1 /* SPDX-License-Identifier: LGPL-2.1+ */
3 This file is part of systemd.
5 Copyright 2013 Lennart Poettering
14 #include <sys/ioctl.h>
15 #include <sys/resource.h>
16 #include <sys/socket.h>
19 #include "sd-bus-protocol.h"
21 #include "sd-daemon.h"
25 #include "alloc-util.h"
26 #include "bus-internal.h"
27 #include "bus-label.h"
28 #include "bus-message.h"
31 #include "cgroup-util.h"
36 #include "mount-util.h"
38 #include "parse-util.h"
39 #include "proc-cmdline.h"
40 #include "rlimit-util.h"
41 #include "stdio-util.h"
43 #include "user-util.h"
45 static int name_owner_change_callback(sd_bus_message
*m
, void *userdata
, sd_bus_error
*ret_error
) {
46 sd_event
*e
= userdata
;
51 sd_bus_close(sd_bus_message_get_bus(m
));
57 int bus_async_unregister_and_exit(sd_event
*e
, sd_bus
*bus
, const char *name
) {
66 /* We unregister the name here and then wait for the
67 * NameOwnerChanged signal for this event to arrive before we
68 * quit. We do this in order to make sure that any queued
69 * requests are still processed before we really exit. */
71 r
= sd_bus_get_unique_name(bus
, &unique
);
76 "sender='org.freedesktop.DBus',"
78 "interface='org.freedesktop.DBus',"
79 "member='NameOwnerChanged',"
80 "path='/org/freedesktop/DBus',"
82 "arg1='", unique
, "',",
85 r
= sd_bus_add_match_async(bus
, NULL
, match
, name_owner_change_callback
, NULL
, e
);
89 r
= sd_bus_release_name_async(bus
, NULL
, name
, NULL
, NULL
);
96 int bus_event_loop_with_idle(
101 check_idle_t check_idle
,
103 bool exiting
= false;
113 r
= sd_event_get_state(e
);
116 if (r
== SD_EVENT_FINISHED
)
120 idle
= check_idle(userdata
);
124 r
= sd_event_run(e
, exiting
|| !idle
? (uint64_t) -1 : timeout
);
128 if (r
== 0 && !exiting
&& idle
) {
130 r
= sd_bus_try_close(bus
);
134 /* Fallback for dbus1 connections: we
135 * unregister the name and wait for the
136 * response to come through for it */
137 if (r
== -EOPNOTSUPP
) {
139 /* Inform the service manager that we
140 * are going down, so that it will
141 * queue all further start requests,
142 * instead of assuming we are already
144 sd_notify(false, "STOPPING=1");
146 r
= bus_async_unregister_and_exit(e
, bus
, name
);
162 r
= sd_event_get_exit_code(e
, &code
);
169 int bus_name_has_owner(sd_bus
*c
, const char *name
, sd_bus_error
*error
) {
170 _cleanup_(sd_bus_message_unrefp
) sd_bus_message
*rep
= NULL
;
171 int r
, has_owner
= 0;
176 r
= sd_bus_call_method(c
,
177 "org.freedesktop.DBus",
178 "/org/freedesktop/dbus",
179 "org.freedesktop.DBus",
188 r
= sd_bus_message_read_basic(rep
, 'b', &has_owner
);
190 return sd_bus_error_set_errno(error
, r
);
195 static int check_good_user(sd_bus_message
*m
, uid_t good_user
) {
196 _cleanup_(sd_bus_creds_unrefp
) sd_bus_creds
*creds
= NULL
;
202 if (good_user
== UID_INVALID
)
205 r
= sd_bus_query_sender_creds(m
, SD_BUS_CREDS_EUID
, &creds
);
209 /* Don't trust augmented credentials for authorization */
210 assert_return((sd_bus_creds_get_augmented_mask(creds
) & SD_BUS_CREDS_EUID
) == 0, -EPERM
);
212 r
= sd_bus_creds_get_euid(creds
, &sender_uid
);
216 return sender_uid
== good_user
;
220 sd_bus_message
*call
,
223 const char **details
,
233 /* Tests non-interactively! */
235 r
= check_good_user(call
, good_user
);
239 r
= sd_bus_query_sender_privilege(call
, capability
);
246 _cleanup_(sd_bus_message_unrefp
) sd_bus_message
*request
= NULL
;
247 _cleanup_(sd_bus_message_unrefp
) sd_bus_message
*reply
= NULL
;
248 int authorized
= false, challenge
= false;
249 const char *sender
, **k
, **v
;
251 sender
= sd_bus_message_get_sender(call
);
255 r
= sd_bus_message_new_method_call(
258 "org.freedesktop.PolicyKit1",
259 "/org/freedesktop/PolicyKit1/Authority",
260 "org.freedesktop.PolicyKit1.Authority",
261 "CheckAuthorization");
265 r
= sd_bus_message_append(
268 "system-bus-name", 1, "name", "s", sender
,
273 r
= sd_bus_message_open_container(request
, 'a', "{ss}");
277 STRV_FOREACH_PAIR(k
, v
, details
) {
278 r
= sd_bus_message_append(request
, "{ss}", *k
, *v
);
283 r
= sd_bus_message_close_container(request
);
287 r
= sd_bus_message_append(request
, "us", 0, NULL
);
291 r
= sd_bus_call(call
->bus
, request
, 0, e
, &reply
);
293 /* Treat no PK available as access denied */
294 if (sd_bus_error_has_name(e
, SD_BUS_ERROR_SERVICE_UNKNOWN
)) {
295 sd_bus_error_free(e
);
302 r
= sd_bus_message_enter_container(reply
, 'r', "bba{ss}");
306 r
= sd_bus_message_read(reply
, "bb", &authorized
, &challenge
);
314 *_challenge
= challenge
;
325 typedef struct AsyncPolkitQuery
{
326 sd_bus_message
*request
, *reply
;
327 sd_bus_message_handler_t callback
;
333 static void async_polkit_query_free(AsyncPolkitQuery
*q
) {
338 sd_bus_slot_unref(q
->slot
);
340 if (q
->registry
&& q
->request
)
341 hashmap_remove(q
->registry
, q
->request
);
343 sd_bus_message_unref(q
->request
);
344 sd_bus_message_unref(q
->reply
);
349 static int async_polkit_callback(sd_bus_message
*reply
, void *userdata
, sd_bus_error
*error
) {
350 _cleanup_(sd_bus_error_free
) sd_bus_error error_buffer
= SD_BUS_ERROR_NULL
;
351 AsyncPolkitQuery
*q
= userdata
;
357 q
->slot
= sd_bus_slot_unref(q
->slot
);
358 q
->reply
= sd_bus_message_ref(reply
);
360 r
= sd_bus_message_rewind(q
->request
, true);
362 r
= sd_bus_reply_method_errno(q
->request
, r
, NULL
);
366 r
= q
->callback(q
->request
, q
->userdata
, &error_buffer
);
367 r
= bus_maybe_reply_error(q
->request
, r
, &error_buffer
);
370 async_polkit_query_free(q
);
377 int bus_verify_polkit_async(
378 sd_bus_message
*call
,
381 const char **details
,
385 sd_bus_error
*error
) {
388 _cleanup_(sd_bus_message_unrefp
) sd_bus_message
*pk
= NULL
;
390 const char *sender
, **k
, **v
;
391 sd_bus_message_handler_t callback
;
401 r
= check_good_user(call
, good_user
);
406 q
= hashmap_get(*registry
, call
);
408 int authorized
, challenge
;
410 /* This is the second invocation of this function, and
411 * there's already a response from polkit, let's
415 if (sd_bus_message_is_method_error(q
->reply
, NULL
)) {
416 const sd_bus_error
*e
;
418 /* Copy error from polkit reply */
419 e
= sd_bus_message_get_error(q
->reply
);
420 sd_bus_error_copy(error
, e
);
422 /* Treat no PK available as access denied */
423 if (sd_bus_error_has_name(e
, SD_BUS_ERROR_SERVICE_UNKNOWN
))
426 return -sd_bus_error_get_errno(e
);
429 r
= sd_bus_message_enter_container(q
->reply
, 'r', "bba{ss}");
431 r
= sd_bus_message_read(q
->reply
, "bb", &authorized
, &challenge
);
440 return sd_bus_error_set(error
, SD_BUS_ERROR_INTERACTIVE_AUTHORIZATION_REQUIRED
, "Interactive authentication required.");
446 r
= sd_bus_query_sender_privilege(call
, capability
);
453 if (sd_bus_get_current_message(call
->bus
) != call
)
456 callback
= sd_bus_get_current_handler(call
->bus
);
460 userdata
= sd_bus_get_current_userdata(call
->bus
);
462 sender
= sd_bus_message_get_sender(call
);
466 c
= sd_bus_message_get_allow_interactive_authorization(call
);
472 r
= hashmap_ensure_allocated(registry
, NULL
);
476 r
= sd_bus_message_new_method_call(
479 "org.freedesktop.PolicyKit1",
480 "/org/freedesktop/PolicyKit1/Authority",
481 "org.freedesktop.PolicyKit1.Authority",
482 "CheckAuthorization");
486 r
= sd_bus_message_append(
489 "system-bus-name", 1, "name", "s", sender
,
494 r
= sd_bus_message_open_container(pk
, 'a', "{ss}");
498 STRV_FOREACH_PAIR(k
, v
, details
) {
499 r
= sd_bus_message_append(pk
, "{ss}", *k
, *v
);
504 r
= sd_bus_message_close_container(pk
);
508 r
= sd_bus_message_append(pk
, "us", !!interactive
, NULL
);
512 q
= new0(AsyncPolkitQuery
, 1);
516 q
->request
= sd_bus_message_ref(call
);
517 q
->callback
= callback
;
518 q
->userdata
= userdata
;
520 r
= hashmap_put(*registry
, call
, q
);
522 async_polkit_query_free(q
);
526 q
->registry
= *registry
;
528 r
= sd_bus_call_async(call
->bus
, &q
->slot
, pk
, async_polkit_callback
, q
, 0);
530 async_polkit_query_free(q
);
540 void bus_verify_polkit_async_registry_free(Hashmap
*registry
) {
542 hashmap_free_with_destructor(registry
, async_polkit_query_free
);
546 int bus_check_peercred(sd_bus
*c
) {
552 fd
= sd_bus_get_fd(c
);
556 r
= getpeercred(fd
, &ucred
);
560 if (ucred
.uid
!= 0 && ucred
.uid
!= geteuid())
566 int bus_connect_system_systemd(sd_bus
**_bus
) {
567 _cleanup_(sd_bus_unrefp
) sd_bus
*bus
= NULL
;
573 return sd_bus_default_system(_bus
);
575 /* If we are root then let's talk directly to the system
576 * instance, instead of going via the bus */
578 r
= sd_bus_new(&bus
);
582 r
= sd_bus_set_address(bus
, "unix:path=/run/systemd/private");
586 r
= sd_bus_start(bus
);
588 return sd_bus_default_system(_bus
);
590 r
= bus_check_peercred(bus
);
594 *_bus
= TAKE_PTR(bus
);
599 int bus_connect_user_systemd(sd_bus
**_bus
) {
600 _cleanup_(sd_bus_unrefp
) sd_bus
*bus
= NULL
;
601 _cleanup_free_
char *ee
= NULL
;
607 e
= secure_getenv("XDG_RUNTIME_DIR");
609 return sd_bus_default_user(_bus
);
611 ee
= bus_address_escape(e
);
615 r
= sd_bus_new(&bus
);
619 bus
->address
= strjoin("unix:path=", ee
, "/systemd/private");
623 r
= sd_bus_start(bus
);
625 return sd_bus_default_user(_bus
);
627 r
= bus_check_peercred(bus
);
631 *_bus
= TAKE_PTR(bus
);
636 #define print_property(name, fmt, ...) \
639 printf(fmt "\n", __VA_ARGS__); \
641 printf("%s=" fmt "\n", name, __VA_ARGS__); \
644 int bus_print_property(const char *name
, sd_bus_message
*m
, bool value
, bool all
) {
646 const char *contents
;
652 r
= sd_bus_message_peek_type(m
, &type
, &contents
);
658 case SD_BUS_TYPE_STRING
: {
661 r
= sd_bus_message_read_basic(m
, type
, &s
);
665 if (all
|| !isempty(s
)) {
668 /* This property has a single value, so we need to take
669 * care not to print a new line, everything else is OK. */
670 good
= !strchr(s
, '\n');
671 print_property(name
, "%s", good
? s
: "[unprintable]");
677 case SD_BUS_TYPE_BOOLEAN
: {
680 r
= sd_bus_message_read_basic(m
, type
, &b
);
684 print_property(name
, "%s", yes_no(b
));
689 case SD_BUS_TYPE_UINT64
: {
692 r
= sd_bus_message_read_basic(m
, type
, &u
);
696 /* Yes, heuristics! But we can change this check
697 * should it turn out to not be sufficient */
699 if (endswith(name
, "Timestamp") || STR_IN_SET(name
, "NextElapseUSecRealtime", "LastTriggerUSec")) {
700 char timestamp
[FORMAT_TIMESTAMP_MAX
], *t
;
702 t
= format_timestamp(timestamp
, sizeof(timestamp
), u
);
704 print_property(name
, "%s", strempty(t
));
706 } else if (strstr(name
, "USec")) {
707 char timespan
[FORMAT_TIMESPAN_MAX
];
709 print_property(name
, "%s", format_timespan(timespan
, sizeof(timespan
), u
, 0));
710 } else if (streq(name
, "RestrictNamespaces")) {
711 _cleanup_free_
char *s
= NULL
;
714 if ((u
& NAMESPACE_FLAGS_ALL
) == 0)
716 else if ((u
& NAMESPACE_FLAGS_ALL
) == NAMESPACE_FLAGS_ALL
)
719 r
= namespace_flags_to_string(u
, &s
);
726 print_property(name
, "%s", result
);
728 } else if (streq(name
, "MountFlags")) {
731 result
= mount_propagation_flags_to_string(u
);
735 print_property(name
, "%s", result
);
737 } else if (STR_IN_SET(name
, "CapabilityBoundingSet", "AmbientCapabilities")) {
738 _cleanup_free_
char *s
= NULL
;
740 r
= capability_set_to_string_alloc(u
, &s
);
744 print_property(name
, "%s", s
);
746 } else if ((STR_IN_SET(name
, "CPUWeight", "StartupCPUWeight", "IOWeight", "StartupIOWeight") && u
== CGROUP_WEIGHT_INVALID
) ||
747 (STR_IN_SET(name
, "CPUShares", "StartupCPUShares") && u
== CGROUP_CPU_SHARES_INVALID
) ||
748 (STR_IN_SET(name
, "BlockIOWeight", "StartupBlockIOWeight") && u
== CGROUP_BLKIO_WEIGHT_INVALID
) ||
749 (STR_IN_SET(name
, "MemoryCurrent", "TasksCurrent") && u
== (uint64_t) -1) ||
750 (endswith(name
, "NSec") && u
== (uint64_t) -1))
752 print_property(name
, "%s", "[not set]");
754 else if ((STR_IN_SET(name
, "MemoryLow", "MemoryHigh", "MemoryMax", "MemorySwapMax", "MemoryLimit") && u
== CGROUP_LIMIT_MAX
) ||
755 (STR_IN_SET(name
, "TasksMax", "DefaultTasksMax") && u
== (uint64_t) -1) ||
756 (startswith(name
, "Limit") && u
== (uint64_t) -1) ||
757 (startswith(name
, "DefaultLimit") && u
== (uint64_t) -1))
759 print_property(name
, "%s", "infinity");
761 print_property(name
, "%"PRIu64
, u
);
766 case SD_BUS_TYPE_INT64
: {
769 r
= sd_bus_message_read_basic(m
, type
, &i
);
773 print_property(name
, "%"PRIi64
, i
);
778 case SD_BUS_TYPE_UINT32
: {
781 r
= sd_bus_message_read_basic(m
, type
, &u
);
785 if (strstr(name
, "UMask") || strstr(name
, "Mode"))
786 print_property(name
, "%04o", u
);
787 else if (streq(name
, "UID")) {
788 if (u
== UID_INVALID
)
789 print_property(name
, "%s", "[not set]");
791 print_property(name
, "%"PRIu32
, u
);
792 } else if (streq(name
, "GID")) {
793 if (u
== GID_INVALID
)
794 print_property(name
, "%s", "[not set]");
796 print_property(name
, "%"PRIu32
, u
);
798 print_property(name
, "%"PRIu32
, u
);
803 case SD_BUS_TYPE_INT32
: {
806 r
= sd_bus_message_read_basic(m
, type
, &i
);
810 print_property(name
, "%"PRIi32
, i
);
814 case SD_BUS_TYPE_DOUBLE
: {
817 r
= sd_bus_message_read_basic(m
, type
, &d
);
821 print_property(name
, "%g", d
);
825 case SD_BUS_TYPE_ARRAY
:
826 if (streq(contents
, "s")) {
830 r
= sd_bus_message_enter_container(m
, SD_BUS_TYPE_ARRAY
, contents
);
834 while ((r
= sd_bus_message_read_basic(m
, SD_BUS_TYPE_STRING
, &str
)) > 0) {
840 /* This property has multiple space-separated values, so
841 * neither spaces not newlines can be allowed in a value. */
842 good
= str
[strcspn(str
, " \n")] == '\0';
844 printf("%s%s", first
? "" : " ", good
? str
: "[unprintable]");
851 if (first
&& all
&& !value
)
856 r
= sd_bus_message_exit_container(m
);
862 } else if (streq(contents
, "y")) {
866 r
= sd_bus_message_read_array(m
, SD_BUS_TYPE_BYTE
, (const void**) &u
, &n
);
876 for (i
= 0; i
< n
; i
++)
877 printf("%02x", u
[i
]);
884 } else if (streq(contents
, "u")) {
888 r
= sd_bus_message_read_array(m
, SD_BUS_TYPE_UINT32
, (const void**) &u
, &n
);
898 for (i
= 0; i
< n
; i
++)
899 printf("%08x", u
[i
]);
913 int bus_message_print_all_properties(
915 bus_message_print_t func
,
919 Set
**found_properties
) {
925 r
= sd_bus_message_enter_container(m
, SD_BUS_TYPE_ARRAY
, "{sv}");
929 while ((r
= sd_bus_message_enter_container(m
, SD_BUS_TYPE_DICT_ENTRY
, "sv")) > 0) {
931 const char *contents
;
933 r
= sd_bus_message_read_basic(m
, SD_BUS_TYPE_STRING
, &name
);
937 if (found_properties
) {
938 r
= set_ensure_allocated(found_properties
, &string_hash_ops
);
942 r
= set_put(*found_properties
, name
);
943 if (r
< 0 && r
!= EEXIST
)
947 if (!filter
|| strv_find(filter
, name
)) {
948 r
= sd_bus_message_peek_type(m
, NULL
, &contents
);
952 r
= sd_bus_message_enter_container(m
, SD_BUS_TYPE_VARIANT
, contents
);
957 r
= func(name
, m
, value
, all
);
959 r
= bus_print_property(name
, m
, value
, all
);
964 printf("%s=[unprintable]\n", name
);
965 /* skip what we didn't read */
966 r
= sd_bus_message_skip(m
, contents
);
971 r
= sd_bus_message_exit_container(m
);
975 r
= sd_bus_message_skip(m
, "v");
980 r
= sd_bus_message_exit_container(m
);
987 r
= sd_bus_message_exit_container(m
);
994 int bus_print_all_properties(
998 bus_message_print_t func
,
1002 Set
**found_properties
) {
1004 _cleanup_(sd_bus_message_unrefp
) sd_bus_message
*reply
= NULL
;
1005 _cleanup_(sd_bus_error_free
) sd_bus_error error
= SD_BUS_ERROR_NULL
;
1011 r
= sd_bus_call_method(bus
,
1014 "org.freedesktop.DBus.Properties",
1022 return bus_message_print_all_properties(reply
, func
, filter
, value
, all
, found_properties
);
1025 int bus_map_id128(sd_bus
*bus
, const char *member
, sd_bus_message
*m
, sd_bus_error
*error
, void *userdata
) {
1026 sd_id128_t
*p
= userdata
;
1031 r
= sd_bus_message_read_array(m
, SD_BUS_TYPE_BYTE
, &v
, &n
);
1038 memcpy((*p
).bytes
, v
, n
);
1045 static int map_basic(sd_bus
*bus
, const char *member
, sd_bus_message
*m
, unsigned flags
, sd_bus_error
*error
, void *userdata
) {
1049 r
= sd_bus_message_peek_type(m
, &type
, NULL
);
1055 case SD_BUS_TYPE_STRING
: {
1056 const char **p
= userdata
;
1059 r
= sd_bus_message_read_basic(m
, type
, &s
);
1066 if (flags
& BUS_MAP_STRDUP
)
1067 return free_and_strdup((char **) userdata
, s
);
1073 case SD_BUS_TYPE_ARRAY
: {
1074 _cleanup_strv_free_
char **l
= NULL
;
1075 char ***p
= userdata
;
1077 r
= bus_message_read_strv_extend(m
, &l
);
1081 return strv_free_and_replace(*p
, l
);
1084 case SD_BUS_TYPE_BOOLEAN
: {
1087 r
= sd_bus_message_read_basic(m
, type
, &b
);
1091 if (flags
& BUS_MAP_BOOLEAN_AS_BOOL
)
1092 * (bool*) userdata
= !!b
;
1094 * (int*) userdata
= b
;
1099 case SD_BUS_TYPE_INT32
:
1100 case SD_BUS_TYPE_UINT32
: {
1101 uint32_t u
, *p
= userdata
;
1103 r
= sd_bus_message_read_basic(m
, type
, &u
);
1111 case SD_BUS_TYPE_INT64
:
1112 case SD_BUS_TYPE_UINT64
: {
1113 uint64_t t
, *p
= userdata
;
1115 r
= sd_bus_message_read_basic(m
, type
, &t
);
1123 case SD_BUS_TYPE_DOUBLE
: {
1124 double d
, *p
= userdata
;
1126 r
= sd_bus_message_read_basic(m
, type
, &d
);
1137 int bus_message_map_all_properties(
1139 const struct bus_properties_map
*map
,
1141 sd_bus_error
*error
,
1149 r
= sd_bus_message_enter_container(m
, SD_BUS_TYPE_ARRAY
, "{sv}");
1153 while ((r
= sd_bus_message_enter_container(m
, SD_BUS_TYPE_DICT_ENTRY
, "sv")) > 0) {
1154 const struct bus_properties_map
*prop
;
1156 const char *contents
;
1160 r
= sd_bus_message_read_basic(m
, SD_BUS_TYPE_STRING
, &member
);
1164 for (i
= 0, prop
= NULL
; map
[i
].member
; i
++)
1165 if (streq(map
[i
].member
, member
)) {
1171 r
= sd_bus_message_peek_type(m
, NULL
, &contents
);
1175 r
= sd_bus_message_enter_container(m
, SD_BUS_TYPE_VARIANT
, contents
);
1179 v
= (uint8_t *)userdata
+ prop
->offset
;
1181 r
= prop
->set(sd_bus_message_get_bus(m
), member
, m
, error
, v
);
1183 r
= map_basic(sd_bus_message_get_bus(m
), member
, m
, flags
, error
, v
);
1187 r
= sd_bus_message_exit_container(m
);
1191 r
= sd_bus_message_skip(m
, "v");
1196 r
= sd_bus_message_exit_container(m
);
1203 return sd_bus_message_exit_container(m
);
1206 int bus_message_map_properties_changed(
1208 const struct bus_properties_map
*map
,
1210 sd_bus_error
*error
,
1214 int r
, invalidated
, i
;
1219 r
= bus_message_map_all_properties(m
, map
, flags
, error
, userdata
);
1223 r
= sd_bus_message_enter_container(m
, SD_BUS_TYPE_ARRAY
, "s");
1228 while ((r
= sd_bus_message_read_basic(m
, SD_BUS_TYPE_STRING
, &member
)) > 0)
1229 for (i
= 0; map
[i
].member
; i
++)
1230 if (streq(map
[i
].member
, member
)) {
1237 r
= sd_bus_message_exit_container(m
);
1244 int bus_map_all_properties(
1246 const char *destination
,
1248 const struct bus_properties_map
*map
,
1250 sd_bus_error
*error
,
1251 sd_bus_message
**reply
,
1254 _cleanup_(sd_bus_message_unrefp
) sd_bus_message
*m
= NULL
;
1258 assert(destination
);
1261 assert(reply
|| (flags
& BUS_MAP_STRDUP
));
1263 r
= sd_bus_call_method(
1267 "org.freedesktop.DBus.Properties",
1275 r
= bus_message_map_all_properties(m
, map
, flags
, error
, userdata
);
1280 *reply
= sd_bus_message_ref(m
);
1285 int bus_connect_transport(BusTransport transport
, const char *host
, bool user
, sd_bus
**ret
) {
1286 _cleanup_(sd_bus_unrefp
) sd_bus
*bus
= NULL
;
1289 assert(transport
>= 0);
1290 assert(transport
< _BUS_TRANSPORT_MAX
);
1293 assert_return((transport
== BUS_TRANSPORT_LOCAL
) == !host
, -EINVAL
);
1294 assert_return(transport
== BUS_TRANSPORT_LOCAL
|| !user
, -EOPNOTSUPP
);
1296 switch (transport
) {
1298 case BUS_TRANSPORT_LOCAL
:
1300 r
= sd_bus_default_user(&bus
);
1302 if (sd_booted() <= 0) {
1303 /* Print a friendly message when the local system is actually not running systemd as PID 1. */
1304 log_error("System has not been booted with systemd as init system (PID 1). Can't operate.");
1308 r
= sd_bus_default_system(&bus
);
1312 case BUS_TRANSPORT_REMOTE
:
1313 r
= sd_bus_open_system_remote(&bus
, host
);
1316 case BUS_TRANSPORT_MACHINE
:
1317 r
= sd_bus_open_system_machine(&bus
, host
);
1321 assert_not_reached("Hmm, unknown transport type.");
1326 r
= sd_bus_set_exit_on_disconnect(bus
, true);
1330 *ret
= TAKE_PTR(bus
);
1335 int bus_connect_transport_systemd(BusTransport transport
, const char *host
, bool user
, sd_bus
**bus
) {
1338 assert(transport
>= 0);
1339 assert(transport
< _BUS_TRANSPORT_MAX
);
1342 assert_return((transport
== BUS_TRANSPORT_LOCAL
) == !host
, -EINVAL
);
1343 assert_return(transport
== BUS_TRANSPORT_LOCAL
|| !user
, -EOPNOTSUPP
);
1345 switch (transport
) {
1347 case BUS_TRANSPORT_LOCAL
:
1349 r
= bus_connect_user_systemd(bus
);
1351 if (sd_booted() <= 0) {
1352 /* Print a friendly message when the local system is actually not running systemd as PID 1. */
1353 log_error("System has not been booted with systemd as init system (PID 1). Can't operate.");
1357 r
= bus_connect_system_systemd(bus
);
1361 case BUS_TRANSPORT_REMOTE
:
1362 r
= sd_bus_open_system_remote(bus
, host
);
1365 case BUS_TRANSPORT_MACHINE
:
1366 r
= sd_bus_open_system_machine(bus
, host
);
1370 assert_not_reached("Hmm, unknown transport type.");
1376 int bus_property_get_bool(
1379 const char *interface
,
1380 const char *property
,
1381 sd_bus_message
*reply
,
1383 sd_bus_error
*error
) {
1385 int b
= *(bool*) userdata
;
1387 return sd_bus_message_append_basic(reply
, 'b', &b
);
1390 int bus_property_set_bool(
1393 const char *interface
,
1394 const char *property
,
1395 sd_bus_message
*value
,
1397 sd_bus_error
*error
) {
1401 r
= sd_bus_message_read(value
, "b", &b
);
1405 *(bool *) userdata
= !!b
;
1409 int bus_property_get_id128(
1412 const char *interface
,
1413 const char *property
,
1414 sd_bus_message
*reply
,
1416 sd_bus_error
*error
) {
1418 sd_id128_t
*id
= userdata
;
1420 if (sd_id128_is_null(*id
)) /* Add an empty array if the ID is zero */
1421 return sd_bus_message_append(reply
, "ay", 0);
1423 return sd_bus_message_append_array(reply
, 'y', id
->bytes
, 16);
1426 #if __SIZEOF_SIZE_T__ != 8
1427 int bus_property_get_size(
1430 const char *interface
,
1431 const char *property
,
1432 sd_bus_message
*reply
,
1434 sd_bus_error
*error
) {
1436 uint64_t sz
= *(size_t*) userdata
;
1438 return sd_bus_message_append_basic(reply
, 't', &sz
);
1442 #if __SIZEOF_LONG__ != 8
1443 int bus_property_get_long(
1446 const char *interface
,
1447 const char *property
,
1448 sd_bus_message
*reply
,
1450 sd_bus_error
*error
) {
1452 int64_t l
= *(long*) userdata
;
1454 return sd_bus_message_append_basic(reply
, 'x', &l
);
1457 int bus_property_get_ulong(
1460 const char *interface
,
1461 const char *property
,
1462 sd_bus_message
*reply
,
1464 sd_bus_error
*error
) {
1466 uint64_t ul
= *(unsigned long*) userdata
;
1468 return sd_bus_message_append_basic(reply
, 't', &ul
);
1472 int bus_log_parse_error(int r
) {
1473 return log_error_errno(r
, "Failed to parse bus message: %m");
1476 int bus_log_create_error(int r
) {
1477 return log_error_errno(r
, "Failed to create bus message: %m");
1481 * bus_path_encode_unique() - encode unique object path
1482 * @b: bus connection or NULL
1483 * @prefix: object path prefix
1484 * @sender_id: unique-name of client, or NULL
1485 * @external_id: external ID to be chosen by client, or NULL
1486 * @ret_path: storage for encoded object path pointer
1488 * Whenever we provide a bus API that allows clients to create and manage
1489 * server-side objects, we need to provide a unique name for these objects. If
1490 * we let the server choose the name, we suffer from a race condition: If a
1491 * client creates an object asynchronously, it cannot destroy that object until
1492 * it received the method reply. It cannot know the name of the new object,
1493 * thus, it cannot destroy it. Furthermore, it enforces a round-trip.
1495 * Therefore, many APIs allow the client to choose the unique name for newly
1496 * created objects. There're two problems to solve, though:
1497 * 1) Object names are usually defined via dbus object paths, which are
1498 * usually globally namespaced. Therefore, multiple clients must be able
1499 * to choose unique object names without interference.
1500 * 2) If multiple libraries share the same bus connection, they must be
1501 * able to choose unique object names without interference.
1502 * The first problem is solved easily by prefixing a name with the
1503 * unique-bus-name of a connection. The server side must enforce this and
1504 * reject any other name. The second problem is solved by providing unique
1505 * suffixes from within sd-bus.
1507 * This helper allows clients to create unique object-paths. It uses the
1508 * template '/prefix/sender_id/external_id' and returns the new path in
1509 * @ret_path (must be freed by the caller).
1510 * If @sender_id is NULL, the unique-name of @b is used. If @external_id is
1511 * NULL, this function allocates a unique suffix via @b (by requesting a new
1512 * cookie). If both @sender_id and @external_id are given, @b can be passed as
1515 * Returns: 0 on success, negative error code on failure.
1517 int bus_path_encode_unique(sd_bus
*b
, const char *prefix
, const char *sender_id
, const char *external_id
, char **ret_path
) {
1518 _cleanup_free_
char *sender_label
= NULL
, *external_label
= NULL
;
1519 char external_buf
[DECIMAL_STR_MAX(uint64_t)], *p
;
1522 assert_return(b
|| (sender_id
&& external_id
), -EINVAL
);
1523 assert_return(object_path_is_valid(prefix
), -EINVAL
);
1524 assert_return(ret_path
, -EINVAL
);
1527 r
= sd_bus_get_unique_name(b
, &sender_id
);
1533 xsprintf(external_buf
, "%"PRIu64
, ++b
->cookie
);
1534 external_id
= external_buf
;
1537 sender_label
= bus_label_escape(sender_id
);
1541 external_label
= bus_label_escape(external_id
);
1542 if (!external_label
)
1545 p
= strjoin(prefix
, "/", sender_label
, "/", external_label
);
1554 * bus_path_decode_unique() - decode unique object path
1555 * @path: object path to decode
1556 * @prefix: object path prefix
1557 * @ret_sender: output parameter for sender-id label
1558 * @ret_external: output parameter for external-id label
1560 * This does the reverse of bus_path_encode_unique() (see its description for
1561 * details). Both trailing labels, sender-id and external-id, are unescaped and
1562 * returned in the given output parameters (the caller must free them).
1564 * Note that this function returns 0 if the path does not match the template
1565 * (see bus_path_encode_unique()), 1 if it matched.
1567 * Returns: Negative error code on failure, 0 if the given object path does not
1568 * match the template (return parameters are set to NULL), 1 if it was
1569 * parsed successfully (return parameters contain allocated labels).
1571 int bus_path_decode_unique(const char *path
, const char *prefix
, char **ret_sender
, char **ret_external
) {
1573 char *sender
, *external
;
1575 assert(object_path_is_valid(path
));
1576 assert(object_path_is_valid(prefix
));
1578 assert(ret_external
);
1580 p
= object_path_startswith(path
, prefix
);
1583 *ret_external
= NULL
;
1590 *ret_external
= NULL
;
1594 sender
= bus_label_unescape_n(p
, q
- p
);
1595 external
= bus_label_unescape(q
+ 1);
1596 if (!sender
|| !external
) {
1602 *ret_sender
= sender
;
1603 *ret_external
= external
;
1607 int bus_property_get_rlimit(
1610 const char *interface
,
1611 const char *property
,
1612 sd_bus_message
*reply
,
1614 sd_bus_error
*error
) {
1616 const char *is_soft
;
1625 is_soft
= endswith(property
, "Soft");
1627 rl
= *(struct rlimit
**) userdata
;
1629 x
= is_soft
? rl
->rlim_cur
: rl
->rlim_max
;
1631 struct rlimit buf
= {};
1635 /* Chop off "Soft" suffix */
1636 s
= is_soft
? strndupa(property
, is_soft
- property
) : property
;
1638 /* Skip over any prefix, such as "Default" */
1639 assert_se(p
= strstr(s
, "Limit"));
1641 z
= rlimit_from_string(p
+ 5);
1644 (void) getrlimit(z
, &buf
);
1645 x
= is_soft
? buf
.rlim_cur
: buf
.rlim_max
;
1648 /* rlim_t might have different sizes, let's map RLIMIT_INFINITY to (uint64_t) -1, so that it is the same on all
1650 u
= x
== RLIM_INFINITY
? (uint64_t) -1 : (uint64_t) x
;
1652 return sd_bus_message_append(reply
, "t", u
);
1655 int bus_track_add_name_many(sd_bus_track
*t
, char **l
) {
1661 /* Continues adding after failure, and returns the first failure. */
1663 STRV_FOREACH(i
, l
) {
1666 k
= sd_bus_track_add_name(t
, *i
);
1667 if (k
< 0 && r
>= 0)
1674 int bus_open_system_watch_bind_with_description(sd_bus
**ret
, const char *description
) {
1675 _cleanup_(sd_bus_unrefp
) sd_bus
*bus
= NULL
;
1681 /* Match like sd_bus_open_system(), but with the "watch_bind" feature and the Connected() signal turned on. */
1683 r
= sd_bus_new(&bus
);
1688 r
= sd_bus_set_description(bus
, description
);
1693 e
= secure_getenv("DBUS_SYSTEM_BUS_ADDRESS");
1695 e
= DEFAULT_SYSTEM_BUS_ADDRESS
;
1697 r
= sd_bus_set_address(bus
, e
);
1701 r
= sd_bus_set_bus_client(bus
, true);
1705 r
= sd_bus_set_trusted(bus
, true);
1709 r
= sd_bus_negotiate_creds(bus
, true, SD_BUS_CREDS_UID
|SD_BUS_CREDS_EUID
|SD_BUS_CREDS_EFFECTIVE_CAPS
);
1713 r
= sd_bus_set_watch_bind(bus
, true);
1717 r
= sd_bus_set_connected_signal(bus
, true);
1721 r
= sd_bus_start(bus
);
1725 *ret
= TAKE_PTR(bus
);
1730 struct request_name_data
{
1736 static int reload_dbus_handler(sd_bus_message
*m
, void *userdata
, sd_bus_error
*ret_error
) {
1737 _cleanup_free_
struct request_name_data
*data
= userdata
;
1738 const sd_bus_error
*e
;
1745 e
= sd_bus_message_get_error(m
);
1747 log_error_errno(sd_bus_error_get_errno(e
), "Failed to reload DBus configuration: %s", e
->message
);
1751 /* Here, use the default request name handler to avoid an infinite loop of reloading and requesting. */
1752 r
= sd_bus_request_name_async(sd_bus_message_get_bus(m
), NULL
, data
->name
, data
->flags
, NULL
, data
->userdata
);
1754 log_error_errno(r
, "Failed to request name: %m");
1759 static int request_name_handler_may_reload_dbus(sd_bus_message
*m
, void *userdata
, sd_bus_error
*ret_error
) {
1760 _cleanup_free_
struct request_name_data
*data
= userdata
;
1767 if (sd_bus_message_is_method_error(m
, NULL
)) {
1768 const sd_bus_error
*e
= sd_bus_message_get_error(m
);
1770 if (!sd_bus_error_has_name(e
, SD_BUS_ERROR_ACCESS_DENIED
)) {
1771 log_debug_errno(sd_bus_error_get_errno(e
),
1772 "Unable to request name, failing connection: %s",
1775 bus_enter_closing(sd_bus_message_get_bus(m
));
1779 log_debug_errno(sd_bus_error_get_errno(e
),
1780 "Unable to request name, retry after reloading DBus configuration: %s",
1783 /* If systemd-timesyncd.service enables DynamicUser= and dbus.service
1784 * started before the dynamic user is realized, then the DBus policy
1785 * about timesyncd has not been enabled yet. So, let's try to reload
1786 * DBus configuration, and after that request name again. Note that it
1787 * seems that no privileges are necessary to call the following method. */
1789 r
= sd_bus_call_method_async(
1790 sd_bus_message_get_bus(m
),
1792 "org.freedesktop.DBus",
1793 "/org/freedesktop/DBus",
1794 "org.freedesktop.DBus",
1796 reload_dbus_handler
,
1799 log_error_errno(r
, "Failed to reload DBus configuration: %m");
1800 bus_enter_closing(sd_bus_message_get_bus(m
));
1804 data
= NULL
; /* Avoid free() */
1808 r
= sd_bus_message_read(m
, "u", &ret
);
1814 case BUS_NAME_ALREADY_OWNER
:
1815 log_debug("Already owner of requested service name, ignoring.");
1818 case BUS_NAME_IN_QUEUE
:
1819 log_debug("In queue for requested service name.");
1822 case BUS_NAME_PRIMARY_OWNER
:
1823 log_debug("Successfully acquired requested service name.");
1826 case BUS_NAME_EXISTS
:
1827 log_debug("Requested service name already owned, failing connection.");
1828 bus_enter_closing(sd_bus_message_get_bus(m
));
1832 log_debug("Unexpected response from RequestName(), failing connection.");
1833 bus_enter_closing(sd_bus_message_get_bus(m
));
1837 int bus_request_name_async_may_reload_dbus(sd_bus
*bus
, sd_bus_slot
**ret_slot
, const char *name
, uint64_t flags
, void *userdata
) {
1838 struct request_name_data
*data
;
1840 data
= new0(struct request_name_data
, 1);
1845 data
->flags
= flags
;
1846 data
->userdata
= userdata
;
1848 return sd_bus_request_name_async(bus
, ret_slot
, name
, flags
, request_name_handler_may_reload_dbus
, data
);