| The Android Open Source Project | dd7bc33 | 2009-03-03 19:32:55 -0800 | [diff] [blame] | 1 | /* | 
|  | 2 | * Copyright (C) 2008 The Android Open Source Project | 
|  | 3 | * | 
|  | 4 | * Licensed under the Apache License, Version 2.0 (the "License"); | 
|  | 5 | * you may not use this file except in compliance with the License. | 
|  | 6 | * You may obtain a copy of the License at | 
|  | 7 | * | 
|  | 8 | *      http://www.apache.org/licenses/LICENSE-2.0 | 
|  | 9 | * | 
|  | 10 | * Unless required by applicable law or agreed to in writing, software | 
|  | 11 | * distributed under the License is distributed on an "AS IS" BASIS, | 
|  | 12 | * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. | 
|  | 13 | * See the License for the specific language governing permissions and | 
|  | 14 | * limitations under the License. | 
|  | 15 | */ | 
|  | 16 |  | 
| Tom Cherry | 3f5eaae5 | 2017-04-06 16:30:22 -0700 | [diff] [blame] | 17 | #include "util.h" | 
|  | 18 |  | 
| Mark Salyzyn | 62767fe | 2016-10-27 07:45:34 -0700 | [diff] [blame] | 19 | #include <ctype.h> | 
|  | 20 | #include <errno.h> | 
|  | 21 | #include <fcntl.h> | 
| Mark Salyzyn | 62767fe | 2016-10-27 07:45:34 -0700 | [diff] [blame] | 22 | #include <pwd.h> | 
| Elliott Hughes | 636ebc9 | 2019-10-07 18:16:23 -0700 | [diff] [blame] | 23 | #include <signal.h> | 
| The Android Open Source Project | dd7bc33 | 2009-03-03 19:32:55 -0800 | [diff] [blame] | 24 | #include <stdarg.h> | 
| The Android Open Source Project | dd7bc33 | 2009-03-03 19:32:55 -0800 | [diff] [blame] | 25 | #include <stdio.h> | 
| Tom Cherry | 3f5eaae5 | 2017-04-06 16:30:22 -0700 | [diff] [blame] | 26 | #include <stdlib.h> | 
| The Android Open Source Project | dd7bc33 | 2009-03-03 19:32:55 -0800 | [diff] [blame] | 27 | #include <string.h> | 
| Tom Cherry | 3f5eaae5 | 2017-04-06 16:30:22 -0700 | [diff] [blame] | 28 | #include <sys/socket.h> | 
|  | 29 | #include <sys/un.h> | 
| Colin Cross | 504bc51 | 2010-04-13 19:35:09 -0700 | [diff] [blame] | 30 | #include <time.h> | 
| Mark Salyzyn | 62767fe | 2016-10-27 07:45:34 -0700 | [diff] [blame] | 31 | #include <unistd.h> | 
| The Android Open Source Project | dd7bc33 | 2009-03-03 19:32:55 -0800 | [diff] [blame] | 32 |  | 
| Tom Cherry | 1c84135 | 2020-04-28 17:45:26 -0700 | [diff] [blame] | 33 | #include <mutex> | 
| Elliott Hughes | 290a228 | 2016-11-14 17:08:47 -0800 | [diff] [blame] | 34 | #include <thread> | 
| Tom Cherry | 1c84135 | 2020-04-28 17:45:26 -0700 | [diff] [blame] | 35 | #include <vector> | 
| Elliott Hughes | 290a228 | 2016-11-14 17:08:47 -0800 | [diff] [blame] | 36 |  | 
| Elliott Hughes | 4f71319 | 2015-12-04 22:00:26 -0800 | [diff] [blame] | 37 | #include <android-base/file.h> | 
| Elliott Hughes | f86b5a6 | 2016-06-24 15:12:21 -0700 | [diff] [blame] | 38 | #include <android-base/logging.h> | 
| Elliott Hughes | dc80312 | 2018-05-24 18:00:39 -0700 | [diff] [blame] | 39 | #include <android-base/properties.h> | 
| Tom Cherry | 2e4c85f | 2019-07-09 13:33:36 -0700 | [diff] [blame] | 40 | #include <android-base/scopeguard.h> | 
| Elliott Hughes | 4f71319 | 2015-12-04 22:00:26 -0800 | [diff] [blame] | 41 | #include <android-base/strings.h> | 
| Mark Salyzyn | db69107 | 2016-11-07 10:16:53 -0800 | [diff] [blame] | 42 | #include <android-base/unique_fd.h> | 
| The Android Open Source Project | dd7bc33 | 2009-03-03 19:32:55 -0800 | [diff] [blame] | 43 | #include <cutils/sockets.h> | 
| Tom Cherry | 3f5eaae5 | 2017-04-06 16:30:22 -0700 | [diff] [blame] | 44 | #include <selinux/android.h> | 
| The Android Open Source Project | dd7bc33 | 2009-03-03 19:32:55 -0800 | [diff] [blame] | 45 |  | 
| Tom Cherry | a2f9136 | 2020-02-20 10:50:00 -0800 | [diff] [blame] | 46 | #ifdef INIT_FULL_SOURCES | 
| Tom Cherry | c5cf85d | 2019-07-31 13:59:15 -0700 | [diff] [blame] | 47 | #include <android/api-level.h> | 
| Tom Cherry | 4772f1d | 2019-07-30 09:34:41 -0700 | [diff] [blame] | 48 | #include <sys/system_properties.h> | 
| Tom Cherry | c5cf85d | 2019-07-31 13:59:15 -0700 | [diff] [blame] | 49 |  | 
| Tom Cherry | 59656fb | 2019-05-28 10:19:44 -0700 | [diff] [blame] | 50 | #include "reboot_utils.h" | 
| Vic Yang | 92c236e | 2019-05-28 15:58:35 -0700 | [diff] [blame] | 51 | #include "selabel.h" | 
| Tom Cherry | c5cf85d | 2019-07-31 13:59:15 -0700 | [diff] [blame] | 52 | #include "selinux.h" | 
| Tom Cherry | de6bd50 | 2018-02-13 16:50:08 -0800 | [diff] [blame] | 53 | #else | 
|  | 54 | #include "host_init_stubs.h" | 
|  | 55 | #endif | 
| The Android Open Source Project | dd7bc33 | 2009-03-03 19:32:55 -0800 | [diff] [blame] | 56 |  | 
| James Hawkins | e78ea77 | 2017-03-24 11:43:02 -0700 | [diff] [blame] | 57 | using android::base::boot_clock; | 
| Tom Cherry | 4772f1d | 2019-07-30 09:34:41 -0700 | [diff] [blame] | 58 | using android::base::StartsWith; | 
| Tom Cherry | 517e1f1 | 2017-05-04 17:40:33 -0700 | [diff] [blame] | 59 | using namespace std::literals::string_literals; | 
| James Hawkins | e78ea77 | 2017-03-24 11:43:02 -0700 | [diff] [blame] | 60 |  | 
| Tom Cherry | 81f5d3e | 2017-06-22 12:53:17 -0700 | [diff] [blame] | 61 | namespace android { | 
|  | 62 | namespace init { | 
|  | 63 |  | 
| Yu Ning | c01022a | 2017-07-26 17:54:08 +0800 | [diff] [blame] | 64 | const std::string kDefaultAndroidDtDir("/proc/device-tree/firmware/android/"); | 
|  | 65 |  | 
| Tom Cherry | 18278d2 | 2019-11-12 16:21:20 -0800 | [diff] [blame] | 66 | void (*trigger_shutdown)(const std::string& command) = nullptr; | 
|  | 67 |  | 
| Tom Cherry | 517e1f1 | 2017-05-04 17:40:33 -0700 | [diff] [blame] | 68 | // DecodeUid() - decodes and returns the given string, which can be either the | 
| Tom Cherry | 11a3aee | 2017-08-03 12:54:07 -0700 | [diff] [blame] | 69 | // numeric or name representation, into the integer uid or gid. | 
|  | 70 | Result<uid_t> DecodeUid(const std::string& name) { | 
| Tom Cherry | 517e1f1 | 2017-05-04 17:40:33 -0700 | [diff] [blame] | 71 | if (isalpha(name[0])) { | 
|  | 72 | passwd* pwd = getpwnam(name.c_str()); | 
| Tom Cherry | 11a3aee | 2017-08-03 12:54:07 -0700 | [diff] [blame] | 73 | if (!pwd) return ErrnoError() << "getpwnam failed"; | 
|  | 74 |  | 
|  | 75 | return pwd->pw_uid; | 
| William Roberts | 3792e6c | 2016-04-06 19:18:50 -0700 | [diff] [blame] | 76 | } | 
| The Android Open Source Project | dd7bc33 | 2009-03-03 19:32:55 -0800 | [diff] [blame] | 77 |  | 
|  | 78 | errno = 0; | 
| Tom Cherry | 517e1f1 | 2017-05-04 17:40:33 -0700 | [diff] [blame] | 79 | uid_t result = static_cast<uid_t>(strtoul(name.c_str(), 0, 0)); | 
| Tom Cherry | 11a3aee | 2017-08-03 12:54:07 -0700 | [diff] [blame] | 80 | if (errno) return ErrnoError() << "strtoul failed"; | 
|  | 81 |  | 
|  | 82 | return result; | 
| The Android Open Source Project | dd7bc33 | 2009-03-03 19:32:55 -0800 | [diff] [blame] | 83 | } | 
|  | 84 |  | 
|  | 85 | /* | 
| Mark Salyzyn | b066fcc | 2017-05-05 14:44:35 -0700 | [diff] [blame] | 86 | * CreateSocket - creates a Unix domain socket in ANDROID_SOCKET_DIR | 
| The Android Open Source Project | dd7bc33 | 2009-03-03 19:32:55 -0800 | [diff] [blame] | 87 | * ("/dev/socket") as dictated in init.rc. This socket is inherited by the | 
|  | 88 | * daemon. We communicate the file descriptor's value via the environment | 
|  | 89 | * variable ANDROID_SOCKET_ENV_PREFIX<name> ("ANDROID_SOCKET_foo"). | 
|  | 90 | */ | 
| Tom Cherry | 2e4c85f | 2019-07-09 13:33:36 -0700 | [diff] [blame] | 91 | Result<int> CreateSocket(const std::string& name, int type, bool passcred, mode_t perm, uid_t uid, | 
|  | 92 | gid_t gid, const std::string& socketcon) { | 
|  | 93 | if (!socketcon.empty()) { | 
|  | 94 | if (setsockcreatecon(socketcon.c_str()) == -1) { | 
|  | 95 | return ErrnoError() << "setsockcreatecon(\"" << socketcon << "\") failed"; | 
| Nick Kralevich | 83ccb1c | 2015-11-23 16:26:42 -0800 | [diff] [blame] | 96 | } | 
|  | 97 | } | 
| The Android Open Source Project | dd7bc33 | 2009-03-03 19:32:55 -0800 | [diff] [blame] | 98 |  | 
| Mark Salyzyn | db69107 | 2016-11-07 10:16:53 -0800 | [diff] [blame] | 99 | android::base::unique_fd fd(socket(PF_UNIX, type, 0)); | 
| The Android Open Source Project | dd7bc33 | 2009-03-03 19:32:55 -0800 | [diff] [blame] | 100 | if (fd < 0) { | 
| Tom Cherry | 2e4c85f | 2019-07-09 13:33:36 -0700 | [diff] [blame] | 101 | return ErrnoError() << "Failed to open socket '" << name << "'"; | 
| The Android Open Source Project | dd7bc33 | 2009-03-03 19:32:55 -0800 | [diff] [blame] | 102 | } | 
|  | 103 |  | 
| Tom Cherry | 2e4c85f | 2019-07-09 13:33:36 -0700 | [diff] [blame] | 104 | if (!socketcon.empty()) setsockcreatecon(nullptr); | 
| Stephen Smalley | 8348d27 | 2013-05-13 12:37:04 -0400 | [diff] [blame] | 105 |  | 
| Mark Salyzyn | db69107 | 2016-11-07 10:16:53 -0800 | [diff] [blame] | 106 | struct sockaddr_un addr; | 
| The Android Open Source Project | dd7bc33 | 2009-03-03 19:32:55 -0800 | [diff] [blame] | 107 | memset(&addr, 0 , sizeof(addr)); | 
|  | 108 | addr.sun_family = AF_UNIX; | 
| Tom Cherry | 2e4c85f | 2019-07-09 13:33:36 -0700 | [diff] [blame] | 109 | snprintf(addr.sun_path, sizeof(addr.sun_path), ANDROID_SOCKET_DIR "/%s", name.c_str()); | 
| The Android Open Source Project | dd7bc33 | 2009-03-03 19:32:55 -0800 | [diff] [blame] | 110 |  | 
| Mark Salyzyn | db69107 | 2016-11-07 10:16:53 -0800 | [diff] [blame] | 111 | if ((unlink(addr.sun_path) != 0) && (errno != ENOENT)) { | 
| Tom Cherry | 2e4c85f | 2019-07-09 13:33:36 -0700 | [diff] [blame] | 112 | return ErrnoError() << "Failed to unlink old socket '" << name << "'"; | 
| The Android Open Source Project | dd7bc33 | 2009-03-03 19:32:55 -0800 | [diff] [blame] | 113 | } | 
|  | 114 |  | 
| Tom Cherry | 0c8d6d2 | 2017-08-10 12:22:44 -0700 | [diff] [blame] | 115 | std::string secontext; | 
|  | 116 | if (SelabelLookupFileContext(addr.sun_path, S_IFSOCK, &secontext) && !secontext.empty()) { | 
|  | 117 | setfscreatecon(secontext.c_str()); | 
| Stephen Smalley | e46f9d5 | 2012-01-13 08:48:47 -0500 | [diff] [blame] | 118 | } | 
| Stephen Smalley | e46f9d5 | 2012-01-13 08:48:47 -0500 | [diff] [blame] | 119 |  | 
| Mark Salyzyn | b066fcc | 2017-05-05 14:44:35 -0700 | [diff] [blame] | 120 | if (passcred) { | 
|  | 121 | int on = 1; | 
|  | 122 | if (setsockopt(fd, SOL_SOCKET, SO_PASSCRED, &on, sizeof(on))) { | 
| Tom Cherry | 2e4c85f | 2019-07-09 13:33:36 -0700 | [diff] [blame] | 123 | return ErrnoError() << "Failed to set SO_PASSCRED '" << name << "'"; | 
| Mark Salyzyn | b066fcc | 2017-05-05 14:44:35 -0700 | [diff] [blame] | 124 | } | 
|  | 125 | } | 
|  | 126 |  | 
| Mark Salyzyn | db69107 | 2016-11-07 10:16:53 -0800 | [diff] [blame] | 127 | int ret = bind(fd, (struct sockaddr *) &addr, sizeof (addr)); | 
|  | 128 | int savederrno = errno; | 
| The Android Open Source Project | dd7bc33 | 2009-03-03 19:32:55 -0800 | [diff] [blame] | 129 |  | 
| Tom Cherry | 0c8d6d2 | 2017-08-10 12:22:44 -0700 | [diff] [blame] | 130 | if (!secontext.empty()) { | 
|  | 131 | setfscreatecon(nullptr); | 
|  | 132 | } | 
| Stephen Smalley | e46f9d5 | 2012-01-13 08:48:47 -0500 | [diff] [blame] | 133 |  | 
| Tom Cherry | 2e4c85f | 2019-07-09 13:33:36 -0700 | [diff] [blame] | 134 | auto guard = android::base::make_scope_guard([&addr] { unlink(addr.sun_path); }); | 
|  | 135 |  | 
| Nick Kralevich | 9bcfd64 | 2016-02-24 15:50:52 -0800 | [diff] [blame] | 136 | if (ret) { | 
| Mark Salyzyn | db69107 | 2016-11-07 10:16:53 -0800 | [diff] [blame] | 137 | errno = savederrno; | 
| Tom Cherry | 2e4c85f | 2019-07-09 13:33:36 -0700 | [diff] [blame] | 138 | return ErrnoError() << "Failed to bind socket '" << name << "'"; | 
| Nick Kralevich | 9bcfd64 | 2016-02-24 15:50:52 -0800 | [diff] [blame] | 139 | } | 
|  | 140 |  | 
| Mark Salyzyn | db69107 | 2016-11-07 10:16:53 -0800 | [diff] [blame] | 141 | if (lchown(addr.sun_path, uid, gid)) { | 
| Tom Cherry | 2e4c85f | 2019-07-09 13:33:36 -0700 | [diff] [blame] | 142 | return ErrnoError() << "Failed to lchown socket '" << addr.sun_path << "'"; | 
| Nick Kralevich | 9bcfd64 | 2016-02-24 15:50:52 -0800 | [diff] [blame] | 143 | } | 
| Mark Salyzyn | db69107 | 2016-11-07 10:16:53 -0800 | [diff] [blame] | 144 | if (fchmodat(AT_FDCWD, addr.sun_path, perm, AT_SYMLINK_NOFOLLOW)) { | 
| Tom Cherry | 2e4c85f | 2019-07-09 13:33:36 -0700 | [diff] [blame] | 145 | return ErrnoError() << "Failed to fchmodat socket '" << addr.sun_path << "'"; | 
| Nick Kralevich | 9bcfd64 | 2016-02-24 15:50:52 -0800 | [diff] [blame] | 146 | } | 
| The Android Open Source Project | dd7bc33 | 2009-03-03 19:32:55 -0800 | [diff] [blame] | 147 |  | 
| Elliott Hughes | f86b5a6 | 2016-06-24 15:12:21 -0700 | [diff] [blame] | 148 | LOG(INFO) << "Created socket '" << addr.sun_path << "'" | 
|  | 149 | << ", mode " << std::oct << perm << std::dec | 
|  | 150 | << ", user " << uid | 
|  | 151 | << ", group " << gid; | 
| The Android Open Source Project | dd7bc33 | 2009-03-03 19:32:55 -0800 | [diff] [blame] | 152 |  | 
| Tom Cherry | 2e4c85f | 2019-07-09 13:33:36 -0700 | [diff] [blame] | 153 | guard.Disable(); | 
| Mark Salyzyn | db69107 | 2016-11-07 10:16:53 -0800 | [diff] [blame] | 154 | return fd.release(); | 
| The Android Open Source Project | dd7bc33 | 2009-03-03 19:32:55 -0800 | [diff] [blame] | 155 | } | 
|  | 156 |  | 
| Tom Cherry | 11a3aee | 2017-08-03 12:54:07 -0700 | [diff] [blame] | 157 | Result<std::string> ReadFile(const std::string& path) { | 
| Tom Cherry | 53089aa | 2017-03-31 15:47:33 -0700 | [diff] [blame] | 158 | android::base::unique_fd fd( | 
|  | 159 | TEMP_FAILURE_RETRY(open(path.c_str(), O_RDONLY | O_NOFOLLOW | O_CLOEXEC))); | 
| Elliott Hughes | f682b47 | 2015-02-06 12:19:48 -0800 | [diff] [blame] | 160 | if (fd == -1) { | 
| Tom Cherry | 11a3aee | 2017-08-03 12:54:07 -0700 | [diff] [blame] | 161 | return ErrnoError() << "open() failed"; | 
| Elliott Hughes | f682b47 | 2015-02-06 12:19:48 -0800 | [diff] [blame] | 162 | } | 
|  | 163 |  | 
|  | 164 | // For security reasons, disallow world-writable | 
|  | 165 | // or group-writable files. | 
| Nick Kralevich | 38f368c | 2012-01-18 10:39:01 -0800 | [diff] [blame] | 166 | struct stat sb; | 
| Elliott Hughes | f682b47 | 2015-02-06 12:19:48 -0800 | [diff] [blame] | 167 | if (fstat(fd, &sb) == -1) { | 
| Tom Cherry | 11a3aee | 2017-08-03 12:54:07 -0700 | [diff] [blame] | 168 | return ErrnoError() << "fstat failed()"; | 
| Nick Kralevich | 38f368c | 2012-01-18 10:39:01 -0800 | [diff] [blame] | 169 | } | 
|  | 170 | if ((sb.st_mode & (S_IWGRP | S_IWOTH)) != 0) { | 
| Tom Cherry | 11a3aee | 2017-08-03 12:54:07 -0700 | [diff] [blame] | 171 | return Error() << "Skipping insecure file"; | 
| Nick Kralevich | 38f368c | 2012-01-18 10:39:01 -0800 | [diff] [blame] | 172 | } | 
|  | 173 |  | 
| Tom Cherry | 11a3aee | 2017-08-03 12:54:07 -0700 | [diff] [blame] | 174 | std::string content; | 
|  | 175 | if (!android::base::ReadFdToString(fd, &content)) { | 
|  | 176 | return ErrnoError() << "Unable to read file contents"; | 
| Tom Cherry | 2cbbe9f | 2017-05-04 18:17:33 -0700 | [diff] [blame] | 177 | } | 
| Tom Cherry | 11a3aee | 2017-08-03 12:54:07 -0700 | [diff] [blame] | 178 | return content; | 
| Elliott Hughes | f682b47 | 2015-02-06 12:19:48 -0800 | [diff] [blame] | 179 | } | 
| The Android Open Source Project | dd7bc33 | 2009-03-03 19:32:55 -0800 | [diff] [blame] | 180 |  | 
| Joel Galenson | 4b591f1 | 2017-11-27 14:45:26 -0800 | [diff] [blame] | 181 | static int OpenFile(const std::string& path, int flags, mode_t mode) { | 
|  | 182 | std::string secontext; | 
|  | 183 | if (SelabelLookupFileContext(path, mode, &secontext) && !secontext.empty()) { | 
|  | 184 | setfscreatecon(secontext.c_str()); | 
|  | 185 | } | 
|  | 186 |  | 
|  | 187 | int rc = open(path.c_str(), flags, mode); | 
|  | 188 |  | 
|  | 189 | if (!secontext.empty()) { | 
|  | 190 | int save_errno = errno; | 
|  | 191 | setfscreatecon(nullptr); | 
|  | 192 | errno = save_errno; | 
|  | 193 | } | 
|  | 194 |  | 
|  | 195 | return rc; | 
|  | 196 | } | 
|  | 197 |  | 
| Tom Cherry | bbcbc2f | 2019-06-10 11:08:01 -0700 | [diff] [blame] | 198 | Result<void> WriteFile(const std::string& path, const std::string& content) { | 
| Yongqin Liu | dbe88e7 | 2016-12-28 16:06:19 +0800 | [diff] [blame] | 199 | android::base::unique_fd fd(TEMP_FAILURE_RETRY( | 
| Joel Galenson | 4b591f1 | 2017-11-27 14:45:26 -0800 | [diff] [blame] | 200 | OpenFile(path, O_WRONLY | O_CREAT | O_NOFOLLOW | O_TRUNC | O_CLOEXEC, 0600))); | 
| Elliott Hughes | f682b47 | 2015-02-06 12:19:48 -0800 | [diff] [blame] | 201 | if (fd == -1) { | 
| Tom Cherry | 11a3aee | 2017-08-03 12:54:07 -0700 | [diff] [blame] | 202 | return ErrnoError() << "open() failed"; | 
| Elliott Hughes | f682b47 | 2015-02-06 12:19:48 -0800 | [diff] [blame] | 203 | } | 
| Tom Cherry | 2cbbe9f | 2017-05-04 18:17:33 -0700 | [diff] [blame] | 204 | if (!android::base::WriteStringToFd(content, fd)) { | 
| Tom Cherry | 11a3aee | 2017-08-03 12:54:07 -0700 | [diff] [blame] | 205 | return ErrnoError() << "Unable to write file contents"; | 
| Nick Kralevich | eedbe81 | 2015-04-25 14:10:03 -0700 | [diff] [blame] | 206 | } | 
| Tom Cherry | bbcbc2f | 2019-06-10 11:08:01 -0700 | [diff] [blame] | 207 | return {}; | 
| The Android Open Source Project | dd7bc33 | 2009-03-03 19:32:55 -0800 | [diff] [blame] | 208 | } | 
|  | 209 |  | 
| Tom Cherry | 0c8d6d2 | 2017-08-10 12:22:44 -0700 | [diff] [blame] | 210 | bool mkdir_recursive(const std::string& path, mode_t mode) { | 
| Tom Cherry | 060b74b | 2017-04-12 14:27:51 -0700 | [diff] [blame] | 211 | std::string::size_type slash = 0; | 
|  | 212 | while ((slash = path.find('/', slash + 1)) != std::string::npos) { | 
|  | 213 | auto directory = path.substr(0, slash); | 
|  | 214 | struct stat info; | 
|  | 215 | if (stat(directory.c_str(), &info) != 0) { | 
| Tom Cherry | 0c8d6d2 | 2017-08-10 12:22:44 -0700 | [diff] [blame] | 216 | auto ret = make_dir(directory, mode); | 
|  | 217 | if (!ret && errno != EEXIST) return false; | 
| Colin Cross | b0ab94b | 2010-04-08 16:16:20 -0700 | [diff] [blame] | 218 | } | 
|  | 219 | } | 
| Tom Cherry | 0c8d6d2 | 2017-08-10 12:22:44 -0700 | [diff] [blame] | 220 | auto ret = make_dir(path, mode); | 
|  | 221 | if (!ret && errno != EEXIST) return false; | 
|  | 222 | return true; | 
| Colin Cross | b0ab94b | 2010-04-08 16:16:20 -0700 | [diff] [blame] | 223 | } | 
|  | 224 |  | 
| Elliott Hughes | 9605a94 | 2016-11-10 17:43:47 -0800 | [diff] [blame] | 225 | int wait_for_file(const char* filename, std::chrono::nanoseconds timeout) { | 
| Wei Wang | 4cea121 | 2017-08-22 12:07:37 -0700 | [diff] [blame] | 226 | android::base::Timer t; | 
|  | 227 | while (t.duration() < timeout) { | 
| Elliott Hughes | 9605a94 | 2016-11-10 17:43:47 -0800 | [diff] [blame] | 228 | struct stat sb; | 
| Wei Wang | 4cea121 | 2017-08-22 12:07:37 -0700 | [diff] [blame] | 229 | if (stat(filename, &sb) != -1) { | 
|  | 230 | LOG(INFO) << "wait for '" << filename << "' took " << t; | 
|  | 231 | return 0; | 
|  | 232 | } | 
| Elliott Hughes | 290a228 | 2016-11-14 17:08:47 -0800 | [diff] [blame] | 233 | std::this_thread::sleep_for(10ms); | 
| Elliott Hughes | 9605a94 | 2016-11-10 17:43:47 -0800 | [diff] [blame] | 234 | } | 
| Wei Wang | 4cea121 | 2017-08-22 12:07:37 -0700 | [diff] [blame] | 235 | LOG(WARNING) << "wait for '" << filename << "' timed out and took " << t; | 
| Elliott Hughes | 9605a94 | 2016-11-10 17:43:47 -0800 | [diff] [blame] | 236 | return -1; | 
| Colin Cross | cd0f173 | 2010-04-19 17:10:24 -0700 | [diff] [blame] | 237 | } | 
| Colin Cross | f83d0b9 | 2010-04-21 12:04:20 -0700 | [diff] [blame] | 238 |  | 
| Tom Cherry | c88d8f9 | 2019-08-19 15:21:25 -0700 | [diff] [blame] | 239 | void ImportKernelCmdline(const std::function<void(const std::string&, const std::string&)>& fn) { | 
| Elliott Hughes | e5ce30f | 2015-05-06 19:19:24 -0700 | [diff] [blame] | 240 | std::string cmdline; | 
|  | 241 | android::base::ReadFileToString("/proc/cmdline", &cmdline); | 
| Vladimir Chtchetkine | 2b99543 | 2011-09-28 09:55:31 -0700 | [diff] [blame] | 242 |  | 
| Elliott Hughes | e5ce30f | 2015-05-06 19:19:24 -0700 | [diff] [blame] | 243 | for (const auto& entry : android::base::Split(android::base::Trim(cmdline), " ")) { | 
|  | 244 | std::vector<std::string> pieces = android::base::Split(entry, "="); | 
|  | 245 | if (pieces.size() == 2) { | 
| Tom Cherry | c88d8f9 | 2019-08-19 15:21:25 -0700 | [diff] [blame] | 246 | fn(pieces[0], pieces[1]); | 
| Elliott Hughes | e5ce30f | 2015-05-06 19:19:24 -0700 | [diff] [blame] | 247 | } | 
| Vladimir Chtchetkine | 2b99543 | 2011-09-28 09:55:31 -0700 | [diff] [blame] | 248 | } | 
|  | 249 | } | 
| Stephen Smalley | e096e36 | 2012-06-11 13:37:39 -0400 | [diff] [blame] | 250 |  | 
| Tom Cherry | 0c8d6d2 | 2017-08-10 12:22:44 -0700 | [diff] [blame] | 251 | bool make_dir(const std::string& path, mode_t mode) { | 
|  | 252 | std::string secontext; | 
|  | 253 | if (SelabelLookupFileContext(path, mode, &secontext) && !secontext.empty()) { | 
|  | 254 | setfscreatecon(secontext.c_str()); | 
| Stephen Smalley | e096e36 | 2012-06-11 13:37:39 -0400 | [diff] [blame] | 255 | } | 
| Stephen Smalley | e096e36 | 2012-06-11 13:37:39 -0400 | [diff] [blame] | 256 |  | 
| Tom Cherry | 0c8d6d2 | 2017-08-10 12:22:44 -0700 | [diff] [blame] | 257 | int rc = mkdir(path.c_str(), mode); | 
| Stephen Smalley | e096e36 | 2012-06-11 13:37:39 -0400 | [diff] [blame] | 258 |  | 
| Tom Cherry | 0c8d6d2 | 2017-08-10 12:22:44 -0700 | [diff] [blame] | 259 | if (!secontext.empty()) { | 
| Stephen Smalley | e096e36 | 2012-06-11 13:37:39 -0400 | [diff] [blame] | 260 | int save_errno = errno; | 
| Tom Cherry | 0c8d6d2 | 2017-08-10 12:22:44 -0700 | [diff] [blame] | 261 | setfscreatecon(nullptr); | 
| Stephen Smalley | e096e36 | 2012-06-11 13:37:39 -0400 | [diff] [blame] | 262 | errno = save_errno; | 
|  | 263 | } | 
| Kenny Root | b5982bf | 2012-10-16 23:07:05 -0700 | [diff] [blame] | 264 |  | 
| Tom Cherry | 0c8d6d2 | 2017-08-10 12:22:44 -0700 | [diff] [blame] | 265 | return rc == 0; | 
| Stephen Smalley | e096e36 | 2012-06-11 13:37:39 -0400 | [diff] [blame] | 266 | } | 
|  | 267 |  | 
| Andres Morales | db5f5d4 | 2015-05-08 08:30:33 -0700 | [diff] [blame] | 268 | /* | 
| Lee Campbell | f13b1b3 | 2015-07-24 16:57:14 -0700 | [diff] [blame] | 269 | * Returns true is pathname is a directory | 
|  | 270 | */ | 
|  | 271 | bool is_dir(const char* pathname) { | 
|  | 272 | struct stat info; | 
|  | 273 | if (stat(pathname, &info) == -1) { | 
|  | 274 | return false; | 
|  | 275 | } | 
|  | 276 | return S_ISDIR(info.st_mode); | 
|  | 277 | } | 
| Tom Cherry | b734990 | 2015-08-26 11:43:36 -0700 | [diff] [blame] | 278 |  | 
| Tom Cherry | c5cf85d | 2019-07-31 13:59:15 -0700 | [diff] [blame] | 279 | Result<std::string> ExpandProps(const std::string& src) { | 
| Tom Cherry | b734990 | 2015-08-26 11:43:36 -0700 | [diff] [blame] | 280 | const char* src_ptr = src.c_str(); | 
|  | 281 |  | 
| Tom Cherry | c5cf85d | 2019-07-31 13:59:15 -0700 | [diff] [blame] | 282 | std::string dst; | 
| Tom Cherry | b734990 | 2015-08-26 11:43:36 -0700 | [diff] [blame] | 283 |  | 
|  | 284 | /* - variables can either be $x.y or ${x.y}, in case they are only part | 
|  | 285 | *   of the string. | 
|  | 286 | * - will accept $$ as a literal $. | 
|  | 287 | * - no nested property expansion, i.e. ${foo.${bar}} is not supported, | 
|  | 288 | *   bad things will happen | 
| Mark Salyzyn | 4b56162 | 2016-06-07 08:49:01 -0700 | [diff] [blame] | 289 | * - ${x.y:-default} will return default value if property empty. | 
| Tom Cherry | b734990 | 2015-08-26 11:43:36 -0700 | [diff] [blame] | 290 | */ | 
|  | 291 | while (*src_ptr) { | 
|  | 292 | const char* c; | 
|  | 293 |  | 
|  | 294 | c = strchr(src_ptr, '$'); | 
|  | 295 | if (!c) { | 
| Tom Cherry | c5cf85d | 2019-07-31 13:59:15 -0700 | [diff] [blame] | 296 | dst.append(src_ptr); | 
|  | 297 | return dst; | 
| Tom Cherry | b734990 | 2015-08-26 11:43:36 -0700 | [diff] [blame] | 298 | } | 
|  | 299 |  | 
| Tom Cherry | c5cf85d | 2019-07-31 13:59:15 -0700 | [diff] [blame] | 300 | dst.append(src_ptr, c); | 
| Tom Cherry | b734990 | 2015-08-26 11:43:36 -0700 | [diff] [blame] | 301 | c++; | 
|  | 302 |  | 
|  | 303 | if (*c == '$') { | 
| Tom Cherry | c5cf85d | 2019-07-31 13:59:15 -0700 | [diff] [blame] | 304 | dst.push_back(*(c++)); | 
| Tom Cherry | b734990 | 2015-08-26 11:43:36 -0700 | [diff] [blame] | 305 | src_ptr = c; | 
|  | 306 | continue; | 
|  | 307 | } else if (*c == '\0') { | 
| Tom Cherry | c5cf85d | 2019-07-31 13:59:15 -0700 | [diff] [blame] | 308 | return dst; | 
| Tom Cherry | b734990 | 2015-08-26 11:43:36 -0700 | [diff] [blame] | 309 | } | 
|  | 310 |  | 
|  | 311 | std::string prop_name; | 
| Mark Salyzyn | 4b56162 | 2016-06-07 08:49:01 -0700 | [diff] [blame] | 312 | std::string def_val; | 
| Tom Cherry | b734990 | 2015-08-26 11:43:36 -0700 | [diff] [blame] | 313 | if (*c == '{') { | 
|  | 314 | c++; | 
|  | 315 | const char* end = strchr(c, '}'); | 
|  | 316 | if (!end) { | 
|  | 317 | // failed to find closing brace, abort. | 
| Tom Cherry | c5cf85d | 2019-07-31 13:59:15 -0700 | [diff] [blame] | 318 | return Error() << "unexpected end of string in '" << src << "', looking for }"; | 
| Tom Cherry | b734990 | 2015-08-26 11:43:36 -0700 | [diff] [blame] | 319 | } | 
|  | 320 | prop_name = std::string(c, end); | 
|  | 321 | c = end + 1; | 
| Mark Salyzyn | 4b56162 | 2016-06-07 08:49:01 -0700 | [diff] [blame] | 322 | size_t def = prop_name.find(":-"); | 
|  | 323 | if (def < prop_name.size()) { | 
|  | 324 | def_val = prop_name.substr(def + 2); | 
|  | 325 | prop_name = prop_name.substr(0, def); | 
|  | 326 | } | 
| Tom Cherry | b734990 | 2015-08-26 11:43:36 -0700 | [diff] [blame] | 327 | } else { | 
|  | 328 | prop_name = c; | 
| Tom Cherry | c5cf85d | 2019-07-31 13:59:15 -0700 | [diff] [blame] | 329 | if (SelinuxGetVendorAndroidVersion() >= __ANDROID_API_R__) { | 
|  | 330 | return Error() << "using deprecated syntax for specifying property '" << c | 
|  | 331 | << "', use ${name} instead"; | 
|  | 332 | } else { | 
|  | 333 | LOG(ERROR) << "using deprecated syntax for specifying property '" << c | 
|  | 334 | << "', use ${name} instead"; | 
|  | 335 | } | 
| Tom Cherry | b734990 | 2015-08-26 11:43:36 -0700 | [diff] [blame] | 336 | c += prop_name.size(); | 
|  | 337 | } | 
|  | 338 |  | 
|  | 339 | if (prop_name.empty()) { | 
| Tom Cherry | c5cf85d | 2019-07-31 13:59:15 -0700 | [diff] [blame] | 340 | return Error() << "invalid zero-length property name in '" << src << "'"; | 
| Tom Cherry | b734990 | 2015-08-26 11:43:36 -0700 | [diff] [blame] | 341 | } | 
|  | 342 |  | 
| Tom Cherry | ccf2353 | 2017-03-28 16:40:41 -0700 | [diff] [blame] | 343 | std::string prop_val = android::base::GetProperty(prop_name, ""); | 
| Tom Cherry | b734990 | 2015-08-26 11:43:36 -0700 | [diff] [blame] | 344 | if (prop_val.empty()) { | 
| Mark Salyzyn | 4b56162 | 2016-06-07 08:49:01 -0700 | [diff] [blame] | 345 | if (def_val.empty()) { | 
| Tom Cherry | c5cf85d | 2019-07-31 13:59:15 -0700 | [diff] [blame] | 346 | return Error() << "property '" << prop_name << "' doesn't exist while expanding '" | 
|  | 347 | << src << "'"; | 
| Mark Salyzyn | 4b56162 | 2016-06-07 08:49:01 -0700 | [diff] [blame] | 348 | } | 
|  | 349 | prop_val = def_val; | 
| Tom Cherry | b734990 | 2015-08-26 11:43:36 -0700 | [diff] [blame] | 350 | } | 
|  | 351 |  | 
| Tom Cherry | c5cf85d | 2019-07-31 13:59:15 -0700 | [diff] [blame] | 352 | dst.append(prop_val); | 
| Tom Cherry | b734990 | 2015-08-26 11:43:36 -0700 | [diff] [blame] | 353 | src_ptr = c; | 
|  | 354 | } | 
|  | 355 |  | 
| Tom Cherry | c5cf85d | 2019-07-31 13:59:15 -0700 | [diff] [blame] | 356 | return dst; | 
| Tom Cherry | b734990 | 2015-08-26 11:43:36 -0700 | [diff] [blame] | 357 | } | 
| Elliott Hughes | 331cf2f | 2016-11-29 19:20:58 +0000 | [diff] [blame] | 358 |  | 
| Yu Ning | c01022a | 2017-07-26 17:54:08 +0800 | [diff] [blame] | 359 | static std::string init_android_dt_dir() { | 
|  | 360 | // Use the standard procfs-based path by default | 
|  | 361 | std::string android_dt_dir = kDefaultAndroidDtDir; | 
|  | 362 | // The platform may specify a custom Android DT path in kernel cmdline | 
| Tom Cherry | c88d8f9 | 2019-08-19 15:21:25 -0700 | [diff] [blame] | 363 | ImportKernelCmdline([&](const std::string& key, const std::string& value) { | 
|  | 364 | if (key == "androidboot.android_dt_dir") { | 
|  | 365 | android_dt_dir = value; | 
|  | 366 | } | 
|  | 367 | }); | 
| Yu Ning | c01022a | 2017-07-26 17:54:08 +0800 | [diff] [blame] | 368 | LOG(INFO) << "Using Android DT directory " << android_dt_dir; | 
|  | 369 | return android_dt_dir; | 
|  | 370 | } | 
|  | 371 |  | 
|  | 372 | // FIXME: The same logic is duplicated in system/core/fs_mgr/ | 
|  | 373 | const std::string& get_android_dt_dir() { | 
|  | 374 | // Set once and saves time for subsequent calls to this function | 
|  | 375 | static const std::string kAndroidDtDir = init_android_dt_dir(); | 
|  | 376 | return kAndroidDtDir; | 
|  | 377 | } | 
|  | 378 |  | 
|  | 379 | // Reads the content of device tree file under the platform's Android DT directory. | 
| Bowgo Tsai | d262017 | 2017-04-17 22:17:09 +0800 | [diff] [blame] | 380 | // Returns true if the read is success, false otherwise. | 
|  | 381 | bool read_android_dt_file(const std::string& sub_path, std::string* dt_content) { | 
| Yu Ning | c01022a | 2017-07-26 17:54:08 +0800 | [diff] [blame] | 382 | const std::string file_name = get_android_dt_dir() + sub_path; | 
| Bowgo Tsai | d262017 | 2017-04-17 22:17:09 +0800 | [diff] [blame] | 383 | if (android::base::ReadFileToString(file_name, dt_content)) { | 
|  | 384 | if (!dt_content->empty()) { | 
|  | 385 | dt_content->pop_back();  // Trims the trailing '\0' out. | 
|  | 386 | return true; | 
|  | 387 | } | 
|  | 388 | } | 
|  | 389 | return false; | 
|  | 390 | } | 
|  | 391 |  | 
|  | 392 | bool is_android_dt_value_expected(const std::string& sub_path, const std::string& expected_content) { | 
|  | 393 | std::string dt_content; | 
|  | 394 | if (read_android_dt_file(sub_path, &dt_content)) { | 
|  | 395 | if (dt_content == expected_content) { | 
|  | 396 | return true; | 
|  | 397 | } | 
|  | 398 | } | 
|  | 399 | return false; | 
|  | 400 | } | 
| Tom Cherry | 81f5d3e | 2017-06-22 12:53:17 -0700 | [diff] [blame] | 401 |  | 
| Tom Cherry | de6bd50 | 2018-02-13 16:50:08 -0800 | [diff] [blame] | 402 | bool IsLegalPropertyName(const std::string& name) { | 
|  | 403 | size_t namelen = name.size(); | 
|  | 404 |  | 
|  | 405 | if (namelen < 1) return false; | 
|  | 406 | if (name[0] == '.') return false; | 
|  | 407 | if (name[namelen - 1] == '.') return false; | 
|  | 408 |  | 
|  | 409 | /* Only allow alphanumeric, plus '.', '-', '@', ':', or '_' */ | 
|  | 410 | /* Don't allow ".." to appear in a property name */ | 
|  | 411 | for (size_t i = 0; i < namelen; i++) { | 
|  | 412 | if (name[i] == '.') { | 
|  | 413 | // i=0 is guaranteed to never have a dot. See above. | 
|  | 414 | if (name[i - 1] == '.') return false; | 
|  | 415 | continue; | 
|  | 416 | } | 
|  | 417 | if (name[i] == '_' || name[i] == '-' || name[i] == '@' || name[i] == ':') continue; | 
|  | 418 | if (name[i] >= 'a' && name[i] <= 'z') continue; | 
|  | 419 | if (name[i] >= 'A' && name[i] <= 'Z') continue; | 
|  | 420 | if (name[i] >= '0' && name[i] <= '9') continue; | 
|  | 421 | return false; | 
|  | 422 | } | 
|  | 423 |  | 
|  | 424 | return true; | 
|  | 425 | } | 
|  | 426 |  | 
| Tom Cherry | 4772f1d | 2019-07-30 09:34:41 -0700 | [diff] [blame] | 427 | Result<void> IsLegalPropertyValue(const std::string& name, const std::string& value) { | 
|  | 428 | if (value.size() >= PROP_VALUE_MAX && !StartsWith(name, "ro.")) { | 
|  | 429 | return Error() << "Property value too long"; | 
|  | 430 | } | 
|  | 431 |  | 
|  | 432 | if (mbstowcs(nullptr, value.data(), 0) == static_cast<std::size_t>(-1)) { | 
|  | 433 | return Error() << "Value is not a UTF8 encoded string"; | 
|  | 434 | } | 
|  | 435 |  | 
|  | 436 | return {}; | 
|  | 437 | } | 
|  | 438 |  | 
| Paul Crowley | 68258e8 | 2019-10-28 07:55:03 -0700 | [diff] [blame] | 439 | static FscryptAction FscryptInferAction(const std::string& dir) { | 
|  | 440 | const std::string prefix = "/data/"; | 
|  | 441 |  | 
|  | 442 | if (!android::base::StartsWith(dir, prefix)) { | 
|  | 443 | return FscryptAction::kNone; | 
|  | 444 | } | 
|  | 445 |  | 
|  | 446 | // Special-case /data/media/obb per b/64566063 | 
|  | 447 | if (dir == "/data/media/obb") { | 
|  | 448 | // Try to set policy on this directory, but if it is non-empty this may fail. | 
|  | 449 | return FscryptAction::kAttempt; | 
|  | 450 | } | 
|  | 451 |  | 
|  | 452 | // Only set policy on first level /data directories | 
|  | 453 | // To make this less restrictive, consider using a policy file. | 
|  | 454 | // However this is overkill for as long as the policy is simply | 
|  | 455 | // to apply a global policy to all /data folders created via makedir | 
|  | 456 | if (dir.find_first_of('/', prefix.size()) != std::string::npos) { | 
|  | 457 | return FscryptAction::kNone; | 
|  | 458 | } | 
|  | 459 |  | 
|  | 460 | // Special case various directories that must not be encrypted, | 
|  | 461 | // often because their subdirectories must be encrypted. | 
|  | 462 | // This isn't a nice way to do this, see b/26641735 | 
|  | 463 | std::vector<std::string> directories_to_exclude = { | 
|  | 464 | "lost+found", "system_ce", "system_de", "misc_ce",     "misc_de", | 
|  | 465 | "vendor_ce",  "vendor_de", "media",     "data",        "user", | 
|  | 466 | "user_de",    "apex",      "preloads",  "app-staging", "gsi", | 
|  | 467 | }; | 
|  | 468 | for (const auto& d : directories_to_exclude) { | 
|  | 469 | if ((prefix + d) == dir) { | 
|  | 470 | return FscryptAction::kNone; | 
|  | 471 | } | 
|  | 472 | } | 
|  | 473 | // Empty these directories if policy setting fails. | 
|  | 474 | std::vector<std::string> wipe_on_failure = { | 
|  | 475 | "rollback", "rollback-observer",  // b/139193659 | 
|  | 476 | }; | 
|  | 477 | for (const auto& d : wipe_on_failure) { | 
|  | 478 | if ((prefix + d) == dir) { | 
|  | 479 | return FscryptAction::kDeleteIfNecessary; | 
|  | 480 | } | 
|  | 481 | } | 
|  | 482 | return FscryptAction::kRequire; | 
|  | 483 | } | 
|  | 484 |  | 
|  | 485 | Result<MkdirOptions> ParseMkdir(const std::vector<std::string>& args) { | 
|  | 486 | mode_t mode = 0755; | 
|  | 487 | Result<uid_t> uid = -1; | 
|  | 488 | Result<gid_t> gid = -1; | 
|  | 489 | FscryptAction fscrypt_inferred_action = FscryptInferAction(args[1]); | 
|  | 490 | FscryptAction fscrypt_action = fscrypt_inferred_action; | 
|  | 491 | std::string ref_option = "ref"; | 
|  | 492 | bool set_option_encryption = false; | 
|  | 493 | bool set_option_key = false; | 
|  | 494 |  | 
|  | 495 | for (size_t i = 2; i < args.size(); i++) { | 
|  | 496 | switch (i) { | 
|  | 497 | case 2: | 
|  | 498 | mode = std::strtoul(args[2].c_str(), 0, 8); | 
|  | 499 | break; | 
|  | 500 | case 3: | 
|  | 501 | uid = DecodeUid(args[3]); | 
| Bernie Innocenti | cecebbb | 2020-02-06 03:49:33 +0900 | [diff] [blame] | 502 | if (!uid.ok()) { | 
| Paul Crowley | 68258e8 | 2019-10-28 07:55:03 -0700 | [diff] [blame] | 503 | return Error() | 
|  | 504 | << "Unable to decode UID for '" << args[3] << "': " << uid.error(); | 
|  | 505 | } | 
|  | 506 | break; | 
|  | 507 | case 4: | 
|  | 508 | gid = DecodeUid(args[4]); | 
| Bernie Innocenti | cecebbb | 2020-02-06 03:49:33 +0900 | [diff] [blame] | 509 | if (!gid.ok()) { | 
| Paul Crowley | 68258e8 | 2019-10-28 07:55:03 -0700 | [diff] [blame] | 510 | return Error() | 
|  | 511 | << "Unable to decode GID for '" << args[4] << "': " << gid.error(); | 
|  | 512 | } | 
|  | 513 | break; | 
|  | 514 | default: | 
|  | 515 | auto parts = android::base::Split(args[i], "="); | 
|  | 516 | if (parts.size() != 2) { | 
|  | 517 | return Error() << "Can't parse option: '" << args[i] << "'"; | 
|  | 518 | } | 
|  | 519 | auto optname = parts[0]; | 
|  | 520 | auto optval = parts[1]; | 
|  | 521 | if (optname == "encryption") { | 
|  | 522 | if (set_option_encryption) { | 
|  | 523 | return Error() << "Duplicated option: '" << optname << "'"; | 
|  | 524 | } | 
|  | 525 | if (optval == "Require") { | 
|  | 526 | fscrypt_action = FscryptAction::kRequire; | 
|  | 527 | } else if (optval == "None") { | 
|  | 528 | fscrypt_action = FscryptAction::kNone; | 
|  | 529 | } else if (optval == "Attempt") { | 
|  | 530 | fscrypt_action = FscryptAction::kAttempt; | 
|  | 531 | } else if (optval == "DeleteIfNecessary") { | 
|  | 532 | fscrypt_action = FscryptAction::kDeleteIfNecessary; | 
|  | 533 | } else { | 
|  | 534 | return Error() << "Unknown encryption option: '" << optval << "'"; | 
|  | 535 | } | 
|  | 536 | set_option_encryption = true; | 
|  | 537 | } else if (optname == "key") { | 
|  | 538 | if (set_option_key) { | 
|  | 539 | return Error() << "Duplicated option: '" << optname << "'"; | 
|  | 540 | } | 
|  | 541 | if (optval == "ref" || optval == "per_boot_ref") { | 
|  | 542 | ref_option = optval; | 
|  | 543 | } else { | 
|  | 544 | return Error() << "Unknown key option: '" << optval << "'"; | 
|  | 545 | } | 
|  | 546 | set_option_key = true; | 
|  | 547 | } else { | 
|  | 548 | return Error() << "Unknown option: '" << args[i] << "'"; | 
|  | 549 | } | 
|  | 550 | } | 
|  | 551 | } | 
|  | 552 | if (set_option_key && fscrypt_action == FscryptAction::kNone) { | 
|  | 553 | return Error() << "Key option set but encryption action is none"; | 
|  | 554 | } | 
|  | 555 | const std::string prefix = "/data/"; | 
|  | 556 | if (StartsWith(args[1], prefix) && | 
|  | 557 | args[1].find_first_of('/', prefix.size()) == std::string::npos) { | 
|  | 558 | if (!set_option_encryption) { | 
|  | 559 | LOG(WARNING) << "Top-level directory needs encryption action, eg mkdir " << args[1] | 
|  | 560 | << " <mode> <uid> <gid> encryption=Require"; | 
|  | 561 | } | 
|  | 562 | if (fscrypt_action == FscryptAction::kNone) { | 
|  | 563 | LOG(INFO) << "Not setting encryption policy on: " << args[1]; | 
|  | 564 | } | 
|  | 565 | } | 
|  | 566 | if (fscrypt_action != fscrypt_inferred_action) { | 
|  | 567 | LOG(WARNING) << "Inferred action different from explicit one, expected " | 
|  | 568 | << static_cast<int>(fscrypt_inferred_action) << " but got " | 
|  | 569 | << static_cast<int>(fscrypt_action); | 
|  | 570 | } | 
|  | 571 |  | 
|  | 572 | return MkdirOptions{args[1], mode, *uid, *gid, fscrypt_action, ref_option}; | 
|  | 573 | } | 
|  | 574 |  | 
| Alistair Delva | a2cc1eb | 2020-05-20 16:24:00 -0700 | [diff] [blame] | 575 | Result<MountAllOptions> ParseMountAll(const std::vector<std::string>& args) { | 
|  | 576 | bool compat_mode = false; | 
|  | 577 | bool import_rc = false; | 
|  | 578 | if (SelinuxGetVendorAndroidVersion() <= __ANDROID_API_Q__) { | 
|  | 579 | if (args.size() <= 1) { | 
|  | 580 | return Error() << "mount_all requires at least 1 argument"; | 
|  | 581 | } | 
|  | 582 | compat_mode = true; | 
|  | 583 | import_rc = true; | 
|  | 584 | } | 
|  | 585 |  | 
|  | 586 | std::size_t first_option_arg = args.size(); | 
|  | 587 | enum mount_mode mode = MOUNT_MODE_DEFAULT; | 
|  | 588 |  | 
|  | 589 | // If we are <= Q, then stop looking for non-fstab arguments at slot 2. | 
|  | 590 | // Otherwise, stop looking at slot 1 (as the fstab path argument is optional >= R). | 
|  | 591 | for (std::size_t na = args.size() - 1; na > (compat_mode ? 1 : 0); --na) { | 
|  | 592 | if (args[na] == "--early") { | 
|  | 593 | first_option_arg = na; | 
|  | 594 | mode = MOUNT_MODE_EARLY; | 
|  | 595 | } else if (args[na] == "--late") { | 
|  | 596 | first_option_arg = na; | 
|  | 597 | mode = MOUNT_MODE_LATE; | 
|  | 598 | import_rc = false; | 
|  | 599 | } | 
|  | 600 | } | 
|  | 601 |  | 
|  | 602 | std::string fstab_path; | 
|  | 603 | if (first_option_arg > 1) { | 
|  | 604 | fstab_path = args[1]; | 
|  | 605 | } else if (compat_mode) { | 
|  | 606 | return Error() << "mount_all argument 1 must be the fstab path"; | 
|  | 607 | } | 
|  | 608 |  | 
|  | 609 | std::vector<std::string> rc_paths; | 
|  | 610 | for (std::size_t na = 2; na < first_option_arg; ++na) { | 
|  | 611 | rc_paths.push_back(args[na]); | 
|  | 612 | } | 
|  | 613 |  | 
|  | 614 | return MountAllOptions{rc_paths, fstab_path, mode, import_rc}; | 
|  | 615 | } | 
|  | 616 |  | 
| Tom Cherry | 4772f1d | 2019-07-30 09:34:41 -0700 | [diff] [blame] | 617 | Result<std::pair<int, std::vector<std::string>>> ParseRestorecon( | 
|  | 618 | const std::vector<std::string>& args) { | 
|  | 619 | struct flag_type { | 
|  | 620 | const char* name; | 
|  | 621 | int value; | 
|  | 622 | }; | 
|  | 623 | static const flag_type flags[] = { | 
|  | 624 | {"--recursive", SELINUX_ANDROID_RESTORECON_RECURSE}, | 
|  | 625 | {"--skip-ce", SELINUX_ANDROID_RESTORECON_SKIPCE}, | 
|  | 626 | {"--cross-filesystems", SELINUX_ANDROID_RESTORECON_CROSS_FILESYSTEMS}, | 
|  | 627 | {0, 0}}; | 
|  | 628 |  | 
|  | 629 | int flag = 0; | 
|  | 630 | std::vector<std::string> paths; | 
|  | 631 |  | 
|  | 632 | bool in_flags = true; | 
|  | 633 | for (size_t i = 1; i < args.size(); ++i) { | 
|  | 634 | if (android::base::StartsWith(args[i], "--")) { | 
|  | 635 | if (!in_flags) { | 
|  | 636 | return Error() << "flags must precede paths"; | 
|  | 637 | } | 
|  | 638 | bool found = false; | 
|  | 639 | for (size_t j = 0; flags[j].name; ++j) { | 
|  | 640 | if (args[i] == flags[j].name) { | 
|  | 641 | flag |= flags[j].value; | 
|  | 642 | found = true; | 
|  | 643 | break; | 
|  | 644 | } | 
|  | 645 | } | 
|  | 646 | if (!found) { | 
|  | 647 | return Error() << "bad flag " << args[i]; | 
|  | 648 | } | 
|  | 649 | } else { | 
|  | 650 | in_flags = false; | 
|  | 651 | paths.emplace_back(args[i]); | 
|  | 652 | } | 
|  | 653 | } | 
|  | 654 | return std::pair(flag, paths); | 
|  | 655 | } | 
|  | 656 |  | 
| Alistair Delva | a2cc1eb | 2020-05-20 16:24:00 -0700 | [diff] [blame] | 657 | Result<std::string> ParseUmountAll(const std::vector<std::string>& args) { | 
|  | 658 | if (SelinuxGetVendorAndroidVersion() <= __ANDROID_API_Q__) { | 
|  | 659 | if (args.size() <= 1) { | 
|  | 660 | return Error() << "umount_all requires at least 1 argument"; | 
|  | 661 | } | 
|  | 662 | } | 
|  | 663 | return args[1]; | 
|  | 664 | } | 
|  | 665 |  | 
| Tom Cherry | 59656fb | 2019-05-28 10:19:44 -0700 | [diff] [blame] | 666 | static void InitAborter(const char* abort_message) { | 
|  | 667 | // When init forks, it continues to use this aborter for LOG(FATAL), but we want children to | 
|  | 668 | // simply abort instead of trying to reboot the system. | 
|  | 669 | if (getpid() != 1) { | 
|  | 670 | android::base::DefaultAborter(abort_message); | 
|  | 671 | return; | 
|  | 672 | } | 
|  | 673 |  | 
| Elliott Hughes | 636ebc9 | 2019-10-07 18:16:23 -0700 | [diff] [blame] | 674 | InitFatalReboot(SIGABRT); | 
| Tom Cherry | 59656fb | 2019-05-28 10:19:44 -0700 | [diff] [blame] | 675 | } | 
|  | 676 |  | 
|  | 677 | // The kernel opens /dev/console and uses that fd for stdin/stdout/stderr if there is a serial | 
|  | 678 | // console enabled and no initramfs, otherwise it does not provide any fds for stdin/stdout/stderr. | 
|  | 679 | // SetStdioToDevNull() is used to close these existing fds if they exist and replace them with | 
|  | 680 | // /dev/null regardless. | 
|  | 681 | // | 
|  | 682 | // In the case that these fds are provided by the kernel, the exec of second stage init causes an | 
|  | 683 | // SELinux denial as it does not have access to /dev/console.  In the case that they are not | 
|  | 684 | // provided, exec of any further process is potentially dangerous as the first fd's opened by that | 
|  | 685 | // process will take the stdin/stdout/stderr fileno's, which can cause issues if printf(), etc is | 
|  | 686 | // then used by that process. | 
|  | 687 | // | 
|  | 688 | // Lastly, simply calling SetStdioToDevNull() in first stage init is not enough, since first | 
|  | 689 | // stage init still runs in kernel context, future child processes will not have permissions to | 
|  | 690 | // access any fds that it opens, including the one opened below for /dev/null.  Therefore, | 
|  | 691 | // SetStdioToDevNull() must be called again in second stage init. | 
|  | 692 | void SetStdioToDevNull(char** argv) { | 
| Tom Cherry | 48e83e6 | 2018-10-04 13:14:14 -0700 | [diff] [blame] | 693 | // Make stdin/stdout/stderr all point to /dev/null. | 
| Tom Cherry | 247ffbf | 2019-07-08 15:09:36 -0700 | [diff] [blame] | 694 | int fd = open("/dev/null", O_RDWR);  // NOLINT(android-cloexec-open) | 
| Tom Cherry | 48e83e6 | 2018-10-04 13:14:14 -0700 | [diff] [blame] | 695 | if (fd == -1) { | 
|  | 696 | int saved_errno = errno; | 
| Tom Cherry | 59656fb | 2019-05-28 10:19:44 -0700 | [diff] [blame] | 697 | android::base::InitLogging(argv, &android::base::KernelLogger, InitAborter); | 
| Tom Cherry | 48e83e6 | 2018-10-04 13:14:14 -0700 | [diff] [blame] | 698 | errno = saved_errno; | 
|  | 699 | PLOG(FATAL) << "Couldn't open /dev/null"; | 
|  | 700 | } | 
| Tom Cherry | 59656fb | 2019-05-28 10:19:44 -0700 | [diff] [blame] | 701 | dup2(fd, STDIN_FILENO); | 
|  | 702 | dup2(fd, STDOUT_FILENO); | 
|  | 703 | dup2(fd, STDERR_FILENO); | 
|  | 704 | if (fd > STDERR_FILENO) close(fd); | 
|  | 705 | } | 
|  | 706 |  | 
|  | 707 | void InitKernelLogging(char** argv) { | 
| Tom Cherry | 75e13ba | 2019-05-21 13:53:05 -0700 | [diff] [blame] | 708 | SetFatalRebootTarget(); | 
| Tom Cherry | 59656fb | 2019-05-28 10:19:44 -0700 | [diff] [blame] | 709 | android::base::InitLogging(argv, &android::base::KernelLogger, InitAborter); | 
| Tom Cherry | 48e83e6 | 2018-10-04 13:14:14 -0700 | [diff] [blame] | 710 | } | 
|  | 711 |  | 
| Jiyong Park | 6866041 | 2019-01-16 23:00:59 +0900 | [diff] [blame] | 712 | bool IsRecoveryMode() { | 
|  | 713 | return access("/system/bin/recovery", F_OK) == 0; | 
|  | 714 | } | 
|  | 715 |  | 
| Tom Cherry | 1c84135 | 2020-04-28 17:45:26 -0700 | [diff] [blame] | 716 | // TODO(b/155203339): remove this | 
|  | 717 | // Devices in the lab seem to be stuck during shutdown, but the logs don't capture the last actions | 
|  | 718 | // before shutdown started, so we record those lines, ignoring requests to shutdown, and replay them | 
|  | 719 | // if we identify that the device is stuck. | 
|  | 720 | constexpr size_t kRecordedLogsSize = 30; | 
|  | 721 | std::string recorded_logs[kRecordedLogsSize]; | 
|  | 722 | size_t recorded_log_position = 0; | 
|  | 723 | std::mutex recorded_logs_lock; | 
|  | 724 |  | 
|  | 725 | void InitSecondStageLogging(char** argv) { | 
|  | 726 | SetFatalRebootTarget(); | 
|  | 727 | auto second_stage_logger = [](android::base::LogId log_id, android::base::LogSeverity severity, | 
|  | 728 | const char* tag, const char* file, unsigned int line, | 
|  | 729 | const char* message) { | 
|  | 730 | // We only store logs for init, not its children, and only if they're not related to | 
|  | 731 | // sys.powerctl. | 
|  | 732 | if (getpid() == 1 && strstr(message, "sys.powerctl") == nullptr) { | 
|  | 733 | auto lock = std::lock_guard{recorded_logs_lock}; | 
|  | 734 | recorded_logs[recorded_log_position++] = message; | 
|  | 735 | if (recorded_log_position == kRecordedLogsSize) { | 
|  | 736 | recorded_log_position = 0; | 
|  | 737 | } | 
|  | 738 | } | 
|  | 739 | android::base::KernelLogger(log_id, severity, tag, file, line, message); | 
|  | 740 | }; | 
|  | 741 | android::base::InitLogging(argv, second_stage_logger, InitAborter); | 
|  | 742 | } | 
|  | 743 |  | 
|  | 744 | void DumpShutdownDebugInformation() { | 
|  | 745 | auto lock = std::lock_guard{recorded_logs_lock}; | 
|  | 746 | android::base::KernelLogger( | 
|  | 747 | android::base::MAIN, android::base::ERROR, "init", nullptr, 0, | 
|  | 748 | "===================== Dumping previous init lines ====================="); | 
|  | 749 | for (size_t i = recorded_log_position; i < kRecordedLogsSize; ++i) { | 
|  | 750 | android::base::KernelLogger(android::base::MAIN, android::base::ERROR, "init", nullptr, 0, | 
|  | 751 | recorded_logs[i].c_str()); | 
|  | 752 | } | 
|  | 753 | for (size_t i = 0; i < recorded_log_position; ++i) { | 
|  | 754 | android::base::KernelLogger(android::base::MAIN, android::base::ERROR, "init", nullptr, 0, | 
|  | 755 | recorded_logs[i].c_str()); | 
|  | 756 | } | 
|  | 757 | android::base::KernelLogger(android::base::MAIN, android::base::ERROR, "init", nullptr, 0, | 
|  | 758 | "===================== End of dump ====================="); | 
|  | 759 | } | 
|  | 760 |  | 
| Tom Cherry | 81f5d3e | 2017-06-22 12:53:17 -0700 | [diff] [blame] | 761 | }  // namespace init | 
|  | 762 | }  // namespace android |