t2CountNotify "SHORTS_DEVICE_TYPE_PROD"
echo "checkHost = $PROD_SAN" >> $STUNNEL_CONF_FILE
fi

#Function to find available fd at this point in time
Expand Down Expand Up @@ -195,6 +210,7 @@ fi
/usr/bin/stunnel $STUNNEL_CONF_FILE
if [ $? -ne 0 ]; then
echo_t "STUNNEL: ERROR - Failed to start stunnel process."
t2CountNotify "SHORTS_STUNNEL_LAUNCH_FAILURE" "Failed to start stunnel process"
exit 1
fi

Expand Down
Loading