X-Git-Url: http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=elogind.git;a=blobdiff_plain;f=src%2Flogin%2Flogind-dbus.c;h=a6cc9be669d9c16462e7637cb69d65bd2a78bc99;hp=68e499f52c1fb9f9aff406cafcbd1d9db330f6b7;hb=425afb81685af43de63b2bb4293728a13d3a53d5;hpb=842865365e598a090045894f8990fd384e801ccb diff --git a/src/login/logind-dbus.c b/src/login/logind-dbus.c index 68e499f52..a6cc9be66 100644 --- a/src/login/logind-dbus.c +++ b/src/login/logind-dbus.c @@ -24,574 +24,695 @@ #include #include -#include "logind.h" -#include "dbus-common.h" +#include "sd-messages.h" #include "strv.h" #include "mkdir.h" #include "path-util.h" -#include "polkit.h" #include "special.h" -#include "systemd/sd-id128.h" -#include "systemd/sd-messages.h" +#include "sleep-config.h" #include "fileio-label.h" -#include "label.h" - -#define BUS_MANAGER_INTERFACE \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" - -#define INTROSPECTION_BEGIN \ - DBUS_INTROSPECT_1_0_XML_DOCTYPE_DECL_NODE \ - "\n" \ - BUS_MANAGER_INTERFACE \ - BUS_PROPERTIES_INTERFACE \ - BUS_PEER_INTERFACE \ - BUS_INTROSPECTABLE_INTERFACE - -#define INTROSPECTION_END \ - "\n" - -#define INTERFACES_LIST \ - BUS_GENERIC_INTERFACES_LIST \ - "org.freedesktop.login1.Manager\0" - -static int bus_manager_append_idle_hint(DBusMessageIter *i, const char *property, void *data) { - Manager *m = data; - dbus_bool_t b; - - assert(i); - assert(property); +#include "unit-name.h" +#include "audit.h" +#include "bus-util.h" +#include "bus-error.h" +#include "bus-common-errors.h" +#include "udev-util.h" +#include "selinux-util.h" +#include "efivars.h" +#include "logind.h" + +int manager_get_session_from_creds(Manager *m, sd_bus_message *message, const char *name, sd_bus_error *error, Session **ret) { + _cleanup_bus_creds_unref_ sd_bus_creds *creds = NULL; + Session *session; + int r; + assert(m); + assert(message); + assert(ret); - b = manager_get_idle_hint(m, NULL) > 0; - if (!dbus_message_iter_append_basic(i, DBUS_TYPE_BOOLEAN, &b)) - return -ENOMEM; + if (isempty(name)) { + r = sd_bus_query_sender_creds(message, SD_BUS_CREDS_SESSION|SD_BUS_CREDS_AUGMENT, &creds); + if (r < 0) + return r; + + r = sd_bus_creds_get_session(creds, &name); + if (r < 0) + return r; + } + session = hashmap_get(m->sessions, name); + if (!session) + return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_SESSION, "No session '%s' known", name); + + *ret = session; return 0; } -static int bus_manager_append_idle_hint_since(DBusMessageIter *i, const char *property, void *data) { - Manager *m = data; - dual_timestamp t; - uint64_t u; +int manager_get_user_from_creds(Manager *m, sd_bus_message *message, uid_t uid, sd_bus_error *error, User **ret) { + User *user; + int r; - assert(i); - assert(property); assert(m); + assert(message); + assert(ret); - manager_get_idle_hint(m, &t); - u = streq(property, "IdleSinceHint") ? t.realtime : t.monotonic; + if (uid == UID_INVALID) { + _cleanup_bus_creds_unref_ sd_bus_creds *creds = NULL; - if (!dbus_message_iter_append_basic(i, DBUS_TYPE_UINT64, &u)) - return -ENOMEM; + /* Note that we get the owner UID of the session, not the actual client UID here! */ + r = sd_bus_query_sender_creds(message, SD_BUS_CREDS_OWNER_UID|SD_BUS_CREDS_AUGMENT, &creds); + if (r < 0) + return r; + + r = sd_bus_creds_get_owner_uid(creds, &uid); + if (r < 0) + return r; + } + user = hashmap_get(m->users, UID_TO_PTR(uid)); + if (!user) + return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_USER, "No user "UID_FMT" known or logged in", uid); + + *ret = user; return 0; } -static int bus_manager_append_inhibited(DBusMessageIter *i, const char *property, void *data) { - Manager *m = data; - InhibitWhat w; - const char *p; +int manager_get_seat_from_creds(Manager *m, sd_bus_message *message, const char *name, sd_bus_error *error, Seat **ret) { + Seat *seat; + int r; - w = manager_inhibit_what(m, streq(property, "BlockInhibited") ? INHIBIT_BLOCK : INHIBIT_DELAY); - p = inhibit_what_to_string(w); + assert(m); + assert(message); + assert(ret); - if (!dbus_message_iter_append_basic(i, DBUS_TYPE_STRING, &p)) - return -ENOMEM; + if (isempty(name)) { + Session *session; + + r = manager_get_session_from_creds(m, message, NULL, error, &session); + if (r < 0) + return r; + + seat = session->seat; + + if (!seat) + return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_SEAT, "Session has no seat."); + } else { + seat = hashmap_get(m->seats, name); + if (!seat) + return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_SEAT, "No seat '%s' known", name); + } + *ret = seat; return 0; } -static int bus_manager_append_preparing(DBusMessageIter *i, const char *property, void *data) { - Manager *m = data; - dbus_bool_t b; +static int property_get_idle_hint( + sd_bus *bus, + const char *path, + const char *interface, + const char *property, + sd_bus_message *reply, + void *userdata, + sd_bus_error *error) { - assert(i); - assert(property); + Manager *m = userdata; - if (streq(property, "PreparingForShutdown")) - b = !!(m->action_what & INHIBIT_SHUTDOWN); - else - b = !!(m->action_what & INHIBIT_SLEEP); + assert(bus); + assert(reply); + assert(m); - dbus_message_iter_append_basic(i, DBUS_TYPE_BOOLEAN, &b); - return 0; + return sd_bus_message_append(reply, "b", manager_get_idle_hint(m, NULL) > 0); } -static int bus_manager_create_session(Manager *m, DBusMessage *message, DBusMessage **_reply) { - const char *type, *class, *cseat, *tty, *display, *remote_user, *remote_host, *service; - uint32_t uid, leader, audit_id = 0; - dbus_bool_t remote, kill_processes, exists; - _cleanup_strv_free_ char **controllers = NULL, **reset_controllers = NULL; - _cleanup_free_ char *cgroup = NULL, *id = NULL, *p = NULL; - SessionType t; - SessionClass c; - DBusMessageIter iter; - int r; - uint32_t vtnr = 0; - _cleanup_close_ int fifo_fd = -1; - _cleanup_dbus_message_unref_ DBusMessage *reply = NULL; - Session *session = NULL; - User *user = NULL; - Seat *seat = NULL; - bool b; +static int property_get_idle_since_hint( + sd_bus *bus, + const char *path, + const char *interface, + const char *property, + sd_bus_message *reply, + void *userdata, + sd_bus_error *error) { + + Manager *m = userdata; + dual_timestamp t; + assert(bus); + assert(reply); assert(m); - assert(message); - assert(_reply); - if (!dbus_message_iter_init(message, &iter) || - dbus_message_iter_get_arg_type(&iter) != DBUS_TYPE_UINT32) - return -EINVAL; + manager_get_idle_hint(m, &t); - dbus_message_iter_get_basic(&iter, &uid); + return sd_bus_message_append(reply, "t", streq(property, "IdleSinceHint") ? t.realtime : t.monotonic); +} - if (!dbus_message_iter_next(&iter) || - dbus_message_iter_get_arg_type(&iter) != DBUS_TYPE_UINT32) - return -EINVAL; +static int property_get_inhibited( + sd_bus *bus, + const char *path, + const char *interface, + const char *property, + sd_bus_message *reply, + void *userdata, + sd_bus_error *error) { - dbus_message_iter_get_basic(&iter, &leader); + Manager *m = userdata; + InhibitWhat w; - if (leader <= 0 || - !dbus_message_iter_next(&iter) || - dbus_message_iter_get_arg_type(&iter) != DBUS_TYPE_STRING) - return -EINVAL; + assert(bus); + assert(reply); + assert(m); - dbus_message_iter_get_basic(&iter, &service); + w = manager_inhibit_what(m, streq(property, "BlockInhibited") ? INHIBIT_BLOCK : INHIBIT_DELAY); - if (!dbus_message_iter_next(&iter) || - dbus_message_iter_get_arg_type(&iter) != DBUS_TYPE_STRING) - return -EINVAL; + return sd_bus_message_append(reply, "s", inhibit_what_to_string(w)); +} - dbus_message_iter_get_basic(&iter, &type); - if (isempty(type)) - t = _SESSION_TYPE_INVALID; - else { - t = session_type_from_string(type); - if (t < 0) - return -EINVAL; - } +static int property_get_preparing( + sd_bus *bus, + const char *path, + const char *interface, + const char *property, + sd_bus_message *reply, + void *userdata, + sd_bus_error *error) { - if (!dbus_message_iter_next(&iter) || - dbus_message_iter_get_arg_type(&iter) != DBUS_TYPE_STRING) - return -EINVAL; + Manager *m = userdata; + bool b; - dbus_message_iter_get_basic(&iter, &class); - if (isempty(class)) - c = _SESSION_CLASS_INVALID; - else { - c = session_class_from_string(class); - if (c < 0) - return -EINVAL; - } + assert(bus); + assert(reply); + assert(m); - if (!dbus_message_iter_next(&iter) || - dbus_message_iter_get_arg_type(&iter) != DBUS_TYPE_STRING) - return -EINVAL; + if (streq(property, "PreparingForShutdown")) + b = !!(m->action_what & INHIBIT_SHUTDOWN); + else + b = !!(m->action_what & INHIBIT_SLEEP); - dbus_message_iter_get_basic(&iter, &cseat); + return sd_bus_message_append(reply, "b", b); +} - if (isempty(cseat)) - seat = NULL; - else { - seat = hashmap_get(m->seats, cseat); - if (!seat) - return -ENOENT; - } +static BUS_DEFINE_PROPERTY_GET_ENUM(property_get_handle_action, handle_action, HandleAction); - if (!dbus_message_iter_next(&iter) || - dbus_message_iter_get_arg_type(&iter) != DBUS_TYPE_UINT32) - return -EINVAL; +static int method_get_session(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) { + _cleanup_free_ char *p = NULL; + Manager *m = userdata; + const char *name; + Session *session; + int r; - dbus_message_iter_get_basic(&iter, &vtnr); + assert(bus); + assert(message); + assert(m); - if (!dbus_message_iter_next(&iter) || - dbus_message_iter_get_arg_type(&iter) != DBUS_TYPE_STRING) - return -EINVAL; + r = sd_bus_message_read(message, "s", &name); + if (r < 0) + return r; - dbus_message_iter_get_basic(&iter, &tty); + r = manager_get_session_from_creds(m, message, name, error, &session); + if (r < 0) + return r; - if (tty_is_vc(tty)) { - int v; + p = session_bus_path(session); + if (!p) + return -ENOMEM; - if (!seat) - seat = m->vtconsole; - else if (seat != m->vtconsole) - return -EINVAL; + return sd_bus_reply_method_return(message, "o", p); +} - v = vtnr_from_tty(tty); +static int method_get_session_by_pid(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) { + _cleanup_free_ char *p = NULL; + Session *session = NULL; + Manager *m = userdata; + pid_t pid; + int r; - if (v <= 0) - return v < 0 ? v : -EINVAL; + assert(bus); + assert(message); + assert(m); - if (vtnr <= 0) - vtnr = (uint32_t) v; - else if (vtnr != (uint32_t) v) - return -EINVAL; - } else if (tty_is_console(tty)) { + assert_cc(sizeof(pid_t) == sizeof(uint32_t)); - if (!seat) - seat = m->vtconsole; - else if (seat != m->vtconsole) - return -EINVAL; + r = sd_bus_message_read(message, "u", &pid); + if (r < 0) + return r; - if (vtnr != 0) - return -EINVAL; - } + if (pid <= 0) { + r = manager_get_session_from_creds(m, message, NULL, error, &session); + if (r < 0) + return r; + } else { + r = manager_get_session_by_pid(m, pid, &session); + if (r < 0) + return r; - if (seat) { - if (seat_can_multi_session(seat)) { - if (vtnr > 63) - return -EINVAL; - } else { - if (vtnr != 0) - return -EINVAL; - } + if (!session) + return sd_bus_error_setf(error, BUS_ERROR_NO_SESSION_FOR_PID, "PID "PID_FMT" does not belong to any known session", pid); } - if (!dbus_message_iter_next(&iter) || - dbus_message_iter_get_arg_type(&iter) != DBUS_TYPE_STRING) - return -EINVAL; + p = session_bus_path(session); + if (!p) + return -ENOMEM; - dbus_message_iter_get_basic(&iter, &display); + return sd_bus_reply_method_return(message, "o", p); +} - if (!dbus_message_iter_next(&iter) || - dbus_message_iter_get_arg_type(&iter) != DBUS_TYPE_BOOLEAN) - return -EINVAL; +static int method_get_user(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) { + _cleanup_free_ char *p = NULL; + Manager *m = userdata; + uint32_t uid; + User *user; + int r; - if (t == _SESSION_TYPE_INVALID) { - if (!isempty(display)) - t = SESSION_X11; - else if (!isempty(tty)) - t = SESSION_TTY; - else - t = SESSION_UNSPECIFIED; - } + assert(bus); + assert(message); + assert(m); - if (c == _SESSION_CLASS_INVALID) { - if (!isempty(display) || !isempty(tty)) - c = SESSION_USER; - else - c = SESSION_BACKGROUND; - } + r = sd_bus_message_read(message, "u", &uid); + if (r < 0) + return r; - dbus_message_iter_get_basic(&iter, &remote); + r = manager_get_user_from_creds(m, message, uid, error, &user); + if (r < 0) + return r; - if (!dbus_message_iter_next(&iter) || - dbus_message_iter_get_arg_type(&iter) != DBUS_TYPE_STRING) - return -EINVAL; + p = user_bus_path(user); + if (!p) + return -ENOMEM; - dbus_message_iter_get_basic(&iter, &remote_user); + return sd_bus_reply_method_return(message, "o", p); +} - if (!dbus_message_iter_next(&iter) || - dbus_message_iter_get_arg_type(&iter) != DBUS_TYPE_STRING) - return -EINVAL; +static int method_get_user_by_pid(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) { + _cleanup_free_ char *p = NULL; + Manager *m = userdata; + User *user = NULL; + pid_t pid; + int r; - dbus_message_iter_get_basic(&iter, &remote_host); + assert(bus); + assert(message); + assert(m); - if (!dbus_message_iter_next(&iter) || - dbus_message_iter_get_arg_type(&iter) != DBUS_TYPE_ARRAY || - dbus_message_iter_get_element_type(&iter) != DBUS_TYPE_STRING) - return -EINVAL; + assert_cc(sizeof(pid_t) == sizeof(uint32_t)); - r = bus_parse_strv_iter(&iter, &controllers); + r = sd_bus_message_read(message, "u", &pid); if (r < 0) - return -EINVAL; + return r; - if (!dbus_message_iter_next(&iter) || - dbus_message_iter_get_arg_type(&iter) != DBUS_TYPE_ARRAY || - dbus_message_iter_get_element_type(&iter) != DBUS_TYPE_STRING) { - r = -EINVAL; - goto fail; + if (pid <= 0) { + r = manager_get_user_from_creds(m, message, UID_INVALID, error, &user); + if (r < 0) + return r; + } else { + r = manager_get_user_by_pid(m, pid, &user); + if (r < 0) + return r; + if (!user) + return sd_bus_error_setf(error, BUS_ERROR_NO_USER_FOR_PID, "PID "PID_FMT" does not belong to any known or logged in user", pid); } - r = bus_parse_strv_iter(&iter, &reset_controllers); - if (r < 0) - goto fail; + p = user_bus_path(user); + if (!p) + return -ENOMEM; - if (!dbus_message_iter_next(&iter) || - dbus_message_iter_get_arg_type(&iter) != DBUS_TYPE_BOOLEAN) { - r = -EINVAL; - goto fail; - } + return sd_bus_reply_method_return(message, "o", p); +} - dbus_message_iter_get_basic(&iter, &kill_processes); +static int method_get_seat(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) { + _cleanup_free_ char *p = NULL; + Manager *m = userdata; + const char *name; + Seat *seat; + int r; + + assert(bus); + assert(message); + assert(m); - r = cg_pid_get_path(SYSTEMD_CGROUP_CONTROLLER, leader, &cgroup); + r = sd_bus_message_read(message, "s", &name); if (r < 0) - goto fail; + return r; - r = manager_get_session_by_cgroup(m, cgroup, &session); + r = manager_get_seat_from_creds(m, message, name, error, &seat); if (r < 0) - goto fail; + return r; - if (session) { - fifo_fd = session_create_fifo(session); - if (fifo_fd < 0) { - r = fifo_fd; - goto fail; - } + p = seat_bus_path(seat); + if (!p) + return -ENOMEM; - /* Session already exists, client is probably - * something like "su" which changes uid but - * is still the same audit session */ + return sd_bus_reply_method_return(message, "o", p); +} - reply = dbus_message_new_method_return(message); - if (!reply) { - r = -ENOMEM; - goto fail; - } +static int method_list_sessions(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) { + _cleanup_bus_message_unref_ sd_bus_message *reply = NULL; + Manager *m = userdata; + Session *session; + Iterator i; + int r; - p = session_bus_path(session); - if (!p) { - r = -ENOMEM; - goto fail; - } + assert(bus); + assert(message); + assert(m); - cseat = session->seat ? session->seat->id : ""; - vtnr = session->vtnr; - exists = true; - - b = dbus_message_append_args( - reply, - DBUS_TYPE_STRING, &session->id, - DBUS_TYPE_OBJECT_PATH, &p, - DBUS_TYPE_STRING, &session->user->runtime_path, - DBUS_TYPE_UNIX_FD, &fifo_fd, - DBUS_TYPE_STRING, &cseat, - DBUS_TYPE_UINT32, &vtnr, - DBUS_TYPE_BOOLEAN, &exists, - DBUS_TYPE_INVALID); - if (!b) { - r = -ENOMEM; - goto fail; - } + r = sd_bus_message_new_method_return(message, &reply); + if (r < 0) + return r; + + r = sd_bus_message_open_container(reply, 'a', "(susso)"); + if (r < 0) + return r; - *_reply = reply; - reply = NULL; + HASHMAP_FOREACH(session, m->sessions, i) { + _cleanup_free_ char *p = NULL; - return 0; + p = session_bus_path(session); + if (!p) + return -ENOMEM; + + r = sd_bus_message_append(reply, "(susso)", + session->id, + (uint32_t) session->user->uid, + session->user->name, + session->seat ? session->seat->id : "", + p); + if (r < 0) + return r; } - audit_session_from_pid(leader, &audit_id); - if (audit_id > 0) { - /* Keep our session IDs and the audit session IDs in sync */ + r = sd_bus_message_close_container(reply); + if (r < 0) + return r; - if (asprintf(&id, "%lu", (unsigned long) audit_id) < 0) { - r = -ENOMEM; - goto fail; - } + return sd_bus_send(bus, reply, NULL); +} - /* Wut? There's already a session by this name and we - * didn't find it above? Weird, then let's not trust - * the audit data and let's better register a new - * ID */ - if (hashmap_get(m->sessions, id)) { - audit_id = 0; +static int method_list_users(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) { + _cleanup_bus_message_unref_ sd_bus_message *reply = NULL; + Manager *m = userdata; + User *user; + Iterator i; + int r; - free(id); - id = NULL; - } - } + assert(bus); + assert(message); + assert(m); - if (!id) { - do { + r = sd_bus_message_new_method_return(message, &reply); + if (r < 0) + return r; + + r = sd_bus_message_open_container(reply, 'a', "(uso)"); + if (r < 0) + return r; + + HASHMAP_FOREACH(user, m->users, i) { + _cleanup_free_ char *p = NULL; + + p = user_bus_path(user); + if (!p) + return -ENOMEM; + + r = sd_bus_message_append(reply, "(uso)", + (uint32_t) user->uid, + user->name, + p); + if (r < 0) + return r; + } + + r = sd_bus_message_close_container(reply); + if (r < 0) + return r; + + return sd_bus_send(bus, reply, NULL); +} + +static int method_list_seats(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) { + _cleanup_bus_message_unref_ sd_bus_message *reply = NULL; + Manager *m = userdata; + Seat *seat; + Iterator i; + int r; + + assert(bus); + assert(message); + assert(m); + + r = sd_bus_message_new_method_return(message, &reply); + if (r < 0) + return r; + + r = sd_bus_message_open_container(reply, 'a', "(so)"); + if (r < 0) + return r; + + HASHMAP_FOREACH(seat, m->seats, i) { + _cleanup_free_ char *p = NULL; + + p = seat_bus_path(seat); + if (!p) + return -ENOMEM; + + r = sd_bus_message_append(reply, "(so)", seat->id, p); + if (r < 0) + return r; + } + + r = sd_bus_message_close_container(reply); + if (r < 0) + return r; + + return sd_bus_send(bus, reply, NULL); +} + +static int method_list_inhibitors(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) { + _cleanup_bus_message_unref_ sd_bus_message *reply = NULL; + Manager *m = userdata; + Inhibitor *inhibitor; + Iterator i; + int r; + + r = sd_bus_message_new_method_return(message, &reply); + if (r < 0) + return r; + + r = sd_bus_message_open_container(reply, 'a', "(ssssuu)"); + if (r < 0) + return r; + + HASHMAP_FOREACH(inhibitor, m->inhibitors, i) { + + r = sd_bus_message_append(reply, "(ssssuu)", + strempty(inhibit_what_to_string(inhibitor->what)), + strempty(inhibitor->who), + strempty(inhibitor->why), + strempty(inhibit_mode_to_string(inhibitor->mode)), + (uint32_t) inhibitor->uid, + (uint32_t) inhibitor->pid); + if (r < 0) + return r; + } + + r = sd_bus_message_close_container(reply); + if (r < 0) + return r; + + return sd_bus_send(bus, reply, NULL); +} + +static int method_create_session(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) { + const char *service, *type, *class, *cseat, *tty, *display, *remote_user, *remote_host, *desktop; + uint32_t uid, leader, audit_id = 0; + _cleanup_free_ char *id = NULL; + Session *session = NULL; + Manager *m = userdata; + User *user = NULL; + Seat *seat = NULL; + int remote; + uint32_t vtnr = 0; + SessionType t; + SessionClass c; + int r; + + assert(bus); + assert(message); + assert(m); + + r = sd_bus_message_read(message, "uusssssussbss", &uid, &leader, &service, &type, &class, &desktop, &cseat, &vtnr, &tty, &display, &remote, &remote_user, &remote_host); + if (r < 0) + return r; + + if (leader == 1) + return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Invalid leader PID"); + + if (isempty(type)) + t = _SESSION_TYPE_INVALID; + else { + t = session_type_from_string(type); + if (t < 0) + return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Invalid session type %s", type); + } + + if (isempty(class)) + c = _SESSION_CLASS_INVALID; + else { + c = session_class_from_string(class); + if (c < 0) + return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Invalid session class %s", class); + } + + if (isempty(desktop)) + desktop = NULL; + else { + if (!string_is_safe(desktop)) + return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Invalid desktop string %s", desktop); + } + + if (isempty(cseat)) + seat = NULL; + else { + seat = hashmap_get(m->seats, cseat); + if (!seat) + return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_SEAT, "No seat '%s' known", cseat); + } + + if (tty_is_vc(tty)) { + int v; + + if (!seat) + seat = m->seat0; + else if (seat != m->seat0) + return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "TTY %s is virtual console but seat %s is not seat0", tty, seat->id); + + v = vtnr_from_tty(tty); + if (v <= 0) + return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Cannot determine VT number from virtual console TTY %s", tty); + + if (!vtnr) + vtnr = (uint32_t) v; + else if (vtnr != (uint32_t) v) + return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Specified TTY and VT number do not match"); + + } else if (tty_is_console(tty)) { + + if (!seat) + seat = m->seat0; + else if (seat != m->seat0) + return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Console TTY specified but seat is not seat0"); + + if (vtnr != 0) + return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Console TTY specified but VT number is not 0"); + } + + if (seat) { + if (seat_has_vts(seat)) { + if (!vtnr || vtnr > 63) + return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "VT number out of range"); + } else { + if (vtnr != 0) + return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Seat has no VTs but VT number not 0"); + } + } + + r = sd_bus_message_enter_container(message, 'a', "(sv)"); + if (r < 0) + return r; + + if (t == _SESSION_TYPE_INVALID) { + if (!isempty(display)) + t = SESSION_X11; + else if (!isempty(tty)) + t = SESSION_TTY; + else + t = SESSION_UNSPECIFIED; + } + + if (c == _SESSION_CLASS_INVALID) { + if (t == SESSION_UNSPECIFIED) + c = SESSION_BACKGROUND; + else + c = SESSION_USER; + } + + if (leader <= 0) { + _cleanup_bus_creds_unref_ sd_bus_creds *creds = NULL; + + r = sd_bus_query_sender_creds(message, SD_BUS_CREDS_PID, &creds); + if (r < 0) + return r; + + r = sd_bus_creds_get_pid(creds, (pid_t*) &leader); + if (r < 0) + return r; + } + + manager_get_session_by_pid(m, leader, &session); + if (session) { + _cleanup_free_ char *path = NULL; + _cleanup_close_ int fifo_fd = -1; + + /* Session already exists, client is probably + * something like "su" which changes uid but is still + * the same session */ + + fifo_fd = session_create_fifo(session); + if (fifo_fd < 0) + return fifo_fd; + + path = session_bus_path(session); + if (!path) + return -ENOMEM; + + log_debug("Sending reply about an existing session: " + "id=%s object_path=%s uid=%u runtime_path=%s " + "session_fd=%d seat=%s vtnr=%u", + session->id, + path, + (uint32_t) session->user->uid, + session->user->runtime_path, + fifo_fd, + session->seat ? session->seat->id : "", + (uint32_t) session->vtnr); + + return sd_bus_reply_method_return( + message, "soshusub", + session->id, + path, + session->user->runtime_path, + fifo_fd, + (uint32_t) session->user->uid, + session->seat ? session->seat->id : "", + (uint32_t) session->vtnr, + true); + } + + audit_session_from_pid(leader, &audit_id); + if (audit_id > 0) { + /* Keep our session IDs and the audit session IDs in sync */ + + if (asprintf(&id, "%"PRIu32, audit_id) < 0) + return -ENOMEM; + + /* Wut? There's already a session by this name and we + * didn't find it above? Weird, then let's not trust + * the audit data and let's better register a new + * ID */ + if (hashmap_get(m->sessions, id)) { + log_warning("Existing logind session ID %s used by new audit session, ignoring", id); + audit_id = 0; + + free(id); + id = NULL; + } + } + + if (!id) { + do { free(id); id = NULL; - if (asprintf(&id, "c%lu", ++m->session_counter) < 0) { - r = -ENOMEM; - goto fail; - } + if (asprintf(&id, "c%lu", ++m->session_counter) < 0) + return -ENOMEM; } while (hashmap_get(m->sessions, id)); } @@ -600,22 +721,19 @@ static int bus_manager_create_session(Manager *m, DBusMessage *message, DBusMess if (r < 0) goto fail; - r = manager_add_session(m, user, id, &session); + r = manager_add_session(m, id, &session); if (r < 0) goto fail; + session_set_user(session, user); + session->leader = leader; session->audit_id = audit_id; session->type = t; session->class = c; session->remote = remote; - session->kill_processes = kill_processes; session->vtnr = vtnr; - session->controllers = cg_shorten_controllers(controllers); - session->reset_controllers = cg_shorten_controllers(reset_controllers); - controllers = reset_controllers = NULL; - if (!isempty(tty)) { session->tty = strdup(tty); if (!session->tty) { @@ -656,10 +774,12 @@ static int bus_manager_create_session(Manager *m, DBusMessage *message, DBusMess } } - fifo_fd = session_create_fifo(session); - if (fifo_fd < 0) { - r = fifo_fd; - goto fail; + if (!isempty(desktop)) { + session->desktop = strdup(desktop); + if (!session->desktop) { + r = -ENOMEM; + goto fail; + } } if (seat) { @@ -672,40 +792,17 @@ static int bus_manager_create_session(Manager *m, DBusMessage *message, DBusMess if (r < 0) goto fail; - reply = dbus_message_new_method_return(message); - if (!reply) { - r = -ENOMEM; - goto fail; - } + session->create_message = sd_bus_message_ref(message); - p = session_bus_path(session); - if (!p) { - r = -ENOMEM; - goto fail; - } + /* Here upstream systemd starts cgroups and the user systemd, + and arranges to reply asynchronously. We reply + directly. */ - cseat = seat ? seat->id : ""; - exists = false; - b = dbus_message_append_args( - reply, - DBUS_TYPE_STRING, &session->id, - DBUS_TYPE_OBJECT_PATH, &p, - DBUS_TYPE_STRING, &session->user->runtime_path, - DBUS_TYPE_UNIX_FD, &fifo_fd, - DBUS_TYPE_STRING, &cseat, - DBUS_TYPE_UINT32, &vtnr, - DBUS_TYPE_BOOLEAN, &exists, - DBUS_TYPE_INVALID); - - if (!b) { - r = -ENOMEM; + r = session_send_create_reply(session, NULL); + if (r < 0) goto fail; - } - *_reply = reply; - reply = NULL; - - return 0; + return 1; fail: if (session) @@ -717,1749 +814,1353 @@ fail: return r; } -static int bus_manager_inhibit( - Manager *m, - DBusConnection *connection, - DBusMessage *message, - DBusError *error, - DBusMessage **_reply) { - - Inhibitor *i = NULL; - char *id = NULL; - const char *who, *why, *what, *mode; - pid_t pid; - InhibitWhat w; - InhibitMode mm; - unsigned long ul; - int r, fifo_fd = -1; - _cleanup_dbus_message_unref_ DBusMessage *reply = NULL; +static int method_release_session(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) { + Manager *m = userdata; + Session *session; + const char *name; + int r; - assert(m); - assert(connection); + assert(bus); assert(message); - assert(error); - assert(_reply); - - if (!dbus_message_get_args( - message, - error, - DBUS_TYPE_STRING, &what, - DBUS_TYPE_STRING, &who, - DBUS_TYPE_STRING, &why, - DBUS_TYPE_STRING, &mode, - DBUS_TYPE_INVALID)) { - r = -EIO; - goto fail; - } - - w = inhibit_what_from_string(what); - if (w <= 0) { - r = -EINVAL; - goto fail; - } - - mm = inhibit_mode_from_string(mode); - if (mm < 0) { - r = -EINVAL; - goto fail; - } + assert(m); - /* Delay is only supported for shutdown/sleep */ - if (mm == INHIBIT_DELAY && (w & ~(INHIBIT_SHUTDOWN|INHIBIT_SLEEP))) { - r = -EINVAL; - goto fail; - } + r = sd_bus_message_read(message, "s", &name); + if (r < 0) + return r; - /* Don't allow taking delay locks while we are already - * executing the operation. We shouldn't create the impression - * that the lock was successful if the machine is about to go - * down/suspend any moment. */ - if (m->action_what & w) { - r = -EALREADY; - goto fail; - } + r = manager_get_session_from_creds(m, message, name, error, &session); + if (r < 0) + return r; - r = verify_polkit(connection, message, - w == INHIBIT_SHUTDOWN ? (mm == INHIBIT_BLOCK ? "org.freedesktop.login1.inhibit-block-shutdown" : "org.freedesktop.login1.inhibit-delay-shutdown") : - w == INHIBIT_SLEEP ? (mm == INHIBIT_BLOCK ? "org.freedesktop.login1.inhibit-block-sleep" : "org.freedesktop.login1.inhibit-delay-sleep") : - w == INHIBIT_IDLE ? "org.freedesktop.login1.inhibit-block-idle" : - w == INHIBIT_HANDLE_POWER_KEY ? "org.freedesktop.login1.inhibit-handle-power-key" : - w == INHIBIT_HANDLE_SUSPEND_KEY ? "org.freedesktop.login1.inhibit-handle-suspend-key" : - w == INHIBIT_HANDLE_HIBERNATE_KEY ? "org.freedesktop.login1.inhibit-handle-hibernate-key" : - "org.freedesktop.login1.inhibit-handle-lid-switch", - false, NULL, error); + r = session_release(session); if (r < 0) - goto fail; + return r; - ul = dbus_bus_get_unix_user(connection, dbus_message_get_sender(message), error); - if (ul == (unsigned long) -1) { - r = -EIO; - goto fail; - } + session_add_to_gc_queue(session); - pid = bus_get_unix_process_id(connection, dbus_message_get_sender(message), error); - if (pid <= 0) { - r = -EIO; - goto fail; - } + return sd_bus_reply_method_return(message, NULL); +} - do { - free(id); - id = NULL; +static int method_activate_session(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) { + Manager *m = userdata; + Session *session; + const char *name; + int r; - if (asprintf(&id, "%lu", ++m->inhibit_counter) < 0) { - r = -ENOMEM; - goto fail; - } - } while (hashmap_get(m->inhibitors, id)); - - r = manager_add_inhibitor(m, id, &i); - free(id); + assert(bus); + assert(message); + assert(m); + r = sd_bus_message_read(message, "s", &name); if (r < 0) - goto fail; - - i->what = w; - i->mode = mm; - i->pid = pid; - i->uid = (uid_t) ul; - i->why = strdup(why); - i->who = strdup(who); - - if (!i->why || !i->who) { - r = -ENOMEM; - goto fail; - } - - fifo_fd = inhibitor_create_fifo(i); - if (fifo_fd < 0) { - r = fifo_fd; - goto fail; - } - - reply = dbus_message_new_method_return(message); - if (!reply) { - r = -ENOMEM; - goto fail; - } - - if (!dbus_message_append_args( - reply, - DBUS_TYPE_UNIX_FD, &fifo_fd, - DBUS_TYPE_INVALID)) { - r = -ENOMEM; - goto fail; - } - - close_nointr_nofail(fifo_fd); - *_reply = reply; - reply = NULL; - - inhibitor_start(i); - - return 0; - -fail: - if (i) - inhibitor_free(i); + return r; - if (fifo_fd >= 0) - close_nointr_nofail(fifo_fd); + r = manager_get_session_from_creds(m, message, name, error, &session); + if (r < 0) + return r; - return r; + return bus_session_method_activate(bus, message, session, error); } -static int trigger_device(Manager *m, struct udev_device *d) { - struct udev_enumerate *e; - struct udev_list_entry *first, *item; +static int method_activate_session_on_seat(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) { + const char *session_name, *seat_name; + Manager *m = userdata; + Session *session; + Seat *seat; int r; + assert(bus); + assert(message); assert(m); - e = udev_enumerate_new(m->udev); - if (!e) { - r = -ENOMEM; - goto finish; - } + /* Same as ActivateSession() but refuses to work if + * the seat doesn't match */ - if (d) { - if (udev_enumerate_add_match_parent(e, d) < 0) { - r = -EIO; - goto finish; - } - } - - if (udev_enumerate_scan_devices(e) < 0) { - r = -EIO; - goto finish; - } - - first = udev_enumerate_get_list_entry(e); - udev_list_entry_foreach(item, first) { - char *t; - const char *p; - - p = udev_list_entry_get_name(item); + r = sd_bus_message_read(message, "ss", &session_name, &seat_name); + if (r < 0) + return r; - t = strappend(p, "/uevent"); - if (!t) { - r = -ENOMEM; - goto finish; - } + r = manager_get_session_from_creds(m, message, session_name, error, &session); + if (r < 0) + return r; - write_string_file(t, "change"); - free(t); - } + r = manager_get_seat_from_creds(m, message, seat_name, error, &seat); + if (r < 0) + return r; - r = 0; + if (session->seat != seat) + return sd_bus_error_setf(error, BUS_ERROR_SESSION_NOT_ON_SEAT, "Session %s not on seat %s", session_name, seat_name); -finish: - if (e) - udev_enumerate_unref(e); + r = session_activate(session); + if (r < 0) + return r; - return r; + return sd_bus_reply_method_return(message, NULL); } -static int attach_device(Manager *m, const char *seat, const char *sysfs) { - struct udev_device *d; - _cleanup_free_ char *rule = NULL, *file = NULL; - const char *id_for_seat; +static int method_lock_session(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) { + Manager *m = userdata; + Session *session; + const char *name; int r; + assert(bus); + assert(message); assert(m); - assert(seat); - assert(sysfs); - - d = udev_device_new_from_syspath(m->udev, sysfs); - if (!d) - return -ENODEV; - if (!udev_device_has_tag(d, "seat")) { - r = -ENODEV; - goto finish; - } - - id_for_seat = udev_device_get_property_value(d, "ID_FOR_SEAT"); - if (!id_for_seat) { - r = -ENODEV; - goto finish; - } - - if (asprintf(&file, "/etc/udev/rules.d/72-seat-%s.rules", id_for_seat) < 0) { - r = -ENOMEM; - goto finish; - } - - if (asprintf(&rule, "TAG==\"seat\", ENV{ID_FOR_SEAT}==\"%s\", ENV{ID_SEAT}=\"%s\"", id_for_seat, seat) < 0) { - r = -ENOMEM; - goto finish; - } - - mkdir_p_label("/etc/udev/rules.d", 0755); - label_init("/etc"); - r = write_string_file_atomic_label(file, rule); + r = sd_bus_message_read(message, "s", &name); if (r < 0) - goto finish; - - r = trigger_device(m, d); + return r; -finish: - if (d) - udev_device_unref(d); + r = manager_get_session_from_creds(m, message, name, error, &session); + if (r < 0) + return r; - return r; + return bus_session_method_lock(bus, message, session, error); } -static int flush_devices(Manager *m) { - _cleanup_closedir_ DIR *d; +static int method_lock_sessions(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) { + Manager *m = userdata; + int r; + assert(bus); + assert(message); assert(m); - d = opendir("/etc/udev/rules.d"); - if (!d) { - if (errno != ENOENT) - log_warning("Failed to open /etc/udev/rules.d: %m"); - } else { - struct dirent *de; - - while ((de = readdir(d))) { - - if (!dirent_is_file(de)) - continue; - - if (!startswith(de->d_name, "72-seat-")) - continue; - - if (!endswith(de->d_name, ".rules")) - continue; + r = bus_verify_polkit_async( + message, + CAP_SYS_ADMIN, + "org.freedesktop.login1.lock-sessions", + false, + UID_INVALID, + &m->polkit_registry, + error); + if (r < 0) + return r; + if (r == 0) + return 1; /* Will call us back */ - if (unlinkat(dirfd(d), de->d_name, 0) < 0) - log_warning("Failed to unlink %s: %m", de->d_name); - } - } + r = session_send_lock_all(m, streq(sd_bus_message_get_member(message), "LockSessions")); + if (r < 0) + return r; - return trigger_device(m, NULL); + return sd_bus_reply_method_return(message, NULL); } -static int have_multiple_sessions( - Manager *m, - uid_t uid) { - +static int method_kill_session(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) { + const char *name; + Manager *m = userdata; Session *session; - Iterator i; - - assert(m); - - /* Check for other users' sessions. Greeter sessions do not - * count, and non-login sessions do not count either. */ - HASHMAP_FOREACH(session, m->sessions, i) - if (session->class == SESSION_USER && - session->user->uid != uid) - return true; - - return false; -} - -static int bus_manager_log_shutdown( - Manager *m, - InhibitWhat w, - const char *unit_name) { - - const char *p, *q; - - assert(m); - assert(unit_name); - - if (w != INHIBIT_SHUTDOWN) - return 0; - - if (streq(unit_name, SPECIAL_POWEROFF_TARGET)) { - p = "MESSAGE=System is powering down."; - q = "SHUTDOWN=power-off"; - } else if (streq(unit_name, SPECIAL_HALT_TARGET)) { - p = "MESSAGE=System is halting."; - q = "SHUTDOWN=halt"; - } else if (streq(unit_name, SPECIAL_REBOOT_TARGET)) { - p = "MESSAGE=System is rebooting."; - q = "SHUTDOWN=reboot"; - } else if (streq(unit_name, SPECIAL_KEXEC_TARGET)) { - p = "MESSAGE=System is rebooting with kexec."; - q = "SHUTDOWN=kexec"; - } else { - p = "MESSAGE=System is shutting down."; - q = NULL; - } - - return log_struct(LOG_NOTICE, MESSAGE_ID(SD_MESSAGE_SHUTDOWN), - p, - q, NULL); -} - -static int execute_shutdown_or_sleep( - Manager *m, - InhibitWhat w, - const char *unit_name, - DBusError *error) { - - _cleanup_dbus_message_unref_ DBusMessage *reply = NULL; - const char *mode = "replace-irreversibly", *p; int r; - char *c; + assert(bus); + assert(message); assert(m); - assert(w >= 0); - assert(w < _INHIBIT_WHAT_MAX); - assert(unit_name); - - bus_manager_log_shutdown(m, w, unit_name); - r = bus_method_call_with_reply( - m->bus, - "org.freedesktop.systemd1", - "/org/freedesktop/systemd1", - "org.freedesktop.systemd1.Manager", - "StartUnit", - &reply, - error, - DBUS_TYPE_STRING, &unit_name, - DBUS_TYPE_STRING, &mode, - DBUS_TYPE_INVALID); + r = sd_bus_message_read(message, "s", &name); if (r < 0) return r; - if (!dbus_message_get_args( - reply, - error, - DBUS_TYPE_OBJECT_PATH, &p, - DBUS_TYPE_INVALID)) - return -EINVAL; - - c = strdup(p); - if (!c) - return -ENOMEM; - - m->action_unit = unit_name; - free(m->action_job); - m->action_job = c; - m->action_what = w; - - return 0; -} - -static int delay_shutdown_or_sleep( - Manager *m, - InhibitWhat w, - const char *unit_name) { - - assert(m); - assert(w >= 0); - assert(w < _INHIBIT_WHAT_MAX); - assert(unit_name); - - m->action_timestamp = now(CLOCK_MONOTONIC); - m->action_unit = unit_name; - m->action_what = w; + r = manager_get_session_from_creds(m, message, name, error, &session); + if (r < 0) + return r; - return 0; + return bus_session_method_kill(bus, message, session, error); } -static int bus_manager_can_shutdown_or_sleep( - Manager *m, - DBusConnection *connection, - DBusMessage *message, - InhibitWhat w, - const char *action, - const char *action_multiple_sessions, - const char *action_ignore_inhibit, - const char *sleep_type, - const char *sleep_disk_type, - DBusError *error, - DBusMessage **_reply) { - - bool multiple_sessions, challenge, blocked, b; - const char *result = NULL; - _cleanup_dbus_message_unref_ DBusMessage *reply = NULL; +static int method_kill_user(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) { + Manager *m = userdata; + uint32_t uid; + User *user; int r; - unsigned long ul; - assert(m); - assert(connection); + assert(bus); assert(message); - assert(w >= 0); - assert(w <= _INHIBIT_WHAT_MAX); - assert(action); - assert(action_multiple_sessions); - assert(action_ignore_inhibit); - assert(error); - assert(_reply); - - if (sleep_type) { - r = can_sleep(sleep_type); - if (r < 0) - return r; - - if (r == 0) { - result = "na"; - goto finish; - } - } - - if (sleep_disk_type) { - r = can_sleep_disk(sleep_disk_type); - if (r < 0) - return r; - - if (r == 0) { - result = "na"; - goto finish; - } - } - - ul = dbus_bus_get_unix_user(connection, dbus_message_get_sender(message), error); - if (ul == (unsigned long) -1) - return -EIO; + assert(m); - r = have_multiple_sessions(m, (uid_t) ul); + r = sd_bus_message_read(message, "u", &uid); if (r < 0) return r; - multiple_sessions = r > 0; - blocked = manager_is_inhibited(m, w, INHIBIT_BLOCK, NULL, false, true, (uid_t) ul); - - if (multiple_sessions) { - r = verify_polkit(connection, message, action_multiple_sessions, false, &challenge, error); - if (r < 0) - return r; - - if (r > 0) - result = "yes"; - else if (challenge) - result = "challenge"; - else - result = "no"; - } - - if (blocked) { - r = verify_polkit(connection, message, action_ignore_inhibit, false, &challenge, error); - if (r < 0) - return r; - - if (r > 0 && !result) - result = "yes"; - else if (challenge && (!result || streq(result, "yes"))) - result = "challenge"; - else - result = "no"; - } - - if (!multiple_sessions && !blocked) { - /* If neither inhibit nor multiple sessions - * apply then just check the normal policy */ - - r = verify_polkit(connection, message, action, false, &challenge, error); - if (r < 0) - return r; - - if (r > 0) - result = "yes"; - else if (challenge) - result = "challenge"; - else - result = "no"; - } - -finish: - reply = dbus_message_new_method_return(message); - if (!reply) - return -ENOMEM; - - b = dbus_message_append_args( - reply, - DBUS_TYPE_STRING, &result, - DBUS_TYPE_INVALID); - if (!b) - return -ENOMEM; + r = manager_get_user_from_creds(m, message, uid, error, &user); + if (r < 0) + return r; - *_reply = reply; - reply = NULL; - return 0; + return bus_user_method_kill(bus, message, user, error); } -static int send_prepare_for(Manager *m, InhibitWhat w, bool _active) { - static const char * const signal_name[_INHIBIT_WHAT_MAX] = { - [INHIBIT_SHUTDOWN] = "PrepareForShutdown", - [INHIBIT_SLEEP] = "PrepareForSleep" - }; - - dbus_bool_t active = _active; - _cleanup_dbus_message_unref_ DBusMessage *message = NULL; +static int method_terminate_session(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) { + Manager *m = userdata; + const char *name; + Session *session; + int r; + assert(bus); + assert(message); assert(m); - assert(w >= 0); - assert(w < _INHIBIT_WHAT_MAX); - assert(signal_name[w]); - message = dbus_message_new_signal("/org/freedesktop/login1", "org.freedesktop.login1.Manager", signal_name[w]); - if (!message) - return -ENOMEM; + r = sd_bus_message_read(message, "s", &name); + if (r < 0) + return r; - if (!dbus_message_append_args(message, DBUS_TYPE_BOOLEAN, &active, DBUS_TYPE_INVALID) || - !dbus_connection_send(m->bus, message, NULL)) - return -ENOMEM; + r = manager_get_session_from_creds(m, message, name, error, &session); + if (r < 0) + return r; - return 0; + return bus_session_method_terminate(bus, message, session, error); } -int bus_manager_shutdown_or_sleep_now_or_later( - Manager *m, - const char *unit_name, - InhibitWhat w, - DBusError *error) { - - bool delayed; +static int method_terminate_user(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) { + Manager *m = userdata; + uint32_t uid; + User *user; int r; + assert(bus); + assert(message); assert(m); - assert(unit_name); - assert(w >= 0); - assert(w <= _INHIBIT_WHAT_MAX); - assert(!m->action_job); - - /* Tell everybody to prepare for shutdown/sleep */ - send_prepare_for(m, w, true); - delayed = - m->inhibit_delay_max > 0 && - manager_is_inhibited(m, w, INHIBIT_DELAY, NULL, false, false, 0); + r = sd_bus_message_read(message, "u", &uid); + if (r < 0) + return r; - if (delayed) - /* Shutdown is delayed, keep in mind what we - * want to do, and start a timeout */ - r = delay_shutdown_or_sleep(m, w, unit_name); - else - /* Shutdown is not delayed, execute it - * immediately */ - r = execute_shutdown_or_sleep(m, w, unit_name, error); + r = manager_get_user_from_creds(m, message, uid, error, &user); + if (r < 0) + return r; - return r; + return bus_user_method_terminate(bus, message, user, error); } -static int bus_manager_do_shutdown_or_sleep( - Manager *m, - DBusConnection *connection, - DBusMessage *message, - const char *unit_name, - InhibitWhat w, - const char *action, - const char *action_multiple_sessions, - const char *action_ignore_inhibit, - const char *sleep_type, - const char *sleep_disk_type, - DBusError *error, - DBusMessage **_reply) { - - dbus_bool_t interactive; - bool multiple_sessions, blocked; - DBusMessage *reply = NULL; +static int method_terminate_seat(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) { + Manager *m = userdata; + const char *name; + Seat *seat; int r; - unsigned long ul; + assert(bus); + assert(message); assert(m); - assert(connection); + + r = sd_bus_message_read(message, "s", &name); + if (r < 0) + return r; + + r = manager_get_seat_from_creds(m, message, name, error, &seat); + if (r < 0) + return r; + + return bus_seat_method_terminate(bus, message, seat, error); +} + +static int method_set_user_linger(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) { + _cleanup_free_ char *cc = NULL; + Manager *m = userdata; + int b, r; + struct passwd *pw; + const char *path; + uint32_t uid; + int interactive; + + assert(bus); assert(message); - assert(unit_name); - assert(w >= 0); - assert(w <= _INHIBIT_WHAT_MAX); - assert(action); - assert(action_multiple_sessions); - assert(action_ignore_inhibit); - assert(error); - assert(_reply); + assert(m); - /* Don't allow multiple jobs being executed at the same time */ - if (m->action_what) - return -EALREADY; + r = sd_bus_message_read(message, "ubb", &uid, &b, &interactive); + if (r < 0) + return r; - if (!dbus_message_get_args( - message, - error, - DBUS_TYPE_BOOLEAN, &interactive, - DBUS_TYPE_INVALID)) - return -EINVAL; + if (uid == UID_INVALID) { + _cleanup_bus_creds_unref_ sd_bus_creds *creds = NULL; - if (sleep_type) { - r = can_sleep(sleep_type); + /* Note that we get the owner UID of the session, not the actual client UID here! */ + r = sd_bus_query_sender_creds(message, SD_BUS_CREDS_OWNER_UID|SD_BUS_CREDS_AUGMENT, &creds); if (r < 0) return r; - if (r == 0) - return -ENOTSUP; - } - - if (sleep_disk_type) { - r = can_sleep_disk(sleep_disk_type); + r = sd_bus_creds_get_owner_uid(creds, &uid); if (r < 0) return r; - - if (r == 0) - return -ENOTSUP; } - ul = dbus_bus_get_unix_user(connection, dbus_message_get_sender(message), error); - if (ul == (unsigned long) -1) - return -EIO; + errno = 0; + pw = getpwuid(uid); + if (!pw) + return errno ? -errno : -ENOENT; + + r = bus_verify_polkit_async( + message, + CAP_SYS_ADMIN, + "org.freedesktop.login1.set-user-linger", + interactive, + UID_INVALID, + &m->polkit_registry, + error); + if (r < 0) + return r; + if (r == 0) + return 1; /* No authorization for now, but the async polkit stuff will call us again when it has it */ + + mkdir_p_label("/var/lib/systemd", 0755); - r = have_multiple_sessions(m, (uid_t) ul); + r = mkdir_safe_label("/var/lib/systemd/linger", 0755, 0, 0); if (r < 0) return r; - multiple_sessions = r > 0; - blocked = manager_is_inhibited(m, w, INHIBIT_BLOCK, NULL, false, true, (uid_t) ul); + cc = cescape(pw->pw_name); + if (!cc) + return -ENOMEM; - if (multiple_sessions) { - r = verify_polkit(connection, message, action_multiple_sessions, interactive, NULL, error); - if (r < 0) - return r; - } + path = strjoina("/var/lib/systemd/linger/", cc); + if (b) { + User *u; - if (blocked) { - r = verify_polkit(connection, message, action_ignore_inhibit, interactive, NULL, error); + r = touch(path); if (r < 0) return r; + + if (manager_add_user_by_uid(m, uid, &u) >= 0) + user_start(u); + + } else { + User *u; + + r = unlink(path); + if (r < 0 && errno != ENOENT) + return -errno; + + u = hashmap_get(m->users, UID_TO_PTR(uid)); + if (u) + user_add_to_gc_queue(u); } - if (!multiple_sessions && !blocked) { - r = verify_polkit(connection, message, action, interactive, NULL, error); + return sd_bus_reply_method_return(message, NULL); +} + +static int trigger_device(Manager *m, struct udev_device *d) { + _cleanup_udev_enumerate_unref_ struct udev_enumerate *e = NULL; + struct udev_list_entry *first, *item; + int r; + + assert(m); + + e = udev_enumerate_new(m->udev); + if (!e) + return -ENOMEM; + + if (d) { + r = udev_enumerate_add_match_parent(e, d); if (r < 0) return r; } - r = bus_manager_shutdown_or_sleep_now_or_later(m, unit_name, w, error); + r = udev_enumerate_scan_devices(e); if (r < 0) return r; - reply = dbus_message_new_method_return(message); - if (!reply) - return -ENOMEM; + first = udev_enumerate_get_list_entry(e); + udev_list_entry_foreach(item, first) { + _cleanup_free_ char *t = NULL; + const char *p; - *_reply = reply; - return 0; -} + p = udev_list_entry_get_name(item); -static DEFINE_BUS_PROPERTY_APPEND_ENUM(bus_manager_append_handle_action, handle_action, HandleAction); - -static const BusProperty bus_login_manager_properties[] = { - { "ControlGroupHierarchy", bus_property_append_string, "s", offsetof(Manager, cgroup_path), true }, - { "Controllers", bus_property_append_strv, "as", offsetof(Manager, controllers), true }, - { "ResetControllers", bus_property_append_strv, "as", offsetof(Manager, reset_controllers), true }, - { "NAutoVTs", bus_property_append_unsigned, "u", offsetof(Manager, n_autovts) }, - { "KillOnlyUsers", bus_property_append_strv, "as", offsetof(Manager, kill_only_users), true }, - { "KillExcludeUsers", bus_property_append_strv, "as", offsetof(Manager, kill_exclude_users), true }, - { "KillUserProcesses", bus_property_append_bool, "b", offsetof(Manager, kill_user_processes) }, - { "IdleHint", bus_manager_append_idle_hint, "b", 0 }, - { "IdleSinceHint", bus_manager_append_idle_hint_since, "t", 0 }, - { "IdleSinceHintMonotonic", bus_manager_append_idle_hint_since, "t", 0 }, - { "BlockInhibited", bus_manager_append_inhibited, "s", 0 }, - { "DelayInhibited", bus_manager_append_inhibited, "s", 0 }, - { "InhibitDelayMaxUSec", bus_property_append_usec, "t", offsetof(Manager, inhibit_delay_max) }, - { "HandlePowerKey", bus_manager_append_handle_action, "s", offsetof(Manager, handle_power_key) }, - { "HandleSuspendKey", bus_manager_append_handle_action, "s", offsetof(Manager, handle_suspend_key) }, - { "HandleHibernateKey", bus_manager_append_handle_action, "s", offsetof(Manager, handle_hibernate_key)}, - { "HandleLidSwitch", bus_manager_append_handle_action, "s", offsetof(Manager, handle_lid_switch) }, - { "IdleAction", bus_manager_append_handle_action, "s", offsetof(Manager, idle_action) }, - { "IdleActionUSec", bus_property_append_usec, "t", offsetof(Manager, idle_action_usec) }, - { "PreparingForShutdown", bus_manager_append_preparing, "b", 0 }, - { "PreparingForSleep", bus_manager_append_preparing, "b", 0 }, - { NULL, } -}; + t = strappend(p, "/uevent"); + if (!t) + return -ENOMEM; -static DBusHandlerResult manager_message_handler( - DBusConnection *connection, - DBusMessage *message, - void *userdata) { + write_string_file(t, "change"); + } - Manager *m = userdata; + return 0; +} - DBusError error; - _cleanup_dbus_message_unref_ DBusMessage *reply = NULL; +static int attach_device(Manager *m, const char *seat, const char *sysfs) { + _cleanup_udev_device_unref_ struct udev_device *d = NULL; + _cleanup_free_ char *rule = NULL, *file = NULL; + const char *id_for_seat; int r; - assert(connection); - assert(message); assert(m); + assert(seat); + assert(sysfs); - dbus_error_init(&error); - - if (dbus_message_is_method_call(message, "org.freedesktop.login1.Manager", "GetSession")) { - const char *name; - char *p; - Session *session; - bool b; - - if (!dbus_message_get_args( - message, - &error, - DBUS_TYPE_STRING, &name, - DBUS_TYPE_INVALID)) - return bus_send_error_reply(connection, message, &error, -EINVAL); - - session = hashmap_get(m->sessions, name); - if (!session) - return bus_send_error_reply(connection, message, &error, -ENOENT); - - reply = dbus_message_new_method_return(message); - if (!reply) - goto oom; + d = udev_device_new_from_syspath(m->udev, sysfs); + if (!d) + return -ENODEV; - p = session_bus_path(session); - if (!p) - goto oom; + if (!udev_device_has_tag(d, "seat")) + return -ENODEV; - b = dbus_message_append_args( - reply, - DBUS_TYPE_OBJECT_PATH, &p, - DBUS_TYPE_INVALID); - free(p); + id_for_seat = udev_device_get_property_value(d, "ID_FOR_SEAT"); + if (!id_for_seat) + return -ENODEV; - if (!b) - goto oom; + if (asprintf(&file, "/etc/udev/rules.d/72-seat-%s.rules", id_for_seat) < 0) + return -ENOMEM; - } else if (dbus_message_is_method_call(message, "org.freedesktop.login1.Manager", "GetSessionByPID")) { - uint32_t pid; - char *p; - Session *session; - bool b; + if (asprintf(&rule, "TAG==\"seat\", ENV{ID_FOR_SEAT}==\"%s\", ENV{ID_SEAT}=\"%s\"", id_for_seat, seat) < 0) + return -ENOMEM; - if (!dbus_message_get_args( - message, - &error, - DBUS_TYPE_UINT32, &pid, - DBUS_TYPE_INVALID)) - return bus_send_error_reply(connection, message, &error, -EINVAL); + mkdir_p_label("/etc/udev/rules.d", 0755); + mac_selinux_init("/etc"); + r = write_string_file_atomic_label(file, rule); + if (r < 0) + return r; - r = manager_get_session_by_pid(m, pid, &session); - if (r <= 0) - return bus_send_error_reply(connection, message, NULL, r < 0 ? r : -ENOENT); + return trigger_device(m, d); +} - reply = dbus_message_new_method_return(message); - if (!reply) - goto oom; +static int flush_devices(Manager *m) { + _cleanup_closedir_ DIR *d; - p = session_bus_path(session); - if (!p) - goto oom; - - b = dbus_message_append_args( - reply, - DBUS_TYPE_OBJECT_PATH, &p, - DBUS_TYPE_INVALID); - free(p); - - if (!b) - goto oom; - - } else if (dbus_message_is_method_call(message, "org.freedesktop.login1.Manager", "GetUser")) { - uint32_t uid; - char *p; - User *user; - bool b; - - if (!dbus_message_get_args( - message, - &error, - DBUS_TYPE_UINT32, &uid, - DBUS_TYPE_INVALID)) - return bus_send_error_reply(connection, message, &error, -EINVAL); - - user = hashmap_get(m->users, ULONG_TO_PTR((unsigned long) uid)); - if (!user) - return bus_send_error_reply(connection, message, &error, -ENOENT); + assert(m); - reply = dbus_message_new_method_return(message); - if (!reply) - goto oom; + d = opendir("/etc/udev/rules.d"); + if (!d) { + if (errno != ENOENT) + log_warning_errno(errno, "Failed to open /etc/udev/rules.d: %m"); + } else { + struct dirent *de; - p = user_bus_path(user); - if (!p) - goto oom; - - b = dbus_message_append_args( - reply, - DBUS_TYPE_OBJECT_PATH, &p, - DBUS_TYPE_INVALID); - free(p); - - if (!b) - goto oom; - - } else if (dbus_message_is_method_call(message, "org.freedesktop.login1.Manager", "GetSeat")) { - const char *name; - char *p; - Seat *seat; - bool b; - - if (!dbus_message_get_args( - message, - &error, - DBUS_TYPE_STRING, &name, - DBUS_TYPE_INVALID)) - return bus_send_error_reply(connection, message, &error, -EINVAL); + while ((de = readdir(d))) { - seat = hashmap_get(m->seats, name); - if (!seat) - return bus_send_error_reply(connection, message, &error, -ENOENT); + if (!dirent_is_file(de)) + continue; - reply = dbus_message_new_method_return(message); - if (!reply) - goto oom; + if (!startswith(de->d_name, "72-seat-")) + continue; - p = seat_bus_path(seat); - if (!p) - goto oom; + if (!endswith(de->d_name, ".rules")) + continue; - b = dbus_message_append_args( - reply, - DBUS_TYPE_OBJECT_PATH, &p, - DBUS_TYPE_INVALID); - free(p); + if (unlinkat(dirfd(d), de->d_name, 0) < 0) + log_warning_errno(errno, "Failed to unlink %s: %m", de->d_name); + } + } - if (!b) - goto oom; + return trigger_device(m, NULL); +} - } else if (dbus_message_is_method_call(message, "org.freedesktop.login1.Manager", "ListSessions")) { - char *p; - Session *session; - Iterator i; - DBusMessageIter iter, sub; - const char *empty = ""; +static int method_attach_device(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) { + const char *sysfs, *seat; + Manager *m = userdata; + int interactive, r; - reply = dbus_message_new_method_return(message); - if (!reply) - goto oom; + assert(bus); + assert(message); + assert(m); - dbus_message_iter_init_append(reply, &iter); + r = sd_bus_message_read(message, "ssb", &seat, &sysfs, &interactive); + if (r < 0) + return r; - if (!dbus_message_iter_open_container(&iter, DBUS_TYPE_ARRAY, "(susso)", &sub)) - goto oom; + if (!path_startswith(sysfs, "/sys")) + return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Path %s is not in /sys", sysfs); - HASHMAP_FOREACH(session, m->sessions, i) { - DBusMessageIter sub2; - uint32_t uid; + if (!seat_name_is_valid(seat)) + return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Seat %s is not valid", seat); - if (!dbus_message_iter_open_container(&sub, DBUS_TYPE_STRUCT, NULL, &sub2)) - goto oom; + r = bus_verify_polkit_async( + message, + CAP_SYS_ADMIN, + "org.freedesktop.login1.attach-device", + interactive, + UID_INVALID, + &m->polkit_registry, + error); + if (r < 0) + return r; + if (r == 0) + return 1; /* No authorization for now, but the async polkit stuff will call us again when it has it */ - uid = session->user->uid; + r = attach_device(m, seat, sysfs); + if (r < 0) + return r; - p = session_bus_path(session); - if (!p) - goto oom; + return sd_bus_reply_method_return(message, NULL); +} - if (!dbus_message_iter_append_basic(&sub2, DBUS_TYPE_STRING, &session->id) || - !dbus_message_iter_append_basic(&sub2, DBUS_TYPE_UINT32, &uid) || - !dbus_message_iter_append_basic(&sub2, DBUS_TYPE_STRING, &session->user->name) || - !dbus_message_iter_append_basic(&sub2, DBUS_TYPE_STRING, session->seat ? (const char**) &session->seat->id : &empty) || - !dbus_message_iter_append_basic(&sub2, DBUS_TYPE_OBJECT_PATH, &p)) { - free(p); - goto oom; - } +static int method_flush_devices(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) { + Manager *m = userdata; + int interactive, r; - free(p); + assert(bus); + assert(message); + assert(m); - if (!dbus_message_iter_close_container(&sub, &sub2)) - goto oom; - } + r = sd_bus_message_read(message, "b", &interactive); + if (r < 0) + return r; - if (!dbus_message_iter_close_container(&iter, &sub)) - goto oom; + r = bus_verify_polkit_async( + message, + CAP_SYS_ADMIN, + "org.freedesktop.login1.flush-devices", + interactive, + UID_INVALID, + &m->polkit_registry, + error); + if (r < 0) + return r; + if (r == 0) + return 1; /* No authorization for now, but the async polkit stuff will call us again when it has it */ - } else if (dbus_message_is_method_call(message, "org.freedesktop.login1.Manager", "ListUsers")) { - char *p; - User *user; - Iterator i; - DBusMessageIter iter, sub; + r = flush_devices(m); + if (r < 0) + return r; - reply = dbus_message_new_method_return(message); - if (!reply) - goto oom; + return sd_bus_reply_method_return(message, NULL); +} - dbus_message_iter_init_append(reply, &iter); +static int have_multiple_sessions( + Manager *m, + uid_t uid) { - if (!dbus_message_iter_open_container(&iter, DBUS_TYPE_ARRAY, "(uso)", &sub)) - goto oom; + Session *session; + Iterator i; - HASHMAP_FOREACH(user, m->users, i) { - DBusMessageIter sub2; - uint32_t uid; + assert(m); - if (!dbus_message_iter_open_container(&sub, DBUS_TYPE_STRUCT, NULL, &sub2)) - goto oom; + /* Check for other users' sessions. Greeter sessions do not + * count, and non-login sessions do not count either. */ + HASHMAP_FOREACH(session, m->sessions, i) + if (session->class == SESSION_USER && + session->user->uid != uid) + return true; - uid = user->uid; + return false; +} - p = user_bus_path(user); - if (!p) - goto oom; +static int bus_manager_log_shutdown( + Manager *m, + InhibitWhat w, + HandleAction action) { - if (!dbus_message_iter_append_basic(&sub2, DBUS_TYPE_UINT32, &uid) || - !dbus_message_iter_append_basic(&sub2, DBUS_TYPE_STRING, &user->name) || - !dbus_message_iter_append_basic(&sub2, DBUS_TYPE_OBJECT_PATH, &p)) { - free(p); - goto oom; - } + const char *p, *q; - free(p); + assert(m); - if (!dbus_message_iter_close_container(&sub, &sub2)) - goto oom; - } + if (w != INHIBIT_SHUTDOWN) + return 0; - if (!dbus_message_iter_close_container(&iter, &sub)) - goto oom; + switch (action) { + case HANDLE_POWEROFF: + p = "MESSAGE=System is powering down."; + q = "SHUTDOWN=power-off"; + break; + case HANDLE_HALT: + p = "MESSAGE=System is halting."; + q = "SHUTDOWN=halt"; + break; + case HANDLE_REBOOT: + p = "MESSAGE=System is rebooting."; + q = "SHUTDOWN=reboot"; + break; + case HANDLE_KEXEC: + p = "MESSAGE=System is rebooting with kexec."; + q = "SHUTDOWN=kexec"; + break; + default: + p = "MESSAGE=System is shutting down."; + q = NULL; + break; + } - } else if (dbus_message_is_method_call(message, "org.freedesktop.login1.Manager", "ListSeats")) { - char *p; - Seat *seat; - Iterator i; - DBusMessageIter iter, sub; + return log_struct(LOG_NOTICE, + LOG_MESSAGE_ID(SD_MESSAGE_SHUTDOWN), + p, + q, + NULL); +} - reply = dbus_message_new_method_return(message); - if (!reply) - goto oom; +static int lid_switch_ignore_handler(sd_event_source *e, uint64_t usec, void *userdata) { + Manager *m = userdata; - dbus_message_iter_init_append(reply, &iter); + assert(e); + assert(m); - if (!dbus_message_iter_open_container(&iter, DBUS_TYPE_ARRAY, "(so)", &sub)) - goto oom; + m->lid_switch_ignore_event_source = sd_event_source_unref(m->lid_switch_ignore_event_source); + return 0; +} - HASHMAP_FOREACH(seat, m->seats, i) { - DBusMessageIter sub2; +int manager_set_lid_switch_ignore(Manager *m, usec_t until) { + int r; - if (!dbus_message_iter_open_container(&sub, DBUS_TYPE_STRUCT, NULL, &sub2)) - goto oom; + assert(m); - p = seat_bus_path(seat); - if (!p) - goto oom; + if (until <= now(CLOCK_MONOTONIC)) + return 0; - if (!dbus_message_iter_append_basic(&sub2, DBUS_TYPE_STRING, &seat->id) || - !dbus_message_iter_append_basic(&sub2, DBUS_TYPE_OBJECT_PATH, &p)) { - free(p); - goto oom; - } + /* We want to ignore the lid switch for a while after each + * suspend, and after boot-up. Hence let's install a timer for + * this. As long as the event source exists we ignore the lid + * switch. */ - free(p); + if (m->lid_switch_ignore_event_source) { + usec_t u; - if (!dbus_message_iter_close_container(&sub, &sub2)) - goto oom; - } + r = sd_event_source_get_time(m->lid_switch_ignore_event_source, &u); + if (r < 0) + return r; - if (!dbus_message_iter_close_container(&iter, &sub)) - goto oom; + if (until <= u) + return 0; - } else if (dbus_message_is_method_call(message, "org.freedesktop.login1.Manager", "ListInhibitors")) { - Inhibitor *inhibitor; - Iterator i; - DBusMessageIter iter, sub; + r = sd_event_source_set_time(m->lid_switch_ignore_event_source, until); + } else + r = sd_event_add_time( + m->event, + &m->lid_switch_ignore_event_source, + CLOCK_MONOTONIC, + until, 0, + lid_switch_ignore_handler, m); - reply = dbus_message_new_method_return(message); - if (!reply) - goto oom; + return r; +} - dbus_message_iter_init_append(reply, &iter); +static int send_prepare_for(Manager *m, InhibitWhat w, bool _active) { - if (!dbus_message_iter_open_container(&iter, DBUS_TYPE_ARRAY, "(ssssuu)", &sub)) - goto oom; + static const char * const signal_name[_INHIBIT_WHAT_MAX] = { + [INHIBIT_SHUTDOWN] = "PrepareForShutdown", + [INHIBIT_SLEEP] = "PrepareForSleep" + }; - HASHMAP_FOREACH(inhibitor, m->inhibitors, i) { - DBusMessageIter sub2; - dbus_uint32_t uid, pid; - const char *what, *who, *why, *mode; + int active = _active; - if (!dbus_message_iter_open_container(&sub, DBUS_TYPE_STRUCT, NULL, &sub2)) - goto oom; + assert(m); + assert(w >= 0); + assert(w < _INHIBIT_WHAT_MAX); + assert(signal_name[w]); - what = strempty(inhibit_what_to_string(inhibitor->what)); - who = strempty(inhibitor->who); - why = strempty(inhibitor->why); - mode = strempty(inhibit_mode_to_string(inhibitor->mode)); - uid = (dbus_uint32_t) inhibitor->uid; - pid = (dbus_uint32_t) inhibitor->pid; + return sd_bus_emit_signal(m->bus, + "/org/freedesktop/login1", + "org.freedesktop.login1.Manager", + signal_name[w], + "b", + active); +} - if (!dbus_message_iter_append_basic(&sub2, DBUS_TYPE_STRING, &what) || - !dbus_message_iter_append_basic(&sub2, DBUS_TYPE_STRING, &who) || - !dbus_message_iter_append_basic(&sub2, DBUS_TYPE_STRING, &why) || - !dbus_message_iter_append_basic(&sub2, DBUS_TYPE_STRING, &mode) || - !dbus_message_iter_append_basic(&sub2, DBUS_TYPE_UINT32, &uid) || - !dbus_message_iter_append_basic(&sub2, DBUS_TYPE_UINT32, &pid)) - goto oom; +static int execute_shutdown_or_sleep( + Manager *m, + InhibitWhat w, + HandleAction action, + sd_bus_error *error) { + int r; - if (!dbus_message_iter_close_container(&sub, &sub2)) - goto oom; - } + assert(m); + assert(w >= 0); + assert(w < _INHIBIT_WHAT_MAX); - if (!dbus_message_iter_close_container(&iter, &sub)) - goto oom; + bus_manager_log_shutdown(m, w, action); - } else if (dbus_message_is_method_call(message, "org.freedesktop.login1.Manager", "Inhibit")) { + r = shutdown_or_sleep(m, action); + if (r < 0) + return r; - r = bus_manager_inhibit(m, connection, message, &error, &reply); + if (w == INHIBIT_SLEEP) + /* And we're back. */ + send_prepare_for(m, w, false); - if (r < 0) - return bus_send_error_reply(connection, message, &error, r); + m->action_what = 0; + /* Make sure the lid switch is ignored for a while (?) */ + manager_set_lid_switch_ignore(m, now(CLOCK_MONOTONIC) + m->holdoff_timeout_usec); - } else if (dbus_message_is_method_call(message, "org.freedesktop.login1.Manager", "CreateSession")) { + return 0; +} - r = bus_manager_create_session(m, message, &reply); +static int delay_shutdown_or_sleep( + Manager *m, + InhibitWhat w, + HandleAction action) { - /* Don't delay the work on OOM here, since it might be - * triggered by a low RLIMIT_NOFILE here (since we - * send a dupped fd to the client), and we'd rather - * see this fail quickly then be retried later */ + assert(m); + assert(w >= 0); + assert(w < _INHIBIT_WHAT_MAX); - if (r < 0) - return bus_send_error_reply(connection, message, NULL, r); + m->action_timestamp = now(CLOCK_MONOTONIC); + m->pending_action = action; + m->action_what = w; - } else if (dbus_message_is_method_call(message, "org.freedesktop.login1.Manager", "ReleaseSession")) { - const char *name; - Session *session; + return 0; +} - if (!dbus_message_get_args( - message, - &error, - DBUS_TYPE_STRING, &name, - DBUS_TYPE_INVALID)) - return bus_send_error_reply(connection, message, &error, -EINVAL); +int bus_manager_shutdown_or_sleep_now_or_later( + Manager *m, + HandleAction action, + InhibitWhat w, + sd_bus_error *error) { - session = hashmap_get(m->sessions, name); - if (!session) - return bus_send_error_reply(connection, message, &error, -ENOENT); - - /* We use the FIFO to detect stray sessions where the - process invoking PAM dies abnormally. We need to make - sure that that process is not killed if at the clean - end of the session it closes the FIFO. Hence, with - this call explicitly turn off the FIFO logic, so that - the PAM code can finish clean up on its own */ - session_remove_fifo(session); - - reply = dbus_message_new_method_return(message); - if (!reply) - goto oom; - - } else if (dbus_message_is_method_call(message, "org.freedesktop.login1.Manager", "ActivateSession")) { - const char *name; - Session *session; + bool delayed; + int r; - if (!dbus_message_get_args( - message, - &error, - DBUS_TYPE_STRING, &name, - DBUS_TYPE_INVALID)) - return bus_send_error_reply(connection, message, &error, -EINVAL); + assert(m); + assert(w >= 0); + assert(w <= _INHIBIT_WHAT_MAX); - session = hashmap_get(m->sessions, name); - if (!session) - return bus_send_error_reply(connection, message, &error, -ENOENT); + /* Tell everybody to prepare for shutdown/sleep */ + send_prepare_for(m, w, true); - r = session_activate(session); - if (r < 0) - return bus_send_error_reply(connection, message, NULL, r); + delayed = + m->inhibit_delay_max > 0 && + manager_is_inhibited(m, w, INHIBIT_DELAY, NULL, false, false, 0, NULL); - reply = dbus_message_new_method_return(message); - if (!reply) - goto oom; + if (delayed) + /* Shutdown is delayed, keep in mind what we + * want to do, and start a timeout */ + r = delay_shutdown_or_sleep(m, w, action); + else + /* Shutdown is not delayed, execute it + * immediately */ + r = execute_shutdown_or_sleep(m, w, action, error); - } else if (dbus_message_is_method_call(message, "org.freedesktop.login1.Manager", "ActivateSessionOnSeat")) { - const char *session_name, *seat_name; - Session *session; - Seat *seat; + return r; +} - /* Same as ActivateSession() but refuses to work if - * the seat doesn't match */ +static int method_do_shutdown_or_sleep( + Manager *m, + sd_bus_message *message, + HandleAction sleep_action, + InhibitWhat w, + const char *action, + const char *action_multiple_sessions, + const char *action_ignore_inhibit, + const char *sleep_verb, + sd_bus_error *error) { - if (!dbus_message_get_args( - message, - &error, - DBUS_TYPE_STRING, &session_name, - DBUS_TYPE_STRING, &seat_name, - DBUS_TYPE_INVALID)) - return bus_send_error_reply(connection, message, &error, -EINVAL); + _cleanup_bus_creds_unref_ sd_bus_creds *creds = NULL; + bool multiple_sessions, blocked; + int interactive, r; + uid_t uid; - session = hashmap_get(m->sessions, session_name); - if (!session) - return bus_send_error_reply(connection, message, &error, -ENOENT); + assert(m); + assert(message); + assert(w >= 0); + assert(w <= _INHIBIT_WHAT_MAX); + assert(action); + assert(action_multiple_sessions); + assert(action_ignore_inhibit); - seat = hashmap_get(m->seats, seat_name); - if (!seat) - return bus_send_error_reply(connection, message, &error, -ENOENT); + r = sd_bus_message_read(message, "b", &interactive); + if (r < 0) + return r; - if (session->seat != seat) - return bus_send_error_reply(connection, message, &error, -EINVAL); + /* Don't allow multiple jobs being executed at the same time */ + if (m->action_what) + return sd_bus_error_setf(error, BUS_ERROR_OPERATION_IN_PROGRESS, "There's already a shutdown or sleep operation in progress"); - r = session_activate(session); + if (sleep_verb) { + r = can_sleep(sleep_verb); if (r < 0) - return bus_send_error_reply(connection, message, NULL, r); - - reply = dbus_message_new_method_return(message); - if (!reply) - goto oom; + return r; - } else if (dbus_message_is_method_call(message, "org.freedesktop.login1.Manager", "LockSession") || - dbus_message_is_method_call(message, "org.freedesktop.login1.Manager", "UnlockSession")) { - const char *name; - Session *session; + if (r == 0) + return sd_bus_error_setf(error, BUS_ERROR_SLEEP_VERB_NOT_SUPPORTED, "Sleep verb not supported"); + } - if (!dbus_message_get_args( - message, - &error, - DBUS_TYPE_STRING, &name, - DBUS_TYPE_INVALID)) - return bus_send_error_reply(connection, message, &error, -EINVAL); + r = sd_bus_query_sender_creds(message, SD_BUS_CREDS_EUID, &creds); + if (r < 0) + return r; - session = hashmap_get(m->sessions, name); - if (!session) - return bus_send_error_reply(connection, message, NULL, -ENOENT); + r = sd_bus_creds_get_euid(creds, &uid); + if (r < 0) + return r; - if (session_send_lock(session, streq(dbus_message_get_member(message), "LockSession")) < 0) - goto oom; + r = have_multiple_sessions(m, uid); + if (r < 0) + return r; - reply = dbus_message_new_method_return(message); - if (!reply) - goto oom; + multiple_sessions = r > 0; + blocked = manager_is_inhibited(m, w, INHIBIT_BLOCK, NULL, false, true, uid, NULL); - } else if (dbus_message_is_method_call(message, "org.freedesktop.login1.Manager", "LockSessions") || - dbus_message_is_method_call(message, "org.freedesktop.login1.Manager", "UnlockSessions")) { + if (multiple_sessions) { + r = bus_verify_polkit_async(message, CAP_SYS_BOOT, action_multiple_sessions, interactive, UID_INVALID, &m->polkit_registry, error); + if (r < 0) + return r; + if (r == 0) + return 1; /* No authorization for now, but the async polkit stuff will call us again when it has it */ + } - r = session_send_lock_all(m, streq(dbus_message_get_member(message), "LockSessions")); + if (blocked) { + r = bus_verify_polkit_async(message, CAP_SYS_BOOT, action_ignore_inhibit, interactive, UID_INVALID, &m->polkit_registry, error); if (r < 0) - bus_send_error_reply(connection, message, NULL, r); + return r; + if (r == 0) + return 1; /* No authorization for now, but the async polkit stuff will call us again when it has it */ + } - reply = dbus_message_new_method_return(message); - if (!reply) - goto oom; + if (!multiple_sessions && !blocked) { + r = bus_verify_polkit_async(message, CAP_SYS_BOOT, action, interactive, UID_INVALID, &m->polkit_registry, error); + if (r < 0) + return r; + if (r == 0) + return 1; /* No authorization for now, but the async polkit stuff will call us again when it has it */ + } - } else if (dbus_message_is_method_call(message, "org.freedesktop.login1.Manager", "KillSession")) { - const char *swho; - int32_t signo; - KillWho who; - const char *name; - Session *session; + r = bus_manager_shutdown_or_sleep_now_or_later(m, sleep_action, w, error); + if (r < 0) + return r; - if (!dbus_message_get_args( - message, - &error, - DBUS_TYPE_STRING, &name, - DBUS_TYPE_STRING, &swho, - DBUS_TYPE_INT32, &signo, - DBUS_TYPE_INVALID)) - return bus_send_error_reply(connection, message, &error, -EINVAL); - - if (isempty(swho)) - who = KILL_ALL; - else { - who = kill_who_from_string(swho); - if (who < 0) - return bus_send_error_reply(connection, message, &error, -EINVAL); - } + return sd_bus_reply_method_return(message, NULL); +} - if (signo <= 0 || signo >= _NSIG) - return bus_send_error_reply(connection, message, &error, -EINVAL); +static int method_poweroff(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) { + Manager *m = userdata; - session = hashmap_get(m->sessions, name); - if (!session) - return bus_send_error_reply(connection, message, &error, -ENOENT); + return method_do_shutdown_or_sleep( + m, message, + HANDLE_POWEROFF, + INHIBIT_SHUTDOWN, + "org.freedesktop.login1.power-off", + "org.freedesktop.login1.power-off-multiple-sessions", + "org.freedesktop.login1.power-off-ignore-inhibit", + NULL, + error); +} - r = session_kill(session, who, signo); - if (r < 0) - return bus_send_error_reply(connection, message, NULL, r); +static int method_reboot(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) { + Manager *m = userdata; - reply = dbus_message_new_method_return(message); - if (!reply) - goto oom; + return method_do_shutdown_or_sleep( + m, message, + HANDLE_REBOOT, + INHIBIT_SHUTDOWN, + "org.freedesktop.login1.reboot", + "org.freedesktop.login1.reboot-multiple-sessions", + "org.freedesktop.login1.reboot-ignore-inhibit", + NULL, + error); +} - } else if (dbus_message_is_method_call(message, "org.freedesktop.login1.Manager", "KillUser")) { - uint32_t uid; - User *user; - int32_t signo; +static int method_suspend(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) { + Manager *m = userdata; - if (!dbus_message_get_args( - message, - &error, - DBUS_TYPE_UINT32, &uid, - DBUS_TYPE_INT32, &signo, - DBUS_TYPE_INVALID)) - return bus_send_error_reply(connection, message, &error, -EINVAL); + return method_do_shutdown_or_sleep( + m, message, + HANDLE_SUSPEND, + INHIBIT_SLEEP, + "org.freedesktop.login1.suspend", + "org.freedesktop.login1.suspend-multiple-sessions", + "org.freedesktop.login1.suspend-ignore-inhibit", + "suspend", + error); +} - if (signo <= 0 || signo >= _NSIG) - return bus_send_error_reply(connection, message, &error, -EINVAL); +static int method_hibernate(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) { + Manager *m = userdata; - user = hashmap_get(m->users, ULONG_TO_PTR((unsigned long) uid)); - if (!user) - return bus_send_error_reply(connection, message, &error, -ENOENT); + return method_do_shutdown_or_sleep( + m, message, + HANDLE_HIBERNATE, + INHIBIT_SLEEP, + "org.freedesktop.login1.hibernate", + "org.freedesktop.login1.hibernate-multiple-sessions", + "org.freedesktop.login1.hibernate-ignore-inhibit", + "hibernate", + error); +} - r = user_kill(user, signo); - if (r < 0) - return bus_send_error_reply(connection, message, NULL, r); +static int method_hybrid_sleep(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) { + Manager *m = userdata; - reply = dbus_message_new_method_return(message); - if (!reply) - goto oom; + return method_do_shutdown_or_sleep( + m, message, + HANDLE_HYBRID_SLEEP, + INHIBIT_SLEEP, + "org.freedesktop.login1.hibernate", + "org.freedesktop.login1.hibernate-multiple-sessions", + "org.freedesktop.login1.hibernate-ignore-inhibit", + "hybrid-sleep", + error); +} - } else if (dbus_message_is_method_call(message, "org.freedesktop.login1.Manager", "TerminateSession")) { - const char *name; - Session *session; +static int method_can_shutdown_or_sleep( + Manager *m, + sd_bus_message *message, + InhibitWhat w, + const char *action, + const char *action_multiple_sessions, + const char *action_ignore_inhibit, + const char *sleep_verb, + sd_bus_error *error) { - if (!dbus_message_get_args( - message, - &error, - DBUS_TYPE_STRING, &name, - DBUS_TYPE_INVALID)) - return bus_send_error_reply(connection, message, &error, -EINVAL); + _cleanup_bus_creds_unref_ sd_bus_creds *creds = NULL; + bool multiple_sessions, challenge, blocked; + const char *result = NULL; + uid_t uid; + int r; - session = hashmap_get(m->sessions, name); - if (!session) - return bus_send_error_reply(connection, message, &error, -ENOENT); + assert(m); + assert(message); + assert(w >= 0); + assert(w <= _INHIBIT_WHAT_MAX); + assert(action); + assert(action_multiple_sessions); + assert(action_ignore_inhibit); - r = session_stop(session); + if (sleep_verb) { + r = can_sleep(sleep_verb); if (r < 0) - return bus_send_error_reply(connection, message, NULL, r); + return r; + if (r == 0) + return sd_bus_reply_method_return(message, "s", "na"); + } - reply = dbus_message_new_method_return(message); - if (!reply) - goto oom; + r = sd_bus_query_sender_creds(message, SD_BUS_CREDS_EUID, &creds); + if (r < 0) + return r; - } else if (dbus_message_is_method_call(message, "org.freedesktop.login1.Manager", "TerminateUser")) { - uint32_t uid; - User *user; + r = sd_bus_creds_get_euid(creds, &uid); + if (r < 0) + return r; - if (!dbus_message_get_args( - message, - &error, - DBUS_TYPE_UINT32, &uid, - DBUS_TYPE_INVALID)) - return bus_send_error_reply(connection, message, &error, -EINVAL); + r = have_multiple_sessions(m, uid); + if (r < 0) + return r; - user = hashmap_get(m->users, ULONG_TO_PTR((unsigned long) uid)); - if (!user) - return bus_send_error_reply(connection, message, &error, -ENOENT); + multiple_sessions = r > 0; + blocked = manager_is_inhibited(m, w, INHIBIT_BLOCK, NULL, false, true, uid, NULL); - r = user_stop(user); + if (multiple_sessions) { + r = bus_test_polkit(message, CAP_SYS_BOOT, action_multiple_sessions, UID_INVALID, &challenge, error); if (r < 0) - return bus_send_error_reply(connection, message, NULL, r); + return r; - reply = dbus_message_new_method_return(message); - if (!reply) - goto oom; + if (r > 0) + result = "yes"; + else if (challenge) + result = "challenge"; + else + result = "no"; + } - } else if (dbus_message_is_method_call(message, "org.freedesktop.login1.Manager", "TerminateSeat")) { - const char *name; - Seat *seat; + if (blocked) { + r = bus_test_polkit(message, CAP_SYS_BOOT, action_ignore_inhibit, UID_INVALID, &challenge, error); + if (r < 0) + return r; - if (!dbus_message_get_args( - message, - &error, - DBUS_TYPE_STRING, &name, - DBUS_TYPE_INVALID)) - return bus_send_error_reply(connection, message, &error, -EINVAL); + if (r > 0 && !result) + result = "yes"; + else if (challenge && (!result || streq(result, "yes"))) + result = "challenge"; + else + result = "no"; + } - seat = hashmap_get(m->seats, name); - if (!seat) - return bus_send_error_reply(connection, message, &error, -ENOENT); + if (!multiple_sessions && !blocked) { + /* If neither inhibit nor multiple sessions + * apply then just check the normal policy */ - r = seat_stop_sessions(seat); - if (r < 0) - return bus_send_error_reply(connection, message, NULL, r); - - reply = dbus_message_new_method_return(message); - if (!reply) - goto oom; - - } else if (dbus_message_is_method_call(message, "org.freedesktop.login1.Manager", "SetUserLinger")) { - uint32_t uid; - struct passwd *pw; - dbus_bool_t b, interactive; - char *path; - - if (!dbus_message_get_args( - message, - &error, - DBUS_TYPE_UINT32, &uid, - DBUS_TYPE_BOOLEAN, &b, - DBUS_TYPE_BOOLEAN, &interactive, - DBUS_TYPE_INVALID)) - return bus_send_error_reply(connection, message, &error, -EINVAL); - - errno = 0; - pw = getpwuid(uid); - if (!pw) - return bus_send_error_reply(connection, message, NULL, errno ? -errno : -EINVAL); - - r = verify_polkit(connection, message, "org.freedesktop.login1.set-user-linger", interactive, NULL, &error); + r = bus_test_polkit(message, CAP_SYS_BOOT, action, UID_INVALID, &challenge, error); if (r < 0) - return bus_send_error_reply(connection, message, &error, r); - - mkdir_p_label("/var/lib/systemd", 0755); + return r; - r = mkdir_safe_label("/var/lib/systemd/linger", 0755, 0, 0); - if (r < 0) - return bus_send_error_reply(connection, message, &error, r); + if (r > 0) + result = "yes"; + else if (challenge) + result = "challenge"; + else + result = "no"; + } - path = strappend("/var/lib/systemd/linger/", pw->pw_name); - if (!path) - goto oom; + return sd_bus_reply_method_return(message, "s", result); +} - if (b) { - User *u; +static int method_can_poweroff(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) { + Manager *m = userdata; - r = touch(path); - free(path); + return method_can_shutdown_or_sleep( + m, message, + INHIBIT_SHUTDOWN, + "org.freedesktop.login1.power-off", + "org.freedesktop.login1.power-off-multiple-sessions", + "org.freedesktop.login1.power-off-ignore-inhibit", + NULL, + error); +} - if (r < 0) - return bus_send_error_reply(connection, message, &error, r); +static int method_can_reboot(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) { + Manager *m = userdata; - if (manager_add_user_by_uid(m, uid, &u) >= 0) - user_start(u); + return method_can_shutdown_or_sleep( + m, message, + INHIBIT_SHUTDOWN, + "org.freedesktop.login1.reboot", + "org.freedesktop.login1.reboot-multiple-sessions", + "org.freedesktop.login1.reboot-ignore-inhibit", + NULL, + error); +} - } else { - User *u; +static int method_can_suspend(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) { + Manager *m = userdata; - r = unlink(path); - free(path); + return method_can_shutdown_or_sleep( + m, message, + INHIBIT_SLEEP, + "org.freedesktop.login1.suspend", + "org.freedesktop.login1.suspend-multiple-sessions", + "org.freedesktop.login1.suspend-ignore-inhibit", + "suspend", + error); +} - if (r < 0 && errno != ENOENT) - return bus_send_error_reply(connection, message, &error, -errno); +static int method_can_hibernate(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) { + Manager *m = userdata; - u = hashmap_get(m->users, ULONG_TO_PTR((unsigned long) uid)); - if (u) - user_add_to_gc_queue(u); - } + return method_can_shutdown_or_sleep( + m, message, + INHIBIT_SLEEP, + "org.freedesktop.login1.hibernate", + "org.freedesktop.login1.hibernate-multiple-sessions", + "org.freedesktop.login1.hibernate-ignore-inhibit", + "hibernate", + error); +} - reply = dbus_message_new_method_return(message); - if (!reply) - goto oom; +static int method_can_hybrid_sleep(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) { + Manager *m = userdata; - } else if (dbus_message_is_method_call(message, "org.freedesktop.login1.Manager", "AttachDevice")) { - const char *sysfs, *seat; - dbus_bool_t interactive; + return method_can_shutdown_or_sleep( + m, message, + INHIBIT_SLEEP, + "org.freedesktop.login1.hibernate", + "org.freedesktop.login1.hibernate-multiple-sessions", + "org.freedesktop.login1.hibernate-ignore-inhibit", + "hybrid-sleep", + error); +} - if (!dbus_message_get_args( - message, - &error, - DBUS_TYPE_STRING, &seat, - DBUS_TYPE_STRING, &sysfs, - DBUS_TYPE_BOOLEAN, &interactive, - DBUS_TYPE_INVALID)) - return bus_send_error_reply(connection, message, &error, -EINVAL); +static int property_get_reboot_to_firmware_setup( + sd_bus *bus, + const char *path, + const char *interface, + const char *property, + sd_bus_message *reply, + void *userdata, + sd_bus_error *error) { + int r; - if (!path_startswith(sysfs, "/sys") || !seat_name_is_valid(seat)) - return bus_send_error_reply(connection, message, NULL, -EINVAL); + assert(bus); + assert(reply); + assert(userdata); - r = verify_polkit(connection, message, "org.freedesktop.login1.attach-device", interactive, NULL, &error); - if (r < 0) - return bus_send_error_reply(connection, message, &error, r); + r = efi_get_reboot_to_firmware(); + if (r < 0 && r != -EOPNOTSUPP) + return r; - r = attach_device(m, seat, sysfs); - if (r < 0) - return bus_send_error_reply(connection, message, NULL, -EINVAL); + return sd_bus_message_append(reply, "b", r > 0); +} - reply = dbus_message_new_method_return(message); - if (!reply) - goto oom; +static int method_set_reboot_to_firmware_setup( + sd_bus *bus, + sd_bus_message *message, + void *userdata, + sd_bus_error *error) { + int b, r; + Manager *m = userdata; - } else if (dbus_message_is_method_call(message, "org.freedesktop.login1.Manager", "FlushDevices")) { - dbus_bool_t interactive; + assert(bus); + assert(message); + assert(m); - if (!dbus_message_get_args( - message, - &error, - DBUS_TYPE_BOOLEAN, &interactive, - DBUS_TYPE_INVALID)) - return bus_send_error_reply(connection, message, &error, -EINVAL); + r = sd_bus_message_read(message, "b", &b); + if (r < 0) + return r; - r = verify_polkit(connection, message, "org.freedesktop.login1.flush-devices", interactive, NULL, &error); - if (r < 0) - return bus_send_error_reply(connection, message, &error, r); + r = bus_verify_polkit_async(message, + CAP_SYS_ADMIN, + "org.freedesktop.login1.set-reboot-to-firmware-setup", + false, + UID_INVALID, + &m->polkit_registry, + error); + if (r < 0) + return r; + if (r == 0) + return 1; /* No authorization for now, but the async polkit stuff will call us again when it has it */ - r = flush_devices(m); - if (r < 0) - return bus_send_error_reply(connection, message, NULL, -EINVAL); - - reply = dbus_message_new_method_return(message); - if (!reply) - goto oom; - - } else if (dbus_message_is_method_call(message, "org.freedesktop.login1.Manager", "PowerOff")) { - - r = bus_manager_do_shutdown_or_sleep( - m, connection, message, - SPECIAL_POWEROFF_TARGET, - INHIBIT_SHUTDOWN, - "org.freedesktop.login1.power-off", - "org.freedesktop.login1.power-off-multiple-sessions", - "org.freedesktop.login1.power-off-ignore-inhibit", - NULL, NULL, - &error, &reply); - if (r < 0) - return bus_send_error_reply(connection, message, &error, r); - } else if (dbus_message_is_method_call(message, "org.freedesktop.login1.Manager", "Reboot")) { - r = bus_manager_do_shutdown_or_sleep( - m, connection, message, - SPECIAL_REBOOT_TARGET, - INHIBIT_SHUTDOWN, - "org.freedesktop.login1.reboot", - "org.freedesktop.login1.reboot-multiple-sessions", - "org.freedesktop.login1.reboot-ignore-inhibit", - NULL, NULL, - &error, &reply); - if (r < 0) - return bus_send_error_reply(connection, message, &error, r); - - } else if (dbus_message_is_method_call(message, "org.freedesktop.login1.Manager", "Suspend")) { - r = bus_manager_do_shutdown_or_sleep( - m, connection, message, - SPECIAL_SUSPEND_TARGET, - INHIBIT_SLEEP, - "org.freedesktop.login1.suspend", - "org.freedesktop.login1.suspend-multiple-sessions", - "org.freedesktop.login1.suspend-ignore-inhibit", - "mem", NULL, - &error, &reply); - if (r < 0) - return bus_send_error_reply(connection, message, &error, r); - } else if (dbus_message_is_method_call(message, "org.freedesktop.login1.Manager", "Hibernate")) { - r = bus_manager_do_shutdown_or_sleep( - m, connection, message, - SPECIAL_HIBERNATE_TARGET, - INHIBIT_SLEEP, - "org.freedesktop.login1.hibernate", - "org.freedesktop.login1.hibernate-multiple-sessions", - "org.freedesktop.login1.hibernate-ignore-inhibit", - "disk", NULL, - &error, &reply); - if (r < 0) - return bus_send_error_reply(connection, message, &error, r); - - } else if (dbus_message_is_method_call(message, "org.freedesktop.login1.Manager", "HybridSleep")) { - r = bus_manager_do_shutdown_or_sleep( - m, connection, message, - SPECIAL_HYBRID_SLEEP_TARGET, - INHIBIT_SLEEP, - "org.freedesktop.login1.hibernate", - "org.freedesktop.login1.hibernate-multiple-sessions", - "org.freedesktop.login1.hibernate-ignore-inhibit", - "disk", "suspend", - &error, &reply); - if (r < 0) - return bus_send_error_reply(connection, message, &error, r); - - } else if (dbus_message_is_method_call(message, "org.freedesktop.login1.Manager", "CanPowerOff")) { - - r = bus_manager_can_shutdown_or_sleep( - m, connection, message, - INHIBIT_SHUTDOWN, - "org.freedesktop.login1.power-off", - "org.freedesktop.login1.power-off-multiple-sessions", - "org.freedesktop.login1.power-off-ignore-inhibit", - NULL, NULL, - &error, &reply); - if (r < 0) - return bus_send_error_reply(connection, message, &error, r); - } else if (dbus_message_is_method_call(message, "org.freedesktop.login1.Manager", "CanReboot")) { - r = bus_manager_can_shutdown_or_sleep( - m, connection, message, - INHIBIT_SHUTDOWN, - "org.freedesktop.login1.reboot", - "org.freedesktop.login1.reboot-multiple-sessions", - "org.freedesktop.login1.reboot-ignore-inhibit", - NULL, NULL, - &error, &reply); - if (r < 0) - return bus_send_error_reply(connection, message, &error, r); - - } else if (dbus_message_is_method_call(message, "org.freedesktop.login1.Manager", "CanSuspend")) { - r = bus_manager_can_shutdown_or_sleep( - m, connection, message, - INHIBIT_SLEEP, - "org.freedesktop.login1.suspend", - "org.freedesktop.login1.suspend-multiple-sessions", - "org.freedesktop.login1.suspend-ignore-inhibit", - "mem", NULL, - &error, &reply); - if (r < 0) - return bus_send_error_reply(connection, message, &error, r); - - } else if (dbus_message_is_method_call(message, "org.freedesktop.login1.Manager", "CanHibernate")) { - r = bus_manager_can_shutdown_or_sleep( - m, connection, message, - INHIBIT_SLEEP, - "org.freedesktop.login1.hibernate", - "org.freedesktop.login1.hibernate-multiple-sessions", - "org.freedesktop.login1.hibernate-ignore-inhibit", - "disk", NULL, - &error, &reply); - if (r < 0) - return bus_send_error_reply(connection, message, &error, r); - - } else if (dbus_message_is_method_call(message, "org.freedesktop.login1.Manager", "CanHybridSleep")) { - r = bus_manager_can_shutdown_or_sleep( - m, connection, message, - INHIBIT_SLEEP, - "org.freedesktop.login1.hibernate", - "org.freedesktop.login1.hibernate-multiple-sessions", - "org.freedesktop.login1.hibernate-ignore-inhibit", - "disk", "suspend", - &error, &reply); - if (r < 0) - return bus_send_error_reply(connection, message, &error, r); + r = efi_set_reboot_to_firmware(b); + if (r < 0) + return r; - } else if (dbus_message_is_method_call(message, "org.freedesktop.DBus.Introspectable", "Introspect")) { - char *introspection = NULL; - FILE *f; - Iterator i; - Session *session; - Seat *seat; - User *user; - size_t size; - char *p; + return sd_bus_reply_method_return(message, NULL); +} - if (!(reply = dbus_message_new_method_return(message))) - goto oom; +static int method_can_reboot_to_firmware_setup( + sd_bus *bus, + sd_bus_message *message, + void *userdata, + sd_bus_error *error) { - /* We roll our own introspection code here, instead of - * relying on bus_default_message_handler() because we - * need to generate our introspection string - * dynamically. */ + int r; + bool challenge; + const char *result; + Manager *m = userdata; - if (!(f = open_memstream(&introspection, &size))) - goto oom; + assert(bus); + assert(message); + assert(m); - fputs(INTROSPECTION_BEGIN, f); + r = efi_reboot_to_firmware_supported(); + if (r == -EOPNOTSUPP) + return sd_bus_reply_method_return(message, "s", "na"); + else if (r < 0) + return r; - HASHMAP_FOREACH(seat, m->seats, i) { - p = bus_path_escape(seat->id); + r = bus_test_polkit(message, + CAP_SYS_ADMIN, + "org.freedesktop.login1.set-reboot-to-firmware-setup", + UID_INVALID, + &challenge, + error); + if (r < 0) + return r; - if (p) { - fprintf(f, "", p); - free(p); - } - } + if (r > 0) + result = "yes"; + else if (challenge) + result = "challenge"; + else + result = "no"; - HASHMAP_FOREACH(user, m->users, i) - fprintf(f, "", (unsigned long long) user->uid); + return sd_bus_reply_method_return(message, "s", result); +} - HASHMAP_FOREACH(session, m->sessions, i) { - p = bus_path_escape(session->id); +static int method_inhibit(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) { + _cleanup_bus_creds_unref_ sd_bus_creds *creds = NULL; + const char *who, *why, *what, *mode; + _cleanup_free_ char *id = NULL; + _cleanup_close_ int fifo_fd = -1; + Manager *m = userdata; + Inhibitor *i = NULL; + InhibitMode mm; + InhibitWhat w; + pid_t pid; + uid_t uid; + int r; - if (p) { - fprintf(f, "", p); - free(p); - } - } + assert(bus); + assert(message); + assert(m); - fputs(INTROSPECTION_END, f); + r = sd_bus_message_read(message, "ssss", &what, &who, &why, &mode); + if (r < 0) + return r; - if (ferror(f)) { - fclose(f); - free(introspection); - goto oom; - } + w = inhibit_what_from_string(what); + if (w <= 0) + return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Invalid what specification %s", what); - fclose(f); + mm = inhibit_mode_from_string(mode); + if (mm < 0) + return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Invalid mode specification %s", mode); - if (!introspection) - goto oom; + /* Delay is only supported for shutdown/sleep */ + if (mm == INHIBIT_DELAY && (w & ~(INHIBIT_SHUTDOWN|INHIBIT_SLEEP))) + return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Delay inhibitors only supported for shutdown and sleep"); - if (!dbus_message_append_args(reply, DBUS_TYPE_STRING, &introspection, DBUS_TYPE_INVALID)) { - free(introspection); - goto oom; - } + /* Don't allow taking delay locks while we are already + * executing the operation. We shouldn't create the impression + * that the lock was successful if the machine is about to go + * down/suspend any moment. */ + if (m->action_what & w) + return sd_bus_error_setf(error, BUS_ERROR_OPERATION_IN_PROGRESS, "The operation inhibition has been requested for is already running"); + + r = bus_verify_polkit_async( + message, + CAP_SYS_BOOT, + w == INHIBIT_SHUTDOWN ? (mm == INHIBIT_BLOCK ? "org.freedesktop.login1.inhibit-block-shutdown" : "org.freedesktop.login1.inhibit-delay-shutdown") : + w == INHIBIT_SLEEP ? (mm == INHIBIT_BLOCK ? "org.freedesktop.login1.inhibit-block-sleep" : "org.freedesktop.login1.inhibit-delay-sleep") : + w == INHIBIT_IDLE ? "org.freedesktop.login1.inhibit-block-idle" : + w == INHIBIT_HANDLE_POWER_KEY ? "org.freedesktop.login1.inhibit-handle-power-key" : + w == INHIBIT_HANDLE_SUSPEND_KEY ? "org.freedesktop.login1.inhibit-handle-suspend-key" : + w == INHIBIT_HANDLE_HIBERNATE_KEY ? "org.freedesktop.login1.inhibit-handle-hibernate-key" : + "org.freedesktop.login1.inhibit-handle-lid-switch", + false, + UID_INVALID, + &m->polkit_registry, + error); + if (r < 0) + return r; + if (r == 0) + return 1; /* No authorization for now, but the async polkit stuff will call us again when it has it */ - free(introspection); - } else { - const BusBoundProperties bps[] = { - { "org.freedesktop.login1.Manager", bus_login_manager_properties, m }, - { NULL, } - }; - return bus_default_message_handler(connection, message, NULL, INTERFACES_LIST, bps); - } + r = sd_bus_query_sender_creds(message, SD_BUS_CREDS_EUID|SD_BUS_CREDS_PID, &creds); + if (r < 0) + return r; - if (reply) { - if (!bus_maybe_send_reply(connection, message, reply)) - goto oom; - } + r = sd_bus_creds_get_euid(creds, &uid); + if (r < 0) + return r; - return DBUS_HANDLER_RESULT_HANDLED; + r = sd_bus_creds_get_pid(creds, &pid); + if (r < 0) + return r; -oom: - dbus_error_free(&error); + do { + free(id); + id = NULL; - return DBUS_HANDLER_RESULT_NEED_MEMORY; -} + if (asprintf(&id, "%lu", ++m->inhibit_counter) < 0) + return -ENOMEM; -const DBusObjectPathVTable bus_manager_vtable = { - .message_function = manager_message_handler -}; + } while (hashmap_get(m->inhibitors, id)); -DBusHandlerResult bus_message_filter( - DBusConnection *connection, - DBusMessage *message, - void *userdata) { + r = manager_add_inhibitor(m, id, &i); + if (r < 0) + return r; - Manager *m = userdata; - DBusError error; + i->what = w; + i->mode = mm; + i->pid = pid; + i->uid = uid; + i->why = strdup(why); + i->who = strdup(who); - assert(m); - assert(connection); - assert(message); + if (!i->why || !i->who) { + r = -ENOMEM; + goto fail; + } - dbus_error_init(&error); + fifo_fd = inhibitor_create_fifo(i); + if (fifo_fd < 0) { + r = fifo_fd; + goto fail; + } - if (dbus_message_is_signal(message, "org.freedesktop.systemd1.Agent", "Released")) { - const char *cgroup; + inhibitor_start(i); - if (!dbus_message_get_args(message, &error, - DBUS_TYPE_STRING, &cgroup, - DBUS_TYPE_INVALID)) - log_error("Failed to parse Released message: %s", bus_error_message(&error)); - else - manager_cgroup_notify_empty(m, cgroup); - - } else if (dbus_message_is_signal(message, "org.freedesktop.systemd1.Manager", "JobRemoved")) { - uint32_t id; - const char *path, *result, *unit; - - if (!dbus_message_get_args(message, &error, - DBUS_TYPE_UINT32, &id, - DBUS_TYPE_OBJECT_PATH, &path, - DBUS_TYPE_STRING, &unit, - DBUS_TYPE_STRING, &result, - DBUS_TYPE_INVALID)) - log_error("Failed to parse JobRemoved message: %s", bus_error_message(&error)); - - else if (m->action_job && streq(m->action_job, path)) { - log_info("Operation finished."); - - /* Tell people that they now may take a lock again */ - send_prepare_for(m, m->action_what, false); - - free(m->action_job); - m->action_job = NULL; - m->action_unit = NULL; - m->action_what = 0; - } - } + return sd_bus_reply_method_return(message, "h", fifo_fd); - dbus_error_free(&error); +fail: + if (i) + inhibitor_free(i); - return DBUS_HANDLER_RESULT_NOT_YET_HANDLED; + return r; } -int manager_send_changed(Manager *manager, const char *properties) { - _cleanup_dbus_message_unref_ DBusMessage *m = NULL; +const sd_bus_vtable manager_vtable[] = { + SD_BUS_VTABLE_START(0), + + SD_BUS_PROPERTY("KillOnlyUsers", "as", NULL, offsetof(Manager, kill_only_users), SD_BUS_VTABLE_PROPERTY_CONST), + SD_BUS_PROPERTY("KillExcludeUsers", "as", NULL, offsetof(Manager, kill_exclude_users), SD_BUS_VTABLE_PROPERTY_CONST), + SD_BUS_PROPERTY("KillUserProcesses", "b", NULL, offsetof(Manager, kill_user_processes), SD_BUS_VTABLE_PROPERTY_CONST), + SD_BUS_PROPERTY("RebootToFirmwareSetup", "b", property_get_reboot_to_firmware_setup, 0, SD_BUS_VTABLE_PROPERTY_CONST), + SD_BUS_PROPERTY("IdleHint", "b", property_get_idle_hint, 0, SD_BUS_VTABLE_PROPERTY_EMITS_CHANGE), + SD_BUS_PROPERTY("IdleSinceHint", "t", property_get_idle_since_hint, 0, SD_BUS_VTABLE_PROPERTY_EMITS_CHANGE), + SD_BUS_PROPERTY("IdleSinceHintMonotonic", "t", property_get_idle_since_hint, 0, SD_BUS_VTABLE_PROPERTY_EMITS_CHANGE), + SD_BUS_PROPERTY("BlockInhibited", "s", property_get_inhibited, 0, SD_BUS_VTABLE_PROPERTY_EMITS_CHANGE), + SD_BUS_PROPERTY("DelayInhibited", "s", property_get_inhibited, 0, SD_BUS_VTABLE_PROPERTY_EMITS_CHANGE), + SD_BUS_PROPERTY("InhibitDelayMaxUSec", "t", NULL, offsetof(Manager, inhibit_delay_max), SD_BUS_VTABLE_PROPERTY_CONST), + SD_BUS_PROPERTY("HandlePowerKey", "s", property_get_handle_action, offsetof(Manager, handle_power_key), SD_BUS_VTABLE_PROPERTY_CONST), + SD_BUS_PROPERTY("HandleSuspendKey", "s", property_get_handle_action, offsetof(Manager, handle_suspend_key), SD_BUS_VTABLE_PROPERTY_CONST), + SD_BUS_PROPERTY("HandleHibernateKey", "s", property_get_handle_action, offsetof(Manager, handle_hibernate_key), SD_BUS_VTABLE_PROPERTY_CONST), + SD_BUS_PROPERTY("HandleLidSwitch", "s", property_get_handle_action, offsetof(Manager, handle_lid_switch), SD_BUS_VTABLE_PROPERTY_CONST), + SD_BUS_PROPERTY("HandleLidSwitchDocked", "s", property_get_handle_action, offsetof(Manager, handle_lid_switch_docked), SD_BUS_VTABLE_PROPERTY_CONST), + SD_BUS_PROPERTY("HoldoffTimeoutUSec", "t", NULL, offsetof(Manager, holdoff_timeout_usec), SD_BUS_VTABLE_PROPERTY_CONST), + SD_BUS_PROPERTY("IdleAction", "s", property_get_handle_action, offsetof(Manager, idle_action), SD_BUS_VTABLE_PROPERTY_CONST), + SD_BUS_PROPERTY("IdleActionUSec", "t", NULL, offsetof(Manager, idle_action_usec), SD_BUS_VTABLE_PROPERTY_CONST), + SD_BUS_PROPERTY("PreparingForShutdown", "b", property_get_preparing, 0, 0), + SD_BUS_PROPERTY("PreparingForSleep", "b", property_get_preparing, 0, 0), + + SD_BUS_METHOD("GetSession", "s", "o", method_get_session, SD_BUS_VTABLE_UNPRIVILEGED), + SD_BUS_METHOD("GetSessionByPID", "u", "o", method_get_session_by_pid, SD_BUS_VTABLE_UNPRIVILEGED), + SD_BUS_METHOD("GetUser", "u", "o", method_get_user, SD_BUS_VTABLE_UNPRIVILEGED), + SD_BUS_METHOD("GetUserByPID", "u", "o", method_get_user_by_pid, SD_BUS_VTABLE_UNPRIVILEGED), + SD_BUS_METHOD("GetSeat", "s", "o", method_get_seat, SD_BUS_VTABLE_UNPRIVILEGED), + SD_BUS_METHOD("ListSessions", NULL, "a(susso)", method_list_sessions, SD_BUS_VTABLE_UNPRIVILEGED), + SD_BUS_METHOD("ListUsers", NULL, "a(uso)", method_list_users, SD_BUS_VTABLE_UNPRIVILEGED), + SD_BUS_METHOD("ListSeats", NULL, "a(so)", method_list_seats, SD_BUS_VTABLE_UNPRIVILEGED), + SD_BUS_METHOD("ListInhibitors", NULL, "a(ssssuu)", method_list_inhibitors, SD_BUS_VTABLE_UNPRIVILEGED), + SD_BUS_METHOD("CreateSession", "uusssssussbssa(sv)", "soshusub", method_create_session, 0), + SD_BUS_METHOD("ReleaseSession", "s", NULL, method_release_session, 0), + SD_BUS_METHOD("ActivateSession", "s", NULL, method_activate_session, SD_BUS_VTABLE_UNPRIVILEGED), + SD_BUS_METHOD("ActivateSessionOnSeat", "ss", NULL, method_activate_session_on_seat, SD_BUS_VTABLE_UNPRIVILEGED), + SD_BUS_METHOD("LockSession", "s", NULL, method_lock_session, SD_BUS_VTABLE_UNPRIVILEGED), + SD_BUS_METHOD("UnlockSession", "s", NULL, method_lock_session, SD_BUS_VTABLE_UNPRIVILEGED), + SD_BUS_METHOD("LockSessions", NULL, NULL, method_lock_sessions, SD_BUS_VTABLE_UNPRIVILEGED), + SD_BUS_METHOD("UnlockSessions", NULL, NULL, method_lock_sessions, SD_BUS_VTABLE_UNPRIVILEGED), + SD_BUS_METHOD("KillSession", "ssi", NULL, method_kill_session, SD_BUS_VTABLE_UNPRIVILEGED), + SD_BUS_METHOD("KillUser", "ui", NULL, method_kill_user, SD_BUS_VTABLE_UNPRIVILEGED), + SD_BUS_METHOD("TerminateSession", "s", NULL, method_terminate_session, SD_BUS_VTABLE_UNPRIVILEGED), + SD_BUS_METHOD("TerminateUser", "u", NULL, method_terminate_user, SD_BUS_VTABLE_UNPRIVILEGED), + SD_BUS_METHOD("TerminateSeat", "s", NULL, method_terminate_seat, SD_BUS_VTABLE_UNPRIVILEGED), + SD_BUS_METHOD("SetUserLinger", "ubb", NULL, method_set_user_linger, SD_BUS_VTABLE_UNPRIVILEGED), + SD_BUS_METHOD("AttachDevice", "ssb", NULL, method_attach_device, SD_BUS_VTABLE_UNPRIVILEGED), + SD_BUS_METHOD("FlushDevices", "b", NULL, method_flush_devices, SD_BUS_VTABLE_UNPRIVILEGED), + SD_BUS_METHOD("PowerOff", "b", NULL, method_poweroff, SD_BUS_VTABLE_UNPRIVILEGED), + SD_BUS_METHOD("Reboot", "b", NULL, method_reboot, SD_BUS_VTABLE_UNPRIVILEGED), + SD_BUS_METHOD("Suspend", "b", NULL, method_suspend, SD_BUS_VTABLE_UNPRIVILEGED), + SD_BUS_METHOD("Hibernate", "b", NULL, method_hibernate, SD_BUS_VTABLE_UNPRIVILEGED), + SD_BUS_METHOD("HybridSleep", "b", NULL, method_hybrid_sleep, SD_BUS_VTABLE_UNPRIVILEGED), + SD_BUS_METHOD("CanPowerOff", NULL, "s", method_can_poweroff, SD_BUS_VTABLE_UNPRIVILEGED), + SD_BUS_METHOD("CanReboot", NULL, "s", method_can_reboot, SD_BUS_VTABLE_UNPRIVILEGED), + SD_BUS_METHOD("CanSuspend", NULL, "s", method_can_suspend, SD_BUS_VTABLE_UNPRIVILEGED), + SD_BUS_METHOD("CanHibernate", NULL, "s", method_can_hibernate, SD_BUS_VTABLE_UNPRIVILEGED), + SD_BUS_METHOD("CanHybridSleep", NULL, "s", method_can_hybrid_sleep, SD_BUS_VTABLE_UNPRIVILEGED), + SD_BUS_METHOD("Inhibit", "ssss", "h", method_inhibit, SD_BUS_VTABLE_UNPRIVILEGED), + SD_BUS_METHOD("CanRebootToFirmwareSetup", NULL, "s", method_can_reboot_to_firmware_setup, SD_BUS_VTABLE_UNPRIVILEGED), + SD_BUS_METHOD("SetRebootToFirmwareSetup", "b", NULL, method_set_reboot_to_firmware_setup, SD_BUS_VTABLE_UNPRIVILEGED), + + SD_BUS_SIGNAL("SessionNew", "so", 0), + SD_BUS_SIGNAL("SessionRemoved", "so", 0), + SD_BUS_SIGNAL("UserNew", "uo", 0), + SD_BUS_SIGNAL("UserRemoved", "uo", 0), + SD_BUS_SIGNAL("SeatNew", "so", 0), + SD_BUS_SIGNAL("SeatRemoved", "so", 0), + SD_BUS_SIGNAL("PrepareForShutdown", "b", 0), + SD_BUS_SIGNAL("PrepareForSleep", "b", 0), + + SD_BUS_VTABLE_END +}; - assert(manager); +int manager_send_changed(Manager *manager, const char *property, ...) { + char **l; - m = bus_properties_changed_new("/org/freedesktop/login1", - "org.freedesktop.login1.Manager", - properties); - if (!m) - return -ENOMEM; + assert(manager); - if (!dbus_connection_send(manager->bus, m, NULL)) - return -ENOMEM; + l = strv_from_stdarg_alloca(property); - return 0; + return sd_bus_emit_properties_changed_strv( + manager->bus, + "/org/freedesktop/login1", + "org.freedesktop.login1.Manager", + l); } int manager_dispatch_delayed(Manager *manager) { - DBusError error; + _cleanup_bus_error_free_ sd_bus_error error = SD_BUS_ERROR_NULL; + Inhibitor *offending = NULL; int r; assert(manager); - if (manager->action_what == 0 || manager->action_job) + if (manager->action_what == 0) return 0; /* Continue delay? */ - if (manager_is_inhibited(manager, manager->action_what, INHIBIT_DELAY, NULL, false, false, 0)) { + if (manager_is_inhibited(manager, manager->action_what, INHIBIT_DELAY, NULL, false, false, 0, &offending)) { + _cleanup_free_ char *comm = NULL, *u = NULL; + + get_process_comm(offending->pid, &comm); + u = uid_to_name(offending->uid); if (manager->action_timestamp + manager->inhibit_delay_max > now(CLOCK_MONOTONIC)) return 0; - log_info("Delay lock is active but inhibitor timeout is reached."); + log_info("Delay lock is active (UID "UID_FMT"/%s, PID "PID_FMT"/%s) but inhibitor timeout is reached.", + offending->uid, strna(u), + offending->pid, strna(comm)); } /* Actually do the operation */ - dbus_error_init(&error); - r = execute_shutdown_or_sleep(manager, manager->action_what, manager->action_unit, &error); + r = execute_shutdown_or_sleep(manager, manager->action_what, manager->pending_action, &error); if (r < 0) { - log_warning("Failed to send delayed message: %s", bus_error(&error, r)); - dbus_error_free(&error); + log_warning("Failed to send delayed message: %s", bus_error_message(&error, r)); - manager->action_unit = NULL; + manager->pending_action = HANDLE_IGNORE; manager->action_what = 0; return r; }