blob: 0ff55a599e51f21f879c1246b6fdc9307a92b90b [file] [log] [blame]
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -07001/*
2 * Copyright (C) 2008 The Android Open Source Project
3 *
4 * Licensed under the Apache License, Version 2.0 (the "License");
5 * you may not use this file except in compliance with the License.
6 * You may obtain a copy of the License at
7 *
8 * http://www.apache.org/licenses/LICENSE-2.0
9 *
10 * Unless required by applicable law or agreed to in writing, software
11 * distributed under the License is distributed on an "AS IS" BASIS,
12 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 * See the License for the specific language governing permissions and
14 * limitations under the License.
15 */
16
Elliott Hughes8d82ea02015-02-06 20:15:18 -080017#include <ctype.h>
Rom Lemarchand6a524432015-02-28 06:39:11 -080018#include <dirent.h>
Elliott Hughes8d82ea02015-02-06 20:15:18 -080019#include <errno.h>
20#include <fcntl.h>
dcashman5d368132016-03-17 15:01:56 -070021#include <fstream>
Elliott Hughes8d82ea02015-02-06 20:15:18 -080022#include <libgen.h>
Elliott Hughescc86fb22015-03-17 20:01:13 -070023#include <paths.h>
Elliott Hughes8d82ea02015-02-06 20:15:18 -080024#include <signal.h>
25#include <stdarg.h>
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -070026#include <stdio.h>
27#include <stdlib.h>
28#include <string.h>
Elliott Hughes929f4072015-04-24 21:13:44 -070029#include <sys/epoll.h>
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -070030#include <sys/mount.h>
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -070031#include <sys/socket.h>
Elliott Hughes8d82ea02015-02-06 20:15:18 -080032#include <sys/stat.h>
33#include <sys/types.h>
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -070034#include <sys/un.h>
Elliott Hughes8d82ea02015-02-06 20:15:18 -080035#include <sys/wait.h>
Elliott Hughes8d82ea02015-02-06 20:15:18 -080036#include <unistd.h>
37
38#include <mtd/mtd-user.h>
Stephen Smalleye46f9d52012-01-13 08:48:47 -050039
Stephen Smalleye46f9d52012-01-13 08:48:47 -050040#include <selinux/selinux.h>
41#include <selinux/label.h>
Stephen Smalleyae6f3d72012-05-01 15:02:53 -040042#include <selinux/android.h>
Stephen Smalleye46f9d52012-01-13 08:48:47 -050043
Elliott Hughes4f713192015-12-04 22:00:26 -080044#include <android-base/file.h>
45#include <android-base/stringprintf.h>
46#include <android-base/strings.h>
Nick Kralevich56fa0ac2013-06-24 17:41:40 -070047#include <cutils/android_reboot.h>
Alex Klyubin0d872d82013-08-16 13:19:24 -070048#include <cutils/fs.h>
Elliott Hughes8d82ea02015-02-06 20:15:18 -080049#include <cutils/iosched_policy.h>
50#include <cutils/list.h>
51#include <cutils/sockets.h>
Colin Crossf83d0b92010-04-21 12:04:20 -070052#include <private/android_filesystem_config.h>
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -070053
Rom Lemarchand6a524432015-02-28 06:39:11 -080054#include <memory>
55
Tom Cherryfa0c21c2015-07-23 17:53:11 -070056#include "action.h"
Tom Cherrybac32992015-07-31 12:45:25 -070057#include "bootchart.h"
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -070058#include "devices.h"
Tom Cherryb7349902015-08-26 11:43:36 -070059#include "import_parser.h"
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -070060#include "init.h"
Tom Cherrybac32992015-07-31 12:45:25 -070061#include "init_parser.h"
62#include "keychords.h"
Colin Crossed8a7d82010-04-19 17:05:34 -070063#include "log.h"
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -070064#include "property_service.h"
Tom Cherrybac32992015-07-31 12:45:25 -070065#include "service.h"
Colin Cross9c5366b2010-04-13 19:48:59 -070066#include "signal_handler.h"
Colin Crossf83d0b92010-04-21 12:04:20 -070067#include "ueventd.h"
Tom Cherrybac32992015-07-31 12:45:25 -070068#include "util.h"
Arve Hjønnevågd97d9072012-06-13 21:51:56 -070069#include "watchdogd.h"
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -070070
Stephen Smalleye46f9d52012-01-13 08:48:47 -050071struct selabel_handle *sehandle;
rpcraig63207cd2012-08-09 10:05:49 -040072struct selabel_handle *sehandle_prop;
Stephen Smalleye46f9d52012-01-13 08:48:47 -050073
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -070074static int property_triggers_enabled = 0;
75
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -070076static char qemu[32];
77
Tom Cherrybac32992015-07-31 12:45:25 -070078int have_console;
79std::string console_name = "/dev/console";
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -070080static time_t process_needs_restart;
81
Tom Cherrybac32992015-07-31 12:45:25 -070082const char *ENV[32];
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -070083
Elliott Hughes8d82ea02015-02-06 20:15:18 -080084bool waiting_for_exec = false;
85
Elliott Hughes929f4072015-04-24 21:13:44 -070086static int epoll_fd = -1;
87
88void register_epoll_handler(int fd, void (*fn)()) {
89 epoll_event ev;
90 ev.events = EPOLLIN;
91 ev.data.ptr = reinterpret_cast<void*>(fn);
92 if (epoll_ctl(epoll_fd, EPOLL_CTL_ADD, fd, &ev) == -1) {
93 ERROR("epoll_ctl failed: %s\n", strerror(errno));
94 }
95}
96
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -070097/* add_environment - add "key=value" to the current environment */
98int add_environment(const char *key, const char *val)
99{
James Morrissey381341f2014-05-16 11:36:36 +0100100 size_t n;
101 size_t key_len = strlen(key);
Vladimir Chtchetkine2b995432011-09-28 09:55:31 -0700102
James Morrissey381341f2014-05-16 11:36:36 +0100103 /* The last environment entry is reserved to terminate the list */
104 for (n = 0; n < (ARRAY_SIZE(ENV) - 1); n++) {
105
106 /* Delete any existing entry for this key */
107 if (ENV[n] != NULL) {
108 size_t entry_key_len = strcspn(ENV[n], "=");
109 if ((entry_key_len == key_len) && (strncmp(ENV[n], key, entry_key_len) == 0)) {
110 free((char*)ENV[n]);
111 ENV[n] = NULL;
112 }
113 }
114
115 /* Add entry if a free slot is available */
116 if (ENV[n] == NULL) {
Elliott Hughesf3cf4382015-02-03 17:12:07 -0800117 char* entry;
118 asprintf(&entry, "%s=%s", key, val);
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700119 ENV[n] = entry;
120 return 0;
121 }
122 }
123
James Morrissey381341f2014-05-16 11:36:36 +0100124 ERROR("No env. room to store: '%s':'%s'\n", key, val);
125
126 return -1;
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700127}
128
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700129void property_changed(const char *name, const char *value)
130{
Colin Crossebc6ff12010-04-13 19:52:01 -0700131 if (property_triggers_enabled)
Tom Cherryfa0c21c2015-07-23 17:53:11 -0700132 ActionManager::GetInstance().QueuePropertyTrigger(name, value);
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700133}
134
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700135static void restart_processes()
136{
137 process_needs_restart = 0;
Tom Cherrybac32992015-07-31 12:45:25 -0700138 ServiceManager::GetInstance().
139 ForEachServiceWithFlags(SVC_RESTARTING, [] (Service* s) {
140 s->RestartIfNeeded(process_needs_restart);
141 });
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700142}
143
Tom Cherrybac32992015-07-31 12:45:25 -0700144static void msg_start(const std::string& name)
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700145{
Tom Cherrybac32992015-07-31 12:45:25 -0700146 Service* svc = nullptr;
147 std::vector<std::string> vargs;
San Mehatf24e2522009-05-19 13:30:46 -0700148
Tom Cherrybac32992015-07-31 12:45:25 -0700149 size_t colon_pos = name.find(':');
150 if (colon_pos == std::string::npos) {
151 svc = ServiceManager::GetInstance().FindServiceByName(name);
152 } else {
153 std::string service_name(name.substr(0, colon_pos));
154 std::string args(name.substr(colon_pos + 1));
155 vargs = android::base::Split(args, " ");
San Mehatf24e2522009-05-19 13:30:46 -0700156
Tom Cherrybac32992015-07-31 12:45:25 -0700157 svc = ServiceManager::GetInstance().FindServiceByName(service_name);
San Mehatf24e2522009-05-19 13:30:46 -0700158 }
Vladimir Chtchetkine2b995432011-09-28 09:55:31 -0700159
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700160 if (svc) {
Tom Cherrybac32992015-07-31 12:45:25 -0700161 svc->Start(vargs);
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700162 } else {
Tom Cherrybac32992015-07-31 12:45:25 -0700163 ERROR("no such service '%s'\n", name.c_str());
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700164 }
165}
166
Tom Cherrybac32992015-07-31 12:45:25 -0700167static void msg_stop(const std::string& name)
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700168{
Tom Cherrybac32992015-07-31 12:45:25 -0700169 Service* svc = ServiceManager::GetInstance().FindServiceByName(name);
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700170
171 if (svc) {
Tom Cherrybac32992015-07-31 12:45:25 -0700172 svc->Stop();
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700173 } else {
Tom Cherrybac32992015-07-31 12:45:25 -0700174 ERROR("no such service '%s'\n", name.c_str());
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700175 }
176}
177
Tom Cherrybac32992015-07-31 12:45:25 -0700178static void msg_restart(const std::string& name)
Mike Kasickb54f39f2012-01-25 23:48:46 -0500179{
Tom Cherrybac32992015-07-31 12:45:25 -0700180 Service* svc = ServiceManager::GetInstance().FindServiceByName(name);
Mike Kasickb54f39f2012-01-25 23:48:46 -0500181
182 if (svc) {
Tom Cherrybac32992015-07-31 12:45:25 -0700183 svc->Restart();
Mike Kasickb54f39f2012-01-25 23:48:46 -0500184 } else {
Tom Cherrybac32992015-07-31 12:45:25 -0700185 ERROR("no such service '%s'\n", name.c_str());
Mike Kasickb54f39f2012-01-25 23:48:46 -0500186 }
187}
188
Tom Cherrybac32992015-07-31 12:45:25 -0700189void handle_control_message(const std::string& msg, const std::string& arg)
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700190{
Tom Cherrybac32992015-07-31 12:45:25 -0700191 if (msg == "start") {
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700192 msg_start(arg);
Tom Cherrybac32992015-07-31 12:45:25 -0700193 } else if (msg == "stop") {
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700194 msg_stop(arg);
Tom Cherrybac32992015-07-31 12:45:25 -0700195 } else if (msg == "restart") {
Mike Kasickb54f39f2012-01-25 23:48:46 -0500196 msg_restart(arg);
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700197 } else {
Tom Cherrybac32992015-07-31 12:45:25 -0700198 ERROR("unknown control msg '%s'\n", msg.c_str());
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700199 }
200}
201
Tom Cherry96f67312015-07-30 13:52:55 -0700202static int wait_for_coldboot_done_action(const std::vector<std::string>& args) {
Elliott Hughesc6c26ed2015-04-24 18:50:30 -0700203 Timer t;
204
205 NOTICE("Waiting for %s...\n", COLDBOOT_DONE);
Elliott Hughesc7331d02015-05-14 12:03:14 -0700206 // Any longer than 1s is an unreasonable length of time to delay booting.
207 // If you're hitting this timeout, check that you didn't make your
208 // sepolicy regular expressions too expensive (http://b/19899875).
209 if (wait_for_file(COLDBOOT_DONE, 1)) {
Andreas Gampea016c422014-11-24 19:52:41 -0800210 ERROR("Timed out waiting for %s\n", COLDBOOT_DONE);
Elliott Hughesc6c26ed2015-04-24 18:50:30 -0700211 }
212
213 NOTICE("Waiting for %s took %.2fs.\n", COLDBOOT_DONE, t.duration());
214 return 0;
Colin Crossebc6ff12010-04-13 19:52:01 -0700215}
216
Alex Klyubin0d872d82013-08-16 13:19:24 -0700217/*
218 * Writes 512 bytes of output from Hardware RNG (/dev/hw_random, backed
219 * by Linux kernel's hw_random framework) into Linux RNG's via /dev/urandom.
220 * Does nothing if Hardware RNG is not present.
221 *
222 * Since we don't yet trust the quality of Hardware RNG, these bytes are not
223 * mixed into the primary pool of Linux RNG and the entropy estimate is left
224 * unmodified.
225 *
226 * If the HW RNG device /dev/hw_random is present, we require that at least
227 * 512 bytes read from it are written into Linux RNG. QA is expected to catch
228 * devices/configurations where these I/O operations are blocking for a long
229 * time. We do not reboot or halt on failures, as this is a best-effort
230 * attempt.
231 */
Tom Cherry96f67312015-07-30 13:52:55 -0700232static int mix_hwrng_into_linux_rng_action(const std::vector<std::string>& args)
Alex Klyubin0d872d82013-08-16 13:19:24 -0700233{
234 int result = -1;
235 int hwrandom_fd = -1;
236 int urandom_fd = -1;
237 char buf[512];
238 ssize_t chunk_size;
239 size_t total_bytes_written = 0;
240
241 hwrandom_fd = TEMP_FAILURE_RETRY(
Nick Kralevich45a884f2015-02-02 14:37:22 -0800242 open("/dev/hw_random", O_RDONLY | O_NOFOLLOW | O_CLOEXEC));
Alex Klyubin0d872d82013-08-16 13:19:24 -0700243 if (hwrandom_fd == -1) {
244 if (errno == ENOENT) {
245 ERROR("/dev/hw_random not found\n");
246 /* It's not an error to not have a Hardware RNG. */
247 result = 0;
248 } else {
249 ERROR("Failed to open /dev/hw_random: %s\n", strerror(errno));
250 }
251 goto ret;
252 }
253
254 urandom_fd = TEMP_FAILURE_RETRY(
Nick Kralevich45a884f2015-02-02 14:37:22 -0800255 open("/dev/urandom", O_WRONLY | O_NOFOLLOW | O_CLOEXEC));
Alex Klyubin0d872d82013-08-16 13:19:24 -0700256 if (urandom_fd == -1) {
257 ERROR("Failed to open /dev/urandom: %s\n", strerror(errno));
258 goto ret;
259 }
260
261 while (total_bytes_written < sizeof(buf)) {
262 chunk_size = TEMP_FAILURE_RETRY(
263 read(hwrandom_fd, buf, sizeof(buf) - total_bytes_written));
264 if (chunk_size == -1) {
265 ERROR("Failed to read from /dev/hw_random: %s\n", strerror(errno));
266 goto ret;
267 } else if (chunk_size == 0) {
268 ERROR("Failed to read from /dev/hw_random: EOF\n");
269 goto ret;
270 }
271
272 chunk_size = TEMP_FAILURE_RETRY(write(urandom_fd, buf, chunk_size));
273 if (chunk_size == -1) {
274 ERROR("Failed to write to /dev/urandom: %s\n", strerror(errno));
275 goto ret;
276 }
277 total_bytes_written += chunk_size;
278 }
279
Elliott Hughesccecf142014-01-16 10:53:11 -0800280 INFO("Mixed %zu bytes from /dev/hw_random into /dev/urandom",
Alex Klyubin0d872d82013-08-16 13:19:24 -0700281 total_bytes_written);
282 result = 0;
283
284ret:
285 if (hwrandom_fd != -1) {
286 close(hwrandom_fd);
287 }
288 if (urandom_fd != -1) {
289 close(urandom_fd);
290 }
Alex Klyubin0d872d82013-08-16 13:19:24 -0700291 return result;
292}
293
dcashman5d368132016-03-17 15:01:56 -0700294static void security_failure() {
295 ERROR("Security failure; rebooting into recovery mode...\n");
296 android_reboot(ANDROID_RB_RESTART2, 0, "recovery");
297 while (true) { pause(); } // never reached
298}
299
300#define MMAP_RND_PATH "/proc/sys/vm/mmap_rnd_bits"
301#define MMAP_RND_COMPAT_PATH "/proc/sys/vm/mmap_rnd_compat_bits"
302
303/* __attribute__((unused)) due to lack of mips support: see mips block
304 * in set_mmap_rnd_bits_action */
305static bool __attribute__((unused)) set_mmap_rnd_bits_min(int start, int min, bool compat) {
306 std::string path;
307 if (compat) {
308 path = MMAP_RND_COMPAT_PATH;
309 } else {
310 path = MMAP_RND_PATH;
311 }
312 std::ifstream inf(path, std::fstream::in);
313 if (!inf) {
314 return false;
315 }
316 while (start >= min) {
317 // try to write out new value
318 std::string str_val = std::to_string(start);
319 std::ofstream of(path, std::fstream::out);
320 if (!of) {
321 return false;
322 }
323 of << str_val << std::endl;
324 of.close();
325
326 // check to make sure it was recorded
327 inf.seekg(0);
328 std::string str_rec;
329 inf >> str_rec;
330 if (str_val.compare(str_rec) == 0) {
331 break;
332 }
333 start--;
334 }
335 inf.close();
336 return (start >= min);
337}
338
339/*
340 * Set /proc/sys/vm/mmap_rnd_bits and potentially
341 * /proc/sys/vm/mmap_rnd_compat_bits to the maximum supported values.
342 * Returns -1 if unable to set these to an acceptable value. Apply
343 * upstream patch-sets https://lkml.org/lkml/2015/12/21/337 and
344 * https://lkml.org/lkml/2016/2/4/831 to enable this.
345 */
346static int set_mmap_rnd_bits_action(const std::vector<std::string>& args)
347{
348 int ret = -1;
349
350 /* values are arch-dependent */
351#if defined(__aarch64__)
352 /* arm64 supports 18 - 33 bits depending on pagesize and VA_SIZE */
353 if (set_mmap_rnd_bits_min(33, 24, false)
354 && set_mmap_rnd_bits_min(16, 16, true)) {
355 ret = 0;
356 }
dcashman9261ad12016-03-22 16:04:26 -0700357#elif defined(__x86_64__)
dcashman5d368132016-03-17 15:01:56 -0700358 /* x86_64 supports 28 - 32 bits */
359 if (set_mmap_rnd_bits_min(32, 32, false)
360 && set_mmap_rnd_bits_min(16, 16, true)) {
361 ret = 0;
362 }
363#elif defined(__arm__) || defined(__i386__)
364 /* check to see if we're running on 64-bit kernel */
365 bool h64 = !access(MMAP_RND_COMPAT_PATH, F_OK);
366 /* supported 32-bit architecture must have 16 bits set */
367 if (set_mmap_rnd_bits_min(16, 16, h64)) {
368 ret = 0;
369 }
370#elif defined(__mips__) || defined(__mips64__)
371 // TODO: add mips support b/27788820
372 ret = 0;
373#else
374 ERROR("Unknown architecture\n");
375#endif
dcashman69022e02016-03-22 15:13:42 -0700376
377#ifdef __BRILLO__
378 // TODO: b/27794137
379 ret = 0;
380#endif
dcashman5d368132016-03-17 15:01:56 -0700381 if (ret == -1) {
382 ERROR("Unable to set adequate mmap entropy value!\n");
383 security_failure();
384 }
385 return ret;
386}
387
Tom Cherry96f67312015-07-30 13:52:55 -0700388static int keychord_init_action(const std::vector<std::string>& args)
Colin Crossebc6ff12010-04-13 19:52:01 -0700389{
390 keychord_init();
391 return 0;
392}
393
Tom Cherry96f67312015-07-30 13:52:55 -0700394static int console_init_action(const std::vector<std::string>& args)
Colin Crossebc6ff12010-04-13 19:52:01 -0700395{
Yabin Cui74edcea2015-07-24 10:11:05 -0700396 std::string console = property_get("ro.boot.console");
397 if (!console.empty()) {
398 console_name = "/dev/" + console;
Colin Crossebc6ff12010-04-13 19:52:01 -0700399 }
400
Yabin Cui74edcea2015-07-24 10:11:05 -0700401 int fd = open(console_name.c_str(), O_RDWR | O_CLOEXEC);
Colin Crossebc6ff12010-04-13 19:52:01 -0700402 if (fd >= 0)
403 have_console = 1;
404 close(fd);
405
Nick Kralevich45a884f2015-02-02 14:37:22 -0800406 fd = open("/dev/tty0", O_WRONLY | O_CLOEXEC);
Marcin Chojnacki50dc9362013-10-16 17:39:16 +0200407 if (fd >= 0) {
408 const char *msg;
409 msg = "\n"
410 "\n"
411 "\n"
412 "\n"
413 "\n"
414 "\n"
415 "\n" // console is 40 cols x 30 lines
416 "\n"
417 "\n"
418 "\n"
419 "\n"
420 "\n"
421 "\n"
422 "\n"
423 " A N D R O I D ";
424 write(fd, msg, strlen(msg));
425 close(fd);
Colin Crossebc6ff12010-04-13 19:52:01 -0700426 }
Marcin Chojnacki50dc9362013-10-16 17:39:16 +0200427
Colin Crossebc6ff12010-04-13 19:52:01 -0700428 return 0;
429}
430
Elliott Hughese5ce30f2015-05-06 19:19:24 -0700431static void import_kernel_nv(const std::string& key, const std::string& value, bool for_emulator) {
432 if (key.empty()) return;
Dima Zavin5511c842011-12-19 11:21:32 -0800433
434 if (for_emulator) {
Elliott Hughese5ce30f2015-05-06 19:19:24 -0700435 // In the emulator, export any kernel option with the "ro.kernel." prefix.
436 property_set(android::base::StringPrintf("ro.kernel.%s", key.c_str()).c_str(), value.c_str());
Dima Zavin5511c842011-12-19 11:21:32 -0800437 return;
438 }
439
Elliott Hughese5ce30f2015-05-06 19:19:24 -0700440 if (key == "qemu") {
441 strlcpy(qemu, value.c_str(), sizeof(qemu));
442 } else if (android::base::StartsWith(key, "androidboot.")) {
443 property_set(android::base::StringPrintf("ro.boot.%s", key.c_str() + 12).c_str(),
444 value.c_str());
Dima Zavin5511c842011-12-19 11:21:32 -0800445 }
446}
447
Sami Tolvanen9e9efca2015-12-07 12:33:58 +0000448static void export_oem_lock_status() {
449 if (property_get("ro.oem_unlock_supported") != "1") {
450 return;
451 }
452
453 std::string value = property_get("ro.boot.verifiedbootstate");
454
455 if (!value.empty()) {
456 property_set("ro.boot.flash.locked", value == "orange" ? "0" : "1");
457 }
458}
459
Elliott Hughesd679bc92015-03-20 08:50:46 -0700460static void export_kernel_boot_props() {
Dima Zavin5511c842011-12-19 11:21:32 -0800461 struct {
462 const char *src_prop;
Elliott Hughesd679bc92015-03-20 08:50:46 -0700463 const char *dst_prop;
464 const char *default_value;
Dima Zavin5511c842011-12-19 11:21:32 -0800465 } prop_map[] = {
Elliott Hughesd679bc92015-03-20 08:50:46 -0700466 { "ro.boot.serialno", "ro.serialno", "", },
467 { "ro.boot.mode", "ro.bootmode", "unknown", },
468 { "ro.boot.baseband", "ro.baseband", "unknown", },
Dima Zavin5511c842011-12-19 11:21:32 -0800469 { "ro.boot.bootloader", "ro.bootloader", "unknown", },
Elliott Hughesd679bc92015-03-20 08:50:46 -0700470 { "ro.boot.hardware", "ro.hardware", "unknown", },
471 { "ro.boot.revision", "ro.revision", "0", },
Dima Zavin5511c842011-12-19 11:21:32 -0800472 };
Elliott Hughesd679bc92015-03-20 08:50:46 -0700473 for (size_t i = 0; i < ARRAY_SIZE(prop_map); i++) {
Yabin Cui74edcea2015-07-24 10:11:05 -0700474 std::string value = property_get(prop_map[i].src_prop);
475 property_set(prop_map[i].dst_prop, (!value.empty()) ? value.c_str() : prop_map[i].default_value);
Dima Zavin5511c842011-12-19 11:21:32 -0800476 }
Dima Zavin5511c842011-12-19 11:21:32 -0800477}
Colin Crossebc6ff12010-04-13 19:52:01 -0700478
Elliott Hughese5ce30f2015-05-06 19:19:24 -0700479static void process_kernel_dt() {
Rom Lemarchand6a524432015-02-28 06:39:11 -0800480 static const char android_dir[] = "/proc/device-tree/firmware/android";
481
482 std::string file_name = android::base::StringPrintf("%s/compatible", android_dir);
483
484 std::string dt_file;
485 android::base::ReadFileToString(file_name, &dt_file);
486 if (!dt_file.compare("android,firmware")) {
487 ERROR("firmware/android is not compatible with 'android,firmware'\n");
488 return;
489 }
490
491 std::unique_ptr<DIR, int(*)(DIR*)>dir(opendir(android_dir), closedir);
Elliott Hughese5ce30f2015-05-06 19:19:24 -0700492 if (!dir) return;
Rom Lemarchand6a524432015-02-28 06:39:11 -0800493
494 struct dirent *dp;
495 while ((dp = readdir(dir.get())) != NULL) {
Rom Lemarchand1dcf3252015-11-08 17:51:50 -0800496 if (dp->d_type != DT_REG || !strcmp(dp->d_name, "compatible") || !strcmp(dp->d_name, "name")) {
Rom Lemarchand6a524432015-02-28 06:39:11 -0800497 continue;
Elliott Hughese5ce30f2015-05-06 19:19:24 -0700498 }
Rom Lemarchand6a524432015-02-28 06:39:11 -0800499
500 file_name = android::base::StringPrintf("%s/%s", android_dir, dp->d_name);
501
502 android::base::ReadFileToString(file_name, &dt_file);
503 std::replace(dt_file.begin(), dt_file.end(), ',', '.');
504
505 std::string property_name = android::base::StringPrintf("ro.boot.%s", dp->d_name);
Elliott Hughesdb3f2672015-03-20 09:45:18 -0700506 property_set(property_name.c_str(), dt_file.c_str());
Rom Lemarchand6a524432015-02-28 06:39:11 -0800507 }
508}
509
Elliott Hughese5ce30f2015-05-06 19:19:24 -0700510static void process_kernel_cmdline() {
511 // Don't expose the raw commandline to unprivileged processes.
Dima Zavin5511c842011-12-19 11:21:32 -0800512 chmod("/proc/cmdline", 0440);
Colin Crossebc6ff12010-04-13 19:52:01 -0700513
Elliott Hughese5ce30f2015-05-06 19:19:24 -0700514 // The first pass does the common stuff, and finds if we are in qemu.
515 // The second pass is only necessary for qemu to export all kernel params
516 // as properties.
Nick Kralevichf667a322015-04-25 17:42:52 -0700517 import_kernel_cmdline(false, import_kernel_nv);
Elliott Hughese5ce30f2015-05-06 19:19:24 -0700518 if (qemu[0]) import_kernel_cmdline(true, import_kernel_nv);
Colin Crossebc6ff12010-04-13 19:52:01 -0700519}
520
Tom Cherry96f67312015-07-30 13:52:55 -0700521static int queue_property_triggers_action(const std::vector<std::string>& args)
Colin Crossebc6ff12010-04-13 19:52:01 -0700522{
Tom Cherryfa0c21c2015-07-23 17:53:11 -0700523 ActionManager::GetInstance().QueueAllPropertyTriggers();
Colin Crossebc6ff12010-04-13 19:52:01 -0700524 /* enable property triggers */
525 property_triggers_enabled = 1;
526 return 0;
527}
528
Elliott Hughesc6c26ed2015-04-24 18:50:30 -0700529static void selinux_init_all_handles(void)
Stephen Smalleye46f9d52012-01-13 08:48:47 -0500530{
Stephen Smalleyae6f3d72012-05-01 15:02:53 -0400531 sehandle = selinux_android_file_context_handle();
Stephen Smalleydbd37f22014-01-28 10:34:09 -0500532 selinux_android_set_sehandle(sehandle);
rpcraig63207cd2012-08-09 10:05:49 -0400533 sehandle_prop = selinux_android_prop_context_handle();
Stephen Smalleyae6f3d72012-05-01 15:02:53 -0400534}
Stephen Smalleye46f9d52012-01-13 08:48:47 -0500535
Nick Kralevichd34e4072015-04-28 12:39:41 -0700536enum selinux_enforcing_status { SELINUX_PERMISSIVE, SELINUX_ENFORCING };
Nick Kralevichf667a322015-04-25 17:42:52 -0700537
538static selinux_enforcing_status selinux_status_from_cmdline() {
539 selinux_enforcing_status status = SELINUX_ENFORCING;
540
Elliott Hughese5ce30f2015-05-06 19:19:24 -0700541 import_kernel_cmdline(false, [&](const std::string& key, const std::string& value, bool in_qemu) {
542 if (key == "androidboot.selinux" && value == "permissive") {
543 status = SELINUX_PERMISSIVE;
Nick Kralevichf667a322015-04-25 17:42:52 -0700544 }
Elliott Hughese5ce30f2015-05-06 19:19:24 -0700545 });
Nick Kralevichf667a322015-04-25 17:42:52 -0700546
547 return status;
548}
549
Nick Kralevich935bd3e2013-06-26 15:37:26 -0700550static bool selinux_is_enforcing(void)
551{
Nick Kralevichd34e4072015-04-28 12:39:41 -0700552 if (ALLOW_PERMISSIVE_SELINUX) {
Nick Kralevichf667a322015-04-25 17:42:52 -0700553 return selinux_status_from_cmdline() == SELINUX_ENFORCING;
Nick Kralevich935bd3e2013-06-26 15:37:26 -0700554 }
Nick Kralevich935bd3e2013-06-26 15:37:26 -0700555 return true;
556}
557
Stephen Smalleyae6f3d72012-05-01 15:02:53 -0400558int selinux_reload_policy(void)
559{
Stephen Smalleyae6f3d72012-05-01 15:02:53 -0400560 INFO("SELinux: Attempting to reload policy files\n");
Stephen Smalleye46f9d52012-01-13 08:48:47 -0500561
Stephen Smalleyae6f3d72012-05-01 15:02:53 -0400562 if (selinux_android_reload_policy() == -1) {
563 return -1;
Stephen Smalleye46f9d52012-01-13 08:48:47 -0500564 }
565
Stephen Smalleyae6f3d72012-05-01 15:02:53 -0400566 if (sehandle)
567 selabel_close(sehandle);
Stephen Smalleye46f9d52012-01-13 08:48:47 -0500568
rpcraig63207cd2012-08-09 10:05:49 -0400569 if (sehandle_prop)
570 selabel_close(sehandle_prop);
571
Stephen Smalleyae6f3d72012-05-01 15:02:53 -0400572 selinux_init_all_handles();
573 return 0;
Stephen Smalleye46f9d52012-01-13 08:48:47 -0500574}
rpcraig63207cd2012-08-09 10:05:49 -0400575
Elliott Hughesda40c002015-03-27 23:20:44 -0700576static int audit_callback(void *data, security_class_t /*cls*/, char *buf, size_t len) {
William Robertsd7aea442015-10-01 16:03:47 -0700577
578 property_audit_data *d = reinterpret_cast<property_audit_data*>(data);
579
580 if (!d || !d->name || !d->cr) {
581 ERROR("audit_callback invoked with null data arguments!");
582 return 0;
583 }
584
585 snprintf(buf, len, "property=%s pid=%d uid=%d gid=%d", d->name,
586 d->cr->pid, d->cr->uid, d->cr->gid);
rpcraig63207cd2012-08-09 10:05:49 -0400587 return 0;
588}
589
Elliott Hughesf65730e2015-04-24 18:38:17 +0000590static void selinux_initialize(bool in_kernel_domain) {
Elliott Hughesda40c002015-03-27 23:20:44 -0700591 Timer t;
Stephen Smalleyeb3f4212014-02-12 16:17:00 -0500592
Elliott Hughesda40c002015-03-27 23:20:44 -0700593 selinux_callback cb;
594 cb.func_log = selinux_klog_callback;
595 selinux_set_callback(SELINUX_CB_LOG, cb);
596 cb.func_audit = audit_callback;
597 selinux_set_callback(SELINUX_CB_AUDIT, cb);
598
Elliott Hughesf65730e2015-04-24 18:38:17 +0000599 if (in_kernel_domain) {
Elliott Hughesf65730e2015-04-24 18:38:17 +0000600 INFO("Loading SELinux policy...\n");
601 if (selinux_android_load_policy() < 0) {
602 ERROR("failed to load policy: %s\n", strerror(errno));
603 security_failure();
604 }
605
Nick Kralevichd34e4072015-04-28 12:39:41 -0700606 bool kernel_enforcing = (security_getenforce() == 1);
Elliott Hughesf65730e2015-04-24 18:38:17 +0000607 bool is_enforcing = selinux_is_enforcing();
Nick Kralevichd34e4072015-04-28 12:39:41 -0700608 if (kernel_enforcing != is_enforcing) {
609 if (security_setenforce(is_enforcing)) {
610 ERROR("security_setenforce(%s) failed: %s\n",
611 is_enforcing ? "true" : "false", strerror(errno));
612 security_failure();
613 }
614 }
Elliott Hughesf65730e2015-04-24 18:38:17 +0000615
Nick Kralevicheedbe812015-04-25 14:10:03 -0700616 if (write_file("/sys/fs/selinux/checkreqprot", "0") == -1) {
617 security_failure();
618 }
619
Elliott Hughesf65730e2015-04-24 18:38:17 +0000620 NOTICE("(Initializing SELinux %s took %.2fs.)\n",
621 is_enforcing ? "enforcing" : "non-enforcing", t.duration());
622 } else {
623 selinux_init_all_handles();
Nick Kralevich56fa0ac2013-06-24 17:41:40 -0700624 }
Nick Kralevich56fa0ac2013-06-24 17:41:40 -0700625}
626
Elliott Hughes8d82ea02015-02-06 20:15:18 -0800627int main(int argc, char** argv) {
Elliott Hughesda40c002015-03-27 23:20:44 -0700628 if (!strcmp(basename(argv[0]), "ueventd")) {
Colin Crossf83d0b92010-04-21 12:04:20 -0700629 return ueventd_main(argc, argv);
Elliott Hughesda40c002015-03-27 23:20:44 -0700630 }
Colin Crossf83d0b92010-04-21 12:04:20 -0700631
Elliott Hughesda40c002015-03-27 23:20:44 -0700632 if (!strcmp(basename(argv[0]), "watchdogd")) {
Arve Hjønnevågd97d9072012-06-13 21:51:56 -0700633 return watchdogd_main(argc, argv);
Elliott Hughesda40c002015-03-27 23:20:44 -0700634 }
Arve Hjønnevågd97d9072012-06-13 21:51:56 -0700635
Elliott Hughes8d82ea02015-02-06 20:15:18 -0800636 // Clear the umask.
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700637 umask(0);
638
Elliott Hughescc86fb22015-03-17 20:01:13 -0700639 add_environment("PATH", _PATH_DEFPATH);
640
Nick Kralevich9dec93b2015-04-25 15:50:03 -0700641 bool is_first_stage = (argc == 1) || (strcmp(argv[1], "--second-stage") != 0);
642
Elliott Hughes8d82ea02015-02-06 20:15:18 -0800643 // Get the basic filesystem setup we need put together in the initramdisk
644 // on / and then we'll let the rc file figure out the rest.
Nick Kralevich9dec93b2015-04-25 15:50:03 -0700645 if (is_first_stage) {
Nick Kralevichf667a322015-04-25 17:42:52 -0700646 mount("tmpfs", "/dev", "tmpfs", MS_NOSUID, "mode=0755");
647 mkdir("/dev/pts", 0755);
648 mkdir("/dev/socket", 0755);
649 mount("devpts", "/dev/pts", "devpts", 0, NULL);
Nick Kralevichc39ba5a2015-11-07 16:52:17 -0800650 #define MAKE_STR(x) __STRING(x)
651 mount("proc", "/proc", "proc", 0, "hidepid=2,gid=" MAKE_STR(AID_READPROC));
Nick Kralevich9dec93b2015-04-25 15:50:03 -0700652 mount("sysfs", "/sys", "sysfs", 0, NULL);
653 }
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700654
Elliott Hughes8d82ea02015-02-06 20:15:18 -0800655 // We must have some place other than / to create the device nodes for
656 // kmsg and null, otherwise we won't be able to remount / read-only
657 // later on. Now that tmpfs is mounted on /dev, we can actually talk
658 // to the outside world.
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700659 open_devnull_stdio();
Dima Zavin8f912822011-08-31 18:26:17 -0700660 klog_init();
Elliott Hughesda40c002015-03-27 23:20:44 -0700661 klog_set_level(KLOG_NOTICE_LEVEL);
662
Elliott Hughese5ce30f2015-05-06 19:19:24 -0700663 NOTICE("init %s started!\n", is_first_stage ? "first stage" : "second stage");
Elliott Hughesda40c002015-03-27 23:20:44 -0700664
Nick Kralevichf667a322015-04-25 17:42:52 -0700665 if (!is_first_stage) {
666 // Indicate that booting is in progress to background fw loaders, etc.
667 close(open("/dev/.booting", O_WRONLY | O_CREAT | O_CLOEXEC, 0000));
Vladimir Chtchetkine2b995432011-09-28 09:55:31 -0700668
Nick Kralevichf667a322015-04-25 17:42:52 -0700669 property_init();
Dima Zavin5511c842011-12-19 11:21:32 -0800670
Nick Kralevichf667a322015-04-25 17:42:52 -0700671 // If arguments are passed both on the command line and in DT,
672 // properties set in DT always have priority over the command-line ones.
673 process_kernel_dt();
674 process_kernel_cmdline();
675
Elliott Hughese5ce30f2015-05-06 19:19:24 -0700676 // Propagate the kernel variables to internal variables
Nick Kralevichf667a322015-04-25 17:42:52 -0700677 // used by init as well as the current required properties.
678 export_kernel_boot_props();
679 }
Rom Lemarchand6a524432015-02-28 06:39:11 -0800680
Elliott Hughesf65730e2015-04-24 18:38:17 +0000681 // Set up SELinux, including loading the SELinux policy if we're in the kernel domain.
682 selinux_initialize(is_first_stage);
683
684 // If we're in the kernel domain, re-exec init to transition to the init domain now
685 // that the SELinux policy has been loaded.
686 if (is_first_stage) {
687 if (restorecon("/init") == -1) {
688 ERROR("restorecon failed: %s\n", strerror(errno));
689 security_failure();
690 }
691 char* path = argv[0];
692 char* args[] = { path, const_cast<char*>("--second-stage"), nullptr };
693 if (execv(path, args) == -1) {
694 ERROR("execv(\"%s\") failed: %s\n", path, strerror(errno));
695 security_failure();
696 }
697 }
Elliott Hughes8d82ea02015-02-06 20:15:18 -0800698
699 // These directories were necessarily created before initial policy load
700 // and therefore need their security context restored to the proper value.
701 // This must happen before /dev is populated by ueventd.
Elliott Hughese5ce30f2015-05-06 19:19:24 -0700702 NOTICE("Running restorecon...\n");
Stephen Smalleye096e362012-06-11 13:37:39 -0400703 restorecon("/dev");
704 restorecon("/dev/socket");
Geremy Condra8e15eab2013-02-28 17:29:58 -0800705 restorecon("/dev/__properties__");
Tom Cherrye36a85c2015-11-30 16:40:25 -0800706 restorecon("/property_contexts");
Nick Kralevichae76f6d2013-07-11 15:38:26 -0700707 restorecon_recursive("/sys");
Stephen Smalleye46f9d52012-01-13 08:48:47 -0500708
Elliott Hughes929f4072015-04-24 21:13:44 -0700709 epoll_fd = epoll_create1(EPOLL_CLOEXEC);
710 if (epoll_fd == -1) {
711 ERROR("epoll_create1 failed: %s\n", strerror(errno));
712 exit(1);
713 }
714
715 signal_handler_init();
Elliott Hughes9042cae2015-04-24 17:43:21 -0700716
Riley Andrewse4b7b292014-06-16 15:06:21 -0700717 property_load_boot_defaults();
Sami Tolvanen9e9efca2015-12-07 12:33:58 +0000718 export_oem_lock_status();
Elliott Hughesc6c26ed2015-04-24 18:50:30 -0700719 start_property_service();
Dima Zavind7634c92011-12-16 14:18:06 -0800720
Tom Cherryb7349902015-08-26 11:43:36 -0700721 const BuiltinFunctionMap function_map;
722 Action::set_function_map(&function_map);
723
724 Parser& parser = Parser::GetInstance();
725 parser.AddSectionParser("service",std::make_unique<ServiceParser>());
726 parser.AddSectionParser("on", std::make_unique<ActionParser>());
727 parser.AddSectionParser("import", std::make_unique<ImportParser>());
728 parser.ParseConfig("/init.rc");
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700729
Tom Cherryfa0c21c2015-07-23 17:53:11 -0700730 ActionManager& am = ActionManager::GetInstance();
731
732 am.QueueEventTrigger("early-init");
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700733
Elliott Hughesc6c26ed2015-04-24 18:50:30 -0700734 // Queue an action that waits for coldboot done so we know ueventd has set up all of /dev...
Tom Cherryfa0c21c2015-07-23 17:53:11 -0700735 am.QueueBuiltinAction(wait_for_coldboot_done_action, "wait_for_coldboot_done");
Elliott Hughesc6c26ed2015-04-24 18:50:30 -0700736 // ... so that we can start queuing up actions that require stuff from /dev.
Tom Cherryfa0c21c2015-07-23 17:53:11 -0700737 am.QueueBuiltinAction(mix_hwrng_into_linux_rng_action, "mix_hwrng_into_linux_rng");
dcashman5d368132016-03-17 15:01:56 -0700738 am.QueueBuiltinAction(set_mmap_rnd_bits_action, "set_mmap_rnd_bits");
Tom Cherryfa0c21c2015-07-23 17:53:11 -0700739 am.QueueBuiltinAction(keychord_init_action, "keychord_init");
740 am.QueueBuiltinAction(console_init_action, "console_init");
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700741
Elliott Hughesda40c002015-03-27 23:20:44 -0700742 // Trigger all the boot actions to get us started.
Tom Cherryfa0c21c2015-07-23 17:53:11 -0700743 am.QueueEventTrigger("init");
Dima Zavinca47cef2011-08-24 15:28:23 -0700744
Elliott Hughes8d82ea02015-02-06 20:15:18 -0800745 // Repeat mix_hwrng_into_linux_rng in case /dev/hw_random or /dev/random
746 // wasn't ready immediately after wait_for_coldboot_done
Tom Cherryfa0c21c2015-07-23 17:53:11 -0700747 am.QueueBuiltinAction(mix_hwrng_into_linux_rng_action, "mix_hwrng_into_linux_rng");
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700748
Elliott Hughes8d82ea02015-02-06 20:15:18 -0800749 // Don't mount filesystems or start core system services in charger mode.
Yabin Cui74edcea2015-07-24 10:11:05 -0700750 std::string bootmode = property_get("ro.bootmode");
751 if (bootmode == "charger") {
Tom Cherryfa0c21c2015-07-23 17:53:11 -0700752 am.QueueEventTrigger("charger");
Dima Zavinca47cef2011-08-24 15:28:23 -0700753 } else {
Tom Cherryfa0c21c2015-07-23 17:53:11 -0700754 am.QueueEventTrigger("late-init");
Dima Zavinca47cef2011-08-24 15:28:23 -0700755 }
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700756
Elliott Hughes8d82ea02015-02-06 20:15:18 -0800757 // Run all property triggers based on current state of the properties.
Tom Cherryfa0c21c2015-07-23 17:53:11 -0700758 am.QueueBuiltinAction(queue_property_triggers_action, "queue_property_triggers");
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700759
Elliott Hughesc6c26ed2015-04-24 18:50:30 -0700760 while (true) {
Elliott Hughes8d82ea02015-02-06 20:15:18 -0800761 if (!waiting_for_exec) {
Tom Cherryfa0c21c2015-07-23 17:53:11 -0700762 am.ExecuteOneCommand();
Elliott Hughes8d82ea02015-02-06 20:15:18 -0800763 restart_processes();
764 }
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700765
Yongqin Liua197ff12014-12-05 13:45:02 +0800766 int timeout = -1;
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700767 if (process_needs_restart) {
768 timeout = (process_needs_restart - gettime()) * 1000;
769 if (timeout < 0)
770 timeout = 0;
771 }
772
Tom Cherryfa0c21c2015-07-23 17:53:11 -0700773 if (am.HasMoreCommands()) {
Colin Crossebc6ff12010-04-13 19:52:01 -0700774 timeout = 0;
Elliott Hughesc0e919c2015-02-04 14:46:36 -0800775 }
Colin Crossebc6ff12010-04-13 19:52:01 -0700776
Yongqin Liua197ff12014-12-05 13:45:02 +0800777 bootchart_sample(&timeout);
Elliott Hughesc0e919c2015-02-04 14:46:36 -0800778
Elliott Hughes929f4072015-04-24 21:13:44 -0700779 epoll_event ev;
780 int nr = TEMP_FAILURE_RETRY(epoll_wait(epoll_fd, &ev, 1, timeout));
781 if (nr == -1) {
782 ERROR("epoll_wait failed: %s\n", strerror(errno));
783 } else if (nr == 1) {
784 ((void (*)()) ev.data.ptr)();
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700785 }
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700786 }
787
788 return 0;
789}