1bac3299720623f4226bca103b26260052732ad30Tom Cherry/* 2bac3299720623f4226bca103b26260052732ad30Tom Cherry * Copyright (C) 2015 The Android Open Source Project 3bac3299720623f4226bca103b26260052732ad30Tom Cherry * 4bac3299720623f4226bca103b26260052732ad30Tom Cherry * Licensed under the Apache License, Version 2.0 (the "License"); 5bac3299720623f4226bca103b26260052732ad30Tom Cherry * you may not use this file except in compliance with the License. 6bac3299720623f4226bca103b26260052732ad30Tom Cherry * You may obtain a copy of the License at 7bac3299720623f4226bca103b26260052732ad30Tom Cherry * 8bac3299720623f4226bca103b26260052732ad30Tom Cherry * http://www.apache.org/licenses/LICENSE-2.0 9bac3299720623f4226bca103b26260052732ad30Tom Cherry * 10bac3299720623f4226bca103b26260052732ad30Tom Cherry * Unless required by applicable law or agreed to in writing, software 11bac3299720623f4226bca103b26260052732ad30Tom Cherry * distributed under the License is distributed on an "AS IS" BASIS, 12bac3299720623f4226bca103b26260052732ad30Tom Cherry * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 13bac3299720623f4226bca103b26260052732ad30Tom Cherry * See the License for the specific language governing permissions and 14bac3299720623f4226bca103b26260052732ad30Tom Cherry * limitations under the License. 15bac3299720623f4226bca103b26260052732ad30Tom Cherry */ 16bac3299720623f4226bca103b26260052732ad30Tom Cherry 17bac3299720623f4226bca103b26260052732ad30Tom Cherry#include "service.h" 18bac3299720623f4226bca103b26260052732ad30Tom Cherry 19bac3299720623f4226bca103b26260052732ad30Tom Cherry#include <fcntl.h> 209605a945f7a497c0307b512b9cd762f2d23973caElliott Hughes#include <inttypes.h> 2124b29132a017f7fbfd009c3e6aec499d1b815dbfJorge Lucangeli Obes#include <linux/securebits.h> 221b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes#include <sched.h> 231b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes#include <sys/mount.h> 241b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes#include <sys/prctl.h> 25081705c258efbe938d71c2022528d809fa6d42c5Vitalii Tomkiv#include <sys/resource.h> 26bac3299720623f4226bca103b26260052732ad30Tom Cherry#include <sys/stat.h> 27081705c258efbe938d71c2022528d809fa6d42c5Vitalii Tomkiv#include <sys/time.h> 28b7e03e82b89a30b09fea88eaf2a5638df1017cf6Bertrand SIMONNET#include <sys/wait.h> 29bac3299720623f4226bca103b26260052732ad30Tom Cherry#include <termios.h> 30af9ba4dc6ca98e136e887b0baa59b72fb8302dd3Dan Albert#include <unistd.h> 31bac3299720623f4226bca103b26260052732ad30Tom Cherry 324f71319df011d796a60a43fc1bc68e16fbf7d321Elliott Hughes#include <android-base/file.h> 333f5eaae526413a29de899270714469c76dc91ec8Tom Cherry#include <android-base/logging.h> 34da46b392f10d2809b5696632f67485f272ec5698Elliott Hughes#include <android-base/parseint.h> 354f71319df011d796a60a43fc1bc68e16fbf7d321Elliott Hughes#include <android-base/stringprintf.h> 36f86b5a6b90619e02d1d034ef7b0adc3b439f4abbElliott Hughes#include <android-base/strings.h> 372fa7451e9b530f814f93ca2248fa425b1f5362cdTom Cherry#include <android-base/unique_fd.h> 38e055d73396ecfba1dafd41fd2ec0cb3353c81e6aSteven Moreland#include <hidl-util/FQName.h> 39f7e79b99c1e9e3128dd9921871f7740bebb755e6Collin Mulliner#include <processgroup/processgroup.h> 403f5eaae526413a29de899270714469c76dc91ec8Tom Cherry#include <selinux/selinux.h> 413f5eaae526413a29de899270714469c76dc91ec8Tom Cherry#include <system/thread_defs.h> 42f7e79b99c1e9e3128dd9921871f7740bebb755e6Collin Mulliner 437ac013de7edc7ec6570ff6a5b6bd3bdce68b769cTom Cherry#include "rlimit_parser.h" 44bac3299720623f4226bca103b26260052732ad30Tom Cherry#include "util.h" 45bac3299720623f4226bca103b26260052732ad30Tom Cherry 46de6bd50d4238d19ec401127bcf2321dc679d908dTom Cherry#if defined(__ANDROID__) 47de6bd50d4238d19ec401127bcf2321dc679d908dTom Cherry#include <sys/system_properties.h> 48de6bd50d4238d19ec401127bcf2321dc679d908dTom Cherry 49de6bd50d4238d19ec401127bcf2321dc679d908dTom Cherry#include <android-base/properties.h> 50de6bd50d4238d19ec401127bcf2321dc679d908dTom Cherry 51de6bd50d4238d19ec401127bcf2321dc679d908dTom Cherry#include "init.h" 52de6bd50d4238d19ec401127bcf2321dc679d908dTom Cherry#include "property_service.h" 53de6bd50d4238d19ec401127bcf2321dc679d908dTom Cherry#else 54de6bd50d4238d19ec401127bcf2321dc679d908dTom Cherry#include "host_init_stubs.h" 55de6bd50d4238d19ec401127bcf2321dc679d908dTom Cherry#endif 56de6bd50d4238d19ec401127bcf2321dc679d908dTom Cherry 57e78ea77f6992013b16fd57c07548b53129cdd12fJames Hawkinsusing android::base::boot_clock; 5881f5d3ebef2c3789737bf718fc2a2cdd7b9e8b33Tom Cherryusing android::base::GetProperty; 5981f5d3ebef2c3789737bf718fc2a2cdd7b9e8b33Tom Cherryusing android::base::Join; 60da46b392f10d2809b5696632f67485f272ec5698Elliott Hughesusing android::base::ParseInt; 6181f5d3ebef2c3789737bf718fc2a2cdd7b9e8b33Tom Cherryusing android::base::StartsWith; 62b7349902a945903f9e36a569051f5131beb0bc24Tom Cherryusing android::base::StringPrintf; 632fa7451e9b530f814f93ca2248fa425b1f5362cdTom Cherryusing android::base::unique_fd; 64b7349902a945903f9e36a569051f5131beb0bc24Tom Cherryusing android::base::WriteStringToFile; 65b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry 6681f5d3ebef2c3789737bf718fc2a2cdd7b9e8b33Tom Cherrynamespace android { 6781f5d3ebef2c3789737bf718fc2a2cdd7b9e8b33Tom Cherrynamespace init { 6881f5d3ebef2c3789737bf718fc2a2cdd7b9e8b33Tom Cherry 692fa7451e9b530f814f93ca2248fa425b1f5362cdTom Cherrystatic Result<std::string> ComputeContextFromExecutable(const std::string& service_path) { 70344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes std::string computed_context; 71344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes 72344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes char* raw_con = nullptr; 73344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes char* raw_filecon = nullptr; 74344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes 75344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes if (getcon(&raw_con) == -1) { 7676af7e6a0c4ce7759e6cc5994b5496ddb09035eeTom Cherry return Error() << "Could not get security context"; 77344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes } 78344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes std::unique_ptr<char> mycon(raw_con); 79344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes 80344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes if (getfilecon(service_path.c_str(), &raw_filecon) == -1) { 8176af7e6a0c4ce7759e6cc5994b5496ddb09035eeTom Cherry return Error() << "Could not get file context"; 82344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes } 83344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes std::unique_ptr<char> filecon(raw_filecon); 84344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes 85344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes char* new_con = nullptr; 86344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes int rc = security_compute_create(mycon.get(), filecon.get(), 87344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes string_to_security_class("process"), &new_con); 88344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes if (rc == 0) { 89344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes computed_context = new_con; 90344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes free(new_con); 91344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes } 92344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes if (rc == 0 && computed_context == mycon.get()) { 931ea19eb44d58759ed65dc7aa8da8215e5f976858Nick Kralevich return Error() << "File " << service_path << "(labeled \"" << filecon.get() 941ea19eb44d58759ed65dc7aa8da8215e5f976858Nick Kralevich << "\") has incorrect label or no domain transition from " << mycon.get() 951ea19eb44d58759ed65dc7aa8da8215e5f976858Nick Kralevich << " to another SELinux domain defined. Have you configured your " 961ea19eb44d58759ed65dc7aa8da8215e5f976858Nick Kralevich "service correctly? https://source.android.com/security/selinux/" 971ea19eb44d58759ed65dc7aa8da8215e5f976858Nick Kralevich "device-policy#label_new_services_and_address_denials"; 98344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes } 99344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes if (rc < 0) { 10076af7e6a0c4ce7759e6cc5994b5496ddb09035eeTom Cherry return Error() << "Could not get process context"; 101344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes } 102344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes return computed_context; 103344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes} 104344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes 1052fa7451e9b530f814f93ca2248fa425b1f5362cdTom CherryResult<Success> Service::SetUpMountNamespace() const { 1061b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes constexpr unsigned int kSafeFlags = MS_NODEV | MS_NOEXEC | MS_NOSUID; 1071b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes 1084bfdcb39329f778c46f73827f213c80b93c4e7d3Joe Tanen // Recursively remount / as slave like zygote does so unmounting and mounting /proc 1094bfdcb39329f778c46f73827f213c80b93c4e7d3Joe Tanen // doesn't interfere with the parent namespace's /proc mount. This will also 1104bfdcb39329f778c46f73827f213c80b93c4e7d3Joe Tanen // prevent any other mounts/unmounts initiated by the service from interfering 1114bfdcb39329f778c46f73827f213c80b93c4e7d3Joe Tanen // with the parent namespace but will still allow mount events from the parent 1124bfdcb39329f778c46f73827f213c80b93c4e7d3Joe Tanen // namespace to propagate to the child. 1134bfdcb39329f778c46f73827f213c80b93c4e7d3Joe Tanen if (mount("rootfs", "/", nullptr, (MS_SLAVE | MS_REC), nullptr) == -1) { 1142fa7451e9b530f814f93ca2248fa425b1f5362cdTom Cherry return ErrnoError() << "Could not remount(/) recursively as slave"; 1154bfdcb39329f778c46f73827f213c80b93c4e7d3Joe Tanen } 1162fa7451e9b530f814f93ca2248fa425b1f5362cdTom Cherry 1172fa7451e9b530f814f93ca2248fa425b1f5362cdTom Cherry // umount() then mount() /proc and/or /sys 1184bfdcb39329f778c46f73827f213c80b93c4e7d3Joe Tanen // Note that it is not sufficient to mount with MS_REMOUNT. 1192fa7451e9b530f814f93ca2248fa425b1f5362cdTom Cherry if (namespace_flags_ & CLONE_NEWPID) { 1202fa7451e9b530f814f93ca2248fa425b1f5362cdTom Cherry if (umount("/proc") == -1) { 1212fa7451e9b530f814f93ca2248fa425b1f5362cdTom Cherry return ErrnoError() << "Could not umount(/proc)"; 1222fa7451e9b530f814f93ca2248fa425b1f5362cdTom Cherry } 1232fa7451e9b530f814f93ca2248fa425b1f5362cdTom Cherry if (mount("", "/proc", "proc", kSafeFlags, "") == -1) { 1242fa7451e9b530f814f93ca2248fa425b1f5362cdTom Cherry return ErrnoError() << "Could not mount(/proc)"; 1252fa7451e9b530f814f93ca2248fa425b1f5362cdTom Cherry } 1264bfdcb39329f778c46f73827f213c80b93c4e7d3Joe Tanen } 1272fa7451e9b530f814f93ca2248fa425b1f5362cdTom Cherry bool remount_sys = std::any_of(namespaces_to_enter_.begin(), namespaces_to_enter_.end(), 1282fa7451e9b530f814f93ca2248fa425b1f5362cdTom Cherry [](const auto& entry) { return entry.first == CLONE_NEWNET; }); 1292fa7451e9b530f814f93ca2248fa425b1f5362cdTom Cherry if (remount_sys) { 1302fa7451e9b530f814f93ca2248fa425b1f5362cdTom Cherry if (umount2("/sys", MNT_DETACH) == -1) { 1312fa7451e9b530f814f93ca2248fa425b1f5362cdTom Cherry return ErrnoError() << "Could not umount(/sys)"; 1322fa7451e9b530f814f93ca2248fa425b1f5362cdTom Cherry } 1332fa7451e9b530f814f93ca2248fa425b1f5362cdTom Cherry if (mount("", "/sys", "sys", kSafeFlags, "") == -1) { 1342fa7451e9b530f814f93ca2248fa425b1f5362cdTom Cherry return ErrnoError() << "Could not mount(/sys)"; 1352fa7451e9b530f814f93ca2248fa425b1f5362cdTom Cherry } 1361b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes } 1372fa7451e9b530f814f93ca2248fa425b1f5362cdTom Cherry return Success(); 1382fa7451e9b530f814f93ca2248fa425b1f5362cdTom Cherry} 1391b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes 1402fa7451e9b530f814f93ca2248fa425b1f5362cdTom CherryResult<Success> Service::SetUpPidNamespace() const { 1412fa7451e9b530f814f93ca2248fa425b1f5362cdTom Cherry if (prctl(PR_SET_NAME, name_.c_str()) == -1) { 1422fa7451e9b530f814f93ca2248fa425b1f5362cdTom Cherry return ErrnoError() << "Could not set name"; 1431b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes } 1441b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes 1451b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes pid_t child_pid = fork(); 1461b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes if (child_pid == -1) { 1472fa7451e9b530f814f93ca2248fa425b1f5362cdTom Cherry return ErrnoError() << "Could not fork init inside the PID namespace"; 1481b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes } 1491b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes 1501b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes if (child_pid > 0) { 1511b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes // So that we exit with the right status. 1521b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes static int init_exitstatus = 0; 1531b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes signal(SIGTERM, [](int) { _exit(init_exitstatus); }); 1541b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes 1551b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes pid_t waited_pid; 1561b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes int status; 1571b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes while ((waited_pid = wait(&status)) > 0) { 1581b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes // This loop will end when there are no processes left inside the 1591b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes // PID namespace or when the init process inside the PID namespace 1601b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes // gets a signal. 1611b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes if (waited_pid == child_pid) { 1621b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes init_exitstatus = status; 1631b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes } 1641b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes } 1651b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes if (!WIFEXITED(init_exitstatus)) { 1661b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes _exit(EXIT_FAILURE); 1671b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes } 1681b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes _exit(WEXITSTATUS(init_exitstatus)); 1691b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes } 1702fa7451e9b530f814f93ca2248fa425b1f5362cdTom Cherry return Success(); 1712fa7451e9b530f814f93ca2248fa425b1f5362cdTom Cherry} 1722fa7451e9b530f814f93ca2248fa425b1f5362cdTom Cherry 1732fa7451e9b530f814f93ca2248fa425b1f5362cdTom CherryResult<Success> Service::EnterNamespaces() const { 1742fa7451e9b530f814f93ca2248fa425b1f5362cdTom Cherry for (const auto& [nstype, path] : namespaces_to_enter_) { 1752fa7451e9b530f814f93ca2248fa425b1f5362cdTom Cherry auto fd = unique_fd{open(path.c_str(), O_RDONLY | O_CLOEXEC)}; 1762fa7451e9b530f814f93ca2248fa425b1f5362cdTom Cherry if (!fd) { 1772fa7451e9b530f814f93ca2248fa425b1f5362cdTom Cherry return ErrnoError() << "Could not open namespace at " << path; 1782fa7451e9b530f814f93ca2248fa425b1f5362cdTom Cherry } 1792fa7451e9b530f814f93ca2248fa425b1f5362cdTom Cherry if (setns(fd, nstype) == -1) { 1802fa7451e9b530f814f93ca2248fa425b1f5362cdTom Cherry return ErrnoError() << "Could not setns() namespace at " << path; 1812fa7451e9b530f814f93ca2248fa425b1f5362cdTom Cherry } 1822fa7451e9b530f814f93ca2248fa425b1f5362cdTom Cherry } 1832fa7451e9b530f814f93ca2248fa425b1f5362cdTom Cherry return Success(); 1841b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes} 1851b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes 1865e405cacb1f3ef2265fcc71dbbf6a39c1e7dc1c1Tom Cherrystatic bool ExpandArgsAndExecv(const std::vector<std::string>& args) { 187344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes std::vector<std::string> expanded_args; 1885e405cacb1f3ef2265fcc71dbbf6a39c1e7dc1c1Tom Cherry std::vector<char*> c_strings; 1895e405cacb1f3ef2265fcc71dbbf6a39c1e7dc1c1Tom Cherry 190344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes expanded_args.resize(args.size()); 1915e405cacb1f3ef2265fcc71dbbf6a39c1e7dc1c1Tom Cherry c_strings.push_back(const_cast<char*>(args[0].data())); 192344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes for (std::size_t i = 1; i < args.size(); ++i) { 193344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes if (!expand_props(args[i], &expanded_args[i])) { 194344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes LOG(FATAL) << args[0] << ": cannot expand '" << args[i] << "'"; 195344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes } 1965e405cacb1f3ef2265fcc71dbbf6a39c1e7dc1c1Tom Cherry c_strings.push_back(expanded_args[i].data()); 197344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes } 1985e405cacb1f3ef2265fcc71dbbf6a39c1e7dc1c1Tom Cherry c_strings.push_back(nullptr); 1995e405cacb1f3ef2265fcc71dbbf6a39c1e7dc1c1Tom Cherry 2005e405cacb1f3ef2265fcc71dbbf6a39c1e7dc1c1Tom Cherry return execv(c_strings[0], c_strings.data()) == 0; 201344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes} 202344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes 2035938379e910c4cbd7ed2429901bb3c45e62405d4Tom Cherryunsigned long Service::next_start_order_ = 1; 2043b81f2d623c6cba45ad07fa91338d346d9b96482Tom Cherrybool Service::is_exec_service_running_ = false; 2055938379e910c4cbd7ed2429901bb3c45e62405d4Tom Cherry 206cb0f9bbc855097e0c8248643015b837255fd569aTom CherryService::Service(const std::string& name, Subcontext* subcontext_for_restart_commands, 207cb0f9bbc855097e0c8248643015b837255fd569aTom Cherry const std::vector<std::string>& args) 208cb0f9bbc855097e0c8248643015b837255fd569aTom Cherry : Service(name, 0, 0, 0, {}, 0, 0, "", subcontext_for_restart_commands, args) {} 209bac3299720623f4226bca103b26260052732ad30Tom Cherry 210641ff0a4d8d05349d9c22f726a035a2936a2a94dWei WangService::Service(const std::string& name, unsigned flags, uid_t uid, gid_t gid, 211641ff0a4d8d05349d9c22f726a035a2936a2a94dWei Wang const std::vector<gid_t>& supp_gids, const CapSet& capabilities, 212641ff0a4d8d05349d9c22f726a035a2936a2a94dWei Wang unsigned namespace_flags, const std::string& seclabel, 213cb0f9bbc855097e0c8248643015b837255fd569aTom Cherry Subcontext* subcontext_for_restart_commands, const std::vector<std::string>& args) 214641ff0a4d8d05349d9c22f726a035a2936a2a94dWei Wang : name_(name), 215641ff0a4d8d05349d9c22f726a035a2936a2a94dWei Wang classnames_({"default"}), 216641ff0a4d8d05349d9c22f726a035a2936a2a94dWei Wang flags_(flags), 217641ff0a4d8d05349d9c22f726a035a2936a2a94dWei Wang pid_(0), 218641ff0a4d8d05349d9c22f726a035a2936a2a94dWei Wang crash_count_(0), 219641ff0a4d8d05349d9c22f726a035a2936a2a94dWei Wang uid_(uid), 220641ff0a4d8d05349d9c22f726a035a2936a2a94dWei Wang gid_(gid), 221641ff0a4d8d05349d9c22f726a035a2936a2a94dWei Wang supp_gids_(supp_gids), 222641ff0a4d8d05349d9c22f726a035a2936a2a94dWei Wang capabilities_(capabilities), 223641ff0a4d8d05349d9c22f726a035a2936a2a94dWei Wang namespace_flags_(namespace_flags), 224641ff0a4d8d05349d9c22f726a035a2936a2a94dWei Wang seclabel_(seclabel), 2259cbf57048cf0057f499bf1911e4ac3eba795becbTom Cherry onrestart_(false, subcontext_for_restart_commands, "<Service '" + name + "' onrestart>", 0, 2269cbf57048cf0057f499bf1911e4ac3eba795becbTom Cherry "onrestart", {}), 2277da548578c25683fe0082283303e16961df312daTom Cherry keychord_id_(0), 228641ff0a4d8d05349d9c22f726a035a2936a2a94dWei Wang ioprio_class_(IoSchedClass_NONE), 229641ff0a4d8d05349d9c22f726a035a2936a2a94dWei Wang ioprio_pri_(0), 230641ff0a4d8d05349d9c22f726a035a2936a2a94dWei Wang priority_(0), 231641ff0a4d8d05349d9c22f726a035a2936a2a94dWei Wang oom_score_adjust_(-1000), 232d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea swappiness_(-1), 233d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea soft_limit_in_bytes_(-1), 234d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea limit_in_bytes_(-1), 2355938379e910c4cbd7ed2429901bb3c45e62405d4Tom Cherry start_order_(0), 2369cbf57048cf0057f499bf1911e4ac3eba795becbTom Cherry args_(args) {} 237bac3299720623f4226bca103b26260052732ad30Tom Cherry 238bac3299720623f4226bca103b26260052732ad30Tom Cherryvoid Service::NotifyStateChange(const std::string& new_state) const { 239b27004aa05039b5196f1e878169dca41b68aadd6Tom Cherry if ((flags_ & SVC_TEMPORARY) != 0) { 240b27004aa05039b5196f1e878169dca41b68aadd6Tom Cherry // Services created by 'exec' are temporary and don't have properties tracking their state. 241bac3299720623f4226bca103b26260052732ad30Tom Cherry return; 242bac3299720623f4226bca103b26260052732ad30Tom Cherry } 243bac3299720623f4226bca103b26260052732ad30Tom Cherry 2441c3a53f03ca3c2c647f83cd8b8ae7e18c5c7bc69Tom Cherry std::string prop_name = "init.svc." + name_; 2451c3a53f03ca3c2c647f83cd8b8ae7e18c5c7bc69Tom Cherry property_set(prop_name, new_state); 2469605a945f7a497c0307b512b9cd762f2d23973caElliott Hughes 2479605a945f7a497c0307b512b9cd762f2d23973caElliott Hughes if (new_state == "running") { 2489605a945f7a497c0307b512b9cd762f2d23973caElliott Hughes uint64_t start_ns = time_started_.time_since_epoch().count(); 249fed3373b5b671613c615b63800eb3977bb1911eaTom Cherry std::string boottime_property = "ro.boottime." + name_; 250fed3373b5b671613c615b63800eb3977bb1911eaTom Cherry if (GetProperty(boottime_property, "").empty()) { 251fed3373b5b671613c615b63800eb3977bb1911eaTom Cherry property_set(boottime_property, std::to_string(start_ns)); 252fed3373b5b671613c615b63800eb3977bb1911eaTom Cherry } 2539605a945f7a497c0307b512b9cd762f2d23973caElliott Hughes } 254bac3299720623f4226bca103b26260052732ad30Tom Cherry} 255bac3299720623f4226bca103b26260052732ad30Tom Cherry 256ad8e94e017173471e90c704eb7d8de5a14712aa7Elliott Hughesvoid Service::KillProcessGroup(int signal) { 25733838b1156cd1a5f8eec94756bee9e030a3dd2ebTom Cherry // If we've already seen a successful result from killProcessGroup*(), then we have removed 25833838b1156cd1a5f8eec94756bee9e030a3dd2ebTom Cherry // the cgroup already and calling these functions a second time will simply result in an error. 25933838b1156cd1a5f8eec94756bee9e030a3dd2ebTom Cherry // This is true regardless of which signal was sent. 26033838b1156cd1a5f8eec94756bee9e030a3dd2ebTom Cherry // These functions handle their own logging, so no additional logging is needed. 26133838b1156cd1a5f8eec94756bee9e030a3dd2ebTom Cherry if (!process_cgroup_empty_) { 26233838b1156cd1a5f8eec94756bee9e030a3dd2ebTom Cherry LOG(INFO) << "Sending signal " << signal << " to service '" << name_ << "' (pid " << pid_ 26333838b1156cd1a5f8eec94756bee9e030a3dd2ebTom Cherry << ") process group..."; 26433838b1156cd1a5f8eec94756bee9e030a3dd2ebTom Cherry int r; 26533838b1156cd1a5f8eec94756bee9e030a3dd2ebTom Cherry if (signal == SIGTERM) { 26633838b1156cd1a5f8eec94756bee9e030a3dd2ebTom Cherry r = killProcessGroupOnce(uid_, pid_, signal); 26733838b1156cd1a5f8eec94756bee9e030a3dd2ebTom Cherry } else { 26833838b1156cd1a5f8eec94756bee9e030a3dd2ebTom Cherry r = killProcessGroup(uid_, pid_, signal); 26933838b1156cd1a5f8eec94756bee9e030a3dd2ebTom Cherry } 27033838b1156cd1a5f8eec94756bee9e030a3dd2ebTom Cherry 27133838b1156cd1a5f8eec94756bee9e030a3dd2ebTom Cherry if (r == 0) process_cgroup_empty_ = true; 27233838b1156cd1a5f8eec94756bee9e030a3dd2ebTom Cherry } 273ad8e94e017173471e90c704eb7d8de5a14712aa7Elliott Hughes} 274ad8e94e017173471e90c704eb7d8de5a14712aa7Elliott Hughes 275344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obesvoid Service::SetProcessAttributes() { 2767ac013de7edc7ec6570ff6a5b6bd3bdce68b769cTom Cherry for (const auto& rlimit : rlimits_) { 2777ac013de7edc7ec6570ff6a5b6bd3bdce68b769cTom Cherry if (setrlimit(rlimit.first, &rlimit.second) == -1) { 2787ac013de7edc7ec6570ff6a5b6bd3bdce68b769cTom Cherry LOG(FATAL) << StringPrintf("setrlimit(%d, {rlim_cur=%ld, rlim_max=%ld}) failed", 2797ac013de7edc7ec6570ff6a5b6bd3bdce68b769cTom Cherry rlimit.first, rlimit.second.rlim_cur, rlimit.second.rlim_max); 2807ac013de7edc7ec6570ff6a5b6bd3bdce68b769cTom Cherry } 2817ac013de7edc7ec6570ff6a5b6bd3bdce68b769cTom Cherry } 28224b29132a017f7fbfd009c3e6aec499d1b815dbfJorge Lucangeli Obes // Keep capabilites on uid change. 28324b29132a017f7fbfd009c3e6aec499d1b815dbfJorge Lucangeli Obes if (capabilities_.any() && uid_) { 284f5965519d183ff188273689d151bfc2cb20ece2aLuis Hector Chavez // If Android is running in a container, some securebits might already 285f5965519d183ff188273689d151bfc2cb20ece2aLuis Hector Chavez // be locked, so don't change those. 286a72436067d5f88885e4b32fa7c5d22f1ea8c0756Ben Fennema unsigned long securebits = prctl(PR_GET_SECUREBITS); 287a72436067d5f88885e4b32fa7c5d22f1ea8c0756Ben Fennema if (securebits == -1UL) { 288f5965519d183ff188273689d151bfc2cb20ece2aLuis Hector Chavez PLOG(FATAL) << "prctl(PR_GET_SECUREBITS) failed for " << name_; 289f5965519d183ff188273689d151bfc2cb20ece2aLuis Hector Chavez } 290f5965519d183ff188273689d151bfc2cb20ece2aLuis Hector Chavez securebits |= SECBIT_KEEP_CAPS | SECBIT_KEEP_CAPS_LOCKED; 291f5965519d183ff188273689d151bfc2cb20ece2aLuis Hector Chavez if (prctl(PR_SET_SECUREBITS, securebits) != 0) { 292f5965519d183ff188273689d151bfc2cb20ece2aLuis Hector Chavez PLOG(FATAL) << "prctl(PR_SET_SECUREBITS) failed for " << name_; 29324b29132a017f7fbfd009c3e6aec499d1b815dbfJorge Lucangeli Obes } 29424b29132a017f7fbfd009c3e6aec499d1b815dbfJorge Lucangeli Obes } 29524b29132a017f7fbfd009c3e6aec499d1b815dbfJorge Lucangeli Obes 296e18e7e5c43c39677c6d49f8f76893d720f90b4fbElliott Hughes // TODO: work out why this fails for `console` then upgrade to FATAL. 297e18e7e5c43c39677c6d49f8f76893d720f90b4fbElliott Hughes if (setpgid(0, getpid()) == -1) PLOG(ERROR) << "setpgid failed for " << name_; 298344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes 299344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes if (gid_) { 300344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes if (setgid(gid_) != 0) { 301e18e7e5c43c39677c6d49f8f76893d720f90b4fbElliott Hughes PLOG(FATAL) << "setgid failed for " << name_; 302344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes } 303344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes } 30480960d2a9a6e15931d946cc826dcb3d5bf68ca4fNick Kralevich if (setgroups(supp_gids_.size(), &supp_gids_[0]) != 0) { 30580960d2a9a6e15931d946cc826dcb3d5bf68ca4fNick Kralevich PLOG(FATAL) << "setgroups failed for " << name_; 306344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes } 307344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes if (uid_) { 308344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes if (setuid(uid_) != 0) { 309e18e7e5c43c39677c6d49f8f76893d720f90b4fbElliott Hughes PLOG(FATAL) << "setuid failed for " << name_; 310344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes } 311344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes } 312344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes if (!seclabel_.empty()) { 313344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes if (setexeccon(seclabel_.c_str()) < 0) { 314e18e7e5c43c39677c6d49f8f76893d720f90b4fbElliott Hughes PLOG(FATAL) << "cannot setexeccon('" << seclabel_ << "') for " << name_; 315344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes } 316344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes } 317344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes if (priority_ != 0) { 318344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes if (setpriority(PRIO_PROCESS, 0, priority_) != 0) { 319e18e7e5c43c39677c6d49f8f76893d720f90b4fbElliott Hughes PLOG(FATAL) << "setpriority failed for " << name_; 320344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes } 321344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes } 32224b29132a017f7fbfd009c3e6aec499d1b815dbfJorge Lucangeli Obes if (capabilities_.any()) { 32324b29132a017f7fbfd009c3e6aec499d1b815dbfJorge Lucangeli Obes if (!SetCapsForExec(capabilities_)) { 32424b29132a017f7fbfd009c3e6aec499d1b815dbfJorge Lucangeli Obes LOG(FATAL) << "cannot set capabilities for " << name_; 32524b29132a017f7fbfd009c3e6aec499d1b815dbfJorge Lucangeli Obes } 32694fb5b0bef4ff7bd5c610ed5ebfad9c0ba41c62fLuis Hector Chavez } else if (uid_) { 32794fb5b0bef4ff7bd5c610ed5ebfad9c0ba41c62fLuis Hector Chavez // Inheritable caps can be non-zero when running in a container. 32894fb5b0bef4ff7bd5c610ed5ebfad9c0ba41c62fLuis Hector Chavez if (!DropInheritableCaps()) { 32994fb5b0bef4ff7bd5c610ed5ebfad9c0ba41c62fLuis Hector Chavez LOG(FATAL) << "cannot drop inheritable caps for " << name_; 33094fb5b0bef4ff7bd5c610ed5ebfad9c0ba41c62fLuis Hector Chavez } 33124b29132a017f7fbfd009c3e6aec499d1b815dbfJorge Lucangeli Obes } 332344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes} 333344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes 334dc97e3e091b404b23e7fe919b30e523565f3b1cePaul Crowleyvoid Service::Reap(const siginfo_t& siginfo) { 335bac3299720623f4226bca103b26260052732ad30Tom Cherry if (!(flags_ & SVC_ONESHOT) || (flags_ & SVC_RESTART)) { 336ad8e94e017173471e90c704eb7d8de5a14712aa7Elliott Hughes KillProcessGroup(SIGKILL); 337bac3299720623f4226bca103b26260052732ad30Tom Cherry } 338bac3299720623f4226bca103b26260052732ad30Tom Cherry 33962767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn // Remove any descriptor resources we may have created. 34062767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn std::for_each(descriptors_.begin(), descriptors_.end(), 34162767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn std::bind(&DescriptorInfo::Clean, std::placeholders::_1)); 342bac3299720623f4226bca103b26260052732ad30Tom Cherry 343dc97e3e091b404b23e7fe919b30e523565f3b1cePaul Crowley for (const auto& f : reap_callbacks_) { 344dc97e3e091b404b23e7fe919b30e523565f3b1cePaul Crowley f(siginfo); 345dc97e3e091b404b23e7fe919b30e523565f3b1cePaul Crowley } 346dc97e3e091b404b23e7fe919b30e523565f3b1cePaul Crowley 3473b81f2d623c6cba45ad07fa91338d346d9b96482Tom Cherry if (flags_ & SVC_EXEC) UnSetExec(); 3483b81f2d623c6cba45ad07fa91338d346d9b96482Tom Cherry 3493b81f2d623c6cba45ad07fa91338d346d9b96482Tom Cherry if (flags_ & SVC_TEMPORARY) return; 350bac3299720623f4226bca103b26260052732ad30Tom Cherry 351bac3299720623f4226bca103b26260052732ad30Tom Cherry pid_ = 0; 352bac3299720623f4226bca103b26260052732ad30Tom Cherry flags_ &= (~SVC_RUNNING); 3535938379e910c4cbd7ed2429901bb3c45e62405d4Tom Cherry start_order_ = 0; 354bac3299720623f4226bca103b26260052732ad30Tom Cherry 355bac3299720623f4226bca103b26260052732ad30Tom Cherry // Oneshot processes go into the disabled state on exit, 356bac3299720623f4226bca103b26260052732ad30Tom Cherry // except when manually restarted. 357bac3299720623f4226bca103b26260052732ad30Tom Cherry if ((flags_ & SVC_ONESHOT) && !(flags_ & SVC_RESTART)) { 358bac3299720623f4226bca103b26260052732ad30Tom Cherry flags_ |= SVC_DISABLED; 359bac3299720623f4226bca103b26260052732ad30Tom Cherry } 360bac3299720623f4226bca103b26260052732ad30Tom Cherry 361bac3299720623f4226bca103b26260052732ad30Tom Cherry // Disabled and reset processes do not get restarted automatically. 362bac3299720623f4226bca103b26260052732ad30Tom Cherry if (flags_ & (SVC_DISABLED | SVC_RESET)) { 363bac3299720623f4226bca103b26260052732ad30Tom Cherry NotifyStateChange("stopped"); 364b27004aa05039b5196f1e878169dca41b68aadd6Tom Cherry return; 365bac3299720623f4226bca103b26260052732ad30Tom Cherry } 366bac3299720623f4226bca103b26260052732ad30Tom Cherry 3679605a945f7a497c0307b512b9cd762f2d23973caElliott Hughes // If we crash > 4 times in 4 minutes, reboot into recovery. 3689605a945f7a497c0307b512b9cd762f2d23973caElliott Hughes boot_clock::time_point now = boot_clock::now(); 369bac3299720623f4226bca103b26260052732ad30Tom Cherry if ((flags_ & SVC_CRITICAL) && !(flags_ & SVC_RESTART)) { 3709605a945f7a497c0307b512b9cd762f2d23973caElliott Hughes if (now < time_crashed_ + 4min) { 3719605a945f7a497c0307b512b9cd762f2d23973caElliott Hughes if (++crash_count_ > 4) { 372d8db7ab80d8a79c89393fa0c4ab343e85312d8d5Tom Cherry LOG(FATAL) << "critical process '" << name_ << "' exited 4 times in 4 minutes"; 373bac3299720623f4226bca103b26260052732ad30Tom Cherry } 374bac3299720623f4226bca103b26260052732ad30Tom Cherry } else { 375bac3299720623f4226bca103b26260052732ad30Tom Cherry time_crashed_ = now; 3769605a945f7a497c0307b512b9cd762f2d23973caElliott Hughes crash_count_ = 1; 377bac3299720623f4226bca103b26260052732ad30Tom Cherry } 378bac3299720623f4226bca103b26260052732ad30Tom Cherry } 379bac3299720623f4226bca103b26260052732ad30Tom Cherry 380bac3299720623f4226bca103b26260052732ad30Tom Cherry flags_ &= (~SVC_RESTART); 381bac3299720623f4226bca103b26260052732ad30Tom Cherry flags_ |= SVC_RESTARTING; 382bac3299720623f4226bca103b26260052732ad30Tom Cherry 383bac3299720623f4226bca103b26260052732ad30Tom Cherry // Execute all onrestart commands for this service. 384bac3299720623f4226bca103b26260052732ad30Tom Cherry onrestart_.ExecuteAllCommands(); 385bac3299720623f4226bca103b26260052732ad30Tom Cherry 386bac3299720623f4226bca103b26260052732ad30Tom Cherry NotifyStateChange("restarting"); 387b27004aa05039b5196f1e878169dca41b68aadd6Tom Cherry return; 388bac3299720623f4226bca103b26260052732ad30Tom Cherry} 389bac3299720623f4226bca103b26260052732ad30Tom Cherry 390bac3299720623f4226bca103b26260052732ad30Tom Cherryvoid Service::DumpState() const { 391f86b5a6b90619e02d1d034ef7b0adc3b439f4abbElliott Hughes LOG(INFO) << "service " << name_; 39281f5d3ebef2c3789737bf718fc2a2cdd7b9e8b33Tom Cherry LOG(INFO) << " class '" << Join(classnames_, " ") << "'"; 39381f5d3ebef2c3789737bf718fc2a2cdd7b9e8b33Tom Cherry LOG(INFO) << " exec " << Join(args_, " "); 39462767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn std::for_each(descriptors_.begin(), descriptors_.end(), 39562767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn [] (const auto& info) { LOG(INFO) << *info; }); 396bac3299720623f4226bca103b26260052732ad30Tom Cherry} 397bac3299720623f4226bca103b26260052732ad30Tom Cherry 39889bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom CherryResult<Success> Service::ParseCapabilities(const std::vector<std::string>& args) { 39924b29132a017f7fbfd009c3e6aec499d1b815dbfJorge Lucangeli Obes capabilities_ = 0; 40024b29132a017f7fbfd009c3e6aec499d1b815dbfJorge Lucangeli Obes 401f3f824ee42892fb69cb0d9b0557cd9c5aed357d2Jorge Lucangeli Obes if (!CapAmbientSupported()) { 40289bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Error() 40389bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry << "capabilities requested but the kernel does not support ambient capabilities"; 404f3f824ee42892fb69cb0d9b0557cd9c5aed357d2Jorge Lucangeli Obes } 405f3f824ee42892fb69cb0d9b0557cd9c5aed357d2Jorge Lucangeli Obes 406f3f824ee42892fb69cb0d9b0557cd9c5aed357d2Jorge Lucangeli Obes unsigned int last_valid_cap = GetLastValidCap(); 407f3f824ee42892fb69cb0d9b0557cd9c5aed357d2Jorge Lucangeli Obes if (last_valid_cap >= capabilities_.size()) { 408f3f824ee42892fb69cb0d9b0557cd9c5aed357d2Jorge Lucangeli Obes LOG(WARNING) << "last valid run-time capability is larger than CAP_LAST_CAP"; 409f3f824ee42892fb69cb0d9b0557cd9c5aed357d2Jorge Lucangeli Obes } 410f3f824ee42892fb69cb0d9b0557cd9c5aed357d2Jorge Lucangeli Obes 41124b29132a017f7fbfd009c3e6aec499d1b815dbfJorge Lucangeli Obes for (size_t i = 1; i < args.size(); i++) { 41224b29132a017f7fbfd009c3e6aec499d1b815dbfJorge Lucangeli Obes const std::string& arg = args[i]; 413f3f824ee42892fb69cb0d9b0557cd9c5aed357d2Jorge Lucangeli Obes int res = LookupCap(arg); 414f3f824ee42892fb69cb0d9b0557cd9c5aed357d2Jorge Lucangeli Obes if (res < 0) { 41589bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Error() << StringPrintf("invalid capability '%s'", arg.c_str()); 41624b29132a017f7fbfd009c3e6aec499d1b815dbfJorge Lucangeli Obes } 417f3f824ee42892fb69cb0d9b0557cd9c5aed357d2Jorge Lucangeli Obes unsigned int cap = static_cast<unsigned int>(res); // |res| is >= 0. 418f3f824ee42892fb69cb0d9b0557cd9c5aed357d2Jorge Lucangeli Obes if (cap > last_valid_cap) { 41989bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Error() << StringPrintf("capability '%s' not supported by the kernel", 42089bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry arg.c_str()); 421f3f824ee42892fb69cb0d9b0557cd9c5aed357d2Jorge Lucangeli Obes } 42224b29132a017f7fbfd009c3e6aec499d1b815dbfJorge Lucangeli Obes capabilities_[cap] = true; 42324b29132a017f7fbfd009c3e6aec499d1b815dbfJorge Lucangeli Obes } 42489bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Success(); 42524b29132a017f7fbfd009c3e6aec499d1b815dbfJorge Lucangeli Obes} 42624b29132a017f7fbfd009c3e6aec499d1b815dbfJorge Lucangeli Obes 42789bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom CherryResult<Success> Service::ParseClass(const std::vector<std::string>& args) { 428641ff0a4d8d05349d9c22f726a035a2936a2a94dWei Wang classnames_ = std::set<std::string>(args.begin() + 1, args.end()); 42989bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Success(); 430b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry} 431bac3299720623f4226bca103b26260052732ad30Tom Cherry 43289bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom CherryResult<Success> Service::ParseConsole(const std::vector<std::string>& args) { 433b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry flags_ |= SVC_CONSOLE; 43470daa67062c016eea1a30be2e1de0dcba1d23a13Viorel Suman console_ = args.size() > 1 ? "/dev/" + args[1] : ""; 43589bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Success(); 436b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry} 437bac3299720623f4226bca103b26260052732ad30Tom Cherry 43889bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom CherryResult<Success> Service::ParseCritical(const std::vector<std::string>& args) { 439b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry flags_ |= SVC_CRITICAL; 44089bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Success(); 441b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry} 442bac3299720623f4226bca103b26260052732ad30Tom Cherry 44389bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom CherryResult<Success> Service::ParseDisabled(const std::vector<std::string>& args) { 444b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry flags_ |= SVC_DISABLED; 445b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry flags_ |= SVC_RC_DISABLED; 44689bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Success(); 447b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry} 448bac3299720623f4226bca103b26260052732ad30Tom Cherry 4492fa7451e9b530f814f93ca2248fa425b1f5362cdTom CherryResult<Success> Service::ParseEnterNamespace(const std::vector<std::string>& args) { 4502fa7451e9b530f814f93ca2248fa425b1f5362cdTom Cherry if (args[1] != "net") { 4512fa7451e9b530f814f93ca2248fa425b1f5362cdTom Cherry return Error() << "Init only supports entering network namespaces"; 4522fa7451e9b530f814f93ca2248fa425b1f5362cdTom Cherry } 4532fa7451e9b530f814f93ca2248fa425b1f5362cdTom Cherry if (!namespaces_to_enter_.empty()) { 4542fa7451e9b530f814f93ca2248fa425b1f5362cdTom Cherry return Error() << "Only one network namespace may be entered"; 4552fa7451e9b530f814f93ca2248fa425b1f5362cdTom Cherry } 4562fa7451e9b530f814f93ca2248fa425b1f5362cdTom Cherry // Network namespaces require that /sys is remounted, otherwise the old adapters will still be 4572fa7451e9b530f814f93ca2248fa425b1f5362cdTom Cherry // present. Therefore, they also require mount namespaces. 4582fa7451e9b530f814f93ca2248fa425b1f5362cdTom Cherry namespace_flags_ |= CLONE_NEWNS; 4592fa7451e9b530f814f93ca2248fa425b1f5362cdTom Cherry namespaces_to_enter_.emplace_back(CLONE_NEWNET, args[2]); 4602fa7451e9b530f814f93ca2248fa425b1f5362cdTom Cherry return Success(); 4612fa7451e9b530f814f93ca2248fa425b1f5362cdTom Cherry} 4622fa7451e9b530f814f93ca2248fa425b1f5362cdTom Cherry 46389bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom CherryResult<Success> Service::ParseGroup(const std::vector<std::string>& args) { 46411a3aeeae3dc887b889d4086d4d26d95c324c08dTom Cherry auto gid = DecodeUid(args[1]); 46511a3aeeae3dc887b889d4086d4d26d95c324c08dTom Cherry if (!gid) { 46689bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Error() << "Unable to decode GID for '" << args[1] << "': " << gid.error(); 467517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry } 46811a3aeeae3dc887b889d4086d4d26d95c324c08dTom Cherry gid_ = *gid; 46911a3aeeae3dc887b889d4086d4d26d95c324c08dTom Cherry 470b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry for (std::size_t n = 2; n < args.size(); n++) { 47111a3aeeae3dc887b889d4086d4d26d95c324c08dTom Cherry gid = DecodeUid(args[n]); 47211a3aeeae3dc887b889d4086d4d26d95c324c08dTom Cherry if (!gid) { 47389bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Error() << "Unable to decode GID for '" << args[n] << "': " << gid.error(); 474517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry } 47511a3aeeae3dc887b889d4086d4d26d95c324c08dTom Cherry supp_gids_.emplace_back(*gid); 476b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry } 47789bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Success(); 478b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry} 479bac3299720623f4226bca103b26260052732ad30Tom Cherry 48089bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom CherryResult<Success> Service::ParsePriority(const std::vector<std::string>& args) { 481da46b392f10d2809b5696632f67485f272ec5698Elliott Hughes priority_ = 0; 482da46b392f10d2809b5696632f67485f272ec5698Elliott Hughes if (!ParseInt(args[1], &priority_, 483dd34ca45ea80c519a579578562e73d5e7f86703bKeun-young Park static_cast<int>(ANDROID_PRIORITY_HIGHEST), // highest is negative 484dd34ca45ea80c519a579578562e73d5e7f86703bKeun-young Park static_cast<int>(ANDROID_PRIORITY_LOWEST))) { 48589bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Error() << StringPrintf("process priority value must be range %d - %d", 48689bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry ANDROID_PRIORITY_HIGHEST, ANDROID_PRIORITY_LOWEST); 487081705c258efbe938d71c2022528d809fa6d42c5Vitalii Tomkiv } 48889bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Success(); 489081705c258efbe938d71c2022528d809fa6d42c5Vitalii Tomkiv} 490081705c258efbe938d71c2022528d809fa6d42c5Vitalii Tomkiv 491e055d73396ecfba1dafd41fd2ec0cb3353c81e6aSteven MorelandResult<Success> Service::ParseInterface(const std::vector<std::string>& args) { 492e055d73396ecfba1dafd41fd2ec0cb3353c81e6aSteven Moreland const std::string& interface_name = args[1]; 493e055d73396ecfba1dafd41fd2ec0cb3353c81e6aSteven Moreland const std::string& instance_name = args[2]; 494e055d73396ecfba1dafd41fd2ec0cb3353c81e6aSteven Moreland 495e055d73396ecfba1dafd41fd2ec0cb3353c81e6aSteven Moreland const FQName fq_name = FQName(interface_name); 496e055d73396ecfba1dafd41fd2ec0cb3353c81e6aSteven Moreland if (!fq_name.isValid()) { 497e055d73396ecfba1dafd41fd2ec0cb3353c81e6aSteven Moreland return Error() << "Invalid fully-qualified name for interface '" << interface_name << "'"; 498e055d73396ecfba1dafd41fd2ec0cb3353c81e6aSteven Moreland } 499e055d73396ecfba1dafd41fd2ec0cb3353c81e6aSteven Moreland 500e055d73396ecfba1dafd41fd2ec0cb3353c81e6aSteven Moreland if (!fq_name.isFullyQualified()) { 501e055d73396ecfba1dafd41fd2ec0cb3353c81e6aSteven Moreland return Error() << "Interface name not fully-qualified '" << interface_name << "'"; 502e055d73396ecfba1dafd41fd2ec0cb3353c81e6aSteven Moreland } 503e055d73396ecfba1dafd41fd2ec0cb3353c81e6aSteven Moreland 504e055d73396ecfba1dafd41fd2ec0cb3353c81e6aSteven Moreland if (fq_name.isValidValueName()) { 505e055d73396ecfba1dafd41fd2ec0cb3353c81e6aSteven Moreland return Error() << "Interface name must not be a value name '" << interface_name << "'"; 506e055d73396ecfba1dafd41fd2ec0cb3353c81e6aSteven Moreland } 507e055d73396ecfba1dafd41fd2ec0cb3353c81e6aSteven Moreland 508e055d73396ecfba1dafd41fd2ec0cb3353c81e6aSteven Moreland const std::string fullname = interface_name + "/" + instance_name; 509e055d73396ecfba1dafd41fd2ec0cb3353c81e6aSteven Moreland 510e055d73396ecfba1dafd41fd2ec0cb3353c81e6aSteven Moreland for (const auto& svc : ServiceList::GetInstance()) { 511e055d73396ecfba1dafd41fd2ec0cb3353c81e6aSteven Moreland if (svc->interfaces().count(fullname) > 0) { 512e055d73396ecfba1dafd41fd2ec0cb3353c81e6aSteven Moreland return Error() << "Interface '" << fullname << "' redefined in " << name() 513e055d73396ecfba1dafd41fd2ec0cb3353c81e6aSteven Moreland << " but is already defined by " << svc->name(); 514e055d73396ecfba1dafd41fd2ec0cb3353c81e6aSteven Moreland } 515e055d73396ecfba1dafd41fd2ec0cb3353c81e6aSteven Moreland } 516e055d73396ecfba1dafd41fd2ec0cb3353c81e6aSteven Moreland 517e055d73396ecfba1dafd41fd2ec0cb3353c81e6aSteven Moreland interfaces_.insert(fullname); 518e055d73396ecfba1dafd41fd2ec0cb3353c81e6aSteven Moreland 519e055d73396ecfba1dafd41fd2ec0cb3353c81e6aSteven Moreland return Success(); 520e055d73396ecfba1dafd41fd2ec0cb3353c81e6aSteven Moreland} 521e055d73396ecfba1dafd41fd2ec0cb3353c81e6aSteven Moreland 52289bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom CherryResult<Success> Service::ParseIoprio(const std::vector<std::string>& args) { 523da46b392f10d2809b5696632f67485f272ec5698Elliott Hughes if (!ParseInt(args[2], &ioprio_pri_, 0, 7)) { 52489bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Error() << "priority value must be range 0 - 7"; 525b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry } 526b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry 527b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry if (args[1] == "rt") { 528b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry ioprio_class_ = IoSchedClass_RT; 529b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry } else if (args[1] == "be") { 530b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry ioprio_class_ = IoSchedClass_BE; 531b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry } else if (args[1] == "idle") { 532b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry ioprio_class_ = IoSchedClass_IDLE; 533b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry } else { 53489bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Error() << "ioprio option usage: ioprio <rt|be|idle> <0-7>"; 535bac3299720623f4226bca103b26260052732ad30Tom Cherry } 536bac3299720623f4226bca103b26260052732ad30Tom Cherry 53789bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Success(); 538b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry} 539bac3299720623f4226bca103b26260052732ad30Tom Cherry 54089bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom CherryResult<Success> Service::ParseKeycodes(const std::vector<std::string>& args) { 541b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry for (std::size_t i = 1; i < args.size(); i++) { 542da46b392f10d2809b5696632f67485f272ec5698Elliott Hughes int code; 543da46b392f10d2809b5696632f67485f272ec5698Elliott Hughes if (ParseInt(args[i], &code)) { 544da46b392f10d2809b5696632f67485f272ec5698Elliott Hughes keycodes_.emplace_back(code); 545da46b392f10d2809b5696632f67485f272ec5698Elliott Hughes } else { 546da46b392f10d2809b5696632f67485f272ec5698Elliott Hughes LOG(WARNING) << "ignoring invalid keycode: " << args[i]; 547da46b392f10d2809b5696632f67485f272ec5698Elliott Hughes } 548bac3299720623f4226bca103b26260052732ad30Tom Cherry } 54989bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Success(); 550b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry} 551b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry 55289bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom CherryResult<Success> Service::ParseOneshot(const std::vector<std::string>& args) { 553b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry flags_ |= SVC_ONESHOT; 55489bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Success(); 555b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry} 556b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry 55789bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom CherryResult<Success> Service::ParseOnrestart(const std::vector<std::string>& args) { 558b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry std::vector<std::string> str_args(args.begin() + 1, args.end()); 559012c573e267b8dd70de14237cb470bd7301ee8eaTom Cherry int line = onrestart_.NumCommands() + 1; 56089bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry if (auto result = onrestart_.AddCommand(str_args, line); !result) { 56189bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Error() << "cannot add Onrestart command: " << result.error(); 56289bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry } 56389bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Success(); 564b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry} 565bac3299720623f4226bca103b26260052732ad30Tom Cherry 56689bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom CherryResult<Success> Service::ParseNamespace(const std::vector<std::string>& args) { 5671b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes for (size_t i = 1; i < args.size(); i++) { 5681b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes if (args[i] == "pid") { 5691b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes namespace_flags_ |= CLONE_NEWPID; 5701b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes // PID namespaces require mount namespaces. 5711b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes namespace_flags_ |= CLONE_NEWNS; 5721b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes } else if (args[i] == "mnt") { 5731b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes namespace_flags_ |= CLONE_NEWNS; 5741b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes } else { 57589bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Error() << "namespace must be 'pid' or 'mnt'"; 5761b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes } 5771b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes } 57889bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Success(); 5791b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes} 5801b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes 58189bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom CherryResult<Success> Service::ParseOomScoreAdjust(const std::vector<std::string>& args) { 582da46b392f10d2809b5696632f67485f272ec5698Elliott Hughes if (!ParseInt(args[1], &oom_score_adjust_, -1000, 1000)) { 58389bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Error() << "oom_score_adjust value must be in range -1000 - +1000"; 584310f6704d0dfe9ca4cfb153ce8e4212cc7596190Marco Nelissen } 58589bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Success(); 586310f6704d0dfe9ca4cfb153ce8e4212cc7596190Marco Nelissen} 587310f6704d0dfe9ca4cfb153ce8e4212cc7596190Marco Nelissen 5886f5333a4a94becb7ef74a5b54d0c28a3738881fdSteven MorelandResult<Success> Service::ParseOverride(const std::vector<std::string>& args) { 5896f5333a4a94becb7ef74a5b54d0c28a3738881fdSteven Moreland override_ = true; 5906f5333a4a94becb7ef74a5b54d0c28a3738881fdSteven Moreland return Success(); 5916f5333a4a94becb7ef74a5b54d0c28a3738881fdSteven Moreland} 5926f5333a4a94becb7ef74a5b54d0c28a3738881fdSteven Moreland 59389bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom CherryResult<Success> Service::ParseMemcgSwappiness(const std::vector<std::string>& args) { 594d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea if (!ParseInt(args[1], &swappiness_, 0)) { 59589bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Error() << "swappiness value must be equal or greater than 0"; 596d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea } 59789bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Success(); 598d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea} 599d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea 60089bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom CherryResult<Success> Service::ParseMemcgLimitInBytes(const std::vector<std::string>& args) { 601d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea if (!ParseInt(args[1], &limit_in_bytes_, 0)) { 60289bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Error() << "limit_in_bytes value must be equal or greater than 0"; 603d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea } 60489bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Success(); 605d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea} 606d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea 60789bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom CherryResult<Success> Service::ParseMemcgSoftLimitInBytes(const std::vector<std::string>& args) { 608d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea if (!ParseInt(args[1], &soft_limit_in_bytes_, 0)) { 60989bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Error() << "soft_limit_in_bytes value must be equal or greater than 0"; 610d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea } 61189bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Success(); 612d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea} 613d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea 6147ac013de7edc7ec6570ff6a5b6bd3bdce68b769cTom CherryResult<Success> Service::ParseProcessRlimit(const std::vector<std::string>& args) { 6157ac013de7edc7ec6570ff6a5b6bd3bdce68b769cTom Cherry auto rlimit = ParseRlimit(args); 6167ac013de7edc7ec6570ff6a5b6bd3bdce68b769cTom Cherry if (!rlimit) return rlimit.error(); 6177ac013de7edc7ec6570ff6a5b6bd3bdce68b769cTom Cherry 6187ac013de7edc7ec6570ff6a5b6bd3bdce68b769cTom Cherry rlimits_.emplace_back(*rlimit); 6197ac013de7edc7ec6570ff6a5b6bd3bdce68b769cTom Cherry return Success(); 6207ac013de7edc7ec6570ff6a5b6bd3bdce68b769cTom Cherry} 6217ac013de7edc7ec6570ff6a5b6bd3bdce68b769cTom Cherry 62289bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom CherryResult<Success> Service::ParseSeclabel(const std::vector<std::string>& args) { 623b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry seclabel_ = args[1]; 62489bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Success(); 625b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry} 626b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry 62789bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom CherryResult<Success> Service::ParseSetenv(const std::vector<std::string>& args) { 6286de21f11125941ea1b94fdeec754bacea3916fd5Tom Cherry environment_vars_.emplace_back(args[1], args[2]); 62989bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Success(); 630b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry} 631b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry 63289bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom CherryResult<Success> Service::ParseShutdown(const std::vector<std::string>& args) { 633cccb34fce8798f2a359c6eb0e394ef9460673629Keun-young Park if (args[1] == "critical") { 634cccb34fce8798f2a359c6eb0e394ef9460673629Keun-young Park flags_ |= SVC_SHUTDOWN_CRITICAL; 63589bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Success(); 636cccb34fce8798f2a359c6eb0e394ef9460673629Keun-young Park } 63789bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Error() << "Invalid shutdown option"; 638cccb34fce8798f2a359c6eb0e394ef9460673629Keun-young Park} 639cccb34fce8798f2a359c6eb0e394ef9460673629Keun-young Park 64062767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyntemplate <typename T> 64189bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom CherryResult<Success> Service::AddDescriptor(const std::vector<std::string>& args) { 64262767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn int perm = args.size() > 3 ? std::strtoul(args[3].c_str(), 0, 8) : -1; 64311a3aeeae3dc887b889d4086d4d26d95c324c08dTom Cherry Result<uid_t> uid = 0; 64411a3aeeae3dc887b889d4086d4d26d95c324c08dTom Cherry Result<gid_t> gid = 0; 64562767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn std::string context = args.size() > 6 ? args[6] : ""; 64662767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn 647517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry if (args.size() > 4) { 64811a3aeeae3dc887b889d4086d4d26d95c324c08dTom Cherry uid = DecodeUid(args[4]); 64911a3aeeae3dc887b889d4086d4d26d95c324c08dTom Cherry if (!uid) { 65089bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Error() << "Unable to find UID for '" << args[4] << "': " << uid.error(); 651517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry } 652517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry } 653517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry 654517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry if (args.size() > 5) { 65511a3aeeae3dc887b889d4086d4d26d95c324c08dTom Cherry gid = DecodeUid(args[5]); 65611a3aeeae3dc887b889d4086d4d26d95c324c08dTom Cherry if (!gid) { 65789bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Error() << "Unable to find GID for '" << args[5] << "': " << gid.error(); 658517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry } 659517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry } 660517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry 66111a3aeeae3dc887b889d4086d4d26d95c324c08dTom Cherry auto descriptor = std::make_unique<T>(args[1], args[2], *uid, *gid, perm, context); 66262767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn 66362767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn auto old = 66462767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn std::find_if(descriptors_.begin(), descriptors_.end(), 66562767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn [&descriptor] (const auto& other) { return descriptor.get() == other.get(); }); 66662767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn 66762767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn if (old != descriptors_.end()) { 66889bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Error() << "duplicate descriptor " << args[1] << " " << args[2]; 66962767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn } 67062767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn 67162767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn descriptors_.emplace_back(std::move(descriptor)); 67289bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Success(); 67362767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn} 67462767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn 67562767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn// name type perm [ uid gid context ] 67689bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom CherryResult<Success> Service::ParseSocket(const std::vector<std::string>& args) { 67781f5d3ebef2c3789737bf718fc2a2cdd7b9e8b33Tom Cherry if (!StartsWith(args[2], "dgram") && !StartsWith(args[2], "stream") && 67881f5d3ebef2c3789737bf718fc2a2cdd7b9e8b33Tom Cherry !StartsWith(args[2], "seqpacket")) { 67989bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Error() << "socket type must be 'dgram', 'stream' or 'seqpacket'"; 680bac3299720623f4226bca103b26260052732ad30Tom Cherry } 68189bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return AddDescriptor<SocketInfo>(args); 68262767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn} 683b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry 68462767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn// name type perm [ uid gid context ] 68589bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom CherryResult<Success> Service::ParseFile(const std::vector<std::string>& args) { 68662767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn if (args[2] != "r" && args[2] != "w" && args[2] != "rw") { 68789bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Error() << "file type must be 'r', 'w' or 'rw'"; 68862767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn } 68962767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn if ((args[1][0] != '/') || (args[1].find("../") != std::string::npos)) { 69089bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Error() << "file name must not be relative"; 69162767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn } 69289bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return AddDescriptor<FileInfo>(args); 693bac3299720623f4226bca103b26260052732ad30Tom Cherry} 694bac3299720623f4226bca103b26260052732ad30Tom Cherry 69589bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom CherryResult<Success> Service::ParseUser(const std::vector<std::string>& args) { 69611a3aeeae3dc887b889d4086d4d26d95c324c08dTom Cherry auto uid = DecodeUid(args[1]); 69711a3aeeae3dc887b889d4086d4d26d95c324c08dTom Cherry if (!uid) { 69889bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Error() << "Unable to find UID for '" << args[1] << "': " << uid.error(); 699517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry } 70011a3aeeae3dc887b889d4086d4d26d95c324c08dTom Cherry uid_ = *uid; 70189bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Success(); 702b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry} 703b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry 70489bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom CherryResult<Success> Service::ParseWritepid(const std::vector<std::string>& args) { 705b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry writepid_files_.assign(args.begin() + 1, args.end()); 70689bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Success(); 707b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry} 708b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry 709177b27d4f5bfa498cc46aad24d9375d65630bea0Jorge Lucangeli Obesclass Service::OptionParserMap : public KeywordMap<OptionParser> { 710ad54d094cde838d19034b8325705b22dca0e9af0Tom Cherry public: 711ad54d094cde838d19034b8325705b22dca0e9af0Tom Cherry OptionParserMap() {} 712ad54d094cde838d19034b8325705b22dca0e9af0Tom Cherry 713ad54d094cde838d19034b8325705b22dca0e9af0Tom Cherry private: 714ad54d094cde838d19034b8325705b22dca0e9af0Tom Cherry const Map& map() const override; 715b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry}; 716b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry 717ad54d094cde838d19034b8325705b22dca0e9af0Tom Cherryconst Service::OptionParserMap::Map& Service::OptionParserMap::map() const { 718b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry constexpr std::size_t kMax = std::numeric_limits<std::size_t>::max(); 719641ff0a4d8d05349d9c22f726a035a2936a2a94dWei Wang // clang-format off 720177b27d4f5bfa498cc46aad24d9375d65630bea0Jorge Lucangeli Obes static const Map option_parsers = { 72124b29132a017f7fbfd009c3e6aec499d1b815dbfJorge Lucangeli Obes {"capabilities", 72224b29132a017f7fbfd009c3e6aec499d1b815dbfJorge Lucangeli Obes {1, kMax, &Service::ParseCapabilities}}, 723641ff0a4d8d05349d9c22f726a035a2936a2a94dWei Wang {"class", {1, kMax, &Service::ParseClass}}, 724177b27d4f5bfa498cc46aad24d9375d65630bea0Jorge Lucangeli Obes {"console", {0, 1, &Service::ParseConsole}}, 725177b27d4f5bfa498cc46aad24d9375d65630bea0Jorge Lucangeli Obes {"critical", {0, 0, &Service::ParseCritical}}, 726177b27d4f5bfa498cc46aad24d9375d65630bea0Jorge Lucangeli Obes {"disabled", {0, 0, &Service::ParseDisabled}}, 7272fa7451e9b530f814f93ca2248fa425b1f5362cdTom Cherry {"enter_namespace", 7282fa7451e9b530f814f93ca2248fa425b1f5362cdTom Cherry {2, 2, &Service::ParseEnterNamespace}}, 729177b27d4f5bfa498cc46aad24d9375d65630bea0Jorge Lucangeli Obes {"group", {1, NR_SVC_SUPP_GIDS + 1, &Service::ParseGroup}}, 730e055d73396ecfba1dafd41fd2ec0cb3353c81e6aSteven Moreland {"interface", {2, 2, &Service::ParseInterface}}, 731177b27d4f5bfa498cc46aad24d9375d65630bea0Jorge Lucangeli Obes {"ioprio", {2, 2, &Service::ParseIoprio}}, 732177b27d4f5bfa498cc46aad24d9375d65630bea0Jorge Lucangeli Obes {"priority", {1, 1, &Service::ParsePriority}}, 733177b27d4f5bfa498cc46aad24d9375d65630bea0Jorge Lucangeli Obes {"keycodes", {1, kMax, &Service::ParseKeycodes}}, 734177b27d4f5bfa498cc46aad24d9375d65630bea0Jorge Lucangeli Obes {"oneshot", {0, 0, &Service::ParseOneshot}}, 735177b27d4f5bfa498cc46aad24d9375d65630bea0Jorge Lucangeli Obes {"onrestart", {1, kMax, &Service::ParseOnrestart}}, 7366f5333a4a94becb7ef74a5b54d0c28a3738881fdSteven Moreland {"override", {0, 0, &Service::ParseOverride}}, 737310f6704d0dfe9ca4cfb153ce8e4212cc7596190Marco Nelissen {"oom_score_adjust", 738310f6704d0dfe9ca4cfb153ce8e4212cc7596190Marco Nelissen {1, 1, &Service::ParseOomScoreAdjust}}, 739d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea {"memcg.swappiness", 740d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea {1, 1, &Service::ParseMemcgSwappiness}}, 741d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea {"memcg.soft_limit_in_bytes", 742d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea {1, 1, &Service::ParseMemcgSoftLimitInBytes}}, 743d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea {"memcg.limit_in_bytes", 744d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea {1, 1, &Service::ParseMemcgLimitInBytes}}, 745177b27d4f5bfa498cc46aad24d9375d65630bea0Jorge Lucangeli Obes {"namespace", {1, 2, &Service::ParseNamespace}}, 7467ac013de7edc7ec6570ff6a5b6bd3bdce68b769cTom Cherry {"rlimit", {3, 3, &Service::ParseProcessRlimit}}, 747177b27d4f5bfa498cc46aad24d9375d65630bea0Jorge Lucangeli Obes {"seclabel", {1, 1, &Service::ParseSeclabel}}, 748177b27d4f5bfa498cc46aad24d9375d65630bea0Jorge Lucangeli Obes {"setenv", {2, 2, &Service::ParseSetenv}}, 749cccb34fce8798f2a359c6eb0e394ef9460673629Keun-young Park {"shutdown", {1, 1, &Service::ParseShutdown}}, 750177b27d4f5bfa498cc46aad24d9375d65630bea0Jorge Lucangeli Obes {"socket", {3, 6, &Service::ParseSocket}}, 751978fd0ea254f11f84e38b41a74bbe70c81edc197Mark Salyzyn {"file", {2, 2, &Service::ParseFile}}, 752177b27d4f5bfa498cc46aad24d9375d65630bea0Jorge Lucangeli Obes {"user", {1, 1, &Service::ParseUser}}, 753177b27d4f5bfa498cc46aad24d9375d65630bea0Jorge Lucangeli Obes {"writepid", {1, kMax, &Service::ParseWritepid}}, 754b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry }; 755641ff0a4d8d05349d9c22f726a035a2936a2a94dWei Wang // clang-format on 756177b27d4f5bfa498cc46aad24d9375d65630bea0Jorge Lucangeli Obes return option_parsers; 757b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry} 758b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry 75989bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom CherryResult<Success> Service::ParseLine(const std::vector<std::string>& args) { 760177b27d4f5bfa498cc46aad24d9375d65630bea0Jorge Lucangeli Obes static const OptionParserMap parser_map; 76189bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry auto parser = parser_map.FindFunction(args); 762b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry 76376af7e6a0c4ce7759e6cc5994b5496ddb09035eeTom Cherry if (!parser) return parser.error(); 764b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry 76589bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return std::invoke(*parser, this, args); 766b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry} 767b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry 76876af7e6a0c4ce7759e6cc5994b5496ddb09035eeTom CherryResult<Success> Service::ExecStart() { 7693b81f2d623c6cba45ad07fa91338d346d9b96482Tom Cherry flags_ |= SVC_ONESHOT; 770b27004aa05039b5196f1e878169dca41b68aadd6Tom Cherry 77176af7e6a0c4ce7759e6cc5994b5496ddb09035eeTom Cherry if (auto result = Start(); !result) { 77276af7e6a0c4ce7759e6cc5994b5496ddb09035eeTom Cherry return result; 773b27004aa05039b5196f1e878169dca41b68aadd6Tom Cherry } 7743b81f2d623c6cba45ad07fa91338d346d9b96482Tom Cherry 7753b81f2d623c6cba45ad07fa91338d346d9b96482Tom Cherry flags_ |= SVC_EXEC; 7763b81f2d623c6cba45ad07fa91338d346d9b96482Tom Cherry is_exec_service_running_ = true; 7773b81f2d623c6cba45ad07fa91338d346d9b96482Tom Cherry 7783b81f2d623c6cba45ad07fa91338d346d9b96482Tom Cherry LOG(INFO) << "SVC_EXEC pid " << pid_ << " (uid " << uid_ << " gid " << gid_ << "+" 7793b81f2d623c6cba45ad07fa91338d346d9b96482Tom Cherry << supp_gids_.size() << " context " << (!seclabel_.empty() ? seclabel_ : "default") 7803b81f2d623c6cba45ad07fa91338d346d9b96482Tom Cherry << ") started; waiting..."; 7813b81f2d623c6cba45ad07fa91338d346d9b96482Tom Cherry 78276af7e6a0c4ce7759e6cc5994b5496ddb09035eeTom Cherry return Success(); 783b27004aa05039b5196f1e878169dca41b68aadd6Tom Cherry} 784b27004aa05039b5196f1e878169dca41b68aadd6Tom Cherry 78576af7e6a0c4ce7759e6cc5994b5496ddb09035eeTom CherryResult<Success> Service::Start() { 786990d43cb82ed95cf16d5bfb688cfc39b29defd8bTao Wu bool disabled = (flags_ & (SVC_DISABLED | SVC_RESET)); 787bac3299720623f4226bca103b26260052732ad30Tom Cherry // Starting a service removes it from the disabled or reset state and 788bac3299720623f4226bca103b26260052732ad30Tom Cherry // immediately takes it out of the restarting state if it was in there. 789bac3299720623f4226bca103b26260052732ad30Tom Cherry flags_ &= (~(SVC_DISABLED|SVC_RESTARTING|SVC_RESET|SVC_RESTART|SVC_DISABLED_START)); 790bac3299720623f4226bca103b26260052732ad30Tom Cherry 791bac3299720623f4226bca103b26260052732ad30Tom Cherry // Running processes require no additional work --- if they're in the 792bac3299720623f4226bca103b26260052732ad30Tom Cherry // process of exiting, we've ensured that they will immediately restart 793990d43cb82ed95cf16d5bfb688cfc39b29defd8bTao Wu // on exit, unless they are ONESHOT. For ONESHOT service, if it's in 794990d43cb82ed95cf16d5bfb688cfc39b29defd8bTao Wu // stopping status, we just set SVC_RESTART flag so it will get restarted 795990d43cb82ed95cf16d5bfb688cfc39b29defd8bTao Wu // in Reap(). 796bac3299720623f4226bca103b26260052732ad30Tom Cherry if (flags_ & SVC_RUNNING) { 797990d43cb82ed95cf16d5bfb688cfc39b29defd8bTao Wu if ((flags_ & SVC_ONESHOT) && disabled) { 798990d43cb82ed95cf16d5bfb688cfc39b29defd8bTao Wu flags_ |= SVC_RESTART; 799990d43cb82ed95cf16d5bfb688cfc39b29defd8bTao Wu } 80076af7e6a0c4ce7759e6cc5994b5496ddb09035eeTom Cherry // It is not an error to try to start a service that is already running. 80176af7e6a0c4ce7759e6cc5994b5496ddb09035eeTom Cherry return Success(); 802bac3299720623f4226bca103b26260052732ad30Tom Cherry } 803bac3299720623f4226bca103b26260052732ad30Tom Cherry 804bac3299720623f4226bca103b26260052732ad30Tom Cherry bool needs_console = (flags_ & SVC_CONSOLE); 80570daa67062c016eea1a30be2e1de0dcba1d23a13Viorel Suman if (needs_console) { 80670daa67062c016eea1a30be2e1de0dcba1d23a13Viorel Suman if (console_.empty()) { 80770daa67062c016eea1a30be2e1de0dcba1d23a13Viorel Suman console_ = default_console; 80870daa67062c016eea1a30be2e1de0dcba1d23a13Viorel Suman } 80970daa67062c016eea1a30be2e1de0dcba1d23a13Viorel Suman 81024ef8601c203a28b85a5e9168e5bada713e6a8f1Adrian Salido // Make sure that open call succeeds to ensure a console driver is 81124ef8601c203a28b85a5e9168e5bada713e6a8f1Adrian Salido // properly registered for the device node 81224ef8601c203a28b85a5e9168e5bada713e6a8f1Adrian Salido int console_fd = open(console_.c_str(), O_RDWR | O_CLOEXEC); 81324ef8601c203a28b85a5e9168e5bada713e6a8f1Adrian Salido if (console_fd < 0) { 81470daa67062c016eea1a30be2e1de0dcba1d23a13Viorel Suman flags_ |= SVC_DISABLED; 81576af7e6a0c4ce7759e6cc5994b5496ddb09035eeTom Cherry return ErrnoError() << "Couldn't open console '" << console_ << "'"; 81670daa67062c016eea1a30be2e1de0dcba1d23a13Viorel Suman } 81724ef8601c203a28b85a5e9168e5bada713e6a8f1Adrian Salido close(console_fd); 818bac3299720623f4226bca103b26260052732ad30Tom Cherry } 819bac3299720623f4226bca103b26260052732ad30Tom Cherry 820bac3299720623f4226bca103b26260052732ad30Tom Cherry struct stat sb; 821bac3299720623f4226bca103b26260052732ad30Tom Cherry if (stat(args_[0].c_str(), &sb) == -1) { 822bac3299720623f4226bca103b26260052732ad30Tom Cherry flags_ |= SVC_DISABLED; 82376af7e6a0c4ce7759e6cc5994b5496ddb09035eeTom Cherry return ErrnoError() << "Cannot find '" << args_[0] << "'"; 824bac3299720623f4226bca103b26260052732ad30Tom Cherry } 825bac3299720623f4226bca103b26260052732ad30Tom Cherry 826bac3299720623f4226bca103b26260052732ad30Tom Cherry std::string scon; 827bac3299720623f4226bca103b26260052732ad30Tom Cherry if (!seclabel_.empty()) { 828bac3299720623f4226bca103b26260052732ad30Tom Cherry scon = seclabel_; 829bac3299720623f4226bca103b26260052732ad30Tom Cherry } else { 8302fa7451e9b530f814f93ca2248fa425b1f5362cdTom Cherry auto result = ComputeContextFromExecutable(args_[0]); 83176af7e6a0c4ce7759e6cc5994b5496ddb09035eeTom Cherry if (!result) { 83276af7e6a0c4ce7759e6cc5994b5496ddb09035eeTom Cherry return result.error(); 833bac3299720623f4226bca103b26260052732ad30Tom Cherry } 83476af7e6a0c4ce7759e6cc5994b5496ddb09035eeTom Cherry scon = *result; 835bac3299720623f4226bca103b26260052732ad30Tom Cherry } 836bac3299720623f4226bca103b26260052732ad30Tom Cherry 837a285dac9c0b95a0351dfa98dde60c74a1445dc57Wei Wang LOG(INFO) << "starting service '" << name_ << "'..."; 838bac3299720623f4226bca103b26260052732ad30Tom Cherry 8391b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes pid_t pid = -1; 8401b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes if (namespace_flags_) { 841344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes pid = clone(nullptr, nullptr, namespace_flags_ | SIGCHLD, nullptr); 8421b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes } else { 8431b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes pid = fork(); 8441b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes } 8451b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes 846bac3299720623f4226bca103b26260052732ad30Tom Cherry if (pid == 0) { 847bac3299720623f4226bca103b26260052732ad30Tom Cherry umask(077); 848bac3299720623f4226bca103b26260052732ad30Tom Cherry 8492fa7451e9b530f814f93ca2248fa425b1f5362cdTom Cherry if (auto result = EnterNamespaces(); !result) { 8502fa7451e9b530f814f93ca2248fa425b1f5362cdTom Cherry LOG(FATAL) << "Service '" << name_ << "' could not enter namespaces: " << result.error(); 8512fa7451e9b530f814f93ca2248fa425b1f5362cdTom Cherry } 8522fa7451e9b530f814f93ca2248fa425b1f5362cdTom Cherry 8532fa7451e9b530f814f93ca2248fa425b1f5362cdTom Cherry if (namespace_flags_ & CLONE_NEWNS) { 8542fa7451e9b530f814f93ca2248fa425b1f5362cdTom Cherry if (auto result = SetUpMountNamespace(); !result) { 8552fa7451e9b530f814f93ca2248fa425b1f5362cdTom Cherry LOG(FATAL) << "Service '" << name_ 8562fa7451e9b530f814f93ca2248fa425b1f5362cdTom Cherry << "' could not set up mount namespace: " << result.error(); 8572fa7451e9b530f814f93ca2248fa425b1f5362cdTom Cherry } 8582fa7451e9b530f814f93ca2248fa425b1f5362cdTom Cherry } 8592fa7451e9b530f814f93ca2248fa425b1f5362cdTom Cherry 8601b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes if (namespace_flags_ & CLONE_NEWPID) { 8611b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes // This will fork again to run an init process inside the PID 8621b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes // namespace. 8632fa7451e9b530f814f93ca2248fa425b1f5362cdTom Cherry if (auto result = SetUpPidNamespace(); !result) { 8642fa7451e9b530f814f93ca2248fa425b1f5362cdTom Cherry LOG(FATAL) << "Service '" << name_ 8652fa7451e9b530f814f93ca2248fa425b1f5362cdTom Cherry << "' could not set up PID namespace: " << result.error(); 8662fa7451e9b530f814f93ca2248fa425b1f5362cdTom Cherry } 8671b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes } 8681b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes 8696de21f11125941ea1b94fdeec754bacea3916fd5Tom Cherry for (const auto& [key, value] : environment_vars_) { 8706de21f11125941ea1b94fdeec754bacea3916fd5Tom Cherry setenv(key.c_str(), value.c_str(), 1); 871bac3299720623f4226bca103b26260052732ad30Tom Cherry } 872bac3299720623f4226bca103b26260052732ad30Tom Cherry 87362767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn std::for_each(descriptors_.begin(), descriptors_.end(), 87462767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn std::bind(&DescriptorInfo::CreateAndPublish, std::placeholders::_1, scon)); 875bac3299720623f4226bca103b26260052732ad30Tom Cherry 8760828676dff618c8ecc9852cb319543570b3a2e72Alex Vakulenko // See if there were "writepid" instructions to write to files under /dev/cpuset/. 8770828676dff618c8ecc9852cb319543570b3a2e72Alex Vakulenko auto cpuset_predicate = [](const std::string& path) { 87881f5d3ebef2c3789737bf718fc2a2cdd7b9e8b33Tom Cherry return StartsWith(path, "/dev/cpuset/"); 8790828676dff618c8ecc9852cb319543570b3a2e72Alex Vakulenko }; 8800828676dff618c8ecc9852cb319543570b3a2e72Alex Vakulenko auto iter = std::find_if(writepid_files_.begin(), writepid_files_.end(), cpuset_predicate); 8810828676dff618c8ecc9852cb319543570b3a2e72Alex Vakulenko if (iter == writepid_files_.end()) { 8820828676dff618c8ecc9852cb319543570b3a2e72Alex Vakulenko // There were no "writepid" instructions for cpusets, check if the system default 8830828676dff618c8ecc9852cb319543570b3a2e72Alex Vakulenko // cpuset is specified to be used for the process. 88481f5d3ebef2c3789737bf718fc2a2cdd7b9e8b33Tom Cherry std::string default_cpuset = GetProperty("ro.cpuset.default", ""); 8850828676dff618c8ecc9852cb319543570b3a2e72Alex Vakulenko if (!default_cpuset.empty()) { 8860828676dff618c8ecc9852cb319543570b3a2e72Alex Vakulenko // Make sure the cpuset name starts and ends with '/'. 8870828676dff618c8ecc9852cb319543570b3a2e72Alex Vakulenko // A single '/' means the 'root' cpuset. 8880828676dff618c8ecc9852cb319543570b3a2e72Alex Vakulenko if (default_cpuset.front() != '/') { 8890828676dff618c8ecc9852cb319543570b3a2e72Alex Vakulenko default_cpuset.insert(0, 1, '/'); 8900828676dff618c8ecc9852cb319543570b3a2e72Alex Vakulenko } 8910828676dff618c8ecc9852cb319543570b3a2e72Alex Vakulenko if (default_cpuset.back() != '/') { 8920828676dff618c8ecc9852cb319543570b3a2e72Alex Vakulenko default_cpuset.push_back('/'); 8930828676dff618c8ecc9852cb319543570b3a2e72Alex Vakulenko } 8940828676dff618c8ecc9852cb319543570b3a2e72Alex Vakulenko writepid_files_.push_back( 8950828676dff618c8ecc9852cb319543570b3a2e72Alex Vakulenko StringPrintf("/dev/cpuset%stasks", default_cpuset.c_str())); 8960828676dff618c8ecc9852cb319543570b3a2e72Alex Vakulenko } 8970828676dff618c8ecc9852cb319543570b3a2e72Alex Vakulenko } 8981c3a53f03ca3c2c647f83cd8b8ae7e18c5c7bc69Tom Cherry std::string pid_str = std::to_string(getpid()); 899bac3299720623f4226bca103b26260052732ad30Tom Cherry for (const auto& file : writepid_files_) { 900b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry if (!WriteStringToFile(pid_str, file)) { 901f86b5a6b90619e02d1d034ef7b0adc3b439f4abbElliott Hughes PLOG(ERROR) << "couldn't write " << pid_str << " to " << file; 902bac3299720623f4226bca103b26260052732ad30Tom Cherry } 903bac3299720623f4226bca103b26260052732ad30Tom Cherry } 904bac3299720623f4226bca103b26260052732ad30Tom Cherry 905bac3299720623f4226bca103b26260052732ad30Tom Cherry if (ioprio_class_ != IoSchedClass_NONE) { 906bac3299720623f4226bca103b26260052732ad30Tom Cherry if (android_set_ioprio(getpid(), ioprio_class_, ioprio_pri_)) { 907344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes PLOG(ERROR) << "failed to set pid " << getpid() 908f86b5a6b90619e02d1d034ef7b0adc3b439f4abbElliott Hughes << " ioprio=" << ioprio_class_ << "," << ioprio_pri_; 909bac3299720623f4226bca103b26260052732ad30Tom Cherry } 910bac3299720623f4226bca103b26260052732ad30Tom Cherry } 911bac3299720623f4226bca103b26260052732ad30Tom Cherry 912bac3299720623f4226bca103b26260052732ad30Tom Cherry if (needs_console) { 913bac3299720623f4226bca103b26260052732ad30Tom Cherry setsid(); 914bac3299720623f4226bca103b26260052732ad30Tom Cherry OpenConsole(); 915bac3299720623f4226bca103b26260052732ad30Tom Cherry } else { 916bac3299720623f4226bca103b26260052732ad30Tom Cherry ZapStdio(); 917bac3299720623f4226bca103b26260052732ad30Tom Cherry } 918bac3299720623f4226bca103b26260052732ad30Tom Cherry 919344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes // As requested, set our gid, supplemental gids, uid, context, and 920344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes // priority. Aborts on failure. 921344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes SetProcessAttributes(); 922bac3299720623f4226bca103b26260052732ad30Tom Cherry 9235e405cacb1f3ef2265fcc71dbbf6a39c1e7dc1c1Tom Cherry if (!ExpandArgsAndExecv(args_)) { 9245e405cacb1f3ef2265fcc71dbbf6a39c1e7dc1c1Tom Cherry PLOG(ERROR) << "cannot execve('" << args_[0] << "')"; 925bac3299720623f4226bca103b26260052732ad30Tom Cherry } 926bac3299720623f4226bca103b26260052732ad30Tom Cherry 927bac3299720623f4226bca103b26260052732ad30Tom Cherry _exit(127); 928bac3299720623f4226bca103b26260052732ad30Tom Cherry } 929bac3299720623f4226bca103b26260052732ad30Tom Cherry 930bac3299720623f4226bca103b26260052732ad30Tom Cherry if (pid < 0) { 931bac3299720623f4226bca103b26260052732ad30Tom Cherry pid_ = 0; 93276af7e6a0c4ce7759e6cc5994b5496ddb09035eeTom Cherry return ErrnoError() << "Failed to fork"; 933bac3299720623f4226bca103b26260052732ad30Tom Cherry } 934bac3299720623f4226bca103b26260052732ad30Tom Cherry 935310f6704d0dfe9ca4cfb153ce8e4212cc7596190Marco Nelissen if (oom_score_adjust_ != -1000) { 9361c3a53f03ca3c2c647f83cd8b8ae7e18c5c7bc69Tom Cherry std::string oom_str = std::to_string(oom_score_adjust_); 937310f6704d0dfe9ca4cfb153ce8e4212cc7596190Marco Nelissen std::string oom_file = StringPrintf("/proc/%d/oom_score_adj", pid); 938310f6704d0dfe9ca4cfb153ce8e4212cc7596190Marco Nelissen if (!WriteStringToFile(oom_str, oom_file)) { 939310f6704d0dfe9ca4cfb153ce8e4212cc7596190Marco Nelissen PLOG(ERROR) << "couldn't write oom_score_adj: " << strerror(errno); 940310f6704d0dfe9ca4cfb153ce8e4212cc7596190Marco Nelissen } 941310f6704d0dfe9ca4cfb153ce8e4212cc7596190Marco Nelissen } 942310f6704d0dfe9ca4cfb153ce8e4212cc7596190Marco Nelissen 9439605a945f7a497c0307b512b9cd762f2d23973caElliott Hughes time_started_ = boot_clock::now(); 944bac3299720623f4226bca103b26260052732ad30Tom Cherry pid_ = pid; 945bac3299720623f4226bca103b26260052732ad30Tom Cherry flags_ |= SVC_RUNNING; 9465938379e910c4cbd7ed2429901bb3c45e62405d4Tom Cherry start_order_ = next_start_order_++; 94733838b1156cd1a5f8eec94756bee9e030a3dd2ebTom Cherry process_cgroup_empty_ = false; 948ad8e94e017173471e90c704eb7d8de5a14712aa7Elliott Hughes 949ad8e94e017173471e90c704eb7d8de5a14712aa7Elliott Hughes errno = -createProcessGroup(uid_, pid_); 950ad8e94e017173471e90c704eb7d8de5a14712aa7Elliott Hughes if (errno != 0) { 951344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes PLOG(ERROR) << "createProcessGroup(" << uid_ << ", " << pid_ << ") failed for service '" 952344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes << name_ << "'"; 953d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea } else { 954d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea if (swappiness_ != -1) { 955d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea if (!setProcessGroupSwappiness(uid_, pid_, swappiness_)) { 956d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea PLOG(ERROR) << "setProcessGroupSwappiness failed"; 957d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea } 958d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea } 959d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea 960d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea if (soft_limit_in_bytes_ != -1) { 961d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea if (!setProcessGroupSoftLimit(uid_, pid_, soft_limit_in_bytes_)) { 962d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea PLOG(ERROR) << "setProcessGroupSoftLimit failed"; 963d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea } 964d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea } 965d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea 966d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea if (limit_in_bytes_ != -1) { 967d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea if (!setProcessGroupLimit(uid_, pid_, limit_in_bytes_)) { 968d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea PLOG(ERROR) << "setProcessGroupLimit failed"; 969d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea } 970d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea } 971ad8e94e017173471e90c704eb7d8de5a14712aa7Elliott Hughes } 972bac3299720623f4226bca103b26260052732ad30Tom Cherry 973bac3299720623f4226bca103b26260052732ad30Tom Cherry NotifyStateChange("running"); 97476af7e6a0c4ce7759e6cc5994b5496ddb09035eeTom Cherry return Success(); 975bac3299720623f4226bca103b26260052732ad30Tom Cherry} 976bac3299720623f4226bca103b26260052732ad30Tom Cherry 97776af7e6a0c4ce7759e6cc5994b5496ddb09035eeTom CherryResult<Success> Service::StartIfNotDisabled() { 978bac3299720623f4226bca103b26260052732ad30Tom Cherry if (!(flags_ & SVC_DISABLED)) { 979bac3299720623f4226bca103b26260052732ad30Tom Cherry return Start(); 980bac3299720623f4226bca103b26260052732ad30Tom Cherry } else { 981bac3299720623f4226bca103b26260052732ad30Tom Cherry flags_ |= SVC_DISABLED_START; 982bac3299720623f4226bca103b26260052732ad30Tom Cherry } 98376af7e6a0c4ce7759e6cc5994b5496ddb09035eeTom Cherry return Success(); 984bac3299720623f4226bca103b26260052732ad30Tom Cherry} 985bac3299720623f4226bca103b26260052732ad30Tom Cherry 98676af7e6a0c4ce7759e6cc5994b5496ddb09035eeTom CherryResult<Success> Service::Enable() { 987bac3299720623f4226bca103b26260052732ad30Tom Cherry flags_ &= ~(SVC_DISABLED | SVC_RC_DISABLED); 988bac3299720623f4226bca103b26260052732ad30Tom Cherry if (flags_ & SVC_DISABLED_START) { 989bac3299720623f4226bca103b26260052732ad30Tom Cherry return Start(); 990bac3299720623f4226bca103b26260052732ad30Tom Cherry } 99176af7e6a0c4ce7759e6cc5994b5496ddb09035eeTom Cherry return Success(); 992bac3299720623f4226bca103b26260052732ad30Tom Cherry} 993bac3299720623f4226bca103b26260052732ad30Tom Cherry 994bac3299720623f4226bca103b26260052732ad30Tom Cherryvoid Service::Reset() { 995bac3299720623f4226bca103b26260052732ad30Tom Cherry StopOrReset(SVC_RESET); 996bac3299720623f4226bca103b26260052732ad30Tom Cherry} 997bac3299720623f4226bca103b26260052732ad30Tom Cherry 998bac3299720623f4226bca103b26260052732ad30Tom Cherryvoid Service::Stop() { 999bac3299720623f4226bca103b26260052732ad30Tom Cherry StopOrReset(SVC_DISABLED); 1000bac3299720623f4226bca103b26260052732ad30Tom Cherry} 1001bac3299720623f4226bca103b26260052732ad30Tom Cherry 1002b7e03e82b89a30b09fea88eaf2a5638df1017cf6Bertrand SIMONNETvoid Service::Terminate() { 1003b7e03e82b89a30b09fea88eaf2a5638df1017cf6Bertrand SIMONNET flags_ &= ~(SVC_RESTARTING | SVC_DISABLED_START); 1004b7e03e82b89a30b09fea88eaf2a5638df1017cf6Bertrand SIMONNET flags_ |= SVC_DISABLED; 1005b7e03e82b89a30b09fea88eaf2a5638df1017cf6Bertrand SIMONNET if (pid_) { 1006ad8e94e017173471e90c704eb7d8de5a14712aa7Elliott Hughes KillProcessGroup(SIGTERM); 1007b7e03e82b89a30b09fea88eaf2a5638df1017cf6Bertrand SIMONNET NotifyStateChange("stopping"); 1008b7e03e82b89a30b09fea88eaf2a5638df1017cf6Bertrand SIMONNET } 1009b7e03e82b89a30b09fea88eaf2a5638df1017cf6Bertrand SIMONNET} 1010b7e03e82b89a30b09fea88eaf2a5638df1017cf6Bertrand SIMONNET 1011bac3299720623f4226bca103b26260052732ad30Tom Cherryvoid Service::Restart() { 1012bac3299720623f4226bca103b26260052732ad30Tom Cherry if (flags_ & SVC_RUNNING) { 1013bac3299720623f4226bca103b26260052732ad30Tom Cherry /* Stop, wait, then start the service. */ 1014bac3299720623f4226bca103b26260052732ad30Tom Cherry StopOrReset(SVC_RESTART); 1015bac3299720623f4226bca103b26260052732ad30Tom Cherry } else if (!(flags_ & SVC_RESTARTING)) { 1016bac3299720623f4226bca103b26260052732ad30Tom Cherry /* Just start the service since it's not running. */ 101776af7e6a0c4ce7759e6cc5994b5496ddb09035eeTom Cherry if (auto result = Start(); !result) { 101876af7e6a0c4ce7759e6cc5994b5496ddb09035eeTom Cherry LOG(ERROR) << "Could not restart '" << name_ << "': " << result.error(); 101976af7e6a0c4ce7759e6cc5994b5496ddb09035eeTom Cherry } 1020bac3299720623f4226bca103b26260052732ad30Tom Cherry } /* else: Service is restarting anyways. */ 1021bac3299720623f4226bca103b26260052732ad30Tom Cherry} 1022bac3299720623f4226bca103b26260052732ad30Tom Cherry 1023ad8e94e017173471e90c704eb7d8de5a14712aa7Elliott Hughes// The how field should be either SVC_DISABLED, SVC_RESET, or SVC_RESTART. 1024bac3299720623f4226bca103b26260052732ad30Tom Cherryvoid Service::StopOrReset(int how) { 1025ad8e94e017173471e90c704eb7d8de5a14712aa7Elliott Hughes // The service is still SVC_RUNNING until its process exits, but if it has 1026ad8e94e017173471e90c704eb7d8de5a14712aa7Elliott Hughes // already exited it shoudn't attempt a restart yet. 1027bac3299720623f4226bca103b26260052732ad30Tom Cherry flags_ &= ~(SVC_RESTARTING | SVC_DISABLED_START); 1028bac3299720623f4226bca103b26260052732ad30Tom Cherry 1029bac3299720623f4226bca103b26260052732ad30Tom Cherry if ((how != SVC_DISABLED) && (how != SVC_RESET) && (how != SVC_RESTART)) { 1030ad8e94e017173471e90c704eb7d8de5a14712aa7Elliott Hughes // An illegal flag: default to SVC_DISABLED. 1031bac3299720623f4226bca103b26260052732ad30Tom Cherry how = SVC_DISABLED; 1032bac3299720623f4226bca103b26260052732ad30Tom Cherry } 1033ad8e94e017173471e90c704eb7d8de5a14712aa7Elliott Hughes 1034ad8e94e017173471e90c704eb7d8de5a14712aa7Elliott Hughes // If the service has not yet started, prevent it from auto-starting with its class. 1035bac3299720623f4226bca103b26260052732ad30Tom Cherry if (how == SVC_RESET) { 1036bac3299720623f4226bca103b26260052732ad30Tom Cherry flags_ |= (flags_ & SVC_RC_DISABLED) ? SVC_DISABLED : SVC_RESET; 1037bac3299720623f4226bca103b26260052732ad30Tom Cherry } else { 1038bac3299720623f4226bca103b26260052732ad30Tom Cherry flags_ |= how; 1039bac3299720623f4226bca103b26260052732ad30Tom Cherry } 104084b856d90167d567238af95fceade30a0dc93d58Tao Wu // Make sure it's in right status when a restart immediately follow a 104184b856d90167d567238af95fceade30a0dc93d58Tao Wu // stop/reset or vice versa. 104284b856d90167d567238af95fceade30a0dc93d58Tao Wu if (how == SVC_RESTART) { 104384b856d90167d567238af95fceade30a0dc93d58Tao Wu flags_ &= (~(SVC_DISABLED | SVC_RESET)); 104484b856d90167d567238af95fceade30a0dc93d58Tao Wu } else { 104584b856d90167d567238af95fceade30a0dc93d58Tao Wu flags_ &= (~SVC_RESTART); 104684b856d90167d567238af95fceade30a0dc93d58Tao Wu } 1047bac3299720623f4226bca103b26260052732ad30Tom Cherry 1048bac3299720623f4226bca103b26260052732ad30Tom Cherry if (pid_) { 1049ad8e94e017173471e90c704eb7d8de5a14712aa7Elliott Hughes KillProcessGroup(SIGKILL); 1050bac3299720623f4226bca103b26260052732ad30Tom Cherry NotifyStateChange("stopping"); 1051bac3299720623f4226bca103b26260052732ad30Tom Cherry } else { 1052bac3299720623f4226bca103b26260052732ad30Tom Cherry NotifyStateChange("stopped"); 1053bac3299720623f4226bca103b26260052732ad30Tom Cherry } 1054bac3299720623f4226bca103b26260052732ad30Tom Cherry} 1055bac3299720623f4226bca103b26260052732ad30Tom Cherry 1056bac3299720623f4226bca103b26260052732ad30Tom Cherryvoid Service::ZapStdio() const { 1057bac3299720623f4226bca103b26260052732ad30Tom Cherry int fd; 1058bac3299720623f4226bca103b26260052732ad30Tom Cherry fd = open("/dev/null", O_RDWR); 1059bac3299720623f4226bca103b26260052732ad30Tom Cherry dup2(fd, 0); 1060bac3299720623f4226bca103b26260052732ad30Tom Cherry dup2(fd, 1); 1061bac3299720623f4226bca103b26260052732ad30Tom Cherry dup2(fd, 2); 1062bac3299720623f4226bca103b26260052732ad30Tom Cherry close(fd); 1063bac3299720623f4226bca103b26260052732ad30Tom Cherry} 1064bac3299720623f4226bca103b26260052732ad30Tom Cherry 1065bac3299720623f4226bca103b26260052732ad30Tom Cherryvoid Service::OpenConsole() const { 106670daa67062c016eea1a30be2e1de0dcba1d23a13Viorel Suman int fd = open(console_.c_str(), O_RDWR); 106770daa67062c016eea1a30be2e1de0dcba1d23a13Viorel Suman if (fd == -1) fd = open("/dev/null", O_RDWR); 1068bac3299720623f4226bca103b26260052732ad30Tom Cherry ioctl(fd, TIOCSCTTY, 0); 1069bac3299720623f4226bca103b26260052732ad30Tom Cherry dup2(fd, 0); 1070bac3299720623f4226bca103b26260052732ad30Tom Cherry dup2(fd, 1); 1071bac3299720623f4226bca103b26260052732ad30Tom Cherry dup2(fd, 2); 1072bac3299720623f4226bca103b26260052732ad30Tom Cherry close(fd); 1073bac3299720623f4226bca103b26260052732ad30Tom Cherry} 1074bac3299720623f4226bca103b26260052732ad30Tom Cherry 1075911b9b1d6ead5f2e4c4158af0cd8787f4d458ddfTom CherryServiceList::ServiceList() {} 1076bac3299720623f4226bca103b26260052732ad30Tom Cherry 1077911b9b1d6ead5f2e4c4158af0cd8787f4d458ddfTom CherryServiceList& ServiceList::GetInstance() { 1078911b9b1d6ead5f2e4c4158af0cd8787f4d458ddfTom Cherry static ServiceList instance; 1079bac3299720623f4226bca103b26260052732ad30Tom Cherry return instance; 1080bac3299720623f4226bca103b26260052732ad30Tom Cherry} 1081bac3299720623f4226bca103b26260052732ad30Tom Cherry 1082911b9b1d6ead5f2e4c4158af0cd8787f4d458ddfTom Cherryvoid ServiceList::AddService(std::unique_ptr<Service> service) { 1083b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry services_.emplace_back(std::move(service)); 1084bac3299720623f4226bca103b26260052732ad30Tom Cherry} 1085bac3299720623f4226bca103b26260052732ad30Tom Cherry 10863b81f2d623c6cba45ad07fa91338d346d9b96482Tom Cherrystd::unique_ptr<Service> Service::MakeTemporaryOneshotService(const std::vector<std::string>& args) { 1087bac3299720623f4226bca103b26260052732ad30Tom Cherry // Parse the arguments: exec [SECLABEL [UID [GID]*] --] COMMAND ARGS... 1088bac3299720623f4226bca103b26260052732ad30Tom Cherry // SECLABEL can be a - to denote default 1089bac3299720623f4226bca103b26260052732ad30Tom Cherry std::size_t command_arg = 1; 1090bac3299720623f4226bca103b26260052732ad30Tom Cherry for (std::size_t i = 1; i < args.size(); ++i) { 1091bac3299720623f4226bca103b26260052732ad30Tom Cherry if (args[i] == "--") { 1092bac3299720623f4226bca103b26260052732ad30Tom Cherry command_arg = i + 1; 1093bac3299720623f4226bca103b26260052732ad30Tom Cherry break; 1094bac3299720623f4226bca103b26260052732ad30Tom Cherry } 1095bac3299720623f4226bca103b26260052732ad30Tom Cherry } 1096bac3299720623f4226bca103b26260052732ad30Tom Cherry if (command_arg > 4 + NR_SVC_SUPP_GIDS) { 1097f86b5a6b90619e02d1d034ef7b0adc3b439f4abbElliott Hughes LOG(ERROR) << "exec called with too many supplementary group ids"; 1098bac3299720623f4226bca103b26260052732ad30Tom Cherry return nullptr; 1099bac3299720623f4226bca103b26260052732ad30Tom Cherry } 1100bac3299720623f4226bca103b26260052732ad30Tom Cherry 1101bac3299720623f4226bca103b26260052732ad30Tom Cherry if (command_arg >= args.size()) { 1102f86b5a6b90619e02d1d034ef7b0adc3b439f4abbElliott Hughes LOG(ERROR) << "exec called without command"; 1103bac3299720623f4226bca103b26260052732ad30Tom Cherry return nullptr; 1104bac3299720623f4226bca103b26260052732ad30Tom Cherry } 1105bac3299720623f4226bca103b26260052732ad30Tom Cherry std::vector<std::string> str_args(args.begin() + command_arg, args.end()); 1106bac3299720623f4226bca103b26260052732ad30Tom Cherry 11073b81f2d623c6cba45ad07fa91338d346d9b96482Tom Cherry static size_t exec_count = 0; 11083b81f2d623c6cba45ad07fa91338d346d9b96482Tom Cherry exec_count++; 11093b81f2d623c6cba45ad07fa91338d346d9b96482Tom Cherry std::string name = "exec " + std::to_string(exec_count) + " (" + Join(str_args, " ") + ")"; 111086e31a81238fb30d113947e7689a38daf49097f3Tom Cherry 11113b81f2d623c6cba45ad07fa91338d346d9b96482Tom Cherry unsigned flags = SVC_ONESHOT | SVC_TEMPORARY; 111224b29132a017f7fbfd009c3e6aec499d1b815dbfJorge Lucangeli Obes CapSet no_capabilities; 11131b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes unsigned namespace_flags = 0; 1114bac3299720623f4226bca103b26260052732ad30Tom Cherry 1115bac3299720623f4226bca103b26260052732ad30Tom Cherry std::string seclabel = ""; 1116bac3299720623f4226bca103b26260052732ad30Tom Cherry if (command_arg > 2 && args[1] != "-") { 1117bac3299720623f4226bca103b26260052732ad30Tom Cherry seclabel = args[1]; 1118bac3299720623f4226bca103b26260052732ad30Tom Cherry } 111911a3aeeae3dc887b889d4086d4d26d95c324c08dTom Cherry Result<uid_t> uid = 0; 1120bac3299720623f4226bca103b26260052732ad30Tom Cherry if (command_arg > 3) { 112111a3aeeae3dc887b889d4086d4d26d95c324c08dTom Cherry uid = DecodeUid(args[2]); 112211a3aeeae3dc887b889d4086d4d26d95c324c08dTom Cherry if (!uid) { 112311a3aeeae3dc887b889d4086d4d26d95c324c08dTom Cherry LOG(ERROR) << "Unable to decode UID for '" << args[2] << "': " << uid.error(); 1124517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry return nullptr; 1125517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry } 1126bac3299720623f4226bca103b26260052732ad30Tom Cherry } 112711a3aeeae3dc887b889d4086d4d26d95c324c08dTom Cherry Result<gid_t> gid = 0; 1128bac3299720623f4226bca103b26260052732ad30Tom Cherry std::vector<gid_t> supp_gids; 1129bac3299720623f4226bca103b26260052732ad30Tom Cherry if (command_arg > 4) { 113011a3aeeae3dc887b889d4086d4d26d95c324c08dTom Cherry gid = DecodeUid(args[3]); 113111a3aeeae3dc887b889d4086d4d26d95c324c08dTom Cherry if (!gid) { 113211a3aeeae3dc887b889d4086d4d26d95c324c08dTom Cherry LOG(ERROR) << "Unable to decode GID for '" << args[3] << "': " << gid.error(); 1133517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry return nullptr; 1134517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry } 1135bac3299720623f4226bca103b26260052732ad30Tom Cherry std::size_t nr_supp_gids = command_arg - 1 /* -- */ - 4 /* exec SECLABEL UID GID */; 1136bac3299720623f4226bca103b26260052732ad30Tom Cherry for (size_t i = 0; i < nr_supp_gids; ++i) { 113711a3aeeae3dc887b889d4086d4d26d95c324c08dTom Cherry auto supp_gid = DecodeUid(args[4 + i]); 113811a3aeeae3dc887b889d4086d4d26d95c324c08dTom Cherry if (!supp_gid) { 113911a3aeeae3dc887b889d4086d4d26d95c324c08dTom Cherry LOG(ERROR) << "Unable to decode GID for '" << args[4 + i] 114011a3aeeae3dc887b889d4086d4d26d95c324c08dTom Cherry << "': " << supp_gid.error(); 1141517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry return nullptr; 1142517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry } 114311a3aeeae3dc887b889d4086d4d26d95c324c08dTom Cherry supp_gids.push_back(*supp_gid); 1144bac3299720623f4226bca103b26260052732ad30Tom Cherry } 1145bac3299720623f4226bca103b26260052732ad30Tom Cherry } 1146bac3299720623f4226bca103b26260052732ad30Tom Cherry 114711a3aeeae3dc887b889d4086d4d26d95c324c08dTom Cherry return std::make_unique<Service>(name, flags, *uid, *gid, supp_gids, no_capabilities, 1148cb0f9bbc855097e0c8248643015b837255fd569aTom Cherry namespace_flags, seclabel, nullptr, str_args); 1149bac3299720623f4226bca103b26260052732ad30Tom Cherry} 1150bac3299720623f4226bca103b26260052732ad30Tom Cherry 11515938379e910c4cbd7ed2429901bb3c45e62405d4Tom Cherry// Shutdown services in the opposite order that they were started. 1152911b9b1d6ead5f2e4c4158af0cd8787f4d458ddfTom Cherryconst std::vector<Service*> ServiceList::services_in_shutdown_order() const { 11535938379e910c4cbd7ed2429901bb3c45e62405d4Tom Cherry std::vector<Service*> shutdown_services; 11545938379e910c4cbd7ed2429901bb3c45e62405d4Tom Cherry for (const auto& service : services_) { 11555938379e910c4cbd7ed2429901bb3c45e62405d4Tom Cherry if (service->start_order() > 0) shutdown_services.emplace_back(service.get()); 11565938379e910c4cbd7ed2429901bb3c45e62405d4Tom Cherry } 11575938379e910c4cbd7ed2429901bb3c45e62405d4Tom Cherry std::sort(shutdown_services.begin(), shutdown_services.end(), 11585938379e910c4cbd7ed2429901bb3c45e62405d4Tom Cherry [](const auto& a, const auto& b) { return a->start_order() > b->start_order(); }); 1159911b9b1d6ead5f2e4c4158af0cd8787f4d458ddfTom Cherry return shutdown_services; 1160bac3299720623f4226bca103b26260052732ad30Tom Cherry} 1161bac3299720623f4226bca103b26260052732ad30Tom Cherry 1162911b9b1d6ead5f2e4c4158af0cd8787f4d458ddfTom Cherryvoid ServiceList::RemoveService(const Service& svc) { 1163bac3299720623f4226bca103b26260052732ad30Tom Cherry auto svc_it = std::find_if(services_.begin(), services_.end(), 1164bac3299720623f4226bca103b26260052732ad30Tom Cherry [&svc] (const std::unique_ptr<Service>& s) { 1165bac3299720623f4226bca103b26260052732ad30Tom Cherry return svc.name() == s->name(); 1166bac3299720623f4226bca103b26260052732ad30Tom Cherry }); 1167bac3299720623f4226bca103b26260052732ad30Tom Cherry if (svc_it == services_.end()) { 1168bac3299720623f4226bca103b26260052732ad30Tom Cherry return; 1169bac3299720623f4226bca103b26260052732ad30Tom Cherry } 1170bac3299720623f4226bca103b26260052732ad30Tom Cherry 1171bac3299720623f4226bca103b26260052732ad30Tom Cherry services_.erase(svc_it); 1172bac3299720623f4226bca103b26260052732ad30Tom Cherry} 1173bac3299720623f4226bca103b26260052732ad30Tom Cherry 1174911b9b1d6ead5f2e4c4158af0cd8787f4d458ddfTom Cherryvoid ServiceList::DumpState() const { 1175b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry for (const auto& s : services_) { 1176b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry s->DumpState(); 1177b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry } 1178b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry} 1179b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry 118089bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom CherryResult<Success> ServiceParser::ParseSection(std::vector<std::string>&& args, 118189bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry const std::string& filename, int line) { 1182b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry if (args.size() < 3) { 118389bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Error() << "services must have a name and a program"; 1184b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry } 1185b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry 1186b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry const std::string& name = args[1]; 1187b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry if (!IsValidName(name)) { 118889bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Error() << "invalid service name '" << name << "'"; 1189b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry } 1190b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry 1191cb0f9bbc855097e0c8248643015b837255fd569aTom Cherry Subcontext* restart_action_subcontext = nullptr; 1192cb0f9bbc855097e0c8248643015b837255fd569aTom Cherry if (subcontexts_) { 1193cb0f9bbc855097e0c8248643015b837255fd569aTom Cherry for (auto& subcontext : *subcontexts_) { 1194579e682628805dd9c3f8c96765c0beb3f56f1494Elliott Hughes if (StartsWith(filename, subcontext.path_prefix())) { 1195cb0f9bbc855097e0c8248643015b837255fd569aTom Cherry restart_action_subcontext = &subcontext; 1196cb0f9bbc855097e0c8248643015b837255fd569aTom Cherry break; 1197cb0f9bbc855097e0c8248643015b837255fd569aTom Cherry } 1198cb0f9bbc855097e0c8248643015b837255fd569aTom Cherry } 1199cb0f9bbc855097e0c8248643015b837255fd569aTom Cherry } 1200cb0f9bbc855097e0c8248643015b837255fd569aTom Cherry 1201b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry std::vector<std::string> str_args(args.begin() + 2, args.end()); 1202cb0f9bbc855097e0c8248643015b837255fd569aTom Cherry service_ = std::make_unique<Service>(name, restart_action_subcontext, str_args); 120389bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Success(); 1204b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry} 1205b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry 120689bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom CherryResult<Success> ServiceParser::ParseLineSection(std::vector<std::string>&& args, int line) { 120789bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return service_ ? service_->ParseLine(std::move(args)) : Success(); 1208b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry} 1209b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry 12107d0a5c3656ee56eb81e442b58063d500b4f506e0Steven MorelandResult<Success> ServiceParser::EndSection() { 1211b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry if (service_) { 12125e1bea30b924661878c6fac4ec14b18e5ba17773Steven Moreland Service* old_service = service_list_->FindService(service_->name()); 12135e1bea30b924661878c6fac4ec14b18e5ba17773Steven Moreland if (old_service) { 12146f5333a4a94becb7ef74a5b54d0c28a3738881fdSteven Moreland if (!service_->is_override()) { 12156f5333a4a94becb7ef74a5b54d0c28a3738881fdSteven Moreland return Error() << "ignored duplicate definition of service '" << service_->name() 12166f5333a4a94becb7ef74a5b54d0c28a3738881fdSteven Moreland << "'"; 12176f5333a4a94becb7ef74a5b54d0c28a3738881fdSteven Moreland } 12186f5333a4a94becb7ef74a5b54d0c28a3738881fdSteven Moreland 12196f5333a4a94becb7ef74a5b54d0c28a3738881fdSteven Moreland service_list_->RemoveService(*old_service); 12206f5333a4a94becb7ef74a5b54d0c28a3738881fdSteven Moreland old_service = nullptr; 12215e1bea30b924661878c6fac4ec14b18e5ba17773Steven Moreland } 12225e1bea30b924661878c6fac4ec14b18e5ba17773Steven Moreland 1223911b9b1d6ead5f2e4c4158af0cd8787f4d458ddfTom Cherry service_list_->AddService(std::move(service_)); 1224b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry } 12257d0a5c3656ee56eb81e442b58063d500b4f506e0Steven Moreland 12267d0a5c3656ee56eb81e442b58063d500b4f506e0Steven Moreland return Success(); 1227b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry} 1228b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry 1229b7349902a945903f9e36a569051f5131beb0bc24Tom Cherrybool ServiceParser::IsValidName(const std::string& name) const { 1230b7788fd454da2201c6e48dededa9b11873ef621eElliott Hughes // Property names can be any length, but may only contain certain characters. 1231b7788fd454da2201c6e48dededa9b11873ef621eElliott Hughes // Property values can contain any characters, but may only be a certain length. 1232b7788fd454da2201c6e48dededa9b11873ef621eElliott Hughes // (The latter restriction is needed because `start` and `stop` work by writing 1233b7788fd454da2201c6e48dededa9b11873ef621eElliott Hughes // the service name to the "ctl.start" and "ctl.stop" properties.) 1234de6bd50d4238d19ec401127bcf2321dc679d908dTom Cherry return IsLegalPropertyName("init.svc." + name) && name.size() <= PROP_VALUE_MAX; 1235bac3299720623f4226bca103b26260052732ad30Tom Cherry} 123681f5d3ebef2c3789737bf718fc2a2cdd7b9e8b33Tom Cherry 123781f5d3ebef2c3789737bf718fc2a2cdd7b9e8b33Tom Cherry} // namespace init 123881f5d3ebef2c3789737bf718fc2a2cdd7b9e8b33Tom Cherry} // namespace android 1239