1 /*
2  * Copyright (C) 2019 The Android Open Source Project
3  *
4  * Licensed under the Apache License, Version 2.0 (the "License");
5  * you may not use this file except in compliance with the License.
6  * You may obtain a copy of the License at
7  *
8  *      http://www.apache.org/licenses/LICENSE-2.0
9  *
10  * Unless required by applicable law or agreed to in writing, software
11  * distributed under the License is distributed on an "AS IS" BASIS,
12  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13  * See the License for the specific language governing permissions and
14  * limitations under the License.
15  */
16 
17 #include "service_parser.h"
18 
19 #include <linux/input.h>
20 #include <stdlib.h>
21 #include <sys/socket.h>
22 
23 #include <algorithm>
24 #include <sstream>
25 
26 #include <android-base/logging.h>
27 #include <android-base/parseint.h>
28 #include <android-base/strings.h>
29 #include <hidl-util/FQName.h>
30 #include <system/thread_defs.h>
31 
32 #include "lmkd_service.h"
33 #include "rlimit_parser.h"
34 #include "service_utils.h"
35 #include "util.h"
36 
37 #ifdef INIT_FULL_SOURCES
38 #include <android/api-level.h>
39 #include <sys/system_properties.h>
40 
41 #include "selinux.h"
42 #else
43 #include "host_init_stubs.h"
44 #endif
45 
46 using android::base::ParseInt;
47 using android::base::Split;
48 using android::base::StartsWith;
49 
50 namespace android {
51 namespace init {
52 
ParseCapabilities(std::vector<std::string> && args)53 Result<void> ServiceParser::ParseCapabilities(std::vector<std::string>&& args) {
54     service_->capabilities_ = 0;
55 
56     if (!CapAmbientSupported()) {
57         return Error()
58                << "capabilities requested but the kernel does not support ambient capabilities";
59     }
60 
61     unsigned int last_valid_cap = GetLastValidCap();
62     if (last_valid_cap >= service_->capabilities_->size()) {
63         LOG(WARNING) << "last valid run-time capability is larger than CAP_LAST_CAP";
64     }
65 
66     for (size_t i = 1; i < args.size(); i++) {
67         const std::string& arg = args[i];
68         int res = LookupCap(arg);
69         if (res < 0) {
70             return Errorf("invalid capability '{}'", arg);
71         }
72         unsigned int cap = static_cast<unsigned int>(res);  // |res| is >= 0.
73         if (cap > last_valid_cap) {
74             return Errorf("capability '{}' not supported by the kernel", arg);
75         }
76         (*service_->capabilities_)[cap] = true;
77     }
78     return {};
79 }
80 
ParseClass(std::vector<std::string> && args)81 Result<void> ServiceParser::ParseClass(std::vector<std::string>&& args) {
82     service_->classnames_ = std::set<std::string>(args.begin() + 1, args.end());
83     return {};
84 }
85 
ParseConsole(std::vector<std::string> && args)86 Result<void> ServiceParser::ParseConsole(std::vector<std::string>&& args) {
87     if (service_->proc_attr_.stdio_to_kmsg) {
88         return Error() << "'console' and 'stdio_to_kmsg' are mutually exclusive";
89     }
90     service_->flags_ |= SVC_CONSOLE;
91     service_->proc_attr_.console = args.size() > 1 ? "/dev/" + args[1] : "";
92     return {};
93 }
94 
ParseCritical(std::vector<std::string> && args)95 Result<void> ServiceParser::ParseCritical(std::vector<std::string>&& args) {
96     std::optional<std::string> fatal_reboot_target;
97     std::optional<std::chrono::minutes> fatal_crash_window;
98 
99     for (auto it = args.begin() + 1; it != args.end(); ++it) {
100         auto arg = android::base::Split(*it, "=");
101         if (arg.size() != 2) {
102             return Error() << "critical: Argument '" << *it << "' is not supported";
103         } else if (arg[0] == "target") {
104             fatal_reboot_target = arg[1];
105         } else if (arg[0] == "window") {
106             int minutes;
107             auto window = ExpandProps(arg[1]);
108             if (!window.ok()) {
109                 return Error() << "critical: Could not expand argument ': " << arg[1];
110             }
111             if (*window == "off") {
112                 return {};
113             }
114             if (!ParseInt(*window, &minutes, 0)) {
115                 return Error() << "critical: 'fatal_crash_window' must be an integer > 0";
116             }
117             fatal_crash_window = std::chrono::minutes(minutes);
118         } else {
119             return Error() << "critical: Argument '" << *it << "' is not supported";
120         }
121     }
122 
123     if (fatal_reboot_target) {
124         service_->fatal_reboot_target_ = *fatal_reboot_target;
125     }
126     if (fatal_crash_window) {
127         service_->fatal_crash_window_ = *fatal_crash_window;
128     }
129     service_->flags_ |= SVC_CRITICAL;
130     return {};
131 }
132 
ParseDisabled(std::vector<std::string> && args)133 Result<void> ServiceParser::ParseDisabled(std::vector<std::string>&& args) {
134     service_->flags_ |= SVC_DISABLED;
135     service_->flags_ |= SVC_RC_DISABLED;
136     return {};
137 }
138 
ParseEnterNamespace(std::vector<std::string> && args)139 Result<void> ServiceParser::ParseEnterNamespace(std::vector<std::string>&& args) {
140     if (args[1] != "net") {
141         return Error() << "Init only supports entering network namespaces";
142     }
143     if (!service_->namespaces_.namespaces_to_enter.empty()) {
144         return Error() << "Only one network namespace may be entered";
145     }
146     // Network namespaces require that /sys is remounted, otherwise the old adapters will still be
147     // present. Therefore, they also require mount namespaces.
148     service_->namespaces_.flags |= CLONE_NEWNS;
149     service_->namespaces_.namespaces_to_enter.emplace_back(CLONE_NEWNET, std::move(args[2]));
150     return {};
151 }
152 
ParseGroup(std::vector<std::string> && args)153 Result<void> ServiceParser::ParseGroup(std::vector<std::string>&& args) {
154     auto gid = DecodeUid(args[1]);
155     if (!gid.ok()) {
156         return Error() << "Unable to decode GID for '" << args[1] << "': " << gid.error();
157     }
158     service_->proc_attr_.gid = *gid;
159 
160     for (std::size_t n = 2; n < args.size(); n++) {
161         gid = DecodeUid(args[n]);
162         if (!gid.ok()) {
163             return Error() << "Unable to decode GID for '" << args[n] << "': " << gid.error();
164         }
165         service_->proc_attr_.supp_gids.emplace_back(*gid);
166     }
167     return {};
168 }
169 
ParsePriority(std::vector<std::string> && args)170 Result<void> ServiceParser::ParsePriority(std::vector<std::string>&& args) {
171     service_->proc_attr_.priority = 0;
172     if (!ParseInt(args[1], &service_->proc_attr_.priority,
173                   static_cast<int>(ANDROID_PRIORITY_HIGHEST),  // highest is negative
174                   static_cast<int>(ANDROID_PRIORITY_LOWEST))) {
175         return Errorf("process priority value must be range {} - {}", ANDROID_PRIORITY_HIGHEST,
176                       ANDROID_PRIORITY_LOWEST);
177     }
178     return {};
179 }
180 
ParseInterface(std::vector<std::string> && args)181 Result<void> ServiceParser::ParseInterface(std::vector<std::string>&& args) {
182     const std::string& interface_name = args[1];
183     const std::string& instance_name = args[2];
184 
185     // AIDL services don't use fully qualified names and instead just use "interface aidl <name>"
186     if (interface_name != "aidl") {
187         FQName fq_name;
188         if (!FQName::parse(interface_name, &fq_name)) {
189             return Error() << "Invalid fully-qualified name for interface '" << interface_name
190                            << "'";
191         }
192 
193         if (!fq_name.isFullyQualified()) {
194             return Error() << "Interface name not fully-qualified '" << interface_name << "'";
195         }
196 
197         if (fq_name.isValidValueName()) {
198             return Error() << "Interface name must not be a value name '" << interface_name << "'";
199         }
200     }
201 
202     const std::string fullname = interface_name + "/" + instance_name;
203 
204     for (const auto& svc : *service_list_) {
205         if (svc->interfaces().count(fullname) > 0) {
206             return Error() << "Interface '" << fullname << "' redefined in " << service_->name()
207                            << " but is already defined by " << svc->name();
208         }
209     }
210 
211     service_->interfaces_.insert(fullname);
212 
213     return {};
214 }
215 
ParseIoprio(std::vector<std::string> && args)216 Result<void> ServiceParser::ParseIoprio(std::vector<std::string>&& args) {
217     if (!ParseInt(args[2], &service_->proc_attr_.ioprio_pri, 0, 7)) {
218         return Error() << "priority value must be range 0 - 7";
219     }
220 
221     if (args[1] == "rt") {
222         service_->proc_attr_.ioprio_class = IoSchedClass_RT;
223     } else if (args[1] == "be") {
224         service_->proc_attr_.ioprio_class = IoSchedClass_BE;
225     } else if (args[1] == "idle") {
226         service_->proc_attr_.ioprio_class = IoSchedClass_IDLE;
227     } else {
228         return Error() << "ioprio option usage: ioprio <rt|be|idle> <0-7>";
229     }
230 
231     return {};
232 }
233 
ParseKeycodes(std::vector<std::string> && args)234 Result<void> ServiceParser::ParseKeycodes(std::vector<std::string>&& args) {
235     auto it = args.begin() + 1;
236     if (args.size() == 2 && StartsWith(args[1], "$")) {
237         auto expanded = ExpandProps(args[1]);
238         if (!expanded.ok()) {
239             return expanded.error();
240         }
241 
242         // If the property is not set, it defaults to none, in which case there are no keycodes
243         // for this service.
244         if (*expanded == "none") {
245             return {};
246         }
247 
248         args = Split(*expanded, ",");
249         it = args.begin();
250     }
251 
252     for (; it != args.end(); ++it) {
253         int code;
254         if (ParseInt(*it, &code, 0, KEY_MAX)) {
255             for (auto& key : service_->keycodes_) {
256                 if (key == code) return Error() << "duplicate keycode: " << *it;
257             }
258             service_->keycodes_.insert(
259                     std::upper_bound(service_->keycodes_.begin(), service_->keycodes_.end(), code),
260                     code);
261         } else {
262             return Error() << "invalid keycode: " << *it;
263         }
264     }
265     return {};
266 }
267 
ParseOneshot(std::vector<std::string> && args)268 Result<void> ServiceParser::ParseOneshot(std::vector<std::string>&& args) {
269     service_->flags_ |= SVC_ONESHOT;
270     return {};
271 }
272 
ParseOnrestart(std::vector<std::string> && args)273 Result<void> ServiceParser::ParseOnrestart(std::vector<std::string>&& args) {
274     args.erase(args.begin());
275     int line = service_->onrestart_.NumCommands() + 1;
276     if (auto result = service_->onrestart_.AddCommand(std::move(args), line); !result.ok()) {
277         return Error() << "cannot add Onrestart command: " << result.error();
278     }
279     return {};
280 }
281 
ParseNamespace(std::vector<std::string> && args)282 Result<void> ServiceParser::ParseNamespace(std::vector<std::string>&& args) {
283     for (size_t i = 1; i < args.size(); i++) {
284         if (args[i] == "pid") {
285             service_->namespaces_.flags |= CLONE_NEWPID;
286             // PID namespaces require mount namespaces.
287             service_->namespaces_.flags |= CLONE_NEWNS;
288         } else if (args[i] == "mnt") {
289             service_->namespaces_.flags |= CLONE_NEWNS;
290         } else {
291             return Error() << "namespace must be 'pid' or 'mnt'";
292         }
293     }
294     return {};
295 }
296 
ParseOomScoreAdjust(std::vector<std::string> && args)297 Result<void> ServiceParser::ParseOomScoreAdjust(std::vector<std::string>&& args) {
298     if (!ParseInt(args[1], &service_->oom_score_adjust_, MIN_OOM_SCORE_ADJUST,
299                   MAX_OOM_SCORE_ADJUST)) {
300         return Error() << "oom_score_adjust value must be in range " << MIN_OOM_SCORE_ADJUST
301                        << " - +" << MAX_OOM_SCORE_ADJUST;
302     }
303     return {};
304 }
305 
ParseOverride(std::vector<std::string> && args)306 Result<void> ServiceParser::ParseOverride(std::vector<std::string>&& args) {
307     service_->override_ = true;
308     return {};
309 }
310 
ParseMemcgSwappiness(std::vector<std::string> && args)311 Result<void> ServiceParser::ParseMemcgSwappiness(std::vector<std::string>&& args) {
312     if (!ParseInt(args[1], &service_->swappiness_, 0)) {
313         return Error() << "swappiness value must be equal or greater than 0";
314     }
315     return {};
316 }
317 
ParseMemcgLimitInBytes(std::vector<std::string> && args)318 Result<void> ServiceParser::ParseMemcgLimitInBytes(std::vector<std::string>&& args) {
319     if (!ParseInt(args[1], &service_->limit_in_bytes_, 0)) {
320         return Error() << "limit_in_bytes value must be equal or greater than 0";
321     }
322     return {};
323 }
324 
ParseMemcgLimitPercent(std::vector<std::string> && args)325 Result<void> ServiceParser::ParseMemcgLimitPercent(std::vector<std::string>&& args) {
326     if (!ParseInt(args[1], &service_->limit_percent_, 0)) {
327         return Error() << "limit_percent value must be equal or greater than 0";
328     }
329     return {};
330 }
331 
ParseMemcgLimitProperty(std::vector<std::string> && args)332 Result<void> ServiceParser::ParseMemcgLimitProperty(std::vector<std::string>&& args) {
333     service_->limit_property_ = std::move(args[1]);
334     return {};
335 }
336 
ParseMemcgSoftLimitInBytes(std::vector<std::string> && args)337 Result<void> ServiceParser::ParseMemcgSoftLimitInBytes(std::vector<std::string>&& args) {
338     if (!ParseInt(args[1], &service_->soft_limit_in_bytes_, 0)) {
339         return Error() << "soft_limit_in_bytes value must be equal or greater than 0";
340     }
341     return {};
342 }
343 
ParseProcessRlimit(std::vector<std::string> && args)344 Result<void> ServiceParser::ParseProcessRlimit(std::vector<std::string>&& args) {
345     auto rlimit = ParseRlimit(args);
346     if (!rlimit.ok()) return rlimit.error();
347 
348     service_->proc_attr_.rlimits.emplace_back(*rlimit);
349     return {};
350 }
351 
ParseRebootOnFailure(std::vector<std::string> && args)352 Result<void> ServiceParser::ParseRebootOnFailure(std::vector<std::string>&& args) {
353     if (service_->on_failure_reboot_target_) {
354         return Error() << "Only one reboot_on_failure command may be specified";
355     }
356     if (!StartsWith(args[1], "shutdown") && !StartsWith(args[1], "reboot")) {
357         return Error()
358                << "reboot_on_failure commands must begin with either 'shutdown' or 'reboot'";
359     }
360     service_->on_failure_reboot_target_ = std::move(args[1]);
361     return {};
362 }
363 
ParseRestartPeriod(std::vector<std::string> && args)364 Result<void> ServiceParser::ParseRestartPeriod(std::vector<std::string>&& args) {
365     int period;
366     if (!ParseInt(args[1], &period, 5)) {
367         return Error() << "restart_period value must be an integer >= 5";
368     }
369     service_->restart_period_ = std::chrono::seconds(period);
370     return {};
371 }
372 
ParseSeclabel(std::vector<std::string> && args)373 Result<void> ServiceParser::ParseSeclabel(std::vector<std::string>&& args) {
374     service_->seclabel_ = std::move(args[1]);
375     return {};
376 }
377 
ParseSigstop(std::vector<std::string> && args)378 Result<void> ServiceParser::ParseSigstop(std::vector<std::string>&& args) {
379     service_->sigstop_ = true;
380     return {};
381 }
382 
ParseSetenv(std::vector<std::string> && args)383 Result<void> ServiceParser::ParseSetenv(std::vector<std::string>&& args) {
384     service_->environment_vars_.emplace_back(std::move(args[1]), std::move(args[2]));
385     return {};
386 }
387 
ParseShutdown(std::vector<std::string> && args)388 Result<void> ServiceParser::ParseShutdown(std::vector<std::string>&& args) {
389     if (args[1] == "critical") {
390         service_->flags_ |= SVC_SHUTDOWN_CRITICAL;
391         return {};
392     }
393     return Error() << "Invalid shutdown option";
394 }
395 
ParseTaskProfiles(std::vector<std::string> && args)396 Result<void> ServiceParser::ParseTaskProfiles(std::vector<std::string>&& args) {
397     args.erase(args.begin());
398     service_->task_profiles_ = std::move(args);
399     return {};
400 }
401 
ParseTimeoutPeriod(std::vector<std::string> && args)402 Result<void> ServiceParser::ParseTimeoutPeriod(std::vector<std::string>&& args) {
403     int period;
404     if (!ParseInt(args[1], &period, 1)) {
405         return Error() << "timeout_period value must be an integer >= 1";
406     }
407     service_->timeout_period_ = std::chrono::seconds(period);
408     return {};
409 }
410 
411 // name type perm [ uid gid context ]
ParseSocket(std::vector<std::string> && args)412 Result<void> ServiceParser::ParseSocket(std::vector<std::string>&& args) {
413     SocketDescriptor socket;
414     socket.name = std::move(args[1]);
415 
416     auto types = Split(args[2], "+");
417     if (types[0] == "stream") {
418         socket.type = SOCK_STREAM;
419     } else if (types[0] == "dgram") {
420         socket.type = SOCK_DGRAM;
421     } else if (types[0] == "seqpacket") {
422         socket.type = SOCK_SEQPACKET;
423     } else {
424         return Error() << "socket type must be 'dgram', 'stream' or 'seqpacket', got '" << types[0]
425                        << "' instead.";
426     }
427 
428     if (types.size() > 1) {
429         if (types.size() == 2 && types[1] == "passcred") {
430             socket.passcred = true;
431         } else {
432             return Error() << "Only 'passcred' may be used to modify the socket type";
433         }
434     }
435 
436     errno = 0;
437     char* end = nullptr;
438     socket.perm = strtol(args[3].c_str(), &end, 8);
439     if (errno != 0) {
440         return ErrnoError() << "Unable to parse permissions '" << args[3] << "'";
441     }
442     if (end == args[3].c_str() || *end != '\0') {
443         errno = EINVAL;
444         return ErrnoError() << "Unable to parse permissions '" << args[3] << "'";
445     }
446 
447     if (args.size() > 4) {
448         auto uid = DecodeUid(args[4]);
449         if (!uid.ok()) {
450             return Error() << "Unable to find UID for '" << args[4] << "': " << uid.error();
451         }
452         socket.uid = *uid;
453     }
454 
455     if (args.size() > 5) {
456         auto gid = DecodeUid(args[5]);
457         if (!gid.ok()) {
458             return Error() << "Unable to find GID for '" << args[5] << "': " << gid.error();
459         }
460         socket.gid = *gid;
461     }
462 
463     socket.context = args.size() > 6 ? args[6] : "";
464 
465     auto old = std::find_if(service_->sockets_.begin(), service_->sockets_.end(),
466                             [&socket](const auto& other) { return socket.name == other.name; });
467 
468     if (old != service_->sockets_.end()) {
469         return Error() << "duplicate socket descriptor '" << socket.name << "'";
470     }
471 
472     service_->sockets_.emplace_back(std::move(socket));
473 
474     return {};
475 }
476 
ParseStdioToKmsg(std::vector<std::string> && args)477 Result<void> ServiceParser::ParseStdioToKmsg(std::vector<std::string>&& args) {
478     if (service_->flags_ & SVC_CONSOLE) {
479         return Error() << "'stdio_to_kmsg' and 'console' are mutually exclusive";
480     }
481     service_->proc_attr_.stdio_to_kmsg = true;
482     return {};
483 }
484 
485 // name type
ParseFile(std::vector<std::string> && args)486 Result<void> ServiceParser::ParseFile(std::vector<std::string>&& args) {
487     if (args[2] != "r" && args[2] != "w" && args[2] != "rw") {
488         return Error() << "file type must be 'r', 'w' or 'rw'";
489     }
490 
491     FileDescriptor file;
492     file.type = args[2];
493 
494     auto file_name = ExpandProps(args[1]);
495     if (!file_name.ok()) {
496         return Error() << "Could not expand file path ': " << file_name.error();
497     }
498     file.name = *file_name;
499     if (file.name[0] != '/' || file.name.find("../") != std::string::npos) {
500         return Error() << "file name must not be relative";
501     }
502 
503     auto old = std::find_if(service_->files_.begin(), service_->files_.end(),
504                             [&file](const auto& other) { return other.name == file.name; });
505 
506     if (old != service_->files_.end()) {
507         return Error() << "duplicate file descriptor '" << file.name << "'";
508     }
509 
510     service_->files_.emplace_back(std::move(file));
511 
512     return {};
513 }
514 
ParseUser(std::vector<std::string> && args)515 Result<void> ServiceParser::ParseUser(std::vector<std::string>&& args) {
516     auto uid = DecodeUid(args[1]);
517     if (!uid.ok()) {
518         return Error() << "Unable to find UID for '" << args[1] << "': " << uid.error();
519     }
520     service_->proc_attr_.uid = *uid;
521     return {};
522 }
523 
ParseWritepid(std::vector<std::string> && args)524 Result<void> ServiceParser::ParseWritepid(std::vector<std::string>&& args) {
525     args.erase(args.begin());
526     service_->writepid_files_ = std::move(args);
527     return {};
528 }
529 
ParseUpdatable(std::vector<std::string> && args)530 Result<void> ServiceParser::ParseUpdatable(std::vector<std::string>&& args) {
531     service_->updatable_ = true;
532     return {};
533 }
534 
GetParserMap() const535 const KeywordMap<ServiceParser::OptionParser>& ServiceParser::GetParserMap() const {
536     constexpr std::size_t kMax = std::numeric_limits<std::size_t>::max();
537     // clang-format off
538     static const KeywordMap<ServiceParser::OptionParser> parser_map = {
539         {"capabilities",            {0,     kMax, &ServiceParser::ParseCapabilities}},
540         {"class",                   {1,     kMax, &ServiceParser::ParseClass}},
541         {"console",                 {0,     1,    &ServiceParser::ParseConsole}},
542         {"critical",                {0,     2,    &ServiceParser::ParseCritical}},
543         {"disabled",                {0,     0,    &ServiceParser::ParseDisabled}},
544         {"enter_namespace",         {2,     2,    &ServiceParser::ParseEnterNamespace}},
545         {"file",                    {2,     2,    &ServiceParser::ParseFile}},
546         {"group",                   {1,     NR_SVC_SUPP_GIDS + 1, &ServiceParser::ParseGroup}},
547         {"interface",               {2,     2,    &ServiceParser::ParseInterface}},
548         {"ioprio",                  {2,     2,    &ServiceParser::ParseIoprio}},
549         {"keycodes",                {1,     kMax, &ServiceParser::ParseKeycodes}},
550         {"memcg.limit_in_bytes",    {1,     1,    &ServiceParser::ParseMemcgLimitInBytes}},
551         {"memcg.limit_percent",     {1,     1,    &ServiceParser::ParseMemcgLimitPercent}},
552         {"memcg.limit_property",    {1,     1,    &ServiceParser::ParseMemcgLimitProperty}},
553         {"memcg.soft_limit_in_bytes",
554                                     {1,     1,    &ServiceParser::ParseMemcgSoftLimitInBytes}},
555         {"memcg.swappiness",        {1,     1,    &ServiceParser::ParseMemcgSwappiness}},
556         {"namespace",               {1,     2,    &ServiceParser::ParseNamespace}},
557         {"oneshot",                 {0,     0,    &ServiceParser::ParseOneshot}},
558         {"onrestart",               {1,     kMax, &ServiceParser::ParseOnrestart}},
559         {"oom_score_adjust",        {1,     1,    &ServiceParser::ParseOomScoreAdjust}},
560         {"override",                {0,     0,    &ServiceParser::ParseOverride}},
561         {"priority",                {1,     1,    &ServiceParser::ParsePriority}},
562         {"reboot_on_failure",       {1,     1,    &ServiceParser::ParseRebootOnFailure}},
563         {"restart_period",          {1,     1,    &ServiceParser::ParseRestartPeriod}},
564         {"rlimit",                  {3,     3,    &ServiceParser::ParseProcessRlimit}},
565         {"seclabel",                {1,     1,    &ServiceParser::ParseSeclabel}},
566         {"setenv",                  {2,     2,    &ServiceParser::ParseSetenv}},
567         {"shutdown",                {1,     1,    &ServiceParser::ParseShutdown}},
568         {"sigstop",                 {0,     0,    &ServiceParser::ParseSigstop}},
569         {"socket",                  {3,     6,    &ServiceParser::ParseSocket}},
570         {"stdio_to_kmsg",           {0,     0,    &ServiceParser::ParseStdioToKmsg}},
571         {"task_profiles",           {1,     kMax, &ServiceParser::ParseTaskProfiles}},
572         {"timeout_period",          {1,     1,    &ServiceParser::ParseTimeoutPeriod}},
573         {"updatable",               {0,     0,    &ServiceParser::ParseUpdatable}},
574         {"user",                    {1,     1,    &ServiceParser::ParseUser}},
575         {"writepid",                {1,     kMax, &ServiceParser::ParseWritepid}},
576     };
577     // clang-format on
578     return parser_map;
579 }
580 
ParseSection(std::vector<std::string> && args,const std::string & filename,int line)581 Result<void> ServiceParser::ParseSection(std::vector<std::string>&& args,
582                                          const std::string& filename, int line) {
583     if (args.size() < 3) {
584         return Error() << "services must have a name and a program";
585     }
586 
587     const std::string& name = args[1];
588     if (!IsValidName(name)) {
589         return Error() << "invalid service name '" << name << "'";
590     }
591 
592     filename_ = filename;
593 
594     Subcontext* restart_action_subcontext = nullptr;
595     if (subcontext_ && subcontext_->PathMatchesSubcontext(filename)) {
596         restart_action_subcontext = subcontext_;
597     }
598 
599     std::vector<std::string> str_args(args.begin() + 2, args.end());
600 
601     if (SelinuxGetVendorAndroidVersion() <= __ANDROID_API_P__) {
602         if (str_args[0] == "/sbin/watchdogd") {
603             str_args[0] = "/system/bin/watchdogd";
604         }
605     }
606     if (SelinuxGetVendorAndroidVersion() <= __ANDROID_API_Q__) {
607         if (str_args[0] == "/charger") {
608             str_args[0] = "/system/bin/charger";
609         }
610     }
611 
612     service_ = std::make_unique<Service>(name, restart_action_subcontext, str_args, from_apex_);
613     return {};
614 }
615 
ParseLineSection(std::vector<std::string> && args,int line)616 Result<void> ServiceParser::ParseLineSection(std::vector<std::string>&& args, int line) {
617     if (!service_) {
618         return {};
619     }
620 
621     auto parser = GetParserMap().Find(args);
622 
623     if (!parser.ok()) return parser.error();
624 
625     return std::invoke(*parser, this, std::move(args));
626 }
627 
EndSection()628 Result<void> ServiceParser::EndSection() {
629     if (!service_) {
630         return {};
631     }
632 
633     if (interface_inheritance_hierarchy_) {
634         if (const auto& check_hierarchy_result = CheckInterfaceInheritanceHierarchy(
635                     service_->interfaces(), *interface_inheritance_hierarchy_);
636             !check_hierarchy_result.ok()) {
637             return Error() << check_hierarchy_result.error();
638         }
639     }
640 
641     if (SelinuxGetVendorAndroidVersion() >= __ANDROID_API_R__) {
642         if ((service_->flags() & SVC_CRITICAL) != 0 && (service_->flags() & SVC_ONESHOT) != 0) {
643             return Error() << "service '" << service_->name()
644                            << "' can't be both critical and oneshot";
645         }
646     }
647 
648     Service* old_service = service_list_->FindService(service_->name());
649     if (old_service) {
650         if (!service_->is_override()) {
651             return Error() << "ignored duplicate definition of service '" << service_->name()
652                            << "'";
653         }
654 
655         if (StartsWith(filename_, "/apex/") && !old_service->is_updatable()) {
656             return Error() << "cannot update a non-updatable service '" << service_->name()
657                            << "' with a config in APEX";
658         }
659 
660         std::string context = service_->subcontext() ? service_->subcontext()->context() : "";
661         std::string old_context =
662                 old_service->subcontext() ? old_service->subcontext()->context() : "";
663         if (context != old_context) {
664             return Error() << "service '" << service_->name() << "' overrides another service "
665                            << "across the treble boundary.";
666         }
667 
668         service_list_->RemoveService(*old_service);
669         old_service = nullptr;
670     }
671 
672     service_list_->AddService(std::move(service_));
673 
674     return {};
675 }
676 
IsValidName(const std::string & name) const677 bool ServiceParser::IsValidName(const std::string& name) const {
678     // Property names can be any length, but may only contain certain characters.
679     // Property values can contain any characters, but may only be a certain length.
680     // (The latter restriction is needed because `start` and `stop` work by writing
681     // the service name to the "ctl.start" and "ctl.stop" properties.)
682     return IsLegalPropertyName("init.svc." + name) && name.size() <= PROP_VALUE_MAX;
683 }
684 
685 }  // namespace init
686 }  // namespace android
687