xref: /freebsd/sbin/init/init.c (revision 4ae35b5d2ad8492bff7e5ee9f940d647e6ce3cbf)
18fae3551SRodney W. Grimes /*-
28fae3551SRodney W. Grimes  * Copyright (c) 1991, 1993
38fae3551SRodney W. Grimes  *	The Regents of the University of California.  All rights reserved.
48fae3551SRodney W. Grimes  *
58fae3551SRodney W. Grimes  * This code is derived from software contributed to Berkeley by
68fae3551SRodney W. Grimes  * Donn Seeley at Berkeley Software Design, Inc.
78fae3551SRodney W. Grimes  *
88fae3551SRodney W. Grimes  * Redistribution and use in source and binary forms, with or without
98fae3551SRodney W. Grimes  * modification, are permitted provided that the following conditions
108fae3551SRodney W. Grimes  * are met:
118fae3551SRodney W. Grimes  * 1. Redistributions of source code must retain the above copyright
128fae3551SRodney W. Grimes  *    notice, this list of conditions and the following disclaimer.
138fae3551SRodney W. Grimes  * 2. Redistributions in binary form must reproduce the above copyright
148fae3551SRodney W. Grimes  *    notice, this list of conditions and the following disclaimer in the
158fae3551SRodney W. Grimes  *    documentation and/or other materials provided with the distribution.
168fae3551SRodney W. Grimes  * 4. Neither the name of the University nor the names of its contributors
178fae3551SRodney W. Grimes  *    may be used to endorse or promote products derived from this software
188fae3551SRodney W. Grimes  *    without specific prior written permission.
198fae3551SRodney W. Grimes  *
208fae3551SRodney W. Grimes  * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
218fae3551SRodney W. Grimes  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
228fae3551SRodney W. Grimes  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
238fae3551SRodney W. Grimes  * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
248fae3551SRodney W. Grimes  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
258fae3551SRodney W. Grimes  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
268fae3551SRodney W. Grimes  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
278fae3551SRodney W. Grimes  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
288fae3551SRodney W. Grimes  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
298fae3551SRodney W. Grimes  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
308fae3551SRodney W. Grimes  * SUCH DAMAGE.
318fae3551SRodney W. Grimes  */
328fae3551SRodney W. Grimes 
338fae3551SRodney W. Grimes #ifndef lint
345df42cf4SPhilippe Charnier static const char copyright[] =
358fae3551SRodney W. Grimes "@(#) Copyright (c) 1991, 1993\n\
368fae3551SRodney W. Grimes 	The Regents of the University of California.  All rights reserved.\n";
378fae3551SRodney W. Grimes #endif /* not lint */
388fae3551SRodney W. Grimes 
398fae3551SRodney W. Grimes #ifndef lint
405df42cf4SPhilippe Charnier #if 0
418fae3551SRodney W. Grimes static char sccsid[] = "@(#)init.c	8.1 (Berkeley) 7/15/93";
425df42cf4SPhilippe Charnier #endif
435df42cf4SPhilippe Charnier static const char rcsid[] =
447f3dea24SPeter Wemm   "$FreeBSD$";
458fae3551SRodney W. Grimes #endif /* not lint */
468fae3551SRodney W. Grimes 
478fae3551SRodney W. Grimes #include <sys/param.h>
488889c700SDavid Nugent #include <sys/ioctl.h>
4957622f22SPoul-Henning Kamp #include <sys/mount.h>
508fae3551SRodney W. Grimes #include <sys/sysctl.h>
518fae3551SRodney W. Grimes #include <sys/wait.h>
5286bf62dcSDavid Nugent #include <sys/stat.h>
531f083b1eSMaxime Henrion #include <sys/uio.h>
548fae3551SRodney W. Grimes 
558fae3551SRodney W. Grimes #include <db.h>
568fae3551SRodney W. Grimes #include <errno.h>
578fae3551SRodney W. Grimes #include <fcntl.h>
581a7bec91SWarner Losh #include <kenv.h>
59423b6a39SAndrey A. Chernov #include <libutil.h>
601a37aa56SDavid E. O'Brien #include <paths.h>
618fae3551SRodney W. Grimes #include <signal.h>
628fae3551SRodney W. Grimes #include <stdio.h>
638fae3551SRodney W. Grimes #include <stdlib.h>
648fae3551SRodney W. Grimes #include <string.h>
658fae3551SRodney W. Grimes #include <syslog.h>
668fae3551SRodney W. Grimes #include <time.h>
678fae3551SRodney W. Grimes #include <ttyent.h>
688fae3551SRodney W. Grimes #include <unistd.h>
69e460cfd3SNate Williams #include <sys/reboot.h>
70c5842835SPhilippe Charnier #include <err.h>
718fae3551SRodney W. Grimes 
728fae3551SRodney W. Grimes #include <stdarg.h>
738fae3551SRodney W. Grimes 
748fae3551SRodney W. Grimes #ifdef SECURE
758fae3551SRodney W. Grimes #include <pwd.h>
768fae3551SRodney W. Grimes #endif
778fae3551SRodney W. Grimes 
781ef60eb1SDavid Nugent #ifdef LOGIN_CAP
791ef60eb1SDavid Nugent #include <login_cap.h>
801ef60eb1SDavid Nugent #endif
811ef60eb1SDavid Nugent 
828fae3551SRodney W. Grimes #include "pathnames.h"
838fae3551SRodney W. Grimes 
848fae3551SRodney W. Grimes /*
858fae3551SRodney W. Grimes  * Sleep times; used to prevent thrashing.
868fae3551SRodney W. Grimes  */
878fae3551SRodney W. Grimes #define	GETTY_SPACING		 5	/* N secs minimum getty spacing */
888fae3551SRodney W. Grimes #define	GETTY_SLEEP		30	/* sleep N secs after spacing problem */
89b5df27e2SAndrey A. Chernov #define	GETTY_NSPACE             3      /* max. spacing count to bring reaction */
908fae3551SRodney W. Grimes #define	WINDOW_WAIT		 3	/* wait N secs after starting window */
918fae3551SRodney W. Grimes #define	STALL_TIMEOUT		30	/* wait N secs after warning */
928fae3551SRodney W. Grimes #define	DEATH_WATCH		10	/* wait N secs for procs to die */
935df42cf4SPhilippe Charnier #define	DEATH_SCRIPT		120	/* wait for 2min for /etc/rc.shutdown */
94e82d5545SDavid Nugent #define	RESOURCE_RC		"daemon"
95e82d5545SDavid Nugent #define	RESOURCE_WINDOW 	"default"
96e82d5545SDavid Nugent #define	RESOURCE_GETTY		"default"
978fae3551SRodney W. Grimes 
9845cfb1dcSXin LI static void handle(sig_t, ...);
9945cfb1dcSXin LI static void delset(sigset_t *, ...);
1008fae3551SRodney W. Grimes 
10145cfb1dcSXin LI static void stall(const char *, ...) __printflike(1, 2);
10245cfb1dcSXin LI static void warning(const char *, ...) __printflike(1, 2);
10345cfb1dcSXin LI static void emergency(const char *, ...) __printflike(1, 2);
10445cfb1dcSXin LI static void disaster(int);
10545cfb1dcSXin LI static void badsys(int);
10645cfb1dcSXin LI static int  runshutdown(void);
107ab03e6d5SXin LI static char *strk(char *);
1088fae3551SRodney W. Grimes 
1098fae3551SRodney W. Grimes /*
1108fae3551SRodney W. Grimes  * We really need a recursive typedef...
1118fae3551SRodney W. Grimes  * The following at least guarantees that the return type of (*state_t)()
1128fae3551SRodney W. Grimes  * is sufficiently wide to hold a function pointer.
1138fae3551SRodney W. Grimes  */
11473bf18edSWarner Losh typedef long (*state_func_t)(void);
11573bf18edSWarner Losh typedef state_func_t (*state_t)(void);
1168fae3551SRodney W. Grimes 
11745cfb1dcSXin LI static state_func_t single_user(void);
11845cfb1dcSXin LI static state_func_t runcom(void);
11945cfb1dcSXin LI static state_func_t read_ttys(void);
12045cfb1dcSXin LI static state_func_t multi_user(void);
12145cfb1dcSXin LI static state_func_t clean_ttys(void);
12245cfb1dcSXin LI static state_func_t catatonia(void);
12345cfb1dcSXin LI static state_func_t death(void);
1248fae3551SRodney W. Grimes 
12545cfb1dcSXin LI static state_func_t run_script(const char *);
1261a7bec91SWarner Losh 
1278fae3551SRodney W. Grimes enum { AUTOBOOT, FASTBOOT } runcom_mode = AUTOBOOT;
12877103ea3SPoul-Henning Kamp #define FALSE	0
12977103ea3SPoul-Henning Kamp #define TRUE	1
13077103ea3SPoul-Henning Kamp 
131db8ad19dSJordan K. Hubbard int Reboot = FALSE;
132a0a549c7SRuslan Ermilov int howto = RB_AUTOBOOT;
1338fae3551SRodney W. Grimes 
13457622f22SPoul-Henning Kamp int devfs;
13557622f22SPoul-Henning Kamp 
13645cfb1dcSXin LI static void transition(state_t);
13745cfb1dcSXin LI static state_t requested_transition;
1388fae3551SRodney W. Grimes 
13945cfb1dcSXin LI static void setctty(const char *);
14045cfb1dcSXin LI static const char *get_shell(void);
14145cfb1dcSXin LI static void write_stderr(const char *message);
1428fae3551SRodney W. Grimes 
1438fae3551SRodney W. Grimes typedef struct init_session {
1448fae3551SRodney W. Grimes 	int	se_index;		/* index of entry in ttys file */
1458fae3551SRodney W. Grimes 	pid_t	se_process;		/* controlling process */
1468fae3551SRodney W. Grimes 	time_t	se_started;		/* used to avoid thrashing */
1478fae3551SRodney W. Grimes 	int	se_flags;		/* status of session */
1488fae3551SRodney W. Grimes #define	SE_SHUTDOWN	0x1		/* session won't be restarted */
149b0b670eeSAlfred Perlstein #define	SE_PRESENT	0x2		/* session is in /etc/ttys */
150b5df27e2SAndrey A. Chernov 	int     se_nspace;              /* spacing count */
1518fae3551SRodney W. Grimes 	char	*se_device;		/* filename of port */
1528fae3551SRodney W. Grimes 	char	*se_getty;		/* what to run on that port */
153b5df27e2SAndrey A. Chernov 	char    *se_getty_argv_space;   /* pre-parsed argument array space */
1548fae3551SRodney W. Grimes 	char	**se_getty_argv;	/* pre-parsed argument array */
1558fae3551SRodney W. Grimes 	char	*se_window;		/* window system (started only once) */
156b5df27e2SAndrey A. Chernov 	char    *se_window_argv_space;  /* pre-parsed argument array space */
1578fae3551SRodney W. Grimes 	char	**se_window_argv;	/* pre-parsed argument array */
158b5df27e2SAndrey A. Chernov 	char    *se_type;               /* default terminal type */
1598fae3551SRodney W. Grimes 	struct	init_session *se_prev;
1608fae3551SRodney W. Grimes 	struct	init_session *se_next;
1618fae3551SRodney W. Grimes } session_t;
1628fae3551SRodney W. Grimes 
16345cfb1dcSXin LI static void free_session(session_t *);
16445cfb1dcSXin LI static session_t *new_session(session_t *, int, struct ttyent *);
16545cfb1dcSXin LI static session_t *sessions;
1668fae3551SRodney W. Grimes 
16745cfb1dcSXin LI static char **construct_argv(char *);
16845cfb1dcSXin LI static void start_window_system(session_t *);
16945cfb1dcSXin LI static void collect_child(pid_t);
17045cfb1dcSXin LI static pid_t start_getty(session_t *);
17145cfb1dcSXin LI static void transition_handler(int);
17245cfb1dcSXin LI static void alrm_handler(int);
17345cfb1dcSXin LI static void setsecuritylevel(int);
17445cfb1dcSXin LI static int getsecuritylevel(void);
17545cfb1dcSXin LI static int setupargv(session_t *, struct ttyent *);
176e82d5545SDavid Nugent #ifdef LOGIN_CAP
17745cfb1dcSXin LI static void setprocresources(const char *);
178e82d5545SDavid Nugent #endif
17945cfb1dcSXin LI static int clang;
1808fae3551SRodney W. Grimes 
18145cfb1dcSXin LI static void clear_session_logs(session_t *);
1828fae3551SRodney W. Grimes 
18345cfb1dcSXin LI static int start_session_db(void);
18445cfb1dcSXin LI static void add_session(session_t *);
18545cfb1dcSXin LI static void del_session(session_t *);
18645cfb1dcSXin LI static session_t *find_session(pid_t);
18745cfb1dcSXin LI static DB *session_db;
1888fae3551SRodney W. Grimes 
1898fae3551SRodney W. Grimes /*
1908fae3551SRodney W. Grimes  * The mother of all processes.
1918fae3551SRodney W. Grimes  */
1928fae3551SRodney W. Grimes int
19373bf18edSWarner Losh main(int argc, char *argv[])
1948fae3551SRodney W. Grimes {
1951a7bec91SWarner Losh 	state_t initial_transition = runcom;
1961a7bec91SWarner Losh 	char kenv_value[PATH_MAX];
1978fae3551SRodney W. Grimes 	int c;
1988fae3551SRodney W. Grimes 	struct sigaction sa;
1998fae3551SRodney W. Grimes 	sigset_t mask;
2008fae3551SRodney W. Grimes 
2018fae3551SRodney W. Grimes 	/* Dispose of random users. */
202c5842835SPhilippe Charnier 	if (getuid() != 0)
203c5842835SPhilippe Charnier 		errx(1, "%s", strerror(EPERM));
2048fae3551SRodney W. Grimes 
2058fae3551SRodney W. Grimes 	/* System V users like to reexec init. */
2061681d659SRuslan Ermilov 	if (getpid() != 1) {
2071681d659SRuslan Ermilov #ifdef COMPAT_SYSV_INIT
2081681d659SRuslan Ermilov 		/* So give them what they want */
2091681d659SRuslan Ermilov 		if (argc > 1) {
2101681d659SRuslan Ermilov 			if (strlen(argv[1]) == 1) {
2113d438ad6SDavid E. O'Brien 				char runlevel = *argv[1];
2123d438ad6SDavid E. O'Brien 				int sig;
2138fae3551SRodney W. Grimes 
2141681d659SRuslan Ermilov 				switch (runlevel) {
2151681d659SRuslan Ermilov 				case '0': /* halt + poweroff */
2161681d659SRuslan Ermilov 					sig = SIGUSR2;
2171681d659SRuslan Ermilov 					break;
2181681d659SRuslan Ermilov 				case '1': /* single-user */
2191681d659SRuslan Ermilov 					sig = SIGTERM;
2201681d659SRuslan Ermilov 					break;
2211681d659SRuslan Ermilov 				case '6': /* reboot */
2221681d659SRuslan Ermilov 					sig = SIGINT;
2231681d659SRuslan Ermilov 					break;
2241681d659SRuslan Ermilov 				case 'c': /* block further logins */
2251681d659SRuslan Ermilov 					sig = SIGTSTP;
2261681d659SRuslan Ermilov 					break;
2271681d659SRuslan Ermilov 				case 'q': /* rescan /etc/ttys */
2281681d659SRuslan Ermilov 					sig = SIGHUP;
2291681d659SRuslan Ermilov 					break;
2301681d659SRuslan Ermilov 				default:
2311681d659SRuslan Ermilov 					goto invalid;
2321681d659SRuslan Ermilov 				}
2331681d659SRuslan Ermilov 				kill(1, sig);
2341681d659SRuslan Ermilov 				_exit(0);
2351681d659SRuslan Ermilov 			} else
2361681d659SRuslan Ermilov invalid:
2371681d659SRuslan Ermilov 				errx(1, "invalid run-level ``%s''", argv[1]);
2381681d659SRuslan Ermilov 		} else
2391681d659SRuslan Ermilov #endif
2401681d659SRuslan Ermilov 			errx(1, "already running");
2411681d659SRuslan Ermilov 	}
2428fae3551SRodney W. Grimes 	/*
2438fae3551SRodney W. Grimes 	 * Note that this does NOT open a file...
2448fae3551SRodney W. Grimes 	 * Does 'init' deserve its own facility number?
2458fae3551SRodney W. Grimes 	 */
2468fae3551SRodney W. Grimes 	openlog("init", LOG_CONS|LOG_ODELAY, LOG_AUTH);
2478fae3551SRodney W. Grimes 
2488fae3551SRodney W. Grimes 	/*
2498fae3551SRodney W. Grimes 	 * Create an initial session.
2508fae3551SRodney W. Grimes 	 */
2518fae3551SRodney W. Grimes 	if (setsid() < 0)
2528fae3551SRodney W. Grimes 		warning("initial setsid() failed: %m");
2538fae3551SRodney W. Grimes 
2548fae3551SRodney W. Grimes 	/*
2558fae3551SRodney W. Grimes 	 * Establish an initial user so that programs running
2568fae3551SRodney W. Grimes 	 * single user do not freak out and die (like passwd).
2578fae3551SRodney W. Grimes 	 */
2588fae3551SRodney W. Grimes 	if (setlogin("root") < 0)
2598fae3551SRodney W. Grimes 		warning("setlogin() failed: %m");
2608fae3551SRodney W. Grimes 
2618fae3551SRodney W. Grimes 	/*
2628fae3551SRodney W. Grimes 	 * This code assumes that we always get arguments through flags,
2638fae3551SRodney W. Grimes 	 * never through bits set in some random machine register.
2648fae3551SRodney W. Grimes 	 */
26557622f22SPoul-Henning Kamp 	while ((c = getopt(argc, argv, "dsf")) != -1)
2668fae3551SRodney W. Grimes 		switch (c) {
26757622f22SPoul-Henning Kamp 		case 'd':
26857622f22SPoul-Henning Kamp 			devfs = 1;
26957622f22SPoul-Henning Kamp 			break;
2708fae3551SRodney W. Grimes 		case 's':
2711a7bec91SWarner Losh 			initial_transition = single_user;
2728fae3551SRodney W. Grimes 			break;
2738fae3551SRodney W. Grimes 		case 'f':
2748fae3551SRodney W. Grimes 			runcom_mode = FASTBOOT;
2758fae3551SRodney W. Grimes 			break;
2768fae3551SRodney W. Grimes 		default:
2778fae3551SRodney W. Grimes 			warning("unrecognized flag '-%c'", c);
2788fae3551SRodney W. Grimes 			break;
2798fae3551SRodney W. Grimes 		}
2808fae3551SRodney W. Grimes 
2818fae3551SRodney W. Grimes 	if (optind != argc)
2828fae3551SRodney W. Grimes 		warning("ignoring excess arguments");
2838fae3551SRodney W. Grimes 
2841a7bec91SWarner Losh 	/*
2851a7bec91SWarner Losh 	 * We catch or block signals rather than ignore them,
2861a7bec91SWarner Losh 	 * so that they get reset on exec.
2871a7bec91SWarner Losh 	 */
2881a7bec91SWarner Losh 	handle(badsys, SIGSYS, 0);
289091abe40SDavid E. O'Brien 	handle(disaster, SIGABRT, SIGFPE, SIGILL, SIGSEGV, SIGBUS, SIGXCPU,
290091abe40SDavid E. O'Brien 	    SIGXFSZ, 0);
291091abe40SDavid E. O'Brien 	handle(transition_handler, SIGHUP, SIGINT, SIGTERM, SIGTSTP, SIGUSR1,
292091abe40SDavid E. O'Brien 	    SIGUSR2, 0);
2931a7bec91SWarner Losh 	handle(alrm_handler, SIGALRM, 0);
2941a7bec91SWarner Losh 	sigfillset(&mask);
2951a7bec91SWarner Losh 	delset(&mask, SIGABRT, SIGFPE, SIGILL, SIGSEGV, SIGBUS, SIGSYS,
2961a7bec91SWarner Losh 	    SIGXCPU, SIGXFSZ, SIGHUP, SIGINT, SIGTERM, SIGTSTP, SIGALRM,
2971a7bec91SWarner Losh 	    SIGUSR1, SIGUSR2, 0);
2981a7bec91SWarner Losh 	sigprocmask(SIG_SETMASK, &mask, (sigset_t *) 0);
2991a7bec91SWarner Losh 	sigemptyset(&sa.sa_mask);
3001a7bec91SWarner Losh 	sa.sa_flags = 0;
3011a7bec91SWarner Losh 	sa.sa_handler = SIG_IGN;
302091abe40SDavid E. O'Brien 	sigaction(SIGTTIN, &sa, (struct sigaction *)0);
303091abe40SDavid E. O'Brien 	sigaction(SIGTTOU, &sa, (struct sigaction *)0);
3041a7bec91SWarner Losh 
3051a7bec91SWarner Losh 	/*
3061a7bec91SWarner Losh 	 * Paranoia.
3071a7bec91SWarner Losh 	 */
3081a7bec91SWarner Losh 	close(0);
3091a7bec91SWarner Losh 	close(1);
3101a7bec91SWarner Losh 	close(2);
3111a7bec91SWarner Losh 
3121a7bec91SWarner Losh 	if (kenv(KENV_GET, "init_script", kenv_value, sizeof(kenv_value)) > 0) {
3131a7bec91SWarner Losh 		state_func_t next_transition;
3141a7bec91SWarner Losh 
3151a7bec91SWarner Losh 		if ((next_transition = run_script(kenv_value)) != 0)
3161a7bec91SWarner Losh 			initial_transition = (state_t) next_transition;
3171a7bec91SWarner Losh 	}
3181a7bec91SWarner Losh 
3191a7bec91SWarner Losh 	if (kenv(KENV_GET, "init_chroot", kenv_value, sizeof(kenv_value)) > 0) {
3201a7bec91SWarner Losh 		if (chdir(kenv_value) != 0 || chroot(".") != 0)
3211a7bec91SWarner Losh 			warning("Can't chroot to %s: %m", kenv_value);
3221a7bec91SWarner Losh 	}
3231a7bec91SWarner Losh 
3241a7bec91SWarner Losh 	/*
3251a7bec91SWarner Losh 	 * Additional check if devfs needs to be mounted:
3261a7bec91SWarner Losh 	 * If "/" and "/dev" have the same device number,
3271a7bec91SWarner Losh 	 * then it hasn't been mounted yet.
3281a7bec91SWarner Losh 	 */
3291a7bec91SWarner Losh 	if (!devfs) {
3301a7bec91SWarner Losh 		struct stat stst;
3311a7bec91SWarner Losh 		dev_t root_devno;
3321a7bec91SWarner Losh 
3331a7bec91SWarner Losh 		stat("/", &stst);
3341a7bec91SWarner Losh 		root_devno = stst.st_dev;
3351a7bec91SWarner Losh 		if (stat("/dev", &stst) != 0)
3361a7bec91SWarner Losh 			warning("Can't stat /dev: %m");
3371a7bec91SWarner Losh 		else if (stst.st_dev == root_devno)
3381a7bec91SWarner Losh 			devfs++;
3391a7bec91SWarner Losh 	}
3401a7bec91SWarner Losh 
34157622f22SPoul-Henning Kamp 	if (devfs) {
3421f083b1eSMaxime Henrion 		struct iovec iov[4];
343421b0201SPoul-Henning Kamp 		char *s;
344421b0201SPoul-Henning Kamp 		int i;
345421b0201SPoul-Henning Kamp 
346ab03e6d5SXin LI 		char _fstype[]	= "fstype";
347ab03e6d5SXin LI 		char _devfs[]	= "devfs";
348ab03e6d5SXin LI 		char _fspath[]	= "fspath";
349ab03e6d5SXin LI 		char _path_dev[]= _PATH_DEV;
350ab03e6d5SXin LI 
351ab03e6d5SXin LI 		iov[0].iov_base = _fstype;
352ab03e6d5SXin LI 		iov[0].iov_len = sizeof(_fstype);
353ab03e6d5SXin LI 		iov[1].iov_base = _devfs;
354ab03e6d5SXin LI 		iov[1].iov_len = sizeof(_devfs);
355ab03e6d5SXin LI 		iov[2].iov_base = _fspath;
356ab03e6d5SXin LI 		iov[2].iov_len = sizeof(_fspath);
357421b0201SPoul-Henning Kamp 		/*
358421b0201SPoul-Henning Kamp 		 * Try to avoid the trailing slash in _PATH_DEV.
359421b0201SPoul-Henning Kamp 		 * Be *very* defensive.
360421b0201SPoul-Henning Kamp 		 */
361421b0201SPoul-Henning Kamp 		s = strdup(_PATH_DEV);
362421b0201SPoul-Henning Kamp 		if (s != NULL) {
363421b0201SPoul-Henning Kamp 			i = strlen(s);
364421b0201SPoul-Henning Kamp 			if (i > 0 && s[i - 1] == '/')
365421b0201SPoul-Henning Kamp 				s[i - 1] = '\0';
3661f083b1eSMaxime Henrion 			iov[3].iov_base = s;
3671f083b1eSMaxime Henrion 			iov[3].iov_len = strlen(s) + 1;
368421b0201SPoul-Henning Kamp 		} else {
369ab03e6d5SXin LI 			iov[3].iov_base = _path_dev;
370ab03e6d5SXin LI 			iov[3].iov_len = sizeof(_path_dev);
37157622f22SPoul-Henning Kamp 		}
3721f083b1eSMaxime Henrion 		nmount(iov, 4, 0);
3731f083b1eSMaxime Henrion 		if (s != NULL)
3741f083b1eSMaxime Henrion 			free(s);
375421b0201SPoul-Henning Kamp 	}
37657622f22SPoul-Henning Kamp 
3778fae3551SRodney W. Grimes 	/*
3788fae3551SRodney W. Grimes 	 * Start the state machine.
3798fae3551SRodney W. Grimes 	 */
3801a7bec91SWarner Losh 	transition(initial_transition);
3818fae3551SRodney W. Grimes 
3828fae3551SRodney W. Grimes 	/*
3838fae3551SRodney W. Grimes 	 * Should never reach here.
3848fae3551SRodney W. Grimes 	 */
3858fae3551SRodney W. Grimes 	return 1;
3868fae3551SRodney W. Grimes }
3878fae3551SRodney W. Grimes 
3888fae3551SRodney W. Grimes /*
3898fae3551SRodney W. Grimes  * Associate a function with a signal handler.
3908fae3551SRodney W. Grimes  */
39145cfb1dcSXin LI static void
3928fae3551SRodney W. Grimes handle(sig_t handler, ...)
3938fae3551SRodney W. Grimes {
3948fae3551SRodney W. Grimes 	int sig;
3958fae3551SRodney W. Grimes 	struct sigaction sa;
39639034633SJames Raynard 	sigset_t mask_everything;
3978fae3551SRodney W. Grimes 	va_list ap;
3988fae3551SRodney W. Grimes 	va_start(ap, handler);
3998fae3551SRodney W. Grimes 
4008fae3551SRodney W. Grimes 	sa.sa_handler = handler;
4018fae3551SRodney W. Grimes 	sigfillset(&mask_everything);
4028fae3551SRodney W. Grimes 
40330e8350cSBruce Evans 	while ((sig = va_arg(ap, int)) != 0) {
4048fae3551SRodney W. Grimes 		sa.sa_mask = mask_everything;
4058fae3551SRodney W. Grimes 		/* XXX SA_RESTART? */
4068fae3551SRodney W. Grimes 		sa.sa_flags = sig == SIGCHLD ? SA_NOCLDSTOP : 0;
4078fae3551SRodney W. Grimes 		sigaction(sig, &sa, (struct sigaction *) 0);
4088fae3551SRodney W. Grimes 	}
4098fae3551SRodney W. Grimes 	va_end(ap);
4108fae3551SRodney W. Grimes }
4118fae3551SRodney W. Grimes 
4128fae3551SRodney W. Grimes /*
4138fae3551SRodney W. Grimes  * Delete a set of signals from a mask.
4148fae3551SRodney W. Grimes  */
41545cfb1dcSXin LI static void
4168fae3551SRodney W. Grimes delset(sigset_t *maskp, ...)
4178fae3551SRodney W. Grimes {
4188fae3551SRodney W. Grimes 	int sig;
4198fae3551SRodney W. Grimes 	va_list ap;
4208fae3551SRodney W. Grimes 	va_start(ap, maskp);
4218fae3551SRodney W. Grimes 
42230e8350cSBruce Evans 	while ((sig = va_arg(ap, int)) != 0)
4238fae3551SRodney W. Grimes 		sigdelset(maskp, sig);
4248fae3551SRodney W. Grimes 	va_end(ap);
4258fae3551SRodney W. Grimes }
4268fae3551SRodney W. Grimes 
4278fae3551SRodney W. Grimes /*
4288fae3551SRodney W. Grimes  * Log a message and sleep for a while (to give someone an opportunity
4298fae3551SRodney W. Grimes  * to read it and to save log or hardcopy output if the problem is chronic).
4308fae3551SRodney W. Grimes  * NB: should send a message to the session logger to avoid blocking.
4318fae3551SRodney W. Grimes  */
43245cfb1dcSXin LI static void
4335979df34SKris Kennaway stall(const char *message, ...)
4348fae3551SRodney W. Grimes {
4358fae3551SRodney W. Grimes 	va_list ap;
4368fae3551SRodney W. Grimes 	va_start(ap, message);
4378fae3551SRodney W. Grimes 
4388fae3551SRodney W. Grimes 	vsyslog(LOG_ALERT, message, ap);
4398fae3551SRodney W. Grimes 	va_end(ap);
4408fae3551SRodney W. Grimes 	sleep(STALL_TIMEOUT);
4418fae3551SRodney W. Grimes }
4428fae3551SRodney W. Grimes 
4438fae3551SRodney W. Grimes /*
4448fae3551SRodney W. Grimes  * Like stall(), but doesn't sleep.
4458fae3551SRodney W. Grimes  * If cpp had variadic macros, the two functions could be #defines for another.
4468fae3551SRodney W. Grimes  * NB: should send a message to the session logger to avoid blocking.
4478fae3551SRodney W. Grimes  */
44845cfb1dcSXin LI static void
4495979df34SKris Kennaway warning(const char *message, ...)
4508fae3551SRodney W. Grimes {
4518fae3551SRodney W. Grimes 	va_list ap;
4528fae3551SRodney W. Grimes 	va_start(ap, message);
4538fae3551SRodney W. Grimes 
4548fae3551SRodney W. Grimes 	vsyslog(LOG_ALERT, message, ap);
4558fae3551SRodney W. Grimes 	va_end(ap);
4568fae3551SRodney W. Grimes }
4578fae3551SRodney W. Grimes 
4588fae3551SRodney W. Grimes /*
4598fae3551SRodney W. Grimes  * Log an emergency message.
4608fae3551SRodney W. Grimes  * NB: should send a message to the session logger to avoid blocking.
4618fae3551SRodney W. Grimes  */
46245cfb1dcSXin LI static void
4635979df34SKris Kennaway emergency(const char *message, ...)
4648fae3551SRodney W. Grimes {
4658fae3551SRodney W. Grimes 	va_list ap;
4668fae3551SRodney W. Grimes 	va_start(ap, message);
4678fae3551SRodney W. Grimes 
4688fae3551SRodney W. Grimes 	vsyslog(LOG_EMERG, message, ap);
4698fae3551SRodney W. Grimes 	va_end(ap);
4708fae3551SRodney W. Grimes }
4718fae3551SRodney W. Grimes 
4728fae3551SRodney W. Grimes /*
4738fae3551SRodney W. Grimes  * Catch a SIGSYS signal.
4748fae3551SRodney W. Grimes  *
4758fae3551SRodney W. Grimes  * These may arise if a system does not support sysctl.
4768fae3551SRodney W. Grimes  * We tolerate up to 25 of these, then throw in the towel.
4778fae3551SRodney W. Grimes  */
47845cfb1dcSXin LI static void
47973bf18edSWarner Losh badsys(int sig)
4808fae3551SRodney W. Grimes {
4818fae3551SRodney W. Grimes 	static int badcount = 0;
4828fae3551SRodney W. Grimes 
4838fae3551SRodney W. Grimes 	if (badcount++ < 25)
4848fae3551SRodney W. Grimes 		return;
4858fae3551SRodney W. Grimes 	disaster(sig);
4868fae3551SRodney W. Grimes }
4878fae3551SRodney W. Grimes 
4888fae3551SRodney W. Grimes /*
4898fae3551SRodney W. Grimes  * Catch an unexpected signal.
4908fae3551SRodney W. Grimes  */
49145cfb1dcSXin LI static void
49273bf18edSWarner Losh disaster(int sig)
4938fae3551SRodney W. Grimes {
494091abe40SDavid E. O'Brien 
4958fae3551SRodney W. Grimes 	emergency("fatal signal: %s",
4968889c700SDavid Nugent 	    (unsigned)sig < NSIG ? sys_siglist[sig] : "unknown signal");
4978fae3551SRodney W. Grimes 
4988fae3551SRodney W. Grimes 	sleep(STALL_TIMEOUT);
4998fae3551SRodney W. Grimes 	_exit(sig);		/* reboot */
5008fae3551SRodney W. Grimes }
5018fae3551SRodney W. Grimes 
5028fae3551SRodney W. Grimes /*
5038fae3551SRodney W. Grimes  * Get the security level of the kernel.
5048fae3551SRodney W. Grimes  */
50545cfb1dcSXin LI static int
50673bf18edSWarner Losh getsecuritylevel(void)
5078fae3551SRodney W. Grimes {
5088fae3551SRodney W. Grimes #ifdef KERN_SECURELVL
5098fae3551SRodney W. Grimes 	int name[2], curlevel;
5108fae3551SRodney W. Grimes 	size_t len;
5118fae3551SRodney W. Grimes 
5128fae3551SRodney W. Grimes 	name[0] = CTL_KERN;
5138fae3551SRodney W. Grimes 	name[1] = KERN_SECURELVL;
5148fae3551SRodney W. Grimes 	len = sizeof curlevel;
5158fae3551SRodney W. Grimes 	if (sysctl(name, 2, &curlevel, &len, NULL, 0) == -1) {
5168fae3551SRodney W. Grimes 		emergency("cannot get kernel security level: %s",
5178fae3551SRodney W. Grimes 		    strerror(errno));
5188fae3551SRodney W. Grimes 		return (-1);
5198fae3551SRodney W. Grimes 	}
5208fae3551SRodney W. Grimes 	return (curlevel);
5218fae3551SRodney W. Grimes #else
5228fae3551SRodney W. Grimes 	return (-1);
5238fae3551SRodney W. Grimes #endif
5248fae3551SRodney W. Grimes }
5258fae3551SRodney W. Grimes 
5268fae3551SRodney W. Grimes /*
5278fae3551SRodney W. Grimes  * Set the security level of the kernel.
5288fae3551SRodney W. Grimes  */
52945cfb1dcSXin LI static void
53073bf18edSWarner Losh setsecuritylevel(int newlevel)
5318fae3551SRodney W. Grimes {
5328fae3551SRodney W. Grimes #ifdef KERN_SECURELVL
5338fae3551SRodney W. Grimes 	int name[2], curlevel;
5348fae3551SRodney W. Grimes 
5358fae3551SRodney W. Grimes 	curlevel = getsecuritylevel();
5368fae3551SRodney W. Grimes 	if (newlevel == curlevel)
5378fae3551SRodney W. Grimes 		return;
5388fae3551SRodney W. Grimes 	name[0] = CTL_KERN;
5398fae3551SRodney W. Grimes 	name[1] = KERN_SECURELVL;
5408fae3551SRodney W. Grimes 	if (sysctl(name, 2, NULL, NULL, &newlevel, sizeof newlevel) == -1) {
5418fae3551SRodney W. Grimes 		emergency(
5428fae3551SRodney W. Grimes 		    "cannot change kernel security level from %d to %d: %s",
5438fae3551SRodney W. Grimes 		    curlevel, newlevel, strerror(errno));
5448fae3551SRodney W. Grimes 		return;
5458fae3551SRodney W. Grimes 	}
5468fae3551SRodney W. Grimes #ifdef SECURE
5478fae3551SRodney W. Grimes 	warning("kernel security level changed from %d to %d",
5488fae3551SRodney W. Grimes 	    curlevel, newlevel);
5498fae3551SRodney W. Grimes #endif
5508fae3551SRodney W. Grimes #endif
5518fae3551SRodney W. Grimes }
5528fae3551SRodney W. Grimes 
5538fae3551SRodney W. Grimes /*
5548fae3551SRodney W. Grimes  * Change states in the finite state machine.
5558fae3551SRodney W. Grimes  * The initial state is passed as an argument.
5568fae3551SRodney W. Grimes  */
55745cfb1dcSXin LI static void
55873bf18edSWarner Losh transition(state_t s)
5598fae3551SRodney W. Grimes {
560091abe40SDavid E. O'Brien 
5618fae3551SRodney W. Grimes 	for (;;)
5628fae3551SRodney W. Grimes 		s = (state_t) (*s)();
5638fae3551SRodney W. Grimes }
5648fae3551SRodney W. Grimes 
5658fae3551SRodney W. Grimes /*
5668fae3551SRodney W. Grimes  * Close out the accounting files for a login session.
5678fae3551SRodney W. Grimes  * NB: should send a message to the session logger to avoid blocking.
5688fae3551SRodney W. Grimes  */
56945cfb1dcSXin LI static void
57073bf18edSWarner Losh clear_session_logs(session_t *sp)
5718fae3551SRodney W. Grimes {
5728fae3551SRodney W. Grimes 	char *line = sp->se_device + sizeof(_PATH_DEV) - 1;
5738fae3551SRodney W. Grimes 
5748fae3551SRodney W. Grimes 	if (logout(line))
5758fae3551SRodney W. Grimes 		logwtmp(line, "", "");
5768fae3551SRodney W. Grimes }
5778fae3551SRodney W. Grimes 
5788fae3551SRodney W. Grimes /*
5798fae3551SRodney W. Grimes  * Start a session and allocate a controlling terminal.
5808fae3551SRodney W. Grimes  * Only called by children of init after forking.
5818fae3551SRodney W. Grimes  */
58245cfb1dcSXin LI static void
583ab03e6d5SXin LI setctty(const char *name)
5848fae3551SRodney W. Grimes {
5858fae3551SRodney W. Grimes 	int fd;
5868fae3551SRodney W. Grimes 
587091abe40SDavid E. O'Brien 	revoke(name);
5888fae3551SRodney W. Grimes 	if ((fd = open(name, O_RDWR)) == -1) {
5898fae3551SRodney W. Grimes 		stall("can't open %s: %m", name);
5908fae3551SRodney W. Grimes 		_exit(1);
5918fae3551SRodney W. Grimes 	}
5928fae3551SRodney W. Grimes 	if (login_tty(fd) == -1) {
5938fae3551SRodney W. Grimes 		stall("can't get %s for controlling terminal: %m", name);
5948fae3551SRodney W. Grimes 		_exit(1);
5958fae3551SRodney W. Grimes 	}
5968fae3551SRodney W. Grimes }
5978fae3551SRodney W. Grimes 
59845cfb1dcSXin LI static const char *
5991a7bec91SWarner Losh get_shell(void)
6001a7bec91SWarner Losh {
6011a7bec91SWarner Losh 	static char kenv_value[PATH_MAX];
6021a7bec91SWarner Losh 
6031a7bec91SWarner Losh 	if (kenv(KENV_GET, "init_shell", kenv_value, sizeof(kenv_value)) > 0)
6041a7bec91SWarner Losh 		return kenv_value;
6051a7bec91SWarner Losh 	else
6061a7bec91SWarner Losh 		return _PATH_BSHELL;
6071a7bec91SWarner Losh }
6081a7bec91SWarner Losh 
60945cfb1dcSXin LI static void
6101a7bec91SWarner Losh write_stderr(const char *message)
6111a7bec91SWarner Losh {
612091abe40SDavid E. O'Brien 
6131a7bec91SWarner Losh 	write(STDERR_FILENO, message, strlen(message));
6141a7bec91SWarner Losh }
6151a7bec91SWarner Losh 
6168fae3551SRodney W. Grimes /*
6178fae3551SRodney W. Grimes  * Bring the system up single user.
6188fae3551SRodney W. Grimes  */
61945cfb1dcSXin LI static state_func_t
62073bf18edSWarner Losh single_user(void)
6218fae3551SRodney W. Grimes {
6228fae3551SRodney W. Grimes 	pid_t pid, wpid;
6238fae3551SRodney W. Grimes 	int status;
6248fae3551SRodney W. Grimes 	sigset_t mask;
6251a7bec91SWarner Losh 	const char *shell;
6268fae3551SRodney W. Grimes 	char *argv[2];
6278fae3551SRodney W. Grimes #ifdef SECURE
6288fae3551SRodney W. Grimes 	struct ttyent *typ;
6298fae3551SRodney W. Grimes 	struct passwd *pp;
6308fae3551SRodney W. Grimes 	static const char banner[] =
6318fae3551SRodney W. Grimes 		"Enter root password, or ^D to go multi-user\n";
6328fae3551SRodney W. Grimes 	char *clear, *password;
6338fae3551SRodney W. Grimes #endif
63463322c28SPoul-Henning Kamp #ifdef DEBUGSHELL
63563322c28SPoul-Henning Kamp 	char altshell[128];
63663322c28SPoul-Henning Kamp #endif
6378fae3551SRodney W. Grimes 
638db8ad19dSJordan K. Hubbard 	if (Reboot) {
639a0a549c7SRuslan Ermilov 		/* Instead of going single user, let's reboot the machine */
640e460cfd3SNate Williams 		sync();
641e460cfd3SNate Williams 		alarm(2);
642e460cfd3SNate Williams 		pause();
643a0a549c7SRuslan Ermilov 		reboot(howto);
644e460cfd3SNate Williams 		_exit(0);
645e460cfd3SNate Williams 	}
646e460cfd3SNate Williams 
6471a7bec91SWarner Losh 	shell = get_shell();
6481a7bec91SWarner Losh 
6498fae3551SRodney W. Grimes 	if ((pid = fork()) == 0) {
6508fae3551SRodney W. Grimes 		/*
6518fae3551SRodney W. Grimes 		 * Start the single user session.
6528fae3551SRodney W. Grimes 		 */
6538fae3551SRodney W. Grimes 		setctty(_PATH_CONSOLE);
6548fae3551SRodney W. Grimes 
6558fae3551SRodney W. Grimes #ifdef SECURE
6568fae3551SRodney W. Grimes 		/*
6578fae3551SRodney W. Grimes 		 * Check the root password.
6588fae3551SRodney W. Grimes 		 * We don't care if the console is 'on' by default;
6598fae3551SRodney W. Grimes 		 * it's the only tty that can be 'off' and 'secure'.
6608fae3551SRodney W. Grimes 		 */
6618fae3551SRodney W. Grimes 		typ = getttynam("console");
6628fae3551SRodney W. Grimes 		pp = getpwnam("root");
663a69497d7SMatthew Dillon 		if (typ && (typ->ty_status & TTY_SECURE) == 0 &&
664a69497d7SMatthew Dillon 		    pp && *pp->pw_passwd) {
6651a7bec91SWarner Losh 			write_stderr(banner);
6668fae3551SRodney W. Grimes 			for (;;) {
6678fae3551SRodney W. Grimes 				clear = getpass("Password:");
6688fae3551SRodney W. Grimes 				if (clear == 0 || *clear == '\0')
6698fae3551SRodney W. Grimes 					_exit(0);
6708fae3551SRodney W. Grimes 				password = crypt(clear, pp->pw_passwd);
6718fae3551SRodney W. Grimes 				bzero(clear, _PASSWORD_LEN);
6728fae3551SRodney W. Grimes 				if (strcmp(password, pp->pw_passwd) == 0)
6738fae3551SRodney W. Grimes 					break;
6748fae3551SRodney W. Grimes 				warning("single-user login failed\n");
6758fae3551SRodney W. Grimes 			}
6768fae3551SRodney W. Grimes 		}
6778fae3551SRodney W. Grimes 		endttyent();
6788fae3551SRodney W. Grimes 		endpwent();
6798fae3551SRodney W. Grimes #endif /* SECURE */
6808fae3551SRodney W. Grimes 
6818fae3551SRodney W. Grimes #ifdef DEBUGSHELL
6828fae3551SRodney W. Grimes 		{
68363322c28SPoul-Henning Kamp 			char *cp = altshell;
6848fae3551SRodney W. Grimes 			int num;
6858fae3551SRodney W. Grimes 
6861a7bec91SWarner Losh #define	SHREQUEST "Enter full pathname of shell or RETURN for "
6871a7bec91SWarner Losh 			write_stderr(SHREQUEST);
6881a7bec91SWarner Losh 			write_stderr(shell);
6891a7bec91SWarner Losh 			write_stderr(": ");
6908fae3551SRodney W. Grimes 			while ((num = read(STDIN_FILENO, cp, 1)) != -1 &&
6918fae3551SRodney W. Grimes 			    num != 0 && *cp != '\n' && cp < &altshell[127])
6928fae3551SRodney W. Grimes 				cp++;
6938fae3551SRodney W. Grimes 			*cp = '\0';
6948fae3551SRodney W. Grimes 			if (altshell[0] != '\0')
6958fae3551SRodney W. Grimes 				shell = altshell;
6968fae3551SRodney W. Grimes 		}
6978fae3551SRodney W. Grimes #endif /* DEBUGSHELL */
6988fae3551SRodney W. Grimes 
6998fae3551SRodney W. Grimes 		/*
7008fae3551SRodney W. Grimes 		 * Unblock signals.
7018fae3551SRodney W. Grimes 		 * We catch all the interesting ones,
7028fae3551SRodney W. Grimes 		 * and those are reset to SIG_DFL on exec.
7038fae3551SRodney W. Grimes 		 */
7048fae3551SRodney W. Grimes 		sigemptyset(&mask);
7058fae3551SRodney W. Grimes 		sigprocmask(SIG_SETMASK, &mask, (sigset_t *) 0);
7068fae3551SRodney W. Grimes 
7078fae3551SRodney W. Grimes 		/*
7088fae3551SRodney W. Grimes 		 * Fire off a shell.
7098fae3551SRodney W. Grimes 		 * If the default one doesn't work, try the Bourne shell.
7108fae3551SRodney W. Grimes 		 */
711ab03e6d5SXin LI 
712ab03e6d5SXin LI 		char name[] = "-sh";
713ab03e6d5SXin LI 
714ab03e6d5SXin LI 		argv[0] = name;
7158fae3551SRodney W. Grimes 		argv[1] = 0;
7168fae3551SRodney W. Grimes 		execv(shell, argv);
7178fae3551SRodney W. Grimes 		emergency("can't exec %s for single user: %m", shell);
7188fae3551SRodney W. Grimes 		execv(_PATH_BSHELL, argv);
7198fae3551SRodney W. Grimes 		emergency("can't exec %s for single user: %m", _PATH_BSHELL);
7208fae3551SRodney W. Grimes 		sleep(STALL_TIMEOUT);
7218fae3551SRodney W. Grimes 		_exit(1);
7228fae3551SRodney W. Grimes 	}
7238fae3551SRodney W. Grimes 
7248fae3551SRodney W. Grimes 	if (pid == -1) {
7258fae3551SRodney W. Grimes 		/*
7268fae3551SRodney W. Grimes 		 * We are seriously hosed.  Do our best.
7278fae3551SRodney W. Grimes 		 */
7288fae3551SRodney W. Grimes 		emergency("can't fork single-user shell, trying again");
7298fae3551SRodney W. Grimes 		while (waitpid(-1, (int *) 0, WNOHANG) > 0)
7308fae3551SRodney W. Grimes 			continue;
7318fae3551SRodney W. Grimes 		return (state_func_t) single_user;
7328fae3551SRodney W. Grimes 	}
7338fae3551SRodney W. Grimes 
7348fae3551SRodney W. Grimes 	requested_transition = 0;
7358fae3551SRodney W. Grimes 	do {
7368fae3551SRodney W. Grimes 		if ((wpid = waitpid(-1, &status, WUNTRACED)) != -1)
7378fae3551SRodney W. Grimes 			collect_child(wpid);
7388fae3551SRodney W. Grimes 		if (wpid == -1) {
7398fae3551SRodney W. Grimes 			if (errno == EINTR)
7408fae3551SRodney W. Grimes 				continue;
7418fae3551SRodney W. Grimes 			warning("wait for single-user shell failed: %m; restarting");
7428fae3551SRodney W. Grimes 			return (state_func_t) single_user;
7438fae3551SRodney W. Grimes 		}
7448fae3551SRodney W. Grimes 		if (wpid == pid && WIFSTOPPED(status)) {
7458fae3551SRodney W. Grimes 			warning("init: shell stopped, restarting\n");
7468fae3551SRodney W. Grimes 			kill(pid, SIGCONT);
7478fae3551SRodney W. Grimes 			wpid = -1;
7488fae3551SRodney W. Grimes 		}
7498fae3551SRodney W. Grimes 	} while (wpid != pid && !requested_transition);
7508fae3551SRodney W. Grimes 
7518fae3551SRodney W. Grimes 	if (requested_transition)
7528fae3551SRodney W. Grimes 		return (state_func_t) requested_transition;
7538fae3551SRodney W. Grimes 
7548fae3551SRodney W. Grimes 	if (!WIFEXITED(status)) {
7558fae3551SRodney W. Grimes 		if (WTERMSIG(status) == SIGKILL) {
7568fae3551SRodney W. Grimes 			/*
7578fae3551SRodney W. Grimes 			 *  reboot(8) killed shell?
7588fae3551SRodney W. Grimes 			 */
7598fae3551SRodney W. Grimes 			warning("single user shell terminated.");
7608fae3551SRodney W. Grimes 			sleep(STALL_TIMEOUT);
7618fae3551SRodney W. Grimes 			_exit(0);
7628fae3551SRodney W. Grimes 		} else {
7638fae3551SRodney W. Grimes 			warning("single user shell terminated, restarting");
7648fae3551SRodney W. Grimes 			return (state_func_t) single_user;
7658fae3551SRodney W. Grimes 		}
7668fae3551SRodney W. Grimes 	}
7678fae3551SRodney W. Grimes 
7688fae3551SRodney W. Grimes 	runcom_mode = FASTBOOT;
7698fae3551SRodney W. Grimes 	return (state_func_t) runcom;
7708fae3551SRodney W. Grimes }
7718fae3551SRodney W. Grimes 
7728fae3551SRodney W. Grimes /*
7738fae3551SRodney W. Grimes  * Run the system startup script.
7748fae3551SRodney W. Grimes  */
77545cfb1dcSXin LI static state_func_t
77673bf18edSWarner Losh runcom(void)
7778fae3551SRodney W. Grimes {
7781a7bec91SWarner Losh 	state_func_t next_transition;
7791a7bec91SWarner Losh 
7801a7bec91SWarner Losh 	if ((next_transition = run_script(_PATH_RUNCOM)) != 0)
7811a7bec91SWarner Losh 		return next_transition;
7821a7bec91SWarner Losh 
7831a7bec91SWarner Losh 	runcom_mode = AUTOBOOT;		/* the default */
7841a7bec91SWarner Losh 	/* NB: should send a message to the session logger to avoid blocking. */
7851a7bec91SWarner Losh 	logwtmp("~", "reboot", "");
7861a7bec91SWarner Losh 	return (state_func_t) read_ttys;
7871a7bec91SWarner Losh }
7881a7bec91SWarner Losh 
7891a7bec91SWarner Losh /*
7901a7bec91SWarner Losh  * Run a shell script.
7911a7bec91SWarner Losh  * Returns 0 on success, otherwise the next transition to enter:
7921a7bec91SWarner Losh  *  - single_user if fork/execv/waitpid failed, or if the script
7931a7bec91SWarner Losh  *    terminated with a signal or exit code != 0.
7941a7bec91SWarner Losh  *  - death if a SIGTERM was delivered to init(8).
7951a7bec91SWarner Losh  */
79645cfb1dcSXin LI static state_func_t
7971a7bec91SWarner Losh run_script(const char *script)
7981a7bec91SWarner Losh {
7998fae3551SRodney W. Grimes 	pid_t pid, wpid;
8008fae3551SRodney W. Grimes 	int status;
8018fae3551SRodney W. Grimes 	char *argv[4];
8021a7bec91SWarner Losh 	const char *shell;
8038fae3551SRodney W. Grimes 	struct sigaction sa;
8048fae3551SRodney W. Grimes 
8051a7bec91SWarner Losh 	shell = get_shell();
8061a7bec91SWarner Losh 
8078fae3551SRodney W. Grimes 	if ((pid = fork()) == 0) {
8088fae3551SRodney W. Grimes 		sigemptyset(&sa.sa_mask);
8098fae3551SRodney W. Grimes 		sa.sa_flags = 0;
8108fae3551SRodney W. Grimes 		sa.sa_handler = SIG_IGN;
811091abe40SDavid E. O'Brien 		sigaction(SIGTSTP, &sa, (struct sigaction *)0);
812091abe40SDavid E. O'Brien 		sigaction(SIGHUP, &sa, (struct sigaction *)0);
8138fae3551SRodney W. Grimes 
8148fae3551SRodney W. Grimes 		setctty(_PATH_CONSOLE);
8158fae3551SRodney W. Grimes 
816ab03e6d5SXin LI 		char _sh[]	 	= "sh";
817ab03e6d5SXin LI 		char _autoboot[]	= "autoboot";
818ab03e6d5SXin LI 
819ab03e6d5SXin LI 		argv[0] = _sh;
8201a7bec91SWarner Losh 		argv[1] = __DECONST(char *, script);
821ab03e6d5SXin LI 		argv[2] = runcom_mode == AUTOBOOT ? _autoboot : 0;
8228fae3551SRodney W. Grimes 		argv[3] = 0;
8238fae3551SRodney W. Grimes 
8248fae3551SRodney W. Grimes 		sigprocmask(SIG_SETMASK, &sa.sa_mask, (sigset_t *) 0);
8258fae3551SRodney W. Grimes 
8261ef60eb1SDavid Nugent #ifdef LOGIN_CAP
8271ef60eb1SDavid Nugent 		setprocresources(RESOURCE_RC);
8281ef60eb1SDavid Nugent #endif
8291a7bec91SWarner Losh 		execv(shell, argv);
8301a7bec91SWarner Losh 		stall("can't exec %s for %s: %m", shell, script);
8318fae3551SRodney W. Grimes 		_exit(1);	/* force single user mode */
8328fae3551SRodney W. Grimes 	}
8338fae3551SRodney W. Grimes 
8348fae3551SRodney W. Grimes 	if (pid == -1) {
8351a7bec91SWarner Losh 		emergency("can't fork for %s on %s: %m", shell, script);
8368fae3551SRodney W. Grimes 		while (waitpid(-1, (int *) 0, WNOHANG) > 0)
8378fae3551SRodney W. Grimes 			continue;
8388fae3551SRodney W. Grimes 		sleep(STALL_TIMEOUT);
8398fae3551SRodney W. Grimes 		return (state_func_t) single_user;
8408fae3551SRodney W. Grimes 	}
8418fae3551SRodney W. Grimes 
8428fae3551SRodney W. Grimes 	/*
8438fae3551SRodney W. Grimes 	 * Copied from single_user().  This is a bit paranoid.
8448fae3551SRodney W. Grimes 	 */
8456e8ff8b7SDag-Erling Smørgrav 	requested_transition = 0;
8468fae3551SRodney W. Grimes 	do {
8478fae3551SRodney W. Grimes 		if ((wpid = waitpid(-1, &status, WUNTRACED)) != -1)
8488fae3551SRodney W. Grimes 			collect_child(wpid);
8498fae3551SRodney W. Grimes 		if (wpid == -1) {
8506e8ff8b7SDag-Erling Smørgrav 			if (requested_transition == death)
8516e8ff8b7SDag-Erling Smørgrav 				return (state_func_t) death;
8528fae3551SRodney W. Grimes 			if (errno == EINTR)
8538fae3551SRodney W. Grimes 				continue;
8541a7bec91SWarner Losh 			warning("wait for %s on %s failed: %m; going to "
8551a7bec91SWarner Losh 			    "single user mode", shell, script);
8568fae3551SRodney W. Grimes 			return (state_func_t) single_user;
8578fae3551SRodney W. Grimes 		}
8588fae3551SRodney W. Grimes 		if (wpid == pid && WIFSTOPPED(status)) {
8598fae3551SRodney W. Grimes 			warning("init: %s on %s stopped, restarting\n",
8601a7bec91SWarner Losh 			    shell, script);
8618fae3551SRodney W. Grimes 			kill(pid, SIGCONT);
8628fae3551SRodney W. Grimes 			wpid = -1;
8638fae3551SRodney W. Grimes 		}
8648fae3551SRodney W. Grimes 	} while (wpid != pid);
8658fae3551SRodney W. Grimes 
8668fae3551SRodney W. Grimes 	if (WIFSIGNALED(status) && WTERMSIG(status) == SIGTERM &&
8678fae3551SRodney W. Grimes 	    requested_transition == catatonia) {
8688fae3551SRodney W. Grimes 		/* /etc/rc executed /sbin/reboot; wait for the end quietly */
8698fae3551SRodney W. Grimes 		sigset_t s;
8708fae3551SRodney W. Grimes 
8718fae3551SRodney W. Grimes 		sigfillset(&s);
8728fae3551SRodney W. Grimes 		for (;;)
8738fae3551SRodney W. Grimes 			sigsuspend(&s);
8748fae3551SRodney W. Grimes 	}
8758fae3551SRodney W. Grimes 
8768fae3551SRodney W. Grimes 	if (!WIFEXITED(status)) {
8771a7bec91SWarner Losh 		warning("%s on %s terminated abnormally, going to single "
8781a7bec91SWarner Losh 		    "user mode", shell, script);
8798fae3551SRodney W. Grimes 		return (state_func_t) single_user;
8808fae3551SRodney W. Grimes 	}
8818fae3551SRodney W. Grimes 
8828fae3551SRodney W. Grimes 	if (WEXITSTATUS(status))
8838fae3551SRodney W. Grimes 		return (state_func_t) single_user;
8848fae3551SRodney W. Grimes 
8851a7bec91SWarner Losh 	return (state_func_t) 0;
8868fae3551SRodney W. Grimes }
8878fae3551SRodney W. Grimes 
8888fae3551SRodney W. Grimes /*
8898fae3551SRodney W. Grimes  * Open the session database.
8908fae3551SRodney W. Grimes  *
8918fae3551SRodney W. Grimes  * NB: We could pass in the size here; is it necessary?
8928fae3551SRodney W. Grimes  */
89345cfb1dcSXin LI static int
89473bf18edSWarner Losh start_session_db(void)
8958fae3551SRodney W. Grimes {
8968fae3551SRodney W. Grimes 	if (session_db && (*session_db->close)(session_db))
8978fae3551SRodney W. Grimes 		emergency("session database close: %s", strerror(errno));
8988fae3551SRodney W. Grimes 	if ((session_db = dbopen(NULL, O_RDWR, 0, DB_HASH, NULL)) == 0) {
8998fae3551SRodney W. Grimes 		emergency("session database open: %s", strerror(errno));
9008fae3551SRodney W. Grimes 		return (1);
9018fae3551SRodney W. Grimes 	}
9028fae3551SRodney W. Grimes 	return (0);
9038fae3551SRodney W. Grimes 
9048fae3551SRodney W. Grimes }
9058fae3551SRodney W. Grimes 
9068fae3551SRodney W. Grimes /*
9078fae3551SRodney W. Grimes  * Add a new login session.
9088fae3551SRodney W. Grimes  */
90945cfb1dcSXin LI static void
91073bf18edSWarner Losh add_session(session_t *sp)
9118fae3551SRodney W. Grimes {
9128fae3551SRodney W. Grimes 	DBT key;
9138fae3551SRodney W. Grimes 	DBT data;
9148fae3551SRodney W. Grimes 
9158fae3551SRodney W. Grimes 	key.data = &sp->se_process;
9168fae3551SRodney W. Grimes 	key.size = sizeof sp->se_process;
9178fae3551SRodney W. Grimes 	data.data = &sp;
9188fae3551SRodney W. Grimes 	data.size = sizeof sp;
9198fae3551SRodney W. Grimes 
9208fae3551SRodney W. Grimes 	if ((*session_db->put)(session_db, &key, &data, 0))
9218fae3551SRodney W. Grimes 		emergency("insert %d: %s", sp->se_process, strerror(errno));
9228fae3551SRodney W. Grimes }
9238fae3551SRodney W. Grimes 
9248fae3551SRodney W. Grimes /*
9258fae3551SRodney W. Grimes  * Delete an old login session.
9268fae3551SRodney W. Grimes  */
92745cfb1dcSXin LI static void
92873bf18edSWarner Losh del_session(session_t *sp)
9298fae3551SRodney W. Grimes {
9308fae3551SRodney W. Grimes 	DBT key;
9318fae3551SRodney W. Grimes 
9328fae3551SRodney W. Grimes 	key.data = &sp->se_process;
9338fae3551SRodney W. Grimes 	key.size = sizeof sp->se_process;
9348fae3551SRodney W. Grimes 
9358fae3551SRodney W. Grimes 	if ((*session_db->del)(session_db, &key, 0))
9368fae3551SRodney W. Grimes 		emergency("delete %d: %s", sp->se_process, strerror(errno));
9378fae3551SRodney W. Grimes }
9388fae3551SRodney W. Grimes 
9398fae3551SRodney W. Grimes /*
9408fae3551SRodney W. Grimes  * Look up a login session by pid.
9418fae3551SRodney W. Grimes  */
94245cfb1dcSXin LI static session_t *
9438fae3551SRodney W. Grimes find_session(pid_t pid)
9448fae3551SRodney W. Grimes {
9458fae3551SRodney W. Grimes 	DBT key;
9468fae3551SRodney W. Grimes 	DBT data;
9478fae3551SRodney W. Grimes 	session_t *ret;
9488fae3551SRodney W. Grimes 
9498fae3551SRodney W. Grimes 	key.data = &pid;
9508fae3551SRodney W. Grimes 	key.size = sizeof pid;
9518fae3551SRodney W. Grimes 	if ((*session_db->get)(session_db, &key, &data, 0) != 0)
9528fae3551SRodney W. Grimes 		return 0;
9538fae3551SRodney W. Grimes 	bcopy(data.data, (char *)&ret, sizeof(ret));
9548fae3551SRodney W. Grimes 	return ret;
9558fae3551SRodney W. Grimes }
9568fae3551SRodney W. Grimes 
9578fae3551SRodney W. Grimes /*
9588fae3551SRodney W. Grimes  * Construct an argument vector from a command line.
9598fae3551SRodney W. Grimes  */
96045cfb1dcSXin LI static char **
96173bf18edSWarner Losh construct_argv(char *command)
9628fae3551SRodney W. Grimes {
9633d438ad6SDavid E. O'Brien 	int argc = 0;
9643d438ad6SDavid E. O'Brien 	char **argv = (char **) malloc(((strlen(command) + 1) / 2 + 1)
9658fae3551SRodney W. Grimes 						* sizeof (char *));
9668fae3551SRodney W. Grimes 
9676be40c95SRuslan Ermilov 	if ((argv[argc++] = strk(command)) == 0) {
9686be40c95SRuslan Ermilov 		free(argv);
9696be40c95SRuslan Ermilov 		return (NULL);
9706be40c95SRuslan Ermilov 	}
9718889c700SDavid Nugent 	while ((argv[argc++] = strk((char *) 0)) != NULL)
9728fae3551SRodney W. Grimes 		continue;
9738fae3551SRodney W. Grimes 	return argv;
9748fae3551SRodney W. Grimes }
9758fae3551SRodney W. Grimes 
9768fae3551SRodney W. Grimes /*
9778fae3551SRodney W. Grimes  * Deallocate a session descriptor.
9788fae3551SRodney W. Grimes  */
97945cfb1dcSXin LI static void
98073bf18edSWarner Losh free_session(session_t *sp)
9818fae3551SRodney W. Grimes {
9828fae3551SRodney W. Grimes 	free(sp->se_device);
9838fae3551SRodney W. Grimes 	if (sp->se_getty) {
9848fae3551SRodney W. Grimes 		free(sp->se_getty);
985b5df27e2SAndrey A. Chernov 		free(sp->se_getty_argv_space);
9868fae3551SRodney W. Grimes 		free(sp->se_getty_argv);
9878fae3551SRodney W. Grimes 	}
9888fae3551SRodney W. Grimes 	if (sp->se_window) {
9898fae3551SRodney W. Grimes 		free(sp->se_window);
990b5df27e2SAndrey A. Chernov 		free(sp->se_window_argv_space);
9918fae3551SRodney W. Grimes 		free(sp->se_window_argv);
9928fae3551SRodney W. Grimes 	}
993b5df27e2SAndrey A. Chernov 	if (sp->se_type)
994b5df27e2SAndrey A. Chernov 		free(sp->se_type);
9958fae3551SRodney W. Grimes 	free(sp);
9968fae3551SRodney W. Grimes }
9978fae3551SRodney W. Grimes 
9988fae3551SRodney W. Grimes /*
9998fae3551SRodney W. Grimes  * Allocate a new session descriptor.
1000b0b670eeSAlfred Perlstein  * Mark it SE_PRESENT.
10018fae3551SRodney W. Grimes  */
100245cfb1dcSXin LI static session_t *
100373bf18edSWarner Losh new_session(session_t *sprev, int session_index, struct ttyent *typ)
10048fae3551SRodney W. Grimes {
10053d438ad6SDavid E. O'Brien 	session_t *sp;
10064cbf8903SPaul Traina 	int fd;
10078fae3551SRodney W. Grimes 
10088fae3551SRodney W. Grimes 	if ((typ->ty_status & TTY_ON) == 0 ||
10098fae3551SRodney W. Grimes 	    typ->ty_name == 0 ||
10108fae3551SRodney W. Grimes 	    typ->ty_getty == 0)
10118fae3551SRodney W. Grimes 		return 0;
10128fae3551SRodney W. Grimes 
10131054bb1eSAndrey A. Chernov 	sp = (session_t *) calloc(1, sizeof (session_t));
10148fae3551SRodney W. Grimes 
10158fae3551SRodney W. Grimes 	sp->se_index = session_index;
1016b0b670eeSAlfred Perlstein 	sp->se_flags |= SE_PRESENT;
10178fae3551SRodney W. Grimes 
10188fae3551SRodney W. Grimes 	sp->se_device = malloc(sizeof(_PATH_DEV) + strlen(typ->ty_name));
1019091abe40SDavid E. O'Brien 	sprintf(sp->se_device, "%s%s", _PATH_DEV, typ->ty_name);
10208fae3551SRodney W. Grimes 
10214cbf8903SPaul Traina 	/*
10224cbf8903SPaul Traina 	 * Attempt to open the device, if we get "device not configured"
10234cbf8903SPaul Traina 	 * then don't add the device to the session list.
10244cbf8903SPaul Traina 	 */
10254cbf8903SPaul Traina 	if ((fd = open(sp->se_device, O_RDONLY | O_NONBLOCK, 0)) < 0) {
102689e3b380SWarner Losh 		if (errno == ENXIO) {
10274cbf8903SPaul Traina 			free_session(sp);
10284cbf8903SPaul Traina 			return (0);
10294cbf8903SPaul Traina 		}
10304cbf8903SPaul Traina 	} else
10314cbf8903SPaul Traina 		close(fd);
10324cbf8903SPaul Traina 
10338fae3551SRodney W. Grimes 	if (setupargv(sp, typ) == 0) {
10348fae3551SRodney W. Grimes 		free_session(sp);
10358fae3551SRodney W. Grimes 		return (0);
10368fae3551SRodney W. Grimes 	}
10378fae3551SRodney W. Grimes 
10388fae3551SRodney W. Grimes 	sp->se_next = 0;
10398fae3551SRodney W. Grimes 	if (sprev == 0) {
10408fae3551SRodney W. Grimes 		sessions = sp;
10418fae3551SRodney W. Grimes 		sp->se_prev = 0;
10428fae3551SRodney W. Grimes 	} else {
10438fae3551SRodney W. Grimes 		sprev->se_next = sp;
10448fae3551SRodney W. Grimes 		sp->se_prev = sprev;
10458fae3551SRodney W. Grimes 	}
10468fae3551SRodney W. Grimes 
10478fae3551SRodney W. Grimes 	return sp;
10488fae3551SRodney W. Grimes }
10498fae3551SRodney W. Grimes 
10508fae3551SRodney W. Grimes /*
10518fae3551SRodney W. Grimes  * Calculate getty and if useful window argv vectors.
10528fae3551SRodney W. Grimes  */
105345cfb1dcSXin LI static int
105473bf18edSWarner Losh setupargv(session_t *sp, struct ttyent *typ)
10558fae3551SRodney W. Grimes {
10568fae3551SRodney W. Grimes 
10578fae3551SRodney W. Grimes 	if (sp->se_getty) {
10588fae3551SRodney W. Grimes 		free(sp->se_getty);
1059b5df27e2SAndrey A. Chernov 		free(sp->se_getty_argv_space);
10608fae3551SRodney W. Grimes 		free(sp->se_getty_argv);
10618fae3551SRodney W. Grimes 	}
10628fae3551SRodney W. Grimes 	sp->se_getty = malloc(strlen(typ->ty_getty) + strlen(typ->ty_name) + 2);
1063091abe40SDavid E. O'Brien 	sprintf(sp->se_getty, "%s %s", typ->ty_getty, typ->ty_name);
1064b5df27e2SAndrey A. Chernov 	sp->se_getty_argv_space = strdup(sp->se_getty);
1065b5df27e2SAndrey A. Chernov 	sp->se_getty_argv = construct_argv(sp->se_getty_argv_space);
10668fae3551SRodney W. Grimes 	if (sp->se_getty_argv == 0) {
10678fae3551SRodney W. Grimes 		warning("can't parse getty for port %s", sp->se_device);
10688fae3551SRodney W. Grimes 		free(sp->se_getty);
1069b5df27e2SAndrey A. Chernov 		free(sp->se_getty_argv_space);
1070b5df27e2SAndrey A. Chernov 		sp->se_getty = sp->se_getty_argv_space = 0;
10718fae3551SRodney W. Grimes 		return (0);
10728fae3551SRodney W. Grimes 	}
1073b5df27e2SAndrey A. Chernov 	if (sp->se_window) {
10748fae3551SRodney W. Grimes 		free(sp->se_window);
1075b5df27e2SAndrey A. Chernov 		free(sp->se_window_argv_space);
1076b5df27e2SAndrey A. Chernov 		free(sp->se_window_argv);
1077b5df27e2SAndrey A. Chernov 	}
1078b5df27e2SAndrey A. Chernov 	sp->se_window = sp->se_window_argv_space = 0;
1079b5df27e2SAndrey A. Chernov 	sp->se_window_argv = 0;
1080b5df27e2SAndrey A. Chernov 	if (typ->ty_window) {
10818fae3551SRodney W. Grimes 		sp->se_window = strdup(typ->ty_window);
1082b5df27e2SAndrey A. Chernov 		sp->se_window_argv_space = strdup(sp->se_window);
1083b5df27e2SAndrey A. Chernov 		sp->se_window_argv = construct_argv(sp->se_window_argv_space);
10848fae3551SRodney W. Grimes 		if (sp->se_window_argv == 0) {
10858fae3551SRodney W. Grimes 			warning("can't parse window for port %s",
10868fae3551SRodney W. Grimes 			    sp->se_device);
1087b5df27e2SAndrey A. Chernov 			free(sp->se_window_argv_space);
10888fae3551SRodney W. Grimes 			free(sp->se_window);
1089b5df27e2SAndrey A. Chernov 			sp->se_window = sp->se_window_argv_space = 0;
10908fae3551SRodney W. Grimes 			return (0);
10918fae3551SRodney W. Grimes 		}
10928fae3551SRodney W. Grimes 	}
1093b5df27e2SAndrey A. Chernov 	if (sp->se_type)
1094b5df27e2SAndrey A. Chernov 		free(sp->se_type);
1095b5df27e2SAndrey A. Chernov 	sp->se_type = typ->ty_type ? strdup(typ->ty_type) : 0;
10968fae3551SRodney W. Grimes 	return (1);
10978fae3551SRodney W. Grimes }
10988fae3551SRodney W. Grimes 
10998fae3551SRodney W. Grimes /*
11008fae3551SRodney W. Grimes  * Walk the list of ttys and create sessions for each active line.
11018fae3551SRodney W. Grimes  */
110245cfb1dcSXin LI static state_func_t
110373bf18edSWarner Losh read_ttys(void)
11048fae3551SRodney W. Grimes {
11058fae3551SRodney W. Grimes 	int session_index = 0;
11063d438ad6SDavid E. O'Brien 	session_t *sp, *snext;
11073d438ad6SDavid E. O'Brien 	struct ttyent *typ;
11088fae3551SRodney W. Grimes 
11098fae3551SRodney W. Grimes 	/*
11108fae3551SRodney W. Grimes 	 * Destroy any previous session state.
11118fae3551SRodney W. Grimes 	 * There shouldn't be any, but just in case...
11128fae3551SRodney W. Grimes 	 */
11138fae3551SRodney W. Grimes 	for (sp = sessions; sp; sp = snext) {
11148fae3551SRodney W. Grimes 		if (sp->se_process)
11158fae3551SRodney W. Grimes 			clear_session_logs(sp);
11168fae3551SRodney W. Grimes 		snext = sp->se_next;
11178fae3551SRodney W. Grimes 		free_session(sp);
11188fae3551SRodney W. Grimes 	}
11198fae3551SRodney W. Grimes 	sessions = 0;
11208fae3551SRodney W. Grimes 	if (start_session_db())
11218fae3551SRodney W. Grimes 		return (state_func_t) single_user;
11228fae3551SRodney W. Grimes 
11238fae3551SRodney W. Grimes 	/*
11248fae3551SRodney W. Grimes 	 * Allocate a session entry for each active port.
11258fae3551SRodney W. Grimes 	 * Note that sp starts at 0.
11268fae3551SRodney W. Grimes 	 */
11278889c700SDavid Nugent 	while ((typ = getttyent()) != NULL)
11288889c700SDavid Nugent 		if ((snext = new_session(sp, ++session_index, typ)) != NULL)
11298fae3551SRodney W. Grimes 			sp = snext;
11308fae3551SRodney W. Grimes 
11318fae3551SRodney W. Grimes 	endttyent();
11328fae3551SRodney W. Grimes 
11338fae3551SRodney W. Grimes 	return (state_func_t) multi_user;
11348fae3551SRodney W. Grimes }
11358fae3551SRodney W. Grimes 
11368fae3551SRodney W. Grimes /*
11378fae3551SRodney W. Grimes  * Start a window system running.
11388fae3551SRodney W. Grimes  */
113945cfb1dcSXin LI static void
114073bf18edSWarner Losh start_window_system(session_t *sp)
11418fae3551SRodney W. Grimes {
11428fae3551SRodney W. Grimes 	pid_t pid;
11438fae3551SRodney W. Grimes 	sigset_t mask;
1144b5df27e2SAndrey A. Chernov 	char term[64], *env[2];
11455010c3b6SKonstantin Belousov 	int status;
11468fae3551SRodney W. Grimes 
11478fae3551SRodney W. Grimes 	if ((pid = fork()) == -1) {
11488fae3551SRodney W. Grimes 		emergency("can't fork for window system on port %s: %m",
11498fae3551SRodney W. Grimes 		    sp->se_device);
11508fae3551SRodney W. Grimes 		/* hope that getty fails and we can try again */
11518fae3551SRodney W. Grimes 		return;
11528fae3551SRodney W. Grimes 	}
1153091abe40SDavid E. O'Brien 	if (pid) {
11545010c3b6SKonstantin Belousov 		waitpid(-1, &status, 0);
11558fae3551SRodney W. Grimes 		return;
11565010c3b6SKonstantin Belousov 	}
11575010c3b6SKonstantin Belousov 
11585010c3b6SKonstantin Belousov 	/* reparent window process to the init to not make a zombie on exit */
11595010c3b6SKonstantin Belousov 	if ((pid = fork()) == -1) {
11605010c3b6SKonstantin Belousov 		emergency("can't fork for window system on port %s: %m",
11615010c3b6SKonstantin Belousov 		    sp->se_device);
11625010c3b6SKonstantin Belousov 		_exit(1);
11635010c3b6SKonstantin Belousov 	}
11645010c3b6SKonstantin Belousov 	if (pid)
11655010c3b6SKonstantin Belousov 		_exit(0);
11668fae3551SRodney W. Grimes 
11678fae3551SRodney W. Grimes 	sigemptyset(&mask);
11688fae3551SRodney W. Grimes 	sigprocmask(SIG_SETMASK, &mask, (sigset_t *) 0);
11698fae3551SRodney W. Grimes 
11708fae3551SRodney W. Grimes 	if (setsid() < 0)
11718fae3551SRodney W. Grimes 		emergency("setsid failed (window) %m");
11728fae3551SRodney W. Grimes 
11731ef60eb1SDavid Nugent #ifdef LOGIN_CAP
11741ef60eb1SDavid Nugent 	setprocresources(RESOURCE_WINDOW);
11751ef60eb1SDavid Nugent #endif
1176b5df27e2SAndrey A. Chernov 	if (sp->se_type) {
1177b5df27e2SAndrey A. Chernov 		/* Don't use malloc after fork */
1178b5df27e2SAndrey A. Chernov 		strcpy(term, "TERM=");
117933a20f82SDavid Greenman 		strncat(term, sp->se_type, sizeof(term) - 6);
1180b5df27e2SAndrey A. Chernov 		env[0] = term;
1181b5df27e2SAndrey A. Chernov 		env[1] = 0;
1182b5df27e2SAndrey A. Chernov 	}
1183b5df27e2SAndrey A. Chernov 	else
1184b5df27e2SAndrey A. Chernov 		env[0] = 0;
1185b5df27e2SAndrey A. Chernov 	execve(sp->se_window_argv[0], sp->se_window_argv, env);
11868fae3551SRodney W. Grimes 	stall("can't exec window system '%s' for port %s: %m",
11878fae3551SRodney W. Grimes 		sp->se_window_argv[0], sp->se_device);
11888fae3551SRodney W. Grimes 	_exit(1);
11898fae3551SRodney W. Grimes }
11908fae3551SRodney W. Grimes 
11918fae3551SRodney W. Grimes /*
11928fae3551SRodney W. Grimes  * Start a login session running.
11938fae3551SRodney W. Grimes  */
119445cfb1dcSXin LI static pid_t
119573bf18edSWarner Losh start_getty(session_t *sp)
11968fae3551SRodney W. Grimes {
11978fae3551SRodney W. Grimes 	pid_t pid;
11988fae3551SRodney W. Grimes 	sigset_t mask;
11998fae3551SRodney W. Grimes 	time_t current_time = time((time_t *) 0);
1200228d7ef2SAndrey A. Chernov 	int too_quick = 0;
1201b5df27e2SAndrey A. Chernov 	char term[64], *env[2];
12028fae3551SRodney W. Grimes 
1203bb2e87c4SMike Pritchard 	if (current_time >= sp->se_started &&
1204228d7ef2SAndrey A. Chernov 	    current_time - sp->se_started < GETTY_SPACING) {
1205228d7ef2SAndrey A. Chernov 		if (++sp->se_nspace > GETTY_NSPACE) {
1206228d7ef2SAndrey A. Chernov 			sp->se_nspace = 0;
1207228d7ef2SAndrey A. Chernov 			too_quick = 1;
1208228d7ef2SAndrey A. Chernov 		}
1209228d7ef2SAndrey A. Chernov 	} else
1210228d7ef2SAndrey A. Chernov 		sp->se_nspace = 0;
1211228d7ef2SAndrey A. Chernov 
12128fae3551SRodney W. Grimes 	/*
12138fae3551SRodney W. Grimes 	 * fork(), not vfork() -- we can't afford to block.
12148fae3551SRodney W. Grimes 	 */
12158fae3551SRodney W. Grimes 	if ((pid = fork()) == -1) {
12168fae3551SRodney W. Grimes 		emergency("can't fork for getty on port %s: %m", sp->se_device);
12178fae3551SRodney W. Grimes 		return -1;
12188fae3551SRodney W. Grimes 	}
12198fae3551SRodney W. Grimes 
12208fae3551SRodney W. Grimes 	if (pid)
12218fae3551SRodney W. Grimes 		return pid;
12228fae3551SRodney W. Grimes 
1223228d7ef2SAndrey A. Chernov 	if (too_quick) {
1224b5df27e2SAndrey A. Chernov 		warning("getty repeating too quickly on port %s, sleeping %d secs",
1225b5df27e2SAndrey A. Chernov 		    sp->se_device, GETTY_SLEEP);
12268fae3551SRodney W. Grimes 		sleep((unsigned) GETTY_SLEEP);
12278fae3551SRodney W. Grimes 	}
12288fae3551SRodney W. Grimes 
12298fae3551SRodney W. Grimes 	if (sp->se_window) {
12308fae3551SRodney W. Grimes 		start_window_system(sp);
12318fae3551SRodney W. Grimes 		sleep(WINDOW_WAIT);
12328fae3551SRodney W. Grimes 	}
12338fae3551SRodney W. Grimes 
12348fae3551SRodney W. Grimes 	sigemptyset(&mask);
12358fae3551SRodney W. Grimes 	sigprocmask(SIG_SETMASK, &mask, (sigset_t *) 0);
12368fae3551SRodney W. Grimes 
12371ef60eb1SDavid Nugent #ifdef LOGIN_CAP
12381ef60eb1SDavid Nugent 	setprocresources(RESOURCE_GETTY);
12391ef60eb1SDavid Nugent #endif
1240b5df27e2SAndrey A. Chernov 	if (sp->se_type) {
1241b5df27e2SAndrey A. Chernov 		/* Don't use malloc after fork */
1242b5df27e2SAndrey A. Chernov 		strcpy(term, "TERM=");
124333a20f82SDavid Greenman 		strncat(term, sp->se_type, sizeof(term) - 6);
1244b5df27e2SAndrey A. Chernov 		env[0] = term;
1245b5df27e2SAndrey A. Chernov 		env[1] = 0;
1246091abe40SDavid E. O'Brien 	} else
1247b5df27e2SAndrey A. Chernov 		env[0] = 0;
1248b5df27e2SAndrey A. Chernov 	execve(sp->se_getty_argv[0], sp->se_getty_argv, env);
12498fae3551SRodney W. Grimes 	stall("can't exec getty '%s' for port %s: %m",
12508fae3551SRodney W. Grimes 		sp->se_getty_argv[0], sp->se_device);
12518fae3551SRodney W. Grimes 	_exit(1);
12528fae3551SRodney W. Grimes }
12538fae3551SRodney W. Grimes 
12548fae3551SRodney W. Grimes /*
12558fae3551SRodney W. Grimes  * Collect exit status for a child.
12568fae3551SRodney W. Grimes  * If an exiting login, start a new login running.
12578fae3551SRodney W. Grimes  */
125845cfb1dcSXin LI static void
12598fae3551SRodney W. Grimes collect_child(pid_t pid)
12608fae3551SRodney W. Grimes {
12613d438ad6SDavid E. O'Brien 	session_t *sp, *sprev, *snext;
12628fae3551SRodney W. Grimes 
12638fae3551SRodney W. Grimes 	if (! sessions)
12648fae3551SRodney W. Grimes 		return;
12658fae3551SRodney W. Grimes 
12668fae3551SRodney W. Grimes 	if (! (sp = find_session(pid)))
12678fae3551SRodney W. Grimes 		return;
12688fae3551SRodney W. Grimes 
12698fae3551SRodney W. Grimes 	clear_session_logs(sp);
12708fae3551SRodney W. Grimes 	del_session(sp);
12718fae3551SRodney W. Grimes 	sp->se_process = 0;
12728fae3551SRodney W. Grimes 
12738fae3551SRodney W. Grimes 	if (sp->se_flags & SE_SHUTDOWN) {
12748889c700SDavid Nugent 		if ((sprev = sp->se_prev) != NULL)
12758fae3551SRodney W. Grimes 			sprev->se_next = sp->se_next;
12768fae3551SRodney W. Grimes 		else
12778fae3551SRodney W. Grimes 			sessions = sp->se_next;
12788889c700SDavid Nugent 		if ((snext = sp->se_next) != NULL)
12798fae3551SRodney W. Grimes 			snext->se_prev = sp->se_prev;
12808fae3551SRodney W. Grimes 		free_session(sp);
12818fae3551SRodney W. Grimes 		return;
12828fae3551SRodney W. Grimes 	}
12838fae3551SRodney W. Grimes 
12848fae3551SRodney W. Grimes 	if ((pid = start_getty(sp)) == -1) {
12858fae3551SRodney W. Grimes 		/* serious trouble */
12868fae3551SRodney W. Grimes 		requested_transition = clean_ttys;
12878fae3551SRodney W. Grimes 		return;
12888fae3551SRodney W. Grimes 	}
12898fae3551SRodney W. Grimes 
12908fae3551SRodney W. Grimes 	sp->se_process = pid;
12918fae3551SRodney W. Grimes 	sp->se_started = time((time_t *) 0);
12928fae3551SRodney W. Grimes 	add_session(sp);
12938fae3551SRodney W. Grimes }
12948fae3551SRodney W. Grimes 
12958fae3551SRodney W. Grimes /*
12968fae3551SRodney W. Grimes  * Catch a signal and request a state transition.
12978fae3551SRodney W. Grimes  */
129845cfb1dcSXin LI static void
129973bf18edSWarner Losh transition_handler(int sig)
13008fae3551SRodney W. Grimes {
13018fae3551SRodney W. Grimes 
13028fae3551SRodney W. Grimes 	switch (sig) {
13038fae3551SRodney W. Grimes 	case SIGHUP:
13048fae3551SRodney W. Grimes 		requested_transition = clean_ttys;
13058fae3551SRodney W. Grimes 		break;
1306a0a549c7SRuslan Ermilov 	case SIGUSR2:
1307a0a549c7SRuslan Ermilov 		howto = RB_POWEROFF;
1308a0a549c7SRuslan Ermilov 	case SIGUSR1:
1309a0a549c7SRuslan Ermilov 		howto |= RB_HALT;
1310e460cfd3SNate Williams 	case SIGINT:
1311db8ad19dSJordan K. Hubbard 		Reboot = TRUE;
13128fae3551SRodney W. Grimes 	case SIGTERM:
13138fae3551SRodney W. Grimes 		requested_transition = death;
13148fae3551SRodney W. Grimes 		break;
13158fae3551SRodney W. Grimes 	case SIGTSTP:
13168fae3551SRodney W. Grimes 		requested_transition = catatonia;
13178fae3551SRodney W. Grimes 		break;
13188fae3551SRodney W. Grimes 	default:
13198fae3551SRodney W. Grimes 		requested_transition = 0;
13208fae3551SRodney W. Grimes 		break;
13218fae3551SRodney W. Grimes 	}
13228fae3551SRodney W. Grimes }
13238fae3551SRodney W. Grimes 
13248fae3551SRodney W. Grimes /*
13258fae3551SRodney W. Grimes  * Take the system multiuser.
13268fae3551SRodney W. Grimes  */
132745cfb1dcSXin LI static state_func_t
132873bf18edSWarner Losh multi_user(void)
13298fae3551SRodney W. Grimes {
13308fae3551SRodney W. Grimes 	pid_t pid;
13313d438ad6SDavid E. O'Brien 	session_t *sp;
13328fae3551SRodney W. Grimes 
13338fae3551SRodney W. Grimes 	requested_transition = 0;
13348fae3551SRodney W. Grimes 
13358fae3551SRodney W. Grimes 	/*
13368fae3551SRodney W. Grimes 	 * If the administrator has not set the security level to -1
13378fae3551SRodney W. Grimes 	 * to indicate that the kernel should not run multiuser in secure
13388fae3551SRodney W. Grimes 	 * mode, and the run script has not set a higher level of security
13398fae3551SRodney W. Grimes 	 * than level 1, then put the kernel into secure mode.
13408fae3551SRodney W. Grimes 	 */
13418fae3551SRodney W. Grimes 	if (getsecuritylevel() == 0)
13428fae3551SRodney W. Grimes 		setsecuritylevel(1);
13438fae3551SRodney W. Grimes 
13448fae3551SRodney W. Grimes 	for (sp = sessions; sp; sp = sp->se_next) {
13458fae3551SRodney W. Grimes 		if (sp->se_process)
13468fae3551SRodney W. Grimes 			continue;
13478fae3551SRodney W. Grimes 		if ((pid = start_getty(sp)) == -1) {
13488fae3551SRodney W. Grimes 			/* serious trouble */
13498fae3551SRodney W. Grimes 			requested_transition = clean_ttys;
13508fae3551SRodney W. Grimes 			break;
13518fae3551SRodney W. Grimes 		}
13528fae3551SRodney W. Grimes 		sp->se_process = pid;
13538fae3551SRodney W. Grimes 		sp->se_started = time((time_t *) 0);
13548fae3551SRodney W. Grimes 		add_session(sp);
13558fae3551SRodney W. Grimes 	}
13568fae3551SRodney W. Grimes 
13578fae3551SRodney W. Grimes 	while (!requested_transition)
13588fae3551SRodney W. Grimes 		if ((pid = waitpid(-1, (int *) 0, 0)) != -1)
13598fae3551SRodney W. Grimes 			collect_child(pid);
13608fae3551SRodney W. Grimes 
13618fae3551SRodney W. Grimes 	return (state_func_t) requested_transition;
13628fae3551SRodney W. Grimes }
13638fae3551SRodney W. Grimes 
13648fae3551SRodney W. Grimes /*
1365b0b670eeSAlfred Perlstein  * This is an (n*2)+(n^2) algorithm.  We hope it isn't run often...
13668fae3551SRodney W. Grimes  */
136745cfb1dcSXin LI static state_func_t
136873bf18edSWarner Losh clean_ttys(void)
13698fae3551SRodney W. Grimes {
13703d438ad6SDavid E. O'Brien 	session_t *sp, *sprev;
13713d438ad6SDavid E. O'Brien 	struct ttyent *typ;
13723d438ad6SDavid E. O'Brien 	int session_index = 0;
13733d438ad6SDavid E. O'Brien 	int devlen;
1374b5df27e2SAndrey A. Chernov 	char *old_getty, *old_window, *old_type;
13758fae3551SRodney W. Grimes 
1376b0b670eeSAlfred Perlstein 	/*
1377b0b670eeSAlfred Perlstein 	 * mark all sessions for death, (!SE_PRESENT)
1378b0b670eeSAlfred Perlstein 	 * as we find or create new ones they'll be marked as keepers,
1379b0b670eeSAlfred Perlstein 	 * we'll later nuke all the ones not found in /etc/ttys
1380b0b670eeSAlfred Perlstein 	 */
1381b0b670eeSAlfred Perlstein 	for (sp = sessions; sp != NULL; sp = sp->se_next)
1382b0b670eeSAlfred Perlstein 		sp->se_flags &= ~SE_PRESENT;
1383b0b670eeSAlfred Perlstein 
13848fae3551SRodney W. Grimes 	devlen = sizeof(_PATH_DEV) - 1;
13858889c700SDavid Nugent 	while ((typ = getttyent()) != NULL) {
13868fae3551SRodney W. Grimes 		++session_index;
13878fae3551SRodney W. Grimes 
13888fae3551SRodney W. Grimes 		for (sprev = 0, sp = sessions; sp; sprev = sp, sp = sp->se_next)
13898fae3551SRodney W. Grimes 			if (strcmp(typ->ty_name, sp->se_device + devlen) == 0)
13908fae3551SRodney W. Grimes 				break;
13918fae3551SRodney W. Grimes 
13928fae3551SRodney W. Grimes 		if (sp) {
1393b0b670eeSAlfred Perlstein 			/* we want this one to live */
1394b0b670eeSAlfred Perlstein 			sp->se_flags |= SE_PRESENT;
13958fae3551SRodney W. Grimes 			if (sp->se_index != session_index) {
13968fae3551SRodney W. Grimes 				warning("port %s changed utmp index from %d to %d",
13978fae3551SRodney W. Grimes 				       sp->se_device, sp->se_index,
13988fae3551SRodney W. Grimes 				       session_index);
13998fae3551SRodney W. Grimes 				sp->se_index = session_index;
14008fae3551SRodney W. Grimes 			}
14018fae3551SRodney W. Grimes 			if ((typ->ty_status & TTY_ON) == 0 ||
14028fae3551SRodney W. Grimes 			    typ->ty_getty == 0) {
14038fae3551SRodney W. Grimes 				sp->se_flags |= SE_SHUTDOWN;
14048fae3551SRodney W. Grimes 				kill(sp->se_process, SIGHUP);
14058fae3551SRodney W. Grimes 				continue;
14068fae3551SRodney W. Grimes 			}
14078fae3551SRodney W. Grimes 			sp->se_flags &= ~SE_SHUTDOWN;
1408b5df27e2SAndrey A. Chernov 			old_getty = sp->se_getty ? strdup(sp->se_getty) : 0;
1409b5df27e2SAndrey A. Chernov 			old_window = sp->se_window ? strdup(sp->se_window) : 0;
1410b5df27e2SAndrey A. Chernov 			old_type = sp->se_type ? strdup(sp->se_type) : 0;
14118fae3551SRodney W. Grimes 			if (setupargv(sp, typ) == 0) {
14128fae3551SRodney W. Grimes 				warning("can't parse getty for port %s",
14138fae3551SRodney W. Grimes 					sp->se_device);
14148fae3551SRodney W. Grimes 				sp->se_flags |= SE_SHUTDOWN;
14158fae3551SRodney W. Grimes 				kill(sp->se_process, SIGHUP);
14168fae3551SRodney W. Grimes 			}
1417b5df27e2SAndrey A. Chernov 			else if (   !old_getty
14188889c700SDavid Nugent 				 || (!old_type && sp->se_type)
14198889c700SDavid Nugent 				 || (old_type && !sp->se_type)
14208889c700SDavid Nugent 				 || (!old_window && sp->se_window)
14218889c700SDavid Nugent 				 || (old_window && !sp->se_window)
14228889c700SDavid Nugent 				 || (strcmp(old_getty, sp->se_getty) != 0)
14238889c700SDavid Nugent 				 || (old_window && strcmp(old_window, sp->se_window) != 0)
14248889c700SDavid Nugent 				 || (old_type && strcmp(old_type, sp->se_type) != 0)
1425b5df27e2SAndrey A. Chernov 				) {
1426b5df27e2SAndrey A. Chernov 				/* Don't set SE_SHUTDOWN here */
1427b5df27e2SAndrey A. Chernov 				sp->se_nspace = 0;
1428b5df27e2SAndrey A. Chernov 				sp->se_started = 0;
1429b5df27e2SAndrey A. Chernov 				kill(sp->se_process, SIGHUP);
1430b5df27e2SAndrey A. Chernov 			}
1431b5df27e2SAndrey A. Chernov 			if (old_getty)
1432b5df27e2SAndrey A. Chernov 				free(old_getty);
14332d887af5SMike Heffner 			if (old_window)
1434b5df27e2SAndrey A. Chernov 				free(old_window);
1435b5df27e2SAndrey A. Chernov 			if (old_type)
1436b5df27e2SAndrey A. Chernov 				free(old_type);
14378fae3551SRodney W. Grimes 			continue;
14388fae3551SRodney W. Grimes 		}
14398fae3551SRodney W. Grimes 
14408fae3551SRodney W. Grimes 		new_session(sprev, session_index, typ);
14418fae3551SRodney W. Grimes 	}
14428fae3551SRodney W. Grimes 
14438fae3551SRodney W. Grimes 	endttyent();
14448fae3551SRodney W. Grimes 
1445b0b670eeSAlfred Perlstein 	/*
1446b0b670eeSAlfred Perlstein 	 * sweep through and kill all deleted sessions
1447b0b670eeSAlfred Perlstein 	 * ones who's /etc/ttys line was deleted (SE_PRESENT unset)
1448b0b670eeSAlfred Perlstein 	 */
1449b0b670eeSAlfred Perlstein 	for (sp = sessions; sp != NULL; sp = sp->se_next) {
1450b0b670eeSAlfred Perlstein 		if ((sp->se_flags & SE_PRESENT) == 0) {
1451b0b670eeSAlfred Perlstein 			sp->se_flags |= SE_SHUTDOWN;
1452b0b670eeSAlfred Perlstein 			kill(sp->se_process, SIGHUP);
1453b0b670eeSAlfred Perlstein 		}
1454b0b670eeSAlfred Perlstein 	}
1455b0b670eeSAlfred Perlstein 
14568fae3551SRodney W. Grimes 	return (state_func_t) multi_user;
14578fae3551SRodney W. Grimes }
14588fae3551SRodney W. Grimes 
14598fae3551SRodney W. Grimes /*
14608fae3551SRodney W. Grimes  * Block further logins.
14618fae3551SRodney W. Grimes  */
146245cfb1dcSXin LI static state_func_t
146373bf18edSWarner Losh catatonia(void)
14648fae3551SRodney W. Grimes {
14653d438ad6SDavid E. O'Brien 	session_t *sp;
14668fae3551SRodney W. Grimes 
14678fae3551SRodney W. Grimes 	for (sp = sessions; sp; sp = sp->se_next)
14688fae3551SRodney W. Grimes 		sp->se_flags |= SE_SHUTDOWN;
14698fae3551SRodney W. Grimes 
14708fae3551SRodney W. Grimes 	return (state_func_t) multi_user;
14718fae3551SRodney W. Grimes }
14728fae3551SRodney W. Grimes 
14738fae3551SRodney W. Grimes /*
14748fae3551SRodney W. Grimes  * Note SIGALRM.
14758fae3551SRodney W. Grimes  */
147645cfb1dcSXin LI static void
147773bf18edSWarner Losh alrm_handler(int sig)
14788fae3551SRodney W. Grimes {
1479091abe40SDavid E. O'Brien 
14808889c700SDavid Nugent 	(void)sig;
14818fae3551SRodney W. Grimes 	clang = 1;
14828fae3551SRodney W. Grimes }
14838fae3551SRodney W. Grimes 
14848fae3551SRodney W. Grimes /*
14858fae3551SRodney W. Grimes  * Bring the system down to single user.
14868fae3551SRodney W. Grimes  */
148745cfb1dcSXin LI static state_func_t
148873bf18edSWarner Losh death(void)
14898fae3551SRodney W. Grimes {
14903d438ad6SDavid E. O'Brien 	session_t *sp;
14913d438ad6SDavid E. O'Brien 	int i;
14928fae3551SRodney W. Grimes 	pid_t pid;
1493c3d7c52eSAndrey A. Chernov 	static const int death_sigs[2] = { SIGTERM, SIGKILL };
14948fae3551SRodney W. Grimes 
14953f31fb33SAndrey A. Chernov 	/* NB: should send a message to the session logger to avoid blocking. */
14963f31fb33SAndrey A. Chernov 	logwtmp("~", "shutdown", "");
14973f31fb33SAndrey A. Chernov 
14984ae35b5dSEd Schouten 	/*
14994ae35b5dSEd Schouten 	 * Also revoke the TTY here.  Because runshutdown() may reopen
15004ae35b5dSEd Schouten 	 * the TTY whose getty we're killing here, there is no guarantee
15014ae35b5dSEd Schouten 	 * runshutdown() will perform the initial open() call, causing
15024ae35b5dSEd Schouten 	 * the terminal attributes to be misconfigured.
15034ae35b5dSEd Schouten 	 */
15041054bb1eSAndrey A. Chernov 	for (sp = sessions; sp; sp = sp->se_next) {
15058fae3551SRodney W. Grimes 		sp->se_flags |= SE_SHUTDOWN;
150625cf4a54SAndrey A. Chernov 		kill(sp->se_process, SIGHUP);
15074ae35b5dSEd Schouten 		revoke(sp->se_device);
15081054bb1eSAndrey A. Chernov 	}
15098fae3551SRodney W. Grimes 
15108889c700SDavid Nugent 	/* Try to run the rc.shutdown script within a period of time */
1511091abe40SDavid E. O'Brien 	runshutdown();
15128889c700SDavid Nugent 
1513c3d7c52eSAndrey A. Chernov 	for (i = 0; i < 2; ++i) {
15148fae3551SRodney W. Grimes 		if (kill(-1, death_sigs[i]) == -1 && errno == ESRCH)
15158fae3551SRodney W. Grimes 			return (state_func_t) single_user;
15168fae3551SRodney W. Grimes 
15178fae3551SRodney W. Grimes 		clang = 0;
15188fae3551SRodney W. Grimes 		alarm(DEATH_WATCH);
15198fae3551SRodney W. Grimes 		do
15208fae3551SRodney W. Grimes 			if ((pid = waitpid(-1, (int *)0, 0)) != -1)
15218fae3551SRodney W. Grimes 				collect_child(pid);
15228fae3551SRodney W. Grimes 		while (clang == 0 && errno != ECHILD);
15238fae3551SRodney W. Grimes 
15248fae3551SRodney W. Grimes 		if (errno == ECHILD)
15258fae3551SRodney W. Grimes 			return (state_func_t) single_user;
15268fae3551SRodney W. Grimes 	}
15278fae3551SRodney W. Grimes 
15288fae3551SRodney W. Grimes 	warning("some processes would not die; ps axl advised");
15298fae3551SRodney W. Grimes 
15308fae3551SRodney W. Grimes 	return (state_func_t) single_user;
15318fae3551SRodney W. Grimes }
15328889c700SDavid Nugent 
15338889c700SDavid Nugent /*
15348889c700SDavid Nugent  * Run the system shutdown script.
15358889c700SDavid Nugent  *
15368889c700SDavid Nugent  * Exit codes:      XXX I should document more
15378889c700SDavid Nugent  * -2       shutdown script terminated abnormally
15388889c700SDavid Nugent  * -1       fatal error - can't run script
15398889c700SDavid Nugent  * 0        good.
15408889c700SDavid Nugent  * >0       some error (exit code)
15418889c700SDavid Nugent  */
154245cfb1dcSXin LI static int
154373bf18edSWarner Losh runshutdown(void)
15448889c700SDavid Nugent {
15458889c700SDavid Nugent 	pid_t pid, wpid;
15468889c700SDavid Nugent 	int status;
15478889c700SDavid Nugent 	int shutdowntimeout;
15488889c700SDavid Nugent 	size_t len;
1549a69497d7SMatthew Dillon 	char *argv[4];
15501a7bec91SWarner Losh 	const char *shell;
15518889c700SDavid Nugent 	struct sigaction sa;
155286bf62dcSDavid Nugent 	struct stat sb;
155386bf62dcSDavid Nugent 
155486bf62dcSDavid Nugent 	/*
155586bf62dcSDavid Nugent 	 * rc.shutdown is optional, so to prevent any unnecessary
155686bf62dcSDavid Nugent 	 * complaints from the shell we simply don't run it if the
155786bf62dcSDavid Nugent 	 * file does not exist. If the stat() here fails for other
155886bf62dcSDavid Nugent 	 * reasons, we'll let the shell complain.
155986bf62dcSDavid Nugent 	 */
156086bf62dcSDavid Nugent 	if (stat(_PATH_RUNDOWN, &sb) == -1 && errno == ENOENT)
156186bf62dcSDavid Nugent 		return 0;
15628889c700SDavid Nugent 
15631a7bec91SWarner Losh 	shell = get_shell();
15641a7bec91SWarner Losh 
15658889c700SDavid Nugent 	if ((pid = fork()) == 0) {
15668889c700SDavid Nugent 		int	fd;
15678889c700SDavid Nugent 
156825cf4a54SAndrey A. Chernov 		/* Assume that init already grab console as ctty before */
156925cf4a54SAndrey A. Chernov 
15708889c700SDavid Nugent 		sigemptyset(&sa.sa_mask);
15718889c700SDavid Nugent 		sa.sa_flags = 0;
15728889c700SDavid Nugent 		sa.sa_handler = SIG_IGN;
1573091abe40SDavid E. O'Brien 		sigaction(SIGTSTP, &sa, (struct sigaction *)0);
1574091abe40SDavid E. O'Brien 		sigaction(SIGHUP, &sa, (struct sigaction *)0);
15758889c700SDavid Nugent 
15764ae35b5dSEd Schouten 		revoke(_PATH_CONSOLE);
15778889c700SDavid Nugent 		if ((fd = open(_PATH_CONSOLE, O_RDWR)) == -1)
15788889c700SDavid Nugent 			warning("can't open %s: %m", _PATH_CONSOLE);
15798889c700SDavid Nugent 		else {
1580091abe40SDavid E. O'Brien 			dup2(fd, 0);
1581091abe40SDavid E. O'Brien 			dup2(fd, 1);
1582091abe40SDavid E. O'Brien 			dup2(fd, 2);
158325cf4a54SAndrey A. Chernov 			if (fd > 2)
158425cf4a54SAndrey A. Chernov 				close(fd);
15858889c700SDavid Nugent 		}
15868889c700SDavid Nugent 
15878889c700SDavid Nugent 		/*
15888889c700SDavid Nugent 		 * Run the shutdown script.
15898889c700SDavid Nugent 		 */
1590ab03e6d5SXin LI 
1591ab03e6d5SXin LI 		char _sh[]	= "sh";
1592ab03e6d5SXin LI 		char _reboot[]	= "reboot";
1593ab03e6d5SXin LI 		char _single[]	= "single";
1594ab03e6d5SXin LI 		char _path_rundown[] = _PATH_RUNDOWN;
1595ab03e6d5SXin LI 
1596ab03e6d5SXin LI 		argv[0] = _sh;
1597ab03e6d5SXin LI 		argv[1] = _path_rundown;
1598ab03e6d5SXin LI 		argv[2] = Reboot ? _reboot : _single;
1599a69497d7SMatthew Dillon 		argv[3] = 0;
16008889c700SDavid Nugent 
16018889c700SDavid Nugent 		sigprocmask(SIG_SETMASK, &sa.sa_mask, (sigset_t *) 0);
16028889c700SDavid Nugent 
160325cf4a54SAndrey A. Chernov #ifdef LOGIN_CAP
160425cf4a54SAndrey A. Chernov 		setprocresources(RESOURCE_RC);
160525cf4a54SAndrey A. Chernov #endif
16061a7bec91SWarner Losh 		execv(shell, argv);
16071a7bec91SWarner Losh 		warning("can't exec %s for %s: %m", shell, _PATH_RUNDOWN);
16088889c700SDavid Nugent 		_exit(1);	/* force single user mode */
16098889c700SDavid Nugent 	}
16108889c700SDavid Nugent 
16118889c700SDavid Nugent 	if (pid == -1) {
16121a7bec91SWarner Losh 		emergency("can't fork for %s on %s: %m", shell, _PATH_RUNDOWN);
16138889c700SDavid Nugent 		while (waitpid(-1, (int *) 0, WNOHANG) > 0)
16148889c700SDavid Nugent 			continue;
16158889c700SDavid Nugent 		sleep(STALL_TIMEOUT);
16168889c700SDavid Nugent 		return -1;
16178889c700SDavid Nugent 	}
16188889c700SDavid Nugent 
16198889c700SDavid Nugent 	len = sizeof(shutdowntimeout);
1620091abe40SDavid E. O'Brien 	if (sysctlbyname("kern.init_shutdown_timeout", &shutdowntimeout, &len,
1621091abe40SDavid E. O'Brien 	    NULL, 0) == -1 || shutdowntimeout < 2)
16228889c700SDavid Nugent 		shutdowntimeout = DEATH_SCRIPT;
16238889c700SDavid Nugent 	alarm(shutdowntimeout);
16248889c700SDavid Nugent 	clang = 0;
16258889c700SDavid Nugent 	/*
16268889c700SDavid Nugent 	 * Copied from single_user().  This is a bit paranoid.
16278889c700SDavid Nugent 	 * Use the same ALRM handler.
16288889c700SDavid Nugent 	 */
16298889c700SDavid Nugent 	do {
16308889c700SDavid Nugent 		if ((wpid = waitpid(-1, &status, WUNTRACED)) != -1)
16318889c700SDavid Nugent 			collect_child(wpid);
16328889c700SDavid Nugent 		if (clang == 1) {
16338889c700SDavid Nugent 			/* we were waiting for the sub-shell */
16348889c700SDavid Nugent 			kill(wpid, SIGTERM);
16351a7bec91SWarner Losh 			warning("timeout expired for %s on %s: %m; going to "
16361a7bec91SWarner Losh 			    "single user mode", shell, _PATH_RUNDOWN);
16378889c700SDavid Nugent 			return -1;
16388889c700SDavid Nugent 		}
16398889c700SDavid Nugent 		if (wpid == -1) {
16408889c700SDavid Nugent 			if (errno == EINTR)
16418889c700SDavid Nugent 				continue;
16421a7bec91SWarner Losh 			warning("wait for %s on %s failed: %m; going to "
16431a7bec91SWarner Losh 			    "single user mode", shell, _PATH_RUNDOWN);
16448889c700SDavid Nugent 			return -1;
16458889c700SDavid Nugent 		}
16468889c700SDavid Nugent 		if (wpid == pid && WIFSTOPPED(status)) {
16478889c700SDavid Nugent 			warning("init: %s on %s stopped, restarting\n",
16481a7bec91SWarner Losh 				shell, _PATH_RUNDOWN);
16498889c700SDavid Nugent 			kill(pid, SIGCONT);
16508889c700SDavid Nugent 			wpid = -1;
16518889c700SDavid Nugent 		}
16528889c700SDavid Nugent 	} while (wpid != pid && !clang);
16538889c700SDavid Nugent 
16548889c700SDavid Nugent 	/* Turn off the alarm */
16558889c700SDavid Nugent 	alarm(0);
16568889c700SDavid Nugent 
16578889c700SDavid Nugent 	if (WIFSIGNALED(status) && WTERMSIG(status) == SIGTERM &&
16588889c700SDavid Nugent 	    requested_transition == catatonia) {
16598889c700SDavid Nugent 		/*
16608889c700SDavid Nugent 		 * /etc/rc.shutdown executed /sbin/reboot;
16618889c700SDavid Nugent 		 * wait for the end quietly
16628889c700SDavid Nugent 		 */
16638889c700SDavid Nugent 		sigset_t s;
16648889c700SDavid Nugent 
16658889c700SDavid Nugent 		sigfillset(&s);
16668889c700SDavid Nugent 		for (;;)
16678889c700SDavid Nugent 			sigsuspend(&s);
16688889c700SDavid Nugent 	}
16698889c700SDavid Nugent 
16708889c700SDavid Nugent 	if (!WIFEXITED(status)) {
16711a7bec91SWarner Losh 		warning("%s on %s terminated abnormally, going to "
16721a7bec91SWarner Losh 		    "single user mode", shell, _PATH_RUNDOWN);
16738889c700SDavid Nugent 		return -2;
16748889c700SDavid Nugent 	}
16758889c700SDavid Nugent 
16768889c700SDavid Nugent 	if ((status = WEXITSTATUS(status)) != 0)
16778889c700SDavid Nugent 		warning("%s returned status %d", _PATH_RUNDOWN, status);
16788889c700SDavid Nugent 
16798889c700SDavid Nugent 	return status;
16808889c700SDavid Nugent }
16818889c700SDavid Nugent 
1682ab03e6d5SXin LI static char *
168381ab7fb2SAndrey A. Chernov strk(char *p)
168481ab7fb2SAndrey A. Chernov {
168581ab7fb2SAndrey A. Chernov 	static char *t;
168681ab7fb2SAndrey A. Chernov 	char *q;
168781ab7fb2SAndrey A. Chernov 	int c;
168881ab7fb2SAndrey A. Chernov 
168981ab7fb2SAndrey A. Chernov 	if (p)
169081ab7fb2SAndrey A. Chernov 		t = p;
169181ab7fb2SAndrey A. Chernov 	if (!t)
169281ab7fb2SAndrey A. Chernov 		return 0;
169381ab7fb2SAndrey A. Chernov 
169481ab7fb2SAndrey A. Chernov 	c = *t;
169581ab7fb2SAndrey A. Chernov 	while (c == ' ' || c == '\t' )
169681ab7fb2SAndrey A. Chernov 		c = *++t;
169781ab7fb2SAndrey A. Chernov 	if (!c) {
169881ab7fb2SAndrey A. Chernov 		t = 0;
169981ab7fb2SAndrey A. Chernov 		return 0;
170081ab7fb2SAndrey A. Chernov 	}
170181ab7fb2SAndrey A. Chernov 	q = t;
170281ab7fb2SAndrey A. Chernov 	if (c == '\'') {
170381ab7fb2SAndrey A. Chernov 		c = *++t;
170481ab7fb2SAndrey A. Chernov 		q = t;
170581ab7fb2SAndrey A. Chernov 		while (c && c != '\'')
170681ab7fb2SAndrey A. Chernov 			c = *++t;
170781ab7fb2SAndrey A. Chernov 		if (!c)  /* unterminated string */
170881ab7fb2SAndrey A. Chernov 			q = t = 0;
170981ab7fb2SAndrey A. Chernov 		else
171081ab7fb2SAndrey A. Chernov 			*t++ = 0;
171181ab7fb2SAndrey A. Chernov 	} else {
171281ab7fb2SAndrey A. Chernov 		while (c && c != ' ' && c != '\t' )
171381ab7fb2SAndrey A. Chernov 			c = *++t;
171481ab7fb2SAndrey A. Chernov 		*t++ = 0;
171581ab7fb2SAndrey A. Chernov 		if (!c)
171681ab7fb2SAndrey A. Chernov 			t = 0;
171781ab7fb2SAndrey A. Chernov 	}
171881ab7fb2SAndrey A. Chernov 	return q;
171981ab7fb2SAndrey A. Chernov }
17201ef60eb1SDavid Nugent 
17211ef60eb1SDavid Nugent #ifdef LOGIN_CAP
172245cfb1dcSXin LI static void
172373bf18edSWarner Losh setprocresources(const char *cname)
17241ef60eb1SDavid Nugent {
1725e82d5545SDavid Nugent 	login_cap_t *lc;
1726a2ee73bcSAndrey A. Chernov 	if ((lc = login_getclassbyname(cname, NULL)) != NULL) {
1727091abe40SDavid E. O'Brien 		setusercontext(lc, (struct passwd*)NULL, 0,
1728091abe40SDavid E. O'Brien 		    LOGIN_SETPRIORITY | LOGIN_SETRESOURCES);
17291ef60eb1SDavid Nugent 		login_close(lc);
17301ef60eb1SDavid Nugent 	}
17311ef60eb1SDavid Nugent }
17321ef60eb1SDavid Nugent #endif
1733