You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
1491 lines
54 KiB
1491 lines
54 KiB
/*
|
|
* Copyright (C) 2008 The Android Open Source Project
|
|
*
|
|
* Licensed under the Apache License, Version 2.0 (the "License");
|
|
* you may not use this file except in compliance with the License.
|
|
* You may obtain a copy of the License at
|
|
*
|
|
* http://www.apache.org/licenses/LICENSE-2.0
|
|
*
|
|
* Unless required by applicable law or agreed to in writing, software
|
|
* distributed under the License is distributed on an "AS IS" BASIS,
|
|
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
* See the License for the specific language governing permissions and
|
|
* limitations under the License.
|
|
*/
|
|
|
|
#include "builtins.h"
|
|
|
|
#include <android/api-level.h>
|
|
#include <dirent.h>
|
|
#include <errno.h>
|
|
#include <fcntl.h>
|
|
#include <fts.h>
|
|
#include <glob.h>
|
|
#include <linux/loop.h>
|
|
#include <linux/module.h>
|
|
#include <mntent.h>
|
|
#include <net/if.h>
|
|
#include <sched.h>
|
|
#include <signal.h>
|
|
#include <stdio.h>
|
|
#include <stdlib.h>
|
|
#include <string.h>
|
|
#include <sys/mount.h>
|
|
#include <sys/resource.h>
|
|
#include <sys/socket.h>
|
|
#include <sys/stat.h>
|
|
#include <sys/syscall.h>
|
|
#include <sys/system_properties.h>
|
|
#include <sys/time.h>
|
|
#include <sys/types.h>
|
|
#include <sys/wait.h>
|
|
#include <unistd.h>
|
|
|
|
#include <memory>
|
|
|
|
#include <ApexProperties.sysprop.h>
|
|
#include <InitProperties.sysprop.h>
|
|
#include <android-base/chrono_utils.h>
|
|
#include <android-base/file.h>
|
|
#include <android-base/logging.h>
|
|
#include <android-base/parsedouble.h>
|
|
#include <android-base/parseint.h>
|
|
#include <android-base/properties.h>
|
|
#include <android-base/stringprintf.h>
|
|
#include <android-base/strings.h>
|
|
#include <android-base/unique_fd.h>
|
|
#include <bootloader_message/bootloader_message.h>
|
|
#include <cutils/android_reboot.h>
|
|
#include <fs_mgr.h>
|
|
#include <fscrypt/fscrypt.h>
|
|
#include <libgsi/libgsi.h>
|
|
#include <logwrap/logwrap.h>
|
|
#include <private/android_filesystem_config.h>
|
|
#include <selinux/android.h>
|
|
#include <selinux/label.h>
|
|
#include <selinux/selinux.h>
|
|
#include <system/thread_defs.h>
|
|
|
|
#include "action_manager.h"
|
|
#include "bootchart.h"
|
|
#include "builtin_arguments.h"
|
|
#include "fscrypt_init_extensions.h"
|
|
#include "init.h"
|
|
#include "mount_namespace.h"
|
|
#include "parser.h"
|
|
#include "property_service.h"
|
|
#include "reboot.h"
|
|
#include "rlimit_parser.h"
|
|
#include "selabel.h"
|
|
#include "selinux.h"
|
|
#include "service.h"
|
|
#include "service_list.h"
|
|
#include "subcontext.h"
|
|
#include "util.h"
|
|
|
|
using namespace std::literals::string_literals;
|
|
|
|
using android::base::Basename;
|
|
using android::base::SetProperty;
|
|
using android::base::Split;
|
|
using android::base::StartsWith;
|
|
using android::base::StringPrintf;
|
|
using android::base::unique_fd;
|
|
using android::fs_mgr::Fstab;
|
|
using android::fs_mgr::ReadFstabFromFile;
|
|
|
|
#define chmod DO_NOT_USE_CHMOD_USE_FCHMODAT_SYMLINK_NOFOLLOW
|
|
|
|
namespace android {
|
|
namespace init {
|
|
|
|
// There are many legacy paths in rootdir/init.rc that will virtually never exist on a new
|
|
// device, such as '/sys/class/leds/jogball-backlight/brightness'. As of this writing, there
|
|
// are 81 such failures on cuttlefish. Instead of spamming the log reporting them, we do not
|
|
// report such failures unless we're running at the DEBUG log level.
|
|
class ErrorIgnoreEnoent {
|
|
public:
|
|
ErrorIgnoreEnoent()
|
|
: ignore_error_(errno == ENOENT &&
|
|
android::base::GetMinimumLogSeverity() > android::base::DEBUG) {}
|
|
explicit ErrorIgnoreEnoent(int errno_to_append)
|
|
: error_(errno_to_append),
|
|
ignore_error_(errno_to_append == ENOENT &&
|
|
android::base::GetMinimumLogSeverity() > android::base::DEBUG) {}
|
|
|
|
template <typename T>
|
|
operator android::base::expected<T, ResultError>() {
|
|
if (ignore_error_) {
|
|
return {};
|
|
}
|
|
return error_;
|
|
}
|
|
|
|
template <typename T>
|
|
ErrorIgnoreEnoent& operator<<(T&& t) {
|
|
error_ << t;
|
|
return *this;
|
|
}
|
|
|
|
private:
|
|
Error error_;
|
|
bool ignore_error_;
|
|
};
|
|
|
|
inline ErrorIgnoreEnoent ErrnoErrorIgnoreEnoent() {
|
|
return ErrorIgnoreEnoent(errno);
|
|
}
|
|
|
|
std::vector<std::string> late_import_paths;
|
|
|
|
static constexpr std::chrono::nanoseconds kCommandRetryTimeout = 5s;
|
|
|
|
static Result<void> reboot_into_recovery(const std::vector<std::string>& options) {
|
|
LOG(ERROR) << "Rebooting into recovery";
|
|
std::string err;
|
|
if (!write_bootloader_message(options, &err)) {
|
|
return Error() << "Failed to set bootloader message: " << err;
|
|
}
|
|
trigger_shutdown("reboot,recovery");
|
|
return {};
|
|
}
|
|
|
|
template <typename F>
|
|
static void ForEachServiceInClass(const std::string& classname, F function) {
|
|
for (const auto& service : ServiceList::GetInstance()) {
|
|
if (service->classnames().count(classname)) std::invoke(function, service);
|
|
}
|
|
}
|
|
|
|
static Result<void> do_class_start(const BuiltinArguments& args) {
|
|
// Do not start a class if it has a property persist.dont_start_class.CLASS set to 1.
|
|
if (android::base::GetBoolProperty("persist.init.dont_start_class." + args[1], false))
|
|
return {};
|
|
// Starting a class does not start services which are explicitly disabled.
|
|
// They must be started individually.
|
|
for (const auto& service : ServiceList::GetInstance()) {
|
|
if (service->classnames().count(args[1])) {
|
|
if (auto result = service->StartIfNotDisabled(); !result.ok()) {
|
|
LOG(ERROR) << "Could not start service '" << service->name()
|
|
<< "' as part of class '" << args[1] << "': " << result.error();
|
|
}
|
|
}
|
|
}
|
|
return {};
|
|
}
|
|
|
|
static Result<void> do_class_start_post_data(const BuiltinArguments& args) {
|
|
if (args.context != kInitContext) {
|
|
return Error() << "command 'class_start_post_data' only available in init context";
|
|
}
|
|
static bool is_apex_updatable = android::sysprop::ApexProperties::updatable().value_or(false);
|
|
|
|
if (!is_apex_updatable) {
|
|
// No need to start these on devices that don't support APEX, since they're not
|
|
// stopped either.
|
|
return {};
|
|
}
|
|
for (const auto& service : ServiceList::GetInstance()) {
|
|
if (service->classnames().count(args[1])) {
|
|
if (auto result = service->StartIfPostData(); !result.ok()) {
|
|
LOG(ERROR) << "Could not start service '" << service->name()
|
|
<< "' as part of class '" << args[1] << "': " << result.error();
|
|
}
|
|
}
|
|
}
|
|
return {};
|
|
}
|
|
|
|
static Result<void> do_class_stop(const BuiltinArguments& args) {
|
|
ForEachServiceInClass(args[1], &Service::Stop);
|
|
return {};
|
|
}
|
|
|
|
static Result<void> do_class_reset(const BuiltinArguments& args) {
|
|
ForEachServiceInClass(args[1], &Service::Reset);
|
|
return {};
|
|
}
|
|
|
|
static Result<void> do_class_reset_post_data(const BuiltinArguments& args) {
|
|
if (args.context != kInitContext) {
|
|
return Error() << "command 'class_reset_post_data' only available in init context";
|
|
}
|
|
static bool is_apex_updatable = android::sysprop::ApexProperties::updatable().value_or(false);
|
|
if (!is_apex_updatable) {
|
|
// No need to stop these on devices that don't support APEX.
|
|
return {};
|
|
}
|
|
ForEachServiceInClass(args[1], &Service::ResetIfPostData);
|
|
return {};
|
|
}
|
|
|
|
static Result<void> do_class_restart(const BuiltinArguments& args) {
|
|
// Do not restart a class if it has a property persist.dont_start_class.CLASS set to 1.
|
|
if (android::base::GetBoolProperty("persist.init.dont_start_class." + args[1], false))
|
|
return {};
|
|
ForEachServiceInClass(args[1], &Service::Restart);
|
|
return {};
|
|
}
|
|
|
|
static Result<void> do_domainname(const BuiltinArguments& args) {
|
|
if (auto result = WriteFile("/proc/sys/kernel/domainname", args[1]); !result.ok()) {
|
|
return Error() << "Unable to write to /proc/sys/kernel/domainname: " << result.error();
|
|
}
|
|
return {};
|
|
}
|
|
|
|
static Result<void> do_enable(const BuiltinArguments& args) {
|
|
Service* svc = ServiceList::GetInstance().FindService(args[1]);
|
|
if (!svc) return Error() << "Could not find service";
|
|
|
|
if (auto result = svc->Enable(); !result.ok()) {
|
|
return Error() << "Could not enable service: " << result.error();
|
|
}
|
|
|
|
return {};
|
|
}
|
|
|
|
static Result<void> do_exec(const BuiltinArguments& args) {
|
|
auto service = Service::MakeTemporaryOneshotService(args.args);
|
|
if (!service.ok()) {
|
|
return Error() << "Could not create exec service: " << service.error();
|
|
}
|
|
if (auto result = (*service)->ExecStart(); !result.ok()) {
|
|
return Error() << "Could not start exec service: " << result.error();
|
|
}
|
|
|
|
ServiceList::GetInstance().AddService(std::move(*service));
|
|
return {};
|
|
}
|
|
|
|
static Result<void> do_exec_background(const BuiltinArguments& args) {
|
|
auto service = Service::MakeTemporaryOneshotService(args.args);
|
|
if (!service.ok()) {
|
|
return Error() << "Could not create exec background service: " << service.error();
|
|
}
|
|
if (auto result = (*service)->Start(); !result.ok()) {
|
|
return Error() << "Could not start exec background service: " << result.error();
|
|
}
|
|
|
|
ServiceList::GetInstance().AddService(std::move(*service));
|
|
return {};
|
|
}
|
|
|
|
static Result<void> do_exec_start(const BuiltinArguments& args) {
|
|
Service* service = ServiceList::GetInstance().FindService(args[1]);
|
|
if (!service) {
|
|
return Error() << "Service not found";
|
|
}
|
|
|
|
if (auto result = service->ExecStart(); !result.ok()) {
|
|
return Error() << "Could not start exec service: " << result.error();
|
|
}
|
|
|
|
return {};
|
|
}
|
|
|
|
static Result<void> do_export(const BuiltinArguments& args) {
|
|
if (setenv(args[1].c_str(), args[2].c_str(), 1) == -1) {
|
|
return ErrnoError() << "setenv() failed";
|
|
}
|
|
return {};
|
|
}
|
|
|
|
static Result<void> do_load_exports(const BuiltinArguments& args) {
|
|
auto file_contents = ReadFile(args[1]);
|
|
if (!file_contents.ok()) {
|
|
return Error() << "Could not read input file '" << args[1]
|
|
<< "': " << file_contents.error();
|
|
}
|
|
|
|
auto lines = Split(*file_contents, "\n");
|
|
for (const auto& line : lines) {
|
|
if (line.empty()) {
|
|
continue;
|
|
}
|
|
|
|
auto env = Split(line, " ");
|
|
|
|
if (env.size() != 3) {
|
|
return ErrnoError() << "Expected a line as `export <name> <value>`, found: `" << line
|
|
<< "`";
|
|
}
|
|
|
|
if (env[0] != "export") {
|
|
return ErrnoError() << "Unknown action: '" << env[0] << "', expected 'export'";
|
|
}
|
|
|
|
if (setenv(env[1].c_str(), env[2].c_str(), 1) == -1) {
|
|
return ErrnoError() << "Failed to export '" << line << "' from " << args[1];
|
|
}
|
|
}
|
|
|
|
return {};
|
|
}
|
|
|
|
static Result<void> do_hostname(const BuiltinArguments& args) {
|
|
if (auto result = WriteFile("/proc/sys/kernel/hostname", args[1]); !result.ok()) {
|
|
return Error() << "Unable to write to /proc/sys/kernel/hostname: " << result.error();
|
|
}
|
|
return {};
|
|
}
|
|
|
|
static Result<void> do_ifup(const BuiltinArguments& args) {
|
|
struct ifreq ifr;
|
|
|
|
strlcpy(ifr.ifr_name, args[1].c_str(), IFNAMSIZ);
|
|
|
|
unique_fd s(TEMP_FAILURE_RETRY(socket(AF_INET, SOCK_DGRAM | SOCK_CLOEXEC, 0)));
|
|
if (s < 0) return ErrnoError() << "opening socket failed";
|
|
|
|
if (ioctl(s, SIOCGIFFLAGS, &ifr) < 0) {
|
|
return ErrnoError() << "ioctl(..., SIOCGIFFLAGS, ...) failed";
|
|
}
|
|
|
|
ifr.ifr_flags |= IFF_UP;
|
|
|
|
if (ioctl(s, SIOCSIFFLAGS, &ifr) < 0) {
|
|
return ErrnoError() << "ioctl(..., SIOCSIFFLAGS, ...) failed";
|
|
}
|
|
|
|
return {};
|
|
}
|
|
|
|
static Result<void> do_insmod(const BuiltinArguments& args) {
|
|
int flags = 0;
|
|
auto it = args.begin() + 1;
|
|
|
|
if (!(*it).compare("-f")) {
|
|
flags = MODULE_INIT_IGNORE_VERMAGIC | MODULE_INIT_IGNORE_MODVERSIONS;
|
|
it++;
|
|
}
|
|
|
|
std::string filename = *it++;
|
|
std::string options = android::base::Join(std::vector<std::string>(it, args.end()), ' ');
|
|
|
|
unique_fd fd(TEMP_FAILURE_RETRY(open(filename.c_str(), O_RDONLY | O_NOFOLLOW | O_CLOEXEC)));
|
|
if (fd == -1) return ErrnoError() << "open(\"" << filename << "\") failed";
|
|
|
|
int rc = syscall(__NR_finit_module, fd.get(), options.c_str(), flags);
|
|
if (rc == -1) return ErrnoError() << "finit_module for \"" << filename << "\" failed";
|
|
|
|
return {};
|
|
}
|
|
|
|
static Result<void> do_interface_restart(const BuiltinArguments& args) {
|
|
Service* svc = ServiceList::GetInstance().FindInterface(args[1]);
|
|
if (!svc) return Error() << "interface " << args[1] << " not found";
|
|
svc->Restart();
|
|
return {};
|
|
}
|
|
|
|
static Result<void> do_interface_start(const BuiltinArguments& args) {
|
|
Service* svc = ServiceList::GetInstance().FindInterface(args[1]);
|
|
if (!svc) return Error() << "interface " << args[1] << " not found";
|
|
if (auto result = svc->Start(); !result.ok()) {
|
|
return Error() << "Could not start interface: " << result.error();
|
|
}
|
|
return {};
|
|
}
|
|
|
|
static Result<void> do_interface_stop(const BuiltinArguments& args) {
|
|
Service* svc = ServiceList::GetInstance().FindInterface(args[1]);
|
|
if (!svc) return Error() << "interface " << args[1] << " not found";
|
|
svc->Stop();
|
|
return {};
|
|
}
|
|
|
|
static Result<void> make_dir_with_options(const MkdirOptions& options) {
|
|
std::string ref_basename;
|
|
if (options.ref_option == "ref") {
|
|
ref_basename = fscrypt_key_ref;
|
|
} else if (options.ref_option == "per_boot_ref") {
|
|
ref_basename = fscrypt_key_per_boot_ref;
|
|
} else {
|
|
return Error() << "Unknown key option: '" << options.ref_option << "'";
|
|
}
|
|
|
|
struct stat mstat;
|
|
if (lstat(options.target.c_str(), &mstat) != 0) {
|
|
if (errno != ENOENT) {
|
|
return ErrnoError() << "lstat() failed on " << options.target;
|
|
}
|
|
if (!make_dir(options.target, options.mode)) {
|
|
return ErrnoErrorIgnoreEnoent() << "mkdir() failed on " << options.target;
|
|
}
|
|
if (lstat(options.target.c_str(), &mstat) != 0) {
|
|
return ErrnoError() << "lstat() failed on new " << options.target;
|
|
}
|
|
}
|
|
if (!S_ISDIR(mstat.st_mode)) {
|
|
return Error() << "Not a directory on " << options.target;
|
|
}
|
|
bool needs_chmod = (mstat.st_mode & ~S_IFMT) != options.mode;
|
|
if ((options.uid != static_cast<uid_t>(-1) && options.uid != mstat.st_uid) ||
|
|
(options.gid != static_cast<gid_t>(-1) && options.gid != mstat.st_gid)) {
|
|
if (lchown(options.target.c_str(), options.uid, options.gid) == -1) {
|
|
return ErrnoError() << "lchown failed on " << options.target;
|
|
}
|
|
// chown may have cleared S_ISUID and S_ISGID, chmod again
|
|
needs_chmod = true;
|
|
}
|
|
if (needs_chmod) {
|
|
if (fchmodat(AT_FDCWD, options.target.c_str(), options.mode, AT_SYMLINK_NOFOLLOW) == -1) {
|
|
return ErrnoError() << "fchmodat() failed on " << options.target;
|
|
}
|
|
}
|
|
if (fscrypt_is_native()) {
|
|
if (!FscryptSetDirectoryPolicy(ref_basename, options.fscrypt_action, options.target)) {
|
|
return reboot_into_recovery(
|
|
{"--prompt_and_wipe_data", "--reason=set_policy_failed:"s + options.target});
|
|
}
|
|
}
|
|
return {};
|
|
}
|
|
|
|
// mkdir <path> [mode] [owner] [group] [<option> ...]
|
|
static Result<void> do_mkdir(const BuiltinArguments& args) {
|
|
auto options = ParseMkdir(args.args);
|
|
if (!options.ok()) return options.error();
|
|
return make_dir_with_options(*options);
|
|
}
|
|
|
|
/* umount <path> */
|
|
static Result<void> do_umount(const BuiltinArguments& args) {
|
|
if (umount(args[1].c_str()) < 0) {
|
|
return ErrnoError() << "umount() failed";
|
|
}
|
|
return {};
|
|
}
|
|
|
|
static struct {
|
|
const char *name;
|
|
unsigned flag;
|
|
} mount_flags[] = {
|
|
{ "noatime", MS_NOATIME },
|
|
{ "noexec", MS_NOEXEC },
|
|
{ "nosuid", MS_NOSUID },
|
|
{ "nodev", MS_NODEV },
|
|
{ "nodiratime", MS_NODIRATIME },
|
|
{ "ro", MS_RDONLY },
|
|
{ "rw", 0 },
|
|
{ "remount", MS_REMOUNT },
|
|
{ "bind", MS_BIND },
|
|
{ "rec", MS_REC },
|
|
{ "unbindable", MS_UNBINDABLE },
|
|
{ "private", MS_PRIVATE },
|
|
{ "slave", MS_SLAVE },
|
|
{ "shared", MS_SHARED },
|
|
{ "defaults", 0 },
|
|
{ 0, 0 },
|
|
};
|
|
|
|
#define DATA_MNT_POINT "/data"
|
|
|
|
/* mount <type> <device> <path> <flags ...> <options> */
|
|
static Result<void> do_mount(const BuiltinArguments& args) {
|
|
const char* options = nullptr;
|
|
unsigned flags = 0;
|
|
bool wait = false;
|
|
|
|
for (size_t na = 4; na < args.size(); na++) {
|
|
size_t i;
|
|
for (i = 0; mount_flags[i].name; i++) {
|
|
if (!args[na].compare(mount_flags[i].name)) {
|
|
flags |= mount_flags[i].flag;
|
|
break;
|
|
}
|
|
}
|
|
|
|
if (!mount_flags[i].name) {
|
|
if (!args[na].compare("wait")) {
|
|
wait = true;
|
|
// If our last argument isn't a flag, wolf it up as an option string.
|
|
} else if (na + 1 == args.size()) {
|
|
options = args[na].c_str();
|
|
}
|
|
}
|
|
}
|
|
|
|
const char* system = args[1].c_str();
|
|
const char* source = args[2].c_str();
|
|
const char* target = args[3].c_str();
|
|
|
|
if (android::base::StartsWith(source, "loop@")) {
|
|
int mode = (flags & MS_RDONLY) ? O_RDONLY : O_RDWR;
|
|
unique_fd fd(TEMP_FAILURE_RETRY(open(source + 5, mode | O_CLOEXEC)));
|
|
if (fd < 0) return ErrnoError() << "open(" << source + 5 << ", " << mode << ") failed";
|
|
|
|
for (size_t n = 0;; n++) {
|
|
std::string tmp = android::base::StringPrintf("/dev/block/loop%zu", n);
|
|
unique_fd loop(TEMP_FAILURE_RETRY(open(tmp.c_str(), mode | O_CLOEXEC)));
|
|
if (loop < 0) return ErrnoError() << "open(" << tmp << ", " << mode << ") failed";
|
|
|
|
loop_info info;
|
|
/* if it is a blank loop device */
|
|
if (ioctl(loop, LOOP_GET_STATUS, &info) < 0 && errno == ENXIO) {
|
|
/* if it becomes our loop device */
|
|
if (ioctl(loop, LOOP_SET_FD, fd.get()) >= 0) {
|
|
if (mount(tmp.c_str(), target, system, flags, options) < 0) {
|
|
ioctl(loop, LOOP_CLR_FD, 0);
|
|
return ErrnoError() << "mount() failed";
|
|
}
|
|
return {};
|
|
}
|
|
}
|
|
}
|
|
|
|
return Error() << "out of loopback devices";
|
|
} else {
|
|
if (wait)
|
|
wait_for_file(source, kCommandRetryTimeout);
|
|
if (mount(source, target, system, flags, options) < 0) {
|
|
return ErrnoErrorIgnoreEnoent() << "mount() failed";
|
|
}
|
|
|
|
}
|
|
|
|
return {};
|
|
}
|
|
|
|
/* Imports .rc files from the specified paths. Default ones are applied if none is given.
|
|
*
|
|
* rc_paths: list of paths to rc files to import
|
|
*/
|
|
static void import_late(const std::vector<std::string>& rc_paths) {
|
|
auto& action_manager = ActionManager::GetInstance();
|
|
auto& service_list = ServiceList::GetInstance();
|
|
Parser parser = CreateParser(action_manager, service_list);
|
|
if (rc_paths.empty()) {
|
|
// Fallbacks for partitions on which early mount isn't enabled.
|
|
for (const auto& path : late_import_paths) {
|
|
parser.ParseConfig(path);
|
|
}
|
|
late_import_paths.clear();
|
|
} else {
|
|
for (const auto& rc_path : rc_paths) {
|
|
parser.ParseConfig(rc_path);
|
|
}
|
|
}
|
|
|
|
// Turning this on and letting the INFO logging be discarded adds 0.2s to
|
|
// Nexus 9 boot time, so it's disabled by default.
|
|
if (false) DumpState();
|
|
}
|
|
|
|
/* Queue event based on fs_mgr return code.
|
|
*
|
|
* code: return code of fs_mgr_mount_all
|
|
*
|
|
* This function might request a reboot, in which case it will
|
|
* not return.
|
|
*
|
|
* return code is processed based on input code
|
|
*/
|
|
static Result<void> queue_fs_event(int code, bool userdata_remount) {
|
|
if (code == FS_MGR_MNTALL_DEV_NEEDS_ENCRYPTION) {
|
|
if (userdata_remount) {
|
|
// FS_MGR_MNTALL_DEV_NEEDS_ENCRYPTION should only happen on FDE devices. Since we don't
|
|
// support userdata remount on FDE devices, this should never been triggered. Time to
|
|
// panic!
|
|
LOG(ERROR) << "Userdata remount is not supported on FDE devices. How did you get here?";
|
|
trigger_shutdown("reboot,requested-userdata-remount-on-fde-device");
|
|
}
|
|
ActionManager::GetInstance().QueueEventTrigger("encrypt");
|
|
return {};
|
|
} else if (code == FS_MGR_MNTALL_DEV_MIGHT_BE_ENCRYPTED) {
|
|
if (userdata_remount) {
|
|
// FS_MGR_MNTALL_DEV_MIGHT_BE_ENCRYPTED should only happen on FDE devices. Since we
|
|
// don't support userdata remount on FDE devices, this should never been triggered.
|
|
// Time to panic!
|
|
LOG(ERROR) << "Userdata remount is not supported on FDE devices. How did you get here?";
|
|
trigger_shutdown("reboot,requested-userdata-remount-on-fde-device");
|
|
}
|
|
SetProperty("ro.crypto.state", "encrypted");
|
|
ActionManager::GetInstance().QueueEventTrigger("defaultcrypto");
|
|
return {};
|
|
} else if (code == FS_MGR_MNTALL_DEV_NOT_ENCRYPTED) {
|
|
SetProperty("ro.crypto.state", "unencrypted");
|
|
ActionManager::GetInstance().QueueEventTrigger("nonencrypted");
|
|
return {};
|
|
} else if (code == FS_MGR_MNTALL_DEV_NOT_ENCRYPTABLE) {
|
|
SetProperty("ro.crypto.state", "unsupported");
|
|
ActionManager::GetInstance().QueueEventTrigger("nonencrypted");
|
|
return {};
|
|
} else if (code == FS_MGR_MNTALL_DEV_NEEDS_RECOVERY) {
|
|
/* Setup a wipe via recovery, and reboot into recovery */
|
|
if (android::gsi::IsGsiRunning()) {
|
|
return Error() << "cannot wipe within GSI";
|
|
}
|
|
PLOG(ERROR) << "fs_mgr_mount_all suggested recovery, so wiping data via recovery.";
|
|
const std::vector<std::string> options = {"--wipe_data", "--reason=fs_mgr_mount_all" };
|
|
return reboot_into_recovery(options);
|
|
/* If reboot worked, there is no return. */
|
|
} else if (code == FS_MGR_MNTALL_DEV_FILE_ENCRYPTED) {
|
|
if (!FscryptInstallKeyring()) {
|
|
return Error() << "FscryptInstallKeyring() failed";
|
|
}
|
|
SetProperty("ro.crypto.state", "encrypted");
|
|
|
|
// Although encrypted, we have device key, so we do not need to
|
|
// do anything different from the nonencrypted case.
|
|
ActionManager::GetInstance().QueueEventTrigger("nonencrypted");
|
|
return {};
|
|
} else if (code == FS_MGR_MNTALL_DEV_IS_METADATA_ENCRYPTED) {
|
|
if (!FscryptInstallKeyring()) {
|
|
return Error() << "FscryptInstallKeyring() failed";
|
|
}
|
|
SetProperty("ro.crypto.state", "encrypted");
|
|
|
|
// Although encrypted, vold has already set the device up, so we do not need to
|
|
// do anything different from the nonencrypted case.
|
|
ActionManager::GetInstance().QueueEventTrigger("nonencrypted");
|
|
return {};
|
|
} else if (code == FS_MGR_MNTALL_DEV_NEEDS_METADATA_ENCRYPTION) {
|
|
if (!FscryptInstallKeyring()) {
|
|
return Error() << "FscryptInstallKeyring() failed";
|
|
}
|
|
SetProperty("ro.crypto.state", "encrypted");
|
|
|
|
// Although encrypted, vold has already set the device up, so we do not need to
|
|
// do anything different from the nonencrypted case.
|
|
ActionManager::GetInstance().QueueEventTrigger("nonencrypted");
|
|
return {};
|
|
} else if (code > 0) {
|
|
Error() << "fs_mgr_mount_all() returned unexpected error " << code;
|
|
}
|
|
/* else ... < 0: error */
|
|
|
|
return Error() << "Invalid code: " << code;
|
|
}
|
|
|
|
static int initial_mount_fstab_return_code = -1;
|
|
|
|
/* <= Q: mount_all <fstab> [ <path> ]* [--<options>]*
|
|
* >= R: mount_all [ <fstab> ] [--<options>]*
|
|
*
|
|
* This function might request a reboot, in which case it will
|
|
* not return.
|
|
*/
|
|
static Result<void> do_mount_all(const BuiltinArguments& args) {
|
|
auto mount_all = ParseMountAll(args.args);
|
|
if (!mount_all.ok()) return mount_all.error();
|
|
|
|
const char* prop_post_fix = "default";
|
|
bool queue_event = true;
|
|
if (mount_all->mode == MOUNT_MODE_EARLY) {
|
|
prop_post_fix = "early";
|
|
queue_event = false;
|
|
} else if (mount_all->mode == MOUNT_MODE_LATE) {
|
|
prop_post_fix = "late";
|
|
}
|
|
|
|
std::string prop_name = "ro.boottime.init.mount_all."s + prop_post_fix;
|
|
android::base::Timer t;
|
|
|
|
Fstab fstab;
|
|
if (mount_all->fstab_path.empty()) {
|
|
if (!ReadDefaultFstab(&fstab)) {
|
|
return Error() << "Could not read default fstab";
|
|
}
|
|
} else {
|
|
if (!ReadFstabFromFile(mount_all->fstab_path, &fstab)) {
|
|
return Error() << "Could not read fstab";
|
|
}
|
|
}
|
|
|
|
auto mount_fstab_result = fs_mgr_mount_all(&fstab, mount_all->mode);
|
|
SetProperty(prop_name, std::to_string(t.duration().count()));
|
|
|
|
if (mount_all->import_rc) {
|
|
import_late(mount_all->rc_paths);
|
|
}
|
|
|
|
if (mount_fstab_result.userdata_mounted) {
|
|
// This call to fs_mgr_mount_all mounted userdata. Keep the result in
|
|
// order for userspace reboot to correctly remount userdata.
|
|
LOG(INFO) << "Userdata mounted using "
|
|
<< (mount_all->fstab_path.empty() ? "(default fstab)" : mount_all->fstab_path)
|
|
<< " result : " << mount_fstab_result.code;
|
|
initial_mount_fstab_return_code = mount_fstab_result.code;
|
|
}
|
|
|
|
if (queue_event) {
|
|
/* queue_fs_event will queue event based on mount_fstab return code
|
|
* and return processed return code*/
|
|
auto queue_fs_result = queue_fs_event(mount_fstab_result.code, false);
|
|
if (!queue_fs_result.ok()) {
|
|
return Error() << "queue_fs_event() failed: " << queue_fs_result.error();
|
|
}
|
|
}
|
|
|
|
return {};
|
|
}
|
|
|
|
/* umount_all [ <fstab> ] */
|
|
static Result<void> do_umount_all(const BuiltinArguments& args) {
|
|
auto umount_all = ParseUmountAll(args.args);
|
|
if (!umount_all.ok()) return umount_all.error();
|
|
|
|
Fstab fstab;
|
|
if (umount_all->empty()) {
|
|
if (!ReadDefaultFstab(&fstab)) {
|
|
return Error() << "Could not read default fstab";
|
|
}
|
|
} else {
|
|
if (!ReadFstabFromFile(*umount_all, &fstab)) {
|
|
return Error() << "Could not read fstab";
|
|
}
|
|
}
|
|
|
|
if (auto result = fs_mgr_umount_all(&fstab); result != 0) {
|
|
return Error() << "umount_fstab() failed " << result;
|
|
}
|
|
return {};
|
|
}
|
|
|
|
/* swapon_all [ <fstab> ] */
|
|
static Result<void> do_swapon_all(const BuiltinArguments& args) {
|
|
auto swapon_all = ParseSwaponAll(args.args);
|
|
if (!swapon_all.ok()) return swapon_all.error();
|
|
|
|
Fstab fstab;
|
|
if (swapon_all->empty()) {
|
|
if (!ReadDefaultFstab(&fstab)) {
|
|
return Error() << "Could not read default fstab";
|
|
}
|
|
} else {
|
|
if (!ReadFstabFromFile(*swapon_all, &fstab)) {
|
|
return Error() << "Could not read fstab '" << *swapon_all << "'";
|
|
}
|
|
}
|
|
|
|
if (!fs_mgr_swapon_all(fstab)) {
|
|
return Error() << "fs_mgr_swapon_all() failed";
|
|
}
|
|
|
|
return {};
|
|
}
|
|
|
|
static Result<void> do_setprop(const BuiltinArguments& args) {
|
|
if (StartsWith(args[1], "ctl.")) {
|
|
return Error()
|
|
<< "Cannot set ctl. properties from init; call the Service functions directly";
|
|
}
|
|
if (args[1] == kRestoreconProperty) {
|
|
return Error() << "Cannot set '" << kRestoreconProperty
|
|
<< "' from init; use the restorecon builtin directly";
|
|
}
|
|
|
|
SetProperty(args[1], args[2]);
|
|
return {};
|
|
}
|
|
|
|
static Result<void> do_setrlimit(const BuiltinArguments& args) {
|
|
auto rlimit = ParseRlimit(args.args);
|
|
if (!rlimit.ok()) return rlimit.error();
|
|
|
|
if (setrlimit(rlimit->first, &rlimit->second) == -1) {
|
|
return ErrnoError() << "setrlimit failed";
|
|
}
|
|
return {};
|
|
}
|
|
|
|
static Result<void> do_start(const BuiltinArguments& args) {
|
|
Service* svc = ServiceList::GetInstance().FindService(args[1]);
|
|
if (!svc) return Error() << "service " << args[1] << " not found";
|
|
if (auto result = svc->Start(); !result.ok()) {
|
|
return ErrorIgnoreEnoent() << "Could not start service: " << result.error();
|
|
}
|
|
return {};
|
|
}
|
|
|
|
static Result<void> do_stop(const BuiltinArguments& args) {
|
|
Service* svc = ServiceList::GetInstance().FindService(args[1]);
|
|
if (!svc) return Error() << "service " << args[1] << " not found";
|
|
svc->Stop();
|
|
return {};
|
|
}
|
|
|
|
static Result<void> do_restart(const BuiltinArguments& args) {
|
|
Service* svc = ServiceList::GetInstance().FindService(args[1]);
|
|
if (!svc) return Error() << "service " << args[1] << " not found";
|
|
svc->Restart();
|
|
return {};
|
|
}
|
|
|
|
static Result<void> do_trigger(const BuiltinArguments& args) {
|
|
ActionManager::GetInstance().QueueEventTrigger(args[1]);
|
|
return {};
|
|
}
|
|
|
|
static int MakeSymlink(const std::string& target, const std::string& linkpath) {
|
|
std::string secontext;
|
|
// Passing 0 for mode should work.
|
|
if (SelabelLookupFileContext(linkpath, 0, &secontext) && !secontext.empty()) {
|
|
setfscreatecon(secontext.c_str());
|
|
}
|
|
|
|
int rc = symlink(target.c_str(), linkpath.c_str());
|
|
|
|
if (!secontext.empty()) {
|
|
int save_errno = errno;
|
|
setfscreatecon(nullptr);
|
|
errno = save_errno;
|
|
}
|
|
|
|
return rc;
|
|
}
|
|
|
|
static Result<void> do_symlink(const BuiltinArguments& args) {
|
|
if (MakeSymlink(args[1], args[2]) < 0) {
|
|
// The symlink builtin is often used to create symlinks for older devices to be backwards
|
|
// compatible with new paths, therefore we skip reporting this error.
|
|
return ErrnoErrorIgnoreEnoent() << "symlink() failed";
|
|
}
|
|
return {};
|
|
}
|
|
|
|
static Result<void> do_rm(const BuiltinArguments& args) {
|
|
if (unlink(args[1].c_str()) < 0) {
|
|
return ErrnoError() << "unlink() failed";
|
|
}
|
|
return {};
|
|
}
|
|
|
|
static Result<void> do_rmdir(const BuiltinArguments& args) {
|
|
if (rmdir(args[1].c_str()) < 0) {
|
|
return ErrnoError() << "rmdir() failed";
|
|
}
|
|
return {};
|
|
}
|
|
|
|
static Result<void> do_sysclktz(const BuiltinArguments& args) {
|
|
struct timezone tz = {};
|
|
if (!android::base::ParseInt(args[1], &tz.tz_minuteswest)) {
|
|
return Error() << "Unable to parse mins_west_of_gmt";
|
|
}
|
|
|
|
if (settimeofday(nullptr, &tz) == -1) {
|
|
return ErrnoError() << "settimeofday() failed";
|
|
}
|
|
return {};
|
|
}
|
|
|
|
static Result<void> do_verity_update_state(const BuiltinArguments& args) {
|
|
int mode;
|
|
if (!fs_mgr_load_verity_state(&mode)) {
|
|
return Error() << "fs_mgr_load_verity_state() failed";
|
|
}
|
|
|
|
Fstab fstab;
|
|
if (!ReadDefaultFstab(&fstab)) {
|
|
return Error() << "Failed to read default fstab";
|
|
}
|
|
|
|
for (const auto& entry : fstab) {
|
|
if (!fs_mgr_is_verity_enabled(entry)) {
|
|
continue;
|
|
}
|
|
|
|
// To be consistent in vboot 1.0 and vboot 2.0 (AVB), use "system" for the partition even
|
|
// for system as root, so it has property [partition.system.verified].
|
|
std::string partition = entry.mount_point == "/" ? "system" : Basename(entry.mount_point);
|
|
SetProperty("partition." + partition + ".verified", std::to_string(mode));
|
|
|
|
std::string hash_alg = fs_mgr_get_hashtree_algorithm(entry);
|
|
if (!hash_alg.empty()) {
|
|
SetProperty("partition." + partition + ".verified.hash_alg", hash_alg);
|
|
}
|
|
}
|
|
|
|
return {};
|
|
}
|
|
|
|
static Result<void> do_write(const BuiltinArguments& args) {
|
|
if (auto result = WriteFile(args[1], args[2]); !result.ok()) {
|
|
return ErrorIgnoreEnoent()
|
|
<< "Unable to write to file '" << args[1] << "': " << result.error();
|
|
}
|
|
|
|
return {};
|
|
}
|
|
|
|
static Result<void> readahead_file(const std::string& filename, bool fully) {
|
|
android::base::unique_fd fd(TEMP_FAILURE_RETRY(open(filename.c_str(), O_RDONLY | O_CLOEXEC)));
|
|
if (fd == -1) {
|
|
return ErrnoError() << "Error opening file";
|
|
}
|
|
if (posix_fadvise(fd, 0, 0, POSIX_FADV_WILLNEED)) {
|
|
return ErrnoError() << "Error posix_fadvise file";
|
|
}
|
|
if (readahead(fd, 0, std::numeric_limits<size_t>::max())) {
|
|
return ErrnoError() << "Error readahead file";
|
|
}
|
|
if (fully) {
|
|
char buf[BUFSIZ];
|
|
ssize_t n;
|
|
while ((n = TEMP_FAILURE_RETRY(read(fd, &buf[0], sizeof(buf)))) > 0) {
|
|
}
|
|
if (n != 0) {
|
|
return ErrnoError() << "Error reading file";
|
|
}
|
|
}
|
|
return {};
|
|
}
|
|
|
|
static Result<void> do_readahead(const BuiltinArguments& args) {
|
|
struct stat sb;
|
|
|
|
if (stat(args[1].c_str(), &sb)) {
|
|
return ErrnoError() << "Error opening " << args[1];
|
|
}
|
|
|
|
bool readfully = false;
|
|
if (args.size() == 3 && args[2] == "--fully") {
|
|
readfully = true;
|
|
}
|
|
// We will do readahead in a forked process in order not to block init
|
|
// since it may block while it reads the
|
|
// filesystem metadata needed to locate the requested blocks. This
|
|
// occurs frequently with ext[234] on large files using indirect blocks
|
|
// instead of extents, giving the appearance that the call blocks until
|
|
// the requested data has been read.
|
|
pid_t pid = fork();
|
|
if (pid == 0) {
|
|
if (setpriority(PRIO_PROCESS, 0, static_cast<int>(ANDROID_PRIORITY_LOWEST)) != 0) {
|
|
PLOG(WARNING) << "setpriority failed";
|
|
}
|
|
if (android_set_ioprio(0, IoSchedClass_IDLE, 7)) {
|
|
PLOG(WARNING) << "ioprio_get failed";
|
|
}
|
|
android::base::Timer t;
|
|
if (S_ISREG(sb.st_mode)) {
|
|
if (auto result = readahead_file(args[1], readfully); !result.ok()) {
|
|
LOG(WARNING) << "Unable to readahead '" << args[1] << "': " << result.error();
|
|
_exit(EXIT_FAILURE);
|
|
}
|
|
} else if (S_ISDIR(sb.st_mode)) {
|
|
char* paths[] = {const_cast<char*>(args[1].data()), nullptr};
|
|
std::unique_ptr<FTS, decltype(&fts_close)> fts(
|
|
fts_open(paths, FTS_PHYSICAL | FTS_NOCHDIR | FTS_XDEV, nullptr), fts_close);
|
|
if (!fts) {
|
|
PLOG(ERROR) << "Error opening directory: " << args[1];
|
|
_exit(EXIT_FAILURE);
|
|
}
|
|
// Traverse the entire hierarchy and do readahead
|
|
for (FTSENT* ftsent = fts_read(fts.get()); ftsent != nullptr;
|
|
ftsent = fts_read(fts.get())) {
|
|
if (ftsent->fts_info & FTS_F) {
|
|
const std::string filename = ftsent->fts_accpath;
|
|
if (auto result = readahead_file(filename, readfully); !result.ok()) {
|
|
LOG(WARNING)
|
|
<< "Unable to readahead '" << filename << "': " << result.error();
|
|
}
|
|
}
|
|
}
|
|
}
|
|
LOG(INFO) << "Readahead " << args[1] << " took " << t << " asynchronously";
|
|
_exit(0);
|
|
} else if (pid < 0) {
|
|
return ErrnoError() << "Fork failed";
|
|
}
|
|
return {};
|
|
}
|
|
|
|
static Result<void> do_copy(const BuiltinArguments& args) {
|
|
auto file_contents = ReadFile(args[1]);
|
|
if (!file_contents.ok()) {
|
|
return Error() << "Could not read input file '" << args[1] << "': " << file_contents.error();
|
|
}
|
|
if (auto result = WriteFile(args[2], *file_contents); !result.ok()) {
|
|
return Error() << "Could not write to output file '" << args[2] << "': " << result.error();
|
|
}
|
|
|
|
return {};
|
|
}
|
|
|
|
static Result<void> do_copy_per_line(const BuiltinArguments& args) {
|
|
std::string file_contents;
|
|
if (!android::base::ReadFileToString(args[1], &file_contents, true)) {
|
|
return Error() << "Could not read input file '" << args[1] << "'";
|
|
}
|
|
auto lines = Split(file_contents, "\n");
|
|
for (const auto& line : lines) {
|
|
auto result = WriteFile(args[2], line);
|
|
if (!result.ok()) {
|
|
LOG(VERBOSE) << "Could not write to output file '" << args[2] << "' with '" << line
|
|
<< "' : " << result.error();
|
|
}
|
|
}
|
|
|
|
return {};
|
|
}
|
|
|
|
static Result<void> do_chown(const BuiltinArguments& args) {
|
|
auto uid = DecodeUid(args[1]);
|
|
if (!uid.ok()) {
|
|
return Error() << "Unable to decode UID for '" << args[1] << "': " << uid.error();
|
|
}
|
|
|
|
// GID is optional and pushes the index of path out by one if specified.
|
|
const std::string& path = (args.size() == 4) ? args[3] : args[2];
|
|
Result<gid_t> gid = -1;
|
|
|
|
if (args.size() == 4) {
|
|
gid = DecodeUid(args[2]);
|
|
if (!gid.ok()) {
|
|
return Error() << "Unable to decode GID for '" << args[2] << "': " << gid.error();
|
|
}
|
|
}
|
|
|
|
if (lchown(path.c_str(), *uid, *gid) == -1) {
|
|
return ErrnoErrorIgnoreEnoent() << "lchown() failed";
|
|
}
|
|
|
|
return {};
|
|
}
|
|
|
|
static mode_t get_mode(const char *s) {
|
|
mode_t mode = 0;
|
|
while (*s) {
|
|
if (*s >= '0' && *s <= '7') {
|
|
mode = (mode<<3) | (*s-'0');
|
|
} else {
|
|
return -1;
|
|
}
|
|
s++;
|
|
}
|
|
return mode;
|
|
}
|
|
|
|
static Result<void> do_chmod(const BuiltinArguments& args) {
|
|
mode_t mode = get_mode(args[1].c_str());
|
|
if (fchmodat(AT_FDCWD, args[2].c_str(), mode, AT_SYMLINK_NOFOLLOW) < 0) {
|
|
return ErrnoErrorIgnoreEnoent() << "fchmodat() failed";
|
|
}
|
|
return {};
|
|
}
|
|
|
|
static Result<void> do_restorecon(const BuiltinArguments& args) {
|
|
auto restorecon_info = ParseRestorecon(args.args);
|
|
if (!restorecon_info.ok()) {
|
|
return restorecon_info.error();
|
|
}
|
|
|
|
const auto& [flag, paths] = *restorecon_info;
|
|
|
|
int ret = 0;
|
|
for (const auto& path : paths) {
|
|
if (selinux_android_restorecon(path.c_str(), flag) < 0) {
|
|
ret = errno;
|
|
}
|
|
}
|
|
|
|
if (ret) return ErrnoErrorIgnoreEnoent() << "selinux_android_restorecon() failed";
|
|
return {};
|
|
}
|
|
|
|
static Result<void> do_restorecon_recursive(const BuiltinArguments& args) {
|
|
std::vector<std::string> non_const_args(args.args);
|
|
non_const_args.insert(std::next(non_const_args.begin()), "--recursive");
|
|
return do_restorecon({std::move(non_const_args), args.context});
|
|
}
|
|
|
|
static Result<void> do_loglevel(const BuiltinArguments& args) {
|
|
// TODO: support names instead/as well?
|
|
int log_level = -1;
|
|
android::base::ParseInt(args[1], &log_level);
|
|
android::base::LogSeverity severity;
|
|
switch (log_level) {
|
|
case 7: severity = android::base::DEBUG; break;
|
|
case 6: severity = android::base::INFO; break;
|
|
case 5:
|
|
case 4: severity = android::base::WARNING; break;
|
|
case 3: severity = android::base::ERROR; break;
|
|
case 2:
|
|
case 1:
|
|
case 0: severity = android::base::FATAL; break;
|
|
default:
|
|
return Error() << "invalid log level " << log_level;
|
|
}
|
|
android::base::SetMinimumLogSeverity(severity);
|
|
return {};
|
|
}
|
|
|
|
static Result<void> do_load_persist_props(const BuiltinArguments& args) {
|
|
// Devices with FDE have load_persist_props called twice; the first time when the temporary
|
|
// /data partition is mounted and then again once /data is truly mounted. We do not want to
|
|
// read persistent properties from the temporary /data partition or mark persistent properties
|
|
// as having been loaded during the first call, so we return in that case.
|
|
std::string crypto_state = android::base::GetProperty("ro.crypto.state", "");
|
|
std::string crypto_type = android::base::GetProperty("ro.crypto.type", "");
|
|
if (crypto_state == "encrypted" && crypto_type == "block") {
|
|
static size_t num_calls = 0;
|
|
if (++num_calls == 1) return {};
|
|
}
|
|
|
|
SendLoadPersistentPropertiesMessage();
|
|
|
|
start_waiting_for_property("ro.persistent_properties.ready", "true");
|
|
return {};
|
|
}
|
|
|
|
static Result<void> do_load_system_props(const BuiltinArguments& args) {
|
|
LOG(INFO) << "deprecated action `load_system_props` called.";
|
|
return {};
|
|
}
|
|
|
|
static Result<void> do_wait(const BuiltinArguments& args) {
|
|
auto timeout = kCommandRetryTimeout;
|
|
if (args.size() == 3) {
|
|
double timeout_double;
|
|
if (!android::base::ParseDouble(args[2], &timeout_double, 0)) {
|
|
return Error() << "failed to parse timeout";
|
|
}
|
|
timeout = std::chrono::duration_cast<std::chrono::nanoseconds>(
|
|
std::chrono::duration<double>(timeout_double));
|
|
}
|
|
|
|
if (wait_for_file(args[1].c_str(), timeout) != 0) {
|
|
return Error() << "wait_for_file() failed";
|
|
}
|
|
|
|
return {};
|
|
}
|
|
|
|
static Result<void> do_wait_for_prop(const BuiltinArguments& args) {
|
|
const char* name = args[1].c_str();
|
|
const char* value = args[2].c_str();
|
|
size_t value_len = strlen(value);
|
|
|
|
if (!IsLegalPropertyName(name)) {
|
|
return Error() << "IsLegalPropertyName(" << name << ") failed";
|
|
}
|
|
if (value_len >= PROP_VALUE_MAX) {
|
|
return Error() << "value too long";
|
|
}
|
|
if (!start_waiting_for_property(name, value)) {
|
|
return Error() << "already waiting for a property";
|
|
}
|
|
return {};
|
|
}
|
|
|
|
static bool is_file_crypto() {
|
|
return android::base::GetProperty("ro.crypto.type", "") == "file";
|
|
}
|
|
|
|
static Result<void> ExecWithFunctionOnFailure(const std::vector<std::string>& args,
|
|
std::function<void(const std::string&)> function) {
|
|
auto service = Service::MakeTemporaryOneshotService(args);
|
|
if (!service.ok()) {
|
|
function("MakeTemporaryOneshotService failed: " + service.error().message());
|
|
}
|
|
(*service)->AddReapCallback([function](const siginfo_t& siginfo) {
|
|
if (siginfo.si_code != CLD_EXITED || siginfo.si_status != 0) {
|
|
function(StringPrintf("Exec service failed, status %d", siginfo.si_status));
|
|
}
|
|
});
|
|
if (auto result = (*service)->ExecStart(); !result.ok()) {
|
|
function("ExecStart failed: " + result.error().message());
|
|
}
|
|
ServiceList::GetInstance().AddService(std::move(*service));
|
|
return {};
|
|
}
|
|
|
|
static Result<void> ExecVdcRebootOnFailure(const std::string& vdc_arg) {
|
|
bool should_reboot_into_recovery = true;
|
|
auto reboot_reason = vdc_arg + "_failed";
|
|
if (android::sysprop::InitProperties::userspace_reboot_in_progress().value_or(false)) {
|
|
should_reboot_into_recovery = false;
|
|
reboot_reason = "userspace_failed," + vdc_arg;
|
|
}
|
|
|
|
auto reboot = [reboot_reason, should_reboot_into_recovery](const std::string& message) {
|
|
// TODO (b/122850122): support this in gsi
|
|
if (should_reboot_into_recovery) {
|
|
if (fscrypt_is_native() && !android::gsi::IsGsiRunning()) {
|
|
LOG(ERROR) << message << ": Rebooting into recovery, reason: " << reboot_reason;
|
|
if (auto result = reboot_into_recovery(
|
|
{"--prompt_and_wipe_data", "--reason="s + reboot_reason});
|
|
!result.ok()) {
|
|
LOG(FATAL) << "Could not reboot into recovery: " << result.error();
|
|
}
|
|
} else {
|
|
LOG(ERROR) << "Failure (reboot suppressed): " << reboot_reason;
|
|
}
|
|
} else {
|
|
LOG(ERROR) << message << ": rebooting, reason: " << reboot_reason;
|
|
trigger_shutdown("reboot," + reboot_reason);
|
|
}
|
|
};
|
|
|
|
std::vector<std::string> args = {"exec", "/system/bin/vdc", "--wait", "cryptfs", vdc_arg};
|
|
return ExecWithFunctionOnFailure(args, reboot);
|
|
}
|
|
|
|
static Result<void> do_remount_userdata(const BuiltinArguments& args) {
|
|
if (initial_mount_fstab_return_code == -1) {
|
|
return Error() << "Calling remount_userdata too early";
|
|
}
|
|
Fstab fstab;
|
|
if (!ReadDefaultFstab(&fstab)) {
|
|
// TODO(b/135984674): should we reboot here?
|
|
return Error() << "Failed to read fstab";
|
|
}
|
|
// TODO(b/135984674): check that fstab contains /data.
|
|
if (auto rc = fs_mgr_remount_userdata_into_checkpointing(&fstab); rc < 0) {
|
|
std::string proc_mounts_output;
|
|
android::base::ReadFileToString("/proc/mounts", &proc_mounts_output, true);
|
|
android::base::WriteStringToFile(proc_mounts_output,
|
|
"/metadata/userspacereboot/mount_info.txt");
|
|
trigger_shutdown("reboot,mount_userdata_failed");
|
|
}
|
|
if (auto result = queue_fs_event(initial_mount_fstab_return_code, true); !result.ok()) {
|
|
return Error() << "queue_fs_event() failed: " << result.error();
|
|
}
|
|
return {};
|
|
}
|
|
|
|
static Result<void> do_installkey(const BuiltinArguments& args) {
|
|
if (!is_file_crypto()) return {};
|
|
|
|
auto unencrypted_dir = args[1] + fscrypt_unencrypted_folder;
|
|
if (!make_dir(unencrypted_dir, 0700) && errno != EEXIST) {
|
|
return ErrnoError() << "Failed to create " << unencrypted_dir;
|
|
}
|
|
return ExecVdcRebootOnFailure("enablefilecrypto");
|
|
}
|
|
|
|
static Result<void> do_init_user0(const BuiltinArguments& args) {
|
|
return ExecVdcRebootOnFailure("init_user0");
|
|
}
|
|
|
|
static Result<void> do_mark_post_data(const BuiltinArguments& args) {
|
|
ServiceList::GetInstance().MarkPostData();
|
|
|
|
return {};
|
|
}
|
|
|
|
static Result<void> GenerateLinkerConfiguration() {
|
|
const char* linkerconfig_binary = "/apex/com.android.runtime/bin/linkerconfig";
|
|
const char* linkerconfig_target = "/linkerconfig";
|
|
const char* arguments[] = {linkerconfig_binary, "--target", linkerconfig_target};
|
|
|
|
if (logwrap_fork_execvp(arraysize(arguments), arguments, nullptr, false, LOG_KLOG, false,
|
|
nullptr) != 0) {
|
|
return ErrnoError() << "failed to execute linkerconfig";
|
|
}
|
|
|
|
auto current_mount_ns = GetCurrentMountNamespace();
|
|
if (!current_mount_ns.ok()) {
|
|
return current_mount_ns.error();
|
|
}
|
|
if (*current_mount_ns == NS_DEFAULT) {
|
|
SetDefaultMountNamespaceReady();
|
|
}
|
|
|
|
LOG(INFO) << "linkerconfig generated " << linkerconfig_target
|
|
<< " with mounted APEX modules info";
|
|
|
|
return {};
|
|
}
|
|
|
|
static Result<void> MountLinkerConfigForDefaultNamespace() {
|
|
// No need to mount linkerconfig for default mount namespace if the path does not exist (which
|
|
// would mean it is already mounted)
|
|
if (access("/linkerconfig/default", 0) != 0) {
|
|
return {};
|
|
}
|
|
|
|
if (mount("/linkerconfig/default", "/linkerconfig", nullptr, MS_BIND | MS_REC, nullptr) != 0) {
|
|
return ErrnoError() << "Failed to mount linker configuration for default mount namespace.";
|
|
}
|
|
|
|
return {};
|
|
}
|
|
|
|
static bool IsApexUpdatable() {
|
|
static bool updatable = android::sysprop::ApexProperties::updatable().value_or(false);
|
|
return updatable;
|
|
}
|
|
|
|
static Result<void> do_update_linker_config(const BuiltinArguments&) {
|
|
// If APEX is not updatable, then all APEX information are already included in the first
|
|
// linker config generation, so there is no need to update linker configuration again.
|
|
if (IsApexUpdatable()) {
|
|
return GenerateLinkerConfiguration();
|
|
}
|
|
|
|
return {};
|
|
}
|
|
|
|
static Result<void> parse_apex_configs() {
|
|
glob_t glob_result;
|
|
static constexpr char glob_pattern[] = "/apex/*/etc/*.rc";
|
|
const int ret = glob(glob_pattern, GLOB_MARK, nullptr, &glob_result);
|
|
if (ret != 0 && ret != GLOB_NOMATCH) {
|
|
globfree(&glob_result);
|
|
return Error() << "glob pattern '" << glob_pattern << "' failed";
|
|
}
|
|
std::vector<std::string> configs;
|
|
Parser parser = CreateServiceOnlyParser(ServiceList::GetInstance(), true);
|
|
for (size_t i = 0; i < glob_result.gl_pathc; i++) {
|
|
std::string path = glob_result.gl_pathv[i];
|
|
// Filter-out /apex/<name>@<ver> paths. The paths are bind-mounted to
|
|
// /apex/<name> paths, so unless we filter them out, we will parse the
|
|
// same file twice.
|
|
std::vector<std::string> paths = android::base::Split(path, "/");
|
|
if (paths.size() >= 3 && paths[2].find('@') != std::string::npos) {
|
|
continue;
|
|
}
|
|
configs.push_back(path);
|
|
}
|
|
globfree(&glob_result);
|
|
|
|
bool success = true;
|
|
for (const auto& c : configs) {
|
|
if (c.back() == '/') {
|
|
// skip if directory
|
|
continue;
|
|
}
|
|
success &= parser.ParseConfigFile(c);
|
|
}
|
|
ServiceList::GetInstance().MarkServicesUpdate();
|
|
if (success) {
|
|
return {};
|
|
} else {
|
|
return Error() << "Could not parse apex configs";
|
|
}
|
|
}
|
|
|
|
/*
|
|
* Creates a directory under /data/misc/apexdata/ for each APEX.
|
|
*/
|
|
static Result<void> create_apex_data_dirs() {
|
|
auto dirp = std::unique_ptr<DIR, int (*)(DIR*)>(opendir("/apex"), closedir);
|
|
if (!dirp) {
|
|
return ErrnoError() << "Unable to open apex directory";
|
|
}
|
|
struct dirent* entry;
|
|
while ((entry = readdir(dirp.get())) != nullptr) {
|
|
if (entry->d_type != DT_DIR) continue;
|
|
|
|
const char* name = entry->d_name;
|
|
// skip any starting with "."
|
|
if (name[0] == '.') continue;
|
|
|
|
if (strchr(name, '@') != nullptr) continue;
|
|
|
|
auto path = "/data/misc/apexdata/" + std::string(name);
|
|
auto options = MkdirOptions{path, 0771, AID_ROOT, AID_SYSTEM, FscryptAction::kNone, "ref"};
|
|
make_dir_with_options(options);
|
|
}
|
|
return {};
|
|
}
|
|
|
|
static Result<void> do_perform_apex_config(const BuiltinArguments& args) {
|
|
auto create_dirs = create_apex_data_dirs();
|
|
if (!create_dirs.ok()) {
|
|
return create_dirs.error();
|
|
}
|
|
auto parse_configs = parse_apex_configs();
|
|
if (!parse_configs.ok()) {
|
|
return parse_configs.error();
|
|
}
|
|
|
|
auto update_linker_config = do_update_linker_config(args);
|
|
if (!update_linker_config.ok()) {
|
|
return update_linker_config.error();
|
|
}
|
|
|
|
return {};
|
|
}
|
|
|
|
static Result<void> do_enter_default_mount_ns(const BuiltinArguments& args) {
|
|
if (auto result = SwitchToMountNamespaceIfNeeded(NS_DEFAULT); !result.ok()) {
|
|
return result.error();
|
|
}
|
|
if (auto result = MountLinkerConfigForDefaultNamespace(); !result.ok()) {
|
|
return result.error();
|
|
}
|
|
LOG(INFO) << "Switched to default mount namespace";
|
|
return {};
|
|
}
|
|
|
|
// Builtin-function-map start
|
|
const BuiltinFunctionMap& GetBuiltinFunctionMap() {
|
|
constexpr std::size_t kMax = std::numeric_limits<std::size_t>::max();
|
|
// clang-format off
|
|
static const BuiltinFunctionMap builtin_functions = {
|
|
{"bootchart", {1, 1, {false, do_bootchart}}},
|
|
{"chmod", {2, 2, {true, do_chmod}}},
|
|
{"chown", {2, 3, {true, do_chown}}},
|
|
{"class_reset", {1, 1, {false, do_class_reset}}},
|
|
{"class_reset_post_data", {1, 1, {false, do_class_reset_post_data}}},
|
|
{"class_restart", {1, 1, {false, do_class_restart}}},
|
|
{"class_start", {1, 1, {false, do_class_start}}},
|
|
{"class_start_post_data", {1, 1, {false, do_class_start_post_data}}},
|
|
{"class_stop", {1, 1, {false, do_class_stop}}},
|
|
{"copy", {2, 2, {true, do_copy}}},
|
|
{"copy_per_line", {2, 2, {true, do_copy_per_line}}},
|
|
{"domainname", {1, 1, {true, do_domainname}}},
|
|
{"enable", {1, 1, {false, do_enable}}},
|
|
{"exec", {1, kMax, {false, do_exec}}},
|
|
{"exec_background", {1, kMax, {false, do_exec_background}}},
|
|
{"exec_start", {1, 1, {false, do_exec_start}}},
|
|
{"export", {2, 2, {false, do_export}}},
|
|
{"hostname", {1, 1, {true, do_hostname}}},
|
|
{"ifup", {1, 1, {true, do_ifup}}},
|
|
{"init_user0", {0, 0, {false, do_init_user0}}},
|
|
{"insmod", {1, kMax, {true, do_insmod}}},
|
|
{"installkey", {1, 1, {false, do_installkey}}},
|
|
{"interface_restart", {1, 1, {false, do_interface_restart}}},
|
|
{"interface_start", {1, 1, {false, do_interface_start}}},
|
|
{"interface_stop", {1, 1, {false, do_interface_stop}}},
|
|
{"load_exports", {1, 1, {false, do_load_exports}}},
|
|
{"load_persist_props", {0, 0, {false, do_load_persist_props}}},
|
|
{"load_system_props", {0, 0, {false, do_load_system_props}}},
|
|
{"loglevel", {1, 1, {false, do_loglevel}}},
|
|
{"mark_post_data", {0, 0, {false, do_mark_post_data}}},
|
|
{"mkdir", {1, 6, {true, do_mkdir}}},
|
|
// TODO: Do mount operations in vendor_init.
|
|
// mount_all is currently too complex to run in vendor_init as it queues action triggers,
|
|
// imports rc scripts, etc. It should be simplified and run in vendor_init context.
|
|
// mount and umount are run in the same context as mount_all for symmetry.
|
|
{"mount_all", {0, kMax, {false, do_mount_all}}},
|
|
{"mount", {3, kMax, {false, do_mount}}},
|
|
{"perform_apex_config", {0, 0, {false, do_perform_apex_config}}},
|
|
{"umount", {1, 1, {false, do_umount}}},
|
|
{"umount_all", {0, 1, {false, do_umount_all}}},
|
|
{"update_linker_config", {0, 0, {false, do_update_linker_config}}},
|
|
{"readahead", {1, 2, {true, do_readahead}}},
|
|
{"remount_userdata", {0, 0, {false, do_remount_userdata}}},
|
|
{"restart", {1, 1, {false, do_restart}}},
|
|
{"restorecon", {1, kMax, {true, do_restorecon}}},
|
|
{"restorecon_recursive", {1, kMax, {true, do_restorecon_recursive}}},
|
|
{"rm", {1, 1, {true, do_rm}}},
|
|
{"rmdir", {1, 1, {true, do_rmdir}}},
|
|
{"setprop", {2, 2, {true, do_setprop}}},
|
|
{"setrlimit", {3, 3, {false, do_setrlimit}}},
|
|
{"start", {1, 1, {false, do_start}}},
|
|
{"stop", {1, 1, {false, do_stop}}},
|
|
{"swapon_all", {0, 1, {false, do_swapon_all}}},
|
|
{"enter_default_mount_ns", {0, 0, {false, do_enter_default_mount_ns}}},
|
|
{"symlink", {2, 2, {true, do_symlink}}},
|
|
{"sysclktz", {1, 1, {false, do_sysclktz}}},
|
|
{"trigger", {1, 1, {false, do_trigger}}},
|
|
{"verity_update_state", {0, 0, {false, do_verity_update_state}}},
|
|
{"wait", {1, 2, {true, do_wait}}},
|
|
{"wait_for_prop", {2, 2, {false, do_wait_for_prop}}},
|
|
{"write", {2, 2, {true, do_write}}},
|
|
};
|
|
// clang-format on
|
|
return builtin_functions;
|
|
}
|
|
// Builtin-function-map end
|
|
|
|
} // namespace init
|
|
} // namespace android
|