/* * Copyright (C) 2015 The Android Open Source Project * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "service.h" #include #include #include #include #include #include #include #include #include #include #include "action.h" #include "init.h" #include "init_parser.h" #include "keywords.h" #include "log.h" #include "property_service.h" #include "util.h" #define CRITICAL_CRASH_THRESHOLD 4 // if we crash >4 times ... #define CRITICAL_CRASH_WINDOW (4*60) // ... in 4 minutes, goto recovery SocketInfo::SocketInfo() : uid(0), gid(0), perm(0) { } SocketInfo::SocketInfo(const std::string& name, const std::string& type, uid_t uid, gid_t gid, int perm, const std::string& socketcon) : name(name), type(type), uid(uid), gid(gid), perm(perm), socketcon(socketcon) { } ServiceEnvironmentInfo::ServiceEnvironmentInfo() { } ServiceEnvironmentInfo::ServiceEnvironmentInfo(const std::string& name, const std::string& value) : name(name), value(value) { } Service::Service(const std::string& name, const std::string& classname, const std::vector& args) : name_(name), classname_(classname), flags_(0), pid_(0), time_started_(0), time_crashed_(0), nr_crashed_(0), uid_(0), gid_(0), seclabel_(""), ioprio_class_(IoSchedClass_NONE), ioprio_pri_(0), args_(args) { onrestart_.InitSingleTrigger("onrestart"); } Service::Service(const std::string& name, const std::string& classname, unsigned flags, uid_t uid, gid_t gid, const std::vector& supp_gids, const std::string& seclabel, const std::vector& args) : name_(name), classname_(classname), flags_(flags), pid_(0), time_started_(0), time_crashed_(0), nr_crashed_(0), uid_(uid), gid_(gid), supp_gids_(supp_gids), seclabel_(seclabel), ioprio_class_(IoSchedClass_NONE), ioprio_pri_(0), args_(args) { onrestart_.InitSingleTrigger("onrestart"); } void Service::NotifyStateChange(const std::string& new_state) const { if (!properties_initialized()) { // If properties aren't available yet, we can't set them. return; } if ((flags_ & SVC_EXEC) != 0) { // 'exec' commands don't have properties tracking their state. return; } std::string prop_name = android::base::StringPrintf("init.svc.%s", name_.c_str()); if (prop_name.length() >= PROP_NAME_MAX) { // If the property name would be too long, we can't set it. ERROR("Property name \"init.svc.%s\" too long; not setting to %s\n", name_.c_str(), new_state.c_str()); return; } property_set(prop_name.c_str(), new_state.c_str()); } bool Service::Reap() { if (!(flags_ & SVC_ONESHOT) || (flags_ & SVC_RESTART)) { NOTICE("Service '%s' (pid %d) killing any children in process group\n", name_.c_str(), pid_); kill(-pid_, SIGKILL); } // Remove any sockets we may have created. for (const auto& si : sockets_) { std::string tmp = android::base::StringPrintf(ANDROID_SOCKET_DIR "/%s", si.name.c_str()); unlink(tmp.c_str()); } if (flags_ & SVC_EXEC) { INFO("SVC_EXEC pid %d finished...\n", pid_); return true; } pid_ = 0; flags_ &= (~SVC_RUNNING); // Oneshot processes go into the disabled state on exit, // except when manually restarted. if ((flags_ & SVC_ONESHOT) && !(flags_ & SVC_RESTART)) { flags_ |= SVC_DISABLED; } // Disabled and reset processes do not get restarted automatically. if (flags_ & (SVC_DISABLED | SVC_RESET)) { NotifyStateChange("stopped"); return false; } time_t now = gettime(); if ((flags_ & SVC_CRITICAL) && !(flags_ & SVC_RESTART)) { if (time_crashed_ + CRITICAL_CRASH_WINDOW >= now) { if (++nr_crashed_ > CRITICAL_CRASH_THRESHOLD) { ERROR("critical process '%s' exited %d times in %d minutes; " "rebooting into recovery mode\n", name_.c_str(), CRITICAL_CRASH_THRESHOLD, CRITICAL_CRASH_WINDOW / 60); android_reboot(ANDROID_RB_RESTART2, 0, "recovery"); return false; } } else { time_crashed_ = now; nr_crashed_ = 1; } } flags_ &= (~SVC_RESTART); flags_ |= SVC_RESTARTING; // Execute all onrestart commands for this service. onrestart_.ExecuteAllCommands(); NotifyStateChange("restarting"); return false; } void Service::DumpState() const { INFO("service %s\n", name_.c_str()); INFO(" class '%s'\n", classname_.c_str()); INFO(" exec"); for (const auto& s : args_) { INFO(" '%s'", s.c_str()); } INFO("\n"); for (const auto& si : sockets_) { INFO(" socket %s %s 0%o\n", si.name.c_str(), si.type.c_str(), si.perm); } } bool Service::HandleLine(int kw, const std::vector& args, std::string* err) { std::vector str_args; ioprio_class_ = IoSchedClass_NONE; switch (kw) { case K_class: if (args.size() != 2) { *err = "class option requires a classname\n"; return false; } else { classname_ = args[1]; } break; case K_console: flags_ |= SVC_CONSOLE; break; case K_disabled: flags_ |= SVC_DISABLED; flags_ |= SVC_RC_DISABLED; break; case K_ioprio: if (args.size() != 3) { *err = "ioprio optin usage: ioprio \n"; return false; } else { ioprio_pri_ = std::stoul(args[2], 0, 8); if (ioprio_pri_ < 0 || ioprio_pri_ > 7) { *err = "priority value must be range 0 - 7\n"; return false; } if (args[1] == "rt") { ioprio_class_ = IoSchedClass_RT; } else if (args[1] == "be") { ioprio_class_ = IoSchedClass_BE; } else if (args[1] == "idle") { ioprio_class_ = IoSchedClass_IDLE; } else { *err = "ioprio option usage: ioprio <0-7>\n"; return false; } } break; case K_group: if (args.size() < 2) { *err = "group option requires a group id\n"; return false; } else if (args.size() > NR_SVC_SUPP_GIDS + 2) { *err = android::base::StringPrintf("group option accepts at most %d supp. groups\n", NR_SVC_SUPP_GIDS); return false; } else { gid_ = decode_uid(args[1].c_str()); for (std::size_t n = 2; n < args.size(); n++) { supp_gids_.push_back(decode_uid(args[n].c_str())); } } break; case K_keycodes: if (args.size() < 2) { *err = "keycodes option requires atleast one keycode\n"; return false; } else { for (std::size_t i = 1; i < args.size(); i++) { keycodes_.push_back(std::stoi(args[i])); } } break; case K_oneshot: flags_ |= SVC_ONESHOT; break; case K_onrestart: if (args.size() < 2) { return false; } str_args.assign(args.begin() + 1, args.end()); add_command_to_action(&onrestart_, str_args, "", 0, err); break; case K_critical: flags_ |= SVC_CRITICAL; break; case K_setenv: { /* name value */ if (args.size() < 3) { *err = "setenv option requires name and value arguments\n"; return false; } envvars_.push_back({args[1], args[2]}); break; } case K_socket: {/* name type perm [ uid gid context ] */ if (args.size() < 4) { *err = "socket option requires name, type, perm arguments\n"; return false; } if (args[2] != "dgram" && args[2] != "stream" && args[2] != "seqpacket") { *err = "socket type must be 'dgram', 'stream' or 'seqpacket'\n"; return false; } int perm = std::stoul(args[3], 0, 8); uid_t uid = args.size() > 4 ? decode_uid(args[4].c_str()) : 0; gid_t gid = args.size() > 5 ? decode_uid(args[5].c_str()) : 0; std::string socketcon = args.size() > 6 ? args[6] : ""; sockets_.push_back({args[1], args[2], uid, gid, perm, socketcon}); break; } case K_user: if (args.size() != 2) { *err = "user option requires a user id\n"; return false; } else { uid_ = decode_uid(args[1].c_str()); } break; case K_seclabel: if (args.size() != 2) { *err = "seclabel option requires a label string\n"; return false; } else { seclabel_ = args[1]; } break; case K_writepid: if (args.size() < 2) { *err = "writepid option requires at least one filename\n"; return false; } writepid_files_.assign(args.begin() + 1, args.end()); break; default: *err = android::base::StringPrintf("invalid option '%s'\n", args[0].c_str()); return false; } return true; } bool Service::Start(const std::vector& dynamic_args) { // Starting a service removes it from the disabled or reset state and // immediately takes it out of the restarting state if it was in there. flags_ &= (~(SVC_DISABLED|SVC_RESTARTING|SVC_RESET|SVC_RESTART|SVC_DISABLED_START)); time_started_ = 0; // Running processes require no additional work --- if they're in the // process of exiting, we've ensured that they will immediately restart // on exit, unless they are ONESHOT. if (flags_ & SVC_RUNNING) { return false; } bool needs_console = (flags_ & SVC_CONSOLE); if (needs_console && !have_console) { ERROR("service '%s' requires console\n", name_.c_str()); flags_ |= SVC_DISABLED; return false; } struct stat sb; if (stat(args_[0].c_str(), &sb) == -1) { ERROR("cannot find '%s' (%s), disabling '%s'\n", args_[0].c_str(), strerror(errno), name_.c_str()); flags_ |= SVC_DISABLED; return false; } if ((!(flags_ & SVC_ONESHOT)) && !dynamic_args.empty()) { ERROR("service '%s' must be one-shot to use dynamic args, disabling\n", args_[0].c_str()); flags_ |= SVC_DISABLED; return false; } std::string scon; if (!seclabel_.empty()) { scon = seclabel_; } else { char* mycon = nullptr; char* fcon = nullptr; INFO("computing context for service '%s'\n", args_[0].c_str()); int rc = getcon(&mycon); if (rc < 0) { ERROR("could not get context while starting '%s'\n", name_.c_str()); return false; } rc = getfilecon(args_[0].c_str(), &fcon); if (rc < 0) { ERROR("could not get context while starting '%s'\n", name_.c_str()); free(mycon); return false; } char* ret_scon = nullptr; rc = security_compute_create(mycon, fcon, string_to_security_class("process"), &ret_scon); if (rc == 0) { scon = ret_scon; free(ret_scon); } if (rc == 0 && scon == mycon) { ERROR("Service %s does not have a SELinux domain defined.\n", name_.c_str()); free(mycon); free(fcon); return false; } free(mycon); free(fcon); if (rc < 0) { ERROR("could not get context while starting '%s'\n", name_.c_str()); return false; } } NOTICE("Starting service '%s'...\n", name_.c_str()); pid_t pid = fork(); if (pid == 0) { int fd, sz; umask(077); if (properties_initialized()) { get_property_workspace(&fd, &sz); std::string tmp = android::base::StringPrintf("%d,%d", dup(fd), sz); add_environment("ANDROID_PROPERTY_WORKSPACE", tmp.c_str()); } for (const auto& ei : envvars_) { add_environment(ei.name.c_str(), ei.value.c_str()); } for (const auto& si : sockets_) { int socket_type = ((si.type == "stream" ? SOCK_STREAM : (si.type == "dgram" ? SOCK_DGRAM : SOCK_SEQPACKET))); const char* socketcon = !si.socketcon.empty() ? si.socketcon.c_str() : scon.c_str(); int s = create_socket(si.name.c_str(), socket_type, si.perm, si.uid, si.gid, socketcon); if (s >= 0) { PublishSocket(si.name, s); } } std::string pid_str = android::base::StringPrintf("%d", pid); for (const auto& file : writepid_files_) { if (!android::base::WriteStringToFile(pid_str, file)) { ERROR("couldn't write %s to %s: %s\n", pid_str.c_str(), file.c_str(), strerror(errno)); } } if (ioprio_class_ != IoSchedClass_NONE) { if (android_set_ioprio(getpid(), ioprio_class_, ioprio_pri_)) { ERROR("Failed to set pid %d ioprio = %d,%d: %s\n", getpid(), ioprio_class_, ioprio_pri_, strerror(errno)); } } if (needs_console) { setsid(); OpenConsole(); } else { ZapStdio(); } setpgid(0, getpid()); // As requested, set our gid, supplemental gids, and uid. if (gid_) { if (setgid(gid_) != 0) { ERROR("setgid failed: %s\n", strerror(errno)); _exit(127); } } if (!supp_gids_.empty()) { if (setgroups(supp_gids_.size(), &supp_gids_[0]) != 0) { ERROR("setgroups failed: %s\n", strerror(errno)); _exit(127); } } if (uid_) { if (setuid(uid_) != 0) { ERROR("setuid failed: %s\n", strerror(errno)); _exit(127); } } if (!seclabel_.empty()) { if (setexeccon(seclabel_.c_str()) < 0) { ERROR("cannot setexeccon('%s'): %s\n", seclabel_.c_str(), strerror(errno)); _exit(127); } } std::vector strs; for (const auto& s : args_) { strs.push_back(const_cast(s.c_str())); } for (const auto& s : dynamic_args) { strs.push_back(const_cast(s.c_str())); } strs.push_back(nullptr); if (execve(args_[0].c_str(), (char**) &strs[0], (char**) ENV) < 0) { ERROR("cannot execve('%s'): %s\n", args_[0].c_str(), strerror(errno)); } _exit(127); } if (pid < 0) { ERROR("failed to start '%s'\n", name_.c_str()); pid_ = 0; return false; } time_started_ = gettime(); pid_ = pid; flags_ |= SVC_RUNNING; if ((flags_ & SVC_EXEC) != 0) { INFO("SVC_EXEC pid %d (uid %d gid %d+%zu context %s) started; waiting...\n", pid_, uid_, gid_, supp_gids_.size(), !seclabel_.empty() ? seclabel_.c_str() : "default"); } NotifyStateChange("running"); return true; } bool Service::Start() { const std::vector null_dynamic_args; return Start(null_dynamic_args); } bool Service::StartIfNotDisabled() { if (!(flags_ & SVC_DISABLED)) { return Start(); } else { flags_ |= SVC_DISABLED_START; } return true; } bool Service::Enable() { flags_ &= ~(SVC_DISABLED | SVC_RC_DISABLED); if (flags_ & SVC_DISABLED_START) { return Start(); } return true; } void Service::Reset() { StopOrReset(SVC_RESET); } void Service::Stop() { StopOrReset(SVC_DISABLED); } void Service::Restart() { if (flags_ & SVC_RUNNING) { /* Stop, wait, then start the service. */ StopOrReset(SVC_RESTART); } else if (!(flags_ & SVC_RESTARTING)) { /* Just start the service since it's not running. */ Start(); } /* else: Service is restarting anyways. */ } void Service::RestartIfNeeded(time_t& process_needs_restart) { time_t next_start_time = time_started_ + 5; if (next_start_time <= gettime()) { flags_ &= (~SVC_RESTARTING); Start(); return; } if ((next_start_time < process_needs_restart) || (process_needs_restart == 0)) { process_needs_restart = next_start_time; } } /* The how field should be either SVC_DISABLED, SVC_RESET, or SVC_RESTART */ void Service::StopOrReset(int how) { /* The service is still SVC_RUNNING until its process exits, but if it has * already exited it shoudn't attempt a restart yet. */ flags_ &= ~(SVC_RESTARTING | SVC_DISABLED_START); if ((how != SVC_DISABLED) && (how != SVC_RESET) && (how != SVC_RESTART)) { /* Hrm, an illegal flag. Default to SVC_DISABLED */ how = SVC_DISABLED; } /* if the service has not yet started, prevent * it from auto-starting with its class */ if (how == SVC_RESET) { flags_ |= (flags_ & SVC_RC_DISABLED) ? SVC_DISABLED : SVC_RESET; } else { flags_ |= how; } if (pid_) { NOTICE("Service '%s' is being killed...\n", name_.c_str()); kill(-pid_, SIGKILL); NotifyStateChange("stopping"); } else { NotifyStateChange("stopped"); } } void Service::ZapStdio() const { int fd; fd = open("/dev/null", O_RDWR); dup2(fd, 0); dup2(fd, 1); dup2(fd, 2); close(fd); } void Service::OpenConsole() const { int fd; if ((fd = open(console_name.c_str(), O_RDWR)) < 0) { fd = open("/dev/null", O_RDWR); } ioctl(fd, TIOCSCTTY, 0); dup2(fd, 0); dup2(fd, 1); dup2(fd, 2); close(fd); } void Service::PublishSocket(const std::string& name, int fd) const { std::string key = android::base::StringPrintf(ANDROID_SOCKET_ENV_PREFIX "%s", name.c_str()); std::string val = android::base::StringPrintf("%d", fd); add_environment(key.c_str(), val.c_str()); /* make sure we don't close-on-exec */ fcntl(fd, F_SETFD, 0); } int ServiceManager::exec_count_ = 0; ServiceManager::ServiceManager() { } ServiceManager& ServiceManager::GetInstance() { static ServiceManager instance; return instance; } Service* ServiceManager::AddNewService(const std::string& name, const std::string& classname, const std::vector& args, std::string* err) { if (!IsValidName(name)) { *err = android::base::StringPrintf("invalid service name '%s'\n", name.c_str()); return nullptr; } Service* svc = ServiceManager::GetInstance().FindServiceByName(name); if (svc) { *err = android::base::StringPrintf("ignored duplicate definition of service '%s'\n", name.c_str()); return nullptr; } std::unique_ptr svc_p(new Service(name, classname, args)); if (!svc_p) { ERROR("Couldn't allocate service for service '%s'", name.c_str()); return nullptr; } svc = svc_p.get(); services_.push_back(std::move(svc_p)); return svc; } Service* ServiceManager::MakeExecOneshotService(const std::vector& args) { // Parse the arguments: exec [SECLABEL [UID [GID]*] --] COMMAND ARGS... // SECLABEL can be a - to denote default std::size_t command_arg = 1; for (std::size_t i = 1; i < args.size(); ++i) { if (args[i] == "--") { command_arg = i + 1; break; } } if (command_arg > 4 + NR_SVC_SUPP_GIDS) { ERROR("exec called with too many supplementary group ids\n"); return nullptr; } if (command_arg >= args.size()) { ERROR("exec called without command\n"); return nullptr; } std::vector str_args(args.begin() + command_arg, args.end()); exec_count_++; std::string name = android::base::StringPrintf("exec %d (%s)", exec_count_, str_args[0].c_str()); unsigned flags = SVC_EXEC | SVC_ONESHOT; std::string seclabel = ""; if (command_arg > 2 && args[1] != "-") { seclabel = args[1]; } uid_t uid = 0; if (command_arg > 3) { uid = decode_uid(args[2].c_str()); } gid_t gid = 0; std::vector supp_gids; if (command_arg > 4) { gid = decode_uid(args[3].c_str()); std::size_t nr_supp_gids = command_arg - 1 /* -- */ - 4 /* exec SECLABEL UID GID */; for (size_t i = 0; i < nr_supp_gids; ++i) { supp_gids.push_back(decode_uid(args[4 + i].c_str())); } } std::unique_ptr svc_p(new Service(name, "default", flags, uid, gid, supp_gids, seclabel, str_args)); if (!svc_p) { ERROR("Couldn't allocate service for exec of '%s'", str_args[0].c_str()); return nullptr; } Service* svc = svc_p.get(); services_.push_back(std::move(svc_p)); return svc; } Service* ServiceManager::FindServiceByName(const std::string& name) const { auto svc = std::find_if(services_.begin(), services_.end(), [&name] (const std::unique_ptr& s) { return name == s->name(); }); if (svc != services_.end()) { return svc->get(); } return nullptr; } Service* ServiceManager::FindServiceByPid(pid_t pid) const { auto svc = std::find_if(services_.begin(), services_.end(), [&pid] (const std::unique_ptr& s) { return s->pid() == pid; }); if (svc != services_.end()) { return svc->get(); } return nullptr; } Service* ServiceManager::FindServiceByKeychord(int keychord_id) const { auto svc = std::find_if(services_.begin(), services_.end(), [&keychord_id] (const std::unique_ptr& s) { return s->keychord_id() == keychord_id; }); if (svc != services_.end()) { return svc->get(); } return nullptr; } void ServiceManager::ForEachService(void (*func)(Service* svc)) const { for (const auto& s : services_) { func(s.get()); } } void ServiceManager::ForEachServiceInClass(const std::string& classname, void (*func)(Service* svc)) const { for (const auto& s : services_) { if (classname == s->classname()) { func(s.get()); } } } void ServiceManager::ForEachServiceWithFlags(unsigned matchflags, void (*func)(Service* svc)) const { for (const auto& s : services_) { if (s->flags() & matchflags) { func(s.get()); } } } void ServiceManager::RemoveService(const Service& svc) { auto svc_it = std::find_if(services_.begin(), services_.end(), [&svc] (const std::unique_ptr& s) { return svc.name() == s->name(); }); if (svc_it == services_.end()) { return; } services_.erase(svc_it); } bool ServiceManager::IsValidName(const std::string& name) const { if (name.size() > 16) { return false; } for (const auto& c : name) { if (!isalnum(c) && (c != '_') && (c != '-')) { return false; } } return true; } void ServiceManager::DumpState() const { for (const auto& s : services_) { s->DumpState(); } INFO("\n"); }