]> git.ipfire.org Git - thirdparty/systemd.git/blob - src/dbus-execute.c
exec: properly apply capability bounding set, add inverted bounding sets
[thirdparty/systemd.git] / src / dbus-execute.c
1 /*-*- Mode: C; c-basic-offset: 8; indent-tabs-mode: nil -*-*/
2
3 /***
4 This file is part of systemd.
5
6 Copyright 2010 Lennart Poettering
7
8 systemd is free software; you can redistribute it and/or modify it
9 under the terms of the GNU General Public License as published by
10 the Free Software Foundation; either version 2 of the License, or
11 (at your option) any later version.
12
13 systemd is distributed in the hope that it will be useful, but
14 WITHOUT ANY WARRANTY; without even the implied warranty of
15 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
16 General Public License for more details.
17
18 You should have received a copy of the GNU General Public License
19 along with systemd; If not, see <http://www.gnu.org/licenses/>.
20 ***/
21
22 #include <errno.h>
23 #include <dbus/dbus.h>
24 #include <sys/prctl.h>
25
26 #include "dbus-execute.h"
27 #include "missing.h"
28 #include "ioprio.h"
29 #include "strv.h"
30
31 DEFINE_BUS_PROPERTY_APPEND_ENUM(bus_execute_append_kill_mode, kill_mode, KillMode);
32
33 DEFINE_BUS_PROPERTY_APPEND_ENUM(bus_execute_append_input, exec_input, ExecInput);
34 DEFINE_BUS_PROPERTY_APPEND_ENUM(bus_execute_append_output, exec_output, ExecOutput);
35
36 int bus_execute_append_env_files(Manager *m, DBusMessageIter *i, const char *property, void *data) {
37 char **env_files = data, **j;
38 DBusMessageIter sub, sub2;
39
40 assert(m);
41 assert(i);
42 assert(property);
43
44 if (!dbus_message_iter_open_container(i, DBUS_TYPE_ARRAY, "(sb)", &sub))
45 return -ENOMEM;
46
47 STRV_FOREACH(j, env_files) {
48 dbus_bool_t b = false;
49 char *fn = *j;
50
51 if (fn[0] == '-') {
52 b = true;
53 fn++;
54 }
55
56 if (!dbus_message_iter_open_container(&sub, DBUS_TYPE_STRUCT, NULL, &sub2) ||
57 !dbus_message_iter_append_basic(&sub2, DBUS_TYPE_STRING, &fn) ||
58 !dbus_message_iter_append_basic(&sub2, DBUS_TYPE_BOOLEAN, &b) ||
59 !dbus_message_iter_close_container(&sub, &sub2))
60 return -ENOMEM;
61 }
62
63 if (!dbus_message_iter_close_container(i, &sub))
64 return -ENOMEM;
65
66 return 0;
67 }
68
69 int bus_execute_append_oom_score_adjust(Manager *m, DBusMessageIter *i, const char *property, void *data) {
70 ExecContext *c = data;
71 int32_t n;
72
73 assert(m);
74 assert(i);
75 assert(property);
76 assert(c);
77
78 if (c->oom_score_adjust_set)
79 n = c->oom_score_adjust;
80 else {
81 char *t;
82
83 n = 0;
84 if (read_one_line_file("/proc/self/oom_score_adj", &t) >= 0) {
85 safe_atoi(t, &n);
86 free(t);
87 } else if (read_one_line_file("/proc/self/oom_adj", &t) >= 0) {
88 safe_atoi(t, &n);
89 free(t);
90
91 if (n == OOM_ADJUST_MAX)
92 n = OOM_SCORE_ADJ_MAX;
93 else
94 n = (n * OOM_SCORE_ADJ_MAX) / -OOM_DISABLE;
95 }
96 }
97
98 if (!dbus_message_iter_append_basic(i, DBUS_TYPE_INT32, &n))
99 return -ENOMEM;
100
101 return 0;
102 }
103
104 int bus_execute_append_nice(Manager *m, DBusMessageIter *i, const char *property, void *data) {
105 ExecContext *c = data;
106 int32_t n;
107
108 assert(m);
109 assert(i);
110 assert(property);
111 assert(c);
112
113 if (c->nice_set)
114 n = c->nice;
115 else
116 n = getpriority(PRIO_PROCESS, 0);
117
118 if (!dbus_message_iter_append_basic(i, DBUS_TYPE_INT32, &n))
119 return -ENOMEM;
120
121 return 0;
122 }
123
124 int bus_execute_append_ioprio(Manager *m, DBusMessageIter *i, const char *property, void *data) {
125 ExecContext *c = data;
126 int32_t n;
127
128 assert(m);
129 assert(i);
130 assert(property);
131 assert(c);
132
133 if (c->ioprio_set)
134 n = c->ioprio;
135 else
136 n = ioprio_get(IOPRIO_WHO_PROCESS, 0);
137
138 if (!dbus_message_iter_append_basic(i, DBUS_TYPE_INT32, &n))
139 return -ENOMEM;
140
141 return 0;
142 }
143
144 int bus_execute_append_cpu_sched_policy(Manager *m, DBusMessageIter *i, const char *property, void *data) {
145 ExecContext *c = data;
146 int32_t n;
147
148 assert(m);
149 assert(i);
150 assert(property);
151 assert(c);
152
153 if (c->cpu_sched_set)
154 n = c->cpu_sched_policy;
155 else
156 n = sched_getscheduler(0);
157
158 if (!dbus_message_iter_append_basic(i, DBUS_TYPE_INT32, &n))
159 return -ENOMEM;
160
161 return 0;
162 }
163
164 int bus_execute_append_cpu_sched_priority(Manager *m, DBusMessageIter *i, const char *property, void *data) {
165 ExecContext *c = data;
166 int32_t n;
167
168 assert(m);
169 assert(i);
170 assert(property);
171 assert(c);
172
173 if (c->cpu_sched_set)
174 n = c->cpu_sched_priority;
175 else {
176 struct sched_param p;
177 n = 0;
178
179 zero(p);
180 if (sched_getparam(0, &p) >= 0)
181 n = p.sched_priority;
182 }
183
184 if (!dbus_message_iter_append_basic(i, DBUS_TYPE_INT32, &n))
185 return -ENOMEM;
186
187 return 0;
188 }
189
190 int bus_execute_append_affinity(Manager *m, DBusMessageIter *i, const char *property, void *data) {
191 ExecContext *c = data;
192 dbus_bool_t b;
193 DBusMessageIter sub;
194
195 assert(m);
196 assert(i);
197 assert(property);
198 assert(c);
199
200 if (!dbus_message_iter_open_container(i, DBUS_TYPE_ARRAY, "y", &sub))
201 return -ENOMEM;
202
203 if (c->cpuset)
204 b = dbus_message_iter_append_fixed_array(&sub, DBUS_TYPE_BYTE, &c->cpuset, CPU_ALLOC_SIZE(c->cpuset_ncpus));
205 else
206 b = dbus_message_iter_append_fixed_array(&sub, DBUS_TYPE_BYTE, &c->cpuset, 0);
207
208 if (!b)
209 return -ENOMEM;
210
211 if (!dbus_message_iter_close_container(i, &sub))
212 return -ENOMEM;
213
214 return 0;
215 }
216
217 int bus_execute_append_timer_slack_nsec(Manager *m, DBusMessageIter *i, const char *property, void *data) {
218 ExecContext *c = data;
219 uint64_t u;
220
221 assert(m);
222 assert(i);
223 assert(property);
224 assert(c);
225
226 if (c->timer_slack_nsec_set)
227 u = (uint64_t) c->timer_slack_nsec;
228 else
229 u = (uint64_t) prctl(PR_GET_TIMERSLACK);
230
231 if (!dbus_message_iter_append_basic(i, DBUS_TYPE_UINT64, &u))
232 return -ENOMEM;
233
234 return 0;
235 }
236
237 int bus_execute_append_capability_bs(Manager *m, DBusMessageIter *i, const char *property, void *data) {
238 ExecContext *c = data;
239 uint64_t normal, inverted;
240
241 assert(m);
242 assert(i);
243 assert(property);
244 assert(c);
245
246 /* We store this negated internally, to match the kernel, bu
247 * we expose it normalized. */
248
249 normal = *(uint64_t*) data;
250 inverted = ~normal;
251
252 return bus_property_append_uint64(m, i, property, &inverted);
253 }
254
255 int bus_execute_append_capabilities(Manager *m, DBusMessageIter *i, const char *property, void *data) {
256 ExecContext *c = data;
257 char *t = NULL;
258 const char *s;
259 dbus_bool_t b;
260
261 assert(m);
262 assert(i);
263 assert(property);
264 assert(c);
265
266 if (c->capabilities)
267 s = t = cap_to_text(c->capabilities, NULL);
268 else
269 s = "";
270
271 if (!s)
272 return -ENOMEM;
273
274 b = dbus_message_iter_append_basic(i, DBUS_TYPE_STRING, &s);
275
276 if (t)
277 cap_free(t);
278
279 if (!b)
280 return -ENOMEM;
281
282 return 0;
283 }
284
285 int bus_execute_append_rlimits(Manager *m, DBusMessageIter *i, const char *property, void *data) {
286 ExecContext *c = data;
287 int r;
288 uint64_t u;
289
290 assert(m);
291 assert(i);
292 assert(property);
293 assert(c);
294
295 assert_se((r = rlimit_from_string(property)) >= 0);
296
297 if (c->rlimit[r])
298 u = (uint64_t) c->rlimit[r]->rlim_max;
299 else {
300 struct rlimit rl;
301
302 zero(rl);
303 getrlimit(r, &rl);
304
305 u = (uint64_t) rl.rlim_max;
306 }
307
308 if (!dbus_message_iter_append_basic(i, DBUS_TYPE_UINT64, &u))
309 return -ENOMEM;
310
311 return 0;
312 }
313
314 int bus_execute_append_command(Manager *m, DBusMessageIter *i, const char *property, void *data) {
315 ExecCommand *c = data;
316 DBusMessageIter sub, sub2, sub3;
317
318 assert(m);
319 assert(i);
320 assert(property);
321
322 if (!dbus_message_iter_open_container(i, DBUS_TYPE_ARRAY, "(sasbttuii)", &sub))
323 return -ENOMEM;
324
325 LIST_FOREACH(command, c, c) {
326 char **l;
327 uint32_t pid;
328 int32_t code, status;
329
330 if (!c->path)
331 continue;
332
333 if (!dbus_message_iter_open_container(&sub, DBUS_TYPE_STRUCT, NULL, &sub2) ||
334 !dbus_message_iter_append_basic(&sub2, DBUS_TYPE_STRING, &c->path) ||
335 !dbus_message_iter_open_container(&sub2, DBUS_TYPE_ARRAY, "s", &sub3))
336 return -ENOMEM;
337
338 STRV_FOREACH(l, c->argv)
339 if (!dbus_message_iter_append_basic(&sub3, DBUS_TYPE_STRING, l))
340 return -ENOMEM;
341
342 pid = (uint32_t) c->exec_status.pid;
343 code = (int32_t) c->exec_status.code;
344 status = (int32_t) c->exec_status.status;
345
346 if (!dbus_message_iter_close_container(&sub2, &sub3) ||
347 !dbus_message_iter_append_basic(&sub2, DBUS_TYPE_BOOLEAN, &c->ignore) ||
348 !dbus_message_iter_append_basic(&sub2, DBUS_TYPE_UINT64, &c->exec_status.start_timestamp.realtime) ||
349 !dbus_message_iter_append_basic(&sub2, DBUS_TYPE_UINT64, &c->exec_status.exit_timestamp.realtime) ||
350 !dbus_message_iter_append_basic(&sub2, DBUS_TYPE_UINT32, &pid) ||
351 !dbus_message_iter_append_basic(&sub2, DBUS_TYPE_INT32, &code) ||
352 !dbus_message_iter_append_basic(&sub2, DBUS_TYPE_INT32, &status))
353 return -ENOMEM;
354
355 if (!dbus_message_iter_close_container(&sub, &sub2))
356 return -ENOMEM;
357 }
358
359 if (!dbus_message_iter_close_container(i, &sub))
360 return -ENOMEM;
361
362 return 0;
363 }