1 /* SPDX-License-Identifier: LGPL-2.1+ */
5 This file is part of systemd.
7 Copyright 2010 Lennart Poettering
10 typedef struct ExecStatus ExecStatus
;
11 typedef struct ExecCommand ExecCommand
;
12 typedef struct ExecContext ExecContext
;
13 typedef struct ExecRuntime ExecRuntime
;
14 typedef struct ExecParameters ExecParameters
;
15 typedef struct Manager Manager
;
20 #include <sys/capability.h>
22 #include "cgroup-util.h"
26 #include "namespace.h"
29 #define EXEC_STDIN_DATA_MAX (64U*1024U*1024U)
31 typedef enum ExecUtmpMode
{
36 _EXEC_UTMP_MODE_INVALID
= -1
39 typedef enum ExecInput
{
49 _EXEC_INPUT_INVALID
= -1
52 typedef enum ExecOutput
{
57 EXEC_OUTPUT_SYSLOG_AND_CONSOLE
,
59 EXEC_OUTPUT_KMSG_AND_CONSOLE
,
61 EXEC_OUTPUT_JOURNAL_AND_CONSOLE
,
66 _EXEC_OUTPUT_INVALID
= -1
69 typedef enum ExecPreserveMode
{
72 EXEC_PRESERVE_RESTART
,
73 _EXEC_PRESERVE_MODE_MAX
,
74 _EXEC_PRESERVE_MODE_INVALID
= -1
77 typedef enum ExecKeyringMode
{
81 _EXEC_KEYRING_MODE_MAX
,
82 _EXEC_KEYRING_MODE_INVALID
= -1,
86 dual_timestamp start_timestamp
;
87 dual_timestamp exit_timestamp
;
89 int code
; /* as in siginfo_t::si_code */
90 int status
; /* as in sigingo_t::si_status */
93 typedef enum ExecCommandFlags
{
94 EXEC_COMMAND_IGNORE_FAILURE
= 1,
95 EXEC_COMMAND_FULLY_PRIVILEGED
= 2,
96 EXEC_COMMAND_NO_SETUID
= 4,
97 EXEC_COMMAND_AMBIENT_MAGIC
= 8,
103 ExecStatus exec_status
;
104 ExecCommandFlags flags
;
105 LIST_FIELDS(ExecCommand
, command
); /* useful for chaining commands */
113 /* unit id of the owner */
119 /* An AF_UNIX socket pair, that contains a datagram containing a file descriptor referring to the network
121 int netns_storage_socket
[2];
124 typedef enum ExecDirectoryType
{
125 EXEC_DIRECTORY_RUNTIME
= 0,
126 EXEC_DIRECTORY_STATE
,
127 EXEC_DIRECTORY_CACHE
,
129 EXEC_DIRECTORY_CONFIGURATION
,
130 _EXEC_DIRECTORY_TYPE_MAX
,
131 _EXEC_DIRECTORY_TYPE_INVALID
= -1,
134 typedef struct ExecDirectory
{
141 char **environment_files
;
142 char **pass_environment
;
143 char **unset_environment
;
145 struct rlimit
*rlimit
[_RLIMIT_MAX
];
146 char *working_directory
, *root_directory
, *root_image
;
147 bool working_directory_missing_ok
;
148 bool working_directory_home
;
151 int oom_score_adjust
;
154 int cpu_sched_policy
;
155 int cpu_sched_priority
;
158 unsigned cpuset_ncpus
;
161 ExecOutput std_output
;
162 ExecOutput std_error
;
163 char *stdio_fdname
[3];
167 size_t stdin_data_size
;
169 nsec_t timer_slack_nsec
;
177 bool tty_vt_disallocate
;
181 /* Since resolving these names might involve socket
182 * connections and we don't want to deadlock ourselves these
183 * names are resolved on execution only and in the child
187 char **supplementary_groups
;
192 ExecUtmpMode utmp_mode
;
194 bool selinux_context_ignore
;
195 char *selinux_context
;
197 bool apparmor_profile_ignore
;
198 char *apparmor_profile
;
200 bool smack_process_label_ignore
;
201 char *smack_process_label
;
203 ExecKeyringMode keyring_mode
;
205 char **read_write_paths
, **read_only_paths
, **inaccessible_paths
;
206 unsigned long mount_flags
;
207 BindMount
*bind_mounts
;
208 size_t n_bind_mounts
;
209 TemporaryFileSystem
*temporary_filesystems
;
210 size_t n_temporary_filesystems
;
212 uint64_t capability_bounding_set
;
213 uint64_t capability_ambient_set
;
217 char *syslog_identifier
;
218 bool syslog_level_prefix
;
222 struct iovec
* log_extra_fields
;
223 size_t n_log_extra_fields
;
225 bool cpu_sched_reset_on_fork
;
228 bool private_network
;
229 bool private_devices
;
231 ProtectSystem protect_system
;
232 ProtectHome protect_home
;
233 bool protect_kernel_tunables
;
234 bool protect_kernel_modules
;
235 bool protect_control_groups
;
238 bool no_new_privileges
;
243 /* This is not exposed to the user but available
244 * internally. We need it to make sure that whenever we spawn
245 * /usr/bin/mount it is run in the same process group as us so
246 * that the autofs logic detects that it belongs to us and we
247 * don't enter a trigger loop. */
250 unsigned long personality
;
251 bool lock_personality
;
253 unsigned long restrict_namespaces
; /* The CLONE_NEWxyz flags permitted to the unit's processes */
255 Hashmap
*syscall_filter
;
258 bool syscall_whitelist
:1;
260 Set
*address_families
;
261 bool address_families_whitelist
:1;
263 ExecPreserveMode runtime_directory_preserve_mode
;
264 ExecDirectory directories
[_EXEC_DIRECTORY_TYPE_MAX
];
266 bool memory_deny_write_execute
;
267 bool restrict_realtime
;
269 bool oom_score_adjust_set
:1;
272 bool cpu_sched_set
:1;
275 static inline bool exec_context_restrict_namespaces_set(const ExecContext
*c
) {
278 return (c
->restrict_namespaces
& NAMESPACE_FLAGS_ALL
) != NAMESPACE_FLAGS_ALL
;
281 typedef enum ExecFlags
{
282 EXEC_APPLY_SANDBOXING
= 1U << 0,
283 EXEC_APPLY_CHROOT
= 1U << 1,
284 EXEC_APPLY_TTY_STDIN
= 1U << 2,
285 EXEC_NEW_KEYRING
= 1U << 3,
286 EXEC_PASS_LOG_UNIT
= 1U << 4, /* Whether to pass the unit name to the service's journal stream connection */
287 EXEC_CHOWN_DIRECTORIES
= 1U << 5, /* chown() the runtime/state/cache/log directories to the user we run as, under all conditions */
288 EXEC_NSS_BYPASS_BUS
= 1U << 6, /* Set the SYSTEMD_NSS_BYPASS_BUS environment variable, to disable nss-systemd for dbus */
289 EXEC_CGROUP_DELEGATE
= 1U << 7,
291 /* The following are not used by execute.c, but by consumers internally */
292 EXEC_PASS_FDS
= 1U << 8,
293 EXEC_IS_CONTROL
= 1U << 9,
294 EXEC_SETENV_RESULT
= 1U << 10,
295 EXEC_SET_WATCHDOG
= 1U << 11,
298 struct ExecParameters
{
304 size_t n_storage_fds
;
308 bool selinux_context_net
:1;
310 CGroupMask cgroup_supported
;
311 const char *cgroup_path
;
315 const char *confirm_spawn
;
317 usec_t watchdog_usec
;
327 #include "dynamic-user.h"
329 int exec_spawn(Unit
*unit
,
330 ExecCommand
*command
,
331 const ExecContext
*context
,
332 const ExecParameters
*exec_params
,
333 ExecRuntime
*runtime
,
334 DynamicCreds
*dynamic_creds
,
337 void exec_command_done_array(ExecCommand
*c
, size_t n
);
339 ExecCommand
* exec_command_free_list(ExecCommand
*c
);
340 void exec_command_free_array(ExecCommand
**c
, size_t n
);
342 void exec_command_dump_list(ExecCommand
*c
, FILE *f
, const char *prefix
);
343 void exec_command_append_list(ExecCommand
**l
, ExecCommand
*e
);
344 int exec_command_set(ExecCommand
*c
, const char *path
, ...);
345 int exec_command_append(ExecCommand
*c
, const char *path
, ...);
347 void exec_context_init(ExecContext
*c
);
348 void exec_context_done(ExecContext
*c
);
349 void exec_context_dump(const ExecContext
*c
, FILE* f
, const char *prefix
);
351 int exec_context_destroy_runtime_directory(const ExecContext
*c
, const char *runtime_root
);
353 const char* exec_context_fdname(const ExecContext
*c
, int fd_index
);
355 bool exec_context_may_touch_console(const ExecContext
*c
);
356 bool exec_context_maintains_privileges(const ExecContext
*c
);
358 int exec_context_get_effective_ioprio(const ExecContext
*c
);
360 void exec_context_free_log_extra_fields(ExecContext
*c
);
362 void exec_status_start(ExecStatus
*s
, pid_t pid
);
363 void exec_status_exit(ExecStatus
*s
, const ExecContext
*context
, pid_t pid
, int code
, int status
);
364 void exec_status_dump(const ExecStatus
*s
, FILE *f
, const char *prefix
);
366 int exec_runtime_acquire(Manager
*m
, const ExecContext
*c
, const char *name
, bool create
, ExecRuntime
**ret
);
367 ExecRuntime
*exec_runtime_unref(ExecRuntime
*r
, bool destroy
);
369 int exec_runtime_serialize(const Manager
*m
, FILE *f
, FDSet
*fds
);
370 int exec_runtime_deserialize_compat(Unit
*u
, const char *key
, const char *value
, FDSet
*fds
);
371 void exec_runtime_deserialize_one(Manager
*m
, const char *value
, FDSet
*fds
);
372 void exec_runtime_vacuum(Manager
*m
);
374 const char* exec_output_to_string(ExecOutput i
) _const_
;
375 ExecOutput
exec_output_from_string(const char *s
) _pure_
;
377 const char* exec_input_to_string(ExecInput i
) _const_
;
378 ExecInput
exec_input_from_string(const char *s
) _pure_
;
380 const char* exec_utmp_mode_to_string(ExecUtmpMode i
) _const_
;
381 ExecUtmpMode
exec_utmp_mode_from_string(const char *s
) _pure_
;
383 const char* exec_preserve_mode_to_string(ExecPreserveMode i
) _const_
;
384 ExecPreserveMode
exec_preserve_mode_from_string(const char *s
) _pure_
;
386 const char* exec_keyring_mode_to_string(ExecKeyringMode i
) _const_
;
387 ExecKeyringMode
exec_keyring_mode_from_string(const char *s
) _pure_
;
389 const char* exec_directory_type_to_string(ExecDirectoryType i
) _const_
;
390 ExecDirectoryType
exec_directory_type_from_string(const char *s
) _pure_
;