service.cpp revision 5938379e910c4cbd7ed2429901bb3c45e62405d4
1bac3299720623f4226bca103b26260052732ad30Tom Cherry/* 2bac3299720623f4226bca103b26260052732ad30Tom Cherry * Copyright (C) 2015 The Android Open Source Project 3bac3299720623f4226bca103b26260052732ad30Tom Cherry * 4bac3299720623f4226bca103b26260052732ad30Tom Cherry * Licensed under the Apache License, Version 2.0 (the "License"); 5bac3299720623f4226bca103b26260052732ad30Tom Cherry * you may not use this file except in compliance with the License. 6bac3299720623f4226bca103b26260052732ad30Tom Cherry * You may obtain a copy of the License at 7bac3299720623f4226bca103b26260052732ad30Tom Cherry * 8bac3299720623f4226bca103b26260052732ad30Tom Cherry * http://www.apache.org/licenses/LICENSE-2.0 9bac3299720623f4226bca103b26260052732ad30Tom Cherry * 10bac3299720623f4226bca103b26260052732ad30Tom Cherry * Unless required by applicable law or agreed to in writing, software 11bac3299720623f4226bca103b26260052732ad30Tom Cherry * distributed under the License is distributed on an "AS IS" BASIS, 12bac3299720623f4226bca103b26260052732ad30Tom Cherry * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 13bac3299720623f4226bca103b26260052732ad30Tom Cherry * See the License for the specific language governing permissions and 14bac3299720623f4226bca103b26260052732ad30Tom Cherry * limitations under the License. 15bac3299720623f4226bca103b26260052732ad30Tom Cherry */ 16bac3299720623f4226bca103b26260052732ad30Tom Cherry 17bac3299720623f4226bca103b26260052732ad30Tom Cherry#include "service.h" 18bac3299720623f4226bca103b26260052732ad30Tom Cherry 19bac3299720623f4226bca103b26260052732ad30Tom Cherry#include <fcntl.h> 209605a945f7a497c0307b512b9cd762f2d23973caElliott Hughes#include <inttypes.h> 2124b29132a017f7fbfd009c3e6aec499d1b815dbfJorge Lucangeli Obes#include <linux/securebits.h> 221b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes#include <sched.h> 231b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes#include <sys/mount.h> 241b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes#include <sys/prctl.h> 25081705c258efbe938d71c2022528d809fa6d42c5Vitalii Tomkiv#include <sys/resource.h> 26bac3299720623f4226bca103b26260052732ad30Tom Cherry#include <sys/stat.h> 27f57c0bfab20b4fae10fc2e385d5e32fc93895670Tom Cherry#include <sys/system_properties.h> 28081705c258efbe938d71c2022528d809fa6d42c5Vitalii Tomkiv#include <sys/time.h> 29b7e03e82b89a30b09fea88eaf2a5638df1017cf6Bertrand SIMONNET#include <sys/wait.h> 30bac3299720623f4226bca103b26260052732ad30Tom Cherry#include <termios.h> 31af9ba4dc6ca98e136e887b0baa59b72fb8302dd3Dan Albert#include <unistd.h> 32bac3299720623f4226bca103b26260052732ad30Tom Cherry 334f71319df011d796a60a43fc1bc68e16fbf7d321Elliott Hughes#include <android-base/file.h> 343f5eaae526413a29de899270714469c76dc91ec8Tom Cherry#include <android-base/logging.h> 35da46b392f10d2809b5696632f67485f272ec5698Elliott Hughes#include <android-base/parseint.h> 36ccf23537eeacfa47e5f18dd3b75089886d177c1bTom Cherry#include <android-base/properties.h> 378d13d808a5634701c55276796683857ac2d5c99aTom Cherry#include <android-base/scopeguard.h> 384f71319df011d796a60a43fc1bc68e16fbf7d321Elliott Hughes#include <android-base/stringprintf.h> 39f86b5a6b90619e02d1d034ef7b0adc3b439f4abbElliott Hughes#include <android-base/strings.h> 40f7e79b99c1e9e3128dd9921871f7740bebb755e6Collin Mulliner#include <processgroup/processgroup.h> 413f5eaae526413a29de899270714469c76dc91ec8Tom Cherry#include <selinux/selinux.h> 423f5eaae526413a29de899270714469c76dc91ec8Tom Cherry#include <system/thread_defs.h> 43f7e79b99c1e9e3128dd9921871f7740bebb755e6Collin Mulliner 44bac3299720623f4226bca103b26260052732ad30Tom Cherry#include "init.h" 45bac3299720623f4226bca103b26260052732ad30Tom Cherry#include "property_service.h" 46bac3299720623f4226bca103b26260052732ad30Tom Cherry#include "util.h" 47bac3299720623f4226bca103b26260052732ad30Tom Cherry 48e78ea77f6992013b16fd57c07548b53129cdd12fJames Hawkinsusing android::base::boot_clock; 4981f5d3ebef2c3789737bf718fc2a2cdd7b9e8b33Tom Cherryusing android::base::GetProperty; 5081f5d3ebef2c3789737bf718fc2a2cdd7b9e8b33Tom Cherryusing android::base::Join; 518d13d808a5634701c55276796683857ac2d5c99aTom Cherryusing android::base::make_scope_guard; 52da46b392f10d2809b5696632f67485f272ec5698Elliott Hughesusing android::base::ParseInt; 5381f5d3ebef2c3789737bf718fc2a2cdd7b9e8b33Tom Cherryusing android::base::StartsWith; 54b7349902a945903f9e36a569051f5131beb0bc24Tom Cherryusing android::base::StringPrintf; 55b7349902a945903f9e36a569051f5131beb0bc24Tom Cherryusing android::base::WriteStringToFile; 56b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry 5781f5d3ebef2c3789737bf718fc2a2cdd7b9e8b33Tom Cherrynamespace android { 5881f5d3ebef2c3789737bf718fc2a2cdd7b9e8b33Tom Cherrynamespace init { 5981f5d3ebef2c3789737bf718fc2a2cdd7b9e8b33Tom Cherry 60344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obesstatic std::string ComputeContextFromExecutable(std::string& service_name, 61344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes const std::string& service_path) { 62344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes std::string computed_context; 63344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes 64344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes char* raw_con = nullptr; 65344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes char* raw_filecon = nullptr; 66344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes 67344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes if (getcon(&raw_con) == -1) { 68344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes LOG(ERROR) << "could not get context while starting '" << service_name << "'"; 69344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes return ""; 70344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes } 71344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes std::unique_ptr<char> mycon(raw_con); 72344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes 73344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes if (getfilecon(service_path.c_str(), &raw_filecon) == -1) { 74344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes LOG(ERROR) << "could not get file context while starting '" << service_name << "'"; 75344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes return ""; 76344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes } 77344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes std::unique_ptr<char> filecon(raw_filecon); 78344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes 79344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes char* new_con = nullptr; 80344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes int rc = security_compute_create(mycon.get(), filecon.get(), 81344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes string_to_security_class("process"), &new_con); 82344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes if (rc == 0) { 83344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes computed_context = new_con; 84344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes free(new_con); 85344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes } 86344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes if (rc == 0 && computed_context == mycon.get()) { 87344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes LOG(ERROR) << "service " << service_name << " does not have a SELinux domain defined"; 88344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes return ""; 89344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes } 90344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes if (rc < 0) { 91344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes LOG(ERROR) << "could not get context while starting '" << service_name << "'"; 92344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes return ""; 93344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes } 94344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes return computed_context; 95344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes} 96344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes 971b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obesstatic void SetUpPidNamespace(const std::string& service_name) { 981b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes constexpr unsigned int kSafeFlags = MS_NODEV | MS_NOEXEC | MS_NOSUID; 991b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes 1001b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes // It's OK to LOG(FATAL) in this function since it's running in the first 1011b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes // child process. 1021b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes if (mount("", "/proc", "proc", kSafeFlags | MS_REMOUNT, "") == -1) { 103e18e7e5c43c39677c6d49f8f76893d720f90b4fbElliott Hughes PLOG(FATAL) << "couldn't remount(/proc) for " << service_name; 1041b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes } 1051b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes 1061b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes if (prctl(PR_SET_NAME, service_name.c_str()) == -1) { 107e18e7e5c43c39677c6d49f8f76893d720f90b4fbElliott Hughes PLOG(FATAL) << "couldn't set name for " << service_name; 1081b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes } 1091b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes 1101b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes pid_t child_pid = fork(); 1111b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes if (child_pid == -1) { 112e18e7e5c43c39677c6d49f8f76893d720f90b4fbElliott Hughes PLOG(FATAL) << "couldn't fork init inside the PID namespace for " << service_name; 1131b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes } 1141b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes 1151b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes if (child_pid > 0) { 1161b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes // So that we exit with the right status. 1171b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes static int init_exitstatus = 0; 1181b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes signal(SIGTERM, [](int) { _exit(init_exitstatus); }); 1191b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes 1201b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes pid_t waited_pid; 1211b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes int status; 1221b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes while ((waited_pid = wait(&status)) > 0) { 1231b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes // This loop will end when there are no processes left inside the 1241b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes // PID namespace or when the init process inside the PID namespace 1251b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes // gets a signal. 1261b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes if (waited_pid == child_pid) { 1271b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes init_exitstatus = status; 1281b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes } 1291b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes } 1301b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes if (!WIFEXITED(init_exitstatus)) { 1311b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes _exit(EXIT_FAILURE); 1321b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes } 1331b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes _exit(WEXITSTATUS(init_exitstatus)); 1341b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes } 1351b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes} 1361b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes 137344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obesstatic void ExpandArgs(const std::vector<std::string>& args, std::vector<char*>* strs) { 138344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes std::vector<std::string> expanded_args; 139344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes expanded_args.resize(args.size()); 140344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes strs->push_back(const_cast<char*>(args[0].c_str())); 141344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes for (std::size_t i = 1; i < args.size(); ++i) { 142344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes if (!expand_props(args[i], &expanded_args[i])) { 143344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes LOG(FATAL) << args[0] << ": cannot expand '" << args[i] << "'"; 144344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes } 145344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes strs->push_back(const_cast<char*>(expanded_args[i].c_str())); 146344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes } 147344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes strs->push_back(nullptr); 148344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes} 149344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes 150bac3299720623f4226bca103b26260052732ad30Tom CherryServiceEnvironmentInfo::ServiceEnvironmentInfo() { 151bac3299720623f4226bca103b26260052732ad30Tom Cherry} 152bac3299720623f4226bca103b26260052732ad30Tom Cherry 153bac3299720623f4226bca103b26260052732ad30Tom CherryServiceEnvironmentInfo::ServiceEnvironmentInfo(const std::string& name, 154bac3299720623f4226bca103b26260052732ad30Tom Cherry const std::string& value) 155bac3299720623f4226bca103b26260052732ad30Tom Cherry : name(name), value(value) { 156bac3299720623f4226bca103b26260052732ad30Tom Cherry} 157bac3299720623f4226bca103b26260052732ad30Tom Cherry 1585938379e910c4cbd7ed2429901bb3c45e62405d4Tom Cherryunsigned long Service::next_start_order_ = 1; 1595938379e910c4cbd7ed2429901bb3c45e62405d4Tom Cherry 160641ff0a4d8d05349d9c22f726a035a2936a2a94dWei WangService::Service(const std::string& name, const std::vector<std::string>& args) 1615d17d044c757d2419194f057bd3191f145da4aa5Tom Cherry : Service(name, 0, 0, 0, {}, 0, 0, "", args) {} 162bac3299720623f4226bca103b26260052732ad30Tom Cherry 163641ff0a4d8d05349d9c22f726a035a2936a2a94dWei WangService::Service(const std::string& name, unsigned flags, uid_t uid, gid_t gid, 164641ff0a4d8d05349d9c22f726a035a2936a2a94dWei Wang const std::vector<gid_t>& supp_gids, const CapSet& capabilities, 165641ff0a4d8d05349d9c22f726a035a2936a2a94dWei Wang unsigned namespace_flags, const std::string& seclabel, 1661b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes const std::vector<std::string>& args) 167641ff0a4d8d05349d9c22f726a035a2936a2a94dWei Wang : name_(name), 168641ff0a4d8d05349d9c22f726a035a2936a2a94dWei Wang classnames_({"default"}), 169641ff0a4d8d05349d9c22f726a035a2936a2a94dWei Wang flags_(flags), 170641ff0a4d8d05349d9c22f726a035a2936a2a94dWei Wang pid_(0), 171641ff0a4d8d05349d9c22f726a035a2936a2a94dWei Wang crash_count_(0), 172641ff0a4d8d05349d9c22f726a035a2936a2a94dWei Wang uid_(uid), 173641ff0a4d8d05349d9c22f726a035a2936a2a94dWei Wang gid_(gid), 174641ff0a4d8d05349d9c22f726a035a2936a2a94dWei Wang supp_gids_(supp_gids), 175641ff0a4d8d05349d9c22f726a035a2936a2a94dWei Wang capabilities_(capabilities), 176641ff0a4d8d05349d9c22f726a035a2936a2a94dWei Wang namespace_flags_(namespace_flags), 177641ff0a4d8d05349d9c22f726a035a2936a2a94dWei Wang seclabel_(seclabel), 178012c573e267b8dd70de14237cb470bd7301ee8eaTom Cherry onrestart_(false, "<Service '" + name + "' onrestart>", 0), 1797da548578c25683fe0082283303e16961df312daTom Cherry keychord_id_(0), 180641ff0a4d8d05349d9c22f726a035a2936a2a94dWei Wang ioprio_class_(IoSchedClass_NONE), 181641ff0a4d8d05349d9c22f726a035a2936a2a94dWei Wang ioprio_pri_(0), 182641ff0a4d8d05349d9c22f726a035a2936a2a94dWei Wang priority_(0), 183641ff0a4d8d05349d9c22f726a035a2936a2a94dWei Wang oom_score_adjust_(-1000), 184d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea swappiness_(-1), 185d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea soft_limit_in_bytes_(-1), 186d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea limit_in_bytes_(-1), 1875938379e910c4cbd7ed2429901bb3c45e62405d4Tom Cherry start_order_(0), 188641ff0a4d8d05349d9c22f726a035a2936a2a94dWei Wang args_(args) { 189bac3299720623f4226bca103b26260052732ad30Tom Cherry onrestart_.InitSingleTrigger("onrestart"); 190bac3299720623f4226bca103b26260052732ad30Tom Cherry} 191bac3299720623f4226bca103b26260052732ad30Tom Cherry 192bac3299720623f4226bca103b26260052732ad30Tom Cherryvoid Service::NotifyStateChange(const std::string& new_state) const { 193b27004aa05039b5196f1e878169dca41b68aadd6Tom Cherry if ((flags_ & SVC_TEMPORARY) != 0) { 194b27004aa05039b5196f1e878169dca41b68aadd6Tom Cherry // Services created by 'exec' are temporary and don't have properties tracking their state. 195bac3299720623f4226bca103b26260052732ad30Tom Cherry return; 196bac3299720623f4226bca103b26260052732ad30Tom Cherry } 197bac3299720623f4226bca103b26260052732ad30Tom Cherry 1981c3a53f03ca3c2c647f83cd8b8ae7e18c5c7bc69Tom Cherry std::string prop_name = "init.svc." + name_; 1991c3a53f03ca3c2c647f83cd8b8ae7e18c5c7bc69Tom Cherry property_set(prop_name, new_state); 2009605a945f7a497c0307b512b9cd762f2d23973caElliott Hughes 2019605a945f7a497c0307b512b9cd762f2d23973caElliott Hughes if (new_state == "running") { 2029605a945f7a497c0307b512b9cd762f2d23973caElliott Hughes uint64_t start_ns = time_started_.time_since_epoch().count(); 2031c3a53f03ca3c2c647f83cd8b8ae7e18c5c7bc69Tom Cherry property_set("ro.boottime." + name_, std::to_string(start_ns)); 2049605a945f7a497c0307b512b9cd762f2d23973caElliott Hughes } 205bac3299720623f4226bca103b26260052732ad30Tom Cherry} 206bac3299720623f4226bca103b26260052732ad30Tom Cherry 207ad8e94e017173471e90c704eb7d8de5a14712aa7Elliott Hughesvoid Service::KillProcessGroup(int signal) { 20833838b1156cd1a5f8eec94756bee9e030a3dd2ebTom Cherry // If we've already seen a successful result from killProcessGroup*(), then we have removed 20933838b1156cd1a5f8eec94756bee9e030a3dd2ebTom Cherry // the cgroup already and calling these functions a second time will simply result in an error. 21033838b1156cd1a5f8eec94756bee9e030a3dd2ebTom Cherry // This is true regardless of which signal was sent. 21133838b1156cd1a5f8eec94756bee9e030a3dd2ebTom Cherry // These functions handle their own logging, so no additional logging is needed. 21233838b1156cd1a5f8eec94756bee9e030a3dd2ebTom Cherry if (!process_cgroup_empty_) { 21333838b1156cd1a5f8eec94756bee9e030a3dd2ebTom Cherry LOG(INFO) << "Sending signal " << signal << " to service '" << name_ << "' (pid " << pid_ 21433838b1156cd1a5f8eec94756bee9e030a3dd2ebTom Cherry << ") process group..."; 21533838b1156cd1a5f8eec94756bee9e030a3dd2ebTom Cherry int r; 21633838b1156cd1a5f8eec94756bee9e030a3dd2ebTom Cherry if (signal == SIGTERM) { 21733838b1156cd1a5f8eec94756bee9e030a3dd2ebTom Cherry r = killProcessGroupOnce(uid_, pid_, signal); 21833838b1156cd1a5f8eec94756bee9e030a3dd2ebTom Cherry } else { 21933838b1156cd1a5f8eec94756bee9e030a3dd2ebTom Cherry r = killProcessGroup(uid_, pid_, signal); 22033838b1156cd1a5f8eec94756bee9e030a3dd2ebTom Cherry } 22133838b1156cd1a5f8eec94756bee9e030a3dd2ebTom Cherry 22233838b1156cd1a5f8eec94756bee9e030a3dd2ebTom Cherry if (r == 0) process_cgroup_empty_ = true; 22333838b1156cd1a5f8eec94756bee9e030a3dd2ebTom Cherry } 224ad8e94e017173471e90c704eb7d8de5a14712aa7Elliott Hughes} 225ad8e94e017173471e90c704eb7d8de5a14712aa7Elliott Hughes 226344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obesvoid Service::SetProcessAttributes() { 22724b29132a017f7fbfd009c3e6aec499d1b815dbfJorge Lucangeli Obes // Keep capabilites on uid change. 22824b29132a017f7fbfd009c3e6aec499d1b815dbfJorge Lucangeli Obes if (capabilities_.any() && uid_) { 229f5965519d183ff188273689d151bfc2cb20ece2aLuis Hector Chavez // If Android is running in a container, some securebits might already 230f5965519d183ff188273689d151bfc2cb20ece2aLuis Hector Chavez // be locked, so don't change those. 231f5965519d183ff188273689d151bfc2cb20ece2aLuis Hector Chavez int64_t securebits = prctl(PR_GET_SECUREBITS); 232f5965519d183ff188273689d151bfc2cb20ece2aLuis Hector Chavez if (securebits == -1) { 233f5965519d183ff188273689d151bfc2cb20ece2aLuis Hector Chavez PLOG(FATAL) << "prctl(PR_GET_SECUREBITS) failed for " << name_; 234f5965519d183ff188273689d151bfc2cb20ece2aLuis Hector Chavez } 235f5965519d183ff188273689d151bfc2cb20ece2aLuis Hector Chavez securebits |= SECBIT_KEEP_CAPS | SECBIT_KEEP_CAPS_LOCKED; 236f5965519d183ff188273689d151bfc2cb20ece2aLuis Hector Chavez if (prctl(PR_SET_SECUREBITS, securebits) != 0) { 237f5965519d183ff188273689d151bfc2cb20ece2aLuis Hector Chavez PLOG(FATAL) << "prctl(PR_SET_SECUREBITS) failed for " << name_; 23824b29132a017f7fbfd009c3e6aec499d1b815dbfJorge Lucangeli Obes } 23924b29132a017f7fbfd009c3e6aec499d1b815dbfJorge Lucangeli Obes } 24024b29132a017f7fbfd009c3e6aec499d1b815dbfJorge Lucangeli Obes 241e18e7e5c43c39677c6d49f8f76893d720f90b4fbElliott Hughes // TODO: work out why this fails for `console` then upgrade to FATAL. 242e18e7e5c43c39677c6d49f8f76893d720f90b4fbElliott Hughes if (setpgid(0, getpid()) == -1) PLOG(ERROR) << "setpgid failed for " << name_; 243344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes 244344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes if (gid_) { 245344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes if (setgid(gid_) != 0) { 246e18e7e5c43c39677c6d49f8f76893d720f90b4fbElliott Hughes PLOG(FATAL) << "setgid failed for " << name_; 247344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes } 248344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes } 24980960d2a9a6e15931d946cc826dcb3d5bf68ca4fNick Kralevich if (setgroups(supp_gids_.size(), &supp_gids_[0]) != 0) { 25080960d2a9a6e15931d946cc826dcb3d5bf68ca4fNick Kralevich PLOG(FATAL) << "setgroups failed for " << name_; 251344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes } 252344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes if (uid_) { 253344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes if (setuid(uid_) != 0) { 254e18e7e5c43c39677c6d49f8f76893d720f90b4fbElliott Hughes PLOG(FATAL) << "setuid failed for " << name_; 255344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes } 256344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes } 257344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes if (!seclabel_.empty()) { 258344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes if (setexeccon(seclabel_.c_str()) < 0) { 259e18e7e5c43c39677c6d49f8f76893d720f90b4fbElliott Hughes PLOG(FATAL) << "cannot setexeccon('" << seclabel_ << "') for " << name_; 260344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes } 261344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes } 262344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes if (priority_ != 0) { 263344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes if (setpriority(PRIO_PROCESS, 0, priority_) != 0) { 264e18e7e5c43c39677c6d49f8f76893d720f90b4fbElliott Hughes PLOG(FATAL) << "setpriority failed for " << name_; 265344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes } 266344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes } 26724b29132a017f7fbfd009c3e6aec499d1b815dbfJorge Lucangeli Obes if (capabilities_.any()) { 26824b29132a017f7fbfd009c3e6aec499d1b815dbfJorge Lucangeli Obes if (!SetCapsForExec(capabilities_)) { 26924b29132a017f7fbfd009c3e6aec499d1b815dbfJorge Lucangeli Obes LOG(FATAL) << "cannot set capabilities for " << name_; 27024b29132a017f7fbfd009c3e6aec499d1b815dbfJorge Lucangeli Obes } 27124b29132a017f7fbfd009c3e6aec499d1b815dbfJorge Lucangeli Obes } 272344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes} 273344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes 274b27004aa05039b5196f1e878169dca41b68aadd6Tom Cherryvoid Service::Reap() { 275bac3299720623f4226bca103b26260052732ad30Tom Cherry if (!(flags_ & SVC_ONESHOT) || (flags_ & SVC_RESTART)) { 276ad8e94e017173471e90c704eb7d8de5a14712aa7Elliott Hughes KillProcessGroup(SIGKILL); 277bac3299720623f4226bca103b26260052732ad30Tom Cherry } 278bac3299720623f4226bca103b26260052732ad30Tom Cherry 27962767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn // Remove any descriptor resources we may have created. 28062767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn std::for_each(descriptors_.begin(), descriptors_.end(), 28162767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn std::bind(&DescriptorInfo::Clean, std::placeholders::_1)); 282bac3299720623f4226bca103b26260052732ad30Tom Cherry 283b27004aa05039b5196f1e878169dca41b68aadd6Tom Cherry if (flags_ & SVC_TEMPORARY) { 284b27004aa05039b5196f1e878169dca41b68aadd6Tom Cherry return; 285bac3299720623f4226bca103b26260052732ad30Tom Cherry } 286bac3299720623f4226bca103b26260052732ad30Tom Cherry 287bac3299720623f4226bca103b26260052732ad30Tom Cherry pid_ = 0; 288bac3299720623f4226bca103b26260052732ad30Tom Cherry flags_ &= (~SVC_RUNNING); 2895938379e910c4cbd7ed2429901bb3c45e62405d4Tom Cherry start_order_ = 0; 290bac3299720623f4226bca103b26260052732ad30Tom Cherry 291bac3299720623f4226bca103b26260052732ad30Tom Cherry // Oneshot processes go into the disabled state on exit, 292bac3299720623f4226bca103b26260052732ad30Tom Cherry // except when manually restarted. 293bac3299720623f4226bca103b26260052732ad30Tom Cherry if ((flags_ & SVC_ONESHOT) && !(flags_ & SVC_RESTART)) { 294bac3299720623f4226bca103b26260052732ad30Tom Cherry flags_ |= SVC_DISABLED; 295bac3299720623f4226bca103b26260052732ad30Tom Cherry } 296bac3299720623f4226bca103b26260052732ad30Tom Cherry 297bac3299720623f4226bca103b26260052732ad30Tom Cherry // Disabled and reset processes do not get restarted automatically. 298bac3299720623f4226bca103b26260052732ad30Tom Cherry if (flags_ & (SVC_DISABLED | SVC_RESET)) { 299bac3299720623f4226bca103b26260052732ad30Tom Cherry NotifyStateChange("stopped"); 300b27004aa05039b5196f1e878169dca41b68aadd6Tom Cherry return; 301bac3299720623f4226bca103b26260052732ad30Tom Cherry } 302bac3299720623f4226bca103b26260052732ad30Tom Cherry 3039605a945f7a497c0307b512b9cd762f2d23973caElliott Hughes // If we crash > 4 times in 4 minutes, reboot into recovery. 3049605a945f7a497c0307b512b9cd762f2d23973caElliott Hughes boot_clock::time_point now = boot_clock::now(); 305bac3299720623f4226bca103b26260052732ad30Tom Cherry if ((flags_ & SVC_CRITICAL) && !(flags_ & SVC_RESTART)) { 3069605a945f7a497c0307b512b9cd762f2d23973caElliott Hughes if (now < time_crashed_ + 4min) { 3079605a945f7a497c0307b512b9cd762f2d23973caElliott Hughes if (++crash_count_ > 4) { 308331cf2fb7c16b5b25064f8d2f00284105a9b413fElliott Hughes LOG(ERROR) << "critical process '" << name_ << "' exited 4 times in 4 minutes"; 309331cf2fb7c16b5b25064f8d2f00284105a9b413fElliott Hughes panic(); 310bac3299720623f4226bca103b26260052732ad30Tom Cherry } 311bac3299720623f4226bca103b26260052732ad30Tom Cherry } else { 312bac3299720623f4226bca103b26260052732ad30Tom Cherry time_crashed_ = now; 3139605a945f7a497c0307b512b9cd762f2d23973caElliott Hughes crash_count_ = 1; 314bac3299720623f4226bca103b26260052732ad30Tom Cherry } 315bac3299720623f4226bca103b26260052732ad30Tom Cherry } 316bac3299720623f4226bca103b26260052732ad30Tom Cherry 317bac3299720623f4226bca103b26260052732ad30Tom Cherry flags_ &= (~SVC_RESTART); 318bac3299720623f4226bca103b26260052732ad30Tom Cherry flags_ |= SVC_RESTARTING; 319bac3299720623f4226bca103b26260052732ad30Tom Cherry 320bac3299720623f4226bca103b26260052732ad30Tom Cherry // Execute all onrestart commands for this service. 321bac3299720623f4226bca103b26260052732ad30Tom Cherry onrestart_.ExecuteAllCommands(); 322bac3299720623f4226bca103b26260052732ad30Tom Cherry 323bac3299720623f4226bca103b26260052732ad30Tom Cherry NotifyStateChange("restarting"); 324b27004aa05039b5196f1e878169dca41b68aadd6Tom Cherry return; 325bac3299720623f4226bca103b26260052732ad30Tom Cherry} 326bac3299720623f4226bca103b26260052732ad30Tom Cherry 327bac3299720623f4226bca103b26260052732ad30Tom Cherryvoid Service::DumpState() const { 328f86b5a6b90619e02d1d034ef7b0adc3b439f4abbElliott Hughes LOG(INFO) << "service " << name_; 32981f5d3ebef2c3789737bf718fc2a2cdd7b9e8b33Tom Cherry LOG(INFO) << " class '" << Join(classnames_, " ") << "'"; 33081f5d3ebef2c3789737bf718fc2a2cdd7b9e8b33Tom Cherry LOG(INFO) << " exec " << Join(args_, " "); 33162767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn std::for_each(descriptors_.begin(), descriptors_.end(), 33262767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn [] (const auto& info) { LOG(INFO) << *info; }); 333bac3299720623f4226bca103b26260052732ad30Tom Cherry} 334bac3299720623f4226bca103b26260052732ad30Tom Cherry 33524b29132a017f7fbfd009c3e6aec499d1b815dbfJorge Lucangeli Obesbool Service::ParseCapabilities(const std::vector<std::string>& args, std::string* err) { 33624b29132a017f7fbfd009c3e6aec499d1b815dbfJorge Lucangeli Obes capabilities_ = 0; 33724b29132a017f7fbfd009c3e6aec499d1b815dbfJorge Lucangeli Obes 338f3f824ee42892fb69cb0d9b0557cd9c5aed357d2Jorge Lucangeli Obes if (!CapAmbientSupported()) { 339f3f824ee42892fb69cb0d9b0557cd9c5aed357d2Jorge Lucangeli Obes *err = "capabilities requested but the kernel does not support ambient capabilities"; 340f3f824ee42892fb69cb0d9b0557cd9c5aed357d2Jorge Lucangeli Obes return false; 341f3f824ee42892fb69cb0d9b0557cd9c5aed357d2Jorge Lucangeli Obes } 342f3f824ee42892fb69cb0d9b0557cd9c5aed357d2Jorge Lucangeli Obes 343f3f824ee42892fb69cb0d9b0557cd9c5aed357d2Jorge Lucangeli Obes unsigned int last_valid_cap = GetLastValidCap(); 344f3f824ee42892fb69cb0d9b0557cd9c5aed357d2Jorge Lucangeli Obes if (last_valid_cap >= capabilities_.size()) { 345f3f824ee42892fb69cb0d9b0557cd9c5aed357d2Jorge Lucangeli Obes LOG(WARNING) << "last valid run-time capability is larger than CAP_LAST_CAP"; 346f3f824ee42892fb69cb0d9b0557cd9c5aed357d2Jorge Lucangeli Obes } 347f3f824ee42892fb69cb0d9b0557cd9c5aed357d2Jorge Lucangeli Obes 34824b29132a017f7fbfd009c3e6aec499d1b815dbfJorge Lucangeli Obes for (size_t i = 1; i < args.size(); i++) { 34924b29132a017f7fbfd009c3e6aec499d1b815dbfJorge Lucangeli Obes const std::string& arg = args[i]; 350f3f824ee42892fb69cb0d9b0557cd9c5aed357d2Jorge Lucangeli Obes int res = LookupCap(arg); 351f3f824ee42892fb69cb0d9b0557cd9c5aed357d2Jorge Lucangeli Obes if (res < 0) { 35224b29132a017f7fbfd009c3e6aec499d1b815dbfJorge Lucangeli Obes *err = StringPrintf("invalid capability '%s'", arg.c_str()); 35324b29132a017f7fbfd009c3e6aec499d1b815dbfJorge Lucangeli Obes return false; 35424b29132a017f7fbfd009c3e6aec499d1b815dbfJorge Lucangeli Obes } 355f3f824ee42892fb69cb0d9b0557cd9c5aed357d2Jorge Lucangeli Obes unsigned int cap = static_cast<unsigned int>(res); // |res| is >= 0. 356f3f824ee42892fb69cb0d9b0557cd9c5aed357d2Jorge Lucangeli Obes if (cap > last_valid_cap) { 357f3f824ee42892fb69cb0d9b0557cd9c5aed357d2Jorge Lucangeli Obes *err = StringPrintf("capability '%s' not supported by the kernel", arg.c_str()); 358f3f824ee42892fb69cb0d9b0557cd9c5aed357d2Jorge Lucangeli Obes return false; 359f3f824ee42892fb69cb0d9b0557cd9c5aed357d2Jorge Lucangeli Obes } 36024b29132a017f7fbfd009c3e6aec499d1b815dbfJorge Lucangeli Obes capabilities_[cap] = true; 36124b29132a017f7fbfd009c3e6aec499d1b815dbfJorge Lucangeli Obes } 36224b29132a017f7fbfd009c3e6aec499d1b815dbfJorge Lucangeli Obes return true; 36324b29132a017f7fbfd009c3e6aec499d1b815dbfJorge Lucangeli Obes} 36424b29132a017f7fbfd009c3e6aec499d1b815dbfJorge Lucangeli Obes 365177b27d4f5bfa498cc46aad24d9375d65630bea0Jorge Lucangeli Obesbool Service::ParseClass(const std::vector<std::string>& args, std::string* err) { 366641ff0a4d8d05349d9c22f726a035a2936a2a94dWei Wang classnames_ = std::set<std::string>(args.begin() + 1, args.end()); 367b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry return true; 368b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry} 369bac3299720623f4226bca103b26260052732ad30Tom Cherry 370177b27d4f5bfa498cc46aad24d9375d65630bea0Jorge Lucangeli Obesbool Service::ParseConsole(const std::vector<std::string>& args, std::string* err) { 371b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry flags_ |= SVC_CONSOLE; 37270daa67062c016eea1a30be2e1de0dcba1d23a13Viorel Suman console_ = args.size() > 1 ? "/dev/" + args[1] : ""; 373b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry return true; 374b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry} 375bac3299720623f4226bca103b26260052732ad30Tom Cherry 376177b27d4f5bfa498cc46aad24d9375d65630bea0Jorge Lucangeli Obesbool Service::ParseCritical(const std::vector<std::string>& args, std::string* err) { 377b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry flags_ |= SVC_CRITICAL; 378b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry return true; 379b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry} 380bac3299720623f4226bca103b26260052732ad30Tom Cherry 381177b27d4f5bfa498cc46aad24d9375d65630bea0Jorge Lucangeli Obesbool Service::ParseDisabled(const std::vector<std::string>& args, std::string* err) { 382b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry flags_ |= SVC_DISABLED; 383b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry flags_ |= SVC_RC_DISABLED; 384b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry return true; 385b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry} 386bac3299720623f4226bca103b26260052732ad30Tom Cherry 387177b27d4f5bfa498cc46aad24d9375d65630bea0Jorge Lucangeli Obesbool Service::ParseGroup(const std::vector<std::string>& args, std::string* err) { 388517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry std::string decode_uid_err; 389517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry if (!DecodeUid(args[1], &gid_, &decode_uid_err)) { 390517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry *err = "Unable to find GID for '" + args[1] + "': " + decode_uid_err; 391517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry return false; 392517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry } 393b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry for (std::size_t n = 2; n < args.size(); n++) { 394517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry gid_t gid; 395517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry if (!DecodeUid(args[n], &gid, &decode_uid_err)) { 396517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry *err = "Unable to find GID for '" + args[n] + "': " + decode_uid_err; 397517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry return false; 398517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry } 399517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry supp_gids_.emplace_back(gid); 400b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry } 401b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry return true; 402b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry} 403bac3299720623f4226bca103b26260052732ad30Tom Cherry 404177b27d4f5bfa498cc46aad24d9375d65630bea0Jorge Lucangeli Obesbool Service::ParsePriority(const std::vector<std::string>& args, std::string* err) { 405da46b392f10d2809b5696632f67485f272ec5698Elliott Hughes priority_ = 0; 406da46b392f10d2809b5696632f67485f272ec5698Elliott Hughes if (!ParseInt(args[1], &priority_, 407dd34ca45ea80c519a579578562e73d5e7f86703bKeun-young Park static_cast<int>(ANDROID_PRIORITY_HIGHEST), // highest is negative 408dd34ca45ea80c519a579578562e73d5e7f86703bKeun-young Park static_cast<int>(ANDROID_PRIORITY_LOWEST))) { 409081705c258efbe938d71c2022528d809fa6d42c5Vitalii Tomkiv *err = StringPrintf("process priority value must be range %d - %d", 410081705c258efbe938d71c2022528d809fa6d42c5Vitalii Tomkiv ANDROID_PRIORITY_HIGHEST, ANDROID_PRIORITY_LOWEST); 411081705c258efbe938d71c2022528d809fa6d42c5Vitalii Tomkiv return false; 412081705c258efbe938d71c2022528d809fa6d42c5Vitalii Tomkiv } 413081705c258efbe938d71c2022528d809fa6d42c5Vitalii Tomkiv return true; 414081705c258efbe938d71c2022528d809fa6d42c5Vitalii Tomkiv} 415081705c258efbe938d71c2022528d809fa6d42c5Vitalii Tomkiv 416177b27d4f5bfa498cc46aad24d9375d65630bea0Jorge Lucangeli Obesbool Service::ParseIoprio(const std::vector<std::string>& args, std::string* err) { 417da46b392f10d2809b5696632f67485f272ec5698Elliott Hughes if (!ParseInt(args[2], &ioprio_pri_, 0, 7)) { 418b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry *err = "priority value must be range 0 - 7"; 419b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry return false; 420b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry } 421b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry 422b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry if (args[1] == "rt") { 423b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry ioprio_class_ = IoSchedClass_RT; 424b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry } else if (args[1] == "be") { 425b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry ioprio_class_ = IoSchedClass_BE; 426b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry } else if (args[1] == "idle") { 427b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry ioprio_class_ = IoSchedClass_IDLE; 428b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry } else { 429b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry *err = "ioprio option usage: ioprio <rt|be|idle> <0-7>"; 430b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry return false; 431bac3299720623f4226bca103b26260052732ad30Tom Cherry } 432bac3299720623f4226bca103b26260052732ad30Tom Cherry 433b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry return true; 434b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry} 435bac3299720623f4226bca103b26260052732ad30Tom Cherry 436177b27d4f5bfa498cc46aad24d9375d65630bea0Jorge Lucangeli Obesbool Service::ParseKeycodes(const std::vector<std::string>& args, std::string* err) { 437b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry for (std::size_t i = 1; i < args.size(); i++) { 438da46b392f10d2809b5696632f67485f272ec5698Elliott Hughes int code; 439da46b392f10d2809b5696632f67485f272ec5698Elliott Hughes if (ParseInt(args[i], &code)) { 440da46b392f10d2809b5696632f67485f272ec5698Elliott Hughes keycodes_.emplace_back(code); 441da46b392f10d2809b5696632f67485f272ec5698Elliott Hughes } else { 442da46b392f10d2809b5696632f67485f272ec5698Elliott Hughes LOG(WARNING) << "ignoring invalid keycode: " << args[i]; 443da46b392f10d2809b5696632f67485f272ec5698Elliott Hughes } 444bac3299720623f4226bca103b26260052732ad30Tom Cherry } 445b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry return true; 446b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry} 447b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry 448177b27d4f5bfa498cc46aad24d9375d65630bea0Jorge Lucangeli Obesbool Service::ParseOneshot(const std::vector<std::string>& args, std::string* err) { 449b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry flags_ |= SVC_ONESHOT; 450b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry return true; 451b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry} 452b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry 453177b27d4f5bfa498cc46aad24d9375d65630bea0Jorge Lucangeli Obesbool Service::ParseOnrestart(const std::vector<std::string>& args, std::string* err) { 454b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry std::vector<std::string> str_args(args.begin() + 1, args.end()); 455012c573e267b8dd70de14237cb470bd7301ee8eaTom Cherry int line = onrestart_.NumCommands() + 1; 456012c573e267b8dd70de14237cb470bd7301ee8eaTom Cherry onrestart_.AddCommand(str_args, line, err); 457b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry return true; 458b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry} 459bac3299720623f4226bca103b26260052732ad30Tom Cherry 460177b27d4f5bfa498cc46aad24d9375d65630bea0Jorge Lucangeli Obesbool Service::ParseNamespace(const std::vector<std::string>& args, std::string* err) { 4611b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes for (size_t i = 1; i < args.size(); i++) { 4621b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes if (args[i] == "pid") { 4631b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes namespace_flags_ |= CLONE_NEWPID; 4641b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes // PID namespaces require mount namespaces. 4651b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes namespace_flags_ |= CLONE_NEWNS; 4661b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes } else if (args[i] == "mnt") { 4671b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes namespace_flags_ |= CLONE_NEWNS; 4681b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes } else { 4691b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes *err = "namespace must be 'pid' or 'mnt'"; 4701b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes return false; 4711b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes } 4721b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes } 4731b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes return true; 4741b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes} 4751b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes 476310f6704d0dfe9ca4cfb153ce8e4212cc7596190Marco Nelissenbool Service::ParseOomScoreAdjust(const std::vector<std::string>& args, std::string* err) { 477da46b392f10d2809b5696632f67485f272ec5698Elliott Hughes if (!ParseInt(args[1], &oom_score_adjust_, -1000, 1000)) { 478310f6704d0dfe9ca4cfb153ce8e4212cc7596190Marco Nelissen *err = "oom_score_adjust value must be in range -1000 - +1000"; 479310f6704d0dfe9ca4cfb153ce8e4212cc7596190Marco Nelissen return false; 480310f6704d0dfe9ca4cfb153ce8e4212cc7596190Marco Nelissen } 481310f6704d0dfe9ca4cfb153ce8e4212cc7596190Marco Nelissen return true; 482310f6704d0dfe9ca4cfb153ce8e4212cc7596190Marco Nelissen} 483310f6704d0dfe9ca4cfb153ce8e4212cc7596190Marco Nelissen 484d485226951013247dbb502fef7edbc6cf83acb0fRobert Beneabool Service::ParseMemcgSwappiness(const std::vector<std::string>& args, std::string* err) { 485d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea if (!ParseInt(args[1], &swappiness_, 0)) { 486d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea *err = "swappiness value must be equal or greater than 0"; 487d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea return false; 488d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea } 489d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea return true; 490d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea} 491d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea 492d485226951013247dbb502fef7edbc6cf83acb0fRobert Beneabool Service::ParseMemcgLimitInBytes(const std::vector<std::string>& args, std::string* err) { 493d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea if (!ParseInt(args[1], &limit_in_bytes_, 0)) { 494d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea *err = "limit_in_bytes value must be equal or greater than 0"; 495d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea return false; 496d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea } 497d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea return true; 498d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea} 499d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea 500d485226951013247dbb502fef7edbc6cf83acb0fRobert Beneabool Service::ParseMemcgSoftLimitInBytes(const std::vector<std::string>& args, std::string* err) { 501d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea if (!ParseInt(args[1], &soft_limit_in_bytes_, 0)) { 502d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea *err = "soft_limit_in_bytes value must be equal or greater than 0"; 503d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea return false; 504d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea } 505d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea return true; 506d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea} 507d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea 508177b27d4f5bfa498cc46aad24d9375d65630bea0Jorge Lucangeli Obesbool Service::ParseSeclabel(const std::vector<std::string>& args, std::string* err) { 509b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry seclabel_ = args[1]; 510b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry return true; 511b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry} 512b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry 513177b27d4f5bfa498cc46aad24d9375d65630bea0Jorge Lucangeli Obesbool Service::ParseSetenv(const std::vector<std::string>& args, std::string* err) { 514b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry envvars_.emplace_back(args[1], args[2]); 515b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry return true; 516b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry} 517b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry 518cccb34fce8798f2a359c6eb0e394ef9460673629Keun-young Parkbool Service::ParseShutdown(const std::vector<std::string>& args, std::string* err) { 519cccb34fce8798f2a359c6eb0e394ef9460673629Keun-young Park if (args[1] == "critical") { 520cccb34fce8798f2a359c6eb0e394ef9460673629Keun-young Park flags_ |= SVC_SHUTDOWN_CRITICAL; 521cccb34fce8798f2a359c6eb0e394ef9460673629Keun-young Park return true; 522cccb34fce8798f2a359c6eb0e394ef9460673629Keun-young Park } 523cccb34fce8798f2a359c6eb0e394ef9460673629Keun-young Park return false; 524cccb34fce8798f2a359c6eb0e394ef9460673629Keun-young Park} 525cccb34fce8798f2a359c6eb0e394ef9460673629Keun-young Park 52662767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyntemplate <typename T> 52762767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzynbool Service::AddDescriptor(const std::vector<std::string>& args, std::string* err) { 52862767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn int perm = args.size() > 3 ? std::strtoul(args[3].c_str(), 0, 8) : -1; 529517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry uid_t uid = 0; 530517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry gid_t gid = 0; 53162767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn std::string context = args.size() > 6 ? args[6] : ""; 53262767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn 533517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry std::string decode_uid_err; 534517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry if (args.size() > 4) { 535517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry if (!DecodeUid(args[4], &uid, &decode_uid_err)) { 536517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry *err = "Unable to find UID for '" + args[4] + "': " + decode_uid_err; 537517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry return false; 538517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry } 539517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry } 540517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry 541517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry if (args.size() > 5) { 542517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry if (!DecodeUid(args[5], &gid, &decode_uid_err)) { 543517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry *err = "Unable to find GID for '" + args[5] + "': " + decode_uid_err; 544517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry return false; 545517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry } 546517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry } 547517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry 54862767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn auto descriptor = std::make_unique<T>(args[1], args[2], uid, gid, perm, context); 54962767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn 55062767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn auto old = 55162767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn std::find_if(descriptors_.begin(), descriptors_.end(), 55262767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn [&descriptor] (const auto& other) { return descriptor.get() == other.get(); }); 55362767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn 55462767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn if (old != descriptors_.end()) { 55562767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn *err = "duplicate descriptor " + args[1] + " " + args[2]; 55662767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn return false; 55762767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn } 55862767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn 55962767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn descriptors_.emplace_back(std::move(descriptor)); 56062767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn return true; 56162767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn} 56262767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn 56362767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn// name type perm [ uid gid context ] 564177b27d4f5bfa498cc46aad24d9375d65630bea0Jorge Lucangeli Obesbool Service::ParseSocket(const std::vector<std::string>& args, std::string* err) { 56581f5d3ebef2c3789737bf718fc2a2cdd7b9e8b33Tom Cherry if (!StartsWith(args[2], "dgram") && !StartsWith(args[2], "stream") && 56681f5d3ebef2c3789737bf718fc2a2cdd7b9e8b33Tom Cherry !StartsWith(args[2], "seqpacket")) { 567b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry *err = "socket type must be 'dgram', 'stream' or 'seqpacket'"; 568bac3299720623f4226bca103b26260052732ad30Tom Cherry return false; 569bac3299720623f4226bca103b26260052732ad30Tom Cherry } 57062767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn return AddDescriptor<SocketInfo>(args, err); 57162767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn} 572b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry 57362767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn// name type perm [ uid gid context ] 57462767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzynbool Service::ParseFile(const std::vector<std::string>& args, std::string* err) { 57562767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn if (args[2] != "r" && args[2] != "w" && args[2] != "rw") { 57662767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn *err = "file type must be 'r', 'w' or 'rw'"; 57762767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn return false; 57862767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn } 57962767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn if ((args[1][0] != '/') || (args[1].find("../") != std::string::npos)) { 58062767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn *err = "file name must not be relative"; 58162767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn return false; 58262767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn } 58362767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn return AddDescriptor<FileInfo>(args, err); 584bac3299720623f4226bca103b26260052732ad30Tom Cherry} 585bac3299720623f4226bca103b26260052732ad30Tom Cherry 586177b27d4f5bfa498cc46aad24d9375d65630bea0Jorge Lucangeli Obesbool Service::ParseUser(const std::vector<std::string>& args, std::string* err) { 587517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry std::string decode_uid_err; 588517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry if (!DecodeUid(args[1], &uid_, &decode_uid_err)) { 589517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry *err = "Unable to find UID for '" + args[1] + "': " + decode_uid_err; 590517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry return false; 591517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry } 592b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry return true; 593b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry} 594b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry 595177b27d4f5bfa498cc46aad24d9375d65630bea0Jorge Lucangeli Obesbool Service::ParseWritepid(const std::vector<std::string>& args, std::string* err) { 596b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry writepid_files_.assign(args.begin() + 1, args.end()); 597b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry return true; 598b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry} 599b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry 600177b27d4f5bfa498cc46aad24d9375d65630bea0Jorge Lucangeli Obesclass Service::OptionParserMap : public KeywordMap<OptionParser> { 601ad54d094cde838d19034b8325705b22dca0e9af0Tom Cherry public: 602ad54d094cde838d19034b8325705b22dca0e9af0Tom Cherry OptionParserMap() {} 603ad54d094cde838d19034b8325705b22dca0e9af0Tom Cherry 604ad54d094cde838d19034b8325705b22dca0e9af0Tom Cherry private: 605ad54d094cde838d19034b8325705b22dca0e9af0Tom Cherry const Map& map() const override; 606b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry}; 607b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry 608ad54d094cde838d19034b8325705b22dca0e9af0Tom Cherryconst Service::OptionParserMap::Map& Service::OptionParserMap::map() const { 609b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry constexpr std::size_t kMax = std::numeric_limits<std::size_t>::max(); 610641ff0a4d8d05349d9c22f726a035a2936a2a94dWei Wang // clang-format off 611177b27d4f5bfa498cc46aad24d9375d65630bea0Jorge Lucangeli Obes static const Map option_parsers = { 61224b29132a017f7fbfd009c3e6aec499d1b815dbfJorge Lucangeli Obes {"capabilities", 61324b29132a017f7fbfd009c3e6aec499d1b815dbfJorge Lucangeli Obes {1, kMax, &Service::ParseCapabilities}}, 614641ff0a4d8d05349d9c22f726a035a2936a2a94dWei Wang {"class", {1, kMax, &Service::ParseClass}}, 615177b27d4f5bfa498cc46aad24d9375d65630bea0Jorge Lucangeli Obes {"console", {0, 1, &Service::ParseConsole}}, 616177b27d4f5bfa498cc46aad24d9375d65630bea0Jorge Lucangeli Obes {"critical", {0, 0, &Service::ParseCritical}}, 617177b27d4f5bfa498cc46aad24d9375d65630bea0Jorge Lucangeli Obes {"disabled", {0, 0, &Service::ParseDisabled}}, 618177b27d4f5bfa498cc46aad24d9375d65630bea0Jorge Lucangeli Obes {"group", {1, NR_SVC_SUPP_GIDS + 1, &Service::ParseGroup}}, 619177b27d4f5bfa498cc46aad24d9375d65630bea0Jorge Lucangeli Obes {"ioprio", {2, 2, &Service::ParseIoprio}}, 620177b27d4f5bfa498cc46aad24d9375d65630bea0Jorge Lucangeli Obes {"priority", {1, 1, &Service::ParsePriority}}, 621177b27d4f5bfa498cc46aad24d9375d65630bea0Jorge Lucangeli Obes {"keycodes", {1, kMax, &Service::ParseKeycodes}}, 622177b27d4f5bfa498cc46aad24d9375d65630bea0Jorge Lucangeli Obes {"oneshot", {0, 0, &Service::ParseOneshot}}, 623177b27d4f5bfa498cc46aad24d9375d65630bea0Jorge Lucangeli Obes {"onrestart", {1, kMax, &Service::ParseOnrestart}}, 624310f6704d0dfe9ca4cfb153ce8e4212cc7596190Marco Nelissen {"oom_score_adjust", 625310f6704d0dfe9ca4cfb153ce8e4212cc7596190Marco Nelissen {1, 1, &Service::ParseOomScoreAdjust}}, 626d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea {"memcg.swappiness", 627d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea {1, 1, &Service::ParseMemcgSwappiness}}, 628d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea {"memcg.soft_limit_in_bytes", 629d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea {1, 1, &Service::ParseMemcgSoftLimitInBytes}}, 630d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea {"memcg.limit_in_bytes", 631d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea {1, 1, &Service::ParseMemcgLimitInBytes}}, 632177b27d4f5bfa498cc46aad24d9375d65630bea0Jorge Lucangeli Obes {"namespace", {1, 2, &Service::ParseNamespace}}, 633177b27d4f5bfa498cc46aad24d9375d65630bea0Jorge Lucangeli Obes {"seclabel", {1, 1, &Service::ParseSeclabel}}, 634177b27d4f5bfa498cc46aad24d9375d65630bea0Jorge Lucangeli Obes {"setenv", {2, 2, &Service::ParseSetenv}}, 635cccb34fce8798f2a359c6eb0e394ef9460673629Keun-young Park {"shutdown", {1, 1, &Service::ParseShutdown}}, 636177b27d4f5bfa498cc46aad24d9375d65630bea0Jorge Lucangeli Obes {"socket", {3, 6, &Service::ParseSocket}}, 637978fd0ea254f11f84e38b41a74bbe70c81edc197Mark Salyzyn {"file", {2, 2, &Service::ParseFile}}, 638177b27d4f5bfa498cc46aad24d9375d65630bea0Jorge Lucangeli Obes {"user", {1, 1, &Service::ParseUser}}, 639177b27d4f5bfa498cc46aad24d9375d65630bea0Jorge Lucangeli Obes {"writepid", {1, kMax, &Service::ParseWritepid}}, 640b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry }; 641641ff0a4d8d05349d9c22f726a035a2936a2a94dWei Wang // clang-format on 642177b27d4f5bfa498cc46aad24d9375d65630bea0Jorge Lucangeli Obes return option_parsers; 643b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry} 644b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry 645177b27d4f5bfa498cc46aad24d9375d65630bea0Jorge Lucangeli Obesbool Service::ParseLine(const std::vector<std::string>& args, std::string* err) { 646177b27d4f5bfa498cc46aad24d9375d65630bea0Jorge Lucangeli Obes static const OptionParserMap parser_map; 647fe062055cb11fcb1a6178b046173fc0361ad5b96Tom Cherry auto parser = parser_map.FindFunction(args, err); 648b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry 649177b27d4f5bfa498cc46aad24d9375d65630bea0Jorge Lucangeli Obes if (!parser) { 650b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry return false; 651b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry } 652b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry 653177b27d4f5bfa498cc46aad24d9375d65630bea0Jorge Lucangeli Obes return (this->*parser)(args, err); 654b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry} 655b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry 656ede0d538501dfc78c741fb3b0645406636d1d1fdTom Cherrybool Service::ExecStart(std::unique_ptr<android::base::Timer>* exec_waiter) { 657b27004aa05039b5196f1e878169dca41b68aadd6Tom Cherry flags_ |= SVC_EXEC | SVC_ONESHOT; 658b27004aa05039b5196f1e878169dca41b68aadd6Tom Cherry 659ede0d538501dfc78c741fb3b0645406636d1d1fdTom Cherry exec_waiter->reset(new android::base::Timer); 660b27004aa05039b5196f1e878169dca41b68aadd6Tom Cherry 661b27004aa05039b5196f1e878169dca41b68aadd6Tom Cherry if (!Start()) { 662b27004aa05039b5196f1e878169dca41b68aadd6Tom Cherry exec_waiter->reset(); 663b27004aa05039b5196f1e878169dca41b68aadd6Tom Cherry return false; 664b27004aa05039b5196f1e878169dca41b68aadd6Tom Cherry } 665b27004aa05039b5196f1e878169dca41b68aadd6Tom Cherry return true; 666b27004aa05039b5196f1e878169dca41b68aadd6Tom Cherry} 667b27004aa05039b5196f1e878169dca41b68aadd6Tom Cherry 668bdeac39a42c1b9c7195ada1c30fe12f94314490fElliott Hughesbool Service::Start() { 669bac3299720623f4226bca103b26260052732ad30Tom Cherry // Starting a service removes it from the disabled or reset state and 670bac3299720623f4226bca103b26260052732ad30Tom Cherry // immediately takes it out of the restarting state if it was in there. 671bac3299720623f4226bca103b26260052732ad30Tom Cherry flags_ &= (~(SVC_DISABLED|SVC_RESTARTING|SVC_RESET|SVC_RESTART|SVC_DISABLED_START)); 672bac3299720623f4226bca103b26260052732ad30Tom Cherry 673bac3299720623f4226bca103b26260052732ad30Tom Cherry // Running processes require no additional work --- if they're in the 674bac3299720623f4226bca103b26260052732ad30Tom Cherry // process of exiting, we've ensured that they will immediately restart 675bac3299720623f4226bca103b26260052732ad30Tom Cherry // on exit, unless they are ONESHOT. 676bac3299720623f4226bca103b26260052732ad30Tom Cherry if (flags_ & SVC_RUNNING) { 677bac3299720623f4226bca103b26260052732ad30Tom Cherry return false; 678bac3299720623f4226bca103b26260052732ad30Tom Cherry } 679bac3299720623f4226bca103b26260052732ad30Tom Cherry 680bac3299720623f4226bca103b26260052732ad30Tom Cherry bool needs_console = (flags_ & SVC_CONSOLE); 68170daa67062c016eea1a30be2e1de0dcba1d23a13Viorel Suman if (needs_console) { 68270daa67062c016eea1a30be2e1de0dcba1d23a13Viorel Suman if (console_.empty()) { 68370daa67062c016eea1a30be2e1de0dcba1d23a13Viorel Suman console_ = default_console; 68470daa67062c016eea1a30be2e1de0dcba1d23a13Viorel Suman } 68570daa67062c016eea1a30be2e1de0dcba1d23a13Viorel Suman 68624ef8601c203a28b85a5e9168e5bada713e6a8f1Adrian Salido // Make sure that open call succeeds to ensure a console driver is 68724ef8601c203a28b85a5e9168e5bada713e6a8f1Adrian Salido // properly registered for the device node 68824ef8601c203a28b85a5e9168e5bada713e6a8f1Adrian Salido int console_fd = open(console_.c_str(), O_RDWR | O_CLOEXEC); 68924ef8601c203a28b85a5e9168e5bada713e6a8f1Adrian Salido if (console_fd < 0) { 69024ef8601c203a28b85a5e9168e5bada713e6a8f1Adrian Salido PLOG(ERROR) << "service '" << name_ << "' couldn't open console '" << console_ << "'"; 69170daa67062c016eea1a30be2e1de0dcba1d23a13Viorel Suman flags_ |= SVC_DISABLED; 69270daa67062c016eea1a30be2e1de0dcba1d23a13Viorel Suman return false; 69370daa67062c016eea1a30be2e1de0dcba1d23a13Viorel Suman } 69424ef8601c203a28b85a5e9168e5bada713e6a8f1Adrian Salido close(console_fd); 695bac3299720623f4226bca103b26260052732ad30Tom Cherry } 696bac3299720623f4226bca103b26260052732ad30Tom Cherry 697bac3299720623f4226bca103b26260052732ad30Tom Cherry struct stat sb; 698bac3299720623f4226bca103b26260052732ad30Tom Cherry if (stat(args_[0].c_str(), &sb) == -1) { 699f86b5a6b90619e02d1d034ef7b0adc3b439f4abbElliott Hughes PLOG(ERROR) << "cannot find '" << args_[0] << "', disabling '" << name_ << "'"; 700bac3299720623f4226bca103b26260052732ad30Tom Cherry flags_ |= SVC_DISABLED; 701bac3299720623f4226bca103b26260052732ad30Tom Cherry return false; 702bac3299720623f4226bca103b26260052732ad30Tom Cherry } 703bac3299720623f4226bca103b26260052732ad30Tom Cherry 704bac3299720623f4226bca103b26260052732ad30Tom Cherry std::string scon; 705bac3299720623f4226bca103b26260052732ad30Tom Cherry if (!seclabel_.empty()) { 706bac3299720623f4226bca103b26260052732ad30Tom Cherry scon = seclabel_; 707bac3299720623f4226bca103b26260052732ad30Tom Cherry } else { 708344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes scon = ComputeContextFromExecutable(name_, args_[0]); 709344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes if (scon == "") { 710bac3299720623f4226bca103b26260052732ad30Tom Cherry return false; 711bac3299720623f4226bca103b26260052732ad30Tom Cherry } 712bac3299720623f4226bca103b26260052732ad30Tom Cherry } 713bac3299720623f4226bca103b26260052732ad30Tom Cherry 714a285dac9c0b95a0351dfa98dde60c74a1445dc57Wei Wang LOG(INFO) << "starting service '" << name_ << "'..."; 715bac3299720623f4226bca103b26260052732ad30Tom Cherry 7161b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes pid_t pid = -1; 7171b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes if (namespace_flags_) { 718344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes pid = clone(nullptr, nullptr, namespace_flags_ | SIGCHLD, nullptr); 7191b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes } else { 7201b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes pid = fork(); 7211b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes } 7221b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes 723bac3299720623f4226bca103b26260052732ad30Tom Cherry if (pid == 0) { 724bac3299720623f4226bca103b26260052732ad30Tom Cherry umask(077); 725bac3299720623f4226bca103b26260052732ad30Tom Cherry 7261b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes if (namespace_flags_ & CLONE_NEWPID) { 7271b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes // This will fork again to run an init process inside the PID 7281b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes // namespace. 7291b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes SetUpPidNamespace(name_); 7301b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes } 7311b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes 732bac3299720623f4226bca103b26260052732ad30Tom Cherry for (const auto& ei : envvars_) { 733bac3299720623f4226bca103b26260052732ad30Tom Cherry add_environment(ei.name.c_str(), ei.value.c_str()); 734bac3299720623f4226bca103b26260052732ad30Tom Cherry } 735bac3299720623f4226bca103b26260052732ad30Tom Cherry 73662767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn std::for_each(descriptors_.begin(), descriptors_.end(), 73762767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn std::bind(&DescriptorInfo::CreateAndPublish, std::placeholders::_1, scon)); 738bac3299720623f4226bca103b26260052732ad30Tom Cherry 7390828676dff618c8ecc9852cb319543570b3a2e72Alex Vakulenko // See if there were "writepid" instructions to write to files under /dev/cpuset/. 7400828676dff618c8ecc9852cb319543570b3a2e72Alex Vakulenko auto cpuset_predicate = [](const std::string& path) { 74181f5d3ebef2c3789737bf718fc2a2cdd7b9e8b33Tom Cherry return StartsWith(path, "/dev/cpuset/"); 7420828676dff618c8ecc9852cb319543570b3a2e72Alex Vakulenko }; 7430828676dff618c8ecc9852cb319543570b3a2e72Alex Vakulenko auto iter = std::find_if(writepid_files_.begin(), writepid_files_.end(), cpuset_predicate); 7440828676dff618c8ecc9852cb319543570b3a2e72Alex Vakulenko if (iter == writepid_files_.end()) { 7450828676dff618c8ecc9852cb319543570b3a2e72Alex Vakulenko // There were no "writepid" instructions for cpusets, check if the system default 7460828676dff618c8ecc9852cb319543570b3a2e72Alex Vakulenko // cpuset is specified to be used for the process. 74781f5d3ebef2c3789737bf718fc2a2cdd7b9e8b33Tom Cherry std::string default_cpuset = GetProperty("ro.cpuset.default", ""); 7480828676dff618c8ecc9852cb319543570b3a2e72Alex Vakulenko if (!default_cpuset.empty()) { 7490828676dff618c8ecc9852cb319543570b3a2e72Alex Vakulenko // Make sure the cpuset name starts and ends with '/'. 7500828676dff618c8ecc9852cb319543570b3a2e72Alex Vakulenko // A single '/' means the 'root' cpuset. 7510828676dff618c8ecc9852cb319543570b3a2e72Alex Vakulenko if (default_cpuset.front() != '/') { 7520828676dff618c8ecc9852cb319543570b3a2e72Alex Vakulenko default_cpuset.insert(0, 1, '/'); 7530828676dff618c8ecc9852cb319543570b3a2e72Alex Vakulenko } 7540828676dff618c8ecc9852cb319543570b3a2e72Alex Vakulenko if (default_cpuset.back() != '/') { 7550828676dff618c8ecc9852cb319543570b3a2e72Alex Vakulenko default_cpuset.push_back('/'); 7560828676dff618c8ecc9852cb319543570b3a2e72Alex Vakulenko } 7570828676dff618c8ecc9852cb319543570b3a2e72Alex Vakulenko writepid_files_.push_back( 7580828676dff618c8ecc9852cb319543570b3a2e72Alex Vakulenko StringPrintf("/dev/cpuset%stasks", default_cpuset.c_str())); 7590828676dff618c8ecc9852cb319543570b3a2e72Alex Vakulenko } 7600828676dff618c8ecc9852cb319543570b3a2e72Alex Vakulenko } 7611c3a53f03ca3c2c647f83cd8b8ae7e18c5c7bc69Tom Cherry std::string pid_str = std::to_string(getpid()); 762bac3299720623f4226bca103b26260052732ad30Tom Cherry for (const auto& file : writepid_files_) { 763b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry if (!WriteStringToFile(pid_str, file)) { 764f86b5a6b90619e02d1d034ef7b0adc3b439f4abbElliott Hughes PLOG(ERROR) << "couldn't write " << pid_str << " to " << file; 765bac3299720623f4226bca103b26260052732ad30Tom Cherry } 766bac3299720623f4226bca103b26260052732ad30Tom Cherry } 767bac3299720623f4226bca103b26260052732ad30Tom Cherry 768bac3299720623f4226bca103b26260052732ad30Tom Cherry if (ioprio_class_ != IoSchedClass_NONE) { 769bac3299720623f4226bca103b26260052732ad30Tom Cherry if (android_set_ioprio(getpid(), ioprio_class_, ioprio_pri_)) { 770344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes PLOG(ERROR) << "failed to set pid " << getpid() 771f86b5a6b90619e02d1d034ef7b0adc3b439f4abbElliott Hughes << " ioprio=" << ioprio_class_ << "," << ioprio_pri_; 772bac3299720623f4226bca103b26260052732ad30Tom Cherry } 773bac3299720623f4226bca103b26260052732ad30Tom Cherry } 774bac3299720623f4226bca103b26260052732ad30Tom Cherry 775bac3299720623f4226bca103b26260052732ad30Tom Cherry if (needs_console) { 776bac3299720623f4226bca103b26260052732ad30Tom Cherry setsid(); 777bac3299720623f4226bca103b26260052732ad30Tom Cherry OpenConsole(); 778bac3299720623f4226bca103b26260052732ad30Tom Cherry } else { 779bac3299720623f4226bca103b26260052732ad30Tom Cherry ZapStdio(); 780bac3299720623f4226bca103b26260052732ad30Tom Cherry } 781bac3299720623f4226bca103b26260052732ad30Tom Cherry 782344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes // As requested, set our gid, supplemental gids, uid, context, and 783344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes // priority. Aborts on failure. 784344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes SetProcessAttributes(); 785bac3299720623f4226bca103b26260052732ad30Tom Cherry 786bac3299720623f4226bca103b26260052732ad30Tom Cherry std::vector<char*> strs; 787344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes ExpandArgs(args_, &strs); 788bac3536cc949b3af0185e7b8f9b18318b37ac8b0Tom Cherry if (execve(strs[0], (char**) &strs[0], (char**) ENV) < 0) { 789f86b5a6b90619e02d1d034ef7b0adc3b439f4abbElliott Hughes PLOG(ERROR) << "cannot execve('" << strs[0] << "')"; 790bac3299720623f4226bca103b26260052732ad30Tom Cherry } 791bac3299720623f4226bca103b26260052732ad30Tom Cherry 792bac3299720623f4226bca103b26260052732ad30Tom Cherry _exit(127); 793bac3299720623f4226bca103b26260052732ad30Tom Cherry } 794bac3299720623f4226bca103b26260052732ad30Tom Cherry 795bac3299720623f4226bca103b26260052732ad30Tom Cherry if (pid < 0) { 796f86b5a6b90619e02d1d034ef7b0adc3b439f4abbElliott Hughes PLOG(ERROR) << "failed to fork for '" << name_ << "'"; 797bac3299720623f4226bca103b26260052732ad30Tom Cherry pid_ = 0; 798bac3299720623f4226bca103b26260052732ad30Tom Cherry return false; 799bac3299720623f4226bca103b26260052732ad30Tom Cherry } 800bac3299720623f4226bca103b26260052732ad30Tom Cherry 801310f6704d0dfe9ca4cfb153ce8e4212cc7596190Marco Nelissen if (oom_score_adjust_ != -1000) { 8021c3a53f03ca3c2c647f83cd8b8ae7e18c5c7bc69Tom Cherry std::string oom_str = std::to_string(oom_score_adjust_); 803310f6704d0dfe9ca4cfb153ce8e4212cc7596190Marco Nelissen std::string oom_file = StringPrintf("/proc/%d/oom_score_adj", pid); 804310f6704d0dfe9ca4cfb153ce8e4212cc7596190Marco Nelissen if (!WriteStringToFile(oom_str, oom_file)) { 805310f6704d0dfe9ca4cfb153ce8e4212cc7596190Marco Nelissen PLOG(ERROR) << "couldn't write oom_score_adj: " << strerror(errno); 806310f6704d0dfe9ca4cfb153ce8e4212cc7596190Marco Nelissen } 807310f6704d0dfe9ca4cfb153ce8e4212cc7596190Marco Nelissen } 808310f6704d0dfe9ca4cfb153ce8e4212cc7596190Marco Nelissen 8099605a945f7a497c0307b512b9cd762f2d23973caElliott Hughes time_started_ = boot_clock::now(); 810bac3299720623f4226bca103b26260052732ad30Tom Cherry pid_ = pid; 811bac3299720623f4226bca103b26260052732ad30Tom Cherry flags_ |= SVC_RUNNING; 8125938379e910c4cbd7ed2429901bb3c45e62405d4Tom Cherry start_order_ = next_start_order_++; 81333838b1156cd1a5f8eec94756bee9e030a3dd2ebTom Cherry process_cgroup_empty_ = false; 814ad8e94e017173471e90c704eb7d8de5a14712aa7Elliott Hughes 815ad8e94e017173471e90c704eb7d8de5a14712aa7Elliott Hughes errno = -createProcessGroup(uid_, pid_); 816ad8e94e017173471e90c704eb7d8de5a14712aa7Elliott Hughes if (errno != 0) { 817344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes PLOG(ERROR) << "createProcessGroup(" << uid_ << ", " << pid_ << ") failed for service '" 818344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes << name_ << "'"; 819d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea } else { 820d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea if (swappiness_ != -1) { 821d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea if (!setProcessGroupSwappiness(uid_, pid_, swappiness_)) { 822d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea PLOG(ERROR) << "setProcessGroupSwappiness failed"; 823d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea } 824d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea } 825d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea 826d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea if (soft_limit_in_bytes_ != -1) { 827d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea if (!setProcessGroupSoftLimit(uid_, pid_, soft_limit_in_bytes_)) { 828d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea PLOG(ERROR) << "setProcessGroupSoftLimit failed"; 829d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea } 830d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea } 831d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea 832d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea if (limit_in_bytes_ != -1) { 833d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea if (!setProcessGroupLimit(uid_, pid_, limit_in_bytes_)) { 834d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea PLOG(ERROR) << "setProcessGroupLimit failed"; 835d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea } 836d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea } 837ad8e94e017173471e90c704eb7d8de5a14712aa7Elliott Hughes } 838bac3299720623f4226bca103b26260052732ad30Tom Cherry 839bac3299720623f4226bca103b26260052732ad30Tom Cherry if ((flags_ & SVC_EXEC) != 0) { 8401c3a53f03ca3c2c647f83cd8b8ae7e18c5c7bc69Tom Cherry LOG(INFO) << "SVC_EXEC pid " << pid_ << " (uid " << uid_ << " gid " << gid_ << "+" 8411c3a53f03ca3c2c647f83cd8b8ae7e18c5c7bc69Tom Cherry << supp_gids_.size() << " context " 8421c3a53f03ca3c2c647f83cd8b8ae7e18c5c7bc69Tom Cherry << (!seclabel_.empty() ? seclabel_ : "default") << ") started; waiting..."; 843bac3299720623f4226bca103b26260052732ad30Tom Cherry } 844bac3299720623f4226bca103b26260052732ad30Tom Cherry 845bac3299720623f4226bca103b26260052732ad30Tom Cherry NotifyStateChange("running"); 846bac3299720623f4226bca103b26260052732ad30Tom Cherry return true; 847bac3299720623f4226bca103b26260052732ad30Tom Cherry} 848bac3299720623f4226bca103b26260052732ad30Tom Cherry 849bac3299720623f4226bca103b26260052732ad30Tom Cherrybool Service::StartIfNotDisabled() { 850bac3299720623f4226bca103b26260052732ad30Tom Cherry if (!(flags_ & SVC_DISABLED)) { 851bac3299720623f4226bca103b26260052732ad30Tom Cherry return Start(); 852bac3299720623f4226bca103b26260052732ad30Tom Cherry } else { 853bac3299720623f4226bca103b26260052732ad30Tom Cherry flags_ |= SVC_DISABLED_START; 854bac3299720623f4226bca103b26260052732ad30Tom Cherry } 855bac3299720623f4226bca103b26260052732ad30Tom Cherry return true; 856bac3299720623f4226bca103b26260052732ad30Tom Cherry} 857bac3299720623f4226bca103b26260052732ad30Tom Cherry 858bac3299720623f4226bca103b26260052732ad30Tom Cherrybool Service::Enable() { 859bac3299720623f4226bca103b26260052732ad30Tom Cherry flags_ &= ~(SVC_DISABLED | SVC_RC_DISABLED); 860bac3299720623f4226bca103b26260052732ad30Tom Cherry if (flags_ & SVC_DISABLED_START) { 861bac3299720623f4226bca103b26260052732ad30Tom Cherry return Start(); 862bac3299720623f4226bca103b26260052732ad30Tom Cherry } 863bac3299720623f4226bca103b26260052732ad30Tom Cherry return true; 864bac3299720623f4226bca103b26260052732ad30Tom Cherry} 865bac3299720623f4226bca103b26260052732ad30Tom Cherry 866bac3299720623f4226bca103b26260052732ad30Tom Cherryvoid Service::Reset() { 867bac3299720623f4226bca103b26260052732ad30Tom Cherry StopOrReset(SVC_RESET); 868bac3299720623f4226bca103b26260052732ad30Tom Cherry} 869bac3299720623f4226bca103b26260052732ad30Tom Cherry 870bac3299720623f4226bca103b26260052732ad30Tom Cherryvoid Service::Stop() { 871bac3299720623f4226bca103b26260052732ad30Tom Cherry StopOrReset(SVC_DISABLED); 872bac3299720623f4226bca103b26260052732ad30Tom Cherry} 873bac3299720623f4226bca103b26260052732ad30Tom Cherry 874b7e03e82b89a30b09fea88eaf2a5638df1017cf6Bertrand SIMONNETvoid Service::Terminate() { 875b7e03e82b89a30b09fea88eaf2a5638df1017cf6Bertrand SIMONNET flags_ &= ~(SVC_RESTARTING | SVC_DISABLED_START); 876b7e03e82b89a30b09fea88eaf2a5638df1017cf6Bertrand SIMONNET flags_ |= SVC_DISABLED; 877b7e03e82b89a30b09fea88eaf2a5638df1017cf6Bertrand SIMONNET if (pid_) { 878ad8e94e017173471e90c704eb7d8de5a14712aa7Elliott Hughes KillProcessGroup(SIGTERM); 879b7e03e82b89a30b09fea88eaf2a5638df1017cf6Bertrand SIMONNET NotifyStateChange("stopping"); 880b7e03e82b89a30b09fea88eaf2a5638df1017cf6Bertrand SIMONNET } 881b7e03e82b89a30b09fea88eaf2a5638df1017cf6Bertrand SIMONNET} 882b7e03e82b89a30b09fea88eaf2a5638df1017cf6Bertrand SIMONNET 883bac3299720623f4226bca103b26260052732ad30Tom Cherryvoid Service::Restart() { 884bac3299720623f4226bca103b26260052732ad30Tom Cherry if (flags_ & SVC_RUNNING) { 885bac3299720623f4226bca103b26260052732ad30Tom Cherry /* Stop, wait, then start the service. */ 886bac3299720623f4226bca103b26260052732ad30Tom Cherry StopOrReset(SVC_RESTART); 887bac3299720623f4226bca103b26260052732ad30Tom Cherry } else if (!(flags_ & SVC_RESTARTING)) { 888bac3299720623f4226bca103b26260052732ad30Tom Cherry /* Just start the service since it's not running. */ 889bac3299720623f4226bca103b26260052732ad30Tom Cherry Start(); 890bac3299720623f4226bca103b26260052732ad30Tom Cherry } /* else: Service is restarting anyways. */ 891bac3299720623f4226bca103b26260052732ad30Tom Cherry} 892bac3299720623f4226bca103b26260052732ad30Tom Cherry 8939605a945f7a497c0307b512b9cd762f2d23973caElliott Hughesvoid Service::RestartIfNeeded(time_t* process_needs_restart_at) { 8949605a945f7a497c0307b512b9cd762f2d23973caElliott Hughes boot_clock::time_point now = boot_clock::now(); 8959605a945f7a497c0307b512b9cd762f2d23973caElliott Hughes boot_clock::time_point next_start = time_started_ + 5s; 8969605a945f7a497c0307b512b9cd762f2d23973caElliott Hughes if (now > next_start) { 897bac3299720623f4226bca103b26260052732ad30Tom Cherry flags_ &= (~SVC_RESTARTING); 898bac3299720623f4226bca103b26260052732ad30Tom Cherry Start(); 899bac3299720623f4226bca103b26260052732ad30Tom Cherry return; 900bac3299720623f4226bca103b26260052732ad30Tom Cherry } 901bac3299720623f4226bca103b26260052732ad30Tom Cherry 9029605a945f7a497c0307b512b9cd762f2d23973caElliott Hughes time_t next_start_time_t = time(nullptr) + 9039605a945f7a497c0307b512b9cd762f2d23973caElliott Hughes time_t(std::chrono::duration_cast<std::chrono::seconds>(next_start - now).count()); 9049605a945f7a497c0307b512b9cd762f2d23973caElliott Hughes if (next_start_time_t < *process_needs_restart_at || *process_needs_restart_at == 0) { 9059605a945f7a497c0307b512b9cd762f2d23973caElliott Hughes *process_needs_restart_at = next_start_time_t; 906bac3299720623f4226bca103b26260052732ad30Tom Cherry } 907bac3299720623f4226bca103b26260052732ad30Tom Cherry} 908bac3299720623f4226bca103b26260052732ad30Tom Cherry 909ad8e94e017173471e90c704eb7d8de5a14712aa7Elliott Hughes// The how field should be either SVC_DISABLED, SVC_RESET, or SVC_RESTART. 910bac3299720623f4226bca103b26260052732ad30Tom Cherryvoid Service::StopOrReset(int how) { 911ad8e94e017173471e90c704eb7d8de5a14712aa7Elliott Hughes // The service is still SVC_RUNNING until its process exits, but if it has 912ad8e94e017173471e90c704eb7d8de5a14712aa7Elliott Hughes // already exited it shoudn't attempt a restart yet. 913bac3299720623f4226bca103b26260052732ad30Tom Cherry flags_ &= ~(SVC_RESTARTING | SVC_DISABLED_START); 914bac3299720623f4226bca103b26260052732ad30Tom Cherry 915bac3299720623f4226bca103b26260052732ad30Tom Cherry if ((how != SVC_DISABLED) && (how != SVC_RESET) && (how != SVC_RESTART)) { 916ad8e94e017173471e90c704eb7d8de5a14712aa7Elliott Hughes // An illegal flag: default to SVC_DISABLED. 917bac3299720623f4226bca103b26260052732ad30Tom Cherry how = SVC_DISABLED; 918bac3299720623f4226bca103b26260052732ad30Tom Cherry } 919ad8e94e017173471e90c704eb7d8de5a14712aa7Elliott Hughes 920ad8e94e017173471e90c704eb7d8de5a14712aa7Elliott Hughes // If the service has not yet started, prevent it from auto-starting with its class. 921bac3299720623f4226bca103b26260052732ad30Tom Cherry if (how == SVC_RESET) { 922bac3299720623f4226bca103b26260052732ad30Tom Cherry flags_ |= (flags_ & SVC_RC_DISABLED) ? SVC_DISABLED : SVC_RESET; 923bac3299720623f4226bca103b26260052732ad30Tom Cherry } else { 924bac3299720623f4226bca103b26260052732ad30Tom Cherry flags_ |= how; 925bac3299720623f4226bca103b26260052732ad30Tom Cherry } 926bac3299720623f4226bca103b26260052732ad30Tom Cherry 927bac3299720623f4226bca103b26260052732ad30Tom Cherry if (pid_) { 928ad8e94e017173471e90c704eb7d8de5a14712aa7Elliott Hughes KillProcessGroup(SIGKILL); 929bac3299720623f4226bca103b26260052732ad30Tom Cherry NotifyStateChange("stopping"); 930bac3299720623f4226bca103b26260052732ad30Tom Cherry } else { 931bac3299720623f4226bca103b26260052732ad30Tom Cherry NotifyStateChange("stopped"); 932bac3299720623f4226bca103b26260052732ad30Tom Cherry } 933bac3299720623f4226bca103b26260052732ad30Tom Cherry} 934bac3299720623f4226bca103b26260052732ad30Tom Cherry 935bac3299720623f4226bca103b26260052732ad30Tom Cherryvoid Service::ZapStdio() const { 936bac3299720623f4226bca103b26260052732ad30Tom Cherry int fd; 937bac3299720623f4226bca103b26260052732ad30Tom Cherry fd = open("/dev/null", O_RDWR); 938bac3299720623f4226bca103b26260052732ad30Tom Cherry dup2(fd, 0); 939bac3299720623f4226bca103b26260052732ad30Tom Cherry dup2(fd, 1); 940bac3299720623f4226bca103b26260052732ad30Tom Cherry dup2(fd, 2); 941bac3299720623f4226bca103b26260052732ad30Tom Cherry close(fd); 942bac3299720623f4226bca103b26260052732ad30Tom Cherry} 943bac3299720623f4226bca103b26260052732ad30Tom Cherry 944bac3299720623f4226bca103b26260052732ad30Tom Cherryvoid Service::OpenConsole() const { 94570daa67062c016eea1a30be2e1de0dcba1d23a13Viorel Suman int fd = open(console_.c_str(), O_RDWR); 94670daa67062c016eea1a30be2e1de0dcba1d23a13Viorel Suman if (fd == -1) fd = open("/dev/null", O_RDWR); 947bac3299720623f4226bca103b26260052732ad30Tom Cherry ioctl(fd, TIOCSCTTY, 0); 948bac3299720623f4226bca103b26260052732ad30Tom Cherry dup2(fd, 0); 949bac3299720623f4226bca103b26260052732ad30Tom Cherry dup2(fd, 1); 950bac3299720623f4226bca103b26260052732ad30Tom Cherry dup2(fd, 2); 951bac3299720623f4226bca103b26260052732ad30Tom Cherry close(fd); 952bac3299720623f4226bca103b26260052732ad30Tom Cherry} 953bac3299720623f4226bca103b26260052732ad30Tom Cherry 954bac3299720623f4226bca103b26260052732ad30Tom Cherryint ServiceManager::exec_count_ = 0; 955bac3299720623f4226bca103b26260052732ad30Tom Cherry 956bac3299720623f4226bca103b26260052732ad30Tom CherryServiceManager::ServiceManager() { 957bac3299720623f4226bca103b26260052732ad30Tom Cherry} 958bac3299720623f4226bca103b26260052732ad30Tom Cherry 959bac3299720623f4226bca103b26260052732ad30Tom CherryServiceManager& ServiceManager::GetInstance() { 960bac3299720623f4226bca103b26260052732ad30Tom Cherry static ServiceManager instance; 961bac3299720623f4226bca103b26260052732ad30Tom Cherry return instance; 962bac3299720623f4226bca103b26260052732ad30Tom Cherry} 963bac3299720623f4226bca103b26260052732ad30Tom Cherry 964b7349902a945903f9e36a569051f5131beb0bc24Tom Cherryvoid ServiceManager::AddService(std::unique_ptr<Service> service) { 965b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry services_.emplace_back(std::move(service)); 966bac3299720623f4226bca103b26260052732ad30Tom Cherry} 967bac3299720623f4226bca103b26260052732ad30Tom Cherry 968b27004aa05039b5196f1e878169dca41b68aadd6Tom Cherrybool ServiceManager::Exec(const std::vector<std::string>& args) { 969b27004aa05039b5196f1e878169dca41b68aadd6Tom Cherry Service* svc = MakeExecOneshotService(args); 970b27004aa05039b5196f1e878169dca41b68aadd6Tom Cherry if (!svc) { 971b27004aa05039b5196f1e878169dca41b68aadd6Tom Cherry LOG(ERROR) << "Could not create exec service"; 972b27004aa05039b5196f1e878169dca41b68aadd6Tom Cherry return false; 973b27004aa05039b5196f1e878169dca41b68aadd6Tom Cherry } 974b27004aa05039b5196f1e878169dca41b68aadd6Tom Cherry if (!svc->ExecStart(&exec_waiter_)) { 975b27004aa05039b5196f1e878169dca41b68aadd6Tom Cherry LOG(ERROR) << "Could not start exec service"; 976b27004aa05039b5196f1e878169dca41b68aadd6Tom Cherry ServiceManager::GetInstance().RemoveService(*svc); 977b27004aa05039b5196f1e878169dca41b68aadd6Tom Cherry return false; 978b27004aa05039b5196f1e878169dca41b68aadd6Tom Cherry } 979b27004aa05039b5196f1e878169dca41b68aadd6Tom Cherry return true; 980b27004aa05039b5196f1e878169dca41b68aadd6Tom Cherry} 981b27004aa05039b5196f1e878169dca41b68aadd6Tom Cherry 982b27004aa05039b5196f1e878169dca41b68aadd6Tom Cherrybool ServiceManager::ExecStart(const std::string& name) { 983b27004aa05039b5196f1e878169dca41b68aadd6Tom Cherry Service* svc = FindServiceByName(name); 984b27004aa05039b5196f1e878169dca41b68aadd6Tom Cherry if (!svc) { 985b27004aa05039b5196f1e878169dca41b68aadd6Tom Cherry LOG(ERROR) << "ExecStart(" << name << "): Service not found"; 986b27004aa05039b5196f1e878169dca41b68aadd6Tom Cherry return false; 987b27004aa05039b5196f1e878169dca41b68aadd6Tom Cherry } 988b27004aa05039b5196f1e878169dca41b68aadd6Tom Cherry if (!svc->ExecStart(&exec_waiter_)) { 989b27004aa05039b5196f1e878169dca41b68aadd6Tom Cherry LOG(ERROR) << "ExecStart(" << name << "): Could not start Service"; 990b27004aa05039b5196f1e878169dca41b68aadd6Tom Cherry return false; 991b27004aa05039b5196f1e878169dca41b68aadd6Tom Cherry } 992b27004aa05039b5196f1e878169dca41b68aadd6Tom Cherry return true; 993b27004aa05039b5196f1e878169dca41b68aadd6Tom Cherry} 994b27004aa05039b5196f1e878169dca41b68aadd6Tom Cherry 995b27004aa05039b5196f1e878169dca41b68aadd6Tom Cherrybool ServiceManager::IsWaitingForExec() const { return exec_waiter_ != nullptr; } 996b27004aa05039b5196f1e878169dca41b68aadd6Tom Cherry 997bac3299720623f4226bca103b26260052732ad30Tom CherryService* ServiceManager::MakeExecOneshotService(const std::vector<std::string>& args) { 998bac3299720623f4226bca103b26260052732ad30Tom Cherry // Parse the arguments: exec [SECLABEL [UID [GID]*] --] COMMAND ARGS... 999bac3299720623f4226bca103b26260052732ad30Tom Cherry // SECLABEL can be a - to denote default 1000bac3299720623f4226bca103b26260052732ad30Tom Cherry std::size_t command_arg = 1; 1001bac3299720623f4226bca103b26260052732ad30Tom Cherry for (std::size_t i = 1; i < args.size(); ++i) { 1002bac3299720623f4226bca103b26260052732ad30Tom Cherry if (args[i] == "--") { 1003bac3299720623f4226bca103b26260052732ad30Tom Cherry command_arg = i + 1; 1004bac3299720623f4226bca103b26260052732ad30Tom Cherry break; 1005bac3299720623f4226bca103b26260052732ad30Tom Cherry } 1006bac3299720623f4226bca103b26260052732ad30Tom Cherry } 1007bac3299720623f4226bca103b26260052732ad30Tom Cherry if (command_arg > 4 + NR_SVC_SUPP_GIDS) { 1008f86b5a6b90619e02d1d034ef7b0adc3b439f4abbElliott Hughes LOG(ERROR) << "exec called with too many supplementary group ids"; 1009bac3299720623f4226bca103b26260052732ad30Tom Cherry return nullptr; 1010bac3299720623f4226bca103b26260052732ad30Tom Cherry } 1011bac3299720623f4226bca103b26260052732ad30Tom Cherry 1012bac3299720623f4226bca103b26260052732ad30Tom Cherry if (command_arg >= args.size()) { 1013f86b5a6b90619e02d1d034ef7b0adc3b439f4abbElliott Hughes LOG(ERROR) << "exec called without command"; 1014bac3299720623f4226bca103b26260052732ad30Tom Cherry return nullptr; 1015bac3299720623f4226bca103b26260052732ad30Tom Cherry } 1016bac3299720623f4226bca103b26260052732ad30Tom Cherry std::vector<std::string> str_args(args.begin() + command_arg, args.end()); 1017bac3299720623f4226bca103b26260052732ad30Tom Cherry 1018bac3299720623f4226bca103b26260052732ad30Tom Cherry exec_count_++; 101981f5d3ebef2c3789737bf718fc2a2cdd7b9e8b33Tom Cherry std::string name = "exec " + std::to_string(exec_count_) + " (" + Join(str_args, " ") + ")"; 102086e31a81238fb30d113947e7689a38daf49097f3Tom Cherry 1021b27004aa05039b5196f1e878169dca41b68aadd6Tom Cherry unsigned flags = SVC_EXEC | SVC_ONESHOT | SVC_TEMPORARY; 102224b29132a017f7fbfd009c3e6aec499d1b815dbfJorge Lucangeli Obes CapSet no_capabilities; 10231b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes unsigned namespace_flags = 0; 1024bac3299720623f4226bca103b26260052732ad30Tom Cherry 1025bac3299720623f4226bca103b26260052732ad30Tom Cherry std::string seclabel = ""; 1026bac3299720623f4226bca103b26260052732ad30Tom Cherry if (command_arg > 2 && args[1] != "-") { 1027bac3299720623f4226bca103b26260052732ad30Tom Cherry seclabel = args[1]; 1028bac3299720623f4226bca103b26260052732ad30Tom Cherry } 1029bac3299720623f4226bca103b26260052732ad30Tom Cherry uid_t uid = 0; 1030bac3299720623f4226bca103b26260052732ad30Tom Cherry if (command_arg > 3) { 1031517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry std::string decode_uid_err; 1032517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry if (!DecodeUid(args[2], &uid, &decode_uid_err)) { 1033517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry LOG(ERROR) << "Unable to find UID for '" << args[2] << "': " << decode_uid_err; 1034517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry return nullptr; 1035517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry } 1036bac3299720623f4226bca103b26260052732ad30Tom Cherry } 1037bac3299720623f4226bca103b26260052732ad30Tom Cherry gid_t gid = 0; 1038bac3299720623f4226bca103b26260052732ad30Tom Cherry std::vector<gid_t> supp_gids; 1039bac3299720623f4226bca103b26260052732ad30Tom Cherry if (command_arg > 4) { 1040517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry std::string decode_uid_err; 1041517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry if (!DecodeUid(args[3], &gid, &decode_uid_err)) { 1042517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry LOG(ERROR) << "Unable to find GID for '" << args[3] << "': " << decode_uid_err; 1043517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry return nullptr; 1044517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry } 1045bac3299720623f4226bca103b26260052732ad30Tom Cherry std::size_t nr_supp_gids = command_arg - 1 /* -- */ - 4 /* exec SECLABEL UID GID */; 1046bac3299720623f4226bca103b26260052732ad30Tom Cherry for (size_t i = 0; i < nr_supp_gids; ++i) { 1047517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry gid_t supp_gid; 1048517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry if (!DecodeUid(args[4 + i], &supp_gid, &decode_uid_err)) { 1049517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry LOG(ERROR) << "Unable to find UID for '" << args[4 + i] << "': " << decode_uid_err; 1050517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry return nullptr; 1051517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry } 1052517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry supp_gids.push_back(supp_gid); 1053bac3299720623f4226bca103b26260052732ad30Tom Cherry } 1054bac3299720623f4226bca103b26260052732ad30Tom Cherry } 1055bac3299720623f4226bca103b26260052732ad30Tom Cherry 1056641ff0a4d8d05349d9c22f726a035a2936a2a94dWei Wang auto svc_p = std::make_unique<Service>(name, flags, uid, gid, supp_gids, no_capabilities, 1057641ff0a4d8d05349d9c22f726a035a2936a2a94dWei Wang namespace_flags, seclabel, str_args); 1058bac3299720623f4226bca103b26260052732ad30Tom Cherry Service* svc = svc_p.get(); 10599bdddd713af925a4be161f65e5fd66eccc8bd1ebTom Cherry services_.emplace_back(std::move(svc_p)); 1060bac3299720623f4226bca103b26260052732ad30Tom Cherry 1061bac3299720623f4226bca103b26260052732ad30Tom Cherry return svc; 1062bac3299720623f4226bca103b26260052732ad30Tom Cherry} 1063bac3299720623f4226bca103b26260052732ad30Tom Cherry 1064bac3299720623f4226bca103b26260052732ad30Tom CherryService* ServiceManager::FindServiceByName(const std::string& name) const { 1065bac3299720623f4226bca103b26260052732ad30Tom Cherry auto svc = std::find_if(services_.begin(), services_.end(), 1066bac3299720623f4226bca103b26260052732ad30Tom Cherry [&name] (const std::unique_ptr<Service>& s) { 1067bac3299720623f4226bca103b26260052732ad30Tom Cherry return name == s->name(); 1068bac3299720623f4226bca103b26260052732ad30Tom Cherry }); 1069bac3299720623f4226bca103b26260052732ad30Tom Cherry if (svc != services_.end()) { 1070bac3299720623f4226bca103b26260052732ad30Tom Cherry return svc->get(); 1071bac3299720623f4226bca103b26260052732ad30Tom Cherry } 1072bac3299720623f4226bca103b26260052732ad30Tom Cherry return nullptr; 1073bac3299720623f4226bca103b26260052732ad30Tom Cherry} 1074bac3299720623f4226bca103b26260052732ad30Tom Cherry 1075bac3299720623f4226bca103b26260052732ad30Tom CherryService* ServiceManager::FindServiceByPid(pid_t pid) const { 1076bac3299720623f4226bca103b26260052732ad30Tom Cherry auto svc = std::find_if(services_.begin(), services_.end(), 1077bac3299720623f4226bca103b26260052732ad30Tom Cherry [&pid] (const std::unique_ptr<Service>& s) { 1078bac3299720623f4226bca103b26260052732ad30Tom Cherry return s->pid() == pid; 1079bac3299720623f4226bca103b26260052732ad30Tom Cherry }); 1080bac3299720623f4226bca103b26260052732ad30Tom Cherry if (svc != services_.end()) { 1081bac3299720623f4226bca103b26260052732ad30Tom Cherry return svc->get(); 1082bac3299720623f4226bca103b26260052732ad30Tom Cherry } 1083bac3299720623f4226bca103b26260052732ad30Tom Cherry return nullptr; 1084bac3299720623f4226bca103b26260052732ad30Tom Cherry} 1085bac3299720623f4226bca103b26260052732ad30Tom Cherry 1086bac3299720623f4226bca103b26260052732ad30Tom CherryService* ServiceManager::FindServiceByKeychord(int keychord_id) const { 1087bac3299720623f4226bca103b26260052732ad30Tom Cherry auto svc = std::find_if(services_.begin(), services_.end(), 1088bac3299720623f4226bca103b26260052732ad30Tom Cherry [&keychord_id] (const std::unique_ptr<Service>& s) { 1089bac3299720623f4226bca103b26260052732ad30Tom Cherry return s->keychord_id() == keychord_id; 1090bac3299720623f4226bca103b26260052732ad30Tom Cherry }); 1091bac3299720623f4226bca103b26260052732ad30Tom Cherry 1092bac3299720623f4226bca103b26260052732ad30Tom Cherry if (svc != services_.end()) { 1093bac3299720623f4226bca103b26260052732ad30Tom Cherry return svc->get(); 1094bac3299720623f4226bca103b26260052732ad30Tom Cherry } 1095bac3299720623f4226bca103b26260052732ad30Tom Cherry return nullptr; 1096bac3299720623f4226bca103b26260052732ad30Tom Cherry} 1097bac3299720623f4226bca103b26260052732ad30Tom Cherry 10988f7b9e3d39cdae8363816aa7bcbab0d79fd70ceaChih-Hung Hsiehvoid ServiceManager::ForEachService(const std::function<void(Service*)>& callback) const { 1099bac3299720623f4226bca103b26260052732ad30Tom Cherry for (const auto& s : services_) { 1100b7e03e82b89a30b09fea88eaf2a5638df1017cf6Bertrand SIMONNET callback(s.get()); 1101bac3299720623f4226bca103b26260052732ad30Tom Cherry } 1102bac3299720623f4226bca103b26260052732ad30Tom Cherry} 1103bac3299720623f4226bca103b26260052732ad30Tom Cherry 11045938379e910c4cbd7ed2429901bb3c45e62405d4Tom Cherry// Shutdown services in the opposite order that they were started. 11055938379e910c4cbd7ed2429901bb3c45e62405d4Tom Cherryvoid ServiceManager::ForEachServiceShutdownOrder(const std::function<void(Service*)>& callback) const { 11065938379e910c4cbd7ed2429901bb3c45e62405d4Tom Cherry std::vector<Service*> shutdown_services; 11075938379e910c4cbd7ed2429901bb3c45e62405d4Tom Cherry for (const auto& service : services_) { 11085938379e910c4cbd7ed2429901bb3c45e62405d4Tom Cherry if (service->start_order() > 0) shutdown_services.emplace_back(service.get()); 11095938379e910c4cbd7ed2429901bb3c45e62405d4Tom Cherry } 11105938379e910c4cbd7ed2429901bb3c45e62405d4Tom Cherry std::sort(shutdown_services.begin(), shutdown_services.end(), 11115938379e910c4cbd7ed2429901bb3c45e62405d4Tom Cherry [](const auto& a, const auto& b) { return a->start_order() > b->start_order(); }); 11125938379e910c4cbd7ed2429901bb3c45e62405d4Tom Cherry for (const auto& service : shutdown_services) { 11135938379e910c4cbd7ed2429901bb3c45e62405d4Tom Cherry callback(service); 11145938379e910c4cbd7ed2429901bb3c45e62405d4Tom Cherry } 11155938379e910c4cbd7ed2429901bb3c45e62405d4Tom Cherry} 11165938379e910c4cbd7ed2429901bb3c45e62405d4Tom Cherry 1117bac3299720623f4226bca103b26260052732ad30Tom Cherryvoid ServiceManager::ForEachServiceInClass(const std::string& classname, 1118bac3299720623f4226bca103b26260052732ad30Tom Cherry void (*func)(Service* svc)) const { 1119bac3299720623f4226bca103b26260052732ad30Tom Cherry for (const auto& s : services_) { 1120641ff0a4d8d05349d9c22f726a035a2936a2a94dWei Wang if (s->classnames().find(classname) != s->classnames().end()) { 1121bac3299720623f4226bca103b26260052732ad30Tom Cherry func(s.get()); 1122bac3299720623f4226bca103b26260052732ad30Tom Cherry } 1123bac3299720623f4226bca103b26260052732ad30Tom Cherry } 1124bac3299720623f4226bca103b26260052732ad30Tom Cherry} 1125bac3299720623f4226bca103b26260052732ad30Tom Cherry 1126bac3299720623f4226bca103b26260052732ad30Tom Cherryvoid ServiceManager::ForEachServiceWithFlags(unsigned matchflags, 1127bac3299720623f4226bca103b26260052732ad30Tom Cherry void (*func)(Service* svc)) const { 1128bac3299720623f4226bca103b26260052732ad30Tom Cherry for (const auto& s : services_) { 1129bac3299720623f4226bca103b26260052732ad30Tom Cherry if (s->flags() & matchflags) { 1130bac3299720623f4226bca103b26260052732ad30Tom Cherry func(s.get()); 1131bac3299720623f4226bca103b26260052732ad30Tom Cherry } 1132bac3299720623f4226bca103b26260052732ad30Tom Cherry } 1133bac3299720623f4226bca103b26260052732ad30Tom Cherry} 1134bac3299720623f4226bca103b26260052732ad30Tom Cherry 1135b7349902a945903f9e36a569051f5131beb0bc24Tom Cherryvoid ServiceManager::RemoveService(const Service& svc) { 1136bac3299720623f4226bca103b26260052732ad30Tom Cherry auto svc_it = std::find_if(services_.begin(), services_.end(), 1137bac3299720623f4226bca103b26260052732ad30Tom Cherry [&svc] (const std::unique_ptr<Service>& s) { 1138bac3299720623f4226bca103b26260052732ad30Tom Cherry return svc.name() == s->name(); 1139bac3299720623f4226bca103b26260052732ad30Tom Cherry }); 1140bac3299720623f4226bca103b26260052732ad30Tom Cherry if (svc_it == services_.end()) { 1141bac3299720623f4226bca103b26260052732ad30Tom Cherry return; 1142bac3299720623f4226bca103b26260052732ad30Tom Cherry } 1143bac3299720623f4226bca103b26260052732ad30Tom Cherry 1144bac3299720623f4226bca103b26260052732ad30Tom Cherry services_.erase(svc_it); 1145bac3299720623f4226bca103b26260052732ad30Tom Cherry} 1146bac3299720623f4226bca103b26260052732ad30Tom Cherry 1147b7349902a945903f9e36a569051f5131beb0bc24Tom Cherryvoid ServiceManager::DumpState() const { 1148b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry for (const auto& s : services_) { 1149b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry s->DumpState(); 1150b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry } 1151b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry} 1152b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry 1153b7e03e82b89a30b09fea88eaf2a5638df1017cf6Bertrand SIMONNETbool ServiceManager::ReapOneProcess() { 11548d13d808a5634701c55276796683857ac2d5c99aTom Cherry siginfo_t siginfo = {}; 11558d13d808a5634701c55276796683857ac2d5c99aTom Cherry // This returns a zombie pid or informs us that there are no zombies left to be reaped. 11568d13d808a5634701c55276796683857ac2d5c99aTom Cherry // It does NOT reap the pid; that is done below. 11578d13d808a5634701c55276796683857ac2d5c99aTom Cherry if (TEMP_FAILURE_RETRY(waitid(P_ALL, 0, &siginfo, WEXITED | WNOHANG | WNOWAIT)) != 0) { 11588d13d808a5634701c55276796683857ac2d5c99aTom Cherry PLOG(ERROR) << "waitid failed"; 1159b7e03e82b89a30b09fea88eaf2a5638df1017cf6Bertrand SIMONNET return false; 11608d13d808a5634701c55276796683857ac2d5c99aTom Cherry } 11618d13d808a5634701c55276796683857ac2d5c99aTom Cherry 11628d13d808a5634701c55276796683857ac2d5c99aTom Cherry auto pid = siginfo.si_pid; 11638d13d808a5634701c55276796683857ac2d5c99aTom Cherry if (pid == 0) return false; 11648d13d808a5634701c55276796683857ac2d5c99aTom Cherry 11658d13d808a5634701c55276796683857ac2d5c99aTom Cherry // At this point we know we have a zombie pid, so we use this scopeguard to reap the pid 11668d13d808a5634701c55276796683857ac2d5c99aTom Cherry // whenever the function returns from this point forward. 11678d13d808a5634701c55276796683857ac2d5c99aTom Cherry // We do NOT want to reap the zombie earlier as in Service::Reap(), we kill(-pid, ...) and we 11688d13d808a5634701c55276796683857ac2d5c99aTom Cherry // want the pid to remain valid throughout that (and potentially future) usages. 11698d13d808a5634701c55276796683857ac2d5c99aTom Cherry auto reaper = make_scope_guard([pid] { TEMP_FAILURE_RETRY(waitpid(pid, nullptr, WNOHANG)); }); 11708d13d808a5634701c55276796683857ac2d5c99aTom Cherry 11718d13d808a5634701c55276796683857ac2d5c99aTom Cherry if (PropertyChildReap(pid)) { 117262696908ff840aeb3663b7510c0ae8ff208604f5Tom Marshall return true; 1173b7e03e82b89a30b09fea88eaf2a5638df1017cf6Bertrand SIMONNET } 1174b7e03e82b89a30b09fea88eaf2a5638df1017cf6Bertrand SIMONNET 1175b7e03e82b89a30b09fea88eaf2a5638df1017cf6Bertrand SIMONNET Service* svc = FindServiceByPid(pid); 1176b7e03e82b89a30b09fea88eaf2a5638df1017cf6Bertrand SIMONNET 1177b7e03e82b89a30b09fea88eaf2a5638df1017cf6Bertrand SIMONNET std::string name; 11784de31e1481dbbe6f08d85f341fa4884443433f35Keun-young Park std::string wait_string; 1179b7e03e82b89a30b09fea88eaf2a5638df1017cf6Bertrand SIMONNET if (svc) { 118081f5d3ebef2c3789737bf718fc2a2cdd7b9e8b33Tom Cherry name = StringPrintf("Service '%s' (pid %d)", svc->name().c_str(), pid); 11814de31e1481dbbe6f08d85f341fa4884443433f35Keun-young Park if (svc->flags() & SVC_EXEC) { 1182ede0d538501dfc78c741fb3b0645406636d1d1fdTom Cherry wait_string = StringPrintf(" waiting took %f seconds", 1183ede0d538501dfc78c741fb3b0645406636d1d1fdTom Cherry exec_waiter_->duration().count() / 1000.0f); 11844de31e1481dbbe6f08d85f341fa4884443433f35Keun-young Park } 1185b7e03e82b89a30b09fea88eaf2a5638df1017cf6Bertrand SIMONNET } else { 118681f5d3ebef2c3789737bf718fc2a2cdd7b9e8b33Tom Cherry name = StringPrintf("Untracked pid %d", pid); 1187b7e03e82b89a30b09fea88eaf2a5638df1017cf6Bertrand SIMONNET } 1188b7e03e82b89a30b09fea88eaf2a5638df1017cf6Bertrand SIMONNET 11898d13d808a5634701c55276796683857ac2d5c99aTom Cherry auto status = siginfo.si_status; 1190b7e03e82b89a30b09fea88eaf2a5638df1017cf6Bertrand SIMONNET if (WIFEXITED(status)) { 11914de31e1481dbbe6f08d85f341fa4884443433f35Keun-young Park LOG(INFO) << name << " exited with status " << WEXITSTATUS(status) << wait_string; 1192b7e03e82b89a30b09fea88eaf2a5638df1017cf6Bertrand SIMONNET } else if (WIFSIGNALED(status)) { 11934de31e1481dbbe6f08d85f341fa4884443433f35Keun-young Park LOG(INFO) << name << " killed by signal " << WTERMSIG(status) << wait_string; 1194b7e03e82b89a30b09fea88eaf2a5638df1017cf6Bertrand SIMONNET } 1195b7e03e82b89a30b09fea88eaf2a5638df1017cf6Bertrand SIMONNET 1196b7e03e82b89a30b09fea88eaf2a5638df1017cf6Bertrand SIMONNET if (!svc) { 1197b7e03e82b89a30b09fea88eaf2a5638df1017cf6Bertrand SIMONNET return true; 1198b7e03e82b89a30b09fea88eaf2a5638df1017cf6Bertrand SIMONNET } 1199b7e03e82b89a30b09fea88eaf2a5638df1017cf6Bertrand SIMONNET 1200b27004aa05039b5196f1e878169dca41b68aadd6Tom Cherry svc->Reap(); 1201b27004aa05039b5196f1e878169dca41b68aadd6Tom Cherry 1202b27004aa05039b5196f1e878169dca41b68aadd6Tom Cherry if (svc->flags() & SVC_EXEC) { 1203b27004aa05039b5196f1e878169dca41b68aadd6Tom Cherry exec_waiter_.reset(); 1204b27004aa05039b5196f1e878169dca41b68aadd6Tom Cherry } 1205b27004aa05039b5196f1e878169dca41b68aadd6Tom Cherry if (svc->flags() & SVC_TEMPORARY) { 1206b7e03e82b89a30b09fea88eaf2a5638df1017cf6Bertrand SIMONNET RemoveService(*svc); 1207b7e03e82b89a30b09fea88eaf2a5638df1017cf6Bertrand SIMONNET } 1208b7e03e82b89a30b09fea88eaf2a5638df1017cf6Bertrand SIMONNET 1209b7e03e82b89a30b09fea88eaf2a5638df1017cf6Bertrand SIMONNET return true; 1210b7e03e82b89a30b09fea88eaf2a5638df1017cf6Bertrand SIMONNET} 1211b7e03e82b89a30b09fea88eaf2a5638df1017cf6Bertrand SIMONNET 1212b7e03e82b89a30b09fea88eaf2a5638df1017cf6Bertrand SIMONNETvoid ServiceManager::ReapAnyOutstandingChildren() { 1213b7e03e82b89a30b09fea88eaf2a5638df1017cf6Bertrand SIMONNET while (ReapOneProcess()) { 1214b7e03e82b89a30b09fea88eaf2a5638df1017cf6Bertrand SIMONNET } 1215b7e03e82b89a30b09fea88eaf2a5638df1017cf6Bertrand SIMONNET} 1216b7e03e82b89a30b09fea88eaf2a5638df1017cf6Bertrand SIMONNET 1217eeab491efd8f456324f88e444f228b1016712e45Wei Wangvoid ServiceManager::ClearExecWait() { 1218eeab491efd8f456324f88e444f228b1016712e45Wei Wang // Clear EXEC flag if there is one pending 1219eeab491efd8f456324f88e444f228b1016712e45Wei Wang // And clear the wait flag 1220eeab491efd8f456324f88e444f228b1016712e45Wei Wang for (const auto& s : services_) { 1221eeab491efd8f456324f88e444f228b1016712e45Wei Wang s->UnSetExec(); 1222eeab491efd8f456324f88e444f228b1016712e45Wei Wang } 1223eeab491efd8f456324f88e444f228b1016712e45Wei Wang exec_waiter_.reset(); 1224eeab491efd8f456324f88e444f228b1016712e45Wei Wang} 1225eeab491efd8f456324f88e444f228b1016712e45Wei Wang 122630a6f276fd8850b0a78689d7bff3cb06a18cb286Tom Cherrybool ServiceParser::ParseSection(std::vector<std::string>&& args, const std::string& filename, 1227012c573e267b8dd70de14237cb470bd7301ee8eaTom Cherry int line, std::string* err) { 1228b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry if (args.size() < 3) { 1229b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry *err = "services must have a name and a program"; 1230b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry return false; 1231b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry } 1232b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry 1233b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry const std::string& name = args[1]; 1234b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry if (!IsValidName(name)) { 1235b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry *err = StringPrintf("invalid service name '%s'", name.c_str()); 1236b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry return false; 1237b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry } 1238b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry 123930a6f276fd8850b0a78689d7bff3cb06a18cb286Tom Cherry Service* old_service = service_manager_->FindServiceByName(name); 124030a6f276fd8850b0a78689d7bff3cb06a18cb286Tom Cherry if (old_service) { 124130a6f276fd8850b0a78689d7bff3cb06a18cb286Tom Cherry *err = "ignored duplicate definition of service '" + name + "'"; 124230a6f276fd8850b0a78689d7bff3cb06a18cb286Tom Cherry return false; 124330a6f276fd8850b0a78689d7bff3cb06a18cb286Tom Cherry } 124430a6f276fd8850b0a78689d7bff3cb06a18cb286Tom Cherry 1245b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry std::vector<std::string> str_args(args.begin() + 2, args.end()); 1246641ff0a4d8d05349d9c22f726a035a2936a2a94dWei Wang service_ = std::make_unique<Service>(name, str_args); 1247b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry return true; 1248b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry} 1249b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry 125030a6f276fd8850b0a78689d7bff3cb06a18cb286Tom Cherrybool ServiceParser::ParseLineSection(std::vector<std::string>&& args, int line, std::string* err) { 125130a6f276fd8850b0a78689d7bff3cb06a18cb286Tom Cherry return service_ ? service_->ParseLine(std::move(args), err) : false; 1252b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry} 1253b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry 1254b7349902a945903f9e36a569051f5131beb0bc24Tom Cherryvoid ServiceParser::EndSection() { 1255b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry if (service_) { 125630a6f276fd8850b0a78689d7bff3cb06a18cb286Tom Cherry service_manager_->AddService(std::move(service_)); 1257b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry } 1258b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry} 1259b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry 1260b7349902a945903f9e36a569051f5131beb0bc24Tom Cherrybool ServiceParser::IsValidName(const std::string& name) const { 1261b7788fd454da2201c6e48dededa9b11873ef621eElliott Hughes // Property names can be any length, but may only contain certain characters. 1262b7788fd454da2201c6e48dededa9b11873ef621eElliott Hughes // Property values can contain any characters, but may only be a certain length. 1263b7788fd454da2201c6e48dededa9b11873ef621eElliott Hughes // (The latter restriction is needed because `start` and `stop` work by writing 1264b7788fd454da2201c6e48dededa9b11873ef621eElliott Hughes // the service name to the "ctl.start" and "ctl.stop" properties.) 1265b7788fd454da2201c6e48dededa9b11873ef621eElliott Hughes return is_legal_property_name("init.svc." + name) && name.size() <= PROP_VALUE_MAX; 1266bac3299720623f4226bca103b26260052732ad30Tom Cherry} 126781f5d3ebef2c3789737bf718fc2a2cdd7b9e8b33Tom Cherry 126881f5d3ebef2c3789737bf718fc2a2cdd7b9e8b33Tom Cherry} // namespace init 126981f5d3ebef2c3789737bf718fc2a2cdd7b9e8b33Tom Cherry} // namespace android 1270