init_service_manager.c

/*
 * Copyright (c) 2020-2021 Huawei Device Co., Ltd.
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 * http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */
#include "init_service_manager.h"

#include <limits.h>
#include <stdlib.h>
#include <string.h>
#include <sys/socket.h>
#include <sys/wait.h>
#include <unistd.h>
#include <sys/ioctl.h>
#include "cJSON.h"
#include "init.h"
#include "init_group_manager.h"
#include "init_jobs_internal.h"
#include "init_log.h"
#include "init_service_file.h"
#include "init_service_socket.h"
#include "init_utils.h"
#include "securec.h"
#include "service_control.h"
#include "sys_param.h"
#ifdef ASAN_DETECTOR
#include "init_param.h"
#endif

#ifndef OHOS_LITE
#include "hookmgr.h"
#include "bootstage.h"
#endif

// All service processes that init will fork+exec.
static ServiceSpace g_serviceSpace = { 0 };
static const int CRITICAL_DEFAULT_CRASH_TIME = 20;
// maximum number of crashes within time CRITICAL_DEFAULT_CRASH_TIME for one service
static const int CRITICAL_DEFAULT_CRASH_COUNT =  4;
static const int CRITICAL_CONFIG_ARRAY_LEN = 3;

static void FreeServiceArg(ServiceArgs *arg)
{
    if (arg == NULL) {
        return;
    }
    for (int i = 0; i < arg->count; ++i) {
        if (arg->argv[i] != NULL) {
            free(arg->argv[i]);
            arg->argv[i] = NULL;
        }
    }
    free(arg->argv);
    arg->argv = NULL;
    arg->count = 0;
}

static void FreeServiceSocket(ServiceSocket *sockopt)
{
    while (sockopt != NULL) {
        ServiceSocket *tmp = sockopt;
        if (tmp->sockFd >= 0) {
            close(tmp->sockFd);
            tmp->sockFd = -1;
        }
        sockopt = sockopt->next;
        free(tmp);
    }
    return;
}

Service *AddService(const char *name)
{
    // check service in group
    if (CheckNodeValid(NODE_TYPE_SERVICES, name) != 0) {
        INIT_LOGI("Service %s not exist in group ", name);
        return NULL;
    }
    InitGroupNode *node = AddGroupNode(NODE_TYPE_SERVICES, name);
    if (node == NULL) {
        INIT_LOGE("Failed to create service name %s", name);
        return NULL;
    }
    Service *service = (Service *)calloc(1, sizeof(Service));
    INIT_ERROR_CHECK(service != NULL, return NULL, "Failed to malloc for service");
    node->data.service = service;
    service->name = node->name;
    service->status = SERVICE_IDLE;
    CPU_ZERO(&service->cpuSet);
    OH_ListInit(&service->extDataNode);
    g_serviceSpace.serviceCount++;
    INIT_LOGV("AddService %s", node->name);
    return service;
}

static void FreeServiceFile(ServiceFile *fileOpt)
{
    while (fileOpt != NULL) {
        ServiceFile *tmp = fileOpt;
        if (tmp->fd >= 0) {
            close(tmp->fd);
            tmp->fd = -1;
        }
        fileOpt = fileOpt->next;
        free(tmp);
    }
    return;
}

void ReleaseService(Service *service)
{
    if (service == NULL) {
        return;
    }
    FreeServiceArg(&service->pathArgs);
    FreeServiceArg(&service->writePidArgs);
    FreeServiceArg(&service->capsArgs);
    FreeServiceArg(&service->permArgs);
    FreeServiceArg(&service->permAclsArgs);

    if (service->servPerm.caps != NULL) {
        free(service->servPerm.caps);
        service->servPerm.caps = NULL;
    }
    service->servPerm.capsCnt = 0;
    if (service->servPerm.gIDArray != NULL) {
        free(service->servPerm.gIDArray);
        service->servPerm.gIDArray = NULL;
    }
    service->servPerm.gIDCnt = 0;
    FreeServiceSocket(service->socketCfg);
    FreeServiceFile(service->fileCfg);

    if (service->apl != NULL) {
        free(service->apl);
        service->apl = NULL;
    }
    for (size_t i = 0; i < JOB_ON_MAX; i++) {
        if (service->serviceJobs.jobsName[i] != NULL) {
            free(service->serviceJobs.jobsName[i]);
        }
        service->serviceJobs.jobsName[i] = NULL;
    }
#ifndef OHOS_LITE
    // clear ext data
    SERVICE_INFO_CTX ctx = {0};
    ctx.serviceName = service->name;
    HookMgrExecute(GetBootStageHookMgr(), INIT_SERVICE_CLEAR, (void *)&ctx, NULL);
#endif
    g_serviceSpace.serviceCount--;
    InitGroupNode *groupNode = GetGroupNode(NODE_TYPE_SERVICES, service->name);
    if (groupNode != NULL) {
        groupNode->data.service = NULL;
    }
    free(service);
}

static char *GetStringValue(const cJSON *json, const char *name, size_t *strLen)
{
    char *fieldStr = cJSON_GetStringValue(cJSON_GetObjectItem(json, name));
    INIT_CHECK(fieldStr != NULL, return NULL);
    *strLen = strlen(fieldStr);
    return fieldStr;
}

cJSON *GetArrayItem(const cJSON *fileRoot, int *arrSize, const char *arrName)
{
    cJSON *arrItem = cJSON_GetObjectItemCaseSensitive(fileRoot, arrName);
    if (!cJSON_IsArray(arrItem)) {
        return NULL;
    }
    *arrSize = cJSON_GetArraySize(arrItem);
    INIT_CHECK_RETURN_VALUE(*arrSize > 0, NULL);
    return arrItem;
}

static int GetServiceArgs(const cJSON *argJson, const char *name, int maxCount, ServiceArgs *args)
{
    INIT_ERROR_CHECK(argJson != NULL, return SERVICE_FAILURE, "Invalid argJson");
    cJSON *obj = cJSON_GetObjectItem(argJson, name);
    INIT_CHECK(obj != NULL, return SERVICE_FAILURE);

    int ret = cJSON_IsArray(obj);
    INIT_ERROR_CHECK(ret, return SERVICE_FAILURE, "Invalid type");
    int count = cJSON_GetArraySize(obj);
    INIT_ERROR_CHECK((count > 0) && (count < maxCount), return SERVICE_FAILURE, "Array size = %d is wrong", count);
    if ((args->argv != NULL) && (args->count > 0)) {
        FreeServiceArg(args);
    }
    args->argv = (char **)malloc((count + 1) * sizeof(char *));
    INIT_ERROR_CHECK(args->argv != NULL, return SERVICE_FAILURE, "Failed to malloc for argv");
    for (int i = 0; i < count + 1; ++i) {
        args->argv[i] = NULL;
    }
    // ServiceArgs have a variety of uses, some requiring a NULL ending, some not
    if (strcmp(name, D_CAPS_STR_IN_CFG) != 0 && strcmp(name, "permission_acls") != 0 &&
        strcmp(name, "permission") != 0) {
        args->count = count + 1;
    } else {
        args->count = count;
    }
    for (int i = 0; i < count; ++i) {
        char *curParam = cJSON_GetStringValue(cJSON_GetArrayItem(obj, i));
        INIT_ERROR_CHECK(curParam != NULL, return SERVICE_FAILURE, "Invalid arg %d", i);
        INIT_ERROR_CHECK(strlen(curParam) <= MAX_ONE_ARG_LEN, return SERVICE_FAILURE, "Arg %s is tool long", curParam);
        args->argv[i] = strdup(curParam);
        INIT_ERROR_CHECK(args->argv[i] != NULL, return SERVICE_FAILURE, "Failed to duplicate argument %s", curParam);
    }
    return SERVICE_SUCCESS;
}

static int GetUid(cJSON *json, uid_t *uid)
{
    INIT_CHECK_RETURN_VALUE(json != NULL, SERVICE_SUCCESS);
    if (cJSON_IsString(json)) {
        char *str = cJSON_GetStringValue(json);
        INIT_ERROR_CHECK(str != NULL, return SERVICE_FAILURE, "Invalid str");
        *uid = DecodeUid(str);
    } else if (cJSON_IsNumber(json)) {
        *uid = (uid_t)cJSON_GetNumberValue(json);
    } else {
        *uid = (uid_t)(-1);
    }
    INIT_CHECK_RETURN_VALUE(*uid != (uid_t)(-1), SERVICE_FAILURE);
    return SERVICE_SUCCESS;
}

static int GetGid(cJSON *json, gid_t *gid, Service *curServ)
{
    INIT_CHECK_RETURN_VALUE(json != NULL, SERVICE_SUCCESS);
    if (cJSON_IsString(json)) {
        char *str = cJSON_GetStringValue(json);
        INIT_ERROR_CHECK(str != NULL, return SERVICE_FAILURE, "Failed to get gid for %s", curServ->name);
        *gid = DecodeGid(str);
    } else if (cJSON_IsNumber(json)) {
        *gid = (gid_t)cJSON_GetNumberValue(json);
    }
    INIT_ERROR_CHECK(*gid != (gid_t)(-1), return SERVICE_FAILURE, "Failed to get gid for %s", curServ->name);
    return SERVICE_SUCCESS;
}

static int GetServiceGids(const cJSON *curArrItem, Service *curServ)
{
    int gidCount;
    cJSON *arrItem = cJSON_GetObjectItemCaseSensitive(curArrItem, GID_STR_IN_CFG);
    if (!arrItem) {
        return SERVICE_SUCCESS;
    } else if (!cJSON_IsArray(arrItem)) {
        gidCount = 1;
    } else {
        gidCount = cJSON_GetArraySize(arrItem);
    }
    INIT_ERROR_CHECK((gidCount != 0) && (gidCount <= NGROUPS_MAX + 1), return SERVICE_FAILURE,
        "Invalid gid count %d", gidCount);
    if (curServ->servPerm.gIDArray != NULL) {
        free(curServ->servPerm.gIDArray);
    }
    curServ->servPerm.gIDArray = (gid_t *)malloc(sizeof(gid_t) * gidCount);
    INIT_ERROR_CHECK(curServ->servPerm.gIDArray != NULL, return SERVICE_FAILURE, "Failed to malloc err=%d", errno);
    curServ->servPerm.gIDCnt = gidCount;

    gid_t gid;
    if (!cJSON_IsArray(arrItem)) {
        int ret = GetGid(arrItem, &gid, curServ);
        INIT_ERROR_CHECK(ret == 0, return SERVICE_FAILURE, "Parse service %s gid failed.", curServ->name);
        curServ->servPerm.gIDArray[0] = gid;
        return SERVICE_SUCCESS;
    }
    int gidArrayIndex = 0;
    for (int i = 0; i < gidCount; ++i) {
        cJSON *item = cJSON_GetArrayItem(arrItem, i);
        int ret = GetGid(item, &gid, curServ);
        if (ret != 0) {
            INIT_LOGW("Parse service %s gid failed from item %s.", curServ->name, cJSON_Print(item));
            continue;
        }
        curServ->servPerm.gIDArray[gidArrayIndex++] = gid;
    }
    curServ->servPerm.gIDCnt = gidArrayIndex;
    return SERVICE_SUCCESS;
}

static int GetServiceAttr(const cJSON *curArrItem, Service *curServ, const char *attrName, int flag,
    int (*processAttr)(Service *curServ, const char *attrName, int value, int flag))
{
    cJSON *filedJ = cJSON_GetObjectItem(curArrItem, attrName);
    if (filedJ == NULL) {
        return SERVICE_SUCCESS;
    }
    INIT_ERROR_CHECK(cJSON_IsNumber(filedJ), return SERVICE_FAILURE,
        "%s is null or is not a number, service name is %s", attrName, curServ->name);
    curServ->attribute &= ~flag;
    int value = (int)cJSON_GetNumberValue(filedJ);
    if (processAttr == NULL) {
        if (value == 1) {
            curServ->attribute |= flag;
        }
        return 0;
    }
    return processAttr(curServ, attrName, value, flag);
}

static int ParseSocketFamily(cJSON *json, ServiceSocket *sockopt)
{
    sockopt->family = AF_UNIX;
    size_t strLen = 0;
    char *stringValue = GetStringValue(json, "family", &strLen);
    INIT_ERROR_CHECK((stringValue != NULL) && (strLen > 0), return SERVICE_FAILURE,
        "Failed to get string for family");
    if (strncmp(stringValue, "AF_UNIX", strLen) == 0) {
        sockopt->family = AF_UNIX;
    } else if (strncmp(stringValue, "AF_NETLINK", strLen) == 0) {
        sockopt->family = AF_NETLINK;
    }
    return 0;
}

static int ParseSocketType(cJSON *json, ServiceSocket *sockopt)
{
    sockopt->type = SOCK_SEQPACKET;
    size_t strLen = 0;
    char *stringValue = GetStringValue(json, "type", &strLen);
    INIT_ERROR_CHECK((stringValue != NULL) && (strLen > 0), return SERVICE_FAILURE,
        "Failed to get string for type");
    if (strncmp(stringValue, "SOCK_SEQPACKET", strLen) == 0) {
        sockopt->type = SOCK_SEQPACKET;
    } else if (strncmp(stringValue, "SOCK_STREAM", strLen) == 0) {
        sockopt->type = SOCK_STREAM;
    } else if (strncmp(stringValue, "SOCK_DGRAM", strLen) == 0) {
        sockopt->type = SOCK_DGRAM;
    }
    return 0;
}

static int ParseSocketProtocol(cJSON *json, ServiceSocket *sockopt)
{
    sockopt->protocol = 0;
    size_t strLen = 0;
    char *stringValue = GetStringValue(json, "protocol", &strLen);
    INIT_ERROR_CHECK((stringValue != NULL) && (strLen > 0), return SERVICE_FAILURE,
        "Failed to get string for protocol");
    if (strncmp(stringValue, "default", strLen) == 0) {
        sockopt->protocol = 0;
    } else if (strncmp(stringValue, "NETLINK_KOBJECT_UEVENT", strLen) == 0) {
#ifndef __LITEOS_A__
        sockopt->protocol = NETLINK_KOBJECT_UEVENT;
#else
        return -1;
#endif
    }
    return 0;
}

static int ParseSocketOption(cJSON *json, ServiceSocket *sockopt)
{
    sockopt->option = 0;
    unsigned int tempType = 0;
    int typeCnt = 0;
    char *stringValue = NULL;
    cJSON *typeItem = NULL;
    cJSON *typeArray = GetArrayItem(json, &typeCnt, "option");
    INIT_CHECK((typeArray != NULL) && (typeCnt > 0), return 0);
    for (int i = 0; i < typeCnt; ++i) {
        typeItem = cJSON_GetArrayItem(typeArray, i);
        INIT_CHECK_RETURN_VALUE(cJSON_IsString(typeItem), SERVICE_FAILURE);
        stringValue = cJSON_GetStringValue(typeItem);
        INIT_ERROR_CHECK(stringValue != NULL, return SERVICE_FAILURE, "Failed to get string for type");
        if (strncmp(stringValue, "SOCKET_OPTION_PASSCRED", strlen(stringValue)) == 0) {
            sockopt->option |= SOCKET_OPTION_PASSCRED;
        } else if (strncmp(stringValue, "SOCKET_OPTION_RCVBUFFORCE", strlen(stringValue)) == 0) {
            sockopt->option |= SOCKET_OPTION_RCVBUFFORCE;
        } else if (strncmp(stringValue, "SOCK_CLOEXEC", strlen(stringValue)) == 0) {
            tempType |= SOCK_CLOEXEC;
        } else if (strncmp(stringValue, "SOCK_NONBLOCK", strlen(stringValue)) == 0) {
            tempType |= SOCK_NONBLOCK;
        }
    }
    if (tempType != 0) {
        sockopt->type |= tempType;
    }
    return 0;
}

static int AddServiceSocket(cJSON *json, Service *service)
{
    size_t strLen = 0;
    char* fieldStr = GetStringValue(json, "name", &strLen);
    INIT_ERROR_CHECK(fieldStr != NULL, return SERVICE_FAILURE, "Failed to get socket name");
    INIT_ERROR_CHECK(strLen <= MAX_SERVICE_NAME, return SERVICE_FAILURE, "socket name exceeds length limit");
    ServiceSocket *sockopt = (ServiceSocket *)calloc(1, sizeof(ServiceSocket) + strLen + 1);
    INIT_INFO_CHECK(sockopt != NULL, return SERVICE_FAILURE, "Failed to malloc for service %s", service->name);

    int ret = strcpy_s(sockopt->name, strLen + 1, fieldStr);
    INIT_INFO_CHECK(ret == 0, free(sockopt); sockopt = NULL; return SERVICE_FAILURE,
        "Failed to copy socket name %s", fieldStr);
    sockopt->sockFd = -1;
    sockopt->watcher = NULL;

    ret = ParseSocketFamily(json, sockopt);
    INIT_ERROR_CHECK(ret == 0, free(sockopt); sockopt = NULL; return SERVICE_FAILURE,
        "Failed to parse socket family");
    ret = ParseSocketType(json, sockopt);
    INIT_ERROR_CHECK(ret == 0, free(sockopt); sockopt = NULL; return SERVICE_FAILURE,
        "Failed to parse socket type");
    ret = ParseSocketProtocol(json, sockopt);
    INIT_ERROR_CHECK(ret == 0, free(sockopt); sockopt = NULL; return SERVICE_FAILURE,
        "Failed to parse socket protocol");

    char *stringValue = GetStringValue(json, "permissions", &strLen);
    INIT_ERROR_CHECK((stringValue != NULL) && (strLen > 0), free(sockopt); sockopt = NULL; return SERVICE_FAILURE,
        "Failed to get string for permissions");
    sockopt->perm = strtoul(stringValue, 0, OCTAL_BASE);
    stringValue = GetStringValue(json, "uid", &strLen);
    INIT_ERROR_CHECK((stringValue != NULL) && (strLen > 0), free(sockopt); sockopt = NULL; return SERVICE_FAILURE,
        "Failed to get string for uid");
    sockopt->uid = DecodeUid(stringValue);
    stringValue = GetStringValue(json, "gid", &strLen);
    INIT_ERROR_CHECK((stringValue != NULL) && (strLen > 0), free(sockopt); sockopt = NULL; return SERVICE_FAILURE,
        "Failed to get string for gid");
    sockopt->gid = DecodeGid(stringValue);
    INIT_ERROR_CHECK((sockopt->uid != (uid_t)-1) && (sockopt->gid != (uid_t)-1),
        free(sockopt); sockopt = NULL; return SERVICE_FAILURE, "Invalid uid or gid");
    ret = ParseSocketOption(json, sockopt);
    INIT_ERROR_CHECK(ret == 0, free(sockopt); sockopt = NULL; return SERVICE_FAILURE,
        "Failed to parse socket option");

    sockopt->next = NULL;
    if (service->socketCfg == NULL) {
        service->socketCfg = sockopt;
    } else {
        sockopt->next = service->socketCfg->next;
        service->socketCfg->next = sockopt;
    }
    return SERVICE_SUCCESS;
}

static int ParseServiceSocket(const cJSON *curArrItem, Service *curServ)
{
    int sockCnt = 0;
    cJSON *filedJ = GetArrayItem(curArrItem, &sockCnt, "socket");
    INIT_CHECK(filedJ != NULL && sockCnt > 0, return SERVICE_FAILURE);

    CloseServiceSocket(curServ);
    FreeServiceSocket(curServ->socketCfg);
    int ret = 0;
    curServ->socketCfg = NULL;
    for (int i = 0; i < sockCnt; ++i) {
        cJSON *sockJ = cJSON_GetArrayItem(filedJ, i);
        ret = AddServiceSocket(sockJ, curServ);
        if (ret != 0) {
            return ret;
        }
    }
    if (IsOnDemandService(curServ)) {
        ret = CreateServiceSocket(curServ);
    }
    return ret;
}

static int AddServiceFile(cJSON *json, Service *service)
{
    if (!cJSON_IsString(json) || !cJSON_GetStringValue(json)) {
        return SERVICE_FAILURE;
    }
    char *fileStr = cJSON_GetStringValue(json);
    char *opt[FILE_OPT_NUMS] = {
        NULL,
    };
    int num = SplitString(fileStr, " ", opt, FILE_OPT_NUMS);
    if (num != FILE_OPT_NUMS) {
        return SERVICE_FAILURE;
    }
    if (opt[SERVICE_FILE_NAME] == NULL || opt[SERVICE_FILE_FLAGS] == NULL || opt[SERVICE_FILE_PERM] == NULL ||
        opt[SERVICE_FILE_UID] == NULL || opt[SERVICE_FILE_GID] == NULL) {
        INIT_LOGE("Invalid file opt");
        return SERVICE_FAILURE;
    }
    ServiceFile *fileOpt = (ServiceFile *)calloc(1, sizeof(ServiceFile) + strlen(opt[SERVICE_FILE_NAME]) + 1);
    INIT_INFO_CHECK(fileOpt != NULL, return SERVICE_FAILURE, "Failed to calloc for file %s", opt[SERVICE_FILE_NAME]);
    int ret = strcpy_s(fileOpt->fileName, strlen(opt[SERVICE_FILE_NAME]) + 1, opt[SERVICE_FILE_NAME]);
    INIT_INFO_CHECK(ret == 0, free(fileOpt);
        return SERVICE_FAILURE, "Failed to copy file name %s", opt[SERVICE_FILE_NAME]);
    if (strcmp(opt[SERVICE_FILE_FLAGS], "rd") == 0) {
        fileOpt->flags = O_RDONLY;
    } else if (strcmp(opt[SERVICE_FILE_FLAGS], "wd") == 0) {
        fileOpt->flags = O_WRONLY;
    } else if (strcmp(opt[SERVICE_FILE_FLAGS], "rw") == 0) {
        fileOpt->flags = O_RDWR;
    } else {
        INIT_LOGE("Failed file flags %s", opt[SERVICE_FILE_FLAGS]);
        return SERVICE_FAILURE;
    }
    fileOpt->perm = strtoul(opt[SERVICE_FILE_PERM], 0, OCTAL_BASE);
    fileOpt->uid = DecodeUid(opt[SERVICE_FILE_UID]);
    fileOpt->gid = DecodeGid(opt[SERVICE_FILE_GID]);
    if (fileOpt->uid == (uid_t)-1 || fileOpt->gid == (gid_t)-1) {
        free(fileOpt);
        fileOpt = NULL;
        INIT_LOGE("Invalid uid or gid");
        return SERVICE_FAILURE;
    }
    fileOpt->fd = -1;
    fileOpt->next = NULL;
    if (service->fileCfg == NULL) {
        service->fileCfg = fileOpt;
    } else {
        fileOpt->next = service->fileCfg->next;
        service->fileCfg->next = fileOpt;
    }
    return SERVICE_SUCCESS;
}

static int ParseServiceFile(const cJSON *curArrItem, Service *curServ)
{
    int fileCnt = 0;
    cJSON *filedJ = GetArrayItem(curArrItem, &fileCnt, "file");
    INIT_CHECK(filedJ != NULL && fileCnt > 0, return SERVICE_FAILURE);
    FreeServiceFile(curServ->fileCfg);
    int ret = 0;
    curServ->fileCfg = NULL;
    for (int i = 0; i < fileCnt; ++i) {
        cJSON *fileJ = cJSON_GetArrayItem(filedJ, i);
        ret = AddServiceFile(fileJ, curServ);
        if (ret != 0) {
            break;
        }
    }
    return ret;
}

static int GetServiceOnDemand(const cJSON *curArrItem, Service *curServ)
{
    cJSON *item = cJSON_GetObjectItem(curArrItem, "ondemand");
    if (item == NULL) {
        return SERVICE_SUCCESS;
    }

    INIT_ERROR_CHECK(cJSON_IsBool(item), return SERVICE_FAILURE,
        "Service : %s ondemand value only support bool.", curServ->name);
    curServ->attribute &= ~SERVICE_ATTR_ONDEMAND;

    INIT_INFO_CHECK(cJSON_IsTrue(item), return SERVICE_SUCCESS,
        "Service : %s ondemand value is false, it should be pulled up by init", curServ->name);
    if (curServ->attribute & SERVICE_ATTR_CRITICAL) {
        INIT_LOGE("Service : %s is invalid which has both critical and ondemand attribute", curServ->name);
        return SERVICE_FAILURE;
    }

    curServ->attribute |= SERVICE_ATTR_ONDEMAND;
    return SERVICE_SUCCESS;
}

static int GetMapValue(const char *name, const InitArgInfo *infos, int argNum, int defValue)
{
    if ((argNum == 0) || (infos == NULL) || (name == NULL)) {
        return defValue;
    }
    for (int i = 0; i < argNum; i++) {
        if (strcmp(infos[i].name, name) == 0) {
            return infos[i].value;
        }
    }
    return defValue;
}

static int GetServiceMode(Service *service, const cJSON *json)
{
    const InitArgInfo startModeMap[] = {
        {"condition", START_MODE_CONDITION},
        {"boot", START_MODE_BOOT},
        {"normal", START_MODE_NORMAL}
    };
    const InitArgInfo endModeMap[] = {
        {"pre-fork", END_PRE_FORK},
        {"after-fork", END_AFTER_FORK},
        {"after-exec", END_AFTER_EXEC},
        {"ready", END_RECV_READY}
    };
    service->startMode = START_MODE_NORMAL;
    service->endMode = END_AFTER_EXEC;
    char *value = cJSON_GetStringValue(cJSON_GetObjectItem(json, "start-mode"));
    if (value != NULL) {
        service->startMode = GetMapValue(value,
            (InitArgInfo *)startModeMap, (int)ARRAY_LENGTH(startModeMap), START_MODE_NORMAL);
    }
    value = cJSON_GetStringValue(cJSON_GetObjectItem(json, "end-mode"));
    if (value != NULL) {
        service->endMode = GetMapValue(value,
            (InitArgInfo *)endModeMap, (int)ARRAY_LENGTH(endModeMap), END_AFTER_EXEC);
    }
    return 0;
}

static int GetServiceJobs(Service *service, cJSON *json)
{
    const char *jobTypes[] = {
        "on-boot", "on-start", "on-stop", "on-restart"
    };
    for (int i = 0; i < (int)ARRAY_LENGTH(jobTypes); i++) {
        char *jobName = cJSON_GetStringValue(cJSON_GetObjectItem(json, jobTypes[i]));
        if (jobName != NULL) {
            if (service->serviceJobs.jobsName[i] != NULL) {
                DelGroupNode(NODE_TYPE_JOBS, service->serviceJobs.jobsName[i]);
                free(service->serviceJobs.jobsName[i]);
            }
            service->serviceJobs.jobsName[i] = strdup(jobName);
            // save job name for group job check
            AddGroupNode(NODE_TYPE_JOBS, jobName);
        }
    }
    return SERVICE_SUCCESS;
}

int  GetCritical(const cJSON *curArrItem, Service *curServ, const char *attrName, int flag)
{
    int criticalSize = 0;
    curServ->crashCount = CRITICAL_DEFAULT_CRASH_COUNT;
    curServ->crashTime = CRITICAL_DEFAULT_CRASH_TIME;
    cJSON *arrItem = cJSON_GetObjectItem(curArrItem, attrName);
    if (arrItem == NULL) {
        return SERVICE_SUCCESS;
    }

    if (cJSON_IsNumber(arrItem)) {
        return GetServiceAttr(curArrItem, curServ, attrName, flag, NULL);
    } else if (cJSON_IsArray(arrItem)) {
        criticalSize = cJSON_GetArraySize(arrItem);
        cJSON *attrItem = cJSON_GetArrayItem(arrItem, 0); // 0 : critical attribute index
        if (attrItem == NULL || !cJSON_IsNumber(attrItem)) {
            INIT_LOGE("%s critical invalid", curServ->name);
            return SERVICE_FAILURE;
        }
        int attrValue = (int)cJSON_GetNumberValue(attrItem);
        curServ->attribute &= ~flag;
        if (criticalSize == 1) {
            if (attrValue == 1) {
                curServ->attribute |= flag;
            }
        } else if (criticalSize == CRITICAL_CONFIG_ARRAY_LEN) {
            cJSON *crashCountItem = cJSON_GetArrayItem(arrItem, 1); // 1 : critical crash count index
            INIT_ERROR_CHECK(crashCountItem != NULL, return SERVICE_FAILURE, "%s critical invalid", curServ->name);
            int value = (int)cJSON_GetNumberValue(crashCountItem);
            INIT_ERROR_CHECK(value > 0, return SERVICE_FAILURE, "%s critical crashc ount invalid", curServ->name);
            curServ->crashCount = value;

            cJSON *crashTimeItem = cJSON_GetArrayItem(arrItem, 2); // 2 : critical crash time index
            INIT_ERROR_CHECK(crashTimeItem != NULL, return SERVICE_FAILURE, "%s critical invalid", curServ->name);
            value = (int)cJSON_GetNumberValue(crashTimeItem);
            INIT_ERROR_CHECK(value > 0, return SERVICE_FAILURE, "%s critical crash time invalid", curServ->name);
            curServ->crashTime = value;

            if (attrValue == 1) {
                curServ->attribute |= flag;
            }
        } else {
            curServ->attribute &= ~flag;
            INIT_LOGE("%s critical param invalid", curServ->name);
            return SERVICE_FAILURE;
        }
    } else {
        INIT_LOGE("%s critical type error", curServ->name);
        return SERVICE_FAILURE;
    }
    return SERVICE_SUCCESS;
}

static int GetCpuArgs(const cJSON *argJson, const char *name, Service *service)
{
    INIT_ERROR_CHECK(argJson != NULL, return SERVICE_FAILURE, "Invalid argJson");
    cJSON *obj = cJSON_GetObjectItem(argJson, name);
    INIT_CHECK(obj != NULL, return SERVICE_FAILURE);

    int ret = cJSON_IsArray(obj);
    INIT_ERROR_CHECK(ret, return SERVICE_FAILURE, "Invalid type");
    int count = cJSON_GetArraySize(obj);
    int cpus = -1;
    int cpuNumMax = sysconf(_SC_NPROCESSORS_CONF);
    for (int i = 0; i < count; ++i) {
        cJSON *item = cJSON_GetArrayItem(obj, i);
        INIT_ERROR_CHECK(item != NULL, return SERVICE_FAILURE, "prase invalid");
        cpus = (int)cJSON_GetNumberValue(item);
        if (cpuNumMax <= cpus) {
            INIT_LOGW("%s core number %d of CPU cores does not exist", service->name, cpus);
            continue;
        }
        if (CPU_ISSET(cpus, &service->cpuSet)) {
            continue;
        }
        CPU_SET(cpus, &service->cpuSet);
    }
    return SERVICE_SUCCESS;
}

static int GetServiceSandbox(const cJSON *curItem, Service *service)
{
    cJSON *item = cJSON_GetObjectItem(curItem, "sandbox");
    if (item == NULL) {
        return SERVICE_SUCCESS;
    }

    INIT_ERROR_CHECK(cJSON_IsNumber(item), return SERVICE_FAILURE,
        "Service : %s sandbox value only support number.", service->name);
    int isSandbox = (int)cJSON_GetNumberValue(item);
    if (isSandbox == 0) {
        MarkServiceWithoutSandbox(service);
    } else {
        MarkServiceWithSandbox(service);
    }

    return SERVICE_SUCCESS;
}

#ifdef ASAN_DETECTOR
static int WrapPath(char *dest, size_t len, char *source, int i)
{
    char *q = source;
    char *p = dest;
    if (q == NULL) {
        return -1;
    }

    while (*p != '\0') {
        if (--i <= 0) {
            int ret = memmove_s(p + strlen(source), len, p, strlen(p) + 1);
            INIT_ERROR_CHECK(ret == 0, return -1, "Dest is %s, source is %s, ret is %d.", dest, source, ret);
            break;
        }
        p++;
    }
    while (*q != '\0') {
        *p = *q;
        p++;
        q++;
    }

    return 0;
}

static int GetWrapServiceNameValue(const char *serviceName)
{
    char wrapServiceNameKey[PARAM_VALUE_LEN_MAX] = {0};
    char wrapServiceNameValue[PARAM_VALUE_LEN_MAX] = {0};
    unsigned int valueLen = PARAM_VALUE_LEN_MAX;

    int len = sprintf_s(wrapServiceNameKey, PARAM_VALUE_LEN_MAX, "wrap.%s", serviceName);
    INIT_INFO_CHECK(len > 0 && (len < PARAM_VALUE_LEN_MAX), return -1, "Invalid to format wrapServiceNameKey");

    int ret = SystemReadParam(wrapServiceNameKey, wrapServiceNameValue, &valueLen);
    INIT_INFO_CHECK(ret == 0, return -1, "Not wrap %s.", serviceName);
    INIT_LOGI("Asan: GetParameter %s the value is %s.", serviceName, wrapServiceNameValue);
    return 0;
}

void SetServicePathWithAsan(Service *service)
{
    char tmpPathName[MAX_ONE_ARG_LEN] = {0};
    int anchorPos = -1;

    if (GetWrapServiceNameValue(service->name) != 0) {
        return;
    }

    int ret = strcpy_s(tmpPathName, MAX_ONE_ARG_LEN, service->pathArgs.argv[0]);
    INIT_ERROR_CHECK(ret == 0, return, "Asan: failed to copy service path %s", service->pathArgs.argv[0]);

    if (strstr(tmpPathName, "/system/bin") != NULL) {
        anchorPos = strlen("/system") + 1;
    } else if (strstr(tmpPathName, "/vendor/bin") != NULL) {
        anchorPos = strlen("/vendor") + 1;
    } else {
        INIT_LOGE("Asan: %s is not a system or vendor binary", tmpPathName);
        return;
    }

    ret = WrapPath(tmpPathName, MAX_ONE_ARG_LEN, "/asan", anchorPos);
    INIT_ERROR_CHECK(ret == 0, return, "Asan: failed to add asan path.");
    free(service->pathArgs.argv[0]);
    service->pathArgs.argv[0] = strdup(tmpPathName);
    INIT_LOGI("Asan: replace module %s with %s successfully.", service->name, service->pathArgs.argv[0]);

    return;
}
#endif

static void ParseOneServiceArgs(const cJSON *curItem, Service *service)
{
    (void)GetServiceArgs(curItem, "writepid", MAX_WRITEPID_FILES, &service->writePidArgs);
    (void)GetServiceArgs(curItem, D_CAPS_STR_IN_CFG, MAX_WRITEPID_FILES, &service->capsArgs);
    (void)GetServiceArgs(curItem, "permission", MAX_WRITEPID_FILES, &service->permArgs);
    (void)GetServiceArgs(curItem, "permission_acls", MAX_WRITEPID_FILES, &service->permAclsArgs);
    size_t strLen = 0;
    char *fieldStr = GetStringValue(curItem, APL_STR_IN_CFG, &strLen);
    if (fieldStr != NULL) {
        if (service->apl != NULL) {
            free(service->apl);
        }
        service->apl = strdup(fieldStr);
        INIT_CHECK(service->apl != NULL, return);
    }
    (void)GetCpuArgs(curItem, CPU_CORE_STR_IN_CFG, service);
}

int ParseOneService(const cJSON *curItem, Service *service)
{
    INIT_CHECK_RETURN_VALUE(curItem != NULL && service != NULL, SERVICE_FAILURE);
    int ret = GetServiceArgs(curItem, "path", MAX_PATH_ARGS_CNT, &service->pathArgs);
    INIT_ERROR_CHECK(ret == 0, return SERVICE_FAILURE, "Failed to get path for service %s", service->name);
    if ((service->pathArgs.count > 0) && IsForbidden(service->pathArgs.argv[0])) {
        INIT_LOGE("Service %s is forbidden.", service->name);
        return SERVICE_FAILURE;
    }
#ifdef ASAN_DETECTOR
    SetServicePathWithAsan(service);
#endif
    ret = GetUid(cJSON_GetObjectItem(curItem, UID_STR_IN_CFG), &service->servPerm.uID);
    INIT_ERROR_CHECK(ret == 0, return SERVICE_FAILURE, "Failed to get uid for service %s", service->name);
    ret = GetServiceGids(curItem, service);
    INIT_ERROR_CHECK(ret == 0, return SERVICE_FAILURE, "Failed to get gid for service %s", service->name);

    ret = GetServiceAttr(curItem, service, ONCE_STR_IN_CFG, SERVICE_ATTR_ONCE, NULL);
    INIT_ERROR_CHECK(ret == 0, return SERVICE_FAILURE, "Failed to get once flag for service %s", service->name);
    ret = GetServiceAttr(curItem, service, IMPORTANT_STR_IN_CFG, SERVICE_ATTR_IMPORTANT, SetImportantValue);
    INIT_ERROR_CHECK(ret == 0, return SERVICE_FAILURE, "Failed to get import flag for service %s", service->name);
    ret = GetCritical(curItem, service, CRITICAL_STR_IN_CFG, SERVICE_ATTR_CRITICAL);
    INIT_ERROR_CHECK(ret == 0, return SERVICE_FAILURE, "Failed to get critical flag for service %s", service->name);
    ret = GetServiceAttr(curItem, service, DISABLED_STR_IN_CFG, SERVICE_ATTR_DISABLED, NULL);
    INIT_ERROR_CHECK(ret == 0, return SERVICE_FAILURE, "Failed to get disabled flag for service %s", service->name);
    ret = GetServiceAttr(curItem, service, CONSOLE_STR_IN_CFG, SERVICE_ATTR_CONSOLE, NULL);
    INIT_ERROR_CHECK(ret == 0, return SERVICE_FAILURE, "Failed to get console for service %s", service->name);

    ParseOneServiceArgs(curItem, service);
    ret = GetServiceSandbox(curItem, service);
    INIT_ERROR_CHECK(ret == 0, return SERVICE_FAILURE, "Failed to get sandbox for service %s", service->name);
    ret = GetServiceCaps(curItem, service);
    INIT_ERROR_CHECK(ret == 0, return SERVICE_FAILURE, "Failed to get caps for service %s", service->name);
    ret = GetServiceOnDemand(curItem, service);
    INIT_ERROR_CHECK(ret == 0, return SERVICE_FAILURE, "Failed to get ondemand flag for service %s", service->name);
    ret = GetServiceMode(service, curItem);
    INIT_ERROR_CHECK(ret == 0, return SERVICE_FAILURE, "Failed to get start/end mode for service %s", service->name);
    ret = GetServiceJobs(service, cJSON_GetObjectItem(curItem, "jobs"));
    INIT_ERROR_CHECK(ret == 0, return SERVICE_FAILURE, "Failed to get jobs for service %s", service->name);
    return ret;
}

#ifndef OHOS_LITE
/**
 * Service Config File Parse Hooking
 */
static int ServiceParseHookWrapper(const HOOK_INFO *hookInfo, void *executionContext)
{
    SERVICE_PARSE_CTX *serviceParseContext = (SERVICE_PARSE_CTX *)executionContext;
    ServiceParseHook realHook = (ServiceParseHook)hookInfo->hookCookie;

    realHook(serviceParseContext);
    return 0;
};

int InitAddServiceParseHook(ServiceParseHook hook)
{
    HOOK_INFO info;

    info.stage = INIT_SERVICE_PARSE;
    info.prio = 0;
    info.hook = ServiceParseHookWrapper;
    info.hookCookie = (void *)hook;

    return HookMgrAddEx(GetBootStageHookMgr(), &info);
}

static void ParseServiceHookExecute(const char *name, const cJSON *serviceNode)
{
    SERVICE_PARSE_CTX context;

    context.serviceName = name;
    context.serviceNode = serviceNode;

    (void)HookMgrExecute(GetBootStageHookMgr(), INIT_SERVICE_PARSE, (void *)(&context), NULL);
}
#endif

static void ProcessConsoleEvent(const WatcherHandle handler, int fd, uint32_t *events, const void *context)
{
    Service *service = (Service *)context;
    LE_RemoveWatcher(LE_GetDefaultLoop(), (WatcherHandle)handler);
    if (fd < 0 || service == NULL) {
        INIT_LOGE("Process console event with invalid arguments");
        return;
    }
    // Since we've got event from console device
    // the fd related to '/dev/console' does not need anymore, close it.
    close(fd);
    if (strcmp(service->name, "console") != 0) {
        INIT_LOGE("Process console event with invalid service %s, only console service should do this", service->name);
        return;
    }

    // Check if debuggable
    char value[MAX_BUFFER_LEN] = {0};
    unsigned int len = MAX_BUFFER_LEN;
    if (SystemReadParam("const.debuggable", value, &len) != 0) {
        INIT_LOGE("Failed to read parameter \'const.debuggable\', prevent console service starting");
        return;
    }

    int isDebug = StringToInt(value, 0);
    if (isDebug != 1) {
        INIT_LOGI("Non-debuggable system, prevent console service starting");
        return;
    }
    if (ServiceStart(service) != SERVICE_SUCCESS) {
        INIT_LOGE("Start console service failed");
    }
    return;
}

static int AddFileDescriptorToWatcher(int fd, Service *service)
{
    if (fd < 0 || service == NULL) {
        return -1;
    }

    WatcherHandle watcher = NULL;
    LE_WatchInfo info = {};
    info.fd = fd;
    info.flags = 0; // WATCHER_ONCE;
    info.events = Event_Read;
    info.processEvent = ProcessConsoleEvent;
    int ret = LE_StartWatcher(LE_GetDefaultLoop(), &watcher, &info, service);
    if (ret != LE_SUCCESS) {
        INIT_LOGE("Failed to watch console device for service \' %s \'", service->name);
        return -1;
    }
    return 0;
}

int WatchConsoleDevice(Service *service)
{
    if (service == NULL) {
        return -1;
    }

    int fd = open("/dev/console", O_RDWR);
    if (fd < 0) {
        if (errno == ENOENT) {
            INIT_LOGW("/dev/console is not exist, wait for it...");
            WaitForFile("/dev/console", WAIT_MAX_SECOND);
        } else {
            INIT_LOGE("Failed to open /dev/console, err = %d", errno);
            return -1;
        }
        fd = open("/dev/console", O_RDWR);
        if (fd < 0) {
            INIT_LOGW("Failed to open /dev/console after try 1 time, err = %d", errno);
            return -1;
        }
    }

    if (AddFileDescriptorToWatcher(fd, service) < 0) {
        close(fd);
        return -1;
    }
    return 0;
}

void ParseAllServices(const cJSON *fileRoot)
{
    int servArrSize = 0;
    cJSON *serviceArr = GetArrayItem(fileRoot, &servArrSize, SERVICES_ARR_NAME_IN_JSON);
    INIT_CHECK(serviceArr != NULL, return);

    INIT_ERROR_CHECK(servArrSize <= MAX_SERVICES_CNT_IN_FILE, return,
        "Too many services[cnt %d] detected, should not exceed %d.",
        servArrSize, MAX_SERVICES_CNT_IN_FILE);

    size_t strLen = 0;
    for (int i = 0; i < servArrSize; ++i) {
        cJSON *curItem = cJSON_GetArrayItem(serviceArr, i);
        char *fieldStr = GetStringValue(curItem, "name", &strLen);
        if (fieldStr == NULL) {
            INIT_LOGE("Failed to get service name");
            continue;
        }
        Service *service = GetServiceByName(fieldStr);
        if (service != NULL) {
            INIT_LOGE("Service \' %s \' already exist", fieldStr);
            continue;
        }
        service = AddService(fieldStr);
        if (service == NULL) {
            INIT_LOGE("Failed to create service name %s", fieldStr);
            continue;
        }
        service->pid = -1;
        int ret = ParseOneService(curItem, service);
        if (ret != SERVICE_SUCCESS) {
            ReleaseService(service);
            service = NULL;
            continue;
        }
        if (ParseServiceSocket(curItem, service) != SERVICE_SUCCESS) {
            FreeServiceSocket(service->socketCfg);
            service->socketCfg = NULL;
        }
        if (ParseServiceFile(curItem, service) != SERVICE_SUCCESS) {
            FreeServiceFile(service->fileCfg);
            service->fileCfg = NULL;
        }

        // Watch "/dev/console" node for starting console service ondemand.
        if ((strcmp(service->name, "console") == 0) && IsOnDemandService(service)) {
            if (WatchConsoleDevice(service) < 0) {
                INIT_LOGW("Failed to watch \'/dev/console\' device");
            }
        }
#ifndef OHOS_LITE
        /*
         * Execute service parsing hooks
         */
        ParseServiceHookExecute(fieldStr, curItem);
#endif

        ret = GetCmdLinesFromJson(cJSON_GetObjectItem(curItem, "onrestart"), &service->restartArg);
        INIT_CHECK(ret == SERVICE_SUCCESS, service->restartArg = NULL);
    }
}

static Service *GetServiceByExtServName(const char *fullServName)
{
    INIT_ERROR_CHECK(fullServName != NULL, return NULL, "Failed get parameters");
    Service *service = GetServiceByName(fullServName);
    if (service != NULL) { // none parameter in fullServName
        return service;
    }
    char *tmpServName = strdup(fullServName);
    char *dstPtr[MAX_PATH_ARGS_CNT] = {NULL};
    int returnCount = SplitString(tmpServName, "|", dstPtr, MAX_PATH_ARGS_CNT);
    if (returnCount == 0) {
        free(tmpServName);
        return NULL;
    }
    service = GetServiceByName(dstPtr[0]);
    if (service == NULL) {
        free(tmpServName);
        return NULL;
    }
    service->extraArgs.count = service->pathArgs.count + returnCount - 1;
    service->extraArgs.argv = (char **)calloc(service->extraArgs.count + 1, sizeof(char *));
    INIT_ERROR_CHECK(service->extraArgs.argv != NULL, free(tmpServName);
        return NULL, "Failed calloc err=%d", errno);
    int argc;
    for (argc = 0; argc < (service->pathArgs.count - 1); argc++) {
        service->extraArgs.argv[argc] = strdup(service->pathArgs.argv[argc]);
    }
    int extArgc;
    for (extArgc = 0; extArgc < (returnCount - 1); extArgc++) {
        service->extraArgs.argv[extArgc + argc] = strdup(dstPtr[extArgc + 1]);
    }
    service->extraArgs.argv[service->extraArgs.count] = NULL;
    free(tmpServName);
    return service;
}

void StartServiceByName(const char *servName)
{
    INIT_LOGI("Start service %s", servName);
    Service *service = GetServiceByName(servName);
    if (service == NULL) {
        service = GetServiceByExtServName(servName);
    }
    INIT_ERROR_CHECK(service != NULL, return, "Cannot find service %s.", servName);

    if (ServiceStart(service) != SERVICE_SUCCESS) {
        INIT_LOGE("Service %s start failed!", servName);
    }
    // After starting, clear the extra parameters.
    FreeStringVector(service->extraArgs.argv, service->extraArgs.count);
    service->extraArgs.argv = NULL;
    service->extraArgs.count = 0;
    return;
}

void StopServiceByName(const char *servName)
{
    Service *service = GetServiceByName(servName);
    INIT_ERROR_CHECK(service != NULL, return, "Cannot find service %s.", servName);

    if (ServiceStop(service) != SERVICE_SUCCESS) {
        INIT_LOGE("Service %s stop failed!", servName);
    }
    return;
}

void StopAllServices(int flags, const char **exclude, int size,
    int (*filter)(const Service *service, const char **exclude, int size))
{
    Service *service = GetServiceByName("appspawn");
    if (service != NULL && service->pid > 0) { // notify appspawn stop
#ifndef STARTUP_INIT_TEST
        kill(service->pid, SIGTERM);
        waitpid(service->pid, 0, 0);
        service->pid = -1;
#endif
    }

    InitGroupNode *node = GetNextGroupNode(NODE_TYPE_SERVICES, NULL);
    while (node != NULL) {
        Service *service = node->data.service;
        if (service == NULL) {
            node = GetNextGroupNode(NODE_TYPE_SERVICES, node);
            continue;
        }
        INIT_LOGI("StopAllServices stop service %s ", service->name);
        if (filter != NULL && filter(service, exclude, size) != 0) {
            node = GetNextGroupNode(NODE_TYPE_SERVICES, node);
            continue;
        }
        service->attribute |= (flags & SERVICE_ATTR_INVALID);
        int ret = ServiceStop(service);
        if (ret != SERVICE_SUCCESS) {
            INIT_LOGE("Service %s stop failed!", service->name);
        }
        node = GetNextGroupNode(NODE_TYPE_SERVICES, node);
    }
}

Service *GetServiceByPid(pid_t pid)
{
    InitGroupNode *node = GetNextGroupNode(NODE_TYPE_SERVICES, NULL);
    while (node != NULL) {
        Service *service = node->data.service;
        if (service != NULL && service->pid == pid) {
            return service;
        }
        node = GetNextGroupNode(NODE_TYPE_SERVICES, node);
    }
    return NULL;
}

Service *GetServiceByName(const char *servName)
{
    INIT_ERROR_CHECK(servName != NULL, return NULL, "Failed get servName");
    InitGroupNode *groupNode = GetGroupNode(NODE_TYPE_SERVICES, servName);
    if (groupNode != NULL) {
        return groupNode->data.service;
    }
    return NULL;
}

void LoadAccessTokenId(void)
{
    GetAccessToken();
}

int GetKillServiceSig(const char *name)
{
    if (strcmp(name, "appspawn") == 0 || strcmp(name, "nwebspawn") == 0) {
        return SIGTERM;
    }
    return SIGKILL;
}