src/core/dbus-execute.c - systemd-stable - Rivoreo Source Code Repositories

 /*-*- Mode: C; c-basic-offset: 8; indent-tabs-mode: nil -*-*/

 /***
   This file is part of systemd.

   Copyright 2010 Lennart Poettering

   systemd is free software; you can redistribute it and/or modify it
   under the terms of the GNU Lesser General Public License as published by
   the Free Software Foundation; either version 2.1 of the License, or
   (at your option) any later version.

   systemd is distributed in the hope that it will be useful, but
   WITHOUT ANY WARRANTY; without even the implied warranty of
   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
   Lesser General Public License for more details.

   You should have received a copy of the GNU Lesser General Public License
   along with systemd; If not, see <http://www.gnu.org/licenses/>.
 ***/

 #include <errno.h>
 #include <dbus/dbus.h>
 #include <sys/prctl.h>

 #include "dbus-execute.h"
 #include "missing.h"
 #include "ioprio.h"
 #include "strv.h"
 #include "dbus-common.h"
 #include "syscall-list.h"

 DEFINE_BUS_PROPERTY_APPEND_ENUM(bus_execute_append_input, exec_input, ExecInput);
 DEFINE_BUS_PROPERTY_APPEND_ENUM(bus_execute_append_output, exec_output, ExecOutput);

 int bus_execute_append_env_files(DBusMessageIter *i, const char *property, void *data) {
         char **env_files = data, **j;
         DBusMessageIter sub, sub2;

         assert(i);
         assert(property);

         if (!dbus_message_iter_open_container(i, DBUS_TYPE_ARRAY, "(sb)", &sub))
                 return -ENOMEM;

         STRV_FOREACH(j, env_files) {
                 dbus_bool_t b = false;
                 char *fn = *j;

                 if (fn[0] == '-') {
                         b = true;
                         fn++;
                 }

                 if (!dbus_message_iter_open_container(&sub, DBUS_TYPE_STRUCT, NULL, &sub2) ||
                     !dbus_message_iter_append_basic(&sub2, DBUS_TYPE_STRING, &fn) ||
                     !dbus_message_iter_append_basic(&sub2, DBUS_TYPE_BOOLEAN, &b) ||
                     !dbus_message_iter_close_container(&sub, &sub2))
                         return -ENOMEM;
         }

         if (!dbus_message_iter_close_container(i, &sub))
                 return -ENOMEM;

         return 0;
 }

 int bus_execute_append_oom_score_adjust(DBusMessageIter *i, const char *property, void *data) {
         ExecContext *c = data;
         int32_t n;

         assert(i);
         assert(property);
         assert(c);

         if (c->oom_score_adjust_set)
                 n = c->oom_score_adjust;
         else {
                 char *t;

                 n = 0;
                 if (read_one_line_file("/proc/self/oom_score_adj", &t) >= 0) {
                         safe_atoi(t, &n);
                         free(t);
                 }
         }

         if (!dbus_message_iter_append_basic(i, DBUS_TYPE_INT32, &n))
                 return -ENOMEM;

         return 0;
 }

 int bus_execute_append_nice(DBusMessageIter *i, const char *property, void *data) {
         ExecContext *c = data;
         int32_t n;

         assert(i);
         assert(property);
         assert(c);

         if (c->nice_set)
                 n = c->nice;
         else
                 n = getpriority(PRIO_PROCESS, 0);

         if (!dbus_message_iter_append_basic(i, DBUS_TYPE_INT32, &n))
                 return -ENOMEM;

         return 0;
 }

 int bus_execute_append_ioprio(DBusMessageIter *i, const char *property, void *data) {
         ExecContext *c = data;
         int32_t n;

         assert(i);
         assert(property);
         assert(c);

         if (c->ioprio_set)
                 n = c->ioprio;
         else
                 n = ioprio_get(IOPRIO_WHO_PROCESS, 0);

         if (!dbus_message_iter_append_basic(i, DBUS_TYPE_INT32, &n))
                 return -ENOMEM;

         return 0;
 }

 int bus_execute_append_cpu_sched_policy(DBusMessageIter *i, const char *property, void *data) {
         ExecContext *c = data;
         int32_t n;

         assert(i);
         assert(property);
         assert(c);

         if (c->cpu_sched_set)
                 n = c->cpu_sched_policy;
         else
                 n = sched_getscheduler(0);

         if (!dbus_message_iter_append_basic(i, DBUS_TYPE_INT32, &n))
                 return -ENOMEM;

         return 0;
 }

 int bus_execute_append_cpu_sched_priority(DBusMessageIter *i, const char *property, void *data) {
         ExecContext *c = data;
         int32_t n;

         assert(i);
         assert(property);
         assert(c);

         if (c->cpu_sched_set)
                 n = c->cpu_sched_priority;
         else {
                 struct sched_param p;
                 n = 0;

                 zero(p);
                 if (sched_getparam(0, &p) >= 0)
                         n = p.sched_priority;
         }

         if (!dbus_message_iter_append_basic(i, DBUS_TYPE_INT32, &n))
                 return -ENOMEM;

         return 0;
 }

 int bus_execute_append_affinity(DBusMessageIter *i, const char *property, void *data) {
         ExecContext *c = data;
         dbus_bool_t b;
         DBusMessageIter sub;

         assert(i);
         assert(property);
         assert(c);

         if (!dbus_message_iter_open_container(i, DBUS_TYPE_ARRAY, "y", &sub))
                 return -ENOMEM;

         if (c->cpuset)
                 b = dbus_message_iter_append_fixed_array(&sub, DBUS_TYPE_BYTE, &c->cpuset, CPU_ALLOC_SIZE(c->cpuset_ncpus));
         else
                 b = dbus_message_iter_append_fixed_array(&sub, DBUS_TYPE_BYTE, &c->cpuset, 0);

         if (!b)
                 return -ENOMEM;

         if (!dbus_message_iter_close_container(i, &sub))
                 return -ENOMEM;

         return 0;
 }

 int bus_execute_append_timer_slack_nsec(DBusMessageIter *i, const char *property, void *data) {
         ExecContext *c = data;
         uint64_t u;

         assert(i);
         assert(property);
         assert(c);

         if (c->timer_slack_nsec != (nsec_t) -1)
                 u = (uint64_t) c->timer_slack_nsec;
         else
                 u = (uint64_t) prctl(PR_GET_TIMERSLACK);

         if (!dbus_message_iter_append_basic(i, DBUS_TYPE_UINT64, &u))
                 return -ENOMEM;

         return 0;
 }

 int bus_execute_append_capability_bs(DBusMessageIter *i, const char *property, void *data) {
         ExecContext *c = data;
         uint64_t normal, inverted;

         assert(i);
         assert(property);
         assert(c);

         /* We store this negated internally, to match the kernel, but
          * we expose it normalized. */

         normal = *(uint64_t*) data;
         inverted = ~normal;

         return bus_property_append_uint64(i, property, &inverted);
 }

 int bus_execute_append_capabilities(DBusMessageIter *i, const char *property, void *data) {
         ExecContext *c = data;
         char *t = NULL;
         const char *s;
         dbus_bool_t b;

         assert(i);
         assert(property);
         assert(c);

         if (c->capabilities)
                 s = t = cap_to_text(c->capabilities, NULL);
         else
                 s = "";

         if (!s)
                 return -ENOMEM;

         b = dbus_message_iter_append_basic(i, DBUS_TYPE_STRING, &s);

         if (t)
                 cap_free(t);

         if (!b)
                 return -ENOMEM;

         return 0;
 }

 int bus_execute_append_rlimits(DBusMessageIter *i, const char *property, void *data) {
         ExecContext *c = data;
         int r;
         uint64_t u;

         assert(i);
         assert(property);
         assert(c);

         assert_se((r = rlimit_from_string(property)) >= 0);

         if (c->rlimit[r])
                 u = (uint64_t) c->rlimit[r]->rlim_max;
         else {
                 struct rlimit rl;

                 zero(rl);
                 getrlimit(r, &rl);

                 u = (uint64_t) rl.rlim_max;
         }

         if (!dbus_message_iter_append_basic(i, DBUS_TYPE_UINT64, &u))
                 return -ENOMEM;

         return 0;
 }

 int bus_execute_append_command(DBusMessageIter *i, const char *property, void *data) {
         ExecCommand *c = data;
         DBusMessageIter sub, sub2, sub3;

         assert(i);
         assert(property);

         if (!dbus_message_iter_open_container(i, DBUS_TYPE_ARRAY, "(sasbttttuii)", &sub))
                 return -ENOMEM;

         LIST_FOREACH(command, c, c) {
                 char **l;
                 uint32_t pid;
                 int32_t code, status;
                 dbus_bool_t b;

                 if (!c->path)
                         continue;

                 if (!dbus_message_iter_open_container(&sub, DBUS_TYPE_STRUCT, NULL, &sub2) ||
                     !dbus_message_iter_append_basic(&sub2, DBUS_TYPE_STRING, &c->path) ||
                     !dbus_message_iter_open_container(&sub2, DBUS_TYPE_ARRAY, "s", &sub3))
                         return -ENOMEM;

                 STRV_FOREACH(l, c->argv)
                         if (!dbus_message_iter_append_basic(&sub3, DBUS_TYPE_STRING, l))
                                 return -ENOMEM;

                 pid = (uint32_t) c->exec_status.pid;
                 code = (int32_t) c->exec_status.code;
                 status = (int32_t) c->exec_status.status;

                 b = !!c->ignore;

                 if (!dbus_message_iter_close_container(&sub2, &sub3) ||
                     !dbus_message_iter_append_basic(&sub2, DBUS_TYPE_BOOLEAN, &b) ||
                     !dbus_message_iter_append_basic(&sub2, DBUS_TYPE_UINT64, &c->exec_status.start_timestamp.realtime) ||
                     !dbus_message_iter_append_basic(&sub2, DBUS_TYPE_UINT64, &c->exec_status.start_timestamp.monotonic) ||
                     !dbus_message_iter_append_basic(&sub2, DBUS_TYPE_UINT64, &c->exec_status.exit_timestamp.realtime) ||
                     !dbus_message_iter_append_basic(&sub2, DBUS_TYPE_UINT64, &c->exec_status.exit_timestamp.monotonic) ||
                     !dbus_message_iter_append_basic(&sub2, DBUS_TYPE_UINT32, &pid) ||
                     !dbus_message_iter_append_basic(&sub2, DBUS_TYPE_INT32, &code) ||
                     !dbus_message_iter_append_basic(&sub2, DBUS_TYPE_INT32, &status))
                         return -ENOMEM;

                 if (!dbus_message_iter_close_container(&sub, &sub2))
                         return -ENOMEM;
         }

         if (!dbus_message_iter_close_container(i, &sub))
                 return -ENOMEM;

         return 0;
 }

 int bus_execute_append_syscall_filter(DBusMessageIter *i, const char *property, void *data) {
         ExecContext *c = data;
         dbus_bool_t b;
         DBusMessageIter sub;

         assert(i);
         assert(property);
         assert(c);

         if (!dbus_message_iter_open_container(i, DBUS_TYPE_ARRAY, "u", &sub))
                 return -ENOMEM;

         if (c->syscall_filter)
                 b = dbus_message_iter_append_fixed_array(&sub, DBUS_TYPE_UINT32, &c->syscall_filter, (syscall_max() + 31) >> 4);
         else
                 b = dbus_message_iter_append_fixed_array(&sub, DBUS_TYPE_UINT32, &c->syscall_filter, 0);

         if (!b)
                 return -ENOMEM;

         if (!dbus_message_iter_close_container(i, &sub))
                 return -ENOMEM;

         return 0;
 }

 const BusProperty bus_exec_context_properties[] = {
         { "Environment",              bus_property_append_strv,             "as", offsetof(ExecContext, environment),            true },
         { "EnvironmentFiles",         bus_execute_append_env_files,      "a(sb)", offsetof(ExecContext, environment_files),      true },
         { "UMask",                    bus_property_append_mode,              "u", offsetof(ExecContext, umask)                        },
         { "LimitCPU",                 bus_execute_append_rlimits,            "t", 0 },
         { "LimitFSIZE",               bus_execute_append_rlimits,            "t", 0 },
         { "LimitDATA",                bus_execute_append_rlimits,            "t", 0 },
         { "LimitSTACK",               bus_execute_append_rlimits,            "t", 0 },
         { "LimitCORE",                bus_execute_append_rlimits,            "t", 0 },
         { "LimitRSS",                 bus_execute_append_rlimits,            "t", 0 },
         { "LimitNOFILE",              bus_execute_append_rlimits,            "t", 0 },
         { "LimitAS",                  bus_execute_append_rlimits,            "t", 0 },
         { "LimitNPROC",               bus_execute_append_rlimits,            "t", 0 },
         { "LimitMEMLOCK",             bus_execute_append_rlimits,            "t", 0 },
         { "LimitLOCKS",               bus_execute_append_rlimits,            "t", 0 },
         { "LimitSIGPENDING",          bus_execute_append_rlimits,            "t", 0 },
         { "LimitMSGQUEUE",            bus_execute_append_rlimits,            "t", 0 },
         { "LimitNICE",                bus_execute_append_rlimits,            "t", 0 },
         { "LimitRTPRIO",              bus_execute_append_rlimits,            "t", 0 },
         { "LimitRTTIME",              bus_execute_append_rlimits,            "t", 0 },
         { "WorkingDirectory",         bus_property_append_string,            "s", offsetof(ExecContext, working_directory),      true },
         { "RootDirectory",            bus_property_append_string,            "s", offsetof(ExecContext, root_directory),         true },
         { "OOMScoreAdjust",           bus_execute_append_oom_score_adjust,   "i", 0 },
         { "Nice",                     bus_execute_append_nice,               "i", 0 },
         { "IOScheduling",             bus_execute_append_ioprio,             "i", 0 },
         { "CPUSchedulingPolicy",      bus_execute_append_cpu_sched_policy,   "i", 0 },
         { "CPUSchedulingPriority",    bus_execute_append_cpu_sched_priority, "i", 0 },
         { "CPUAffinity",              bus_execute_append_affinity,          "ay", 0 },
         { "TimerSlackNSec",           bus_execute_append_timer_slack_nsec,   "t", 0 },
         { "CPUSchedulingResetOnFork", bus_property_append_bool,              "b", offsetof(ExecContext, cpu_sched_reset_on_fork)      },
         { "NonBlocking",              bus_property_append_bool,              "b", offsetof(ExecContext, non_blocking)                 },
         { "StandardInput",            bus_execute_append_input,              "s", offsetof(ExecContext, std_input)                    },
         { "StandardOutput",           bus_execute_append_output,             "s", offsetof(ExecContext, std_output)                   },
         { "StandardError",            bus_execute_append_output,             "s", offsetof(ExecContext, std_error)                    },
         { "TTYPath",                  bus_property_append_string,            "s", offsetof(ExecContext, tty_path),               true },
         { "TTYReset",                 bus_property_append_bool,              "b", offsetof(ExecContext, tty_reset)                    },
         { "TTYVHangup",               bus_property_append_bool,              "b", offsetof(ExecContext, tty_vhangup)                  },
         { "TTYVTDisallocate",         bus_property_append_bool,              "b", offsetof(ExecContext, tty_vt_disallocate)           },
         { "SyslogPriority",           bus_property_append_int,               "i", offsetof(ExecContext, syslog_priority)              },
         { "SyslogIdentifier",         bus_property_append_string,            "s", offsetof(ExecContext, syslog_identifier),      true },
         { "SyslogLevelPrefix",        bus_property_append_bool,              "b", offsetof(ExecContext, syslog_level_prefix)          },
         { "Capabilities",             bus_execute_append_capabilities,       "s", 0 },
         { "SecureBits",               bus_property_append_int,               "i", offsetof(ExecContext, secure_bits)                  },
         { "CapabilityBoundingSet",    bus_execute_append_capability_bs,      "t", offsetof(ExecContext, capability_bounding_set_drop) },
         { "User",                     bus_property_append_string,            "s", offsetof(ExecContext, user),                   true },
         { "Group",                    bus_property_append_string,            "s", offsetof(ExecContext, group),                  true },
         { "SupplementaryGroups",      bus_property_append_strv,             "as", offsetof(ExecContext, supplementary_groups),   true },
         { "TCPWrapName",              bus_property_append_string,            "s", offsetof(ExecContext, tcpwrap_name),           true },
         { "PAMName",                  bus_property_append_string,            "s", offsetof(ExecContext, pam_name),               true },
         { "ReadWriteDirectories",     bus_property_append_strv,             "as", offsetof(ExecContext, read_write_dirs),        true },
         { "ReadOnlyDirectories",      bus_property_append_strv,             "as", offsetof(ExecContext, read_only_dirs),         true },
         { "InaccessibleDirectories",  bus_property_append_strv,             "as", offsetof(ExecContext, inaccessible_dirs),      true },
         { "MountFlags",               bus_property_append_ul,                "t", offsetof(ExecContext, mount_flags)                  },
         { "PrivateTmp",               bus_property_append_bool,              "b", offsetof(ExecContext, private_tmp)                  },
         { "PrivateNetwork",           bus_property_append_bool,              "b", offsetof(ExecContext, private_network)              },
         { "SameProcessGroup",         bus_property_append_bool,              "b", offsetof(ExecContext, same_pgrp)                    },
         { "UtmpIdentifier",           bus_property_append_string,            "s", offsetof(ExecContext, utmp_id),                true },
         { "ControlGroupModify",       bus_property_append_bool,              "b", offsetof(ExecContext, control_group_modify)         },
         { "ControlGroupPersistent",   bus_property_append_tristate_false,    "b", offsetof(ExecContext, control_group_persistent)     },
         { "IgnoreSIGPIPE",            bus_property_append_bool,              "b", offsetof(ExecContext, ignore_sigpipe)               },
         { "NoNewPrivileges",          bus_property_append_bool,              "b", offsetof(ExecContext, no_new_privileges)            },
         { "SystemCallFilter",         bus_execute_append_syscall_filter,    "au", 0                                                   },
         { NULL, }
 };
	/-- Mode: C; c-basic-offset: 8; indent-tabs-mode: nil --/

	/***
	This file is part of systemd.

	Copyright 2010 Lennart Poettering

	systemd is free software; you can redistribute it and/or modify it
	under the terms of the GNU Lesser General Public License as published by
	the Free Software Foundation; either version 2.1 of the License, or
	(at your option) any later version.

	systemd is distributed in the hope that it will be useful, but
	WITHOUT ANY WARRANTY; without even the implied warranty of
	MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
	Lesser General Public License for more details.

	You should have received a copy of the GNU Lesser General Public License
	along with systemd; If not, see <http://www.gnu.org/licenses/>.
	***/

	#include <errno.h>
	#include <dbus/dbus.h>
	#include <sys/prctl.h>

	#include "dbus-execute.h"
	#include "missing.h"
	#include "ioprio.h"
	#include "strv.h"
	#include "dbus-common.h"
	#include "syscall-list.h"

	DEFINE_BUS_PROPERTY_APPEND_ENUM(bus_execute_append_input, exec_input, ExecInput);
	DEFINE_BUS_PROPERTY_APPEND_ENUM(bus_execute_append_output, exec_output, ExecOutput);

	int bus_execute_append_env_files(DBusMessageIter i, const char property, void *data) {
	char env_files = data, j;
	DBusMessageIter sub, sub2;

	assert(i);
	assert(property);

	if (!dbus_message_iter_open_container(i, DBUS_TYPE_ARRAY, "(sb)", &sub))
	return -ENOMEM;

	STRV_FOREACH(j, env_files) {
	dbus_bool_t b = false;
	char fn = j;

	if (fn[0] == '-') {
	b = true;
	fn++;
	}

	if (!dbus_message_iter_open_container(&sub, DBUS_TYPE_STRUCT, NULL, &sub2) \|\|
	!dbus_message_iter_append_basic(&sub2, DBUS_TYPE_STRING, &fn) \|\|
	!dbus_message_iter_append_basic(&sub2, DBUS_TYPE_BOOLEAN, &b) \|\|
	!dbus_message_iter_close_container(&sub, &sub2))
	return -ENOMEM;
	}

	if (!dbus_message_iter_close_container(i, &sub))
	return -ENOMEM;

	return 0;
	}

	int bus_execute_append_oom_score_adjust(DBusMessageIter i, const char property, void *data) {
	ExecContext *c = data;
	int32_t n;

	assert(i);
	assert(property);
	assert(c);

	if (c->oom_score_adjust_set)
	n = c->oom_score_adjust;
	else {
	char *t;

	n = 0;
	if (read_one_line_file("/proc/self/oom_score_adj", &t) >= 0) {
	safe_atoi(t, &n);
	free(t);
	}
	}

	if (!dbus_message_iter_append_basic(i, DBUS_TYPE_INT32, &n))
	return -ENOMEM;

	return 0;
	}

	int bus_execute_append_nice(DBusMessageIter i, const char property, void *data) {
	ExecContext *c = data;
	int32_t n;

	assert(i);
	assert(property);
	assert(c);

	if (c->nice_set)
	n = c->nice;
	else
	n = getpriority(PRIO_PROCESS, 0);

	if (!dbus_message_iter_append_basic(i, DBUS_TYPE_INT32, &n))
	return -ENOMEM;

	return 0;
	}

	int bus_execute_append_ioprio(DBusMessageIter i, const char property, void *data) {
	ExecContext *c = data;
	int32_t n;

	assert(i);
	assert(property);
	assert(c);

	if (c->ioprio_set)
	n = c->ioprio;
	else
	n = ioprio_get(IOPRIO_WHO_PROCESS, 0);

	if (!dbus_message_iter_append_basic(i, DBUS_TYPE_INT32, &n))
	return -ENOMEM;

	return 0;
	}

	int bus_execute_append_cpu_sched_policy(DBusMessageIter i, const char property, void *data) {
	ExecContext *c = data;
	int32_t n;

	assert(i);
	assert(property);
	assert(c);

	if (c->cpu_sched_set)
	n = c->cpu_sched_policy;
	else
	n = sched_getscheduler(0);

	if (!dbus_message_iter_append_basic(i, DBUS_TYPE_INT32, &n))
	return -ENOMEM;

	return 0;
	}

	int bus_execute_append_cpu_sched_priority(DBusMessageIter i, const char property, void *data) {
	ExecContext *c = data;
	int32_t n;

	assert(i);
	assert(property);
	assert(c);

	if (c->cpu_sched_set)
	n = c->cpu_sched_priority;
	else {
	struct sched_param p;
	n = 0;

	zero(p);
	if (sched_getparam(0, &p) >= 0)
	n = p.sched_priority;
	}

	if (!dbus_message_iter_append_basic(i, DBUS_TYPE_INT32, &n))
	return -ENOMEM;

	return 0;
	}

	int bus_execute_append_affinity(DBusMessageIter i, const char property, void *data) {
	ExecContext *c = data;
	dbus_bool_t b;
	DBusMessageIter sub;

	assert(i);
	assert(property);
	assert(c);

	if (!dbus_message_iter_open_container(i, DBUS_TYPE_ARRAY, "y", &sub))
	return -ENOMEM;

	if (c->cpuset)
	b = dbus_message_iter_append_fixed_array(&sub, DBUS_TYPE_BYTE, &c->cpuset, CPU_ALLOC_SIZE(c->cpuset_ncpus));
	else
	b = dbus_message_iter_append_fixed_array(&sub, DBUS_TYPE_BYTE, &c->cpuset, 0);

	if (!b)
	return -ENOMEM;

	if (!dbus_message_iter_close_container(i, &sub))
	return -ENOMEM;

	return 0;
	}

	int bus_execute_append_timer_slack_nsec(DBusMessageIter i, const char property, void *data) {
	ExecContext *c = data;
	uint64_t u;

	assert(i);
	assert(property);
	assert(c);

	if (c->timer_slack_nsec != (nsec_t) -1)
	u = (uint64_t) c->timer_slack_nsec;
	else
	u = (uint64_t) prctl(PR_GET_TIMERSLACK);

	if (!dbus_message_iter_append_basic(i, DBUS_TYPE_UINT64, &u))
	return -ENOMEM;

	return 0;
	}

	int bus_execute_append_capability_bs(DBusMessageIter i, const char property, void *data) {
	ExecContext *c = data;
	uint64_t normal, inverted;

	assert(i);
	assert(property);
	assert(c);

	/* We store this negated internally, to match the kernel, but
	* we expose it normalized. */

	normal = (uint64_t) data;
	inverted = ~normal;

	return bus_property_append_uint64(i, property, &inverted);
	}

	int bus_execute_append_capabilities(DBusMessageIter i, const char property, void *data) {
	ExecContext *c = data;
	char *t = NULL;
	const char *s;
	dbus_bool_t b;

	assert(i);
	assert(property);
	assert(c);

	if (c->capabilities)
	s = t = cap_to_text(c->capabilities, NULL);
	else
	s = "";

	if (!s)
	return -ENOMEM;

	b = dbus_message_iter_append_basic(i, DBUS_TYPE_STRING, &s);

	if (t)
	cap_free(t);

	if (!b)
	return -ENOMEM;

	return 0;
	}

	int bus_execute_append_rlimits(DBusMessageIter i, const char property, void *data) {
	ExecContext *c = data;
	int r;
	uint64_t u;

	assert(i);
	assert(property);
	assert(c);

	assert_se((r = rlimit_from_string(property)) >= 0);

	if (c->rlimit[r])
	u = (uint64_t) c->rlimit[r]->rlim_max;
	else {
	struct rlimit rl;

	zero(rl);
	getrlimit(r, &rl);

	u = (uint64_t) rl.rlim_max;
	}

	if (!dbus_message_iter_append_basic(i, DBUS_TYPE_UINT64, &u))
	return -ENOMEM;

	return 0;
	}

	int bus_execute_append_command(DBusMessageIter i, const char property, void *data) {
	ExecCommand *c = data;
	DBusMessageIter sub, sub2, sub3;

	assert(i);
	assert(property);

	if (!dbus_message_iter_open_container(i, DBUS_TYPE_ARRAY, "(sasbttttuii)", &sub))
	return -ENOMEM;

	LIST_FOREACH(command, c, c) {
	char **l;
	uint32_t pid;
	int32_t code, status;
	dbus_bool_t b;

	if (!c->path)
	continue;

	if (!dbus_message_iter_open_container(&sub, DBUS_TYPE_STRUCT, NULL, &sub2) \|\|
	!dbus_message_iter_append_basic(&sub2, DBUS_TYPE_STRING, &c->path) \|\|
	!dbus_message_iter_open_container(&sub2, DBUS_TYPE_ARRAY, "s", &sub3))
	return -ENOMEM;

	STRV_FOREACH(l, c->argv)
	if (!dbus_message_iter_append_basic(&sub3, DBUS_TYPE_STRING, l))
	return -ENOMEM;

	pid = (uint32_t) c->exec_status.pid;
	code = (int32_t) c->exec_status.code;
	status = (int32_t) c->exec_status.status;

	b = !!c->ignore;

	if (!dbus_message_iter_close_container(&sub2, &sub3) \|\|
	!dbus_message_iter_append_basic(&sub2, DBUS_TYPE_BOOLEAN, &b) \|\|
	!dbus_message_iter_append_basic(&sub2, DBUS_TYPE_UINT64, &c->exec_status.start_timestamp.realtime) \|\|
	!dbus_message_iter_append_basic(&sub2, DBUS_TYPE_UINT64, &c->exec_status.start_timestamp.monotonic) \|\|
	!dbus_message_iter_append_basic(&sub2, DBUS_TYPE_UINT64, &c->exec_status.exit_timestamp.realtime) \|\|
	!dbus_message_iter_append_basic(&sub2, DBUS_TYPE_UINT64, &c->exec_status.exit_timestamp.monotonic) \|\|
	!dbus_message_iter_append_basic(&sub2, DBUS_TYPE_UINT32, &pid) \|\|
	!dbus_message_iter_append_basic(&sub2, DBUS_TYPE_INT32, &code) \|\|
	!dbus_message_iter_append_basic(&sub2, DBUS_TYPE_INT32, &status))
	return -ENOMEM;

	if (!dbus_message_iter_close_container(&sub, &sub2))
	return -ENOMEM;
	}

	if (!dbus_message_iter_close_container(i, &sub))
	return -ENOMEM;

	return 0;
	}

	int bus_execute_append_syscall_filter(DBusMessageIter i, const char property, void *data) {
	ExecContext *c = data;
	dbus_bool_t b;
	DBusMessageIter sub;

	assert(i);
	assert(property);
	assert(c);

	if (!dbus_message_iter_open_container(i, DBUS_TYPE_ARRAY, "u", &sub))
	return -ENOMEM;

	if (c->syscall_filter)
	b = dbus_message_iter_append_fixed_array(&sub, DBUS_TYPE_UINT32, &c->syscall_filter, (syscall_max() + 31) >> 4);
	else
	b = dbus_message_iter_append_fixed_array(&sub, DBUS_TYPE_UINT32, &c->syscall_filter, 0);

	if (!b)
	return -ENOMEM;

	if (!dbus_message_iter_close_container(i, &sub))
	return -ENOMEM;

	return 0;
	}

	const BusProperty bus_exec_context_properties[] = {
	{ "Environment", bus_property_append_strv, "as", offsetof(ExecContext, environment), true },
	{ "EnvironmentFiles", bus_execute_append_env_files, "a(sb)", offsetof(ExecContext, environment_files), true },
	{ "UMask", bus_property_append_mode, "u", offsetof(ExecContext, umask) },
	{ "LimitCPU", bus_execute_append_rlimits, "t", 0 },
	{ "LimitFSIZE", bus_execute_append_rlimits, "t", 0 },
	{ "LimitDATA", bus_execute_append_rlimits, "t", 0 },
	{ "LimitSTACK", bus_execute_append_rlimits, "t", 0 },
	{ "LimitCORE", bus_execute_append_rlimits, "t", 0 },
	{ "LimitRSS", bus_execute_append_rlimits, "t", 0 },
	{ "LimitNOFILE", bus_execute_append_rlimits, "t", 0 },
	{ "LimitAS", bus_execute_append_rlimits, "t", 0 },
	{ "LimitNPROC", bus_execute_append_rlimits, "t", 0 },
	{ "LimitMEMLOCK", bus_execute_append_rlimits, "t", 0 },
	{ "LimitLOCKS", bus_execute_append_rlimits, "t", 0 },
	{ "LimitSIGPENDING", bus_execute_append_rlimits, "t", 0 },
	{ "LimitMSGQUEUE", bus_execute_append_rlimits, "t", 0 },
	{ "LimitNICE", bus_execute_append_rlimits, "t", 0 },
	{ "LimitRTPRIO", bus_execute_append_rlimits, "t", 0 },
	{ "LimitRTTIME", bus_execute_append_rlimits, "t", 0 },
	{ "WorkingDirectory", bus_property_append_string, "s", offsetof(ExecContext, working_directory), true },
	{ "RootDirectory", bus_property_append_string, "s", offsetof(ExecContext, root_directory), true },
	{ "OOMScoreAdjust", bus_execute_append_oom_score_adjust, "i", 0 },
	{ "Nice", bus_execute_append_nice, "i", 0 },
	{ "IOScheduling", bus_execute_append_ioprio, "i", 0 },
	{ "CPUSchedulingPolicy", bus_execute_append_cpu_sched_policy, "i", 0 },
	{ "CPUSchedulingPriority", bus_execute_append_cpu_sched_priority, "i", 0 },
	{ "CPUAffinity", bus_execute_append_affinity, "ay", 0 },
	{ "TimerSlackNSec", bus_execute_append_timer_slack_nsec, "t", 0 },
	{ "CPUSchedulingResetOnFork", bus_property_append_bool, "b", offsetof(ExecContext, cpu_sched_reset_on_fork) },
	{ "NonBlocking", bus_property_append_bool, "b", offsetof(ExecContext, non_blocking) },
	{ "StandardInput", bus_execute_append_input, "s", offsetof(ExecContext, std_input) },
	{ "StandardOutput", bus_execute_append_output, "s", offsetof(ExecContext, std_output) },
	{ "StandardError", bus_execute_append_output, "s", offsetof(ExecContext, std_error) },
	{ "TTYPath", bus_property_append_string, "s", offsetof(ExecContext, tty_path), true },
	{ "TTYReset", bus_property_append_bool, "b", offsetof(ExecContext, tty_reset) },
	{ "TTYVHangup", bus_property_append_bool, "b", offsetof(ExecContext, tty_vhangup) },
	{ "TTYVTDisallocate", bus_property_append_bool, "b", offsetof(ExecContext, tty_vt_disallocate) },
	{ "SyslogPriority", bus_property_append_int, "i", offsetof(ExecContext, syslog_priority) },
	{ "SyslogIdentifier", bus_property_append_string, "s", offsetof(ExecContext, syslog_identifier), true },
	{ "SyslogLevelPrefix", bus_property_append_bool, "b", offsetof(ExecContext, syslog_level_prefix) },
	{ "Capabilities", bus_execute_append_capabilities, "s", 0 },
	{ "SecureBits", bus_property_append_int, "i", offsetof(ExecContext, secure_bits) },
	{ "CapabilityBoundingSet", bus_execute_append_capability_bs, "t", offsetof(ExecContext, capability_bounding_set_drop) },
	{ "User", bus_property_append_string, "s", offsetof(ExecContext, user), true },
	{ "Group", bus_property_append_string, "s", offsetof(ExecContext, group), true },
	{ "SupplementaryGroups", bus_property_append_strv, "as", offsetof(ExecContext, supplementary_groups), true },
	{ "TCPWrapName", bus_property_append_string, "s", offsetof(ExecContext, tcpwrap_name), true },
	{ "PAMName", bus_property_append_string, "s", offsetof(ExecContext, pam_name), true },
	{ "ReadWriteDirectories", bus_property_append_strv, "as", offsetof(ExecContext, read_write_dirs), true },
	{ "ReadOnlyDirectories", bus_property_append_strv, "as", offsetof(ExecContext, read_only_dirs), true },
	{ "InaccessibleDirectories", bus_property_append_strv, "as", offsetof(ExecContext, inaccessible_dirs), true },
	{ "MountFlags", bus_property_append_ul, "t", offsetof(ExecContext, mount_flags) },
	{ "PrivateTmp", bus_property_append_bool, "b", offsetof(ExecContext, private_tmp) },
	{ "PrivateNetwork", bus_property_append_bool, "b", offsetof(ExecContext, private_network) },
	{ "SameProcessGroup", bus_property_append_bool, "b", offsetof(ExecContext, same_pgrp) },
	{ "UtmpIdentifier", bus_property_append_string, "s", offsetof(ExecContext, utmp_id), true },
	{ "ControlGroupModify", bus_property_append_bool, "b", offsetof(ExecContext, control_group_modify) },
	{ "ControlGroupPersistent", bus_property_append_tristate_false, "b", offsetof(ExecContext, control_group_persistent) },
	{ "IgnoreSIGPIPE", bus_property_append_bool, "b", offsetof(ExecContext, ignore_sigpipe) },
	{ "NoNewPrivileges", bus_property_append_bool, "b", offsetof(ExecContext, no_new_privileges) },
	{ "SystemCallFilter", bus_execute_append_syscall_filter, "au", 0 },
	{ NULL, }
	};