static int exec_process(const char *name, char **argv, int start_fd, size_t n_fds) {
_cleanup_strv_free_ char **envp = NULL;
- const char *var;
int r;
if (arg_inetd && n_fds != 1)
}
static int getenv_tmp_dir(const char **ret_path) {
- const char *n;
int r, ret = 0;
assert(ret_path);
}
}
} else {
- const char *p;
-
FOREACH_STRING(p, "/etc/os-release", "/usr/lib/os-release") {
r = chase_symlinks(p, root, CHASE_PREFIX_ROOT,
ret_path ? &q : NULL,
})
#define _FOREACH_STRING(uniq, x, y, ...) \
- for (char **UNIQ_T(l, uniq) = STRV_MAKE(({ x = y; }), ##__VA_ARGS__); \
+ for (const char *x, * const*UNIQ_T(l, uniq) = STRV_MAKE_CONST(({ x = y; }), ##__VA_ARGS__); \
x; \
x = *(++UNIQ_T(l, uniq)))
}
static int directory_name_is_valid(const char *name) {
- const char *suffix;
/* Accept a directory whose name is a valid unit file name ending in .wants/, .requires/ or .d/ */
}
static int remove_loader_variables(void) {
- const char *variable;
int r = 0;
/* Remove all persistent loader variables we define */
- FOREACH_STRING(variable,
+ FOREACH_STRING(var,
EFI_LOADER_VARIABLE(LoaderConfigTimeout),
EFI_LOADER_VARIABLE(LoaderConfigTimeoutOneShot),
EFI_LOADER_VARIABLE(LoaderEntryDefault),
int q;
- q = efi_set_variable(variable, NULL, 0);
+ q = efi_set_variable(var, NULL, 0);
if (q == -ENOENT)
continue;
if (q < 0) {
- log_warning_errno(q, "Failed to remove EFI variable %s: %m", variable);
+ log_warning_errno(q, "Failed to remove EFI variable %s: %m", var);
if (r >= 0)
r = q;
} else
- log_info("Removed EFI variable %s.", variable);
+ log_info("Removed EFI variable %s.", var);
}
return r;
}
static int refresh(const char *root, Hashmap *a, Hashmap *b, unsigned iteration) {
- const char *c;
int r;
FOREACH_STRING(c, SYSTEMD_CGROUP_CONTROLLER, "cpu", "cpuacct", "memory", "io", "blkio", "pids") {
#if HAVE_APPARMOR
_cleanup_(aa_policy_cache_unrefp) aa_policy_cache *policy_cache = NULL;
_cleanup_(aa_features_unrefp) aa_features *features = NULL;
- const char *current_file;
_cleanup_free_ char *current_profile = NULL, *cache_dir_path = NULL;
int r;
}
static void cgroup_xattr_apply(Unit *u) {
- const char *xn;
bool b;
assert(u);
* is suitably validated. */
static void lock_down_efi_variables(void) {
- const char *p;
int r;
/* Paranoia: let's restrict access modes of these a bit, so that unprivileged users can't use them to
* identify the system or gain too much insight into what we might have credited to the entropy
* pool. */
- FOREACH_STRING(p,
+ FOREACH_STRING(path,
EFIVAR_PATH(EFI_LOADER_VARIABLE(LoaderRandomSeed)),
EFIVAR_PATH(EFI_LOADER_VARIABLE(LoaderSystemToken))) {
- r = chattr_path(p, 0, FS_IMMUTABLE_FL, NULL);
+ r = chattr_path(path, 0, FS_IMMUTABLE_FL, NULL);
if (r == -ENOENT)
continue;
if (r < 0)
- log_warning_errno(r, "Failed to drop FS_IMMUTABLE_FL from %s, ignoring: %m", p);
+ log_warning_errno(r, "Failed to drop FS_IMMUTABLE_FL from %s, ignoring: %m", path);
- if (chmod(p, 0600) < 0)
- log_warning_errno(errno, "Failed to reduce access mode of %s, ignoring: %m", p);
+ if (chmod(path, 0600) < 0)
+ log_warning_errno(errno, "Failed to reduce access mode of %s, ignoring: %m", path);
}
}
uid_t uid) {
_cleanup_free_ char *p = NULL, *q = NULL;
- const char *i;
int r;
assert(context);
return r;
LIST_FOREACH(value, v, t->values) {
- const char *target;
-
if (v->base != TIMER_CALENDAR)
continue;
if ((ec->root_image || !LIST_IS_EMPTY(ec->mount_images)) &&
(cc->device_policy != CGROUP_DEVICE_POLICY_AUTO || cc->device_allow)) {
- const char *p;
/* When RootImage= or MountImages= is specified, the following devices are touched. */
FOREACH_STRING(p, "/dev/loop-control", "/dev/mapper/control") {
return r;
}
- /* Automatically add in a serial getty on the first
- * virtualizer console */
- const char *j;
+ /* Automatically add in a serial getty on the first virtualizer console */
FOREACH_STRING(j,
"hvc0",
"xvc0",
case ARG_DISK_SIZE:
if (isempty(optarg)) {
- const char *prop;
-
FOREACH_STRING(prop, "diskSize", "diskSizeRelative", "rebalanceWeight") {
r = drop_from_identity(prop);
if (r < 0)
break;
}
- case ARG_PKCS11_TOKEN_URI: {
- const char *p;
-
+ case ARG_PKCS11_TOKEN_URI:
if (streq(optarg, "list"))
return pkcs11_list_tokens();
strv_uniq(arg_pkcs11_token_uri);
break;
- }
-
- case ARG_FIDO2_DEVICE: {
- const char *p;
+ case ARG_FIDO2_DEVICE:
if (streq(optarg, "list"))
return fido2_list_devices();
strv_uniq(arg_fido2_device);
break;
- }
case ARG_FIDO2_WITH_PIN: {
bool lock_with_pin;
break;
}
- case ARG_RECOVERY_KEY: {
- const char *p;
-
+ case ARG_RECOVERY_KEY:
r = parse_boolean(optarg);
if (r < 0)
return log_error_errno(r, "Failed to parse --recovery-key= argument: %s", optarg);
}
break;
- }
case ARG_AUTO_RESIZE_MODE:
if (isempty(optarg)) {
static int search_quota(uid_t uid, const char *exclude_quota_path) {
struct stat exclude_st = {};
dev_t previous_devno = 0;
- const char *where;
int r;
/* Checks whether the specified UID owns any files on the files system, but ignore any file system
const char *subsystem,
const char *sysname) {
- const char *s;
char *name;
int r;
assert_return(path_is_normalized(sysname), -EINVAL);
if (streq(subsystem, "subsystem")) {
-
FOREACH_STRING(s, "/sys/subsystem/", "/sys/bus/", "/sys/class/") {
r = device_strjoin_new(s, sysname, NULL, NULL, ret);
if (r < 0)
}
} else if (streq(subsystem, "module")) {
-
r = device_strjoin_new("/sys/module/", sysname, NULL, NULL, ret);
if (r < 0)
return r;
sep = strchr(sysname, ':');
if (sep && sep[1] != '\0') { /* Require ":" and something non-empty after that. */
- const char *subsys;
- subsys = memdupa_suffix0(sysname, sep - sysname);
+ const char *subsys = memdupa_suffix0(sysname, sep - sysname);
sep++;
FOREACH_STRING(s, "/sys/subsystem/", "/sys/bus/") {
static int method_set_vc_keyboard(sd_bus_message *m, void *userdata, sd_bus_error *error) {
Context *c = userdata;
- const char *name, *keymap, *keymap_toggle;
+ const char *keymap, *keymap_toggle;
int convert, interactive, r;
assert(m);
}
static bool user_unit_active(User *u) {
- const char *i;
int r;
assert(u->service);
static int chown_cgroup_path(const char *path, uid_t uid_shift) {
_cleanup_close_ int fd = -1;
- const char *fn;
fd = open(path, O_RDONLY|O_CLOEXEC|O_DIRECTORY);
if (fd < 0)
}
int mount_sysfs(const char *dest, MountSettingsMask mount_settings) {
- const char *full, *top, *x;
+ const char *full, *top;
int r;
unsigned long extra_flags = 0;
/* Create mountpoint for cgroups. Otherwise we are not allowed since we
* remount /sys read-only.
*/
- x = prefix_roota(top, "/fs/cgroup");
+ const char *x = prefix_roota(top, "/fs/cgroup");
(void) mkdir_p(x, 0755);
return mount_nofollow_verbose(LOG_ERR, NULL, top, NULL,
static int setup_journal(const char *directory) {
_cleanup_free_ char *d = NULL;
- const char *dirname, *p, *q;
+ const char *p, *q;
sd_id128_t this_id;
bool try;
int r;
(void) fdset_close_others(fds);
if (arg_start_mode == START_BOOT) {
- const char *init;
char **a;
size_t m;
_cleanup_(settings_freep) Settings *settings = NULL;
_cleanup_fclose_ FILE *f = NULL;
_cleanup_free_ char *p = NULL;
- const char *fn, *i;
+ const char *fn;
int r;
if (arg_oci_bundle)
}
static int find_root(char **ret, int *ret_fd) {
- const char *p;
- int r;
_cleanup_free_ char *device = NULL;
+ int r;
assert(ret);
assert(ret_fd);
SET_FOREACH(item, unit_files) {
_cleanup_free_ char *md = NULL;
- const char *suffix;
if (unlinkat(dirfd(d), item, 0) < 0) {
log_debug_errno(errno, "Can't remove unit file %s/%s: %m", where, item);
}
static bool file_is_our_own(const struct stat *st) {
- const char *path;
-
assert(st);
FOREACH_STRING(path,
int fd;
_cleanup_fclose_ FILE *f;
- const char *s;
fd = mkostemp_safe(t);
assert_se(fd >= 0);
}
static bool shall_make_executable_absolute(void) {
- const char *f;
-
if (strv_isempty(arg_cmdline))
return false;
if (arg_transport != BUS_TRANSPORT_LOCAL)
gid_t gid,
mode_t mask) {
- const char *n;
int r;
assert(fd >= 0);
static char **image_settings_path(Image *image) {
_cleanup_strv_free_ char **l = NULL;
- const char *fn, *s;
+ const char *fn;
unsigned i = 0;
assert(image);
case META_HAS_INIT_SYSTEM: {
bool found = false;
- const char *init;
FOREACH_STRING(init,
"/usr/lib/systemd/systemd", /* systemd on /usr merged system */
goto found;
}
- FOREACH_STRING(path, "/efi", "/boot", "/boot/efi") {
+ FOREACH_STRING(_path, "/efi", "/boot", "/boot/efi") {
+ path = _path;
r = verify_esp(path, /* searching= */ true, unprivileged_mode, ret_part, ret_pstart, ret_psize, ret_uuid, ret_devid);
if (r >= 0)
int machine_id_commit(const char *root) {
_cleanup_close_ int fd = -1, initial_mntns_fd = -1;
- const char *etc_machine_id, *sync_path;
+ const char *etc_machine_id;
sd_id128_t id;
int r;
}
bool mount_point_ignore(const char *path) {
-
- const char *i;
-
/* These are API file systems that might be mounted by other software, we just list them here so that
* we know that we should ignore them. */
FOREACH_STRING(i,
* use the same label for all their files. */
if (loaded_policy) {
usec_t before_relabel, after_relabel;
- const char *i;
int n_extra;
before_relabel = now(CLOCK_MONOTONIC);
}
const char *net_get_persistent_name(sd_device *device) {
- const char *name, *field;
-
assert(device);
/* fetch some persistent data unique (on this machine) to this device */
- FOREACH_STRING(field, "ID_NET_NAME_ONBOARD", "ID_NET_NAME_SLOT", "ID_NET_NAME_PATH", "ID_NET_NAME_MAC")
+ FOREACH_STRING(field, "ID_NET_NAME_ONBOARD", "ID_NET_NAME_SLOT", "ID_NET_NAME_PATH", "ID_NET_NAME_MAC") {
+ const char *name;
+
if (sd_device_get_property_value(device, field, &name) >= 0)
return name;
+ }
return NULL;
}
if (r < 0)
return;
if (r == 0) {
- const char *less_charset, *exe;
+ const char *less_charset;
/* In the child start the pager */
}
int is_pressure_supported(void) {
- const char *p;
-
/* The pressure files, both under /proc and in cgroups, will exist
* even if the kernel has PSI support disabled; we have to read
* the file to make sure it doesn't return -EOPNOTSUPP */
_cleanup_free_ char *resolved_old_root_after = NULL;
_cleanup_close_ int old_root_fd = -1;
bool old_root_remove;
- const char *i;
int r;
assert(new_root);
if (mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) < 0)
return log_error_errno(errno, "Failed to set \"/\" mount propagation to private: %m");
- FOREACH_STRING(i, "/sys", "/dev", "/run", "/proc") {
+ FOREACH_STRING(path, "/sys", "/dev", "/run", "/proc") {
_cleanup_free_ char *chased = NULL;
- r = chase_symlinks(i, new_root, CHASE_PREFIX_ROOT|CHASE_NONEXISTENT, &chased, NULL);
+ r = chase_symlinks(path, new_root, CHASE_PREFIX_ROOT|CHASE_NONEXISTENT, &chased, NULL);
if (r < 0)
- return log_error_errno(r, "Failed to resolve %s/%s: %m", new_root, i);
+ return log_error_errno(r, "Failed to resolve %s/%s: %m", new_root, path);
if (r > 0) {
/* Already exists. Let's see if it is a mount point already. */
r = path_is_mount_point(chased, NULL, 0);
/* Doesn't exist yet? */
(void) mkdir_p_label(chased, 0755);
- if (mount(i, chased, NULL, mount_flags, NULL) < 0)
- return log_error_errno(errno, "Failed to mount %s to %s: %m", i, chased);
+ if (mount(path, chased, NULL, mount_flags, NULL) < 0)
+ return log_error_errno(errno, "Failed to mount %s to %s: %m", path, chased);
}
/* Do not fail if base_filesystem_create() fails. Not all switch roots are like base_filesystem_create() wants
* just the general CI environment type, but also whether we're sanitizing or not, etc. The caller is
* expected to use strstr on the returned value. */
static const char *ans = POINTER_MAX;
- const char *p;
int r;
if (ans != POINTER_MAX)
return ans;
/* We allow specifying the environment with $CITYPE. Nobody uses this so far, but we are ready. */
- p = getenv("CITYPE");
- if (!isempty(p))
- return (ans = p);
+ const char *citype = getenv("CITYPE");
+ if (!isempty(citype))
+ return (ans = citype);
if (getenv_bool("TRAVIS") > 0)
return (ans = "travis");
if (getenv("AUTOPKGTEST_ARTIFACTS") || getenv("AUTOPKGTEST_TMP"))
return (ans = "autopkgtest");
- FOREACH_STRING(p, "CI", "CONTINOUS_INTEGRATION") {
+ FOREACH_STRING(var, "CI", "CONTINOUS_INTEGRATION") {
/* Those vars are booleans according to Semaphore and Travis docs:
* https://docs.travis-ci.com/user/environment-variables/#default-environment-variables
* https://docs.semaphoreci.com/ci-cd-environment/environment-variables/#ci
*/
- r = getenv_bool(p);
+ r = getenv_bool(var);
if (r > 0)
return (ans = "unknown"); /* Some other unknown thing */
if (r == 0)
if (r == 0) {
char **editor_args = NULL;
size_t n_editor_args = 0, i = 1, argc;
- const char **args, *editor, *p;
+ const char **args, *editor;
argc = strv_length(paths)/2 + 1;
if (n_editor_args > 0)
execvp(args[0], (char* const*) args);
- FOREACH_STRING(p, "editor", "nano", "vim", "vi") {
- args[0] = p;
- execvp(p, (char* const*) args);
+ FOREACH_STRING(name, "editor", "nano", "vim", "vi") {
+ args[0] = name;
+ execvp(name, (char* const*) args);
/* We do not fail if the editor doesn't exist because we want to try each one of them
* before failing. */
if (errno != ENOENT) {
int talk_initctl(char rl) {
#if HAVE_SYSV_COMPAT
- struct init_request request;
_cleanup_close_ int fd = -1;
- const char *p;
+ const char *path;
int r;
/* Try to switch to the specified SysV runlevel. Returns == 0 if the operation does not apply on this
if (rl == 0)
return 0;
- FOREACH_STRING(p, "/run/initctl", "/dev/initctl") {
- fd = open(p, O_WRONLY|O_NONBLOCK|O_CLOEXEC|O_NOCTTY);
- if (fd >= 0 || errno != ENOENT)
- break;
- }
- if (fd < 0) {
- if (errno == ENOENT)
- return 0;
+ FOREACH_STRING(_path, "/run/initctl", "/dev/initctl") {
+ path = _path;
- return log_error_errno(errno, "Failed to open initctl fifo: %m");
+ fd = open(path, O_WRONLY|O_NONBLOCK|O_CLOEXEC|O_NOCTTY);
+ if (fd < 0 && errno != ENOENT)
+ return log_error_errno(errno, "Failed to open %s: %m", path);
+ if (fd >= 0)
+ break;
}
+ if (fd < 0)
+ return 0;
- request = (struct init_request) {
+ struct init_request request = {
.magic = INIT_MAGIC,
.sleeptime = 0,
.cmd = INIT_CMD_RUNLVL,
r = loop_write(fd, &request, sizeof(request), false);
if (r < 0)
- return log_error_errno(r, "Failed to write to %s: %m", p);
+ return log_error_errno(r, "Failed to write to %s: %m", path);
return 1;
#else
r = bpf_devices_apply_policy(&prog, CGROUP_DEVICE_POLICY_CLOSED, true, cgroup_path, installed_prog);
assert_se(r >= 0);
- const char *s;
FOREACH_STRING(s, "/dev/null",
"/dev/zero",
"/dev/full",
}
TEST(ellipsize_mem) {
- const char *s;
- ssize_t l, k;
-
FOREACH_STRING(s,
"_XXXXXXXXXXX_", /* ASCII */
"_aąęółśćńżźć_", /* two-byte utf-8 */
"გამარჯობა", /* multi-byte utf-8 */
"你好世界", /* wide characters */
"你გą世óoó界") /* a mix */
-
- for (l = strlen(s); l >= 0; l--)
- for (k = strlen(s) + 1; k >= 0; k--)
+ for (ssize_t l = strlen(s); l >= 0; l--)
+ for (ssize_t k = strlen(s) + 1; k >= 0; k--)
test_ellipsize_mem_one(s, l, k);
}
}
TEST(write_and_load_env_file) {
- const char *v;
-
/* Make sure that our writer, parser and the shell agree on what our env var files mean */
FOREACH_STRING(v,
}
static bool is_inaccessible_available(void) {
- const char *p;
-
FOREACH_STRING(p,
- "/run/systemd/inaccessible/reg",
- "/run/systemd/inaccessible/dir",
- "/run/systemd/inaccessible/chr",
- "/run/systemd/inaccessible/blk",
- "/run/systemd/inaccessible/fifo",
- "/run/systemd/inaccessible/sock"
- ) {
+ "/run/systemd/inaccessible/reg",
+ "/run/systemd/inaccessible/dir",
+ "/run/systemd/inaccessible/chr",
+ "/run/systemd/inaccessible/blk",
+ "/run/systemd/inaccessible/fifo",
+ "/run/systemd/inaccessible/sock")
if (access(p, F_OK) < 0)
return false;
- }
return true;
}
}
static void test_read_virtual_file_one(size_t max_size) {
- const char *filename;
int r;
log_info("/* %s (max_size=%zu) */", __func__, max_size);
#include "util.h"
TEST(gpt_types_against_architectures) {
- const char *prefix;
int r;
/* Dumps a table indicating for which architectures we know we have matching GPT partition
* types. Also validates whether we can properly categorize the entries. */
FOREACH_STRING(prefix, "root-", "usr-")
- for (int a = 0; a < _ARCHITECTURE_MAX; a++) {
- const char *suffix;
-
+ for (int a = 0; a < _ARCHITECTURE_MAX; a++)
FOREACH_STRING(suffix, "", "-verity", "-verity-sig") {
_cleanup_free_ char *joined = NULL;
sd_id128_t id;
assert_se(gpt_partition_type_uuid_to_arch(id) == a);
}
- }
}
DEFINE_TEST_MAIN(LOG_INFO);
/* As a warm-up exercise, check if we can hash passwords. */
bool have_sane_hash = false;
- const char *hash;
FOREACH_STRING(hash,
"ew3bU1.hoKk4o",
log_info("/* %s */", __func__);
_cleanup_free_ void *cd_data = NULL;
- const char *i;
int cd_size = 0;
log_info("sizeof(struct crypt_data): %zu bytes", sizeof(struct crypt_data));
_cleanup_(dissected_image_unrefp) DissectedImage *dissected = NULL;
_cleanup_(umount_and_rmdir_and_freep) char *mounted = NULL;
pthread_t threads[N_THREADS];
- const char *fs;
sd_id128_t id;
int r;
TEST(bind_remount_recursive) {
_cleanup_(rm_rf_physical_and_freep) char *tmp = NULL;
_cleanup_free_ char *subdir = NULL;
- const char *p;
if (geteuid() != 0 || have_effective_cap(CAP_SYS_ADMIN) <= 0) {
(void) log_tests_skipped("not running privileged");
}
TEST(path_is_temporary_fs) {
- const char *s;
int r;
FOREACH_STRING(s, "/", "/run", "/sys", "/sys/", "/proc", "/i-dont-exist", "/var", "/var/lib") {
}
TEST(path_is_read_only_fs) {
- const char *s;
int r;
FOREACH_STRING(s, "/", "/run", "/sys", "/sys/", "/proc", "/i-dont-exist", "/var", "/var/lib") {
"waldo",
NULL
};
- const char *x;
- unsigned i = 0;
+ unsigned i = 0;
FOREACH_STRING(x, "foo", "bar", "waldo")
assert_se(streq_ptr(t[i++], x));
-
assert_se(i == 3);
FOREACH_STRING(x, "zzz")
}
TEST(utf8_escape_non_printable_full) {
- const char *s;
FOREACH_STRING(s,
"goo goo goo", /* ASCII */
"\001 \019\20\a", /* control characters */
}
TEST(utf8_to_utf16) {
- const char *p;
-
FOREACH_STRING(p,
"abc",
"zażółcić gęślą jaźń",
/* The directory list is hardcoded here: /etc is the standard, and rpm-ostree uses /usr/lib. This
* could be made configurable, but I don't see the point right now. */
- const char *fname;
FOREACH_STRING(fname, "/etc/passwd", "/usr/lib/passwd") {
_cleanup_fclose_ FILE *f = NULL;
if (!cache)
return -ENOMEM;
- const char *fname;
FOREACH_STRING(fname, "/etc/group", "/usr/lib/group") {
_cleanup_fclose_ FILE *f = NULL;
projects / thirdparty / systemd.git / commitdiff
