2010-04-14 05:35:46 +02:00
|
|
|
/*
|
|
|
|
* Copyright (C) 2010 The Android Open Source Project
|
|
|
|
*
|
|
|
|
* Licensed under the Apache License, Version 2.0 (the "License");
|
|
|
|
* you may not use this file except in compliance with the License.
|
|
|
|
* You may obtain a copy of the License at
|
|
|
|
*
|
|
|
|
* http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
*
|
|
|
|
* Unless required by applicable law or agreed to in writing, software
|
|
|
|
* distributed under the License is distributed on an "AS IS" BASIS,
|
|
|
|
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
|
|
* See the License for the specific language governing permissions and
|
|
|
|
* limitations under the License.
|
|
|
|
*/
|
|
|
|
|
|
|
|
#ifndef _INIT_UTIL_H_
|
|
|
|
#define _INIT_UTIL_H_
|
|
|
|
|
2010-04-21 21:04:20 +02:00
|
|
|
#include <sys/stat.h>
|
|
|
|
#include <sys/types.h>
|
|
|
|
|
2016-11-11 02:43:47 +01:00
|
|
|
#include <chrono>
|
2015-04-26 02:42:52 +02:00
|
|
|
#include <functional>
|
2016-11-29 20:20:58 +01:00
|
|
|
#include <ostream>
|
|
|
|
#include <string>
|
2015-02-06 21:19:48 +01:00
|
|
|
|
2017-03-24 19:43:02 +01:00
|
|
|
#include <android-base/chrono_utils.h>
|
2017-05-02 02:10:09 +02:00
|
|
|
#include <selinux/label.h>
|
2017-03-24 19:43:02 +01:00
|
|
|
|
2017-08-03 21:54:07 +02:00
|
|
|
#include "result.h"
|
|
|
|
|
2014-11-25 04:52:41 +01:00
|
|
|
#define COLDBOOT_DONE "/dev/.coldboot_done"
|
2010-04-21 21:04:20 +02:00
|
|
|
|
2017-03-24 19:43:02 +01:00
|
|
|
using android::base::boot_clock;
|
2016-11-11 02:43:47 +01:00
|
|
|
using namespace std::chrono_literals;
|
|
|
|
|
2017-06-22 21:53:17 +02:00
|
|
|
namespace android {
|
|
|
|
namespace init {
|
|
|
|
|
2017-05-05 23:44:35 +02:00
|
|
|
int CreateSocket(const char* name, int type, bool passcred, mode_t perm, uid_t uid, gid_t gid,
|
2017-08-10 21:22:44 +02:00
|
|
|
const char* socketcon);
|
2015-02-06 21:19:48 +01:00
|
|
|
|
2017-08-03 21:54:07 +02:00
|
|
|
Result<std::string> ReadFile(const std::string& path);
|
|
|
|
Result<Success> WriteFile(const std::string& path, const std::string& content);
|
2015-02-06 21:19:48 +01:00
|
|
|
|
2017-08-03 21:54:07 +02:00
|
|
|
Result<uid_t> DecodeUid(const std::string& name);
|
2010-04-14 05:35:46 +02:00
|
|
|
|
2017-08-10 21:22:44 +02:00
|
|
|
bool mkdir_recursive(const std::string& pathname, mode_t mode);
|
2016-11-11 02:43:47 +01:00
|
|
|
int wait_for_file(const char *filename, std::chrono::nanoseconds timeout);
|
2015-05-07 04:19:24 +02:00
|
|
|
void import_kernel_cmdline(bool in_qemu,
|
2016-07-28 01:25:51 +02:00
|
|
|
const std::function<void(const std::string&, const std::string&, bool)>&);
|
2017-08-10 21:22:44 +02:00
|
|
|
bool make_dir(const std::string& path, mode_t mode);
|
2015-05-08 17:30:33 +02:00
|
|
|
std::string bytes_to_hex(const uint8_t *bytes, size_t bytes_len);
|
2015-07-25 01:57:14 +02:00
|
|
|
bool is_dir(const char* pathname);
|
2015-08-26 20:43:36 +02:00
|
|
|
bool expand_props(const std::string& src, std::string* dst);
|
2016-11-29 20:20:58 +01:00
|
|
|
|
Allow the use of a custom Android DT directory
On platforms that use ACPI instead of Device Tree (DT), such as
Ranchu x86/x86_64, /proc/device-tree/firmware/android/ does not
exist. As a result, Android O is unable to mount /system, etc.
at the first stage of init:
init: First stage mount skipped (missing/incompatible fstab in
device tree)
Those platforms may create another directory that mimics the layout
of the standard DT directory in procfs, and store early mount
configuration there. E.g., Ranchu x86/x86_64 creates one in sysfs
using information encoded in the ACPI tables:
https://android-review.googlesource.com/442472
https://android-review.googlesource.com/443432
https://android-review.googlesource.com/442393
https://android-review.googlesource.com/442395
Therefore, instead of hardcoding the Android DT path, load it from
the kernel command line using a new Android-specific property key
("androidboot.android_dt_dir"). If no such property exists, fall
back to the standard procfs path (so no change is needed for DT-
aware platforms).
Note that init/ and fs_mgr/ each have their own copy of the Android
DT path, because they do not share any global state. A future CL
should remove the duplication by refactoring.
With this CL as well as the above ones, the said warning is gone,
but early mount fails. That is a separate bug, though, and will be
addressed by another CL.
Test: Boot patched sdk_phone_x86-userdebug system image with patched
Goldfish 3.18 x86 kernel in patched Android Emulator, verify
the "init: First stage mount skipped" warning no longer shows
in dmesg.
Change-Id: Ib6df577319503ec1ca778de2b5458cc72ce07415
Signed-off-by: Yu Ning <yu.ning@intel.com>
2017-07-26 11:54:08 +02:00
|
|
|
// Returns the platform's Android DT directory as specified in the kernel cmdline.
|
|
|
|
// If the platform does not configure a custom DT path, returns the standard one (based in procfs).
|
|
|
|
const std::string& get_android_dt_dir();
|
|
|
|
// Reads or compares the content of device tree file under the platform's Android DT directory.
|
2017-04-17 16:17:09 +02:00
|
|
|
bool read_android_dt_file(const std::string& sub_path, std::string* dt_content);
|
|
|
|
bool is_android_dt_value_expected(const std::string& sub_path, const std::string& expected_content);
|
|
|
|
|
2018-02-14 01:50:08 +01:00
|
|
|
bool IsLegalPropertyName(const std::string& name);
|
|
|
|
|
init: move InitKernelLogging() to first stage init
The kernel opens /dev/console and uses that fd for stdin/stdout/stderr
if there is a serial console enabled and no initramfs, otherwise it
does not provide any fds for stdin/stdout/stderr. InitKernelLogging()
is used to close these existing fds if they exist and replace them
with /dev/null.
Currently, InitKernelLogging() is only called in second stage init,
which means that processes exec'ed from first stage init will inherit
the kernel provided fds if any are provided.
In the case that they are provided, the exec of second stage init
causes an SELinux denial as it does not have access to /dev/console.
In the case that they are not provided, exec of any further process is
potentially dangerous as the first fd's opened by that process will
take the stdin/stdout/stderr fileno's, which can cause issues if
printf(), etc is then used by that process.
Lastly, simply moving InitKernelLogging() to first stage init is not
enough, since first stage init still runs in kernel context and future
child processes will not have permissions to access kernel context
resources. Therefore, it must be done for a second time in second
stage init.
Bug: 117281017
Test: no audits when booting marlin.
Change-Id: If27edab5c32b27765e24c32fbed506ef625889de
2018-10-04 22:14:14 +02:00
|
|
|
void InitKernelLogging(char** argv, std::function<void(const char*)> abort_function);
|
|
|
|
|
2017-06-22 21:53:17 +02:00
|
|
|
} // namespace init
|
|
|
|
} // namespace android
|
|
|
|
|
2010-04-14 05:35:46 +02:00
|
|
|
#endif
|