]> git.ipfire.org Git - thirdparty/systemd.git/blob - src/core/dbus-unit.c
projects / thirdparty / systemd.git / blob
? search:
summary | shortlog | log | commit | commitdiff | tree
blame | history | raw | HEAD
update TODO
[thirdparty/systemd.git] / src / core / dbus-unit.c
1 /* SPDX-License-Identifier: LGPL-2.1-or-later */
2
3 #include "sd-bus.h"
4
5 #include "alloc-util.h"
6 #include "bpf-firewall.h"
7 #include "bus-common-errors.h"
8 #include "bus-get-properties.h"
9 #include "bus-polkit.h"
10 #include "cgroup-util.h"
11 #include "condition.h"
12 #include "dbus-job.h"
13 #include "dbus-manager.h"
14 #include "dbus-unit.h"
15 #include "dbus-util.h"
16 #include "dbus.h"
17 #include "fd-util.h"
18 #include "install.h"
19 #include "locale-util.h"
20 #include "log.h"
21 #include "path-util.h"
22 #include "process-util.h"
23 #include "selinux-access.h"
24 #include "signal-util.h"
25 #include "special.h"
26 #include "string-table.h"
27 #include "string-util.h"
28 #include "strv.h"
29 #include "user-util.h"
30 #include "web-util.h"
31
32 static bool unit_can_start_refuse_manual(Unit *u) {
33 return unit_can_start(u) && !u->refuse_manual_start;
34 }
35
36 static bool unit_can_stop_refuse_manual(Unit *u) {
37 return unit_can_stop(u) && !u->refuse_manual_stop;
38 }
39
40 static bool unit_can_isolate_refuse_manual(Unit *u) {
41 return unit_can_isolate(u) && !u->refuse_manual_start;
42 }
43
44 static BUS_DEFINE_PROPERTY_GET_ENUM(property_get_collect_mode, collect_mode, CollectMode);
45 static BUS_DEFINE_PROPERTY_GET_ENUM(property_get_load_state, unit_load_state, UnitLoadState);
46 static BUS_DEFINE_PROPERTY_GET_ENUM(property_get_job_mode, job_mode, JobMode);
47 static BUS_DEFINE_PROPERTY_GET(property_get_description, "s", Unit, unit_description);
48 static BUS_DEFINE_PROPERTY_GET2(property_get_active_state, "s", Unit, unit_active_state, unit_active_state_to_string);
49 static BUS_DEFINE_PROPERTY_GET2(property_get_freezer_state, "s", Unit, unit_freezer_state, freezer_state_to_string);
50 static BUS_DEFINE_PROPERTY_GET(property_get_sub_state, "s", Unit, unit_sub_state_to_string);
51 static BUS_DEFINE_PROPERTY_GET2(property_get_unit_file_state, "s", Unit, unit_get_unit_file_state, unit_file_state_to_string);
52 static BUS_DEFINE_PROPERTY_GET(property_get_can_reload, "b", Unit, unit_can_reload);
53 static BUS_DEFINE_PROPERTY_GET(property_get_can_start, "b", Unit, unit_can_start_refuse_manual);
54 static BUS_DEFINE_PROPERTY_GET(property_get_can_stop, "b", Unit, unit_can_stop_refuse_manual);
55 static BUS_DEFINE_PROPERTY_GET(property_get_can_isolate, "b", Unit, unit_can_isolate_refuse_manual);
56 static BUS_DEFINE_PROPERTY_GET(property_get_can_freeze, "b", Unit, unit_can_freeze);
57 static BUS_DEFINE_PROPERTY_GET(property_get_need_daemon_reload, "b", Unit, unit_need_daemon_reload);
58 static BUS_DEFINE_PROPERTY_GET_GLOBAL(property_get_empty_strv, "as", 0);
59
60 static int property_get_can_clean(
61 sd_bus *bus,
62 const char *path,
63 const char *interface,
64 const char *property,
65 sd_bus_message *reply,
66 void *userdata,
67 sd_bus_error *error) {
68
69 Unit *u = userdata;
70 ExecCleanMask mask;
71 int r;
72
73 assert(bus);
74 assert(reply);
75
76 r = unit_can_clean(u, &mask);
77 if (r < 0)
78 return r;
79
80 r = sd_bus_message_open_container(reply, 'a', "s");
81 if (r < 0)
82 return r;
83
84 for (ExecDirectoryType t = 0; t < _EXEC_DIRECTORY_TYPE_MAX; t++) {
85 if (!FLAGS_SET(mask, 1U << t))
86 continue;
87
88 r = sd_bus_message_append(reply, "s", exec_resource_type_to_string(t));
89 if (r < 0)
90 return r;
91 }
92
93 return sd_bus_message_close_container(reply);
94 }
95
96 static int property_get_names(
97 sd_bus *bus,
98 const char *path,
99 const char *interface,
100 const char *property,
101 sd_bus_message *reply,
102 void *userdata,
103 sd_bus_error *error) {
104
105 Unit *u = userdata;
106 const char *t;
107 int r;
108
109 assert(bus);
110 assert(reply);
111 assert(u);
112
113 r = sd_bus_message_open_container(reply, 'a', "s");
114 if (r < 0)
115 return r;
116
117 r = sd_bus_message_append(reply, "s", u->id);
118 if (r < 0)
119 return r;
120
121 SET_FOREACH(t, u->aliases) {
122 r = sd_bus_message_append(reply, "s", t);
123 if (r < 0)
124 return r;
125 }
126
127 return sd_bus_message_close_container(reply);
128 }
129
130 static int property_get_following(
131 sd_bus *bus,
132 const char *path,
133 const char *interface,
134 const char *property,
135 sd_bus_message *reply,
136 void *userdata,
137 sd_bus_error *error) {
138
139 Unit *u = userdata, *f;
140
141 assert(bus);
142 assert(reply);
143 assert(u);
144
145 f = unit_following(u);
146 return sd_bus_message_append(reply, "s", f ? f->id : NULL);
147 }
148
149 static int property_get_dependencies(
150 sd_bus *bus,
151 const char *path,
152 const char *interface,
153 const char *property,
154 sd_bus_message *reply,
155 void *userdata,
156 sd_bus_error *error) {
157
158 Unit *u = userdata, *other;
159 UnitDependency d;
160 Hashmap *deps;
161 void *v;
162 int r;
163
164 assert(bus);
165 assert(reply);
166 assert(u);
167
168 d = unit_dependency_from_string(property);
169 assert_se(d >= 0);
170
171 deps = unit_get_dependencies(u, d);
172
173 r = sd_bus_message_open_container(reply, 'a', "s");
174 if (r < 0)
175 return r;
176
177 HASHMAP_FOREACH_KEY(v, other, deps) {
178 r = sd_bus_message_append(reply, "s", other->id);
179 if (r < 0)
180 return r;
181 }
182
183 return sd_bus_message_close_container(reply);
184 }
185
186 static int property_get_requires_mounts_for(
187 sd_bus *bus,
188 const char *path,
189 const char *interface,
190 const char *property,
191 sd_bus_message *reply,
192 void *userdata,
193 sd_bus_error *error) {
194
195 Hashmap **h = userdata;
196 const char *p;
197 void *v;
198 int r;
199
200 assert(bus);
201 assert(reply);
202 assert(h);
203
204 r = sd_bus_message_open_container(reply, 'a', "s");
205 if (r < 0)
206 return r;
207
208 HASHMAP_FOREACH_KEY(v, p, *h) {
209 r = sd_bus_message_append(reply, "s", p);
210 if (r < 0)
211 return r;
212 }
213
214 return sd_bus_message_close_container(reply);
215 }
216
217 static int property_get_unit_file_preset(
218 sd_bus *bus,
219 const char *path,
220 const char *interface,
221 const char *property,
222 sd_bus_message *reply,
223 void *userdata,
224 sd_bus_error *error) {
225
226 Unit *u = userdata;
227 int r;
228
229 assert(bus);
230 assert(reply);
231 assert(u);
232
233 r = unit_get_unit_file_preset(u);
234
235 return sd_bus_message_append(reply, "s",
236 r < 0 ? NULL:
237 r > 0 ? "enabled" : "disabled");
238 }
239
240 static int property_get_job(
241 sd_bus *bus,
242 const char *path,
243 const char *interface,
244 const char *property,
245 sd_bus_message *reply,
246 void *userdata,
247 sd_bus_error *error) {
248
249 _cleanup_free_ char *p = NULL;
250 Job **j = userdata;
251
252 assert(bus);
253 assert(reply);
254 assert(j);
255
256 if (!*j)
257 return sd_bus_message_append(reply, "(uo)", 0, "/");
258
259 p = job_dbus_path(*j);
260 if (!p)
261 return -ENOMEM;
262
263 return sd_bus_message_append(reply, "(uo)", (*j)->id, p);
264 }
265
266 static int property_get_conditions(
267 sd_bus *bus,
268 const char *path,
269 const char *interface,
270 const char *property,
271 sd_bus_message *reply,
272 void *userdata,
273 sd_bus_error *error) {
274
275 const char *(*to_string)(ConditionType type) = NULL;
276 Condition **list = userdata;
277 int r;
278
279 assert(bus);
280 assert(reply);
281 assert(list);
282
283 to_string = streq(property, "Asserts") ? assert_type_to_string : condition_type_to_string;
284
285 r = sd_bus_message_open_container(reply, 'a', "(sbbsi)");
286 if (r < 0)
287 return r;
288
289 LIST_FOREACH(conditions, c, *list) {
290 int tristate;
291
292 tristate =
293 c->result == CONDITION_UNTESTED ? 0 :
294 c->result == CONDITION_SUCCEEDED ? 1 : -1;
295
296 r = sd_bus_message_append(reply, "(sbbsi)",
297 to_string(c->type),
298 c->trigger, c->negate,
299 c->parameter, tristate);
300 if (r < 0)
301 return r;
302
303 }
304
305 return sd_bus_message_close_container(reply);
306 }
307
308 static int property_get_load_error(
309 sd_bus *bus,
310 const char *path,
311 const char *interface,
312 const char *property,
313 sd_bus_message *reply,
314 void *userdata,
315 sd_bus_error *error) {
316
317 _cleanup_(sd_bus_error_free) sd_bus_error e = SD_BUS_ERROR_NULL;
318 Unit *u = userdata;
319 int r;
320
321 assert(bus);
322 assert(reply);
323 assert(u);
324
325 r = bus_unit_validate_load_state(u, &e);
326 if (r < 0)
327 return sd_bus_message_append(reply, "(ss)", e.name, e.message);
328
329 return sd_bus_message_append(reply, "(ss)", NULL, NULL);
330 }
331
332 static int property_get_markers(
333 sd_bus *bus,
334 const char *path,
335 const char *interface,
336 const char *property,
337 sd_bus_message *reply,
338 void *userdata,
339 sd_bus_error *error) {
340
341 unsigned *markers = userdata;
342 int r;
343
344 assert(bus);
345 assert(reply);
346 assert(markers);
347
348 r = sd_bus_message_open_container(reply, 'a', "s");
349 if (r < 0)
350 return r;
351
352 /* Make sure out values fit in the bitfield. */
353 assert_cc(_UNIT_MARKER_MAX <= sizeof(((Unit){}).markers) * 8);
354
355 for (UnitMarker m = 0; m < _UNIT_MARKER_MAX; m++)
356 if (FLAGS_SET(*markers, 1u << m)) {
357 r = sd_bus_message_append(reply, "s", unit_marker_to_string(m));
358 if (r < 0)
359 return r;
360 }
361
362 return sd_bus_message_close_container(reply);
363 }
364
365 static const char *const polkit_message_for_job[_JOB_TYPE_MAX] = {
366 [JOB_START] = N_("Authentication is required to start '$(unit)'."),
367 [JOB_STOP] = N_("Authentication is required to stop '$(unit)'."),
368 [JOB_RELOAD] = N_("Authentication is required to reload '$(unit)'."),
369 [JOB_RESTART] = N_("Authentication is required to restart '$(unit)'."),
370 [JOB_TRY_RESTART] = N_("Authentication is required to restart '$(unit)'."),
371 };
372
373 int bus_unit_method_start_generic(
374 sd_bus_message *message,
375 Unit *u,
376 JobType job_type,
377 bool reload_if_possible,
378 sd_bus_error *error) {
379
380 BusUnitQueueFlags job_flags = reload_if_possible ? BUS_UNIT_QUEUE_RELOAD_IF_POSSIBLE : 0;
381 const char *smode, *verb;
382 JobMode mode;
383 int r;
384
385 assert(message);
386 assert(u);
387 assert(job_type >= 0 && job_type < _JOB_TYPE_MAX);
388
389 r = mac_selinux_unit_access_check(
390 u, message,
391 job_type_to_access_method(job_type),
392 error);
393 if (r < 0)
394 return r;
395
396 r = sd_bus_message_read(message, "s", &smode);
397 if (r < 0)
398 return r;
399
400 mode = job_mode_from_string(smode);
401 if (mode < 0)
402 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Job mode %s invalid", smode);
403
404 if (reload_if_possible)
405 verb = strjoina("reload-or-", job_type_to_string(job_type));
406 else
407 verb = job_type_to_string(job_type);
408
409 if (sd_bus_message_is_method_call(message, NULL, "StartUnitWithFlags")) {
410 uint64_t input_flags = 0;
411
412 r = sd_bus_message_read(message, "t", &input_flags);
413 if (r < 0)
414 return r;
415 /* Let clients know that this version doesn't support any flags at the moment. */
416 if (input_flags != 0)
417 return sd_bus_reply_method_errorf(message, SD_BUS_ERROR_INVALID_ARGS,
418 "Invalid 'flags' parameter '%" PRIu64 "'",
419 input_flags);
420 }
421
422 r = bus_verify_manage_units_async_full(
423 u,
424 verb,
425 CAP_SYS_ADMIN,
426 polkit_message_for_job[job_type],
427 true,
428 message,
429 error);
430 if (r < 0)
431 return r;
432 if (r == 0)
433 return 1; /* No authorization for now, but the async polkit stuff will call us again when it has it */
434
435 return bus_unit_queue_job(message, u, job_type, mode, job_flags, error);
436 }
437
438 static int bus_unit_method_start(sd_bus_message *message, void *userdata, sd_bus_error *error) {
439 return bus_unit_method_start_generic(message, userdata, JOB_START, false, error);
440 }
441
442 static int bus_unit_method_stop(sd_bus_message *message, void *userdata, sd_bus_error *error) {
443 return bus_unit_method_start_generic(message, userdata, JOB_STOP, false, error);
444 }
445
446 static int bus_unit_method_reload(sd_bus_message *message, void *userdata, sd_bus_error *error) {
447 return bus_unit_method_start_generic(message, userdata, JOB_RELOAD, false, error);
448 }
449
450 static int bus_unit_method_restart(sd_bus_message *message, void *userdata, sd_bus_error *error) {
451 return bus_unit_method_start_generic(message, userdata, JOB_RESTART, false, error);
452 }
453
454 static int bus_unit_method_try_restart(sd_bus_message *message, void *userdata, sd_bus_error *error) {
455 return bus_unit_method_start_generic(message, userdata, JOB_TRY_RESTART, false, error);
456 }
457
458 static int bus_unit_method_reload_or_restart(sd_bus_message *message, void *userdata, sd_bus_error *error) {
459 return bus_unit_method_start_generic(message, userdata, JOB_RESTART, true, error);
460 }
461
462 static int bus_unit_method_reload_or_try_restart(sd_bus_message *message, void *userdata, sd_bus_error *error) {
463 return bus_unit_method_start_generic(message, userdata, JOB_TRY_RESTART, true, error);
464 }
465
466 int bus_unit_method_enqueue_job(sd_bus_message *message, void *userdata, sd_bus_error *error) {
467 BusUnitQueueFlags flags = BUS_UNIT_QUEUE_VERBOSE_REPLY;
468 const char *jtype, *smode;
469 Unit *u = userdata;
470 JobType type;
471 JobMode mode;
472 int r;
473
474 assert(message);
475 assert(u);
476
477 r = sd_bus_message_read(message, "ss", &jtype, &smode);
478 if (r < 0)
479 return r;
480
481 /* Parse the two magic reload types "reload-or-…" manually */
482 if (streq(jtype, "reload-or-restart")) {
483 type = JOB_RESTART;
484 flags |= BUS_UNIT_QUEUE_RELOAD_IF_POSSIBLE;
485 } else if (streq(jtype, "reload-or-try-restart")) {
486 type = JOB_TRY_RESTART;
487 flags |= BUS_UNIT_QUEUE_RELOAD_IF_POSSIBLE;
488 } else {
489 /* And the rest generically */
490 type = job_type_from_string(jtype);
491 if (type < 0)
492 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Job type %s invalid", jtype);
493 }
494
495 mode = job_mode_from_string(smode);
496 if (mode < 0)
497 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Job mode %s invalid", smode);
498
499 r = mac_selinux_unit_access_check(
500 u, message,
501 job_type_to_access_method(type),
502 error);
503 if (r < 0)
504 return r;
505
506 r = bus_verify_manage_units_async_full(
507 u,
508 jtype,
509 CAP_SYS_ADMIN,
510 polkit_message_for_job[type],
511 true,
512 message,
513 error);
514 if (r < 0)
515 return r;
516 if (r == 0)
517 return 1; /* No authorization for now, but the async polkit stuff will call us again when it has it */
518
519 return bus_unit_queue_job(message, u, type, mode, flags, error);
520 }
521
522 int bus_unit_method_kill(sd_bus_message *message, void *userdata, sd_bus_error *error) {
523 Unit *u = userdata;
524 const char *swho;
525 int32_t signo;
526 KillWho who;
527 int r;
528
529 assert(message);
530 assert(u);
531
532 r = mac_selinux_unit_access_check(u, message, "stop", error);
533 if (r < 0)
534 return r;
535
536 r = sd_bus_message_read(message, "si", &swho, &signo);
537 if (r < 0)
538 return r;
539
540 if (isempty(swho))
541 who = KILL_ALL;
542 else {
543 who = kill_who_from_string(swho);
544 if (who < 0)
545 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Invalid who argument %s", swho);
546 }
547
548 if (!SIGNAL_VALID(signo))
549 return sd_bus_error_set(error, SD_BUS_ERROR_INVALID_ARGS, "Signal number out of range.");
550
551 r = bus_verify_manage_units_async_full(
552 u,
553 "kill",
554 CAP_KILL,
555 N_("Authentication is required to send a UNIX signal to the processes of '$(unit)'."),
556 true,
557 message,
558 error);
559 if (r < 0)
560 return r;
561 if (r == 0)
562 return 1; /* No authorization for now, but the async polkit stuff will call us again when it has it */
563
564 r = unit_kill(u, who, signo, error);
565 if (r < 0)
566 return r;
567
568 return sd_bus_reply_method_return(message, NULL);
569 }
570
571 int bus_unit_method_reset_failed(sd_bus_message *message, void *userdata, sd_bus_error *error) {
572 Unit *u = userdata;
573 int r;
574
575 assert(message);
576 assert(u);
577
578 r = mac_selinux_unit_access_check(u, message, "reload", error);
579 if (r < 0)
580 return r;
581
582 r = bus_verify_manage_units_async_full(
583 u,
584 "reset-failed",
585 CAP_SYS_ADMIN,
586 N_("Authentication is required to reset the \"failed\" state of '$(unit)'."),
587 true,
588 message,
589 error);
590 if (r < 0)
591 return r;
592 if (r == 0)
593 return 1; /* No authorization for now, but the async polkit stuff will call us again when it has it */
594
595 unit_reset_failed(u);
596
597 return sd_bus_reply_method_return(message, NULL);
598 }
599
600 int bus_unit_method_set_properties(sd_bus_message *message, void *userdata, sd_bus_error *error) {
601 Unit *u = userdata;
602 int runtime, r;
603
604 assert(message);
605 assert(u);
606
607 r = mac_selinux_unit_access_check(u, message, "start", error);
608 if (r < 0)
609 return r;
610
611 r = sd_bus_message_read(message, "b", &runtime);
612 if (r < 0)
613 return r;
614
615 r = bus_verify_manage_units_async_full(
616 u,
617 "set-property",
618 CAP_SYS_ADMIN,
619 N_("Authentication is required to set properties on '$(unit)'."),
620 true,
621 message,
622 error);
623 if (r < 0)
624 return r;
625 if (r == 0)
626 return 1; /* No authorization for now, but the async polkit stuff will call us again when it has it */
627
628 r = bus_unit_set_properties(u, message, runtime ? UNIT_RUNTIME : UNIT_PERSISTENT, true, error);
629 if (r < 0)
630 return r;
631
632 return sd_bus_reply_method_return(message, NULL);
633 }
634
635 int bus_unit_method_ref(sd_bus_message *message, void *userdata, sd_bus_error *error) {
636 Unit *u = userdata;
637 int r;
638
639 assert(message);
640 assert(u);
641
642 r = mac_selinux_unit_access_check(u, message, "start", error);
643 if (r < 0)
644 return r;
645
646 r = bus_verify_manage_units_async_full(
647 u,
648 "ref",
649 CAP_SYS_ADMIN,
650 NULL,
651 false,
652 message,
653 error);
654 if (r < 0)
655 return r;
656 if (r == 0)
657 return 1; /* No authorization for now, but the async polkit stuff will call us again when it has it */
658
659 r = bus_unit_track_add_sender(u, message);
660 if (r < 0)
661 return r;
662
663 return sd_bus_reply_method_return(message, NULL);
664 }
665
666 int bus_unit_method_unref(sd_bus_message *message, void *userdata, sd_bus_error *error) {
667 Unit *u = userdata;
668 int r;
669
670 assert(message);
671 assert(u);
672
673 r = bus_unit_track_remove_sender(u, message);
674 if (r == -EUNATCH)
675 return sd_bus_error_set(error, BUS_ERROR_NOT_REFERENCED, "Unit has not been referenced yet.");
676 if (r < 0)
677 return r;
678
679 return sd_bus_reply_method_return(message, NULL);
680 }
681
682 int bus_unit_method_clean(sd_bus_message *message, void *userdata, sd_bus_error *error) {
683 ExecCleanMask mask = 0;
684 Unit *u = userdata;
685 int r;
686
687 assert(message);
688 assert(u);
689
690 r = mac_selinux_unit_access_check(u, message, "stop", error);
691 if (r < 0)
692 return r;
693
694 r = sd_bus_message_enter_container(message, 'a', "s");
695 if (r < 0)
696 return r;
697
698 for (;;) {
699 const char *i;
700
701 r = sd_bus_message_read(message, "s", &i);
702 if (r < 0)
703 return r;
704 if (r == 0)
705 break;
706
707 if (streq(i, "all"))
708 mask |= EXEC_CLEAN_ALL;
709 else {
710 ExecDirectoryType t;
711
712 t = exec_resource_type_from_string(i);
713 if (t < 0)
714 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Invalid resource type: %s", i);
715
716 mask |= 1U << t;
717 }
718 }
719
720 r = sd_bus_message_exit_container(message);
721 if (r < 0)
722 return r;
723
724 r = bus_verify_manage_units_async_full(
725 u,
726 "clean",
727 CAP_DAC_OVERRIDE,
728 N_("Authentication is required to delete files and directories associated with '$(unit)'."),
729 true,
730 message,
731 error);
732 if (r < 0)
733 return r;
734 if (r == 0)
735 return 1; /* No authorization for now, but the async polkit stuff will call us again when it has it */
736
737 r = unit_clean(u, mask);
738 if (r == -EOPNOTSUPP)
739 return sd_bus_error_setf(error, SD_BUS_ERROR_NOT_SUPPORTED, "Unit '%s' does not support cleaning.", u->id);
740 if (r == -EUNATCH)
741 return sd_bus_error_set(error, BUS_ERROR_NOTHING_TO_CLEAN, "No matching resources found.");
742 if (r == -EBUSY)
743 return sd_bus_error_set(error, BUS_ERROR_UNIT_BUSY, "Unit is not inactive or has pending job.");
744 if (r < 0)
745 return r;
746
747 return sd_bus_reply_method_return(message, NULL);
748 }
749
750 static int bus_unit_method_freezer_generic(sd_bus_message *message, void *userdata, sd_bus_error *error, FreezerAction action) {
751 const char* perm;
752 int (*method)(Unit*);
753 Unit *u = userdata;
754 bool reply_no_delay = false;
755 int r;
756
757 assert(message);
758 assert(u);
759 assert(IN_SET(action, FREEZER_FREEZE, FREEZER_THAW));
760
761 if (action == FREEZER_FREEZE) {
762 perm = "stop";
763 method = unit_freeze;
764 } else {
765 perm = "start";
766 method = unit_thaw;
767 }
768
769 r = mac_selinux_unit_access_check(u, message, perm, error);
770 if (r < 0)
771 return r;
772
773 r = bus_verify_manage_units_async_full(
774 u,
775 perm,
776 CAP_SYS_ADMIN,
777 N_("Authentication is required to freeze or thaw the processes of '$(unit)' unit."),
778 true,
779 message,
780 error);
781 if (r < 0)
782 return r;
783 if (r == 0)
784 return 1; /* No authorization for now, but the async polkit stuff will call us again when it has it */
785
786 r = method(u);
787 if (r == -EOPNOTSUPP)
788 return sd_bus_error_setf(error, SD_BUS_ERROR_NOT_SUPPORTED, "Unit '%s' does not support freezing.", u->id);
789 if (r == -EBUSY)
790 return sd_bus_error_set(error, BUS_ERROR_UNIT_BUSY, "Unit has a pending job.");
791 if (r == -EHOSTDOWN)
792 return sd_bus_error_set(error, BUS_ERROR_UNIT_INACTIVE, "Unit is inactive.");
793 if (r == -EALREADY)
794 return sd_bus_error_setf(error, SD_BUS_ERROR_FAILED, "Previously requested freezer operation for unit '%s' is still in progress.", u->id);
795 if (r < 0)
796 return r;
797 if (r == 0)
798 reply_no_delay = true;
799
800 assert(!u->pending_freezer_message);
801
802 r = sd_bus_message_new_method_return(message, &u->pending_freezer_message);
803 if (r < 0)
804 return r;
805
806 if (reply_no_delay) {
807 r = bus_unit_send_pending_freezer_message(u);
808 if (r < 0)
809 return r;
810 }
811
812 return 1;
813 }
814
815 int bus_unit_method_thaw(sd_bus_message *message, void *userdata, sd_bus_error *error) {
816 return bus_unit_method_freezer_generic(message, userdata, error, FREEZER_THAW);
817 }
818
819 int bus_unit_method_freeze(sd_bus_message *message, void *userdata, sd_bus_error *error) {
820 return bus_unit_method_freezer_generic(message, userdata, error, FREEZER_FREEZE);
821 }
822
823 static int property_get_refs(
824 sd_bus *bus,
825 const char *path,
826 const char *interface,
827 const char *property,
828 sd_bus_message *reply,
829 void *userdata,
830 sd_bus_error *error) {
831
832 Unit *u = userdata;
833 int r;
834
835 assert(bus);
836 assert(reply);
837
838 r = sd_bus_message_open_container(reply, 'a', "s");
839 if (r < 0)
840 return r;
841
842 for (const char *i = sd_bus_track_first(u->bus_track); i; i = sd_bus_track_next(u->bus_track)) {
843 int c;
844
845 c = sd_bus_track_count_name(u->bus_track, i);
846 if (c < 0)
847 return c;
848
849 /* Add the item multiple times if the ref count for each is above 1 */
850 for (int k = 0; k < c; k++) {
851 r = sd_bus_message_append(reply, "s", i);
852 if (r < 0)
853 return r;
854 }
855 }
856
857 return sd_bus_message_close_container(reply);
858 }
859
860 const sd_bus_vtable bus_unit_vtable[] = {
861 SD_BUS_VTABLE_START(0),
862
863 SD_BUS_PROPERTY("Id", "s", NULL, offsetof(Unit, id), SD_BUS_VTABLE_PROPERTY_CONST),
864 SD_BUS_PROPERTY("Names", "as", property_get_names, 0, SD_BUS_VTABLE_PROPERTY_CONST),
865 SD_BUS_PROPERTY("Following", "s", property_get_following, 0, 0),
866 SD_BUS_PROPERTY("Requires", "as", property_get_dependencies, 0, SD_BUS_VTABLE_PROPERTY_CONST),
867 SD_BUS_PROPERTY("Requisite", "as", property_get_dependencies, 0, SD_BUS_VTABLE_PROPERTY_CONST),
868 SD_BUS_PROPERTY("Wants", "as", property_get_dependencies, 0, SD_BUS_VTABLE_PROPERTY_CONST),
869 SD_BUS_PROPERTY("BindsTo", "as", property_get_dependencies, 0, SD_BUS_VTABLE_PROPERTY_CONST),
870 SD_BUS_PROPERTY("PartOf", "as", property_get_dependencies, 0, SD_BUS_VTABLE_PROPERTY_CONST),
871 SD_BUS_PROPERTY("Upholds", "as", property_get_dependencies, 0, SD_BUS_VTABLE_PROPERTY_CONST),
872 SD_BUS_PROPERTY("RequiredBy", "as", property_get_dependencies, 0, SD_BUS_VTABLE_PROPERTY_CONST),
873 SD_BUS_PROPERTY("RequisiteOf", "as", property_get_dependencies, 0, SD_BUS_VTABLE_PROPERTY_CONST),
874 SD_BUS_PROPERTY("WantedBy", "as", property_get_dependencies, 0, SD_BUS_VTABLE_PROPERTY_CONST),
875 SD_BUS_PROPERTY("BoundBy", "as", property_get_dependencies, 0, SD_BUS_VTABLE_PROPERTY_CONST),
876 SD_BUS_PROPERTY("UpheldBy", "as", property_get_dependencies, 0, SD_BUS_VTABLE_PROPERTY_CONST),
877 SD_BUS_PROPERTY("ConsistsOf", "as", property_get_dependencies, 0, SD_BUS_VTABLE_PROPERTY_CONST),
878 SD_BUS_PROPERTY("Conflicts", "as", property_get_dependencies, 0, SD_BUS_VTABLE_PROPERTY_CONST),
879 SD_BUS_PROPERTY("ConflictedBy", "as", property_get_dependencies, 0, SD_BUS_VTABLE_PROPERTY_CONST),
880 SD_BUS_PROPERTY("Before", "as", property_get_dependencies, 0, SD_BUS_VTABLE_PROPERTY_CONST),
881 SD_BUS_PROPERTY("After", "as", property_get_dependencies, 0, SD_BUS_VTABLE_PROPERTY_CONST),
882 SD_BUS_PROPERTY("OnSuccess", "as", property_get_dependencies, 0, SD_BUS_VTABLE_PROPERTY_CONST),
883 SD_BUS_PROPERTY("OnSuccessOf", "as", property_get_dependencies, 0, SD_BUS_VTABLE_PROPERTY_CONST),
884 SD_BUS_PROPERTY("OnFailure", "as", property_get_dependencies, 0, SD_BUS_VTABLE_PROPERTY_CONST),
885 SD_BUS_PROPERTY("OnFailureOf", "as", property_get_dependencies, 0, SD_BUS_VTABLE_PROPERTY_CONST),
886 SD_BUS_PROPERTY("Triggers", "as", property_get_dependencies, 0, SD_BUS_VTABLE_PROPERTY_CONST),
887 SD_BUS_PROPERTY("TriggeredBy", "as", property_get_dependencies, 0, SD_BUS_VTABLE_PROPERTY_CONST),
888 SD_BUS_PROPERTY("PropagatesReloadTo", "as", property_get_dependencies, 0, SD_BUS_VTABLE_PROPERTY_CONST),
889 SD_BUS_PROPERTY("ReloadPropagatedFrom", "as", property_get_dependencies, 0, SD_BUS_VTABLE_PROPERTY_CONST),
890 SD_BUS_PROPERTY("PropagatesStopTo", "as", property_get_dependencies, 0, SD_BUS_VTABLE_PROPERTY_CONST),
891 SD_BUS_PROPERTY("StopPropagatedFrom", "as", property_get_dependencies, 0, SD_BUS_VTABLE_PROPERTY_CONST),
892 SD_BUS_PROPERTY("JoinsNamespaceOf", "as", property_get_dependencies, 0, SD_BUS_VTABLE_PROPERTY_CONST),
893 SD_BUS_PROPERTY("SliceOf", "as", property_get_dependencies, 0, SD_BUS_VTABLE_PROPERTY_CONST),
894 SD_BUS_PROPERTY("RequiresMountsFor", "as", property_get_requires_mounts_for, offsetof(Unit, requires_mounts_for), SD_BUS_VTABLE_PROPERTY_CONST),
895 SD_BUS_PROPERTY("Documentation", "as", NULL, offsetof(Unit, documentation), SD_BUS_VTABLE_PROPERTY_CONST),
896 SD_BUS_PROPERTY("Description", "s", property_get_description, 0, SD_BUS_VTABLE_PROPERTY_CONST),
897 SD_BUS_PROPERTY("AccessSELinuxContext", "s", NULL, offsetof(Unit, access_selinux_context), SD_BUS_VTABLE_PROPERTY_CONST),
898 SD_BUS_PROPERTY("LoadState", "s", property_get_load_state, offsetof(Unit, load_state), SD_BUS_VTABLE_PROPERTY_CONST),
899 SD_BUS_PROPERTY("ActiveState", "s", property_get_active_state, 0, SD_BUS_VTABLE_PROPERTY_EMITS_CHANGE),
900 SD_BUS_PROPERTY("FreezerState", "s", property_get_freezer_state, 0, SD_BUS_VTABLE_PROPERTY_EMITS_CHANGE),
901 SD_BUS_PROPERTY("SubState", "s", property_get_sub_state, 0, SD_BUS_VTABLE_PROPERTY_EMITS_CHANGE),
902 SD_BUS_PROPERTY("FragmentPath", "s", NULL, offsetof(Unit, fragment_path), SD_BUS_VTABLE_PROPERTY_CONST),
903 SD_BUS_PROPERTY("SourcePath", "s", NULL, offsetof(Unit, source_path), SD_BUS_VTABLE_PROPERTY_CONST),
904 SD_BUS_PROPERTY("DropInPaths", "as", NULL, offsetof(Unit, dropin_paths), SD_BUS_VTABLE_PROPERTY_CONST),
905 SD_BUS_PROPERTY("UnitFileState", "s", property_get_unit_file_state, 0, 0),
906 SD_BUS_PROPERTY("UnitFilePreset", "s", property_get_unit_file_preset, 0, 0),
907 BUS_PROPERTY_DUAL_TIMESTAMP("StateChangeTimestamp", offsetof(Unit, state_change_timestamp), SD_BUS_VTABLE_PROPERTY_EMITS_CHANGE),
908 BUS_PROPERTY_DUAL_TIMESTAMP("InactiveExitTimestamp", offsetof(Unit, inactive_exit_timestamp), SD_BUS_VTABLE_PROPERTY_EMITS_CHANGE),
909 BUS_PROPERTY_DUAL_TIMESTAMP("ActiveEnterTimestamp", offsetof(Unit, active_enter_timestamp), SD_BUS_VTABLE_PROPERTY_EMITS_CHANGE),
910 BUS_PROPERTY_DUAL_TIMESTAMP("ActiveExitTimestamp", offsetof(Unit, active_exit_timestamp), SD_BUS_VTABLE_PROPERTY_EMITS_CHANGE),
911 BUS_PROPERTY_DUAL_TIMESTAMP("InactiveEnterTimestamp", offsetof(Unit, inactive_enter_timestamp), SD_BUS_VTABLE_PROPERTY_EMITS_CHANGE),
912 SD_BUS_PROPERTY("CanStart", "b", property_get_can_start, 0, SD_BUS_VTABLE_PROPERTY_CONST),
913 SD_BUS_PROPERTY("CanStop", "b", property_get_can_stop, 0, SD_BUS_VTABLE_PROPERTY_CONST),
914 SD_BUS_PROPERTY("CanReload", "b", property_get_can_reload, 0, SD_BUS_VTABLE_PROPERTY_CONST),
915 SD_BUS_PROPERTY("CanIsolate", "b", property_get_can_isolate, 0, SD_BUS_VTABLE_PROPERTY_CONST),
916 SD_BUS_PROPERTY("CanClean", "as", property_get_can_clean, 0, SD_BUS_VTABLE_PROPERTY_CONST),
917 SD_BUS_PROPERTY("CanFreeze", "b", property_get_can_freeze, 0, SD_BUS_VTABLE_PROPERTY_CONST),
918 SD_BUS_PROPERTY("Job", "(uo)", property_get_job, offsetof(Unit, job), SD_BUS_VTABLE_PROPERTY_EMITS_CHANGE),
919 SD_BUS_PROPERTY("StopWhenUnneeded", "b", bus_property_get_bool, offsetof(Unit, stop_when_unneeded), SD_BUS_VTABLE_PROPERTY_CONST),
920 SD_BUS_PROPERTY("RefuseManualStart", "b", bus_property_get_bool, offsetof(Unit, refuse_manual_start), SD_BUS_VTABLE_PROPERTY_CONST),
921 SD_BUS_PROPERTY("RefuseManualStop", "b", bus_property_get_bool, offsetof(Unit, refuse_manual_stop), SD_BUS_VTABLE_PROPERTY_CONST),
922 SD_BUS_PROPERTY("AllowIsolate", "b", bus_property_get_bool, offsetof(Unit, allow_isolate), SD_BUS_VTABLE_PROPERTY_CONST),
923 SD_BUS_PROPERTY("DefaultDependencies", "b", bus_property_get_bool, offsetof(Unit, default_dependencies), SD_BUS_VTABLE_PROPERTY_CONST),
924 SD_BUS_PROPERTY("OnSuccesJobMode", "s", property_get_job_mode, offsetof(Unit, on_success_job_mode), SD_BUS_VTABLE_PROPERTY_CONST|SD_BUS_VTABLE_HIDDEN), /* deprecated */
925 SD_BUS_PROPERTY("OnSuccessJobMode", "s", property_get_job_mode, offsetof(Unit, on_success_job_mode), SD_BUS_VTABLE_PROPERTY_CONST),
926 SD_BUS_PROPERTY("OnFailureJobMode", "s", property_get_job_mode, offsetof(Unit, on_failure_job_mode), SD_BUS_VTABLE_PROPERTY_CONST),
927 SD_BUS_PROPERTY("IgnoreOnIsolate", "b", bus_property_get_bool, offsetof(Unit, ignore_on_isolate), SD_BUS_VTABLE_PROPERTY_CONST),
928 SD_BUS_PROPERTY("NeedDaemonReload", "b", property_get_need_daemon_reload, 0, 0),
929 SD_BUS_PROPERTY("Markers", "as", property_get_markers, offsetof(Unit, markers), 0),
930 SD_BUS_PROPERTY("JobTimeoutUSec", "t", bus_property_get_usec, offsetof(Unit, job_timeout), SD_BUS_VTABLE_PROPERTY_CONST),
931 SD_BUS_PROPERTY("JobRunningTimeoutUSec", "t", bus_property_get_usec, offsetof(Unit, job_running_timeout), SD_BUS_VTABLE_PROPERTY_CONST),
932 SD_BUS_PROPERTY("JobTimeoutAction", "s", bus_property_get_emergency_action, offsetof(Unit, job_timeout_action), SD_BUS_VTABLE_PROPERTY_CONST),
933 SD_BUS_PROPERTY("JobTimeoutRebootArgument", "s", NULL, offsetof(Unit, job_timeout_reboot_arg), SD_BUS_VTABLE_PROPERTY_CONST),
934 SD_BUS_PROPERTY("ConditionResult", "b", bus_property_get_bool, offsetof(Unit, condition_result), SD_BUS_VTABLE_PROPERTY_EMITS_CHANGE),
935 SD_BUS_PROPERTY("AssertResult", "b", bus_property_get_bool, offsetof(Unit, assert_result), SD_BUS_VTABLE_PROPERTY_EMITS_CHANGE),
936 BUS_PROPERTY_DUAL_TIMESTAMP("ConditionTimestamp", offsetof(Unit, condition_timestamp), SD_BUS_VTABLE_PROPERTY_EMITS_CHANGE),
937 BUS_PROPERTY_DUAL_TIMESTAMP("AssertTimestamp", offsetof(Unit, assert_timestamp), SD_BUS_VTABLE_PROPERTY_EMITS_CHANGE),
938 SD_BUS_PROPERTY("Conditions", "a(sbbsi)", property_get_conditions, offsetof(Unit, conditions), SD_BUS_VTABLE_PROPERTY_EMITS_INVALIDATION),
939 SD_BUS_PROPERTY("Asserts", "a(sbbsi)", property_get_conditions, offsetof(Unit, asserts), SD_BUS_VTABLE_PROPERTY_EMITS_INVALIDATION),
940 SD_BUS_PROPERTY("LoadError", "(ss)", property_get_load_error, 0, SD_BUS_VTABLE_PROPERTY_CONST),
941 SD_BUS_PROPERTY("Transient", "b", bus_property_get_bool, offsetof(Unit, transient), SD_BUS_VTABLE_PROPERTY_CONST),
942 SD_BUS_PROPERTY("Perpetual", "b", bus_property_get_bool, offsetof(Unit, perpetual), SD_BUS_VTABLE_PROPERTY_CONST),
943 SD_BUS_PROPERTY("StartLimitIntervalUSec", "t", bus_property_get_usec, offsetof(Unit, start_ratelimit.interval), SD_BUS_VTABLE_PROPERTY_CONST),
944 SD_BUS_PROPERTY("StartLimitBurst", "u", bus_property_get_unsigned, offsetof(Unit, start_ratelimit.burst), SD_BUS_VTABLE_PROPERTY_CONST),
945 SD_BUS_PROPERTY("StartLimitAction", "s", bus_property_get_emergency_action, offsetof(Unit, start_limit_action), SD_BUS_VTABLE_PROPERTY_CONST),
946 SD_BUS_PROPERTY("FailureAction", "s", bus_property_get_emergency_action, offsetof(Unit, failure_action), SD_BUS_VTABLE_PROPERTY_CONST),
947 SD_BUS_PROPERTY("FailureActionExitStatus", "i", bus_property_get_int, offsetof(Unit, failure_action_exit_status), SD_BUS_VTABLE_PROPERTY_CONST),
948 SD_BUS_PROPERTY("SuccessAction", "s", bus_property_get_emergency_action, offsetof(Unit, success_action), SD_BUS_VTABLE_PROPERTY_CONST),
949 SD_BUS_PROPERTY("SuccessActionExitStatus", "i", bus_property_get_int, offsetof(Unit, success_action_exit_status), SD_BUS_VTABLE_PROPERTY_CONST),
950 SD_BUS_PROPERTY("RebootArgument", "s", NULL, offsetof(Unit, reboot_arg), SD_BUS_VTABLE_PROPERTY_CONST),
951 SD_BUS_PROPERTY("InvocationID", "ay", bus_property_get_id128, offsetof(Unit, invocation_id), SD_BUS_VTABLE_PROPERTY_EMITS_CHANGE),
952 SD_BUS_PROPERTY("CollectMode", "s", property_get_collect_mode, offsetof(Unit, collect_mode), SD_BUS_VTABLE_PROPERTY_CONST),
953 SD_BUS_PROPERTY("Refs", "as", property_get_refs, 0, 0),
954
955 SD_BUS_METHOD_WITH_ARGS("Start",
956 SD_BUS_ARGS("s", mode),
957 SD_BUS_RESULT("o", job),
958 bus_unit_method_start,
959 SD_BUS_VTABLE_UNPRIVILEGED),
960 SD_BUS_METHOD_WITH_ARGS("Stop",
961 SD_BUS_ARGS("s", mode),
962 SD_BUS_RESULT("o", job),
963 bus_unit_method_stop,
964 SD_BUS_VTABLE_UNPRIVILEGED),
965 SD_BUS_METHOD_WITH_ARGS("Reload",
966 SD_BUS_ARGS("s", mode),
967 SD_BUS_RESULT("o", job),
968 bus_unit_method_reload,
969 SD_BUS_VTABLE_UNPRIVILEGED),
970 SD_BUS_METHOD_WITH_ARGS("Restart",
971 SD_BUS_ARGS("s", mode),
972 SD_BUS_RESULT("o", job),
973 bus_unit_method_restart,
974 SD_BUS_VTABLE_UNPRIVILEGED),
975 SD_BUS_METHOD_WITH_ARGS("TryRestart",
976 SD_BUS_ARGS("s", mode),
977 SD_BUS_RESULT("o", job),
978 bus_unit_method_try_restart,
979 SD_BUS_VTABLE_UNPRIVILEGED),
980 SD_BUS_METHOD_WITH_ARGS("ReloadOrRestart",
981 SD_BUS_ARGS("s", mode),
982 SD_BUS_RESULT("o", job),
983 bus_unit_method_reload_or_restart,
984 SD_BUS_VTABLE_UNPRIVILEGED),
985 SD_BUS_METHOD_WITH_ARGS("ReloadOrTryRestart",
986 SD_BUS_ARGS("s", mode),
987 SD_BUS_RESULT("o", job),
988 bus_unit_method_reload_or_try_restart,
989 SD_BUS_VTABLE_UNPRIVILEGED),
990 SD_BUS_METHOD_WITH_ARGS("EnqueueJob",
991 SD_BUS_ARGS("s", job_type, "s", job_mode),
992 SD_BUS_RESULT("u", job_id, "o", job_path, "s", unit_id, "o", unit_path, "s", job_type, "a(uosos)", affected_jobs),
993 bus_unit_method_enqueue_job,
994 SD_BUS_VTABLE_UNPRIVILEGED),
995 SD_BUS_METHOD_WITH_ARGS("Kill",
996 SD_BUS_ARGS("s", whom, "i", signal),
997 SD_BUS_NO_RESULT,
998 bus_unit_method_kill,
999 SD_BUS_VTABLE_UNPRIVILEGED),
1000 SD_BUS_METHOD("ResetFailed",
1001 NULL,
1002 NULL,
1003 bus_unit_method_reset_failed,
1004 SD_BUS_VTABLE_UNPRIVILEGED),
1005 SD_BUS_METHOD_WITH_ARGS("SetProperties",
1006 SD_BUS_ARGS("b", runtime, "a(sv)", properties),
1007 SD_BUS_NO_RESULT,
1008 bus_unit_method_set_properties,
1009 SD_BUS_VTABLE_UNPRIVILEGED),
1010 SD_BUS_METHOD("Ref",
1011 NULL,
1012 NULL,
1013 bus_unit_method_ref,
1014 SD_BUS_VTABLE_UNPRIVILEGED),
1015 SD_BUS_METHOD("Unref",
1016 NULL,
1017 NULL,
1018 bus_unit_method_unref,
1019 SD_BUS_VTABLE_UNPRIVILEGED),
1020 SD_BUS_METHOD_WITH_ARGS("Clean",
1021 SD_BUS_ARGS("as", mask),
1022 SD_BUS_NO_RESULT,
1023 bus_unit_method_clean,
1024 SD_BUS_VTABLE_UNPRIVILEGED),
1025 SD_BUS_METHOD("Freeze",
1026 NULL,
1027 NULL,
1028 bus_unit_method_freeze,
1029 SD_BUS_VTABLE_UNPRIVILEGED),
1030 SD_BUS_METHOD("Thaw",
1031 NULL,
1032 NULL,
1033 bus_unit_method_thaw,
1034 SD_BUS_VTABLE_UNPRIVILEGED),
1035
1036 /* For dependency types we don't support anymore always return an empty array */
1037 SD_BUS_PROPERTY("RequiresOverridable", "as", property_get_empty_strv, 0, SD_BUS_VTABLE_HIDDEN),
1038 SD_BUS_PROPERTY("RequisiteOverridable", "as", property_get_empty_strv, 0, SD_BUS_VTABLE_HIDDEN),
1039 SD_BUS_PROPERTY("RequiredByOverridable", "as", property_get_empty_strv, 0, SD_BUS_VTABLE_HIDDEN),
1040 SD_BUS_PROPERTY("RequisiteOfOverridable", "as", property_get_empty_strv, 0, SD_BUS_VTABLE_HIDDEN),
1041 /* Obsolete alias names */
1042 SD_BUS_PROPERTY("StartLimitInterval", "t", bus_property_get_usec, offsetof(Unit, start_ratelimit.interval), SD_BUS_VTABLE_PROPERTY_CONST|SD_BUS_VTABLE_HIDDEN),
1043 SD_BUS_PROPERTY("StartLimitIntervalSec", "t", bus_property_get_usec, offsetof(Unit, start_ratelimit.interval), SD_BUS_VTABLE_PROPERTY_CONST|SD_BUS_VTABLE_HIDDEN),
1044
1045 SD_BUS_VTABLE_END
1046 };
1047
1048 static int property_get_slice(
1049 sd_bus *bus,
1050 const char *path,
1051 const char *interface,
1052 const char *property,
1053 sd_bus_message *reply,
1054 void *userdata,
1055 sd_bus_error *error) {
1056
1057 Unit *u = userdata;
1058
1059 assert(bus);
1060 assert(reply);
1061 assert(u);
1062
1063 return sd_bus_message_append(reply, "s", unit_slice_name(u));
1064 }
1065
1066 static int property_get_current_memory(
1067 sd_bus *bus,
1068 const char *path,
1069 const char *interface,
1070 const char *property,
1071 sd_bus_message *reply,
1072 void *userdata,
1073 sd_bus_error *error) {
1074
1075 uint64_t sz = UINT64_MAX;
1076 Unit *u = userdata;
1077 int r;
1078
1079 assert(bus);
1080 assert(reply);
1081 assert(u);
1082
1083 r = unit_get_memory_current(u, &sz);
1084 if (r < 0 && r != -ENODATA)
1085 log_unit_warning_errno(u, r, "Failed to get memory.usage_in_bytes attribute: %m");
1086
1087 return sd_bus_message_append(reply, "t", sz);
1088 }
1089
1090 static int property_get_available_memory(
1091 sd_bus *bus,
1092 const char *path,
1093 const char *interface,
1094 const char *property,
1095 sd_bus_message *reply,
1096 void *userdata,
1097 sd_bus_error *error) {
1098
1099 uint64_t sz = UINT64_MAX;
1100 Unit *u = userdata;
1101 int r;
1102
1103 assert(bus);
1104 assert(reply);
1105 assert(u);
1106
1107 r = unit_get_memory_available(u, &sz);
1108 if (r < 0 && r != -ENODATA)
1109 log_unit_warning_errno(u, r, "Failed to get total available memory from cgroup: %m");
1110
1111 return sd_bus_message_append(reply, "t", sz);
1112 }
1113
1114 static int property_get_current_tasks(
1115 sd_bus *bus,
1116 const char *path,
1117 const char *interface,
1118 const char *property,
1119 sd_bus_message *reply,
1120 void *userdata,
1121 sd_bus_error *error) {
1122
1123 uint64_t cn = UINT64_MAX;
1124 Unit *u = userdata;
1125 int r;
1126
1127 assert(bus);
1128 assert(reply);
1129 assert(u);
1130
1131 r = unit_get_tasks_current(u, &cn);
1132 if (r < 0 && r != -ENODATA)
1133 log_unit_warning_errno(u, r, "Failed to get pids.current attribute: %m");
1134
1135 return sd_bus_message_append(reply, "t", cn);
1136 }
1137
1138 static int property_get_cpu_usage(
1139 sd_bus *bus,
1140 const char *path,
1141 const char *interface,
1142 const char *property,
1143 sd_bus_message *reply,
1144 void *userdata,
1145 sd_bus_error *error) {
1146
1147 nsec_t ns = NSEC_INFINITY;
1148 Unit *u = userdata;
1149 int r;
1150
1151 assert(bus);
1152 assert(reply);
1153 assert(u);
1154
1155 r = unit_get_cpu_usage(u, &ns);
1156 if (r < 0 && r != -ENODATA)
1157 log_unit_warning_errno(u, r, "Failed to get cpuacct.usage attribute: %m");
1158
1159 return sd_bus_message_append(reply, "t", ns);
1160 }
1161
1162 static int property_get_cpuset_cpus(
1163 sd_bus *bus,
1164 const char *path,
1165 const char *interface,
1166 const char *property,
1167 sd_bus_message *reply,
1168 void *userdata,
1169 sd_bus_error *error) {
1170
1171 Unit *u = userdata;
1172 _cleanup_(cpu_set_reset) CPUSet cpus = {};
1173 _cleanup_free_ uint8_t *array = NULL;
1174 size_t allocated;
1175
1176 assert(bus);
1177 assert(reply);
1178 assert(u);
1179
1180 (void) unit_get_cpuset(u, &cpus, "cpuset.cpus.effective");
1181 (void) cpu_set_to_dbus(&cpus, &array, &allocated);
1182 return sd_bus_message_append_array(reply, 'y', array, allocated);
1183 }
1184
1185 static int property_get_cpuset_mems(
1186 sd_bus *bus,
1187 const char *path,
1188 const char *interface,
1189 const char *property,
1190 sd_bus_message *reply,
1191 void *userdata,
1192 sd_bus_error *error) {
1193
1194 Unit *u = userdata;
1195 _cleanup_(cpu_set_reset) CPUSet mems = {};
1196 _cleanup_free_ uint8_t *array = NULL;
1197 size_t allocated;
1198
1199 assert(bus);
1200 assert(reply);
1201 assert(u);
1202
1203 (void) unit_get_cpuset(u, &mems, "cpuset.mems.effective");
1204 (void) cpu_set_to_dbus(&mems, &array, &allocated);
1205 return sd_bus_message_append_array(reply, 'y', array, allocated);
1206 }
1207
1208 static int property_get_cgroup(
1209 sd_bus *bus,
1210 const char *path,
1211 const char *interface,
1212 const char *property,
1213 sd_bus_message *reply,
1214 void *userdata,
1215 sd_bus_error *error) {
1216
1217 Unit *u = userdata;
1218 const char *t = NULL;
1219
1220 assert(bus);
1221 assert(reply);
1222 assert(u);
1223
1224 /* Three cases: a) u->cgroup_path is NULL, in which case the
1225 * unit has no control group, which we report as the empty
1226 * string. b) u->cgroup_path is the empty string, which
1227 * indicates the root cgroup, which we report as "/". c) all
1228 * other cases we report as-is. */
1229
1230 if (u->cgroup_path)
1231 t = empty_to_root(u->cgroup_path);
1232
1233 return sd_bus_message_append(reply, "s", t);
1234 }
1235
1236 static int append_process(sd_bus_message *reply, const char *p, pid_t pid, Set *pids) {
1237 _cleanup_free_ char *buf = NULL, *cmdline = NULL;
1238 int r;
1239
1240 assert(reply);
1241 assert(pid > 0);
1242
1243 r = set_put(pids, PID_TO_PTR(pid));
1244 if (IN_SET(r, 0, -EEXIST))
1245 return 0;
1246 if (r < 0)
1247 return r;
1248
1249 if (!p) {
1250 r = cg_pid_get_path(SYSTEMD_CGROUP_CONTROLLER, pid, &buf);
1251 if (r == -ESRCH)
1252 return 0;
1253 if (r < 0)
1254 return r;
1255
1256 p = buf;
1257 }
1258
1259 (void) get_process_cmdline(pid, SIZE_MAX,
1260 PROCESS_CMDLINE_COMM_FALLBACK | PROCESS_CMDLINE_QUOTE,
1261 &cmdline);
1262
1263 return sd_bus_message_append(reply,
1264 "(sus)",
1265 p,
1266 (uint32_t) pid,
1267 cmdline);
1268 }
1269
1270 static int append_cgroup(sd_bus_message *reply, const char *p, Set *pids) {
1271 _cleanup_closedir_ DIR *d = NULL;
1272 _cleanup_fclose_ FILE *f = NULL;
1273 int r;
1274
1275 assert(reply);
1276 assert(p);
1277
1278 r = cg_enumerate_processes(SYSTEMD_CGROUP_CONTROLLER, p, &f);
1279 if (r == -ENOENT)
1280 return 0;
1281 if (r < 0)
1282 return r;
1283
1284 for (;;) {
1285 pid_t pid;
1286
1287 /* libvirt / qemu uses threaded mode and cgroup.procs cannot be read at the lower levels.
1288 * From https://docs.kernel.org/admin-guide/cgroup-v2.html#threads,
1289 * “cgroup.procs” in a threaded domain cgroup contains the PIDs of all processes in
1290 * the subtree and is not readable in the subtree proper. */
1291 r = cg_read_pid(f, &pid);
1292 if (IN_SET(r, 0, -EOPNOTSUPP))
1293 break;
1294 if (r < 0)
1295 return r;
1296
1297 if (is_kernel_thread(pid) > 0)
1298 continue;
1299
1300 r = append_process(reply, p, pid, pids);
1301 if (r < 0)
1302 return r;
1303 }
1304
1305 r = cg_enumerate_subgroups(SYSTEMD_CGROUP_CONTROLLER, p, &d);
1306 if (r == -ENOENT)
1307 return 0;
1308 if (r < 0)
1309 return r;
1310
1311 for (;;) {
1312 _cleanup_free_ char *g = NULL, *j = NULL;
1313
1314 r = cg_read_subgroup(d, &g);
1315 if (r < 0)
1316 return r;
1317 if (r == 0)
1318 break;
1319
1320 j = path_join(empty_to_root(p), g);
1321 if (!j)
1322 return -ENOMEM;
1323
1324 r = append_cgroup(reply, j, pids);
1325 if (r < 0)
1326 return r;
1327 }
1328
1329 return 0;
1330 }
1331
1332 int bus_unit_method_get_processes(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1333 _cleanup_(sd_bus_message_unrefp) sd_bus_message *reply = NULL;
1334 _cleanup_set_free_ Set *pids = NULL;
1335 Unit *u = userdata;
1336 pid_t pid;
1337 int r;
1338
1339 assert(message);
1340
1341 r = mac_selinux_unit_access_check(u, message, "status", error);
1342 if (r < 0)
1343 return r;
1344
1345 pids = set_new(NULL);
1346 if (!pids)
1347 return -ENOMEM;
1348
1349 r = sd_bus_message_new_method_return(message, &reply);
1350 if (r < 0)
1351 return r;
1352
1353 r = sd_bus_message_open_container(reply, 'a', "(sus)");
1354 if (r < 0)
1355 return r;
1356
1357 if (u->cgroup_path) {
1358 r = append_cgroup(reply, u->cgroup_path, pids);
1359 if (r < 0)
1360 return r;
1361 }
1362
1363 /* The main and control pids might live outside of the cgroup, hence fetch them separately */
1364 pid = unit_main_pid(u);
1365 if (pid > 0) {
1366 r = append_process(reply, NULL, pid, pids);
1367 if (r < 0)
1368 return r;
1369 }
1370
1371 pid = unit_control_pid(u);
1372 if (pid > 0) {
1373 r = append_process(reply, NULL, pid, pids);
1374 if (r < 0)
1375 return r;
1376 }
1377
1378 r = sd_bus_message_close_container(reply);
1379 if (r < 0)
1380 return r;
1381
1382 return sd_bus_send(NULL, reply, NULL);
1383 }
1384
1385 static int property_get_ip_counter(
1386 sd_bus *bus,
1387 const char *path,
1388 const char *interface,
1389 const char *property,
1390 sd_bus_message *reply,
1391 void *userdata,
1392 sd_bus_error *error) {
1393
1394 static const char *const table[_CGROUP_IP_ACCOUNTING_METRIC_MAX] = {
1395 [CGROUP_IP_INGRESS_BYTES] = "IPIngressBytes",
1396 [CGROUP_IP_EGRESS_BYTES] = "IPEgressBytes",
1397 [CGROUP_IP_INGRESS_PACKETS] = "IPIngressPackets",
1398 [CGROUP_IP_EGRESS_PACKETS] = "IPEgressPackets",
1399 };
1400
1401 uint64_t value = UINT64_MAX;
1402 Unit *u = userdata;
1403 ssize_t metric;
1404
1405 assert(bus);
1406 assert(reply);
1407 assert(property);
1408 assert(u);
1409
1410 assert_se((metric = string_table_lookup(table, ELEMENTSOF(table), property)) >= 0);
1411 (void) unit_get_ip_accounting(u, metric, &value);
1412 return sd_bus_message_append(reply, "t", value);
1413 }
1414
1415 static int property_get_io_counter(
1416 sd_bus *bus,
1417 const char *path,
1418 const char *interface,
1419 const char *property,
1420 sd_bus_message *reply,
1421 void *userdata,
1422 sd_bus_error *error) {
1423
1424 static const char *const table[_CGROUP_IO_ACCOUNTING_METRIC_MAX] = {
1425 [CGROUP_IO_READ_BYTES] = "IOReadBytes",
1426 [CGROUP_IO_WRITE_BYTES] = "IOWriteBytes",
1427 [CGROUP_IO_READ_OPERATIONS] = "IOReadOperations",
1428 [CGROUP_IO_WRITE_OPERATIONS] = "IOWriteOperations",
1429 };
1430
1431 uint64_t value = UINT64_MAX;
1432 Unit *u = userdata;
1433 ssize_t metric;
1434
1435 assert(bus);
1436 assert(reply);
1437 assert(property);
1438 assert(u);
1439
1440 assert_se((metric = string_table_lookup(table, ELEMENTSOF(table), property)) >= 0);
1441 (void) unit_get_io_accounting(u, metric, false, &value);
1442 return sd_bus_message_append(reply, "t", value);
1443 }
1444
1445 int bus_unit_method_attach_processes(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1446
1447 _cleanup_(sd_bus_creds_unrefp) sd_bus_creds *creds = NULL;
1448 _cleanup_set_free_ Set *pids = NULL;
1449 Unit *u = userdata;
1450 const char *path;
1451 int r;
1452
1453 assert(message);
1454
1455 /* This migrates the processes with the specified PIDs into the cgroup of this unit, optionally below a
1456 * specified cgroup path. Obviously this only works for units that actually maintain a cgroup
1457 * representation. If a process is already in the cgroup no operation is executed – in this case the specified
1458 * subcgroup path has no effect! */
1459
1460 r = mac_selinux_unit_access_check(u, message, "start", error);
1461 if (r < 0)
1462 return r;
1463
1464 r = sd_bus_message_read(message, "s", &path);
1465 if (r < 0)
1466 return r;
1467
1468 path = empty_to_null(path);
1469 if (path) {
1470 if (!path_is_absolute(path))
1471 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Control group path is not absolute: %s", path);
1472
1473 if (!path_is_normalized(path))
1474 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Control group path is not normalized: %s", path);
1475 }
1476
1477 if (!unit_cgroup_delegate(u))
1478 return sd_bus_error_set(error, SD_BUS_ERROR_INVALID_ARGS, "Process migration not available on non-delegated units.");
1479
1480 if (UNIT_IS_INACTIVE_OR_FAILED(unit_active_state(u)))
1481 return sd_bus_error_set(error, SD_BUS_ERROR_INVALID_ARGS, "Unit is not active, refusing.");
1482
1483 r = sd_bus_query_sender_creds(message, SD_BUS_CREDS_EUID|SD_BUS_CREDS_PID, &creds);
1484 if (r < 0)
1485 return r;
1486
1487 r = sd_bus_message_enter_container(message, 'a', "u");
1488 if (r < 0)
1489 return r;
1490 for (;;) {
1491 uid_t process_uid, sender_uid;
1492 uint32_t upid;
1493 pid_t pid;
1494
1495 r = sd_bus_message_read(message, "u", &upid);
1496 if (r < 0)
1497 return r;
1498 if (r == 0)
1499 break;
1500
1501 if (upid == 0) {
1502 r = sd_bus_creds_get_pid(creds, &pid);
1503 if (r < 0)
1504 return r;
1505 } else
1506 pid = (uid_t) upid;
1507
1508 /* Filter out duplicates */
1509 if (set_contains(pids, PID_TO_PTR(pid)))
1510 continue;
1511
1512 /* Check if this process is suitable for attaching to this unit */
1513 r = unit_pid_attachable(u, pid, error);
1514 if (r < 0)
1515 return r;
1516
1517 /* Let's query the sender's UID, so that we can make our security decisions */
1518 r = sd_bus_creds_get_euid(creds, &sender_uid);
1519 if (r < 0)
1520 return r;
1521
1522 /* Let's validate security: if the sender is root, then all is OK. If the sender is any other unit,
1523 * then the process' UID and the target unit's UID have to match the sender's UID */
1524 if (sender_uid != 0 && sender_uid != getuid()) {
1525 r = get_process_uid(pid, &process_uid);
1526 if (r < 0)
1527 return sd_bus_error_set_errnof(error, r, "Failed to retrieve process UID: %m");
1528
1529 if (process_uid != sender_uid)
1530 return sd_bus_error_setf(error, SD_BUS_ERROR_ACCESS_DENIED, "Process " PID_FMT " not owned by client's UID. Refusing.", pid);
1531 if (process_uid != u->ref_uid)
1532 return sd_bus_error_setf(error, SD_BUS_ERROR_ACCESS_DENIED, "Process " PID_FMT " not owned by target unit's UID. Refusing.", pid);
1533 }
1534
1535 if (!pids) {
1536 pids = set_new(NULL);
1537 if (!pids)
1538 return -ENOMEM;
1539 }
1540
1541 r = set_put(pids, PID_TO_PTR(pid));
1542 if (r < 0)
1543 return r;
1544 }
1545
1546 r = sd_bus_message_exit_container(message);
1547 if (r < 0)
1548 return r;
1549
1550 r = unit_attach_pids_to_cgroup(u, pids, path);
1551 if (r < 0)
1552 return sd_bus_error_set_errnof(error, r, "Failed to attach processes to control group: %m");
1553
1554 return sd_bus_reply_method_return(message, NULL);
1555 }
1556
1557 const sd_bus_vtable bus_unit_cgroup_vtable[] = {
1558 SD_BUS_VTABLE_START(0),
1559 SD_BUS_PROPERTY("Slice", "s", property_get_slice, 0, 0),
1560 SD_BUS_PROPERTY("ControlGroup", "s", property_get_cgroup, 0, 0),
1561 SD_BUS_PROPERTY("ControlGroupId", "t", NULL, offsetof(Unit, cgroup_id), 0),
1562 SD_BUS_PROPERTY("MemoryCurrent", "t", property_get_current_memory, 0, 0),
1563 SD_BUS_PROPERTY("MemoryAvailable", "t", property_get_available_memory, 0, 0),
1564 SD_BUS_PROPERTY("CPUUsageNSec", "t", property_get_cpu_usage, 0, 0),
1565 SD_BUS_PROPERTY("EffectiveCPUs", "ay", property_get_cpuset_cpus, 0, 0),
1566 SD_BUS_PROPERTY("EffectiveMemoryNodes", "ay", property_get_cpuset_mems, 0, 0),
1567 SD_BUS_PROPERTY("TasksCurrent", "t", property_get_current_tasks, 0, 0),
1568 SD_BUS_PROPERTY("IPIngressBytes", "t", property_get_ip_counter, 0, 0),
1569 SD_BUS_PROPERTY("IPIngressPackets", "t", property_get_ip_counter, 0, 0),
1570 SD_BUS_PROPERTY("IPEgressBytes", "t", property_get_ip_counter, 0, 0),
1571 SD_BUS_PROPERTY("IPEgressPackets", "t", property_get_ip_counter, 0, 0),
1572 SD_BUS_PROPERTY("IOReadBytes", "t", property_get_io_counter, 0, 0),
1573 SD_BUS_PROPERTY("IOReadOperations", "t", property_get_io_counter, 0, 0),
1574 SD_BUS_PROPERTY("IOWriteBytes", "t", property_get_io_counter, 0, 0),
1575 SD_BUS_PROPERTY("IOWriteOperations", "t", property_get_io_counter, 0, 0),
1576
1577 SD_BUS_METHOD_WITH_ARGS("GetProcesses",
1578 SD_BUS_NO_ARGS,
1579 SD_BUS_ARGS("a(sus)", processes),
1580 bus_unit_method_get_processes,
1581 SD_BUS_VTABLE_UNPRIVILEGED),
1582
1583 SD_BUS_METHOD_WITH_ARGS("AttachProcesses",
1584 SD_BUS_ARGS("s", subcgroup, "au", pids),
1585 SD_BUS_NO_RESULT,
1586 bus_unit_method_attach_processes,
1587 SD_BUS_VTABLE_UNPRIVILEGED),
1588
1589 SD_BUS_VTABLE_END
1590 };
1591
1592 static int send_new_signal(sd_bus *bus, void *userdata) {
1593 _cleanup_(sd_bus_message_unrefp) sd_bus_message *m = NULL;
1594 _cleanup_free_ char *p = NULL;
1595 Unit *u = userdata;
1596 int r;
1597
1598 assert(bus);
1599 assert(u);
1600
1601 p = unit_dbus_path(u);
1602 if (!p)
1603 return -ENOMEM;
1604
1605 r = sd_bus_message_new_signal(
1606 bus,
1607 &m,
1608 "/org/freedesktop/systemd1",
1609 "org.freedesktop.systemd1.Manager",
1610 "UnitNew");
1611 if (r < 0)
1612 return r;
1613
1614 r = sd_bus_message_append(m, "so", u->id, p);
1615 if (r < 0)
1616 return r;
1617
1618 return sd_bus_send(bus, m, NULL);
1619 }
1620
1621 static int send_changed_signal(sd_bus *bus, void *userdata) {
1622 _cleanup_free_ char *p = NULL;
1623 Unit *u = userdata;
1624 int r;
1625
1626 assert(bus);
1627 assert(u);
1628
1629 p = unit_dbus_path(u);
1630 if (!p)
1631 return -ENOMEM;
1632
1633 /* Send a properties changed signal. First for the specific
1634 * type, then for the generic unit. The clients may rely on
1635 * this order to get atomic behavior if needed. */
1636
1637 r = sd_bus_emit_properties_changed_strv(
1638 bus, p,
1639 unit_dbus_interface_from_type(u->type),
1640 NULL);
1641 if (r < 0)
1642 return r;
1643
1644 return sd_bus_emit_properties_changed_strv(
1645 bus, p,
1646 "org.freedesktop.systemd1.Unit",
1647 NULL);
1648 }
1649
1650 void bus_unit_send_change_signal(Unit *u) {
1651 int r;
1652 assert(u);
1653
1654 if (u->in_dbus_queue) {
1655 LIST_REMOVE(dbus_queue, u->manager->dbus_unit_queue, u);
1656 u->in_dbus_queue = false;
1657 }
1658
1659 if (!u->id)
1660 return;
1661
1662 r = bus_foreach_bus(u->manager, u->bus_track, u->sent_dbus_new_signal ? send_changed_signal : send_new_signal, u);
1663 if (r < 0)
1664 log_unit_debug_errno(u, r, "Failed to send unit change signal for %s: %m", u->id);
1665
1666 u->sent_dbus_new_signal = true;
1667 }
1668
1669 void bus_unit_send_pending_change_signal(Unit *u, bool including_new) {
1670
1671 /* Sends out any pending change signals, but only if they really are pending. This call is used when we are
1672 * about to change state in order to force out a PropertiesChanged signal beforehand if there was one pending
1673 * so that clients can follow the full state transition */
1674
1675 if (!u->in_dbus_queue) /* If not enqueued, don't bother */
1676 return;
1677
1678 if (!u->sent_dbus_new_signal && !including_new) /* If the unit was never announced, don't bother, it's fine if
1679 * the unit appears in the new state right-away (except if the
1680 * caller explicitly asked us to send it anyway) */
1681 return;
1682
1683 if (MANAGER_IS_RELOADING(u->manager)) /* Don't generate unnecessary PropertiesChanged signals for the same unit
1684 * when we are reloading. */
1685 return;
1686
1687 bus_unit_send_change_signal(u);
1688 }
1689
1690 int bus_unit_send_pending_freezer_message(Unit *u) {
1691 int r;
1692
1693 assert(u);
1694
1695 if (!u->pending_freezer_message)
1696 return 0;
1697
1698 r = sd_bus_send(NULL, u->pending_freezer_message, NULL);
1699 if (r < 0)
1700 log_warning_errno(r, "Failed to send queued message, ignoring: %m");
1701
1702 u->pending_freezer_message = sd_bus_message_unref(u->pending_freezer_message);
1703
1704 return 0;
1705 }
1706
1707 static int send_removed_signal(sd_bus *bus, void *userdata) {
1708 _cleanup_(sd_bus_message_unrefp) sd_bus_message *m = NULL;
1709 _cleanup_free_ char *p = NULL;
1710 Unit *u = userdata;
1711 int r;
1712
1713 assert(bus);
1714 assert(u);
1715
1716 p = unit_dbus_path(u);
1717 if (!p)
1718 return -ENOMEM;
1719
1720 r = sd_bus_message_new_signal(
1721 bus,
1722 &m,
1723 "/org/freedesktop/systemd1",
1724 "org.freedesktop.systemd1.Manager",
1725 "UnitRemoved");
1726 if (r < 0)
1727 return r;
1728
1729 r = sd_bus_message_append(m, "so", u->id, p);
1730 if (r < 0)
1731 return r;
1732
1733 return sd_bus_send(bus, m, NULL);
1734 }
1735
1736 void bus_unit_send_removed_signal(Unit *u) {
1737 int r;
1738 assert(u);
1739
1740 if (!u->sent_dbus_new_signal || u->in_dbus_queue)
1741 bus_unit_send_change_signal(u);
1742
1743 if (!u->id)
1744 return;
1745
1746 r = bus_foreach_bus(u->manager, u->bus_track, send_removed_signal, u);
1747 if (r < 0)
1748 log_unit_debug_errno(u, r, "Failed to send unit remove signal for %s: %m", u->id);
1749 }
1750
1751 int bus_unit_queue_job_one(
1752 sd_bus_message *message,
1753 Unit *u,
1754 JobType type,
1755 JobMode mode,
1756 BusUnitQueueFlags flags,
1757 sd_bus_message *reply,
1758 sd_bus_error *error) {
1759
1760 _cleanup_set_free_ Set *affected = NULL;
1761 _cleanup_free_ char *job_path = NULL, *unit_path = NULL;
1762 Job *j, *a;
1763 int r;
1764
1765 if (FLAGS_SET(flags, BUS_UNIT_QUEUE_VERBOSE_REPLY)) {
1766 affected = set_new(NULL);
1767 if (!affected)
1768 return -ENOMEM;
1769 }
1770
1771 r = manager_add_job(u->manager, type, u, mode, affected, error, &j);
1772 if (r < 0)
1773 return r;
1774
1775 r = bus_job_track_sender(j, message);
1776 if (r < 0)
1777 return r;
1778
1779 /* Before we send the method reply, force out the announcement JobNew for this job */
1780 bus_job_send_pending_change_signal(j, true);
1781
1782 job_path = job_dbus_path(j);
1783 if (!job_path)
1784 return -ENOMEM;
1785
1786 /* The classic response is just a job object path */
1787 if (!FLAGS_SET(flags, BUS_UNIT_QUEUE_VERBOSE_REPLY))
1788 return sd_bus_message_append(reply, "o", job_path);
1789
1790 /* In verbose mode respond with the anchor job plus everything that has been affected */
1791
1792 unit_path = unit_dbus_path(j->unit);
1793 if (!unit_path)
1794 return -ENOMEM;
1795
1796 r = sd_bus_message_append(reply, "uosos",
1797 j->id, job_path,
1798 j->unit->id, unit_path,
1799 job_type_to_string(j->type));
1800 if (r < 0)
1801 return r;
1802
1803 r = sd_bus_message_open_container(reply, 'a', "(uosos)");
1804 if (r < 0)
1805 return r;
1806
1807 SET_FOREACH(a, affected) {
1808 if (a->id == j->id)
1809 continue;
1810
1811 /* Free paths from previous iteration */
1812 job_path = mfree(job_path);
1813 unit_path = mfree(unit_path);
1814
1815 job_path = job_dbus_path(a);
1816 if (!job_path)
1817 return -ENOMEM;
1818
1819 unit_path = unit_dbus_path(a->unit);
1820 if (!unit_path)
1821 return -ENOMEM;
1822
1823 r = sd_bus_message_append(reply, "(uosos)",
1824 a->id, job_path,
1825 a->unit->id, unit_path,
1826 job_type_to_string(a->type));
1827 if (r < 0)
1828 return r;
1829 }
1830
1831 return sd_bus_message_close_container(reply);
1832 }
1833
1834 int bus_unit_queue_job(
1835 sd_bus_message *message,
1836 Unit *u,
1837 JobType type,
1838 JobMode mode,
1839 BusUnitQueueFlags flags,
1840 sd_bus_error *error) {
1841
1842 _cleanup_(sd_bus_message_unrefp) sd_bus_message *reply = NULL;
1843 int r;
1844
1845 assert(message);
1846 assert(u);
1847 assert(type >= 0 && type < _JOB_TYPE_MAX);
1848 assert(mode >= 0 && mode < _JOB_MODE_MAX);
1849
1850 r = mac_selinux_unit_access_check(
1851 u, message,
1852 job_type_to_access_method(type),
1853 error);
1854 if (r < 0)
1855 return r;
1856
1857 if (FLAGS_SET(flags, BUS_UNIT_QUEUE_RELOAD_IF_POSSIBLE) && unit_can_reload(u)) {
1858 if (type == JOB_RESTART)
1859 type = JOB_RELOAD_OR_START;
1860 else if (type == JOB_TRY_RESTART)
1861 type = JOB_TRY_RELOAD;
1862 }
1863
1864 if (type == JOB_STOP &&
1865 IN_SET(u->load_state, UNIT_NOT_FOUND, UNIT_ERROR, UNIT_BAD_SETTING) &&
1866 unit_active_state(u) == UNIT_INACTIVE)
1867 return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_UNIT, "Unit %s not loaded.", u->id);
1868
1869 if ((type == JOB_START && u->refuse_manual_start) ||
1870 (type == JOB_STOP && u->refuse_manual_stop) ||
1871 (IN_SET(type, JOB_RESTART, JOB_TRY_RESTART) && (u->refuse_manual_start || u->refuse_manual_stop)) ||
1872 (type == JOB_RELOAD_OR_START && job_type_collapse(type, u) == JOB_START && u->refuse_manual_start))
1873 return sd_bus_error_setf(error, BUS_ERROR_ONLY_BY_DEPENDENCY, "Operation refused, unit %s may be requested by dependency only (it is configured to refuse manual start/stop).", u->id);
1874
1875 r = sd_bus_message_new_method_return(message, &reply);
1876 if (r < 0)
1877 return r;
1878
1879 r = bus_unit_queue_job_one(message, u, type, mode, flags, reply, error);
1880 if (r < 0)
1881 return r;
1882
1883 return sd_bus_send(NULL, reply, NULL);
1884 }
1885
1886 static int bus_unit_set_live_property(
1887 Unit *u,
1888 const char *name,
1889 sd_bus_message *message,
1890 UnitWriteFlags flags,
1891 sd_bus_error *error) {
1892
1893 int r;
1894
1895 assert(u);
1896 assert(name);
1897 assert(message);
1898
1899 /* Handles setting properties both "live" (i.e. at any time during runtime), and during creation (for
1900 * transient units that are being created). */
1901
1902 if (streq(name, "Description")) {
1903 const char *d;
1904
1905 r = sd_bus_message_read(message, "s", &d);
1906 if (r < 0)
1907 return r;
1908
1909 if (!UNIT_WRITE_FLAGS_NOOP(flags)) {
1910 r = unit_set_description(u, d);
1911 if (r < 0)
1912 return r;
1913
1914 unit_write_settingf(u, flags|UNIT_ESCAPE_SPECIFIERS, name, "Description=%s", d);
1915 }
1916
1917 return 1;
1918 }
1919
1920 /* A setting that only applies to active units. We don't actually write this to /run, this state is
1921 * managed internally. "+foo" sets flag foo, "-foo" unsets flag foo, just "foo" resets flags to
1922 * foo. The last type cannot be mixed with "+" or "-". */
1923
1924 if (streq(name, "Markers")) {
1925 unsigned settings = 0, mask = 0;
1926 bool some_plus_minus = false, some_absolute = false;
1927
1928 r = sd_bus_message_enter_container(message, 'a', "s");
1929 if (r < 0)
1930 return r;
1931
1932 for (;;) {
1933 const char *word;
1934 bool b;
1935
1936 r = sd_bus_message_read(message, "s", &word);
1937 if (r < 0)
1938 return r;
1939 if (r == 0)
1940 break;
1941
1942 if (IN_SET(word[0], '+', '-')) {
1943 b = word[0] == '+';
1944 word++;
1945 some_plus_minus = true;
1946 } else {
1947 b = true;
1948 some_absolute = true;
1949 }
1950
1951 UnitMarker m = unit_marker_from_string(word);
1952 if (m < 0)
1953 return sd_bus_error_setf(error, BUS_ERROR_BAD_UNIT_SETTING,
1954 "Unknown marker \"%s\".", word);
1955
1956 SET_FLAG(settings, 1u << m, b);
1957 SET_FLAG(mask, 1u << m, true);
1958 }
1959
1960 r = sd_bus_message_exit_container(message);
1961 if (r < 0)
1962 return r;
1963
1964 if (some_plus_minus && some_absolute)
1965 return sd_bus_error_set(error, BUS_ERROR_BAD_UNIT_SETTING, "Bad marker syntax.");
1966
1967 if (!UNIT_WRITE_FLAGS_NOOP(flags)) {
1968 if (some_absolute)
1969 u->markers = settings;
1970 else
1971 u->markers = settings | (u->markers & ~mask);
1972 }
1973
1974 return 1;
1975 }
1976
1977 return 0;
1978 }
1979
1980 static int bus_set_transient_emergency_action(
1981 Unit *u,
1982 const char *name,
1983 EmergencyAction *p,
1984 sd_bus_message *message,
1985 UnitWriteFlags flags,
1986 sd_bus_error *error) {
1987
1988 const char *s;
1989 EmergencyAction v;
1990 int r;
1991 bool system;
1992
1993 assert(p);
1994
1995 r = sd_bus_message_read(message, "s", &s);
1996 if (r < 0)
1997 return r;
1998
1999 system = MANAGER_IS_SYSTEM(u->manager);
2000 r = parse_emergency_action(s, system, &v);
2001 if (r < 0)
2002 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS,
2003 r == -EOPNOTSUPP ? "%s setting invalid for manager type: %s"
2004 : "Invalid %s setting: %s",
2005 name, s);
2006
2007 if (!UNIT_WRITE_FLAGS_NOOP(flags)) {
2008 *p = v;
2009 unit_write_settingf(u, flags, name,
2010 "%s=%s", name, s);
2011 }
2012
2013 return 1;
2014 }
2015
2016 static int bus_set_transient_exit_status(
2017 Unit *u,
2018 const char *name,
2019 int *p,
2020 sd_bus_message *message,
2021 UnitWriteFlags flags,
2022 sd_bus_error *error) {
2023
2024 int32_t k;
2025 int r;
2026
2027 assert(p);
2028
2029 r = sd_bus_message_read(message, "i", &k);
2030 if (r < 0)
2031 return r;
2032
2033 if (k > 255)
2034 return sd_bus_error_set(error, SD_BUS_ERROR_INVALID_ARGS, "Exit status must be in range 0…255 or negative.");
2035
2036 if (!UNIT_WRITE_FLAGS_NOOP(flags)) {
2037 *p = k < 0 ? -1 : k;
2038
2039 if (k < 0)
2040 unit_write_settingf(u, flags, name, "%s=", name);
2041 else
2042 unit_write_settingf(u, flags, name, "%s=%i", name, k);
2043 }
2044
2045 return 1;
2046 }
2047
2048 static BUS_DEFINE_SET_TRANSIENT_PARSE(collect_mode, CollectMode, collect_mode_from_string);
2049 static BUS_DEFINE_SET_TRANSIENT_PARSE(job_mode, JobMode, job_mode_from_string);
2050
2051 static int bus_set_transient_conditions(
2052 Unit *u,
2053 const char *name,
2054 Condition **list,
2055 bool is_condition,
2056 sd_bus_message *message,
2057 UnitWriteFlags flags,
2058 sd_bus_error *error) {
2059
2060 const char *type_name, *param;
2061 int trigger, negate, r;
2062 bool empty = true;
2063
2064 assert(list);
2065
2066 r = sd_bus_message_enter_container(message, 'a', "(sbbs)");
2067 if (r < 0)
2068 return r;
2069
2070 while ((r = sd_bus_message_read(message, "(sbbs)", &type_name, &trigger, &negate, &param)) > 0) {
2071 ConditionType t;
2072
2073 t = is_condition ? condition_type_from_string(type_name) : assert_type_from_string(type_name);
2074 if (t < 0)
2075 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Invalid condition type: %s", type_name);
2076
2077 if (isempty(param))
2078 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Condition parameter in %s is empty", type_name);
2079
2080 if (condition_takes_path(t) && !path_is_absolute(param))
2081 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Path in condition %s is not absolute: %s", type_name, param);
2082
2083 if (!UNIT_WRITE_FLAGS_NOOP(flags)) {
2084 Condition *c;
2085
2086 c = condition_new(t, param, trigger, negate);
2087 if (!c)
2088 return -ENOMEM;
2089
2090 LIST_PREPEND(conditions, *list, c);
2091
2092 unit_write_settingf(u, flags|UNIT_ESCAPE_SPECIFIERS, name,
2093 "%s=%s%s%s", type_name,
2094 trigger ? "|" : "", negate ? "!" : "", param);
2095 }
2096
2097 empty = false;
2098 }
2099 if (r < 0)
2100 return r;
2101
2102 r = sd_bus_message_exit_container(message);
2103 if (r < 0)
2104 return r;
2105
2106 if (!UNIT_WRITE_FLAGS_NOOP(flags) && empty) {
2107 *list = condition_free_list(*list);
2108 unit_write_settingf(u, flags, name, "%sNull=", is_condition ? "Condition" : "Assert");
2109 }
2110
2111 return 1;
2112 }
2113
2114 static int bus_unit_set_transient_property(
2115 Unit *u,
2116 const char *name,
2117 sd_bus_message *message,
2118 UnitWriteFlags flags,
2119 sd_bus_error *error) {
2120
2121 UnitDependency d;
2122 int r;
2123
2124 assert(u);
2125 assert(name);
2126 assert(message);
2127
2128 /* Handles settings when transient units are created. This settings cannot be altered anymore after
2129 * the unit has been created. */
2130
2131 if (streq(name, "SourcePath"))
2132 return bus_set_transient_path(u, name, &u->source_path, message, flags, error);
2133
2134 if (streq(name, "StopWhenUnneeded"))
2135 return bus_set_transient_bool(u, name, &u->stop_when_unneeded, message, flags, error);
2136
2137 if (streq(name, "RefuseManualStart"))
2138 return bus_set_transient_bool(u, name, &u->refuse_manual_start, message, flags, error);
2139
2140 if (streq(name, "RefuseManualStop"))
2141 return bus_set_transient_bool(u, name, &u->refuse_manual_stop, message, flags, error);
2142
2143 if (streq(name, "AllowIsolate"))
2144 return bus_set_transient_bool(u, name, &u->allow_isolate, message, flags, error);
2145
2146 if (streq(name, "DefaultDependencies"))
2147 return bus_set_transient_bool(u, name, &u->default_dependencies, message, flags, error);
2148
2149 if (streq(name, "OnSuccessJobMode"))
2150 return bus_set_transient_job_mode(u, name, &u->on_success_job_mode, message, flags, error);
2151
2152 if (streq(name, "OnFailureJobMode"))
2153 return bus_set_transient_job_mode(u, name, &u->on_failure_job_mode, message, flags, error);
2154
2155 if (streq(name, "IgnoreOnIsolate"))
2156 return bus_set_transient_bool(u, name, &u->ignore_on_isolate, message, flags, error);
2157
2158 if (streq(name, "JobTimeoutUSec")) {
2159 r = bus_set_transient_usec_fix_0(u, name, &u->job_timeout, message, flags, error);
2160 if (r >= 0 && !UNIT_WRITE_FLAGS_NOOP(flags) && !u->job_running_timeout_set)
2161 u->job_running_timeout = u->job_timeout;
2162 }
2163
2164 if (streq(name, "JobRunningTimeoutUSec")) {
2165 r = bus_set_transient_usec_fix_0(u, name, &u->job_running_timeout, message, flags, error);
2166 if (r >= 0 && !UNIT_WRITE_FLAGS_NOOP(flags))
2167 u->job_running_timeout_set = true;
2168
2169 return r;
2170 }
2171
2172 if (streq(name, "JobTimeoutAction"))
2173 return bus_set_transient_emergency_action(u, name, &u->job_timeout_action, message, flags, error);
2174
2175 if (streq(name, "JobTimeoutRebootArgument"))
2176 return bus_set_transient_string(u, name, &u->job_timeout_reboot_arg, message, flags, error);
2177
2178 if (streq(name, "StartLimitIntervalUSec"))
2179 return bus_set_transient_usec(u, name, &u->start_ratelimit.interval, message, flags, error);
2180
2181 if (streq(name, "StartLimitBurst"))
2182 return bus_set_transient_unsigned(u, name, &u->start_ratelimit.burst, message, flags, error);
2183
2184 if (streq(name, "StartLimitAction"))
2185 return bus_set_transient_emergency_action(u, name, &u->start_limit_action, message, flags, error);
2186
2187 if (streq(name, "FailureAction"))
2188 return bus_set_transient_emergency_action(u, name, &u->failure_action, message, flags, error);
2189
2190 if (streq(name, "SuccessAction"))
2191 return bus_set_transient_emergency_action(u, name, &u->success_action, message, flags, error);
2192
2193 if (streq(name, "FailureActionExitStatus"))
2194 return bus_set_transient_exit_status(u, name, &u->failure_action_exit_status, message, flags, error);
2195
2196 if (streq(name, "SuccessActionExitStatus"))
2197 return bus_set_transient_exit_status(u, name, &u->success_action_exit_status, message, flags, error);
2198
2199 if (streq(name, "RebootArgument"))
2200 return bus_set_transient_string(u, name, &u->reboot_arg, message, flags, error);
2201
2202 if (streq(name, "CollectMode"))
2203 return bus_set_transient_collect_mode(u, name, &u->collect_mode, message, flags, error);
2204
2205 if (streq(name, "Conditions"))
2206 return bus_set_transient_conditions(u, name, &u->conditions, true, message, flags, error);
2207
2208 if (streq(name, "Asserts"))
2209 return bus_set_transient_conditions(u, name, &u->asserts, false, message, flags, error);
2210
2211 if (streq(name, "Documentation")) {
2212 _cleanup_strv_free_ char **l = NULL;
2213
2214 r = sd_bus_message_read_strv(message, &l);
2215 if (r < 0)
2216 return r;
2217
2218 STRV_FOREACH(p, l)
2219 if (!documentation_url_is_valid(*p))
2220 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Invalid URL in %s: %s", name, *p);
2221
2222 if (!UNIT_WRITE_FLAGS_NOOP(flags)) {
2223 if (strv_isempty(l)) {
2224 u->documentation = strv_free(u->documentation);
2225 unit_write_settingf(u, flags, name, "%s=", name);
2226 } else {
2227 strv_extend_strv(&u->documentation, l, false);
2228
2229 STRV_FOREACH(p, l)
2230 unit_write_settingf(u, flags, name, "%s=%s", name, *p);
2231 }
2232 }
2233
2234 return 1;
2235
2236 } else if (streq(name, "Slice")) {
2237 Unit *slice;
2238 const char *s;
2239
2240 if (!UNIT_HAS_CGROUP_CONTEXT(u))
2241 return sd_bus_error_set(error, SD_BUS_ERROR_INVALID_ARGS, "The slice property is only available for units with control groups.");
2242 if (u->type == UNIT_SLICE)
2243 return sd_bus_error_set(error, SD_BUS_ERROR_INVALID_ARGS, "Slice may not be set for slice units.");
2244 if (unit_has_name(u, SPECIAL_INIT_SCOPE))
2245 return sd_bus_error_set(error, SD_BUS_ERROR_INVALID_ARGS, "Cannot set slice for init.scope");
2246
2247 r = sd_bus_message_read(message, "s", &s);
2248 if (r < 0)
2249 return r;
2250
2251 if (!unit_name_is_valid(s, UNIT_NAME_PLAIN))
2252 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Invalid unit name '%s'", s);
2253
2254 /* Note that we do not dispatch the load queue here yet, as we don't want our own transient unit to be
2255 * loaded while we are still setting it up. Or in other words, we use manager_load_unit_prepare()
2256 * instead of manager_load_unit() on purpose, here. */
2257 r = manager_load_unit_prepare(u->manager, s, NULL, error, &slice);
2258 if (r < 0)
2259 return r;
2260
2261 if (slice->type != UNIT_SLICE)
2262 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Unit name '%s' is not a slice", s);
2263
2264 if (!UNIT_WRITE_FLAGS_NOOP(flags)) {
2265 r = unit_set_slice(u, slice);
2266 if (r < 0)
2267 return r;
2268
2269 unit_write_settingf(u, flags|UNIT_PRIVATE, name, "Slice=%s", s);
2270 }
2271
2272 return 1;
2273
2274 } else if (streq(name, "RequiresMountsFor")) {
2275 _cleanup_strv_free_ char **l = NULL;
2276
2277 r = sd_bus_message_read_strv(message, &l);
2278 if (r < 0)
2279 return r;
2280
2281 STRV_FOREACH(p, l) {
2282 path_simplify(*p);
2283
2284 if (!path_is_absolute(*p))
2285 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Path specified in %s is not absolute: %s", name, *p);
2286
2287 if (!path_is_valid(*p))
2288 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Path specified in %s has invalid length: %s", name, *p);
2289
2290 if (!path_is_normalized(*p))
2291 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Path specified in %s is not normalized: %s", name, *p);
2292
2293 if (!UNIT_WRITE_FLAGS_NOOP(flags)) {
2294 r = unit_require_mounts_for(u, *p, UNIT_DEPENDENCY_FILE);
2295 if (r < 0)
2296 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Failed to add required mount \"%s\": %m", *p);
2297
2298 unit_write_settingf(u, flags, name, "%s=%s", name, *p);
2299 }
2300 }
2301
2302 return 1;
2303 }
2304
2305 if (streq(name, "RequiresOverridable"))
2306 d = UNIT_REQUIRES; /* redirect for obsolete unit dependency type */
2307 else if (streq(name, "RequisiteOverridable"))
2308 d = UNIT_REQUISITE; /* same here */
2309 else
2310 d = unit_dependency_from_string(name);
2311
2312 if (d >= 0) {
2313 const char *other;
2314
2315 if (!IN_SET(d,
2316 UNIT_REQUIRES,
2317 UNIT_REQUISITE,
2318 UNIT_WANTS,
2319 UNIT_BINDS_TO,
2320 UNIT_PART_OF,
2321 UNIT_UPHOLDS,
2322 UNIT_CONFLICTS,
2323 UNIT_BEFORE,
2324 UNIT_AFTER,
2325 UNIT_ON_SUCCESS,
2326 UNIT_ON_FAILURE,
2327 UNIT_PROPAGATES_RELOAD_TO,
2328 UNIT_RELOAD_PROPAGATED_FROM,
2329 UNIT_PROPAGATES_STOP_TO,
2330 UNIT_STOP_PROPAGATED_FROM,
2331 UNIT_JOINS_NAMESPACE_OF))
2332 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Dependency type %s may not be created transiently.", unit_dependency_to_string(d));
2333
2334 r = sd_bus_message_enter_container(message, 'a', "s");
2335 if (r < 0)
2336 return r;
2337
2338 while ((r = sd_bus_message_read(message, "s", &other)) > 0) {
2339 if (!unit_name_is_valid(other, UNIT_NAME_PLAIN|UNIT_NAME_INSTANCE))
2340 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Invalid unit name %s", other);
2341
2342 if (!UNIT_WRITE_FLAGS_NOOP(flags)) {
2343 _cleanup_free_ char *label = NULL;
2344
2345 r = unit_add_dependency_by_name(u, d, other, true, UNIT_DEPENDENCY_FILE);
2346 if (r < 0)
2347 return r;
2348
2349 label = strjoin(name, "-", other);
2350 if (!label)
2351 return -ENOMEM;
2352
2353 unit_write_settingf(u, flags, label, "%s=%s", unit_dependency_to_string(d), other);
2354 }
2355
2356 }
2357 if (r < 0)
2358 return r;
2359
2360 r = sd_bus_message_exit_container(message);
2361 if (r < 0)
2362 return r;
2363
2364 return 1;
2365
2366 } else if (streq(name, "AddRef")) {
2367
2368 int b;
2369
2370 /* Why is this called "AddRef" rather than just "Ref", or "Reference"? There's already a "Ref()" method
2371 * on the Unit interface, and it's probably not a good idea to expose a property and a method on the
2372 * same interface (well, strictly speaking AddRef isn't exposed as full property, we just read it for
2373 * transient units, but still). And "References" and "ReferencedBy" is already used as unit reference
2374 * dependency type, hence let's not confuse things with that.
2375 *
2376 * Note that we don't actually add the reference to the bus track. We do that only after the setup of
2377 * the transient unit is complete, so that setting this property multiple times in the same transient
2378 * unit creation call doesn't count as individual references. */
2379
2380 r = sd_bus_message_read(message, "b", &b);
2381 if (r < 0)
2382 return r;
2383
2384 if (!UNIT_WRITE_FLAGS_NOOP(flags))
2385 u->bus_track_add = b;
2386
2387 return 1;
2388 }
2389
2390 return 0;
2391 }
2392
2393 int bus_unit_set_properties(
2394 Unit *u,
2395 sd_bus_message *message,
2396 UnitWriteFlags flags,
2397 bool commit,
2398 sd_bus_error *error) {
2399
2400 bool for_real = false;
2401 unsigned n = 0;
2402 int r;
2403
2404 assert(u);
2405 assert(message);
2406
2407 /* We iterate through the array twice. First run we just check
2408 * if all passed data is valid, second run actually applies
2409 * it. This is to implement transaction-like behaviour without
2410 * actually providing full transactions. */
2411
2412 r = sd_bus_message_enter_container(message, 'a', "(sv)");
2413 if (r < 0)
2414 return r;
2415
2416 for (;;) {
2417 const char *name;
2418 UnitWriteFlags f;
2419
2420 r = sd_bus_message_enter_container(message, 'r', "sv");
2421 if (r < 0)
2422 return r;
2423 if (r == 0) {
2424 if (for_real || UNIT_WRITE_FLAGS_NOOP(flags))
2425 break;
2426
2427 /* Reached EOF. Let's try again, and this time for realz... */
2428 r = sd_bus_message_rewind(message, false);
2429 if (r < 0)
2430 return r;
2431
2432 for_real = true;
2433 continue;
2434 }
2435
2436 r = sd_bus_message_read(message, "s", &name);
2437 if (r < 0)
2438 return r;
2439
2440 if (!UNIT_VTABLE(u)->bus_set_property)
2441 return sd_bus_error_setf(error, SD_BUS_ERROR_PROPERTY_READ_ONLY,
2442 "Objects of this type do not support setting properties.");
2443
2444 r = sd_bus_message_enter_container(message, 'v', NULL);
2445 if (r < 0)
2446 return r;
2447
2448 /* If not for real, then mask out the two target flags */
2449 f = for_real ? flags : (flags & ~(UNIT_RUNTIME|UNIT_PERSISTENT));
2450
2451 r = UNIT_VTABLE(u)->bus_set_property(u, name, message, f, error);
2452 if (r == 0 && u->transient && u->load_state == UNIT_STUB)
2453 r = bus_unit_set_transient_property(u, name, message, f, error);
2454 if (r == 0)
2455 r = bus_unit_set_live_property(u, name, message, f, error);
2456 if (r < 0)
2457 return r;
2458
2459 if (r == 0)
2460 return sd_bus_error_setf(error, SD_BUS_ERROR_PROPERTY_READ_ONLY,
2461 "Cannot set property %s, or unknown property.", name);
2462
2463 r = sd_bus_message_exit_container(message);
2464 if (r < 0)
2465 return r;
2466
2467 r = sd_bus_message_exit_container(message);
2468 if (r < 0)
2469 return r;
2470
2471 n += for_real;
2472 }
2473
2474 r = sd_bus_message_exit_container(message);
2475 if (r < 0)
2476 return r;
2477
2478 if (commit && n > 0 && UNIT_VTABLE(u)->bus_commit_properties)
2479 UNIT_VTABLE(u)->bus_commit_properties(u);
2480
2481 return n;
2482 }
2483
2484 int bus_unit_validate_load_state(Unit *u, sd_bus_error *error) {
2485 assert(u);
2486
2487 /* Generates a pretty error if a unit isn't properly loaded. */
2488
2489 switch (u->load_state) {
2490
2491 case UNIT_LOADED:
2492 return 0;
2493
2494 case UNIT_NOT_FOUND:
2495 return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_UNIT, "Unit %s not found.", u->id);
2496
2497 case UNIT_BAD_SETTING:
2498 return sd_bus_error_setf(error, BUS_ERROR_BAD_UNIT_SETTING, "Unit %s has a bad unit file setting.", u->id);
2499
2500 case UNIT_ERROR: /* Only show .load_error in UNIT_ERROR state */
2501 return sd_bus_error_set_errnof(error, u->load_error,
2502 "Unit %s failed to load properly, please adjust/correct and reload service manager: %m", u->id);
2503
2504 case UNIT_MASKED:
2505 return sd_bus_error_setf(error, BUS_ERROR_UNIT_MASKED, "Unit %s is masked.", u->id);
2506
2507 case UNIT_STUB:
2508 case UNIT_MERGED:
2509 default:
2510 return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_UNIT, "Unexpected load state of unit %s", u->id);
2511 }
2512 }
2513
2514 static int bus_unit_track_handler(sd_bus_track *t, void *userdata) {
2515 Unit *u = userdata;
2516
2517 assert(t);
2518 assert(u);
2519
2520 u->bus_track = sd_bus_track_unref(u->bus_track); /* make sure we aren't called again */
2521
2522 /* If the client that tracks us disappeared, then there's reason to believe that the cgroup is empty now too,
2523 * let's see */
2524 unit_add_to_cgroup_empty_queue(u);
2525
2526 /* Also add the unit to the GC queue, after all if the client left it might be time to GC this unit */
2527 unit_add_to_gc_queue(u);
2528
2529 return 0;
2530 }
2531
2532 static int bus_unit_allocate_bus_track(Unit *u) {
2533 int r;
2534
2535 assert(u);
2536
2537 if (u->bus_track)
2538 return 0;
2539
2540 r = sd_bus_track_new(u->manager->api_bus, &u->bus_track, bus_unit_track_handler, u);
2541 if (r < 0)
2542 return r;
2543
2544 r = sd_bus_track_set_recursive(u->bus_track, true);
2545 if (r < 0) {
2546 u->bus_track = sd_bus_track_unref(u->bus_track);
2547 return r;
2548 }
2549
2550 return 0;
2551 }
2552
2553 int bus_unit_track_add_name(Unit *u, const char *name) {
2554 int r;
2555
2556 assert(u);
2557
2558 r = bus_unit_allocate_bus_track(u);
2559 if (r < 0)
2560 return r;
2561
2562 return sd_bus_track_add_name(u->bus_track, name);
2563 }
2564
2565 int bus_unit_track_add_sender(Unit *u, sd_bus_message *m) {
2566 int r;
2567
2568 assert(u);
2569
2570 r = bus_unit_allocate_bus_track(u);
2571 if (r < 0)
2572 return r;
2573
2574 return sd_bus_track_add_sender(u->bus_track, m);
2575 }
2576
2577 int bus_unit_track_remove_sender(Unit *u, sd_bus_message *m) {
2578 assert(u);
2579
2580 /* If we haven't allocated the bus track object yet, then there's definitely no reference taken yet,
2581 * return an error */
2582 if (!u->bus_track)
2583 return -EUNATCH;
2584
2585 return sd_bus_track_remove_sender(u->bus_track, m);
2586 }
Unnamed repository; edit this file 'description' to name the repository.