/* * Copyright (C) 2018 The Android Open Source Project * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #pragma once #include #include #include #include #include #include #include #include #include "common/libs/utils/result.h" #include "common/libs/utils/subprocess.h" #include "host/libs/config/command_source.h" namespace cuttlefish { struct MonitorEntry { std::unique_ptr cmd; bool can_sandbox; std::unique_ptr proc; bool is_critical; MonitorEntry(Command command, bool is_critical) : cmd(new Command(std::move(command))), is_critical(is_critical) {} }; // Launches and keeps track of subprocesses, decides response if they // unexpectedly exit class ProcessMonitor { public: class Properties { public: Properties& RestartSubprocesses(bool) &; Properties RestartSubprocesses(bool) &&; Properties& AddCommand(MonitorCommand) &; Properties AddCommand(MonitorCommand) &&; Properties& StraceCommands(std::set) &; Properties StraceCommands(std::set) &&; Properties& StraceLogDir(std::string) &; Properties StraceLogDir(std::string) &&; Properties& SandboxProcesses(bool) &; Properties SandboxProcesses(bool) &&; template Properties& AddCommands(T commands) & { for (auto& command : commands) { AddCommand(std::move(command)); } return *this; } template Properties AddCommands(T commands) && { return std::move(AddCommands(std::move(commands))); } private: bool restart_subprocesses_; std::vector entries_; std::set strace_commands_; std::string strace_log_dir_; bool sandbox_processes_; friend class ProcessMonitor; }; /* * secure_env_fd is to send suspend/resume commands to secure_env. */ ProcessMonitor(Properties&&, const SharedFD& secure_env_fd); // Start all processes given by AddCommand. Result StartAndMonitorProcesses(); // Stops all monitored subprocesses. Result StopMonitoredProcesses(); // Suspend all host subprocesses Result SuspendMonitoredProcesses(); // Resume all host subprocesses Result ResumeMonitoredProcesses(); private: Result StartSubprocesses(Properties& properties); Result MonitorRoutine(); Result ReadMonitorSocketLoop(std::atomic_bool&); /* * The child run_cvd process suspends the host processes */ Result SuspendHostProcessesImpl(); /* * The child run_cvd process resumes the host processes */ Result ResumeHostProcessesImpl(); Properties properties_; const SharedFD channel_to_secure_env_; pid_t monitor_; SharedFD parent_monitor_socket_; SharedFD child_monitor_socket_; /* * The lock that should be acquired when multiple threads * access to properties_. Currently, used by the child * run_cvd process that runs MonitorRoutine() */ std::mutex properties_mutex_; }; } // namespace cuttlefish