]>
Commit | Line | Data |
---|---|---|
88a6477e KS |
1 | /*** |
2 | This file is part of systemd. | |
3 | ||
4 | Copyright 2008-2012 Kay Sievers <kay@vrfy.org> | |
5 | ||
6 | systemd is free software; you can redistribute it and/or modify it | |
7 | under the terms of the GNU Lesser General Public License as published by | |
8 | the Free Software Foundation; either version 2.1 of the License, or | |
9 | (at your option) any later version. | |
10 | ||
11 | systemd is distributed in the hope that it will be useful, but | |
12 | WITHOUT ANY WARRANTY; without even the implied warranty of | |
13 | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU | |
14 | Lesser General Public License for more details. | |
15 | ||
16 | You should have received a copy of the GNU Lesser General Public License | |
17 | along with systemd; If not, see <http://www.gnu.org/licenses/>. | |
18 | ***/ | |
ba6929f6 | 19 | |
ba6929f6 KS |
20 | #include <stdio.h> |
21 | #include <stdlib.h> | |
22 | #include <stddef.h> | |
23 | #include <unistd.h> | |
24 | #include <errno.h> | |
25 | #include <string.h> | |
26 | #include <dirent.h> | |
e14bdd88 | 27 | #include <sys/poll.h> |
ba6929f6 KS |
28 | #include <sys/stat.h> |
29 | #include <sys/socket.h> | |
30 | #include <sys/un.h> | |
e14bdd88 | 31 | #include <arpa/inet.h> |
1c7047ea | 32 | #include <linux/netlink.h> |
e14bdd88 | 33 | #include <linux/filter.h> |
ba6929f6 KS |
34 | |
35 | #include "libudev.h" | |
36 | #include "libudev-private.h" | |
b49d9b50 | 37 | #include "socket-util.h" |
df32a1ca | 38 | #include "missing.h" |
ba6929f6 | 39 | |
ce1d6d7f KS |
40 | /** |
41 | * SECTION:libudev-monitor | |
42 | * @short_description: device event source | |
43 | * | |
44 | * Connects to a device event source. | |
45 | */ | |
46 | ||
ce1d6d7f KS |
47 | /** |
48 | * udev_monitor: | |
49 | * | |
50579295 | 50 | * Opaque object handling an event source. |
ce1d6d7f | 51 | */ |
ba6929f6 | 52 | struct udev_monitor { |
912541b0 KS |
53 | struct udev *udev; |
54 | int refcount; | |
55 | int sock; | |
b49d9b50 KS |
56 | union sockaddr_union snl; |
57 | union sockaddr_union snl_trusted_sender; | |
58 | union sockaddr_union snl_destination; | |
912541b0 KS |
59 | socklen_t addrlen; |
60 | struct udev_list filter_subsystem_list; | |
61 | struct udev_list filter_tag_list; | |
62 | bool bound; | |
ba6929f6 KS |
63 | }; |
64 | ||
f2b93744 | 65 | enum udev_monitor_netlink_group { |
912541b0 KS |
66 | UDEV_MONITOR_NONE, |
67 | UDEV_MONITOR_KERNEL, | |
68 | UDEV_MONITOR_UDEV, | |
f2b93744 KS |
69 | }; |
70 | ||
912541b0 | 71 | #define UDEV_MONITOR_MAGIC 0xfeedcafe |
e14bdd88 | 72 | struct udev_monitor_netlink_header { |
912541b0 KS |
73 | /* "libudev" prefix to distinguish libudev and kernel messages */ |
74 | char prefix[8]; | |
75 | /* | |
76 | * magic to protect against daemon <-> library message format mismatch | |
77 | * used in the kernel from socket filter rules; needs to be stored in network order | |
78 | */ | |
79 | unsigned int magic; | |
80 | /* total length of header structure known to the sender */ | |
81 | unsigned int header_size; | |
82 | /* properties string buffer */ | |
83 | unsigned int properties_off; | |
84 | unsigned int properties_len; | |
85 | /* | |
86 | * hashes of primary device properties strings, to let libudev subscribers | |
87 | * use in-kernel socket filters; values need to be stored in network order | |
88 | */ | |
89 | unsigned int filter_subsystem_hash; | |
90 | unsigned int filter_devtype_hash; | |
91 | unsigned int filter_tag_bloom_hi; | |
92 | unsigned int filter_tag_bloom_lo; | |
e14bdd88 KS |
93 | }; |
94 | ||
95 | static struct udev_monitor *udev_monitor_new(struct udev *udev) | |
96 | { | |
912541b0 KS |
97 | struct udev_monitor *udev_monitor; |
98 | ||
955d98c9 | 99 | udev_monitor = new0(struct udev_monitor, 1); |
912541b0 KS |
100 | if (udev_monitor == NULL) |
101 | return NULL; | |
102 | udev_monitor->refcount = 1; | |
103 | udev_monitor->udev = udev; | |
104 | udev_list_init(udev, &udev_monitor->filter_subsystem_list, false); | |
105 | udev_list_init(udev, &udev_monitor->filter_tag_list, true); | |
106 | return udev_monitor; | |
e14bdd88 KS |
107 | } |
108 | ||
df32a1ca KS |
109 | /* we consider udev running when /dev is on devtmpfs */ |
110 | static bool udev_has_devtmpfs(struct udev *udev) { | |
370c860f | 111 | union file_handle_union h = { .handle.handle_bytes = MAX_HANDLE_SZ, }; |
df32a1ca KS |
112 | int mount_id; |
113 | _cleanup_fclose_ FILE *f = NULL; | |
114 | char line[LINE_MAX], *e; | |
115 | int r; | |
116 | ||
370c860f | 117 | r = name_to_handle_at(AT_FDCWD, "/dev", &h.handle, &mount_id, 0); |
df32a1ca KS |
118 | if (r < 0) |
119 | return false; | |
120 | ||
121 | ||
122 | f = fopen("/proc/self/mountinfo", "re"); | |
123 | if (!f) | |
124 | return false; | |
125 | ||
126 | FOREACH_LINE(line, f, return false) { | |
df32a1ca KS |
127 | int mid; |
128 | ||
129 | if (sscanf(line, "%i", &mid) != 1) | |
130 | continue; | |
131 | ||
132 | if (mid != mount_id) | |
133 | continue; | |
134 | ||
135 | e = strstr(line, " - "); | |
136 | if (!e) | |
137 | continue; | |
138 | ||
139 | /* accept any name that starts with the currently expected type */ | |
140 | if (startswith(e + 3, "devtmpfs")) | |
141 | return true; | |
142 | } | |
143 | ||
144 | return false; | |
145 | } | |
146 | ||
7459bcdc | 147 | struct udev_monitor *udev_monitor_new_from_netlink_fd(struct udev *udev, const char *name, int fd) |
1c7047ea | 148 | { |
912541b0 KS |
149 | struct udev_monitor *udev_monitor; |
150 | unsigned int group; | |
151 | ||
152 | if (udev == NULL) | |
153 | return NULL; | |
154 | ||
155 | if (name == NULL) | |
156 | group = UDEV_MONITOR_NONE; | |
e8a3b2dc KS |
157 | else if (streq(name, "udev")) { |
158 | /* | |
159 | * We do not support subscribing to uevents if no instance of | |
160 | * udev is running. Uevents would otherwise broadcast the | |
161 | * processing data of the host into containers, which is not | |
162 | * desired. | |
163 | * | |
164 | * Containers will currently not get any udev uevents, until | |
165 | * a supporting infrastructure is available. | |
166 | * | |
167 | * We do not set a netlink multicast group here, so the socket | |
168 | * will not receive any messages. | |
169 | */ | |
9ea28c55 | 170 | if (access("/run/udev/control", F_OK) < 0 && !udev_has_devtmpfs(udev)) { |
e8a3b2dc KS |
171 | udev_dbg(udev, "the udev service seems not to be active, disable the monitor\n"); |
172 | group = UDEV_MONITOR_NONE; | |
173 | } else | |
174 | group = UDEV_MONITOR_UDEV; | |
175 | } else if (streq(name, "kernel")) | |
912541b0 KS |
176 | group = UDEV_MONITOR_KERNEL; |
177 | else | |
178 | return NULL; | |
179 | ||
180 | udev_monitor = udev_monitor_new(udev); | |
181 | if (udev_monitor == NULL) | |
182 | return NULL; | |
183 | ||
184 | if (fd < 0) { | |
185 | udev_monitor->sock = socket(PF_NETLINK, SOCK_RAW|SOCK_CLOEXEC|SOCK_NONBLOCK, NETLINK_KOBJECT_UEVENT); | |
186 | if (udev_monitor->sock == -1) { | |
c8f8394a | 187 | udev_err(udev, "error getting socket: %m\n"); |
912541b0 KS |
188 | free(udev_monitor); |
189 | return NULL; | |
190 | } | |
191 | } else { | |
192 | udev_monitor->bound = true; | |
193 | udev_monitor->sock = fd; | |
194 | } | |
195 | ||
b49d9b50 KS |
196 | udev_monitor->snl.nl.nl_family = AF_NETLINK; |
197 | udev_monitor->snl.nl.nl_groups = group; | |
912541b0 KS |
198 | |
199 | /* default destination for sending */ | |
b49d9b50 KS |
200 | udev_monitor->snl_destination.nl.nl_family = AF_NETLINK; |
201 | udev_monitor->snl_destination.nl.nl_groups = UDEV_MONITOR_UDEV; | |
912541b0 | 202 | |
912541b0 | 203 | return udev_monitor; |
1c7047ea KS |
204 | } |
205 | ||
7459bcdc KS |
206 | /** |
207 | * udev_monitor_new_from_netlink: | |
208 | * @udev: udev library context | |
209 | * @name: name of event source | |
210 | * | |
211 | * Create new udev monitor and connect to a specified event | |
212 | * source. Valid sources identifiers are "udev" and "kernel". | |
213 | * | |
214 | * Applications should usually not connect directly to the | |
215 | * "kernel" events, because the devices might not be useable | |
216 | * at that time, before udev has configured them, and created | |
50579295 KS |
217 | * device nodes. Accessing devices at the same time as udev, |
218 | * might result in unpredictable behavior. The "udev" events | |
219 | * are sent out after udev has finished its event processing, | |
220 | * all rules have been processed, and needed device nodes are | |
221 | * created. | |
7459bcdc KS |
222 | * |
223 | * The initial refcount is 1, and needs to be decremented to | |
224 | * release the resources of the udev monitor. | |
225 | * | |
226 | * Returns: a new udev monitor, or #NULL, in case of an error | |
227 | **/ | |
54cf0b7f | 228 | _public_ struct udev_monitor *udev_monitor_new_from_netlink(struct udev *udev, const char *name) |
7459bcdc | 229 | { |
912541b0 | 230 | return udev_monitor_new_from_netlink_fd(udev, name, -1); |
7459bcdc KS |
231 | } |
232 | ||
e14bdd88 | 233 | static inline void bpf_stmt(struct sock_filter *inss, unsigned int *i, |
912541b0 | 234 | unsigned short code, unsigned int data) |
e14bdd88 | 235 | { |
912541b0 | 236 | struct sock_filter *ins = &inss[*i]; |
e14bdd88 | 237 | |
912541b0 KS |
238 | ins->code = code; |
239 | ins->k = data; | |
240 | (*i)++; | |
e14bdd88 KS |
241 | } |
242 | ||
243 | static inline void bpf_jmp(struct sock_filter *inss, unsigned int *i, | |
912541b0 KS |
244 | unsigned short code, unsigned int data, |
245 | unsigned short jt, unsigned short jf) | |
e14bdd88 | 246 | { |
912541b0 | 247 | struct sock_filter *ins = &inss[*i]; |
e14bdd88 | 248 | |
912541b0 KS |
249 | ins->code = code; |
250 | ins->jt = jt; | |
251 | ins->jf = jf; | |
252 | ins->k = data; | |
253 | (*i)++; | |
e14bdd88 KS |
254 | } |
255 | ||
ce1d6d7f KS |
256 | /** |
257 | * udev_monitor_filter_update: | |
258 | * @udev_monitor: monitor | |
259 | * | |
50579295 KS |
260 | * Update the installed socket filter. This is only needed, |
261 | * if the filter was removed or changed. | |
ce1d6d7f KS |
262 | * |
263 | * Returns: 0 on success, otherwise a negative error value. | |
264 | */ | |
54cf0b7f | 265 | _public_ int udev_monitor_filter_update(struct udev_monitor *udev_monitor) |
e14bdd88 | 266 | { |
912541b0 KS |
267 | struct sock_filter ins[512]; |
268 | struct sock_fprog filter; | |
269 | unsigned int i; | |
270 | struct udev_list_entry *list_entry; | |
271 | int err; | |
272 | ||
273 | if (udev_list_get_entry(&udev_monitor->filter_subsystem_list) == NULL && | |
274 | udev_list_get_entry(&udev_monitor->filter_tag_list) == NULL) | |
275 | return 0; | |
276 | ||
29804cc1 | 277 | memzero(ins, sizeof(ins)); |
912541b0 KS |
278 | i = 0; |
279 | ||
280 | /* load magic in A */ | |
281 | bpf_stmt(ins, &i, BPF_LD|BPF_W|BPF_ABS, offsetof(struct udev_monitor_netlink_header, magic)); | |
282 | /* jump if magic matches */ | |
283 | bpf_jmp(ins, &i, BPF_JMP|BPF_JEQ|BPF_K, UDEV_MONITOR_MAGIC, 1, 0); | |
284 | /* wrong magic, pass packet */ | |
285 | bpf_stmt(ins, &i, BPF_RET|BPF_K, 0xffffffff); | |
286 | ||
287 | if (udev_list_get_entry(&udev_monitor->filter_tag_list) != NULL) { | |
288 | int tag_matches; | |
289 | ||
290 | /* count tag matches, to calculate end of tag match block */ | |
291 | tag_matches = 0; | |
292 | udev_list_entry_foreach(list_entry, udev_list_get_entry(&udev_monitor->filter_tag_list)) | |
293 | tag_matches++; | |
294 | ||
295 | /* add all tags matches */ | |
296 | udev_list_entry_foreach(list_entry, udev_list_get_entry(&udev_monitor->filter_tag_list)) { | |
297 | uint64_t tag_bloom_bits = util_string_bloom64(udev_list_entry_get_name(list_entry)); | |
298 | uint32_t tag_bloom_hi = tag_bloom_bits >> 32; | |
299 | uint32_t tag_bloom_lo = tag_bloom_bits & 0xffffffff; | |
300 | ||
301 | /* load device bloom bits in A */ | |
302 | bpf_stmt(ins, &i, BPF_LD|BPF_W|BPF_ABS, offsetof(struct udev_monitor_netlink_header, filter_tag_bloom_hi)); | |
303 | /* clear bits (tag bits & bloom bits) */ | |
304 | bpf_stmt(ins, &i, BPF_ALU|BPF_AND|BPF_K, tag_bloom_hi); | |
305 | /* jump to next tag if it does not match */ | |
306 | bpf_jmp(ins, &i, BPF_JMP|BPF_JEQ|BPF_K, tag_bloom_hi, 0, 3); | |
307 | ||
308 | /* load device bloom bits in A */ | |
309 | bpf_stmt(ins, &i, BPF_LD|BPF_W|BPF_ABS, offsetof(struct udev_monitor_netlink_header, filter_tag_bloom_lo)); | |
310 | /* clear bits (tag bits & bloom bits) */ | |
311 | bpf_stmt(ins, &i, BPF_ALU|BPF_AND|BPF_K, tag_bloom_lo); | |
312 | /* jump behind end of tag match block if tag matches */ | |
313 | tag_matches--; | |
314 | bpf_jmp(ins, &i, BPF_JMP|BPF_JEQ|BPF_K, tag_bloom_lo, 1 + (tag_matches * 6), 0); | |
315 | } | |
316 | ||
317 | /* nothing matched, drop packet */ | |
318 | bpf_stmt(ins, &i, BPF_RET|BPF_K, 0); | |
319 | } | |
320 | ||
321 | /* add all subsystem matches */ | |
322 | if (udev_list_get_entry(&udev_monitor->filter_subsystem_list) != NULL) { | |
323 | udev_list_entry_foreach(list_entry, udev_list_get_entry(&udev_monitor->filter_subsystem_list)) { | |
324 | unsigned int hash = util_string_hash32(udev_list_entry_get_name(list_entry)); | |
325 | ||
326 | /* load device subsystem value in A */ | |
327 | bpf_stmt(ins, &i, BPF_LD|BPF_W|BPF_ABS, offsetof(struct udev_monitor_netlink_header, filter_subsystem_hash)); | |
328 | if (udev_list_entry_get_value(list_entry) == NULL) { | |
329 | /* jump if subsystem does not match */ | |
330 | bpf_jmp(ins, &i, BPF_JMP|BPF_JEQ|BPF_K, hash, 0, 1); | |
331 | } else { | |
332 | /* jump if subsystem does not match */ | |
333 | bpf_jmp(ins, &i, BPF_JMP|BPF_JEQ|BPF_K, hash, 0, 3); | |
334 | ||
335 | /* load device devtype value in A */ | |
336 | bpf_stmt(ins, &i, BPF_LD|BPF_W|BPF_ABS, offsetof(struct udev_monitor_netlink_header, filter_devtype_hash)); | |
337 | /* jump if value does not match */ | |
338 | hash = util_string_hash32(udev_list_entry_get_value(list_entry)); | |
339 | bpf_jmp(ins, &i, BPF_JMP|BPF_JEQ|BPF_K, hash, 0, 1); | |
340 | } | |
341 | ||
342 | /* matched, pass packet */ | |
343 | bpf_stmt(ins, &i, BPF_RET|BPF_K, 0xffffffff); | |
344 | ||
8fef0ff2 | 345 | if (i+1 >= ELEMENTSOF(ins)) |
994e0234 | 346 | return -E2BIG; |
912541b0 KS |
347 | } |
348 | ||
349 | /* nothing matched, drop packet */ | |
350 | bpf_stmt(ins, &i, BPF_RET|BPF_K, 0); | |
351 | } | |
352 | ||
353 | /* matched, pass packet */ | |
354 | bpf_stmt(ins, &i, BPF_RET|BPF_K, 0xffffffff); | |
355 | ||
356 | /* install filter */ | |
29804cc1 | 357 | memzero(&filter, sizeof(filter)); |
912541b0 KS |
358 | filter.len = i; |
359 | filter.filter = ins; | |
360 | err = setsockopt(udev_monitor->sock, SOL_SOCKET, SO_ATTACH_FILTER, &filter, sizeof(filter)); | |
994e0234 | 361 | return err < 0 ? -errno : 0; |
e14bdd88 KS |
362 | } |
363 | ||
1e03b754 KS |
364 | int udev_monitor_allow_unicast_sender(struct udev_monitor *udev_monitor, struct udev_monitor *sender) |
365 | { | |
b49d9b50 | 366 | udev_monitor->snl_trusted_sender.nl.nl_pid = sender->snl.nl.nl_pid; |
912541b0 | 367 | return 0; |
1e03b754 | 368 | } |
ce1d6d7f KS |
369 | /** |
370 | * udev_monitor_enable_receiving: | |
371 | * @udev_monitor: the monitor which should receive events | |
372 | * | |
373 | * Binds the @udev_monitor socket to the event source. | |
374 | * | |
375 | * Returns: 0 on success, otherwise a negative error value. | |
376 | */ | |
54cf0b7f | 377 | _public_ int udev_monitor_enable_receiving(struct udev_monitor *udev_monitor) |
d59f11e1 | 378 | { |
912541b0 KS |
379 | int err = 0; |
380 | const int on = 1; | |
381 | ||
2d13da88 KS |
382 | udev_monitor_filter_update(udev_monitor); |
383 | ||
384 | if (!udev_monitor->bound) { | |
385 | err = bind(udev_monitor->sock, | |
b49d9b50 | 386 | &udev_monitor->snl.sa, sizeof(struct sockaddr_nl)); |
2d13da88 KS |
387 | if (err == 0) |
388 | udev_monitor->bound = true; | |
912541b0 KS |
389 | } |
390 | ||
2d13da88 | 391 | if (err >= 0) { |
b49d9b50 | 392 | union sockaddr_union snl; |
2d13da88 KS |
393 | socklen_t addrlen; |
394 | ||
395 | /* | |
396 | * get the address the kernel has assigned us | |
397 | * it is usually, but not necessarily the pid | |
398 | */ | |
399 | addrlen = sizeof(struct sockaddr_nl); | |
b49d9b50 | 400 | err = getsockname(udev_monitor->sock, &snl.sa, &addrlen); |
2d13da88 | 401 | if (err == 0) |
b49d9b50 | 402 | udev_monitor->snl.nl.nl_pid = snl.nl.nl_pid; |
2d13da88 | 403 | } else { |
c8f8394a | 404 | udev_err(udev_monitor->udev, "bind failed: %m\n"); |
994e0234 | 405 | return -errno; |
912541b0 KS |
406 | } |
407 | ||
408 | /* enable receiving of sender credentials */ | |
409 | setsockopt(udev_monitor->sock, SOL_SOCKET, SO_PASSCRED, &on, sizeof(on)); | |
410 | return 0; | |
ba6929f6 KS |
411 | } |
412 | ||
f712894d KS |
413 | /** |
414 | * udev_monitor_set_receive_buffer_size: | |
415 | * @udev_monitor: the monitor which should receive events | |
416 | * @size: the size in bytes | |
417 | * | |
418 | * Set the size of the kernel socket buffer. This call needs the | |
419 | * appropriate privileges to succeed. | |
420 | * | |
421 | * Returns: 0 on success, otherwise -1 on error. | |
422 | */ | |
54cf0b7f | 423 | _public_ int udev_monitor_set_receive_buffer_size(struct udev_monitor *udev_monitor, int size) |
cb25a958 | 424 | { |
912541b0 | 425 | if (udev_monitor == NULL) |
994e0234 | 426 | return -EINVAL; |
912541b0 | 427 | return setsockopt(udev_monitor->sock, SOL_SOCKET, SO_RCVBUFFORCE, &size, sizeof(size)); |
cb25a958 KS |
428 | } |
429 | ||
1e03b754 KS |
430 | int udev_monitor_disconnect(struct udev_monitor *udev_monitor) |
431 | { | |
912541b0 | 432 | int err; |
1e03b754 | 433 | |
912541b0 KS |
434 | err = close(udev_monitor->sock); |
435 | udev_monitor->sock = -1; | |
994e0234 | 436 | return err < 0 ? -errno : 0; |
1e03b754 KS |
437 | } |
438 | ||
7d8787b3 KS |
439 | /** |
440 | * udev_monitor_ref: | |
441 | * @udev_monitor: udev monitor | |
442 | * | |
443 | * Take a reference of a udev monitor. | |
444 | * | |
445 | * Returns: the passed udev monitor | |
446 | **/ | |
54cf0b7f | 447 | _public_ struct udev_monitor *udev_monitor_ref(struct udev_monitor *udev_monitor) |
ba6929f6 | 448 | { |
912541b0 KS |
449 | if (udev_monitor == NULL) |
450 | return NULL; | |
451 | udev_monitor->refcount++; | |
452 | return udev_monitor; | |
ba6929f6 KS |
453 | } |
454 | ||
7d8787b3 KS |
455 | /** |
456 | * udev_monitor_unref: | |
457 | * @udev_monitor: udev monitor | |
458 | * | |
ff109b8d | 459 | * Drop a reference of a udev monitor. If the refcount reaches zero, |
be7de409 | 460 | * the bound socket will be closed, and the resources of the monitor |
7d8787b3 KS |
461 | * will be released. |
462 | * | |
725d7e6c | 463 | * Returns: #NULL |
7d8787b3 | 464 | **/ |
20bbd54f | 465 | _public_ struct udev_monitor *udev_monitor_unref(struct udev_monitor *udev_monitor) |
ba6929f6 | 466 | { |
912541b0 | 467 | if (udev_monitor == NULL) |
20bbd54f | 468 | return NULL; |
912541b0 KS |
469 | udev_monitor->refcount--; |
470 | if (udev_monitor->refcount > 0) | |
725d7e6c | 471 | return NULL; |
912541b0 KS |
472 | if (udev_monitor->sock >= 0) |
473 | close(udev_monitor->sock); | |
474 | udev_list_cleanup(&udev_monitor->filter_subsystem_list); | |
475 | udev_list_cleanup(&udev_monitor->filter_tag_list); | |
912541b0 | 476 | free(udev_monitor); |
20bbd54f | 477 | return NULL; |
ba6929f6 KS |
478 | } |
479 | ||
7d8787b3 KS |
480 | /** |
481 | * udev_monitor_get_udev: | |
482 | * @udev_monitor: udev monitor | |
483 | * | |
b98fd840 | 484 | * Retrieve the udev library context the monitor was created with. |
7d8787b3 KS |
485 | * |
486 | * Returns: the udev library context | |
487 | **/ | |
54cf0b7f | 488 | _public_ struct udev *udev_monitor_get_udev(struct udev_monitor *udev_monitor) |
ba6929f6 | 489 | { |
912541b0 KS |
490 | if (udev_monitor == NULL) |
491 | return NULL; | |
492 | return udev_monitor->udev; | |
ba6929f6 KS |
493 | } |
494 | ||
7d8787b3 KS |
495 | /** |
496 | * udev_monitor_get_fd: | |
497 | * @udev_monitor: udev monitor | |
498 | * | |
499 | * Retrieve the socket file descriptor associated with the monitor. | |
500 | * | |
501 | * Returns: the socket file descriptor | |
502 | **/ | |
54cf0b7f | 503 | _public_ int udev_monitor_get_fd(struct udev_monitor *udev_monitor) |
ba6929f6 | 504 | { |
912541b0 | 505 | if (udev_monitor == NULL) |
994e0234 | 506 | return -EINVAL; |
912541b0 | 507 | return udev_monitor->sock; |
ba6929f6 KS |
508 | } |
509 | ||
e14bdd88 KS |
510 | static int passes_filter(struct udev_monitor *udev_monitor, struct udev_device *udev_device) |
511 | { | |
912541b0 KS |
512 | struct udev_list_entry *list_entry; |
513 | ||
514 | if (udev_list_get_entry(&udev_monitor->filter_subsystem_list) == NULL) | |
515 | goto tag; | |
516 | udev_list_entry_foreach(list_entry, udev_list_get_entry(&udev_monitor->filter_subsystem_list)) { | |
517 | const char *subsys = udev_list_entry_get_name(list_entry); | |
518 | const char *dsubsys = udev_device_get_subsystem(udev_device); | |
519 | const char *devtype; | |
520 | const char *ddevtype; | |
521 | ||
090be865 | 522 | if (!streq(dsubsys, subsys)) |
912541b0 KS |
523 | continue; |
524 | ||
525 | devtype = udev_list_entry_get_value(list_entry); | |
526 | if (devtype == NULL) | |
527 | goto tag; | |
528 | ddevtype = udev_device_get_devtype(udev_device); | |
529 | if (ddevtype == NULL) | |
530 | continue; | |
090be865 | 531 | if (streq(ddevtype, devtype)) |
912541b0 KS |
532 | goto tag; |
533 | } | |
534 | return 0; | |
28460195 KS |
535 | |
536 | tag: | |
912541b0 KS |
537 | if (udev_list_get_entry(&udev_monitor->filter_tag_list) == NULL) |
538 | return 1; | |
539 | udev_list_entry_foreach(list_entry, udev_list_get_entry(&udev_monitor->filter_tag_list)) { | |
540 | const char *tag = udev_list_entry_get_name(list_entry); | |
541 | ||
542 | if (udev_device_has_tag(udev_device, tag)) | |
543 | return 1; | |
544 | } | |
545 | return 0; | |
e14bdd88 KS |
546 | } |
547 | ||
7d8787b3 | 548 | /** |
d59f11e1 | 549 | * udev_monitor_receive_device: |
7d8787b3 KS |
550 | * @udev_monitor: udev monitor |
551 | * | |
d59f11e1 | 552 | * Receive data from the udev monitor socket, allocate a new udev |
b98fd840 | 553 | * device, fill in the received data, and return the device. |
7d8787b3 | 554 | * |
50579295 | 555 | * Only socket connections with uid=0 are accepted. |
7d8787b3 | 556 | * |
b30b4260 KS |
557 | * The monitor socket is by default set to NONBLOCK. A variant of poll() on |
558 | * the file descriptor returned by udev_monitor_get_fd() should to be used to | |
559 | * wake up when new devices arrive, or alternatively the file descriptor | |
560 | * switched into blocking mode. | |
561 | * | |
7d8787b3 | 562 | * The initial refcount is 1, and needs to be decremented to |
be7de409 | 563 | * release the resources of the udev device. |
7d8787b3 KS |
564 | * |
565 | * Returns: a new udev device, or #NULL, in case of an error | |
566 | **/ | |
54cf0b7f | 567 | _public_ struct udev_device *udev_monitor_receive_device(struct udev_monitor *udev_monitor) |
ba6929f6 | 568 | { |
912541b0 KS |
569 | struct udev_device *udev_device; |
570 | struct msghdr smsg; | |
571 | struct iovec iov; | |
572 | char cred_msg[CMSG_SPACE(sizeof(struct ucred))]; | |
573 | struct cmsghdr *cmsg; | |
b49d9b50 | 574 | union sockaddr_union snl; |
912541b0 KS |
575 | struct ucred *cred; |
576 | char buf[8192]; | |
577 | ssize_t buflen; | |
578 | ssize_t bufpos; | |
ba6929f6 | 579 | |
e14bdd88 | 580 | retry: |
912541b0 KS |
581 | if (udev_monitor == NULL) |
582 | return NULL; | |
912541b0 KS |
583 | iov.iov_base = &buf; |
584 | iov.iov_len = sizeof(buf); | |
29804cc1 | 585 | memzero(&smsg, sizeof(struct msghdr)); |
912541b0 KS |
586 | smsg.msg_iov = &iov; |
587 | smsg.msg_iovlen = 1; | |
588 | smsg.msg_control = cred_msg; | |
589 | smsg.msg_controllen = sizeof(cred_msg); | |
f6613dd9 KS |
590 | smsg.msg_name = &snl; |
591 | smsg.msg_namelen = sizeof(snl); | |
912541b0 KS |
592 | |
593 | buflen = recvmsg(udev_monitor->sock, &smsg, 0); | |
594 | if (buflen < 0) { | |
595 | if (errno != EINTR) | |
c8f8394a | 596 | udev_dbg(udev_monitor->udev, "unable to receive message\n"); |
912541b0 KS |
597 | return NULL; |
598 | } | |
599 | ||
600 | if (buflen < 32 || (size_t)buflen >= sizeof(buf)) { | |
c8f8394a | 601 | udev_dbg(udev_monitor->udev, "invalid message length\n"); |
912541b0 KS |
602 | return NULL; |
603 | } | |
604 | ||
f6613dd9 KS |
605 | if (snl.nl.nl_groups == 0) { |
606 | /* unicast message, check if we trust the sender */ | |
607 | if (udev_monitor->snl_trusted_sender.nl.nl_pid == 0 || | |
608 | snl.nl.nl_pid != udev_monitor->snl_trusted_sender.nl.nl_pid) { | |
609 | udev_dbg(udev_monitor->udev, "unicast netlink message ignored\n"); | |
610 | return NULL; | |
611 | } | |
612 | } else if (snl.nl.nl_groups == UDEV_MONITOR_KERNEL) { | |
613 | if (snl.nl.nl_pid > 0) { | |
614 | udev_dbg(udev_monitor->udev, "multicast kernel netlink message from pid %d ignored\n", | |
615 | snl.nl.nl_pid); | |
616 | return NULL; | |
912541b0 KS |
617 | } |
618 | } | |
619 | ||
620 | cmsg = CMSG_FIRSTHDR(&smsg); | |
621 | if (cmsg == NULL || cmsg->cmsg_type != SCM_CREDENTIALS) { | |
c8f8394a | 622 | udev_dbg(udev_monitor->udev, "no sender credentials received, message ignored\n"); |
912541b0 KS |
623 | return NULL; |
624 | } | |
625 | ||
626 | cred = (struct ucred *)CMSG_DATA(cmsg); | |
627 | if (cred->uid != 0) { | |
c8f8394a | 628 | udev_dbg(udev_monitor->udev, "sender uid=%d, message ignored\n", cred->uid); |
912541b0 KS |
629 | return NULL; |
630 | } | |
631 | ||
f6613dd9 KS |
632 | udev_device = udev_device_new(udev_monitor->udev); |
633 | if (udev_device == NULL) | |
634 | return NULL; | |
635 | ||
912541b0 | 636 | if (memcmp(buf, "libudev", 8) == 0) { |
f6613dd9 KS |
637 | struct udev_monitor_netlink_header *nlh; |
638 | ||
912541b0 KS |
639 | /* udev message needs proper version magic */ |
640 | nlh = (struct udev_monitor_netlink_header *) buf; | |
641 | if (nlh->magic != htonl(UDEV_MONITOR_MAGIC)) { | |
c8f8394a | 642 | udev_err(udev_monitor->udev, "unrecognized message signature (%x != %x)\n", |
f6613dd9 KS |
643 | nlh->magic, htonl(UDEV_MONITOR_MAGIC)); |
644 | udev_device_unref(udev_device); | |
912541b0 KS |
645 | return NULL; |
646 | } | |
f6613dd9 KS |
647 | if (nlh->properties_off+32 > (size_t)buflen) { |
648 | udev_device_unref(udev_device); | |
912541b0 | 649 | return NULL; |
f6613dd9 KS |
650 | } |
651 | ||
912541b0 | 652 | bufpos = nlh->properties_off; |
f6613dd9 KS |
653 | |
654 | /* devices received from udev are always initialized */ | |
655 | udev_device_set_is_initialized(udev_device); | |
912541b0 KS |
656 | } else { |
657 | /* kernel message with header */ | |
658 | bufpos = strlen(buf) + 1; | |
659 | if ((size_t)bufpos < sizeof("a@/d") || bufpos >= buflen) { | |
c8f8394a | 660 | udev_dbg(udev_monitor->udev, "invalid message length\n"); |
f6613dd9 | 661 | udev_device_unref(udev_device); |
912541b0 KS |
662 | return NULL; |
663 | } | |
664 | ||
665 | /* check message header */ | |
666 | if (strstr(buf, "@/") == NULL) { | |
c8f8394a | 667 | udev_dbg(udev_monitor->udev, "unrecognized message header\n"); |
f6613dd9 | 668 | udev_device_unref(udev_device); |
912541b0 KS |
669 | return NULL; |
670 | } | |
671 | } | |
672 | ||
912541b0 KS |
673 | udev_device_set_info_loaded(udev_device); |
674 | ||
675 | while (bufpos < buflen) { | |
676 | char *key; | |
677 | size_t keylen; | |
678 | ||
679 | key = &buf[bufpos]; | |
680 | keylen = strlen(key); | |
681 | if (keylen == 0) | |
682 | break; | |
683 | bufpos += keylen + 1; | |
684 | udev_device_add_property_from_string_parse(udev_device, key); | |
685 | } | |
686 | ||
687 | if (udev_device_add_property_from_string_parse_finish(udev_device) < 0) { | |
c8f8394a | 688 | udev_dbg(udev_monitor->udev, "missing values, invalid device\n"); |
912541b0 KS |
689 | udev_device_unref(udev_device); |
690 | return NULL; | |
691 | } | |
692 | ||
693 | /* skip device, if it does not pass the current filter */ | |
694 | if (!passes_filter(udev_monitor, udev_device)) { | |
695 | struct pollfd pfd[1]; | |
696 | int rc; | |
697 | ||
698 | udev_device_unref(udev_device); | |
699 | ||
700 | /* if something is queued, get next device */ | |
701 | pfd[0].fd = udev_monitor->sock; | |
702 | pfd[0].events = POLLIN; | |
703 | rc = poll(pfd, 1, 0); | |
704 | if (rc > 0) | |
705 | goto retry; | |
706 | return NULL; | |
707 | } | |
708 | ||
709 | return udev_device; | |
ba6929f6 | 710 | } |
9925ab04 | 711 | |
1e03b754 | 712 | int udev_monitor_send_device(struct udev_monitor *udev_monitor, |
912541b0 | 713 | struct udev_monitor *destination, struct udev_device *udev_device) |
9925ab04 | 714 | { |
912541b0 KS |
715 | const char *buf; |
716 | ssize_t blen; | |
717 | ssize_t count; | |
2d13da88 KS |
718 | struct msghdr smsg; |
719 | struct iovec iov[2]; | |
720 | const char *val; | |
721 | struct udev_monitor_netlink_header nlh; | |
722 | struct udev_list_entry *list_entry; | |
723 | uint64_t tag_bloom_bits; | |
724 | ||
912541b0 KS |
725 | blen = udev_device_get_properties_monitor_buf(udev_device, &buf); |
726 | if (blen < 32) | |
727 | return -EINVAL; | |
728 | ||
2d13da88 | 729 | /* add versioned header */ |
29804cc1 | 730 | memzero(&nlh, sizeof(struct udev_monitor_netlink_header)); |
2d13da88 KS |
731 | memcpy(nlh.prefix, "libudev", 8); |
732 | nlh.magic = htonl(UDEV_MONITOR_MAGIC); | |
733 | nlh.header_size = sizeof(struct udev_monitor_netlink_header); | |
734 | val = udev_device_get_subsystem(udev_device); | |
735 | nlh.filter_subsystem_hash = htonl(util_string_hash32(val)); | |
736 | val = udev_device_get_devtype(udev_device); | |
737 | if (val != NULL) | |
738 | nlh.filter_devtype_hash = htonl(util_string_hash32(val)); | |
739 | iov[0].iov_base = &nlh; | |
740 | iov[0].iov_len = sizeof(struct udev_monitor_netlink_header); | |
741 | ||
742 | /* add tag bloom filter */ | |
743 | tag_bloom_bits = 0; | |
744 | udev_list_entry_foreach(list_entry, udev_device_get_tags_list_entry(udev_device)) | |
745 | tag_bloom_bits |= util_string_bloom64(udev_list_entry_get_name(list_entry)); | |
746 | if (tag_bloom_bits > 0) { | |
747 | nlh.filter_tag_bloom_hi = htonl(tag_bloom_bits >> 32); | |
748 | nlh.filter_tag_bloom_lo = htonl(tag_bloom_bits & 0xffffffff); | |
912541b0 KS |
749 | } |
750 | ||
2d13da88 KS |
751 | /* add properties list */ |
752 | nlh.properties_off = iov[0].iov_len; | |
753 | nlh.properties_len = blen; | |
754 | iov[1].iov_base = (char *)buf; | |
755 | iov[1].iov_len = blen; | |
912541b0 | 756 | |
29804cc1 | 757 | memzero(&smsg, sizeof(struct msghdr)); |
2d13da88 KS |
758 | smsg.msg_iov = iov; |
759 | smsg.msg_iovlen = 2; | |
760 | /* | |
761 | * Use custom address for target, or the default one. | |
762 | * | |
763 | * If we send to a multicast group, we will get | |
764 | * ECONNREFUSED, which is expected. | |
765 | */ | |
766 | if (destination != NULL) | |
767 | smsg.msg_name = &destination->snl; | |
768 | else | |
769 | smsg.msg_name = &udev_monitor->snl_destination; | |
770 | smsg.msg_namelen = sizeof(struct sockaddr_nl); | |
771 | count = sendmsg(udev_monitor->sock, &smsg, 0); | |
c8f8394a | 772 | udev_dbg(udev_monitor->udev, "passed %zi bytes to netlink monitor %p\n", count, udev_monitor); |
2d13da88 | 773 | return count; |
9925ab04 | 774 | } |
e14bdd88 | 775 | |
ce1d6d7f KS |
776 | /** |
777 | * udev_monitor_filter_add_match_subsystem_devtype: | |
778 | * @udev_monitor: the monitor | |
779 | * @subsystem: the subsystem value to match the incoming devices against | |
214a6c79 | 780 | * @devtype: the devtype value to match the incoming devices against |
ce1d6d7f | 781 | * |
50579295 | 782 | * This filter is efficiently executed inside the kernel, and libudev subscribers |
28460195 KS |
783 | * will usually not be woken up for devices which do not match. |
784 | * | |
ce1d6d7f KS |
785 | * The filter must be installed before the monitor is switched to listening mode. |
786 | * | |
787 | * Returns: 0 on success, otherwise a negative error value. | |
788 | */ | |
54cf0b7f | 789 | _public_ int udev_monitor_filter_add_match_subsystem_devtype(struct udev_monitor *udev_monitor, const char *subsystem, const char *devtype) |
e14bdd88 | 790 | { |
912541b0 KS |
791 | if (udev_monitor == NULL) |
792 | return -EINVAL; | |
793 | if (subsystem == NULL) | |
794 | return -EINVAL; | |
795 | if (udev_list_entry_add(&udev_monitor->filter_subsystem_list, subsystem, devtype) == NULL) | |
796 | return -ENOMEM; | |
797 | return 0; | |
e14bdd88 | 798 | } |
08a7a795 | 799 | |
28460195 KS |
800 | /** |
801 | * udev_monitor_filter_add_match_tag: | |
802 | * @udev_monitor: the monitor | |
803 | * @tag: the name of a tag | |
804 | * | |
50579295 | 805 | * This filter is efficiently executed inside the kernel, and libudev subscribers |
28460195 KS |
806 | * will usually not be woken up for devices which do not match. |
807 | * | |
808 | * The filter must be installed before the monitor is switched to listening mode. | |
809 | * | |
810 | * Returns: 0 on success, otherwise a negative error value. | |
811 | */ | |
54cf0b7f | 812 | _public_ int udev_monitor_filter_add_match_tag(struct udev_monitor *udev_monitor, const char *tag) |
28460195 | 813 | { |
912541b0 KS |
814 | if (udev_monitor == NULL) |
815 | return -EINVAL; | |
816 | if (tag == NULL) | |
817 | return -EINVAL; | |
818 | if (udev_list_entry_add(&udev_monitor->filter_tag_list, tag, NULL) == NULL) | |
819 | return -ENOMEM; | |
820 | return 0; | |
28460195 KS |
821 | } |
822 | ||
ce1d6d7f KS |
823 | /** |
824 | * udev_monitor_filter_remove: | |
825 | * @udev_monitor: monitor | |
826 | * | |
827 | * Remove all filters from monitor. | |
828 | * | |
829 | * Returns: 0 on success, otherwise a negative error value. | |
830 | */ | |
54cf0b7f | 831 | _public_ int udev_monitor_filter_remove(struct udev_monitor *udev_monitor) |
08a7a795 | 832 | { |
912541b0 | 833 | static struct sock_fprog filter = { 0, NULL }; |
08a7a795 | 834 | |
912541b0 KS |
835 | udev_list_cleanup(&udev_monitor->filter_subsystem_list); |
836 | return setsockopt(udev_monitor->sock, SOL_SOCKET, SO_ATTACH_FILTER, &filter, sizeof(filter)); | |
08a7a795 | 837 | } |