service.cpp revision cb0f9bbc855097e0c8248643015b837255fd569a
1bac3299720623f4226bca103b26260052732ad30Tom Cherry/* 2bac3299720623f4226bca103b26260052732ad30Tom Cherry * Copyright (C) 2015 The Android Open Source Project 3bac3299720623f4226bca103b26260052732ad30Tom Cherry * 4bac3299720623f4226bca103b26260052732ad30Tom Cherry * Licensed under the Apache License, Version 2.0 (the "License"); 5bac3299720623f4226bca103b26260052732ad30Tom Cherry * you may not use this file except in compliance with the License. 6bac3299720623f4226bca103b26260052732ad30Tom Cherry * You may obtain a copy of the License at 7bac3299720623f4226bca103b26260052732ad30Tom Cherry * 8bac3299720623f4226bca103b26260052732ad30Tom Cherry * http://www.apache.org/licenses/LICENSE-2.0 9bac3299720623f4226bca103b26260052732ad30Tom Cherry * 10bac3299720623f4226bca103b26260052732ad30Tom Cherry * Unless required by applicable law or agreed to in writing, software 11bac3299720623f4226bca103b26260052732ad30Tom Cherry * distributed under the License is distributed on an "AS IS" BASIS, 12bac3299720623f4226bca103b26260052732ad30Tom Cherry * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 13bac3299720623f4226bca103b26260052732ad30Tom Cherry * See the License for the specific language governing permissions and 14bac3299720623f4226bca103b26260052732ad30Tom Cherry * limitations under the License. 15bac3299720623f4226bca103b26260052732ad30Tom Cherry */ 16bac3299720623f4226bca103b26260052732ad30Tom Cherry 17bac3299720623f4226bca103b26260052732ad30Tom Cherry#include "service.h" 18bac3299720623f4226bca103b26260052732ad30Tom Cherry 19bac3299720623f4226bca103b26260052732ad30Tom Cherry#include <fcntl.h> 209605a945f7a497c0307b512b9cd762f2d23973caElliott Hughes#include <inttypes.h> 2124b29132a017f7fbfd009c3e6aec499d1b815dbfJorge Lucangeli Obes#include <linux/securebits.h> 221b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes#include <sched.h> 231b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes#include <sys/mount.h> 241b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes#include <sys/prctl.h> 25081705c258efbe938d71c2022528d809fa6d42c5Vitalii Tomkiv#include <sys/resource.h> 26bac3299720623f4226bca103b26260052732ad30Tom Cherry#include <sys/stat.h> 27f57c0bfab20b4fae10fc2e385d5e32fc93895670Tom Cherry#include <sys/system_properties.h> 28081705c258efbe938d71c2022528d809fa6d42c5Vitalii Tomkiv#include <sys/time.h> 29b7e03e82b89a30b09fea88eaf2a5638df1017cf6Bertrand SIMONNET#include <sys/wait.h> 30bac3299720623f4226bca103b26260052732ad30Tom Cherry#include <termios.h> 31af9ba4dc6ca98e136e887b0baa59b72fb8302dd3Dan Albert#include <unistd.h> 32bac3299720623f4226bca103b26260052732ad30Tom Cherry 334f71319df011d796a60a43fc1bc68e16fbf7d321Elliott Hughes#include <android-base/file.h> 343f5eaae526413a29de899270714469c76dc91ec8Tom Cherry#include <android-base/logging.h> 35da46b392f10d2809b5696632f67485f272ec5698Elliott Hughes#include <android-base/parseint.h> 36ccf23537eeacfa47e5f18dd3b75089886d177c1bTom Cherry#include <android-base/properties.h> 378d13d808a5634701c55276796683857ac2d5c99aTom Cherry#include <android-base/scopeguard.h> 384f71319df011d796a60a43fc1bc68e16fbf7d321Elliott Hughes#include <android-base/stringprintf.h> 39f86b5a6b90619e02d1d034ef7b0adc3b439f4abbElliott Hughes#include <android-base/strings.h> 40f7e79b99c1e9e3128dd9921871f7740bebb755e6Collin Mulliner#include <processgroup/processgroup.h> 413f5eaae526413a29de899270714469c76dc91ec8Tom Cherry#include <selinux/selinux.h> 423f5eaae526413a29de899270714469c76dc91ec8Tom Cherry#include <system/thread_defs.h> 43f7e79b99c1e9e3128dd9921871f7740bebb755e6Collin Mulliner 44bac3299720623f4226bca103b26260052732ad30Tom Cherry#include "init.h" 45bac3299720623f4226bca103b26260052732ad30Tom Cherry#include "property_service.h" 467ac013de7edc7ec6570ff6a5b6bd3bdce68b769cTom Cherry#include "rlimit_parser.h" 47bac3299720623f4226bca103b26260052732ad30Tom Cherry#include "util.h" 48bac3299720623f4226bca103b26260052732ad30Tom Cherry 49e78ea77f6992013b16fd57c07548b53129cdd12fJames Hawkinsusing android::base::boot_clock; 5081f5d3ebef2c3789737bf718fc2a2cdd7b9e8b33Tom Cherryusing android::base::GetProperty; 5181f5d3ebef2c3789737bf718fc2a2cdd7b9e8b33Tom Cherryusing android::base::Join; 528d13d808a5634701c55276796683857ac2d5c99aTom Cherryusing android::base::make_scope_guard; 53da46b392f10d2809b5696632f67485f272ec5698Elliott Hughesusing android::base::ParseInt; 5481f5d3ebef2c3789737bf718fc2a2cdd7b9e8b33Tom Cherryusing android::base::StartsWith; 55b7349902a945903f9e36a569051f5131beb0bc24Tom Cherryusing android::base::StringPrintf; 56b7349902a945903f9e36a569051f5131beb0bc24Tom Cherryusing android::base::WriteStringToFile; 57b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry 5881f5d3ebef2c3789737bf718fc2a2cdd7b9e8b33Tom Cherrynamespace android { 5981f5d3ebef2c3789737bf718fc2a2cdd7b9e8b33Tom Cherrynamespace init { 6081f5d3ebef2c3789737bf718fc2a2cdd7b9e8b33Tom Cherry 6176af7e6a0c4ce7759e6cc5994b5496ddb09035eeTom Cherrystatic Result<std::string> ComputeContextFromExecutable(std::string& service_name, 6276af7e6a0c4ce7759e6cc5994b5496ddb09035eeTom Cherry const std::string& service_path) { 63344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes std::string computed_context; 64344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes 65344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes char* raw_con = nullptr; 66344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes char* raw_filecon = nullptr; 67344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes 68344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes if (getcon(&raw_con) == -1) { 6976af7e6a0c4ce7759e6cc5994b5496ddb09035eeTom Cherry return Error() << "Could not get security context"; 70344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes } 71344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes std::unique_ptr<char> mycon(raw_con); 72344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes 73344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes if (getfilecon(service_path.c_str(), &raw_filecon) == -1) { 7476af7e6a0c4ce7759e6cc5994b5496ddb09035eeTom Cherry return Error() << "Could not get file context"; 75344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes } 76344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes std::unique_ptr<char> filecon(raw_filecon); 77344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes 78344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes char* new_con = nullptr; 79344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes int rc = security_compute_create(mycon.get(), filecon.get(), 80344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes string_to_security_class("process"), &new_con); 81344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes if (rc == 0) { 82344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes computed_context = new_con; 83344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes free(new_con); 84344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes } 85344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes if (rc == 0 && computed_context == mycon.get()) { 861ea19eb44d58759ed65dc7aa8da8215e5f976858Nick Kralevich return Error() << "File " << service_path << "(labeled \"" << filecon.get() 871ea19eb44d58759ed65dc7aa8da8215e5f976858Nick Kralevich << "\") has incorrect label or no domain transition from " << mycon.get() 881ea19eb44d58759ed65dc7aa8da8215e5f976858Nick Kralevich << " to another SELinux domain defined. Have you configured your " 891ea19eb44d58759ed65dc7aa8da8215e5f976858Nick Kralevich "service correctly? https://source.android.com/security/selinux/" 901ea19eb44d58759ed65dc7aa8da8215e5f976858Nick Kralevich "device-policy#label_new_services_and_address_denials"; 91344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes } 92344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes if (rc < 0) { 9376af7e6a0c4ce7759e6cc5994b5496ddb09035eeTom Cherry return Error() << "Could not get process context"; 94344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes } 95344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes return computed_context; 96344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes} 97344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes 981b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obesstatic void SetUpPidNamespace(const std::string& service_name) { 991b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes constexpr unsigned int kSafeFlags = MS_NODEV | MS_NOEXEC | MS_NOSUID; 1001b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes 1011b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes // It's OK to LOG(FATAL) in this function since it's running in the first 1021b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes // child process. 1031b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes if (mount("", "/proc", "proc", kSafeFlags | MS_REMOUNT, "") == -1) { 104e18e7e5c43c39677c6d49f8f76893d720f90b4fbElliott Hughes PLOG(FATAL) << "couldn't remount(/proc) for " << service_name; 1051b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes } 1061b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes 1071b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes if (prctl(PR_SET_NAME, service_name.c_str()) == -1) { 108e18e7e5c43c39677c6d49f8f76893d720f90b4fbElliott Hughes PLOG(FATAL) << "couldn't set name for " << service_name; 1091b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes } 1101b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes 1111b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes pid_t child_pid = fork(); 1121b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes if (child_pid == -1) { 113e18e7e5c43c39677c6d49f8f76893d720f90b4fbElliott Hughes PLOG(FATAL) << "couldn't fork init inside the PID namespace for " << service_name; 1141b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes } 1151b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes 1161b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes if (child_pid > 0) { 1171b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes // So that we exit with the right status. 1181b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes static int init_exitstatus = 0; 1191b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes signal(SIGTERM, [](int) { _exit(init_exitstatus); }); 1201b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes 1211b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes pid_t waited_pid; 1221b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes int status; 1231b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes while ((waited_pid = wait(&status)) > 0) { 1241b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes // This loop will end when there are no processes left inside the 1251b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes // PID namespace or when the init process inside the PID namespace 1261b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes // gets a signal. 1271b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes if (waited_pid == child_pid) { 1281b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes init_exitstatus = status; 1291b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes } 1301b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes } 1311b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes if (!WIFEXITED(init_exitstatus)) { 1321b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes _exit(EXIT_FAILURE); 1331b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes } 1341b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes _exit(WEXITSTATUS(init_exitstatus)); 1351b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes } 1361b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes} 1371b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes 1385e405cacb1f3ef2265fcc71dbbf6a39c1e7dc1c1Tom Cherrystatic bool ExpandArgsAndExecv(const std::vector<std::string>& args) { 139344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes std::vector<std::string> expanded_args; 1405e405cacb1f3ef2265fcc71dbbf6a39c1e7dc1c1Tom Cherry std::vector<char*> c_strings; 1415e405cacb1f3ef2265fcc71dbbf6a39c1e7dc1c1Tom Cherry 142344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes expanded_args.resize(args.size()); 1435e405cacb1f3ef2265fcc71dbbf6a39c1e7dc1c1Tom Cherry c_strings.push_back(const_cast<char*>(args[0].data())); 144344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes for (std::size_t i = 1; i < args.size(); ++i) { 145344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes if (!expand_props(args[i], &expanded_args[i])) { 146344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes LOG(FATAL) << args[0] << ": cannot expand '" << args[i] << "'"; 147344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes } 1485e405cacb1f3ef2265fcc71dbbf6a39c1e7dc1c1Tom Cherry c_strings.push_back(expanded_args[i].data()); 149344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes } 1505e405cacb1f3ef2265fcc71dbbf6a39c1e7dc1c1Tom Cherry c_strings.push_back(nullptr); 1515e405cacb1f3ef2265fcc71dbbf6a39c1e7dc1c1Tom Cherry 1525e405cacb1f3ef2265fcc71dbbf6a39c1e7dc1c1Tom Cherry return execv(c_strings[0], c_strings.data()) == 0; 153344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes} 154344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes 1555938379e910c4cbd7ed2429901bb3c45e62405d4Tom Cherryunsigned long Service::next_start_order_ = 1; 1563b81f2d623c6cba45ad07fa91338d346d9b96482Tom Cherrybool Service::is_exec_service_running_ = false; 1575938379e910c4cbd7ed2429901bb3c45e62405d4Tom Cherry 158cb0f9bbc855097e0c8248643015b837255fd569aTom CherryService::Service(const std::string& name, Subcontext* subcontext_for_restart_commands, 159cb0f9bbc855097e0c8248643015b837255fd569aTom Cherry const std::vector<std::string>& args) 160cb0f9bbc855097e0c8248643015b837255fd569aTom Cherry : Service(name, 0, 0, 0, {}, 0, 0, "", subcontext_for_restart_commands, args) {} 161bac3299720623f4226bca103b26260052732ad30Tom Cherry 162641ff0a4d8d05349d9c22f726a035a2936a2a94dWei WangService::Service(const std::string& name, unsigned flags, uid_t uid, gid_t gid, 163641ff0a4d8d05349d9c22f726a035a2936a2a94dWei Wang const std::vector<gid_t>& supp_gids, const CapSet& capabilities, 164641ff0a4d8d05349d9c22f726a035a2936a2a94dWei Wang unsigned namespace_flags, const std::string& seclabel, 165cb0f9bbc855097e0c8248643015b837255fd569aTom Cherry Subcontext* subcontext_for_restart_commands, const std::vector<std::string>& args) 166641ff0a4d8d05349d9c22f726a035a2936a2a94dWei Wang : name_(name), 167641ff0a4d8d05349d9c22f726a035a2936a2a94dWei Wang classnames_({"default"}), 168641ff0a4d8d05349d9c22f726a035a2936a2a94dWei Wang flags_(flags), 169641ff0a4d8d05349d9c22f726a035a2936a2a94dWei Wang pid_(0), 170641ff0a4d8d05349d9c22f726a035a2936a2a94dWei Wang crash_count_(0), 171641ff0a4d8d05349d9c22f726a035a2936a2a94dWei Wang uid_(uid), 172641ff0a4d8d05349d9c22f726a035a2936a2a94dWei Wang gid_(gid), 173641ff0a4d8d05349d9c22f726a035a2936a2a94dWei Wang supp_gids_(supp_gids), 174641ff0a4d8d05349d9c22f726a035a2936a2a94dWei Wang capabilities_(capabilities), 175641ff0a4d8d05349d9c22f726a035a2936a2a94dWei Wang namespace_flags_(namespace_flags), 176641ff0a4d8d05349d9c22f726a035a2936a2a94dWei Wang seclabel_(seclabel), 177cb0f9bbc855097e0c8248643015b837255fd569aTom Cherry onrestart_(false, subcontext_for_restart_commands, "<Service '" + name + "' onrestart>", 0), 1787da548578c25683fe0082283303e16961df312daTom Cherry keychord_id_(0), 179641ff0a4d8d05349d9c22f726a035a2936a2a94dWei Wang ioprio_class_(IoSchedClass_NONE), 180641ff0a4d8d05349d9c22f726a035a2936a2a94dWei Wang ioprio_pri_(0), 181641ff0a4d8d05349d9c22f726a035a2936a2a94dWei Wang priority_(0), 182641ff0a4d8d05349d9c22f726a035a2936a2a94dWei Wang oom_score_adjust_(-1000), 183d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea swappiness_(-1), 184d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea soft_limit_in_bytes_(-1), 185d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea limit_in_bytes_(-1), 1865938379e910c4cbd7ed2429901bb3c45e62405d4Tom Cherry start_order_(0), 187641ff0a4d8d05349d9c22f726a035a2936a2a94dWei Wang args_(args) { 188bac3299720623f4226bca103b26260052732ad30Tom Cherry onrestart_.InitSingleTrigger("onrestart"); 189bac3299720623f4226bca103b26260052732ad30Tom Cherry} 190bac3299720623f4226bca103b26260052732ad30Tom Cherry 191bac3299720623f4226bca103b26260052732ad30Tom Cherryvoid Service::NotifyStateChange(const std::string& new_state) const { 192b27004aa05039b5196f1e878169dca41b68aadd6Tom Cherry if ((flags_ & SVC_TEMPORARY) != 0) { 193b27004aa05039b5196f1e878169dca41b68aadd6Tom Cherry // Services created by 'exec' are temporary and don't have properties tracking their state. 194bac3299720623f4226bca103b26260052732ad30Tom Cherry return; 195bac3299720623f4226bca103b26260052732ad30Tom Cherry } 196bac3299720623f4226bca103b26260052732ad30Tom Cherry 1971c3a53f03ca3c2c647f83cd8b8ae7e18c5c7bc69Tom Cherry std::string prop_name = "init.svc." + name_; 1981c3a53f03ca3c2c647f83cd8b8ae7e18c5c7bc69Tom Cherry property_set(prop_name, new_state); 1999605a945f7a497c0307b512b9cd762f2d23973caElliott Hughes 2009605a945f7a497c0307b512b9cd762f2d23973caElliott Hughes if (new_state == "running") { 2019605a945f7a497c0307b512b9cd762f2d23973caElliott Hughes uint64_t start_ns = time_started_.time_since_epoch().count(); 202fed3373b5b671613c615b63800eb3977bb1911eaTom Cherry std::string boottime_property = "ro.boottime." + name_; 203fed3373b5b671613c615b63800eb3977bb1911eaTom Cherry if (GetProperty(boottime_property, "").empty()) { 204fed3373b5b671613c615b63800eb3977bb1911eaTom Cherry property_set(boottime_property, std::to_string(start_ns)); 205fed3373b5b671613c615b63800eb3977bb1911eaTom Cherry } 2069605a945f7a497c0307b512b9cd762f2d23973caElliott Hughes } 207bac3299720623f4226bca103b26260052732ad30Tom Cherry} 208bac3299720623f4226bca103b26260052732ad30Tom Cherry 209ad8e94e017173471e90c704eb7d8de5a14712aa7Elliott Hughesvoid Service::KillProcessGroup(int signal) { 21033838b1156cd1a5f8eec94756bee9e030a3dd2ebTom Cherry // If we've already seen a successful result from killProcessGroup*(), then we have removed 21133838b1156cd1a5f8eec94756bee9e030a3dd2ebTom Cherry // the cgroup already and calling these functions a second time will simply result in an error. 21233838b1156cd1a5f8eec94756bee9e030a3dd2ebTom Cherry // This is true regardless of which signal was sent. 21333838b1156cd1a5f8eec94756bee9e030a3dd2ebTom Cherry // These functions handle their own logging, so no additional logging is needed. 21433838b1156cd1a5f8eec94756bee9e030a3dd2ebTom Cherry if (!process_cgroup_empty_) { 21533838b1156cd1a5f8eec94756bee9e030a3dd2ebTom Cherry LOG(INFO) << "Sending signal " << signal << " to service '" << name_ << "' (pid " << pid_ 21633838b1156cd1a5f8eec94756bee9e030a3dd2ebTom Cherry << ") process group..."; 21733838b1156cd1a5f8eec94756bee9e030a3dd2ebTom Cherry int r; 21833838b1156cd1a5f8eec94756bee9e030a3dd2ebTom Cherry if (signal == SIGTERM) { 21933838b1156cd1a5f8eec94756bee9e030a3dd2ebTom Cherry r = killProcessGroupOnce(uid_, pid_, signal); 22033838b1156cd1a5f8eec94756bee9e030a3dd2ebTom Cherry } else { 22133838b1156cd1a5f8eec94756bee9e030a3dd2ebTom Cherry r = killProcessGroup(uid_, pid_, signal); 22233838b1156cd1a5f8eec94756bee9e030a3dd2ebTom Cherry } 22333838b1156cd1a5f8eec94756bee9e030a3dd2ebTom Cherry 22433838b1156cd1a5f8eec94756bee9e030a3dd2ebTom Cherry if (r == 0) process_cgroup_empty_ = true; 22533838b1156cd1a5f8eec94756bee9e030a3dd2ebTom Cherry } 226ad8e94e017173471e90c704eb7d8de5a14712aa7Elliott Hughes} 227ad8e94e017173471e90c704eb7d8de5a14712aa7Elliott Hughes 228344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obesvoid Service::SetProcessAttributes() { 2297ac013de7edc7ec6570ff6a5b6bd3bdce68b769cTom Cherry for (const auto& rlimit : rlimits_) { 2307ac013de7edc7ec6570ff6a5b6bd3bdce68b769cTom Cherry if (setrlimit(rlimit.first, &rlimit.second) == -1) { 2317ac013de7edc7ec6570ff6a5b6bd3bdce68b769cTom Cherry LOG(FATAL) << StringPrintf("setrlimit(%d, {rlim_cur=%ld, rlim_max=%ld}) failed", 2327ac013de7edc7ec6570ff6a5b6bd3bdce68b769cTom Cherry rlimit.first, rlimit.second.rlim_cur, rlimit.second.rlim_max); 2337ac013de7edc7ec6570ff6a5b6bd3bdce68b769cTom Cherry } 2347ac013de7edc7ec6570ff6a5b6bd3bdce68b769cTom Cherry } 23524b29132a017f7fbfd009c3e6aec499d1b815dbfJorge Lucangeli Obes // Keep capabilites on uid change. 23624b29132a017f7fbfd009c3e6aec499d1b815dbfJorge Lucangeli Obes if (capabilities_.any() && uid_) { 237f5965519d183ff188273689d151bfc2cb20ece2aLuis Hector Chavez // If Android is running in a container, some securebits might already 238f5965519d183ff188273689d151bfc2cb20ece2aLuis Hector Chavez // be locked, so don't change those. 239a72436067d5f88885e4b32fa7c5d22f1ea8c0756Ben Fennema unsigned long securebits = prctl(PR_GET_SECUREBITS); 240a72436067d5f88885e4b32fa7c5d22f1ea8c0756Ben Fennema if (securebits == -1UL) { 241f5965519d183ff188273689d151bfc2cb20ece2aLuis Hector Chavez PLOG(FATAL) << "prctl(PR_GET_SECUREBITS) failed for " << name_; 242f5965519d183ff188273689d151bfc2cb20ece2aLuis Hector Chavez } 243f5965519d183ff188273689d151bfc2cb20ece2aLuis Hector Chavez securebits |= SECBIT_KEEP_CAPS | SECBIT_KEEP_CAPS_LOCKED; 244f5965519d183ff188273689d151bfc2cb20ece2aLuis Hector Chavez if (prctl(PR_SET_SECUREBITS, securebits) != 0) { 245f5965519d183ff188273689d151bfc2cb20ece2aLuis Hector Chavez PLOG(FATAL) << "prctl(PR_SET_SECUREBITS) failed for " << name_; 24624b29132a017f7fbfd009c3e6aec499d1b815dbfJorge Lucangeli Obes } 24724b29132a017f7fbfd009c3e6aec499d1b815dbfJorge Lucangeli Obes } 24824b29132a017f7fbfd009c3e6aec499d1b815dbfJorge Lucangeli Obes 249e18e7e5c43c39677c6d49f8f76893d720f90b4fbElliott Hughes // TODO: work out why this fails for `console` then upgrade to FATAL. 250e18e7e5c43c39677c6d49f8f76893d720f90b4fbElliott Hughes if (setpgid(0, getpid()) == -1) PLOG(ERROR) << "setpgid failed for " << name_; 251344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes 252344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes if (gid_) { 253344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes if (setgid(gid_) != 0) { 254e18e7e5c43c39677c6d49f8f76893d720f90b4fbElliott Hughes PLOG(FATAL) << "setgid failed for " << name_; 255344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes } 256344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes } 25780960d2a9a6e15931d946cc826dcb3d5bf68ca4fNick Kralevich if (setgroups(supp_gids_.size(), &supp_gids_[0]) != 0) { 25880960d2a9a6e15931d946cc826dcb3d5bf68ca4fNick Kralevich PLOG(FATAL) << "setgroups failed for " << name_; 259344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes } 260344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes if (uid_) { 261344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes if (setuid(uid_) != 0) { 262e18e7e5c43c39677c6d49f8f76893d720f90b4fbElliott Hughes PLOG(FATAL) << "setuid failed for " << name_; 263344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes } 264344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes } 265344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes if (!seclabel_.empty()) { 266344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes if (setexeccon(seclabel_.c_str()) < 0) { 267e18e7e5c43c39677c6d49f8f76893d720f90b4fbElliott Hughes PLOG(FATAL) << "cannot setexeccon('" << seclabel_ << "') for " << name_; 268344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes } 269344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes } 270344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes if (priority_ != 0) { 271344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes if (setpriority(PRIO_PROCESS, 0, priority_) != 0) { 272e18e7e5c43c39677c6d49f8f76893d720f90b4fbElliott Hughes PLOG(FATAL) << "setpriority failed for " << name_; 273344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes } 274344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes } 27524b29132a017f7fbfd009c3e6aec499d1b815dbfJorge Lucangeli Obes if (capabilities_.any()) { 27624b29132a017f7fbfd009c3e6aec499d1b815dbfJorge Lucangeli Obes if (!SetCapsForExec(capabilities_)) { 27724b29132a017f7fbfd009c3e6aec499d1b815dbfJorge Lucangeli Obes LOG(FATAL) << "cannot set capabilities for " << name_; 27824b29132a017f7fbfd009c3e6aec499d1b815dbfJorge Lucangeli Obes } 27924b29132a017f7fbfd009c3e6aec499d1b815dbfJorge Lucangeli Obes } 280344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes} 281344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes 282b27004aa05039b5196f1e878169dca41b68aadd6Tom Cherryvoid Service::Reap() { 283bac3299720623f4226bca103b26260052732ad30Tom Cherry if (!(flags_ & SVC_ONESHOT) || (flags_ & SVC_RESTART)) { 284ad8e94e017173471e90c704eb7d8de5a14712aa7Elliott Hughes KillProcessGroup(SIGKILL); 285bac3299720623f4226bca103b26260052732ad30Tom Cherry } 286bac3299720623f4226bca103b26260052732ad30Tom Cherry 28762767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn // Remove any descriptor resources we may have created. 28862767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn std::for_each(descriptors_.begin(), descriptors_.end(), 28962767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn std::bind(&DescriptorInfo::Clean, std::placeholders::_1)); 290bac3299720623f4226bca103b26260052732ad30Tom Cherry 2913b81f2d623c6cba45ad07fa91338d346d9b96482Tom Cherry if (flags_ & SVC_EXEC) UnSetExec(); 2923b81f2d623c6cba45ad07fa91338d346d9b96482Tom Cherry 2933b81f2d623c6cba45ad07fa91338d346d9b96482Tom Cherry if (flags_ & SVC_TEMPORARY) return; 294bac3299720623f4226bca103b26260052732ad30Tom Cherry 295bac3299720623f4226bca103b26260052732ad30Tom Cherry pid_ = 0; 296bac3299720623f4226bca103b26260052732ad30Tom Cherry flags_ &= (~SVC_RUNNING); 2975938379e910c4cbd7ed2429901bb3c45e62405d4Tom Cherry start_order_ = 0; 298bac3299720623f4226bca103b26260052732ad30Tom Cherry 299bac3299720623f4226bca103b26260052732ad30Tom Cherry // Oneshot processes go into the disabled state on exit, 300bac3299720623f4226bca103b26260052732ad30Tom Cherry // except when manually restarted. 301bac3299720623f4226bca103b26260052732ad30Tom Cherry if ((flags_ & SVC_ONESHOT) && !(flags_ & SVC_RESTART)) { 302bac3299720623f4226bca103b26260052732ad30Tom Cherry flags_ |= SVC_DISABLED; 303bac3299720623f4226bca103b26260052732ad30Tom Cherry } 304bac3299720623f4226bca103b26260052732ad30Tom Cherry 305bac3299720623f4226bca103b26260052732ad30Tom Cherry // Disabled and reset processes do not get restarted automatically. 306bac3299720623f4226bca103b26260052732ad30Tom Cherry if (flags_ & (SVC_DISABLED | SVC_RESET)) { 307bac3299720623f4226bca103b26260052732ad30Tom Cherry NotifyStateChange("stopped"); 308b27004aa05039b5196f1e878169dca41b68aadd6Tom Cherry return; 309bac3299720623f4226bca103b26260052732ad30Tom Cherry } 310bac3299720623f4226bca103b26260052732ad30Tom Cherry 3119605a945f7a497c0307b512b9cd762f2d23973caElliott Hughes // If we crash > 4 times in 4 minutes, reboot into recovery. 3129605a945f7a497c0307b512b9cd762f2d23973caElliott Hughes boot_clock::time_point now = boot_clock::now(); 313bac3299720623f4226bca103b26260052732ad30Tom Cherry if ((flags_ & SVC_CRITICAL) && !(flags_ & SVC_RESTART)) { 3149605a945f7a497c0307b512b9cd762f2d23973caElliott Hughes if (now < time_crashed_ + 4min) { 3159605a945f7a497c0307b512b9cd762f2d23973caElliott Hughes if (++crash_count_ > 4) { 316d8db7ab80d8a79c89393fa0c4ab343e85312d8d5Tom Cherry LOG(FATAL) << "critical process '" << name_ << "' exited 4 times in 4 minutes"; 317bac3299720623f4226bca103b26260052732ad30Tom Cherry } 318bac3299720623f4226bca103b26260052732ad30Tom Cherry } else { 319bac3299720623f4226bca103b26260052732ad30Tom Cherry time_crashed_ = now; 3209605a945f7a497c0307b512b9cd762f2d23973caElliott Hughes crash_count_ = 1; 321bac3299720623f4226bca103b26260052732ad30Tom Cherry } 322bac3299720623f4226bca103b26260052732ad30Tom Cherry } 323bac3299720623f4226bca103b26260052732ad30Tom Cherry 324bac3299720623f4226bca103b26260052732ad30Tom Cherry flags_ &= (~SVC_RESTART); 325bac3299720623f4226bca103b26260052732ad30Tom Cherry flags_ |= SVC_RESTARTING; 326bac3299720623f4226bca103b26260052732ad30Tom Cherry 327bac3299720623f4226bca103b26260052732ad30Tom Cherry // Execute all onrestart commands for this service. 328bac3299720623f4226bca103b26260052732ad30Tom Cherry onrestart_.ExecuteAllCommands(); 329bac3299720623f4226bca103b26260052732ad30Tom Cherry 330bac3299720623f4226bca103b26260052732ad30Tom Cherry NotifyStateChange("restarting"); 331b27004aa05039b5196f1e878169dca41b68aadd6Tom Cherry return; 332bac3299720623f4226bca103b26260052732ad30Tom Cherry} 333bac3299720623f4226bca103b26260052732ad30Tom Cherry 334bac3299720623f4226bca103b26260052732ad30Tom Cherryvoid Service::DumpState() const { 335f86b5a6b90619e02d1d034ef7b0adc3b439f4abbElliott Hughes LOG(INFO) << "service " << name_; 33681f5d3ebef2c3789737bf718fc2a2cdd7b9e8b33Tom Cherry LOG(INFO) << " class '" << Join(classnames_, " ") << "'"; 33781f5d3ebef2c3789737bf718fc2a2cdd7b9e8b33Tom Cherry LOG(INFO) << " exec " << Join(args_, " "); 33862767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn std::for_each(descriptors_.begin(), descriptors_.end(), 33962767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn [] (const auto& info) { LOG(INFO) << *info; }); 340bac3299720623f4226bca103b26260052732ad30Tom Cherry} 341bac3299720623f4226bca103b26260052732ad30Tom Cherry 34289bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom CherryResult<Success> Service::ParseCapabilities(const std::vector<std::string>& args) { 34324b29132a017f7fbfd009c3e6aec499d1b815dbfJorge Lucangeli Obes capabilities_ = 0; 34424b29132a017f7fbfd009c3e6aec499d1b815dbfJorge Lucangeli Obes 345f3f824ee42892fb69cb0d9b0557cd9c5aed357d2Jorge Lucangeli Obes if (!CapAmbientSupported()) { 34689bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Error() 34789bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry << "capabilities requested but the kernel does not support ambient capabilities"; 348f3f824ee42892fb69cb0d9b0557cd9c5aed357d2Jorge Lucangeli Obes } 349f3f824ee42892fb69cb0d9b0557cd9c5aed357d2Jorge Lucangeli Obes 350f3f824ee42892fb69cb0d9b0557cd9c5aed357d2Jorge Lucangeli Obes unsigned int last_valid_cap = GetLastValidCap(); 351f3f824ee42892fb69cb0d9b0557cd9c5aed357d2Jorge Lucangeli Obes if (last_valid_cap >= capabilities_.size()) { 352f3f824ee42892fb69cb0d9b0557cd9c5aed357d2Jorge Lucangeli Obes LOG(WARNING) << "last valid run-time capability is larger than CAP_LAST_CAP"; 353f3f824ee42892fb69cb0d9b0557cd9c5aed357d2Jorge Lucangeli Obes } 354f3f824ee42892fb69cb0d9b0557cd9c5aed357d2Jorge Lucangeli Obes 35524b29132a017f7fbfd009c3e6aec499d1b815dbfJorge Lucangeli Obes for (size_t i = 1; i < args.size(); i++) { 35624b29132a017f7fbfd009c3e6aec499d1b815dbfJorge Lucangeli Obes const std::string& arg = args[i]; 357f3f824ee42892fb69cb0d9b0557cd9c5aed357d2Jorge Lucangeli Obes int res = LookupCap(arg); 358f3f824ee42892fb69cb0d9b0557cd9c5aed357d2Jorge Lucangeli Obes if (res < 0) { 35989bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Error() << StringPrintf("invalid capability '%s'", arg.c_str()); 36024b29132a017f7fbfd009c3e6aec499d1b815dbfJorge Lucangeli Obes } 361f3f824ee42892fb69cb0d9b0557cd9c5aed357d2Jorge Lucangeli Obes unsigned int cap = static_cast<unsigned int>(res); // |res| is >= 0. 362f3f824ee42892fb69cb0d9b0557cd9c5aed357d2Jorge Lucangeli Obes if (cap > last_valid_cap) { 36389bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Error() << StringPrintf("capability '%s' not supported by the kernel", 36489bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry arg.c_str()); 365f3f824ee42892fb69cb0d9b0557cd9c5aed357d2Jorge Lucangeli Obes } 36624b29132a017f7fbfd009c3e6aec499d1b815dbfJorge Lucangeli Obes capabilities_[cap] = true; 36724b29132a017f7fbfd009c3e6aec499d1b815dbfJorge Lucangeli Obes } 36889bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Success(); 36924b29132a017f7fbfd009c3e6aec499d1b815dbfJorge Lucangeli Obes} 37024b29132a017f7fbfd009c3e6aec499d1b815dbfJorge Lucangeli Obes 37189bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom CherryResult<Success> Service::ParseClass(const std::vector<std::string>& args) { 372641ff0a4d8d05349d9c22f726a035a2936a2a94dWei Wang classnames_ = std::set<std::string>(args.begin() + 1, args.end()); 37389bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Success(); 374b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry} 375bac3299720623f4226bca103b26260052732ad30Tom Cherry 37689bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom CherryResult<Success> Service::ParseConsole(const std::vector<std::string>& args) { 377b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry flags_ |= SVC_CONSOLE; 37870daa67062c016eea1a30be2e1de0dcba1d23a13Viorel Suman console_ = args.size() > 1 ? "/dev/" + args[1] : ""; 37989bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Success(); 380b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry} 381bac3299720623f4226bca103b26260052732ad30Tom Cherry 38289bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom CherryResult<Success> Service::ParseCritical(const std::vector<std::string>& args) { 383b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry flags_ |= SVC_CRITICAL; 38489bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Success(); 385b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry} 386bac3299720623f4226bca103b26260052732ad30Tom Cherry 38789bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom CherryResult<Success> Service::ParseDisabled(const std::vector<std::string>& args) { 388b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry flags_ |= SVC_DISABLED; 389b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry flags_ |= SVC_RC_DISABLED; 39089bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Success(); 391b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry} 392bac3299720623f4226bca103b26260052732ad30Tom Cherry 39389bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom CherryResult<Success> Service::ParseGroup(const std::vector<std::string>& args) { 39411a3aeeae3dc887b889d4086d4d26d95c324c08dTom Cherry auto gid = DecodeUid(args[1]); 39511a3aeeae3dc887b889d4086d4d26d95c324c08dTom Cherry if (!gid) { 39689bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Error() << "Unable to decode GID for '" << args[1] << "': " << gid.error(); 397517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry } 39811a3aeeae3dc887b889d4086d4d26d95c324c08dTom Cherry gid_ = *gid; 39911a3aeeae3dc887b889d4086d4d26d95c324c08dTom Cherry 400b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry for (std::size_t n = 2; n < args.size(); n++) { 40111a3aeeae3dc887b889d4086d4d26d95c324c08dTom Cherry gid = DecodeUid(args[n]); 40211a3aeeae3dc887b889d4086d4d26d95c324c08dTom Cherry if (!gid) { 40389bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Error() << "Unable to decode GID for '" << args[n] << "': " << gid.error(); 404517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry } 40511a3aeeae3dc887b889d4086d4d26d95c324c08dTom Cherry supp_gids_.emplace_back(*gid); 406b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry } 40789bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Success(); 408b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry} 409bac3299720623f4226bca103b26260052732ad30Tom Cherry 41089bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom CherryResult<Success> Service::ParsePriority(const std::vector<std::string>& args) { 411da46b392f10d2809b5696632f67485f272ec5698Elliott Hughes priority_ = 0; 412da46b392f10d2809b5696632f67485f272ec5698Elliott Hughes if (!ParseInt(args[1], &priority_, 413dd34ca45ea80c519a579578562e73d5e7f86703bKeun-young Park static_cast<int>(ANDROID_PRIORITY_HIGHEST), // highest is negative 414dd34ca45ea80c519a579578562e73d5e7f86703bKeun-young Park static_cast<int>(ANDROID_PRIORITY_LOWEST))) { 41589bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Error() << StringPrintf("process priority value must be range %d - %d", 41689bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry ANDROID_PRIORITY_HIGHEST, ANDROID_PRIORITY_LOWEST); 417081705c258efbe938d71c2022528d809fa6d42c5Vitalii Tomkiv } 41889bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Success(); 419081705c258efbe938d71c2022528d809fa6d42c5Vitalii Tomkiv} 420081705c258efbe938d71c2022528d809fa6d42c5Vitalii Tomkiv 42189bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom CherryResult<Success> Service::ParseIoprio(const std::vector<std::string>& args) { 422da46b392f10d2809b5696632f67485f272ec5698Elliott Hughes if (!ParseInt(args[2], &ioprio_pri_, 0, 7)) { 42389bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Error() << "priority value must be range 0 - 7"; 424b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry } 425b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry 426b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry if (args[1] == "rt") { 427b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry ioprio_class_ = IoSchedClass_RT; 428b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry } else if (args[1] == "be") { 429b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry ioprio_class_ = IoSchedClass_BE; 430b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry } else if (args[1] == "idle") { 431b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry ioprio_class_ = IoSchedClass_IDLE; 432b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry } else { 43389bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Error() << "ioprio option usage: ioprio <rt|be|idle> <0-7>"; 434bac3299720623f4226bca103b26260052732ad30Tom Cherry } 435bac3299720623f4226bca103b26260052732ad30Tom Cherry 43689bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Success(); 437b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry} 438bac3299720623f4226bca103b26260052732ad30Tom Cherry 43989bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom CherryResult<Success> Service::ParseKeycodes(const std::vector<std::string>& args) { 440b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry for (std::size_t i = 1; i < args.size(); i++) { 441da46b392f10d2809b5696632f67485f272ec5698Elliott Hughes int code; 442da46b392f10d2809b5696632f67485f272ec5698Elliott Hughes if (ParseInt(args[i], &code)) { 443da46b392f10d2809b5696632f67485f272ec5698Elliott Hughes keycodes_.emplace_back(code); 444da46b392f10d2809b5696632f67485f272ec5698Elliott Hughes } else { 445da46b392f10d2809b5696632f67485f272ec5698Elliott Hughes LOG(WARNING) << "ignoring invalid keycode: " << args[i]; 446da46b392f10d2809b5696632f67485f272ec5698Elliott Hughes } 447bac3299720623f4226bca103b26260052732ad30Tom Cherry } 44889bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Success(); 449b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry} 450b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry 45189bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom CherryResult<Success> Service::ParseOneshot(const std::vector<std::string>& args) { 452b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry flags_ |= SVC_ONESHOT; 45389bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Success(); 454b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry} 455b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry 45689bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom CherryResult<Success> Service::ParseOnrestart(const std::vector<std::string>& args) { 457b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry std::vector<std::string> str_args(args.begin() + 1, args.end()); 458012c573e267b8dd70de14237cb470bd7301ee8eaTom Cherry int line = onrestart_.NumCommands() + 1; 45989bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry if (auto result = onrestart_.AddCommand(str_args, line); !result) { 46089bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Error() << "cannot add Onrestart command: " << result.error(); 46189bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry } 46289bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Success(); 463b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry} 464bac3299720623f4226bca103b26260052732ad30Tom Cherry 46589bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom CherryResult<Success> Service::ParseNamespace(const std::vector<std::string>& args) { 4661b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes for (size_t i = 1; i < args.size(); i++) { 4671b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes if (args[i] == "pid") { 4681b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes namespace_flags_ |= CLONE_NEWPID; 4691b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes // PID namespaces require mount namespaces. 4701b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes namespace_flags_ |= CLONE_NEWNS; 4711b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes } else if (args[i] == "mnt") { 4721b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes namespace_flags_ |= CLONE_NEWNS; 4731b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes } else { 47489bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Error() << "namespace must be 'pid' or 'mnt'"; 4751b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes } 4761b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes } 47789bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Success(); 4781b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes} 4791b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes 48089bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom CherryResult<Success> Service::ParseOomScoreAdjust(const std::vector<std::string>& args) { 481da46b392f10d2809b5696632f67485f272ec5698Elliott Hughes if (!ParseInt(args[1], &oom_score_adjust_, -1000, 1000)) { 48289bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Error() << "oom_score_adjust value must be in range -1000 - +1000"; 483310f6704d0dfe9ca4cfb153ce8e4212cc7596190Marco Nelissen } 48489bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Success(); 485310f6704d0dfe9ca4cfb153ce8e4212cc7596190Marco Nelissen} 486310f6704d0dfe9ca4cfb153ce8e4212cc7596190Marco Nelissen 48789bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom CherryResult<Success> Service::ParseMemcgSwappiness(const std::vector<std::string>& args) { 488d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea if (!ParseInt(args[1], &swappiness_, 0)) { 48989bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Error() << "swappiness value must be equal or greater than 0"; 490d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea } 49189bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Success(); 492d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea} 493d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea 49489bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom CherryResult<Success> Service::ParseMemcgLimitInBytes(const std::vector<std::string>& args) { 495d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea if (!ParseInt(args[1], &limit_in_bytes_, 0)) { 49689bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Error() << "limit_in_bytes value must be equal or greater than 0"; 497d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea } 49889bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Success(); 499d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea} 500d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea 50189bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom CherryResult<Success> Service::ParseMemcgSoftLimitInBytes(const std::vector<std::string>& args) { 502d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea if (!ParseInt(args[1], &soft_limit_in_bytes_, 0)) { 50389bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Error() << "soft_limit_in_bytes value must be equal or greater than 0"; 504d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea } 50589bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Success(); 506d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea} 507d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea 5087ac013de7edc7ec6570ff6a5b6bd3bdce68b769cTom CherryResult<Success> Service::ParseProcessRlimit(const std::vector<std::string>& args) { 5097ac013de7edc7ec6570ff6a5b6bd3bdce68b769cTom Cherry auto rlimit = ParseRlimit(args); 5107ac013de7edc7ec6570ff6a5b6bd3bdce68b769cTom Cherry if (!rlimit) return rlimit.error(); 5117ac013de7edc7ec6570ff6a5b6bd3bdce68b769cTom Cherry 5127ac013de7edc7ec6570ff6a5b6bd3bdce68b769cTom Cherry rlimits_.emplace_back(*rlimit); 5137ac013de7edc7ec6570ff6a5b6bd3bdce68b769cTom Cherry return Success(); 5147ac013de7edc7ec6570ff6a5b6bd3bdce68b769cTom Cherry} 5157ac013de7edc7ec6570ff6a5b6bd3bdce68b769cTom Cherry 51689bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom CherryResult<Success> Service::ParseSeclabel(const std::vector<std::string>& args) { 517b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry seclabel_ = args[1]; 51889bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Success(); 519b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry} 520b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry 52189bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom CherryResult<Success> Service::ParseSetenv(const std::vector<std::string>& args) { 5226de21f11125941ea1b94fdeec754bacea3916fd5Tom Cherry environment_vars_.emplace_back(args[1], args[2]); 52389bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Success(); 524b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry} 525b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry 52689bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom CherryResult<Success> Service::ParseShutdown(const std::vector<std::string>& args) { 527cccb34fce8798f2a359c6eb0e394ef9460673629Keun-young Park if (args[1] == "critical") { 528cccb34fce8798f2a359c6eb0e394ef9460673629Keun-young Park flags_ |= SVC_SHUTDOWN_CRITICAL; 52989bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Success(); 530cccb34fce8798f2a359c6eb0e394ef9460673629Keun-young Park } 53189bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Error() << "Invalid shutdown option"; 532cccb34fce8798f2a359c6eb0e394ef9460673629Keun-young Park} 533cccb34fce8798f2a359c6eb0e394ef9460673629Keun-young Park 53462767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyntemplate <typename T> 53589bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom CherryResult<Success> Service::AddDescriptor(const std::vector<std::string>& args) { 53662767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn int perm = args.size() > 3 ? std::strtoul(args[3].c_str(), 0, 8) : -1; 53711a3aeeae3dc887b889d4086d4d26d95c324c08dTom Cherry Result<uid_t> uid = 0; 53811a3aeeae3dc887b889d4086d4d26d95c324c08dTom Cherry Result<gid_t> gid = 0; 53962767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn std::string context = args.size() > 6 ? args[6] : ""; 54062767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn 541517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry if (args.size() > 4) { 54211a3aeeae3dc887b889d4086d4d26d95c324c08dTom Cherry uid = DecodeUid(args[4]); 54311a3aeeae3dc887b889d4086d4d26d95c324c08dTom Cherry if (!uid) { 54489bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Error() << "Unable to find UID for '" << args[4] << "': " << uid.error(); 545517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry } 546517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry } 547517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry 548517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry if (args.size() > 5) { 54911a3aeeae3dc887b889d4086d4d26d95c324c08dTom Cherry gid = DecodeUid(args[5]); 55011a3aeeae3dc887b889d4086d4d26d95c324c08dTom Cherry if (!gid) { 55189bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Error() << "Unable to find GID for '" << args[5] << "': " << gid.error(); 552517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry } 553517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry } 554517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry 55511a3aeeae3dc887b889d4086d4d26d95c324c08dTom Cherry auto descriptor = std::make_unique<T>(args[1], args[2], *uid, *gid, perm, context); 55662767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn 55762767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn auto old = 55862767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn std::find_if(descriptors_.begin(), descriptors_.end(), 55962767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn [&descriptor] (const auto& other) { return descriptor.get() == other.get(); }); 56062767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn 56162767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn if (old != descriptors_.end()) { 56289bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Error() << "duplicate descriptor " << args[1] << " " << args[2]; 56362767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn } 56462767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn 56562767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn descriptors_.emplace_back(std::move(descriptor)); 56689bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Success(); 56762767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn} 56862767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn 56962767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn// name type perm [ uid gid context ] 57089bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom CherryResult<Success> Service::ParseSocket(const std::vector<std::string>& args) { 57181f5d3ebef2c3789737bf718fc2a2cdd7b9e8b33Tom Cherry if (!StartsWith(args[2], "dgram") && !StartsWith(args[2], "stream") && 57281f5d3ebef2c3789737bf718fc2a2cdd7b9e8b33Tom Cherry !StartsWith(args[2], "seqpacket")) { 57389bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Error() << "socket type must be 'dgram', 'stream' or 'seqpacket'"; 574bac3299720623f4226bca103b26260052732ad30Tom Cherry } 57589bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return AddDescriptor<SocketInfo>(args); 57662767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn} 577b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry 57862767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn// name type perm [ uid gid context ] 57989bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom CherryResult<Success> Service::ParseFile(const std::vector<std::string>& args) { 58062767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn if (args[2] != "r" && args[2] != "w" && args[2] != "rw") { 58189bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Error() << "file type must be 'r', 'w' or 'rw'"; 58262767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn } 58362767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn if ((args[1][0] != '/') || (args[1].find("../") != std::string::npos)) { 58489bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Error() << "file name must not be relative"; 58562767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn } 58689bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return AddDescriptor<FileInfo>(args); 587bac3299720623f4226bca103b26260052732ad30Tom Cherry} 588bac3299720623f4226bca103b26260052732ad30Tom Cherry 58989bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom CherryResult<Success> Service::ParseUser(const std::vector<std::string>& args) { 59011a3aeeae3dc887b889d4086d4d26d95c324c08dTom Cherry auto uid = DecodeUid(args[1]); 59111a3aeeae3dc887b889d4086d4d26d95c324c08dTom Cherry if (!uid) { 59289bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Error() << "Unable to find UID for '" << args[1] << "': " << uid.error(); 593517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry } 59411a3aeeae3dc887b889d4086d4d26d95c324c08dTom Cherry uid_ = *uid; 59589bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Success(); 596b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry} 597b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry 59889bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom CherryResult<Success> Service::ParseWritepid(const std::vector<std::string>& args) { 599b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry writepid_files_.assign(args.begin() + 1, args.end()); 60089bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Success(); 601b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry} 602b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry 603177b27d4f5bfa498cc46aad24d9375d65630bea0Jorge Lucangeli Obesclass Service::OptionParserMap : public KeywordMap<OptionParser> { 604ad54d094cde838d19034b8325705b22dca0e9af0Tom Cherry public: 605ad54d094cde838d19034b8325705b22dca0e9af0Tom Cherry OptionParserMap() {} 606ad54d094cde838d19034b8325705b22dca0e9af0Tom Cherry 607ad54d094cde838d19034b8325705b22dca0e9af0Tom Cherry private: 608ad54d094cde838d19034b8325705b22dca0e9af0Tom Cherry const Map& map() const override; 609b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry}; 610b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry 611ad54d094cde838d19034b8325705b22dca0e9af0Tom Cherryconst Service::OptionParserMap::Map& Service::OptionParserMap::map() const { 612b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry constexpr std::size_t kMax = std::numeric_limits<std::size_t>::max(); 613641ff0a4d8d05349d9c22f726a035a2936a2a94dWei Wang // clang-format off 614177b27d4f5bfa498cc46aad24d9375d65630bea0Jorge Lucangeli Obes static const Map option_parsers = { 61524b29132a017f7fbfd009c3e6aec499d1b815dbfJorge Lucangeli Obes {"capabilities", 61624b29132a017f7fbfd009c3e6aec499d1b815dbfJorge Lucangeli Obes {1, kMax, &Service::ParseCapabilities}}, 617641ff0a4d8d05349d9c22f726a035a2936a2a94dWei Wang {"class", {1, kMax, &Service::ParseClass}}, 618177b27d4f5bfa498cc46aad24d9375d65630bea0Jorge Lucangeli Obes {"console", {0, 1, &Service::ParseConsole}}, 619177b27d4f5bfa498cc46aad24d9375d65630bea0Jorge Lucangeli Obes {"critical", {0, 0, &Service::ParseCritical}}, 620177b27d4f5bfa498cc46aad24d9375d65630bea0Jorge Lucangeli Obes {"disabled", {0, 0, &Service::ParseDisabled}}, 621177b27d4f5bfa498cc46aad24d9375d65630bea0Jorge Lucangeli Obes {"group", {1, NR_SVC_SUPP_GIDS + 1, &Service::ParseGroup}}, 622177b27d4f5bfa498cc46aad24d9375d65630bea0Jorge Lucangeli Obes {"ioprio", {2, 2, &Service::ParseIoprio}}, 623177b27d4f5bfa498cc46aad24d9375d65630bea0Jorge Lucangeli Obes {"priority", {1, 1, &Service::ParsePriority}}, 624177b27d4f5bfa498cc46aad24d9375d65630bea0Jorge Lucangeli Obes {"keycodes", {1, kMax, &Service::ParseKeycodes}}, 625177b27d4f5bfa498cc46aad24d9375d65630bea0Jorge Lucangeli Obes {"oneshot", {0, 0, &Service::ParseOneshot}}, 626177b27d4f5bfa498cc46aad24d9375d65630bea0Jorge Lucangeli Obes {"onrestart", {1, kMax, &Service::ParseOnrestart}}, 627310f6704d0dfe9ca4cfb153ce8e4212cc7596190Marco Nelissen {"oom_score_adjust", 628310f6704d0dfe9ca4cfb153ce8e4212cc7596190Marco Nelissen {1, 1, &Service::ParseOomScoreAdjust}}, 629d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea {"memcg.swappiness", 630d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea {1, 1, &Service::ParseMemcgSwappiness}}, 631d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea {"memcg.soft_limit_in_bytes", 632d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea {1, 1, &Service::ParseMemcgSoftLimitInBytes}}, 633d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea {"memcg.limit_in_bytes", 634d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea {1, 1, &Service::ParseMemcgLimitInBytes}}, 635177b27d4f5bfa498cc46aad24d9375d65630bea0Jorge Lucangeli Obes {"namespace", {1, 2, &Service::ParseNamespace}}, 6367ac013de7edc7ec6570ff6a5b6bd3bdce68b769cTom Cherry {"rlimit", {3, 3, &Service::ParseProcessRlimit}}, 637177b27d4f5bfa498cc46aad24d9375d65630bea0Jorge Lucangeli Obes {"seclabel", {1, 1, &Service::ParseSeclabel}}, 638177b27d4f5bfa498cc46aad24d9375d65630bea0Jorge Lucangeli Obes {"setenv", {2, 2, &Service::ParseSetenv}}, 639cccb34fce8798f2a359c6eb0e394ef9460673629Keun-young Park {"shutdown", {1, 1, &Service::ParseShutdown}}, 640177b27d4f5bfa498cc46aad24d9375d65630bea0Jorge Lucangeli Obes {"socket", {3, 6, &Service::ParseSocket}}, 641978fd0ea254f11f84e38b41a74bbe70c81edc197Mark Salyzyn {"file", {2, 2, &Service::ParseFile}}, 642177b27d4f5bfa498cc46aad24d9375d65630bea0Jorge Lucangeli Obes {"user", {1, 1, &Service::ParseUser}}, 643177b27d4f5bfa498cc46aad24d9375d65630bea0Jorge Lucangeli Obes {"writepid", {1, kMax, &Service::ParseWritepid}}, 644b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry }; 645641ff0a4d8d05349d9c22f726a035a2936a2a94dWei Wang // clang-format on 646177b27d4f5bfa498cc46aad24d9375d65630bea0Jorge Lucangeli Obes return option_parsers; 647b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry} 648b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry 64989bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom CherryResult<Success> Service::ParseLine(const std::vector<std::string>& args) { 650177b27d4f5bfa498cc46aad24d9375d65630bea0Jorge Lucangeli Obes static const OptionParserMap parser_map; 65189bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry auto parser = parser_map.FindFunction(args); 652b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry 65376af7e6a0c4ce7759e6cc5994b5496ddb09035eeTom Cherry if (!parser) return parser.error(); 654b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry 65589bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return std::invoke(*parser, this, args); 656b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry} 657b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry 65876af7e6a0c4ce7759e6cc5994b5496ddb09035eeTom CherryResult<Success> Service::ExecStart() { 6593b81f2d623c6cba45ad07fa91338d346d9b96482Tom Cherry flags_ |= SVC_ONESHOT; 660b27004aa05039b5196f1e878169dca41b68aadd6Tom Cherry 66176af7e6a0c4ce7759e6cc5994b5496ddb09035eeTom Cherry if (auto result = Start(); !result) { 66276af7e6a0c4ce7759e6cc5994b5496ddb09035eeTom Cherry return result; 663b27004aa05039b5196f1e878169dca41b68aadd6Tom Cherry } 6643b81f2d623c6cba45ad07fa91338d346d9b96482Tom Cherry 6653b81f2d623c6cba45ad07fa91338d346d9b96482Tom Cherry flags_ |= SVC_EXEC; 6663b81f2d623c6cba45ad07fa91338d346d9b96482Tom Cherry is_exec_service_running_ = true; 6673b81f2d623c6cba45ad07fa91338d346d9b96482Tom Cherry 6683b81f2d623c6cba45ad07fa91338d346d9b96482Tom Cherry LOG(INFO) << "SVC_EXEC pid " << pid_ << " (uid " << uid_ << " gid " << gid_ << "+" 6693b81f2d623c6cba45ad07fa91338d346d9b96482Tom Cherry << supp_gids_.size() << " context " << (!seclabel_.empty() ? seclabel_ : "default") 6703b81f2d623c6cba45ad07fa91338d346d9b96482Tom Cherry << ") started; waiting..."; 6713b81f2d623c6cba45ad07fa91338d346d9b96482Tom Cherry 67276af7e6a0c4ce7759e6cc5994b5496ddb09035eeTom Cherry return Success(); 673b27004aa05039b5196f1e878169dca41b68aadd6Tom Cherry} 674b27004aa05039b5196f1e878169dca41b68aadd6Tom Cherry 67576af7e6a0c4ce7759e6cc5994b5496ddb09035eeTom CherryResult<Success> Service::Start() { 676bac3299720623f4226bca103b26260052732ad30Tom Cherry // Starting a service removes it from the disabled or reset state and 677bac3299720623f4226bca103b26260052732ad30Tom Cherry // immediately takes it out of the restarting state if it was in there. 678bac3299720623f4226bca103b26260052732ad30Tom Cherry flags_ &= (~(SVC_DISABLED|SVC_RESTARTING|SVC_RESET|SVC_RESTART|SVC_DISABLED_START)); 679bac3299720623f4226bca103b26260052732ad30Tom Cherry 680bac3299720623f4226bca103b26260052732ad30Tom Cherry // Running processes require no additional work --- if they're in the 681bac3299720623f4226bca103b26260052732ad30Tom Cherry // process of exiting, we've ensured that they will immediately restart 682bac3299720623f4226bca103b26260052732ad30Tom Cherry // on exit, unless they are ONESHOT. 683bac3299720623f4226bca103b26260052732ad30Tom Cherry if (flags_ & SVC_RUNNING) { 68476af7e6a0c4ce7759e6cc5994b5496ddb09035eeTom Cherry // It is not an error to try to start a service that is already running. 68576af7e6a0c4ce7759e6cc5994b5496ddb09035eeTom Cherry return Success(); 686bac3299720623f4226bca103b26260052732ad30Tom Cherry } 687bac3299720623f4226bca103b26260052732ad30Tom Cherry 688bac3299720623f4226bca103b26260052732ad30Tom Cherry bool needs_console = (flags_ & SVC_CONSOLE); 68970daa67062c016eea1a30be2e1de0dcba1d23a13Viorel Suman if (needs_console) { 69070daa67062c016eea1a30be2e1de0dcba1d23a13Viorel Suman if (console_.empty()) { 69170daa67062c016eea1a30be2e1de0dcba1d23a13Viorel Suman console_ = default_console; 69270daa67062c016eea1a30be2e1de0dcba1d23a13Viorel Suman } 69370daa67062c016eea1a30be2e1de0dcba1d23a13Viorel Suman 69424ef8601c203a28b85a5e9168e5bada713e6a8f1Adrian Salido // Make sure that open call succeeds to ensure a console driver is 69524ef8601c203a28b85a5e9168e5bada713e6a8f1Adrian Salido // properly registered for the device node 69624ef8601c203a28b85a5e9168e5bada713e6a8f1Adrian Salido int console_fd = open(console_.c_str(), O_RDWR | O_CLOEXEC); 69724ef8601c203a28b85a5e9168e5bada713e6a8f1Adrian Salido if (console_fd < 0) { 69870daa67062c016eea1a30be2e1de0dcba1d23a13Viorel Suman flags_ |= SVC_DISABLED; 69976af7e6a0c4ce7759e6cc5994b5496ddb09035eeTom Cherry return ErrnoError() << "Couldn't open console '" << console_ << "'"; 70070daa67062c016eea1a30be2e1de0dcba1d23a13Viorel Suman } 70124ef8601c203a28b85a5e9168e5bada713e6a8f1Adrian Salido close(console_fd); 702bac3299720623f4226bca103b26260052732ad30Tom Cherry } 703bac3299720623f4226bca103b26260052732ad30Tom Cherry 704bac3299720623f4226bca103b26260052732ad30Tom Cherry struct stat sb; 705bac3299720623f4226bca103b26260052732ad30Tom Cherry if (stat(args_[0].c_str(), &sb) == -1) { 706bac3299720623f4226bca103b26260052732ad30Tom Cherry flags_ |= SVC_DISABLED; 70776af7e6a0c4ce7759e6cc5994b5496ddb09035eeTom Cherry return ErrnoError() << "Cannot find '" << args_[0] << "'"; 708bac3299720623f4226bca103b26260052732ad30Tom Cherry } 709bac3299720623f4226bca103b26260052732ad30Tom Cherry 710bac3299720623f4226bca103b26260052732ad30Tom Cherry std::string scon; 711bac3299720623f4226bca103b26260052732ad30Tom Cherry if (!seclabel_.empty()) { 712bac3299720623f4226bca103b26260052732ad30Tom Cherry scon = seclabel_; 713bac3299720623f4226bca103b26260052732ad30Tom Cherry } else { 71476af7e6a0c4ce7759e6cc5994b5496ddb09035eeTom Cherry auto result = ComputeContextFromExecutable(name_, args_[0]); 71576af7e6a0c4ce7759e6cc5994b5496ddb09035eeTom Cherry if (!result) { 71676af7e6a0c4ce7759e6cc5994b5496ddb09035eeTom Cherry return result.error(); 717bac3299720623f4226bca103b26260052732ad30Tom Cherry } 71876af7e6a0c4ce7759e6cc5994b5496ddb09035eeTom Cherry scon = *result; 719bac3299720623f4226bca103b26260052732ad30Tom Cherry } 720bac3299720623f4226bca103b26260052732ad30Tom Cherry 721a285dac9c0b95a0351dfa98dde60c74a1445dc57Wei Wang LOG(INFO) << "starting service '" << name_ << "'..."; 722bac3299720623f4226bca103b26260052732ad30Tom Cherry 7231b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes pid_t pid = -1; 7241b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes if (namespace_flags_) { 725344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes pid = clone(nullptr, nullptr, namespace_flags_ | SIGCHLD, nullptr); 7261b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes } else { 7271b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes pid = fork(); 7281b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes } 7291b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes 730bac3299720623f4226bca103b26260052732ad30Tom Cherry if (pid == 0) { 731bac3299720623f4226bca103b26260052732ad30Tom Cherry umask(077); 732bac3299720623f4226bca103b26260052732ad30Tom Cherry 7331b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes if (namespace_flags_ & CLONE_NEWPID) { 7341b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes // This will fork again to run an init process inside the PID 7351b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes // namespace. 7361b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes SetUpPidNamespace(name_); 7371b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes } 7381b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes 7396de21f11125941ea1b94fdeec754bacea3916fd5Tom Cherry for (const auto& [key, value] : environment_vars_) { 7406de21f11125941ea1b94fdeec754bacea3916fd5Tom Cherry setenv(key.c_str(), value.c_str(), 1); 741bac3299720623f4226bca103b26260052732ad30Tom Cherry } 742bac3299720623f4226bca103b26260052732ad30Tom Cherry 74362767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn std::for_each(descriptors_.begin(), descriptors_.end(), 74462767fe29f8aaf62470781a3cf419ba11187d178Mark Salyzyn std::bind(&DescriptorInfo::CreateAndPublish, std::placeholders::_1, scon)); 745bac3299720623f4226bca103b26260052732ad30Tom Cherry 7460828676dff618c8ecc9852cb319543570b3a2e72Alex Vakulenko // See if there were "writepid" instructions to write to files under /dev/cpuset/. 7470828676dff618c8ecc9852cb319543570b3a2e72Alex Vakulenko auto cpuset_predicate = [](const std::string& path) { 74881f5d3ebef2c3789737bf718fc2a2cdd7b9e8b33Tom Cherry return StartsWith(path, "/dev/cpuset/"); 7490828676dff618c8ecc9852cb319543570b3a2e72Alex Vakulenko }; 7500828676dff618c8ecc9852cb319543570b3a2e72Alex Vakulenko auto iter = std::find_if(writepid_files_.begin(), writepid_files_.end(), cpuset_predicate); 7510828676dff618c8ecc9852cb319543570b3a2e72Alex Vakulenko if (iter == writepid_files_.end()) { 7520828676dff618c8ecc9852cb319543570b3a2e72Alex Vakulenko // There were no "writepid" instructions for cpusets, check if the system default 7530828676dff618c8ecc9852cb319543570b3a2e72Alex Vakulenko // cpuset is specified to be used for the process. 75481f5d3ebef2c3789737bf718fc2a2cdd7b9e8b33Tom Cherry std::string default_cpuset = GetProperty("ro.cpuset.default", ""); 7550828676dff618c8ecc9852cb319543570b3a2e72Alex Vakulenko if (!default_cpuset.empty()) { 7560828676dff618c8ecc9852cb319543570b3a2e72Alex Vakulenko // Make sure the cpuset name starts and ends with '/'. 7570828676dff618c8ecc9852cb319543570b3a2e72Alex Vakulenko // A single '/' means the 'root' cpuset. 7580828676dff618c8ecc9852cb319543570b3a2e72Alex Vakulenko if (default_cpuset.front() != '/') { 7590828676dff618c8ecc9852cb319543570b3a2e72Alex Vakulenko default_cpuset.insert(0, 1, '/'); 7600828676dff618c8ecc9852cb319543570b3a2e72Alex Vakulenko } 7610828676dff618c8ecc9852cb319543570b3a2e72Alex Vakulenko if (default_cpuset.back() != '/') { 7620828676dff618c8ecc9852cb319543570b3a2e72Alex Vakulenko default_cpuset.push_back('/'); 7630828676dff618c8ecc9852cb319543570b3a2e72Alex Vakulenko } 7640828676dff618c8ecc9852cb319543570b3a2e72Alex Vakulenko writepid_files_.push_back( 7650828676dff618c8ecc9852cb319543570b3a2e72Alex Vakulenko StringPrintf("/dev/cpuset%stasks", default_cpuset.c_str())); 7660828676dff618c8ecc9852cb319543570b3a2e72Alex Vakulenko } 7670828676dff618c8ecc9852cb319543570b3a2e72Alex Vakulenko } 7681c3a53f03ca3c2c647f83cd8b8ae7e18c5c7bc69Tom Cherry std::string pid_str = std::to_string(getpid()); 769bac3299720623f4226bca103b26260052732ad30Tom Cherry for (const auto& file : writepid_files_) { 770b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry if (!WriteStringToFile(pid_str, file)) { 771f86b5a6b90619e02d1d034ef7b0adc3b439f4abbElliott Hughes PLOG(ERROR) << "couldn't write " << pid_str << " to " << file; 772bac3299720623f4226bca103b26260052732ad30Tom Cherry } 773bac3299720623f4226bca103b26260052732ad30Tom Cherry } 774bac3299720623f4226bca103b26260052732ad30Tom Cherry 775bac3299720623f4226bca103b26260052732ad30Tom Cherry if (ioprio_class_ != IoSchedClass_NONE) { 776bac3299720623f4226bca103b26260052732ad30Tom Cherry if (android_set_ioprio(getpid(), ioprio_class_, ioprio_pri_)) { 777344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes PLOG(ERROR) << "failed to set pid " << getpid() 778f86b5a6b90619e02d1d034ef7b0adc3b439f4abbElliott Hughes << " ioprio=" << ioprio_class_ << "," << ioprio_pri_; 779bac3299720623f4226bca103b26260052732ad30Tom Cherry } 780bac3299720623f4226bca103b26260052732ad30Tom Cherry } 781bac3299720623f4226bca103b26260052732ad30Tom Cherry 782bac3299720623f4226bca103b26260052732ad30Tom Cherry if (needs_console) { 783bac3299720623f4226bca103b26260052732ad30Tom Cherry setsid(); 784bac3299720623f4226bca103b26260052732ad30Tom Cherry OpenConsole(); 785bac3299720623f4226bca103b26260052732ad30Tom Cherry } else { 786bac3299720623f4226bca103b26260052732ad30Tom Cherry ZapStdio(); 787bac3299720623f4226bca103b26260052732ad30Tom Cherry } 788bac3299720623f4226bca103b26260052732ad30Tom Cherry 789344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes // As requested, set our gid, supplemental gids, uid, context, and 790344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes // priority. Aborts on failure. 791344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes SetProcessAttributes(); 792bac3299720623f4226bca103b26260052732ad30Tom Cherry 7935e405cacb1f3ef2265fcc71dbbf6a39c1e7dc1c1Tom Cherry if (!ExpandArgsAndExecv(args_)) { 7945e405cacb1f3ef2265fcc71dbbf6a39c1e7dc1c1Tom Cherry PLOG(ERROR) << "cannot execve('" << args_[0] << "')"; 795bac3299720623f4226bca103b26260052732ad30Tom Cherry } 796bac3299720623f4226bca103b26260052732ad30Tom Cherry 797bac3299720623f4226bca103b26260052732ad30Tom Cherry _exit(127); 798bac3299720623f4226bca103b26260052732ad30Tom Cherry } 799bac3299720623f4226bca103b26260052732ad30Tom Cherry 800bac3299720623f4226bca103b26260052732ad30Tom Cherry if (pid < 0) { 801bac3299720623f4226bca103b26260052732ad30Tom Cherry pid_ = 0; 80276af7e6a0c4ce7759e6cc5994b5496ddb09035eeTom Cherry return ErrnoError() << "Failed to fork"; 803bac3299720623f4226bca103b26260052732ad30Tom Cherry } 804bac3299720623f4226bca103b26260052732ad30Tom Cherry 805310f6704d0dfe9ca4cfb153ce8e4212cc7596190Marco Nelissen if (oom_score_adjust_ != -1000) { 8061c3a53f03ca3c2c647f83cd8b8ae7e18c5c7bc69Tom Cherry std::string oom_str = std::to_string(oom_score_adjust_); 807310f6704d0dfe9ca4cfb153ce8e4212cc7596190Marco Nelissen std::string oom_file = StringPrintf("/proc/%d/oom_score_adj", pid); 808310f6704d0dfe9ca4cfb153ce8e4212cc7596190Marco Nelissen if (!WriteStringToFile(oom_str, oom_file)) { 809310f6704d0dfe9ca4cfb153ce8e4212cc7596190Marco Nelissen PLOG(ERROR) << "couldn't write oom_score_adj: " << strerror(errno); 810310f6704d0dfe9ca4cfb153ce8e4212cc7596190Marco Nelissen } 811310f6704d0dfe9ca4cfb153ce8e4212cc7596190Marco Nelissen } 812310f6704d0dfe9ca4cfb153ce8e4212cc7596190Marco Nelissen 8139605a945f7a497c0307b512b9cd762f2d23973caElliott Hughes time_started_ = boot_clock::now(); 814bac3299720623f4226bca103b26260052732ad30Tom Cherry pid_ = pid; 815bac3299720623f4226bca103b26260052732ad30Tom Cherry flags_ |= SVC_RUNNING; 8165938379e910c4cbd7ed2429901bb3c45e62405d4Tom Cherry start_order_ = next_start_order_++; 81733838b1156cd1a5f8eec94756bee9e030a3dd2ebTom Cherry process_cgroup_empty_ = false; 818ad8e94e017173471e90c704eb7d8de5a14712aa7Elliott Hughes 819ad8e94e017173471e90c704eb7d8de5a14712aa7Elliott Hughes errno = -createProcessGroup(uid_, pid_); 820ad8e94e017173471e90c704eb7d8de5a14712aa7Elliott Hughes if (errno != 0) { 821344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes PLOG(ERROR) << "createProcessGroup(" << uid_ << ", " << pid_ << ") failed for service '" 822344d01f99f6049565e4342b4c4202bd9ab96340bJorge Lucangeli Obes << name_ << "'"; 823d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea } else { 824d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea if (swappiness_ != -1) { 825d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea if (!setProcessGroupSwappiness(uid_, pid_, swappiness_)) { 826d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea PLOG(ERROR) << "setProcessGroupSwappiness failed"; 827d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea } 828d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea } 829d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea 830d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea if (soft_limit_in_bytes_ != -1) { 831d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea if (!setProcessGroupSoftLimit(uid_, pid_, soft_limit_in_bytes_)) { 832d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea PLOG(ERROR) << "setProcessGroupSoftLimit failed"; 833d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea } 834d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea } 835d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea 836d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea if (limit_in_bytes_ != -1) { 837d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea if (!setProcessGroupLimit(uid_, pid_, limit_in_bytes_)) { 838d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea PLOG(ERROR) << "setProcessGroupLimit failed"; 839d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea } 840d485226951013247dbb502fef7edbc6cf83acb0fRobert Benea } 841ad8e94e017173471e90c704eb7d8de5a14712aa7Elliott Hughes } 842bac3299720623f4226bca103b26260052732ad30Tom Cherry 843bac3299720623f4226bca103b26260052732ad30Tom Cherry NotifyStateChange("running"); 84476af7e6a0c4ce7759e6cc5994b5496ddb09035eeTom Cherry return Success(); 845bac3299720623f4226bca103b26260052732ad30Tom Cherry} 846bac3299720623f4226bca103b26260052732ad30Tom Cherry 84776af7e6a0c4ce7759e6cc5994b5496ddb09035eeTom CherryResult<Success> Service::StartIfNotDisabled() { 848bac3299720623f4226bca103b26260052732ad30Tom Cherry if (!(flags_ & SVC_DISABLED)) { 849bac3299720623f4226bca103b26260052732ad30Tom Cherry return Start(); 850bac3299720623f4226bca103b26260052732ad30Tom Cherry } else { 851bac3299720623f4226bca103b26260052732ad30Tom Cherry flags_ |= SVC_DISABLED_START; 852bac3299720623f4226bca103b26260052732ad30Tom Cherry } 85376af7e6a0c4ce7759e6cc5994b5496ddb09035eeTom Cherry return Success(); 854bac3299720623f4226bca103b26260052732ad30Tom Cherry} 855bac3299720623f4226bca103b26260052732ad30Tom Cherry 85676af7e6a0c4ce7759e6cc5994b5496ddb09035eeTom CherryResult<Success> Service::Enable() { 857bac3299720623f4226bca103b26260052732ad30Tom Cherry flags_ &= ~(SVC_DISABLED | SVC_RC_DISABLED); 858bac3299720623f4226bca103b26260052732ad30Tom Cherry if (flags_ & SVC_DISABLED_START) { 859bac3299720623f4226bca103b26260052732ad30Tom Cherry return Start(); 860bac3299720623f4226bca103b26260052732ad30Tom Cherry } 86176af7e6a0c4ce7759e6cc5994b5496ddb09035eeTom Cherry return Success(); 862bac3299720623f4226bca103b26260052732ad30Tom Cherry} 863bac3299720623f4226bca103b26260052732ad30Tom Cherry 864bac3299720623f4226bca103b26260052732ad30Tom Cherryvoid Service::Reset() { 865bac3299720623f4226bca103b26260052732ad30Tom Cherry StopOrReset(SVC_RESET); 866bac3299720623f4226bca103b26260052732ad30Tom Cherry} 867bac3299720623f4226bca103b26260052732ad30Tom Cherry 868bac3299720623f4226bca103b26260052732ad30Tom Cherryvoid Service::Stop() { 869bac3299720623f4226bca103b26260052732ad30Tom Cherry StopOrReset(SVC_DISABLED); 870bac3299720623f4226bca103b26260052732ad30Tom Cherry} 871bac3299720623f4226bca103b26260052732ad30Tom Cherry 872b7e03e82b89a30b09fea88eaf2a5638df1017cf6Bertrand SIMONNETvoid Service::Terminate() { 873b7e03e82b89a30b09fea88eaf2a5638df1017cf6Bertrand SIMONNET flags_ &= ~(SVC_RESTARTING | SVC_DISABLED_START); 874b7e03e82b89a30b09fea88eaf2a5638df1017cf6Bertrand SIMONNET flags_ |= SVC_DISABLED; 875b7e03e82b89a30b09fea88eaf2a5638df1017cf6Bertrand SIMONNET if (pid_) { 876ad8e94e017173471e90c704eb7d8de5a14712aa7Elliott Hughes KillProcessGroup(SIGTERM); 877b7e03e82b89a30b09fea88eaf2a5638df1017cf6Bertrand SIMONNET NotifyStateChange("stopping"); 878b7e03e82b89a30b09fea88eaf2a5638df1017cf6Bertrand SIMONNET } 879b7e03e82b89a30b09fea88eaf2a5638df1017cf6Bertrand SIMONNET} 880b7e03e82b89a30b09fea88eaf2a5638df1017cf6Bertrand SIMONNET 881bac3299720623f4226bca103b26260052732ad30Tom Cherryvoid Service::Restart() { 882bac3299720623f4226bca103b26260052732ad30Tom Cherry if (flags_ & SVC_RUNNING) { 883bac3299720623f4226bca103b26260052732ad30Tom Cherry /* Stop, wait, then start the service. */ 884bac3299720623f4226bca103b26260052732ad30Tom Cherry StopOrReset(SVC_RESTART); 885bac3299720623f4226bca103b26260052732ad30Tom Cherry } else if (!(flags_ & SVC_RESTARTING)) { 886bac3299720623f4226bca103b26260052732ad30Tom Cherry /* Just start the service since it's not running. */ 88776af7e6a0c4ce7759e6cc5994b5496ddb09035eeTom Cherry if (auto result = Start(); !result) { 88876af7e6a0c4ce7759e6cc5994b5496ddb09035eeTom Cherry LOG(ERROR) << "Could not restart '" << name_ << "': " << result.error(); 88976af7e6a0c4ce7759e6cc5994b5496ddb09035eeTom Cherry } 890bac3299720623f4226bca103b26260052732ad30Tom Cherry } /* else: Service is restarting anyways. */ 891bac3299720623f4226bca103b26260052732ad30Tom Cherry} 892bac3299720623f4226bca103b26260052732ad30Tom Cherry 893ad8e94e017173471e90c704eb7d8de5a14712aa7Elliott Hughes// The how field should be either SVC_DISABLED, SVC_RESET, or SVC_RESTART. 894bac3299720623f4226bca103b26260052732ad30Tom Cherryvoid Service::StopOrReset(int how) { 895ad8e94e017173471e90c704eb7d8de5a14712aa7Elliott Hughes // The service is still SVC_RUNNING until its process exits, but if it has 896ad8e94e017173471e90c704eb7d8de5a14712aa7Elliott Hughes // already exited it shoudn't attempt a restart yet. 897bac3299720623f4226bca103b26260052732ad30Tom Cherry flags_ &= ~(SVC_RESTARTING | SVC_DISABLED_START); 898bac3299720623f4226bca103b26260052732ad30Tom Cherry 899bac3299720623f4226bca103b26260052732ad30Tom Cherry if ((how != SVC_DISABLED) && (how != SVC_RESET) && (how != SVC_RESTART)) { 900ad8e94e017173471e90c704eb7d8de5a14712aa7Elliott Hughes // An illegal flag: default to SVC_DISABLED. 901bac3299720623f4226bca103b26260052732ad30Tom Cherry how = SVC_DISABLED; 902bac3299720623f4226bca103b26260052732ad30Tom Cherry } 903ad8e94e017173471e90c704eb7d8de5a14712aa7Elliott Hughes 904ad8e94e017173471e90c704eb7d8de5a14712aa7Elliott Hughes // If the service has not yet started, prevent it from auto-starting with its class. 905bac3299720623f4226bca103b26260052732ad30Tom Cherry if (how == SVC_RESET) { 906bac3299720623f4226bca103b26260052732ad30Tom Cherry flags_ |= (flags_ & SVC_RC_DISABLED) ? SVC_DISABLED : SVC_RESET; 907bac3299720623f4226bca103b26260052732ad30Tom Cherry } else { 908bac3299720623f4226bca103b26260052732ad30Tom Cherry flags_ |= how; 909bac3299720623f4226bca103b26260052732ad30Tom Cherry } 910bac3299720623f4226bca103b26260052732ad30Tom Cherry 911bac3299720623f4226bca103b26260052732ad30Tom Cherry if (pid_) { 912ad8e94e017173471e90c704eb7d8de5a14712aa7Elliott Hughes KillProcessGroup(SIGKILL); 913bac3299720623f4226bca103b26260052732ad30Tom Cherry NotifyStateChange("stopping"); 914bac3299720623f4226bca103b26260052732ad30Tom Cherry } else { 915bac3299720623f4226bca103b26260052732ad30Tom Cherry NotifyStateChange("stopped"); 916bac3299720623f4226bca103b26260052732ad30Tom Cherry } 917bac3299720623f4226bca103b26260052732ad30Tom Cherry} 918bac3299720623f4226bca103b26260052732ad30Tom Cherry 919bac3299720623f4226bca103b26260052732ad30Tom Cherryvoid Service::ZapStdio() const { 920bac3299720623f4226bca103b26260052732ad30Tom Cherry int fd; 921bac3299720623f4226bca103b26260052732ad30Tom Cherry fd = open("/dev/null", O_RDWR); 922bac3299720623f4226bca103b26260052732ad30Tom Cherry dup2(fd, 0); 923bac3299720623f4226bca103b26260052732ad30Tom Cherry dup2(fd, 1); 924bac3299720623f4226bca103b26260052732ad30Tom Cherry dup2(fd, 2); 925bac3299720623f4226bca103b26260052732ad30Tom Cherry close(fd); 926bac3299720623f4226bca103b26260052732ad30Tom Cherry} 927bac3299720623f4226bca103b26260052732ad30Tom Cherry 928bac3299720623f4226bca103b26260052732ad30Tom Cherryvoid Service::OpenConsole() const { 92970daa67062c016eea1a30be2e1de0dcba1d23a13Viorel Suman int fd = open(console_.c_str(), O_RDWR); 93070daa67062c016eea1a30be2e1de0dcba1d23a13Viorel Suman if (fd == -1) fd = open("/dev/null", O_RDWR); 931bac3299720623f4226bca103b26260052732ad30Tom Cherry ioctl(fd, TIOCSCTTY, 0); 932bac3299720623f4226bca103b26260052732ad30Tom Cherry dup2(fd, 0); 933bac3299720623f4226bca103b26260052732ad30Tom Cherry dup2(fd, 1); 934bac3299720623f4226bca103b26260052732ad30Tom Cherry dup2(fd, 2); 935bac3299720623f4226bca103b26260052732ad30Tom Cherry close(fd); 936bac3299720623f4226bca103b26260052732ad30Tom Cherry} 937bac3299720623f4226bca103b26260052732ad30Tom Cherry 938911b9b1d6ead5f2e4c4158af0cd8787f4d458ddfTom CherryServiceList::ServiceList() {} 939bac3299720623f4226bca103b26260052732ad30Tom Cherry 940911b9b1d6ead5f2e4c4158af0cd8787f4d458ddfTom CherryServiceList& ServiceList::GetInstance() { 941911b9b1d6ead5f2e4c4158af0cd8787f4d458ddfTom Cherry static ServiceList instance; 942bac3299720623f4226bca103b26260052732ad30Tom Cherry return instance; 943bac3299720623f4226bca103b26260052732ad30Tom Cherry} 944bac3299720623f4226bca103b26260052732ad30Tom Cherry 945911b9b1d6ead5f2e4c4158af0cd8787f4d458ddfTom Cherryvoid ServiceList::AddService(std::unique_ptr<Service> service) { 946b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry services_.emplace_back(std::move(service)); 947bac3299720623f4226bca103b26260052732ad30Tom Cherry} 948bac3299720623f4226bca103b26260052732ad30Tom Cherry 9493b81f2d623c6cba45ad07fa91338d346d9b96482Tom Cherrystd::unique_ptr<Service> Service::MakeTemporaryOneshotService(const std::vector<std::string>& args) { 950bac3299720623f4226bca103b26260052732ad30Tom Cherry // Parse the arguments: exec [SECLABEL [UID [GID]*] --] COMMAND ARGS... 951bac3299720623f4226bca103b26260052732ad30Tom Cherry // SECLABEL can be a - to denote default 952bac3299720623f4226bca103b26260052732ad30Tom Cherry std::size_t command_arg = 1; 953bac3299720623f4226bca103b26260052732ad30Tom Cherry for (std::size_t i = 1; i < args.size(); ++i) { 954bac3299720623f4226bca103b26260052732ad30Tom Cherry if (args[i] == "--") { 955bac3299720623f4226bca103b26260052732ad30Tom Cherry command_arg = i + 1; 956bac3299720623f4226bca103b26260052732ad30Tom Cherry break; 957bac3299720623f4226bca103b26260052732ad30Tom Cherry } 958bac3299720623f4226bca103b26260052732ad30Tom Cherry } 959bac3299720623f4226bca103b26260052732ad30Tom Cherry if (command_arg > 4 + NR_SVC_SUPP_GIDS) { 960f86b5a6b90619e02d1d034ef7b0adc3b439f4abbElliott Hughes LOG(ERROR) << "exec called with too many supplementary group ids"; 961bac3299720623f4226bca103b26260052732ad30Tom Cherry return nullptr; 962bac3299720623f4226bca103b26260052732ad30Tom Cherry } 963bac3299720623f4226bca103b26260052732ad30Tom Cherry 964bac3299720623f4226bca103b26260052732ad30Tom Cherry if (command_arg >= args.size()) { 965f86b5a6b90619e02d1d034ef7b0adc3b439f4abbElliott Hughes LOG(ERROR) << "exec called without command"; 966bac3299720623f4226bca103b26260052732ad30Tom Cherry return nullptr; 967bac3299720623f4226bca103b26260052732ad30Tom Cherry } 968bac3299720623f4226bca103b26260052732ad30Tom Cherry std::vector<std::string> str_args(args.begin() + command_arg, args.end()); 969bac3299720623f4226bca103b26260052732ad30Tom Cherry 9703b81f2d623c6cba45ad07fa91338d346d9b96482Tom Cherry static size_t exec_count = 0; 9713b81f2d623c6cba45ad07fa91338d346d9b96482Tom Cherry exec_count++; 9723b81f2d623c6cba45ad07fa91338d346d9b96482Tom Cherry std::string name = "exec " + std::to_string(exec_count) + " (" + Join(str_args, " ") + ")"; 97386e31a81238fb30d113947e7689a38daf49097f3Tom Cherry 9743b81f2d623c6cba45ad07fa91338d346d9b96482Tom Cherry unsigned flags = SVC_ONESHOT | SVC_TEMPORARY; 97524b29132a017f7fbfd009c3e6aec499d1b815dbfJorge Lucangeli Obes CapSet no_capabilities; 9761b3fa3d6506d04570aab60147b0ec743e38c8796Jorge Lucangeli Obes unsigned namespace_flags = 0; 977bac3299720623f4226bca103b26260052732ad30Tom Cherry 978bac3299720623f4226bca103b26260052732ad30Tom Cherry std::string seclabel = ""; 979bac3299720623f4226bca103b26260052732ad30Tom Cherry if (command_arg > 2 && args[1] != "-") { 980bac3299720623f4226bca103b26260052732ad30Tom Cherry seclabel = args[1]; 981bac3299720623f4226bca103b26260052732ad30Tom Cherry } 98211a3aeeae3dc887b889d4086d4d26d95c324c08dTom Cherry Result<uid_t> uid = 0; 983bac3299720623f4226bca103b26260052732ad30Tom Cherry if (command_arg > 3) { 98411a3aeeae3dc887b889d4086d4d26d95c324c08dTom Cherry uid = DecodeUid(args[2]); 98511a3aeeae3dc887b889d4086d4d26d95c324c08dTom Cherry if (!uid) { 98611a3aeeae3dc887b889d4086d4d26d95c324c08dTom Cherry LOG(ERROR) << "Unable to decode UID for '" << args[2] << "': " << uid.error(); 987517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry return nullptr; 988517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry } 989bac3299720623f4226bca103b26260052732ad30Tom Cherry } 99011a3aeeae3dc887b889d4086d4d26d95c324c08dTom Cherry Result<gid_t> gid = 0; 991bac3299720623f4226bca103b26260052732ad30Tom Cherry std::vector<gid_t> supp_gids; 992bac3299720623f4226bca103b26260052732ad30Tom Cherry if (command_arg > 4) { 99311a3aeeae3dc887b889d4086d4d26d95c324c08dTom Cherry gid = DecodeUid(args[3]); 99411a3aeeae3dc887b889d4086d4d26d95c324c08dTom Cherry if (!gid) { 99511a3aeeae3dc887b889d4086d4d26d95c324c08dTom Cherry LOG(ERROR) << "Unable to decode GID for '" << args[3] << "': " << gid.error(); 996517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry return nullptr; 997517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry } 998bac3299720623f4226bca103b26260052732ad30Tom Cherry std::size_t nr_supp_gids = command_arg - 1 /* -- */ - 4 /* exec SECLABEL UID GID */; 999bac3299720623f4226bca103b26260052732ad30Tom Cherry for (size_t i = 0; i < nr_supp_gids; ++i) { 100011a3aeeae3dc887b889d4086d4d26d95c324c08dTom Cherry auto supp_gid = DecodeUid(args[4 + i]); 100111a3aeeae3dc887b889d4086d4d26d95c324c08dTom Cherry if (!supp_gid) { 100211a3aeeae3dc887b889d4086d4d26d95c324c08dTom Cherry LOG(ERROR) << "Unable to decode GID for '" << args[4 + i] 100311a3aeeae3dc887b889d4086d4d26d95c324c08dTom Cherry << "': " << supp_gid.error(); 1004517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry return nullptr; 1005517e1f17cfec2143d4d10a64b1496a550acf3ea2Tom Cherry } 100611a3aeeae3dc887b889d4086d4d26d95c324c08dTom Cherry supp_gids.push_back(*supp_gid); 1007bac3299720623f4226bca103b26260052732ad30Tom Cherry } 1008bac3299720623f4226bca103b26260052732ad30Tom Cherry } 1009bac3299720623f4226bca103b26260052732ad30Tom Cherry 101011a3aeeae3dc887b889d4086d4d26d95c324c08dTom Cherry return std::make_unique<Service>(name, flags, *uid, *gid, supp_gids, no_capabilities, 1011cb0f9bbc855097e0c8248643015b837255fd569aTom Cherry namespace_flags, seclabel, nullptr, str_args); 1012bac3299720623f4226bca103b26260052732ad30Tom Cherry} 1013bac3299720623f4226bca103b26260052732ad30Tom Cherry 10145938379e910c4cbd7ed2429901bb3c45e62405d4Tom Cherry// Shutdown services in the opposite order that they were started. 1015911b9b1d6ead5f2e4c4158af0cd8787f4d458ddfTom Cherryconst std::vector<Service*> ServiceList::services_in_shutdown_order() const { 10165938379e910c4cbd7ed2429901bb3c45e62405d4Tom Cherry std::vector<Service*> shutdown_services; 10175938379e910c4cbd7ed2429901bb3c45e62405d4Tom Cherry for (const auto& service : services_) { 10185938379e910c4cbd7ed2429901bb3c45e62405d4Tom Cherry if (service->start_order() > 0) shutdown_services.emplace_back(service.get()); 10195938379e910c4cbd7ed2429901bb3c45e62405d4Tom Cherry } 10205938379e910c4cbd7ed2429901bb3c45e62405d4Tom Cherry std::sort(shutdown_services.begin(), shutdown_services.end(), 10215938379e910c4cbd7ed2429901bb3c45e62405d4Tom Cherry [](const auto& a, const auto& b) { return a->start_order() > b->start_order(); }); 1022911b9b1d6ead5f2e4c4158af0cd8787f4d458ddfTom Cherry return shutdown_services; 1023bac3299720623f4226bca103b26260052732ad30Tom Cherry} 1024bac3299720623f4226bca103b26260052732ad30Tom Cherry 1025911b9b1d6ead5f2e4c4158af0cd8787f4d458ddfTom Cherryvoid ServiceList::RemoveService(const Service& svc) { 1026bac3299720623f4226bca103b26260052732ad30Tom Cherry auto svc_it = std::find_if(services_.begin(), services_.end(), 1027bac3299720623f4226bca103b26260052732ad30Tom Cherry [&svc] (const std::unique_ptr<Service>& s) { 1028bac3299720623f4226bca103b26260052732ad30Tom Cherry return svc.name() == s->name(); 1029bac3299720623f4226bca103b26260052732ad30Tom Cherry }); 1030bac3299720623f4226bca103b26260052732ad30Tom Cherry if (svc_it == services_.end()) { 1031bac3299720623f4226bca103b26260052732ad30Tom Cherry return; 1032bac3299720623f4226bca103b26260052732ad30Tom Cherry } 1033bac3299720623f4226bca103b26260052732ad30Tom Cherry 1034bac3299720623f4226bca103b26260052732ad30Tom Cherry services_.erase(svc_it); 1035bac3299720623f4226bca103b26260052732ad30Tom Cherry} 1036bac3299720623f4226bca103b26260052732ad30Tom Cherry 1037911b9b1d6ead5f2e4c4158af0cd8787f4d458ddfTom Cherryvoid ServiceList::DumpState() const { 1038b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry for (const auto& s : services_) { 1039b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry s->DumpState(); 1040b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry } 1041b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry} 1042b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry 104389bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom CherryResult<Success> ServiceParser::ParseSection(std::vector<std::string>&& args, 104489bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry const std::string& filename, int line) { 1045b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry if (args.size() < 3) { 104689bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Error() << "services must have a name and a program"; 1047b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry } 1048b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry 1049b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry const std::string& name = args[1]; 1050b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry if (!IsValidName(name)) { 105189bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Error() << "invalid service name '" << name << "'"; 1052b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry } 1053b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry 1054911b9b1d6ead5f2e4c4158af0cd8787f4d458ddfTom Cherry Service* old_service = service_list_->FindService(name); 105530a6f276fd8850b0a78689d7bff3cb06a18cb286Tom Cherry if (old_service) { 105689bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Error() << "ignored duplicate definition of service '" << name << "'"; 105730a6f276fd8850b0a78689d7bff3cb06a18cb286Tom Cherry } 105830a6f276fd8850b0a78689d7bff3cb06a18cb286Tom Cherry 1059cb0f9bbc855097e0c8248643015b837255fd569aTom Cherry Subcontext* restart_action_subcontext = nullptr; 1060cb0f9bbc855097e0c8248643015b837255fd569aTom Cherry if (subcontexts_) { 1061cb0f9bbc855097e0c8248643015b837255fd569aTom Cherry for (auto& subcontext : *subcontexts_) { 1062cb0f9bbc855097e0c8248643015b837255fd569aTom Cherry if (StartsWith(filename, subcontext.path_prefix().c_str())) { 1063cb0f9bbc855097e0c8248643015b837255fd569aTom Cherry restart_action_subcontext = &subcontext; 1064cb0f9bbc855097e0c8248643015b837255fd569aTom Cherry break; 1065cb0f9bbc855097e0c8248643015b837255fd569aTom Cherry } 1066cb0f9bbc855097e0c8248643015b837255fd569aTom Cherry } 1067cb0f9bbc855097e0c8248643015b837255fd569aTom Cherry } 1068cb0f9bbc855097e0c8248643015b837255fd569aTom Cherry 1069b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry std::vector<std::string> str_args(args.begin() + 2, args.end()); 1070cb0f9bbc855097e0c8248643015b837255fd569aTom Cherry service_ = std::make_unique<Service>(name, restart_action_subcontext, str_args); 107189bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return Success(); 1072b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry} 1073b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry 107489bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom CherryResult<Success> ServiceParser::ParseLineSection(std::vector<std::string>&& args, int line) { 107589bcc85edfff4a2b2378f638ab90b2f7e19a8472Tom Cherry return service_ ? service_->ParseLine(std::move(args)) : Success(); 1076b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry} 1077b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry 1078b7349902a945903f9e36a569051f5131beb0bc24Tom Cherryvoid ServiceParser::EndSection() { 1079b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry if (service_) { 1080911b9b1d6ead5f2e4c4158af0cd8787f4d458ddfTom Cherry service_list_->AddService(std::move(service_)); 1081b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry } 1082b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry} 1083b7349902a945903f9e36a569051f5131beb0bc24Tom Cherry 1084b7349902a945903f9e36a569051f5131beb0bc24Tom Cherrybool ServiceParser::IsValidName(const std::string& name) const { 1085b7788fd454da2201c6e48dededa9b11873ef621eElliott Hughes // Property names can be any length, but may only contain certain characters. 1086b7788fd454da2201c6e48dededa9b11873ef621eElliott Hughes // Property values can contain any characters, but may only be a certain length. 1087b7788fd454da2201c6e48dededa9b11873ef621eElliott Hughes // (The latter restriction is needed because `start` and `stop` work by writing 1088b7788fd454da2201c6e48dededa9b11873ef621eElliott Hughes // the service name to the "ctl.start" and "ctl.stop" properties.) 1089b7788fd454da2201c6e48dededa9b11873ef621eElliott Hughes return is_legal_property_name("init.svc." + name) && name.size() <= PROP_VALUE_MAX; 1090bac3299720623f4226bca103b26260052732ad30Tom Cherry} 109181f5d3ebef2c3789737bf718fc2a2cdd7b9e8b33Tom Cherry 109281f5d3ebef2c3789737bf718fc2a2cdd7b9e8b33Tom Cherry} // namespace init 109381f5d3ebef2c3789737bf718fc2a2cdd7b9e8b33Tom Cherry} // namespace android 1094