installd.cpp revision 8b53c14bc1852fe1dbddd52881e49b1be894f190
1/* 2** Copyright 2008, The Android Open Source Project 3** 4** Licensed under the Apache License, Version 2.0 (the "License"); 5** you may not use this file except in compliance with the License. 6** You may obtain a copy of the License at 7** 8** http://www.apache.org/licenses/LICENSE-2.0 9** 10** Unless required by applicable law or agreed to in writing, software 11** distributed under the License is distributed on an "AS IS" BASIS, 12** WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 13** See the License for the specific language governing permissions and 14** limitations under the License. 15*/ 16 17#include <fcntl.h> 18#include <selinux/android.h> 19#include <selinux/avc.h> 20#include <sys/capability.h> 21#include <sys/fsuid.h> 22#include <sys/prctl.h> 23#include <sys/socket.h> 24#include <sys/stat.h> 25 26#include <android-base/logging.h> 27#include <cutils/fs.h> 28#include <cutils/log.h> // TODO: Move everything to base::logging. 29#include <cutils/properties.h> 30#include <cutils/sockets.h> 31#include <private/android_filesystem_config.h> 32 33#include <commands.h> 34#include <globals.h> 35#include <installd_constants.h> 36#include <installd_deps.h> // Need to fill in requirements of commands. 37#include <utils.h> 38 39#ifndef LOG_TAG 40#define LOG_TAG "installd" 41#endif 42#define SOCKET_PATH "installd" 43 44#define BUFFER_MAX 1024 /* input buffer for commands */ 45#define TOKEN_MAX 16 /* max number of arguments in buffer */ 46#define REPLY_MAX 256 /* largest reply allowed */ 47 48namespace android { 49namespace installd { 50 51// Check that installd-deps sizes match cutils sizes. 52static_assert(kPropertyKeyMax == PROPERTY_KEY_MAX, "Size mismatch."); 53static_assert(kPropertyValueMax == PROPERTY_VALUE_MAX, "Size mismatch."); 54 55//////////////////////// 56// Plug-in functions. // 57//////////////////////// 58 59int get_property(const char *key, char *value, const char *default_value) { 60 return property_get(key, value, default_value); 61} 62 63// Compute the output path of 64bool calculate_oat_file_path(char path[PKG_PATH_MAX], 65 const char *oat_dir, 66 const char *apk_path, 67 const char *instruction_set) { 68 const char *file_name_start; 69 const char *file_name_end; 70 71 file_name_start = strrchr(apk_path, '/'); 72 if (file_name_start == NULL) { 73 ALOGE("apk_path '%s' has no '/'s in it\n", apk_path); 74 return false; 75 } 76 file_name_end = strrchr(apk_path, '.'); 77 if (file_name_end < file_name_start) { 78 ALOGE("apk_path '%s' has no extension\n", apk_path); 79 return false; 80 } 81 82 // Calculate file_name 83 int file_name_len = file_name_end - file_name_start - 1; 84 char file_name[file_name_len + 1]; 85 memcpy(file_name, file_name_start + 1, file_name_len); 86 file_name[file_name_len] = '\0'; 87 88 // <apk_parent_dir>/oat/<isa>/<file_name>.odex 89 snprintf(path, PKG_PATH_MAX, "%s/%s/%s.odex", oat_dir, instruction_set, file_name); 90 return true; 91} 92 93/* 94 * Computes the odex file for the given apk_path and instruction_set. 95 * /system/framework/whatever.jar -> /system/framework/oat/<isa>/whatever.odex 96 * 97 * Returns false if it failed to determine the odex file path. 98 */ 99bool calculate_odex_file_path(char path[PKG_PATH_MAX], 100 const char *apk_path, 101 const char *instruction_set) { 102 if (strlen(apk_path) + strlen("oat/") + strlen(instruction_set) 103 + strlen("/") + strlen("odex") + 1 > PKG_PATH_MAX) { 104 ALOGE("apk_path '%s' may be too long to form odex file path.\n", apk_path); 105 return false; 106 } 107 108 strcpy(path, apk_path); 109 char *end = strrchr(path, '/'); 110 if (end == NULL) { 111 ALOGE("apk_path '%s' has no '/'s in it?!\n", apk_path); 112 return false; 113 } 114 const char *apk_end = apk_path + (end - path); // strrchr(apk_path, '/'); 115 116 strcpy(end + 1, "oat/"); // path = /system/framework/oat/\0 117 strcat(path, instruction_set); // path = /system/framework/oat/<isa>\0 118 strcat(path, apk_end); // path = /system/framework/oat/<isa>/whatever.jar\0 119 end = strrchr(path, '.'); 120 if (end == NULL) { 121 ALOGE("apk_path '%s' has no extension.\n", apk_path); 122 return false; 123 } 124 strcpy(end + 1, "odex"); 125 return true; 126} 127 128bool create_cache_path(char path[PKG_PATH_MAX], 129 const char *src, 130 const char *instruction_set) { 131 /* demand that we are an absolute path */ 132 if ((src == nullptr) || (src[0] != '/') || strstr(src,"..")) { 133 return false; 134 } 135 136 size_t srclen = strlen(src); 137 138 if (srclen > PKG_PATH_MAX) { // XXX: PKG_NAME_MAX? 139 return false; 140 } 141 142 size_t dstlen = 143 android_data_dir.len + 144 strlen(DALVIK_CACHE) + 145 1 + 146 strlen(instruction_set) + 147 srclen + 148 strlen(DALVIK_CACHE_POSTFIX) + 2; 149 150 if (dstlen > PKG_PATH_MAX) { 151 return false; 152 } 153 154 sprintf(path,"%s%s/%s/%s%s", 155 android_data_dir.path, 156 DALVIK_CACHE, 157 instruction_set, 158 src + 1, /* skip the leading / */ 159 DALVIK_CACHE_POSTFIX); 160 161 char* tmp = 162 path + 163 android_data_dir.len + 164 strlen(DALVIK_CACHE) + 165 1 + 166 strlen(instruction_set) + 1; 167 168 for(; *tmp; tmp++) { 169 if (*tmp == '/') { 170 *tmp = '@'; 171 } 172 } 173 174 return true; 175} 176 177 178static char* parse_null(char* arg) { 179 if (strcmp(arg, "!") == 0) { 180 return nullptr; 181 } else { 182 return arg; 183 } 184} 185 186static int do_ping(char **arg ATTRIBUTE_UNUSED, char reply[REPLY_MAX] ATTRIBUTE_UNUSED) 187{ 188 return 0; 189} 190 191static int do_create_app_data(char **arg, char reply[REPLY_MAX] ATTRIBUTE_UNUSED) { 192 /* const char *uuid, const char *pkgname, userid_t userid, int flags, 193 appid_t appid, const char* seinfo, int target_sdk_version */ 194 return create_app_data(parse_null(arg[0]), arg[1], atoi(arg[2]), atoi(arg[3]), 195 atoi(arg[4]), arg[5], atoi(arg[6])); 196} 197 198static int do_restorecon_app_data(char **arg, char reply[REPLY_MAX] ATTRIBUTE_UNUSED) { 199 /* const char* uuid, const char* pkgName, userid_t userid, int flags, 200 appid_t appid, const char* seinfo */ 201 return restorecon_app_data(parse_null(arg[0]), arg[1], atoi(arg[2]), atoi(arg[3]), atoi(arg[4]), arg[5]); 202} 203 204static int do_migrate_app_data(char **arg, char reply[REPLY_MAX] ATTRIBUTE_UNUSED) { 205 /* const char *uuid, const char *pkgname, userid_t userid, int flags */ 206 return migrate_app_data(parse_null(arg[0]), arg[1], atoi(arg[2]), atoi(arg[3])); 207} 208 209static int do_clear_app_data(char **arg, char reply[REPLY_MAX] ATTRIBUTE_UNUSED) { 210 /* const char *uuid, const char *pkgname, userid_t userid, int flags, ino_t ce_data_inode */ 211 return clear_app_data(parse_null(arg[0]), arg[1], atoi(arg[2]), atoi(arg[3]), atol(arg[4])); 212} 213 214static int do_destroy_app_data(char **arg, char reply[REPLY_MAX] ATTRIBUTE_UNUSED) { 215 /* const char *uuid, const char *pkgname, userid_t userid, int flags, ino_t ce_data_inode */ 216 return destroy_app_data(parse_null(arg[0]), arg[1], atoi(arg[2]), atoi(arg[3]), atol(arg[4])); 217} 218 219// We use otapreopt_chroot to get into the chroot. 220static constexpr const char* kOtaPreopt = "/system/bin/otapreopt_chroot"; 221 222static int do_ota_dexopt(char **arg, char reply[REPLY_MAX] ATTRIBUTE_UNUSED) { 223 // Time to fork and run otapreopt. 224 225 // Check that the tool exists. 226 struct stat s; 227 if (stat(kOtaPreopt, &s) != 0) { 228 LOG(ERROR) << "Otapreopt chroot tool not found."; 229 return -1; 230 } 231 232 pid_t pid = fork(); 233 if (pid == 0) { 234 const char* argv[1 + 9 + 1]; 235 argv[0] = kOtaPreopt; 236 for (size_t i = 1; i <= 9; ++i) { 237 argv[i] = arg[i - 1]; 238 } 239 argv[10] = nullptr; 240 241 execv(argv[0], (char * const *)argv); 242 PLOG(ERROR) << "execv(OTAPREOPT_CHROOT) failed"; 243 exit(99); 244 } else { 245 int res = wait_child(pid); 246 if (res == 0) { 247 ALOGV("DexInv: --- END OTAPREOPT (success) ---\n"); 248 } else { 249 ALOGE("DexInv: --- END OTAPREOPT --- status=0x%04x, process failed\n", res); 250 } 251 return res; 252 } 253} 254 255static int do_dexopt(char **arg, char reply[REPLY_MAX]) 256{ 257 int dexopt_flags = atoi(arg[6]); 258 if ((dexopt_flags & DEXOPT_OTA) != 0) { 259 return do_ota_dexopt(arg, reply); 260 } 261 return dexopt(arg[0], // apk_path 262 atoi(arg[1]), // uid 263 arg[2], // pkgname 264 arg[3], // instruction_set 265 atoi(arg[4]), // dexopt_needed 266 arg[5], // oat_dir 267 dexopt_flags, 268 arg[7], // compiler_filter 269 parse_null(arg[8])); // volume_uuid 270} 271 272static int do_merge_profiles(char **arg, char reply[REPLY_MAX]) 273{ 274 uid_t uid = static_cast<uid_t>(atoi(arg[0])); 275 const char* pkgname = arg[1]; 276 if (merge_profiles(uid, pkgname)) { 277 strncpy(reply, "true", REPLY_MAX); 278 } else { 279 strncpy(reply, "false", REPLY_MAX); 280 } 281 return 0; 282} 283 284static int do_mark_boot_complete(char **arg, char reply[REPLY_MAX] ATTRIBUTE_UNUSED) 285{ 286 return mark_boot_complete(arg[0] /* instruction set */); 287} 288 289static int do_rm_dex(char **arg, char reply[REPLY_MAX] ATTRIBUTE_UNUSED) 290{ 291 return rm_dex(arg[0], arg[1]); /* pkgname, instruction_set */ 292} 293 294static int do_free_cache(char **arg, char reply[REPLY_MAX] ATTRIBUTE_UNUSED) /* TODO int:free_size */ 295{ 296 return free_cache(parse_null(arg[0]), (int64_t)atoll(arg[1])); /* uuid, free_size */ 297} 298 299static int do_get_app_size(char **arg, char reply[REPLY_MAX]) { 300 int64_t codesize = 0; 301 int64_t datasize = 0; 302 int64_t cachesize = 0; 303 int64_t asecsize = 0; 304 int res = 0; 305 306 /* const char *uuid, const char *pkgname, int userid, int flags, ino_t ce_data_inode, 307 const char* code_path */ 308 res = get_app_size(parse_null(arg[0]), arg[1], atoi(arg[2]), atoi(arg[3]), atol(arg[4]), 309 arg[5], &codesize, &datasize, &cachesize, &asecsize); 310 311 /* 312 * Each int64_t can take up 22 characters printed out. Make sure it 313 * doesn't go over REPLY_MAX in the future. 314 */ 315 snprintf(reply, REPLY_MAX, "%" PRId64 " %" PRId64 " %" PRId64 " %" PRId64, 316 codesize, datasize, cachesize, asecsize); 317 return res; 318} 319 320static int do_get_app_data_inode(char **arg, char reply[REPLY_MAX]) { 321 ino_t inode = 0; 322 int res = 0; 323 324 /* const char *uuid, const char *pkgname, int userid, int flags */ 325 res = get_app_data_inode(parse_null(arg[0]), arg[1], atoi(arg[2]), atoi(arg[3]), &inode); 326 327 snprintf(reply, REPLY_MAX, "%" PRId64, inode); 328 return res; 329} 330 331static int do_move_complete_app(char **arg, char reply[REPLY_MAX] ATTRIBUTE_UNUSED) { 332 /* const char* from_uuid, const char *to_uuid, const char *package_name, 333 const char *data_app_name, appid_t appid, const char* seinfo, 334 int target_sdk_version */ 335 return move_complete_app(parse_null(arg[0]), parse_null(arg[1]), arg[2], arg[3], 336 atoi(arg[4]), arg[5], atoi(arg[6])); 337} 338 339static int do_mk_user_config(char **arg, char reply[REPLY_MAX] ATTRIBUTE_UNUSED) 340{ 341 return make_user_config(atoi(arg[0])); /* userid */ 342} 343 344static int do_rm_user(char **arg, char reply[REPLY_MAX] ATTRIBUTE_UNUSED) 345{ 346 return delete_user(parse_null(arg[0]), atoi(arg[1])); /* uuid, userid */ 347} 348 349static int do_linklib(char **arg, char reply[REPLY_MAX] ATTRIBUTE_UNUSED) 350{ 351 return linklib(parse_null(arg[0]), arg[1], arg[2], atoi(arg[3])); 352} 353 354static int do_idmap(char **arg, char reply[REPLY_MAX] ATTRIBUTE_UNUSED) 355{ 356 return idmap(arg[0], arg[1], atoi(arg[2])); 357} 358 359static int do_create_oat_dir(char **arg, char reply[REPLY_MAX] ATTRIBUTE_UNUSED) 360{ 361 /* oat_dir, instruction_set */ 362 return create_oat_dir(arg[0], arg[1]); 363} 364 365static int do_rm_package_dir(char **arg, char reply[REPLY_MAX] ATTRIBUTE_UNUSED) 366{ 367 /* oat_dir */ 368 return rm_package_dir(arg[0]); 369} 370 371static int do_clear_app_profiles(char **arg, char reply[REPLY_MAX] ATTRIBUTE_UNUSED) 372{ 373 /* package_name */ 374 return clear_app_profiles(arg[0]); 375} 376 377static int do_destroy_app_profiles(char **arg, char reply[REPLY_MAX] ATTRIBUTE_UNUSED) 378{ 379 /* package_name */ 380 return destroy_app_profiles(arg[0]); 381} 382 383static int do_link_file(char **arg, char reply[REPLY_MAX] ATTRIBUTE_UNUSED) 384{ 385 /* relative_path, from_base, to_base */ 386 return link_file(arg[0], arg[1], arg[2]); 387} 388 389static int do_move_ab(char **arg, char reply[REPLY_MAX] ATTRIBUTE_UNUSED) { 390 // apk_path, instruction_set, oat_dir 391 return move_ab(arg[0], arg[1], arg[2]); 392} 393 394struct cmdinfo { 395 const char *name; 396 unsigned numargs; 397 int (*func)(char **arg, char reply[REPLY_MAX]); 398}; 399 400struct cmdinfo cmds[] = { 401 { "ping", 0, do_ping }, 402 403 { "create_app_data", 7, do_create_app_data }, 404 { "restorecon_app_data", 6, do_restorecon_app_data }, 405 { "migrate_app_data", 4, do_migrate_app_data }, 406 { "clear_app_data", 5, do_clear_app_data }, 407 { "destroy_app_data", 5, do_destroy_app_data }, 408 { "move_complete_app", 7, do_move_complete_app }, 409 { "get_app_size", 6, do_get_app_size }, 410 { "get_app_data_inode", 4, do_get_app_data_inode }, 411 412 { "dexopt", 9, do_dexopt }, 413 { "markbootcomplete", 1, do_mark_boot_complete }, 414 { "rmdex", 2, do_rm_dex }, 415 { "freecache", 2, do_free_cache }, 416 { "linklib", 4, do_linklib }, 417 { "mkuserconfig", 1, do_mk_user_config }, 418 { "rmuser", 2, do_rm_user }, 419 { "idmap", 3, do_idmap }, 420 { "createoatdir", 2, do_create_oat_dir }, 421 { "rmpackagedir", 1, do_rm_package_dir }, 422 { "clear_app_profiles", 1, do_clear_app_profiles }, 423 { "destroy_app_profiles", 1, do_destroy_app_profiles }, 424 { "linkfile", 3, do_link_file }, 425 { "move_ab", 3, do_move_ab }, 426 { "merge_profiles", 2, do_merge_profiles }, 427}; 428 429static int readx(int s, void *_buf, int count) 430{ 431 char *buf = (char *) _buf; 432 int n = 0, r; 433 if (count < 0) return -1; 434 while (n < count) { 435 r = read(s, buf + n, count - n); 436 if (r < 0) { 437 if (errno == EINTR) continue; 438 ALOGE("read error: %s\n", strerror(errno)); 439 return -1; 440 } 441 if (r == 0) { 442 ALOGE("eof\n"); 443 return -1; /* EOF */ 444 } 445 n += r; 446 } 447 return 0; 448} 449 450static int writex(int s, const void *_buf, int count) 451{ 452 const char *buf = (const char *) _buf; 453 int n = 0, r; 454 if (count < 0) return -1; 455 while (n < count) { 456 r = write(s, buf + n, count - n); 457 if (r < 0) { 458 if (errno == EINTR) continue; 459 ALOGE("write error: %s\n", strerror(errno)); 460 return -1; 461 } 462 n += r; 463 } 464 return 0; 465} 466 467 468/* Tokenize the command buffer, locate a matching command, 469 * ensure that the required number of arguments are provided, 470 * call the function(), return the result. 471 */ 472static int execute(int s, char cmd[BUFFER_MAX]) 473{ 474 char reply[REPLY_MAX]; 475 char *arg[TOKEN_MAX+1]; 476 unsigned i; 477 unsigned n = 0; 478 unsigned short count; 479 int ret = -1; 480 481 // ALOGI("execute('%s')\n", cmd); 482 483 /* default reply is "" */ 484 reply[0] = 0; 485 486 /* n is number of args (not counting arg[0]) */ 487 arg[0] = cmd; 488 while (*cmd) { 489 if (isspace(*cmd)) { 490 *cmd++ = 0; 491 n++; 492 arg[n] = cmd; 493 if (n == TOKEN_MAX) { 494 ALOGE("too many arguments\n"); 495 goto done; 496 } 497 } 498 if (*cmd) { 499 cmd++; 500 } 501 } 502 503 for (i = 0; i < sizeof(cmds) / sizeof(cmds[0]); i++) { 504 if (!strcmp(cmds[i].name,arg[0])) { 505 if (n != cmds[i].numargs) { 506 ALOGE("%s requires %d arguments (%d given)\n", 507 cmds[i].name, cmds[i].numargs, n); 508 } else { 509 ret = cmds[i].func(arg + 1, reply); 510 } 511 goto done; 512 } 513 } 514 ALOGE("unsupported command '%s'\n", arg[0]); 515 516done: 517 if (reply[0]) { 518 n = snprintf(cmd, BUFFER_MAX, "%d %s", ret, reply); 519 } else { 520 n = snprintf(cmd, BUFFER_MAX, "%d", ret); 521 } 522 if (n > BUFFER_MAX) n = BUFFER_MAX; 523 count = n; 524 525 // ALOGI("reply: '%s'\n", cmd); 526 if (writex(s, &count, sizeof(count))) return -1; 527 if (writex(s, cmd, count)) return -1; 528 return 0; 529} 530 531bool initialize_globals() { 532 const char* data_path = getenv("ANDROID_DATA"); 533 if (data_path == nullptr) { 534 ALOGE("Could not find ANDROID_DATA"); 535 return false; 536 } 537 const char* root_path = getenv("ANDROID_ROOT"); 538 if (root_path == nullptr) { 539 ALOGE("Could not find ANDROID_ROOT"); 540 return false; 541 } 542 543 return init_globals_from_data_and_root(data_path, root_path); 544} 545 546static int initialize_directories() { 547 int res = -1; 548 549 // Read current filesystem layout version to handle upgrade paths 550 char version_path[PATH_MAX]; 551 snprintf(version_path, PATH_MAX, "%s.layout_version", android_data_dir.path); 552 553 int oldVersion; 554 if (fs_read_atomic_int(version_path, &oldVersion) == -1) { 555 oldVersion = 0; 556 } 557 int version = oldVersion; 558 559 if (version < 2) { 560 SLOGD("Assuming that device has multi-user storage layout; upgrade no longer supported"); 561 version = 2; 562 } 563 564 if (ensure_config_user_dirs(0) == -1) { 565 ALOGE("Failed to setup misc for user 0"); 566 goto fail; 567 } 568 569 if (version == 2) { 570 ALOGD("Upgrading to /data/misc/user directories"); 571 572 char misc_dir[PATH_MAX]; 573 snprintf(misc_dir, PATH_MAX, "%smisc", android_data_dir.path); 574 575 char keychain_added_dir[PATH_MAX]; 576 snprintf(keychain_added_dir, PATH_MAX, "%s/keychain/cacerts-added", misc_dir); 577 578 char keychain_removed_dir[PATH_MAX]; 579 snprintf(keychain_removed_dir, PATH_MAX, "%s/keychain/cacerts-removed", misc_dir); 580 581 DIR *dir; 582 struct dirent *dirent; 583 dir = opendir("/data/user"); 584 if (dir != NULL) { 585 while ((dirent = readdir(dir))) { 586 const char *name = dirent->d_name; 587 588 // skip "." and ".." 589 if (name[0] == '.') { 590 if (name[1] == 0) continue; 591 if ((name[1] == '.') && (name[2] == 0)) continue; 592 } 593 594 uint32_t user_id = atoi(name); 595 596 // /data/misc/user/<user_id> 597 if (ensure_config_user_dirs(user_id) == -1) { 598 goto fail; 599 } 600 601 char misc_added_dir[PATH_MAX]; 602 snprintf(misc_added_dir, PATH_MAX, "%s/user/%s/cacerts-added", misc_dir, name); 603 604 char misc_removed_dir[PATH_MAX]; 605 snprintf(misc_removed_dir, PATH_MAX, "%s/user/%s/cacerts-removed", misc_dir, name); 606 607 uid_t uid = multiuser_get_uid(user_id, AID_SYSTEM); 608 gid_t gid = uid; 609 if (access(keychain_added_dir, F_OK) == 0) { 610 if (copy_dir_files(keychain_added_dir, misc_added_dir, uid, gid) != 0) { 611 ALOGE("Some files failed to copy"); 612 } 613 } 614 if (access(keychain_removed_dir, F_OK) == 0) { 615 if (copy_dir_files(keychain_removed_dir, misc_removed_dir, uid, gid) != 0) { 616 ALOGE("Some files failed to copy"); 617 } 618 } 619 } 620 closedir(dir); 621 622 if (access(keychain_added_dir, F_OK) == 0) { 623 delete_dir_contents(keychain_added_dir, 1, 0); 624 } 625 if (access(keychain_removed_dir, F_OK) == 0) { 626 delete_dir_contents(keychain_removed_dir, 1, 0); 627 } 628 } 629 630 version = 3; 631 } 632 633 // Persist layout version if changed 634 if (version != oldVersion) { 635 if (fs_write_atomic_int(version_path, version) == -1) { 636 ALOGE("Failed to save version to %s: %s", version_path, strerror(errno)); 637 goto fail; 638 } 639 } 640 641 // Success! 642 res = 0; 643 644fail: 645 return res; 646} 647 648static int log_callback(int type, const char *fmt, ...) { 649 va_list ap; 650 int priority; 651 652 switch (type) { 653 case SELINUX_WARNING: 654 priority = ANDROID_LOG_WARN; 655 break; 656 case SELINUX_INFO: 657 priority = ANDROID_LOG_INFO; 658 break; 659 default: 660 priority = ANDROID_LOG_ERROR; 661 break; 662 } 663 va_start(ap, fmt); 664 LOG_PRI_VA(priority, "SELinux", fmt, ap); 665 va_end(ap); 666 return 0; 667} 668 669static int installd_main(const int argc ATTRIBUTE_UNUSED, char *argv[]) { 670 char buf[BUFFER_MAX]; 671 struct sockaddr addr; 672 socklen_t alen; 673 int lsocket, s; 674 int selinux_enabled = (is_selinux_enabled() > 0); 675 676 setenv("ANDROID_LOG_TAGS", "*:v", 1); 677 android::base::InitLogging(argv); 678 679 ALOGI("installd firing up\n"); 680 681 union selinux_callback cb; 682 cb.func_log = log_callback; 683 selinux_set_callback(SELINUX_CB_LOG, cb); 684 685 if (!initialize_globals()) { 686 ALOGE("Could not initialize globals; exiting.\n"); 687 exit(1); 688 } 689 690 if (initialize_directories() < 0) { 691 ALOGE("Could not create directories; exiting.\n"); 692 exit(1); 693 } 694 695 if (selinux_enabled && selinux_status_open(true) < 0) { 696 ALOGE("Could not open selinux status; exiting.\n"); 697 exit(1); 698 } 699 700 lsocket = android_get_control_socket(SOCKET_PATH); 701 if (lsocket < 0) { 702 ALOGE("Failed to get socket from environment: %s\n", strerror(errno)); 703 exit(1); 704 } 705 if (listen(lsocket, 5)) { 706 ALOGE("Listen on socket failed: %s\n", strerror(errno)); 707 exit(1); 708 } 709 fcntl(lsocket, F_SETFD, FD_CLOEXEC); 710 711 for (;;) { 712 alen = sizeof(addr); 713 s = accept(lsocket, &addr, &alen); 714 if (s < 0) { 715 ALOGE("Accept failed: %s\n", strerror(errno)); 716 continue; 717 } 718 fcntl(s, F_SETFD, FD_CLOEXEC); 719 720 ALOGI("new connection\n"); 721 for (;;) { 722 unsigned short count; 723 if (readx(s, &count, sizeof(count))) { 724 ALOGE("failed to read size\n"); 725 break; 726 } 727 if ((count < 1) || (count >= BUFFER_MAX)) { 728 ALOGE("invalid size %d\n", count); 729 break; 730 } 731 if (readx(s, buf, count)) { 732 ALOGE("failed to read command\n"); 733 break; 734 } 735 buf[count] = 0; 736 if (selinux_enabled && selinux_status_updated() > 0) { 737 selinux_android_seapp_context_reload(); 738 } 739 if (execute(s, buf)) break; 740 } 741 ALOGI("closing connection\n"); 742 close(s); 743 } 744 745 return 0; 746} 747 748} // namespace installd 749} // namespace android 750 751int main(const int argc, char *argv[]) { 752 return android::installd::installd_main(argc, argv); 753} 754