Colin Cross | cf8d1c2 | 2014-06-03 13:24:21 -0700 | [diff] [blame] | 1 | /* |
| 2 | * Copyright 2014 Google, Inc |
| 3 | * |
| 4 | * Licensed under the Apache License, Version 2.0 (the "License"); |
| 5 | * you may not use this file except in compliance with the License. |
| 6 | * You may obtain a copy of the License at |
| 7 | * |
| 8 | * http://www.apache.org/licenses/LICENSE-2.0 |
| 9 | * |
| 10 | * Unless required by applicable law or agreed to in writing, software |
| 11 | * distributed under the License is distributed on an "AS IS" BASIS, |
| 12 | * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| 13 | * See the License for the specific language governing permissions and |
| 14 | * limitations under the License. |
| 15 | */ |
| 16 | |
| 17 | //#define LOG_NDEBUG 0 |
| 18 | #define LOG_TAG "libprocessgroup" |
| 19 | |
| 20 | #include <assert.h> |
| 21 | #include <dirent.h> |
Elliott Hughes | 0badbd6 | 2014-12-29 12:24:25 -0800 | [diff] [blame] | 22 | #include <errno.h> |
Colin Cross | cf8d1c2 | 2014-06-03 13:24:21 -0700 | [diff] [blame] | 23 | #include <fcntl.h> |
Chih-Hung Hsieh | fcc8115 | 2014-11-20 17:05:15 -0800 | [diff] [blame] | 24 | #include <inttypes.h> |
Tom Cherry | 574a081 | 2018-02-23 13:04:40 -0800 | [diff] [blame] | 25 | #include <signal.h> |
Colin Cross | cf8d1c2 | 2014-06-03 13:24:21 -0700 | [diff] [blame] | 26 | #include <stdio.h> |
| 27 | #include <stdlib.h> |
| 28 | #include <string.h> |
| 29 | #include <sys/stat.h> |
| 30 | #include <sys/types.h> |
Tom Cherry | 70a5ed4 | 2017-06-05 19:20:17 -0700 | [diff] [blame] | 31 | #include <unistd.h> |
Collin Mulliner | f7e79b9 | 2016-06-01 21:03:55 +0000 | [diff] [blame] | 32 | |
| 33 | #include <chrono> |
James Hawkins | 588a2ca | 2016-02-18 14:52:46 -0800 | [diff] [blame] | 34 | #include <memory> |
Elliott Hughes | 8d532e4 | 2016-06-06 21:19:55 -0700 | [diff] [blame] | 35 | #include <mutex> |
Tom Cherry | 70a5ed4 | 2017-06-05 19:20:17 -0700 | [diff] [blame] | 36 | #include <set> |
Tom Cherry | 574a081 | 2018-02-23 13:04:40 -0800 | [diff] [blame] | 37 | #include <string> |
Elliott Hughes | 290a228 | 2016-11-14 17:08:47 -0800 | [diff] [blame] | 38 | #include <thread> |
Colin Cross | cf8d1c2 | 2014-06-03 13:24:21 -0700 | [diff] [blame] | 39 | |
Robert Benea | d485226 | 2017-07-16 19:38:11 -0700 | [diff] [blame] | 40 | #include <android-base/file.h> |
Elliott Hughes | 171df0a | 2016-08-02 13:30:30 -0700 | [diff] [blame] | 41 | #include <android-base/logging.h> |
Suren Baghdasaryan | cbb6902 | 2018-05-23 12:30:44 -0700 | [diff] [blame^] | 42 | #ifdef __ANDROID__ |
| 43 | #include <android-base/properties.h> |
| 44 | #endif |
Tom Cherry | 574a081 | 2018-02-23 13:04:40 -0800 | [diff] [blame] | 45 | #include <android-base/stringprintf.h> |
| 46 | #include <android-base/strings.h> |
Colin Cross | cf8d1c2 | 2014-06-03 13:24:21 -0700 | [diff] [blame] | 47 | #include <private/android_filesystem_config.h> |
| 48 | |
| 49 | #include <processgroup/processgroup.h> |
Martijn Coenen | b82bab6 | 2016-01-20 16:39:16 -0800 | [diff] [blame] | 50 | |
Suren Baghdasaryan | cbb6902 | 2018-05-23 12:30:44 -0700 | [diff] [blame^] | 51 | #ifdef __ANDROID__ |
| 52 | using android::base::GetBoolProperty; |
| 53 | #endif |
Tom Cherry | 574a081 | 2018-02-23 13:04:40 -0800 | [diff] [blame] | 54 | using android::base::StartsWith; |
| 55 | using android::base::StringPrintf; |
Robert Benea | d485226 | 2017-07-16 19:38:11 -0700 | [diff] [blame] | 56 | using android::base::WriteStringToFile; |
| 57 | |
Elliott Hughes | 290a228 | 2016-11-14 17:08:47 -0800 | [diff] [blame] | 58 | using namespace std::chrono_literals; |
| 59 | |
Martijn Coenen | b82bab6 | 2016-01-20 16:39:16 -0800 | [diff] [blame] | 60 | #define MEM_CGROUP_PATH "/dev/memcg/apps" |
Martijn Coenen | 623b56a | 2016-02-08 11:42:25 +0100 | [diff] [blame] | 61 | #define MEM_CGROUP_TASKS "/dev/memcg/apps/tasks" |
Martijn Coenen | b82bab6 | 2016-01-20 16:39:16 -0800 | [diff] [blame] | 62 | #define ACCT_CGROUP_PATH "/acct" |
| 63 | |
Martijn Coenen | b82bab6 | 2016-01-20 16:39:16 -0800 | [diff] [blame] | 64 | #define PROCESSGROUP_CGROUP_PROCS_FILE "/cgroup.procs" |
Martijn Coenen | b82bab6 | 2016-01-20 16:39:16 -0800 | [diff] [blame] | 65 | |
| 66 | std::once_flag init_path_flag; |
Colin Cross | cf8d1c2 | 2014-06-03 13:24:21 -0700 | [diff] [blame] | 67 | |
Tom Cherry | 574a081 | 2018-02-23 13:04:40 -0800 | [diff] [blame] | 68 | static const std::string& GetCgroupRootPath() { |
| 69 | static std::string cgroup_root_path; |
Martijn Coenen | b82bab6 | 2016-01-20 16:39:16 -0800 | [diff] [blame] | 70 | std::call_once(init_path_flag, [&]() { |
Suren Baghdasaryan | cbb6902 | 2018-05-23 12:30:44 -0700 | [diff] [blame^] | 71 | #ifdef __ANDROID__ |
| 72 | // low-ram devices use per-app memcg by default, unlike high-end ones |
| 73 | bool low_ram_device = GetBoolProperty("ro.config.low_ram", false); |
| 74 | bool per_app_memcg = |
| 75 | GetBoolProperty("ro.config.per_app_memcg", low_ram_device); |
| 76 | #else |
| 77 | // host does not support Android properties |
| 78 | bool per_app_memcg = false; |
| 79 | #endif |
| 80 | if (per_app_memcg) { |
| 81 | // Check if mem cgroup is mounted, only then check for |
| 82 | // write-access to avoid SELinux denials |
Tom Cherry | 574a081 | 2018-02-23 13:04:40 -0800 | [diff] [blame] | 83 | cgroup_root_path = |
Suren Baghdasaryan | cbb6902 | 2018-05-23 12:30:44 -0700 | [diff] [blame^] | 84 | (access(MEM_CGROUP_TASKS, F_OK) || access(MEM_CGROUP_PATH, W_OK) ? |
| 85 | ACCT_CGROUP_PATH : MEM_CGROUP_PATH); |
| 86 | } else { |
| 87 | cgroup_root_path = ACCT_CGROUP_PATH; |
| 88 | } |
| 89 | }); |
Martijn Coenen | b82bab6 | 2016-01-20 16:39:16 -0800 | [diff] [blame] | 90 | return cgroup_root_path; |
| 91 | } |
| 92 | |
Tom Cherry | 574a081 | 2018-02-23 13:04:40 -0800 | [diff] [blame] | 93 | static std::string ConvertUidToPath(uid_t uid) { |
| 94 | return StringPrintf("%s/uid_%d", GetCgroupRootPath().c_str(), uid); |
Colin Cross | cf8d1c2 | 2014-06-03 13:24:21 -0700 | [diff] [blame] | 95 | } |
| 96 | |
Tom Cherry | 574a081 | 2018-02-23 13:04:40 -0800 | [diff] [blame] | 97 | static std::string ConvertUidPidToPath(uid_t uid, int pid) { |
| 98 | return StringPrintf("%s/uid_%d/pid_%d", GetCgroupRootPath().c_str(), uid, pid); |
Colin Cross | cf8d1c2 | 2014-06-03 13:24:21 -0700 | [diff] [blame] | 99 | } |
| 100 | |
Tom Cherry | 574a081 | 2018-02-23 13:04:40 -0800 | [diff] [blame] | 101 | static int RemoveProcessGroup(uid_t uid, int pid) { |
Colin Cross | cf8d1c2 | 2014-06-03 13:24:21 -0700 | [diff] [blame] | 102 | int ret; |
Colin Cross | cf8d1c2 | 2014-06-03 13:24:21 -0700 | [diff] [blame] | 103 | |
Tom Cherry | 574a081 | 2018-02-23 13:04:40 -0800 | [diff] [blame] | 104 | auto uid_pid_path = ConvertUidPidToPath(uid, pid); |
| 105 | ret = rmdir(uid_pid_path.c_str()); |
Colin Cross | cf8d1c2 | 2014-06-03 13:24:21 -0700 | [diff] [blame] | 106 | |
Tom Cherry | 574a081 | 2018-02-23 13:04:40 -0800 | [diff] [blame] | 107 | auto uid_path = ConvertUidToPath(uid); |
| 108 | rmdir(uid_path.c_str()); |
Colin Cross | cf8d1c2 | 2014-06-03 13:24:21 -0700 | [diff] [blame] | 109 | |
| 110 | return ret; |
| 111 | } |
| 112 | |
Tom Cherry | 574a081 | 2018-02-23 13:04:40 -0800 | [diff] [blame] | 113 | static void RemoveUidProcessGroups(const std::string& uid_path) { |
| 114 | std::unique_ptr<DIR, decltype(&closedir)> uid(opendir(uid_path.c_str()), closedir); |
Colin Cross | cf8d1c2 | 2014-06-03 13:24:21 -0700 | [diff] [blame] | 115 | if (uid != NULL) { |
Elliott Hughes | 9f20693 | 2016-09-28 13:29:54 -0700 | [diff] [blame] | 116 | dirent* dir; |
| 117 | while ((dir = readdir(uid.get())) != nullptr) { |
Colin Cross | cf8d1c2 | 2014-06-03 13:24:21 -0700 | [diff] [blame] | 118 | if (dir->d_type != DT_DIR) { |
| 119 | continue; |
| 120 | } |
| 121 | |
Tom Cherry | 574a081 | 2018-02-23 13:04:40 -0800 | [diff] [blame] | 122 | if (!StartsWith(dir->d_name, "pid_")) { |
Colin Cross | cf8d1c2 | 2014-06-03 13:24:21 -0700 | [diff] [blame] | 123 | continue; |
| 124 | } |
| 125 | |
Tom Cherry | 574a081 | 2018-02-23 13:04:40 -0800 | [diff] [blame] | 126 | auto path = StringPrintf("%s/%s", uid_path.c_str(), dir->d_name); |
Tom Cherry | 20514c4 | 2017-04-21 13:48:49 -0700 | [diff] [blame] | 127 | LOG(VERBOSE) << "Removing " << path; |
Tom Cherry | 574a081 | 2018-02-23 13:04:40 -0800 | [diff] [blame] | 128 | if (rmdir(path.c_str()) == -1) PLOG(WARNING) << "Failed to remove " << path; |
Colin Cross | cf8d1c2 | 2014-06-03 13:24:21 -0700 | [diff] [blame] | 129 | } |
| 130 | } |
| 131 | } |
| 132 | |
| 133 | void removeAllProcessGroups() |
| 134 | { |
Elliott Hughes | 171df0a | 2016-08-02 13:30:30 -0700 | [diff] [blame] | 135 | LOG(VERBOSE) << "removeAllProcessGroups()"; |
Tom Cherry | 574a081 | 2018-02-23 13:04:40 -0800 | [diff] [blame] | 136 | const auto& cgroup_root_path = GetCgroupRootPath(); |
| 137 | std::unique_ptr<DIR, decltype(&closedir)> root(opendir(cgroup_root_path.c_str()), closedir); |
Colin Cross | cf8d1c2 | 2014-06-03 13:24:21 -0700 | [diff] [blame] | 138 | if (root == NULL) { |
Tom Cherry | 20514c4 | 2017-04-21 13:48:49 -0700 | [diff] [blame] | 139 | PLOG(ERROR) << "Failed to open " << cgroup_root_path; |
Colin Cross | c15dd04 | 2014-08-20 14:11:13 -0700 | [diff] [blame] | 140 | } else { |
Elliott Hughes | 9f20693 | 2016-09-28 13:29:54 -0700 | [diff] [blame] | 141 | dirent* dir; |
| 142 | while ((dir = readdir(root.get())) != nullptr) { |
Colin Cross | cf8d1c2 | 2014-06-03 13:24:21 -0700 | [diff] [blame] | 143 | if (dir->d_type != DT_DIR) { |
| 144 | continue; |
| 145 | } |
Tom Cherry | 574a081 | 2018-02-23 13:04:40 -0800 | [diff] [blame] | 146 | |
| 147 | if (!StartsWith(dir->d_name, "uid_")) { |
Colin Cross | cf8d1c2 | 2014-06-03 13:24:21 -0700 | [diff] [blame] | 148 | continue; |
| 149 | } |
| 150 | |
Tom Cherry | 574a081 | 2018-02-23 13:04:40 -0800 | [diff] [blame] | 151 | auto path = StringPrintf("%s/%s", cgroup_root_path.c_str(), dir->d_name); |
| 152 | RemoveUidProcessGroups(path); |
Tom Cherry | 20514c4 | 2017-04-21 13:48:49 -0700 | [diff] [blame] | 153 | LOG(VERBOSE) << "Removing " << path; |
Tom Cherry | 574a081 | 2018-02-23 13:04:40 -0800 | [diff] [blame] | 154 | if (rmdir(path.c_str()) == -1) PLOG(WARNING) << "Failed to remove " << path; |
Colin Cross | cf8d1c2 | 2014-06-03 13:24:21 -0700 | [diff] [blame] | 155 | } |
Colin Cross | cf8d1c2 | 2014-06-03 13:24:21 -0700 | [diff] [blame] | 156 | } |
| 157 | } |
| 158 | |
Tom Cherry | 20514c4 | 2017-04-21 13:48:49 -0700 | [diff] [blame] | 159 | // Returns number of processes killed on success |
| 160 | // Returns 0 if there are no processes in the process cgroup left to kill |
Tom Cherry | 574a081 | 2018-02-23 13:04:40 -0800 | [diff] [blame] | 161 | // Returns -1 on error |
| 162 | static int DoKillProcessGroupOnce(uid_t uid, int initialPid, int signal) { |
| 163 | auto path = ConvertUidPidToPath(uid, initialPid) + PROCESSGROUP_CGROUP_PROCS_FILE; |
| 164 | std::unique_ptr<FILE, decltype(&fclose)> fd(fopen(path.c_str(), "re"), fclose); |
| 165 | if (!fd) { |
Tom Cherry | 20514c4 | 2017-04-21 13:48:49 -0700 | [diff] [blame] | 166 | PLOG(WARNING) << "Failed to open process cgroup uid " << uid << " pid " << initialPid; |
Tom Cherry | 574a081 | 2018-02-23 13:04:40 -0800 | [diff] [blame] | 167 | return -1; |
Tom Cherry | 20514c4 | 2017-04-21 13:48:49 -0700 | [diff] [blame] | 168 | } |
| 169 | |
Tom Cherry | 70a5ed4 | 2017-06-05 19:20:17 -0700 | [diff] [blame] | 170 | // We separate all of the pids in the cgroup into those pids that are also the leaders of |
| 171 | // process groups (stored in the pgids set) and those that are not (stored in the pids set). |
| 172 | std::set<pid_t> pgids; |
| 173 | pgids.emplace(initialPid); |
| 174 | std::set<pid_t> pids; |
| 175 | |
Colin Cross | cf8d1c2 | 2014-06-03 13:24:21 -0700 | [diff] [blame] | 176 | pid_t pid; |
Tom Cherry | 20514c4 | 2017-04-21 13:48:49 -0700 | [diff] [blame] | 177 | int processes = 0; |
Tom Cherry | 574a081 | 2018-02-23 13:04:40 -0800 | [diff] [blame] | 178 | while (fscanf(fd.get(), "%d\n", &pid) == 1 && pid >= 0) { |
Colin Cross | cf8d1c2 | 2014-06-03 13:24:21 -0700 | [diff] [blame] | 179 | processes++; |
Dianne Hackborn | 2c5e7e1 | 2014-10-13 17:45:22 -0700 | [diff] [blame] | 180 | if (pid == 0) { |
| 181 | // Should never happen... but if it does, trying to kill this |
| 182 | // will boomerang right back and kill us! Let's not let that happen. |
Elliott Hughes | 171df0a | 2016-08-02 13:30:30 -0700 | [diff] [blame] | 183 | LOG(WARNING) << "Yikes, we've been told to kill pid 0! How about we don't do that?"; |
Dianne Hackborn | 2c5e7e1 | 2014-10-13 17:45:22 -0700 | [diff] [blame] | 184 | continue; |
| 185 | } |
Tom Cherry | 70a5ed4 | 2017-06-05 19:20:17 -0700 | [diff] [blame] | 186 | pid_t pgid = getpgid(pid); |
| 187 | if (pgid == -1) PLOG(ERROR) << "getpgid(" << pid << ") failed"; |
| 188 | if (pgid == pid) { |
| 189 | pgids.emplace(pid); |
| 190 | } else { |
| 191 | pids.emplace(pid); |
| 192 | } |
| 193 | } |
| 194 | |
| 195 | // Erase all pids that will be killed when we kill the process groups. |
| 196 | for (auto it = pids.begin(); it != pids.end();) { |
| 197 | pid_t pgid = getpgid(pid); |
| 198 | if (pgids.count(pgid) == 1) { |
| 199 | it = pids.erase(it); |
| 200 | } else { |
| 201 | ++it; |
| 202 | } |
| 203 | } |
| 204 | |
| 205 | // Kill all process groups. |
| 206 | for (const auto pgid : pgids) { |
| 207 | LOG(VERBOSE) << "Killing process group " << -pgid << " in uid " << uid |
| 208 | << " as part of process cgroup " << initialPid; |
| 209 | |
| 210 | if (kill(-pgid, signal) == -1) { |
| 211 | PLOG(WARNING) << "kill(" << -pgid << ", " << signal << ") failed"; |
| 212 | } |
| 213 | } |
| 214 | |
| 215 | // Kill remaining pids. |
| 216 | for (const auto pid : pids) { |
Tom Cherry | 20514c4 | 2017-04-21 13:48:49 -0700 | [diff] [blame] | 217 | LOG(VERBOSE) << "Killing pid " << pid << " in uid " << uid << " as part of process cgroup " |
| 218 | << initialPid; |
Tom Cherry | 70a5ed4 | 2017-06-05 19:20:17 -0700 | [diff] [blame] | 219 | |
Elliott Hughes | 171df0a | 2016-08-02 13:30:30 -0700 | [diff] [blame] | 220 | if (kill(pid, signal) == -1) { |
| 221 | PLOG(WARNING) << "kill(" << pid << ", " << signal << ") failed"; |
Colin Cross | cf8d1c2 | 2014-06-03 13:24:21 -0700 | [diff] [blame] | 222 | } |
| 223 | } |
| 224 | |
Tom Cherry | 574a081 | 2018-02-23 13:04:40 -0800 | [diff] [blame] | 225 | return feof(fd.get()) ? processes : -1; |
Colin Cross | cf8d1c2 | 2014-06-03 13:24:21 -0700 | [diff] [blame] | 226 | } |
| 227 | |
Tom Cherry | 574a081 | 2018-02-23 13:04:40 -0800 | [diff] [blame] | 228 | static int KillProcessGroup(uid_t uid, int initialPid, int signal, int retries) { |
Collin Mulliner | f7e79b9 | 2016-06-01 21:03:55 +0000 | [diff] [blame] | 229 | std::chrono::steady_clock::time_point start = std::chrono::steady_clock::now(); |
Colin Cross | cf8d1c2 | 2014-06-03 13:24:21 -0700 | [diff] [blame] | 230 | |
Tom Cherry | 20514c4 | 2017-04-21 13:48:49 -0700 | [diff] [blame] | 231 | int retry = retries; |
Collin Mulliner | f7e79b9 | 2016-06-01 21:03:55 +0000 | [diff] [blame] | 232 | int processes; |
Tom Cherry | 574a081 | 2018-02-23 13:04:40 -0800 | [diff] [blame] | 233 | while ((processes = DoKillProcessGroupOnce(uid, initialPid, signal)) > 0) { |
Tom Cherry | 20514c4 | 2017-04-21 13:48:49 -0700 | [diff] [blame] | 234 | LOG(VERBOSE) << "Killed " << processes << " processes for processgroup " << initialPid; |
Yusuke Sato | d503930 | 2015-06-16 13:51:14 -0700 | [diff] [blame] | 235 | if (retry > 0) { |
Elliott Hughes | 290a228 | 2016-11-14 17:08:47 -0800 | [diff] [blame] | 236 | std::this_thread::sleep_for(5ms); |
Yusuke Sato | d503930 | 2015-06-16 13:51:14 -0700 | [diff] [blame] | 237 | --retry; |
Colin Cross | cf8d1c2 | 2014-06-03 13:24:21 -0700 | [diff] [blame] | 238 | } else { |
Colin Cross | cf8d1c2 | 2014-06-03 13:24:21 -0700 | [diff] [blame] | 239 | break; |
| 240 | } |
| 241 | } |
| 242 | |
Tom Cherry | 20514c4 | 2017-04-21 13:48:49 -0700 | [diff] [blame] | 243 | if (processes < 0) { |
| 244 | PLOG(ERROR) << "Error encountered killing process cgroup uid " << uid << " pid " |
| 245 | << initialPid; |
| 246 | return -1; |
| 247 | } |
Collin Mulliner | f7e79b9 | 2016-06-01 21:03:55 +0000 | [diff] [blame] | 248 | |
Tom Cherry | 20514c4 | 2017-04-21 13:48:49 -0700 | [diff] [blame] | 249 | std::chrono::steady_clock::time_point end = std::chrono::steady_clock::now(); |
Elliott Hughes | 171df0a | 2016-08-02 13:30:30 -0700 | [diff] [blame] | 250 | auto ms = std::chrono::duration_cast<std::chrono::milliseconds>(end - start).count(); |
Tom Cherry | 20514c4 | 2017-04-21 13:48:49 -0700 | [diff] [blame] | 251 | |
| 252 | // We only calculate the number of 'processes' when killing the processes. |
| 253 | // In the retries == 0 case, we only kill the processes once and therefore |
| 254 | // will not have waited then recalculated how many processes are remaining |
| 255 | // after the first signals have been sent. |
| 256 | // Logging anything regarding the number of 'processes' here does not make sense. |
Dianne Hackborn | 2c5e7e1 | 2014-10-13 17:45:22 -0700 | [diff] [blame] | 257 | |
Colin Cross | cf8d1c2 | 2014-06-03 13:24:21 -0700 | [diff] [blame] | 258 | if (processes == 0) { |
Tom Cherry | 20514c4 | 2017-04-21 13:48:49 -0700 | [diff] [blame] | 259 | if (retries > 0) { |
| 260 | LOG(INFO) << "Successfully killed process cgroup uid " << uid << " pid " << initialPid |
| 261 | << " in " << static_cast<int>(ms) << "ms"; |
| 262 | } |
Tom Cherry | 574a081 | 2018-02-23 13:04:40 -0800 | [diff] [blame] | 263 | return RemoveProcessGroup(uid, initialPid); |
Colin Cross | cf8d1c2 | 2014-06-03 13:24:21 -0700 | [diff] [blame] | 264 | } else { |
Tom Cherry | 20514c4 | 2017-04-21 13:48:49 -0700 | [diff] [blame] | 265 | if (retries > 0) { |
| 266 | LOG(ERROR) << "Failed to kill process cgroup uid " << uid << " pid " << initialPid |
| 267 | << " in " << static_cast<int>(ms) << "ms, " << processes |
| 268 | << " processes remain"; |
| 269 | } |
Colin Cross | cf8d1c2 | 2014-06-03 13:24:21 -0700 | [diff] [blame] | 270 | return -1; |
| 271 | } |
| 272 | } |
| 273 | |
Keun-young Park | fac4b63 | 2017-03-28 17:25:24 -0700 | [diff] [blame] | 274 | int killProcessGroup(uid_t uid, int initialPid, int signal) { |
Tom Cherry | 574a081 | 2018-02-23 13:04:40 -0800 | [diff] [blame] | 275 | return KillProcessGroup(uid, initialPid, signal, 40 /*retries*/); |
Keun-young Park | fac4b63 | 2017-03-28 17:25:24 -0700 | [diff] [blame] | 276 | } |
| 277 | |
| 278 | int killProcessGroupOnce(uid_t uid, int initialPid, int signal) { |
Tom Cherry | 574a081 | 2018-02-23 13:04:40 -0800 | [diff] [blame] | 279 | return KillProcessGroup(uid, initialPid, signal, 0 /*retries*/); |
Keun-young Park | fac4b63 | 2017-03-28 17:25:24 -0700 | [diff] [blame] | 280 | } |
| 281 | |
Tom Cherry | 574a081 | 2018-02-23 13:04:40 -0800 | [diff] [blame] | 282 | static bool MkdirAndChown(const std::string& path, mode_t mode, uid_t uid, gid_t gid) { |
| 283 | if (mkdir(path.c_str(), mode) == -1 && errno != EEXIST) { |
Elliott Hughes | 171df0a | 2016-08-02 13:30:30 -0700 | [diff] [blame] | 284 | return false; |
Colin Cross | cf8d1c2 | 2014-06-03 13:24:21 -0700 | [diff] [blame] | 285 | } |
| 286 | |
Tom Cherry | 574a081 | 2018-02-23 13:04:40 -0800 | [diff] [blame] | 287 | if (chown(path.c_str(), uid, gid) == -1) { |
Elliott Hughes | 171df0a | 2016-08-02 13:30:30 -0700 | [diff] [blame] | 288 | int saved_errno = errno; |
Tom Cherry | 574a081 | 2018-02-23 13:04:40 -0800 | [diff] [blame] | 289 | rmdir(path.c_str()); |
Elliott Hughes | 171df0a | 2016-08-02 13:30:30 -0700 | [diff] [blame] | 290 | errno = saved_errno; |
| 291 | return false; |
Colin Cross | cf8d1c2 | 2014-06-03 13:24:21 -0700 | [diff] [blame] | 292 | } |
| 293 | |
Elliott Hughes | 171df0a | 2016-08-02 13:30:30 -0700 | [diff] [blame] | 294 | return true; |
Colin Cross | cf8d1c2 | 2014-06-03 13:24:21 -0700 | [diff] [blame] | 295 | } |
| 296 | |
| 297 | int createProcessGroup(uid_t uid, int initialPid) |
| 298 | { |
Tom Cherry | 574a081 | 2018-02-23 13:04:40 -0800 | [diff] [blame] | 299 | auto uid_path = ConvertUidToPath(uid); |
Colin Cross | cf8d1c2 | 2014-06-03 13:24:21 -0700 | [diff] [blame] | 300 | |
Tom Cherry | 574a081 | 2018-02-23 13:04:40 -0800 | [diff] [blame] | 301 | if (!MkdirAndChown(uid_path, 0750, AID_SYSTEM, AID_SYSTEM)) { |
| 302 | PLOG(ERROR) << "Failed to make and chown " << uid_path; |
Elliott Hughes | 171df0a | 2016-08-02 13:30:30 -0700 | [diff] [blame] | 303 | return -errno; |
Colin Cross | cf8d1c2 | 2014-06-03 13:24:21 -0700 | [diff] [blame] | 304 | } |
| 305 | |
Tom Cherry | 574a081 | 2018-02-23 13:04:40 -0800 | [diff] [blame] | 306 | auto uid_pid_path = ConvertUidPidToPath(uid, initialPid); |
Colin Cross | cf8d1c2 | 2014-06-03 13:24:21 -0700 | [diff] [blame] | 307 | |
Tom Cherry | 574a081 | 2018-02-23 13:04:40 -0800 | [diff] [blame] | 308 | if (!MkdirAndChown(uid_pid_path, 0750, AID_SYSTEM, AID_SYSTEM)) { |
| 309 | PLOG(ERROR) << "Failed to make and chown " << uid_pid_path; |
Elliott Hughes | 171df0a | 2016-08-02 13:30:30 -0700 | [diff] [blame] | 310 | return -errno; |
Colin Cross | cf8d1c2 | 2014-06-03 13:24:21 -0700 | [diff] [blame] | 311 | } |
| 312 | |
Tom Cherry | 574a081 | 2018-02-23 13:04:40 -0800 | [diff] [blame] | 313 | auto uid_pid_procs_file = uid_pid_path + PROCESSGROUP_CGROUP_PROCS_FILE; |
Colin Cross | cf8d1c2 | 2014-06-03 13:24:21 -0700 | [diff] [blame] | 314 | |
Elliott Hughes | 171df0a | 2016-08-02 13:30:30 -0700 | [diff] [blame] | 315 | int ret = 0; |
Tom Cherry | 574a081 | 2018-02-23 13:04:40 -0800 | [diff] [blame] | 316 | if (!WriteStringToFile(std::to_string(initialPid), uid_pid_procs_file)) { |
Colin Cross | cf8d1c2 | 2014-06-03 13:24:21 -0700 | [diff] [blame] | 317 | ret = -errno; |
Tom Cherry | 574a081 | 2018-02-23 13:04:40 -0800 | [diff] [blame] | 318 | PLOG(ERROR) << "Failed to write '" << initialPid << "' to " << uid_pid_procs_file; |
Colin Cross | cf8d1c2 | 2014-06-03 13:24:21 -0700 | [diff] [blame] | 319 | } |
| 320 | |
Colin Cross | cf8d1c2 | 2014-06-03 13:24:21 -0700 | [diff] [blame] | 321 | return ret; |
| 322 | } |
Robert Benea | d485226 | 2017-07-16 19:38:11 -0700 | [diff] [blame] | 323 | |
Tom Cherry | 574a081 | 2018-02-23 13:04:40 -0800 | [diff] [blame] | 324 | static bool SetProcessGroupValue(uid_t uid, int pid, const std::string& file_name, int64_t value) { |
| 325 | if (GetCgroupRootPath() != MEM_CGROUP_PATH) { |
| 326 | PLOG(ERROR) << "Memcg is not mounted."; |
Robert Benea | d485226 | 2017-07-16 19:38:11 -0700 | [diff] [blame] | 327 | return false; |
| 328 | } |
| 329 | |
Tom Cherry | 574a081 | 2018-02-23 13:04:40 -0800 | [diff] [blame] | 330 | auto path = ConvertUidPidToPath(uid, pid) + file_name; |
Robert Benea | d485226 | 2017-07-16 19:38:11 -0700 | [diff] [blame] | 331 | |
| 332 | if (!WriteStringToFile(std::to_string(value), path)) { |
| 333 | PLOG(ERROR) << "Failed to write '" << value << "' to " << path; |
| 334 | return false; |
| 335 | } |
| 336 | return true; |
| 337 | } |
| 338 | |
| 339 | bool setProcessGroupSwappiness(uid_t uid, int pid, int swappiness) { |
Tom Cherry | 574a081 | 2018-02-23 13:04:40 -0800 | [diff] [blame] | 340 | return SetProcessGroupValue(uid, pid, "/memory.swappiness", swappiness); |
Robert Benea | d485226 | 2017-07-16 19:38:11 -0700 | [diff] [blame] | 341 | } |
| 342 | |
| 343 | bool setProcessGroupSoftLimit(uid_t uid, int pid, int64_t soft_limit_in_bytes) { |
Tom Cherry | 574a081 | 2018-02-23 13:04:40 -0800 | [diff] [blame] | 344 | return SetProcessGroupValue(uid, pid, "/memory.soft_limit_in_bytes", soft_limit_in_bytes); |
Robert Benea | d485226 | 2017-07-16 19:38:11 -0700 | [diff] [blame] | 345 | } |
| 346 | |
| 347 | bool setProcessGroupLimit(uid_t uid, int pid, int64_t limit_in_bytes) { |
Tom Cherry | 574a081 | 2018-02-23 13:04:40 -0800 | [diff] [blame] | 348 | return SetProcessGroupValue(uid, pid, "/memory.limit_in_bytes", limit_in_bytes); |
Robert Benea | d485226 | 2017-07-16 19:38:11 -0700 | [diff] [blame] | 349 | } |