Colin Cross | f83d0b9 | 2010-04-21 12:04:20 -0700 | [diff] [blame] | 1 | /* |
| 2 | * Copyright (C) 2010 The Android Open Source Project |
| 3 | * |
| 4 | * Licensed under the Apache License, Version 2.0 (the "License"); |
| 5 | * you may not use this file except in compliance with the License. |
| 6 | * You may obtain a copy of the License at |
| 7 | * |
| 8 | * http://www.apache.org/licenses/LICENSE-2.0 |
| 9 | * |
| 10 | * Unless required by applicable law or agreed to in writing, software |
| 11 | * distributed under the License is distributed on an "AS IS" BASIS, |
| 12 | * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| 13 | * See the License for the specific language governing permissions and |
| 14 | * limitations under the License. |
| 15 | */ |
| 16 | |
Tom Cherry | 3f5eaae5 | 2017-04-06 16:30:22 -0700 | [diff] [blame] | 17 | #include "ueventd.h" |
| 18 | |
Colin Cross | 44b65d0 | 2010-04-20 14:32:50 -0700 | [diff] [blame] | 19 | #include <ctype.h> |
Elliott Hughes | da40c00 | 2015-03-27 23:20:44 -0700 | [diff] [blame] | 20 | #include <fcntl.h> |
Brian Swetland | 8d48c8e | 2011-03-24 15:45:30 -0700 | [diff] [blame] | 21 | #include <signal.h> |
Elliott Hughes | da40c00 | 2015-03-27 23:20:44 -0700 | [diff] [blame] | 22 | #include <stdio.h> |
| 23 | #include <stdlib.h> |
| 24 | #include <string.h> |
Tom Cherry | c583305 | 2017-05-16 15:35:41 -0700 | [diff] [blame] | 25 | #include <sys/wait.h> |
| 26 | |
| 27 | #include <set> |
| 28 | #include <thread> |
Brian Swetland | 8d48c8e | 2011-03-24 15:45:30 -0700 | [diff] [blame] | 29 | |
Tom Cherry | ede0d53 | 2017-07-06 14:20:11 -0700 | [diff] [blame] | 30 | #include <android-base/chrono_utils.h> |
Tom Cherry | 3f5eaae5 | 2017-04-06 16:30:22 -0700 | [diff] [blame] | 31 | #include <android-base/logging.h> |
Tom Cherry | ccf2353 | 2017-03-28 16:40:41 -0700 | [diff] [blame] | 32 | #include <android-base/properties.h> |
Bowgo Tsai | 8eec38f | 2018-05-16 18:33:44 +0800 | [diff] [blame] | 33 | #include <fstab/fstab.h> |
Tom Cherry | c583305 | 2017-05-16 15:35:41 -0700 | [diff] [blame] | 34 | #include <selinux/android.h> |
Elliott Hughes | da40c00 | 2015-03-27 23:20:44 -0700 | [diff] [blame] | 35 | #include <selinux/selinux.h> |
Colin Cross | f83d0b9 | 2010-04-21 12:04:20 -0700 | [diff] [blame] | 36 | |
Colin Cross | f83d0b9 | 2010-04-21 12:04:20 -0700 | [diff] [blame] | 37 | #include "devices.h" |
Tom Cherry | ed506f7 | 2017-05-25 15:58:59 -0700 | [diff] [blame] | 38 | #include "firmware_handler.h" |
Andrew F. Davis | 9963847 | 2018-07-09 13:12:00 -0500 | [diff] [blame^] | 39 | #include "modalias_handler.h" |
Tom Cherry | c3692b3 | 2017-08-10 12:22:44 -0700 | [diff] [blame] | 40 | #include "selinux.h" |
Tom Cherry | ed506f7 | 2017-05-25 15:58:59 -0700 | [diff] [blame] | 41 | #include "uevent_listener.h" |
| 42 | #include "ueventd_parser.h" |
Tom Cherry | 3f5eaae5 | 2017-04-06 16:30:22 -0700 | [diff] [blame] | 43 | #include "util.h" |
Vladimir Chtchetkine | 2b99543 | 2011-09-28 09:55:31 -0700 | [diff] [blame] | 44 | |
Tom Cherry | c583305 | 2017-05-16 15:35:41 -0700 | [diff] [blame] | 45 | // At a high level, ueventd listens for uevent messages generated by the kernel through a netlink |
| 46 | // socket. When ueventd receives such a message it handles it by taking appropriate actions, |
| 47 | // which can typically be creating a device node in /dev, setting file permissions, setting selinux |
| 48 | // labels, etc. |
| 49 | // Ueventd also handles loading of firmware that the kernel requests, and creates symlinks for block |
| 50 | // and character devices. |
| 51 | |
| 52 | // When ueventd starts, it regenerates uevents for all currently registered devices by traversing |
| 53 | // /sys and writing 'add' to each 'uevent' file that it finds. This causes the kernel to generate |
| 54 | // and resend uevent messages for all of the currently registered devices. This is done, because |
| 55 | // ueventd would not have been running when these devices were registered and therefore was unable |
| 56 | // to receive their uevent messages and handle them appropriately. This process is known as |
| 57 | // 'cold boot'. |
| 58 | |
| 59 | // 'init' currently waits synchronously on the cold boot process of ueventd before it continues |
| 60 | // its boot process. For this reason, cold boot should be as quick as possible. One way to achieve |
| 61 | // a speed up here is to parallelize the handling of ueventd messages, which consume the bulk of the |
| 62 | // time during cold boot. |
| 63 | |
| 64 | // Handling of uevent messages has two unique properties: |
| 65 | // 1) It can be done in isolation; it doesn't need to read or write any status once it is started. |
| 66 | // 2) It uses setegid() and setfscreatecon() so either care (aka locking) must be taken to ensure |
| 67 | // that no file system operations are done while the uevent process has an abnormal egid or |
| 68 | // fscreatecon or this handling must happen in a separate process. |
| 69 | // Given the above two properties, it is best to fork() subprocesses to handle the uevents. This |
| 70 | // reduces the overhead and complexity that would be required in a solution with threads and locks. |
| 71 | // In testing, a racy multithreaded solution has the same performance as the fork() solution, so |
| 72 | // there is no reason to deal with the complexity of the former. |
| 73 | |
| 74 | // One other important caveat during the boot process is the handling of SELinux restorecon. |
| 75 | // Since many devices have child devices, calling selinux_android_restorecon() recursively for each |
| 76 | // device when its uevent is handled, results in multiple restorecon operations being done on a |
| 77 | // given file. It is more efficient to simply do restorecon recursively on /sys during cold boot, |
| 78 | // than to do restorecon on each device as its uevent is handled. This only applies to cold boot; |
| 79 | // once that has completed, restorecon is done for each device as its uevent is handled. |
| 80 | |
| 81 | // With all of the above considered, the cold boot process has the below steps: |
| 82 | // 1) ueventd regenerates uevents by doing the /sys traversal and listens to the netlink socket for |
| 83 | // the generated uevents. It writes these uevents into a queue represented by a vector. |
| 84 | // |
| 85 | // 2) ueventd forks 'n' separate uevent handler subprocesses and has each of them to handle the |
| 86 | // uevents in the queue based on a starting offset (their process number) and a stride (the total |
| 87 | // number of processes). Note that no IPC happens at this point and only const functions from |
| 88 | // DeviceHandler should be called from this context. |
| 89 | // |
| 90 | // 3) In parallel to the subprocesses handling the uevents, the main thread of ueventd calls |
| 91 | // selinux_android_restorecon() recursively on /sys/class, /sys/block, and /sys/devices. |
| 92 | // |
| 93 | // 4) Once the restorecon operation finishes, the main thread calls waitpid() to wait for all |
| 94 | // subprocess handlers to complete and exit. Once this happens, it marks coldboot as having |
| 95 | // completed. |
| 96 | // |
| 97 | // At this point, ueventd is single threaded, poll()'s and then handles any future uevents. |
| 98 | |
| 99 | // Lastly, it should be noted that uevents that occur during the coldboot process are handled |
| 100 | // without issue after the coldboot process completes. This is because the uevent listener is |
| 101 | // paused while the uevent handler and restorecon actions take place. Once coldboot completes, |
| 102 | // the uevent listener resumes in polling mode and will handle the uevents that occurred during |
| 103 | // coldboot. |
| 104 | |
Tom Cherry | 81f5d3e | 2017-06-22 12:53:17 -0700 | [diff] [blame] | 105 | namespace android { |
| 106 | namespace init { |
| 107 | |
Tom Cherry | c583305 | 2017-05-16 15:35:41 -0700 | [diff] [blame] | 108 | class ColdBoot { |
| 109 | public: |
Andrew F. Davis | 9963847 | 2018-07-09 13:12:00 -0500 | [diff] [blame^] | 110 | ColdBoot(UeventListener& uevent_listener, DeviceHandler& device_handler, |
| 111 | ModaliasHandler& modalias_handler) |
Tom Cherry | c583305 | 2017-05-16 15:35:41 -0700 | [diff] [blame] | 112 | : uevent_listener_(uevent_listener), |
| 113 | device_handler_(device_handler), |
Andrew F. Davis | 9963847 | 2018-07-09 13:12:00 -0500 | [diff] [blame^] | 114 | modalias_handler_(modalias_handler), |
Tom Cherry | c583305 | 2017-05-16 15:35:41 -0700 | [diff] [blame] | 115 | num_handler_subprocesses_(std::thread::hardware_concurrency() ?: 4) {} |
| 116 | |
| 117 | void Run(); |
| 118 | |
| 119 | private: |
| 120 | void UeventHandlerMain(unsigned int process_num, unsigned int total_processes); |
| 121 | void RegenerateUevents(); |
| 122 | void ForkSubProcesses(); |
| 123 | void DoRestoreCon(); |
| 124 | void WaitForSubProcesses(); |
| 125 | |
| 126 | UeventListener& uevent_listener_; |
| 127 | DeviceHandler& device_handler_; |
Andrew F. Davis | 9963847 | 2018-07-09 13:12:00 -0500 | [diff] [blame^] | 128 | ModaliasHandler& modalias_handler_; |
Tom Cherry | c583305 | 2017-05-16 15:35:41 -0700 | [diff] [blame] | 129 | |
| 130 | unsigned int num_handler_subprocesses_; |
| 131 | std::vector<Uevent> uevent_queue_; |
| 132 | |
| 133 | std::set<pid_t> subprocess_pids_; |
| 134 | }; |
| 135 | |
| 136 | void ColdBoot::UeventHandlerMain(unsigned int process_num, unsigned int total_processes) { |
| 137 | for (unsigned int i = process_num; i < uevent_queue_.size(); i += total_processes) { |
| 138 | auto& uevent = uevent_queue_[i]; |
Sandeep Patil | cd2ba0d | 2017-06-21 12:46:41 -0700 | [diff] [blame] | 139 | device_handler_.HandleDeviceEvent(uevent); |
Andrew F. Davis | 9963847 | 2018-07-09 13:12:00 -0500 | [diff] [blame^] | 140 | modalias_handler_.HandleModaliasEvent(uevent); |
Tom Cherry | c583305 | 2017-05-16 15:35:41 -0700 | [diff] [blame] | 141 | } |
| 142 | _exit(EXIT_SUCCESS); |
| 143 | } |
| 144 | |
| 145 | void ColdBoot::RegenerateUevents() { |
| 146 | uevent_listener_.RegenerateUevents([this](const Uevent& uevent) { |
| 147 | HandleFirmwareEvent(uevent); |
| 148 | |
Tom Cherry | c583305 | 2017-05-16 15:35:41 -0700 | [diff] [blame] | 149 | uevent_queue_.emplace_back(std::move(uevent)); |
Sandeep Patil | 4cbedee | 2017-06-21 13:02:57 -0700 | [diff] [blame] | 150 | return ListenerAction::kContinue; |
Tom Cherry | c583305 | 2017-05-16 15:35:41 -0700 | [diff] [blame] | 151 | }); |
| 152 | } |
| 153 | |
| 154 | void ColdBoot::ForkSubProcesses() { |
| 155 | for (unsigned int i = 0; i < num_handler_subprocesses_; ++i) { |
| 156 | auto pid = fork(); |
| 157 | if (pid < 0) { |
| 158 | PLOG(FATAL) << "fork() failed!"; |
| 159 | } |
| 160 | |
| 161 | if (pid == 0) { |
| 162 | UeventHandlerMain(i, num_handler_subprocesses_); |
| 163 | } |
| 164 | |
| 165 | subprocess_pids_.emplace(pid); |
| 166 | } |
| 167 | } |
| 168 | |
| 169 | void ColdBoot::DoRestoreCon() { |
Tom Cherry | d2fd54e | 2017-06-07 14:32:30 -0700 | [diff] [blame] | 170 | selinux_android_restorecon("/sys", SELINUX_ANDROID_RESTORECON_RECURSE); |
Tom Cherry | c583305 | 2017-05-16 15:35:41 -0700 | [diff] [blame] | 171 | device_handler_.set_skip_restorecon(false); |
| 172 | } |
| 173 | |
| 174 | void ColdBoot::WaitForSubProcesses() { |
| 175 | // Treat subprocesses that crash or get stuck the same as if ueventd itself has crashed or gets |
| 176 | // stuck. |
| 177 | // |
| 178 | // When a subprocess crashes, we fatally abort from ueventd. init will restart ueventd when |
| 179 | // init reaps it, and the cold boot process will start again. If this continues to fail, then |
| 180 | // since ueventd is marked as a critical service, init will reboot to recovery. |
| 181 | // |
| 182 | // When a subprocess gets stuck, keep ueventd spinning waiting for it. init has a timeout for |
| 183 | // cold boot and will reboot to the bootloader if ueventd does not complete in time. |
| 184 | while (!subprocess_pids_.empty()) { |
| 185 | int status; |
| 186 | pid_t pid = TEMP_FAILURE_RETRY(waitpid(-1, &status, 0)); |
| 187 | if (pid == -1) { |
| 188 | PLOG(ERROR) << "waitpid() failed"; |
| 189 | continue; |
| 190 | } |
| 191 | |
| 192 | auto it = std::find(subprocess_pids_.begin(), subprocess_pids_.end(), pid); |
| 193 | if (it == subprocess_pids_.end()) continue; |
| 194 | |
| 195 | if (WIFEXITED(status)) { |
| 196 | if (WEXITSTATUS(status) == EXIT_SUCCESS) { |
| 197 | subprocess_pids_.erase(it); |
| 198 | } else { |
| 199 | LOG(FATAL) << "subprocess exited with status " << WEXITSTATUS(status); |
| 200 | } |
| 201 | } else if (WIFSIGNALED(status)) { |
| 202 | LOG(FATAL) << "subprocess killed by signal " << WTERMSIG(status); |
| 203 | } |
| 204 | } |
| 205 | } |
| 206 | |
| 207 | void ColdBoot::Run() { |
Tom Cherry | ede0d53 | 2017-07-06 14:20:11 -0700 | [diff] [blame] | 208 | android::base::Timer cold_boot_timer; |
Tom Cherry | c583305 | 2017-05-16 15:35:41 -0700 | [diff] [blame] | 209 | |
| 210 | RegenerateUevents(); |
| 211 | |
| 212 | ForkSubProcesses(); |
| 213 | |
| 214 | DoRestoreCon(); |
| 215 | |
| 216 | WaitForSubProcesses(); |
| 217 | |
| 218 | close(open(COLDBOOT_DONE, O_WRONLY | O_CREAT | O_CLOEXEC, 0000)); |
Tom Cherry | ede0d53 | 2017-07-06 14:20:11 -0700 | [diff] [blame] | 219 | LOG(INFO) << "Coldboot took " << cold_boot_timer.duration().count() / 1000.0f << " seconds"; |
Tom Cherry | c583305 | 2017-05-16 15:35:41 -0700 | [diff] [blame] | 220 | } |
| 221 | |
Tom Cherry | c583305 | 2017-05-16 15:35:41 -0700 | [diff] [blame] | 222 | int ueventd_main(int argc, char** argv) { |
Nick Kralevich | 6ebf12f | 2012-03-26 09:09:11 -0700 | [diff] [blame] | 223 | /* |
| 224 | * init sets the umask to 077 for forked processes. We need to |
| 225 | * create files with exact permissions, without modification by |
| 226 | * the umask. |
| 227 | */ |
| 228 | umask(000); |
| 229 | |
Tom Cherry | 74069d1 | 2018-07-20 15:26:25 -0700 | [diff] [blame] | 230 | android::base::InitLogging(argv, &android::base::KernelLogger); |
Colin Cross | f83d0b9 | 2010-04-21 12:04:20 -0700 | [diff] [blame] | 231 | |
Elliott Hughes | f86b5a6 | 2016-06-24 15:12:21 -0700 | [diff] [blame] | 232 | LOG(INFO) << "ueventd started!"; |
Elliott Hughes | da40c00 | 2015-03-27 23:20:44 -0700 | [diff] [blame] | 233 | |
Tom Cherry | c3692b3 | 2017-08-10 12:22:44 -0700 | [diff] [blame] | 234 | SelinuxSetupKernelLogging(); |
| 235 | SelabelInitialize(); |
Stephen Smalley | 439224e | 2014-06-24 13:45:43 -0400 | [diff] [blame] | 236 | |
Tom Cherry | 7421fa1 | 2018-07-13 15:32:02 -0700 | [diff] [blame] | 237 | DeviceHandler device_handler; |
Andrew F. Davis | 9963847 | 2018-07-09 13:12:00 -0500 | [diff] [blame^] | 238 | ModaliasHandler modalias_handler; |
Tom Cherry | ed506f7 | 2017-05-25 15:58:59 -0700 | [diff] [blame] | 239 | UeventListener uevent_listener; |
Sandeep Patil | bf298e6 | 2017-02-03 07:18:36 -0800 | [diff] [blame] | 240 | |
Tom Cherry | 7421fa1 | 2018-07-13 15:32:02 -0700 | [diff] [blame] | 241 | { |
| 242 | // Keep the current product name base configuration so we remain backwards compatible and |
| 243 | // allow it to override everything. |
| 244 | // TODO: cleanup platform ueventd.rc to remove vendor specific device node entries (b/34968103) |
| 245 | auto hardware = android::base::GetProperty("ro.hardware", ""); |
| 246 | |
| 247 | auto ueventd_configuration = |
Sen Jiang | d76f174 | 2018-07-18 17:27:24 -0700 | [diff] [blame] | 248 | ParseConfig({"/ueventd.rc", "/vendor/ueventd.rc", "/odm/ueventd.rc", |
| 249 | "/ueventd." + hardware + ".rc"}); |
Tom Cherry | 7421fa1 | 2018-07-13 15:32:02 -0700 | [diff] [blame] | 250 | |
| 251 | device_handler = DeviceHandler{std::move(ueventd_configuration.dev_permissions), |
| 252 | std::move(ueventd_configuration.sysfs_permissions), |
| 253 | std::move(ueventd_configuration.subsystems), |
| 254 | fs_mgr_get_boot_devices(), true}; |
| 255 | |
| 256 | firmware_directories = ueventd_configuration.firmware_directories; |
| 257 | } |
| 258 | |
Tom Cherry | ed506f7 | 2017-05-25 15:58:59 -0700 | [diff] [blame] | 259 | if (access(COLDBOOT_DONE, F_OK) != 0) { |
Andrew F. Davis | 9963847 | 2018-07-09 13:12:00 -0500 | [diff] [blame^] | 260 | ColdBoot cold_boot(uevent_listener, device_handler, modalias_handler); |
Tom Cherry | c583305 | 2017-05-16 15:35:41 -0700 | [diff] [blame] | 261 | cold_boot.Run(); |
Colin Cross | f83d0b9 | 2010-04-21 12:04:20 -0700 | [diff] [blame] | 262 | } |
Elliott Hughes | 2145779 | 2015-02-04 10:19:50 -0800 | [diff] [blame] | 263 | |
Tom Cherry | 0f296e0 | 2017-06-30 12:58:39 -0700 | [diff] [blame] | 264 | // We use waitpid() in ColdBoot, so we can't ignore SIGCHLD until now. |
| 265 | signal(SIGCHLD, SIG_IGN); |
| 266 | // Reap and pending children that exited between the last call to waitpid() and setting SIG_IGN |
| 267 | // for SIGCHLD above. |
| 268 | while (waitpid(-1, nullptr, WNOHANG) > 0) { |
| 269 | } |
| 270 | |
Andrew F. Davis | 9963847 | 2018-07-09 13:12:00 -0500 | [diff] [blame^] | 271 | uevent_listener.Poll([&device_handler, &modalias_handler](const Uevent& uevent) { |
Tom Cherry | ed506f7 | 2017-05-25 15:58:59 -0700 | [diff] [blame] | 272 | HandleFirmwareEvent(uevent); |
Andrew F. Davis | 9963847 | 2018-07-09 13:12:00 -0500 | [diff] [blame^] | 273 | modalias_handler.HandleModaliasEvent(uevent); |
Tom Cherry | ed506f7 | 2017-05-25 15:58:59 -0700 | [diff] [blame] | 274 | device_handler.HandleDeviceEvent(uevent); |
Sandeep Patil | 4cbedee | 2017-06-21 13:02:57 -0700 | [diff] [blame] | 275 | return ListenerAction::kContinue; |
Tom Cherry | ed506f7 | 2017-05-25 15:58:59 -0700 | [diff] [blame] | 276 | }); |
| 277 | |
Elliott Hughes | 2145779 | 2015-02-04 10:19:50 -0800 | [diff] [blame] | 278 | return 0; |
Colin Cross | f83d0b9 | 2010-04-21 12:04:20 -0700 | [diff] [blame] | 279 | } |
Tom Cherry | 81f5d3e | 2017-06-22 12:53:17 -0700 | [diff] [blame] | 280 | |
| 281 | } // namespace init |
| 282 | } // namespace android |