Merge changes I0c8d4018,Ic9dfb243,I7e442b06 (17892731) · Commits · e / os / android_frameworks_native

cmds/installd/commands.cpp

+96 −28

Original line number	Diff line number	Diff line
		@@ -101,32 +101,100 @@ static std::string create_primary_profile(const std::string& profile_dir) {
		return StringPrintf("%s/%s", profile_dir.c_str(), PRIMARY_PROFILE_NAME);
		}

		/**
		* Perform restorecon of the given path, but only perform recursive restorecon
		* if the label of that top-level file actually changed. This can save us
		* significant time by avoiding no-op traversals of large filesystem trees.
		*/
		static int restorecon_app_data_lazy(const char* path, const char* seinfo, uid_t uid) {
		int res = 0;
		char* before = nullptr;
		char* after = nullptr;

		// Note that SELINUX_ANDROID_RESTORECON_DATADATA flag is set by
		// libselinux. Not needed here.

		if (lgetfilecon(path, &before) < 0) {
		PLOG(ERROR) << "Failed before getfilecon for " << path;
		goto fail;
		}
		if (selinux_android_restorecon_pkgdir(path, seinfo, uid, 0) < 0) {
		PLOG(ERROR) << "Failed top-level restorecon for " << path;
		goto fail;
		}
		if (lgetfilecon(path, &after) < 0) {
		PLOG(ERROR) << "Failed after getfilecon for " << path;
		goto fail;
		}

		// If the initial top-level restorecon above changed the label, then go
		// back and restorecon everything recursively
		if (strcmp(before, after)) {
		LOG(DEBUG) << "Detected label change from " << before << " to " << after << " at " << path
		<< "; running recursive restorecon";
		if (selinux_android_restorecon_pkgdir(path, seinfo, uid,
		SELINUX_ANDROID_RESTORECON_RECURSE) < 0) {
		PLOG(ERROR) << "Failed recursive restorecon for " << path;
		goto fail;
		}
		}

		goto done;
		fail:
		res = -1;
		done:
		free(before);
		free(after);
		return res;
		}

		static int prepare_app_dir(const std::string& path, mode_t target_mode, uid_t uid) {
		if (fs_prepare_dir_strict(path.c_str(), target_mode, uid, uid) != 0) {
		PLOG(ERROR) << "Failed to prepare " << path;
		return -1;
		}
		return 0;
		}

		static int prepare_app_dir(const std::string& parent, const char* name, mode_t target_mode,
		uid_t uid) {
		return prepare_app_dir(StringPrintf("%s/%s", parent.c_str(), name), target_mode, uid);
		}

		int create_app_data(const char uuid, const char pkgname, userid_t userid, int flags,
		appid_t appid, const char* seinfo, int target_sdk_version) {
		uid_t uid = multiuser_get_uid(userid, appid);
		int target_mode = target_sdk_version >= MIN_RESTRICTED_HOME_SDK_VERSION ? 0700 : 0751;
		mode_t target_mode = target_sdk_version >= MIN_RESTRICTED_HOME_SDK_VERSION ? 0700 : 0751;
		if (flags & FLAG_STORAGE_CE) {
		auto path = create_data_user_ce_package_path(uuid, userid, pkgname);
		if (fs_prepare_dir_strict(path.c_str(), target_mode, uid, uid) != 0) {
		PLOG(ERROR) << "Failed to prepare " << path;
		if (prepare_app_dir(path, target_mode, uid) \|\|
		prepare_app_dir(path, "cache", 0771, uid) \|\|
		prepare_app_dir(path, "code_cache", 0771, uid)) {
		return -1;
		}

		// Consider restorecon over contents if label changed
		if (restorecon_app_data_lazy(path.c_str(), seinfo, uid)) {
		return -1;
		}
		if (selinux_android_setfilecon(path.c_str(), pkgname, seinfo, uid) < 0) {
		PLOG(ERROR) << "Failed to setfilecon " << path;

		// Remember inode numbers of cache directories so that we can clear
		// contents while CE storage is locked
		if (write_path_inode(path, "cache", kXattrInodeCache) \|\|
		write_path_inode(path, "code_cache", kXattrInodeCodeCache)) {
		return -1;
		}
		}
		if (flags & FLAG_STORAGE_DE) {
		auto path = create_data_user_de_package_path(uuid, userid, pkgname);
		if (fs_prepare_dir_strict(path.c_str(), target_mode, uid, uid) == -1) {
		PLOG(ERROR) << "Failed to prepare " << path;
		if (prepare_app_dir(path, target_mode, uid)) {
		// TODO: include result once 25796509 is fixed
		return 0;
		}
		if (selinux_android_setfilecon(path.c_str(), pkgname, seinfo, uid) < 0) {
		PLOG(ERROR) << "Failed to setfilecon " << path;
		// TODO: include result once 25796509 is fixed
		return 0;

		// Consider restorecon over contents if label changed
		if (restorecon_app_data_lazy(path.c_str(), seinfo, uid)) {
		return -1;
		}

		if (property_get_bool("dalvik.vm.usejitprofiles")) {
		@@ -268,6 +336,19 @@ int clear_app_profiles(const char* pkgname) {

		int clear_app_data(const char uuid, const char pkgname, userid_t userid, int flags,
		ino_t ce_data_inode) {
		int res = 0;
		if (flags & FLAG_STORAGE_CE) {
		auto path = create_data_user_ce_package_path(uuid, userid, pkgname, ce_data_inode);
		if (flags & FLAG_CLEAR_CACHE_ONLY) {
		path = read_path_inode(path, "cache", kXattrInodeCache);
		} else if (flags & FLAG_CLEAR_CODE_CACHE_ONLY) {
		path = read_path_inode(path, "code_cache", kXattrInodeCodeCache);
		}
		if (access(path.c_str(), F_OK) == 0) {
		res \|= delete_dir_contents(path);
		}
		}
		if (flags & FLAG_STORAGE_DE) {
		std::string suffix = "";
		bool only_cache = false;
		if (flags & FLAG_CLEAR_CACHE_ONLY) {
		@@ -278,14 +359,6 @@ int clear_app_data(const char uuid, const char pkgname, userid_t userid, int f
		only_cache = true;
		}

		int res = 0;
		if (flags & FLAG_STORAGE_CE) {
		auto path = create_data_user_ce_package_path(uuid, userid, pkgname, ce_data_inode) + suffix;
		if (access(path.c_str(), F_OK) == 0) {
		res \|= delete_dir_contents(path);
		}
		}
		if (flags & FLAG_STORAGE_DE) {
		auto path = create_data_user_de_package_path(uuid, userid, pkgname) + suffix;
		if (access(path.c_str(), F_OK) == 0) {
		// TODO: include result once 25796509 is fixed
		@@ -629,14 +702,9 @@ int get_app_size(const char uuid, const char pkgname, int userid, int flags, i
		}

		int get_app_data_inode(const char uuid, const char pkgname, int userid, int flags, ino_t *inode) {
		struct stat buf;
		memset(&buf, 0, sizeof(buf));
		if (flags & FLAG_STORAGE_CE) {
		auto path = create_data_user_ce_package_path(uuid, userid, pkgname);
		if (stat(path.c_str(), &buf) == 0) {
		*inode = buf.st_ino;
		return 0;
		}
		return get_path_inode(path, inode);
		}
		return -1;
		}

cmds/installd/utils.cpp

+107 −17

Original line number	Diff line number	Diff line
		@@ -21,6 +21,7 @@
		#include <stdlib.h>
		#include <sys/stat.h>
		#include <sys/wait.h>
		#include <sys/xattr.h>

		#if defined(__APPLE__)
		#include <sys/mount.h>
		@@ -39,7 +40,9 @@
		#ifndef LOG_TAG
		#define LOG_TAG "installd"
		#endif

		#define CACHE_NOISY(x) //x
		#define DEBUG_XATTRS 0

		using android::base::StringPrintf;

		@@ -105,10 +108,12 @@ std::string create_data_user_ce_package_path(const char* volume_uuid, userid_t u
		while ((ent = readdir(dir))) {
		if (ent->d_ino == ce_data_inode) {
		auto resolved = StringPrintf("%s/%s", user_path.c_str(), ent->d_name);
		#if DEBUG_XATTRS
		if (resolved != fallback) {
		LOG(DEBUG) << "Resolved path " << resolved << " for inode " << ce_data_inode
		<< " instead of " << fallback;
		}
		#endif
		closedir(dir);
		return resolved;
		}
		@@ -551,7 +556,7 @@ static void* _cache_malloc(cache_t* cache, size_t len)
		if (res == NULL) {
		return NULL;
		}
		CACHE_NOISY(ALOGI("Allocated large cache mem block: %p size %d", res, len));
		CACHE_NOISY(ALOGI("Allocated large cache mem block: %p size %zu", res, len));
		// Link it into our list of blocks, not disrupting the current one.
		if (cache->memBlocks == NULL) {
		(void*)res = NULL;
		@@ -576,7 +581,7 @@ static void* _cache_malloc(cache_t* cache, size_t len)
		cache->curMemBlockEnd = newBlock + CACHE_BLOCK_SIZE;
		nextPos = res + len;
		}
		CACHE_NOISY(ALOGI("cache_malloc: ret %p size %d, block=%p, nextPos=%p",
		CACHE_NOISY(ALOGI("cache_malloc: ret %p size %zu, block=%p, nextPos=%p",
		res, len, cache->memBlocks, nextPos));
		cache->curMemBlockAvail = nextPos;
		return res;
		@@ -654,7 +659,7 @@ static cache_file_t* _add_cache_file_t(cache_t* cache, cache_dir_t* dir, time_t
		cache->availFiles = newAvail;
		cache->files = newFiles;
		}
		CACHE_NOISY(ALOGI("Setting file %p at position %d in array %p", file,
		CACHE_NOISY(ALOGI("Setting file %p at position %zd in array %p", file,
		cache->numFiles, cache->files));
		cache->files[cache->numFiles] = file;
		cache->numFiles++;
		@@ -779,6 +784,99 @@ static int _add_cache_files(cache_t cache, cache_dir_t parentDir, const char *
		return 0;
		}

		int get_path_inode(const std::string& path, ino_t *inode) {
		struct stat buf;
		memset(&buf, 0, sizeof(buf));
		if (stat(path.c_str(), &buf) != 0) {
		PLOG(WARNING) << "Failed to stat " << path;
		return -1;
		} else {
		*inode = buf.st_ino;
		return 0;
		}
		}

		/**
		* Write the inode of a specific child file into the given xattr on the
		* parent directory. This allows you to find the child later, even if its
		* name is encrypted.
		*/
		int write_path_inode(const std::string& parent, const char* name, const char* inode_xattr) {
		ino_t inode = 0;
		uint64_t inode_raw = 0;
		auto path = StringPrintf("%s/%s", parent.c_str(), name);

		if (get_path_inode(path, &inode) != 0) {
		// Path probably doesn't exist yet; ignore
		return 0;
		}

		// Check to see if already set correctly
		if (getxattr(parent.c_str(), inode_xattr, &inode_raw, sizeof(inode_raw)) == sizeof(inode_raw)) {
		if (inode_raw == inode) {
		// Already set correctly; skip writing
		return 0;
		} else {
		PLOG(WARNING) << "Mismatched inode value; found " << inode
		<< " on disk but marked value was " << inode_raw << "; overwriting";
		}
		}

		inode_raw = inode;
		if (setxattr(parent.c_str(), inode_xattr, &inode_raw, sizeof(inode_raw), 0) != 0 && errno != EOPNOTSUPP) {
		PLOG(ERROR) << "Failed to write xattr " << inode_xattr << " at " << parent;
		return -1;
		} else {
		return 0;
		}
		}

		/**
		* Read the inode of a specific child file from the given xattr on the
		* parent directory. Returns a currently valid path for that child, which
		* might have an encrypted name.
		*/
		std::string read_path_inode(const std::string& parent, const char* name, const char* inode_xattr) {
		ino_t inode = 0;
		uint64_t inode_raw = 0;
		auto fallback = StringPrintf("%s/%s", parent.c_str(), name);

		// Lookup the inode value written earlier
		if (getxattr(parent.c_str(), inode_xattr, &inode_raw, sizeof(inode_raw)) == sizeof(inode_raw)) {
		inode = inode_raw;
		}

		// For testing purposes, rely on the inode when defined; this could be
		// optimized to use access() in the future.
		if (inode != 0) {
		DIR* dir = opendir(parent.c_str());
		if (dir == nullptr) {
		PLOG(ERROR) << "Failed to opendir " << parent;
		return fallback;
		}

		struct dirent* ent;
		while ((ent = readdir(dir))) {
		if (ent->d_ino == inode) {
		auto resolved = StringPrintf("%s/%s", parent.c_str(), ent->d_name);
		#if DEBUG_XATTRS
		if (resolved != fallback) {
		LOG(DEBUG) << "Resolved path " << resolved << " for inode " << inode
		<< " instead of " << fallback;
		}
		#endif
		closedir(dir);
		return resolved;
		}
		}
		LOG(WARNING) << "Failed to resolve inode " << inode << "; using " << fallback;
		closedir(dir);
		return fallback;
		} else {
		return fallback;
		}
		}

		void add_cache_files(cache_t* cache, const std::string& data_path) {
		DIR *d;
		struct dirent *de;
		@@ -796,7 +894,6 @@ void add_cache_files(cache_t* cache, const std::string& data_path) {
		if (de->d_type == DT_DIR) {
		DIR* subdir;
		const char *name = de->d_name;
		char* pathpos;

		/* always skip "." and ".." */
		if (name[0] == '.') {
		@@ -804,16 +901,9 @@ void add_cache_files(cache_t* cache, const std::string& data_path) {
		if ((name[1] == '.') && (name[2] == 0)) continue;
		}

		strcpy(dirname, basepath);
		pathpos = dirname + strlen(dirname);
		if ((*(pathpos-1)) != '/') {
		*pathpos = '/';
		pathpos++;
		*pathpos = 0;
		}

		// TODO: also try searching using xattr when CE is locked
		snprintf(pathpos, sizeof(dirname)-(pathpos-dirname), "%s/cache", name);
		auto parent = StringPrintf("%s/%s", basepath, name);
		auto resolved = read_path_inode(parent, "cache", kXattrInodeCache);
		strcpy(dirname, resolved.c_str());
		CACHE_NOISY(ALOGI("Adding cache files from dir: %s\n", dirname));

		subdir = opendir(dirname);
		@@ -931,16 +1021,16 @@ void finish_cache_collection(cache_t* cache)
		{
		CACHE_NOISY(size_t i;)

		CACHE_NOISY(ALOGI("clear_cache_files: %d dirs, %d files\n", cache->numDirs, cache->numFiles));
		CACHE_NOISY(ALOGI("clear_cache_files: %zu dirs, %zu files\n", cache->numDirs, cache->numFiles));
		CACHE_NOISY(
		for (i=0; i<cache->numDirs; i++) {
		cache_dir_t* dir = cache->dirs[i];
		ALOGI("dir #%d: %p %s parent=%p\n", i, dir, dir->name, dir->parent);
		ALOGI("dir #%zu: %p %s parent=%p\n", i, dir, dir->name, dir->parent);
		})
		CACHE_NOISY(
		for (i=0; i<cache->numFiles; i++) {
		cache_file_t* file = cache->files[i];
		ALOGI("file #%d: %p %s time=%d dir=%p\n", i, file, file->name,
		ALOGI("file #%zu: %p %s time=%d dir=%p\n", i, file, file->name,
		(int)file->modTime, file->dir);
		})
		void* block = cache->memBlocks;

cmds/installd/utils.h

+8 −0

Original line number	Diff line number	Diff line
		@@ -62,6 +62,9 @@ typedef struct {
		int8_t* curMemBlockEnd;
		} cache_t;

		constexpr const char* kXattrInodeCache = "user.inode_cache";
		constexpr const char* kXattrInodeCodeCache = "user.inode_code_cache";

		int create_pkg_path(char path[PKG_PATH_MAX],
		const char *pkgname,
		const char *postfix,
		@@ -118,6 +121,11 @@ int64_t data_disk_free(const std::string& data_path);

		cache_t* start_cache_collection();

		int get_path_inode(const std::string& path, ino_t *inode);

		int write_path_inode(const std::string& parent, const char* name, const char* inode_xattr);
		std::string read_path_inode(const std::string& parent, const char* name, const char* inode_xattr);

		void add_cache_files(cache_t* cache, const std::string& data_path);

		void clear_cache_files(const std::string& data_path, cache_t* cache, int64_t free_size);