]>
Commit | Line | Data |
---|---|---|
1 | /* | |
2 | * linux/fs/ext4/ioctl.c | |
3 | * | |
4 | * Copyright (C) 1993, 1994, 1995 | |
5 | * Remy Card ([email protected]) | |
6 | * Laboratoire MASI - Institut Blaise Pascal | |
7 | * Universite Pierre et Marie Curie (Paris VI) | |
8 | */ | |
9 | ||
10 | #include <linux/fs.h> | |
11 | #include <linux/jbd2.h> | |
12 | #include <linux/capability.h> | |
13 | #include <linux/time.h> | |
14 | #include <linux/compat.h> | |
15 | #include <linux/mount.h> | |
16 | #include <linux/file.h> | |
17 | #include <asm/uaccess.h> | |
18 | #include "ext4_jbd2.h" | |
19 | #include "ext4.h" | |
20 | ||
21 | long ext4_ioctl(struct file *filp, unsigned int cmd, unsigned long arg) | |
22 | { | |
23 | struct inode *inode = filp->f_dentry->d_inode; | |
24 | struct ext4_inode_info *ei = EXT4_I(inode); | |
25 | unsigned int flags; | |
26 | ||
27 | ext4_debug("cmd = %u, arg = %lu\n", cmd, arg); | |
28 | ||
29 | switch (cmd) { | |
30 | case EXT4_IOC_GETFLAGS: | |
31 | ext4_get_inode_flags(ei); | |
32 | flags = ei->i_flags & EXT4_FL_USER_VISIBLE; | |
33 | return put_user(flags, (int __user *) arg); | |
34 | case EXT4_IOC_SETFLAGS: { | |
35 | handle_t *handle = NULL; | |
36 | int err, migrate = 0; | |
37 | struct ext4_iloc iloc; | |
38 | unsigned int oldflags; | |
39 | unsigned int jflag; | |
40 | ||
41 | if (!is_owner_or_cap(inode)) | |
42 | return -EACCES; | |
43 | ||
44 | if (get_user(flags, (int __user *) arg)) | |
45 | return -EFAULT; | |
46 | ||
47 | err = mnt_want_write(filp->f_path.mnt); | |
48 | if (err) | |
49 | return err; | |
50 | ||
51 | flags = ext4_mask_flags(inode->i_mode, flags); | |
52 | ||
53 | err = -EPERM; | |
54 | mutex_lock(&inode->i_mutex); | |
55 | /* Is it quota file? Do not allow user to mess with it */ | |
56 | if (IS_NOQUOTA(inode)) | |
57 | goto flags_out; | |
58 | ||
59 | oldflags = ei->i_flags; | |
60 | ||
61 | /* The JOURNAL_DATA flag is modifiable only by root */ | |
62 | jflag = flags & EXT4_JOURNAL_DATA_FL; | |
63 | ||
64 | /* | |
65 | * The IMMUTABLE and APPEND_ONLY flags can only be changed by | |
66 | * the relevant capability. | |
67 | * | |
68 | * This test looks nicer. Thanks to Pauline Middelink | |
69 | */ | |
70 | if ((flags ^ oldflags) & (EXT4_APPEND_FL | EXT4_IMMUTABLE_FL)) { | |
71 | if (!capable(CAP_LINUX_IMMUTABLE)) | |
72 | goto flags_out; | |
73 | } | |
74 | ||
75 | /* | |
76 | * The JOURNAL_DATA flag can only be changed by | |
77 | * the relevant capability. | |
78 | */ | |
79 | if ((jflag ^ oldflags) & (EXT4_JOURNAL_DATA_FL)) { | |
80 | if (!capable(CAP_SYS_RESOURCE)) | |
81 | goto flags_out; | |
82 | } | |
83 | if (oldflags & EXT4_EXTENTS_FL) { | |
84 | /* We don't support clearning extent flags */ | |
85 | if (!(flags & EXT4_EXTENTS_FL)) { | |
86 | err = -EOPNOTSUPP; | |
87 | goto flags_out; | |
88 | } | |
89 | } else if (flags & EXT4_EXTENTS_FL) { | |
90 | /* migrate the file */ | |
91 | migrate = 1; | |
92 | flags &= ~EXT4_EXTENTS_FL; | |
93 | } | |
94 | ||
95 | handle = ext4_journal_start(inode, 1); | |
96 | if (IS_ERR(handle)) { | |
97 | err = PTR_ERR(handle); | |
98 | goto flags_out; | |
99 | } | |
100 | if (IS_SYNC(inode)) | |
101 | ext4_handle_sync(handle); | |
102 | err = ext4_reserve_inode_write(handle, inode, &iloc); | |
103 | if (err) | |
104 | goto flags_err; | |
105 | ||
106 | flags = flags & EXT4_FL_USER_MODIFIABLE; | |
107 | flags |= oldflags & ~EXT4_FL_USER_MODIFIABLE; | |
108 | ei->i_flags = flags; | |
109 | ||
110 | ext4_set_inode_flags(inode); | |
111 | inode->i_ctime = ext4_current_time(inode); | |
112 | ||
113 | err = ext4_mark_iloc_dirty(handle, inode, &iloc); | |
114 | flags_err: | |
115 | ext4_journal_stop(handle); | |
116 | if (err) | |
117 | goto flags_out; | |
118 | ||
119 | if ((jflag ^ oldflags) & (EXT4_JOURNAL_DATA_FL)) | |
120 | err = ext4_change_inode_journal_flag(inode, jflag); | |
121 | if (err) | |
122 | goto flags_out; | |
123 | if (migrate) | |
124 | err = ext4_ext_migrate(inode); | |
125 | flags_out: | |
126 | mutex_unlock(&inode->i_mutex); | |
127 | mnt_drop_write(filp->f_path.mnt); | |
128 | return err; | |
129 | } | |
130 | case EXT4_IOC_GETVERSION: | |
131 | case EXT4_IOC_GETVERSION_OLD: | |
132 | return put_user(inode->i_generation, (int __user *) arg); | |
133 | case EXT4_IOC_SETVERSION: | |
134 | case EXT4_IOC_SETVERSION_OLD: { | |
135 | handle_t *handle; | |
136 | struct ext4_iloc iloc; | |
137 | __u32 generation; | |
138 | int err; | |
139 | ||
140 | if (!is_owner_or_cap(inode)) | |
141 | return -EPERM; | |
142 | ||
143 | err = mnt_want_write(filp->f_path.mnt); | |
144 | if (err) | |
145 | return err; | |
146 | if (get_user(generation, (int __user *) arg)) { | |
147 | err = -EFAULT; | |
148 | goto setversion_out; | |
149 | } | |
150 | ||
151 | handle = ext4_journal_start(inode, 1); | |
152 | if (IS_ERR(handle)) { | |
153 | err = PTR_ERR(handle); | |
154 | goto setversion_out; | |
155 | } | |
156 | err = ext4_reserve_inode_write(handle, inode, &iloc); | |
157 | if (err == 0) { | |
158 | inode->i_ctime = ext4_current_time(inode); | |
159 | inode->i_generation = generation; | |
160 | err = ext4_mark_iloc_dirty(handle, inode, &iloc); | |
161 | } | |
162 | ext4_journal_stop(handle); | |
163 | setversion_out: | |
164 | mnt_drop_write(filp->f_path.mnt); | |
165 | return err; | |
166 | } | |
167 | #ifdef CONFIG_JBD2_DEBUG | |
168 | case EXT4_IOC_WAIT_FOR_READONLY: | |
169 | /* | |
170 | * This is racy - by the time we're woken up and running, | |
171 | * the superblock could be released. And the module could | |
172 | * have been unloaded. So sue me. | |
173 | * | |
174 | * Returns 1 if it slept, else zero. | |
175 | */ | |
176 | { | |
177 | struct super_block *sb = inode->i_sb; | |
178 | DECLARE_WAITQUEUE(wait, current); | |
179 | int ret = 0; | |
180 | ||
181 | set_current_state(TASK_INTERRUPTIBLE); | |
182 | add_wait_queue(&EXT4_SB(sb)->ro_wait_queue, &wait); | |
183 | if (timer_pending(&EXT4_SB(sb)->turn_ro_timer)) { | |
184 | schedule(); | |
185 | ret = 1; | |
186 | } | |
187 | remove_wait_queue(&EXT4_SB(sb)->ro_wait_queue, &wait); | |
188 | return ret; | |
189 | } | |
190 | #endif | |
191 | case EXT4_IOC_GROUP_EXTEND: { | |
192 | ext4_fsblk_t n_blocks_count; | |
193 | struct super_block *sb = inode->i_sb; | |
194 | int err, err2=0; | |
195 | ||
196 | if (!capable(CAP_SYS_RESOURCE)) | |
197 | return -EPERM; | |
198 | ||
199 | if (get_user(n_blocks_count, (__u32 __user *)arg)) | |
200 | return -EFAULT; | |
201 | ||
202 | err = mnt_want_write(filp->f_path.mnt); | |
203 | if (err) | |
204 | return err; | |
205 | ||
206 | err = ext4_group_extend(sb, EXT4_SB(sb)->s_es, n_blocks_count); | |
207 | if (EXT4_SB(sb)->s_journal) { | |
208 | jbd2_journal_lock_updates(EXT4_SB(sb)->s_journal); | |
209 | err2 = jbd2_journal_flush(EXT4_SB(sb)->s_journal); | |
210 | jbd2_journal_unlock_updates(EXT4_SB(sb)->s_journal); | |
211 | } | |
212 | if (err == 0) | |
213 | err = err2; | |
214 | mnt_drop_write(filp->f_path.mnt); | |
215 | ||
216 | return err; | |
217 | } | |
218 | ||
219 | case EXT4_IOC_MOVE_EXT: { | |
220 | struct move_extent me; | |
221 | struct file *donor_filp; | |
222 | int err; | |
223 | ||
224 | if (!(filp->f_mode & FMODE_READ) || | |
225 | !(filp->f_mode & FMODE_WRITE)) | |
226 | return -EBADF; | |
227 | ||
228 | if (copy_from_user(&me, | |
229 | (struct move_extent __user *)arg, sizeof(me))) | |
230 | return -EFAULT; | |
231 | me.moved_len = 0; | |
232 | ||
233 | donor_filp = fget(me.donor_fd); | |
234 | if (!donor_filp) | |
235 | return -EBADF; | |
236 | ||
237 | if (!(donor_filp->f_mode & FMODE_WRITE)) { | |
238 | err = -EBADF; | |
239 | goto mext_out; | |
240 | } | |
241 | ||
242 | err = mnt_want_write(filp->f_path.mnt); | |
243 | if (err) | |
244 | goto mext_out; | |
245 | ||
246 | err = ext4_move_extents(filp, donor_filp, me.orig_start, | |
247 | me.donor_start, me.len, &me.moved_len); | |
248 | mnt_drop_write(filp->f_path.mnt); | |
249 | if (me.moved_len > 0) | |
250 | file_remove_suid(donor_filp); | |
251 | ||
252 | if (copy_to_user((struct move_extent *)arg, &me, sizeof(me))) | |
253 | err = -EFAULT; | |
254 | mext_out: | |
255 | fput(donor_filp); | |
256 | return err; | |
257 | } | |
258 | ||
259 | case EXT4_IOC_GROUP_ADD: { | |
260 | struct ext4_new_group_data input; | |
261 | struct super_block *sb = inode->i_sb; | |
262 | int err, err2=0; | |
263 | ||
264 | if (!capable(CAP_SYS_RESOURCE)) | |
265 | return -EPERM; | |
266 | ||
267 | if (copy_from_user(&input, (struct ext4_new_group_input __user *)arg, | |
268 | sizeof(input))) | |
269 | return -EFAULT; | |
270 | ||
271 | err = mnt_want_write(filp->f_path.mnt); | |
272 | if (err) | |
273 | return err; | |
274 | ||
275 | err = ext4_group_add(sb, &input); | |
276 | if (EXT4_SB(sb)->s_journal) { | |
277 | jbd2_journal_lock_updates(EXT4_SB(sb)->s_journal); | |
278 | err2 = jbd2_journal_flush(EXT4_SB(sb)->s_journal); | |
279 | jbd2_journal_unlock_updates(EXT4_SB(sb)->s_journal); | |
280 | } | |
281 | if (err == 0) | |
282 | err = err2; | |
283 | mnt_drop_write(filp->f_path.mnt); | |
284 | ||
285 | return err; | |
286 | } | |
287 | ||
288 | case EXT4_IOC_MIGRATE: | |
289 | { | |
290 | int err; | |
291 | if (!is_owner_or_cap(inode)) | |
292 | return -EACCES; | |
293 | ||
294 | err = mnt_want_write(filp->f_path.mnt); | |
295 | if (err) | |
296 | return err; | |
297 | /* | |
298 | * inode_mutex prevent write and truncate on the file. | |
299 | * Read still goes through. We take i_data_sem in | |
300 | * ext4_ext_swap_inode_data before we switch the | |
301 | * inode format to prevent read. | |
302 | */ | |
303 | mutex_lock(&(inode->i_mutex)); | |
304 | err = ext4_ext_migrate(inode); | |
305 | mutex_unlock(&(inode->i_mutex)); | |
306 | mnt_drop_write(filp->f_path.mnt); | |
307 | return err; | |
308 | } | |
309 | ||
310 | case EXT4_IOC_ALLOC_DA_BLKS: | |
311 | { | |
312 | int err; | |
313 | if (!is_owner_or_cap(inode)) | |
314 | return -EACCES; | |
315 | ||
316 | err = mnt_want_write(filp->f_path.mnt); | |
317 | if (err) | |
318 | return err; | |
319 | err = ext4_alloc_da_blocks(inode); | |
320 | mnt_drop_write(filp->f_path.mnt); | |
321 | return err; | |
322 | } | |
323 | ||
324 | default: | |
325 | return -ENOTTY; | |
326 | } | |
327 | } | |
328 | ||
329 | #ifdef CONFIG_COMPAT | |
330 | long ext4_compat_ioctl(struct file *file, unsigned int cmd, unsigned long arg) | |
331 | { | |
332 | /* These are just misnamed, they actually get/put from/to user an int */ | |
333 | switch (cmd) { | |
334 | case EXT4_IOC32_GETFLAGS: | |
335 | cmd = EXT4_IOC_GETFLAGS; | |
336 | break; | |
337 | case EXT4_IOC32_SETFLAGS: | |
338 | cmd = EXT4_IOC_SETFLAGS; | |
339 | break; | |
340 | case EXT4_IOC32_GETVERSION: | |
341 | cmd = EXT4_IOC_GETVERSION; | |
342 | break; | |
343 | case EXT4_IOC32_SETVERSION: | |
344 | cmd = EXT4_IOC_SETVERSION; | |
345 | break; | |
346 | case EXT4_IOC32_GROUP_EXTEND: | |
347 | cmd = EXT4_IOC_GROUP_EXTEND; | |
348 | break; | |
349 | case EXT4_IOC32_GETVERSION_OLD: | |
350 | cmd = EXT4_IOC_GETVERSION_OLD; | |
351 | break; | |
352 | case EXT4_IOC32_SETVERSION_OLD: | |
353 | cmd = EXT4_IOC_SETVERSION_OLD; | |
354 | break; | |
355 | #ifdef CONFIG_JBD2_DEBUG | |
356 | case EXT4_IOC32_WAIT_FOR_READONLY: | |
357 | cmd = EXT4_IOC_WAIT_FOR_READONLY; | |
358 | break; | |
359 | #endif | |
360 | case EXT4_IOC32_GETRSVSZ: | |
361 | cmd = EXT4_IOC_GETRSVSZ; | |
362 | break; | |
363 | case EXT4_IOC32_SETRSVSZ: | |
364 | cmd = EXT4_IOC_SETRSVSZ; | |
365 | break; | |
366 | case EXT4_IOC_GROUP_ADD: | |
367 | break; | |
368 | default: | |
369 | return -ENOIOCTLCMD; | |
370 | } | |
371 | return ext4_ioctl(file, cmd, (unsigned long) compat_ptr(arg)); | |
372 | } | |
373 | #endif |