src/core/dbus-manager.c

   1 /* SPDX-License-Identifier: LGPL-2.1-or-later */
   2
   3 #include <linux/capability.h>
   4 #include <sys/prctl.h>
   5 #include <unistd.h>
   6
   7 #include "alloc-util.h"
   8 #include "architecture.h"
   9 #include "bitfield.h"
  10 #include "build.h"
  11 #include "bus-common-errors.h"
  12 #include "bus-get-properties.h"
  13 #include "bus-log-control-api.h"
  14 #include "bus-message-util.h"
  15 #include "bus-util.h"
  16 #include "chase.h"
  17 #include "confidential-virt.h"
  18 #include "dbus-cgroup.h"
  19 #include "dbus-execute.h"
  20 #include "dbus.h"
  21 #include "dbus-job.h"
  22 #include "dbus-manager.h"
  23 #include "dbus-scope.h"
  24 #include "dbus-service.h"
  25 #include "dbus-unit.h"
  26 #include "dbus-util.h"
  27 #include "dynamic-user.h"
  28 #include "env-util.h"
  29 #include "errno-util.h"
  30 #include "fd-util.h"
  31 #include "format-util.h"
  32 #include "glyph-util.h"
  33 #include "hashmap.h"
  34 #include "initrd-util.h"
  35 #include "install.h"
  36 #include "locale-util.h"
  37 #include "log.h"
  38 #include "manager-dump.h"
  39 #include "manager.h"
  40 #include "memfd-util.h"
  41 #include "os-util.h"
  42 #include "path-util.h"
  43 #include "pidref.h"
  44 #include "process-util.h"
  45 #include "selinux-access.h"
  46 #include "set.h"
  47 #include "string-util.h"
  48 #include "strv.h"
  49 #include "syslog-util.h"
  50 #include "taint.h"
  51 #include "unit-name.h"
  52 #include "user-util.h"
  53 #include "version.h"
  54 #include "virt.h"
  55 #include "watchdog.h"
  56
  57 static UnitFileFlags unit_file_bools_to_flags(bool runtime, bool force) {
  58         return (runtime ? UNIT_FILE_RUNTIME : 0) |
  59                (force   ? UNIT_FILE_FORCE   : 0);
  60 }
  61
  62 BUS_DEFINE_PROPERTY_GET_ENUM(bus_property_get_oom_policy, oom_policy, OOMPolicy);
  63 BUS_DEFINE_PROPERTY_GET_ENUM(bus_property_get_emergency_action, emergency_action, EmergencyAction);
  64
  65 static BUS_DEFINE_PROPERTY_GET_GLOBAL(property_get_version, "s", GIT_VERSION);
  66 static BUS_DEFINE_PROPERTY_GET_GLOBAL(property_get_features, "s", systemd_features);
  67 static BUS_DEFINE_PROPERTY_GET_GLOBAL(property_get_architecture, "s", architecture_to_string(uname_architecture()));
  68 static BUS_DEFINE_PROPERTY_GET2(property_get_system_state, "s", Manager, manager_state, manager_state_to_string);
  69 static BUS_DEFINE_PROPERTY_GET_GLOBAL(property_get_timer_slack_nsec, "t", (uint64_t) prctl(PR_GET_TIMERSLACK));
  70 static BUS_DEFINE_PROPERTY_GET_REF(property_get_hashmap_size, "u", Hashmap *, hashmap_size);
  71 static BUS_DEFINE_PROPERTY_GET_REF(property_get_set_size, "u", Set *, set_size);
  72 static BUS_DEFINE_PROPERTY_GET(property_get_default_timeout_abort_usec, "t", Manager, manager_default_timeout_abort_usec);
  73 static BUS_DEFINE_PROPERTY_GET_GLOBAL(property_get_watchdog_device, "s", watchdog_get_device());
  74 static BUS_DEFINE_PROPERTY_GET_GLOBAL(property_get_watchdog_last_ping_realtime, "t", watchdog_get_last_ping(CLOCK_REALTIME));
  75 static BUS_DEFINE_PROPERTY_GET_GLOBAL(property_get_watchdog_last_ping_monotonic, "t", watchdog_get_last_ping(CLOCK_MONOTONIC));
  76 static BUS_DEFINE_PROPERTY_GET(property_get_progress, "d", Manager, manager_get_progress);
  77
  78 static int property_get_virtualization(
  79                 sd_bus *bus,
  80                 const char *path,
  81                 const char *interface,
  82                 const char *property,
  83                 sd_bus_message *reply,
  84                 void *userdata,
  85                 sd_bus_error *error) {
  86
  87         Virtualization v;
  88
  89         assert(bus);
  90         assert(reply);
  91
  92         v = detect_virtualization();
  93
  94         /* Make sure to return the empty string when we detect no virtualization, as that is the API.
  95          *
  96          * https://github.com/systemd/systemd/issues/1423
  97          */
  98
  99         return sd_bus_message_append(
 100                         reply, "s",
 101                         v == VIRTUALIZATION_NONE ? NULL : virtualization_to_string(v));
 102 }
 103
 104 static int property_get_confidential_virtualization(
 105                 sd_bus *bus,
 106                 const char *path,
 107                 const char *interface,
 108                 const char *property,
 109                 sd_bus_message *reply,
 110                 void *userdata,
 111                 sd_bus_error *error) {
 112
 113         ConfidentialVirtualization v;
 114
 115         assert(bus);
 116         assert(reply);
 117
 118         v = detect_confidential_virtualization();
 119
 120         return sd_bus_message_append(
 121                         reply, "s",
 122                         v <= 0 ? NULL : confidential_virtualization_to_string(v));
 123 }
 124
 125 static int property_get_tainted(
 126                 sd_bus *bus,
 127                 const char *path,
 128                 const char *interface,
 129                 const char *property,
 130                 sd_bus_message *reply,
 131                 void *userdata,
 132                 sd_bus_error *error) {
 133
 134         assert(bus);
 135         assert(reply);
 136
 137         _cleanup_free_ char *s = taint_string();
 138         if (!s)
 139                 return log_oom();
 140
 141         return sd_bus_message_append(reply, "s", s);
 142 }
 143
 144 static int property_set_log_target(
 145                 sd_bus *bus,
 146                 const char *path,
 147                 const char *interface,
 148                 const char *property,
 149                 sd_bus_message *value,
 150                 void *userdata,
 151                 sd_bus_error *error) {
 152
 153         Manager *m = userdata;
 154         const char *t;
 155         int r;
 156
 157         assert(bus);
 158         assert(value);
 159
 160         r = sd_bus_message_read(value, "s", &t);
 161         if (r < 0)
 162                 return r;
 163
 164         if (isempty(t))
 165                 manager_restore_original_log_target(m);
 166         else {
 167                 LogTarget target;
 168
 169                 target = log_target_from_string(t);
 170                 if (target < 0)
 171                         return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Invalid log target '%s'", t);
 172
 173                 manager_override_log_target(m, target);
 174         }
 175
 176         return 0;
 177 }
 178
 179 static int property_set_log_level(
 180                 sd_bus *bus,
 181                 const char *path,
 182                 const char *interface,
 183                 const char *property,
 184                 sd_bus_message *value,
 185                 void *userdata,
 186                 sd_bus_error *error) {
 187
 188         Manager *m = userdata;
 189         const char *t;
 190         int r;
 191
 192         assert(bus);
 193         assert(value);
 194
 195         r = sd_bus_message_read(value, "s", &t);
 196         if (r < 0)
 197                 return r;
 198
 199         if (isempty(t))
 200                 manager_restore_original_log_level(m);
 201         else {
 202                 int level;
 203
 204                 level = log_level_from_string(t);
 205                 if (level < 0)
 206                         return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Invalid log level '%s'", t);
 207
 208                 manager_override_log_level(m, level);
 209         }
 210
 211         return 0;
 212 }
 213
 214 static int property_get_environment(
 215                 sd_bus *bus,
 216                 const char *path,
 217                 const char *interface,
 218                 const char *property,
 219                 sd_bus_message *reply,
 220                 void *userdata,
 221                 sd_bus_error *error) {
 222
 223         _cleanup_strv_free_ char **l = NULL;
 224         Manager *m = ASSERT_PTR(userdata);
 225         int r;
 226
 227         assert(bus);
 228         assert(reply);
 229
 230         r = manager_get_effective_environment(m, &l);
 231         if (r < 0)
 232                 return r;
 233
 234         return sd_bus_message_append_strv(reply, l);
 235 }
 236
 237 static int property_get_show_status(
 238                 sd_bus *bus,
 239                 const char *path,
 240                 const char *interface,
 241                 const char *property,
 242                 sd_bus_message *reply,
 243                 void *userdata,
 244                 sd_bus_error *error) {
 245
 246         Manager *m = ASSERT_PTR(userdata);
 247
 248         assert(bus);
 249         assert(reply);
 250
 251         return sd_bus_message_append(reply, "b", manager_get_show_status_on(m));
 252 }
 253
 254 static int property_get_runtime_watchdog(
 255                 sd_bus *bus,
 256                 const char *path,
 257                 const char *interface,
 258                 const char *property,
 259                 sd_bus_message *reply,
 260                 void *userdata,
 261                 sd_bus_error *error) {
 262
 263         Manager *m = ASSERT_PTR(userdata);
 264
 265         assert(bus);
 266         assert(reply);
 267
 268         return sd_bus_message_append(reply, "t", manager_get_watchdog(m, WATCHDOG_RUNTIME));
 269 }
 270
 271 static int property_get_pretimeout_watchdog(
 272                 sd_bus *bus,
 273                 const char *path,
 274                 const char *interface,
 275                 const char *property,
 276                 sd_bus_message *reply,
 277                 void *userdata,
 278                 sd_bus_error *error) {
 279
 280         Manager *m = ASSERT_PTR(userdata);
 281
 282         assert(bus);
 283         assert(reply);
 284
 285         return sd_bus_message_append(reply, "t", manager_get_watchdog(m, WATCHDOG_PRETIMEOUT));
 286 }
 287
 288 static int property_get_pretimeout_watchdog_governor(
 289                 sd_bus *bus,
 290                 const char *path,
 291                 const char *interface,
 292                 const char *property,
 293                 sd_bus_message *reply,
 294                 void *userdata,
 295                 sd_bus_error *error) {
 296
 297         Manager *m = ASSERT_PTR(userdata);
 298
 299         assert(bus);
 300         assert(reply);
 301
 302         return sd_bus_message_append(reply, "s", m->watchdog_pretimeout_governor);
 303 }
 304
 305 static int property_get_reboot_watchdog(
 306                 sd_bus *bus,
 307                 const char *path,
 308                 const char *interface,
 309                 const char *property,
 310                 sd_bus_message *reply,
 311                 void *userdata,
 312                 sd_bus_error *error) {
 313
 314         Manager *m = ASSERT_PTR(userdata);
 315
 316         assert(bus);
 317         assert(reply);
 318
 319         return sd_bus_message_append(reply, "t", manager_get_watchdog(m, WATCHDOG_REBOOT));
 320 }
 321
 322 static int property_get_kexec_watchdog(
 323                 sd_bus *bus,
 324                 const char *path,
 325                 const char *interface,
 326                 const char *property,
 327                 sd_bus_message *reply,
 328                 void *userdata,
 329                 sd_bus_error *error) {
 330
 331         Manager *m = ASSERT_PTR(userdata);
 332
 333         assert(bus);
 334         assert(reply);
 335
 336         return sd_bus_message_append(reply, "t", manager_get_watchdog(m, WATCHDOG_KEXEC));
 337 }
 338
 339 static int property_set_watchdog(Manager *m, WatchdogType type, sd_bus_message *value) {
 340         usec_t timeout;
 341         int r;
 342
 343         assert(m);
 344         assert(value);
 345
 346         assert_cc(sizeof(usec_t) == sizeof(uint64_t));
 347
 348         r = sd_bus_message_read(value, "t", &timeout);
 349         if (r < 0)
 350                 return r;
 351
 352         manager_override_watchdog(m, type, timeout);
 353         return 0;
 354 }
 355
 356 static int property_set_runtime_watchdog(
 357                 sd_bus *bus,
 358                 const char *path,
 359                 const char *interface,
 360                 const char *property,
 361                 sd_bus_message *value,
 362                 void *userdata,
 363                 sd_bus_error *error) {
 364
 365         return property_set_watchdog(userdata, WATCHDOG_RUNTIME, value);
 366 }
 367
 368 static int property_set_pretimeout_watchdog(
 369                 sd_bus *bus,
 370                 const char *path,
 371                 const char *interface,
 372                 const char *property,
 373                 sd_bus_message *value,
 374                 void *userdata,
 375                 sd_bus_error *error) {
 376
 377         return property_set_watchdog(userdata, WATCHDOG_PRETIMEOUT, value);
 378 }
 379
 380 static int property_set_pretimeout_watchdog_governor(
 381                 sd_bus *bus,
 382                 const char *path,
 383                 const char *interface,
 384                 const char *property,
 385                 sd_bus_message *value,
 386                 void *userdata,
 387                 sd_bus_error *error) {
 388
 389         Manager *m = ASSERT_PTR(userdata);
 390         char *governor;
 391         int r;
 392
 393         r = sd_bus_message_read(value, "s", &governor);
 394         if (r < 0)
 395                 return r;
 396         if (!string_is_safe(governor))
 397                 return -EINVAL;
 398
 399         return manager_override_watchdog_pretimeout_governor(m, governor);
 400 }
 401
 402 static int property_set_reboot_watchdog(
 403                 sd_bus *bus,
 404                 const char *path,
 405                 const char *interface,
 406                 const char *property,
 407                 sd_bus_message *value,
 408                 void *userdata,
 409                 sd_bus_error *error) {
 410
 411         return property_set_watchdog(userdata, WATCHDOG_REBOOT, value);
 412 }
 413
 414 static int property_set_kexec_watchdog(
 415                 sd_bus *bus,
 416                 const char *path,
 417                 const char *interface,
 418                 const char *property,
 419                 sd_bus_message *value,
 420                 void *userdata,
 421                 sd_bus_error *error) {
 422
 423         _unused_ Manager *m = ASSERT_PTR(userdata);
 424
 425         assert(bus);
 426         assert(value);
 427
 428         return property_set_watchdog(userdata, WATCHDOG_KEXEC, value);
 429 }
 430
 431 static int property_get_oom_score_adjust(
 432                 sd_bus *bus,
 433                 const char *path,
 434                 const char *interface,
 435                 const char *property,
 436                 sd_bus_message *reply,
 437                 void *userdata,
 438                 sd_bus_error *error) {
 439
 440         Manager *m = ASSERT_PTR(userdata);
 441         int r, n;
 442
 443         assert(bus);
 444         assert(reply);
 445
 446         if (m->defaults.oom_score_adjust_set)
 447                 n = m->defaults.oom_score_adjust;
 448         else {
 449                 n = 0;
 450                 r = get_oom_score_adjust(&n);
 451                 if (r < 0)
 452                         log_debug_errno(r, "Failed to read current OOM score adjustment value, ignoring: %m");
 453         }
 454
 455         return sd_bus_message_append(reply, "i", n);
 456 }
 457
 458 static int bus_get_unit_by_name(Manager *m, sd_bus_message *message, const char *name, Unit **ret_unit, sd_bus_error *error) {
 459         Unit *u;
 460         int r;
 461
 462         assert(m);
 463         assert(message);
 464         assert(ret_unit);
 465
 466         /* More or less a wrapper around manager_get_unit() that generates nice errors and has one trick up
 467          * its sleeve: if the name is specified empty we use the client's unit. */
 468
 469         if (isempty(name)) {
 470                 _cleanup_(pidref_done) PidRef pidref = PIDREF_NULL;
 471
 472                 r = bus_query_sender_pidref(message, &pidref);
 473                 if (r < 0)
 474                         return r;
 475
 476                 u = manager_get_unit_by_pidref(m, &pidref);
 477                 if (!u)
 478                         return sd_bus_error_set(error, BUS_ERROR_NO_SUCH_UNIT, "Client not member of any unit.");
 479         } else {
 480                 u = manager_get_unit(m, name);
 481                 if (!u)
 482                         return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_UNIT, "Unit %s not loaded.", name);
 483         }
 484
 485         *ret_unit = u;
 486         return 0;
 487 }
 488
 489 static int bus_load_unit_by_name(Manager *m, sd_bus_message *message, const char *name, Unit **ret_unit, sd_bus_error *error) {
 490         assert(m);
 491         assert(message);
 492         assert(ret_unit);
 493
 494         /* Pretty much the same as bus_get_unit_by_name(), but we also load the unit if necessary. */
 495
 496         if (isempty(name))
 497                 return bus_get_unit_by_name(m, message, name, ret_unit, error);
 498
 499         return manager_load_unit(m, name, NULL, error, ret_unit);
 500 }
 501
 502 static int reply_unit_path(Unit *u, sd_bus_message *message, sd_bus_error *error) {
 503         _cleanup_free_ char *path = NULL;
 504         int r;
 505
 506         assert(u);
 507         assert(message);
 508
 509         r = mac_selinux_unit_access_check(u, message, "status", error);
 510         if (r < 0)
 511                 return r;
 512
 513         path = unit_dbus_path(u);
 514         if (!path)
 515                 return log_oom();
 516
 517         return sd_bus_reply_method_return(message, "o", path);
 518 }
 519
 520 static int method_get_unit(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 521         Manager *m = ASSERT_PTR(userdata);
 522         const char *name;
 523         Unit *u;
 524         int r;
 525
 526         assert(message);
 527
 528         /* Anyone can call this method */
 529
 530         r = sd_bus_message_read(message, "s", &name);
 531         if (r < 0)
 532                 return r;
 533
 534         r = bus_get_unit_by_name(m, message, name, &u, error);
 535         if (r < 0)
 536                 return r;
 537
 538         return reply_unit_path(u, message, error);
 539 }
 540
 541 static int method_get_unit_by_pid(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 542         Manager *m = ASSERT_PTR(userdata);
 543         _cleanup_(pidref_done) PidRef pidref = PIDREF_NULL;
 544         Unit *u;
 545         int r;
 546
 547         assert(message);
 548
 549         assert_cc(sizeof(pid_t) == sizeof(uint32_t));
 550
 551         /* Anyone can call this method */
 552
 553         r = sd_bus_message_read(message, "u", &pidref.pid);
 554         if (r < 0)
 555                 return r;
 556         if (pidref.pid < 0)
 557                 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Invalid PID " PID_FMT, pidref.pid);
 558         if (pidref.pid == 0) {
 559                 r = bus_query_sender_pidref(message, &pidref);
 560                 if (r < 0)
 561                         return r;
 562         }
 563
 564         u = manager_get_unit_by_pidref(m, &pidref);
 565         if (!u)
 566                 return sd_bus_error_setf(error, BUS_ERROR_NO_UNIT_FOR_PID, "PID "PID_FMT" does not belong to any loaded unit.", pidref.pid);
 567
 568         return reply_unit_path(u, message, error);
 569 }
 570
 571 static int method_get_unit_by_invocation_id(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 572         _cleanup_free_ char *path = NULL;
 573         Manager *m = ASSERT_PTR(userdata);
 574         sd_id128_t id;
 575         Unit *u;
 576         int r;
 577
 578         assert(message);
 579
 580         /* Anyone can call this method */
 581
 582         if (bus_message_read_id128(message, &id) < 0)
 583                 return sd_bus_error_set(error, SD_BUS_ERROR_INVALID_ARGS, "Invalid invocation ID");
 584
 585         if (sd_id128_is_null(id)) {
 586                 _cleanup_(pidref_done) PidRef pidref = PIDREF_NULL;
 587
 588                 r = bus_query_sender_pidref(message, &pidref);
 589                 if (r < 0)
 590                         return r;
 591
 592                 u = manager_get_unit_by_pidref(m, &pidref);
 593                 if (!u)
 594                         return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_UNIT,
 595                                                  "Client " PID_FMT " not member of any unit.", pidref.pid);
 596         } else {
 597                 u = hashmap_get(m->units_by_invocation_id, &id);
 598                 if (!u)
 599                         return sd_bus_error_setf(error, BUS_ERROR_NO_UNIT_FOR_INVOCATION_ID, "No unit with the specified invocation ID " SD_ID128_FORMAT_STR " known.", SD_ID128_FORMAT_VAL(id));
 600         }
 601
 602         r = mac_selinux_unit_access_check(u, message, "status", error);
 603         if (r < 0)
 604                 return r;
 605
 606         /* So here's a special trick: the bus path we return actually references the unit by its invocation
 607          * ID instead of the unit name. This means it stays valid only as long as the invocation ID stays the
 608          * same. */
 609         path = unit_dbus_path_invocation_id(u);
 610         if (!path)
 611                 return -ENOMEM;
 612
 613         return sd_bus_reply_method_return(message, "o", path);
 614 }
 615
 616 static int method_get_unit_by_control_group(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 617         Manager *m = userdata;
 618         const char *cgroup;
 619         Unit *u;
 620         int r;
 621
 622         r = sd_bus_message_read(message, "s", &cgroup);
 623         if (r < 0)
 624                 return r;
 625
 626         u = manager_get_unit_by_cgroup(m, cgroup);
 627         if (!u)
 628                 return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_UNIT,
 629                                          "Control group '%s' is not valid or not managed by this instance",
 630                                          cgroup);
 631
 632         return reply_unit_path(u, message, error);
 633 }
 634
 635 static int method_get_unit_by_pidfd(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 636         _cleanup_(sd_bus_message_unrefp) sd_bus_message *reply = NULL;
 637         _cleanup_(pidref_done) PidRef pidref = PIDREF_NULL;
 638         Manager *m = ASSERT_PTR(userdata);
 639         _cleanup_free_ char *path = NULL;
 640         int r, pidfd;
 641         Unit *u;
 642
 643         assert(message);
 644
 645         r = sd_bus_message_read(message, "h", &pidfd);
 646         if (r < 0)
 647                 return r;
 648
 649         r = pidref_set_pidfd(&pidref, pidfd);
 650         if (r < 0)
 651                 return sd_bus_error_set_errnof(error, r, "Failed to get PID from PIDFD: %m");
 652
 653         u = manager_get_unit_by_pidref(m, &pidref);
 654         if (!u)
 655                 return sd_bus_error_setf(error, BUS_ERROR_NO_UNIT_FOR_PID, "PID "PID_FMT" does not belong to any loaded unit.", pidref.pid);
 656
 657         r = mac_selinux_unit_access_check(u, message, "status", error);
 658         if (r < 0)
 659                 return r;
 660
 661         path = unit_dbus_path(u);
 662         if (!path)
 663                 return log_oom();
 664
 665         r = sd_bus_message_new_method_return(message, &reply);
 666         if (r < 0)
 667                 return r;
 668
 669         r = sd_bus_message_append(reply, "os", path, u->id);
 670         if (r < 0)
 671                 return r;
 672
 673         r = sd_bus_message_append_array(reply, 'y', u->invocation_id.bytes, sizeof(u->invocation_id.bytes));
 674         if (r < 0)
 675                 return r;
 676
 677         /* Double-check that the process is still alive and that the PID did not change before returning the
 678          * answer. */
 679         r = pidref_verify(&pidref);
 680         if (r == -ESRCH)
 681                 return sd_bus_error_setf(error,
 682                                          BUS_ERROR_NO_SUCH_PROCESS,
 683                                          "The PIDFD's PID "PID_FMT" changed during the lookup operation.",
 684                                          pidref.pid);
 685         if (r < 0)
 686                 return sd_bus_error_set_errnof(error, r, "Failed to get PID from PIDFD: %m");
 687
 688         return sd_bus_message_send(reply);
 689 }
 690
 691 static int method_load_unit(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 692         Manager *m = ASSERT_PTR(userdata);
 693         const char *name;
 694         Unit *u;
 695         int r;
 696
 697         assert(message);
 698
 699         /* Anyone can call this method */
 700
 701         r = sd_bus_message_read(message, "s", &name);
 702         if (r < 0)
 703                 return r;
 704
 705         r = bus_load_unit_by_name(m, message, name, &u, error);
 706         if (r < 0)
 707                 return r;
 708
 709         return reply_unit_path(u, message, error);
 710 }
 711
 712 static int method_start_unit_generic(sd_bus_message *message, Manager *m, JobType job_type, bool reload_if_possible, sd_bus_error *error) {
 713         const char *name;
 714         Unit *u;
 715         int r;
 716
 717         assert(message);
 718         assert(m);
 719
 720         r = sd_bus_message_read(message, "s", &name);
 721         if (r < 0)
 722                 return r;
 723
 724         r = manager_load_unit(m, name, NULL, error, &u);
 725         if (r < 0)
 726                 return r;
 727
 728         return bus_unit_method_start_generic(message, u, job_type, reload_if_possible, error);
 729 }
 730
 731 static int method_start_unit(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 732         return method_start_unit_generic(message, userdata, JOB_START, /* reload_if_possible = */ false, error);
 733 }
 734
 735 static int method_stop_unit(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 736         return method_start_unit_generic(message, userdata, JOB_STOP, /* reload_if_possible = */ false, error);
 737 }
 738
 739 static int method_reload_unit(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 740         return method_start_unit_generic(message, userdata, JOB_RELOAD, /* reload_if_possible = */ false, error);
 741 }
 742
 743 static int method_restart_unit(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 744         return method_start_unit_generic(message, userdata, JOB_RESTART, /* reload_if_possible = */ false, error);
 745 }
 746
 747 static int method_try_restart_unit(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 748         return method_start_unit_generic(message, userdata, JOB_TRY_RESTART, /* reload_if_possible = */ false, error);
 749 }
 750
 751 static int method_reload_or_restart_unit(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 752         return method_start_unit_generic(message, userdata, JOB_RESTART, /* reload_if_possible = */ true, error);
 753 }
 754
 755 static int method_reload_or_try_restart_unit(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 756         return method_start_unit_generic(message, userdata, JOB_TRY_RESTART, /* reload_if_possible = */ true, error);
 757 }
 758
 759 typedef enum GenericUnitOperationFlags {
 760         GENERIC_UNIT_LOAD            = 1 << 0, /* Load if the unit is not loaded yet */
 761         GENERIC_UNIT_VALIDATE_LOADED = 1 << 1, /* Verify unit is properly loaded before forwarding call */
 762 } GenericUnitOperationFlags;
 763
 764 static int method_generic_unit_operation(
 765                 sd_bus_message *message,
 766                 Manager *m,
 767                 sd_bus_error *error,
 768                 UnitType type,
 769                 sd_bus_message_handler_t handler,
 770                 GenericUnitOperationFlags flags) {
 771
 772         const char *name;
 773         Unit *u;
 774         int r;
 775
 776         assert(message);
 777         assert(m);
 778         assert(handler);
 779
 780         /* Read the first argument from the command and pass the operation to the specified per-unit
 781          * method. */
 782
 783         r = sd_bus_message_read(message, "s", &name);
 784         if (r < 0)
 785                 return r;
 786
 787         if (!isempty(name) && FLAGS_SET(flags, GENERIC_UNIT_LOAD))
 788                 r = manager_load_unit(m, name, NULL, error, &u);
 789         else
 790                 r = bus_get_unit_by_name(m, message, name, &u, error);
 791         if (r < 0)
 792                 return r;
 793
 794         if (type != _UNIT_TYPE_INVALID && u->type != type)
 795                 return sd_bus_error_setf(error, SD_BUS_ERROR_NOT_SUPPORTED,
 796                                          "%s operation is not supported for unit type '%s'",
 797                                          sd_bus_message_get_member(message), unit_type_to_string(u->type));
 798
 799         if (FLAGS_SET(flags, GENERIC_UNIT_VALIDATE_LOADED)) {
 800                 r = bus_unit_validate_load_state(u, error);
 801                 if (r < 0)
 802                         return r;
 803         }
 804
 805         return handler(message, u, error);
 806 }
 807
 808 static int method_enqueue_unit_job(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 809         /* We don't bother with GENERIC_UNIT_VALIDATE_LOADED here, as the job logic validates that anyway */
 810         return method_generic_unit_operation(message, userdata, error, _UNIT_TYPE_INVALID, bus_unit_method_enqueue_job, GENERIC_UNIT_LOAD);
 811 }
 812
 813 static int method_start_unit_replace(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 814         Manager *m = ASSERT_PTR(userdata);
 815         const char *old_name;
 816         Unit *u;
 817         int r;
 818
 819         assert(message);
 820
 821         r = sd_bus_message_read(message, "s", &old_name);
 822         if (r < 0)
 823                 return r;
 824
 825         r = bus_get_unit_by_name(m, message, old_name, &u, error);
 826         if (r < 0)
 827                 return r;
 828         if (!u->job || u->job->type != JOB_START)
 829                 return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_JOB, "No job queued for unit %s", old_name);
 830
 831         return method_start_unit_generic(message, m, JOB_START, /* reload_if_possible = */ false, error);
 832 }
 833
 834 static int method_kill_unit(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 835         /* We don't bother with GENERIC_UNIT_LOAD or GENERIC_UNIT_VALIDATE_LOADED here, as it shouldn't
 836          * matter whether a unit is loaded for killing any processes in the unit's cgroup. */
 837         return method_generic_unit_operation(message, userdata, error, _UNIT_TYPE_INVALID, bus_unit_method_kill, /* flags = */ 0);
 838 }
 839
 840 static int method_kill_unit_subgroup(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 841         /* We don't bother with GENERIC_UNIT_LOAD or GENERIC_UNIT_VALIDATE_LOADED here, as it shouldn't
 842          * matter whether a unit is loaded for killing any processes in the unit's cgroup. */
 843         return method_generic_unit_operation(message, userdata, error, _UNIT_TYPE_INVALID, bus_unit_method_kill_subgroup, /* flags = */ 0);
 844 }
 845
 846 static int method_clean_unit(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 847         /* Load the unit if necessary, in order to load it, and insist on the unit being loaded to be
 848          * cleaned */
 849         return method_generic_unit_operation(message, userdata, error, _UNIT_TYPE_INVALID, bus_unit_method_clean, GENERIC_UNIT_LOAD|GENERIC_UNIT_VALIDATE_LOADED);
 850 }
 851
 852 static int method_freeze_unit(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 853         /* Only active units can be frozen, which must be properly loaded already */
 854         return method_generic_unit_operation(message, userdata, error, _UNIT_TYPE_INVALID, bus_unit_method_freeze, GENERIC_UNIT_VALIDATE_LOADED);
 855 }
 856
 857 static int method_thaw_unit(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 858         /* Same as freeze above */
 859         return method_generic_unit_operation(message, userdata, error, _UNIT_TYPE_INVALID, bus_unit_method_thaw, GENERIC_UNIT_VALIDATE_LOADED);
 860 }
 861
 862 static int method_reset_failed_unit(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 863         /* Don't load the unit (because unloaded units can't be in failed state), and don't insist on the
 864          * unit to be loaded properly (since a failed unit might have its unit file disappeared) */
 865         return method_generic_unit_operation(message, userdata, error, _UNIT_TYPE_INVALID, bus_unit_method_reset_failed, /* flags = */ 0);
 866 }
 867
 868 static int method_set_unit_properties(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 869         /* Only change properties on fully loaded units, and load them in order to set properties */
 870         return method_generic_unit_operation(message, userdata, error, _UNIT_TYPE_INVALID, bus_unit_method_set_properties, GENERIC_UNIT_LOAD|GENERIC_UNIT_VALIDATE_LOADED);
 871 }
 872
 873 static int method_bind_mount_unit(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 874         /* Only add mounts on fully loaded units */
 875         return method_generic_unit_operation(message, userdata, error, UNIT_SERVICE, bus_service_method_bind_mount, GENERIC_UNIT_VALIDATE_LOADED);
 876 }
 877
 878 static int method_mount_image_unit(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 879         /* Only add mounts on fully loaded units */
 880         return method_generic_unit_operation(message, userdata, error, UNIT_SERVICE, bus_service_method_mount_image, GENERIC_UNIT_VALIDATE_LOADED);
 881 }
 882
 883 static int method_ref_unit(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 884         /* Only allow reffing of fully loaded units, and make sure reffing a unit loads it. */
 885         return method_generic_unit_operation(message, userdata, error, _UNIT_TYPE_INVALID, bus_unit_method_ref, GENERIC_UNIT_LOAD|GENERIC_UNIT_VALIDATE_LOADED);
 886 }
 887
 888 static int method_unref_unit(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 889         /* Dropping a ref OTOH should not require the unit to still be loaded. And since a reffed unit is a
 890          * loaded unit there's no need to load the unit for unreffing it. */
 891         return method_generic_unit_operation(message, userdata, error, _UNIT_TYPE_INVALID, bus_unit_method_unref, /* flags = */ 0);
 892 }
 893
 894 static int reply_unit_info(sd_bus_message *reply, Unit *u) {
 895         _cleanup_free_ char *unit_path = NULL, *job_path = NULL;
 896         Unit *following;
 897
 898         following = unit_following(u);
 899
 900         unit_path = unit_dbus_path(u);
 901         if (!unit_path)
 902                 return -ENOMEM;
 903
 904         if (u->job) {
 905                 job_path = job_dbus_path(u->job);
 906                 if (!job_path)
 907                         return -ENOMEM;
 908         }
 909
 910         return sd_bus_message_append(
 911                         reply, "(ssssssouso)",
 912                         u->id,
 913                         unit_description(u),
 914                         unit_load_state_to_string(u->load_state),
 915                         unit_active_state_to_string(unit_active_state(u)),
 916                         unit_sub_state_to_string(u),
 917                         following ? following->id : "",
 918                         unit_path,
 919                         u->job ? u->job->id : 0,
 920                         u->job ? job_type_to_string(u->job->type) : "",
 921                         empty_to_root(job_path));
 922 }
 923
 924 static int method_list_units_by_names(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 925         _cleanup_(sd_bus_message_unrefp) sd_bus_message *reply = NULL;
 926         Manager *m = ASSERT_PTR(userdata);
 927         int r;
 928         _cleanup_strv_free_ char **units = NULL;
 929
 930         assert(message);
 931
 932         r = sd_bus_message_read_strv(message, &units);
 933         if (r < 0)
 934                 return r;
 935
 936         r = sd_bus_message_new_method_return(message, &reply);
 937         if (r < 0)
 938                 return r;
 939
 940         r = sd_bus_message_open_container(reply, 'a', "(ssssssouso)");
 941         if (r < 0)
 942                 return r;
 943
 944         STRV_FOREACH(unit, units) {
 945                 Unit *u;
 946
 947                 if (!unit_name_is_valid(*unit, UNIT_NAME_ANY))
 948                         continue;
 949
 950                 r = bus_load_unit_by_name(m, message, *unit, &u, error);
 951                 if (r < 0)
 952                         return r;
 953
 954                 r = reply_unit_info(reply, u);
 955                 if (r < 0)
 956                         return r;
 957         }
 958
 959         r = sd_bus_message_close_container(reply);
 960         if (r < 0)
 961                 return r;
 962
 963         return sd_bus_message_send(reply);
 964 }
 965
 966 static int method_get_unit_processes(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 967         /* Don't load a unit actively (since it won't have any processes if it's not loaded), but don't
 968          * insist on the unit being loaded either (because even improperly loaded units might still have
 969          * processes around). */
 970         return method_generic_unit_operation(message, userdata, error, _UNIT_TYPE_INVALID, bus_unit_method_get_processes, /* flags = */ 0);
 971 }
 972
 973 static int method_attach_processes_to_unit(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 974         /* Don't allow attaching new processes to units that aren't loaded. Don't bother with loading a unit
 975          * for this purpose though, as an unloaded unit is a stopped unit, and we don't allow attaching
 976          * processes to stopped units anyway. */
 977         return method_generic_unit_operation(message, userdata, error, _UNIT_TYPE_INVALID, bus_unit_method_attach_processes, GENERIC_UNIT_VALIDATE_LOADED);
 978 }
 979
 980 static int method_remove_subgroup_from_unit(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 981         /* Don't allow removal of subgroups from units that aren't loaded. But allow loading the unit, since
 982          * this is clean-up work, that is OK to do when the unit is stopped already. */
 983         return method_generic_unit_operation(message, userdata, error, _UNIT_TYPE_INVALID, bus_unit_method_remove_subgroup, GENERIC_UNIT_LOAD|GENERIC_UNIT_VALIDATE_LOADED);
 984 }
 985
 986 static int transient_unit_from_message(
 987                 Manager *m,
 988                 sd_bus_message *message,
 989                 const char *name,
 990                 Unit **ret_unit,
 991                 sd_bus_error *error) {
 992
 993         UnitType t;
 994         Unit *u;
 995         int r;
 996
 997         assert(m);
 998         assert(message);
 999         assert(name);
1000
1001         t = unit_name_to_type(name);
1002         if (t < 0)
1003                 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS,
1004                                          "Invalid unit name or type: %s", name);
1005
1006         if (!unit_vtable[t]->can_transient)
1007                 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS,
1008                                          "Unit type %s does not support transient units.",
1009                                          unit_type_to_string(t));
1010
1011         r = manager_load_unit(m, name, NULL, error, &u);
1012         if (r < 0)
1013                 return r;
1014
1015         if (!unit_is_pristine(u))
1016                 return sd_bus_error_setf(error, BUS_ERROR_UNIT_EXISTS,
1017                                          "Unit %s was already loaded or has a fragment file.", name);
1018
1019         /* OK, the unit failed to load and is unreferenced, now let's
1020          * fill in the transient data instead */
1021         r = unit_make_transient(u);
1022         if (r < 0)
1023                 return r;
1024
1025         /* Set our properties */
1026         r = bus_unit_set_properties(u, message, UNIT_RUNTIME, false, error);
1027         if (r < 0)
1028                 return r;
1029
1030         /* If the client asked for it, automatically add a reference to this unit. */
1031         if (u->bus_track_add) {
1032                 r = bus_unit_track_add_sender(u, message);
1033                 if (r < 0)
1034                         return log_error_errno(r, "Failed to watch sender: %m");
1035         }
1036
1037         /* Now load the missing bits of the unit we just created */
1038         unit_add_to_load_queue(u);
1039         manager_dispatch_load_queue(m);
1040
1041         if (ret_unit)
1042                 *ret_unit = u;
1043
1044         return 0;
1045 }
1046
1047 static int transient_aux_units_from_message(
1048                 Manager *m,
1049                 sd_bus_message *message,
1050                 sd_bus_error *error) {
1051
1052         int r;
1053
1054         assert(m);
1055         assert(message);
1056
1057         r = sd_bus_message_enter_container(message, 'a', "(sa(sv))");
1058         if (r < 0)
1059                 return r;
1060
1061         while ((r = sd_bus_message_enter_container(message, 'r', "sa(sv)")) > 0) {
1062                 const char *name;
1063
1064                 r = sd_bus_message_read(message, "s", &name);
1065                 if (r < 0)
1066                         return r;
1067
1068                 r = transient_unit_from_message(m, message, name, /* ret_unit = */ NULL, error);
1069                 if (r < 0)
1070                         return r;
1071
1072                 r = sd_bus_message_exit_container(message);
1073                 if (r < 0)
1074                         return r;
1075         }
1076         if (r < 0)
1077                 return r;
1078
1079         r = sd_bus_message_exit_container(message);
1080         if (r < 0)
1081                 return r;
1082
1083         return 0;
1084 }
1085
1086 static int method_start_transient_unit(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1087         const char *name, *smode;
1088         Manager *m = ASSERT_PTR(userdata);
1089         JobMode mode;
1090         Unit *u;
1091         int r;
1092
1093         assert(message);
1094
1095         r = mac_selinux_access_check(message, "start", error);
1096         if (r < 0)
1097                 return r;
1098
1099         r = sd_bus_message_read(message, "ss", &name, &smode);
1100         if (r < 0)
1101                 return r;
1102
1103         mode = job_mode_from_string(smode);
1104         if (mode < 0)
1105                 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Job mode %s is invalid.", smode);
1106
1107         r = bus_verify_manage_units_async_impl(
1108                         m,
1109                         name,
1110                         "start",
1111                         N_("Authentication is required to start transient unit '$(unit)'."),
1112                         message,
1113                         error);
1114         if (r < 0)
1115                 return r;
1116         if (r == 0)
1117                 return 1; /* No authorization for now, but the async polkit stuff will call us again when it has it */
1118
1119         r = transient_unit_from_message(m, message, name, &u, error);
1120         if (r < 0)
1121                 return r;
1122
1123         r = transient_aux_units_from_message(m, message, error);
1124         if (r < 0)
1125                 return r;
1126
1127         /* Finally, start it */
1128         return bus_unit_queue_job(message, u, JOB_START, mode, 0, error);
1129 }
1130
1131 static int method_get_job(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1132         _cleanup_free_ char *path = NULL;
1133         Manager *m = ASSERT_PTR(userdata);
1134         uint32_t id;
1135         Job *j;
1136         int r;
1137
1138         assert(message);
1139
1140         /* Anyone can call this method */
1141
1142         r = sd_bus_message_read(message, "u", &id);
1143         if (r < 0)
1144                 return r;
1145
1146         j = manager_get_job(m, id);
1147         if (!j)
1148                 return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_JOB, "Job %u does not exist.", (unsigned) id);
1149
1150         r = mac_selinux_unit_access_check(j->unit, message, "status", error);
1151         if (r < 0)
1152                 return r;
1153
1154         path = job_dbus_path(j);
1155         if (!path)
1156                 return -ENOMEM;
1157
1158         return sd_bus_reply_method_return(message, "o", path);
1159 }
1160
1161 static int method_cancel_job(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1162         Manager *m = ASSERT_PTR(userdata);
1163         uint32_t id;
1164         Job *j;
1165         int r;
1166
1167         assert(message);
1168
1169         r = sd_bus_message_read(message, "u", &id);
1170         if (r < 0)
1171                 return r;
1172
1173         j = manager_get_job(m, id);
1174         if (!j)
1175                 return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_JOB, "Job %u does not exist.", (unsigned) id);
1176
1177         return bus_job_method_cancel(message, j, error);
1178 }
1179
1180 static int method_clear_jobs(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1181         Manager *m = ASSERT_PTR(userdata);
1182         int r;
1183
1184         assert(message);
1185
1186         r = mac_selinux_access_check(message, "reload", error);
1187         if (r < 0)
1188                 return r;
1189
1190         r = bus_verify_manage_units_async(m, message, error);
1191         if (r < 0)
1192                 return r;
1193         if (r == 0)
1194                 return 1; /* No authorization for now, but the async polkit stuff will call us again when it has it */
1195
1196         manager_clear_jobs(m);
1197
1198         return sd_bus_reply_method_return(message, NULL);
1199 }
1200
1201 static int method_reset_failed(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1202         Manager *m = ASSERT_PTR(userdata);
1203         int r;
1204
1205         assert(message);
1206
1207         r = mac_selinux_access_check(message, "reload", error);
1208         if (r < 0)
1209                 return r;
1210
1211         r = bus_verify_manage_units_async(m, message, error);
1212         if (r < 0)
1213                 return r;
1214         if (r == 0)
1215                 return 1; /* No authorization for now, but the async polkit stuff will call us again when it has it */
1216
1217         manager_reset_failed(m);
1218
1219         return sd_bus_reply_method_return(message, NULL);
1220 }
1221
1222 static int list_units_filtered(sd_bus_message *message, void *userdata, sd_bus_error *error, char **states, char **patterns) {
1223         _cleanup_(sd_bus_message_unrefp) sd_bus_message *reply = NULL;
1224         Manager *m = ASSERT_PTR(userdata);
1225         const char *k;
1226         Unit *u;
1227         int r;
1228
1229         assert(message);
1230
1231         /* Anyone can call this method */
1232
1233         r = mac_selinux_access_check(message, "status", error);
1234         if (r < 0)
1235                 return r;
1236
1237         r = sd_bus_message_new_method_return(message, &reply);
1238         if (r < 0)
1239                 return r;
1240
1241         r = sd_bus_message_open_container(reply, 'a', "(ssssssouso)");
1242         if (r < 0)
1243                 return r;
1244
1245         HASHMAP_FOREACH_KEY(u, k, m->units) {
1246                 if (k != u->id)
1247                         continue;
1248
1249                 if (!unit_passes_filter(u, states, patterns))
1250                         continue;
1251
1252                 r = reply_unit_info(reply, u);
1253                 if (r < 0)
1254                         return r;
1255         }
1256
1257         r = sd_bus_message_close_container(reply);
1258         if (r < 0)
1259                 return r;
1260
1261         return sd_bus_message_send(reply);
1262 }
1263
1264 static int method_list_units(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1265         return list_units_filtered(message, userdata, error, NULL, NULL);
1266 }
1267
1268 static int method_list_units_filtered(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1269         _cleanup_strv_free_ char **states = NULL;
1270         int r;
1271
1272         r = sd_bus_message_read_strv(message, &states);
1273         if (r < 0)
1274                 return r;
1275
1276         return list_units_filtered(message, userdata, error, states, NULL);
1277 }
1278
1279 static int method_list_units_by_patterns(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1280         _cleanup_strv_free_ char **states = NULL;
1281         _cleanup_strv_free_ char **patterns = NULL;
1282         int r;
1283
1284         r = sd_bus_message_read_strv(message, &states);
1285         if (r < 0)
1286                 return r;
1287
1288         r = sd_bus_message_read_strv(message, &patterns);
1289         if (r < 0)
1290                 return r;
1291
1292         return list_units_filtered(message, userdata, error, states, patterns);
1293 }
1294
1295 static int method_list_jobs(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1296         _cleanup_(sd_bus_message_unrefp) sd_bus_message *reply = NULL;
1297         Manager *m = ASSERT_PTR(userdata);
1298         Job *j;
1299         int r;
1300
1301         assert(message);
1302
1303         /* Anyone can call this method */
1304
1305         r = mac_selinux_access_check(message, "status", error);
1306         if (r < 0)
1307                 return r;
1308
1309         r = sd_bus_message_new_method_return(message, &reply);
1310         if (r < 0)
1311                 return r;
1312
1313         r = sd_bus_message_open_container(reply, 'a', "(usssoo)");
1314         if (r < 0)
1315                 return r;
1316
1317         HASHMAP_FOREACH(j, m->jobs) {
1318                 _cleanup_free_ char *unit_path = NULL, *job_path = NULL;
1319
1320                 job_path = job_dbus_path(j);
1321                 if (!job_path)
1322                         return -ENOMEM;
1323
1324                 unit_path = unit_dbus_path(j->unit);
1325                 if (!unit_path)
1326                         return -ENOMEM;
1327
1328                 r = sd_bus_message_append(
1329                                 reply, "(usssoo)",
1330                                 j->id,
1331                                 j->unit->id,
1332                                 job_type_to_string(j->type),
1333                                 job_state_to_string(j->state),
1334                                 job_path,
1335                                 unit_path);
1336                 if (r < 0)
1337                         return r;
1338         }
1339
1340         r = sd_bus_message_close_container(reply);
1341         if (r < 0)
1342                 return r;
1343
1344         return sd_bus_message_send(reply);
1345 }
1346
1347 static int method_subscribe(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1348         Manager *m = ASSERT_PTR(userdata);
1349         int r;
1350
1351         assert(message);
1352
1353         /* Anyone can call this method */
1354
1355         r = mac_selinux_access_check(message, "status", error);
1356         if (r < 0)
1357                 return r;
1358
1359         if (sd_bus_message_get_bus(message) == m->api_bus) {
1360
1361                 /* Note that direct bus connection subscribe by
1362                  * default, we only track peers on the API bus here */
1363
1364                 if (!m->subscribed) {
1365                         r = sd_bus_track_new(sd_bus_message_get_bus(message), &m->subscribed, NULL, NULL);
1366                         if (r < 0)
1367                                 return r;
1368                 }
1369
1370                 r = sd_bus_track_add_sender(m->subscribed, message);
1371                 if (r < 0)
1372                         return r;
1373                 if (r == 0)
1374                         return sd_bus_error_set(error, BUS_ERROR_ALREADY_SUBSCRIBED, "Client is already subscribed.");
1375         }
1376
1377         return sd_bus_reply_method_return(message, NULL);
1378 }
1379
1380 static int method_unsubscribe(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1381         Manager *m = ASSERT_PTR(userdata);
1382         int r;
1383
1384         assert(message);
1385
1386         /* Anyone can call this method */
1387
1388         r = mac_selinux_access_check(message, "status", error);
1389         if (r < 0)
1390                 return r;
1391
1392         if (sd_bus_message_get_bus(message) == m->api_bus) {
1393                 r = sd_bus_track_remove_sender(m->subscribed, message);
1394                 if (r < 0)
1395                         return r;
1396                 if (r == 0)
1397                         return sd_bus_error_set(error, BUS_ERROR_NOT_SUBSCRIBED, "Client is not subscribed.");
1398         }
1399
1400         return sd_bus_reply_method_return(message, NULL);
1401 }
1402
1403 static int dump_impl(
1404                 sd_bus_message *message,
1405                 void *userdata,
1406                 sd_bus_error *error,
1407                 char **patterns,
1408                 int (*reply)(sd_bus_message *, char *)) {
1409
1410         _cleanup_free_ char *dump = NULL;
1411         Manager *m = ASSERT_PTR(userdata);
1412         int r;
1413
1414         assert(message);
1415
1416         /* 'status' access is the bare minimum always needed for this, as the policy might straight out
1417          * forbid a client from querying any information from systemd, regardless of any rate limiting. */
1418         r = mac_selinux_access_check(message, "status", error);
1419         if (r < 0)
1420                 return r;
1421
1422         /* Rate limit reached? Check if the caller is privileged/allowed by policy to bypass this. We
1423          * check the rate limit first to avoid the expensive roundtrip to polkit when not needed. */
1424         if (!ratelimit_below(&m->dump_ratelimit)) {
1425                 /* We need a way for SELinux to constrain the operation when the rate limit is active, even
1426                  * if polkit would allow it, but we cannot easily add new named permissions, so we need to
1427                  * use an existing one. Reload/reexec are also slow but non-destructive/modifying
1428                  * operations, and can cause PID1 to stall. So it seems similar enough in terms of security
1429                  * considerations and impact, and thus use the same access check for dumps which, given the
1430                  * large amount of data to fetch, can stall PID1 for quite some time. */
1431                 r = mac_selinux_access_check(message, "reload", /* error = */ NULL);
1432                 if (r < 0)
1433                         goto ratelimited;
1434
1435                 r = bus_verify_bypass_dump_ratelimit_async(m, message, /* error = */ NULL);
1436                 if (r < 0)
1437                         goto ratelimited;
1438                 if (r == 0)
1439                         /* No authorization for now, but the async polkit stuff will call us again when it
1440                          * has it */
1441                         return 1;
1442         }
1443
1444         r = manager_get_dump_string(m, patterns, &dump);
1445         if (r < 0)
1446                 return r;
1447
1448         return reply(message, dump);
1449
1450 ratelimited:
1451         log_warning("Dump request rejected due to rate limit on unprivileged callers, blocked for %s.",
1452                     FORMAT_TIMESPAN(ratelimit_left(&m->dump_ratelimit), USEC_PER_SEC));
1453         return sd_bus_error_setf(error,
1454                                  SD_BUS_ERROR_LIMITS_EXCEEDED,
1455                                  "Dump request rejected due to rate limit on unprivileged callers, blocked for %s.",
1456                                  FORMAT_TIMESPAN(ratelimit_left(&m->dump_ratelimit), USEC_PER_SEC));
1457 }
1458
1459 static int reply_dump(sd_bus_message *message, char *dump) {
1460         return sd_bus_reply_method_return(message, "s", dump);
1461 }
1462
1463 static int method_dump(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1464         return dump_impl(message, userdata, error, NULL, reply_dump);
1465 }
1466
1467 static int reply_dump_by_fd(sd_bus_message *message, char *dump) {
1468         _cleanup_close_ int fd = -EBADF;
1469
1470         fd = memfd_new_and_seal_string("dump", dump);
1471         if (fd < 0)
1472                 return fd;
1473
1474         return sd_bus_reply_method_return(message, "h", fd);
1475 }
1476
1477 static int method_dump_by_fd(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1478         return dump_impl(message, userdata, error, NULL, reply_dump_by_fd);
1479 }
1480
1481 static int dump_units_matching_patterns(
1482                 sd_bus_message *message,
1483                 void *userdata,
1484                 sd_bus_error *error,
1485                 int (*reply)(sd_bus_message *, char *)) {
1486         _cleanup_strv_free_ char **patterns = NULL;
1487         int r;
1488
1489         r = sd_bus_message_read_strv(message, &patterns);
1490         if (r < 0)
1491                 return r;
1492
1493         return dump_impl(message, userdata, error, patterns, reply);
1494 }
1495
1496 static int method_dump_units_matching_patterns(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1497         return dump_units_matching_patterns(message, userdata, error, reply_dump);
1498 }
1499
1500 static int method_dump_units_matching_patterns_by_fd(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1501         return dump_units_matching_patterns(message, userdata, error, reply_dump_by_fd);
1502 }
1503
1504 static int method_refuse_snapshot(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1505         return sd_bus_error_set(error, SD_BUS_ERROR_NOT_SUPPORTED, "Support for snapshots has been removed.");
1506 }
1507
1508 static void log_caller(sd_bus_message *message, Manager *manager, const char *method) {
1509         _cleanup_(sd_bus_creds_unrefp) sd_bus_creds *creds = NULL;
1510         _cleanup_(pidref_done) PidRef pidref = PIDREF_NULL;
1511
1512         assert(message);
1513         assert(manager);
1514         assert(method);
1515
1516         if (sd_bus_query_sender_creds(message, SD_BUS_CREDS_PID|SD_BUS_CREDS_PIDFD|SD_BUS_CREDS_AUGMENT|SD_BUS_CREDS_COMM, &creds) < 0)
1517                 return;
1518
1519         /* We need at least the PID, otherwise there's nothing to log, the rest is optional. */
1520         if (bus_creds_get_pidref(creds, &pidref) < 0)
1521                 return;
1522
1523         const char *comm = NULL;
1524         Unit *caller;
1525
1526         (void) sd_bus_creds_get_comm(creds, &comm);
1527         caller = manager_get_unit_by_pidref(manager, &pidref);
1528
1529         log_notice("%s requested from client PID " PID_FMT "%s%s%s%s%s%s...",
1530                    method, pidref.pid,
1531                    comm ? " ('" : "", strempty(comm), comm ? "')" : "",
1532                    caller ? " (unit " : "", caller ? caller->id : "", caller ? ")" : "");
1533 }
1534
1535 static int method_reload(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1536         Manager *m = ASSERT_PTR(userdata);
1537         int r;
1538
1539         assert(message);
1540
1541         r = mac_selinux_access_check(message, "reload", error);
1542         if (r < 0)
1543                 return r;
1544
1545         r = bus_verify_reload_daemon_async(m, message, error);
1546         if (r < 0)
1547                 return r;
1548         if (r == 0)
1549                 return 1; /* No authorization for now, but the async polkit stuff will call us again when it has it */
1550
1551         /* Write a log message noting the unit or process who requested the Reload() */
1552         log_caller(message, m, "Reload");
1553
1554         /* Check the rate limit after the authorization succeeds, to avoid denial-of-service issues. */
1555         if (!ratelimit_below(&m->reload_reexec_ratelimit)) {
1556                 log_warning("Reloading request rejected due to rate limit.");
1557                 return sd_bus_error_set(error,
1558                                         SD_BUS_ERROR_LIMITS_EXCEEDED,
1559                                         "Reload() request rejected due to rate limit.");
1560         }
1561
1562         /* Instead of sending the reply back right away, we just
1563          * remember that we need to and then send it after the reload
1564          * is finished. That way the caller knows when the reload
1565          * finished. */
1566
1567         assert(!m->pending_reload_message);
1568         r = sd_bus_message_new_method_return(message, &m->pending_reload_message);
1569         if (r < 0)
1570                 return r;
1571
1572         m->objective = MANAGER_RELOAD;
1573
1574         return 1;
1575 }
1576
1577 static int method_reexecute(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1578         Manager *m = ASSERT_PTR(userdata);
1579         int r;
1580
1581         assert(message);
1582
1583         r = mac_selinux_access_check(message, "reload", error);
1584         if (r < 0)
1585                 return r;
1586
1587         r = bus_verify_reload_daemon_async(m, message, error);
1588         if (r < 0)
1589                 return r;
1590         if (r == 0)
1591                 return 1; /* No authorization for now, but the async polkit stuff will call us again when it has it */
1592
1593         /* Write a log message noting the unit or process who requested the Reexecute() */
1594         log_caller(message, m, "Reexecution");
1595
1596         /* Check the rate limit after the authorization succeeds, to avoid denial-of-service issues. */
1597         if (!ratelimit_below(&m->reload_reexec_ratelimit)) {
1598                 log_warning("Reexecution request rejected due to rate limit.");
1599                 return sd_bus_error_set(error,
1600                                         SD_BUS_ERROR_LIMITS_EXCEEDED,
1601                                         "Reexecute() request rejected due to rate limit.");
1602         }
1603
1604         /* We don't send a reply back here, the client should
1605          * just wait for us disconnecting. */
1606
1607         m->objective = MANAGER_REEXECUTE;
1608         return 1;
1609 }
1610
1611 static int method_exit(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1612         Manager *m = ASSERT_PTR(userdata);
1613         int r;
1614
1615         assert(message);
1616
1617         r = mac_selinux_access_check(message, "halt", error);
1618         if (r < 0)
1619                 return r;
1620
1621         log_caller(message, m, "Exit");
1622
1623         /* Exit() (in contrast to SetExitCode()) is actually allowed even if
1624          * we are running on the host. It will fall back on reboot() in
1625          * systemd-shutdown if it cannot do the exit() because it isn't a
1626          * container. */
1627
1628         m->objective = MANAGER_EXIT;
1629
1630         return sd_bus_reply_method_return(message, NULL);
1631 }
1632
1633 static int method_reboot(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1634         Manager *m = ASSERT_PTR(userdata);
1635         int r;
1636
1637         assert(message);
1638
1639         if (!MANAGER_IS_SYSTEM(m))
1640                 return sd_bus_error_set(error, SD_BUS_ERROR_NOT_SUPPORTED,
1641                                         "Reboot is only supported by system manager.");
1642
1643         r = mac_selinux_access_check(message, "reboot", error);
1644         if (r < 0)
1645                 return r;
1646
1647         log_caller(message, m, "Reboot");
1648
1649         m->objective = MANAGER_REBOOT;
1650
1651         return sd_bus_reply_method_return(message, NULL);
1652 }
1653
1654 static int method_soft_reboot(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1655         Manager *m = ASSERT_PTR(userdata);
1656         _cleanup_free_ char *rt = NULL;
1657         const char *root;
1658         int r;
1659
1660         assert(message);
1661
1662         if (!MANAGER_IS_SYSTEM(m))
1663                 return sd_bus_error_set(error, SD_BUS_ERROR_NOT_SUPPORTED,
1664                                         "Soft reboot is only supported by system manager.");
1665
1666         r = mac_selinux_access_check(message, "reboot", error);
1667         if (r < 0)
1668                 return r;
1669
1670         r = sd_bus_message_read(message, "s", &root);
1671         if (r < 0)
1672                 return r;
1673
1674         if (!isempty(root)) {
1675                 if (!path_is_valid(root))
1676                         return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS,
1677                                                  "New root directory '%s' must be a valid path.", root);
1678                 if (!path_is_absolute(root))
1679                         return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS,
1680                                                  "New root directory path '%s' is not absolute.", root);
1681
1682                 r = path_simplify_alloc(root, &rt);
1683                 if (r < 0)
1684                         return r;
1685         }
1686
1687         log_caller(message, m, "Soft reboot");
1688
1689         free_and_replace(m->switch_root, rt);
1690         m->objective = MANAGER_SOFT_REBOOT;
1691
1692         return sd_bus_reply_method_return(message, NULL);
1693 }
1694
1695 static int method_poweroff(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1696         Manager *m = ASSERT_PTR(userdata);
1697         int r;
1698
1699         assert(message);
1700
1701         if (!MANAGER_IS_SYSTEM(m))
1702                 return sd_bus_error_set(error, SD_BUS_ERROR_NOT_SUPPORTED,
1703                                         "Powering off is only supported by system manager.");
1704
1705         r = mac_selinux_access_check(message, "halt", error);
1706         if (r < 0)
1707                 return r;
1708
1709         log_caller(message, m, "Poweroff");
1710
1711         m->objective = MANAGER_POWEROFF;
1712
1713         return sd_bus_reply_method_return(message, NULL);
1714 }
1715
1716 static int method_halt(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1717         Manager *m = ASSERT_PTR(userdata);
1718         int r;
1719
1720         assert(message);
1721
1722         if (!MANAGER_IS_SYSTEM(m))
1723                 return sd_bus_error_set(error, SD_BUS_ERROR_NOT_SUPPORTED,
1724                                         "Halt is only supported by system manager.");
1725
1726         r = mac_selinux_access_check(message, "halt", error);
1727         if (r < 0)
1728                 return r;
1729
1730         log_caller(message, m, "Halt");
1731
1732         m->objective = MANAGER_HALT;
1733
1734         return sd_bus_reply_method_return(message, NULL);
1735 }
1736
1737 static int method_kexec(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1738         Manager *m = ASSERT_PTR(userdata);
1739         int r;
1740
1741         assert(message);
1742
1743         if (!MANAGER_IS_SYSTEM(m))
1744                 return sd_bus_error_set(error, SD_BUS_ERROR_NOT_SUPPORTED,
1745                                         "KExec is only supported by system manager.");
1746
1747         r = mac_selinux_access_check(message, "reboot", error);
1748         if (r < 0)
1749                 return r;
1750
1751         log_caller(message, m, "Kexec");
1752
1753         m->objective = MANAGER_KEXEC;
1754
1755         return sd_bus_reply_method_return(message, NULL);
1756 }
1757
1758 static int method_switch_root(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1759         Manager *m = ASSERT_PTR(userdata);
1760         _cleanup_free_ char *ri = NULL, *rt = NULL;
1761         const char *root, *init;
1762         int r;
1763
1764         assert(message);
1765
1766         if (!MANAGER_IS_SYSTEM(m))
1767                 return sd_bus_error_set(error, SD_BUS_ERROR_NOT_SUPPORTED,
1768                                         "Root switching is only supported by system manager.");
1769
1770         r = mac_selinux_access_check(message, "reboot", error);
1771         if (r < 0)
1772                 return r;
1773
1774         r = sd_bus_message_read(message, "ss", &root, &init);
1775         if (r < 0)
1776                 return r;
1777
1778         if (isempty(root))
1779                 /* If path is not specified, default to "/sysroot" which is what we generally expect initrds
1780                  * to use */
1781                 root = "/sysroot";
1782         else {
1783                 if (!path_is_valid(root))
1784                         return sd_bus_error_set(error, SD_BUS_ERROR_INVALID_ARGS,
1785                                                 "New root directory must be a valid path.");
1786
1787                 if (!path_is_absolute(root))
1788                         return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS,
1789                                                  "New root path '%s' is not absolute.", root);
1790
1791                 r = path_is_root(root);
1792                 if (r < 0)
1793                         return sd_bus_error_set_errnof(error, r,
1794                                                        "Failed to check if new root directory '%s' is the same as old root: %m",
1795                                                        root);
1796                 if (r > 0)
1797                         return sd_bus_error_set(error, SD_BUS_ERROR_INVALID_ARGS,
1798                                                 "New root directory cannot be the old root directory.");
1799         }
1800
1801         /* Safety check */
1802         if (!in_initrd())
1803                 return sd_bus_error_set(error, SD_BUS_ERROR_INVALID_ARGS,
1804                                         "Not in initrd, refusing switch-root operation.");
1805
1806         r = path_is_os_tree(root);
1807         if (r < 0)
1808                 return sd_bus_error_set_errnof(error, r,
1809                                                "Failed to determine whether root path '%s' contains an OS tree: %m",
1810                                                root);
1811         if (r == 0)
1812                 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS,
1813                                          "Specified switch root path '%s' does not seem to be an OS tree. os-release file is missing.",
1814                                          root);
1815
1816         if (!isempty(init)) {
1817                 if (!path_is_valid(init))
1818                         return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS,
1819                                                  "Path to init binary '%s' is not a valid path.", init);
1820
1821                 if (!path_is_absolute(init))
1822                         return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS,
1823                                                  "Path to init binary '%s' not absolute.", init);
1824
1825                 r = chase_and_access(init, root, CHASE_PREFIX_ROOT, X_OK, NULL);
1826                 if (r == -EACCES)
1827                         return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS,
1828                                                  "Init binary %s is not executable.", init);
1829                 if (r < 0)
1830                         return sd_bus_error_set_errnof(error, r,
1831                                                        "Could not resolve init executable %s: %m", init);
1832         }
1833
1834         r = path_simplify_alloc(root, &rt);
1835         if (r < 0)
1836                 return r;
1837
1838         if (!isempty(init)) {
1839                 r = path_simplify_alloc(init, &ri);
1840                 if (r < 0)
1841                         return r;
1842         }
1843
1844         free_and_replace(m->switch_root, rt);
1845         free_and_replace(m->switch_root_init, ri);
1846
1847         m->objective = MANAGER_SWITCH_ROOT;
1848
1849         return sd_bus_reply_method_return(message, NULL);
1850 }
1851
1852 static int method_set_environment(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1853         _cleanup_strv_free_ char **plus = NULL;
1854         Manager *m = ASSERT_PTR(userdata);
1855         int r;
1856
1857         assert(message);
1858
1859         r = mac_selinux_access_check(message, "reload", error);
1860         if (r < 0)
1861                 return r;
1862
1863         r = sd_bus_message_read_strv(message, &plus);
1864         if (r < 0)
1865                 return r;
1866         if (!strv_env_is_valid(plus))
1867                 return sd_bus_error_set(error, SD_BUS_ERROR_INVALID_ARGS, "Invalid environment assignments");
1868
1869         r = bus_verify_set_environment_async(m, message, error);
1870         if (r < 0)
1871                 return r;
1872         if (r == 0)
1873                 return 1; /* No authorization for now, but the async polkit stuff will call us again when it has it */
1874
1875         r = manager_client_environment_modify(m, NULL, plus);
1876         if (r < 0)
1877                 return r;
1878
1879         return sd_bus_reply_method_return(message, NULL);
1880 }
1881
1882 static int method_unset_environment(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1883         _cleanup_strv_free_ char **minus = NULL;
1884         Manager *m = ASSERT_PTR(userdata);
1885         int r;
1886
1887         assert(message);
1888
1889         r = mac_selinux_access_check(message, "reload", error);
1890         if (r < 0)
1891                 return r;
1892
1893         r = sd_bus_message_read_strv(message, &minus);
1894         if (r < 0)
1895                 return r;
1896
1897         if (!strv_env_name_or_assignment_is_valid(minus))
1898                 return sd_bus_error_set(error, SD_BUS_ERROR_INVALID_ARGS,
1899                                         "Invalid environment variable names or assignments");
1900
1901         r = bus_verify_set_environment_async(m, message, error);
1902         if (r < 0)
1903                 return r;
1904         if (r == 0)
1905                 return 1; /* No authorization for now, but the async polkit stuff will call us again when it has it */
1906
1907         r = manager_client_environment_modify(m, minus, NULL);
1908         if (r < 0)
1909                 return r;
1910
1911         return sd_bus_reply_method_return(message, NULL);
1912 }
1913
1914 static int method_unset_and_set_environment(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1915         _cleanup_strv_free_ char **minus = NULL, **plus = NULL;
1916         Manager *m = ASSERT_PTR(userdata);
1917         int r;
1918
1919         assert(message);
1920
1921         r = mac_selinux_access_check(message, "reload", error);
1922         if (r < 0)
1923                 return r;
1924
1925         r = sd_bus_message_read_strv(message, &minus);
1926         if (r < 0)
1927                 return r;
1928
1929         r = sd_bus_message_read_strv(message, &plus);
1930         if (r < 0)
1931                 return r;
1932
1933         if (!strv_env_name_or_assignment_is_valid(minus))
1934                 return sd_bus_error_set(error, SD_BUS_ERROR_INVALID_ARGS,
1935                                         "Invalid environment variable names or assignments");
1936         if (!strv_env_is_valid(plus))
1937                 return sd_bus_error_set(error, SD_BUS_ERROR_INVALID_ARGS,
1938                                         "Invalid environment assignments");
1939
1940         r = bus_verify_set_environment_async(m, message, error);
1941         if (r < 0)
1942                 return r;
1943         if (r == 0)
1944                 return 1; /* No authorization for now, but the async polkit stuff will call us again when it has it */
1945
1946         r = manager_client_environment_modify(m, minus, plus);
1947         if (r < 0)
1948                 return r;
1949
1950         return sd_bus_reply_method_return(message, NULL);
1951 }
1952
1953 static int method_set_exit_code(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1954         Manager *m = ASSERT_PTR(userdata);
1955         uint8_t code;
1956         int r;
1957
1958         assert(message);
1959
1960         r = mac_selinux_access_check(message, "exit", error);
1961         if (r < 0)
1962                 return r;
1963
1964         r = sd_bus_message_read_basic(message, 'y', &code);
1965         if (r < 0)
1966                 return r;
1967
1968         m->return_value = code;
1969
1970         return sd_bus_reply_method_return(message, NULL);
1971 }
1972
1973 static int method_lookup_dynamic_user_by_name(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1974         Manager *m = ASSERT_PTR(userdata);
1975         const char *name;
1976         uid_t uid;
1977         int r;
1978
1979         assert(message);
1980
1981         r = sd_bus_message_read_basic(message, 's', &name);
1982         if (r < 0)
1983                 return r;
1984
1985         if (!MANAGER_IS_SYSTEM(m))
1986                 return sd_bus_error_set(error, SD_BUS_ERROR_NOT_SUPPORTED,
1987                                         "Dynamic users are only supported in the system instance.");
1988         if (!valid_user_group_name(name, VALID_USER_RELAX))
1989                 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS,
1990                                          "User name invalid: %s", name);
1991
1992         r = dynamic_user_lookup_name(m, name, &uid);
1993         if (r == -ESRCH)
1994                 return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_DYNAMIC_USER,
1995                                          "Dynamic user %s does not exist.", name);
1996         if (r < 0)
1997                 return r;
1998
1999         return sd_bus_reply_method_return(message, "u", (uint32_t) uid);
2000 }
2001
2002 static int method_lookup_dynamic_user_by_uid(sd_bus_message *message, void *userdata, sd_bus_error *error) {
2003         _cleanup_free_ char *name = NULL;
2004         Manager *m = ASSERT_PTR(userdata);
2005         uid_t uid;
2006         int r;
2007
2008         assert(message);
2009
2010         assert_cc(sizeof(uid_t) == sizeof(uint32_t));
2011         r = sd_bus_message_read_basic(message, 'u', &uid);
2012         if (r < 0)
2013                 return r;
2014
2015         if (!MANAGER_IS_SYSTEM(m))
2016                 return sd_bus_error_set(error, SD_BUS_ERROR_NOT_SUPPORTED,
2017                                         "Dynamic users are only supported in the system instance.");
2018         if (!uid_is_valid(uid))
2019                 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS,
2020                                          "User ID invalid: " UID_FMT, uid);
2021
2022         r = dynamic_user_lookup_uid(m, uid, &name);
2023         if (r == -ESRCH)
2024                 return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_DYNAMIC_USER,
2025                                          "Dynamic user ID " UID_FMT " does not exist.", uid);
2026         if (r < 0)
2027                 return r;
2028
2029         return sd_bus_reply_method_return(message, "s", name);
2030 }
2031
2032 static int method_get_dynamic_users(sd_bus_message *message, void *userdata, sd_bus_error *error) {
2033         _cleanup_(sd_bus_message_unrefp) sd_bus_message *reply = NULL;
2034         Manager *m = ASSERT_PTR(userdata);
2035         DynamicUser *d;
2036         int r;
2037
2038         assert(message);
2039
2040         assert_cc(sizeof(uid_t) == sizeof(uint32_t));
2041
2042         if (!MANAGER_IS_SYSTEM(m))
2043                 return sd_bus_error_set(error, SD_BUS_ERROR_NOT_SUPPORTED,
2044                                         "Dynamic users are only supported in the system instance.");
2045
2046         r = sd_bus_message_new_method_return(message, &reply);
2047         if (r < 0)
2048                 return r;
2049
2050         r = sd_bus_message_open_container(reply, 'a', "(us)");
2051         if (r < 0)
2052                 return r;
2053
2054         HASHMAP_FOREACH(d, m->dynamic_users) {
2055                 uid_t uid;
2056
2057                 r = dynamic_user_current(d, &uid);
2058                 if (r == -EAGAIN) /* not realized yet? */
2059                         continue;
2060                 if (r < 0)
2061                         return sd_bus_error_set(error, SD_BUS_ERROR_FAILED,
2062                                                 "Failed to look up a dynamic user.");
2063
2064                 r = sd_bus_message_append(reply, "(us)", uid, d->name);
2065                 if (r < 0)
2066                         return r;
2067         }
2068
2069         r = sd_bus_message_close_container(reply);
2070         if (r < 0)
2071                 return r;
2072
2073         return sd_bus_message_send(reply);
2074 }
2075
2076 static int method_enqueue_marked_jobs(sd_bus_message *message, void *userdata, sd_bus_error *error) {
2077         Manager *m = ASSERT_PTR(userdata);
2078         int r;
2079
2080         assert(message);
2081
2082         r = mac_selinux_access_check(message, "start", error);
2083         if (r < 0)
2084                 return r;
2085
2086         r = bus_verify_manage_units_async(m, message, error);
2087         if (r < 0)
2088                 return r;
2089         if (r == 0)
2090                 return 1; /* No authorization for now, but the async polkit stuff will call us again when it has it */
2091
2092         log_info("Queuing reload/restart jobs for marked units%s", glyph(GLYPH_ELLIPSIS));
2093
2094         _cleanup_(sd_bus_message_unrefp) sd_bus_message *reply = NULL;
2095         r = sd_bus_message_new_method_return(message, &reply);
2096         if (r < 0)
2097                 return r;
2098
2099         r = sd_bus_message_open_container(reply, 'a', "o");
2100         if (r < 0)
2101                 return r;
2102
2103         Unit *u;
2104         char *k;
2105         int ret = 0;
2106         HASHMAP_FOREACH_KEY(u, k, m->units) {
2107                 /* ignore aliases */
2108                 if (u->id != k)
2109                         continue;
2110
2111                 BusUnitQueueFlags flags;
2112                 if (BIT_SET(u->markers, UNIT_MARKER_NEEDS_RESTART))
2113                         flags = 0;
2114                 else if (BIT_SET(u->markers, UNIT_MARKER_NEEDS_RELOAD))
2115                         flags = BUS_UNIT_QUEUE_RELOAD_IF_POSSIBLE;
2116                 else
2117                         continue;
2118
2119                 r = mac_selinux_unit_access_check(u, message, "start", error);
2120                 if (r >= 0)
2121                         r = bus_unit_queue_job_one(message, u,
2122                                                    JOB_TRY_RESTART, JOB_FAIL, flags,
2123                                                    reply, error);
2124                 if (ERRNO_IS_NEG_RESOURCE(r))
2125                         return r;
2126                 if (r < 0) {
2127                         if (ret >= 0)
2128                                 ret = r;
2129                         sd_bus_error_free(error);
2130                 }
2131         }
2132
2133         if (ret < 0)
2134                 return sd_bus_error_set_errnof(error, ret,
2135                                                "Failed to enqueue some jobs, see logs for details: %m");
2136
2137         r = sd_bus_message_close_container(reply);
2138         if (r < 0)
2139                 return r;
2140
2141         return sd_bus_message_send(reply);
2142 }
2143
2144 static int list_unit_files_by_patterns(sd_bus_message *message, void *userdata, sd_bus_error *error, char **states, char **patterns) {
2145         Manager *m = ASSERT_PTR(userdata);
2146         _cleanup_(sd_bus_message_unrefp) sd_bus_message *reply = NULL;
2147         _cleanup_hashmap_free_ Hashmap *h = NULL;
2148         int r;
2149
2150         assert(message);
2151
2152         /* Anyone can call this method */
2153
2154         r = mac_selinux_access_check(message, "status", error);
2155         if (r < 0)
2156                 return r;
2157
2158         r = sd_bus_message_new_method_return(message, &reply);
2159         if (r < 0)
2160                 return r;
2161
2162         r = unit_file_get_list(m->runtime_scope, /* root_dir = */ NULL, states, patterns, &h);
2163         if (r < 0)
2164                 return r;
2165
2166         r = sd_bus_message_open_container(reply, 'a', "(ss)");
2167         if (r < 0)
2168                 return r;
2169
2170         UnitFileList *item;
2171         HASHMAP_FOREACH(item, h) {
2172                 r = sd_bus_message_append(reply, "(ss)", item->path, unit_file_state_to_string(item->state));
2173                 if (r < 0)
2174                         return r;
2175         }
2176
2177         r = sd_bus_message_close_container(reply);
2178         if (r < 0)
2179                 return r;
2180
2181         return sd_bus_message_send(reply);
2182 }
2183
2184 static int method_list_unit_files(sd_bus_message *message, void *userdata, sd_bus_error *error) {
2185         return list_unit_files_by_patterns(message, userdata, error, NULL, NULL);
2186 }
2187
2188 static int method_list_unit_files_by_patterns(sd_bus_message *message, void *userdata, sd_bus_error *error) {
2189         _cleanup_strv_free_ char **states = NULL;
2190         _cleanup_strv_free_ char **patterns = NULL;
2191         int r;
2192
2193         r = sd_bus_message_read_strv(message, &states);
2194         if (r < 0)
2195                 return r;
2196
2197         r = sd_bus_message_read_strv(message, &patterns);
2198         if (r < 0)
2199                 return r;
2200
2201         return list_unit_files_by_patterns(message, userdata, error, states, patterns);
2202 }
2203
2204 static int method_get_unit_file_state(sd_bus_message *message, void *userdata, sd_bus_error *error) {
2205         Manager *m = ASSERT_PTR(userdata);
2206         const char *name;
2207         UnitFileState state;
2208         int r;
2209
2210         assert(message);
2211
2212         /* Anyone can call this method */
2213
2214         r = mac_selinux_access_check(message, "status", error);
2215         if (r < 0)
2216                 return r;
2217
2218         r = sd_bus_message_read(message, "s", &name);
2219         if (r < 0)
2220                 return r;
2221
2222         r = unit_file_get_state(m->runtime_scope, NULL, name, &state);
2223         if (r < 0)
2224                 return r;
2225
2226         return sd_bus_reply_method_return(message, "s", unit_file_state_to_string(state));
2227 }
2228
2229 static int method_get_default_target(sd_bus_message *message, void *userdata, sd_bus_error *error) {
2230         _cleanup_free_ char *default_target = NULL;
2231         Manager *m = ASSERT_PTR(userdata);
2232         int r;
2233
2234         assert(message);
2235
2236         /* Anyone can call this method */
2237
2238         r = mac_selinux_access_check(message, "status", error);
2239         if (r < 0)
2240                 return r;
2241
2242         r = unit_file_get_default(m->runtime_scope, NULL, &default_target);
2243         if (r == -ERFKILL)
2244                 return sd_bus_error_set(error, BUS_ERROR_UNIT_MASKED, "Default target unit file is masked.");
2245         if (r < 0)
2246                 return r;
2247
2248         return sd_bus_reply_method_return(message, "s", default_target);
2249 }
2250
2251 static int send_unit_files_changed(sd_bus *bus, void *userdata) {
2252         _cleanup_(sd_bus_message_unrefp) sd_bus_message *message = NULL;
2253         int r;
2254
2255         assert(bus);
2256
2257         r = sd_bus_message_new_signal(bus, &message,
2258                                       "/org/freedesktop/systemd1",
2259                                       "org.freedesktop.systemd1.Manager",
2260                                       "UnitFilesChanged");
2261         if (r < 0)
2262                 return r;
2263
2264         return sd_bus_send(bus, message, NULL);
2265 }
2266
2267 static void manager_unit_files_changed(Manager *m, const InstallChange *changes, size_t n_changes) {
2268         int r;
2269
2270         assert(m);
2271         assert(changes || n_changes == 0);
2272
2273         if (!install_changes_have_modification(changes, n_changes))
2274                 return;
2275
2276         /* See comments for this variable in manager.h */
2277         m->unit_file_state_outdated = true;
2278
2279         r = bus_foreach_bus(m, NULL, send_unit_files_changed, NULL);
2280         if (r < 0)
2281                 log_debug_errno(r, "Failed to send UnitFilesChanged signal, ignoring: %m");
2282 }
2283
2284 static int install_error(
2285                 sd_bus_error *error,
2286                 int c,
2287                 InstallChange *changes,
2288                 size_t n_changes) {
2289
2290         int r;
2291
2292         /* Create an error reply, using the error information from changes[] if possible, and fall back to
2293          * generating an error from error code c. The error message only describes the first error. */
2294
2295         assert(changes || n_changes == 0);
2296
2297         CLEANUP_ARRAY(changes, n_changes, install_changes_free);
2298
2299         FOREACH_ARRAY(i, changes, n_changes) {
2300                 _cleanup_free_ char *err_message = NULL;
2301                 const char *bus_error;
2302
2303                 if (i->type >= 0)
2304                         continue;
2305
2306                 r = install_change_dump_error(i, &err_message, &bus_error);
2307                 if (r == -ENOMEM)
2308                         return r;
2309                 if (r < 0)
2310                         return sd_bus_error_set_errnof(error, r, "File %s: %m", i->path);
2311
2312                 return sd_bus_error_set(error, bus_error, err_message);
2313         }
2314
2315         return c < 0 ? c : -EINVAL;
2316 }
2317
2318 static int reply_install_changes_and_free(
2319                 Manager *m,
2320                 sd_bus_message *message,
2321                 int carries_install_info,
2322                 InstallChange *changes,
2323                 size_t n_changes,
2324                 sd_bus_error *error) {
2325
2326         _cleanup_(sd_bus_message_unrefp) sd_bus_message *reply = NULL;
2327         bool bad = false, good = false;
2328         int r;
2329
2330         CLEANUP_ARRAY(changes, n_changes, install_changes_free);
2331
2332         r = sd_bus_message_new_method_return(message, &reply);
2333         if (r < 0)
2334                 return r;
2335
2336         if (carries_install_info >= 0) {
2337                 r = sd_bus_message_append(reply, "b", carries_install_info);
2338                 if (r < 0)
2339                         return r;
2340         }
2341
2342         r = sd_bus_message_open_container(reply, 'a', "(sss)");
2343         if (r < 0)
2344                 return r;
2345
2346         FOREACH_ARRAY(i, changes, n_changes) {
2347                 if (i->type < 0) {
2348                         bad = true;
2349                         continue;
2350                 }
2351
2352                 r = sd_bus_message_append(
2353                                 reply, "(sss)",
2354                                 install_change_type_to_string(i->type),
2355                                 i->path,
2356                                 i->source);
2357                 if (r < 0)
2358                         return r;
2359
2360                 good = true;
2361         }
2362
2363         /* If there was a failed change, and no successful change, then return the first failure as proper
2364          * method call error. */
2365         if (bad && !good)
2366                 return install_error(error, 0, TAKE_PTR(changes), n_changes);
2367
2368         r = sd_bus_message_close_container(reply);
2369         if (r < 0)
2370                 return r;
2371
2372         return sd_bus_message_send(reply);
2373 }
2374
2375 static int method_enable_unit_files_generic(
2376                 sd_bus_message *message,
2377                 Manager *m,
2378                 int (*call)(RuntimeScope scope, UnitFileFlags flags, const char *root_dir, char * const *files, InstallChange **changes, size_t *n_changes),
2379                 bool carries_install_info,
2380                 sd_bus_error *error) {
2381
2382         _cleanup_strv_free_ char **l = NULL;
2383         InstallChange *changes = NULL;
2384         size_t n_changes = 0;
2385         UnitFileFlags flags;
2386         int r;
2387
2388         assert(message);
2389         assert(m);
2390
2391         r = sd_bus_message_read_strv(message, &l);
2392         if (r < 0)
2393                 return r;
2394
2395         if (sd_bus_message_is_method_call(message, NULL, "EnableUnitFilesWithFlags")) {
2396                 uint64_t raw_flags;
2397
2398                 r = sd_bus_message_read(message, "t", &raw_flags);
2399                 if (r < 0)
2400                         return r;
2401                 if ((raw_flags & ~_UNIT_FILE_FLAGS_MASK_PUBLIC) != 0)
2402                         return -EINVAL;
2403                 flags = raw_flags;
2404         } else {
2405                 int runtime, force;
2406
2407                 r = sd_bus_message_read(message, "bb", &runtime, &force);
2408                 if (r < 0)
2409                         return r;
2410                 flags = unit_file_bools_to_flags(runtime, force);
2411         }
2412
2413         r = bus_verify_manage_unit_files_async(m, message, error);
2414         if (r < 0)
2415                 return r;
2416         if (r == 0)
2417                 return 1; /* No authorization for now, but the async polkit stuff will call us again when it has it */
2418
2419         r = call(m->runtime_scope, flags, NULL, l, &changes, &n_changes);
2420         manager_unit_files_changed(m, changes, n_changes);
2421         if (r < 0)
2422                 return install_error(error, r, changes, n_changes);
2423
2424         return reply_install_changes_and_free(m, message, carries_install_info ? r : -1, changes, n_changes, error);
2425 }
2426
2427 static int method_enable_unit_files_with_flags(sd_bus_message *message, void *userdata, sd_bus_error *error) {
2428         return method_enable_unit_files_generic(message, userdata, unit_file_enable, /* carries_install_info = */ true, error);
2429 }
2430
2431 static int method_enable_unit_files(sd_bus_message *message, void *userdata, sd_bus_error *error) {
2432         return method_enable_unit_files_generic(message, userdata, unit_file_enable, /* carries_install_info = */ true, error);
2433 }
2434
2435 static int method_reenable_unit_files(sd_bus_message *message, void *userdata, sd_bus_error *error) {
2436         return method_enable_unit_files_generic(message, userdata, unit_file_reenable, /* carries_install_info = */ true, error);
2437 }
2438
2439 static int method_link_unit_files(sd_bus_message *message, void *userdata, sd_bus_error *error) {
2440         return method_enable_unit_files_generic(message, userdata, unit_file_link, /* carries_install_info = */ false, error);
2441 }
2442
2443 static int unit_file_preset_without_mode(RuntimeScope scope, UnitFileFlags flags, const char *root_dir, char * const *files, InstallChange **changes, size_t *n_changes) {
2444         return unit_file_preset(scope, flags, root_dir, files, UNIT_FILE_PRESET_FULL, changes, n_changes);
2445 }
2446
2447 static int method_preset_unit_files(sd_bus_message *message, void *userdata, sd_bus_error *error) {
2448         return method_enable_unit_files_generic(message, userdata, unit_file_preset_without_mode, /* carries_install_info = */ true, error);
2449 }
2450
2451 static int method_mask_unit_files(sd_bus_message *message, void *userdata, sd_bus_error *error) {
2452         return method_enable_unit_files_generic(message, userdata, unit_file_mask, /* carries_install_info = */ false, error);
2453 }
2454
2455 static int method_preset_unit_files_with_mode(sd_bus_message *message, void *userdata, sd_bus_error *error) {
2456
2457         _cleanup_strv_free_ char **l = NULL;
2458         InstallChange *changes = NULL;
2459         size_t n_changes = 0;
2460         Manager *m = ASSERT_PTR(userdata);
2461         UnitFilePresetMode preset_mode;
2462         int runtime, force, r;
2463         UnitFileFlags flags;
2464         const char *mode;
2465
2466         assert(message);
2467
2468         r = sd_bus_message_read_strv(message, &l);
2469         if (r < 0)
2470                 return r;
2471
2472         r = sd_bus_message_read(message, "sbb", &mode, &runtime, &force);
2473         if (r < 0)
2474                 return r;
2475
2476         flags = unit_file_bools_to_flags(runtime, force);
2477
2478         if (isempty(mode))
2479                 preset_mode = UNIT_FILE_PRESET_FULL;
2480         else {
2481                 preset_mode = unit_file_preset_mode_from_string(mode);
2482                 if (preset_mode < 0)
2483                         return -EINVAL;
2484         }
2485
2486         r = bus_verify_manage_unit_files_async(m, message, error);
2487         if (r < 0)
2488                 return r;
2489         if (r == 0)
2490                 return 1; /* No authorization for now, but the async polkit stuff will call us again when it has it */
2491
2492         r = unit_file_preset(m->runtime_scope, flags, NULL, l, preset_mode, &changes, &n_changes);
2493         manager_unit_files_changed(m, changes, n_changes);
2494         if (r < 0)
2495                 return install_error(error, r, changes, n_changes);
2496
2497         return reply_install_changes_and_free(m, message, r, changes, n_changes, error);
2498 }
2499
2500 static int method_disable_unit_files_generic(
2501                 sd_bus_message *message,
2502                 Manager *m,
2503                 int (*call)(RuntimeScope scope, UnitFileFlags flags, const char *root_dir, char * const *files, InstallChange **changes, size_t *n_changes),
2504                 bool carries_install_info,
2505                 sd_bus_error *error) {
2506
2507         _cleanup_strv_free_ char **l = NULL;
2508         InstallChange *changes = NULL;
2509         UnitFileFlags flags;
2510         size_t n_changes = 0;
2511         int r;
2512
2513         assert(message);
2514         assert(m);
2515
2516         r = sd_bus_message_read_strv(message, &l);
2517         if (r < 0)
2518                 return r;
2519
2520         if (sd_bus_message_is_method_call(message, NULL, "DisableUnitFilesWithFlags") ||
2521             sd_bus_message_is_method_call(message, NULL, "DisableUnitFilesWithFlagsAndInstallInfo")) {
2522                 uint64_t raw_flags;
2523
2524                 r = sd_bus_message_read(message, "t", &raw_flags);
2525                 if (r < 0)
2526                         return r;
2527                 if ((raw_flags & ~_UNIT_FILE_FLAGS_MASK_PUBLIC) != 0 ||
2528                                 FLAGS_SET(raw_flags, UNIT_FILE_FORCE))
2529                         return -EINVAL;
2530                 flags = raw_flags;
2531         } else {
2532                 int runtime;
2533
2534                 r = sd_bus_message_read(message, "b", &runtime);
2535                 if (r < 0)
2536                         return r;
2537                 flags = unit_file_bools_to_flags(runtime, false);
2538         }
2539
2540         r = bus_verify_manage_unit_files_async(m, message, error);
2541         if (r < 0)
2542                 return r;
2543         if (r == 0)
2544                 return 1; /* No authorization for now, but the async polkit stuff will call us again when it has it */
2545
2546         r = call(m->runtime_scope, flags, NULL, l, &changes, &n_changes);
2547         manager_unit_files_changed(m, changes, n_changes);
2548         if (r < 0)
2549                 return install_error(error, r, changes, n_changes);
2550
2551         return reply_install_changes_and_free(m, message, carries_install_info ? r : -1, changes, n_changes, error);
2552 }
2553
2554 static int method_disable_unit_files_with_flags(sd_bus_message *message, void *userdata, sd_bus_error *error) {
2555         return method_disable_unit_files_generic(message, userdata, unit_file_disable, /* carries_install_info = */ false, error);
2556 }
2557
2558 static int method_disable_unit_files_with_flags_and_install_info(sd_bus_message *message, void *userdata, sd_bus_error *error) {
2559         return method_disable_unit_files_generic(message, userdata, unit_file_disable, /* carries_install_info = */ true, error);
2560 }
2561
2562 static int method_disable_unit_files(sd_bus_message *message, void *userdata, sd_bus_error *error) {
2563         return method_disable_unit_files_generic(message, userdata, unit_file_disable, /* carries_install_info = */ false, error);
2564 }
2565
2566 static int method_unmask_unit_files(sd_bus_message *message, void *userdata, sd_bus_error *error) {
2567         return method_disable_unit_files_generic(message, userdata, unit_file_unmask, /* carries_install_info = */ false, error);
2568 }
2569
2570 static int method_revert_unit_files(sd_bus_message *message, void *userdata, sd_bus_error *error) {
2571         _cleanup_strv_free_ char **l = NULL;
2572         InstallChange *changes = NULL;
2573         size_t n_changes = 0;
2574         Manager *m = ASSERT_PTR(userdata);
2575         int r;
2576
2577         assert(message);
2578
2579         r = sd_bus_message_read_strv(message, &l);
2580         if (r < 0)
2581                 return r;
2582
2583         r = bus_verify_manage_unit_files_async(m, message, error);
2584         if (r < 0)
2585                 return r;
2586         if (r == 0)
2587                 return 1; /* No authorization for now, but the async polkit stuff will call us again when it has it */
2588
2589         r = unit_file_revert(m->runtime_scope, NULL, l, &changes, &n_changes);
2590         manager_unit_files_changed(m, changes, n_changes);
2591         if (r < 0)
2592                 return install_error(error, r, changes, n_changes);
2593
2594         return reply_install_changes_and_free(m, message, -1, changes, n_changes, error);
2595 }
2596
2597 static int method_set_default_target(sd_bus_message *message, void *userdata, sd_bus_error *error) {
2598         InstallChange *changes = NULL;
2599         size_t n_changes = 0;
2600         Manager *m = ASSERT_PTR(userdata);
2601         const char *name;
2602         int force, r;
2603
2604         assert(message);
2605
2606         r = mac_selinux_access_check(message, "enable", error);
2607         if (r < 0)
2608                 return r;
2609
2610         r = sd_bus_message_read(message, "sb", &name, &force);
2611         if (r < 0)
2612                 return r;
2613
2614         r = bus_verify_manage_unit_files_async(m, message, error);
2615         if (r < 0)
2616                 return r;
2617         if (r == 0)
2618                 return 1; /* No authorization for now, but the async polkit stuff will call us again when it has it */
2619
2620         r = unit_file_set_default(m->runtime_scope, force ? UNIT_FILE_FORCE : 0, NULL, name, &changes, &n_changes);
2621         manager_unit_files_changed(m, changes, n_changes);
2622         if (r < 0)
2623                 return install_error(error, r, changes, n_changes);
2624
2625         return reply_install_changes_and_free(m, message, -1, changes, n_changes, error);
2626 }
2627
2628 static int method_preset_all_unit_files(sd_bus_message *message, void *userdata, sd_bus_error *error) {
2629         InstallChange *changes = NULL;
2630         size_t n_changes = 0;
2631         Manager *m = ASSERT_PTR(userdata);
2632         UnitFilePresetMode preset_mode;
2633         const char *mode;
2634         UnitFileFlags flags;
2635         int force, runtime, r;
2636
2637         assert(message);
2638
2639         r = mac_selinux_access_check(message, "enable", error);
2640         if (r < 0)
2641                 return r;
2642
2643         r = sd_bus_message_read(message, "sbb", &mode, &runtime, &force);
2644         if (r < 0)
2645                 return r;
2646
2647         flags = unit_file_bools_to_flags(runtime, force);
2648
2649         if (isempty(mode))
2650                 preset_mode = UNIT_FILE_PRESET_FULL;
2651         else {
2652                 preset_mode = unit_file_preset_mode_from_string(mode);
2653                 if (preset_mode < 0)
2654                         return -EINVAL;
2655         }
2656
2657         r = bus_verify_manage_unit_files_async(m, message, error);
2658         if (r < 0)
2659                 return r;
2660         if (r == 0)
2661                 return 1; /* No authorization for now, but the async polkit stuff will call us again when it has it */
2662
2663         r = unit_file_preset_all(m->runtime_scope, flags, NULL, preset_mode, &changes, &n_changes);
2664         manager_unit_files_changed(m, changes, n_changes);
2665         if (r < 0)
2666                 return install_error(error, r, changes, n_changes);
2667
2668         return reply_install_changes_and_free(m, message, -1, changes, n_changes, error);
2669 }
2670
2671 static int method_add_dependency_unit_files(sd_bus_message *message, void *userdata, sd_bus_error *error) {
2672         _cleanup_strv_free_ char **l = NULL;
2673         Manager *m = ASSERT_PTR(userdata);
2674         InstallChange *changes = NULL;
2675         size_t n_changes = 0;
2676         int runtime, force, r;
2677         char *target, *type;
2678         UnitDependency dep;
2679         UnitFileFlags flags;
2680
2681         assert(message);
2682
2683         r = bus_verify_manage_unit_files_async(m, message, error);
2684         if (r < 0)
2685                 return r;
2686         if (r == 0)
2687                 return 1; /* No authorization for now, but the async polkit stuff will call us again when it has it */
2688
2689         r = sd_bus_message_read_strv(message, &l);
2690         if (r < 0)
2691                 return r;
2692
2693         r = sd_bus_message_read(message, "ssbb", &target, &type, &runtime, &force);
2694         if (r < 0)
2695                 return r;
2696
2697         flags = unit_file_bools_to_flags(runtime, force);
2698
2699         dep = unit_dependency_from_string(type);
2700         if (dep < 0 || !IN_SET(dep, UNIT_WANTS, UNIT_REQUIRES))
2701                 return -EINVAL;
2702
2703         r = unit_file_add_dependency(m->runtime_scope, flags, NULL, l, target, dep, &changes, &n_changes);
2704         manager_unit_files_changed(m, changes, n_changes);
2705         if (r < 0)
2706                 return install_error(error, r, changes, n_changes);
2707
2708         return reply_install_changes_and_free(m, message, -1, changes, n_changes, error);
2709 }
2710
2711 static int method_get_unit_file_links(sd_bus_message *message, void *userdata, sd_bus_error *error) {
2712         _cleanup_(sd_bus_message_unrefp) sd_bus_message *reply = NULL;
2713         Manager *m = ASSERT_PTR(userdata);
2714         InstallChange *changes = NULL;
2715         size_t n_changes = 0, i;
2716         const char *name;
2717         int runtime, r;
2718
2719         CLEANUP_ARRAY(changes, n_changes, install_changes_free);
2720
2721         r = sd_bus_message_read(message, "sb", &name, &runtime);
2722         if (r < 0)
2723                 return r;
2724
2725         r = sd_bus_message_new_method_return(message, &reply);
2726         if (r < 0)
2727                 return r;
2728
2729         r = sd_bus_message_open_container(reply, SD_BUS_TYPE_ARRAY, "s");
2730         if (r < 0)
2731                 return r;
2732
2733         r = unit_file_disable(m->runtime_scope,
2734                               UNIT_FILE_DRY_RUN | (runtime ? UNIT_FILE_RUNTIME : 0),
2735                               NULL, STRV_MAKE(name), &changes, &n_changes);
2736         if (r < 0)
2737                 return log_error_errno(r, "Failed to get file links for %s: %m", name);
2738
2739         for (i = 0; i < n_changes; i++)
2740                 if (changes[i].type == INSTALL_CHANGE_UNLINK) {
2741                         r = sd_bus_message_append(reply, "s", changes[i].path);
2742                         if (r < 0)
2743                                 return r;
2744                 }
2745
2746         r = sd_bus_message_close_container(reply);
2747         if (r < 0)
2748                 return r;
2749
2750         return sd_bus_message_send(reply);
2751 }
2752
2753 static int method_get_job_waiting(sd_bus_message *message, void *userdata, sd_bus_error *error) {
2754         Manager *m = ASSERT_PTR(userdata);
2755         uint32_t id;
2756         Job *j;
2757         int r;
2758
2759         assert(message);
2760
2761         r = sd_bus_message_read(message, "u", &id);
2762         if (r < 0)
2763                 return r;
2764
2765         j = manager_get_job(m, id);
2766         if (!j)
2767                 return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_JOB, "Job %u does not exist.", (unsigned) id);
2768
2769         return bus_job_method_get_waiting_jobs(message, j, error);
2770 }
2771
2772 static int method_abandon_scope(sd_bus_message *message, void *userdata, sd_bus_error *error) {
2773         Manager *m = ASSERT_PTR(userdata);
2774         const char *name;
2775         Unit *u;
2776         int r;
2777
2778         assert(message);
2779
2780         r = sd_bus_message_read(message, "s", &name);
2781         if (r < 0)
2782                 return r;
2783
2784         r = bus_get_unit_by_name(m, message, name, &u, error);
2785         if (r < 0)
2786                 return r;
2787
2788         if (u->type != UNIT_SCOPE)
2789                 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS,
2790                                          "Unit '%s' is not a scope unit, refusing.", name);
2791
2792         return bus_scope_method_abandon(message, u, error);
2793 }
2794
2795 static int method_set_show_status(sd_bus_message *message, void *userdata, sd_bus_error *error) {
2796         Manager *m = ASSERT_PTR(userdata);
2797         ShowStatus mode = _SHOW_STATUS_INVALID;
2798         const char *t;
2799         int r;
2800
2801         assert(message);
2802
2803         r = mac_selinux_access_check(message, "reload", error);
2804         if (r < 0)
2805                 return r;
2806
2807         r = bus_verify_set_environment_async(m, message, error);
2808         if (r < 0)
2809                 return r;
2810         if (r == 0)
2811                 return 1; /* No authorization for now, but the async polkit stuff will call us again when it has it */
2812
2813         r = sd_bus_message_read(message, "s", &t);
2814         if (r < 0)
2815                 return r;
2816
2817         if (!isempty(t)) {
2818                 mode = show_status_from_string(t);
2819                 if (mode < 0)
2820                         return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS,
2821                                                  "Invalid show status '%s'", t);
2822         }
2823
2824         manager_override_show_status(m, mode, "bus");
2825
2826         return sd_bus_reply_method_return(message, NULL);
2827 }
2828
2829 static int method_dump_unit_descriptor_store(sd_bus_message *message, void *userdata, sd_bus_error *error) {
2830         return method_generic_unit_operation(message, userdata, error, UNIT_SERVICE, bus_service_method_dump_file_descriptor_store, GENERIC_UNIT_VALIDATE_LOADED);
2831 }
2832
2833 static int method_start_aux_scope(sd_bus_message *message, void *userdata, sd_bus_error *error) {
2834         return sd_bus_error_set(error, SD_BUS_ERROR_NOT_SUPPORTED, "StartAuxiliaryScope() method has been removed.");
2835 }
2836
2837 const sd_bus_vtable bus_manager_vtable[] = {
2838         SD_BUS_VTABLE_START(0),
2839
2840         SD_BUS_PROPERTY("Version", "s", property_get_version, 0, SD_BUS_VTABLE_PROPERTY_CONST),
2841         SD_BUS_PROPERTY("Features", "s", property_get_features, 0, SD_BUS_VTABLE_PROPERTY_CONST),
2842         SD_BUS_PROPERTY("Virtualization", "s", property_get_virtualization, 0, SD_BUS_VTABLE_PROPERTY_CONST),
2843         SD_BUS_PROPERTY("ConfidentialVirtualization", "s", property_get_confidential_virtualization, 0, SD_BUS_VTABLE_PROPERTY_CONST),
2844         SD_BUS_PROPERTY("Architecture", "s", property_get_architecture, 0, SD_BUS_VTABLE_PROPERTY_CONST),
2845         SD_BUS_PROPERTY("Tainted", "s", property_get_tainted, 0, SD_BUS_VTABLE_PROPERTY_CONST),
2846         BUS_PROPERTY_DUAL_TIMESTAMP("FirmwareTimestamp", offsetof(Manager, timestamps[MANAGER_TIMESTAMP_FIRMWARE]), SD_BUS_VTABLE_PROPERTY_CONST),
2847         BUS_PROPERTY_DUAL_TIMESTAMP("LoaderTimestamp", offsetof(Manager, timestamps[MANAGER_TIMESTAMP_LOADER]), SD_BUS_VTABLE_PROPERTY_CONST),
2848         BUS_PROPERTY_DUAL_TIMESTAMP("KernelTimestamp", offsetof(Manager, timestamps[MANAGER_TIMESTAMP_KERNEL]), SD_BUS_VTABLE_PROPERTY_CONST),
2849         BUS_PROPERTY_DUAL_TIMESTAMP("InitRDTimestamp", offsetof(Manager, timestamps[MANAGER_TIMESTAMP_INITRD]), SD_BUS_VTABLE_PROPERTY_CONST),
2850         BUS_PROPERTY_DUAL_TIMESTAMP("UserspaceTimestamp", offsetof(Manager, timestamps[MANAGER_TIMESTAMP_USERSPACE]), SD_BUS_VTABLE_PROPERTY_CONST),
2851         BUS_PROPERTY_DUAL_TIMESTAMP("FinishTimestamp", offsetof(Manager, timestamps[MANAGER_TIMESTAMP_FINISH]), SD_BUS_VTABLE_PROPERTY_CONST),
2852         BUS_PROPERTY_DUAL_TIMESTAMP("ShutdownStartTimestamp", offsetof(Manager, timestamps[MANAGER_TIMESTAMP_SHUTDOWN_START]), SD_BUS_VTABLE_PROPERTY_CONST),
2853         BUS_PROPERTY_DUAL_TIMESTAMP("SecurityStartTimestamp", offsetof(Manager, timestamps[MANAGER_TIMESTAMP_SECURITY_START]), SD_BUS_VTABLE_PROPERTY_CONST),
2854         BUS_PROPERTY_DUAL_TIMESTAMP("SecurityFinishTimestamp", offsetof(Manager, timestamps[MANAGER_TIMESTAMP_SECURITY_FINISH]), SD_BUS_VTABLE_PROPERTY_CONST),
2855         BUS_PROPERTY_DUAL_TIMESTAMP("GeneratorsStartTimestamp", offsetof(Manager, timestamps[MANAGER_TIMESTAMP_GENERATORS_START]), SD_BUS_VTABLE_PROPERTY_CONST),
2856         BUS_PROPERTY_DUAL_TIMESTAMP("GeneratorsFinishTimestamp", offsetof(Manager, timestamps[MANAGER_TIMESTAMP_GENERATORS_FINISH]), SD_BUS_VTABLE_PROPERTY_CONST),
2857         BUS_PROPERTY_DUAL_TIMESTAMP("UnitsLoadStartTimestamp", offsetof(Manager, timestamps[MANAGER_TIMESTAMP_UNITS_LOAD_START]), SD_BUS_VTABLE_PROPERTY_CONST),
2858         BUS_PROPERTY_DUAL_TIMESTAMP("UnitsLoadFinishTimestamp", offsetof(Manager, timestamps[MANAGER_TIMESTAMP_UNITS_LOAD_FINISH]), SD_BUS_VTABLE_PROPERTY_CONST),
2859         BUS_PROPERTY_DUAL_TIMESTAMP("UnitsLoadTimestamp", offsetof(Manager, timestamps[MANAGER_TIMESTAMP_UNITS_LOAD]), SD_BUS_VTABLE_PROPERTY_CONST),
2860         BUS_PROPERTY_DUAL_TIMESTAMP("InitRDSecurityStartTimestamp", offsetof(Manager, timestamps[MANAGER_TIMESTAMP_INITRD_SECURITY_START]), SD_BUS_VTABLE_PROPERTY_CONST),
2861         BUS_PROPERTY_DUAL_TIMESTAMP("InitRDSecurityFinishTimestamp", offsetof(Manager, timestamps[MANAGER_TIMESTAMP_INITRD_SECURITY_FINISH]), SD_BUS_VTABLE_PROPERTY_CONST),
2862         BUS_PROPERTY_DUAL_TIMESTAMP("InitRDGeneratorsStartTimestamp", offsetof(Manager, timestamps[MANAGER_TIMESTAMP_INITRD_GENERATORS_START]), SD_BUS_VTABLE_PROPERTY_CONST),
2863         BUS_PROPERTY_DUAL_TIMESTAMP("InitRDGeneratorsFinishTimestamp", offsetof(Manager, timestamps[MANAGER_TIMESTAMP_INITRD_GENERATORS_FINISH]), SD_BUS_VTABLE_PROPERTY_CONST),
2864         BUS_PROPERTY_DUAL_TIMESTAMP("InitRDUnitsLoadStartTimestamp", offsetof(Manager, timestamps[MANAGER_TIMESTAMP_INITRD_UNITS_LOAD_START]), SD_BUS_VTABLE_PROPERTY_CONST),
2865         BUS_PROPERTY_DUAL_TIMESTAMP("InitRDUnitsLoadFinishTimestamp", offsetof(Manager, timestamps[MANAGER_TIMESTAMP_INITRD_UNITS_LOAD_FINISH]), SD_BUS_VTABLE_PROPERTY_CONST),
2866         SD_BUS_WRITABLE_PROPERTY("LogLevel", "s", bus_property_get_log_level, property_set_log_level, 0, 0),
2867         SD_BUS_WRITABLE_PROPERTY("LogTarget", "s", bus_property_get_log_target, property_set_log_target, 0, 0),
2868         SD_BUS_PROPERTY("NNames", "u", property_get_hashmap_size, offsetof(Manager, units), 0),
2869         SD_BUS_PROPERTY("NFailedUnits", "u", property_get_set_size, offsetof(Manager, failed_units), SD_BUS_VTABLE_PROPERTY_EMITS_CHANGE),
2870         SD_BUS_PROPERTY("NJobs", "u", property_get_hashmap_size, offsetof(Manager, jobs), 0),
2871         SD_BUS_PROPERTY("NInstalledJobs", "u", bus_property_get_unsigned, offsetof(Manager, n_installed_jobs), 0),
2872         SD_BUS_PROPERTY("NFailedJobs", "u", bus_property_get_unsigned, offsetof(Manager, n_failed_jobs), 0),
2873         SD_BUS_PROPERTY("Progress", "d", property_get_progress, 0, 0),
2874         SD_BUS_PROPERTY("Environment", "as", property_get_environment, 0, 0),
2875         SD_BUS_PROPERTY("ConfirmSpawn", "b", bus_property_get_bool, offsetof(Manager, confirm_spawn), SD_BUS_VTABLE_PROPERTY_CONST),
2876         SD_BUS_PROPERTY("ShowStatus", "b", property_get_show_status, 0, 0),
2877         SD_BUS_PROPERTY("UnitPath", "as", NULL, offsetof(Manager, lookup_paths.search_path), SD_BUS_VTABLE_PROPERTY_CONST),
2878         SD_BUS_PROPERTY("DefaultStandardOutput", "s", bus_property_get_exec_output, offsetof(Manager, defaults.std_output), SD_BUS_VTABLE_PROPERTY_CONST),
2879         SD_BUS_PROPERTY("DefaultStandardError", "s", bus_property_get_exec_output, offsetof(Manager, defaults.std_error), SD_BUS_VTABLE_PROPERTY_CONST),
2880         SD_BUS_PROPERTY("WatchdogDevice", "s", property_get_watchdog_device, 0, SD_BUS_VTABLE_PROPERTY_CONST),
2881         SD_BUS_PROPERTY("WatchdogLastPingTimestamp", "t", property_get_watchdog_last_ping_realtime, 0, 0),
2882         SD_BUS_PROPERTY("WatchdogLastPingTimestampMonotonic", "t", property_get_watchdog_last_ping_monotonic, 0, 0),
2883         SD_BUS_WRITABLE_PROPERTY("RuntimeWatchdogUSec", "t", property_get_runtime_watchdog, property_set_runtime_watchdog, 0, 0),
2884         SD_BUS_WRITABLE_PROPERTY("RuntimeWatchdogPreUSec", "t", property_get_pretimeout_watchdog, property_set_pretimeout_watchdog, 0, 0),
2885         SD_BUS_WRITABLE_PROPERTY("RuntimeWatchdogPreGovernor", "s", property_get_pretimeout_watchdog_governor, property_set_pretimeout_watchdog_governor, 0, 0),
2886         SD_BUS_WRITABLE_PROPERTY("RebootWatchdogUSec", "t", property_get_reboot_watchdog, property_set_reboot_watchdog, 0, 0),
2887         /* The following item is an obsolete alias */
2888         SD_BUS_WRITABLE_PROPERTY("ShutdownWatchdogUSec", "t", property_get_reboot_watchdog, property_set_reboot_watchdog, 0, SD_BUS_VTABLE_HIDDEN),
2889         SD_BUS_WRITABLE_PROPERTY("KExecWatchdogUSec", "t", property_get_kexec_watchdog, property_set_kexec_watchdog, 0, 0),
2890         SD_BUS_WRITABLE_PROPERTY("ServiceWatchdogs", "b", bus_property_get_bool, bus_property_set_bool, offsetof(Manager, service_watchdogs), 0),
2891         SD_BUS_PROPERTY("ControlGroup", "s", NULL, offsetof(Manager, cgroup_root), 0),
2892         SD_BUS_PROPERTY("SystemState", "s", property_get_system_state, 0, 0),
2893         SD_BUS_PROPERTY("ExitCode", "y", NULL, offsetof(Manager, return_value), 0),
2894         SD_BUS_PROPERTY("DefaultTimerAccuracyUSec", "t", bus_property_get_usec, offsetof(Manager, defaults.timer_accuracy_usec), SD_BUS_VTABLE_PROPERTY_CONST),
2895         SD_BUS_PROPERTY("DefaultTimeoutStartUSec", "t", bus_property_get_usec, offsetof(Manager, defaults.timeout_start_usec), SD_BUS_VTABLE_PROPERTY_CONST),
2896         SD_BUS_PROPERTY("DefaultTimeoutStopUSec", "t", bus_property_get_usec, offsetof(Manager, defaults.timeout_stop_usec), SD_BUS_VTABLE_PROPERTY_CONST),
2897         SD_BUS_PROPERTY("DefaultTimeoutAbortUSec", "t", property_get_default_timeout_abort_usec, 0, 0),
2898         SD_BUS_PROPERTY("DefaultDeviceTimeoutUSec", "t", bus_property_get_usec, offsetof(Manager, defaults.device_timeout_usec), SD_BUS_VTABLE_PROPERTY_CONST),
2899         SD_BUS_PROPERTY("DefaultRestartUSec", "t", bus_property_get_usec, offsetof(Manager, defaults.restart_usec), SD_BUS_VTABLE_PROPERTY_CONST),
2900         SD_BUS_PROPERTY("DefaultStartLimitIntervalUSec", "t", bus_property_get_usec, offsetof(Manager, defaults.start_limit.interval), SD_BUS_VTABLE_PROPERTY_CONST),
2901         /* The following two items are obsolete alias */
2902         SD_BUS_PROPERTY("DefaultStartLimitIntervalSec", "t", bus_property_get_usec, offsetof(Manager, defaults.start_limit.interval), SD_BUS_VTABLE_PROPERTY_CONST|SD_BUS_VTABLE_HIDDEN),
2903         SD_BUS_PROPERTY("DefaultStartLimitInterval", "t", bus_property_get_usec, offsetof(Manager, defaults.start_limit.interval), SD_BUS_VTABLE_PROPERTY_CONST|SD_BUS_VTABLE_HIDDEN),
2904         SD_BUS_PROPERTY("DefaultStartLimitBurst", "u", bus_property_get_unsigned, offsetof(Manager, defaults.start_limit.burst), SD_BUS_VTABLE_PROPERTY_CONST),
2905         SD_BUS_PROPERTY("DefaultIOAccounting", "b", bus_property_get_bool, offsetof(Manager, defaults.io_accounting), SD_BUS_VTABLE_PROPERTY_CONST),
2906         SD_BUS_PROPERTY("DefaultIPAccounting", "b", bus_property_get_bool, offsetof(Manager, defaults.ip_accounting), SD_BUS_VTABLE_PROPERTY_CONST),
2907         SD_BUS_PROPERTY("DefaultMemoryAccounting", "b", bus_property_get_bool, offsetof(Manager, defaults.memory_accounting), SD_BUS_VTABLE_PROPERTY_CONST),
2908         SD_BUS_PROPERTY("DefaultTasksAccounting", "b", bus_property_get_bool, offsetof(Manager, defaults.tasks_accounting), SD_BUS_VTABLE_PROPERTY_CONST),
2909         SD_BUS_PROPERTY("DefaultLimitCPU", "t", bus_property_get_rlimit, offsetof(Manager, defaults.rlimit[RLIMIT_CPU]), SD_BUS_VTABLE_PROPERTY_CONST),
2910         SD_BUS_PROPERTY("DefaultLimitCPUSoft", "t", bus_property_get_rlimit, offsetof(Manager, defaults.rlimit[RLIMIT_CPU]), SD_BUS_VTABLE_PROPERTY_CONST),
2911         SD_BUS_PROPERTY("DefaultLimitFSIZE", "t", bus_property_get_rlimit, offsetof(Manager, defaults.rlimit[RLIMIT_FSIZE]), SD_BUS_VTABLE_PROPERTY_CONST),
2912         SD_BUS_PROPERTY("DefaultLimitFSIZESoft", "t", bus_property_get_rlimit, offsetof(Manager, defaults.rlimit[RLIMIT_FSIZE]), SD_BUS_VTABLE_PROPERTY_CONST),
2913         SD_BUS_PROPERTY("DefaultLimitDATA", "t", bus_property_get_rlimit, offsetof(Manager, defaults.rlimit[RLIMIT_DATA]), SD_BUS_VTABLE_PROPERTY_CONST),
2914         SD_BUS_PROPERTY("DefaultLimitDATASoft", "t", bus_property_get_rlimit, offsetof(Manager, defaults.rlimit[RLIMIT_DATA]), SD_BUS_VTABLE_PROPERTY_CONST),
2915         SD_BUS_PROPERTY("DefaultLimitSTACK", "t", bus_property_get_rlimit, offsetof(Manager, defaults.rlimit[RLIMIT_STACK]), SD_BUS_VTABLE_PROPERTY_CONST),
2916         SD_BUS_PROPERTY("DefaultLimitSTACKSoft", "t", bus_property_get_rlimit, offsetof(Manager, defaults.rlimit[RLIMIT_STACK]), SD_BUS_VTABLE_PROPERTY_CONST),
2917         SD_BUS_PROPERTY("DefaultLimitCORE", "t", bus_property_get_rlimit, offsetof(Manager, defaults.rlimit[RLIMIT_CORE]), SD_BUS_VTABLE_PROPERTY_CONST),
2918         SD_BUS_PROPERTY("DefaultLimitCORESoft", "t", bus_property_get_rlimit, offsetof(Manager, defaults.rlimit[RLIMIT_CORE]), SD_BUS_VTABLE_PROPERTY_CONST),
2919         SD_BUS_PROPERTY("DefaultLimitRSS", "t", bus_property_get_rlimit, offsetof(Manager, defaults.rlimit[RLIMIT_RSS]), SD_BUS_VTABLE_PROPERTY_CONST),
2920         SD_BUS_PROPERTY("DefaultLimitRSSSoft", "t", bus_property_get_rlimit, offsetof(Manager, defaults.rlimit[RLIMIT_RSS]), SD_BUS_VTABLE_PROPERTY_CONST),
2921         SD_BUS_PROPERTY("DefaultLimitNOFILE", "t", bus_property_get_rlimit, offsetof(Manager, defaults.rlimit[RLIMIT_NOFILE]), SD_BUS_VTABLE_PROPERTY_CONST),
2922         SD_BUS_PROPERTY("DefaultLimitNOFILESoft", "t", bus_property_get_rlimit, offsetof(Manager, defaults.rlimit[RLIMIT_NOFILE]), SD_BUS_VTABLE_PROPERTY_CONST),
2923         SD_BUS_PROPERTY("DefaultLimitAS", "t", bus_property_get_rlimit, offsetof(Manager, defaults.rlimit[RLIMIT_AS]), SD_BUS_VTABLE_PROPERTY_CONST),
2924         SD_BUS_PROPERTY("DefaultLimitASSoft", "t", bus_property_get_rlimit, offsetof(Manager, defaults.rlimit[RLIMIT_AS]), SD_BUS_VTABLE_PROPERTY_CONST),
2925         SD_BUS_PROPERTY("DefaultLimitNPROC", "t", bus_property_get_rlimit, offsetof(Manager, defaults.rlimit[RLIMIT_NPROC]), SD_BUS_VTABLE_PROPERTY_CONST),
2926         SD_BUS_PROPERTY("DefaultLimitNPROCSoft", "t", bus_property_get_rlimit, offsetof(Manager, defaults.rlimit[RLIMIT_NPROC]), SD_BUS_VTABLE_PROPERTY_CONST),
2927         SD_BUS_PROPERTY("DefaultLimitMEMLOCK", "t", bus_property_get_rlimit, offsetof(Manager, defaults.rlimit[RLIMIT_MEMLOCK]), SD_BUS_VTABLE_PROPERTY_CONST),
2928         SD_BUS_PROPERTY("DefaultLimitMEMLOCKSoft", "t", bus_property_get_rlimit, offsetof(Manager, defaults.rlimit[RLIMIT_MEMLOCK]), SD_BUS_VTABLE_PROPERTY_CONST),
2929         SD_BUS_PROPERTY("DefaultLimitLOCKS", "t", bus_property_get_rlimit, offsetof(Manager, defaults.rlimit[RLIMIT_LOCKS]), SD_BUS_VTABLE_PROPERTY_CONST),
2930         SD_BUS_PROPERTY("DefaultLimitLOCKSSoft", "t", bus_property_get_rlimit, offsetof(Manager, defaults.rlimit[RLIMIT_LOCKS]), SD_BUS_VTABLE_PROPERTY_CONST),
2931         SD_BUS_PROPERTY("DefaultLimitSIGPENDING", "t", bus_property_get_rlimit, offsetof(Manager, defaults.rlimit[RLIMIT_SIGPENDING]), SD_BUS_VTABLE_PROPERTY_CONST),
2932         SD_BUS_PROPERTY("DefaultLimitSIGPENDINGSoft", "t", bus_property_get_rlimit, offsetof(Manager, defaults.rlimit[RLIMIT_SIGPENDING]), SD_BUS_VTABLE_PROPERTY_CONST),
2933         SD_BUS_PROPERTY("DefaultLimitMSGQUEUE", "t", bus_property_get_rlimit, offsetof(Manager, defaults.rlimit[RLIMIT_MSGQUEUE]), SD_BUS_VTABLE_PROPERTY_CONST),
2934         SD_BUS_PROPERTY("DefaultLimitMSGQUEUESoft", "t", bus_property_get_rlimit, offsetof(Manager, defaults.rlimit[RLIMIT_MSGQUEUE]), SD_BUS_VTABLE_PROPERTY_CONST),
2935         SD_BUS_PROPERTY("DefaultLimitNICE", "t", bus_property_get_rlimit, offsetof(Manager, defaults.rlimit[RLIMIT_NICE]), SD_BUS_VTABLE_PROPERTY_CONST),
2936         SD_BUS_PROPERTY("DefaultLimitNICESoft", "t", bus_property_get_rlimit, offsetof(Manager, defaults.rlimit[RLIMIT_NICE]), SD_BUS_VTABLE_PROPERTY_CONST),
2937         SD_BUS_PROPERTY("DefaultLimitRTPRIO", "t", bus_property_get_rlimit, offsetof(Manager, defaults.rlimit[RLIMIT_RTPRIO]), SD_BUS_VTABLE_PROPERTY_CONST),
2938         SD_BUS_PROPERTY("DefaultLimitRTPRIOSoft", "t", bus_property_get_rlimit, offsetof(Manager, defaults.rlimit[RLIMIT_RTPRIO]), SD_BUS_VTABLE_PROPERTY_CONST),
2939         SD_BUS_PROPERTY("DefaultLimitRTTIME", "t", bus_property_get_rlimit, offsetof(Manager, defaults.rlimit[RLIMIT_RTTIME]), SD_BUS_VTABLE_PROPERTY_CONST),
2940         SD_BUS_PROPERTY("DefaultLimitRTTIMESoft", "t", bus_property_get_rlimit, offsetof(Manager, defaults.rlimit[RLIMIT_RTTIME]), SD_BUS_VTABLE_PROPERTY_CONST),
2941         SD_BUS_PROPERTY("DefaultTasksMax", "t", bus_property_get_tasks_max, offsetof(Manager, defaults.tasks_max), 0),
2942         SD_BUS_PROPERTY("DefaultMemoryPressureThresholdUSec", "t", bus_property_get_usec, offsetof(Manager, defaults.memory_pressure_threshold_usec), 0),
2943         SD_BUS_PROPERTY("DefaultMemoryPressureWatch", "s", bus_property_get_cgroup_pressure_watch, offsetof(Manager, defaults.memory_pressure_watch), 0),
2944         SD_BUS_PROPERTY("TimerSlackNSec", "t", property_get_timer_slack_nsec, 0, SD_BUS_VTABLE_PROPERTY_CONST),
2945         SD_BUS_PROPERTY("DefaultOOMPolicy", "s", bus_property_get_oom_policy, offsetof(Manager, defaults.oom_policy), SD_BUS_VTABLE_PROPERTY_CONST),
2946         SD_BUS_PROPERTY("DefaultOOMScoreAdjust", "i", property_get_oom_score_adjust, 0, SD_BUS_VTABLE_PROPERTY_CONST),
2947         SD_BUS_PROPERTY("DefaultRestrictSUIDSGID", "b", bus_property_get_bool, offsetof(Manager, defaults.restrict_suid_sgid), SD_BUS_VTABLE_PROPERTY_CONST),
2948         SD_BUS_PROPERTY("CtrlAltDelBurstAction", "s", bus_property_get_emergency_action, offsetof(Manager, cad_burst_action), SD_BUS_VTABLE_PROPERTY_CONST),
2949         SD_BUS_PROPERTY("SoftRebootsCount", "u", bus_property_get_unsigned, offsetof(Manager, soft_reboots_count), SD_BUS_VTABLE_PROPERTY_CONST),
2950
2951         /* deprecated cgroup v1 property */
2952         SD_BUS_PROPERTY("DefaultBlockIOAccounting", "b", bus_property_get_bool_false, 0, SD_BUS_VTABLE_PROPERTY_CONST|SD_BUS_VTABLE_DEPRECATED|SD_BUS_VTABLE_HIDDEN),
2953         /* see comment in bus_cgroup_vtable */
2954         SD_BUS_PROPERTY("DefaultCPUAccounting", "b", bus_property_get_bool_true, 0, SD_BUS_VTABLE_PROPERTY_CONST|SD_BUS_VTABLE_DEPRECATED|SD_BUS_VTABLE_HIDDEN),
2955
2956         SD_BUS_METHOD_WITH_ARGS("GetUnit",
2957                                 SD_BUS_ARGS("s", name),
2958                                 SD_BUS_RESULT("o", unit),
2959                                 method_get_unit,
2960                                 SD_BUS_VTABLE_UNPRIVILEGED),
2961         SD_BUS_METHOD_WITH_ARGS("GetUnitByPID",
2962                                 SD_BUS_ARGS("u", pid),
2963                                 SD_BUS_RESULT("o", unit),
2964                                 method_get_unit_by_pid,
2965                                 SD_BUS_VTABLE_UNPRIVILEGED),
2966         SD_BUS_METHOD_WITH_ARGS("GetUnitByInvocationID",
2967                                 SD_BUS_ARGS("ay", invocation_id),
2968                                 SD_BUS_RESULT("o", unit),
2969                                 method_get_unit_by_invocation_id,
2970                                 SD_BUS_VTABLE_UNPRIVILEGED),
2971         SD_BUS_METHOD_WITH_ARGS("GetUnitByControlGroup",
2972                                 SD_BUS_ARGS("s", cgroup),
2973                                 SD_BUS_RESULT("o", unit),
2974                                 method_get_unit_by_control_group,
2975                                 SD_BUS_VTABLE_UNPRIVILEGED),
2976         SD_BUS_METHOD_WITH_ARGS("GetUnitByPIDFD",
2977                                 SD_BUS_ARGS("h", pidfd),
2978                                 SD_BUS_RESULT("o", unit, "s", unit_id, "ay", invocation_id),
2979                                 method_get_unit_by_pidfd,
2980                                 SD_BUS_VTABLE_UNPRIVILEGED),
2981         SD_BUS_METHOD_WITH_ARGS("LoadUnit",
2982                                 SD_BUS_ARGS("s", name),
2983                                 SD_BUS_RESULT("o", unit),
2984                                 method_load_unit,
2985                                 SD_BUS_VTABLE_UNPRIVILEGED),
2986         SD_BUS_METHOD_WITH_ARGS("StartUnit",
2987                                 SD_BUS_ARGS("s", name, "s", mode),
2988                                 SD_BUS_RESULT("o", job),
2989                                 method_start_unit,
2990                                 SD_BUS_VTABLE_UNPRIVILEGED),
2991         SD_BUS_METHOD_WITH_ARGS("StartUnitWithFlags",
2992                                 SD_BUS_ARGS("s", name, "s", mode, "t", flags),
2993                                 SD_BUS_RESULT("o", job),
2994                                 method_start_unit,
2995                                 SD_BUS_VTABLE_UNPRIVILEGED),
2996         SD_BUS_METHOD_WITH_ARGS("StartUnitReplace",
2997                                 SD_BUS_ARGS("s", old_unit, "s", new_unit, "s", mode),
2998                                 SD_BUS_RESULT("o", job),
2999                                 method_start_unit_replace,
3000                                 SD_BUS_VTABLE_UNPRIVILEGED),
3001         SD_BUS_METHOD_WITH_ARGS("StopUnit",
3002                                 SD_BUS_ARGS("s", name, "s", mode),
3003                                 SD_BUS_RESULT("o", job),
3004                                 method_stop_unit,
3005                                 SD_BUS_VTABLE_UNPRIVILEGED),
3006         SD_BUS_METHOD_WITH_ARGS("ReloadUnit",
3007                                 SD_BUS_ARGS("s", name, "s", mode),
3008                                 SD_BUS_RESULT("o", job),
3009                                 method_reload_unit,
3010                                 SD_BUS_VTABLE_UNPRIVILEGED),
3011         SD_BUS_METHOD_WITH_ARGS("RestartUnit",
3012                                 SD_BUS_ARGS("s", name, "s", mode),
3013                                 SD_BUS_RESULT("o", job),
3014                                 method_restart_unit,
3015                                 SD_BUS_VTABLE_UNPRIVILEGED),
3016         SD_BUS_METHOD_WITH_ARGS("TryRestartUnit",
3017                                 SD_BUS_ARGS("s", name, "s", mode),
3018                                 SD_BUS_RESULT("o", job),
3019                                 method_try_restart_unit,
3020                                 SD_BUS_VTABLE_UNPRIVILEGED),
3021         SD_BUS_METHOD_WITH_ARGS("ReloadOrRestartUnit",
3022                                 SD_BUS_ARGS("s", name, "s", mode),
3023                                 SD_BUS_RESULT("o", job),
3024                                 method_reload_or_restart_unit,
3025                                 SD_BUS_VTABLE_UNPRIVILEGED),
3026         SD_BUS_METHOD_WITH_ARGS("ReloadOrTryRestartUnit",
3027                                 SD_BUS_ARGS("s", name, "s", mode),
3028                                 SD_BUS_RESULT("o", job),
3029                                 method_reload_or_try_restart_unit,
3030                                 SD_BUS_VTABLE_UNPRIVILEGED),
3031         SD_BUS_METHOD_WITH_ARGS("EnqueueUnitJob",
3032                                 SD_BUS_ARGS("s", name, "s", job_type, "s", job_mode),
3033                                 SD_BUS_RESULT("u", job_id, "o", job_path, "s", unit_id, "o", unit_path, "s", job_type, "a(uosos)", affected_jobs),
3034                                 method_enqueue_unit_job,
3035                                 SD_BUS_VTABLE_UNPRIVILEGED),
3036         SD_BUS_METHOD_WITH_ARGS("KillUnit",
3037                                 SD_BUS_ARGS("s", name, "s", whom, "i", signal),
3038                                 SD_BUS_NO_RESULT,
3039                                 method_kill_unit,
3040                                 SD_BUS_VTABLE_UNPRIVILEGED),
3041         SD_BUS_METHOD_WITH_ARGS("KillUnitSubgroup",
3042                                 SD_BUS_ARGS("s", name, "s", whom, "s", subgroup, "i", signal),
3043                                 SD_BUS_NO_RESULT,
3044                                 method_kill_unit_subgroup,
3045                                 SD_BUS_VTABLE_UNPRIVILEGED),
3046         SD_BUS_METHOD_WITH_ARGS("QueueSignalUnit",
3047                                 SD_BUS_ARGS("s", name, "s", whom, "i", signal, "i", value),
3048                                 SD_BUS_NO_RESULT,
3049                                 method_kill_unit,
3050                                 SD_BUS_VTABLE_UNPRIVILEGED),
3051         SD_BUS_METHOD_WITH_ARGS("CleanUnit",
3052                                 SD_BUS_ARGS("s", name, "as", mask),
3053                                 SD_BUS_NO_RESULT,
3054                                 method_clean_unit,
3055                                 SD_BUS_VTABLE_UNPRIVILEGED),
3056         SD_BUS_METHOD_WITH_ARGS("FreezeUnit",
3057                                 SD_BUS_ARGS("s", name),
3058                                 SD_BUS_NO_RESULT,
3059                                 method_freeze_unit,
3060                                 SD_BUS_VTABLE_UNPRIVILEGED),
3061         SD_BUS_METHOD_WITH_ARGS("ThawUnit",
3062                                 SD_BUS_ARGS("s", name),
3063                                 SD_BUS_NO_RESULT,
3064                                 method_thaw_unit,
3065                                 SD_BUS_VTABLE_UNPRIVILEGED),
3066         SD_BUS_METHOD_WITH_ARGS("ResetFailedUnit",
3067                                 SD_BUS_ARGS("s", name),
3068                                 SD_BUS_NO_RESULT,
3069                                 method_reset_failed_unit,
3070                                 SD_BUS_VTABLE_UNPRIVILEGED),
3071         SD_BUS_METHOD_WITH_ARGS("SetUnitProperties",
3072                                 SD_BUS_ARGS("s", name, "b", runtime, "a(sv)", properties),
3073                                 SD_BUS_NO_RESULT,
3074                                 method_set_unit_properties,
3075                                 SD_BUS_VTABLE_UNPRIVILEGED),
3076         SD_BUS_METHOD_WITH_ARGS("BindMountUnit",
3077                                 SD_BUS_ARGS("s", name, "s", source, "s", destination, "b", read_only, "b", mkdir),
3078                                 SD_BUS_NO_RESULT,
3079                                 method_bind_mount_unit,
3080                                 SD_BUS_VTABLE_UNPRIVILEGED),
3081         SD_BUS_METHOD_WITH_ARGS("MountImageUnit",
3082                                 SD_BUS_ARGS("s", name, "s", source, "s", destination, "b", read_only, "b", mkdir, "a(ss)", options),
3083                                 SD_BUS_NO_RESULT,
3084                                 method_mount_image_unit,
3085                                 SD_BUS_VTABLE_UNPRIVILEGED),
3086         SD_BUS_METHOD_WITH_ARGS("RefUnit",
3087                                 SD_BUS_ARGS("s", name),
3088                                 SD_BUS_NO_RESULT,
3089                                 method_ref_unit,
3090                                 SD_BUS_VTABLE_UNPRIVILEGED),
3091         SD_BUS_METHOD_WITH_ARGS("UnrefUnit",
3092                                 SD_BUS_ARGS("s", name),
3093                                 SD_BUS_NO_RESULT,
3094                                 method_unref_unit,
3095                                 SD_BUS_VTABLE_UNPRIVILEGED),
3096         SD_BUS_METHOD_WITH_ARGS("StartTransientUnit",
3097                                 SD_BUS_ARGS("s", name, "s", mode, "a(sv)", properties, "a(sa(sv))", aux),
3098                                 SD_BUS_RESULT("o", job),
3099                                 method_start_transient_unit,
3100                                 SD_BUS_VTABLE_UNPRIVILEGED),
3101         SD_BUS_METHOD_WITH_ARGS("GetUnitProcesses",
3102                                 SD_BUS_ARGS("s", name),
3103                                 SD_BUS_RESULT("a(sus)", processes),
3104                                 method_get_unit_processes,
3105                                 SD_BUS_VTABLE_UNPRIVILEGED),
3106         SD_BUS_METHOD_WITH_ARGS("AttachProcessesToUnit",
3107                                 SD_BUS_ARGS("s", unit_name, "s", subcgroup, "au", pids),
3108                                 SD_BUS_NO_RESULT,
3109                                 method_attach_processes_to_unit,
3110                                 SD_BUS_VTABLE_UNPRIVILEGED),
3111         SD_BUS_METHOD_WITH_ARGS("RemoveSubgroupFromUnit",
3112                                 SD_BUS_ARGS("s", unit_name, "s", subcgroup, "t", flags),
3113                                 SD_BUS_NO_RESULT,
3114                                 method_remove_subgroup_from_unit,
3115                                 SD_BUS_VTABLE_UNPRIVILEGED),
3116         SD_BUS_METHOD_WITH_ARGS("AbandonScope",
3117                                 SD_BUS_ARGS("s", name),
3118                                 SD_BUS_NO_RESULT,
3119                                 method_abandon_scope,
3120                                 SD_BUS_VTABLE_UNPRIVILEGED),
3121         SD_BUS_METHOD_WITH_ARGS("GetJob",
3122                                 SD_BUS_ARGS("u", id),
3123                                 SD_BUS_RESULT("o", job),
3124                                 method_get_job,
3125                                 SD_BUS_VTABLE_UNPRIVILEGED),
3126         SD_BUS_METHOD_WITH_ARGS("GetJobAfter",
3127                                 SD_BUS_ARGS("u", id),
3128                                 SD_BUS_RESULT("a(usssoo)", jobs),
3129                                 method_get_job_waiting,
3130                                 SD_BUS_VTABLE_UNPRIVILEGED),
3131         SD_BUS_METHOD_WITH_ARGS("GetJobBefore",
3132                                 SD_BUS_ARGS("u", id),
3133                                 SD_BUS_RESULT("a(usssoo)", jobs),
3134                                 method_get_job_waiting,
3135                                 SD_BUS_VTABLE_UNPRIVILEGED),
3136         SD_BUS_METHOD_WITH_ARGS("CancelJob",
3137                                 SD_BUS_ARGS("u", id),
3138                                 SD_BUS_NO_RESULT,
3139                                 method_cancel_job,
3140                                 SD_BUS_VTABLE_UNPRIVILEGED),
3141         SD_BUS_METHOD("ClearJobs",
3142                       NULL,
3143                       NULL,
3144                       method_clear_jobs,
3145                       SD_BUS_VTABLE_UNPRIVILEGED),
3146         SD_BUS_METHOD("ResetFailed",
3147                       NULL,
3148                       NULL,
3149                       method_reset_failed,
3150                       SD_BUS_VTABLE_UNPRIVILEGED),
3151         SD_BUS_METHOD_WITH_ARGS("SetShowStatus",
3152                                 SD_BUS_ARGS("s", mode),
3153                                 SD_BUS_NO_RESULT,
3154                                 method_set_show_status,
3155                                 SD_BUS_VTABLE_UNPRIVILEGED),
3156         SD_BUS_METHOD_WITH_ARGS("ListUnits",
3157                                 SD_BUS_NO_ARGS,
3158                                 SD_BUS_RESULT("a(ssssssouso)", units),
3159                                 method_list_units,
3160                                 SD_BUS_VTABLE_UNPRIVILEGED),
3161         SD_BUS_METHOD_WITH_ARGS("ListUnitsFiltered",
3162                                 SD_BUS_ARGS("as", states),
3163                                 SD_BUS_RESULT("a(ssssssouso)", units),
3164                                 method_list_units_filtered,
3165                                 SD_BUS_VTABLE_UNPRIVILEGED),
3166         SD_BUS_METHOD_WITH_ARGS("ListUnitsByPatterns",
3167                                 SD_BUS_ARGS("as", states, "as", patterns),
3168                                 SD_BUS_RESULT("a(ssssssouso)", units),
3169                                 method_list_units_by_patterns,
3170                                 SD_BUS_VTABLE_UNPRIVILEGED),
3171         SD_BUS_METHOD_WITH_ARGS("ListUnitsByNames",
3172                                 SD_BUS_ARGS("as", names),
3173                                 SD_BUS_RESULT("a(ssssssouso)", units),
3174                                 method_list_units_by_names,
3175                                 SD_BUS_VTABLE_UNPRIVILEGED),
3176         SD_BUS_METHOD_WITH_ARGS("ListJobs",
3177                                 SD_BUS_NO_ARGS,
3178                                 SD_BUS_RESULT("a(usssoo)", jobs),
3179                                 method_list_jobs,
3180                                 SD_BUS_VTABLE_UNPRIVILEGED),
3181         SD_BUS_METHOD("Subscribe",
3182                       NULL,
3183                       NULL,
3184                       method_subscribe,
3185                       SD_BUS_VTABLE_UNPRIVILEGED),
3186         SD_BUS_METHOD("Unsubscribe",
3187                       NULL,
3188                       NULL,
3189                       method_unsubscribe,
3190                       SD_BUS_VTABLE_UNPRIVILEGED),
3191         SD_BUS_METHOD_WITH_ARGS("Dump",
3192                                 SD_BUS_NO_ARGS,
3193                                 SD_BUS_RESULT("s", output),
3194                                 method_dump,
3195                                 SD_BUS_VTABLE_UNPRIVILEGED),
3196         SD_BUS_METHOD_WITH_ARGS("DumpUnitsMatchingPatterns",
3197                                 SD_BUS_ARGS("as", patterns),
3198                                 SD_BUS_RESULT("s", output),
3199                                 method_dump_units_matching_patterns,
3200                                 SD_BUS_VTABLE_UNPRIVILEGED),
3201         SD_BUS_METHOD_WITH_ARGS("DumpByFileDescriptor",
3202                                 SD_BUS_NO_ARGS,
3203                                 SD_BUS_RESULT("h", fd),
3204                                 method_dump_by_fd,
3205                                 SD_BUS_VTABLE_UNPRIVILEGED),
3206         SD_BUS_METHOD_WITH_ARGS("DumpUnitsMatchingPatternsByFileDescriptor",
3207                                 SD_BUS_ARGS("as", patterns),
3208                                 SD_BUS_RESULT("h", fd),
3209                                 method_dump_units_matching_patterns_by_fd,
3210                                 SD_BUS_VTABLE_UNPRIVILEGED),
3211         SD_BUS_METHOD_WITH_ARGS("CreateSnapshot",
3212                                 SD_BUS_ARGS("s", name, "b", cleanup),
3213                                 SD_BUS_RESULT("o", unit),
3214                                 method_refuse_snapshot,
3215                                 SD_BUS_VTABLE_UNPRIVILEGED|SD_BUS_VTABLE_HIDDEN),
3216         SD_BUS_METHOD_WITH_ARGS("RemoveSnapshot",
3217                                 SD_BUS_ARGS("s", name),
3218                                 SD_BUS_NO_RESULT,
3219                                 method_refuse_snapshot,
3220                                 SD_BUS_VTABLE_UNPRIVILEGED|SD_BUS_VTABLE_HIDDEN),
3221         SD_BUS_METHOD("Reload",
3222                       NULL,
3223                       NULL,
3224                       method_reload,
3225                       SD_BUS_VTABLE_UNPRIVILEGED),
3226         SD_BUS_METHOD("Reexecute",
3227                       NULL,
3228                       NULL,
3229                       method_reexecute,
3230                       SD_BUS_VTABLE_UNPRIVILEGED|SD_BUS_VTABLE_METHOD_NO_REPLY),
3231         SD_BUS_METHOD("Exit",
3232                       NULL,
3233                       NULL,
3234                       method_exit,
3235                       0),
3236         SD_BUS_METHOD("Reboot",
3237                       NULL,
3238                       NULL,
3239                       method_reboot,
3240                       SD_BUS_VTABLE_CAPABILITY(CAP_SYS_BOOT)),
3241         SD_BUS_METHOD_WITH_ARGS("SoftReboot",
3242                                 SD_BUS_ARGS("s", new_root),
3243                                 SD_BUS_NO_RESULT,
3244                                 method_soft_reboot,
3245                                 SD_BUS_VTABLE_CAPABILITY(CAP_SYS_BOOT)),
3246         SD_BUS_METHOD("PowerOff",
3247                       NULL,
3248                       NULL,
3249                       method_poweroff,
3250                       SD_BUS_VTABLE_CAPABILITY(CAP_SYS_BOOT)),
3251         SD_BUS_METHOD("Halt",
3252                       NULL,
3253                       NULL,
3254                       method_halt,
3255                       SD_BUS_VTABLE_CAPABILITY(CAP_SYS_BOOT)),
3256         SD_BUS_METHOD("KExec",
3257                       NULL,
3258                       NULL,
3259                       method_kexec,
3260                       SD_BUS_VTABLE_CAPABILITY(CAP_SYS_BOOT)),
3261         SD_BUS_METHOD_WITH_ARGS("SwitchRoot",
3262                                 SD_BUS_ARGS("s", new_root, "s", init),
3263                                 SD_BUS_NO_RESULT,
3264                                 method_switch_root,
3265                                 SD_BUS_VTABLE_CAPABILITY(CAP_SYS_BOOT)),
3266         SD_BUS_METHOD_WITH_ARGS("SetEnvironment",
3267                                 SD_BUS_ARGS("as", assignments),
3268                                 SD_BUS_NO_RESULT,
3269                                 method_set_environment,
3270                                 SD_BUS_VTABLE_UNPRIVILEGED),
3271         SD_BUS_METHOD_WITH_ARGS("UnsetEnvironment",
3272                                 SD_BUS_ARGS("as", names),
3273                                 SD_BUS_NO_RESULT,
3274                                 method_unset_environment,
3275                                 SD_BUS_VTABLE_UNPRIVILEGED),
3276         SD_BUS_METHOD_WITH_ARGS("UnsetAndSetEnvironment",
3277                                 SD_BUS_ARGS("as", names, "as", assignments),
3278                                 SD_BUS_NO_RESULT,
3279                                 method_unset_and_set_environment,
3280                                 SD_BUS_VTABLE_UNPRIVILEGED),
3281         SD_BUS_METHOD_WITH_ARGS("EnqueueMarkedJobs",
3282                                 SD_BUS_NO_ARGS,
3283                                 SD_BUS_RESULT("ao", jobs),
3284                                 method_enqueue_marked_jobs,
3285                                 SD_BUS_VTABLE_UNPRIVILEGED),
3286         SD_BUS_METHOD_WITH_ARGS("ListUnitFiles",
3287                                 SD_BUS_NO_ARGS,
3288                                 SD_BUS_RESULT("a(ss)", unit_files),
3289                                 method_list_unit_files,
3290                                 SD_BUS_VTABLE_UNPRIVILEGED),
3291         SD_BUS_METHOD_WITH_ARGS("ListUnitFilesByPatterns",
3292                                 SD_BUS_ARGS("as", states, "as", patterns),
3293                                 SD_BUS_RESULT("a(ss)", unit_files),
3294                                 method_list_unit_files_by_patterns,
3295                                 SD_BUS_VTABLE_UNPRIVILEGED),
3296         SD_BUS_METHOD_WITH_ARGS("GetUnitFileState",
3297                                 SD_BUS_ARGS("s", file),
3298                                 SD_BUS_RESULT("s", state),
3299                                 method_get_unit_file_state,
3300                                 SD_BUS_VTABLE_UNPRIVILEGED),
3301         SD_BUS_METHOD_WITH_ARGS("EnableUnitFiles",
3302                                 SD_BUS_ARGS("as", files, "b", runtime, "b", force),
3303                                 SD_BUS_RESULT("b", carries_install_info, "a(sss)", changes),
3304                                 method_enable_unit_files,
3305                                 SD_BUS_VTABLE_UNPRIVILEGED),
3306         SD_BUS_METHOD_WITH_ARGS("DisableUnitFiles",
3307                                 SD_BUS_ARGS("as", files, "b", runtime),
3308                                 SD_BUS_RESULT("a(sss)", changes),
3309                                 method_disable_unit_files,
3310                                 SD_BUS_VTABLE_UNPRIVILEGED),
3311         SD_BUS_METHOD_WITH_ARGS("EnableUnitFilesWithFlags",
3312                                 SD_BUS_ARGS("as", files, "t", flags),
3313                                 SD_BUS_RESULT("b", carries_install_info, "a(sss)", changes),
3314                                 method_enable_unit_files_with_flags,
3315                                 SD_BUS_VTABLE_UNPRIVILEGED),
3316         SD_BUS_METHOD_WITH_ARGS("DisableUnitFilesWithFlags",
3317                                 SD_BUS_ARGS("as", files, "t", flags),
3318                                 SD_BUS_RESULT("a(sss)", changes),
3319                                 method_disable_unit_files_with_flags,
3320                                 SD_BUS_VTABLE_UNPRIVILEGED),
3321         SD_BUS_METHOD_WITH_ARGS("DisableUnitFilesWithFlagsAndInstallInfo",
3322                                 SD_BUS_ARGS("as", files, "t", flags),
3323                                 SD_BUS_RESULT("b", carries_install_info, "a(sss)", changes),
3324                                 method_disable_unit_files_with_flags_and_install_info,
3325                                 SD_BUS_VTABLE_UNPRIVILEGED),
3326         SD_BUS_METHOD_WITH_ARGS("ReenableUnitFiles",
3327                                 SD_BUS_ARGS("as", files, "b", runtime, "b", force),
3328                                 SD_BUS_RESULT("b", carries_install_info, "a(sss)", changes),
3329                                 method_reenable_unit_files,
3330                                 SD_BUS_VTABLE_UNPRIVILEGED),
3331         SD_BUS_METHOD_WITH_ARGS("LinkUnitFiles",
3332                                 SD_BUS_ARGS("as", files, "b", runtime, "b", force),
3333                                 SD_BUS_RESULT("a(sss)", changes),
3334                                 method_link_unit_files,
3335                                 SD_BUS_VTABLE_UNPRIVILEGED),
3336         SD_BUS_METHOD_WITH_ARGS("PresetUnitFiles",
3337                                 SD_BUS_ARGS("as", files, "b", runtime, "b", force),
3338                                 SD_BUS_RESULT("b", carries_install_info, "a(sss)", changes),
3339                                 method_preset_unit_files,
3340                                 SD_BUS_VTABLE_UNPRIVILEGED),
3341         SD_BUS_METHOD_WITH_ARGS("PresetUnitFilesWithMode",
3342                                 SD_BUS_ARGS("as", files, "s", mode, "b", runtime, "b", force),
3343                                 SD_BUS_RESULT("b", carries_install_info, "a(sss)", changes),
3344                                 method_preset_unit_files_with_mode,
3345                                 SD_BUS_VTABLE_UNPRIVILEGED),
3346         SD_BUS_METHOD_WITH_ARGS("MaskUnitFiles",
3347                                 SD_BUS_ARGS("as", files, "b", runtime, "b", force),
3348                                 SD_BUS_RESULT("a(sss)", changes),
3349                                 method_mask_unit_files,
3350                                 SD_BUS_VTABLE_UNPRIVILEGED),
3351         SD_BUS_METHOD_WITH_ARGS("UnmaskUnitFiles",
3352                                 SD_BUS_ARGS("as", files, "b", runtime),
3353                                 SD_BUS_RESULT("a(sss)", changes),
3354                                 method_unmask_unit_files,
3355                                 SD_BUS_VTABLE_UNPRIVILEGED),
3356         SD_BUS_METHOD_WITH_ARGS("RevertUnitFiles",
3357                                 SD_BUS_ARGS("as", files),
3358                                 SD_BUS_RESULT("a(sss)", changes),
3359                                 method_revert_unit_files,
3360                                 SD_BUS_VTABLE_UNPRIVILEGED),
3361         SD_BUS_METHOD_WITH_ARGS("SetDefaultTarget",
3362                                 SD_BUS_ARGS("s", name, "b", force),
3363                                 SD_BUS_RESULT("a(sss)", changes),
3364                                 method_set_default_target,
3365                                 SD_BUS_VTABLE_UNPRIVILEGED),
3366         SD_BUS_METHOD_WITH_ARGS("GetDefaultTarget",
3367                                 SD_BUS_NO_ARGS,
3368                                 SD_BUS_RESULT("s", name),
3369                                 method_get_default_target,
3370                                 SD_BUS_VTABLE_UNPRIVILEGED),
3371         SD_BUS_METHOD_WITH_ARGS("PresetAllUnitFiles",
3372                                 SD_BUS_ARGS("s", mode, "b", runtime, "b", force),
3373                                 SD_BUS_RESULT("a(sss)", changes),
3374                                 method_preset_all_unit_files,
3375                                 SD_BUS_VTABLE_UNPRIVILEGED),
3376         SD_BUS_METHOD_WITH_ARGS("AddDependencyUnitFiles",
3377                                 SD_BUS_ARGS("as", files, "s", target, "s", type, "b", runtime, "b", force),
3378                                 SD_BUS_RESULT("a(sss)", changes),
3379                                 method_add_dependency_unit_files,
3380                                 SD_BUS_VTABLE_UNPRIVILEGED),
3381         SD_BUS_METHOD_WITH_ARGS("GetUnitFileLinks",
3382                                 SD_BUS_ARGS("s", name, "b", runtime),
3383                                 SD_BUS_RESULT("as", links),
3384                                 method_get_unit_file_links,
3385                                 SD_BUS_VTABLE_UNPRIVILEGED),
3386         SD_BUS_METHOD_WITH_ARGS("SetExitCode",
3387                                 SD_BUS_ARGS("y", number),
3388                                 SD_BUS_NO_RESULT,
3389                                 method_set_exit_code,
3390                                 SD_BUS_VTABLE_UNPRIVILEGED),
3391         SD_BUS_METHOD_WITH_ARGS("LookupDynamicUserByName",
3392                                 SD_BUS_ARGS("s", name),
3393                                 SD_BUS_RESULT("u", uid),
3394                                 method_lookup_dynamic_user_by_name,
3395                                 SD_BUS_VTABLE_UNPRIVILEGED),
3396         SD_BUS_METHOD_WITH_ARGS("LookupDynamicUserByUID",
3397                                 SD_BUS_ARGS("u", uid),
3398                                 SD_BUS_RESULT("s", name),
3399                                 method_lookup_dynamic_user_by_uid,
3400                                 SD_BUS_VTABLE_UNPRIVILEGED),
3401         SD_BUS_METHOD_WITH_ARGS("GetDynamicUsers",
3402                                 SD_BUS_NO_ARGS,
3403                                 SD_BUS_RESULT("a(us)", users),
3404                                 method_get_dynamic_users,
3405                                 SD_BUS_VTABLE_UNPRIVILEGED),
3406         SD_BUS_METHOD_WITH_ARGS("DumpUnitFileDescriptorStore",
3407                                 SD_BUS_ARGS("s", name),
3408                                 SD_BUS_RESULT("a(suuutuusu)", entries),
3409                                 method_dump_unit_descriptor_store,
3410                                 SD_BUS_VTABLE_UNPRIVILEGED),
3411         SD_BUS_METHOD_WITH_ARGS("StartAuxiliaryScope",
3412                                 SD_BUS_ARGS("s", name, "ah", pidfds, "t", flags, "a(sv)", properties),
3413                                 SD_BUS_RESULT("o", job),
3414                                 method_start_aux_scope,
3415                                 SD_BUS_VTABLE_DEPRECATED|SD_BUS_VTABLE_UNPRIVILEGED|SD_BUS_VTABLE_HIDDEN),
3416
3417         SD_BUS_SIGNAL_WITH_ARGS("UnitNew",
3418                                 SD_BUS_ARGS("s", id, "o", unit),
3419                                 0),
3420         SD_BUS_SIGNAL_WITH_ARGS("UnitRemoved",
3421                                 SD_BUS_ARGS("s", id, "o", unit),
3422                                 0),
3423         SD_BUS_SIGNAL_WITH_ARGS("JobNew",
3424                                 SD_BUS_ARGS("u", id, "o", job, "s", unit),
3425                                 0),
3426         SD_BUS_SIGNAL_WITH_ARGS("JobRemoved",
3427                                 SD_BUS_ARGS("u", id, "o", job, "s", unit, "s", result),
3428                                 0),
3429         SD_BUS_SIGNAL_WITH_ARGS("StartupFinished",
3430                                 SD_BUS_ARGS("t", firmware, "t", loader, "t", kernel, "t", initrd, "t", userspace, "t", total),
3431                                 0),
3432         SD_BUS_SIGNAL("UnitFilesChanged", NULL, 0),
3433         SD_BUS_SIGNAL_WITH_ARGS("Reloading",
3434                                 SD_BUS_ARGS("b", active),
3435                                 0),
3436
3437         SD_BUS_VTABLE_END
3438 };
3439
3440 const sd_bus_vtable bus_manager_log_control_vtable[] = {
3441         SD_BUS_VTABLE_START(0),
3442
3443         /* We define a private version of this interface here, since we want slightly different
3444          * implementations for the setters. We'll still use the generic getters however, and we share the
3445          * setters with the implementations for the Manager interface above (which pre-dates the generic
3446          * service API interface). */
3447
3448         SD_BUS_WRITABLE_PROPERTY("LogLevel", "s", bus_property_get_log_level, property_set_log_level, 0, 0),
3449         SD_BUS_WRITABLE_PROPERTY("LogTarget", "s", bus_property_get_log_target, property_set_log_target, 0, 0),
3450         SD_BUS_PROPERTY("SyslogIdentifier", "s", bus_property_get_syslog_identifier, 0, 0),
3451
3452         SD_BUS_VTABLE_END,
3453 };
3454
3455 static int send_finished(sd_bus *bus, void *userdata) {
3456         _cleanup_(sd_bus_message_unrefp) sd_bus_message *message = NULL;
3457         usec_t *times = ASSERT_PTR(userdata);
3458         int r;
3459
3460         assert(bus);
3461
3462         r = sd_bus_message_new_signal(bus,
3463                                       &message,
3464                                       "/org/freedesktop/systemd1",
3465                                       "org.freedesktop.systemd1.Manager",
3466                                       "StartupFinished");
3467         if (r < 0)
3468                 return r;
3469
3470         r = sd_bus_message_append(message, "tttttt", times[0], times[1], times[2], times[3], times[4], times[5]);
3471         if (r < 0)
3472                 return r;
3473
3474         return sd_bus_send(bus, message, NULL);
3475 }
3476
3477 void bus_manager_send_finished(
3478                 Manager *m,
3479                 usec_t firmware_usec,
3480                 usec_t loader_usec,
3481                 usec_t kernel_usec,
3482                 usec_t initrd_usec,
3483                 usec_t userspace_usec,
3484                 usec_t total_usec) {
3485
3486         int r;
3487
3488         assert(m);
3489
3490         r = bus_foreach_bus(
3491                         m,
3492                         NULL,
3493                         send_finished,
3494                         (usec_t[6]) {
3495                                 firmware_usec,
3496                                 loader_usec,
3497                                 kernel_usec,
3498                                 initrd_usec,
3499                                 userspace_usec,
3500                                 total_usec
3501                         });
3502         if (r < 0)
3503                 log_debug_errno(r, "Failed to send finished signal: %m");
3504 }
3505
3506 static int send_reloading(sd_bus *bus, void *userdata) {
3507         _cleanup_(sd_bus_message_unrefp) sd_bus_message *message = NULL;
3508         int r;
3509
3510         assert(bus);
3511
3512         r = sd_bus_message_new_signal(bus, &message, "/org/freedesktop/systemd1", "org.freedesktop.systemd1.Manager", "Reloading");
3513         if (r < 0)
3514                 return r;
3515
3516         r = sd_bus_message_append(message, "b", PTR_TO_INT(userdata));
3517         if (r < 0)
3518                 return r;
3519
3520         return sd_bus_send(bus, message, NULL);
3521 }
3522
3523 void bus_manager_send_reloading(Manager *m, bool active) {
3524         int r;
3525
3526         assert(m);
3527
3528         r = bus_foreach_bus(m, NULL, send_reloading, INT_TO_PTR(active));
3529         if (r < 0)
3530                 log_debug_errno(r, "Failed to send reloading signal: %m");
3531 }
3532
3533 static int send_changed_signal(sd_bus *bus, void *userdata) {
3534         assert(bus);
3535
3536         return sd_bus_emit_properties_changed_strv(bus,
3537                                                    "/org/freedesktop/systemd1",
3538                                                    "org.freedesktop.systemd1.Manager",
3539                                                    NULL);
3540 }
3541
3542 void bus_manager_send_change_signal(Manager *m) {
3543         int r;
3544
3545         assert(m);
3546
3547         r = bus_foreach_bus(m, NULL, send_changed_signal, NULL);
3548         if (r < 0)
3549                 log_debug_errno(r, "Failed to send manager change signal: %m");
3550 }