src/core/dbus-manager.c

   1 /* SPDX-License-Identifier: LGPL-2.1-or-later */
   2
   3 #include <errno.h>
   4 #include <sys/prctl.h>
   5 #include <sys/statvfs.h>
   6 #include <unistd.h>
   7
   8 #include "alloc-util.h"
   9 #include "architecture.h"
  10 #include "build.h"
  11 #include "bus-common-errors.h"
  12 #include "bus-get-properties.h"
  13 #include "bus-log-control-api.h"
  14 #include "chase.h"
  15 #include "data-fd-util.h"
  16 #include "dbus-cgroup.h"
  17 #include "dbus-execute.h"
  18 #include "dbus-job.h"
  19 #include "dbus-manager.h"
  20 #include "dbus-scope.h"
  21 #include "dbus-service.h"
  22 #include "dbus-unit.h"
  23 #include "dbus.h"
  24 #include "env-util.h"
  25 #include "fd-util.h"
  26 #include "fileio.h"
  27 #include "format-util.h"
  28 #include "install.h"
  29 #include "log.h"
  30 #include "manager-dump.h"
  31 #include "os-util.h"
  32 #include "parse-util.h"
  33 #include "path-util.h"
  34 #include "process-util.h"
  35 #include "selinux-access.h"
  36 #include "stat-util.h"
  37 #include "string-util.h"
  38 #include "strv.h"
  39 #include "syslog-util.h"
  40 #include "user-util.h"
  41 #include "virt.h"
  42 #include "watchdog.h"
  43
  44 /* Require 16MiB free in /run/systemd for reloading/reexecing. After all we need to serialize our state
  45  * there, and if we can't we'll fail badly. */
  46 #define RELOAD_DISK_SPACE_MIN (UINT64_C(16) * UINT64_C(1024) * UINT64_C(1024))
  47
  48 static UnitFileFlags unit_file_bools_to_flags(bool runtime, bool force) {
  49         return (runtime ? UNIT_FILE_RUNTIME : 0) |
  50                (force   ? UNIT_FILE_FORCE   : 0);
  51 }
  52
  53 BUS_DEFINE_PROPERTY_GET_ENUM(bus_property_get_oom_policy, oom_policy, OOMPolicy);
  54 BUS_DEFINE_PROPERTY_GET_ENUM(bus_property_get_emergency_action, emergency_action, EmergencyAction);
  55
  56 static BUS_DEFINE_PROPERTY_GET_GLOBAL(property_get_version, "s", GIT_VERSION);
  57 static BUS_DEFINE_PROPERTY_GET_GLOBAL(property_get_features, "s", systemd_features);
  58 static BUS_DEFINE_PROPERTY_GET_GLOBAL(property_get_architecture, "s", architecture_to_string(uname_architecture()));
  59 static BUS_DEFINE_PROPERTY_GET2(property_get_system_state, "s", Manager, manager_state, manager_state_to_string);
  60 static BUS_DEFINE_PROPERTY_GET_GLOBAL(property_get_timer_slack_nsec, "t", (uint64_t) prctl(PR_GET_TIMERSLACK));
  61 static BUS_DEFINE_PROPERTY_GET_REF(property_get_hashmap_size, "u", Hashmap *, hashmap_size);
  62 static BUS_DEFINE_PROPERTY_GET_REF(property_get_set_size, "u", Set *, set_size);
  63 static BUS_DEFINE_PROPERTY_GET(property_get_default_timeout_abort_usec, "t", Manager, manager_default_timeout_abort_usec);
  64 static BUS_DEFINE_PROPERTY_GET_GLOBAL(property_get_watchdog_device, "s", watchdog_get_device());
  65 static BUS_DEFINE_PROPERTY_GET_GLOBAL(property_get_watchdog_last_ping_realtime, "t", watchdog_get_last_ping(CLOCK_REALTIME));
  66 static BUS_DEFINE_PROPERTY_GET_GLOBAL(property_get_watchdog_last_ping_monotonic, "t", watchdog_get_last_ping(CLOCK_MONOTONIC));
  67
  68 static int property_get_virtualization(
  69                 sd_bus *bus,
  70                 const char *path,
  71                 const char *interface,
  72                 const char *property,
  73                 sd_bus_message *reply,
  74                 void *userdata,
  75                 sd_bus_error *error) {
  76
  77         Virtualization v;
  78
  79         assert(bus);
  80         assert(reply);
  81
  82         v = detect_virtualization();
  83
  84         /* Make sure to return the empty string when we detect no virtualization, as that is the API.
  85          *
  86          * https://github.com/systemd/systemd/issues/1423
  87          */
  88
  89         return sd_bus_message_append(
  90                         reply, "s",
  91                         v == VIRTUALIZATION_NONE ? NULL : virtualization_to_string(v));
  92 }
  93
  94 static int property_get_tainted(
  95                 sd_bus *bus,
  96                 const char *path,
  97                 const char *interface,
  98                 const char *property,
  99                 sd_bus_message *reply,
 100                 void *userdata,
 101                 sd_bus_error *error) {
 102
 103         _cleanup_free_ char *s = NULL;
 104         Manager *m = ASSERT_PTR(userdata);
 105
 106         assert(bus);
 107         assert(reply);
 108
 109         s = manager_taint_string(m);
 110         if (!s)
 111                 return log_oom();
 112
 113         return sd_bus_message_append(reply, "s", s);
 114 }
 115
 116 static int property_set_log_target(
 117                 sd_bus *bus,
 118                 const char *path,
 119                 const char *interface,
 120                 const char *property,
 121                 sd_bus_message *value,
 122                 void *userdata,
 123                 sd_bus_error *error) {
 124
 125         Manager *m = userdata;
 126         const char *t;
 127         int r;
 128
 129         assert(bus);
 130         assert(value);
 131
 132         r = sd_bus_message_read(value, "s", &t);
 133         if (r < 0)
 134                 return r;
 135
 136         if (isempty(t))
 137                 manager_restore_original_log_target(m);
 138         else {
 139                 LogTarget target;
 140
 141                 target = log_target_from_string(t);
 142                 if (target < 0)
 143                         return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Invalid log target '%s'", t);
 144
 145                 manager_override_log_target(m, target);
 146         }
 147
 148         return 0;
 149 }
 150
 151 static int property_set_log_level(
 152                 sd_bus *bus,
 153                 const char *path,
 154                 const char *interface,
 155                 const char *property,
 156                 sd_bus_message *value,
 157                 void *userdata,
 158                 sd_bus_error *error) {
 159
 160         Manager *m = userdata;
 161         const char *t;
 162         int r;
 163
 164         assert(bus);
 165         assert(value);
 166
 167         r = sd_bus_message_read(value, "s", &t);
 168         if (r < 0)
 169                 return r;
 170
 171         if (isempty(t))
 172                 manager_restore_original_log_level(m);
 173         else {
 174                 int level;
 175
 176                 level = log_level_from_string(t);
 177                 if (level < 0)
 178                         return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Invalid log level '%s'", t);
 179
 180                 manager_override_log_level(m, level);
 181         }
 182
 183         return 0;
 184 }
 185
 186 static int property_get_progress(
 187                 sd_bus *bus,
 188                 const char *path,
 189                 const char *interface,
 190                 const char *property,
 191                 sd_bus_message *reply,
 192                 void *userdata,
 193                 sd_bus_error *error) {
 194
 195         Manager *m = ASSERT_PTR(userdata);
 196         double d;
 197
 198         assert(bus);
 199         assert(reply);
 200
 201         if (MANAGER_IS_FINISHED(m))
 202                 d = 1.0;
 203         else
 204                 d = 1.0 - ((double) hashmap_size(m->jobs) / (double) m->n_installed_jobs);
 205
 206         return sd_bus_message_append(reply, "d", d);
 207 }
 208
 209 static int property_get_environment(
 210                 sd_bus *bus,
 211                 const char *path,
 212                 const char *interface,
 213                 const char *property,
 214                 sd_bus_message *reply,
 215                 void *userdata,
 216                 sd_bus_error *error) {
 217
 218         _cleanup_strv_free_ char **l = NULL;
 219         Manager *m = ASSERT_PTR(userdata);
 220         int r;
 221
 222         assert(bus);
 223         assert(reply);
 224
 225         r = manager_get_effective_environment(m, &l);
 226         if (r < 0)
 227                 return r;
 228
 229         return sd_bus_message_append_strv(reply, l);
 230 }
 231
 232 static int property_get_show_status(
 233                 sd_bus *bus,
 234                 const char *path,
 235                 const char *interface,
 236                 const char *property,
 237                 sd_bus_message *reply,
 238                 void *userdata,
 239                 sd_bus_error *error) {
 240
 241         Manager *m = ASSERT_PTR(userdata);
 242
 243         assert(bus);
 244         assert(reply);
 245
 246         return sd_bus_message_append(reply, "b", manager_get_show_status_on(m));
 247 }
 248
 249 static int property_get_runtime_watchdog(
 250                 sd_bus *bus,
 251                 const char *path,
 252                 const char *interface,
 253                 const char *property,
 254                 sd_bus_message *reply,
 255                 void *userdata,
 256                 sd_bus_error *error) {
 257
 258         Manager *m = ASSERT_PTR(userdata);
 259
 260         assert(bus);
 261         assert(reply);
 262
 263         return sd_bus_message_append(reply, "t", manager_get_watchdog(m, WATCHDOG_RUNTIME));
 264 }
 265
 266 static int property_get_pretimeout_watchdog(
 267                 sd_bus *bus,
 268                 const char *path,
 269                 const char *interface,
 270                 const char *property,
 271                 sd_bus_message *reply,
 272                 void *userdata,
 273                 sd_bus_error *error) {
 274
 275         Manager *m = ASSERT_PTR(userdata);
 276
 277         assert(bus);
 278         assert(reply);
 279
 280         return sd_bus_message_append(reply, "t", manager_get_watchdog(m, WATCHDOG_PRETIMEOUT));
 281 }
 282
 283 static int property_get_pretimeout_watchdog_governor(
 284                 sd_bus *bus,
 285                 const char *path,
 286                 const char *interface,
 287                 const char *property,
 288                 sd_bus_message *reply,
 289                 void *userdata,
 290                 sd_bus_error *error) {
 291
 292         Manager *m = ASSERT_PTR(userdata);
 293
 294         assert(bus);
 295         assert(reply);
 296
 297         return sd_bus_message_append(reply, "s", m->watchdog_pretimeout_governor);
 298 }
 299
 300 static int property_get_reboot_watchdog(
 301                 sd_bus *bus,
 302                 const char *path,
 303                 const char *interface,
 304                 const char *property,
 305                 sd_bus_message *reply,
 306                 void *userdata,
 307                 sd_bus_error *error) {
 308
 309         Manager *m = ASSERT_PTR(userdata);
 310
 311         assert(bus);
 312         assert(reply);
 313
 314         return sd_bus_message_append(reply, "t", manager_get_watchdog(m, WATCHDOG_REBOOT));
 315 }
 316
 317 static int property_get_kexec_watchdog(
 318                 sd_bus *bus,
 319                 const char *path,
 320                 const char *interface,
 321                 const char *property,
 322                 sd_bus_message *reply,
 323                 void *userdata,
 324                 sd_bus_error *error) {
 325
 326         Manager *m = ASSERT_PTR(userdata);
 327
 328         assert(bus);
 329         assert(reply);
 330
 331         return sd_bus_message_append(reply, "t", manager_get_watchdog(m, WATCHDOG_KEXEC));
 332 }
 333
 334 static int property_set_watchdog(Manager *m, WatchdogType type, sd_bus_message *value) {
 335         usec_t timeout;
 336         int r;
 337
 338         assert(m);
 339         assert(value);
 340
 341         assert_cc(sizeof(usec_t) == sizeof(uint64_t));
 342
 343         r = sd_bus_message_read(value, "t", &timeout);
 344         if (r < 0)
 345                 return r;
 346
 347         manager_override_watchdog(m, type, timeout);
 348         return 0;
 349 }
 350
 351 static int property_set_runtime_watchdog(
 352                 sd_bus *bus,
 353                 const char *path,
 354                 const char *interface,
 355                 const char *property,
 356                 sd_bus_message *value,
 357                 void *userdata,
 358                 sd_bus_error *error) {
 359
 360         return property_set_watchdog(userdata, WATCHDOG_RUNTIME, value);
 361 }
 362
 363 static int property_set_pretimeout_watchdog(
 364                 sd_bus *bus,
 365                 const char *path,
 366                 const char *interface,
 367                 const char *property,
 368                 sd_bus_message *value,
 369                 void *userdata,
 370                 sd_bus_error *error) {
 371
 372         return property_set_watchdog(userdata, WATCHDOG_PRETIMEOUT, value);
 373 }
 374
 375 static int property_set_pretimeout_watchdog_governor(
 376                 sd_bus *bus,
 377                 const char *path,
 378                 const char *interface,
 379                 const char *property,
 380                 sd_bus_message *value,
 381                 void *userdata,
 382                 sd_bus_error *error) {
 383
 384         Manager *m = ASSERT_PTR(userdata);
 385         char *governor;
 386         int r;
 387
 388         r = sd_bus_message_read(value, "s", &governor);
 389         if (r < 0)
 390                 return r;
 391         if (!string_is_safe(governor))
 392                 return -EINVAL;
 393
 394         return manager_override_watchdog_pretimeout_governor(m, governor);
 395 }
 396
 397 static int property_set_reboot_watchdog(
 398                 sd_bus *bus,
 399                 const char *path,
 400                 const char *interface,
 401                 const char *property,
 402                 sd_bus_message *value,
 403                 void *userdata,
 404                 sd_bus_error *error) {
 405
 406         return property_set_watchdog(userdata, WATCHDOG_REBOOT, value);
 407 }
 408
 409 static int property_set_kexec_watchdog(
 410                 sd_bus *bus,
 411                 const char *path,
 412                 const char *interface,
 413                 const char *property,
 414                 sd_bus_message *value,
 415                 void *userdata,
 416                 sd_bus_error *error) {
 417
 418         _unused_ Manager *m = ASSERT_PTR(userdata);
 419
 420         assert(bus);
 421         assert(value);
 422
 423         return property_set_watchdog(userdata, WATCHDOG_KEXEC, value);
 424 }
 425
 426 static int property_get_oom_score_adjust(
 427                 sd_bus *bus,
 428                 const char *path,
 429                 const char *interface,
 430                 const char *property,
 431                 sd_bus_message *reply,
 432                 void *userdata,
 433                 sd_bus_error *error) {
 434
 435         Manager *m = ASSERT_PTR(userdata);
 436         int r, n;
 437
 438         assert(bus);
 439         assert(reply);
 440
 441         if (m->default_oom_score_adjust_set)
 442                 n = m->default_oom_score_adjust;
 443         else {
 444                 n = 0;
 445                 r = get_oom_score_adjust(&n);
 446                 if (r < 0)
 447                         log_debug_errno(r, "Failed to read current OOM score adjustment value, ignoring: %m");
 448         }
 449
 450         return sd_bus_message_append(reply, "i", n);
 451 }
 452
 453 static int bus_get_unit_by_name(Manager *m, sd_bus_message *message, const char *name, Unit **ret_unit, sd_bus_error *error) {
 454         Unit *u;
 455         int r;
 456
 457         assert(m);
 458         assert(message);
 459         assert(ret_unit);
 460
 461         /* More or less a wrapper around manager_get_unit() that generates nice errors and has one trick up
 462          * its sleeve: if the name is specified empty we use the client's unit. */
 463
 464         if (isempty(name)) {
 465                 _cleanup_(sd_bus_creds_unrefp) sd_bus_creds *creds = NULL;
 466                 pid_t pid;
 467
 468                 r = sd_bus_query_sender_creds(message, SD_BUS_CREDS_PID, &creds);
 469                 if (r < 0)
 470                         return r;
 471
 472                 r = sd_bus_creds_get_pid(creds, &pid);
 473                 if (r < 0)
 474                         return r;
 475
 476                 u = manager_get_unit_by_pid(m, pid);
 477                 if (!u)
 478                         return sd_bus_error_set(error, BUS_ERROR_NO_SUCH_UNIT, "Client not member of any unit.");
 479         } else {
 480                 u = manager_get_unit(m, name);
 481                 if (!u)
 482                         return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_UNIT, "Unit %s not loaded.", name);
 483         }
 484
 485         *ret_unit = u;
 486         return 0;
 487 }
 488
 489 static int bus_load_unit_by_name(Manager *m, sd_bus_message *message, const char *name, Unit **ret_unit, sd_bus_error *error) {
 490         assert(m);
 491         assert(message);
 492         assert(ret_unit);
 493
 494         /* Pretty much the same as bus_get_unit_by_name(), but we also load the unit if necessary. */
 495
 496         if (isempty(name))
 497                 return bus_get_unit_by_name(m, message, name, ret_unit, error);
 498
 499         return manager_load_unit(m, name, NULL, error, ret_unit);
 500 }
 501
 502 static int reply_unit_path(Unit *u, sd_bus_message *message, sd_bus_error *error) {
 503         _cleanup_free_ char *path = NULL;
 504         int r;
 505
 506         assert(u);
 507         assert(message);
 508
 509         r = mac_selinux_unit_access_check(u, message, "status", error);
 510         if (r < 0)
 511                 return r;
 512
 513         path = unit_dbus_path(u);
 514         if (!path)
 515                 return log_oom();
 516
 517         return sd_bus_reply_method_return(message, "o", path);
 518 }
 519
 520 static int method_get_unit(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 521         Manager *m = ASSERT_PTR(userdata);
 522         const char *name;
 523         Unit *u;
 524         int r;
 525
 526         assert(message);
 527
 528         /* Anyone can call this method */
 529
 530         r = sd_bus_message_read(message, "s", &name);
 531         if (r < 0)
 532                 return r;
 533
 534         r = bus_get_unit_by_name(m, message, name, &u, error);
 535         if (r < 0)
 536                 return r;
 537
 538         return reply_unit_path(u, message, error);
 539 }
 540
 541 static int method_get_unit_by_pid(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 542         Manager *m = ASSERT_PTR(userdata);
 543         pid_t pid;
 544         Unit *u;
 545         int r;
 546
 547         assert(message);
 548
 549         assert_cc(sizeof(pid_t) == sizeof(uint32_t));
 550
 551         /* Anyone can call this method */
 552
 553         r = sd_bus_message_read(message, "u", &pid);
 554         if (r < 0)
 555                 return r;
 556         if (pid < 0)
 557                 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Invalid PID " PID_FMT, pid);
 558
 559         if (pid == 0) {
 560                 _cleanup_(sd_bus_creds_unrefp) sd_bus_creds *creds = NULL;
 561
 562                 r = sd_bus_query_sender_creds(message, SD_BUS_CREDS_PID, &creds);
 563                 if (r < 0)
 564                         return r;
 565
 566                 r = sd_bus_creds_get_pid(creds, &pid);
 567                 if (r < 0)
 568                         return r;
 569         }
 570
 571         u = manager_get_unit_by_pid(m, pid);
 572         if (!u)
 573                 return sd_bus_error_setf(error, BUS_ERROR_NO_UNIT_FOR_PID, "PID "PID_FMT" does not belong to any loaded unit.", pid);
 574
 575         return reply_unit_path(u, message, error);
 576 }
 577
 578 static int method_get_unit_by_invocation_id(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 579         _cleanup_free_ char *path = NULL;
 580         Manager *m = ASSERT_PTR(userdata);
 581         sd_id128_t id;
 582         const void *a;
 583         Unit *u;
 584         size_t sz;
 585         int r;
 586
 587         assert(message);
 588
 589         /* Anyone can call this method */
 590
 591         r = sd_bus_message_read_array(message, 'y', &a, &sz);
 592         if (r < 0)
 593                 return r;
 594         if (sz == 0)
 595                 id = SD_ID128_NULL;
 596         else if (sz == 16)
 597                 memcpy(&id, a, sz);
 598         else
 599                 return sd_bus_error_set(error, SD_BUS_ERROR_INVALID_ARGS, "Invalid invocation ID");
 600
 601         if (sd_id128_is_null(id)) {
 602                 _cleanup_(sd_bus_creds_unrefp) sd_bus_creds *creds = NULL;
 603                 pid_t pid;
 604
 605                 r = sd_bus_query_sender_creds(message, SD_BUS_CREDS_PID, &creds);
 606                 if (r < 0)
 607                         return r;
 608
 609                 r = sd_bus_creds_get_pid(creds, &pid);
 610                 if (r < 0)
 611                         return r;
 612
 613                 u = manager_get_unit_by_pid(m, pid);
 614                 if (!u)
 615                         return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_UNIT,
 616                                                  "Client " PID_FMT " not member of any unit.", pid);
 617         } else {
 618                 u = hashmap_get(m->units_by_invocation_id, &id);
 619                 if (!u)
 620                         return sd_bus_error_setf(error, BUS_ERROR_NO_UNIT_FOR_INVOCATION_ID, "No unit with the specified invocation ID " SD_ID128_FORMAT_STR " known.", SD_ID128_FORMAT_VAL(id));
 621         }
 622
 623         r = mac_selinux_unit_access_check(u, message, "status", error);
 624         if (r < 0)
 625                 return r;
 626
 627         /* So here's a special trick: the bus path we return actually references the unit by its invocation
 628          * ID instead of the unit name. This means it stays valid only as long as the invocation ID stays the
 629          * same. */
 630         path = unit_dbus_path_invocation_id(u);
 631         if (!path)
 632                 return -ENOMEM;
 633
 634         return sd_bus_reply_method_return(message, "o", path);
 635 }
 636
 637 static int method_get_unit_by_control_group(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 638         Manager *m = userdata;
 639         const char *cgroup;
 640         Unit *u;
 641         int r;
 642
 643         r = sd_bus_message_read(message, "s", &cgroup);
 644         if (r < 0)
 645                 return r;
 646
 647         u = manager_get_unit_by_cgroup(m, cgroup);
 648         if (!u)
 649                 return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_UNIT,
 650                                          "Control group '%s' is not valid or not managed by this instance",
 651                                          cgroup);
 652
 653         return reply_unit_path(u, message, error);
 654 }
 655
 656 static int method_get_unit_by_pidfd(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 657         _cleanup_(sd_bus_message_unrefp) sd_bus_message *reply = NULL;
 658         Manager *m = ASSERT_PTR(userdata);
 659         _cleanup_free_ char *path = NULL;
 660         int r, pidfd;
 661         pid_t pid;
 662         Unit *u;
 663
 664         assert(message);
 665
 666         r = sd_bus_message_read(message, "h", &pidfd);
 667         if (r < 0)
 668                 return r;
 669
 670         r = pidfd_get_pid(pidfd, &pid);
 671         if (r < 0)
 672                 return sd_bus_error_set_errnof(error, r, "Failed to get PID from PIDFD: %m");
 673
 674         u = manager_get_unit_by_pid(m, pid);
 675         if (!u)
 676                 return sd_bus_error_setf(error, BUS_ERROR_NO_UNIT_FOR_PID, "PID "PID_FMT" does not belong to any loaded unit.", pid);
 677
 678         r = mac_selinux_unit_access_check(u, message, "status", error);
 679         if (r < 0)
 680                 return r;
 681
 682         path = unit_dbus_path(u);
 683         if (!path)
 684                 return log_oom();
 685
 686         r = sd_bus_message_new_method_return(message, &reply);
 687         if (r < 0)
 688                 return r;
 689
 690         r = sd_bus_message_append(reply, "os", path, u->id);
 691         if (r < 0)
 692                 return r;
 693
 694         r = sd_bus_message_append_array(reply, 'y', u->invocation_id.bytes, sizeof(u->invocation_id.bytes));
 695         if (r < 0)
 696                 return r;
 697
 698         /* Double-check that the process is still alive and that the PID did not change before returning the
 699          * answer. */
 700         r = pidfd_verify_pid(pidfd, pid);
 701         if (r == -ESRCH)
 702                 return sd_bus_error_setf(error,
 703                                          BUS_ERROR_NO_SUCH_PROCESS,
 704                                          "The PIDFD's PID "PID_FMT" changed during the lookup operation.",
 705                                          pid);
 706         if (r < 0)
 707                 return sd_bus_error_set_errnof(error, r, "Failed to get PID from PIDFD: %m");
 708
 709         return sd_bus_send(NULL, reply, NULL);
 710 }
 711
 712 static int method_load_unit(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 713         Manager *m = ASSERT_PTR(userdata);
 714         const char *name;
 715         Unit *u;
 716         int r;
 717
 718         assert(message);
 719
 720         /* Anyone can call this method */
 721
 722         r = sd_bus_message_read(message, "s", &name);
 723         if (r < 0)
 724                 return r;
 725
 726         r = bus_load_unit_by_name(m, message, name, &u, error);
 727         if (r < 0)
 728                 return r;
 729
 730         return reply_unit_path(u, message, error);
 731 }
 732
 733 static int method_start_unit_generic(sd_bus_message *message, Manager *m, JobType job_type, bool reload_if_possible, sd_bus_error *error) {
 734         const char *name;
 735         Unit *u;
 736         int r;
 737
 738         assert(message);
 739         assert(m);
 740
 741         r = sd_bus_message_read(message, "s", &name);
 742         if (r < 0)
 743                 return r;
 744
 745         r = manager_load_unit(m, name, NULL, error, &u);
 746         if (r < 0)
 747                 return r;
 748
 749         return bus_unit_method_start_generic(message, u, job_type, reload_if_possible, error);
 750 }
 751
 752 static int method_start_unit(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 753         return method_start_unit_generic(message, userdata, JOB_START, /* reload_if_possible = */ false, error);
 754 }
 755
 756 static int method_stop_unit(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 757         return method_start_unit_generic(message, userdata, JOB_STOP, /* reload_if_possible = */ false, error);
 758 }
 759
 760 static int method_reload_unit(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 761         return method_start_unit_generic(message, userdata, JOB_RELOAD, /* reload_if_possible = */ false, error);
 762 }
 763
 764 static int method_restart_unit(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 765         return method_start_unit_generic(message, userdata, JOB_RESTART, /* reload_if_possible = */ false, error);
 766 }
 767
 768 static int method_try_restart_unit(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 769         return method_start_unit_generic(message, userdata, JOB_TRY_RESTART, /* reload_if_possible = */ false, error);
 770 }
 771
 772 static int method_reload_or_restart_unit(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 773         return method_start_unit_generic(message, userdata, JOB_RESTART, /* reload_if_possible = */ true, error);
 774 }
 775
 776 static int method_reload_or_try_restart_unit(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 777         return method_start_unit_generic(message, userdata, JOB_TRY_RESTART, /* reload_if_possible = */ true, error);
 778 }
 779
 780 typedef enum GenericUnitOperationFlags {
 781         GENERIC_UNIT_LOAD            = 1 << 0, /* Load if the unit is not loaded yet */
 782         GENERIC_UNIT_VALIDATE_LOADED = 1 << 1, /* Verify unit is properly loaded before forwarding call */
 783 } GenericUnitOperationFlags;
 784
 785 static int method_generic_unit_operation(
 786                 sd_bus_message *message,
 787                 Manager *m,
 788                 sd_bus_error *error,
 789                 sd_bus_message_handler_t handler,
 790                 GenericUnitOperationFlags flags) {
 791
 792         const char *name;
 793         Unit *u;
 794         int r;
 795
 796         assert(message);
 797         assert(m);
 798
 799         /* Read the first argument from the command and pass the operation to the specified per-unit
 800          * method. */
 801
 802         r = sd_bus_message_read(message, "s", &name);
 803         if (r < 0)
 804                 return r;
 805
 806         if (!isempty(name) && FLAGS_SET(flags, GENERIC_UNIT_LOAD))
 807                 r = manager_load_unit(m, name, NULL, error, &u);
 808         else
 809                 r = bus_get_unit_by_name(m, message, name, &u, error);
 810         if (r < 0)
 811                 return r;
 812
 813         if (FLAGS_SET(flags, GENERIC_UNIT_VALIDATE_LOADED)) {
 814                 r = bus_unit_validate_load_state(u, error);
 815                 if (r < 0)
 816                         return r;
 817         }
 818
 819         return handler(message, u, error);
 820 }
 821
 822 static int method_enqueue_unit_job(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 823         /* We don't bother with GENERIC_UNIT_VALIDATE_LOADED here, as the job logic validates that anyway */
 824         return method_generic_unit_operation(message, userdata, error, bus_unit_method_enqueue_job, GENERIC_UNIT_LOAD);
 825 }
 826
 827 static int method_start_unit_replace(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 828         Manager *m = ASSERT_PTR(userdata);
 829         const char *old_name;
 830         Unit *u;
 831         int r;
 832
 833         assert(message);
 834
 835         r = sd_bus_message_read(message, "s", &old_name);
 836         if (r < 0)
 837                 return r;
 838
 839         r = bus_get_unit_by_name(m, message, old_name, &u, error);
 840         if (r < 0)
 841                 return r;
 842         if (!u->job || u->job->type != JOB_START)
 843                 return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_JOB, "No job queued for unit %s", old_name);
 844
 845         return method_start_unit_generic(message, m, JOB_START, /* reload_if_possible = */ false, error);
 846 }
 847
 848 static int method_kill_unit(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 849         /* We don't bother with GENERIC_UNIT_LOAD nor GENERIC_UNIT_VALIDATE_LOADED here, as it shouldn't
 850          * matter whether a unit is loaded for killing any processes possibly in the unit's cgroup. */
 851         return method_generic_unit_operation(message, userdata, error, bus_unit_method_kill, 0);
 852 }
 853
 854 static int method_clean_unit(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 855         /* Load the unit if necessary, in order to load it, and insist on the unit being loaded to be
 856          * cleaned */
 857         return method_generic_unit_operation(message, userdata, error, bus_unit_method_clean, GENERIC_UNIT_LOAD|GENERIC_UNIT_VALIDATE_LOADED);
 858 }
 859
 860 static int method_freeze_unit(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 861         return method_generic_unit_operation(message, userdata, error, bus_unit_method_freeze, 0);
 862 }
 863
 864 static int method_thaw_unit(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 865         return method_generic_unit_operation(message, userdata, error, bus_unit_method_thaw, 0);
 866 }
 867
 868 static int method_reset_failed_unit(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 869         /* Don't load the unit (because unloaded units can't be in failed state), and don't insist on the
 870          * unit to be loaded properly (since a failed unit might have its unit file disappeared) */
 871         return method_generic_unit_operation(message, userdata, error, bus_unit_method_reset_failed, 0);
 872 }
 873
 874 static int method_set_unit_properties(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 875         /* Only change properties on fully loaded units, and load them in order to set properties */
 876         return method_generic_unit_operation(message, userdata, error, bus_unit_method_set_properties, GENERIC_UNIT_LOAD|GENERIC_UNIT_VALIDATE_LOADED);
 877 }
 878
 879 static int method_bind_mount_unit(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 880         /* Only add mounts on fully loaded units */
 881         return method_generic_unit_operation(message, userdata, error, bus_service_method_bind_mount, GENERIC_UNIT_VALIDATE_LOADED);
 882 }
 883
 884 static int method_mount_image_unit(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 885         /* Only add mounts on fully loaded units */
 886         return method_generic_unit_operation(message, userdata, error, bus_service_method_mount_image, GENERIC_UNIT_VALIDATE_LOADED);
 887 }
 888
 889 static int method_ref_unit(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 890         /* Only allow reffing of fully loaded units, and make sure reffing a unit loads it. */
 891         return method_generic_unit_operation(message, userdata, error, bus_unit_method_ref, GENERIC_UNIT_LOAD|GENERIC_UNIT_VALIDATE_LOADED);
 892 }
 893
 894 static int method_unref_unit(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 895         /* Dropping a ref OTOH should not require the unit to still be loaded. And since a reffed unit is a
 896          * loaded unit there's no need to load the unit for unreffing it. */
 897         return method_generic_unit_operation(message, userdata, error, bus_unit_method_unref, 0);
 898 }
 899
 900 static int reply_unit_info(sd_bus_message *reply, Unit *u) {
 901         _cleanup_free_ char *unit_path = NULL, *job_path = NULL;
 902         Unit *following;
 903
 904         following = unit_following(u);
 905
 906         unit_path = unit_dbus_path(u);
 907         if (!unit_path)
 908                 return -ENOMEM;
 909
 910         if (u->job) {
 911                 job_path = job_dbus_path(u->job);
 912                 if (!job_path)
 913                         return -ENOMEM;
 914         }
 915
 916         return sd_bus_message_append(
 917                         reply, "(ssssssouso)",
 918                         u->id,
 919                         unit_description(u),
 920                         unit_load_state_to_string(u->load_state),
 921                         unit_active_state_to_string(unit_active_state(u)),
 922                         unit_sub_state_to_string(u),
 923                         following ? following->id : "",
 924                         unit_path,
 925                         u->job ? u->job->id : 0,
 926                         u->job ? job_type_to_string(u->job->type) : "",
 927                         empty_to_root(job_path));
 928 }
 929
 930 static int method_list_units_by_names(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 931         _cleanup_(sd_bus_message_unrefp) sd_bus_message *reply = NULL;
 932         Manager *m = ASSERT_PTR(userdata);
 933         int r;
 934         _cleanup_strv_free_ char **units = NULL;
 935
 936         assert(message);
 937
 938         r = sd_bus_message_read_strv(message, &units);
 939         if (r < 0)
 940                 return r;
 941
 942         r = sd_bus_message_new_method_return(message, &reply);
 943         if (r < 0)
 944                 return r;
 945
 946         r = sd_bus_message_open_container(reply, 'a', "(ssssssouso)");
 947         if (r < 0)
 948                 return r;
 949
 950         STRV_FOREACH(unit, units) {
 951                 Unit *u;
 952
 953                 if (!unit_name_is_valid(*unit, UNIT_NAME_ANY))
 954                         continue;
 955
 956                 r = bus_load_unit_by_name(m, message, *unit, &u, error);
 957                 if (r < 0)
 958                         return r;
 959
 960                 r = reply_unit_info(reply, u);
 961                 if (r < 0)
 962                         return r;
 963         }
 964
 965         r = sd_bus_message_close_container(reply);
 966         if (r < 0)
 967                 return r;
 968
 969         return sd_bus_send(NULL, reply, NULL);
 970 }
 971
 972 static int method_get_unit_processes(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 973         /* Don't load a unit (since it won't have any processes if it's not loaded), but don't insist on the
 974          * unit being loaded (because even improperly loaded units might still have processes around */
 975         return method_generic_unit_operation(message, userdata, error, bus_unit_method_get_processes, 0);
 976 }
 977
 978 static int method_attach_processes_to_unit(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 979         /* Don't allow attaching new processes to units that aren't loaded. Don't bother with loading a unit
 980          * for this purpose though, as an unloaded unit is a stopped unit, and we don't allow attaching
 981          * processes to stopped units anyway. */
 982         return method_generic_unit_operation(message, userdata, error, bus_unit_method_attach_processes, GENERIC_UNIT_VALIDATE_LOADED);
 983 }
 984
 985 static int transient_unit_from_message(
 986                 Manager *m,
 987                 sd_bus_message *message,
 988                 const char *name,
 989                 Unit **unit,
 990                 sd_bus_error *error) {
 991
 992         UnitType t;
 993         Unit *u;
 994         int r;
 995
 996         assert(m);
 997         assert(message);
 998         assert(name);
 999
1000         t = unit_name_to_type(name);
1001         if (t < 0)
1002                 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS,
1003                                          "Invalid unit name or type.");
1004
1005         if (!unit_vtable[t]->can_transient)
1006                 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS,
1007                                          "Unit type %s does not support transient units.",
1008                                          unit_type_to_string(t));
1009
1010         r = manager_load_unit(m, name, NULL, error, &u);
1011         if (r < 0)
1012                 return r;
1013
1014         if (!unit_is_pristine(u))
1015                 return sd_bus_error_setf(error, BUS_ERROR_UNIT_EXISTS,
1016                                          "Unit %s was already loaded or has a fragment file.", name);
1017
1018         /* OK, the unit failed to load and is unreferenced, now let's
1019          * fill in the transient data instead */
1020         r = unit_make_transient(u);
1021         if (r < 0)
1022                 return r;
1023
1024         /* Set our properties */
1025         r = bus_unit_set_properties(u, message, UNIT_RUNTIME, false, error);
1026         if (r < 0)
1027                 return r;
1028
1029         /* If the client asked for it, automatically add a reference to this unit. */
1030         if (u->bus_track_add) {
1031                 r = bus_unit_track_add_sender(u, message);
1032                 if (r < 0)
1033                         return log_error_errno(r, "Failed to watch sender: %m");
1034         }
1035
1036         /* Now load the missing bits of the unit we just created */
1037         unit_add_to_load_queue(u);
1038         manager_dispatch_load_queue(m);
1039
1040         *unit = u;
1041
1042         return 0;
1043 }
1044
1045 static int transient_aux_units_from_message(
1046                 Manager *m,
1047                 sd_bus_message *message,
1048                 sd_bus_error *error) {
1049
1050         int r;
1051
1052         assert(m);
1053         assert(message);
1054
1055         r = sd_bus_message_enter_container(message, 'a', "(sa(sv))");
1056         if (r < 0)
1057                 return r;
1058
1059         while ((r = sd_bus_message_enter_container(message, 'r', "sa(sv)")) > 0) {
1060                 const char *name = NULL;
1061                 Unit *u;
1062
1063                 r = sd_bus_message_read(message, "s", &name);
1064                 if (r < 0)
1065                         return r;
1066
1067                 r = transient_unit_from_message(m, message, name, &u, error);
1068                 if (r < 0)
1069                         return r;
1070
1071                 r = sd_bus_message_exit_container(message);
1072                 if (r < 0)
1073                         return r;
1074         }
1075         if (r < 0)
1076                 return r;
1077
1078         r = sd_bus_message_exit_container(message);
1079         if (r < 0)
1080                 return r;
1081
1082         return 0;
1083 }
1084
1085 static int method_start_transient_unit(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1086         const char *name, *smode;
1087         Manager *m = ASSERT_PTR(userdata);
1088         JobMode mode;
1089         Unit *u;
1090         int r;
1091
1092         assert(message);
1093
1094         r = mac_selinux_access_check(message, "start", error);
1095         if (r < 0)
1096                 return r;
1097
1098         r = sd_bus_message_read(message, "ss", &name, &smode);
1099         if (r < 0)
1100                 return r;
1101
1102         mode = job_mode_from_string(smode);
1103         if (mode < 0)
1104                 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Job mode %s is invalid.", smode);
1105
1106         r = bus_verify_manage_units_async(m, message, error);
1107         if (r < 0)
1108                 return r;
1109         if (r == 0)
1110                 return 1; /* No authorization for now, but the async polkit stuff will call us again when it has it */
1111
1112         r = transient_unit_from_message(m, message, name, &u, error);
1113         if (r < 0)
1114                 return r;
1115
1116         r = transient_aux_units_from_message(m, message, error);
1117         if (r < 0)
1118                 return r;
1119
1120         /* Finally, start it */
1121         return bus_unit_queue_job(message, u, JOB_START, mode, 0, error);
1122 }
1123
1124 static int method_get_job(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1125         _cleanup_free_ char *path = NULL;
1126         Manager *m = ASSERT_PTR(userdata);
1127         uint32_t id;
1128         Job *j;
1129         int r;
1130
1131         assert(message);
1132
1133         /* Anyone can call this method */
1134
1135         r = sd_bus_message_read(message, "u", &id);
1136         if (r < 0)
1137                 return r;
1138
1139         j = manager_get_job(m, id);
1140         if (!j)
1141                 return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_JOB, "Job %u does not exist.", (unsigned) id);
1142
1143         r = mac_selinux_unit_access_check(j->unit, message, "status", error);
1144         if (r < 0)
1145                 return r;
1146
1147         path = job_dbus_path(j);
1148         if (!path)
1149                 return -ENOMEM;
1150
1151         return sd_bus_reply_method_return(message, "o", path);
1152 }
1153
1154 static int method_cancel_job(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1155         Manager *m = ASSERT_PTR(userdata);
1156         uint32_t id;
1157         Job *j;
1158         int r;
1159
1160         assert(message);
1161
1162         r = sd_bus_message_read(message, "u", &id);
1163         if (r < 0)
1164                 return r;
1165
1166         j = manager_get_job(m, id);
1167         if (!j)
1168                 return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_JOB, "Job %u does not exist.", (unsigned) id);
1169
1170         return bus_job_method_cancel(message, j, error);
1171 }
1172
1173 static int method_clear_jobs(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1174         Manager *m = ASSERT_PTR(userdata);
1175         int r;
1176
1177         assert(message);
1178
1179         r = mac_selinux_access_check(message, "reload", error);
1180         if (r < 0)
1181                 return r;
1182
1183         r = bus_verify_manage_units_async(m, message, error);
1184         if (r < 0)
1185                 return r;
1186         if (r == 0)
1187                 return 1; /* No authorization for now, but the async polkit stuff will call us again when it has it */
1188
1189         manager_clear_jobs(m);
1190
1191         return sd_bus_reply_method_return(message, NULL);
1192 }
1193
1194 static int method_reset_failed(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1195         Manager *m = ASSERT_PTR(userdata);
1196         int r;
1197
1198         assert(message);
1199
1200         r = mac_selinux_access_check(message, "reload", error);
1201         if (r < 0)
1202                 return r;
1203
1204         r = bus_verify_manage_units_async(m, message, error);
1205         if (r < 0)
1206                 return r;
1207         if (r == 0)
1208                 return 1; /* No authorization for now, but the async polkit stuff will call us again when it has it */
1209
1210         manager_reset_failed(m);
1211
1212         return sd_bus_reply_method_return(message, NULL);
1213 }
1214
1215 static int list_units_filtered(sd_bus_message *message, void *userdata, sd_bus_error *error, char **states, char **patterns) {
1216         _cleanup_(sd_bus_message_unrefp) sd_bus_message *reply = NULL;
1217         Manager *m = ASSERT_PTR(userdata);
1218         const char *k;
1219         Unit *u;
1220         int r;
1221
1222         assert(message);
1223
1224         /* Anyone can call this method */
1225
1226         r = mac_selinux_access_check(message, "status", error);
1227         if (r < 0)
1228                 return r;
1229
1230         r = sd_bus_message_new_method_return(message, &reply);
1231         if (r < 0)
1232                 return r;
1233
1234         r = sd_bus_message_open_container(reply, 'a', "(ssssssouso)");
1235         if (r < 0)
1236                 return r;
1237
1238         HASHMAP_FOREACH_KEY(u, k, m->units) {
1239                 if (k != u->id)
1240                         continue;
1241
1242                 if (!strv_isempty(states) &&
1243                     !strv_contains(states, unit_load_state_to_string(u->load_state)) &&
1244                     !strv_contains(states, unit_active_state_to_string(unit_active_state(u))) &&
1245                     !strv_contains(states, unit_sub_state_to_string(u)))
1246                         continue;
1247
1248                 if (!strv_isempty(patterns) &&
1249                     !strv_fnmatch_or_empty(patterns, u->id, FNM_NOESCAPE))
1250                         continue;
1251
1252                 r = reply_unit_info(reply, u);
1253                 if (r < 0)
1254                         return r;
1255         }
1256
1257         r = sd_bus_message_close_container(reply);
1258         if (r < 0)
1259                 return r;
1260
1261         return sd_bus_send(NULL, reply, NULL);
1262 }
1263
1264 static int method_list_units(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1265         return list_units_filtered(message, userdata, error, NULL, NULL);
1266 }
1267
1268 static int method_list_units_filtered(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1269         _cleanup_strv_free_ char **states = NULL;
1270         int r;
1271
1272         r = sd_bus_message_read_strv(message, &states);
1273         if (r < 0)
1274                 return r;
1275
1276         return list_units_filtered(message, userdata, error, states, NULL);
1277 }
1278
1279 static int method_list_units_by_patterns(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1280         _cleanup_strv_free_ char **states = NULL;
1281         _cleanup_strv_free_ char **patterns = NULL;
1282         int r;
1283
1284         r = sd_bus_message_read_strv(message, &states);
1285         if (r < 0)
1286                 return r;
1287
1288         r = sd_bus_message_read_strv(message, &patterns);
1289         if (r < 0)
1290                 return r;
1291
1292         return list_units_filtered(message, userdata, error, states, patterns);
1293 }
1294
1295 static int method_list_jobs(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1296         _cleanup_(sd_bus_message_unrefp) sd_bus_message *reply = NULL;
1297         Manager *m = ASSERT_PTR(userdata);
1298         Job *j;
1299         int r;
1300
1301         assert(message);
1302
1303         /* Anyone can call this method */
1304
1305         r = mac_selinux_access_check(message, "status", error);
1306         if (r < 0)
1307                 return r;
1308
1309         r = sd_bus_message_new_method_return(message, &reply);
1310         if (r < 0)
1311                 return r;
1312
1313         r = sd_bus_message_open_container(reply, 'a', "(usssoo)");
1314         if (r < 0)
1315                 return r;
1316
1317         HASHMAP_FOREACH(j, m->jobs) {
1318                 _cleanup_free_ char *unit_path = NULL, *job_path = NULL;
1319
1320                 job_path = job_dbus_path(j);
1321                 if (!job_path)
1322                         return -ENOMEM;
1323
1324                 unit_path = unit_dbus_path(j->unit);
1325                 if (!unit_path)
1326                         return -ENOMEM;
1327
1328                 r = sd_bus_message_append(
1329                                 reply, "(usssoo)",
1330                                 j->id,
1331                                 j->unit->id,
1332                                 job_type_to_string(j->type),
1333                                 job_state_to_string(j->state),
1334                                 job_path,
1335                                 unit_path);
1336                 if (r < 0)
1337                         return r;
1338         }
1339
1340         r = sd_bus_message_close_container(reply);
1341         if (r < 0)
1342                 return r;
1343
1344         return sd_bus_send(NULL, reply, NULL);
1345 }
1346
1347 static int method_subscribe(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1348         Manager *m = ASSERT_PTR(userdata);
1349         int r;
1350
1351         assert(message);
1352
1353         /* Anyone can call this method */
1354
1355         r = mac_selinux_access_check(message, "status", error);
1356         if (r < 0)
1357                 return r;
1358
1359         if (sd_bus_message_get_bus(message) == m->api_bus) {
1360
1361                 /* Note that direct bus connection subscribe by
1362                  * default, we only track peers on the API bus here */
1363
1364                 if (!m->subscribed) {
1365                         r = sd_bus_track_new(sd_bus_message_get_bus(message), &m->subscribed, NULL, NULL);
1366                         if (r < 0)
1367                                 return r;
1368                 }
1369
1370                 r = sd_bus_track_add_sender(m->subscribed, message);
1371                 if (r < 0)
1372                         return r;
1373                 if (r == 0)
1374                         return sd_bus_error_set(error, BUS_ERROR_ALREADY_SUBSCRIBED, "Client is already subscribed.");
1375         }
1376
1377         return sd_bus_reply_method_return(message, NULL);
1378 }
1379
1380 static int method_unsubscribe(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1381         Manager *m = ASSERT_PTR(userdata);
1382         int r;
1383
1384         assert(message);
1385
1386         /* Anyone can call this method */
1387
1388         r = mac_selinux_access_check(message, "status", error);
1389         if (r < 0)
1390                 return r;
1391
1392         if (sd_bus_message_get_bus(message) == m->api_bus) {
1393                 r = sd_bus_track_remove_sender(m->subscribed, message);
1394                 if (r < 0)
1395                         return r;
1396                 if (r == 0)
1397                         return sd_bus_error_set(error, BUS_ERROR_NOT_SUBSCRIBED, "Client is not subscribed.");
1398         }
1399
1400         return sd_bus_reply_method_return(message, NULL);
1401 }
1402
1403 static int dump_impl(
1404                 sd_bus_message *message,
1405                 void *userdata,
1406                 sd_bus_error *error,
1407                 char **patterns,
1408                 int (*reply)(sd_bus_message *, char *)) {
1409
1410         _cleanup_free_ char *dump = NULL;
1411         Manager *m = ASSERT_PTR(userdata);
1412         int r;
1413
1414         assert(message);
1415
1416         /* 'status' access is the bare minimum always needed for this, as the policy might straight out
1417          * forbid a client from querying any information from systemd, regardless of any rate limiting. */
1418         r = mac_selinux_access_check(message, "status", error);
1419         if (r < 0)
1420                 return r;
1421
1422         /* Rate limit reached? Check if the caller is privileged/allowed by policy to bypass this. We
1423          * check the rate limit first to avoid the expensive roundtrip to polkit when not needed. */
1424         if (!ratelimit_below(&m->dump_ratelimit)) {
1425                 /* We need a way for SELinux to constrain the operation when the rate limit is active, even
1426                  * if polkit would allow it, but we cannot easily add new named permissions, so we need to
1427                  * use an existing one. Reload/reexec are also slow but non-destructive/modifying
1428                  * operations, and can cause PID1 to stall. So it seems similar enough in terms of security
1429                  * considerations and impact, and thus use the same access check for dumps which, given the
1430                  * large amount of data to fetch, can stall PID1 for quite some time. */
1431                 r = mac_selinux_access_check(message, "reload", error);
1432                 if (r < 0)
1433                         goto ratelimited;
1434
1435                 r = bus_verify_bypass_dump_ratelimit_async(m, message, error);
1436                 if (r < 0)
1437                         goto ratelimited;
1438                 if (r == 0)
1439                         /* No authorization for now, but the async polkit stuff will call us again when it
1440                          * has it */
1441                         return 1;
1442         }
1443
1444         r = manager_get_dump_string(m, patterns, &dump);
1445         if (r < 0)
1446                 return r;
1447
1448         return reply(message, dump);
1449
1450 ratelimited:
1451         log_warning("Dump request rejected due to rate limit on unprivileged callers, blocked for %s.",
1452                     FORMAT_TIMESPAN(ratelimit_left(&m->dump_ratelimit), USEC_PER_SEC));
1453         return sd_bus_error_setf(error,
1454                                  SD_BUS_ERROR_LIMITS_EXCEEDED,
1455                                  "Dump request rejected due to rate limit on unprivileged callers, blocked for %s.",
1456                                  FORMAT_TIMESPAN(ratelimit_left(&m->dump_ratelimit), USEC_PER_SEC));
1457 }
1458
1459 static int reply_dump(sd_bus_message *message, char *dump) {
1460         return sd_bus_reply_method_return(message, "s", dump);
1461 }
1462
1463 static int method_dump(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1464         return dump_impl(message, userdata, error, NULL, reply_dump);
1465 }
1466
1467 static int reply_dump_by_fd(sd_bus_message *message, char *dump) {
1468         _cleanup_close_ int fd = -EBADF;
1469
1470         fd = acquire_data_fd(dump, strlen(dump), 0);
1471         if (fd < 0)
1472                 return fd;
1473
1474         return sd_bus_reply_method_return(message, "h", fd);
1475 }
1476
1477 static int method_dump_by_fd(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1478         return dump_impl(message, userdata, error, NULL, reply_dump_by_fd);
1479 }
1480
1481 static int dump_units_matching_patterns(
1482                 sd_bus_message *message,
1483                 void *userdata,
1484                 sd_bus_error *error,
1485                 int (*reply)(sd_bus_message *, char *)) {
1486         _cleanup_strv_free_ char **patterns = NULL;
1487         int r;
1488
1489         r = sd_bus_message_read_strv(message, &patterns);
1490         if (r < 0)
1491                 return r;
1492
1493         return dump_impl(message, userdata, error, patterns, reply);
1494 }
1495
1496 static int method_dump_units_matching_patterns(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1497         return dump_units_matching_patterns(message, userdata, error, reply_dump);
1498 }
1499
1500 static int method_dump_units_matching_patterns_by_fd(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1501         return dump_units_matching_patterns(message, userdata, error, reply_dump_by_fd);
1502 }
1503
1504 static int method_refuse_snapshot(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1505         return sd_bus_error_set(error, SD_BUS_ERROR_NOT_SUPPORTED, "Support for snapshots has been removed.");
1506 }
1507
1508 static int get_run_space(uint64_t *ret, sd_bus_error *error) {
1509         struct statvfs svfs;
1510
1511         assert(ret);
1512
1513         if (statvfs("/run/systemd", &svfs) < 0)
1514                 return sd_bus_error_set_errnof(error, errno, "Failed to statvfs(/run/systemd): %m");
1515
1516         *ret = (uint64_t) svfs.f_bfree * (uint64_t) svfs.f_bsize;
1517         return 0;
1518 }
1519
1520 static int verify_run_space(const char *message, sd_bus_error *error) {
1521         uint64_t available = 0; /* unnecessary, but used to trick out gcc's incorrect maybe-uninitialized warning */
1522         int r;
1523
1524         assert(message);
1525
1526         r = get_run_space(&available, error);
1527         if (r < 0)
1528                 return r;
1529
1530         if (available < RELOAD_DISK_SPACE_MIN)
1531                 return sd_bus_error_setf(error,
1532                                          BUS_ERROR_DISK_FULL,
1533                                          "%s, not enough space available on /run/systemd/. "
1534                                          "Currently, %s are free, but a safety buffer of %s is enforced.",
1535                                          message,
1536                                          FORMAT_BYTES(available),
1537                                          FORMAT_BYTES(RELOAD_DISK_SPACE_MIN));
1538
1539         return 0;
1540 }
1541
1542 int verify_run_space_and_log(const char *message) {
1543         _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
1544         int r;
1545
1546         assert(message);
1547
1548         r = verify_run_space(message, &error);
1549         if (r < 0)
1550                 return log_error_errno(r, "%s", bus_error_message(&error, r));
1551
1552         return 0;
1553 }
1554
1555 static int verify_run_space_permissive(const char *message, sd_bus_error *error) {
1556         uint64_t available = 0; /* unnecessary, but used to trick out gcc's incorrect maybe-uninitialized warning */
1557         int r;
1558
1559         assert(message);
1560
1561         r = get_run_space(&available, error);
1562         if (r < 0)
1563                 return r;
1564
1565         if (available < RELOAD_DISK_SPACE_MIN)
1566                 log_warning("Dangerously low amount of free space on /run/systemd/, %s.\n"
1567                             "Currently, %s are free, but %s are suggested. Proceeding anyway.",
1568                             message,
1569                             FORMAT_BYTES(available),
1570                             FORMAT_BYTES(RELOAD_DISK_SPACE_MIN));
1571
1572         return 0;
1573 }
1574
1575 static void log_caller(sd_bus_message *message, Manager *manager, const char *method) {
1576         _cleanup_(sd_bus_creds_unrefp) sd_bus_creds *creds = NULL;
1577         const char *comm = NULL;
1578         Unit *caller;
1579         pid_t pid;
1580
1581         assert(message);
1582         assert(manager);
1583         assert(method);
1584
1585         if (sd_bus_query_sender_creds(message, SD_BUS_CREDS_PID|SD_BUS_CREDS_AUGMENT|SD_BUS_CREDS_COMM, &creds) < 0)
1586                 return;
1587
1588         /* We need at least the PID, otherwise there's nothing to log, the rest is optional */
1589         if (sd_bus_creds_get_pid(creds, &pid) < 0)
1590                 return;
1591
1592         (void) sd_bus_creds_get_comm(creds, &comm);
1593         caller = manager_get_unit_by_pid(manager, pid);
1594
1595         log_info("%s requested from client PID " PID_FMT "%s%s%s%s%s%s...",
1596                  method, pid,
1597                  comm ? " ('" : "", strempty(comm), comm ? "')" : "",
1598                  caller ? " (unit " : "", caller ? caller->id : "", caller ? ")" : "");
1599 }
1600
1601 static int method_reload(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1602         Manager *m = ASSERT_PTR(userdata);
1603         int r;
1604
1605         assert(message);
1606
1607         r = verify_run_space("Refusing to reload", error);
1608         if (r < 0)
1609                 return r;
1610
1611         r = mac_selinux_access_check(message, "reload", error);
1612         if (r < 0)
1613                 return r;
1614
1615         r = bus_verify_reload_daemon_async(m, message, error);
1616         if (r < 0)
1617                 return r;
1618         if (r == 0)
1619                 return 1; /* No authorization for now, but the async polkit stuff will call us again when it has it */
1620
1621         /* Write a log message noting the unit or process who requested the Reload() */
1622         log_caller(message, m, "Reloading");
1623
1624         /* Check the rate limit after the authorization succeeds, to avoid denial-of-service issues. */
1625         if (!ratelimit_below(&m->reload_ratelimit)) {
1626                 log_warning("Reloading request rejected due to rate limit.");
1627                 return sd_bus_error_setf(error,
1628                                          SD_BUS_ERROR_LIMITS_EXCEEDED,
1629                                          "Reload() request rejected due to rate limit.");
1630         }
1631
1632         /* Instead of sending the reply back right away, we just
1633          * remember that we need to and then send it after the reload
1634          * is finished. That way the caller knows when the reload
1635          * finished. */
1636
1637         assert(!m->pending_reload_message);
1638         r = sd_bus_message_new_method_return(message, &m->pending_reload_message);
1639         if (r < 0)
1640                 return r;
1641
1642         m->objective = MANAGER_RELOAD;
1643
1644         return 1;
1645 }
1646
1647 static int method_reexecute(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1648         Manager *m = ASSERT_PTR(userdata);
1649         int r;
1650
1651         assert(message);
1652
1653         r = verify_run_space("Refusing to reexecute", error);
1654         if (r < 0)
1655                 return r;
1656
1657         r = mac_selinux_access_check(message, "reload", error);
1658         if (r < 0)
1659                 return r;
1660
1661         r = bus_verify_reload_daemon_async(m, message, error);
1662         if (r < 0)
1663                 return r;
1664         if (r == 0)
1665                 return 1; /* No authorization for now, but the async polkit stuff will call us again when it has it */
1666
1667         /* Write a log message noting the unit or process who requested the Reexecute() */
1668         log_caller(message, m, "Reexecuting");
1669
1670         /* We don't send a reply back here, the client should
1671          * just wait for us disconnecting. */
1672
1673         m->objective = MANAGER_REEXECUTE;
1674         return 1;
1675 }
1676
1677 static int method_exit(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1678         Manager *m = ASSERT_PTR(userdata);
1679         int r;
1680
1681         assert(message);
1682
1683         r = mac_selinux_access_check(message, "halt", error);
1684         if (r < 0)
1685                 return r;
1686
1687         /* Exit() (in contrast to SetExitCode()) is actually allowed even if
1688          * we are running on the host. It will fall back on reboot() in
1689          * systemd-shutdown if it cannot do the exit() because it isn't a
1690          * container. */
1691
1692         m->objective = MANAGER_EXIT;
1693
1694         return sd_bus_reply_method_return(message, NULL);
1695 }
1696
1697 static int method_reboot(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1698         Manager *m = ASSERT_PTR(userdata);
1699         int r;
1700
1701         assert(message);
1702
1703         r = mac_selinux_access_check(message, "reboot", error);
1704         if (r < 0)
1705                 return r;
1706
1707         if (!MANAGER_IS_SYSTEM(m))
1708                 return sd_bus_error_setf(error, SD_BUS_ERROR_NOT_SUPPORTED,
1709                                          "Reboot is only supported for system managers.");
1710
1711         m->objective = MANAGER_REBOOT;
1712
1713         return sd_bus_reply_method_return(message, NULL);
1714 }
1715
1716 static int method_poweroff(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1717         Manager *m = ASSERT_PTR(userdata);
1718         int r;
1719
1720         assert(message);
1721
1722         r = mac_selinux_access_check(message, "halt", error);
1723         if (r < 0)
1724                 return r;
1725
1726         if (!MANAGER_IS_SYSTEM(m))
1727                 return sd_bus_error_setf(error, SD_BUS_ERROR_NOT_SUPPORTED,
1728                                          "Powering off is only supported for system managers.");
1729
1730         m->objective = MANAGER_POWEROFF;
1731
1732         return sd_bus_reply_method_return(message, NULL);
1733 }
1734
1735 static int method_halt(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1736         Manager *m = ASSERT_PTR(userdata);
1737         int r;
1738
1739         assert(message);
1740
1741         r = mac_selinux_access_check(message, "halt", error);
1742         if (r < 0)
1743                 return r;
1744
1745         if (!MANAGER_IS_SYSTEM(m))
1746                 return sd_bus_error_setf(error, SD_BUS_ERROR_NOT_SUPPORTED,
1747                                          "Halt is only supported for system managers.");
1748
1749         m->objective = MANAGER_HALT;
1750
1751         return sd_bus_reply_method_return(message, NULL);
1752 }
1753
1754 static int method_kexec(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1755         Manager *m = ASSERT_PTR(userdata);
1756         int r;
1757
1758         assert(message);
1759
1760         r = mac_selinux_access_check(message, "reboot", error);
1761         if (r < 0)
1762                 return r;
1763
1764         if (!MANAGER_IS_SYSTEM(m))
1765                 return sd_bus_error_setf(error, SD_BUS_ERROR_NOT_SUPPORTED,
1766                                          "KExec is only supported for system managers.");
1767
1768         m->objective = MANAGER_KEXEC;
1769
1770         return sd_bus_reply_method_return(message, NULL);
1771 }
1772
1773 static int method_switch_root(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1774         _cleanup_free_ char *ri = NULL, *rt = NULL;
1775         const char *root, *init;
1776         Manager *m = ASSERT_PTR(userdata);
1777         int r;
1778
1779         assert(message);
1780
1781         r = verify_run_space_permissive("root switching may fail", error);
1782         if (r < 0)
1783                 return r;
1784
1785         r = mac_selinux_access_check(message, "reboot", error);
1786         if (r < 0)
1787                 return r;
1788
1789         if (!MANAGER_IS_SYSTEM(m))
1790                 return sd_bus_error_setf(error, SD_BUS_ERROR_NOT_SUPPORTED,
1791                                          "Root switching is only supported by system manager.");
1792
1793         r = sd_bus_message_read(message, "ss", &root, &init);
1794         if (r < 0)
1795                 return r;
1796
1797         if (isempty(root))
1798                 /* If path is not specified, default to "/sysroot" which is what we generally expect initrds
1799                  * to use */
1800                 root = "/sysroot";
1801         else {
1802                 if (!path_is_valid(root))
1803                         return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS,
1804                                                  "New root directory must be a valid path.");
1805                 if (!path_is_absolute(root))
1806                         return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS,
1807                                                  "New root path '%s' is not absolute.", root);
1808                 if (path_equal(root, "/"))
1809                         return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS,
1810                                                  "New root directory cannot be the old root directory.");
1811         }
1812
1813         /* Safety check */
1814         if (isempty(init)) {
1815                 r = path_is_os_tree(root);
1816                 if (r < 0)
1817                         return sd_bus_error_set_errnof(error, r,
1818                                                        "Failed to determine whether root path '%s' contains an OS tree: %m",
1819                                                        root);
1820                 if (r == 0)
1821                         return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS,
1822                                                  "Specified switch root path '%s' does not seem to be an OS tree. os-release file is missing.",
1823                                                  root);
1824         } else {
1825                 if (!path_is_valid(init))
1826                         return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS,
1827                                                  "Path to init binary '%s' is not a valid path.", init);
1828
1829                 if (!path_is_absolute(init))
1830                         return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS,
1831                                                  "Path to init binary '%s' not absolute.", init);
1832
1833                 r = chase_and_access(init, root, CHASE_PREFIX_ROOT, X_OK, NULL);
1834                 if (r == -EACCES)
1835                         return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS,
1836                                                  "Init binary %s is not executable.", init);
1837                 if (r < 0)
1838                         return sd_bus_error_set_errnof(error, r,
1839                                                        "Could not resolve init executable %s: %m", init);
1840         }
1841
1842         rt = strdup(root);
1843         if (!rt)
1844                 return -ENOMEM;
1845
1846         if (!isempty(init)) {
1847                 ri = strdup(init);
1848                 if (!ri)
1849                         return -ENOMEM;
1850         }
1851
1852         free_and_replace(m->switch_root, rt);
1853         free_and_replace(m->switch_root_init, ri);
1854
1855         m->objective = MANAGER_SWITCH_ROOT;
1856
1857         return sd_bus_reply_method_return(message, NULL);
1858 }
1859
1860 static int method_set_environment(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1861         _cleanup_strv_free_ char **plus = NULL;
1862         Manager *m = ASSERT_PTR(userdata);
1863         int r;
1864
1865         assert(message);
1866
1867         r = mac_selinux_access_check(message, "reload", error);
1868         if (r < 0)
1869                 return r;
1870
1871         r = sd_bus_message_read_strv(message, &plus);
1872         if (r < 0)
1873                 return r;
1874         if (!strv_env_is_valid(plus))
1875                 return sd_bus_error_set(error, SD_BUS_ERROR_INVALID_ARGS, "Invalid environment assignments");
1876
1877         r = bus_verify_set_environment_async(m, message, error);
1878         if (r < 0)
1879                 return r;
1880         if (r == 0)
1881                 return 1; /* No authorization for now, but the async polkit stuff will call us again when it has it */
1882
1883         r = manager_client_environment_modify(m, NULL, plus);
1884         if (r < 0)
1885                 return r;
1886
1887         return sd_bus_reply_method_return(message, NULL);
1888 }
1889
1890 static int method_unset_environment(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1891         _cleanup_strv_free_ char **minus = NULL;
1892         Manager *m = ASSERT_PTR(userdata);
1893         int r;
1894
1895         assert(message);
1896
1897         r = mac_selinux_access_check(message, "reload", error);
1898         if (r < 0)
1899                 return r;
1900
1901         r = sd_bus_message_read_strv(message, &minus);
1902         if (r < 0)
1903                 return r;
1904
1905         if (!strv_env_name_or_assignment_is_valid(minus))
1906                 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS,
1907                                          "Invalid environment variable names or assignments");
1908
1909         r = bus_verify_set_environment_async(m, message, error);
1910         if (r < 0)
1911                 return r;
1912         if (r == 0)
1913                 return 1; /* No authorization for now, but the async polkit stuff will call us again when it has it */
1914
1915         r = manager_client_environment_modify(m, minus, NULL);
1916         if (r < 0)
1917                 return r;
1918
1919         return sd_bus_reply_method_return(message, NULL);
1920 }
1921
1922 static int method_unset_and_set_environment(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1923         _cleanup_strv_free_ char **minus = NULL, **plus = NULL;
1924         Manager *m = ASSERT_PTR(userdata);
1925         int r;
1926
1927         assert(message);
1928
1929         r = mac_selinux_access_check(message, "reload", error);
1930         if (r < 0)
1931                 return r;
1932
1933         r = sd_bus_message_read_strv(message, &minus);
1934         if (r < 0)
1935                 return r;
1936
1937         r = sd_bus_message_read_strv(message, &plus);
1938         if (r < 0)
1939                 return r;
1940
1941         if (!strv_env_name_or_assignment_is_valid(minus))
1942                 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS,
1943                                          "Invalid environment variable names or assignments");
1944         if (!strv_env_is_valid(plus))
1945                 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS,
1946                                          "Invalid environment assignments");
1947
1948         r = bus_verify_set_environment_async(m, message, error);
1949         if (r < 0)
1950                 return r;
1951         if (r == 0)
1952                 return 1; /* No authorization for now, but the async polkit stuff will call us again when it has it */
1953
1954         r = manager_client_environment_modify(m, minus, plus);
1955         if (r < 0)
1956                 return r;
1957
1958         return sd_bus_reply_method_return(message, NULL);
1959 }
1960
1961 static int method_set_exit_code(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1962         Manager *m = ASSERT_PTR(userdata);
1963         uint8_t code;
1964         int r;
1965
1966         assert(message);
1967
1968         r = mac_selinux_access_check(message, "exit", error);
1969         if (r < 0)
1970                 return r;
1971
1972         r = sd_bus_message_read_basic(message, 'y', &code);
1973         if (r < 0)
1974                 return r;
1975
1976         m->return_value = code;
1977
1978         return sd_bus_reply_method_return(message, NULL);
1979 }
1980
1981 static int method_lookup_dynamic_user_by_name(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1982         Manager *m = ASSERT_PTR(userdata);
1983         const char *name;
1984         uid_t uid;
1985         int r;
1986
1987         assert(message);
1988
1989         r = sd_bus_message_read_basic(message, 's', &name);
1990         if (r < 0)
1991                 return r;
1992
1993         if (!MANAGER_IS_SYSTEM(m))
1994                 return sd_bus_error_setf(error, SD_BUS_ERROR_NOT_SUPPORTED,
1995                                          "Dynamic users are only supported in the system instance.");
1996         if (!valid_user_group_name(name, VALID_USER_RELAX))
1997                 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS,
1998                                          "User name invalid: %s", name);
1999
2000         r = dynamic_user_lookup_name(m, name, &uid);
2001         if (r == -ESRCH)
2002                 return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_DYNAMIC_USER,
2003                                          "Dynamic user %s does not exist.", name);
2004         if (r < 0)
2005                 return r;
2006
2007         return sd_bus_reply_method_return(message, "u", (uint32_t) uid);
2008 }
2009
2010 static int method_lookup_dynamic_user_by_uid(sd_bus_message *message, void *userdata, sd_bus_error *error) {
2011         _cleanup_free_ char *name = NULL;
2012         Manager *m = ASSERT_PTR(userdata);
2013         uid_t uid;
2014         int r;
2015
2016         assert(message);
2017
2018         assert_cc(sizeof(uid_t) == sizeof(uint32_t));
2019         r = sd_bus_message_read_basic(message, 'u', &uid);
2020         if (r < 0)
2021                 return r;
2022
2023         if (!MANAGER_IS_SYSTEM(m))
2024                 return sd_bus_error_setf(error, SD_BUS_ERROR_NOT_SUPPORTED,
2025                                          "Dynamic users are only supported in the system instance.");
2026         if (!uid_is_valid(uid))
2027                 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS,
2028                                          "User ID invalid: " UID_FMT, uid);
2029
2030         r = dynamic_user_lookup_uid(m, uid, &name);
2031         if (r == -ESRCH)
2032                 return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_DYNAMIC_USER,
2033                                          "Dynamic user ID " UID_FMT " does not exist.", uid);
2034         if (r < 0)
2035                 return r;
2036
2037         return sd_bus_reply_method_return(message, "s", name);
2038 }
2039
2040 static int method_get_dynamic_users(sd_bus_message *message, void *userdata, sd_bus_error *error) {
2041         _cleanup_(sd_bus_message_unrefp) sd_bus_message *reply = NULL;
2042         Manager *m = ASSERT_PTR(userdata);
2043         DynamicUser *d;
2044         int r;
2045
2046         assert(message);
2047
2048         assert_cc(sizeof(uid_t) == sizeof(uint32_t));
2049
2050         if (!MANAGER_IS_SYSTEM(m))
2051                 return sd_bus_error_setf(error, SD_BUS_ERROR_NOT_SUPPORTED,
2052                                          "Dynamic users are only supported in the system instance.");
2053
2054         r = sd_bus_message_new_method_return(message, &reply);
2055         if (r < 0)
2056                 return r;
2057
2058         r = sd_bus_message_open_container(reply, 'a', "(us)");
2059         if (r < 0)
2060                 return r;
2061
2062         HASHMAP_FOREACH(d, m->dynamic_users) {
2063                 uid_t uid;
2064
2065                 r = dynamic_user_current(d, &uid);
2066                 if (r == -EAGAIN) /* not realized yet? */
2067                         continue;
2068                 if (r < 0)
2069                         return sd_bus_error_setf(error, SD_BUS_ERROR_FAILED,
2070                                                  "Failed to look up a dynamic user.");
2071
2072                 r = sd_bus_message_append(reply, "(us)", uid, d->name);
2073                 if (r < 0)
2074                         return r;
2075         }
2076
2077         r = sd_bus_message_close_container(reply);
2078         if (r < 0)
2079                 return r;
2080
2081         return sd_bus_send(NULL, reply, NULL);
2082 }
2083
2084 static int method_enqueue_marked_jobs(sd_bus_message *message, void *userdata, sd_bus_error *error) {
2085         Manager *m = ASSERT_PTR(userdata);
2086         int r;
2087
2088         assert(message);
2089
2090         r = mac_selinux_access_check(message, "start", error);
2091         if (r < 0)
2092                 return r;
2093
2094         r = bus_verify_manage_units_async(m, message, error);
2095         if (r < 0)
2096                 return r;
2097         if (r == 0)
2098                 return 1; /* No authorization for now, but the async polkit stuff will call us again when it has it */
2099
2100         log_info("Queuing reload/restart jobs for marked units%s", special_glyph(SPECIAL_GLYPH_ELLIPSIS));
2101
2102         _cleanup_(sd_bus_message_unrefp) sd_bus_message *reply = NULL;
2103         r = sd_bus_message_new_method_return(message, &reply);
2104         if (r < 0)
2105                 return r;
2106
2107         r = sd_bus_message_open_container(reply, 'a', "o");
2108         if (r < 0)
2109                 return r;
2110
2111         Unit *u;
2112         char *k;
2113         int ret = 0;
2114         HASHMAP_FOREACH_KEY(u, k, m->units) {
2115                 /* ignore aliases */
2116                 if (u->id != k)
2117                         continue;
2118
2119                 BusUnitQueueFlags flags;
2120                 if (FLAGS_SET(u->markers, 1u << UNIT_MARKER_NEEDS_RESTART))
2121                         flags = 0;
2122                 else if (FLAGS_SET(u->markers, 1u << UNIT_MARKER_NEEDS_RELOAD))
2123                         flags = BUS_UNIT_QUEUE_RELOAD_IF_POSSIBLE;
2124                 else
2125                         continue;
2126
2127                 r = mac_selinux_unit_access_check(u, message, "start", error);
2128                 if (r >= 0)
2129                         r = bus_unit_queue_job_one(message, u,
2130                                                    JOB_TRY_RESTART, JOB_FAIL, flags,
2131                                                    reply, error);
2132                 if (r < 0) {
2133                         if (ERRNO_IS_RESOURCE(r))
2134                                 return r;
2135                         if (ret >= 0)
2136                                 ret = r;
2137                         sd_bus_error_free(error);
2138                 }
2139         }
2140
2141         if (ret < 0)
2142                 return sd_bus_error_set_errnof(error, ret,
2143                                                "Failed to enqueue some jobs, see logs for details: %m");
2144
2145         r = sd_bus_message_close_container(reply);
2146         if (r < 0)
2147                 return r;
2148
2149         return sd_bus_send(NULL, reply, NULL);
2150 }
2151
2152 static int list_unit_files_by_patterns(sd_bus_message *message, void *userdata, sd_bus_error *error, char **states, char **patterns) {
2153         _cleanup_(sd_bus_message_unrefp) sd_bus_message *reply = NULL;
2154         Manager *m = ASSERT_PTR(userdata);
2155         UnitFileList *item;
2156         _cleanup_hashmap_free_ Hashmap *h = NULL;
2157         int r;
2158
2159         assert(message);
2160
2161         /* Anyone can call this method */
2162
2163         r = mac_selinux_access_check(message, "status", error);
2164         if (r < 0)
2165                 return r;
2166
2167         r = sd_bus_message_new_method_return(message, &reply);
2168         if (r < 0)
2169                 return r;
2170
2171         h = hashmap_new(&unit_file_list_hash_ops_free);
2172         if (!h)
2173                 return -ENOMEM;
2174
2175         r = unit_file_get_list(m->runtime_scope, NULL, h, states, patterns);
2176         if (r < 0)
2177                 return r;
2178
2179         r = sd_bus_message_open_container(reply, 'a', "(ss)");
2180         if (r < 0)
2181                 return r;
2182
2183         HASHMAP_FOREACH(item, h) {
2184
2185                 r = sd_bus_message_append(reply, "(ss)", item->path, unit_file_state_to_string(item->state));
2186                 if (r < 0)
2187                         return r;
2188         }
2189
2190         r = sd_bus_message_close_container(reply);
2191         if (r < 0)
2192                 return r;
2193
2194         return sd_bus_send(NULL, reply, NULL);
2195 }
2196
2197 static int method_list_unit_files(sd_bus_message *message, void *userdata, sd_bus_error *error) {
2198         return list_unit_files_by_patterns(message, userdata, error, NULL, NULL);
2199 }
2200
2201 static int method_list_unit_files_by_patterns(sd_bus_message *message, void *userdata, sd_bus_error *error) {
2202         _cleanup_strv_free_ char **states = NULL;
2203         _cleanup_strv_free_ char **patterns = NULL;
2204         int r;
2205
2206         r = sd_bus_message_read_strv(message, &states);
2207         if (r < 0)
2208                 return r;
2209
2210         r = sd_bus_message_read_strv(message, &patterns);
2211         if (r < 0)
2212                 return r;
2213
2214         return list_unit_files_by_patterns(message, userdata, error, states, patterns);
2215 }
2216
2217 static int method_get_unit_file_state(sd_bus_message *message, void *userdata, sd_bus_error *error) {
2218         Manager *m = ASSERT_PTR(userdata);
2219         const char *name;
2220         UnitFileState state;
2221         int r;
2222
2223         assert(message);
2224
2225         /* Anyone can call this method */
2226
2227         r = mac_selinux_access_check(message, "status", error);
2228         if (r < 0)
2229                 return r;
2230
2231         r = sd_bus_message_read(message, "s", &name);
2232         if (r < 0)
2233                 return r;
2234
2235         r = unit_file_get_state(m->runtime_scope, NULL, name, &state);
2236         if (r < 0)
2237                 return r;
2238
2239         return sd_bus_reply_method_return(message, "s", unit_file_state_to_string(state));
2240 }
2241
2242 static int method_get_default_target(sd_bus_message *message, void *userdata, sd_bus_error *error) {
2243         _cleanup_free_ char *default_target = NULL;
2244         Manager *m = ASSERT_PTR(userdata);
2245         int r;
2246
2247         assert(message);
2248
2249         /* Anyone can call this method */
2250
2251         r = mac_selinux_access_check(message, "status", error);
2252         if (r < 0)
2253                 return r;
2254
2255         r = unit_file_get_default(m->runtime_scope, NULL, &default_target);
2256         if (r == -ERFKILL)
2257                 sd_bus_error_setf(error, BUS_ERROR_UNIT_MASKED, "Unit file is masked.");
2258         if (r < 0)
2259                 return r;
2260
2261         return sd_bus_reply_method_return(message, "s", default_target);
2262 }
2263
2264 static int send_unit_files_changed(sd_bus *bus, void *userdata) {
2265         _cleanup_(sd_bus_message_unrefp) sd_bus_message *message = NULL;
2266         int r;
2267
2268         assert(bus);
2269
2270         r = sd_bus_message_new_signal(bus, &message,
2271                                       "/org/freedesktop/systemd1",
2272                                       "org.freedesktop.systemd1.Manager",
2273                                       "UnitFilesChanged");
2274         if (r < 0)
2275                 return r;
2276
2277         return sd_bus_send(bus, message, NULL);
2278 }
2279
2280 /* Create an error reply, using the error information from changes[]
2281  * if possible, and fall back to generating an error from error code c.
2282  * The error message only describes the first error.
2283  */
2284 static int install_error(
2285                 sd_bus_error *error,
2286                 int c,
2287                 InstallChange *changes,
2288                 size_t n_changes) {
2289
2290         CLEANUP_ARRAY(changes, n_changes, install_changes_free);
2291
2292         for (size_t i = 0; i < n_changes; i++)
2293
2294                 /* When making changes here, make sure to also change install_changes_dump() in install.c. */
2295
2296                 switch (changes[i].type) {
2297                 case 0 ... _INSTALL_CHANGE_TYPE_MAX: /* not errors */
2298                         break;
2299
2300                 case -EEXIST:
2301                         if (changes[i].source)
2302                                 return sd_bus_error_setf(error, BUS_ERROR_UNIT_EXISTS,
2303                                                          "File %s already exists and is a symlink to %s.",
2304                                                          changes[i].path, changes[i].source);
2305                         return sd_bus_error_setf(error, BUS_ERROR_UNIT_EXISTS,
2306                                                  "File %s already exists.",
2307                                                  changes[i].path);
2308
2309                 case -ERFKILL:
2310                         return sd_bus_error_setf(error, BUS_ERROR_UNIT_MASKED,
2311                                                  "Unit file %s is masked.", changes[i].path);
2312
2313                 case -EADDRNOTAVAIL:
2314                         return sd_bus_error_setf(error, BUS_ERROR_UNIT_GENERATED,
2315                                                  "Unit %s is transient or generated.", changes[i].path);
2316
2317                 case -ETXTBSY:
2318                         return sd_bus_error_setf(error, BUS_ERROR_UNIT_BAD_PATH,
2319                                                  "File %s is under the systemd unit hierarchy already.", changes[i].path);
2320
2321                 case -EBADSLT:
2322                         return sd_bus_error_setf(error, BUS_ERROR_BAD_UNIT_SETTING,
2323                                                  "Invalid specifier in %s.", changes[i].path);
2324
2325                 case -EIDRM:
2326                         return sd_bus_error_setf(error, BUS_ERROR_BAD_UNIT_SETTING,
2327                                                  "Destination unit %s is a non-template unit.", changes[i].path);
2328
2329                 case -EUCLEAN:
2330                         return sd_bus_error_setf(error, BUS_ERROR_BAD_UNIT_SETTING,
2331                                                  "\"%s\" is not a valid unit name.",
2332                                                  changes[i].path);
2333
2334                 case -ELOOP:
2335                         return sd_bus_error_setf(error, BUS_ERROR_UNIT_LINKED,
2336                                                  "Refusing to operate on alias name or linked unit file: %s",
2337                                                  changes[i].path);
2338
2339                 case -EXDEV:
2340                         if (changes[i].source)
2341                                 return sd_bus_error_setf(error, BUS_ERROR_BAD_UNIT_SETTING,
2342                                                          "Cannot alias %s as %s.",
2343                                                          changes[i].source, changes[i].path);
2344                         return sd_bus_error_setf(error, BUS_ERROR_BAD_UNIT_SETTING,
2345                                                  "Invalid unit reference %s.", changes[i].path);
2346
2347                 case -ENOENT:
2348                         return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_UNIT,
2349                                                  "Unit file %s does not exist.", changes[i].path);
2350
2351                 case -EUNATCH:
2352                         return sd_bus_error_setf(error, BUS_ERROR_BAD_UNIT_SETTING,
2353                                                  "Cannot resolve specifiers in %s.", changes[i].path);
2354
2355                 default:
2356                         assert(changes[i].type < 0); /* other errors */
2357                         return sd_bus_error_set_errnof(error, changes[i].type, "File %s: %m", changes[i].path);
2358                 }
2359
2360         return c < 0 ? c : -EINVAL;
2361 }
2362
2363 static int reply_install_changes_and_free(
2364                 Manager *m,
2365                 sd_bus_message *message,
2366                 int carries_install_info,
2367                 InstallChange *changes,
2368                 size_t n_changes,
2369                 sd_bus_error *error) {
2370
2371         _cleanup_(sd_bus_message_unrefp) sd_bus_message *reply = NULL;
2372         bool bad = false, good = false;
2373         int r;
2374
2375         CLEANUP_ARRAY(changes, n_changes, install_changes_free);
2376
2377         if (install_changes_have_modification(changes, n_changes)) {
2378                 r = bus_foreach_bus(m, NULL, send_unit_files_changed, NULL);
2379                 if (r < 0)
2380                         log_debug_errno(r, "Failed to send UnitFilesChanged signal: %m");
2381         }
2382
2383         r = sd_bus_message_new_method_return(message, &reply);
2384         if (r < 0)
2385                 return r;
2386
2387         if (carries_install_info >= 0) {
2388                 r = sd_bus_message_append(reply, "b", carries_install_info);
2389                 if (r < 0)
2390                         return r;
2391         }
2392
2393         r = sd_bus_message_open_container(reply, 'a', "(sss)");
2394         if (r < 0)
2395                 return r;
2396
2397         for (size_t i = 0; i < n_changes; i++) {
2398
2399                 if (changes[i].type < 0) {
2400                         bad = true;
2401                         continue;
2402                 }
2403
2404                 r = sd_bus_message_append(
2405                                 reply, "(sss)",
2406                                 install_change_type_to_string(changes[i].type),
2407                                 changes[i].path,
2408                                 changes[i].source);
2409                 if (r < 0)
2410                         return r;
2411
2412                 good = true;
2413         }
2414
2415         /* If there was a failed change, and no successful change, then return the first failure as proper
2416          * method call error. */
2417         if (bad && !good)
2418                 return install_error(error, 0, TAKE_PTR(changes), n_changes);
2419
2420         r = sd_bus_message_close_container(reply);
2421         if (r < 0)
2422                 return r;
2423
2424         return sd_bus_send(NULL, reply, NULL);
2425 }
2426
2427 static int method_enable_unit_files_generic(
2428                 sd_bus_message *message,
2429                 Manager *m,
2430                 int (*call)(RuntimeScope scope, UnitFileFlags flags, const char *root_dir, char *files[], InstallChange **changes, size_t *n_changes),
2431                 bool carries_install_info,
2432                 sd_bus_error *error) {
2433
2434         _cleanup_strv_free_ char **l = NULL;
2435         InstallChange *changes = NULL;
2436         size_t n_changes = 0;
2437         UnitFileFlags flags;
2438         int r;
2439
2440         assert(message);
2441         assert(m);
2442
2443         r = sd_bus_message_read_strv(message, &l);
2444         if (r < 0)
2445                 return r;
2446
2447         if (sd_bus_message_is_method_call(message, NULL, "EnableUnitFilesWithFlags")) {
2448                 uint64_t raw_flags;
2449
2450                 r = sd_bus_message_read(message, "t", &raw_flags);
2451                 if (r < 0)
2452                         return r;
2453                 if ((raw_flags & ~_UNIT_FILE_FLAGS_MASK_PUBLIC) != 0)
2454                         return -EINVAL;
2455                 flags = raw_flags;
2456         } else {
2457                 int runtime, force;
2458
2459                 r = sd_bus_message_read(message, "bb", &runtime, &force);
2460                 if (r < 0)
2461                         return r;
2462                 flags = unit_file_bools_to_flags(runtime, force);
2463         }
2464
2465         r = bus_verify_manage_unit_files_async(m, message, error);
2466         if (r < 0)
2467                 return r;
2468         if (r == 0)
2469                 return 1; /* No authorization for now, but the async polkit stuff will call us again when it has it */
2470
2471         r = call(m->runtime_scope, flags, NULL, l, &changes, &n_changes);
2472         if (r < 0)
2473                 return install_error(error, r, changes, n_changes);
2474
2475         return reply_install_changes_and_free(m, message, carries_install_info ? r : -1, changes, n_changes, error);
2476 }
2477
2478 static int method_enable_unit_files_with_flags(sd_bus_message *message, void *userdata, sd_bus_error *error) {
2479         return method_enable_unit_files_generic(message, userdata, unit_file_enable, /* carries_install_info = */ true, error);
2480 }
2481
2482 static int method_enable_unit_files(sd_bus_message *message, void *userdata, sd_bus_error *error) {
2483         return method_enable_unit_files_generic(message, userdata, unit_file_enable, /* carries_install_info = */ true, error);
2484 }
2485
2486 static int method_reenable_unit_files(sd_bus_message *message, void *userdata, sd_bus_error *error) {
2487         return method_enable_unit_files_generic(message, userdata, unit_file_reenable, /* carries_install_info = */ true, error);
2488 }
2489
2490 static int method_link_unit_files(sd_bus_message *message, void *userdata, sd_bus_error *error) {
2491         return method_enable_unit_files_generic(message, userdata, unit_file_link, /* carries_install_info = */ false, error);
2492 }
2493
2494 static int unit_file_preset_without_mode(RuntimeScope scope, UnitFileFlags flags, const char *root_dir, char **files, InstallChange **changes, size_t *n_changes) {
2495         return unit_file_preset(scope, flags, root_dir, files, UNIT_FILE_PRESET_FULL, changes, n_changes);
2496 }
2497
2498 static int method_preset_unit_files(sd_bus_message *message, void *userdata, sd_bus_error *error) {
2499         return method_enable_unit_files_generic(message, userdata, unit_file_preset_without_mode, /* carries_install_info = */ true, error);
2500 }
2501
2502 static int method_mask_unit_files(sd_bus_message *message, void *userdata, sd_bus_error *error) {
2503         return method_enable_unit_files_generic(message, userdata, unit_file_mask, /* carries_install_info = */ false, error);
2504 }
2505
2506 static int method_preset_unit_files_with_mode(sd_bus_message *message, void *userdata, sd_bus_error *error) {
2507
2508         _cleanup_strv_free_ char **l = NULL;
2509         InstallChange *changes = NULL;
2510         size_t n_changes = 0;
2511         Manager *m = ASSERT_PTR(userdata);
2512         UnitFilePresetMode preset_mode;
2513         int runtime, force, r;
2514         UnitFileFlags flags;
2515         const char *mode;
2516
2517         assert(message);
2518
2519         r = sd_bus_message_read_strv(message, &l);
2520         if (r < 0)
2521                 return r;
2522
2523         r = sd_bus_message_read(message, "sbb", &mode, &runtime, &force);
2524         if (r < 0)
2525                 return r;
2526
2527         flags = unit_file_bools_to_flags(runtime, force);
2528
2529         if (isempty(mode))
2530                 preset_mode = UNIT_FILE_PRESET_FULL;
2531         else {
2532                 preset_mode = unit_file_preset_mode_from_string(mode);
2533                 if (preset_mode < 0)
2534                         return -EINVAL;
2535         }
2536
2537         r = bus_verify_manage_unit_files_async(m, message, error);
2538         if (r < 0)
2539                 return r;
2540         if (r == 0)
2541                 return 1; /* No authorization for now, but the async polkit stuff will call us again when it has it */
2542
2543         r = unit_file_preset(m->runtime_scope, flags, NULL, l, preset_mode, &changes, &n_changes);
2544         if (r < 0)
2545                 return install_error(error, r, changes, n_changes);
2546
2547         return reply_install_changes_and_free(m, message, r, changes, n_changes, error);
2548 }
2549
2550 static int method_disable_unit_files_generic(
2551                 sd_bus_message *message,
2552                 Manager *m,
2553                 int (*call)(RuntimeScope scope, UnitFileFlags flags, const char *root_dir, char *files[], InstallChange **changes, size_t *n_changes),
2554                 bool carries_install_info,
2555                 sd_bus_error *error) {
2556
2557         _cleanup_strv_free_ char **l = NULL;
2558         InstallChange *changes = NULL;
2559         UnitFileFlags flags;
2560         size_t n_changes = 0;
2561         int r;
2562
2563         assert(message);
2564         assert(m);
2565
2566         r = sd_bus_message_read_strv(message, &l);
2567         if (r < 0)
2568                 return r;
2569
2570         if (sd_bus_message_is_method_call(message, NULL, "DisableUnitFilesWithFlags") ||
2571             sd_bus_message_is_method_call(message, NULL, "DisableUnitFilesWithFlagsAndInstallInfo")) {
2572                 uint64_t raw_flags;
2573
2574                 r = sd_bus_message_read(message, "t", &raw_flags);
2575                 if (r < 0)
2576                         return r;
2577                 if ((raw_flags & ~_UNIT_FILE_FLAGS_MASK_PUBLIC) != 0 ||
2578                                 FLAGS_SET(raw_flags, UNIT_FILE_FORCE))
2579                         return -EINVAL;
2580                 flags = raw_flags;
2581         } else {
2582                 int runtime;
2583
2584                 r = sd_bus_message_read(message, "b", &runtime);
2585                 if (r < 0)
2586                         return r;
2587                 flags = unit_file_bools_to_flags(runtime, false);
2588         }
2589
2590         r = bus_verify_manage_unit_files_async(m, message, error);
2591         if (r < 0)
2592                 return r;
2593         if (r == 0)
2594                 return 1; /* No authorization for now, but the async polkit stuff will call us again when it has it */
2595
2596         r = call(m->runtime_scope, flags, NULL, l, &changes, &n_changes);
2597         if (r < 0)
2598                 return install_error(error, r, changes, n_changes);
2599
2600         return reply_install_changes_and_free(m, message, carries_install_info ? r : -1, changes, n_changes, error);
2601 }
2602
2603 static int method_disable_unit_files_with_flags(sd_bus_message *message, void *userdata, sd_bus_error *error) {
2604         return method_disable_unit_files_generic(message, userdata, unit_file_disable, /* carries_install_info = */ false, error);
2605 }
2606
2607 static int method_disable_unit_files_with_flags_and_install_info(sd_bus_message *message, void *userdata, sd_bus_error *error) {
2608         return method_disable_unit_files_generic(message, userdata, unit_file_disable, /* carries_install_info = */ true, error);
2609 }
2610
2611 static int method_disable_unit_files(sd_bus_message *message, void *userdata, sd_bus_error *error) {
2612         return method_disable_unit_files_generic(message, userdata, unit_file_disable, /* carries_install_info = */ false, error);
2613 }
2614
2615 static int method_unmask_unit_files(sd_bus_message *message, void *userdata, sd_bus_error *error) {
2616         return method_disable_unit_files_generic(message, userdata, unit_file_unmask, /* carries_install_info = */ false, error);
2617 }
2618
2619 static int method_revert_unit_files(sd_bus_message *message, void *userdata, sd_bus_error *error) {
2620         _cleanup_strv_free_ char **l = NULL;
2621         InstallChange *changes = NULL;
2622         size_t n_changes = 0;
2623         Manager *m = ASSERT_PTR(userdata);
2624         int r;
2625
2626         assert(message);
2627
2628         r = sd_bus_message_read_strv(message, &l);
2629         if (r < 0)
2630                 return r;
2631
2632         r = bus_verify_manage_unit_files_async(m, message, error);
2633         if (r < 0)
2634                 return r;
2635         if (r == 0)
2636                 return 1; /* No authorization for now, but the async polkit stuff will call us again when it has it */
2637
2638         r = unit_file_revert(m->runtime_scope, NULL, l, &changes, &n_changes);
2639         if (r < 0)
2640                 return install_error(error, r, changes, n_changes);
2641
2642         return reply_install_changes_and_free(m, message, -1, changes, n_changes, error);
2643 }
2644
2645 static int method_set_default_target(sd_bus_message *message, void *userdata, sd_bus_error *error) {
2646         InstallChange *changes = NULL;
2647         size_t n_changes = 0;
2648         Manager *m = ASSERT_PTR(userdata);
2649         const char *name;
2650         int force, r;
2651
2652         assert(message);
2653
2654         r = mac_selinux_access_check(message, "enable", error);
2655         if (r < 0)
2656                 return r;
2657
2658         r = sd_bus_message_read(message, "sb", &name, &force);
2659         if (r < 0)
2660                 return r;
2661
2662         r = bus_verify_manage_unit_files_async(m, message, error);
2663         if (r < 0)
2664                 return r;
2665         if (r == 0)
2666                 return 1; /* No authorization for now, but the async polkit stuff will call us again when it has it */
2667
2668         r = unit_file_set_default(m->runtime_scope, force ? UNIT_FILE_FORCE : 0, NULL, name, &changes, &n_changes);
2669         if (r < 0)
2670                 return install_error(error, r, changes, n_changes);
2671
2672         return reply_install_changes_and_free(m, message, -1, changes, n_changes, error);
2673 }
2674
2675 static int method_preset_all_unit_files(sd_bus_message *message, void *userdata, sd_bus_error *error) {
2676         InstallChange *changes = NULL;
2677         size_t n_changes = 0;
2678         Manager *m = ASSERT_PTR(userdata);
2679         UnitFilePresetMode preset_mode;
2680         const char *mode;
2681         UnitFileFlags flags;
2682         int force, runtime, r;
2683
2684         assert(message);
2685
2686         r = mac_selinux_access_check(message, "enable", error);
2687         if (r < 0)
2688                 return r;
2689
2690         r = sd_bus_message_read(message, "sbb", &mode, &runtime, &force);
2691         if (r < 0)
2692                 return r;
2693
2694         flags = unit_file_bools_to_flags(runtime, force);
2695
2696         if (isempty(mode))
2697                 preset_mode = UNIT_FILE_PRESET_FULL;
2698         else {
2699                 preset_mode = unit_file_preset_mode_from_string(mode);
2700                 if (preset_mode < 0)
2701                         return -EINVAL;
2702         }
2703
2704         r = bus_verify_manage_unit_files_async(m, message, error);
2705         if (r < 0)
2706                 return r;
2707         if (r == 0)
2708                 return 1; /* No authorization for now, but the async polkit stuff will call us again when it has it */
2709
2710         r = unit_file_preset_all(m->runtime_scope, flags, NULL, preset_mode, &changes, &n_changes);
2711         if (r < 0)
2712                 return install_error(error, r, changes, n_changes);
2713
2714         return reply_install_changes_and_free(m, message, -1, changes, n_changes, error);
2715 }
2716
2717 static int method_add_dependency_unit_files(sd_bus_message *message, void *userdata, sd_bus_error *error) {
2718         _cleanup_strv_free_ char **l = NULL;
2719         Manager *m = ASSERT_PTR(userdata);
2720         InstallChange *changes = NULL;
2721         size_t n_changes = 0;
2722         int runtime, force, r;
2723         char *target, *type;
2724         UnitDependency dep;
2725         UnitFileFlags flags;
2726
2727         assert(message);
2728
2729         r = bus_verify_manage_unit_files_async(m, message, error);
2730         if (r < 0)
2731                 return r;
2732         if (r == 0)
2733                 return 1; /* No authorization for now, but the async polkit stuff will call us again when it has it */
2734
2735         r = sd_bus_message_read_strv(message, &l);
2736         if (r < 0)
2737                 return r;
2738
2739         r = sd_bus_message_read(message, "ssbb", &target, &type, &runtime, &force);
2740         if (r < 0)
2741                 return r;
2742
2743         flags = unit_file_bools_to_flags(runtime, force);
2744
2745         dep = unit_dependency_from_string(type);
2746         if (dep < 0)
2747                 return -EINVAL;
2748
2749         r = unit_file_add_dependency(m->runtime_scope, flags, NULL, l, target, dep, &changes, &n_changes);
2750         if (r < 0)
2751                 return install_error(error, r, changes, n_changes);
2752
2753         return reply_install_changes_and_free(m, message, -1, changes, n_changes, error);
2754 }
2755
2756 static int method_get_unit_file_links(sd_bus_message *message, void *userdata, sd_bus_error *error) {
2757         _cleanup_(sd_bus_message_unrefp) sd_bus_message *reply = NULL;
2758         Manager *m = ASSERT_PTR(userdata);
2759         InstallChange *changes = NULL;
2760         size_t n_changes = 0, i;
2761         const char *name;
2762         int runtime, r;
2763
2764         CLEANUP_ARRAY(changes, n_changes, install_changes_free);
2765
2766         r = sd_bus_message_read(message, "sb", &name, &runtime);
2767         if (r < 0)
2768                 return r;
2769
2770         r = sd_bus_message_new_method_return(message, &reply);
2771         if (r < 0)
2772                 return r;
2773
2774         r = sd_bus_message_open_container(reply, SD_BUS_TYPE_ARRAY, "s");
2775         if (r < 0)
2776                 return r;
2777
2778         r = unit_file_disable(m->runtime_scope,
2779                               UNIT_FILE_DRY_RUN | (runtime ? UNIT_FILE_RUNTIME : 0),
2780                               NULL, STRV_MAKE(name), &changes, &n_changes);
2781         if (r < 0)
2782                 return log_error_errno(r, "Failed to get file links for %s: %m", name);
2783
2784         for (i = 0; i < n_changes; i++)
2785                 if (changes[i].type == INSTALL_CHANGE_UNLINK) {
2786                         r = sd_bus_message_append(reply, "s", changes[i].path);
2787                         if (r < 0)
2788                                 return r;
2789                 }
2790
2791         r = sd_bus_message_close_container(reply);
2792         if (r < 0)
2793                 return r;
2794
2795         return sd_bus_send(NULL, reply, NULL);
2796 }
2797
2798 static int method_get_job_waiting(sd_bus_message *message, void *userdata, sd_bus_error *error) {
2799         Manager *m = ASSERT_PTR(userdata);
2800         uint32_t id;
2801         Job *j;
2802         int r;
2803
2804         assert(message);
2805
2806         r = sd_bus_message_read(message, "u", &id);
2807         if (r < 0)
2808                 return r;
2809
2810         j = manager_get_job(m, id);
2811         if (!j)
2812                 return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_JOB, "Job %u does not exist.", (unsigned) id);
2813
2814         return bus_job_method_get_waiting_jobs(message, j, error);
2815 }
2816
2817 static int method_abandon_scope(sd_bus_message *message, void *userdata, sd_bus_error *error) {
2818         Manager *m = ASSERT_PTR(userdata);
2819         const char *name;
2820         Unit *u;
2821         int r;
2822
2823         assert(message);
2824
2825         r = sd_bus_message_read(message, "s", &name);
2826         if (r < 0)
2827                 return r;
2828
2829         r = bus_get_unit_by_name(m, message, name, &u, error);
2830         if (r < 0)
2831                 return r;
2832
2833         if (u->type != UNIT_SCOPE)
2834                 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS,
2835                                          "Unit '%s' is not a scope unit, refusing.", name);
2836
2837         return bus_scope_method_abandon(message, u, error);
2838 }
2839
2840 static int method_set_show_status(sd_bus_message *message, void *userdata, sd_bus_error *error) {
2841         Manager *m = ASSERT_PTR(userdata);
2842         ShowStatus mode = _SHOW_STATUS_INVALID;
2843         const char *t;
2844         int r;
2845
2846         assert(message);
2847
2848         r = mac_selinux_access_check(message, "reload", error);
2849         if (r < 0)
2850                 return r;
2851
2852         r = bus_verify_set_environment_async(m, message, error);
2853         if (r < 0)
2854                 return r;
2855         if (r == 0)
2856                 return 1; /* No authorization for now, but the async polkit stuff will call us again when it has it */
2857
2858         r = sd_bus_message_read(message, "s", &t);
2859         if (r < 0)
2860                 return r;
2861
2862         if (!isempty(t)) {
2863                 mode = show_status_from_string(t);
2864                 if (mode < 0)
2865                         return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS,
2866                                                  "Invalid show status '%s'", t);
2867         }
2868
2869         manager_override_show_status(m, mode, "bus");
2870
2871         return sd_bus_reply_method_return(message, NULL);
2872 }
2873
2874 static int method_dump_unit_descriptor_store(sd_bus_message *message, void *userdata, sd_bus_error *error) {
2875         return method_generic_unit_operation(message, userdata, error, bus_service_method_dump_file_descriptor_store, 0);
2876 }
2877
2878 const sd_bus_vtable bus_manager_vtable[] = {
2879         SD_BUS_VTABLE_START(0),
2880
2881         SD_BUS_PROPERTY("Version", "s", property_get_version, 0, SD_BUS_VTABLE_PROPERTY_CONST),
2882         SD_BUS_PROPERTY("Features", "s", property_get_features, 0, SD_BUS_VTABLE_PROPERTY_CONST),
2883         SD_BUS_PROPERTY("Virtualization", "s", property_get_virtualization, 0, SD_BUS_VTABLE_PROPERTY_CONST),
2884         SD_BUS_PROPERTY("Architecture", "s", property_get_architecture, 0, SD_BUS_VTABLE_PROPERTY_CONST),
2885         SD_BUS_PROPERTY("Tainted", "s", property_get_tainted, 0, SD_BUS_VTABLE_PROPERTY_CONST),
2886         BUS_PROPERTY_DUAL_TIMESTAMP("FirmwareTimestamp", offsetof(Manager, timestamps[MANAGER_TIMESTAMP_FIRMWARE]), SD_BUS_VTABLE_PROPERTY_CONST),
2887         BUS_PROPERTY_DUAL_TIMESTAMP("LoaderTimestamp", offsetof(Manager, timestamps[MANAGER_TIMESTAMP_LOADER]), SD_BUS_VTABLE_PROPERTY_CONST),
2888         BUS_PROPERTY_DUAL_TIMESTAMP("KernelTimestamp", offsetof(Manager, timestamps[MANAGER_TIMESTAMP_KERNEL]), SD_BUS_VTABLE_PROPERTY_CONST),
2889         BUS_PROPERTY_DUAL_TIMESTAMP("InitRDTimestamp", offsetof(Manager, timestamps[MANAGER_TIMESTAMP_INITRD]), SD_BUS_VTABLE_PROPERTY_CONST),
2890         BUS_PROPERTY_DUAL_TIMESTAMP("UserspaceTimestamp", offsetof(Manager, timestamps[MANAGER_TIMESTAMP_USERSPACE]), SD_BUS_VTABLE_PROPERTY_CONST),
2891         BUS_PROPERTY_DUAL_TIMESTAMP("FinishTimestamp", offsetof(Manager, timestamps[MANAGER_TIMESTAMP_FINISH]), SD_BUS_VTABLE_PROPERTY_CONST),
2892         BUS_PROPERTY_DUAL_TIMESTAMP("SecurityStartTimestamp", offsetof(Manager, timestamps[MANAGER_TIMESTAMP_SECURITY_START]), SD_BUS_VTABLE_PROPERTY_CONST),
2893         BUS_PROPERTY_DUAL_TIMESTAMP("SecurityFinishTimestamp", offsetof(Manager, timestamps[MANAGER_TIMESTAMP_SECURITY_FINISH]), SD_BUS_VTABLE_PROPERTY_CONST),
2894         BUS_PROPERTY_DUAL_TIMESTAMP("GeneratorsStartTimestamp", offsetof(Manager, timestamps[MANAGER_TIMESTAMP_GENERATORS_START]), SD_BUS_VTABLE_PROPERTY_CONST),
2895         BUS_PROPERTY_DUAL_TIMESTAMP("GeneratorsFinishTimestamp", offsetof(Manager, timestamps[MANAGER_TIMESTAMP_GENERATORS_FINISH]), SD_BUS_VTABLE_PROPERTY_CONST),
2896         BUS_PROPERTY_DUAL_TIMESTAMP("UnitsLoadStartTimestamp", offsetof(Manager, timestamps[MANAGER_TIMESTAMP_UNITS_LOAD_START]), SD_BUS_VTABLE_PROPERTY_CONST),
2897         BUS_PROPERTY_DUAL_TIMESTAMP("UnitsLoadFinishTimestamp", offsetof(Manager, timestamps[MANAGER_TIMESTAMP_UNITS_LOAD_FINISH]), SD_BUS_VTABLE_PROPERTY_CONST),
2898         BUS_PROPERTY_DUAL_TIMESTAMP("UnitsLoadTimestamp", offsetof(Manager, timestamps[MANAGER_TIMESTAMP_UNITS_LOAD]), SD_BUS_VTABLE_PROPERTY_CONST),
2899         BUS_PROPERTY_DUAL_TIMESTAMP("InitRDSecurityStartTimestamp", offsetof(Manager, timestamps[MANAGER_TIMESTAMP_INITRD_SECURITY_START]), SD_BUS_VTABLE_PROPERTY_CONST),
2900         BUS_PROPERTY_DUAL_TIMESTAMP("InitRDSecurityFinishTimestamp", offsetof(Manager, timestamps[MANAGER_TIMESTAMP_INITRD_SECURITY_FINISH]), SD_BUS_VTABLE_PROPERTY_CONST),
2901         BUS_PROPERTY_DUAL_TIMESTAMP("InitRDGeneratorsStartTimestamp", offsetof(Manager, timestamps[MANAGER_TIMESTAMP_INITRD_GENERATORS_START]), SD_BUS_VTABLE_PROPERTY_CONST),
2902         BUS_PROPERTY_DUAL_TIMESTAMP("InitRDGeneratorsFinishTimestamp", offsetof(Manager, timestamps[MANAGER_TIMESTAMP_INITRD_GENERATORS_FINISH]), SD_BUS_VTABLE_PROPERTY_CONST),
2903         BUS_PROPERTY_DUAL_TIMESTAMP("InitRDUnitsLoadStartTimestamp", offsetof(Manager, timestamps[MANAGER_TIMESTAMP_INITRD_UNITS_LOAD_START]), SD_BUS_VTABLE_PROPERTY_CONST),
2904         BUS_PROPERTY_DUAL_TIMESTAMP("InitRDUnitsLoadFinishTimestamp", offsetof(Manager, timestamps[MANAGER_TIMESTAMP_INITRD_UNITS_LOAD_FINISH]), SD_BUS_VTABLE_PROPERTY_CONST),
2905         SD_BUS_WRITABLE_PROPERTY("LogLevel", "s", bus_property_get_log_level, property_set_log_level, 0, 0),
2906         SD_BUS_WRITABLE_PROPERTY("LogTarget", "s", bus_property_get_log_target, property_set_log_target, 0, 0),
2907         SD_BUS_PROPERTY("NNames", "u", property_get_hashmap_size, offsetof(Manager, units), 0),
2908         SD_BUS_PROPERTY("NFailedUnits", "u", property_get_set_size, offsetof(Manager, failed_units), SD_BUS_VTABLE_PROPERTY_EMITS_CHANGE),
2909         SD_BUS_PROPERTY("NJobs", "u", property_get_hashmap_size, offsetof(Manager, jobs), 0),
2910         SD_BUS_PROPERTY("NInstalledJobs", "u", bus_property_get_unsigned, offsetof(Manager, n_installed_jobs), 0),
2911         SD_BUS_PROPERTY("NFailedJobs", "u", bus_property_get_unsigned, offsetof(Manager, n_failed_jobs), 0),
2912         SD_BUS_PROPERTY("Progress", "d", property_get_progress, 0, 0),
2913         SD_BUS_PROPERTY("Environment", "as", property_get_environment, 0, 0),
2914         SD_BUS_PROPERTY("ConfirmSpawn", "b", bus_property_get_bool, offsetof(Manager, confirm_spawn), SD_BUS_VTABLE_PROPERTY_CONST),
2915         SD_BUS_PROPERTY("ShowStatus", "b", property_get_show_status, 0, 0),
2916         SD_BUS_PROPERTY("UnitPath", "as", NULL, offsetof(Manager, lookup_paths.search_path), SD_BUS_VTABLE_PROPERTY_CONST),
2917         SD_BUS_PROPERTY("DefaultStandardOutput", "s", bus_property_get_exec_output, offsetof(Manager, default_std_output), SD_BUS_VTABLE_PROPERTY_CONST),
2918         SD_BUS_PROPERTY("DefaultStandardError", "s", bus_property_get_exec_output, offsetof(Manager, default_std_error), SD_BUS_VTABLE_PROPERTY_CONST),
2919         SD_BUS_PROPERTY("WatchdogDevice", "s", property_get_watchdog_device, 0, SD_BUS_VTABLE_PROPERTY_CONST),
2920         SD_BUS_PROPERTY("WatchdogLastPingTimestamp", "t", property_get_watchdog_last_ping_realtime, 0, 0),
2921         SD_BUS_PROPERTY("WatchdogLastPingTimestampMonotonic", "t", property_get_watchdog_last_ping_monotonic, 0, 0),
2922         SD_BUS_WRITABLE_PROPERTY("RuntimeWatchdogUSec", "t", property_get_runtime_watchdog, property_set_runtime_watchdog, 0, 0),
2923         SD_BUS_WRITABLE_PROPERTY("RuntimeWatchdogPreUSec", "t", property_get_pretimeout_watchdog, property_set_pretimeout_watchdog, 0, 0),
2924         SD_BUS_WRITABLE_PROPERTY("RuntimeWatchdogPreGovernor", "s", property_get_pretimeout_watchdog_governor, property_set_pretimeout_watchdog_governor, 0, 0),
2925         SD_BUS_WRITABLE_PROPERTY("RebootWatchdogUSec", "t", property_get_reboot_watchdog, property_set_reboot_watchdog, 0, 0),
2926         /* The following item is an obsolete alias */
2927         SD_BUS_WRITABLE_PROPERTY("ShutdownWatchdogUSec", "t", property_get_reboot_watchdog, property_set_reboot_watchdog, 0, SD_BUS_VTABLE_HIDDEN),
2928         SD_BUS_WRITABLE_PROPERTY("KExecWatchdogUSec", "t", property_get_kexec_watchdog, property_set_kexec_watchdog, 0, 0),
2929         SD_BUS_WRITABLE_PROPERTY("ServiceWatchdogs", "b", bus_property_get_bool, bus_property_set_bool, offsetof(Manager, service_watchdogs), 0),
2930         SD_BUS_PROPERTY("ControlGroup", "s", NULL, offsetof(Manager, cgroup_root), 0),
2931         SD_BUS_PROPERTY("SystemState", "s", property_get_system_state, 0, 0),
2932         SD_BUS_PROPERTY("ExitCode", "y", bus_property_get_unsigned, offsetof(Manager, return_value), 0),
2933         SD_BUS_PROPERTY("DefaultTimerAccuracyUSec", "t", bus_property_get_usec, offsetof(Manager, default_timer_accuracy_usec), SD_BUS_VTABLE_PROPERTY_CONST),
2934         SD_BUS_PROPERTY("DefaultTimeoutStartUSec", "t", bus_property_get_usec, offsetof(Manager, default_timeout_start_usec), SD_BUS_VTABLE_PROPERTY_CONST),
2935         SD_BUS_PROPERTY("DefaultTimeoutStopUSec", "t", bus_property_get_usec, offsetof(Manager, default_timeout_stop_usec), SD_BUS_VTABLE_PROPERTY_CONST),
2936         SD_BUS_PROPERTY("DefaultTimeoutAbortUSec", "t", property_get_default_timeout_abort_usec, 0, 0),
2937         SD_BUS_PROPERTY("DefaultDeviceTimeoutUSec", "t", bus_property_get_usec, offsetof(Manager, default_device_timeout_usec), SD_BUS_VTABLE_PROPERTY_CONST),
2938         SD_BUS_PROPERTY("DefaultRestartUSec", "t", bus_property_get_usec, offsetof(Manager, default_restart_usec), SD_BUS_VTABLE_PROPERTY_CONST),
2939         SD_BUS_PROPERTY("DefaultStartLimitIntervalUSec", "t", bus_property_get_usec, offsetof(Manager, default_start_limit_interval), SD_BUS_VTABLE_PROPERTY_CONST),
2940         /* The following two items are obsolete alias */
2941         SD_BUS_PROPERTY("DefaultStartLimitIntervalSec", "t", bus_property_get_usec, offsetof(Manager, default_start_limit_interval), SD_BUS_VTABLE_PROPERTY_CONST|SD_BUS_VTABLE_HIDDEN),
2942         SD_BUS_PROPERTY("DefaultStartLimitInterval", "t", bus_property_get_usec, offsetof(Manager, default_start_limit_interval), SD_BUS_VTABLE_PROPERTY_CONST|SD_BUS_VTABLE_HIDDEN),
2943         SD_BUS_PROPERTY("DefaultStartLimitBurst", "u", bus_property_get_unsigned, offsetof(Manager, default_start_limit_burst), SD_BUS_VTABLE_PROPERTY_CONST),
2944         SD_BUS_PROPERTY("DefaultCPUAccounting", "b", bus_property_get_bool, offsetof(Manager, default_cpu_accounting), SD_BUS_VTABLE_PROPERTY_CONST),
2945         SD_BUS_PROPERTY("DefaultBlockIOAccounting", "b", bus_property_get_bool, offsetof(Manager, default_blockio_accounting), SD_BUS_VTABLE_PROPERTY_CONST),
2946         SD_BUS_PROPERTY("DefaultMemoryAccounting", "b", bus_property_get_bool, offsetof(Manager, default_memory_accounting), SD_BUS_VTABLE_PROPERTY_CONST),
2947         SD_BUS_PROPERTY("DefaultTasksAccounting", "b", bus_property_get_bool, offsetof(Manager, default_tasks_accounting), SD_BUS_VTABLE_PROPERTY_CONST),
2948         SD_BUS_PROPERTY("DefaultLimitCPU", "t", bus_property_get_rlimit, offsetof(Manager, rlimit[RLIMIT_CPU]), SD_BUS_VTABLE_PROPERTY_CONST),
2949         SD_BUS_PROPERTY("DefaultLimitCPUSoft", "t", bus_property_get_rlimit, offsetof(Manager, rlimit[RLIMIT_CPU]), SD_BUS_VTABLE_PROPERTY_CONST),
2950         SD_BUS_PROPERTY("DefaultLimitFSIZE", "t", bus_property_get_rlimit, offsetof(Manager, rlimit[RLIMIT_FSIZE]), SD_BUS_VTABLE_PROPERTY_CONST),
2951         SD_BUS_PROPERTY("DefaultLimitFSIZESoft", "t", bus_property_get_rlimit, offsetof(Manager, rlimit[RLIMIT_FSIZE]), SD_BUS_VTABLE_PROPERTY_CONST),
2952         SD_BUS_PROPERTY("DefaultLimitDATA", "t", bus_property_get_rlimit, offsetof(Manager, rlimit[RLIMIT_DATA]), SD_BUS_VTABLE_PROPERTY_CONST),
2953         SD_BUS_PROPERTY("DefaultLimitDATASoft", "t", bus_property_get_rlimit, offsetof(Manager, rlimit[RLIMIT_DATA]), SD_BUS_VTABLE_PROPERTY_CONST),
2954         SD_BUS_PROPERTY("DefaultLimitSTACK", "t", bus_property_get_rlimit, offsetof(Manager, rlimit[RLIMIT_STACK]), SD_BUS_VTABLE_PROPERTY_CONST),
2955         SD_BUS_PROPERTY("DefaultLimitSTACKSoft", "t", bus_property_get_rlimit, offsetof(Manager, rlimit[RLIMIT_STACK]), SD_BUS_VTABLE_PROPERTY_CONST),
2956         SD_BUS_PROPERTY("DefaultLimitCORE", "t", bus_property_get_rlimit, offsetof(Manager, rlimit[RLIMIT_CORE]), SD_BUS_VTABLE_PROPERTY_CONST),
2957         SD_BUS_PROPERTY("DefaultLimitCORESoft", "t", bus_property_get_rlimit, offsetof(Manager, rlimit[RLIMIT_CORE]), SD_BUS_VTABLE_PROPERTY_CONST),
2958         SD_BUS_PROPERTY("DefaultLimitRSS", "t", bus_property_get_rlimit, offsetof(Manager, rlimit[RLIMIT_RSS]), SD_BUS_VTABLE_PROPERTY_CONST),
2959         SD_BUS_PROPERTY("DefaultLimitRSSSoft", "t", bus_property_get_rlimit, offsetof(Manager, rlimit[RLIMIT_RSS]), SD_BUS_VTABLE_PROPERTY_CONST),
2960         SD_BUS_PROPERTY("DefaultLimitNOFILE", "t", bus_property_get_rlimit, offsetof(Manager, rlimit[RLIMIT_NOFILE]), SD_BUS_VTABLE_PROPERTY_CONST),
2961         SD_BUS_PROPERTY("DefaultLimitNOFILESoft", "t", bus_property_get_rlimit, offsetof(Manager, rlimit[RLIMIT_NOFILE]), SD_BUS_VTABLE_PROPERTY_CONST),
2962         SD_BUS_PROPERTY("DefaultLimitAS", "t", bus_property_get_rlimit, offsetof(Manager, rlimit[RLIMIT_AS]), SD_BUS_VTABLE_PROPERTY_CONST),
2963         SD_BUS_PROPERTY("DefaultLimitASSoft", "t", bus_property_get_rlimit, offsetof(Manager, rlimit[RLIMIT_AS]), SD_BUS_VTABLE_PROPERTY_CONST),
2964         SD_BUS_PROPERTY("DefaultLimitNPROC", "t", bus_property_get_rlimit, offsetof(Manager, rlimit[RLIMIT_NPROC]), SD_BUS_VTABLE_PROPERTY_CONST),
2965         SD_BUS_PROPERTY("DefaultLimitNPROCSoft", "t", bus_property_get_rlimit, offsetof(Manager, rlimit[RLIMIT_NPROC]), SD_BUS_VTABLE_PROPERTY_CONST),
2966         SD_BUS_PROPERTY("DefaultLimitMEMLOCK", "t", bus_property_get_rlimit, offsetof(Manager, rlimit[RLIMIT_MEMLOCK]), SD_BUS_VTABLE_PROPERTY_CONST),
2967         SD_BUS_PROPERTY("DefaultLimitMEMLOCKSoft", "t", bus_property_get_rlimit, offsetof(Manager, rlimit[RLIMIT_MEMLOCK]), SD_BUS_VTABLE_PROPERTY_CONST),
2968         SD_BUS_PROPERTY("DefaultLimitLOCKS", "t", bus_property_get_rlimit, offsetof(Manager, rlimit[RLIMIT_LOCKS]), SD_BUS_VTABLE_PROPERTY_CONST),
2969         SD_BUS_PROPERTY("DefaultLimitLOCKSSoft", "t", bus_property_get_rlimit, offsetof(Manager, rlimit[RLIMIT_LOCKS]), SD_BUS_VTABLE_PROPERTY_CONST),
2970         SD_BUS_PROPERTY("DefaultLimitSIGPENDING", "t", bus_property_get_rlimit, offsetof(Manager, rlimit[RLIMIT_SIGPENDING]), SD_BUS_VTABLE_PROPERTY_CONST),
2971         SD_BUS_PROPERTY("DefaultLimitSIGPENDINGSoft", "t", bus_property_get_rlimit, offsetof(Manager, rlimit[RLIMIT_SIGPENDING]), SD_BUS_VTABLE_PROPERTY_CONST),
2972         SD_BUS_PROPERTY("DefaultLimitMSGQUEUE", "t", bus_property_get_rlimit, offsetof(Manager, rlimit[RLIMIT_MSGQUEUE]), SD_BUS_VTABLE_PROPERTY_CONST),
2973         SD_BUS_PROPERTY("DefaultLimitMSGQUEUESoft", "t", bus_property_get_rlimit, offsetof(Manager, rlimit[RLIMIT_MSGQUEUE]), SD_BUS_VTABLE_PROPERTY_CONST),
2974         SD_BUS_PROPERTY("DefaultLimitNICE", "t", bus_property_get_rlimit, offsetof(Manager, rlimit[RLIMIT_NICE]), SD_BUS_VTABLE_PROPERTY_CONST),
2975         SD_BUS_PROPERTY("DefaultLimitNICESoft", "t", bus_property_get_rlimit, offsetof(Manager, rlimit[RLIMIT_NICE]), SD_BUS_VTABLE_PROPERTY_CONST),
2976         SD_BUS_PROPERTY("DefaultLimitRTPRIO", "t", bus_property_get_rlimit, offsetof(Manager, rlimit[RLIMIT_RTPRIO]), SD_BUS_VTABLE_PROPERTY_CONST),
2977         SD_BUS_PROPERTY("DefaultLimitRTPRIOSoft", "t", bus_property_get_rlimit, offsetof(Manager, rlimit[RLIMIT_RTPRIO]), SD_BUS_VTABLE_PROPERTY_CONST),
2978         SD_BUS_PROPERTY("DefaultLimitRTTIME", "t", bus_property_get_rlimit, offsetof(Manager, rlimit[RLIMIT_RTTIME]), SD_BUS_VTABLE_PROPERTY_CONST),
2979         SD_BUS_PROPERTY("DefaultLimitRTTIMESoft", "t", bus_property_get_rlimit, offsetof(Manager, rlimit[RLIMIT_RTTIME]), SD_BUS_VTABLE_PROPERTY_CONST),
2980         SD_BUS_PROPERTY("DefaultTasksMax", "t", bus_property_get_tasks_max, offsetof(Manager, default_tasks_max), 0),
2981         SD_BUS_PROPERTY("DefaultMemoryPressureThresholdUSec", "t", bus_property_get_usec, offsetof(Manager, default_memory_pressure_threshold_usec), 0),
2982         SD_BUS_PROPERTY("DefaultMemoryPressureWatch", "s", bus_property_get_cgroup_pressure_watch, offsetof(Manager, default_memory_pressure_watch), 0),
2983         SD_BUS_PROPERTY("TimerSlackNSec", "t", property_get_timer_slack_nsec, 0, SD_BUS_VTABLE_PROPERTY_CONST),
2984         SD_BUS_PROPERTY("DefaultOOMPolicy", "s", bus_property_get_oom_policy, offsetof(Manager, default_oom_policy), SD_BUS_VTABLE_PROPERTY_CONST),
2985         SD_BUS_PROPERTY("DefaultOOMScoreAdjust", "i", property_get_oom_score_adjust, 0, SD_BUS_VTABLE_PROPERTY_CONST),
2986         SD_BUS_PROPERTY("CtrlAltDelBurstAction", "s", bus_property_get_emergency_action, offsetof(Manager, cad_burst_action), SD_BUS_VTABLE_PROPERTY_CONST),
2987
2988         SD_BUS_METHOD_WITH_ARGS("GetUnit",
2989                                 SD_BUS_ARGS("s", name),
2990                                 SD_BUS_RESULT("o", unit),
2991                                 method_get_unit,
2992                                 SD_BUS_VTABLE_UNPRIVILEGED),
2993         SD_BUS_METHOD_WITH_ARGS("GetUnitByPID",
2994                                 SD_BUS_ARGS("u", pid),
2995                                 SD_BUS_RESULT("o", unit),
2996                                 method_get_unit_by_pid,
2997                                 SD_BUS_VTABLE_UNPRIVILEGED),
2998         SD_BUS_METHOD_WITH_ARGS("GetUnitByInvocationID",
2999                                 SD_BUS_ARGS("ay", invocation_id),
3000                                 SD_BUS_RESULT("o", unit),
3001                                 method_get_unit_by_invocation_id,
3002                                 SD_BUS_VTABLE_UNPRIVILEGED),
3003         SD_BUS_METHOD_WITH_ARGS("GetUnitByControlGroup",
3004                                 SD_BUS_ARGS("s", cgroup),
3005                                 SD_BUS_RESULT("o", unit),
3006                                 method_get_unit_by_control_group,
3007                                 SD_BUS_VTABLE_UNPRIVILEGED),
3008         SD_BUS_METHOD_WITH_ARGS("GetUnitByPIDFD",
3009                                 SD_BUS_ARGS("h", pidfd),
3010                                 SD_BUS_RESULT("o", unit, "s", unit_id, "ay", invocation_id),
3011                                 method_get_unit_by_pidfd,
3012                                 SD_BUS_VTABLE_UNPRIVILEGED),
3013         SD_BUS_METHOD_WITH_ARGS("LoadUnit",
3014                                 SD_BUS_ARGS("s", name),
3015                                 SD_BUS_RESULT("o", unit),
3016                                 method_load_unit,
3017                                 SD_BUS_VTABLE_UNPRIVILEGED),
3018         SD_BUS_METHOD_WITH_ARGS("StartUnit",
3019                                 SD_BUS_ARGS("s", name, "s", mode),
3020                                 SD_BUS_RESULT("o", job),
3021                                 method_start_unit,
3022                                 SD_BUS_VTABLE_UNPRIVILEGED),
3023         SD_BUS_METHOD_WITH_ARGS("StartUnitWithFlags",
3024                                 SD_BUS_ARGS("s", name, "s", mode, "t", flags),
3025                                 SD_BUS_RESULT("o", job),
3026                                 method_start_unit,
3027                                 SD_BUS_VTABLE_UNPRIVILEGED),
3028         SD_BUS_METHOD_WITH_ARGS("StartUnitReplace",
3029                                 SD_BUS_ARGS("s", old_unit, "s", new_unit, "s", mode),
3030                                 SD_BUS_RESULT("o", job),
3031                                 method_start_unit_replace,
3032                                 SD_BUS_VTABLE_UNPRIVILEGED),
3033         SD_BUS_METHOD_WITH_ARGS("StopUnit",
3034                                 SD_BUS_ARGS("s", name, "s", mode),
3035                                 SD_BUS_RESULT("o", job),
3036                                 method_stop_unit,
3037                                 SD_BUS_VTABLE_UNPRIVILEGED),
3038         SD_BUS_METHOD_WITH_ARGS("ReloadUnit",
3039                                 SD_BUS_ARGS("s", name, "s", mode),
3040                                 SD_BUS_RESULT("o", job),
3041                                 method_reload_unit,
3042                                 SD_BUS_VTABLE_UNPRIVILEGED),
3043         SD_BUS_METHOD_WITH_ARGS("RestartUnit",
3044                                 SD_BUS_ARGS("s", name, "s", mode),
3045                                 SD_BUS_RESULT("o", job),
3046                                 method_restart_unit,
3047                                 SD_BUS_VTABLE_UNPRIVILEGED),
3048         SD_BUS_METHOD_WITH_ARGS("TryRestartUnit",
3049                                 SD_BUS_ARGS("s", name, "s", mode),
3050                                 SD_BUS_RESULT("o", job),
3051                                 method_try_restart_unit,
3052                                 SD_BUS_VTABLE_UNPRIVILEGED),
3053         SD_BUS_METHOD_WITH_ARGS("ReloadOrRestartUnit",
3054                                 SD_BUS_ARGS("s", name, "s", mode),
3055                                 SD_BUS_RESULT("o", job),
3056                                 method_reload_or_restart_unit,
3057                                 SD_BUS_VTABLE_UNPRIVILEGED),
3058         SD_BUS_METHOD_WITH_ARGS("ReloadOrTryRestartUnit",
3059                                 SD_BUS_ARGS("s", name, "s", mode),
3060                                 SD_BUS_RESULT("o", job),
3061                                 method_reload_or_try_restart_unit,
3062                                 SD_BUS_VTABLE_UNPRIVILEGED),
3063         SD_BUS_METHOD_WITH_ARGS("EnqueueUnitJob",
3064                                 SD_BUS_ARGS("s", name, "s", job_type, "s", job_mode),
3065                                 SD_BUS_RESULT("u", job_id, "o", job_path, "s", unit_id, "o", unit_path, "s", job_type, "a(uosos)", affected_jobs),
3066                                 method_enqueue_unit_job,
3067                                 SD_BUS_VTABLE_UNPRIVILEGED),
3068         SD_BUS_METHOD_WITH_ARGS("KillUnit",
3069                                 SD_BUS_ARGS("s", name, "s", whom, "i", signal),
3070                                 SD_BUS_NO_RESULT,
3071                                 method_kill_unit,
3072                                 SD_BUS_VTABLE_UNPRIVILEGED),
3073         SD_BUS_METHOD_WITH_ARGS("QueueSignalUnit",
3074                                 SD_BUS_ARGS("s", name, "s", whom, "i", signal, "i", value),
3075                                 SD_BUS_NO_RESULT,
3076                                 method_kill_unit,
3077                                 SD_BUS_VTABLE_UNPRIVILEGED),
3078         SD_BUS_METHOD_WITH_ARGS("CleanUnit",
3079                                 SD_BUS_ARGS("s", name, "as", mask),
3080                                 SD_BUS_NO_RESULT,
3081                                 method_clean_unit,
3082                                 SD_BUS_VTABLE_UNPRIVILEGED),
3083         SD_BUS_METHOD_WITH_ARGS("FreezeUnit",
3084                                 SD_BUS_ARGS("s", name),
3085                                 SD_BUS_NO_RESULT,
3086                                 method_freeze_unit,
3087                                 SD_BUS_VTABLE_UNPRIVILEGED),
3088         SD_BUS_METHOD_WITH_ARGS("ThawUnit",
3089                                 SD_BUS_ARGS("s", name),
3090                                 SD_BUS_NO_RESULT,
3091                                 method_thaw_unit,
3092                                 SD_BUS_VTABLE_UNPRIVILEGED),
3093         SD_BUS_METHOD_WITH_ARGS("ResetFailedUnit",
3094                                 SD_BUS_ARGS("s", name),
3095                                 SD_BUS_NO_RESULT,
3096                                 method_reset_failed_unit,
3097                                 SD_BUS_VTABLE_UNPRIVILEGED),
3098         SD_BUS_METHOD_WITH_ARGS("SetUnitProperties",
3099                                 SD_BUS_ARGS("s", name, "b", runtime, "a(sv)", properties),
3100                                 SD_BUS_NO_RESULT,
3101                                 method_set_unit_properties,
3102                                 SD_BUS_VTABLE_UNPRIVILEGED),
3103         SD_BUS_METHOD_WITH_ARGS("BindMountUnit",
3104                                 SD_BUS_ARGS("s", name, "s", source, "s", destination, "b", read_only, "b", mkdir),
3105                                 SD_BUS_NO_RESULT,
3106                                 method_bind_mount_unit,
3107                                 SD_BUS_VTABLE_UNPRIVILEGED),
3108         SD_BUS_METHOD_WITH_ARGS("MountImageUnit",
3109                                 SD_BUS_ARGS("s", name, "s", source, "s", destination, "b", read_only, "b", mkdir, "a(ss)", options),
3110                                 SD_BUS_NO_RESULT,
3111                                 method_mount_image_unit,
3112                                 SD_BUS_VTABLE_UNPRIVILEGED),
3113         SD_BUS_METHOD_WITH_ARGS("RefUnit",
3114                                 SD_BUS_ARGS("s", name),
3115                                 SD_BUS_NO_RESULT,
3116                                 method_ref_unit,
3117                                 SD_BUS_VTABLE_UNPRIVILEGED),
3118         SD_BUS_METHOD_WITH_ARGS("UnrefUnit",
3119                                 SD_BUS_ARGS("s", name),
3120                                 SD_BUS_NO_RESULT,
3121                                 method_unref_unit,
3122                                 SD_BUS_VTABLE_UNPRIVILEGED),
3123         SD_BUS_METHOD_WITH_ARGS("StartTransientUnit",
3124                                 SD_BUS_ARGS("s", name, "s", mode, "a(sv)", properties, "a(sa(sv))", aux),
3125                                 SD_BUS_RESULT("o", job),
3126                                 method_start_transient_unit,
3127                                 SD_BUS_VTABLE_UNPRIVILEGED),
3128         SD_BUS_METHOD_WITH_ARGS("GetUnitProcesses",
3129                                 SD_BUS_ARGS("s", name),
3130                                 SD_BUS_RESULT("a(sus)", processes),
3131                                 method_get_unit_processes,
3132                                 SD_BUS_VTABLE_UNPRIVILEGED),
3133         SD_BUS_METHOD_WITH_ARGS("AttachProcessesToUnit",
3134                                 SD_BUS_ARGS("s", unit_name, "s", subcgroup, "au", pids),
3135                                 SD_BUS_NO_RESULT,
3136                                 method_attach_processes_to_unit,
3137                                 SD_BUS_VTABLE_UNPRIVILEGED),
3138         SD_BUS_METHOD_WITH_ARGS("AbandonScope",
3139                                 SD_BUS_ARGS("s", name),
3140                                 SD_BUS_NO_RESULT,
3141                                 method_abandon_scope,
3142                                 SD_BUS_VTABLE_UNPRIVILEGED),
3143         SD_BUS_METHOD_WITH_ARGS("GetJob",
3144                                 SD_BUS_ARGS("u", id),
3145                                 SD_BUS_RESULT("o", job),
3146                                 method_get_job,
3147                                 SD_BUS_VTABLE_UNPRIVILEGED),
3148         SD_BUS_METHOD_WITH_ARGS("GetJobAfter",
3149                                 SD_BUS_ARGS("u", id),
3150                                 SD_BUS_RESULT("a(usssoo)", jobs),
3151                                 method_get_job_waiting,
3152                                 SD_BUS_VTABLE_UNPRIVILEGED),
3153         SD_BUS_METHOD_WITH_ARGS("GetJobBefore",
3154                                 SD_BUS_ARGS("u", id),
3155                                 SD_BUS_RESULT("a(usssoo)", jobs),
3156                                 method_get_job_waiting,
3157                                 SD_BUS_VTABLE_UNPRIVILEGED),
3158         SD_BUS_METHOD_WITH_ARGS("CancelJob",
3159                                 SD_BUS_ARGS("u", id),
3160                                 SD_BUS_NO_RESULT,
3161                                 method_cancel_job,
3162                                 SD_BUS_VTABLE_UNPRIVILEGED),
3163         SD_BUS_METHOD("ClearJobs",
3164                       NULL,
3165                       NULL,
3166                       method_clear_jobs,
3167                       SD_BUS_VTABLE_UNPRIVILEGED),
3168         SD_BUS_METHOD("ResetFailed",
3169                       NULL,
3170                       NULL,
3171                       method_reset_failed,
3172                       SD_BUS_VTABLE_UNPRIVILEGED),
3173         SD_BUS_METHOD_WITH_ARGS("SetShowStatus",
3174                                 SD_BUS_ARGS("s", mode),
3175                                 SD_BUS_NO_RESULT,
3176                                 method_set_show_status,
3177                                 SD_BUS_VTABLE_UNPRIVILEGED),
3178         SD_BUS_METHOD_WITH_ARGS("ListUnits",
3179                                 SD_BUS_NO_ARGS,
3180                                 SD_BUS_RESULT("a(ssssssouso)", units),
3181                                 method_list_units,
3182                                 SD_BUS_VTABLE_UNPRIVILEGED),
3183         SD_BUS_METHOD_WITH_ARGS("ListUnitsFiltered",
3184                                 SD_BUS_ARGS("as", states),
3185                                 SD_BUS_RESULT("a(ssssssouso)", units),
3186                                 method_list_units_filtered,
3187                                 SD_BUS_VTABLE_UNPRIVILEGED),
3188         SD_BUS_METHOD_WITH_ARGS("ListUnitsByPatterns",
3189                                 SD_BUS_ARGS("as", states, "as", patterns),
3190                                 SD_BUS_RESULT("a(ssssssouso)", units),
3191                                 method_list_units_by_patterns,
3192                                 SD_BUS_VTABLE_UNPRIVILEGED),
3193         SD_BUS_METHOD_WITH_ARGS("ListUnitsByNames",
3194                                 SD_BUS_ARGS("as", names),
3195                                 SD_BUS_RESULT("a(ssssssouso)", units),
3196                                 method_list_units_by_names,
3197                                 SD_BUS_VTABLE_UNPRIVILEGED),
3198         SD_BUS_METHOD_WITH_ARGS("ListJobs",
3199                                 SD_BUS_NO_ARGS,
3200                                 SD_BUS_RESULT("a(usssoo)", jobs),
3201                                 method_list_jobs,
3202                                 SD_BUS_VTABLE_UNPRIVILEGED),
3203         SD_BUS_METHOD("Subscribe",
3204                       NULL,
3205                       NULL,
3206                       method_subscribe,
3207                       SD_BUS_VTABLE_UNPRIVILEGED),
3208         SD_BUS_METHOD("Unsubscribe",
3209                       NULL,
3210                       NULL,
3211                       method_unsubscribe,
3212                       SD_BUS_VTABLE_UNPRIVILEGED),
3213         SD_BUS_METHOD_WITH_ARGS("Dump",
3214                                 SD_BUS_NO_ARGS,
3215                                 SD_BUS_RESULT("s", output),
3216                                 method_dump,
3217                                 SD_BUS_VTABLE_UNPRIVILEGED),
3218         SD_BUS_METHOD_WITH_ARGS("DumpUnitsMatchingPatterns",
3219                                 SD_BUS_ARGS("as", patterns),
3220                                 SD_BUS_RESULT("s", output),
3221                                 method_dump_units_matching_patterns,
3222                                 SD_BUS_VTABLE_UNPRIVILEGED),
3223         SD_BUS_METHOD_WITH_ARGS("DumpByFileDescriptor",
3224                                 SD_BUS_NO_ARGS,
3225                                 SD_BUS_RESULT("h", fd),
3226                                 method_dump_by_fd,
3227                                 SD_BUS_VTABLE_UNPRIVILEGED),
3228         SD_BUS_METHOD_WITH_ARGS("DumpUnitsMatchingPatternsByFileDescriptor",
3229                                 SD_BUS_ARGS("as", patterns),
3230                                 SD_BUS_RESULT("h", fd),
3231                                 method_dump_units_matching_patterns_by_fd,
3232                                 SD_BUS_VTABLE_UNPRIVILEGED),
3233         SD_BUS_METHOD_WITH_ARGS("CreateSnapshot",
3234                                 SD_BUS_ARGS("s", name, "b", cleanup),
3235                                 SD_BUS_RESULT("o", unit),
3236                                 method_refuse_snapshot,
3237                                 SD_BUS_VTABLE_UNPRIVILEGED|SD_BUS_VTABLE_HIDDEN),
3238         SD_BUS_METHOD_WITH_ARGS("RemoveSnapshot",
3239                                 SD_BUS_ARGS("s", name),
3240                                 SD_BUS_NO_RESULT,
3241                                 method_refuse_snapshot,
3242                                 SD_BUS_VTABLE_UNPRIVILEGED|SD_BUS_VTABLE_HIDDEN),
3243         SD_BUS_METHOD("Reload",
3244                       NULL,
3245                       NULL,
3246                       method_reload,
3247                       SD_BUS_VTABLE_UNPRIVILEGED),
3248         SD_BUS_METHOD("Reexecute",
3249                       NULL,
3250                       NULL,
3251                       method_reexecute,
3252                       SD_BUS_VTABLE_UNPRIVILEGED|SD_BUS_VTABLE_METHOD_NO_REPLY),
3253         SD_BUS_METHOD("Exit",
3254                       NULL,
3255                       NULL,
3256                       method_exit,
3257                       0),
3258         SD_BUS_METHOD("Reboot",
3259                       NULL,
3260                       NULL,
3261                       method_reboot,
3262                       SD_BUS_VTABLE_CAPABILITY(CAP_SYS_BOOT)),
3263         SD_BUS_METHOD("PowerOff",
3264                       NULL,
3265                       NULL,
3266                       method_poweroff,
3267                       SD_BUS_VTABLE_CAPABILITY(CAP_SYS_BOOT)),
3268         SD_BUS_METHOD("Halt",
3269                       NULL,
3270                       NULL,
3271                       method_halt,
3272                       SD_BUS_VTABLE_CAPABILITY(CAP_SYS_BOOT)),
3273         SD_BUS_METHOD("KExec",
3274                       NULL,
3275                       NULL,
3276                       method_kexec,
3277                       SD_BUS_VTABLE_CAPABILITY(CAP_SYS_BOOT)),
3278         SD_BUS_METHOD_WITH_ARGS("SwitchRoot",
3279                                 SD_BUS_ARGS("s", new_root, "s", init),
3280                                 SD_BUS_NO_RESULT,
3281                                 method_switch_root,
3282                                 SD_BUS_VTABLE_CAPABILITY(CAP_SYS_BOOT)),
3283         SD_BUS_METHOD_WITH_ARGS("SetEnvironment",
3284                                 SD_BUS_ARGS("as", assignments),
3285                                 SD_BUS_NO_RESULT,
3286                                 method_set_environment,
3287                                 SD_BUS_VTABLE_UNPRIVILEGED),
3288         SD_BUS_METHOD_WITH_ARGS("UnsetEnvironment",
3289                                 SD_BUS_ARGS("as", names),
3290                                 SD_BUS_NO_RESULT,
3291                                 method_unset_environment,
3292                                 SD_BUS_VTABLE_UNPRIVILEGED),
3293         SD_BUS_METHOD_WITH_ARGS("UnsetAndSetEnvironment",
3294                                 SD_BUS_ARGS("as", names, "as", assignments),
3295                                 SD_BUS_NO_RESULT,
3296                                 method_unset_and_set_environment,
3297                                 SD_BUS_VTABLE_UNPRIVILEGED),
3298         SD_BUS_METHOD_WITH_ARGS("EnqueueMarkedJobs",
3299                                 SD_BUS_NO_ARGS,
3300                                 SD_BUS_RESULT("ao", jobs),
3301                                 method_enqueue_marked_jobs,
3302                                 SD_BUS_VTABLE_UNPRIVILEGED),
3303         SD_BUS_METHOD_WITH_ARGS("ListUnitFiles",
3304                                 SD_BUS_NO_ARGS,
3305                                 SD_BUS_RESULT("a(ss)", unit_files),
3306                                 method_list_unit_files,
3307                                 SD_BUS_VTABLE_UNPRIVILEGED),
3308         SD_BUS_METHOD_WITH_ARGS("ListUnitFilesByPatterns",
3309                                 SD_BUS_ARGS("as", states, "as", patterns),
3310                                 SD_BUS_RESULT("a(ss)", unit_files),
3311                                 method_list_unit_files_by_patterns,
3312                                 SD_BUS_VTABLE_UNPRIVILEGED),
3313         SD_BUS_METHOD_WITH_ARGS("GetUnitFileState",
3314                                 SD_BUS_ARGS("s", file),
3315                                 SD_BUS_RESULT("s", state),
3316                                 method_get_unit_file_state,
3317                                 SD_BUS_VTABLE_UNPRIVILEGED),
3318         SD_BUS_METHOD_WITH_ARGS("EnableUnitFiles",
3319                                 SD_BUS_ARGS("as", files, "b", runtime, "b", force),
3320                                 SD_BUS_RESULT("b", carries_install_info, "a(sss)", changes),
3321                                 method_enable_unit_files,
3322                                 SD_BUS_VTABLE_UNPRIVILEGED),
3323         SD_BUS_METHOD_WITH_ARGS("DisableUnitFiles",
3324                                 SD_BUS_ARGS("as", files, "b", runtime),
3325                                 SD_BUS_RESULT("a(sss)", changes),
3326                                 method_disable_unit_files,
3327                                 SD_BUS_VTABLE_UNPRIVILEGED),
3328         SD_BUS_METHOD_WITH_ARGS("EnableUnitFilesWithFlags",
3329                                 SD_BUS_ARGS("as", files, "t", flags),
3330                                 SD_BUS_RESULT("b", carries_install_info, "a(sss)", changes),
3331                                 method_enable_unit_files_with_flags,
3332                                 SD_BUS_VTABLE_UNPRIVILEGED),
3333         SD_BUS_METHOD_WITH_ARGS("DisableUnitFilesWithFlags",
3334                                 SD_BUS_ARGS("as", files, "t", flags),
3335                                 SD_BUS_RESULT("a(sss)", changes),
3336                                 method_disable_unit_files_with_flags,
3337                                 SD_BUS_VTABLE_UNPRIVILEGED),
3338         SD_BUS_METHOD_WITH_ARGS("DisableUnitFilesWithFlagsAndInstallInfo",
3339                                 SD_BUS_ARGS("as", files, "t", flags),
3340                                 SD_BUS_RESULT("b", carries_install_info, "a(sss)", changes),
3341                                 method_disable_unit_files_with_flags_and_install_info,
3342                                 SD_BUS_VTABLE_UNPRIVILEGED),
3343         SD_BUS_METHOD_WITH_ARGS("ReenableUnitFiles",
3344                                 SD_BUS_ARGS("as", files, "b", runtime, "b", force),
3345                                 SD_BUS_RESULT("b", carries_install_info, "a(sss)", changes),
3346                                 method_reenable_unit_files,
3347                                 SD_BUS_VTABLE_UNPRIVILEGED),
3348         SD_BUS_METHOD_WITH_ARGS("LinkUnitFiles",
3349                                 SD_BUS_ARGS("as", files, "b", runtime, "b", force),
3350                                 SD_BUS_RESULT("a(sss)", changes),
3351                                 method_link_unit_files,
3352                                 SD_BUS_VTABLE_UNPRIVILEGED),
3353         SD_BUS_METHOD_WITH_ARGS("PresetUnitFiles",
3354                                 SD_BUS_ARGS("as", files, "b", runtime, "b", force),
3355                                 SD_BUS_RESULT("b", carries_install_info, "a(sss)", changes),
3356                                 method_preset_unit_files,
3357                                 SD_BUS_VTABLE_UNPRIVILEGED),
3358         SD_BUS_METHOD_WITH_ARGS("PresetUnitFilesWithMode",
3359                                 SD_BUS_ARGS("as", files, "s", mode, "b", runtime, "b", force),
3360                                 SD_BUS_RESULT("b", carries_install_info, "a(sss)", changes),
3361                                 method_preset_unit_files_with_mode,
3362                                 SD_BUS_VTABLE_UNPRIVILEGED),
3363         SD_BUS_METHOD_WITH_ARGS("MaskUnitFiles",
3364                                 SD_BUS_ARGS("as", files, "b", runtime, "b", force),
3365                                 SD_BUS_RESULT("a(sss)", changes),
3366                                 method_mask_unit_files,
3367                                 SD_BUS_VTABLE_UNPRIVILEGED),
3368         SD_BUS_METHOD_WITH_ARGS("UnmaskUnitFiles",
3369                                 SD_BUS_ARGS("as", files, "b", runtime),
3370                                 SD_BUS_RESULT("a(sss)", changes),
3371                                 method_unmask_unit_files,
3372                                 SD_BUS_VTABLE_UNPRIVILEGED),
3373         SD_BUS_METHOD_WITH_ARGS("RevertUnitFiles",
3374                                 SD_BUS_ARGS("as", files),
3375                                 SD_BUS_RESULT("a(sss)", changes),
3376                                 method_revert_unit_files,
3377                                 SD_BUS_VTABLE_UNPRIVILEGED),
3378         SD_BUS_METHOD_WITH_ARGS("SetDefaultTarget",
3379                                 SD_BUS_ARGS("s", name, "b", force),
3380                                 SD_BUS_RESULT("a(sss)", changes),
3381                                 method_set_default_target,
3382                                 SD_BUS_VTABLE_UNPRIVILEGED),
3383         SD_BUS_METHOD_WITH_ARGS("GetDefaultTarget",
3384                                 SD_BUS_NO_ARGS,
3385                                 SD_BUS_RESULT("s", name),
3386                                 method_get_default_target,
3387                                 SD_BUS_VTABLE_UNPRIVILEGED),
3388         SD_BUS_METHOD_WITH_ARGS("PresetAllUnitFiles",
3389                                 SD_BUS_ARGS("s", mode, "b", runtime, "b", force),
3390                                 SD_BUS_RESULT("a(sss)", changes),
3391                                 method_preset_all_unit_files,
3392                                 SD_BUS_VTABLE_UNPRIVILEGED),
3393         SD_BUS_METHOD_WITH_ARGS("AddDependencyUnitFiles",
3394                                 SD_BUS_ARGS("as", files, "s", target, "s", type, "b", runtime, "b", force),
3395                                 SD_BUS_RESULT("a(sss)", changes),
3396                                 method_add_dependency_unit_files,
3397                                 SD_BUS_VTABLE_UNPRIVILEGED),
3398         SD_BUS_METHOD_WITH_ARGS("GetUnitFileLinks",
3399                                 SD_BUS_ARGS("s", name, "b", runtime),
3400                                 SD_BUS_RESULT("as", links),
3401                                 method_get_unit_file_links,
3402                                 SD_BUS_VTABLE_UNPRIVILEGED),
3403         SD_BUS_METHOD_WITH_ARGS("SetExitCode",
3404                                 SD_BUS_ARGS("y", number),
3405                                 SD_BUS_NO_RESULT,
3406                                 method_set_exit_code,
3407                                 SD_BUS_VTABLE_UNPRIVILEGED),
3408         SD_BUS_METHOD_WITH_ARGS("LookupDynamicUserByName",
3409                                 SD_BUS_ARGS("s", name),
3410                                 SD_BUS_RESULT("u", uid),
3411                                 method_lookup_dynamic_user_by_name,
3412                                 SD_BUS_VTABLE_UNPRIVILEGED),
3413         SD_BUS_METHOD_WITH_ARGS("LookupDynamicUserByUID",
3414                                 SD_BUS_ARGS("u", uid),
3415                                 SD_BUS_RESULT("s", name),
3416                                 method_lookup_dynamic_user_by_uid,
3417                                 SD_BUS_VTABLE_UNPRIVILEGED),
3418         SD_BUS_METHOD_WITH_ARGS("GetDynamicUsers",
3419                                 SD_BUS_NO_ARGS,
3420                                 SD_BUS_RESULT("a(us)", users),
3421                                 method_get_dynamic_users,
3422                                 SD_BUS_VTABLE_UNPRIVILEGED),
3423         SD_BUS_METHOD_WITH_ARGS("DumpUnitFileDescriptorStore",
3424                                 SD_BUS_ARGS("s", name),
3425                                 SD_BUS_RESULT("a(suuutuusu)", entries),
3426                                 method_dump_unit_descriptor_store,
3427                                 SD_BUS_VTABLE_UNPRIVILEGED),
3428
3429         SD_BUS_SIGNAL_WITH_ARGS("UnitNew",
3430                                 SD_BUS_ARGS("s", id, "o", unit),
3431                                 0),
3432         SD_BUS_SIGNAL_WITH_ARGS("UnitRemoved",
3433                                 SD_BUS_ARGS("s", id, "o", unit),
3434                                 0),
3435         SD_BUS_SIGNAL_WITH_ARGS("JobNew",
3436                                 SD_BUS_ARGS("u", id, "o", job, "s", unit),
3437                                 0),
3438         SD_BUS_SIGNAL_WITH_ARGS("JobRemoved",
3439                                 SD_BUS_ARGS("u", id, "o", job, "s", unit, "s", result),
3440                                 0),
3441         SD_BUS_SIGNAL_WITH_ARGS("StartupFinished",
3442                                 SD_BUS_ARGS("t", firmware, "t", loader, "t", kernel, "t", initrd, "t", userspace, "t", total),
3443                                 0),
3444         SD_BUS_SIGNAL("UnitFilesChanged", NULL, 0),
3445         SD_BUS_SIGNAL_WITH_ARGS("Reloading",
3446                                 SD_BUS_ARGS("b", active),
3447                                 0),
3448
3449         SD_BUS_VTABLE_END
3450 };
3451
3452 const sd_bus_vtable bus_manager_log_control_vtable[] = {
3453         SD_BUS_VTABLE_START(0),
3454
3455         /* We define a private version of this interface here, since we want slightly different
3456          * implementations for the setters. We'll still use the generic getters however, and we share the
3457          * setters with the implementations for the Manager interface above (which pre-dates the generic
3458          * service API interface). */
3459
3460         SD_BUS_WRITABLE_PROPERTY("LogLevel", "s", bus_property_get_log_level, property_set_log_level, 0, 0),
3461         SD_BUS_WRITABLE_PROPERTY("LogTarget", "s", bus_property_get_log_target, property_set_log_target, 0, 0),
3462         SD_BUS_PROPERTY("SyslogIdentifier", "s", bus_property_get_syslog_identifier, 0, 0),
3463
3464         SD_BUS_VTABLE_END,
3465 };
3466
3467 static int send_finished(sd_bus *bus, void *userdata) {
3468         _cleanup_(sd_bus_message_unrefp) sd_bus_message *message = NULL;
3469         usec_t *times = ASSERT_PTR(userdata);
3470         int r;
3471
3472         assert(bus);
3473
3474         r = sd_bus_message_new_signal(bus,
3475                                       &message,
3476                                       "/org/freedesktop/systemd1",
3477                                       "org.freedesktop.systemd1.Manager",
3478                                       "StartupFinished");
3479         if (r < 0)
3480                 return r;
3481
3482         r = sd_bus_message_append(message, "tttttt", times[0], times[1], times[2], times[3], times[4], times[5]);
3483         if (r < 0)
3484                 return r;
3485
3486         return sd_bus_send(bus, message, NULL);
3487 }
3488
3489 void bus_manager_send_finished(
3490                 Manager *m,
3491                 usec_t firmware_usec,
3492                 usec_t loader_usec,
3493                 usec_t kernel_usec,
3494                 usec_t initrd_usec,
3495                 usec_t userspace_usec,
3496                 usec_t total_usec) {
3497
3498         int r;
3499
3500         assert(m);
3501
3502         r = bus_foreach_bus(
3503                         m,
3504                         NULL,
3505                         send_finished,
3506                         (usec_t[6]) {
3507                                 firmware_usec,
3508                                 loader_usec,
3509                                 kernel_usec,
3510                                 initrd_usec,
3511                                 userspace_usec,
3512                                 total_usec
3513                         });
3514         if (r < 0)
3515                 log_debug_errno(r, "Failed to send finished signal: %m");
3516 }
3517
3518 static int send_reloading(sd_bus *bus, void *userdata) {
3519         _cleanup_(sd_bus_message_unrefp) sd_bus_message *message = NULL;
3520         int r;
3521
3522         assert(bus);
3523
3524         r = sd_bus_message_new_signal(bus, &message, "/org/freedesktop/systemd1", "org.freedesktop.systemd1.Manager", "Reloading");
3525         if (r < 0)
3526                 return r;
3527
3528         r = sd_bus_message_append(message, "b", PTR_TO_INT(userdata));
3529         if (r < 0)
3530                 return r;
3531
3532         return sd_bus_send(bus, message, NULL);
3533 }
3534
3535 void bus_manager_send_reloading(Manager *m, bool active) {
3536         int r;
3537
3538         assert(m);
3539
3540         r = bus_foreach_bus(m, NULL, send_reloading, INT_TO_PTR(active));
3541         if (r < 0)
3542                 log_debug_errno(r, "Failed to send reloading signal: %m");
3543 }
3544
3545 static int send_changed_signal(sd_bus *bus, void *userdata) {
3546         assert(bus);
3547
3548         return sd_bus_emit_properties_changed_strv(bus,
3549                                                    "/org/freedesktop/systemd1",
3550                                                    "org.freedesktop.systemd1.Manager",
3551                                                    NULL);
3552 }
3553
3554 void bus_manager_send_change_signal(Manager *m) {
3555         int r;
3556
3557         assert(m);
3558
3559         r = bus_foreach_bus(m, NULL, send_changed_signal, NULL);
3560         if (r < 0)
3561                 log_debug_errno(r, "Failed to send manager change signal: %m");
3562 }