|  | /* | 
|  | * Copyright (C) 2008 The Android Open Source Project | 
|  | * | 
|  | * Licensed under the Apache License, Version 2.0 (the "License"); | 
|  | * you may not use this file except in compliance with the License. | 
|  | * You may obtain a copy of the License at | 
|  | * | 
|  | *      http://www.apache.org/licenses/LICENSE-2.0 | 
|  | * | 
|  | * Unless required by applicable law or agreed to in writing, software | 
|  | * distributed under the License is distributed on an "AS IS" BASIS, | 
|  | * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. | 
|  | * See the License for the specific language governing permissions and | 
|  | * limitations under the License. | 
|  | */ | 
|  |  | 
|  | #include "builtins.h" | 
|  |  | 
|  | #include <android/api-level.h> | 
|  | #include <dirent.h> | 
|  | #include <errno.h> | 
|  | #include <fcntl.h> | 
|  | #include <fts.h> | 
|  | #include <glob.h> | 
|  | #include <linux/loop.h> | 
|  | #include <linux/module.h> | 
|  | #include <mntent.h> | 
|  | #include <net/if.h> | 
|  | #include <sched.h> | 
|  | #include <signal.h> | 
|  | #include <stdint.h> | 
|  | #include <stdio.h> | 
|  | #include <stdlib.h> | 
|  | #include <string.h> | 
|  | #include <sys/mount.h> | 
|  | #include <sys/resource.h> | 
|  | #include <sys/socket.h> | 
|  | #include <sys/stat.h> | 
|  | #include <sys/syscall.h> | 
|  | #include <sys/system_properties.h> | 
|  | #include <sys/time.h> | 
|  | #include <sys/types.h> | 
|  | #include <sys/wait.h> | 
|  | #include <unistd.h> | 
|  |  | 
|  | #include <map> | 
|  | #include <memory> | 
|  |  | 
|  | #include <InitProperties.sysprop.h> | 
|  | #include <android-base/chrono_utils.h> | 
|  | #include <android-base/file.h> | 
|  | #include <android-base/logging.h> | 
|  | #include <android-base/parsedouble.h> | 
|  | #include <android-base/parseint.h> | 
|  | #include <android-base/properties.h> | 
|  | #include <android-base/stringprintf.h> | 
|  | #include <android-base/strings.h> | 
|  | #include <android-base/unique_fd.h> | 
|  | #include <bootloader_message/bootloader_message.h> | 
|  | #include <cutils/android_reboot.h> | 
|  | #include <fs_mgr.h> | 
|  | #include <fscrypt/fscrypt.h> | 
|  | #include <libdm/dm.h> | 
|  | #include <libdm/loop_control.h> | 
|  | #include <libgsi/libgsi.h> | 
|  | #include <logwrap/logwrap.h> | 
|  | #include <private/android_filesystem_config.h> | 
|  | #include <selinux/android.h> | 
|  | #include <selinux/label.h> | 
|  | #include <selinux/selinux.h> | 
|  | #include <system/thread_defs.h> | 
|  |  | 
|  | #include "action_manager.h" | 
|  | #include "apex_init_util.h" | 
|  | #include "bootchart.h" | 
|  | #include "builtin_arguments.h" | 
|  | #include "fscrypt_init_extensions.h" | 
|  | #include "init.h" | 
|  | #include "mount_namespace.h" | 
|  | #include "parser.h" | 
|  | #include "property_service.h" | 
|  | #include "reboot.h" | 
|  | #include "rlimit_parser.h" | 
|  | #include "selabel.h" | 
|  | #include "selinux.h" | 
|  | #include "service.h" | 
|  | #include "service_list.h" | 
|  | #include "subcontext.h" | 
|  | #include "util.h" | 
|  |  | 
|  | using namespace std::literals::string_literals; | 
|  |  | 
|  | using android::base::Basename; | 
|  | using android::base::ResultError; | 
|  | using android::base::SetProperty; | 
|  | using android::base::Split; | 
|  | using android::base::StartsWith; | 
|  | using android::base::StringPrintf; | 
|  | using android::base::unique_fd; | 
|  | using android::fs_mgr::Fstab; | 
|  | using android::fs_mgr::ReadFstabFromFile; | 
|  |  | 
|  | #define chmod DO_NOT_USE_CHMOD_USE_FCHMODAT_SYMLINK_NOFOLLOW | 
|  |  | 
|  | namespace android { | 
|  | namespace init { | 
|  |  | 
|  | // There are many legacy paths in rootdir/init.rc that will virtually never exist on a new | 
|  | // device, such as '/sys/class/leds/jogball-backlight/brightness'.  As of this writing, there | 
|  | // are 81 such failures on cuttlefish.  Instead of spamming the log reporting them, we do not | 
|  | // report such failures unless we're running at the DEBUG log level. | 
|  | class ErrorIgnoreEnoent { | 
|  | public: | 
|  | ErrorIgnoreEnoent() | 
|  | : ignore_error_(errno == ENOENT && | 
|  | android::base::GetMinimumLogSeverity() > android::base::DEBUG) {} | 
|  | explicit ErrorIgnoreEnoent(int errno_to_append) | 
|  | : error_(errno_to_append), | 
|  | ignore_error_(errno_to_append == ENOENT && | 
|  | android::base::GetMinimumLogSeverity() > android::base::DEBUG) {} | 
|  |  | 
|  | template <typename T> | 
|  | operator android::base::expected<T, ResultError<android::base::Errno>>() { | 
|  | if (ignore_error_) { | 
|  | return {}; | 
|  | } | 
|  | return error_; | 
|  | } | 
|  |  | 
|  | template <typename T> | 
|  | ErrorIgnoreEnoent& operator<<(T&& t) { | 
|  | error_ << t; | 
|  | return *this; | 
|  | } | 
|  |  | 
|  | private: | 
|  | Error<> error_; | 
|  | bool ignore_error_; | 
|  | }; | 
|  |  | 
|  | inline ErrorIgnoreEnoent ErrnoErrorIgnoreEnoent() { | 
|  | return ErrorIgnoreEnoent(errno); | 
|  | } | 
|  |  | 
|  | std::vector<std::string> late_import_paths; | 
|  |  | 
|  | static constexpr std::chrono::nanoseconds kCommandRetryTimeout = 5s; | 
|  |  | 
|  | static Result<void> reboot_into_recovery(const std::vector<std::string>& options) { | 
|  | LOG(ERROR) << "Rebooting into recovery"; | 
|  | std::string err; | 
|  | if (!write_bootloader_message(options, &err)) { | 
|  | return Error() << "Failed to set bootloader message: " << err; | 
|  | } | 
|  | trigger_shutdown("reboot,recovery"); | 
|  | return {}; | 
|  | } | 
|  |  | 
|  | template <typename F> | 
|  | static void ForEachServiceInClass(const std::string& classname, F function) { | 
|  | for (const auto& service : ServiceList::GetInstance()) { | 
|  | if (service->classnames().count(classname)) std::invoke(function, service); | 
|  | } | 
|  | } | 
|  |  | 
|  | static Result<void> do_class_start(const BuiltinArguments& args) { | 
|  | // Do not start a class if it has a property persist.dont_start_class.CLASS set to 1. | 
|  | if (android::base::GetBoolProperty("persist.init.dont_start_class." + args[1], false)) | 
|  | return {}; | 
|  | // Starting a class does not start services which are explicitly disabled. | 
|  | // They must  be started individually. | 
|  | for (const auto& service : ServiceList::GetInstance()) { | 
|  | if (service->classnames().count(args[1])) { | 
|  | if (auto result = service->StartIfNotDisabled(); !result.ok()) { | 
|  | LOG(ERROR) << "Could not start service '" << service->name() | 
|  | << "' as part of class '" << args[1] << "': " << result.error(); | 
|  | } | 
|  | } | 
|  | } | 
|  | return {}; | 
|  | } | 
|  |  | 
|  | static Result<void> do_class_stop(const BuiltinArguments& args) { | 
|  | ForEachServiceInClass(args[1], &Service::Stop); | 
|  | return {}; | 
|  | } | 
|  |  | 
|  | static Result<void> do_class_reset(const BuiltinArguments& args) { | 
|  | ForEachServiceInClass(args[1], &Service::Reset); | 
|  | return {}; | 
|  | } | 
|  |  | 
|  | static Result<void> do_class_restart(const BuiltinArguments& args) { | 
|  | // Do not restart a class if it has a property persist.dont_start_class.CLASS set to 1. | 
|  | if (android::base::GetBoolProperty("persist.init.dont_start_class." + args[1], false)) | 
|  | return {}; | 
|  |  | 
|  | std::string classname; | 
|  |  | 
|  | CHECK(args.size() == 2 || args.size() == 3); | 
|  |  | 
|  | bool only_enabled = false; | 
|  | if (args.size() == 3) { | 
|  | if (args[1] != "--only-enabled") { | 
|  | return Error() << "Unexpected argument: " << args[1]; | 
|  | } | 
|  | only_enabled = true; | 
|  | classname = args[2]; | 
|  | } else if (args.size() == 2) { | 
|  | classname = args[1]; | 
|  | } | 
|  |  | 
|  | for (const auto& service : ServiceList::GetInstance()) { | 
|  | if (!service->classnames().count(classname)) { | 
|  | continue; | 
|  | } | 
|  | if (only_enabled && !service->IsEnabled()) { | 
|  | continue; | 
|  | } | 
|  | service->Restart(); | 
|  | } | 
|  | return {}; | 
|  | } | 
|  |  | 
|  | static Result<void> do_domainname(const BuiltinArguments& args) { | 
|  | if (auto result = WriteFile("/proc/sys/kernel/domainname", args[1]); !result.ok()) { | 
|  | return Error() << "Unable to write to /proc/sys/kernel/domainname: " << result.error(); | 
|  | } | 
|  | return {}; | 
|  | } | 
|  |  | 
|  | static Result<void> do_enable(const BuiltinArguments& args) { | 
|  | Service* svc = ServiceList::GetInstance().FindService(args[1]); | 
|  | if (!svc) return Error() << "Could not find service"; | 
|  |  | 
|  | if (auto result = svc->Enable(); !result.ok()) { | 
|  | return Error() << "Could not enable service: " << result.error(); | 
|  | } | 
|  |  | 
|  | return {}; | 
|  | } | 
|  |  | 
|  | static Result<void> do_exec(const BuiltinArguments& args) { | 
|  | auto service = Service::MakeTemporaryOneshotService(args.args); | 
|  | if (!service.ok()) { | 
|  | return Error() << "Could not create exec service: " << service.error(); | 
|  | } | 
|  | if (auto result = (*service)->ExecStart(); !result.ok()) { | 
|  | return Error() << "Could not start exec service: " << result.error(); | 
|  | } | 
|  |  | 
|  | ServiceList::GetInstance().AddService(std::move(*service)); | 
|  | return {}; | 
|  | } | 
|  |  | 
|  | static Result<void> do_exec_background(const BuiltinArguments& args) { | 
|  | auto service = Service::MakeTemporaryOneshotService(args.args); | 
|  | if (!service.ok()) { | 
|  | return Error() << "Could not create exec background service: " << service.error(); | 
|  | } | 
|  | if (auto result = (*service)->Start(); !result.ok()) { | 
|  | return Error() << "Could not start exec background service: " << result.error(); | 
|  | } | 
|  |  | 
|  | ServiceList::GetInstance().AddService(std::move(*service)); | 
|  | return {}; | 
|  | } | 
|  |  | 
|  | static Result<void> do_exec_start(const BuiltinArguments& args) { | 
|  | Service* service = ServiceList::GetInstance().FindService(args[1]); | 
|  | if (!service) { | 
|  | return Error() << "Service not found"; | 
|  | } | 
|  |  | 
|  | if (auto result = service->ExecStart(); !result.ok()) { | 
|  | return Error() << "Could not start exec service: " << result.error(); | 
|  | } | 
|  |  | 
|  | return {}; | 
|  | } | 
|  |  | 
|  | static Result<void> do_export(const BuiltinArguments& args) { | 
|  | if (setenv(args[1].c_str(), args[2].c_str(), 1) == -1) { | 
|  | return ErrnoError() << "setenv() failed"; | 
|  | } | 
|  | return {}; | 
|  | } | 
|  |  | 
|  | static Result<void> do_load_exports(const BuiltinArguments& args) { | 
|  | auto file_contents = ReadFile(args[1]); | 
|  | if (!file_contents.ok()) { | 
|  | return Error() << "Could not read input file '" << args[1] | 
|  | << "': " << file_contents.error(); | 
|  | } | 
|  |  | 
|  | auto lines = Split(*file_contents, "\n"); | 
|  | for (const auto& line : lines) { | 
|  | if (line.empty()) { | 
|  | continue; | 
|  | } | 
|  |  | 
|  | auto env = Split(line, " "); | 
|  |  | 
|  | if (env.size() != 3) { | 
|  | return ErrnoError() << "Expected a line as `export <name> <value>`, found: `" << line | 
|  | << "`"; | 
|  | } | 
|  |  | 
|  | if (env[0] != "export") { | 
|  | return ErrnoError() << "Unknown action: '" << env[0] << "', expected 'export'"; | 
|  | } | 
|  |  | 
|  | if (setenv(env[1].c_str(), env[2].c_str(), 1) == -1) { | 
|  | return ErrnoError() << "Failed to export '" << line << "' from " << args[1]; | 
|  | } | 
|  | } | 
|  |  | 
|  | return {}; | 
|  | } | 
|  |  | 
|  | static Result<void> do_hostname(const BuiltinArguments& args) { | 
|  | if (auto result = WriteFile("/proc/sys/kernel/hostname", args[1]); !result.ok()) { | 
|  | return Error() << "Unable to write to /proc/sys/kernel/hostname: " << result.error(); | 
|  | } | 
|  | return {}; | 
|  | } | 
|  |  | 
|  | static Result<void> do_ifup(const BuiltinArguments& args) { | 
|  | struct ifreq ifr; | 
|  |  | 
|  | strlcpy(ifr.ifr_name, args[1].c_str(), IFNAMSIZ); | 
|  |  | 
|  | unique_fd s(TEMP_FAILURE_RETRY(socket(AF_INET, SOCK_DGRAM | SOCK_CLOEXEC, 0))); | 
|  | if (s < 0) return ErrnoError() << "opening socket failed"; | 
|  |  | 
|  | if (ioctl(s.get(), SIOCGIFFLAGS, &ifr) < 0) { | 
|  | return ErrnoError() << "ioctl(..., SIOCGIFFLAGS, ...) failed"; | 
|  | } | 
|  |  | 
|  | ifr.ifr_flags |= IFF_UP; | 
|  |  | 
|  | if (ioctl(s.get(), SIOCSIFFLAGS, &ifr) < 0) { | 
|  | return ErrnoError() << "ioctl(..., SIOCSIFFLAGS, ...) failed"; | 
|  | } | 
|  |  | 
|  | return {}; | 
|  | } | 
|  |  | 
|  | static Result<void> do_insmod(const BuiltinArguments& args) { | 
|  | int flags = 0; | 
|  | auto it = args.begin() + 1; | 
|  |  | 
|  | if (!(*it).compare("-f")) { | 
|  | flags = MODULE_INIT_IGNORE_VERMAGIC | MODULE_INIT_IGNORE_MODVERSIONS; | 
|  | it++; | 
|  | } | 
|  |  | 
|  | std::string filename = *it++; | 
|  | std::string options = android::base::Join(std::vector<std::string>(it, args.end()), ' '); | 
|  |  | 
|  | unique_fd fd(TEMP_FAILURE_RETRY(open(filename.c_str(), O_RDONLY | O_NOFOLLOW | O_CLOEXEC))); | 
|  | if (fd == -1) return ErrnoError() << "open(\"" << filename << "\") failed"; | 
|  |  | 
|  | int rc = syscall(__NR_finit_module, fd.get(), options.c_str(), flags); | 
|  | if (rc == -1) return ErrnoError() << "finit_module for \"" << filename << "\" failed"; | 
|  |  | 
|  | return {}; | 
|  | } | 
|  |  | 
|  | static Result<void> do_interface_restart(const BuiltinArguments& args) { | 
|  | Service* svc = ServiceList::GetInstance().FindInterface(args[1]); | 
|  | if (!svc) return Error() << "interface " << args[1] << " not found"; | 
|  | svc->Restart(); | 
|  | return {}; | 
|  | } | 
|  |  | 
|  | static Result<void> do_interface_start(const BuiltinArguments& args) { | 
|  | Service* svc = ServiceList::GetInstance().FindInterface(args[1]); | 
|  | if (!svc) return Error() << "interface " << args[1] << " not found"; | 
|  | if (auto result = svc->Start(); !result.ok()) { | 
|  | return Error() << "Could not start interface: " << result.error(); | 
|  | } | 
|  | return {}; | 
|  | } | 
|  |  | 
|  | static Result<void> do_interface_stop(const BuiltinArguments& args) { | 
|  | Service* svc = ServiceList::GetInstance().FindInterface(args[1]); | 
|  | if (!svc) return Error() << "interface " << args[1] << " not found"; | 
|  | svc->Stop(); | 
|  | return {}; | 
|  | } | 
|  |  | 
|  | static Result<void> make_dir_with_options(const MkdirOptions& options) { | 
|  | std::string ref_basename; | 
|  | if (options.ref_option == "ref") { | 
|  | ref_basename = fscrypt_key_ref; | 
|  | } else if (options.ref_option == "per_boot_ref") { | 
|  | ref_basename = fscrypt_key_per_boot_ref; | 
|  | } else { | 
|  | return Error() << "Unknown key option: '" << options.ref_option << "'"; | 
|  | } | 
|  |  | 
|  | struct stat mstat; | 
|  | if (lstat(options.target.c_str(), &mstat) != 0) { | 
|  | if (errno != ENOENT) { | 
|  | return ErrnoError() << "lstat() failed on " << options.target; | 
|  | } | 
|  | if (!make_dir(options.target, options.mode)) { | 
|  | return ErrnoErrorIgnoreEnoent() << "mkdir() failed on " << options.target; | 
|  | } | 
|  | if (lstat(options.target.c_str(), &mstat) != 0) { | 
|  | return ErrnoError() << "lstat() failed on new " << options.target; | 
|  | } | 
|  | } | 
|  | if (!S_ISDIR(mstat.st_mode)) { | 
|  | return Error() << "Not a directory on " << options.target; | 
|  | } | 
|  | bool needs_chmod = (mstat.st_mode & ~S_IFMT) != options.mode; | 
|  | if ((options.uid != static_cast<uid_t>(-1) && options.uid != mstat.st_uid) || | 
|  | (options.gid != static_cast<gid_t>(-1) && options.gid != mstat.st_gid)) { | 
|  | if (lchown(options.target.c_str(), options.uid, options.gid) == -1) { | 
|  | return ErrnoError() << "lchown failed on " << options.target; | 
|  | } | 
|  | // chown may have cleared S_ISUID and S_ISGID, chmod again | 
|  | needs_chmod = true; | 
|  | } | 
|  | if (needs_chmod) { | 
|  | if (fchmodat(AT_FDCWD, options.target.c_str(), options.mode, AT_SYMLINK_NOFOLLOW) == -1) { | 
|  | return ErrnoError() << "fchmodat() failed on " << options.target; | 
|  | } | 
|  | } | 
|  | if (IsFbeEnabled()) { | 
|  | if (!FscryptSetDirectoryPolicy(ref_basename, options.fscrypt_action, options.target)) { | 
|  | return reboot_into_recovery( | 
|  | {"--prompt_and_wipe_data", "--reason=set_policy_failed:"s + options.target}); | 
|  | } | 
|  | } | 
|  | return {}; | 
|  | } | 
|  |  | 
|  | // mkdir <path> [mode] [owner] [group] [<option> ...] | 
|  | static Result<void> do_mkdir(const BuiltinArguments& args) { | 
|  | auto options = ParseMkdir(args.args); | 
|  | if (!options.ok()) return options.error(); | 
|  | return make_dir_with_options(*options); | 
|  | } | 
|  |  | 
|  | /* umount <path> */ | 
|  | static Result<void> do_umount(const BuiltinArguments& args) { | 
|  | if (umount(args[1].c_str()) < 0) { | 
|  | return ErrnoError() << "umount() failed"; | 
|  | } | 
|  | return {}; | 
|  | } | 
|  |  | 
|  | static struct { | 
|  | const char *name; | 
|  | unsigned flag; | 
|  | } mount_flags[] = { | 
|  | { "noatime",    MS_NOATIME }, | 
|  | { "noexec",     MS_NOEXEC }, | 
|  | { "nosuid",     MS_NOSUID }, | 
|  | { "nodev",      MS_NODEV }, | 
|  | { "nodiratime", MS_NODIRATIME }, | 
|  | { "ro",         MS_RDONLY }, | 
|  | { "rw",         0 }, | 
|  | { "remount",    MS_REMOUNT }, | 
|  | { "bind",       MS_BIND }, | 
|  | { "rec",        MS_REC }, | 
|  | { "unbindable", MS_UNBINDABLE }, | 
|  | { "private",    MS_PRIVATE }, | 
|  | { "slave",      MS_SLAVE }, | 
|  | { "shared",     MS_SHARED }, | 
|  | { "defaults",   0 }, | 
|  | { 0,            0 }, | 
|  | }; | 
|  |  | 
|  | /* mount <type> <device> <path> <flags ...> <options> */ | 
|  | static Result<void> do_mount(const BuiltinArguments& args) { | 
|  | const char* options = nullptr; | 
|  | unsigned flags = 0; | 
|  | bool wait = false; | 
|  |  | 
|  | for (size_t na = 4; na < args.size(); na++) { | 
|  | size_t i; | 
|  | for (i = 0; mount_flags[i].name; i++) { | 
|  | if (!args[na].compare(mount_flags[i].name)) { | 
|  | flags |= mount_flags[i].flag; | 
|  | break; | 
|  | } | 
|  | } | 
|  |  | 
|  | if (!mount_flags[i].name) { | 
|  | if (!args[na].compare("wait")) { | 
|  | wait = true; | 
|  | // If our last argument isn't a flag, wolf it up as an option string. | 
|  | } else if (na + 1 == args.size()) { | 
|  | options = args[na].c_str(); | 
|  | } | 
|  | } | 
|  | } | 
|  |  | 
|  | const char* system = args[1].c_str(); | 
|  | const char* source = args[2].c_str(); | 
|  | const char* target = args[3].c_str(); | 
|  |  | 
|  | if (android::base::StartsWith(source, "loop@")) { | 
|  | int mode = (flags & MS_RDONLY) ? O_RDONLY : O_RDWR; | 
|  | const char* file_path = source + strlen("loop@"); | 
|  |  | 
|  | // Open source file | 
|  | if (wait) { | 
|  | wait_for_file(file_path, kCommandRetryTimeout); | 
|  | } | 
|  |  | 
|  | unique_fd fd(TEMP_FAILURE_RETRY(open(file_path, mode | O_CLOEXEC))); | 
|  | if (fd < 0) { | 
|  | return ErrnoError() << "open(" << file_path << ", " << mode << ") failed"; | 
|  | } | 
|  |  | 
|  | // Allocate loop device and attach it to file_path. | 
|  | android::dm::LoopControl loop_control; | 
|  | std::string loop_device; | 
|  | if (!loop_control.Attach(fd.get(), 5s, &loop_device)) { | 
|  | return ErrnoError() << "loop_control.Attach " << file_path << " failed"; | 
|  | } | 
|  |  | 
|  | if (mount(loop_device.c_str(), target, system, flags, options) < 0) { | 
|  | loop_control.Detach(loop_device); | 
|  | return ErrnoError() << "mount() failed"; | 
|  | } | 
|  | } else { | 
|  | if (wait) | 
|  | wait_for_file(source, kCommandRetryTimeout); | 
|  | if (mount(source, target, system, flags, options) < 0) { | 
|  | return ErrnoErrorIgnoreEnoent() << "mount() failed"; | 
|  | } | 
|  |  | 
|  | } | 
|  |  | 
|  | return {}; | 
|  | } | 
|  |  | 
|  | /* Imports .rc files from the specified paths. Default ones are applied if none is given. | 
|  | * | 
|  | * rc_paths: list of paths to rc files to import | 
|  | */ | 
|  | static void import_late(const std::vector<std::string>& rc_paths) { | 
|  | auto& action_manager = ActionManager::GetInstance(); | 
|  | auto& service_list = ServiceList::GetInstance(); | 
|  | Parser parser = CreateParser(action_manager, service_list); | 
|  | if (rc_paths.empty()) { | 
|  | // Fallbacks for partitions on which early mount isn't enabled. | 
|  | for (const auto& path : late_import_paths) { | 
|  | parser.ParseConfig(path); | 
|  | } | 
|  | late_import_paths.clear(); | 
|  | } else { | 
|  | for (const auto& rc_path : rc_paths) { | 
|  | parser.ParseConfig(rc_path); | 
|  | } | 
|  | } | 
|  |  | 
|  | // Turning this on and letting the INFO logging be discarded adds 0.2s to | 
|  | // Nexus 9 boot time, so it's disabled by default. | 
|  | if (false) DumpState(); | 
|  | } | 
|  |  | 
|  | /* Queue event based on fs_mgr return code. | 
|  | * | 
|  | * code: return code of fs_mgr_mount_all | 
|  | * | 
|  | * This function might request a reboot, in which case it will | 
|  | * not return. | 
|  | * | 
|  | * return code is processed based on input code | 
|  | */ | 
|  | static Result<void> queue_fs_event(int code) { | 
|  | if (code == FS_MGR_MNTALL_DEV_NOT_ENCRYPTABLE) { | 
|  | SetProperty("ro.crypto.state", "unsupported"); | 
|  | ActionManager::GetInstance().QueueEventTrigger("nonencrypted"); | 
|  | return {}; | 
|  | } else if (code == FS_MGR_MNTALL_DEV_NEEDS_RECOVERY) { | 
|  | /* Setup a wipe via recovery, and reboot into recovery */ | 
|  | if (android::gsi::IsGsiRunning()) { | 
|  | return Error() << "cannot wipe within GSI"; | 
|  | } | 
|  | PLOG(ERROR) << "fs_mgr_mount_all suggested recovery, so wiping data via recovery."; | 
|  | const std::vector<std::string> options = {"--wipe_data", "--reason=fs_mgr_mount_all" }; | 
|  | return reboot_into_recovery(options); | 
|  | /* If reboot worked, there is no return. */ | 
|  | } else if (code == FS_MGR_MNTALL_DEV_FILE_ENCRYPTED || | 
|  | code == FS_MGR_MNTALL_DEV_IS_METADATA_ENCRYPTED || | 
|  | code == FS_MGR_MNTALL_DEV_NEEDS_METADATA_ENCRYPTION) { | 
|  | SetProperty("ro.crypto.state", "encrypted"); | 
|  |  | 
|  | // Although encrypted, vold has already set the device up, so we do not need to | 
|  | // do anything different from the nonencrypted case. | 
|  | ActionManager::GetInstance().QueueEventTrigger("nonencrypted"); | 
|  | return {}; | 
|  | } else if (code > 0) { | 
|  | Error() << "fs_mgr_mount_all() returned unexpected error " << code; | 
|  | } | 
|  | /* else ... < 0: error */ | 
|  |  | 
|  | return Error() << "Invalid code: " << code; | 
|  | } | 
|  |  | 
|  | static int initial_mount_fstab_return_code = -1; | 
|  |  | 
|  | /* <= Q: mount_all <fstab> [ <path> ]* [--<options>]* | 
|  | * >= R: mount_all [ <fstab> ] [--<options>]* | 
|  | * | 
|  | * This function might request a reboot, in which case it will | 
|  | * not return. | 
|  | */ | 
|  | static Result<void> do_mount_all(const BuiltinArguments& args) { | 
|  | auto mount_all = ParseMountAll(args.args); | 
|  | if (!mount_all.ok()) return mount_all.error(); | 
|  |  | 
|  | const char* prop_post_fix = "default"; | 
|  | bool queue_event = true; | 
|  | if (mount_all->mode == MOUNT_MODE_EARLY) { | 
|  | prop_post_fix = "early"; | 
|  | queue_event = false; | 
|  | } else if (mount_all->mode == MOUNT_MODE_LATE) { | 
|  | prop_post_fix = "late"; | 
|  | } | 
|  |  | 
|  | std::string prop_name = "ro.boottime.init.mount_all."s + prop_post_fix; | 
|  | android::base::Timer t; | 
|  |  | 
|  | Fstab fstab; | 
|  | if (mount_all->fstab_path.empty()) { | 
|  | if (!ReadDefaultFstab(&fstab)) { | 
|  | return Error() << "Could not read default fstab"; | 
|  | } | 
|  | } else { | 
|  | if (!ReadFstabFromFile(mount_all->fstab_path, &fstab)) { | 
|  | return Error() << "Could not read fstab"; | 
|  | } | 
|  | } | 
|  |  | 
|  | auto mount_fstab_result = fs_mgr_mount_all(&fstab, mount_all->mode); | 
|  | SetProperty(prop_name, std::to_string(t.duration().count())); | 
|  |  | 
|  | if (mount_all->import_rc) { | 
|  | import_late(mount_all->rc_paths); | 
|  | } | 
|  |  | 
|  | if (mount_fstab_result.userdata_mounted) { | 
|  | // This call to fs_mgr_mount_all mounted userdata. Keep the result in | 
|  | // order for userspace reboot to correctly remount userdata. | 
|  | LOG(INFO) << "Userdata mounted using " | 
|  | << (mount_all->fstab_path.empty() ? "(default fstab)" : mount_all->fstab_path) | 
|  | << " result : " << mount_fstab_result.code; | 
|  | initial_mount_fstab_return_code = mount_fstab_result.code; | 
|  | } | 
|  |  | 
|  | if (queue_event) { | 
|  | /* queue_fs_event will queue event based on mount_fstab return code | 
|  | * and return processed return code*/ | 
|  | auto queue_fs_result = queue_fs_event(mount_fstab_result.code); | 
|  | if (!queue_fs_result.ok()) { | 
|  | return Error() << "queue_fs_event() failed: " << queue_fs_result.error(); | 
|  | } | 
|  | } | 
|  |  | 
|  | return {}; | 
|  | } | 
|  |  | 
|  | /* umount_all [ <fstab> ] */ | 
|  | static Result<void> do_umount_all(const BuiltinArguments& args) { | 
|  | auto umount_all = ParseUmountAll(args.args); | 
|  | if (!umount_all.ok()) return umount_all.error(); | 
|  |  | 
|  | Fstab fstab; | 
|  | if (umount_all->empty()) { | 
|  | if (!ReadDefaultFstab(&fstab)) { | 
|  | return Error() << "Could not read default fstab"; | 
|  | } | 
|  | } else { | 
|  | if (!ReadFstabFromFile(*umount_all, &fstab)) { | 
|  | return Error() << "Could not read fstab"; | 
|  | } | 
|  | } | 
|  |  | 
|  | if (auto result = fs_mgr_umount_all(&fstab); result != 0) { | 
|  | return Error() << "umount_fstab() failed " << result; | 
|  | } | 
|  | return {}; | 
|  | } | 
|  |  | 
|  | /* swapon_all [ <fstab> ] */ | 
|  | static Result<void> do_swapon_all(const BuiltinArguments& args) { | 
|  | auto swapon_all = ParseSwaponAll(args.args); | 
|  | if (!swapon_all.ok()) return swapon_all.error(); | 
|  |  | 
|  | Fstab fstab; | 
|  | if (swapon_all->empty()) { | 
|  | if (!ReadDefaultFstab(&fstab)) { | 
|  | return Error() << "Could not read default fstab"; | 
|  | } | 
|  | } else { | 
|  | if (!ReadFstabFromFile(*swapon_all, &fstab)) { | 
|  | return Error() << "Could not read fstab '" << *swapon_all << "'"; | 
|  | } | 
|  | } | 
|  |  | 
|  | if (!fs_mgr_swapon_all(fstab)) { | 
|  | return Error() << "fs_mgr_swapon_all() failed"; | 
|  | } | 
|  |  | 
|  | return {}; | 
|  | } | 
|  |  | 
|  | static Result<void> do_setprop(const BuiltinArguments& args) { | 
|  | if (StartsWith(args[1], "ctl.")) { | 
|  | return Error() | 
|  | << "Cannot set ctl. properties from init; call the Service functions directly"; | 
|  | } | 
|  | if (args[1] == kRestoreconProperty) { | 
|  | return Error() << "Cannot set '" << kRestoreconProperty | 
|  | << "' from init; use the restorecon builtin directly"; | 
|  | } | 
|  |  | 
|  | SetProperty(args[1], args[2]); | 
|  | return {}; | 
|  | } | 
|  |  | 
|  | static Result<void> do_setrlimit(const BuiltinArguments& args) { | 
|  | auto rlimit = ParseRlimit(args.args); | 
|  | if (!rlimit.ok()) return rlimit.error(); | 
|  |  | 
|  | if (setrlimit(rlimit->first, &rlimit->second) == -1) { | 
|  | return ErrnoError() << "setrlimit failed"; | 
|  | } | 
|  | return {}; | 
|  | } | 
|  |  | 
|  | static Result<void> do_start(const BuiltinArguments& args) { | 
|  | Service* svc = ServiceList::GetInstance().FindService(args[1]); | 
|  | if (!svc) return Error() << "service " << args[1] << " not found"; | 
|  | errno = 0; | 
|  | if (auto result = svc->Start(); !result.ok()) { | 
|  | return ErrorIgnoreEnoent() << "Could not start service: " << result.error(); | 
|  | } | 
|  | return {}; | 
|  | } | 
|  |  | 
|  | static Result<void> do_stop(const BuiltinArguments& args) { | 
|  | Service* svc = ServiceList::GetInstance().FindService(args[1]); | 
|  | if (!svc) return Error() << "service " << args[1] << " not found"; | 
|  | svc->Stop(); | 
|  | return {}; | 
|  | } | 
|  |  | 
|  | static Result<void> do_restart(const BuiltinArguments& args) { | 
|  | bool only_if_running = false; | 
|  | if (args.size() == 3) { | 
|  | if (args[1] == "--only-if-running") { | 
|  | only_if_running = true; | 
|  | } else { | 
|  | return Error() << "Unknown argument to restart: " << args[1]; | 
|  | } | 
|  | } | 
|  |  | 
|  | const auto& classname = args[args.size() - 1]; | 
|  | Service* svc = ServiceList::GetInstance().FindService(classname); | 
|  | if (!svc) return Error() << "service " << classname << " not found"; | 
|  | if (only_if_running && !svc->IsRunning()) { | 
|  | return {}; | 
|  | } | 
|  | svc->Restart(); | 
|  | return {}; | 
|  | } | 
|  |  | 
|  | static Result<void> do_trigger(const BuiltinArguments& args) { | 
|  | ActionManager::GetInstance().QueueEventTrigger(args[1]); | 
|  | return {}; | 
|  | } | 
|  |  | 
|  | static int MakeSymlink(const std::string& target, const std::string& linkpath) { | 
|  | std::string secontext; | 
|  | // Passing 0 for mode should work. | 
|  | if (SelabelLookupFileContext(linkpath, 0, &secontext) && !secontext.empty()) { | 
|  | setfscreatecon(secontext.c_str()); | 
|  | } | 
|  |  | 
|  | int rc = symlink(target.c_str(), linkpath.c_str()); | 
|  |  | 
|  | if (!secontext.empty()) { | 
|  | int save_errno = errno; | 
|  | setfscreatecon(nullptr); | 
|  | errno = save_errno; | 
|  | } | 
|  |  | 
|  | return rc; | 
|  | } | 
|  |  | 
|  | static Result<void> do_symlink(const BuiltinArguments& args) { | 
|  | if (MakeSymlink(args[1], args[2]) < 0) { | 
|  | // The symlink builtin is often used to create symlinks for older devices to be backwards | 
|  | // compatible with new paths, therefore we skip reporting this error. | 
|  | return ErrnoErrorIgnoreEnoent() << "symlink() failed"; | 
|  | } | 
|  | return {}; | 
|  | } | 
|  |  | 
|  | static Result<void> do_rm(const BuiltinArguments& args) { | 
|  | if (unlink(args[1].c_str()) < 0) { | 
|  | return ErrnoError() << "unlink() failed"; | 
|  | } | 
|  | return {}; | 
|  | } | 
|  |  | 
|  | static Result<void> do_rmdir(const BuiltinArguments& args) { | 
|  | if (rmdir(args[1].c_str()) < 0) { | 
|  | return ErrnoError() << "rmdir() failed"; | 
|  | } | 
|  | return {}; | 
|  | } | 
|  |  | 
|  | static Result<void> do_sysclktz(const BuiltinArguments& args) { | 
|  | struct timezone tz = {}; | 
|  | if (!android::base::ParseInt(args[1], &tz.tz_minuteswest)) { | 
|  | return Error() << "Unable to parse mins_west_of_gmt"; | 
|  | } | 
|  |  | 
|  | if (settimeofday(nullptr, &tz) == -1) { | 
|  | return ErrnoError() << "settimeofday() failed"; | 
|  | } | 
|  | return {}; | 
|  | } | 
|  |  | 
|  | static Result<void> do_verity_update_state(const BuiltinArguments& args) { | 
|  | int mode; | 
|  | if (!fs_mgr_load_verity_state(&mode)) { | 
|  | return Error() << "fs_mgr_load_verity_state() failed"; | 
|  | } | 
|  |  | 
|  | Fstab fstab; | 
|  | if (!ReadDefaultFstab(&fstab)) { | 
|  | return Error() << "Failed to read default fstab"; | 
|  | } | 
|  |  | 
|  | for (const auto& entry : fstab) { | 
|  | if (!fs_mgr_is_verity_enabled(entry)) { | 
|  | continue; | 
|  | } | 
|  |  | 
|  | // To be consistent in vboot 1.0 and vboot 2.0 (AVB), use "system" for the partition even | 
|  | // for system as root, so it has property [partition.system.verified]. | 
|  | std::string partition = entry.mount_point == "/" ? "system" : Basename(entry.mount_point); | 
|  | SetProperty("partition." + partition + ".verified", std::to_string(mode)); | 
|  |  | 
|  | auto hashtree_info = fs_mgr_get_hashtree_info(entry); | 
|  | if (hashtree_info) { | 
|  | SetProperty("partition." + partition + ".verified.hash_alg", hashtree_info->algorithm); | 
|  | SetProperty("partition." + partition + ".verified.root_digest", | 
|  | hashtree_info->root_digest); | 
|  | SetProperty("partition." + partition + ".verified.check_at_most_once", | 
|  | hashtree_info->check_at_most_once ? "1" : "0"); | 
|  | } | 
|  | } | 
|  |  | 
|  | return {}; | 
|  | } | 
|  |  | 
|  | static Result<void> do_write(const BuiltinArguments& args) { | 
|  | if (auto result = WriteFile(args[1], args[2]); !result.ok()) { | 
|  | return ErrorIgnoreEnoent() | 
|  | << "Unable to write to file '" << args[1] << "': " << result.error(); | 
|  | } | 
|  |  | 
|  | return {}; | 
|  | } | 
|  |  | 
|  | static Result<void> readahead_file(const std::string& filename, bool fully) { | 
|  | android::base::unique_fd fd(TEMP_FAILURE_RETRY(open(filename.c_str(), O_RDONLY | O_CLOEXEC))); | 
|  | if (fd == -1) { | 
|  | return ErrnoError() << "Error opening file"; | 
|  | } | 
|  | if (posix_fadvise(fd.get(), 0, 0, POSIX_FADV_WILLNEED)) { | 
|  | return ErrnoError() << "Error posix_fadvise file"; | 
|  | } | 
|  | if (readahead(fd.get(), 0, std::numeric_limits<size_t>::max())) { | 
|  | return ErrnoError() << "Error readahead file"; | 
|  | } | 
|  | if (fully) { | 
|  | char buf[BUFSIZ]; | 
|  | ssize_t n; | 
|  | while ((n = TEMP_FAILURE_RETRY(read(fd.get(), &buf[0], sizeof(buf)))) > 0) { | 
|  | } | 
|  | if (n != 0) { | 
|  | return ErrnoError() << "Error reading file"; | 
|  | } | 
|  | } | 
|  | return {}; | 
|  | } | 
|  |  | 
|  | static Result<void> do_readahead(const BuiltinArguments& args) { | 
|  | struct stat sb; | 
|  |  | 
|  | if (stat(args[1].c_str(), &sb)) { | 
|  | return ErrnoError() << "Error opening " << args[1]; | 
|  | } | 
|  |  | 
|  | bool readfully = false; | 
|  | if (args.size() == 3 && args[2] == "--fully") { | 
|  | readfully = true; | 
|  | } | 
|  | // We will do readahead in a forked process in order not to block init | 
|  | // since it may block while it reads the | 
|  | // filesystem metadata needed to locate the requested blocks.  This | 
|  | // occurs frequently with ext[234] on large files using indirect blocks | 
|  | // instead of extents, giving the appearance that the call blocks until | 
|  | // the requested data has been read. | 
|  | pid_t pid = fork(); | 
|  | if (pid == 0) { | 
|  | if (setpriority(PRIO_PROCESS, 0, static_cast<int>(ANDROID_PRIORITY_LOWEST)) != 0) { | 
|  | PLOG(WARNING) << "setpriority failed"; | 
|  | } | 
|  | if (android_set_ioprio(0, IoSchedClass_IDLE, 7)) { | 
|  | PLOG(WARNING) << "ioprio_get failed"; | 
|  | } | 
|  | android::base::Timer t; | 
|  | if (S_ISREG(sb.st_mode)) { | 
|  | if (auto result = readahead_file(args[1], readfully); !result.ok()) { | 
|  | LOG(WARNING) << "Unable to readahead '" << args[1] << "': " << result.error(); | 
|  | _exit(EXIT_FAILURE); | 
|  | } | 
|  | } else if (S_ISDIR(sb.st_mode)) { | 
|  | char* paths[] = {const_cast<char*>(args[1].data()), nullptr}; | 
|  | std::unique_ptr<FTS, decltype(&fts_close)> fts( | 
|  | fts_open(paths, FTS_PHYSICAL | FTS_NOCHDIR | FTS_XDEV, nullptr), fts_close); | 
|  | if (!fts) { | 
|  | PLOG(ERROR) << "Error opening directory: " << args[1]; | 
|  | _exit(EXIT_FAILURE); | 
|  | } | 
|  | // Traverse the entire hierarchy and do readahead | 
|  | for (FTSENT* ftsent = fts_read(fts.get()); ftsent != nullptr; | 
|  | ftsent = fts_read(fts.get())) { | 
|  | if (ftsent->fts_info & FTS_F) { | 
|  | const std::string filename = ftsent->fts_accpath; | 
|  | if (auto result = readahead_file(filename, readfully); !result.ok()) { | 
|  | LOG(WARNING) | 
|  | << "Unable to readahead '" << filename << "': " << result.error(); | 
|  | } | 
|  | } | 
|  | } | 
|  | } | 
|  | LOG(INFO) << "Readahead " << args[1] << " took " << t << " asynchronously"; | 
|  | _exit(0); | 
|  | } else if (pid < 0) { | 
|  | return ErrnoError() << "Fork failed"; | 
|  | } | 
|  | return {}; | 
|  | } | 
|  |  | 
|  | static Result<void> do_copy(const BuiltinArguments& args) { | 
|  | auto file_contents = ReadFile(args[1]); | 
|  | if (!file_contents.ok()) { | 
|  | return Error() << "Could not read input file '" << args[1] << "': " << file_contents.error(); | 
|  | } | 
|  | if (auto result = WriteFile(args[2], *file_contents); !result.ok()) { | 
|  | return Error() << "Could not write to output file '" << args[2] << "': " << result.error(); | 
|  | } | 
|  |  | 
|  | return {}; | 
|  | } | 
|  |  | 
|  | static Result<void> do_copy_per_line(const BuiltinArguments& args) { | 
|  | std::string file_contents; | 
|  | if (!android::base::ReadFileToString(args[1], &file_contents, true)) { | 
|  | return Error() << "Could not read input file '" << args[1] << "'"; | 
|  | } | 
|  | auto lines = Split(file_contents, "\n"); | 
|  | for (const auto& line : lines) { | 
|  | auto result = WriteFile(args[2], line); | 
|  | if (!result.ok()) { | 
|  | LOG(VERBOSE) << "Could not write to output file '" << args[2] << "' with '" << line | 
|  | << "' : " << result.error(); | 
|  | } | 
|  | } | 
|  |  | 
|  | return {}; | 
|  | } | 
|  |  | 
|  | static Result<void> do_chown(const BuiltinArguments& args) { | 
|  | auto uid = DecodeUid(args[1]); | 
|  | if (!uid.ok()) { | 
|  | return Error() << "Unable to decode UID for '" << args[1] << "': " << uid.error(); | 
|  | } | 
|  |  | 
|  | // GID is optional and pushes the index of path out by one if specified. | 
|  | const std::string& path = (args.size() == 4) ? args[3] : args[2]; | 
|  | Result<gid_t> gid = -1; | 
|  |  | 
|  | if (args.size() == 4) { | 
|  | gid = DecodeUid(args[2]); | 
|  | if (!gid.ok()) { | 
|  | return Error() << "Unable to decode GID for '" << args[2] << "': " << gid.error(); | 
|  | } | 
|  | } | 
|  |  | 
|  | if (lchown(path.c_str(), *uid, *gid) == -1) { | 
|  | return ErrnoErrorIgnoreEnoent() << "lchown() failed"; | 
|  | } | 
|  |  | 
|  | return {}; | 
|  | } | 
|  |  | 
|  | static mode_t get_mode(const char *s) { | 
|  | mode_t mode = 0; | 
|  | while (*s) { | 
|  | if (*s >= '0' && *s <= '7') { | 
|  | mode = (mode<<3) | (*s-'0'); | 
|  | } else { | 
|  | return -1; | 
|  | } | 
|  | s++; | 
|  | } | 
|  | return mode; | 
|  | } | 
|  |  | 
|  | static Result<void> do_chmod(const BuiltinArguments& args) { | 
|  | mode_t mode = get_mode(args[1].c_str()); | 
|  | if (fchmodat(AT_FDCWD, args[2].c_str(), mode, AT_SYMLINK_NOFOLLOW) < 0) { | 
|  | return ErrnoErrorIgnoreEnoent() << "fchmodat() failed"; | 
|  | } | 
|  | return {}; | 
|  | } | 
|  |  | 
|  | static Result<void> do_restorecon(const BuiltinArguments& args) { | 
|  | auto restorecon_info = ParseRestorecon(args.args); | 
|  | if (!restorecon_info.ok()) { | 
|  | return restorecon_info.error(); | 
|  | } | 
|  |  | 
|  | const auto& [flag, paths] = *restorecon_info; | 
|  |  | 
|  | int ret = 0; | 
|  | for (const auto& path : paths) { | 
|  | if (selinux_android_restorecon(path.c_str(), flag) < 0) { | 
|  | ret = errno; | 
|  | } | 
|  | } | 
|  |  | 
|  | if (ret) return ErrnoErrorIgnoreEnoent() << "selinux_android_restorecon() failed"; | 
|  | return {}; | 
|  | } | 
|  |  | 
|  | static Result<void> do_restorecon_recursive(const BuiltinArguments& args) { | 
|  | std::vector<std::string> non_const_args(args.args); | 
|  | non_const_args.insert(std::next(non_const_args.begin()), "--recursive"); | 
|  | return do_restorecon({.args = std::move(non_const_args), .context = args.context}); | 
|  | } | 
|  |  | 
|  | static Result<void> do_loglevel(const BuiltinArguments& args) { | 
|  | // TODO: support names instead/as well? | 
|  | int log_level = -1; | 
|  | android::base::ParseInt(args[1], &log_level); | 
|  | android::base::LogSeverity severity; | 
|  | switch (log_level) { | 
|  | case 7: severity = android::base::DEBUG; break; | 
|  | case 6: severity = android::base::INFO; break; | 
|  | case 5: | 
|  | case 4: severity = android::base::WARNING; break; | 
|  | case 3: severity = android::base::ERROR; break; | 
|  | case 2: | 
|  | case 1: | 
|  | case 0: severity = android::base::FATAL; break; | 
|  | default: | 
|  | return Error() << "invalid log level " << log_level; | 
|  | } | 
|  | android::base::SetMinimumLogSeverity(severity); | 
|  | return {}; | 
|  | } | 
|  |  | 
|  | static Result<void> do_load_persist_props(const BuiltinArguments& args) { | 
|  | SendLoadPersistentPropertiesMessage(); | 
|  |  | 
|  | start_waiting_for_property("ro.persistent_properties.ready", "true"); | 
|  | return {}; | 
|  | } | 
|  |  | 
|  | static Result<void> do_load_system_props(const BuiltinArguments& args) { | 
|  | LOG(INFO) << "deprecated action `load_system_props` called."; | 
|  | return {}; | 
|  | } | 
|  |  | 
|  | static Result<void> do_wait(const BuiltinArguments& args) { | 
|  | auto timeout = kCommandRetryTimeout; | 
|  | if (args.size() == 3) { | 
|  | double timeout_double; | 
|  | if (!android::base::ParseDouble(args[2], &timeout_double, 0)) { | 
|  | return Error() << "failed to parse timeout"; | 
|  | } | 
|  | timeout = std::chrono::duration_cast<std::chrono::nanoseconds>( | 
|  | std::chrono::duration<double>(timeout_double)); | 
|  | } | 
|  |  | 
|  | if (wait_for_file(args[1].c_str(), timeout) != 0) { | 
|  | return Error() << "wait_for_file() failed"; | 
|  | } | 
|  |  | 
|  | return {}; | 
|  | } | 
|  |  | 
|  | static Result<void> do_wait_for_prop(const BuiltinArguments& args) { | 
|  | const char* name = args[1].c_str(); | 
|  | const char* value = args[2].c_str(); | 
|  | size_t value_len = strlen(value); | 
|  |  | 
|  | if (!IsLegalPropertyName(name)) { | 
|  | return Error() << "IsLegalPropertyName(" << name << ") failed"; | 
|  | } | 
|  | if (value_len >= PROP_VALUE_MAX) { | 
|  | return Error() << "value too long"; | 
|  | } | 
|  | if (!start_waiting_for_property(name, value)) { | 
|  | return Error() << "already waiting for a property"; | 
|  | } | 
|  | return {}; | 
|  | } | 
|  |  | 
|  | static bool is_file_crypto() { | 
|  | return android::base::GetProperty("ro.crypto.type", "") == "file"; | 
|  | } | 
|  |  | 
|  | static Result<void> ExecWithFunctionOnFailure(const std::vector<std::string>& args, | 
|  | std::function<void(const std::string&)> function) { | 
|  | auto service = Service::MakeTemporaryOneshotService(args); | 
|  | if (!service.ok()) { | 
|  | function("MakeTemporaryOneshotService failed: " + service.error().message()); | 
|  | } | 
|  | (*service)->AddReapCallback([function](const siginfo_t& siginfo) { | 
|  | if (siginfo.si_code != CLD_EXITED || siginfo.si_status != 0) { | 
|  | function(StringPrintf("Exec service failed, status %d", siginfo.si_status)); | 
|  | } | 
|  | }); | 
|  | if (auto result = (*service)->ExecStart(); !result.ok()) { | 
|  | function("ExecStart failed: " + result.error().message()); | 
|  | } | 
|  | ServiceList::GetInstance().AddService(std::move(*service)); | 
|  | return {}; | 
|  | } | 
|  |  | 
|  | static Result<void> ExecVdcRebootOnFailure(const std::string& vdc_arg) { | 
|  | bool should_reboot_into_recovery = true; | 
|  | auto reboot_reason = vdc_arg + "_failed"; | 
|  | if (android::sysprop::InitProperties::userspace_reboot_in_progress().value_or(false)) { | 
|  | should_reboot_into_recovery = false; | 
|  | reboot_reason = "userspace_failed," + vdc_arg; | 
|  | } | 
|  |  | 
|  | auto reboot = [reboot_reason, should_reboot_into_recovery](const std::string& message) { | 
|  | // TODO (b/122850122): support this in gsi | 
|  | if (should_reboot_into_recovery) { | 
|  | if (IsFbeEnabled() && !android::gsi::IsGsiRunning()) { | 
|  | LOG(ERROR) << message << ": Rebooting into recovery, reason: " << reboot_reason; | 
|  | if (auto result = reboot_into_recovery( | 
|  | {"--prompt_and_wipe_data", "--reason="s + reboot_reason}); | 
|  | !result.ok()) { | 
|  | LOG(FATAL) << "Could not reboot into recovery: " << result.error(); | 
|  | } | 
|  | } else { | 
|  | LOG(ERROR) << "Failure (reboot suppressed): " << reboot_reason; | 
|  | } | 
|  | } else { | 
|  | LOG(ERROR) << message << ": rebooting, reason: " << reboot_reason; | 
|  | trigger_shutdown("reboot," + reboot_reason); | 
|  | } | 
|  | }; | 
|  |  | 
|  | std::vector<std::string> args = {"exec", "/system/bin/vdc", "--wait", "cryptfs", vdc_arg}; | 
|  | return ExecWithFunctionOnFailure(args, reboot); | 
|  | } | 
|  |  | 
|  | static Result<void> do_remount_userdata(const BuiltinArguments& args) { | 
|  | if (initial_mount_fstab_return_code == -1) { | 
|  | return Error() << "Calling remount_userdata too early"; | 
|  | } | 
|  | Fstab fstab; | 
|  | if (!ReadDefaultFstab(&fstab)) { | 
|  | // TODO(b/135984674): should we reboot here? | 
|  | return Error() << "Failed to read fstab"; | 
|  | } | 
|  | // TODO(b/135984674): check that fstab contains /data. | 
|  | if (auto rc = fs_mgr_remount_userdata_into_checkpointing(&fstab); rc < 0) { | 
|  | std::string proc_mounts_output; | 
|  | android::base::ReadFileToString("/proc/mounts", &proc_mounts_output, true); | 
|  | android::base::WriteStringToFile(proc_mounts_output, | 
|  | "/metadata/userspacereboot/mount_info.txt"); | 
|  | trigger_shutdown("reboot,mount_userdata_failed"); | 
|  | } | 
|  | if (auto result = queue_fs_event(initial_mount_fstab_return_code); !result.ok()) { | 
|  | return Error() << "queue_fs_event() failed: " << result.error(); | 
|  | } | 
|  | return {}; | 
|  | } | 
|  |  | 
|  | static Result<void> do_installkey(const BuiltinArguments& args) { | 
|  | if (!is_file_crypto()) return {}; | 
|  |  | 
|  | auto unencrypted_dir = args[1] + fscrypt_unencrypted_folder; | 
|  | if (!make_dir(unencrypted_dir, 0700) && errno != EEXIST) { | 
|  | return ErrnoError() << "Failed to create " << unencrypted_dir; | 
|  | } | 
|  | return ExecVdcRebootOnFailure("enablefilecrypto"); | 
|  | } | 
|  |  | 
|  | static Result<void> do_init_user0(const BuiltinArguments& args) { | 
|  | return ExecVdcRebootOnFailure("init_user0"); | 
|  | } | 
|  |  | 
|  | static Result<void> do_mark_post_data(const BuiltinArguments& args) { | 
|  | ServiceList::GetInstance().MarkPostData(); | 
|  |  | 
|  | return {}; | 
|  | } | 
|  |  | 
|  | static Result<void> GenerateLinkerConfiguration() { | 
|  | const char* linkerconfig_binary = "/apex/com.android.runtime/bin/linkerconfig"; | 
|  | const char* linkerconfig_target = "/linkerconfig"; | 
|  | const char* arguments[] = {linkerconfig_binary, "--target", linkerconfig_target}; | 
|  |  | 
|  | if (logwrap_fork_execvp(arraysize(arguments), arguments, nullptr, false, LOG_KLOG, false, | 
|  | nullptr) != 0) { | 
|  | return ErrnoError() << "failed to execute linkerconfig"; | 
|  | } | 
|  |  | 
|  | auto current_mount_ns = GetCurrentMountNamespace(); | 
|  | if (!current_mount_ns.ok()) { | 
|  | return current_mount_ns.error(); | 
|  | } | 
|  | if (*current_mount_ns == NS_DEFAULT) { | 
|  | SetDefaultMountNamespaceReady(); | 
|  | } | 
|  |  | 
|  | LOG(INFO) << "linkerconfig generated " << linkerconfig_target | 
|  | << " with mounted APEX modules info"; | 
|  |  | 
|  | return {}; | 
|  | } | 
|  |  | 
|  | static Result<void> MountLinkerConfigForDefaultNamespace() { | 
|  | // No need to mount linkerconfig for default mount namespace if the path does not exist (which | 
|  | // would mean it is already mounted) | 
|  | if (access("/linkerconfig/default", 0) != 0) { | 
|  | return {}; | 
|  | } | 
|  |  | 
|  | if (mount("/linkerconfig/default", "/linkerconfig", nullptr, MS_BIND | MS_REC, nullptr) != 0) { | 
|  | return ErrnoError() << "Failed to mount linker configuration for default mount namespace."; | 
|  | } | 
|  |  | 
|  | return {}; | 
|  | } | 
|  | static Result<void> do_update_linker_config(const BuiltinArguments&) { | 
|  | return GenerateLinkerConfiguration(); | 
|  | } | 
|  |  | 
|  | /* | 
|  | * Creates a directory under /data/misc/apexdata/ for each APEX. | 
|  | */ | 
|  | static void create_apex_data_dirs() { | 
|  | for (const auto& name : GetApexListFrom("/apex")) { | 
|  | auto path = "/data/misc/apexdata/" + name; | 
|  | auto options = MkdirOptions{path, 0771, AID_ROOT, AID_SYSTEM, FscryptAction::kNone, "ref"}; | 
|  | auto result = make_dir_with_options(options); | 
|  | if (!result.ok()) { | 
|  | LOG(ERROR) << result.error(); | 
|  | } | 
|  | } | 
|  | } | 
|  |  | 
|  | static Result<void> do_perform_apex_config(const BuiltinArguments& args) { | 
|  | bool bootstrap = false; | 
|  | if (args.size() == 2) { | 
|  | if (args[1] != "--bootstrap") { | 
|  | return Error() << "Unexpected argument: " << args[1]; | 
|  | } | 
|  | bootstrap = true; | 
|  | } | 
|  |  | 
|  | if (!bootstrap) { | 
|  | create_apex_data_dirs(); | 
|  | } | 
|  |  | 
|  | auto parse_result = ParseRcScriptsFromAllApexes(bootstrap); | 
|  | if (!parse_result.ok()) { | 
|  | return parse_result.error(); | 
|  | } | 
|  |  | 
|  | auto update_linker_config = do_update_linker_config(args); | 
|  | if (!update_linker_config.ok()) { | 
|  | return update_linker_config.error(); | 
|  | } | 
|  |  | 
|  | if (!bootstrap) { | 
|  | ServiceList::GetInstance().StartDelayedServices(); | 
|  | } | 
|  | return {}; | 
|  | } | 
|  |  | 
|  | static Result<void> do_enter_default_mount_ns(const BuiltinArguments& args) { | 
|  | if (auto result = SwitchToMountNamespaceIfNeeded(NS_DEFAULT); !result.ok()) { | 
|  | return result.error(); | 
|  | } | 
|  | if (auto result = MountLinkerConfigForDefaultNamespace(); !result.ok()) { | 
|  | return result.error(); | 
|  | } | 
|  | LOG(INFO) << "Switched to default mount namespace"; | 
|  | return {}; | 
|  | } | 
|  |  | 
|  | // Builtin-function-map start | 
|  | const BuiltinFunctionMap& GetBuiltinFunctionMap() { | 
|  | constexpr std::size_t kMax = std::numeric_limits<std::size_t>::max(); | 
|  | // clang-format off | 
|  | static const BuiltinFunctionMap builtin_functions = { | 
|  | {"bootchart",               {1,     1,    {false,  do_bootchart}}}, | 
|  | {"chmod",                   {2,     2,    {true,   do_chmod}}}, | 
|  | {"chown",                   {2,     3,    {true,   do_chown}}}, | 
|  | {"class_reset",             {1,     1,    {false,  do_class_reset}}}, | 
|  | {"class_restart",           {1,     2,    {false,  do_class_restart}}}, | 
|  | {"class_start",             {1,     1,    {false,  do_class_start}}}, | 
|  | {"class_stop",              {1,     1,    {false,  do_class_stop}}}, | 
|  | {"copy",                    {2,     2,    {true,   do_copy}}}, | 
|  | {"copy_per_line",           {2,     2,    {true,   do_copy_per_line}}}, | 
|  | {"domainname",              {1,     1,    {true,   do_domainname}}}, | 
|  | {"enable",                  {1,     1,    {false,  do_enable}}}, | 
|  | {"exec",                    {1,     kMax, {false,  do_exec}}}, | 
|  | {"exec_background",         {1,     kMax, {false,  do_exec_background}}}, | 
|  | {"exec_start",              {1,     1,    {false,  do_exec_start}}}, | 
|  | {"export",                  {2,     2,    {false,  do_export}}}, | 
|  | {"hostname",                {1,     1,    {true,   do_hostname}}}, | 
|  | {"ifup",                    {1,     1,    {true,   do_ifup}}}, | 
|  | {"init_user0",              {0,     0,    {false,  do_init_user0}}}, | 
|  | {"insmod",                  {1,     kMax, {true,   do_insmod}}}, | 
|  | {"installkey",              {1,     1,    {false,  do_installkey}}}, | 
|  | {"interface_restart",       {1,     1,    {false,  do_interface_restart}}}, | 
|  | {"interface_start",         {1,     1,    {false,  do_interface_start}}}, | 
|  | {"interface_stop",          {1,     1,    {false,  do_interface_stop}}}, | 
|  | {"load_exports",            {1,     1,    {false,  do_load_exports}}}, | 
|  | {"load_persist_props",      {0,     0,    {false,  do_load_persist_props}}}, | 
|  | {"load_system_props",       {0,     0,    {false,  do_load_system_props}}}, | 
|  | {"loglevel",                {1,     1,    {false,  do_loglevel}}}, | 
|  | {"mark_post_data",          {0,     0,    {false,  do_mark_post_data}}}, | 
|  | {"mkdir",                   {1,     6,    {true,   do_mkdir}}}, | 
|  | // TODO: Do mount operations in vendor_init. | 
|  | // mount_all is currently too complex to run in vendor_init as it queues action triggers, | 
|  | // imports rc scripts, etc.  It should be simplified and run in vendor_init context. | 
|  | // mount and umount are run in the same context as mount_all for symmetry. | 
|  | {"mount_all",               {0,     kMax, {false,  do_mount_all}}}, | 
|  | {"mount",                   {3,     kMax, {false,  do_mount}}}, | 
|  | {"perform_apex_config",     {0,     1,    {false,  do_perform_apex_config}}}, | 
|  | {"umount",                  {1,     1,    {false,  do_umount}}}, | 
|  | {"umount_all",              {0,     1,    {false,  do_umount_all}}}, | 
|  | {"update_linker_config",    {0,     0,    {false,  do_update_linker_config}}}, | 
|  | {"readahead",               {1,     2,    {true,   do_readahead}}}, | 
|  | {"remount_userdata",        {0,     0,    {false,  do_remount_userdata}}}, | 
|  | {"restart",                 {1,     2,    {false,  do_restart}}}, | 
|  | {"restorecon",              {1,     kMax, {true,   do_restorecon}}}, | 
|  | {"restorecon_recursive",    {1,     kMax, {true,   do_restorecon_recursive}}}, | 
|  | {"rm",                      {1,     1,    {true,   do_rm}}}, | 
|  | {"rmdir",                   {1,     1,    {true,   do_rmdir}}}, | 
|  | {"setprop",                 {2,     2,    {true,   do_setprop}}}, | 
|  | {"setrlimit",               {3,     3,    {false,  do_setrlimit}}}, | 
|  | {"start",                   {1,     1,    {false,  do_start}}}, | 
|  | {"stop",                    {1,     1,    {false,  do_stop}}}, | 
|  | {"swapon_all",              {0,     1,    {false,  do_swapon_all}}}, | 
|  | {"enter_default_mount_ns",  {0,     0,    {false,  do_enter_default_mount_ns}}}, | 
|  | {"symlink",                 {2,     2,    {true,   do_symlink}}}, | 
|  | {"sysclktz",                {1,     1,    {false,  do_sysclktz}}}, | 
|  | {"trigger",                 {1,     1,    {false,  do_trigger}}}, | 
|  | {"verity_update_state",     {0,     0,    {false,  do_verity_update_state}}}, | 
|  | {"wait",                    {1,     2,    {true,   do_wait}}}, | 
|  | {"wait_for_prop",           {2,     2,    {false,  do_wait_for_prop}}}, | 
|  | {"write",                   {2,     2,    {true,   do_write}}}, | 
|  | }; | 
|  | // clang-format on | 
|  | return builtin_functions; | 
|  | } | 
|  | // Builtin-function-map end | 
|  |  | 
|  | }  // namespace init | 
|  | }  // namespace android |