423 lines
18 KiB
C
423 lines
18 KiB
C
/*-*- Mode: C; c-basic-offset: 8; indent-tabs-mode: nil -*-*/
|
|
|
|
/***
|
|
This file is part of systemd.
|
|
|
|
Copyright 2010 Lennart Poettering
|
|
|
|
systemd is free software; you can redistribute it and/or modify it
|
|
under the terms of the GNU Lesser General Public License as published by
|
|
the Free Software Foundation; either version 2.1 of the License, or
|
|
(at your option) any later version.
|
|
|
|
systemd is distributed in the hope that it will be useful, but
|
|
WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
Lesser General Public License for more details.
|
|
|
|
You should have received a copy of the GNU Lesser General Public License
|
|
along with systemd; If not, see <http://www.gnu.org/licenses/>.
|
|
***/
|
|
|
|
#include <errno.h>
|
|
#include <dbus/dbus.h>
|
|
#include <sys/prctl.h>
|
|
|
|
#include "dbus-execute.h"
|
|
#include "missing.h"
|
|
#include "ioprio.h"
|
|
#include "strv.h"
|
|
#include "dbus-common.h"
|
|
|
|
DEFINE_BUS_PROPERTY_APPEND_ENUM(bus_execute_append_kill_mode, kill_mode, KillMode);
|
|
|
|
DEFINE_BUS_PROPERTY_APPEND_ENUM(bus_execute_append_input, exec_input, ExecInput);
|
|
DEFINE_BUS_PROPERTY_APPEND_ENUM(bus_execute_append_output, exec_output, ExecOutput);
|
|
|
|
int bus_execute_append_env_files(DBusMessageIter *i, const char *property, void *data) {
|
|
char **env_files = data, **j;
|
|
DBusMessageIter sub, sub2;
|
|
|
|
assert(i);
|
|
assert(property);
|
|
|
|
if (!dbus_message_iter_open_container(i, DBUS_TYPE_ARRAY, "(sb)", &sub))
|
|
return -ENOMEM;
|
|
|
|
STRV_FOREACH(j, env_files) {
|
|
dbus_bool_t b = false;
|
|
char *fn = *j;
|
|
|
|
if (fn[0] == '-') {
|
|
b = true;
|
|
fn++;
|
|
}
|
|
|
|
if (!dbus_message_iter_open_container(&sub, DBUS_TYPE_STRUCT, NULL, &sub2) ||
|
|
!dbus_message_iter_append_basic(&sub2, DBUS_TYPE_STRING, &fn) ||
|
|
!dbus_message_iter_append_basic(&sub2, DBUS_TYPE_BOOLEAN, &b) ||
|
|
!dbus_message_iter_close_container(&sub, &sub2))
|
|
return -ENOMEM;
|
|
}
|
|
|
|
if (!dbus_message_iter_close_container(i, &sub))
|
|
return -ENOMEM;
|
|
|
|
return 0;
|
|
}
|
|
|
|
int bus_execute_append_oom_score_adjust(DBusMessageIter *i, const char *property, void *data) {
|
|
ExecContext *c = data;
|
|
int32_t n;
|
|
|
|
assert(i);
|
|
assert(property);
|
|
assert(c);
|
|
|
|
if (c->oom_score_adjust_set)
|
|
n = c->oom_score_adjust;
|
|
else {
|
|
char *t;
|
|
|
|
n = 0;
|
|
if (read_one_line_file("/proc/self/oom_score_adj", &t) >= 0) {
|
|
safe_atoi(t, &n);
|
|
free(t);
|
|
} else if (read_one_line_file("/proc/self/oom_adj", &t) >= 0) {
|
|
safe_atoi(t, &n);
|
|
free(t);
|
|
|
|
if (n == OOM_ADJUST_MAX)
|
|
n = OOM_SCORE_ADJ_MAX;
|
|
else
|
|
n = (n * OOM_SCORE_ADJ_MAX) / -OOM_DISABLE;
|
|
}
|
|
}
|
|
|
|
if (!dbus_message_iter_append_basic(i, DBUS_TYPE_INT32, &n))
|
|
return -ENOMEM;
|
|
|
|
return 0;
|
|
}
|
|
|
|
int bus_execute_append_nice(DBusMessageIter *i, const char *property, void *data) {
|
|
ExecContext *c = data;
|
|
int32_t n;
|
|
|
|
assert(i);
|
|
assert(property);
|
|
assert(c);
|
|
|
|
if (c->nice_set)
|
|
n = c->nice;
|
|
else
|
|
n = getpriority(PRIO_PROCESS, 0);
|
|
|
|
if (!dbus_message_iter_append_basic(i, DBUS_TYPE_INT32, &n))
|
|
return -ENOMEM;
|
|
|
|
return 0;
|
|
}
|
|
|
|
int bus_execute_append_ioprio(DBusMessageIter *i, const char *property, void *data) {
|
|
ExecContext *c = data;
|
|
int32_t n;
|
|
|
|
assert(i);
|
|
assert(property);
|
|
assert(c);
|
|
|
|
if (c->ioprio_set)
|
|
n = c->ioprio;
|
|
else
|
|
n = ioprio_get(IOPRIO_WHO_PROCESS, 0);
|
|
|
|
if (!dbus_message_iter_append_basic(i, DBUS_TYPE_INT32, &n))
|
|
return -ENOMEM;
|
|
|
|
return 0;
|
|
}
|
|
|
|
int bus_execute_append_cpu_sched_policy(DBusMessageIter *i, const char *property, void *data) {
|
|
ExecContext *c = data;
|
|
int32_t n;
|
|
|
|
assert(i);
|
|
assert(property);
|
|
assert(c);
|
|
|
|
if (c->cpu_sched_set)
|
|
n = c->cpu_sched_policy;
|
|
else
|
|
n = sched_getscheduler(0);
|
|
|
|
if (!dbus_message_iter_append_basic(i, DBUS_TYPE_INT32, &n))
|
|
return -ENOMEM;
|
|
|
|
return 0;
|
|
}
|
|
|
|
int bus_execute_append_cpu_sched_priority(DBusMessageIter *i, const char *property, void *data) {
|
|
ExecContext *c = data;
|
|
int32_t n;
|
|
|
|
assert(i);
|
|
assert(property);
|
|
assert(c);
|
|
|
|
if (c->cpu_sched_set)
|
|
n = c->cpu_sched_priority;
|
|
else {
|
|
struct sched_param p;
|
|
n = 0;
|
|
|
|
zero(p);
|
|
if (sched_getparam(0, &p) >= 0)
|
|
n = p.sched_priority;
|
|
}
|
|
|
|
if (!dbus_message_iter_append_basic(i, DBUS_TYPE_INT32, &n))
|
|
return -ENOMEM;
|
|
|
|
return 0;
|
|
}
|
|
|
|
int bus_execute_append_affinity(DBusMessageIter *i, const char *property, void *data) {
|
|
ExecContext *c = data;
|
|
dbus_bool_t b;
|
|
DBusMessageIter sub;
|
|
|
|
assert(i);
|
|
assert(property);
|
|
assert(c);
|
|
|
|
if (!dbus_message_iter_open_container(i, DBUS_TYPE_ARRAY, "y", &sub))
|
|
return -ENOMEM;
|
|
|
|
if (c->cpuset)
|
|
b = dbus_message_iter_append_fixed_array(&sub, DBUS_TYPE_BYTE, &c->cpuset, CPU_ALLOC_SIZE(c->cpuset_ncpus));
|
|
else
|
|
b = dbus_message_iter_append_fixed_array(&sub, DBUS_TYPE_BYTE, &c->cpuset, 0);
|
|
|
|
if (!b)
|
|
return -ENOMEM;
|
|
|
|
if (!dbus_message_iter_close_container(i, &sub))
|
|
return -ENOMEM;
|
|
|
|
return 0;
|
|
}
|
|
|
|
int bus_execute_append_timer_slack_nsec(DBusMessageIter *i, const char *property, void *data) {
|
|
ExecContext *c = data;
|
|
uint64_t u;
|
|
|
|
assert(i);
|
|
assert(property);
|
|
assert(c);
|
|
|
|
if (c->timer_slack_nsec_set)
|
|
u = (uint64_t) c->timer_slack_nsec;
|
|
else
|
|
u = (uint64_t) prctl(PR_GET_TIMERSLACK);
|
|
|
|
if (!dbus_message_iter_append_basic(i, DBUS_TYPE_UINT64, &u))
|
|
return -ENOMEM;
|
|
|
|
return 0;
|
|
}
|
|
|
|
int bus_execute_append_capability_bs(DBusMessageIter *i, const char *property, void *data) {
|
|
ExecContext *c = data;
|
|
uint64_t normal, inverted;
|
|
|
|
assert(i);
|
|
assert(property);
|
|
assert(c);
|
|
|
|
/* We store this negated internally, to match the kernel, but
|
|
* we expose it normalized. */
|
|
|
|
normal = *(uint64_t*) data;
|
|
inverted = ~normal;
|
|
|
|
return bus_property_append_uint64(i, property, &inverted);
|
|
}
|
|
|
|
int bus_execute_append_capabilities(DBusMessageIter *i, const char *property, void *data) {
|
|
ExecContext *c = data;
|
|
char *t = NULL;
|
|
const char *s;
|
|
dbus_bool_t b;
|
|
|
|
assert(i);
|
|
assert(property);
|
|
assert(c);
|
|
|
|
if (c->capabilities)
|
|
s = t = cap_to_text(c->capabilities, NULL);
|
|
else
|
|
s = "";
|
|
|
|
if (!s)
|
|
return -ENOMEM;
|
|
|
|
b = dbus_message_iter_append_basic(i, DBUS_TYPE_STRING, &s);
|
|
|
|
if (t)
|
|
cap_free(t);
|
|
|
|
if (!b)
|
|
return -ENOMEM;
|
|
|
|
return 0;
|
|
}
|
|
|
|
int bus_execute_append_rlimits(DBusMessageIter *i, const char *property, void *data) {
|
|
ExecContext *c = data;
|
|
int r;
|
|
uint64_t u;
|
|
|
|
assert(i);
|
|
assert(property);
|
|
assert(c);
|
|
|
|
assert_se((r = rlimit_from_string(property)) >= 0);
|
|
|
|
if (c->rlimit[r])
|
|
u = (uint64_t) c->rlimit[r]->rlim_max;
|
|
else {
|
|
struct rlimit rl;
|
|
|
|
zero(rl);
|
|
getrlimit(r, &rl);
|
|
|
|
u = (uint64_t) rl.rlim_max;
|
|
}
|
|
|
|
if (!dbus_message_iter_append_basic(i, DBUS_TYPE_UINT64, &u))
|
|
return -ENOMEM;
|
|
|
|
return 0;
|
|
}
|
|
|
|
int bus_execute_append_command(DBusMessageIter *i, const char *property, void *data) {
|
|
ExecCommand *c = data;
|
|
DBusMessageIter sub, sub2, sub3;
|
|
|
|
assert(i);
|
|
assert(property);
|
|
|
|
if (!dbus_message_iter_open_container(i, DBUS_TYPE_ARRAY, "(sasbttttuii)", &sub))
|
|
return -ENOMEM;
|
|
|
|
LIST_FOREACH(command, c, c) {
|
|
char **l;
|
|
uint32_t pid;
|
|
int32_t code, status;
|
|
dbus_bool_t b;
|
|
|
|
if (!c->path)
|
|
continue;
|
|
|
|
if (!dbus_message_iter_open_container(&sub, DBUS_TYPE_STRUCT, NULL, &sub2) ||
|
|
!dbus_message_iter_append_basic(&sub2, DBUS_TYPE_STRING, &c->path) ||
|
|
!dbus_message_iter_open_container(&sub2, DBUS_TYPE_ARRAY, "s", &sub3))
|
|
return -ENOMEM;
|
|
|
|
STRV_FOREACH(l, c->argv)
|
|
if (!dbus_message_iter_append_basic(&sub3, DBUS_TYPE_STRING, l))
|
|
return -ENOMEM;
|
|
|
|
pid = (uint32_t) c->exec_status.pid;
|
|
code = (int32_t) c->exec_status.code;
|
|
status = (int32_t) c->exec_status.status;
|
|
|
|
b = !!c->ignore;
|
|
|
|
if (!dbus_message_iter_close_container(&sub2, &sub3) ||
|
|
!dbus_message_iter_append_basic(&sub2, DBUS_TYPE_BOOLEAN, &b) ||
|
|
!dbus_message_iter_append_basic(&sub2, DBUS_TYPE_UINT64, &c->exec_status.start_timestamp.realtime) ||
|
|
!dbus_message_iter_append_basic(&sub2, DBUS_TYPE_UINT64, &c->exec_status.start_timestamp.monotonic) ||
|
|
!dbus_message_iter_append_basic(&sub2, DBUS_TYPE_UINT64, &c->exec_status.exit_timestamp.realtime) ||
|
|
!dbus_message_iter_append_basic(&sub2, DBUS_TYPE_UINT64, &c->exec_status.exit_timestamp.monotonic) ||
|
|
!dbus_message_iter_append_basic(&sub2, DBUS_TYPE_UINT32, &pid) ||
|
|
!dbus_message_iter_append_basic(&sub2, DBUS_TYPE_INT32, &code) ||
|
|
!dbus_message_iter_append_basic(&sub2, DBUS_TYPE_INT32, &status))
|
|
return -ENOMEM;
|
|
|
|
if (!dbus_message_iter_close_container(&sub, &sub2))
|
|
return -ENOMEM;
|
|
}
|
|
|
|
if (!dbus_message_iter_close_container(i, &sub))
|
|
return -ENOMEM;
|
|
|
|
return 0;
|
|
}
|
|
|
|
const BusProperty bus_exec_context_properties[] = {
|
|
{ "Environment", bus_property_append_strv, "as", offsetof(ExecContext, environment), true },
|
|
{ "EnvironmentFiles", bus_execute_append_env_files, "a(sb)", offsetof(ExecContext, environment_files), true },
|
|
{ "UMask", bus_property_append_mode, "u", offsetof(ExecContext, umask) },
|
|
{ "LimitCPU", bus_execute_append_rlimits, "t", 0 },
|
|
{ "LimitFSIZE", bus_execute_append_rlimits, "t", 0 },
|
|
{ "LimitDATA", bus_execute_append_rlimits, "t", 0 },
|
|
{ "LimitSTACK", bus_execute_append_rlimits, "t", 0 },
|
|
{ "LimitCORE", bus_execute_append_rlimits, "t", 0 },
|
|
{ "LimitRSS", bus_execute_append_rlimits, "t", 0 },
|
|
{ "LimitNOFILE", bus_execute_append_rlimits, "t", 0 },
|
|
{ "LimitAS", bus_execute_append_rlimits, "t", 0 },
|
|
{ "LimitNPROC", bus_execute_append_rlimits, "t", 0 },
|
|
{ "LimitMEMLOCK", bus_execute_append_rlimits, "t", 0 },
|
|
{ "LimitLOCKS", bus_execute_append_rlimits, "t", 0 },
|
|
{ "LimitSIGPENDING", bus_execute_append_rlimits, "t", 0 },
|
|
{ "LimitMSGQUEUE", bus_execute_append_rlimits, "t", 0 },
|
|
{ "LimitNICE", bus_execute_append_rlimits, "t", 0 },
|
|
{ "LimitRTPRIO", bus_execute_append_rlimits, "t", 0 },
|
|
{ "LimitRTTIME", bus_execute_append_rlimits, "t", 0 },
|
|
{ "WorkingDirectory", bus_property_append_string, "s", offsetof(ExecContext, working_directory), true },
|
|
{ "RootDirectory", bus_property_append_string, "s", offsetof(ExecContext, root_directory), true },
|
|
{ "OOMScoreAdjust", bus_execute_append_oom_score_adjust, "i", 0 },
|
|
{ "Nice", bus_execute_append_nice, "i", 0 },
|
|
{ "IOScheduling", bus_execute_append_ioprio, "i", 0 },
|
|
{ "CPUSchedulingPolicy", bus_execute_append_cpu_sched_policy, "i", 0 },
|
|
{ "CPUSchedulingPriority", bus_execute_append_cpu_sched_priority, "i", 0 },
|
|
{ "CPUAffinity", bus_execute_append_affinity, "ay", 0 },
|
|
{ "TimerSlackNSec", bus_execute_append_timer_slack_nsec, "t", 0 },
|
|
{ "CPUSchedulingResetOnFork", bus_property_append_bool, "b", offsetof(ExecContext, cpu_sched_reset_on_fork) },
|
|
{ "NonBlocking", bus_property_append_bool, "b", offsetof(ExecContext, non_blocking) },
|
|
{ "StandardInput", bus_execute_append_input, "s", offsetof(ExecContext, std_input) },
|
|
{ "StandardOutput", bus_execute_append_output, "s", offsetof(ExecContext, std_output) },
|
|
{ "StandardError", bus_execute_append_output, "s", offsetof(ExecContext, std_error) },
|
|
{ "TTYPath", bus_property_append_string, "s", offsetof(ExecContext, tty_path), true },
|
|
{ "TTYReset", bus_property_append_bool, "b", offsetof(ExecContext, tty_reset) },
|
|
{ "TTYVHangup", bus_property_append_bool, "b", offsetof(ExecContext, tty_vhangup) },
|
|
{ "TTYVTDisallocate", bus_property_append_bool, "b", offsetof(ExecContext, tty_vt_disallocate) },
|
|
{ "SyslogPriority", bus_property_append_int, "i", offsetof(ExecContext, syslog_priority) },
|
|
{ "SyslogIdentifier", bus_property_append_string, "s", offsetof(ExecContext, syslog_identifier), true },
|
|
{ "SyslogLevelPrefix", bus_property_append_bool, "b", offsetof(ExecContext, syslog_level_prefix) },
|
|
{ "Capabilities", bus_execute_append_capabilities, "s", 0 },
|
|
{ "SecureBits", bus_property_append_int, "i", offsetof(ExecContext, secure_bits) },
|
|
{ "CapabilityBoundingSet", bus_execute_append_capability_bs, "t", offsetof(ExecContext, capability_bounding_set_drop) },
|
|
{ "User", bus_property_append_string, "s", offsetof(ExecContext, user), true },
|
|
{ "Group", bus_property_append_string, "s", offsetof(ExecContext, group), true },
|
|
{ "SupplementaryGroups", bus_property_append_strv, "as", offsetof(ExecContext, supplementary_groups), true },
|
|
{ "TCPWrapName", bus_property_append_string, "s", offsetof(ExecContext, tcpwrap_name), true },
|
|
{ "PAMName", bus_property_append_string, "s", offsetof(ExecContext, pam_name), true },
|
|
{ "ReadWriteDirectories", bus_property_append_strv, "as", offsetof(ExecContext, read_write_dirs), true },
|
|
{ "ReadOnlyDirectories", bus_property_append_strv, "as", offsetof(ExecContext, read_only_dirs), true },
|
|
{ "InaccessibleDirectories", bus_property_append_strv, "as", offsetof(ExecContext, inaccessible_dirs), true },
|
|
{ "MountFlags", bus_property_append_ul, "t", offsetof(ExecContext, mount_flags) },
|
|
{ "PrivateTmp", bus_property_append_bool, "b", offsetof(ExecContext, private_tmp) },
|
|
{ "PrivateNetwork", bus_property_append_bool, "b", offsetof(ExecContext, private_network) },
|
|
{ "SameProcessGroup", bus_property_append_bool, "b", offsetof(ExecContext, same_pgrp) },
|
|
{ "KillMode", bus_execute_append_kill_mode, "s", offsetof(ExecContext, kill_mode) },
|
|
{ "KillSignal", bus_property_append_int, "i", offsetof(ExecContext, kill_signal) },
|
|
{ "UtmpIdentifier", bus_property_append_string, "s", offsetof(ExecContext, utmp_id), true },
|
|
{ "ControlGroupModify", bus_property_append_bool, "b", offsetof(ExecContext, control_group_modify) },
|
|
{ "ControlGroupPersistent", bus_property_append_tristate_false, "b", offsetof(ExecContext, control_group_persistent) },
|
|
{ "IgnoreSIGPIPE", bus_property_append_bool, "b", offsetof(ExecContext, ignore_sigpipe ) },
|
|
{ NULL, }
|
|
};
|