]>
Commit | Line | Data |
---|---|---|
b2441318 | 1 | // SPDX-License-Identifier: GPL-2.0 |
a257cdd0 | 2 | /* |
a257cdd0 AG |
3 | * Process version 2 NFSACL requests. |
4 | * | |
5 | * Copyright (C) 2002-2003 Andreas Gruenbacher <[email protected]> | |
6 | */ | |
7 | ||
9a74af21 BH |
8 | #include "nfsd.h" |
9 | /* FIXME: nfsacl.h is a broken header */ | |
a257cdd0 | 10 | #include <linux/nfsacl.h> |
5a0e3ad6 | 11 | #include <linux/gfp.h> |
9a74af21 BH |
12 | #include "cache.h" |
13 | #include "xdr3.h" | |
0a3adade | 14 | #include "vfs.h" |
a257cdd0 AG |
15 | |
16 | #define NFSDDBG_FACILITY NFSDDBG_PROC | |
a257cdd0 AG |
17 | |
18 | /* | |
19 | * NULL call. | |
20 | */ | |
7111c66e | 21 | static __be32 |
a6beb732 | 22 | nfsacld_proc_null(struct svc_rqst *rqstp) |
a257cdd0 | 23 | { |
cc028a10 | 24 | return rpc_success; |
a257cdd0 AG |
25 | } |
26 | ||
27 | /* | |
28 | * Get the Access and/or Default ACL of a file. | |
29 | */ | |
a6beb732 | 30 | static __be32 nfsacld_proc_getacl(struct svc_rqst *rqstp) |
a257cdd0 | 31 | { |
a6beb732 CH |
32 | struct nfsd3_getaclargs *argp = rqstp->rq_argp; |
33 | struct nfsd3_getaclres *resp = rqstp->rq_resp; | |
a257cdd0 | 34 | struct posix_acl *acl; |
4ac7249e CH |
35 | struct inode *inode; |
36 | svc_fh *fh; | |
a257cdd0 AG |
37 | |
38 | dprintk("nfsd: GETACL(2acl) %s\n", SVCFH_fmt(&argp->fh)); | |
39 | ||
40 | fh = fh_copy(&resp->fh, &argp->fh); | |
f0af2210 CL |
41 | resp->status = fh_verify(rqstp, &resp->fh, 0, NFSD_MAY_NOP); |
42 | if (resp->status != nfs_ok) | |
43 | goto out; | |
a257cdd0 | 44 | |
2b0143b5 | 45 | inode = d_inode(fh->fh_dentry); |
4ac7249e | 46 | |
f0af2210 CL |
47 | if (argp->mask & ~NFS_ACL_MASK) { |
48 | resp->status = nfserr_inval; | |
49 | goto out; | |
50 | } | |
a257cdd0 AG |
51 | resp->mask = argp->mask; |
52 | ||
f0af2210 CL |
53 | resp->status = fh_getattr(fh, &resp->stat); |
54 | if (resp->status != nfs_ok) | |
55 | goto out; | |
4f4a4fad | 56 | |
a257cdd0 | 57 | if (resp->mask & (NFS_ACL|NFS_ACLCNT)) { |
cac2f8b8 | 58 | acl = get_inode_acl(inode, ACL_TYPE_ACCESS); |
a257cdd0 AG |
59 | if (acl == NULL) { |
60 | /* Solaris returns the inode's minimum ACL. */ | |
a257cdd0 AG |
61 | acl = posix_acl_from_mode(inode->i_mode, GFP_KERNEL); |
62 | } | |
35e634b8 | 63 | if (IS_ERR(acl)) { |
f0af2210 | 64 | resp->status = nfserrno(PTR_ERR(acl)); |
35e634b8 KM |
65 | goto fail; |
66 | } | |
a257cdd0 AG |
67 | resp->acl_access = acl; |
68 | } | |
69 | if (resp->mask & (NFS_DFACL|NFS_DFACLCNT)) { | |
70 | /* Check how Solaris handles requests for the Default ACL | |
71 | of a non-directory! */ | |
cac2f8b8 | 72 | acl = get_inode_acl(inode, ACL_TYPE_DEFAULT); |
a257cdd0 | 73 | if (IS_ERR(acl)) { |
f0af2210 | 74 | resp->status = nfserrno(PTR_ERR(acl)); |
4ac7249e | 75 | goto fail; |
a257cdd0 AG |
76 | } |
77 | resp->acl_default = acl; | |
78 | } | |
79 | ||
80 | /* resp->acl_{access,default} are released in nfssvc_release_getacl. */ | |
f0af2210 | 81 | out: |
cc028a10 | 82 | return rpc_success; |
a257cdd0 AG |
83 | |
84 | fail: | |
85 | posix_acl_release(resp->acl_access); | |
86 | posix_acl_release(resp->acl_default); | |
7faf14a7 LL |
87 | resp->acl_access = NULL; |
88 | resp->acl_default = NULL; | |
f0af2210 | 89 | goto out; |
a257cdd0 AG |
90 | } |
91 | ||
92 | /* | |
93 | * Set the Access and/or Default ACL of a file. | |
94 | */ | |
a6beb732 | 95 | static __be32 nfsacld_proc_setacl(struct svc_rqst *rqstp) |
a257cdd0 | 96 | { |
a6beb732 CH |
97 | struct nfsd3_setaclargs *argp = rqstp->rq_argp; |
98 | struct nfsd_attrstat *resp = rqstp->rq_resp; | |
4ac7249e | 99 | struct inode *inode; |
a257cdd0 | 100 | svc_fh *fh; |
4ac7249e | 101 | int error; |
a257cdd0 AG |
102 | |
103 | dprintk("nfsd: SETACL(2acl) %s\n", SVCFH_fmt(&argp->fh)); | |
104 | ||
105 | fh = fh_copy(&resp->fh, &argp->fh); | |
f0af2210 CL |
106 | resp->status = fh_verify(rqstp, &resp->fh, 0, NFSD_MAY_SATTR); |
107 | if (resp->status != nfs_ok) | |
4ac7249e | 108 | goto out; |
a257cdd0 | 109 | |
2b0143b5 | 110 | inode = d_inode(fh->fh_dentry); |
a257cdd0 | 111 | |
4ac7249e CH |
112 | error = fh_want_write(fh); |
113 | if (error) | |
114 | goto out_errno; | |
115 | ||
bb4d53d6 | 116 | inode_lock(inode); |
99965378 | 117 | |
13e83a49 | 118 | error = set_posix_acl(&nop_mnt_idmap, fh->fh_dentry, ACL_TYPE_ACCESS, |
e65ce2a5 | 119 | argp->acl_access); |
4ac7249e | 120 | if (error) |
99965378 | 121 | goto out_drop_lock; |
13e83a49 | 122 | error = set_posix_acl(&nop_mnt_idmap, fh->fh_dentry, ACL_TYPE_DEFAULT, |
e65ce2a5 | 123 | argp->acl_default); |
4ac7249e | 124 | if (error) |
99965378 BH |
125 | goto out_drop_lock; |
126 | ||
bb4d53d6 | 127 | inode_unlock(inode); |
4ac7249e CH |
128 | |
129 | fh_drop_write(fh); | |
130 | ||
f0af2210 | 131 | resp->status = fh_getattr(fh, &resp->stat); |
4ac7249e CH |
132 | |
133 | out: | |
a257cdd0 AG |
134 | /* argp->acl_{access,default} may have been allocated in |
135 | nfssvc_decode_setaclargs. */ | |
136 | posix_acl_release(argp->acl_access); | |
137 | posix_acl_release(argp->acl_default); | |
cc028a10 | 138 | return rpc_success; |
f0af2210 | 139 | |
99965378 | 140 | out_drop_lock: |
bb4d53d6 | 141 | inode_unlock(inode); |
4ac7249e CH |
142 | fh_drop_write(fh); |
143 | out_errno: | |
f0af2210 | 144 | resp->status = nfserrno(error); |
4ac7249e | 145 | goto out; |
a257cdd0 AG |
146 | } |
147 | ||
148 | /* | |
149 | * Check file attributes | |
150 | */ | |
a6beb732 | 151 | static __be32 nfsacld_proc_getattr(struct svc_rqst *rqstp) |
a257cdd0 | 152 | { |
a6beb732 CH |
153 | struct nfsd_fhandle *argp = rqstp->rq_argp; |
154 | struct nfsd_attrstat *resp = rqstp->rq_resp; | |
f0af2210 | 155 | |
a257cdd0 AG |
156 | dprintk("nfsd: GETATTR %s\n", SVCFH_fmt(&argp->fh)); |
157 | ||
158 | fh_copy(&resp->fh, &argp->fh); | |
f0af2210 CL |
159 | resp->status = fh_verify(rqstp, &resp->fh, 0, NFSD_MAY_NOP); |
160 | if (resp->status != nfs_ok) | |
161 | goto out; | |
162 | resp->status = fh_getattr(&resp->fh, &resp->stat); | |
163 | out: | |
cc028a10 | 164 | return rpc_success; |
a257cdd0 AG |
165 | } |
166 | ||
167 | /* | |
168 | * Check file access | |
169 | */ | |
a6beb732 | 170 | static __be32 nfsacld_proc_access(struct svc_rqst *rqstp) |
a257cdd0 | 171 | { |
a6beb732 CH |
172 | struct nfsd3_accessargs *argp = rqstp->rq_argp; |
173 | struct nfsd3_accessres *resp = rqstp->rq_resp; | |
a257cdd0 AG |
174 | |
175 | dprintk("nfsd: ACCESS(2acl) %s 0x%x\n", | |
176 | SVCFH_fmt(&argp->fh), | |
177 | argp->access); | |
178 | ||
179 | fh_copy(&resp->fh, &argp->fh); | |
180 | resp->access = argp->access; | |
f0af2210 CL |
181 | resp->status = nfsd_access(rqstp, &resp->fh, &resp->access, NULL); |
182 | if (resp->status != nfs_ok) | |
183 | goto out; | |
184 | resp->status = fh_getattr(&resp->fh, &resp->stat); | |
185 | out: | |
cc028a10 | 186 | return rpc_success; |
a257cdd0 AG |
187 | } |
188 | ||
189 | /* | |
190 | * XDR decode functions | |
191 | */ | |
dcc46991 | 192 | |
c44b31c2 | 193 | static bool |
16c66364 | 194 | nfsaclsvc_decode_getaclargs(struct svc_rqst *rqstp, struct xdr_stream *xdr) |
a257cdd0 | 195 | { |
026fec7e CH |
196 | struct nfsd3_getaclargs *argp = rqstp->rq_argp; |
197 | ||
635a45d3 | 198 | if (!svcxdr_decode_fhandle(xdr, &argp->fh)) |
c44b31c2 | 199 | return false; |
635a45d3 | 200 | if (xdr_stream_decode_u32(xdr, &argp->mask) < 0) |
c44b31c2 | 201 | return false; |
a257cdd0 | 202 | |
c44b31c2 | 203 | return true; |
a257cdd0 AG |
204 | } |
205 | ||
c44b31c2 | 206 | static bool |
16c66364 | 207 | nfsaclsvc_decode_setaclargs(struct svc_rqst *rqstp, struct xdr_stream *xdr) |
a257cdd0 | 208 | { |
026fec7e | 209 | struct nfsd3_setaclargs *argp = rqstp->rq_argp; |
a257cdd0 | 210 | |
427eab3b | 211 | if (!svcxdr_decode_fhandle(xdr, &argp->fh)) |
c44b31c2 | 212 | return false; |
427eab3b | 213 | if (xdr_stream_decode_u32(xdr, &argp->mask) < 0) |
c44b31c2 | 214 | return false; |
427eab3b | 215 | if (argp->mask & ~NFS_ACL_MASK) |
c44b31c2 | 216 | return false; |
427eab3b CL |
217 | if (!nfs_stream_decode_acl(xdr, NULL, (argp->mask & NFS_ACL) ? |
218 | &argp->acl_access : NULL)) | |
c44b31c2 | 219 | return false; |
427eab3b CL |
220 | if (!nfs_stream_decode_acl(xdr, NULL, (argp->mask & NFS_DFACL) ? |
221 | &argp->acl_default : NULL)) | |
c44b31c2 | 222 | return false; |
a257cdd0 | 223 | |
c44b31c2 | 224 | return true; |
a257cdd0 AG |
225 | } |
226 | ||
c44b31c2 | 227 | static bool |
16c66364 | 228 | nfsaclsvc_decode_accessargs(struct svc_rqst *rqstp, struct xdr_stream *xdr) |
a257cdd0 | 229 | { |
64063892 | 230 | struct nfsd3_accessargs *args = rqstp->rq_argp; |
026fec7e | 231 | |
64063892 | 232 | if (!svcxdr_decode_fhandle(xdr, &args->fh)) |
c44b31c2 | 233 | return false; |
64063892 | 234 | if (xdr_stream_decode_u32(xdr, &args->access) < 0) |
c44b31c2 | 235 | return false; |
a257cdd0 | 236 | |
c44b31c2 | 237 | return true; |
a257cdd0 AG |
238 | } |
239 | ||
240 | /* | |
241 | * XDR encode functions | |
242 | */ | |
243 | ||
244 | /* GETACL */ | |
130e2054 | 245 | static bool |
fda49441 | 246 | nfsaclsvc_encode_getaclres(struct svc_rqst *rqstp, struct xdr_stream *xdr) |
a257cdd0 | 247 | { |
63f8de37 | 248 | struct nfsd3_getaclres *resp = rqstp->rq_resp; |
a257cdd0 | 249 | struct dentry *dentry = resp->fh.fh_dentry; |
aefa89d1 | 250 | struct inode *inode; |
a257cdd0 | 251 | |
f8cba473 | 252 | if (!svcxdr_encode_stat(xdr, resp->status)) |
5f7b839d | 253 | return false; |
f0af2210 | 254 | |
2b0143b5 | 255 | if (dentry == NULL || d_really_is_negative(dentry)) |
5f7b839d | 256 | return true; |
2b0143b5 | 257 | inode = d_inode(dentry); |
a257cdd0 | 258 | |
f8cba473 | 259 | if (!svcxdr_encode_fattr(rqstp, xdr, &resp->fh, &resp->stat)) |
5f7b839d | 260 | return false; |
f8cba473 | 261 | if (xdr_stream_encode_u32(xdr, resp->mask) < 0) |
5f7b839d | 262 | return false; |
a257cdd0 | 263 | |
f8cba473 CL |
264 | if (!nfs_stream_encode_acl(xdr, inode, resp->acl_access, |
265 | resp->mask & NFS_ACL, 0)) | |
5f7b839d | 266 | return false; |
f8cba473 CL |
267 | if (!nfs_stream_encode_acl(xdr, inode, resp->acl_default, |
268 | resp->mask & NFS_DFACL, NFS_ACL_DEFAULT)) | |
5f7b839d | 269 | return false; |
f8cba473 | 270 | |
5f7b839d | 271 | return true; |
a257cdd0 AG |
272 | } |
273 | ||
a257cdd0 | 274 | /* ACCESS */ |
130e2054 | 275 | static bool |
fda49441 | 276 | nfsaclsvc_encode_accessres(struct svc_rqst *rqstp, struct xdr_stream *xdr) |
a257cdd0 | 277 | { |
63f8de37 CH |
278 | struct nfsd3_accessres *resp = rqstp->rq_resp; |
279 | ||
07f5c296 | 280 | if (!svcxdr_encode_stat(xdr, resp->status)) |
5f7b839d | 281 | return false; |
07f5c296 CL |
282 | switch (resp->status) { |
283 | case nfs_ok: | |
284 | if (!svcxdr_encode_fattr(rqstp, xdr, &resp->fh, &resp->stat)) | |
5f7b839d | 285 | return false; |
07f5c296 | 286 | if (xdr_stream_encode_u32(xdr, resp->access) < 0) |
5f7b839d | 287 | return false; |
07f5c296 CL |
288 | break; |
289 | } | |
f0af2210 | 290 | |
5f7b839d | 291 | return true; |
a257cdd0 AG |
292 | } |
293 | ||
294 | /* | |
295 | * XDR release functions | |
296 | */ | |
8537488b | 297 | static void nfsaclsvc_release_getacl(struct svc_rqst *rqstp) |
a257cdd0 | 298 | { |
8537488b CH |
299 | struct nfsd3_getaclres *resp = rqstp->rq_resp; |
300 | ||
a257cdd0 AG |
301 | fh_put(&resp->fh); |
302 | posix_acl_release(resp->acl_access); | |
303 | posix_acl_release(resp->acl_default); | |
a257cdd0 AG |
304 | } |
305 | ||
8537488b | 306 | static void nfsaclsvc_release_access(struct svc_rqst *rqstp) |
c9ce2283 | 307 | { |
8537488b CH |
308 | struct nfsd3_accessres *resp = rqstp->rq_resp; |
309 | ||
310 | fh_put(&resp->fh); | |
c9ce2283 GB |
311 | } |
312 | ||
a257cdd0 AG |
313 | #define ST 1 /* status*/ |
314 | #define AT 21 /* attributes */ | |
315 | #define pAT (1+AT) /* post attributes - conditional */ | |
316 | #define ACL (1+NFS_ACL_MAX_ENTRIES*3) /* Access Control List */ | |
317 | ||
ba1df797 CL |
318 | static const struct svc_procedure nfsd_acl_procedures2[5] = { |
319 | [ACLPROC2_NULL] = { | |
320 | .pc_func = nfsacld_proc_null, | |
788f7183 CL |
321 | .pc_decode = nfssvc_decode_voidarg, |
322 | .pc_encode = nfssvc_encode_voidres, | |
323 | .pc_argsize = sizeof(struct nfsd_voidargs), | |
103cc1fa | 324 | .pc_argzero = sizeof(struct nfsd_voidargs), |
788f7183 | 325 | .pc_ressize = sizeof(struct nfsd_voidres), |
ba1df797 CL |
326 | .pc_cachetype = RC_NOCACHE, |
327 | .pc_xdrressize = ST, | |
2289e87b | 328 | .pc_name = "NULL", |
ba1df797 CL |
329 | }, |
330 | [ACLPROC2_GETACL] = { | |
331 | .pc_func = nfsacld_proc_getacl, | |
332 | .pc_decode = nfsaclsvc_decode_getaclargs, | |
333 | .pc_encode = nfsaclsvc_encode_getaclres, | |
334 | .pc_release = nfsaclsvc_release_getacl, | |
335 | .pc_argsize = sizeof(struct nfsd3_getaclargs), | |
103cc1fa | 336 | .pc_argzero = sizeof(struct nfsd3_getaclargs), |
ba1df797 CL |
337 | .pc_ressize = sizeof(struct nfsd3_getaclres), |
338 | .pc_cachetype = RC_NOCACHE, | |
339 | .pc_xdrressize = ST+1+2*(1+ACL), | |
2289e87b | 340 | .pc_name = "GETACL", |
ba1df797 CL |
341 | }, |
342 | [ACLPROC2_SETACL] = { | |
343 | .pc_func = nfsacld_proc_setacl, | |
344 | .pc_decode = nfsaclsvc_decode_setaclargs, | |
778f068f CL |
345 | .pc_encode = nfssvc_encode_attrstatres, |
346 | .pc_release = nfssvc_release_attrstat, | |
ba1df797 | 347 | .pc_argsize = sizeof(struct nfsd3_setaclargs), |
103cc1fa | 348 | .pc_argzero = sizeof(struct nfsd3_setaclargs), |
ba1df797 CL |
349 | .pc_ressize = sizeof(struct nfsd_attrstat), |
350 | .pc_cachetype = RC_NOCACHE, | |
351 | .pc_xdrressize = ST+AT, | |
2289e87b | 352 | .pc_name = "SETACL", |
ba1df797 CL |
353 | }, |
354 | [ACLPROC2_GETATTR] = { | |
355 | .pc_func = nfsacld_proc_getattr, | |
571d31f3 | 356 | .pc_decode = nfssvc_decode_fhandleargs, |
8d2009a1 CL |
357 | .pc_encode = nfssvc_encode_attrstatres, |
358 | .pc_release = nfssvc_release_attrstat, | |
ba1df797 | 359 | .pc_argsize = sizeof(struct nfsd_fhandle), |
103cc1fa | 360 | .pc_argzero = sizeof(struct nfsd_fhandle), |
ba1df797 CL |
361 | .pc_ressize = sizeof(struct nfsd_attrstat), |
362 | .pc_cachetype = RC_NOCACHE, | |
363 | .pc_xdrressize = ST+AT, | |
2289e87b | 364 | .pc_name = "GETATTR", |
ba1df797 CL |
365 | }, |
366 | [ACLPROC2_ACCESS] = { | |
367 | .pc_func = nfsacld_proc_access, | |
368 | .pc_decode = nfsaclsvc_decode_accessargs, | |
369 | .pc_encode = nfsaclsvc_encode_accessres, | |
370 | .pc_release = nfsaclsvc_release_access, | |
371 | .pc_argsize = sizeof(struct nfsd3_accessargs), | |
103cc1fa | 372 | .pc_argzero = sizeof(struct nfsd3_accessargs), |
ba1df797 CL |
373 | .pc_ressize = sizeof(struct nfsd3_accessres), |
374 | .pc_cachetype = RC_NOCACHE, | |
375 | .pc_xdrressize = ST+AT+1, | |
2289e87b | 376 | .pc_name = "SETATTR", |
ba1df797 | 377 | }, |
a257cdd0 AG |
378 | }; |
379 | ||
65ba3d24 CL |
380 | static DEFINE_PER_CPU_ALIGNED(unsigned long, |
381 | nfsd_acl_count2[ARRAY_SIZE(nfsd_acl_procedures2)]); | |
e9679189 CH |
382 | const struct svc_version nfsd_acl_version2 = { |
383 | .vs_vers = 2, | |
65ba3d24 | 384 | .vs_nproc = ARRAY_SIZE(nfsd_acl_procedures2), |
e9679189 CH |
385 | .vs_proc = nfsd_acl_procedures2, |
386 | .vs_count = nfsd_acl_count2, | |
387 | .vs_dispatch = nfsd_dispatch, | |
388 | .vs_xdrsize = NFS3_SVC_XDRSIZE, | |
a257cdd0 | 389 | }; |