#include "virt.h"
#include "watchdog.h"
-/* Require 16MiB free in /run/systemd for reloading/reexecing. After all we need to serialize our state
- * there, and if we can't we'll fail badly. */
-#define RELOAD_DISK_SPACE_MIN (UINT64_C(16) * UINT64_C(1024) * UINT64_C(1024))
-
static UnitFileFlags unit_file_bools_to_flags(bool runtime, bool force) {
return (runtime ? UNIT_FILE_RUNTIME : 0) |
(force ? UNIT_FILE_FORCE : 0);
return sd_bus_error_set(error, SD_BUS_ERROR_NOT_SUPPORTED, "Support for snapshots has been removed.");
}
-static int get_run_space(uint64_t *ret, sd_bus_error *error) {
- struct statvfs svfs;
-
- assert(ret);
-
- if (statvfs("/run/systemd", &svfs) < 0)
- return sd_bus_error_set_errnof(error, errno, "Failed to statvfs(/run/systemd): %m");
-
- *ret = (uint64_t) svfs.f_bfree * (uint64_t) svfs.f_bsize;
- return 0;
-}
-
-static int verify_run_space(const char *message, sd_bus_error *error) {
- uint64_t available = 0; /* unnecessary, but used to trick out gcc's incorrect maybe-uninitialized warning */
- int r;
-
- assert(message);
-
- r = get_run_space(&available, error);
- if (r < 0)
- return r;
-
- if (available < RELOAD_DISK_SPACE_MIN)
- return sd_bus_error_setf(error,
- BUS_ERROR_DISK_FULL,
- "%s, not enough space available on /run/systemd/. "
- "Currently, %s are free, but a safety buffer of %s is enforced.",
- message,
- FORMAT_BYTES(available),
- FORMAT_BYTES(RELOAD_DISK_SPACE_MIN));
-
- return 0;
-}
-
-int verify_run_space_and_log(const char *message) {
- _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
- int r;
-
- assert(message);
-
- r = verify_run_space(message, &error);
- if (r < 0)
- return log_error_errno(r, "%s", bus_error_message(&error, r));
-
- return 0;
-}
-
-static int verify_run_space_permissive(const char *message, sd_bus_error *error) {
- uint64_t available = 0; /* unnecessary, but used to trick out gcc's incorrect maybe-uninitialized warning */
- int r;
-
- assert(message);
-
- r = get_run_space(&available, error);
- if (r < 0)
- return r;
-
- if (available < RELOAD_DISK_SPACE_MIN)
- log_warning("Dangerously low amount of free space on /run/systemd/, %s.\n"
- "Currently, %s are free, but %s are suggested. Proceeding anyway.",
- message,
- FORMAT_BYTES(available),
- FORMAT_BYTES(RELOAD_DISK_SPACE_MIN));
-
- return 0;
-}
-
static void log_caller(sd_bus_message *message, Manager *manager, const char *method) {
_cleanup_(sd_bus_creds_unrefp) sd_bus_creds *creds = NULL;
_cleanup_(pidref_done) PidRef pidref = PIDREF_NULL;
assert(message);
- r = verify_run_space("Refusing to reload", error);
- if (r < 0)
- return r;
-
r = mac_selinux_access_check(message, "reload", error);
if (r < 0)
return r;
assert(message);
- r = verify_run_space("Refusing to reexecute", error);
- if (r < 0)
- return r;
-
r = mac_selinux_access_check(message, "reload", error);
if (r < 0)
return r;
return sd_bus_error_set(error, SD_BUS_ERROR_NOT_SUPPORTED,
"Soft reboot is only supported by system manager.");
- r = verify_run_space_permissive("soft reboot may fail", error);
- if (r < 0)
- return r;
-
r = mac_selinux_access_check(message, "reboot", error);
if (r < 0)
return r;
return sd_bus_error_set(error, SD_BUS_ERROR_NOT_SUPPORTED,
"Root switching is only supported by system manager.");
- r = verify_run_space_permissive("root switching may fail", error);
- if (r < 0)
- return r;
-
r = mac_selinux_access_check(message, "reboot", error);
if (r < 0)
return r;