X-Git-Url: http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=elogind.git;a=blobdiff_plain;f=src%2Flogin%2Flogind-dbus.c;h=e929e22de709596d38ccf2d94c84dc873a9b1564;hp=39af637d1b03d0996f562d5848292786f37e019d;hb=9e38b5f64afd34bf36b4134c108207b918b93159;hpb=7fb3ee51c1b37738fd0ea2c81dfd6c336144698a diff --git a/src/login/logind-dbus.c b/src/login/logind-dbus.c index 39af637d1..e929e22de 100644 --- a/src/login/logind-dbus.c +++ b/src/login/logind-dbus.c @@ -24,2818 +24,2154 @@ #include #include -#include "logind.h" -#include "dbus-common.h" +#include "sd-messages.h" #include "strv.h" #include "mkdir.h" #include "path-util.h" -#include "polkit.h" #include "special.h" #include "sleep-config.h" -#include "systemd/sd-id128.h" -#include "systemd/sd-messages.h" #include "fileio-label.h" -#include "label.h" -#include "utf8.h" #include "unit-name.h" -#include "bus-errors.h" -#include "virt.h" - -#define BUS_MANAGER_INTERFACE \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" \ - " \n" - -#define INTROSPECTION_BEGIN \ - DBUS_INTROSPECT_1_0_XML_DOCTYPE_DECL_NODE \ - "\n" \ - BUS_MANAGER_INTERFACE \ - BUS_PROPERTIES_INTERFACE \ - BUS_PEER_INTERFACE \ - BUS_INTROSPECTABLE_INTERFACE - -#define INTROSPECTION_END \ - "\n" - -#define INTERFACES_LIST \ - BUS_GENERIC_INTERFACES_LIST \ - "org.freedesktop.login1.Manager\0" - -static int bus_manager_append_idle_hint(DBusMessageIter *i, const char *property, void *data) { - Manager *m = data; - dbus_bool_t b; - - assert(i); - assert(property); +#include "audit.h" +#include "bus-util.h" +#include "bus-error.h" +#include "bus-common-errors.h" +#include "udev-util.h" +#include "selinux-util.h" +#include "efivars.h" +#include "logind.h" + +int manager_get_session_from_creds(Manager *m, sd_bus_message *message, const char *name, sd_bus_error *error, Session **ret) { + _cleanup_bus_creds_unref_ sd_bus_creds *creds = NULL; + Session *session; + int r; + assert(m); + assert(message); + assert(ret); - b = manager_get_idle_hint(m, NULL) > 0; - if (!dbus_message_iter_append_basic(i, DBUS_TYPE_BOOLEAN, &b)) - return -ENOMEM; + if (isempty(name)) { + r = sd_bus_query_sender_creds(message, SD_BUS_CREDS_SESSION|SD_BUS_CREDS_AUGMENT, &creds); + if (r < 0) + return r; + + r = sd_bus_creds_get_session(creds, &name); + if (r < 0) + return r; + } + session = hashmap_get(m->sessions, name); + if (!session) + return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_SESSION, "No session '%s' known", name); + + *ret = session; return 0; } -static int bus_manager_append_idle_hint_since(DBusMessageIter *i, const char *property, void *data) { - Manager *m = data; - dual_timestamp t; - uint64_t u; +int manager_get_user_from_creds(Manager *m, sd_bus_message *message, uid_t uid, sd_bus_error *error, User **ret) { + User *user; + int r; - assert(i); - assert(property); assert(m); + assert(message); + assert(ret); - manager_get_idle_hint(m, &t); - u = streq(property, "IdleSinceHint") ? t.realtime : t.monotonic; + if (uid == UID_INVALID) { + _cleanup_bus_creds_unref_ sd_bus_creds *creds = NULL; - if (!dbus_message_iter_append_basic(i, DBUS_TYPE_UINT64, &u)) - return -ENOMEM; + /* Note that we get the owner UID of the session, not the actual client UID here! */ + r = sd_bus_query_sender_creds(message, SD_BUS_CREDS_OWNER_UID|SD_BUS_CREDS_AUGMENT, &creds); + if (r < 0) + return r; + + r = sd_bus_creds_get_owner_uid(creds, &uid); + if (r < 0) + return r; + } + user = hashmap_get(m->users, UID_TO_PTR(uid)); + if (!user) + return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_USER, "No user "UID_FMT" known or logged in", uid); + + *ret = user; return 0; } -static int bus_manager_append_inhibited(DBusMessageIter *i, const char *property, void *data) { - Manager *m = data; - InhibitWhat w; - const char *p; - - w = manager_inhibit_what(m, streq(property, "BlockInhibited") ? INHIBIT_BLOCK : INHIBIT_DELAY); - p = inhibit_what_to_string(w); +int manager_get_seat_from_creds(Manager *m, sd_bus_message *message, const char *name, sd_bus_error *error, Seat **ret) { + Seat *seat; + int r; - if (!dbus_message_iter_append_basic(i, DBUS_TYPE_STRING, &p)) - return -ENOMEM; + assert(m); + assert(message); + assert(ret); - return 0; -} + if (isempty(name)) { + Session *session; -static int bus_manager_append_preparing(DBusMessageIter *i, const char *property, void *data) { - Manager *m = data; - dbus_bool_t b; + r = manager_get_session_from_creds(m, message, NULL, error, &session); + if (r < 0) + return r; - assert(i); - assert(property); + seat = session->seat; - if (streq(property, "PreparingForShutdown")) - b = !!(m->action_what & INHIBIT_SHUTDOWN); - else - b = !!(m->action_what & INHIBIT_SLEEP); + if (!seat) + return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_SEAT, "Session has no seat."); + } else { + seat = hashmap_get(m->seats, name); + if (!seat) + return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_SEAT, "No seat '%s' known", name); + } - dbus_message_iter_append_basic(i, DBUS_TYPE_BOOLEAN, &b); + *ret = seat; return 0; } -static int bus_manager_create_session(Manager *m, DBusMessage *message) { +static int property_get_idle_hint( + sd_bus *bus, + const char *path, + const char *interface, + const char *property, + sd_bus_message *reply, + void *userdata, + sd_bus_error *error) { - const char *type, *class, *cseat, *tty, *display, *remote_user, *remote_host, *service; - uint32_t uid, leader, audit_id = 0; - _cleanup_free_ char *id = NULL; - Session *session = NULL; - User *user = NULL; - Seat *seat = NULL; - DBusMessageIter iter; - dbus_bool_t remote; - uint32_t vtnr = 0; - SessionType t; - SessionClass c; - bool b; - int r; + Manager *m = userdata; + assert(bus); + assert(reply); assert(m); - assert(message); - if (!dbus_message_iter_init(message, &iter) || - dbus_message_iter_get_arg_type(&iter) != DBUS_TYPE_UINT32) - return -EINVAL; + return sd_bus_message_append(reply, "b", manager_get_idle_hint(m, NULL) > 0); +} - dbus_message_iter_get_basic(&iter, &uid); +static int property_get_idle_since_hint( + sd_bus *bus, + const char *path, + const char *interface, + const char *property, + sd_bus_message *reply, + void *userdata, + sd_bus_error *error) { - if (!dbus_message_iter_next(&iter) || - dbus_message_iter_get_arg_type(&iter) != DBUS_TYPE_UINT32) - return -EINVAL; + Manager *m = userdata; + dual_timestamp t; - dbus_message_iter_get_basic(&iter, &leader); + assert(bus); + assert(reply); + assert(m); - if (!dbus_message_iter_next(&iter) || - dbus_message_iter_get_arg_type(&iter) != DBUS_TYPE_STRING) - return -EINVAL; + manager_get_idle_hint(m, &t); - dbus_message_iter_get_basic(&iter, &service); + return sd_bus_message_append(reply, "t", streq(property, "IdleSinceHint") ? t.realtime : t.monotonic); +} - if (!dbus_message_iter_next(&iter) || - dbus_message_iter_get_arg_type(&iter) != DBUS_TYPE_STRING) - return -EINVAL; +static int property_get_inhibited( + sd_bus *bus, + const char *path, + const char *interface, + const char *property, + sd_bus_message *reply, + void *userdata, + sd_bus_error *error) { - dbus_message_iter_get_basic(&iter, &type); - if (isempty(type)) - t = _SESSION_TYPE_INVALID; - else { - t = session_type_from_string(type); - if (t < 0) - return -EINVAL; - } + Manager *m = userdata; + InhibitWhat w; - if (!dbus_message_iter_next(&iter) || - dbus_message_iter_get_arg_type(&iter) != DBUS_TYPE_STRING) - return -EINVAL; + assert(bus); + assert(reply); + assert(m); - dbus_message_iter_get_basic(&iter, &class); - if (isempty(class)) - c = _SESSION_CLASS_INVALID; - else { - c = session_class_from_string(class); - if (c < 0) - return -EINVAL; - } + w = manager_inhibit_what(m, streq(property, "BlockInhibited") ? INHIBIT_BLOCK : INHIBIT_DELAY); - if (!dbus_message_iter_next(&iter) || - dbus_message_iter_get_arg_type(&iter) != DBUS_TYPE_STRING) - return -EINVAL; + return sd_bus_message_append(reply, "s", inhibit_what_to_string(w)); +} - dbus_message_iter_get_basic(&iter, &cseat); +static int property_get_preparing( + sd_bus *bus, + const char *path, + const char *interface, + const char *property, + sd_bus_message *reply, + void *userdata, + sd_bus_error *error) { - if (isempty(cseat)) - seat = NULL; - else { - seat = hashmap_get(m->seats, cseat); - if (!seat) - return -ENOENT; - } + Manager *m = userdata; + bool b; - if (!dbus_message_iter_next(&iter) || - dbus_message_iter_get_arg_type(&iter) != DBUS_TYPE_UINT32) - return -EINVAL; + assert(bus); + assert(reply); + assert(m); - dbus_message_iter_get_basic(&iter, &vtnr); + if (streq(property, "PreparingForShutdown")) + b = !!(m->action_what & INHIBIT_SHUTDOWN); + else + b = !!(m->action_what & INHIBIT_SLEEP); - if (!dbus_message_iter_next(&iter) || - dbus_message_iter_get_arg_type(&iter) != DBUS_TYPE_STRING) - return -EINVAL; + return sd_bus_message_append(reply, "b", b); +} - dbus_message_iter_get_basic(&iter, &tty); +static BUS_DEFINE_PROPERTY_GET_ENUM(property_get_handle_action, handle_action, HandleAction); - if (tty_is_vc(tty)) { - int v; +static int method_get_session(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) { + _cleanup_free_ char *p = NULL; + Manager *m = userdata; + const char *name; + Session *session; + int r; - if (!seat) - seat = m->vtconsole; - else if (seat != m->vtconsole) - return -EINVAL; + assert(bus); + assert(message); + assert(m); - v = vtnr_from_tty(tty); + r = sd_bus_message_read(message, "s", &name); + if (r < 0) + return r; - if (v <= 0) - return v < 0 ? v : -EINVAL; + r = manager_get_session_from_creds(m, message, name, error, &session); + if (r < 0) + return r; - if (vtnr <= 0) - vtnr = (uint32_t) v; - else if (vtnr != (uint32_t) v) - return -EINVAL; - } else if (tty_is_console(tty)) { + p = session_bus_path(session); + if (!p) + return -ENOMEM; - if (!seat) - seat = m->vtconsole; - else if (seat != m->vtconsole) - return -EINVAL; + return sd_bus_reply_method_return(message, "o", p); +} - if (vtnr != 0) - return -EINVAL; - } +static int method_get_session_by_pid(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) { + _cleanup_free_ char *p = NULL; + Session *session = NULL; + Manager *m = userdata; + pid_t pid; + int r; - if (seat) { - if (seat_can_multi_session(seat)) { - if (vtnr > 63) - return -EINVAL; - } else { - if (vtnr != 0) - return -EINVAL; - } - } + assert(bus); + assert(message); + assert(m); - if (!dbus_message_iter_next(&iter) || - dbus_message_iter_get_arg_type(&iter) != DBUS_TYPE_STRING) - return -EINVAL; + assert_cc(sizeof(pid_t) == sizeof(uint32_t)); - dbus_message_iter_get_basic(&iter, &display); + r = sd_bus_message_read(message, "u", &pid); + if (r < 0) + return r; - if (!dbus_message_iter_next(&iter) || - dbus_message_iter_get_arg_type(&iter) != DBUS_TYPE_BOOLEAN) - return -EINVAL; + if (pid <= 0) { + r = manager_get_session_from_creds(m, message, NULL, error, &session); + if (r < 0) + return r; + } else { + r = manager_get_session_by_pid(m, pid, &session); + if (r < 0) + return r; - if (t == _SESSION_TYPE_INVALID) { - if (!isempty(display)) - t = SESSION_X11; - else if (!isempty(tty)) - t = SESSION_TTY; - else - t = SESSION_UNSPECIFIED; + if (!session) + return sd_bus_error_setf(error, BUS_ERROR_NO_SESSION_FOR_PID, "PID "PID_FMT" does not belong to any known session", pid); } - if (c == _SESSION_CLASS_INVALID) { - if (!isempty(display) || !isempty(tty)) - c = SESSION_USER; - else - c = SESSION_BACKGROUND; - } + p = session_bus_path(session); + if (!p) + return -ENOMEM; - dbus_message_iter_get_basic(&iter, &remote); + return sd_bus_reply_method_return(message, "o", p); +} - if (!dbus_message_iter_next(&iter) || - dbus_message_iter_get_arg_type(&iter) != DBUS_TYPE_STRING) - return -EINVAL; +static int method_get_user(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) { + _cleanup_free_ char *p = NULL; + Manager *m = userdata; + uint32_t uid; + User *user; + int r; - dbus_message_iter_get_basic(&iter, &remote_user); + assert(bus); + assert(message); + assert(m); - if (!dbus_message_iter_next(&iter) || - dbus_message_iter_get_arg_type(&iter) != DBUS_TYPE_STRING) - return -EINVAL; + r = sd_bus_message_read(message, "u", &uid); + if (r < 0) + return r; - dbus_message_iter_get_basic(&iter, &remote_host); + r = manager_get_user_from_creds(m, message, uid, error, &user); + if (r < 0) + return r; - if (leader <= 0) { - leader = bus_get_unix_process_id(m->bus, dbus_message_get_sender(message), NULL); - if (leader == 0) - return -EINVAL; - } + p = user_bus_path(user); + if (!p) + return -ENOMEM; - r = manager_get_session_by_pid(m, leader, &session); - if (session) { - _cleanup_dbus_message_unref_ DBusMessage *reply = NULL; - _cleanup_free_ char *path = NULL; - _cleanup_close_ int fifo_fd = -1; - dbus_bool_t exists; + return sd_bus_reply_method_return(message, "o", p); +} - /* Session already exists, client is probably - * something like "su" which changes uid but is still - * the same session */ +static int method_get_user_by_pid(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) { + _cleanup_free_ char *p = NULL; + Manager *m = userdata; + User *user = NULL; + pid_t pid; + int r; - fifo_fd = session_create_fifo(session); - if (fifo_fd < 0) { - r = fifo_fd; - goto fail; - } + assert(bus); + assert(message); + assert(m); - path = session_bus_path(session); - if (!path) { - r = -ENOMEM; - goto fail; - } + assert_cc(sizeof(pid_t) == sizeof(uint32_t)); - reply = dbus_message_new_method_return(message); - if (!reply) { - r = -ENOMEM; - goto fail; - } + r = sd_bus_message_read(message, "u", &pid); + if (r < 0) + return r; - cseat = session->seat ? session->seat->id : ""; - vtnr = session->vtnr; - exists = true; - - b = dbus_message_append_args( - reply, - DBUS_TYPE_STRING, &session->id, - DBUS_TYPE_OBJECT_PATH, &path, - DBUS_TYPE_STRING, &session->user->runtime_path, - DBUS_TYPE_UNIX_FD, &fifo_fd, - DBUS_TYPE_STRING, &cseat, - DBUS_TYPE_UINT32, &vtnr, - DBUS_TYPE_BOOLEAN, &exists, - DBUS_TYPE_INVALID); - if (!b) { - r = -ENOMEM; - goto fail; - } + if (pid <= 0) { + r = manager_get_user_from_creds(m, message, UID_INVALID, error, &user); + if (r < 0) + return r; + } else { + r = manager_get_user_by_pid(m, pid, &user); + if (r < 0) + return r; + if (!user) + return sd_bus_error_setf(error, BUS_ERROR_NO_USER_FOR_PID, "PID "PID_FMT" does not belong to any known or logged in user", pid); + } - if (!dbus_connection_send(m->bus, reply, NULL)) { - r = -ENOMEM; - goto fail; - } + p = user_bus_path(user); + if (!p) + return -ENOMEM; - return 0; - } + return sd_bus_reply_method_return(message, "o", p); +} - audit_session_from_pid(leader, &audit_id); - if (audit_id > 0) { - /* Keep our session IDs and the audit session IDs in sync */ +static int method_get_seat(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) { + _cleanup_free_ char *p = NULL; + Manager *m = userdata; + const char *name; + Seat *seat; + int r; - if (asprintf(&id, "%lu", (unsigned long) audit_id) < 0) { - r = -ENOMEM; - goto fail; - } + assert(bus); + assert(message); + assert(m); - /* Wut? There's already a session by this name and we - * didn't find it above? Weird, then let's not trust - * the audit data and let's better register a new - * ID */ - if (hashmap_get(m->sessions, id)) { - audit_id = 0; + r = sd_bus_message_read(message, "s", &name); + if (r < 0) + return r; - free(id); - id = NULL; - } - } + r = manager_get_seat_from_creds(m, message, name, error, &seat); + if (r < 0) + return r; - if (!id) { - do { - free(id); - id = NULL; + p = seat_bus_path(seat); + if (!p) + return -ENOMEM; - if (asprintf(&id, "c%lu", ++m->session_counter) < 0) { - r = -ENOMEM; - goto fail; - } + return sd_bus_reply_method_return(message, "o", p); +} - } while (hashmap_get(m->sessions, id)); - } +static int method_list_sessions(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) { + _cleanup_bus_message_unref_ sd_bus_message *reply = NULL; + Manager *m = userdata; + Session *session; + Iterator i; + int r; - r = manager_add_user_by_uid(m, uid, &user); + assert(bus); + assert(message); + assert(m); + + r = sd_bus_message_new_method_return(message, &reply); if (r < 0) - goto fail; + return r; - r = manager_add_session(m, id, &session); + r = sd_bus_message_open_container(reply, 'a', "(susso)"); if (r < 0) - goto fail; + return r; - session_set_user(session, user); + HASHMAP_FOREACH(session, m->sessions, i) { + _cleanup_free_ char *p = NULL; - session->leader = leader; - session->audit_id = audit_id; - session->type = t; - session->class = c; - session->remote = remote; - session->vtnr = vtnr; - - if (!isempty(tty)) { - session->tty = strdup(tty); - if (!session->tty) { - r = -ENOMEM; - goto fail; - } - } - - if (!isempty(display)) { - session->display = strdup(display); - if (!session->display) { - r = -ENOMEM; - goto fail; - } - } - - if (!isempty(remote_user)) { - session->remote_user = strdup(remote_user); - if (!session->remote_user) { - r = -ENOMEM; - goto fail; - } - } - - if (!isempty(remote_host)) { - session->remote_host = strdup(remote_host); - if (!session->remote_host) { - r = -ENOMEM; - goto fail; - } - } - - if (!isempty(service)) { - session->service = strdup(service); - if (!session->service) { - r = -ENOMEM; - goto fail; - } - } + p = session_bus_path(session); + if (!p) + return -ENOMEM; - if (seat) { - r = seat_attach_session(seat, session); + r = sd_bus_message_append(reply, "(susso)", + session->id, + (uint32_t) session->user->uid, + session->user->name, + session->seat ? session->seat->id : "", + p); if (r < 0) - goto fail; + return r; } - r = session_start(session); + r = sd_bus_message_close_container(reply); if (r < 0) - goto fail; - - session->create_message = dbus_message_ref(message); - - return 0; - -fail: - if (session) - session_add_to_gc_queue(session); - - if (user) - user_add_to_gc_queue(user); + return r; - return r; + return sd_bus_send(bus, reply, NULL); } -static int bus_manager_inhibit( - Manager *m, - DBusConnection *connection, - DBusMessage *message, - DBusError *error, - DBusMessage **_reply) { - - Inhibitor *i = NULL; - char *id = NULL; - const char *who, *why, *what, *mode; - pid_t pid; - InhibitWhat w; - InhibitMode mm; - unsigned long ul; - int r, fifo_fd = -1; - _cleanup_dbus_message_unref_ DBusMessage *reply = NULL; +static int method_list_users(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) { + _cleanup_bus_message_unref_ sd_bus_message *reply = NULL; + Manager *m = userdata; + User *user; + Iterator i; + int r; - assert(m); - assert(connection); + assert(bus); assert(message); - assert(error); - assert(_reply); - - if (!dbus_message_get_args( - message, - error, - DBUS_TYPE_STRING, &what, - DBUS_TYPE_STRING, &who, - DBUS_TYPE_STRING, &why, - DBUS_TYPE_STRING, &mode, - DBUS_TYPE_INVALID)) { - r = -EIO; - goto fail; - } - - w = inhibit_what_from_string(what); - if (w <= 0) { - r = -EINVAL; - goto fail; - } + assert(m); - mm = inhibit_mode_from_string(mode); - if (mm < 0) { - r = -EINVAL; - goto fail; - } + r = sd_bus_message_new_method_return(message, &reply); + if (r < 0) + return r; - /* Delay is only supported for shutdown/sleep */ - if (mm == INHIBIT_DELAY && (w & ~(INHIBIT_SHUTDOWN|INHIBIT_SLEEP))) { - r = -EINVAL; - goto fail; - } + r = sd_bus_message_open_container(reply, 'a', "(uso)"); + if (r < 0) + return r; - /* Don't allow taking delay locks while we are already - * executing the operation. We shouldn't create the impression - * that the lock was successful if the machine is about to go - * down/suspend any moment. */ - if (m->action_what & w) { - r = -EALREADY; - goto fail; - } + HASHMAP_FOREACH(user, m->users, i) { + _cleanup_free_ char *p = NULL; - r = verify_polkit(connection, message, - w == INHIBIT_SHUTDOWN ? (mm == INHIBIT_BLOCK ? "org.freedesktop.login1.inhibit-block-shutdown" : "org.freedesktop.login1.inhibit-delay-shutdown") : - w == INHIBIT_SLEEP ? (mm == INHIBIT_BLOCK ? "org.freedesktop.login1.inhibit-block-sleep" : "org.freedesktop.login1.inhibit-delay-sleep") : - w == INHIBIT_IDLE ? "org.freedesktop.login1.inhibit-block-idle" : - w == INHIBIT_HANDLE_POWER_KEY ? "org.freedesktop.login1.inhibit-handle-power-key" : - w == INHIBIT_HANDLE_SUSPEND_KEY ? "org.freedesktop.login1.inhibit-handle-suspend-key" : - w == INHIBIT_HANDLE_HIBERNATE_KEY ? "org.freedesktop.login1.inhibit-handle-hibernate-key" : - "org.freedesktop.login1.inhibit-handle-lid-switch", - false, NULL, error); - if (r < 0) - goto fail; + p = user_bus_path(user); + if (!p) + return -ENOMEM; - ul = dbus_bus_get_unix_user(connection, dbus_message_get_sender(message), error); - if (ul == (unsigned long) -1) { - r = -EIO; - goto fail; + r = sd_bus_message_append(reply, "(uso)", + (uint32_t) user->uid, + user->name, + p); + if (r < 0) + return r; } - pid = bus_get_unix_process_id(connection, dbus_message_get_sender(message), error); - if (pid <= 0) { - r = -EIO; - goto fail; - } + r = sd_bus_message_close_container(reply); + if (r < 0) + return r; - do { - free(id); - id = NULL; + return sd_bus_send(bus, reply, NULL); +} - if (asprintf(&id, "%lu", ++m->inhibit_counter) < 0) { - r = -ENOMEM; - goto fail; - } - } while (hashmap_get(m->inhibitors, id)); +static int method_list_seats(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) { + _cleanup_bus_message_unref_ sd_bus_message *reply = NULL; + Manager *m = userdata; + Seat *seat; + Iterator i; + int r; - r = manager_add_inhibitor(m, id, &i); - free(id); + assert(bus); + assert(message); + assert(m); + r = sd_bus_message_new_method_return(message, &reply); if (r < 0) - goto fail; - - i->what = w; - i->mode = mm; - i->pid = pid; - i->uid = (uid_t) ul; - i->why = strdup(why); - i->who = strdup(who); + return r; - if (!i->why || !i->who) { - r = -ENOMEM; - goto fail; - } + r = sd_bus_message_open_container(reply, 'a', "(so)"); + if (r < 0) + return r; - fifo_fd = inhibitor_create_fifo(i); - if (fifo_fd < 0) { - r = fifo_fd; - goto fail; - } + HASHMAP_FOREACH(seat, m->seats, i) { + _cleanup_free_ char *p = NULL; - reply = dbus_message_new_method_return(message); - if (!reply) { - r = -ENOMEM; - goto fail; - } + p = seat_bus_path(seat); + if (!p) + return -ENOMEM; - if (!dbus_message_append_args( - reply, - DBUS_TYPE_UNIX_FD, &fifo_fd, - DBUS_TYPE_INVALID)) { - r = -ENOMEM; - goto fail; + r = sd_bus_message_append(reply, "(so)", seat->id, p); + if (r < 0) + return r; } - close_nointr_nofail(fifo_fd); - *_reply = reply; - reply = NULL; - - inhibitor_start(i); - - return 0; - -fail: - if (i) - inhibitor_free(i); - - if (fifo_fd >= 0) - close_nointr_nofail(fifo_fd); + r = sd_bus_message_close_container(reply); + if (r < 0) + return r; - return r; + return sd_bus_send(bus, reply, NULL); } -static int trigger_device(Manager *m, struct udev_device *d) { - struct udev_enumerate *e; - struct udev_list_entry *first, *item; +static int method_list_inhibitors(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) { + _cleanup_bus_message_unref_ sd_bus_message *reply = NULL; + Manager *m = userdata; + Inhibitor *inhibitor; + Iterator i; int r; - assert(m); - - e = udev_enumerate_new(m->udev); - if (!e) { - r = -ENOMEM; - goto finish; - } - - if (d) { - if (udev_enumerate_add_match_parent(e, d) < 0) { - r = -EIO; - goto finish; - } - } - - if (udev_enumerate_scan_devices(e) < 0) { - r = -EIO; - goto finish; - } - - first = udev_enumerate_get_list_entry(e); - udev_list_entry_foreach(item, first) { - char *t; - const char *p; + r = sd_bus_message_new_method_return(message, &reply); + if (r < 0) + return r; - p = udev_list_entry_get_name(item); + r = sd_bus_message_open_container(reply, 'a', "(ssssuu)"); + if (r < 0) + return r; - t = strappend(p, "/uevent"); - if (!t) { - r = -ENOMEM; - goto finish; - } + HASHMAP_FOREACH(inhibitor, m->inhibitors, i) { - write_string_file(t, "change"); - free(t); + r = sd_bus_message_append(reply, "(ssssuu)", + strempty(inhibit_what_to_string(inhibitor->what)), + strempty(inhibitor->who), + strempty(inhibitor->why), + strempty(inhibit_mode_to_string(inhibitor->mode)), + (uint32_t) inhibitor->uid, + (uint32_t) inhibitor->pid); + if (r < 0) + return r; } - r = 0; - -finish: - if (e) - udev_enumerate_unref(e); + r = sd_bus_message_close_container(reply); + if (r < 0) + return r; - return r; + return sd_bus_send(bus, reply, NULL); } -static int attach_device(Manager *m, const char *seat, const char *sysfs) { - struct udev_device *d; - _cleanup_free_ char *rule = NULL, *file = NULL; - const char *id_for_seat; +static int method_create_session(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) { + const char *service, *type, *class, *cseat, *tty, *display, *remote_user, *remote_host, *desktop; + uint32_t uid, leader, audit_id = 0; + _cleanup_free_ char *id = NULL; + Session *session = NULL; + Manager *m = userdata; + User *user = NULL; + Seat *seat = NULL; + int remote; + uint32_t vtnr = 0; + SessionType t; + SessionClass c; int r; + assert(bus); + assert(message); assert(m); - assert(seat); - assert(sysfs); - d = udev_device_new_from_syspath(m->udev, sysfs); - if (!d) - return -ENODEV; + r = sd_bus_message_read(message, "uusssssussbss", &uid, &leader, &service, &type, &class, &desktop, &cseat, &vtnr, &tty, &display, &remote, &remote_user, &remote_host); + if (r < 0) + return r; - if (!udev_device_has_tag(d, "seat")) { - r = -ENODEV; - goto finish; - } + if (leader == 1) + return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Invalid leader PID"); - id_for_seat = udev_device_get_property_value(d, "ID_FOR_SEAT"); - if (!id_for_seat) { - r = -ENODEV; - goto finish; + if (isempty(type)) + t = _SESSION_TYPE_INVALID; + else { + t = session_type_from_string(type); + if (t < 0) + return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Invalid session type %s", type); } - if (asprintf(&file, "/etc/udev/rules.d/72-seat-%s.rules", id_for_seat) < 0) { - r = -ENOMEM; - goto finish; + if (isempty(class)) + c = _SESSION_CLASS_INVALID; + else { + c = session_class_from_string(class); + if (c < 0) + return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Invalid session class %s", class); } - if (asprintf(&rule, "TAG==\"seat\", ENV{ID_FOR_SEAT}==\"%s\", ENV{ID_SEAT}=\"%s\"", id_for_seat, seat) < 0) { - r = -ENOMEM; - goto finish; + if (isempty(desktop)) + desktop = NULL; + else { + if (!string_is_safe(desktop)) + return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Invalid desktop string %s", desktop); } - mkdir_p_label("/etc/udev/rules.d", 0755); - label_init("/etc"); - r = write_string_file_atomic_label(file, rule); - if (r < 0) - goto finish; - - r = trigger_device(m, d); - -finish: - if (d) - udev_device_unref(d); - - return r; -} + if (isempty(cseat)) + seat = NULL; + else { + seat = hashmap_get(m->seats, cseat); + if (!seat) + return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_SEAT, "No seat '%s' known", cseat); + } -static int flush_devices(Manager *m) { - _cleanup_closedir_ DIR *d; + if (tty_is_vc(tty)) { + int v; - assert(m); + if (!seat) + seat = m->seat0; + else if (seat != m->seat0) + return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "TTY %s is virtual console but seat %s is not seat0", tty, seat->id); - d = opendir("/etc/udev/rules.d"); - if (!d) { - if (errno != ENOENT) - log_warning("Failed to open /etc/udev/rules.d: %m"); - } else { - struct dirent *de; + v = vtnr_from_tty(tty); + if (v <= 0) + return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Cannot determine VT number from virtual console TTY %s", tty); - while ((de = readdir(d))) { + if (!vtnr) + vtnr = (uint32_t) v; + else if (vtnr != (uint32_t) v) + return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Specified TTY and VT number do not match"); - if (!dirent_is_file(de)) - continue; + } else if (tty_is_console(tty)) { - if (!startswith(de->d_name, "72-seat-")) - continue; + if (!seat) + seat = m->seat0; + else if (seat != m->seat0) + return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Console TTY specified but seat is not seat0"); - if (!endswith(de->d_name, ".rules")) - continue; + if (vtnr != 0) + return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Console TTY specified but VT number is not 0"); + } - if (unlinkat(dirfd(d), de->d_name, 0) < 0) - log_warning("Failed to unlink %s: %m", de->d_name); + if (seat) { + if (seat_has_vts(seat)) { + if (!vtnr || vtnr > 63) + return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "VT number out of range"); + } else { + if (vtnr != 0) + return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Seat has no VTs but VT number not 0"); } } - return trigger_device(m, NULL); -} - -static int have_multiple_sessions( - Manager *m, - uid_t uid) { - - Session *session; - Iterator i; - - assert(m); - - /* Check for other users' sessions. Greeter sessions do not - * count, and non-login sessions do not count either. */ - HASHMAP_FOREACH(session, m->sessions, i) - if (session->class == SESSION_USER && - session->user->uid != uid) - return true; - - return false; -} + r = sd_bus_message_enter_container(message, 'a', "(sv)"); + if (r < 0) + return r; -static int bus_manager_log_shutdown( - Manager *m, - InhibitWhat w, - const char *unit_name) { + if (t == _SESSION_TYPE_INVALID) { + if (!isempty(display)) + t = SESSION_X11; + else if (!isempty(tty)) + t = SESSION_TTY; + else + t = SESSION_UNSPECIFIED; + } - const char *p, *q; + if (c == _SESSION_CLASS_INVALID) { + if (t == SESSION_UNSPECIFIED) + c = SESSION_BACKGROUND; + else + c = SESSION_USER; + } - assert(m); - assert(unit_name); + if (leader <= 0) { + _cleanup_bus_creds_unref_ sd_bus_creds *creds = NULL; - if (w != INHIBIT_SHUTDOWN) - return 0; + r = sd_bus_query_sender_creds(message, SD_BUS_CREDS_PID, &creds); + if (r < 0) + return r; - if (streq(unit_name, SPECIAL_POWEROFF_TARGET)) { - p = "MESSAGE=System is powering down."; - q = "SHUTDOWN=power-off"; - } else if (streq(unit_name, SPECIAL_HALT_TARGET)) { - p = "MESSAGE=System is halting."; - q = "SHUTDOWN=halt"; - } else if (streq(unit_name, SPECIAL_REBOOT_TARGET)) { - p = "MESSAGE=System is rebooting."; - q = "SHUTDOWN=reboot"; - } else if (streq(unit_name, SPECIAL_KEXEC_TARGET)) { - p = "MESSAGE=System is rebooting with kexec."; - q = "SHUTDOWN=kexec"; - } else { - p = "MESSAGE=System is shutting down."; - q = NULL; + r = sd_bus_creds_get_pid(creds, (pid_t*) &leader); + if (r < 0) + return r; } - return log_struct(LOG_NOTICE, MESSAGE_ID(SD_MESSAGE_SHUTDOWN), - p, - q, NULL); -} - -static int execute_shutdown_or_sleep( - Manager *m, - InhibitWhat w, - const char *unit_name, - DBusError *error) { + manager_get_session_by_pid(m, leader, &session); + if (session) { + _cleanup_free_ char *path = NULL; + _cleanup_close_ int fifo_fd = -1; - _cleanup_dbus_message_unref_ DBusMessage *reply = NULL; - const char *mode = "replace-irreversibly", *p; - int r; - char *c; + /* Session already exists, client is probably + * something like "su" which changes uid but is still + * the same session */ - assert(m); - assert(w >= 0); - assert(w < _INHIBIT_WHAT_MAX); - assert(unit_name); + fifo_fd = session_create_fifo(session); + if (fifo_fd < 0) + return fifo_fd; - bus_manager_log_shutdown(m, w, unit_name); + path = session_bus_path(session); + if (!path) + return -ENOMEM; - r = bus_method_call_with_reply( - m->bus, - "org.freedesktop.systemd1", - "/org/freedesktop/systemd1", - "org.freedesktop.systemd1.Manager", - "StartUnit", - &reply, - error, - DBUS_TYPE_STRING, &unit_name, - DBUS_TYPE_STRING, &mode, - DBUS_TYPE_INVALID); - if (r < 0) - return r; + log_debug("Sending reply about an existing session: " + "id=%s object_path=%s uid=%u runtime_path=%s " + "session_fd=%d seat=%s vtnr=%u", + session->id, + path, + (uint32_t) session->user->uid, + session->user->runtime_path, + fifo_fd, + session->seat ? session->seat->id : "", + (uint32_t) session->vtnr); + + return sd_bus_reply_method_return( + message, "soshusub", + session->id, + path, + session->user->runtime_path, + fifo_fd, + (uint32_t) session->user->uid, + session->seat ? session->seat->id : "", + (uint32_t) session->vtnr, + true); + } - if (!dbus_message_get_args( - reply, - error, - DBUS_TYPE_OBJECT_PATH, &p, - DBUS_TYPE_INVALID)) - return -EINVAL; + audit_session_from_pid(leader, &audit_id); + if (audit_id > 0) { + /* Keep our session IDs and the audit session IDs in sync */ - c = strdup(p); - if (!c) - return -ENOMEM; + if (asprintf(&id, "%"PRIu32, audit_id) < 0) + return -ENOMEM; - m->action_unit = unit_name; - free(m->action_job); - m->action_job = c; - m->action_what = w; + /* Wut? There's already a session by this name and we + * didn't find it above? Weird, then let's not trust + * the audit data and let's better register a new + * ID */ + if (hashmap_get(m->sessions, id)) { + log_warning("Existing logind session ID %s used by new audit session, ignoring", id); + audit_id = 0; - return 0; -} + free(id); + id = NULL; + } + } -static int delay_shutdown_or_sleep( - Manager *m, - InhibitWhat w, - const char *unit_name) { + if (!id) { + do { + free(id); + id = NULL; - assert(m); - assert(w >= 0); - assert(w < _INHIBIT_WHAT_MAX); - assert(unit_name); + if (asprintf(&id, "c%lu", ++m->session_counter) < 0) + return -ENOMEM; - m->action_timestamp = now(CLOCK_MONOTONIC); - m->action_unit = unit_name; - m->action_what = w; + } while (hashmap_get(m->sessions, id)); + } - return 0; -} + r = manager_add_user_by_uid(m, uid, &user); + if (r < 0) + goto fail; -static int bus_manager_can_shutdown_or_sleep( - Manager *m, - DBusConnection *connection, - DBusMessage *message, - InhibitWhat w, - const char *action, - const char *action_multiple_sessions, - const char *action_ignore_inhibit, - const char *sleep_verb, - DBusError *error, - DBusMessage **_reply) { + r = manager_add_session(m, id, &session); + if (r < 0) + goto fail; - bool multiple_sessions, challenge, blocked, b; - const char *result = NULL; - _cleanup_dbus_message_unref_ DBusMessage *reply = NULL; - int r; - unsigned long ul; + session_set_user(session, user); - assert(m); - assert(connection); - assert(message); - assert(w >= 0); - assert(w <= _INHIBIT_WHAT_MAX); - assert(action); - assert(action_multiple_sessions); - assert(action_ignore_inhibit); - assert(error); - assert(_reply); + session->leader = leader; + session->audit_id = audit_id; + session->type = t; + session->class = c; + session->remote = remote; + session->vtnr = vtnr; - if (sleep_verb) { - r = can_sleep(sleep_verb); - if (r < 0) - return r; - if (r == 0) { - result = "na"; - goto finish; + if (!isempty(tty)) { + session->tty = strdup(tty); + if (!session->tty) { + r = -ENOMEM; + goto fail; } } - ul = dbus_bus_get_unix_user(connection, dbus_message_get_sender(message), error); - if (ul == (unsigned long) -1) - return -EIO; - - r = have_multiple_sessions(m, (uid_t) ul); - if (r < 0) - return r; - - multiple_sessions = r > 0; - blocked = manager_is_inhibited(m, w, INHIBIT_BLOCK, NULL, false, true, (uid_t) ul); - - if (multiple_sessions) { - r = verify_polkit(connection, message, action_multiple_sessions, false, &challenge, error); - if (r < 0) - return r; + if (!isempty(display)) { + session->display = strdup(display); + if (!session->display) { + r = -ENOMEM; + goto fail; + } + } - if (r > 0) - result = "yes"; - else if (challenge) - result = "challenge"; - else - result = "no"; + if (!isempty(remote_user)) { + session->remote_user = strdup(remote_user); + if (!session->remote_user) { + r = -ENOMEM; + goto fail; + } } - if (blocked) { - r = verify_polkit(connection, message, action_ignore_inhibit, false, &challenge, error); - if (r < 0) - return r; + if (!isempty(remote_host)) { + session->remote_host = strdup(remote_host); + if (!session->remote_host) { + r = -ENOMEM; + goto fail; + } + } - if (r > 0 && !result) - result = "yes"; - else if (challenge && (!result || streq(result, "yes"))) - result = "challenge"; - else - result = "no"; + if (!isempty(service)) { + session->service = strdup(service); + if (!session->service) { + r = -ENOMEM; + goto fail; + } } - if (!multiple_sessions && !blocked) { - /* If neither inhibit nor multiple sessions - * apply then just check the normal policy */ + if (!isempty(desktop)) { + session->desktop = strdup(desktop); + if (!session->desktop) { + r = -ENOMEM; + goto fail; + } + } - r = verify_polkit(connection, message, action, false, &challenge, error); + if (seat) { + r = seat_attach_session(seat, session); if (r < 0) - return r; - - if (r > 0) - result = "yes"; - else if (challenge) - result = "challenge"; - else - result = "no"; + goto fail; } -finish: - reply = dbus_message_new_method_return(message); - if (!reply) - return -ENOMEM; - - b = dbus_message_append_args( - reply, - DBUS_TYPE_STRING, &result, - DBUS_TYPE_INVALID); - if (!b) - return -ENOMEM; + r = session_start(session); + if (r < 0) + goto fail; - *_reply = reply; - reply = NULL; - return 0; -} + session->create_message = sd_bus_message_ref(message); -static int send_prepare_for(Manager *m, InhibitWhat w, bool _active) { - static const char * const signal_name[_INHIBIT_WHAT_MAX] = { - [INHIBIT_SHUTDOWN] = "PrepareForShutdown", - [INHIBIT_SLEEP] = "PrepareForSleep" - }; + /* Here upstream systemd starts cgroups and the user systemd, + and arranges to reply asynchronously. We reply + directly. */ - dbus_bool_t active = _active; - _cleanup_dbus_message_unref_ DBusMessage *message = NULL; + r = session_send_create_reply(session, NULL); + if (r < 0) + goto fail; - assert(m); - assert(w >= 0); - assert(w < _INHIBIT_WHAT_MAX); - assert(signal_name[w]); + return 1; - message = dbus_message_new_signal("/org/freedesktop/login1", "org.freedesktop.login1.Manager", signal_name[w]); - if (!message) - return -ENOMEM; +fail: + if (session) + session_add_to_gc_queue(session); - if (!dbus_message_append_args(message, DBUS_TYPE_BOOLEAN, &active, DBUS_TYPE_INVALID) || - !dbus_connection_send(m->bus, message, NULL)) - return -ENOMEM; + if (user) + user_add_to_gc_queue(user); - return 0; + return r; } -int bus_manager_shutdown_or_sleep_now_or_later( - Manager *m, - const char *unit_name, - InhibitWhat w, - DBusError *error) { - - bool delayed; +static int method_release_session(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) { + Manager *m = userdata; + Session *session; + const char *name; int r; + assert(bus); + assert(message); assert(m); - assert(unit_name); - assert(w >= 0); - assert(w <= _INHIBIT_WHAT_MAX); - assert(!m->action_job); - /* Tell everybody to prepare for shutdown/sleep */ - send_prepare_for(m, w, true); + r = sd_bus_message_read(message, "s", &name); + if (r < 0) + return r; - delayed = - m->inhibit_delay_max > 0 && - manager_is_inhibited(m, w, INHIBIT_DELAY, NULL, false, false, 0); + r = manager_get_session_from_creds(m, message, name, error, &session); + if (r < 0) + return r; - if (delayed) - /* Shutdown is delayed, keep in mind what we - * want to do, and start a timeout */ - r = delay_shutdown_or_sleep(m, w, unit_name); - else - /* Shutdown is not delayed, execute it - * immediately */ - r = execute_shutdown_or_sleep(m, w, unit_name, error); + r = session_release(session); + if (r < 0) + return r; - return r; -} + session_add_to_gc_queue(session); -static int bus_manager_do_shutdown_or_sleep( - Manager *m, - DBusConnection *connection, - DBusMessage *message, - const char *unit_name, - InhibitWhat w, - const char *action, - const char *action_multiple_sessions, - const char *action_ignore_inhibit, - const char *sleep_verb, - DBusError *error, - DBusMessage **_reply) { + return sd_bus_reply_method_return(message, NULL); +} - dbus_bool_t interactive; - bool multiple_sessions, blocked; - DBusMessage *reply = NULL; +static int method_activate_session(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) { + Manager *m = userdata; + Session *session; + const char *name; int r; - unsigned long ul; - assert(m); - assert(connection); + assert(bus); assert(message); - assert(unit_name); - assert(w >= 0); - assert(w <= _INHIBIT_WHAT_MAX); - assert(action); - assert(action_multiple_sessions); - assert(action_ignore_inhibit); - assert(error); - assert(_reply); - - /* Don't allow multiple jobs being executed at the same time */ - if (m->action_what) - return -EALREADY; - - if (!dbus_message_get_args( - message, - error, - DBUS_TYPE_BOOLEAN, &interactive, - DBUS_TYPE_INVALID)) - return -EINVAL; - - if (sleep_verb) { - r = can_sleep(sleep_verb); - if (r < 0) - return r; - - if (r == 0) - return -ENOTSUP; - } - - ul = dbus_bus_get_unix_user(connection, dbus_message_get_sender(message), error); - if (ul == (unsigned long) -1) - return -EIO; + assert(m); - r = have_multiple_sessions(m, (uid_t) ul); + r = sd_bus_message_read(message, "s", &name); if (r < 0) return r; - multiple_sessions = r > 0; - blocked = manager_is_inhibited(m, w, INHIBIT_BLOCK, NULL, false, true, (uid_t) ul); - - if (multiple_sessions) { - r = verify_polkit(connection, message, action_multiple_sessions, interactive, NULL, error); - if (r < 0) - return r; - } - - if (blocked) { - r = verify_polkit(connection, message, action_ignore_inhibit, interactive, NULL, error); - if (r < 0) - return r; - } - - if (!multiple_sessions && !blocked) { - r = verify_polkit(connection, message, action, interactive, NULL, error); - if (r < 0) - return r; - } - - r = bus_manager_shutdown_or_sleep_now_or_later(m, unit_name, w, error); + r = manager_get_session_from_creds(m, message, name, error, &session); if (r < 0) return r; - reply = dbus_message_new_method_return(message); - if (!reply) - return -ENOMEM; - - *_reply = reply; - return 0; + return bus_session_method_activate(bus, message, session, error); } -static DEFINE_BUS_PROPERTY_APPEND_ENUM(bus_manager_append_handle_action, handle_action, HandleAction); - -static const BusProperty bus_login_manager_properties[] = { - { "NAutoVTs", bus_property_append_unsigned, "u", offsetof(Manager, n_autovts) }, - { "KillOnlyUsers", bus_property_append_strv, "as", offsetof(Manager, kill_only_users), true }, - { "KillExcludeUsers", bus_property_append_strv, "as", offsetof(Manager, kill_exclude_users), true }, - { "KillUserProcesses", bus_property_append_bool, "b", offsetof(Manager, kill_user_processes) }, - { "IdleHint", bus_manager_append_idle_hint, "b", 0 }, - { "IdleSinceHint", bus_manager_append_idle_hint_since, "t", 0 }, - { "IdleSinceHintMonotonic", bus_manager_append_idle_hint_since, "t", 0 }, - { "BlockInhibited", bus_manager_append_inhibited, "s", 0 }, - { "DelayInhibited", bus_manager_append_inhibited, "s", 0 }, - { "InhibitDelayMaxUSec", bus_property_append_usec, "t", offsetof(Manager, inhibit_delay_max) }, - { "HandlePowerKey", bus_manager_append_handle_action, "s", offsetof(Manager, handle_power_key) }, - { "HandleSuspendKey", bus_manager_append_handle_action, "s", offsetof(Manager, handle_suspend_key) }, - { "HandleHibernateKey", bus_manager_append_handle_action, "s", offsetof(Manager, handle_hibernate_key)}, - { "HandleLidSwitch", bus_manager_append_handle_action, "s", offsetof(Manager, handle_lid_switch) }, - { "IdleAction", bus_manager_append_handle_action, "s", offsetof(Manager, idle_action) }, - { "IdleActionUSec", bus_property_append_usec, "t", offsetof(Manager, idle_action_usec) }, - { "PreparingForShutdown", bus_manager_append_preparing, "b", 0 }, - { "PreparingForSleep", bus_manager_append_preparing, "b", 0 }, - { NULL, } -}; - -static DBusHandlerResult manager_message_handler( - DBusConnection *connection, - DBusMessage *message, - void *userdata) { - +static int method_activate_session_on_seat(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) { + const char *session_name, *seat_name; Manager *m = userdata; - - DBusError error; - _cleanup_dbus_message_unref_ DBusMessage *reply = NULL; + Session *session; + Seat *seat; int r; - assert(connection); + assert(bus); assert(message); assert(m); - dbus_error_init(&error); - - if (dbus_message_is_method_call(message, "org.freedesktop.login1.Manager", "GetSession")) { - const char *name; - char *p; - Session *session; - bool b; - - if (!dbus_message_get_args( - message, - &error, - DBUS_TYPE_STRING, &name, - DBUS_TYPE_INVALID)) - return bus_send_error_reply(connection, message, &error, -EINVAL); + /* Same as ActivateSession() but refuses to work if + * the seat doesn't match */ - session = hashmap_get(m->sessions, name); - if (!session) - return bus_send_error_reply(connection, message, &error, -ENOENT); - - reply = dbus_message_new_method_return(message); - if (!reply) - goto oom; + r = sd_bus_message_read(message, "ss", &session_name, &seat_name); + if (r < 0) + return r; - p = session_bus_path(session); - if (!p) - goto oom; + r = manager_get_session_from_creds(m, message, session_name, error, &session); + if (r < 0) + return r; - b = dbus_message_append_args( - reply, - DBUS_TYPE_OBJECT_PATH, &p, - DBUS_TYPE_INVALID); - free(p); + r = manager_get_seat_from_creds(m, message, seat_name, error, &seat); + if (r < 0) + return r; - if (!b) - goto oom; + if (session->seat != seat) + return sd_bus_error_setf(error, BUS_ERROR_SESSION_NOT_ON_SEAT, "Session %s not on seat %s", session_name, seat_name); - } else if (dbus_message_is_method_call(message, "org.freedesktop.login1.Manager", "GetSessionByPID")) { - uint32_t pid; - char *p; - Session *session; - bool b; + r = session_activate(session); + if (r < 0) + return r; - if (!dbus_message_get_args( - message, - &error, - DBUS_TYPE_UINT32, &pid, - DBUS_TYPE_INVALID)) - return bus_send_error_reply(connection, message, &error, -EINVAL); + return sd_bus_reply_method_return(message, NULL); +} - r = manager_get_session_by_pid(m, pid, &session); - if (r <= 0) - return bus_send_error_reply(connection, message, NULL, r < 0 ? r : -ENOENT); +static int method_lock_session(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) { + Manager *m = userdata; + Session *session; + const char *name; + int r; - reply = dbus_message_new_method_return(message); - if (!reply) - goto oom; + assert(bus); + assert(message); + assert(m); - p = session_bus_path(session); - if (!p) - goto oom; - - b = dbus_message_append_args( - reply, - DBUS_TYPE_OBJECT_PATH, &p, - DBUS_TYPE_INVALID); - free(p); - - if (!b) - goto oom; - - } else if (dbus_message_is_method_call(message, "org.freedesktop.login1.Manager", "GetUser")) { - uint32_t uid; - char *p; - User *user; - bool b; - - if (!dbus_message_get_args( - message, - &error, - DBUS_TYPE_UINT32, &uid, - DBUS_TYPE_INVALID)) - return bus_send_error_reply(connection, message, &error, -EINVAL); - - user = hashmap_get(m->users, ULONG_TO_PTR((unsigned long) uid)); - if (!user) - return bus_send_error_reply(connection, message, &error, -ENOENT); + r = sd_bus_message_read(message, "s", &name); + if (r < 0) + return r; - reply = dbus_message_new_method_return(message); - if (!reply) - goto oom; + r = manager_get_session_from_creds(m, message, name, error, &session); + if (r < 0) + return r; - p = user_bus_path(user); - if (!p) - goto oom; - - b = dbus_message_append_args( - reply, - DBUS_TYPE_OBJECT_PATH, &p, - DBUS_TYPE_INVALID); - free(p); - - if (!b) - goto oom; - - } else if (dbus_message_is_method_call(message, "org.freedesktop.login1.Manager", "GetUserByPID")) { - uint32_t pid; - char *p; - User *user; - bool b; - - if (!dbus_message_get_args( - message, - &error, - DBUS_TYPE_UINT32, &pid, - DBUS_TYPE_INVALID)) - return bus_send_error_reply(connection, message, &error, -EINVAL); + return bus_session_method_lock(bus, message, session, error); +} - r = manager_get_user_by_pid(m, pid, &user); - if (r <= 0) - return bus_send_error_reply(connection, message, NULL, r < 0 ? r : -ENOENT); +static int method_lock_sessions(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) { + Manager *m = userdata; + int r; - reply = dbus_message_new_method_return(message); - if (!reply) - goto oom; + assert(bus); + assert(message); + assert(m); - p = user_bus_path(user); - if (!p) - goto oom; - - b = dbus_message_append_args( - reply, - DBUS_TYPE_OBJECT_PATH, &p, - DBUS_TYPE_INVALID); - free(p); - - if (!b) - goto oom; - - } else if (dbus_message_is_method_call(message, "org.freedesktop.login1.Manager", "GetSeat")) { - const char *name; - char *p; - Seat *seat; - bool b; - - if (!dbus_message_get_args( - message, - &error, - DBUS_TYPE_STRING, &name, - DBUS_TYPE_INVALID)) - return bus_send_error_reply(connection, message, &error, -EINVAL); + r = bus_verify_polkit_async( + message, + CAP_SYS_ADMIN, + "org.freedesktop.login1.lock-sessions", + false, + UID_INVALID, + &m->polkit_registry, + error); + if (r < 0) + return r; + if (r == 0) + return 1; /* Will call us back */ - seat = hashmap_get(m->seats, name); - if (!seat) - return bus_send_error_reply(connection, message, &error, -ENOENT); + r = session_send_lock_all(m, streq(sd_bus_message_get_member(message), "LockSessions")); + if (r < 0) + return r; - reply = dbus_message_new_method_return(message); - if (!reply) - goto oom; + return sd_bus_reply_method_return(message, NULL); +} - p = seat_bus_path(seat); - if (!p) - goto oom; +static int method_kill_session(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) { + const char *name; + Manager *m = userdata; + Session *session; + int r; - b = dbus_message_append_args( - reply, - DBUS_TYPE_OBJECT_PATH, &p, - DBUS_TYPE_INVALID); - free(p); + assert(bus); + assert(message); + assert(m); - if (!b) - goto oom; + r = sd_bus_message_read(message, "s", &name); + if (r < 0) + return r; - } else if (dbus_message_is_method_call(message, "org.freedesktop.login1.Manager", "ListSessions")) { - char *p; - Session *session; - Iterator i; - DBusMessageIter iter, sub; - const char *empty = ""; + r = manager_get_session_from_creds(m, message, name, error, &session); + if (r < 0) + return r; - reply = dbus_message_new_method_return(message); - if (!reply) - goto oom; + return bus_session_method_kill(bus, message, session, error); +} - dbus_message_iter_init_append(reply, &iter); +static int method_kill_user(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) { + Manager *m = userdata; + uint32_t uid; + User *user; + int r; - if (!dbus_message_iter_open_container(&iter, DBUS_TYPE_ARRAY, "(susso)", &sub)) - goto oom; + assert(bus); + assert(message); + assert(m); - HASHMAP_FOREACH(session, m->sessions, i) { - DBusMessageIter sub2; - uint32_t uid; + r = sd_bus_message_read(message, "u", &uid); + if (r < 0) + return r; - if (!dbus_message_iter_open_container(&sub, DBUS_TYPE_STRUCT, NULL, &sub2)) - goto oom; + r = manager_get_user_from_creds(m, message, uid, error, &user); + if (r < 0) + return r; - uid = session->user->uid; + return bus_user_method_kill(bus, message, user, error); +} - p = session_bus_path(session); - if (!p) - goto oom; +static int method_terminate_session(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) { + Manager *m = userdata; + const char *name; + Session *session; + int r; - if (!dbus_message_iter_append_basic(&sub2, DBUS_TYPE_STRING, &session->id) || - !dbus_message_iter_append_basic(&sub2, DBUS_TYPE_UINT32, &uid) || - !dbus_message_iter_append_basic(&sub2, DBUS_TYPE_STRING, &session->user->name) || - !dbus_message_iter_append_basic(&sub2, DBUS_TYPE_STRING, session->seat ? (const char**) &session->seat->id : &empty) || - !dbus_message_iter_append_basic(&sub2, DBUS_TYPE_OBJECT_PATH, &p)) { - free(p); - goto oom; - } + assert(bus); + assert(message); + assert(m); - free(p); + r = sd_bus_message_read(message, "s", &name); + if (r < 0) + return r; - if (!dbus_message_iter_close_container(&sub, &sub2)) - goto oom; - } + r = manager_get_session_from_creds(m, message, name, error, &session); + if (r < 0) + return r; - if (!dbus_message_iter_close_container(&iter, &sub)) - goto oom; + return bus_session_method_terminate(bus, message, session, error); +} - } else if (dbus_message_is_method_call(message, "org.freedesktop.login1.Manager", "ListUsers")) { - User *user; - Iterator i; - DBusMessageIter iter, sub; +static int method_terminate_user(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) { + Manager *m = userdata; + uint32_t uid; + User *user; + int r; - reply = dbus_message_new_method_return(message); - if (!reply) - goto oom; + assert(bus); + assert(message); + assert(m); - dbus_message_iter_init_append(reply, &iter); + r = sd_bus_message_read(message, "u", &uid); + if (r < 0) + return r; - if (!dbus_message_iter_open_container(&iter, DBUS_TYPE_ARRAY, "(uso)", &sub)) - goto oom; + r = manager_get_user_from_creds(m, message, uid, error, &user); + if (r < 0) + return r; - HASHMAP_FOREACH(user, m->users, i) { - _cleanup_free_ char *p = NULL; - DBusMessageIter sub2; - uint32_t uid; + return bus_user_method_terminate(bus, message, user, error); +} - if (!dbus_message_iter_open_container(&sub, DBUS_TYPE_STRUCT, NULL, &sub2)) - goto oom; +static int method_terminate_seat(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) { + Manager *m = userdata; + const char *name; + Seat *seat; + int r; - uid = user->uid; + assert(bus); + assert(message); + assert(m); - p = user_bus_path(user); - if (!p) - goto oom; + r = sd_bus_message_read(message, "s", &name); + if (r < 0) + return r; - if (!dbus_message_iter_append_basic(&sub2, DBUS_TYPE_UINT32, &uid) || - !dbus_message_iter_append_basic(&sub2, DBUS_TYPE_STRING, &user->name) || - !dbus_message_iter_append_basic(&sub2, DBUS_TYPE_OBJECT_PATH, &p)) { - free(p); - goto oom; - } + r = manager_get_seat_from_creds(m, message, name, error, &seat); + if (r < 0) + return r; - if (!dbus_message_iter_close_container(&sub, &sub2)) - goto oom; - } + return bus_seat_method_terminate(bus, message, seat, error); +} - if (!dbus_message_iter_close_container(&iter, &sub)) - goto oom; +static int method_set_user_linger(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) { + _cleanup_free_ char *cc = NULL; + Manager *m = userdata; + int b, r; + struct passwd *pw; + const char *path; + uint32_t uid; + int interactive; - } else if (dbus_message_is_method_call(message, "org.freedesktop.login1.Manager", "ListSeats")) { - Seat *seat; - Iterator i; - DBusMessageIter iter, sub; + assert(bus); + assert(message); + assert(m); - reply = dbus_message_new_method_return(message); - if (!reply) - goto oom; + r = sd_bus_message_read(message, "ubb", &uid, &b, &interactive); + if (r < 0) + return r; - dbus_message_iter_init_append(reply, &iter); + if (uid == UID_INVALID) { + _cleanup_bus_creds_unref_ sd_bus_creds *creds = NULL; - if (!dbus_message_iter_open_container(&iter, DBUS_TYPE_ARRAY, "(so)", &sub)) - goto oom; + /* Note that we get the owner UID of the session, not the actual client UID here! */ + r = sd_bus_query_sender_creds(message, SD_BUS_CREDS_OWNER_UID|SD_BUS_CREDS_AUGMENT, &creds); + if (r < 0) + return r; - HASHMAP_FOREACH(seat, m->seats, i) { - _cleanup_free_ char *p = NULL; - DBusMessageIter sub2; + r = sd_bus_creds_get_owner_uid(creds, &uid); + if (r < 0) + return r; + } - if (!dbus_message_iter_open_container(&sub, DBUS_TYPE_STRUCT, NULL, &sub2)) - goto oom; + errno = 0; + pw = getpwuid(uid); + if (!pw) + return errno ? -errno : -ENOENT; + + r = bus_verify_polkit_async( + message, + CAP_SYS_ADMIN, + "org.freedesktop.login1.set-user-linger", + interactive, + UID_INVALID, + &m->polkit_registry, + error); + if (r < 0) + return r; + if (r == 0) + return 1; /* No authorization for now, but the async polkit stuff will call us again when it has it */ - p = seat_bus_path(seat); - if (!p) - goto oom; + mkdir_p_label("/var/lib/systemd", 0755); - if (!dbus_message_iter_append_basic(&sub2, DBUS_TYPE_STRING, &seat->id) || - !dbus_message_iter_append_basic(&sub2, DBUS_TYPE_OBJECT_PATH, &p)) { - free(p); - goto oom; - } + r = mkdir_safe_label("/var/lib/systemd/linger", 0755, 0, 0); + if (r < 0) + return r; - if (!dbus_message_iter_close_container(&sub, &sub2)) - goto oom; - } + cc = cescape(pw->pw_name); + if (!cc) + return -ENOMEM; - if (!dbus_message_iter_close_container(&iter, &sub)) - goto oom; + path = strjoina("/var/lib/systemd/linger/", cc); + if (b) { + User *u; - } else if (dbus_message_is_method_call(message, "org.freedesktop.login1.Manager", "ListInhibitors")) { - Inhibitor *inhibitor; - Iterator i; - DBusMessageIter iter, sub; + r = touch(path); + if (r < 0) + return r; - reply = dbus_message_new_method_return(message); - if (!reply) - goto oom; + if (manager_add_user_by_uid(m, uid, &u) >= 0) + user_start(u); - dbus_message_iter_init_append(reply, &iter); + } else { + User *u; - if (!dbus_message_iter_open_container(&iter, DBUS_TYPE_ARRAY, "(ssssuu)", &sub)) - goto oom; + r = unlink(path); + if (r < 0 && errno != ENOENT) + return -errno; - HASHMAP_FOREACH(inhibitor, m->inhibitors, i) { - DBusMessageIter sub2; - dbus_uint32_t uid, pid; - const char *what, *who, *why, *mode; + u = hashmap_get(m->users, UID_TO_PTR(uid)); + if (u) + user_add_to_gc_queue(u); + } - if (!dbus_message_iter_open_container(&sub, DBUS_TYPE_STRUCT, NULL, &sub2)) - goto oom; + return sd_bus_reply_method_return(message, NULL); +} - what = strempty(inhibit_what_to_string(inhibitor->what)); - who = strempty(inhibitor->who); - why = strempty(inhibitor->why); - mode = strempty(inhibit_mode_to_string(inhibitor->mode)); - uid = (dbus_uint32_t) inhibitor->uid; - pid = (dbus_uint32_t) inhibitor->pid; +static int trigger_device(Manager *m, struct udev_device *d) { + _cleanup_udev_enumerate_unref_ struct udev_enumerate *e = NULL; + struct udev_list_entry *first, *item; + int r; - if (!dbus_message_iter_append_basic(&sub2, DBUS_TYPE_STRING, &what) || - !dbus_message_iter_append_basic(&sub2, DBUS_TYPE_STRING, &who) || - !dbus_message_iter_append_basic(&sub2, DBUS_TYPE_STRING, &why) || - !dbus_message_iter_append_basic(&sub2, DBUS_TYPE_STRING, &mode) || - !dbus_message_iter_append_basic(&sub2, DBUS_TYPE_UINT32, &uid) || - !dbus_message_iter_append_basic(&sub2, DBUS_TYPE_UINT32, &pid)) - goto oom; + assert(m); - if (!dbus_message_iter_close_container(&sub, &sub2)) - goto oom; - } + e = udev_enumerate_new(m->udev); + if (!e) + return -ENOMEM; - if (!dbus_message_iter_close_container(&iter, &sub)) - goto oom; + if (d) { + r = udev_enumerate_add_match_parent(e, d); + if (r < 0) + return r; + } + r = udev_enumerate_scan_devices(e); + if (r < 0) + return r; - } else if (dbus_message_is_method_call(message, "org.freedesktop.login1.Manager", "Inhibit")) { + first = udev_enumerate_get_list_entry(e); + udev_list_entry_foreach(item, first) { + _cleanup_free_ char *t = NULL; + const char *p; - r = bus_manager_inhibit(m, connection, message, &error, &reply); + p = udev_list_entry_get_name(item); - if (r < 0) - return bus_send_error_reply(connection, message, &error, r); + t = strappend(p, "/uevent"); + if (!t) + return -ENOMEM; + write_string_file(t, "change"); + } - } else if (dbus_message_is_method_call(message, "org.freedesktop.login1.Manager", "CreateSession")) { + return 0; +} - r = bus_manager_create_session(m, message); +static int attach_device(Manager *m, const char *seat, const char *sysfs) { + _cleanup_udev_device_unref_ struct udev_device *d = NULL; + _cleanup_free_ char *rule = NULL, *file = NULL; + const char *id_for_seat; + int r; - /* Don't delay the work on OOM here, since it might be - * triggered by a low RLIMIT_NOFILE here (since we - * send a dupped fd to the client), and we'd rather - * see this fail quickly then be retried later */ + assert(m); + assert(seat); + assert(sysfs); - if (r < 0) - return bus_send_error_reply(connection, message, NULL, r); + d = udev_device_new_from_syspath(m->udev, sysfs); + if (!d) + return -ENODEV; - } else if (dbus_message_is_method_call(message, "org.freedesktop.login1.Manager", "ReleaseSession")) { - const char *name; - Session *session; + if (!udev_device_has_tag(d, "seat")) + return -ENODEV; - if (!dbus_message_get_args( - message, - &error, - DBUS_TYPE_STRING, &name, - DBUS_TYPE_INVALID)) - return bus_send_error_reply(connection, message, &error, -EINVAL); + id_for_seat = udev_device_get_property_value(d, "ID_FOR_SEAT"); + if (!id_for_seat) + return -ENODEV; - session = hashmap_get(m->sessions, name); - if (!session) - return bus_send_error_reply(connection, message, &error, -ENOENT); - - /* We use the FIFO to detect stray sessions where the - process invoking PAM dies abnormally. We need to make - sure that that process is not killed if at the clean - end of the session it closes the FIFO. Hence, with - this call explicitly turn off the FIFO logic, so that - the PAM code can finish clean up on its own */ - session_remove_fifo(session); - - reply = dbus_message_new_method_return(message); - if (!reply) - goto oom; - - } else if (dbus_message_is_method_call(message, "org.freedesktop.login1.Manager", "ActivateSession")) { - const char *name; - Session *session; + if (asprintf(&file, "/etc/udev/rules.d/72-seat-%s.rules", id_for_seat) < 0) + return -ENOMEM; - if (!dbus_message_get_args( - message, - &error, - DBUS_TYPE_STRING, &name, - DBUS_TYPE_INVALID)) - return bus_send_error_reply(connection, message, &error, -EINVAL); + if (asprintf(&rule, "TAG==\"seat\", ENV{ID_FOR_SEAT}==\"%s\", ENV{ID_SEAT}=\"%s\"", id_for_seat, seat) < 0) + return -ENOMEM; - session = hashmap_get(m->sessions, name); - if (!session) - return bus_send_error_reply(connection, message, &error, -ENOENT); + mkdir_p_label("/etc/udev/rules.d", 0755); + mac_selinux_init("/etc"); + r = write_string_file_atomic_label(file, rule); + if (r < 0) + return r; - r = session_activate(session); - if (r < 0) - return bus_send_error_reply(connection, message, NULL, r); + return trigger_device(m, d); +} - reply = dbus_message_new_method_return(message); - if (!reply) - goto oom; +static int flush_devices(Manager *m) { + _cleanup_closedir_ DIR *d; - } else if (dbus_message_is_method_call(message, "org.freedesktop.login1.Manager", "ActivateSessionOnSeat")) { - const char *session_name, *seat_name; - Session *session; - Seat *seat; + assert(m); - /* Same as ActivateSession() but refuses to work if - * the seat doesn't match */ + d = opendir("/etc/udev/rules.d"); + if (!d) { + if (errno != ENOENT) + log_warning_errno(errno, "Failed to open /etc/udev/rules.d: %m"); + } else { + struct dirent *de; - if (!dbus_message_get_args( - message, - &error, - DBUS_TYPE_STRING, &session_name, - DBUS_TYPE_STRING, &seat_name, - DBUS_TYPE_INVALID)) - return bus_send_error_reply(connection, message, &error, -EINVAL); + while ((de = readdir(d))) { - session = hashmap_get(m->sessions, session_name); - if (!session) - return bus_send_error_reply(connection, message, &error, -ENOENT); + if (!dirent_is_file(de)) + continue; - seat = hashmap_get(m->seats, seat_name); - if (!seat) - return bus_send_error_reply(connection, message, &error, -ENOENT); + if (!startswith(de->d_name, "72-seat-")) + continue; - if (session->seat != seat) - return bus_send_error_reply(connection, message, &error, -EINVAL); + if (!endswith(de->d_name, ".rules")) + continue; - r = session_activate(session); - if (r < 0) - return bus_send_error_reply(connection, message, NULL, r); + if (unlinkat(dirfd(d), de->d_name, 0) < 0) + log_warning_errno(errno, "Failed to unlink %s: %m", de->d_name); + } + } - reply = dbus_message_new_method_return(message); - if (!reply) - goto oom; + return trigger_device(m, NULL); +} - } else if (dbus_message_is_method_call(message, "org.freedesktop.login1.Manager", "LockSession") || - dbus_message_is_method_call(message, "org.freedesktop.login1.Manager", "UnlockSession")) { - const char *name; - Session *session; +static int method_attach_device(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) { + const char *sysfs, *seat; + Manager *m = userdata; + int interactive, r; - if (!dbus_message_get_args( - message, - &error, - DBUS_TYPE_STRING, &name, - DBUS_TYPE_INVALID)) - return bus_send_error_reply(connection, message, &error, -EINVAL); + assert(bus); + assert(message); + assert(m); - session = hashmap_get(m->sessions, name); - if (!session) - return bus_send_error_reply(connection, message, NULL, -ENOENT); + r = sd_bus_message_read(message, "ssb", &seat, &sysfs, &interactive); + if (r < 0) + return r; - if (session_send_lock(session, streq(dbus_message_get_member(message), "LockSession")) < 0) - goto oom; + if (!path_startswith(sysfs, "/sys")) + return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Path %s is not in /sys", sysfs); - reply = dbus_message_new_method_return(message); - if (!reply) - goto oom; + if (!seat_name_is_valid(seat)) + return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Seat %s is not valid", seat); - } else if (dbus_message_is_method_call(message, "org.freedesktop.login1.Manager", "LockSessions") || - dbus_message_is_method_call(message, "org.freedesktop.login1.Manager", "UnlockSessions")) { + r = bus_verify_polkit_async( + message, + CAP_SYS_ADMIN, + "org.freedesktop.login1.attach-device", + interactive, + UID_INVALID, + &m->polkit_registry, + error); + if (r < 0) + return r; + if (r == 0) + return 1; /* No authorization for now, but the async polkit stuff will call us again when it has it */ - r = session_send_lock_all(m, streq(dbus_message_get_member(message), "LockSessions")); - if (r < 0) - bus_send_error_reply(connection, message, NULL, r); + r = attach_device(m, seat, sysfs); + if (r < 0) + return r; - reply = dbus_message_new_method_return(message); - if (!reply) - goto oom; + return sd_bus_reply_method_return(message, NULL); +} - } else if (dbus_message_is_method_call(message, "org.freedesktop.login1.Manager", "KillSession")) { - const char *swho; - int32_t signo; - KillWho who; - const char *name; - Session *session; +static int method_flush_devices(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) { + Manager *m = userdata; + int interactive, r; - if (!dbus_message_get_args( - message, - &error, - DBUS_TYPE_STRING, &name, - DBUS_TYPE_STRING, &swho, - DBUS_TYPE_INT32, &signo, - DBUS_TYPE_INVALID)) - return bus_send_error_reply(connection, message, &error, -EINVAL); - - if (isempty(swho)) - who = KILL_ALL; - else { - who = kill_who_from_string(swho); - if (who < 0) - return bus_send_error_reply(connection, message, &error, -EINVAL); - } + assert(bus); + assert(message); + assert(m); - if (signo <= 0 || signo >= _NSIG) - return bus_send_error_reply(connection, message, &error, -EINVAL); + r = sd_bus_message_read(message, "b", &interactive); + if (r < 0) + return r; - session = hashmap_get(m->sessions, name); - if (!session) - return bus_send_error_reply(connection, message, &error, -ENOENT); + r = bus_verify_polkit_async( + message, + CAP_SYS_ADMIN, + "org.freedesktop.login1.flush-devices", + interactive, + UID_INVALID, + &m->polkit_registry, + error); + if (r < 0) + return r; + if (r == 0) + return 1; /* No authorization for now, but the async polkit stuff will call us again when it has it */ - r = session_kill(session, who, signo); - if (r < 0) - return bus_send_error_reply(connection, message, NULL, r); + r = flush_devices(m); + if (r < 0) + return r; - reply = dbus_message_new_method_return(message); - if (!reply) - goto oom; + return sd_bus_reply_method_return(message, NULL); +} - } else if (dbus_message_is_method_call(message, "org.freedesktop.login1.Manager", "KillUser")) { - uint32_t uid; - User *user; - int32_t signo; +static int have_multiple_sessions( + Manager *m, + uid_t uid) { - if (!dbus_message_get_args( - message, - &error, - DBUS_TYPE_UINT32, &uid, - DBUS_TYPE_INT32, &signo, - DBUS_TYPE_INVALID)) - return bus_send_error_reply(connection, message, &error, -EINVAL); + Session *session; + Iterator i; - if (signo <= 0 || signo >= _NSIG) - return bus_send_error_reply(connection, message, &error, -EINVAL); + assert(m); - user = hashmap_get(m->users, ULONG_TO_PTR((unsigned long) uid)); - if (!user) - return bus_send_error_reply(connection, message, &error, -ENOENT); + /* Check for other users' sessions. Greeter sessions do not + * count, and non-login sessions do not count either. */ + HASHMAP_FOREACH(session, m->sessions, i) + if (session->class == SESSION_USER && + session->user->uid != uid) + return true; - r = user_kill(user, signo); - if (r < 0) - return bus_send_error_reply(connection, message, NULL, r); + return false; +} - reply = dbus_message_new_method_return(message); - if (!reply) - goto oom; +static int bus_manager_log_shutdown( + Manager *m, + InhibitWhat w, + HandleAction action) { - } else if (dbus_message_is_method_call(message, "org.freedesktop.login1.Manager", "TerminateSession")) { - const char *name; - Session *session; + const char *p, *q; - if (!dbus_message_get_args( - message, - &error, - DBUS_TYPE_STRING, &name, - DBUS_TYPE_INVALID)) - return bus_send_error_reply(connection, message, &error, -EINVAL); + assert(m); - session = hashmap_get(m->sessions, name); - if (!session) - return bus_send_error_reply(connection, message, &error, -ENOENT); + if (w != INHIBIT_SHUTDOWN) + return 0; - r = session_stop(session); - if (r < 0) - return bus_send_error_reply(connection, message, NULL, r); + switch (action) { + case HANDLE_POWEROFF: + p = "MESSAGE=System is powering down."; + q = "SHUTDOWN=power-off"; + break; + case HANDLE_HALT: + p = "MESSAGE=System is halting."; + q = "SHUTDOWN=halt"; + break; + case HANDLE_REBOOT: + p = "MESSAGE=System is rebooting."; + q = "SHUTDOWN=reboot"; + break; + case HANDLE_KEXEC: + p = "MESSAGE=System is rebooting with kexec."; + q = "SHUTDOWN=kexec"; + break; + default: + p = "MESSAGE=System is shutting down."; + q = NULL; + break; + } - reply = dbus_message_new_method_return(message); - if (!reply) - goto oom; + return log_struct(LOG_NOTICE, + LOG_MESSAGE_ID(SD_MESSAGE_SHUTDOWN), + p, + q, + NULL); +} - } else if (dbus_message_is_method_call(message, "org.freedesktop.login1.Manager", "TerminateUser")) { - uint32_t uid; - User *user; +static int lid_switch_ignore_handler(sd_event_source *e, uint64_t usec, void *userdata) { + Manager *m = userdata; - if (!dbus_message_get_args( - message, - &error, - DBUS_TYPE_UINT32, &uid, - DBUS_TYPE_INVALID)) - return bus_send_error_reply(connection, message, &error, -EINVAL); + assert(e); + assert(m); - user = hashmap_get(m->users, ULONG_TO_PTR((unsigned long) uid)); - if (!user) - return bus_send_error_reply(connection, message, &error, -ENOENT); + m->lid_switch_ignore_event_source = sd_event_source_unref(m->lid_switch_ignore_event_source); + return 0; +} - r = user_stop(user); - if (r < 0) - return bus_send_error_reply(connection, message, NULL, r); +int manager_set_lid_switch_ignore(Manager *m, usec_t until) { + int r; - reply = dbus_message_new_method_return(message); - if (!reply) - goto oom; + assert(m); - } else if (dbus_message_is_method_call(message, "org.freedesktop.login1.Manager", "TerminateSeat")) { - const char *name; - Seat *seat; + if (until <= now(CLOCK_MONOTONIC)) + return 0; - if (!dbus_message_get_args( - message, - &error, - DBUS_TYPE_STRING, &name, - DBUS_TYPE_INVALID)) - return bus_send_error_reply(connection, message, &error, -EINVAL); + /* We want to ignore the lid switch for a while after each + * suspend, and after boot-up. Hence let's install a timer for + * this. As long as the event source exists we ignore the lid + * switch. */ - seat = hashmap_get(m->seats, name); - if (!seat) - return bus_send_error_reply(connection, message, &error, -ENOENT); + if (m->lid_switch_ignore_event_source) { + usec_t u; - r = seat_stop_sessions(seat); + r = sd_event_source_get_time(m->lid_switch_ignore_event_source, &u); if (r < 0) - return bus_send_error_reply(connection, message, NULL, r); - - reply = dbus_message_new_method_return(message); - if (!reply) - goto oom; - - } else if (dbus_message_is_method_call(message, "org.freedesktop.login1.Manager", "SetUserLinger")) { - uint32_t uid; - struct passwd *pw; - dbus_bool_t b, interactive; - char *path; - - if (!dbus_message_get_args( - message, - &error, - DBUS_TYPE_UINT32, &uid, - DBUS_TYPE_BOOLEAN, &b, - DBUS_TYPE_BOOLEAN, &interactive, - DBUS_TYPE_INVALID)) - return bus_send_error_reply(connection, message, &error, -EINVAL); - - errno = 0; - pw = getpwuid(uid); - if (!pw) - return bus_send_error_reply(connection, message, NULL, errno ? -errno : -EINVAL); - - r = verify_polkit(connection, message, "org.freedesktop.login1.set-user-linger", interactive, NULL, &error); - if (r < 0) - return bus_send_error_reply(connection, message, &error, r); + return r; - mkdir_p_label("/var/lib/systemd", 0755); + if (until <= u) + return 0; - r = mkdir_safe_label("/var/lib/systemd/linger", 0755, 0, 0); - if (r < 0) - return bus_send_error_reply(connection, message, &error, r); + r = sd_event_source_set_time(m->lid_switch_ignore_event_source, until); + } else + r = sd_event_add_time( + m->event, + &m->lid_switch_ignore_event_source, + CLOCK_MONOTONIC, + until, 0, + lid_switch_ignore_handler, m); - path = strappend("/var/lib/systemd/linger/", pw->pw_name); - if (!path) - goto oom; + return r; +} - if (b) { - User *u; +static int send_prepare_for(Manager *m, InhibitWhat w, bool _active) { - r = touch(path); - free(path); + static const char * const signal_name[_INHIBIT_WHAT_MAX] = { + [INHIBIT_SHUTDOWN] = "PrepareForShutdown", + [INHIBIT_SLEEP] = "PrepareForSleep" + }; - if (r < 0) - return bus_send_error_reply(connection, message, &error, r); + int active = _active; - if (manager_add_user_by_uid(m, uid, &u) >= 0) - user_start(u); + assert(m); + assert(w >= 0); + assert(w < _INHIBIT_WHAT_MAX); + assert(signal_name[w]); - } else { - User *u; + return sd_bus_emit_signal(m->bus, + "/org/freedesktop/login1", + "org.freedesktop.login1.Manager", + signal_name[w], + "b", + active); +} - r = unlink(path); - free(path); +static int execute_shutdown_or_sleep( + Manager *m, + InhibitWhat w, + HandleAction action, + sd_bus_error *error) { + int r; - if (r < 0 && errno != ENOENT) - return bus_send_error_reply(connection, message, &error, -errno); + assert(m); + assert(w >= 0); + assert(w < _INHIBIT_WHAT_MAX); - u = hashmap_get(m->users, ULONG_TO_PTR((unsigned long) uid)); - if (u) - user_add_to_gc_queue(u); - } + bus_manager_log_shutdown(m, w, action); - reply = dbus_message_new_method_return(message); - if (!reply) - goto oom; + r = shutdown_or_sleep(m, action); + if (r < 0) + return r; - } else if (dbus_message_is_method_call(message, "org.freedesktop.login1.Manager", "AttachDevice")) { - const char *sysfs, *seat; - dbus_bool_t interactive; + if (w == INHIBIT_SLEEP) + /* And we're back. */ + send_prepare_for(m, w, false); - if (!dbus_message_get_args( - message, - &error, - DBUS_TYPE_STRING, &seat, - DBUS_TYPE_STRING, &sysfs, - DBUS_TYPE_BOOLEAN, &interactive, - DBUS_TYPE_INVALID)) - return bus_send_error_reply(connection, message, &error, -EINVAL); + m->action_what = 0; - if (!path_startswith(sysfs, "/sys") || !seat_name_is_valid(seat)) - return bus_send_error_reply(connection, message, NULL, -EINVAL); + /* Make sure the lid switch is ignored for a while (?) */ + manager_set_lid_switch_ignore(m, now(CLOCK_MONOTONIC) + m->holdoff_timeout_usec); - r = verify_polkit(connection, message, "org.freedesktop.login1.attach-device", interactive, NULL, &error); - if (r < 0) - return bus_send_error_reply(connection, message, &error, r); + return 0; +} - r = attach_device(m, seat, sysfs); - if (r < 0) - return bus_send_error_reply(connection, message, NULL, -EINVAL); +static int delay_shutdown_or_sleep( + Manager *m, + InhibitWhat w, + HandleAction action) { - reply = dbus_message_new_method_return(message); - if (!reply) - goto oom; + assert(m); + assert(w >= 0); + assert(w < _INHIBIT_WHAT_MAX); + m->action_timestamp = now(CLOCK_MONOTONIC); + m->pending_action = action; + m->action_what = w; - } else if (dbus_message_is_method_call(message, "org.freedesktop.login1.Manager", "FlushDevices")) { - dbus_bool_t interactive; + return 0; +} - if (!dbus_message_get_args( - message, - &error, - DBUS_TYPE_BOOLEAN, &interactive, - DBUS_TYPE_INVALID)) - return bus_send_error_reply(connection, message, &error, -EINVAL); +int bus_manager_shutdown_or_sleep_now_or_later( + Manager *m, + HandleAction action, + InhibitWhat w, + sd_bus_error *error) { - r = verify_polkit(connection, message, "org.freedesktop.login1.flush-devices", interactive, NULL, &error); - if (r < 0) - return bus_send_error_reply(connection, message, &error, r); + bool delayed; + int r; - r = flush_devices(m); - if (r < 0) - return bus_send_error_reply(connection, message, NULL, -EINVAL); - - reply = dbus_message_new_method_return(message); - if (!reply) - goto oom; - - } else if (dbus_message_is_method_call(message, "org.freedesktop.login1.Manager", "PowerOff")) { - - r = bus_manager_do_shutdown_or_sleep( - m, connection, message, - SPECIAL_POWEROFF_TARGET, - INHIBIT_SHUTDOWN, - "org.freedesktop.login1.power-off", - "org.freedesktop.login1.power-off-multiple-sessions", - "org.freedesktop.login1.power-off-ignore-inhibit", - NULL, - &error, &reply); - if (r < 0) - return bus_send_error_reply(connection, message, &error, r); - } else if (dbus_message_is_method_call(message, "org.freedesktop.login1.Manager", "Reboot")) { - r = bus_manager_do_shutdown_or_sleep( - m, connection, message, - SPECIAL_REBOOT_TARGET, - INHIBIT_SHUTDOWN, - "org.freedesktop.login1.reboot", - "org.freedesktop.login1.reboot-multiple-sessions", - "org.freedesktop.login1.reboot-ignore-inhibit", - NULL, - &error, &reply); - if (r < 0) - return bus_send_error_reply(connection, message, &error, r); - - } else if (dbus_message_is_method_call(message, "org.freedesktop.login1.Manager", "Suspend")) { - r = bus_manager_do_shutdown_or_sleep( - m, connection, message, - SPECIAL_SUSPEND_TARGET, - INHIBIT_SLEEP, - "org.freedesktop.login1.suspend", - "org.freedesktop.login1.suspend-multiple-sessions", - "org.freedesktop.login1.suspend-ignore-inhibit", - "suspend", - &error, &reply); - if (r < 0) - return bus_send_error_reply(connection, message, &error, r); - } else if (dbus_message_is_method_call(message, "org.freedesktop.login1.Manager", "Hibernate")) { - r = bus_manager_do_shutdown_or_sleep( - m, connection, message, - SPECIAL_HIBERNATE_TARGET, - INHIBIT_SLEEP, - "org.freedesktop.login1.hibernate", - "org.freedesktop.login1.hibernate-multiple-sessions", - "org.freedesktop.login1.hibernate-ignore-inhibit", - "hibernate", - &error, &reply); - if (r < 0) - return bus_send_error_reply(connection, message, &error, r); - - } else if (dbus_message_is_method_call(message, "org.freedesktop.login1.Manager", "HybridSleep")) { - r = bus_manager_do_shutdown_or_sleep( - m, connection, message, - SPECIAL_HYBRID_SLEEP_TARGET, - INHIBIT_SLEEP, - "org.freedesktop.login1.hibernate", - "org.freedesktop.login1.hibernate-multiple-sessions", - "org.freedesktop.login1.hibernate-ignore-inhibit", - "hybrid-sleep", - &error, &reply); - if (r < 0) - return bus_send_error_reply(connection, message, &error, r); - - } else if (dbus_message_is_method_call(message, "org.freedesktop.login1.Manager", "CanPowerOff")) { - - r = bus_manager_can_shutdown_or_sleep( - m, connection, message, - INHIBIT_SHUTDOWN, - "org.freedesktop.login1.power-off", - "org.freedesktop.login1.power-off-multiple-sessions", - "org.freedesktop.login1.power-off-ignore-inhibit", - NULL, - &error, &reply); - if (r < 0) - return bus_send_error_reply(connection, message, &error, r); - } else if (dbus_message_is_method_call(message, "org.freedesktop.login1.Manager", "CanReboot")) { - r = bus_manager_can_shutdown_or_sleep( - m, connection, message, - INHIBIT_SHUTDOWN, - "org.freedesktop.login1.reboot", - "org.freedesktop.login1.reboot-multiple-sessions", - "org.freedesktop.login1.reboot-ignore-inhibit", - NULL, - &error, &reply); - if (r < 0) - return bus_send_error_reply(connection, message, &error, r); - - } else if (dbus_message_is_method_call(message, "org.freedesktop.login1.Manager", "CanSuspend")) { - r = bus_manager_can_shutdown_or_sleep( - m, connection, message, - INHIBIT_SLEEP, - "org.freedesktop.login1.suspend", - "org.freedesktop.login1.suspend-multiple-sessions", - "org.freedesktop.login1.suspend-ignore-inhibit", - "suspend", - &error, &reply); - if (r < 0) - return bus_send_error_reply(connection, message, &error, r); - - } else if (dbus_message_is_method_call(message, "org.freedesktop.login1.Manager", "CanHibernate")) { - r = bus_manager_can_shutdown_or_sleep( - m, connection, message, - INHIBIT_SLEEP, - "org.freedesktop.login1.hibernate", - "org.freedesktop.login1.hibernate-multiple-sessions", - "org.freedesktop.login1.hibernate-ignore-inhibit", - "hibernate", - &error, &reply); - if (r < 0) - return bus_send_error_reply(connection, message, &error, r); - - } else if (dbus_message_is_method_call(message, "org.freedesktop.login1.Manager", "CanHybridSleep")) { - r = bus_manager_can_shutdown_or_sleep( - m, connection, message, - INHIBIT_SLEEP, - "org.freedesktop.login1.hibernate", - "org.freedesktop.login1.hibernate-multiple-sessions", - "org.freedesktop.login1.hibernate-ignore-inhibit", - "hybrid-sleep", - &error, &reply); - if (r < 0) - return bus_send_error_reply(connection, message, &error, r); + assert(m); + assert(w >= 0); + assert(w <= _INHIBIT_WHAT_MAX); - } else if (dbus_message_is_method_call(message, "org.freedesktop.DBus.Introspectable", "Introspect")) { - char *introspection = NULL; - FILE *f; - Iterator i; - Session *session; - Seat *seat; - User *user; - size_t size; - char *p; + /* Tell everybody to prepare for shutdown/sleep */ + send_prepare_for(m, w, true); - if (!(reply = dbus_message_new_method_return(message))) - goto oom; + delayed = + m->inhibit_delay_max > 0 && + manager_is_inhibited(m, w, INHIBIT_DELAY, NULL, false, false, 0, NULL); - /* We roll our own introspection code here, instead of - * relying on bus_default_message_handler() because we - * need to generate our introspection string - * dynamically. */ + if (delayed) + /* Shutdown is delayed, keep in mind what we + * want to do, and start a timeout */ + r = delay_shutdown_or_sleep(m, w, action); + else + /* Shutdown is not delayed, execute it + * immediately */ + r = execute_shutdown_or_sleep(m, w, action, error); - if (!(f = open_memstream(&introspection, &size))) - goto oom; + return r; +} - fputs(INTROSPECTION_BEGIN, f); +static int method_do_shutdown_or_sleep( + Manager *m, + sd_bus_message *message, + HandleAction sleep_action, + InhibitWhat w, + const char *action, + const char *action_multiple_sessions, + const char *action_ignore_inhibit, + const char *sleep_verb, + sd_bus_message_handler_t method, + sd_bus_error *error) { - HASHMAP_FOREACH(seat, m->seats, i) { - p = bus_path_escape(seat->id); + _cleanup_bus_creds_unref_ sd_bus_creds *creds = NULL; + bool multiple_sessions, blocked; + int interactive, r; + uid_t uid; - if (p) { - fprintf(f, "", p); - free(p); - } - } + assert(m); + assert(message); + assert(w >= 0); + assert(w <= _INHIBIT_WHAT_MAX); + assert(action); + assert(action_multiple_sessions); + assert(action_ignore_inhibit); + assert(method); - HASHMAP_FOREACH(user, m->users, i) - fprintf(f, "", (unsigned long long) user->uid); + r = sd_bus_message_read(message, "b", &interactive); + if (r < 0) + return r; - HASHMAP_FOREACH(session, m->sessions, i) { - p = bus_path_escape(session->id); + /* Don't allow multiple jobs being executed at the same time */ + if (m->action_what) + return sd_bus_error_setf(error, BUS_ERROR_OPERATION_IN_PROGRESS, "There's already a shutdown or sleep operation in progress"); - if (p) { - fprintf(f, "", p); - free(p); - } - } + if (sleep_verb) { + r = can_sleep(sleep_verb); + if (r < 0) + return r; - fputs(INTROSPECTION_END, f); + if (r == 0) + return sd_bus_error_setf(error, BUS_ERROR_SLEEP_VERB_NOT_SUPPORTED, "Sleep verb not supported"); + } - if (ferror(f)) { - fclose(f); - free(introspection); - goto oom; - } + r = sd_bus_query_sender_creds(message, SD_BUS_CREDS_EUID, &creds); + if (r < 0) + return r; - fclose(f); + r = sd_bus_creds_get_euid(creds, &uid); + if (r < 0) + return r; - if (!introspection) - goto oom; + r = have_multiple_sessions(m, uid); + if (r < 0) + return r; - if (!dbus_message_append_args(reply, DBUS_TYPE_STRING, &introspection, DBUS_TYPE_INVALID)) { - free(introspection); - goto oom; - } + multiple_sessions = r > 0; + blocked = manager_is_inhibited(m, w, INHIBIT_BLOCK, NULL, false, true, uid, NULL); - free(introspection); - } else { - const BusBoundProperties bps[] = { - { "org.freedesktop.login1.Manager", bus_login_manager_properties, m }, - { NULL, } - }; - return bus_default_message_handler(connection, message, NULL, INTERFACES_LIST, bps); + if (multiple_sessions) { + r = bus_verify_polkit_async(message, CAP_SYS_BOOT, action_multiple_sessions, interactive, UID_INVALID, &m->polkit_registry, error); + if (r < 0) + return r; + if (r == 0) + return 1; /* No authorization for now, but the async polkit stuff will call us again when it has it */ } - if (reply) { - if (!bus_maybe_send_reply(connection, message, reply)) - goto oom; + if (blocked) { + r = bus_verify_polkit_async(message, CAP_SYS_BOOT, action_ignore_inhibit, interactive, UID_INVALID, &m->polkit_registry, error); + if (r < 0) + return r; + if (r == 0) + return 1; /* No authorization for now, but the async polkit stuff will call us again when it has it */ } - return DBUS_HANDLER_RESULT_HANDLED; + if (!multiple_sessions && !blocked) { + r = bus_verify_polkit_async(message, CAP_SYS_BOOT, action, interactive, UID_INVALID, &m->polkit_registry, error); + if (r < 0) + return r; + if (r == 0) + return 1; /* No authorization for now, but the async polkit stuff will call us again when it has it */ + } -oom: - dbus_error_free(&error); + r = bus_manager_shutdown_or_sleep_now_or_later(m, sleep_action, w, error); + if (r < 0) + return r; - return DBUS_HANDLER_RESULT_NEED_MEMORY; + return sd_bus_reply_method_return(message, NULL); } -const DBusObjectPathVTable bus_manager_vtable = { - .message_function = manager_message_handler -}; +static int method_poweroff(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) { + Manager *m = userdata; -DBusHandlerResult bus_message_filter( - DBusConnection *connection, - DBusMessage *message, - void *userdata) { + return method_do_shutdown_or_sleep( + m, message, + HANDLE_POWEROFF, + INHIBIT_SHUTDOWN, + "org.freedesktop.login1.power-off", + "org.freedesktop.login1.power-off-multiple-sessions", + "org.freedesktop.login1.power-off-ignore-inhibit", + NULL, + method_poweroff, + error); +} +static int method_reboot(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) { Manager *m = userdata; - DBusError error; - assert(m); - assert(connection); - assert(message); + return method_do_shutdown_or_sleep( + m, message, + HANDLE_REBOOT, + INHIBIT_SHUTDOWN, + "org.freedesktop.login1.reboot", + "org.freedesktop.login1.reboot-multiple-sessions", + "org.freedesktop.login1.reboot-ignore-inhibit", + NULL, + method_reboot, + error); +} - dbus_error_init(&error); +static int method_suspend(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) { + Manager *m = userdata; - log_debug("Got message: %s %s %s", strna(dbus_message_get_sender(message)), strna(dbus_message_get_interface(message)), strna(dbus_message_get_member(message))); + return method_do_shutdown_or_sleep( + m, message, + HANDLE_SUSPEND, + INHIBIT_SLEEP, + "org.freedesktop.login1.suspend", + "org.freedesktop.login1.suspend-multiple-sessions", + "org.freedesktop.login1.suspend-ignore-inhibit", + "suspend", + method_suspend, + error); +} - if (dbus_message_is_signal(message, "org.freedesktop.systemd1.Manager", "JobRemoved")) { - const char *path, *result, *unit; - uint32_t id; +static int method_hibernate(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) { + Manager *m = userdata; - if (!dbus_message_get_args(message, &error, - DBUS_TYPE_UINT32, &id, - DBUS_TYPE_OBJECT_PATH, &path, - DBUS_TYPE_STRING, &unit, - DBUS_TYPE_STRING, &result, - DBUS_TYPE_INVALID)) { - log_error("Failed to parse JobRemoved message: %s", bus_error_message(&error)); - goto finish; - } + return method_do_shutdown_or_sleep( + m, message, + HANDLE_HIBERNATE, + INHIBIT_SLEEP, + "org.freedesktop.login1.hibernate", + "org.freedesktop.login1.hibernate-multiple-sessions", + "org.freedesktop.login1.hibernate-ignore-inhibit", + "hibernate", + method_hibernate, + error); +} + +static int method_hybrid_sleep(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) { + Manager *m = userdata; - if (m->action_job && streq(m->action_job, path)) { - log_info("Operation finished."); + return method_do_shutdown_or_sleep( + m, message, + HANDLE_HYBRID_SLEEP, + INHIBIT_SLEEP, + "org.freedesktop.login1.hibernate", + "org.freedesktop.login1.hibernate-multiple-sessions", + "org.freedesktop.login1.hibernate-ignore-inhibit", + "hybrid-sleep", + method_hybrid_sleep, + error); +} - /* Tell people that they now may take a lock again */ - send_prepare_for(m, m->action_what, false); +static int method_can_shutdown_or_sleep( + Manager *m, + sd_bus_message *message, + InhibitWhat w, + const char *action, + const char *action_multiple_sessions, + const char *action_ignore_inhibit, + const char *sleep_verb, + sd_bus_error *error) { - free(m->action_job); - m->action_job = NULL; - m->action_unit = NULL; - m->action_what = 0; + _cleanup_bus_creds_unref_ sd_bus_creds *creds = NULL; + bool multiple_sessions, challenge, blocked; + const char *result = NULL; + uid_t uid; + int r; - } else { - Session *s; - User *u; - - s = hashmap_get(m->session_units, unit); - if (s) { - if (streq_ptr(path, s->scope_job)) { - free(s->scope_job); - s->scope_job = NULL; - session_save(s); - - if (s->started) { - if (streq(result, "done")) - session_send_create_reply(s, NULL); - else { - dbus_set_error(&error, BUS_ERROR_JOB_FAILED, "Start job for unit %s failed with '%s'", unit, result); - session_send_create_reply(s, &error); - } - } - } - - session_add_to_gc_queue(s); - } - - u = hashmap_get(m->user_units, unit); - if (u) { - if (streq_ptr(path, u->service_job)) { - free(u->service_job); - u->service_job = NULL; - } - - if (streq_ptr(path, u->slice_job)) { - free(u->slice_job); - u->slice_job = NULL; - } - - user_save(u); - user_add_to_gc_queue(u); - } - } + assert(m); + assert(message); + assert(w >= 0); + assert(w <= _INHIBIT_WHAT_MAX); + assert(action); + assert(action_multiple_sessions); + assert(action_ignore_inhibit); - } else if (dbus_message_is_signal(message, "org.freedesktop.DBus.Properties", "PropertiesChanged")) { + if (sleep_verb) { + r = can_sleep(sleep_verb); + if (r < 0) + return r; + if (r == 0) + return sd_bus_reply_method_return(message, "s", "na"); + } - _cleanup_dbus_message_unref_ DBusMessage *reply = NULL; - _cleanup_free_ char *unit = NULL; - const char *path; + r = sd_bus_query_sender_creds(message, SD_BUS_CREDS_EUID, &creds); + if (r < 0) + return r; - path = dbus_message_get_path(message); - if (!path) - goto finish; + r = sd_bus_creds_get_euid(creds, &uid); + if (r < 0) + return r; - unit_name_from_dbus_path(path, &unit); - if (unit) { - Session *s; - User *u; + r = have_multiple_sessions(m, uid); + if (r < 0) + return r; - s = hashmap_get(m->session_units, unit); - if (s) - session_add_to_gc_queue(s); + multiple_sessions = r > 0; + blocked = manager_is_inhibited(m, w, INHIBIT_BLOCK, NULL, false, true, uid, NULL); - u = hashmap_get(m->user_units, unit); - if (u) - user_add_to_gc_queue(u); - } + if (multiple_sessions) { + r = bus_verify_polkit(message, CAP_SYS_BOOT, action_multiple_sessions, false, UID_INVALID, &challenge, error); + if (r < 0) + return r; - } else if (dbus_message_is_signal(message, "org.freedesktop.systemd1.Manager", "UnitRemoved")) { + if (r > 0) + result = "yes"; + else if (challenge) + result = "challenge"; + else + result = "no"; + } - const char *path, *unit; - Session *session; - User *user; - - if (!dbus_message_get_args(message, &error, - DBUS_TYPE_STRING, &unit, - DBUS_TYPE_OBJECT_PATH, &path, - DBUS_TYPE_INVALID)) { - log_error("Failed to parse UnitRemoved message: %s", bus_error_message(&error)); - goto finish; - } + if (blocked) { + r = bus_verify_polkit(message, CAP_SYS_BOOT, action_ignore_inhibit, false, UID_INVALID, &challenge, error); + if (r < 0) + return r; - session = hashmap_get(m->session_units, unit); - if (session) - session_add_to_gc_queue(session); + if (r > 0 && !result) + result = "yes"; + else if (challenge && (!result || streq(result, "yes"))) + result = "challenge"; + else + result = "no"; + } - user = hashmap_get(m->user_units, unit); - if (user) - user_add_to_gc_queue(user); + if (!multiple_sessions && !blocked) { + /* If neither inhibit nor multiple sessions + * apply then just check the normal policy */ - } else if (dbus_message_is_signal(message, "org.freedesktop.systemd1.Manager", "Reloading")) { - dbus_bool_t b; + r = bus_verify_polkit(message, CAP_SYS_BOOT, action, false, UID_INVALID, &challenge, error); + if (r < 0) + return r; - if (!dbus_message_get_args(message, &error, - DBUS_TYPE_BOOLEAN, &b, - DBUS_TYPE_INVALID)) { - log_error("Failed to parse Reloading message: %s", bus_error_message(&error)); - goto finish; - } + if (r > 0) + result = "yes"; + else if (challenge) + result = "challenge"; + else + result = "no"; + } - /* systemd finished reloading, let's recheck all our sessions */ - if (!b) { - Session *session; - Iterator i; + return sd_bus_reply_method_return(message, "s", result); +} - log_debug("System manager has been reloaded, rechecking sessions..."); +static int method_can_poweroff(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) { + Manager *m = userdata; - HASHMAP_FOREACH(session, m->sessions, i) - session_add_to_gc_queue(session); - } - } + return method_can_shutdown_or_sleep( + m, message, + INHIBIT_SHUTDOWN, + "org.freedesktop.login1.power-off", + "org.freedesktop.login1.power-off-multiple-sessions", + "org.freedesktop.login1.power-off-ignore-inhibit", + NULL, + error); +} -finish: - dbus_error_free(&error); +static int method_can_reboot(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) { + Manager *m = userdata; - return DBUS_HANDLER_RESULT_NOT_YET_HANDLED; + return method_can_shutdown_or_sleep( + m, message, + INHIBIT_SHUTDOWN, + "org.freedesktop.login1.reboot", + "org.freedesktop.login1.reboot-multiple-sessions", + "org.freedesktop.login1.reboot-ignore-inhibit", + NULL, + error); } -int manager_send_changed(Manager *manager, const char *properties) { - _cleanup_dbus_message_unref_ DBusMessage *m = NULL; +static int method_can_suspend(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) { + Manager *m = userdata; - assert(manager); + return method_can_shutdown_or_sleep( + m, message, + INHIBIT_SLEEP, + "org.freedesktop.login1.suspend", + "org.freedesktop.login1.suspend-multiple-sessions", + "org.freedesktop.login1.suspend-ignore-inhibit", + "suspend", + error); +} - m = bus_properties_changed_new("/org/freedesktop/login1", - "org.freedesktop.login1.Manager", - properties); - if (!m) - return -ENOMEM; +static int method_can_hibernate(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) { + Manager *m = userdata; - if (!dbus_connection_send(manager->bus, m, NULL)) - return -ENOMEM; + return method_can_shutdown_or_sleep( + m, message, + INHIBIT_SLEEP, + "org.freedesktop.login1.hibernate", + "org.freedesktop.login1.hibernate-multiple-sessions", + "org.freedesktop.login1.hibernate-ignore-inhibit", + "hibernate", + error); +} - return 0; +static int method_can_hybrid_sleep(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) { + Manager *m = userdata; + + return method_can_shutdown_or_sleep( + m, message, + INHIBIT_SLEEP, + "org.freedesktop.login1.hibernate", + "org.freedesktop.login1.hibernate-multiple-sessions", + "org.freedesktop.login1.hibernate-ignore-inhibit", + "hybrid-sleep", + error); } -int manager_dispatch_delayed(Manager *manager) { - DBusError error; +static int property_get_reboot_to_firmware_setup( + sd_bus *bus, + const char *path, + const char *interface, + const char *property, + sd_bus_message *reply, + void *userdata, + sd_bus_error *error) { int r; - assert(manager); + assert(bus); + assert(reply); + assert(userdata); - if (manager->action_what == 0 || manager->action_job) - return 0; + r = efi_get_reboot_to_firmware(); + if (r < 0 && r != -EOPNOTSUPP) + return r; - /* Continue delay? */ - if (manager_is_inhibited(manager, manager->action_what, INHIBIT_DELAY, NULL, false, false, 0)) { + return sd_bus_message_append(reply, "b", r > 0); +} - if (manager->action_timestamp + manager->inhibit_delay_max > now(CLOCK_MONOTONIC)) - return 0; +static int method_set_reboot_to_firmware_setup( + sd_bus *bus, + sd_bus_message *message, + void *userdata, + sd_bus_error *error) { - log_info("Delay lock is active but inhibitor timeout is reached."); - } + int b, r; + int interactive; + Manager *m = userdata; - /* Actually do the operation */ - dbus_error_init(&error); - r = execute_shutdown_or_sleep(manager, manager->action_what, manager->action_unit, &error); - if (r < 0) { - log_warning("Failed to send delayed message: %s", bus_error(&error, r)); - dbus_error_free(&error); + assert(bus); + assert(message); + assert(m); - manager->action_unit = NULL; - manager->action_what = 0; + r = sd_bus_message_read(message, "bb", &b, &interactive); + if (r < 0) return r; - } - return 1; -} + r = bus_verify_polkit_async(message, + CAP_SYS_ADMIN, + "org.freedesktop.login1.set-reboot-to-firmware-setup", + interactive, + UID_INVALID, + &m->polkit_registry, + error); + if (r < 0) + return r; + if (r == 0) + return 1; /* No authorization for now, but the async polkit stuff will call us again when it has it */ -int manager_start_scope( - Manager *manager, - const char *scope, - pid_t pid, - const char *slice, - const char *description, - const char *after, - DBusError *error, - char **job) { - - _cleanup_dbus_message_unref_ DBusMessage *m = NULL, *reply = NULL; - DBusMessageIter iter, sub, sub2, sub3, sub4; - const char *timeout_stop_property = "TimeoutStopUSec"; - const char *pids_property = "PIDs"; - uint64_t timeout = 500 * USEC_PER_MSEC; - const char *fail = "fail"; - uint32_t u; + r = efi_set_reboot_to_firmware(b); + if (r < 0) + return r; - assert(manager); - assert(scope); - assert(pid > 1); - - if (!slice) - slice = ""; - - m = dbus_message_new_method_call( - "org.freedesktop.systemd1", - "/org/freedesktop/systemd1", - "org.freedesktop.systemd1.Manager", - "StartTransientUnit"); - if (!m) - return log_oom(); - - dbus_message_iter_init_append(m, &iter); - - if (!dbus_message_iter_append_basic(&iter, DBUS_TYPE_STRING, &scope) || - !dbus_message_iter_append_basic(&iter, DBUS_TYPE_STRING, &fail) || - !dbus_message_iter_open_container(&iter, DBUS_TYPE_ARRAY, "(sv)", &sub)) - return log_oom(); - - if (!isempty(slice)) { - const char *slice_property = "Slice"; - - if (!dbus_message_iter_open_container(&sub, DBUS_TYPE_STRUCT, NULL, &sub2) || - !dbus_message_iter_append_basic(&sub2, DBUS_TYPE_STRING, &slice_property) || - !dbus_message_iter_open_container(&sub2, DBUS_TYPE_VARIANT, "s", &sub3) || - !dbus_message_iter_append_basic(&sub3, DBUS_TYPE_STRING, &slice) || - !dbus_message_iter_close_container(&sub2, &sub3) || - !dbus_message_iter_close_container(&sub, &sub2)) - return log_oom(); - } + return sd_bus_reply_method_return(message, NULL); +} - if (!isempty(description)) { - const char *description_property = "Description"; +static int method_can_reboot_to_firmware_setup( + sd_bus *bus, + sd_bus_message *message, + void *userdata, + sd_bus_error *error) { - if (!dbus_message_iter_open_container(&sub, DBUS_TYPE_STRUCT, NULL, &sub2) || - !dbus_message_iter_append_basic(&sub2, DBUS_TYPE_STRING, &description_property) || - !dbus_message_iter_open_container(&sub2, DBUS_TYPE_VARIANT, "s", &sub3) || - !dbus_message_iter_append_basic(&sub3, DBUS_TYPE_STRING, &description) || - !dbus_message_iter_close_container(&sub2, &sub3) || - !dbus_message_iter_close_container(&sub, &sub2)) - return log_oom(); - } + int r; + bool challenge; + const char *result; + Manager *m = userdata; - if (!isempty(after)) { - const char *after_property = "After"; - - if (!dbus_message_iter_open_container(&sub, DBUS_TYPE_STRUCT, NULL, &sub2) || - !dbus_message_iter_append_basic(&sub2, DBUS_TYPE_STRING, &after_property) || - !dbus_message_iter_open_container(&sub2, DBUS_TYPE_VARIANT, "as", &sub3) || - !dbus_message_iter_open_container(&sub3, DBUS_TYPE_ARRAY, "s", &sub4) || - !dbus_message_iter_append_basic(&sub4, DBUS_TYPE_STRING, &after) || - !dbus_message_iter_close_container(&sub3, &sub4) || - !dbus_message_iter_close_container(&sub2, &sub3) || - !dbus_message_iter_close_container(&sub, &sub2)) - return log_oom(); - } + assert(bus); + assert(message); + assert(m); - /* cgroup empty notification is not available in containers - * currently. To make this less problematic, let's shorten the - * stop timeout for sessions, so that we don't wait - * forever. */ - - if (!dbus_message_iter_open_container(&sub, DBUS_TYPE_STRUCT, NULL, &sub2) || - !dbus_message_iter_append_basic(&sub2, DBUS_TYPE_STRING, &timeout_stop_property) || - !dbus_message_iter_open_container(&sub2, DBUS_TYPE_VARIANT, "t", &sub3) || - !dbus_message_iter_append_basic(&sub3, DBUS_TYPE_UINT64, &timeout) || - !dbus_message_iter_close_container(&sub2, &sub3) || - !dbus_message_iter_close_container(&sub, &sub2)) - return log_oom(); - - u = pid; - if (!dbus_message_iter_open_container(&sub, DBUS_TYPE_STRUCT, NULL, &sub2) || - !dbus_message_iter_append_basic(&sub2, DBUS_TYPE_STRING, &pids_property) || - !dbus_message_iter_open_container(&sub2, DBUS_TYPE_VARIANT, "au", &sub3) || - !dbus_message_iter_open_container(&sub3, DBUS_TYPE_ARRAY, "u", &sub4) || - !dbus_message_iter_append_basic(&sub4, DBUS_TYPE_UINT32, &u) || - !dbus_message_iter_close_container(&sub3, &sub4) || - !dbus_message_iter_close_container(&sub2, &sub3) || - !dbus_message_iter_close_container(&sub, &sub2) || - !dbus_message_iter_close_container(&iter, &sub)) - return log_oom(); - - reply = dbus_connection_send_with_reply_and_block(manager->bus, m, -1, error); - if (!reply) - return -EIO; - - if (job) { - const char *j; - char *copy; - - if (!dbus_message_get_args(reply, error, DBUS_TYPE_OBJECT_PATH, &j, DBUS_TYPE_INVALID)) - return -EIO; - - copy = strdup(j); - if (!copy) - return -ENOMEM; + r = efi_reboot_to_firmware_supported(); + if (r == -EOPNOTSUPP) + return sd_bus_reply_method_return(message, "s", "na"); + else if (r < 0) + return r; - *job = copy; - } + r = bus_test_polkit(message, + CAP_SYS_ADMIN, + "org.freedesktop.login1.set-reboot-to-firmware-setup", + UID_INVALID, + &challenge, + error); + if (r < 0) + return r; - return 0; + if (r > 0) + result = "yes"; + else if (challenge) + result = "challenge"; + else + result = "no"; + + return sd_bus_reply_method_return(message, "s", result); } -int manager_start_unit(Manager *manager, const char *unit, DBusError *error, char **job) { - _cleanup_dbus_message_unref_ DBusMessage *reply = NULL; - const char *fail = "fail"; +static int method_inhibit(sd_bus *bus, sd_bus_message *message, void *userdata, sd_bus_error *error) { + _cleanup_bus_creds_unref_ sd_bus_creds *creds = NULL; + const char *who, *why, *what, *mode; + _cleanup_free_ char *id = NULL; + _cleanup_close_ int fifo_fd = -1; + Manager *m = userdata; + Inhibitor *i = NULL; + InhibitMode mm; + InhibitWhat w; + pid_t pid; + uid_t uid; int r; - assert(manager); - assert(unit); + assert(bus); + assert(message); + assert(m); - r = bus_method_call_with_reply( - manager->bus, - "org.freedesktop.systemd1", - "/org/freedesktop/systemd1", - "org.freedesktop.systemd1.Manager", - "StartUnit", - &reply, - error, - DBUS_TYPE_STRING, &unit, - DBUS_TYPE_STRING, &fail, - DBUS_TYPE_INVALID); - if (r < 0) { - log_error("Failed to start unit %s: %s", unit, bus_error(error, r)); + r = sd_bus_message_read(message, "ssss", &what, &who, &why, &mode); + if (r < 0) return r; - } - if (job) { - const char *j; - char *copy; + w = inhibit_what_from_string(what); + if (w <= 0) + return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Invalid what specification %s", what); - if (!dbus_message_get_args(reply, error, - DBUS_TYPE_OBJECT_PATH, &j, - DBUS_TYPE_INVALID)) { - log_error("Failed to parse reply."); - return -EIO; - } + mm = inhibit_mode_from_string(mode); + if (mm < 0) + return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Invalid mode specification %s", mode); - copy = strdup(j); - if (!copy) - return -ENOMEM; + /* Delay is only supported for shutdown/sleep */ + if (mm == INHIBIT_DELAY && (w & ~(INHIBIT_SHUTDOWN|INHIBIT_SLEEP))) + return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Delay inhibitors only supported for shutdown and sleep"); - *job = copy; - } + /* Don't allow taking delay locks while we are already + * executing the operation. We shouldn't create the impression + * that the lock was successful if the machine is about to go + * down/suspend any moment. */ + if (m->action_what & w) + return sd_bus_error_setf(error, BUS_ERROR_OPERATION_IN_PROGRESS, "The operation inhibition has been requested for is already running"); + + r = bus_verify_polkit_async( + message, + CAP_SYS_BOOT, + w == INHIBIT_SHUTDOWN ? (mm == INHIBIT_BLOCK ? "org.freedesktop.login1.inhibit-block-shutdown" : "org.freedesktop.login1.inhibit-delay-shutdown") : + w == INHIBIT_SLEEP ? (mm == INHIBIT_BLOCK ? "org.freedesktop.login1.inhibit-block-sleep" : "org.freedesktop.login1.inhibit-delay-sleep") : + w == INHIBIT_IDLE ? "org.freedesktop.login1.inhibit-block-idle" : + w == INHIBIT_HANDLE_POWER_KEY ? "org.freedesktop.login1.inhibit-handle-power-key" : + w == INHIBIT_HANDLE_SUSPEND_KEY ? "org.freedesktop.login1.inhibit-handle-suspend-key" : + w == INHIBIT_HANDLE_HIBERNATE_KEY ? "org.freedesktop.login1.inhibit-handle-hibernate-key" : + "org.freedesktop.login1.inhibit-handle-lid-switch", + false, + UID_INVALID, + &m->polkit_registry, + error); + if (r < 0) + return r; + if (r == 0) + return 1; /* No authorization for now, but the async polkit stuff will call us again when it has it */ - return 0; -} + r = sd_bus_query_sender_creds(message, SD_BUS_CREDS_EUID|SD_BUS_CREDS_PID, &creds); + if (r < 0) + return r; -int manager_stop_unit(Manager *manager, const char *unit, DBusError *error, char **job) { - _cleanup_dbus_message_unref_ DBusMessage *reply = NULL; - const char *fail = "fail"; - int r; + r = sd_bus_creds_get_euid(creds, &uid); + if (r < 0) + return r; - assert(manager); - assert(unit); + r = sd_bus_creds_get_pid(creds, &pid); + if (r < 0) + return r; - r = bus_method_call_with_reply( - manager->bus, - "org.freedesktop.systemd1", - "/org/freedesktop/systemd1", - "org.freedesktop.systemd1.Manager", - "StopUnit", - &reply, - error, - DBUS_TYPE_STRING, &unit, - DBUS_TYPE_STRING, &fail, - DBUS_TYPE_INVALID); - if (r < 0) { - if (dbus_error_has_name(error, BUS_ERROR_NO_SUCH_UNIT) || - dbus_error_has_name(error, BUS_ERROR_LOAD_FAILED)) { + do { + free(id); + id = NULL; - if (job) - *job = NULL; + if (asprintf(&id, "%lu", ++m->inhibit_counter) < 0) + return -ENOMEM; - dbus_error_free(error); - return 0; - } + } while (hashmap_get(m->inhibitors, id)); - log_error("Failed to stop unit %s: %s", unit, bus_error(error, r)); + r = manager_add_inhibitor(m, id, &i); + if (r < 0) return r; + + i->what = w; + i->mode = mm; + i->pid = pid; + i->uid = uid; + i->why = strdup(why); + i->who = strdup(who); + + if (!i->why || !i->who) { + r = -ENOMEM; + goto fail; } - if (job) { - const char *j; - char *copy; + fifo_fd = inhibitor_create_fifo(i); + if (fifo_fd < 0) { + r = fifo_fd; + goto fail; + } - if (!dbus_message_get_args(reply, error, - DBUS_TYPE_OBJECT_PATH, &j, - DBUS_TYPE_INVALID)) { - log_error("Failed to parse reply."); - return -EIO; - } + inhibitor_start(i); - copy = strdup(j); - if (!copy) - return -ENOMEM; + return sd_bus_reply_method_return(message, "h", fifo_fd); - *job = copy; - } +fail: + if (i) + inhibitor_free(i); - return 1; + return r; } -int manager_kill_unit(Manager *manager, const char *unit, KillWho who, int signo, DBusError *error) { - _cleanup_dbus_message_unref_ DBusMessage *reply = NULL; - const char *w; - int r; +const sd_bus_vtable manager_vtable[] = { + SD_BUS_VTABLE_START(0), + + SD_BUS_PROPERTY("KillOnlyUsers", "as", NULL, offsetof(Manager, kill_only_users), SD_BUS_VTABLE_PROPERTY_CONST), + SD_BUS_PROPERTY("KillExcludeUsers", "as", NULL, offsetof(Manager, kill_exclude_users), SD_BUS_VTABLE_PROPERTY_CONST), + SD_BUS_PROPERTY("KillUserProcesses", "b", NULL, offsetof(Manager, kill_user_processes), SD_BUS_VTABLE_PROPERTY_CONST), + SD_BUS_PROPERTY("RebootToFirmwareSetup", "b", property_get_reboot_to_firmware_setup, 0, SD_BUS_VTABLE_PROPERTY_CONST), + SD_BUS_PROPERTY("IdleHint", "b", property_get_idle_hint, 0, SD_BUS_VTABLE_PROPERTY_EMITS_CHANGE), + SD_BUS_PROPERTY("IdleSinceHint", "t", property_get_idle_since_hint, 0, SD_BUS_VTABLE_PROPERTY_EMITS_CHANGE), + SD_BUS_PROPERTY("IdleSinceHintMonotonic", "t", property_get_idle_since_hint, 0, SD_BUS_VTABLE_PROPERTY_EMITS_CHANGE), + SD_BUS_PROPERTY("BlockInhibited", "s", property_get_inhibited, 0, SD_BUS_VTABLE_PROPERTY_EMITS_CHANGE), + SD_BUS_PROPERTY("DelayInhibited", "s", property_get_inhibited, 0, SD_BUS_VTABLE_PROPERTY_EMITS_CHANGE), + SD_BUS_PROPERTY("InhibitDelayMaxUSec", "t", NULL, offsetof(Manager, inhibit_delay_max), SD_BUS_VTABLE_PROPERTY_CONST), + SD_BUS_PROPERTY("HandlePowerKey", "s", property_get_handle_action, offsetof(Manager, handle_power_key), SD_BUS_VTABLE_PROPERTY_CONST), + SD_BUS_PROPERTY("HandleSuspendKey", "s", property_get_handle_action, offsetof(Manager, handle_suspend_key), SD_BUS_VTABLE_PROPERTY_CONST), + SD_BUS_PROPERTY("HandleHibernateKey", "s", property_get_handle_action, offsetof(Manager, handle_hibernate_key), SD_BUS_VTABLE_PROPERTY_CONST), + SD_BUS_PROPERTY("HandleLidSwitch", "s", property_get_handle_action, offsetof(Manager, handle_lid_switch), SD_BUS_VTABLE_PROPERTY_CONST), + SD_BUS_PROPERTY("HandleLidSwitchDocked", "s", property_get_handle_action, offsetof(Manager, handle_lid_switch_docked), SD_BUS_VTABLE_PROPERTY_CONST), + SD_BUS_PROPERTY("HoldoffTimeoutUSec", "t", NULL, offsetof(Manager, holdoff_timeout_usec), SD_BUS_VTABLE_PROPERTY_CONST), + SD_BUS_PROPERTY("IdleAction", "s", property_get_handle_action, offsetof(Manager, idle_action), SD_BUS_VTABLE_PROPERTY_CONST), + SD_BUS_PROPERTY("IdleActionUSec", "t", NULL, offsetof(Manager, idle_action_usec), SD_BUS_VTABLE_PROPERTY_CONST), + SD_BUS_PROPERTY("PreparingForShutdown", "b", property_get_preparing, 0, 0), + SD_BUS_PROPERTY("PreparingForSleep", "b", property_get_preparing, 0, 0), + + SD_BUS_METHOD("GetSession", "s", "o", method_get_session, SD_BUS_VTABLE_UNPRIVILEGED), + SD_BUS_METHOD("GetSessionByPID", "u", "o", method_get_session_by_pid, SD_BUS_VTABLE_UNPRIVILEGED), + SD_BUS_METHOD("GetUser", "u", "o", method_get_user, SD_BUS_VTABLE_UNPRIVILEGED), + SD_BUS_METHOD("GetUserByPID", "u", "o", method_get_user_by_pid, SD_BUS_VTABLE_UNPRIVILEGED), + SD_BUS_METHOD("GetSeat", "s", "o", method_get_seat, SD_BUS_VTABLE_UNPRIVILEGED), + SD_BUS_METHOD("ListSessions", NULL, "a(susso)", method_list_sessions, SD_BUS_VTABLE_UNPRIVILEGED), + SD_BUS_METHOD("ListUsers", NULL, "a(uso)", method_list_users, SD_BUS_VTABLE_UNPRIVILEGED), + SD_BUS_METHOD("ListSeats", NULL, "a(so)", method_list_seats, SD_BUS_VTABLE_UNPRIVILEGED), + SD_BUS_METHOD("ListInhibitors", NULL, "a(ssssuu)", method_list_inhibitors, SD_BUS_VTABLE_UNPRIVILEGED), + SD_BUS_METHOD("CreateSession", "uusssssussbssa(sv)", "soshusub", method_create_session, 0), + SD_BUS_METHOD("ReleaseSession", "s", NULL, method_release_session, 0), + SD_BUS_METHOD("ActivateSession", "s", NULL, method_activate_session, SD_BUS_VTABLE_UNPRIVILEGED), + SD_BUS_METHOD("ActivateSessionOnSeat", "ss", NULL, method_activate_session_on_seat, SD_BUS_VTABLE_UNPRIVILEGED), + SD_BUS_METHOD("LockSession", "s", NULL, method_lock_session, SD_BUS_VTABLE_UNPRIVILEGED), + SD_BUS_METHOD("UnlockSession", "s", NULL, method_lock_session, SD_BUS_VTABLE_UNPRIVILEGED), + SD_BUS_METHOD("LockSessions", NULL, NULL, method_lock_sessions, SD_BUS_VTABLE_UNPRIVILEGED), + SD_BUS_METHOD("UnlockSessions", NULL, NULL, method_lock_sessions, SD_BUS_VTABLE_UNPRIVILEGED), + SD_BUS_METHOD("KillSession", "ssi", NULL, method_kill_session, SD_BUS_VTABLE_UNPRIVILEGED), + SD_BUS_METHOD("KillUser", "ui", NULL, method_kill_user, SD_BUS_VTABLE_UNPRIVILEGED), + SD_BUS_METHOD("TerminateSession", "s", NULL, method_terminate_session, SD_BUS_VTABLE_UNPRIVILEGED), + SD_BUS_METHOD("TerminateUser", "u", NULL, method_terminate_user, SD_BUS_VTABLE_UNPRIVILEGED), + SD_BUS_METHOD("TerminateSeat", "s", NULL, method_terminate_seat, SD_BUS_VTABLE_UNPRIVILEGED), + SD_BUS_METHOD("SetUserLinger", "ubb", NULL, method_set_user_linger, SD_BUS_VTABLE_UNPRIVILEGED), + SD_BUS_METHOD("AttachDevice", "ssb", NULL, method_attach_device, SD_BUS_VTABLE_UNPRIVILEGED), + SD_BUS_METHOD("FlushDevices", "b", NULL, method_flush_devices, SD_BUS_VTABLE_UNPRIVILEGED), + SD_BUS_METHOD("PowerOff", "b", NULL, method_poweroff, SD_BUS_VTABLE_UNPRIVILEGED), + SD_BUS_METHOD("Reboot", "b", NULL, method_reboot, SD_BUS_VTABLE_UNPRIVILEGED), + SD_BUS_METHOD("Suspend", "b", NULL, method_suspend, SD_BUS_VTABLE_UNPRIVILEGED), + SD_BUS_METHOD("Hibernate", "b", NULL, method_hibernate, SD_BUS_VTABLE_UNPRIVILEGED), + SD_BUS_METHOD("HybridSleep", "b", NULL, method_hybrid_sleep, SD_BUS_VTABLE_UNPRIVILEGED), + SD_BUS_METHOD("CanPowerOff", NULL, "s", method_can_poweroff, SD_BUS_VTABLE_UNPRIVILEGED), + SD_BUS_METHOD("CanReboot", NULL, "s", method_can_reboot, SD_BUS_VTABLE_UNPRIVILEGED), + SD_BUS_METHOD("CanSuspend", NULL, "s", method_can_suspend, SD_BUS_VTABLE_UNPRIVILEGED), + SD_BUS_METHOD("CanHibernate", NULL, "s", method_can_hibernate, SD_BUS_VTABLE_UNPRIVILEGED), + SD_BUS_METHOD("CanHybridSleep", NULL, "s", method_can_hybrid_sleep, SD_BUS_VTABLE_UNPRIVILEGED), + SD_BUS_METHOD("Inhibit", "ssss", "h", method_inhibit, SD_BUS_VTABLE_UNPRIVILEGED), + SD_BUS_METHOD("CanRebootToFirmwareSetup", NULL, "s", method_can_reboot_to_firmware_setup, SD_BUS_VTABLE_UNPRIVILEGED), + SD_BUS_METHOD("SetRebootToFirmwareSetup", "bb", NULL, method_set_reboot_to_firmware_setup, SD_BUS_VTABLE_UNPRIVILEGED), + + SD_BUS_SIGNAL("SessionNew", "so", 0), + SD_BUS_SIGNAL("SessionRemoved", "so", 0), + SD_BUS_SIGNAL("UserNew", "uo", 0), + SD_BUS_SIGNAL("UserRemoved", "uo", 0), + SD_BUS_SIGNAL("SeatNew", "so", 0), + SD_BUS_SIGNAL("SeatRemoved", "so", 0), + SD_BUS_SIGNAL("PrepareForShutdown", "b", 0), + SD_BUS_SIGNAL("PrepareForSleep", "b", 0), + + SD_BUS_VTABLE_END +}; + +int manager_send_changed(Manager *manager, const char *property, ...) { + char **l; assert(manager); - assert(unit); - w = who == KILL_LEADER ? "process" : "cgroup"; - assert_cc(sizeof(signo) == sizeof(int32_t)); + l = strv_from_stdarg_alloca(property); - r = bus_method_call_with_reply( + return sd_bus_emit_properties_changed_strv( manager->bus, - "org.freedesktop.systemd1", - "/org/freedesktop/systemd1", - "org.freedesktop.systemd1.Manager", - "KillUnit", - &reply, - error, - DBUS_TYPE_STRING, &unit, - DBUS_TYPE_STRING, &w, - DBUS_TYPE_INT32, &signo, - DBUS_TYPE_INVALID); - if (r < 0) { - log_error("Failed to stop unit %s: %s", unit, bus_error(error, r)); - return r; - } - - return 0; + "/org/freedesktop/login1", + "org.freedesktop.login1.Manager", + l); } -int manager_unit_is_active(Manager *manager, const char *unit) { - - const char *interface = "org.freedesktop.systemd1.Unit"; - const char *property = "ActiveState"; - _cleanup_dbus_message_unref_ DBusMessage *reply = NULL; - _cleanup_free_ char *path = NULL; - DBusMessageIter iter, sub; - const char *state; - DBusError error; +int manager_dispatch_delayed(Manager *manager) { + _cleanup_bus_error_free_ sd_bus_error error = SD_BUS_ERROR_NULL; + Inhibitor *offending = NULL; int r; assert(manager); - assert(unit); - dbus_error_init(&error); - - path = unit_dbus_path_from_name(unit); - if (!path) - return -ENOMEM; - - r = bus_method_call_with_reply( - manager->bus, - "org.freedesktop.systemd1", - path, - "org.freedesktop.DBus.Properties", - "Get", - &reply, - &error, - DBUS_TYPE_STRING, &interface, - DBUS_TYPE_STRING, &property, - DBUS_TYPE_INVALID); - if (r < 0) { - if (dbus_error_has_name(&error, DBUS_ERROR_NO_REPLY) || - dbus_error_has_name(&error, DBUS_ERROR_DISCONNECTED)) { - /* systemd might have droppped off - * momentarily, let's not make this an - * error */ + if (manager->action_what == 0) + return 0; - dbus_error_free(&error); - return true; - } + /* Continue delay? */ + if (manager_is_inhibited(manager, manager->action_what, INHIBIT_DELAY, NULL, false, false, 0, &offending)) { + _cleanup_free_ char *comm = NULL, *u = NULL; - if (dbus_error_has_name(&error, BUS_ERROR_NO_SUCH_UNIT) || - dbus_error_has_name(&error, BUS_ERROR_LOAD_FAILED)) { - /* If the unit is already unloaded then it's - * not active */ + get_process_comm(offending->pid, &comm); + u = uid_to_name(offending->uid); - dbus_error_free(&error); - return false; - } + if (manager->action_timestamp + manager->inhibit_delay_max > now(CLOCK_MONOTONIC)) + return 0; - log_error("Failed to query ActiveState: %s", bus_error(&error, r)); - dbus_error_free(&error); - return r; + log_info("Delay lock is active (UID "UID_FMT"/%s, PID "PID_FMT"/%s) but inhibitor timeout is reached.", + offending->uid, strna(u), + offending->pid, strna(comm)); } - if (!dbus_message_iter_init(reply, &iter) || - dbus_message_iter_get_arg_type(&iter) != DBUS_TYPE_VARIANT) { - log_error("Failed to parse reply."); - return -EINVAL; - } + /* Actually do the operation */ + r = execute_shutdown_or_sleep(manager, manager->action_what, manager->pending_action, &error); + if (r < 0) { + log_warning("Failed to send delayed message: %s", bus_error_message(&error, r)); - dbus_message_iter_recurse(&iter, &sub); - if (dbus_message_iter_get_arg_type(&sub) != DBUS_TYPE_STRING) { - log_error("Failed to parse reply."); - return -EINVAL; + manager->pending_action = HANDLE_IGNORE; + manager->action_what = 0; + return r; } - dbus_message_iter_get_basic(&sub, &state); - - return !streq(state, "inactive") && !streq(state, "failed"); + return 1; }