src/login/logind-dbus.c

   1 /*-*- Mode: C; c-basic-offset: 8; indent-tabs-mode: nil -*-*/
   2
   3 /***
   4   This file is part of systemd.
   5
   6   Copyright 2011 Lennart Poettering
   7
   8   systemd is free software; you can redistribute it and/or modify it
   9   under the terms of the GNU Lesser General Public License as published by
  10   the Free Software Foundation; either version 2.1 of the License, or
  11   (at your option) any later version.
  12
  13   systemd is distributed in the hope that it will be useful, but
  14   WITHOUT ANY WARRANTY; without even the implied warranty of
  15   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
  16   Lesser General Public License for more details.
  17
  18   You should have received a copy of the GNU Lesser General Public License
  19   along with systemd; If not, see <http://www.gnu.org/licenses/>.
  20 ***/
  21
  22 #include <errno.h>
  23 #include <string.h>
  24 #include <unistd.h>
  25 #include <pwd.h>
  26 #include <sys/capability.h>
  27
  28 #include "sd-id128.h"
  29 #include "sd-messages.h"
  30 #include "strv.h"
  31 #include "mkdir.h"
  32 #include "path-util.h"
  33 #include "special.h"
  34 #include "sleep-config.h"
  35 #include "fileio-label.h"
  36 #include "label.h"
  37 #include "utf8.h"
  38 #include "unit-name.h"
  39 #include "virt.h"
  40 #include "audit.h"
  41 #include "bus-util.h"
  42 #include "bus-error.h"
  43 #include "logind.h"
  44 #include "bus-errors.h"
  45 #include "udev-util.h"
  46
  47 static int property_get_idle_hint(
  48                 sd_bus *bus,
  49                 const char *path,
  50                 const char *interface,
  51                 const char *property,
  52                 sd_bus_message *reply,
  53                 void *userdata,
  54                 sd_bus_error *error) {
  55
  56         Manager *m = userdata;
  57
  58         assert(bus);
  59         assert(reply);
  60         assert(m);
  61
  62         return sd_bus_message_append(reply, "b", manager_get_idle_hint(m, NULL) > 0);
  63 }
  64
  65 static int property_get_idle_since_hint(
  66                 sd_bus *bus,
  67                 const char *path,
  68                 const char *interface,
  69                 const char *property,
  70                 sd_bus_message *reply,
  71                 void *userdata,
  72                 sd_bus_error *error) {
  73
  74         Manager *m = userdata;
  75         dual_timestamp t;
  76
  77         assert(bus);
  78         assert(reply);
  79         assert(m);
  80
  81         manager_get_idle_hint(m, &t);
  82
  83         return sd_bus_message_append(reply, "t", streq(property, "IdleSinceHint") ? t.realtime : t.monotonic);
  84 }
  85
  86 static int property_get_inhibited(
  87                 sd_bus *bus,
  88                 const char *path,
  89                 const char *interface,
  90                 const char *property,
  91                 sd_bus_message *reply,
  92                 void *userdata,
  93                 sd_bus_error *error) {
  94
  95         Manager *m = userdata;
  96         InhibitWhat w;
  97
  98         assert(bus);
  99         assert(reply);
 100         assert(m);
 101
 102         w = manager_inhibit_what(m, streq(property, "BlockInhibited") ? INHIBIT_BLOCK : INHIBIT_DELAY);
 103
 104         return sd_bus_message_append(reply, "s", inhibit_what_to_string(w));
 105 }
 106
 107 static int property_get_preparing(
 108                 sd_bus *bus,
 109                 const char *path,
 110                 const char *interface,
 111                 const char *property,
 112                 sd_bus_message *reply,
 113                 void *userdata,
 114                 sd_bus_error *error) {
 115
 116         Manager *m = userdata;
 117         bool b;
 118
 119         assert(bus);
 120         assert(reply);
 121         assert(m);
 122
 123         if (streq(property, "PreparingForShutdown"))
 124                 b = !!(m->action_what & INHIBIT_SHUTDOWN);
 125         else
 126                 b = !!(m->action_what & INHIBIT_SLEEP);
 127
 128         return sd_bus_message_append(reply, "b", b);
 129 }
 130
 131 static BUS_DEFINE_PROPERTY_GET_ENUM(property_get_handle_action, handle_action, HandleAction);
 132
 133 static int method_get_session(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) {
 134         _cleanup_free_ char *p = NULL;
 135         Manager *m = userdata;
 136         const char *name;
 137         Session *session;
 138         int r;
 139
 140         assert(bus);
 141         assert(message);
 142         assert(m);
 143
 144         r = sd_bus_message_read(message, "s", &name);
 145         if (r < 0)
 146                 return r;
 147
 148         session = hashmap_get(m->sessions, name);
 149         if (!session)
 150                 return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_SESSION, "No session '%s' known", name);
 151
 152         p = session_bus_path(session);
 153         if (!p)
 154                 return -ENOMEM;
 155
 156         return sd_bus_reply_method_return(message, "o", p);
 157 }
 158
 159 static int method_get_session_by_pid(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) {
 160         _cleanup_free_ char *p = NULL;
 161         Session *session = NULL;
 162         Manager *m = userdata;
 163         pid_t pid;
 164         int r;
 165
 166         assert(bus);
 167         assert(message);
 168         assert(m);
 169
 170         assert_cc(sizeof(pid_t) == sizeof(uint32_t));
 171
 172         r = sd_bus_message_read(message, "u", &pid);
 173         if (r < 0)
 174                 return r;
 175
 176         if (pid == 0) {
 177                 _cleanup_bus_creds_unref_ sd_bus_creds *creds = NULL;
 178
 179                 r = sd_bus_query_sender_creds(message, SD_BUS_CREDS_PID, &creds);
 180                 if (r < 0)
 181                         return r;
 182
 183                 r = sd_bus_creds_get_pid(creds, &pid);
 184                 if (r < 0)
 185                         return r;
 186         }
 187
 188         r = manager_get_session_by_pid(m, pid, &session);
 189         if (r < 0)
 190                 return r;
 191         if (!session)
 192                 return sd_bus_error_setf(error, BUS_ERROR_NO_SESSION_FOR_PID, "PID "PID_FMT" does not belong to any known session", pid);
 193
 194         p = session_bus_path(session);
 195         if (!p)
 196                 return -ENOMEM;
 197
 198         return sd_bus_reply_method_return(message, "o", p);
 199 }
 200
 201 static int method_get_user(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) {
 202         _cleanup_free_ char *p = NULL;
 203         Manager *m = userdata;
 204         uint32_t uid;
 205         User *user;
 206         int r;
 207
 208         assert(bus);
 209         assert(message);
 210         assert(m);
 211
 212         r = sd_bus_message_read(message, "u", &uid);
 213         if (r < 0)
 214                 return r;
 215
 216         user = hashmap_get(m->users, ULONG_TO_PTR((unsigned long) uid));
 217         if (!user)
 218                 return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_USER, "No user "UID_FMT" known or logged in", uid);
 219
 220         p = user_bus_path(user);
 221         if (!p)
 222                 return -ENOMEM;
 223
 224         return sd_bus_reply_method_return(message, "o", p);
 225 }
 226
 227 static int method_get_user_by_pid(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) {
 228         _cleanup_free_ char *p = NULL;
 229         Manager *m = userdata;
 230         User *user = NULL;
 231         pid_t pid;
 232         int r;
 233
 234         assert(bus);
 235         assert(message);
 236         assert(m);
 237
 238         assert_cc(sizeof(pid_t) == sizeof(uint32_t));
 239
 240         r = sd_bus_message_read(message, "u", &pid);
 241         if (r < 0)
 242                 return r;
 243
 244         if (pid == 0) {
 245                 _cleanup_bus_creds_unref_ sd_bus_creds *creds = NULL;
 246
 247                 r = sd_bus_query_sender_creds(message, SD_BUS_CREDS_PID, &creds);
 248                 if (r < 0)
 249                         return r;
 250
 251                 r = sd_bus_creds_get_pid(creds, &pid);
 252                 if (r < 0)
 253                         return r;
 254         }
 255
 256         r = manager_get_user_by_pid(m, pid, &user);
 257         if (r < 0)
 258                 return r;
 259         if (!user)
 260                 return sd_bus_error_setf(error, BUS_ERROR_NO_USER_FOR_PID, "PID "PID_FMT" does not belong to any known or logged in user", pid);
 261
 262         p = user_bus_path(user);
 263         if (!p)
 264                 return -ENOMEM;
 265
 266         return sd_bus_reply_method_return(message, "o", p);
 267 }
 268
 269 static int method_get_seat(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) {
 270         _cleanup_free_ char *p = NULL;
 271         Manager *m = userdata;
 272         const char *name;
 273         Seat *seat;
 274         int r;
 275
 276         assert(bus);
 277         assert(message);
 278         assert(m);
 279
 280         r = sd_bus_message_read(message, "s", &name);
 281         if (r < 0)
 282                 return r;
 283
 284         seat = hashmap_get(m->seats, name);
 285         if (!seat)
 286                 return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_SEAT, "No seat '%s' known", name);
 287
 288         p = seat_bus_path(seat);
 289         if (!p)
 290                 return -ENOMEM;
 291
 292         return sd_bus_reply_method_return(message, "o", p);
 293 }
 294
 295 static int method_list_sessions(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) {
 296         _cleanup_bus_message_unref_ sd_bus_message *reply = NULL;
 297         Manager *m = userdata;
 298         Session *session;
 299         Iterator i;
 300         int r;
 301
 302         assert(bus);
 303         assert(message);
 304         assert(m);
 305
 306         r = sd_bus_message_new_method_return(message, &reply);
 307         if (r < 0)
 308                 return r;
 309
 310         r = sd_bus_message_open_container(reply, 'a', "(susso)");
 311         if (r < 0)
 312                 return r;
 313
 314         HASHMAP_FOREACH(session, m->sessions, i) {
 315                 _cleanup_free_ char *p = NULL;
 316
 317                 p = session_bus_path(session);
 318                 if (!p)
 319                         return -ENOMEM;
 320
 321                 r = sd_bus_message_append(reply, "(susso)",
 322                                           session->id,
 323                                           (uint32_t) session->user->uid,
 324                                           session->user->name,
 325                                           session->seat ? session->seat->id : "",
 326                                           p);
 327                 if (r < 0)
 328                         return r;
 329         }
 330
 331         r = sd_bus_message_close_container(reply);
 332         if (r < 0)
 333                 return r;
 334
 335         return sd_bus_send(bus, reply, NULL);
 336 }
 337
 338 static int method_list_users(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) {
 339         _cleanup_bus_message_unref_ sd_bus_message *reply = NULL;
 340         Manager *m = userdata;
 341         User *user;
 342         Iterator i;
 343         int r;
 344
 345         assert(bus);
 346         assert(message);
 347         assert(m);
 348
 349         r = sd_bus_message_new_method_return(message, &reply);
 350         if (r < 0)
 351                 return r;
 352
 353         r = sd_bus_message_open_container(reply, 'a', "(uso)");
 354         if (r < 0)
 355                 return r;
 356
 357         HASHMAP_FOREACH(user, m->users, i) {
 358                 _cleanup_free_ char *p = NULL;
 359
 360                 p = user_bus_path(user);
 361                 if (!p)
 362                         return -ENOMEM;
 363
 364                 r = sd_bus_message_append(reply, "(uso)",
 365                                           (uint32_t) user->uid,
 366                                           user->name,
 367                                           p);
 368                 if (r < 0)
 369                         return r;
 370         }
 371
 372         r = sd_bus_message_close_container(reply);
 373         if (r < 0)
 374                 return r;
 375
 376         return sd_bus_send(bus, reply, NULL);
 377 }
 378
 379 static int method_list_seats(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) {
 380         _cleanup_bus_message_unref_ sd_bus_message *reply = NULL;
 381         Manager *m = userdata;
 382         Seat *seat;
 383         Iterator i;
 384         int r;
 385
 386         assert(bus);
 387         assert(message);
 388         assert(m);
 389
 390         r = sd_bus_message_new_method_return(message, &reply);
 391         if (r < 0)
 392                 return r;
 393
 394         r = sd_bus_message_open_container(reply, 'a', "(so)");
 395         if (r < 0)
 396                 return r;
 397
 398         HASHMAP_FOREACH(seat, m->seats, i) {
 399                 _cleanup_free_ char *p = NULL;
 400
 401                 p = seat_bus_path(seat);
 402                 if (!p)
 403                         return -ENOMEM;
 404
 405                 r = sd_bus_message_append(reply, "(so)", seat->id, p);
 406                 if (r < 0)
 407                         return r;
 408         }
 409
 410         r = sd_bus_message_close_container(reply);
 411         if (r < 0)
 412                 return r;
 413
 414         return sd_bus_send(bus, reply, NULL);
 415 }
 416
 417 static int method_list_inhibitors(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) {
 418         _cleanup_bus_message_unref_ sd_bus_message *reply = NULL;
 419         Manager *m = userdata;
 420         Inhibitor *inhibitor;
 421         Iterator i;
 422         int r;
 423
 424         r = sd_bus_message_new_method_return(message, &reply);
 425         if (r < 0)
 426                 return r;
 427
 428         r = sd_bus_message_open_container(reply, 'a', "(ssssuu)");
 429         if (r < 0)
 430                 return r;
 431
 432         HASHMAP_FOREACH(inhibitor, m->inhibitors, i) {
 433
 434                 r = sd_bus_message_append(reply, "(ssssuu)",
 435                                           strempty(inhibit_what_to_string(inhibitor->what)),
 436                                           strempty(inhibitor->who),
 437                                           strempty(inhibitor->why),
 438                                           strempty(inhibit_mode_to_string(inhibitor->mode)),
 439                                           (uint32_t) inhibitor->uid,
 440                                           (uint32_t) inhibitor->pid);
 441                 if (r < 0)
 442                         return r;
 443         }
 444
 445         r = sd_bus_message_close_container(reply);
 446         if (r < 0)
 447                 return r;
 448
 449         return sd_bus_send(bus, reply, NULL);
 450 }
 451
 452 static int method_create_session(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) {
 453         const char *service, *type, *class, *cseat, *tty, *display, *remote_user, *remote_host, *desktop;
 454         uint32_t uid, leader, audit_id = 0;
 455         _cleanup_free_ char *id = NULL;
 456         Session *session = NULL;
 457         Manager *m = userdata;
 458         User *user = NULL;
 459         Seat *seat = NULL;
 460         int remote;
 461         uint32_t vtnr = 0;
 462         SessionType t;
 463         SessionClass c;
 464         int r;
 465
 466         assert(bus);
 467         assert(message);
 468         assert(m);
 469
 470         r = sd_bus_message_read(message, "uusssssussbss", &uid, &leader, &service, &type, &class, &desktop, &cseat, &vtnr, &tty, &display, &remote, &remote_user, &remote_host);
 471         if (r < 0)
 472                 return r;
 473
 474         if (leader == 1)
 475                 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Invalid leader PID");
 476
 477         if (isempty(type))
 478                 t = _SESSION_TYPE_INVALID;
 479         else {
 480                 t = session_type_from_string(type);
 481                 if (t < 0)
 482                         return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Invalid session type %s", type);
 483         }
 484
 485         if (isempty(class))
 486                 c = _SESSION_CLASS_INVALID;
 487         else {
 488                 c = session_class_from_string(class);
 489                 if (c < 0)
 490                         return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Invalid session class %s", class);
 491         }
 492
 493         if (isempty(desktop))
 494                 desktop = NULL;
 495         else {
 496                 if (!string_is_safe(desktop))
 497                         return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Invalid desktop string %s", desktop);
 498         }
 499
 500         if (isempty(cseat))
 501                 seat = NULL;
 502         else {
 503                 seat = hashmap_get(m->seats, cseat);
 504                 if (!seat)
 505                         return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_SEAT, "No seat '%s' known", cseat);
 506         }
 507
 508         if (tty_is_vc(tty)) {
 509                 int v;
 510
 511                 if (!seat)
 512                         seat = m->seat0;
 513                 else if (seat != m->seat0)
 514                         return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "TTY %s is virtual console but seat %s is not seat0", tty, seat->id);
 515
 516                 v = vtnr_from_tty(tty);
 517                 if (v <= 0)
 518                         return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Cannot determine VT number from virtual console TTY %s", tty);
 519
 520                 if (!vtnr)
 521                         vtnr = (uint32_t) v;
 522                 else if (vtnr != (uint32_t) v)
 523                         return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Specified TTY and VT number do not match");
 524
 525         } else if (tty_is_console(tty)) {
 526
 527                 if (!seat)
 528                         seat = m->seat0;
 529                 else if (seat != m->seat0)
 530                         return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Console TTY specified but seat is not seat0");
 531
 532                 if (vtnr != 0)
 533                         return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Console TTY specified but VT number is not 0");
 534         }
 535
 536         if (seat) {
 537                 if (seat_has_vts(seat)) {
 538                         if (!vtnr || vtnr > 63)
 539                                 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "VT number out of range");
 540                 } else {
 541                         if (vtnr != 0)
 542                                 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Seat has no VTs but VT number not 0");
 543                 }
 544         }
 545
 546         r = sd_bus_message_enter_container(message, 'a', "(sv)");
 547         if (r < 0)
 548                 return r;
 549
 550         if (t == _SESSION_TYPE_INVALID) {
 551                 if (!isempty(display))
 552                         t = SESSION_X11;
 553                 else if (!isempty(tty))
 554                         t = SESSION_TTY;
 555                 else
 556                         t = SESSION_UNSPECIFIED;
 557         }
 558
 559         if (c == _SESSION_CLASS_INVALID) {
 560                 if (t == SESSION_UNSPECIFIED)
 561                         c = SESSION_BACKGROUND;
 562                 else
 563                         c = SESSION_USER;
 564         }
 565
 566         if (leader <= 0) {
 567                 _cleanup_bus_creds_unref_ sd_bus_creds *creds = NULL;
 568
 569                 r = sd_bus_query_sender_creds(message, SD_BUS_CREDS_PID, &creds);
 570                 if (r < 0)
 571                         return r;
 572
 573                 assert_cc(sizeof(uint32_t) == sizeof(pid_t));
 574
 575                 r = sd_bus_creds_get_pid(creds, (pid_t*) &leader);
 576                 if (r < 0)
 577                         return r;
 578         }
 579
 580         manager_get_session_by_pid(m, leader, &session);
 581         if (session) {
 582                 _cleanup_free_ char *path = NULL;
 583                 _cleanup_close_ int fifo_fd = -1;
 584
 585                 /* Session already exists, client is probably
 586                  * something like "su" which changes uid but is still
 587                  * the same session */
 588
 589                 fifo_fd = session_create_fifo(session);
 590                 if (fifo_fd < 0)
 591                         return fifo_fd;
 592
 593                 path = session_bus_path(session);
 594                 if (!path)
 595                         return -ENOMEM;
 596
 597                 log_debug("Sending reply about an existing session: "
 598                           "id=%s object_path=%s uid=%u runtime_path=%s "
 599                           "session_fd=%d seat=%s vtnr=%u",
 600                           session->id,
 601                           path,
 602                           (uint32_t) session->user->uid,
 603                           session->user->runtime_path,
 604                           fifo_fd,
 605                           session->seat ? session->seat->id : "",
 606                           (uint32_t) session->vtnr);
 607
 608                 return sd_bus_reply_method_return(
 609                                 message, "soshusub",
 610                                 session->id,
 611                                 path,
 612                                 session->user->runtime_path,
 613                                 fifo_fd,
 614                                 (uint32_t) session->user->uid,
 615                                 session->seat ? session->seat->id : "",
 616                                 (uint32_t) session->vtnr,
 617                                 true);
 618         }
 619
 620         audit_session_from_pid(leader, &audit_id);
 621         if (audit_id > 0) {
 622                 /* Keep our session IDs and the audit session IDs in sync */
 623
 624                 if (asprintf(&id, "%"PRIu32, audit_id) < 0)
 625                         return -ENOMEM;
 626
 627                 /* Wut? There's already a session by this name and we
 628                  * didn't find it above? Weird, then let's not trust
 629                  * the audit data and let's better register a new
 630                  * ID */
 631                 if (hashmap_get(m->sessions, id)) {
 632                         log_warning("Existing logind session ID %s used by new audit session, ignoring", id);
 633                         audit_id = 0;
 634
 635                         free(id);
 636                         id = NULL;
 637                 }
 638         }
 639
 640         if (!id) {
 641                 do {
 642                         free(id);
 643                         id = NULL;
 644
 645                         if (asprintf(&id, "c%lu", ++m->session_counter) < 0)
 646                                 return -ENOMEM;
 647
 648                 } while (hashmap_get(m->sessions, id));
 649         }
 650
 651         r = manager_add_user_by_uid(m, uid, &user);
 652         if (r < 0)
 653                 goto fail;
 654
 655         r = manager_add_session(m, id, &session);
 656         if (r < 0)
 657                 goto fail;
 658
 659         session_set_user(session, user);
 660
 661         session->leader = leader;
 662         session->audit_id = audit_id;
 663         session->type = t;
 664         session->class = c;
 665         session->remote = remote;
 666         session->vtnr = vtnr;
 667
 668         if (!isempty(tty)) {
 669                 session->tty = strdup(tty);
 670                 if (!session->tty) {
 671                         r = -ENOMEM;
 672                         goto fail;
 673                 }
 674         }
 675
 676         if (!isempty(display)) {
 677                 session->display = strdup(display);
 678                 if (!session->display) {
 679                         r = -ENOMEM;
 680                         goto fail;
 681                 }
 682         }
 683
 684         if (!isempty(remote_user)) {
 685                 session->remote_user = strdup(remote_user);
 686                 if (!session->remote_user) {
 687                         r = -ENOMEM;
 688                         goto fail;
 689                 }
 690         }
 691
 692         if (!isempty(remote_host)) {
 693                 session->remote_host = strdup(remote_host);
 694                 if (!session->remote_host) {
 695                         r = -ENOMEM;
 696                         goto fail;
 697                 }
 698         }
 699
 700         if (!isempty(service)) {
 701                 session->service = strdup(service);
 702                 if (!session->service) {
 703                         r = -ENOMEM;
 704                         goto fail;
 705                 }
 706         }
 707
 708         if (!isempty(desktop)) {
 709                 session->desktop = strdup(desktop);
 710                 if (!session->desktop) {
 711                         r = -ENOMEM;
 712                         goto fail;
 713                 }
 714         }
 715
 716         if (seat) {
 717                 r = seat_attach_session(seat, session);
 718                 if (r < 0)
 719                         goto fail;
 720         }
 721
 722         r = session_start(session);
 723         if (r < 0)
 724                 goto fail;
 725
 726         session->create_message = sd_bus_message_ref(message);
 727
 728         /* Now, let's wait until the slice unit and stuff got
 729          * created. We send the reply back from
 730          * session_send_create_reply().*/
 731
 732         return 1;
 733
 734 fail:
 735         if (session)
 736                 session_add_to_gc_queue(session);
 737
 738         if (user)
 739                 user_add_to_gc_queue(user);
 740
 741         return r;
 742 }
 743
 744 static int method_release_session(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) {
 745         Manager *m = userdata;
 746         Session *session;
 747         const char *name;
 748         int r;
 749
 750         assert(bus);
 751         assert(message);
 752         assert(m);
 753
 754         r = sd_bus_message_read(message, "s", &name);
 755         if (r < 0)
 756                 return r;
 757
 758         session = hashmap_get(m->sessions, name);
 759         if (!session)
 760                 return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_SESSION, "No session '%s' known", name);
 761
 762         session_release(session);
 763
 764         return sd_bus_reply_method_return(message, NULL);
 765 }
 766
 767 static int method_activate_session(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) {
 768         Manager *m = userdata;
 769         Session *session;
 770         const char *name;
 771         int r;
 772
 773         assert(bus);
 774         assert(message);
 775         assert(m);
 776
 777         r = sd_bus_message_read(message, "s", &name);
 778         if (r < 0)
 779                 return r;
 780
 781         session = hashmap_get(m->sessions, name);
 782         if (!session)
 783                 return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_SESSION, "No session '%s' known", name);
 784
 785         r = session_activate(session);
 786         if (r < 0)
 787                 return r;
 788
 789         return sd_bus_reply_method_return(message, NULL);
 790 }
 791
 792 static int method_activate_session_on_seat(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) {
 793         const char *session_name, *seat_name;
 794         Manager *m = userdata;
 795         Session *session;
 796         Seat *seat;
 797         int r;
 798
 799         assert(bus);
 800         assert(message);
 801         assert(m);
 802
 803         /* Same as ActivateSession() but refuses to work if
 804          * the seat doesn't match */
 805
 806         r = sd_bus_message_read(message, "ss", &session_name, &seat_name);
 807         if (r < 0)
 808                 return r;
 809
 810         session = hashmap_get(m->sessions, session_name);
 811         if (!session)
 812                 return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_SESSION, "No session '%s' known", session_name);
 813
 814         seat = hashmap_get(m->seats, seat_name);
 815         if (!seat)
 816                 return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_SEAT, "No seat '%s' known", seat_name);
 817
 818         if (session->seat != seat)
 819                 return sd_bus_error_setf(error, BUS_ERROR_SESSION_NOT_ON_SEAT, "Session %s not on seat %s", session_name, seat_name);
 820
 821         r = session_activate(session);
 822         if (r < 0)
 823                 return r;
 824
 825         return sd_bus_reply_method_return(message, NULL);
 826 }
 827
 828 static int method_lock_session(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) {
 829         Manager *m = userdata;
 830         Session *session;
 831         const char *name;
 832         int r;
 833
 834         assert(bus);
 835         assert(message);
 836         assert(m);
 837
 838         r = sd_bus_message_read(message, "s", &name);
 839         if (r < 0)
 840                 return r;
 841
 842         session = hashmap_get(m->sessions, name);
 843         if (!session)
 844                 return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_SESSION, "No session '%s' known", name);
 845
 846         r = session_send_lock(session, streq(sd_bus_message_get_member(message), "LockSession"));
 847         if (r < 0)
 848                 return r;
 849
 850         return sd_bus_reply_method_return(message, NULL);
 851 }
 852
 853 static int method_lock_sessions(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) {
 854         Manager *m = userdata;
 855         int r;
 856
 857         assert(bus);
 858         assert(message);
 859         assert(m);
 860
 861         r = session_send_lock_all(m, streq(sd_bus_message_get_member(message), "LockSessions"));
 862         if (r < 0)
 863                 return r;
 864
 865         return sd_bus_reply_method_return(message, NULL);
 866 }
 867
 868 static int method_kill_session(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) {
 869         const char *name, *swho;
 870         Manager *m = userdata;
 871         Session *session;
 872         int32_t signo;
 873         KillWho who;
 874         int r;
 875
 876         assert(bus);
 877         assert(message);
 878         assert(m);
 879
 880         r = sd_bus_message_read(message, "ssi", &name, &swho, &signo);
 881         if (r < 0)
 882                 return r;
 883
 884         if (isempty(swho))
 885                 who = KILL_ALL;
 886         else {
 887                 who = kill_who_from_string(swho);
 888                 if (who < 0)
 889                         return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Invalid kill parameter '%s'", swho);
 890         }
 891
 892         if (signo <= 0 || signo >= _NSIG)
 893                 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Invalid signal %i", signo);
 894
 895         session = hashmap_get(m->sessions, name);
 896         if (!session)
 897                 return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_SESSION, "No session '%s' known", name);
 898
 899         r = session_kill(session, who, signo);
 900         if (r < 0)
 901                 return r;
 902
 903         return sd_bus_reply_method_return(message, NULL);
 904 }
 905
 906 static int method_kill_user(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) {
 907         Manager *m = userdata;
 908         uint32_t uid;
 909         int32_t signo;
 910         User *user;
 911         int r;
 912
 913         assert(bus);
 914         assert(message);
 915         assert(m);
 916
 917         r = sd_bus_message_read(message, "ui", &uid, &signo);
 918         if (r < 0)
 919                 return r;
 920
 921         if (signo <= 0 || signo >= _NSIG)
 922                 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Invalid signal %i", signo);
 923
 924         user = hashmap_get(m->users, ULONG_TO_PTR((unsigned long) uid));
 925         if (!user)
 926                 return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_USER, "No user "UID_FMT" known or logged in", uid);
 927
 928         r = user_kill(user, signo);
 929         if (r < 0)
 930                 return r;
 931
 932         return sd_bus_reply_method_return(message, NULL);
 933 }
 934
 935 static int method_terminate_session(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) {
 936         Manager *m = userdata;
 937         const char *name;
 938         Session *session;
 939         int r;
 940
 941         assert(bus);
 942         assert(message);
 943         assert(m);
 944
 945         r = sd_bus_message_read(message, "s", &name);
 946         if (r < 0)
 947                 return r;
 948
 949         session = hashmap_get(m->sessions, name);
 950         if (!session)
 951                 return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_SESSION, "No session '%s' known", name);
 952
 953         r = session_stop(session, true);
 954         if (r < 0)
 955                 return r;
 956
 957         return sd_bus_reply_method_return(message, NULL);
 958 }
 959
 960 static int method_terminate_user(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) {
 961         Manager *m = userdata;
 962         uint32_t uid;
 963         User *user;
 964         int r;
 965
 966         assert(bus);
 967         assert(message);
 968         assert(m);
 969
 970         r = sd_bus_message_read(message, "u", &uid);
 971         if (r < 0)
 972                 return r;
 973
 974         user = hashmap_get(m->users, ULONG_TO_PTR((unsigned long) uid));
 975         if (!user)
 976                 return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_USER, "No user "UID_FMT" known or logged in", uid);
 977
 978         r = user_stop(user, true);
 979         if (r < 0)
 980                 return r;
 981
 982         return sd_bus_reply_method_return(message, NULL);
 983 }
 984
 985 static int method_terminate_seat(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) {
 986         Manager *m = userdata;
 987         const char *name;
 988         Seat *seat;
 989         int r;
 990
 991         assert(bus);
 992         assert(message);
 993         assert(m);
 994
 995         r = sd_bus_message_read(message, "s", &name);
 996         if (r < 0)
 997                 return r;
 998
 999         seat = hashmap_get(m->seats, name);
1000         if (!seat)
1001                 return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_SEAT, "No seat '%s' known", name);
1002
1003         r = seat_stop_sessions(seat, true);
1004         if (r < 0)
1005                 return r;
1006
1007         return sd_bus_reply_method_return(message, NULL);
1008 }
1009
1010 static int method_set_user_linger(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) {
1011         _cleanup_free_ char *cc = NULL;
1012         Manager *m = userdata;
1013         int b, r;
1014         struct passwd *pw;
1015         const char *path;
1016         uint32_t uid;
1017         int interactive;
1018
1019         assert(bus);
1020         assert(message);
1021         assert(m);
1022
1023         r = sd_bus_message_read(message, "ubb", &uid, &b, &interactive);
1024         if (r < 0)
1025                 return r;
1026
1027         errno = 0;
1028         pw = getpwuid(uid);
1029         if (!pw)
1030                 return errno ? -errno : -ENOENT;
1031
1032         r = bus_verify_polkit_async(
1033                         message,
1034                         CAP_SYS_ADMIN,
1035                         "org.freedesktop.login1.set-user-linger",
1036                         interactive,
1037                         &m->polkit_registry,
1038                         error);
1039         if (r < 0)
1040                 return r;
1041         if (r == 0)
1042                 return 1; /* No authorization for now, but the async polkit stuff will call us again when it has it */
1043
1044         mkdir_p_label("/var/lib/systemd", 0755);
1045
1046         r = mkdir_safe_label("/var/lib/systemd/linger", 0755, 0, 0);
1047         if (r < 0)
1048                 return r;
1049
1050         cc = cescape(pw->pw_name);
1051         if (!cc)
1052                 return -ENOMEM;
1053
1054         path = strappenda("/var/lib/systemd/linger/", cc);
1055         if (b) {
1056                 User *u;
1057
1058                 r = touch(path);
1059                 if (r < 0)
1060                         return r;
1061
1062                 if (manager_add_user_by_uid(m, uid, &u) >= 0)
1063                         user_start(u);
1064
1065         } else {
1066                 User *u;
1067
1068                 r = unlink(path);
1069                 if (r < 0 && errno != ENOENT)
1070                         return -errno;
1071
1072                 u = hashmap_get(m->users, ULONG_TO_PTR((unsigned long) uid));
1073                 if (u)
1074                         user_add_to_gc_queue(u);
1075         }
1076
1077         return sd_bus_reply_method_return(message, NULL);
1078 }
1079
1080 static int trigger_device(Manager *m, struct udev_device *d) {
1081         _cleanup_udev_enumerate_unref_ struct udev_enumerate *e = NULL;
1082         struct udev_list_entry *first, *item;
1083         int r;
1084
1085         assert(m);
1086
1087         e = udev_enumerate_new(m->udev);
1088         if (!e)
1089                 return -ENOMEM;
1090
1091         if (d) {
1092                 r = udev_enumerate_add_match_parent(e, d);
1093                 if (r < 0)
1094                         return r;
1095         }
1096
1097         r = udev_enumerate_scan_devices(e);
1098         if (r < 0)
1099                 return r;
1100
1101         first = udev_enumerate_get_list_entry(e);
1102         udev_list_entry_foreach(item, first) {
1103                 _cleanup_free_ char *t = NULL;
1104                 const char *p;
1105
1106                 p = udev_list_entry_get_name(item);
1107
1108                 t = strappend(p, "/uevent");
1109                 if (!t)
1110                         return -ENOMEM;
1111
1112                 write_string_file(t, "change");
1113         }
1114
1115         return 0;
1116 }
1117
1118 static int attach_device(Manager *m, const char *seat, const char *sysfs) {
1119         _cleanup_udev_device_unref_ struct udev_device *d = NULL;
1120         _cleanup_free_ char *rule = NULL, *file = NULL;
1121         const char *id_for_seat;
1122         int r;
1123
1124         assert(m);
1125         assert(seat);
1126         assert(sysfs);
1127
1128         d = udev_device_new_from_syspath(m->udev, sysfs);
1129         if (!d)
1130                 return -ENODEV;
1131
1132         if (!udev_device_has_tag(d, "seat"))
1133                 return -ENODEV;
1134
1135         id_for_seat = udev_device_get_property_value(d, "ID_FOR_SEAT");
1136         if (!id_for_seat)
1137                 return -ENODEV;
1138
1139         if (asprintf(&file, "/etc/udev/rules.d/72-seat-%s.rules", id_for_seat) < 0)
1140                 return -ENOMEM;
1141
1142         if (asprintf(&rule, "TAG==\"seat\", ENV{ID_FOR_SEAT}==\"%s\", ENV{ID_SEAT}=\"%s\"", id_for_seat, seat) < 0)
1143                 return -ENOMEM;
1144
1145         mkdir_p_label("/etc/udev/rules.d", 0755);
1146         label_init("/etc");
1147         r = write_string_file_atomic_label(file, rule);
1148         if (r < 0)
1149                 return r;
1150
1151         return trigger_device(m, d);
1152 }
1153
1154 static int flush_devices(Manager *m) {
1155         _cleanup_closedir_ DIR *d;
1156
1157         assert(m);
1158
1159         d = opendir("/etc/udev/rules.d");
1160         if (!d) {
1161                 if (errno != ENOENT)
1162                         log_warning("Failed to open /etc/udev/rules.d: %m");
1163         } else {
1164                 struct dirent *de;
1165
1166                 while ((de = readdir(d))) {
1167
1168                         if (!dirent_is_file(de))
1169                                 continue;
1170
1171                         if (!startswith(de->d_name, "72-seat-"))
1172                                 continue;
1173
1174                         if (!endswith(de->d_name, ".rules"))
1175                                 continue;
1176
1177                         if (unlinkat(dirfd(d), de->d_name, 0) < 0)
1178                                 log_warning("Failed to unlink %s: %m", de->d_name);
1179                 }
1180         }
1181
1182         return trigger_device(m, NULL);
1183 }
1184
1185 static int method_attach_device(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) {
1186         const char *sysfs, *seat;
1187         Manager *m = userdata;
1188         int interactive, r;
1189
1190         assert(bus);
1191         assert(message);
1192         assert(m);
1193
1194         r = sd_bus_message_read(message, "ssb", &seat, &sysfs, &interactive);
1195         if (r < 0)
1196                 return r;
1197
1198         if (!path_startswith(sysfs, "/sys"))
1199                 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Path %s is not in /sys", sysfs);
1200
1201         if (!seat_name_is_valid(seat))
1202                 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Seat %s is not valid", seat);
1203
1204         r = bus_verify_polkit_async(
1205                         message,
1206                         CAP_SYS_ADMIN,
1207                         "org.freedesktop.login1.attach-device",
1208                         interactive,
1209                         &m->polkit_registry,
1210                         error);
1211         if (r < 0)
1212                 return r;
1213         if (r == 0)
1214                 return 1; /* No authorization for now, but the async polkit stuff will call us again when it has it */
1215
1216         r = attach_device(m, seat, sysfs);
1217         if (r < 0)
1218                 return r;
1219
1220         return sd_bus_reply_method_return(message, NULL);
1221 }
1222
1223 static int method_flush_devices(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) {
1224         Manager *m = userdata;
1225         int interactive, r;
1226
1227         assert(bus);
1228         assert(message);
1229         assert(m);
1230
1231         r = sd_bus_message_read(message, "b", &interactive);
1232         if (r < 0)
1233                 return r;
1234
1235         r = bus_verify_polkit_async(
1236                         message,
1237                         CAP_SYS_ADMIN,
1238                         "org.freedesktop.login1.flush-devices",
1239                         interactive,
1240                         &m->polkit_registry,
1241                         error);
1242         if (r < 0)
1243                 return r;
1244         if (r == 0)
1245                 return 1; /* No authorization for now, but the async polkit stuff will call us again when it has it */
1246
1247         r = flush_devices(m);
1248         if (r < 0)
1249                 return r;
1250
1251         return sd_bus_reply_method_return(message, NULL);
1252 }
1253
1254 static int have_multiple_sessions(
1255                 Manager *m,
1256                 uid_t uid) {
1257
1258         Session *session;
1259         Iterator i;
1260
1261         assert(m);
1262
1263         /* Check for other users' sessions. Greeter sessions do not
1264          * count, and non-login sessions do not count either. */
1265         HASHMAP_FOREACH(session, m->sessions, i)
1266                 if (session->class == SESSION_USER &&
1267                     session->user->uid != uid)
1268                         return true;
1269
1270         return false;
1271 }
1272
1273 static int bus_manager_log_shutdown(
1274                 Manager *m,
1275                 InhibitWhat w,
1276                 const char *unit_name) {
1277
1278         const char *p, *q;
1279
1280         assert(m);
1281         assert(unit_name);
1282
1283         if (w != INHIBIT_SHUTDOWN)
1284                 return 0;
1285
1286         if (streq(unit_name, SPECIAL_POWEROFF_TARGET)) {
1287                 p = "MESSAGE=System is powering down.";
1288                 q = "SHUTDOWN=power-off";
1289         } else if (streq(unit_name, SPECIAL_HALT_TARGET)) {
1290                 p = "MESSAGE=System is halting.";
1291                 q = "SHUTDOWN=halt";
1292         } else if (streq(unit_name, SPECIAL_REBOOT_TARGET)) {
1293                 p = "MESSAGE=System is rebooting.";
1294                 q = "SHUTDOWN=reboot";
1295         } else if (streq(unit_name, SPECIAL_KEXEC_TARGET)) {
1296                 p = "MESSAGE=System is rebooting with kexec.";
1297                 q = "SHUTDOWN=kexec";
1298         } else {
1299                 p = "MESSAGE=System is shutting down.";
1300                 q = NULL;
1301         }
1302
1303         return log_struct(LOG_NOTICE, MESSAGE_ID(SD_MESSAGE_SHUTDOWN),
1304                           p,
1305                           q, NULL);
1306 }
1307
1308 static int lid_switch_ignore_handler(sd_event_source *e, uint64_t usec, void *userdata) {
1309         Manager *m = userdata;
1310
1311         assert(e);
1312         assert(m);
1313
1314         m->lid_switch_ignore_event_source = sd_event_source_unref(m->lid_switch_ignore_event_source);
1315         return 0;
1316 }
1317
1318 int manager_set_lid_switch_ignore(Manager *m, usec_t until) {
1319         int r;
1320
1321         assert(m);
1322
1323         if (until <= now(CLOCK_MONOTONIC))
1324                 return 0;
1325
1326         /* We want to ignore the lid switch for a while after each
1327          * suspend, and after boot-up. Hence let's install a timer for
1328          * this. As long as the event source exists we ignore the lid
1329          * switch. */
1330
1331         if (m->lid_switch_ignore_event_source) {
1332                 usec_t u;
1333
1334                 r = sd_event_source_get_time(m->lid_switch_ignore_event_source, &u);
1335                 if (r < 0)
1336                         return r;
1337
1338                 if (until <= u)
1339                         return 0;
1340
1341                 r = sd_event_source_set_time(m->lid_switch_ignore_event_source, until);
1342         } else
1343                 r = sd_event_add_time(
1344                                 m->event,
1345                                 &m->lid_switch_ignore_event_source,
1346                                 CLOCK_MONOTONIC,
1347                                 until, 0,
1348                                 lid_switch_ignore_handler, m);
1349
1350         return r;
1351 }
1352
1353 static int execute_shutdown_or_sleep(
1354                 Manager *m,
1355                 InhibitWhat w,
1356                 const char *unit_name,
1357                 sd_bus_error *error) {
1358
1359         _cleanup_bus_message_unref_ sd_bus_message *reply = NULL;
1360         const char *p;
1361         char *c;
1362         int r;
1363
1364         assert(m);
1365         assert(w >= 0);
1366         assert(w < _INHIBIT_WHAT_MAX);
1367         assert(unit_name);
1368
1369         bus_manager_log_shutdown(m, w, unit_name);
1370
1371         r = sd_bus_call_method(
1372                         m->bus,
1373                         "org.freedesktop.systemd1",
1374                         "/org/freedesktop/systemd1",
1375                         "org.freedesktop.systemd1.Manager",
1376                         "StartUnit",
1377                         error,
1378                         &reply,
1379                         "ss", unit_name, "replace-irreversibly");
1380         if (r < 0)
1381                 return r;
1382
1383         r = sd_bus_message_read(reply, "o", &p);
1384         if (r < 0)
1385                 return r;
1386
1387         c = strdup(p);
1388         if (!c)
1389                 return -ENOMEM;
1390
1391         m->action_unit = unit_name;
1392         free(m->action_job);
1393         m->action_job = c;
1394         m->action_what = w;
1395
1396         /* Make sure the lid switch is ignored for a while */
1397         manager_set_lid_switch_ignore(m, now(CLOCK_MONOTONIC) + IGNORE_LID_SWITCH_SUSPEND_USEC);
1398
1399         return 0;
1400 }
1401
1402 static int delay_shutdown_or_sleep(
1403                 Manager *m,
1404                 InhibitWhat w,
1405                 const char *unit_name) {
1406
1407         assert(m);
1408         assert(w >= 0);
1409         assert(w < _INHIBIT_WHAT_MAX);
1410         assert(unit_name);
1411
1412         m->action_timestamp = now(CLOCK_MONOTONIC);
1413         m->action_unit = unit_name;
1414         m->action_what = w;
1415
1416         return 0;
1417 }
1418
1419 static int send_prepare_for(Manager *m, InhibitWhat w, bool _active) {
1420
1421         static const char * const signal_name[_INHIBIT_WHAT_MAX] = {
1422                 [INHIBIT_SHUTDOWN] = "PrepareForShutdown",
1423                 [INHIBIT_SLEEP] = "PrepareForSleep"
1424         };
1425
1426         int active = _active;
1427
1428         assert(m);
1429         assert(w >= 0);
1430         assert(w < _INHIBIT_WHAT_MAX);
1431         assert(signal_name[w]);
1432
1433         return sd_bus_emit_signal(m->bus,
1434                                   "/org/freedesktop/login1",
1435                                   "org.freedesktop.login1.Manager",
1436                                   signal_name[w],
1437                                   "b",
1438                                   active);
1439 }
1440
1441 int bus_manager_shutdown_or_sleep_now_or_later(
1442                 Manager *m,
1443                 const char *unit_name,
1444                 InhibitWhat w,
1445                 sd_bus_error *error) {
1446
1447         bool delayed;
1448         int r;
1449
1450         assert(m);
1451         assert(unit_name);
1452         assert(w >= 0);
1453         assert(w <= _INHIBIT_WHAT_MAX);
1454         assert(!m->action_job);
1455
1456         /* Tell everybody to prepare for shutdown/sleep */
1457         send_prepare_for(m, w, true);
1458
1459         delayed =
1460                 m->inhibit_delay_max > 0 &&
1461                 manager_is_inhibited(m, w, INHIBIT_DELAY, NULL, false, false, 0, NULL);
1462
1463         if (delayed)
1464                 /* Shutdown is delayed, keep in mind what we
1465                  * want to do, and start a timeout */
1466                 r = delay_shutdown_or_sleep(m, w, unit_name);
1467         else
1468                 /* Shutdown is not delayed, execute it
1469                  * immediately */
1470                 r = execute_shutdown_or_sleep(m, w, unit_name, error);
1471
1472         return r;
1473 }
1474
1475 static int method_do_shutdown_or_sleep(
1476                 Manager *m,
1477                 sd_bus_message *message,
1478                 const char *unit_name,
1479                 InhibitWhat w,
1480                 const char *action,
1481                 const char *action_multiple_sessions,
1482                 const char *action_ignore_inhibit,
1483                 const char *sleep_verb,
1484                 sd_bus_message_handler_t method,
1485                 sd_bus_error *error) {
1486
1487         _cleanup_bus_creds_unref_ sd_bus_creds *creds = NULL;
1488         bool multiple_sessions, blocked;
1489         int interactive, r;
1490         uid_t uid;
1491
1492         assert(m);
1493         assert(message);
1494         assert(unit_name);
1495         assert(w >= 0);
1496         assert(w <= _INHIBIT_WHAT_MAX);
1497         assert(action);
1498         assert(action_multiple_sessions);
1499         assert(action_ignore_inhibit);
1500         assert(method);
1501
1502         r = sd_bus_message_read(message, "b", &interactive);
1503         if (r < 0)
1504                 return r;
1505
1506         /* Don't allow multiple jobs being executed at the same time */
1507         if (m->action_what)
1508                 return sd_bus_error_setf(error, BUS_ERROR_OPERATION_IN_PROGRESS, "There's already a shutdown or sleep operation in progress");
1509
1510         if (sleep_verb) {
1511                 r = can_sleep(sleep_verb);
1512                 if (r < 0)
1513                         return r;
1514
1515                 if (r == 0)
1516                         return sd_bus_error_setf(error, BUS_ERROR_SLEEP_VERB_NOT_SUPPORTED, "Sleep verb not supported");
1517         }
1518
1519         r = sd_bus_query_sender_creds(message, SD_BUS_CREDS_UID, &creds);
1520         if (r < 0)
1521                 return r;
1522
1523         r = sd_bus_creds_get_uid(creds, &uid);
1524         if (r < 0)
1525                 return r;
1526
1527         r = have_multiple_sessions(m, uid);
1528         if (r < 0)
1529                 return r;
1530
1531         multiple_sessions = r > 0;
1532         blocked = manager_is_inhibited(m, w, INHIBIT_BLOCK, NULL, false, true, uid, NULL);
1533
1534         if (multiple_sessions) {
1535                 r = bus_verify_polkit_async(message, CAP_SYS_BOOT, action_multiple_sessions, interactive, &m->polkit_registry, error);
1536                 if (r < 0)
1537                         return r;
1538                 if (r == 0)
1539                         return 1; /* No authorization for now, but the async polkit stuff will call us again when it has it */
1540         }
1541
1542         if (blocked) {
1543                 r = bus_verify_polkit_async(message, CAP_SYS_BOOT, action_ignore_inhibit, interactive, &m->polkit_registry, error);
1544                 if (r < 0)
1545                         return r;
1546                 if (r == 0)
1547                         return 1; /* No authorization for now, but the async polkit stuff will call us again when it has it */
1548         }
1549
1550         if (!multiple_sessions && !blocked) {
1551                 r = bus_verify_polkit_async(message, CAP_SYS_BOOT, action, interactive, &m->polkit_registry, error);
1552                 if (r < 0)
1553                         return r;
1554                 if (r == 0)
1555                         return 1; /* No authorization for now, but the async polkit stuff will call us again when it has it */
1556         }
1557
1558         r = bus_manager_shutdown_or_sleep_now_or_later(m, unit_name, w, error);
1559         if (r < 0)
1560                 return r;
1561
1562         return sd_bus_reply_method_return(message, NULL);
1563 }
1564
1565 static int method_poweroff(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) {
1566         Manager *m = userdata;
1567
1568         return method_do_shutdown_or_sleep(
1569                         m, message,
1570                         SPECIAL_POWEROFF_TARGET,
1571                         INHIBIT_SHUTDOWN,
1572                         "org.freedesktop.login1.power-off",
1573                         "org.freedesktop.login1.power-off-multiple-sessions",
1574                         "org.freedesktop.login1.power-off-ignore-inhibit",
1575                         NULL,
1576                         method_poweroff,
1577                         error);
1578 }
1579
1580 static int method_reboot(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) {
1581         Manager *m = userdata;
1582
1583         return method_do_shutdown_or_sleep(
1584                         m, message,
1585                         SPECIAL_REBOOT_TARGET,
1586                         INHIBIT_SHUTDOWN,
1587                         "org.freedesktop.login1.reboot",
1588                         "org.freedesktop.login1.reboot-multiple-sessions",
1589                         "org.freedesktop.login1.reboot-ignore-inhibit",
1590                         NULL,
1591                         method_reboot,
1592                         error);
1593 }
1594
1595 static int method_suspend(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) {
1596         Manager *m = userdata;
1597
1598         return method_do_shutdown_or_sleep(
1599                         m, message,
1600                         SPECIAL_SUSPEND_TARGET,
1601                         INHIBIT_SLEEP,
1602                         "org.freedesktop.login1.suspend",
1603                         "org.freedesktop.login1.suspend-multiple-sessions",
1604                         "org.freedesktop.login1.suspend-ignore-inhibit",
1605                         "suspend",
1606                         method_suspend,
1607                         error);
1608 }
1609
1610 static int method_hibernate(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) {
1611         Manager *m = userdata;
1612
1613         return method_do_shutdown_or_sleep(
1614                         m, message,
1615                         SPECIAL_HIBERNATE_TARGET,
1616                         INHIBIT_SLEEP,
1617                         "org.freedesktop.login1.hibernate",
1618                         "org.freedesktop.login1.hibernate-multiple-sessions",
1619                         "org.freedesktop.login1.hibernate-ignore-inhibit",
1620                         "hibernate",
1621                         method_hibernate,
1622                         error);
1623 }
1624
1625 static int method_hybrid_sleep(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) {
1626         Manager *m = userdata;
1627
1628         return method_do_shutdown_or_sleep(
1629                         m, message,
1630                         SPECIAL_HYBRID_SLEEP_TARGET,
1631                         INHIBIT_SLEEP,
1632                         "org.freedesktop.login1.hibernate",
1633                         "org.freedesktop.login1.hibernate-multiple-sessions",
1634                         "org.freedesktop.login1.hibernate-ignore-inhibit",
1635                         "hybrid-sleep",
1636                         method_hybrid_sleep,
1637                         error);
1638 }
1639
1640 static int method_can_shutdown_or_sleep(
1641                 Manager *m,
1642                 sd_bus_message *message,
1643                 InhibitWhat w,
1644                 const char *action,
1645                 const char *action_multiple_sessions,
1646                 const char *action_ignore_inhibit,
1647                 const char *sleep_verb,
1648                 sd_bus_error *error) {
1649
1650         _cleanup_bus_creds_unref_ sd_bus_creds *creds = NULL;
1651         bool multiple_sessions, challenge, blocked;
1652         const char *result = NULL;
1653         uid_t uid;
1654         int r;
1655
1656         assert(m);
1657         assert(message);
1658         assert(w >= 0);
1659         assert(w <= _INHIBIT_WHAT_MAX);
1660         assert(action);
1661         assert(action_multiple_sessions);
1662         assert(action_ignore_inhibit);
1663
1664         if (sleep_verb) {
1665                 r = can_sleep(sleep_verb);
1666                 if (r < 0)
1667                         return r;
1668                 if (r == 0)
1669                         return sd_bus_reply_method_return(message, "s", "na");
1670         }
1671
1672         r = sd_bus_query_sender_creds(message, SD_BUS_CREDS_UID, &creds);
1673         if (r < 0)
1674                 return r;
1675
1676         r = sd_bus_creds_get_uid(creds, &uid);
1677         if (r < 0)
1678                 return r;
1679
1680         r = have_multiple_sessions(m, uid);
1681         if (r < 0)
1682                 return r;
1683
1684         multiple_sessions = r > 0;
1685         blocked = manager_is_inhibited(m, w, INHIBIT_BLOCK, NULL, false, true, uid, NULL);
1686
1687         if (multiple_sessions) {
1688                 r = bus_verify_polkit(message, CAP_SYS_BOOT, action_multiple_sessions, false, &challenge, error);
1689                 if (r < 0)
1690                         return r;
1691
1692                 if (r > 0)
1693                         result = "yes";
1694                 else if (challenge)
1695                         result = "challenge";
1696                 else
1697                         result = "no";
1698         }
1699
1700         if (blocked) {
1701                 r = bus_verify_polkit(message, CAP_SYS_BOOT, action_ignore_inhibit, false, &challenge, error);
1702                 if (r < 0)
1703                         return r;
1704
1705                 if (r > 0 && !result)
1706                         result = "yes";
1707                 else if (challenge && (!result || streq(result, "yes")))
1708                         result = "challenge";
1709                 else
1710                         result = "no";
1711         }
1712
1713         if (!multiple_sessions && !blocked) {
1714                 /* If neither inhibit nor multiple sessions
1715                  * apply then just check the normal policy */
1716
1717                 r = bus_verify_polkit(message, CAP_SYS_BOOT, action, false, &challenge, error);
1718                 if (r < 0)
1719                         return r;
1720
1721                 if (r > 0)
1722                         result = "yes";
1723                 else if (challenge)
1724                         result = "challenge";
1725                 else
1726                         result = "no";
1727         }
1728
1729         return sd_bus_reply_method_return(message, "s", result);
1730 }
1731
1732 static int method_can_poweroff(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) {
1733         Manager *m = userdata;
1734
1735         return method_can_shutdown_or_sleep(
1736                         m, message,
1737                         INHIBIT_SHUTDOWN,
1738                         "org.freedesktop.login1.power-off",
1739                         "org.freedesktop.login1.power-off-multiple-sessions",
1740                         "org.freedesktop.login1.power-off-ignore-inhibit",
1741                         NULL,
1742                         error);
1743 }
1744
1745 static int method_can_reboot(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) {
1746         Manager *m = userdata;
1747
1748         return method_can_shutdown_or_sleep(
1749                         m, message,
1750                         INHIBIT_SHUTDOWN,
1751                         "org.freedesktop.login1.reboot",
1752                         "org.freedesktop.login1.reboot-multiple-sessions",
1753                         "org.freedesktop.login1.reboot-ignore-inhibit",
1754                         NULL,
1755                         error);
1756 }
1757
1758 static int method_can_suspend(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) {
1759         Manager *m = userdata;
1760
1761         return method_can_shutdown_or_sleep(
1762                         m, message,
1763                         INHIBIT_SLEEP,
1764                         "org.freedesktop.login1.suspend",
1765                         "org.freedesktop.login1.suspend-multiple-sessions",
1766                         "org.freedesktop.login1.suspend-ignore-inhibit",
1767                         "suspend",
1768                         error);
1769 }
1770
1771 static int method_can_hibernate(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) {
1772         Manager *m = userdata;
1773
1774         return method_can_shutdown_or_sleep(
1775                         m, message,
1776                         INHIBIT_SLEEP,
1777                         "org.freedesktop.login1.hibernate",
1778                         "org.freedesktop.login1.hibernate-multiple-sessions",
1779                         "org.freedesktop.login1.hibernate-ignore-inhibit",
1780                         "hibernate",
1781                         error);
1782 }
1783
1784 static int method_can_hybrid_sleep(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) {
1785         Manager *m = userdata;
1786
1787         return method_can_shutdown_or_sleep(
1788                         m, message,
1789                         INHIBIT_SLEEP,
1790                         "org.freedesktop.login1.hibernate",
1791                         "org.freedesktop.login1.hibernate-multiple-sessions",
1792                         "org.freedesktop.login1.hibernate-ignore-inhibit",
1793                         "hybrid-sleep",
1794                         error);
1795 }
1796
1797 static int method_inhibit(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) {
1798         _cleanup_bus_creds_unref_ sd_bus_creds *creds = NULL;
1799         const char *who, *why, *what, *mode;
1800         _cleanup_free_ char *id = NULL;
1801         _cleanup_close_ int fifo_fd = -1;
1802         Manager *m = userdata;
1803         Inhibitor *i = NULL;
1804         InhibitMode mm;
1805         InhibitWhat w;
1806         pid_t pid;
1807         uid_t uid;
1808         int r;
1809
1810         assert(bus);
1811         assert(message);
1812         assert(m);
1813
1814         r = sd_bus_message_read(message, "ssss", &what, &who, &why, &mode);
1815         if (r < 0)
1816                 return r;
1817
1818         w = inhibit_what_from_string(what);
1819         if (w <= 0)
1820                 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Invalid what specification %s", what);
1821
1822         mm = inhibit_mode_from_string(mode);
1823         if (mm < 0)
1824                 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Invalid mode specification %s", mode);
1825
1826         /* Delay is only supported for shutdown/sleep */
1827         if (mm == INHIBIT_DELAY && (w & ~(INHIBIT_SHUTDOWN|INHIBIT_SLEEP)))
1828                 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Delay inhibitors only supported for shutdown and sleep");
1829
1830         /* Don't allow taking delay locks while we are already
1831          * executing the operation. We shouldn't create the impression
1832          * that the lock was successful if the machine is about to go
1833          * down/suspend any moment. */
1834         if (m->action_what & w)
1835                 return sd_bus_error_setf(error, BUS_ERROR_OPERATION_IN_PROGRESS, "The operation inhibition has been requested for is already running");
1836
1837         r = bus_verify_polkit_async(message, CAP_SYS_BOOT,
1838                                     w == INHIBIT_SHUTDOWN             ? (mm == INHIBIT_BLOCK ? "org.freedesktop.login1.inhibit-block-shutdown" : "org.freedesktop.login1.inhibit-delay-shutdown") :
1839                                     w == INHIBIT_SLEEP                ? (mm == INHIBIT_BLOCK ? "org.freedesktop.login1.inhibit-block-sleep"    : "org.freedesktop.login1.inhibit-delay-sleep") :
1840                                     w == INHIBIT_IDLE                 ? "org.freedesktop.login1.inhibit-block-idle" :
1841                                     w == INHIBIT_HANDLE_POWER_KEY     ? "org.freedesktop.login1.inhibit-handle-power-key" :
1842                                     w == INHIBIT_HANDLE_SUSPEND_KEY   ? "org.freedesktop.login1.inhibit-handle-suspend-key" :
1843                                     w == INHIBIT_HANDLE_HIBERNATE_KEY ? "org.freedesktop.login1.inhibit-handle-hibernate-key" :
1844                                                                         "org.freedesktop.login1.inhibit-handle-lid-switch",
1845                                     false, &m->polkit_registry, error);
1846         if (r < 0)
1847                 return r;
1848         if (r == 0)
1849                 return 1; /* No authorization for now, but the async polkit stuff will call us again when it has it */
1850
1851         r = sd_bus_query_sender_creds(message, SD_BUS_CREDS_UID|SD_BUS_CREDS_PID, &creds);
1852         if (r < 0)
1853                 return r;
1854
1855         r = sd_bus_creds_get_uid(creds, &uid);
1856         if (r < 0)
1857                 return r;
1858
1859         r = sd_bus_creds_get_pid(creds, &pid);
1860         if (r < 0)
1861                 return r;
1862
1863         do {
1864                 free(id);
1865                 id = NULL;
1866
1867                 if (asprintf(&id, "%lu", ++m->inhibit_counter) < 0)
1868                         return -ENOMEM;
1869
1870         } while (hashmap_get(m->inhibitors, id));
1871
1872         r = manager_add_inhibitor(m, id, &i);
1873         if (r < 0)
1874                 return r;
1875
1876         i->what = w;
1877         i->mode = mm;
1878         i->pid = pid;
1879         i->uid = uid;
1880         i->why = strdup(why);
1881         i->who = strdup(who);
1882
1883         if (!i->why || !i->who) {
1884                 r = -ENOMEM;
1885                 goto fail;
1886         }
1887
1888         fifo_fd = inhibitor_create_fifo(i);
1889         if (fifo_fd < 0) {
1890                 r = fifo_fd;
1891                 goto fail;
1892         }
1893
1894         inhibitor_start(i);
1895
1896         return sd_bus_reply_method_return(message, "h", fifo_fd);
1897
1898 fail:
1899         if (i)
1900                 inhibitor_free(i);
1901
1902         return r;
1903 }
1904
1905 const sd_bus_vtable manager_vtable[] = {
1906         SD_BUS_VTABLE_START(0),
1907
1908         SD_BUS_PROPERTY("NAutoVTs", "u", NULL, offsetof(Manager, n_autovts), SD_BUS_VTABLE_PROPERTY_CONST),
1909         SD_BUS_PROPERTY("KillOnlyUsers", "as", NULL, offsetof(Manager, kill_only_users), SD_BUS_VTABLE_PROPERTY_CONST),
1910         SD_BUS_PROPERTY("KillExcludeUsers", "as", NULL, offsetof(Manager, kill_exclude_users), SD_BUS_VTABLE_PROPERTY_CONST),
1911         SD_BUS_PROPERTY("KillUserProcesses", "b", NULL, offsetof(Manager, kill_user_processes), SD_BUS_VTABLE_PROPERTY_CONST),
1912         SD_BUS_PROPERTY("IdleHint", "b", property_get_idle_hint, 0, SD_BUS_VTABLE_PROPERTY_EMITS_CHANGE),
1913         SD_BUS_PROPERTY("IdleSinceHint", "t", property_get_idle_since_hint, 0, SD_BUS_VTABLE_PROPERTY_EMITS_CHANGE),
1914         SD_BUS_PROPERTY("IdleSinceHintMonotonic", "t", property_get_idle_since_hint, 0, SD_BUS_VTABLE_PROPERTY_EMITS_CHANGE),
1915         SD_BUS_PROPERTY("BlockInhibited", "s", property_get_inhibited, 0, SD_BUS_VTABLE_PROPERTY_EMITS_CHANGE),
1916         SD_BUS_PROPERTY("DelayInhibited", "s", property_get_inhibited, 0, SD_BUS_VTABLE_PROPERTY_EMITS_CHANGE),
1917         SD_BUS_PROPERTY("InhibitDelayMaxUSec", "t", NULL, offsetof(Manager, inhibit_delay_max), SD_BUS_VTABLE_PROPERTY_CONST),
1918         SD_BUS_PROPERTY("HandlePowerKey", "s", property_get_handle_action, offsetof(Manager, handle_power_key), SD_BUS_VTABLE_PROPERTY_CONST),
1919         SD_BUS_PROPERTY("HandleSuspendKey", "s", property_get_handle_action, offsetof(Manager, handle_suspend_key), SD_BUS_VTABLE_PROPERTY_CONST),
1920         SD_BUS_PROPERTY("HandleHibernateKey", "s", property_get_handle_action, offsetof(Manager, handle_hibernate_key), SD_BUS_VTABLE_PROPERTY_CONST),
1921         SD_BUS_PROPERTY("HandleLidSwitch", "s", property_get_handle_action, offsetof(Manager, handle_lid_switch), SD_BUS_VTABLE_PROPERTY_CONST),
1922         SD_BUS_PROPERTY("IdleAction", "s", property_get_handle_action, offsetof(Manager, idle_action), SD_BUS_VTABLE_PROPERTY_CONST),
1923         SD_BUS_PROPERTY("IdleActionUSec", "t", NULL, offsetof(Manager, idle_action_usec), SD_BUS_VTABLE_PROPERTY_CONST),
1924         SD_BUS_PROPERTY("PreparingForShutdown", "b", property_get_preparing, 0, 0),
1925         SD_BUS_PROPERTY("PreparingForSleep", "b", property_get_preparing, 0, 0),
1926
1927         SD_BUS_METHOD("GetSession", "s", "o", method_get_session, SD_BUS_VTABLE_UNPRIVILEGED),
1928         SD_BUS_METHOD("GetSessionByPID", "u", "o", method_get_session_by_pid, SD_BUS_VTABLE_UNPRIVILEGED),
1929         SD_BUS_METHOD("GetUser", "u", "o", method_get_user, SD_BUS_VTABLE_UNPRIVILEGED),
1930         SD_BUS_METHOD("GetUserByPID", "u", "o", method_get_user_by_pid, SD_BUS_VTABLE_UNPRIVILEGED),
1931         SD_BUS_METHOD("GetSeat", "s", "o", method_get_seat, SD_BUS_VTABLE_UNPRIVILEGED),
1932         SD_BUS_METHOD("ListSessions", NULL, "a(susso)", method_list_sessions, SD_BUS_VTABLE_UNPRIVILEGED),
1933         SD_BUS_METHOD("ListUsers", NULL, "a(uso)", method_list_users, SD_BUS_VTABLE_UNPRIVILEGED),
1934         SD_BUS_METHOD("ListSeats", NULL, "a(so)", method_list_seats, SD_BUS_VTABLE_UNPRIVILEGED),
1935         SD_BUS_METHOD("ListInhibitors", NULL, "a(ssssuu)", method_list_inhibitors, SD_BUS_VTABLE_UNPRIVILEGED),
1936         SD_BUS_METHOD("CreateSession", "uusssssussbssa(sv)", "soshusub", method_create_session, 0),
1937         SD_BUS_METHOD("ReleaseSession", "s", NULL, method_release_session, 0),
1938         SD_BUS_METHOD("ActivateSession", "s", NULL, method_activate_session, SD_BUS_VTABLE_UNPRIVILEGED),
1939         SD_BUS_METHOD("ActivateSessionOnSeat", "ss", NULL, method_activate_session_on_seat, SD_BUS_VTABLE_UNPRIVILEGED),
1940         SD_BUS_METHOD("LockSession", "s", NULL, method_lock_session, 0),
1941         SD_BUS_METHOD("UnlockSession", "s", NULL, method_lock_session, 0),
1942         SD_BUS_METHOD("LockSessions", NULL, NULL, method_lock_sessions, 0),
1943         SD_BUS_METHOD("UnlockSessions", NULL, NULL, method_lock_sessions, 0),
1944         SD_BUS_METHOD("KillSession", "ssi", NULL, method_kill_session, SD_BUS_VTABLE_CAPABILITY(CAP_KILL)),
1945         SD_BUS_METHOD("KillUser", "ui", NULL, method_kill_user, SD_BUS_VTABLE_CAPABILITY(CAP_KILL)),
1946         SD_BUS_METHOD("TerminateSession", "s", NULL, method_terminate_session, SD_BUS_VTABLE_CAPABILITY(CAP_KILL)),
1947         SD_BUS_METHOD("TerminateUser", "u", NULL, method_terminate_user, SD_BUS_VTABLE_CAPABILITY(CAP_KILL)),
1948         SD_BUS_METHOD("TerminateSeat", "s", NULL, method_terminate_seat, SD_BUS_VTABLE_CAPABILITY(CAP_KILL)),
1949         SD_BUS_METHOD("SetUserLinger", "ubb", NULL, method_set_user_linger, SD_BUS_VTABLE_UNPRIVILEGED),
1950         SD_BUS_METHOD("AttachDevice", "ssb", NULL, method_attach_device, SD_BUS_VTABLE_UNPRIVILEGED),
1951         SD_BUS_METHOD("FlushDevices", "b", NULL, method_flush_devices, SD_BUS_VTABLE_UNPRIVILEGED),
1952         SD_BUS_METHOD("PowerOff", "b", NULL, method_poweroff, SD_BUS_VTABLE_UNPRIVILEGED),
1953         SD_BUS_METHOD("Reboot", "b", NULL, method_reboot, SD_BUS_VTABLE_UNPRIVILEGED),
1954         SD_BUS_METHOD("Suspend", "b", NULL, method_suspend, SD_BUS_VTABLE_UNPRIVILEGED),
1955         SD_BUS_METHOD("Hibernate", "b", NULL, method_hibernate, SD_BUS_VTABLE_UNPRIVILEGED),
1956         SD_BUS_METHOD("HybridSleep", "b", NULL, method_hybrid_sleep, SD_BUS_VTABLE_UNPRIVILEGED),
1957         SD_BUS_METHOD("CanPowerOff", NULL, "s", method_can_poweroff, SD_BUS_VTABLE_UNPRIVILEGED),
1958         SD_BUS_METHOD("CanReboot", NULL, "s", method_can_reboot, SD_BUS_VTABLE_UNPRIVILEGED),
1959         SD_BUS_METHOD("CanSuspend", NULL, "s", method_can_suspend, SD_BUS_VTABLE_UNPRIVILEGED),
1960         SD_BUS_METHOD("CanHibernate", NULL, "s", method_can_hibernate, SD_BUS_VTABLE_UNPRIVILEGED),
1961         SD_BUS_METHOD("CanHybridSleep", NULL, "s", method_can_hybrid_sleep, SD_BUS_VTABLE_UNPRIVILEGED),
1962         SD_BUS_METHOD("Inhibit", "ssss", "h", method_inhibit, SD_BUS_VTABLE_UNPRIVILEGED),
1963
1964         SD_BUS_SIGNAL("SessionNew", "so", 0),
1965         SD_BUS_SIGNAL("SessionRemoved", "so", 0),
1966         SD_BUS_SIGNAL("UserNew", "uo", 0),
1967         SD_BUS_SIGNAL("UserRemoved", "uo", 0),
1968         SD_BUS_SIGNAL("SeatNew", "so", 0),
1969         SD_BUS_SIGNAL("SeatRemoved", "so", 0),
1970         SD_BUS_SIGNAL("PrepareForShutdown", "b", 0),
1971         SD_BUS_SIGNAL("PrepareForSleep", "b", 0),
1972
1973         SD_BUS_VTABLE_END
1974 };
1975
1976 static int session_jobs_reply(Session *s, const char *unit, const char *result) {
1977         int r = 0;
1978
1979         assert(s);
1980         assert(unit);
1981
1982         if (!s->started)
1983                 return r;
1984
1985         if (streq(result, "done"))
1986                 r = session_send_create_reply(s, NULL);
1987         else {
1988                 _cleanup_bus_error_free_ sd_bus_error e = SD_BUS_ERROR_NULL;
1989
1990                 sd_bus_error_setf(&e, BUS_ERROR_JOB_FAILED, "Start job for unit %s failed with '%s'", unit, result);
1991                 r = session_send_create_reply(s, &e);
1992         }
1993
1994         return r;
1995 }
1996
1997 int match_job_removed(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) {
1998         const char *path, *result, *unit;
1999         Manager *m = userdata;
2000         Session *session;
2001         uint32_t id;
2002         User *user;
2003         int r;
2004
2005         assert(bus);
2006         assert(message);
2007         assert(m);
2008
2009         r = sd_bus_message_read(message, "uoss", &id, &path, &unit, &result);
2010         if (r < 0) {
2011                 bus_log_parse_error(r);
2012                 return r;
2013         }
2014
2015         if (m->action_job && streq(m->action_job, path)) {
2016                 log_info("Operation finished.");
2017
2018                 /* Tell people that they now may take a lock again */
2019                 send_prepare_for(m, m->action_what, false);
2020
2021                 free(m->action_job);
2022                 m->action_job = NULL;
2023                 m->action_unit = NULL;
2024                 m->action_what = 0;
2025                 return 0;
2026         }
2027
2028         session = hashmap_get(m->session_units, unit);
2029         if (session) {
2030
2031                 if (streq_ptr(path, session->scope_job)) {
2032                         free(session->scope_job);
2033                         session->scope_job = NULL;
2034                 }
2035
2036                 session_jobs_reply(session, unit, result);
2037
2038                 session_save(session);
2039                 session_add_to_gc_queue(session);
2040         }
2041
2042         user = hashmap_get(m->user_units, unit);
2043         if (user) {
2044
2045                 if (streq_ptr(path, user->service_job)) {
2046                         free(user->service_job);
2047                         user->service_job = NULL;
2048                 }
2049
2050                 if (streq_ptr(path, user->slice_job)) {
2051                         free(user->slice_job);
2052                         user->slice_job = NULL;
2053                 }
2054
2055                 LIST_FOREACH(sessions_by_user, session, user->sessions) {
2056                         session_jobs_reply(session, unit, result);
2057                 }
2058
2059                 user_save(user);
2060                 user_add_to_gc_queue(user);
2061         }
2062
2063         return 0;
2064 }
2065
2066 int match_unit_removed(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) {
2067         const char *path, *unit;
2068         Manager *m = userdata;
2069         Session *session;
2070         User *user;
2071         int r;
2072
2073         assert(bus);
2074         assert(message);
2075         assert(m);
2076
2077         r = sd_bus_message_read(message, "so", &unit, &path);
2078         if (r < 0) {
2079                 bus_log_parse_error(r);
2080                 return r;
2081         }
2082
2083         session = hashmap_get(m->session_units, unit);
2084         if (session)
2085                 session_add_to_gc_queue(session);
2086
2087         user = hashmap_get(m->user_units, unit);
2088         if (user)
2089                 user_add_to_gc_queue(user);
2090
2091         return 0;
2092 }
2093
2094 int match_properties_changed(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) {
2095         _cleanup_free_ char *unit = NULL;
2096         Manager *m = userdata;
2097         const char *path;
2098         Session *session;
2099         User *user;
2100         int r;
2101
2102         assert(bus);
2103         assert(message);
2104         assert(m);
2105
2106         path = sd_bus_message_get_path(message);
2107         if (!path)
2108                 return 0;
2109
2110         r = unit_name_from_dbus_path(path, &unit);
2111         if (r < 0)
2112                 /* quietly ignore non-units paths */
2113                 return r == -EINVAL ? 0 : r;
2114
2115         session = hashmap_get(m->session_units, unit);
2116         if (session)
2117                 session_add_to_gc_queue(session);
2118
2119         user = hashmap_get(m->user_units, unit);
2120         if (user)
2121                 user_add_to_gc_queue(user);
2122
2123         return 0;
2124 }
2125
2126 int match_reloading(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) {
2127         Manager *m = userdata;
2128         Session *session;
2129         Iterator i;
2130         int b, r;
2131
2132         assert(bus);
2133
2134         r = sd_bus_message_read(message, "b", &b);
2135         if (r < 0) {
2136                 bus_log_parse_error(r);
2137                 return r;
2138         }
2139
2140         if (b)
2141                 return 0;
2142
2143         /* systemd finished reloading, let's recheck all our sessions */
2144         log_debug("System manager has been reloaded, rechecking sessions...");
2145
2146         HASHMAP_FOREACH(session, m->sessions, i)
2147                 session_add_to_gc_queue(session);
2148
2149         return 0;
2150 }
2151
2152 int match_name_owner_changed(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) {
2153         const char *name, *old, *new;
2154         Manager *m = userdata;
2155         Session *session;
2156         Iterator i;
2157         int r;
2158
2159
2160         char *key;
2161
2162         r = sd_bus_message_read(message, "sss", &name, &old, &new);
2163         if (r < 0) {
2164                 bus_log_parse_error(r);
2165                 return r;
2166         }
2167
2168         if (isempty(old) || !isempty(new))
2169                 return 0;
2170
2171         key = set_remove(m->busnames, (char*) old);
2172         if (!key)
2173                 return 0;
2174
2175         /* Drop all controllers owned by this name */
2176
2177         free(key);
2178
2179         HASHMAP_FOREACH(session, m->sessions, i)
2180                 if (session_is_controller(session, old))
2181                         session_drop_controller(session);
2182
2183         return 0;
2184 }
2185
2186 int manager_send_changed(Manager *manager, const char *property, ...) {
2187         char **l;
2188
2189         assert(manager);
2190
2191         l = strv_from_stdarg_alloca(property);
2192
2193         return sd_bus_emit_properties_changed_strv(
2194                         manager->bus,
2195                         "/org/freedesktop/login1",
2196                         "org.freedesktop.login1.Manager",
2197                         l);
2198 }
2199
2200 int manager_dispatch_delayed(Manager *manager) {
2201         _cleanup_bus_error_free_ sd_bus_error error = SD_BUS_ERROR_NULL;
2202         Inhibitor *offending = NULL;
2203         int r;
2204
2205         assert(manager);
2206
2207         if (manager->action_what == 0 || manager->action_job)
2208                 return 0;
2209
2210         /* Continue delay? */
2211         if (manager_is_inhibited(manager, manager->action_what, INHIBIT_DELAY, NULL, false, false, 0, &offending)) {
2212                 _cleanup_free_ char *comm = NULL, *u = NULL;
2213
2214                 get_process_comm(offending->pid, &comm);
2215                 u = uid_to_name(offending->uid);
2216
2217                 if (manager->action_timestamp + manager->inhibit_delay_max > now(CLOCK_MONOTONIC))
2218                         return 0;
2219
2220                 log_info("Delay lock is active (UID "UID_FMT"/%s, PID "PID_FMT"/%s) but inhibitor timeout is reached.",
2221                          offending->uid, strna(u),
2222                          offending->pid, strna(comm));
2223         }
2224
2225         /* Actually do the operation */
2226         r = execute_shutdown_or_sleep(manager, manager->action_what, manager->action_unit, &error);
2227         if (r < 0) {
2228                 log_warning("Failed to send delayed message: %s", bus_error_message(&error, r));
2229
2230                 manager->action_unit = NULL;
2231                 manager->action_what = 0;
2232                 return r;
2233         }
2234
2235         return 1;
2236 }
2237
2238 int manager_start_scope(
2239                 Manager *manager,
2240                 const char *scope,
2241                 pid_t pid,
2242                 const char *slice,
2243                 const char *description,
2244                 const char *after, const char *after2,
2245                 sd_bus_error *error,
2246                 char **job) {
2247
2248         _cleanup_bus_message_unref_ sd_bus_message *m = NULL, *reply = NULL;
2249         int r;
2250
2251         assert(manager);
2252         assert(scope);
2253         assert(pid > 1);
2254
2255         r = sd_bus_message_new_method_call(
2256                         manager->bus,
2257                         &m,
2258                         "org.freedesktop.systemd1",
2259                         "/org/freedesktop/systemd1",
2260                         "org.freedesktop.systemd1.Manager",
2261                         "StartTransientUnit");
2262         if (r < 0)
2263                 return r;
2264
2265         r = sd_bus_message_append(m, "ss", strempty(scope), "fail");
2266         if (r < 0)
2267                 return r;
2268
2269         r = sd_bus_message_open_container(m, 'a', "(sv)");
2270         if (r < 0)
2271                 return r;
2272
2273         if (!isempty(slice)) {
2274                 r = sd_bus_message_append(m, "(sv)", "Slice", "s", slice);
2275                 if (r < 0)
2276                         return r;
2277         }
2278
2279         if (!isempty(description)) {
2280                 r = sd_bus_message_append(m, "(sv)", "Description", "s", description);
2281                 if (r < 0)
2282                         return r;
2283         }
2284
2285         if (!isempty(after)) {
2286                 r = sd_bus_message_append(m, "(sv)", "After", "as", 1, after);
2287                 if (r < 0)
2288                         return r;
2289         }
2290
2291         if (!isempty(after2)) {
2292                 r = sd_bus_message_append(m, "(sv)", "After", "as", 1, after2);
2293                 if (r < 0)
2294                         return r;
2295         }
2296
2297         /* cgroup empty notification is not available in containers
2298          * currently. To make this less problematic, let's shorten the
2299          * stop timeout for sessions, so that we don't wait
2300          * forever. */
2301
2302         /* Make sure that the session shells are terminated with
2303          * SIGHUP since bash and friends tend to ignore SIGTERM */
2304         r = sd_bus_message_append(m, "(sv)", "SendSIGHUP", "b", true);
2305         if (r < 0)
2306                 return r;
2307
2308         r = sd_bus_message_append(m, "(sv)", "PIDs", "au", 1, pid);
2309         if (r < 0)
2310                 return r;
2311
2312         r = sd_bus_message_close_container(m);
2313         if (r < 0)
2314                 return r;
2315
2316         r = sd_bus_message_append(m, "a(sa(sv))", 0);
2317         if (r < 0)
2318                 return r;
2319
2320         r = sd_bus_call(manager->bus, m, 0, error, &reply);
2321         if (r < 0)
2322                 return r;
2323
2324         if (job) {
2325                 const char *j;
2326                 char *copy;
2327
2328                 r = sd_bus_message_read(reply, "o", &j);
2329                 if (r < 0)
2330                         return r;
2331
2332                 copy = strdup(j);
2333                 if (!copy)
2334                         return -ENOMEM;
2335
2336                 *job = copy;
2337         }
2338
2339         return 1;
2340 }
2341
2342 int manager_start_unit(Manager *manager, const char *unit, sd_bus_error *error, char **job) {
2343         _cleanup_bus_message_unref_ sd_bus_message *reply = NULL;
2344         int r;
2345
2346         assert(manager);
2347         assert(unit);
2348
2349         r = sd_bus_call_method(
2350                         manager->bus,
2351                         "org.freedesktop.systemd1",
2352                         "/org/freedesktop/systemd1",
2353                         "org.freedesktop.systemd1.Manager",
2354                         "StartUnit",
2355                         error,
2356                         &reply,
2357                         "ss", unit, "fail");
2358         if (r < 0)
2359                 return r;
2360
2361         if (job) {
2362                 const char *j;
2363                 char *copy;
2364
2365                 r = sd_bus_message_read(reply, "o", &j);
2366                 if (r < 0)
2367                         return r;
2368
2369                 copy = strdup(j);
2370                 if (!copy)
2371                         return -ENOMEM;
2372
2373                 *job = copy;
2374         }
2375
2376         return 1;
2377 }
2378
2379 int manager_stop_unit(Manager *manager, const char *unit, sd_bus_error *error, char **job) {
2380         _cleanup_bus_message_unref_ sd_bus_message *reply = NULL;
2381         int r;
2382
2383         assert(manager);
2384         assert(unit);
2385
2386         r = sd_bus_call_method(
2387                         manager->bus,
2388                         "org.freedesktop.systemd1",
2389                         "/org/freedesktop/systemd1",
2390                         "org.freedesktop.systemd1.Manager",
2391                         "StopUnit",
2392                         error,
2393                         &reply,
2394                         "ss", unit, "fail");
2395         if (r < 0) {
2396                 if (sd_bus_error_has_name(error, BUS_ERROR_NO_SUCH_UNIT) ||
2397                     sd_bus_error_has_name(error, BUS_ERROR_LOAD_FAILED)) {
2398
2399                         if (job)
2400                                 *job = NULL;
2401
2402                         sd_bus_error_free(error);
2403                         return 0;
2404                 }
2405
2406                 return r;
2407         }
2408
2409         if (job) {
2410                 const char *j;
2411                 char *copy;
2412
2413                 r = sd_bus_message_read(reply, "o", &j);
2414                 if (r < 0)
2415                         return r;
2416
2417                 copy = strdup(j);
2418                 if (!copy)
2419                         return -ENOMEM;
2420
2421                 *job = copy;
2422         }
2423
2424         return 1;
2425 }
2426
2427 int manager_abandon_scope(Manager *manager, const char *scope, sd_bus_error *error) {
2428         _cleanup_free_ char *path = NULL;
2429         int r;
2430
2431         assert(manager);
2432         assert(scope);
2433
2434         path = unit_dbus_path_from_name(scope);
2435         if (!path)
2436                 return -ENOMEM;
2437
2438         r = sd_bus_call_method(
2439                         manager->bus,
2440                         "org.freedesktop.systemd1",
2441                         path,
2442                         "org.freedesktop.systemd1.Scope",
2443                         "Abandon",
2444                         error,
2445                         NULL,
2446                         NULL);
2447         if (r < 0) {
2448                 if (sd_bus_error_has_name(error, BUS_ERROR_NO_SUCH_UNIT) ||
2449                     sd_bus_error_has_name(error, BUS_ERROR_LOAD_FAILED) ||
2450                     sd_bus_error_has_name(error, BUS_ERROR_SCOPE_NOT_RUNNING)) {
2451                         sd_bus_error_free(error);
2452                         return 0;
2453                 }
2454
2455                 return r;
2456         }
2457
2458         return 1;
2459 }
2460
2461 int manager_kill_unit(Manager *manager, const char *unit, KillWho who, int signo, sd_bus_error *error) {
2462         assert(manager);
2463         assert(unit);
2464
2465         return sd_bus_call_method(
2466                         manager->bus,
2467                         "org.freedesktop.systemd1",
2468                         "/org/freedesktop/systemd1",
2469                         "org.freedesktop.systemd1.Manager",
2470                         "KillUnit",
2471                         error,
2472                         NULL,
2473                         "ssi", unit, who == KILL_LEADER ? "main" : "all", signo);
2474 }
2475
2476 int manager_unit_is_active(Manager *manager, const char *unit) {
2477         _cleanup_bus_error_free_ sd_bus_error error = SD_BUS_ERROR_NULL;
2478         _cleanup_bus_message_unref_ sd_bus_message *reply = NULL;
2479         _cleanup_free_ char *path = NULL;
2480         const char *state;
2481         int r;
2482
2483         assert(manager);
2484         assert(unit);
2485
2486         path = unit_dbus_path_from_name(unit);
2487         if (!path)
2488                 return -ENOMEM;
2489
2490         r = sd_bus_get_property(
2491                         manager->bus,
2492                         "org.freedesktop.systemd1",
2493                         path,
2494                         "org.freedesktop.systemd1.Unit",
2495                         "ActiveState",
2496                         &error,
2497                         &reply,
2498                         "s");
2499         if (r < 0) {
2500                 /* systemd might have droppped off momentarily, let's
2501                  * not make this an error */
2502                 if (sd_bus_error_has_name(&error, SD_BUS_ERROR_NO_REPLY) ||
2503                     sd_bus_error_has_name(&error, SD_BUS_ERROR_DISCONNECTED))
2504                         return true;
2505
2506                 /* If the unit is already unloaded then it's not
2507                  * active */
2508                 if (sd_bus_error_has_name(&error, BUS_ERROR_NO_SUCH_UNIT) ||
2509                     sd_bus_error_has_name(&error, BUS_ERROR_LOAD_FAILED))
2510                         return false;
2511
2512                 return r;
2513         }
2514
2515         r = sd_bus_message_read(reply, "s", &state);
2516         if (r < 0)
2517                 return -EINVAL;
2518
2519         return !streq(state, "inactive") && !streq(state, "failed");
2520 }
2521
2522 int manager_job_is_active(Manager *manager, const char *path) {
2523         _cleanup_bus_error_free_ sd_bus_error error = SD_BUS_ERROR_NULL;
2524         _cleanup_bus_message_unref_ sd_bus_message *reply = NULL;
2525         int r;
2526
2527         assert(manager);
2528         assert(path);
2529
2530         r = sd_bus_get_property(
2531                         manager->bus,
2532                         "org.freedesktop.systemd1",
2533                         path,
2534                         "org.freedesktop.systemd1.Job",
2535                         "State",
2536                         &error,
2537                         &reply,
2538                         "s");
2539         if (r < 0) {
2540                 if (sd_bus_error_has_name(&error, SD_BUS_ERROR_NO_REPLY) ||
2541                     sd_bus_error_has_name(&error, SD_BUS_ERROR_DISCONNECTED))
2542                         return true;
2543
2544                 if (sd_bus_error_has_name(&error, SD_BUS_ERROR_UNKNOWN_OBJECT))
2545                         return false;
2546
2547                 return r;
2548         }
2549
2550         /* We don't actually care about the state really. The fact
2551          * that we could read the job state is enough for us */
2552
2553         return true;
2554 }