blob: b24d8390f97afedcb72543a0741af78bf814865c [file] [log] [blame]
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -07001/*
2 * Copyright (C) 2008 The Android Open Source Project
3 *
4 * Licensed under the Apache License, Version 2.0 (the "License");
5 * you may not use this file except in compliance with the License.
6 * You may obtain a copy of the License at
7 *
8 * http://www.apache.org/licenses/LICENSE-2.0
9 *
10 * Unless required by applicable law or agreed to in writing, software
11 * distributed under the License is distributed on an "AS IS" BASIS,
12 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 * See the License for the specific language governing permissions and
14 * limitations under the License.
15 */
16
Elliott Hughes8d82ea02015-02-06 20:15:18 -080017#include <ctype.h>
Rom Lemarchand6a524432015-02-28 06:39:11 -080018#include <dirent.h>
Elliott Hughes8d82ea02015-02-06 20:15:18 -080019#include <errno.h>
20#include <fcntl.h>
dcashman5d368132016-03-17 15:01:56 -070021#include <fstream>
Elliott Hughes8d82ea02015-02-06 20:15:18 -080022#include <libgen.h>
Elliott Hughescc86fb22015-03-17 20:01:13 -070023#include <paths.h>
Elliott Hughes8d82ea02015-02-06 20:15:18 -080024#include <signal.h>
25#include <stdarg.h>
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -070026#include <stdio.h>
27#include <stdlib.h>
28#include <string.h>
Elliott Hughes929f4072015-04-24 21:13:44 -070029#include <sys/epoll.h>
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -070030#include <sys/mount.h>
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -070031#include <sys/socket.h>
Elliott Hughes8d82ea02015-02-06 20:15:18 -080032#include <sys/stat.h>
33#include <sys/types.h>
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -070034#include <sys/un.h>
Elliott Hughes8d82ea02015-02-06 20:15:18 -080035#include <sys/wait.h>
Elliott Hughes8d82ea02015-02-06 20:15:18 -080036#include <unistd.h>
37
38#include <mtd/mtd-user.h>
Stephen Smalleye46f9d52012-01-13 08:48:47 -050039
Stephen Smalleye46f9d52012-01-13 08:48:47 -050040#include <selinux/selinux.h>
41#include <selinux/label.h>
Stephen Smalleyae6f3d72012-05-01 15:02:53 -040042#include <selinux/android.h>
Stephen Smalleye46f9d52012-01-13 08:48:47 -050043
Elliott Hughes4f713192015-12-04 22:00:26 -080044#include <android-base/file.h>
45#include <android-base/stringprintf.h>
46#include <android-base/strings.h>
Nick Kralevich56fa0ac2013-06-24 17:41:40 -070047#include <cutils/android_reboot.h>
Alex Klyubin0d872d82013-08-16 13:19:24 -070048#include <cutils/fs.h>
Elliott Hughes8d82ea02015-02-06 20:15:18 -080049#include <cutils/iosched_policy.h>
50#include <cutils/list.h>
51#include <cutils/sockets.h>
Colin Crossf83d0b92010-04-21 12:04:20 -070052#include <private/android_filesystem_config.h>
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -070053
Rom Lemarchand6a524432015-02-28 06:39:11 -080054#include <memory>
55
Tom Cherryfa0c21c2015-07-23 17:53:11 -070056#include "action.h"
Tom Cherrybac32992015-07-31 12:45:25 -070057#include "bootchart.h"
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -070058#include "devices.h"
Tom Cherryb7349902015-08-26 11:43:36 -070059#include "import_parser.h"
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -070060#include "init.h"
Tom Cherrybac32992015-07-31 12:45:25 -070061#include "init_parser.h"
62#include "keychords.h"
Colin Crossed8a7d82010-04-19 17:05:34 -070063#include "log.h"
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -070064#include "property_service.h"
Tom Cherrybac32992015-07-31 12:45:25 -070065#include "service.h"
Colin Cross9c5366b2010-04-13 19:48:59 -070066#include "signal_handler.h"
Colin Crossf83d0b92010-04-21 12:04:20 -070067#include "ueventd.h"
Tom Cherrybac32992015-07-31 12:45:25 -070068#include "util.h"
Arve Hjønnevågd97d9072012-06-13 21:51:56 -070069#include "watchdogd.h"
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -070070
Stephen Smalleye46f9d52012-01-13 08:48:47 -050071struct selabel_handle *sehandle;
rpcraig63207cd2012-08-09 10:05:49 -040072struct selabel_handle *sehandle_prop;
Stephen Smalleye46f9d52012-01-13 08:48:47 -050073
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -070074static int property_triggers_enabled = 0;
75
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -070076static char qemu[32];
77
Tom Cherrybac32992015-07-31 12:45:25 -070078int have_console;
79std::string console_name = "/dev/console";
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -070080static time_t process_needs_restart;
81
Tom Cherrybac32992015-07-31 12:45:25 -070082const char *ENV[32];
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -070083
Elliott Hughes8d82ea02015-02-06 20:15:18 -080084bool waiting_for_exec = false;
85
Elliott Hughes929f4072015-04-24 21:13:44 -070086static int epoll_fd = -1;
87
88void register_epoll_handler(int fd, void (*fn)()) {
89 epoll_event ev;
90 ev.events = EPOLLIN;
91 ev.data.ptr = reinterpret_cast<void*>(fn);
92 if (epoll_ctl(epoll_fd, EPOLL_CTL_ADD, fd, &ev) == -1) {
93 ERROR("epoll_ctl failed: %s\n", strerror(errno));
94 }
95}
96
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -070097/* add_environment - add "key=value" to the current environment */
98int add_environment(const char *key, const char *val)
99{
James Morrissey381341f2014-05-16 11:36:36 +0100100 size_t n;
101 size_t key_len = strlen(key);
Vladimir Chtchetkine2b995432011-09-28 09:55:31 -0700102
James Morrissey381341f2014-05-16 11:36:36 +0100103 /* The last environment entry is reserved to terminate the list */
104 for (n = 0; n < (ARRAY_SIZE(ENV) - 1); n++) {
105
106 /* Delete any existing entry for this key */
107 if (ENV[n] != NULL) {
108 size_t entry_key_len = strcspn(ENV[n], "=");
109 if ((entry_key_len == key_len) && (strncmp(ENV[n], key, entry_key_len) == 0)) {
110 free((char*)ENV[n]);
111 ENV[n] = NULL;
112 }
113 }
114
115 /* Add entry if a free slot is available */
116 if (ENV[n] == NULL) {
Elliott Hughesf3cf4382015-02-03 17:12:07 -0800117 char* entry;
118 asprintf(&entry, "%s=%s", key, val);
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700119 ENV[n] = entry;
120 return 0;
121 }
122 }
123
James Morrissey381341f2014-05-16 11:36:36 +0100124 ERROR("No env. room to store: '%s':'%s'\n", key, val);
125
126 return -1;
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700127}
128
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700129void property_changed(const char *name, const char *value)
130{
Colin Crossebc6ff12010-04-13 19:52:01 -0700131 if (property_triggers_enabled)
Tom Cherryfa0c21c2015-07-23 17:53:11 -0700132 ActionManager::GetInstance().QueuePropertyTrigger(name, value);
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700133}
134
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700135static void restart_processes()
136{
137 process_needs_restart = 0;
Tom Cherrybac32992015-07-31 12:45:25 -0700138 ServiceManager::GetInstance().
139 ForEachServiceWithFlags(SVC_RESTARTING, [] (Service* s) {
140 s->RestartIfNeeded(process_needs_restart);
141 });
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700142}
143
Tom Cherrybac32992015-07-31 12:45:25 -0700144static void msg_start(const std::string& name)
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700145{
Tom Cherrybac32992015-07-31 12:45:25 -0700146 Service* svc = nullptr;
147 std::vector<std::string> vargs;
San Mehatf24e2522009-05-19 13:30:46 -0700148
Tom Cherrybac32992015-07-31 12:45:25 -0700149 size_t colon_pos = name.find(':');
150 if (colon_pos == std::string::npos) {
151 svc = ServiceManager::GetInstance().FindServiceByName(name);
152 } else {
153 std::string service_name(name.substr(0, colon_pos));
154 std::string args(name.substr(colon_pos + 1));
155 vargs = android::base::Split(args, " ");
San Mehatf24e2522009-05-19 13:30:46 -0700156
Tom Cherrybac32992015-07-31 12:45:25 -0700157 svc = ServiceManager::GetInstance().FindServiceByName(service_name);
San Mehatf24e2522009-05-19 13:30:46 -0700158 }
Vladimir Chtchetkine2b995432011-09-28 09:55:31 -0700159
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700160 if (svc) {
Tom Cherrybac32992015-07-31 12:45:25 -0700161 svc->Start(vargs);
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700162 } else {
Tom Cherrybac32992015-07-31 12:45:25 -0700163 ERROR("no such service '%s'\n", name.c_str());
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700164 }
165}
166
Tom Cherrybac32992015-07-31 12:45:25 -0700167static void msg_stop(const std::string& name)
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700168{
Tom Cherrybac32992015-07-31 12:45:25 -0700169 Service* svc = ServiceManager::GetInstance().FindServiceByName(name);
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700170
171 if (svc) {
Tom Cherrybac32992015-07-31 12:45:25 -0700172 svc->Stop();
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700173 } else {
Tom Cherrybac32992015-07-31 12:45:25 -0700174 ERROR("no such service '%s'\n", name.c_str());
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700175 }
176}
177
Tom Cherrybac32992015-07-31 12:45:25 -0700178static void msg_restart(const std::string& name)
Mike Kasickb54f39f2012-01-25 23:48:46 -0500179{
Tom Cherrybac32992015-07-31 12:45:25 -0700180 Service* svc = ServiceManager::GetInstance().FindServiceByName(name);
Mike Kasickb54f39f2012-01-25 23:48:46 -0500181
182 if (svc) {
Tom Cherrybac32992015-07-31 12:45:25 -0700183 svc->Restart();
Mike Kasickb54f39f2012-01-25 23:48:46 -0500184 } else {
Tom Cherrybac32992015-07-31 12:45:25 -0700185 ERROR("no such service '%s'\n", name.c_str());
Mike Kasickb54f39f2012-01-25 23:48:46 -0500186 }
187}
188
Tom Cherrybac32992015-07-31 12:45:25 -0700189void handle_control_message(const std::string& msg, const std::string& arg)
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700190{
Tom Cherrybac32992015-07-31 12:45:25 -0700191 if (msg == "start") {
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700192 msg_start(arg);
Tom Cherrybac32992015-07-31 12:45:25 -0700193 } else if (msg == "stop") {
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700194 msg_stop(arg);
Tom Cherrybac32992015-07-31 12:45:25 -0700195 } else if (msg == "restart") {
Mike Kasickb54f39f2012-01-25 23:48:46 -0500196 msg_restart(arg);
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700197 } else {
Tom Cherrybac32992015-07-31 12:45:25 -0700198 ERROR("unknown control msg '%s'\n", msg.c_str());
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700199 }
200}
201
Tom Cherry96f67312015-07-30 13:52:55 -0700202static int wait_for_coldboot_done_action(const std::vector<std::string>& args) {
Elliott Hughesc6c26ed2015-04-24 18:50:30 -0700203 Timer t;
204
205 NOTICE("Waiting for %s...\n", COLDBOOT_DONE);
Elliott Hughesc7331d02015-05-14 12:03:14 -0700206 // Any longer than 1s is an unreasonable length of time to delay booting.
207 // If you're hitting this timeout, check that you didn't make your
208 // sepolicy regular expressions too expensive (http://b/19899875).
209 if (wait_for_file(COLDBOOT_DONE, 1)) {
Andreas Gampea016c422014-11-24 19:52:41 -0800210 ERROR("Timed out waiting for %s\n", COLDBOOT_DONE);
Elliott Hughesc6c26ed2015-04-24 18:50:30 -0700211 }
212
213 NOTICE("Waiting for %s took %.2fs.\n", COLDBOOT_DONE, t.duration());
214 return 0;
Colin Crossebc6ff12010-04-13 19:52:01 -0700215}
216
Alex Klyubin0d872d82013-08-16 13:19:24 -0700217/*
218 * Writes 512 bytes of output from Hardware RNG (/dev/hw_random, backed
219 * by Linux kernel's hw_random framework) into Linux RNG's via /dev/urandom.
220 * Does nothing if Hardware RNG is not present.
221 *
222 * Since we don't yet trust the quality of Hardware RNG, these bytes are not
223 * mixed into the primary pool of Linux RNG and the entropy estimate is left
224 * unmodified.
225 *
226 * If the HW RNG device /dev/hw_random is present, we require that at least
227 * 512 bytes read from it are written into Linux RNG. QA is expected to catch
228 * devices/configurations where these I/O operations are blocking for a long
229 * time. We do not reboot or halt on failures, as this is a best-effort
230 * attempt.
231 */
Tom Cherry96f67312015-07-30 13:52:55 -0700232static int mix_hwrng_into_linux_rng_action(const std::vector<std::string>& args)
Alex Klyubin0d872d82013-08-16 13:19:24 -0700233{
234 int result = -1;
235 int hwrandom_fd = -1;
236 int urandom_fd = -1;
237 char buf[512];
238 ssize_t chunk_size;
239 size_t total_bytes_written = 0;
240
241 hwrandom_fd = TEMP_FAILURE_RETRY(
Nick Kralevich45a884f2015-02-02 14:37:22 -0800242 open("/dev/hw_random", O_RDONLY | O_NOFOLLOW | O_CLOEXEC));
Alex Klyubin0d872d82013-08-16 13:19:24 -0700243 if (hwrandom_fd == -1) {
244 if (errno == ENOENT) {
245 ERROR("/dev/hw_random not found\n");
246 /* It's not an error to not have a Hardware RNG. */
247 result = 0;
248 } else {
249 ERROR("Failed to open /dev/hw_random: %s\n", strerror(errno));
250 }
251 goto ret;
252 }
253
254 urandom_fd = TEMP_FAILURE_RETRY(
Nick Kralevich45a884f2015-02-02 14:37:22 -0800255 open("/dev/urandom", O_WRONLY | O_NOFOLLOW | O_CLOEXEC));
Alex Klyubin0d872d82013-08-16 13:19:24 -0700256 if (urandom_fd == -1) {
257 ERROR("Failed to open /dev/urandom: %s\n", strerror(errno));
258 goto ret;
259 }
260
261 while (total_bytes_written < sizeof(buf)) {
262 chunk_size = TEMP_FAILURE_RETRY(
263 read(hwrandom_fd, buf, sizeof(buf) - total_bytes_written));
264 if (chunk_size == -1) {
265 ERROR("Failed to read from /dev/hw_random: %s\n", strerror(errno));
266 goto ret;
267 } else if (chunk_size == 0) {
268 ERROR("Failed to read from /dev/hw_random: EOF\n");
269 goto ret;
270 }
271
272 chunk_size = TEMP_FAILURE_RETRY(write(urandom_fd, buf, chunk_size));
273 if (chunk_size == -1) {
274 ERROR("Failed to write to /dev/urandom: %s\n", strerror(errno));
275 goto ret;
276 }
277 total_bytes_written += chunk_size;
278 }
279
Elliott Hughesccecf142014-01-16 10:53:11 -0800280 INFO("Mixed %zu bytes from /dev/hw_random into /dev/urandom",
Alex Klyubin0d872d82013-08-16 13:19:24 -0700281 total_bytes_written);
282 result = 0;
283
284ret:
285 if (hwrandom_fd != -1) {
286 close(hwrandom_fd);
287 }
288 if (urandom_fd != -1) {
289 close(urandom_fd);
290 }
Alex Klyubin0d872d82013-08-16 13:19:24 -0700291 return result;
292}
293
dcashman5d368132016-03-17 15:01:56 -0700294static void security_failure() {
295 ERROR("Security failure; rebooting into recovery mode...\n");
296 android_reboot(ANDROID_RB_RESTART2, 0, "recovery");
297 while (true) { pause(); } // never reached
298}
299
300#define MMAP_RND_PATH "/proc/sys/vm/mmap_rnd_bits"
301#define MMAP_RND_COMPAT_PATH "/proc/sys/vm/mmap_rnd_compat_bits"
302
303/* __attribute__((unused)) due to lack of mips support: see mips block
304 * in set_mmap_rnd_bits_action */
305static bool __attribute__((unused)) set_mmap_rnd_bits_min(int start, int min, bool compat) {
306 std::string path;
307 if (compat) {
308 path = MMAP_RND_COMPAT_PATH;
309 } else {
310 path = MMAP_RND_PATH;
311 }
312 std::ifstream inf(path, std::fstream::in);
313 if (!inf) {
314 return false;
315 }
316 while (start >= min) {
317 // try to write out new value
318 std::string str_val = std::to_string(start);
319 std::ofstream of(path, std::fstream::out);
320 if (!of) {
321 return false;
322 }
323 of << str_val << std::endl;
324 of.close();
325
326 // check to make sure it was recorded
327 inf.seekg(0);
328 std::string str_rec;
329 inf >> str_rec;
330 if (str_val.compare(str_rec) == 0) {
331 break;
332 }
333 start--;
334 }
335 inf.close();
336 return (start >= min);
337}
338
339/*
340 * Set /proc/sys/vm/mmap_rnd_bits and potentially
341 * /proc/sys/vm/mmap_rnd_compat_bits to the maximum supported values.
342 * Returns -1 if unable to set these to an acceptable value. Apply
343 * upstream patch-sets https://lkml.org/lkml/2015/12/21/337 and
344 * https://lkml.org/lkml/2016/2/4/831 to enable this.
345 */
346static int set_mmap_rnd_bits_action(const std::vector<std::string>& args)
347{
348 int ret = -1;
349
350 /* values are arch-dependent */
351#if defined(__aarch64__)
352 /* arm64 supports 18 - 33 bits depending on pagesize and VA_SIZE */
353 if (set_mmap_rnd_bits_min(33, 24, false)
354 && set_mmap_rnd_bits_min(16, 16, true)) {
355 ret = 0;
356 }
357#elif defined(__x86__64__)
358 /* x86_64 supports 28 - 32 bits */
359 if (set_mmap_rnd_bits_min(32, 32, false)
360 && set_mmap_rnd_bits_min(16, 16, true)) {
361 ret = 0;
362 }
363#elif defined(__arm__) || defined(__i386__)
364 /* check to see if we're running on 64-bit kernel */
365 bool h64 = !access(MMAP_RND_COMPAT_PATH, F_OK);
366 /* supported 32-bit architecture must have 16 bits set */
367 if (set_mmap_rnd_bits_min(16, 16, h64)) {
368 ret = 0;
369 }
370#elif defined(__mips__) || defined(__mips64__)
371 // TODO: add mips support b/27788820
372 ret = 0;
373#else
374 ERROR("Unknown architecture\n");
375#endif
376 if (ret == -1) {
377 ERROR("Unable to set adequate mmap entropy value!\n");
378 security_failure();
379 }
380 return ret;
381}
382
Tom Cherry96f67312015-07-30 13:52:55 -0700383static int keychord_init_action(const std::vector<std::string>& args)
Colin Crossebc6ff12010-04-13 19:52:01 -0700384{
385 keychord_init();
386 return 0;
387}
388
Tom Cherry96f67312015-07-30 13:52:55 -0700389static int console_init_action(const std::vector<std::string>& args)
Colin Crossebc6ff12010-04-13 19:52:01 -0700390{
Yabin Cui74edcea2015-07-24 10:11:05 -0700391 std::string console = property_get("ro.boot.console");
392 if (!console.empty()) {
393 console_name = "/dev/" + console;
Colin Crossebc6ff12010-04-13 19:52:01 -0700394 }
395
Yabin Cui74edcea2015-07-24 10:11:05 -0700396 int fd = open(console_name.c_str(), O_RDWR | O_CLOEXEC);
Colin Crossebc6ff12010-04-13 19:52:01 -0700397 if (fd >= 0)
398 have_console = 1;
399 close(fd);
400
Nick Kralevich45a884f2015-02-02 14:37:22 -0800401 fd = open("/dev/tty0", O_WRONLY | O_CLOEXEC);
Marcin Chojnacki50dc9362013-10-16 17:39:16 +0200402 if (fd >= 0) {
403 const char *msg;
404 msg = "\n"
405 "\n"
406 "\n"
407 "\n"
408 "\n"
409 "\n"
410 "\n" // console is 40 cols x 30 lines
411 "\n"
412 "\n"
413 "\n"
414 "\n"
415 "\n"
416 "\n"
417 "\n"
418 " A N D R O I D ";
419 write(fd, msg, strlen(msg));
420 close(fd);
Colin Crossebc6ff12010-04-13 19:52:01 -0700421 }
Marcin Chojnacki50dc9362013-10-16 17:39:16 +0200422
Colin Crossebc6ff12010-04-13 19:52:01 -0700423 return 0;
424}
425
Elliott Hughese5ce30f2015-05-06 19:19:24 -0700426static void import_kernel_nv(const std::string& key, const std::string& value, bool for_emulator) {
427 if (key.empty()) return;
Dima Zavin5511c842011-12-19 11:21:32 -0800428
429 if (for_emulator) {
Elliott Hughese5ce30f2015-05-06 19:19:24 -0700430 // In the emulator, export any kernel option with the "ro.kernel." prefix.
431 property_set(android::base::StringPrintf("ro.kernel.%s", key.c_str()).c_str(), value.c_str());
Dima Zavin5511c842011-12-19 11:21:32 -0800432 return;
433 }
434
Elliott Hughese5ce30f2015-05-06 19:19:24 -0700435 if (key == "qemu") {
436 strlcpy(qemu, value.c_str(), sizeof(qemu));
437 } else if (android::base::StartsWith(key, "androidboot.")) {
438 property_set(android::base::StringPrintf("ro.boot.%s", key.c_str() + 12).c_str(),
439 value.c_str());
Dima Zavin5511c842011-12-19 11:21:32 -0800440 }
441}
442
Sami Tolvanen9e9efca2015-12-07 12:33:58 +0000443static void export_oem_lock_status() {
444 if (property_get("ro.oem_unlock_supported") != "1") {
445 return;
446 }
447
448 std::string value = property_get("ro.boot.verifiedbootstate");
449
450 if (!value.empty()) {
451 property_set("ro.boot.flash.locked", value == "orange" ? "0" : "1");
452 }
453}
454
Elliott Hughesd679bc92015-03-20 08:50:46 -0700455static void export_kernel_boot_props() {
Dima Zavin5511c842011-12-19 11:21:32 -0800456 struct {
457 const char *src_prop;
Elliott Hughesd679bc92015-03-20 08:50:46 -0700458 const char *dst_prop;
459 const char *default_value;
Dima Zavin5511c842011-12-19 11:21:32 -0800460 } prop_map[] = {
Elliott Hughesd679bc92015-03-20 08:50:46 -0700461 { "ro.boot.serialno", "ro.serialno", "", },
462 { "ro.boot.mode", "ro.bootmode", "unknown", },
463 { "ro.boot.baseband", "ro.baseband", "unknown", },
Dima Zavin5511c842011-12-19 11:21:32 -0800464 { "ro.boot.bootloader", "ro.bootloader", "unknown", },
Elliott Hughesd679bc92015-03-20 08:50:46 -0700465 { "ro.boot.hardware", "ro.hardware", "unknown", },
466 { "ro.boot.revision", "ro.revision", "0", },
Dima Zavin5511c842011-12-19 11:21:32 -0800467 };
Elliott Hughesd679bc92015-03-20 08:50:46 -0700468 for (size_t i = 0; i < ARRAY_SIZE(prop_map); i++) {
Yabin Cui74edcea2015-07-24 10:11:05 -0700469 std::string value = property_get(prop_map[i].src_prop);
470 property_set(prop_map[i].dst_prop, (!value.empty()) ? value.c_str() : prop_map[i].default_value);
Dima Zavin5511c842011-12-19 11:21:32 -0800471 }
Dima Zavin5511c842011-12-19 11:21:32 -0800472}
Colin Crossebc6ff12010-04-13 19:52:01 -0700473
Elliott Hughese5ce30f2015-05-06 19:19:24 -0700474static void process_kernel_dt() {
Rom Lemarchand6a524432015-02-28 06:39:11 -0800475 static const char android_dir[] = "/proc/device-tree/firmware/android";
476
477 std::string file_name = android::base::StringPrintf("%s/compatible", android_dir);
478
479 std::string dt_file;
480 android::base::ReadFileToString(file_name, &dt_file);
481 if (!dt_file.compare("android,firmware")) {
482 ERROR("firmware/android is not compatible with 'android,firmware'\n");
483 return;
484 }
485
486 std::unique_ptr<DIR, int(*)(DIR*)>dir(opendir(android_dir), closedir);
Elliott Hughese5ce30f2015-05-06 19:19:24 -0700487 if (!dir) return;
Rom Lemarchand6a524432015-02-28 06:39:11 -0800488
489 struct dirent *dp;
490 while ((dp = readdir(dir.get())) != NULL) {
Rom Lemarchand1dcf3252015-11-08 17:51:50 -0800491 if (dp->d_type != DT_REG || !strcmp(dp->d_name, "compatible") || !strcmp(dp->d_name, "name")) {
Rom Lemarchand6a524432015-02-28 06:39:11 -0800492 continue;
Elliott Hughese5ce30f2015-05-06 19:19:24 -0700493 }
Rom Lemarchand6a524432015-02-28 06:39:11 -0800494
495 file_name = android::base::StringPrintf("%s/%s", android_dir, dp->d_name);
496
497 android::base::ReadFileToString(file_name, &dt_file);
498 std::replace(dt_file.begin(), dt_file.end(), ',', '.');
499
500 std::string property_name = android::base::StringPrintf("ro.boot.%s", dp->d_name);
Elliott Hughesdb3f2672015-03-20 09:45:18 -0700501 property_set(property_name.c_str(), dt_file.c_str());
Rom Lemarchand6a524432015-02-28 06:39:11 -0800502 }
503}
504
Elliott Hughese5ce30f2015-05-06 19:19:24 -0700505static void process_kernel_cmdline() {
506 // Don't expose the raw commandline to unprivileged processes.
Dima Zavin5511c842011-12-19 11:21:32 -0800507 chmod("/proc/cmdline", 0440);
Colin Crossebc6ff12010-04-13 19:52:01 -0700508
Elliott Hughese5ce30f2015-05-06 19:19:24 -0700509 // The first pass does the common stuff, and finds if we are in qemu.
510 // The second pass is only necessary for qemu to export all kernel params
511 // as properties.
Nick Kralevichf667a322015-04-25 17:42:52 -0700512 import_kernel_cmdline(false, import_kernel_nv);
Elliott Hughese5ce30f2015-05-06 19:19:24 -0700513 if (qemu[0]) import_kernel_cmdline(true, import_kernel_nv);
Colin Crossebc6ff12010-04-13 19:52:01 -0700514}
515
Tom Cherry96f67312015-07-30 13:52:55 -0700516static int queue_property_triggers_action(const std::vector<std::string>& args)
Colin Crossebc6ff12010-04-13 19:52:01 -0700517{
Tom Cherryfa0c21c2015-07-23 17:53:11 -0700518 ActionManager::GetInstance().QueueAllPropertyTriggers();
Colin Crossebc6ff12010-04-13 19:52:01 -0700519 /* enable property triggers */
520 property_triggers_enabled = 1;
521 return 0;
522}
523
Elliott Hughesc6c26ed2015-04-24 18:50:30 -0700524static void selinux_init_all_handles(void)
Stephen Smalleye46f9d52012-01-13 08:48:47 -0500525{
Stephen Smalleyae6f3d72012-05-01 15:02:53 -0400526 sehandle = selinux_android_file_context_handle();
Stephen Smalleydbd37f22014-01-28 10:34:09 -0500527 selinux_android_set_sehandle(sehandle);
rpcraig63207cd2012-08-09 10:05:49 -0400528 sehandle_prop = selinux_android_prop_context_handle();
Stephen Smalleyae6f3d72012-05-01 15:02:53 -0400529}
Stephen Smalleye46f9d52012-01-13 08:48:47 -0500530
Nick Kralevichd34e4072015-04-28 12:39:41 -0700531enum selinux_enforcing_status { SELINUX_PERMISSIVE, SELINUX_ENFORCING };
Nick Kralevichf667a322015-04-25 17:42:52 -0700532
533static selinux_enforcing_status selinux_status_from_cmdline() {
534 selinux_enforcing_status status = SELINUX_ENFORCING;
535
Elliott Hughese5ce30f2015-05-06 19:19:24 -0700536 import_kernel_cmdline(false, [&](const std::string& key, const std::string& value, bool in_qemu) {
537 if (key == "androidboot.selinux" && value == "permissive") {
538 status = SELINUX_PERMISSIVE;
Nick Kralevichf667a322015-04-25 17:42:52 -0700539 }
Elliott Hughese5ce30f2015-05-06 19:19:24 -0700540 });
Nick Kralevichf667a322015-04-25 17:42:52 -0700541
542 return status;
543}
544
Nick Kralevich935bd3e2013-06-26 15:37:26 -0700545static bool selinux_is_enforcing(void)
546{
Nick Kralevichd34e4072015-04-28 12:39:41 -0700547 if (ALLOW_PERMISSIVE_SELINUX) {
Nick Kralevichf667a322015-04-25 17:42:52 -0700548 return selinux_status_from_cmdline() == SELINUX_ENFORCING;
Nick Kralevich935bd3e2013-06-26 15:37:26 -0700549 }
Nick Kralevich935bd3e2013-06-26 15:37:26 -0700550 return true;
551}
552
Stephen Smalleyae6f3d72012-05-01 15:02:53 -0400553int selinux_reload_policy(void)
554{
Stephen Smalleyae6f3d72012-05-01 15:02:53 -0400555 INFO("SELinux: Attempting to reload policy files\n");
Stephen Smalleye46f9d52012-01-13 08:48:47 -0500556
Stephen Smalleyae6f3d72012-05-01 15:02:53 -0400557 if (selinux_android_reload_policy() == -1) {
558 return -1;
Stephen Smalleye46f9d52012-01-13 08:48:47 -0500559 }
560
Stephen Smalleyae6f3d72012-05-01 15:02:53 -0400561 if (sehandle)
562 selabel_close(sehandle);
Stephen Smalleye46f9d52012-01-13 08:48:47 -0500563
rpcraig63207cd2012-08-09 10:05:49 -0400564 if (sehandle_prop)
565 selabel_close(sehandle_prop);
566
Stephen Smalleyae6f3d72012-05-01 15:02:53 -0400567 selinux_init_all_handles();
568 return 0;
Stephen Smalleye46f9d52012-01-13 08:48:47 -0500569}
rpcraig63207cd2012-08-09 10:05:49 -0400570
Elliott Hughesda40c002015-03-27 23:20:44 -0700571static int audit_callback(void *data, security_class_t /*cls*/, char *buf, size_t len) {
William Robertsd7aea442015-10-01 16:03:47 -0700572
573 property_audit_data *d = reinterpret_cast<property_audit_data*>(data);
574
575 if (!d || !d->name || !d->cr) {
576 ERROR("audit_callback invoked with null data arguments!");
577 return 0;
578 }
579
580 snprintf(buf, len, "property=%s pid=%d uid=%d gid=%d", d->name,
581 d->cr->pid, d->cr->uid, d->cr->gid);
rpcraig63207cd2012-08-09 10:05:49 -0400582 return 0;
583}
584
Elliott Hughesf65730e2015-04-24 18:38:17 +0000585static void selinux_initialize(bool in_kernel_domain) {
Elliott Hughesda40c002015-03-27 23:20:44 -0700586 Timer t;
Stephen Smalleyeb3f4212014-02-12 16:17:00 -0500587
Elliott Hughesda40c002015-03-27 23:20:44 -0700588 selinux_callback cb;
589 cb.func_log = selinux_klog_callback;
590 selinux_set_callback(SELINUX_CB_LOG, cb);
591 cb.func_audit = audit_callback;
592 selinux_set_callback(SELINUX_CB_AUDIT, cb);
593
Elliott Hughesf65730e2015-04-24 18:38:17 +0000594 if (in_kernel_domain) {
Elliott Hughesf65730e2015-04-24 18:38:17 +0000595 INFO("Loading SELinux policy...\n");
596 if (selinux_android_load_policy() < 0) {
597 ERROR("failed to load policy: %s\n", strerror(errno));
598 security_failure();
599 }
600
Nick Kralevichd34e4072015-04-28 12:39:41 -0700601 bool kernel_enforcing = (security_getenforce() == 1);
Elliott Hughesf65730e2015-04-24 18:38:17 +0000602 bool is_enforcing = selinux_is_enforcing();
Nick Kralevichd34e4072015-04-28 12:39:41 -0700603 if (kernel_enforcing != is_enforcing) {
604 if (security_setenforce(is_enforcing)) {
605 ERROR("security_setenforce(%s) failed: %s\n",
606 is_enforcing ? "true" : "false", strerror(errno));
607 security_failure();
608 }
609 }
Elliott Hughesf65730e2015-04-24 18:38:17 +0000610
Nick Kralevicheedbe812015-04-25 14:10:03 -0700611 if (write_file("/sys/fs/selinux/checkreqprot", "0") == -1) {
612 security_failure();
613 }
614
Elliott Hughesf65730e2015-04-24 18:38:17 +0000615 NOTICE("(Initializing SELinux %s took %.2fs.)\n",
616 is_enforcing ? "enforcing" : "non-enforcing", t.duration());
617 } else {
618 selinux_init_all_handles();
Nick Kralevich56fa0ac2013-06-24 17:41:40 -0700619 }
Nick Kralevich56fa0ac2013-06-24 17:41:40 -0700620}
621
Elliott Hughes8d82ea02015-02-06 20:15:18 -0800622int main(int argc, char** argv) {
Elliott Hughesda40c002015-03-27 23:20:44 -0700623 if (!strcmp(basename(argv[0]), "ueventd")) {
Colin Crossf83d0b92010-04-21 12:04:20 -0700624 return ueventd_main(argc, argv);
Elliott Hughesda40c002015-03-27 23:20:44 -0700625 }
Colin Crossf83d0b92010-04-21 12:04:20 -0700626
Elliott Hughesda40c002015-03-27 23:20:44 -0700627 if (!strcmp(basename(argv[0]), "watchdogd")) {
Arve Hjønnevågd97d9072012-06-13 21:51:56 -0700628 return watchdogd_main(argc, argv);
Elliott Hughesda40c002015-03-27 23:20:44 -0700629 }
Arve Hjønnevågd97d9072012-06-13 21:51:56 -0700630
Elliott Hughes8d82ea02015-02-06 20:15:18 -0800631 // Clear the umask.
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700632 umask(0);
633
Elliott Hughescc86fb22015-03-17 20:01:13 -0700634 add_environment("PATH", _PATH_DEFPATH);
635
Nick Kralevich9dec93b2015-04-25 15:50:03 -0700636 bool is_first_stage = (argc == 1) || (strcmp(argv[1], "--second-stage") != 0);
637
Elliott Hughes8d82ea02015-02-06 20:15:18 -0800638 // Get the basic filesystem setup we need put together in the initramdisk
639 // on / and then we'll let the rc file figure out the rest.
Nick Kralevich9dec93b2015-04-25 15:50:03 -0700640 if (is_first_stage) {
Nick Kralevichf667a322015-04-25 17:42:52 -0700641 mount("tmpfs", "/dev", "tmpfs", MS_NOSUID, "mode=0755");
642 mkdir("/dev/pts", 0755);
643 mkdir("/dev/socket", 0755);
644 mount("devpts", "/dev/pts", "devpts", 0, NULL);
Nick Kralevichc39ba5a2015-11-07 16:52:17 -0800645 #define MAKE_STR(x) __STRING(x)
646 mount("proc", "/proc", "proc", 0, "hidepid=2,gid=" MAKE_STR(AID_READPROC));
Nick Kralevich9dec93b2015-04-25 15:50:03 -0700647 mount("sysfs", "/sys", "sysfs", 0, NULL);
648 }
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700649
Elliott Hughes8d82ea02015-02-06 20:15:18 -0800650 // We must have some place other than / to create the device nodes for
651 // kmsg and null, otherwise we won't be able to remount / read-only
652 // later on. Now that tmpfs is mounted on /dev, we can actually talk
653 // to the outside world.
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700654 open_devnull_stdio();
Dima Zavin8f912822011-08-31 18:26:17 -0700655 klog_init();
Elliott Hughesda40c002015-03-27 23:20:44 -0700656 klog_set_level(KLOG_NOTICE_LEVEL);
657
Elliott Hughese5ce30f2015-05-06 19:19:24 -0700658 NOTICE("init %s started!\n", is_first_stage ? "first stage" : "second stage");
Elliott Hughesda40c002015-03-27 23:20:44 -0700659
Nick Kralevichf667a322015-04-25 17:42:52 -0700660 if (!is_first_stage) {
661 // Indicate that booting is in progress to background fw loaders, etc.
662 close(open("/dev/.booting", O_WRONLY | O_CREAT | O_CLOEXEC, 0000));
Vladimir Chtchetkine2b995432011-09-28 09:55:31 -0700663
Nick Kralevichf667a322015-04-25 17:42:52 -0700664 property_init();
Dima Zavin5511c842011-12-19 11:21:32 -0800665
Nick Kralevichf667a322015-04-25 17:42:52 -0700666 // If arguments are passed both on the command line and in DT,
667 // properties set in DT always have priority over the command-line ones.
668 process_kernel_dt();
669 process_kernel_cmdline();
670
Elliott Hughese5ce30f2015-05-06 19:19:24 -0700671 // Propagate the kernel variables to internal variables
Nick Kralevichf667a322015-04-25 17:42:52 -0700672 // used by init as well as the current required properties.
673 export_kernel_boot_props();
674 }
Rom Lemarchand6a524432015-02-28 06:39:11 -0800675
Elliott Hughesf65730e2015-04-24 18:38:17 +0000676 // Set up SELinux, including loading the SELinux policy if we're in the kernel domain.
677 selinux_initialize(is_first_stage);
678
679 // If we're in the kernel domain, re-exec init to transition to the init domain now
680 // that the SELinux policy has been loaded.
681 if (is_first_stage) {
682 if (restorecon("/init") == -1) {
683 ERROR("restorecon failed: %s\n", strerror(errno));
684 security_failure();
685 }
686 char* path = argv[0];
687 char* args[] = { path, const_cast<char*>("--second-stage"), nullptr };
688 if (execv(path, args) == -1) {
689 ERROR("execv(\"%s\") failed: %s\n", path, strerror(errno));
690 security_failure();
691 }
692 }
Elliott Hughes8d82ea02015-02-06 20:15:18 -0800693
694 // These directories were necessarily created before initial policy load
695 // and therefore need their security context restored to the proper value.
696 // This must happen before /dev is populated by ueventd.
Elliott Hughese5ce30f2015-05-06 19:19:24 -0700697 NOTICE("Running restorecon...\n");
Stephen Smalleye096e362012-06-11 13:37:39 -0400698 restorecon("/dev");
699 restorecon("/dev/socket");
Geremy Condra8e15eab2013-02-28 17:29:58 -0800700 restorecon("/dev/__properties__");
Tom Cherrye36a85c2015-11-30 16:40:25 -0800701 restorecon("/property_contexts");
Nick Kralevichae76f6d2013-07-11 15:38:26 -0700702 restorecon_recursive("/sys");
Stephen Smalleye46f9d52012-01-13 08:48:47 -0500703
Elliott Hughes929f4072015-04-24 21:13:44 -0700704 epoll_fd = epoll_create1(EPOLL_CLOEXEC);
705 if (epoll_fd == -1) {
706 ERROR("epoll_create1 failed: %s\n", strerror(errno));
707 exit(1);
708 }
709
710 signal_handler_init();
Elliott Hughes9042cae2015-04-24 17:43:21 -0700711
Riley Andrewse4b7b292014-06-16 15:06:21 -0700712 property_load_boot_defaults();
Sami Tolvanen9e9efca2015-12-07 12:33:58 +0000713 export_oem_lock_status();
Elliott Hughesc6c26ed2015-04-24 18:50:30 -0700714 start_property_service();
Dima Zavind7634c92011-12-16 14:18:06 -0800715
Tom Cherryb7349902015-08-26 11:43:36 -0700716 const BuiltinFunctionMap function_map;
717 Action::set_function_map(&function_map);
718
719 Parser& parser = Parser::GetInstance();
720 parser.AddSectionParser("service",std::make_unique<ServiceParser>());
721 parser.AddSectionParser("on", std::make_unique<ActionParser>());
722 parser.AddSectionParser("import", std::make_unique<ImportParser>());
723 parser.ParseConfig("/init.rc");
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700724
Tom Cherryfa0c21c2015-07-23 17:53:11 -0700725 ActionManager& am = ActionManager::GetInstance();
726
727 am.QueueEventTrigger("early-init");
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700728
Elliott Hughesc6c26ed2015-04-24 18:50:30 -0700729 // Queue an action that waits for coldboot done so we know ueventd has set up all of /dev...
Tom Cherryfa0c21c2015-07-23 17:53:11 -0700730 am.QueueBuiltinAction(wait_for_coldboot_done_action, "wait_for_coldboot_done");
Elliott Hughesc6c26ed2015-04-24 18:50:30 -0700731 // ... so that we can start queuing up actions that require stuff from /dev.
Tom Cherryfa0c21c2015-07-23 17:53:11 -0700732 am.QueueBuiltinAction(mix_hwrng_into_linux_rng_action, "mix_hwrng_into_linux_rng");
dcashman5d368132016-03-17 15:01:56 -0700733 am.QueueBuiltinAction(set_mmap_rnd_bits_action, "set_mmap_rnd_bits");
Tom Cherryfa0c21c2015-07-23 17:53:11 -0700734 am.QueueBuiltinAction(keychord_init_action, "keychord_init");
735 am.QueueBuiltinAction(console_init_action, "console_init");
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700736
Elliott Hughesda40c002015-03-27 23:20:44 -0700737 // Trigger all the boot actions to get us started.
Tom Cherryfa0c21c2015-07-23 17:53:11 -0700738 am.QueueEventTrigger("init");
Dima Zavinca47cef2011-08-24 15:28:23 -0700739
Elliott Hughes8d82ea02015-02-06 20:15:18 -0800740 // Repeat mix_hwrng_into_linux_rng in case /dev/hw_random or /dev/random
741 // wasn't ready immediately after wait_for_coldboot_done
Tom Cherryfa0c21c2015-07-23 17:53:11 -0700742 am.QueueBuiltinAction(mix_hwrng_into_linux_rng_action, "mix_hwrng_into_linux_rng");
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700743
Elliott Hughes8d82ea02015-02-06 20:15:18 -0800744 // Don't mount filesystems or start core system services in charger mode.
Yabin Cui74edcea2015-07-24 10:11:05 -0700745 std::string bootmode = property_get("ro.bootmode");
746 if (bootmode == "charger") {
Tom Cherryfa0c21c2015-07-23 17:53:11 -0700747 am.QueueEventTrigger("charger");
Dima Zavinca47cef2011-08-24 15:28:23 -0700748 } else {
Tom Cherryfa0c21c2015-07-23 17:53:11 -0700749 am.QueueEventTrigger("late-init");
Dima Zavinca47cef2011-08-24 15:28:23 -0700750 }
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700751
Elliott Hughes8d82ea02015-02-06 20:15:18 -0800752 // Run all property triggers based on current state of the properties.
Tom Cherryfa0c21c2015-07-23 17:53:11 -0700753 am.QueueBuiltinAction(queue_property_triggers_action, "queue_property_triggers");
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700754
Elliott Hughesc6c26ed2015-04-24 18:50:30 -0700755 while (true) {
Elliott Hughes8d82ea02015-02-06 20:15:18 -0800756 if (!waiting_for_exec) {
Tom Cherryfa0c21c2015-07-23 17:53:11 -0700757 am.ExecuteOneCommand();
Elliott Hughes8d82ea02015-02-06 20:15:18 -0800758 restart_processes();
759 }
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700760
Yongqin Liua197ff12014-12-05 13:45:02 +0800761 int timeout = -1;
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700762 if (process_needs_restart) {
763 timeout = (process_needs_restart - gettime()) * 1000;
764 if (timeout < 0)
765 timeout = 0;
766 }
767
Tom Cherryfa0c21c2015-07-23 17:53:11 -0700768 if (am.HasMoreCommands()) {
Colin Crossebc6ff12010-04-13 19:52:01 -0700769 timeout = 0;
Elliott Hughesc0e919c2015-02-04 14:46:36 -0800770 }
Colin Crossebc6ff12010-04-13 19:52:01 -0700771
Yongqin Liua197ff12014-12-05 13:45:02 +0800772 bootchart_sample(&timeout);
Elliott Hughesc0e919c2015-02-04 14:46:36 -0800773
Elliott Hughes929f4072015-04-24 21:13:44 -0700774 epoll_event ev;
775 int nr = TEMP_FAILURE_RETRY(epoll_wait(epoll_fd, &ev, 1, timeout));
776 if (nr == -1) {
777 ERROR("epoll_wait failed: %s\n", strerror(errno));
778 } else if (nr == 1) {
779 ((void (*)()) ev.data.ptr)();
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700780 }
The Android Open Source Project4f6e8d72008-10-21 07:00:00 -0700781 }
782
783 return 0;
784}