1 /*-*- Mode: C; c-basic-offset: 8; indent-tabs-mode: nil -*-*/
4 This file is part of systemd.
6 Copyright 2010 Lennart Poettering
8 systemd is free software; you can redistribute it and/or modify it
9 under the terms of the GNU Lesser General Public License as published by
10 the Free Software Foundation; either version 2.1 of the License, or
11 (at your option) any later version.
13 systemd is distributed in the hope that it will be useful, but
14 WITHOUT ANY WARRANTY; without even the implied warranty of
15 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
16 Lesser General Public License for more details.
18 You should have received a copy of the GNU Lesser General Public License
19 along with systemd; If not, see <http://www.gnu.org/licenses/>.
31 #include <sys/resource.h>
32 #include <linux/sched.h>
33 #include <sys/types.h>
37 #include <sys/ioctl.h>
39 #include <linux/tiocl.h>
42 #include <sys/inotify.h>
45 #include <sys/prctl.h>
46 #include <sys/utsname.h>
48 #include <netinet/ip.h>
57 #include <linux/magic.h>
64 #ifdef HAVE_SYS_AUXV_H
75 #include "path-util.h"
76 #include "exit-status.h"
80 #include "device-nodes.h"
87 char **saved_argv = NULL;
89 static volatile unsigned cached_columns = 0;
90 static volatile unsigned cached_lines = 0;
92 size_t page_size(void) {
93 static thread_local size_t pgsz = 0;
96 if (_likely_(pgsz > 0))
99 r = sysconf(_SC_PAGESIZE);
106 bool streq_ptr(const char *a, const char *b) {
108 /* Like streq(), but tries to make sense of NULL pointers */
119 char* endswith(const char *s, const char *postfix) {
126 pl = strlen(postfix);
129 return (char*) s + sl;
134 if (memcmp(s + sl - pl, postfix, pl) != 0)
137 return (char*) s + sl - pl;
140 bool first_word(const char *s, const char *word) {
155 if (memcmp(s, word, wl) != 0)
159 strchr(WHITESPACE, s[wl]);
162 int close_nointr(int fd) {
168 /* Just ignore EINTR; a retry loop is the wrong
169 * thing to do on Linux.
171 * http://lkml.indiana.edu/hypermail/linux/kernel/0509.1/0877.html
172 * https://bugzilla.gnome.org/show_bug.cgi?id=682819
173 * http://utcc.utoronto.ca/~cks/space/blog/unix/CloseEINTR
174 * https://sites.google.com/site/michaelsafyan/software-engineering/checkforeintrwheninvokingclosethinkagain
176 if (_unlikely_(r < 0 && errno == EINTR))
184 void close_nointr_nofail(int fd) {
187 /* like close_nointr() but cannot fail, and guarantees errno
190 assert_se(close_nointr(fd) == 0);
193 void close_many(const int fds[], unsigned n_fd) {
196 assert(fds || n_fd <= 0);
198 for (i = 0; i < n_fd; i++)
199 close_nointr_nofail(fds[i]);
202 int unlink_noerrno(const char *path) {
213 int parse_boolean(const char *v) {
216 if (streq(v, "1") || v[0] == 'y' || v[0] == 'Y' || v[0] == 't' || v[0] == 'T' || strcaseeq(v, "on"))
218 else if (streq(v, "0") || v[0] == 'n' || v[0] == 'N' || v[0] == 'f' || v[0] == 'F' || strcaseeq(v, "off"))
224 int parse_pid(const char *s, pid_t* ret_pid) {
225 unsigned long ul = 0;
232 r = safe_atolu(s, &ul);
238 if ((unsigned long) pid != ul)
248 int parse_uid(const char *s, uid_t* ret_uid) {
249 unsigned long ul = 0;
256 r = safe_atolu(s, &ul);
262 if ((unsigned long) uid != ul)
269 int safe_atou(const char *s, unsigned *ret_u) {
277 l = strtoul(s, &x, 0);
279 if (!x || x == s || *x || errno)
280 return errno > 0 ? -errno : -EINVAL;
282 if ((unsigned long) (unsigned) l != l)
285 *ret_u = (unsigned) l;
289 int safe_atoi(const char *s, int *ret_i) {
297 l = strtol(s, &x, 0);
299 if (!x || x == s || *x || errno)
300 return errno > 0 ? -errno : -EINVAL;
302 if ((long) (int) l != l)
309 int safe_atollu(const char *s, long long unsigned *ret_llu) {
311 unsigned long long l;
317 l = strtoull(s, &x, 0);
319 if (!x || x == s || *x || errno)
320 return errno ? -errno : -EINVAL;
326 int safe_atolli(const char *s, long long int *ret_lli) {
334 l = strtoll(s, &x, 0);
336 if (!x || x == s || *x || errno)
337 return errno ? -errno : -EINVAL;
343 int safe_atod(const char *s, double *ret_d) {
350 RUN_WITH_LOCALE(LC_NUMERIC_MASK, "C") {
355 if (!x || x == s || *x || errno)
356 return errno ? -errno : -EINVAL;
362 /* Split a string into words. */
363 char *split(const char *c, size_t *l, const char *separator, char **state) {
366 current = *state ? *state : (char*) c;
368 if (!*current || *c == 0)
371 current += strspn(current, separator);
372 *l = strcspn(current, separator);
375 return (char*) current;
378 /* Split a string into words, but consider strings enclosed in '' and
379 * "" as words even if they include spaces. */
380 char *split_quoted(const char *c, size_t *l, char **state) {
381 const char *current, *e;
382 bool escaped = false;
388 current = *state ? *state : c;
390 current += strspn(current, WHITESPACE);
395 else if (*current == '\'') {
398 for (e = current; *e; e++) {
408 *state = (char*) (*e == 0 ? e : e+1);
410 } else if (*current == '\"') {
413 for (e = current; *e; e++) {
423 *state = (char*) (*e == 0 ? e : e+1);
426 for (e = current; *e; e++) {
431 else if (strchr(WHITESPACE, *e))
438 return (char*) current;
441 int get_parent_of_pid(pid_t pid, pid_t *_ppid) {
443 _cleanup_fclose_ FILE *f = NULL;
456 p = procfs_file_alloca(pid, "stat");
461 if (!fgets(line, sizeof(line), f)) {
462 r = feof(f) ? -EIO : -errno;
466 /* Let's skip the pid and comm fields. The latter is enclosed
467 * in () but does not escape any () in its value, so let's
468 * skip over it manually */
470 p = strrchr(line, ')');
482 if ((long unsigned) (pid_t) ppid != ppid)
485 *_ppid = (pid_t) ppid;
490 int get_starttime_of_pid(pid_t pid, unsigned long long *st) {
491 _cleanup_fclose_ FILE *f = NULL;
498 p = procfs_file_alloca(pid, "stat");
502 return errno == ENOENT ? -ESRCH : -errno;
504 if (!fgets(line, sizeof(line), f)) {
511 /* Let's skip the pid and comm fields. The latter is enclosed
512 * in () but does not escape any () in its value, so let's
513 * skip over it manually */
515 p = strrchr(line, ')');
537 "%*d " /* priority */
539 "%*d " /* num_threads */
540 "%*d " /* itrealvalue */
541 "%llu " /* starttime */,
548 int fchmod_umask(int fd, mode_t m) {
553 r = fchmod(fd, m & (~u)) < 0 ? -errno : 0;
559 char *truncate_nl(char *s) {
562 s[strcspn(s, NEWLINE)] = 0;
566 int get_process_comm(pid_t pid, char **name) {
573 p = procfs_file_alloca(pid, "comm");
575 r = read_one_line_file(p, name);
582 int get_process_cmdline(pid_t pid, size_t max_length, bool comm_fallback, char **line) {
583 _cleanup_fclose_ FILE *f = NULL;
591 p = procfs_file_alloca(pid, "cmdline");
597 if (max_length == 0) {
598 size_t len = 0, allocated = 0;
600 while ((c = getc(f)) != EOF) {
602 if (!GREEDY_REALLOC(r, allocated, len+2)) {
607 r[len++] = isprint(c) ? c : ' ';
617 r = new(char, max_length);
623 while ((c = getc(f)) != EOF) {
645 size_t n = MIN(left-1, 3U);
652 /* Kernel threads have no argv[] */
653 if (r == NULL || r[0] == 0) {
654 _cleanup_free_ char *t = NULL;
662 h = get_process_comm(pid, &t);
666 r = strjoin("[", t, "]", NULL);
675 int is_kernel_thread(pid_t pid) {
687 p = procfs_file_alloca(pid, "cmdline");
692 count = fread(&c, 1, 1, f);
696 /* Kernel threads have an empty cmdline */
699 return eof ? 1 : -errno;
704 int get_process_capeff(pid_t pid, char **capeff) {
710 p = procfs_file_alloca(pid, "status");
712 return get_status_field(p, "\nCapEff:", capeff);
715 int get_process_exe(pid_t pid, char **name) {
723 p = procfs_file_alloca(pid, "exe");
725 r = readlink_malloc(p, name);
727 return r == -ENOENT ? -ESRCH : r;
729 d = endswith(*name, " (deleted)");
736 static int get_process_id(pid_t pid, const char *field, uid_t *uid) {
737 _cleanup_fclose_ FILE *f = NULL;
747 p = procfs_file_alloca(pid, "status");
752 FOREACH_LINE(line, f, return -errno) {
757 if (startswith(l, field)) {
759 l += strspn(l, WHITESPACE);
761 l[strcspn(l, WHITESPACE)] = 0;
763 return parse_uid(l, uid);
770 int get_process_uid(pid_t pid, uid_t *uid) {
771 return get_process_id(pid, "Uid:", uid);
774 int get_process_gid(pid_t pid, gid_t *gid) {
775 assert_cc(sizeof(uid_t) == sizeof(gid_t));
776 return get_process_id(pid, "Gid:", gid);
779 char *strnappend(const char *s, const char *suffix, size_t b) {
787 return strndup(suffix, b);
796 if (b > ((size_t) -1) - a)
799 r = new(char, a+b+1);
804 memcpy(r+a, suffix, b);
810 char *strappend(const char *s, const char *suffix) {
811 return strnappend(s, suffix, suffix ? strlen(suffix) : 0);
814 int readlink_malloc(const char *p, char **r) {
824 if (!(c = new(char, l)))
827 if ((n = readlink(p, c, l-1)) < 0) {
833 if ((size_t) n < l-1) {
844 int readlink_and_make_absolute(const char *p, char **r) {
845 _cleanup_free_ char *target = NULL;
852 j = readlink_malloc(p, &target);
856 k = file_in_same_dir(p, target);
864 int readlink_and_canonicalize(const char *p, char **r) {
871 j = readlink_and_make_absolute(p, &t);
875 s = canonicalize_file_name(t);
882 path_kill_slashes(*r);
887 int reset_all_signal_handlers(void) {
890 for (sig = 1; sig < _NSIG; sig++) {
891 struct sigaction sa = {
892 .sa_handler = SIG_DFL,
893 .sa_flags = SA_RESTART,
896 if (sig == SIGKILL || sig == SIGSTOP)
899 /* On Linux the first two RT signals are reserved by
900 * glibc, and sigaction() will return EINVAL for them. */
901 if ((sigaction(sig, &sa, NULL) < 0))
909 char *strstrip(char *s) {
912 /* Drops trailing whitespace. Modifies the string in
913 * place. Returns pointer to first non-space character */
915 s += strspn(s, WHITESPACE);
917 for (e = strchr(s, 0); e > s; e --)
918 if (!strchr(WHITESPACE, e[-1]))
926 char *delete_chars(char *s, const char *bad) {
929 /* Drops all whitespace, regardless where in the string */
931 for (f = s, t = s; *f; f++) {
943 bool in_charset(const char *s, const char* charset) {
950 if (!strchr(charset, *i))
956 char *file_in_same_dir(const char *path, const char *filename) {
963 /* This removes the last component of path and appends
964 * filename, unless the latter is absolute anyway or the
967 if (path_is_absolute(filename))
968 return strdup(filename);
970 if (!(e = strrchr(path, '/')))
971 return strdup(filename);
973 k = strlen(filename);
974 if (!(r = new(char, e-path+1+k+1)))
977 memcpy(r, path, e-path+1);
978 memcpy(r+(e-path)+1, filename, k+1);
983 int rmdir_parents(const char *path, const char *stop) {
992 /* Skip trailing slashes */
993 while (l > 0 && path[l-1] == '/')
999 /* Skip last component */
1000 while (l > 0 && path[l-1] != '/')
1003 /* Skip trailing slashes */
1004 while (l > 0 && path[l-1] == '/')
1010 if (!(t = strndup(path, l)))
1013 if (path_startswith(stop, t)) {
1022 if (errno != ENOENT)
1029 char hexchar(int x) {
1030 static const char table[16] = "0123456789abcdef";
1032 return table[x & 15];
1035 int unhexchar(char c) {
1037 if (c >= '0' && c <= '9')
1040 if (c >= 'a' && c <= 'f')
1041 return c - 'a' + 10;
1043 if (c >= 'A' && c <= 'F')
1044 return c - 'A' + 10;
1049 char *hexmem(const void *p, size_t l) {
1053 z = r = malloc(l * 2 + 1);
1057 for (x = p; x < (const uint8_t*) p + l; x++) {
1058 *(z++) = hexchar(*x >> 4);
1059 *(z++) = hexchar(*x & 15);
1066 void *unhexmem(const char *p, size_t l) {
1072 z = r = malloc((l + 1) / 2 + 1);
1076 for (x = p; x < p + l; x += 2) {
1079 a = unhexchar(x[0]);
1081 b = unhexchar(x[1]);
1085 *(z++) = (uint8_t) a << 4 | (uint8_t) b;
1092 char octchar(int x) {
1093 return '0' + (x & 7);
1096 int unoctchar(char c) {
1098 if (c >= '0' && c <= '7')
1104 char decchar(int x) {
1105 return '0' + (x % 10);
1108 int undecchar(char c) {
1110 if (c >= '0' && c <= '9')
1116 char *cescape(const char *s) {
1122 /* Does C style string escaping. */
1124 r = new(char, strlen(s)*4 + 1);
1128 for (f = s, t = r; *f; f++)
1174 /* For special chars we prefer octal over
1175 * hexadecimal encoding, simply because glib's
1176 * g_strescape() does the same */
1177 if ((*f < ' ') || (*f >= 127)) {
1179 *(t++) = octchar((unsigned char) *f >> 6);
1180 *(t++) = octchar((unsigned char) *f >> 3);
1181 *(t++) = octchar((unsigned char) *f);
1192 char *cunescape_length_with_prefix(const char *s, size_t length, const char *prefix) {
1199 /* Undoes C style string escaping, and optionally prefixes it. */
1201 pl = prefix ? strlen(prefix) : 0;
1203 r = new(char, pl+length+1);
1208 memcpy(r, prefix, pl);
1210 for (f = s, t = r + pl; f < s + length; f++) {
1253 /* This is an extension of the XDG syntax files */
1258 /* hexadecimal encoding */
1261 a = unhexchar(f[1]);
1262 b = unhexchar(f[2]);
1264 if (a < 0 || b < 0) {
1265 /* Invalid escape code, let's take it literal then */
1269 *(t++) = (char) ((a << 4) | b);
1284 /* octal encoding */
1287 a = unoctchar(f[0]);
1288 b = unoctchar(f[1]);
1289 c = unoctchar(f[2]);
1291 if (a < 0 || b < 0 || c < 0) {
1292 /* Invalid escape code, let's take it literal then */
1296 *(t++) = (char) ((a << 6) | (b << 3) | c);
1304 /* premature end of string.*/
1309 /* Invalid escape code, let's take it literal then */
1321 char *cunescape_length(const char *s, size_t length) {
1322 return cunescape_length_with_prefix(s, length, NULL);
1325 char *cunescape(const char *s) {
1328 return cunescape_length(s, strlen(s));
1331 char *xescape(const char *s, const char *bad) {
1335 /* Escapes all chars in bad, in addition to \ and all special
1336 * chars, in \xFF style escaping. May be reversed with
1339 r = new(char, strlen(s) * 4 + 1);
1343 for (f = s, t = r; *f; f++) {
1345 if ((*f < ' ') || (*f >= 127) ||
1346 (*f == '\\') || strchr(bad, *f)) {
1349 *(t++) = hexchar(*f >> 4);
1350 *(t++) = hexchar(*f);
1360 char *ascii_strlower(char *t) {
1365 for (p = t; *p; p++)
1366 if (*p >= 'A' && *p <= 'Z')
1367 *p = *p - 'A' + 'a';
1372 _pure_ static bool ignore_file_allow_backup(const char *filename) {
1376 filename[0] == '.' ||
1377 streq(filename, "lost+found") ||
1378 streq(filename, "aquota.user") ||
1379 streq(filename, "aquota.group") ||
1380 endswith(filename, ".rpmnew") ||
1381 endswith(filename, ".rpmsave") ||
1382 endswith(filename, ".rpmorig") ||
1383 endswith(filename, ".dpkg-old") ||
1384 endswith(filename, ".dpkg-new") ||
1385 endswith(filename, ".swp");
1388 bool ignore_file(const char *filename) {
1391 if (endswith(filename, "~"))
1394 return ignore_file_allow_backup(filename);
1397 int fd_nonblock(int fd, bool nonblock) {
1402 if ((flags = fcntl(fd, F_GETFL, 0)) < 0)
1406 flags |= O_NONBLOCK;
1408 flags &= ~O_NONBLOCK;
1410 if (fcntl(fd, F_SETFL, flags) < 0)
1416 int fd_cloexec(int fd, bool cloexec) {
1421 if ((flags = fcntl(fd, F_GETFD, 0)) < 0)
1425 flags |= FD_CLOEXEC;
1427 flags &= ~FD_CLOEXEC;
1429 if (fcntl(fd, F_SETFD, flags) < 0)
1435 _pure_ static bool fd_in_set(int fd, const int fdset[], unsigned n_fdset) {
1438 assert(n_fdset == 0 || fdset);
1440 for (i = 0; i < n_fdset; i++)
1447 int close_all_fds(const int except[], unsigned n_except) {
1452 assert(n_except == 0 || except);
1454 d = opendir("/proc/self/fd");
1459 /* When /proc isn't available (for example in chroots)
1460 * the fallback is brute forcing through the fd
1463 assert_se(getrlimit(RLIMIT_NOFILE, &rl) >= 0);
1464 for (fd = 3; fd < (int) rl.rlim_max; fd ++) {
1466 if (fd_in_set(fd, except, n_except))
1469 if (close_nointr(fd) < 0)
1470 if (errno != EBADF && r == 0)
1477 while ((de = readdir(d))) {
1480 if (ignore_file(de->d_name))
1483 if (safe_atoi(de->d_name, &fd) < 0)
1484 /* Let's better ignore this, just in case */
1493 if (fd_in_set(fd, except, n_except))
1496 if (close_nointr(fd) < 0) {
1497 /* Valgrind has its own FD and doesn't want to have it closed */
1498 if (errno != EBADF && r == 0)
1507 bool chars_intersect(const char *a, const char *b) {
1510 /* Returns true if any of the chars in a are in b. */
1511 for (p = a; *p; p++)
1518 bool fstype_is_network(const char *fstype) {
1519 static const char table[] =
1529 return nulstr_contains(table, fstype);
1533 _cleanup_close_ int fd;
1535 fd = open_terminal("/dev/tty0", O_RDWR|O_NOCTTY|O_CLOEXEC);
1541 TIOCL_GETKMSGREDIRECT,
1545 if (ioctl(fd, TIOCLINUX, tiocl) < 0)
1548 vt = tiocl[0] <= 0 ? 1 : tiocl[0];
1551 if (ioctl(fd, VT_ACTIVATE, vt) < 0)
1557 int read_one_char(FILE *f, char *ret, usec_t t, bool *need_nl) {
1558 struct termios old_termios, new_termios;
1560 char line[LINE_MAX];
1565 if (tcgetattr(fileno(f), &old_termios) >= 0) {
1566 new_termios = old_termios;
1568 new_termios.c_lflag &= ~ICANON;
1569 new_termios.c_cc[VMIN] = 1;
1570 new_termios.c_cc[VTIME] = 0;
1572 if (tcsetattr(fileno(f), TCSADRAIN, &new_termios) >= 0) {
1575 if (t != (usec_t) -1) {
1576 if (fd_wait_for_event(fileno(f), POLLIN, t) <= 0) {
1577 tcsetattr(fileno(f), TCSADRAIN, &old_termios);
1582 k = fread(&c, 1, 1, f);
1584 tcsetattr(fileno(f), TCSADRAIN, &old_termios);
1590 *need_nl = c != '\n';
1597 if (t != (usec_t) -1)
1598 if (fd_wait_for_event(fileno(f), POLLIN, t) <= 0)
1601 if (!fgets(line, sizeof(line), f))
1606 if (strlen(line) != 1)
1616 int ask(char *ret, const char *replies, const char *text, ...) {
1626 bool need_nl = true;
1629 fputs(ANSI_HIGHLIGHT_ON, stdout);
1636 fputs(ANSI_HIGHLIGHT_OFF, stdout);
1640 r = read_one_char(stdin, &c, (usec_t) -1, &need_nl);
1643 if (r == -EBADMSG) {
1644 puts("Bad input, please try again.");
1655 if (strchr(replies, c)) {
1660 puts("Read unexpected character, please try again.");
1664 int reset_terminal_fd(int fd, bool switch_to_text) {
1665 struct termios termios;
1668 /* Set terminal to some sane defaults */
1672 /* We leave locked terminal attributes untouched, so that
1673 * Plymouth may set whatever it wants to set, and we don't
1674 * interfere with that. */
1676 /* Disable exclusive mode, just in case */
1677 ioctl(fd, TIOCNXCL);
1679 /* Switch to text mode */
1681 ioctl(fd, KDSETMODE, KD_TEXT);
1683 /* Enable console unicode mode */
1684 ioctl(fd, KDSKBMODE, K_UNICODE);
1686 if (tcgetattr(fd, &termios) < 0) {
1691 /* We only reset the stuff that matters to the software. How
1692 * hardware is set up we don't touch assuming that somebody
1693 * else will do that for us */
1695 termios.c_iflag &= ~(IGNBRK | BRKINT | ISTRIP | INLCR | IGNCR | IUCLC);
1696 termios.c_iflag |= ICRNL | IMAXBEL | IUTF8;
1697 termios.c_oflag |= ONLCR;
1698 termios.c_cflag |= CREAD;
1699 termios.c_lflag = ISIG | ICANON | IEXTEN | ECHO | ECHOE | ECHOK | ECHOCTL | ECHOPRT | ECHOKE;
1701 termios.c_cc[VINTR] = 03; /* ^C */
1702 termios.c_cc[VQUIT] = 034; /* ^\ */
1703 termios.c_cc[VERASE] = 0177;
1704 termios.c_cc[VKILL] = 025; /* ^X */
1705 termios.c_cc[VEOF] = 04; /* ^D */
1706 termios.c_cc[VSTART] = 021; /* ^Q */
1707 termios.c_cc[VSTOP] = 023; /* ^S */
1708 termios.c_cc[VSUSP] = 032; /* ^Z */
1709 termios.c_cc[VLNEXT] = 026; /* ^V */
1710 termios.c_cc[VWERASE] = 027; /* ^W */
1711 termios.c_cc[VREPRINT] = 022; /* ^R */
1712 termios.c_cc[VEOL] = 0;
1713 termios.c_cc[VEOL2] = 0;
1715 termios.c_cc[VTIME] = 0;
1716 termios.c_cc[VMIN] = 1;
1718 if (tcsetattr(fd, TCSANOW, &termios) < 0)
1722 /* Just in case, flush all crap out */
1723 tcflush(fd, TCIOFLUSH);
1728 int reset_terminal(const char *name) {
1731 fd = open_terminal(name, O_RDWR|O_NOCTTY|O_CLOEXEC);
1735 r = reset_terminal_fd(fd, true);
1736 close_nointr_nofail(fd);
1741 int open_terminal(const char *name, int mode) {
1746 * If a TTY is in the process of being closed opening it might
1747 * cause EIO. This is horribly awful, but unlikely to be
1748 * changed in the kernel. Hence we work around this problem by
1749 * retrying a couple of times.
1751 * https://bugs.launchpad.net/ubuntu/+source/linux/+bug/554172/comments/245
1754 assert(!(mode & O_CREAT));
1757 fd = open(name, mode, 0);
1764 /* Max 1s in total */
1768 usleep(50 * USEC_PER_MSEC);
1777 close_nointr_nofail(fd);
1782 close_nointr_nofail(fd);
1789 int flush_fd(int fd) {
1790 struct pollfd pollfd = {
1800 r = poll(&pollfd, 1, 0);
1810 l = read(fd, buf, sizeof(buf));
1816 if (errno == EAGAIN)
1825 int acquire_terminal(
1829 bool ignore_tiocstty_eperm,
1832 int fd = -1, notify = -1, r = 0, wd = -1;
1837 /* We use inotify to be notified when the tty is closed. We
1838 * create the watch before checking if we can actually acquire
1839 * it, so that we don't lose any event.
1841 * Note: strictly speaking this actually watches for the
1842 * device being closed, it does *not* really watch whether a
1843 * tty loses its controlling process. However, unless some
1844 * rogue process uses TIOCNOTTY on /dev/tty *after* closing
1845 * its tty otherwise this will not become a problem. As long
1846 * as the administrator makes sure not configure any service
1847 * on the same tty as an untrusted user this should not be a
1848 * problem. (Which he probably should not do anyway.) */
1850 if (timeout != (usec_t) -1)
1851 ts = now(CLOCK_MONOTONIC);
1853 if (!fail && !force) {
1854 notify = inotify_init1(IN_CLOEXEC | (timeout != (usec_t) -1 ? IN_NONBLOCK : 0));
1860 wd = inotify_add_watch(notify, name, IN_CLOSE);
1868 struct sigaction sa_old, sa_new = {
1869 .sa_handler = SIG_IGN,
1870 .sa_flags = SA_RESTART,
1874 r = flush_fd(notify);
1879 /* We pass here O_NOCTTY only so that we can check the return
1880 * value TIOCSCTTY and have a reliable way to figure out if we
1881 * successfully became the controlling process of the tty */
1882 fd = open_terminal(name, O_RDWR|O_NOCTTY|O_CLOEXEC);
1886 /* Temporarily ignore SIGHUP, so that we don't get SIGHUP'ed
1887 * if we already own the tty. */
1888 assert_se(sigaction(SIGHUP, &sa_new, &sa_old) == 0);
1890 /* First, try to get the tty */
1891 if (ioctl(fd, TIOCSCTTY, force) < 0)
1894 assert_se(sigaction(SIGHUP, &sa_old, NULL) == 0);
1896 /* Sometimes it makes sense to ignore TIOCSCTTY
1897 * returning EPERM, i.e. when very likely we already
1898 * are have this controlling terminal. */
1899 if (r < 0 && r == -EPERM && ignore_tiocstty_eperm)
1902 if (r < 0 && (force || fail || r != -EPERM)) {
1911 assert(notify >= 0);
1914 uint8_t inotify_buffer[sizeof(struct inotify_event) + FILENAME_MAX];
1916 struct inotify_event *e;
1918 if (timeout != (usec_t) -1) {
1921 n = now(CLOCK_MONOTONIC);
1922 if (ts + timeout < n) {
1927 r = fd_wait_for_event(fd, POLLIN, ts + timeout - n);
1937 l = read(notify, inotify_buffer, sizeof(inotify_buffer));
1940 if (errno == EINTR || errno == EAGAIN)
1947 e = (struct inotify_event*) inotify_buffer;
1952 if (e->wd != wd || !(e->mask & IN_CLOSE)) {
1957 step = sizeof(struct inotify_event) + e->len;
1958 assert(step <= (size_t) l);
1960 e = (struct inotify_event*) ((uint8_t*) e + step);
1967 /* We close the tty fd here since if the old session
1968 * ended our handle will be dead. It's important that
1969 * we do this after sleeping, so that we don't enter
1970 * an endless loop. */
1971 close_nointr_nofail(fd);
1975 close_nointr_nofail(notify);
1977 r = reset_terminal_fd(fd, true);
1979 log_warning("Failed to reset terminal: %s", strerror(-r));
1985 close_nointr_nofail(fd);
1988 close_nointr_nofail(notify);
1993 int release_terminal(void) {
1995 struct sigaction sa_old, sa_new = {
1996 .sa_handler = SIG_IGN,
1997 .sa_flags = SA_RESTART,
1999 _cleanup_close_ int fd;
2001 fd = open("/dev/tty", O_RDWR|O_NOCTTY|O_NDELAY|O_CLOEXEC);
2005 /* Temporarily ignore SIGHUP, so that we don't get SIGHUP'ed
2006 * by our own TIOCNOTTY */
2007 assert_se(sigaction(SIGHUP, &sa_new, &sa_old) == 0);
2009 if (ioctl(fd, TIOCNOTTY) < 0)
2012 assert_se(sigaction(SIGHUP, &sa_old, NULL) == 0);
2017 int sigaction_many(const struct sigaction *sa, ...) {
2022 while ((sig = va_arg(ap, int)) > 0)
2023 if (sigaction(sig, sa, NULL) < 0)
2030 int ignore_signals(int sig, ...) {
2031 struct sigaction sa = {
2032 .sa_handler = SIG_IGN,
2033 .sa_flags = SA_RESTART,
2039 if (sigaction(sig, &sa, NULL) < 0)
2043 while ((sig = va_arg(ap, int)) > 0)
2044 if (sigaction(sig, &sa, NULL) < 0)
2051 int default_signals(int sig, ...) {
2052 struct sigaction sa = {
2053 .sa_handler = SIG_DFL,
2054 .sa_flags = SA_RESTART,
2059 if (sigaction(sig, &sa, NULL) < 0)
2063 while ((sig = va_arg(ap, int)) > 0)
2064 if (sigaction(sig, &sa, NULL) < 0)
2071 int close_pipe(int p[]) {
2077 a = close_nointr(p[0]);
2082 b = close_nointr(p[1]);
2086 return a < 0 ? a : b;
2089 ssize_t loop_read(int fd, void *buf, size_t nbytes, bool do_poll) {
2098 while (nbytes > 0) {
2101 if ((k = read(fd, p, nbytes)) <= 0) {
2103 if (k < 0 && errno == EINTR)
2106 if (k < 0 && errno == EAGAIN && do_poll) {
2107 struct pollfd pollfd = {
2112 if (poll(&pollfd, 1, -1) < 0) {
2116 return n > 0 ? n : -errno;
2119 /* We knowingly ignore the revents value here,
2120 * and expect that any error/EOF is reported
2121 * via read()/write()
2127 return n > 0 ? n : (k < 0 ? -errno : 0);
2138 ssize_t loop_write(int fd, const void *buf, size_t nbytes, bool do_poll) {
2147 while (nbytes > 0) {
2150 k = write(fd, p, nbytes);
2153 if (k < 0 && errno == EINTR)
2156 if (k < 0 && errno == EAGAIN && do_poll) {
2157 struct pollfd pollfd = {
2162 if (poll(&pollfd, 1, -1) < 0) {
2166 return n > 0 ? n : -errno;
2169 /* We knowingly ignore the revents value here,
2170 * and expect that any error/EOF is reported
2171 * via read()/write()
2177 return n > 0 ? n : (k < 0 ? -errno : 0);
2188 int parse_bytes(const char *t, off_t *bytes) {
2189 static const struct {
2191 unsigned long long factor;
2195 { "M", 1024ULL*1024ULL },
2196 { "G", 1024ULL*1024ULL*1024ULL },
2197 { "T", 1024ULL*1024ULL*1024ULL*1024ULL },
2198 { "P", 1024ULL*1024ULL*1024ULL*1024ULL*1024ULL },
2199 { "E", 1024ULL*1024ULL*1024ULL*1024ULL*1024ULL*1024ULL },
2204 unsigned long long r = 0;
2216 l = strtoll(p, &e, 10);
2227 e += strspn(e, WHITESPACE);
2229 for (i = 0; i < ELEMENTSOF(table); i++)
2230 if (startswith(e, table[i].suffix)) {
2231 unsigned long long tmp;
2232 if ((unsigned long long) l > ULLONG_MAX / table[i].factor)
2234 tmp = l * table[i].factor;
2235 if (tmp > ULLONG_MAX - r)
2239 if ((unsigned long long) (off_t) r != r)
2242 p = e + strlen(table[i].suffix);
2246 if (i >= ELEMENTSOF(table))
2256 int make_stdio(int fd) {
2261 r = dup3(fd, STDIN_FILENO, 0);
2262 s = dup3(fd, STDOUT_FILENO, 0);
2263 t = dup3(fd, STDERR_FILENO, 0);
2266 close_nointr_nofail(fd);
2268 if (r < 0 || s < 0 || t < 0)
2271 /* We rely here that the new fd has O_CLOEXEC not set */
2276 int make_null_stdio(void) {
2279 null_fd = open("/dev/null", O_RDWR|O_NOCTTY);
2283 return make_stdio(null_fd);
2286 bool is_device_path(const char *path) {
2288 /* Returns true on paths that refer to a device, either in
2289 * sysfs or in /dev */
2292 path_startswith(path, "/dev/") ||
2293 path_startswith(path, "/sys/");
2296 int dir_is_empty(const char *path) {
2297 _cleanup_closedir_ DIR *d;
2308 if (!de && errno != 0)
2314 if (!ignore_file(de->d_name))
2319 char* dirname_malloc(const char *path) {
2320 char *d, *dir, *dir2;
2337 void random_bytes(void *p, size_t n) {
2338 static bool srand_called = false;
2339 _cleanup_close_ int fd;
2343 fd = open("/dev/urandom", O_RDONLY|O_CLOEXEC|O_NOCTTY);
2347 k = loop_read(fd, p, n, true);
2348 if (k < 0 || (size_t) k != n)
2355 if (!srand_called) {
2357 #ifdef HAVE_SYS_AUXV_H
2358 /* The kernel provides us with a bit of entropy in
2359 * auxv, so let's try to make use of that to seed the
2360 * pseudo-random generator. It's better than
2365 auxv = (void*) getauxval(AT_RANDOM);
2367 srand(*(unsigned*) auxv);
2370 srand(time(NULL) + gettid());
2372 srand_called = true;
2375 /* If some idiot made /dev/urandom unavailable to us, he'll
2376 * get a PRNG instead. */
2377 for (q = p; q < (uint8_t*) p + n; q ++)
2381 void rename_process(const char name[8]) {
2384 /* This is a like a poor man's setproctitle(). It changes the
2385 * comm field, argv[0], and also the glibc's internally used
2386 * name of the process. For the first one a limit of 16 chars
2387 * applies, to the second one usually one of 10 (i.e. length
2388 * of "/sbin/init"), to the third one one of 7 (i.e. length of
2389 * "systemd"). If you pass a longer string it will be
2392 prctl(PR_SET_NAME, name);
2394 if (program_invocation_name)
2395 strncpy(program_invocation_name, name, strlen(program_invocation_name));
2397 if (saved_argc > 0) {
2401 strncpy(saved_argv[0], name, strlen(saved_argv[0]));
2403 for (i = 1; i < saved_argc; i++) {
2407 memset(saved_argv[i], 0, strlen(saved_argv[i]));
2412 void sigset_add_many(sigset_t *ss, ...) {
2419 while ((sig = va_arg(ap, int)) > 0)
2420 assert_se(sigaddset(ss, sig) == 0);
2424 char* gethostname_malloc(void) {
2427 assert_se(uname(&u) >= 0);
2429 if (!isempty(u.nodename) && !streq(u.nodename, "(none)"))
2430 return strdup(u.nodename);
2432 return strdup(u.sysname);
2435 bool hostname_is_set(void) {
2438 assert_se(uname(&u) >= 0);
2440 return !isempty(u.nodename) && !streq(u.nodename, "(none)");
2443 static char *lookup_uid(uid_t uid) {
2446 _cleanup_free_ char *buf = NULL;
2447 struct passwd pwbuf, *pw = NULL;
2449 /* Shortcut things to avoid NSS lookups */
2451 return strdup("root");
2453 bufsize = sysconf(_SC_GETPW_R_SIZE_MAX);
2457 buf = malloc(bufsize);
2461 if (getpwuid_r(uid, &pwbuf, buf, bufsize, &pw) == 0 && pw)
2462 return strdup(pw->pw_name);
2464 if (asprintf(&name, "%lu", (unsigned long) uid) < 0)
2470 char* getlogname_malloc(void) {
2474 if (isatty(STDIN_FILENO) && fstat(STDIN_FILENO, &st) >= 0)
2479 return lookup_uid(uid);
2482 char *getusername_malloc(void) {
2489 return lookup_uid(getuid());
2492 int getttyname_malloc(int fd, char **r) {
2493 char path[PATH_MAX], *c;
2498 k = ttyname_r(fd, path, sizeof(path));
2504 c = strdup(startswith(path, "/dev/") ? path + 5 : path);
2512 int getttyname_harder(int fd, char **r) {
2516 k = getttyname_malloc(fd, &s);
2520 if (streq(s, "tty")) {
2522 return get_ctty(0, NULL, r);
2529 int get_ctty_devnr(pid_t pid, dev_t *d) {
2530 _cleanup_fclose_ FILE *f = NULL;
2531 char line[LINE_MAX], *p;
2532 unsigned long ttynr;
2537 fn = procfs_file_alloca(pid, "stat");
2539 f = fopen(fn, "re");
2543 if (!fgets(line, sizeof(line), f))
2544 return feof(f) ? -EIO : -errno;
2546 p = strrchr(line, ')');
2556 "%*d " /* session */
2561 if (major(ttynr) == 0 && minor(ttynr) == 0)
2570 int get_ctty(pid_t pid, dev_t *_devnr, char **r) {
2572 char fn[sizeof("/dev/char/")-1 + 2*DECIMAL_STR_MAX(unsigned) + 1 + 1], *s, *b, *p;
2577 k = get_ctty_devnr(pid, &devnr);
2581 snprintf(fn, sizeof(fn), "/dev/char/%u:%u", major(devnr), minor(devnr));
2583 k = readlink_malloc(fn, &s);
2589 /* This is an ugly hack */
2590 if (major(devnr) == 136) {
2591 if (asprintf(&b, "pts/%lu", (unsigned long) minor(devnr)) < 0)
2601 /* Probably something like the ptys which have no
2602 * symlink in /dev/char. Let's return something
2603 * vaguely useful. */
2616 if (startswith(s, "/dev/"))
2618 else if (startswith(s, "../"))
2636 int rm_rf_children_dangerous(int fd, bool only_dirs, bool honour_sticky, struct stat *root_dev) {
2642 /* This returns the first error we run into, but nevertheless
2643 * tries to go on. This closes the passed fd. */
2647 close_nointr_nofail(fd);
2649 return errno == ENOENT ? 0 : -errno;
2654 bool is_dir, keep_around;
2660 if (!de && errno != 0) {
2669 if (streq(de->d_name, ".") || streq(de->d_name, ".."))
2672 if (de->d_type == DT_UNKNOWN ||
2674 (de->d_type == DT_DIR && root_dev)) {
2675 if (fstatat(fd, de->d_name, &st, AT_SYMLINK_NOFOLLOW) < 0) {
2676 if (ret == 0 && errno != ENOENT)
2681 is_dir = S_ISDIR(st.st_mode);
2684 (st.st_uid == 0 || st.st_uid == getuid()) &&
2685 (st.st_mode & S_ISVTX);
2687 is_dir = de->d_type == DT_DIR;
2688 keep_around = false;
2694 /* if root_dev is set, remove subdirectories only, if device is same as dir */
2695 if (root_dev && st.st_dev != root_dev->st_dev)
2698 subdir_fd = openat(fd, de->d_name,
2699 O_RDONLY|O_NONBLOCK|O_DIRECTORY|O_CLOEXEC|O_NOFOLLOW|O_NOATIME);
2700 if (subdir_fd < 0) {
2701 if (ret == 0 && errno != ENOENT)
2706 r = rm_rf_children_dangerous(subdir_fd, only_dirs, honour_sticky, root_dev);
2707 if (r < 0 && ret == 0)
2711 if (unlinkat(fd, de->d_name, AT_REMOVEDIR) < 0) {
2712 if (ret == 0 && errno != ENOENT)
2716 } else if (!only_dirs && !keep_around) {
2718 if (unlinkat(fd, de->d_name, 0) < 0) {
2719 if (ret == 0 && errno != ENOENT)
2730 _pure_ static int is_temporary_fs(struct statfs *s) {
2733 return F_TYPE_EQUAL(s->f_type, TMPFS_MAGIC) ||
2734 F_TYPE_EQUAL(s->f_type, RAMFS_MAGIC);
2737 int rm_rf_children(int fd, bool only_dirs, bool honour_sticky, struct stat *root_dev) {
2742 if (fstatfs(fd, &s) < 0) {
2743 close_nointr_nofail(fd);
2747 /* We refuse to clean disk file systems with this call. This
2748 * is extra paranoia just to be sure we never ever remove
2750 if (!is_temporary_fs(&s)) {
2751 log_error("Attempted to remove disk file system, and we can't allow that.");
2752 close_nointr_nofail(fd);
2756 return rm_rf_children_dangerous(fd, only_dirs, honour_sticky, root_dev);
2759 static int rm_rf_internal(const char *path, bool only_dirs, bool delete_root, bool honour_sticky, bool dangerous) {
2765 /* We refuse to clean the root file system with this
2766 * call. This is extra paranoia to never cause a really
2767 * seriously broken system. */
2768 if (path_equal(path, "/")) {
2769 log_error("Attempted to remove entire root file system, and we can't allow that.");
2773 fd = open(path, O_RDONLY|O_NONBLOCK|O_DIRECTORY|O_CLOEXEC|O_NOFOLLOW|O_NOATIME);
2776 if (errno != ENOTDIR)
2780 if (statfs(path, &s) < 0)
2783 if (!is_temporary_fs(&s)) {
2784 log_error("Attempted to remove disk file system, and we can't allow that.");
2789 if (delete_root && !only_dirs)
2790 if (unlink(path) < 0 && errno != ENOENT)
2797 if (fstatfs(fd, &s) < 0) {
2798 close_nointr_nofail(fd);
2802 if (!is_temporary_fs(&s)) {
2803 log_error("Attempted to remove disk file system, and we can't allow that.");
2804 close_nointr_nofail(fd);
2809 r = rm_rf_children_dangerous(fd, only_dirs, honour_sticky, NULL);
2812 if (honour_sticky && file_is_priv_sticky(path) > 0)
2815 if (rmdir(path) < 0 && errno != ENOENT) {
2824 int rm_rf(const char *path, bool only_dirs, bool delete_root, bool honour_sticky) {
2825 return rm_rf_internal(path, only_dirs, delete_root, honour_sticky, false);
2828 int rm_rf_dangerous(const char *path, bool only_dirs, bool delete_root, bool honour_sticky) {
2829 return rm_rf_internal(path, only_dirs, delete_root, honour_sticky, true);
2832 int chmod_and_chown(const char *path, mode_t mode, uid_t uid, gid_t gid) {
2835 /* Under the assumption that we are running privileged we
2836 * first change the access mode and only then hand out
2837 * ownership to avoid a window where access is too open. */
2839 if (mode != (mode_t) -1)
2840 if (chmod(path, mode) < 0)
2843 if (uid != (uid_t) -1 || gid != (gid_t) -1)
2844 if (chown(path, uid, gid) < 0)
2850 int fchmod_and_fchown(int fd, mode_t mode, uid_t uid, gid_t gid) {
2853 /* Under the assumption that we are running privileged we
2854 * first change the access mode and only then hand out
2855 * ownership to avoid a window where access is too open. */
2857 if (mode != (mode_t) -1)
2858 if (fchmod(fd, mode) < 0)
2861 if (uid != (uid_t) -1 || gid != (gid_t) -1)
2862 if (fchown(fd, uid, gid) < 0)
2868 cpu_set_t* cpu_set_malloc(unsigned *ncpus) {
2872 /* Allocates the cpuset in the right size */
2875 if (!(r = CPU_ALLOC(n)))
2878 if (sched_getaffinity(0, CPU_ALLOC_SIZE(n), r) >= 0) {
2879 CPU_ZERO_S(CPU_ALLOC_SIZE(n), r);
2889 if (errno != EINVAL)
2896 int status_vprintf(const char *status, bool ellipse, bool ephemeral, const char *format, va_list ap) {
2897 static const char status_indent[] = " "; /* "[" STATUS "] " */
2898 _cleanup_free_ char *s = NULL;
2899 _cleanup_close_ int fd = -1;
2900 struct iovec iovec[6] = {};
2902 static bool prev_ephemeral;
2906 /* This is independent of logging, as status messages are
2907 * optional and go exclusively to the console. */
2909 if (vasprintf(&s, format, ap) < 0)
2912 fd = open_terminal("/dev/console", O_WRONLY|O_NOCTTY|O_CLOEXEC);
2925 sl = status ? sizeof(status_indent)-1 : 0;
2931 e = ellipsize(s, emax, 75);
2939 IOVEC_SET_STRING(iovec[n++], "\r" ANSI_ERASE_TO_END_OF_LINE);
2940 prev_ephemeral = ephemeral;
2943 if (!isempty(status)) {
2944 IOVEC_SET_STRING(iovec[n++], "[");
2945 IOVEC_SET_STRING(iovec[n++], status);
2946 IOVEC_SET_STRING(iovec[n++], "] ");
2948 IOVEC_SET_STRING(iovec[n++], status_indent);
2951 IOVEC_SET_STRING(iovec[n++], s);
2953 IOVEC_SET_STRING(iovec[n++], "\n");
2955 if (writev(fd, iovec, n) < 0)
2961 int status_printf(const char *status, bool ellipse, bool ephemeral, const char *format, ...) {
2967 va_start(ap, format);
2968 r = status_vprintf(status, ellipse, ephemeral, format, ap);
2974 int status_welcome(void) {
2975 _cleanup_free_ char *pretty_name = NULL, *ansi_color = NULL;
2978 r = parse_env_file("/etc/os-release", NEWLINE,
2979 "PRETTY_NAME", &pretty_name,
2980 "ANSI_COLOR", &ansi_color,
2983 if (r < 0 && r != -ENOENT)
2984 log_warning("Failed to read /etc/os-release: %s", strerror(-r));
2986 return status_printf(NULL, false, false,
2987 "\nWelcome to \x1B[%sm%s\x1B[0m!\n",
2988 isempty(ansi_color) ? "1" : ansi_color,
2989 isempty(pretty_name) ? "Linux" : pretty_name);
2992 char *replace_env(const char *format, char **env) {
2999 const char *e, *word = format;
3004 for (e = format; *e; e ++) {
3015 if (!(k = strnappend(r, word, e-word-1)))
3024 } else if (*e == '$') {
3025 if (!(k = strnappend(r, word, e-word)))
3041 t = strempty(strv_env_get_n(env, word+2, e-word-2));
3043 k = strappend(r, t);
3057 if (!(k = strnappend(r, word, e-word)))
3068 char **replace_env_argv(char **argv, char **env) {
3070 unsigned k = 0, l = 0;
3072 l = strv_length(argv);
3074 if (!(r = new(char*, l+1)))
3077 STRV_FOREACH(i, argv) {
3079 /* If $FOO appears as single word, replace it by the split up variable */
3080 if ((*i)[0] == '$' && (*i)[1] != '{') {
3085 e = strv_env_get(env, *i+1);
3088 if (!(m = strv_split_quoted(e))) {
3099 if (!(w = realloc(r, sizeof(char*) * (l+1)))) {
3108 memcpy(r + k, m, q * sizeof(char*));
3116 /* If ${FOO} appears as part of a word, replace it by the variable as-is */
3117 if (!(r[k++] = replace_env(*i, env))) {
3127 int fd_columns(int fd) {
3128 struct winsize ws = {};
3130 if (ioctl(fd, TIOCGWINSZ, &ws) < 0)
3139 unsigned columns(void) {
3143 if (_likely_(cached_columns > 0))
3144 return cached_columns;
3147 e = getenv("COLUMNS");
3152 c = fd_columns(STDOUT_FILENO);
3161 int fd_lines(int fd) {
3162 struct winsize ws = {};
3164 if (ioctl(fd, TIOCGWINSZ, &ws) < 0)
3173 unsigned lines(void) {
3177 if (_likely_(cached_lines > 0))
3178 return cached_lines;
3181 e = getenv("LINES");
3186 l = fd_lines(STDOUT_FILENO);
3192 return cached_lines;
3195 /* intended to be used as a SIGWINCH sighandler */
3196 void columns_lines_cache_reset(int signum) {
3202 static int cached_on_tty = -1;
3204 if (_unlikely_(cached_on_tty < 0))
3205 cached_on_tty = isatty(STDOUT_FILENO) > 0;
3207 return cached_on_tty;
3210 int running_in_chroot(void) {
3211 struct stat a = {}, b = {};
3213 /* Only works as root */
3214 if (stat("/proc/1/root", &a) < 0)
3217 if (stat("/", &b) < 0)
3221 a.st_dev != b.st_dev ||
3222 a.st_ino != b.st_ino;
3225 static char *ascii_ellipsize_mem(const char *s, size_t old_length, size_t new_length, unsigned percent) {
3230 assert(percent <= 100);
3231 assert(new_length >= 3);
3233 if (old_length <= 3 || old_length <= new_length)
3234 return strndup(s, old_length);
3236 r = new0(char, new_length+1);
3240 x = (new_length * percent) / 100;
3242 if (x > new_length - 3)
3250 s + old_length - (new_length - x - 3),
3251 new_length - x - 3);
3256 char *ellipsize_mem(const char *s, size_t old_length, size_t new_length, unsigned percent) {
3260 unsigned k, len, len2;
3263 assert(percent <= 100);
3264 assert(new_length >= 3);
3266 /* if no multibyte characters use ascii_ellipsize_mem for speed */
3267 if (ascii_is_valid(s))
3268 return ascii_ellipsize_mem(s, old_length, new_length, percent);
3270 if (old_length <= 3 || old_length <= new_length)
3271 return strndup(s, old_length);
3273 x = (new_length * percent) / 100;
3275 if (x > new_length - 3)
3279 for (i = s; k < x && i < s + old_length; i = utf8_next_char(i)) {
3282 c = utf8_encoded_to_unichar(i);
3285 k += unichar_iswide(c) ? 2 : 1;
3288 if (k > x) /* last character was wide and went over quota */
3291 for (j = s + old_length; k < new_length && j > i; ) {
3294 j = utf8_prev_char(j);
3295 c = utf8_encoded_to_unichar(j);
3298 k += unichar_iswide(c) ? 2 : 1;
3302 /* we don't actually need to ellipsize */
3304 return memdup(s, old_length + 1);
3306 /* make space for ellipsis */
3307 j = utf8_next_char(j);
3310 len2 = s + old_length - j;
3311 e = new(char, len + 3 + len2 + 1);
3316 printf("old_length=%zu new_length=%zu x=%zu len=%u len2=%u k=%u\n",
3317 old_length, new_length, x, len, len2, k);
3321 e[len] = 0xe2; /* tri-dot ellipsis: … */
3325 memcpy(e + len + 3, j, len2 + 1);
3330 char *ellipsize(const char *s, size_t length, unsigned percent) {
3331 return ellipsize_mem(s, strlen(s), length, percent);
3334 int touch(const char *path) {
3339 /* This just opens the file for writing, ensuring it
3340 * exists. It doesn't call utimensat() the way /usr/bin/touch
3343 fd = open(path, O_WRONLY|O_CREAT|O_CLOEXEC|O_NOCTTY, 0644);
3347 close_nointr_nofail(fd);
3351 char *unquote(const char *s, const char* quotes) {
3355 /* This is rather stupid, simply removes the heading and
3356 * trailing quotes if there is one. Doesn't care about
3357 * escaping or anything. We should make this smarter one
3364 if (strchr(quotes, s[0]) && s[l-1] == s[0])
3365 return strndup(s+1, l-2);
3370 char *normalize_env_assignment(const char *s) {
3371 _cleanup_free_ char *name = NULL, *value = NULL, *p = NULL;
3374 eq = strchr(s, '=');
3386 memmove(r, t, strlen(t) + 1);
3390 name = strndup(s, eq - s);
3398 value = unquote(strstrip(p), QUOTES);
3402 if (asprintf(&r, "%s=%s", strstrip(name), value) < 0)
3408 int wait_for_terminate(pid_t pid, siginfo_t *status) {
3419 if (waitid(P_PID, pid, status, WEXITED) < 0) {
3431 int wait_for_terminate_and_warn(const char *name, pid_t pid) {
3438 r = wait_for_terminate(pid, &status);
3440 log_warning("Failed to wait for %s: %s", name, strerror(-r));
3444 if (status.si_code == CLD_EXITED) {
3445 if (status.si_status != 0) {
3446 log_warning("%s failed with error code %i.", name, status.si_status);
3447 return status.si_status;
3450 log_debug("%s succeeded.", name);
3453 } else if (status.si_code == CLD_KILLED ||
3454 status.si_code == CLD_DUMPED) {
3456 log_warning("%s terminated by signal %s.", name, signal_to_string(status.si_status));
3460 log_warning("%s failed due to unknown reason.", name);
3464 noreturn void freeze(void) {
3466 /* Make sure nobody waits for us on a socket anymore */
3467 close_all_fds(NULL, 0);
3475 bool null_or_empty(struct stat *st) {
3478 if (S_ISREG(st->st_mode) && st->st_size <= 0)
3481 if (S_ISCHR(st->st_mode) || S_ISBLK(st->st_mode))
3487 int null_or_empty_path(const char *fn) {
3492 if (stat(fn, &st) < 0)
3495 return null_or_empty(&st);
3498 DIR *xopendirat(int fd, const char *name, int flags) {
3502 assert(!(flags & O_CREAT));
3504 nfd = openat(fd, name, O_RDONLY|O_NONBLOCK|O_DIRECTORY|O_CLOEXEC|flags, 0);
3510 close_nointr_nofail(nfd);
3517 int signal_from_string_try_harder(const char *s) {
3521 signo = signal_from_string(s);
3523 if (startswith(s, "SIG"))
3524 return signal_from_string(s+3);
3529 static char *tag_to_udev_node(const char *tagvalue, const char *by) {
3530 _cleanup_free_ char *t = NULL, *u = NULL;
3534 u = unquote(tagvalue, "\"\'");
3538 enc_len = strlen(u) * 4 + 1;
3539 t = new(char, enc_len);
3543 if (encode_devnode_name(u, t, enc_len) < 0)
3546 if (asprintf(&dn, "/dev/disk/by-%s/%s", by, t) < 0)
3552 char *fstab_node_to_udev_node(const char *p) {
3555 if (startswith(p, "LABEL="))
3556 return tag_to_udev_node(p+6, "label");
3558 if (startswith(p, "UUID="))
3559 return tag_to_udev_node(p+5, "uuid");
3561 if (startswith(p, "PARTUUID="))
3562 return tag_to_udev_node(p+9, "partuuid");
3564 if (startswith(p, "PARTLABEL="))
3565 return tag_to_udev_node(p+10, "partlabel");
3570 bool tty_is_vc(const char *tty) {
3573 if (startswith(tty, "/dev/"))
3576 return vtnr_from_tty(tty) >= 0;
3579 bool tty_is_console(const char *tty) {
3582 if (startswith(tty, "/dev/"))
3585 return streq(tty, "console");
3588 int vtnr_from_tty(const char *tty) {
3593 if (startswith(tty, "/dev/"))
3596 if (!startswith(tty, "tty") )
3599 if (tty[3] < '0' || tty[3] > '9')
3602 r = safe_atoi(tty+3, &i);
3606 if (i < 0 || i > 63)
3612 char *resolve_dev_console(char **active) {
3615 /* Resolve where /dev/console is pointing to, if /sys is actually ours
3616 * (i.e. not read-only-mounted which is a sign for container setups) */
3618 if (path_is_read_only_fs("/sys") > 0)
3621 if (read_one_line_file("/sys/class/tty/console/active", active) < 0)
3624 /* If multiple log outputs are configured the last one is what
3625 * /dev/console points to */
3626 tty = strrchr(*active, ' ');
3632 if (streq(tty, "tty0")) {
3635 /* Get the active VC (e.g. tty1) */
3636 if (read_one_line_file("/sys/class/tty/tty0/active", &tmp) >= 0) {
3638 tty = *active = tmp;
3645 bool tty_is_vc_resolve(const char *tty) {
3646 _cleanup_free_ char *active = NULL;
3650 if (startswith(tty, "/dev/"))
3653 if (streq(tty, "console")) {
3654 tty = resolve_dev_console(&active);
3659 return tty_is_vc(tty);
3662 const char *default_term_for_tty(const char *tty) {
3665 return tty_is_vc_resolve(tty) ? "TERM=linux" : "TERM=vt102";
3668 bool dirent_is_file(const struct dirent *de) {
3671 if (ignore_file(de->d_name))
3674 if (de->d_type != DT_REG &&
3675 de->d_type != DT_LNK &&
3676 de->d_type != DT_UNKNOWN)
3682 bool dirent_is_file_with_suffix(const struct dirent *de, const char *suffix) {
3685 if (de->d_type != DT_REG &&
3686 de->d_type != DT_LNK &&
3687 de->d_type != DT_UNKNOWN)
3690 if (ignore_file_allow_backup(de->d_name))
3693 return endswith(de->d_name, suffix);
3696 void execute_directory(const char *directory, DIR *d, char *argv[]) {
3699 Hashmap *pids = NULL;
3703 /* Executes all binaries in a directory in parallel and
3704 * waits for them to finish. */
3707 if (!(_d = opendir(directory))) {
3709 if (errno == ENOENT)
3712 log_error("Failed to enumerate directory %s: %m", directory);
3719 if (!(pids = hashmap_new(trivial_hash_func, trivial_compare_func))) {
3720 log_error("Failed to allocate set.");
3724 while ((de = readdir(d))) {
3729 if (!dirent_is_file(de))
3732 if (asprintf(&path, "%s/%s", directory, de->d_name) < 0) {
3737 if ((pid = fork()) < 0) {
3738 log_error("Failed to fork: %m");
3756 log_error("Failed to execute %s: %m", path);
3757 _exit(EXIT_FAILURE);
3760 log_debug("Spawned %s as %lu", path, (unsigned long) pid);
3762 if ((k = hashmap_put(pids, UINT_TO_PTR(pid), path)) < 0) {
3763 log_error("Failed to add PID to set: %s", strerror(-k));
3768 while (!hashmap_isempty(pids)) {
3769 pid_t pid = PTR_TO_UINT(hashmap_first_key(pids));
3773 if (waitid(P_PID, pid, &si, WEXITED) < 0) {
3778 log_error("waitid() failed: %m");
3782 if ((path = hashmap_remove(pids, UINT_TO_PTR(si.si_pid)))) {
3783 if (!is_clean_exit(si.si_code, si.si_status, NULL)) {
3784 if (si.si_code == CLD_EXITED)
3785 log_error("%s exited with exit status %i.", path, si.si_status);
3787 log_error("%s terminated by signal %s.", path, signal_to_string(si.si_status));
3789 log_debug("%s exited successfully.", path);
3800 hashmap_free_free(pids);
3803 int kill_and_sigcont(pid_t pid, int sig) {
3806 r = kill(pid, sig) < 0 ? -errno : 0;
3814 bool nulstr_contains(const char*nulstr, const char *needle) {
3820 NULSTR_FOREACH(i, nulstr)
3821 if (streq(i, needle))
3827 bool plymouth_running(void) {
3828 return access("/run/plymouth/pid", F_OK) >= 0;
3831 char* strshorten(char *s, size_t l) {
3840 static bool hostname_valid_char(char c) {
3842 (c >= 'a' && c <= 'z') ||
3843 (c >= 'A' && c <= 'Z') ||
3844 (c >= '0' && c <= '9') ||
3850 bool hostname_is_valid(const char *s) {
3857 for (p = s, dot = true; *p; p++) {
3864 if (!hostname_valid_char(*p))
3874 if (p-s > HOST_NAME_MAX)
3880 char* hostname_cleanup(char *s, bool lowercase) {
3884 for (p = s, d = s, dot = true; *p; p++) {
3891 } else if (hostname_valid_char(*p)) {
3892 *(d++) = lowercase ? tolower(*p) : *p;
3903 strshorten(s, HOST_NAME_MAX);
3908 int pipe_eof(int fd) {
3910 struct pollfd pollfd = {
3912 .events = POLLIN|POLLHUP,
3915 r = poll(&pollfd, 1, 0);
3922 return pollfd.revents & POLLHUP;
3925 int fd_wait_for_event(int fd, int event, usec_t t) {
3927 struct pollfd pollfd = {
3932 r = poll(&pollfd, 1, t == (usec_t) -1 ? -1 : (int) (t / USEC_PER_MSEC));
3939 return pollfd.revents;
3942 int fopen_temporary(const char *path, FILE **_f, char **_temp_path) {
3953 t = new(char, strlen(path) + 1 + 6 + 1);
3957 fn = basename(path);
3961 stpcpy(stpcpy(t+k+1, fn), "XXXXXX");
3963 fd = mkostemp(t, O_WRONLY|O_CLOEXEC);
3969 f = fdopen(fd, "we");
3982 int terminal_vhangup_fd(int fd) {
3985 if (ioctl(fd, TIOCVHANGUP) < 0)
3991 int terminal_vhangup(const char *name) {
3994 fd = open_terminal(name, O_RDWR|O_NOCTTY|O_CLOEXEC);
3998 r = terminal_vhangup_fd(fd);
3999 close_nointr_nofail(fd);
4004 int vt_disallocate(const char *name) {
4008 /* Deallocate the VT if possible. If not possible
4009 * (i.e. because it is the active one), at least clear it
4010 * entirely (including the scrollback buffer) */
4012 if (!startswith(name, "/dev/"))
4015 if (!tty_is_vc(name)) {
4016 /* So this is not a VT. I guess we cannot deallocate
4017 * it then. But let's at least clear the screen */
4019 fd = open_terminal(name, O_RDWR|O_NOCTTY|O_CLOEXEC);
4024 "\033[r" /* clear scrolling region */
4025 "\033[H" /* move home */
4026 "\033[2J", /* clear screen */
4028 close_nointr_nofail(fd);
4033 if (!startswith(name, "/dev/tty"))
4036 r = safe_atou(name+8, &u);
4043 /* Try to deallocate */
4044 fd = open_terminal("/dev/tty0", O_RDWR|O_NOCTTY|O_CLOEXEC);
4048 r = ioctl(fd, VT_DISALLOCATE, u);
4049 close_nointr_nofail(fd);
4057 /* Couldn't deallocate, so let's clear it fully with
4059 fd = open_terminal(name, O_RDWR|O_NOCTTY|O_CLOEXEC);
4064 "\033[r" /* clear scrolling region */
4065 "\033[H" /* move home */
4066 "\033[3J", /* clear screen including scrollback, requires Linux 2.6.40 */
4068 close_nointr_nofail(fd);
4073 int copy_file(const char *from, const char *to, int flags) {
4074 _cleanup_close_ int fdf = -1;
4080 fdf = open(from, O_RDONLY|O_CLOEXEC|O_NOCTTY);
4084 fdt = open(to, flags|O_WRONLY|O_CREAT|O_CLOEXEC|O_NOCTTY, 0644);
4092 n = read(fdf, buf, sizeof(buf));
4106 k = loop_write(fdt, buf, n, false);
4108 r = k < 0 ? k : (errno ? -errno : -EIO);
4117 r = close_nointr(fdt);
4127 int symlink_atomic(const char *from, const char *to) {
4129 _cleanup_free_ char *t;
4139 t = new(char, strlen(to) + 1 + 16 + 1);
4147 x = stpcpy(t+k+1, fn);
4150 for (i = 0; i < 16; i++) {
4151 *(x++) = hexchar(u & 0xF);
4157 if (symlink(from, t) < 0)
4160 if (rename(t, to) < 0) {
4169 bool display_is_local(const char *display) {
4173 display[0] == ':' &&
4174 display[1] >= '0' &&
4178 int socket_from_display(const char *display, char **path) {
4185 if (!display_is_local(display))
4188 k = strspn(display+1, "0123456789");
4190 f = new(char, sizeof("/tmp/.X11-unix/X") + k);
4194 c = stpcpy(f, "/tmp/.X11-unix/X");
4195 memcpy(c, display+1, k);
4204 const char **username,
4205 uid_t *uid, gid_t *gid,
4207 const char **shell) {
4215 /* We enforce some special rules for uid=0: in order to avoid
4216 * NSS lookups for root we hardcode its data. */
4218 if (streq(*username, "root") || streq(*username, "0")) {
4236 if (parse_uid(*username, &u) >= 0) {
4240 /* If there are multiple users with the same id, make
4241 * sure to leave $USER to the configured value instead
4242 * of the first occurrence in the database. However if
4243 * the uid was configured by a numeric uid, then let's
4244 * pick the real username from /etc/passwd. */
4246 *username = p->pw_name;
4249 p = getpwnam(*username);
4253 return errno > 0 ? -errno : -ESRCH;
4265 *shell = p->pw_shell;
4270 char* uid_to_name(uid_t uid) {
4275 return strdup("root");
4279 return strdup(p->pw_name);
4281 if (asprintf(&r, "%lu", (unsigned long) uid) < 0)
4287 char* gid_to_name(gid_t gid) {
4292 return strdup("root");
4296 return strdup(p->gr_name);
4298 if (asprintf(&r, "%lu", (unsigned long) gid) < 0)
4304 int get_group_creds(const char **groupname, gid_t *gid) {
4310 /* We enforce some special rules for gid=0: in order to avoid
4311 * NSS lookups for root we hardcode its data. */
4313 if (streq(*groupname, "root") || streq(*groupname, "0")) {
4314 *groupname = "root";
4322 if (parse_gid(*groupname, &id) >= 0) {
4327 *groupname = g->gr_name;
4330 g = getgrnam(*groupname);
4334 return errno > 0 ? -errno : -ESRCH;
4342 int in_gid(gid_t gid) {
4344 int ngroups_max, r, i;
4346 if (getgid() == gid)
4349 if (getegid() == gid)
4352 ngroups_max = sysconf(_SC_NGROUPS_MAX);
4353 assert(ngroups_max > 0);
4355 gids = alloca(sizeof(gid_t) * ngroups_max);
4357 r = getgroups(ngroups_max, gids);
4361 for (i = 0; i < r; i++)
4368 int in_group(const char *name) {
4372 r = get_group_creds(&name, &gid);
4379 int glob_exists(const char *path) {
4380 _cleanup_globfree_ glob_t g = {};
4386 k = glob(path, GLOB_NOSORT|GLOB_BRACE, NULL, &g);
4388 if (k == GLOB_NOMATCH)
4390 else if (k == GLOB_NOSPACE)
4393 return !strv_isempty(g.gl_pathv);
4395 return errno ? -errno : -EIO;
4398 int glob_extend(char ***strv, const char *path) {
4399 _cleanup_globfree_ glob_t g = {};
4404 k = glob(path, GLOB_NOSORT|GLOB_BRACE, NULL, &g);
4406 if (k == GLOB_NOMATCH)
4408 else if (k == GLOB_NOSPACE)
4410 else if (k != 0 || strv_isempty(g.gl_pathv))
4411 return errno ? -errno : -EIO;
4413 STRV_FOREACH(p, g.gl_pathv) {
4414 k = strv_extend(strv, *p);
4422 int dirent_ensure_type(DIR *d, struct dirent *de) {
4428 if (de->d_type != DT_UNKNOWN)
4431 if (fstatat(dirfd(d), de->d_name, &st, AT_SYMLINK_NOFOLLOW) < 0)
4435 S_ISREG(st.st_mode) ? DT_REG :
4436 S_ISDIR(st.st_mode) ? DT_DIR :
4437 S_ISLNK(st.st_mode) ? DT_LNK :
4438 S_ISFIFO(st.st_mode) ? DT_FIFO :
4439 S_ISSOCK(st.st_mode) ? DT_SOCK :
4440 S_ISCHR(st.st_mode) ? DT_CHR :
4441 S_ISBLK(st.st_mode) ? DT_BLK :
4447 int in_search_path(const char *path, char **search) {
4449 _cleanup_free_ char *parent = NULL;
4452 r = path_get_parent(path, &parent);
4456 STRV_FOREACH(i, search)
4457 if (path_equal(parent, *i))
4463 int get_files_in_directory(const char *path, char ***list) {
4464 _cleanup_closedir_ DIR *d = NULL;
4465 size_t bufsize = 0, n = 0;
4466 _cleanup_strv_free_ char **l = NULL;
4470 /* Returns all files in a directory in *list, and the number
4471 * of files as return value. If list is NULL returns only the
4483 if (!de && errno != 0)
4488 dirent_ensure_type(d, de);
4490 if (!dirent_is_file(de))
4494 /* one extra slot is needed for the terminating NULL */
4495 if (!GREEDY_REALLOC(l, bufsize, n + 2))
4498 l[n] = strdup(de->d_name);
4509 l = NULL; /* avoid freeing */
4515 char *strjoin(const char *x, ...) {
4529 t = va_arg(ap, const char *);
4534 if (n > ((size_t) -1) - l) {
4558 t = va_arg(ap, const char *);
4572 bool is_main_thread(void) {
4573 static thread_local int cached = 0;
4575 if (_unlikely_(cached == 0))
4576 cached = getpid() == gettid() ? 1 : -1;
4581 int block_get_whole_disk(dev_t d, dev_t *ret) {
4588 /* If it has a queue this is good enough for us */
4589 if (asprintf(&p, "/sys/dev/block/%u:%u/queue", major(d), minor(d)) < 0)
4592 r = access(p, F_OK);
4600 /* If it is a partition find the originating device */
4601 if (asprintf(&p, "/sys/dev/block/%u:%u/partition", major(d), minor(d)) < 0)
4604 r = access(p, F_OK);
4610 /* Get parent dev_t */
4611 if (asprintf(&p, "/sys/dev/block/%u:%u/../dev", major(d), minor(d)) < 0)
4614 r = read_one_line_file(p, &s);
4620 r = sscanf(s, "%u:%u", &m, &n);
4626 /* Only return this if it is really good enough for us. */
4627 if (asprintf(&p, "/sys/dev/block/%u:%u/queue", m, n) < 0)
4630 r = access(p, F_OK);
4634 *ret = makedev(m, n);
4641 int file_is_priv_sticky(const char *p) {
4646 if (lstat(p, &st) < 0)
4650 (st.st_uid == 0 || st.st_uid == getuid()) &&
4651 (st.st_mode & S_ISVTX);
4654 static const char *const ioprio_class_table[] = {
4655 [IOPRIO_CLASS_NONE] = "none",
4656 [IOPRIO_CLASS_RT] = "realtime",
4657 [IOPRIO_CLASS_BE] = "best-effort",
4658 [IOPRIO_CLASS_IDLE] = "idle"
4661 DEFINE_STRING_TABLE_LOOKUP_WITH_FALLBACK(ioprio_class, int, INT_MAX);
4663 static const char *const sigchld_code_table[] = {
4664 [CLD_EXITED] = "exited",
4665 [CLD_KILLED] = "killed",
4666 [CLD_DUMPED] = "dumped",
4667 [CLD_TRAPPED] = "trapped",
4668 [CLD_STOPPED] = "stopped",
4669 [CLD_CONTINUED] = "continued",
4672 DEFINE_STRING_TABLE_LOOKUP(sigchld_code, int);
4674 static const char *const log_facility_unshifted_table[LOG_NFACILITIES] = {
4675 [LOG_FAC(LOG_KERN)] = "kern",
4676 [LOG_FAC(LOG_USER)] = "user",
4677 [LOG_FAC(LOG_MAIL)] = "mail",
4678 [LOG_FAC(LOG_DAEMON)] = "daemon",
4679 [LOG_FAC(LOG_AUTH)] = "auth",
4680 [LOG_FAC(LOG_SYSLOG)] = "syslog",
4681 [LOG_FAC(LOG_LPR)] = "lpr",
4682 [LOG_FAC(LOG_NEWS)] = "news",
4683 [LOG_FAC(LOG_UUCP)] = "uucp",
4684 [LOG_FAC(LOG_CRON)] = "cron",
4685 [LOG_FAC(LOG_AUTHPRIV)] = "authpriv",
4686 [LOG_FAC(LOG_FTP)] = "ftp",
4687 [LOG_FAC(LOG_LOCAL0)] = "local0",
4688 [LOG_FAC(LOG_LOCAL1)] = "local1",
4689 [LOG_FAC(LOG_LOCAL2)] = "local2",
4690 [LOG_FAC(LOG_LOCAL3)] = "local3",
4691 [LOG_FAC(LOG_LOCAL4)] = "local4",
4692 [LOG_FAC(LOG_LOCAL5)] = "local5",
4693 [LOG_FAC(LOG_LOCAL6)] = "local6",
4694 [LOG_FAC(LOG_LOCAL7)] = "local7"
4697 DEFINE_STRING_TABLE_LOOKUP_WITH_FALLBACK(log_facility_unshifted, int, LOG_FAC(~0));
4699 static const char *const log_level_table[] = {
4700 [LOG_EMERG] = "emerg",
4701 [LOG_ALERT] = "alert",
4702 [LOG_CRIT] = "crit",
4704 [LOG_WARNING] = "warning",
4705 [LOG_NOTICE] = "notice",
4706 [LOG_INFO] = "info",
4707 [LOG_DEBUG] = "debug"
4710 DEFINE_STRING_TABLE_LOOKUP_WITH_FALLBACK(log_level, int, LOG_DEBUG);
4712 static const char* const sched_policy_table[] = {
4713 [SCHED_OTHER] = "other",
4714 [SCHED_BATCH] = "batch",
4715 [SCHED_IDLE] = "idle",
4716 [SCHED_FIFO] = "fifo",
4720 DEFINE_STRING_TABLE_LOOKUP_WITH_FALLBACK(sched_policy, int, INT_MAX);
4722 static const char* const rlimit_table[] = {
4723 [RLIMIT_CPU] = "LimitCPU",
4724 [RLIMIT_FSIZE] = "LimitFSIZE",
4725 [RLIMIT_DATA] = "LimitDATA",
4726 [RLIMIT_STACK] = "LimitSTACK",
4727 [RLIMIT_CORE] = "LimitCORE",
4728 [RLIMIT_RSS] = "LimitRSS",
4729 [RLIMIT_NOFILE] = "LimitNOFILE",
4730 [RLIMIT_AS] = "LimitAS",
4731 [RLIMIT_NPROC] = "LimitNPROC",
4732 [RLIMIT_MEMLOCK] = "LimitMEMLOCK",
4733 [RLIMIT_LOCKS] = "LimitLOCKS",
4734 [RLIMIT_SIGPENDING] = "LimitSIGPENDING",
4735 [RLIMIT_MSGQUEUE] = "LimitMSGQUEUE",
4736 [RLIMIT_NICE] = "LimitNICE",
4737 [RLIMIT_RTPRIO] = "LimitRTPRIO",
4738 [RLIMIT_RTTIME] = "LimitRTTIME"
4741 DEFINE_STRING_TABLE_LOOKUP(rlimit, int);
4743 static const char* const ip_tos_table[] = {
4744 [IPTOS_LOWDELAY] = "low-delay",
4745 [IPTOS_THROUGHPUT] = "throughput",
4746 [IPTOS_RELIABILITY] = "reliability",
4747 [IPTOS_LOWCOST] = "low-cost",
4750 DEFINE_STRING_TABLE_LOOKUP_WITH_FALLBACK(ip_tos, int, 0xff);
4752 static const char *const __signal_table[] = {
4769 [SIGSTKFLT] = "STKFLT", /* Linux on SPARC doesn't know SIGSTKFLT */
4780 [SIGVTALRM] = "VTALRM",
4782 [SIGWINCH] = "WINCH",
4788 DEFINE_PRIVATE_STRING_TABLE_LOOKUP(__signal, int);
4790 const char *signal_to_string(int signo) {
4791 static thread_local char buf[sizeof("RTMIN+")-1 + DECIMAL_STR_MAX(int) + 1];
4794 name = __signal_to_string(signo);
4798 if (signo >= SIGRTMIN && signo <= SIGRTMAX)
4799 snprintf(buf, sizeof(buf), "RTMIN+%d", signo - SIGRTMIN);
4801 snprintf(buf, sizeof(buf), "%d", signo);
4806 int signal_from_string(const char *s) {
4811 signo = __signal_from_string(s);
4815 if (startswith(s, "RTMIN+")) {
4819 if (safe_atou(s, &u) >= 0) {
4820 signo = (int) u + offset;
4821 if (signo > 0 && signo < _NSIG)
4827 bool kexec_loaded(void) {
4828 bool loaded = false;
4831 if (read_one_line_file("/sys/kernel/kexec_loaded", &s) >= 0) {
4839 int strdup_or_null(const char *a, char **b) {
4857 int prot_from_flags(int flags) {
4859 switch (flags & O_ACCMODE) {
4868 return PROT_READ|PROT_WRITE;
4875 char *format_bytes(char *buf, size_t l, off_t t) {
4878 static const struct {
4882 { "E", 1024ULL*1024ULL*1024ULL*1024ULL*1024ULL*1024ULL },
4883 { "P", 1024ULL*1024ULL*1024ULL*1024ULL*1024ULL },
4884 { "T", 1024ULL*1024ULL*1024ULL*1024ULL },
4885 { "G", 1024ULL*1024ULL*1024ULL },
4886 { "M", 1024ULL*1024ULL },
4890 for (i = 0; i < ELEMENTSOF(table); i++) {
4892 if (t >= table[i].factor) {
4895 (unsigned long long) (t / table[i].factor),
4896 (unsigned long long) (((t*10ULL) / table[i].factor) % 10ULL),
4903 snprintf(buf, l, "%lluB", (unsigned long long) t);
4911 void* memdup(const void *p, size_t l) {
4924 int fd_inc_sndbuf(int fd, size_t n) {
4926 socklen_t l = sizeof(value);
4928 r = getsockopt(fd, SOL_SOCKET, SO_SNDBUF, &value, &l);
4929 if (r >= 0 && l == sizeof(value) && (size_t) value >= n*2)
4932 /* If we have the privileges we will ignore the kernel limit. */
4935 if (setsockopt(fd, SOL_SOCKET, SO_SNDBUFFORCE, &value, sizeof(value)) < 0)
4936 if (setsockopt(fd, SOL_SOCKET, SO_SNDBUF, &value, sizeof(value)) < 0)
4942 int fd_inc_rcvbuf(int fd, size_t n) {
4944 socklen_t l = sizeof(value);
4946 r = getsockopt(fd, SOL_SOCKET, SO_RCVBUF, &value, &l);
4947 if (r >= 0 && l == sizeof(value) && (size_t) value >= n*2)
4950 /* If we have the privileges we will ignore the kernel limit. */
4953 if (setsockopt(fd, SOL_SOCKET, SO_RCVBUFFORCE, &value, sizeof(value)) < 0)
4954 if (setsockopt(fd, SOL_SOCKET, SO_RCVBUF, &value, sizeof(value)) < 0)
4959 int fork_agent(pid_t *pid, const int except[], unsigned n_except, const char *path, ...) {
4960 pid_t parent_pid, agent_pid;
4962 bool stdout_is_tty, stderr_is_tty;
4970 parent_pid = getpid();
4972 /* Spawns a temporary TTY agent, making sure it goes away when
4979 if (agent_pid != 0) {
4986 * Make sure the agent goes away when the parent dies */
4987 if (prctl(PR_SET_PDEATHSIG, SIGTERM) < 0)
4988 _exit(EXIT_FAILURE);
4990 /* Check whether our parent died before we were able
4991 * to set the death signal */
4992 if (getppid() != parent_pid)
4993 _exit(EXIT_SUCCESS);
4995 /* Don't leak fds to the agent */
4996 close_all_fds(except, n_except);
4998 stdout_is_tty = isatty(STDOUT_FILENO);
4999 stderr_is_tty = isatty(STDERR_FILENO);
5001 if (!stdout_is_tty || !stderr_is_tty) {
5002 /* Detach from stdout/stderr. and reopen
5003 * /dev/tty for them. This is important to
5004 * ensure that when systemctl is started via
5005 * popen() or a similar call that expects to
5006 * read EOF we actually do generate EOF and
5007 * not delay this indefinitely by because we
5008 * keep an unused copy of stdin around. */
5009 fd = open("/dev/tty", O_WRONLY);
5011 log_error("Failed to open /dev/tty: %m");
5012 _exit(EXIT_FAILURE);
5016 dup2(fd, STDOUT_FILENO);
5019 dup2(fd, STDERR_FILENO);
5025 /* Count arguments */
5027 for (n = 0; va_arg(ap, char*); n++)
5032 l = alloca(sizeof(char *) * (n + 1));
5034 /* Fill in arguments */
5036 for (i = 0; i <= n; i++)
5037 l[i] = va_arg(ap, char*);
5041 _exit(EXIT_FAILURE);
5044 int setrlimit_closest(int resource, const struct rlimit *rlim) {
5045 struct rlimit highest, fixed;
5049 if (setrlimit(resource, rlim) >= 0)
5055 /* So we failed to set the desired setrlimit, then let's try
5056 * to get as close as we can */
5057 assert_se(getrlimit(resource, &highest) == 0);
5059 fixed.rlim_cur = MIN(rlim->rlim_cur, highest.rlim_max);
5060 fixed.rlim_max = MIN(rlim->rlim_max, highest.rlim_max);
5062 if (setrlimit(resource, &fixed) < 0)
5068 int getenv_for_pid(pid_t pid, const char *field, char **_value) {
5069 _cleanup_fclose_ FILE *f = NULL;
5080 path = procfs_file_alloca(pid, "environ");
5082 f = fopen(path, "re");
5090 char line[LINE_MAX];
5093 for (i = 0; i < sizeof(line)-1; i++) {
5097 if (_unlikely_(c == EOF)) {
5107 if (memcmp(line, field, l) == 0 && line[l] == '=') {
5108 value = strdup(line + l + 1);
5122 bool is_valid_documentation_url(const char *url) {
5125 if (startswith(url, "http://") && url[7])
5128 if (startswith(url, "https://") && url[8])
5131 if (startswith(url, "file:") && url[5])
5134 if (startswith(url, "info:") && url[5])
5137 if (startswith(url, "man:") && url[4])
5143 bool in_initrd(void) {
5144 static int saved = -1;
5150 /* We make two checks here:
5152 * 1. the flag file /etc/initrd-release must exist
5153 * 2. the root file system must be a memory file system
5155 * The second check is extra paranoia, since misdetecting an
5156 * initrd can have bad bad consequences due the initrd
5157 * emptying when transititioning to the main systemd.
5160 saved = access("/etc/initrd-release", F_OK) >= 0 &&
5161 statfs("/", &s) >= 0 &&
5162 is_temporary_fs(&s);
5167 void warn_melody(void) {
5168 _cleanup_close_ int fd = -1;
5170 fd = open("/dev/console", O_WRONLY|O_CLOEXEC|O_NOCTTY);
5174 /* Yeah, this is synchronous. Kinda sucks. But well... */
5176 ioctl(fd, KIOCSOUND, (int)(1193180/440));
5177 usleep(125*USEC_PER_MSEC);
5179 ioctl(fd, KIOCSOUND, (int)(1193180/220));
5180 usleep(125*USEC_PER_MSEC);
5182 ioctl(fd, KIOCSOUND, (int)(1193180/220));
5183 usleep(125*USEC_PER_MSEC);
5185 ioctl(fd, KIOCSOUND, 0);
5188 int make_console_stdio(void) {
5191 /* Make /dev/console the controlling terminal and stdin/stdout/stderr */
5193 fd = acquire_terminal("/dev/console", false, true, true, (usec_t) -1);
5195 log_error("Failed to acquire terminal: %s", strerror(-fd));
5201 log_error("Failed to duplicate terminal fd: %s", strerror(-r));
5208 int get_home_dir(char **_h) {
5216 /* Take the user specified one */
5227 /* Hardcode home directory for root to avoid NSS */
5230 h = strdup("/root");
5238 /* Check the database... */
5242 return errno > 0 ? -errno : -ESRCH;
5244 if (!path_is_absolute(p->pw_dir))
5247 h = strdup(p->pw_dir);
5255 int get_shell(char **_s) {
5263 /* Take the user specified one */
5264 e = getenv("SHELL");
5274 /* Hardcode home directory for root to avoid NSS */
5277 s = strdup("/bin/sh");
5285 /* Check the database... */
5289 return errno > 0 ? -errno : -ESRCH;
5291 if (!path_is_absolute(p->pw_shell))
5294 s = strdup(p->pw_shell);
5302 bool filename_is_safe(const char *p) {
5316 if (strlen(p) > FILENAME_MAX)
5322 bool string_is_safe(const char *p) {
5327 for (t = p; *t; t++) {
5328 if (*t > 0 && *t < ' ')
5331 if (strchr("\\\"\'", *t))
5339 * Check if a string contains control characters.
5340 * Spaces and tabs are not considered control characters.
5342 bool string_has_cc(const char *p) {
5347 for (t = p; *t; t++)
5348 if (*t > 0 && *t < ' ' && *t != '\t')
5354 bool path_is_safe(const char *p) {
5359 if (streq(p, "..") || startswith(p, "../") || endswith(p, "/..") || strstr(p, "/../"))
5362 if (strlen(p) > PATH_MAX)
5365 /* The following two checks are not really dangerous, but hey, they still are confusing */
5366 if (streq(p, ".") || startswith(p, "./") || endswith(p, "/.") || strstr(p, "/./"))
5369 if (strstr(p, "//"))
5375 /* hey glibc, APIs with callbacks without a user pointer are so useless */
5376 void *xbsearch_r(const void *key, const void *base, size_t nmemb, size_t size,
5377 int (*compar) (const void *, const void *, void *), void *arg) {
5386 p = (void *)(((const char *) base) + (idx * size));
5387 comparison = compar(key, p, arg);
5390 else if (comparison > 0)
5398 bool is_locale_utf8(void) {
5400 static int cached_answer = -1;
5402 if (cached_answer >= 0)
5405 if (!setlocale(LC_ALL, "")) {
5406 cached_answer = true;
5410 set = nl_langinfo(CODESET);
5412 cached_answer = true;
5416 if (streq(set, "UTF-8")) {
5417 cached_answer = true;
5421 /* For LC_CTYPE=="C" return true, because CTYPE is effectly
5422 * unset and everything can do to UTF-8 nowadays. */
5423 set = setlocale(LC_CTYPE, NULL);
5425 cached_answer = true;
5429 /* Check result, but ignore the result if C was set
5433 !getenv("LC_ALL") &&
5434 !getenv("LC_CTYPE") &&
5438 return (bool) cached_answer;
5441 const char *draw_special_char(DrawSpecialChar ch) {
5442 static const char *draw_table[2][_DRAW_SPECIAL_CHAR_MAX] = {
5444 [DRAW_TREE_VERT] = "\342\224\202 ", /* │ */
5445 [DRAW_TREE_BRANCH] = "\342\224\234\342\224\200", /* ├─ */
5446 [DRAW_TREE_RIGHT] = "\342\224\224\342\224\200", /* └─ */
5447 [DRAW_TREE_SPACE] = " ", /* */
5448 [DRAW_TRIANGULAR_BULLET] = "\342\200\243 ", /* ‣ */
5449 [DRAW_BLACK_CIRCLE] = "\342\227\217 ", /* ● */
5451 /* ASCII fallback */ {
5452 [DRAW_TREE_VERT] = "| ",
5453 [DRAW_TREE_BRANCH] = "|-",
5454 [DRAW_TREE_RIGHT] = "`-",
5455 [DRAW_TREE_SPACE] = " ",
5456 [DRAW_TRIANGULAR_BULLET] = "> ",
5457 [DRAW_BLACK_CIRCLE] = "* ",
5461 return draw_table[!is_locale_utf8()][ch];
5464 char *strreplace(const char *text, const char *old_string, const char *new_string) {
5467 size_t l, old_len, new_len;
5473 old_len = strlen(old_string);
5474 new_len = strlen(new_string);
5487 if (!startswith(f, old_string)) {
5493 nl = l - old_len + new_len;
5494 a = realloc(r, nl + 1);
5502 t = stpcpy(t, new_string);
5514 char *strip_tab_ansi(char **ibuf, size_t *_isz) {
5515 const char *i, *begin = NULL;
5520 } state = STATE_OTHER;
5522 size_t osz = 0, isz;
5528 /* Strips ANSI color and replaces TABs by 8 spaces */
5530 isz = _isz ? *_isz : strlen(*ibuf);
5532 f = open_memstream(&obuf, &osz);
5536 for (i = *ibuf; i < *ibuf + isz + 1; i++) {
5541 if (i >= *ibuf + isz) /* EOT */
5543 else if (*i == '\x1B')
5544 state = STATE_ESCAPE;
5545 else if (*i == '\t')
5552 if (i >= *ibuf + isz) { /* EOT */
5555 } else if (*i == '[') {
5556 state = STATE_BRACKET;
5561 state = STATE_OTHER;
5568 if (i >= *ibuf + isz || /* EOT */
5569 (!(*i >= '0' && *i <= '9') && *i != ';' && *i != 'm')) {
5572 state = STATE_OTHER;
5574 } else if (*i == 'm')
5575 state = STATE_OTHER;
5597 int on_ac_power(void) {
5598 bool found_offline = false, found_online = false;
5599 _cleanup_closedir_ DIR *d = NULL;
5601 d = opendir("/sys/class/power_supply");
5607 _cleanup_close_ int fd = -1, device = -1;
5613 if (!de && errno != 0)
5619 if (ignore_file(de->d_name))
5622 device = openat(dirfd(d), de->d_name, O_DIRECTORY|O_RDONLY|O_CLOEXEC|O_NOCTTY);
5624 if (errno == ENOENT || errno == ENOTDIR)
5630 fd = openat(device, "type", O_RDONLY|O_CLOEXEC|O_NOCTTY);
5632 if (errno == ENOENT)
5638 n = read(fd, contents, sizeof(contents));
5642 if (n != 6 || memcmp(contents, "Mains\n", 6))
5645 close_nointr_nofail(fd);
5646 fd = openat(device, "online", O_RDONLY|O_CLOEXEC|O_NOCTTY);
5648 if (errno == ENOENT)
5654 n = read(fd, contents, sizeof(contents));
5658 if (n != 2 || contents[1] != '\n')
5661 if (contents[0] == '1') {
5662 found_online = true;
5664 } else if (contents[0] == '0')
5665 found_offline = true;
5670 return found_online || !found_offline;
5673 static int search_and_fopen_internal(const char *path, const char *mode, char **search, FILE **_f) {
5680 if (!path_strv_canonicalize_uniq(search))
5683 STRV_FOREACH(i, search) {
5684 _cleanup_free_ char *p = NULL;
5687 p = strjoin(*i, "/", path, NULL);
5697 if (errno != ENOENT)
5704 int search_and_fopen(const char *path, const char *mode, const char **search, FILE **_f) {
5705 _cleanup_strv_free_ char **copy = NULL;
5711 if (path_is_absolute(path)) {
5714 f = fopen(path, mode);
5723 copy = strv_copy((char**) search);
5727 return search_and_fopen_internal(path, mode, copy, _f);
5730 int search_and_fopen_nulstr(const char *path, const char *mode, const char *search, FILE **_f) {
5731 _cleanup_strv_free_ char **s = NULL;
5733 if (path_is_absolute(path)) {
5736 f = fopen(path, mode);
5745 s = strv_split_nulstr(search);
5749 return search_and_fopen_internal(path, mode, s, _f);
5752 char *strextend(char **x, ...) {
5759 l = f = *x ? strlen(*x) : 0;
5766 t = va_arg(ap, const char *);
5771 if (n > ((size_t) -1) - l) {
5780 r = realloc(*x, l+1);
5790 t = va_arg(ap, const char *);
5804 char *strrep(const char *s, unsigned n) {
5812 p = r = malloc(l * n + 1);
5816 for (i = 0; i < n; i++)
5823 void* greedy_realloc(void **p, size_t *allocated, size_t need) {
5830 if (*allocated >= need)
5833 a = MAX(64u, need * 2);
5835 /* check for overflows */
5848 void* greedy_realloc0(void **p, size_t *allocated, size_t need) {
5857 q = greedy_realloc(p, allocated, need);
5861 if (*allocated > prev)
5862 memset(&q[prev], 0, *allocated - prev);
5867 bool id128_is_valid(const char *s) {
5873 /* Simple formatted 128bit hex string */
5875 for (i = 0; i < l; i++) {
5878 if (!(c >= '0' && c <= '9') &&
5879 !(c >= 'a' && c <= 'z') &&
5880 !(c >= 'A' && c <= 'Z'))
5884 } else if (l == 36) {
5886 /* Formatted UUID */
5888 for (i = 0; i < l; i++) {
5891 if ((i == 8 || i == 13 || i == 18 || i == 23)) {
5895 if (!(c >= '0' && c <= '9') &&
5896 !(c >= 'a' && c <= 'z') &&
5897 !(c >= 'A' && c <= 'Z'))
5908 void parse_user_at_host(char *arg, char **user, char **host) {
5913 *host = strchr(arg, '@');
5922 int split_pair(const char *s, const char *sep, char **l, char **r) {
5937 a = strndup(s, x - s);
5941 b = strdup(x + strlen(sep));
5953 int shall_restore_state(void) {
5954 _cleanup_free_ char *line;
5959 r = proc_cmdline(&line);
5962 if (r == 0) /* Container ... */
5965 FOREACH_WORD_QUOTED(w, l, line, state)
5966 if (l == 23 && strneq(w, "systemd.restore_state=0", 23))
5972 int proc_cmdline(char **ret) {
5975 if (detect_container(NULL) > 0) {
5979 r = read_full_file("/proc/1/cmdline", &buf, &sz);
5983 for (p = buf; p + 1 < buf + sz; p++)
5992 r = read_one_line_file("/proc/cmdline", ret);
5999 int container_get_leader(const char *machine, pid_t *pid) {
6000 _cleanup_free_ char *s = NULL, *class = NULL;
6008 p = strappenda("/run/systemd/machines/", machine);
6009 r = parse_env_file(p, NEWLINE, "LEADER", &s, "CLASS", &class, NULL);
6017 if (!streq_ptr(class, "container"))
6020 r = parse_pid(s, &leader);
6030 int namespace_open(pid_t pid, int *pidns_fd, int *mntns_fd, int *root_fd) {
6031 _cleanup_close_ int pidnsfd = -1, mntnsfd = -1;
6032 const char *pidns, *mntns, *root;
6040 mntns = procfs_file_alloca(pid, "ns/mnt");
6041 mntnsfd = open(mntns, O_RDONLY|O_NOCTTY|O_CLOEXEC);
6045 pidns = procfs_file_alloca(pid, "ns/pid");
6046 pidnsfd = open(pidns, O_RDONLY|O_NOCTTY|O_CLOEXEC);
6050 root = procfs_file_alloca(pid, "root");
6051 rfd = open(root, O_RDONLY|O_NOCTTY|O_CLOEXEC|O_DIRECTORY);
6055 *pidns_fd = pidnsfd;
6056 *mntns_fd = mntnsfd;
6064 int namespace_enter(int pidns_fd, int mntns_fd, int root_fd) {
6065 assert(pidns_fd >= 0);
6066 assert(mntns_fd >= 0);
6067 assert(root_fd >= 0);
6069 if (setns(pidns_fd, CLONE_NEWPID) < 0)
6072 if (setns(mntns_fd, CLONE_NEWNS) < 0)
6075 if (fchdir(root_fd) < 0)
6078 if (chroot(".") < 0)
6081 if (setresgid(0, 0, 0) < 0)
6084 if (setresuid(0, 0, 0) < 0)
6090 bool pid_valid(pid_t pid) {
6094 if (kill(pid, 0) >= 0)
6097 return errno != ESRCH;
6100 int getpeercred(int fd, struct ucred *ucred) {
6101 socklen_t n = sizeof(struct ucred);
6108 r = getsockopt(fd, SOL_SOCKET, SO_PEERCRED, &u, &n);
6112 if (n != sizeof(struct ucred))
6115 /* Check if the data is actually useful and not suppressed due
6116 * to namespacing issues */
6124 int getpeersec(int fd, char **ret) {
6136 r = getsockopt(fd, SOL_SOCKET, SO_PEERSEC, s, &n);
6140 if (errno != ERANGE)
6147 r = getsockopt(fd, SOL_SOCKET, SO_PEERSEC, s, &n);