src/socket.c

   1 /*-*- Mode: C; c-basic-offset: 8; indent-tabs-mode: nil -*-*/
   2
   3 /***
   4   This file is part of systemd.
   5
   6   Copyright 2010 Lennart Poettering
   7
   8   systemd is free software; you can redistribute it and/or modify it
   9   under the terms of the GNU General Public License as published by
  10   the Free Software Foundation; either version 2 of the License, or
  11   (at your option) any later version.
  12
  13   systemd is distributed in the hope that it will be useful, but
  14   WITHOUT ANY WARRANTY; without even the implied warranty of
  15   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
  16   General Public License for more details.
  17
  18   You should have received a copy of the GNU General Public License
  19   along with systemd; If not, see <http://www.gnu.org/licenses/>.
  20 ***/
  21
  22 #include <sys/types.h>
  23 #include <sys/stat.h>
  24 #include <unistd.h>
  25 #include <errno.h>
  26 #include <fcntl.h>
  27 #include <sys/epoll.h>
  28 #include <signal.h>
  29 #include <arpa/inet.h>
  30
  31 #include "unit.h"
  32 #include "socket.h"
  33 #include "netinet/tcp.h"
  34 #include "log.h"
  35 #include "load-dropin.h"
  36 #include "load-fragment.h"
  37 #include "strv.h"
  38 #include "unit-name.h"
  39 #include "dbus-socket.h"
  40 #include "missing.h"
  41 #include "special.h"
  42 #include "bus-errors.h"
  43 #include "label.h"
  44
  45 static const UnitActiveState state_translation_table[_SOCKET_STATE_MAX] = {
  46         [SOCKET_DEAD] = UNIT_INACTIVE,
  47         [SOCKET_START_PRE] = UNIT_ACTIVATING,
  48         [SOCKET_START_POST] = UNIT_ACTIVATING,
  49         [SOCKET_LISTENING] = UNIT_ACTIVE,
  50         [SOCKET_RUNNING] = UNIT_ACTIVE,
  51         [SOCKET_STOP_PRE] = UNIT_DEACTIVATING,
  52         [SOCKET_STOP_PRE_SIGTERM] = UNIT_DEACTIVATING,
  53         [SOCKET_STOP_PRE_SIGKILL] = UNIT_DEACTIVATING,
  54         [SOCKET_STOP_POST] = UNIT_DEACTIVATING,
  55         [SOCKET_FINAL_SIGTERM] = UNIT_DEACTIVATING,
  56         [SOCKET_FINAL_SIGKILL] = UNIT_DEACTIVATING,
  57         [SOCKET_FAILED] = UNIT_FAILED
  58 };
  59
  60 static void socket_init(Unit *u) {
  61         Socket *s = SOCKET(u);
  62
  63         assert(u);
  64         assert(u->meta.load_state == UNIT_STUB);
  65
  66         s->backlog = SOMAXCONN;
  67         s->timeout_usec = DEFAULT_TIMEOUT_USEC;
  68         s->directory_mode = 0755;
  69         s->socket_mode = 0666;
  70
  71         s->max_connections = 64;
  72
  73         s->priority = -1;
  74         s->ip_tos = -1;
  75         s->ip_ttl = -1;
  76         s->mark = -1;
  77
  78         exec_context_init(&s->exec_context);
  79
  80         s->control_command_id = _SOCKET_EXEC_COMMAND_INVALID;
  81 }
  82
  83 static void socket_unwatch_control_pid(Socket *s) {
  84         assert(s);
  85
  86         if (s->control_pid <= 0)
  87                 return;
  88
  89         unit_unwatch_pid(UNIT(s), s->control_pid);
  90         s->control_pid = 0;
  91 }
  92
  93 static void socket_done(Unit *u) {
  94         Socket *s = SOCKET(u);
  95         SocketPort *p;
  96         Meta *i;
  97
  98         assert(s);
  99
 100         while ((p = s->ports)) {
 101                 LIST_REMOVE(SocketPort, port, s->ports, p);
 102
 103                 if (p->fd >= 0) {
 104                         unit_unwatch_fd(UNIT(s), &p->fd_watch);
 105                         close_nointr_nofail(p->fd);
 106                 }
 107
 108                 free(p->path);
 109                 free(p);
 110         }
 111
 112         exec_context_done(&s->exec_context);
 113         exec_command_free_array(s->exec_command, _SOCKET_EXEC_COMMAND_MAX);
 114         s->control_command = NULL;
 115
 116         socket_unwatch_control_pid(s);
 117
 118         s->service = NULL;
 119
 120         free(s->tcp_congestion);
 121         s->tcp_congestion = NULL;
 122
 123         free(s->bind_to_device);
 124         s->bind_to_device = NULL;
 125
 126         unit_unwatch_timer(u, &s->timer_watch);
 127
 128         /* Make sure no service instance refers to us anymore. */
 129         LIST_FOREACH(units_per_type, i, u->meta.manager->units_per_type[UNIT_SERVICE]) {
 130                 Service *service = (Service *) i;
 131
 132                 if (service->socket == s)
 133                         service->socket = NULL;
 134         }
 135 }
 136
 137 static int socket_instantiate_service(Socket *s) {
 138         char *prefix, *name;
 139         int r;
 140         Unit *u;
 141
 142         assert(s);
 143
 144         /* This fills in s->service if it isn't filled in yet. For
 145          * Accept=yes sockets we create the next connection service
 146          * here. For Accept=no this is mostly a NOP since the service
 147          * is figured out at load time anyway. */
 148
 149         if (s->service)
 150                 return 0;
 151
 152         assert(s->accept);
 153
 154         if (!(prefix = unit_name_to_prefix(s->meta.id)))
 155                 return -ENOMEM;
 156
 157         r = asprintf(&name, "%s@%u.service", prefix, s->n_accepted);
 158         free(prefix);
 159
 160         if (r < 0)
 161                 return -ENOMEM;
 162
 163         r = manager_load_unit(s->meta.manager, name, NULL, NULL, &u);
 164         free(name);
 165
 166         if (r < 0)
 167                 return r;
 168
 169         u->meta.no_gc = true;
 170         s->service = SERVICE(u);
 171         return 0;
 172 }
 173
 174 static bool have_non_accept_socket(Socket *s) {
 175         SocketPort *p;
 176
 177         assert(s);
 178
 179         if (!s->accept)
 180                 return true;
 181
 182         LIST_FOREACH(port, p, s->ports) {
 183
 184                 if (p->type != SOCKET_SOCKET)
 185                         return true;
 186
 187                 if (!socket_address_can_accept(&p->address))
 188                         return true;
 189         }
 190
 191         return false;
 192 }
 193
 194 static int socket_verify(Socket *s) {
 195         assert(s);
 196
 197         if (s->meta.load_state != UNIT_LOADED)
 198                 return 0;
 199
 200         if (!s->ports) {
 201                 log_error("%s lacks Listen setting. Refusing.", s->meta.id);
 202                 return -EINVAL;
 203         }
 204
 205         if (s->accept && have_non_accept_socket(s)) {
 206                 log_error("%s configured for accepting sockets, but sockets are non-accepting. Refusing.", s->meta.id);
 207                 return -EINVAL;
 208         }
 209
 210         if (s->accept && s->max_connections <= 0) {
 211                 log_error("%s's MaxConnection setting too small. Refusing.", s->meta.id);
 212                 return -EINVAL;
 213         }
 214
 215         if (s->accept && s->service) {
 216                 log_error("Explicit service configuration for accepting sockets not supported on %s. Refusing.", s->meta.id);
 217                 return -EINVAL;
 218         }
 219
 220         if (s->exec_context.pam_name && s->exec_context.kill_mode != KILL_CONTROL_GROUP) {
 221                 log_error("%s has PAM enabled. Kill mode must be set to 'control-group'. Refusing.", s->meta.id);
 222                 return -EINVAL;
 223         }
 224
 225         return 0;
 226 }
 227
 228 static bool socket_needs_mount(Socket *s, const char *prefix) {
 229         SocketPort *p;
 230
 231         assert(s);
 232
 233         LIST_FOREACH(port, p, s->ports) {
 234
 235                 if (p->type == SOCKET_SOCKET) {
 236                         if (socket_address_needs_mount(&p->address, prefix))
 237                                 return true;
 238                 } else {
 239                         assert(p->type == SOCKET_FIFO);
 240                         if (path_startswith(p->path, prefix))
 241                                 return true;
 242                 }
 243         }
 244
 245         return false;
 246 }
 247
 248 int socket_add_one_mount_link(Socket *s, Mount *m) {
 249         int r;
 250
 251         assert(s);
 252         assert(m);
 253
 254         if (s->meta.load_state != UNIT_LOADED ||
 255             m->meta.load_state != UNIT_LOADED)
 256                 return 0;
 257
 258         if (!socket_needs_mount(s, m->where))
 259                 return 0;
 260
 261         if ((r = unit_add_two_dependencies(UNIT(s), UNIT_AFTER, UNIT_REQUIRES, UNIT(m), true)) < 0)
 262                 return r;
 263
 264         return 0;
 265 }
 266
 267 static int socket_add_mount_links(Socket *s) {
 268         Meta *other;
 269         int r;
 270
 271         assert(s);
 272
 273         LIST_FOREACH(units_per_type, other, s->meta.manager->units_per_type[UNIT_MOUNT])
 274                 if ((r = socket_add_one_mount_link(s, (Mount*) other)) < 0)
 275                         return r;
 276
 277         return 0;
 278 }
 279
 280 static int socket_add_device_link(Socket *s) {
 281         char *t;
 282         int r;
 283
 284         assert(s);
 285
 286         if (!s->bind_to_device)
 287                 return 0;
 288
 289         if (asprintf(&t, "/sys/subsystem/net/devices/%s", s->bind_to_device) < 0)
 290                 return -ENOMEM;
 291
 292         r = unit_add_node_link(UNIT(s), t, false);
 293         free(t);
 294
 295         return r;
 296 }
 297
 298 static int socket_add_default_dependencies(Socket *s) {
 299         int r;
 300         assert(s);
 301
 302         if (s->meta.manager->running_as == MANAGER_SYSTEM)
 303                 if ((r = unit_add_two_dependencies_by_name(UNIT(s), UNIT_AFTER, UNIT_REQUIRES, SPECIAL_SYSINIT_TARGET, NULL, true)) < 0)
 304                         return r;
 305
 306         return unit_add_two_dependencies_by_name(UNIT(s), UNIT_BEFORE, UNIT_CONFLICTED_BY, SPECIAL_SHUTDOWN_TARGET, NULL, true);
 307 }
 308
 309 static int socket_load(Unit *u) {
 310         Socket *s = SOCKET(u);
 311         int r;
 312
 313         assert(u);
 314         assert(u->meta.load_state == UNIT_STUB);
 315
 316         if ((r = unit_load_fragment_and_dropin(u)) < 0)
 317                 return r;
 318
 319         /* This is a new unit? Then let's add in some extras */
 320         if (u->meta.load_state == UNIT_LOADED) {
 321
 322                 if (have_non_accept_socket(s)) {
 323
 324                         if (!s->service)
 325                                 if ((r = unit_load_related_unit(u, ".service", (Unit**) &s->service)) < 0)
 326                                         return r;
 327
 328                         if ((r = unit_add_dependency(u, UNIT_BEFORE, UNIT(s->service), true)) < 0)
 329                                 return r;
 330                 }
 331
 332                 if ((r = socket_add_mount_links(s)) < 0)
 333                         return r;
 334
 335                 if ((r = socket_add_device_link(s)) < 0)
 336                         return r;
 337
 338                 if ((r = unit_add_exec_dependencies(u, &s->exec_context)) < 0)
 339                         return r;
 340
 341                 if ((r = unit_add_default_cgroup(u)) < 0)
 342                         return r;
 343
 344                 if (s->meta.default_dependencies)
 345                         if ((r = socket_add_default_dependencies(s)) < 0)
 346                                 return r;
 347         }
 348
 349         return socket_verify(s);
 350 }
 351
 352 static const char* listen_lookup(int type) {
 353
 354         if (type == SOCK_STREAM)
 355                 return "ListenStream";
 356         else if (type == SOCK_DGRAM)
 357                 return "ListenDatagram";
 358         else if (type == SOCK_SEQPACKET)
 359                 return "ListenSequentialPacket";
 360
 361         assert_not_reached("Unknown socket type");
 362         return NULL;
 363 }
 364
 365 static void socket_dump(Unit *u, FILE *f, const char *prefix) {
 366
 367         SocketExecCommand c;
 368         Socket *s = SOCKET(u);
 369         SocketPort *p;
 370         const char *prefix2;
 371         char *p2;
 372
 373         assert(s);
 374         assert(f);
 375
 376         p2 = strappend(prefix, "\t");
 377         prefix2 = p2 ? p2 : prefix;
 378
 379         fprintf(f,
 380                 "%sSocket State: %s\n"
 381                 "%sBindIPv6Only: %s\n"
 382                 "%sBacklog: %u\n"
 383                 "%sSocketMode: %04o\n"
 384                 "%sDirectoryMode: %04o\n"
 385                 "%sKeepAlive: %s\n"
 386                 "%sFreeBind: %s\n"
 387                 "%sTCPCongestion: %s\n",
 388                 prefix, socket_state_to_string(s->state),
 389                 prefix, socket_address_bind_ipv6_only_to_string(s->bind_ipv6_only),
 390                 prefix, s->backlog,
 391                 prefix, s->socket_mode,
 392                 prefix, s->directory_mode,
 393                 prefix, yes_no(s->keep_alive),
 394                 prefix, yes_no(s->free_bind),
 395                 prefix, strna(s->tcp_congestion));
 396
 397         if (s->control_pid > 0)
 398                 fprintf(f,
 399                         "%sControl PID: %lu\n",
 400                         prefix, (unsigned long) s->control_pid);
 401
 402         if (s->bind_to_device)
 403                 fprintf(f,
 404                         "%sBindToDevice: %s\n",
 405                         prefix, s->bind_to_device);
 406
 407         if (s->accept)
 408                 fprintf(f,
 409                         "%sAccepted: %u\n"
 410                         "%sNConnections: %u\n"
 411                         "%sMaxConnections: %u\n",
 412                         prefix, s->n_accepted,
 413                         prefix, s->n_connections,
 414                         prefix, s->max_connections);
 415
 416         if (s->priority >= 0)
 417                 fprintf(f,
 418                         "%sPriority: %i\n",
 419                         prefix, s->priority);
 420
 421         if (s->receive_buffer > 0)
 422                 fprintf(f,
 423                         "%sReceiveBuffer: %zu\n",
 424                         prefix, s->receive_buffer);
 425
 426         if (s->send_buffer > 0)
 427                 fprintf(f,
 428                         "%sSendBuffer: %zu\n",
 429                         prefix, s->send_buffer);
 430
 431         if (s->ip_tos >= 0)
 432                 fprintf(f,
 433                         "%sIPTOS: %i\n",
 434                         prefix, s->ip_tos);
 435
 436         if (s->ip_ttl >= 0)
 437                 fprintf(f,
 438                         "%sIPTTL: %i\n",
 439                         prefix, s->ip_ttl);
 440
 441         if (s->pipe_size > 0)
 442                 fprintf(f,
 443                         "%sPipeSize: %zu\n",
 444                         prefix, s->pipe_size);
 445
 446         if (s->mark >= 0)
 447                 fprintf(f,
 448                         "%sMark: %i\n",
 449                         prefix, s->mark);
 450
 451         LIST_FOREACH(port, p, s->ports) {
 452
 453                 if (p->type == SOCKET_SOCKET) {
 454                         const char *t;
 455                         int r;
 456                         char *k = NULL;
 457
 458                         if ((r = socket_address_print(&p->address, &k)) < 0)
 459                                 t = strerror(-r);
 460                         else
 461                                 t = k;
 462
 463                         fprintf(f, "%s%s: %s\n", prefix, listen_lookup(p->address.type), t);
 464                         free(k);
 465                 } else
 466                         fprintf(f, "%sListenFIFO: %s\n", prefix, p->path);
 467         }
 468
 469         exec_context_dump(&s->exec_context, f, prefix);
 470
 471         for (c = 0; c < _SOCKET_EXEC_COMMAND_MAX; c++) {
 472                 if (!s->exec_command[c])
 473                         continue;
 474
 475                 fprintf(f, "%s-> %s:\n",
 476                         prefix, socket_exec_command_to_string(c));
 477
 478                 exec_command_dump_list(s->exec_command[c], f, prefix2);
 479         }
 480
 481         free(p2);
 482 }
 483
 484 static int instance_from_socket(int fd, unsigned nr, char **instance) {
 485         socklen_t l;
 486         char *r;
 487         union {
 488                 struct sockaddr sa;
 489                 struct sockaddr_un un;
 490                 struct sockaddr_in in;
 491                 struct sockaddr_in6 in6;
 492                 struct sockaddr_storage storage;
 493         } local, remote;
 494
 495         assert(fd >= 0);
 496         assert(instance);
 497
 498         l = sizeof(local);
 499         if (getsockname(fd, &local.sa, &l) < 0)
 500                 return -errno;
 501
 502         l = sizeof(remote);
 503         if (getpeername(fd, &remote.sa, &l) < 0)
 504                 return -errno;
 505
 506         switch (local.sa.sa_family) {
 507
 508         case AF_INET: {
 509                 uint32_t
 510                         a = ntohl(local.in.sin_addr.s_addr),
 511                         b = ntohl(remote.in.sin_addr.s_addr);
 512
 513                 if (asprintf(&r,
 514                              "%u.%u.%u.%u:%u-%u.%u.%u.%u:%u",
 515                              a >> 24, (a >> 16) & 0xFF, (a >> 8) & 0xFF, a & 0xFF,
 516                              ntohs(local.in.sin_port),
 517                              b >> 24, (b >> 16) & 0xFF, (b >> 8) & 0xFF, b & 0xFF,
 518                              ntohs(remote.in.sin_port)) < 0)
 519                         return -ENOMEM;
 520
 521                 break;
 522         }
 523
 524         case AF_INET6: {
 525                 static const char ipv4_prefix[] = {
 526                         0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0xFF, 0xFF
 527                 };
 528
 529                 if (memcmp(&local.in6.sin6_addr, ipv4_prefix, sizeof(ipv4_prefix)) == 0 &&
 530                     memcmp(&remote.in6.sin6_addr, ipv4_prefix, sizeof(ipv4_prefix)) == 0) {
 531                         const uint8_t
 532                                 *a = local.in6.sin6_addr.s6_addr+12,
 533                                 *b = remote.in6.sin6_addr.s6_addr+12;
 534
 535                         if (asprintf(&r,
 536                                      "%u.%u.%u.%u:%u-%u.%u.%u.%u:%u",
 537                                      a[0], a[1], a[2], a[3],
 538                                      ntohs(local.in6.sin6_port),
 539                                      b[0], b[1], b[2], b[3],
 540                                      ntohs(remote.in6.sin6_port)) < 0)
 541                                 return -ENOMEM;
 542                 } else {
 543                         char a[INET6_ADDRSTRLEN], b[INET6_ADDRSTRLEN];
 544
 545                         if (asprintf(&r,
 546                                      "%s:%u-%s:%u",
 547                                      inet_ntop(AF_INET6, &local.in6.sin6_addr, a, sizeof(a)),
 548                                      ntohs(local.in6.sin6_port),
 549                                      inet_ntop(AF_INET6, &remote.in6.sin6_addr, b, sizeof(b)),
 550                                      ntohs(remote.in6.sin6_port)) < 0)
 551                                 return -ENOMEM;
 552                 }
 553
 554                 break;
 555         }
 556
 557         case AF_UNIX: {
 558                 struct ucred ucred;
 559
 560                 l = sizeof(ucred);
 561                 if (getsockopt(fd, SOL_SOCKET, SO_PEERCRED, &ucred, &l) < 0)
 562                         return -errno;
 563
 564                 if (asprintf(&r,
 565                              "%u-%lu-%lu",
 566                              nr,
 567                              (unsigned long) ucred.pid,
 568                              (unsigned long) ucred.uid) < 0)
 569                         return -ENOMEM;
 570
 571                 break;
 572         }
 573
 574         default:
 575                 assert_not_reached("Unhandled socket type.");
 576         }
 577
 578         *instance = r;
 579         return 0;
 580 }
 581
 582 static void socket_close_fds(Socket *s) {
 583         SocketPort *p;
 584
 585         assert(s);
 586
 587         LIST_FOREACH(port, p, s->ports) {
 588                 if (p->fd < 0)
 589                         continue;
 590
 591                 unit_unwatch_fd(UNIT(s), &p->fd_watch);
 592                 close_nointr_nofail(p->fd);
 593
 594                 /* One little note: we should never delete any sockets
 595                  * in the file system here! After all some other
 596                  * process we spawned might still have a reference of
 597                  * this fd and wants to continue to use it. Therefore
 598                  * we delete sockets in the file system before we
 599                  * create a new one, not after we stopped using
 600                  * one! */
 601
 602                 p->fd = -1;
 603         }
 604 }
 605
 606 static void socket_apply_socket_options(Socket *s, int fd) {
 607         assert(s);
 608         assert(fd >= 0);
 609
 610         if (s->keep_alive) {
 611                 int b = s->keep_alive;
 612                 if (setsockopt(fd, SOL_SOCKET, SO_KEEPALIVE, &b, sizeof(b)) < 0)
 613                         log_warning("SO_KEEPALIVE failed: %m");
 614         }
 615
 616         if (s->priority >= 0)
 617                 if (setsockopt(fd, SOL_SOCKET, SO_PRIORITY, &s->priority, sizeof(s->priority)) < 0)
 618                         log_warning("SO_PRIORITY failed: %m");
 619
 620         if (s->receive_buffer > 0) {
 621                 int value = (int) s->receive_buffer;
 622                 if (setsockopt(fd, SOL_SOCKET, SO_RCVBUF, &value, sizeof(value)) < 0)
 623                         log_warning("SO_RCVBUF failed: %m");
 624         }
 625
 626         if (s->send_buffer > 0) {
 627                 int value = (int) s->send_buffer;
 628                 if (setsockopt(fd, SOL_SOCKET, SO_SNDBUF, &value, sizeof(value)) < 0)
 629                         log_warning("SO_SNDBUF failed: %m");
 630         }
 631
 632         if (s->mark >= 0)
 633                 if (setsockopt(fd, SOL_SOCKET, SO_MARK, &s->mark, sizeof(s->mark)) < 0)
 634                         log_warning("SO_MARK failed: %m");
 635
 636         if (s->ip_tos >= 0)
 637                 if (setsockopt(fd, IPPROTO_IP, IP_TOS, &s->ip_tos, sizeof(s->ip_tos)) < 0)
 638                         log_warning("IP_TOS failed: %m");
 639
 640         if (s->ip_ttl >= 0) {
 641                 int r, x;
 642
 643                 r = setsockopt(fd, IPPROTO_IP, IP_TTL, &s->ip_ttl, sizeof(s->ip_ttl));
 644
 645                 if (socket_ipv6_is_supported())
 646                         x = setsockopt(fd, IPPROTO_IPV6, IPV6_UNICAST_HOPS, &s->ip_ttl, sizeof(s->ip_ttl));
 647                 else {
 648                         x = -1;
 649                         errno = EAFNOSUPPORT;
 650                 }
 651
 652                 if (r < 0 && x < 0)
 653                         log_warning("IP_TTL/IPV6_UNICAST_HOPS failed: %m");
 654         }
 655
 656         if (s->tcp_congestion)
 657                 if (setsockopt(fd, SOL_TCP, TCP_CONGESTION, s->tcp_congestion, strlen(s->tcp_congestion)+1) < 0)
 658                         log_warning("TCP_CONGESTION failed: %m");
 659 }
 660
 661 static void socket_apply_fifo_options(Socket *s, int fd) {
 662         assert(s);
 663         assert(fd >= 0);
 664
 665         if (s->pipe_size > 0)
 666                 if (fcntl(fd, F_SETPIPE_SZ, s->pipe_size) < 0)
 667                         log_warning("F_SETPIPE_SZ: %m");
 668 }
 669
 670
 671 static int fifo_address_create(
 672                 const char *path,
 673                 mode_t directory_mode,
 674                 mode_t socket_mode,
 675                 int *_fd) {
 676
 677         int fd = -1, r = 0;
 678         struct stat st;
 679         mode_t old_mask;
 680
 681         assert(path);
 682         assert(_fd);
 683
 684         mkdir_parents(path, directory_mode);
 685
 686         if ((r = label_fifofile_set(path)) < 0)
 687                 goto fail;
 688
 689         /* Enforce the right access mode for the fifo */
 690         old_mask = umask(~ socket_mode);
 691
 692         /* Include the original umask in our mask */
 693         umask(~socket_mode | old_mask);
 694
 695         r = mkfifo(path, socket_mode);
 696         umask(old_mask);
 697
 698         if (r < 0) {
 699                 r = -errno;
 700                 goto fail;
 701         }
 702
 703         if ((fd = open(path, O_RDWR|O_CLOEXEC|O_NOCTTY|O_NONBLOCK|O_NOFOLLOW)) < 0) {
 704                 r = -errno;
 705                 goto fail;
 706         }
 707
 708         label_file_clear();
 709
 710         if (fstat(fd, &st) < 0) {
 711                 r = -errno;
 712                 goto fail;
 713         }
 714
 715         if (!S_ISFIFO(st.st_mode) ||
 716             (st.st_mode & 0777) != (socket_mode & ~old_mask) ||
 717             st.st_uid != getuid() ||
 718             st.st_gid != getgid()) {
 719
 720                 r = -EEXIST;
 721                 goto fail;
 722         }
 723
 724         *_fd = fd;
 725         return 0;
 726
 727 fail:
 728         label_file_clear();
 729
 730         if (fd >= 0)
 731                 close_nointr_nofail(fd);
 732
 733         return r;
 734 }
 735
 736 static int socket_open_fds(Socket *s) {
 737         SocketPort *p;
 738         int r;
 739         char *label = NULL;
 740         bool know_label = false;
 741
 742         assert(s);
 743
 744         LIST_FOREACH(port, p, s->ports) {
 745
 746                 if (p->fd >= 0)
 747                         continue;
 748
 749                 if (p->type == SOCKET_SOCKET) {
 750
 751                         if (!know_label) {
 752
 753                                 if ((r = socket_instantiate_service(s)) < 0)
 754                                         return r;
 755
 756                                 if ((r = label_get_socket_label_from_exe(s->service->exec_command[SERVICE_EXEC_START]->path, &label)) < 0)
 757                                         return r;
 758
 759                                 know_label = true;
 760                         }
 761
 762                         if ((r = socket_address_listen(
 763                                              &p->address,
 764                                              s->backlog,
 765                                              s->bind_ipv6_only,
 766                                              s->bind_to_device,
 767                                              s->free_bind,
 768                                              s->directory_mode,
 769                                              s->socket_mode,
 770                                              label,
 771                                              &p->fd)) < 0)
 772                                 goto rollback;
 773
 774                         socket_apply_socket_options(s, p->fd);
 775
 776                 } else  if (p->type == SOCKET_FIFO) {
 777
 778                         if ((r = fifo_address_create(
 779                                              p->path,
 780                                              s->directory_mode,
 781                                              s->socket_mode,
 782                                              &p->fd)) < 0)
 783                                 goto rollback;
 784
 785                         socket_apply_fifo_options(s, p->fd);
 786
 787                 } else
 788                         assert_not_reached("Unknown port type");
 789         }
 790
 791         label_free(label);
 792         return 0;
 793
 794 rollback:
 795         socket_close_fds(s);
 796         label_free(label);
 797         return r;
 798 }
 799
 800 static void socket_unwatch_fds(Socket *s) {
 801         SocketPort *p;
 802
 803         assert(s);
 804
 805         LIST_FOREACH(port, p, s->ports) {
 806                 if (p->fd < 0)
 807                         continue;
 808
 809                 unit_unwatch_fd(UNIT(s), &p->fd_watch);
 810         }
 811 }
 812
 813 static int socket_watch_fds(Socket *s) {
 814         SocketPort *p;
 815         int r;
 816
 817         assert(s);
 818
 819         LIST_FOREACH(port, p, s->ports) {
 820                 if (p->fd < 0)
 821                         continue;
 822
 823                 p->fd_watch.socket_accept =
 824                         s->accept &&
 825                         p->type == SOCKET_SOCKET &&
 826                         socket_address_can_accept(&p->address);
 827
 828                 if ((r = unit_watch_fd(UNIT(s), p->fd, EPOLLIN, &p->fd_watch)) < 0)
 829                         goto fail;
 830         }
 831
 832         return 0;
 833
 834 fail:
 835         socket_unwatch_fds(s);
 836         return r;
 837 }
 838
 839 static void socket_set_state(Socket *s, SocketState state) {
 840         SocketState old_state;
 841         assert(s);
 842
 843         old_state = s->state;
 844         s->state = state;
 845
 846         if (state != SOCKET_START_PRE &&
 847             state != SOCKET_START_POST &&
 848             state != SOCKET_STOP_PRE &&
 849             state != SOCKET_STOP_PRE_SIGTERM &&
 850             state != SOCKET_STOP_PRE_SIGKILL &&
 851             state != SOCKET_STOP_POST &&
 852             state != SOCKET_FINAL_SIGTERM &&
 853             state != SOCKET_FINAL_SIGKILL) {
 854                 unit_unwatch_timer(UNIT(s), &s->timer_watch);
 855                 socket_unwatch_control_pid(s);
 856                 s->control_command = NULL;
 857                 s->control_command_id = _SOCKET_EXEC_COMMAND_INVALID;
 858         }
 859
 860         if (state != SOCKET_LISTENING)
 861                 socket_unwatch_fds(s);
 862
 863         if (state != SOCKET_START_POST &&
 864             state != SOCKET_LISTENING &&
 865             state != SOCKET_RUNNING &&
 866             state != SOCKET_STOP_PRE &&
 867             state != SOCKET_STOP_PRE_SIGTERM &&
 868             state != SOCKET_STOP_PRE_SIGKILL)
 869                 socket_close_fds(s);
 870
 871         if (state != old_state)
 872                 log_debug("%s changed %s -> %s",
 873                           s->meta.id,
 874                           socket_state_to_string(old_state),
 875                           socket_state_to_string(state));
 876
 877         unit_notify(UNIT(s), state_translation_table[old_state], state_translation_table[state]);
 878 }
 879
 880 static int socket_coldplug(Unit *u) {
 881         Socket *s = SOCKET(u);
 882         int r;
 883
 884         assert(s);
 885         assert(s->state == SOCKET_DEAD);
 886
 887         if (s->deserialized_state != s->state) {
 888
 889                 if (s->deserialized_state == SOCKET_START_PRE ||
 890                     s->deserialized_state == SOCKET_START_POST ||
 891                     s->deserialized_state == SOCKET_STOP_PRE ||
 892                     s->deserialized_state == SOCKET_STOP_PRE_SIGTERM ||
 893                     s->deserialized_state == SOCKET_STOP_PRE_SIGKILL ||
 894                     s->deserialized_state == SOCKET_STOP_POST ||
 895                     s->deserialized_state == SOCKET_FINAL_SIGTERM ||
 896                     s->deserialized_state == SOCKET_FINAL_SIGKILL) {
 897
 898                         if (s->control_pid <= 0)
 899                                 return -EBADMSG;
 900
 901                         if ((r = unit_watch_pid(UNIT(s), s->control_pid)) < 0)
 902                                 return r;
 903
 904                         if ((r = unit_watch_timer(UNIT(s), s->timeout_usec, &s->timer_watch)) < 0)
 905                                 return r;
 906                 }
 907
 908                 if (s->deserialized_state == SOCKET_START_POST ||
 909                     s->deserialized_state == SOCKET_LISTENING ||
 910                     s->deserialized_state == SOCKET_RUNNING ||
 911                     s->deserialized_state == SOCKET_STOP_PRE ||
 912                     s->deserialized_state == SOCKET_STOP_PRE_SIGTERM ||
 913                     s->deserialized_state == SOCKET_STOP_PRE_SIGKILL)
 914                         if ((r = socket_open_fds(s)) < 0)
 915                                 return r;
 916
 917                 if (s->deserialized_state == SOCKET_LISTENING)
 918                         if ((r = socket_watch_fds(s)) < 0)
 919                                 return r;
 920
 921                 socket_set_state(s, s->deserialized_state);
 922         }
 923
 924         return 0;
 925 }
 926
 927 static int socket_spawn(Socket *s, ExecCommand *c, pid_t *_pid) {
 928         pid_t pid;
 929         int r;
 930         char **argv;
 931
 932         assert(s);
 933         assert(c);
 934         assert(_pid);
 935
 936         if ((r = unit_watch_timer(UNIT(s), s->timeout_usec, &s->timer_watch)) < 0)
 937                 goto fail;
 938
 939         if (!(argv = unit_full_printf_strv(UNIT(s), c->argv))) {
 940                 r = -ENOMEM;
 941                 goto fail;
 942         }
 943
 944         r = exec_spawn(c,
 945                        argv,
 946                        &s->exec_context,
 947                        NULL, 0,
 948                        s->meta.manager->environment,
 949                        true,
 950                        true,
 951                        true,
 952                        s->meta.manager->confirm_spawn,
 953                        s->meta.cgroup_bondings,
 954                        &pid);
 955
 956         strv_free(argv);
 957         if (r < 0)
 958                 goto fail;
 959
 960         if ((r = unit_watch_pid(UNIT(s), pid)) < 0)
 961                 /* FIXME: we need to do something here */
 962                 goto fail;
 963
 964         *_pid = pid;
 965
 966         return 0;
 967
 968 fail:
 969         unit_unwatch_timer(UNIT(s), &s->timer_watch);
 970
 971         return r;
 972 }
 973
 974 static void socket_enter_dead(Socket *s, bool success) {
 975         assert(s);
 976
 977         if (!success)
 978                 s->failure = true;
 979
 980         socket_set_state(s, s->failure ? SOCKET_FAILED : SOCKET_DEAD);
 981 }
 982
 983 static void socket_enter_signal(Socket *s, SocketState state, bool success);
 984
 985 static void socket_enter_stop_post(Socket *s, bool success) {
 986         int r;
 987         assert(s);
 988
 989         if (!success)
 990                 s->failure = true;
 991
 992         socket_unwatch_control_pid(s);
 993
 994         s->control_command_id = SOCKET_EXEC_STOP_POST;
 995
 996         if ((s->control_command = s->exec_command[SOCKET_EXEC_STOP_POST])) {
 997                 if ((r = socket_spawn(s, s->control_command, &s->control_pid)) < 0)
 998                         goto fail;
 999
1000                 socket_set_state(s, SOCKET_STOP_POST);
1001         } else
1002                 socket_enter_signal(s, SOCKET_FINAL_SIGTERM, true);
1003
1004         return;
1005
1006 fail:
1007         log_warning("%s failed to run 'stop-post' task: %s", s->meta.id, strerror(-r));
1008         socket_enter_signal(s, SOCKET_FINAL_SIGTERM, false);
1009 }
1010
1011 static void socket_enter_signal(Socket *s, SocketState state, bool success) {
1012         int r;
1013         Set *pid_set = NULL;
1014         bool wait_for_exit = false;
1015
1016         assert(s);
1017
1018         if (!success)
1019                 s->failure = true;
1020
1021         if (s->exec_context.kill_mode != KILL_NONE) {
1022                 int sig = (state == SOCKET_STOP_PRE_SIGTERM || state == SOCKET_FINAL_SIGTERM) ? s->exec_context.kill_signal : SIGKILL;
1023
1024                 if (s->control_pid > 0) {
1025                         if (kill(s->exec_context.kill_mode == KILL_PROCESS_GROUP ?
1026                                  -s->control_pid :
1027                                  s->control_pid, sig) < 0 && errno != ESRCH)
1028
1029                                 log_warning("Failed to kill control process %li: %m", (long) s->control_pid);
1030                         else
1031                                 wait_for_exit = true;
1032                 }
1033
1034                 if (s->exec_context.kill_mode == KILL_CONTROL_GROUP) {
1035
1036                         if (!(pid_set = set_new(trivial_hash_func, trivial_compare_func))) {
1037                                 r = -ENOMEM;
1038                                 goto fail;
1039                         }
1040
1041                         /* Exclude the control pid from being killed via the cgroup */
1042                         if (s->control_pid > 0)
1043                                 if ((r = set_put(pid_set, LONG_TO_PTR(s->control_pid))) < 0)
1044                                         goto fail;
1045
1046                         if ((r = cgroup_bonding_kill_list(s->meta.cgroup_bondings, sig, pid_set)) < 0) {
1047                                 if (r != -EAGAIN && r != -ESRCH && r != -ENOENT)
1048                                         log_warning("Failed to kill control group: %s", strerror(-r));
1049                         } else if (r > 0)
1050                                 wait_for_exit = true;
1051
1052                         set_free(pid_set);
1053                 }
1054         }
1055
1056         if (wait_for_exit) {
1057                 if ((r = unit_watch_timer(UNIT(s), s->timeout_usec, &s->timer_watch)) < 0)
1058                         goto fail;
1059
1060                 socket_set_state(s, state);
1061         } else if (state == SOCKET_STOP_PRE_SIGTERM || state == SOCKET_STOP_PRE_SIGKILL)
1062                 socket_enter_stop_post(s, true);
1063         else
1064                 socket_enter_dead(s, true);
1065
1066         return;
1067
1068 fail:
1069         log_warning("%s failed to kill processes: %s", s->meta.id, strerror(-r));
1070
1071         if (state == SOCKET_STOP_PRE_SIGTERM || state == SOCKET_STOP_PRE_SIGKILL)
1072                 socket_enter_stop_post(s, false);
1073         else
1074                 socket_enter_dead(s, false);
1075
1076         if (pid_set)
1077                 set_free(pid_set);
1078 }
1079
1080 static void socket_enter_stop_pre(Socket *s, bool success) {
1081         int r;
1082         assert(s);
1083
1084         if (!success)
1085                 s->failure = true;
1086
1087         socket_unwatch_control_pid(s);
1088
1089         s->control_command_id = SOCKET_EXEC_STOP_PRE;
1090
1091         if ((s->control_command = s->exec_command[SOCKET_EXEC_STOP_PRE])) {
1092                 if ((r = socket_spawn(s, s->control_command, &s->control_pid)) < 0)
1093                         goto fail;
1094
1095                 socket_set_state(s, SOCKET_STOP_PRE);
1096         } else
1097                 socket_enter_stop_post(s, true);
1098
1099         return;
1100
1101 fail:
1102         log_warning("%s failed to run 'stop-pre' task: %s", s->meta.id, strerror(-r));
1103         socket_enter_stop_post(s, false);
1104 }
1105
1106 static void socket_enter_listening(Socket *s) {
1107         int r;
1108         assert(s);
1109
1110         if ((r = socket_watch_fds(s)) < 0) {
1111                 log_warning("%s failed to watch sockets: %s", s->meta.id, strerror(-r));
1112                 goto fail;
1113         }
1114
1115         socket_set_state(s, SOCKET_LISTENING);
1116         return;
1117
1118 fail:
1119         socket_enter_stop_pre(s, false);
1120 }
1121
1122 static void socket_enter_start_post(Socket *s) {
1123         int r;
1124         assert(s);
1125
1126         if ((r = socket_open_fds(s)) < 0) {
1127                 log_warning("%s failed to listen on sockets: %s", s->meta.id, strerror(-r));
1128                 goto fail;
1129         }
1130
1131         socket_unwatch_control_pid(s);
1132
1133         s->control_command_id = SOCKET_EXEC_START_POST;
1134
1135         if ((s->control_command = s->exec_command[SOCKET_EXEC_START_POST])) {
1136                 if ((r = socket_spawn(s, s->control_command, &s->control_pid)) < 0) {
1137                         log_warning("%s failed to run 'start-post' task: %s", s->meta.id, strerror(-r));
1138                         goto fail;
1139                 }
1140
1141                 socket_set_state(s, SOCKET_START_POST);
1142         } else
1143                 socket_enter_listening(s);
1144
1145         return;
1146
1147 fail:
1148         socket_enter_stop_pre(s, false);
1149 }
1150
1151 static void socket_enter_start_pre(Socket *s) {
1152         int r;
1153         assert(s);
1154
1155         socket_unwatch_control_pid(s);
1156
1157         s->control_command_id = SOCKET_EXEC_START_PRE;
1158
1159         if ((s->control_command = s->exec_command[SOCKET_EXEC_START_PRE])) {
1160                 if ((r = socket_spawn(s, s->control_command, &s->control_pid)) < 0)
1161                         goto fail;
1162
1163                 socket_set_state(s, SOCKET_START_PRE);
1164         } else
1165                 socket_enter_start_post(s);
1166
1167         return;
1168
1169 fail:
1170         log_warning("%s failed to run 'start-pre' task: %s", s->meta.id, strerror(-r));
1171         socket_enter_dead(s, false);
1172 }
1173
1174 static void socket_enter_running(Socket *s, int cfd) {
1175         int r;
1176         DBusError error;
1177
1178         assert(s);
1179         dbus_error_init(&error);
1180
1181         /* We don't take connections anymore if we are supposed to
1182          * shut down anyway */
1183         if (unit_pending_inactive(UNIT(s))) {
1184                 if (cfd >= 0)
1185                         close_nointr_nofail(cfd);
1186                 else  {
1187                         /* Flush all sockets by closing and reopening them */
1188                         socket_close_fds(s);
1189
1190                         if ((r = socket_watch_fds(s)) < 0) {
1191                                 log_warning("%s failed to watch sockets: %s", s->meta.id, strerror(-r));
1192                                 socket_enter_stop_pre(s, false);
1193                         }
1194                 }
1195
1196                 return;
1197         }
1198
1199         if (cfd < 0) {
1200                 if ((r = manager_add_job(s->meta.manager, JOB_START, UNIT(s->service), JOB_REPLACE, true, &error, NULL)) < 0)
1201                         goto fail;
1202
1203                 socket_set_state(s, SOCKET_RUNNING);
1204         } else {
1205                 char *prefix, *instance = NULL, *name;
1206                 Service *service;
1207
1208                 if (s->n_connections >= s->max_connections) {
1209                         log_warning("Too many incoming connections (%u)", s->n_connections);
1210                         close_nointr_nofail(cfd);
1211                         return;
1212                 }
1213
1214                 if ((r = socket_instantiate_service(s)) < 0)
1215                         goto fail;
1216
1217                 if ((r = instance_from_socket(cfd, s->n_accepted, &instance)) < 0)
1218                         goto fail;
1219
1220                 if (!(prefix = unit_name_to_prefix(s->meta.id))) {
1221                         free(instance);
1222                         r = -ENOMEM;
1223                         goto fail;
1224                 }
1225
1226                 name = unit_name_build(prefix, instance, ".service");
1227                 free(prefix);
1228                 free(instance);
1229
1230                 if (!name) {
1231                         r = -ENOMEM;
1232                         goto fail;
1233                 }
1234
1235                 if ((r = unit_add_name(UNIT(s->service), name)) < 0) {
1236                         free(name);
1237                         goto fail;
1238                 }
1239
1240                 service = s->service;
1241                 s->service = NULL;
1242                 s->n_accepted ++;
1243
1244                 service->meta.no_gc = false;
1245
1246                 unit_choose_id(UNIT(service), name);
1247                 free(name);
1248
1249                 if ((r = service_set_socket_fd(service, cfd, s)) < 0)
1250                         goto fail;
1251
1252                 cfd = -1;
1253                 s->n_connections ++;
1254
1255                 if ((r = manager_add_job(s->meta.manager, JOB_START, UNIT(service), JOB_REPLACE, true, &error, NULL)) < 0)
1256                         goto fail;
1257
1258                 /* Notify clients about changed counters */
1259                 unit_add_to_dbus_queue(UNIT(s));
1260         }
1261
1262         return;
1263
1264 fail:
1265         log_warning("%s failed to queue socket startup job: %s", s->meta.id, bus_error(&error, r));
1266         socket_enter_stop_pre(s, false);
1267
1268         if (cfd >= 0)
1269                 close_nointr_nofail(cfd);
1270
1271         dbus_error_free(&error);
1272 }
1273
1274 static void socket_run_next(Socket *s, bool success) {
1275         int r;
1276
1277         assert(s);
1278         assert(s->control_command);
1279         assert(s->control_command->command_next);
1280
1281         if (!success)
1282                 s->failure = true;
1283
1284         socket_unwatch_control_pid(s);
1285
1286         s->control_command = s->control_command->command_next;
1287
1288         if ((r = socket_spawn(s, s->control_command, &s->control_pid)) < 0)
1289                 goto fail;
1290
1291         return;
1292
1293 fail:
1294         log_warning("%s failed to run next task: %s", s->meta.id, strerror(-r));
1295
1296         if (s->state == SOCKET_START_POST)
1297                 socket_enter_stop_pre(s, false);
1298         else if (s->state == SOCKET_STOP_POST)
1299                 socket_enter_dead(s, false);
1300         else
1301                 socket_enter_signal(s, SOCKET_FINAL_SIGTERM, false);
1302 }
1303
1304 static int socket_start(Unit *u) {
1305         Socket *s = SOCKET(u);
1306
1307         assert(s);
1308
1309         /* We cannot fulfill this request right now, try again later
1310          * please! */
1311         if (s->state == SOCKET_STOP_PRE ||
1312             s->state == SOCKET_STOP_PRE_SIGKILL ||
1313             s->state == SOCKET_STOP_PRE_SIGTERM ||
1314             s->state == SOCKET_STOP_POST ||
1315             s->state == SOCKET_FINAL_SIGTERM ||
1316             s->state == SOCKET_FINAL_SIGKILL)
1317                 return -EAGAIN;
1318
1319         if (s->state == SOCKET_START_PRE ||
1320             s->state == SOCKET_START_POST)
1321                 return 0;
1322
1323         /* Cannot run this without the service being around */
1324         if (s->service) {
1325                 if (s->service->meta.load_state != UNIT_LOADED)
1326                         return -ENOENT;
1327
1328                 /* If the service is alredy actvie we cannot start the
1329                  * socket */
1330                 if (s->service->state != SERVICE_DEAD &&
1331                     s->service->state != SERVICE_FAILED &&
1332                     s->service->state != SERVICE_AUTO_RESTART)
1333                         return -EBUSY;
1334         }
1335
1336         assert(s->state == SOCKET_DEAD || s->state == SOCKET_FAILED);
1337
1338         s->failure = false;
1339         socket_enter_start_pre(s);
1340         return 0;
1341 }
1342
1343 static int socket_stop(Unit *u) {
1344         Socket *s = SOCKET(u);
1345
1346         assert(s);
1347
1348         /* Already on it */
1349         if (s->state == SOCKET_STOP_PRE ||
1350             s->state == SOCKET_STOP_PRE_SIGTERM ||
1351             s->state == SOCKET_STOP_PRE_SIGKILL ||
1352             s->state == SOCKET_STOP_POST ||
1353             s->state == SOCKET_FINAL_SIGTERM ||
1354             s->state == SOCKET_FINAL_SIGKILL)
1355                 return 0;
1356
1357         /* If there's already something running we go directly into
1358          * kill mode. */
1359         if (s->state == SOCKET_START_PRE ||
1360             s->state == SOCKET_START_POST) {
1361                 socket_enter_signal(s, SOCKET_STOP_PRE_SIGTERM, true);
1362                 return -EAGAIN;
1363         }
1364
1365         assert(s->state == SOCKET_LISTENING || s->state == SOCKET_RUNNING);
1366
1367         socket_enter_stop_pre(s, true);
1368         return 0;
1369 }
1370
1371 static int socket_serialize(Unit *u, FILE *f, FDSet *fds) {
1372         Socket *s = SOCKET(u);
1373         SocketPort *p;
1374         int r;
1375
1376         assert(u);
1377         assert(f);
1378         assert(fds);
1379
1380         unit_serialize_item(u, f, "state", socket_state_to_string(s->state));
1381         unit_serialize_item(u, f, "failure", yes_no(s->failure));
1382         unit_serialize_item_format(u, f, "n-accepted", "%u", s->n_accepted);
1383
1384         if (s->control_pid > 0)
1385                 unit_serialize_item_format(u, f, "control-pid", "%lu", (unsigned long) s->control_pid);
1386
1387         if (s->control_command_id >= 0)
1388                 unit_serialize_item(u, f, "control-command", socket_exec_command_to_string(s->control_command_id));
1389
1390         LIST_FOREACH(port, p, s->ports) {
1391                 int copy;
1392
1393                 if (p->fd < 0)
1394                         continue;
1395
1396                 if ((copy = fdset_put_dup(fds, p->fd)) < 0)
1397                         return copy;
1398
1399                 if (p->type == SOCKET_SOCKET) {
1400                         char *t;
1401
1402                         if ((r = socket_address_print(&p->address, &t)) < 0)
1403                                 return r;
1404
1405                         unit_serialize_item_format(u, f, "socket", "%i %i %s", copy, p->address.type, t);
1406                         free(t);
1407                 } else {
1408                         assert(p->type == SOCKET_FIFO);
1409                         unit_serialize_item_format(u, f, "fifo", "%i %s", copy, p->path);
1410                 }
1411         }
1412
1413         return 0;
1414 }
1415
1416 static int socket_deserialize_item(Unit *u, const char *key, const char *value, FDSet *fds) {
1417         Socket *s = SOCKET(u);
1418
1419         assert(u);
1420         assert(key);
1421         assert(value);
1422         assert(fds);
1423
1424         if (streq(key, "state")) {
1425                 SocketState state;
1426
1427                 if ((state = socket_state_from_string(value)) < 0)
1428                         log_debug("Failed to parse state value %s", value);
1429                 else
1430                         s->deserialized_state = state;
1431         } else if (streq(key, "failure")) {
1432                 int b;
1433
1434                 if ((b = parse_boolean(value)) < 0)
1435                         log_debug("Failed to parse failure value %s", value);
1436                 else
1437                         s->failure = b || s->failure;
1438
1439         } else if (streq(key, "n-accepted")) {
1440                 unsigned k;
1441
1442                 if (safe_atou(value, &k) < 0)
1443                         log_debug("Failed to parse n-accepted value %s", value);
1444                 else
1445                         s->n_accepted += k;
1446         } else if (streq(key, "control-pid")) {
1447                 pid_t pid;
1448
1449                 if (parse_pid(value, &pid) < 0)
1450                         log_debug("Failed to parse control-pid value %s", value);
1451                 else
1452                         s->control_pid = pid;
1453         } else if (streq(key, "control-command")) {
1454                 SocketExecCommand id;
1455
1456                 if ((id = socket_exec_command_from_string(value)) < 0)
1457                         log_debug("Failed to parse exec-command value %s", value);
1458                 else {
1459                         s->control_command_id = id;
1460                         s->control_command = s->exec_command[id];
1461                 }
1462         } else if (streq(key, "fifo")) {
1463                 int fd, skip = 0;
1464                 SocketPort *p;
1465
1466                 if (sscanf(value, "%i %n", &fd, &skip) < 1 || fd < 0 || !fdset_contains(fds, fd))
1467                         log_debug("Failed to parse fifo value %s", value);
1468                 else {
1469
1470                         LIST_FOREACH(port, p, s->ports)
1471                                 if (streq(p->path, value+skip))
1472                                         break;
1473
1474                         if (p) {
1475                                 if (p->fd >= 0)
1476                                         close_nointr_nofail(p->fd);
1477                                 p->fd = fdset_remove(fds, fd);
1478                         }
1479                 }
1480
1481         } else if (streq(key, "socket")) {
1482                 int fd, type, skip = 0;
1483                 SocketPort *p;
1484
1485                 if (sscanf(value, "%i %i %n", &fd, &type, &skip) < 2 || fd < 0 || type < 0 || !fdset_contains(fds, fd))
1486                         log_debug("Failed to parse socket value %s", value);
1487                 else {
1488
1489                         LIST_FOREACH(port, p, s->ports)
1490                                 if (socket_address_is(&p->address, value+skip, type))
1491                                         break;
1492
1493                         if (p) {
1494                                 if (p->fd >= 0)
1495                                         close_nointr_nofail(p->fd);
1496                                 p->fd = fdset_remove(fds, fd);
1497                         }
1498                 }
1499
1500         } else
1501                 log_debug("Unknown serialization key '%s'", key);
1502
1503         return 0;
1504 }
1505
1506 static UnitActiveState socket_active_state(Unit *u) {
1507         assert(u);
1508
1509         return state_translation_table[SOCKET(u)->state];
1510 }
1511
1512 static const char *socket_sub_state_to_string(Unit *u) {
1513         assert(u);
1514
1515         return socket_state_to_string(SOCKET(u)->state);
1516 }
1517
1518 static bool socket_check_gc(Unit *u) {
1519         Socket *s = SOCKET(u);
1520
1521         assert(u);
1522
1523         return s->n_connections > 0;
1524 }
1525
1526 static void socket_fd_event(Unit *u, int fd, uint32_t events, Watch *w) {
1527         Socket *s = SOCKET(u);
1528         int cfd = -1;
1529
1530         assert(s);
1531         assert(fd >= 0);
1532
1533         if (s->state != SOCKET_LISTENING)
1534                 return;
1535
1536         log_debug("Incoming traffic on %s", u->meta.id);
1537
1538         if (events != EPOLLIN) {
1539                 log_error("Got invalid poll event on socket.");
1540                 goto fail;
1541         }
1542
1543         if (w->socket_accept) {
1544                 for (;;) {
1545
1546                         if ((cfd = accept4(fd, NULL, NULL, SOCK_NONBLOCK)) < 0) {
1547
1548                                 if (errno == EINTR)
1549                                         continue;
1550
1551                                 log_error("Failed to accept socket: %m");
1552                                 goto fail;
1553                         }
1554
1555                         break;
1556                 }
1557
1558                 socket_apply_socket_options(s, cfd);
1559         }
1560
1561         socket_enter_running(s, cfd);
1562         return;
1563
1564 fail:
1565         socket_enter_stop_pre(s, false);
1566 }
1567
1568 static void socket_sigchld_event(Unit *u, pid_t pid, int code, int status) {
1569         Socket *s = SOCKET(u);
1570         bool success;
1571
1572         assert(s);
1573         assert(pid >= 0);
1574
1575         if (pid != s->control_pid)
1576                 return;
1577
1578         s->control_pid = 0;
1579
1580         success = is_clean_exit(code, status);
1581
1582         if (s->control_command) {
1583                 exec_status_exit(&s->control_command->exec_status, pid, code, status);
1584
1585                 if (s->control_command->ignore)
1586                         success = true;
1587         }
1588
1589         log_full(success ? LOG_DEBUG : LOG_NOTICE,
1590                  "%s control process exited, code=%s status=%i", u->meta.id, sigchld_code_to_string(code), status);
1591         s->failure = s->failure || !success;
1592
1593         if (s->control_command && s->control_command->command_next && success) {
1594                 log_debug("%s running next command for state %s", u->meta.id, socket_state_to_string(s->state));
1595                 socket_run_next(s, success);
1596         } else {
1597                 s->control_command = NULL;
1598                 s->control_command_id = _SOCKET_EXEC_COMMAND_INVALID;
1599
1600                 /* No further commands for this step, so let's figure
1601                  * out what to do next */
1602
1603                 log_debug("%s got final SIGCHLD for state %s", u->meta.id, socket_state_to_string(s->state));
1604
1605                 switch (s->state) {
1606
1607                 case SOCKET_START_PRE:
1608                         if (success)
1609                                 socket_enter_start_post(s);
1610                         else
1611                                 socket_enter_signal(s, SOCKET_FINAL_SIGTERM, false);
1612                         break;
1613
1614                 case SOCKET_START_POST:
1615                         if (success)
1616                                 socket_enter_listening(s);
1617                         else
1618                                 socket_enter_stop_pre(s, false);
1619                         break;
1620
1621                 case SOCKET_STOP_PRE:
1622                 case SOCKET_STOP_PRE_SIGTERM:
1623                 case SOCKET_STOP_PRE_SIGKILL:
1624                         socket_enter_stop_post(s, success);
1625                         break;
1626
1627                 case SOCKET_STOP_POST:
1628                 case SOCKET_FINAL_SIGTERM:
1629                 case SOCKET_FINAL_SIGKILL:
1630                         socket_enter_dead(s, success);
1631                         break;
1632
1633                 default:
1634                         assert_not_reached("Uh, control process died at wrong time.");
1635                 }
1636         }
1637
1638         /* Notify clients about changed exit status */
1639         unit_add_to_dbus_queue(u);
1640 }
1641
1642 static void socket_timer_event(Unit *u, uint64_t elapsed, Watch *w) {
1643         Socket *s = SOCKET(u);
1644
1645         assert(s);
1646         assert(elapsed == 1);
1647         assert(w == &s->timer_watch);
1648
1649         switch (s->state) {
1650
1651         case SOCKET_START_PRE:
1652                 log_warning("%s starting timed out. Terminating.", u->meta.id);
1653                 socket_enter_signal(s, SOCKET_FINAL_SIGTERM, false);
1654
1655         case SOCKET_START_POST:
1656                 log_warning("%s starting timed out. Stopping.", u->meta.id);
1657                 socket_enter_stop_pre(s, false);
1658                 break;
1659
1660         case SOCKET_STOP_PRE:
1661                 log_warning("%s stopping timed out. Terminating.", u->meta.id);
1662                 socket_enter_signal(s, SOCKET_STOP_PRE_SIGTERM, false);
1663                 break;
1664
1665         case SOCKET_STOP_PRE_SIGTERM:
1666                 log_warning("%s stopping timed out. Killing.", u->meta.id);
1667                 socket_enter_signal(s, SOCKET_STOP_PRE_SIGKILL, false);
1668                 break;
1669
1670         case SOCKET_STOP_PRE_SIGKILL:
1671                 log_warning("%s still around after SIGKILL. Ignoring.", u->meta.id);
1672                 socket_enter_stop_post(s, false);
1673                 break;
1674
1675         case SOCKET_STOP_POST:
1676                 log_warning("%s stopping timed out (2). Terminating.", u->meta.id);
1677                 socket_enter_signal(s, SOCKET_FINAL_SIGTERM, false);
1678                 break;
1679
1680         case SOCKET_FINAL_SIGTERM:
1681                 log_warning("%s stopping timed out (2). Killing.", u->meta.id);
1682                 socket_enter_signal(s, SOCKET_FINAL_SIGKILL, false);
1683                 break;
1684
1685         case SOCKET_FINAL_SIGKILL:
1686                 log_warning("%s still around after SIGKILL (2). Entering failed mode.", u->meta.id);
1687                 socket_enter_dead(s, false);
1688                 break;
1689
1690         default:
1691                 assert_not_reached("Timeout at wrong time.");
1692         }
1693 }
1694
1695 int socket_collect_fds(Socket *s, int **fds, unsigned *n_fds) {
1696         int *rfds;
1697         unsigned rn_fds, k;
1698         SocketPort *p;
1699
1700         assert(s);
1701         assert(fds);
1702         assert(n_fds);
1703
1704         /* Called from the service code for requesting our fds */
1705
1706         rn_fds = 0;
1707         LIST_FOREACH(port, p, s->ports)
1708                 if (p->fd >= 0)
1709                         rn_fds++;
1710
1711         if (!(rfds = new(int, rn_fds)))
1712                 return -ENOMEM;
1713
1714         k = 0;
1715         LIST_FOREACH(port, p, s->ports)
1716                 if (p->fd >= 0)
1717                         rfds[k++] = p->fd;
1718
1719         assert(k == rn_fds);
1720
1721         *fds = rfds;
1722         *n_fds = rn_fds;
1723
1724         return 0;
1725 }
1726
1727 void socket_notify_service_dead(Socket *s) {
1728         assert(s);
1729
1730         /* The service is dead. Dang!
1731          *
1732          * This is strictly for one-instance-for-all-connections
1733          * services. */
1734
1735         if (s->state == SOCKET_RUNNING) {
1736                 log_debug("%s got notified about service death.", s->meta.id);
1737                 socket_enter_listening(s);
1738         }
1739 }
1740
1741 void socket_connection_unref(Socket *s) {
1742         assert(s);
1743
1744         /* The service is dead. Yay!
1745          *
1746          * This is strictly for one-onstance-per-connection
1747          * services. */
1748
1749         assert(s->n_connections > 0);
1750         s->n_connections--;
1751
1752         log_debug("%s: One connection closed, %u left.", s->meta.id, s->n_connections);
1753 }
1754
1755 static void socket_reset_failed(Unit *u) {
1756         Socket *s = SOCKET(u);
1757
1758         assert(s);
1759
1760         if (s->state == SOCKET_FAILED)
1761                 socket_set_state(s, SOCKET_DEAD);
1762
1763         s->failure = false;
1764 }
1765
1766 static const char* const socket_state_table[_SOCKET_STATE_MAX] = {
1767         [SOCKET_DEAD] = "dead",
1768         [SOCKET_START_PRE] = "start-pre",
1769         [SOCKET_START_POST] = "start-post",
1770         [SOCKET_LISTENING] = "listening",
1771         [SOCKET_RUNNING] = "running",
1772         [SOCKET_STOP_PRE] = "stop-pre",
1773         [SOCKET_STOP_PRE_SIGTERM] = "stop-pre-sigterm",
1774         [SOCKET_STOP_PRE_SIGKILL] = "stop-pre-sigkill",
1775         [SOCKET_STOP_POST] = "stop-post",
1776         [SOCKET_FINAL_SIGTERM] = "final-sigterm",
1777         [SOCKET_FINAL_SIGKILL] = "final-sigkill",
1778         [SOCKET_FAILED] = "failed"
1779 };
1780
1781 DEFINE_STRING_TABLE_LOOKUP(socket_state, SocketState);
1782
1783 static const char* const socket_exec_command_table[_SOCKET_EXEC_COMMAND_MAX] = {
1784         [SOCKET_EXEC_START_PRE] = "StartPre",
1785         [SOCKET_EXEC_START_POST] = "StartPost",
1786         [SOCKET_EXEC_STOP_PRE] = "StopPre",
1787         [SOCKET_EXEC_STOP_POST] = "StopPost"
1788 };
1789
1790 DEFINE_STRING_TABLE_LOOKUP(socket_exec_command, SocketExecCommand);
1791
1792 const UnitVTable socket_vtable = {
1793         .suffix = ".socket",
1794
1795         .init = socket_init,
1796         .done = socket_done,
1797         .load = socket_load,
1798
1799         .coldplug = socket_coldplug,
1800
1801         .dump = socket_dump,
1802
1803         .start = socket_start,
1804         .stop = socket_stop,
1805
1806         .serialize = socket_serialize,
1807         .deserialize_item = socket_deserialize_item,
1808
1809         .active_state = socket_active_state,
1810         .sub_state_to_string = socket_sub_state_to_string,
1811
1812         .check_gc = socket_check_gc,
1813
1814         .fd_event = socket_fd_event,
1815         .sigchld_event = socket_sigchld_event,
1816         .timer_event = socket_timer_event,
1817
1818         .reset_failed = socket_reset_failed,
1819
1820         .bus_interface = "org.freedesktop.systemd1.Socket",
1821         .bus_message_handler = bus_socket_message_handler,
1822         .bus_invalidating_properties =  bus_socket_invalidating_properties
1823 };