1 /*-*- Mode: C; c-basic-offset: 8; indent-tabs-mode: nil -*-*/
4 This file is part of systemd.
6 Copyright 2010 Lennart Poettering, Kay Sievers
8 systemd is free software; you can redistribute it and/or modify it
9 under the terms of the GNU Lesser General Public License as published by
10 the Free Software Foundation; either version 2.1 of the License, or
11 (at your option) any later version.
13 systemd is distributed in the hope that it will be useful, but
14 WITHOUT ANY WARRANTY; without even the implied warranty of
15 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
16 Lesser General Public License for more details.
18 You should have received a copy of the GNU Lesser General Public License
19 along with systemd; If not, see <http://www.gnu.org/licenses/>.
37 #include <sys/types.h>
38 #include <sys/param.h>
41 #include <sys/capability.h>
48 #include "path-util.h"
52 #include "conf-files.h"
53 #include "capability.h"
54 #include "specifier.h"
58 /* This reads all files listed in /etc/tmpfiles.d/?*.conf and creates
59 * them in the file system. This is intended to be used to create
60 * properly owned directories beneath /tmp, /var/tmp, /run, which are
61 * volatile and hence need to be recreated on bootup. */
63 typedef enum ItemType {
64 /* These ones take file names */
67 CREATE_DIRECTORY = 'd',
68 TRUNCATE_DIRECTORY = 'D',
71 CREATE_CHAR_DEVICE = 'c',
72 CREATE_BLOCK_DEVICE = 'b',
75 /* These ones take globs */
78 IGNORE_DIRECTORY_PATH = 'X',
80 RECURSIVE_REMOVE_PATH = 'R',
81 ADJUST_MODE = 'm', /* legacy, 'z' is identical to this */
83 RECURSIVE_RELABEL_PATH = 'Z',
104 bool keep_first_level:1;
109 static bool arg_create = false;
110 static bool arg_clean = false;
111 static bool arg_remove = false;
112 static bool arg_boot = false;
114 static char **arg_include_prefixes = NULL;
115 static char **arg_exclude_prefixes = NULL;
116 static char *arg_root = NULL;
118 static const char conf_file_dirs[] =
121 "/usr/local/lib/tmpfiles.d\0"
122 "/usr/lib/tmpfiles.d\0"
123 #ifdef HAVE_SPLIT_USR
128 #define MAX_DEPTH 256
130 static Hashmap *items = NULL, *globs = NULL;
131 static Set *unix_sockets = NULL;
133 static bool needs_glob(ItemType t) {
137 IGNORE_DIRECTORY_PATH,
139 RECURSIVE_REMOVE_PATH,
142 RECURSIVE_RELABEL_PATH);
145 static struct Item* find_glob(Hashmap *h, const char *match) {
149 HASHMAP_FOREACH(j, h, i)
150 if (fnmatch(j->path, match, FNM_PATHNAME|FNM_PERIOD) == 0)
156 static void load_unix_sockets(void) {
157 _cleanup_fclose_ FILE *f = NULL;
163 /* We maintain a cache of the sockets we found in
164 * /proc/net/unix to speed things up a little. */
166 unix_sockets = set_new(string_hash_func, string_compare_func);
170 f = fopen("/proc/net/unix", "re");
175 if (!fgets(line, sizeof(line), f))
182 if (!fgets(line, sizeof(line), f))
187 p = strchr(line, ':');
195 p += strspn(p, WHITESPACE);
196 p += strcspn(p, WHITESPACE); /* skip one more word */
197 p += strspn(p, WHITESPACE);
206 path_kill_slashes(s);
208 k = set_consume(unix_sockets, s);
209 if (k < 0 && k != -EEXIST)
216 set_free_free(unix_sockets);
220 static bool unix_socket_alive(const char *fn) {
226 return !!set_get(unix_sockets, (char*) fn);
228 /* We don't know, so assume yes */
232 static int dir_is_mount_point(DIR *d, const char *subdir) {
234 union file_handle_union h = {
235 .handle.handle_bytes = MAX_HANDLE_SZ
238 int mount_id_parent, mount_id;
241 r_p = name_to_handle_at(dirfd(d), ".", &h.handle, &mount_id_parent, 0);
245 h.handle.handle_bytes = MAX_HANDLE_SZ;
246 r = name_to_handle_at(dirfd(d), subdir, &h.handle, &mount_id, 0);
250 /* got no handle; make no assumptions, return error */
251 if (r_p < 0 && r < 0)
254 /* got both handles; if they differ, it is a mount point */
255 if (r_p >= 0 && r >= 0)
256 return mount_id_parent != mount_id;
258 /* got only one handle; assume different mount points if one
259 * of both queries was not supported by the filesystem */
260 if (r_p == -ENOSYS || r_p == -ENOTSUP || r == -ENOSYS || r == -ENOTSUP)
269 static int dir_cleanup(
273 const struct stat *ds,
278 bool keep_this_level) {
281 struct timespec times[2];
282 bool deleted = false;
285 while ((dent = readdir(d))) {
288 _cleanup_free_ char *sub_path = NULL;
290 if (streq(dent->d_name, ".") ||
291 streq(dent->d_name, ".."))
294 if (fstatat(dirfd(d), dent->d_name, &s, AT_SYMLINK_NOFOLLOW) < 0) {
298 /* FUSE, NFS mounts, SELinux might return EACCES */
300 log_debug("stat(%s/%s) failed: %m", p, dent->d_name);
302 log_error("stat(%s/%s) failed: %m", p, dent->d_name);
307 /* Stay on the same filesystem */
308 if (s.st_dev != rootdev)
311 /* Try to detect bind mounts of the same filesystem instance; they
312 * do not differ in device major/minors. This type of query is not
313 * supported on all kernels or filesystem types though. */
314 if (S_ISDIR(s.st_mode) && dir_is_mount_point(d, dent->d_name) > 0)
317 /* Do not delete read-only files owned by root */
318 if (s.st_uid == 0 && !(s.st_mode & S_IWUSR))
321 sub_path = strjoin(p, "/", dent->d_name, NULL);
327 /* Is there an item configured for this path? */
328 if (hashmap_get(items, sub_path))
331 if (find_glob(globs, sub_path))
334 if (S_ISDIR(s.st_mode)) {
337 streq(dent->d_name, "lost+found") &&
342 log_warning("Reached max depth on %s.", sub_path);
344 _cleanup_closedir_ DIR *sub_dir;
347 sub_dir = xopendirat(dirfd(d), dent->d_name, O_NOFOLLOW|O_NOATIME);
349 if (errno != ENOENT) {
350 log_error("opendir(%s/%s) failed: %m", p, dent->d_name);
357 q = dir_cleanup(i, sub_path, sub_dir, &s, cutoff, rootdev, false, maxdepth-1, false);
362 /* Note: if you are wondering why we don't
363 * support the sticky bit for excluding
364 * directories from cleaning like we do it for
365 * other file system objects: well, the sticky
366 * bit already has a meaning for directories,
367 * so we don't want to overload that. */
372 /* Ignore ctime, we change it when deleting */
373 age = MAX(timespec_load(&s.st_mtim),
374 timespec_load(&s.st_atim));
378 if (i->type != IGNORE_DIRECTORY_PATH || !streq(dent->d_name, p)) {
379 log_debug("rmdir '%s'", sub_path);
381 if (unlinkat(dirfd(d), dent->d_name, AT_REMOVEDIR) < 0) {
382 if (errno != ENOENT && errno != ENOTEMPTY) {
383 log_error("rmdir(%s): %m", sub_path);
390 /* Skip files for which the sticky bit is
391 * set. These are semantics we define, and are
392 * unknown elsewhere. See XDG_RUNTIME_DIR
393 * specification for details. */
394 if (s.st_mode & S_ISVTX)
397 if (mountpoint && S_ISREG(s.st_mode)) {
398 if (streq(dent->d_name, ".journal") &&
402 if (streq(dent->d_name, "aquota.user") ||
403 streq(dent->d_name, "aquota.group"))
407 /* Ignore sockets that are listed in /proc/net/unix */
408 if (S_ISSOCK(s.st_mode) && unix_socket_alive(sub_path))
411 /* Ignore device nodes */
412 if (S_ISCHR(s.st_mode) || S_ISBLK(s.st_mode))
415 /* Keep files on this level around if this is
420 age = MAX3(timespec_load(&s.st_mtim),
421 timespec_load(&s.st_atim),
422 timespec_load(&s.st_ctim));
427 log_debug("unlink '%s'", sub_path);
429 if (unlinkat(dirfd(d), dent->d_name, 0) < 0) {
430 if (errno != ENOENT) {
431 log_error("unlink(%s): %m", sub_path);
442 /* Restore original directory timestamps */
443 times[0] = ds->st_atim;
444 times[1] = ds->st_mtim;
446 if (futimens(dirfd(d), times) < 0)
447 log_error("utimensat(%s): %m", p);
453 static int item_set_perms(Item *i, const char *path) {
457 /* not using i->path directly because it may be a glob */
464 if (stat(path, &st) >= 0) {
465 if (!(st.st_mode & 0111))
467 if (!(st.st_mode & 0222))
469 if (!(st.st_mode & 0444))
471 if (!S_ISDIR(st.st_mode))
472 m &= ~07000; /* remove sticky/sgid/suid bit, unless directory */
476 if (chmod(path, m) < 0) {
477 log_error("chmod(%s) failed: %m", path);
482 if (i->uid_set || i->gid_set)
484 i->uid_set ? i->uid : (uid_t) -1,
485 i->gid_set ? i->gid : (gid_t) -1) < 0) {
487 log_error("chown(%s) failed: %m", path);
491 return label_fix(path, false, false);
494 static int write_one_file(Item *i, const char *path) {
503 flags = i->type == CREATE_FILE ? O_CREAT|O_APPEND :
504 i->type == TRUNCATE_FILE ? O_CREAT|O_TRUNC : 0;
507 label_context_set(path, S_IFREG);
508 fd = open(path, flags|O_NDELAY|O_CLOEXEC|O_WRONLY|O_NOCTTY|O_NOFOLLOW, i->mode);
509 label_context_clear();
513 if (i->type == WRITE_FILE && errno == ENOENT)
516 log_error("Failed to create file %s: %m", path);
521 _cleanup_free_ char *unescaped;
525 unescaped = cunescape(i->argument);
526 if (unescaped == NULL) {
531 l = strlen(unescaped);
532 n = write(fd, unescaped, l);
534 if (n < 0 || (size_t) n < l) {
535 log_error("Failed to write file %s: %s", path, n < 0 ? strerror(-n) : "Short write");
537 return n < 0 ? n : -EIO;
543 if (stat(path, &st) < 0) {
544 log_error("stat(%s) failed: %m", path);
548 if (!S_ISREG(st.st_mode)) {
549 log_error("%s is not a file.", path);
553 r = item_set_perms(i, path);
560 static int item_set_perms_children(Item *i, const char *path) {
561 _cleanup_closedir_ DIR *d;
567 /* This returns the first error we run into, but nevertheless
572 return errno == ENOENT || errno == ENOTDIR ? 0 : -errno;
575 _cleanup_free_ char *p = NULL;
582 if (errno != 0 && r == 0)
588 if (streq(de->d_name, ".") || streq(de->d_name, ".."))
591 p = strjoin(path, "/", de->d_name, NULL);
595 q = item_set_perms(i, p);
596 if (q < 0 && q != -ENOENT && r == 0)
599 if (IN_SET(de->d_type, DT_UNKNOWN, DT_DIR)) {
600 q = item_set_perms_children(i, p);
609 static int item_set_perms_recursive(Item *i, const char *path) {
615 r = item_set_perms(i, path);
619 q = item_set_perms_children(i, path);
626 static int glob_item(Item *i, int (*action)(Item *, const char *)) {
627 _cleanup_globfree_ glob_t g = {};
632 k = glob(i->path, GLOB_NOSORT|GLOB_BRACE, NULL, &g);
633 if (k != 0 && k != GLOB_NOMATCH) {
637 log_error("glob(%s) failed: %m", i->path);
641 STRV_FOREACH(fn, g.gl_pathv) {
650 static int create_item(Item *i) {
659 case IGNORE_DIRECTORY_PATH:
661 case RECURSIVE_REMOVE_PATH:
666 r = write_one_file(i, i->path);
672 r = copy_tree(i->argument, i->path);
674 log_error("Failed to copy files: %s", strerror(-r));
678 r = item_set_perms(i, i->path);
685 r = glob_item(i, write_one_file);
691 case TRUNCATE_DIRECTORY:
692 case CREATE_DIRECTORY:
694 RUN_WITH_UMASK(0000) {
695 mkdir_parents_label(i->path, 0755);
696 r = mkdir(i->path, i->mode);
699 if (r < 0 && errno != EEXIST) {
700 log_error("Failed to create directory %s: %m", i->path);
704 if (stat(i->path, &st) < 0) {
705 log_error("stat(%s) failed: %m", i->path);
709 if (!S_ISDIR(st.st_mode)) {
710 log_error("%s is not a directory.", i->path);
714 r = item_set_perms(i, i->path);
722 RUN_WITH_UMASK(0000) {
723 r = mkfifo(i->path, i->mode);
726 if (r < 0 && errno != EEXIST) {
727 log_error("Failed to create fifo %s: %m", i->path);
731 if (stat(i->path, &st) < 0) {
732 log_error("stat(%s) failed: %m", i->path);
736 if (!S_ISFIFO(st.st_mode)) {
737 log_error("%s is not a fifo.", i->path);
741 r = item_set_perms(i, i->path);
747 case CREATE_SYMLINK: {
748 _cleanup_free_ char *x = NULL;
750 label_context_set(i->path, S_IFLNK);
751 r = symlink(i->argument, i->path);
752 label_context_clear();
754 if (r < 0 && errno != EEXIST) {
755 log_error("symlink(%s, %s) failed: %m", i->argument, i->path);
759 r = readlink_malloc(i->path, &x);
761 log_error("readlink(%s) failed: %s", i->path, strerror(-r));
765 if (!streq(i->argument, x)) {
766 log_error("%s is not the right symlink.", i->path);
773 case CREATE_BLOCK_DEVICE:
774 case CREATE_CHAR_DEVICE: {
777 if (have_effective_cap(CAP_MKNOD) == 0) {
778 /* In a container we lack CAP_MKNOD. We
779 shouldn't attempt to create the device node in
780 that case to avoid noise, and we don't support
781 virtualized devices in containers anyway. */
783 log_debug("We lack CAP_MKNOD, skipping creation of device node %s.", i->path);
787 file_type = (i->type == CREATE_BLOCK_DEVICE ? S_IFBLK : S_IFCHR);
789 RUN_WITH_UMASK(0000) {
790 label_context_set(i->path, file_type);
791 r = mknod(i->path, i->mode | file_type, i->major_minor);
792 label_context_clear();
796 if (errno == EPERM) {
797 log_debug("We lack permissions, possibly because of cgroup configuration; "
798 "skipping creation of device node %s.", i->path);
802 if (errno != EEXIST) {
803 log_error("Failed to create device node %s: %m", i->path);
808 if (stat(i->path, &st) < 0) {
809 log_error("stat(%s) failed: %m", i->path);
813 if ((st.st_mode & S_IFMT) != file_type) {
814 log_error("%s is not a device node.", i->path);
818 r = item_set_perms(i, i->path);
828 r = glob_item(i, item_set_perms);
833 case RECURSIVE_RELABEL_PATH:
835 r = glob_item(i, item_set_perms_recursive);
842 log_debug("%s created successfully.", i->path);
847 static int remove_item_instance(Item *i, const char *instance) {
856 case CREATE_DIRECTORY:
859 case CREATE_BLOCK_DEVICE:
860 case CREATE_CHAR_DEVICE:
862 case IGNORE_DIRECTORY_PATH:
865 case RECURSIVE_RELABEL_PATH:
871 if (remove(instance) < 0 && errno != ENOENT) {
872 log_error("remove(%s): %m", instance);
878 case TRUNCATE_DIRECTORY:
879 case RECURSIVE_REMOVE_PATH:
880 /* FIXME: we probably should use dir_cleanup() here
881 * instead of rm_rf() so that 'x' is honoured. */
882 r = rm_rf_dangerous(instance, false, i->type == RECURSIVE_REMOVE_PATH, false);
883 if (r < 0 && r != -ENOENT) {
884 log_error("rm_rf(%s): %s", instance, strerror(-r));
894 static int remove_item(Item *i) {
903 case CREATE_DIRECTORY:
906 case CREATE_CHAR_DEVICE:
907 case CREATE_BLOCK_DEVICE:
909 case IGNORE_DIRECTORY_PATH:
912 case RECURSIVE_RELABEL_PATH:
918 case TRUNCATE_DIRECTORY:
919 case RECURSIVE_REMOVE_PATH:
920 r = glob_item(i, remove_item_instance);
927 static int clean_item_instance(Item *i, const char* instance) {
928 _cleanup_closedir_ DIR *d = NULL;
939 n = now(CLOCK_REALTIME);
945 d = opendir(instance);
947 if (errno == ENOENT || errno == ENOTDIR)
950 log_error("Failed to open directory %s: %m", i->path);
954 if (fstat(dirfd(d), &s) < 0) {
955 log_error("stat(%s) failed: %m", i->path);
959 if (!S_ISDIR(s.st_mode)) {
960 log_error("%s is not a directory.", i->path);
964 if (fstatat(dirfd(d), "..", &ps, AT_SYMLINK_NOFOLLOW) != 0) {
965 log_error("stat(%s/..) failed: %m", i->path);
969 mountpoint = s.st_dev != ps.st_dev ||
970 (s.st_dev == ps.st_dev && s.st_ino == ps.st_ino);
972 r = dir_cleanup(i, instance, d, &s, cutoff, s.st_dev, mountpoint,
973 MAX_DEPTH, i->keep_first_level);
977 static int clean_item(Item *i) {
983 case CREATE_DIRECTORY:
984 case TRUNCATE_DIRECTORY:
987 clean_item_instance(i, i->path);
989 case IGNORE_DIRECTORY_PATH:
990 r = glob_item(i, clean_item_instance);
999 static int process_item(Item *i) {
1001 char prefix[PATH_MAX];
1010 PATH_FOREACH_PREFIX(prefix, i->path) {
1013 j = hashmap_get(items, prefix);
1018 r = arg_create ? create_item(i) : 0;
1019 q = arg_remove ? remove_item(i) : 0;
1020 p = arg_clean ? clean_item(i) : 0;
1031 static void item_free(Item *i) {
1041 DEFINE_TRIVIAL_CLEANUP_FUNC(Item*, item_free);
1043 static bool item_equal(Item *a, Item *b) {
1047 if (!streq_ptr(a->path, b->path))
1050 if (a->type != b->type)
1053 if (a->uid_set != b->uid_set ||
1054 (a->uid_set && a->uid != b->uid))
1057 if (a->gid_set != b->gid_set ||
1058 (a->gid_set && a->gid != b->gid))
1061 if (a->mode_set != b->mode_set ||
1062 (a->mode_set && a->mode != b->mode))
1065 if (a->age_set != b->age_set ||
1066 (a->age_set && a->age != b->age))
1069 if ((a->type == CREATE_FILE ||
1070 a->type == TRUNCATE_FILE ||
1071 a->type == WRITE_FILE ||
1072 a->type == CREATE_SYMLINK ||
1073 a->type == COPY_FILES) &&
1074 !streq_ptr(a->argument, b->argument))
1077 if ((a->type == CREATE_CHAR_DEVICE ||
1078 a->type == CREATE_BLOCK_DEVICE) &&
1079 a->major_minor != b->major_minor)
1085 static bool should_include_path(const char *path) {
1088 STRV_FOREACH(prefix, arg_exclude_prefixes)
1089 if (path_startswith(path, *prefix))
1092 STRV_FOREACH(prefix, arg_include_prefixes)
1093 if (path_startswith(path, *prefix))
1096 /* no matches, so we should include this path only if we
1097 * have no whitelist at all */
1098 return strv_length(arg_include_prefixes) == 0;
1101 static int parse_line(const char *fname, unsigned line, const char *buffer) {
1103 static const Specifier specifier_table[] = {
1104 { 'm', specifier_machine_id, NULL },
1105 { 'b', specifier_boot_id, NULL },
1106 { 'H', specifier_host_name, NULL },
1107 { 'v', specifier_kernel_release, NULL },
1111 _cleanup_free_ char *action = NULL, *mode = NULL, *user = NULL, *group = NULL, *age = NULL, *path = NULL;
1112 _cleanup_(item_freep) Item *i = NULL;
1123 "%ms %ms %ms %ms %ms %ms %n",
1132 log_error("[%s:%u] Syntax error.", fname, line);
1136 if (strlen(action) > 2 || (strlen(action) > 1 && action[1] != '!')) {
1137 log_error("[%s:%u] Unknown modifier '%s'", fname, line, action);
1139 } else if (strlen(action) > 1 && !arg_boot)
1148 r = specifier_printf(path, specifier_table, NULL, &i->path);
1150 log_error("[%s:%u] Failed to replace specifiers: %s", fname, line, path);
1155 n += strspn(buffer+n, WHITESPACE);
1156 if (buffer[n] != 0 && (buffer[n] != '-' || buffer[n+1] != 0)) {
1157 i->argument = unquote(buffer+n, "\"");
1167 case CREATE_DIRECTORY:
1168 case TRUNCATE_DIRECTORY:
1171 case IGNORE_DIRECTORY_PATH:
1173 case RECURSIVE_REMOVE_PATH:
1176 case RECURSIVE_RELABEL_PATH:
1179 case CREATE_SYMLINK:
1181 log_error("[%s:%u] Symlink file requires argument.", fname, line);
1189 log_error("[%s:%u] Write file requires argument.", fname, line);
1196 log_error("[%s:%u] Copy files requires argument.", fname, line);
1200 if (!path_is_absolute(i->argument)) {
1201 log_error("[%s:%u] Source path is not absolute.", fname, line);
1205 path_kill_slashes(i->argument);
1208 case CREATE_CHAR_DEVICE:
1209 case CREATE_BLOCK_DEVICE: {
1210 unsigned major, minor;
1213 log_error("[%s:%u] Device file requires argument.", fname, line);
1217 if (sscanf(i->argument, "%u:%u", &major, &minor) != 2) {
1218 log_error("[%s:%u] Can't parse device file major/minor '%s'.", fname, line, i->argument);
1222 i->major_minor = makedev(major, minor);
1227 log_error("[%s:%u] Unknown command type '%c'.", fname, line, type);
1233 if (!path_is_absolute(i->path)) {
1234 log_error("[%s:%u] Path '%s' not absolute.", fname, line, i->path);
1238 path_kill_slashes(i->path);
1240 if (!should_include_path(i->path))
1246 p = strappend(arg_root, i->path);
1254 if (user && !streq(user, "-")) {
1255 const char *u = user;
1257 r = get_user_creds(&u, &i->uid, NULL, NULL, NULL);
1259 log_error("[%s:%u] Unknown user '%s'.", fname, line, user);
1266 if (group && !streq(group, "-")) {
1267 const char *g = group;
1269 r = get_group_creds(&g, &i->gid);
1271 log_error("[%s:%u] Unknown group '%s'.", fname, line, group);
1278 if (mode && !streq(mode, "-")) {
1279 const char *mm = mode;
1283 i->mask_perms = true;
1287 if (sscanf(mm, "%o", &m) != 1) {
1288 log_error("[%s:%u] Invalid mode '%s'.", fname, line, mode);
1296 i->type == CREATE_DIRECTORY ||
1297 i->type == TRUNCATE_DIRECTORY ? 0755 : 0644;
1299 if (age && !streq(age, "-")) {
1300 const char *a = age;
1303 i->keep_first_level = true;
1307 if (parse_sec(a, &i->age) < 0) {
1308 log_error("[%s:%u] Invalid age '%s'.", fname, line, age);
1315 h = needs_glob(i->type) ? globs : items;
1317 existing = hashmap_get(h, i->path);
1320 /* Two identical items are fine */
1321 if (!item_equal(existing, i))
1322 log_warning("Two or more conflicting lines for %s configured, ignoring.", i->path);
1327 r = hashmap_put(h, i->path, i);
1329 log_error("Failed to insert item %s: %s", i->path, strerror(-r));
1333 i = NULL; /* avoid cleanup */
1338 static int help(void) {
1340 printf("%s [OPTIONS...] [CONFIGURATION FILE...]\n\n"
1341 "Creates, deletes and cleans up volatile and temporary files and directories.\n\n"
1342 " -h --help Show this help\n"
1343 " --version Show package version\n"
1344 " --create Create marked files/directories\n"
1345 " --clean Clean up marked directories\n"
1346 " --remove Remove marked files/directories\n"
1347 " --boot Execute actions only safe at boot\n"
1348 " --prefix=PATH Only apply rules that apply to paths with the specified prefix\n"
1349 " --exclude-prefix=PATH Ignore rules that apply to paths with the specified prefix\n"
1350 " --root=PATH Operate on an alternate filesystem root\n",
1351 program_invocation_short_name);
1356 static int parse_argv(int argc, char *argv[]) {
1359 ARG_VERSION = 0x100,
1369 static const struct option options[] = {
1370 { "help", no_argument, NULL, 'h' },
1371 { "version", no_argument, NULL, ARG_VERSION },
1372 { "create", no_argument, NULL, ARG_CREATE },
1373 { "clean", no_argument, NULL, ARG_CLEAN },
1374 { "remove", no_argument, NULL, ARG_REMOVE },
1375 { "boot", no_argument, NULL, ARG_BOOT },
1376 { "prefix", required_argument, NULL, ARG_PREFIX },
1377 { "exclude-prefix", required_argument, NULL, ARG_EXCLUDE_PREFIX },
1378 { "root", required_argument, NULL, ARG_ROOT },
1387 while ((c = getopt_long(argc, argv, "h", options, NULL)) >= 0) {
1395 puts(PACKAGE_STRING);
1396 puts(SYSTEMD_FEATURES);
1416 if (strv_push(&arg_include_prefixes, optarg) < 0)
1420 case ARG_EXCLUDE_PREFIX:
1421 if (strv_push(&arg_exclude_prefixes, optarg) < 0)
1427 arg_root = path_make_absolute_cwd(optarg);
1431 path_kill_slashes(arg_root);
1438 assert_not_reached("Unhandled option");
1442 if (!arg_clean && !arg_create && !arg_remove) {
1443 log_error("You need to specify at least one of --clean, --create or --remove.");
1450 static int read_config_file(const char *fn, bool ignore_enoent) {
1451 _cleanup_fclose_ FILE *f = NULL;
1452 char line[LINE_MAX];
1460 r = search_and_fopen_nulstr(fn, "re", arg_root, conf_file_dirs, &f);
1462 if (ignore_enoent && r == -ENOENT)
1465 log_error("Failed to open '%s', ignoring: %s", fn, strerror(-r));
1469 FOREACH_LINE(line, f, break) {
1476 if (*l == '#' || *l == 0)
1479 k = parse_line(fn, v, l);
1480 if (k < 0 && r == 0)
1484 /* we have to determine age parameter for each entry of type X */
1485 HASHMAP_FOREACH(i, globs, iterator) {
1487 Item *j, *candidate_item = NULL;
1489 if (i->type != IGNORE_DIRECTORY_PATH)
1492 HASHMAP_FOREACH(j, items, iter) {
1493 if (j->type != CREATE_DIRECTORY && j->type != TRUNCATE_DIRECTORY)
1496 if (path_equal(j->path, i->path)) {
1501 if ((!candidate_item && path_startswith(i->path, j->path)) ||
1502 (candidate_item && path_startswith(j->path, candidate_item->path) && (fnmatch(i->path, j->path, FNM_PATHNAME | FNM_PERIOD) == 0)))
1506 if (candidate_item) {
1507 i->age = candidate_item->age;
1513 log_error("Failed to read from file %s: %m", fn);
1521 int main(int argc, char *argv[]) {
1526 r = parse_argv(argc, argv);
1530 log_set_target(LOG_TARGET_AUTO);
1531 log_parse_environment();
1538 items = hashmap_new(string_hash_func, string_compare_func);
1539 globs = hashmap_new(string_hash_func, string_compare_func);
1541 if (!items || !globs) {
1548 if (optind < argc) {
1551 for (j = optind; j < argc; j++) {
1552 k = read_config_file(argv[j], false);
1553 if (k < 0 && r == 0)
1558 _cleanup_strv_free_ char **files = NULL;
1561 r = conf_files_list_nulstr(&files, ".conf", arg_root, conf_file_dirs);
1563 log_error("Failed to enumerate tmpfiles.d files: %s", strerror(-r));
1567 STRV_FOREACH(f, files) {
1568 k = read_config_file(*f, true);
1569 if (k < 0 && r == 0)
1574 HASHMAP_FOREACH(i, globs, iterator)
1577 HASHMAP_FOREACH(i, items, iterator)
1581 while ((i = hashmap_steal_first(items)))
1584 while ((i = hashmap_steal_first(globs)))
1587 hashmap_free(items);
1588 hashmap_free(globs);
1590 free(arg_include_prefixes);
1591 free(arg_exclude_prefixes);
1594 set_free_free(unix_sockets);
1598 return r < 0 ? EXIT_FAILURE : EXIT_SUCCESS;