#include <arpa/inet.h>

#include "af-list.h"

#include "alloc-util.h"

#include "bpf-firewall.h"

#include "bpf-foreign.h"

#include "bus-get-properties.h"

#include "cgroup-util.h"

#include "cgroup.h"

#include "core-varlink.h"

#include "dbus-cgroup.h"

#include "dbus-util.h"

#include "errno-util.h"

#include "fd-util.h"

#include "fileio.h"

#include "in-addr-prefix-util.h"

#include "ip-protocol-list.h"

#include "limits-util.h"

#include "parse-util.h"

#include "path-util.h"

#include "percent-util.h"

#include "socket-util.h"

BUS_DEFINE_PROPERTY_GET(bus_property_get_tasks_max, "t", TasksMax, tasks_max_resolve);

static BUS_DEFINE_PROPERTY_GET_ENUM(property_get_cgroup_device_policy, cgroup_device_policy, CGroupDevicePolicy);

static BUS_DEFINE_PROPERTY_GET_ENUM(property_get_managed_oom_mode, managed_oom_mode, ManagedOOMMode);

static BUS_DEFINE_PROPERTY_GET_ENUM(property_get_managed_oom_preference, managed_oom_preference, ManagedOOMPreference);

static int property_get_cgroup_mask(

sd_bus_error *error) {

CGroupMask *mask = userdata;

int r;

assert(bus);

assert(reply);

r = sd_bus_message_open_container(reply, 'a', "s");

if (r < 0)

return r;

for (CGroupController ctrl = 0; ctrl < _CGROUP_CONTROLLER_MAX; ctrl++) {

if ((*mask & CGROUP_CONTROLLER_TO_MASK(ctrl)) == 0)

continue;

r = sd_bus_message_append(reply, "s", cgroup_controller_to_string(ctrl));

if (r < 0)

return r;

}

return sd_bus_message_close_container(reply);

}

static int property_get_delegate_controllers(

sd_bus_error *error) {

CGroupContext *c = userdata;

assert(bus);

assert(reply);

assert(c);

if (!c->delegate)

return sd_bus_message_append(reply, "as", 0);

return property_get_cgroup_mask(bus, path, interface, property, reply, &c->delegate_controllers, error);

}

static int property_get_cpuset(

sd_bus_error *error) {

CPUSet *cpus = userdata;

_cleanup_free_ uint8_t *array = NULL;

size_t allocated;

assert(bus);

assert(reply);

assert(cpus);

(void) cpu_set_to_dbus(cpus, &array, &allocated);

return sd_bus_message_append_array(reply, 'y', array, allocated);

}

static int property_get_io_device_weight(

sd_bus_error *error) {

CGroupContext *c = userdata;

int r;

assert(bus);

assert(reply);

assert(c);

r = sd_bus_message_open_container(reply, 'a', "(st)");

if (r < 0)

return r;

LIST_FOREACH(device_weights, w, c->io_device_weights) {

r = sd_bus_message_append(reply, "(st)", w->path, w->weight);

if (r < 0)

return r;

}

return sd_bus_message_close_container(reply);

}

static int property_get_io_device_limits(

sd_bus_error *error) {

CGroupContext *c = userdata;

int r;

assert(bus);

assert(reply);

assert(c);

r = sd_bus_message_open_container(reply, 'a', "(st)");

if (r < 0)

return r;

LIST_FOREACH(device_limits, l, c->io_device_limits) {

CGroupIOLimitType type;

type = cgroup_io_limit_type_from_string(property);

if (type < 0 || l->limits[type] == cgroup_io_limit_defaults[type])

continue;

r = sd_bus_message_append(reply, "(st)", l->path, l->limits[type]);

if (r < 0)

return r;

}

return sd_bus_message_close_container(reply);

}

static int property_get_io_device_latency(

sd_bus_error *error) {

CGroupContext *c = userdata;

int r;

assert(bus);

assert(reply);

assert(c);

r = sd_bus_message_open_container(reply, 'a', "(st)");

if (r < 0)

return r;

LIST_FOREACH(device_latencies, l, c->io_device_latencies) {

r = sd_bus_message_append(reply, "(st)", l->path, l->target_usec);

if (r < 0)

return r;

}

return sd_bus_message_close_container(reply);

}

static int property_get_blockio_device_weight(

sd_bus_error *error) {

CGroupContext *c = userdata;

int r;

assert(bus);

assert(reply);

assert(c);

r = sd_bus_message_open_container(reply, 'a', "(st)");

if (r < 0)

return r;

LIST_FOREACH(device_weights, w, c->blockio_device_weights) {

r = sd_bus_message_append(reply, "(st)", w->path, w->weight);

if (r < 0)

return r;

}

return sd_bus_message_close_container(reply);

}

static int property_get_blockio_device_bandwidths(

sd_bus_error *error) {

CGroupContext *c = userdata;

int r;

assert(bus);

assert(reply);

assert(c);

r = sd_bus_message_open_container(reply, 'a', "(st)");

if (r < 0)

return r;

LIST_FOREACH(device_bandwidths, b, c->blockio_device_bandwidths) {

uint64_t v;

if (streq(property, "BlockIOReadBandwidth"))

v = b->rbps;

else

v = b->wbps;

if (v == CGROUP_LIMIT_MAX)

continue;

r = sd_bus_message_append(reply, "(st)", b->path, v);

if (r < 0)

return r;

}

return sd_bus_message_close_container(reply);

}

static int property_get_device_allow(

sd_bus_error *error) {

CGroupContext *c = userdata;

int r;

assert(bus);

assert(reply);

assert(c);

r = sd_bus_message_open_container(reply, 'a', "(ss)");

if (r < 0)

return r;

LIST_FOREACH(device_allow, a, c->device_allow) {

unsigned k = 0;

char rwm[4];

if (a->r)

rwm[k++] = 'r';

if (a->w)

rwm[k++] = 'w';

if (a->m)

rwm[k++] = 'm';

rwm[k] = 0;

r = sd_bus_message_append(reply, "(ss)", a->path, rwm);

if (r < 0)

return r;

}

return sd_bus_message_close_container(reply);

}

static int property_get_ip_address_access(

sd_bus_error *error) {

Set **prefixes = userdata;

struct in_addr_prefix *i;

int r;

assert(prefixes);

r = sd_bus_message_open_container(reply, 'a', "(iayu)");

if (r < 0)

return r;

SET_FOREACH(i, *prefixes) {

r = sd_bus_message_open_container(reply, 'r', "iayu");

if (r < 0)

return r;

r = sd_bus_message_append(reply, "i", i->family);

if (r < 0)

return r;

r = sd_bus_message_append_array(reply, 'y', &i->address, FAMILY_ADDRESS_SIZE(i->family));

if (r < 0)

return r;

r = sd_bus_message_append(reply, "u", (uint32_t) i->prefixlen);

if (r < 0)

return r;

r = sd_bus_message_close_container(reply);

if (r < 0)

return r;

}

return sd_bus_message_close_container(reply);

}

static int property_get_bpf_foreign_program(

sd_bus_error *error) {

CGroupContext *c = userdata;

int r;

r = sd_bus_message_open_container(reply, 'a', "(ss)");

if (r < 0)

return r;

LIST_FOREACH(programs, p, c->bpf_foreign_programs) {

const char *attach_type = bpf_cgroup_attach_type_to_string(p->attach_type);

r = sd_bus_message_append(reply, "(ss)", attach_type, p->bpffs_path);

if (r < 0)

return r;

}

return sd_bus_message_close_container(reply);

}

static int property_get_socket_bind(

sd_bus_error *error) {

CGroupSocketBindItem **items = userdata;

int r;

assert(items);

r = sd_bus_message_open_container(reply, 'a', "(iiqq)");

if (r < 0)

return r;

LIST_FOREACH(socket_bind_items, i, *items) {

r = sd_bus_message_append(reply, "(iiqq)", i->address_family, i->ip_protocol, i->nr_ports, i->port_min);

if (r < 0)

return r;

}

return sd_bus_message_close_container(reply);

}

static int property_get_restrict_network_interfaces(

sd_bus_error *error) {

int r;

CGroupContext *c = userdata;

char *iface;

assert(bus);

assert(reply);

assert(c);

r = sd_bus_message_open_container(reply, 'r', "bas");

if (r < 0)

return r;

r = sd_bus_message_append(reply, "b", c->restrict_network_interfaces_is_allow_list);

if (r < 0)

return r;

r = sd_bus_message_open_container(reply, 'a', "s");

if (r < 0)

return r;

SET_FOREACH(iface, c->restrict_network_interfaces) {

r = sd_bus_message_append(reply, "s", iface);

if (r < 0)

return r;

}

r = sd_bus_message_close_container(reply);

if (r < 0)

return r;

return sd_bus_message_close_container(reply);

}

const sd_bus_vtable bus_cgroup_vtable[] = {

SD_BUS_VTABLE_START(0),

SD_BUS_PROPERTY("Delegate", "b", bus_property_get_bool, offsetof(CGroupContext, delegate), 0),

SD_BUS_PROPERTY("DelegateControllers", "as", property_get_delegate_controllers, 0, 0),

SD_BUS_PROPERTY("CPUAccounting", "b", bus_property_get_bool, offsetof(CGroupContext, cpu_accounting), 0),

SD_BUS_PROPERTY("CPUWeight", "t", NULL, offsetof(CGroupContext, cpu_weight), 0),

SD_BUS_PROPERTY("StartupCPUWeight", "t", NULL, offsetof(CGroupContext, startup_cpu_weight), 0),

SD_BUS_PROPERTY("CPUShares", "t", NULL, offsetof(CGroupContext, cpu_shares), 0),

SD_BUS_PROPERTY("StartupCPUShares", "t", NULL, offsetof(CGroupContext, startup_cpu_shares), 0),

SD_BUS_PROPERTY("CPUQuotaPerSecUSec", "t", bus_property_get_usec, offsetof(CGroupContext, cpu_quota_per_sec_usec), 0),

SD_BUS_PROPERTY("CPUQuotaPeriodUSec", "t", bus_property_get_usec, offsetof(CGroupContext, cpu_quota_period_usec), 0),

SD_BUS_PROPERTY("AllowedCPUs", "ay", property_get_cpuset, offsetof(CGroupContext, cpuset_cpus), 0),

SD_BUS_PROPERTY("StartupAllowedCPUs", "ay", property_get_cpuset, offsetof(CGroupContext, startup_cpuset_cpus), 0),

SD_BUS_PROPERTY("AllowedMemoryNodes", "ay", property_get_cpuset, offsetof(CGroupContext, cpuset_mems), 0),

SD_BUS_PROPERTY("StartupAllowedMemoryNodes", "ay", property_get_cpuset, offsetof(CGroupContext, startup_cpuset_mems), 0),

SD_BUS_PROPERTY("IOAccounting", "b", bus_property_get_bool, offsetof(CGroupContext, io_accounting), 0),

SD_BUS_PROPERTY("IOWeight", "t", NULL, offsetof(CGroupContext, io_weight), 0),

SD_BUS_PROPERTY("StartupIOWeight", "t", NULL, offsetof(CGroupContext, startup_io_weight), 0),

SD_BUS_PROPERTY("IODeviceWeight", "a(st)", property_get_io_device_weight, 0, 0),

SD_BUS_PROPERTY("IOReadBandwidthMax", "a(st)", property_get_io_device_limits, 0, 0),

SD_BUS_PROPERTY("IOWriteBandwidthMax", "a(st)", property_get_io_device_limits, 0, 0),

SD_BUS_PROPERTY("IOReadIOPSMax", "a(st)", property_get_io_device_limits, 0, 0),

SD_BUS_PROPERTY("IOWriteIOPSMax", "a(st)", property_get_io_device_limits, 0, 0),

SD_BUS_PROPERTY("IODeviceLatencyTargetUSec", "a(st)", property_get_io_device_latency, 0, 0),

SD_BUS_PROPERTY("BlockIOAccounting", "b", bus_property_get_bool, offsetof(CGroupContext, blockio_accounting), 0),

SD_BUS_PROPERTY("BlockIOWeight", "t", NULL, offsetof(CGroupContext, blockio_weight), 0),

SD_BUS_PROPERTY("StartupBlockIOWeight", "t", NULL, offsetof(CGroupContext, startup_blockio_weight), 0),

SD_BUS_PROPERTY("BlockIODeviceWeight", "a(st)", property_get_blockio_device_weight, 0, 0),

SD_BUS_PROPERTY("BlockIOReadBandwidth", "a(st)", property_get_blockio_device_bandwidths, 0, 0),

SD_BUS_PROPERTY("BlockIOWriteBandwidth", "a(st)", property_get_blockio_device_bandwidths, 0, 0),

SD_BUS_PROPERTY("MemoryAccounting", "b", bus_property_get_bool, offsetof(CGroupContext, memory_accounting), 0),

SD_BUS_PROPERTY("DefaultMemoryLow", "t", NULL, offsetof(CGroupContext, default_memory_low), 0),

SD_BUS_PROPERTY("DefaultMemoryMin", "t", NULL, offsetof(CGroupContext, default_memory_min), 0),

SD_BUS_PROPERTY("MemoryMin", "t", NULL, offsetof(CGroupContext, memory_min), 0),

SD_BUS_PROPERTY("MemoryLow", "t", NULL, offsetof(CGroupContext, memory_low), 0),

SD_BUS_PROPERTY("MemoryHigh", "t", NULL, offsetof(CGroupContext, memory_high), 0),

SD_BUS_PROPERTY("MemoryMax", "t", NULL, offsetof(CGroupContext, memory_max), 0),

SD_BUS_PROPERTY("MemorySwapMax", "t", NULL, offsetof(CGroupContext, memory_swap_max), 0),

SD_BUS_PROPERTY("MemoryLimit", "t", NULL, offsetof(CGroupContext, memory_limit), 0),

SD_BUS_PROPERTY("DevicePolicy", "s", property_get_cgroup_device_policy, offsetof(CGroupContext, device_policy), 0),

SD_BUS_PROPERTY("DeviceAllow", "a(ss)", property_get_device_allow, 0, 0),

SD_BUS_PROPERTY("TasksAccounting", "b", bus_property_get_bool, offsetof(CGroupContext, tasks_accounting), 0),

SD_BUS_PROPERTY("TasksMax", "t", bus_property_get_tasks_max, offsetof(CGroupContext, tasks_max), 0),

SD_BUS_PROPERTY("IPAccounting", "b", bus_property_get_bool, offsetof(CGroupContext, ip_accounting), 0),

SD_BUS_PROPERTY("IPAddressAllow", "a(iayu)", property_get_ip_address_access, offsetof(CGroupContext, ip_address_allow), 0),

SD_BUS_PROPERTY("IPAddressDeny", "a(iayu)", property_get_ip_address_access, offsetof(CGroupContext, ip_address_deny), 0),

SD_BUS_PROPERTY("IPIngressFilterPath", "as", NULL, offsetof(CGroupContext, ip_filters_ingress), 0),

SD_BUS_PROPERTY("IPEgressFilterPath", "as", NULL, offsetof(CGroupContext, ip_filters_egress), 0),

SD_BUS_PROPERTY("DisableControllers", "as", property_get_cgroup_mask, offsetof(CGroupContext, disable_controllers), 0),

SD_BUS_PROPERTY("ManagedOOMSwap", "s", property_get_managed_oom_mode, offsetof(CGroupContext, moom_swap), 0),

SD_BUS_PROPERTY("ManagedOOMMemoryPressure", "s", property_get_managed_oom_mode, offsetof(CGroupContext, moom_mem_pressure), 0),

SD_BUS_PROPERTY("ManagedOOMMemoryPressureLimit", "u", NULL, offsetof(CGroupContext, moom_mem_pressure_limit), 0),

SD_BUS_PROPERTY("ManagedOOMPreference", "s", property_get_managed_oom_preference, offsetof(CGroupContext, moom_preference), 0),

SD_BUS_PROPERTY("BPFProgram", "a(ss)", property_get_bpf_foreign_program, 0, 0),

SD_BUS_PROPERTY("SocketBindAllow", "a(iiqq)", property_get_socket_bind, offsetof(CGroupContext, socket_bind_allow), 0),

SD_BUS_PROPERTY("SocketBindDeny", "a(iiqq)", property_get_socket_bind, offsetof(CGroupContext, socket_bind_deny), 0),

SD_BUS_PROPERTY("RestrictNetworkInterfaces", "(bas)", property_get_restrict_network_interfaces, 0, 0),

SD_BUS_VTABLE_END

};

static int bus_cgroup_set_transient_property(

sd_bus_error *error) {

int r;

assert(u);

assert(c);

assert(name);

assert(message);

flags |= UNIT_PRIVATE;

if (streq(name, "Delegate")) {

int b;

if (!UNIT_VTABLE(u)->can_delegate)

return sd_bus_error_set(error, SD_BUS_ERROR_INVALID_ARGS, "Delegation not available for unit type");

r = sd_bus_message_read(message, "b", &b);

if (r < 0)

return r;

if (!UNIT_WRITE_FLAGS_NOOP(flags)) {

c->delegate = b;

c->delegate_controllers = b ? _CGROUP_MASK_ALL : 0;

unit_write_settingf(u, flags, name, "Delegate=%s", yes_no(b));

}

return 1;

} else if (STR_IN_SET(name, "DelegateControllers", "DisableControllers")) {

CGroupMask mask = 0;

if (streq(name, "DelegateControllers") && !UNIT_VTABLE(u)->can_delegate)

return sd_bus_error_set(error, SD_BUS_ERROR_INVALID_ARGS, "Delegation not available for unit type");

r = sd_bus_message_enter_container(message, 'a', "s");

if (r < 0)

return r;

for (;;) {

CGroupController cc;

const char *t;

r = sd_bus_message_read(message, "s", &t);

if (r < 0)

return r;

if (r == 0)

break;

cc = cgroup_controller_from_string(t);

if (cc < 0)

return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Unknown cgroup controller '%s'", t);

mask |= CGROUP_CONTROLLER_TO_MASK(cc);

}

r = sd_bus_message_exit_container(message);

if (r < 0)

return r;

if (!UNIT_WRITE_FLAGS_NOOP(flags)) {

_cleanup_free_ char *t = NULL;

r = cg_mask_to_string(mask, &t);

if (r < 0)

return r;

if (streq(name, "DelegateControllers")) {

c->delegate = true;

if (mask == 0)

c->delegate_controllers = 0;

else

c->delegate_controllers |= mask;

unit_write_settingf(u, flags, name, "Delegate=%s", strempty(t));

} else if (streq(name, "DisableControllers")) {

if (mask == 0)

c->disable_controllers = 0;

else

c->disable_controllers |= mask;

unit_write_settingf(u, flags, name, "%s=%s", name, strempty(t));

}

}

return 1;

} else if (STR_IN_SET(name, "IPIngressFilterPath", "IPEgressFilterPath")) {

char ***filters;

size_t n = 0;

filters = streq(name, "IPIngressFilterPath") ? &c->ip_filters_ingress : &c->ip_filters_egress;

r = sd_bus_message_enter_container(message, 'a', "s");

if (r < 0)

return r;

for (;;) {

const char *path;

r = sd_bus_message_read(message, "s", &path);

if (r < 0)

return r;

if (r == 0)

break;

if (!path_is_normalized(path) || !path_is_absolute(path))

return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "%s= expects a normalized absolute path.", name);

if (!UNIT_WRITE_FLAGS_NOOP(flags) && !strv_contains(*filters, path)) {

r = strv_extend(filters, path);

if (r < 0)

return log_oom();

}

n++;

}

r = sd_bus_message_exit_container(message);

if (r < 0)

return r;

if (!UNIT_WRITE_FLAGS_NOOP(flags)) {

_cleanup_free_ char *buf = NULL;

_cleanup_fclose_ FILE *f = NULL;

size_t size = 0;

if (n == 0)

*filters = strv_free(*filters);

unit_invalidate_cgroup_bpf(u);

f = open_memstream_unlocked(&buf, &size);

if (!f)

return -ENOMEM;

fputs(name, f);

fputs("=\n", f);

STRV_FOREACH(entry, *filters)

fprintf(f, "%s=%s\n", name, *entry);

r = fflush_and_check(f);

if (r < 0)

return r;

unit_write_setting(u, flags, name, buf);

if (*filters) {

r = bpf_firewall_supported();

if (r < 0)

return r;

if (r != BPF_FIREWALL_SUPPORTED_WITH_MULTI) {

static bool warned = false;

log_full(warned ? LOG_DEBUG : LOG_WARNING,

"Transient unit %s configures an IP firewall with BPF, but the local system does not support BPF/cgroup firewalling with multiple filters.\n"

"Starting this unit will fail! (This warning is only shown for the first started transient unit using IP firewalling.)", u->id);

warned = true;

}

}

}

return 1;

} else if (streq(name, "BPFProgram")) {

const char *a, *p;

size_t n = 0;

r = sd_bus_message_enter_container(message, 'a', "(ss)");

if (r < 0)

return r;

while ((r = sd_bus_message_read(message, "(ss)", &a, &p)) > 0) {

int attach_type = bpf_cgroup_attach_type_from_string(a);

if (attach_type < 0)

return sd_bus_error_setf(

error,

SD_BUS_ERROR_INVALID_ARGS,

"%s expects a valid BPF attach type, got '%s'.",

name, a);

if (!path_is_normalized(p) || !path_is_absolute(p))

return sd_bus_error_setf(

error,

SD_BUS_ERROR_INVALID_ARGS,

"%s= expects a normalized absolute path.",

name);

if (!UNIT_WRITE_FLAGS_NOOP(flags)) {

r = cgroup_add_bpf_foreign_program(c, attach_type, p);

if (r < 0)

return r;

}

n++;

}

if (r < 0)

return r;

r = sd_bus_message_exit_container(message);

if (r < 0)

return r;

if (!UNIT_WRITE_FLAGS_NOOP(flags)) {

_cleanup_free_ char *buf = NULL;

_cleanup_fclose_ FILE *f = NULL;

size_t size = 0;

if (n == 0)

while (c->bpf_foreign_programs)

cgroup_context_remove_bpf_foreign_program(c, c->bpf_foreign_programs);

f = open_memstream_unlocked(&buf, &size);

if (!f)

return -ENOMEM;

fputs(name, f);

fputs("=\n", f);

LIST_FOREACH(programs, fp, c->bpf_foreign_programs)

fprintf(f, "%s=%s:%s\n", name,

bpf_cgroup_attach_type_to_string(fp->attach_type),

fp->bpffs_path);

r = fflush_and_check(f);

if (r < 0)

return r;

unit_write_setting(u, flags, name, buf);

if (!LIST_IS_EMPTY(c->bpf_foreign_programs)) {

r = bpf_foreign_supported();

if (r < 0)

return r;

if (r == 0)

log_full(LOG_DEBUG,

"Transient unit %s configures a BPF program pinned to BPF "

"filesystem, but the local system does not support that.\n"

"Starting this unit will fail!", u->id);

}

}

return 1;

}

return 0;

}

static int bus_cgroup_set_boolean(

sd_bus_error *error) {

int b, r;

assert(p);

r = sd_bus_message_read(message, "b", &b);

if (r < 0)

return r;

if (!UNIT_WRITE_FLAGS_NOOP(flags)) {

*p = b;

unit_invalidate_cgroup(u, mask);

unit_write_settingf(u, flags, name, "%s=%s", name, yes_no(b));

}

return 1;

}

#define BUS_DEFINE_SET_CGROUP_WEIGHT(function, mask, check, val) \

static int bus_cgroup_set_##function( \

Unit *u, \

const char *name, \

uint64_t *p, \

sd_bus_message *message, \

UnitWriteFlags flags, \

sd_bus_error *error) { \

\

uint64_t v; \

int r; \

\

assert(p); \

\

r = sd_bus_message_read(message, "t", &v); \

if (r < 0) \

return r; \

\

if (!check(v)) \

return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, \

"Value specified in %s is out of range", name); \

\

if (!UNIT_WRITE_FLAGS_NOOP(flags)) { \

*p = v; \

unit_invalidate_cgroup(u, mask); \

\

if (v == (val)) \

unit_write_settingf(u, flags, name, \

"%s=", name); \

else \

unit_write_settingf(u, flags, name, \

"%s=%" PRIu64, name, v); \

} \

\

return 1; \

}

#define BUS_DEFINE_SET_CGROUP_LIMIT(function, mask, scale, minimum) \

static int bus_cgroup_set_##function( \

Unit *u, \

const char *name, \

uint64_t *p, \

sd_bus_message *message, \

UnitWriteFlags flags, \

sd_bus_error *error) { \

\

uint64_t v; \

int r; \

\

assert(p); \

\

r = sd_bus_message_read(message, "t", &v); \

if (r < 0) \

return r; \

\

if (v < minimum) \

return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, \

"Value specified in %s is out of range", name); \

\

if (!UNIT_WRITE_FLAGS_NOOP(flags)) { \

*p = v; \

unit_invalidate_cgroup(u, mask); \

\

if (v == CGROUP_LIMIT_MAX) \

unit_write_settingf(u, flags, name, \

"%s=infinity", name); \

else \

unit_write_settingf(u, flags, name, \

"%s=%" PRIu64, name, v); \

} \

\

return 1; \

} \

static int bus_cgroup_set_##function##_scale( \

Unit *u, \

const char *name, \

uint64_t *p, \

sd_bus_message *message, \

UnitWriteFlags flags, \

sd_bus_error *error) { \

\

uint64_t v; \

uint32_t raw; \

int r; \

\

assert(p); \

\

r = sd_bus_message_read(message, "u", &raw); \

if (r < 0) \

return r; \

\

v = scale(raw, UINT32_MAX); \

if (v < minimum || v >= UINT64_MAX) \

return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, \

"Value specified in %s is out of range", name); \

\

if (!UNIT_WRITE_FLAGS_NOOP(flags)) { \

*p = v; \

unit_invalidate_cgroup(u, mask); \

\

/* Prepare to chop off suffix */ \

assert_se(endswith(name, "Scale")); \

\

int scaled = UINT32_SCALE_TO_PERMYRIAD(raw); \

unit_write_settingf(u, flags, name, "%.*s=" PERMYRIAD_AS_PERCENT_FORMAT_STR, \

(int)(strlen(name) - strlen("Scale")), name, \

PERMYRIAD_AS_PERCENT_FORMAT_VAL(scaled)); \

} \

\

return 1; \

}

DISABLE_WARNING_TYPE_LIMITS;

BUS_DEFINE_SET_CGROUP_WEIGHT(cpu_weight, CGROUP_MASK_CPU, CGROUP_WEIGHT_IS_OK, CGROUP_WEIGHT_INVALID);

BUS_DEFINE_SET_CGROUP_WEIGHT(cpu_shares, CGROUP_MASK_CPU, CGROUP_CPU_SHARES_IS_OK, CGROUP_CPU_SHARES_INVALID);

BUS_DEFINE_SET_CGROUP_WEIGHT(io_weight, CGROUP_MASK_IO, CGROUP_WEIGHT_IS_OK, CGROUP_WEIGHT_INVALID);

BUS_DEFINE_SET_CGROUP_WEIGHT(blockio_weight, CGROUP_MASK_BLKIO, CGROUP_BLKIO_WEIGHT_IS_OK, CGROUP_BLKIO_WEIGHT_INVALID);

BUS_DEFINE_SET_CGROUP_LIMIT(memory, CGROUP_MASK_MEMORY, physical_memory_scale, 1);

BUS_DEFINE_SET_CGROUP_LIMIT(memory_protection, CGROUP_MASK_MEMORY, physical_memory_scale, 0);

BUS_DEFINE_SET_CGROUP_LIMIT(swap, CGROUP_MASK_MEMORY, physical_memory_scale, 0);

REENABLE_WARNING;

static int bus_cgroup_set_tasks_max(

sd_bus_error *error) {

uint64_t v;

int r;

assert(p);

r = sd_bus_message_read(message, "t", &v);

if (r < 0)

return r;

if (v < 1)

return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS,

"Value specified in %s is out of range", name);

if (!UNIT_WRITE_FLAGS_NOOP(flags)) {

*p = (TasksMax) { .value = v, .scale = 0 }; /* When .scale==0, .value is the absolute value */

unit_invalidate_cgroup(u, CGROUP_MASK_PIDS);

if (v == CGROUP_LIMIT_MAX)

unit_write_settingf(u, flags, name,

"%s=infinity", name);

else

unit_write_settingf(u, flags, name,

"%s=%" PRIu64, name, v);

}

return 1;

}

static int bus_cgroup_set_tasks_max_scale(

sd_bus_error *error) {

uint32_t v;

int r;

assert(p);

r = sd_bus_message_read(message, "u", &v);

if (r < 0)

return r;

if (v < 1 || v >= UINT32_MAX)

return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS,

"Value specified in %s is out of range", name);

if (!UNIT_WRITE_FLAGS_NOOP(flags)) {

*p = (TasksMax) { v, UINT32_MAX }; /* .scale is not 0, so this is interpreted as v/UINT32_MAX. */

unit_invalidate_cgroup(u, CGROUP_MASK_PIDS);

uint32_t scaled = DIV_ROUND_UP((uint64_t) v * 100U, (uint64_t) UINT32_MAX);

unit_write_settingf(u, flags, name, "%s=%" PRIu32 ".%" PRIu32 "%%", "TasksMax",

scaled / 10, scaled % 10);

}

return 1;

}

int bus_cgroup_set_property(

sd_bus_error *error) {

CGroupIOLimitType iol_type;

int r;

assert(u);

assert(c);

assert(name);

assert(message);

flags |= UNIT_PRIVATE;

if (streq(name, "CPUAccounting"))

return bus_cgroup_set_boolean(u, name, &c->cpu_accounting, get_cpu_accounting_mask(), message, flags, error);

if (streq(name, "CPUWeight"))

return bus_cgroup_set_cpu_weight(u, name, &c->cpu_weight, message, flags, error);

if (streq(name, "StartupCPUWeight"))

return bus_cgroup_set_cpu_weight(u, name, &c->startup_cpu_weight, message, flags, error);