adacb9575a
Introduces a new concept of "trusted" vs. "untrusted" busses. For the latter libsystemd-bus will automatically do per-method access control, for the former all access is automatically granted. Per-method access control is encoded in the vtables: by default all methods are only accessible to privileged clients. If the SD_BUS_VTABLE_UNPRIVILEGED flag is set for a method it is accessible to unprivileged clients too. By default whether a client is privileged is determined via checking for its CAP_SYS_ADMIN capability, but this can be altered via the SD_BUS_VTABLE_CAPABILITY() macro that can be ORed into the flags field of the method. Writable properties are also subject to SD_BUS_VTABLE_UNPRIVILEGED and SD_BUS_VTABLE_CAPABILITY() for controlling write access to them. Note however that read access is unrestricted, as PropertiesChanged messages might send out the values anyway as an unrestricted broadcast. By default the system bus is set to "untrusted" and the user bus is "trusted" since per-method access control on the latter is unnecessary. On dbus1 busses we check the UID of the caller rather than the configured capability since the capability cannot be determined without race. On kdbus the capability is checked if possible from the attached meta-data of a message and otherwise queried from the sending peer. This also decorates the vtables of the various daemons we ship with these flags.
696 lines
21 KiB
C
696 lines
21 KiB
C
/*-*- Mode: C; c-basic-offset: 8; indent-tabs-mode: nil -*-*/
|
|
|
|
/***
|
|
This file is part of systemd.
|
|
|
|
Copyright 2011 Lennart Poettering
|
|
|
|
systemd is free software; you can redistribute it and/or modify it
|
|
under the terms of the GNU Lesser General Public License as published by
|
|
the Free Software Foundation; either version 2.1 of the License, or
|
|
(at your option) any later version.
|
|
|
|
systemd is distributed in the hope that it will be useful, but
|
|
WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
Lesser General Public License for more details.
|
|
|
|
You should have received a copy of the GNU Lesser General Public License
|
|
along with systemd; If not, see <http://www.gnu.org/licenses/>.
|
|
***/
|
|
|
|
#include <errno.h>
|
|
#include <string.h>
|
|
#include <sys/capability.h>
|
|
|
|
#include "util.h"
|
|
#include "strv.h"
|
|
#include "bus-util.h"
|
|
#include "bus-errors.h"
|
|
|
|
#include "logind.h"
|
|
#include "logind-session.h"
|
|
#include "logind-session-device.h"
|
|
|
|
static int property_get_user(
|
|
sd_bus *bus,
|
|
const char *path,
|
|
const char *interface,
|
|
const char *property,
|
|
sd_bus_message *reply,
|
|
void *userdata,
|
|
sd_bus_error *error) {
|
|
|
|
_cleanup_free_ char *p = NULL;
|
|
Session *s = userdata;
|
|
|
|
assert(bus);
|
|
assert(reply);
|
|
assert(s);
|
|
|
|
p = user_bus_path(s->user);
|
|
if (!p)
|
|
return -ENOMEM;
|
|
|
|
return sd_bus_message_append(reply, "(uo)", (uint32_t) s->user->uid, p);
|
|
}
|
|
|
|
static int property_get_name(
|
|
sd_bus *bus,
|
|
const char *path,
|
|
const char *interface,
|
|
const char *property,
|
|
sd_bus_message *reply,
|
|
void *userdata,
|
|
sd_bus_error *error) {
|
|
|
|
Session *s = userdata;
|
|
|
|
assert(bus);
|
|
assert(reply);
|
|
assert(s);
|
|
|
|
return sd_bus_message_append(reply, "s", s->user->name);
|
|
}
|
|
|
|
static int property_get_seat(
|
|
sd_bus *bus,
|
|
const char *path,
|
|
const char *interface,
|
|
const char *property,
|
|
sd_bus_message *reply,
|
|
void *userdata,
|
|
sd_bus_error *error) {
|
|
|
|
_cleanup_free_ char *p = NULL;
|
|
Session *s = userdata;
|
|
|
|
assert(bus);
|
|
assert(reply);
|
|
assert(s);
|
|
|
|
p = s->seat ? seat_bus_path(s->seat) : strdup("/");
|
|
if (!p)
|
|
return -ENOMEM;
|
|
|
|
return sd_bus_message_append(reply, "(so)", s->seat ? s->seat->id : "", p);
|
|
}
|
|
|
|
static BUS_DEFINE_PROPERTY_GET_ENUM(property_get_type, session_type, SessionType);
|
|
static BUS_DEFINE_PROPERTY_GET_ENUM(property_get_class, session_class, SessionClass);
|
|
|
|
static int property_get_active(
|
|
sd_bus *bus,
|
|
const char *path,
|
|
const char *interface,
|
|
const char *property,
|
|
sd_bus_message *reply,
|
|
void *userdata,
|
|
sd_bus_error *error) {
|
|
|
|
Session *s = userdata;
|
|
|
|
assert(bus);
|
|
assert(reply);
|
|
assert(s);
|
|
|
|
return sd_bus_message_append(reply, "b", session_is_active(s));
|
|
}
|
|
|
|
static int property_get_state(
|
|
sd_bus *bus,
|
|
const char *path,
|
|
const char *interface,
|
|
const char *property,
|
|
sd_bus_message *reply,
|
|
void *userdata,
|
|
sd_bus_error *error) {
|
|
|
|
Session *s = userdata;
|
|
|
|
assert(bus);
|
|
assert(reply);
|
|
assert(s);
|
|
|
|
return sd_bus_message_append(reply, "s", session_state_to_string(session_get_state(s)));
|
|
}
|
|
|
|
static int property_get_idle_hint(
|
|
sd_bus *bus,
|
|
const char *path,
|
|
const char *interface,
|
|
const char *property,
|
|
sd_bus_message *reply,
|
|
void *userdata,
|
|
sd_bus_error *error) {
|
|
|
|
Session *s = userdata;
|
|
|
|
assert(bus);
|
|
assert(reply);
|
|
assert(s);
|
|
|
|
return sd_bus_message_append(reply, "b", session_get_idle_hint(s, NULL) > 0);
|
|
}
|
|
|
|
static int property_get_idle_since_hint(
|
|
sd_bus *bus,
|
|
const char *path,
|
|
const char *interface,
|
|
const char *property,
|
|
sd_bus_message *reply,
|
|
void *userdata,
|
|
sd_bus_error *error) {
|
|
|
|
Session *s = userdata;
|
|
dual_timestamp t;
|
|
uint64_t u;
|
|
int r;
|
|
|
|
assert(bus);
|
|
assert(reply);
|
|
assert(s);
|
|
|
|
r = session_get_idle_hint(s, &t);
|
|
if (r < 0)
|
|
return r;
|
|
|
|
u = streq(property, "IdleSinceHint") ? t.realtime : t.monotonic;
|
|
|
|
return sd_bus_message_append(reply, "t", u);
|
|
}
|
|
|
|
static int method_terminate(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) {
|
|
Session *s = userdata;
|
|
int r;
|
|
|
|
assert(bus);
|
|
assert(message);
|
|
assert(s);
|
|
|
|
r = session_stop(s);
|
|
if (r < 0)
|
|
return r;
|
|
|
|
return sd_bus_reply_method_return(message, NULL);
|
|
}
|
|
|
|
static int method_activate(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) {
|
|
Session *s = userdata;
|
|
int r;
|
|
|
|
assert(bus);
|
|
assert(message);
|
|
assert(s);
|
|
|
|
r = session_activate(s);
|
|
if (r < 0)
|
|
return r;
|
|
|
|
return sd_bus_reply_method_return(message, NULL);
|
|
}
|
|
|
|
static int method_lock(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) {
|
|
Session *s = userdata;
|
|
int r;
|
|
|
|
assert(bus);
|
|
assert(message);
|
|
assert(s);
|
|
|
|
r = session_send_lock(s, streq(sd_bus_message_get_member(message), "Lock"));
|
|
if (r < 0)
|
|
return r;
|
|
|
|
return sd_bus_reply_method_return(message, NULL);
|
|
}
|
|
|
|
static int method_set_idle_hint(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) {
|
|
_cleanup_bus_creds_unref_ sd_bus_creds *creds = NULL;
|
|
Session *s = userdata;
|
|
uid_t uid;
|
|
int r, b;
|
|
|
|
assert(bus);
|
|
assert(message);
|
|
assert(s);
|
|
|
|
r = sd_bus_message_read(message, "b", &b);
|
|
if (r < 0)
|
|
return r;
|
|
|
|
r = sd_bus_query_sender_creds(message, SD_BUS_CREDS_UID, &creds);
|
|
if (r < 0)
|
|
return r;
|
|
|
|
r = sd_bus_creds_get_uid(creds, &uid);
|
|
if (r < 0)
|
|
return r;
|
|
|
|
if (uid != 0 && uid != s->user->uid)
|
|
return sd_bus_error_setf(error, SD_BUS_ERROR_ACCESS_DENIED, "Only owner of session my set idle hint");
|
|
|
|
session_set_idle_hint(s, b);
|
|
|
|
return sd_bus_reply_method_return(message, NULL);
|
|
}
|
|
|
|
static int method_kill(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) {
|
|
Session *s = userdata;
|
|
const char *swho;
|
|
int32_t signo;
|
|
KillWho who;
|
|
int r;
|
|
|
|
assert(bus);
|
|
assert(message);
|
|
assert(s);
|
|
|
|
r = sd_bus_message_read(message, "si", &swho, &signo);
|
|
if (r < 0)
|
|
return r;
|
|
|
|
if (isempty(swho))
|
|
who = KILL_ALL;
|
|
else {
|
|
who = kill_who_from_string(swho);
|
|
if (who < 0)
|
|
return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Invalid kill parameter '%s'", swho);
|
|
}
|
|
|
|
if (signo <= 0 || signo >= _NSIG)
|
|
return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Invalid signal %i", signo);
|
|
|
|
r = session_kill(s, who, signo);
|
|
if (r < 0)
|
|
return r;
|
|
|
|
return sd_bus_reply_method_return(message, NULL);
|
|
}
|
|
|
|
static int method_take_control(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) {
|
|
_cleanup_bus_creds_unref_ sd_bus_creds *creds = NULL;
|
|
Session *s = userdata;
|
|
int r, force;
|
|
uid_t uid;
|
|
|
|
assert(bus);
|
|
assert(message);
|
|
assert(s);
|
|
|
|
r = sd_bus_message_read(message, "b", &force);
|
|
if (r < 0)
|
|
return r;
|
|
|
|
r = sd_bus_query_sender_creds(message, SD_BUS_CREDS_UID, &creds);
|
|
if (r < 0)
|
|
return r;
|
|
|
|
r = sd_bus_creds_get_uid(creds, &uid);
|
|
if (r < 0)
|
|
return r;
|
|
|
|
if (uid != 0 && (force || uid != s->user->uid))
|
|
return sd_bus_error_setf(error, SD_BUS_ERROR_ACCESS_DENIED, "Only owner of session may take control");
|
|
|
|
r = session_set_controller(s, sd_bus_message_get_sender(message), force);
|
|
if (r < 0)
|
|
return r;
|
|
|
|
return sd_bus_reply_method_return(message, NULL);
|
|
}
|
|
|
|
static int method_release_control(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) {
|
|
Session *s = userdata;
|
|
|
|
assert(bus);
|
|
assert(message);
|
|
assert(s);
|
|
|
|
if (!session_is_controller(s, sd_bus_message_get_sender(message)))
|
|
return sd_bus_error_setf(error, BUS_ERROR_NOT_IN_CONTROL, "You are not in control of this session");
|
|
|
|
session_drop_controller(s);
|
|
|
|
return sd_bus_reply_method_return(message, NULL);
|
|
}
|
|
|
|
static int method_take_device(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) {
|
|
Session *s = userdata;
|
|
uint32_t major, minor;
|
|
SessionDevice *sd;
|
|
dev_t dev;
|
|
int r;
|
|
|
|
assert(bus);
|
|
assert(message);
|
|
assert(s);
|
|
|
|
r = sd_bus_message_read(message, "uu", &major, &minor);
|
|
if (r < 0)
|
|
return r;
|
|
|
|
if (!session_is_controller(s, sd_bus_message_get_sender(message)))
|
|
return sd_bus_error_setf(error, BUS_ERROR_NOT_IN_CONTROL, "You are not in control of this session");
|
|
|
|
dev = makedev(major, minor);
|
|
sd = hashmap_get(s->devices, &dev);
|
|
if (sd)
|
|
/* We don't allow retrieving a device multiple times.
|
|
* The related ReleaseDevice call is not ref-counted.
|
|
* The caller should use dup() if it requires more
|
|
* than one fd (it would be functionally
|
|
* equivalent). */
|
|
return sd_bus_error_setf(error, BUS_ERROR_DEVICE_IS_TAKEN, "Device already taken");
|
|
|
|
r = session_device_new(s, dev, &sd);
|
|
if (r < 0)
|
|
return r;
|
|
|
|
r = sd_bus_reply_method_return(message, "hb", sd->fd, !sd->active);
|
|
if (r < 0)
|
|
session_device_free(sd);
|
|
|
|
return r;
|
|
}
|
|
|
|
static int method_release_device(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) {
|
|
Session *s = userdata;
|
|
uint32_t major, minor;
|
|
SessionDevice *sd;
|
|
dev_t dev;
|
|
int r;
|
|
|
|
assert(bus);
|
|
assert(message);
|
|
assert(s);
|
|
|
|
r = sd_bus_message_read(message, "uu", &major, &minor);
|
|
if (r < 0)
|
|
return r;
|
|
|
|
if (!session_is_controller(s, sd_bus_message_get_sender(message)))
|
|
return sd_bus_error_setf(error, BUS_ERROR_NOT_IN_CONTROL, "You are not in control of this session");
|
|
|
|
dev = makedev(major, minor);
|
|
sd = hashmap_get(s->devices, &dev);
|
|
if (!sd)
|
|
return sd_bus_error_setf(error, BUS_ERROR_DEVICE_NOT_TAKEN, "Device not taken");
|
|
|
|
session_device_free(sd);
|
|
return sd_bus_reply_method_return(message, NULL);
|
|
}
|
|
|
|
static int method_pause_device_complete(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) {
|
|
Session *s = userdata;
|
|
uint32_t major, minor;
|
|
SessionDevice *sd;
|
|
dev_t dev;
|
|
int r;
|
|
|
|
assert(bus);
|
|
assert(message);
|
|
assert(s);
|
|
|
|
r = sd_bus_message_read(message, "uu", &major, &minor);
|
|
if (r < 0)
|
|
return r;
|
|
|
|
if (!session_is_controller(s, sd_bus_message_get_sender(message)))
|
|
return sd_bus_error_setf(error, BUS_ERROR_NOT_IN_CONTROL, "You are not in control of this session");
|
|
|
|
dev = makedev(major, minor);
|
|
sd = hashmap_get(s->devices, &dev);
|
|
if (!sd)
|
|
return sd_bus_error_setf(error, BUS_ERROR_DEVICE_NOT_TAKEN, "Device not taken");
|
|
|
|
session_device_complete_pause(sd);
|
|
|
|
return sd_bus_reply_method_return(message, NULL);
|
|
}
|
|
|
|
const sd_bus_vtable session_vtable[] = {
|
|
SD_BUS_VTABLE_START(0),
|
|
|
|
SD_BUS_PROPERTY("Id", "s", NULL, offsetof(Session, id), 0),
|
|
SD_BUS_PROPERTY("User", "(uo)", property_get_user, 0, 0),
|
|
SD_BUS_PROPERTY("Name", "s", property_get_name, 0, 0),
|
|
SD_BUS_PROPERTY("Timestamp", "t", NULL, offsetof(Session, timestamp.realtime), 0),
|
|
SD_BUS_PROPERTY("TimestampMonotonic", "t", NULL, offsetof(Session, timestamp.monotonic), 0),
|
|
SD_BUS_PROPERTY("VTNr", "u", NULL, offsetof(Session, vtnr), 0),
|
|
SD_BUS_PROPERTY("Seat", "(so)", property_get_seat, 0, 0),
|
|
SD_BUS_PROPERTY("TTY", "s", NULL, offsetof(Session, tty), 0),
|
|
SD_BUS_PROPERTY("Display", "s", NULL, offsetof(Session, display), 0),
|
|
SD_BUS_PROPERTY("Remote", "b", bus_property_get_bool, offsetof(Session, remote), 0),
|
|
SD_BUS_PROPERTY("RemoteHost", "s", NULL, offsetof(Session, remote_host), 0),
|
|
SD_BUS_PROPERTY("RemoteUser", "s", NULL, offsetof(Session, remote_user), 0),
|
|
SD_BUS_PROPERTY("Service", "s", NULL, offsetof(Session, service), 0),
|
|
SD_BUS_PROPERTY("Scope", "s", NULL, offsetof(Session, scope), 0),
|
|
SD_BUS_PROPERTY("Leader", "u", bus_property_get_pid, offsetof(Session, leader), 0),
|
|
SD_BUS_PROPERTY("Audit", "u", NULL, offsetof(Session, audit_id), 0),
|
|
SD_BUS_PROPERTY("Type", "s", property_get_type, offsetof(Session, type), 0),
|
|
SD_BUS_PROPERTY("Class", "s", property_get_class, offsetof(Session, class), 0),
|
|
SD_BUS_PROPERTY("Active", "b", property_get_active, 0, SD_BUS_VTABLE_PROPERTY_EMITS_CHANGE),
|
|
SD_BUS_PROPERTY("State", "s", property_get_state, 0, 0),
|
|
SD_BUS_PROPERTY("IdleHint", "b", property_get_idle_hint, 0, SD_BUS_VTABLE_PROPERTY_EMITS_CHANGE),
|
|
SD_BUS_PROPERTY("IdleSinceHint", "t", property_get_idle_since_hint, 0, SD_BUS_VTABLE_PROPERTY_EMITS_CHANGE),
|
|
SD_BUS_PROPERTY("IdleSinceHintMonotonic", "t", property_get_idle_since_hint, 0, SD_BUS_VTABLE_PROPERTY_EMITS_CHANGE),
|
|
|
|
SD_BUS_METHOD("Terminate", NULL, NULL, method_terminate, SD_BUS_VTABLE_CAPABILITY(CAP_KILL)),
|
|
SD_BUS_METHOD("Activate", NULL, NULL, method_activate, SD_BUS_VTABLE_UNPRIVILEGED),
|
|
SD_BUS_METHOD("Lock", NULL, NULL, method_lock, 0),
|
|
SD_BUS_METHOD("Unlock", NULL, NULL, method_lock, 0),
|
|
SD_BUS_METHOD("SetIdleHint", "b", NULL, method_set_idle_hint, SD_BUS_VTABLE_UNPRIVILEGED),
|
|
SD_BUS_METHOD("Kill", "si", NULL, method_kill, SD_BUS_VTABLE_CAPABILITY(CAP_KILL)),
|
|
SD_BUS_METHOD("TakeControl", "b", NULL, method_take_control, SD_BUS_VTABLE_UNPRIVILEGED),
|
|
SD_BUS_METHOD("ReleaseControl", NULL, NULL, method_release_control, SD_BUS_VTABLE_UNPRIVILEGED),
|
|
SD_BUS_METHOD("TakeDevice", "uu", "hb", method_take_device, SD_BUS_VTABLE_UNPRIVILEGED),
|
|
SD_BUS_METHOD("ReleaseDevice", "uu", NULL, method_release_device, SD_BUS_VTABLE_UNPRIVILEGED),
|
|
SD_BUS_METHOD("PauseDeviceComplete", "uu", NULL, method_pause_device_complete, SD_BUS_VTABLE_UNPRIVILEGED),
|
|
|
|
SD_BUS_SIGNAL("PauseDevice", "uus", 0),
|
|
SD_BUS_SIGNAL("ResumeDevice", "uuh", 0),
|
|
SD_BUS_SIGNAL("Lock", NULL, 0),
|
|
SD_BUS_SIGNAL("Unlock", NULL, 0),
|
|
|
|
SD_BUS_VTABLE_END
|
|
};
|
|
|
|
int session_object_find(sd_bus *bus, const char *path, const char *interface, void *userdata, void **found, sd_bus_error *error) {
|
|
Manager *m = userdata;
|
|
Session *session;
|
|
int r;
|
|
|
|
assert(bus);
|
|
assert(path);
|
|
assert(interface);
|
|
assert(found);
|
|
assert(m);
|
|
|
|
if (streq(path, "/org/freedesktop/login1/session/self")) {
|
|
_cleanup_bus_creds_unref_ sd_bus_creds *creds = NULL;
|
|
sd_bus_message *message;
|
|
pid_t pid;
|
|
|
|
message = sd_bus_get_current(bus);
|
|
if (!message)
|
|
return 0;
|
|
|
|
r = sd_bus_query_sender_creds(message, SD_BUS_CREDS_PID, &creds);
|
|
if (r < 0)
|
|
return r;
|
|
|
|
r = sd_bus_creds_get_pid(creds, &pid);
|
|
if (r < 0)
|
|
return r;
|
|
|
|
r = manager_get_session_by_pid(m, pid, &session);
|
|
if (r <= 0)
|
|
return 0;
|
|
} else {
|
|
_cleanup_free_ char *e = NULL;
|
|
const char *p;
|
|
|
|
p = startswith(path, "/org/freedesktop/login1/session/");
|
|
if (!p)
|
|
return 0;
|
|
|
|
e = sd_bus_label_unescape(p);
|
|
if (!e)
|
|
return -ENOMEM;
|
|
|
|
session = hashmap_get(m->sessions, e);
|
|
if (!session)
|
|
return 0;
|
|
}
|
|
|
|
*found = session;
|
|
return 1;
|
|
}
|
|
|
|
char *session_bus_path(Session *s) {
|
|
_cleanup_free_ char *t = NULL;
|
|
|
|
assert(s);
|
|
|
|
t = sd_bus_label_escape(s->id);
|
|
if (!t)
|
|
return NULL;
|
|
|
|
return strappend("/org/freedesktop/login1/session/", t);
|
|
}
|
|
|
|
int session_node_enumerator(sd_bus *bus, const char *path, void *userdata, char ***nodes, sd_bus_error *error) {
|
|
_cleanup_strv_free_ char **l = NULL;
|
|
Manager *m = userdata;
|
|
Session *session;
|
|
Iterator i;
|
|
int r;
|
|
|
|
assert(bus);
|
|
assert(path);
|
|
assert(nodes);
|
|
|
|
HASHMAP_FOREACH(session, m->sessions, i) {
|
|
char *p;
|
|
|
|
p = session_bus_path(session);
|
|
if (!p)
|
|
return -ENOMEM;
|
|
|
|
r = strv_push(&l, p);
|
|
if (r < 0) {
|
|
free(p);
|
|
return r;
|
|
}
|
|
}
|
|
|
|
*nodes = l;
|
|
l = NULL;
|
|
|
|
return 1;
|
|
}
|
|
|
|
int session_send_signal(Session *s, bool new_session) {
|
|
_cleanup_free_ char *p = NULL;
|
|
|
|
assert(s);
|
|
|
|
p = session_bus_path(s);
|
|
if (!p)
|
|
return -ENOMEM;
|
|
|
|
return sd_bus_emit_signal(
|
|
s->manager->bus,
|
|
"/org/freedesktop/login1",
|
|
"org.freedesktop.login1.Manager",
|
|
new_session ? "SessionNew" : "SessionRemoved",
|
|
"so", s->id, p);
|
|
}
|
|
|
|
int session_send_changed(Session *s, const char *properties, ...) {
|
|
_cleanup_free_ char *p = NULL;
|
|
char **l;
|
|
|
|
assert(s);
|
|
|
|
if (!s->started)
|
|
return 0;
|
|
|
|
p = session_bus_path(s);
|
|
if (!p)
|
|
return -ENOMEM;
|
|
|
|
l = strv_from_stdarg_alloca(properties);
|
|
|
|
return sd_bus_emit_properties_changed_strv(s->manager->bus, p, "org.freedesktop.login1.Session", l);
|
|
}
|
|
|
|
int session_send_lock(Session *s, bool lock) {
|
|
_cleanup_free_ char *p = NULL;
|
|
|
|
assert(s);
|
|
|
|
p = session_bus_path(s);
|
|
if (!p)
|
|
return -ENOMEM;
|
|
|
|
return sd_bus_emit_signal(
|
|
s->manager->bus,
|
|
p,
|
|
"org.freedesktop.login1.Session",
|
|
lock ? "Lock" : "Unlock",
|
|
NULL);
|
|
}
|
|
|
|
int session_send_lock_all(Manager *m, bool lock) {
|
|
Session *session;
|
|
Iterator i;
|
|
int r = 0;
|
|
|
|
assert(m);
|
|
|
|
HASHMAP_FOREACH(session, m->sessions, i) {
|
|
int k;
|
|
|
|
k = session_send_lock(session, lock);
|
|
if (k < 0)
|
|
r = k;
|
|
}
|
|
|
|
return r;
|
|
}
|
|
|
|
int session_send_create_reply(Session *s, sd_bus_error *error) {
|
|
_cleanup_bus_message_unref_ sd_bus_message *c = NULL;
|
|
_cleanup_close_ int fifo_fd = -1;
|
|
_cleanup_free_ char *p = NULL;
|
|
|
|
assert(s);
|
|
|
|
/* This is called after the session scope was successfully
|
|
* created, and finishes where bus_manager_create_session()
|
|
* left off. */
|
|
|
|
if (!s->create_message)
|
|
return 0;
|
|
|
|
c = s->create_message;
|
|
s->create_message = NULL;
|
|
|
|
if (error)
|
|
return sd_bus_reply_method_error(c, error);
|
|
|
|
fifo_fd = session_create_fifo(s);
|
|
if (fifo_fd < 0)
|
|
return fifo_fd;
|
|
|
|
/* Update the session state file before we notify the client
|
|
* about the result. */
|
|
session_save(s);
|
|
|
|
p = session_bus_path(s);
|
|
if (!p)
|
|
return -ENOMEM;
|
|
|
|
log_debug("Sending reply about created session: "
|
|
"id=%s object_path=%s runtime_path=%s session_fd=%d seat=%s vtnr=%u",
|
|
s->id,
|
|
p,
|
|
s->user->runtime_path,
|
|
fifo_fd,
|
|
s->seat ? s->seat->id : "",
|
|
(uint32_t) s->vtnr);
|
|
|
|
return sd_bus_reply_method_return(
|
|
c, "soshusub",
|
|
s->id,
|
|
p,
|
|
s->user->runtime_path,
|
|
fifo_fd,
|
|
(uint32_t) s->user->uid,
|
|
s->seat ? s->seat->id : "",
|
|
(uint32_t) s->vtnr,
|
|
false);
|
|
}
|