/* * Copyright (c) 2018-2021, Andreas Kling * * SPDX-License-Identifier: BSD-2-Clause */ #include "Service.h" #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include String g_boot_mode = "graphical"; static void sigchld_handler(int) { for (;;) { int status = 0; pid_t pid = waitpid(-1, &status, WNOHANG); if (pid < 0) { perror("waitpid"); break; } if (pid == 0) break; dbgln_if(SYSTEMSERVER_DEBUG, "Reaped child with pid {}, exit status {}", pid, status); Service* service = Service::find_by_pid(pid); if (service == nullptr) { // This can happen for multi-instance services. continue; } service->did_exit(status); } } static void parse_boot_mode() { auto f = Core::File::construct("/proc/cmdline"); if (!f->open(Core::OpenMode::ReadOnly)) { dbgln("Failed to read command line: {}", f->error_string()); return; } const String cmdline = String::copy(f->read_all(), Chomp); dbgln("Read command line: {}", cmdline); // FIXME: Support more than one framebuffer detection struct stat file_state; int rc = lstat("/dev/fb0", &file_state); if (rc < 0) { for (auto& part : cmdline.split_view(' ')) { auto pair = part.split_view('=', 2); if (pair.size() == 2 && pair[0] == "boot_mode") g_boot_mode = pair[1]; } // We could boot into self-test which is not graphical too. if (g_boot_mode == "self-test") return; g_boot_mode = "text"; } dbgln("Booting in {} mode", g_boot_mode); } static void chown_wrapper(const char* path, uid_t uid, gid_t gid) { int rc = chown(path, uid, gid); if (rc < 0 && errno != ENOENT) { VERIFY_NOT_REACHED(); } } static void chown_all_matching_device_nodes(group* group, unsigned major_number) { VERIFY(group); struct stat cur_file_stat; Core::DirIterator di("/dev/", Core::DirIterator::SkipParentAndBaseDir); if (di.has_error()) VERIFY_NOT_REACHED(); while (di.has_next()) { auto entry_name = di.next_full_path(); auto rc = stat(entry_name.characters(), &cur_file_stat); if (rc < 0) continue; if (major(cur_file_stat.st_rdev) != major_number) continue; chown_wrapper(entry_name.characters(), 0, group->gr_gid); } } constexpr unsigned encoded_device(unsigned major, unsigned minor) { return (minor & 0xff) | (major << 8) | ((minor & ~0xff) << 12); } static void populate_devfs() { mode_t old_mask = umask(0); if (auto rc = mknod("/dev/audio", 0220 | S_IFCHR, encoded_device(42, 42)); rc < 0) VERIFY_NOT_REACHED(); if (auto rc = mknod("/dev/console", 0666 | S_IFCHR, encoded_device(5, 1)); rc < 0) VERIFY_NOT_REACHED(); if (auto rc = mknod("/dev/fb0", 0666 | S_IFBLK, encoded_device(29, 0)); rc < 0) VERIFY_NOT_REACHED(); if (auto rc = mknod("/dev/full", 0660 | S_IFCHR, encoded_device(29, 0)); rc < 0) VERIFY_NOT_REACHED(); if (auto rc = mknod("/dev/hda", 0600 | S_IFBLK, encoded_device(3, 0)); rc < 0) VERIFY_NOT_REACHED(); if (auto rc = mknod("/dev/hvc0p0", 0666 | S_IFCHR, encoded_device(229, 0)); rc < 0) VERIFY_NOT_REACHED(); if (auto rc = mknod("/dev/hwrng", 0666 | S_IFCHR, encoded_device(10, 183)); rc < 0) VERIFY_NOT_REACHED(); if (auto rc = mknod("/dev/keyboard0", 0660 | S_IFCHR, encoded_device(85, 0)); rc < 0) VERIFY_NOT_REACHED(); if (auto rc = mknod("/dev/mem", 0660 | S_IFCHR, encoded_device(1, 1)); rc < 0) VERIFY_NOT_REACHED(); if (auto rc = mknod("/dev/mouse0", 0660 | S_IFCHR, encoded_device(10, 0)); rc < 0) VERIFY_NOT_REACHED(); if (auto rc = mknod("/dev/null", 0666 | S_IFCHR, encoded_device(1, 3)); rc < 0) VERIFY_NOT_REACHED(); if (auto rc = mknod("/dev/ptmx", 0666 | S_IFCHR, encoded_device(5, 2)); rc < 0) VERIFY_NOT_REACHED(); if (auto rc = mknod("/dev/random", 0666 | S_IFCHR, encoded_device(1, 8)); rc < 0) VERIFY_NOT_REACHED(); if (auto rc = mknod("/dev/tty0", 0620 | S_IFCHR, encoded_device(4, 0)); rc < 0) VERIFY_NOT_REACHED(); if (auto rc = mknod("/dev/tty1", 0620 | S_IFCHR, encoded_device(4, 1)); rc < 0) VERIFY_NOT_REACHED(); if (auto rc = mknod("/dev/tty2", 0620 | S_IFCHR, encoded_device(4, 2)); rc < 0) VERIFY_NOT_REACHED(); if (auto rc = mknod("/dev/tty3", 0620 | S_IFCHR, encoded_device(4, 3)); rc < 0) VERIFY_NOT_REACHED(); if (auto rc = mknod("/dev/ttyS0", 0620 | S_IFCHR, encoded_device(4, 64)); rc < 0) VERIFY_NOT_REACHED(); if (auto rc = mknod("/dev/ttyS1", 0620 | S_IFCHR, encoded_device(4, 65)); rc < 0) VERIFY_NOT_REACHED(); if (auto rc = mknod("/dev/ttyS2", 0620 | S_IFCHR, encoded_device(4, 66)); rc < 0) VERIFY_NOT_REACHED(); if (auto rc = mknod("/dev/ttyS3", 0666 | S_IFCHR, encoded_device(4, 67)); rc < 0) VERIFY_NOT_REACHED(); if (auto rc = mknod("/dev/zero", 0666 | S_IFCHR, encoded_device(1, 5)); rc < 0) VERIFY_NOT_REACHED(); umask(old_mask); } static void prepare_devfs() { // FIXME: Find a better way to all of this stuff, without hardcoding all of this! int rc = mount(-1, "/dev", "dev", 0); if (rc != 0) { VERIFY_NOT_REACHED(); } populate_devfs(); rc = mount(-1, "/sys", "sys", 0); if (rc != 0) { VERIFY_NOT_REACHED(); } rc = mkdir("/dev/pts", 0755); if (rc != 0) { VERIFY_NOT_REACHED(); } rc = mount(-1, "/dev/pts", "devpts", 0); if (rc != 0) { VERIFY_NOT_REACHED(); } rc = symlink("/dev/random", "/dev/urandom"); if (rc < 0) { VERIFY_NOT_REACHED(); } auto phys_group = getgrnam("phys"); VERIFY(phys_group); // FIXME: Try to find a way to not hardcode the major number of framebuffer device nodes. chown_all_matching_device_nodes(phys_group, 29); chown_wrapper("/dev/keyboard0", 0, phys_group->gr_gid); chown_wrapper("/dev/mouse0", 0, phys_group->gr_gid); auto tty_group = getgrnam("tty"); VERIFY(tty_group); // FIXME: Try to find a way to not hardcode the major number of tty nodes. chown_all_matching_device_nodes(tty_group, 4); auto audio_group = getgrnam("audio"); VERIFY(audio_group); chown_wrapper("/dev/audio", 0, audio_group->gr_gid); rc = symlink("/proc/self/fd/0", "/dev/stdin"); if (rc < 0) { VERIFY_NOT_REACHED(); } rc = symlink("/proc/self/fd/1", "/dev/stdout"); if (rc < 0) { VERIFY_NOT_REACHED(); } rc = symlink("/proc/self/fd/2", "/dev/stderr"); if (rc < 0) { VERIFY_NOT_REACHED(); } // Note: We open the /dev/null device and set file descriptors 0, 1, 2 to it // because otherwise these file descriptors won't have a custody, making // the ProcFS file descriptor links (at /proc/PID/fd/{0,1,2}) to have an // absolute path of "device:1,3" instead of something like "/dev/null". // This affects also every other process that inherits the file descriptors // from SystemServer, so it is important for other things (also for ProcFS // tests that are running in CI mode). int stdin_new_fd = open("/dev/null", O_NONBLOCK); if (stdin_new_fd < 0) { VERIFY_NOT_REACHED(); } rc = dup2(stdin_new_fd, 0); if (rc < 0) { VERIFY_NOT_REACHED(); } rc = dup2(stdin_new_fd, 1); if (rc < 0) { VERIFY_NOT_REACHED(); } rc = dup2(stdin_new_fd, 2); if (rc < 0) { VERIFY_NOT_REACHED(); } endgrent(); } static void mount_all_filesystems() { dbgln("Spawning mount -a to mount all filesystems."); pid_t pid = fork(); if (pid < 0) { perror("fork"); VERIFY_NOT_REACHED(); } else if (pid == 0) { execl("/bin/mount", "mount", "-a", nullptr); perror("exec"); VERIFY_NOT_REACHED(); } else { wait(nullptr); } } static void create_tmp_coredump_directory() { dbgln("Creating /tmp/coredump directory"); auto old_umask = umask(0); // FIXME: the coredump directory should be made read-only once CrashDaemon is no longer responsible for compressing coredumps auto rc = mkdir("/tmp/coredump", 0777); if (rc < 0) { perror("mkdir(/tmp/coredump)"); VERIFY_NOT_REACHED(); } umask(old_umask); } int main(int, char**) { prepare_devfs(); if (pledge("stdio proc exec tty accept unix rpath wpath cpath chown fattr id sigaction", nullptr) < 0) { perror("pledge"); return 1; } mount_all_filesystems(); create_tmp_coredump_directory(); parse_boot_mode(); Core::EventLoop event_loop; event_loop.register_signal(SIGCHLD, sigchld_handler); // Read our config and instantiate services. // This takes care of setting up sockets. NonnullRefPtrVector services; auto config = Core::ConfigFile::open_for_system("SystemServer"); for (auto name : config->groups()) { auto service = Service::construct(*config, name); if (service->is_enabled()) services.append(service); } // After we've set them all up, activate them! dbgln("Activating {} services...", services.size()); for (auto& service : services) service.activate(); return event_loop.exec(); }