Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 1 | /* |
| 2 | * Copyright (C) 2015 The Android Open Source Project |
| 3 | * |
| 4 | * Licensed under the Apache License, Version 2.0 (the "License"); |
| 5 | * you may not use this file except in compliance with the License. |
| 6 | * You may obtain a copy of the License at |
| 7 | * |
| 8 | * http://www.apache.org/licenses/LICENSE-2.0 |
| 9 | * |
| 10 | * Unless required by applicable law or agreed to in writing, software |
| 11 | * distributed under the License is distributed on an "AS IS" BASIS, |
| 12 | * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| 13 | * See the License for the specific language governing permissions and |
| 14 | * limitations under the License. |
| 15 | */ |
| 16 | |
| 17 | #include "service.h" |
| 18 | |
| 19 | #include <fcntl.h> |
Elliott Hughes | 9605a94 | 2016-11-10 17:43:47 -0800 | [diff] [blame] | 20 | #include <inttypes.h> |
Jorge Lucangeli Obes | 24b2913 | 2016-10-27 10:33:03 -0400 | [diff] [blame] | 21 | #include <linux/securebits.h> |
Jorge Lucangeli Obes | 1b3fa3d | 2016-04-21 15:35:09 -0700 | [diff] [blame] | 22 | #include <sched.h> |
| 23 | #include <sys/mount.h> |
| 24 | #include <sys/prctl.h> |
Vitalii Tomkiv | 081705c | 2016-05-18 17:36:30 -0700 | [diff] [blame] | 25 | #include <sys/resource.h> |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 26 | #include <sys/stat.h> |
Tom Cherry | f57c0bf | 2017-04-07 13:46:21 -0700 | [diff] [blame] | 27 | #include <sys/system_properties.h> |
Vitalii Tomkiv | 081705c | 2016-05-18 17:36:30 -0700 | [diff] [blame] | 28 | #include <sys/time.h> |
Bertrand SIMONNET | b7e03e8 | 2015-12-18 11:39:59 -0800 | [diff] [blame] | 29 | #include <sys/wait.h> |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 30 | #include <termios.h> |
Dan Albert | af9ba4d | 2015-08-11 16:37:04 -0700 | [diff] [blame] | 31 | #include <unistd.h> |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 32 | |
Elliott Hughes | 4f71319 | 2015-12-04 22:00:26 -0800 | [diff] [blame] | 33 | #include <android-base/file.h> |
Tom Cherry | 3f5eaae5 | 2017-04-06 16:30:22 -0700 | [diff] [blame] | 34 | #include <android-base/logging.h> |
Elliott Hughes | da46b39 | 2016-10-11 17:09:00 -0700 | [diff] [blame] | 35 | #include <android-base/parseint.h> |
Tom Cherry | ccf2353 | 2017-03-28 16:40:41 -0700 | [diff] [blame] | 36 | #include <android-base/properties.h> |
Elliott Hughes | 4f71319 | 2015-12-04 22:00:26 -0800 | [diff] [blame] | 37 | #include <android-base/stringprintf.h> |
Elliott Hughes | f86b5a6 | 2016-06-24 15:12:21 -0700 | [diff] [blame] | 38 | #include <android-base/strings.h> |
Tom Cherry | 3f5eaae5 | 2017-04-06 16:30:22 -0700 | [diff] [blame] | 39 | #include <processgroup/processgroup.h> |
| 40 | #include <selinux/selinux.h> |
Vitalii Tomkiv | 081705c | 2016-05-18 17:36:30 -0700 | [diff] [blame] | 41 | #include <system/thread_defs.h> |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 42 | |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 43 | #include "init.h" |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 44 | #include "property_service.h" |
| 45 | #include "util.h" |
| 46 | |
James Hawkins | e78ea77 | 2017-03-24 11:43:02 -0700 | [diff] [blame] | 47 | using android::base::boot_clock; |
Elliott Hughes | da46b39 | 2016-10-11 17:09:00 -0700 | [diff] [blame] | 48 | using android::base::ParseInt; |
Tom Cherry | b734990 | 2015-08-26 11:43:36 -0700 | [diff] [blame] | 49 | using android::base::StringPrintf; |
| 50 | using android::base::WriteStringToFile; |
| 51 | |
Jorge Lucangeli Obes | 344d01f | 2016-07-08 13:32:26 -0400 | [diff] [blame] | 52 | static std::string ComputeContextFromExecutable(std::string& service_name, |
| 53 | const std::string& service_path) { |
| 54 | std::string computed_context; |
| 55 | |
| 56 | char* raw_con = nullptr; |
| 57 | char* raw_filecon = nullptr; |
| 58 | |
| 59 | if (getcon(&raw_con) == -1) { |
| 60 | LOG(ERROR) << "could not get context while starting '" << service_name << "'"; |
| 61 | return ""; |
| 62 | } |
| 63 | std::unique_ptr<char> mycon(raw_con); |
| 64 | |
| 65 | if (getfilecon(service_path.c_str(), &raw_filecon) == -1) { |
| 66 | LOG(ERROR) << "could not get file context while starting '" << service_name << "'"; |
| 67 | return ""; |
| 68 | } |
| 69 | std::unique_ptr<char> filecon(raw_filecon); |
| 70 | |
| 71 | char* new_con = nullptr; |
| 72 | int rc = security_compute_create(mycon.get(), filecon.get(), |
| 73 | string_to_security_class("process"), &new_con); |
| 74 | if (rc == 0) { |
| 75 | computed_context = new_con; |
| 76 | free(new_con); |
| 77 | } |
| 78 | if (rc == 0 && computed_context == mycon.get()) { |
| 79 | LOG(ERROR) << "service " << service_name << " does not have a SELinux domain defined"; |
| 80 | return ""; |
| 81 | } |
| 82 | if (rc < 0) { |
| 83 | LOG(ERROR) << "could not get context while starting '" << service_name << "'"; |
| 84 | return ""; |
| 85 | } |
| 86 | return computed_context; |
| 87 | } |
| 88 | |
Jorge Lucangeli Obes | 1b3fa3d | 2016-04-21 15:35:09 -0700 | [diff] [blame] | 89 | static void SetUpPidNamespace(const std::string& service_name) { |
| 90 | constexpr unsigned int kSafeFlags = MS_NODEV | MS_NOEXEC | MS_NOSUID; |
| 91 | |
| 92 | // It's OK to LOG(FATAL) in this function since it's running in the first |
| 93 | // child process. |
| 94 | if (mount("", "/proc", "proc", kSafeFlags | MS_REMOUNT, "") == -1) { |
Elliott Hughes | e18e7e5 | 2016-07-25 18:18:16 -0700 | [diff] [blame] | 95 | PLOG(FATAL) << "couldn't remount(/proc) for " << service_name; |
Jorge Lucangeli Obes | 1b3fa3d | 2016-04-21 15:35:09 -0700 | [diff] [blame] | 96 | } |
| 97 | |
| 98 | if (prctl(PR_SET_NAME, service_name.c_str()) == -1) { |
Elliott Hughes | e18e7e5 | 2016-07-25 18:18:16 -0700 | [diff] [blame] | 99 | PLOG(FATAL) << "couldn't set name for " << service_name; |
Jorge Lucangeli Obes | 1b3fa3d | 2016-04-21 15:35:09 -0700 | [diff] [blame] | 100 | } |
| 101 | |
| 102 | pid_t child_pid = fork(); |
| 103 | if (child_pid == -1) { |
Elliott Hughes | e18e7e5 | 2016-07-25 18:18:16 -0700 | [diff] [blame] | 104 | PLOG(FATAL) << "couldn't fork init inside the PID namespace for " << service_name; |
Jorge Lucangeli Obes | 1b3fa3d | 2016-04-21 15:35:09 -0700 | [diff] [blame] | 105 | } |
| 106 | |
| 107 | if (child_pid > 0) { |
| 108 | // So that we exit with the right status. |
| 109 | static int init_exitstatus = 0; |
| 110 | signal(SIGTERM, [](int) { _exit(init_exitstatus); }); |
| 111 | |
| 112 | pid_t waited_pid; |
| 113 | int status; |
| 114 | while ((waited_pid = wait(&status)) > 0) { |
| 115 | // This loop will end when there are no processes left inside the |
| 116 | // PID namespace or when the init process inside the PID namespace |
| 117 | // gets a signal. |
| 118 | if (waited_pid == child_pid) { |
| 119 | init_exitstatus = status; |
| 120 | } |
| 121 | } |
| 122 | if (!WIFEXITED(init_exitstatus)) { |
| 123 | _exit(EXIT_FAILURE); |
| 124 | } |
| 125 | _exit(WEXITSTATUS(init_exitstatus)); |
| 126 | } |
| 127 | } |
| 128 | |
Jorge Lucangeli Obes | 344d01f | 2016-07-08 13:32:26 -0400 | [diff] [blame] | 129 | static void ExpandArgs(const std::vector<std::string>& args, std::vector<char*>* strs) { |
| 130 | std::vector<std::string> expanded_args; |
| 131 | expanded_args.resize(args.size()); |
| 132 | strs->push_back(const_cast<char*>(args[0].c_str())); |
| 133 | for (std::size_t i = 1; i < args.size(); ++i) { |
| 134 | if (!expand_props(args[i], &expanded_args[i])) { |
| 135 | LOG(FATAL) << args[0] << ": cannot expand '" << args[i] << "'"; |
| 136 | } |
| 137 | strs->push_back(const_cast<char*>(expanded_args[i].c_str())); |
| 138 | } |
| 139 | strs->push_back(nullptr); |
| 140 | } |
| 141 | |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 142 | ServiceEnvironmentInfo::ServiceEnvironmentInfo() { |
| 143 | } |
| 144 | |
| 145 | ServiceEnvironmentInfo::ServiceEnvironmentInfo(const std::string& name, |
| 146 | const std::string& value) |
| 147 | : name(name), value(value) { |
| 148 | } |
| 149 | |
Wei Wang | 641ff0a | 2017-03-27 10:59:11 -0700 | [diff] [blame] | 150 | Service::Service(const std::string& name, const std::vector<std::string>& args) |
| 151 | : name_(name), |
| 152 | classnames_({"default"}), |
| 153 | flags_(0), |
| 154 | pid_(0), |
| 155 | crash_count_(0), |
| 156 | uid_(0), |
| 157 | gid_(0), |
| 158 | namespace_flags_(0), |
| 159 | seclabel_(""), |
Tom Cherry | 012c573 | 2017-04-18 13:21:54 -0700 | [diff] [blame] | 160 | onrestart_(false, "<Service '" + name + "' onrestart>", 0), |
Tom Cherry | 7da5485 | 2017-05-01 14:16:41 -0700 | [diff] [blame] | 161 | keychord_id_(0), |
Wei Wang | 641ff0a | 2017-03-27 10:59:11 -0700 | [diff] [blame] | 162 | ioprio_class_(IoSchedClass_NONE), |
| 163 | ioprio_pri_(0), |
| 164 | priority_(0), |
| 165 | oom_score_adjust_(-1000), |
| 166 | args_(args) { |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 167 | onrestart_.InitSingleTrigger("onrestart"); |
| 168 | } |
| 169 | |
Wei Wang | 641ff0a | 2017-03-27 10:59:11 -0700 | [diff] [blame] | 170 | Service::Service(const std::string& name, unsigned flags, uid_t uid, gid_t gid, |
| 171 | const std::vector<gid_t>& supp_gids, const CapSet& capabilities, |
| 172 | unsigned namespace_flags, const std::string& seclabel, |
Jorge Lucangeli Obes | 1b3fa3d | 2016-04-21 15:35:09 -0700 | [diff] [blame] | 173 | const std::vector<std::string>& args) |
Wei Wang | 641ff0a | 2017-03-27 10:59:11 -0700 | [diff] [blame] | 174 | : name_(name), |
| 175 | classnames_({"default"}), |
| 176 | flags_(flags), |
| 177 | pid_(0), |
| 178 | crash_count_(0), |
| 179 | uid_(uid), |
| 180 | gid_(gid), |
| 181 | supp_gids_(supp_gids), |
| 182 | capabilities_(capabilities), |
| 183 | namespace_flags_(namespace_flags), |
| 184 | seclabel_(seclabel), |
Tom Cherry | 012c573 | 2017-04-18 13:21:54 -0700 | [diff] [blame] | 185 | onrestart_(false, "<Service '" + name + "' onrestart>", 0), |
Tom Cherry | 7da5485 | 2017-05-01 14:16:41 -0700 | [diff] [blame] | 186 | keychord_id_(0), |
Wei Wang | 641ff0a | 2017-03-27 10:59:11 -0700 | [diff] [blame] | 187 | ioprio_class_(IoSchedClass_NONE), |
| 188 | ioprio_pri_(0), |
| 189 | priority_(0), |
| 190 | oom_score_adjust_(-1000), |
| 191 | args_(args) { |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 192 | onrestart_.InitSingleTrigger("onrestart"); |
| 193 | } |
| 194 | |
| 195 | void Service::NotifyStateChange(const std::string& new_state) const { |
Tom Cherry | b27004a | 2017-03-27 16:27:30 -0700 | [diff] [blame] | 196 | if ((flags_ & SVC_TEMPORARY) != 0) { |
| 197 | // Services created by 'exec' are temporary and don't have properties tracking their state. |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 198 | return; |
| 199 | } |
| 200 | |
Tom Cherry | b734990 | 2015-08-26 11:43:36 -0700 | [diff] [blame] | 201 | std::string prop_name = StringPrintf("init.svc.%s", name_.c_str()); |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 202 | property_set(prop_name.c_str(), new_state.c_str()); |
Elliott Hughes | 9605a94 | 2016-11-10 17:43:47 -0800 | [diff] [blame] | 203 | |
| 204 | if (new_state == "running") { |
Elliott Hughes | 9605a94 | 2016-11-10 17:43:47 -0800 | [diff] [blame] | 205 | uint64_t start_ns = time_started_.time_since_epoch().count(); |
Elliott Hughes | 331cf2f | 2016-11-29 19:20:58 +0000 | [diff] [blame] | 206 | property_set(StringPrintf("ro.boottime.%s", name_.c_str()).c_str(), |
| 207 | StringPrintf("%" PRIu64, start_ns).c_str()); |
Elliott Hughes | 9605a94 | 2016-11-10 17:43:47 -0800 | [diff] [blame] | 208 | } |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 209 | } |
| 210 | |
Elliott Hughes | ad8e94e | 2016-06-15 14:49:57 -0700 | [diff] [blame] | 211 | void Service::KillProcessGroup(int signal) { |
Tom Cherry | 33838b1 | 2017-05-04 11:32:36 -0700 | [diff] [blame^] | 212 | // We ignore reporting errors of ESRCH as this commonly happens in the below case, |
| 213 | // 1) Terminate() is called, which sends SIGTERM to the process |
| 214 | // 2) The process successfully exits |
| 215 | // 3) ReapOneProcess() is called, which calls waitpid(-1, ...) which removes the pid entry. |
| 216 | // 4) Reap() is called, which sends SIGKILL, but the pid no longer exists. |
| 217 | // TODO: sigaction for SIGCHLD reports the pid of the exiting process, |
| 218 | // we should do this kill with that pid first before calling waitpid(). |
| 219 | if (kill(-pid_, signal) == -1 && errno != ESRCH) { |
Elliott Hughes | 1e73024 | 2016-08-02 14:20:40 -0700 | [diff] [blame] | 220 | PLOG(ERROR) << "kill(" << pid_ << ", " << signal << ") failed"; |
| 221 | } |
Tom Cherry | 33838b1 | 2017-05-04 11:32:36 -0700 | [diff] [blame^] | 222 | |
| 223 | // If we've already seen a successful result from killProcessGroup*(), then we have removed |
| 224 | // the cgroup already and calling these functions a second time will simply result in an error. |
| 225 | // This is true regardless of which signal was sent. |
| 226 | // These functions handle their own logging, so no additional logging is needed. |
| 227 | if (!process_cgroup_empty_) { |
| 228 | LOG(INFO) << "Sending signal " << signal << " to service '" << name_ << "' (pid " << pid_ |
| 229 | << ") process group..."; |
| 230 | int r; |
| 231 | if (signal == SIGTERM) { |
| 232 | r = killProcessGroupOnce(uid_, pid_, signal); |
| 233 | } else { |
| 234 | r = killProcessGroup(uid_, pid_, signal); |
| 235 | } |
| 236 | |
| 237 | if (r == 0) process_cgroup_empty_ = true; |
| 238 | } |
Elliott Hughes | ad8e94e | 2016-06-15 14:49:57 -0700 | [diff] [blame] | 239 | } |
| 240 | |
Jorge Lucangeli Obes | 344d01f | 2016-07-08 13:32:26 -0400 | [diff] [blame] | 241 | void Service::SetProcessAttributes() { |
Jorge Lucangeli Obes | 24b2913 | 2016-10-27 10:33:03 -0400 | [diff] [blame] | 242 | // Keep capabilites on uid change. |
| 243 | if (capabilities_.any() && uid_) { |
| 244 | if (prctl(PR_SET_SECUREBITS, SECBIT_KEEP_CAPS | SECBIT_KEEP_CAPS_LOCKED) != 0) { |
| 245 | PLOG(FATAL) << "prtcl(PR_SET_KEEPCAPS) failed for " << name_; |
| 246 | } |
| 247 | } |
| 248 | |
Elliott Hughes | e18e7e5 | 2016-07-25 18:18:16 -0700 | [diff] [blame] | 249 | // TODO: work out why this fails for `console` then upgrade to FATAL. |
| 250 | if (setpgid(0, getpid()) == -1) PLOG(ERROR) << "setpgid failed for " << name_; |
Jorge Lucangeli Obes | 344d01f | 2016-07-08 13:32:26 -0400 | [diff] [blame] | 251 | |
| 252 | if (gid_) { |
| 253 | if (setgid(gid_) != 0) { |
Elliott Hughes | e18e7e5 | 2016-07-25 18:18:16 -0700 | [diff] [blame] | 254 | PLOG(FATAL) << "setgid failed for " << name_; |
Jorge Lucangeli Obes | 344d01f | 2016-07-08 13:32:26 -0400 | [diff] [blame] | 255 | } |
| 256 | } |
Nick Kralevich | 80960d2 | 2016-10-29 12:20:00 -0700 | [diff] [blame] | 257 | if (setgroups(supp_gids_.size(), &supp_gids_[0]) != 0) { |
| 258 | PLOG(FATAL) << "setgroups failed for " << name_; |
Jorge Lucangeli Obes | 344d01f | 2016-07-08 13:32:26 -0400 | [diff] [blame] | 259 | } |
| 260 | if (uid_) { |
| 261 | if (setuid(uid_) != 0) { |
Elliott Hughes | e18e7e5 | 2016-07-25 18:18:16 -0700 | [diff] [blame] | 262 | PLOG(FATAL) << "setuid failed for " << name_; |
Jorge Lucangeli Obes | 344d01f | 2016-07-08 13:32:26 -0400 | [diff] [blame] | 263 | } |
| 264 | } |
| 265 | if (!seclabel_.empty()) { |
| 266 | if (setexeccon(seclabel_.c_str()) < 0) { |
Elliott Hughes | e18e7e5 | 2016-07-25 18:18:16 -0700 | [diff] [blame] | 267 | PLOG(FATAL) << "cannot setexeccon('" << seclabel_ << "') for " << name_; |
Jorge Lucangeli Obes | 344d01f | 2016-07-08 13:32:26 -0400 | [diff] [blame] | 268 | } |
| 269 | } |
| 270 | if (priority_ != 0) { |
| 271 | if (setpriority(PRIO_PROCESS, 0, priority_) != 0) { |
Elliott Hughes | e18e7e5 | 2016-07-25 18:18:16 -0700 | [diff] [blame] | 272 | PLOG(FATAL) << "setpriority failed for " << name_; |
Jorge Lucangeli Obes | 344d01f | 2016-07-08 13:32:26 -0400 | [diff] [blame] | 273 | } |
| 274 | } |
Jorge Lucangeli Obes | 24b2913 | 2016-10-27 10:33:03 -0400 | [diff] [blame] | 275 | if (capabilities_.any()) { |
| 276 | if (!SetCapsForExec(capabilities_)) { |
| 277 | LOG(FATAL) << "cannot set capabilities for " << name_; |
| 278 | } |
| 279 | } |
Jorge Lucangeli Obes | 344d01f | 2016-07-08 13:32:26 -0400 | [diff] [blame] | 280 | } |
| 281 | |
Tom Cherry | b27004a | 2017-03-27 16:27:30 -0700 | [diff] [blame] | 282 | void Service::Reap() { |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 283 | if (!(flags_ & SVC_ONESHOT) || (flags_ & SVC_RESTART)) { |
Elliott Hughes | ad8e94e | 2016-06-15 14:49:57 -0700 | [diff] [blame] | 284 | KillProcessGroup(SIGKILL); |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 285 | } |
| 286 | |
Mark Salyzyn | 62767fe | 2016-10-27 07:45:34 -0700 | [diff] [blame] | 287 | // Remove any descriptor resources we may have created. |
| 288 | std::for_each(descriptors_.begin(), descriptors_.end(), |
| 289 | std::bind(&DescriptorInfo::Clean, std::placeholders::_1)); |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 290 | |
Tom Cherry | b27004a | 2017-03-27 16:27:30 -0700 | [diff] [blame] | 291 | if (flags_ & SVC_TEMPORARY) { |
| 292 | return; |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 293 | } |
| 294 | |
| 295 | pid_ = 0; |
| 296 | flags_ &= (~SVC_RUNNING); |
| 297 | |
| 298 | // Oneshot processes go into the disabled state on exit, |
| 299 | // except when manually restarted. |
| 300 | if ((flags_ & SVC_ONESHOT) && !(flags_ & SVC_RESTART)) { |
| 301 | flags_ |= SVC_DISABLED; |
| 302 | } |
| 303 | |
| 304 | // Disabled and reset processes do not get restarted automatically. |
| 305 | if (flags_ & (SVC_DISABLED | SVC_RESET)) { |
| 306 | NotifyStateChange("stopped"); |
Tom Cherry | b27004a | 2017-03-27 16:27:30 -0700 | [diff] [blame] | 307 | return; |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 308 | } |
| 309 | |
Elliott Hughes | 9605a94 | 2016-11-10 17:43:47 -0800 | [diff] [blame] | 310 | // If we crash > 4 times in 4 minutes, reboot into recovery. |
| 311 | boot_clock::time_point now = boot_clock::now(); |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 312 | if ((flags_ & SVC_CRITICAL) && !(flags_ & SVC_RESTART)) { |
Elliott Hughes | 9605a94 | 2016-11-10 17:43:47 -0800 | [diff] [blame] | 313 | if (now < time_crashed_ + 4min) { |
| 314 | if (++crash_count_ > 4) { |
Elliott Hughes | 331cf2f | 2016-11-29 19:20:58 +0000 | [diff] [blame] | 315 | LOG(ERROR) << "critical process '" << name_ << "' exited 4 times in 4 minutes"; |
| 316 | panic(); |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 317 | } |
| 318 | } else { |
| 319 | time_crashed_ = now; |
Elliott Hughes | 9605a94 | 2016-11-10 17:43:47 -0800 | [diff] [blame] | 320 | crash_count_ = 1; |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 321 | } |
| 322 | } |
| 323 | |
| 324 | flags_ &= (~SVC_RESTART); |
| 325 | flags_ |= SVC_RESTARTING; |
| 326 | |
| 327 | // Execute all onrestart commands for this service. |
| 328 | onrestart_.ExecuteAllCommands(); |
| 329 | |
| 330 | NotifyStateChange("restarting"); |
Tom Cherry | b27004a | 2017-03-27 16:27:30 -0700 | [diff] [blame] | 331 | return; |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 332 | } |
| 333 | |
| 334 | void Service::DumpState() const { |
Elliott Hughes | f86b5a6 | 2016-06-24 15:12:21 -0700 | [diff] [blame] | 335 | LOG(INFO) << "service " << name_; |
Wei Wang | 641ff0a | 2017-03-27 10:59:11 -0700 | [diff] [blame] | 336 | LOG(INFO) << " class '" << android::base::Join(classnames_, " ") << "'"; |
Elliott Hughes | f86b5a6 | 2016-06-24 15:12:21 -0700 | [diff] [blame] | 337 | LOG(INFO) << " exec "<< android::base::Join(args_, " "); |
Mark Salyzyn | 62767fe | 2016-10-27 07:45:34 -0700 | [diff] [blame] | 338 | std::for_each(descriptors_.begin(), descriptors_.end(), |
| 339 | [] (const auto& info) { LOG(INFO) << *info; }); |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 340 | } |
| 341 | |
Jorge Lucangeli Obes | 24b2913 | 2016-10-27 10:33:03 -0400 | [diff] [blame] | 342 | bool Service::ParseCapabilities(const std::vector<std::string>& args, std::string* err) { |
| 343 | capabilities_ = 0; |
| 344 | |
Jorge Lucangeli Obes | f3f824e | 2016-12-15 12:13:38 -0500 | [diff] [blame] | 345 | if (!CapAmbientSupported()) { |
| 346 | *err = "capabilities requested but the kernel does not support ambient capabilities"; |
| 347 | return false; |
| 348 | } |
| 349 | |
| 350 | unsigned int last_valid_cap = GetLastValidCap(); |
| 351 | if (last_valid_cap >= capabilities_.size()) { |
| 352 | LOG(WARNING) << "last valid run-time capability is larger than CAP_LAST_CAP"; |
| 353 | } |
| 354 | |
Jorge Lucangeli Obes | 24b2913 | 2016-10-27 10:33:03 -0400 | [diff] [blame] | 355 | for (size_t i = 1; i < args.size(); i++) { |
| 356 | const std::string& arg = args[i]; |
Jorge Lucangeli Obes | f3f824e | 2016-12-15 12:13:38 -0500 | [diff] [blame] | 357 | int res = LookupCap(arg); |
| 358 | if (res < 0) { |
Jorge Lucangeli Obes | 24b2913 | 2016-10-27 10:33:03 -0400 | [diff] [blame] | 359 | *err = StringPrintf("invalid capability '%s'", arg.c_str()); |
| 360 | return false; |
| 361 | } |
Jorge Lucangeli Obes | f3f824e | 2016-12-15 12:13:38 -0500 | [diff] [blame] | 362 | unsigned int cap = static_cast<unsigned int>(res); // |res| is >= 0. |
| 363 | if (cap > last_valid_cap) { |
| 364 | *err = StringPrintf("capability '%s' not supported by the kernel", arg.c_str()); |
| 365 | return false; |
| 366 | } |
Jorge Lucangeli Obes | 24b2913 | 2016-10-27 10:33:03 -0400 | [diff] [blame] | 367 | capabilities_[cap] = true; |
| 368 | } |
| 369 | return true; |
| 370 | } |
| 371 | |
Jorge Lucangeli Obes | 177b27d | 2016-06-29 14:32:49 -0400 | [diff] [blame] | 372 | bool Service::ParseClass(const std::vector<std::string>& args, std::string* err) { |
Wei Wang | 641ff0a | 2017-03-27 10:59:11 -0700 | [diff] [blame] | 373 | classnames_ = std::set<std::string>(args.begin() + 1, args.end()); |
Tom Cherry | b734990 | 2015-08-26 11:43:36 -0700 | [diff] [blame] | 374 | return true; |
| 375 | } |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 376 | |
Jorge Lucangeli Obes | 177b27d | 2016-06-29 14:32:49 -0400 | [diff] [blame] | 377 | bool Service::ParseConsole(const std::vector<std::string>& args, std::string* err) { |
Tom Cherry | b734990 | 2015-08-26 11:43:36 -0700 | [diff] [blame] | 378 | flags_ |= SVC_CONSOLE; |
Viorel Suman | 70daa67 | 2016-03-21 10:08:07 +0200 | [diff] [blame] | 379 | console_ = args.size() > 1 ? "/dev/" + args[1] : ""; |
Tom Cherry | b734990 | 2015-08-26 11:43:36 -0700 | [diff] [blame] | 380 | return true; |
| 381 | } |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 382 | |
Jorge Lucangeli Obes | 177b27d | 2016-06-29 14:32:49 -0400 | [diff] [blame] | 383 | bool Service::ParseCritical(const std::vector<std::string>& args, std::string* err) { |
Tom Cherry | b734990 | 2015-08-26 11:43:36 -0700 | [diff] [blame] | 384 | flags_ |= SVC_CRITICAL; |
| 385 | return true; |
| 386 | } |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 387 | |
Jorge Lucangeli Obes | 177b27d | 2016-06-29 14:32:49 -0400 | [diff] [blame] | 388 | bool Service::ParseDisabled(const std::vector<std::string>& args, std::string* err) { |
Tom Cherry | b734990 | 2015-08-26 11:43:36 -0700 | [diff] [blame] | 389 | flags_ |= SVC_DISABLED; |
| 390 | flags_ |= SVC_RC_DISABLED; |
| 391 | return true; |
| 392 | } |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 393 | |
Jorge Lucangeli Obes | 177b27d | 2016-06-29 14:32:49 -0400 | [diff] [blame] | 394 | bool Service::ParseGroup(const std::vector<std::string>& args, std::string* err) { |
Tom Cherry | b734990 | 2015-08-26 11:43:36 -0700 | [diff] [blame] | 395 | gid_ = decode_uid(args[1].c_str()); |
| 396 | for (std::size_t n = 2; n < args.size(); n++) { |
| 397 | supp_gids_.emplace_back(decode_uid(args[n].c_str())); |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 398 | } |
| 399 | return true; |
| 400 | } |
| 401 | |
Jorge Lucangeli Obes | 177b27d | 2016-06-29 14:32:49 -0400 | [diff] [blame] | 402 | bool Service::ParsePriority(const std::vector<std::string>& args, std::string* err) { |
Elliott Hughes | da46b39 | 2016-10-11 17:09:00 -0700 | [diff] [blame] | 403 | priority_ = 0; |
| 404 | if (!ParseInt(args[1], &priority_, |
Keun-young Park | dd34ca4 | 2016-11-11 18:06:31 -0800 | [diff] [blame] | 405 | static_cast<int>(ANDROID_PRIORITY_HIGHEST), // highest is negative |
| 406 | static_cast<int>(ANDROID_PRIORITY_LOWEST))) { |
Vitalii Tomkiv | 081705c | 2016-05-18 17:36:30 -0700 | [diff] [blame] | 407 | *err = StringPrintf("process priority value must be range %d - %d", |
| 408 | ANDROID_PRIORITY_HIGHEST, ANDROID_PRIORITY_LOWEST); |
| 409 | return false; |
| 410 | } |
Vitalii Tomkiv | 081705c | 2016-05-18 17:36:30 -0700 | [diff] [blame] | 411 | return true; |
| 412 | } |
| 413 | |
Jorge Lucangeli Obes | 177b27d | 2016-06-29 14:32:49 -0400 | [diff] [blame] | 414 | bool Service::ParseIoprio(const std::vector<std::string>& args, std::string* err) { |
Elliott Hughes | da46b39 | 2016-10-11 17:09:00 -0700 | [diff] [blame] | 415 | if (!ParseInt(args[2], &ioprio_pri_, 0, 7)) { |
Tom Cherry | b734990 | 2015-08-26 11:43:36 -0700 | [diff] [blame] | 416 | *err = "priority value must be range 0 - 7"; |
| 417 | return false; |
| 418 | } |
| 419 | |
| 420 | if (args[1] == "rt") { |
| 421 | ioprio_class_ = IoSchedClass_RT; |
| 422 | } else if (args[1] == "be") { |
| 423 | ioprio_class_ = IoSchedClass_BE; |
| 424 | } else if (args[1] == "idle") { |
| 425 | ioprio_class_ = IoSchedClass_IDLE; |
| 426 | } else { |
| 427 | *err = "ioprio option usage: ioprio <rt|be|idle> <0-7>"; |
| 428 | return false; |
| 429 | } |
| 430 | |
| 431 | return true; |
| 432 | } |
| 433 | |
Jorge Lucangeli Obes | 177b27d | 2016-06-29 14:32:49 -0400 | [diff] [blame] | 434 | bool Service::ParseKeycodes(const std::vector<std::string>& args, std::string* err) { |
Tom Cherry | b734990 | 2015-08-26 11:43:36 -0700 | [diff] [blame] | 435 | for (std::size_t i = 1; i < args.size(); i++) { |
Elliott Hughes | da46b39 | 2016-10-11 17:09:00 -0700 | [diff] [blame] | 436 | int code; |
| 437 | if (ParseInt(args[i], &code)) { |
| 438 | keycodes_.emplace_back(code); |
| 439 | } else { |
| 440 | LOG(WARNING) << "ignoring invalid keycode: " << args[i]; |
| 441 | } |
Tom Cherry | b734990 | 2015-08-26 11:43:36 -0700 | [diff] [blame] | 442 | } |
| 443 | return true; |
| 444 | } |
| 445 | |
Jorge Lucangeli Obes | 177b27d | 2016-06-29 14:32:49 -0400 | [diff] [blame] | 446 | bool Service::ParseOneshot(const std::vector<std::string>& args, std::string* err) { |
Tom Cherry | b734990 | 2015-08-26 11:43:36 -0700 | [diff] [blame] | 447 | flags_ |= SVC_ONESHOT; |
| 448 | return true; |
| 449 | } |
| 450 | |
Jorge Lucangeli Obes | 177b27d | 2016-06-29 14:32:49 -0400 | [diff] [blame] | 451 | bool Service::ParseOnrestart(const std::vector<std::string>& args, std::string* err) { |
Tom Cherry | b734990 | 2015-08-26 11:43:36 -0700 | [diff] [blame] | 452 | std::vector<std::string> str_args(args.begin() + 1, args.end()); |
Tom Cherry | 012c573 | 2017-04-18 13:21:54 -0700 | [diff] [blame] | 453 | int line = onrestart_.NumCommands() + 1; |
| 454 | onrestart_.AddCommand(str_args, line, err); |
Tom Cherry | b734990 | 2015-08-26 11:43:36 -0700 | [diff] [blame] | 455 | return true; |
| 456 | } |
| 457 | |
Jorge Lucangeli Obes | 177b27d | 2016-06-29 14:32:49 -0400 | [diff] [blame] | 458 | bool Service::ParseNamespace(const std::vector<std::string>& args, std::string* err) { |
Jorge Lucangeli Obes | 1b3fa3d | 2016-04-21 15:35:09 -0700 | [diff] [blame] | 459 | for (size_t i = 1; i < args.size(); i++) { |
| 460 | if (args[i] == "pid") { |
| 461 | namespace_flags_ |= CLONE_NEWPID; |
| 462 | // PID namespaces require mount namespaces. |
| 463 | namespace_flags_ |= CLONE_NEWNS; |
| 464 | } else if (args[i] == "mnt") { |
| 465 | namespace_flags_ |= CLONE_NEWNS; |
| 466 | } else { |
| 467 | *err = "namespace must be 'pid' or 'mnt'"; |
| 468 | return false; |
| 469 | } |
| 470 | } |
| 471 | return true; |
| 472 | } |
| 473 | |
Marco Nelissen | 310f670 | 2016-07-22 12:07:06 -0700 | [diff] [blame] | 474 | bool Service::ParseOomScoreAdjust(const std::vector<std::string>& args, std::string* err) { |
Elliott Hughes | da46b39 | 2016-10-11 17:09:00 -0700 | [diff] [blame] | 475 | if (!ParseInt(args[1], &oom_score_adjust_, -1000, 1000)) { |
Marco Nelissen | 310f670 | 2016-07-22 12:07:06 -0700 | [diff] [blame] | 476 | *err = "oom_score_adjust value must be in range -1000 - +1000"; |
| 477 | return false; |
| 478 | } |
Marco Nelissen | 310f670 | 2016-07-22 12:07:06 -0700 | [diff] [blame] | 479 | return true; |
| 480 | } |
| 481 | |
Jorge Lucangeli Obes | 177b27d | 2016-06-29 14:32:49 -0400 | [diff] [blame] | 482 | bool Service::ParseSeclabel(const std::vector<std::string>& args, std::string* err) { |
Tom Cherry | b734990 | 2015-08-26 11:43:36 -0700 | [diff] [blame] | 483 | seclabel_ = args[1]; |
| 484 | return true; |
| 485 | } |
| 486 | |
Jorge Lucangeli Obes | 177b27d | 2016-06-29 14:32:49 -0400 | [diff] [blame] | 487 | bool Service::ParseSetenv(const std::vector<std::string>& args, std::string* err) { |
Tom Cherry | b734990 | 2015-08-26 11:43:36 -0700 | [diff] [blame] | 488 | envvars_.emplace_back(args[1], args[2]); |
| 489 | return true; |
| 490 | } |
| 491 | |
Mark Salyzyn | 62767fe | 2016-10-27 07:45:34 -0700 | [diff] [blame] | 492 | template <typename T> |
| 493 | bool Service::AddDescriptor(const std::vector<std::string>& args, std::string* err) { |
| 494 | int perm = args.size() > 3 ? std::strtoul(args[3].c_str(), 0, 8) : -1; |
| 495 | uid_t uid = args.size() > 4 ? decode_uid(args[4].c_str()) : 0; |
| 496 | gid_t gid = args.size() > 5 ? decode_uid(args[5].c_str()) : 0; |
| 497 | std::string context = args.size() > 6 ? args[6] : ""; |
| 498 | |
| 499 | auto descriptor = std::make_unique<T>(args[1], args[2], uid, gid, perm, context); |
| 500 | |
| 501 | auto old = |
| 502 | std::find_if(descriptors_.begin(), descriptors_.end(), |
| 503 | [&descriptor] (const auto& other) { return descriptor.get() == other.get(); }); |
| 504 | |
| 505 | if (old != descriptors_.end()) { |
| 506 | *err = "duplicate descriptor " + args[1] + " " + args[2]; |
| 507 | return false; |
| 508 | } |
| 509 | |
| 510 | descriptors_.emplace_back(std::move(descriptor)); |
| 511 | return true; |
| 512 | } |
| 513 | |
| 514 | // name type perm [ uid gid context ] |
Jorge Lucangeli Obes | 177b27d | 2016-06-29 14:32:49 -0400 | [diff] [blame] | 515 | bool Service::ParseSocket(const std::vector<std::string>& args, std::string* err) { |
Tom Cherry | b734990 | 2015-08-26 11:43:36 -0700 | [diff] [blame] | 516 | if (args[2] != "dgram" && args[2] != "stream" && args[2] != "seqpacket") { |
| 517 | *err = "socket type must be 'dgram', 'stream' or 'seqpacket'"; |
| 518 | return false; |
| 519 | } |
Mark Salyzyn | 62767fe | 2016-10-27 07:45:34 -0700 | [diff] [blame] | 520 | return AddDescriptor<SocketInfo>(args, err); |
| 521 | } |
Tom Cherry | b734990 | 2015-08-26 11:43:36 -0700 | [diff] [blame] | 522 | |
Mark Salyzyn | 62767fe | 2016-10-27 07:45:34 -0700 | [diff] [blame] | 523 | // name type perm [ uid gid context ] |
| 524 | bool Service::ParseFile(const std::vector<std::string>& args, std::string* err) { |
| 525 | if (args[2] != "r" && args[2] != "w" && args[2] != "rw") { |
| 526 | *err = "file type must be 'r', 'w' or 'rw'"; |
| 527 | return false; |
| 528 | } |
| 529 | if ((args[1][0] != '/') || (args[1].find("../") != std::string::npos)) { |
| 530 | *err = "file name must not be relative"; |
| 531 | return false; |
| 532 | } |
| 533 | return AddDescriptor<FileInfo>(args, err); |
Tom Cherry | b734990 | 2015-08-26 11:43:36 -0700 | [diff] [blame] | 534 | } |
| 535 | |
Jorge Lucangeli Obes | 177b27d | 2016-06-29 14:32:49 -0400 | [diff] [blame] | 536 | bool Service::ParseUser(const std::vector<std::string>& args, std::string* err) { |
Tom Cherry | b734990 | 2015-08-26 11:43:36 -0700 | [diff] [blame] | 537 | uid_ = decode_uid(args[1].c_str()); |
| 538 | return true; |
| 539 | } |
| 540 | |
Jorge Lucangeli Obes | 177b27d | 2016-06-29 14:32:49 -0400 | [diff] [blame] | 541 | bool Service::ParseWritepid(const std::vector<std::string>& args, std::string* err) { |
Tom Cherry | b734990 | 2015-08-26 11:43:36 -0700 | [diff] [blame] | 542 | writepid_files_.assign(args.begin() + 1, args.end()); |
| 543 | return true; |
| 544 | } |
| 545 | |
Jorge Lucangeli Obes | 177b27d | 2016-06-29 14:32:49 -0400 | [diff] [blame] | 546 | class Service::OptionParserMap : public KeywordMap<OptionParser> { |
Tom Cherry | ad54d09 | 2017-04-19 16:18:50 -0700 | [diff] [blame] | 547 | public: |
| 548 | OptionParserMap() {} |
| 549 | |
| 550 | private: |
| 551 | const Map& map() const override; |
Tom Cherry | b734990 | 2015-08-26 11:43:36 -0700 | [diff] [blame] | 552 | }; |
| 553 | |
Tom Cherry | ad54d09 | 2017-04-19 16:18:50 -0700 | [diff] [blame] | 554 | const Service::OptionParserMap::Map& Service::OptionParserMap::map() const { |
Tom Cherry | b734990 | 2015-08-26 11:43:36 -0700 | [diff] [blame] | 555 | constexpr std::size_t kMax = std::numeric_limits<std::size_t>::max(); |
Wei Wang | 641ff0a | 2017-03-27 10:59:11 -0700 | [diff] [blame] | 556 | // clang-format off |
Jorge Lucangeli Obes | 177b27d | 2016-06-29 14:32:49 -0400 | [diff] [blame] | 557 | static const Map option_parsers = { |
Jorge Lucangeli Obes | 24b2913 | 2016-10-27 10:33:03 -0400 | [diff] [blame] | 558 | {"capabilities", |
| 559 | {1, kMax, &Service::ParseCapabilities}}, |
Wei Wang | 641ff0a | 2017-03-27 10:59:11 -0700 | [diff] [blame] | 560 | {"class", {1, kMax, &Service::ParseClass}}, |
Jorge Lucangeli Obes | 177b27d | 2016-06-29 14:32:49 -0400 | [diff] [blame] | 561 | {"console", {0, 1, &Service::ParseConsole}}, |
| 562 | {"critical", {0, 0, &Service::ParseCritical}}, |
| 563 | {"disabled", {0, 0, &Service::ParseDisabled}}, |
| 564 | {"group", {1, NR_SVC_SUPP_GIDS + 1, &Service::ParseGroup}}, |
| 565 | {"ioprio", {2, 2, &Service::ParseIoprio}}, |
| 566 | {"priority", {1, 1, &Service::ParsePriority}}, |
| 567 | {"keycodes", {1, kMax, &Service::ParseKeycodes}}, |
| 568 | {"oneshot", {0, 0, &Service::ParseOneshot}}, |
| 569 | {"onrestart", {1, kMax, &Service::ParseOnrestart}}, |
Marco Nelissen | 310f670 | 2016-07-22 12:07:06 -0700 | [diff] [blame] | 570 | {"oom_score_adjust", |
| 571 | {1, 1, &Service::ParseOomScoreAdjust}}, |
Jorge Lucangeli Obes | 177b27d | 2016-06-29 14:32:49 -0400 | [diff] [blame] | 572 | {"namespace", {1, 2, &Service::ParseNamespace}}, |
| 573 | {"seclabel", {1, 1, &Service::ParseSeclabel}}, |
| 574 | {"setenv", {2, 2, &Service::ParseSetenv}}, |
| 575 | {"socket", {3, 6, &Service::ParseSocket}}, |
Mark Salyzyn | 978fd0e | 2016-12-02 08:05:22 -0800 | [diff] [blame] | 576 | {"file", {2, 2, &Service::ParseFile}}, |
Jorge Lucangeli Obes | 177b27d | 2016-06-29 14:32:49 -0400 | [diff] [blame] | 577 | {"user", {1, 1, &Service::ParseUser}}, |
| 578 | {"writepid", {1, kMax, &Service::ParseWritepid}}, |
Tom Cherry | b734990 | 2015-08-26 11:43:36 -0700 | [diff] [blame] | 579 | }; |
Wei Wang | 641ff0a | 2017-03-27 10:59:11 -0700 | [diff] [blame] | 580 | // clang-format on |
Jorge Lucangeli Obes | 177b27d | 2016-06-29 14:32:49 -0400 | [diff] [blame] | 581 | return option_parsers; |
Tom Cherry | b734990 | 2015-08-26 11:43:36 -0700 | [diff] [blame] | 582 | } |
| 583 | |
Jorge Lucangeli Obes | 177b27d | 2016-06-29 14:32:49 -0400 | [diff] [blame] | 584 | bool Service::ParseLine(const std::vector<std::string>& args, std::string* err) { |
Jorge Lucangeli Obes | 177b27d | 2016-06-29 14:32:49 -0400 | [diff] [blame] | 585 | static const OptionParserMap parser_map; |
Tom Cherry | fe06205 | 2017-04-24 16:59:05 -0700 | [diff] [blame] | 586 | auto parser = parser_map.FindFunction(args, err); |
Tom Cherry | b734990 | 2015-08-26 11:43:36 -0700 | [diff] [blame] | 587 | |
Jorge Lucangeli Obes | 177b27d | 2016-06-29 14:32:49 -0400 | [diff] [blame] | 588 | if (!parser) { |
Tom Cherry | b734990 | 2015-08-26 11:43:36 -0700 | [diff] [blame] | 589 | return false; |
| 590 | } |
| 591 | |
Jorge Lucangeli Obes | 177b27d | 2016-06-29 14:32:49 -0400 | [diff] [blame] | 592 | return (this->*parser)(args, err); |
Tom Cherry | b734990 | 2015-08-26 11:43:36 -0700 | [diff] [blame] | 593 | } |
| 594 | |
Tom Cherry | b27004a | 2017-03-27 16:27:30 -0700 | [diff] [blame] | 595 | bool Service::ExecStart(std::unique_ptr<Timer>* exec_waiter) { |
| 596 | flags_ |= SVC_EXEC | SVC_ONESHOT; |
| 597 | |
| 598 | exec_waiter->reset(new Timer); |
| 599 | |
| 600 | if (!Start()) { |
| 601 | exec_waiter->reset(); |
| 602 | return false; |
| 603 | } |
| 604 | return true; |
| 605 | } |
| 606 | |
Elliott Hughes | bdeac39 | 2016-04-12 15:38:27 -0700 | [diff] [blame] | 607 | bool Service::Start() { |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 608 | // Starting a service removes it from the disabled or reset state and |
| 609 | // immediately takes it out of the restarting state if it was in there. |
| 610 | flags_ &= (~(SVC_DISABLED|SVC_RESTARTING|SVC_RESET|SVC_RESTART|SVC_DISABLED_START)); |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 611 | |
| 612 | // Running processes require no additional work --- if they're in the |
| 613 | // process of exiting, we've ensured that they will immediately restart |
| 614 | // on exit, unless they are ONESHOT. |
| 615 | if (flags_ & SVC_RUNNING) { |
| 616 | return false; |
| 617 | } |
| 618 | |
| 619 | bool needs_console = (flags_ & SVC_CONSOLE); |
Viorel Suman | 70daa67 | 2016-03-21 10:08:07 +0200 | [diff] [blame] | 620 | if (needs_console) { |
| 621 | if (console_.empty()) { |
| 622 | console_ = default_console; |
| 623 | } |
| 624 | |
Adrian Salido | 24ef860 | 2016-12-20 15:52:15 -0800 | [diff] [blame] | 625 | // Make sure that open call succeeds to ensure a console driver is |
| 626 | // properly registered for the device node |
| 627 | int console_fd = open(console_.c_str(), O_RDWR | O_CLOEXEC); |
| 628 | if (console_fd < 0) { |
| 629 | PLOG(ERROR) << "service '" << name_ << "' couldn't open console '" << console_ << "'"; |
Viorel Suman | 70daa67 | 2016-03-21 10:08:07 +0200 | [diff] [blame] | 630 | flags_ |= SVC_DISABLED; |
| 631 | return false; |
| 632 | } |
Adrian Salido | 24ef860 | 2016-12-20 15:52:15 -0800 | [diff] [blame] | 633 | close(console_fd); |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 634 | } |
| 635 | |
| 636 | struct stat sb; |
| 637 | if (stat(args_[0].c_str(), &sb) == -1) { |
Elliott Hughes | f86b5a6 | 2016-06-24 15:12:21 -0700 | [diff] [blame] | 638 | PLOG(ERROR) << "cannot find '" << args_[0] << "', disabling '" << name_ << "'"; |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 639 | flags_ |= SVC_DISABLED; |
| 640 | return false; |
| 641 | } |
| 642 | |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 643 | std::string scon; |
| 644 | if (!seclabel_.empty()) { |
| 645 | scon = seclabel_; |
| 646 | } else { |
Jorge Lucangeli Obes | 344d01f | 2016-07-08 13:32:26 -0400 | [diff] [blame] | 647 | scon = ComputeContextFromExecutable(name_, args_[0]); |
| 648 | if (scon == "") { |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 649 | return false; |
| 650 | } |
| 651 | } |
| 652 | |
Wei Wang | a285dac | 2016-10-04 14:05:39 -0700 | [diff] [blame] | 653 | LOG(INFO) << "starting service '" << name_ << "'..."; |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 654 | |
Jorge Lucangeli Obes | 1b3fa3d | 2016-04-21 15:35:09 -0700 | [diff] [blame] | 655 | pid_t pid = -1; |
| 656 | if (namespace_flags_) { |
Jorge Lucangeli Obes | 344d01f | 2016-07-08 13:32:26 -0400 | [diff] [blame] | 657 | pid = clone(nullptr, nullptr, namespace_flags_ | SIGCHLD, nullptr); |
Jorge Lucangeli Obes | 1b3fa3d | 2016-04-21 15:35:09 -0700 | [diff] [blame] | 658 | } else { |
| 659 | pid = fork(); |
| 660 | } |
| 661 | |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 662 | if (pid == 0) { |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 663 | umask(077); |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 664 | |
Jorge Lucangeli Obes | 1b3fa3d | 2016-04-21 15:35:09 -0700 | [diff] [blame] | 665 | if (namespace_flags_ & CLONE_NEWPID) { |
| 666 | // This will fork again to run an init process inside the PID |
| 667 | // namespace. |
| 668 | SetUpPidNamespace(name_); |
| 669 | } |
| 670 | |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 671 | for (const auto& ei : envvars_) { |
| 672 | add_environment(ei.name.c_str(), ei.value.c_str()); |
| 673 | } |
| 674 | |
Mark Salyzyn | 62767fe | 2016-10-27 07:45:34 -0700 | [diff] [blame] | 675 | std::for_each(descriptors_.begin(), descriptors_.end(), |
| 676 | std::bind(&DescriptorInfo::CreateAndPublish, std::placeholders::_1, scon)); |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 677 | |
Alex Vakulenko | 0828676 | 2016-05-03 12:00:00 -0700 | [diff] [blame] | 678 | // See if there were "writepid" instructions to write to files under /dev/cpuset/. |
| 679 | auto cpuset_predicate = [](const std::string& path) { |
| 680 | return android::base::StartsWith(path, "/dev/cpuset/"); |
| 681 | }; |
| 682 | auto iter = std::find_if(writepid_files_.begin(), writepid_files_.end(), cpuset_predicate); |
| 683 | if (iter == writepid_files_.end()) { |
| 684 | // There were no "writepid" instructions for cpusets, check if the system default |
| 685 | // cpuset is specified to be used for the process. |
Tom Cherry | ccf2353 | 2017-03-28 16:40:41 -0700 | [diff] [blame] | 686 | std::string default_cpuset = android::base::GetProperty("ro.cpuset.default", ""); |
Alex Vakulenko | 0828676 | 2016-05-03 12:00:00 -0700 | [diff] [blame] | 687 | if (!default_cpuset.empty()) { |
| 688 | // Make sure the cpuset name starts and ends with '/'. |
| 689 | // A single '/' means the 'root' cpuset. |
| 690 | if (default_cpuset.front() != '/') { |
| 691 | default_cpuset.insert(0, 1, '/'); |
| 692 | } |
| 693 | if (default_cpuset.back() != '/') { |
| 694 | default_cpuset.push_back('/'); |
| 695 | } |
| 696 | writepid_files_.push_back( |
| 697 | StringPrintf("/dev/cpuset%stasks", default_cpuset.c_str())); |
| 698 | } |
| 699 | } |
Anestis Bechtsoudis | b702b46 | 2016-02-05 16:38:48 +0200 | [diff] [blame] | 700 | std::string pid_str = StringPrintf("%d", getpid()); |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 701 | for (const auto& file : writepid_files_) { |
Tom Cherry | b734990 | 2015-08-26 11:43:36 -0700 | [diff] [blame] | 702 | if (!WriteStringToFile(pid_str, file)) { |
Elliott Hughes | f86b5a6 | 2016-06-24 15:12:21 -0700 | [diff] [blame] | 703 | PLOG(ERROR) << "couldn't write " << pid_str << " to " << file; |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 704 | } |
| 705 | } |
| 706 | |
| 707 | if (ioprio_class_ != IoSchedClass_NONE) { |
| 708 | if (android_set_ioprio(getpid(), ioprio_class_, ioprio_pri_)) { |
Jorge Lucangeli Obes | 344d01f | 2016-07-08 13:32:26 -0400 | [diff] [blame] | 709 | PLOG(ERROR) << "failed to set pid " << getpid() |
Elliott Hughes | f86b5a6 | 2016-06-24 15:12:21 -0700 | [diff] [blame] | 710 | << " ioprio=" << ioprio_class_ << "," << ioprio_pri_; |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 711 | } |
| 712 | } |
| 713 | |
| 714 | if (needs_console) { |
| 715 | setsid(); |
| 716 | OpenConsole(); |
| 717 | } else { |
| 718 | ZapStdio(); |
| 719 | } |
| 720 | |
Jorge Lucangeli Obes | 344d01f | 2016-07-08 13:32:26 -0400 | [diff] [blame] | 721 | // As requested, set our gid, supplemental gids, uid, context, and |
| 722 | // priority. Aborts on failure. |
| 723 | SetProcessAttributes(); |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 724 | |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 725 | std::vector<char*> strs; |
Jorge Lucangeli Obes | 344d01f | 2016-07-08 13:32:26 -0400 | [diff] [blame] | 726 | ExpandArgs(args_, &strs); |
Tom Cherry | bac3536 | 2016-06-07 11:22:00 -0700 | [diff] [blame] | 727 | if (execve(strs[0], (char**) &strs[0], (char**) ENV) < 0) { |
Elliott Hughes | f86b5a6 | 2016-06-24 15:12:21 -0700 | [diff] [blame] | 728 | PLOG(ERROR) << "cannot execve('" << strs[0] << "')"; |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 729 | } |
| 730 | |
| 731 | _exit(127); |
| 732 | } |
| 733 | |
| 734 | if (pid < 0) { |
Elliott Hughes | f86b5a6 | 2016-06-24 15:12:21 -0700 | [diff] [blame] | 735 | PLOG(ERROR) << "failed to fork for '" << name_ << "'"; |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 736 | pid_ = 0; |
| 737 | return false; |
| 738 | } |
| 739 | |
Marco Nelissen | 310f670 | 2016-07-22 12:07:06 -0700 | [diff] [blame] | 740 | if (oom_score_adjust_ != -1000) { |
| 741 | std::string oom_str = StringPrintf("%d", oom_score_adjust_); |
| 742 | std::string oom_file = StringPrintf("/proc/%d/oom_score_adj", pid); |
| 743 | if (!WriteStringToFile(oom_str, oom_file)) { |
| 744 | PLOG(ERROR) << "couldn't write oom_score_adj: " << strerror(errno); |
| 745 | } |
| 746 | } |
| 747 | |
Elliott Hughes | 9605a94 | 2016-11-10 17:43:47 -0800 | [diff] [blame] | 748 | time_started_ = boot_clock::now(); |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 749 | pid_ = pid; |
| 750 | flags_ |= SVC_RUNNING; |
Tom Cherry | 33838b1 | 2017-05-04 11:32:36 -0700 | [diff] [blame^] | 751 | process_cgroup_empty_ = false; |
Elliott Hughes | ad8e94e | 2016-06-15 14:49:57 -0700 | [diff] [blame] | 752 | |
| 753 | errno = -createProcessGroup(uid_, pid_); |
| 754 | if (errno != 0) { |
Jorge Lucangeli Obes | 344d01f | 2016-07-08 13:32:26 -0400 | [diff] [blame] | 755 | PLOG(ERROR) << "createProcessGroup(" << uid_ << ", " << pid_ << ") failed for service '" |
| 756 | << name_ << "'"; |
Elliott Hughes | ad8e94e | 2016-06-15 14:49:57 -0700 | [diff] [blame] | 757 | } |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 758 | |
| 759 | if ((flags_ & SVC_EXEC) != 0) { |
Jorge Lucangeli Obes | 344d01f | 2016-07-08 13:32:26 -0400 | [diff] [blame] | 760 | LOG(INFO) << android::base::StringPrintf( |
| 761 | "SVC_EXEC pid %d (uid %d gid %d+%zu context %s) started; waiting...", pid_, uid_, gid_, |
| 762 | supp_gids_.size(), !seclabel_.empty() ? seclabel_.c_str() : "default"); |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 763 | } |
| 764 | |
| 765 | NotifyStateChange("running"); |
| 766 | return true; |
| 767 | } |
| 768 | |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 769 | bool Service::StartIfNotDisabled() { |
| 770 | if (!(flags_ & SVC_DISABLED)) { |
| 771 | return Start(); |
| 772 | } else { |
| 773 | flags_ |= SVC_DISABLED_START; |
| 774 | } |
| 775 | return true; |
| 776 | } |
| 777 | |
| 778 | bool Service::Enable() { |
| 779 | flags_ &= ~(SVC_DISABLED | SVC_RC_DISABLED); |
| 780 | if (flags_ & SVC_DISABLED_START) { |
| 781 | return Start(); |
| 782 | } |
| 783 | return true; |
| 784 | } |
| 785 | |
| 786 | void Service::Reset() { |
| 787 | StopOrReset(SVC_RESET); |
| 788 | } |
| 789 | |
| 790 | void Service::Stop() { |
| 791 | StopOrReset(SVC_DISABLED); |
| 792 | } |
| 793 | |
Bertrand SIMONNET | b7e03e8 | 2015-12-18 11:39:59 -0800 | [diff] [blame] | 794 | void Service::Terminate() { |
| 795 | flags_ &= ~(SVC_RESTARTING | SVC_DISABLED_START); |
| 796 | flags_ |= SVC_DISABLED; |
| 797 | if (pid_) { |
Elliott Hughes | ad8e94e | 2016-06-15 14:49:57 -0700 | [diff] [blame] | 798 | KillProcessGroup(SIGTERM); |
Bertrand SIMONNET | b7e03e8 | 2015-12-18 11:39:59 -0800 | [diff] [blame] | 799 | NotifyStateChange("stopping"); |
| 800 | } |
| 801 | } |
| 802 | |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 803 | void Service::Restart() { |
| 804 | if (flags_ & SVC_RUNNING) { |
| 805 | /* Stop, wait, then start the service. */ |
| 806 | StopOrReset(SVC_RESTART); |
| 807 | } else if (!(flags_ & SVC_RESTARTING)) { |
| 808 | /* Just start the service since it's not running. */ |
| 809 | Start(); |
| 810 | } /* else: Service is restarting anyways. */ |
| 811 | } |
| 812 | |
Elliott Hughes | 9605a94 | 2016-11-10 17:43:47 -0800 | [diff] [blame] | 813 | void Service::RestartIfNeeded(time_t* process_needs_restart_at) { |
| 814 | boot_clock::time_point now = boot_clock::now(); |
| 815 | boot_clock::time_point next_start = time_started_ + 5s; |
| 816 | if (now > next_start) { |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 817 | flags_ &= (~SVC_RESTARTING); |
| 818 | Start(); |
| 819 | return; |
| 820 | } |
| 821 | |
Elliott Hughes | 9605a94 | 2016-11-10 17:43:47 -0800 | [diff] [blame] | 822 | time_t next_start_time_t = time(nullptr) + |
| 823 | time_t(std::chrono::duration_cast<std::chrono::seconds>(next_start - now).count()); |
| 824 | if (next_start_time_t < *process_needs_restart_at || *process_needs_restart_at == 0) { |
| 825 | *process_needs_restart_at = next_start_time_t; |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 826 | } |
| 827 | } |
| 828 | |
Elliott Hughes | ad8e94e | 2016-06-15 14:49:57 -0700 | [diff] [blame] | 829 | // The how field should be either SVC_DISABLED, SVC_RESET, or SVC_RESTART. |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 830 | void Service::StopOrReset(int how) { |
Elliott Hughes | ad8e94e | 2016-06-15 14:49:57 -0700 | [diff] [blame] | 831 | // The service is still SVC_RUNNING until its process exits, but if it has |
| 832 | // already exited it shoudn't attempt a restart yet. |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 833 | flags_ &= ~(SVC_RESTARTING | SVC_DISABLED_START); |
| 834 | |
| 835 | if ((how != SVC_DISABLED) && (how != SVC_RESET) && (how != SVC_RESTART)) { |
Elliott Hughes | ad8e94e | 2016-06-15 14:49:57 -0700 | [diff] [blame] | 836 | // An illegal flag: default to SVC_DISABLED. |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 837 | how = SVC_DISABLED; |
| 838 | } |
Elliott Hughes | ad8e94e | 2016-06-15 14:49:57 -0700 | [diff] [blame] | 839 | |
| 840 | // If the service has not yet started, prevent it from auto-starting with its class. |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 841 | if (how == SVC_RESET) { |
| 842 | flags_ |= (flags_ & SVC_RC_DISABLED) ? SVC_DISABLED : SVC_RESET; |
| 843 | } else { |
| 844 | flags_ |= how; |
| 845 | } |
| 846 | |
| 847 | if (pid_) { |
Elliott Hughes | ad8e94e | 2016-06-15 14:49:57 -0700 | [diff] [blame] | 848 | KillProcessGroup(SIGKILL); |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 849 | NotifyStateChange("stopping"); |
| 850 | } else { |
| 851 | NotifyStateChange("stopped"); |
| 852 | } |
| 853 | } |
| 854 | |
| 855 | void Service::ZapStdio() const { |
| 856 | int fd; |
| 857 | fd = open("/dev/null", O_RDWR); |
| 858 | dup2(fd, 0); |
| 859 | dup2(fd, 1); |
| 860 | dup2(fd, 2); |
| 861 | close(fd); |
| 862 | } |
| 863 | |
| 864 | void Service::OpenConsole() const { |
Viorel Suman | 70daa67 | 2016-03-21 10:08:07 +0200 | [diff] [blame] | 865 | int fd = open(console_.c_str(), O_RDWR); |
| 866 | if (fd == -1) fd = open("/dev/null", O_RDWR); |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 867 | ioctl(fd, TIOCSCTTY, 0); |
| 868 | dup2(fd, 0); |
| 869 | dup2(fd, 1); |
| 870 | dup2(fd, 2); |
| 871 | close(fd); |
| 872 | } |
| 873 | |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 874 | int ServiceManager::exec_count_ = 0; |
| 875 | |
| 876 | ServiceManager::ServiceManager() { |
| 877 | } |
| 878 | |
| 879 | ServiceManager& ServiceManager::GetInstance() { |
| 880 | static ServiceManager instance; |
| 881 | return instance; |
| 882 | } |
| 883 | |
Tom Cherry | b734990 | 2015-08-26 11:43:36 -0700 | [diff] [blame] | 884 | void ServiceManager::AddService(std::unique_ptr<Service> service) { |
Tom Cherry | b734990 | 2015-08-26 11:43:36 -0700 | [diff] [blame] | 885 | services_.emplace_back(std::move(service)); |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 886 | } |
| 887 | |
Tom Cherry | b27004a | 2017-03-27 16:27:30 -0700 | [diff] [blame] | 888 | bool ServiceManager::Exec(const std::vector<std::string>& args) { |
| 889 | Service* svc = MakeExecOneshotService(args); |
| 890 | if (!svc) { |
| 891 | LOG(ERROR) << "Could not create exec service"; |
| 892 | return false; |
| 893 | } |
| 894 | if (!svc->ExecStart(&exec_waiter_)) { |
| 895 | LOG(ERROR) << "Could not start exec service"; |
| 896 | ServiceManager::GetInstance().RemoveService(*svc); |
| 897 | return false; |
| 898 | } |
| 899 | return true; |
| 900 | } |
| 901 | |
| 902 | bool ServiceManager::ExecStart(const std::string& name) { |
| 903 | Service* svc = FindServiceByName(name); |
| 904 | if (!svc) { |
| 905 | LOG(ERROR) << "ExecStart(" << name << "): Service not found"; |
| 906 | return false; |
| 907 | } |
| 908 | if (!svc->ExecStart(&exec_waiter_)) { |
| 909 | LOG(ERROR) << "ExecStart(" << name << "): Could not start Service"; |
| 910 | return false; |
| 911 | } |
| 912 | return true; |
| 913 | } |
| 914 | |
| 915 | bool ServiceManager::IsWaitingForExec() const { return exec_waiter_ != nullptr; } |
| 916 | |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 917 | Service* ServiceManager::MakeExecOneshotService(const std::vector<std::string>& args) { |
| 918 | // Parse the arguments: exec [SECLABEL [UID [GID]*] --] COMMAND ARGS... |
| 919 | // SECLABEL can be a - to denote default |
| 920 | std::size_t command_arg = 1; |
| 921 | for (std::size_t i = 1; i < args.size(); ++i) { |
| 922 | if (args[i] == "--") { |
| 923 | command_arg = i + 1; |
| 924 | break; |
| 925 | } |
| 926 | } |
| 927 | if (command_arg > 4 + NR_SVC_SUPP_GIDS) { |
Elliott Hughes | f86b5a6 | 2016-06-24 15:12:21 -0700 | [diff] [blame] | 928 | LOG(ERROR) << "exec called with too many supplementary group ids"; |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 929 | return nullptr; |
| 930 | } |
| 931 | |
| 932 | if (command_arg >= args.size()) { |
Elliott Hughes | f86b5a6 | 2016-06-24 15:12:21 -0700 | [diff] [blame] | 933 | LOG(ERROR) << "exec called without command"; |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 934 | return nullptr; |
| 935 | } |
| 936 | std::vector<std::string> str_args(args.begin() + command_arg, args.end()); |
| 937 | |
| 938 | exec_count_++; |
Tom Cherry | 86e31a8 | 2017-04-25 17:31:06 -0700 | [diff] [blame] | 939 | std::string name = |
| 940 | "exec " + std::to_string(exec_count_) + " (" + android::base::Join(str_args, " ") + ")"; |
| 941 | |
Tom Cherry | b27004a | 2017-03-27 16:27:30 -0700 | [diff] [blame] | 942 | unsigned flags = SVC_EXEC | SVC_ONESHOT | SVC_TEMPORARY; |
Jorge Lucangeli Obes | 24b2913 | 2016-10-27 10:33:03 -0400 | [diff] [blame] | 943 | CapSet no_capabilities; |
Jorge Lucangeli Obes | 1b3fa3d | 2016-04-21 15:35:09 -0700 | [diff] [blame] | 944 | unsigned namespace_flags = 0; |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 945 | |
| 946 | std::string seclabel = ""; |
| 947 | if (command_arg > 2 && args[1] != "-") { |
| 948 | seclabel = args[1]; |
| 949 | } |
| 950 | uid_t uid = 0; |
| 951 | if (command_arg > 3) { |
| 952 | uid = decode_uid(args[2].c_str()); |
| 953 | } |
| 954 | gid_t gid = 0; |
| 955 | std::vector<gid_t> supp_gids; |
| 956 | if (command_arg > 4) { |
| 957 | gid = decode_uid(args[3].c_str()); |
| 958 | std::size_t nr_supp_gids = command_arg - 1 /* -- */ - 4 /* exec SECLABEL UID GID */; |
| 959 | for (size_t i = 0; i < nr_supp_gids; ++i) { |
| 960 | supp_gids.push_back(decode_uid(args[4 + i].c_str())); |
| 961 | } |
| 962 | } |
| 963 | |
Wei Wang | 641ff0a | 2017-03-27 10:59:11 -0700 | [diff] [blame] | 964 | auto svc_p = std::make_unique<Service>(name, flags, uid, gid, supp_gids, no_capabilities, |
| 965 | namespace_flags, seclabel, str_args); |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 966 | Service* svc = svc_p.get(); |
Tom Cherry | 9bdddd7 | 2017-03-23 16:07:51 -0700 | [diff] [blame] | 967 | services_.emplace_back(std::move(svc_p)); |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 968 | |
| 969 | return svc; |
| 970 | } |
| 971 | |
| 972 | Service* ServiceManager::FindServiceByName(const std::string& name) const { |
| 973 | auto svc = std::find_if(services_.begin(), services_.end(), |
| 974 | [&name] (const std::unique_ptr<Service>& s) { |
| 975 | return name == s->name(); |
| 976 | }); |
| 977 | if (svc != services_.end()) { |
| 978 | return svc->get(); |
| 979 | } |
| 980 | return nullptr; |
| 981 | } |
| 982 | |
| 983 | Service* ServiceManager::FindServiceByPid(pid_t pid) const { |
| 984 | auto svc = std::find_if(services_.begin(), services_.end(), |
| 985 | [&pid] (const std::unique_ptr<Service>& s) { |
| 986 | return s->pid() == pid; |
| 987 | }); |
| 988 | if (svc != services_.end()) { |
| 989 | return svc->get(); |
| 990 | } |
| 991 | return nullptr; |
| 992 | } |
| 993 | |
| 994 | Service* ServiceManager::FindServiceByKeychord(int keychord_id) const { |
| 995 | auto svc = std::find_if(services_.begin(), services_.end(), |
| 996 | [&keychord_id] (const std::unique_ptr<Service>& s) { |
| 997 | return s->keychord_id() == keychord_id; |
| 998 | }); |
| 999 | |
| 1000 | if (svc != services_.end()) { |
| 1001 | return svc->get(); |
| 1002 | } |
| 1003 | return nullptr; |
| 1004 | } |
| 1005 | |
Chih-Hung Hsieh | 8f7b9e3 | 2016-07-27 16:25:51 -0700 | [diff] [blame] | 1006 | void ServiceManager::ForEachService(const std::function<void(Service*)>& callback) const { |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 1007 | for (const auto& s : services_) { |
Bertrand SIMONNET | b7e03e8 | 2015-12-18 11:39:59 -0800 | [diff] [blame] | 1008 | callback(s.get()); |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 1009 | } |
| 1010 | } |
| 1011 | |
| 1012 | void ServiceManager::ForEachServiceInClass(const std::string& classname, |
| 1013 | void (*func)(Service* svc)) const { |
| 1014 | for (const auto& s : services_) { |
Wei Wang | 641ff0a | 2017-03-27 10:59:11 -0700 | [diff] [blame] | 1015 | if (s->classnames().find(classname) != s->classnames().end()) { |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 1016 | func(s.get()); |
| 1017 | } |
| 1018 | } |
| 1019 | } |
| 1020 | |
| 1021 | void ServiceManager::ForEachServiceWithFlags(unsigned matchflags, |
| 1022 | void (*func)(Service* svc)) const { |
| 1023 | for (const auto& s : services_) { |
| 1024 | if (s->flags() & matchflags) { |
| 1025 | func(s.get()); |
| 1026 | } |
| 1027 | } |
| 1028 | } |
| 1029 | |
Tom Cherry | b734990 | 2015-08-26 11:43:36 -0700 | [diff] [blame] | 1030 | void ServiceManager::RemoveService(const Service& svc) { |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 1031 | auto svc_it = std::find_if(services_.begin(), services_.end(), |
| 1032 | [&svc] (const std::unique_ptr<Service>& s) { |
| 1033 | return svc.name() == s->name(); |
| 1034 | }); |
| 1035 | if (svc_it == services_.end()) { |
| 1036 | return; |
| 1037 | } |
| 1038 | |
| 1039 | services_.erase(svc_it); |
| 1040 | } |
| 1041 | |
Tom Cherry | b734990 | 2015-08-26 11:43:36 -0700 | [diff] [blame] | 1042 | void ServiceManager::DumpState() const { |
| 1043 | for (const auto& s : services_) { |
| 1044 | s->DumpState(); |
| 1045 | } |
Tom Cherry | b734990 | 2015-08-26 11:43:36 -0700 | [diff] [blame] | 1046 | } |
| 1047 | |
Bertrand SIMONNET | b7e03e8 | 2015-12-18 11:39:59 -0800 | [diff] [blame] | 1048 | bool ServiceManager::ReapOneProcess() { |
| 1049 | int status; |
| 1050 | pid_t pid = TEMP_FAILURE_RETRY(waitpid(-1, &status, WNOHANG)); |
| 1051 | if (pid == 0) { |
| 1052 | return false; |
| 1053 | } else if (pid == -1) { |
Elliott Hughes | f86b5a6 | 2016-06-24 15:12:21 -0700 | [diff] [blame] | 1054 | PLOG(ERROR) << "waitpid failed"; |
Bertrand SIMONNET | b7e03e8 | 2015-12-18 11:39:59 -0800 | [diff] [blame] | 1055 | return false; |
| 1056 | } |
| 1057 | |
| 1058 | Service* svc = FindServiceByPid(pid); |
| 1059 | |
| 1060 | std::string name; |
Keun-young Park | 4de31e1 | 2017-04-27 16:25:06 -0700 | [diff] [blame] | 1061 | std::string wait_string; |
Bertrand SIMONNET | b7e03e8 | 2015-12-18 11:39:59 -0800 | [diff] [blame] | 1062 | if (svc) { |
| 1063 | name = android::base::StringPrintf("Service '%s' (pid %d)", |
| 1064 | svc->name().c_str(), pid); |
Keun-young Park | 4de31e1 | 2017-04-27 16:25:06 -0700 | [diff] [blame] | 1065 | if (svc->flags() & SVC_EXEC) { |
| 1066 | wait_string = |
| 1067 | android::base::StringPrintf(" waiting took %f seconds", exec_waiter_->duration_s()); |
| 1068 | } |
Bertrand SIMONNET | b7e03e8 | 2015-12-18 11:39:59 -0800 | [diff] [blame] | 1069 | } else { |
| 1070 | name = android::base::StringPrintf("Untracked pid %d", pid); |
| 1071 | } |
| 1072 | |
| 1073 | if (WIFEXITED(status)) { |
Keun-young Park | 4de31e1 | 2017-04-27 16:25:06 -0700 | [diff] [blame] | 1074 | LOG(INFO) << name << " exited with status " << WEXITSTATUS(status) << wait_string; |
Bertrand SIMONNET | b7e03e8 | 2015-12-18 11:39:59 -0800 | [diff] [blame] | 1075 | } else if (WIFSIGNALED(status)) { |
Keun-young Park | 4de31e1 | 2017-04-27 16:25:06 -0700 | [diff] [blame] | 1076 | LOG(INFO) << name << " killed by signal " << WTERMSIG(status) << wait_string; |
Bertrand SIMONNET | b7e03e8 | 2015-12-18 11:39:59 -0800 | [diff] [blame] | 1077 | } else if (WIFSTOPPED(status)) { |
Keun-young Park | 4de31e1 | 2017-04-27 16:25:06 -0700 | [diff] [blame] | 1078 | LOG(INFO) << name << " stopped by signal " << WSTOPSIG(status) << wait_string; |
Bertrand SIMONNET | b7e03e8 | 2015-12-18 11:39:59 -0800 | [diff] [blame] | 1079 | } else { |
Keun-young Park | 4de31e1 | 2017-04-27 16:25:06 -0700 | [diff] [blame] | 1080 | LOG(INFO) << name << " state changed" << wait_string; |
Bertrand SIMONNET | b7e03e8 | 2015-12-18 11:39:59 -0800 | [diff] [blame] | 1081 | } |
| 1082 | |
| 1083 | if (!svc) { |
| 1084 | return true; |
| 1085 | } |
| 1086 | |
Tom Cherry | b27004a | 2017-03-27 16:27:30 -0700 | [diff] [blame] | 1087 | svc->Reap(); |
| 1088 | |
| 1089 | if (svc->flags() & SVC_EXEC) { |
Tom Cherry | b27004a | 2017-03-27 16:27:30 -0700 | [diff] [blame] | 1090 | exec_waiter_.reset(); |
| 1091 | } |
| 1092 | if (svc->flags() & SVC_TEMPORARY) { |
Bertrand SIMONNET | b7e03e8 | 2015-12-18 11:39:59 -0800 | [diff] [blame] | 1093 | RemoveService(*svc); |
| 1094 | } |
| 1095 | |
| 1096 | return true; |
| 1097 | } |
| 1098 | |
| 1099 | void ServiceManager::ReapAnyOutstandingChildren() { |
| 1100 | while (ReapOneProcess()) { |
| 1101 | } |
| 1102 | } |
| 1103 | |
Tom Cherry | 30a6f27 | 2017-04-19 15:31:58 -0700 | [diff] [blame] | 1104 | bool ServiceParser::ParseSection(std::vector<std::string>&& args, const std::string& filename, |
Tom Cherry | 012c573 | 2017-04-18 13:21:54 -0700 | [diff] [blame] | 1105 | int line, std::string* err) { |
Tom Cherry | b734990 | 2015-08-26 11:43:36 -0700 | [diff] [blame] | 1106 | if (args.size() < 3) { |
| 1107 | *err = "services must have a name and a program"; |
| 1108 | return false; |
| 1109 | } |
| 1110 | |
| 1111 | const std::string& name = args[1]; |
| 1112 | if (!IsValidName(name)) { |
| 1113 | *err = StringPrintf("invalid service name '%s'", name.c_str()); |
| 1114 | return false; |
| 1115 | } |
| 1116 | |
Tom Cherry | 30a6f27 | 2017-04-19 15:31:58 -0700 | [diff] [blame] | 1117 | Service* old_service = service_manager_->FindServiceByName(name); |
| 1118 | if (old_service) { |
| 1119 | *err = "ignored duplicate definition of service '" + name + "'"; |
| 1120 | return false; |
| 1121 | } |
| 1122 | |
Tom Cherry | b734990 | 2015-08-26 11:43:36 -0700 | [diff] [blame] | 1123 | std::vector<std::string> str_args(args.begin() + 2, args.end()); |
Wei Wang | 641ff0a | 2017-03-27 10:59:11 -0700 | [diff] [blame] | 1124 | service_ = std::make_unique<Service>(name, str_args); |
Tom Cherry | b734990 | 2015-08-26 11:43:36 -0700 | [diff] [blame] | 1125 | return true; |
| 1126 | } |
| 1127 | |
Tom Cherry | 30a6f27 | 2017-04-19 15:31:58 -0700 | [diff] [blame] | 1128 | bool ServiceParser::ParseLineSection(std::vector<std::string>&& args, int line, std::string* err) { |
| 1129 | return service_ ? service_->ParseLine(std::move(args), err) : false; |
Tom Cherry | b734990 | 2015-08-26 11:43:36 -0700 | [diff] [blame] | 1130 | } |
| 1131 | |
| 1132 | void ServiceParser::EndSection() { |
| 1133 | if (service_) { |
Tom Cherry | 30a6f27 | 2017-04-19 15:31:58 -0700 | [diff] [blame] | 1134 | service_manager_->AddService(std::move(service_)); |
Tom Cherry | b734990 | 2015-08-26 11:43:36 -0700 | [diff] [blame] | 1135 | } |
| 1136 | } |
| 1137 | |
| 1138 | bool ServiceParser::IsValidName(const std::string& name) const { |
Elliott Hughes | b7788fd | 2017-02-28 09:54:36 -0800 | [diff] [blame] | 1139 | // Property names can be any length, but may only contain certain characters. |
| 1140 | // Property values can contain any characters, but may only be a certain length. |
| 1141 | // (The latter restriction is needed because `start` and `stop` work by writing |
| 1142 | // the service name to the "ctl.start" and "ctl.stop" properties.) |
| 1143 | return is_legal_property_name("init.svc." + name) && name.size() <= PROP_VALUE_MAX; |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 1144 | } |