| /* |
| * Copyright (C) 2008 The Android Open Source Project |
| * |
| * Licensed under the Apache License, Version 2.0 (the "License"); |
| * you may not use this file except in compliance with the License. |
| * You may obtain a copy of the License at |
| * |
| * http://www.apache.org/licenses/LICENSE-2.0 |
| * |
| * Unless required by applicable law or agreed to in writing, software |
| * distributed under the License is distributed on an "AS IS" BASIS, |
| * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| * See the License for the specific language governing permissions and |
| * limitations under the License. |
| */ |
| |
| #include "builtins.h" |
| |
| #include <errno.h> |
| #include <fcntl.h> |
| #include <mntent.h> |
| #include <net/if.h> |
| #include <signal.h> |
| #include <stdio.h> |
| #include <stdlib.h> |
| #include <string.h> |
| #include <sys/socket.h> |
| #include <sys/mount.h> |
| #include <sys/resource.h> |
| #include <sys/time.h> |
| #include <sys/types.h> |
| #include <sys/stat.h> |
| #include <sys/wait.h> |
| #include <unistd.h> |
| #include <linux/loop.h> |
| #include <ext4_crypt_init_extensions.h> |
| |
| #include <selinux/selinux.h> |
| #include <selinux/label.h> |
| |
| #include <fs_mgr.h> |
| #include <android-base/parseint.h> |
| #include <android-base/stringprintf.h> |
| #include <cutils/partition_utils.h> |
| #include <cutils/android_reboot.h> |
| #include <logwrap/logwrap.h> |
| #include <private/android_filesystem_config.h> |
| |
| #include "action.h" |
| #include "bootchart.h" |
| #include "devices.h" |
| #include "init.h" |
| #include "init_parser.h" |
| #include "log.h" |
| #include "property_service.h" |
| #include "service.h" |
| #include "signal_handler.h" |
| #include "util.h" |
| |
| #define chmod DO_NOT_USE_CHMOD_USE_FCHMODAT_SYMLINK_NOFOLLOW |
| #define UNMOUNT_CHECK_MS 5000 |
| #define UNMOUNT_CHECK_TIMES 10 |
| |
| // System call provided by bionic but not in any header file. |
| extern "C" int init_module(void *, unsigned long, const char *); |
| |
| static const int kTerminateServiceDelayMicroSeconds = 50000; |
| |
| static int insmod(const char *filename, const char *options) { |
| std::string module; |
| if (!read_file(filename, &module)) { |
| return -1; |
| } |
| |
| // TODO: use finit_module for >= 3.8 kernels. |
| return init_module(&module[0], module.size(), options); |
| } |
| |
| static int __ifupdown(const char *interface, int up) { |
| struct ifreq ifr; |
| int s, ret; |
| |
| strlcpy(ifr.ifr_name, interface, IFNAMSIZ); |
| |
| s = socket(AF_INET, SOCK_DGRAM, 0); |
| if (s < 0) |
| return -1; |
| |
| ret = ioctl(s, SIOCGIFFLAGS, &ifr); |
| if (ret < 0) { |
| goto done; |
| } |
| |
| if (up) |
| ifr.ifr_flags |= IFF_UP; |
| else |
| ifr.ifr_flags &= ~IFF_UP; |
| |
| ret = ioctl(s, SIOCSIFFLAGS, &ifr); |
| |
| done: |
| close(s); |
| return ret; |
| } |
| |
| static void unmount_and_fsck(const struct mntent *entry) { |
| if (strcmp(entry->mnt_type, "f2fs") && strcmp(entry->mnt_type, "ext4")) |
| return; |
| |
| /* First, lazily unmount the directory. This unmount request finishes when |
| * all processes that open a file or directory in |entry->mnt_dir| exit. |
| */ |
| TEMP_FAILURE_RETRY(umount2(entry->mnt_dir, MNT_DETACH)); |
| |
| /* Next, kill all processes except init, kthreadd, and kthreadd's |
| * children to finish the lazy unmount. Killing all processes here is okay |
| * because this callback function is only called right before reboot(). |
| * It might be cleaner to selectively kill processes that actually use |
| * |entry->mnt_dir| rather than killing all, probably by reusing a function |
| * like killProcessesWithOpenFiles() in vold/, but the selinux policy does |
| * not allow init to scan /proc/<pid> files which the utility function |
| * heavily relies on. The policy does not allow the process to execute |
| * killall/pkill binaries either. Note that some processes might |
| * automatically restart after kill(), but that is not really a problem |
| * because |entry->mnt_dir| is no longer visible to such new processes. |
| */ |
| ServiceManager::GetInstance().ForEachService([] (Service* s) { s->Stop(); }); |
| TEMP_FAILURE_RETRY(kill(-1, SIGKILL)); |
| |
| int count = 0; |
| while (count++ < UNMOUNT_CHECK_TIMES) { |
| int fd = TEMP_FAILURE_RETRY(open(entry->mnt_fsname, O_RDONLY | O_EXCL)); |
| if (fd >= 0) { |
| /* |entry->mnt_dir| has sucessfully been unmounted. */ |
| close(fd); |
| break; |
| } else if (errno == EBUSY) { |
| /* Some processes using |entry->mnt_dir| are still alive. Wait for a |
| * while then retry. |
| */ |
| TEMP_FAILURE_RETRY( |
| usleep(UNMOUNT_CHECK_MS * 1000 / UNMOUNT_CHECK_TIMES)); |
| continue; |
| } else { |
| /* Cannot open the device. Give up. */ |
| return; |
| } |
| } |
| |
| int st; |
| if (!strcmp(entry->mnt_type, "f2fs")) { |
| const char *f2fs_argv[] = { |
| "/system/bin/fsck.f2fs", "-f", entry->mnt_fsname, |
| }; |
| android_fork_execvp_ext(ARRAY_SIZE(f2fs_argv), (char **)f2fs_argv, |
| &st, true, LOG_KLOG, true, NULL, NULL, 0); |
| } else if (!strcmp(entry->mnt_type, "ext4")) { |
| const char *ext4_argv[] = { |
| "/system/bin/e2fsck", "-f", "-y", entry->mnt_fsname, |
| }; |
| android_fork_execvp_ext(ARRAY_SIZE(ext4_argv), (char **)ext4_argv, |
| &st, true, LOG_KLOG, true, NULL, NULL, 0); |
| } |
| } |
| |
| static int do_class_start(const std::vector<std::string>& args) { |
| /* Starting a class does not start services |
| * which are explicitly disabled. They must |
| * be started individually. |
| */ |
| ServiceManager::GetInstance(). |
| ForEachServiceInClass(args[1], [] (Service* s) { s->StartIfNotDisabled(); }); |
| return 0; |
| } |
| |
| static int do_class_stop(const std::vector<std::string>& args) { |
| ServiceManager::GetInstance(). |
| ForEachServiceInClass(args[1], [] (Service* s) { s->Stop(); }); |
| return 0; |
| } |
| |
| static int do_class_reset(const std::vector<std::string>& args) { |
| ServiceManager::GetInstance(). |
| ForEachServiceInClass(args[1], [] (Service* s) { s->Reset(); }); |
| return 0; |
| } |
| |
| static int do_domainname(const std::vector<std::string>& args) { |
| return write_file("/proc/sys/kernel/domainname", args[1].c_str()); |
| } |
| |
| static int do_enable(const std::vector<std::string>& args) { |
| Service* svc = ServiceManager::GetInstance().FindServiceByName(args[1]); |
| if (!svc) { |
| return -1; |
| } |
| return svc->Enable(); |
| } |
| |
| static int do_exec(const std::vector<std::string>& args) { |
| Service* svc = ServiceManager::GetInstance().MakeExecOneshotService(args); |
| if (!svc) { |
| return -1; |
| } |
| if (!svc->Start()) { |
| return -1; |
| } |
| waiting_for_exec = true; |
| return 0; |
| } |
| |
| static int do_export(const std::vector<std::string>& args) { |
| return add_environment(args[1].c_str(), args[2].c_str()); |
| } |
| |
| static int do_hostname(const std::vector<std::string>& args) { |
| return write_file("/proc/sys/kernel/hostname", args[1].c_str()); |
| } |
| |
| static int do_ifup(const std::vector<std::string>& args) { |
| return __ifupdown(args[1].c_str(), 1); |
| } |
| |
| static int do_insmod(const std::vector<std::string>& args) { |
| std::string options; |
| |
| if (args.size() > 2) { |
| options += args[2]; |
| for (std::size_t i = 3; i < args.size(); ++i) { |
| options += ' '; |
| options += args[i]; |
| } |
| } |
| |
| return insmod(args[1].c_str(), options.c_str()); |
| } |
| |
| static int do_mkdir(const std::vector<std::string>& args) { |
| mode_t mode = 0755; |
| int ret; |
| |
| /* mkdir <path> [mode] [owner] [group] */ |
| |
| if (args.size() >= 3) { |
| mode = std::stoul(args[2], 0, 8); |
| } |
| |
| ret = make_dir(args[1].c_str(), mode); |
| /* chmod in case the directory already exists */ |
| if (ret == -1 && errno == EEXIST) { |
| ret = fchmodat(AT_FDCWD, args[1].c_str(), mode, AT_SYMLINK_NOFOLLOW); |
| } |
| if (ret == -1) { |
| return -errno; |
| } |
| |
| if (args.size() >= 4) { |
| uid_t uid = decode_uid(args[3].c_str()); |
| gid_t gid = -1; |
| |
| if (args.size() == 5) { |
| gid = decode_uid(args[4].c_str()); |
| } |
| |
| if (lchown(args[1].c_str(), uid, gid) == -1) { |
| return -errno; |
| } |
| |
| /* chown may have cleared S_ISUID and S_ISGID, chmod again */ |
| if (mode & (S_ISUID | S_ISGID)) { |
| ret = fchmodat(AT_FDCWD, args[1].c_str(), mode, AT_SYMLINK_NOFOLLOW); |
| if (ret == -1) { |
| return -errno; |
| } |
| } |
| } |
| |
| return e4crypt_set_directory_policy(args[1].c_str()); |
| } |
| |
| static struct { |
| const char *name; |
| unsigned flag; |
| } mount_flags[] = { |
| { "noatime", MS_NOATIME }, |
| { "noexec", MS_NOEXEC }, |
| { "nosuid", MS_NOSUID }, |
| { "nodev", MS_NODEV }, |
| { "nodiratime", MS_NODIRATIME }, |
| { "ro", MS_RDONLY }, |
| { "rw", 0 }, |
| { "remount", MS_REMOUNT }, |
| { "bind", MS_BIND }, |
| { "rec", MS_REC }, |
| { "unbindable", MS_UNBINDABLE }, |
| { "private", MS_PRIVATE }, |
| { "slave", MS_SLAVE }, |
| { "shared", MS_SHARED }, |
| { "defaults", 0 }, |
| { 0, 0 }, |
| }; |
| |
| #define DATA_MNT_POINT "/data" |
| |
| /* mount <type> <device> <path> <flags ...> <options> */ |
| static int do_mount(const std::vector<std::string>& args) { |
| char tmp[64]; |
| const char *source, *target, *system; |
| const char *options = NULL; |
| unsigned flags = 0; |
| std::size_t na = 0; |
| int n, i; |
| int wait = 0; |
| |
| for (na = 4; na < args.size(); na++) { |
| for (i = 0; mount_flags[i].name; i++) { |
| if (!args[na].compare(mount_flags[i].name)) { |
| flags |= mount_flags[i].flag; |
| break; |
| } |
| } |
| |
| if (!mount_flags[i].name) { |
| if (!args[na].compare("wait")) |
| wait = 1; |
| /* if our last argument isn't a flag, wolf it up as an option string */ |
| else if (na + 1 == args.size()) |
| options = args[na].c_str(); |
| } |
| } |
| |
| system = args[1].c_str(); |
| source = args[2].c_str(); |
| target = args[3].c_str(); |
| |
| if (!strncmp(source, "mtd@", 4)) { |
| n = mtd_name_to_number(source + 4); |
| if (n < 0) { |
| return -1; |
| } |
| |
| snprintf(tmp, sizeof(tmp), "/dev/block/mtdblock%d", n); |
| |
| if (wait) |
| wait_for_file(tmp, COMMAND_RETRY_TIMEOUT); |
| if (mount(tmp, target, system, flags, options) < 0) { |
| return -1; |
| } |
| |
| goto exit_success; |
| } else if (!strncmp(source, "loop@", 5)) { |
| int mode, loop, fd; |
| struct loop_info info; |
| |
| mode = (flags & MS_RDONLY) ? O_RDONLY : O_RDWR; |
| fd = open(source + 5, mode | O_CLOEXEC); |
| if (fd < 0) { |
| return -1; |
| } |
| |
| for (n = 0; ; n++) { |
| snprintf(tmp, sizeof(tmp), "/dev/block/loop%d", n); |
| loop = open(tmp, mode | O_CLOEXEC); |
| if (loop < 0) { |
| close(fd); |
| return -1; |
| } |
| |
| /* if it is a blank loop device */ |
| if (ioctl(loop, LOOP_GET_STATUS, &info) < 0 && errno == ENXIO) { |
| /* if it becomes our loop device */ |
| if (ioctl(loop, LOOP_SET_FD, fd) >= 0) { |
| close(fd); |
| |
| if (mount(tmp, target, system, flags, options) < 0) { |
| ioctl(loop, LOOP_CLR_FD, 0); |
| close(loop); |
| return -1; |
| } |
| |
| close(loop); |
| goto exit_success; |
| } |
| } |
| |
| close(loop); |
| } |
| |
| close(fd); |
| ERROR("out of loopback devices"); |
| return -1; |
| } else { |
| if (wait) |
| wait_for_file(source, COMMAND_RETRY_TIMEOUT); |
| if (mount(source, target, system, flags, options) < 0) { |
| return -1; |
| } |
| |
| } |
| |
| exit_success: |
| return 0; |
| |
| } |
| |
| static int wipe_data_via_recovery() { |
| mkdir("/cache/recovery", 0700); |
| int fd = open("/cache/recovery/command", O_RDWR|O_CREAT|O_TRUNC|O_CLOEXEC, 0600); |
| if (fd >= 0) { |
| write(fd, "--wipe_data\n", strlen("--wipe_data\n") + 1); |
| write(fd, "--reason=wipe_data_via_recovery\n", strlen("--reason=wipe_data_via_recovery\n") + 1); |
| close(fd); |
| } else { |
| ERROR("could not open /cache/recovery/command\n"); |
| return -1; |
| } |
| android_reboot(ANDROID_RB_RESTART2, 0, "recovery"); |
| while (1) { pause(); } // never reached |
| } |
| |
| static void import_late() { |
| static const std::vector<std::string> init_directories = { |
| "/system/etc/init", |
| "/vendor/etc/init", |
| "/odm/etc/init" |
| }; |
| |
| Parser& parser = Parser::GetInstance(); |
| for (const auto& dir : init_directories) { |
| parser.ParseConfig(dir.c_str()); |
| } |
| } |
| |
| /* |
| * This function might request a reboot, in which case it will |
| * not return. |
| */ |
| static int do_mount_all(const std::vector<std::string>& args) { |
| pid_t pid; |
| int ret = -1; |
| int child_ret = -1; |
| int status; |
| struct fstab *fstab; |
| |
| const char* fstabfile = args[1].c_str(); |
| /* |
| * Call fs_mgr_mount_all() to mount all filesystems. We fork(2) and |
| * do the call in the child to provide protection to the main init |
| * process if anything goes wrong (crash or memory leak), and wait for |
| * the child to finish in the parent. |
| */ |
| pid = fork(); |
| if (pid > 0) { |
| /* Parent. Wait for the child to return */ |
| int wp_ret = TEMP_FAILURE_RETRY(waitpid(pid, &status, 0)); |
| if (wp_ret < 0) { |
| /* Unexpected error code. We will continue anyway. */ |
| NOTICE("waitpid failed rc=%d: %s\n", wp_ret, strerror(errno)); |
| } |
| |
| if (WIFEXITED(status)) { |
| ret = WEXITSTATUS(status); |
| } else { |
| ret = -1; |
| } |
| } else if (pid == 0) { |
| /* child, call fs_mgr_mount_all() */ |
| klog_set_level(6); /* So we can see what fs_mgr_mount_all() does */ |
| fstab = fs_mgr_read_fstab(fstabfile); |
| child_ret = fs_mgr_mount_all(fstab); |
| fs_mgr_free_fstab(fstab); |
| if (child_ret == -1) { |
| ERROR("fs_mgr_mount_all returned an error\n"); |
| } |
| _exit(child_ret); |
| } else { |
| /* fork failed, return an error */ |
| return -1; |
| } |
| |
| import_late(); |
| |
| if (ret == FS_MGR_MNTALL_DEV_NEEDS_ENCRYPTION) { |
| property_set("vold.decrypt", "trigger_encryption"); |
| } else if (ret == FS_MGR_MNTALL_DEV_MIGHT_BE_ENCRYPTED) { |
| property_set("ro.crypto.state", "encrypted"); |
| property_set("ro.crypto.type", "block"); |
| property_set("vold.decrypt", "trigger_default_encryption"); |
| } else if (ret == FS_MGR_MNTALL_DEV_NOT_ENCRYPTED) { |
| property_set("ro.crypto.state", "unencrypted"); |
| /* If fs_mgr determined this is an unencrypted device, then trigger |
| * that action. |
| */ |
| ActionManager::GetInstance().QueueEventTrigger("nonencrypted"); |
| } else if (ret == FS_MGR_MNTALL_DEV_NEEDS_RECOVERY) { |
| /* Setup a wipe via recovery, and reboot into recovery */ |
| ERROR("fs_mgr_mount_all suggested recovery, so wiping data via recovery.\n"); |
| ret = wipe_data_via_recovery(); |
| /* If reboot worked, there is no return. */ |
| } else if (ret == FS_MGR_MNTALL_DEV_DEFAULT_FILE_ENCRYPTED) { |
| if (e4crypt_install_keyring()) { |
| return -1; |
| } |
| property_set("ro.crypto.state", "encrypted"); |
| property_set("ro.crypto.type", "file"); |
| |
| // Although encrypted, we have device key, so we do not need to |
| // do anything different from the nonencrypted case. |
| ActionManager::GetInstance().QueueEventTrigger("nonencrypted"); |
| } else if (ret == FS_MGR_MNTALL_DEV_NON_DEFAULT_FILE_ENCRYPTED) { |
| if (e4crypt_install_keyring()) { |
| return -1; |
| } |
| property_set("ro.crypto.state", "encrypted"); |
| property_set("ro.crypto.type", "file"); |
| property_set("vold.decrypt", "trigger_restart_min_framework"); |
| } else if (ret > 0) { |
| ERROR("fs_mgr_mount_all returned unexpected error %d\n", ret); |
| } |
| /* else ... < 0: error */ |
| |
| return ret; |
| } |
| |
| static int do_swapon_all(const std::vector<std::string>& args) { |
| struct fstab *fstab; |
| int ret; |
| |
| fstab = fs_mgr_read_fstab(args[1].c_str()); |
| ret = fs_mgr_swapon_all(fstab); |
| fs_mgr_free_fstab(fstab); |
| |
| return ret; |
| } |
| |
| static int do_setprop(const std::vector<std::string>& args) { |
| const char* name = args[1].c_str(); |
| const char* value = args[2].c_str(); |
| property_set(name, value); |
| return 0; |
| } |
| |
| static int do_setrlimit(const std::vector<std::string>& args) { |
| struct rlimit limit; |
| int resource; |
| resource = std::stoi(args[1]); |
| limit.rlim_cur = std::stoi(args[2]); |
| limit.rlim_max = std::stoi(args[3]); |
| return setrlimit(resource, &limit); |
| } |
| |
| static int do_start(const std::vector<std::string>& args) { |
| Service* svc = ServiceManager::GetInstance().FindServiceByName(args[1]); |
| if (!svc) { |
| ERROR("do_start: Service %s not found\n", args[1].c_str()); |
| return -1; |
| } |
| if (!svc->Start()) |
| return -1; |
| return 0; |
| } |
| |
| static int do_stop(const std::vector<std::string>& args) { |
| Service* svc = ServiceManager::GetInstance().FindServiceByName(args[1]); |
| if (!svc) { |
| ERROR("do_stop: Service %s not found\n", args[1].c_str()); |
| return -1; |
| } |
| svc->Stop(); |
| return 0; |
| } |
| |
| static int do_restart(const std::vector<std::string>& args) { |
| Service* svc = ServiceManager::GetInstance().FindServiceByName(args[1]); |
| if (!svc) { |
| ERROR("do_restart: Service %s not found\n", args[1].c_str()); |
| return -1; |
| } |
| svc->Restart(); |
| return 0; |
| } |
| |
| static int do_powerctl(const std::vector<std::string>& args) { |
| const char* command = args[1].c_str(); |
| int len = 0; |
| unsigned int cmd = 0; |
| const char *reboot_target = ""; |
| void (*callback_on_ro_remount)(const struct mntent*) = NULL; |
| |
| if (strncmp(command, "shutdown", 8) == 0) { |
| cmd = ANDROID_RB_POWEROFF; |
| len = 8; |
| } else if (strncmp(command, "reboot", 6) == 0) { |
| cmd = ANDROID_RB_RESTART2; |
| len = 6; |
| } else { |
| ERROR("powerctl: unrecognized command '%s'\n", command); |
| return -EINVAL; |
| } |
| |
| if (command[len] == ',') { |
| if (cmd == ANDROID_RB_POWEROFF && |
| !strcmp(&command[len + 1], "userrequested")) { |
| // The shutdown reason is PowerManager.SHUTDOWN_USER_REQUESTED. |
| // Run fsck once the file system is remounted in read-only mode. |
| callback_on_ro_remount = unmount_and_fsck; |
| } else if (cmd == ANDROID_RB_RESTART2) { |
| reboot_target = &command[len + 1]; |
| } |
| } else if (command[len] != '\0') { |
| ERROR("powerctl: unrecognized reboot target '%s'\n", &command[len]); |
| return -EINVAL; |
| } |
| |
| std::string timeout = property_get("ro.build.shutdown_timeout"); |
| unsigned int delay = 0; |
| |
| if (android::base::ParseUint(timeout.c_str(), &delay) && delay > 0) { |
| Timer t; |
| // Ask all services to terminate. |
| ServiceManager::GetInstance().ForEachService( |
| [] (Service* s) { s->Terminate(); }); |
| |
| while (t.duration() < delay) { |
| ServiceManager::GetInstance().ReapAnyOutstandingChildren(); |
| |
| int service_count = 0; |
| ServiceManager::GetInstance().ForEachService( |
| [&service_count] (Service* s) { |
| // Count the number of services running. |
| // Exclude the console as it will ignore the SIGTERM signal |
| // and not exit. |
| // Note: SVC_CONSOLE actually means "requires console" but |
| // it is only used by the shell. |
| if (s->pid() != 0 && (s->flags() & SVC_CONSOLE) == 0) { |
| service_count++; |
| } |
| }); |
| |
| if (service_count == 0) { |
| // All terminable services terminated. We can exit early. |
| break; |
| } |
| |
| // Wait a bit before recounting the number or running services. |
| usleep(kTerminateServiceDelayMicroSeconds); |
| } |
| NOTICE("Terminating running services took %.02f seconds", t.duration()); |
| } |
| |
| return android_reboot_with_callback(cmd, 0, reboot_target, |
| callback_on_ro_remount); |
| } |
| |
| static int do_trigger(const std::vector<std::string>& args) { |
| ActionManager::GetInstance().QueueEventTrigger(args[1]); |
| return 0; |
| } |
| |
| static int do_symlink(const std::vector<std::string>& args) { |
| return symlink(args[1].c_str(), args[2].c_str()); |
| } |
| |
| static int do_rm(const std::vector<std::string>& args) { |
| return unlink(args[1].c_str()); |
| } |
| |
| static int do_rmdir(const std::vector<std::string>& args) { |
| return rmdir(args[1].c_str()); |
| } |
| |
| static int do_sysclktz(const std::vector<std::string>& args) { |
| struct timezone tz; |
| |
| memset(&tz, 0, sizeof(tz)); |
| tz.tz_minuteswest = std::stoi(args[1]); |
| if (settimeofday(NULL, &tz)) |
| return -1; |
| return 0; |
| } |
| |
| static int do_verity_load_state(const std::vector<std::string>& args) { |
| int mode = -1; |
| int rc = fs_mgr_load_verity_state(&mode); |
| if (rc == 0 && mode != VERITY_MODE_DEFAULT) { |
| ActionManager::GetInstance().QueueEventTrigger("verity-logging"); |
| } |
| return rc; |
| } |
| |
| static void verity_update_property(fstab_rec *fstab, const char *mount_point, |
| int mode, int status) { |
| property_set(android::base::StringPrintf("partition.%s.verified", mount_point).c_str(), |
| android::base::StringPrintf("%d", mode).c_str()); |
| } |
| |
| static int do_verity_update_state(const std::vector<std::string>& args) { |
| return fs_mgr_update_verity_state(verity_update_property); |
| } |
| |
| static int do_write(const std::vector<std::string>& args) { |
| const char* path = args[1].c_str(); |
| const char* value = args[2].c_str(); |
| return write_file(path, value); |
| } |
| |
| static int do_copy(const std::vector<std::string>& args) { |
| char *buffer = NULL; |
| int rc = 0; |
| int fd1 = -1, fd2 = -1; |
| struct stat info; |
| int brtw, brtr; |
| char *p; |
| |
| if (stat(args[1].c_str(), &info) < 0) |
| return -1; |
| |
| if ((fd1 = open(args[1].c_str(), O_RDONLY|O_CLOEXEC)) < 0) |
| goto out_err; |
| |
| if ((fd2 = open(args[2].c_str(), O_WRONLY|O_CREAT|O_TRUNC|O_CLOEXEC, 0660)) < 0) |
| goto out_err; |
| |
| if (!(buffer = (char*) malloc(info.st_size))) |
| goto out_err; |
| |
| p = buffer; |
| brtr = info.st_size; |
| while(brtr) { |
| rc = read(fd1, p, brtr); |
| if (rc < 0) |
| goto out_err; |
| if (rc == 0) |
| break; |
| p += rc; |
| brtr -= rc; |
| } |
| |
| p = buffer; |
| brtw = info.st_size; |
| while(brtw) { |
| rc = write(fd2, p, brtw); |
| if (rc < 0) |
| goto out_err; |
| if (rc == 0) |
| break; |
| p += rc; |
| brtw -= rc; |
| } |
| |
| rc = 0; |
| goto out; |
| out_err: |
| rc = -1; |
| out: |
| if (buffer) |
| free(buffer); |
| if (fd1 >= 0) |
| close(fd1); |
| if (fd2 >= 0) |
| close(fd2); |
| return rc; |
| } |
| |
| static int do_chown(const std::vector<std::string>& args) { |
| /* GID is optional. */ |
| if (args.size() == 3) { |
| if (lchown(args[2].c_str(), decode_uid(args[1].c_str()), -1) == -1) |
| return -errno; |
| } else if (args.size() == 4) { |
| if (lchown(args[3].c_str(), decode_uid(args[1].c_str()), |
| decode_uid(args[2].c_str())) == -1) |
| return -errno; |
| } else { |
| return -1; |
| } |
| return 0; |
| } |
| |
| static mode_t get_mode(const char *s) { |
| mode_t mode = 0; |
| while (*s) { |
| if (*s >= '0' && *s <= '7') { |
| mode = (mode<<3) | (*s-'0'); |
| } else { |
| return -1; |
| } |
| s++; |
| } |
| return mode; |
| } |
| |
| static int do_chmod(const std::vector<std::string>& args) { |
| mode_t mode = get_mode(args[1].c_str()); |
| if (fchmodat(AT_FDCWD, args[2].c_str(), mode, AT_SYMLINK_NOFOLLOW) < 0) { |
| return -errno; |
| } |
| return 0; |
| } |
| |
| static int do_restorecon(const std::vector<std::string>& args) { |
| int ret = 0; |
| |
| for (auto it = std::next(args.begin()); it != args.end(); ++it) { |
| if (restorecon(it->c_str()) < 0) |
| ret = -errno; |
| } |
| return ret; |
| } |
| |
| static int do_restorecon_recursive(const std::vector<std::string>& args) { |
| int ret = 0; |
| |
| for (auto it = std::next(args.begin()); it != args.end(); ++it) { |
| if (restorecon_recursive(it->c_str()) < 0) |
| ret = -errno; |
| } |
| return ret; |
| } |
| |
| static int do_loglevel(const std::vector<std::string>& args) { |
| int log_level = std::stoi(args[1]); |
| if (log_level < KLOG_ERROR_LEVEL || log_level > KLOG_DEBUG_LEVEL) { |
| ERROR("loglevel: invalid log level'%d'\n", log_level); |
| return -EINVAL; |
| } |
| klog_set_level(log_level); |
| return 0; |
| } |
| |
| static int do_load_persist_props(const std::vector<std::string>& args) { |
| load_persist_props(); |
| return 0; |
| } |
| |
| static int do_load_system_props(const std::vector<std::string>& args) { |
| load_system_props(); |
| return 0; |
| } |
| |
| static int do_wait(const std::vector<std::string>& args) { |
| if (args.size() == 2) { |
| return wait_for_file(args[1].c_str(), COMMAND_RETRY_TIMEOUT); |
| } else if (args.size() == 3) { |
| return wait_for_file(args[1].c_str(), std::stoi(args[2])); |
| } else |
| return -1; |
| } |
| |
| /* |
| * Callback to make a directory from the ext4 code |
| */ |
| static int do_installkeys_ensure_dir_exists(const char* dir) { |
| if (make_dir(dir, 0700) && errno != EEXIST) { |
| return -1; |
| } |
| |
| return 0; |
| } |
| |
| static bool is_file_crypto() { |
| std::string value = property_get("ro.crypto.type"); |
| return value == "file"; |
| } |
| |
| static int do_installkey(const std::vector<std::string>& args) { |
| if (!is_file_crypto()) { |
| return 0; |
| } |
| return e4crypt_create_device_key(args[1].c_str(), |
| do_installkeys_ensure_dir_exists); |
| } |
| |
| static int do_setusercryptopolicies(const std::vector<std::string>& args) { |
| if (!is_file_crypto()) { |
| return 0; |
| } |
| return e4crypt_set_user_crypto_policies(args[1].c_str()); |
| } |
| |
| static int do_createuserkey(const std::vector<std::string>& args) { |
| if (!is_file_crypto()) { |
| return 0; |
| } |
| return e4crypt_create_user_key(atoi(args[1].c_str()), |
| atoi(args[2].c_str()), |
| atoi(args[3].c_str())); |
| } |
| |
| BuiltinFunctionMap::Map& BuiltinFunctionMap::map() const { |
| constexpr std::size_t kMax = std::numeric_limits<std::size_t>::max(); |
| static const Map builtin_functions = { |
| {"bootchart_init", {0, 0, do_bootchart_init}}, |
| {"chmod", {2, 2, do_chmod}}, |
| {"chown", {2, 3, do_chown}}, |
| {"class_reset", {1, 1, do_class_reset}}, |
| {"class_start", {1, 1, do_class_start}}, |
| {"class_stop", {1, 1, do_class_stop}}, |
| {"copy", {2, 2, do_copy}}, |
| {"createuserkey", {3, 3, do_createuserkey}}, |
| {"domainname", {1, 1, do_domainname}}, |
| {"enable", {1, 1, do_enable}}, |
| {"exec", {1, kMax, do_exec}}, |
| {"export", {2, 2, do_export}}, |
| {"hostname", {1, 1, do_hostname}}, |
| {"ifup", {1, 1, do_ifup}}, |
| {"insmod", {1, kMax, do_insmod}}, |
| {"installkey", {1, 1, do_installkey}}, |
| {"load_persist_props", {0, 0, do_load_persist_props}}, |
| {"load_system_props", {0, 0, do_load_system_props}}, |
| {"loglevel", {1, 1, do_loglevel}}, |
| {"mkdir", {1, 4, do_mkdir}}, |
| {"mount_all", {1, 1, do_mount_all}}, |
| {"mount", {3, kMax, do_mount}}, |
| {"powerctl", {1, 1, do_powerctl}}, |
| {"restart", {1, 1, do_restart}}, |
| {"restorecon", {1, kMax, do_restorecon}}, |
| {"restorecon_recursive", {1, kMax, do_restorecon_recursive}}, |
| {"rm", {1, 1, do_rm}}, |
| {"rmdir", {1, 1, do_rmdir}}, |
| {"setprop", {2, 2, do_setprop}}, |
| {"setrlimit", {3, 3, do_setrlimit}}, |
| {"setusercryptopolicies", {1, 1, do_setusercryptopolicies}}, |
| {"start", {1, 1, do_start}}, |
| {"stop", {1, 1, do_stop}}, |
| {"swapon_all", {1, 1, do_swapon_all}}, |
| {"symlink", {2, 2, do_symlink}}, |
| {"sysclktz", {1, 1, do_sysclktz}}, |
| {"trigger", {1, 1, do_trigger}}, |
| {"verity_load_state", {0, 0, do_verity_load_state}}, |
| {"verity_update_state", {0, 0, do_verity_update_state}}, |
| {"wait", {1, 2, do_wait}}, |
| {"write", {2, 2, do_write}}, |
| }; |
| return builtin_functions; |
| } |