The Android Open Source Project | 4f6e8d7 | 2008-10-21 07:00:00 -0700 | [diff] [blame] | 1 | /* |
| 2 | * Copyright (C) 2008 The Android Open Source Project |
| 3 | * |
| 4 | * Licensed under the Apache License, Version 2.0 (the "License"); |
| 5 | * you may not use this file except in compliance with the License. |
| 6 | * You may obtain a copy of the License at |
| 7 | * |
| 8 | * http://www.apache.org/licenses/LICENSE-2.0 |
| 9 | * |
| 10 | * Unless required by applicable law or agreed to in writing, software |
| 11 | * distributed under the License is distributed on an "AS IS" BASIS, |
| 12 | * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| 13 | * See the License for the specific language governing permissions and |
| 14 | * limitations under the License. |
| 15 | */ |
| 16 | |
Elliott Hughes | 8d82ea0 | 2015-02-06 20:15:18 -0800 | [diff] [blame] | 17 | #include <ctype.h> |
Rom Lemarchand | 6a52443 | 2015-02-28 06:39:11 -0800 | [diff] [blame] | 18 | #include <dirent.h> |
Elliott Hughes | 8d82ea0 | 2015-02-06 20:15:18 -0800 | [diff] [blame] | 19 | #include <errno.h> |
| 20 | #include <fcntl.h> |
| 21 | #include <libgen.h> |
Elliott Hughes | cc86fb2 | 2015-03-17 20:01:13 -0700 | [diff] [blame] | 22 | #include <paths.h> |
Elliott Hughes | 8d82ea0 | 2015-02-06 20:15:18 -0800 | [diff] [blame] | 23 | #include <signal.h> |
| 24 | #include <stdarg.h> |
The Android Open Source Project | 4f6e8d7 | 2008-10-21 07:00:00 -0700 | [diff] [blame] | 25 | #include <stdio.h> |
| 26 | #include <stdlib.h> |
| 27 | #include <string.h> |
Elliott Hughes | 929f407 | 2015-04-24 21:13:44 -0700 | [diff] [blame] | 28 | #include <sys/epoll.h> |
The Android Open Source Project | 4f6e8d7 | 2008-10-21 07:00:00 -0700 | [diff] [blame] | 29 | #include <sys/mount.h> |
The Android Open Source Project | 4f6e8d7 | 2008-10-21 07:00:00 -0700 | [diff] [blame] | 30 | #include <sys/socket.h> |
Elliott Hughes | 8d82ea0 | 2015-02-06 20:15:18 -0800 | [diff] [blame] | 31 | #include <sys/stat.h> |
Elliott Hughes | 35f5d04 | 2016-07-26 09:32:33 -0700 | [diff] [blame] | 32 | #include <sys/sysmacros.h> |
Elliott Hughes | 8d82ea0 | 2015-02-06 20:15:18 -0800 | [diff] [blame] | 33 | #include <sys/types.h> |
The Android Open Source Project | 4f6e8d7 | 2008-10-21 07:00:00 -0700 | [diff] [blame] | 34 | #include <sys/un.h> |
Elliott Hughes | 8d82ea0 | 2015-02-06 20:15:18 -0800 | [diff] [blame] | 35 | #include <sys/wait.h> |
Elliott Hughes | 8d82ea0 | 2015-02-06 20:15:18 -0800 | [diff] [blame] | 36 | #include <unistd.h> |
| 37 | |
Stephen Smalley | e46f9d5 | 2012-01-13 08:48:47 -0500 | [diff] [blame] | 38 | #include <selinux/selinux.h> |
| 39 | #include <selinux/label.h> |
Stephen Smalley | ae6f3d7 | 2012-05-01 15:02:53 -0400 | [diff] [blame] | 40 | #include <selinux/android.h> |
Stephen Smalley | e46f9d5 | 2012-01-13 08:48:47 -0500 | [diff] [blame] | 41 | |
Elliott Hughes | 4f71319 | 2015-12-04 22:00:26 -0800 | [diff] [blame] | 42 | #include <android-base/file.h> |
| 43 | #include <android-base/stringprintf.h> |
| 44 | #include <android-base/strings.h> |
Nick Kralevich | 56fa0ac | 2013-06-24 17:41:40 -0700 | [diff] [blame] | 45 | #include <cutils/android_reboot.h> |
Alex Klyubin | 0d872d8 | 2013-08-16 13:19:24 -0700 | [diff] [blame] | 46 | #include <cutils/fs.h> |
Elliott Hughes | 8d82ea0 | 2015-02-06 20:15:18 -0800 | [diff] [blame] | 47 | #include <cutils/iosched_policy.h> |
| 48 | #include <cutils/list.h> |
| 49 | #include <cutils/sockets.h> |
Colin Cross | f83d0b9 | 2010-04-21 12:04:20 -0700 | [diff] [blame] | 50 | #include <private/android_filesystem_config.h> |
The Android Open Source Project | 4f6e8d7 | 2008-10-21 07:00:00 -0700 | [diff] [blame] | 51 | |
Rom Lemarchand | 6a52443 | 2015-02-28 06:39:11 -0800 | [diff] [blame] | 52 | #include <memory> |
| 53 | |
Tom Cherry | fa0c21c | 2015-07-23 17:53:11 -0700 | [diff] [blame] | 54 | #include "action.h" |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 55 | #include "bootchart.h" |
The Android Open Source Project | 4f6e8d7 | 2008-10-21 07:00:00 -0700 | [diff] [blame] | 56 | #include "devices.h" |
Hung-ying Tyan | 99c4a8a | 2016-02-01 15:07:40 +0800 | [diff] [blame] | 57 | #include "fs_mgr.h" |
Tom Cherry | b734990 | 2015-08-26 11:43:36 -0700 | [diff] [blame] | 58 | #include "import_parser.h" |
The Android Open Source Project | 4f6e8d7 | 2008-10-21 07:00:00 -0700 | [diff] [blame] | 59 | #include "init.h" |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 60 | #include "init_parser.h" |
| 61 | #include "keychords.h" |
Colin Cross | ed8a7d8 | 2010-04-19 17:05:34 -0700 | [diff] [blame] | 62 | #include "log.h" |
The Android Open Source Project | 4f6e8d7 | 2008-10-21 07:00:00 -0700 | [diff] [blame] | 63 | #include "property_service.h" |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 64 | #include "service.h" |
Colin Cross | 9c5366b | 2010-04-13 19:48:59 -0700 | [diff] [blame] | 65 | #include "signal_handler.h" |
Colin Cross | f83d0b9 | 2010-04-21 12:04:20 -0700 | [diff] [blame] | 66 | #include "ueventd.h" |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 67 | #include "util.h" |
Arve Hjønnevåg | d97d907 | 2012-06-13 21:51:56 -0700 | [diff] [blame] | 68 | #include "watchdogd.h" |
The Android Open Source Project | 4f6e8d7 | 2008-10-21 07:00:00 -0700 | [diff] [blame] | 69 | |
Stephen Smalley | e46f9d5 | 2012-01-13 08:48:47 -0500 | [diff] [blame] | 70 | struct selabel_handle *sehandle; |
rpcraig | 63207cd | 2012-08-09 10:05:49 -0400 | [diff] [blame] | 71 | struct selabel_handle *sehandle_prop; |
Stephen Smalley | e46f9d5 | 2012-01-13 08:48:47 -0500 | [diff] [blame] | 72 | |
The Android Open Source Project | 4f6e8d7 | 2008-10-21 07:00:00 -0700 | [diff] [blame] | 73 | static int property_triggers_enabled = 0; |
| 74 | |
The Android Open Source Project | 4f6e8d7 | 2008-10-21 07:00:00 -0700 | [diff] [blame] | 75 | static char qemu[32]; |
| 76 | |
Viorel Suman | 70daa67 | 2016-03-21 10:08:07 +0200 | [diff] [blame] | 77 | std::string default_console = "/dev/console"; |
The Android Open Source Project | 4f6e8d7 | 2008-10-21 07:00:00 -0700 | [diff] [blame] | 78 | static time_t process_needs_restart; |
| 79 | |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 80 | const char *ENV[32]; |
The Android Open Source Project | 4f6e8d7 | 2008-10-21 07:00:00 -0700 | [diff] [blame] | 81 | |
Elliott Hughes | 8d82ea0 | 2015-02-06 20:15:18 -0800 | [diff] [blame] | 82 | bool waiting_for_exec = false; |
| 83 | |
Elliott Hughes | 929f407 | 2015-04-24 21:13:44 -0700 | [diff] [blame] | 84 | static int epoll_fd = -1; |
| 85 | |
| 86 | void register_epoll_handler(int fd, void (*fn)()) { |
| 87 | epoll_event ev; |
| 88 | ev.events = EPOLLIN; |
| 89 | ev.data.ptr = reinterpret_cast<void*>(fn); |
| 90 | if (epoll_ctl(epoll_fd, EPOLL_CTL_ADD, fd, &ev) == -1) { |
Elliott Hughes | f86b5a6 | 2016-06-24 15:12:21 -0700 | [diff] [blame] | 91 | PLOG(ERROR) << "epoll_ctl failed"; |
Elliott Hughes | 929f407 | 2015-04-24 21:13:44 -0700 | [diff] [blame] | 92 | } |
| 93 | } |
| 94 | |
The Android Open Source Project | 4f6e8d7 | 2008-10-21 07:00:00 -0700 | [diff] [blame] | 95 | /* add_environment - add "key=value" to the current environment */ |
| 96 | int add_environment(const char *key, const char *val) |
| 97 | { |
James Morrissey | 381341f | 2014-05-16 11:36:36 +0100 | [diff] [blame] | 98 | size_t n; |
| 99 | size_t key_len = strlen(key); |
Vladimir Chtchetkine | 2b99543 | 2011-09-28 09:55:31 -0700 | [diff] [blame] | 100 | |
James Morrissey | 381341f | 2014-05-16 11:36:36 +0100 | [diff] [blame] | 101 | /* The last environment entry is reserved to terminate the list */ |
Elliott Hughes | f86b5a6 | 2016-06-24 15:12:21 -0700 | [diff] [blame] | 102 | for (n = 0; n < (arraysize(ENV) - 1); n++) { |
James Morrissey | 381341f | 2014-05-16 11:36:36 +0100 | [diff] [blame] | 103 | |
| 104 | /* Delete any existing entry for this key */ |
| 105 | if (ENV[n] != NULL) { |
| 106 | size_t entry_key_len = strcspn(ENV[n], "="); |
| 107 | if ((entry_key_len == key_len) && (strncmp(ENV[n], key, entry_key_len) == 0)) { |
| 108 | free((char*)ENV[n]); |
| 109 | ENV[n] = NULL; |
| 110 | } |
| 111 | } |
| 112 | |
| 113 | /* Add entry if a free slot is available */ |
| 114 | if (ENV[n] == NULL) { |
Elliott Hughes | f3cf438 | 2015-02-03 17:12:07 -0800 | [diff] [blame] | 115 | char* entry; |
| 116 | asprintf(&entry, "%s=%s", key, val); |
The Android Open Source Project | 4f6e8d7 | 2008-10-21 07:00:00 -0700 | [diff] [blame] | 117 | ENV[n] = entry; |
| 118 | return 0; |
| 119 | } |
| 120 | } |
| 121 | |
Elliott Hughes | f86b5a6 | 2016-06-24 15:12:21 -0700 | [diff] [blame] | 122 | LOG(ERROR) << "No env. room to store: '" << key << "':'" << val << "'"; |
James Morrissey | 381341f | 2014-05-16 11:36:36 +0100 | [diff] [blame] | 123 | |
| 124 | return -1; |
The Android Open Source Project | 4f6e8d7 | 2008-10-21 07:00:00 -0700 | [diff] [blame] | 125 | } |
| 126 | |
The Android Open Source Project | 4f6e8d7 | 2008-10-21 07:00:00 -0700 | [diff] [blame] | 127 | void property_changed(const char *name, const char *value) |
| 128 | { |
Colin Cross | ebc6ff1 | 2010-04-13 19:52:01 -0700 | [diff] [blame] | 129 | if (property_triggers_enabled) |
Tom Cherry | fa0c21c | 2015-07-23 17:53:11 -0700 | [diff] [blame] | 130 | ActionManager::GetInstance().QueuePropertyTrigger(name, value); |
The Android Open Source Project | 4f6e8d7 | 2008-10-21 07:00:00 -0700 | [diff] [blame] | 131 | } |
| 132 | |
The Android Open Source Project | 4f6e8d7 | 2008-10-21 07:00:00 -0700 | [diff] [blame] | 133 | static void restart_processes() |
| 134 | { |
| 135 | process_needs_restart = 0; |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 136 | ServiceManager::GetInstance(). |
| 137 | ForEachServiceWithFlags(SVC_RESTARTING, [] (Service* s) { |
| 138 | s->RestartIfNeeded(process_needs_restart); |
| 139 | }); |
The Android Open Source Project | 4f6e8d7 | 2008-10-21 07:00:00 -0700 | [diff] [blame] | 140 | } |
| 141 | |
Elliott Hughes | bdeac39 | 2016-04-12 15:38:27 -0700 | [diff] [blame] | 142 | void handle_control_message(const std::string& msg, const std::string& name) { |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 143 | Service* svc = ServiceManager::GetInstance().FindServiceByName(name); |
Elliott Hughes | bdeac39 | 2016-04-12 15:38:27 -0700 | [diff] [blame] | 144 | if (svc == nullptr) { |
Elliott Hughes | f86b5a6 | 2016-06-24 15:12:21 -0700 | [diff] [blame] | 145 | LOG(ERROR) << "no such service '" << name << "'"; |
Elliott Hughes | bdeac39 | 2016-04-12 15:38:27 -0700 | [diff] [blame] | 146 | return; |
The Android Open Source Project | 4f6e8d7 | 2008-10-21 07:00:00 -0700 | [diff] [blame] | 147 | } |
The Android Open Source Project | 4f6e8d7 | 2008-10-21 07:00:00 -0700 | [diff] [blame] | 148 | |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 149 | if (msg == "start") { |
Elliott Hughes | bdeac39 | 2016-04-12 15:38:27 -0700 | [diff] [blame] | 150 | svc->Start(); |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 151 | } else if (msg == "stop") { |
Elliott Hughes | bdeac39 | 2016-04-12 15:38:27 -0700 | [diff] [blame] | 152 | svc->Stop(); |
Tom Cherry | bac3299 | 2015-07-31 12:45:25 -0700 | [diff] [blame] | 153 | } else if (msg == "restart") { |
Elliott Hughes | bdeac39 | 2016-04-12 15:38:27 -0700 | [diff] [blame] | 154 | svc->Restart(); |
The Android Open Source Project | 4f6e8d7 | 2008-10-21 07:00:00 -0700 | [diff] [blame] | 155 | } else { |
Elliott Hughes | f86b5a6 | 2016-06-24 15:12:21 -0700 | [diff] [blame] | 156 | LOG(ERROR) << "unknown control msg '" << msg << "'"; |
The Android Open Source Project | 4f6e8d7 | 2008-10-21 07:00:00 -0700 | [diff] [blame] | 157 | } |
| 158 | } |
| 159 | |
Tom Cherry | 96f6731 | 2015-07-30 13:52:55 -0700 | [diff] [blame] | 160 | static int wait_for_coldboot_done_action(const std::vector<std::string>& args) { |
Elliott Hughes | c6c26ed | 2015-04-24 18:50:30 -0700 | [diff] [blame] | 161 | Timer t; |
| 162 | |
Elliott Hughes | f86b5a6 | 2016-06-24 15:12:21 -0700 | [diff] [blame] | 163 | LOG(VERBOSE) << "Waiting for " COLDBOOT_DONE "..."; |
Elliott Hughes | c7331d0 | 2015-05-14 12:03:14 -0700 | [diff] [blame] | 164 | // Any longer than 1s is an unreasonable length of time to delay booting. |
| 165 | // If you're hitting this timeout, check that you didn't make your |
| 166 | // sepolicy regular expressions too expensive (http://b/19899875). |
| 167 | if (wait_for_file(COLDBOOT_DONE, 1)) { |
Elliott Hughes | f86b5a6 | 2016-06-24 15:12:21 -0700 | [diff] [blame] | 168 | LOG(ERROR) << "Timed out waiting for " COLDBOOT_DONE; |
Elliott Hughes | c6c26ed | 2015-04-24 18:50:30 -0700 | [diff] [blame] | 169 | } |
| 170 | |
Elliott Hughes | f86b5a6 | 2016-06-24 15:12:21 -0700 | [diff] [blame] | 171 | LOG(VERBOSE) << "Waiting for " COLDBOOT_DONE " took " << t.duration() << "s."; |
Elliott Hughes | c6c26ed | 2015-04-24 18:50:30 -0700 | [diff] [blame] | 172 | return 0; |
Colin Cross | ebc6ff1 | 2010-04-13 19:52:01 -0700 | [diff] [blame] | 173 | } |
| 174 | |
Alex Klyubin | 0d872d8 | 2013-08-16 13:19:24 -0700 | [diff] [blame] | 175 | /* |
| 176 | * Writes 512 bytes of output from Hardware RNG (/dev/hw_random, backed |
| 177 | * by Linux kernel's hw_random framework) into Linux RNG's via /dev/urandom. |
| 178 | * Does nothing if Hardware RNG is not present. |
| 179 | * |
| 180 | * Since we don't yet trust the quality of Hardware RNG, these bytes are not |
| 181 | * mixed into the primary pool of Linux RNG and the entropy estimate is left |
| 182 | * unmodified. |
| 183 | * |
| 184 | * If the HW RNG device /dev/hw_random is present, we require that at least |
| 185 | * 512 bytes read from it are written into Linux RNG. QA is expected to catch |
| 186 | * devices/configurations where these I/O operations are blocking for a long |
| 187 | * time. We do not reboot or halt on failures, as this is a best-effort |
| 188 | * attempt. |
| 189 | */ |
Tom Cherry | 96f6731 | 2015-07-30 13:52:55 -0700 | [diff] [blame] | 190 | static int mix_hwrng_into_linux_rng_action(const std::vector<std::string>& args) |
Alex Klyubin | 0d872d8 | 2013-08-16 13:19:24 -0700 | [diff] [blame] | 191 | { |
| 192 | int result = -1; |
| 193 | int hwrandom_fd = -1; |
| 194 | int urandom_fd = -1; |
| 195 | char buf[512]; |
| 196 | ssize_t chunk_size; |
| 197 | size_t total_bytes_written = 0; |
| 198 | |
| 199 | hwrandom_fd = TEMP_FAILURE_RETRY( |
Nick Kralevich | 45a884f | 2015-02-02 14:37:22 -0800 | [diff] [blame] | 200 | open("/dev/hw_random", O_RDONLY | O_NOFOLLOW | O_CLOEXEC)); |
Alex Klyubin | 0d872d8 | 2013-08-16 13:19:24 -0700 | [diff] [blame] | 201 | if (hwrandom_fd == -1) { |
| 202 | if (errno == ENOENT) { |
Elliott Hughes | f86b5a6 | 2016-06-24 15:12:21 -0700 | [diff] [blame] | 203 | LOG(ERROR) << "/dev/hw_random not found"; |
| 204 | // It's not an error to not have a Hardware RNG. |
| 205 | result = 0; |
Alex Klyubin | 0d872d8 | 2013-08-16 13:19:24 -0700 | [diff] [blame] | 206 | } else { |
Elliott Hughes | f86b5a6 | 2016-06-24 15:12:21 -0700 | [diff] [blame] | 207 | PLOG(ERROR) << "Failed to open /dev/hw_random"; |
Alex Klyubin | 0d872d8 | 2013-08-16 13:19:24 -0700 | [diff] [blame] | 208 | } |
| 209 | goto ret; |
| 210 | } |
| 211 | |
| 212 | urandom_fd = TEMP_FAILURE_RETRY( |
Nick Kralevich | 45a884f | 2015-02-02 14:37:22 -0800 | [diff] [blame] | 213 | open("/dev/urandom", O_WRONLY | O_NOFOLLOW | O_CLOEXEC)); |
Alex Klyubin | 0d872d8 | 2013-08-16 13:19:24 -0700 | [diff] [blame] | 214 | if (urandom_fd == -1) { |
Elliott Hughes | f86b5a6 | 2016-06-24 15:12:21 -0700 | [diff] [blame] | 215 | PLOG(ERROR) << "Failed to open /dev/urandom"; |
Alex Klyubin | 0d872d8 | 2013-08-16 13:19:24 -0700 | [diff] [blame] | 216 | goto ret; |
| 217 | } |
| 218 | |
| 219 | while (total_bytes_written < sizeof(buf)) { |
| 220 | chunk_size = TEMP_FAILURE_RETRY( |
| 221 | read(hwrandom_fd, buf, sizeof(buf) - total_bytes_written)); |
| 222 | if (chunk_size == -1) { |
Elliott Hughes | f86b5a6 | 2016-06-24 15:12:21 -0700 | [diff] [blame] | 223 | PLOG(ERROR) << "Failed to read from /dev/hw_random"; |
Alex Klyubin | 0d872d8 | 2013-08-16 13:19:24 -0700 | [diff] [blame] | 224 | goto ret; |
| 225 | } else if (chunk_size == 0) { |
Elliott Hughes | f86b5a6 | 2016-06-24 15:12:21 -0700 | [diff] [blame] | 226 | LOG(ERROR) << "Failed to read from /dev/hw_random: EOF"; |
Alex Klyubin | 0d872d8 | 2013-08-16 13:19:24 -0700 | [diff] [blame] | 227 | goto ret; |
| 228 | } |
| 229 | |
| 230 | chunk_size = TEMP_FAILURE_RETRY(write(urandom_fd, buf, chunk_size)); |
| 231 | if (chunk_size == -1) { |
Elliott Hughes | f86b5a6 | 2016-06-24 15:12:21 -0700 | [diff] [blame] | 232 | PLOG(ERROR) << "Failed to write to /dev/urandom"; |
Alex Klyubin | 0d872d8 | 2013-08-16 13:19:24 -0700 | [diff] [blame] | 233 | goto ret; |
| 234 | } |
| 235 | total_bytes_written += chunk_size; |
| 236 | } |
| 237 | |
Elliott Hughes | f86b5a6 | 2016-06-24 15:12:21 -0700 | [diff] [blame] | 238 | LOG(INFO) << "Mixed " << total_bytes_written << " bytes from /dev/hw_random into /dev/urandom"; |
Alex Klyubin | 0d872d8 | 2013-08-16 13:19:24 -0700 | [diff] [blame] | 239 | result = 0; |
| 240 | |
| 241 | ret: |
| 242 | if (hwrandom_fd != -1) { |
| 243 | close(hwrandom_fd); |
| 244 | } |
| 245 | if (urandom_fd != -1) { |
| 246 | close(urandom_fd); |
| 247 | } |
Alex Klyubin | 0d872d8 | 2013-08-16 13:19:24 -0700 | [diff] [blame] | 248 | return result; |
| 249 | } |
| 250 | |
Tom Cherry | 96f6731 | 2015-07-30 13:52:55 -0700 | [diff] [blame] | 251 | static int keychord_init_action(const std::vector<std::string>& args) |
Colin Cross | ebc6ff1 | 2010-04-13 19:52:01 -0700 | [diff] [blame] | 252 | { |
| 253 | keychord_init(); |
| 254 | return 0; |
| 255 | } |
| 256 | |
Tom Cherry | 96f6731 | 2015-07-30 13:52:55 -0700 | [diff] [blame] | 257 | static int console_init_action(const std::vector<std::string>& args) |
Colin Cross | ebc6ff1 | 2010-04-13 19:52:01 -0700 | [diff] [blame] | 258 | { |
Viorel Suman | efc7275 | 2016-03-21 10:23:43 +0200 | [diff] [blame] | 259 | std::string console = property_get("ro.boot.console"); |
| 260 | if (!console.empty()) { |
Viorel Suman | 70daa67 | 2016-03-21 10:08:07 +0200 | [diff] [blame] | 261 | default_console = "/dev/" + console; |
Colin Cross | ebc6ff1 | 2010-04-13 19:52:01 -0700 | [diff] [blame] | 262 | } |
Colin Cross | ebc6ff1 | 2010-04-13 19:52:01 -0700 | [diff] [blame] | 263 | return 0; |
| 264 | } |
| 265 | |
Elliott Hughes | e5ce30f | 2015-05-06 19:19:24 -0700 | [diff] [blame] | 266 | static void import_kernel_nv(const std::string& key, const std::string& value, bool for_emulator) { |
| 267 | if (key.empty()) return; |
Dima Zavin | 5511c84 | 2011-12-19 11:21:32 -0800 | [diff] [blame] | 268 | |
| 269 | if (for_emulator) { |
Elliott Hughes | e5ce30f | 2015-05-06 19:19:24 -0700 | [diff] [blame] | 270 | // In the emulator, export any kernel option with the "ro.kernel." prefix. |
| 271 | property_set(android::base::StringPrintf("ro.kernel.%s", key.c_str()).c_str(), value.c_str()); |
Dima Zavin | 5511c84 | 2011-12-19 11:21:32 -0800 | [diff] [blame] | 272 | return; |
| 273 | } |
| 274 | |
Elliott Hughes | e5ce30f | 2015-05-06 19:19:24 -0700 | [diff] [blame] | 275 | if (key == "qemu") { |
| 276 | strlcpy(qemu, value.c_str(), sizeof(qemu)); |
| 277 | } else if (android::base::StartsWith(key, "androidboot.")) { |
| 278 | property_set(android::base::StringPrintf("ro.boot.%s", key.c_str() + 12).c_str(), |
| 279 | value.c_str()); |
Dima Zavin | 5511c84 | 2011-12-19 11:21:32 -0800 | [diff] [blame] | 280 | } |
| 281 | } |
| 282 | |
Sami Tolvanen | 9e9efca | 2015-12-07 12:33:58 +0000 | [diff] [blame] | 283 | static void export_oem_lock_status() { |
| 284 | if (property_get("ro.oem_unlock_supported") != "1") { |
| 285 | return; |
| 286 | } |
| 287 | |
| 288 | std::string value = property_get("ro.boot.verifiedbootstate"); |
| 289 | |
| 290 | if (!value.empty()) { |
| 291 | property_set("ro.boot.flash.locked", value == "orange" ? "0" : "1"); |
| 292 | } |
| 293 | } |
| 294 | |
Elliott Hughes | d679bc9 | 2015-03-20 08:50:46 -0700 | [diff] [blame] | 295 | static void export_kernel_boot_props() { |
Dima Zavin | 5511c84 | 2011-12-19 11:21:32 -0800 | [diff] [blame] | 296 | struct { |
| 297 | const char *src_prop; |
Elliott Hughes | d679bc9 | 2015-03-20 08:50:46 -0700 | [diff] [blame] | 298 | const char *dst_prop; |
| 299 | const char *default_value; |
Dima Zavin | 5511c84 | 2011-12-19 11:21:32 -0800 | [diff] [blame] | 300 | } prop_map[] = { |
Elliott Hughes | d679bc9 | 2015-03-20 08:50:46 -0700 | [diff] [blame] | 301 | { "ro.boot.serialno", "ro.serialno", "", }, |
| 302 | { "ro.boot.mode", "ro.bootmode", "unknown", }, |
| 303 | { "ro.boot.baseband", "ro.baseband", "unknown", }, |
Dima Zavin | 5511c84 | 2011-12-19 11:21:32 -0800 | [diff] [blame] | 304 | { "ro.boot.bootloader", "ro.bootloader", "unknown", }, |
Elliott Hughes | d679bc9 | 2015-03-20 08:50:46 -0700 | [diff] [blame] | 305 | { "ro.boot.hardware", "ro.hardware", "unknown", }, |
| 306 | { "ro.boot.revision", "ro.revision", "0", }, |
Dima Zavin | 5511c84 | 2011-12-19 11:21:32 -0800 | [diff] [blame] | 307 | }; |
Elliott Hughes | f86b5a6 | 2016-06-24 15:12:21 -0700 | [diff] [blame] | 308 | for (size_t i = 0; i < arraysize(prop_map); i++) { |
Yabin Cui | 74edcea | 2015-07-24 10:11:05 -0700 | [diff] [blame] | 309 | std::string value = property_get(prop_map[i].src_prop); |
| 310 | property_set(prop_map[i].dst_prop, (!value.empty()) ? value.c_str() : prop_map[i].default_value); |
Dima Zavin | 5511c84 | 2011-12-19 11:21:32 -0800 | [diff] [blame] | 311 | } |
Dima Zavin | 5511c84 | 2011-12-19 11:21:32 -0800 | [diff] [blame] | 312 | } |
Colin Cross | ebc6ff1 | 2010-04-13 19:52:01 -0700 | [diff] [blame] | 313 | |
Elliott Hughes | e5ce30f | 2015-05-06 19:19:24 -0700 | [diff] [blame] | 314 | static void process_kernel_dt() { |
Rom Lemarchand | 6a52443 | 2015-02-28 06:39:11 -0800 | [diff] [blame] | 315 | static const char android_dir[] = "/proc/device-tree/firmware/android"; |
| 316 | |
| 317 | std::string file_name = android::base::StringPrintf("%s/compatible", android_dir); |
| 318 | |
| 319 | std::string dt_file; |
| 320 | android::base::ReadFileToString(file_name, &dt_file); |
| 321 | if (!dt_file.compare("android,firmware")) { |
Elliott Hughes | f86b5a6 | 2016-06-24 15:12:21 -0700 | [diff] [blame] | 322 | LOG(ERROR) << "firmware/android is not compatible with 'android,firmware'"; |
Rom Lemarchand | 6a52443 | 2015-02-28 06:39:11 -0800 | [diff] [blame] | 323 | return; |
| 324 | } |
| 325 | |
| 326 | std::unique_ptr<DIR, int(*)(DIR*)>dir(opendir(android_dir), closedir); |
Elliott Hughes | e5ce30f | 2015-05-06 19:19:24 -0700 | [diff] [blame] | 327 | if (!dir) return; |
Rom Lemarchand | 6a52443 | 2015-02-28 06:39:11 -0800 | [diff] [blame] | 328 | |
| 329 | struct dirent *dp; |
| 330 | while ((dp = readdir(dir.get())) != NULL) { |
Rom Lemarchand | 1dcf325 | 2015-11-08 17:51:50 -0800 | [diff] [blame] | 331 | if (dp->d_type != DT_REG || !strcmp(dp->d_name, "compatible") || !strcmp(dp->d_name, "name")) { |
Rom Lemarchand | 6a52443 | 2015-02-28 06:39:11 -0800 | [diff] [blame] | 332 | continue; |
Elliott Hughes | e5ce30f | 2015-05-06 19:19:24 -0700 | [diff] [blame] | 333 | } |
Rom Lemarchand | 6a52443 | 2015-02-28 06:39:11 -0800 | [diff] [blame] | 334 | |
| 335 | file_name = android::base::StringPrintf("%s/%s", android_dir, dp->d_name); |
| 336 | |
| 337 | android::base::ReadFileToString(file_name, &dt_file); |
| 338 | std::replace(dt_file.begin(), dt_file.end(), ',', '.'); |
| 339 | |
| 340 | std::string property_name = android::base::StringPrintf("ro.boot.%s", dp->d_name); |
Elliott Hughes | db3f267 | 2015-03-20 09:45:18 -0700 | [diff] [blame] | 341 | property_set(property_name.c_str(), dt_file.c_str()); |
Rom Lemarchand | 6a52443 | 2015-02-28 06:39:11 -0800 | [diff] [blame] | 342 | } |
| 343 | } |
| 344 | |
Elliott Hughes | e5ce30f | 2015-05-06 19:19:24 -0700 | [diff] [blame] | 345 | static void process_kernel_cmdline() { |
Elliott Hughes | e5ce30f | 2015-05-06 19:19:24 -0700 | [diff] [blame] | 346 | // The first pass does the common stuff, and finds if we are in qemu. |
| 347 | // The second pass is only necessary for qemu to export all kernel params |
| 348 | // as properties. |
Nick Kralevich | f667a32 | 2015-04-25 17:42:52 -0700 | [diff] [blame] | 349 | import_kernel_cmdline(false, import_kernel_nv); |
Elliott Hughes | e5ce30f | 2015-05-06 19:19:24 -0700 | [diff] [blame] | 350 | if (qemu[0]) import_kernel_cmdline(true, import_kernel_nv); |
Colin Cross | ebc6ff1 | 2010-04-13 19:52:01 -0700 | [diff] [blame] | 351 | } |
| 352 | |
Tom Cherry | 96f6731 | 2015-07-30 13:52:55 -0700 | [diff] [blame] | 353 | static int queue_property_triggers_action(const std::vector<std::string>& args) |
Colin Cross | ebc6ff1 | 2010-04-13 19:52:01 -0700 | [diff] [blame] | 354 | { |
Tom Cherry | fa0c21c | 2015-07-23 17:53:11 -0700 | [diff] [blame] | 355 | ActionManager::GetInstance().QueueAllPropertyTriggers(); |
Colin Cross | ebc6ff1 | 2010-04-13 19:52:01 -0700 | [diff] [blame] | 356 | /* enable property triggers */ |
| 357 | property_triggers_enabled = 1; |
| 358 | return 0; |
| 359 | } |
| 360 | |
Elliott Hughes | c6c26ed | 2015-04-24 18:50:30 -0700 | [diff] [blame] | 361 | static void selinux_init_all_handles(void) |
Stephen Smalley | e46f9d5 | 2012-01-13 08:48:47 -0500 | [diff] [blame] | 362 | { |
Stephen Smalley | ae6f3d7 | 2012-05-01 15:02:53 -0400 | [diff] [blame] | 363 | sehandle = selinux_android_file_context_handle(); |
Stephen Smalley | dbd37f2 | 2014-01-28 10:34:09 -0500 | [diff] [blame] | 364 | selinux_android_set_sehandle(sehandle); |
rpcraig | 63207cd | 2012-08-09 10:05:49 -0400 | [diff] [blame] | 365 | sehandle_prop = selinux_android_prop_context_handle(); |
Stephen Smalley | ae6f3d7 | 2012-05-01 15:02:53 -0400 | [diff] [blame] | 366 | } |
Stephen Smalley | e46f9d5 | 2012-01-13 08:48:47 -0500 | [diff] [blame] | 367 | |
Nick Kralevich | d34e407 | 2015-04-28 12:39:41 -0700 | [diff] [blame] | 368 | enum selinux_enforcing_status { SELINUX_PERMISSIVE, SELINUX_ENFORCING }; |
Nick Kralevich | f667a32 | 2015-04-25 17:42:52 -0700 | [diff] [blame] | 369 | |
| 370 | static selinux_enforcing_status selinux_status_from_cmdline() { |
| 371 | selinux_enforcing_status status = SELINUX_ENFORCING; |
| 372 | |
Elliott Hughes | e5ce30f | 2015-05-06 19:19:24 -0700 | [diff] [blame] | 373 | import_kernel_cmdline(false, [&](const std::string& key, const std::string& value, bool in_qemu) { |
| 374 | if (key == "androidboot.selinux" && value == "permissive") { |
| 375 | status = SELINUX_PERMISSIVE; |
Nick Kralevich | f667a32 | 2015-04-25 17:42:52 -0700 | [diff] [blame] | 376 | } |
Elliott Hughes | e5ce30f | 2015-05-06 19:19:24 -0700 | [diff] [blame] | 377 | }); |
Nick Kralevich | f667a32 | 2015-04-25 17:42:52 -0700 | [diff] [blame] | 378 | |
| 379 | return status; |
| 380 | } |
| 381 | |
Nick Kralevich | 935bd3e | 2013-06-26 15:37:26 -0700 | [diff] [blame] | 382 | static bool selinux_is_enforcing(void) |
| 383 | { |
Nick Kralevich | d34e407 | 2015-04-28 12:39:41 -0700 | [diff] [blame] | 384 | if (ALLOW_PERMISSIVE_SELINUX) { |
Nick Kralevich | f667a32 | 2015-04-25 17:42:52 -0700 | [diff] [blame] | 385 | return selinux_status_from_cmdline() == SELINUX_ENFORCING; |
Nick Kralevich | 935bd3e | 2013-06-26 15:37:26 -0700 | [diff] [blame] | 386 | } |
Nick Kralevich | 935bd3e | 2013-06-26 15:37:26 -0700 | [diff] [blame] | 387 | return true; |
| 388 | } |
| 389 | |
Elliott Hughes | da40c00 | 2015-03-27 23:20:44 -0700 | [diff] [blame] | 390 | static int audit_callback(void *data, security_class_t /*cls*/, char *buf, size_t len) { |
William Roberts | d7aea44 | 2015-10-01 16:03:47 -0700 | [diff] [blame] | 391 | |
| 392 | property_audit_data *d = reinterpret_cast<property_audit_data*>(data); |
| 393 | |
| 394 | if (!d || !d->name || !d->cr) { |
Elliott Hughes | f86b5a6 | 2016-06-24 15:12:21 -0700 | [diff] [blame] | 395 | LOG(ERROR) << "audit_callback invoked with null data arguments!"; |
William Roberts | d7aea44 | 2015-10-01 16:03:47 -0700 | [diff] [blame] | 396 | return 0; |
| 397 | } |
| 398 | |
| 399 | snprintf(buf, len, "property=%s pid=%d uid=%d gid=%d", d->name, |
| 400 | d->cr->pid, d->cr->uid, d->cr->gid); |
rpcraig | 63207cd | 2012-08-09 10:05:49 -0400 | [diff] [blame] | 401 | return 0; |
| 402 | } |
| 403 | |
Daniel Cashman | c8f026f | 2016-03-25 17:42:10 +0000 | [diff] [blame] | 404 | static void security_failure() { |
Elliott Hughes | f86b5a6 | 2016-06-24 15:12:21 -0700 | [diff] [blame] | 405 | LOG(ERROR) << "Security failure; rebooting into recovery mode..."; |
Daniel Cashman | c8f026f | 2016-03-25 17:42:10 +0000 | [diff] [blame] | 406 | android_reboot(ANDROID_RB_RESTART2, 0, "recovery"); |
| 407 | while (true) { pause(); } // never reached |
| 408 | } |
| 409 | |
Elliott Hughes | f65730e | 2015-04-24 18:38:17 +0000 | [diff] [blame] | 410 | static void selinux_initialize(bool in_kernel_domain) { |
Elliott Hughes | da40c00 | 2015-03-27 23:20:44 -0700 | [diff] [blame] | 411 | Timer t; |
Stephen Smalley | eb3f421 | 2014-02-12 16:17:00 -0500 | [diff] [blame] | 412 | |
Elliott Hughes | da40c00 | 2015-03-27 23:20:44 -0700 | [diff] [blame] | 413 | selinux_callback cb; |
| 414 | cb.func_log = selinux_klog_callback; |
| 415 | selinux_set_callback(SELINUX_CB_LOG, cb); |
| 416 | cb.func_audit = audit_callback; |
| 417 | selinux_set_callback(SELINUX_CB_AUDIT, cb); |
| 418 | |
Elliott Hughes | f65730e | 2015-04-24 18:38:17 +0000 | [diff] [blame] | 419 | if (in_kernel_domain) { |
Elliott Hughes | f86b5a6 | 2016-06-24 15:12:21 -0700 | [diff] [blame] | 420 | LOG(INFO) << "Loading SELinux policy..."; |
Elliott Hughes | f65730e | 2015-04-24 18:38:17 +0000 | [diff] [blame] | 421 | if (selinux_android_load_policy() < 0) { |
Elliott Hughes | f86b5a6 | 2016-06-24 15:12:21 -0700 | [diff] [blame] | 422 | PLOG(ERROR) << "failed to load policy"; |
Elliott Hughes | f65730e | 2015-04-24 18:38:17 +0000 | [diff] [blame] | 423 | security_failure(); |
| 424 | } |
| 425 | |
Nick Kralevich | d34e407 | 2015-04-28 12:39:41 -0700 | [diff] [blame] | 426 | bool kernel_enforcing = (security_getenforce() == 1); |
Elliott Hughes | f65730e | 2015-04-24 18:38:17 +0000 | [diff] [blame] | 427 | bool is_enforcing = selinux_is_enforcing(); |
Nick Kralevich | d34e407 | 2015-04-28 12:39:41 -0700 | [diff] [blame] | 428 | if (kernel_enforcing != is_enforcing) { |
| 429 | if (security_setenforce(is_enforcing)) { |
Elliott Hughes | f86b5a6 | 2016-06-24 15:12:21 -0700 | [diff] [blame] | 430 | PLOG(ERROR) << "security_setenforce(%s) failed" << (is_enforcing ? "true" : "false"); |
Nick Kralevich | d34e407 | 2015-04-28 12:39:41 -0700 | [diff] [blame] | 431 | security_failure(); |
| 432 | } |
| 433 | } |
Elliott Hughes | f65730e | 2015-04-24 18:38:17 +0000 | [diff] [blame] | 434 | |
Nick Kralevich | eedbe81 | 2015-04-25 14:10:03 -0700 | [diff] [blame] | 435 | if (write_file("/sys/fs/selinux/checkreqprot", "0") == -1) { |
| 436 | security_failure(); |
| 437 | } |
| 438 | |
Elliott Hughes | f86b5a6 | 2016-06-24 15:12:21 -0700 | [diff] [blame] | 439 | LOG(INFO) << "(Initializing SELinux " << (is_enforcing ? "enforcing" : "non-enforcing") |
| 440 | << " took " << t.duration() << "s.)"; |
Elliott Hughes | f65730e | 2015-04-24 18:38:17 +0000 | [diff] [blame] | 441 | } else { |
| 442 | selinux_init_all_handles(); |
Nick Kralevich | 56fa0ac | 2013-06-24 17:41:40 -0700 | [diff] [blame] | 443 | } |
Nick Kralevich | 56fa0ac | 2013-06-24 17:41:40 -0700 | [diff] [blame] | 444 | } |
| 445 | |
Amit Pundir | d2e74db | 2016-06-29 19:00:00 +0530 | [diff] [blame] | 446 | // Set the UDC controller for the ConfigFS USB Gadgets. |
| 447 | // Read the UDC controller in use from "/sys/class/udc". |
| 448 | // In case of multiple UDC controllers select the first one. |
| 449 | static void set_usb_controller() { |
| 450 | std::unique_ptr<DIR, decltype(&closedir)>dir(opendir("/sys/class/udc"), closedir); |
| 451 | if (!dir) return; |
| 452 | |
| 453 | dirent* dp; |
| 454 | while ((dp = readdir(dir.get())) != nullptr) { |
| 455 | if (dp->d_name[0] == '.') continue; |
| 456 | |
| 457 | property_set("sys.usb.controller", dp->d_name); |
| 458 | break; |
| 459 | } |
| 460 | } |
| 461 | |
Hung-ying Tyan | 99c4a8a | 2016-02-01 15:07:40 +0800 | [diff] [blame] | 462 | /* Returns a new path consisting of base_path and the file name in reference_path. */ |
| 463 | static std::string get_path(const std::string& base_path, const std::string& reference_path) { |
| 464 | std::string::size_type pos = reference_path.rfind('/'); |
| 465 | if (pos == std::string::npos) { |
| 466 | return base_path + '/' + reference_path; |
| 467 | } else { |
| 468 | return base_path + reference_path.substr(pos); |
| 469 | } |
| 470 | } |
| 471 | |
| 472 | /* Imports the fstab info from cmdline. */ |
| 473 | static std::string import_cmdline_fstab() { |
| 474 | std::string prefix, fstab, fstab_full; |
| 475 | |
| 476 | import_kernel_cmdline(false, |
| 477 | [&](const std::string& key, const std::string& value, bool in_qemu __attribute__((__unused__))) { |
| 478 | if (key == "android.early.prefix") { |
| 479 | prefix = value; |
| 480 | } else if (key == "android.early.fstab") { |
| 481 | fstab = value; |
| 482 | } |
| 483 | }); |
| 484 | if (!fstab.empty()) { |
| 485 | // Convert "mmcblk0p09+/odm+ext4+ro+verify" to "mmcblk0p09 /odm ext4 ro verify" |
| 486 | std::replace(fstab.begin(), fstab.end(), '+', ' '); |
| 487 | for (const auto& entry : android::base::Split(fstab, "\n")) { |
| 488 | fstab_full += prefix + entry + '\n'; |
| 489 | } |
| 490 | } |
| 491 | return fstab_full; |
| 492 | } |
| 493 | |
| 494 | /* Early mount vendor and ODM partitions. The fstab info is read from kernel cmdline. */ |
| 495 | static void early_mount() { |
| 496 | std::string fstab_string = import_cmdline_fstab(); |
| 497 | if (fstab_string.empty()) { |
| 498 | LOG(INFO) << "Failed to load vendor fstab from kernel cmdline"; |
| 499 | return; |
| 500 | } |
| 501 | FILE *fstab_file = fmemopen((void *)fstab_string.c_str(), fstab_string.length(), "r"); |
| 502 | if (!fstab_file) { |
| 503 | PLOG(ERROR) << "Failed to open fstab string as FILE"; |
| 504 | return; |
| 505 | } |
| 506 | std::unique_ptr<struct fstab, decltype(&fs_mgr_free_fstab)> fstab(fs_mgr_read_fstab_file(fstab_file), fs_mgr_free_fstab); |
| 507 | fclose(fstab_file); |
| 508 | if (!fstab) { |
| 509 | LOG(ERROR) << "Failed to parse fstab string: " << fstab_string; |
| 510 | return; |
| 511 | } |
| 512 | LOG(INFO) << "Loaded vendor fstab from cmdline"; |
| 513 | |
| 514 | if (early_device_socket_open()) { |
| 515 | LOG(ERROR) << "Failed to open device uevent socket"; |
| 516 | return; |
| 517 | } |
| 518 | |
| 519 | /* Create /dev/device-mapper for dm-verity */ |
| 520 | early_create_dev("/sys/devices/virtual/misc/device-mapper", EARLY_CHAR_DEV); |
| 521 | |
| 522 | for (int i = 0; i < fstab->num_entries; ++i) { |
| 523 | struct fstab_rec *rec = &fstab->recs[i]; |
| 524 | std::string mount_point = rec->mount_point; |
| 525 | std::string syspath = rec->blk_device; |
| 526 | |
| 527 | if (mount_point != "/vendor" && mount_point != "/odm") |
| 528 | continue; |
| 529 | |
| 530 | /* Create mount target under /dev/block/ from sysfs via uevent */ |
| 531 | LOG(INFO) << "Mounting " << mount_point << " from " << syspath << "..."; |
| 532 | char *devpath = strdup(get_path("/dev/block", syspath).c_str()); |
| 533 | if (!devpath) { |
| 534 | PLOG(ERROR) << "Failed to strdup dev path in early mount " << syspath; |
| 535 | continue; |
| 536 | } |
| 537 | rec->blk_device = devpath; |
| 538 | early_create_dev(syspath, EARLY_BLOCK_DEV); |
| 539 | |
| 540 | int rc = fs_mgr_early_setup_verity(rec); |
| 541 | if (rc == FS_MGR_EARLY_SETUP_VERITY_SUCCESS) { |
| 542 | /* Mount target is changed to /dev/block/dm-<n>; initiate its creation from sysfs counterpart */ |
| 543 | early_create_dev(get_path("/sys/devices/virtual/block", rec->blk_device), EARLY_BLOCK_DEV); |
| 544 | } else if (rc == FS_MGR_EARLY_SETUP_VERITY_FAIL) { |
| 545 | LOG(ERROR) << "Failed to set up dm-verity on " << rec->blk_device; |
| 546 | continue; |
| 547 | } else { /* FS_MGR_EARLY_SETUP_VERITY_NO_VERITY */ |
| 548 | LOG(INFO) << "dm-verity disabled on debuggable device; mount directly on " << rec->blk_device; |
| 549 | } |
| 550 | |
| 551 | mkdir(mount_point.c_str(), 0755); |
| 552 | rc = mount(rec->blk_device, mount_point.c_str(), rec->fs_type, rec->flags, rec->fs_options); |
| 553 | if (rc) { |
| 554 | PLOG(ERROR) << "Failed to mount on " << rec->blk_device; |
| 555 | } |
| 556 | } |
| 557 | early_device_socket_close(); |
| 558 | } |
| 559 | |
Elliott Hughes | 8d82ea0 | 2015-02-06 20:15:18 -0800 | [diff] [blame] | 560 | int main(int argc, char** argv) { |
Elliott Hughes | da40c00 | 2015-03-27 23:20:44 -0700 | [diff] [blame] | 561 | if (!strcmp(basename(argv[0]), "ueventd")) { |
Colin Cross | f83d0b9 | 2010-04-21 12:04:20 -0700 | [diff] [blame] | 562 | return ueventd_main(argc, argv); |
Elliott Hughes | da40c00 | 2015-03-27 23:20:44 -0700 | [diff] [blame] | 563 | } |
Colin Cross | f83d0b9 | 2010-04-21 12:04:20 -0700 | [diff] [blame] | 564 | |
Elliott Hughes | da40c00 | 2015-03-27 23:20:44 -0700 | [diff] [blame] | 565 | if (!strcmp(basename(argv[0]), "watchdogd")) { |
Arve Hjønnevåg | d97d907 | 2012-06-13 21:51:56 -0700 | [diff] [blame] | 566 | return watchdogd_main(argc, argv); |
Elliott Hughes | da40c00 | 2015-03-27 23:20:44 -0700 | [diff] [blame] | 567 | } |
Arve Hjønnevåg | d97d907 | 2012-06-13 21:51:56 -0700 | [diff] [blame] | 568 | |
Elliott Hughes | 8d82ea0 | 2015-02-06 20:15:18 -0800 | [diff] [blame] | 569 | // Clear the umask. |
The Android Open Source Project | 4f6e8d7 | 2008-10-21 07:00:00 -0700 | [diff] [blame] | 570 | umask(0); |
| 571 | |
Elliott Hughes | cc86fb2 | 2015-03-17 20:01:13 -0700 | [diff] [blame] | 572 | add_environment("PATH", _PATH_DEFPATH); |
| 573 | |
Nick Kralevich | 9dec93b | 2015-04-25 15:50:03 -0700 | [diff] [blame] | 574 | bool is_first_stage = (argc == 1) || (strcmp(argv[1], "--second-stage") != 0); |
| 575 | |
Hung-ying Tyan | 99c4a8a | 2016-02-01 15:07:40 +0800 | [diff] [blame] | 576 | // Don't expose the raw commandline to unprivileged processes. |
| 577 | chmod("/proc/cmdline", 0440); |
| 578 | |
Elliott Hughes | 8d82ea0 | 2015-02-06 20:15:18 -0800 | [diff] [blame] | 579 | // Get the basic filesystem setup we need put together in the initramdisk |
| 580 | // on / and then we'll let the rc file figure out the rest. |
Nick Kralevich | 9dec93b | 2015-04-25 15:50:03 -0700 | [diff] [blame] | 581 | if (is_first_stage) { |
Nick Kralevich | f667a32 | 2015-04-25 17:42:52 -0700 | [diff] [blame] | 582 | mount("tmpfs", "/dev", "tmpfs", MS_NOSUID, "mode=0755"); |
| 583 | mkdir("/dev/pts", 0755); |
| 584 | mkdir("/dev/socket", 0755); |
| 585 | mount("devpts", "/dev/pts", "devpts", 0, NULL); |
Nick Kralevich | c39ba5a | 2015-11-07 16:52:17 -0800 | [diff] [blame] | 586 | #define MAKE_STR(x) __STRING(x) |
| 587 | mount("proc", "/proc", "proc", 0, "hidepid=2,gid=" MAKE_STR(AID_READPROC)); |
Nick Kralevich | 9dec93b | 2015-04-25 15:50:03 -0700 | [diff] [blame] | 588 | mount("sysfs", "/sys", "sysfs", 0, NULL); |
Nick Kralevich | 3d9e273 | 2016-03-03 10:40:12 -0800 | [diff] [blame] | 589 | mount("selinuxfs", "/sys/fs/selinux", "selinuxfs", 0, NULL); |
Elliott Hughes | 35f5d04 | 2016-07-26 09:32:33 -0700 | [diff] [blame] | 590 | mknod("/dev/kmsg", S_IFCHR | 0600, makedev(1, 11)); |
Hung-ying Tyan | 99c4a8a | 2016-02-01 15:07:40 +0800 | [diff] [blame] | 591 | early_mount(); |
Nick Kralevich | 9dec93b | 2015-04-25 15:50:03 -0700 | [diff] [blame] | 592 | } |
The Android Open Source Project | 4f6e8d7 | 2008-10-21 07:00:00 -0700 | [diff] [blame] | 593 | |
Elliott Hughes | 35f5d04 | 2016-07-26 09:32:33 -0700 | [diff] [blame] | 594 | // Now that tmpfs is mounted on /dev and we have /dev/kmsg, we can actually |
| 595 | // talk to the outside world... |
Elliott Hughes | f86b5a6 | 2016-06-24 15:12:21 -0700 | [diff] [blame] | 596 | InitKernelLogging(argv); |
Elliott Hughes | da40c00 | 2015-03-27 23:20:44 -0700 | [diff] [blame] | 597 | |
Elliott Hughes | f86b5a6 | 2016-06-24 15:12:21 -0700 | [diff] [blame] | 598 | LOG(INFO) << "init " << (is_first_stage ? "first stage" : "second stage") << " started!"; |
Elliott Hughes | da40c00 | 2015-03-27 23:20:44 -0700 | [diff] [blame] | 599 | |
Nick Kralevich | f667a32 | 2015-04-25 17:42:52 -0700 | [diff] [blame] | 600 | if (!is_first_stage) { |
| 601 | // Indicate that booting is in progress to background fw loaders, etc. |
| 602 | close(open("/dev/.booting", O_WRONLY | O_CREAT | O_CLOEXEC, 0000)); |
Vladimir Chtchetkine | 2b99543 | 2011-09-28 09:55:31 -0700 | [diff] [blame] | 603 | |
Nick Kralevich | f667a32 | 2015-04-25 17:42:52 -0700 | [diff] [blame] | 604 | property_init(); |
Dima Zavin | 5511c84 | 2011-12-19 11:21:32 -0800 | [diff] [blame] | 605 | |
Nick Kralevich | f667a32 | 2015-04-25 17:42:52 -0700 | [diff] [blame] | 606 | // If arguments are passed both on the command line and in DT, |
| 607 | // properties set in DT always have priority over the command-line ones. |
| 608 | process_kernel_dt(); |
| 609 | process_kernel_cmdline(); |
| 610 | |
Elliott Hughes | e5ce30f | 2015-05-06 19:19:24 -0700 | [diff] [blame] | 611 | // Propagate the kernel variables to internal variables |
Nick Kralevich | f667a32 | 2015-04-25 17:42:52 -0700 | [diff] [blame] | 612 | // used by init as well as the current required properties. |
| 613 | export_kernel_boot_props(); |
| 614 | } |
Rom Lemarchand | 6a52443 | 2015-02-28 06:39:11 -0800 | [diff] [blame] | 615 | |
Elliott Hughes | f65730e | 2015-04-24 18:38:17 +0000 | [diff] [blame] | 616 | // Set up SELinux, including loading the SELinux policy if we're in the kernel domain. |
| 617 | selinux_initialize(is_first_stage); |
| 618 | |
| 619 | // If we're in the kernel domain, re-exec init to transition to the init domain now |
| 620 | // that the SELinux policy has been loaded. |
| 621 | if (is_first_stage) { |
| 622 | if (restorecon("/init") == -1) { |
Elliott Hughes | f86b5a6 | 2016-06-24 15:12:21 -0700 | [diff] [blame] | 623 | PLOG(ERROR) << "restorecon failed"; |
Elliott Hughes | f65730e | 2015-04-24 18:38:17 +0000 | [diff] [blame] | 624 | security_failure(); |
| 625 | } |
| 626 | char* path = argv[0]; |
| 627 | char* args[] = { path, const_cast<char*>("--second-stage"), nullptr }; |
| 628 | if (execv(path, args) == -1) { |
Elliott Hughes | f86b5a6 | 2016-06-24 15:12:21 -0700 | [diff] [blame] | 629 | PLOG(ERROR) << "execv(\"" << path << "\") failed"; |
Elliott Hughes | f65730e | 2015-04-24 18:38:17 +0000 | [diff] [blame] | 630 | security_failure(); |
| 631 | } |
| 632 | } |
Elliott Hughes | 8d82ea0 | 2015-02-06 20:15:18 -0800 | [diff] [blame] | 633 | |
| 634 | // These directories were necessarily created before initial policy load |
| 635 | // and therefore need their security context restored to the proper value. |
| 636 | // This must happen before /dev is populated by ueventd. |
Elliott Hughes | f86b5a6 | 2016-06-24 15:12:21 -0700 | [diff] [blame] | 637 | LOG(INFO) << "Running restorecon..."; |
Stephen Smalley | e096e36 | 2012-06-11 13:37:39 -0400 | [diff] [blame] | 638 | restorecon("/dev"); |
Elliott Hughes | 35f5d04 | 2016-07-26 09:32:33 -0700 | [diff] [blame] | 639 | restorecon("/dev/kmsg"); |
Stephen Smalley | e096e36 | 2012-06-11 13:37:39 -0400 | [diff] [blame] | 640 | restorecon("/dev/socket"); |
Geremy Condra | 8e15eab | 2013-02-28 17:29:58 -0800 | [diff] [blame] | 641 | restorecon("/dev/__properties__"); |
Tom Cherry | e36a85c | 2015-11-30 16:40:25 -0800 | [diff] [blame] | 642 | restorecon("/property_contexts"); |
Nick Kralevich | ae76f6d | 2013-07-11 15:38:26 -0700 | [diff] [blame] | 643 | restorecon_recursive("/sys"); |
Hung-ying Tyan | 99c4a8a | 2016-02-01 15:07:40 +0800 | [diff] [blame] | 644 | restorecon_recursive("/dev/block"); |
| 645 | restorecon("/dev/device-mapper"); |
Stephen Smalley | e46f9d5 | 2012-01-13 08:48:47 -0500 | [diff] [blame] | 646 | |
Elliott Hughes | 929f407 | 2015-04-24 21:13:44 -0700 | [diff] [blame] | 647 | epoll_fd = epoll_create1(EPOLL_CLOEXEC); |
| 648 | if (epoll_fd == -1) { |
Elliott Hughes | f86b5a6 | 2016-06-24 15:12:21 -0700 | [diff] [blame] | 649 | PLOG(ERROR) << "epoll_create1 failed"; |
Elliott Hughes | 929f407 | 2015-04-24 21:13:44 -0700 | [diff] [blame] | 650 | exit(1); |
| 651 | } |
| 652 | |
| 653 | signal_handler_init(); |
Elliott Hughes | 9042cae | 2015-04-24 17:43:21 -0700 | [diff] [blame] | 654 | |
Riley Andrews | e4b7b29 | 2014-06-16 15:06:21 -0700 | [diff] [blame] | 655 | property_load_boot_defaults(); |
Sami Tolvanen | 9e9efca | 2015-12-07 12:33:58 +0000 | [diff] [blame] | 656 | export_oem_lock_status(); |
Elliott Hughes | c6c26ed | 2015-04-24 18:50:30 -0700 | [diff] [blame] | 657 | start_property_service(); |
Amit Pundir | d2e74db | 2016-06-29 19:00:00 +0530 | [diff] [blame] | 658 | set_usb_controller(); |
Dima Zavin | d7634c9 | 2011-12-16 14:18:06 -0800 | [diff] [blame] | 659 | |
Tom Cherry | b734990 | 2015-08-26 11:43:36 -0700 | [diff] [blame] | 660 | const BuiltinFunctionMap function_map; |
| 661 | Action::set_function_map(&function_map); |
| 662 | |
| 663 | Parser& parser = Parser::GetInstance(); |
| 664 | parser.AddSectionParser("service",std::make_unique<ServiceParser>()); |
| 665 | parser.AddSectionParser("on", std::make_unique<ActionParser>()); |
| 666 | parser.AddSectionParser("import", std::make_unique<ImportParser>()); |
| 667 | parser.ParseConfig("/init.rc"); |
The Android Open Source Project | 4f6e8d7 | 2008-10-21 07:00:00 -0700 | [diff] [blame] | 668 | |
Tom Cherry | fa0c21c | 2015-07-23 17:53:11 -0700 | [diff] [blame] | 669 | ActionManager& am = ActionManager::GetInstance(); |
| 670 | |
| 671 | am.QueueEventTrigger("early-init"); |
The Android Open Source Project | 4f6e8d7 | 2008-10-21 07:00:00 -0700 | [diff] [blame] | 672 | |
Elliott Hughes | c6c26ed | 2015-04-24 18:50:30 -0700 | [diff] [blame] | 673 | // Queue an action that waits for coldboot done so we know ueventd has set up all of /dev... |
Tom Cherry | fa0c21c | 2015-07-23 17:53:11 -0700 | [diff] [blame] | 674 | am.QueueBuiltinAction(wait_for_coldboot_done_action, "wait_for_coldboot_done"); |
Elliott Hughes | c6c26ed | 2015-04-24 18:50:30 -0700 | [diff] [blame] | 675 | // ... so that we can start queuing up actions that require stuff from /dev. |
Tom Cherry | fa0c21c | 2015-07-23 17:53:11 -0700 | [diff] [blame] | 676 | am.QueueBuiltinAction(mix_hwrng_into_linux_rng_action, "mix_hwrng_into_linux_rng"); |
| 677 | am.QueueBuiltinAction(keychord_init_action, "keychord_init"); |
| 678 | am.QueueBuiltinAction(console_init_action, "console_init"); |
The Android Open Source Project | 4f6e8d7 | 2008-10-21 07:00:00 -0700 | [diff] [blame] | 679 | |
Elliott Hughes | da40c00 | 2015-03-27 23:20:44 -0700 | [diff] [blame] | 680 | // Trigger all the boot actions to get us started. |
Tom Cherry | fa0c21c | 2015-07-23 17:53:11 -0700 | [diff] [blame] | 681 | am.QueueEventTrigger("init"); |
Dima Zavin | ca47cef | 2011-08-24 15:28:23 -0700 | [diff] [blame] | 682 | |
Elliott Hughes | 8d82ea0 | 2015-02-06 20:15:18 -0800 | [diff] [blame] | 683 | // Repeat mix_hwrng_into_linux_rng in case /dev/hw_random or /dev/random |
| 684 | // wasn't ready immediately after wait_for_coldboot_done |
Tom Cherry | fa0c21c | 2015-07-23 17:53:11 -0700 | [diff] [blame] | 685 | am.QueueBuiltinAction(mix_hwrng_into_linux_rng_action, "mix_hwrng_into_linux_rng"); |
The Android Open Source Project | 4f6e8d7 | 2008-10-21 07:00:00 -0700 | [diff] [blame] | 686 | |
Elliott Hughes | 8d82ea0 | 2015-02-06 20:15:18 -0800 | [diff] [blame] | 687 | // Don't mount filesystems or start core system services in charger mode. |
Yabin Cui | 74edcea | 2015-07-24 10:11:05 -0700 | [diff] [blame] | 688 | std::string bootmode = property_get("ro.bootmode"); |
| 689 | if (bootmode == "charger") { |
Tom Cherry | fa0c21c | 2015-07-23 17:53:11 -0700 | [diff] [blame] | 690 | am.QueueEventTrigger("charger"); |
Dima Zavin | ca47cef | 2011-08-24 15:28:23 -0700 | [diff] [blame] | 691 | } else { |
Tom Cherry | fa0c21c | 2015-07-23 17:53:11 -0700 | [diff] [blame] | 692 | am.QueueEventTrigger("late-init"); |
Dima Zavin | ca47cef | 2011-08-24 15:28:23 -0700 | [diff] [blame] | 693 | } |
The Android Open Source Project | 4f6e8d7 | 2008-10-21 07:00:00 -0700 | [diff] [blame] | 694 | |
Elliott Hughes | 8d82ea0 | 2015-02-06 20:15:18 -0800 | [diff] [blame] | 695 | // Run all property triggers based on current state of the properties. |
Tom Cherry | fa0c21c | 2015-07-23 17:53:11 -0700 | [diff] [blame] | 696 | am.QueueBuiltinAction(queue_property_triggers_action, "queue_property_triggers"); |
The Android Open Source Project | 4f6e8d7 | 2008-10-21 07:00:00 -0700 | [diff] [blame] | 697 | |
Elliott Hughes | c6c26ed | 2015-04-24 18:50:30 -0700 | [diff] [blame] | 698 | while (true) { |
Elliott Hughes | 8d82ea0 | 2015-02-06 20:15:18 -0800 | [diff] [blame] | 699 | if (!waiting_for_exec) { |
Tom Cherry | fa0c21c | 2015-07-23 17:53:11 -0700 | [diff] [blame] | 700 | am.ExecuteOneCommand(); |
Elliott Hughes | 8d82ea0 | 2015-02-06 20:15:18 -0800 | [diff] [blame] | 701 | restart_processes(); |
| 702 | } |
The Android Open Source Project | 4f6e8d7 | 2008-10-21 07:00:00 -0700 | [diff] [blame] | 703 | |
Yongqin Liu | a197ff1 | 2014-12-05 13:45:02 +0800 | [diff] [blame] | 704 | int timeout = -1; |
The Android Open Source Project | 4f6e8d7 | 2008-10-21 07:00:00 -0700 | [diff] [blame] | 705 | if (process_needs_restart) { |
| 706 | timeout = (process_needs_restart - gettime()) * 1000; |
| 707 | if (timeout < 0) |
| 708 | timeout = 0; |
| 709 | } |
| 710 | |
Tom Cherry | fa0c21c | 2015-07-23 17:53:11 -0700 | [diff] [blame] | 711 | if (am.HasMoreCommands()) { |
Colin Cross | ebc6ff1 | 2010-04-13 19:52:01 -0700 | [diff] [blame] | 712 | timeout = 0; |
Elliott Hughes | c0e919c | 2015-02-04 14:46:36 -0800 | [diff] [blame] | 713 | } |
Colin Cross | ebc6ff1 | 2010-04-13 19:52:01 -0700 | [diff] [blame] | 714 | |
Yongqin Liu | a197ff1 | 2014-12-05 13:45:02 +0800 | [diff] [blame] | 715 | bootchart_sample(&timeout); |
Elliott Hughes | c0e919c | 2015-02-04 14:46:36 -0800 | [diff] [blame] | 716 | |
Elliott Hughes | 929f407 | 2015-04-24 21:13:44 -0700 | [diff] [blame] | 717 | epoll_event ev; |
| 718 | int nr = TEMP_FAILURE_RETRY(epoll_wait(epoll_fd, &ev, 1, timeout)); |
| 719 | if (nr == -1) { |
Elliott Hughes | f86b5a6 | 2016-06-24 15:12:21 -0700 | [diff] [blame] | 720 | PLOG(ERROR) << "epoll_wait failed"; |
Elliott Hughes | 929f407 | 2015-04-24 21:13:44 -0700 | [diff] [blame] | 721 | } else if (nr == 1) { |
| 722 | ((void (*)()) ev.data.ptr)(); |
The Android Open Source Project | 4f6e8d7 | 2008-10-21 07:00:00 -0700 | [diff] [blame] | 723 | } |
The Android Open Source Project | 4f6e8d7 | 2008-10-21 07:00:00 -0700 | [diff] [blame] | 724 | } |
| 725 | |
| 726 | return 0; |
| 727 | } |