|
|
/* ----------------------------------------------------------------------- *
* * Copyright 2004-2006 H. Peter Anvin - All Rights Reserved * * Permission is hereby granted, free of charge, to any person * obtaining a copy of this software and associated documentation * files (the "Software"), to deal in the Software without * restriction, including without limitation the rights to use, * copy, modify, merge, publish, distribute, sublicense, and/or * sell copies of the Software, and to permit persons to whom * the Software is furnished to do so, subject to the following * conditions: * * The above copyright notice and this permission notice shall * be included in all copies or substantial portions of the Software. * * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, * EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES * OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND * NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT * HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, * WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR * OTHER DEALINGS IN THE SOFTWARE. * * ----------------------------------------------------------------------- */
/*
* runinitlib.c * * run_init(consoledev, realroot, init, initargs) * * This function should be called as the last thing in kinit, * from initramfs, it does the following: * * - Delete all files in the initramfs; * - Remounts /real-root onto the root filesystem; * - Chroots; * - Opens /dev/console; * - Spawns the specified init program (with arguments.) */
#include <alloca.h>
#include <assert.h>
#include <dirent.h>
#include <errno.h>
#include <fcntl.h>
#include <string.h>
#include <stdlib.h>
#include <stdio.h>
#include <unistd.h>
#include <sys/mount.h>
#include <sys/stat.h>
#include <sys/types.h>
#include <sys/vfs.h>
#include "run-init.h"
/* Make it possible to compile on glibc by including constants that the
always-behind shipped glibc headers may not include. Classic example on why the lack of ABI headers screw us up. */ #ifndef TMPFS_MAGIC
# define TMPFS_MAGIC 0x01021994
#endif
#ifndef RAMFS_MAGIC
# define RAMFS_MAGIC 0x858458f6
#endif
#ifndef MS_MOVE
# define MS_MOVE 8192
#endif
static int nuke(const char *what);
static int nuke_dirent(int len, const char *dir, const char *name, dev_t me) { int bytes = len+strlen(name)+2; char path[bytes]; int xlen; struct stat st;
xlen = snprintf(path, bytes, "%s/%s", dir, name); assert(xlen < bytes);
if ( lstat(path, &st) ) return ENOENT; /* Return 0 since already gone? */
if ( st.st_dev != me ) return 0; /* DO NOT recurse down mount points!!!!! */
return nuke(path); }
/* Wipe the contents of a directory, but not the directory itself */ static int nuke_dir(const char *what) { int len = strlen(what); DIR *dir; struct dirent *d; int err = 0; struct stat st;
if ( lstat(what, &st) ) return errno;
if ( !S_ISDIR(st.st_mode) ) return ENOTDIR;
if ( !(dir = opendir(what)) ) { /* EACCES means we can't read it. Might be empty and removable;
if not, the rmdir() in nuke() will trigger an error. */ return (errno == EACCES) ? 0 : errno; }
while ( (d = readdir(dir)) ) { /* Skip . and .. */ if ( d->d_name[0] == '.' && (d->d_name[1] == '\0' || (d->d_name[1] == '.' && d->d_name[2] == '\0')) ) continue;
err = nuke_dirent(len, what, d->d_name, st.st_dev); if ( err ) { closedir(dir); return err; } }
closedir(dir);
return 0; }
static int nuke(const char *what) { int rv; int err = 0;
rv = unlink(what); if ( rv < 0 ) { if ( errno == EISDIR ) { /* It's a directory. */ err = nuke_dir(what); if ( !err ) err = rmdir(what) ? errno : err; } else { err = errno; } }
if ( err ) { errno = err; die(what); } else { return 0; } }
int run_init(const char *realroot, const char *console, const char *init, char **initargs) { struct stat rst, cst, ist; struct statfs sfs; int confd;
/* First, change to the new root directory */ if ( chdir(realroot) ) die("chdir to new root");
/* This is a potentially highly destructive program. Take some
extra precautions. */
/* Make sure the current directory is not on the same filesystem
as the root directory */ if ( stat("/", &rst) || stat(".", &cst) ) die("stat");
if ( rst.st_dev == cst.st_dev ) die("current directory on the same filesystem as the root");
/* The initramfs should have /init */ if ( stat("/init", &ist) || !S_ISREG(ist.st_mode) ) die("can't find /init on initramfs");
/* Make sure we're on a ramfs */ if ( statfs("/", &sfs) ) die("statfs /"); if ( sfs.f_type != RAMFS_MAGIC && sfs.f_type != TMPFS_MAGIC ) die("rootfs not a ramfs or tmpfs");
/* Okay, I think we should be safe... */
/* Delete rootfs contents */ if ( nuke_dir("/") ) die("nuking initramfs contents");
/* Overmount the root */ if ( mount(".", "/", NULL, MS_MOVE, NULL) ) die("overmounting root");
/* chroot, chdir */ if ( chroot(".") || chdir("/") ) die("chroot");
/* Open /dev/console */ if ( (confd = open(console, O_RDWR)) < 0 ) die("opening console"); dup2(confd, 0); dup2(confd, 1); dup2(confd, 2); close(confd);
/* Spawn init */ execv(init, initargs); die(init); /* Failed to spawn init */ }
|