blob: 16ed100124a27909f76e1445f87ecce40eee86cb [file] [log] [blame]
Lennart Poettering5008d582010-09-28 02:34:02 +02001/*-*- Mode: C; c-basic-offset: 8; indent-tabs-mode: nil -*-*/
2
3/***
4 This file is part of systemd.
5
Lennart Poettering3b63d2d2010-10-18 22:38:41 +02006 Copyright 2010 Lennart Poettering, Kay Sievers
Zbigniew Jędrzejewski-Szmek3f93da92015-01-09 02:00:37 -05007 Copyright 2015 Zbigniew Jędrzejewski-Szmek
Lennart Poettering5008d582010-09-28 02:34:02 +02008
9 systemd is free software; you can redistribute it and/or modify it
Lennart Poettering5430f7f2012-04-12 00:20:58 +020010 under the terms of the GNU Lesser General Public License as published by
11 the Free Software Foundation; either version 2.1 of the License, or
Lennart Poettering5008d582010-09-28 02:34:02 +020012 (at your option) any later version.
13
14 systemd is distributed in the hope that it will be useful, but
15 WITHOUT ANY WARRANTY; without even the implied warranty of
16 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
Lennart Poettering5430f7f2012-04-12 00:20:58 +020017 Lesser General Public License for more details.
Lennart Poettering5008d582010-09-28 02:34:02 +020018
Lennart Poettering5430f7f2012-04-12 00:20:58 +020019 You should have received a copy of the GNU Lesser General Public License
Lennart Poettering5008d582010-09-28 02:34:02 +020020 along with systemd; If not, see <http://www.gnu.org/licenses/>.
21***/
22
23#include <unistd.h>
24#include <fcntl.h>
25#include <errno.h>
26#include <string.h>
Lennart Poettering5008d582010-09-28 02:34:02 +020027#include <limits.h>
28#include <dirent.h>
Lennart Poettering3b63d2d2010-10-18 22:38:41 +020029#include <stdio.h>
30#include <stdlib.h>
31#include <stddef.h>
32#include <getopt.h>
33#include <stdbool.h>
34#include <time.h>
Lennart Poetteringb8bb3e82011-02-12 09:31:25 +010035#include <glob.h>
36#include <fnmatch.h>
Zbigniew Jędrzejewski-Szmek505ef0e2015-01-09 01:10:02 -050037#include <sys/stat.h>
Maciej Wereskiebf4e802014-12-04 10:32:10 +010038#include <sys/xattr.h>
Goffredo Baroncelli22c3a6c2015-03-16 20:33:50 +010039#include <linux/fs.h>
Lennart Poettering5008d582010-09-28 02:34:02 +020040
41#include "log.h"
42#include "util.h"
Dave Reisner54693d92012-09-15 12:58:49 -040043#include "macro.h"
Zbigniew Jędrzejewski-Szmekd39efe72013-03-13 20:20:54 -040044#include "missing.h"
Kay Sievers49e942b2012-04-10 21:54:31 +020045#include "mkdir.h"
Kay Sievers9eb977d2012-05-07 21:36:12 +020046#include "path-util.h"
Lennart Poettering5008d582010-09-28 02:34:02 +020047#include "strv.h"
48#include "label.h"
Lennart Poettering3b63d2d2010-10-18 22:38:41 +020049#include "set.h"
Kay Sievers2c210442012-05-07 18:55:45 +020050#include "conf-files.h"
Lennart Poetteringcb7ed9d2012-09-05 23:39:55 -070051#include "capability.h"
Lennart Poettering1731e342013-09-17 11:02:02 -050052#include "specifier.h"
Lennart Poetteringeb9da372013-11-06 18:28:39 +010053#include "build.h"
Lennart Poettering849958d2014-06-10 23:02:40 +020054#include "copy.h"
Lennart Poetteringc6878632015-04-04 11:52:57 +020055#include "rm-rf.h"
Lennart Poetteringd7b8eec2014-12-27 18:46:36 +010056#include "selinux-util.h"
57#include "btrfs-util.h"
Zbigniew Jędrzejewski-Szmekf8eeeaf2015-01-17 23:27:39 -050058#include "acl-util.h"
Lennart Poettering5008d582010-09-28 02:34:02 +020059
Andreas Jaeger01000472010-09-29 10:08:24 +020060/* This reads all files listed in /etc/tmpfiles.d/?*.conf and creates
Lennart Poettering5008d582010-09-28 02:34:02 +020061 * them in the file system. This is intended to be used to create
Kay Sieversdb019b82011-04-04 15:33:00 +020062 * properly owned directories beneath /tmp, /var/tmp, /run, which are
63 * volatile and hence need to be recreated on bootup. */
Lennart Poettering5008d582010-09-28 02:34:02 +020064
Michal Schmidt66ccd032011-12-15 21:31:14 +010065typedef enum ItemType {
Lennart Poetteringb8bb3e82011-02-12 09:31:25 +010066 /* These ones take file names */
Lennart Poettering3b63d2d2010-10-18 22:38:41 +020067 CREATE_FILE = 'f',
68 TRUNCATE_FILE = 'F',
69 CREATE_DIRECTORY = 'd',
70 TRUNCATE_DIRECTORY = 'D',
Lennart Poetteringd7b8eec2014-12-27 18:46:36 +010071 CREATE_SUBVOLUME = 'v',
Lennart Poetteringee17ee72011-07-12 03:56:56 +020072 CREATE_FIFO = 'p',
Lennart Poettering468d7262012-01-17 15:04:12 +010073 CREATE_SYMLINK = 'L',
74 CREATE_CHAR_DEVICE = 'c',
75 CREATE_BLOCK_DEVICE = 'b',
Lennart Poettering849958d2014-06-10 23:02:40 +020076 COPY_FILES = 'C',
Lennart Poetteringb8bb3e82011-02-12 09:31:25 +010077
78 /* These ones take globs */
Zbigniew Jędrzejewski-Szmekb705ab62015-01-18 02:10:00 -050079 SET_XATTR = 't',
80 RECURSIVE_SET_XATTR = 'T',
81 SET_ACL = 'a',
82 RECURSIVE_SET_ACL = 'A',
Lennart Poetteringcde684a2014-06-10 22:50:46 +020083 WRITE_FILE = 'w',
Lennart Poettering3b63d2d2010-10-18 22:38:41 +020084 IGNORE_PATH = 'x',
Michal Sekletar78a92a52013-01-18 16:13:08 +010085 IGNORE_DIRECTORY_PATH = 'X',
Lennart Poettering3b63d2d2010-10-18 22:38:41 +020086 REMOVE_PATH = 'r',
Michal Schmidta8d88782011-12-15 23:11:07 +010087 RECURSIVE_REMOVE_PATH = 'R',
Lennart Poetteringe73a03e2014-06-10 23:42:16 +020088 ADJUST_MODE = 'm', /* legacy, 'z' is identical to this */
Michal Schmidt777b87e2011-12-16 18:27:35 +010089 RELABEL_PATH = 'z',
Lennart Poetteringe73a03e2014-06-10 23:42:16 +020090 RECURSIVE_RELABEL_PATH = 'Z',
Goffredo Baroncelli22c3a6c2015-03-16 20:33:50 +010091 SET_ATTRIB = 'h',
92 RECURSIVE_SET_ATTRIB = 'H',
Michal Schmidt66ccd032011-12-15 21:31:14 +010093} ItemType;
Lennart Poettering3b63d2d2010-10-18 22:38:41 +020094
95typedef struct Item {
Michal Schmidt66ccd032011-12-15 21:31:14 +010096 ItemType type;
Lennart Poettering3b63d2d2010-10-18 22:38:41 +020097
98 char *path;
Lennart Poettering468d7262012-01-17 15:04:12 +010099 char *argument;
Maciej Wereskiebf4e802014-12-04 10:32:10 +0100100 char **xattrs;
Zbigniew Jędrzejewski-Szmekf8eeeaf2015-01-17 23:27:39 -0500101#ifdef HAVE_ACL
102 acl_t acl_access;
103 acl_t acl_default;
104#endif
Lennart Poettering5008d582010-09-28 02:34:02 +0200105 uid_t uid;
106 gid_t gid;
Lennart Poettering3b63d2d2010-10-18 22:38:41 +0200107 mode_t mode;
108 usec_t age;
109
Lennart Poettering468d7262012-01-17 15:04:12 +0100110 dev_t major_minor;
Goffredo Baroncelli22c3a6c2015-03-16 20:33:50 +0100111 unsigned long attrib_value;
112 unsigned long attrib_mask;
Lennart Poettering468d7262012-01-17 15:04:12 +0100113
Lennart Poettering3b63d2d2010-10-18 22:38:41 +0200114 bool uid_set:1;
115 bool gid_set:1;
116 bool mode_set:1;
117 bool age_set:1;
Lennart Poetteringabef3f92014-06-11 10:14:07 +0200118 bool mask_perms:1;
Goffredo Baroncelli22c3a6c2015-03-16 20:33:50 +0100119 bool attrib_set:1;
Lennart Poettering24f3a372012-06-20 09:05:50 +0200120
121 bool keep_first_level:1;
Lennart Poettering1910cd02014-06-11 01:37:35 +0200122
Lennart Poettering2e78fa72014-06-16 13:21:07 +0200123 bool force:1;
124
Lennart Poettering1910cd02014-06-11 01:37:35 +0200125 bool done:1;
Lennart Poettering3b63d2d2010-10-18 22:38:41 +0200126} Item;
127
Zbigniew Jędrzejewski-Szmek3f93da92015-01-09 02:00:37 -0500128typedef struct ItemArray {
129 Item *items;
130 size_t count;
131 size_t size;
132} ItemArray;
133
Lennart Poettering3b63d2d2010-10-18 22:38:41 +0200134static bool arg_create = false;
135static bool arg_clean = false;
136static bool arg_remove = false;
Zbigniew Jędrzejewski-Szmek81815652013-12-30 13:00:38 -0500137static bool arg_boot = false;
Lennart Poettering3b63d2d2010-10-18 22:38:41 +0200138
Lennart Poettering7bc040f2014-06-11 01:26:28 +0200139static char **arg_include_prefixes = NULL;
140static char **arg_exclude_prefixes = NULL;
Michael Marineaucf9a4ab2014-03-13 21:32:13 -0700141static char *arg_root = NULL;
Lennart Poetteringfba6e682011-02-13 14:00:54 +0100142
Josh Triplett7f0a55d2014-10-29 05:02:56 -0700143static const char conf_file_dirs[] = CONF_DIRS_NULSTR("tmpfiles");
Dave Reisner91256702012-06-08 22:31:19 -0400144
Lennart Poettering3b63d2d2010-10-18 22:38:41 +0200145#define MAX_DEPTH 256
146
Lennart Poettering7bc040f2014-06-11 01:26:28 +0200147static Hashmap *items = NULL, *globs = NULL;
148static Set *unix_sockets = NULL;
149
Michal Schmidt66ccd032011-12-15 21:31:14 +0100150static bool needs_glob(ItemType t) {
Lennart Poetteringcde684a2014-06-10 22:50:46 +0200151 return IN_SET(t,
152 WRITE_FILE,
153 IGNORE_PATH,
154 IGNORE_DIRECTORY_PATH,
155 REMOVE_PATH,
156 RECURSIVE_REMOVE_PATH,
Lennart Poetteringe73a03e2014-06-10 23:42:16 +0200157 ADJUST_MODE,
Lennart Poetteringcde684a2014-06-10 22:50:46 +0200158 RELABEL_PATH,
Zbigniew Jędrzejewski-Szmekb705ab62015-01-18 02:10:00 -0500159 RECURSIVE_RELABEL_PATH,
160 SET_XATTR,
161 RECURSIVE_SET_XATTR,
162 SET_ACL,
163 RECURSIVE_SET_ACL);
Lennart Poetteringb8bb3e82011-02-12 09:31:25 +0100164}
165
Zbigniew Jędrzejewski-Szmek3f93da92015-01-09 02:00:37 -0500166static bool takes_ownership(ItemType t) {
167 return IN_SET(t,
168 CREATE_FILE,
169 TRUNCATE_FILE,
170 CREATE_DIRECTORY,
171 TRUNCATE_DIRECTORY,
172 CREATE_SUBVOLUME,
173 CREATE_FIFO,
174 CREATE_SYMLINK,
175 CREATE_CHAR_DEVICE,
176 CREATE_BLOCK_DEVICE,
177 COPY_FILES,
Zbigniew Jędrzejewski-Szmek3f93da92015-01-09 02:00:37 -0500178 WRITE_FILE,
179 IGNORE_PATH,
180 IGNORE_DIRECTORY_PATH,
181 REMOVE_PATH,
182 RECURSIVE_REMOVE_PATH);
183}
184
Lennart Poetteringb8bb3e82011-02-12 09:31:25 +0100185static struct Item* find_glob(Hashmap *h, const char *match) {
Zbigniew Jędrzejewski-Szmek3f93da92015-01-09 02:00:37 -0500186 ItemArray *j;
Lennart Poetteringb8bb3e82011-02-12 09:31:25 +0100187 Iterator i;
188
Zbigniew Jędrzejewski-Szmek3f93da92015-01-09 02:00:37 -0500189 HASHMAP_FOREACH(j, h, i) {
190 unsigned n;
191
192 for (n = 0; n < j->count; n++) {
193 Item *item = j->items + n;
194
195 if (fnmatch(item->path, match, FNM_PATHNAME|FNM_PERIOD) == 0)
196 return item;
197 }
198 }
Lennart Poetteringb8bb3e82011-02-12 09:31:25 +0100199
200 return NULL;
201}
202
Lennart Poettering17b90522011-02-14 21:55:06 +0100203static void load_unix_sockets(void) {
Harald Hoyer7fd1b192013-04-18 09:11:22 +0200204 _cleanup_fclose_ FILE *f = NULL;
Lennart Poettering17b90522011-02-14 21:55:06 +0100205 char line[LINE_MAX];
206
207 if (unix_sockets)
208 return;
209
210 /* We maintain a cache of the sockets we found in
211 * /proc/net/unix to speed things up a little. */
212
Michal Schmidtd5099ef2014-08-13 01:00:18 +0200213 unix_sockets = set_new(&string_hash_ops);
Lennart Poetteringfdcad0c2012-01-11 22:07:35 +0100214 if (!unix_sockets)
Lennart Poettering17b90522011-02-14 21:55:06 +0100215 return;
216
Lennart Poetteringfdcad0c2012-01-11 22:07:35 +0100217 f = fopen("/proc/net/unix", "re");
218 if (!f)
Lennart Poettering17b90522011-02-14 21:55:06 +0100219 return;
220
Lennart Poetteringfdcad0c2012-01-11 22:07:35 +0100221 /* Skip header */
222 if (!fgets(line, sizeof(line), f))
Lennart Poettering17b90522011-02-14 21:55:06 +0100223 goto fail;
224
225 for (;;) {
226 char *p, *s;
227 int k;
228
Lennart Poetteringfdcad0c2012-01-11 22:07:35 +0100229 if (!fgets(line, sizeof(line), f))
Lennart Poettering17b90522011-02-14 21:55:06 +0100230 break;
231
232 truncate_nl(line);
233
Lennart Poetteringfdcad0c2012-01-11 22:07:35 +0100234 p = strchr(line, ':');
235 if (!p)
Lennart Poettering17b90522011-02-14 21:55:06 +0100236 continue;
237
Lennart Poetteringfdcad0c2012-01-11 22:07:35 +0100238 if (strlen(p) < 37)
239 continue;
240
241 p += 37;
Lennart Poettering17b90522011-02-14 21:55:06 +0100242 p += strspn(p, WHITESPACE);
Lennart Poetteringfdcad0c2012-01-11 22:07:35 +0100243 p += strcspn(p, WHITESPACE); /* skip one more word */
Lennart Poettering17b90522011-02-14 21:55:06 +0100244 p += strspn(p, WHITESPACE);
245
246 if (*p != '/')
247 continue;
248
Lennart Poetteringfdcad0c2012-01-11 22:07:35 +0100249 s = strdup(p);
250 if (!s)
Lennart Poettering17b90522011-02-14 21:55:06 +0100251 goto fail;
252
Lennart Poettering4ff21d82011-02-17 13:13:34 +0100253 path_kill_slashes(s);
254
Zbigniew Jędrzejewski-Szmekef422022013-04-22 23:12:15 -0400255 k = set_consume(unix_sockets, s);
256 if (k < 0 && k != -EEXIST)
257 goto fail;
Lennart Poettering17b90522011-02-14 21:55:06 +0100258 }
259
260 return;
261
262fail:
263 set_free_free(unix_sockets);
264 unix_sockets = NULL;
Lennart Poettering17b90522011-02-14 21:55:06 +0100265}
266
267static bool unix_socket_alive(const char *fn) {
268 assert(fn);
269
270 load_unix_sockets();
271
272 if (unix_sockets)
273 return !!set_get(unix_sockets, (char*) fn);
274
275 /* We don't know, so assume yes */
276 return true;
277}
278
Kay Sievers99d680a2013-03-13 13:12:36 +0100279static int dir_is_mount_point(DIR *d, const char *subdir) {
Lennart Poetteringcde684a2014-06-10 22:50:46 +0200280
Zbigniew Jędrzejewski-Szmek2695c5c2015-01-07 10:28:04 -0500281 union file_handle_union h = FILE_HANDLE_INIT;
Kay Sievers99d680a2013-03-13 13:12:36 +0100282 int mount_id_parent, mount_id;
283 int r_p, r;
284
Dave Reisner370c8602014-04-19 13:22:35 -0400285 r_p = name_to_handle_at(dirfd(d), ".", &h.handle, &mount_id_parent, 0);
Kay Sievers99d680a2013-03-13 13:12:36 +0100286 if (r_p < 0)
287 r_p = -errno;
288
Dave Reisner370c8602014-04-19 13:22:35 -0400289 h.handle.handle_bytes = MAX_HANDLE_SZ;
290 r = name_to_handle_at(dirfd(d), subdir, &h.handle, &mount_id, 0);
Kay Sievers99d680a2013-03-13 13:12:36 +0100291 if (r < 0)
292 r = -errno;
293
294 /* got no handle; make no assumptions, return error */
295 if (r_p < 0 && r < 0)
296 return r_p;
297
298 /* got both handles; if they differ, it is a mount point */
299 if (r_p >= 0 && r >= 0)
300 return mount_id_parent != mount_id;
301
302 /* got only one handle; assume different mount points if one
303 * of both queries was not supported by the filesystem */
Dave Reisnere7aab542014-10-11 20:35:06 -0400304 if (r_p == -ENOSYS || r_p == -EOPNOTSUPP || r == -ENOSYS || r == -EOPNOTSUPP)
Kay Sievers99d680a2013-03-13 13:12:36 +0100305 return true;
306
307 /* return error */
308 if (r_p < 0)
309 return r_p;
310 return r;
311}
312
Zbigniew Jędrzejewski-Szmekdf99a9e2014-01-02 00:02:31 -0500313static DIR* xopendirat_nomod(int dirfd, const char *path) {
314 DIR *dir;
315
316 dir = xopendirat(dirfd, path, O_NOFOLLOW|O_NOATIME);
Lennart Poettering15322272015-03-23 18:54:31 +0700317 if (dir)
318 return dir;
319
320 log_debug_errno(errno, "Cannot open %sdirectory \"%s\": %m", dirfd == AT_FDCWD ? "" : "sub", path);
321 if (errno != EPERM)
322 return NULL;
323
324 dir = xopendirat(dirfd, path, O_NOFOLLOW);
325 if (!dir)
326 log_debug_errno(errno, "Cannot open %sdirectory \"%s\": %m", dirfd == AT_FDCWD ? "" : "sub", path);
Zbigniew Jędrzejewski-Szmekdf99a9e2014-01-02 00:02:31 -0500327
328 return dir;
329}
330
331static DIR* opendir_nomod(const char *path) {
332 return xopendirat_nomod(AT_FDCWD, path);
333}
334
Lennart Poettering3b63d2d2010-10-18 22:38:41 +0200335static int dir_cleanup(
Michal Sekletar78a92a52013-01-18 16:13:08 +0100336 Item *i,
Lennart Poettering3b63d2d2010-10-18 22:38:41 +0200337 const char *p,
338 DIR *d,
339 const struct stat *ds,
340 usec_t cutoff,
341 dev_t rootdev,
342 bool mountpoint,
Lennart Poettering24f3a372012-06-20 09:05:50 +0200343 int maxdepth,
Lennart Poettering265ffa12013-09-17 16:33:30 -0500344 bool keep_this_level) {
345
Lennart Poettering3b63d2d2010-10-18 22:38:41 +0200346 struct dirent *dent;
347 struct timespec times[2];
348 bool deleted = false;
Lennart Poettering3b63d2d2010-10-18 22:38:41 +0200349 int r = 0;
350
351 while ((dent = readdir(d))) {
352 struct stat s;
353 usec_t age;
Harald Hoyer7fd1b192013-04-18 09:11:22 +0200354 _cleanup_free_ char *sub_path = NULL;
Lennart Poettering3b63d2d2010-10-18 22:38:41 +0200355
Zbigniew Jędrzejewski-Szmek7fcb4b92015-01-22 23:35:34 -0500356 if (STR_IN_SET(dent->d_name, ".", ".."))
Lennart Poettering3b63d2d2010-10-18 22:38:41 +0200357 continue;
358
359 if (fstatat(dirfd(d), dent->d_name, &s, AT_SYMLINK_NOFOLLOW) < 0) {
Kay Sieversca2f4172013-10-17 03:20:46 +0200360 if (errno == ENOENT)
361 continue;
Lennart Poettering3b63d2d2010-10-18 22:38:41 +0200362
Kay Sieversca2f4172013-10-17 03:20:46 +0200363 /* FUSE, NFS mounts, SELinux might return EACCES */
364 if (errno == EACCES)
Michal Schmidt56f64d92014-11-28 19:29:59 +0100365 log_debug_errno(errno, "stat(%s/%s) failed: %m", p, dent->d_name);
Kay Sieversca2f4172013-10-17 03:20:46 +0200366 else
Michal Schmidt56f64d92014-11-28 19:29:59 +0100367 log_error_errno(errno, "stat(%s/%s) failed: %m", p, dent->d_name);
Kay Sieversca2f4172013-10-17 03:20:46 +0200368 r = -errno;
Lennart Poettering3b63d2d2010-10-18 22:38:41 +0200369 continue;
370 }
371
372 /* Stay on the same filesystem */
Zbigniew Jędrzejewski-Szmek582deb82015-01-24 01:54:05 -0500373 if (s.st_dev != rootdev) {
374 log_debug("Ignoring \"%s/%s\": different filesystem.", p, dent->d_name);
Lennart Poettering3b63d2d2010-10-18 22:38:41 +0200375 continue;
Zbigniew Jędrzejewski-Szmek582deb82015-01-24 01:54:05 -0500376 }
Lennart Poettering3b63d2d2010-10-18 22:38:41 +0200377
Kay Sievers99d680a2013-03-13 13:12:36 +0100378 /* Try to detect bind mounts of the same filesystem instance; they
379 * do not differ in device major/minors. This type of query is not
380 * supported on all kernels or filesystem types though. */
Zbigniew Jędrzejewski-Szmek582deb82015-01-24 01:54:05 -0500381 if (S_ISDIR(s.st_mode) && dir_is_mount_point(d, dent->d_name) > 0) {
382 log_debug("Ignoring \"%s/%s\": different mount of the same filesystem.",
383 p, dent->d_name);
Kay Sievers99d680a2013-03-13 13:12:36 +0100384 continue;
Zbigniew Jędrzejewski-Szmek582deb82015-01-24 01:54:05 -0500385 }
Kay Sievers99d680a2013-03-13 13:12:36 +0100386
Lennart Poettering3b63d2d2010-10-18 22:38:41 +0200387 /* Do not delete read-only files owned by root */
Zbigniew Jędrzejewski-Szmek582deb82015-01-24 01:54:05 -0500388 if (s.st_uid == 0 && !(s.st_mode & S_IWUSR)) {
389 log_debug("Ignoring \"%s/%s\": read-only and owner by root.", p, dent->d_name);
Lennart Poettering3b63d2d2010-10-18 22:38:41 +0200390 continue;
Zbigniew Jędrzejewski-Szmek582deb82015-01-24 01:54:05 -0500391 }
Lennart Poettering3b63d2d2010-10-18 22:38:41 +0200392
Lennart Poetteringcde684a2014-06-10 22:50:46 +0200393 sub_path = strjoin(p, "/", dent->d_name, NULL);
394 if (!sub_path) {
Shawn Landden0d0f0c52012-07-25 14:55:59 -0700395 r = log_oom();
Lennart Poettering3b63d2d2010-10-18 22:38:41 +0200396 goto finish;
397 }
398
399 /* Is there an item configured for this path? */
Zbigniew Jędrzejewski-Szmek582deb82015-01-24 01:54:05 -0500400 if (hashmap_get(items, sub_path)) {
401 log_debug("Ignoring \"%s\": a separate entry exists.", sub_path);
Lennart Poettering3b63d2d2010-10-18 22:38:41 +0200402 continue;
Zbigniew Jędrzejewski-Szmek582deb82015-01-24 01:54:05 -0500403 }
Lennart Poettering3b63d2d2010-10-18 22:38:41 +0200404
Zbigniew Jędrzejewski-Szmek582deb82015-01-24 01:54:05 -0500405 if (find_glob(globs, sub_path)) {
406 log_debug("Ignoring \"%s\": a separate glob exists.", sub_path);
Lennart Poetteringb8bb3e82011-02-12 09:31:25 +0100407 continue;
Zbigniew Jędrzejewski-Szmek582deb82015-01-24 01:54:05 -0500408 }
Lennart Poetteringb8bb3e82011-02-12 09:31:25 +0100409
Lennart Poettering3b63d2d2010-10-18 22:38:41 +0200410 if (S_ISDIR(s.st_mode)) {
411
412 if (mountpoint &&
413 streq(dent->d_name, "lost+found") &&
Zbigniew Jędrzejewski-Szmek582deb82015-01-24 01:54:05 -0500414 s.st_uid == 0) {
415 log_debug("Ignoring \"%s\".", sub_path);
Lennart Poettering3b63d2d2010-10-18 22:38:41 +0200416 continue;
Zbigniew Jędrzejewski-Szmek582deb82015-01-24 01:54:05 -0500417 }
Lennart Poettering3b63d2d2010-10-18 22:38:41 +0200418
419 if (maxdepth <= 0)
Zbigniew Jędrzejewski-Szmek582deb82015-01-24 01:54:05 -0500420 log_warning("Reached max depth on \"%s\".", sub_path);
Lennart Poettering3b63d2d2010-10-18 22:38:41 +0200421 else {
Harald Hoyer7fd1b192013-04-18 09:11:22 +0200422 _cleanup_closedir_ DIR *sub_dir;
Lennart Poettering3b63d2d2010-10-18 22:38:41 +0200423 int q;
424
Zbigniew Jędrzejewski-Szmekdf99a9e2014-01-02 00:02:31 -0500425 sub_dir = xopendirat_nomod(dirfd(d), dent->d_name);
Lennart Poetteringcde684a2014-06-10 22:50:46 +0200426 if (!sub_dir) {
Zbigniew Jędrzejewski-Szmek582deb82015-01-24 01:54:05 -0500427 if (errno != ENOENT)
428 r = log_error_errno(errno, "opendir(%s) failed: %m", sub_path);
Lennart Poettering3b63d2d2010-10-18 22:38:41 +0200429
430 continue;
431 }
432
Michal Sekletar78a92a52013-01-18 16:13:08 +0100433 q = dir_cleanup(i, sub_path, sub_dir, &s, cutoff, rootdev, false, maxdepth-1, false);
Lennart Poettering3b63d2d2010-10-18 22:38:41 +0200434 if (q < 0)
435 r = q;
436 }
437
Lennart Poettering24f3a372012-06-20 09:05:50 +0200438 /* Note: if you are wondering why we don't
439 * support the sticky bit for excluding
440 * directories from cleaning like we do it for
441 * other file system objects: well, the sticky
442 * bit already has a meaning for directories,
443 * so we don't want to overload that. */
444
Zbigniew Jędrzejewski-Szmek582deb82015-01-24 01:54:05 -0500445 if (keep_this_level) {
446 log_debug("Keeping \"%s\".", sub_path);
Lennart Poettering24f3a372012-06-20 09:05:50 +0200447 continue;
Zbigniew Jędrzejewski-Szmek582deb82015-01-24 01:54:05 -0500448 }
Lennart Poettering24f3a372012-06-20 09:05:50 +0200449
Lennart Poettering3b63d2d2010-10-18 22:38:41 +0200450 /* Ignore ctime, we change it when deleting */
Zbigniew Jędrzejewski-Szmek582deb82015-01-24 01:54:05 -0500451 age = timespec_load(&s.st_mtim);
452 if (age >= cutoff) {
453 char a[FORMAT_TIMESTAMP_MAX];
454 /* Follows spelling in stat(1). */
455 log_debug("Directory \"%s\": modify time %s is too new.",
456 sub_path,
457 format_timestamp_us(a, sizeof(a), age));
Lennart Poettering3b63d2d2010-10-18 22:38:41 +0200458 continue;
Zbigniew Jędrzejewski-Szmek582deb82015-01-24 01:54:05 -0500459 }
Lennart Poettering3b63d2d2010-10-18 22:38:41 +0200460
Zbigniew Jędrzejewski-Szmek582deb82015-01-24 01:54:05 -0500461 age = timespec_load(&s.st_atim);
462 if (age >= cutoff) {
463 char a[FORMAT_TIMESTAMP_MAX];
464 log_debug("Directory \"%s\": access time %s is too new.",
465 sub_path,
466 format_timestamp_us(a, sizeof(a), age));
467 continue;
468 }
469
Zbigniew Jędrzejewski-Szmek61253222015-01-31 01:03:09 -0500470 log_debug("Removing directory \"%s\".", sub_path);
471 if (unlinkat(dirfd(d), dent->d_name, AT_REMOVEDIR) < 0)
472 if (errno != ENOENT && errno != ENOTEMPTY) {
473 log_error_errno(errno, "rmdir(%s): %m", sub_path);
474 r = -errno;
Lennart Poettering3b63d2d2010-10-18 22:38:41 +0200475 }
Lennart Poettering3b63d2d2010-10-18 22:38:41 +0200476
477 } else {
Lennart Poettering9c737362010-11-14 20:12:51 +0100478 /* Skip files for which the sticky bit is
479 * set. These are semantics we define, and are
480 * unknown elsewhere. See XDG_RUNTIME_DIR
481 * specification for details. */
Zbigniew Jędrzejewski-Szmek582deb82015-01-24 01:54:05 -0500482 if (s.st_mode & S_ISVTX) {
483 log_debug("Skipping \"%s\": sticky bit set.", sub_path);
Lennart Poettering9c737362010-11-14 20:12:51 +0100484 continue;
Lennart Poettering3b63d2d2010-10-18 22:38:41 +0200485 }
486
Zbigniew Jędrzejewski-Szmek582deb82015-01-24 01:54:05 -0500487 if (mountpoint && S_ISREG(s.st_mode))
488 if ((streq(dent->d_name, ".journal") && s.st_uid == 0) ||
489 streq(dent->d_name, "aquota.user") ||
490 streq(dent->d_name, "aquota.group")) {
491 log_debug("Skipping \"%s\".", sub_path);
492 continue;
493 }
494
Lennart Poettering17b90522011-02-14 21:55:06 +0100495 /* Ignore sockets that are listed in /proc/net/unix */
Zbigniew Jędrzejewski-Szmek582deb82015-01-24 01:54:05 -0500496 if (S_ISSOCK(s.st_mode) && unix_socket_alive(sub_path)) {
497 log_debug("Skipping \"%s\": live socket.", sub_path);
Lennart Poettering17b90522011-02-14 21:55:06 +0100498 continue;
Zbigniew Jędrzejewski-Szmek582deb82015-01-24 01:54:05 -0500499 }
Lennart Poettering17b90522011-02-14 21:55:06 +0100500
Lennart Poettering78ab08e2011-02-19 14:20:16 +0100501 /* Ignore device nodes */
Zbigniew Jędrzejewski-Szmek582deb82015-01-24 01:54:05 -0500502 if (S_ISCHR(s.st_mode) || S_ISBLK(s.st_mode)) {
503 log_debug("Skipping \"%s\": a device.", sub_path);
Lennart Poettering78ab08e2011-02-19 14:20:16 +0100504 continue;
Zbigniew Jędrzejewski-Szmek582deb82015-01-24 01:54:05 -0500505 }
Lennart Poettering78ab08e2011-02-19 14:20:16 +0100506
Lennart Poettering24f3a372012-06-20 09:05:50 +0200507 /* Keep files on this level around if this is
508 * requested */
Zbigniew Jędrzejewski-Szmek582deb82015-01-24 01:54:05 -0500509 if (keep_this_level) {
510 log_debug("Keeping \"%s\".", sub_path);
Lennart Poettering24f3a372012-06-20 09:05:50 +0200511 continue;
Lennart Poettering3b63d2d2010-10-18 22:38:41 +0200512 }
513
Zbigniew Jędrzejewski-Szmek582deb82015-01-24 01:54:05 -0500514 age = timespec_load(&s.st_mtim);
515 if (age >= cutoff) {
516 char a[FORMAT_TIMESTAMP_MAX];
517 /* Follows spelling in stat(1). */
518 log_debug("File \"%s\": modify time %s is too new.",
519 sub_path,
520 format_timestamp_us(a, sizeof(a), age));
521 continue;
522 }
523
524 age = timespec_load(&s.st_atim);
525 if (age >= cutoff) {
526 char a[FORMAT_TIMESTAMP_MAX];
527 log_debug("File \"%s\": access time %s is too new.",
528 sub_path,
529 format_timestamp_us(a, sizeof(a), age));
530 continue;
531 }
532
533 age = timespec_load(&s.st_ctim);
534 if (age >= cutoff) {
535 char a[FORMAT_TIMESTAMP_MAX];
536 log_debug("File \"%s\": change time %s is too new.",
537 sub_path,
538 format_timestamp_us(a, sizeof(a), age));
539 continue;
540 }
541
542 log_debug("unlink \"%s\"", sub_path);
543
544 if (unlinkat(dirfd(d), dent->d_name, 0) < 0)
545 if (errno != ENOENT)
546 r = log_error_errno(errno, "unlink(%s): %m", sub_path);
547
Lennart Poettering3b63d2d2010-10-18 22:38:41 +0200548 deleted = true;
549 }
550 }
551
552finish:
553 if (deleted) {
Zbigniew Jędrzejewski-Szmek582deb82015-01-24 01:54:05 -0500554 usec_t age1, age2;
555 char a[FORMAT_TIMESTAMP_MAX], b[FORMAT_TIMESTAMP_MAX];
556
Lennart Poettering3b63d2d2010-10-18 22:38:41 +0200557 /* Restore original directory timestamps */
558 times[0] = ds->st_atim;
559 times[1] = ds->st_mtim;
560
Zbigniew Jędrzejewski-Szmek582deb82015-01-24 01:54:05 -0500561 age1 = timespec_load(&ds->st_atim);
562 age2 = timespec_load(&ds->st_mtim);
563 log_debug("Restoring access and modification time on \"%s\": %s, %s",
564 p,
565 format_timestamp_us(a, sizeof(a), age1),
566 format_timestamp_us(b, sizeof(b), age2));
Lennart Poettering3b63d2d2010-10-18 22:38:41 +0200567 if (futimens(dirfd(d), times) < 0)
Michal Schmidt56f64d92014-11-28 19:29:59 +0100568 log_error_errno(errno, "utimensat(%s): %m", p);
Lennart Poettering3b63d2d2010-10-18 22:38:41 +0200569 }
570
Lennart Poettering3b63d2d2010-10-18 22:38:41 +0200571 return r;
572}
573
Zbigniew Jędrzejewski-Szmekb705ab62015-01-18 02:10:00 -0500574static int path_set_perms(Item *i, const char *path) {
Michael Olbrich1924a972014-08-17 09:45:00 +0200575 struct stat st;
576 bool st_valid;
577
Lennart Poetteringcde684a2014-06-10 22:50:46 +0200578 assert(i);
579 assert(path);
580
Michael Olbrich1924a972014-08-17 09:45:00 +0200581 st_valid = stat(path, &st) == 0;
582
Michal Schmidt062e01b2011-12-16 18:00:11 +0100583 /* not using i->path directly because it may be a glob */
Lennart Poetteringabef3f92014-06-11 10:14:07 +0200584 if (i->mode_set) {
585 mode_t m = i->mode;
586
Michael Olbrich1924a972014-08-17 09:45:00 +0200587 if (i->mask_perms && st_valid) {
588 if (!(st.st_mode & 0111))
589 m &= ~0111;
590 if (!(st.st_mode & 0222))
591 m &= ~0222;
592 if (!(st.st_mode & 0444))
593 m &= ~0444;
594 if (!S_ISDIR(st.st_mode))
595 m &= ~07000; /* remove sticky/sgid/suid bit, unless directory */
Lennart Poetteringabef3f92014-06-11 10:14:07 +0200596 }
597
Zbigniew Jędrzejewski-Szmek582deb82015-01-24 01:54:05 -0500598 if (st_valid && m == (st.st_mode & 07777))
599 log_debug("\"%s\" has right mode %o", path, st.st_mode);
600 else {
601 log_debug("chmod \"%s\" to mode %o", path, m);
Michal Schmidt4a62c712014-11-28 19:57:32 +0100602 if (chmod(path, m) < 0)
603 return log_error_errno(errno, "chmod(%s) failed: %m", path);
Michal Schmidt062e01b2011-12-16 18:00:11 +0100604 }
Lennart Poetteringabef3f92014-06-11 10:14:07 +0200605 }
Michal Schmidt062e01b2011-12-16 18:00:11 +0100606
Zbigniew Jędrzejewski-Szmek582deb82015-01-24 01:54:05 -0500607 if ((!st_valid || i->uid != st.st_uid || i->gid != st.st_gid) &&
608 (i->uid_set || i->gid_set)) {
609 log_debug("chown \"%s\" to "UID_FMT"."GID_FMT,
610 path,
611 i->uid_set ? i->uid : UID_INVALID,
612 i->gid_set ? i->gid : GID_INVALID);
Michal Schmidt062e01b2011-12-16 18:00:11 +0100613 if (chown(path,
Lennart Poetteringfed1e722014-11-28 20:51:01 +0100614 i->uid_set ? i->uid : UID_INVALID,
Zbigniew Jędrzejewski-Szmek505ef0e2015-01-09 01:10:02 -0500615 i->gid_set ? i->gid : GID_INVALID) < 0)
Michal Schmidt062e01b2011-12-16 18:00:11 +0100616
Zbigniew Jędrzejewski-Szmek505ef0e2015-01-09 01:10:02 -0500617 return log_error_errno(errno, "chown(%s) failed: %m", path);
Zbigniew Jędrzejewski-Szmek582deb82015-01-24 01:54:05 -0500618 }
Michal Schmidt062e01b2011-12-16 18:00:11 +0100619
Lennart Poettering9855d6c2014-06-11 09:19:57 +0200620 return label_fix(path, false, false);
Michal Schmidt062e01b2011-12-16 18:00:11 +0100621}
622
Maciej Wereskiebf4e802014-12-04 10:32:10 +0100623static int get_xattrs_from_arg(Item *i) {
Maciej Wereskiebf4e802014-12-04 10:32:10 +0100624 const char *p;
625 int r;
626
627 assert(i);
Zbigniew Jędrzejewski-Szmek505ef0e2015-01-09 01:10:02 -0500628 assert(i->argument);
Maciej Wereskiebf4e802014-12-04 10:32:10 +0100629
Maciej Wereskiebf4e802014-12-04 10:32:10 +0100630 p = i->argument;
631
Lennart Poettering4034a062015-03-23 18:55:36 +0700632 for (;;) {
633 _cleanup_free_ char *name = NULL, *value = NULL, *xattr = NULL;
634
635 r = unquote_first_word(&p, &xattr, UNQUOTE_CUNESCAPE);
636 if (r < 0)
637 log_warning_errno(r, "Failed to parse extended attribute, ignoring: %s", p);
638 if (r <= 0)
639 break;
Zbigniew Jędrzejewski-Szmek505ef0e2015-01-09 01:10:02 -0500640
Maciej Wereskiebf4e802014-12-04 10:32:10 +0100641 r = split_pair(xattr, "=", &name, &value);
642 if (r < 0) {
Lennart Poettering4034a062015-03-23 18:55:36 +0700643 log_warning_errno(r, "Failed to parse extended attribute, ignoring: %s", xattr);
Maciej Wereskiebf4e802014-12-04 10:32:10 +0100644 continue;
645 }
Zbigniew Jędrzejewski-Szmek505ef0e2015-01-09 01:10:02 -0500646
Lennart Poettering4034a062015-03-23 18:55:36 +0700647 if (isempty(name) || isempty(value)) {
648 log_warning("Malformed xattr found, ignoring: %s", xattr);
Maciej Wereskiebf4e802014-12-04 10:32:10 +0100649 continue;
650 }
Zbigniew Jędrzejewski-Szmek505ef0e2015-01-09 01:10:02 -0500651
Lennart Poettering4034a062015-03-23 18:55:36 +0700652 if (strv_push_pair(&i->xattrs, name, value) < 0)
Maciej Wereskiebf4e802014-12-04 10:32:10 +0100653 return log_oom();
Zbigniew Jędrzejewski-Szmek505ef0e2015-01-09 01:10:02 -0500654
Lennart Poettering4034a062015-03-23 18:55:36 +0700655 name = value = NULL;
Maciej Wereskiebf4e802014-12-04 10:32:10 +0100656 }
657
Lennart Poettering4034a062015-03-23 18:55:36 +0700658 return 0;
Maciej Wereskiebf4e802014-12-04 10:32:10 +0100659}
660
Zbigniew Jędrzejewski-Szmekb705ab62015-01-18 02:10:00 -0500661static int path_set_xattrs(Item *i, const char *path) {
Maciej Wereskiebf4e802014-12-04 10:32:10 +0100662 char **name, **value;
663
664 assert(i);
665 assert(path);
666
Maciej Wereskiebf4e802014-12-04 10:32:10 +0100667 STRV_FOREACH_PAIR(name, value, i->xattrs) {
668 int n;
Zbigniew Jędrzejewski-Szmek505ef0e2015-01-09 01:10:02 -0500669
Maciej Wereskiebf4e802014-12-04 10:32:10 +0100670 n = strlen(*value);
Zbigniew Jędrzejewski-Szmek582deb82015-01-24 01:54:05 -0500671 log_debug("\"%s\": setting xattr \"%s=%s\"", path, *name, *value);
Maciej Wereskiebf4e802014-12-04 10:32:10 +0100672 if (lsetxattr(path, *name, *value, n, 0) < 0) {
Zbigniew Jędrzejewski-Szmek505ef0e2015-01-09 01:10:02 -0500673 log_error("Setting extended attribute %s=%s on %s failed: %m",
674 *name, *value, path);
Maciej Wereskiebf4e802014-12-04 10:32:10 +0100675 return -errno;
676 }
677 }
678 return 0;
679}
680
Zbigniew Jędrzejewski-Szmekf8eeeaf2015-01-17 23:27:39 -0500681static int get_acls_from_arg(Item *item) {
682#ifdef HAVE_ACL
683 int r;
Zbigniew Jędrzejewski-Szmekf8eeeaf2015-01-17 23:27:39 -0500684
685 assert(item);
686
Zbigniew Jędrzejewski-Szmek50d9e462015-01-18 05:02:47 -0500687 /* If force (= modify) is set, we will not modify the acl
688 * afterwards, so the mask can be added now if necessary. */
689 r = parse_acl(item->argument, &item->acl_access, &item->acl_default, !item->force);
Zbigniew Jędrzejewski-Szmekf8eeeaf2015-01-17 23:27:39 -0500690 if (r < 0)
Lennart Poettering4034a062015-03-23 18:55:36 +0700691 log_warning_errno(r, "Failed to parse ACL \"%s\": %m. Ignoring", item->argument);
Zbigniew Jędrzejewski-Szmekf8eeeaf2015-01-17 23:27:39 -0500692#else
693 log_warning_errno(ENOSYS, "ACLs are not supported. Ignoring");
694#endif
695
696 return 0;
697}
698
Zbigniew Jędrzejewski-Szmek35888b62015-02-02 20:28:39 -0500699#ifdef HAVE_ACL
Zbigniew Jędrzejewski-Szmek50d9e462015-01-18 05:02:47 -0500700static int path_set_acl(const char *path, acl_type_t type, acl_t acl, bool modify) {
Zbigniew Jędrzejewski-Szmekdd4105b2015-01-18 18:22:27 -0500701 _cleanup_(acl_freep) acl_t dup = NULL;
Zbigniew Jędrzejewski-Szmek50d9e462015-01-18 05:02:47 -0500702 int r;
Zbigniew Jędrzejewski-Szmek582deb82015-01-24 01:54:05 -0500703 _cleanup_(acl_free_charpp) char *t = NULL;
Zbigniew Jędrzejewski-Szmek50d9e462015-01-18 05:02:47 -0500704
Hans-Peter Deifeld873e872015-03-03 00:35:08 +0100705 /* Returns 0 for success, positive error if already warned,
706 * negative error otherwise. */
707
Zbigniew Jędrzejewski-Szmek50d9e462015-01-18 05:02:47 -0500708 if (modify) {
Zbigniew Jędrzejewski-Szmekdd4105b2015-01-18 18:22:27 -0500709 r = acls_for_file(path, type, acl, &dup);
Zbigniew Jędrzejewski-Szmek50d9e462015-01-18 05:02:47 -0500710 if (r < 0)
711 return r;
Zbigniew Jędrzejewski-Szmek50d9e462015-01-18 05:02:47 -0500712
Zbigniew Jędrzejewski-Szmekdd4105b2015-01-18 18:22:27 -0500713 r = calc_acl_mask_if_needed(&dup);
714 if (r < 0)
715 return r;
716 } else {
717 dup = acl_dup(acl);
718 if (!dup)
719 return -errno;
720
721 /* the mask was already added earlier if needed */
722 }
723
724 r = add_base_acls_if_needed(&dup, path);
725 if (r < 0)
726 return r;
727
Zbigniew Jędrzejewski-Szmek582deb82015-01-24 01:54:05 -0500728 t = acl_to_any_text(dup, NULL, ',', TEXT_ABBREVIATE);
729 log_debug("\"%s\": setting %s ACL \"%s\"", path,
730 type == ACL_TYPE_ACCESS ? "access" : "default",
731 strna(t));
732
Zbigniew Jędrzejewski-Szmekdd4105b2015-01-18 18:22:27 -0500733 r = acl_set_file(path, type, dup);
Zbigniew Jędrzejewski-Szmek582deb82015-01-24 01:54:05 -0500734 if (r < 0)
Hans-Peter Deifeld873e872015-03-03 00:35:08 +0100735 return -log_error_errno(errno,
736 "Setting %s ACL \"%s\" on %s failed: %m",
737 type == ACL_TYPE_ACCESS ? "access" : "default",
738 strna(t), path);
739
Zbigniew Jędrzejewski-Szmek582deb82015-01-24 01:54:05 -0500740 return 0;
Zbigniew Jędrzejewski-Szmek50d9e462015-01-18 05:02:47 -0500741}
Zbigniew Jędrzejewski-Szmek35888b62015-02-02 20:28:39 -0500742#endif
Zbigniew Jędrzejewski-Szmek50d9e462015-01-18 05:02:47 -0500743
Zbigniew Jędrzejewski-Szmekb705ab62015-01-18 02:10:00 -0500744static int path_set_acls(Item *item, const char *path) {
Hans-Peter Deifeld873e872015-03-03 00:35:08 +0100745 int r = 0;
Zbigniew Jędrzejewski-Szmekf8eeeaf2015-01-17 23:27:39 -0500746#ifdef HAVE_ACL
Zbigniew Jędrzejewski-Szmekf8eeeaf2015-01-17 23:27:39 -0500747 assert(item);
748 assert(path);
749
Hans-Peter Deifeld873e872015-03-03 00:35:08 +0100750 if (item->acl_access)
Zbigniew Jędrzejewski-Szmek50d9e462015-01-18 05:02:47 -0500751 r = path_set_acl(path, ACL_TYPE_ACCESS, item->acl_access, item->force);
Zbigniew Jędrzejewski-Szmekf8eeeaf2015-01-17 23:27:39 -0500752
Hans-Peter Deifeld873e872015-03-03 00:35:08 +0100753 if (r == 0 && item->acl_default)
Zbigniew Jędrzejewski-Szmek50d9e462015-01-18 05:02:47 -0500754 r = path_set_acl(path, ACL_TYPE_DEFAULT, item->acl_default, item->force);
Zbigniew Jędrzejewski-Szmekf8eeeaf2015-01-17 23:27:39 -0500755
Hans-Peter Deifeld873e872015-03-03 00:35:08 +0100756 if (r > 0)
757 return -r; /* already warned */
David Herrmann15411c02015-03-13 14:08:00 +0100758 else if (r == -EOPNOTSUPP) {
Hans-Peter Deifeld873e872015-03-03 00:35:08 +0100759 log_debug_errno(r, "ACLs not supported by file system at %s", path);
760 return 0;
761 } else if (r < 0)
762 log_error_errno(r, "ACL operation on \"%s\" failed: %m", path);
763#endif
764 return r;
Zbigniew Jędrzejewski-Szmekf8eeeaf2015-01-17 23:27:39 -0500765}
766
Goffredo Baroncelli22c3a6c2015-03-16 20:33:50 +0100767#define ALL_ATTRIBS \
768 FS_NOATIME_FL | \
769 FS_SYNC_FL | \
770 FS_DIRSYNC_FL | \
771 FS_APPEND_FL | \
772 FS_COMPR_FL | \
773 FS_NODUMP_FL | \
774 FS_EXTENT_FL | \
775 FS_IMMUTABLE_FL | \
776 FS_JOURNAL_DATA_FL | \
777 FS_SECRM_FL | \
778 FS_UNRM_FL | \
779 FS_NOTAIL_FL | \
780 FS_TOPDIR_FL | \
781 FS_NOCOW_FL
782
783static int get_attrib_from_arg(Item *item) {
784 static const unsigned attributes[] = {
785 [(uint8_t)'A'] = FS_NOATIME_FL, /* do not update atime */
786 [(uint8_t)'S'] = FS_SYNC_FL, /* Synchronous updates */
787 [(uint8_t)'D'] = FS_DIRSYNC_FL, /* dirsync behaviour (directories only) */
788 [(uint8_t)'a'] = FS_APPEND_FL, /* writes to file may only append */
789 [(uint8_t)'c'] = FS_COMPR_FL, /* Compress file */
790 [(uint8_t)'d'] = FS_NODUMP_FL, /* do not dump file */
791 [(uint8_t)'e'] = FS_EXTENT_FL, /* Top of directory hierarchies*/
792 [(uint8_t)'i'] = FS_IMMUTABLE_FL, /* Immutable file */
793 [(uint8_t)'j'] = FS_JOURNAL_DATA_FL, /* Reserved for ext3 */
794 [(uint8_t)'s'] = FS_SECRM_FL, /* Secure deletion */
795 [(uint8_t)'u'] = FS_UNRM_FL, /* Undelete */
796 [(uint8_t)'t'] = FS_NOTAIL_FL, /* file tail should not be merged */
797 [(uint8_t)'T'] = FS_TOPDIR_FL, /* Top of directory hierarchies*/
798 [(uint8_t)'C'] = FS_NOCOW_FL, /* Do not cow file */
799 };
800 char *p = item->argument;
801 enum {
802 MODE_ADD,
803 MODE_DEL,
804 MODE_SET
805 } mode = MODE_ADD;
806 unsigned long value = 0, mask = 0;
807
808 if (!p) {
809 log_error("\"%s\": setting ATTR need an argument", item->path);
810 return -EINVAL;
811 }
812
813 if (*p == '+') {
814 mode = MODE_ADD;
815 p++;
816 } else if (*p == '-') {
817 mode = MODE_DEL;
818 p++;
819 } else if (*p == '=') {
820 mode = MODE_SET;
821 p++;
822 }
823
824 if (!*p && mode != MODE_SET) {
825 log_error("\"%s\": setting ATTR: argument is empty", item->path);
826 return -EINVAL;
827 }
828 for (; *p ; p++) {
Thomas Hindoe Paaboel Andersena4135d32015-03-24 23:37:48 +0100829 if ((uint8_t)*p >= ELEMENTSOF(attributes) || attributes[(uint8_t)*p] == 0) {
Goffredo Baroncelli22c3a6c2015-03-16 20:33:50 +0100830 log_error("\"%s\": setting ATTR: unknown attr '%c'", item->path, *p);
831 return -EINVAL;
832 }
833 if (mode == MODE_ADD || mode == MODE_SET)
834 value |= attributes[(uint8_t)*p];
835 else
836 value &= ~attributes[(uint8_t)*p];
837 mask |= attributes[(uint8_t)*p];
838 }
839
840 if (mode == MODE_SET)
841 mask |= ALL_ATTRIBS;
842
843 assert(mask);
844
845 item->attrib_mask = mask;
846 item->attrib_value = value;
847 item->attrib_set = true;
848
849 return 0;
850
851}
852
853static int path_set_attrib(Item *item, const char *path) {
854 _cleanup_close_ int fd = -1;
855 int r;
856 unsigned f;
857 struct stat st;
858
859 /* do nothing */
860 if (item->attrib_mask == 0 || !item->attrib_set)
861 return 0;
862 /*
863 * It is OK to ignore an lstat() error, because the error
864 * will be catch by the open() below anyway
865 */
866 if (lstat(path, &st) == 0 &&
867 !S_ISREG(st.st_mode) && !S_ISDIR(st.st_mode)) {
868 return 0;
869 }
870
871 fd = open(path, O_RDONLY|O_NONBLOCK|O_CLOEXEC);
Goffredo Baroncelli22c3a6c2015-03-16 20:33:50 +0100872 if (fd < 0)
873 return log_error_errno(errno, "Cannot open \"%s\": %m", path);
874
875 f = item->attrib_value & item->attrib_mask;
876 if (!S_ISDIR(st.st_mode))
877 f &= ~FS_DIRSYNC_FL;
Lennart Poettering1ed8f8c2015-04-08 20:47:35 +0200878 r = chattr_fd(fd, f, item->attrib_mask);
Goffredo Baroncelli22c3a6c2015-03-16 20:33:50 +0100879 if (r < 0)
880 return log_error_errno(errno,
881 "Cannot set attrib for \"%s\", value=0x%08lx, mask=0x%08lx: %m",
882 path, item->attrib_value, item->attrib_mask);
883
884 return 0;
885}
886
Dave Reisnerd4e9eb92012-09-03 17:13:18 -0400887static int write_one_file(Item *i, const char *path) {
Lennart Poettering43ad6e32014-06-18 00:01:39 +0200888 _cleanup_close_ int fd = -1;
889 int flags, r = 0;
Dave Reisnerd4e9eb92012-09-03 17:13:18 -0400890 struct stat st;
Dave Reisnerd4e9eb92012-09-03 17:13:18 -0400891
Lennart Poettering874f1942014-06-10 22:48:56 +0200892 assert(i);
893 assert(path);
894
Lennart Poettering43ad6e32014-06-18 00:01:39 +0200895 flags = i->type == CREATE_FILE ? O_CREAT|O_APPEND|O_NOFOLLOW :
896 i->type == TRUNCATE_FILE ? O_CREAT|O_TRUNC|O_NOFOLLOW : 0;
Dave Reisnerd4e9eb92012-09-03 17:13:18 -0400897
Lennart Poettering43ad6e32014-06-18 00:01:39 +0200898 RUN_WITH_UMASK(0000) {
Lennart Poetteringecabcf82014-10-23 19:41:27 +0200899 mac_selinux_create_file_prepare(path, S_IFREG);
Lennart Poettering43ad6e32014-06-18 00:01:39 +0200900 fd = open(path, flags|O_NDELAY|O_CLOEXEC|O_WRONLY|O_NOCTTY, i->mode);
Lennart Poetteringecabcf82014-10-23 19:41:27 +0200901 mac_selinux_create_file_clear();
Lennart Poettering5c0d3982013-04-04 03:39:39 +0200902 }
Dave Reisnerd4e9eb92012-09-03 17:13:18 -0400903
904 if (fd < 0) {
Zbigniew Jędrzejewski-Szmek582deb82015-01-24 01:54:05 -0500905 if (i->type == WRITE_FILE && errno == ENOENT) {
906 log_debug_errno(errno, "Not writing \"%s\": %m", path);
Dave Reisnerd4e9eb92012-09-03 17:13:18 -0400907 return 0;
Zbigniew Jędrzejewski-Szmek582deb82015-01-24 01:54:05 -0500908 }
Dave Reisnerd4e9eb92012-09-03 17:13:18 -0400909
Michal Schmidt56f64d92014-11-28 19:29:59 +0100910 log_error_errno(errno, "Failed to create file %s: %m", path);
Dave Reisnerd4e9eb92012-09-03 17:13:18 -0400911 return -errno;
912 }
913
914 if (i->argument) {
Lennart Poettering527b7a42015-04-06 20:11:41 +0200915 _cleanup_free_ char *unescaped = NULL;
Zbigniew Jędrzejewski-Szmek582deb82015-01-24 01:54:05 -0500916
Lennart Poettering4034a062015-03-23 18:55:36 +0700917 log_debug("%s to \"%s\".", i->type == CREATE_FILE ? "Appending" : "Writing", path);
Dave Reisnerd4e9eb92012-09-03 17:13:18 -0400918
Lennart Poettering527b7a42015-04-06 20:11:41 +0200919 r = cunescape(i->argument, 0, &unescaped);
920 if (r < 0)
921 return log_error_errno(r, "Failed to unescape parameter to write: %s", i->argument);
Dave Reisnerd4e9eb92012-09-03 17:13:18 -0400922
Zbigniew Jędrzejewski-Szmek582deb82015-01-24 01:54:05 -0500923 r = loop_write(fd, unescaped, strlen(unescaped), false);
924 if (r < 0)
925 return log_error_errno(r, "Failed to write file \"%s\": %m", path);
926 } else
927 log_debug("\"%s\" has been created.", path);
Dave Reisnerd4e9eb92012-09-03 17:13:18 -0400928
Lennart Poettering43ad6e32014-06-18 00:01:39 +0200929 fd = safe_close(fd);
Dave Reisner3612fbc2012-09-12 16:21:00 -0400930
Michal Schmidt4a62c712014-11-28 19:57:32 +0100931 if (stat(path, &st) < 0)
932 return log_error_errno(errno, "stat(%s) failed: %m", path);
Dave Reisnerd4e9eb92012-09-03 17:13:18 -0400933
934 if (!S_ISREG(st.st_mode)) {
935 log_error("%s is not a file.", path);
936 return -EEXIST;
937 }
938
Zbigniew Jędrzejewski-Szmekb705ab62015-01-18 02:10:00 -0500939 r = path_set_perms(i, path);
Dave Reisnerd4e9eb92012-09-03 17:13:18 -0400940 if (r < 0)
941 return r;
942
943 return 0;
944}
945
Zbigniew Jędrzejewski-Szmek081043c2015-01-18 01:33:39 -0500946typedef int (*action_t)(Item *, const char *);
947
948static int item_do_children(Item *i, const char *path, action_t action) {
Harald Hoyer7fd1b192013-04-18 09:11:22 +0200949 _cleanup_closedir_ DIR *d;
Lennart Poetteringe73a03e2014-06-10 23:42:16 +0200950 int r = 0;
951
952 assert(i);
953 assert(path);
Michal Schmidta8d88782011-12-15 23:11:07 +0100954
955 /* This returns the first error we run into, but nevertheless
956 * tries to go on */
957
Zbigniew Jędrzejewski-Szmekdf99a9e2014-01-02 00:02:31 -0500958 d = opendir_nomod(path);
959 if (!d)
Lennart Poetteringe73a03e2014-06-10 23:42:16 +0200960 return errno == ENOENT || errno == ENOTDIR ? 0 : -errno;
Michal Schmidta8d88782011-12-15 23:11:07 +0100961
962 for (;;) {
Lennart Poetteringe73a03e2014-06-10 23:42:16 +0200963 _cleanup_free_ char *p = NULL;
Lennart Poettering7d5e9c02012-09-19 22:21:09 +0200964 struct dirent *de;
Lennart Poetteringe73a03e2014-06-10 23:42:16 +0200965 int q;
Michal Schmidta8d88782011-12-15 23:11:07 +0100966
Florian Weimerd78096b2013-12-19 12:26:07 +0100967 errno = 0;
968 de = readdir(d);
Lennart Poetteringe73a03e2014-06-10 23:42:16 +0200969 if (!de) {
970 if (errno != 0 && r == 0)
971 r = -errno;
972
Michal Schmidta8d88782011-12-15 23:11:07 +0100973 break;
974 }
975
Zbigniew Jędrzejewski-Szmek7fcb4b92015-01-22 23:35:34 -0500976 if (STR_IN_SET(de->d_name, ".", ".."))
Michal Schmidta8d88782011-12-15 23:11:07 +0100977 continue;
978
Lennart Poetteringe73a03e2014-06-10 23:42:16 +0200979 p = strjoin(path, "/", de->d_name, NULL);
980 if (!p)
981 return -ENOMEM;
Michal Schmidta8d88782011-12-15 23:11:07 +0100982
Zbigniew Jędrzejewski-Szmek081043c2015-01-18 01:33:39 -0500983 q = action(i, p);
Lennart Poetteringe73a03e2014-06-10 23:42:16 +0200984 if (q < 0 && q != -ENOENT && r == 0)
985 r = q;
Michal Schmidta8d88782011-12-15 23:11:07 +0100986
Lennart Poetteringe73a03e2014-06-10 23:42:16 +0200987 if (IN_SET(de->d_type, DT_UNKNOWN, DT_DIR)) {
Zbigniew Jędrzejewski-Szmek081043c2015-01-18 01:33:39 -0500988 q = item_do_children(i, p, action);
Lennart Poetteringe73a03e2014-06-10 23:42:16 +0200989 if (q < 0 && r == 0)
990 r = q;
Michal Schmidta8d88782011-12-15 23:11:07 +0100991 }
Michal Schmidta8d88782011-12-15 23:11:07 +0100992 }
993
Lennart Poetteringe73a03e2014-06-10 23:42:16 +0200994 return r;
Michal Schmidta8d88782011-12-15 23:11:07 +0100995}
996
Zbigniew Jędrzejewski-Szmek081043c2015-01-18 01:33:39 -0500997static int glob_item(Item *i, action_t action, bool recursive) {
Zbigniew Jędrzejewski-Szmekdf99a9e2014-01-02 00:02:31 -0500998 _cleanup_globfree_ glob_t g = {
Zbigniew Jędrzejewski-Szmekebf31a12015-01-26 10:39:03 -0500999 .gl_closedir = (void (*)(void *)) closedir,
1000 .gl_readdir = (struct dirent *(*)(void *)) readdir,
1001 .gl_opendir = (void *(*)(const char *)) opendir_nomod,
Zbigniew Jędrzejewski-Szmekdf99a9e2014-01-02 00:02:31 -05001002 .gl_lstat = lstat,
1003 .gl_stat = stat,
1004 };
Lennart Poetteringe73a03e2014-06-10 23:42:16 +02001005 int r = 0, k;
Michal Schmidt99e68c02011-12-15 23:45:26 +01001006 char **fn;
1007
Michal Schmidt99e68c02011-12-15 23:45:26 +01001008 errno = 0;
Zbigniew Jędrzejewski-Szmekdf99a9e2014-01-02 00:02:31 -05001009 k = glob(i->path, GLOB_NOSORT|GLOB_BRACE|GLOB_ALTDIRFUNC, NULL, &g);
Zbigniew Jędrzejewski-Szmek081043c2015-01-18 01:33:39 -05001010 if (k != 0 && k != GLOB_NOMATCH)
1011 return log_error_errno(errno ?: EIO, "glob(%s) failed: %m", i->path);
Zbigniew Jędrzejewski-Szmekc84a9482013-03-24 19:09:19 -04001012
1013 STRV_FOREACH(fn, g.gl_pathv) {
1014 k = action(i, *fn);
Lennart Poetteringe73a03e2014-06-10 23:42:16 +02001015 if (k < 0 && r == 0)
Zbigniew Jędrzejewski-Szmekc84a9482013-03-24 19:09:19 -04001016 r = k;
Zbigniew Jędrzejewski-Szmek081043c2015-01-18 01:33:39 -05001017
1018 if (recursive) {
1019 k = item_do_children(i, *fn, action);
1020 if (k < 0 && r == 0)
1021 r = k;
1022 }
Michal Schmidt99e68c02011-12-15 23:45:26 +01001023 }
1024
Michal Schmidt99e68c02011-12-15 23:45:26 +01001025 return r;
1026}
1027
Zbigniew Jędrzejewski-Szmek294929f2015-02-01 12:29:27 -05001028typedef enum {
1029 CREATION_NORMAL,
1030 CREATION_EXISTING,
1031 CREATION_FORCE,
Lennart Poettering7a7d5db2015-02-02 21:34:09 +01001032 _CREATION_MODE_MAX,
1033 _CREATION_MODE_INVALID = -1
Zbigniew Jędrzejewski-Szmek294929f2015-02-01 12:29:27 -05001034} CreationMode;
1035
Lennart Poettering7a7d5db2015-02-02 21:34:09 +01001036static const char *creation_mode_verb_table[_CREATION_MODE_MAX] = {
1037 [CREATION_NORMAL] = "Created",
1038 [CREATION_EXISTING] = "Found existing",
1039 [CREATION_FORCE] = "Created replacement",
1040};
1041
1042DEFINE_PRIVATE_STRING_TABLE_LOOKUP_TO_STRING(creation_mode_verb, CreationMode);
Zbigniew Jędrzejewski-Szmek294929f2015-02-01 12:29:27 -05001043
Lennart Poettering3b63d2d2010-10-18 22:38:41 +02001044static int create_item(Item *i) {
Lennart Poettering3b63d2d2010-10-18 22:38:41 +02001045 struct stat st;
Kay Sieversdf28bc02013-10-21 15:24:18 +02001046 int r = 0;
Zbigniew Jędrzejewski-Szmek294929f2015-02-01 12:29:27 -05001047 CreationMode creation;
Lennart Poettering3b63d2d2010-10-18 22:38:41 +02001048
1049 assert(i);
1050
Zbigniew Jędrzejewski-Szmek582deb82015-01-24 01:54:05 -05001051 log_debug("Running create action for entry %c %s", (char) i->type, i->path);
1052
Lennart Poettering3b63d2d2010-10-18 22:38:41 +02001053 switch (i->type) {
1054
1055 case IGNORE_PATH:
Michal Sekletar78a92a52013-01-18 16:13:08 +01001056 case IGNORE_DIRECTORY_PATH:
Lennart Poettering3b63d2d2010-10-18 22:38:41 +02001057 case REMOVE_PATH:
1058 case RECURSIVE_REMOVE_PATH:
1059 return 0;
1060
1061 case CREATE_FILE:
Lennart Poettering31ed59c2012-01-18 16:39:04 +01001062 case TRUNCATE_FILE:
Dave Reisner1845fdd2012-09-27 20:48:13 -04001063 r = write_one_file(i, i->path);
1064 if (r < 0)
1065 return r;
1066 break;
Lennart Poettering265ffa12013-09-17 16:33:30 -05001067
Lennart Poettering849958d2014-06-10 23:02:40 +02001068 case COPY_FILES:
Zbigniew Jędrzejewski-Szmek582deb82015-01-24 01:54:05 -05001069 log_debug("Copying tree \"%s\" to \"%s\".", i->argument, i->path);
Lennart Poetteringe1563472014-06-19 19:36:08 +02001070 r = copy_tree(i->argument, i->path, false);
Lennart Poettering849958d2014-06-10 23:02:40 +02001071 if (r < 0) {
Lennart Poetteringe1563472014-06-19 19:36:08 +02001072 struct stat a, b;
1073
Michal Schmidt8d3d7072014-11-28 19:13:53 +01001074 if (r != -EEXIST)
1075 return log_error_errno(r, "Failed to copy files to %s: %m", i->path);
Lennart Poetteringe1563472014-06-19 19:36:08 +02001076
Michal Schmidt4a62c712014-11-28 19:57:32 +01001077 if (stat(i->argument, &a) < 0)
1078 return log_error_errno(errno, "stat(%s) failed: %m", i->argument);
Lennart Poetteringe1563472014-06-19 19:36:08 +02001079
Michal Schmidt4a62c712014-11-28 19:57:32 +01001080 if (stat(i->path, &b) < 0)
1081 return log_error_errno(errno, "stat(%s) failed: %m", i->path);
Lennart Poetteringe1563472014-06-19 19:36:08 +02001082
1083 if ((a.st_mode ^ b.st_mode) & S_IFMT) {
1084 log_debug("Can't copy to %s, file exists already and is of different type", i->path);
1085 return 0;
1086 }
Lennart Poettering849958d2014-06-10 23:02:40 +02001087 }
1088
Zbigniew Jędrzejewski-Szmekb705ab62015-01-18 02:10:00 -05001089 r = path_set_perms(i, i->path);
Lennart Poettering849958d2014-06-10 23:02:40 +02001090 if (r < 0)
1091 return r;
1092
1093 break;
1094
Dave Reisnerd4e9eb92012-09-03 17:13:18 -04001095 case WRITE_FILE:
Zbigniew Jędrzejewski-Szmek081043c2015-01-18 01:33:39 -05001096 r = glob_item(i, write_one_file, false);
Michal Schmidtf05bc3f2011-12-15 23:44:23 +01001097 if (r < 0)
1098 return r;
Lennart Poettering3b63d2d2010-10-18 22:38:41 +02001099
1100 break;
1101
Lennart Poettering3b63d2d2010-10-18 22:38:41 +02001102 case CREATE_DIRECTORY:
Lennart Poetteringd7b8eec2014-12-27 18:46:36 +01001103 case TRUNCATE_DIRECTORY:
1104 case CREATE_SUBVOLUME:
Lennart Poettering3b63d2d2010-10-18 22:38:41 +02001105
Lennart Poetteringd7b8eec2014-12-27 18:46:36 +01001106 RUN_WITH_UMASK(0000)
Lennart Poettering5c0d3982013-04-04 03:39:39 +02001107 mkdir_parents_label(i->path, 0755);
Lennart Poetteringd7b8eec2014-12-27 18:46:36 +01001108
Zbigniew Jędrzejewski-Szmek582deb82015-01-24 01:54:05 -05001109 if (i->type == CREATE_SUBVOLUME)
1110 RUN_WITH_UMASK((~i->mode) & 0777) {
Lennart Poetteringd7b8eec2014-12-27 18:46:36 +01001111 r = btrfs_subvol_make(i->path);
Zbigniew Jędrzejewski-Szmek582deb82015-01-24 01:54:05 -05001112 log_debug_errno(r, "Creating subvolume \"%s\": %m", i->path);
1113 }
1114 else
Lennart Poetteringd7b8eec2014-12-27 18:46:36 +01001115 r = 0;
1116
Zbigniew Jędrzejewski-Szmek582deb82015-01-24 01:54:05 -05001117 if (IN_SET(i->type, CREATE_DIRECTORY, TRUNCATE_DIRECTORY) || r == -ENOTTY)
Lennart Poetteringd7b8eec2014-12-27 18:46:36 +01001118 RUN_WITH_UMASK(0000)
1119 r = mkdir_label(i->path, i->mode);
Lennart Poettering3b63d2d2010-10-18 22:38:41 +02001120
Lennart Poetteringe1563472014-06-19 19:36:08 +02001121 if (r < 0) {
Michal Schmidtf6479622014-11-28 18:50:43 +01001122 if (r != -EEXIST)
Zbigniew Jędrzejewski-Szmek582deb82015-01-24 01:54:05 -05001123 return log_error_errno(r, "Failed to create directory or subvolume \"%s\": %m", i->path);
Lennart Poettering3b63d2d2010-10-18 22:38:41 +02001124
Michal Schmidt4a62c712014-11-28 19:57:32 +01001125 if (stat(i->path, &st) < 0)
1126 return log_error_errno(errno, "stat(%s) failed: %m", i->path);
Lennart Poettering3b63d2d2010-10-18 22:38:41 +02001127
Lennart Poetteringe1563472014-06-19 19:36:08 +02001128 if (!S_ISDIR(st.st_mode)) {
Zbigniew Jędrzejewski-Szmek582deb82015-01-24 01:54:05 -05001129 log_debug("\"%s\" already exists and is not a directory.", i->path);
Lennart Poetteringe1563472014-06-19 19:36:08 +02001130 return 0;
1131 }
Zbigniew Jędrzejewski-Szmek294929f2015-02-01 12:29:27 -05001132
1133 creation = CREATION_EXISTING;
1134 } else
1135 creation = CREATION_NORMAL;
Lennart Poettering7a7d5db2015-02-02 21:34:09 +01001136 log_debug("%s directory \"%s\".", creation_mode_verb_to_string(creation), i->path);
Lennart Poettering3b63d2d2010-10-18 22:38:41 +02001137
Zbigniew Jędrzejewski-Szmekb705ab62015-01-18 02:10:00 -05001138 r = path_set_perms(i, i->path);
Michal Schmidtf05bc3f2011-12-15 23:44:23 +01001139 if (r < 0)
1140 return r;
Lennart Poettering3b63d2d2010-10-18 22:38:41 +02001141
1142 break;
Lennart Poetteringee17ee72011-07-12 03:56:56 +02001143
1144 case CREATE_FIFO:
1145
Lennart Poettering5c0d3982013-04-04 03:39:39 +02001146 RUN_WITH_UMASK(0000) {
Lennart Poetteringecabcf82014-10-23 19:41:27 +02001147 mac_selinux_create_file_prepare(i->path, S_IFIFO);
Lennart Poettering5c0d3982013-04-04 03:39:39 +02001148 r = mkfifo(i->path, i->mode);
Lennart Poetteringecabcf82014-10-23 19:41:27 +02001149 mac_selinux_create_file_clear();
Lennart Poetteringee17ee72011-07-12 03:56:56 +02001150 }
1151
Lennart Poettering1554afa2014-06-17 23:50:22 +02001152 if (r < 0) {
Michal Schmidt4a62c712014-11-28 19:57:32 +01001153 if (errno != EEXIST)
1154 return log_error_errno(errno, "Failed to create fifo %s: %m", i->path);
Lennart Poetteringee17ee72011-07-12 03:56:56 +02001155
Michal Schmidt4a62c712014-11-28 19:57:32 +01001156 if (stat(i->path, &st) < 0)
1157 return log_error_errno(errno, "stat(%s) failed: %m", i->path);
Lennart Poettering1554afa2014-06-17 23:50:22 +02001158
1159 if (!S_ISFIFO(st.st_mode)) {
1160
1161 if (i->force) {
1162
1163 RUN_WITH_UMASK(0000) {
Lennart Poetteringecabcf82014-10-23 19:41:27 +02001164 mac_selinux_create_file_prepare(i->path, S_IFIFO);
Lennart Poettering1554afa2014-06-17 23:50:22 +02001165 r = mkfifo_atomic(i->path, i->mode);
Lennart Poetteringecabcf82014-10-23 19:41:27 +02001166 mac_selinux_create_file_clear();
Lennart Poettering1554afa2014-06-17 23:50:22 +02001167 }
1168
Michal Schmidtf6479622014-11-28 18:50:43 +01001169 if (r < 0)
1170 return log_error_errno(r, "Failed to create fifo %s: %m", i->path);
Zbigniew Jędrzejewski-Szmek294929f2015-02-01 12:29:27 -05001171 creation = CREATION_FORCE;
Lennart Poettering1554afa2014-06-17 23:50:22 +02001172 } else {
1173 log_debug("%s is not a fifo.", i->path);
1174 return 0;
1175 }
Zbigniew Jędrzejewski-Szmek294929f2015-02-01 12:29:27 -05001176 } else
1177 creation = CREATION_EXISTING;
1178 } else
1179 creation = CREATION_NORMAL;
Lennart Poettering7a7d5db2015-02-02 21:34:09 +01001180 log_debug("%s fifo \"%s\".", creation_mode_verb_to_string(creation), i->path);
Lennart Poetteringee17ee72011-07-12 03:56:56 +02001181
Zbigniew Jędrzejewski-Szmekb705ab62015-01-18 02:10:00 -05001182 r = path_set_perms(i, i->path);
Michal Schmidtf05bc3f2011-12-15 23:44:23 +01001183 if (r < 0)
1184 return r;
Lennart Poetteringee17ee72011-07-12 03:56:56 +02001185
1186 break;
Michal Schmidta8d88782011-12-15 23:11:07 +01001187
Lennart Poettering2e78fa72014-06-16 13:21:07 +02001188 case CREATE_SYMLINK:
Lennart Poettering468d7262012-01-17 15:04:12 +01001189
Lennart Poetteringecabcf82014-10-23 19:41:27 +02001190 mac_selinux_create_file_prepare(i->path, S_IFLNK);
Lennart Poettering468d7262012-01-17 15:04:12 +01001191 r = symlink(i->argument, i->path);
Lennart Poetteringecabcf82014-10-23 19:41:27 +02001192 mac_selinux_create_file_clear();
Kay Sieverse9a5ef72012-04-17 16:05:03 +02001193
Lennart Poettering468d7262012-01-17 15:04:12 +01001194 if (r < 0) {
Lennart Poettering2e78fa72014-06-16 13:21:07 +02001195 _cleanup_free_ char *x = NULL;
Lennart Poettering468d7262012-01-17 15:04:12 +01001196
Michal Schmidt4a62c712014-11-28 19:57:32 +01001197 if (errno != EEXIST)
1198 return log_error_errno(errno, "symlink(%s, %s) failed: %m", i->argument, i->path);
Lennart Poettering2e78fa72014-06-16 13:21:07 +02001199
1200 r = readlink_malloc(i->path, &x);
1201 if (r < 0 || !streq(i->argument, x)) {
1202
1203 if (i->force) {
Lennart Poetteringecabcf82014-10-23 19:41:27 +02001204 mac_selinux_create_file_prepare(i->path, S_IFLNK);
Lennart Poettering2e78fa72014-06-16 13:21:07 +02001205 r = symlink_atomic(i->argument, i->path);
Lennart Poetteringecabcf82014-10-23 19:41:27 +02001206 mac_selinux_create_file_clear();
Lennart Poettering2e78fa72014-06-16 13:21:07 +02001207
Michal Schmidtf6479622014-11-28 18:50:43 +01001208 if (r < 0)
1209 return log_error_errno(r, "symlink(%s, %s) failed: %m", i->argument, i->path);
Zbigniew Jędrzejewski-Szmek294929f2015-02-01 12:29:27 -05001210 creation = CREATION_FORCE;
Lennart Poettering1554afa2014-06-17 23:50:22 +02001211 } else {
Zbigniew Jędrzejewski-Szmek582deb82015-01-24 01:54:05 -05001212 log_debug("\"%s\" is not a symlink or does not point to the correct path.", i->path);
Lennart Poettering1554afa2014-06-17 23:50:22 +02001213 return 0;
1214 }
Zbigniew Jędrzejewski-Szmek294929f2015-02-01 12:29:27 -05001215 } else
1216 creation = CREATION_EXISTING;
1217 } else
1218 creation = CREATION_NORMAL;
Lennart Poettering7a7d5db2015-02-02 21:34:09 +01001219 log_debug("%s symlink \"%s\".", creation_mode_verb_to_string(creation), i->path);
Lennart Poettering468d7262012-01-17 15:04:12 +01001220
Lennart Poettering468d7262012-01-17 15:04:12 +01001221 break;
Lennart Poettering468d7262012-01-17 15:04:12 +01001222
1223 case CREATE_BLOCK_DEVICE:
1224 case CREATE_CHAR_DEVICE: {
Lennart Poetteringcb7ed9d2012-09-05 23:39:55 -07001225 mode_t file_type;
1226
1227 if (have_effective_cap(CAP_MKNOD) == 0) {
1228 /* In a container we lack CAP_MKNOD. We
Anatol Pomozovab06eef2013-04-14 19:37:54 -07001229 shouldn't attempt to create the device node in
Lennart Poetteringcb7ed9d2012-09-05 23:39:55 -07001230 that case to avoid noise, and we don't support
1231 virtualized devices in containers anyway. */
1232
1233 log_debug("We lack CAP_MKNOD, skipping creation of device node %s.", i->path);
1234 return 0;
1235 }
1236
Lennart Poettering1554afa2014-06-17 23:50:22 +02001237 file_type = i->type == CREATE_BLOCK_DEVICE ? S_IFBLK : S_IFCHR;
Lennart Poettering468d7262012-01-17 15:04:12 +01001238
Lennart Poettering5c0d3982013-04-04 03:39:39 +02001239 RUN_WITH_UMASK(0000) {
Lennart Poetteringecabcf82014-10-23 19:41:27 +02001240 mac_selinux_create_file_prepare(i->path, file_type);
Lennart Poettering5c0d3982013-04-04 03:39:39 +02001241 r = mknod(i->path, i->mode | file_type, i->major_minor);
Lennart Poetteringecabcf82014-10-23 19:41:27 +02001242 mac_selinux_create_file_clear();
Lennart Poettering5c0d3982013-04-04 03:39:39 +02001243 }
Lennart Poettering468d7262012-01-17 15:04:12 +01001244
Kay Sievers6555ad82014-06-13 04:11:11 +02001245 if (r < 0) {
1246 if (errno == EPERM) {
1247 log_debug("We lack permissions, possibly because of cgroup configuration; "
1248 "skipping creation of device node %s.", i->path);
1249 return 0;
1250 }
1251
Michal Schmidt4a62c712014-11-28 19:57:32 +01001252 if (errno != EEXIST)
1253 return log_error_errno(errno, "Failed to create device node %s: %m", i->path);
Lennart Poettering468d7262012-01-17 15:04:12 +01001254
Michal Schmidt4a62c712014-11-28 19:57:32 +01001255 if (stat(i->path, &st) < 0)
1256 return log_error_errno(errno, "stat(%s) failed: %m", i->path);
Lennart Poettering468d7262012-01-17 15:04:12 +01001257
Lennart Poettering1554afa2014-06-17 23:50:22 +02001258 if ((st.st_mode & S_IFMT) != file_type) {
1259
1260 if (i->force) {
1261
1262 RUN_WITH_UMASK(0000) {
Lennart Poetteringecabcf82014-10-23 19:41:27 +02001263 mac_selinux_create_file_prepare(i->path, file_type);
Lennart Poettering1554afa2014-06-17 23:50:22 +02001264 r = mknod_atomic(i->path, i->mode | file_type, i->major_minor);
Lennart Poetteringecabcf82014-10-23 19:41:27 +02001265 mac_selinux_create_file_clear();
Lennart Poettering1554afa2014-06-17 23:50:22 +02001266 }
1267
Michal Schmidtf6479622014-11-28 18:50:43 +01001268 if (r < 0)
Zbigniew Jędrzejewski-Szmek294929f2015-02-01 12:29:27 -05001269 return log_error_errno(r, "Failed to create device node \"%s\": %m", i->path);
1270 creation = CREATION_FORCE;
Lennart Poettering1554afa2014-06-17 23:50:22 +02001271 } else {
1272 log_debug("%s is not a device node.", i->path);
1273 return 0;
1274 }
Zbigniew Jędrzejewski-Szmek294929f2015-02-01 12:29:27 -05001275 } else
1276 creation = CREATION_EXISTING;
1277 } else
1278 creation = CREATION_NORMAL;
1279 log_debug("%s %s device node \"%s\" %u:%u.",
Lennart Poettering7a7d5db2015-02-02 21:34:09 +01001280 creation_mode_verb_to_string(creation),
Zbigniew Jędrzejewski-Szmek582deb82015-01-24 01:54:05 -05001281 i->type == CREATE_BLOCK_DEVICE ? "block" : "char",
1282 i->path, major(i->mode), minor(i->mode));
Lennart Poettering468d7262012-01-17 15:04:12 +01001283
Zbigniew Jędrzejewski-Szmekb705ab62015-01-18 02:10:00 -05001284 r = path_set_perms(i, i->path);
Lennart Poettering468d7262012-01-17 15:04:12 +01001285 if (r < 0)
1286 return r;
1287
1288 break;
1289 }
1290
Lennart Poetteringe73a03e2014-06-10 23:42:16 +02001291 case ADJUST_MODE:
Michal Schmidt777b87e2011-12-16 18:27:35 +01001292 case RELABEL_PATH:
Zbigniew Jędrzejewski-Szmekb705ab62015-01-18 02:10:00 -05001293 r = glob_item(i, path_set_perms, false);
Michal Schmidt777b87e2011-12-16 18:27:35 +01001294 if (r < 0)
Lennart Poettering96ca8192013-06-21 15:57:42 +02001295 return r;
Michal Schmidt777b87e2011-12-16 18:27:35 +01001296 break;
1297
Michal Schmidta8d88782011-12-15 23:11:07 +01001298 case RECURSIVE_RELABEL_PATH:
Zbigniew Jędrzejewski-Szmekb705ab62015-01-18 02:10:00 -05001299 r = glob_item(i, path_set_perms, true);
Michal Schmidta8d88782011-12-15 23:11:07 +01001300 if (r < 0)
1301 return r;
Maciej Wereskiebf4e802014-12-04 10:32:10 +01001302 break;
Lennart Poetteringe73a03e2014-06-10 23:42:16 +02001303
Maciej Wereskiebf4e802014-12-04 10:32:10 +01001304 case SET_XATTR:
Zbigniew Jędrzejewski-Szmekb705ab62015-01-18 02:10:00 -05001305 r = glob_item(i, path_set_xattrs, false);
1306 if (r < 0)
1307 return r;
1308 break;
1309
1310 case RECURSIVE_SET_XATTR:
1311 r = glob_item(i, path_set_xattrs, true);
Maciej Wereskiebf4e802014-12-04 10:32:10 +01001312 if (r < 0)
1313 return r;
Lennart Poetteringe73a03e2014-06-10 23:42:16 +02001314 break;
Zbigniew Jędrzejewski-Szmekf8eeeaf2015-01-17 23:27:39 -05001315
1316 case SET_ACL:
Zbigniew Jędrzejewski-Szmekb705ab62015-01-18 02:10:00 -05001317 r = glob_item(i, path_set_acls, false);
Zbigniew Jędrzejewski-Szmekf8eeeaf2015-01-17 23:27:39 -05001318 if (r < 0)
1319 return r;
Zbigniew Jędrzejewski-Szmekb705ab62015-01-18 02:10:00 -05001320 break;
1321
1322 case RECURSIVE_SET_ACL:
1323 r = glob_item(i, path_set_acls, true);
1324 if (r < 0)
1325 return r;
1326 break;
Goffredo Baroncelli22c3a6c2015-03-16 20:33:50 +01001327
1328 case SET_ATTRIB:
1329 r = glob_item(i, path_set_attrib, false);
1330 if (r < 0)
1331 return r;
1332 break;
1333
1334 case RECURSIVE_SET_ATTRIB:
1335 r = glob_item(i, path_set_attrib, true);
1336 if (r < 0)
1337 return r;
1338 break;
Lennart Poettering3b63d2d2010-10-18 22:38:41 +02001339 }
1340
Michal Schmidtf05bc3f2011-12-15 23:44:23 +01001341 return 0;
Lennart Poettering3b63d2d2010-10-18 22:38:41 +02001342}
1343
Michal Schmidta0896122011-12-15 21:32:50 +01001344static int remove_item_instance(Item *i, const char *instance) {
Lennart Poettering3b63d2d2010-10-18 22:38:41 +02001345 int r;
1346
1347 assert(i);
1348
1349 switch (i->type) {
1350
Lennart Poettering3b63d2d2010-10-18 22:38:41 +02001351 case REMOVE_PATH:
Michal Schmidt4a62c712014-11-28 19:57:32 +01001352 if (remove(instance) < 0 && errno != ENOENT)
Zbigniew Jędrzejewski-Szmek3f93da92015-01-09 02:00:37 -05001353 return log_error_errno(errno, "rm(%s): %m", instance);
Lennart Poettering3b63d2d2010-10-18 22:38:41 +02001354
1355 break;
1356
1357 case TRUNCATE_DIRECTORY:
1358 case RECURSIVE_REMOVE_PATH:
Lennart Poetteringd139b242012-06-20 14:31:00 +02001359 /* FIXME: we probably should use dir_cleanup() here
1360 * instead of rm_rf() so that 'x' is honoured. */
Zbigniew Jędrzejewski-Szmek582deb82015-01-24 01:54:05 -05001361 log_debug("rm -rf \"%s\"", instance);
Lennart Poetteringc6878632015-04-04 11:52:57 +02001362 r = rm_rf(instance, (i->type == RECURSIVE_REMOVE_PATH ? REMOVE_ROOT : 0) | REMOVE_PHYSICAL);
Michal Schmidtf6479622014-11-28 18:50:43 +01001363 if (r < 0 && r != -ENOENT)
1364 return log_error_errno(r, "rm_rf(%s): %m", instance);
Lennart Poettering3b63d2d2010-10-18 22:38:41 +02001365
1366 break;
Zbigniew Jędrzejewski-Szmek7fcb4b92015-01-22 23:35:34 -05001367
1368 default:
1369 assert_not_reached("wut?");
Lennart Poettering3b63d2d2010-10-18 22:38:41 +02001370 }
1371
1372 return 0;
1373}
1374
Michal Schmidta0896122011-12-15 21:32:50 +01001375static int remove_item(Item *i) {
Michal Schmidt99e68c02011-12-15 23:45:26 +01001376 int r = 0;
1377
Lennart Poetteringb8bb3e82011-02-12 09:31:25 +01001378 assert(i);
1379
Zbigniew Jędrzejewski-Szmek582deb82015-01-24 01:54:05 -05001380 log_debug("Running remove action for entry %c %s", (char) i->type, i->path);
1381
Lennart Poetteringb8bb3e82011-02-12 09:31:25 +01001382 switch (i->type) {
1383
1384 case CREATE_FILE:
1385 case TRUNCATE_FILE:
1386 case CREATE_DIRECTORY:
Lennart Poetteringd7b8eec2014-12-27 18:46:36 +01001387 case CREATE_SUBVOLUME:
Lennart Poetteringee17ee72011-07-12 03:56:56 +02001388 case CREATE_FIFO:
Lennart Poettering468d7262012-01-17 15:04:12 +01001389 case CREATE_SYMLINK:
1390 case CREATE_CHAR_DEVICE:
1391 case CREATE_BLOCK_DEVICE:
Lennart Poetteringb8bb3e82011-02-12 09:31:25 +01001392 case IGNORE_PATH:
Michal Sekletar78a92a52013-01-18 16:13:08 +01001393 case IGNORE_DIRECTORY_PATH:
Lennart Poetteringe73a03e2014-06-10 23:42:16 +02001394 case ADJUST_MODE:
Michal Schmidt777b87e2011-12-16 18:27:35 +01001395 case RELABEL_PATH:
Michal Schmidta8d88782011-12-15 23:11:07 +01001396 case RECURSIVE_RELABEL_PATH:
Lennart Poettering31ed59c2012-01-18 16:39:04 +01001397 case WRITE_FILE:
Lennart Poettering849958d2014-06-10 23:02:40 +02001398 case COPY_FILES:
Maciej Wereskiebf4e802014-12-04 10:32:10 +01001399 case SET_XATTR:
Zbigniew Jędrzejewski-Szmekb705ab62015-01-18 02:10:00 -05001400 case RECURSIVE_SET_XATTR:
Zbigniew Jędrzejewski-Szmekf8eeeaf2015-01-17 23:27:39 -05001401 case SET_ACL:
Zbigniew Jędrzejewski-Szmekb705ab62015-01-18 02:10:00 -05001402 case RECURSIVE_SET_ACL:
Goffredo Baroncelli22c3a6c2015-03-16 20:33:50 +01001403 case SET_ATTRIB:
1404 case RECURSIVE_SET_ATTRIB:
Lennart Poetteringb8bb3e82011-02-12 09:31:25 +01001405 break;
1406
1407 case REMOVE_PATH:
1408 case TRUNCATE_DIRECTORY:
Michal Schmidt99e68c02011-12-15 23:45:26 +01001409 case RECURSIVE_REMOVE_PATH:
Zbigniew Jędrzejewski-Szmek081043c2015-01-18 01:33:39 -05001410 r = glob_item(i, remove_item_instance, false);
Michal Schmidt99e68c02011-12-15 23:45:26 +01001411 break;
Lennart Poetteringb8bb3e82011-02-12 09:31:25 +01001412 }
1413
Michal Schmidt99e68c02011-12-15 23:45:26 +01001414 return r;
Lennart Poetteringb8bb3e82011-02-12 09:31:25 +01001415}
1416
Michal Sekletar78a92a52013-01-18 16:13:08 +01001417static int clean_item_instance(Item *i, const char* instance) {
Harald Hoyer7fd1b192013-04-18 09:11:22 +02001418 _cleanup_closedir_ DIR *d = NULL;
Michal Sekletar78a92a52013-01-18 16:13:08 +01001419 struct stat s, ps;
1420 bool mountpoint;
Michal Sekletar78a92a52013-01-18 16:13:08 +01001421 usec_t cutoff, n;
Zbigniew Jędrzejewski-Szmek582deb82015-01-24 01:54:05 -05001422 char timestamp[FORMAT_TIMESTAMP_MAX];
Michal Sekletar78a92a52013-01-18 16:13:08 +01001423
1424 assert(i);
1425
1426 if (!i->age_set)
1427 return 0;
1428
1429 n = now(CLOCK_REALTIME);
1430 if (n < i->age)
1431 return 0;
1432
1433 cutoff = n - i->age;
1434
Zbigniew Jędrzejewski-Szmekdf99a9e2014-01-02 00:02:31 -05001435 d = opendir_nomod(instance);
Michal Sekletar78a92a52013-01-18 16:13:08 +01001436 if (!d) {
Zbigniew Jędrzejewski-Szmek582deb82015-01-24 01:54:05 -05001437 if (errno == ENOENT || errno == ENOTDIR) {
1438 log_debug_errno(errno, "Directory \"%s\": %m", instance);
Michal Sekletar78a92a52013-01-18 16:13:08 +01001439 return 0;
Zbigniew Jędrzejewski-Szmek582deb82015-01-24 01:54:05 -05001440 }
Michal Sekletar78a92a52013-01-18 16:13:08 +01001441
Zbigniew Jędrzejewski-Szmek582deb82015-01-24 01:54:05 -05001442 log_error_errno(errno, "Failed to open directory %s: %m", instance);
Michal Sekletar78a92a52013-01-18 16:13:08 +01001443 return -errno;
1444 }
1445
Michal Schmidt4a62c712014-11-28 19:57:32 +01001446 if (fstat(dirfd(d), &s) < 0)
1447 return log_error_errno(errno, "stat(%s) failed: %m", i->path);
Michal Sekletar78a92a52013-01-18 16:13:08 +01001448
1449 if (!S_ISDIR(s.st_mode)) {
1450 log_error("%s is not a directory.", i->path);
Zbigniew Jędrzejewski-Szmek19fbec12013-03-03 18:42:52 -05001451 return -ENOTDIR;
Michal Sekletar78a92a52013-01-18 16:13:08 +01001452 }
1453
Michal Schmidt4a62c712014-11-28 19:57:32 +01001454 if (fstatat(dirfd(d), "..", &ps, AT_SYMLINK_NOFOLLOW) != 0)
1455 return log_error_errno(errno, "stat(%s/..) failed: %m", i->path);
Michal Sekletar78a92a52013-01-18 16:13:08 +01001456
1457 mountpoint = s.st_dev != ps.st_dev ||
1458 (s.st_dev == ps.st_dev && s.st_ino == ps.st_ino);
1459
Zbigniew Jędrzejewski-Szmek582deb82015-01-24 01:54:05 -05001460 log_debug("Cleanup threshold for %s \"%s\" is %s",
1461 mountpoint ? "mount point" : "directory",
1462 instance,
1463 format_timestamp_us(timestamp, sizeof(timestamp), cutoff));
1464
1465 return dir_cleanup(i, instance, d, &s, cutoff, s.st_dev, mountpoint,
1466 MAX_DEPTH, i->keep_first_level);
Michal Sekletar78a92a52013-01-18 16:13:08 +01001467}
1468
1469static int clean_item(Item *i) {
1470 int r = 0;
1471
1472 assert(i);
1473
Zbigniew Jędrzejewski-Szmek582deb82015-01-24 01:54:05 -05001474 log_debug("Running clean action for entry %c %s", (char) i->type, i->path);
1475
Michal Sekletar78a92a52013-01-18 16:13:08 +01001476 switch (i->type) {
1477 case CREATE_DIRECTORY:
Lennart Poetteringd7b8eec2014-12-27 18:46:36 +01001478 case CREATE_SUBVOLUME:
Michal Sekletar78a92a52013-01-18 16:13:08 +01001479 case TRUNCATE_DIRECTORY:
1480 case IGNORE_PATH:
Lennart Poettering849958d2014-06-10 23:02:40 +02001481 case COPY_FILES:
Michal Sekletar78a92a52013-01-18 16:13:08 +01001482 clean_item_instance(i, i->path);
1483 break;
1484 case IGNORE_DIRECTORY_PATH:
Zbigniew Jędrzejewski-Szmek081043c2015-01-18 01:33:39 -05001485 r = glob_item(i, clean_item_instance, false);
Michal Sekletar78a92a52013-01-18 16:13:08 +01001486 break;
1487 default:
1488 break;
1489 }
1490
1491 return r;
1492}
1493
Zbigniew Jędrzejewski-Szmek3f93da92015-01-09 02:00:37 -05001494static int process_item_array(ItemArray *array);
1495
Lennart Poettering3b63d2d2010-10-18 22:38:41 +02001496static int process_item(Item *i) {
Lennart Poettering1e958932015-01-06 20:33:46 +01001497 int r, q, p, t = 0;
Zbigniew Jędrzejewski-Szmek9348f0e2014-10-01 07:33:22 -05001498 _cleanup_free_ char *prefix = NULL;
Lennart Poettering3b63d2d2010-10-18 22:38:41 +02001499
1500 assert(i);
1501
Lennart Poettering1910cd02014-06-11 01:37:35 +02001502 if (i->done)
1503 return 0;
1504
1505 i->done = true;
1506
Zbigniew Jędrzejewski-Szmek9348f0e2014-10-01 07:33:22 -05001507 prefix = malloc(strlen(i->path) + 1);
1508 if (!prefix)
1509 return log_oom();
1510
Lennart Poettering1910cd02014-06-11 01:37:35 +02001511 PATH_FOREACH_PREFIX(prefix, i->path) {
Zbigniew Jędrzejewski-Szmek3f93da92015-01-09 02:00:37 -05001512 ItemArray *j;
Lennart Poettering1910cd02014-06-11 01:37:35 +02001513
1514 j = hashmap_get(items, prefix);
Zbigniew Jędrzejewski-Szmek1db50422015-01-06 09:53:12 -05001515 if (j) {
1516 int s;
1517
Zbigniew Jędrzejewski-Szmek3f93da92015-01-09 02:00:37 -05001518 s = process_item_array(j);
Zbigniew Jędrzejewski-Szmek1db50422015-01-06 09:53:12 -05001519 if (s < 0 && t == 0)
1520 t = s;
1521 }
Lennart Poettering1910cd02014-06-11 01:37:35 +02001522 }
1523
Lennart Poettering3b63d2d2010-10-18 22:38:41 +02001524 r = arg_create ? create_item(i) : 0;
Michal Schmidta0896122011-12-15 21:32:50 +01001525 q = arg_remove ? remove_item(i) : 0;
Lennart Poettering3b63d2d2010-10-18 22:38:41 +02001526 p = arg_clean ? clean_item(i) : 0;
1527
Zbigniew Jędrzejewski-Szmek1db50422015-01-06 09:53:12 -05001528 return t < 0 ? t :
1529 r < 0 ? r :
1530 q < 0 ? q :
1531 p;
Lennart Poettering3b63d2d2010-10-18 22:38:41 +02001532}
1533
Zbigniew Jędrzejewski-Szmek3f93da92015-01-09 02:00:37 -05001534static int process_item_array(ItemArray *array) {
1535 unsigned n;
1536 int r = 0, k;
Lennart Poettering753615e2014-06-12 23:07:17 +02001537
Zbigniew Jędrzejewski-Szmek3f93da92015-01-09 02:00:37 -05001538 assert(array);
Lennart Poettering3b63d2d2010-10-18 22:38:41 +02001539
Zbigniew Jędrzejewski-Szmek3f93da92015-01-09 02:00:37 -05001540 for (n = 0; n < array->count; n++) {
1541 k = process_item(array->items + n);
1542 if (k < 0 && r == 0)
1543 r = k;
1544 }
1545
1546 return r;
1547}
1548
1549static void item_free_contents(Item *i) {
1550 assert(i);
Lennart Poettering3b63d2d2010-10-18 22:38:41 +02001551 free(i->path);
Lennart Poettering468d7262012-01-17 15:04:12 +01001552 free(i->argument);
Maciej Wereskiebf4e802014-12-04 10:32:10 +01001553 strv_free(i->xattrs);
Zbigniew Jędrzejewski-Szmekf8eeeaf2015-01-17 23:27:39 -05001554
1555#ifdef HAVE_ACL
1556 acl_free(i->acl_access);
1557 acl_free(i->acl_default);
1558#endif
Lennart Poettering3b63d2d2010-10-18 22:38:41 +02001559}
1560
Zbigniew Jędrzejewski-Szmek3f93da92015-01-09 02:00:37 -05001561static void item_array_free(ItemArray *a) {
1562 unsigned n;
Maciej Wereskie2f2fb72013-07-19 15:43:12 +02001563
Zbigniew Jędrzejewski-Szmek3f93da92015-01-09 02:00:37 -05001564 if (!a)
1565 return;
1566
1567 for (n = 0; n < a->count; n++)
1568 item_free_contents(a->items + n);
1569 free(a->items);
1570 free(a);
1571}
1572
1573static bool item_compatible(Item *a, Item *b) {
Lennart Poetteringbfe95f32011-04-08 04:49:43 +02001574 assert(a);
1575 assert(b);
Zbigniew Jędrzejewski-Szmek3f93da92015-01-09 02:00:37 -05001576 assert(streq(a->path, b->path));
Lennart Poetteringbfe95f32011-04-08 04:49:43 +02001577
Zbigniew Jędrzejewski-Szmek3f93da92015-01-09 02:00:37 -05001578 if (takes_ownership(a->type) && takes_ownership(b->type))
1579 /* check if the items are the same */
1580 return streq_ptr(a->argument, b->argument) &&
Lennart Poetteringbfe95f32011-04-08 04:49:43 +02001581
Zbigniew Jędrzejewski-Szmek3f93da92015-01-09 02:00:37 -05001582 a->uid_set == b->uid_set &&
1583 a->uid == b->uid &&
Lennart Poetteringbfe95f32011-04-08 04:49:43 +02001584
Zbigniew Jędrzejewski-Szmek3f93da92015-01-09 02:00:37 -05001585 a->gid_set == b->gid_set &&
1586 a->gid == b->gid &&
Lennart Poetteringbfe95f32011-04-08 04:49:43 +02001587
Zbigniew Jędrzejewski-Szmek3f93da92015-01-09 02:00:37 -05001588 a->mode_set == b->mode_set &&
1589 a->mode == b->mode &&
Lennart Poetteringbfe95f32011-04-08 04:49:43 +02001590
Zbigniew Jędrzejewski-Szmek3f93da92015-01-09 02:00:37 -05001591 a->age_set == b->age_set &&
1592 a->age == b->age &&
Lennart Poetteringbfe95f32011-04-08 04:49:43 +02001593
Zbigniew Jędrzejewski-Szmek3f93da92015-01-09 02:00:37 -05001594 a->mask_perms == b->mask_perms &&
Lennart Poetteringbfe95f32011-04-08 04:49:43 +02001595
Zbigniew Jędrzejewski-Szmek3f93da92015-01-09 02:00:37 -05001596 a->keep_first_level == b->keep_first_level &&
Lennart Poettering468d7262012-01-17 15:04:12 +01001597
Zbigniew Jędrzejewski-Szmek3f93da92015-01-09 02:00:37 -05001598 a->major_minor == b->major_minor;
Lennart Poettering468d7262012-01-17 15:04:12 +01001599
Lennart Poetteringbfe95f32011-04-08 04:49:43 +02001600 return true;
1601}
1602
Dave Reisnera2aced42013-07-24 11:10:05 -04001603static bool should_include_path(const char *path) {
1604 char **prefix;
1605
Lennart Poetteringabef3f92014-06-11 10:14:07 +02001606 STRV_FOREACH(prefix, arg_exclude_prefixes)
Zbigniew Jędrzejewski-Szmek582deb82015-01-24 01:54:05 -05001607 if (path_startswith(path, *prefix)) {
1608 log_debug("Entry \"%s\" matches exclude prefix \"%s\", skipping.",
1609 path, *prefix);
Dave Reisner5c795112013-07-24 11:19:24 -04001610 return false;
Zbigniew Jędrzejewski-Szmek582deb82015-01-24 01:54:05 -05001611 }
Dave Reisnera2aced42013-07-24 11:10:05 -04001612
Lennart Poetteringabef3f92014-06-11 10:14:07 +02001613 STRV_FOREACH(prefix, arg_include_prefixes)
Zbigniew Jędrzejewski-Szmek582deb82015-01-24 01:54:05 -05001614 if (path_startswith(path, *prefix)) {
1615 log_debug("Entry \"%s\" matches include prefix \"%s\".", path, *prefix);
Dave Reisnera2aced42013-07-24 11:10:05 -04001616 return true;
Zbigniew Jędrzejewski-Szmek582deb82015-01-24 01:54:05 -05001617 }
Dave Reisnera2aced42013-07-24 11:10:05 -04001618
Dave Reisner5c795112013-07-24 11:19:24 -04001619 /* no matches, so we should include this path only if we
1620 * have no whitelist at all */
Zbigniew Jędrzejewski-Szmek582deb82015-01-24 01:54:05 -05001621 if (strv_length(arg_include_prefixes) == 0)
1622 return true;
1623
1624 log_debug("Entry \"%s\" does not match any include prefix, skipping.", path);
1625 return false;
Dave Reisnera2aced42013-07-24 11:10:05 -04001626}
1627
Lennart Poetteringfba6e682011-02-13 14:00:54 +01001628static int parse_line(const char *fname, unsigned line, const char *buffer) {
Lennart Poettering1731e342013-09-17 11:02:02 -05001629
1630 static const Specifier specifier_table[] = {
1631 { 'm', specifier_machine_id, NULL },
1632 { 'b', specifier_boot_id, NULL },
1633 { 'H', specifier_host_name, NULL },
1634 { 'v', specifier_kernel_release, NULL },
1635 {}
1636 };
1637
Lennart Poetteringcde684a2014-06-10 22:50:46 +02001638 _cleanup_free_ char *action = NULL, *mode = NULL, *user = NULL, *group = NULL, *age = NULL, *path = NULL;
Zbigniew Jędrzejewski-Szmek3f93da92015-01-09 02:00:37 -05001639 _cleanup_(item_free_contents) Item i = {};
1640 ItemArray *existing;
Lennart Poetteringbfe95f32011-04-08 04:49:43 +02001641 Hashmap *h;
daurnimator657cf7f2015-03-09 15:11:44 -04001642 int r, pos;
Zbigniew Jędrzejewski-Szmek5f255142015-01-09 01:11:01 -05001643 bool force = false, boot = false;
Lennart Poettering5008d582010-09-28 02:34:02 +02001644
1645 assert(fname);
1646 assert(line >= 1);
1647 assert(buffer);
1648
Lennart Poettering4034a062015-03-23 18:55:36 +07001649 r = unquote_many_words(
1650 &buffer,
1651 0,
1652 &action,
1653 &path,
1654 &mode,
1655 &user,
1656 &group,
1657 &age,
1658 NULL);
daurnimator657cf7f2015-03-09 15:11:44 -04001659 if (r < 0)
1660 return log_error_errno(r, "[%s:%u] Failed to parse line: %m", fname, line);
1661 else if (r < 2) {
Lennart Poettering5008d582010-09-28 02:34:02 +02001662 log_error("[%s:%u] Syntax error.", fname, line);
Zbigniew Jędrzejewski-Szmek7f2c1f42013-03-31 16:29:46 -04001663 return -EIO;
Lennart Poettering5008d582010-09-28 02:34:02 +02001664 }
1665
Lennart Poettering4034a062015-03-23 18:55:36 +07001666 if (!isempty(buffer)) {
1667 i.argument = strdup(buffer);
1668 if (!i.argument)
1669 return log_oom();
1670 }
1671
Lennart Poettering2e78fa72014-06-16 13:21:07 +02001672 if (isempty(action)) {
1673 log_error("[%s:%u] Command too short '%s'.", fname, line, action);
Zbigniew Jędrzejewski-Szmekc4708f12013-12-20 20:25:39 -05001674 return -EINVAL;
Lennart Poettering2e78fa72014-06-16 13:21:07 +02001675 }
1676
Zbigniew Jędrzejewski-Szmek5f255142015-01-09 01:11:01 -05001677 for (pos = 1; action[pos]; pos++) {
1678 if (action[pos] == '!' && !boot)
1679 boot = true;
1680 else if (action[pos] == '+' && !force)
1681 force = true;
1682 else {
1683 log_error("[%s:%u] Unknown modifiers in command '%s'",
1684 fname, line, action);
1685 return -EINVAL;
1686 }
Lennart Poettering2e78fa72014-06-16 13:21:07 +02001687 }
1688
Zbigniew Jędrzejewski-Szmek582deb82015-01-24 01:54:05 -05001689 if (boot && !arg_boot) {
1690 log_debug("Ignoring entry %s \"%s\" because --boot is not specified.",
1691 action, path);
Zbigniew Jędrzejewski-Szmekc4708f12013-12-20 20:25:39 -05001692 return 0;
Zbigniew Jędrzejewski-Szmek582deb82015-01-24 01:54:05 -05001693 }
Zbigniew Jędrzejewski-Szmekc4708f12013-12-20 20:25:39 -05001694
Zbigniew Jędrzejewski-Szmek3f93da92015-01-09 02:00:37 -05001695 i.type = action[0];
1696 i.force = force;
Lennart Poettering1731e342013-09-17 11:02:02 -05001697
Zbigniew Jędrzejewski-Szmek3f93da92015-01-09 02:00:37 -05001698 r = specifier_printf(path, specifier_table, NULL, &i.path);
Lennart Poettering1731e342013-09-17 11:02:02 -05001699 if (r < 0) {
1700 log_error("[%s:%u] Failed to replace specifiers: %s", fname, line, path);
1701 return r;
1702 }
1703
Zbigniew Jędrzejewski-Szmek3f93da92015-01-09 02:00:37 -05001704 switch (i.type) {
Lennart Poettering468d7262012-01-17 15:04:12 +01001705
Michal Schmidt777b87e2011-12-16 18:27:35 +01001706 case CREATE_FILE:
1707 case TRUNCATE_FILE:
1708 case CREATE_DIRECTORY:
Lennart Poetteringd7b8eec2014-12-27 18:46:36 +01001709 case CREATE_SUBVOLUME:
Michal Schmidt777b87e2011-12-16 18:27:35 +01001710 case TRUNCATE_DIRECTORY:
1711 case CREATE_FIFO:
1712 case IGNORE_PATH:
Michal Sekletar78a92a52013-01-18 16:13:08 +01001713 case IGNORE_DIRECTORY_PATH:
Michal Schmidt777b87e2011-12-16 18:27:35 +01001714 case REMOVE_PATH:
1715 case RECURSIVE_REMOVE_PATH:
Lennart Poetteringe73a03e2014-06-10 23:42:16 +02001716 case ADJUST_MODE:
Michal Schmidt777b87e2011-12-16 18:27:35 +01001717 case RELABEL_PATH:
1718 case RECURSIVE_RELABEL_PATH:
1719 break;
Lennart Poettering468d7262012-01-17 15:04:12 +01001720
1721 case CREATE_SYMLINK:
Zbigniew Jędrzejewski-Szmek3f93da92015-01-09 02:00:37 -05001722 if (!i.argument) {
1723 i.argument = strappend("/usr/share/factory/", i.path);
1724 if (!i.argument)
Kay Sievers2f3b8732014-06-20 15:57:43 +02001725 return log_oom();
Lennart Poettering468d7262012-01-17 15:04:12 +01001726 }
1727 break;
1728
Lennart Poettering31ed59c2012-01-18 16:39:04 +01001729 case WRITE_FILE:
Zbigniew Jędrzejewski-Szmek3f93da92015-01-09 02:00:37 -05001730 if (!i.argument) {
Lennart Poettering31ed59c2012-01-18 16:39:04 +01001731 log_error("[%s:%u] Write file requires argument.", fname, line);
Zbigniew Jędrzejewski-Szmek7f2c1f42013-03-31 16:29:46 -04001732 return -EBADMSG;
Lennart Poettering31ed59c2012-01-18 16:39:04 +01001733 }
1734 break;
1735
Lennart Poettering849958d2014-06-10 23:02:40 +02001736 case COPY_FILES:
Zbigniew Jędrzejewski-Szmek3f93da92015-01-09 02:00:37 -05001737 if (!i.argument) {
1738 i.argument = strappend("/usr/share/factory/", i.path);
1739 if (!i.argument)
Kay Sievers2f3b8732014-06-20 15:57:43 +02001740 return log_oom();
Zbigniew Jędrzejewski-Szmek3f93da92015-01-09 02:00:37 -05001741 } else if (!path_is_absolute(i.argument)) {
Lennart Poettering849958d2014-06-10 23:02:40 +02001742 log_error("[%s:%u] Source path is not absolute.", fname, line);
1743 return -EBADMSG;
1744 }
1745
Zbigniew Jędrzejewski-Szmek3f93da92015-01-09 02:00:37 -05001746 path_kill_slashes(i.argument);
Lennart Poettering849958d2014-06-10 23:02:40 +02001747 break;
1748
Lennart Poettering468d7262012-01-17 15:04:12 +01001749 case CREATE_CHAR_DEVICE:
1750 case CREATE_BLOCK_DEVICE: {
1751 unsigned major, minor;
1752
Zbigniew Jędrzejewski-Szmek3f93da92015-01-09 02:00:37 -05001753 if (!i.argument) {
Lennart Poettering468d7262012-01-17 15:04:12 +01001754 log_error("[%s:%u] Device file requires argument.", fname, line);
Zbigniew Jędrzejewski-Szmek7f2c1f42013-03-31 16:29:46 -04001755 return -EBADMSG;
Lennart Poettering468d7262012-01-17 15:04:12 +01001756 }
1757
Zbigniew Jędrzejewski-Szmek3f93da92015-01-09 02:00:37 -05001758 if (sscanf(i.argument, "%u:%u", &major, &minor) != 2) {
1759 log_error("[%s:%u] Can't parse device file major/minor '%s'.", fname, line, i.argument);
Zbigniew Jędrzejewski-Szmek7f2c1f42013-03-31 16:29:46 -04001760 return -EBADMSG;
Lennart Poettering468d7262012-01-17 15:04:12 +01001761 }
1762
Zbigniew Jędrzejewski-Szmek3f93da92015-01-09 02:00:37 -05001763 i.major_minor = makedev(major, minor);
Lennart Poettering468d7262012-01-17 15:04:12 +01001764 break;
1765 }
1766
Maciej Wereskiebf4e802014-12-04 10:32:10 +01001767 case SET_XATTR:
Zbigniew Jędrzejewski-Szmekb705ab62015-01-18 02:10:00 -05001768 case RECURSIVE_SET_XATTR:
Zbigniew Jędrzejewski-Szmek3f93da92015-01-09 02:00:37 -05001769 if (!i.argument) {
Maciej Wereskiebf4e802014-12-04 10:32:10 +01001770 log_error("[%s:%u] Set extended attribute requires argument.", fname, line);
1771 return -EBADMSG;
1772 }
Zbigniew Jędrzejewski-Szmek3f93da92015-01-09 02:00:37 -05001773 r = get_xattrs_from_arg(&i);
Maciej Wereskiebf4e802014-12-04 10:32:10 +01001774 if (r < 0)
1775 return r;
1776 break;
1777
Zbigniew Jędrzejewski-Szmekf8eeeaf2015-01-17 23:27:39 -05001778 case SET_ACL:
Zbigniew Jędrzejewski-Szmekb705ab62015-01-18 02:10:00 -05001779 case RECURSIVE_SET_ACL:
Zbigniew Jędrzejewski-Szmekf8eeeaf2015-01-17 23:27:39 -05001780 if (!i.argument) {
1781 log_error("[%s:%u] Set ACLs requires argument.", fname, line);
1782 return -EBADMSG;
1783 }
1784 r = get_acls_from_arg(&i);
1785 if (r < 0)
1786 return r;
1787 break;
1788
Goffredo Baroncelli22c3a6c2015-03-16 20:33:50 +01001789 case SET_ATTRIB:
1790 case RECURSIVE_SET_ATTRIB:
1791 if (!i.argument) {
1792 log_error("[%s:%u] Set attrib requires argument.", fname, line);
1793 return -EBADMSG;
1794 }
1795 r = get_attrib_from_arg(&i);
1796 if (r < 0)
1797 return r;
1798 break;
1799
Michal Schmidt777b87e2011-12-16 18:27:35 +01001800 default:
Zbigniew Jędrzejewski-Szmek582deb82015-01-24 01:54:05 -05001801 log_error("[%s:%u] Unknown command type '%c'.", fname, line, (char) i.type);
Zbigniew Jędrzejewski-Szmek7f2c1f42013-03-31 16:29:46 -04001802 return -EBADMSG;
Lennart Poettering5008d582010-09-28 02:34:02 +02001803 }
Lennart Poettering468d7262012-01-17 15:04:12 +01001804
Zbigniew Jędrzejewski-Szmek3f93da92015-01-09 02:00:37 -05001805 if (!path_is_absolute(i.path)) {
1806 log_error("[%s:%u] Path '%s' not absolute.", fname, line, i.path);
Zbigniew Jędrzejewski-Szmek7f2c1f42013-03-31 16:29:46 -04001807 return -EBADMSG;
Lennart Poettering3b63d2d2010-10-18 22:38:41 +02001808 }
1809
Zbigniew Jędrzejewski-Szmek3f93da92015-01-09 02:00:37 -05001810 path_kill_slashes(i.path);
Lennart Poettering3b63d2d2010-10-18 22:38:41 +02001811
Zbigniew Jędrzejewski-Szmek3f93da92015-01-09 02:00:37 -05001812 if (!should_include_path(i.path))
Zbigniew Jędrzejewski-Szmek7f2c1f42013-03-31 16:29:46 -04001813 return 0;
Lennart Poettering5008d582010-09-28 02:34:02 +02001814
Michael Marineaucf9a4ab2014-03-13 21:32:13 -07001815 if (arg_root) {
Lennart Poetteringcde684a2014-06-10 22:50:46 +02001816 char *p;
1817
Zbigniew Jędrzejewski-Szmek3f93da92015-01-09 02:00:37 -05001818 p = strappend(arg_root, i.path);
Michael Marineaucf9a4ab2014-03-13 21:32:13 -07001819 if (!p)
1820 return log_oom();
1821
Zbigniew Jędrzejewski-Szmek3f93da92015-01-09 02:00:37 -05001822 free(i.path);
1823 i.path = p;
Michael Marineaucf9a4ab2014-03-13 21:32:13 -07001824 }
1825
Lennart Poettering5008d582010-09-28 02:34:02 +02001826 if (user && !streq(user, "-")) {
Lennart Poettering4b678342011-07-23 01:17:59 +02001827 const char *u = user;
Lennart Poettering5008d582010-09-28 02:34:02 +02001828
Zbigniew Jędrzejewski-Szmek3f93da92015-01-09 02:00:37 -05001829 r = get_user_creds(&u, &i.uid, NULL, NULL, NULL);
Lennart Poettering4b678342011-07-23 01:17:59 +02001830 if (r < 0) {
Lennart Poettering5008d582010-09-28 02:34:02 +02001831 log_error("[%s:%u] Unknown user '%s'.", fname, line, user);
Zbigniew Jędrzejewski-Szmek7f2c1f42013-03-31 16:29:46 -04001832 return r;
Lennart Poettering5008d582010-09-28 02:34:02 +02001833 }
1834
Zbigniew Jędrzejewski-Szmek3f93da92015-01-09 02:00:37 -05001835 i.uid_set = true;
Lennart Poettering5008d582010-09-28 02:34:02 +02001836 }
1837
1838 if (group && !streq(group, "-")) {
Lennart Poettering4b678342011-07-23 01:17:59 +02001839 const char *g = group;
Lennart Poettering5008d582010-09-28 02:34:02 +02001840
Zbigniew Jędrzejewski-Szmek3f93da92015-01-09 02:00:37 -05001841 r = get_group_creds(&g, &i.gid);
Lennart Poettering4b678342011-07-23 01:17:59 +02001842 if (r < 0) {
Lennart Poettering5008d582010-09-28 02:34:02 +02001843 log_error("[%s:%u] Unknown group '%s'.", fname, line, group);
Zbigniew Jędrzejewski-Szmek7f2c1f42013-03-31 16:29:46 -04001844 return r;
Lennart Poettering5008d582010-09-28 02:34:02 +02001845 }
1846
Zbigniew Jędrzejewski-Szmek3f93da92015-01-09 02:00:37 -05001847 i.gid_set = true;
Lennart Poettering5008d582010-09-28 02:34:02 +02001848 }
1849
Lennart Poettering3b63d2d2010-10-18 22:38:41 +02001850 if (mode && !streq(mode, "-")) {
Lennart Poetteringabef3f92014-06-11 10:14:07 +02001851 const char *mm = mode;
Lennart Poettering3b63d2d2010-10-18 22:38:41 +02001852 unsigned m;
Lennart Poettering5008d582010-09-28 02:34:02 +02001853
Lennart Poetteringabef3f92014-06-11 10:14:07 +02001854 if (*mm == '~') {
Zbigniew Jędrzejewski-Szmek3f93da92015-01-09 02:00:37 -05001855 i.mask_perms = true;
Lennart Poetteringabef3f92014-06-11 10:14:07 +02001856 mm++;
1857 }
1858
1859 if (sscanf(mm, "%o", &m) != 1) {
Lennart Poettering3b63d2d2010-10-18 22:38:41 +02001860 log_error("[%s:%u] Invalid mode '%s'.", fname, line, mode);
Zbigniew Jędrzejewski-Szmek7f2c1f42013-03-31 16:29:46 -04001861 return -ENOENT;
Lennart Poettering5008d582010-09-28 02:34:02 +02001862 }
1863
Zbigniew Jędrzejewski-Szmek3f93da92015-01-09 02:00:37 -05001864 i.mode = m;
1865 i.mode_set = true;
Lennart Poettering3b63d2d2010-10-18 22:38:41 +02001866 } else
Zbigniew Jędrzejewski-Szmek3f93da92015-01-09 02:00:37 -05001867 i.mode = IN_SET(i.type, CREATE_DIRECTORY, CREATE_SUBVOLUME, TRUNCATE_DIRECTORY)
1868 ? 0755 : 0644;
Lennart Poettering3b63d2d2010-10-18 22:38:41 +02001869
1870 if (age && !streq(age, "-")) {
Lennart Poettering24f3a372012-06-20 09:05:50 +02001871 const char *a = age;
1872
1873 if (*a == '~') {
Zbigniew Jędrzejewski-Szmek3f93da92015-01-09 02:00:37 -05001874 i.keep_first_level = true;
Lennart Poettering24f3a372012-06-20 09:05:50 +02001875 a++;
1876 }
1877
Zbigniew Jędrzejewski-Szmek3f93da92015-01-09 02:00:37 -05001878 if (parse_sec(a, &i.age) < 0) {
Lennart Poettering3b63d2d2010-10-18 22:38:41 +02001879 log_error("[%s:%u] Invalid age '%s'.", fname, line, age);
Zbigniew Jędrzejewski-Szmek7f2c1f42013-03-31 16:29:46 -04001880 return -EBADMSG;
Lennart Poettering5008d582010-09-28 02:34:02 +02001881 }
1882
Zbigniew Jędrzejewski-Szmek3f93da92015-01-09 02:00:37 -05001883 i.age_set = true;
Lennart Poettering5008d582010-09-28 02:34:02 +02001884 }
1885
Zbigniew Jędrzejewski-Szmek3f93da92015-01-09 02:00:37 -05001886 h = needs_glob(i.type) ? globs : items;
Lennart Poettering022707d2011-01-05 16:11:15 +01001887
Zbigniew Jędrzejewski-Szmek3f93da92015-01-09 02:00:37 -05001888 existing = hashmap_get(h, i.path);
Lennart Poettering468d7262012-01-17 15:04:12 +01001889 if (existing) {
Zbigniew Jędrzejewski-Szmek3f93da92015-01-09 02:00:37 -05001890 unsigned n;
1891
1892 for (n = 0; n < existing->count; n++) {
Martin Pitt6487ada2015-03-05 14:58:56 +01001893 if (!item_compatible(existing->items + n, &i)) {
Zbigniew Jędrzejewski-Szmek505ef0e2015-01-09 01:10:02 -05001894 log_warning("[%s:%u] Duplicate line for path \"%s\", ignoring.",
Zbigniew Jędrzejewski-Szmek3f93da92015-01-09 02:00:37 -05001895 fname, line, i.path);
Martin Pitt6487ada2015-03-05 14:58:56 +01001896 return 0;
1897 }
Maciej Wereskiebf4e802014-12-04 10:32:10 +01001898 }
1899 } else {
Zbigniew Jędrzejewski-Szmek3f93da92015-01-09 02:00:37 -05001900 existing = new0(ItemArray, 1);
1901 r = hashmap_put(h, i.path, existing);
1902 if (r < 0)
1903 return log_oom();
Lennart Poetteringbfe95f32011-04-08 04:49:43 +02001904 }
1905
Zbigniew Jędrzejewski-Szmek3f93da92015-01-09 02:00:37 -05001906 if (!GREEDY_REALLOC(existing->items, existing->size, existing->count + 1))
1907 return log_oom();
Lennart Poettering5008d582010-09-28 02:34:02 +02001908
Zbigniew Jędrzejewski-Szmek3f93da92015-01-09 02:00:37 -05001909 memcpy(existing->items + existing->count++, &i, sizeof(i));
1910 zero(i);
Zbigniew Jędrzejewski-Szmek7f2c1f42013-03-31 16:29:46 -04001911 return 0;
Lennart Poettering5008d582010-09-28 02:34:02 +02001912}
1913
Zbigniew Jędrzejewski-Szmek601185b2014-08-02 11:12:21 -04001914static void help(void) {
Lennart Poettering522d4a42011-02-13 15:08:15 +01001915 printf("%s [OPTIONS...] [CONFIGURATION FILE...]\n\n"
1916 "Creates, deletes and cleans up volatile and temporary files and directories.\n\n"
Dave Reisner5c795112013-07-24 11:19:24 -04001917 " -h --help Show this help\n"
Lennart Poetteringeb9da372013-11-06 18:28:39 +01001918 " --version Show package version\n"
Dave Reisner5c795112013-07-24 11:19:24 -04001919 " --create Create marked files/directories\n"
1920 " --clean Clean up marked directories\n"
1921 " --remove Remove marked files/directories\n"
Zbigniew Jędrzejewski-Szmek81815652013-12-30 13:00:38 -05001922 " --boot Execute actions only safe at boot\n"
Zbigniew Jędrzejewski-Szmek79ca8882015-01-27 21:22:08 -05001923 " --prefix=PATH Only apply rules with the specified prefix\n"
1924 " --exclude-prefix=PATH Ignore rules with the specified prefix\n"
Michael Marineaucf9a4ab2014-03-13 21:32:13 -07001925 " --root=PATH Operate on an alternate filesystem root\n",
Lennart Poettering3b63d2d2010-10-18 22:38:41 +02001926 program_invocation_short_name);
Lennart Poettering3b63d2d2010-10-18 22:38:41 +02001927}
1928
1929static int parse_argv(int argc, char *argv[]) {
1930
1931 enum {
Lennart Poetteringeb9da372013-11-06 18:28:39 +01001932 ARG_VERSION = 0x100,
Lennart Poettering3b63d2d2010-10-18 22:38:41 +02001933 ARG_CREATE,
1934 ARG_CLEAN,
Lennart Poetteringfba6e682011-02-13 14:00:54 +01001935 ARG_REMOVE,
Zbigniew Jędrzejewski-Szmek81815652013-12-30 13:00:38 -05001936 ARG_BOOT,
Dave Reisner5c795112013-07-24 11:19:24 -04001937 ARG_PREFIX,
1938 ARG_EXCLUDE_PREFIX,
Michael Marineaucf9a4ab2014-03-13 21:32:13 -07001939 ARG_ROOT,
Lennart Poettering3b63d2d2010-10-18 22:38:41 +02001940 };
1941
1942 static const struct option options[] = {
Dave Reisner5c795112013-07-24 11:19:24 -04001943 { "help", no_argument, NULL, 'h' },
Lennart Poetteringeb9da372013-11-06 18:28:39 +01001944 { "version", no_argument, NULL, ARG_VERSION },
Dave Reisner5c795112013-07-24 11:19:24 -04001945 { "create", no_argument, NULL, ARG_CREATE },
1946 { "clean", no_argument, NULL, ARG_CLEAN },
1947 { "remove", no_argument, NULL, ARG_REMOVE },
Zbigniew Jędrzejewski-Szmek81815652013-12-30 13:00:38 -05001948 { "boot", no_argument, NULL, ARG_BOOT },
Dave Reisner5c795112013-07-24 11:19:24 -04001949 { "prefix", required_argument, NULL, ARG_PREFIX },
1950 { "exclude-prefix", required_argument, NULL, ARG_EXCLUDE_PREFIX },
Michael Marineaucf9a4ab2014-03-13 21:32:13 -07001951 { "root", required_argument, NULL, ARG_ROOT },
Lennart Poetteringeb9da372013-11-06 18:28:39 +01001952 {}
Lennart Poettering3b63d2d2010-10-18 22:38:41 +02001953 };
1954
1955 int c;
1956
1957 assert(argc >= 0);
1958 assert(argv);
1959
Zbigniew Jędrzejewski-Szmek601185b2014-08-02 11:12:21 -04001960 while ((c = getopt_long(argc, argv, "h", options, NULL)) >= 0)
Lennart Poettering3b63d2d2010-10-18 22:38:41 +02001961
1962 switch (c) {
1963
1964 case 'h':
Zbigniew Jędrzejewski-Szmek601185b2014-08-02 11:12:21 -04001965 help();
1966 return 0;
Lennart Poetteringeb9da372013-11-06 18:28:39 +01001967
1968 case ARG_VERSION:
1969 puts(PACKAGE_STRING);
1970 puts(SYSTEMD_FEATURES);
Lennart Poettering3b63d2d2010-10-18 22:38:41 +02001971 return 0;
1972
1973 case ARG_CREATE:
1974 arg_create = true;
1975 break;
1976
1977 case ARG_CLEAN:
1978 arg_clean = true;
1979 break;
1980
1981 case ARG_REMOVE:
1982 arg_remove = true;
1983 break;
1984
Zbigniew Jędrzejewski-Szmek81815652013-12-30 13:00:38 -05001985 case ARG_BOOT:
1986 arg_boot = true;
Zbigniew Jędrzejewski-Szmekc4708f12013-12-20 20:25:39 -05001987 break;
1988
Lennart Poetteringfba6e682011-02-13 14:00:54 +01001989 case ARG_PREFIX:
Lennart Poettering7bc040f2014-06-11 01:26:28 +02001990 if (strv_push(&arg_include_prefixes, optarg) < 0)
Dave Reisnera2aced42013-07-24 11:10:05 -04001991 return log_oom();
Lennart Poetteringfba6e682011-02-13 14:00:54 +01001992 break;
1993
Dave Reisner5c795112013-07-24 11:19:24 -04001994 case ARG_EXCLUDE_PREFIX:
Lennart Poettering7bc040f2014-06-11 01:26:28 +02001995 if (strv_push(&arg_exclude_prefixes, optarg) < 0)
Dave Reisner5c795112013-07-24 11:19:24 -04001996 return log_oom();
1997 break;
1998
Michael Marineaucf9a4ab2014-03-13 21:32:13 -07001999 case ARG_ROOT:
Lennart Poettering753615e2014-06-12 23:07:17 +02002000 free(arg_root);
Michael Marineaucf9a4ab2014-03-13 21:32:13 -07002001 arg_root = path_make_absolute_cwd(optarg);
2002 if (!arg_root)
2003 return log_oom();
Lennart Poettering753615e2014-06-12 23:07:17 +02002004
Michael Marineaucf9a4ab2014-03-13 21:32:13 -07002005 path_kill_slashes(arg_root);
2006 break;
2007
Lennart Poettering3b63d2d2010-10-18 22:38:41 +02002008 case '?':
2009 return -EINVAL;
2010
2011 default:
Lennart Poetteringeb9da372013-11-06 18:28:39 +01002012 assert_not_reached("Unhandled option");
Lennart Poettering3b63d2d2010-10-18 22:38:41 +02002013 }
Lennart Poettering3b63d2d2010-10-18 22:38:41 +02002014
2015 if (!arg_clean && !arg_create && !arg_remove) {
Harald Hoyer35b8ca32011-02-21 15:32:17 +01002016 log_error("You need to specify at least one of --clean, --create or --remove.");
Lennart Poettering3b63d2d2010-10-18 22:38:41 +02002017 return -EINVAL;
2018 }
2019
2020 return 1;
2021}
2022
Lennart Poetteringfba6e682011-02-13 14:00:54 +01002023static int read_config_file(const char *fn, bool ignore_enoent) {
Lennart Poettering1731e342013-09-17 11:02:02 -05002024 _cleanup_fclose_ FILE *f = NULL;
2025 char line[LINE_MAX];
Michal Sekletar78a92a52013-01-18 16:13:08 +01002026 Iterator iterator;
Lennart Poettering1731e342013-09-17 11:02:02 -05002027 unsigned v = 0;
Michal Sekletar78a92a52013-01-18 16:13:08 +01002028 Item *i;
Lennart Poettering1731e342013-09-17 11:02:02 -05002029 int r;
Lennart Poetteringfba6e682011-02-13 14:00:54 +01002030
2031 assert(fn);
2032
Michael Marineaucf9a4ab2014-03-13 21:32:13 -07002033 r = search_and_fopen_nulstr(fn, "re", arg_root, conf_file_dirs, &f);
Lennart Poetteringfabe5c02013-02-11 23:48:36 +01002034 if (r < 0) {
Zbigniew Jędrzejewski-Szmek582deb82015-01-24 01:54:05 -05002035 if (ignore_enoent && r == -ENOENT) {
2036 log_debug_errno(r, "Failed to open \"%s\": %m", fn);
Lennart Poetteringfba6e682011-02-13 14:00:54 +01002037 return 0;
Zbigniew Jędrzejewski-Szmek582deb82015-01-24 01:54:05 -05002038 }
Lennart Poetteringfba6e682011-02-13 14:00:54 +01002039
Michal Schmidt8d3d7072014-11-28 19:13:53 +01002040 return log_error_errno(r, "Failed to open '%s', ignoring: %m", fn);
Lennart Poetteringfba6e682011-02-13 14:00:54 +01002041 }
Zbigniew Jędrzejewski-Szmek582deb82015-01-24 01:54:05 -05002042 log_debug("Reading config file \"%s\".", fn);
Lennart Poetteringfba6e682011-02-13 14:00:54 +01002043
Lennart Poettering1731e342013-09-17 11:02:02 -05002044 FOREACH_LINE(line, f, break) {
2045 char *l;
Lennart Poetteringfba6e682011-02-13 14:00:54 +01002046 int k;
2047
Lennart Poetteringfba6e682011-02-13 14:00:54 +01002048 v++;
2049
2050 l = strstrip(line);
2051 if (*l == '#' || *l == 0)
2052 continue;
2053
Lennart Poettering1731e342013-09-17 11:02:02 -05002054 k = parse_line(fn, v, l);
2055 if (k < 0 && r == 0)
2056 r = k;
Lennart Poetteringfba6e682011-02-13 14:00:54 +01002057 }
2058
Michal Sekletar78a92a52013-01-18 16:13:08 +01002059 /* we have to determine age parameter for each entry of type X */
2060 HASHMAP_FOREACH(i, globs, iterator) {
2061 Iterator iter;
2062 Item *j, *candidate_item = NULL;
2063
2064 if (i->type != IGNORE_DIRECTORY_PATH)
2065 continue;
2066
2067 HASHMAP_FOREACH(j, items, iter) {
Lennart Poetteringd7b8eec2014-12-27 18:46:36 +01002068 if (j->type != CREATE_DIRECTORY && j->type != TRUNCATE_DIRECTORY && j->type != CREATE_SUBVOLUME)
Michal Sekletar78a92a52013-01-18 16:13:08 +01002069 continue;
2070
2071 if (path_equal(j->path, i->path)) {
2072 candidate_item = j;
2073 break;
2074 }
2075
2076 if ((!candidate_item && path_startswith(i->path, j->path)) ||
2077 (candidate_item && path_startswith(j->path, candidate_item->path) && (fnmatch(i->path, j->path, FNM_PATHNAME | FNM_PERIOD) == 0)))
2078 candidate_item = j;
2079 }
2080
Richard Weinberger9ed2a352014-09-09 11:09:37 +02002081 if (candidate_item && candidate_item->age_set) {
Michal Sekletar78a92a52013-01-18 16:13:08 +01002082 i->age = candidate_item->age;
2083 i->age_set = true;
2084 }
2085 }
2086
Lennart Poetteringfba6e682011-02-13 14:00:54 +01002087 if (ferror(f)) {
Michal Schmidt56f64d92014-11-28 19:29:59 +01002088 log_error_errno(errno, "Failed to read from file %s: %m", fn);
Lennart Poetteringfba6e682011-02-13 14:00:54 +01002089 if (r == 0)
2090 r = -EIO;
2091 }
2092
Lennart Poetteringfba6e682011-02-13 14:00:54 +01002093 return r;
2094}
2095
Lennart Poettering5008d582010-09-28 02:34:02 +02002096int main(int argc, char *argv[]) {
Lennart Poetteringfabe5c02013-02-11 23:48:36 +01002097 int r, k;
Zbigniew Jędrzejewski-Szmek3f93da92015-01-09 02:00:37 -05002098 ItemArray *a;
Lennart Poettering3b63d2d2010-10-18 22:38:41 +02002099 Iterator iterator;
Lennart Poettering5008d582010-09-28 02:34:02 +02002100
Lennart Poetteringfdcad0c2012-01-11 22:07:35 +01002101 r = parse_argv(argc, argv);
2102 if (r <= 0)
Lennart Poettering753615e2014-06-12 23:07:17 +02002103 goto finish;
Lennart Poettering3b63d2d2010-10-18 22:38:41 +02002104
Lennart Poetteringeb0ca9e2011-02-12 09:31:38 +01002105 log_set_target(LOG_TARGET_AUTO);
Lennart Poettering5008d582010-09-28 02:34:02 +02002106 log_parse_environment();
2107 log_open();
2108
Lennart Poettering4c126262011-08-01 20:52:18 +02002109 umask(0022);
2110
WaLyong Chocc56faf2014-10-23 17:23:46 +09002111 mac_selinux_init(NULL);
Lennart Poettering5008d582010-09-28 02:34:02 +02002112
Michal Schmidtd5099ef2014-08-13 01:00:18 +02002113 items = hashmap_new(&string_hash_ops);
2114 globs = hashmap_new(&string_hash_ops);
Lennart Poetteringb8bb3e82011-02-12 09:31:25 +01002115
2116 if (!items || !globs) {
Lennart Poetteringfabe5c02013-02-11 23:48:36 +01002117 r = log_oom();
Lennart Poettering3b63d2d2010-10-18 22:38:41 +02002118 goto finish;
2119 }
2120
Lennart Poetteringfabe5c02013-02-11 23:48:36 +01002121 r = 0;
Lennart Poettering5008d582010-09-28 02:34:02 +02002122
Lennart Poetteringfba6e682011-02-13 14:00:54 +01002123 if (optind < argc) {
2124 int j;
Lennart Poettering5008d582010-09-28 02:34:02 +02002125
Dave Reisner91256702012-06-08 22:31:19 -04002126 for (j = optind; j < argc; j++) {
Lennart Poetteringfabe5c02013-02-11 23:48:36 +01002127 k = read_config_file(argv[j], false);
2128 if (k < 0 && r == 0)
2129 r = k;
Dave Reisner91256702012-06-08 22:31:19 -04002130 }
Lennart Poettering5008d582010-09-28 02:34:02 +02002131
Lennart Poetteringfba6e682011-02-13 14:00:54 +01002132 } else {
Lennart Poetteringfabe5c02013-02-11 23:48:36 +01002133 _cleanup_strv_free_ char **files = NULL;
2134 char **f;
Lennart Poettering5008d582010-09-28 02:34:02 +02002135
Michael Marineaucf9a4ab2014-03-13 21:32:13 -07002136 r = conf_files_list_nulstr(&files, ".conf", arg_root, conf_file_dirs);
Kay Sievers44143302011-04-28 23:51:24 +02002137 if (r < 0) {
Michal Schmidtda927ba2014-11-28 13:19:16 +01002138 log_error_errno(r, "Failed to enumerate tmpfiles.d files: %m");
Kay Sievers44143302011-04-28 23:51:24 +02002139 goto finish;
2140 }
Lennart Poettering3b63d2d2010-10-18 22:38:41 +02002141
Kay Sievers772f8372011-04-25 21:38:21 +02002142 STRV_FOREACH(f, files) {
Lennart Poetteringfabe5c02013-02-11 23:48:36 +01002143 k = read_config_file(*f, true);
2144 if (k < 0 && r == 0)
2145 r = k;
Lennart Poettering5008d582010-09-28 02:34:02 +02002146 }
Lennart Poettering5008d582010-09-28 02:34:02 +02002147 }
2148
Zbigniew Jędrzejewski-Szmek3f93da92015-01-09 02:00:37 -05002149 HASHMAP_FOREACH(a, globs, iterator) {
2150 k = process_item_array(a);
Zbigniew Jędrzejewski-Szmek1db50422015-01-06 09:53:12 -05002151 if (k < 0 && r == 0)
2152 r = k;
2153 }
Lennart Poetteringb8bb3e82011-02-12 09:31:25 +01002154
Zbigniew Jędrzejewski-Szmek3f93da92015-01-09 02:00:37 -05002155 HASHMAP_FOREACH(a, items, iterator) {
2156 k = process_item_array(a);
Zbigniew Jędrzejewski-Szmek1db50422015-01-06 09:53:12 -05002157 if (k < 0 && r == 0)
2158 r = k;
2159 }
Lennart Poettering3b63d2d2010-10-18 22:38:41 +02002160
Lennart Poettering5008d582010-09-28 02:34:02 +02002161finish:
Zbigniew Jędrzejewski-Szmek3f93da92015-01-09 02:00:37 -05002162 while ((a = hashmap_steal_first(items)))
2163 item_array_free(a);
Lennart Poettering3b63d2d2010-10-18 22:38:41 +02002164
Zbigniew Jędrzejewski-Szmek3f93da92015-01-09 02:00:37 -05002165 while ((a = hashmap_steal_first(globs)))
2166 item_array_free(a);
Lennart Poettering17b90522011-02-14 21:55:06 +01002167
Lennart Poettering3b63d2d2010-10-18 22:38:41 +02002168 hashmap_free(items);
Lennart Poetteringb8bb3e82011-02-12 09:31:25 +01002169 hashmap_free(globs);
Lennart Poettering5008d582010-09-28 02:34:02 +02002170
Lennart Poettering7bc040f2014-06-11 01:26:28 +02002171 free(arg_include_prefixes);
2172 free(arg_exclude_prefixes);
Michael Marineaucf9a4ab2014-03-13 21:32:13 -07002173 free(arg_root);
Dave Reisnera2aced42013-07-24 11:10:05 -04002174
Lennart Poettering17b90522011-02-14 21:55:06 +01002175 set_free_free(unix_sockets);
2176
WaLyong Chocc56faf2014-10-23 17:23:46 +09002177 mac_selinux_finish();
Lennart Poettering29003cf2010-10-19 19:36:45 +02002178
Lennart Poetteringfabe5c02013-02-11 23:48:36 +01002179 return r < 0 ? EXIT_FAILURE : EXIT_SUCCESS;
Lennart Poettering5008d582010-09-28 02:34:02 +02002180}