1 /*
2  *  Copyright 2014 Google, Inc
3  *
4  *  Licensed under the Apache License, Version 2.0 (the "License");
5  *  you may not use this file except in compliance with the License.
6  *  You may obtain a copy of the License at
7  *
8  *      http://www.apache.org/licenses/LICENSE-2.0
9  *
10  *  Unless required by applicable law or agreed to in writing, software
11  *  distributed under the License is distributed on an "AS IS" BASIS,
12  *  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13  *  See the License for the specific language governing permissions and
14  *  limitations under the License.
15  */
16 
17 #pragma once
18 
19 #include <sys/cdefs.h>
20 #include <sys/types.h>
21 #include <string>
22 #include <vector>
23 
24 __BEGIN_DECLS
25 
26 static constexpr const char* CGROUPV2_CONTROLLER_NAME = "cgroup2";
27 
28 bool CgroupGetControllerPath(const std::string& cgroup_name, std::string* path);
29 bool CgroupGetAttributePath(const std::string& attr_name, std::string* path);
30 bool CgroupGetAttributePathForTask(const std::string& attr_name, int tid, std::string* path);
31 
32 bool SetTaskProfiles(int tid, const std::vector<std::string>& profiles, bool use_fd_cache = false);
33 bool SetProcessProfiles(uid_t uid, pid_t pid, const std::vector<std::string>& profiles);
34 
35 #ifndef __ANDROID_VNDK__
36 
37 static constexpr const char* CGROUPS_RC_PATH = "/dev/cgroup_info/cgroup.rc";
38 
39 bool UsePerAppMemcg();
40 
41 // Drop the fd cache of cgroup path. It is used for when resource caching is enabled and a process
42 // loses the access to the path, the access checking (See SetCgroupAction::EnableResourceCaching)
43 // should be active again. E.g. Zygote specialization for child process.
44 void DropTaskProfilesResourceCaching();
45 
46 // Return 0 and removes the cgroup if there are no longer any processes in it.
47 // Returns -1 in the case of an error occurring or if there are processes still running
48 // even after retrying for up to 200ms.
49 // If max_processes is not nullptr, it returns the maximum number of processes seen in the cgroup
50 // during the killing process.  Note that this can be 0 if all processes from the process group have
51 // already been terminated.
52 int killProcessGroup(uid_t uid, int initialPid, int signal, int* max_processes = nullptr);
53 
54 // Returns the same as killProcessGroup(), however it does not retry, which means
55 // that it only returns 0 in the case that the cgroup exists and it contains no processes.
56 int killProcessGroupOnce(uid_t uid, int initialPid, int signal, int* max_processes = nullptr);
57 
58 int createProcessGroup(uid_t uid, int initialPid, bool memControl = false);
59 
60 // Set various properties of a process group. For these functions to work, the process group must
61 // have been created by passing memControl=true to createProcessGroup.
62 bool setProcessGroupSwappiness(uid_t uid, int initialPid, int swappiness);
63 bool setProcessGroupSoftLimit(uid_t uid, int initialPid, int64_t softLimitInBytes);
64 bool setProcessGroupLimit(uid_t uid, int initialPid, int64_t limitInBytes);
65 
66 void removeAllProcessGroups(void);
67 
68 #endif // __ANDROID_VNDK__
69 
70 __END_DECLS
71