mirror of http://git.nssm.cc/nssm/nssm.git
You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
1881 lines
66 KiB
C++
1881 lines
66 KiB
C++
#include "nssm.h"
|
|
|
|
/* This is explicitly a wide string. */
|
|
#define NSSM_LOGON_AS_SERVICE_RIGHT L"SeServiceLogonRight"
|
|
|
|
bool is_admin;
|
|
bool use_critical_section;
|
|
|
|
extern imports_t imports;
|
|
extern settings_t settings[];
|
|
|
|
const TCHAR *exit_action_strings[] = { _T("Restart"), _T("Ignore"), _T("Exit"), _T("Suicide"), 0 };
|
|
const TCHAR *startup_strings[] = { _T("SERVICE_AUTO_START"), _T("SERVICE_DELAYED_AUTO_START"), _T("SERVICE_DEMAND_START"), _T("SERVICE_DISABLED"), 0 };
|
|
const TCHAR *priority_strings[] = { _T("REALTIME_PRIORITY_CLASS"), _T("HIGH_PRIORITY_CLASS"), _T("ABOVE_NORMAL_PRIORITY_CLASS"), _T("NORMAL_PRIORITY_CLASS"), _T("BELOW_NORMAL_PRIORITY_CLASS"), _T("IDLE_PRIORITY_CLASS"), 0 };
|
|
|
|
typedef struct {
|
|
int first;
|
|
int last;
|
|
} list_t;
|
|
|
|
/*
|
|
Check the status in response to a control.
|
|
Returns: 1 if the status is expected, eg STOP following CONTROL_STOP.
|
|
0 if the status is desired, eg STOPPED following CONTROL_STOP.
|
|
-1 if the status is undesired, eg STOPPED following CONTROL_START.
|
|
*/
|
|
static inline int service_control_response(unsigned long control, unsigned long status) {
|
|
switch (control) {
|
|
case NSSM_SERVICE_CONTROL_START:
|
|
switch (status) {
|
|
case SERVICE_START_PENDING:
|
|
return 1;
|
|
|
|
case SERVICE_RUNNING:
|
|
return 0;
|
|
|
|
default:
|
|
return -1;
|
|
}
|
|
|
|
case SERVICE_CONTROL_STOP:
|
|
case SERVICE_CONTROL_SHUTDOWN:
|
|
switch (status) {
|
|
case SERVICE_STOP_PENDING:
|
|
return 1;
|
|
|
|
case SERVICE_STOPPED:
|
|
return 0;
|
|
|
|
default:
|
|
return -1;
|
|
}
|
|
|
|
case SERVICE_CONTROL_PAUSE:
|
|
switch (status) {
|
|
case SERVICE_PAUSE_PENDING:
|
|
return 1;
|
|
|
|
case SERVICE_PAUSED:
|
|
return 0;
|
|
|
|
default:
|
|
return -1;
|
|
}
|
|
|
|
case SERVICE_CONTROL_CONTINUE:
|
|
switch (status) {
|
|
case SERVICE_CONTINUE_PENDING:
|
|
return 1;
|
|
|
|
case SERVICE_RUNNING:
|
|
return 0;
|
|
|
|
default:
|
|
return -1;
|
|
}
|
|
|
|
case SERVICE_CONTROL_INTERROGATE:
|
|
return 0;
|
|
}
|
|
|
|
return 0;
|
|
}
|
|
|
|
static inline int await_service_control_response(unsigned long control, SC_HANDLE service_handle, SERVICE_STATUS *service_status, unsigned long initial_status) {
|
|
int tries = 0;
|
|
while (QueryServiceStatus(service_handle, service_status)) {
|
|
int response = service_control_response(control, service_status->dwCurrentState);
|
|
/* Alas we can't WaitForSingleObject() on an SC_HANDLE. */
|
|
if (! response) return response;
|
|
if (response > 0 || service_status->dwCurrentState == initial_status) {
|
|
if (++tries > 10) return response;
|
|
Sleep(50 * tries);
|
|
}
|
|
else return response;
|
|
}
|
|
return -1;
|
|
}
|
|
|
|
int affinity_mask_to_string(__int64 mask, TCHAR **string) {
|
|
if (! string) return 1;
|
|
if (! mask) {
|
|
*string = 0;
|
|
return 0;
|
|
}
|
|
|
|
__int64 i, n;
|
|
|
|
/* SetProcessAffinityMask() accepts a mask of up to 64 processors. */
|
|
list_t set[64];
|
|
for (n = 0; n < _countof(set); n++) set[n].first = set[n].last = -1;
|
|
|
|
for (i = 0, n = 0; i < _countof(set); i++) {
|
|
if (mask & (1LL << i)) {
|
|
if (set[n].first == -1) set[n].first = set[n].last = (int) i;
|
|
else if (set[n].last == (int) i - 1) set[n].last = (int) i;
|
|
else {
|
|
n++;
|
|
set[n].first = set[n].last = (int) i;
|
|
}
|
|
}
|
|
}
|
|
|
|
/* Worst case is 2x2 characters for first and last CPU plus - and/or , */
|
|
size_t len = (size_t) (n + 1) * 6;
|
|
*string = (TCHAR *) HeapAlloc(GetProcessHeap(), HEAP_ZERO_MEMORY, len * sizeof(TCHAR));
|
|
if (! string) return 2;
|
|
|
|
size_t s = 0;
|
|
int ret;
|
|
for (i = 0; i <= n; i++) {
|
|
if (i) (*string)[s++] = _T(',');
|
|
ret = _sntprintf_s(*string + s, 3, _TRUNCATE, _T("%u"), set[i].first);
|
|
if (ret < 0) {
|
|
HeapFree(GetProcessHeap(), 0, *string);
|
|
*string = 0;
|
|
return 3;
|
|
}
|
|
else s += ret;
|
|
if (set[i].last != set[i].first) {
|
|
ret =_sntprintf_s(*string + s, 4, _TRUNCATE, _T("%c%u"), (set[i].last == set[i].first + 1) ? _T(',') : _T('-'), set[i].last);
|
|
if (ret < 0) {
|
|
HeapFree(GetProcessHeap(), 0, *string);
|
|
*string = 0;
|
|
return 4;
|
|
}
|
|
else s += ret;
|
|
}
|
|
}
|
|
|
|
return 0;
|
|
}
|
|
|
|
int affinity_string_to_mask(TCHAR *string, __int64 *mask) {
|
|
if (! mask) return 1;
|
|
|
|
*mask = 0LL;
|
|
if (! string) return 0;
|
|
|
|
list_t set[64];
|
|
|
|
TCHAR *s = string;
|
|
TCHAR *end;
|
|
int ret;
|
|
int i;
|
|
int n = 0;
|
|
unsigned long number;
|
|
|
|
for (n = 0; n < _countof(set); n++) set[n].first = set[n].last = -1;
|
|
n = 0;
|
|
|
|
while (*s) {
|
|
ret = str_number(s, &number, &end);
|
|
s = end;
|
|
if (ret == 0 || ret == 2) {
|
|
if (number >= _countof(set)) return 2;
|
|
set[n].first = set[n].last = (int) number;
|
|
|
|
switch (*s) {
|
|
case 0:
|
|
break;
|
|
|
|
case _T(','):
|
|
n++;
|
|
s++;
|
|
break;
|
|
|
|
case _T('-'):
|
|
if (! *(++s)) return 3;
|
|
ret = str_number(s, &number, &end);
|
|
if (ret == 0 || ret == 2) {
|
|
s = end;
|
|
if (! *s || *s == _T(',')) {
|
|
set[n].last = (int) number;
|
|
if (! *s) break;
|
|
n++;
|
|
s++;
|
|
}
|
|
else return 3;
|
|
}
|
|
else return 3;
|
|
break;
|
|
|
|
default:
|
|
return 3;
|
|
}
|
|
}
|
|
else return 4;
|
|
}
|
|
|
|
for (i = 0; i <= n; i++) {
|
|
for (int j = set[i].first; j <= set[i].last; j++) (__int64) *mask |= (1LL << (__int64) j);
|
|
}
|
|
|
|
return 0;
|
|
}
|
|
|
|
inline unsigned long priority_mask() {
|
|
return REALTIME_PRIORITY_CLASS | HIGH_PRIORITY_CLASS | ABOVE_NORMAL_PRIORITY_CLASS | NORMAL_PRIORITY_CLASS | BELOW_NORMAL_PRIORITY_CLASS | IDLE_PRIORITY_CLASS;
|
|
}
|
|
|
|
int priority_constant_to_index(unsigned long constant) {
|
|
switch (constant & priority_mask()) {
|
|
case REALTIME_PRIORITY_CLASS: return NSSM_REALTIME_PRIORITY;
|
|
case HIGH_PRIORITY_CLASS: return NSSM_HIGH_PRIORITY;
|
|
case ABOVE_NORMAL_PRIORITY_CLASS: return NSSM_ABOVE_NORMAL_PRIORITY;
|
|
case BELOW_NORMAL_PRIORITY_CLASS: return NSSM_BELOW_NORMAL_PRIORITY;
|
|
case IDLE_PRIORITY_CLASS: return NSSM_IDLE_PRIORITY;
|
|
}
|
|
return NSSM_NORMAL_PRIORITY;
|
|
}
|
|
|
|
unsigned long priority_index_to_constant(int index) {
|
|
switch (index) {
|
|
case NSSM_REALTIME_PRIORITY: return REALTIME_PRIORITY_CLASS;
|
|
case NSSM_HIGH_PRIORITY: return HIGH_PRIORITY_CLASS;
|
|
case NSSM_ABOVE_NORMAL_PRIORITY: return ABOVE_NORMAL_PRIORITY_CLASS;
|
|
case NSSM_BELOW_NORMAL_PRIORITY: return BELOW_NORMAL_PRIORITY_CLASS;
|
|
case NSSM_IDLE_PRIORITY: return IDLE_PRIORITY_CLASS;
|
|
}
|
|
return NORMAL_PRIORITY_CLASS;
|
|
}
|
|
|
|
static inline unsigned long throttle_milliseconds(unsigned long throttle) {
|
|
/* pow() operates on doubles. */
|
|
unsigned long ret = 1; for (unsigned long i = 1; i < throttle; i++) ret *= 2;
|
|
return ret * 1000;
|
|
}
|
|
|
|
/*
|
|
Wrapper to be called in a new thread so that we can acknowledge a STOP
|
|
control immediately.
|
|
*/
|
|
static unsigned long WINAPI shutdown_service(void *arg) {
|
|
return stop_service((nssm_service_t *) arg, 0, true, true);
|
|
}
|
|
|
|
/* Connect to the service manager */
|
|
SC_HANDLE open_service_manager() {
|
|
SC_HANDLE ret = OpenSCManager(0, SERVICES_ACTIVE_DATABASE, SC_MANAGER_ALL_ACCESS);
|
|
if (! ret) {
|
|
if (is_admin) log_event(EVENTLOG_ERROR_TYPE, NSSM_EVENT_OPENSCMANAGER_FAILED, 0);
|
|
return 0;
|
|
}
|
|
|
|
return ret;
|
|
}
|
|
|
|
/* Open a service by name or display name. */
|
|
SC_HANDLE open_service(SC_HANDLE services, TCHAR *service_name, TCHAR *canonical_name, unsigned long canonical_namelen) {
|
|
SC_HANDLE service_handle = OpenService(services, service_name, SERVICE_ALL_ACCESS);
|
|
if (service_handle) {
|
|
if (canonical_name && canonical_name != service_name) {
|
|
if (_sntprintf_s(canonical_name, canonical_namelen, _TRUNCATE, _T("%s"), service_name) < 0) {
|
|
print_message(stderr, NSSM_MESSAGE_OUT_OF_MEMORY, _T("canonical_name"), _T("open_service()"));
|
|
return 0;
|
|
}
|
|
}
|
|
return service_handle;
|
|
}
|
|
|
|
unsigned long error = GetLastError();
|
|
if (error != ERROR_SERVICE_DOES_NOT_EXIST) {
|
|
print_message(stderr, NSSM_MESSAGE_OPENSERVICE_FAILED, error_string(GetLastError()));
|
|
return 0;
|
|
}
|
|
|
|
/* We can't look for a display name because there's no buffer to store it. */
|
|
if (! canonical_name) {
|
|
print_message(stderr, NSSM_MESSAGE_OPENSERVICE_FAILED, error_string(GetLastError()));
|
|
return 0;
|
|
}
|
|
|
|
unsigned long bufsize, required, count, i;
|
|
unsigned long resume = 0;
|
|
EnumServicesStatus(services, SERVICE_DRIVER | SERVICE_FILE_SYSTEM_DRIVER | SERVICE_KERNEL_DRIVER | SERVICE_WIN32, SERVICE_STATE_ALL, 0, 0, &required, &count, &resume);
|
|
error = GetLastError();
|
|
if (error != ERROR_MORE_DATA) {
|
|
print_message(stderr, NSSM_MESSAGE_ENUMSERVICESSTATUS_FAILED, error_string(GetLastError()));
|
|
return 0;
|
|
}
|
|
|
|
ENUM_SERVICE_STATUS *status = (ENUM_SERVICE_STATUS *) HeapAlloc(GetProcessHeap(), 0, required);
|
|
if (! status) {
|
|
print_message(stderr, NSSM_MESSAGE_OUT_OF_MEMORY, _T("ENUM_SERVICE_STATUS"), _T("open_service()"));
|
|
return 0;
|
|
}
|
|
|
|
bufsize = required;
|
|
while (true) {
|
|
/*
|
|
EnumServicesStatus() returns:
|
|
1 when it retrieved data and there's no more data to come.
|
|
0 and sets last error to ERROR_MORE_DATA when it retrieved data and
|
|
there's more data to come.
|
|
0 and sets last error to something else on error.
|
|
*/
|
|
int ret = EnumServicesStatus(services, SERVICE_DRIVER | SERVICE_FILE_SYSTEM_DRIVER | SERVICE_KERNEL_DRIVER | SERVICE_WIN32, SERVICE_STATE_ALL, status, bufsize, &required, &count, &resume);
|
|
if (! ret) {
|
|
error = GetLastError();
|
|
if (error != ERROR_MORE_DATA) {
|
|
HeapFree(GetProcessHeap(), 0, status);
|
|
print_message(stderr, NSSM_MESSAGE_ENUMSERVICESSTATUS_FAILED, error_string(GetLastError()));
|
|
return 0;
|
|
}
|
|
}
|
|
|
|
for (i = 0; i < count; i++) {
|
|
if (str_equiv(status[i].lpDisplayName, service_name)) {
|
|
if (_sntprintf_s(canonical_name, canonical_namelen, _TRUNCATE, _T("%s"), status[i].lpServiceName) < 0) {
|
|
HeapFree(GetProcessHeap(), 0, status);
|
|
print_message(stderr, NSSM_MESSAGE_OUT_OF_MEMORY, _T("canonical_name"), _T("open_service()"));
|
|
return 0;
|
|
}
|
|
|
|
HeapFree(GetProcessHeap(), 0, status);
|
|
return open_service(services, canonical_name, 0, 0);
|
|
}
|
|
}
|
|
|
|
if (ret) break;
|
|
}
|
|
|
|
/* Recurse so we can get an error message. */
|
|
return open_service(services, service_name, 0, 0);
|
|
}
|
|
|
|
QUERY_SERVICE_CONFIG *query_service_config(const TCHAR *service_name, SC_HANDLE service_handle) {
|
|
QUERY_SERVICE_CONFIG *qsc;
|
|
unsigned long bufsize;
|
|
unsigned long error;
|
|
|
|
QueryServiceConfig(service_handle, 0, 0, &bufsize);
|
|
error = GetLastError();
|
|
if (error == ERROR_INSUFFICIENT_BUFFER) {
|
|
qsc = (QUERY_SERVICE_CONFIG *) HeapAlloc(GetProcessHeap(), HEAP_ZERO_MEMORY, bufsize);
|
|
if (! qsc) {
|
|
print_message(stderr, NSSM_MESSAGE_OUT_OF_MEMORY, _T("QUERY_SERVICE_CONFIG"), _T("query_service_config()"), 0);
|
|
return 0;
|
|
}
|
|
}
|
|
else {
|
|
print_message(stderr, NSSM_MESSAGE_QUERYSERVICECONFIG_FAILED, service_name, error_string(error), 0);
|
|
return 0;
|
|
}
|
|
|
|
if (! QueryServiceConfig(service_handle, qsc, bufsize, &bufsize)) {
|
|
HeapFree(GetProcessHeap(), 0, qsc);
|
|
print_message(stderr, NSSM_MESSAGE_QUERYSERVICECONFIG_FAILED, service_name, error_string(GetLastError()), 0);
|
|
return 0;
|
|
}
|
|
|
|
return qsc;
|
|
}
|
|
|
|
int set_service_description(const TCHAR *service_name, SC_HANDLE service_handle, TCHAR *buffer) {
|
|
SERVICE_DESCRIPTION description;
|
|
ZeroMemory(&description, sizeof(description));
|
|
/*
|
|
lpDescription must be NULL if we aren't changing, the new description
|
|
or "".
|
|
*/
|
|
if (buffer && buffer[0]) description.lpDescription = buffer;
|
|
else description.lpDescription = _T("");
|
|
|
|
if (ChangeServiceConfig2(service_handle, SERVICE_CONFIG_DESCRIPTION, &description)) return 0;
|
|
|
|
log_event(EVENTLOG_ERROR_TYPE, NSSM_EVENT_SERVICE_CONFIG_DESCRIPTION_FAILED, service_name, error_string(GetLastError()), 0);
|
|
return 1;
|
|
}
|
|
|
|
int get_service_description(const TCHAR *service_name, SC_HANDLE service_handle, unsigned long len, TCHAR *buffer) {
|
|
if (! buffer) return 1;
|
|
|
|
unsigned long bufsize;
|
|
QueryServiceConfig2(service_handle, SERVICE_CONFIG_DESCRIPTION, 0, 0, &bufsize);
|
|
unsigned long error = GetLastError();
|
|
if (error == ERROR_INSUFFICIENT_BUFFER) {
|
|
SERVICE_DESCRIPTION *description = (SERVICE_DESCRIPTION *) HeapAlloc(GetProcessHeap(), 0, bufsize);
|
|
if (! description) {
|
|
print_message(stderr, NSSM_MESSAGE_OUT_OF_MEMORY, _T("SERVICE_CONFIG_DESCRIPTION"), _T("get_service_description()"));
|
|
return 2;
|
|
}
|
|
|
|
if (QueryServiceConfig2(service_handle, SERVICE_CONFIG_DESCRIPTION, (unsigned char *) description, bufsize, &bufsize)) {
|
|
if (description->lpDescription) _sntprintf_s(buffer, len, _TRUNCATE, _T("%s"), description->lpDescription);
|
|
else ZeroMemory(buffer, len * sizeof(TCHAR));
|
|
HeapFree(GetProcessHeap(), 0, description);
|
|
return 0;
|
|
}
|
|
else {
|
|
HeapFree(GetProcessHeap(), 0, description);
|
|
print_message(stderr, NSSM_MESSAGE_QUERYSERVICECONFIG2_FAILED, service_name, _T("SERVICE_CONFIG_DESCRIPTION"), error_string(error));
|
|
return 3;
|
|
}
|
|
}
|
|
else {
|
|
print_message(stderr, NSSM_MESSAGE_QUERYSERVICECONFIG2_FAILED, service_name, _T("SERVICE_CONFIG_DESCRIPTION"), error_string(error));
|
|
return 4;
|
|
}
|
|
|
|
return 0;
|
|
}
|
|
|
|
int get_service_startup(const TCHAR *service_name, SC_HANDLE service_handle, const QUERY_SERVICE_CONFIG *qsc, unsigned long *startup) {
|
|
if (! qsc) return 1;
|
|
|
|
switch (qsc->dwStartType) {
|
|
case SERVICE_DEMAND_START: *startup = NSSM_STARTUP_MANUAL; break;
|
|
case SERVICE_DISABLED: *startup = NSSM_STARTUP_DISABLED; break;
|
|
default: *startup = NSSM_STARTUP_AUTOMATIC;
|
|
}
|
|
|
|
if (*startup != NSSM_STARTUP_AUTOMATIC) return 0;
|
|
|
|
/* Check for delayed start. */
|
|
unsigned long bufsize;
|
|
unsigned long error;
|
|
QueryServiceConfig2(service_handle, SERVICE_CONFIG_DELAYED_AUTO_START_INFO, 0, 0, &bufsize);
|
|
error = GetLastError();
|
|
if (error == ERROR_INSUFFICIENT_BUFFER) {
|
|
SERVICE_DELAYED_AUTO_START_INFO *info = (SERVICE_DELAYED_AUTO_START_INFO *) HeapAlloc(GetProcessHeap(), 0, bufsize);
|
|
if (! info) {
|
|
print_message(stderr, NSSM_MESSAGE_OUT_OF_MEMORY, _T("SERVICE_DELAYED_AUTO_START_INFO"), _T("get_service_startup()"));
|
|
return 2;
|
|
}
|
|
|
|
if (QueryServiceConfig2(service_handle, SERVICE_CONFIG_DELAYED_AUTO_START_INFO, (unsigned char *) info, bufsize, &bufsize)) {
|
|
if (info->fDelayedAutostart) *startup = NSSM_STARTUP_DELAYED;
|
|
HeapFree(GetProcessHeap(), 0, info);
|
|
return 0;
|
|
}
|
|
else {
|
|
error = GetLastError();
|
|
if (error != ERROR_INVALID_LEVEL) {
|
|
print_message(stderr, NSSM_MESSAGE_QUERYSERVICECONFIG2_FAILED, service_name, _T("SERVICE_CONFIG_DELAYED_AUTO_START_INFO"), error_string(error));
|
|
return 3;
|
|
}
|
|
}
|
|
}
|
|
else if (error != ERROR_INVALID_LEVEL) {
|
|
print_message(stderr, NSSM_MESSAGE_QUERYSERVICECONFIG2_FAILED, service_name, _T("SERVICE_DELAYED_AUTO_START_INFO"), error_string(error));
|
|
return 3;
|
|
}
|
|
|
|
return 0;
|
|
}
|
|
|
|
int get_service_username(const TCHAR *service_name, const QUERY_SERVICE_CONFIG *qsc, TCHAR **username, size_t *usernamelen) {
|
|
if (! username) return 1;
|
|
if (! usernamelen) return 1;
|
|
|
|
*username = 0;
|
|
*usernamelen = 0;
|
|
|
|
if (! qsc) return 1;
|
|
|
|
if (str_equiv(qsc->lpServiceStartName, NSSM_LOCALSYSTEM_ACCOUNT)) return 0;
|
|
|
|
size_t len = _tcslen(qsc->lpServiceStartName);
|
|
*username = (TCHAR *) HeapAlloc(GetProcessHeap(), 0, (len + 1) * sizeof(TCHAR));
|
|
if (! *username) {
|
|
print_message(stderr, NSSM_MESSAGE_OUT_OF_MEMORY, _T("username"), _T("get_service_username()"));
|
|
return 2;
|
|
}
|
|
|
|
memmove(*username, qsc->lpServiceStartName, (len + 1) * sizeof(TCHAR));
|
|
*usernamelen = len;
|
|
|
|
return 0;
|
|
}
|
|
|
|
int grant_logon_as_service(const TCHAR *username) {
|
|
if (! username) return 0;
|
|
if (str_equiv(username, NSSM_LOCALSYSTEM_ACCOUNT)) return 0;
|
|
|
|
/* Open Policy object. */
|
|
LSA_OBJECT_ATTRIBUTES attributes;
|
|
ZeroMemory(&attributes, sizeof(attributes));
|
|
|
|
LSA_HANDLE policy;
|
|
|
|
NTSTATUS status = LsaOpenPolicy(0, &attributes, POLICY_ALL_ACCESS, &policy);
|
|
if (status) {
|
|
print_message(stderr, NSSM_MESSAGE_LSAOPENPOLICY_FAILED, error_string(LsaNtStatusToWinError(status)));
|
|
return 1;
|
|
}
|
|
|
|
/* Look up SID for the account. */
|
|
LSA_UNICODE_STRING lsa_username;
|
|
#ifdef UNICODE
|
|
lsa_username.Buffer = (wchar_t *) username;
|
|
lsa_username.Length = (unsigned short) _tcslen(username) * sizeof(TCHAR);
|
|
lsa_username.MaximumLength = lsa_username.Length + sizeof(TCHAR);
|
|
#else
|
|
size_t buflen;
|
|
mbstowcs_s(&buflen, NULL, 0, username, _TRUNCATE);
|
|
lsa_username.MaximumLength = (unsigned short) buflen * sizeof(wchar_t);
|
|
lsa_username.Length = lsa_username.MaximumLength - sizeof(wchar_t);
|
|
lsa_username.Buffer = (wchar_t *) HeapAlloc(GetProcessHeap(), 0, lsa_username.MaximumLength);
|
|
if (lsa_username.Buffer) mbstowcs_s(&buflen, lsa_username.Buffer, lsa_username.MaximumLength, username, _TRUNCATE);
|
|
else {
|
|
LsaClose(policy);
|
|
print_message(stderr, NSSM_MESSAGE_OUT_OF_MEMORY, _T("LSA_UNICODE_STRING"), _T("grant_logon_as_service()"));
|
|
return 2;
|
|
}
|
|
#endif
|
|
|
|
LSA_REFERENCED_DOMAIN_LIST *translated_domains;
|
|
LSA_TRANSLATED_SID *translated_sid;
|
|
status = LsaLookupNames(policy, 1, &lsa_username, &translated_domains, &translated_sid);
|
|
#ifndef UNICODE
|
|
HeapFree(GetProcessHeap(), 0, lsa_username.Buffer);
|
|
#endif
|
|
if (status) {
|
|
LsaFreeMemory(translated_domains);
|
|
LsaFreeMemory(translated_sid);
|
|
LsaClose(policy);
|
|
print_message(stderr, NSSM_MESSAGE_LSALOOKUPNAMES_FAILED, username, error_string(LsaNtStatusToWinError(status)));
|
|
return 3;
|
|
}
|
|
|
|
if (translated_sid->Use != SidTypeUser) {
|
|
LsaFreeMemory(translated_domains);
|
|
LsaFreeMemory(translated_sid);
|
|
LsaClose(policy);
|
|
print_message(stderr, NSSM_GUI_INVALID_USERNAME, username);
|
|
return 4;
|
|
}
|
|
|
|
LSA_TRUST_INFORMATION *trust = &translated_domains->Domains[translated_sid->DomainIndex];
|
|
if (! trust || ! IsValidSid(trust->Sid)) {
|
|
LsaFreeMemory(translated_domains);
|
|
LsaFreeMemory(translated_sid);
|
|
LsaClose(policy);
|
|
print_message(stderr, NSSM_GUI_INVALID_USERNAME, username);
|
|
return 4;
|
|
}
|
|
|
|
/* GetSidSubAuthority*() return pointers! */
|
|
unsigned char *n = GetSidSubAuthorityCount(trust->Sid);
|
|
|
|
/* Convert translated SID to SID. */
|
|
SID *sid = (SID *) HeapAlloc(GetProcessHeap(), HEAP_ZERO_MEMORY, GetSidLengthRequired(*n + 1));
|
|
if (! sid) {
|
|
LsaFreeMemory(translated_domains);
|
|
LsaFreeMemory(translated_sid);
|
|
LsaClose(policy);
|
|
print_message(stderr, NSSM_MESSAGE_OUT_OF_MEMORY, _T("SID"), _T("grant_logon_as_service"));
|
|
return 4;
|
|
}
|
|
|
|
unsigned long error;
|
|
if (! InitializeSid(sid, GetSidIdentifierAuthority(trust->Sid), *n + 1)) {
|
|
error = GetLastError();
|
|
HeapFree(GetProcessHeap(), 0, sid);
|
|
LsaFreeMemory(translated_domains);
|
|
LsaFreeMemory(translated_sid);
|
|
LsaClose(policy);
|
|
print_message(stderr, NSSM_MESSAGE_INITIALIZESID_FAILED, username, error_string(error));
|
|
return 5;
|
|
}
|
|
|
|
for (unsigned char i = 0; i <= *n; i++) {
|
|
unsigned long *sub = GetSidSubAuthority(sid, i);
|
|
if (i < *n) *sub = *GetSidSubAuthority(trust->Sid, i);
|
|
else *sub = translated_sid->RelativeId;
|
|
}
|
|
|
|
LsaFreeMemory(translated_domains);
|
|
LsaFreeMemory(translated_sid);
|
|
|
|
/* Check if the SID has the "Log on as a service" right. */
|
|
LSA_UNICODE_STRING lsa_right;
|
|
lsa_right.Buffer = NSSM_LOGON_AS_SERVICE_RIGHT;
|
|
lsa_right.Length = (unsigned short) wcslen(lsa_right.Buffer) * sizeof(wchar_t);
|
|
lsa_right.MaximumLength = lsa_right.Length + sizeof(wchar_t);
|
|
|
|
LSA_UNICODE_STRING *rights;
|
|
unsigned long count = ~0;
|
|
status = LsaEnumerateAccountRights(policy, sid, &rights, &count);
|
|
if (status) {
|
|
/*
|
|
If the account has no rights set LsaEnumerateAccountRights() will return
|
|
STATUS_OBJECT_NAME_NOT_FOUND and set count to 0.
|
|
*/
|
|
error = LsaNtStatusToWinError(status);
|
|
if (error != ERROR_FILE_NOT_FOUND) {
|
|
HeapFree(GetProcessHeap(), 0, sid);
|
|
LsaClose(policy);
|
|
print_message(stderr, NSSM_MESSAGE_LSAENUMERATEACCOUNTRIGHTS_FAILED, username, error_string(error));
|
|
return 4;
|
|
}
|
|
}
|
|
|
|
for (unsigned long i = 0; i < count; i++) {
|
|
if (rights[i].Length != lsa_right.Length) continue;
|
|
if (_wcsnicmp(rights[i].Buffer, lsa_right.Buffer, lsa_right.MaximumLength)) continue;
|
|
/* The SID has the right. */
|
|
HeapFree(GetProcessHeap(), 0, sid);
|
|
LsaFreeMemory(rights);
|
|
LsaClose(policy);
|
|
return 0;
|
|
}
|
|
LsaFreeMemory(rights);
|
|
|
|
/* Add the right. */
|
|
status = LsaAddAccountRights(policy, sid, &lsa_right, 1);
|
|
HeapFree(GetProcessHeap(), 0, sid);
|
|
LsaClose(policy);
|
|
if (status) {
|
|
print_message(stderr, NSSM_MESSAGE_LSAADDACCOUNTRIGHTS_FAILED, error_string(LsaNtStatusToWinError(status)));
|
|
return 5;
|
|
}
|
|
|
|
print_message(stdout, NSSM_MESSAGE_GRANTED_LOGON_AS_SERVICE, username);
|
|
return 0;
|
|
}
|
|
|
|
/* Set default values which aren't zero. */
|
|
void set_nssm_service_defaults(nssm_service_t *service) {
|
|
if (! service) return;
|
|
|
|
service->type = SERVICE_WIN32_OWN_PROCESS;
|
|
service->priority = NORMAL_PRIORITY_CLASS;
|
|
service->stdin_sharing = NSSM_STDIN_SHARING;
|
|
service->stdin_disposition = NSSM_STDIN_DISPOSITION;
|
|
service->stdin_flags = NSSM_STDIN_FLAGS;
|
|
service->stdout_sharing = NSSM_STDOUT_SHARING;
|
|
service->stdout_disposition = NSSM_STDOUT_DISPOSITION;
|
|
service->stdout_flags = NSSM_STDOUT_FLAGS;
|
|
service->stderr_sharing = NSSM_STDERR_SHARING;
|
|
service->stderr_disposition = NSSM_STDERR_DISPOSITION;
|
|
service->stderr_flags = NSSM_STDERR_FLAGS;
|
|
service->throttle_delay = NSSM_RESET_THROTTLE_RESTART;
|
|
service->stop_method = ~0;
|
|
service->kill_console_delay = NSSM_KILL_CONSOLE_GRACE_PERIOD;
|
|
service->kill_window_delay = NSSM_KILL_WINDOW_GRACE_PERIOD;
|
|
service->kill_threads_delay = NSSM_KILL_THREADS_GRACE_PERIOD;
|
|
}
|
|
|
|
/* Allocate and zero memory for a service. */
|
|
nssm_service_t *alloc_nssm_service() {
|
|
nssm_service_t *service = (nssm_service_t *) HeapAlloc(GetProcessHeap(), HEAP_ZERO_MEMORY, sizeof(nssm_service_t));
|
|
if (! service) log_event(EVENTLOG_ERROR_TYPE, NSSM_EVENT_OUT_OF_MEMORY, _T("service"), _T("alloc_nssm_service()"), 0);
|
|
return service;
|
|
}
|
|
|
|
/* Free memory for a service. */
|
|
void cleanup_nssm_service(nssm_service_t *service) {
|
|
if (! service) return;
|
|
if (service->username) HeapFree(GetProcessHeap(), 0, service->username);
|
|
if (service->password) {
|
|
SecureZeroMemory(service->password, service->passwordlen);
|
|
HeapFree(GetProcessHeap(), 0, service->password);
|
|
}
|
|
if (service->env) HeapFree(GetProcessHeap(), 0, service->env);
|
|
if (service->env_extra) HeapFree(GetProcessHeap(), 0, service->env_extra);
|
|
if (service->handle) CloseServiceHandle(service->handle);
|
|
if (service->process_handle) CloseHandle(service->process_handle);
|
|
if (service->wait_handle) UnregisterWait(service->process_handle);
|
|
if (service->throttle_section_initialised) DeleteCriticalSection(&service->throttle_section);
|
|
if (service->throttle_timer) CloseHandle(service->throttle_timer);
|
|
HeapFree(GetProcessHeap(), 0, service);
|
|
}
|
|
|
|
/* About to install the service */
|
|
int pre_install_service(int argc, TCHAR **argv) {
|
|
nssm_service_t *service = alloc_nssm_service();
|
|
set_nssm_service_defaults(service);
|
|
if (argc) _sntprintf_s(service->name, _countof(service->name), _TRUNCATE, _T("%s"), argv[0]);
|
|
|
|
/* Show the dialogue box if we didn't give the service name and path */
|
|
if (argc < 2) return nssm_gui(IDD_INSTALL, service);
|
|
|
|
if (! service) {
|
|
print_message(stderr, NSSM_MESSAGE_OUT_OF_MEMORY, _T("service"), _T("pre_install_service()"));
|
|
return 1;
|
|
}
|
|
_sntprintf_s(service->exe, _countof(service->exe), _TRUNCATE, _T("%s"), argv[1]);
|
|
|
|
/* Arguments are optional */
|
|
size_t flagslen = 0;
|
|
size_t s = 0;
|
|
int i;
|
|
for (i = 2; i < argc; i++) flagslen += _tcslen(argv[i]) + 1;
|
|
if (! flagslen) flagslen = 1;
|
|
if (flagslen > _countof(service->flags)) {
|
|
print_message(stderr, NSSM_MESSAGE_FLAGS_TOO_LONG);
|
|
return 2;
|
|
}
|
|
|
|
for (i = 2; i < argc; i++) {
|
|
size_t len = _tcslen(argv[i]);
|
|
memmove(service->flags + s, argv[i], len * sizeof(TCHAR));
|
|
s += len;
|
|
if (i < argc - 1) service->flags[s++] = _T(' ');
|
|
}
|
|
|
|
/* Work out directory name */
|
|
_sntprintf_s(service->dir, _countof(service->dir), _TRUNCATE, _T("%s"), service->exe);
|
|
strip_basename(service->dir);
|
|
|
|
int ret = install_service(service);
|
|
cleanup_nssm_service(service);
|
|
return ret;
|
|
}
|
|
|
|
/* About to edit the service. */
|
|
int pre_edit_service(int argc, TCHAR **argv) {
|
|
/* Require service name. */
|
|
if (argc < 2) return usage(1);
|
|
|
|
/* Are we editing on the command line? */
|
|
enum { MODE_EDITING, MODE_GETTING, MODE_SETTING, MODE_RESETTING } mode = MODE_EDITING;
|
|
const TCHAR *verb = argv[0];
|
|
const TCHAR *service_name = argv[1];
|
|
bool getting = false;
|
|
bool unsetting = false;
|
|
|
|
/* Minimum number of arguments. */
|
|
int mandatory = 2;
|
|
/* Index of first value. */
|
|
int remainder = 3;
|
|
int i;
|
|
if (str_equiv(verb, _T("get"))) {
|
|
mandatory = 3;
|
|
mode = MODE_GETTING;
|
|
}
|
|
else if (str_equiv(verb, _T("set"))) {
|
|
mandatory = 4;
|
|
mode = MODE_SETTING;
|
|
}
|
|
else if (str_equiv(verb, _T("reset")) || str_equiv(verb, _T("unset"))) {
|
|
mandatory = 3;
|
|
mode = MODE_RESETTING;
|
|
}
|
|
if (argc < mandatory) return usage(1);
|
|
|
|
const TCHAR *parameter = 0;
|
|
settings_t *setting = 0;
|
|
TCHAR *additional;
|
|
|
|
/* Validate the parameter. */
|
|
if (mandatory > 2) {
|
|
bool additional_mandatory = false;
|
|
|
|
parameter = argv[2];
|
|
for (i = 0; settings[i].name; i++) {
|
|
setting = &settings[i];
|
|
if (! str_equiv(setting->name, parameter)) continue;
|
|
if (((setting->additional & ADDITIONAL_GETTING) && mode == MODE_GETTING) || ((setting->additional & ADDITIONAL_SETTING) && mode == MODE_SETTING) || ((setting->additional & ADDITIONAL_RESETTING) && mode == MODE_RESETTING)) {
|
|
additional_mandatory = true;
|
|
mandatory++;
|
|
}
|
|
break;
|
|
}
|
|
if (! settings[i].name) {
|
|
print_message(stderr, NSSM_MESSAGE_INVALID_PARAMETER, parameter);
|
|
for (i = 0; settings[i].name; i++) _ftprintf(stderr, _T("%s\n"), settings[i].name);
|
|
return 1;
|
|
}
|
|
|
|
additional = 0;
|
|
if (additional_mandatory) {
|
|
if (argc < mandatory) {
|
|
print_message(stderr, NSSM_MESSAGE_MISSING_SUBPARAMETER, parameter);
|
|
return 1;
|
|
}
|
|
additional = argv[3];
|
|
remainder = 4;
|
|
}
|
|
else {
|
|
additional = argv[remainder];
|
|
if (argc < mandatory) return usage(1);
|
|
}
|
|
}
|
|
|
|
nssm_service_t *service = alloc_nssm_service();
|
|
_sntprintf_s(service->name, _countof(service->name), _TRUNCATE, _T("%s"), service_name);
|
|
|
|
/* Open service manager */
|
|
SC_HANDLE services = open_service_manager();
|
|
if (! services) {
|
|
print_message(stderr, NSSM_MESSAGE_OPEN_SERVICE_MANAGER_FAILED);
|
|
return 2;
|
|
}
|
|
|
|
/* Try to open the service */
|
|
service->handle = open_service(services, service->name, service->name, _countof(service->name));
|
|
if (! service->handle) {
|
|
CloseServiceHandle(services);
|
|
return 3;
|
|
}
|
|
|
|
/* Get system details. */
|
|
QUERY_SERVICE_CONFIG *qsc = query_service_config(service->name, service->handle);
|
|
if (! qsc) {
|
|
CloseHandle(service->handle);
|
|
CloseServiceHandle(services);
|
|
return 4;
|
|
}
|
|
|
|
service->type = qsc->dwServiceType;
|
|
if (! (service->type & SERVICE_WIN32_OWN_PROCESS)) {
|
|
if (mode != MODE_GETTING) {
|
|
HeapFree(GetProcessHeap(), 0, qsc);
|
|
CloseHandle(service->handle);
|
|
CloseServiceHandle(services);
|
|
print_message(stderr, NSSM_MESSAGE_CANNOT_EDIT, service->name, NSSM_WIN32_OWN_PROCESS, 0);
|
|
return 3;
|
|
}
|
|
}
|
|
|
|
if (get_service_startup(service->name, service->handle, qsc, &service->startup)) {
|
|
if (mode != MODE_GETTING) {
|
|
HeapFree(GetProcessHeap(), 0, qsc);
|
|
CloseHandle(service->handle);
|
|
CloseServiceHandle(services);
|
|
return 4;
|
|
}
|
|
}
|
|
|
|
if (get_service_username(service->name, qsc, &service->username, &service->usernamelen)) {
|
|
if (mode != MODE_GETTING) {
|
|
HeapFree(GetProcessHeap(), 0, qsc);
|
|
CloseHandle(service->handle);
|
|
CloseServiceHandle(services);
|
|
return 5;
|
|
}
|
|
}
|
|
|
|
_sntprintf_s(service->displayname, _countof(service->displayname), _TRUNCATE, _T("%s"), qsc->lpDisplayName);
|
|
|
|
/* Get the canonical service name. We open it case insensitively. */
|
|
unsigned long bufsize = _countof(service->name);
|
|
GetServiceKeyName(services, service->displayname, service->name, &bufsize);
|
|
|
|
/* Remember the executable in case it isn't NSSM. */
|
|
_sntprintf_s(service->image, _countof(service->image), _TRUNCATE, _T("%s"), qsc->lpBinaryPathName);
|
|
HeapFree(GetProcessHeap(), 0, qsc);
|
|
|
|
/* Get extended system details. */
|
|
if (get_service_description(service->name, service->handle, _countof(service->description), service->description)) {
|
|
if (mode != MODE_GETTING) {
|
|
CloseHandle(service->handle);
|
|
CloseServiceHandle(services);
|
|
return 6;
|
|
}
|
|
}
|
|
|
|
/* Get NSSM details. */
|
|
get_parameters(service, 0);
|
|
|
|
CloseServiceHandle(services);
|
|
|
|
if (! service->exe[0]) {
|
|
service->native = true;
|
|
if (mode != MODE_GETTING) print_message(stderr, NSSM_MESSAGE_INVALID_SERVICE, service->name, NSSM, service->image);
|
|
}
|
|
|
|
/* Editing with the GUI. */
|
|
if (mode == MODE_EDITING) {
|
|
nssm_gui(IDD_EDIT, service);
|
|
return 0;
|
|
}
|
|
|
|
/* Trying to manage App* parameters for a non-NSSM service. */
|
|
if (! setting->native && service->native) {
|
|
CloseHandle(service->handle);
|
|
print_message(stderr, NSSM_MESSAGE_NATIVE_PARAMETER, setting->name, NSSM);
|
|
return 1;
|
|
}
|
|
|
|
HKEY key;
|
|
value_t value;
|
|
int ret;
|
|
|
|
if (mode == MODE_GETTING) {
|
|
if (! service->native) {
|
|
key = open_registry(service->name, KEY_READ);
|
|
if (! key) return 4;
|
|
}
|
|
|
|
if (setting->native) ret = get_setting(service->name, service->handle, setting, &value, additional);
|
|
else ret = get_setting(service->name, key, setting, &value, additional);
|
|
if (ret < 0) {
|
|
CloseHandle(service->handle);
|
|
return 5;
|
|
}
|
|
|
|
switch (setting->type) {
|
|
case REG_EXPAND_SZ:
|
|
case REG_MULTI_SZ:
|
|
case REG_SZ:
|
|
_tprintf(_T("%s\n"), value.string ? value.string : _T(""));
|
|
HeapFree(GetProcessHeap(), 0, value.string);
|
|
break;
|
|
|
|
case REG_DWORD:
|
|
_tprintf(_T("%u\n"), value.numeric);
|
|
break;
|
|
}
|
|
|
|
if (! service->native) RegCloseKey(key);
|
|
CloseHandle(service->handle);
|
|
return 0;
|
|
}
|
|
|
|
/* Build the value. */
|
|
if (mode == MODE_RESETTING) {
|
|
/* Unset the parameter. */
|
|
value.string = 0;
|
|
}
|
|
else {
|
|
/* Set the parameter. */
|
|
size_t len = 0;
|
|
size_t delimiterlen = (setting->additional & ADDITIONAL_CRLF) ? 2 : 1;
|
|
for (i = remainder; i < argc; i++) len += _tcslen(argv[i]) + delimiterlen;
|
|
len++;
|
|
|
|
value.string = (TCHAR *) HeapAlloc(GetProcessHeap(), 0, len * sizeof(TCHAR));
|
|
if (! value.string) {
|
|
print_message(stderr, NSSM_MESSAGE_OUT_OF_MEMORY, _T("value"), _T("edit_service()"));
|
|
CloseHandle(service->handle);
|
|
return 2;
|
|
}
|
|
|
|
size_t s = 0;
|
|
for (i = remainder; i < argc; i++) {
|
|
size_t len = _tcslen(argv[i]);
|
|
memmove(value.string + s, argv[i], len * sizeof(TCHAR));
|
|
s += len;
|
|
if (i < argc - 1) {
|
|
if (setting->additional & ADDITIONAL_CRLF) {
|
|
value.string[s++] = _T('\r');
|
|
value.string[s++] = _T('\n');
|
|
}
|
|
else value.string[s++] = _T(' ');
|
|
}
|
|
}
|
|
value.string[s] = _T('\0');
|
|
}
|
|
|
|
if (! service->native) {
|
|
key = open_registry(service->name, KEY_WRITE);
|
|
if (! key) {
|
|
if (value.string) HeapFree(GetProcessHeap(), 0, value.string);
|
|
return 4;
|
|
}
|
|
}
|
|
|
|
if (setting->native) ret = set_setting(service->name, service->handle, setting, &value, additional);
|
|
else ret = set_setting(service->name, key, setting, &value, additional);
|
|
if (value.string) HeapFree(GetProcessHeap(), 0, value.string);
|
|
if (ret < 0) {
|
|
if (! service->native) RegCloseKey(key);
|
|
CloseHandle(service->handle);
|
|
return 6;
|
|
}
|
|
|
|
if (! service->native) RegCloseKey(key);
|
|
CloseHandle(service->handle);
|
|
|
|
return 0;
|
|
}
|
|
|
|
/* About to remove the service */
|
|
int pre_remove_service(int argc, TCHAR **argv) {
|
|
nssm_service_t *service = alloc_nssm_service();
|
|
set_nssm_service_defaults(service);
|
|
if (argc) _sntprintf_s(service->name, _countof(service->name), _TRUNCATE, _T("%s"), argv[0]);
|
|
|
|
/* Show dialogue box if we didn't pass service name and "confirm" */
|
|
if (argc < 2) return nssm_gui(IDD_REMOVE, service);
|
|
if (str_equiv(argv[1], _T("confirm"))) {
|
|
int ret = remove_service(service);
|
|
cleanup_nssm_service(service);
|
|
return ret;
|
|
}
|
|
print_message(stderr, NSSM_MESSAGE_PRE_REMOVE_SERVICE);
|
|
return 100;
|
|
}
|
|
|
|
/* Install the service */
|
|
int install_service(nssm_service_t *service) {
|
|
if (! service) return 1;
|
|
|
|
/* Open service manager */
|
|
SC_HANDLE services = open_service_manager();
|
|
if (! services) {
|
|
print_message(stderr, NSSM_MESSAGE_OPEN_SERVICE_MANAGER_FAILED);
|
|
cleanup_nssm_service(service);
|
|
return 2;
|
|
}
|
|
|
|
/* Get path of this program */
|
|
GetModuleFileName(0, service->image, _countof(service->image));
|
|
|
|
/* Create the service - settings will be changed in edit_service() */
|
|
service->handle = CreateService(services, service->name, service->name, SERVICE_ALL_ACCESS, SERVICE_WIN32_OWN_PROCESS, SERVICE_AUTO_START, SERVICE_ERROR_NORMAL, service->image, 0, 0, 0, 0, 0);
|
|
if (! service->handle) {
|
|
print_message(stderr, NSSM_MESSAGE_CREATESERVICE_FAILED, error_string(GetLastError()));
|
|
CloseServiceHandle(services);
|
|
return 5;
|
|
}
|
|
|
|
if (edit_service(service, false)) {
|
|
DeleteService(service->handle);
|
|
CloseServiceHandle(services);
|
|
return 6;
|
|
}
|
|
|
|
print_message(stdout, NSSM_MESSAGE_SERVICE_INSTALLED, service->name);
|
|
|
|
/* Cleanup */
|
|
CloseServiceHandle(services);
|
|
|
|
return 0;
|
|
}
|
|
|
|
/* Edit the service. */
|
|
int edit_service(nssm_service_t *service, bool editing) {
|
|
if (! service) return 1;
|
|
|
|
/*
|
|
The only two valid flags for service type are SERVICE_WIN32_OWN_PROCESS
|
|
and SERVICE_INTERACTIVE_PROCESS.
|
|
*/
|
|
service->type &= SERVICE_INTERACTIVE_PROCESS;
|
|
service->type |= SERVICE_WIN32_OWN_PROCESS;
|
|
|
|
/* Startup type. */
|
|
unsigned long startup;
|
|
switch (service->startup) {
|
|
case NSSM_STARTUP_MANUAL: startup = SERVICE_DEMAND_START; break;
|
|
case NSSM_STARTUP_DISABLED: startup = SERVICE_DISABLED; break;
|
|
default: startup = SERVICE_AUTO_START;
|
|
}
|
|
|
|
/* Display name. */
|
|
if (! service->displayname[0]) _sntprintf_s(service->displayname, _countof(service->displayname), _TRUNCATE, _T("%s"), service->name);
|
|
|
|
/*
|
|
Username must be NULL if we aren't changing or an account name.
|
|
We must explicitly use LOCALSYSTEM to change it when we are editing.
|
|
Password must be NULL if we aren't changing, a password or "".
|
|
Empty passwords are valid but we won't allow them in the GUI.
|
|
*/
|
|
TCHAR *username = 0;
|
|
TCHAR *password = 0;
|
|
if (service->usernamelen) {
|
|
username = service->username;
|
|
if (service->passwordlen) password = service->password;
|
|
else password = _T("");
|
|
}
|
|
else if (editing) username = NSSM_LOCALSYSTEM_ACCOUNT;
|
|
|
|
if (grant_logon_as_service(username)) {
|
|
print_message(stderr, NSSM_MESSAGE_GRANT_LOGON_AS_SERVICE_FAILED, username);
|
|
return 5;
|
|
}
|
|
|
|
if (! ChangeServiceConfig(service->handle, service->type, startup, SERVICE_NO_CHANGE, 0, 0, 0, 0, username, password, service->displayname)) {
|
|
print_message(stderr, NSSM_MESSAGE_CHANGESERVICECONFIG_FAILED, error_string(GetLastError()));
|
|
return 5;
|
|
}
|
|
|
|
if (service->description[0] || editing) {
|
|
set_service_description(service->name, service->handle, service->description);
|
|
}
|
|
|
|
SERVICE_DELAYED_AUTO_START_INFO delayed;
|
|
ZeroMemory(&delayed, sizeof(delayed));
|
|
if (service->startup == NSSM_STARTUP_DELAYED) delayed.fDelayedAutostart = 1;
|
|
else delayed.fDelayedAutostart = 0;
|
|
/* Delayed startup isn't supported until Vista. */
|
|
if (! ChangeServiceConfig2(service->handle, SERVICE_CONFIG_DELAYED_AUTO_START_INFO, &delayed)) {
|
|
unsigned long error = GetLastError();
|
|
/* Pre-Vista we expect to fail with ERROR_INVALID_LEVEL */
|
|
if (error != ERROR_INVALID_LEVEL) {
|
|
log_event(EVENTLOG_ERROR_TYPE, NSSM_EVENT_SERVICE_CONFIG_DELAYED_AUTO_START_INFO_FAILED, service->name, error_string(error), 0);
|
|
}
|
|
}
|
|
|
|
/* Don't mess with parameters which aren't ours. */
|
|
if (! service->native) {
|
|
/* Now we need to put the parameters into the registry */
|
|
if (create_parameters(service, editing)) {
|
|
print_message(stderr, NSSM_MESSAGE_CREATE_PARAMETERS_FAILED);
|
|
return 6;
|
|
}
|
|
|
|
set_service_recovery(service);
|
|
}
|
|
|
|
return 0;
|
|
}
|
|
|
|
/* Control a service. */
|
|
int control_service(unsigned long control, int argc, TCHAR **argv) {
|
|
if (argc < 1) return usage(1);
|
|
TCHAR *service_name = argv[0];
|
|
TCHAR canonical_name[SERVICE_NAME_LENGTH];
|
|
|
|
SC_HANDLE services = open_service_manager();
|
|
if (! services) {
|
|
print_message(stderr, NSSM_MESSAGE_OPEN_SERVICE_MANAGER_FAILED);
|
|
return 2;
|
|
}
|
|
|
|
SC_HANDLE service_handle = open_service(services, service_name, canonical_name, _countof(canonical_name));
|
|
if (! service_handle) {
|
|
CloseServiceHandle(services);
|
|
return 3;
|
|
}
|
|
|
|
int ret;
|
|
unsigned long error;
|
|
SERVICE_STATUS service_status;
|
|
if (control == NSSM_SERVICE_CONTROL_START) {
|
|
unsigned long initial_status = SERVICE_STOPPED;
|
|
ret = StartService(service_handle, (unsigned long) argc, (const TCHAR **) argv);
|
|
error = GetLastError();
|
|
CloseServiceHandle(services);
|
|
|
|
if (error == ERROR_IO_PENDING) {
|
|
/*
|
|
Older versions of Windows return immediately with ERROR_IO_PENDING
|
|
indicate that the operation is still in progress. Newer versions
|
|
will return it if there really is a delay.
|
|
*/
|
|
ret = 1;
|
|
error = ERROR_SUCCESS;
|
|
}
|
|
|
|
if (ret) {
|
|
int response = await_service_control_response(control, service_handle, &service_status, initial_status);
|
|
CloseHandle(service_handle);
|
|
|
|
if (response) {
|
|
print_message(stderr, NSSM_MESSAGE_BAD_CONTROL_RESPONSE, canonical_name, service_status_text(service_status.dwCurrentState), service_control_text(control));
|
|
return 1;
|
|
}
|
|
else _tprintf(_T("%s: %s: %s"), canonical_name, service_control_text(control), error_string(error));
|
|
return 0;
|
|
}
|
|
else {
|
|
CloseHandle(service_handle);
|
|
_ftprintf(stderr, _T("%s: %s: %s"), canonical_name, service_control_text(control), error_string(error));
|
|
return 1;
|
|
}
|
|
}
|
|
else if (control == SERVICE_CONTROL_INTERROGATE) {
|
|
/*
|
|
We could actually send an INTERROGATE control but that won't return
|
|
any information if the service is stopped and we don't care about
|
|
the extra details it might give us in any case. So we'll fake it.
|
|
*/
|
|
ret = QueryServiceStatus(service_handle, &service_status);
|
|
error = GetLastError();
|
|
|
|
if (ret) {
|
|
_tprintf(_T("%s\n"), service_status_text(service_status.dwCurrentState));
|
|
return 0;
|
|
}
|
|
else {
|
|
_ftprintf(stderr, _T("%s: %s\n"), canonical_name, error_string(error));
|
|
return 1;
|
|
}
|
|
}
|
|
else {
|
|
ret = ControlService(service_handle, control, &service_status);
|
|
unsigned long initial_status = service_status.dwCurrentState;
|
|
error = GetLastError();
|
|
CloseServiceHandle(services);
|
|
|
|
if (error == ERROR_IO_PENDING) {
|
|
ret = 1;
|
|
error = ERROR_SUCCESS;
|
|
}
|
|
|
|
if (ret) {
|
|
int response = await_service_control_response(control, service_handle, &service_status, initial_status);
|
|
CloseHandle(service_handle);
|
|
|
|
if (response) {
|
|
print_message(stderr, NSSM_MESSAGE_BAD_CONTROL_RESPONSE, canonical_name, service_status_text(service_status.dwCurrentState), service_control_text(control));
|
|
return 1;
|
|
}
|
|
else _tprintf(_T("%s: %s: %s"), canonical_name, service_control_text(control), error_string(error));
|
|
return 0;
|
|
}
|
|
else {
|
|
CloseHandle(service_handle);
|
|
_ftprintf(stderr, _T("%s: %s: %s"), canonical_name, service_control_text(control), error_string(error));
|
|
if (error == ERROR_SERVICE_NOT_ACTIVE) {
|
|
if (control == SERVICE_CONTROL_SHUTDOWN || control == SERVICE_CONTROL_STOP) return 0;
|
|
}
|
|
return 1;
|
|
}
|
|
}
|
|
}
|
|
|
|
/* Remove the service */
|
|
int remove_service(nssm_service_t *service) {
|
|
if (! service) return 1;
|
|
|
|
/* Open service manager */
|
|
SC_HANDLE services = open_service_manager();
|
|
if (! services) {
|
|
print_message(stderr, NSSM_MESSAGE_OPEN_SERVICE_MANAGER_FAILED);
|
|
return 2;
|
|
}
|
|
|
|
/* Try to open the service */
|
|
service->handle = open_service(services, service->name, service->name, _countof(service->name));
|
|
if (! service->handle) {
|
|
CloseServiceHandle(services);
|
|
return 3;
|
|
}
|
|
|
|
/* Get the canonical service name. We open it case insensitively. */
|
|
unsigned long bufsize = _countof(service->displayname);
|
|
GetServiceDisplayName(services, service->name, service->displayname, &bufsize);
|
|
bufsize = _countof(service->name);
|
|
GetServiceKeyName(services, service->displayname, service->name, &bufsize);
|
|
|
|
/* Try to delete the service */
|
|
if (! DeleteService(service->handle)) {
|
|
print_message(stderr, NSSM_MESSAGE_DELETESERVICE_FAILED);
|
|
CloseServiceHandle(services);
|
|
return 4;
|
|
}
|
|
|
|
/* Cleanup */
|
|
CloseServiceHandle(services);
|
|
|
|
print_message(stdout, NSSM_MESSAGE_SERVICE_REMOVED, service->name);
|
|
return 0;
|
|
}
|
|
|
|
/* Service initialisation */
|
|
void WINAPI service_main(unsigned long argc, TCHAR **argv) {
|
|
nssm_service_t *service = alloc_nssm_service();
|
|
if (! service) return;
|
|
|
|
if (_sntprintf_s(service->name, _countof(service->name), _TRUNCATE, _T("%s"), argv[0]) < 0) {
|
|
log_event(EVENTLOG_ERROR_TYPE, NSSM_EVENT_OUT_OF_MEMORY, _T("service->name"), _T("service_main()"), 0);
|
|
return;
|
|
}
|
|
|
|
/* We can use a condition variable in a critical section on Vista or later. */
|
|
if (imports.SleepConditionVariableCS && imports.WakeConditionVariable) use_critical_section = true;
|
|
else use_critical_section = false;
|
|
|
|
/* Initialise status */
|
|
ZeroMemory(&service->status, sizeof(service->status));
|
|
service->status.dwServiceType = SERVICE_WIN32_OWN_PROCESS | SERVICE_INTERACTIVE_PROCESS;
|
|
service->status.dwControlsAccepted = SERVICE_ACCEPT_SHUTDOWN | SERVICE_ACCEPT_STOP | SERVICE_ACCEPT_PAUSE_CONTINUE;
|
|
service->status.dwWin32ExitCode = NO_ERROR;
|
|
service->status.dwServiceSpecificExitCode = 0;
|
|
service->status.dwCheckPoint = 0;
|
|
service->status.dwWaitHint = NSSM_WAITHINT_MARGIN;
|
|
|
|
/* Signal we AREN'T running the server */
|
|
service->process_handle = 0;
|
|
service->pid = 0;
|
|
|
|
/* Register control handler */
|
|
service->status_handle = RegisterServiceCtrlHandlerEx(NSSM, service_control_handler, (void *) service);
|
|
if (! service->status_handle) {
|
|
log_event(EVENTLOG_ERROR_TYPE, NSSM_EVENT_REGISTERSERVICECTRLHANDER_FAILED, error_string(GetLastError()), 0);
|
|
return;
|
|
}
|
|
|
|
log_service_control(service->name, 0, true);
|
|
|
|
service->status.dwCurrentState = SERVICE_START_PENDING;
|
|
service->status.dwWaitHint = service->throttle_delay + NSSM_WAITHINT_MARGIN;
|
|
SetServiceStatus(service->status_handle, &service->status);
|
|
|
|
if (is_admin) {
|
|
/* Try to create the exit action parameters; we don't care if it fails */
|
|
create_exit_action(service->name, exit_action_strings[0], false);
|
|
|
|
SC_HANDLE services = open_service_manager();
|
|
if (services) {
|
|
service->handle = OpenService(services, service->name, SC_MANAGER_ALL_ACCESS);
|
|
set_service_recovery(service);
|
|
CloseServiceHandle(services);
|
|
}
|
|
}
|
|
|
|
/* Used for signalling a resume if the service pauses when throttled. */
|
|
if (use_critical_section) {
|
|
InitializeCriticalSection(&service->throttle_section);
|
|
service->throttle_section_initialised = true;
|
|
}
|
|
else {
|
|
service->throttle_timer = CreateWaitableTimer(0, 1, 0);
|
|
if (! service->throttle_timer) {
|
|
log_event(EVENTLOG_WARNING_TYPE, NSSM_EVENT_CREATEWAITABLETIMER_FAILED, service->name, error_string(GetLastError()), 0);
|
|
}
|
|
}
|
|
|
|
monitor_service(service);
|
|
}
|
|
|
|
/* Make sure service recovery actions are taken where necessary */
|
|
void set_service_recovery(nssm_service_t *service) {
|
|
SERVICE_FAILURE_ACTIONS_FLAG flag;
|
|
ZeroMemory(&flag, sizeof(flag));
|
|
flag.fFailureActionsOnNonCrashFailures = true;
|
|
|
|
/* This functionality was added in Vista so the call may fail */
|
|
if (! ChangeServiceConfig2(service->handle, SERVICE_CONFIG_FAILURE_ACTIONS_FLAG, &flag)) {
|
|
unsigned long error = GetLastError();
|
|
/* Pre-Vista we expect to fail with ERROR_INVALID_LEVEL */
|
|
if (error != ERROR_INVALID_LEVEL) {
|
|
log_event(EVENTLOG_ERROR_TYPE, NSSM_EVENT_SERVICE_CONFIG_FAILURE_ACTIONS_FAILED, service->name, error_string(error), 0);
|
|
}
|
|
}
|
|
}
|
|
|
|
int monitor_service(nssm_service_t *service) {
|
|
/* Set service status to started */
|
|
int ret = start_service(service);
|
|
if (ret) {
|
|
TCHAR code[16];
|
|
_sntprintf_s(code, _countof(code), _TRUNCATE, _T("%d"), ret);
|
|
log_event(EVENTLOG_ERROR_TYPE, NSSM_EVENT_START_SERVICE_FAILED, service->exe, service->name, ret, 0);
|
|
return ret;
|
|
}
|
|
log_event(EVENTLOG_INFORMATION_TYPE, NSSM_EVENT_STARTED_SERVICE, service->exe, service->flags, service->name, service->dir, 0);
|
|
|
|
/* Monitor service */
|
|
if (! RegisterWaitForSingleObject(&service->wait_handle, service->process_handle, end_service, (void *) service, INFINITE, WT_EXECUTEONLYONCE | WT_EXECUTELONGFUNCTION)) {
|
|
log_event(EVENTLOG_WARNING_TYPE, NSSM_EVENT_REGISTERWAITFORSINGLEOBJECT_FAILED, service->name, service->exe, error_string(GetLastError()), 0);
|
|
}
|
|
|
|
return 0;
|
|
}
|
|
|
|
TCHAR *service_control_text(unsigned long control) {
|
|
switch (control) {
|
|
/* HACK: there is no SERVICE_CONTROL_START constant */
|
|
case NSSM_SERVICE_CONTROL_START: return _T("START");
|
|
case SERVICE_CONTROL_STOP: return _T("STOP");
|
|
case SERVICE_CONTROL_SHUTDOWN: return _T("SHUTDOWN");
|
|
case SERVICE_CONTROL_PAUSE: return _T("PAUSE");
|
|
case SERVICE_CONTROL_CONTINUE: return _T("CONTINUE");
|
|
case SERVICE_CONTROL_INTERROGATE: return _T("INTERROGATE");
|
|
case NSSM_SERVICE_CONTROL_ROTATE: return _T("ROTATE");
|
|
default: return 0;
|
|
}
|
|
}
|
|
|
|
TCHAR *service_status_text(unsigned long status) {
|
|
switch (status) {
|
|
case SERVICE_STOPPED: return _T("SERVICE_STOPPED");
|
|
case SERVICE_START_PENDING: return _T("SERVICE_START_PENDING");
|
|
case SERVICE_STOP_PENDING: return _T("SERVICE_STOP_PENDING");
|
|
case SERVICE_RUNNING: return _T("SERVICE_RUNNING");
|
|
case SERVICE_CONTINUE_PENDING: return _T("SERVICE_CONTINUE_PENDING");
|
|
case SERVICE_PAUSE_PENDING: return _T("SERVICE_PAUSE_PENDING");
|
|
case SERVICE_PAUSED: return _T("SERVICE_PAUSED");
|
|
default: return 0;
|
|
}
|
|
}
|
|
|
|
void log_service_control(TCHAR *service_name, unsigned long control, bool handled) {
|
|
TCHAR *text = service_control_text(control);
|
|
unsigned long event;
|
|
|
|
if (! text) {
|
|
/* "0x" + 8 x hex + NULL */
|
|
text = (TCHAR *) HeapAlloc(GetProcessHeap(), 0, 11 * sizeof(TCHAR));
|
|
if (! text) {
|
|
log_event(EVENTLOG_ERROR_TYPE, NSSM_EVENT_OUT_OF_MEMORY, _T("control code"), _T("log_service_control()"), 0);
|
|
return;
|
|
}
|
|
if (_sntprintf_s(text, 11, _TRUNCATE, _T("0x%08x"), control) < 0) {
|
|
log_event(EVENTLOG_ERROR_TYPE, NSSM_EVENT_OUT_OF_MEMORY, _T("control code"), _T("log_service_control()"), 0);
|
|
HeapFree(GetProcessHeap(), 0, text);
|
|
return;
|
|
}
|
|
|
|
event = NSSM_EVENT_SERVICE_CONTROL_UNKNOWN;
|
|
}
|
|
else if (handled) event = NSSM_EVENT_SERVICE_CONTROL_HANDLED;
|
|
else event = NSSM_EVENT_SERVICE_CONTROL_NOT_HANDLED;
|
|
|
|
log_event(EVENTLOG_INFORMATION_TYPE, event, service_name, text, 0);
|
|
|
|
if (event == NSSM_EVENT_SERVICE_CONTROL_UNKNOWN) {
|
|
HeapFree(GetProcessHeap(), 0, text);
|
|
}
|
|
}
|
|
|
|
/* Service control handler */
|
|
unsigned long WINAPI service_control_handler(unsigned long control, unsigned long event, void *data, void *context) {
|
|
nssm_service_t *service = (nssm_service_t *) context;
|
|
|
|
switch (control) {
|
|
case SERVICE_CONTROL_INTERROGATE:
|
|
/* We always keep the service status up-to-date so this is a no-op. */
|
|
return NO_ERROR;
|
|
|
|
case SERVICE_CONTROL_SHUTDOWN:
|
|
case SERVICE_CONTROL_STOP:
|
|
log_service_control(service->name, control, true);
|
|
/*
|
|
We MUST acknowledge the stop request promptly but we're committed to
|
|
waiting for the application to exit. Spawn a new thread to wait
|
|
while we acknowledge the request.
|
|
*/
|
|
if (! CreateThread(NULL, 0, shutdown_service, context, 0, NULL)) {
|
|
log_event(EVENTLOG_ERROR_TYPE, NSSM_EVENT_CREATETHREAD_FAILED, error_string(GetLastError()), 0);
|
|
|
|
/*
|
|
We couldn't create a thread to tidy up so we'll have to force the tidyup
|
|
to complete in time in this thread.
|
|
*/
|
|
service->kill_console_delay = NSSM_KILL_CONSOLE_GRACE_PERIOD;
|
|
service->kill_window_delay = NSSM_KILL_WINDOW_GRACE_PERIOD;
|
|
service->kill_threads_delay = NSSM_KILL_THREADS_GRACE_PERIOD;
|
|
|
|
stop_service(service, 0, true, true);
|
|
}
|
|
return NO_ERROR;
|
|
|
|
case SERVICE_CONTROL_CONTINUE:
|
|
log_service_control(service->name, control, true);
|
|
service->throttle = 0;
|
|
if (use_critical_section) imports.WakeConditionVariable(&service->throttle_condition);
|
|
else {
|
|
if (! service->throttle_timer) return ERROR_CALL_NOT_IMPLEMENTED;
|
|
ZeroMemory(&service->throttle_duetime, sizeof(service->throttle_duetime));
|
|
SetWaitableTimer(service->throttle_timer, &service->throttle_duetime, 0, 0, 0, 0);
|
|
}
|
|
/* We can't continue if the application is running! */
|
|
if (! service->process_handle) service->status.dwCurrentState = SERVICE_CONTINUE_PENDING;
|
|
service->status.dwWaitHint = throttle_milliseconds(service->throttle) + NSSM_WAITHINT_MARGIN;
|
|
log_event(EVENTLOG_INFORMATION_TYPE, NSSM_EVENT_RESET_THROTTLE, service->name, 0);
|
|
SetServiceStatus(service->status_handle, &service->status);
|
|
return NO_ERROR;
|
|
|
|
case SERVICE_CONTROL_PAUSE:
|
|
/*
|
|
We don't accept pause messages but it isn't possible to register
|
|
only for continue messages so we have to handle this case.
|
|
*/
|
|
log_service_control(service->name, control, false);
|
|
return ERROR_CALL_NOT_IMPLEMENTED;
|
|
|
|
case NSSM_SERVICE_CONTROL_ROTATE:
|
|
log_service_control(service->name, control, true);
|
|
if (service->rotate_stdout_online == NSSM_ROTATE_ONLINE) service->rotate_stdout_online = NSSM_ROTATE_ONLINE_ASAP;
|
|
if (service->rotate_stderr_online == NSSM_ROTATE_ONLINE) service->rotate_stderr_online = NSSM_ROTATE_ONLINE_ASAP;
|
|
return NO_ERROR;
|
|
}
|
|
|
|
/* Unknown control */
|
|
log_service_control(service->name, control, false);
|
|
return ERROR_CALL_NOT_IMPLEMENTED;
|
|
}
|
|
|
|
/* Start the service */
|
|
int start_service(nssm_service_t *service) {
|
|
service->stopping = false;
|
|
service->allow_restart = true;
|
|
|
|
if (service->process_handle) return 0;
|
|
|
|
/* Allocate a STARTUPINFO structure for a new process */
|
|
STARTUPINFO si;
|
|
ZeroMemory(&si, sizeof(si));
|
|
si.cb = sizeof(si);
|
|
|
|
/* Allocate a PROCESSINFO structure for the process */
|
|
PROCESS_INFORMATION pi;
|
|
ZeroMemory(&pi, sizeof(pi));
|
|
|
|
/* Get startup parameters */
|
|
int ret = get_parameters(service, &si);
|
|
if (ret) {
|
|
log_event(EVENTLOG_ERROR_TYPE, NSSM_EVENT_GET_PARAMETERS_FAILED, service->name, 0);
|
|
return stop_service(service, 2, true, true);
|
|
}
|
|
|
|
/* Launch executable with arguments */
|
|
TCHAR cmd[CMD_LENGTH];
|
|
if (_sntprintf_s(cmd, _countof(cmd), _TRUNCATE, _T("\"%s\" %s"), service->exe, service->flags) < 0) {
|
|
log_event(EVENTLOG_ERROR_TYPE, NSSM_EVENT_OUT_OF_MEMORY, _T("command line"), _T("start_service"), 0);
|
|
close_output_handles(&si);
|
|
return stop_service(service, 2, true, true);
|
|
}
|
|
|
|
throttle_restart(service);
|
|
|
|
bool inherit_handles = false;
|
|
if (si.dwFlags & STARTF_USESTDHANDLES) inherit_handles = true;
|
|
unsigned long flags = service->priority & priority_mask();
|
|
if (service->stdin_pipe) flags |= DETACHED_PROCESS;
|
|
if (service->affinity) flags |= CREATE_SUSPENDED;
|
|
#ifdef UNICODE
|
|
flags |= CREATE_UNICODE_ENVIRONMENT;
|
|
#endif
|
|
if (! CreateProcess(0, cmd, 0, 0, inherit_handles, flags, service->env, service->dir, &si, &pi)) {
|
|
unsigned long exitcode = 3;
|
|
unsigned long error = GetLastError();
|
|
if (error == ERROR_INVALID_PARAMETER && service->env) {
|
|
log_event(EVENTLOG_ERROR_TYPE, NSSM_EVENT_CREATEPROCESS_FAILED_INVALID_ENVIRONMENT, service->name, service->exe, NSSM_REG_ENV, 0);
|
|
if (test_environment(service->env)) exitcode = 4;
|
|
}
|
|
else log_event(EVENTLOG_ERROR_TYPE, NSSM_EVENT_CREATEPROCESS_FAILED, service->name, service->exe, error_string(error), 0);
|
|
close_output_handles(&si);
|
|
return stop_service(service, exitcode, true, true);
|
|
}
|
|
service->process_handle = pi.hProcess;
|
|
service->pid = pi.dwProcessId;
|
|
|
|
if (get_process_creation_time(service->process_handle, &service->creation_time)) ZeroMemory(&service->creation_time, sizeof(service->creation_time));
|
|
|
|
close_output_handles(&si);
|
|
|
|
if (service->affinity) {
|
|
/*
|
|
We are explicitly storing service->affinity as a 64-bit unsigned integer
|
|
so that we can parse it regardless of whether we're running in 32-bit
|
|
or 64-bit mode. The arguments to SetProcessAffinityMask(), however, are
|
|
defined as type DWORD_PTR and hence limited to 32 bits on a 32-bit system
|
|
(or when running the 32-bit NSSM).
|
|
|
|
The result is a lot of seemingly-unnecessary casting throughout the code
|
|
and potentially confusion when we actually try to start the service.
|
|
Having said that, however, it's unlikely that we're actually going to
|
|
run in 32-bit mode on a system which has more than 32 CPUs so the
|
|
likelihood of seeing a confusing situation is somewhat diminished.
|
|
*/
|
|
DWORD_PTR affinity, system_affinity;
|
|
|
|
if (GetProcessAffinityMask(service->process_handle, &affinity, &system_affinity)) affinity = service->affinity & system_affinity;
|
|
else {
|
|
affinity = (DWORD_PTR) service->affinity;
|
|
log_event(EVENTLOG_ERROR_TYPE, NSSM_EVENT_GETPROCESSAFFINITYMASK_FAILED, service->name, error_string(GetLastError()), 0);
|
|
}
|
|
|
|
if (! SetProcessAffinityMask(service->process_handle, affinity)) {
|
|
log_event(EVENTLOG_WARNING_TYPE, NSSM_EVENT_SETPROCESSAFFINITYMASK_FAILED, service->name, error_string(GetLastError()), 0);
|
|
}
|
|
|
|
ResumeThread(pi.hThread);
|
|
}
|
|
|
|
/*
|
|
Wait for a clean startup before changing the service status to RUNNING
|
|
but be mindful of the fact that we are blocking the service control manager
|
|
so abandon the wait before too much time has elapsed.
|
|
*/
|
|
unsigned long delay = service->throttle_delay;
|
|
if (delay > NSSM_SERVICE_STATUS_DEADLINE) {
|
|
TCHAR delay_milliseconds[16];
|
|
_sntprintf_s(delay_milliseconds, _countof(delay_milliseconds), _TRUNCATE, _T("%lu"), delay);
|
|
TCHAR deadline_milliseconds[16];
|
|
_sntprintf_s(deadline_milliseconds, _countof(deadline_milliseconds), _TRUNCATE, _T("%lu"), NSSM_SERVICE_STATUS_DEADLINE);
|
|
log_event(EVENTLOG_WARNING_TYPE, NSSM_EVENT_STARTUP_DELAY_TOO_LONG, service->name, delay_milliseconds, NSSM, deadline_milliseconds, 0);
|
|
delay = NSSM_SERVICE_STATUS_DEADLINE;
|
|
}
|
|
unsigned long deadline = WaitForSingleObject(service->process_handle, delay);
|
|
|
|
/* Signal successful start */
|
|
service->status.dwCurrentState = SERVICE_RUNNING;
|
|
SetServiceStatus(service->status_handle, &service->status);
|
|
|
|
/* Continue waiting for a clean startup. */
|
|
if (deadline == WAIT_TIMEOUT) {
|
|
if (service->throttle_delay > delay) {
|
|
if (WaitForSingleObject(service->process_handle, service->throttle_delay - delay) == WAIT_TIMEOUT) service->throttle = 0;
|
|
}
|
|
else service->throttle = 0;
|
|
}
|
|
|
|
/* Ensure the restart delay is always applied. */
|
|
if (service->restart_delay && ! service->throttle) service->throttle++;
|
|
|
|
return 0;
|
|
}
|
|
|
|
/* Stop the service */
|
|
int stop_service(nssm_service_t *service, unsigned long exitcode, bool graceful, bool default_action) {
|
|
service->allow_restart = false;
|
|
if (service->wait_handle) {
|
|
UnregisterWait(service->wait_handle);
|
|
service->wait_handle = 0;
|
|
}
|
|
if (service->stdin_pipe) {
|
|
CloseHandle(service->stdin_pipe);
|
|
service->stdin_pipe = 0;
|
|
}
|
|
|
|
service->rotate_stdout_online = service->rotate_stderr_online = NSSM_ROTATE_OFFLINE;
|
|
|
|
if (default_action && ! exitcode && ! graceful) {
|
|
log_event(EVENTLOG_INFORMATION_TYPE, NSSM_EVENT_GRACEFUL_SUICIDE, service->name, service->exe, exit_action_strings[NSSM_EXIT_UNCLEAN], exit_action_strings[NSSM_EXIT_UNCLEAN], exit_action_strings[NSSM_EXIT_UNCLEAN], exit_action_strings[NSSM_EXIT_REALLY], 0);
|
|
graceful = true;
|
|
}
|
|
|
|
/* Signal we are stopping */
|
|
if (graceful) {
|
|
service->status.dwCurrentState = SERVICE_STOP_PENDING;
|
|
service->status.dwWaitHint = NSSM_WAITHINT_MARGIN;
|
|
SetServiceStatus(service->status_handle, &service->status);
|
|
}
|
|
|
|
/* Nothing to do if service isn't running */
|
|
if (service->pid) {
|
|
/* Shut down service */
|
|
log_event(EVENTLOG_INFORMATION_TYPE, NSSM_EVENT_TERMINATEPROCESS, service->name, service->exe, 0);
|
|
kill_process(service, service->process_handle, service->pid, 0);
|
|
}
|
|
else log_event(EVENTLOG_INFORMATION_TYPE, NSSM_EVENT_PROCESS_ALREADY_STOPPED, service->name, service->exe, 0);
|
|
|
|
end_service((void *) service, true);
|
|
|
|
/* Signal we stopped */
|
|
if (graceful) {
|
|
service->status.dwCurrentState = SERVICE_STOPPED;
|
|
if (exitcode) {
|
|
service->status.dwWin32ExitCode = ERROR_SERVICE_SPECIFIC_ERROR;
|
|
service->status.dwServiceSpecificExitCode = exitcode;
|
|
}
|
|
else {
|
|
service->status.dwWin32ExitCode = NO_ERROR;
|
|
service->status.dwServiceSpecificExitCode = 0;
|
|
}
|
|
SetServiceStatus(service->status_handle, &service->status);
|
|
}
|
|
|
|
return exitcode;
|
|
}
|
|
|
|
/* Callback function triggered when the server exits */
|
|
void CALLBACK end_service(void *arg, unsigned char why) {
|
|
nssm_service_t *service = (nssm_service_t *) arg;
|
|
|
|
if (service->stopping) return;
|
|
|
|
service->stopping = true;
|
|
|
|
service->rotate_stdout_online = service->rotate_stderr_online = NSSM_ROTATE_OFFLINE;
|
|
|
|
/* Check exit code */
|
|
unsigned long exitcode = 0;
|
|
TCHAR code[16];
|
|
if (service->process_handle) {
|
|
GetExitCodeProcess(service->process_handle, &exitcode);
|
|
if (exitcode == STILL_ACTIVE || get_process_exit_time(service->process_handle, &service->exit_time)) GetSystemTimeAsFileTime(&service->exit_time);
|
|
CloseHandle(service->process_handle);
|
|
}
|
|
else GetSystemTimeAsFileTime(&service->exit_time);
|
|
|
|
service->process_handle = 0;
|
|
|
|
/*
|
|
Log that the service ended BEFORE logging about killing the process
|
|
tree. See below for the possible values of the why argument.
|
|
*/
|
|
if (! why) {
|
|
_sntprintf_s(code, _countof(code), _TRUNCATE, _T("%lu"), exitcode);
|
|
log_event(EVENTLOG_INFORMATION_TYPE, NSSM_EVENT_ENDED_SERVICE, service->exe, service->name, code, 0);
|
|
}
|
|
|
|
/* Clean up. */
|
|
if (exitcode == STILL_ACTIVE) exitcode = 0;
|
|
if (service->pid) kill_process_tree(service, service->pid, exitcode, service->pid);
|
|
service->pid = 0;
|
|
|
|
/*
|
|
The why argument is true if our wait timed out or false otherwise.
|
|
Our wait is infinite so why will never be true when called by the system.
|
|
If it is indeed true, assume we were called from stop_service() because
|
|
this is a controlled shutdown, and don't take any restart action.
|
|
*/
|
|
if (why) return;
|
|
if (! service->allow_restart) return;
|
|
|
|
/* What action should we take? */
|
|
int action = NSSM_EXIT_RESTART;
|
|
TCHAR action_string[ACTION_LEN];
|
|
bool default_action;
|
|
if (! get_exit_action(service->name, &exitcode, action_string, &default_action)) {
|
|
for (int i = 0; exit_action_strings[i]; i++) {
|
|
if (! _tcsnicmp((const TCHAR *) action_string, exit_action_strings[i], ACTION_LEN)) {
|
|
action = i;
|
|
break;
|
|
}
|
|
}
|
|
}
|
|
|
|
switch (action) {
|
|
/* Try to restart the service or return failure code to service manager */
|
|
case NSSM_EXIT_RESTART:
|
|
log_event(EVENTLOG_INFORMATION_TYPE, NSSM_EVENT_EXIT_RESTART, service->name, code, exit_action_strings[action], service->exe, 0);
|
|
while (monitor_service(service)) {
|
|
log_event(EVENTLOG_WARNING_TYPE, NSSM_EVENT_RESTART_SERVICE_FAILED, service->exe, service->name, 0);
|
|
Sleep(30000);
|
|
}
|
|
break;
|
|
|
|
/* Do nothing, just like srvany would */
|
|
case NSSM_EXIT_IGNORE:
|
|
log_event(EVENTLOG_INFORMATION_TYPE, NSSM_EVENT_EXIT_IGNORE, service->name, code, exit_action_strings[action], service->exe, 0);
|
|
Sleep(INFINITE);
|
|
break;
|
|
|
|
/* Tell the service manager we are finished */
|
|
case NSSM_EXIT_REALLY:
|
|
log_event(EVENTLOG_INFORMATION_TYPE, NSSM_EVENT_EXIT_REALLY, service->name, code, exit_action_strings[action], 0);
|
|
stop_service(service, exitcode, true, default_action);
|
|
break;
|
|
|
|
/* Fake a crash so pre-Vista service managers will run recovery actions. */
|
|
case NSSM_EXIT_UNCLEAN:
|
|
log_event(EVENTLOG_INFORMATION_TYPE, NSSM_EVENT_EXIT_UNCLEAN, service->name, code, exit_action_strings[action], 0);
|
|
stop_service(service, exitcode, false, default_action);
|
|
free_imports();
|
|
exit(exitcode);
|
|
break;
|
|
}
|
|
}
|
|
|
|
void throttle_restart(nssm_service_t *service) {
|
|
/* This can't be a restart if the service is already running. */
|
|
if (! service->throttle++) return;
|
|
|
|
unsigned long ms;
|
|
unsigned long throttle_ms = throttle_milliseconds(service->throttle);
|
|
TCHAR threshold[8], milliseconds[8];
|
|
|
|
if (service->restart_delay > throttle_ms) ms = service->restart_delay;
|
|
else ms = throttle_ms;
|
|
|
|
if (service->throttle > 7) service->throttle = 8;
|
|
|
|
_sntprintf_s(milliseconds, _countof(milliseconds), _TRUNCATE, _T("%lu"), ms);
|
|
|
|
if (service->throttle == 1 && service->restart_delay > throttle_ms) log_event(EVENTLOG_INFORMATION_TYPE, NSSM_EVENT_RESTART_DELAY, service->name, milliseconds, 0);
|
|
else {
|
|
_sntprintf_s(threshold, _countof(threshold), _TRUNCATE, _T("%lu"), service->throttle_delay);
|
|
log_event(EVENTLOG_WARNING_TYPE, NSSM_EVENT_THROTTLED, service->name, threshold, milliseconds, 0);
|
|
}
|
|
|
|
if (use_critical_section) EnterCriticalSection(&service->throttle_section);
|
|
else if (service->throttle_timer) {
|
|
ZeroMemory(&service->throttle_duetime, sizeof(service->throttle_duetime));
|
|
service->throttle_duetime.QuadPart = 0 - (ms * 10000LL);
|
|
SetWaitableTimer(service->throttle_timer, &service->throttle_duetime, 0, 0, 0, 0);
|
|
}
|
|
|
|
service->status.dwCurrentState = SERVICE_PAUSED;
|
|
SetServiceStatus(service->status_handle, &service->status);
|
|
|
|
if (use_critical_section) {
|
|
imports.SleepConditionVariableCS(&service->throttle_condition, &service->throttle_section, ms);
|
|
LeaveCriticalSection(&service->throttle_section);
|
|
}
|
|
else {
|
|
if (service->throttle_timer) WaitForSingleObject(service->throttle_timer, INFINITE);
|
|
else Sleep(ms);
|
|
}
|
|
}
|
|
|
|
/*
|
|
When responding to a stop (or any other) request we need to set dwWaitHint to
|
|
the number of milliseconds we expect the operation to take, and optionally
|
|
increase dwCheckPoint. If dwWaitHint milliseconds elapses without the
|
|
operation completing or dwCheckPoint increasing, the system will consider the
|
|
service to be hung.
|
|
|
|
However the system will consider the service to be hung after 30000
|
|
milliseconds regardless of the value of dwWaitHint if dwCheckPoint has not
|
|
changed. Therefore if we want to wait longer than that we must periodically
|
|
increase dwCheckPoint.
|
|
|
|
Furthermore, it will consider the service to be hung after 60000 milliseconds
|
|
regardless of the value of dwCheckPoint unless dwWaitHint is increased every
|
|
time dwCheckPoint is also increased.
|
|
|
|
Our strategy then is to retrieve the initial dwWaitHint and wait for
|
|
NSSM_SERVICE_STATUS_DEADLINE milliseconds. If the process is still running
|
|
and we haven't finished waiting we increment dwCheckPoint and add whichever is
|
|
smaller of NSSM_SERVICE_STATUS_DEADLINE or the remaining timeout to
|
|
dwWaitHint.
|
|
|
|
Only doing both these things will prevent the system from killing the service.
|
|
|
|
Returns: 1 if the wait timed out.
|
|
0 if the wait completed.
|
|
-1 on error.
|
|
*/
|
|
int await_shutdown(nssm_service_t *service, TCHAR *function_name, unsigned long timeout) {
|
|
unsigned long interval;
|
|
unsigned long waithint;
|
|
unsigned long ret;
|
|
unsigned long waited;
|
|
TCHAR interval_milliseconds[16];
|
|
TCHAR timeout_milliseconds[16];
|
|
TCHAR waited_milliseconds[16];
|
|
TCHAR *function = function_name;
|
|
|
|
/* Add brackets to function name. */
|
|
size_t funclen = _tcslen(function_name) + 3;
|
|
TCHAR *func = (TCHAR *) HeapAlloc(GetProcessHeap(), 0, funclen * sizeof(TCHAR));
|
|
if (func) {
|
|
if (_sntprintf_s(func, funclen, _TRUNCATE, _T("%s()"), function_name) > -1) function = func;
|
|
}
|
|
|
|
_sntprintf_s(timeout_milliseconds, _countof(timeout_milliseconds), _TRUNCATE, _T("%lu"), timeout);
|
|
|
|
waithint = service->status.dwWaitHint;
|
|
waited = 0;
|
|
while (waited < timeout) {
|
|
interval = timeout - waited;
|
|
if (interval > NSSM_SERVICE_STATUS_DEADLINE) interval = NSSM_SERVICE_STATUS_DEADLINE;
|
|
|
|
service->status.dwCurrentState = SERVICE_STOP_PENDING;
|
|
service->status.dwWaitHint += interval;
|
|
service->status.dwCheckPoint++;
|
|
SetServiceStatus(service->status_handle, &service->status);
|
|
|
|
if (waited) {
|
|
_sntprintf_s(waited_milliseconds, _countof(waited_milliseconds), _TRUNCATE, _T("%lu"), waited);
|
|
_sntprintf_s(interval_milliseconds, _countof(interval_milliseconds), _TRUNCATE, _T("%lu"), interval);
|
|
log_event(EVENTLOG_INFORMATION_TYPE, NSSM_EVENT_AWAITING_SHUTDOWN, function, service->name, waited_milliseconds, interval_milliseconds, timeout_milliseconds, 0);
|
|
}
|
|
|
|
switch (WaitForSingleObject(service->process_handle, interval)) {
|
|
case WAIT_OBJECT_0:
|
|
ret = 0;
|
|
goto awaited;
|
|
|
|
case WAIT_TIMEOUT:
|
|
ret = 1;
|
|
break;
|
|
|
|
default:
|
|
ret = -1;
|
|
goto awaited;
|
|
}
|
|
|
|
waited += interval;
|
|
}
|
|
|
|
awaited:
|
|
if (func) HeapFree(GetProcessHeap(), 0, func);
|
|
|
|
return ret;
|
|
}
|