1 /*-*- Mode: C; c-basic-offset: 8; indent-tabs-mode: nil -*-*/
4 This file is part of systemd.
6 Copyright 2015 Lennart Poettering
8 systemd is free software; you can redistribute it and/or modify it
9 under the terms of the GNU Lesser General Public License as published by
10 the Free Software Foundation; either version 2.1 of the License, or
11 (at your option) any later version.
13 systemd is distributed in the hope that it will be useful, but
14 WITHOUT ANY WARRANTY; without even the implied warranty of
15 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
16 Lesser General Public License for more details.
18 You should have received a copy of the GNU Lesser General Public License
19 along with systemd; If not, see <http://www.gnu.org/licenses/>.
23 #include "path-util.h"
26 int rm_rf_children(int fd, RemoveFlags flags, struct stat *root_dev) {
27 _cleanup_closedir_ DIR *d = NULL;
32 /* This returns the first error we run into, but nevertheless
33 * tries to go on. This closes the passed fd. */
35 if (!(flags & REMOVE_PHYSICAL)) {
37 r = fd_is_temporary_fs(fd);
44 /* We refuse to clean physical file systems
45 * with this call, unless explicitly
46 * requested. This is extra paranoia just to
47 * be sure we never ever remove non-state
50 log_error("Attempted to remove disk file system, and we can't allow that.");
59 return errno == ENOENT ? 0 : -errno;
70 if (errno != 0 && ret == 0)
75 if (streq(de->d_name, ".") || streq(de->d_name, ".."))
78 if (de->d_type == DT_UNKNOWN || (de->d_type == DT_DIR && root_dev)) {
79 if (fstatat(fd, de->d_name, &st, AT_SYMLINK_NOFOLLOW) < 0) {
80 if (ret == 0 && errno != ENOENT)
85 is_dir = S_ISDIR(st.st_mode);
87 is_dir = de->d_type == DT_DIR;
92 /* if root_dev is set, remove subdirectories only if device is same */
93 if (root_dev && st.st_dev != root_dev->st_dev)
96 subdir_fd = openat(fd, de->d_name, O_RDONLY|O_NONBLOCK|O_DIRECTORY|O_CLOEXEC|O_NOFOLLOW|O_NOATIME);
98 if (ret == 0 && errno != ENOENT)
103 /* Stop at mount points */
104 r = fd_is_mount_point(subdir_fd);
106 if (ret == 0 && r != -ENOENT)
109 safe_close(subdir_fd);
113 safe_close(subdir_fd);
117 /* We pass REMOVE_PHYSICAL here, to avoid
118 * doing the fstatfs() to check the file
119 * system type again for each directory */
120 r = rm_rf_children(subdir_fd, flags | REMOVE_PHYSICAL, root_dev);
121 if (r < 0 && ret == 0)
124 if (unlinkat(fd, de->d_name, AT_REMOVEDIR) < 0) {
125 if (ret == 0 && errno != ENOENT)
129 } else if (!(flags & REMOVE_ONLY_DIRECTORIES)) {
131 if (unlinkat(fd, de->d_name, 0) < 0) {
132 if (ret == 0 && errno != ENOENT)
139 int rm_rf(const char *path, RemoveFlags flags) {
145 /* We refuse to clean the root file system with this
146 * call. This is extra paranoia to never cause a really
147 * seriously broken system. */
148 if (path_equal(path, "/")) {
149 log_error("Attempted to remove entire root file system, and we can't allow that.");
153 fd = open(path, O_RDONLY|O_NONBLOCK|O_DIRECTORY|O_CLOEXEC|O_NOFOLLOW|O_NOATIME);
156 if (errno != ENOTDIR && errno != ELOOP)
159 if (!(flags & REMOVE_PHYSICAL)) {
160 if (statfs(path, &s) < 0)
163 if (!is_temporary_fs(&s)) {
164 log_error("Attempted to remove disk file system, and we can't allow that.");
169 if ((flags & REMOVE_ROOT) && !(flags & REMOVE_ONLY_DIRECTORIES))
170 if (unlink(path) < 0 && errno != ENOENT)
176 r = rm_rf_children(fd, flags, NULL);
178 if (flags & REMOVE_ROOT) {
179 if (rmdir(path) < 0 && errno != ENOENT) {