1 /* SPDX-License-Identifier: LGPL-2.1-or-later */
2 
3 #include <errno.h>
4 #include <unistd.h>
5 
6 #include "alloc-util.h"
7 #include "dbus-scope.h"
8 #include "dbus-unit.h"
9 #include "load-dropin.h"
10 #include "log.h"
11 #include "process-util.h"
12 #include "random-util.h"
13 #include "scope.h"
14 #include "serialize.h"
15 #include "special.h"
16 #include "string-table.h"
17 #include "string-util.h"
18 #include "strv.h"
19 #include "unit-name.h"
20 #include "unit.h"
21 
22 static const UnitActiveState state_translation_table[_SCOPE_STATE_MAX] = {
23         [SCOPE_DEAD] = UNIT_INACTIVE,
24         [SCOPE_RUNNING] = UNIT_ACTIVE,
25         [SCOPE_ABANDONED] = UNIT_ACTIVE,
26         [SCOPE_STOP_SIGTERM] = UNIT_DEACTIVATING,
27         [SCOPE_STOP_SIGKILL] = UNIT_DEACTIVATING,
28         [SCOPE_FAILED] = UNIT_FAILED
29 };
30 
31 static int scope_dispatch_timer(sd_event_source *source, usec_t usec, void *userdata);
32 
scope_init(Unit * u)33 static void scope_init(Unit *u) {
34         Scope *s = SCOPE(u);
35 
36         assert(u);
37         assert(u->load_state == UNIT_STUB);
38 
39         s->runtime_max_usec = USEC_INFINITY;
40         s->timeout_stop_usec = u->manager->default_timeout_stop_usec;
41         u->ignore_on_isolate = true;
42 }
43 
scope_done(Unit * u)44 static void scope_done(Unit *u) {
45         Scope *s = SCOPE(u);
46 
47         assert(u);
48 
49         s->controller = mfree(s->controller);
50         s->controller_track = sd_bus_track_unref(s->controller_track);
51 
52         s->timer_event_source = sd_event_source_disable_unref(s->timer_event_source);
53 }
54 
scope_running_timeout(Scope * s)55 static usec_t scope_running_timeout(Scope *s) {
56         usec_t delta = 0;
57 
58         assert(s);
59 
60         if (s->runtime_rand_extra_usec != 0) {
61                 delta = random_u64_range(s->runtime_rand_extra_usec);
62                 log_unit_debug(UNIT(s), "Adding delta of %s sec to timeout", FORMAT_TIMESPAN(delta, USEC_PER_SEC));
63         }
64 
65         return usec_add(usec_add(UNIT(s)->active_enter_timestamp.monotonic,
66                                  s->runtime_max_usec),
67                         delta);
68 }
69 
scope_arm_timer(Scope * s,usec_t usec)70 static int scope_arm_timer(Scope *s, usec_t usec) {
71         int r;
72 
73         assert(s);
74 
75         if (s->timer_event_source) {
76                 r = sd_event_source_set_time(s->timer_event_source, usec);
77                 if (r < 0)
78                         return r;
79 
80                 return sd_event_source_set_enabled(s->timer_event_source, SD_EVENT_ONESHOT);
81         }
82 
83         if (usec == USEC_INFINITY)
84                 return 0;
85 
86         r = sd_event_add_time(
87                         UNIT(s)->manager->event,
88                         &s->timer_event_source,
89                         CLOCK_MONOTONIC,
90                         usec, 0,
91                         scope_dispatch_timer, s);
92         if (r < 0)
93                 return r;
94 
95         (void) sd_event_source_set_description(s->timer_event_source, "scope-timer");
96 
97         return 0;
98 }
99 
scope_set_state(Scope * s,ScopeState state)100 static void scope_set_state(Scope *s, ScopeState state) {
101         ScopeState old_state;
102         assert(s);
103 
104         if (s->state != state)
105                 bus_unit_send_pending_change_signal(UNIT(s), false);
106 
107         old_state = s->state;
108         s->state = state;
109 
110         if (!IN_SET(state, SCOPE_STOP_SIGTERM, SCOPE_STOP_SIGKILL))
111                 s->timer_event_source = sd_event_source_disable_unref(s->timer_event_source);
112 
113         if (IN_SET(state, SCOPE_DEAD, SCOPE_FAILED)) {
114                 unit_unwatch_all_pids(UNIT(s));
115                 unit_dequeue_rewatch_pids(UNIT(s));
116         }
117 
118         if (state != old_state)
119                 log_debug("%s changed %s -> %s", UNIT(s)->id, scope_state_to_string(old_state), scope_state_to_string(state));
120 
121         unit_notify(UNIT(s), state_translation_table[old_state], state_translation_table[state], 0);
122 }
123 
scope_add_default_dependencies(Scope * s)124 static int scope_add_default_dependencies(Scope *s) {
125         int r;
126 
127         assert(s);
128 
129         if (!UNIT(s)->default_dependencies)
130                 return 0;
131 
132         /* Make sure scopes are unloaded on shutdown */
133         r = unit_add_two_dependencies_by_name(
134                         UNIT(s),
135                         UNIT_BEFORE, UNIT_CONFLICTS,
136                         SPECIAL_SHUTDOWN_TARGET, true,
137                         UNIT_DEPENDENCY_DEFAULT);
138         if (r < 0)
139                 return r;
140 
141         return 0;
142 }
143 
scope_verify(Scope * s)144 static int scope_verify(Scope *s) {
145         assert(s);
146         assert(UNIT(s)->load_state == UNIT_LOADED);
147 
148         if (set_isempty(UNIT(s)->pids) &&
149             !MANAGER_IS_RELOADING(UNIT(s)->manager) &&
150             !unit_has_name(UNIT(s), SPECIAL_INIT_SCOPE))
151                 return log_unit_error_errno(UNIT(s), SYNTHETIC_ERRNO(ENOENT), "Scope has no PIDs. Refusing.");
152 
153         return 0;
154 }
155 
scope_load_init_scope(Unit * u)156 static int scope_load_init_scope(Unit *u) {
157         assert(u);
158 
159         if (!unit_has_name(u, SPECIAL_INIT_SCOPE))
160                 return 0;
161 
162         u->transient = true;
163         u->perpetual = true;
164 
165         /* init.scope is a bit special, as it has to stick around forever. Because of its special semantics we
166          * synthesize it here, instead of relying on the unit file on disk. */
167 
168         u->default_dependencies = false;
169 
170         /* Prettify things, if we can. */
171         if (!u->description)
172                 u->description = strdup("System and Service Manager");
173         if (!u->documentation)
174                 (void) strv_extend(&u->documentation, "man:systemd(1)");
175 
176         return 1;
177 }
178 
scope_add_extras(Scope * s)179 static int scope_add_extras(Scope *s) {
180         int r;
181 
182         r = unit_patch_contexts(UNIT(s));
183         if (r < 0)
184                 return r;
185 
186         r = unit_set_default_slice(UNIT(s));
187         if (r < 0)
188                 return r;
189 
190         return scope_add_default_dependencies(s);
191 }
192 
scope_load(Unit * u)193 static int scope_load(Unit *u) {
194         Scope *s = SCOPE(u);
195         int r;
196 
197         assert(s);
198         assert(u->load_state == UNIT_STUB);
199 
200         if (!u->transient && !MANAGER_IS_RELOADING(u->manager))
201                 /* Refuse to load non-transient scope units, but allow them while reloading. */
202                 return -ENOENT;
203 
204         r = scope_load_init_scope(u);
205         if (r < 0)
206                 return r;
207 
208         r = unit_load_fragment_and_dropin(u, false);
209         if (r < 0)
210                 return r;
211 
212         if (u->load_state != UNIT_LOADED)
213                 return 0;
214 
215         r = scope_add_extras(s);
216         if (r < 0)
217                 return r;
218 
219         return scope_verify(s);
220 }
221 
scope_coldplug_timeout(Scope * s)222 static usec_t scope_coldplug_timeout(Scope *s) {
223         assert(s);
224 
225         switch (s->deserialized_state) {
226 
227         case SCOPE_RUNNING:
228                 return scope_running_timeout(s);
229 
230         case SCOPE_STOP_SIGKILL:
231         case SCOPE_STOP_SIGTERM:
232                 return usec_add(UNIT(s)->state_change_timestamp.monotonic, s->timeout_stop_usec);
233 
234         default:
235                 return USEC_INFINITY;
236         }
237 }
238 
scope_coldplug(Unit * u)239 static int scope_coldplug(Unit *u) {
240         Scope *s = SCOPE(u);
241         int r;
242 
243         assert(s);
244         assert(s->state == SCOPE_DEAD);
245 
246         if (s->deserialized_state == s->state)
247                 return 0;
248 
249         r = scope_arm_timer(s, scope_coldplug_timeout(s));
250         if (r < 0)
251                 return r;
252 
253         if (!IN_SET(s->deserialized_state, SCOPE_DEAD, SCOPE_FAILED)) {
254                 if (u->pids) {
255                         void *pidp;
256 
257                         SET_FOREACH(pidp, u->pids) {
258                                 r = unit_watch_pid(u, PTR_TO_PID(pidp), false);
259                                 if (r < 0 && r != -EEXIST)
260                                         return r;
261                         }
262                 } else
263                         (void) unit_enqueue_rewatch_pids(u);
264         }
265 
266         bus_scope_track_controller(s);
267 
268         scope_set_state(s, s->deserialized_state);
269         return 0;
270 }
271 
scope_dump(Unit * u,FILE * f,const char * prefix)272 static void scope_dump(Unit *u, FILE *f, const char *prefix) {
273         Scope *s = SCOPE(u);
274 
275         assert(s);
276         assert(f);
277 
278         fprintf(f,
279                 "%sScope State: %s\n"
280                 "%sResult: %s\n"
281                 "%sRuntimeMaxSec: %s\n"
282                 "%sRuntimeRandomizedExtraSec: %s\n",
283                 prefix, scope_state_to_string(s->state),
284                 prefix, scope_result_to_string(s->result),
285                 prefix, FORMAT_TIMESPAN(s->runtime_max_usec, USEC_PER_SEC),
286                 prefix, FORMAT_TIMESPAN(s->runtime_rand_extra_usec, USEC_PER_SEC));
287 
288         cgroup_context_dump(UNIT(s), f, prefix);
289         kill_context_dump(&s->kill_context, f, prefix);
290 }
291 
scope_enter_dead(Scope * s,ScopeResult f)292 static void scope_enter_dead(Scope *s, ScopeResult f) {
293         assert(s);
294 
295         if (s->result == SCOPE_SUCCESS)
296                 s->result = f;
297 
298         unit_log_result(UNIT(s), s->result == SCOPE_SUCCESS, scope_result_to_string(s->result));
299         scope_set_state(s, s->result != SCOPE_SUCCESS ? SCOPE_FAILED : SCOPE_DEAD);
300 }
301 
scope_enter_signal(Scope * s,ScopeState state,ScopeResult f)302 static void scope_enter_signal(Scope *s, ScopeState state, ScopeResult f) {
303         bool skip_signal = false;
304         int r;
305 
306         assert(s);
307 
308         if (s->result == SCOPE_SUCCESS)
309                 s->result = f;
310 
311         /* Before sending any signal, make sure we track all members of this cgroup */
312         (void) unit_watch_all_pids(UNIT(s));
313 
314         /* Also, enqueue a job that we recheck all our PIDs a bit later, given that it's likely some processes have
315          * died now */
316         (void) unit_enqueue_rewatch_pids(UNIT(s));
317 
318         /* If we have a controller set let's ask the controller nicely to terminate the scope, instead of us going
319          * directly into SIGTERM berserk mode */
320         if (state == SCOPE_STOP_SIGTERM)
321                 skip_signal = bus_scope_send_request_stop(s) > 0;
322 
323         if (skip_signal)
324                 r = 1; /* wait */
325         else {
326                 r = unit_kill_context(
327                                 UNIT(s),
328                                 &s->kill_context,
329                                 state != SCOPE_STOP_SIGTERM ? KILL_KILL :
330                                 s->was_abandoned            ? KILL_TERMINATE_AND_LOG :
331                                                               KILL_TERMINATE,
332                                 -1, -1, false);
333                 if (r < 0)
334                         goto fail;
335         }
336 
337         if (r > 0) {
338                 r = scope_arm_timer(s, usec_add(now(CLOCK_MONOTONIC), s->timeout_stop_usec));
339                 if (r < 0)
340                         goto fail;
341 
342                 scope_set_state(s, state);
343         } else if (state == SCOPE_STOP_SIGTERM)
344                 scope_enter_signal(s, SCOPE_STOP_SIGKILL, SCOPE_SUCCESS);
345         else
346                 scope_enter_dead(s, SCOPE_SUCCESS);
347 
348         return;
349 
350 fail:
351         log_unit_warning_errno(UNIT(s), r, "Failed to kill processes: %m");
352 
353         scope_enter_dead(s, SCOPE_FAILURE_RESOURCES);
354 }
355 
scope_start(Unit * u)356 static int scope_start(Unit *u) {
357         Scope *s = SCOPE(u);
358         int r;
359 
360         assert(s);
361 
362         if (unit_has_name(u, SPECIAL_INIT_SCOPE))
363                 return -EPERM;
364 
365         if (s->state == SCOPE_FAILED)
366                 return -EPERM;
367 
368         /* We can't fulfill this right now, please try again later */
369         if (IN_SET(s->state, SCOPE_STOP_SIGTERM, SCOPE_STOP_SIGKILL))
370                 return -EAGAIN;
371 
372         assert(s->state == SCOPE_DEAD);
373 
374         if (!u->transient && !MANAGER_IS_RELOADING(u->manager))
375                 return -ENOENT;
376 
377         (void) bus_scope_track_controller(s);
378 
379         r = unit_acquire_invocation_id(u);
380         if (r < 0)
381                 return r;
382 
383         (void) unit_realize_cgroup(u);
384         (void) unit_reset_accounting(u);
385 
386         unit_export_state_files(u);
387 
388         r = unit_attach_pids_to_cgroup(u, u->pids, NULL);
389         if (r < 0) {
390                 log_unit_warning_errno(u, r, "Failed to add PIDs to scope's control group: %m");
391                 scope_enter_dead(s, SCOPE_FAILURE_RESOURCES);
392                 return r;
393         }
394         if (r == 0) {
395                 log_unit_warning(u, "No PIDs left to attach to the scope's control group, refusing: %m");
396                 scope_enter_dead(s, SCOPE_FAILURE_RESOURCES);
397                 return -ECHILD;
398         }
399         log_unit_debug(u, "%i %s added to scope's control group.", r, r == 1 ? "process" : "processes");
400 
401         s->result = SCOPE_SUCCESS;
402 
403         scope_set_state(s, SCOPE_RUNNING);
404 
405         /* Set the maximum runtime timeout. */
406         scope_arm_timer(s, scope_running_timeout(s));
407 
408         /* On unified we use proper notifications hence we can unwatch the PIDs
409          * we just attached to the scope. This can also be done on legacy as
410          * we're going to update the list of the processes we watch with the
411          * PIDs currently in the scope anyway. */
412         unit_unwatch_all_pids(u);
413 
414         /* Start watching the PIDs currently in the scope (legacy hierarchy only) */
415         (void) unit_enqueue_rewatch_pids(u);
416         return 1;
417 }
418 
scope_stop(Unit * u)419 static int scope_stop(Unit *u) {
420         Scope *s = SCOPE(u);
421 
422         assert(s);
423 
424         if (IN_SET(s->state, SCOPE_STOP_SIGTERM, SCOPE_STOP_SIGKILL))
425                 return 0;
426 
427         assert(IN_SET(s->state, SCOPE_RUNNING, SCOPE_ABANDONED));
428 
429         scope_enter_signal(s, SCOPE_STOP_SIGTERM, SCOPE_SUCCESS);
430         return 1;
431 }
432 
scope_reset_failed(Unit * u)433 static void scope_reset_failed(Unit *u) {
434         Scope *s = SCOPE(u);
435 
436         assert(s);
437 
438         if (s->state == SCOPE_FAILED)
439                 scope_set_state(s, SCOPE_DEAD);
440 
441         s->result = SCOPE_SUCCESS;
442 }
443 
scope_kill(Unit * u,KillWho who,int signo,sd_bus_error * error)444 static int scope_kill(Unit *u, KillWho who, int signo, sd_bus_error *error) {
445         return unit_kill_common(u, who, signo, -1, -1, error);
446 }
447 
scope_get_timeout(Unit * u,usec_t * timeout)448 static int scope_get_timeout(Unit *u, usec_t *timeout) {
449         Scope *s = SCOPE(u);
450         usec_t t;
451         int r;
452 
453         if (!s->timer_event_source)
454                 return 0;
455 
456         r = sd_event_source_get_time(s->timer_event_source, &t);
457         if (r < 0)
458                 return r;
459         if (t == USEC_INFINITY)
460                 return 0;
461 
462         *timeout = t;
463         return 1;
464 }
465 
scope_serialize(Unit * u,FILE * f,FDSet * fds)466 static int scope_serialize(Unit *u, FILE *f, FDSet *fds) {
467         Scope *s = SCOPE(u);
468         void *pidp;
469 
470         assert(s);
471         assert(f);
472         assert(fds);
473 
474         (void) serialize_item(f, "state", scope_state_to_string(s->state));
475         (void) serialize_bool(f, "was-abandoned", s->was_abandoned);
476 
477         if (s->controller)
478                 (void) serialize_item(f, "controller", s->controller);
479 
480         SET_FOREACH(pidp, u->pids)
481                 serialize_item_format(f, "pids", PID_FMT, PTR_TO_PID(pidp));
482 
483         return 0;
484 }
485 
scope_deserialize_item(Unit * u,const char * key,const char * value,FDSet * fds)486 static int scope_deserialize_item(Unit *u, const char *key, const char *value, FDSet *fds) {
487         Scope *s = SCOPE(u);
488         int r;
489 
490         assert(u);
491         assert(key);
492         assert(value);
493         assert(fds);
494 
495         if (streq(key, "state")) {
496                 ScopeState state;
497 
498                 state = scope_state_from_string(value);
499                 if (state < 0)
500                         log_unit_debug(u, "Failed to parse state value: %s", value);
501                 else
502                         s->deserialized_state = state;
503 
504         } else if (streq(key, "was-abandoned")) {
505                 int k;
506 
507                 k = parse_boolean(value);
508                 if (k < 0)
509                         log_unit_debug(u, "Failed to parse boolean value: %s", value);
510                 else
511                         s->was_abandoned = k;
512         } else if (streq(key, "controller")) {
513 
514                 r = free_and_strdup(&s->controller, value);
515                 if (r < 0)
516                         return log_oom();
517 
518         } else if (streq(key, "pids")) {
519                 pid_t pid;
520 
521                 if (parse_pid(value, &pid) < 0)
522                         log_unit_debug(u, "Failed to parse pids value: %s", value);
523                 else {
524                         r = set_ensure_put(&u->pids, NULL, PID_TO_PTR(pid));
525                         if (r < 0)
526                                 return r;
527                 }
528         } else
529                 log_unit_debug(u, "Unknown serialization key: %s", key);
530 
531         return 0;
532 }
533 
scope_notify_cgroup_empty_event(Unit * u)534 static void scope_notify_cgroup_empty_event(Unit *u) {
535         Scope *s = SCOPE(u);
536         assert(u);
537 
538         log_unit_debug(u, "cgroup is empty");
539 
540         if (IN_SET(s->state, SCOPE_RUNNING, SCOPE_ABANDONED, SCOPE_STOP_SIGTERM, SCOPE_STOP_SIGKILL))
541                 scope_enter_dead(s, SCOPE_SUCCESS);
542 
543         /* If the cgroup empty notification comes when the unit is not active, we must have failed to clean
544          * up the cgroup earlier and should do it now. */
545         if (IN_SET(s->state, SCOPE_DEAD, SCOPE_FAILED))
546                 unit_prune_cgroup(u);
547 }
548 
scope_sigchld_event(Unit * u,pid_t pid,int code,int status)549 static void scope_sigchld_event(Unit *u, pid_t pid, int code, int status) {
550         assert(u);
551 
552         /* If we get a SIGCHLD event for one of the processes we were interested in, then we look for others to
553          * watch, under the assumption that we'll sooner or later get a SIGCHLD for them, as the original
554          * process we watched was probably the parent of them, and they are hence now our children. */
555 
556         (void) unit_enqueue_rewatch_pids(u);
557 }
558 
scope_dispatch_timer(sd_event_source * source,usec_t usec,void * userdata)559 static int scope_dispatch_timer(sd_event_source *source, usec_t usec, void *userdata) {
560         Scope *s = SCOPE(userdata);
561 
562         assert(s);
563         assert(s->timer_event_source == source);
564 
565         switch (s->state) {
566 
567         case SCOPE_RUNNING:
568                 log_unit_warning(UNIT(s), "Scope reached runtime time limit. Stopping.");
569                 scope_enter_signal(s, SCOPE_STOP_SIGTERM, SCOPE_FAILURE_TIMEOUT);
570                 break;
571 
572         case SCOPE_STOP_SIGTERM:
573                 if (s->kill_context.send_sigkill) {
574                         log_unit_warning(UNIT(s), "Stopping timed out. Killing.");
575                         scope_enter_signal(s, SCOPE_STOP_SIGKILL, SCOPE_FAILURE_TIMEOUT);
576                 } else {
577                         log_unit_warning(UNIT(s), "Stopping timed out. Skipping SIGKILL.");
578                         scope_enter_dead(s, SCOPE_FAILURE_TIMEOUT);
579                 }
580 
581                 break;
582 
583         case SCOPE_STOP_SIGKILL:
584                 log_unit_warning(UNIT(s), "Still around after SIGKILL. Ignoring.");
585                 scope_enter_dead(s, SCOPE_FAILURE_TIMEOUT);
586                 break;
587 
588         default:
589                 assert_not_reached();
590         }
591 
592         return 0;
593 }
594 
scope_abandon(Scope * s)595 int scope_abandon(Scope *s) {
596         assert(s);
597 
598         if (unit_has_name(UNIT(s), SPECIAL_INIT_SCOPE))
599                 return -EPERM;
600 
601         if (!IN_SET(s->state, SCOPE_RUNNING, SCOPE_ABANDONED))
602                 return -ESTALE;
603 
604         s->was_abandoned = true;
605 
606         s->controller = mfree(s->controller);
607         s->controller_track = sd_bus_track_unref(s->controller_track);
608 
609         scope_set_state(s, SCOPE_ABANDONED);
610 
611         /* The client is no longer watching the remaining processes, so let's step in here, under the assumption that
612          * the remaining processes will be sooner or later reassigned to us as parent. */
613         (void) unit_enqueue_rewatch_pids(UNIT(s));
614 
615         return 0;
616 }
617 
scope_active_state(Unit * u)618 _pure_ static UnitActiveState scope_active_state(Unit *u) {
619         assert(u);
620 
621         return state_translation_table[SCOPE(u)->state];
622 }
623 
scope_sub_state_to_string(Unit * u)624 _pure_ static const char *scope_sub_state_to_string(Unit *u) {
625         assert(u);
626 
627         return scope_state_to_string(SCOPE(u)->state);
628 }
629 
scope_enumerate_perpetual(Manager * m)630 static void scope_enumerate_perpetual(Manager *m) {
631         Unit *u;
632         int r;
633 
634         assert(m);
635 
636         /* Let's unconditionally add the "init.scope" special unit
637          * that encapsulates PID 1. Note that PID 1 already is in the
638          * cgroup for this, we hence just need to allocate the object
639          * for it and that's it. */
640 
641         u = manager_get_unit(m, SPECIAL_INIT_SCOPE);
642         if (!u) {
643                 r = unit_new_for_name(m, sizeof(Scope), SPECIAL_INIT_SCOPE, &u);
644                 if (r < 0)  {
645                         log_error_errno(r, "Failed to allocate the special " SPECIAL_INIT_SCOPE " unit: %m");
646                         return;
647                 }
648         }
649 
650         u->transient = true;
651         u->perpetual = true;
652         SCOPE(u)->deserialized_state = SCOPE_RUNNING;
653 
654         unit_add_to_load_queue(u);
655         unit_add_to_dbus_queue(u);
656 }
657 
658 static const char* const scope_result_table[_SCOPE_RESULT_MAX] = {
659         [SCOPE_SUCCESS]           = "success",
660         [SCOPE_FAILURE_RESOURCES] = "resources",
661         [SCOPE_FAILURE_TIMEOUT]   = "timeout",
662 };
663 
664 DEFINE_STRING_TABLE_LOOKUP(scope_result, ScopeResult);
665 
666 const UnitVTable scope_vtable = {
667         .object_size = sizeof(Scope),
668         .cgroup_context_offset = offsetof(Scope, cgroup_context),
669         .kill_context_offset = offsetof(Scope, kill_context),
670 
671         .sections =
672                 "Unit\0"
673                 "Scope\0"
674                 "Install\0",
675         .private_section = "Scope",
676 
677         .can_transient = true,
678         .can_delegate = true,
679         .can_fail = true,
680         .once_only = true,
681         .can_set_managed_oom = true,
682 
683         .init = scope_init,
684         .load = scope_load,
685         .done = scope_done,
686 
687         .coldplug = scope_coldplug,
688 
689         .dump = scope_dump,
690 
691         .start = scope_start,
692         .stop = scope_stop,
693 
694         .kill = scope_kill,
695 
696         .freeze = unit_freeze_vtable_common,
697         .thaw = unit_thaw_vtable_common,
698 
699         .get_timeout = scope_get_timeout,
700 
701         .serialize = scope_serialize,
702         .deserialize_item = scope_deserialize_item,
703 
704         .active_state = scope_active_state,
705         .sub_state_to_string = scope_sub_state_to_string,
706 
707         .sigchld_event = scope_sigchld_event,
708 
709         .reset_failed = scope_reset_failed,
710 
711         .notify_cgroup_empty = scope_notify_cgroup_empty_event,
712 
713         .bus_set_property = bus_scope_set_property,
714         .bus_commit_properties = bus_scope_commit_properties,
715 
716         .enumerate_perpetual = scope_enumerate_perpetual,
717 };
718