blob: d1e0b850dc565bb126e037df3ec5cccb8b40ca63 [file] [log] [blame]
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -08001/*
2 * Copyright (C) 2008 The Android Open Source Project
3 *
4 * Licensed under the Apache License, Version 2.0 (the "License");
5 * you may not use this file except in compliance with the License.
6 * You may obtain a copy of the License at
7 *
8 * http://www.apache.org/licenses/LICENSE-2.0
9 *
10 * Unless required by applicable law or agreed to in writing, software
11 * distributed under the License is distributed on an "AS IS" BASIS,
12 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 * See the License for the specific language governing permissions and
14 * limitations under the License.
15 */
16
Mark Salyzyn62767fe2016-10-27 07:45:34 -070017#include <ctype.h>
18#include <errno.h>
19#include <fcntl.h>
20#include <ftw.h>
21#include <pwd.h>
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -080022#include <stdarg.h>
23#include <stdlib.h>
24#include <stdio.h>
25#include <string.h>
Colin Cross504bc512010-04-13 19:35:09 -070026#include <time.h>
Mark Salyzyn62767fe2016-10-27 07:45:34 -070027#include <unistd.h>
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -080028
Stephen Smalleydbd37f22014-01-28 10:34:09 -050029#include <selinux/android.h>
Mark Salyzyn62767fe2016-10-27 07:45:34 -070030#include <selinux/label.h>
Stephen Smalleye46f9d52012-01-13 08:48:47 -050031
Mark Salyzyn62767fe2016-10-27 07:45:34 -070032#include <sys/socket.h>
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -080033#include <sys/stat.h>
34#include <sys/types.h>
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -080035#include <sys/un.h>
36
Elliott Hughes290a2282016-11-14 17:08:47 -080037#include <thread>
38
Elliott Hughes4f713192015-12-04 22:00:26 -080039#include <android-base/file.h>
Elliott Hughesf86b5a62016-06-24 15:12:21 -070040#include <android-base/logging.h>
Tom Cherryccf23532017-03-28 16:40:41 -070041#include <android-base/properties.h>
Mark Salyzyn62767fe2016-10-27 07:45:34 -070042#include <android-base/stringprintf.h>
Elliott Hughes4f713192015-12-04 22:00:26 -080043#include <android-base/strings.h>
Mark Salyzyndb691072016-11-07 10:16:53 -080044#include <android-base/unique_fd.h>
Elliott Hughes331cf2f2016-11-29 19:20:58 +000045
46#include <cutils/android_reboot.h>
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -080047/* for ANDROID_SOCKET_* */
48#include <cutils/sockets.h>
49
Stephen Smalleye46f9d52012-01-13 08:48:47 -050050#include "init.h"
Colin Crossed8a7d82010-04-19 17:05:34 -070051#include "log.h"
Keun-young Park8d01f632017-03-13 11:54:47 -070052#include "reboot.h"
Colin Crossf83d0b92010-04-21 12:04:20 -070053#include "util.h"
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -080054
James Hawkinse78ea772017-03-24 11:43:02 -070055using android::base::boot_clock;
56
Nick Kralevichd2104df2015-06-18 17:46:54 -070057static unsigned int do_decode_uid(const char *s)
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -080058{
59 unsigned int v;
60
61 if (!s || *s == '\0')
Nick Kralevichd2104df2015-06-18 17:46:54 -070062 return UINT_MAX;
William Roberts3792e6c2016-04-06 19:18:50 -070063
64 if (isalpha(s[0])) {
65 struct passwd* pwd = getpwnam(s);
66 if (!pwd)
67 return UINT_MAX;
68 return pwd->pw_uid;
69 }
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -080070
71 errno = 0;
72 v = (unsigned int) strtoul(s, 0, 0);
73 if (errno)
Nick Kralevichd2104df2015-06-18 17:46:54 -070074 return UINT_MAX;
75 return v;
76}
77
78/*
79 * decode_uid - decodes and returns the given string, which can be either the
80 * numeric or name representation, into the integer uid or gid. Returns
81 * UINT_MAX on error.
82 */
83unsigned int decode_uid(const char *s) {
84 unsigned int v = do_decode_uid(s);
85 if (v == UINT_MAX) {
Elliott Hughesf86b5a62016-06-24 15:12:21 -070086 LOG(ERROR) << "decode_uid: Unable to find UID for '" << s << "'; returning UINT_MAX";
Nick Kralevichd2104df2015-06-18 17:46:54 -070087 }
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -080088 return v;
89}
90
91/*
92 * create_socket - creates a Unix domain socket in ANDROID_SOCKET_DIR
93 * ("/dev/socket") as dictated in init.rc. This socket is inherited by the
94 * daemon. We communicate the file descriptor's value via the environment
95 * variable ANDROID_SOCKET_ENV_PREFIX<name> ("ANDROID_SOCKET_foo").
96 */
Stephen Smalley8348d272013-05-13 12:37:04 -040097int create_socket(const char *name, int type, mode_t perm, uid_t uid,
98 gid_t gid, const char *socketcon)
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -080099{
Nick Kralevich83ccb1c2015-11-23 16:26:42 -0800100 if (socketcon) {
101 if (setsockcreatecon(socketcon) == -1) {
Elliott Hughesf86b5a62016-06-24 15:12:21 -0700102 PLOG(ERROR) << "setsockcreatecon(\"" << socketcon << "\") failed";
Nick Kralevich83ccb1c2015-11-23 16:26:42 -0800103 return -1;
104 }
105 }
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800106
Mark Salyzyndb691072016-11-07 10:16:53 -0800107 android::base::unique_fd fd(socket(PF_UNIX, type, 0));
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800108 if (fd < 0) {
Elliott Hughesf86b5a62016-06-24 15:12:21 -0700109 PLOG(ERROR) << "Failed to open socket '" << name << "'";
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800110 return -1;
111 }
112
Mark Salyzyndb691072016-11-07 10:16:53 -0800113 if (socketcon) setsockcreatecon(NULL);
Stephen Smalley8348d272013-05-13 12:37:04 -0400114
Mark Salyzyndb691072016-11-07 10:16:53 -0800115 struct sockaddr_un addr;
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800116 memset(&addr, 0 , sizeof(addr));
117 addr.sun_family = AF_UNIX;
118 snprintf(addr.sun_path, sizeof(addr.sun_path), ANDROID_SOCKET_DIR"/%s",
119 name);
120
Mark Salyzyndb691072016-11-07 10:16:53 -0800121 if ((unlink(addr.sun_path) != 0) && (errno != ENOENT)) {
Elliott Hughesf86b5a62016-06-24 15:12:21 -0700122 PLOG(ERROR) << "Failed to unlink old socket '" << name << "'";
Mark Salyzyndb691072016-11-07 10:16:53 -0800123 return -1;
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800124 }
125
Mark Salyzyndb691072016-11-07 10:16:53 -0800126 char *filecon = NULL;
Stephen Smalleye46f9d52012-01-13 08:48:47 -0500127 if (sehandle) {
Mark Salyzyndb691072016-11-07 10:16:53 -0800128 if (selabel_lookup(sehandle, &filecon, addr.sun_path, S_IFSOCK) == 0) {
Stephen Smalley8348d272013-05-13 12:37:04 -0400129 setfscreatecon(filecon);
Mark Salyzyndb691072016-11-07 10:16:53 -0800130 }
Stephen Smalleye46f9d52012-01-13 08:48:47 -0500131 }
Stephen Smalleye46f9d52012-01-13 08:48:47 -0500132
Mark Salyzyndb691072016-11-07 10:16:53 -0800133 int ret = bind(fd, (struct sockaddr *) &addr, sizeof (addr));
134 int savederrno = errno;
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800135
Stephen Smalleye46f9d52012-01-13 08:48:47 -0500136 setfscreatecon(NULL);
Stephen Smalley8348d272013-05-13 12:37:04 -0400137 freecon(filecon);
Stephen Smalleye46f9d52012-01-13 08:48:47 -0500138
Nick Kralevich9bcfd642016-02-24 15:50:52 -0800139 if (ret) {
Mark Salyzyndb691072016-11-07 10:16:53 -0800140 errno = savederrno;
Elliott Hughesf86b5a62016-06-24 15:12:21 -0700141 PLOG(ERROR) << "Failed to bind socket '" << name << "'";
Nick Kralevich9bcfd642016-02-24 15:50:52 -0800142 goto out_unlink;
143 }
144
Mark Salyzyndb691072016-11-07 10:16:53 -0800145 if (lchown(addr.sun_path, uid, gid)) {
Elliott Hughesf86b5a62016-06-24 15:12:21 -0700146 PLOG(ERROR) << "Failed to lchown socket '" << addr.sun_path << "'";
Nick Kralevich9bcfd642016-02-24 15:50:52 -0800147 goto out_unlink;
148 }
Mark Salyzyndb691072016-11-07 10:16:53 -0800149 if (fchmodat(AT_FDCWD, addr.sun_path, perm, AT_SYMLINK_NOFOLLOW)) {
Elliott Hughesf86b5a62016-06-24 15:12:21 -0700150 PLOG(ERROR) << "Failed to fchmodat socket '" << addr.sun_path << "'";
Nick Kralevich9bcfd642016-02-24 15:50:52 -0800151 goto out_unlink;
152 }
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800153
Elliott Hughesf86b5a62016-06-24 15:12:21 -0700154 LOG(INFO) << "Created socket '" << addr.sun_path << "'"
155 << ", mode " << std::oct << perm << std::dec
156 << ", user " << uid
157 << ", group " << gid;
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800158
Mark Salyzyndb691072016-11-07 10:16:53 -0800159 return fd.release();
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800160
161out_unlink:
162 unlink(addr.sun_path);
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800163 return -1;
164}
165
Tom Cherry53089aa2017-03-31 15:47:33 -0700166bool read_file(const std::string& path, std::string* content) {
Elliott Hughesf682b472015-02-06 12:19:48 -0800167 content->clear();
168
Tom Cherry53089aa2017-03-31 15:47:33 -0700169 android::base::unique_fd fd(
170 TEMP_FAILURE_RETRY(open(path.c_str(), O_RDONLY | O_NOFOLLOW | O_CLOEXEC)));
Elliott Hughesf682b472015-02-06 12:19:48 -0800171 if (fd == -1) {
172 return false;
173 }
174
175 // For security reasons, disallow world-writable
176 // or group-writable files.
Nick Kralevich38f368c2012-01-18 10:39:01 -0800177 struct stat sb;
Elliott Hughesf682b472015-02-06 12:19:48 -0800178 if (fstat(fd, &sb) == -1) {
Elliott Hughesf86b5a62016-06-24 15:12:21 -0700179 PLOG(ERROR) << "fstat failed for '" << path << "'";
Elliott Hughesf682b472015-02-06 12:19:48 -0800180 return false;
Nick Kralevich38f368c2012-01-18 10:39:01 -0800181 }
182 if ((sb.st_mode & (S_IWGRP | S_IWOTH)) != 0) {
Tom Cherry40578ab2017-03-20 14:24:25 -0700183 LOG(ERROR) << "skipping insecure file '" << path << "'";
Elliott Hughesf682b472015-02-06 12:19:48 -0800184 return false;
Nick Kralevich38f368c2012-01-18 10:39:01 -0800185 }
186
Tom Cherry40578ab2017-03-20 14:24:25 -0700187 return android::base::ReadFdToString(fd, content);
Elliott Hughesf682b472015-02-06 12:19:48 -0800188}
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800189
Tom Cherry53089aa2017-03-31 15:47:33 -0700190bool write_file(const std::string& path, const std::string& content) {
Wonsik Kim395e2942017-03-31 00:18:13 +0000191 android::base::unique_fd fd(
Tom Cherry53089aa2017-03-31 15:47:33 -0700192 TEMP_FAILURE_RETRY(open(path.c_str(), O_WRONLY | O_CREAT | O_NOFOLLOW | O_CLOEXEC, 0600)));
Elliott Hughesf682b472015-02-06 12:19:48 -0800193 if (fd == -1) {
Elliott Hughesf86b5a62016-06-24 15:12:21 -0700194 PLOG(ERROR) << "write_file: Unable to open '" << path << "'";
Jorge Lucangeli Obes77f0e9f2016-12-28 14:07:02 -0500195 return false;
Elliott Hughesf682b472015-02-06 12:19:48 -0800196 }
Jorge Lucangeli Obes77f0e9f2016-12-28 14:07:02 -0500197 bool success = android::base::WriteStringToFd(content, fd);
198 if (!success) {
Elliott Hughesf86b5a62016-06-24 15:12:21 -0700199 PLOG(ERROR) << "write_file: Unable to write to '" << path << "'";
Nick Kralevicheedbe812015-04-25 14:10:03 -0700200 }
Jorge Lucangeli Obes77f0e9f2016-12-28 14:07:02 -0500201 return success;
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800202}
203
Colin Crossb0ab94b2010-04-08 16:16:20 -0700204int mkdir_recursive(const char *pathname, mode_t mode)
205{
206 char buf[128];
207 const char *slash;
208 const char *p = pathname;
209 int width;
210 int ret;
211 struct stat info;
212
213 while ((slash = strchr(p, '/')) != NULL) {
214 width = slash - pathname;
215 p = slash + 1;
216 if (width < 0)
217 break;
218 if (width == 0)
219 continue;
220 if ((unsigned int)width > sizeof(buf) - 1) {
Elliott Hughesf86b5a62016-06-24 15:12:21 -0700221 LOG(ERROR) << "path too long for mkdir_recursive";
Colin Crossb0ab94b2010-04-08 16:16:20 -0700222 return -1;
223 }
224 memcpy(buf, pathname, width);
225 buf[width] = 0;
226 if (stat(buf, &info) != 0) {
Stephen Smalleye096e362012-06-11 13:37:39 -0400227 ret = make_dir(buf, mode);
Colin Crossb0ab94b2010-04-08 16:16:20 -0700228 if (ret && errno != EEXIST)
229 return ret;
230 }
231 }
Stephen Smalleye096e362012-06-11 13:37:39 -0400232 ret = make_dir(pathname, mode);
Colin Crossb0ab94b2010-04-08 16:16:20 -0700233 if (ret && errno != EEXIST)
234 return ret;
235 return 0;
236}
237
Johan Redestig93ca79b2012-04-18 16:41:19 +0200238/*
239 * replaces any unacceptable characters with '_', the
240 * length of the resulting string is equal to the input string
241 */
Colin Crossb0ab94b2010-04-08 16:16:20 -0700242void sanitize(char *s)
243{
Johan Redestig93ca79b2012-04-18 16:41:19 +0200244 const char* accept =
245 "abcdefghijklmnopqrstuvwxyz"
246 "ABCDEFGHIJKLMNOPQRSTUVWXYZ"
247 "0123456789"
248 "_-.";
249
Colin Crossb0ab94b2010-04-08 16:16:20 -0700250 if (!s)
251 return;
Johan Redestig93ca79b2012-04-18 16:41:19 +0200252
Christopher R. Palmer07f3fee2014-09-22 14:35:54 -0400253 while (*s) {
Johan Redestig93ca79b2012-04-18 16:41:19 +0200254 s += strspn(s, accept);
Christopher R. Palmer07f3fee2014-09-22 14:35:54 -0400255 if (*s) *s++ = '_';
Johan Redestig93ca79b2012-04-18 16:41:19 +0200256 }
Colin Crossb0ab94b2010-04-08 16:16:20 -0700257}
Johan Redestig93ca79b2012-04-18 16:41:19 +0200258
Elliott Hughes9605a942016-11-10 17:43:47 -0800259int wait_for_file(const char* filename, std::chrono::nanoseconds timeout) {
260 boot_clock::time_point timeout_time = boot_clock::now() + timeout;
261 while (boot_clock::now() < timeout_time) {
262 struct stat sb;
263 if (stat(filename, &sb) != -1) return 0;
Colin Crosscd0f1732010-04-19 17:10:24 -0700264
Elliott Hughes290a2282016-11-14 17:08:47 -0800265 std::this_thread::sleep_for(10ms);
Elliott Hughes9605a942016-11-10 17:43:47 -0800266 }
267 return -1;
Colin Crosscd0f1732010-04-19 17:10:24 -0700268}
Colin Crossf83d0b92010-04-21 12:04:20 -0700269
Elliott Hughese5ce30f2015-05-06 19:19:24 -0700270void import_kernel_cmdline(bool in_qemu,
Chih-Hung Hsieh8f7b9e32016-07-27 16:25:51 -0700271 const std::function<void(const std::string&, const std::string&, bool)>& fn) {
Elliott Hughese5ce30f2015-05-06 19:19:24 -0700272 std::string cmdline;
273 android::base::ReadFileToString("/proc/cmdline", &cmdline);
Vladimir Chtchetkine2b995432011-09-28 09:55:31 -0700274
Elliott Hughese5ce30f2015-05-06 19:19:24 -0700275 for (const auto& entry : android::base::Split(android::base::Trim(cmdline), " ")) {
276 std::vector<std::string> pieces = android::base::Split(entry, "=");
277 if (pieces.size() == 2) {
278 fn(pieces[0], pieces[1], in_qemu);
279 }
Vladimir Chtchetkine2b995432011-09-28 09:55:31 -0700280 }
281}
Stephen Smalleye096e362012-06-11 13:37:39 -0400282
283int make_dir(const char *path, mode_t mode)
284{
285 int rc;
286
Stephen Smalleye096e362012-06-11 13:37:39 -0400287 char *secontext = NULL;
288
289 if (sehandle) {
290 selabel_lookup(sehandle, &secontext, path, mode);
291 setfscreatecon(secontext);
292 }
Stephen Smalleye096e362012-06-11 13:37:39 -0400293
294 rc = mkdir(path, mode);
295
Stephen Smalleye096e362012-06-11 13:37:39 -0400296 if (secontext) {
297 int save_errno = errno;
298 freecon(secontext);
299 setfscreatecon(NULL);
300 errno = save_errno;
301 }
Kenny Rootb5982bf2012-10-16 23:07:05 -0700302
Stephen Smalleye096e362012-06-11 13:37:39 -0400303 return rc;
304}
305
Paul Lawrencea8d84342016-11-14 15:40:18 -0800306int restorecon(const char* pathname, int flags)
Stephen Smalleye096e362012-06-11 13:37:39 -0400307{
Paul Lawrencea8d84342016-11-14 15:40:18 -0800308 return selinux_android_restorecon(pathname, flags);
Jeff Sharkeyd1d3bdd2016-07-15 16:21:34 -0600309}
310
Andres Moralesdb5f5d42015-05-08 08:30:33 -0700311/*
312 * Writes hex_len hex characters (1/2 byte) to hex from bytes.
313 */
314std::string bytes_to_hex(const uint8_t* bytes, size_t bytes_len) {
315 std::string hex("0x");
316 for (size_t i = 0; i < bytes_len; i++)
317 android::base::StringAppendF(&hex, "%02x", bytes[i]);
318 return hex;
319}
Lee Campbellf13b1b32015-07-24 16:57:14 -0700320
321/*
322 * Returns true is pathname is a directory
323 */
324bool is_dir(const char* pathname) {
325 struct stat info;
326 if (stat(pathname, &info) == -1) {
327 return false;
328 }
329 return S_ISDIR(info.st_mode);
330}
Tom Cherryb7349902015-08-26 11:43:36 -0700331
332bool expand_props(const std::string& src, std::string* dst) {
333 const char* src_ptr = src.c_str();
334
335 if (!dst) {
336 return false;
337 }
338
339 /* - variables can either be $x.y or ${x.y}, in case they are only part
340 * of the string.
341 * - will accept $$ as a literal $.
342 * - no nested property expansion, i.e. ${foo.${bar}} is not supported,
343 * bad things will happen
Mark Salyzyn4b561622016-06-07 08:49:01 -0700344 * - ${x.y:-default} will return default value if property empty.
Tom Cherryb7349902015-08-26 11:43:36 -0700345 */
346 while (*src_ptr) {
347 const char* c;
348
349 c = strchr(src_ptr, '$');
350 if (!c) {
351 dst->append(src_ptr);
352 return true;
353 }
354
355 dst->append(src_ptr, c);
356 c++;
357
358 if (*c == '$') {
359 dst->push_back(*(c++));
360 src_ptr = c;
361 continue;
362 } else if (*c == '\0') {
363 return true;
364 }
365
366 std::string prop_name;
Mark Salyzyn4b561622016-06-07 08:49:01 -0700367 std::string def_val;
Tom Cherryb7349902015-08-26 11:43:36 -0700368 if (*c == '{') {
369 c++;
370 const char* end = strchr(c, '}');
371 if (!end) {
372 // failed to find closing brace, abort.
Elliott Hughesf86b5a62016-06-24 15:12:21 -0700373 LOG(ERROR) << "unexpected end of string in '" << src << "', looking for }";
Tom Cherryb7349902015-08-26 11:43:36 -0700374 return false;
375 }
376 prop_name = std::string(c, end);
377 c = end + 1;
Mark Salyzyn4b561622016-06-07 08:49:01 -0700378 size_t def = prop_name.find(":-");
379 if (def < prop_name.size()) {
380 def_val = prop_name.substr(def + 2);
381 prop_name = prop_name.substr(0, def);
382 }
Tom Cherryb7349902015-08-26 11:43:36 -0700383 } else {
384 prop_name = c;
Elliott Hughesf86b5a62016-06-24 15:12:21 -0700385 LOG(ERROR) << "using deprecated syntax for specifying property '" << c << "', use ${name} instead";
Tom Cherryb7349902015-08-26 11:43:36 -0700386 c += prop_name.size();
387 }
388
389 if (prop_name.empty()) {
Elliott Hughesf86b5a62016-06-24 15:12:21 -0700390 LOG(ERROR) << "invalid zero-length property name in '" << src << "'";
Tom Cherryb7349902015-08-26 11:43:36 -0700391 return false;
392 }
393
Tom Cherryccf23532017-03-28 16:40:41 -0700394 std::string prop_val = android::base::GetProperty(prop_name, "");
Tom Cherryb7349902015-08-26 11:43:36 -0700395 if (prop_val.empty()) {
Mark Salyzyn4b561622016-06-07 08:49:01 -0700396 if (def_val.empty()) {
Elliott Hughesf86b5a62016-06-24 15:12:21 -0700397 LOG(ERROR) << "property '" << prop_name << "' doesn't exist while expanding '" << src << "'";
Mark Salyzyn4b561622016-06-07 08:49:01 -0700398 return false;
399 }
400 prop_val = def_val;
Tom Cherryb7349902015-08-26 11:43:36 -0700401 }
402
403 dst->append(prop_val);
404 src_ptr = c;
405 }
406
407 return true;
408}
Elliott Hughes331cf2f2016-11-29 19:20:58 +0000409
Elliott Hughes331cf2f2016-11-29 19:20:58 +0000410void panic() {
411 LOG(ERROR) << "panic: rebooting to bootloader";
Keun-young Park8d01f632017-03-13 11:54:47 -0700412 DoReboot(ANDROID_RB_RESTART2, "reboot", "bootloader", false);
Elliott Hughes331cf2f2016-11-29 19:20:58 +0000413}
414
415std::ostream& operator<<(std::ostream& os, const Timer& t) {
416 os << t.duration_s() << " seconds";
417 return os;
418}