/*-*- Mode: C; c-basic-offset: 8; indent-tabs-mode: nil -*-*/

/***
  This file is part of systemd.

  Copyright 2010 Lennart Poettering

  systemd is free software; you can redistribute it and/or modify it
  under the terms of the GNU Lesser General Public License as published by
  the Free Software Foundation; either version 2.1 of the License, or
  (at your option) any later version.

  systemd is distributed in the hope that it will be useful, but
  WITHOUT ANY WARRANTY; without even the implied warranty of
  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
  Lesser General Public License for more details.

  You should have received a copy of the GNU Lesser General Public License
  along with systemd; If not, see <http://www.gnu.org/licenses/>.
***/

#include <errno.h>
#include <unistd.h>

#include "dbus.h"
#include "log.h"
#include "dbus-manager.h"
#include "strv.h"
#include "bus-errors.h"
#include "build.h"
#include "dbus-common.h"
#include "install.h"
#include "selinux-access.h"
#include "watchdog.h"
#include "hwclock.h"
#include "path-util.h"
#include "dbus-unit.h"
#include "virt.h"

#define BUS_MANAGER_INTERFACE_BEGIN                                     \
        " <interface name=\"org.freedesktop.systemd1.Manager\">\n"

#define BUS_MANAGER_INTERFACE_METHODS                                   \
        "  <method name=\"GetUnit\">\n"                                 \
        "   <arg name=\"name\" type=\"s\" direction=\"in\"/>\n"         \
        "   <arg name=\"unit\" type=\"o\" direction=\"out\"/>\n"        \
        "  </method>\n"                                                 \
        "  <method name=\"GetUnitByPID\">\n"                            \
        "   <arg name=\"pid\" type=\"u\" direction=\"in\"/>\n"          \
        "   <arg name=\"unit\" type=\"o\" direction=\"out\"/>\n"        \
        "  </method>\n"                                                 \
        "  <method name=\"LoadUnit\">\n"                                \
        "   <arg name=\"name\" type=\"s\" direction=\"in\"/>\n"         \
        "   <arg name=\"unit\" type=\"o\" direction=\"out\"/>\n"        \
        "  </method>\n"                                                 \
        "  <method name=\"StartUnit\">\n"                               \
        "   <arg name=\"name\" type=\"s\" direction=\"in\"/>\n"         \
        "   <arg name=\"mode\" type=\"s\" direction=\"in\"/>\n"         \
        "   <arg name=\"job\" type=\"o\" direction=\"out\"/>\n"         \
        "  </method>\n"                                                 \
        "  <method name=\"StartUnitReplace\">\n"                        \
        "   <arg name=\"old_unit\" type=\"s\" direction=\"in\"/>\n"     \
        "   <arg name=\"new_unit\" type=\"s\" direction=\"in\"/>\n"     \
        "   <arg name=\"mode\" type=\"s\" direction=\"in\"/>\n"         \
        "   <arg name=\"job\" type=\"o\" direction=\"out\"/>\n"         \
        "  </method>\n"                                                 \
        "  <method name=\"StopUnit\">\n"                                \
        "   <arg name=\"name\" type=\"s\" direction=\"in\"/>\n"         \
        "   <arg name=\"mode\" type=\"s\" direction=\"in\"/>\n"         \
        "   <arg name=\"job\" type=\"o\" direction=\"out\"/>\n"         \
        "  </method>\n"                                                 \
        "  <method name=\"ReloadUnit\">\n"                              \
        "   <arg name=\"name\" type=\"s\" direction=\"in\"/>\n"         \
        "   <arg name=\"mode\" type=\"s\" direction=\"in\"/>\n"         \
        "   <arg name=\"job\" type=\"o\" direction=\"out\"/>\n"         \
        "  </method>\n"                                                 \
        "  <method name=\"RestartUnit\">\n"                             \
        "   <arg name=\"name\" type=\"s\" direction=\"in\"/>\n"         \
        "   <arg name=\"mode\" type=\"s\" direction=\"in\"/>\n"         \
        "   <arg name=\"job\" type=\"o\" direction=\"out\"/>\n"         \
        "  </method>\n"                                                 \
        "  <method name=\"TryRestartUnit\">\n"                          \
        "   <arg name=\"name\" type=\"s\" direction=\"in\"/>\n"         \
        "   <arg name=\"mode\" type=\"s\" direction=\"in\"/>\n"         \
        "   <arg name=\"job\" type=\"o\" direction=\"out\"/>\n"         \
        "  </method>\n"                                                 \
        "  <method name=\"ReloadOrRestartUnit\">\n"                     \
        "   <arg name=\"name\" type=\"s\" direction=\"in\"/>\n"         \
        "   <arg name=\"mode\" type=\"s\" direction=\"in\"/>\n"         \
        "   <arg name=\"job\" type=\"o\" direction=\"out\"/>\n"         \
        "  </method>\n"                                                 \
        "  <method name=\"ReloadOrTryRestartUnit\">\n"                  \
        "   <arg name=\"name\" type=\"s\" direction=\"in\"/>\n"         \
        "   <arg name=\"mode\" type=\"s\" direction=\"in\"/>\n"         \
        "   <arg name=\"job\" type=\"o\" direction=\"out\"/>\n"         \
        "  </method>\n"                                                 \
        "  <method name=\"KillUnit\">\n"                                \
        "   <arg name=\"name\" type=\"s\" direction=\"in\"/>\n"         \
        "   <arg name=\"who\" type=\"s\" direction=\"in\"/>\n"          \
        "   <arg name=\"signal\" type=\"i\" direction=\"in\"/>\n"       \
        "  </method>\n"                                                 \
        "  <method name=\"ResetFailedUnit\">\n"                         \
        "   <arg name=\"name\" type=\"s\" direction=\"in\"/>\n"         \
        "  </method>\n"                                                 \
        "  <method name=\"GetJob\">\n"                                  \
        "   <arg name=\"id\" type=\"u\" direction=\"in\"/>\n"           \
        "   <arg name=\"job\" type=\"o\" direction=\"out\"/>\n"         \
        "  </method>\n"                                                 \
        "  <method name=\"ClearJobs\"/>\n"                              \
        "  <method name=\"ResetFailed\"/>\n"                            \
        "  <method name=\"ListUnits\">\n"                               \
        "   <arg name=\"units\" type=\"a(ssssssouso)\" direction=\"out\"/>\n" \
        "  </method>\n"                                                 \
        "  <method name=\"ListJobs\">\n"                                \
        "   <arg name=\"jobs\" type=\"a(usssoo)\" direction=\"out\"/>\n" \
        "  </method>\n"                                                 \
        "  <method name=\"Subscribe\"/>\n"                              \
        "  <method name=\"Unsubscribe\"/>\n"                            \
        "  <method name=\"Dump\">\n"                                    \
        "   <arg name=\"dump\" type=\"s\" direction=\"out\"/>\n"        \
        "  </method>\n"                                                 \
        "  <method name=\"CreateSnapshot\">\n"                          \
        "   <arg name=\"name\" type=\"s\" direction=\"in\"/>\n"         \
        "   <arg name=\"cleanup\" type=\"b\" direction=\"in\"/>\n"      \
        "   <arg name=\"unit\" type=\"o\" direction=\"out\"/>\n"        \
        "  </method>\n"                                                 \
        "  <method name=\"Reload\"/>\n"                                 \
        "  <method name=\"Reexecute\"/>\n"                              \
        "  <method name=\"Exit\"/>\n"                                   \
        "  <method name=\"Reboot\"/>\n"                                 \
        "  <method name=\"PowerOff\"/>\n"                               \
        "  <method name=\"Halt\"/>\n"                                   \
        "  <method name=\"KExec\"/>\n"                                  \
        "  <method name=\"SwitchRoot\">\n"                              \
        "   <arg name=\"new_root\" type=\"s\" direction=\"in\"/>\n"     \
        "   <arg name=\"init\" type=\"s\" direction=\"in\"/>\n"         \
        "  </method>\n"                                                 \
        "  <method name=\"SetEnvironment\">\n"                          \
        "   <arg name=\"names\" type=\"as\" direction=\"in\"/>\n"       \
        "  </method>\n"                                                 \
        "  <method name=\"UnsetEnvironment\">\n"                        \
        "   <arg name=\"names\" type=\"as\" direction=\"in\"/>\n"       \
        "  </method>\n"                                                 \
        "  <method name=\"UnsetAndSetEnvironment\">\n"                  \
        "   <arg name=\"unset\" type=\"as\" direction=\"in\"/>\n"       \
        "   <arg name=\"set\" type=\"as\" direction=\"in\"/>\n"         \
        "  </method>\n"                                                 \
        "  <method name=\"ListUnitFiles\">\n"                            \
        "   <arg name=\"files\" type=\"a(ss)\" direction=\"out\"/>\n" \
        "  </method>\n"                                                 \
        "  <method name=\"GetUnitFileState\">\n"                        \
        "   <arg name=\"file\" type=\"s\" direction=\"in\"/>\n"         \
        "   <arg name=\"state\" type=\"s\" direction=\"out\"/>\n"       \
        "  </method>\n"                                                 \
        "  <method name=\"EnableUnitFiles\">\n"                         \
        "   <arg name=\"files\" type=\"as\" direction=\"in\"/>\n"       \
        "   <arg name=\"runtime\" type=\"b\" direction=\"in\"/>\n"      \
        "   <arg name=\"force\" type=\"b\" direction=\"in\"/>\n"        \
        "   <arg name=\"carries_install_info\" type=\"b\" direction=\"out\"/>\n" \
        "   <arg name=\"changes\" type=\"a(sss)\" direction=\"out\"/>\n" \
        "  </method>\n"                                                 \
        "  <method name=\"DisableUnitFiles\">\n"                        \
        "   <arg name=\"files\" type=\"as\" direction=\"in\"/>\n"       \
        "   <arg name=\"runtime\" type=\"b\" direction=\"in\"/>\n"      \
        "   <arg name=\"changes\" type=\"a(sss)\" direction=\"out\"/>\n" \
        "  </method>\n"                                                 \
        "  <method name=\"ReenableUnitFiles\">\n"                       \
        "   <arg name=\"files\" type=\"as\" direction=\"in\"/>\n"       \
        "   <arg name=\"runtime\" type=\"b\" direction=\"in\"/>\n"      \
        "   <arg name=\"force\" type=\"b\" direction=\"in\"/>\n"        \
        "   <arg name=\"carries_install_info\" type=\"b\" direction=\"out\"/>\n" \
        "   <arg name=\"changes\" type=\"a(sss)\" direction=\"out\"/>\n" \
        "  </method>\n"                                                 \
        "  <method name=\"LinkUnitFiles\">\n"                           \
        "   <arg name=\"files\" type=\"as\" direction=\"in\"/>\n"       \
        "   <arg name=\"runtime\" type=\"b\" direction=\"in\"/>\n"      \
        "   <arg name=\"force\" type=\"b\" direction=\"in\"/>\n"        \
        "   <arg name=\"changes\" type=\"a(sss)\" direction=\"out\"/>\n" \
        "  </method>\n"                                                 \
        "  <method name=\"PresetUnitFiles\">\n"                         \
        "   <arg name=\"files\" type=\"as\" direction=\"in\"/>\n"       \
        "   <arg name=\"runtime\" type=\"b\" direction=\"in\"/>\n"      \
        "   <arg name=\"force\" type=\"b\" direction=\"in\"/>\n"        \
        "   <arg name=\"carries_install_info\" type=\"b\" direction=\"out\"/>\n" \
        "   <arg name=\"changes\" type=\"a(sss)\" direction=\"out\"/>\n" \
        "  </method>\n"                                                 \
        "  <method name=\"MaskUnitFiles\">\n"                           \
        "   <arg name=\"files\" type=\"as\" direction=\"in\"/>\n"       \
        "   <arg name=\"runtime\" type=\"b\" direction=\"in\"/>\n"      \
        "   <arg name=\"force\" type=\"b\" direction=\"in\"/>\n"        \
        "   <arg name=\"changes\" type=\"a(sss)\" direction=\"out\"/>\n" \
        "  </method>\n"                                                 \
        "  <method name=\"UnmaskUnitFiles\">\n"                         \
        "   <arg name=\"files\" type=\"as\" direction=\"in\"/>\n"       \
        "   <arg name=\"runtime\" type=\"b\" direction=\"in\"/>\n"      \
        "   <arg name=\"changes\" type=\"a(sss)\" direction=\"out\"/>\n" \
        "  </method>\n"

#define BUS_MANAGER_INTERFACE_SIGNALS                                   \
        "  <signal name=\"UnitNew\">\n"                                 \
        "   <arg name=\"id\" type=\"s\"/>\n"                            \
        "   <arg name=\"unit\" type=\"o\"/>\n"                          \
        "  </signal>\n"                                                 \
        "  <signal name=\"UnitRemoved\">\n"                             \
        "   <arg name=\"id\" type=\"s\"/>\n"                            \
        "   <arg name=\"unit\" type=\"o\"/>\n"                          \
        "  </signal>\n"                                                 \
        "  <signal name=\"JobNew\">\n"                                  \
        "   <arg name=\"id\" type=\"u\"/>\n"                            \
        "   <arg name=\"job\" type=\"o\"/>\n"                           \
        "   <arg name=\"unit\" type=\"s\"/>\n"                          \
        "  </signal>\n"                                                 \
        "  <signal name=\"JobRemoved\">\n"                              \
        "   <arg name=\"id\" type=\"u\"/>\n"                            \
        "   <arg name=\"job\" type=\"o\"/>\n"                           \
        "   <arg name=\"unit\" type=\"s\"/>\n"                          \
        "   <arg name=\"result\" type=\"s\"/>\n"                        \
        "  </signal>"                                                   \
        "  <signal name=\"StartupFinished\">\n"                         \
        "   <arg name=\"firmware\" type=\"t\"/>\n"                      \
        "   <arg name=\"loader\" type=\"t\"/>\n"                        \
        "   <arg name=\"kernel\" type=\"t\"/>\n"                        \
        "   <arg name=\"initrd\" type=\"t\"/>\n"                        \
        "   <arg name=\"userspace\" type=\"t\"/>\n"                     \
        "   <arg name=\"total\" type=\"t\"/>\n"                         \
        "  </signal>"                                                   \
        "  <signal name=\"UnitFilesChanged\"/>\n"

#define BUS_MANAGER_INTERFACE_PROPERTIES_GENERAL                        \
        "  <property name=\"Version\" type=\"s\" access=\"read\"/>\n"   \
        "  <property name=\"Distribution\" type=\"s\" access=\"read\"/>\n" \
        "  <property name=\"Features\" type=\"s\" access=\"read\"/>\n"  \
        "  <property name=\"Tainted\" type=\"s\" access=\"read\"/>\n"   \
        "  <property name=\"FirmwareTimestamp\" type=\"t\" access=\"read\"/>\n" \
        "  <property name=\"FirmwareTimestampMonotonic\" type=\"t\" access=\"read\"/>\n" \
        "  <property name=\"LoaderTimestamp\" type=\"t\" access=\"read\"/>\n" \
        "  <property name=\"LoaderTimestampMonotonic\" type=\"t\" access=\"read\"/>\n" \
        "  <property name=\"KernelTimestamp\" type=\"t\" access=\"read\"/>\n" \
        "  <property name=\"KernelTimestampMonotonic\" type=\"t\" access=\"read\"/>\n" \
        "  <property name=\"InitRDTimestamp\" type=\"t\" access=\"read\"/>\n" \
        "  <property name=\"InitRDTimestampMonotonic\" type=\"t\" access=\"read\"/>\n" \
        "  <property name=\"UserspaceTimestamp\" type=\"t\" access=\"read\"/>\n" \
        "  <property name=\"UserspaceTimestampMonotonic\" type=\"t\" access=\"read\"/>\n" \
        "  <property name=\"FinishTimestamp\" type=\"t\" access=\"read\"/>\n" \
        "  <property name=\"FinishTimestampMonotonic\" type=\"t\" access=\"read\"/>\n" \
        "  <property name=\"LogLevel\" type=\"s\" access=\"readwrite\"/>\n"  \
        "  <property name=\"LogTarget\" type=\"s\" access=\"readwrite\"/>\n" \
        "  <property name=\"NNames\" type=\"u\" access=\"read\"/>\n"    \
        "  <property name=\"NJobs\" type=\"u\" access=\"read\"/>\n"     \
        "  <property name=\"NInstalledJobs\" type=\"u\" access=\"read\"/>\n" \
        "  <property name=\"NFailedJobs\" type=\"u\" access=\"read\"/>\n" \
        "  <property name=\"Progress\" type=\"d\" access=\"read\"/>\n"  \
        "  <property name=\"Environment\" type=\"as\" access=\"read\"/>\n" \
        "  <property name=\"ConfirmSpawn\" type=\"b\" access=\"read\"/>\n" \
        "  <property name=\"ShowStatus\" type=\"b\" access=\"read\"/>\n" \
        "  <property name=\"UnitPath\" type=\"as\" access=\"read\"/>\n" \
        "  <property name=\"ControlGroupHierarchy\" type=\"s\" access=\"read\"/>\n" \
        "  <property name=\"DefaultControllers\" type=\"as\" access=\"read\"/>\n" \
        "  <property name=\"DefaultStandardOutput\" type=\"s\" access=\"read\"/>\n" \
        "  <property name=\"DefaultStandardError\" type=\"s\" access=\"read\"/>\n" \
        "  <property name=\"RuntimeWatchdogUSec\" type=\"s\" access=\"readwrite\"/>\n" \
        "  <property name=\"ShutdownWatchdogUSec\" type=\"s\" access=\"readwrite\"/>\n" \
        "  <property name=\"Virtualization\" type=\"s\" access=\"read\"/>\n"

#define BUS_MANAGER_INTERFACE_END                                       \
        " </interface>\n"

#define BUS_MANAGER_INTERFACE                                           \
        BUS_MANAGER_INTERFACE_BEGIN                                     \
        BUS_MANAGER_INTERFACE_METHODS                                   \
        BUS_MANAGER_INTERFACE_SIGNALS                                   \
        BUS_MANAGER_INTERFACE_PROPERTIES_GENERAL                        \
        BUS_MANAGER_INTERFACE_END

#define INTROSPECTION_BEGIN                                             \
        DBUS_INTROSPECT_1_0_XML_DOCTYPE_DECL_NODE                       \
        "<node>\n"                                                      \
        BUS_MANAGER_INTERFACE                                           \
        BUS_PROPERTIES_INTERFACE                                        \
        BUS_PEER_INTERFACE                                              \
        BUS_INTROSPECTABLE_INTERFACE

#define INTROSPECTION_END                                               \
        "</node>\n"

#define INTERFACES_LIST                              \
        BUS_GENERIC_INTERFACES_LIST                  \
        "org.freedesktop.systemd1.Manager\0"

const char bus_manager_interface[] _introspect_("Manager") = BUS_MANAGER_INTERFACE;

static DEFINE_BUS_PROPERTY_APPEND_ENUM(bus_manager_append_exec_output, exec_output, ExecOutput);

static int bus_manager_append_tainted(DBusMessageIter *i, const char *property, void *data) {
        const char *t;
        Manager *m = data;
        char buf[LINE_MAX] = "", *e = buf, *p = NULL;

        assert(i);
        assert(property);
        assert(m);

        if (m->taint_usr)
                e = stpcpy(e, "split-usr:");

        if (readlink_malloc("/etc/mtab", &p) < 0)
                e = stpcpy(e, "mtab-not-symlink:");
        else
                free(p);

        if (access("/proc/cgroups", F_OK) < 0)
                e = stpcpy(e, "cgroups-missing:");

        if (hwclock_is_localtime() > 0)
                e = stpcpy(e, "local-hwclock:");

        /* remove the last ':' */
        if (e != buf)
                e[-1] = 0;

        t = buf;

        if (!dbus_message_iter_append_basic(i, DBUS_TYPE_STRING, &t))
                return -ENOMEM;

        return 0;
}

static int bus_manager_append_log_target(DBusMessageIter *i, const char *property, void *data) {
        const char *t;

        assert(i);
        assert(property);

        t = log_target_to_string(log_get_target());

        if (!dbus_message_iter_append_basic(i, DBUS_TYPE_STRING, &t))
                return -ENOMEM;

        return 0;
}

static int bus_manager_set_log_target(DBusMessageIter *i, const char *property, void *data) {
        const char *t;

        assert(i);
        assert(property);

        dbus_message_iter_get_basic(i, &t);

        return log_set_target_from_string(t);
}

static int bus_manager_append_log_level(DBusMessageIter *i, const char *property, void *data) {
        const char *t;

        assert(i);
        assert(property);

        t = log_level_to_string(log_get_max_level());

        if (!dbus_message_iter_append_basic(i, DBUS_TYPE_STRING, &t))
                return -ENOMEM;

        return 0;
}

static int bus_manager_set_log_level(DBusMessageIter *i, const char *property, void *data) {
        const char *t;

        assert(i);
        assert(property);

        dbus_message_iter_get_basic(i, &t);

        return log_set_max_level_from_string(t);
}

static int bus_manager_append_n_names(DBusMessageIter *i, const char *property, void *data) {
        Manager *m = data;
        uint32_t u;

        assert(i);
        assert(property);
        assert(m);

        u = hashmap_size(m->units);

        if (!dbus_message_iter_append_basic(i, DBUS_TYPE_UINT32, &u))
                return -ENOMEM;

        return 0;
}

static int bus_manager_append_n_jobs(DBusMessageIter *i, const char *property, void *data) {
        Manager *m = data;
        uint32_t u;

        assert(i);
        assert(property);
        assert(m);

        u = hashmap_size(m->jobs);

        if (!dbus_message_iter_append_basic(i, DBUS_TYPE_UINT32, &u))
                return -ENOMEM;

        return 0;
}

static int bus_manager_append_progress(DBusMessageIter *i, const char *property, void *data) {
        double d;
        Manager *m = data;

        assert(i);
        assert(property);
        assert(m);

        if (dual_timestamp_is_set(&m->finish_timestamp))
                d = 1.0;
        else
                d = 1.0 - ((double) hashmap_size(m->jobs) / (double) m->n_installed_jobs);

        if (!dbus_message_iter_append_basic(i, DBUS_TYPE_DOUBLE, &d))
                return -ENOMEM;

        return 0;
}

static int bus_manager_append_virt(DBusMessageIter *i, const char *property, void *data) {
        Manager *m = data;
        const char *id = "";

        assert(i);
        assert(property);
        assert(m);

        detect_virtualization(&id);

        if (!dbus_message_iter_append_basic(i, DBUS_TYPE_STRING, &id))
                return -ENOMEM;

        return 0;
}

static DBusMessage *message_from_file_changes(
                DBusMessage *m,
                UnitFileChange *changes,
                unsigned n_changes,
                int carries_install_info) {

        DBusMessageIter iter, sub, sub2;
        DBusMessage *reply;
        unsigned i;

        reply = dbus_message_new_method_return(m);
        if (!reply)
                return NULL;

        dbus_message_iter_init_append(reply, &iter);

        if (carries_install_info >= 0) {
                dbus_bool_t b;

                b = !!carries_install_info;
                if (!dbus_message_iter_append_basic(&iter, DBUS_TYPE_BOOLEAN, &b))
                        goto oom;
        }

        if (!dbus_message_iter_open_container(&iter, DBUS_TYPE_ARRAY, "(sss)", &sub))
                goto oom;

        for (i = 0; i < n_changes; i++) {
                const char *type, *path, *source;

                type = unit_file_change_type_to_string(changes[i].type);
                path = strempty(changes[i].path);
                source = strempty(changes[i].source);

                if (!dbus_message_iter_open_container(&sub, DBUS_TYPE_STRUCT, NULL, &sub2) ||
                    !dbus_message_iter_append_basic(&sub2, DBUS_TYPE_STRING, &type) ||
                    !dbus_message_iter_append_basic(&sub2, DBUS_TYPE_STRING, &path) ||
                    !dbus_message_iter_append_basic(&sub2, DBUS_TYPE_STRING, &source) ||
                    !dbus_message_iter_close_container(&sub, &sub2))
                        goto oom;
        }

        if (!dbus_message_iter_close_container(&iter, &sub))
                goto oom;

        return reply;

oom:
        dbus_message_unref(reply);
        return NULL;
}

static int bus_manager_send_unit_files_changed(Manager *m) {
        DBusMessage *s;
        int r;

        s = dbus_message_new_signal("/org/freedesktop/systemd1", "org.freedesktop.systemd1.Manager", "UnitFilesChanged");
        if (!s)
                return -ENOMEM;

        r = bus_broadcast(m, s);
        dbus_message_unref(s);

        return r;
}

static int bus_manager_set_runtime_watchdog_usec(DBusMessageIter *i, const char *property, void *data) {
        uint64_t *t = data;

        assert(i);
        assert(property);

        dbus_message_iter_get_basic(i, t);

        return watchdog_set_timeout(t);
}

static const char systemd_property_string[] =
        PACKAGE_STRING "\0"
        DISTRIBUTION "\0"
        SYSTEMD_FEATURES;

static const BusProperty bus_systemd_properties[] = {
        { "Version",       bus_property_append_string,    "s",  0                                             },
        { "Distribution",  bus_property_append_string,    "s",  sizeof(PACKAGE_STRING)                        },
        { "Features",      bus_property_append_string,    "s",  sizeof(PACKAGE_STRING) + sizeof(DISTRIBUTION) },
        { NULL, }
};

static const BusProperty bus_manager_properties[] = {
        { "Tainted",                     bus_manager_append_tainted,     "s",  0                                                },
        { "FirmwareTimestamp",           bus_property_append_uint64,     "t",  offsetof(Manager, firmware_timestamp.realtime)   },
        { "FirmwareTimestampMonotonic",  bus_property_append_uint64,     "t",  offsetof(Manager, firmware_timestamp.monotonic)  },
        { "LoaderTimestamp",             bus_property_append_uint64,     "t",  offsetof(Manager, loader_timestamp.realtime)     },
        { "LoaderTimestampMonotonic",    bus_property_append_uint64,     "t",  offsetof(Manager, loader_timestamp.monotonic)    },
        { "KernelTimestamp",             bus_property_append_uint64,     "t",  offsetof(Manager, kernel_timestamp.realtime)     },
        { "KernelTimestampMonotonic",    bus_property_append_uint64,     "t",  offsetof(Manager, kernel_timestamp.monotonic)    },
        { "InitRDTimestamp",             bus_property_append_uint64,     "t",  offsetof(Manager, initrd_timestamp.realtime)     },
        { "InitRDTimestampMonotonic",    bus_property_append_uint64,     "t",  offsetof(Manager, initrd_timestamp.monotonic)    },
        { "UserspaceTimestamp",          bus_property_append_uint64,     "t",  offsetof(Manager, userspace_timestamp.realtime)  },
        { "UserspaceTimestampMonotonic", bus_property_append_uint64,     "t",  offsetof(Manager, userspace_timestamp.monotonic) },
        { "FinishTimestamp",             bus_property_append_uint64,     "t",  offsetof(Manager, finish_timestamp.realtime)     },
        { "FinishTimestampMonotonic",    bus_property_append_uint64,     "t",  offsetof(Manager, finish_timestamp.monotonic)    },
        { "LogLevel",                    bus_manager_append_log_level,   "s",  0,                                               false, bus_manager_set_log_level },
        { "LogTarget",                   bus_manager_append_log_target,  "s",  0,                                               false, bus_manager_set_log_target },
        { "NNames",                      bus_manager_append_n_names,     "u",  0                                                },
        { "NJobs",                       bus_manager_append_n_jobs,      "u",  0                                                },
        { "NInstalledJobs",              bus_property_append_uint32,     "u",  offsetof(Manager, n_installed_jobs)              },
        { "NFailedJobs",                 bus_property_append_uint32,     "u",  offsetof(Manager, n_failed_jobs)                 },
        { "Progress",                    bus_manager_append_progress,    "d",  0                                                },
        { "Environment",                 bus_property_append_strv,       "as", offsetof(Manager, environment),                  true },
        { "ConfirmSpawn",                bus_property_append_bool,       "b",  offsetof(Manager, confirm_spawn)                 },
        { "ShowStatus",                  bus_property_append_bool,       "b",  offsetof(Manager, show_status)                   },
        { "UnitPath",                    bus_property_append_strv,       "as", offsetof(Manager, lookup_paths.unit_path),       true },
        { "ControlGroupHierarchy",       bus_property_append_string,     "s",  offsetof(Manager, cgroup_hierarchy),             true },
        { "DefaultControllers",          bus_property_append_strv,       "as", offsetof(Manager, default_controllers),          true },
        { "DefaultStandardOutput",       bus_manager_append_exec_output, "s",  offsetof(Manager, default_std_output)            },
        { "DefaultStandardError",        bus_manager_append_exec_output, "s",  offsetof(Manager, default_std_error)             },
        { "RuntimeWatchdogUSec",         bus_property_append_usec,       "t",  offsetof(Manager, runtime_watchdog),             false, bus_manager_set_runtime_watchdog_usec },
        { "ShutdownWatchdogUSec",        bus_property_append_usec,       "t",  offsetof(Manager, shutdown_watchdog),            false, bus_property_set_usec },
        { "Virtualization",              bus_manager_append_virt,        "s",  0,                                               },
        { NULL, }
};

static DBusHandlerResult bus_manager_message_handler(DBusConnection *connection, DBusMessage *message, void *data) {
        _cleanup_dbus_message_unref_ DBusMessage *reply = NULL;
        _cleanup_free_ char * path = NULL;
        Manager *m = data;
        int r;
        DBusError error;
        JobType job_type = _JOB_TYPE_INVALID;
        bool reload_if_possible = false;
        const char *member;

        assert(connection);
        assert(message);
        assert(m);

        dbus_error_init(&error);

        member = dbus_message_get_member(message);

        if (dbus_message_is_method_call(message, "org.freedesktop.systemd1.Manager", "GetUnit")) {
                const char *name;
                Unit *u;

                if (!dbus_message_get_args(
                                    message,
                                    &error,
                                    DBUS_TYPE_STRING, &name,
                                    DBUS_TYPE_INVALID))
                        return bus_send_error_reply(connection, message, &error, -EINVAL);

                u = manager_get_unit(m, name);
                if (!u) {
                        dbus_set_error(&error, BUS_ERROR_NO_SUCH_UNIT, "Unit %s is not loaded.", name);
                        return bus_send_error_reply(connection, message, &error, -ENOENT);
                }

                SELINUX_UNIT_ACCESS_CHECK(u, connection, message, "status");

                reply = dbus_message_new_method_return(message);
                if (!reply)
                        goto oom;

                path = unit_dbus_path(u);
                if (!path)
                        goto oom;

                if (!dbus_message_append_args(
                                    reply,
                                    DBUS_TYPE_OBJECT_PATH, &path,
                                    DBUS_TYPE_INVALID))
                        goto oom;
        } else if (dbus_message_is_method_call(message, "org.freedesktop.systemd1.Manager", "GetUnitByPID")) {
                Unit *u;
                uint32_t pid;

                if (!dbus_message_get_args(
                                    message,
                                    &error,
                                    DBUS_TYPE_UINT32, &pid,
                                    DBUS_TYPE_INVALID))
                        return bus_send_error_reply(connection, message, &error, -EINVAL);

                u = cgroup_unit_by_pid(m, (pid_t) pid);
                if (!u) {
                        dbus_set_error(&error, BUS_ERROR_NO_SUCH_UNIT, "No unit for PID %lu is loaded.", (unsigned long) pid);
                        return bus_send_error_reply(connection, message, &error, -ENOENT);
                }

                SELINUX_UNIT_ACCESS_CHECK(u, connection, message, "status");

                reply = dbus_message_new_method_return(message);
                if (!reply)
                        goto oom;

                path = unit_dbus_path(u);
                if (!path)
                        goto oom;

                if (!dbus_message_append_args(
                                    reply,
                                    DBUS_TYPE_OBJECT_PATH, &path,
                                    DBUS_TYPE_INVALID))
                        goto oom;
        } else if (dbus_message_is_method_call(message, "org.freedesktop.systemd1.Manager", "LoadUnit")) {
                const char *name;
                Unit *u;

                if (!dbus_message_get_args(
                                    message,
                                    &error,
                                    DBUS_TYPE_STRING, &name,
                                    DBUS_TYPE_INVALID))
                        return bus_send_error_reply(connection, message, &error, -EINVAL);

                r = manager_load_unit(m, name, NULL, &error, &u);
                if (r < 0)
                        return bus_send_error_reply(connection, message, &error, r);

                SELINUX_UNIT_ACCESS_CHECK(u, connection, message, "status");

                reply = dbus_message_new_method_return(message);
                if (!reply)
                        goto oom;

                path = unit_dbus_path(u);
                if (!path)
                        goto oom;

                if (!dbus_message_append_args(
                                    reply,
                                    DBUS_TYPE_OBJECT_PATH, &path,
                                    DBUS_TYPE_INVALID))
                        goto oom;

        } else if (dbus_message_is_method_call(message, "org.freedesktop.systemd1.Manager", "StartUnit"))
                job_type = JOB_START;
        else if (dbus_message_is_method_call(message, "org.freedesktop.systemd1.Manager", "StartUnitReplace"))
                job_type = JOB_START;
        else if (dbus_message_is_method_call(message, "org.freedesktop.systemd1.Manager", "StopUnit"))
                job_type = JOB_STOP;
        else if (dbus_message_is_method_call(message, "org.freedesktop.systemd1.Manager", "ReloadUnit"))
                job_type = JOB_RELOAD;
        else if (dbus_message_is_method_call(message, "org.freedesktop.systemd1.Manager", "RestartUnit"))
                job_type = JOB_RESTART;
        else if (dbus_message_is_method_call(message, "org.freedesktop.systemd1.Manager", "TryRestartUnit"))
                job_type = JOB_TRY_RESTART;
        else if (dbus_message_is_method_call(message, "org.freedesktop.systemd1.Manager", "ReloadOrRestartUnit")) {
                reload_if_possible = true;
                job_type = JOB_RESTART;
        } else if (dbus_message_is_method_call(message, "org.freedesktop.systemd1.Manager", "ReloadOrTryRestartUnit")) {
                reload_if_possible = true;
                job_type = JOB_TRY_RESTART;
        } else if (dbus_message_is_method_call(message, "org.freedesktop.systemd1.Manager", "KillUnit")) {
                const char *name, *swho;
                int32_t signo;
                Unit *u;
                KillWho who;

                if (!dbus_message_get_args(
                                    message,
                                    &error,
                                    DBUS_TYPE_STRING, &name,
                                    DBUS_TYPE_STRING, &swho,
                                    DBUS_TYPE_INT32, &signo,
                                    DBUS_TYPE_INVALID))
                        return bus_send_error_reply(connection, message, &error, -EINVAL);

                if (isempty(swho))
                        who = KILL_ALL;
                else {
                        who = kill_who_from_string(swho);
                        if (who < 0)
                                return bus_send_error_reply(connection, message, &error, -EINVAL);
                }

                if (signo <= 0 || signo >= _NSIG)
                        return bus_send_error_reply(connection, message, &error, -EINVAL);

                u = manager_get_unit(m, name);
                if (!u) {
                        dbus_set_error(&error, BUS_ERROR_NO_SUCH_UNIT, "Unit %s is not loaded.", name);
                        return bus_send_error_reply(connection, message, &error, -ENOENT);
                }

                SELINUX_UNIT_ACCESS_CHECK(u, connection, message, "stop");

                r = unit_kill(u, who, signo, &error);
                if (r < 0)
                        return bus_send_error_reply(connection, message, &error, r);

                if (!(reply = dbus_message_new_method_return(message)))
                        goto oom;

        } else if (dbus_message_is_method_call(message, "org.freedesktop.systemd1.Manager", "GetJob")) {
                uint32_t id;
                Job *j;

                if (!dbus_message_get_args(
                                    message,
                                    &error,
                                    DBUS_TYPE_UINT32, &id,
                                    DBUS_TYPE_INVALID))
                        return bus_send_error_reply(connection, message, &error, -EINVAL);

                j = manager_get_job(m, id);
                if (!j) {
                        dbus_set_error(&error, BUS_ERROR_NO_SUCH_JOB, "Job %u does not exist.", (unsigned) id);
                        return bus_send_error_reply(connection, message, &error, -ENOENT);
                }

                SELINUX_UNIT_ACCESS_CHECK(j->unit, connection, message, "status");

                reply = dbus_message_new_method_return(message);
                if (!reply)
                        goto oom;

                path = job_dbus_path(j);
                if (!path)
                        goto oom;

                if (!dbus_message_append_args(
                                    reply,
                                    DBUS_TYPE_OBJECT_PATH, &path,
                                    DBUS_TYPE_INVALID))
                        goto oom;

        } else if (dbus_message_is_method_call(message, "org.freedesktop.systemd1.Manager", "ClearJobs")) {

                SELINUX_ACCESS_CHECK(connection, message, "reboot");

                manager_clear_jobs(m);

                reply = dbus_message_new_method_return(message);
                if (!reply)
                        goto oom;

        } else if (dbus_message_is_method_call(message, "org.freedesktop.systemd1.Manager", "ResetFailed")) {

                SELINUX_ACCESS_CHECK(connection, message, "reload");

                manager_reset_failed(m);

                reply = dbus_message_new_method_return(message);
                if (!reply)
                        goto oom;

        } else if (dbus_message_is_method_call(message, "org.freedesktop.systemd1.Manager", "ResetFailedUnit")) {
                const char *name;
                Unit *u;

                if (!dbus_message_get_args(
                                    message,
                                    &error,
                                    DBUS_TYPE_STRING, &name,
                                    DBUS_TYPE_INVALID))
                        return bus_send_error_reply(connection, message, &error, -EINVAL);

                u = manager_get_unit(m, name);
                if (!u) {
                        dbus_set_error(&error, BUS_ERROR_NO_SUCH_UNIT, "Unit %s is not loaded.", name);
                        return bus_send_error_reply(connection, message, &error, -ENOENT);
                }

                SELINUX_UNIT_ACCESS_CHECK(u, connection, message, "reload");

                unit_reset_failed(u);

                reply = dbus_message_new_method_return(message);
                if (!reply)
                        goto oom;

        } else if (dbus_message_is_method_call(message, "org.freedesktop.systemd1.Manager", "ListUnits")) {
                DBusMessageIter iter, sub;
                Iterator i;
                Unit *u;
                const char *k;

                SELINUX_ACCESS_CHECK(connection, message, "status");

                reply = dbus_message_new_method_return(message);
                if (!reply)
                        goto oom;

                dbus_message_iter_init_append(reply, &iter);

                if (!dbus_message_iter_open_container(&iter, DBUS_TYPE_ARRAY, "(ssssssouso)", &sub))
                        goto oom;

                HASHMAP_FOREACH_KEY(u, k, m->units, i) {
                        char *u_path, *j_path;
                        const char *description, *load_state, *active_state, *sub_state, *sjob_type, *following;
                        DBusMessageIter sub2;
                        uint32_t job_id;
                        Unit *f;

                        if (k != u->id)
                                continue;

                        if (!dbus_message_iter_open_container(&sub, DBUS_TYPE_STRUCT, NULL, &sub2))
                                goto oom;

                        description = unit_description(u);
                        load_state = unit_load_state_to_string(u->load_state);
                        active_state = unit_active_state_to_string(unit_active_state(u));
                        sub_state = unit_sub_state_to_string(u);

                        f = unit_following(u);
                        following = f ? f->id : "";

                        u_path = unit_dbus_path(u);
                        if (!u_path)
                                goto oom;

                        if (u->job) {
                                job_id = (uint32_t) u->job->id;

                                if (!(j_path = job_dbus_path(u->job))) {
                                        free(u_path);
                                        goto oom;
                                }

                                sjob_type = job_type_to_string(u->job->type);
                        } else {
                                job_id = 0;
                                j_path = u_path;
                                sjob_type = "";
                        }

                        if (!dbus_message_iter_append_basic(&sub2, DBUS_TYPE_STRING, &u->id) ||
                            !dbus_message_iter_append_basic(&sub2, DBUS_TYPE_STRING, &description) ||
                            !dbus_message_iter_append_basic(&sub2, DBUS_TYPE_STRING, &load_state) ||
                            !dbus_message_iter_append_basic(&sub2, DBUS_TYPE_STRING, &active_state) ||
                            !dbus_message_iter_append_basic(&sub2, DBUS_TYPE_STRING, &sub_state) ||
                            !dbus_message_iter_append_basic(&sub2, DBUS_TYPE_STRING, &following) ||
                            !dbus_message_iter_append_basic(&sub2, DBUS_TYPE_OBJECT_PATH, &u_path) ||
                            !dbus_message_iter_append_basic(&sub2, DBUS_TYPE_UINT32, &job_id) ||
                            !dbus_message_iter_append_basic(&sub2, DBUS_TYPE_STRING, &sjob_type) ||
                            !dbus_message_iter_append_basic(&sub2, DBUS_TYPE_OBJECT_PATH, &j_path)) {
                                free(u_path);
                                if (u->job)
                                        free(j_path);
                                goto oom;
                        }

                        free(u_path);
                        if (u->job)
                                free(j_path);

                        if (!dbus_message_iter_close_container(&sub, &sub2))
                                goto oom;
                }

                if (!dbus_message_iter_close_container(&iter, &sub))
                        goto oom;

        } else if (dbus_message_is_method_call(message, "org.freedesktop.systemd1.Manager", "ListJobs")) {
                DBusMessageIter iter, sub;
                Iterator i;
                Job *j;

                SELINUX_ACCESS_CHECK(connection, message, "status");

                reply = dbus_message_new_method_return(message);
                if (!reply)
                        goto oom;

                dbus_message_iter_init_append(reply, &iter);

                if (!dbus_message_iter_open_container(&iter, DBUS_TYPE_ARRAY, "(usssoo)", &sub))
                        goto oom;

                HASHMAP_FOREACH(j, m->jobs, i) {
                        char *u_path, *j_path;
                        const char *state, *type;
                        uint32_t id;
                        DBusMessageIter sub2;

                        if (!dbus_message_iter_open_container(&sub, DBUS_TYPE_STRUCT, NULL, &sub2))
                                goto oom;

                        id = (uint32_t) j->id;
                        state = job_state_to_string(j->state);
                        type = job_type_to_string(j->type);

                        j_path = job_dbus_path(j);
                        if (!j_path)
                                goto oom;

                        u_path = unit_dbus_path(j->unit);
                        if (!u_path) {
                                free(j_path);
                                goto oom;
                        }

                        if (!dbus_message_iter_append_basic(&sub2, DBUS_TYPE_UINT32, &id) ||
                            !dbus_message_iter_append_basic(&sub2, DBUS_TYPE_STRING, &j->unit->id) ||
                            !dbus_message_iter_append_basic(&sub2, DBUS_TYPE_STRING, &type) ||
                            !dbus_message_iter_append_basic(&sub2, DBUS_TYPE_STRING, &state) ||
                            !dbus_message_iter_append_basic(&sub2, DBUS_TYPE_OBJECT_PATH, &j_path) ||
                            !dbus_message_iter_append_basic(&sub2, DBUS_TYPE_OBJECT_PATH, &u_path)) {
                                free(j_path);
                                free(u_path);
                                goto oom;
                        }

                        free(j_path);
                        free(u_path);

                        if (!dbus_message_iter_close_container(&sub, &sub2))
                                goto oom;
                }

                if (!dbus_message_iter_close_container(&iter, &sub))
                        goto oom;

        } else if (dbus_message_is_method_call(message, "org.freedesktop.systemd1.Manager", "Subscribe")) {
                char *client;
                Set *s;

                SELINUX_ACCESS_CHECK(connection, message, "status");

                s = BUS_CONNECTION_SUBSCRIBED(m, connection);
                if (!s) {
                        s = set_new(string_hash_func, string_compare_func);
                        if (!s)
                                goto oom;

                        if (!dbus_connection_set_data(connection, m->subscribed_data_slot, s, NULL)) {
                                set_free(s);
                                goto oom;
                        }
                }

                client = strdup(bus_message_get_sender_with_fallback(message));
                if (!client)
                        goto oom;

                r = set_put(s, client);
                if (r < 0) {
                        free(client);
                        return bus_send_error_reply(connection, message, NULL, r);
                }

                reply = dbus_message_new_method_return(message);
                if (!reply)
                        goto oom;

        } else if (dbus_message_is_method_call(message, "org.freedesktop.systemd1.Manager", "Unsubscribe")) {
                char *client;

                SELINUX_ACCESS_CHECK(connection, message, "status");

                client = set_remove(BUS_CONNECTION_SUBSCRIBED(m, connection), (char*) bus_message_get_sender_with_fallback(message));
                if (!client) {
                        dbus_set_error(&error, BUS_ERROR_NOT_SUBSCRIBED, "Client is not subscribed.");
                        return bus_send_error_reply(connection, message, &error, -ENOENT);
                }

                free(client);

                reply = dbus_message_new_method_return(message);
                if (!reply)
                        goto oom;

        } else if (dbus_message_is_method_call(message, "org.freedesktop.systemd1.Manager", "Dump")) {
                FILE *f;
                char *dump = NULL;
                size_t size;

                SELINUX_ACCESS_CHECK(connection, message, "status");

                reply = dbus_message_new_method_return(message);
                if (!reply)
                        goto oom;

                f = open_memstream(&dump, &size);
                if (!f)
                        goto oom;

                manager_dump_units(m, f, NULL);
                manager_dump_jobs(m, f, NULL);

                if (ferror(f)) {
                        fclose(f);
                        free(dump);
                        goto oom;
                }

                fclose(f);

                if (!dbus_message_append_args(reply, DBUS_TYPE_STRING, &dump, DBUS_TYPE_INVALID)) {
                        free(dump);
                        goto oom;
                }

                free(dump);
        } else if (dbus_message_is_method_call(message, "org.freedesktop.systemd1.Manager", "CreateSnapshot")) {
                const char *name;
                dbus_bool_t cleanup;
                Snapshot *s;

                SELINUX_ACCESS_CHECK(connection, message, "start");

                if (!dbus_message_get_args(
                                    message,
                                    &error,
                                    DBUS_TYPE_STRING, &name,
                                    DBUS_TYPE_BOOLEAN, &cleanup,
                                    DBUS_TYPE_INVALID))
                        return bus_send_error_reply(connection, message, &error, -EINVAL);

                if (isempty(name))
                        name = NULL;

                r = snapshot_create(m, name, cleanup, &error, &s);
                if (r < 0)
                        return bus_send_error_reply(connection, message, &error, r);

                reply = dbus_message_new_method_return(message);
                if (!reply)
                        goto oom;

                path = unit_dbus_path(UNIT(s));
                if (!path)
                        goto oom;

                if (!dbus_message_append_args(
                                    reply,
                                    DBUS_TYPE_OBJECT_PATH, &path,
                                    DBUS_TYPE_INVALID))
                        goto oom;

        } else if (dbus_message_is_method_call(message, "org.freedesktop.DBus.Introspectable", "Introspect")) {
                char *introspection = NULL;
                FILE *f;
                Iterator i;
                Unit *u;
                Job *j;
                const char *k;
                size_t size;

                SELINUX_ACCESS_CHECK(connection, message, "status");

                reply = dbus_message_new_method_return(message);
                if (!reply)
                        goto oom;

                /* We roll our own introspection code here, instead of
                 * relying on bus_default_message_handler() because we
                 * need to generate our introspection string
                 * dynamically. */

                f = open_memstream(&introspection, &size);
                if (!f)
                        goto oom;

                fputs(INTROSPECTION_BEGIN, f);

                HASHMAP_FOREACH_KEY(u, k, m->units, i) {
                        char *p;

                        if (k != u->id)
                                continue;

                        p = bus_path_escape(k);
                        if (!p) {
                                fclose(f);
                                free(introspection);
                                goto oom;
                        }

                        fprintf(f, "<node name=\"unit/%s\"/>", p);
                        free(p);
                }

                HASHMAP_FOREACH(j, m->jobs, i)
                        fprintf(f, "<node name=\"job/%lu\"/>", (unsigned long) j->id);

                fputs(INTROSPECTION_END, f);

                if (ferror(f)) {
                        fclose(f);
                        free(introspection);
                        goto oom;
                }

                fclose(f);

                if (!introspection)
                        goto oom;

                if (!dbus_message_append_args(reply, DBUS_TYPE_STRING, &introspection, DBUS_TYPE_INVALID)) {
                        free(introspection);
                        goto oom;
                }

                free(introspection);

        } else if (dbus_message_is_method_call(message, "org.freedesktop.systemd1.Manager", "Reload")) {

                SELINUX_ACCESS_CHECK(connection, message, "reload");

                assert(!m->queued_message);

                /* Instead of sending the reply back right away, we
                 * just remember that we need to and then send it
                 * after the reload is finished. That way the caller
                 * knows when the reload finished. */

                m->queued_message = dbus_message_new_method_return(message);
                if (!m->queued_message)
                        goto oom;

                m->queued_message_connection = connection;
                m->exit_code = MANAGER_RELOAD;

        } else if (dbus_message_is_method_call(message, "org.freedesktop.systemd1.Manager", "Reexecute")) {

                SELINUX_ACCESS_CHECK(connection, message, "reload");

                /* We don't send a reply back here, the client should
                 * just wait for us disconnecting. */

                m->exit_code = MANAGER_REEXECUTE;

        } else if (dbus_message_is_method_call(message, "org.freedesktop.systemd1.Manager", "Exit")) {

                SELINUX_ACCESS_CHECK(connection, message, "halt");

                if (m->running_as == SYSTEMD_SYSTEM) {
                        dbus_set_error(&error, BUS_ERROR_NOT_SUPPORTED, "Exit is only supported for user service managers.");
                        return bus_send_error_reply(connection, message, &error, -ENOTSUP);
                }

                reply = dbus_message_new_method_return(message);
                if (!reply)
                        goto oom;

                m->exit_code = MANAGER_EXIT;

        } else if (dbus_message_is_method_call(message, "org.freedesktop.systemd1.Manager", "Reboot")) {

                SELINUX_ACCESS_CHECK(connection, message, "reboot");

                if (m->running_as != SYSTEMD_SYSTEM) {
                        dbus_set_error(&error, BUS_ERROR_NOT_SUPPORTED, "Reboot is only supported for system managers.");
                        return bus_send_error_reply(connection, message, &error, -ENOTSUP);
                }

                reply = dbus_message_new_method_return(message);
                if (!reply)
                        goto oom;

                m->exit_code = MANAGER_REBOOT;

        } else if (dbus_message_is_method_call(message, "org.freedesktop.systemd1.Manager", "PowerOff")) {

                SELINUX_ACCESS_CHECK(connection, message, "halt");

                if (m->running_as != SYSTEMD_SYSTEM) {
                        dbus_set_error(&error, BUS_ERROR_NOT_SUPPORTED, "Powering off is only supported for system managers.");
                        return bus_send_error_reply(connection, message, &error, -ENOTSUP);
                }

                reply = dbus_message_new_method_return(message);
                if (!reply)
                        goto oom;

                m->exit_code = MANAGER_POWEROFF;

        } else if (dbus_message_is_method_call(message, "org.freedesktop.systemd1.Manager", "Halt")) {

                SELINUX_ACCESS_CHECK(connection, message, "halt");

                if (m->running_as != SYSTEMD_SYSTEM) {
                        dbus_set_error(&error, BUS_ERROR_NOT_SUPPORTED, "Halting is only supported for system managers.");
                        return bus_send_error_reply(connection, message, &error, -ENOTSUP);
                }

                reply = dbus_message_new_method_return(message);
                if (!reply)
                        goto oom;

                m->exit_code = MANAGER_HALT;

        } else if (dbus_message_is_method_call(message, "org.freedesktop.systemd1.Manager", "KExec")) {

                SELINUX_ACCESS_CHECK(connection, message, "reboot");

                if (m->running_as != SYSTEMD_SYSTEM) {
                        dbus_set_error(&error, BUS_ERROR_NOT_SUPPORTED, "kexec is only supported for system managers.");
                        return bus_send_error_reply(connection, message, &error, -ENOTSUP);
                }

                reply = dbus_message_new_method_return(message);
                if (!reply)
                        goto oom;

                m->exit_code = MANAGER_KEXEC;

        } else if (dbus_message_is_method_call(message, "org.freedesktop.systemd1.Manager", "SwitchRoot")) {
                const char *switch_root, *switch_root_init;
                char *u, *v;
                int k;

                SELINUX_ACCESS_CHECK(connection, message, "reboot");

                if (!dbus_message_get_args(
                                    message,
                                    &error,
                                    DBUS_TYPE_STRING, &switch_root,
                                    DBUS_TYPE_STRING, &switch_root_init,
                                    DBUS_TYPE_INVALID))
                        return bus_send_error_reply(connection, message, &error, -EINVAL);

                if (path_equal(switch_root, "/") || !path_is_absolute(switch_root))
                        return bus_send_error_reply(connection, message, NULL, -EINVAL);

                if (!isempty(switch_root_init) && !path_is_absolute(switch_root_init))
                        return bus_send_error_reply(connection, message, NULL, -EINVAL);

                if (m->running_as != SYSTEMD_SYSTEM) {
                        dbus_set_error(&error, BUS_ERROR_NOT_SUPPORTED, "Switching root is only supported for system managers.");
                        return bus_send_error_reply(connection, message, &error, -ENOTSUP);
                }

                /* Safety check */
                if (isempty(switch_root_init))
                        k = access(switch_root, F_OK);
                else {
                        char *p;

                        p = strjoin(switch_root, "/", switch_root_init, NULL);
                        if (!p)
                                goto oom;

                        k = access(p, X_OK);
                        free(p);
                }
                if (k < 0)
                        return bus_send_error_reply(connection, message, NULL, -errno);

                u = strdup(switch_root);
                if (!u)
                        goto oom;

                if (!isempty(switch_root_init)) {
                        v = strdup(switch_root_init);
                        if (!v) {
                                free(u);
                                goto oom;
                        }
                } else
                        v = NULL;

                free(m->switch_root);
                free(m->switch_root_init);
                m->switch_root = u;
                m->switch_root_init = v;

                reply = dbus_message_new_method_return(message);
                if (!reply)
                        goto oom;

                m->exit_code = MANAGER_SWITCH_ROOT;

        } else if (dbus_message_is_method_call(message, "org.freedesktop.systemd1.Manager", "SetEnvironment")) {
                char **l = NULL, **e = NULL;

                SELINUX_ACCESS_CHECK(connection, message, "reboot");

                r = bus_parse_strv(message, &l);
                if (r == -ENOMEM)
                        goto oom;
                if (r < 0)
                        return bus_send_error_reply(connection, message, NULL, r);

                e = strv_env_merge(2, m->environment, l);
                strv_free(l);
                if (!e)
                        goto oom;

                reply = dbus_message_new_method_return(message);
                if (!reply) {
                        strv_free(e);
                        goto oom;
                }

                strv_free(m->environment);
                m->environment = e;

        } else if (dbus_message_is_method_call(message, "org.freedesktop.systemd1.Manager", "UnsetEnvironment")) {
                char **l = NULL, **e = NULL;

                SELINUX_ACCESS_CHECK(connection, message, "reboot");

                r = bus_parse_strv(message, &l);
                if (r == -ENOMEM)
                        goto oom;
                if (r < 0)
                        return bus_send_error_reply(connection, message, NULL, r);

                e = strv_env_delete(m->environment, 1, l);
                strv_free(l);

                if (!e)
                        goto oom;

                if (!(reply = dbus_message_new_method_return(message))) {
                        strv_free(e);
                        goto oom;
                }

                strv_free(m->environment);
                m->environment = e;

        } else if (dbus_message_is_method_call(message, "org.freedesktop.systemd1.Manager", "UnsetAndSetEnvironment")) {
                char **l_set = NULL, **l_unset = NULL, **e = NULL, **f = NULL;
                DBusMessageIter iter;

                SELINUX_ACCESS_CHECK(connection, message, "reboot");

                if (!dbus_message_iter_init(message, &iter))
                        goto oom;

                r = bus_parse_strv_iter(&iter, &l_unset);
                if (r == -ENOMEM)
                        goto oom;
                if (r < 0)
                        return bus_send_error_reply(connection, message, NULL, r);

                if (!dbus_message_iter_next(&iter)) {
                        strv_free(l_unset);
                        return bus_send_error_reply(connection, message, NULL, -EINVAL);
                }

                r = bus_parse_strv_iter(&iter, &l_set);
                if (r < 0) {
                        strv_free(l_unset);
                        if (r == -ENOMEM)
                                goto oom;

                        return bus_send_error_reply(connection, message, NULL, r);
                }

                e = strv_env_delete(m->environment, 1, l_unset);
                strv_free(l_unset);

                if (!e) {
                        strv_free(l_set);
                        goto oom;
                }

                f = strv_env_merge(2, e, l_set);
                strv_free(l_set);
                strv_free(e);

                if (!f)
                        goto oom;

                if (!(reply = dbus_message_new_method_return(message))) {
                        strv_free(f);
                        goto oom;
                }

                strv_free(m->environment);
                m->environment = f;
        } else if (dbus_message_is_method_call(message, "org.freedesktop.systemd1.Manager", "ListUnitFiles")) {
                DBusMessageIter iter, sub, sub2;
                Hashmap *h;
                Iterator i;
                UnitFileList *item;

                SELINUX_ACCESS_CHECK(connection, message, "status");

                reply = dbus_message_new_method_return(message);
                if (!reply)
                        goto oom;

                h = hashmap_new(string_hash_func, string_compare_func);
                if (!h)
                        goto oom;

                r = unit_file_get_list(m->running_as == SYSTEMD_SYSTEM ? UNIT_FILE_SYSTEM : UNIT_FILE_USER, NULL, h);
                if (r < 0) {
                        unit_file_list_free(h);
                        dbus_message_unref(reply);
                        return bus_send_error_reply(connection, message, NULL, r);
                }

                dbus_message_iter_init_append(reply, &iter);

                if (!dbus_message_iter_open_container(&iter, DBUS_TYPE_ARRAY, "(ss)", &sub)) {
                        unit_file_list_free(h);
                        goto oom;
                }

                HASHMAP_FOREACH(item, h, i) {
                        const char *state;

                        state = unit_file_state_to_string(item->state);
                        assert(state);

                        if (!dbus_message_iter_open_container(&sub, DBUS_TYPE_STRUCT, NULL, &sub2) ||
                            !dbus_message_iter_append_basic(&sub2, DBUS_TYPE_STRING, &item->path) ||
                            !dbus_message_iter_append_basic(&sub2, DBUS_TYPE_STRING, &state) ||
                            !dbus_message_iter_close_container(&sub, &sub2)) {
                                unit_file_list_free(h);
                                goto oom;
                        }
                }

                unit_file_list_free(h);

                if (!dbus_message_iter_close_container(&iter, &sub))
                        goto oom;

        } else if (dbus_message_is_method_call(message, "org.freedesktop.systemd1.Manager", "GetUnitFileState")) {
                const char *name;
                UnitFileState state;
                const char *s;

                SELINUX_ACCESS_CHECK(connection, message, "status");

                if (!dbus_message_get_args(
                                    message,
                                    &error,
                                    DBUS_TYPE_STRING, &name,
                                    DBUS_TYPE_INVALID))
                        return bus_send_error_reply(connection, message, &error, -EINVAL);

                state = unit_file_get_state(m->running_as == SYSTEMD_SYSTEM ? UNIT_FILE_SYSTEM : UNIT_FILE_USER, NULL, name);
                if (state < 0)
                        return bus_send_error_reply(connection, message, NULL, state);

                s = unit_file_state_to_string(state);
                assert(s);

                reply = dbus_message_new_method_return(message);
                if (!reply)
                        goto oom;

                if (!dbus_message_append_args(
                                    reply,
                                    DBUS_TYPE_STRING, &s,
                                    DBUS_TYPE_INVALID))
                        goto oom;
        } else if (dbus_message_is_method_call(message, "org.freedesktop.systemd1.Manager", "EnableUnitFiles") ||
                   dbus_message_is_method_call(message, "org.freedesktop.systemd1.Manager", "ReenableUnitFiles") ||
                   dbus_message_is_method_call(message, "org.freedesktop.systemd1.Manager", "LinkUnitFiles") ||
                   dbus_message_is_method_call(message, "org.freedesktop.systemd1.Manager", "PresetUnitFiles") ||
                   dbus_message_is_method_call(message, "org.freedesktop.systemd1.Manager", "MaskUnitFiles")) {

                char **l = NULL;
                DBusMessageIter iter;
                UnitFileScope scope = m->running_as == SYSTEMD_SYSTEM ? UNIT_FILE_SYSTEM : UNIT_FILE_USER;
                UnitFileChange *changes = NULL;
                unsigned n_changes = 0;
                dbus_bool_t runtime, force;
                int carries_install_info = -1;

                SELINUX_ACCESS_CHECK(connection, message, streq(member, "MaskUnitFiles") ? "disable" : "enable");

                if (!dbus_message_iter_init(message, &iter))
                        goto oom;

                r = bus_parse_strv_iter(&iter, &l);
                if (r < 0) {
                        if (r == -ENOMEM)
                                goto oom;

                        return bus_send_error_reply(connection, message, NULL, r);
                }

                if (!dbus_message_iter_next(&iter) ||
                    bus_iter_get_basic_and_next(&iter, DBUS_TYPE_BOOLEAN, &runtime, true) < 0 ||
                    bus_iter_get_basic_and_next(&iter, DBUS_TYPE_BOOLEAN, &force, false) < 0) {
                        strv_free(l);
                        return bus_send_error_reply(connection, message, NULL, -EIO);
                }

                if (streq(member, "EnableUnitFiles")) {
                        r = unit_file_enable(scope, runtime, NULL, l, force, &changes, &n_changes);
                        carries_install_info = r;
                } else if (streq(member, "ReenableUnitFiles")) {
                        r = unit_file_reenable(scope, runtime, NULL, l, force, &changes, &n_changes);
                        carries_install_info = r;
                } else if (streq(member, "LinkUnitFiles"))
                        r = unit_file_link(scope, runtime, NULL, l, force, &changes, &n_changes);
                else if (streq(member, "PresetUnitFiles")) {
                        r = unit_file_preset(scope, runtime, NULL, l, force, &changes, &n_changes);
                        carries_install_info = r;
                } else if (streq(member, "MaskUnitFiles"))
                        r = unit_file_mask(scope, runtime, NULL, l, force, &changes, &n_changes);
                else
                        assert_not_reached("Uh? Wrong method");

                strv_free(l);
                bus_manager_send_unit_files_changed(m);

                if (r < 0) {
                        unit_file_changes_free(changes, n_changes);
                        return bus_send_error_reply(connection, message, NULL, r);
                }

                reply = message_from_file_changes(message, changes, n_changes, carries_install_info);
                unit_file_changes_free(changes, n_changes);

                if (!reply)
                        goto oom;

        } else if (dbus_message_is_method_call(message, "org.freedesktop.systemd1.Manager", "DisableUnitFiles") ||
                   dbus_message_is_method_call(message, "org.freedesktop.systemd1.Manager", "UnmaskUnitFiles")) {

                char **l = NULL;
                DBusMessageIter iter;
                UnitFileScope scope = m->running_as == SYSTEMD_SYSTEM ? UNIT_FILE_SYSTEM : UNIT_FILE_USER;
                UnitFileChange *changes = NULL;
                unsigned n_changes = 0;
                dbus_bool_t runtime;

                SELINUX_ACCESS_CHECK(connection, message, streq(member, "UnmaskUnitFiles") ? "enable" : "disable");

                if (!dbus_message_iter_init(message, &iter))
                        goto oom;

                r = bus_parse_strv_iter(&iter, &l);
                if (r < 0) {
                        if (r == -ENOMEM)
                                goto oom;

                        return bus_send_error_reply(connection, message, NULL, r);
                }

                if (!dbus_message_iter_next(&iter) ||
                    bus_iter_get_basic_and_next(&iter, DBUS_TYPE_BOOLEAN, &runtime, false) < 0) {
                        strv_free(l);
                        return bus_send_error_reply(connection, message, NULL, -EIO);
                }

                if (streq(member, "DisableUnitFiles"))
                        r = unit_file_disable(scope, runtime, NULL, l, &changes, &n_changes);
                else if (streq(member, "UnmaskUnitFiles"))
                        r = unit_file_unmask(scope, runtime, NULL, l, &changes, &n_changes);
                else
                        assert_not_reached("Uh? Wrong method");

                strv_free(l);
                bus_manager_send_unit_files_changed(m);

                if (r < 0) {
                        unit_file_changes_free(changes, n_changes);
                        return bus_send_error_reply(connection, message, NULL, r);
                }

                reply = message_from_file_changes(message, changes, n_changes, -1);
                unit_file_changes_free(changes, n_changes);

                if (!reply)
                        goto oom;

        } else {
                const BusBoundProperties bps[] = {
                        { "org.freedesktop.systemd1.Manager", bus_systemd_properties, systemd_property_string },
                        { "org.freedesktop.systemd1.Manager", bus_manager_properties, m },
                        { NULL, }
                };

                SELINUX_ACCESS_CHECK(connection, message, "status");

                return bus_default_message_handler(connection, message, NULL, INTERFACES_LIST, bps);
        }

        if (job_type != _JOB_TYPE_INVALID) {
                const char *name, *smode, *old_name = NULL;
                JobMode mode;
                Unit *u;
                dbus_bool_t b;

                if (dbus_message_is_method_call(message, "org.freedesktop.systemd1.Manager", "StartUnitReplace"))
                        b = dbus_message_get_args(
                                        message,
                                        &error,
                                        DBUS_TYPE_STRING, &old_name,
                                        DBUS_TYPE_STRING, &name,
                                        DBUS_TYPE_STRING, &smode,
                                        DBUS_TYPE_INVALID);
                else
                        b = dbus_message_get_args(
                                        message,
                                        &error,
                                        DBUS_TYPE_STRING, &name,
                                        DBUS_TYPE_STRING, &smode,
                                        DBUS_TYPE_INVALID);
                if (!b)
                        return bus_send_error_reply(connection, message, &error, -EINVAL);

                if (old_name) {
                        u = manager_get_unit(m, old_name);
                        if (!u || !u->job || u->job->type != JOB_START) {
                                dbus_set_error(&error, BUS_ERROR_NO_SUCH_JOB, "No job queued for unit %s", old_name);
                                return bus_send_error_reply(connection, message, &error, -ENOENT);
                        }
                }

                mode = job_mode_from_string(smode);
                if (mode < 0) {
                        dbus_set_error(&error, BUS_ERROR_INVALID_JOB_MODE, "Job mode %s is invalid.", smode);
                        return bus_send_error_reply(connection, message, &error, -EINVAL);
                }

                r = manager_load_unit(m, name, NULL, &error, &u);
                if (r < 0)
                        return bus_send_error_reply(connection, message, &error, r);

                return bus_unit_queue_job(connection, message, u, job_type, mode, reload_if_possible);
        }

        if (reply)
                if (!dbus_connection_send(connection, reply, NULL))
                        goto oom;

        return DBUS_HANDLER_RESULT_HANDLED;

oom:
        dbus_error_free(&error);

        return DBUS_HANDLER_RESULT_NEED_MEMORY;
}

const DBusObjectPathVTable bus_manager_vtable = {
        .message_function = bus_manager_message_handler
};
