]> git.ipfire.org Git - thirdparty/systemd.git/blob - src/core/dbus-manager.c
user-util: rework how we validate user names
[thirdparty/systemd.git] / src / core / dbus-manager.c
1 /* SPDX-License-Identifier: LGPL-2.1+ */
2
3 #include <errno.h>
4 #include <sys/prctl.h>
5 #include <sys/statvfs.h>
6 #include <unistd.h>
7
8 #include "alloc-util.h"
9 #include "architecture.h"
10 #include "build.h"
11 #include "bus-common-errors.h"
12 #include "bus-util.h"
13 #include "dbus-cgroup.h"
14 #include "dbus-execute.h"
15 #include "dbus-job.h"
16 #include "dbus-manager.h"
17 #include "dbus-scope.h"
18 #include "dbus-unit.h"
19 #include "dbus.h"
20 #include "env-util.h"
21 #include "fd-util.h"
22 #include "fileio.h"
23 #include "format-util.h"
24 #include "fs-util.h"
25 #include "install.h"
26 #include "log.h"
27 #include "os-util.h"
28 #include "parse-util.h"
29 #include "path-util.h"
30 #include "selinux-access.h"
31 #include "stat-util.h"
32 #include "string-util.h"
33 #include "strv.h"
34 #include "syslog-util.h"
35 #include "user-util.h"
36 #include "virt.h"
37 #include "watchdog.h"
38
39 /* Require 16MiB free in /run/systemd for reloading/reexecing. After all we need to serialize our state there, and if
40 * we can't we'll fail badly. */
41 #define RELOAD_DISK_SPACE_MIN (UINT64_C(16) * UINT64_C(1024) * UINT64_C(1024))
42
43 static UnitFileFlags unit_file_bools_to_flags(bool runtime, bool force) {
44 return (runtime ? UNIT_FILE_RUNTIME : 0) |
45 (force ? UNIT_FILE_FORCE : 0);
46 }
47
48 BUS_DEFINE_PROPERTY_GET_ENUM(bus_property_get_oom_policy, oom_policy, OOMPolicy);
49
50 static BUS_DEFINE_PROPERTY_GET_GLOBAL(property_get_version, "s", GIT_VERSION);
51 static BUS_DEFINE_PROPERTY_GET_GLOBAL(property_get_features, "s", SYSTEMD_FEATURES);
52 static BUS_DEFINE_PROPERTY_GET_GLOBAL(property_get_architecture, "s", architecture_to_string(uname_architecture()));
53 static BUS_DEFINE_PROPERTY_GET_GLOBAL(property_get_log_target, "s", log_target_to_string(log_get_target()));
54 static BUS_DEFINE_PROPERTY_GET2(property_get_system_state, "s", Manager, manager_state, manager_state_to_string);
55 static BUS_DEFINE_PROPERTY_GET_GLOBAL(property_get_timer_slack_nsec, "t", (uint64_t) prctl(PR_GET_TIMERSLACK));
56 static BUS_DEFINE_PROPERTY_GET_REF(property_get_hashmap_size, "u", Hashmap *, hashmap_size);
57 static BUS_DEFINE_PROPERTY_GET_REF(property_get_set_size, "u", Set *, set_size);
58 static BUS_DEFINE_PROPERTY_GET(property_get_default_timeout_abort_usec, "t", Manager, manager_default_timeout_abort_usec);
59
60 static int property_get_virtualization(
61 sd_bus *bus,
62 const char *path,
63 const char *interface,
64 const char *property,
65 sd_bus_message *reply,
66 void *userdata,
67 sd_bus_error *error) {
68
69 int v;
70
71 assert(bus);
72 assert(reply);
73
74 v = detect_virtualization();
75
76 /* Make sure to return the empty string when we detect no virtualization, as that is the API.
77 *
78 * https://github.com/systemd/systemd/issues/1423
79 */
80
81 return sd_bus_message_append(
82 reply, "s",
83 v == VIRTUALIZATION_NONE ? NULL : virtualization_to_string(v));
84 }
85
86 static int property_get_tainted(
87 sd_bus *bus,
88 const char *path,
89 const char *interface,
90 const char *property,
91 sd_bus_message *reply,
92 void *userdata,
93 sd_bus_error *error) {
94
95 _cleanup_free_ char *s = NULL;
96 Manager *m = userdata;
97
98 assert(bus);
99 assert(reply);
100 assert(m);
101
102 s = manager_taint_string(m);
103 if (!s)
104 return log_oom();
105
106 return sd_bus_message_append(reply, "s", s);
107 }
108
109 static int property_set_log_target(
110 sd_bus *bus,
111 const char *path,
112 const char *interface,
113 const char *property,
114 sd_bus_message *value,
115 void *userdata,
116 sd_bus_error *error) {
117
118 Manager *m = userdata;
119 const char *t;
120 int r;
121
122 assert(bus);
123 assert(value);
124
125 r = sd_bus_message_read(value, "s", &t);
126 if (r < 0)
127 return r;
128
129 if (isempty(t))
130 manager_restore_original_log_target(m);
131 else {
132 LogTarget target;
133
134 target = log_target_from_string(t);
135 if (target < 0)
136 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Invalid log target '%s'", t);
137
138 manager_override_log_target(m, target);
139 }
140
141 return 0;
142 }
143
144 static int property_get_log_level(
145 sd_bus *bus,
146 const char *path,
147 const char *interface,
148 const char *property,
149 sd_bus_message *reply,
150 void *userdata,
151 sd_bus_error *error) {
152
153 _cleanup_free_ char *t = NULL;
154 int r;
155
156 assert(bus);
157 assert(reply);
158
159 r = log_level_to_string_alloc(log_get_max_level(), &t);
160 if (r < 0)
161 return r;
162
163 return sd_bus_message_append(reply, "s", t);
164 }
165
166 static int property_set_log_level(
167 sd_bus *bus,
168 const char *path,
169 const char *interface,
170 const char *property,
171 sd_bus_message *value,
172 void *userdata,
173 sd_bus_error *error) {
174
175 Manager *m = userdata;
176 const char *t;
177 int r;
178
179 assert(bus);
180 assert(value);
181
182 r = sd_bus_message_read(value, "s", &t);
183 if (r < 0)
184 return r;
185
186 if (isempty(t))
187 manager_restore_original_log_level(m);
188 else {
189 int level;
190
191 level = log_level_from_string(t);
192 if (level < 0)
193 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Invalid log level '%s'", t);
194
195 manager_override_log_level(m, level);
196 }
197
198 return 0;
199 }
200
201 static int property_get_progress(
202 sd_bus *bus,
203 const char *path,
204 const char *interface,
205 const char *property,
206 sd_bus_message *reply,
207 void *userdata,
208 sd_bus_error *error) {
209
210 Manager *m = userdata;
211 double d;
212
213 assert(bus);
214 assert(reply);
215 assert(m);
216
217 if (MANAGER_IS_FINISHED(m))
218 d = 1.0;
219 else
220 d = 1.0 - ((double) hashmap_size(m->jobs) / (double) m->n_installed_jobs);
221
222 return sd_bus_message_append(reply, "d", d);
223 }
224
225 static int property_get_environment(
226 sd_bus *bus,
227 const char *path,
228 const char *interface,
229 const char *property,
230 sd_bus_message *reply,
231 void *userdata,
232 sd_bus_error *error) {
233
234 _cleanup_strv_free_ char **l = NULL;
235 Manager *m = userdata;
236 int r;
237
238 assert(bus);
239 assert(reply);
240 assert(m);
241
242 r = manager_get_effective_environment(m, &l);
243 if (r < 0)
244 return r;
245
246 return sd_bus_message_append_strv(reply, l);
247 }
248
249 static int property_get_show_status(
250 sd_bus *bus,
251 const char *path,
252 const char *interface,
253 const char *property,
254 sd_bus_message *reply,
255 void *userdata,
256 sd_bus_error *error) {
257
258 Manager *m = userdata;
259 int b;
260
261 assert(bus);
262 assert(reply);
263 assert(m);
264
265 b = IN_SET(m->show_status, SHOW_STATUS_TEMPORARY, SHOW_STATUS_YES);
266 return sd_bus_message_append_basic(reply, 'b', &b);
267 }
268
269 static int property_set_runtime_watchdog(
270 sd_bus *bus,
271 const char *path,
272 const char *interface,
273 const char *property,
274 sd_bus_message *value,
275 void *userdata,
276 sd_bus_error *error) {
277
278 usec_t *t = userdata;
279 int r;
280
281 assert(bus);
282 assert(value);
283
284 assert_cc(sizeof(usec_t) == sizeof(uint64_t));
285
286 r = sd_bus_message_read(value, "t", t);
287 if (r < 0)
288 return r;
289
290 return watchdog_set_timeout(t);
291 }
292
293 static int bus_get_unit_by_name(Manager *m, sd_bus_message *message, const char *name, Unit **ret_unit, sd_bus_error *error) {
294 Unit *u;
295 int r;
296
297 assert(m);
298 assert(message);
299 assert(ret_unit);
300
301 /* More or less a wrapper around manager_get_unit() that generates nice errors and has one trick up its sleeve:
302 * if the name is specified empty we use the client's unit. */
303
304 if (isempty(name)) {
305 _cleanup_(sd_bus_creds_unrefp) sd_bus_creds *creds = NULL;
306 pid_t pid;
307
308 r = sd_bus_query_sender_creds(message, SD_BUS_CREDS_PID, &creds);
309 if (r < 0)
310 return r;
311
312 r = sd_bus_creds_get_pid(creds, &pid);
313 if (r < 0)
314 return r;
315
316 u = manager_get_unit_by_pid(m, pid);
317 if (!u)
318 return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_UNIT, "Client not member of any unit.");
319 } else {
320 u = manager_get_unit(m, name);
321 if (!u)
322 return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_UNIT, "Unit %s not loaded.", name);
323 }
324
325 *ret_unit = u;
326 return 0;
327 }
328
329 static int bus_load_unit_by_name(Manager *m, sd_bus_message *message, const char *name, Unit **ret_unit, sd_bus_error *error) {
330 assert(m);
331 assert(message);
332 assert(ret_unit);
333
334 /* Pretty much the same as bus_get_unit_by_name(), but we also load the unit if necessary. */
335
336 if (isempty(name))
337 return bus_get_unit_by_name(m, message, name, ret_unit, error);
338
339 return manager_load_unit(m, name, NULL, error, ret_unit);
340 }
341
342 static int reply_unit_path(Unit *u, sd_bus_message *message, sd_bus_error *error) {
343 _cleanup_free_ char *path = NULL;
344 int r;
345
346 assert(u);
347 assert(message);
348
349 r = mac_selinux_unit_access_check(u, message, "status", error);
350 if (r < 0)
351 return r;
352
353 path = unit_dbus_path(u);
354 if (!path)
355 return log_oom();
356
357 return sd_bus_reply_method_return(message, "o", path);
358 }
359
360 static int method_get_unit(sd_bus_message *message, void *userdata, sd_bus_error *error) {
361 Manager *m = userdata;
362 const char *name;
363 Unit *u;
364 int r;
365
366 assert(message);
367 assert(m);
368
369 /* Anyone can call this method */
370
371 r = sd_bus_message_read(message, "s", &name);
372 if (r < 0)
373 return r;
374
375 r = bus_get_unit_by_name(m, message, name, &u, error);
376 if (r < 0)
377 return r;
378
379 return reply_unit_path(u, message, error);
380 }
381
382 static int method_get_unit_by_pid(sd_bus_message *message, void *userdata, sd_bus_error *error) {
383 Manager *m = userdata;
384 pid_t pid;
385 Unit *u;
386 int r;
387
388 assert(message);
389 assert(m);
390
391 assert_cc(sizeof(pid_t) == sizeof(uint32_t));
392
393 /* Anyone can call this method */
394
395 r = sd_bus_message_read(message, "u", &pid);
396 if (r < 0)
397 return r;
398 if (pid < 0)
399 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Invalid PID " PID_FMT, pid);
400
401 if (pid == 0) {
402 _cleanup_(sd_bus_creds_unrefp) sd_bus_creds *creds = NULL;
403
404 r = sd_bus_query_sender_creds(message, SD_BUS_CREDS_PID, &creds);
405 if (r < 0)
406 return r;
407
408 r = sd_bus_creds_get_pid(creds, &pid);
409 if (r < 0)
410 return r;
411 }
412
413 u = manager_get_unit_by_pid(m, pid);
414 if (!u)
415 return sd_bus_error_setf(error, BUS_ERROR_NO_UNIT_FOR_PID, "PID "PID_FMT" does not belong to any loaded unit.", pid);
416
417 return reply_unit_path(u, message, error);
418 }
419
420 static int method_get_unit_by_invocation_id(sd_bus_message *message, void *userdata, sd_bus_error *error) {
421 _cleanup_free_ char *path = NULL;
422 Manager *m = userdata;
423 sd_id128_t id;
424 const void *a;
425 Unit *u;
426 size_t sz;
427 int r;
428
429 assert(message);
430 assert(m);
431
432 /* Anyone can call this method */
433
434 r = sd_bus_message_read_array(message, 'y', &a, &sz);
435 if (r < 0)
436 return r;
437 if (sz == 0)
438 id = SD_ID128_NULL;
439 else if (sz == 16)
440 memcpy(&id, a, sz);
441 else
442 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Invalid invocation ID");
443
444 if (sd_id128_is_null(id)) {
445 _cleanup_(sd_bus_creds_unrefp) sd_bus_creds *creds = NULL;
446 pid_t pid;
447
448 r = sd_bus_query_sender_creds(message, SD_BUS_CREDS_PID, &creds);
449 if (r < 0)
450 return r;
451
452 r = sd_bus_creds_get_pid(creds, &pid);
453 if (r < 0)
454 return r;
455
456 u = manager_get_unit_by_pid(m, pid);
457 if (!u)
458 return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_UNIT, "Client " PID_FMT " not member of any unit.", pid);
459 } else {
460 u = hashmap_get(m->units_by_invocation_id, &id);
461 if (!u)
462 return sd_bus_error_setf(error, BUS_ERROR_NO_UNIT_FOR_INVOCATION_ID, "No unit with the specified invocation ID " SD_ID128_FORMAT_STR " known.", SD_ID128_FORMAT_VAL(id));
463 }
464
465 r = mac_selinux_unit_access_check(u, message, "status", error);
466 if (r < 0)
467 return r;
468
469 /* So here's a special trick: the bus path we return actually references the unit by its invocation ID instead
470 * of the unit name. This means it stays valid only as long as the invocation ID stays the same. */
471 path = unit_dbus_path_invocation_id(u);
472 if (!path)
473 return -ENOMEM;
474
475 return sd_bus_reply_method_return(message, "o", path);
476 }
477
478 static int method_get_unit_by_control_group(sd_bus_message *message, void *userdata, sd_bus_error *error) {
479 Manager *m = userdata;
480 const char *cgroup;
481 Unit *u;
482 int r;
483
484 r = sd_bus_message_read(message, "s", &cgroup);
485 if (r < 0)
486 return r;
487
488 u = manager_get_unit_by_cgroup(m, cgroup);
489 if (!u)
490 return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_UNIT, "Control group '%s' is not valid or not managed by this instance", cgroup);
491
492 return reply_unit_path(u, message, error);
493 }
494
495 static int method_load_unit(sd_bus_message *message, void *userdata, sd_bus_error *error) {
496 Manager *m = userdata;
497 const char *name;
498 Unit *u;
499 int r;
500
501 assert(message);
502 assert(m);
503
504 /* Anyone can call this method */
505
506 r = sd_bus_message_read(message, "s", &name);
507 if (r < 0)
508 return r;
509
510 r = bus_load_unit_by_name(m, message, name, &u, error);
511 if (r < 0)
512 return r;
513
514 return reply_unit_path(u, message, error);
515 }
516
517 static int method_start_unit_generic(sd_bus_message *message, Manager *m, JobType job_type, bool reload_if_possible, sd_bus_error *error) {
518 const char *name;
519 Unit *u;
520 int r;
521
522 assert(message);
523 assert(m);
524
525 r = sd_bus_message_read(message, "s", &name);
526 if (r < 0)
527 return r;
528
529 r = manager_load_unit(m, name, NULL, error, &u);
530 if (r < 0)
531 return r;
532
533 return bus_unit_method_start_generic(message, u, job_type, reload_if_possible, error);
534 }
535
536 static int method_start_unit(sd_bus_message *message, void *userdata, sd_bus_error *error) {
537 return method_start_unit_generic(message, userdata, JOB_START, false, error);
538 }
539
540 static int method_stop_unit(sd_bus_message *message, void *userdata, sd_bus_error *error) {
541 return method_start_unit_generic(message, userdata, JOB_STOP, false, error);
542 }
543
544 static int method_reload_unit(sd_bus_message *message, void *userdata, sd_bus_error *error) {
545 return method_start_unit_generic(message, userdata, JOB_RELOAD, false, error);
546 }
547
548 static int method_restart_unit(sd_bus_message *message, void *userdata, sd_bus_error *error) {
549 return method_start_unit_generic(message, userdata, JOB_RESTART, false, error);
550 }
551
552 static int method_try_restart_unit(sd_bus_message *message, void *userdata, sd_bus_error *error) {
553 return method_start_unit_generic(message, userdata, JOB_TRY_RESTART, false, error);
554 }
555
556 static int method_reload_or_restart_unit(sd_bus_message *message, void *userdata, sd_bus_error *error) {
557 return method_start_unit_generic(message, userdata, JOB_RESTART, true, error);
558 }
559
560 static int method_reload_or_try_restart_unit(sd_bus_message *message, void *userdata, sd_bus_error *error) {
561 return method_start_unit_generic(message, userdata, JOB_TRY_RESTART, true, error);
562 }
563
564 typedef enum GenericUnitOperationFlags {
565 GENERIC_UNIT_LOAD = 1 << 0, /* Load if the unit is not loaded yet */
566 GENERIC_UNIT_VALIDATE_LOADED = 1 << 1, /* Verify unit is properly loaded before forwarding call */
567 } GenericUnitOperationFlags;
568
569 static int method_generic_unit_operation(
570 sd_bus_message *message,
571 Manager *m,
572 sd_bus_error *error,
573 sd_bus_message_handler_t handler,
574 GenericUnitOperationFlags flags) {
575
576 const char *name;
577 Unit *u;
578 int r;
579
580 assert(message);
581 assert(m);
582
583 /* Read the first argument from the command and pass the operation to the specified per-unit
584 * method. */
585
586 r = sd_bus_message_read(message, "s", &name);
587 if (r < 0)
588 return r;
589
590 if (!isempty(name) && FLAGS_SET(flags, GENERIC_UNIT_LOAD))
591 r = manager_load_unit(m, name, NULL, error, &u);
592 else
593 r = bus_get_unit_by_name(m, message, name, &u, error);
594 if (r < 0)
595 return r;
596
597 if (FLAGS_SET(flags, GENERIC_UNIT_VALIDATE_LOADED)) {
598 r = bus_unit_validate_load_state(u, error);
599 if (r < 0)
600 return r;
601 }
602
603 return handler(message, u, error);
604 }
605
606 static int method_enqueue_unit_job(sd_bus_message *message, void *userdata, sd_bus_error *error) {
607 /* We don't bother with GENERIC_UNIT_VALIDATE_LOADED here, as the job logic validates that anyway */
608 return method_generic_unit_operation(message, userdata, error, bus_unit_method_enqueue_job, GENERIC_UNIT_LOAD);
609 }
610
611 static int method_start_unit_replace(sd_bus_message *message, void *userdata, sd_bus_error *error) {
612 Manager *m = userdata;
613 const char *old_name;
614 Unit *u;
615 int r;
616
617 assert(message);
618 assert(m);
619
620 r = sd_bus_message_read(message, "s", &old_name);
621 if (r < 0)
622 return r;
623
624 r = bus_get_unit_by_name(m, message, old_name, &u, error);
625 if (r < 0)
626 return r;
627 if (!u->job || u->job->type != JOB_START)
628 return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_JOB, "No job queued for unit %s", old_name);
629
630 return method_start_unit_generic(message, m, JOB_START, false, error);
631 }
632
633 static int method_kill_unit(sd_bus_message *message, void *userdata, sd_bus_error *error) {
634 /* We don't bother with GENERIC_UNIT_LOAD nor GENERIC_UNIT_VALIDATE_LOADED here, as it shouldn't
635 * matter whether a unit is loaded for killing any processes possibly in the unit's cgroup. */
636 return method_generic_unit_operation(message, userdata, error, bus_unit_method_kill, 0);
637 }
638
639 static int method_clean_unit(sd_bus_message *message, void *userdata, sd_bus_error *error) {
640 /* Load the unit if necessary, in order to load it, and insist on the unit being loaded to be
641 * cleaned */
642 return method_generic_unit_operation(message, userdata, error, bus_unit_method_clean, GENERIC_UNIT_LOAD|GENERIC_UNIT_VALIDATE_LOADED);
643 }
644
645 static int method_reset_failed_unit(sd_bus_message *message, void *userdata, sd_bus_error *error) {
646 /* Don't load the unit (because unloaded units can't be in failed state), and don't insist on the
647 * unit to be loaded properly (since a failed unit might have its unit file disappeared) */
648 return method_generic_unit_operation(message, userdata, error, bus_unit_method_reset_failed, 0);
649 }
650
651 static int method_set_unit_properties(sd_bus_message *message, void *userdata, sd_bus_error *error) {
652 /* Only change properties on fully loaded units, and load them in order to set properties */
653 return method_generic_unit_operation(message, userdata, error, bus_unit_method_set_properties, GENERIC_UNIT_LOAD|GENERIC_UNIT_VALIDATE_LOADED);
654 }
655
656 static int method_ref_unit(sd_bus_message *message, void *userdata, sd_bus_error *error) {
657 /* Only allow reffing of fully loaded units, and make sure reffing a unit loads it. */
658 return method_generic_unit_operation(message, userdata, error, bus_unit_method_ref, GENERIC_UNIT_LOAD|GENERIC_UNIT_VALIDATE_LOADED);
659 }
660
661 static int method_unref_unit(sd_bus_message *message, void *userdata, sd_bus_error *error) {
662 /* Dropping a ref OTOH should not require the unit to still be loaded. And since a reffed unit is a
663 * loaded unit there's no need to load the unit for unreffing it. */
664 return method_generic_unit_operation(message, userdata, error, bus_unit_method_unref, 0);
665 }
666
667 static int reply_unit_info(sd_bus_message *reply, Unit *u) {
668 _cleanup_free_ char *unit_path = NULL, *job_path = NULL;
669 Unit *following;
670
671 following = unit_following(u);
672
673 unit_path = unit_dbus_path(u);
674 if (!unit_path)
675 return -ENOMEM;
676
677 if (u->job) {
678 job_path = job_dbus_path(u->job);
679 if (!job_path)
680 return -ENOMEM;
681 }
682
683 return sd_bus_message_append(
684 reply, "(ssssssouso)",
685 u->id,
686 unit_description(u),
687 unit_load_state_to_string(u->load_state),
688 unit_active_state_to_string(unit_active_state(u)),
689 unit_sub_state_to_string(u),
690 following ? following->id : "",
691 unit_path,
692 u->job ? u->job->id : 0,
693 u->job ? job_type_to_string(u->job->type) : "",
694 empty_to_root(job_path));
695 }
696
697 static int method_list_units_by_names(sd_bus_message *message, void *userdata, sd_bus_error *error) {
698 _cleanup_(sd_bus_message_unrefp) sd_bus_message *reply = NULL;
699 Manager *m = userdata;
700 int r;
701 char **unit;
702 _cleanup_strv_free_ char **units = NULL;
703
704 assert(message);
705 assert(m);
706
707 r = sd_bus_message_read_strv(message, &units);
708 if (r < 0)
709 return r;
710
711 r = sd_bus_message_new_method_return(message, &reply);
712 if (r < 0)
713 return r;
714
715 r = sd_bus_message_open_container(reply, 'a', "(ssssssouso)");
716 if (r < 0)
717 return r;
718
719 STRV_FOREACH(unit, units) {
720 Unit *u;
721
722 if (!unit_name_is_valid(*unit, UNIT_NAME_ANY))
723 continue;
724
725 r = bus_load_unit_by_name(m, message, *unit, &u, error);
726 if (r < 0)
727 return r;
728
729 r = reply_unit_info(reply, u);
730 if (r < 0)
731 return r;
732 }
733
734 r = sd_bus_message_close_container(reply);
735 if (r < 0)
736 return r;
737
738 return sd_bus_send(NULL, reply, NULL);
739 }
740
741 static int method_get_unit_processes(sd_bus_message *message, void *userdata, sd_bus_error *error) {
742 /* Don't load a unit (since it won't have any processes if it's not loaded), but don't insist on the
743 * unit being loaded (because even improperly loaded units might still have processes around */
744 return method_generic_unit_operation(message, userdata, error, bus_unit_method_get_processes, 0);
745 }
746
747 static int method_attach_processes_to_unit(sd_bus_message *message, void *userdata, sd_bus_error *error) {
748 /* Don't allow attaching new processes to units that aren't loaded. Don't bother with loading a unit
749 * for this purpose though, as an unloaded unit is a stopped unit, and we don't allow attaching
750 * processes to stopped units anyway. */
751 return method_generic_unit_operation(message, userdata, error, bus_unit_method_attach_processes, GENERIC_UNIT_VALIDATE_LOADED);
752 }
753
754 static int transient_unit_from_message(
755 Manager *m,
756 sd_bus_message *message,
757 const char *name,
758 Unit **unit,
759 sd_bus_error *error) {
760
761 UnitType t;
762 Unit *u;
763 int r;
764
765 assert(m);
766 assert(message);
767 assert(name);
768
769 t = unit_name_to_type(name);
770 if (t < 0)
771 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Invalid unit name or type.");
772
773 if (!unit_vtable[t]->can_transient)
774 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Unit type %s does not support transient units.", unit_type_to_string(t));
775
776 r = manager_load_unit(m, name, NULL, error, &u);
777 if (r < 0)
778 return r;
779
780 if (!unit_is_pristine(u))
781 return sd_bus_error_setf(error, BUS_ERROR_UNIT_EXISTS, "Unit %s already exists.", name);
782
783 /* OK, the unit failed to load and is unreferenced, now let's
784 * fill in the transient data instead */
785 r = unit_make_transient(u);
786 if (r < 0)
787 return r;
788
789 /* Set our properties */
790 r = bus_unit_set_properties(u, message, UNIT_RUNTIME, false, error);
791 if (r < 0)
792 return r;
793
794 /* If the client asked for it, automatically add a reference to this unit. */
795 if (u->bus_track_add) {
796 r = bus_unit_track_add_sender(u, message);
797 if (r < 0)
798 return log_error_errno(r, "Failed to watch sender: %m");
799 }
800
801 /* Now load the missing bits of the unit we just created */
802 unit_add_to_load_queue(u);
803 manager_dispatch_load_queue(m);
804
805 *unit = u;
806
807 return 0;
808 }
809
810 static int transient_aux_units_from_message(
811 Manager *m,
812 sd_bus_message *message,
813 sd_bus_error *error) {
814
815 int r;
816
817 assert(m);
818 assert(message);
819
820 r = sd_bus_message_enter_container(message, 'a', "(sa(sv))");
821 if (r < 0)
822 return r;
823
824 while ((r = sd_bus_message_enter_container(message, 'r', "sa(sv)")) > 0) {
825 const char *name = NULL;
826 Unit *u;
827
828 r = sd_bus_message_read(message, "s", &name);
829 if (r < 0)
830 return r;
831
832 r = transient_unit_from_message(m, message, name, &u, error);
833 if (r < 0)
834 return r;
835
836 r = sd_bus_message_exit_container(message);
837 if (r < 0)
838 return r;
839 }
840 if (r < 0)
841 return r;
842
843 r = sd_bus_message_exit_container(message);
844 if (r < 0)
845 return r;
846
847 return 0;
848 }
849
850 static int method_start_transient_unit(sd_bus_message *message, void *userdata, sd_bus_error *error) {
851 const char *name, *smode;
852 Manager *m = userdata;
853 JobMode mode;
854 Unit *u;
855 int r;
856
857 assert(message);
858 assert(m);
859
860 r = mac_selinux_access_check(message, "start", error);
861 if (r < 0)
862 return r;
863
864 r = sd_bus_message_read(message, "ss", &name, &smode);
865 if (r < 0)
866 return r;
867
868 mode = job_mode_from_string(smode);
869 if (mode < 0)
870 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Job mode %s is invalid.", smode);
871
872 r = bus_verify_manage_units_async(m, message, error);
873 if (r < 0)
874 return r;
875 if (r == 0)
876 return 1; /* No authorization for now, but the async polkit stuff will call us again when it has it */
877
878 r = transient_unit_from_message(m, message, name, &u, error);
879 if (r < 0)
880 return r;
881
882 r = transient_aux_units_from_message(m, message, error);
883 if (r < 0)
884 return r;
885
886 /* Finally, start it */
887 return bus_unit_queue_job(message, u, JOB_START, mode, 0, error);
888 }
889
890 static int method_get_job(sd_bus_message *message, void *userdata, sd_bus_error *error) {
891 _cleanup_free_ char *path = NULL;
892 Manager *m = userdata;
893 uint32_t id;
894 Job *j;
895 int r;
896
897 assert(message);
898 assert(m);
899
900 /* Anyone can call this method */
901
902 r = sd_bus_message_read(message, "u", &id);
903 if (r < 0)
904 return r;
905
906 j = manager_get_job(m, id);
907 if (!j)
908 return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_JOB, "Job %u does not exist.", (unsigned) id);
909
910 r = mac_selinux_unit_access_check(j->unit, message, "status", error);
911 if (r < 0)
912 return r;
913
914 path = job_dbus_path(j);
915 if (!path)
916 return -ENOMEM;
917
918 return sd_bus_reply_method_return(message, "o", path);
919 }
920
921 static int method_cancel_job(sd_bus_message *message, void *userdata, sd_bus_error *error) {
922 Manager *m = userdata;
923 uint32_t id;
924 Job *j;
925 int r;
926
927 assert(message);
928 assert(m);
929
930 r = sd_bus_message_read(message, "u", &id);
931 if (r < 0)
932 return r;
933
934 j = manager_get_job(m, id);
935 if (!j)
936 return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_JOB, "Job %u does not exist.", (unsigned) id);
937
938 return bus_job_method_cancel(message, j, error);
939 }
940
941 static int method_clear_jobs(sd_bus_message *message, void *userdata, sd_bus_error *error) {
942 Manager *m = userdata;
943 int r;
944
945 assert(message);
946 assert(m);
947
948 r = mac_selinux_access_check(message, "reload", error);
949 if (r < 0)
950 return r;
951
952 r = bus_verify_manage_units_async(m, message, error);
953 if (r < 0)
954 return r;
955 if (r == 0)
956 return 1; /* No authorization for now, but the async polkit stuff will call us again when it has it */
957
958 manager_clear_jobs(m);
959
960 return sd_bus_reply_method_return(message, NULL);
961 }
962
963 static int method_reset_failed(sd_bus_message *message, void *userdata, sd_bus_error *error) {
964 Manager *m = userdata;
965 int r;
966
967 assert(message);
968 assert(m);
969
970 r = mac_selinux_access_check(message, "reload", error);
971 if (r < 0)
972 return r;
973
974 r = bus_verify_manage_units_async(m, message, error);
975 if (r < 0)
976 return r;
977 if (r == 0)
978 return 1; /* No authorization for now, but the async polkit stuff will call us again when it has it */
979
980 manager_reset_failed(m);
981
982 return sd_bus_reply_method_return(message, NULL);
983 }
984
985 static int list_units_filtered(sd_bus_message *message, void *userdata, sd_bus_error *error, char **states, char **patterns) {
986 _cleanup_(sd_bus_message_unrefp) sd_bus_message *reply = NULL;
987 Manager *m = userdata;
988 const char *k;
989 Iterator i;
990 Unit *u;
991 int r;
992
993 assert(message);
994 assert(m);
995
996 /* Anyone can call this method */
997
998 r = mac_selinux_access_check(message, "status", error);
999 if (r < 0)
1000 return r;
1001
1002 r = sd_bus_message_new_method_return(message, &reply);
1003 if (r < 0)
1004 return r;
1005
1006 r = sd_bus_message_open_container(reply, 'a', "(ssssssouso)");
1007 if (r < 0)
1008 return r;
1009
1010 HASHMAP_FOREACH_KEY(u, k, m->units, i) {
1011 if (k != u->id)
1012 continue;
1013
1014 if (!strv_isempty(states) &&
1015 !strv_contains(states, unit_load_state_to_string(u->load_state)) &&
1016 !strv_contains(states, unit_active_state_to_string(unit_active_state(u))) &&
1017 !strv_contains(states, unit_sub_state_to_string(u)))
1018 continue;
1019
1020 if (!strv_isempty(patterns) &&
1021 !strv_fnmatch_or_empty(patterns, u->id, FNM_NOESCAPE))
1022 continue;
1023
1024 r = reply_unit_info(reply, u);
1025 if (r < 0)
1026 return r;
1027 }
1028
1029 r = sd_bus_message_close_container(reply);
1030 if (r < 0)
1031 return r;
1032
1033 return sd_bus_send(NULL, reply, NULL);
1034 }
1035
1036 static int method_list_units(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1037 return list_units_filtered(message, userdata, error, NULL, NULL);
1038 }
1039
1040 static int method_list_units_filtered(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1041 _cleanup_strv_free_ char **states = NULL;
1042 int r;
1043
1044 r = sd_bus_message_read_strv(message, &states);
1045 if (r < 0)
1046 return r;
1047
1048 return list_units_filtered(message, userdata, error, states, NULL);
1049 }
1050
1051 static int method_list_units_by_patterns(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1052 _cleanup_strv_free_ char **states = NULL;
1053 _cleanup_strv_free_ char **patterns = NULL;
1054 int r;
1055
1056 r = sd_bus_message_read_strv(message, &states);
1057 if (r < 0)
1058 return r;
1059
1060 r = sd_bus_message_read_strv(message, &patterns);
1061 if (r < 0)
1062 return r;
1063
1064 return list_units_filtered(message, userdata, error, states, patterns);
1065 }
1066
1067 static int method_list_jobs(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1068 _cleanup_(sd_bus_message_unrefp) sd_bus_message *reply = NULL;
1069 Manager *m = userdata;
1070 Iterator i;
1071 Job *j;
1072 int r;
1073
1074 assert(message);
1075 assert(m);
1076
1077 /* Anyone can call this method */
1078
1079 r = mac_selinux_access_check(message, "status", error);
1080 if (r < 0)
1081 return r;
1082
1083 r = sd_bus_message_new_method_return(message, &reply);
1084 if (r < 0)
1085 return r;
1086
1087 r = sd_bus_message_open_container(reply, 'a', "(usssoo)");
1088 if (r < 0)
1089 return r;
1090
1091 HASHMAP_FOREACH(j, m->jobs, i) {
1092 _cleanup_free_ char *unit_path = NULL, *job_path = NULL;
1093
1094 job_path = job_dbus_path(j);
1095 if (!job_path)
1096 return -ENOMEM;
1097
1098 unit_path = unit_dbus_path(j->unit);
1099 if (!unit_path)
1100 return -ENOMEM;
1101
1102 r = sd_bus_message_append(
1103 reply, "(usssoo)",
1104 j->id,
1105 j->unit->id,
1106 job_type_to_string(j->type),
1107 job_state_to_string(j->state),
1108 job_path,
1109 unit_path);
1110 if (r < 0)
1111 return r;
1112 }
1113
1114 r = sd_bus_message_close_container(reply);
1115 if (r < 0)
1116 return r;
1117
1118 return sd_bus_send(NULL, reply, NULL);
1119 }
1120
1121 static int method_subscribe(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1122 Manager *m = userdata;
1123 int r;
1124
1125 assert(message);
1126 assert(m);
1127
1128 /* Anyone can call this method */
1129
1130 r = mac_selinux_access_check(message, "status", error);
1131 if (r < 0)
1132 return r;
1133
1134 if (sd_bus_message_get_bus(message) == m->api_bus) {
1135
1136 /* Note that direct bus connection subscribe by
1137 * default, we only track peers on the API bus here */
1138
1139 if (!m->subscribed) {
1140 r = sd_bus_track_new(sd_bus_message_get_bus(message), &m->subscribed, NULL, NULL);
1141 if (r < 0)
1142 return r;
1143 }
1144
1145 r = sd_bus_track_add_sender(m->subscribed, message);
1146 if (r < 0)
1147 return r;
1148 if (r == 0)
1149 return sd_bus_error_setf(error, BUS_ERROR_ALREADY_SUBSCRIBED, "Client is already subscribed.");
1150 }
1151
1152 return sd_bus_reply_method_return(message, NULL);
1153 }
1154
1155 static int method_unsubscribe(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1156 Manager *m = userdata;
1157 int r;
1158
1159 assert(message);
1160 assert(m);
1161
1162 /* Anyone can call this method */
1163
1164 r = mac_selinux_access_check(message, "status", error);
1165 if (r < 0)
1166 return r;
1167
1168 if (sd_bus_message_get_bus(message) == m->api_bus) {
1169 r = sd_bus_track_remove_sender(m->subscribed, message);
1170 if (r < 0)
1171 return r;
1172 if (r == 0)
1173 return sd_bus_error_setf(error, BUS_ERROR_NOT_SUBSCRIBED, "Client is not subscribed.");
1174 }
1175
1176 return sd_bus_reply_method_return(message, NULL);
1177 }
1178
1179 static int dump_impl(sd_bus_message *message, void *userdata, sd_bus_error *error, int (*reply)(sd_bus_message *, char *)) {
1180 _cleanup_free_ char *dump = NULL;
1181 Manager *m = userdata;
1182 int r;
1183
1184 assert(message);
1185 assert(m);
1186
1187 /* Anyone can call this method */
1188
1189 r = mac_selinux_access_check(message, "status", error);
1190 if (r < 0)
1191 return r;
1192
1193 r = manager_get_dump_string(m, &dump);
1194 if (r < 0)
1195 return r;
1196
1197 return reply(message, dump);
1198 }
1199
1200 static int reply_dump(sd_bus_message *message, char *dump) {
1201 return sd_bus_reply_method_return(message, "s", dump);
1202 }
1203
1204 static int method_dump(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1205 return dump_impl(message, userdata, error, reply_dump);
1206 }
1207
1208 static int reply_dump_by_fd(sd_bus_message *message, char *dump) {
1209 _cleanup_close_ int fd = -1;
1210
1211 fd = acquire_data_fd(dump, strlen(dump), 0);
1212 if (fd < 0)
1213 return fd;
1214
1215 return sd_bus_reply_method_return(message, "h", fd);
1216 }
1217
1218 static int method_dump_by_fd(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1219 return dump_impl(message, userdata, error, reply_dump_by_fd);
1220 }
1221
1222 static int method_refuse_snapshot(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1223 return sd_bus_error_setf(error, SD_BUS_ERROR_NOT_SUPPORTED, "Support for snapshots has been removed.");
1224 }
1225
1226 static int verify_run_space(const char *message, sd_bus_error *error) {
1227 struct statvfs svfs;
1228 uint64_t available;
1229
1230 if (statvfs("/run/systemd", &svfs) < 0)
1231 return sd_bus_error_set_errnof(error, errno, "Failed to statvfs(/run/systemd): %m");
1232
1233 available = (uint64_t) svfs.f_bfree * (uint64_t) svfs.f_bsize;
1234
1235 if (available < RELOAD_DISK_SPACE_MIN) {
1236 char fb_available[FORMAT_BYTES_MAX], fb_need[FORMAT_BYTES_MAX];
1237 return sd_bus_error_setf(error,
1238 BUS_ERROR_DISK_FULL,
1239 "%s, not enough space available on /run/systemd. "
1240 "Currently, %s are free, but a safety buffer of %s is enforced.",
1241 message,
1242 format_bytes(fb_available, sizeof(fb_available), available),
1243 format_bytes(fb_need, sizeof(fb_need), RELOAD_DISK_SPACE_MIN));
1244 }
1245
1246 return 0;
1247 }
1248
1249 int verify_run_space_and_log(const char *message) {
1250 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
1251 int r;
1252
1253 r = verify_run_space(message, &error);
1254 if (r < 0)
1255 return log_error_errno(r, "%s", bus_error_message(&error, r));
1256
1257 return 0;
1258 }
1259
1260 static int method_reload(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1261 Manager *m = userdata;
1262 int r;
1263
1264 assert(message);
1265 assert(m);
1266
1267 r = verify_run_space("Refusing to reload", error);
1268 if (r < 0)
1269 return r;
1270
1271 r = mac_selinux_access_check(message, "reload", error);
1272 if (r < 0)
1273 return r;
1274
1275 r = bus_verify_reload_daemon_async(m, message, error);
1276 if (r < 0)
1277 return r;
1278 if (r == 0)
1279 return 1; /* No authorization for now, but the async polkit stuff will call us again when it has it */
1280
1281 /* Instead of sending the reply back right away, we just
1282 * remember that we need to and then send it after the reload
1283 * is finished. That way the caller knows when the reload
1284 * finished. */
1285
1286 assert(!m->pending_reload_message);
1287 r = sd_bus_message_new_method_return(message, &m->pending_reload_message);
1288 if (r < 0)
1289 return r;
1290
1291 m->objective = MANAGER_RELOAD;
1292
1293 return 1;
1294 }
1295
1296 static int method_reexecute(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1297 Manager *m = userdata;
1298 int r;
1299
1300 assert(message);
1301 assert(m);
1302
1303 r = verify_run_space("Refusing to reexecute", error);
1304 if (r < 0)
1305 return r;
1306
1307 r = mac_selinux_access_check(message, "reload", error);
1308 if (r < 0)
1309 return r;
1310
1311 r = bus_verify_reload_daemon_async(m, message, error);
1312 if (r < 0)
1313 return r;
1314 if (r == 0)
1315 return 1; /* No authorization for now, but the async polkit stuff will call us again when it has it */
1316
1317 /* We don't send a reply back here, the client should
1318 * just wait for us disconnecting. */
1319
1320 m->objective = MANAGER_REEXECUTE;
1321 return 1;
1322 }
1323
1324 static int method_exit(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1325 Manager *m = userdata;
1326 int r;
1327
1328 assert(message);
1329 assert(m);
1330
1331 r = mac_selinux_access_check(message, "halt", error);
1332 if (r < 0)
1333 return r;
1334
1335 /* Exit() (in contrast to SetExitCode()) is actually allowed even if
1336 * we are running on the host. It will fall back on reboot() in
1337 * systemd-shutdown if it cannot do the exit() because it isn't a
1338 * container. */
1339
1340 m->objective = MANAGER_EXIT;
1341
1342 return sd_bus_reply_method_return(message, NULL);
1343 }
1344
1345 static int method_reboot(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1346 Manager *m = userdata;
1347 int r;
1348
1349 assert(message);
1350 assert(m);
1351
1352 r = mac_selinux_access_check(message, "reboot", error);
1353 if (r < 0)
1354 return r;
1355
1356 if (!MANAGER_IS_SYSTEM(m))
1357 return sd_bus_error_setf(error, SD_BUS_ERROR_NOT_SUPPORTED, "Reboot is only supported for system managers.");
1358
1359 m->objective = MANAGER_REBOOT;
1360
1361 return sd_bus_reply_method_return(message, NULL);
1362 }
1363
1364 static int method_poweroff(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1365 Manager *m = userdata;
1366 int r;
1367
1368 assert(message);
1369 assert(m);
1370
1371 r = mac_selinux_access_check(message, "halt", error);
1372 if (r < 0)
1373 return r;
1374
1375 if (!MANAGER_IS_SYSTEM(m))
1376 return sd_bus_error_setf(error, SD_BUS_ERROR_NOT_SUPPORTED, "Powering off is only supported for system managers.");
1377
1378 m->objective = MANAGER_POWEROFF;
1379
1380 return sd_bus_reply_method_return(message, NULL);
1381 }
1382
1383 static int method_halt(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1384 Manager *m = userdata;
1385 int r;
1386
1387 assert(message);
1388 assert(m);
1389
1390 r = mac_selinux_access_check(message, "halt", error);
1391 if (r < 0)
1392 return r;
1393
1394 if (!MANAGER_IS_SYSTEM(m))
1395 return sd_bus_error_setf(error, SD_BUS_ERROR_NOT_SUPPORTED, "Halt is only supported for system managers.");
1396
1397 m->objective = MANAGER_HALT;
1398
1399 return sd_bus_reply_method_return(message, NULL);
1400 }
1401
1402 static int method_kexec(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1403 Manager *m = userdata;
1404 int r;
1405
1406 assert(message);
1407 assert(m);
1408
1409 r = mac_selinux_access_check(message, "reboot", error);
1410 if (r < 0)
1411 return r;
1412
1413 if (!MANAGER_IS_SYSTEM(m))
1414 return sd_bus_error_setf(error, SD_BUS_ERROR_NOT_SUPPORTED, "KExec is only supported for system managers.");
1415
1416 m->objective = MANAGER_KEXEC;
1417
1418 return sd_bus_reply_method_return(message, NULL);
1419 }
1420
1421 static int method_switch_root(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1422 _cleanup_free_ char *ri = NULL, *rt = NULL;
1423 const char *root, *init;
1424 Manager *m = userdata;
1425 struct statvfs svfs;
1426 uint64_t available;
1427 int r;
1428
1429 assert(message);
1430 assert(m);
1431
1432 if (statvfs("/run/systemd", &svfs) < 0)
1433 return sd_bus_error_set_errnof(error, errno, "Failed to statvfs(/run/systemd): %m");
1434
1435 available = (uint64_t) svfs.f_bfree * (uint64_t) svfs.f_bsize;
1436
1437 if (available < RELOAD_DISK_SPACE_MIN) {
1438 char fb_available[FORMAT_BYTES_MAX], fb_need[FORMAT_BYTES_MAX];
1439 log_warning("Dangerously low amount of free space on /run/systemd, root switching operation might not complete successfully. "
1440 "Currently, %s are free, but %s are suggested. Proceeding anyway.",
1441 format_bytes(fb_available, sizeof(fb_available), available),
1442 format_bytes(fb_need, sizeof(fb_need), RELOAD_DISK_SPACE_MIN));
1443 }
1444
1445 r = mac_selinux_access_check(message, "reboot", error);
1446 if (r < 0)
1447 return r;
1448
1449 if (!MANAGER_IS_SYSTEM(m))
1450 return sd_bus_error_setf(error, SD_BUS_ERROR_NOT_SUPPORTED, "Root switching is only supported by system manager.");
1451
1452 r = sd_bus_message_read(message, "ss", &root, &init);
1453 if (r < 0)
1454 return r;
1455
1456 if (isempty(root))
1457 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "New root directory may not be the empty string.");
1458 if (!path_is_absolute(root))
1459 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "New root path '%s' is not absolute.", root);
1460 if (path_equal(root, "/"))
1461 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "New root directory cannot be the old root directory.");
1462
1463 /* Safety check */
1464 if (isempty(init)) {
1465 r = path_is_os_tree(root);
1466 if (r < 0)
1467 return sd_bus_error_set_errnof(error, r, "Failed to determine whether root path '%s' contains an OS tree: %m", root);
1468 if (r == 0)
1469 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Specified switch root path '%s' does not seem to be an OS tree. os-release file is missing.", root);
1470 } else {
1471 _cleanup_free_ char *chased = NULL;
1472
1473 if (!path_is_absolute(init))
1474 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Path to init binary '%s' not absolute.", init);
1475
1476 r = chase_symlinks(init, root, CHASE_PREFIX_ROOT|CHASE_TRAIL_SLASH, &chased, NULL);
1477 if (r < 0)
1478 return sd_bus_error_set_errnof(error, r, "Could not resolve init executable %s: %m", init);
1479
1480 if (laccess(chased, X_OK) < 0) {
1481 if (errno == EACCES)
1482 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Init binary %s is not executable.", init);
1483
1484 return sd_bus_error_set_errnof(error, r, "Could not check whether init binary %s is executable: %m", init);
1485 }
1486 }
1487
1488 rt = strdup(root);
1489 if (!rt)
1490 return -ENOMEM;
1491
1492 if (!isempty(init)) {
1493 ri = strdup(init);
1494 if (!ri)
1495 return -ENOMEM;
1496 }
1497
1498 free_and_replace(m->switch_root, rt);
1499 free_and_replace(m->switch_root_init, ri);
1500
1501 m->objective = MANAGER_SWITCH_ROOT;
1502
1503 return sd_bus_reply_method_return(message, NULL);
1504 }
1505
1506 static int method_set_environment(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1507 _cleanup_strv_free_ char **plus = NULL;
1508 Manager *m = userdata;
1509 int r;
1510
1511 assert(message);
1512 assert(m);
1513
1514 r = mac_selinux_access_check(message, "reload", error);
1515 if (r < 0)
1516 return r;
1517
1518 r = sd_bus_message_read_strv(message, &plus);
1519 if (r < 0)
1520 return r;
1521 if (!strv_env_is_valid(plus))
1522 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Invalid environment assignments");
1523
1524 r = bus_verify_set_environment_async(m, message, error);
1525 if (r < 0)
1526 return r;
1527 if (r == 0)
1528 return 1; /* No authorization for now, but the async polkit stuff will call us again when it has it */
1529
1530 r = manager_client_environment_modify(m, NULL, plus);
1531 if (r < 0)
1532 return r;
1533
1534 return sd_bus_reply_method_return(message, NULL);
1535 }
1536
1537 static int method_unset_environment(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1538 _cleanup_strv_free_ char **minus = NULL;
1539 Manager *m = userdata;
1540 int r;
1541
1542 assert(message);
1543 assert(m);
1544
1545 r = mac_selinux_access_check(message, "reload", error);
1546 if (r < 0)
1547 return r;
1548
1549 r = sd_bus_message_read_strv(message, &minus);
1550 if (r < 0)
1551 return r;
1552
1553 if (!strv_env_name_or_assignment_is_valid(minus))
1554 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Invalid environment variable names or assignments");
1555
1556 r = bus_verify_set_environment_async(m, message, error);
1557 if (r < 0)
1558 return r;
1559 if (r == 0)
1560 return 1; /* No authorization for now, but the async polkit stuff will call us again when it has it */
1561
1562 r = manager_client_environment_modify(m, minus, NULL);
1563 if (r < 0)
1564 return r;
1565
1566 return sd_bus_reply_method_return(message, NULL);
1567 }
1568
1569 static int method_unset_and_set_environment(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1570 _cleanup_strv_free_ char **minus = NULL, **plus = NULL;
1571 Manager *m = userdata;
1572 int r;
1573
1574 assert(message);
1575 assert(m);
1576
1577 r = mac_selinux_access_check(message, "reload", error);
1578 if (r < 0)
1579 return r;
1580
1581 r = sd_bus_message_read_strv(message, &minus);
1582 if (r < 0)
1583 return r;
1584
1585 r = sd_bus_message_read_strv(message, &plus);
1586 if (r < 0)
1587 return r;
1588
1589 if (!strv_env_name_or_assignment_is_valid(minus))
1590 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Invalid environment variable names or assignments");
1591 if (!strv_env_is_valid(plus))
1592 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Invalid environment assignments");
1593
1594 r = bus_verify_set_environment_async(m, message, error);
1595 if (r < 0)
1596 return r;
1597 if (r == 0)
1598 return 1; /* No authorization for now, but the async polkit stuff will call us again when it has it */
1599
1600 r = manager_client_environment_modify(m, minus, plus);
1601 if (r < 0)
1602 return r;
1603
1604 return sd_bus_reply_method_return(message, NULL);
1605 }
1606
1607 static int method_set_exit_code(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1608 Manager *m = userdata;
1609 uint8_t code;
1610 int r;
1611
1612 assert(message);
1613 assert(m);
1614
1615 r = mac_selinux_access_check(message, "exit", error);
1616 if (r < 0)
1617 return r;
1618
1619 r = sd_bus_message_read_basic(message, 'y', &code);
1620 if (r < 0)
1621 return r;
1622
1623 if (MANAGER_IS_SYSTEM(m) && detect_container() <= 0)
1624 return sd_bus_error_setf(error, SD_BUS_ERROR_NOT_SUPPORTED, "ExitCode can only be set for user service managers or in containers.");
1625
1626 m->return_value = code;
1627
1628 return sd_bus_reply_method_return(message, NULL);
1629 }
1630
1631 static int method_lookup_dynamic_user_by_name(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1632 Manager *m = userdata;
1633 const char *name;
1634 uid_t uid;
1635 int r;
1636
1637 assert(message);
1638 assert(m);
1639
1640 r = sd_bus_message_read_basic(message, 's', &name);
1641 if (r < 0)
1642 return r;
1643
1644 if (!MANAGER_IS_SYSTEM(m))
1645 return sd_bus_error_setf(error, SD_BUS_ERROR_NOT_SUPPORTED, "Dynamic users are only supported in the system instance.");
1646 if (!valid_user_group_name(name, VALID_USER_RELAX))
1647 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "User name invalid: %s", name);
1648
1649 r = dynamic_user_lookup_name(m, name, &uid);
1650 if (r == -ESRCH)
1651 return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_DYNAMIC_USER, "Dynamic user %s does not exist.", name);
1652 if (r < 0)
1653 return r;
1654
1655 return sd_bus_reply_method_return(message, "u", (uint32_t) uid);
1656 }
1657
1658 static int method_lookup_dynamic_user_by_uid(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1659 _cleanup_free_ char *name = NULL;
1660 Manager *m = userdata;
1661 uid_t uid;
1662 int r;
1663
1664 assert(message);
1665 assert(m);
1666
1667 assert_cc(sizeof(uid_t) == sizeof(uint32_t));
1668 r = sd_bus_message_read_basic(message, 'u', &uid);
1669 if (r < 0)
1670 return r;
1671
1672 if (!MANAGER_IS_SYSTEM(m))
1673 return sd_bus_error_setf(error, SD_BUS_ERROR_NOT_SUPPORTED, "Dynamic users are only supported in the system instance.");
1674 if (!uid_is_valid(uid))
1675 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "User ID invalid: " UID_FMT, uid);
1676
1677 r = dynamic_user_lookup_uid(m, uid, &name);
1678 if (r == -ESRCH)
1679 return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_DYNAMIC_USER, "Dynamic user ID " UID_FMT " does not exist.", uid);
1680 if (r < 0)
1681 return r;
1682
1683 return sd_bus_reply_method_return(message, "s", name);
1684 }
1685
1686 static int method_get_dynamic_users(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1687 _cleanup_(sd_bus_message_unrefp) sd_bus_message *reply = NULL;
1688 Manager *m = userdata;
1689 DynamicUser *d;
1690 Iterator i;
1691 int r;
1692
1693 assert(message);
1694 assert(m);
1695
1696 assert_cc(sizeof(uid_t) == sizeof(uint32_t));
1697
1698 if (!MANAGER_IS_SYSTEM(m))
1699 return sd_bus_error_setf(error, SD_BUS_ERROR_NOT_SUPPORTED, "Dynamic users are only supported in the system instance.");
1700
1701 r = sd_bus_message_new_method_return(message, &reply);
1702 if (r < 0)
1703 return r;
1704
1705 r = sd_bus_message_open_container(reply, 'a', "(us)");
1706 if (r < 0)
1707 return r;
1708
1709 HASHMAP_FOREACH(d, m->dynamic_users, i) {
1710 uid_t uid;
1711
1712 r = dynamic_user_current(d, &uid);
1713 if (r == -EAGAIN) /* not realized yet? */
1714 continue;
1715 if (r < 0)
1716 return sd_bus_error_setf(error, SD_BUS_ERROR_FAILED, "Failed to look up a dynamic user.");
1717
1718 r = sd_bus_message_append(reply, "(us)", uid, d->name);
1719 if (r < 0)
1720 return r;
1721 }
1722
1723 r = sd_bus_message_close_container(reply);
1724 if (r < 0)
1725 return r;
1726
1727 return sd_bus_send(NULL, reply, NULL);
1728 }
1729
1730 static int list_unit_files_by_patterns(sd_bus_message *message, void *userdata, sd_bus_error *error, char **states, char **patterns) {
1731 _cleanup_(sd_bus_message_unrefp) sd_bus_message *reply = NULL;
1732 Manager *m = userdata;
1733 UnitFileList *item;
1734 Hashmap *h;
1735 Iterator i;
1736 int r;
1737
1738 assert(message);
1739 assert(m);
1740
1741 /* Anyone can call this method */
1742
1743 r = mac_selinux_access_check(message, "status", error);
1744 if (r < 0)
1745 return r;
1746
1747 r = sd_bus_message_new_method_return(message, &reply);
1748 if (r < 0)
1749 return r;
1750
1751 h = hashmap_new(&string_hash_ops);
1752 if (!h)
1753 return -ENOMEM;
1754
1755 r = unit_file_get_list(m->unit_file_scope, NULL, h, states, patterns);
1756 if (r < 0)
1757 goto fail;
1758
1759 r = sd_bus_message_open_container(reply, 'a', "(ss)");
1760 if (r < 0)
1761 goto fail;
1762
1763 HASHMAP_FOREACH(item, h, i) {
1764
1765 r = sd_bus_message_append(reply, "(ss)", item->path, unit_file_state_to_string(item->state));
1766 if (r < 0)
1767 goto fail;
1768 }
1769
1770 unit_file_list_free(h);
1771
1772 r = sd_bus_message_close_container(reply);
1773 if (r < 0)
1774 return r;
1775
1776 return sd_bus_send(NULL, reply, NULL);
1777
1778 fail:
1779 unit_file_list_free(h);
1780 return r;
1781 }
1782
1783 static int method_list_unit_files(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1784 return list_unit_files_by_patterns(message, userdata, error, NULL, NULL);
1785 }
1786
1787 static int method_list_unit_files_by_patterns(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1788 _cleanup_strv_free_ char **states = NULL;
1789 _cleanup_strv_free_ char **patterns = NULL;
1790 int r;
1791
1792 r = sd_bus_message_read_strv(message, &states);
1793 if (r < 0)
1794 return r;
1795
1796 r = sd_bus_message_read_strv(message, &patterns);
1797 if (r < 0)
1798 return r;
1799
1800 return list_unit_files_by_patterns(message, userdata, error, states, patterns);
1801 }
1802
1803 static int method_get_unit_file_state(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1804 Manager *m = userdata;
1805 const char *name;
1806 UnitFileState state;
1807 int r;
1808
1809 assert(message);
1810 assert(m);
1811
1812 /* Anyone can call this method */
1813
1814 r = mac_selinux_access_check(message, "status", error);
1815 if (r < 0)
1816 return r;
1817
1818 r = sd_bus_message_read(message, "s", &name);
1819 if (r < 0)
1820 return r;
1821
1822 r = unit_file_get_state(m->unit_file_scope, NULL, name, &state);
1823 if (r < 0)
1824 return r;
1825
1826 return sd_bus_reply_method_return(message, "s", unit_file_state_to_string(state));
1827 }
1828
1829 static int method_get_default_target(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1830 _cleanup_free_ char *default_target = NULL;
1831 Manager *m = userdata;
1832 int r;
1833
1834 assert(message);
1835 assert(m);
1836
1837 /* Anyone can call this method */
1838
1839 r = mac_selinux_access_check(message, "status", error);
1840 if (r < 0)
1841 return r;
1842
1843 r = unit_file_get_default(m->unit_file_scope, NULL, &default_target);
1844 if (r < 0)
1845 return r;
1846
1847 return sd_bus_reply_method_return(message, "s", default_target);
1848 }
1849
1850 static int send_unit_files_changed(sd_bus *bus, void *userdata) {
1851 _cleanup_(sd_bus_message_unrefp) sd_bus_message *message = NULL;
1852 int r;
1853
1854 assert(bus);
1855
1856 r = sd_bus_message_new_signal(bus, &message, "/org/freedesktop/systemd1", "org.freedesktop.systemd1.Manager", "UnitFilesChanged");
1857 if (r < 0)
1858 return r;
1859
1860 return sd_bus_send(bus, message, NULL);
1861 }
1862
1863 /* Create an error reply, using the error information from changes[]
1864 * if possible, and fall back to generating an error from error code c.
1865 * The error message only describes the first error.
1866 *
1867 * Coordinate with unit_file_dump_changes() in install.c.
1868 */
1869 static int install_error(
1870 sd_bus_error *error,
1871 int c,
1872 UnitFileChange *changes,
1873 size_t n_changes) {
1874
1875 size_t i;
1876 int r;
1877
1878 for (i = 0; i < n_changes; i++)
1879
1880 switch(changes[i].type) {
1881
1882 case 0 ... INT_MAX:
1883 continue;
1884
1885 case -EEXIST:
1886 if (changes[i].source)
1887 r = sd_bus_error_setf(error, BUS_ERROR_UNIT_EXISTS,
1888 "File %s already exists and is a symlink to %s.",
1889 changes[i].path, changes[i].source);
1890 else
1891 r = sd_bus_error_setf(error, BUS_ERROR_UNIT_EXISTS,
1892 "File %s already exists.",
1893 changes[i].path);
1894 goto found;
1895
1896 case -ERFKILL:
1897 r = sd_bus_error_setf(error, BUS_ERROR_UNIT_MASKED,
1898 "Unit file %s is masked.", changes[i].path);
1899 goto found;
1900
1901 case -EADDRNOTAVAIL:
1902 r = sd_bus_error_setf(error, BUS_ERROR_UNIT_GENERATED,
1903 "Unit %s is transient or generated.", changes[i].path);
1904 goto found;
1905
1906 case -EUCLEAN:
1907 r = sd_bus_error_setf(error, BUS_ERROR_BAD_UNIT_SETTING,
1908 "\"%s\" is not a valid unit name.",
1909 changes[i].path);
1910 goto found;
1911
1912 case -ELOOP:
1913 r = sd_bus_error_setf(error, BUS_ERROR_UNIT_LINKED,
1914 "Refusing to operate on alias name or linked unit file: %s",
1915 changes[i].path);
1916 goto found;
1917
1918 case -ENOENT:
1919 r = sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_UNIT,
1920 "Unit file %s does not exist.", changes[i].path);
1921 goto found;
1922
1923 default:
1924 r = sd_bus_error_set_errnof(error, changes[i].type, "File %s: %m", changes[i].path);
1925 goto found;
1926 }
1927
1928 r = c < 0 ? c : -EINVAL;
1929
1930 found:
1931 unit_file_changes_free(changes, n_changes);
1932 return r;
1933 }
1934
1935 static int reply_unit_file_changes_and_free(
1936 Manager *m,
1937 sd_bus_message *message,
1938 int carries_install_info,
1939 UnitFileChange *changes,
1940 size_t n_changes,
1941 sd_bus_error *error) {
1942
1943 _cleanup_(sd_bus_message_unrefp) sd_bus_message *reply = NULL;
1944 bool bad = false, good = false;
1945 size_t i;
1946 int r;
1947
1948 if (unit_file_changes_have_modification(changes, n_changes)) {
1949 r = bus_foreach_bus(m, NULL, send_unit_files_changed, NULL);
1950 if (r < 0)
1951 log_debug_errno(r, "Failed to send UnitFilesChanged signal: %m");
1952 }
1953
1954 r = sd_bus_message_new_method_return(message, &reply);
1955 if (r < 0)
1956 goto fail;
1957
1958 if (carries_install_info >= 0) {
1959 r = sd_bus_message_append(reply, "b", carries_install_info);
1960 if (r < 0)
1961 goto fail;
1962 }
1963
1964 r = sd_bus_message_open_container(reply, 'a', "(sss)");
1965 if (r < 0)
1966 goto fail;
1967
1968 for (i = 0; i < n_changes; i++) {
1969
1970 if (changes[i].type < 0) {
1971 bad = true;
1972 continue;
1973 }
1974
1975 r = sd_bus_message_append(
1976 reply, "(sss)",
1977 unit_file_change_type_to_string(changes[i].type),
1978 changes[i].path,
1979 changes[i].source);
1980 if (r < 0)
1981 goto fail;
1982
1983 good = true;
1984 }
1985
1986 /* If there was a failed change, and no successful change, then return the first failure as proper method call
1987 * error. */
1988 if (bad && !good)
1989 return install_error(error, 0, changes, n_changes);
1990
1991 r = sd_bus_message_close_container(reply);
1992 if (r < 0)
1993 goto fail;
1994
1995 unit_file_changes_free(changes, n_changes);
1996 return sd_bus_send(NULL, reply, NULL);
1997
1998 fail:
1999 unit_file_changes_free(changes, n_changes);
2000 return r;
2001 }
2002
2003 static int method_enable_unit_files_generic(
2004 sd_bus_message *message,
2005 Manager *m,
2006 int (*call)(UnitFileScope scope, UnitFileFlags flags, const char *root_dir, char *files[], UnitFileChange **changes, size_t *n_changes),
2007 bool carries_install_info,
2008 sd_bus_error *error) {
2009
2010 _cleanup_strv_free_ char **l = NULL;
2011 UnitFileChange *changes = NULL;
2012 size_t n_changes = 0;
2013 UnitFileFlags flags;
2014 int runtime, force, r;
2015
2016 assert(message);
2017 assert(m);
2018
2019 r = sd_bus_message_read_strv(message, &l);
2020 if (r < 0)
2021 return r;
2022
2023 r = sd_bus_message_read(message, "bb", &runtime, &force);
2024 if (r < 0)
2025 return r;
2026
2027 flags = unit_file_bools_to_flags(runtime, force);
2028
2029 r = bus_verify_manage_unit_files_async(m, message, error);
2030 if (r < 0)
2031 return r;
2032 if (r == 0)
2033 return 1; /* No authorization for now, but the async polkit stuff will call us again when it has it */
2034
2035 r = call(m->unit_file_scope, flags, NULL, l, &changes, &n_changes);
2036 if (r < 0)
2037 return install_error(error, r, changes, n_changes);
2038
2039 return reply_unit_file_changes_and_free(m, message, carries_install_info ? r : -1, changes, n_changes, error);
2040 }
2041
2042 static int method_enable_unit_files(sd_bus_message *message, void *userdata, sd_bus_error *error) {
2043 return method_enable_unit_files_generic(message, userdata, unit_file_enable, true, error);
2044 }
2045
2046 static int method_reenable_unit_files(sd_bus_message *message, void *userdata, sd_bus_error *error) {
2047 return method_enable_unit_files_generic(message, userdata, unit_file_reenable, true, error);
2048 }
2049
2050 static int method_link_unit_files(sd_bus_message *message, void *userdata, sd_bus_error *error) {
2051 return method_enable_unit_files_generic(message, userdata, unit_file_link, false, error);
2052 }
2053
2054 static int unit_file_preset_without_mode(UnitFileScope scope, UnitFileFlags flags, const char *root_dir, char **files, UnitFileChange **changes, size_t *n_changes) {
2055 return unit_file_preset(scope, flags, root_dir, files, UNIT_FILE_PRESET_FULL, changes, n_changes);
2056 }
2057
2058 static int method_preset_unit_files(sd_bus_message *message, void *userdata, sd_bus_error *error) {
2059 return method_enable_unit_files_generic(message, userdata, unit_file_preset_without_mode, true, error);
2060 }
2061
2062 static int method_mask_unit_files(sd_bus_message *message, void *userdata, sd_bus_error *error) {
2063 return method_enable_unit_files_generic(message, userdata, unit_file_mask, false, error);
2064 }
2065
2066 static int method_preset_unit_files_with_mode(sd_bus_message *message, void *userdata, sd_bus_error *error) {
2067
2068 _cleanup_strv_free_ char **l = NULL;
2069 UnitFileChange *changes = NULL;
2070 size_t n_changes = 0;
2071 Manager *m = userdata;
2072 UnitFilePresetMode mm;
2073 int runtime, force, r;
2074 UnitFileFlags flags;
2075 const char *mode;
2076
2077 assert(message);
2078 assert(m);
2079
2080 r = sd_bus_message_read_strv(message, &l);
2081 if (r < 0)
2082 return r;
2083
2084 r = sd_bus_message_read(message, "sbb", &mode, &runtime, &force);
2085 if (r < 0)
2086 return r;
2087
2088 flags = unit_file_bools_to_flags(runtime, force);
2089
2090 if (isempty(mode))
2091 mm = UNIT_FILE_PRESET_FULL;
2092 else {
2093 mm = unit_file_preset_mode_from_string(mode);
2094 if (mm < 0)
2095 return -EINVAL;
2096 }
2097
2098 r = bus_verify_manage_unit_files_async(m, message, error);
2099 if (r < 0)
2100 return r;
2101 if (r == 0)
2102 return 1; /* No authorization for now, but the async polkit stuff will call us again when it has it */
2103
2104 r = unit_file_preset(m->unit_file_scope, flags, NULL, l, mm, &changes, &n_changes);
2105 if (r < 0)
2106 return install_error(error, r, changes, n_changes);
2107
2108 return reply_unit_file_changes_and_free(m, message, r, changes, n_changes, error);
2109 }
2110
2111 static int method_disable_unit_files_generic(
2112 sd_bus_message *message,
2113 Manager *m,
2114 int (*call)(UnitFileScope scope, UnitFileFlags flags, const char *root_dir, char *files[], UnitFileChange **changes, size_t *n_changes),
2115 sd_bus_error *error) {
2116
2117 _cleanup_strv_free_ char **l = NULL;
2118 UnitFileChange *changes = NULL;
2119 size_t n_changes = 0;
2120 int r, runtime;
2121
2122 assert(message);
2123 assert(m);
2124
2125 r = sd_bus_message_read_strv(message, &l);
2126 if (r < 0)
2127 return r;
2128
2129 r = sd_bus_message_read(message, "b", &runtime);
2130 if (r < 0)
2131 return r;
2132
2133 r = bus_verify_manage_unit_files_async(m, message, error);
2134 if (r < 0)
2135 return r;
2136 if (r == 0)
2137 return 1; /* No authorization for now, but the async polkit stuff will call us again when it has it */
2138
2139 r = call(m->unit_file_scope, runtime ? UNIT_FILE_RUNTIME : 0, NULL, l, &changes, &n_changes);
2140 if (r < 0)
2141 return install_error(error, r, changes, n_changes);
2142
2143 return reply_unit_file_changes_and_free(m, message, -1, changes, n_changes, error);
2144 }
2145
2146 static int method_disable_unit_files(sd_bus_message *message, void *userdata, sd_bus_error *error) {
2147 return method_disable_unit_files_generic(message, userdata, unit_file_disable, error);
2148 }
2149
2150 static int method_unmask_unit_files(sd_bus_message *message, void *userdata, sd_bus_error *error) {
2151 return method_disable_unit_files_generic(message, userdata, unit_file_unmask, error);
2152 }
2153
2154 static int method_revert_unit_files(sd_bus_message *message, void *userdata, sd_bus_error *error) {
2155 _cleanup_strv_free_ char **l = NULL;
2156 UnitFileChange *changes = NULL;
2157 size_t n_changes = 0;
2158 Manager *m = userdata;
2159 int r;
2160
2161 assert(message);
2162 assert(m);
2163
2164 r = sd_bus_message_read_strv(message, &l);
2165 if (r < 0)
2166 return r;
2167
2168 r = bus_verify_manage_unit_files_async(m, message, error);
2169 if (r < 0)
2170 return r;
2171 if (r == 0)
2172 return 1; /* No authorization for now, but the async polkit stuff will call us again when it has it */
2173
2174 r = unit_file_revert(m->unit_file_scope, NULL, l, &changes, &n_changes);
2175 if (r < 0)
2176 return install_error(error, r, changes, n_changes);
2177
2178 return reply_unit_file_changes_and_free(m, message, -1, changes, n_changes, error);
2179 }
2180
2181 static int method_set_default_target(sd_bus_message *message, void *userdata, sd_bus_error *error) {
2182 UnitFileChange *changes = NULL;
2183 size_t n_changes = 0;
2184 Manager *m = userdata;
2185 const char *name;
2186 int force, r;
2187
2188 assert(message);
2189 assert(m);
2190
2191 r = mac_selinux_access_check(message, "enable", error);
2192 if (r < 0)
2193 return r;
2194
2195 r = sd_bus_message_read(message, "sb", &name, &force);
2196 if (r < 0)
2197 return r;
2198
2199 r = bus_verify_manage_unit_files_async(m, message, error);
2200 if (r < 0)
2201 return r;
2202 if (r == 0)
2203 return 1; /* No authorization for now, but the async polkit stuff will call us again when it has it */
2204
2205 r = unit_file_set_default(m->unit_file_scope, force ? UNIT_FILE_FORCE : 0, NULL, name, &changes, &n_changes);
2206 if (r < 0)
2207 return install_error(error, r, changes, n_changes);
2208
2209 return reply_unit_file_changes_and_free(m, message, -1, changes, n_changes, error);
2210 }
2211
2212 static int method_preset_all_unit_files(sd_bus_message *message, void *userdata, sd_bus_error *error) {
2213 UnitFileChange *changes = NULL;
2214 size_t n_changes = 0;
2215 Manager *m = userdata;
2216 UnitFilePresetMode mm;
2217 const char *mode;
2218 UnitFileFlags flags;
2219 int force, runtime, r;
2220
2221 assert(message);
2222 assert(m);
2223
2224 r = mac_selinux_access_check(message, "enable", error);
2225 if (r < 0)
2226 return r;
2227
2228 r = sd_bus_message_read(message, "sbb", &mode, &runtime, &force);
2229 if (r < 0)
2230 return r;
2231
2232 flags = unit_file_bools_to_flags(runtime, force);
2233
2234 if (isempty(mode))
2235 mm = UNIT_FILE_PRESET_FULL;
2236 else {
2237 mm = unit_file_preset_mode_from_string(mode);
2238 if (mm < 0)
2239 return -EINVAL;
2240 }
2241
2242 r = bus_verify_manage_unit_files_async(m, message, error);
2243 if (r < 0)
2244 return r;
2245 if (r == 0)
2246 return 1; /* No authorization for now, but the async polkit stuff will call us again when it has it */
2247
2248 r = unit_file_preset_all(m->unit_file_scope, flags, NULL, mm, &changes, &n_changes);
2249 if (r < 0)
2250 return install_error(error, r, changes, n_changes);
2251
2252 return reply_unit_file_changes_and_free(m, message, -1, changes, n_changes, error);
2253 }
2254
2255 static int method_add_dependency_unit_files(sd_bus_message *message, void *userdata, sd_bus_error *error) {
2256 _cleanup_strv_free_ char **l = NULL;
2257 Manager *m = userdata;
2258 UnitFileChange *changes = NULL;
2259 size_t n_changes = 0;
2260 int runtime, force, r;
2261 char *target, *type;
2262 UnitDependency dep;
2263 UnitFileFlags flags;
2264
2265 assert(message);
2266 assert(m);
2267
2268 r = bus_verify_manage_unit_files_async(m, message, error);
2269 if (r < 0)
2270 return r;
2271 if (r == 0)
2272 return 1; /* No authorization for now, but the async polkit stuff will call us again when it has it */
2273
2274 r = sd_bus_message_read_strv(message, &l);
2275 if (r < 0)
2276 return r;
2277
2278 r = sd_bus_message_read(message, "ssbb", &target, &type, &runtime, &force);
2279 if (r < 0)
2280 return r;
2281
2282 flags = unit_file_bools_to_flags(runtime, force);
2283
2284 dep = unit_dependency_from_string(type);
2285 if (dep < 0)
2286 return -EINVAL;
2287
2288 r = unit_file_add_dependency(m->unit_file_scope, flags, NULL, l, target, dep, &changes, &n_changes);
2289 if (r < 0)
2290 return install_error(error, r, changes, n_changes);
2291
2292 return reply_unit_file_changes_and_free(m, message, -1, changes, n_changes, error);
2293 }
2294
2295 static int method_get_unit_file_links(sd_bus_message *message, void *userdata, sd_bus_error *error) {
2296 _cleanup_(sd_bus_message_unrefp) sd_bus_message *reply = NULL;
2297 UnitFileChange *changes = NULL;
2298 size_t n_changes = 0, i;
2299 UnitFileFlags flags;
2300 const char *name;
2301 char **p;
2302 int runtime, r;
2303
2304 r = sd_bus_message_read(message, "sb", &name, &runtime);
2305 if (r < 0)
2306 return r;
2307
2308 r = sd_bus_message_new_method_return(message, &reply);
2309 if (r < 0)
2310 return r;
2311
2312 r = sd_bus_message_open_container(reply, SD_BUS_TYPE_ARRAY, "s");
2313 if (r < 0)
2314 return r;
2315
2316 p = STRV_MAKE(name);
2317 flags = UNIT_FILE_DRY_RUN |
2318 (runtime ? UNIT_FILE_RUNTIME : 0);
2319
2320 r = unit_file_disable(UNIT_FILE_SYSTEM, flags, NULL, p, &changes, &n_changes);
2321 if (r < 0)
2322 return log_error_errno(r, "Failed to get file links for %s: %m", name);
2323
2324 for (i = 0; i < n_changes; i++)
2325 if (changes[i].type == UNIT_FILE_UNLINK) {
2326 r = sd_bus_message_append(reply, "s", changes[i].path);
2327 if (r < 0)
2328 return r;
2329 }
2330
2331 r = sd_bus_message_close_container(reply);
2332 if (r < 0)
2333 return r;
2334
2335 return sd_bus_send(NULL, reply, NULL);
2336 }
2337
2338 static int method_get_job_waiting(sd_bus_message *message, void *userdata, sd_bus_error *error) {
2339 Manager *m = userdata;
2340 uint32_t id;
2341 Job *j;
2342 int r;
2343
2344 assert(message);
2345 assert(m);
2346
2347 r = sd_bus_message_read(message, "u", &id);
2348 if (r < 0)
2349 return r;
2350
2351 j = manager_get_job(m, id);
2352 if (!j)
2353 return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_JOB, "Job %u does not exist.", (unsigned) id);
2354
2355 return bus_job_method_get_waiting_jobs(message, j, error);
2356 }
2357
2358 static int method_abandon_scope(sd_bus_message *message, void *userdata, sd_bus_error *error) {
2359 Manager *m = userdata;
2360 const char *name;
2361 Unit *u;
2362 int r;
2363
2364 assert(message);
2365 assert(m);
2366
2367 r = sd_bus_message_read(message, "s", &name);
2368 if (r < 0)
2369 return r;
2370
2371 r = bus_get_unit_by_name(m, message, name, &u, error);
2372 if (r < 0)
2373 return r;
2374
2375 if (u->type != UNIT_SCOPE)
2376 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Unit '%s' is not a scope unit, refusing.", name);
2377
2378 return bus_scope_method_abandon(message, u, error);
2379 }
2380
2381 const sd_bus_vtable bus_manager_vtable[] = {
2382 SD_BUS_VTABLE_START(0),
2383
2384 SD_BUS_PROPERTY("Version", "s", property_get_version, 0, SD_BUS_VTABLE_PROPERTY_CONST),
2385 SD_BUS_PROPERTY("Features", "s", property_get_features, 0, SD_BUS_VTABLE_PROPERTY_CONST),
2386 SD_BUS_PROPERTY("Virtualization", "s", property_get_virtualization, 0, SD_BUS_VTABLE_PROPERTY_CONST),
2387 SD_BUS_PROPERTY("Architecture", "s", property_get_architecture, 0, SD_BUS_VTABLE_PROPERTY_CONST),
2388 SD_BUS_PROPERTY("Tainted", "s", property_get_tainted, 0, SD_BUS_VTABLE_PROPERTY_CONST),
2389 BUS_PROPERTY_DUAL_TIMESTAMP("FirmwareTimestamp", offsetof(Manager, timestamps[MANAGER_TIMESTAMP_FIRMWARE]), SD_BUS_VTABLE_PROPERTY_CONST),
2390 BUS_PROPERTY_DUAL_TIMESTAMP("LoaderTimestamp", offsetof(Manager, timestamps[MANAGER_TIMESTAMP_LOADER]), SD_BUS_VTABLE_PROPERTY_CONST),
2391 BUS_PROPERTY_DUAL_TIMESTAMP("KernelTimestamp", offsetof(Manager, timestamps[MANAGER_TIMESTAMP_KERNEL]), SD_BUS_VTABLE_PROPERTY_CONST),
2392 BUS_PROPERTY_DUAL_TIMESTAMP("InitRDTimestamp", offsetof(Manager, timestamps[MANAGER_TIMESTAMP_INITRD]), SD_BUS_VTABLE_PROPERTY_CONST),
2393 BUS_PROPERTY_DUAL_TIMESTAMP("UserspaceTimestamp", offsetof(Manager, timestamps[MANAGER_TIMESTAMP_USERSPACE]), SD_BUS_VTABLE_PROPERTY_CONST),
2394 BUS_PROPERTY_DUAL_TIMESTAMP("FinishTimestamp", offsetof(Manager, timestamps[MANAGER_TIMESTAMP_FINISH]), SD_BUS_VTABLE_PROPERTY_CONST),
2395 BUS_PROPERTY_DUAL_TIMESTAMP("SecurityStartTimestamp", offsetof(Manager, timestamps[MANAGER_TIMESTAMP_SECURITY_START]), SD_BUS_VTABLE_PROPERTY_CONST),
2396 BUS_PROPERTY_DUAL_TIMESTAMP("SecurityFinishTimestamp", offsetof(Manager, timestamps[MANAGER_TIMESTAMP_SECURITY_FINISH]), SD_BUS_VTABLE_PROPERTY_CONST),
2397 BUS_PROPERTY_DUAL_TIMESTAMP("GeneratorsStartTimestamp", offsetof(Manager, timestamps[MANAGER_TIMESTAMP_GENERATORS_START]), SD_BUS_VTABLE_PROPERTY_CONST),
2398 BUS_PROPERTY_DUAL_TIMESTAMP("GeneratorsFinishTimestamp", offsetof(Manager, timestamps[MANAGER_TIMESTAMP_GENERATORS_FINISH]), SD_BUS_VTABLE_PROPERTY_CONST),
2399 BUS_PROPERTY_DUAL_TIMESTAMP("UnitsLoadStartTimestamp", offsetof(Manager, timestamps[MANAGER_TIMESTAMP_UNITS_LOAD_START]), SD_BUS_VTABLE_PROPERTY_CONST),
2400 BUS_PROPERTY_DUAL_TIMESTAMP("UnitsLoadFinishTimestamp", offsetof(Manager, timestamps[MANAGER_TIMESTAMP_UNITS_LOAD_FINISH]), SD_BUS_VTABLE_PROPERTY_CONST),
2401 BUS_PROPERTY_DUAL_TIMESTAMP("InitRDSecurityStartTimestamp", offsetof(Manager, timestamps[MANAGER_TIMESTAMP_INITRD_SECURITY_START]), SD_BUS_VTABLE_PROPERTY_CONST),
2402 BUS_PROPERTY_DUAL_TIMESTAMP("InitRDSecurityFinishTimestamp", offsetof(Manager, timestamps[MANAGER_TIMESTAMP_INITRD_SECURITY_FINISH]), SD_BUS_VTABLE_PROPERTY_CONST),
2403 BUS_PROPERTY_DUAL_TIMESTAMP("InitRDGeneratorsStartTimestamp", offsetof(Manager, timestamps[MANAGER_TIMESTAMP_INITRD_GENERATORS_START]), SD_BUS_VTABLE_PROPERTY_CONST),
2404 BUS_PROPERTY_DUAL_TIMESTAMP("InitRDGeneratorsFinishTimestamp", offsetof(Manager, timestamps[MANAGER_TIMESTAMP_INITRD_GENERATORS_FINISH]), SD_BUS_VTABLE_PROPERTY_CONST),
2405 BUS_PROPERTY_DUAL_TIMESTAMP("InitRDUnitsLoadStartTimestamp", offsetof(Manager, timestamps[MANAGER_TIMESTAMP_INITRD_UNITS_LOAD_START]), SD_BUS_VTABLE_PROPERTY_CONST),
2406 BUS_PROPERTY_DUAL_TIMESTAMP("InitRDUnitsLoadFinishTimestamp", offsetof(Manager, timestamps[MANAGER_TIMESTAMP_INITRD_UNITS_LOAD_FINISH]), SD_BUS_VTABLE_PROPERTY_CONST),
2407 SD_BUS_WRITABLE_PROPERTY("LogLevel", "s", property_get_log_level, property_set_log_level, 0, 0),
2408 SD_BUS_WRITABLE_PROPERTY("LogTarget", "s", property_get_log_target, property_set_log_target, 0, 0),
2409 SD_BUS_PROPERTY("NNames", "u", property_get_hashmap_size, offsetof(Manager, units), 0),
2410 SD_BUS_PROPERTY("NFailedUnits", "u", property_get_set_size, offsetof(Manager, failed_units), SD_BUS_VTABLE_PROPERTY_EMITS_CHANGE),
2411 SD_BUS_PROPERTY("NJobs", "u", property_get_hashmap_size, offsetof(Manager, jobs), 0),
2412 SD_BUS_PROPERTY("NInstalledJobs", "u", bus_property_get_unsigned, offsetof(Manager, n_installed_jobs), 0),
2413 SD_BUS_PROPERTY("NFailedJobs", "u", bus_property_get_unsigned, offsetof(Manager, n_failed_jobs), 0),
2414 SD_BUS_PROPERTY("Progress", "d", property_get_progress, 0, 0),
2415 SD_BUS_PROPERTY("Environment", "as", property_get_environment, 0, 0),
2416 SD_BUS_PROPERTY("ConfirmSpawn", "b", bus_property_get_bool, offsetof(Manager, confirm_spawn), SD_BUS_VTABLE_PROPERTY_CONST),
2417 SD_BUS_PROPERTY("ShowStatus", "b", property_get_show_status, 0, 0),
2418 SD_BUS_PROPERTY("UnitPath", "as", NULL, offsetof(Manager, lookup_paths.search_path), SD_BUS_VTABLE_PROPERTY_CONST),
2419 SD_BUS_PROPERTY("DefaultStandardOutput", "s", bus_property_get_exec_output, offsetof(Manager, default_std_output), SD_BUS_VTABLE_PROPERTY_CONST),
2420 SD_BUS_PROPERTY("DefaultStandardError", "s", bus_property_get_exec_output, offsetof(Manager, default_std_output), SD_BUS_VTABLE_PROPERTY_CONST),
2421 SD_BUS_WRITABLE_PROPERTY("RuntimeWatchdogUSec", "t", bus_property_get_usec, property_set_runtime_watchdog, offsetof(Manager, runtime_watchdog), 0),
2422 SD_BUS_WRITABLE_PROPERTY("RebootWatchdogUSec", "t", bus_property_get_usec, bus_property_set_usec, offsetof(Manager, reboot_watchdog), 0),
2423 /* The following item is an obsolete alias */
2424 SD_BUS_WRITABLE_PROPERTY("ShutdownWatchdogUSec", "t", bus_property_get_usec, bus_property_set_usec, offsetof(Manager, reboot_watchdog), SD_BUS_VTABLE_HIDDEN),
2425 SD_BUS_WRITABLE_PROPERTY("KExecWatchdogUSec", "t", bus_property_get_usec, bus_property_set_usec, offsetof(Manager, kexec_watchdog), 0),
2426 SD_BUS_WRITABLE_PROPERTY("ServiceWatchdogs", "b", bus_property_get_bool, bus_property_set_bool, offsetof(Manager, service_watchdogs), 0),
2427 SD_BUS_PROPERTY("ControlGroup", "s", NULL, offsetof(Manager, cgroup_root), 0),
2428 SD_BUS_PROPERTY("SystemState", "s", property_get_system_state, 0, 0),
2429 SD_BUS_PROPERTY("ExitCode", "y", bus_property_get_unsigned, offsetof(Manager, return_value), 0),
2430 SD_BUS_PROPERTY("DefaultTimerAccuracyUSec", "t", bus_property_get_usec, offsetof(Manager, default_timer_accuracy_usec), SD_BUS_VTABLE_PROPERTY_CONST),
2431 SD_BUS_PROPERTY("DefaultTimeoutStartUSec", "t", bus_property_get_usec, offsetof(Manager, default_timeout_start_usec), SD_BUS_VTABLE_PROPERTY_CONST),
2432 SD_BUS_PROPERTY("DefaultTimeoutStopUSec", "t", bus_property_get_usec, offsetof(Manager, default_timeout_stop_usec), SD_BUS_VTABLE_PROPERTY_CONST),
2433 SD_BUS_PROPERTY("DefaultTimeoutAbortUSec", "t", property_get_default_timeout_abort_usec, 0, 0),
2434 SD_BUS_PROPERTY("DefaultRestartUSec", "t", bus_property_get_usec, offsetof(Manager, default_restart_usec), SD_BUS_VTABLE_PROPERTY_CONST),
2435 SD_BUS_PROPERTY("DefaultStartLimitIntervalUSec", "t", bus_property_get_usec, offsetof(Manager, default_start_limit_interval), SD_BUS_VTABLE_PROPERTY_CONST),
2436 /* The following two items are obsolete alias */
2437 SD_BUS_PROPERTY("DefaultStartLimitIntervalSec", "t", bus_property_get_usec, offsetof(Manager, default_start_limit_interval), SD_BUS_VTABLE_PROPERTY_CONST|SD_BUS_VTABLE_HIDDEN),
2438 SD_BUS_PROPERTY("DefaultStartLimitInterval", "t", bus_property_get_usec, offsetof(Manager, default_start_limit_interval), SD_BUS_VTABLE_PROPERTY_CONST|SD_BUS_VTABLE_HIDDEN),
2439 SD_BUS_PROPERTY("DefaultStartLimitBurst", "u", bus_property_get_unsigned, offsetof(Manager, default_start_limit_burst), SD_BUS_VTABLE_PROPERTY_CONST),
2440 SD_BUS_PROPERTY("DefaultCPUAccounting", "b", bus_property_get_bool, offsetof(Manager, default_cpu_accounting), SD_BUS_VTABLE_PROPERTY_CONST),
2441 SD_BUS_PROPERTY("DefaultBlockIOAccounting", "b", bus_property_get_bool, offsetof(Manager, default_blockio_accounting), SD_BUS_VTABLE_PROPERTY_CONST),
2442 SD_BUS_PROPERTY("DefaultMemoryAccounting", "b", bus_property_get_bool, offsetof(Manager, default_memory_accounting), SD_BUS_VTABLE_PROPERTY_CONST),
2443 SD_BUS_PROPERTY("DefaultTasksAccounting", "b", bus_property_get_bool, offsetof(Manager, default_tasks_accounting), SD_BUS_VTABLE_PROPERTY_CONST),
2444 SD_BUS_PROPERTY("DefaultLimitCPU", "t", bus_property_get_rlimit, offsetof(Manager, rlimit[RLIMIT_CPU]), SD_BUS_VTABLE_PROPERTY_CONST),
2445 SD_BUS_PROPERTY("DefaultLimitCPUSoft", "t", bus_property_get_rlimit, offsetof(Manager, rlimit[RLIMIT_CPU]), SD_BUS_VTABLE_PROPERTY_CONST),
2446 SD_BUS_PROPERTY("DefaultLimitFSIZE", "t", bus_property_get_rlimit, offsetof(Manager, rlimit[RLIMIT_FSIZE]), SD_BUS_VTABLE_PROPERTY_CONST),
2447 SD_BUS_PROPERTY("DefaultLimitFSIZESoft", "t", bus_property_get_rlimit, offsetof(Manager, rlimit[RLIMIT_FSIZE]), SD_BUS_VTABLE_PROPERTY_CONST),
2448 SD_BUS_PROPERTY("DefaultLimitDATA", "t", bus_property_get_rlimit, offsetof(Manager, rlimit[RLIMIT_DATA]), SD_BUS_VTABLE_PROPERTY_CONST),
2449 SD_BUS_PROPERTY("DefaultLimitDATASoft", "t", bus_property_get_rlimit, offsetof(Manager, rlimit[RLIMIT_DATA]), SD_BUS_VTABLE_PROPERTY_CONST),
2450 SD_BUS_PROPERTY("DefaultLimitSTACK", "t", bus_property_get_rlimit, offsetof(Manager, rlimit[RLIMIT_STACK]), SD_BUS_VTABLE_PROPERTY_CONST),
2451 SD_BUS_PROPERTY("DefaultLimitSTACKSoft", "t", bus_property_get_rlimit, offsetof(Manager, rlimit[RLIMIT_STACK]), SD_BUS_VTABLE_PROPERTY_CONST),
2452 SD_BUS_PROPERTY("DefaultLimitCORE", "t", bus_property_get_rlimit, offsetof(Manager, rlimit[RLIMIT_CORE]), SD_BUS_VTABLE_PROPERTY_CONST),
2453 SD_BUS_PROPERTY("DefaultLimitCORESoft", "t", bus_property_get_rlimit, offsetof(Manager, rlimit[RLIMIT_CORE]), SD_BUS_VTABLE_PROPERTY_CONST),
2454 SD_BUS_PROPERTY("DefaultLimitRSS", "t", bus_property_get_rlimit, offsetof(Manager, rlimit[RLIMIT_RSS]), SD_BUS_VTABLE_PROPERTY_CONST),
2455 SD_BUS_PROPERTY("DefaultLimitRSSSoft", "t", bus_property_get_rlimit, offsetof(Manager, rlimit[RLIMIT_RSS]), SD_BUS_VTABLE_PROPERTY_CONST),
2456 SD_BUS_PROPERTY("DefaultLimitNOFILE", "t", bus_property_get_rlimit, offsetof(Manager, rlimit[RLIMIT_NOFILE]), SD_BUS_VTABLE_PROPERTY_CONST),
2457 SD_BUS_PROPERTY("DefaultLimitNOFILESoft", "t", bus_property_get_rlimit, offsetof(Manager, rlimit[RLIMIT_NOFILE]), SD_BUS_VTABLE_PROPERTY_CONST),
2458 SD_BUS_PROPERTY("DefaultLimitAS", "t", bus_property_get_rlimit, offsetof(Manager, rlimit[RLIMIT_AS]), SD_BUS_VTABLE_PROPERTY_CONST),
2459 SD_BUS_PROPERTY("DefaultLimitASSoft", "t", bus_property_get_rlimit, offsetof(Manager, rlimit[RLIMIT_AS]), SD_BUS_VTABLE_PROPERTY_CONST),
2460 SD_BUS_PROPERTY("DefaultLimitNPROC", "t", bus_property_get_rlimit, offsetof(Manager, rlimit[RLIMIT_NPROC]), SD_BUS_VTABLE_PROPERTY_CONST),
2461 SD_BUS_PROPERTY("DefaultLimitNPROCSoft", "t", bus_property_get_rlimit, offsetof(Manager, rlimit[RLIMIT_NPROC]), SD_BUS_VTABLE_PROPERTY_CONST),
2462 SD_BUS_PROPERTY("DefaultLimitMEMLOCK", "t", bus_property_get_rlimit, offsetof(Manager, rlimit[RLIMIT_MEMLOCK]), SD_BUS_VTABLE_PROPERTY_CONST),
2463 SD_BUS_PROPERTY("DefaultLimitMEMLOCKSoft", "t", bus_property_get_rlimit, offsetof(Manager, rlimit[RLIMIT_MEMLOCK]), SD_BUS_VTABLE_PROPERTY_CONST),
2464 SD_BUS_PROPERTY("DefaultLimitLOCKS", "t", bus_property_get_rlimit, offsetof(Manager, rlimit[RLIMIT_LOCKS]), SD_BUS_VTABLE_PROPERTY_CONST),
2465 SD_BUS_PROPERTY("DefaultLimitLOCKSSoft", "t", bus_property_get_rlimit, offsetof(Manager, rlimit[RLIMIT_LOCKS]), SD_BUS_VTABLE_PROPERTY_CONST),
2466 SD_BUS_PROPERTY("DefaultLimitSIGPENDING", "t", bus_property_get_rlimit, offsetof(Manager, rlimit[RLIMIT_SIGPENDING]), SD_BUS_VTABLE_PROPERTY_CONST),
2467 SD_BUS_PROPERTY("DefaultLimitSIGPENDINGSoft", "t", bus_property_get_rlimit, offsetof(Manager, rlimit[RLIMIT_SIGPENDING]), SD_BUS_VTABLE_PROPERTY_CONST),
2468 SD_BUS_PROPERTY("DefaultLimitMSGQUEUE", "t", bus_property_get_rlimit, offsetof(Manager, rlimit[RLIMIT_MSGQUEUE]), SD_BUS_VTABLE_PROPERTY_CONST),
2469 SD_BUS_PROPERTY("DefaultLimitMSGQUEUESoft", "t", bus_property_get_rlimit, offsetof(Manager, rlimit[RLIMIT_MSGQUEUE]), SD_BUS_VTABLE_PROPERTY_CONST),
2470 SD_BUS_PROPERTY("DefaultLimitNICE", "t", bus_property_get_rlimit, offsetof(Manager, rlimit[RLIMIT_NICE]), SD_BUS_VTABLE_PROPERTY_CONST),
2471 SD_BUS_PROPERTY("DefaultLimitNICESoft", "t", bus_property_get_rlimit, offsetof(Manager, rlimit[RLIMIT_NICE]), SD_BUS_VTABLE_PROPERTY_CONST),
2472 SD_BUS_PROPERTY("DefaultLimitRTPRIO", "t", bus_property_get_rlimit, offsetof(Manager, rlimit[RLIMIT_RTPRIO]), SD_BUS_VTABLE_PROPERTY_CONST),
2473 SD_BUS_PROPERTY("DefaultLimitRTPRIOSoft", "t", bus_property_get_rlimit, offsetof(Manager, rlimit[RLIMIT_RTPRIO]), SD_BUS_VTABLE_PROPERTY_CONST),
2474 SD_BUS_PROPERTY("DefaultLimitRTTIME", "t", bus_property_get_rlimit, offsetof(Manager, rlimit[RLIMIT_RTTIME]), SD_BUS_VTABLE_PROPERTY_CONST),
2475 SD_BUS_PROPERTY("DefaultLimitRTTIMESoft", "t", bus_property_get_rlimit, offsetof(Manager, rlimit[RLIMIT_RTTIME]), SD_BUS_VTABLE_PROPERTY_CONST),
2476 SD_BUS_PROPERTY("DefaultTasksMax", "t", bus_property_get_tasks_max, offsetof(Manager, default_tasks_max), 0),
2477 SD_BUS_PROPERTY("TimerSlackNSec", "t", property_get_timer_slack_nsec, 0, SD_BUS_VTABLE_PROPERTY_CONST),
2478 SD_BUS_PROPERTY("DefaultOOMPolicy", "s", bus_property_get_oom_policy, offsetof(Manager, default_oom_policy), SD_BUS_VTABLE_PROPERTY_CONST),
2479
2480 SD_BUS_METHOD("GetUnit", "s", "o", method_get_unit, SD_BUS_VTABLE_UNPRIVILEGED),
2481 SD_BUS_METHOD("GetUnitByPID", "u", "o", method_get_unit_by_pid, SD_BUS_VTABLE_UNPRIVILEGED),
2482 SD_BUS_METHOD("GetUnitByInvocationID", "ay", "o", method_get_unit_by_invocation_id, SD_BUS_VTABLE_UNPRIVILEGED),
2483 SD_BUS_METHOD("GetUnitByControlGroup", "s", "o", method_get_unit_by_control_group, SD_BUS_VTABLE_UNPRIVILEGED),
2484 SD_BUS_METHOD("LoadUnit", "s", "o", method_load_unit, SD_BUS_VTABLE_UNPRIVILEGED),
2485 SD_BUS_METHOD("StartUnit", "ss", "o", method_start_unit, SD_BUS_VTABLE_UNPRIVILEGED),
2486 SD_BUS_METHOD("StartUnitReplace", "sss", "o", method_start_unit_replace, SD_BUS_VTABLE_UNPRIVILEGED),
2487 SD_BUS_METHOD("StopUnit", "ss", "o", method_stop_unit, SD_BUS_VTABLE_UNPRIVILEGED),
2488 SD_BUS_METHOD("ReloadUnit", "ss", "o", method_reload_unit, SD_BUS_VTABLE_UNPRIVILEGED),
2489 SD_BUS_METHOD("RestartUnit", "ss", "o", method_restart_unit, SD_BUS_VTABLE_UNPRIVILEGED),
2490 SD_BUS_METHOD("TryRestartUnit", "ss", "o", method_try_restart_unit, SD_BUS_VTABLE_UNPRIVILEGED),
2491 SD_BUS_METHOD("ReloadOrRestartUnit", "ss", "o", method_reload_or_restart_unit, SD_BUS_VTABLE_UNPRIVILEGED),
2492 SD_BUS_METHOD("ReloadOrTryRestartUnit", "ss", "o", method_reload_or_try_restart_unit, SD_BUS_VTABLE_UNPRIVILEGED),
2493 SD_BUS_METHOD("EnqueueUnitJob", "sss", "uososa(uosos)", method_enqueue_unit_job, SD_BUS_VTABLE_UNPRIVILEGED),
2494 SD_BUS_METHOD("KillUnit", "ssi", NULL, method_kill_unit, SD_BUS_VTABLE_UNPRIVILEGED),
2495 SD_BUS_METHOD("CleanUnit", "sas", NULL, method_clean_unit, SD_BUS_VTABLE_UNPRIVILEGED),
2496 SD_BUS_METHOD("ResetFailedUnit", "s", NULL, method_reset_failed_unit, SD_BUS_VTABLE_UNPRIVILEGED),
2497 SD_BUS_METHOD("SetUnitProperties", "sba(sv)", NULL, method_set_unit_properties, SD_BUS_VTABLE_UNPRIVILEGED),
2498 SD_BUS_METHOD("RefUnit", "s", NULL, method_ref_unit, SD_BUS_VTABLE_UNPRIVILEGED),
2499 SD_BUS_METHOD("UnrefUnit", "s", NULL, method_unref_unit, SD_BUS_VTABLE_UNPRIVILEGED),
2500 SD_BUS_METHOD("StartTransientUnit", "ssa(sv)a(sa(sv))", "o", method_start_transient_unit, SD_BUS_VTABLE_UNPRIVILEGED),
2501 SD_BUS_METHOD("GetUnitProcesses", "s", "a(sus)", method_get_unit_processes, SD_BUS_VTABLE_UNPRIVILEGED),
2502 SD_BUS_METHOD("AttachProcessesToUnit", "ssau", NULL, method_attach_processes_to_unit, SD_BUS_VTABLE_UNPRIVILEGED),
2503 SD_BUS_METHOD("AbandonScope", "s", NULL, method_abandon_scope, SD_BUS_VTABLE_UNPRIVILEGED),
2504 SD_BUS_METHOD("GetJob", "u", "o", method_get_job, SD_BUS_VTABLE_UNPRIVILEGED),
2505 SD_BUS_METHOD("GetJobAfter", "u", "a(usssoo)", method_get_job_waiting, SD_BUS_VTABLE_UNPRIVILEGED),
2506 SD_BUS_METHOD("GetJobBefore", "u", "a(usssoo)", method_get_job_waiting, SD_BUS_VTABLE_UNPRIVILEGED),
2507 SD_BUS_METHOD("CancelJob", "u", NULL, method_cancel_job, SD_BUS_VTABLE_UNPRIVILEGED),
2508 SD_BUS_METHOD("ClearJobs", NULL, NULL, method_clear_jobs, SD_BUS_VTABLE_UNPRIVILEGED),
2509 SD_BUS_METHOD("ResetFailed", NULL, NULL, method_reset_failed, SD_BUS_VTABLE_UNPRIVILEGED),
2510 SD_BUS_METHOD("ListUnits", NULL, "a(ssssssouso)", method_list_units, SD_BUS_VTABLE_UNPRIVILEGED),
2511 SD_BUS_METHOD("ListUnitsFiltered", "as", "a(ssssssouso)", method_list_units_filtered, SD_BUS_VTABLE_UNPRIVILEGED),
2512 SD_BUS_METHOD("ListUnitsByPatterns", "asas", "a(ssssssouso)", method_list_units_by_patterns, SD_BUS_VTABLE_UNPRIVILEGED),
2513 SD_BUS_METHOD("ListUnitsByNames", "as", "a(ssssssouso)", method_list_units_by_names, SD_BUS_VTABLE_UNPRIVILEGED),
2514 SD_BUS_METHOD("ListJobs", NULL, "a(usssoo)", method_list_jobs, SD_BUS_VTABLE_UNPRIVILEGED),
2515 SD_BUS_METHOD("Subscribe", NULL, NULL, method_subscribe, SD_BUS_VTABLE_UNPRIVILEGED),
2516 SD_BUS_METHOD("Unsubscribe", NULL, NULL, method_unsubscribe, SD_BUS_VTABLE_UNPRIVILEGED),
2517 SD_BUS_METHOD("Dump", NULL, "s", method_dump, SD_BUS_VTABLE_UNPRIVILEGED),
2518 SD_BUS_METHOD("DumpByFileDescriptor", NULL, "h", method_dump_by_fd, SD_BUS_VTABLE_UNPRIVILEGED),
2519 SD_BUS_METHOD("CreateSnapshot", "sb", "o", method_refuse_snapshot, SD_BUS_VTABLE_UNPRIVILEGED|SD_BUS_VTABLE_HIDDEN),
2520 SD_BUS_METHOD("RemoveSnapshot", "s", NULL, method_refuse_snapshot, SD_BUS_VTABLE_UNPRIVILEGED|SD_BUS_VTABLE_HIDDEN),
2521 SD_BUS_METHOD("Reload", NULL, NULL, method_reload, SD_BUS_VTABLE_UNPRIVILEGED),
2522 SD_BUS_METHOD("Reexecute", NULL, NULL, method_reexecute, SD_BUS_VTABLE_UNPRIVILEGED),
2523 SD_BUS_METHOD("Exit", NULL, NULL, method_exit, 0),
2524 SD_BUS_METHOD("Reboot", NULL, NULL, method_reboot, SD_BUS_VTABLE_CAPABILITY(CAP_SYS_BOOT)),
2525 SD_BUS_METHOD("PowerOff", NULL, NULL, method_poweroff, SD_BUS_VTABLE_CAPABILITY(CAP_SYS_BOOT)),
2526 SD_BUS_METHOD("Halt", NULL, NULL, method_halt, SD_BUS_VTABLE_CAPABILITY(CAP_SYS_BOOT)),
2527 SD_BUS_METHOD("KExec", NULL, NULL, method_kexec, SD_BUS_VTABLE_CAPABILITY(CAP_SYS_BOOT)),
2528 SD_BUS_METHOD("SwitchRoot", "ss", NULL, method_switch_root, SD_BUS_VTABLE_CAPABILITY(CAP_SYS_BOOT)),
2529 SD_BUS_METHOD("SetEnvironment", "as", NULL, method_set_environment, SD_BUS_VTABLE_UNPRIVILEGED),
2530 SD_BUS_METHOD("UnsetEnvironment", "as", NULL, method_unset_environment, SD_BUS_VTABLE_UNPRIVILEGED),
2531 SD_BUS_METHOD("UnsetAndSetEnvironment", "asas", NULL, method_unset_and_set_environment, SD_BUS_VTABLE_UNPRIVILEGED),
2532 SD_BUS_METHOD("ListUnitFiles", NULL, "a(ss)", method_list_unit_files, SD_BUS_VTABLE_UNPRIVILEGED),
2533 SD_BUS_METHOD("ListUnitFilesByPatterns", "asas", "a(ss)", method_list_unit_files_by_patterns, SD_BUS_VTABLE_UNPRIVILEGED),
2534 SD_BUS_METHOD("GetUnitFileState", "s", "s", method_get_unit_file_state, SD_BUS_VTABLE_UNPRIVILEGED),
2535 SD_BUS_METHOD("EnableUnitFiles", "asbb", "ba(sss)", method_enable_unit_files, SD_BUS_VTABLE_UNPRIVILEGED),
2536 SD_BUS_METHOD("DisableUnitFiles", "asb", "a(sss)", method_disable_unit_files, SD_BUS_VTABLE_UNPRIVILEGED),
2537 SD_BUS_METHOD("ReenableUnitFiles", "asbb", "ba(sss)", method_reenable_unit_files, SD_BUS_VTABLE_UNPRIVILEGED),
2538 SD_BUS_METHOD("LinkUnitFiles", "asbb", "a(sss)", method_link_unit_files, SD_BUS_VTABLE_UNPRIVILEGED),
2539 SD_BUS_METHOD("PresetUnitFiles", "asbb", "ba(sss)", method_preset_unit_files, SD_BUS_VTABLE_UNPRIVILEGED),
2540 SD_BUS_METHOD("PresetUnitFilesWithMode", "assbb", "ba(sss)", method_preset_unit_files_with_mode, SD_BUS_VTABLE_UNPRIVILEGED),
2541 SD_BUS_METHOD("MaskUnitFiles", "asbb", "a(sss)", method_mask_unit_files, SD_BUS_VTABLE_UNPRIVILEGED),
2542 SD_BUS_METHOD("UnmaskUnitFiles", "asb", "a(sss)", method_unmask_unit_files, SD_BUS_VTABLE_UNPRIVILEGED),
2543 SD_BUS_METHOD("RevertUnitFiles", "as", "a(sss)", method_revert_unit_files, SD_BUS_VTABLE_UNPRIVILEGED),
2544 SD_BUS_METHOD("SetDefaultTarget", "sb", "a(sss)", method_set_default_target, SD_BUS_VTABLE_UNPRIVILEGED),
2545 SD_BUS_METHOD("GetDefaultTarget", NULL, "s", method_get_default_target, SD_BUS_VTABLE_UNPRIVILEGED),
2546 SD_BUS_METHOD("PresetAllUnitFiles", "sbb", "a(sss)", method_preset_all_unit_files, SD_BUS_VTABLE_UNPRIVILEGED),
2547 SD_BUS_METHOD("AddDependencyUnitFiles", "asssbb", "a(sss)", method_add_dependency_unit_files, SD_BUS_VTABLE_UNPRIVILEGED),
2548 SD_BUS_METHOD("GetUnitFileLinks", "sb", "as", method_get_unit_file_links, SD_BUS_VTABLE_UNPRIVILEGED),
2549 SD_BUS_METHOD("SetExitCode", "y", NULL, method_set_exit_code, SD_BUS_VTABLE_UNPRIVILEGED),
2550 SD_BUS_METHOD("LookupDynamicUserByName", "s", "u", method_lookup_dynamic_user_by_name, SD_BUS_VTABLE_UNPRIVILEGED),
2551 SD_BUS_METHOD("LookupDynamicUserByUID", "u", "s", method_lookup_dynamic_user_by_uid, SD_BUS_VTABLE_UNPRIVILEGED),
2552 SD_BUS_METHOD("GetDynamicUsers", NULL, "a(us)", method_get_dynamic_users, SD_BUS_VTABLE_UNPRIVILEGED),
2553
2554 SD_BUS_SIGNAL("UnitNew", "so", 0),
2555 SD_BUS_SIGNAL("UnitRemoved", "so", 0),
2556 SD_BUS_SIGNAL("JobNew", "uos", 0),
2557 SD_BUS_SIGNAL("JobRemoved", "uoss", 0),
2558 SD_BUS_SIGNAL("StartupFinished", "tttttt", 0),
2559 SD_BUS_SIGNAL("UnitFilesChanged", NULL, 0),
2560 SD_BUS_SIGNAL("Reloading", "b", 0),
2561
2562 SD_BUS_VTABLE_END
2563 };
2564
2565 static int send_finished(sd_bus *bus, void *userdata) {
2566 _cleanup_(sd_bus_message_unrefp) sd_bus_message *message = NULL;
2567 usec_t *times = userdata;
2568 int r;
2569
2570 assert(bus);
2571 assert(times);
2572
2573 r = sd_bus_message_new_signal(bus, &message, "/org/freedesktop/systemd1", "org.freedesktop.systemd1.Manager", "StartupFinished");
2574 if (r < 0)
2575 return r;
2576
2577 r = sd_bus_message_append(message, "tttttt", times[0], times[1], times[2], times[3], times[4], times[5]);
2578 if (r < 0)
2579 return r;
2580
2581 return sd_bus_send(bus, message, NULL);
2582 }
2583
2584 void bus_manager_send_finished(
2585 Manager *m,
2586 usec_t firmware_usec,
2587 usec_t loader_usec,
2588 usec_t kernel_usec,
2589 usec_t initrd_usec,
2590 usec_t userspace_usec,
2591 usec_t total_usec) {
2592
2593 int r;
2594
2595 assert(m);
2596
2597 r = bus_foreach_bus(
2598 m,
2599 NULL,
2600 send_finished,
2601 (usec_t[6]) {
2602 firmware_usec,
2603 loader_usec,
2604 kernel_usec,
2605 initrd_usec,
2606 userspace_usec,
2607 total_usec
2608 });
2609 if (r < 0)
2610 log_debug_errno(r, "Failed to send finished signal: %m");
2611 }
2612
2613 static int send_reloading(sd_bus *bus, void *userdata) {
2614 _cleanup_(sd_bus_message_unrefp) sd_bus_message *message = NULL;
2615 int r;
2616
2617 assert(bus);
2618
2619 r = sd_bus_message_new_signal(bus, &message, "/org/freedesktop/systemd1", "org.freedesktop.systemd1.Manager", "Reloading");
2620 if (r < 0)
2621 return r;
2622
2623 r = sd_bus_message_append(message, "b", PTR_TO_INT(userdata));
2624 if (r < 0)
2625 return r;
2626
2627 return sd_bus_send(bus, message, NULL);
2628 }
2629
2630 void bus_manager_send_reloading(Manager *m, bool active) {
2631 int r;
2632
2633 assert(m);
2634
2635 r = bus_foreach_bus(m, NULL, send_reloading, INT_TO_PTR(active));
2636 if (r < 0)
2637 log_debug_errno(r, "Failed to send reloading signal: %m");
2638 }
2639
2640 static int send_changed_signal(sd_bus *bus, void *userdata) {
2641 assert(bus);
2642
2643 return sd_bus_emit_properties_changed_strv(bus,
2644 "/org/freedesktop/systemd1",
2645 "org.freedesktop.systemd1.Manager",
2646 NULL);
2647 }
2648
2649 void bus_manager_send_change_signal(Manager *m) {
2650 int r;
2651
2652 assert(m);
2653
2654 r = bus_foreach_bus(m, NULL, send_changed_signal, NULL);
2655 if (r < 0)
2656 log_debug_errno(r, "Failed to send manager change signal: %m");
2657 }