init.c revision de151571a4512491bc11f94e60c60c8fa84893f3
1/* 2 * Copyright (C) 2008 The Android Open Source Project 3 * 4 * Licensed under the Apache License, Version 2.0 (the "License"); 5 * you may not use this file except in compliance with the License. 6 * You may obtain a copy of the License at 7 * 8 * http://www.apache.org/licenses/LICENSE-2.0 9 * 10 * Unless required by applicable law or agreed to in writing, software 11 * distributed under the License is distributed on an "AS IS" BASIS, 12 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 13 * See the License for the specific language governing permissions and 14 * limitations under the License. 15 */ 16 17#include <stdio.h> 18#include <stdlib.h> 19#include <string.h> 20#include <unistd.h> 21#include <fcntl.h> 22#include <ctype.h> 23#include <signal.h> 24#include <sys/wait.h> 25#include <sys/mount.h> 26#include <sys/stat.h> 27#include <sys/poll.h> 28#include <errno.h> 29#include <stdarg.h> 30#include <mtd/mtd-user.h> 31#include <sys/types.h> 32#include <sys/socket.h> 33#include <sys/un.h> 34 35#include <selinux/selinux.h> 36#include <selinux/label.h> 37#include <selinux/android.h> 38 39#include <libgen.h> 40 41#include <cutils/list.h> 42#include <cutils/android_reboot.h> 43#include <cutils/sockets.h> 44#include <cutils/iosched_policy.h> 45#include <cutils/fs.h> 46#include <private/android_filesystem_config.h> 47#include <termios.h> 48 49#include <sys/system_properties.h> 50 51#include "devices.h" 52#include "init.h" 53#include "log.h" 54#include "property_service.h" 55#include "bootchart.h" 56#include "signal_handler.h" 57#include "keychords.h" 58#include "init_parser.h" 59#include "util.h" 60#include "ueventd.h" 61#include "watchdogd.h" 62 63struct selabel_handle *sehandle; 64struct selabel_handle *sehandle_prop; 65 66static int property_triggers_enabled = 0; 67 68#if BOOTCHART 69static int bootchart_count; 70#endif 71 72static char console[32]; 73static char bootmode[32]; 74static char hardware[32]; 75static unsigned revision = 0; 76static char qemu[32]; 77 78static struct action *cur_action = NULL; 79static struct command *cur_command = NULL; 80static struct listnode *command_queue = NULL; 81 82void notify_service_state(const char *name, const char *state) 83{ 84 char pname[PROP_NAME_MAX]; 85 int len = strlen(name); 86 if ((len + 10) > PROP_NAME_MAX) 87 return; 88 snprintf(pname, sizeof(pname), "init.svc.%s", name); 89 property_set(pname, state); 90} 91 92static int have_console; 93static char console_name[PROP_VALUE_MAX] = "/dev/console"; 94static time_t process_needs_restart; 95 96static const char *ENV[32]; 97 98/* add_environment - add "key=value" to the current environment */ 99int add_environment(const char *key, const char *val) 100{ 101 int n; 102 103 for (n = 0; n < 31; n++) { 104 if (!ENV[n]) { 105 size_t len = strlen(key) + strlen(val) + 2; 106 char *entry = malloc(len); 107 snprintf(entry, len, "%s=%s", key, val); 108 ENV[n] = entry; 109 return 0; 110 } 111 } 112 113 return 1; 114} 115 116static void zap_stdio(void) 117{ 118 int fd; 119 fd = open("/dev/null", O_RDWR); 120 dup2(fd, 0); 121 dup2(fd, 1); 122 dup2(fd, 2); 123 close(fd); 124} 125 126static void open_console() 127{ 128 int fd; 129 if ((fd = open(console_name, O_RDWR)) < 0) { 130 fd = open("/dev/null", O_RDWR); 131 } 132 ioctl(fd, TIOCSCTTY, 0); 133 dup2(fd, 0); 134 dup2(fd, 1); 135 dup2(fd, 2); 136 close(fd); 137} 138 139static void publish_socket(const char *name, int fd) 140{ 141 char key[64] = ANDROID_SOCKET_ENV_PREFIX; 142 char val[64]; 143 144 strlcpy(key + sizeof(ANDROID_SOCKET_ENV_PREFIX) - 1, 145 name, 146 sizeof(key) - sizeof(ANDROID_SOCKET_ENV_PREFIX)); 147 snprintf(val, sizeof(val), "%d", fd); 148 add_environment(key, val); 149 150 /* make sure we don't close-on-exec */ 151 fcntl(fd, F_SETFD, 0); 152} 153 154void service_start(struct service *svc, const char *dynamic_args) 155{ 156 struct stat s; 157 pid_t pid; 158 int needs_console; 159 int n; 160 char *scon = NULL; 161 int rc; 162 163 /* starting a service removes it from the disabled or reset 164 * state and immediately takes it out of the restarting 165 * state if it was in there 166 */ 167 svc->flags &= (~(SVC_DISABLED|SVC_RESTARTING|SVC_RESET|SVC_RESTART)); 168 svc->time_started = 0; 169 170 /* running processes require no additional work -- if 171 * they're in the process of exiting, we've ensured 172 * that they will immediately restart on exit, unless 173 * they are ONESHOT 174 */ 175 if (svc->flags & SVC_RUNNING) { 176 return; 177 } 178 179 needs_console = (svc->flags & SVC_CONSOLE) ? 1 : 0; 180 if (needs_console && (!have_console)) { 181 ERROR("service '%s' requires console\n", svc->name); 182 svc->flags |= SVC_DISABLED; 183 return; 184 } 185 186 if (stat(svc->args[0], &s) != 0) { 187 ERROR("cannot find '%s', disabling '%s'\n", svc->args[0], svc->name); 188 svc->flags |= SVC_DISABLED; 189 return; 190 } 191 192 if ((!(svc->flags & SVC_ONESHOT)) && dynamic_args) { 193 ERROR("service '%s' must be one-shot to use dynamic args, disabling\n", 194 svc->args[0]); 195 svc->flags |= SVC_DISABLED; 196 return; 197 } 198 199 if (is_selinux_enabled() > 0) { 200 if (svc->seclabel) { 201 scon = strdup(svc->seclabel); 202 if (!scon) { 203 ERROR("Out of memory while starting '%s'\n", svc->name); 204 return; 205 } 206 } else { 207 char *mycon = NULL, *fcon = NULL; 208 209 INFO("computing context for service '%s'\n", svc->args[0]); 210 rc = getcon(&mycon); 211 if (rc < 0) { 212 ERROR("could not get context while starting '%s'\n", svc->name); 213 return; 214 } 215 216 rc = getfilecon(svc->args[0], &fcon); 217 if (rc < 0) { 218 ERROR("could not get context while starting '%s'\n", svc->name); 219 freecon(mycon); 220 return; 221 } 222 223 rc = security_compute_create(mycon, fcon, string_to_security_class("process"), &scon); 224 if (rc == 0 && !strcmp(scon, mycon)) { 225 ERROR("Warning! Service %s needs a SELinux domain defined; please fix!\n", svc->name); 226 } 227 freecon(mycon); 228 freecon(fcon); 229 if (rc < 0) { 230 ERROR("could not get context while starting '%s'\n", svc->name); 231 return; 232 } 233 } 234 } 235 236 NOTICE("starting '%s'\n", svc->name); 237 238 pid = fork(); 239 240 if (pid == 0) { 241 struct socketinfo *si; 242 struct svcenvinfo *ei; 243 char tmp[32]; 244 int fd, sz; 245 246 umask(077); 247 if (properties_inited()) { 248 get_property_workspace(&fd, &sz); 249 sprintf(tmp, "%d,%d", dup(fd), sz); 250 add_environment("ANDROID_PROPERTY_WORKSPACE", tmp); 251 } 252 253 for (ei = svc->envvars; ei; ei = ei->next) 254 add_environment(ei->name, ei->value); 255 256 for (si = svc->sockets; si; si = si->next) { 257 int socket_type = ( 258 !strcmp(si->type, "stream") ? SOCK_STREAM : 259 (!strcmp(si->type, "dgram") ? SOCK_DGRAM : SOCK_SEQPACKET)); 260 int s = create_socket(si->name, socket_type, 261 si->perm, si->uid, si->gid, si->socketcon ?: scon); 262 if (s >= 0) { 263 publish_socket(si->name, s); 264 } 265 } 266 267 freecon(scon); 268 scon = NULL; 269 270 if (svc->ioprio_class != IoSchedClass_NONE) { 271 if (android_set_ioprio(getpid(), svc->ioprio_class, svc->ioprio_pri)) { 272 ERROR("Failed to set pid %d ioprio = %d,%d: %s\n", 273 getpid(), svc->ioprio_class, svc->ioprio_pri, strerror(errno)); 274 } 275 } 276 277 if (needs_console) { 278 setsid(); 279 open_console(); 280 } else { 281 zap_stdio(); 282 } 283 284#if 0 285 for (n = 0; svc->args[n]; n++) { 286 INFO("args[%d] = '%s'\n", n, svc->args[n]); 287 } 288 for (n = 0; ENV[n]; n++) { 289 INFO("env[%d] = '%s'\n", n, ENV[n]); 290 } 291#endif 292 293 setpgid(0, getpid()); 294 295 /* as requested, set our gid, supplemental gids, and uid */ 296 if (svc->gid) { 297 if (setgid(svc->gid) != 0) { 298 ERROR("setgid failed: %s\n", strerror(errno)); 299 _exit(127); 300 } 301 } 302 if (svc->nr_supp_gids) { 303 if (setgroups(svc->nr_supp_gids, svc->supp_gids) != 0) { 304 ERROR("setgroups failed: %s\n", strerror(errno)); 305 _exit(127); 306 } 307 } 308 if (svc->uid) { 309 if (setuid(svc->uid) != 0) { 310 ERROR("setuid failed: %s\n", strerror(errno)); 311 _exit(127); 312 } 313 } 314 if (svc->seclabel) { 315 if (is_selinux_enabled() > 0 && setexeccon(svc->seclabel) < 0) { 316 ERROR("cannot setexeccon('%s'): %s\n", svc->seclabel, strerror(errno)); 317 _exit(127); 318 } 319 } 320 321 if (!dynamic_args) { 322 if (execve(svc->args[0], (char**) svc->args, (char**) ENV) < 0) { 323 ERROR("cannot execve('%s'): %s\n", svc->args[0], strerror(errno)); 324 } 325 } else { 326 char *arg_ptrs[INIT_PARSER_MAXARGS+1]; 327 int arg_idx = svc->nargs; 328 char *tmp = strdup(dynamic_args); 329 char *next = tmp; 330 char *bword; 331 332 /* Copy the static arguments */ 333 memcpy(arg_ptrs, svc->args, (svc->nargs * sizeof(char *))); 334 335 while((bword = strsep(&next, " "))) { 336 arg_ptrs[arg_idx++] = bword; 337 if (arg_idx == INIT_PARSER_MAXARGS) 338 break; 339 } 340 arg_ptrs[arg_idx] = '\0'; 341 execve(svc->args[0], (char**) arg_ptrs, (char**) ENV); 342 } 343 _exit(127); 344 } 345 346 freecon(scon); 347 348 if (pid < 0) { 349 ERROR("failed to start '%s'\n", svc->name); 350 svc->pid = 0; 351 return; 352 } 353 354 svc->time_started = gettime(); 355 svc->pid = pid; 356 svc->flags |= SVC_RUNNING; 357 358 if (properties_inited()) 359 notify_service_state(svc->name, "running"); 360} 361 362/* The how field should be either SVC_DISABLED, SVC_RESET, or SVC_RESTART */ 363static void service_stop_or_reset(struct service *svc, int how) 364{ 365 /* The service is still SVC_RUNNING until its process exits, but if it has 366 * already exited it shoudn't attempt a restart yet. */ 367 svc->flags &= (~SVC_RESTARTING); 368 369 if ((how != SVC_DISABLED) && (how != SVC_RESET) && (how != SVC_RESTART)) { 370 /* Hrm, an illegal flag. Default to SVC_DISABLED */ 371 how = SVC_DISABLED; 372 } 373 /* if the service has not yet started, prevent 374 * it from auto-starting with its class 375 */ 376 if (how == SVC_RESET) { 377 svc->flags |= (svc->flags & SVC_RC_DISABLED) ? SVC_DISABLED : SVC_RESET; 378 } else { 379 svc->flags |= how; 380 } 381 382 if (svc->pid) { 383 NOTICE("service '%s' is being killed\n", svc->name); 384 kill(-svc->pid, SIGKILL); 385 notify_service_state(svc->name, "stopping"); 386 } else { 387 notify_service_state(svc->name, "stopped"); 388 } 389} 390 391void service_reset(struct service *svc) 392{ 393 service_stop_or_reset(svc, SVC_RESET); 394} 395 396void service_stop(struct service *svc) 397{ 398 service_stop_or_reset(svc, SVC_DISABLED); 399} 400 401void service_restart(struct service *svc) 402{ 403 if (svc->flags & SVC_RUNNING) { 404 /* Stop, wait, then start the service. */ 405 service_stop_or_reset(svc, SVC_RESTART); 406 } else if (!(svc->flags & SVC_RESTARTING)) { 407 /* Just start the service since it's not running. */ 408 service_start(svc, NULL); 409 } /* else: Service is restarting anyways. */ 410} 411 412void property_changed(const char *name, const char *value) 413{ 414 if (property_triggers_enabled) 415 queue_property_triggers(name, value); 416} 417 418static void restart_service_if_needed(struct service *svc) 419{ 420 time_t next_start_time = svc->time_started + 5; 421 422 if (next_start_time <= gettime()) { 423 svc->flags &= (~SVC_RESTARTING); 424 service_start(svc, NULL); 425 return; 426 } 427 428 if ((next_start_time < process_needs_restart) || 429 (process_needs_restart == 0)) { 430 process_needs_restart = next_start_time; 431 } 432} 433 434static void restart_processes() 435{ 436 process_needs_restart = 0; 437 service_for_each_flags(SVC_RESTARTING, 438 restart_service_if_needed); 439} 440 441static void msg_start(const char *name) 442{ 443 struct service *svc = NULL; 444 char *tmp = NULL; 445 char *args = NULL; 446 447 if (!strchr(name, ':')) 448 svc = service_find_by_name(name); 449 else { 450 tmp = strdup(name); 451 if (tmp) { 452 args = strchr(tmp, ':'); 453 *args = '\0'; 454 args++; 455 456 svc = service_find_by_name(tmp); 457 } 458 } 459 460 if (svc) { 461 service_start(svc, args); 462 } else { 463 ERROR("no such service '%s'\n", name); 464 } 465 if (tmp) 466 free(tmp); 467} 468 469static void msg_stop(const char *name) 470{ 471 struct service *svc = service_find_by_name(name); 472 473 if (svc) { 474 service_stop(svc); 475 } else { 476 ERROR("no such service '%s'\n", name); 477 } 478} 479 480static void msg_restart(const char *name) 481{ 482 struct service *svc = service_find_by_name(name); 483 484 if (svc) { 485 service_restart(svc); 486 } else { 487 ERROR("no such service '%s'\n", name); 488 } 489} 490 491void handle_control_message(const char *msg, const char *arg) 492{ 493 if (!strcmp(msg,"start")) { 494 msg_start(arg); 495 } else if (!strcmp(msg,"stop")) { 496 msg_stop(arg); 497 } else if (!strcmp(msg,"restart")) { 498 msg_restart(arg); 499 } else { 500 ERROR("unknown control msg '%s'\n", msg); 501 } 502} 503 504static struct command *get_first_command(struct action *act) 505{ 506 struct listnode *node; 507 node = list_head(&act->commands); 508 if (!node || list_empty(&act->commands)) 509 return NULL; 510 511 return node_to_item(node, struct command, clist); 512} 513 514static struct command *get_next_command(struct action *act, struct command *cmd) 515{ 516 struct listnode *node; 517 node = cmd->clist.next; 518 if (!node) 519 return NULL; 520 if (node == &act->commands) 521 return NULL; 522 523 return node_to_item(node, struct command, clist); 524} 525 526static int is_last_command(struct action *act, struct command *cmd) 527{ 528 return (list_tail(&act->commands) == &cmd->clist); 529} 530 531void execute_one_command(void) 532{ 533 int ret; 534 535 if (!cur_action || !cur_command || is_last_command(cur_action, cur_command)) { 536 cur_action = action_remove_queue_head(); 537 cur_command = NULL; 538 if (!cur_action) 539 return; 540 INFO("processing action %p (%s)\n", cur_action, cur_action->name); 541 cur_command = get_first_command(cur_action); 542 } else { 543 cur_command = get_next_command(cur_action, cur_command); 544 } 545 546 if (!cur_command) 547 return; 548 549 ret = cur_command->func(cur_command->nargs, cur_command->args); 550 INFO("command '%s' r=%d\n", cur_command->args[0], ret); 551} 552 553static int wait_for_coldboot_done_action(int nargs, char **args) 554{ 555 int ret; 556 INFO("wait for %s\n", coldboot_done); 557 ret = wait_for_file(coldboot_done, COMMAND_RETRY_TIMEOUT); 558 if (ret) 559 ERROR("Timed out waiting for %s\n", coldboot_done); 560 return ret; 561} 562 563/* 564 * Writes 512 bytes of output from Hardware RNG (/dev/hw_random, backed 565 * by Linux kernel's hw_random framework) into Linux RNG's via /dev/urandom. 566 * Does nothing if Hardware RNG is not present. 567 * 568 * Since we don't yet trust the quality of Hardware RNG, these bytes are not 569 * mixed into the primary pool of Linux RNG and the entropy estimate is left 570 * unmodified. 571 * 572 * If the HW RNG device /dev/hw_random is present, we require that at least 573 * 512 bytes read from it are written into Linux RNG. QA is expected to catch 574 * devices/configurations where these I/O operations are blocking for a long 575 * time. We do not reboot or halt on failures, as this is a best-effort 576 * attempt. 577 */ 578static int mix_hwrng_into_linux_rng_action(int nargs, char **args) 579{ 580 int result = -1; 581 int hwrandom_fd = -1; 582 int urandom_fd = -1; 583 char buf[512]; 584 ssize_t chunk_size; 585 size_t total_bytes_written = 0; 586 587 hwrandom_fd = TEMP_FAILURE_RETRY( 588 open("/dev/hw_random", O_RDONLY | O_NOFOLLOW)); 589 if (hwrandom_fd == -1) { 590 if (errno == ENOENT) { 591 ERROR("/dev/hw_random not found\n"); 592 /* It's not an error to not have a Hardware RNG. */ 593 result = 0; 594 } else { 595 ERROR("Failed to open /dev/hw_random: %s\n", strerror(errno)); 596 } 597 goto ret; 598 } 599 600 urandom_fd = TEMP_FAILURE_RETRY( 601 open("/dev/urandom", O_WRONLY | O_NOFOLLOW)); 602 if (urandom_fd == -1) { 603 ERROR("Failed to open /dev/urandom: %s\n", strerror(errno)); 604 goto ret; 605 } 606 607 while (total_bytes_written < sizeof(buf)) { 608 chunk_size = TEMP_FAILURE_RETRY( 609 read(hwrandom_fd, buf, sizeof(buf) - total_bytes_written)); 610 if (chunk_size == -1) { 611 ERROR("Failed to read from /dev/hw_random: %s\n", strerror(errno)); 612 goto ret; 613 } else if (chunk_size == 0) { 614 ERROR("Failed to read from /dev/hw_random: EOF\n"); 615 goto ret; 616 } 617 618 chunk_size = TEMP_FAILURE_RETRY(write(urandom_fd, buf, chunk_size)); 619 if (chunk_size == -1) { 620 ERROR("Failed to write to /dev/urandom: %s\n", strerror(errno)); 621 goto ret; 622 } 623 total_bytes_written += chunk_size; 624 } 625 626 INFO("Mixed %zu bytes from /dev/hw_random into /dev/urandom", 627 total_bytes_written); 628 result = 0; 629 630ret: 631 if (hwrandom_fd != -1) { 632 close(hwrandom_fd); 633 } 634 if (urandom_fd != -1) { 635 close(urandom_fd); 636 } 637 memset(buf, 0, sizeof(buf)); 638 return result; 639} 640 641static int keychord_init_action(int nargs, char **args) 642{ 643 keychord_init(); 644 return 0; 645} 646 647static int console_init_action(int nargs, char **args) 648{ 649 int fd; 650 651 if (console[0]) { 652 snprintf(console_name, sizeof(console_name), "/dev/%s", console); 653 } 654 655 fd = open(console_name, O_RDWR); 656 if (fd >= 0) 657 have_console = 1; 658 close(fd); 659 660 fd = open("/dev/tty0", O_WRONLY); 661 if (fd >= 0) { 662 const char *msg; 663 msg = "\n" 664 "\n" 665 "\n" 666 "\n" 667 "\n" 668 "\n" 669 "\n" // console is 40 cols x 30 lines 670 "\n" 671 "\n" 672 "\n" 673 "\n" 674 "\n" 675 "\n" 676 "\n" 677 " A N D R O I D "; 678 write(fd, msg, strlen(msg)); 679 close(fd); 680 } 681 682 return 0; 683} 684 685static void import_kernel_nv(char *name, int for_emulator) 686{ 687 char *value = strchr(name, '='); 688 int name_len = strlen(name); 689 690 if (value == 0) return; 691 *value++ = 0; 692 if (name_len == 0) return; 693 694 if (for_emulator) { 695 /* in the emulator, export any kernel option with the 696 * ro.kernel. prefix */ 697 char buff[PROP_NAME_MAX]; 698 int len = snprintf( buff, sizeof(buff), "ro.kernel.%s", name ); 699 700 if (len < (int)sizeof(buff)) 701 property_set( buff, value ); 702 return; 703 } 704 705 if (!strcmp(name,"qemu")) { 706 strlcpy(qemu, value, sizeof(qemu)); 707 } else if (!strncmp(name, "androidboot.", 12) && name_len > 12) { 708 const char *boot_prop_name = name + 12; 709 char prop[PROP_NAME_MAX]; 710 int cnt; 711 712 cnt = snprintf(prop, sizeof(prop), "ro.boot.%s", boot_prop_name); 713 if (cnt < PROP_NAME_MAX) 714 property_set(prop, value); 715 } 716} 717 718static void export_kernel_boot_props(void) 719{ 720 char tmp[PROP_VALUE_MAX]; 721 int ret; 722 unsigned i; 723 struct { 724 const char *src_prop; 725 const char *dest_prop; 726 const char *def_val; 727 } prop_map[] = { 728 { "ro.boot.serialno", "ro.serialno", "", }, 729 { "ro.boot.mode", "ro.bootmode", "unknown", }, 730 { "ro.boot.baseband", "ro.baseband", "unknown", }, 731 { "ro.boot.bootloader", "ro.bootloader", "unknown", }, 732 }; 733 734 for (i = 0; i < ARRAY_SIZE(prop_map); i++) { 735 ret = property_get(prop_map[i].src_prop, tmp); 736 if (ret > 0) 737 property_set(prop_map[i].dest_prop, tmp); 738 else 739 property_set(prop_map[i].dest_prop, prop_map[i].def_val); 740 } 741 742 ret = property_get("ro.boot.console", tmp); 743 if (ret) 744 strlcpy(console, tmp, sizeof(console)); 745 746 /* save a copy for init's usage during boot */ 747 property_get("ro.bootmode", tmp); 748 strlcpy(bootmode, tmp, sizeof(bootmode)); 749 750 /* if this was given on kernel command line, override what we read 751 * before (e.g. from /proc/cpuinfo), if anything */ 752 ret = property_get("ro.boot.hardware", tmp); 753 if (ret) 754 strlcpy(hardware, tmp, sizeof(hardware)); 755 property_set("ro.hardware", hardware); 756 757 snprintf(tmp, PROP_VALUE_MAX, "%d", revision); 758 property_set("ro.revision", tmp); 759 760 /* TODO: these are obsolete. We should delete them */ 761 if (!strcmp(bootmode,"factory")) 762 property_set("ro.factorytest", "1"); 763 else if (!strcmp(bootmode,"factory2")) 764 property_set("ro.factorytest", "2"); 765 else 766 property_set("ro.factorytest", "0"); 767} 768 769static void process_kernel_cmdline(void) 770{ 771 /* don't expose the raw commandline to nonpriv processes */ 772 chmod("/proc/cmdline", 0440); 773 774 /* first pass does the common stuff, and finds if we are in qemu. 775 * second pass is only necessary for qemu to export all kernel params 776 * as props. 777 */ 778 import_kernel_cmdline(0, import_kernel_nv); 779 if (qemu[0]) 780 import_kernel_cmdline(1, import_kernel_nv); 781 782 /* now propogate the info given on command line to internal variables 783 * used by init as well as the current required properties 784 */ 785 export_kernel_boot_props(); 786} 787 788static int property_service_init_action(int nargs, char **args) 789{ 790 /* read any property files on system or data and 791 * fire up the property service. This must happen 792 * after the ro.foo properties are set above so 793 * that /data/local.prop cannot interfere with them. 794 */ 795 start_property_service(); 796 return 0; 797} 798 799static int signal_init_action(int nargs, char **args) 800{ 801 signal_init(); 802 return 0; 803} 804 805static int check_startup_action(int nargs, char **args) 806{ 807 /* make sure we actually have all the pieces we need */ 808 if ((get_property_set_fd() < 0) || 809 (get_signal_fd() < 0)) { 810 ERROR("init startup failure\n"); 811 exit(1); 812 } 813 814 /* signal that we hit this point */ 815 unlink("/dev/.booting"); 816 817 return 0; 818} 819 820static int queue_property_triggers_action(int nargs, char **args) 821{ 822 queue_all_property_triggers(); 823 /* enable property triggers */ 824 property_triggers_enabled = 1; 825 return 0; 826} 827 828#if BOOTCHART 829static int bootchart_init_action(int nargs, char **args) 830{ 831 bootchart_count = bootchart_init(); 832 if (bootchart_count < 0) { 833 ERROR("bootcharting init failure\n"); 834 } else if (bootchart_count > 0) { 835 NOTICE("bootcharting started (period=%d ms)\n", bootchart_count*BOOTCHART_POLLING_MS); 836 } else { 837 NOTICE("bootcharting ignored\n"); 838 } 839 840 return 0; 841} 842#endif 843 844static const struct selinux_opt seopts_prop[] = { 845 { SELABEL_OPT_PATH, "/property_contexts" }, 846 { 0, NULL } 847}; 848 849struct selabel_handle* selinux_android_prop_context_handle(void) 850{ 851 int i = 0; 852 struct selabel_handle* sehandle = NULL; 853 while ((sehandle == NULL) && seopts_prop[i].value) { 854 sehandle = selabel_open(SELABEL_CTX_ANDROID_PROP, &seopts_prop[i], 1); 855 i++; 856 } 857 858 if (!sehandle) { 859 ERROR("SELinux: Could not load property_contexts: %s\n", 860 strerror(errno)); 861 return NULL; 862 } 863 INFO("SELinux: Loaded property contexts from %s\n", seopts_prop[i - 1].value); 864 return sehandle; 865} 866 867void selinux_init_all_handles(void) 868{ 869 sehandle = selinux_android_file_context_handle(); 870 selinux_android_set_sehandle(sehandle); 871 sehandle_prop = selinux_android_prop_context_handle(); 872} 873 874static bool selinux_is_disabled(void) 875{ 876 char tmp[PROP_VALUE_MAX]; 877 878 if (access("/sys/fs/selinux", F_OK) != 0) { 879 /* SELinux is not compiled into the kernel, or has been disabled 880 * via the kernel command line "selinux=0". 881 */ 882 return true; 883 } 884 885 if ((property_get("ro.boot.selinux", tmp) != 0) && (strcmp(tmp, "disabled") == 0)) { 886 /* SELinux is compiled into the kernel, but we've been told to disable it. */ 887 return true; 888 } 889 890 return false; 891} 892 893static bool selinux_is_enforcing(void) 894{ 895 char tmp[PROP_VALUE_MAX]; 896 897 if (property_get("ro.boot.selinux", tmp) == 0) { 898 /* Property is not set. Assume enforcing */ 899 return true; 900 } 901 902 if (strcmp(tmp, "permissive") == 0) { 903 /* SELinux is in the kernel, but we've been told to go into permissive mode */ 904 return false; 905 } 906 907 if (strcmp(tmp, "enforcing") != 0) { 908 ERROR("SELinux: Unknown value of ro.boot.selinux. Got: \"%s\". Assuming enforcing.\n", tmp); 909 } 910 911 return true; 912} 913 914int selinux_reload_policy(void) 915{ 916 if (selinux_is_disabled()) { 917 return -1; 918 } 919 920 INFO("SELinux: Attempting to reload policy files\n"); 921 922 if (selinux_android_reload_policy() == -1) { 923 return -1; 924 } 925 926 if (sehandle) 927 selabel_close(sehandle); 928 929 if (sehandle_prop) 930 selabel_close(sehandle_prop); 931 932 selinux_init_all_handles(); 933 return 0; 934} 935 936static int audit_callback(void *data, security_class_t cls __attribute__((unused)), char *buf, size_t len) 937{ 938 snprintf(buf, len, "property=%s", !data ? "NULL" : (char *)data); 939 return 0; 940} 941 942static int log_callback(int type, const char *fmt, ...) 943{ 944 int level; 945 va_list ap; 946 switch (type) { 947 case SELINUX_WARNING: 948 level = KLOG_WARNING_LEVEL; 949 break; 950 case SELINUX_INFO: 951 level = KLOG_INFO_LEVEL; 952 break; 953 default: 954 level = KLOG_ERROR_LEVEL; 955 break; 956 } 957 va_start(ap, fmt); 958 klog_vwrite(level, fmt, ap); 959 va_end(ap); 960 return 0; 961} 962 963static void selinux_initialize(void) 964{ 965 if (selinux_is_disabled()) { 966 return; 967 } 968 969 INFO("loading selinux policy\n"); 970 if (selinux_android_load_policy() < 0) { 971 ERROR("SELinux: Failed to load policy; rebooting into recovery mode\n"); 972 android_reboot(ANDROID_RB_RESTART2, 0, "recovery"); 973 while (1) { pause(); } // never reached 974 } 975 976 selinux_init_all_handles(); 977 bool is_enforcing = selinux_is_enforcing(); 978 INFO("SELinux: security_setenforce(%d)\n", is_enforcing); 979 security_setenforce(is_enforcing); 980} 981 982int main(int argc, char **argv) 983{ 984 int fd_count = 0; 985 struct pollfd ufds[4]; 986 char *tmpdev; 987 char* debuggable; 988 char tmp[32]; 989 int property_set_fd_init = 0; 990 int signal_fd_init = 0; 991 int keychord_fd_init = 0; 992 bool is_charger = false; 993 994 if (!strcmp(basename(argv[0]), "ueventd")) 995 return ueventd_main(argc, argv); 996 997 if (!strcmp(basename(argv[0]), "watchdogd")) 998 return watchdogd_main(argc, argv); 999 1000 /* clear the umask */ 1001 umask(0); 1002 1003 /* Get the basic filesystem setup we need put 1004 * together in the initramdisk on / and then we'll 1005 * let the rc file figure out the rest. 1006 */ 1007 mkdir("/dev", 0755); 1008 mkdir("/proc", 0755); 1009 mkdir("/sys", 0755); 1010 1011 mount("tmpfs", "/dev", "tmpfs", MS_NOSUID, "mode=0755"); 1012 mkdir("/dev/pts", 0755); 1013 mkdir("/dev/socket", 0755); 1014 mount("devpts", "/dev/pts", "devpts", 0, NULL); 1015 mount("proc", "/proc", "proc", 0, NULL); 1016 mount("sysfs", "/sys", "sysfs", 0, NULL); 1017 1018 /* indicate that booting is in progress to background fw loaders, etc */ 1019 close(open("/dev/.booting", O_WRONLY | O_CREAT, 0000)); 1020 1021 /* We must have some place other than / to create the 1022 * device nodes for kmsg and null, otherwise we won't 1023 * be able to remount / read-only later on. 1024 * Now that tmpfs is mounted on /dev, we can actually 1025 * talk to the outside world. 1026 */ 1027 open_devnull_stdio(); 1028 klog_init(); 1029 property_init(); 1030 1031 get_hardware_name(hardware, &revision); 1032 1033 process_kernel_cmdline(); 1034 1035 union selinux_callback cb; 1036 cb.func_log = log_callback; 1037 selinux_set_callback(SELINUX_CB_LOG, cb); 1038 1039 cb.func_audit = audit_callback; 1040 selinux_set_callback(SELINUX_CB_AUDIT, cb); 1041 1042 selinux_initialize(); 1043 /* These directories were necessarily created before initial policy load 1044 * and therefore need their security context restored to the proper value. 1045 * This must happen before /dev is populated by ueventd. 1046 */ 1047 restorecon("/dev"); 1048 restorecon("/dev/socket"); 1049 restorecon("/dev/__properties__"); 1050 restorecon_recursive("/sys"); 1051 1052 is_charger = !strcmp(bootmode, "charger"); 1053 1054 INFO("property init\n"); 1055 if (!is_charger) 1056 property_load_boot_defaults(); 1057 1058 INFO("reading config file\n"); 1059 init_parse_config_file("/init.rc"); 1060 1061 action_for_each_trigger("early-init", action_add_queue_tail); 1062 1063 queue_builtin_action(wait_for_coldboot_done_action, "wait_for_coldboot_done"); 1064 queue_builtin_action(mix_hwrng_into_linux_rng_action, "mix_hwrng_into_linux_rng"); 1065 queue_builtin_action(keychord_init_action, "keychord_init"); 1066 queue_builtin_action(console_init_action, "console_init"); 1067 1068 /* execute all the boot actions to get us started */ 1069 action_for_each_trigger("init", action_add_queue_tail); 1070 1071 /* skip mounting filesystems in charger mode */ 1072 if (!is_charger) { 1073 action_for_each_trigger("early-fs", action_add_queue_tail); 1074 action_for_each_trigger("fs", action_add_queue_tail); 1075 action_for_each_trigger("post-fs", action_add_queue_tail); 1076 action_for_each_trigger("post-fs-data", action_add_queue_tail); 1077 } 1078 1079 /* Repeat mix_hwrng_into_linux_rng in case /dev/hw_random or /dev/random 1080 * wasn't ready immediately after wait_for_coldboot_done 1081 */ 1082 queue_builtin_action(mix_hwrng_into_linux_rng_action, "mix_hwrng_into_linux_rng"); 1083 1084 queue_builtin_action(property_service_init_action, "property_service_init"); 1085 queue_builtin_action(signal_init_action, "signal_init"); 1086 queue_builtin_action(check_startup_action, "check_startup"); 1087 1088 if (is_charger) { 1089 action_for_each_trigger("charger", action_add_queue_tail); 1090 } else { 1091 action_for_each_trigger("early-boot", action_add_queue_tail); 1092 action_for_each_trigger("boot", action_add_queue_tail); 1093 } 1094 1095 /* run all property triggers based on current state of the properties */ 1096 queue_builtin_action(queue_property_triggers_action, "queue_property_triggers"); 1097 1098 1099#if BOOTCHART 1100 queue_builtin_action(bootchart_init_action, "bootchart_init"); 1101#endif 1102 1103 for(;;) { 1104 int nr, i, timeout = -1; 1105 1106 execute_one_command(); 1107 restart_processes(); 1108 1109 if (!property_set_fd_init && get_property_set_fd() > 0) { 1110 ufds[fd_count].fd = get_property_set_fd(); 1111 ufds[fd_count].events = POLLIN; 1112 ufds[fd_count].revents = 0; 1113 fd_count++; 1114 property_set_fd_init = 1; 1115 } 1116 if (!signal_fd_init && get_signal_fd() > 0) { 1117 ufds[fd_count].fd = get_signal_fd(); 1118 ufds[fd_count].events = POLLIN; 1119 ufds[fd_count].revents = 0; 1120 fd_count++; 1121 signal_fd_init = 1; 1122 } 1123 if (!keychord_fd_init && get_keychord_fd() > 0) { 1124 ufds[fd_count].fd = get_keychord_fd(); 1125 ufds[fd_count].events = POLLIN; 1126 ufds[fd_count].revents = 0; 1127 fd_count++; 1128 keychord_fd_init = 1; 1129 } 1130 1131 if (process_needs_restart) { 1132 timeout = (process_needs_restart - gettime()) * 1000; 1133 if (timeout < 0) 1134 timeout = 0; 1135 } 1136 1137 if (!action_queue_empty() || cur_action) 1138 timeout = 0; 1139 1140#if BOOTCHART 1141 if (bootchart_count > 0) { 1142 if (timeout < 0 || timeout > BOOTCHART_POLLING_MS) 1143 timeout = BOOTCHART_POLLING_MS; 1144 if (bootchart_step() < 0 || --bootchart_count == 0) { 1145 bootchart_finish(); 1146 bootchart_count = 0; 1147 } 1148 } 1149#endif 1150 1151 nr = poll(ufds, fd_count, timeout); 1152 if (nr <= 0) 1153 continue; 1154 1155 for (i = 0; i < fd_count; i++) { 1156 if (ufds[i].revents & POLLIN) { 1157 if (ufds[i].fd == get_property_set_fd()) 1158 handle_property_set_fd(); 1159 else if (ufds[i].fd == get_keychord_fd()) 1160 handle_keychord(); 1161 else if (ufds[i].fd == get_signal_fd()) 1162 handle_signal(); 1163 } 1164 } 1165 } 1166 1167 return 0; 1168} 1169