]>
Commit | Line | Data |
---|---|---|
a257cdd0 | 1 | /* |
a257cdd0 AG |
2 | * Process version 2 NFSACL requests. |
3 | * | |
4 | * Copyright (C) 2002-2003 Andreas Gruenbacher <[email protected]> | |
5 | */ | |
6 | ||
9a74af21 BH |
7 | #include "nfsd.h" |
8 | /* FIXME: nfsacl.h is a broken header */ | |
a257cdd0 | 9 | #include <linux/nfsacl.h> |
5a0e3ad6 | 10 | #include <linux/gfp.h> |
9a74af21 BH |
11 | #include "cache.h" |
12 | #include "xdr3.h" | |
0a3adade | 13 | #include "vfs.h" |
a257cdd0 AG |
14 | |
15 | #define NFSDDBG_FACILITY NFSDDBG_PROC | |
16 | #define RETURN_STATUS(st) { resp->status = (st); return (st); } | |
17 | ||
18 | /* | |
19 | * NULL call. | |
20 | */ | |
7111c66e | 21 | static __be32 |
a257cdd0 AG |
22 | nfsacld_proc_null(struct svc_rqst *rqstp, void *argp, void *resp) |
23 | { | |
24 | return nfs_ok; | |
25 | } | |
26 | ||
27 | /* | |
28 | * Get the Access and/or Default ACL of a file. | |
29 | */ | |
7111c66e | 30 | static __be32 nfsacld_proc_getacl(struct svc_rqst * rqstp, |
a257cdd0 AG |
31 | struct nfsd3_getaclargs *argp, struct nfsd3_getaclres *resp) |
32 | { | |
a257cdd0 | 33 | struct posix_acl *acl; |
4ac7249e CH |
34 | struct inode *inode; |
35 | svc_fh *fh; | |
c4d987ba | 36 | __be32 nfserr = 0; |
a257cdd0 AG |
37 | |
38 | dprintk("nfsd: GETACL(2acl) %s\n", SVCFH_fmt(&argp->fh)); | |
39 | ||
40 | fh = fh_copy(&resp->fh, &argp->fh); | |
8837abca MS |
41 | nfserr = fh_verify(rqstp, &resp->fh, 0, NFSD_MAY_NOP); |
42 | if (nfserr) | |
ac8587dc | 43 | RETURN_STATUS(nfserr); |
a257cdd0 | 44 | |
2b0143b5 | 45 | inode = d_inode(fh->fh_dentry); |
4ac7249e | 46 | |
7b8f4586 | 47 | if (argp->mask & ~NFS_ACL_MASK) |
a257cdd0 AG |
48 | RETURN_STATUS(nfserr_inval); |
49 | resp->mask = argp->mask; | |
50 | ||
4f4a4fad BF |
51 | nfserr = fh_getattr(fh, &resp->stat); |
52 | if (nfserr) | |
7b8f4586 | 53 | RETURN_STATUS(nfserr); |
4f4a4fad | 54 | |
a257cdd0 | 55 | if (resp->mask & (NFS_ACL|NFS_ACLCNT)) { |
4ac7249e | 56 | acl = get_acl(inode, ACL_TYPE_ACCESS); |
a257cdd0 AG |
57 | if (acl == NULL) { |
58 | /* Solaris returns the inode's minimum ACL. */ | |
a257cdd0 AG |
59 | acl = posix_acl_from_mode(inode->i_mode, GFP_KERNEL); |
60 | } | |
35e634b8 KM |
61 | if (IS_ERR(acl)) { |
62 | nfserr = nfserrno(PTR_ERR(acl)); | |
63 | goto fail; | |
64 | } | |
a257cdd0 AG |
65 | resp->acl_access = acl; |
66 | } | |
67 | if (resp->mask & (NFS_DFACL|NFS_DFACLCNT)) { | |
68 | /* Check how Solaris handles requests for the Default ACL | |
69 | of a non-directory! */ | |
4ac7249e | 70 | acl = get_acl(inode, ACL_TYPE_DEFAULT); |
a257cdd0 | 71 | if (IS_ERR(acl)) { |
4ac7249e CH |
72 | nfserr = nfserrno(PTR_ERR(acl)); |
73 | goto fail; | |
a257cdd0 AG |
74 | } |
75 | resp->acl_default = acl; | |
76 | } | |
77 | ||
78 | /* resp->acl_{access,default} are released in nfssvc_release_getacl. */ | |
79 | RETURN_STATUS(0); | |
80 | ||
81 | fail: | |
82 | posix_acl_release(resp->acl_access); | |
83 | posix_acl_release(resp->acl_default); | |
84 | RETURN_STATUS(nfserr); | |
85 | } | |
86 | ||
87 | /* | |
88 | * Set the Access and/or Default ACL of a file. | |
89 | */ | |
7111c66e | 90 | static __be32 nfsacld_proc_setacl(struct svc_rqst * rqstp, |
a257cdd0 AG |
91 | struct nfsd3_setaclargs *argp, |
92 | struct nfsd_attrstat *resp) | |
93 | { | |
4ac7249e | 94 | struct inode *inode; |
a257cdd0 | 95 | svc_fh *fh; |
c4d987ba | 96 | __be32 nfserr = 0; |
4ac7249e | 97 | int error; |
a257cdd0 AG |
98 | |
99 | dprintk("nfsd: SETACL(2acl) %s\n", SVCFH_fmt(&argp->fh)); | |
100 | ||
101 | fh = fh_copy(&resp->fh, &argp->fh); | |
8837abca | 102 | nfserr = fh_verify(rqstp, &resp->fh, 0, NFSD_MAY_SATTR); |
4ac7249e CH |
103 | if (nfserr) |
104 | goto out; | |
a257cdd0 | 105 | |
2b0143b5 | 106 | inode = d_inode(fh->fh_dentry); |
a257cdd0 | 107 | |
4ac7249e CH |
108 | error = fh_want_write(fh); |
109 | if (error) | |
110 | goto out_errno; | |
111 | ||
99965378 BH |
112 | fh_lock(fh); |
113 | ||
114 | error = set_posix_acl(inode, ACL_TYPE_ACCESS, argp->acl_access); | |
4ac7249e | 115 | if (error) |
99965378 BH |
116 | goto out_drop_lock; |
117 | error = set_posix_acl(inode, ACL_TYPE_DEFAULT, argp->acl_default); | |
4ac7249e | 118 | if (error) |
99965378 BH |
119 | goto out_drop_lock; |
120 | ||
121 | fh_unlock(fh); | |
4ac7249e CH |
122 | |
123 | fh_drop_write(fh); | |
124 | ||
125 | nfserr = fh_getattr(fh, &resp->stat); | |
126 | ||
127 | out: | |
a257cdd0 AG |
128 | /* argp->acl_{access,default} may have been allocated in |
129 | nfssvc_decode_setaclargs. */ | |
130 | posix_acl_release(argp->acl_access); | |
131 | posix_acl_release(argp->acl_default); | |
132 | return nfserr; | |
99965378 BH |
133 | out_drop_lock: |
134 | fh_unlock(fh); | |
4ac7249e CH |
135 | fh_drop_write(fh); |
136 | out_errno: | |
137 | nfserr = nfserrno(error); | |
138 | goto out; | |
a257cdd0 AG |
139 | } |
140 | ||
141 | /* | |
142 | * Check file attributes | |
143 | */ | |
7111c66e | 144 | static __be32 nfsacld_proc_getattr(struct svc_rqst * rqstp, |
a257cdd0 AG |
145 | struct nfsd_fhandle *argp, struct nfsd_attrstat *resp) |
146 | { | |
4f4a4fad | 147 | __be32 nfserr; |
a257cdd0 AG |
148 | dprintk("nfsd: GETATTR %s\n", SVCFH_fmt(&argp->fh)); |
149 | ||
150 | fh_copy(&resp->fh, &argp->fh); | |
4f4a4fad BF |
151 | nfserr = fh_verify(rqstp, &resp->fh, 0, NFSD_MAY_NOP); |
152 | if (nfserr) | |
153 | return nfserr; | |
154 | nfserr = fh_getattr(&resp->fh, &resp->stat); | |
155 | return nfserr; | |
a257cdd0 AG |
156 | } |
157 | ||
158 | /* | |
159 | * Check file access | |
160 | */ | |
7111c66e | 161 | static __be32 nfsacld_proc_access(struct svc_rqst *rqstp, struct nfsd3_accessargs *argp, |
a257cdd0 AG |
162 | struct nfsd3_accessres *resp) |
163 | { | |
c4d987ba | 164 | __be32 nfserr; |
a257cdd0 AG |
165 | |
166 | dprintk("nfsd: ACCESS(2acl) %s 0x%x\n", | |
167 | SVCFH_fmt(&argp->fh), | |
168 | argp->access); | |
169 | ||
170 | fh_copy(&resp->fh, &argp->fh); | |
171 | resp->access = argp->access; | |
172 | nfserr = nfsd_access(rqstp, &resp->fh, &resp->access, NULL); | |
4f4a4fad BF |
173 | if (nfserr) |
174 | return nfserr; | |
175 | nfserr = fh_getattr(&resp->fh, &resp->stat); | |
a257cdd0 AG |
176 | return nfserr; |
177 | } | |
178 | ||
179 | /* | |
180 | * XDR decode functions | |
181 | */ | |
131a21c2 | 182 | static int nfsaclsvc_decode_getaclargs(struct svc_rqst *rqstp, __be32 *p, |
a257cdd0 AG |
183 | struct nfsd3_getaclargs *argp) |
184 | { | |
d40aa337 BT |
185 | p = nfs2svc_decode_fh(p, &argp->fh); |
186 | if (!p) | |
a257cdd0 AG |
187 | return 0; |
188 | argp->mask = ntohl(*p); p++; | |
189 | ||
190 | return xdr_argsize_check(rqstp, p); | |
191 | } | |
192 | ||
193 | ||
131a21c2 | 194 | static int nfsaclsvc_decode_setaclargs(struct svc_rqst *rqstp, __be32 *p, |
a257cdd0 AG |
195 | struct nfsd3_setaclargs *argp) |
196 | { | |
197 | struct kvec *head = rqstp->rq_arg.head; | |
198 | unsigned int base; | |
199 | int n; | |
200 | ||
d40aa337 BT |
201 | p = nfs2svc_decode_fh(p, &argp->fh); |
202 | if (!p) | |
a257cdd0 AG |
203 | return 0; |
204 | argp->mask = ntohl(*p++); | |
7b8f4586 | 205 | if (argp->mask & ~NFS_ACL_MASK || |
a257cdd0 AG |
206 | !xdr_argsize_check(rqstp, p)) |
207 | return 0; | |
208 | ||
209 | base = (char *)p - (char *)head->iov_base; | |
210 | n = nfsacl_decode(&rqstp->rq_arg, base, NULL, | |
211 | (argp->mask & NFS_ACL) ? | |
212 | &argp->acl_access : NULL); | |
213 | if (n > 0) | |
214 | n = nfsacl_decode(&rqstp->rq_arg, base + n, NULL, | |
215 | (argp->mask & NFS_DFACL) ? | |
216 | &argp->acl_default : NULL); | |
217 | return (n > 0); | |
218 | } | |
219 | ||
131a21c2 | 220 | static int nfsaclsvc_decode_fhandleargs(struct svc_rqst *rqstp, __be32 *p, |
a257cdd0 AG |
221 | struct nfsd_fhandle *argp) |
222 | { | |
d40aa337 BT |
223 | p = nfs2svc_decode_fh(p, &argp->fh); |
224 | if (!p) | |
a257cdd0 AG |
225 | return 0; |
226 | return xdr_argsize_check(rqstp, p); | |
227 | } | |
228 | ||
131a21c2 | 229 | static int nfsaclsvc_decode_accessargs(struct svc_rqst *rqstp, __be32 *p, |
a257cdd0 AG |
230 | struct nfsd3_accessargs *argp) |
231 | { | |
d40aa337 BT |
232 | p = nfs2svc_decode_fh(p, &argp->fh); |
233 | if (!p) | |
a257cdd0 AG |
234 | return 0; |
235 | argp->access = ntohl(*p++); | |
236 | ||
237 | return xdr_argsize_check(rqstp, p); | |
238 | } | |
239 | ||
240 | /* | |
241 | * XDR encode functions | |
242 | */ | |
243 | ||
1b7e0403 PS |
244 | /* |
245 | * There must be an encoding function for void results so svc_process | |
246 | * will work properly. | |
247 | */ | |
9c0b0ff7 | 248 | static int nfsaclsvc_encode_voidres(struct svc_rqst *rqstp, __be32 *p, void *dummy) |
1b7e0403 PS |
249 | { |
250 | return xdr_ressize_check(rqstp, p); | |
251 | } | |
252 | ||
a257cdd0 | 253 | /* GETACL */ |
131a21c2 | 254 | static int nfsaclsvc_encode_getaclres(struct svc_rqst *rqstp, __be32 *p, |
a257cdd0 AG |
255 | struct nfsd3_getaclres *resp) |
256 | { | |
257 | struct dentry *dentry = resp->fh.fh_dentry; | |
aefa89d1 | 258 | struct inode *inode; |
a257cdd0 AG |
259 | struct kvec *head = rqstp->rq_res.head; |
260 | unsigned int base; | |
261 | int n; | |
cb65a5ba | 262 | int w; |
a257cdd0 | 263 | |
aefa89d1 P |
264 | /* |
265 | * Since this is version 2, the check for nfserr in | |
266 | * nfsd_dispatch actually ensures the following cannot happen. | |
267 | * However, it seems fragile to depend on that. | |
268 | */ | |
2b0143b5 | 269 | if (dentry == NULL || d_really_is_negative(dentry)) |
a257cdd0 | 270 | return 0; |
2b0143b5 | 271 | inode = d_inode(dentry); |
a257cdd0 | 272 | |
4f4a4fad | 273 | p = nfs2svc_encode_fattr(rqstp, p, &resp->fh, &resp->stat); |
a257cdd0 AG |
274 | *p++ = htonl(resp->mask); |
275 | if (!xdr_ressize_check(rqstp, p)) | |
276 | return 0; | |
277 | base = (char *)p - (char *)head->iov_base; | |
278 | ||
cb65a5ba JJ |
279 | rqstp->rq_res.page_len = w = nfsacl_size( |
280 | (resp->mask & NFS_ACL) ? resp->acl_access : NULL, | |
281 | (resp->mask & NFS_DFACL) ? resp->acl_default : NULL); | |
a257cdd0 | 282 | while (w > 0) { |
afc59400 | 283 | if (!*(rqstp->rq_next_page++)) |
a257cdd0 AG |
284 | return 0; |
285 | w -= PAGE_SIZE; | |
286 | } | |
287 | ||
288 | n = nfsacl_encode(&rqstp->rq_res, base, inode, | |
289 | resp->acl_access, | |
290 | resp->mask & NFS_ACL, 0); | |
291 | if (n > 0) | |
292 | n = nfsacl_encode(&rqstp->rq_res, base + n, inode, | |
293 | resp->acl_default, | |
294 | resp->mask & NFS_DFACL, | |
295 | NFS_ACL_DEFAULT); | |
7b8f4586 | 296 | return (n > 0); |
a257cdd0 AG |
297 | } |
298 | ||
131a21c2 | 299 | static int nfsaclsvc_encode_attrstatres(struct svc_rqst *rqstp, __be32 *p, |
a257cdd0 AG |
300 | struct nfsd_attrstat *resp) |
301 | { | |
4f4a4fad | 302 | p = nfs2svc_encode_fattr(rqstp, p, &resp->fh, &resp->stat); |
a257cdd0 AG |
303 | return xdr_ressize_check(rqstp, p); |
304 | } | |
305 | ||
306 | /* ACCESS */ | |
131a21c2 | 307 | static int nfsaclsvc_encode_accessres(struct svc_rqst *rqstp, __be32 *p, |
a257cdd0 AG |
308 | struct nfsd3_accessres *resp) |
309 | { | |
4f4a4fad | 310 | p = nfs2svc_encode_fattr(rqstp, p, &resp->fh, &resp->stat); |
a257cdd0 AG |
311 | *p++ = htonl(resp->access); |
312 | return xdr_ressize_check(rqstp, p); | |
313 | } | |
314 | ||
315 | /* | |
316 | * XDR release functions | |
317 | */ | |
131a21c2 | 318 | static int nfsaclsvc_release_getacl(struct svc_rqst *rqstp, __be32 *p, |
a257cdd0 AG |
319 | struct nfsd3_getaclres *resp) |
320 | { | |
321 | fh_put(&resp->fh); | |
322 | posix_acl_release(resp->acl_access); | |
323 | posix_acl_release(resp->acl_default); | |
324 | return 1; | |
325 | } | |
326 | ||
c9ce2283 GB |
327 | static int nfsaclsvc_release_attrstat(struct svc_rqst *rqstp, __be32 *p, |
328 | struct nfsd_attrstat *resp) | |
a257cdd0 AG |
329 | { |
330 | fh_put(&resp->fh); | |
331 | return 1; | |
332 | } | |
333 | ||
c9ce2283 GB |
334 | static int nfsaclsvc_release_access(struct svc_rqst *rqstp, __be32 *p, |
335 | struct nfsd3_accessres *resp) | |
336 | { | |
337 | fh_put(&resp->fh); | |
338 | return 1; | |
339 | } | |
340 | ||
a257cdd0 | 341 | #define nfsaclsvc_decode_voidargs NULL |
a257cdd0 AG |
342 | #define nfsaclsvc_release_void NULL |
343 | #define nfsd3_fhandleargs nfsd_fhandle | |
344 | #define nfsd3_attrstatres nfsd_attrstat | |
345 | #define nfsd3_voidres nfsd3_voidargs | |
346 | struct nfsd3_voidargs { int dummy; }; | |
347 | ||
348 | #define PROC(name, argt, rest, relt, cache, respsize) \ | |
349 | { (svc_procfunc) nfsacld_proc_##name, \ | |
350 | (kxdrproc_t) nfsaclsvc_decode_##argt##args, \ | |
351 | (kxdrproc_t) nfsaclsvc_encode_##rest##res, \ | |
352 | (kxdrproc_t) nfsaclsvc_release_##relt, \ | |
353 | sizeof(struct nfsd3_##argt##args), \ | |
354 | sizeof(struct nfsd3_##rest##res), \ | |
355 | 0, \ | |
356 | cache, \ | |
357 | respsize, \ | |
358 | } | |
359 | ||
360 | #define ST 1 /* status*/ | |
361 | #define AT 21 /* attributes */ | |
362 | #define pAT (1+AT) /* post attributes - conditional */ | |
363 | #define ACL (1+NFS_ACL_MAX_ENTRIES*3) /* Access Control List */ | |
364 | ||
365 | static struct svc_procedure nfsd_acl_procedures2[] = { | |
366 | PROC(null, void, void, void, RC_NOCACHE, ST), | |
367 | PROC(getacl, getacl, getacl, getacl, RC_NOCACHE, ST+1+2*(1+ACL)), | |
c9ce2283 GB |
368 | PROC(setacl, setacl, attrstat, attrstat, RC_NOCACHE, ST+AT), |
369 | PROC(getattr, fhandle, attrstat, attrstat, RC_NOCACHE, ST+AT), | |
370 | PROC(access, access, access, access, RC_NOCACHE, ST+AT+1), | |
a257cdd0 AG |
371 | }; |
372 | ||
373 | struct svc_version nfsd_acl_version2 = { | |
374 | .vs_vers = 2, | |
375 | .vs_nproc = 5, | |
376 | .vs_proc = nfsd_acl_procedures2, | |
377 | .vs_dispatch = nfsd_dispatch, | |
378 | .vs_xdrsize = NFS3_SVC_XDRSIZE, | |
379 | }; |