]> git.ipfire.org Git - thirdparty/systemd.git/blame - src/udev/udev-rules.c
projects / thirdparty / systemd.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
portable: introduce portable_metadata_hash_ops and use it
[thirdparty/systemd.git] / src / udev / udev-rules.c
CommitLineData
e7145211 1/* SPDX-License-Identifier: GPL-2.0+ */
2232cac8 2
2232cac8 3#include <ctype.h>
4f5dd394
LP		 4#include <errno.h>
5#include <fcntl.h>
cea61f5c 6#include <fnmatch.h>
4f5dd394
LP		 7#include <limits.h>
8#include <stdbool.h>
9#include <stddef.h>
10#include <stdio.h>
11#include <stdlib.h>
12#include <string.h>
959e8b5d 13#include <time.h>
4f5dd394 14#include <unistd.h>
2232cac8 15
b5efdb8a 16#include "alloc-util.h"
2c21044f 17#include "conf-files.h"
29b5eb5a 18#include "device-private.h"
480ecb7d 19#include "device-util.h"
8fb3f009 20#include "dirent-util.h"
4f5dd394 21#include "escape.h"
3ffd4af2 22#include "fd-util.h"
fae0f8a0 23#include "fileio.h"
fdd21be6 24#include "fs-util.h"
7d50b32a 25#include "glob-util.h"
5ea78a39
YW		 26#include "libudev-util.h"
27#include "mkdir.h"
b4ba2fe3 28#include "parse-util.h"
4f5dd394 29#include "path-util.h"
88b013b2 30#include "proc-cmdline.h"
8fcde012 31#include "stat-util.h"
f4850a1d 32#include "stdio-util.h"
915bf0f6 33#include "strbuf.h"
07630cea 34#include "string-util.h"
84b6ad70 35#include "strv.h"
5ea78a39 36#include "strxcpyx.h"
f4cf2e5b 37#include "sysctl-util.h"
07a26e42 38#include "udev-builtin.h"
4f5dd394 39#include "udev.h"
b1d4f8e1 40#include "user-util.h"
07630cea 41#include "util.h"
2232cac8 42
a1525d17 43#define PREALLOC_TOKEN 2048
c7521974 44
4052400f 45struct uid_gid {
14cb109d 46 unsigned name_off;
912541b0 47 union {
a1525d17
KS		 48 uid_t uid;
49 gid_t gid;
912541b0 50 };
4052400f
KS		 51};
52
2ad8416d
ZJS		 53static const char* const rules_dirs[] = {
54 "/etc/udev/rules.d",
55 "/run/udev/rules.d",
56 UDEVLIBEXECDIR "/rules.d",
4f5dd394
LP		 57 NULL
58};
2ad8416d 59
4052400f 60struct udev_rules {
97f2d76d 61 usec_t dirs_ts_usec;
c4d44cba 62 ResolveNameTiming resolve_name_timing;
912541b0
KS		 63
64 /* every key in the rules file becomes a token */
65 struct token *tokens;
14cb109d
YW		 66 unsigned token_cur;
67 unsigned token_max;
912541b0 68
ab06eef8 69 /* all key strings are copied and de-duplicated in a single continuous string buffer */
915bf0f6 70 struct strbuf *strbuf;
912541b0
KS		 71
72 /* during rule parsing, uid/gid lookup results are cached */
73 struct uid_gid *uids;
14cb109d
YW		 74 unsigned uids_cur;
75 unsigned uids_max;
912541b0 76 struct uid_gid *gids;
14cb109d
YW		 77 unsigned gids_cur;
78 unsigned gids_max;
4052400f
KS		 79};
80
14cb109d 81static char *rules_str(struct udev_rules *rules, unsigned off) {
915bf0f6
KS		 82 return rules->strbuf->buf + off;
83}
84
14cb109d 85static unsigned rules_add_string(struct udev_rules *rules, const char *s) {
915bf0f6
KS		 86 return strbuf_add_string(rules->strbuf, s, strlen(s));
87}
88
8e3ba377 89/* KEY=="", KEY!="", KEY+="", KEY-="", KEY="", KEY:="" */
b0f7409f 90enum operation_type {
912541b0 91 OP_UNSET,
b0f7409f 92
912541b0
KS		 93 OP_MATCH,
94 OP_NOMATCH,
95 OP_MATCH_MAX,
b0f7409f 96
912541b0 97 OP_ADD,
8e3ba377 98 OP_REMOVE,
912541b0
KS		 99 OP_ASSIGN,
100 OP_ASSIGN_FINAL,
c7521974
KS		 101};
102
ac218d9c 103enum string_glob_type {
912541b0 104 GL_UNSET,
a1525d17 105 GL_PLAIN, /* no special chars */
912541b0 106 GL_GLOB, /* shell globs ?,*,[] */
a1525d17
KS		 107 GL_SPLIT, /* multi-value A|B */
108 GL_SPLIT_GLOB, /* multi-value with glob A*|B* */
109 GL_SOMETHING, /* commonly used "?*" */
ac218d9c
KS		 110};
111
32028733 112enum string_subst_type {
912541b0
KS		 113 SB_UNSET,
114 SB_NONE,
115 SB_FORMAT,
116 SB_SUBSYS,
32028733
KS		 117};
118
154a7b84 119/* tokens of a rule are sorted/handled in this order */
6880b25d 120enum token_type {
912541b0
KS		 121 TK_UNSET,
122 TK_RULE,
123
a1525d17
KS		 124 TK_M_ACTION, /* val */
125 TK_M_DEVPATH, /* val */
126 TK_M_KERNEL, /* val */
127 TK_M_DEVLINK, /* val */
128 TK_M_NAME, /* val */
129 TK_M_ENV, /* val, attr */
130 TK_M_TAG, /* val */
131 TK_M_SUBSYSTEM, /* val */
132 TK_M_DRIVER, /* val */
133 TK_M_WAITFOR, /* val */
134 TK_M_ATTR, /* val, attr */
f4cf2e5b 135 TK_M_SYSCTL, /* val, attr */
912541b0
KS		 136
137 TK_M_PARENTS_MIN,
a1525d17 138 TK_M_KERNELS, /* val */
912541b0 139 TK_M_SUBSYSTEMS, /* val */
a1525d17
KS		 140 TK_M_DRIVERS, /* val */
141 TK_M_ATTRS, /* val, attr */
142 TK_M_TAGS, /* val */
912541b0
KS		 143 TK_M_PARENTS_MAX,
144
a1525d17 145 TK_M_TEST, /* val, mode_t */
a1525d17
KS		 146 TK_M_PROGRAM, /* val */
147 TK_M_IMPORT_FILE, /* val */
148 TK_M_IMPORT_PROG, /* val */
149 TK_M_IMPORT_BUILTIN, /* val */
150 TK_M_IMPORT_DB, /* val */
151 TK_M_IMPORT_CMDLINE, /* val */
152 TK_M_IMPORT_PARENT, /* val */
153 TK_M_RESULT, /* val */
912541b0
KS		 154 TK_M_MAX,
155
156 TK_A_STRING_ESCAPE_NONE,
157 TK_A_STRING_ESCAPE_REPLACE,
158 TK_A_DB_PERSIST,
a1525d17
KS		 159 TK_A_INOTIFY_WATCH, /* int */
160 TK_A_DEVLINK_PRIO, /* int */
161 TK_A_OWNER, /* val */
162 TK_A_GROUP, /* val */
163 TK_A_MODE, /* val */
164 TK_A_OWNER_ID, /* uid_t */
165 TK_A_GROUP_ID, /* gid_t */
166 TK_A_MODE_ID, /* mode_t */
84b6ad70 167 TK_A_TAG, /* val */
a1525d17 168 TK_A_STATIC_NODE, /* val */
c26547d6 169 TK_A_SECLABEL, /* val, attr */
a1525d17 170 TK_A_ENV, /* val, attr */
a1525d17
KS		 171 TK_A_NAME, /* val */
172 TK_A_DEVLINK, /* val */
173 TK_A_ATTR, /* val, attr */
f4cf2e5b 174 TK_A_SYSCTL, /* val, attr */
83cd6b75
KS		 175 TK_A_RUN_BUILTIN, /* val, bool */
176 TK_A_RUN_PROGRAM, /* val, bool */
a1525d17 177 TK_A_GOTO, /* size_t */
912541b0
KS		 178
179 TK_END,
c7521974
KS		 180};
181
3f3aa9f5 182/* we try to pack stuff in a way that we take only 12 bytes per token */
4052400f 183struct token {
912541b0
KS		 184 union {
185 unsigned char type; /* same in rule and key */
186 struct {
187 enum token_type type:8;
188 bool can_set_name:1;
189 bool has_static_node:1;
14cb109d 190 unsigned unused:6;
912541b0 191 unsigned short token_count;
14cb109d 192 unsigned label_off;
912541b0
KS		 193 unsigned short filename_off;
194 unsigned short filename_line;
195 } rule;
196 struct {
197 enum token_type type:8;
198 enum operation_type op:8;
199 enum string_glob_type glob:8;
200 enum string_subst_type subst:4;
201 enum string_subst_type attrsubst:4;
14cb109d 202 unsigned value_off;
912541b0 203 union {
14cb109d
YW		 204 unsigned attr_off;
205 unsigned rule_goto;
49c603bd 206 mode_t mode;
912541b0
KS		 207 uid_t uid;
208 gid_t gid;
209 int devlink_prio;
912541b0
KS		 210 int watch;
211 enum udev_builtin_cmd builtin_cmd;
212 };
213 } key;
214 };
4052400f
KS		 215};
216
912541b0 217#define MAX_TK 64
4052400f 218struct rule_tmp {
912541b0
KS		 219 struct udev_rules *rules;
220 struct token rule;
221 struct token token[MAX_TK];
14cb109d 222 unsigned token_cur;
4052400f
KS		 223};
224
20e97dd3 225#if ENABLE_DEBUG_UDEV
9ec6e95b 226static const char *operation_str(enum operation_type type) {
912541b0 227 static const char *operation_strs[] = {
a1525d17
KS		 228 [OP_UNSET] = "UNSET",
229 [OP_MATCH] = "match",
230 [OP_NOMATCH] = "nomatch",
912541b0
KS		 231 [OP_MATCH_MAX] = "MATCH_MAX",
232
a1525d17 233 [OP_ADD] = "add",
8e3ba377 234 [OP_REMOVE] = "remove",
a1525d17
KS		 235 [OP_ASSIGN] = "assign",
236 [OP_ASSIGN_FINAL] = "assign-final",
49c603bd 237 };
912541b0
KS		 238
239 return operation_strs[type];
5d6a1fa6 240}
4052400f 241
9ec6e95b 242static const char *string_glob_str(enum string_glob_type type) {
912541b0 243 static const char *string_glob_strs[] = {
a1525d17
KS		 244 [GL_UNSET] = "UNSET",
245 [GL_PLAIN] = "plain",
246 [GL_GLOB] = "glob",
247 [GL_SPLIT] = "split",
248 [GL_SPLIT_GLOB] = "split-glob",
249 [GL_SOMETHING] = "split-glob",
912541b0
KS		 250 };
251
252 return string_glob_strs[type];
5d6a1fa6
KS		 253}
254
9ec6e95b 255static const char *token_str(enum token_type type) {
912541b0 256 static const char *token_strs[] = {
a1525d17
KS		 257 [TK_UNSET] = "UNSET",
258 [TK_RULE] = "RULE",
912541b0 259
a1525d17 260 [TK_M_ACTION] = "M ACTION",
912541b0 261 [TK_M_DEVPATH] = "M DEVPATH",
a1525d17 262 [TK_M_KERNEL] = "M KERNEL",
912541b0 263 [TK_M_DEVLINK] = "M DEVLINK",
a1525d17
KS		 264 [TK_M_NAME] = "M NAME",
265 [TK_M_ENV] = "M ENV",
266 [TK_M_TAG] = "M TAG",
267 [TK_M_SUBSYSTEM] = "M SUBSYSTEM",
268 [TK_M_DRIVER] = "M DRIVER",
912541b0 269 [TK_M_WAITFOR] = "M WAITFOR",
a1525d17 270 [TK_M_ATTR] = "M ATTR",
f4cf2e5b 271 [TK_M_SYSCTL] = "M SYSCTL",
912541b0 272
a1525d17 273 [TK_M_PARENTS_MIN] = "M PARENTS_MIN",
912541b0 274 [TK_M_KERNELS] = "M KERNELS",
a1525d17 275 [TK_M_SUBSYSTEMS] = "M SUBSYSTEMS",
912541b0 276 [TK_M_DRIVERS] = "M DRIVERS",
a1525d17
KS		 277 [TK_M_ATTRS] = "M ATTRS",
278 [TK_M_TAGS] = "M TAGS",
279 [TK_M_PARENTS_MAX] = "M PARENTS_MAX",
912541b0 280
a1525d17 281 [TK_M_TEST] = "M TEST",
912541b0 282 [TK_M_PROGRAM] = "M PROGRAM",
a1525d17
KS		 283 [TK_M_IMPORT_FILE] = "M IMPORT_FILE",
284 [TK_M_IMPORT_PROG] = "M IMPORT_PROG",
285 [TK_M_IMPORT_BUILTIN] = "M IMPORT_BUILTIN",
286 [TK_M_IMPORT_DB] = "M IMPORT_DB",
287 [TK_M_IMPORT_CMDLINE] = "M IMPORT_CMDLINE",
288 [TK_M_IMPORT_PARENT] = "M IMPORT_PARENT",
289 [TK_M_RESULT] = "M RESULT",
290 [TK_M_MAX] = "M MAX",
291
292 [TK_A_STRING_ESCAPE_NONE] = "A STRING_ESCAPE_NONE",
293 [TK_A_STRING_ESCAPE_REPLACE] = "A STRING_ESCAPE_REPLACE",
294 [TK_A_DB_PERSIST] = "A DB_PERSIST",
295 [TK_A_INOTIFY_WATCH] = "A INOTIFY_WATCH",
296 [TK_A_DEVLINK_PRIO] = "A DEVLINK_PRIO",
297 [TK_A_OWNER] = "A OWNER",
298 [TK_A_GROUP] = "A GROUP",
299 [TK_A_MODE] = "A MODE",
300 [TK_A_OWNER_ID] = "A OWNER_ID",
301 [TK_A_GROUP_ID] = "A GROUP_ID",
302 [TK_A_STATIC_NODE] = "A STATIC_NODE",
c26547d6 303 [TK_A_SECLABEL] = "A SECLABEL",
912541b0 304 [TK_A_MODE_ID] = "A MODE_ID",
a1525d17
KS		 305 [TK_A_ENV] = "A ENV",
306 [TK_A_TAG] = "A ENV",
307 [TK_A_NAME] = "A NAME",
912541b0 308 [TK_A_DEVLINK] = "A DEVLINK",
a1525d17 309 [TK_A_ATTR] = "A ATTR",
f4cf2e5b 310 [TK_A_SYSCTL] = "A SYSCTL",
83cd6b75
KS		 311 [TK_A_RUN_BUILTIN] = "A RUN_BUILTIN",
312 [TK_A_RUN_PROGRAM] = "A RUN_PROGRAM",
a1525d17 313 [TK_A_GOTO] = "A GOTO",
912541b0 314
a1525d17 315 [TK_END] = "END",
912541b0
KS		 316 };
317
318 return token_strs[type];
5d6a1fa6 319}
c7521974 320
9ec6e95b 321static void dump_token(struct udev_rules *rules, struct token *token) {
912541b0
KS		 322 enum token_type type = token->type;
323 enum operation_type op = token->key.op;
324 enum string_glob_type glob = token->key.glob;
fa394301
LR		 325 const char *value = rules_str(rules, token->key.value_off);
326 const char *attr = &rules->strbuf->buf[token->key.attr_off];
912541b0
KS		 327
328 switch (type) {
329 case TK_RULE:
330 {
331 const char *tks_ptr = (char *)rules->tokens;
332 const char *tk_ptr = (char *)token;
14cb109d 333 unsigned idx = (tk_ptr - tks_ptr) / sizeof(struct token);
912541b0 334
9f6445e3 335 log_debug("* RULE %s:%u, token: %u, count: %u, label: '%s'",
fa394301 336 &rules->strbuf->buf[token->rule.filename_off], token->rule.filename_line,
baa30fbc 337 idx, token->rule.token_count,
fa394301 338 &rules->strbuf->buf[token->rule.label_off]);
912541b0
KS		 339 break;
340 }
341 case TK_M_ACTION:
342 case TK_M_DEVPATH:
343 case TK_M_KERNEL:
344 case TK_M_SUBSYSTEM:
345 case TK_M_DRIVER:
346 case TK_M_WAITFOR:
347 case TK_M_DEVLINK:
348 case TK_M_NAME:
349 case TK_M_KERNELS:
350 case TK_M_SUBSYSTEMS:
351 case TK_M_DRIVERS:
352 case TK_M_TAGS:
353 case TK_M_PROGRAM:
354 case TK_M_IMPORT_FILE:
355 case TK_M_IMPORT_PROG:
356 case TK_M_IMPORT_DB:
357 case TK_M_IMPORT_CMDLINE:
358 case TK_M_IMPORT_PARENT:
359 case TK_M_RESULT:
360 case TK_A_NAME:
361 case TK_A_DEVLINK:
362 case TK_A_OWNER:
363 case TK_A_GROUP:
364 case TK_A_MODE:
83cd6b75
KS		 365 case TK_A_RUN_BUILTIN:
366 case TK_A_RUN_PROGRAM:
9f6445e3 367 log_debug("%s %s '%s'(%s)",
baa30fbc 368 token_str(type), operation_str(op), value, string_glob_str(glob));
912541b0
KS		 369 break;
370 case TK_M_IMPORT_BUILTIN:
9f6445e3 371 log_debug("%s %i '%s'", token_str(type), token->key.builtin_cmd, value);
912541b0
KS		 372 break;
373 case TK_M_ATTR:
f4cf2e5b 374 case TK_M_SYSCTL:
912541b0
KS		 375 case TK_M_ATTRS:
376 case TK_M_ENV:
377 case TK_A_ATTR:
f4cf2e5b 378 case TK_A_SYSCTL:
912541b0 379 case TK_A_ENV:
9f6445e3 380 log_debug("%s %s '%s' '%s'(%s)",
baa30fbc 381 token_str(type), operation_str(op), attr, value, string_glob_str(glob));
912541b0
KS		 382 break;
383 case TK_M_TAG:
384 case TK_A_TAG:
9f6445e3 385 log_debug("%s %s '%s'", token_str(type), operation_str(op), value);
912541b0
KS		 386 break;
387 case TK_A_STRING_ESCAPE_NONE:
388 case TK_A_STRING_ESCAPE_REPLACE:
389 case TK_A_DB_PERSIST:
9f6445e3 390 log_debug("%s", token_str(type));
912541b0
KS		 391 break;
392 case TK_M_TEST:
9f6445e3 393 log_debug("%s %s '%s'(%s) %#o",
baa30fbc 394 token_str(type), operation_str(op), value, string_glob_str(glob), token->key.mode);
912541b0
KS		 395 break;
396 case TK_A_INOTIFY_WATCH:
9f6445e3 397 log_debug("%s %u", token_str(type), token->key.watch);
912541b0
KS		 398 break;
399 case TK_A_DEVLINK_PRIO:
9f6445e3 400 log_debug("%s %u", token_str(type), token->key.devlink_prio);
912541b0
KS		 401 break;
402 case TK_A_OWNER_ID:
9f6445e3 403 log_debug("%s %s %u", token_str(type), operation_str(op), token->key.uid);
912541b0
KS		 404 break;
405 case TK_A_GROUP_ID:
9f6445e3 406 log_debug("%s %s %u", token_str(type), operation_str(op), token->key.gid);
912541b0
KS		 407 break;
408 case TK_A_MODE_ID:
9f6445e3 409 log_debug("%s %s %#o", token_str(type), operation_str(op), token->key.mode);
912541b0
KS		 410 break;
411 case TK_A_STATIC_NODE:
9f6445e3 412 log_debug("%s '%s'", token_str(type), value);
912541b0 413 break;
c26547d6 414 case TK_A_SECLABEL:
9f6445e3 415 log_debug("%s %s '%s' '%s'", token_str(type), operation_str(op), attr, value);
c26547d6 416 break;
912541b0 417 case TK_A_GOTO:
9f6445e3 418 log_debug("%s '%s' %u", token_str(type), value, token->key.rule_goto);
912541b0
KS		 419 break;
420 case TK_END:
9f6445e3 421 log_debug("* %s", token_str(type));
912541b0
KS		 422 break;
423 case TK_M_PARENTS_MIN:
424 case TK_M_PARENTS_MAX:
425 case TK_M_MAX:
426 case TK_UNSET:
8c19dc54 427 log_debug("Unknown token type %u", type);
912541b0
KS		 428 break;
429 }
4052400f 430}
154a7b84 431
9ec6e95b 432static void dump_rules(struct udev_rules *rules) {
14cb109d 433 unsigned i;
912541b0 434
8c19dc54 435 log_debug("Dumping %u (%zu bytes) tokens, %zu (%zu bytes) strings",
baa30fbc
KS		 436 rules->token_cur,
437 rules->token_cur * sizeof(struct token),
fa394301
LR		 438 rules->strbuf->nodes_count,
439 rules->strbuf->len);
f168c273 440 for (i = 0; i < rules->token_cur; i++)
912541b0 441 dump_token(rules, &rules->tokens[i]);
4052400f
KS		 442}
443#else
4052400f
KS		 444static inline void dump_token(struct udev_rules *rules, struct token *token) {}
445static inline void dump_rules(struct udev_rules *rules) {}
20e97dd3 446#endif /* ENABLE_DEBUG_UDEV */
c7521974 447
9ec6e95b 448static int add_token(struct udev_rules *rules, struct token *token) {
912541b0
KS		 449 /* grow buffer if needed */
450 if (rules->token_cur+1 >= rules->token_max) {
451 struct token *tokens;
14cb109d 452 unsigned add;
912541b0
KS		 453
454 /* double the buffer size */
455 add = rules->token_max;
456 if (add < 8)
457 add = 8;
458
62d74c78 459 tokens = reallocarray(rules->tokens, rules->token_max + add, sizeof(struct token));
67e4b385 460 if (!tokens)
912541b0 461 return -1;
912541b0
KS		 462 rules->tokens = tokens;
463 rules->token_max += add;
464 }
465 memcpy(&rules->tokens[rules->token_cur], token, sizeof(struct token));
466 rules->token_cur++;
467 return 0;
c7521974 468}
a27cd06c 469
b4ba2fe3 470static void log_unknown_owner(sd_device *dev, int error, const char *entity, const char *owner) {
2da03cbf 471 if (IN_SET(abs(error), ENOENT, ESRCH))
b4ba2fe3 472 log_device_error(dev, "Specified %s '%s' unknown", entity, owner);
2da03cbf 473 else
b4ba2fe3 474 log_device_error_errno(dev, error, "Failed to resolve %s '%s': %m", entity, owner);
2da03cbf
ZJS		 475}
476
9ec6e95b 477static uid_t add_uid(struct udev_rules *rules, const char *owner) {
14cb109d 478 unsigned i;
23bf8dd7 479 uid_t uid = 0;
14cb109d 480 unsigned off;
23bf8dd7 481 int r;
912541b0
KS		 482
483 /* lookup, if we know it already */
484 for (i = 0; i < rules->uids_cur; i++) {
485 off = rules->uids[i].name_off;
915bf0f6 486 if (streq(rules_str(rules, off), owner)) {
912541b0 487 uid = rules->uids[i].uid;
912541b0
KS		 488 return uid;
489 }
490 }
fafff8f1 491 r = get_user_creds(&owner, &uid, NULL, NULL, NULL, USER_CREDS_ALLOW_MISSING);
2da03cbf 492 if (r < 0)
b4ba2fe3 493 log_unknown_owner(NULL, r, "user", owner);
912541b0
KS		 494
495 /* grow buffer if needed */
496 if (rules->uids_cur+1 >= rules->uids_max) {
497 struct uid_gid *uids;
14cb109d 498 unsigned add;
912541b0
KS		 499
500 /* double the buffer size */
501 add = rules->uids_max;
502 if (add < 1)
503 add = 8;
504
62d74c78 505 uids = reallocarray(rules->uids, rules->uids_max + add, sizeof(struct uid_gid));
67e4b385 506 if (!uids)
912541b0 507 return uid;
912541b0
KS		 508 rules->uids = uids;
509 rules->uids_max += add;
510 }
511 rules->uids[rules->uids_cur].uid = uid;
915bf0f6 512 off = rules_add_string(rules, owner);
912541b0
KS		 513 if (off <= 0)
514 return uid;
515 rules->uids[rules->uids_cur].name_off = off;
516 rules->uids_cur++;
517 return uid;
154a7b84
KS		 518}
519
9ec6e95b 520static gid_t add_gid(struct udev_rules *rules, const char *group) {
14cb109d 521 unsigned i;
23bf8dd7 522 gid_t gid = 0;
14cb109d 523 unsigned off;
23bf8dd7 524 int r;
912541b0
KS		 525
526 /* lookup, if we know it already */
527 for (i = 0; i < rules->gids_cur; i++) {
528 off = rules->gids[i].name_off;
915bf0f6 529 if (streq(rules_str(rules, off), group)) {
912541b0 530 gid = rules->gids[i].gid;
912541b0
KS		 531 return gid;
532 }
533 }
fafff8f1 534 r = get_group_creds(&group, &gid, USER_CREDS_ALLOW_MISSING);
2da03cbf 535 if (r < 0)
b4ba2fe3 536 log_unknown_owner(NULL, r, "group", group);
912541b0
KS		 537
538 /* grow buffer if needed */
539 if (rules->gids_cur+1 >= rules->gids_max) {
540 struct uid_gid *gids;
14cb109d 541 unsigned add;
912541b0
KS		 542
543 /* double the buffer size */
544 add = rules->gids_max;
545 if (add < 1)
546 add = 8;
547
62d74c78 548 gids = reallocarray(rules->gids, rules->gids_max + add, sizeof(struct uid_gid));
67e4b385 549 if (!gids)
912541b0 550 return gid;
912541b0
KS		 551 rules->gids = gids;
552 rules->gids_max += add;
553 }
554 rules->gids[rules->gids_cur].gid = gid;
915bf0f6 555 off = rules_add_string(rules, group);
912541b0
KS		 556 if (off <= 0)
557 return gid;
558 rules->gids[rules->gids_cur].name_off = off;
559 rules->gids_cur++;
560 return gid;
154a7b84
KS		 561}
562
29b5eb5a 563static int import_property_from_string(sd_device *dev, char *line) {
912541b0
KS		 564 char *key;
565 char *val;
566 size_t len;
567
568 /* find key */
569 key = line;
570 while (isspace(key[0]))
571 key++;
572
573 /* comment or empty line */
4c701096 574 if (IN_SET(key[0], '#', '\0'))
29b5eb5a 575 return 0;
912541b0
KS		 576
577 /* split key/value */
578 val = strchr(key, '=');
29b5eb5a
YW		 579 if (!val)
580 return -EINVAL;
912541b0
KS		 581 val[0] = '\0';
582 val++;
583
584 /* find value */
585 while (isspace(val[0]))
586 val++;
587
588 /* terminate key */
589 len = strlen(key);
590 if (len == 0)
29b5eb5a 591 return -EINVAL;
912541b0
KS		 592 while (isspace(key[len-1]))
593 len--;
594 key[len] = '\0';
595
596 /* terminate value */
597 len = strlen(val);
598 if (len == 0)
29b5eb5a 599 return -EINVAL;
912541b0
KS		 600 while (isspace(val[len-1]))
601 len--;
602 val[len] = '\0';
603
604 if (len == 0)
29b5eb5a 605 return -EINVAL;
912541b0
KS		 606
607 /* unquote */
4c701096 608 if (IN_SET(val[0], '"', '\'')) {
baaa35ad
ZJS		 609 if (len == 1 || val[len-1] != val[0])
610 return log_debug_errno(SYNTHETIC_ERRNO(EINVAL),
8c19dc54 611 "Inconsistent quoting: '%s', skip",
baaa35ad 612 line);
912541b0
KS		 613 val[len-1] = '\0';
614 val++;
615 }
616
29b5eb5a 617 return device_add_property(dev, key, val);
be4bedd1
KS		 618}
619
13c7b75f 620static int import_file_into_properties(sd_device *dev, const char *filename) {
fae0f8a0
LP		 621 _cleanup_fclose_ FILE *f = NULL;
622 int r;
912541b0 623
47ef94ac 624 f = fopen(filename, "re");
fae0f8a0
LP		 625 if (!f)
626 return -errno;
627
628 for (;;) {
629 _cleanup_free_ char *line = NULL;
630
631 r = read_line(f, LONG_LINE_MAX, &line);
632 if (r < 0)
633 return r;
634 if (r == 0)
635 break;
636
13c7b75f 637 (void) import_property_from_string(dev, line);
fae0f8a0
LP		 638 }
639
912541b0 640 return 0;
bd0ed2ff
KS		 641}
642
dd5eddd2
KS		 643static int import_program_into_properties(struct udev_event *event,
644 usec_t timeout_usec,
8314de1d 645 const char *program) {
912541b0
KS		 646 char result[UTIL_LINE_SIZE];
647 char *line;
648 int err;
649
66f737b4 650 err = udev_event_spawn(event, timeout_usec, true, program, result, sizeof(result));
912541b0
KS		 651 if (err < 0)
652 return err;
653
654 line = result;
67e4b385 655 while (line) {
912541b0
KS		 656 char *pos;
657
658 pos = strchr(line, '\n');
67e4b385 659 if (pos) {
912541b0
KS		 660 pos[0] = '\0';
661 pos = &pos[1];
662 }
cf28ad46 663 (void) import_property_from_string(event->dev, line);
912541b0
KS		 664 line = pos;
665 }
666 return 0;
319c6700
KS		 667}
668
1ce7fecb
YW		 669static int import_parent_into_properties(sd_device *dev, const char *filter) {
670 const char *key, *val;
671 sd_device *parent;
672 int r;
912541b0 673
3b64e4d4
TG		 674 assert(dev);
675 assert(filter);
676
1ce7fecb
YW		 677 r = sd_device_get_parent(dev, &parent);
678 if (r < 0)
679 return r;
912541b0 680
1ce7fecb 681 FOREACH_DEVICE_PROPERTY(parent, key, val)
ece174c5 682 if (fnmatch(filter, key, 0) == 0)
1ce7fecb 683 device_add_property(dev, key, val);
912541b0 684 return 0;
e2ecb34f
KS		 685}
686
f4850a1d
ZJS		 687static void attr_subst_subdir(char *attr, size_t len) {
688 const char *pos, *tail, *path;
689 _cleanup_closedir_ DIR *dir = NULL;
690 struct dirent *dent;
691
692 pos = strstr(attr, "/*/");
693 if (!pos)
694 return;
695
696 tail = pos + 2;
697 path = strndupa(attr, pos - attr + 1); /* include slash at end */
698 dir = opendir(path);
67e4b385 699 if (!dir)
f4850a1d
ZJS		 700 return;
701
8fb3f009 702 FOREACH_DIRENT_ALL(dent, dir, break)
f4850a1d 703 if (dent->d_name[0] != '.') {
916a8d43 704 char n[strlen(dent->d_name) + strlen(tail) + 1];
f4850a1d 705
916a8d43
ZJS		 706 strscpyl(n, sizeof n, dent->d_name, tail, NULL);
707 if (faccessat(dirfd(dir), n, F_OK, 0) == 0) {
f4850a1d
ZJS		 708 strscpyl(attr, len, path, n, NULL);
709 break;
912541b0 710 }
912541b0 711 }
0ea5e96e
KS		 712}
713
2024ed61 714static int get_key(char **line, char **key, enum operation_type *op, char **value) {
912541b0
KS		 715 char *linepos;
716 char *temp;
7e760b79 717 unsigned i, j;
912541b0
KS		 718
719 linepos = *line;
67e4b385 720 if (!linepos || linepos[0] == '\0')
912541b0
KS		 721 return -1;
722
723 /* skip whitespace */
724 while (isspace(linepos[0]) || linepos[0] == ',')
725 linepos++;
726
727 /* get the key */
728 if (linepos[0] == '\0')
729 return -1;
730 *key = linepos;
731
732 for (;;) {
733 linepos++;
734 if (linepos[0] == '\0')
735 return -1;
736 if (isspace(linepos[0]))
737 break;
738 if (linepos[0] == '=')
739 break;
4c701096 740 if (IN_SET(linepos[0], '+', '-', '!', ':'))
912541b0
KS		 741 if (linepos[1] == '=')
742 break;
743 }
744
745 /* remember end of key */
746 temp = linepos;
747
748 /* skip whitespace after key */
749 while (isspace(linepos[0]))
750 linepos++;
751 if (linepos[0] == '\0')
752 return -1;
753
754 /* get operation type */
755 if (linepos[0] == '=' && linepos[1] == '=') {
756 *op = OP_MATCH;
757 linepos += 2;
758 } else if (linepos[0] == '!' && linepos[1] == '=') {
759 *op = OP_NOMATCH;
760 linepos += 2;
761 } else if (linepos[0] == '+' && linepos[1] == '=') {
762 *op = OP_ADD;
763 linepos += 2;
8e3ba377
DH		 764 } else if (linepos[0] == '-' && linepos[1] == '=') {
765 *op = OP_REMOVE;
766 linepos += 2;
912541b0
KS		 767 } else if (linepos[0] == '=') {
768 *op = OP_ASSIGN;
769 linepos++;
770 } else if (linepos[0] == ':' && linepos[1] == '=') {
771 *op = OP_ASSIGN_FINAL;
772 linepos += 2;
773 } else
774 return -1;
775
776 /* terminate key */
777 temp[0] = '\0';
778
779 /* skip whitespace after operator */
780 while (isspace(linepos[0]))
781 linepos++;
782 if (linepos[0] == '\0')
783 return -1;
784
785 /* get the value */
786 if (linepos[0] == '"')
787 linepos++;
788 else
789 return -1;
790 *value = linepos;
791
792 /* terminate */
7e760b79
FB		 793 for (i = 0, j = 0; ; i++, j++) {
794
795 if (linepos[i] == '"')
796 break;
797
798 if (linepos[i] == '\0')
799 return -1;
800
801 /* double quotes can be escaped */
802 if (linepos[i] == '\\')
803 if (linepos[i+1] == '"')
804 i++;
805
806 linepos[j] = linepos[i];
807 }
808 linepos[j] = '\0';
912541b0
KS		 809
810 /* move line to next key */
7e760b79 811 *line = linepos + i + 1;
912541b0 812 return 0;
6880b25d 813}
95776dc6 814
6880b25d 815/* extract possible KEY{attr} */
2024ed61 816static const char *get_key_attribute(char *str) {
912541b0
KS		 817 char *pos;
818 char *attr;
819
820 attr = strchr(str, '{');
67e4b385 821 if (attr) {
912541b0
KS		 822 attr++;
823 pos = strchr(attr, '}');
67e4b385 824 if (!pos) {
25f027c5 825 log_error("Missing closing brace for format");
912541b0
KS		 826 return NULL;
827 }
828 pos[0] = '\0';
912541b0
KS		 829 return attr;
830 }
831 return NULL;
6880b25d 832}
95776dc6 833
19a8e656
ZJS		 834static void rule_add_key(struct rule_tmp *rule_tmp, enum token_type type,
835 enum operation_type op,
836 const char *value, const void *data) {
837 struct token *token = rule_tmp->token + rule_tmp->token_cur;
912541b0
KS		 838 const char *attr = NULL;
839
19a8e656 840 assert(rule_tmp->token_cur < ELEMENTSOF(rule_tmp->token));
29804cc1 841 memzero(token, sizeof(struct token));
912541b0
KS		 842
843 switch (type) {
844 case TK_M_ACTION:
845 case TK_M_DEVPATH:
846 case TK_M_KERNEL:
847 case TK_M_SUBSYSTEM:
848 case TK_M_DRIVER:
849 case TK_M_WAITFOR:
850 case TK_M_DEVLINK:
851 case TK_M_NAME:
852 case TK_M_KERNELS:
853 case TK_M_SUBSYSTEMS:
854 case TK_M_DRIVERS:
855 case TK_M_TAGS:
856 case TK_M_PROGRAM:
857 case TK_M_IMPORT_FILE:
858 case TK_M_IMPORT_PROG:
859 case TK_M_IMPORT_DB:
860 case TK_M_IMPORT_CMDLINE:
861 case TK_M_IMPORT_PARENT:
862 case TK_M_RESULT:
863 case TK_A_OWNER:
864 case TK_A_GROUP:
865 case TK_A_MODE:
8a173387 866 case TK_A_DEVLINK:
912541b0
KS		 867 case TK_A_NAME:
868 case TK_A_GOTO:
869 case TK_M_TAG:
870 case TK_A_TAG:
d6f116a7 871 case TK_A_STATIC_NODE:
915bf0f6 872 token->key.value_off = rules_add_string(rule_tmp->rules, value);
912541b0
KS		 873 break;
874 case TK_M_IMPORT_BUILTIN:
915bf0f6 875 token->key.value_off = rules_add_string(rule_tmp->rules, value);
912541b0
KS		 876 token->key.builtin_cmd = *(enum udev_builtin_cmd *)data;
877 break;
878 case TK_M_ENV:
879 case TK_M_ATTR:
f4cf2e5b 880 case TK_M_SYSCTL:
912541b0
KS		 881 case TK_M_ATTRS:
882 case TK_A_ATTR:
f4cf2e5b 883 case TK_A_SYSCTL:
912541b0 884 case TK_A_ENV:
c26547d6 885 case TK_A_SECLABEL:
912541b0 886 attr = data;
915bf0f6
KS		 887 token->key.value_off = rules_add_string(rule_tmp->rules, value);
888 token->key.attr_off = rules_add_string(rule_tmp->rules, attr);
912541b0 889 break;
912541b0 890 case TK_M_TEST:
915bf0f6 891 token->key.value_off = rules_add_string(rule_tmp->rules, value);
67e4b385 892 if (data)
912541b0
KS		 893 token->key.mode = *(mode_t *)data;
894 break;
895 case TK_A_STRING_ESCAPE_NONE:
896 case TK_A_STRING_ESCAPE_REPLACE:
897 case TK_A_DB_PERSIST:
898 break;
83cd6b75 899 case TK_A_RUN_BUILTIN:
83cd6b75 900 case TK_A_RUN_PROGRAM:
4590cfe4 901 token->key.builtin_cmd = *(enum udev_builtin_cmd *)data;
915bf0f6 902 token->key.value_off = rules_add_string(rule_tmp->rules, value);
912541b0
KS		 903 break;
904 case TK_A_INOTIFY_WATCH:
905 case TK_A_DEVLINK_PRIO:
906 token->key.devlink_prio = *(int *)data;
907 break;
908 case TK_A_OWNER_ID:
909 token->key.uid = *(uid_t *)data;
910 break;
911 case TK_A_GROUP_ID:
912 token->key.gid = *(gid_t *)data;
913 break;
914 case TK_A_MODE_ID:
915 token->key.mode = *(mode_t *)data;
916 break;
912541b0
KS		 917 case TK_RULE:
918 case TK_M_PARENTS_MIN:
919 case TK_M_PARENTS_MAX:
920 case TK_M_MAX:
921 case TK_END:
922 case TK_UNSET:
19a8e656 923 assert_not_reached("wrong type");
912541b0
KS		 924 }
925
67e4b385 926 if (value && type < TK_M_MAX) {
912541b0
KS		 927 /* check if we need to split or call fnmatch() while matching rules */
928 enum string_glob_type glob;
67e4b385 929 bool has_split, has_glob;
912541b0 930
67e4b385 931 has_split = strchr(value, '|');
e3e0314b 932 has_glob = string_is_glob(value);
67e4b385 933 if (has_split && has_glob)
912541b0 934 glob = GL_SPLIT_GLOB;
67e4b385 935 else if (has_split)
912541b0 936 glob = GL_SPLIT;
67e4b385 937 else if (has_glob) {
33502ffe 938 if (streq(value, "?*"))
912541b0
KS		 939 glob = GL_SOMETHING;
940 else
941 glob = GL_GLOB;
67e4b385 942 } else
912541b0 943 glob = GL_PLAIN;
67e4b385 944
912541b0
KS		 945 token->key.glob = glob;
946 }
947
67e4b385 948 if (value && type > TK_M_MAX) {
912541b0
KS		 949 /* check if assigned value has substitution chars */
950 if (value[0] == '[')
951 token->key.subst = SB_SUBSYS;
67e4b385 952 else if (strchr(value, '%') || strchr(value, '$'))
912541b0
KS		 953 token->key.subst = SB_FORMAT;
954 else
955 token->key.subst = SB_NONE;
956 }
957
67e4b385 958 if (attr) {
d6f116a7 959 /* check if property/attribute name has substitution chars */
912541b0
KS		 960 if (attr[0] == '[')
961 token->key.attrsubst = SB_SUBSYS;
67e4b385 962 else if (strchr(attr, '%') || strchr(attr, '$'))
912541b0
KS		 963 token->key.attrsubst = SB_FORMAT;
964 else
965 token->key.attrsubst = SB_NONE;
966 }
967
968 token->key.type = type;
969 token->key.op = op;
970 rule_tmp->token_cur++;
6880b25d 971}
e57e7bc1 972
9ec6e95b 973static int sort_token(struct udev_rules *rules, struct rule_tmp *rule_tmp) {
14cb109d
YW		 974 unsigned i;
975 unsigned start = 0;
976 unsigned end = rule_tmp->token_cur;
912541b0
KS		 977
978 for (i = 0; i < rule_tmp->token_cur; i++) {
979 enum token_type next_val = TK_UNSET;
14cb109d
YW		 980 unsigned next_idx = 0;
981 unsigned j;
912541b0
KS		 982
983 /* find smallest value */
984 for (j = start; j < end; j++) {
985 if (rule_tmp->token[j].type == TK_UNSET)
986 continue;
987 if (next_val == TK_UNSET || rule_tmp->token[j].type < next_val) {
988 next_val = rule_tmp->token[j].type;
989 next_idx = j;
990 }
991 }
992
993 /* add token and mark done */
994 if (add_token(rules, &rule_tmp->token[next_idx]) != 0)
995 return -1;
996 rule_tmp->token[next_idx].type = TK_UNSET;
997
998 /* shrink range */
999 if (next_idx == start)
1000 start++;
1001 if (next_idx+1 == end)
1002 end--;
1003 }
1004 return 0;
724257d9
GKH		 1005}
1006
8c19dc54
YW		 1007#define LOG_RULE_FULL(level, fmt, ...) log_full(level, "%s:%u: " fmt, filename, lineno, ##__VA_ARGS__)
1008#define LOG_RULE_ERROR(fmt, ...) LOG_RULE_FULL(LOG_ERR, fmt, ##__VA_ARGS__)
1009#define LOG_RULE_WARNING(fmt, ...) LOG_RULE_FULL(LOG_WARNING, fmt, ##__VA_ARGS__)
1010#define LOG_RULE_DEBUG(fmt, ...) LOG_RULE_FULL(LOG_DEBUG, fmt, ##__VA_ARGS__)
19a8e656
ZJS		 1011#define LOG_AND_RETURN(fmt, ...) { LOG_RULE_ERROR(fmt, __VA_ARGS__); return; }
1012
4fd6af76 1013static void add_rule(struct udev_rules *rules, char *line,
14cb109d 1014 const char *filename, unsigned filename_off, unsigned lineno) {
912541b0 1015 char *linepos;
04a9d3a0 1016 const char *attr;
84198c18
TG		 1017 struct rule_tmp rule_tmp = {
1018 .rules = rules,
1019 .rule.type = TK_RULE,
1020 };
912541b0 1021
775f8b3c
KS		 1022 /* the offset in the rule is limited to unsigned short */
1023 if (filename_off < USHRT_MAX)
1024 rule_tmp.rule.rule.filename_off = filename_off;
912541b0
KS		 1025 rule_tmp.rule.rule.filename_line = lineno;
1026
1027 linepos = line;
1028 for (;;) {
1029 char *key;
1030 char *value;
1031 enum operation_type op;
1032
2024ed61 1033 if (get_key(&linepos, &key, &op, &value) != 0) {
3cf0f8f7
DR		 1034 /* Avoid erroring on trailing whitespace. This is probably rare
1035 * so save the work for the error case instead of always trying
1036 * to strip the trailing whitespace with strstrip(). */
1037 while (isblank(*linepos))
1038 linepos++;
1039
e736cf35
DR		 1040 /* If we aren't at the end of the line, this is a parsing error.
1041 * Make a best effort to describe where the problem is. */
2783fe06 1042 if (!strchr(NEWLINE, *linepos)) {
6501b52d 1043 char buf[2] = {*linepos};
1291bc89
ZJS		 1044 _cleanup_free_ char *tmp;
1045
1046 tmp = cescape(buf);
8c19dc54 1047 LOG_RULE_ERROR("Invalid key/value pair, starting at character %tu ('%s')", linepos - line + 1, tmp);
6501b52d 1048 if (*linepos == '#')
8c19dc54 1049 LOG_RULE_ERROR("Hint: comments can only start at beginning of line");
1291bc89 1050 }
912541b0 1051 break;
e736cf35 1052 }
912541b0 1053
19a8e656 1054 if (rule_tmp.token_cur >= ELEMENTSOF(rule_tmp.token))
8c19dc54 1055 LOG_AND_RETURN("Temporary rule array too small, aborting event processing with %u items", rule_tmp.token_cur);
19a8e656 1056
33502ffe 1057 if (streq(key, "ACTION")) {
19a8e656 1058 if (op > OP_MATCH_MAX)
8c19dc54 1059 LOG_AND_RETURN("Invalid %s operation", key);
19a8e656 1060
912541b0 1061 rule_add_key(&rule_tmp, TK_M_ACTION, op, value, NULL);
912541b0 1062
99f16bb8 1063 } else if (streq(key, "DEVPATH")) {
19a8e656 1064 if (op > OP_MATCH_MAX)
8c19dc54 1065 LOG_AND_RETURN("Invalid %s operation", key);
19a8e656 1066
912541b0 1067 rule_add_key(&rule_tmp, TK_M_DEVPATH, op, value, NULL);
912541b0 1068
99f16bb8 1069 } else if (streq(key, "KERNEL")) {
19a8e656 1070 if (op > OP_MATCH_MAX)
8c19dc54 1071 LOG_AND_RETURN("Invalid %s operation", key);
19a8e656 1072
912541b0 1073 rule_add_key(&rule_tmp, TK_M_KERNEL, op, value, NULL);
912541b0 1074
99f16bb8 1075 } else if (streq(key, "SUBSYSTEM")) {
19a8e656 1076 if (op > OP_MATCH_MAX)
8c19dc54 1077 LOG_AND_RETURN("Invalid %s operation", key);
19a8e656 1078
912541b0 1079 /* bus, class, subsystem events should all be the same */
99f16bb8
ZJS		 1080 if (STR_IN_SET(value, "subsystem", "bus", "class")) {
1081 if (!streq(value, "subsystem"))
19a8e656
ZJS		 1082 LOG_RULE_WARNING("'%s' must be specified as 'subsystem'; please fix", value);
1083
912541b0
KS		 1084 rule_add_key(&rule_tmp, TK_M_SUBSYSTEM, op, "subsystem|class|bus", NULL);
1085 } else
1086 rule_add_key(&rule_tmp, TK_M_SUBSYSTEM, op, value, NULL);
912541b0 1087
99f16bb8 1088 } else if (streq(key, "DRIVER")) {
19a8e656 1089 if (op > OP_MATCH_MAX)
8c19dc54 1090 LOG_AND_RETURN("Invalid %s operation", key);
19a8e656 1091
912541b0 1092 rule_add_key(&rule_tmp, TK_M_DRIVER, op, value, NULL);
912541b0 1093
99f16bb8 1094 } else if (startswith(key, "ATTR{")) {
2024ed61 1095 attr = get_key_attribute(key + STRLEN("ATTR"));
67e4b385 1096 if (!attr)
8c19dc54 1097 LOG_AND_RETURN("Failed to parse %s attribute", "ATTR");
19a8e656
ZJS		 1098
1099 if (op == OP_REMOVE)
8c19dc54 1100 LOG_AND_RETURN("Invalid %s operation", "ATTR");
19a8e656 1101
f4cf2e5b 1102 if (op < OP_MATCH_MAX)
912541b0 1103 rule_add_key(&rule_tmp, TK_M_ATTR, op, value, attr);
f4cf2e5b 1104 else
912541b0 1105 rule_add_key(&rule_tmp, TK_A_ATTR, op, value, attr);
f4cf2e5b 1106
99f16bb8 1107 } else if (startswith(key, "SYSCTL{")) {
2024ed61 1108 attr = get_key_attribute(key + STRLEN("SYSCTL"));
67e4b385 1109 if (!attr)
8c19dc54 1110 LOG_AND_RETURN("Failed to parse %s attribute", "ATTR");
19a8e656
ZJS		 1111
1112 if (op == OP_REMOVE)
8c19dc54 1113 LOG_AND_RETURN("Invalid %s operation", "ATTR");
19a8e656 1114
f4cf2e5b
KS		 1115 if (op < OP_MATCH_MAX)
1116 rule_add_key(&rule_tmp, TK_M_SYSCTL, op, value, attr);
1117 else
1118 rule_add_key(&rule_tmp, TK_A_SYSCTL, op, value, attr);
912541b0 1119
99f16bb8 1120 } else if (startswith(key, "SECLABEL{")) {
2024ed61 1121 attr = get_key_attribute(key + STRLEN("SECLABEL"));
67e4b385 1122 if (!attr)
8c19dc54 1123 LOG_AND_RETURN("Failed to parse %s attribute", "SECLABEL");
19a8e656
ZJS		 1124
1125 if (op == OP_REMOVE)
8c19dc54 1126 LOG_AND_RETURN("Invalid %s operation", "SECLABEL");
c26547d6
KS		 1127
1128 rule_add_key(&rule_tmp, TK_A_SECLABEL, op, value, attr);
c26547d6 1129
99f16bb8 1130 } else if (streq(key, "KERNELS")) {
19a8e656 1131 if (op > OP_MATCH_MAX)
8c19dc54 1132 LOG_AND_RETURN("Invalid %s operation", key);
19a8e656 1133
912541b0 1134 rule_add_key(&rule_tmp, TK_M_KERNELS, op, value, NULL);
912541b0 1135
99f16bb8 1136 } else if (streq(key, "SUBSYSTEMS")) {
19a8e656 1137 if (op > OP_MATCH_MAX)
8c19dc54 1138 LOG_AND_RETURN("Invalid %s operation", key);
19a8e656 1139
912541b0 1140 rule_add_key(&rule_tmp, TK_M_SUBSYSTEMS, op, value, NULL);
912541b0 1141
99f16bb8 1142 } else if (streq(key, "DRIVERS")) {
19a8e656 1143 if (op > OP_MATCH_MAX)
8c19dc54 1144 LOG_AND_RETURN("Invalid %s operation", key);
19a8e656 1145
912541b0 1146 rule_add_key(&rule_tmp, TK_M_DRIVERS, op, value, NULL);
912541b0 1147
99f16bb8 1148 } else if (startswith(key, "ATTRS{")) {
19a8e656 1149 if (op > OP_MATCH_MAX)
8c19dc54 1150 LOG_AND_RETURN("Invalid %s operation", "ATTRS");
19a8e656 1151
2024ed61 1152 attr = get_key_attribute(key + STRLEN("ATTRS"));
67e4b385 1153 if (!attr)
8c19dc54 1154 LOG_AND_RETURN("Failed to parse %s attribute", "ATTRS");
19a8e656 1155
33502ffe 1156 if (startswith(attr, "device/"))
19a8e656 1157 LOG_RULE_WARNING("'device' link may not be available in future kernels; please fix");
67e4b385 1158 if (strstr(attr, "../"))
8c19dc54 1159 LOG_RULE_WARNING("Direct reference to parent sysfs directory, may break in future kernels; please fix");
912541b0 1160 rule_add_key(&rule_tmp, TK_M_ATTRS, op, value, attr);
912541b0 1161
99f16bb8 1162 } else if (streq(key, "TAGS")) {
19a8e656 1163 if (op > OP_MATCH_MAX)
8c19dc54 1164 LOG_AND_RETURN("Invalid %s operation", key);
19a8e656 1165
912541b0 1166 rule_add_key(&rule_tmp, TK_M_TAGS, op, value, NULL);
912541b0 1167
99f16bb8 1168 } else if (startswith(key, "ENV{")) {
2024ed61 1169 attr = get_key_attribute(key + STRLEN("ENV"));
67e4b385 1170 if (!attr)
8c19dc54 1171 LOG_AND_RETURN("Failed to parse %s attribute", "ENV");
19a8e656
ZJS		 1172
1173 if (op == OP_REMOVE)
8c19dc54 1174 LOG_AND_RETURN("Invalid %s operation", "ENV");
19a8e656
ZJS		 1175
1176 if (op < OP_MATCH_MAX)
1177 rule_add_key(&rule_tmp, TK_M_ENV, op, value, attr);
1178 else {
99f16bb8
ZJS		 1179 if (STR_IN_SET(attr,
1180 "ACTION",
1181 "SUBSYSTEM",
1182 "DEVTYPE",
1183 "MAJOR",
1184 "MINOR",
1185 "DRIVER",
1186 "IFINDEX",
1187 "DEVNAME",
1188 "DEVLINKS",
1189 "DEVPATH",
19a8e656 1190 "TAGS"))
8c19dc54 1191 LOG_AND_RETURN("Invalid ENV attribute, '%s' cannot be set", attr);
19a8e656
ZJS		 1192
1193 rule_add_key(&rule_tmp, TK_A_ENV, op, value, attr);
912541b0 1194 }
912541b0 1195
99f16bb8 1196 } else if (streq(key, "TAG")) {
912541b0
KS		 1197 if (op < OP_MATCH_MAX)
1198 rule_add_key(&rule_tmp, TK_M_TAG, op, value, NULL);
1199 else
1200 rule_add_key(&rule_tmp, TK_A_TAG, op, value, NULL);
912541b0 1201
99f16bb8 1202 } else if (streq(key, "PROGRAM")) {
19a8e656 1203 if (op == OP_REMOVE)
8c19dc54 1204 LOG_AND_RETURN("Invalid %s operation", key);
19a8e656 1205
912541b0 1206 rule_add_key(&rule_tmp, TK_M_PROGRAM, op, value, NULL);
912541b0 1207
99f16bb8 1208 } else if (streq(key, "RESULT")) {
19a8e656 1209 if (op > OP_MATCH_MAX)
8c19dc54 1210 LOG_AND_RETURN("Invalid %s operation", key);
19a8e656 1211
912541b0 1212 rule_add_key(&rule_tmp, TK_M_RESULT, op, value, NULL);
912541b0 1213
99f16bb8 1214 } else if (startswith(key, "IMPORT")) {
2024ed61 1215 attr = get_key_attribute(key + STRLEN("IMPORT"));
67e4b385 1216 if (!attr) {
8c19dc54 1217 LOG_RULE_WARNING("Ignoring IMPORT{} with missing type");
912541b0
KS		 1218 continue;
1219 }
19a8e656 1220 if (op == OP_REMOVE)
8c19dc54 1221 LOG_AND_RETURN("Invalid %s operation", "IMPORT");
19a8e656 1222
33502ffe 1223 if (streq(attr, "program")) {
912541b0
KS		 1224 /* find known built-in command */
1225 if (value[0] != '/') {
19a8e656 1226 const enum udev_builtin_cmd cmd = udev_builtin_lookup(value);
912541b0 1227
c45b369d 1228 if (cmd >= 0) {
19a8e656 1229 LOG_RULE_DEBUG("IMPORT found builtin '%s', replacing", value);
912541b0
KS		 1230 rule_add_key(&rule_tmp, TK_M_IMPORT_BUILTIN, op, value, &cmd);
1231 continue;
1232 }
1233 }
912541b0 1234 rule_add_key(&rule_tmp, TK_M_IMPORT_PROG, op, value, NULL);
33502ffe 1235 } else if (streq(attr, "builtin")) {
19a8e656 1236 const enum udev_builtin_cmd cmd = udev_builtin_lookup(value);
912541b0 1237
c45b369d 1238 if (cmd < 0)
19a8e656 1239 LOG_RULE_WARNING("IMPORT{builtin} '%s' unknown", value);
912541b0 1240 else
19a8e656
ZJS		 1241 rule_add_key(&rule_tmp, TK_M_IMPORT_BUILTIN, op, value, &cmd);
1242 } else if (streq(attr, "file"))
912541b0 1243 rule_add_key(&rule_tmp, TK_M_IMPORT_FILE, op, value, NULL);
19a8e656 1244 else if (streq(attr, "db"))
912541b0 1245 rule_add_key(&rule_tmp, TK_M_IMPORT_DB, op, value, NULL);
19a8e656 1246 else if (streq(attr, "cmdline"))
912541b0 1247 rule_add_key(&rule_tmp, TK_M_IMPORT_CMDLINE, op, value, NULL);
19a8e656 1248 else if (streq(attr, "parent"))
912541b0 1249 rule_add_key(&rule_tmp, TK_M_IMPORT_PARENT, op, value, NULL);
19a8e656 1250 else
8c19dc54 1251 LOG_RULE_ERROR("Ignoring unknown %s{} type '%s'", "IMPORT", attr);
912541b0 1252
99f16bb8 1253 } else if (startswith(key, "TEST")) {
912541b0
KS		 1254 mode_t mode = 0;
1255
19a8e656 1256 if (op > OP_MATCH_MAX)
8c19dc54 1257 LOG_AND_RETURN("Invalid %s operation", "TEST");
19a8e656 1258
2024ed61 1259 attr = get_key_attribute(key + STRLEN("TEST"));
67e4b385 1260 if (attr) {
912541b0
KS		 1261 mode = strtol(attr, NULL, 8);
1262 rule_add_key(&rule_tmp, TK_M_TEST, op, value, &mode);
99f16bb8 1263 } else
912541b0 1264 rule_add_key(&rule_tmp, TK_M_TEST, op, value, NULL);
912541b0 1265
99f16bb8 1266 } else if (startswith(key, "RUN")) {
2024ed61 1267 attr = get_key_attribute(key + STRLEN("RUN"));
67e4b385 1268 if (!attr)
83cd6b75 1269 attr = "program";
19a8e656 1270 if (op == OP_REMOVE)
8c19dc54 1271 LOG_AND_RETURN("Invalid %s operation", "RUN");
83cd6b75 1272
33502ffe 1273 if (streq(attr, "builtin")) {
19a8e656 1274 const enum udev_builtin_cmd cmd = udev_builtin_lookup(value);
83cd6b75 1275
c45b369d 1276 if (cmd < 0)
19a8e656 1277 LOG_RULE_ERROR("RUN{builtin}: '%s' unknown", value);
c45b369d
YW		 1278 else
1279 rule_add_key(&rule_tmp, TK_A_RUN_BUILTIN, op, value, &cmd);
33502ffe 1280 } else if (streq(attr, "program")) {
c45b369d 1281 const enum udev_builtin_cmd cmd = _UDEV_BUILTIN_MAX;
83cd6b75 1282
83cd6b75 1283 rule_add_key(&rule_tmp, TK_A_RUN_PROGRAM, op, value, &cmd);
99f16bb8 1284 } else
8c19dc54 1285 LOG_RULE_ERROR("Ignoring unknown %s{} type '%s'", "RUN", attr);
912541b0 1286
99f16bb8 1287 } else if (streq(key, "LABEL")) {
19a8e656 1288 if (op == OP_REMOVE)
8c19dc54 1289 LOG_AND_RETURN("Invalid %s operation", key);
19a8e656 1290
915bf0f6 1291 rule_tmp.rule.rule.label_off = rules_add_string(rules, value);
912541b0 1292
99f16bb8 1293 } else if (streq(key, "GOTO")) {
19a8e656 1294 if (op == OP_REMOVE)
8c19dc54 1295 LOG_AND_RETURN("Invalid %s operation", key);
19a8e656 1296
912541b0 1297 rule_add_key(&rule_tmp, TK_A_GOTO, 0, value, NULL);
912541b0 1298
99f16bb8 1299 } else if (startswith(key, "NAME")) {
19a8e656 1300 if (op == OP_REMOVE)
8c19dc54 1301 LOG_AND_RETURN("Invalid %s operation", key);
19a8e656
ZJS		 1302
1303 if (op < OP_MATCH_MAX)
912541b0 1304 rule_add_key(&rule_tmp, TK_M_NAME, op, value, NULL);
19a8e656 1305 else {
33502ffe 1306 if (streq(value, "%k")) {
19a8e656 1307 LOG_RULE_WARNING("NAME=\"%%k\" is ignored, because it breaks kernel supplied names; please remove");
912541b0
KS		 1308 continue;
1309 }
19a8e656
ZJS		 1310 if (isempty(value)) {
1311 LOG_RULE_DEBUG("NAME=\"\" is ignored, because udev will not delete any device nodes; please remove");
912541b0
KS		 1312 continue;
1313 }
1314 rule_add_key(&rule_tmp, TK_A_NAME, op, value, NULL);
1315 }
1316 rule_tmp.rule.rule.can_set_name = true;
912541b0 1317
99f16bb8 1318 } else if (streq(key, "SYMLINK")) {
19a8e656 1319 if (op == OP_REMOVE)
8c19dc54 1320 LOG_AND_RETURN("Invalid %s operation", key);
19a8e656 1321
8a173387 1322 if (op < OP_MATCH_MAX)
912541b0 1323 rule_add_key(&rule_tmp, TK_M_DEVLINK, op, value, NULL);
8a173387
KS		 1324 else
1325 rule_add_key(&rule_tmp, TK_A_DEVLINK, op, value, NULL);
912541b0 1326 rule_tmp.rule.rule.can_set_name = true;
912541b0 1327
99f16bb8 1328 } else if (streq(key, "OWNER")) {
912541b0
KS		 1329 uid_t uid;
1330 char *endptr;
1331
19a8e656 1332 if (op == OP_REMOVE)
8c19dc54 1333 LOG_AND_RETURN("Invalid %s operation", key);
8e3ba377 1334
912541b0 1335 uid = strtoul(value, &endptr, 10);
19a8e656 1336 if (endptr[0] == '\0')
912541b0 1337 rule_add_key(&rule_tmp, TK_A_OWNER_ID, op, NULL, &uid);
67e4b385 1338 else if (rules->resolve_name_timing == RESOLVE_NAME_EARLY && !strchr("$%", value[0])) {
912541b0
KS		 1339 uid = add_uid(rules, value);
1340 rule_add_key(&rule_tmp, TK_A_OWNER_ID, op, NULL, &uid);
c4d44cba 1341 } else if (rules->resolve_name_timing != RESOLVE_NAME_NEVER)
912541b0 1342 rule_add_key(&rule_tmp, TK_A_OWNER, op, value, NULL);
1f6b4113 1343
912541b0 1344 rule_tmp.rule.rule.can_set_name = true;
912541b0 1345
99f16bb8 1346 } else if (streq(key, "GROUP")) {
912541b0
KS		 1347 gid_t gid;
1348 char *endptr;
1349
19a8e656 1350 if (op == OP_REMOVE)
8c19dc54 1351 LOG_AND_RETURN("Invalid %s operation", key);
8e3ba377 1352
912541b0 1353 gid = strtoul(value, &endptr, 10);
19a8e656 1354 if (endptr[0] == '\0')
912541b0 1355 rule_add_key(&rule_tmp, TK_A_GROUP_ID, op, NULL, &gid);
67e4b385 1356 else if ((rules->resolve_name_timing == RESOLVE_NAME_EARLY) && !strchr("$%", value[0])) {
912541b0
KS		 1357 gid = add_gid(rules, value);
1358 rule_add_key(&rule_tmp, TK_A_GROUP_ID, op, NULL, &gid);
c4d44cba 1359 } else if (rules->resolve_name_timing != RESOLVE_NAME_NEVER)
912541b0 1360 rule_add_key(&rule_tmp, TK_A_GROUP, op, value, NULL);
1f6b4113 1361
912541b0 1362 rule_tmp.rule.rule.can_set_name = true;
912541b0 1363
99f16bb8 1364 } else if (streq(key, "MODE")) {
912541b0
KS		 1365 mode_t mode;
1366 char *endptr;
1367
19a8e656 1368 if (op == OP_REMOVE)
8c19dc54 1369 LOG_AND_RETURN("Invalid %s operation", key);
8e3ba377 1370
912541b0
KS		 1371 mode = strtol(value, &endptr, 8);
1372 if (endptr[0] == '\0')
1373 rule_add_key(&rule_tmp, TK_A_MODE_ID, op, NULL, &mode);
1374 else
1375 rule_add_key(&rule_tmp, TK_A_MODE, op, value, NULL);
1376 rule_tmp.rule.rule.can_set_name = true;
912541b0 1377
99f16bb8 1378 } else if (streq(key, "OPTIONS")) {
912541b0
KS		 1379 const char *pos;
1380
19a8e656 1381 if (op == OP_REMOVE)
8c19dc54 1382 LOG_AND_RETURN("Invalid %s operation", key);
8e3ba377 1383
912541b0 1384 pos = strstr(value, "link_priority=");
67e4b385 1385 if (pos) {
fbd0b64f 1386 int prio = atoi(pos + STRLEN("link_priority="));
912541b0
KS		 1387
1388 rule_add_key(&rule_tmp, TK_A_DEVLINK_PRIO, op, NULL, &prio);
912541b0
KS		 1389 }
1390
9f20a8a3 1391 pos = strstr(value, "string_escape=");
67e4b385 1392 if (pos) {
fbd0b64f 1393 pos += STRLEN("string_escape=");
33502ffe 1394 if (startswith(pos, "none"))
912541b0 1395 rule_add_key(&rule_tmp, TK_A_STRING_ESCAPE_NONE, op, NULL, NULL);
33502ffe 1396 else if (startswith(pos, "replace"))
912541b0
KS		 1397 rule_add_key(&rule_tmp, TK_A_STRING_ESCAPE_REPLACE, op, NULL, NULL);
1398 }
1399
1400 pos = strstr(value, "db_persist");
67e4b385 1401 if (pos)
912541b0
KS		 1402 rule_add_key(&rule_tmp, TK_A_DB_PERSIST, op, NULL, NULL);
1403
1404 pos = strstr(value, "nowatch");
b33fa02b
LP		 1405 if (pos) {
1406 static const int zero = 0;
1407 rule_add_key(&rule_tmp, TK_A_INOTIFY_WATCH, op, NULL, &zero);
1408 } else {
1409 static const int one = 1;
912541b0 1410 pos = strstr(value, "watch");
6d5e65f6 1411 if (pos)
b33fa02b 1412 rule_add_key(&rule_tmp, TK_A_INOTIFY_WATCH, op, NULL, &one);
912541b0
KS		 1413 }
1414
1415 pos = strstr(value, "static_node=");
67e4b385 1416 if (pos) {
fbd0b64f 1417 pos += STRLEN("static_node=");
19a8e656 1418 rule_add_key(&rule_tmp, TK_A_STATIC_NODE, op, pos, NULL);
912541b0
KS		 1419 rule_tmp.rule.rule.has_static_node = true;
1420 }
1421
19a8e656 1422 } else
8c19dc54 1423 LOG_AND_RETURN("Unknown key '%s'", key);
912541b0
KS		 1424 }
1425
19a8e656 1426 /* add rule token and sort tokens */
912541b0 1427 rule_tmp.rule.rule.token_count = 1 + rule_tmp.token_cur;
19a8e656 1428 if (add_token(rules, &rule_tmp.rule) != 0 || sort_token(rules, &rule_tmp) != 0)
8c19dc54 1429 LOG_RULE_ERROR("Failed to add rule token");
c7521974
KS		 1430}
1431
9ec6e95b 1432static int parse_file(struct udev_rules *rules, const char *filename) {
6c8aaf0c 1433 _cleanup_fclose_ FILE *f = NULL;
14cb109d
YW		 1434 unsigned first_token;
1435 unsigned filename_off;
912541b0
KS		 1436 char line[UTIL_LINE_SIZE];
1437 int line_nr = 0;
14cb109d 1438 unsigned i;
912541b0 1439
ed88bcfb
ZJS		 1440 f = fopen(filename, "re");
1441 if (!f) {
1442 if (errno == ENOENT)
1443 return 0;
fae0f8a0
LP		 1444
1445 return -errno;
775f8b3c 1446 }
912541b0 1447
ed88bcfb
ZJS		 1448 if (null_or_empty_fd(fileno(f))) {
1449 log_debug("Skipping empty file: %s", filename);
1450 return 0;
1451 } else
1452 log_debug("Reading rules file: %s", filename);
912541b0
KS		 1453
1454 first_token = rules->token_cur;
915bf0f6 1455 filename_off = rules_add_string(rules, filename);
912541b0 1456
67e4b385 1457 while (fgets(line, sizeof(line), f)) {
912541b0
KS		 1458 char *key;
1459 size_t len;
1460
1461 /* skip whitespace */
1462 line_nr++;
1463 key = line;
1464 while (isspace(key[0]))
1465 key++;
1466
1467 /* comment */
1468 if (key[0] == '#')
1469 continue;
1470
1471 len = strlen(line);
1472 if (len < 3)
1473 continue;
1474
1475 /* continue reading if backslash+newline is found */
1476 while (line[len-2] == '\\') {
67e4b385 1477 if (!fgets(&line[len-2], (sizeof(line)-len)+2, f))
912541b0
KS		 1478 break;
1479 if (strlen(&line[len-2]) < 2)
1480 break;
1481 line_nr++;
1482 len = strlen(line);
1483 }
1484
1485 if (len+1 >= sizeof(line)) {
8c19dc54 1486 log_error("Line too long '%s':%u, ignored", filename, line_nr);
912541b0
KS		 1487 continue;
1488 }
1489 add_rule(rules, key, filename, filename_off, line_nr);
1490 }
912541b0
KS		 1491
1492 /* link GOTOs to LABEL rules in this file to be able to fast-forward */
1493 for (i = first_token+1; i < rules->token_cur; i++) {
1494 if (rules->tokens[i].type == TK_A_GOTO) {
915bf0f6 1495 char *label = rules_str(rules, rules->tokens[i].key.value_off);
14cb109d 1496 unsigned j;
912541b0
KS		 1497
1498 for (j = i+1; j < rules->token_cur; j++) {
1499 if (rules->tokens[j].type != TK_RULE)
1500 continue;
1501 if (rules->tokens[j].rule.label_off == 0)
1502 continue;
915bf0f6 1503 if (!streq(label, rules_str(rules, rules->tokens[j].rule.label_off)))
912541b0
KS		 1504 continue;
1505 rules->tokens[i].key.rule_goto = j;
1506 break;
1507 }
1508 if (rules->tokens[i].key.rule_goto == 0)
9f6445e3 1509 log_error("GOTO '%s' has no matching label in: '%s'", label, filename);
912541b0
KS		 1510 }
1511 }
1512 return 0;
c7521974
KS		 1513}
1514
c4d44cba 1515struct udev_rules *udev_rules_new(ResolveNameTiming resolve_name_timing) {
912541b0 1516 struct udev_rules *rules;
912541b0 1517 struct token end_token;
775f8b3c
KS		 1518 char **files, **f;
1519 int r;
912541b0 1520
c4d44cba
YW		 1521 assert(resolve_name_timing >= 0 && resolve_name_timing < _RESOLVE_NAME_TIMING_MAX);
1522
1017d66b
YW		 1523 rules = new(struct udev_rules, 1);
1524 if (!rules)
912541b0 1525 return NULL;
1017d66b
YW		 1526
1527 *rules = (struct udev_rules) {
c4d44cba 1528 .resolve_name_timing = resolve_name_timing,
1017d66b 1529 };
912541b0
KS		 1530
1531 /* init token array and string buffer */
8419d457 1532 rules->tokens = malloc_multiply(PREALLOC_TOKEN, sizeof(struct token));
67e4b385 1533 if (!rules->tokens)
981fae90 1534 return udev_rules_free(rules);
912541b0
KS		 1535 rules->token_max = PREALLOC_TOKEN;
1536
915bf0f6
KS		 1537 rules->strbuf = strbuf_new();
1538 if (!rules->strbuf)
981fae90 1539 return udev_rules_free(rules);
0820a4f0 1540
3b8c1cb0
KS		 1541 udev_rules_check_timestamp(rules);
1542
b5084605 1543 r = conf_files_list_strv(&files, ".rules", NULL, 0, rules_dirs);
775f8b3c 1544 if (r < 0) {
8c19dc54 1545 log_error_errno(r, "Failed to enumerate rules files: %m");
981fae90 1546 return udev_rules_free(rules);
912541b0
KS		 1547 }
1548
775f8b3c
KS		 1549 /*
1550 * The offset value in the rules strct is limited; add all
1551 * rules file names to the beginning of the string buffer.
1552 */
1553 STRV_FOREACH(f, files)
915bf0f6 1554 rules_add_string(rules, *f);
912541b0 1555
775f8b3c
KS		 1556 STRV_FOREACH(f, files)
1557 parse_file(rules, *f);
1558
1559 strv_free(files);
912541b0 1560
29804cc1 1561 memzero(&end_token, sizeof(struct token));
912541b0
KS		 1562 end_token.type = TK_END;
1563 add_token(rules, &end_token);
8c19dc54 1564 log_debug("Rules contain %zu bytes tokens (%u * %zu bytes), %zu bytes strings",
915bf0f6 1565 rules->token_max * sizeof(struct token), rules->token_max, sizeof(struct token), rules->strbuf->len);
912541b0 1566
915bf0f6 1567 /* cleanup temporary strbuf data */
9f6445e3 1568 log_debug("%zu strings (%zu bytes), %zu de-duplicated (%zu bytes), %zu trie nodes used",
915bf0f6
KS		 1569 rules->strbuf->in_count, rules->strbuf->in_len,
1570 rules->strbuf->dedup_count, rules->strbuf->dedup_len, rules->strbuf->nodes_count);
1571 strbuf_complete(rules->strbuf);
912541b0
KS		 1572
1573 /* cleanup uid/gid cache */
a1e58e8e 1574 rules->uids = mfree(rules->uids);
912541b0
KS		 1575 rules->uids_cur = 0;
1576 rules->uids_max = 0;
a1e58e8e 1577 rules->gids = mfree(rules->gids);
912541b0
KS		 1578 rules->gids_cur = 0;
1579 rules->gids_max = 0;
1580
1581 dump_rules(rules);
1582 return rules;
c7521974
KS		 1583}
1584
981fae90 1585struct udev_rules *udev_rules_free(struct udev_rules *rules) {
67e4b385 1586 if (!rules)
912541b0
KS		 1587 return NULL;
1588 free(rules->tokens);
915bf0f6 1589 strbuf_cleanup(rules->strbuf);
912541b0
KS		 1590 free(rules->uids);
1591 free(rules->gids);
6b430fdb 1592 return mfree(rules);
c7521974 1593}
6880b25d 1594
9ec6e95b 1595bool udev_rules_check_timestamp(struct udev_rules *rules) {
5c11fbe3
KS		 1596 if (!rules)
1597 return false;
1598
2ad8416d 1599 return paths_check_timestamp(rules_dirs, &rules->dirs_ts_usec, true);
6ada823a
KS		 1600}
1601
9ec6e95b 1602static int match_key(struct udev_rules *rules, struct token *token, const char *val) {
915bf0f6 1603 char *key_value = rules_str(rules, token->key.value_off);
912541b0
KS		 1604 char *pos;
1605 bool match = false;
1606
67e4b385 1607 if (!val)
912541b0
KS		 1608 val = "";
1609
1610 switch (token->key.glob) {
1611 case GL_PLAIN:
33502ffe 1612 match = (streq(key_value, val));
912541b0
KS		 1613 break;
1614 case GL_GLOB:
1615 match = (fnmatch(key_value, val, 0) == 0);
1616 break;
1617 case GL_SPLIT:
1618 {
33502ffe 1619 const char *s;
912541b0
KS		 1620 size_t len;
1621
915bf0f6 1622 s = rules_str(rules, token->key.value_off);
912541b0
KS		 1623 len = strlen(val);
1624 for (;;) {
1625 const char *next;
1626
33502ffe 1627 next = strchr(s, '|');
67e4b385 1628 if (next) {
33502ffe 1629 size_t matchlen = (size_t)(next - s);
912541b0 1630
641906e9 1631 match = (matchlen == len && strneq(s, val, matchlen));
912541b0
KS		 1632 if (match)
1633 break;
1634 } else {
33502ffe 1635 match = (streq(s, val));
912541b0
KS		 1636 break;
1637 }
33502ffe 1638 s = &next[1];
912541b0
KS		 1639 }
1640 break;
1641 }
1642 case GL_SPLIT_GLOB:
1643 {
1644 char value[UTIL_PATH_SIZE];
1645
d5a89d7d 1646 strscpy(value, sizeof(value), rules_str(rules, token->key.value_off));
912541b0 1647 key_value = value;
67e4b385 1648 while (key_value) {
912541b0 1649 pos = strchr(key_value, '|');
67e4b385 1650 if (pos) {
912541b0
KS		 1651 pos[0] = '\0';
1652 pos = &pos[1];
1653 }
912541b0
KS		 1654 match = (fnmatch(key_value, val, 0) == 0);
1655 if (match)
1656 break;
1657 key_value = pos;
1658 }
1659 break;
1660 }
1661 case GL_SOMETHING:
1662 match = (val[0] != '\0');
1663 break;
1664 case GL_UNSET:
1665 return -1;
1666 }
1667
baa30fbc 1668 if (match && (token->key.op == OP_MATCH))
912541b0 1669 return 0;
baa30fbc 1670 if (!match && (token->key.op == OP_NOMATCH))
912541b0 1671 return 0;
912541b0 1672 return -1;
6880b25d
KS		 1673}
1674
5ba7e798
YW		 1675static int match_attr(struct udev_rules *rules, sd_device *dev, struct udev_event *event, struct token *cur) {
1676 char nbuf[UTIL_NAME_SIZE], vbuf[UTIL_NAME_SIZE];
1677 const char *name, *value;
912541b0
KS		 1678 size_t len;
1679
915bf0f6 1680 name = rules_str(rules, cur->key.attr_off);
912541b0
KS		 1681 switch (cur->key.attrsubst) {
1682 case SB_FORMAT:
e20a9171 1683 udev_event_apply_format(event, name, nbuf, sizeof(nbuf), false);
912541b0 1684 name = nbuf;
4831981d 1685 _fallthrough_;
912541b0 1686 case SB_NONE:
5ba7e798 1687 if (sd_device_get_sysattr_value(dev, name, &value) < 0)
912541b0
KS		 1688 return -1;
1689 break;
1690 case SB_SUBSYS:
3839535a 1691 if (util_resolve_subsys_kernel(name, vbuf, sizeof(vbuf), true) != 0)
912541b0
KS		 1692 return -1;
1693 value = vbuf;
1694 break;
1695 default:
1696 return -1;
1697 }
1698
1699 /* remove trailing whitespace, if not asked to match for it */
1700 len = strlen(value);
1701 if (len > 0 && isspace(value[len-1])) {
1702 const char *key_value;
1703 size_t klen;
1704
915bf0f6 1705 key_value = rules_str(rules, cur->key.value_off);
912541b0
KS		 1706 klen = strlen(key_value);
1707 if (klen > 0 && !isspace(key_value[klen-1])) {
1708 if (value != vbuf) {
d5a89d7d 1709 strscpy(vbuf, sizeof(vbuf), value);
912541b0
KS		 1710 value = vbuf;
1711 }
1712 while (len > 0 && isspace(vbuf[--len]))
1713 vbuf[len] = '\0';
912541b0
KS		 1714 }
1715 }
1716
1717 return match_key(rules, cur, value);
6880b25d
KS		 1718}
1719
1720enum escape_type {
912541b0
KS		 1721 ESCAPE_UNSET,
1722 ESCAPE_NONE,
1723 ESCAPE_REPLACE,
6880b25d
KS		 1724};
1725
d838e145
YW		 1726int udev_rules_apply_to_event(
1727 struct udev_rules *rules,
1728 struct udev_event *event,
1729 usec_t timeout_usec,
9b5150b6 1730 Hashmap *properties_list) {
cf28ad46 1731 sd_device *dev = event->dev;
912541b0 1732 enum escape_type esc = ESCAPE_UNSET;
cf697ec0
YW		 1733 struct token *cur, *rule;
1734 const char *action, *val;
912541b0 1735 bool can_set_name;
88b013b2 1736 int r;
912541b0 1737
d838e145
YW		 1738 if (!rules->tokens)
1739 return 0;
912541b0 1740
cf697ec0
YW		 1741 r = sd_device_get_property_value(dev, "ACTION", &action);
1742 if (r < 0)
1743 return r;
1744
1745 can_set_name = (!streq(action, "remove") &&
1746 (sd_device_get_devnum(dev, NULL) >= 0 ||
1747 sd_device_get_ifindex(dev, NULL) >= 0));
912541b0
KS		 1748
1749 /* loop through token list, match, run actions or forward to next rule */
1750 cur = &rules->tokens[0];
1751 rule = cur;
1752 for (;;) {
1753 dump_token(rules, cur);
1754 switch (cur->type) {
1755 case TK_RULE:
1756 /* current rule */
1757 rule = cur;
1758 /* possibly skip rules which want to set NAME, SYMLINK, OWNER, GROUP, MODE */
1759 if (!can_set_name && rule->rule.can_set_name)
1760 goto nomatch;
1761 esc = ESCAPE_UNSET;
1762 break;
1763 case TK_M_ACTION:
cf697ec0 1764 if (match_key(rules, cur, action) != 0)
912541b0
KS		 1765 goto nomatch;
1766 break;
1767 case TK_M_DEVPATH:
cf697ec0
YW		 1768 if (sd_device_get_devpath(dev, &val) < 0)
1769 goto nomatch;
1770 if (match_key(rules, cur, val) != 0)
912541b0
KS		 1771 goto nomatch;
1772 break;
1773 case TK_M_KERNEL:
cf697ec0
YW		 1774 if (sd_device_get_sysname(dev, &val) < 0)
1775 goto nomatch;
1776 if (match_key(rules, cur, val) != 0)
912541b0
KS		 1777 goto nomatch;
1778 break;
1779 case TK_M_DEVLINK: {
dbea7f24 1780 const char *devlink;
912541b0
KS		 1781 bool match = false;
1782
cf697ec0 1783 FOREACH_DEVICE_DEVLINK(dev, devlink)
dbea7f24 1784 if (match_key(rules, cur, devlink + STRLEN("/dev/")) == 0) {
912541b0
KS		 1785 match = true;
1786 break;
1787 }
dbea7f24 1788
912541b0
KS		 1789 if (!match)
1790 goto nomatch;
1791 break;
1792 }
1793 case TK_M_NAME:
1794 if (match_key(rules, cur, event->name) != 0)
1795 goto nomatch;
1796 break;
1797 case TK_M_ENV: {
915bf0f6 1798 const char *key_name = rules_str(rules, cur->key.attr_off);
912541b0 1799
cf697ec0
YW		 1800 if (sd_device_get_property_value(dev, key_name, &val) < 0) {
1801 /* check global properties */
1802 if (properties_list)
1803 val = hashmap_get(properties_list, key_name);
1804 else
1805 val = NULL;
1806 }
adeba500 1807
cf697ec0 1808 if (match_key(rules, cur, strempty(val)))
912541b0
KS		 1809 goto nomatch;
1810 break;
1811 }
1812 case TK_M_TAG: {
912541b0 1813 bool match = false;
dbea7f24 1814 const char *tag;
912541b0 1815
cf697ec0 1816 FOREACH_DEVICE_TAG(dev, tag)
dbea7f24 1817 if (streq(rules_str(rules, cur->key.value_off), tag)) {
912541b0
KS		 1818 match = true;
1819 break;
1820 }
dbea7f24 1821
4302857b
FF		 1822 if ((!match && (cur->key.op != OP_NOMATCH)) ||
1823 (match && (cur->key.op == OP_NOMATCH)))
912541b0
KS		 1824 goto nomatch;
1825 break;
1826 }
1827 case TK_M_SUBSYSTEM:
cf697ec0
YW		 1828 if (sd_device_get_subsystem(dev, &val) < 0)
1829 goto nomatch;
1830 if (match_key(rules, cur, val) != 0)
912541b0
KS		 1831 goto nomatch;
1832 break;
1833 case TK_M_DRIVER:
cf697ec0
YW		 1834 if (sd_device_get_driver(dev, &val) < 0)
1835 goto nomatch;
1836 if (match_key(rules, cur, val) != 0)
912541b0
KS		 1837 goto nomatch;
1838 break;
912541b0 1839 case TK_M_ATTR:
cf697ec0 1840 if (match_attr(rules, dev, event, cur) != 0)
912541b0
KS		 1841 goto nomatch;
1842 break;
f4cf2e5b
KS		 1843 case TK_M_SYSCTL: {
1844 char filename[UTIL_PATH_SIZE];
1845 _cleanup_free_ char *value = NULL;
1846 size_t len;
1847
e20a9171 1848 udev_event_apply_format(event, rules_str(rules, cur->key.attr_off), filename, sizeof(filename), false);
f4cf2e5b
KS		 1849 sysctl_normalize(filename);
1850 if (sysctl_read(filename, &value) < 0)
1851 goto nomatch;
1852
1853 len = strlen(value);
1854 while (len > 0 && isspace(value[--len]))
1855 value[len] = '\0';
1856 if (match_key(rules, cur, value) != 0)
1857 goto nomatch;
1858 break;
1859 }
912541b0
KS		 1860 case TK_M_KERNELS:
1861 case TK_M_SUBSYSTEMS:
1862 case TK_M_DRIVERS:
1863 case TK_M_ATTRS:
1864 case TK_M_TAGS: {
1865 struct token *next;
1866
1867 /* get whole sequence of parent matches */
1868 next = cur;
1869 while (next->type > TK_M_PARENTS_MIN && next->type < TK_M_PARENTS_MAX)
1870 next++;
1871
1872 /* loop over parents */
cf697ec0 1873 event->dev_parent = dev;
912541b0
KS		 1874 for (;;) {
1875 struct token *key;
1876
912541b0
KS		 1877 /* loop over sequence of parent match keys */
1878 for (key = cur; key < next; key++ ) {
1879 dump_token(rules, key);
1880 switch(key->type) {
1881 case TK_M_KERNELS:
f3d241fe
YW		 1882 if (sd_device_get_sysname(event->dev_parent, &val) < 0)
1883 goto try_parent;
1884 if (match_key(rules, key, val) != 0)
912541b0
KS		 1885 goto try_parent;
1886 break;
1887 case TK_M_SUBSYSTEMS:
f3d241fe
YW		 1888 if (sd_device_get_subsystem(event->dev_parent, &val) < 0)
1889 goto try_parent;
1890 if (match_key(rules, key, val) != 0)
912541b0
KS		 1891 goto try_parent;
1892 break;
1893 case TK_M_DRIVERS:
f3d241fe
YW		 1894 if (sd_device_get_driver(event->dev_parent, &val) < 0)
1895 goto try_parent;
1896 if (match_key(rules, key, val) != 0)
912541b0
KS		 1897 goto try_parent;
1898 break;
1899 case TK_M_ATTRS:
f3d241fe 1900 if (match_attr(rules, event->dev_parent, event, key) != 0)
912541b0
KS		 1901 goto try_parent;
1902 break;
1903 case TK_M_TAGS: {
f3d241fe 1904 bool match = sd_device_has_tag(event->dev_parent, rules_str(rules, cur->key.value_off));
912541b0
KS		 1905
1906 if (match && key->key.op == OP_NOMATCH)
1907 goto try_parent;
1908 if (!match && key->key.op == OP_MATCH)
1909 goto try_parent;
1910 break;
1911 }
1912 default:
1913 goto nomatch;
1914 }
912541b0 1915 }
912541b0
KS		 1916 break;
1917
1918 try_parent:
f3d241fe
YW		 1919 if (sd_device_get_parent(event->dev_parent, &event->dev_parent) < 0) {
1920 event->dev_parent = NULL;
912541b0 1921 goto nomatch;
f3d241fe 1922 }
912541b0
KS		 1923 }
1924 /* move behind our sequence of parent match keys */
1925 cur = next;
1926 continue;
1927 }
1928 case TK_M_TEST: {
1929 char filename[UTIL_PATH_SIZE];
1930 struct stat statbuf;
1931 int match;
1932
e20a9171 1933 udev_event_apply_format(event, rules_str(rules, cur->key.value_off), filename, sizeof(filename), false);
3839535a 1934 if (util_resolve_subsys_kernel(filename, filename, sizeof(filename), false) != 0) {
912541b0
KS		 1935 if (filename[0] != '/') {
1936 char tmp[UTIL_PATH_SIZE];
1937
cf697ec0
YW		 1938 if (sd_device_get_syspath(dev, &val) < 0)
1939 goto nomatch;
1940
d5a89d7d 1941 strscpy(tmp, sizeof(tmp), filename);
cf697ec0 1942 strscpyl(filename, sizeof(filename), val, "/", tmp, NULL);
912541b0
KS		 1943 }
1944 }
1945 attr_subst_subdir(filename, sizeof(filename));
1946
1947 match = (stat(filename, &statbuf) == 0);
baa30fbc 1948 if (match && cur->key.mode > 0)
912541b0 1949 match = ((statbuf.st_mode & cur->key.mode) > 0);
912541b0
KS		 1950 if (match && cur->key.op == OP_NOMATCH)
1951 goto nomatch;
1952 if (!match && cur->key.op == OP_MATCH)
1953 goto nomatch;
1954 break;
1955 }
912541b0 1956 case TK_M_PROGRAM: {
cf697ec0 1957 char program[UTIL_PATH_SIZE], result[UTIL_LINE_SIZE];
912541b0 1958
a1e58e8e 1959 event->program_result = mfree(event->program_result);
e20a9171 1960 udev_event_apply_format(event, rules_str(rules, cur->key.value_off), program, sizeof(program), false);
b4ba2fe3
YW		 1961 log_device_debug(dev, "PROGRAM '%s' %s:%u",
1962 program,
1963 rules_str(rules, rule->rule.filename_off),
1964 rule->rule.filename_line);
912541b0 1965
66f737b4 1966 if (udev_event_spawn(event, timeout_usec, true, program, result, sizeof(result)) < 0) {
912541b0
KS		 1967 if (cur->key.op != OP_NOMATCH)
1968 goto nomatch;
1969 } else {
1970 int count;
1971
7546145e 1972 delete_trailing_chars(result, "\n");
4c701096 1973 if (IN_SET(esc, ESCAPE_UNSET, ESCAPE_REPLACE)) {
912541b0
KS		 1974 count = util_replace_chars(result, UDEV_ALLOWED_CHARS_INPUT);
1975 if (count > 0)
b4ba2fe3 1976 log_device_debug(dev, "Replaced %i character(s) from result of '%s'" , count, program);
912541b0
KS		 1977 }
1978 event->program_result = strdup(result);
912541b0
KS		 1979 if (cur->key.op == OP_NOMATCH)
1980 goto nomatch;
1981 }
1982 break;
1983 }
1984 case TK_M_IMPORT_FILE: {
1985 char import[UTIL_PATH_SIZE];
1986
e20a9171 1987 udev_event_apply_format(event, rules_str(rules, cur->key.value_off), import, sizeof(import), false);
cf697ec0 1988 if (import_file_into_properties(dev, import) != 0)
912541b0
KS		 1989 if (cur->key.op != OP_NOMATCH)
1990 goto nomatch;
1991 break;
1992 }
1993 case TK_M_IMPORT_PROG: {
1994 char import[UTIL_PATH_SIZE];
1995
e20a9171 1996 udev_event_apply_format(event, rules_str(rules, cur->key.value_off), import, sizeof(import), false);
b4ba2fe3
YW		 1997 log_device_debug(dev, "IMPORT '%s' %s:%u",
1998 import,
1999 rules_str(rules, rule->rule.filename_off),
2000 rule->rule.filename_line);
912541b0 2001
66f737b4 2002 if (import_program_into_properties(event, timeout_usec, import) != 0)
912541b0
KS		 2003 if (cur->key.op != OP_NOMATCH)
2004 goto nomatch;
2005 break;
2006 }
2007 case TK_M_IMPORT_BUILTIN: {
2008 char command[UTIL_PATH_SIZE];
2009
2010 if (udev_builtin_run_once(cur->key.builtin_cmd)) {
2011 /* check if we ran already */
2012 if (event->builtin_run & (1 << cur->key.builtin_cmd)) {
b4ba2fe3
YW		 2013 log_device_debug(dev, "IMPORT builtin skip '%s' %s:%u",
2014 udev_builtin_name(cur->key.builtin_cmd),
2015 rules_str(rules, rule->rule.filename_off),
2016 rule->rule.filename_line);
912541b0
KS		 2017 /* return the result from earlier run */
2018 if (event->builtin_ret & (1 << cur->key.builtin_cmd))
7d6884b6 2019 if (cur->key.op != OP_NOMATCH)
912541b0
KS		 2020 goto nomatch;
2021 break;
2022 }
2023 /* mark as ran */
2024 event->builtin_run |= (1 << cur->key.builtin_cmd);
2025 }
2026
e20a9171 2027 udev_event_apply_format(event, rules_str(rules, cur->key.value_off), command, sizeof(command), false);
b4ba2fe3
YW		 2028 log_device_debug(dev, "IMPORT builtin '%s' %s:%u",
2029 udev_builtin_name(cur->key.builtin_cmd),
2030 rules_str(rules, rule->rule.filename_off),
2031 rule->rule.filename_line);
912541b0 2032
cf697ec0 2033 r = udev_builtin_run(dev, cur->key.builtin_cmd, command, false);
d354690e 2034 if (r < 0) {
912541b0 2035 /* remember failure */
b4ba2fe3
YW		 2036 log_device_debug_errno(dev, r, "IMPORT builtin '%s' fails: %m",
2037 udev_builtin_name(cur->key.builtin_cmd));
912541b0
KS		 2038 event->builtin_ret |= (1 << cur->key.builtin_cmd);
2039 if (cur->key.op != OP_NOMATCH)
2040 goto nomatch;
2041 }
2042 break;
2043 }
2044 case TK_M_IMPORT_DB: {
cf697ec0 2045 const char *key;
912541b0 2046
cf697ec0 2047 key = rules_str(rules, cur->key.value_off);
a6da77b7
YW		 2048 if (event->dev_db_clone &&
2049 sd_device_get_property_value(event->dev_db_clone, key, &val) >= 0)
cf697ec0 2050 device_add_property(dev, key, val);
480ecb7d
YW		 2051 else if (cur->key.op != OP_NOMATCH)
2052 goto nomatch;
912541b0
KS		 2053 break;
2054 }
2055 case TK_M_IMPORT_CMDLINE: {
88b013b2 2056 _cleanup_free_ char *value = NULL;
912541b0 2057 bool imported = false;
88b013b2 2058 const char *key;
912541b0 2059
88b013b2 2060 key = rules_str(rules, cur->key.value_off);
88b013b2
LP		 2061 r = proc_cmdline_get_key(key, PROC_CMDLINE_VALUE_OPTIONAL, &value);
2062 if (r < 0)
b4ba2fe3 2063 log_device_debug_errno(dev, r, "Failed to read %s from /proc/cmdline, ignoring: %m", key);
88b013b2
LP		 2064 else if (r > 0) {
2065 imported = true;
2066
2067 if (value)
cf697ec0 2068 device_add_property(dev, key, value);
88b013b2
LP		 2069 else
2070 /* we import simple flags as 'FLAG=1' */
cf697ec0 2071 device_add_property(dev, key, "1");
912541b0 2072 }
88b013b2 2073
912541b0
KS		 2074 if (!imported && cur->key.op != OP_NOMATCH)
2075 goto nomatch;
2076 break;
2077 }
2078 case TK_M_IMPORT_PARENT: {
2079 char import[UTIL_PATH_SIZE];
2080
e20a9171 2081 udev_event_apply_format(event, rules_str(rules, cur->key.value_off), import, sizeof(import), false);
cf697ec0 2082 if (import_parent_into_properties(dev, import) != 0)
912541b0
KS		 2083 if (cur->key.op != OP_NOMATCH)
2084 goto nomatch;
2085 break;
2086 }
2087 case TK_M_RESULT:
2088 if (match_key(rules, cur, event->program_result) != 0)
2089 goto nomatch;
2090 break;
2091 case TK_A_STRING_ESCAPE_NONE:
2092 esc = ESCAPE_NONE;
2093 break;
2094 case TK_A_STRING_ESCAPE_REPLACE:
2095 esc = ESCAPE_REPLACE;
2096 break;
2097 case TK_A_DB_PERSIST:
cf697ec0 2098 device_set_db_persist(dev);
912541b0
KS		 2099 break;
2100 case TK_A_INOTIFY_WATCH:
2101 if (event->inotify_watch_final)
2102 break;
2103 if (cur->key.op == OP_ASSIGN_FINAL)
2104 event->inotify_watch_final = true;
2105 event->inotify_watch = cur->key.watch;
2106 break;
2107 case TK_A_DEVLINK_PRIO:
cf697ec0 2108 device_set_devlink_priority(dev, cur->key.devlink_prio);
912541b0
KS		 2109 break;
2110 case TK_A_OWNER: {
2111 char owner[UTIL_NAME_SIZE];
23bf8dd7 2112 const char *ow = owner;
912541b0
KS		 2113
2114 if (event->owner_final)
2115 break;
2116 if (cur->key.op == OP_ASSIGN_FINAL)
2117 event->owner_final = true;
e20a9171 2118 udev_event_apply_format(event, rules_str(rules, cur->key.value_off), owner, sizeof(owner), false);
1edefa4f 2119 event->owner_set = true;
fafff8f1 2120 r = get_user_creds(&ow, &event->uid, NULL, NULL, NULL, USER_CREDS_ALLOW_MISSING);
23bf8dd7 2121 if (r < 0) {
b4ba2fe3 2122 log_unknown_owner(dev, r, "user", owner);
23bf8dd7
TG		 2123 event->uid = 0;
2124 }
b4ba2fe3
YW		 2125 log_device_debug(dev, "OWNER %u %s:%u",
2126 event->uid,
2127 rules_str(rules, rule->rule.filename_off),
2128 rule->rule.filename_line);
912541b0
KS		 2129 break;
2130 }
2131 case TK_A_GROUP: {
2132 char group[UTIL_NAME_SIZE];
23bf8dd7 2133 const char *gr = group;
912541b0
KS		 2134
2135 if (event->group_final)
2136 break;
2137 if (cur->key.op == OP_ASSIGN_FINAL)
2138 event->group_final = true;
e20a9171 2139 udev_event_apply_format(event, rules_str(rules, cur->key.value_off), group, sizeof(group), false);
1edefa4f 2140 event->group_set = true;
fafff8f1 2141 r = get_group_creds(&gr, &event->gid, USER_CREDS_ALLOW_MISSING);
23bf8dd7 2142 if (r < 0) {
b4ba2fe3 2143 log_unknown_owner(dev, r, "group", group);
23bf8dd7
TG		 2144 event->gid = 0;
2145 }
b4ba2fe3
YW		 2146 log_device_debug(dev, "GROUP %u %s:%u",
2147 event->gid,
2148 rules_str(rules, rule->rule.filename_off),
2149 rule->rule.filename_line);
912541b0
KS		 2150 break;
2151 }
2152 case TK_A_MODE: {
b4ba2fe3 2153 char mode_str[UTIL_NAME_SIZE];
912541b0 2154 mode_t mode;
912541b0
KS		 2155
2156 if (event->mode_final)
2157 break;
e20a9171 2158 udev_event_apply_format(event, rules_str(rules, cur->key.value_off), mode_str, sizeof(mode_str), false);
b4ba2fe3
YW		 2159 r = parse_mode(mode_str, &mode);
2160 if (r < 0) {
2161 log_device_error_errno(dev, r, "Failed to parse mode '%s': %m", mode_str);
912541b0
KS		 2162 break;
2163 }
2164 if (cur->key.op == OP_ASSIGN_FINAL)
2165 event->mode_final = true;
2166 event->mode_set = true;
2167 event->mode = mode;
b4ba2fe3
YW		 2168 log_device_debug(dev, "MODE %#o %s:%u",
2169 event->mode,
2170 rules_str(rules, rule->rule.filename_off),
2171 rule->rule.filename_line);
912541b0
KS		 2172 break;
2173 }
2174 case TK_A_OWNER_ID:
2175 if (event->owner_final)
2176 break;
2177 if (cur->key.op == OP_ASSIGN_FINAL)
2178 event->owner_final = true;
1edefa4f 2179 event->owner_set = true;
912541b0 2180 event->uid = cur->key.uid;
b4ba2fe3
YW		 2181 log_device_debug(dev, "OWNER %u %s:%u",
2182 event->uid,
2183 rules_str(rules, rule->rule.filename_off),
2184 rule->rule.filename_line);
912541b0
KS		 2185 break;
2186 case TK_A_GROUP_ID:
2187 if (event->group_final)
2188 break;
2189 if (cur->key.op == OP_ASSIGN_FINAL)
2190 event->group_final = true;
1edefa4f 2191 event->group_set = true;
912541b0 2192 event->gid = cur->key.gid;
b4ba2fe3
YW		 2193 log_device_debug(dev, "GROUP %u %s:%u",
2194 event->gid,
2195 rules_str(rules, rule->rule.filename_off),
2196 rule->rule.filename_line);
912541b0
KS		 2197 break;
2198 case TK_A_MODE_ID:
2199 if (event->mode_final)
2200 break;
2201 if (cur->key.op == OP_ASSIGN_FINAL)
2202 event->mode_final = true;
2203 event->mode_set = true;
2204 event->mode = cur->key.mode;
b4ba2fe3
YW		 2205 log_device_debug(dev, "MODE %#o %s:%u",
2206 event->mode,
2207 rules_str(rules, rule->rule.filename_off),
2208 rule->rule.filename_line);
912541b0 2209 break;
c26547d6 2210 case TK_A_SECLABEL: {
d838e145 2211 _cleanup_free_ char *name = NULL, *label = NULL;
4f985bd8 2212 char label_str[UTIL_LINE_SIZE] = {};
c26547d6 2213
d838e145
YW		 2214 name = strdup(rules_str(rules, cur->key.attr_off));
2215 if (!name)
2216 return log_oom();
2217
e20a9171 2218 udev_event_apply_format(event, rules_str(rules, cur->key.value_off), label_str, sizeof(label_str), false);
d838e145
YW		 2219 if (!isempty(label_str))
2220 label = strdup(label_str);
4f985bd8 2221 else
d838e145
YW		 2222 label = strdup(rules_str(rules, cur->key.value_off));
2223 if (!label)
2224 return log_oom();
4f985bd8 2225
4c701096 2226 if (IN_SET(cur->key.op, OP_ASSIGN, OP_ASSIGN_FINAL))
d838e145
YW		 2227 hashmap_clear_free_free(event->seclabel_list);
2228
2229 r = hashmap_ensure_allocated(&event->seclabel_list, NULL);
2230 if (r < 0)
2231 return log_oom();
2232
2233 r = hashmap_put(event->seclabel_list, name, label);
2234 if (r < 0)
2235 return log_oom();
2236
2237 name = label = NULL;
2238
b4ba2fe3
YW		 2239 log_device_debug(dev, "SECLABEL{%s}='%s' %s:%u",
2240 name, label,
2241 rules_str(rules, rule->rule.filename_off),
2242 rule->rule.filename_line);
c26547d6
KS		 2243 break;
2244 }
912541b0 2245 case TK_A_ENV: {
07845c14 2246 char value_new[UTIL_NAME_SIZE];
cf697ec0 2247 const char *name, *value_old;
912541b0 2248
cf697ec0
YW		 2249 name = rules_str(rules, cur->key.attr_off);
2250 val = rules_str(rules, cur->key.value_off);
2251 if (val[0] == '\0') {
07845c14
KS		 2252 if (cur->key.op == OP_ADD)
2253 break;
cf697ec0 2254 device_add_property(dev, name, NULL);
07845c14 2255 break;
912541b0 2256 }
07845c14 2257
cf697ec0
YW		 2258 if (cur->key.op == OP_ADD &&
2259 sd_device_get_property_value(dev, name, &value_old) >= 0) {
07845c14
KS		 2260 char temp[UTIL_NAME_SIZE];
2261
2262 /* append value separated by space */
cf697ec0 2263 udev_event_apply_format(event, val, temp, sizeof(temp), false);
d5a89d7d 2264 strscpyl(value_new, sizeof(value_new), value_old, " ", temp, NULL);
07845c14 2265 } else
cf697ec0 2266 udev_event_apply_format(event, val, value_new, sizeof(value_new), false);
07845c14 2267
cf697ec0 2268 device_add_property(dev, name, value_new);
912541b0
KS		 2269 break;
2270 }
2271 case TK_A_TAG: {
2272 char tag[UTIL_PATH_SIZE];
2273 const char *p;
2274
e20a9171 2275 udev_event_apply_format(event, rules_str(rules, cur->key.value_off), tag, sizeof(tag), false);
4c701096 2276 if (IN_SET(cur->key.op, OP_ASSIGN, OP_ASSIGN_FINAL))
cf697ec0 2277 device_cleanup_tags(dev);
912541b0
KS		 2278 for (p = tag; *p != '\0'; p++) {
2279 if ((*p >= 'a' && *p <= 'z') ||
2280 (*p >= 'A' && *p <= 'Z') ||
2281 (*p >= '0' && *p <= '9') ||
4c701096 2282 IN_SET(*p, '-', '_'))
912541b0 2283 continue;
b4ba2fe3 2284 log_device_error(dev, "Ignoring invalid tag name '%s'", tag);
912541b0
KS		 2285 break;
2286 }
8e3ba377 2287 if (cur->key.op == OP_REMOVE)
cf697ec0 2288 device_remove_tag(dev, tag);
8e3ba377 2289 else
cf697ec0 2290 device_add_tag(dev, tag);
912541b0
KS		 2291 break;
2292 }
2293 case TK_A_NAME: {
912541b0 2294 char name_str[UTIL_PATH_SIZE];
cf697ec0 2295 const char *name;
912541b0
KS		 2296 int count;
2297
cf697ec0 2298 name = rules_str(rules, cur->key.value_off);
912541b0
KS		 2299 if (event->name_final)
2300 break;
2301 if (cur->key.op == OP_ASSIGN_FINAL)
2302 event->name_final = true;
e20a9171 2303 udev_event_apply_format(event, name, name_str, sizeof(name_str), false);
4c701096 2304 if (IN_SET(esc, ESCAPE_UNSET, ESCAPE_REPLACE)) {
912541b0
KS		 2305 count = util_replace_chars(name_str, "/");
2306 if (count > 0)
b4ba2fe3 2307 log_device_debug(dev, "Replaced %i character(s) from result of NAME=\"%s\"", count, name);
912541b0 2308 }
cf697ec0
YW		 2309 if (sd_device_get_devnum(dev, NULL) >= 0 &&
2310 (sd_device_get_devname(dev, &val) < 0 ||
2311 !streq(name_str, val + STRLEN("/dev/")))) {
b4ba2fe3
YW		 2312 log_device_error(dev, "Kernel device nodes cannot be renamed, ignoring NAME=\"%s\"; please fix it in %s:%u\n",
2313 name,
2314 rules_str(rules, rule->rule.filename_off),
2315 rule->rule.filename_line);
6ada823a 2316 break;
0ecfcbd4 2317 }
d838e145
YW		 2318 if (free_and_strdup(&event->name, name_str) < 0)
2319 return log_oom();
2320
b4ba2fe3
YW		 2321 log_device_debug(dev, "NAME '%s' %s:%u",
2322 event->name,
2323 rules_str(rules, rule->rule.filename_off),
2324 rule->rule.filename_line);
912541b0
KS		 2325 break;
2326 }
2327 case TK_A_DEVLINK: {
cf697ec0 2328 char temp[UTIL_PATH_SIZE], filename[UTIL_PATH_SIZE], *pos, *next;
912541b0
KS		 2329 int count = 0;
2330
2331 if (event->devlink_final)
2332 break;
cf697ec0 2333 if (sd_device_get_devnum(dev, NULL) < 0)
912541b0
KS		 2334 break;
2335 if (cur->key.op == OP_ASSIGN_FINAL)
2336 event->devlink_final = true;
4c701096 2337 if (IN_SET(cur->key.op, OP_ASSIGN, OP_ASSIGN_FINAL))
cf697ec0 2338 device_cleanup_devlinks(dev);
912541b0
KS		 2339
2340 /* allow multiple symlinks separated by spaces */
0a10235e 2341 udev_event_apply_format(event, rules_str(rules, cur->key.value_off), temp, sizeof(temp), esc != ESCAPE_NONE);
912541b0
KS		 2342 if (esc == ESCAPE_UNSET)
2343 count = util_replace_chars(temp, "/ ");
2344 else if (esc == ESCAPE_REPLACE)
2345 count = util_replace_chars(temp, "/");
2346 if (count > 0)
b4ba2fe3 2347 log_device_debug(dev, "Replaced %i character(s) from result of LINK" , count);
912541b0
KS		 2348 pos = temp;
2349 while (isspace(pos[0]))
2350 pos++;
2351 next = strchr(pos, ' ');
cf697ec0 2352 while (next) {
912541b0 2353 next[0] = '\0';
b4ba2fe3
YW		 2354 log_device_debug(dev, "LINK '%s' %s:%u", pos,
2355 rules_str(rules, rule->rule.filename_off), rule->rule.filename_line);
d5a89d7d 2356 strscpyl(filename, sizeof(filename), "/dev/", pos, NULL);
cf697ec0 2357 device_add_devlink(dev, filename);
912541b0
KS		 2358 while (isspace(next[1]))
2359 next++;
2360 pos = &next[1];
2361 next = strchr(pos, ' ');
2362 }
2363 if (pos[0] != '\0') {
b4ba2fe3
YW		 2364 log_device_debug(dev, "LINK '%s' %s:%u", pos,
2365 rules_str(rules, rule->rule.filename_off), rule->rule.filename_line);
d5a89d7d 2366 strscpyl(filename, sizeof(filename), "/dev/", pos, NULL);
cf697ec0 2367 device_add_devlink(dev, filename);
912541b0
KS		 2368 }
2369 break;
2370 }
2371 case TK_A_ATTR: {
cf697ec0 2372 char attr[UTIL_PATH_SIZE], value[UTIL_NAME_SIZE];
fdd21be6 2373 _cleanup_fclose_ FILE *f = NULL;
cf697ec0 2374 const char *key_name;
912541b0 2375
cf697ec0 2376 key_name = rules_str(rules, cur->key.attr_off);
3839535a 2377 if (util_resolve_subsys_kernel(key_name, attr, sizeof(attr), false) != 0 &&
cf697ec0
YW		 2378 sd_device_get_syspath(dev, &val) >= 0)
2379 strscpyl(attr, sizeof(attr), val, "/", key_name, NULL);
912541b0
KS		 2380 attr_subst_subdir(attr, sizeof(attr));
2381
e20a9171 2382 udev_event_apply_format(event, rules_str(rules, cur->key.value_off), value, sizeof(value), false);
b4ba2fe3
YW		 2383 log_device_debug(dev, "ATTR '%s' writing '%s' %s:%u", attr, value,
2384 rules_str(rules, rule->rule.filename_off),
2385 rule->rule.filename_line);
47ef94ac 2386 f = fopen(attr, "we");
67e4b385 2387 if (!f)
b4ba2fe3 2388 log_device_error_errno(dev, errno, "Failed to open ATTR{%s} for writing: %m", attr);
fdd21be6 2389 else if (fprintf(f, "%s", value) <= 0)
b4ba2fe3 2390 log_device_error_errno(dev, errno, "Failed to write ATTR{%s}: %m", attr);
912541b0
KS		 2391 break;
2392 }
f4cf2e5b 2393 case TK_A_SYSCTL: {
cf697ec0 2394 char filename[UTIL_PATH_SIZE], value[UTIL_NAME_SIZE];
f4cf2e5b 2395
e20a9171 2396 udev_event_apply_format(event, rules_str(rules, cur->key.attr_off), filename, sizeof(filename), false);
f4cf2e5b 2397 sysctl_normalize(filename);
e20a9171 2398 udev_event_apply_format(event, rules_str(rules, cur->key.value_off), value, sizeof(value), false);
b4ba2fe3
YW		 2399 log_device_debug(dev, "SYSCTL '%s' writing '%s' %s:%u", filename, value,
2400 rules_str(rules, rule->rule.filename_off), rule->rule.filename_line);
f4cf2e5b
KS		 2401 r = sysctl_write(filename, value);
2402 if (r < 0)
b4ba2fe3 2403 log_device_error_errno(dev, r, "Failed to write SYSCTL{%s}='%s': %m", filename, value);
f4cf2e5b
KS		 2404 break;
2405 }
83cd6b75
KS		 2406 case TK_A_RUN_BUILTIN:
2407 case TK_A_RUN_PROGRAM: {
29448498
YW		 2408 _cleanup_free_ char *cmd = NULL;
2409
2410 if (IN_SET(cur->key.op, OP_ASSIGN, OP_ASSIGN_FINAL)) {
2411 void *p;
2412
2413 while ((p = hashmap_steal_first_key(event->run_list)))
2414 free(p);
2415 }
2416
2417 r = hashmap_ensure_allocated(&event->run_list, NULL);
2418 if (r < 0)
2419 return log_oom();
2420
2421 cmd = strdup(rules_str(rules, cur->key.value_off));
2422 if (!cmd)
2423 return log_oom();
2424
2425 r = hashmap_put(event->run_list, cmd, INT_TO_PTR(cur->key.builtin_cmd));
2426 if (r < 0)
2427 return log_oom();
2428
2429 cmd = NULL;
83cd6b75 2430
b4ba2fe3
YW		 2431 log_device_debug(dev, "RUN '%s' %s:%u",
2432 rules_str(rules, cur->key.value_off),
2433 rules_str(rules, rule->rule.filename_off),
2434 rule->rule.filename_line);
912541b0
KS		 2435 break;
2436 }
2437 case TK_A_GOTO:
2438 if (cur->key.rule_goto == 0)
2439 break;
2440 cur = &rules->tokens[cur->key.rule_goto];
2441 continue;
2442 case TK_END:
d838e145 2443 return 0;
912541b0
KS		 2444
2445 case TK_M_PARENTS_MIN:
2446 case TK_M_PARENTS_MAX:
2447 case TK_M_MAX:
2448 case TK_UNSET:
b4ba2fe3 2449 log_device_error(dev, "Wrong type %u", cur->type);
912541b0
KS		 2450 goto nomatch;
2451 }
2452
2453 cur++;
2454 continue;
2455 nomatch:
2456 /* fast-forward to next rule */
2457 cur = rule + rule->rule.token_count;
912541b0 2458 }
d838e145
YW		 2459
2460 return 0;
6880b25d 2461}
761dfddc 2462
9ec6e95b 2463int udev_rules_apply_static_dev_perms(struct udev_rules *rules) {
912541b0
KS		 2464 struct token *cur;
2465 struct token *rule;
2466 uid_t uid = 0;
2467 gid_t gid = 0;
2468 mode_t mode = 0;
84b6ad70
TG		 2469 _cleanup_strv_free_ char **tags = NULL;
2470 char **t;
2471 FILE *f = NULL;
2472 _cleanup_free_ char *path = NULL;
fdd21be6 2473 int r;
912541b0 2474
67e4b385 2475 if (!rules->tokens)
84b6ad70 2476 return 0;
912541b0
KS		 2477
2478 cur = &rules->tokens[0];
2479 rule = cur;
2480 for (;;) {
2481 switch (cur->type) {
2482 case TK_RULE:
2483 /* current rule */
2484 rule = cur;
2485
2486 /* skip rules without a static_node tag */
2487 if (!rule->rule.has_static_node)
2488 goto next;
2489
2490 uid = 0;
2491 gid = 0;
2492 mode = 0;
97b11eed 2493 tags = strv_free(tags);
912541b0
KS		 2494 break;
2495 case TK_A_OWNER_ID:
2496 uid = cur->key.uid;
2497 break;
2498 case TK_A_GROUP_ID:
2499 gid = cur->key.gid;
2500 break;
2501 case TK_A_MODE_ID:
2502 mode = cur->key.mode;
84b6ad70
TG		 2503 break;
2504 case TK_A_TAG:
2505 r = strv_extend(&tags, rules_str(rules, cur->key.value_off));
2506 if (r < 0)
2507 goto finish;
2508
912541b0
KS		 2509 break;
2510 case TK_A_STATIC_NODE: {
84b6ad70
TG		 2511 char device_node[UTIL_PATH_SIZE];
2512 char tags_dir[UTIL_PATH_SIZE];
2513 char tag_symlink[UTIL_PATH_SIZE];
912541b0
KS		 2514 struct stat stats;
2515
2516 /* we assure, that the permissions tokens are sorted before the static token */
ca2bb160 2517
67e4b385 2518 if (mode == 0 && uid == 0 && gid == 0 && !tags)
912541b0 2519 goto next;
d6f116a7 2520
84b6ad70 2521 strscpyl(device_node, sizeof(device_node), "/dev/", rules_str(rules, cur->key.value_off), NULL);
ca2bb160
KS		 2522 if (stat(device_node, &stats) != 0)
2523 break;
2524 if (!S_ISBLK(stats.st_mode) && !S_ISCHR(stats.st_mode))
2525 break;
84b6ad70 2526
d6f116a7 2527 /* export the tags to a directory as symlinks, allowing otherwise dead nodes to be tagged */
84b6ad70 2528 if (tags) {
84b6ad70
TG		 2529 STRV_FOREACH(t, tags) {
2530 _cleanup_free_ char *unescaped_filename = NULL;
2531
2532 strscpyl(tags_dir, sizeof(tags_dir), "/run/udev/static_node-tags/", *t, "/", NULL);
2533 r = mkdir_p(tags_dir, 0755);
f647962d 2534 if (r < 0)
8c19dc54 2535 return log_error_errno(r, "Failed to create %s: %m", tags_dir);
84b6ad70
TG		 2536
2537 unescaped_filename = xescape(rules_str(rules, cur->key.value_off), "/.");
2538
2539 strscpyl(tag_symlink, sizeof(tag_symlink), tags_dir, unescaped_filename, NULL);
2540 r = symlink(device_node, tag_symlink);
4a62c710 2541 if (r < 0 && errno != EEXIST)
8c19dc54 2542 return log_error_errno(errno, "Failed to create symlink %s -> %s: %m",
4a62c710 2543 tag_symlink, device_node);
84b6ad70
TG		 2544 }
2545 }
2546
15a72200
TG		 2547 /* don't touch the permissions if only the tags were set */
2548 if (mode == 0 && uid == 0 && gid == 0)
d6f116a7
KS		 2549 break;
2550
912541b0
KS		 2551 if (mode == 0) {
2552 if (gid > 0)
2553 mode = 0660;
2554 else
2555 mode = 0600;
2556 }
2557 if (mode != (stats.st_mode & 01777)) {
490f0087 2558 r = chmod(device_node, mode);
25f027c5
ZJS		 2559 if (r < 0)
2560 return log_error_errno(errno, "Failed to chmod '%s' %#o: %m",
2561 device_node, mode);
2562 else
9f6445e3 2563 log_debug("chmod '%s' %#o", device_node, mode);
912541b0
KS		 2564 }
2565
2566 if ((uid != 0 && uid != stats.st_uid) || (gid != 0 && gid != stats.st_gid)) {
490f0087 2567 r = chown(device_node, uid, gid);
25f027c5
ZJS		 2568 if (r < 0)
2569 return log_error_errno(errno, "Failed to chown '%s' %u %u: %m",
2570 device_node, uid, gid);
2571 else
9f6445e3 2572 log_debug("chown '%s' %u %u", device_node, uid, gid);
912541b0
KS		 2573 }
2574
84b6ad70 2575 utimensat(AT_FDCWD, device_node, NULL, 0);
912541b0
KS		 2576 break;
2577 }
2578 case TK_END:
84b6ad70 2579 goto finish;
912541b0
KS		 2580 }
2581
2582 cur++;
2583 continue;
761dfddc 2584next:
912541b0
KS		 2585 /* fast-forward to next rule */
2586 cur = rule + rule->rule.token_count;
2587 continue;
2588 }
84b6ad70
TG		 2589
2590finish:
2591 if (f) {
2592 fflush(f);
2593 fchmod(fileno(f), 0644);
2594 if (ferror(f) || rename(path, "/run/udev/static_node-tags") < 0) {
fdd21be6
ZJS		 2595 unlink_noerrno("/run/udev/static_node-tags");
2596 unlink_noerrno(path);
2597 return -errno;
84b6ad70 2598 }
84b6ad70
TG		 2599 }
2600
fdd21be6 2601 return 0;
761dfddc 2602}
Unnamed repository; edit this file 'description' to name the repository.