blob: 957527bd9b85e2a606037a3279fdcb57aeb598f5 [file] [log] [blame]
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -07001/*
2 * Copyright (C) 2008 The Android Open Source Project
3 *
4 * Licensed under the Apache License, Version 2.0 (the "License");
5 * you may not use this file except in compliance with the License.
6 * You may obtain a copy of the License at
7 *
8 * http://www.apache.org/licenses/LICENSE-2.0
9 *
10 * Unless required by applicable law or agreed to in writing, software
11 * distributed under the License is distributed on an "AS IS" BASIS,
12 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 * See the License for the specific language governing permissions and
14 * limitations under the License.
15 */
16
Elliott Hughes8d82ea02015-02-06 20:15:18 -080017#include <ctype.h>
Rom Lemarchand6a524432015-02-28 06:39:11 -080018#include <dirent.h>
Elliott Hughes8d82ea02015-02-06 20:15:18 -080019#include <errno.h>
20#include <fcntl.h>
21#include <libgen.h>
Elliott Hughescc86fb22015-03-17 20:01:13 -070022#include <paths.h>
Elliott Hughes8d82ea02015-02-06 20:15:18 -080023#include <signal.h>
24#include <stdarg.h>
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -070025#include <stdio.h>
26#include <stdlib.h>
27#include <string.h>
Elliott Hughes929f4072015-04-24 21:13:44 -070028#include <sys/epoll.h>
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -070029#include <sys/mount.h>
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -070030#include <sys/socket.h>
Elliott Hughes8d82ea02015-02-06 20:15:18 -080031#include <sys/stat.h>
Elliott Hughes35f5d042016-07-26 09:32:33 -070032#include <sys/sysmacros.h>
Elliott Hughes8d82ea02015-02-06 20:15:18 -080033#include <sys/types.h>
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -070034#include <sys/un.h>
Elliott Hughes8d82ea02015-02-06 20:15:18 -080035#include <sys/wait.h>
Elliott Hughes8d82ea02015-02-06 20:15:18 -080036#include <unistd.h>
37
Stephen Smalleye46f9d52012-01-13 08:48:47 -050038#include <selinux/selinux.h>
39#include <selinux/label.h>
Stephen Smalleyae6f3d72012-05-01 15:02:53 -040040#include <selinux/android.h>
Stephen Smalleye46f9d52012-01-13 08:48:47 -050041
Elliott Hughes4f713192015-12-04 22:00:26 -080042#include <android-base/file.h>
43#include <android-base/stringprintf.h>
44#include <android-base/strings.h>
Nick Kralevich56fa0ac2013-06-24 17:41:40 -070045#include <cutils/android_reboot.h>
Alex Klyubin0d872d82013-08-16 13:19:24 -070046#include <cutils/fs.h>
Elliott Hughes8d82ea02015-02-06 20:15:18 -080047#include <cutils/iosched_policy.h>
48#include <cutils/list.h>
49#include <cutils/sockets.h>
Colin Crossf83d0b92010-04-21 12:04:20 -070050#include <private/android_filesystem_config.h>
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -070051
Rom Lemarchand6a524432015-02-28 06:39:11 -080052#include <memory>
53
Tom Cherryfa0c21c2015-07-23 17:53:11 -070054#include "action.h"
Tom Cherrybac32992015-07-31 12:45:25 -070055#include "bootchart.h"
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -070056#include "devices.h"
Hung-ying Tyan99c4a8a2016-02-01 15:07:40 +080057#include "fs_mgr.h"
Tom Cherryb7349902015-08-26 11:43:36 -070058#include "import_parser.h"
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -070059#include "init.h"
Tom Cherrybac32992015-07-31 12:45:25 -070060#include "init_parser.h"
61#include "keychords.h"
Colin Crossed8a7d82010-04-19 17:05:34 -070062#include "log.h"
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -070063#include "property_service.h"
Tom Cherrybac32992015-07-31 12:45:25 -070064#include "service.h"
Colin Cross9c5366b2010-04-13 19:48:59 -070065#include "signal_handler.h"
Colin Crossf83d0b92010-04-21 12:04:20 -070066#include "ueventd.h"
Tom Cherrybac32992015-07-31 12:45:25 -070067#include "util.h"
Arve Hjønnevågd97d9072012-06-13 21:51:56 -070068#include "watchdogd.h"
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -070069
Stephen Smalleye46f9d52012-01-13 08:48:47 -050070struct selabel_handle *sehandle;
rpcraig63207cd2012-08-09 10:05:49 -040071struct selabel_handle *sehandle_prop;
Stephen Smalleye46f9d52012-01-13 08:48:47 -050072
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -070073static int property_triggers_enabled = 0;
74
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -070075static char qemu[32];
76
Viorel Suman70daa672016-03-21 10:08:07 +020077std::string default_console = "/dev/console";
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -070078static time_t process_needs_restart;
79
Tom Cherrybac32992015-07-31 12:45:25 -070080const char *ENV[32];
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -070081
Elliott Hughes8d82ea02015-02-06 20:15:18 -080082bool waiting_for_exec = false;
83
Elliott Hughes929f4072015-04-24 21:13:44 -070084static int epoll_fd = -1;
85
86void register_epoll_handler(int fd, void (*fn)()) {
87 epoll_event ev;
88 ev.events = EPOLLIN;
89 ev.data.ptr = reinterpret_cast<void*>(fn);
90 if (epoll_ctl(epoll_fd, EPOLL_CTL_ADD, fd, &ev) == -1) {
Elliott Hughesf86b5a62016-06-24 15:12:21 -070091 PLOG(ERROR) << "epoll_ctl failed";
Elliott Hughes929f4072015-04-24 21:13:44 -070092 }
93}
94
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -070095/* add_environment - add "key=value" to the current environment */
96int add_environment(const char *key, const char *val)
97{
James Morrissey381341f2014-05-16 11:36:36 +010098 size_t n;
99 size_t key_len = strlen(key);
Vladimir Chtchetkine2b995432011-09-28 09:55:31 -0700100
James Morrissey381341f2014-05-16 11:36:36 +0100101 /* The last environment entry is reserved to terminate the list */
Elliott Hughesf86b5a62016-06-24 15:12:21 -0700102 for (n = 0; n < (arraysize(ENV) - 1); n++) {
James Morrissey381341f2014-05-16 11:36:36 +0100103
104 /* Delete any existing entry for this key */
105 if (ENV[n] != NULL) {
106 size_t entry_key_len = strcspn(ENV[n], "=");
107 if ((entry_key_len == key_len) && (strncmp(ENV[n], key, entry_key_len) == 0)) {
108 free((char*)ENV[n]);
109 ENV[n] = NULL;
110 }
111 }
112
113 /* Add entry if a free slot is available */
114 if (ENV[n] == NULL) {
Elliott Hughesf3cf4382015-02-03 17:12:07 -0800115 char* entry;
116 asprintf(&entry, "%s=%s", key, val);
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700117 ENV[n] = entry;
118 return 0;
119 }
120 }
121
Elliott Hughesf86b5a62016-06-24 15:12:21 -0700122 LOG(ERROR) << "No env. room to store: '" << key << "':'" << val << "'";
James Morrissey381341f2014-05-16 11:36:36 +0100123
124 return -1;
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700125}
126
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700127void property_changed(const char *name, const char *value)
128{
Colin Crossebc6ff12010-04-13 19:52:01 -0700129 if (property_triggers_enabled)
Tom Cherryfa0c21c2015-07-23 17:53:11 -0700130 ActionManager::GetInstance().QueuePropertyTrigger(name, value);
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700131}
132
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700133static void restart_processes()
134{
135 process_needs_restart = 0;
Tom Cherrybac32992015-07-31 12:45:25 -0700136 ServiceManager::GetInstance().
137 ForEachServiceWithFlags(SVC_RESTARTING, [] (Service* s) {
138 s->RestartIfNeeded(process_needs_restart);
139 });
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700140}
141
Elliott Hughesbdeac392016-04-12 15:38:27 -0700142void handle_control_message(const std::string& msg, const std::string& name) {
Tom Cherrybac32992015-07-31 12:45:25 -0700143 Service* svc = ServiceManager::GetInstance().FindServiceByName(name);
Elliott Hughesbdeac392016-04-12 15:38:27 -0700144 if (svc == nullptr) {
Elliott Hughesf86b5a62016-06-24 15:12:21 -0700145 LOG(ERROR) << "no such service '" << name << "'";
Elliott Hughesbdeac392016-04-12 15:38:27 -0700146 return;
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700147 }
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700148
Tom Cherrybac32992015-07-31 12:45:25 -0700149 if (msg == "start") {
Elliott Hughesbdeac392016-04-12 15:38:27 -0700150 svc->Start();
Tom Cherrybac32992015-07-31 12:45:25 -0700151 } else if (msg == "stop") {
Elliott Hughesbdeac392016-04-12 15:38:27 -0700152 svc->Stop();
Tom Cherrybac32992015-07-31 12:45:25 -0700153 } else if (msg == "restart") {
Elliott Hughesbdeac392016-04-12 15:38:27 -0700154 svc->Restart();
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700155 } else {
Elliott Hughesf86b5a62016-06-24 15:12:21 -0700156 LOG(ERROR) << "unknown control msg '" << msg << "'";
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700157 }
158}
159
Tom Cherry96f67312015-07-30 13:52:55 -0700160static int wait_for_coldboot_done_action(const std::vector<std::string>& args) {
Elliott Hughesc6c26ed2015-04-24 18:50:30 -0700161 Timer t;
162
Elliott Hughesf86b5a62016-06-24 15:12:21 -0700163 LOG(VERBOSE) << "Waiting for " COLDBOOT_DONE "...";
Elliott Hughesc7331d02015-05-14 12:03:14 -0700164 // Any longer than 1s is an unreasonable length of time to delay booting.
165 // If you're hitting this timeout, check that you didn't make your
166 // sepolicy regular expressions too expensive (http://b/19899875).
167 if (wait_for_file(COLDBOOT_DONE, 1)) {
Elliott Hughesf86b5a62016-06-24 15:12:21 -0700168 LOG(ERROR) << "Timed out waiting for " COLDBOOT_DONE;
Elliott Hughesc6c26ed2015-04-24 18:50:30 -0700169 }
170
Elliott Hughesf86b5a62016-06-24 15:12:21 -0700171 LOG(VERBOSE) << "Waiting for " COLDBOOT_DONE " took " << t.duration() << "s.";
Elliott Hughesc6c26ed2015-04-24 18:50:30 -0700172 return 0;
Colin Crossebc6ff12010-04-13 19:52:01 -0700173}
174
Alex Klyubin0d872d82013-08-16 13:19:24 -0700175/*
176 * Writes 512 bytes of output from Hardware RNG (/dev/hw_random, backed
177 * by Linux kernel's hw_random framework) into Linux RNG's via /dev/urandom.
178 * Does nothing if Hardware RNG is not present.
179 *
180 * Since we don't yet trust the quality of Hardware RNG, these bytes are not
181 * mixed into the primary pool of Linux RNG and the entropy estimate is left
182 * unmodified.
183 *
184 * If the HW RNG device /dev/hw_random is present, we require that at least
185 * 512 bytes read from it are written into Linux RNG. QA is expected to catch
186 * devices/configurations where these I/O operations are blocking for a long
187 * time. We do not reboot or halt on failures, as this is a best-effort
188 * attempt.
189 */
Tom Cherry96f67312015-07-30 13:52:55 -0700190static int mix_hwrng_into_linux_rng_action(const std::vector<std::string>& args)
Alex Klyubin0d872d82013-08-16 13:19:24 -0700191{
192 int result = -1;
193 int hwrandom_fd = -1;
194 int urandom_fd = -1;
195 char buf[512];
196 ssize_t chunk_size;
197 size_t total_bytes_written = 0;
198
199 hwrandom_fd = TEMP_FAILURE_RETRY(
Nick Kralevich45a884f2015-02-02 14:37:22 -0800200 open("/dev/hw_random", O_RDONLY | O_NOFOLLOW | O_CLOEXEC));
Alex Klyubin0d872d82013-08-16 13:19:24 -0700201 if (hwrandom_fd == -1) {
202 if (errno == ENOENT) {
Elliott Hughesf86b5a62016-06-24 15:12:21 -0700203 LOG(ERROR) << "/dev/hw_random not found";
204 // It's not an error to not have a Hardware RNG.
205 result = 0;
Alex Klyubin0d872d82013-08-16 13:19:24 -0700206 } else {
Elliott Hughesf86b5a62016-06-24 15:12:21 -0700207 PLOG(ERROR) << "Failed to open /dev/hw_random";
Alex Klyubin0d872d82013-08-16 13:19:24 -0700208 }
209 goto ret;
210 }
211
212 urandom_fd = TEMP_FAILURE_RETRY(
Nick Kralevich45a884f2015-02-02 14:37:22 -0800213 open("/dev/urandom", O_WRONLY | O_NOFOLLOW | O_CLOEXEC));
Alex Klyubin0d872d82013-08-16 13:19:24 -0700214 if (urandom_fd == -1) {
Elliott Hughesf86b5a62016-06-24 15:12:21 -0700215 PLOG(ERROR) << "Failed to open /dev/urandom";
Alex Klyubin0d872d82013-08-16 13:19:24 -0700216 goto ret;
217 }
218
219 while (total_bytes_written < sizeof(buf)) {
220 chunk_size = TEMP_FAILURE_RETRY(
221 read(hwrandom_fd, buf, sizeof(buf) - total_bytes_written));
222 if (chunk_size == -1) {
Elliott Hughesf86b5a62016-06-24 15:12:21 -0700223 PLOG(ERROR) << "Failed to read from /dev/hw_random";
Alex Klyubin0d872d82013-08-16 13:19:24 -0700224 goto ret;
225 } else if (chunk_size == 0) {
Elliott Hughesf86b5a62016-06-24 15:12:21 -0700226 LOG(ERROR) << "Failed to read from /dev/hw_random: EOF";
Alex Klyubin0d872d82013-08-16 13:19:24 -0700227 goto ret;
228 }
229
230 chunk_size = TEMP_FAILURE_RETRY(write(urandom_fd, buf, chunk_size));
231 if (chunk_size == -1) {
Elliott Hughesf86b5a62016-06-24 15:12:21 -0700232 PLOG(ERROR) << "Failed to write to /dev/urandom";
Alex Klyubin0d872d82013-08-16 13:19:24 -0700233 goto ret;
234 }
235 total_bytes_written += chunk_size;
236 }
237
Elliott Hughesf86b5a62016-06-24 15:12:21 -0700238 LOG(INFO) << "Mixed " << total_bytes_written << " bytes from /dev/hw_random into /dev/urandom";
Alex Klyubin0d872d82013-08-16 13:19:24 -0700239 result = 0;
240
241ret:
242 if (hwrandom_fd != -1) {
243 close(hwrandom_fd);
244 }
245 if (urandom_fd != -1) {
246 close(urandom_fd);
247 }
Alex Klyubin0d872d82013-08-16 13:19:24 -0700248 return result;
249}
250
Tom Cherry96f67312015-07-30 13:52:55 -0700251static int keychord_init_action(const std::vector<std::string>& args)
Colin Crossebc6ff12010-04-13 19:52:01 -0700252{
253 keychord_init();
254 return 0;
255}
256
Tom Cherry96f67312015-07-30 13:52:55 -0700257static int console_init_action(const std::vector<std::string>& args)
Colin Crossebc6ff12010-04-13 19:52:01 -0700258{
Viorel Sumanefc72752016-03-21 10:23:43 +0200259 std::string console = property_get("ro.boot.console");
260 if (!console.empty()) {
Viorel Suman70daa672016-03-21 10:08:07 +0200261 default_console = "/dev/" + console;
Colin Crossebc6ff12010-04-13 19:52:01 -0700262 }
Colin Crossebc6ff12010-04-13 19:52:01 -0700263 return 0;
264}
265
Elliott Hughese5ce30f2015-05-06 19:19:24 -0700266static void import_kernel_nv(const std::string& key, const std::string& value, bool for_emulator) {
267 if (key.empty()) return;
Dima Zavin5511c842011-12-19 11:21:32 -0800268
269 if (for_emulator) {
Elliott Hughese5ce30f2015-05-06 19:19:24 -0700270 // In the emulator, export any kernel option with the "ro.kernel." prefix.
271 property_set(android::base::StringPrintf("ro.kernel.%s", key.c_str()).c_str(), value.c_str());
Dima Zavin5511c842011-12-19 11:21:32 -0800272 return;
273 }
274
Elliott Hughese5ce30f2015-05-06 19:19:24 -0700275 if (key == "qemu") {
276 strlcpy(qemu, value.c_str(), sizeof(qemu));
277 } else if (android::base::StartsWith(key, "androidboot.")) {
278 property_set(android::base::StringPrintf("ro.boot.%s", key.c_str() + 12).c_str(),
279 value.c_str());
Dima Zavin5511c842011-12-19 11:21:32 -0800280 }
281}
282
Sami Tolvanen9e9efca2015-12-07 12:33:58 +0000283static void export_oem_lock_status() {
284 if (property_get("ro.oem_unlock_supported") != "1") {
285 return;
286 }
287
288 std::string value = property_get("ro.boot.verifiedbootstate");
289
290 if (!value.empty()) {
291 property_set("ro.boot.flash.locked", value == "orange" ? "0" : "1");
292 }
293}
294
Elliott Hughesd679bc92015-03-20 08:50:46 -0700295static void export_kernel_boot_props() {
Dima Zavin5511c842011-12-19 11:21:32 -0800296 struct {
297 const char *src_prop;
Elliott Hughesd679bc92015-03-20 08:50:46 -0700298 const char *dst_prop;
299 const char *default_value;
Dima Zavin5511c842011-12-19 11:21:32 -0800300 } prop_map[] = {
Elliott Hughesd679bc92015-03-20 08:50:46 -0700301 { "ro.boot.serialno", "ro.serialno", "", },
302 { "ro.boot.mode", "ro.bootmode", "unknown", },
303 { "ro.boot.baseband", "ro.baseband", "unknown", },
Dima Zavin5511c842011-12-19 11:21:32 -0800304 { "ro.boot.bootloader", "ro.bootloader", "unknown", },
Elliott Hughesd679bc92015-03-20 08:50:46 -0700305 { "ro.boot.hardware", "ro.hardware", "unknown", },
306 { "ro.boot.revision", "ro.revision", "0", },
Dima Zavin5511c842011-12-19 11:21:32 -0800307 };
Elliott Hughesf86b5a62016-06-24 15:12:21 -0700308 for (size_t i = 0; i < arraysize(prop_map); i++) {
Yabin Cui74edcea2015-07-24 10:11:05 -0700309 std::string value = property_get(prop_map[i].src_prop);
310 property_set(prop_map[i].dst_prop, (!value.empty()) ? value.c_str() : prop_map[i].default_value);
Dima Zavin5511c842011-12-19 11:21:32 -0800311 }
Dima Zavin5511c842011-12-19 11:21:32 -0800312}
Colin Crossebc6ff12010-04-13 19:52:01 -0700313
Elliott Hughese5ce30f2015-05-06 19:19:24 -0700314static void process_kernel_dt() {
Rom Lemarchand6a524432015-02-28 06:39:11 -0800315 static const char android_dir[] = "/proc/device-tree/firmware/android";
316
317 std::string file_name = android::base::StringPrintf("%s/compatible", android_dir);
318
319 std::string dt_file;
320 android::base::ReadFileToString(file_name, &dt_file);
321 if (!dt_file.compare("android,firmware")) {
Elliott Hughesf86b5a62016-06-24 15:12:21 -0700322 LOG(ERROR) << "firmware/android is not compatible with 'android,firmware'";
Rom Lemarchand6a524432015-02-28 06:39:11 -0800323 return;
324 }
325
326 std::unique_ptr<DIR, int(*)(DIR*)>dir(opendir(android_dir), closedir);
Elliott Hughese5ce30f2015-05-06 19:19:24 -0700327 if (!dir) return;
Rom Lemarchand6a524432015-02-28 06:39:11 -0800328
329 struct dirent *dp;
330 while ((dp = readdir(dir.get())) != NULL) {
Rom Lemarchand1dcf3252015-11-08 17:51:50 -0800331 if (dp->d_type != DT_REG || !strcmp(dp->d_name, "compatible") || !strcmp(dp->d_name, "name")) {
Rom Lemarchand6a524432015-02-28 06:39:11 -0800332 continue;
Elliott Hughese5ce30f2015-05-06 19:19:24 -0700333 }
Rom Lemarchand6a524432015-02-28 06:39:11 -0800334
335 file_name = android::base::StringPrintf("%s/%s", android_dir, dp->d_name);
336
337 android::base::ReadFileToString(file_name, &dt_file);
338 std::replace(dt_file.begin(), dt_file.end(), ',', '.');
339
340 std::string property_name = android::base::StringPrintf("ro.boot.%s", dp->d_name);
Elliott Hughesdb3f2672015-03-20 09:45:18 -0700341 property_set(property_name.c_str(), dt_file.c_str());
Rom Lemarchand6a524432015-02-28 06:39:11 -0800342 }
343}
344
Elliott Hughese5ce30f2015-05-06 19:19:24 -0700345static void process_kernel_cmdline() {
Elliott Hughese5ce30f2015-05-06 19:19:24 -0700346 // The first pass does the common stuff, and finds if we are in qemu.
347 // The second pass is only necessary for qemu to export all kernel params
348 // as properties.
Nick Kralevichf667a322015-04-25 17:42:52 -0700349 import_kernel_cmdline(false, import_kernel_nv);
Elliott Hughese5ce30f2015-05-06 19:19:24 -0700350 if (qemu[0]) import_kernel_cmdline(true, import_kernel_nv);
Colin Crossebc6ff12010-04-13 19:52:01 -0700351}
352
Tom Cherry96f67312015-07-30 13:52:55 -0700353static int queue_property_triggers_action(const std::vector<std::string>& args)
Colin Crossebc6ff12010-04-13 19:52:01 -0700354{
Tom Cherryfa0c21c2015-07-23 17:53:11 -0700355 ActionManager::GetInstance().QueueAllPropertyTriggers();
Colin Crossebc6ff12010-04-13 19:52:01 -0700356 /* enable property triggers */
357 property_triggers_enabled = 1;
358 return 0;
359}
360
Elliott Hughesc6c26ed2015-04-24 18:50:30 -0700361static void selinux_init_all_handles(void)
Stephen Smalleye46f9d52012-01-13 08:48:47 -0500362{
Stephen Smalleyae6f3d72012-05-01 15:02:53 -0400363 sehandle = selinux_android_file_context_handle();
Stephen Smalleydbd37f22014-01-28 10:34:09 -0500364 selinux_android_set_sehandle(sehandle);
rpcraig63207cd2012-08-09 10:05:49 -0400365 sehandle_prop = selinux_android_prop_context_handle();
Stephen Smalleyae6f3d72012-05-01 15:02:53 -0400366}
Stephen Smalleye46f9d52012-01-13 08:48:47 -0500367
Nick Kralevichd34e4072015-04-28 12:39:41 -0700368enum selinux_enforcing_status { SELINUX_PERMISSIVE, SELINUX_ENFORCING };
Nick Kralevichf667a322015-04-25 17:42:52 -0700369
370static selinux_enforcing_status selinux_status_from_cmdline() {
371 selinux_enforcing_status status = SELINUX_ENFORCING;
372
Elliott Hughese5ce30f2015-05-06 19:19:24 -0700373 import_kernel_cmdline(false, [&](const std::string& key, const std::string& value, bool in_qemu) {
374 if (key == "androidboot.selinux" && value == "permissive") {
375 status = SELINUX_PERMISSIVE;
Nick Kralevichf667a322015-04-25 17:42:52 -0700376 }
Elliott Hughese5ce30f2015-05-06 19:19:24 -0700377 });
Nick Kralevichf667a322015-04-25 17:42:52 -0700378
379 return status;
380}
381
Nick Kralevich935bd3e2013-06-26 15:37:26 -0700382static bool selinux_is_enforcing(void)
383{
Nick Kralevichd34e4072015-04-28 12:39:41 -0700384 if (ALLOW_PERMISSIVE_SELINUX) {
Nick Kralevichf667a322015-04-25 17:42:52 -0700385 return selinux_status_from_cmdline() == SELINUX_ENFORCING;
Nick Kralevich935bd3e2013-06-26 15:37:26 -0700386 }
Nick Kralevich935bd3e2013-06-26 15:37:26 -0700387 return true;
388}
389
Elliott Hughesda40c002015-03-27 23:20:44 -0700390static int audit_callback(void *data, security_class_t /*cls*/, char *buf, size_t len) {
William Robertsd7aea442015-10-01 16:03:47 -0700391
392 property_audit_data *d = reinterpret_cast<property_audit_data*>(data);
393
394 if (!d || !d->name || !d->cr) {
Elliott Hughesf86b5a62016-06-24 15:12:21 -0700395 LOG(ERROR) << "audit_callback invoked with null data arguments!";
William Robertsd7aea442015-10-01 16:03:47 -0700396 return 0;
397 }
398
399 snprintf(buf, len, "property=%s pid=%d uid=%d gid=%d", d->name,
400 d->cr->pid, d->cr->uid, d->cr->gid);
rpcraig63207cd2012-08-09 10:05:49 -0400401 return 0;
402}
403
Daniel Cashmanc8f026f2016-03-25 17:42:10 +0000404static void security_failure() {
Elliott Hughesf86b5a62016-06-24 15:12:21 -0700405 LOG(ERROR) << "Security failure; rebooting into recovery mode...";
Daniel Cashmanc8f026f2016-03-25 17:42:10 +0000406 android_reboot(ANDROID_RB_RESTART2, 0, "recovery");
407 while (true) { pause(); } // never reached
408}
409
Elliott Hughesf65730e2015-04-24 18:38:17 +0000410static void selinux_initialize(bool in_kernel_domain) {
Elliott Hughesda40c002015-03-27 23:20:44 -0700411 Timer t;
Stephen Smalleyeb3f4212014-02-12 16:17:00 -0500412
Elliott Hughesda40c002015-03-27 23:20:44 -0700413 selinux_callback cb;
414 cb.func_log = selinux_klog_callback;
415 selinux_set_callback(SELINUX_CB_LOG, cb);
416 cb.func_audit = audit_callback;
417 selinux_set_callback(SELINUX_CB_AUDIT, cb);
418
Elliott Hughesf65730e2015-04-24 18:38:17 +0000419 if (in_kernel_domain) {
Elliott Hughesf86b5a62016-06-24 15:12:21 -0700420 LOG(INFO) << "Loading SELinux policy...";
Elliott Hughesf65730e2015-04-24 18:38:17 +0000421 if (selinux_android_load_policy() < 0) {
Elliott Hughesf86b5a62016-06-24 15:12:21 -0700422 PLOG(ERROR) << "failed to load policy";
Elliott Hughesf65730e2015-04-24 18:38:17 +0000423 security_failure();
424 }
425
Nick Kralevichd34e4072015-04-28 12:39:41 -0700426 bool kernel_enforcing = (security_getenforce() == 1);
Elliott Hughesf65730e2015-04-24 18:38:17 +0000427 bool is_enforcing = selinux_is_enforcing();
Nick Kralevichd34e4072015-04-28 12:39:41 -0700428 if (kernel_enforcing != is_enforcing) {
429 if (security_setenforce(is_enforcing)) {
Elliott Hughesf86b5a62016-06-24 15:12:21 -0700430 PLOG(ERROR) << "security_setenforce(%s) failed" << (is_enforcing ? "true" : "false");
Nick Kralevichd34e4072015-04-28 12:39:41 -0700431 security_failure();
432 }
433 }
Elliott Hughesf65730e2015-04-24 18:38:17 +0000434
Nick Kralevicheedbe812015-04-25 14:10:03 -0700435 if (write_file("/sys/fs/selinux/checkreqprot", "0") == -1) {
436 security_failure();
437 }
438
Elliott Hughesf86b5a62016-06-24 15:12:21 -0700439 LOG(INFO) << "(Initializing SELinux " << (is_enforcing ? "enforcing" : "non-enforcing")
440 << " took " << t.duration() << "s.)";
Elliott Hughesf65730e2015-04-24 18:38:17 +0000441 } else {
442 selinux_init_all_handles();
Nick Kralevich56fa0ac2013-06-24 17:41:40 -0700443 }
Nick Kralevich56fa0ac2013-06-24 17:41:40 -0700444}
445
Amit Pundird2e74db2016-06-29 19:00:00 +0530446// Set the UDC controller for the ConfigFS USB Gadgets.
447// Read the UDC controller in use from "/sys/class/udc".
448// In case of multiple UDC controllers select the first one.
449static void set_usb_controller() {
450 std::unique_ptr<DIR, decltype(&closedir)>dir(opendir("/sys/class/udc"), closedir);
451 if (!dir) return;
452
453 dirent* dp;
454 while ((dp = readdir(dir.get())) != nullptr) {
455 if (dp->d_name[0] == '.') continue;
456
457 property_set("sys.usb.controller", dp->d_name);
458 break;
459 }
460}
461
Hung-ying Tyan99c4a8a2016-02-01 15:07:40 +0800462/* Returns a new path consisting of base_path and the file name in reference_path. */
463static std::string get_path(const std::string& base_path, const std::string& reference_path) {
464 std::string::size_type pos = reference_path.rfind('/');
465 if (pos == std::string::npos) {
466 return base_path + '/' + reference_path;
467 } else {
468 return base_path + reference_path.substr(pos);
469 }
470}
471
472/* Imports the fstab info from cmdline. */
473static std::string import_cmdline_fstab() {
474 std::string prefix, fstab, fstab_full;
475
476 import_kernel_cmdline(false,
477 [&](const std::string& key, const std::string& value, bool in_qemu __attribute__((__unused__))) {
478 if (key == "android.early.prefix") {
479 prefix = value;
480 } else if (key == "android.early.fstab") {
481 fstab = value;
482 }
483 });
484 if (!fstab.empty()) {
485 // Convert "mmcblk0p09+/odm+ext4+ro+verify" to "mmcblk0p09 /odm ext4 ro verify"
486 std::replace(fstab.begin(), fstab.end(), '+', ' ');
487 for (const auto& entry : android::base::Split(fstab, "\n")) {
488 fstab_full += prefix + entry + '\n';
489 }
490 }
491 return fstab_full;
492}
493
494/* Early mount vendor and ODM partitions. The fstab info is read from kernel cmdline. */
495static void early_mount() {
496 std::string fstab_string = import_cmdline_fstab();
497 if (fstab_string.empty()) {
498 LOG(INFO) << "Failed to load vendor fstab from kernel cmdline";
499 return;
500 }
501 FILE *fstab_file = fmemopen((void *)fstab_string.c_str(), fstab_string.length(), "r");
502 if (!fstab_file) {
503 PLOG(ERROR) << "Failed to open fstab string as FILE";
504 return;
505 }
506 std::unique_ptr<struct fstab, decltype(&fs_mgr_free_fstab)> fstab(fs_mgr_read_fstab_file(fstab_file), fs_mgr_free_fstab);
507 fclose(fstab_file);
508 if (!fstab) {
509 LOG(ERROR) << "Failed to parse fstab string: " << fstab_string;
510 return;
511 }
512 LOG(INFO) << "Loaded vendor fstab from cmdline";
513
514 if (early_device_socket_open()) {
515 LOG(ERROR) << "Failed to open device uevent socket";
516 return;
517 }
518
519 /* Create /dev/device-mapper for dm-verity */
520 early_create_dev("/sys/devices/virtual/misc/device-mapper", EARLY_CHAR_DEV);
521
522 for (int i = 0; i < fstab->num_entries; ++i) {
523 struct fstab_rec *rec = &fstab->recs[i];
524 std::string mount_point = rec->mount_point;
525 std::string syspath = rec->blk_device;
526
527 if (mount_point != "/vendor" && mount_point != "/odm")
528 continue;
529
530 /* Create mount target under /dev/block/ from sysfs via uevent */
531 LOG(INFO) << "Mounting " << mount_point << " from " << syspath << "...";
532 char *devpath = strdup(get_path("/dev/block", syspath).c_str());
533 if (!devpath) {
534 PLOG(ERROR) << "Failed to strdup dev path in early mount " << syspath;
535 continue;
536 }
537 rec->blk_device = devpath;
538 early_create_dev(syspath, EARLY_BLOCK_DEV);
539
540 int rc = fs_mgr_early_setup_verity(rec);
541 if (rc == FS_MGR_EARLY_SETUP_VERITY_SUCCESS) {
542 /* Mount target is changed to /dev/block/dm-<n>; initiate its creation from sysfs counterpart */
543 early_create_dev(get_path("/sys/devices/virtual/block", rec->blk_device), EARLY_BLOCK_DEV);
544 } else if (rc == FS_MGR_EARLY_SETUP_VERITY_FAIL) {
545 LOG(ERROR) << "Failed to set up dm-verity on " << rec->blk_device;
546 continue;
547 } else { /* FS_MGR_EARLY_SETUP_VERITY_NO_VERITY */
548 LOG(INFO) << "dm-verity disabled on debuggable device; mount directly on " << rec->blk_device;
549 }
550
551 mkdir(mount_point.c_str(), 0755);
552 rc = mount(rec->blk_device, mount_point.c_str(), rec->fs_type, rec->flags, rec->fs_options);
553 if (rc) {
554 PLOG(ERROR) << "Failed to mount on " << rec->blk_device;
555 }
556 }
557 early_device_socket_close();
558}
559
Elliott Hughes8d82ea02015-02-06 20:15:18 -0800560int main(int argc, char** argv) {
Elliott Hughesda40c002015-03-27 23:20:44 -0700561 if (!strcmp(basename(argv[0]), "ueventd")) {
Colin Crossf83d0b92010-04-21 12:04:20 -0700562 return ueventd_main(argc, argv);
Elliott Hughesda40c002015-03-27 23:20:44 -0700563 }
Colin Crossf83d0b92010-04-21 12:04:20 -0700564
Elliott Hughesda40c002015-03-27 23:20:44 -0700565 if (!strcmp(basename(argv[0]), "watchdogd")) {
Arve Hjønnevågd97d9072012-06-13 21:51:56 -0700566 return watchdogd_main(argc, argv);
Elliott Hughesda40c002015-03-27 23:20:44 -0700567 }
Arve Hjønnevågd97d9072012-06-13 21:51:56 -0700568
Elliott Hughes8d82ea02015-02-06 20:15:18 -0800569 // Clear the umask.
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700570 umask(0);
571
Elliott Hughescc86fb22015-03-17 20:01:13 -0700572 add_environment("PATH", _PATH_DEFPATH);
573
Nick Kralevich9dec93b2015-04-25 15:50:03 -0700574 bool is_first_stage = (argc == 1) || (strcmp(argv[1], "--second-stage") != 0);
575
Hung-ying Tyan99c4a8a2016-02-01 15:07:40 +0800576 // Don't expose the raw commandline to unprivileged processes.
577 chmod("/proc/cmdline", 0440);
578
Elliott Hughes8d82ea02015-02-06 20:15:18 -0800579 // Get the basic filesystem setup we need put together in the initramdisk
580 // on / and then we'll let the rc file figure out the rest.
Nick Kralevich9dec93b2015-04-25 15:50:03 -0700581 if (is_first_stage) {
Nick Kralevichf667a322015-04-25 17:42:52 -0700582 mount("tmpfs", "/dev", "tmpfs", MS_NOSUID, "mode=0755");
583 mkdir("/dev/pts", 0755);
584 mkdir("/dev/socket", 0755);
585 mount("devpts", "/dev/pts", "devpts", 0, NULL);
Nick Kralevichc39ba5a2015-11-07 16:52:17 -0800586 #define MAKE_STR(x) __STRING(x)
587 mount("proc", "/proc", "proc", 0, "hidepid=2,gid=" MAKE_STR(AID_READPROC));
Nick Kralevich9dec93b2015-04-25 15:50:03 -0700588 mount("sysfs", "/sys", "sysfs", 0, NULL);
Nick Kralevich3d9e2732016-03-03 10:40:12 -0800589 mount("selinuxfs", "/sys/fs/selinux", "selinuxfs", 0, NULL);
Elliott Hughes35f5d042016-07-26 09:32:33 -0700590 mknod("/dev/kmsg", S_IFCHR | 0600, makedev(1, 11));
Hung-ying Tyan99c4a8a2016-02-01 15:07:40 +0800591 early_mount();
Nick Kralevich9dec93b2015-04-25 15:50:03 -0700592 }
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700593
Elliott Hughes35f5d042016-07-26 09:32:33 -0700594 // Now that tmpfs is mounted on /dev and we have /dev/kmsg, we can actually
595 // talk to the outside world...
Elliott Hughesf86b5a62016-06-24 15:12:21 -0700596 InitKernelLogging(argv);
Elliott Hughesda40c002015-03-27 23:20:44 -0700597
Elliott Hughesf86b5a62016-06-24 15:12:21 -0700598 LOG(INFO) << "init " << (is_first_stage ? "first stage" : "second stage") << " started!";
Elliott Hughesda40c002015-03-27 23:20:44 -0700599
Nick Kralevichf667a322015-04-25 17:42:52 -0700600 if (!is_first_stage) {
601 // Indicate that booting is in progress to background fw loaders, etc.
602 close(open("/dev/.booting", O_WRONLY | O_CREAT | O_CLOEXEC, 0000));
Vladimir Chtchetkine2b995432011-09-28 09:55:31 -0700603
Nick Kralevichf667a322015-04-25 17:42:52 -0700604 property_init();
Dima Zavin5511c842011-12-19 11:21:32 -0800605
Nick Kralevichf667a322015-04-25 17:42:52 -0700606 // If arguments are passed both on the command line and in DT,
607 // properties set in DT always have priority over the command-line ones.
608 process_kernel_dt();
609 process_kernel_cmdline();
610
Elliott Hughese5ce30f2015-05-06 19:19:24 -0700611 // Propagate the kernel variables to internal variables
Nick Kralevichf667a322015-04-25 17:42:52 -0700612 // used by init as well as the current required properties.
613 export_kernel_boot_props();
614 }
Rom Lemarchand6a524432015-02-28 06:39:11 -0800615
Elliott Hughesf65730e2015-04-24 18:38:17 +0000616 // Set up SELinux, including loading the SELinux policy if we're in the kernel domain.
617 selinux_initialize(is_first_stage);
618
619 // If we're in the kernel domain, re-exec init to transition to the init domain now
620 // that the SELinux policy has been loaded.
621 if (is_first_stage) {
622 if (restorecon("/init") == -1) {
Elliott Hughesf86b5a62016-06-24 15:12:21 -0700623 PLOG(ERROR) << "restorecon failed";
Elliott Hughesf65730e2015-04-24 18:38:17 +0000624 security_failure();
625 }
626 char* path = argv[0];
627 char* args[] = { path, const_cast<char*>("--second-stage"), nullptr };
628 if (execv(path, args) == -1) {
Elliott Hughesf86b5a62016-06-24 15:12:21 -0700629 PLOG(ERROR) << "execv(\"" << path << "\") failed";
Elliott Hughesf65730e2015-04-24 18:38:17 +0000630 security_failure();
631 }
632 }
Elliott Hughes8d82ea02015-02-06 20:15:18 -0800633
634 // These directories were necessarily created before initial policy load
635 // and therefore need their security context restored to the proper value.
636 // This must happen before /dev is populated by ueventd.
Elliott Hughesf86b5a62016-06-24 15:12:21 -0700637 LOG(INFO) << "Running restorecon...";
Stephen Smalleye096e362012-06-11 13:37:39 -0400638 restorecon("/dev");
Elliott Hughes35f5d042016-07-26 09:32:33 -0700639 restorecon("/dev/kmsg");
Stephen Smalleye096e362012-06-11 13:37:39 -0400640 restorecon("/dev/socket");
Geremy Condra8e15eab2013-02-28 17:29:58 -0800641 restorecon("/dev/__properties__");
Tom Cherrye36a85c2015-11-30 16:40:25 -0800642 restorecon("/property_contexts");
Nick Kralevichae76f6d2013-07-11 15:38:26 -0700643 restorecon_recursive("/sys");
Hung-ying Tyan99c4a8a2016-02-01 15:07:40 +0800644 restorecon_recursive("/dev/block");
645 restorecon("/dev/device-mapper");
Stephen Smalleye46f9d52012-01-13 08:48:47 -0500646
Elliott Hughes929f4072015-04-24 21:13:44 -0700647 epoll_fd = epoll_create1(EPOLL_CLOEXEC);
648 if (epoll_fd == -1) {
Elliott Hughesf86b5a62016-06-24 15:12:21 -0700649 PLOG(ERROR) << "epoll_create1 failed";
Elliott Hughes929f4072015-04-24 21:13:44 -0700650 exit(1);
651 }
652
653 signal_handler_init();
Elliott Hughes9042cae2015-04-24 17:43:21 -0700654
Riley Andrewse4b7b292014-06-16 15:06:21 -0700655 property_load_boot_defaults();
Sami Tolvanen9e9efca2015-12-07 12:33:58 +0000656 export_oem_lock_status();
Elliott Hughesc6c26ed2015-04-24 18:50:30 -0700657 start_property_service();
Amit Pundird2e74db2016-06-29 19:00:00 +0530658 set_usb_controller();
Dima Zavind7634c92011-12-16 14:18:06 -0800659
Tom Cherryb7349902015-08-26 11:43:36 -0700660 const BuiltinFunctionMap function_map;
661 Action::set_function_map(&function_map);
662
663 Parser& parser = Parser::GetInstance();
664 parser.AddSectionParser("service",std::make_unique<ServiceParser>());
665 parser.AddSectionParser("on", std::make_unique<ActionParser>());
666 parser.AddSectionParser("import", std::make_unique<ImportParser>());
667 parser.ParseConfig("/init.rc");
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700668
Tom Cherryfa0c21c2015-07-23 17:53:11 -0700669 ActionManager& am = ActionManager::GetInstance();
670
671 am.QueueEventTrigger("early-init");
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700672
Elliott Hughesc6c26ed2015-04-24 18:50:30 -0700673 // Queue an action that waits for coldboot done so we know ueventd has set up all of /dev...
Tom Cherryfa0c21c2015-07-23 17:53:11 -0700674 am.QueueBuiltinAction(wait_for_coldboot_done_action, "wait_for_coldboot_done");
Elliott Hughesc6c26ed2015-04-24 18:50:30 -0700675 // ... so that we can start queuing up actions that require stuff from /dev.
Tom Cherryfa0c21c2015-07-23 17:53:11 -0700676 am.QueueBuiltinAction(mix_hwrng_into_linux_rng_action, "mix_hwrng_into_linux_rng");
677 am.QueueBuiltinAction(keychord_init_action, "keychord_init");
678 am.QueueBuiltinAction(console_init_action, "console_init");
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700679
Elliott Hughesda40c002015-03-27 23:20:44 -0700680 // Trigger all the boot actions to get us started.
Tom Cherryfa0c21c2015-07-23 17:53:11 -0700681 am.QueueEventTrigger("init");
Dima Zavinca47cef2011-08-24 15:28:23 -0700682
Elliott Hughes8d82ea02015-02-06 20:15:18 -0800683 // Repeat mix_hwrng_into_linux_rng in case /dev/hw_random or /dev/random
684 // wasn't ready immediately after wait_for_coldboot_done
Tom Cherryfa0c21c2015-07-23 17:53:11 -0700685 am.QueueBuiltinAction(mix_hwrng_into_linux_rng_action, "mix_hwrng_into_linux_rng");
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700686
Elliott Hughes8d82ea02015-02-06 20:15:18 -0800687 // Don't mount filesystems or start core system services in charger mode.
Yabin Cui74edcea2015-07-24 10:11:05 -0700688 std::string bootmode = property_get("ro.bootmode");
689 if (bootmode == "charger") {
Tom Cherryfa0c21c2015-07-23 17:53:11 -0700690 am.QueueEventTrigger("charger");
Dima Zavinca47cef2011-08-24 15:28:23 -0700691 } else {
Tom Cherryfa0c21c2015-07-23 17:53:11 -0700692 am.QueueEventTrigger("late-init");
Dima Zavinca47cef2011-08-24 15:28:23 -0700693 }
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700694
Elliott Hughes8d82ea02015-02-06 20:15:18 -0800695 // Run all property triggers based on current state of the properties.
Tom Cherryfa0c21c2015-07-23 17:53:11 -0700696 am.QueueBuiltinAction(queue_property_triggers_action, "queue_property_triggers");
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700697
Elliott Hughesc6c26ed2015-04-24 18:50:30 -0700698 while (true) {
Elliott Hughes8d82ea02015-02-06 20:15:18 -0800699 if (!waiting_for_exec) {
Tom Cherryfa0c21c2015-07-23 17:53:11 -0700700 am.ExecuteOneCommand();
Elliott Hughes8d82ea02015-02-06 20:15:18 -0800701 restart_processes();
702 }
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700703
Yongqin Liua197ff12014-12-05 13:45:02 +0800704 int timeout = -1;
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700705 if (process_needs_restart) {
706 timeout = (process_needs_restart - gettime()) * 1000;
707 if (timeout < 0)
708 timeout = 0;
709 }
710
Tom Cherryfa0c21c2015-07-23 17:53:11 -0700711 if (am.HasMoreCommands()) {
Colin Crossebc6ff12010-04-13 19:52:01 -0700712 timeout = 0;
Elliott Hughesc0e919c2015-02-04 14:46:36 -0800713 }
Colin Crossebc6ff12010-04-13 19:52:01 -0700714
Yongqin Liua197ff12014-12-05 13:45:02 +0800715 bootchart_sample(&timeout);
Elliott Hughesc0e919c2015-02-04 14:46:36 -0800716
Elliott Hughes929f4072015-04-24 21:13:44 -0700717 epoll_event ev;
718 int nr = TEMP_FAILURE_RETRY(epoll_wait(epoll_fd, &ev, 1, timeout));
719 if (nr == -1) {
Elliott Hughesf86b5a62016-06-24 15:12:21 -0700720 PLOG(ERROR) << "epoll_wait failed";
Elliott Hughes929f4072015-04-24 21:13:44 -0700721 } else if (nr == 1) {
722 ((void (*)()) ev.data.ptr)();
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700723 }
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700724 }
725
726 return 0;
727}