355 lines
9.8 KiB
C
355 lines
9.8 KiB
C
/*
|
|
* Copyright (c) 2023-2023 Huawei Device Co., Ltd. All rights reserved.
|
|
*
|
|
* Redistribution and use in source and binary forms, with or without modification,
|
|
* are permitted provided that the following conditions are met:
|
|
*
|
|
* 1. Redistributions of source code must retain the above copyright notice, this list of
|
|
* conditions and the following disclaimer.
|
|
*
|
|
* 2. Redistributions in binary form must reproduce the above copyright notice, this list
|
|
* of conditions and the following disclaimer in the documentation and/or other materials
|
|
* provided with the distribution.
|
|
*
|
|
* 3. Neither the name of the copyright holder nor the names of its contributors may be used
|
|
* to endorse or promote products derived from this software without specific prior written
|
|
* permission.
|
|
*
|
|
* THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
|
|
* "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
|
|
* THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
|
|
* PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR
|
|
* CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
|
|
* EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
|
|
* PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS;
|
|
* OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
|
* WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR
|
|
* OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF
|
|
* ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
|
*/
|
|
#include "los_container_pri.h"
|
|
#include "los_process_pri.h"
|
|
#ifdef LOSCFG_KERNEL_CONTAINER
|
|
|
|
STATIC Container g_rootContainer;
|
|
STATIC Atomic g_containerCount = 0xF0000000U;
|
|
|
|
UINT32 OsAllocContainerID(VOID)
|
|
{
|
|
return LOS_AtomicIncRet(&g_containerCount);
|
|
}
|
|
|
|
VOID OsContainerInitSystemProcess(LosProcessCB *processCB)
|
|
{
|
|
processCB->container = &g_rootContainer;
|
|
LOS_AtomicInc(&processCB->container->rc);
|
|
#ifdef LOSCFG_PID_CONTAINER
|
|
(VOID)OsAllocSpecifiedVpidUnsafe(processCB->processID, processCB, NULL);
|
|
#endif
|
|
return;
|
|
}
|
|
|
|
VOID OsInitRootContainer(VOID)
|
|
{
|
|
#ifdef LOSCFG_PID_CONTAINER
|
|
(VOID)OsInitRootPidContainer(&g_rootContainer.pidContainer);
|
|
g_rootContainer.pidForChildContainer = g_rootContainer.pidContainer;
|
|
#endif
|
|
#ifdef LOSCFG_UTS_CONTAINER
|
|
(VOID)OsInitRootUtsContainer(&g_rootContainer.utsContainer);
|
|
#endif
|
|
#ifdef LOSCFG_MNT_CONTAINER
|
|
(VOID)OsInitRootMntContainer(&g_rootContainer.mntContainer);
|
|
#endif
|
|
#ifdef LOSCFG_IPC_CONTAINER
|
|
(VOID)OsInitRootIpcContainer(&g_rootContainer.ipcContainer);
|
|
#endif
|
|
#ifdef LOSCFG_TIME_CONTAINER
|
|
(VOID)OsInitRootTimeContainer(&g_rootContainer.timeContainer);
|
|
g_rootContainer.timeForChildContainer = g_rootContainer.timeContainer;
|
|
#endif
|
|
return;
|
|
}
|
|
|
|
STATIC INLINE Container *CreateContainer(VOID)
|
|
{
|
|
Container *container = (Container *)LOS_MemAlloc(m_aucSysMem1, sizeof(Container));
|
|
if (container == NULL) {
|
|
return NULL;
|
|
}
|
|
|
|
(VOID)memset_s(container, sizeof(Container), 0, sizeof(Container));
|
|
|
|
LOS_AtomicInc(&container->rc);
|
|
return container;
|
|
}
|
|
|
|
STATIC UINT32 CopyContainers(UINTPTR flags, LosProcessCB *child, LosProcessCB *parent, UINT32 *processID)
|
|
{
|
|
UINT32 ret = LOS_OK;
|
|
/* Pid container initialization must precede other container initialization. */
|
|
#ifdef LOSCFG_PID_CONTAINER
|
|
ret = OsCopyPidContainer(flags, child, parent, processID);
|
|
if (ret != LOS_OK) {
|
|
return ret;
|
|
}
|
|
#endif
|
|
#ifdef LOSCFG_UTS_CONTAINER
|
|
ret = OsCopyUtsContainer(flags, child, parent);
|
|
if (ret != LOS_OK) {
|
|
return ret;
|
|
}
|
|
#endif
|
|
#ifdef LOSCFG_MNT_CONTAINER
|
|
ret = OsCopyMntContainer(flags, child, parent);
|
|
if (ret != LOS_OK) {
|
|
return ret;
|
|
}
|
|
#endif
|
|
#ifdef LOSCFG_IPC_CONTAINER
|
|
ret = OsCopyIpcContainer(flags, child, parent);
|
|
if (ret != LOS_OK) {
|
|
return ret;
|
|
}
|
|
#endif
|
|
#ifdef LOSCFG_TIME_CONTAINER
|
|
ret = OsCopyTimeContainer(flags, child, parent);
|
|
if (ret != LOS_OK) {
|
|
return ret;
|
|
}
|
|
#endif
|
|
return ret;
|
|
}
|
|
|
|
/*
|
|
* called from clone. This now handles copy for Container and all
|
|
* namespaces therein.
|
|
*/
|
|
UINT32 OsCopyContainers(UINTPTR flags, LosProcessCB *child, LosProcessCB *parent, UINT32 *processID)
|
|
{
|
|
UINT32 intSave;
|
|
|
|
#ifdef LOSCFG_TIME_CONTAINER
|
|
flags &= ~CLONE_NEWTIME;
|
|
#endif
|
|
|
|
if (!(flags & (CLONE_NEWNS | CLONE_NEWUTS | CLONE_NEWIPC | CLONE_NEWPID | CLONE_NEWNET | CLONE_NEWTIME))) {
|
|
#ifdef LOSCFG_PID_CONTAINER
|
|
if (parent->container->pidContainer != parent->container->pidForChildContainer) {
|
|
goto CREATE_CONTAINER;
|
|
}
|
|
#endif
|
|
#ifdef LOSCFG_TIME_CONTAINER
|
|
if (parent->container->timeContainer != parent->container->timeForChildContainer) {
|
|
goto CREATE_CONTAINER;
|
|
}
|
|
#endif
|
|
SCHEDULER_LOCK(intSave);
|
|
child->container = parent->container;
|
|
LOS_AtomicInc(&child->container->rc);
|
|
SCHEDULER_UNLOCK(intSave);
|
|
goto COPY_CONTAINERS;
|
|
}
|
|
|
|
#if defined(LOSCFG_PID_CONTAINER) || defined(LOSCFG_TIME_CONTAINER)
|
|
CREATE_CONTAINER:
|
|
#endif
|
|
child->container = CreateContainer();
|
|
if (child->container == NULL) {
|
|
return ENOMEM;
|
|
}
|
|
|
|
COPY_CONTAINERS:
|
|
return CopyContainers(flags, child, parent, processID);
|
|
}
|
|
|
|
VOID OsContainerFree(LosProcessCB *processCB)
|
|
{
|
|
LOS_AtomicDec(&processCB->container->rc);
|
|
if (LOS_AtomicRead(&processCB->container->rc) == 0) {
|
|
(VOID)LOS_MemFree(m_aucSysMem1, processCB->container);
|
|
processCB->container = NULL;
|
|
}
|
|
}
|
|
|
|
VOID OsContainersDestroy(LosProcessCB *processCB)
|
|
{
|
|
/* All processes in the container must be destroyed before the container is destroyed. */
|
|
#ifdef LOSCFG_PID_CONTAINER
|
|
if (processCB->processID == OS_USER_ROOT_PROCESS_ID) {
|
|
OsPidContainerDestroyAllProcess(processCB);
|
|
}
|
|
#endif
|
|
|
|
#ifdef LOSCFG_UTS_CONTAINER
|
|
OsUtsContainerDestroy(processCB->container);
|
|
#endif
|
|
|
|
#ifdef LOSCFG_MNT_CONTAINER
|
|
OsMntContainerDestroy(processCB->container);
|
|
#endif
|
|
|
|
#ifdef LOSCFG_IPC_CONTAINER
|
|
OsIpcContainerDestroy(processCB->container);
|
|
#endif
|
|
|
|
#ifdef LOSCFG_TIME_CONTAINER
|
|
OsTimeContainerDestroy(processCB);
|
|
#endif
|
|
|
|
#ifndef LOSCFG_PID_CONTAINER
|
|
UINT32 intSave;
|
|
SCHEDULER_LOCK(intSave);
|
|
OsContainerFree(processCB);
|
|
SCHEDULER_UNLOCK(intSave);
|
|
#endif
|
|
}
|
|
|
|
UINT32 OsGetContainerID(Container *container, ContainerType type)
|
|
{
|
|
if (container == NULL) {
|
|
return OS_INVALID_VALUE;
|
|
}
|
|
|
|
switch (type) {
|
|
#ifdef LOSCFG_PID_CONTAINER
|
|
case PID_CONTAINER:
|
|
return OsGetPidContainerID(container->pidContainer);
|
|
case PID_CHILD_CONTAINER:
|
|
return OsGetPidContainerID(container->pidForChildContainer);
|
|
#endif
|
|
#ifdef LOSCFG_UTS_CONTAINER
|
|
case UTS_CONTAINER:
|
|
return OsGetUtsContainerID(container->utsContainer);
|
|
#endif
|
|
#ifdef LOSCFG_MNT_CONTAINER
|
|
case MNT_CONTAINER:
|
|
return OsGetMntContainerID(container->mntContainer);
|
|
#endif
|
|
#ifdef LOSCFG_IPC_CONTAINER
|
|
case IPC_CONTAINER:
|
|
return OsGetIpcContainerID(container->ipcContainer);
|
|
#endif
|
|
#ifdef LOSCFG_TIME_CONTAINER
|
|
case TIME_CONTAINER:
|
|
return OsGetTimeContainerID(container->timeContainer);
|
|
case TIME_CHILD_CONTAINER:
|
|
return OsGetTimeContainerID(container->timeForChildContainer);
|
|
#endif
|
|
default:
|
|
break;
|
|
}
|
|
return OS_INVALID_VALUE;
|
|
}
|
|
|
|
STATIC VOID UnshareDeInitContainer(UINT32 flags, Container *container)
|
|
{
|
|
UINT32 intSave;
|
|
if (container == NULL) {
|
|
return;
|
|
}
|
|
|
|
#ifdef LOSCFG_PID_CONTAINER
|
|
UnshareDeInitPidContainer(container);
|
|
#endif
|
|
|
|
#ifdef LOSCFG_UTS_CONTAINER
|
|
if ((flags & CLONE_NEWUTS) != 0) {
|
|
OsUtsContainerDestroy(container);
|
|
}
|
|
#endif
|
|
#ifdef LOSCFG_MNT_CONTAINER
|
|
if ((flags & CLONE_NEWNS) != 0) {
|
|
OsMntContainerDestroy(container);
|
|
}
|
|
#endif
|
|
#ifdef LOSCFG_IPC_CONTAINER
|
|
if ((flags & CLONE_NEWIPC) != 0) {
|
|
OsIpcContainerDestroy(container);
|
|
}
|
|
#endif
|
|
|
|
#ifdef LOSCFG_TIME_CONTAINER
|
|
UnshareDeInitTimeContainer(container);
|
|
#endif
|
|
|
|
SCHEDULER_LOCK(intSave);
|
|
LOS_AtomicDec(&container->rc);
|
|
if (LOS_AtomicRead(&container->rc) == 0) {
|
|
(VOID)LOS_MemFree(m_aucSysMem1, container);
|
|
}
|
|
SCHEDULER_UNLOCK(intSave);
|
|
}
|
|
|
|
STATIC UINT32 CreateNewContainers(UINT32 flags, LosProcessCB *curr, Container *newContainer)
|
|
{
|
|
UINT32 ret = LOS_OK;
|
|
#ifdef LOSCFG_PID_CONTAINER
|
|
ret = OsUnsharePidContainer(flags, curr, newContainer);
|
|
if (ret != LOS_OK) {
|
|
return ret;
|
|
}
|
|
#endif
|
|
#ifdef LOSCFG_UTS_CONTAINER
|
|
ret = OsUnshareUtsContainer(flags, curr, newContainer);
|
|
if (ret != LOS_OK) {
|
|
return ret;
|
|
}
|
|
#endif
|
|
#ifdef LOSCFG_MNT_CONTAINER
|
|
ret = OsUnshareMntContainer(flags, curr, newContainer);
|
|
if (ret != LOS_OK) {
|
|
return ret;
|
|
}
|
|
#endif
|
|
#ifdef LOSCFG_IPC_CONTAINER
|
|
ret = OsUnshareIpcContainer(flags, curr, newContainer);
|
|
if (ret != LOS_OK) {
|
|
return ret;
|
|
}
|
|
#endif
|
|
#ifdef LOSCFG_TIME_CONTAINER
|
|
ret = OsUnshareTimeContainer(flags, curr, newContainer);
|
|
if (ret != LOS_OK) {
|
|
return ret;
|
|
}
|
|
#endif
|
|
return ret;
|
|
}
|
|
|
|
INT32 OsUnshare(UINT32 flags)
|
|
{
|
|
UINT32 ret;
|
|
UINT32 intSave;
|
|
LosProcessCB *curr = OsCurrProcessGet();
|
|
Container *oldContainer = curr->container;
|
|
UINT32 unshareFlags = CLONE_NEWPID | CLONE_NEWTIME | CLONE_NEWUTS | CLONE_NEWNS | CLONE_NEWIPC;
|
|
|
|
if (!(flags & unshareFlags) || ((flags & (~unshareFlags)) != 0)) {
|
|
return -EINVAL;
|
|
}
|
|
|
|
Container *newContainer = CreateContainer();
|
|
if (newContainer == NULL) {
|
|
return -ENOMEM;
|
|
}
|
|
|
|
ret = CreateNewContainers(flags, curr, newContainer);
|
|
if (ret != LOS_OK) {
|
|
goto EXIT;
|
|
}
|
|
|
|
SCHEDULER_LOCK(intSave);
|
|
oldContainer = curr->container;
|
|
curr->container = newContainer;
|
|
SCHEDULER_UNLOCK(intSave);
|
|
|
|
UnshareDeInitContainer(flags, oldContainer);
|
|
return LOS_OK;
|
|
|
|
EXIT:
|
|
UnshareDeInitContainer(flags, newContainer);
|
|
return -ret;
|
|
}
|
|
#endif
|