nfs2acl.c 8.3 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344
  1. /*
  2. * linux/fs/nfsd/nfs2acl.c
  3. *
  4. * Process version 2 NFSACL requests.
  5. *
  6. * Copyright (C) 2002-2003 Andreas Gruenbacher <agruen@suse.de>
  7. */
  8. #include <linux/sunrpc/svc.h>
  9. #include <linux/nfs.h>
  10. #include <linux/nfsd/nfsd.h>
  11. #include <linux/nfsd/cache.h>
  12. #include <linux/nfsd/xdr.h>
  13. #include <linux/nfsd/xdr3.h>
  14. #include <linux/posix_acl.h>
  15. #include <linux/nfsacl.h>
  16. #define NFSDDBG_FACILITY NFSDDBG_PROC
  17. #define RETURN_STATUS(st) { resp->status = (st); return (st); }
  18. /*
  19. * NULL call.
  20. */
  21. static __be32
  22. nfsacld_proc_null(struct svc_rqst *rqstp, void *argp, void *resp)
  23. {
  24. return nfs_ok;
  25. }
  26. /*
  27. * Get the Access and/or Default ACL of a file.
  28. */
  29. static __be32 nfsacld_proc_getacl(struct svc_rqst * rqstp,
  30. struct nfsd3_getaclargs *argp, struct nfsd3_getaclres *resp)
  31. {
  32. svc_fh *fh;
  33. struct posix_acl *acl;
  34. __be32 nfserr = 0;
  35. dprintk("nfsd: GETACL(2acl) %s\n", SVCFH_fmt(&argp->fh));
  36. fh = fh_copy(&resp->fh, &argp->fh);
  37. if ((nfserr = fh_verify(rqstp, &resp->fh, 0, MAY_NOP)))
  38. RETURN_STATUS(nfserr_inval);
  39. if (argp->mask & ~(NFS_ACL|NFS_ACLCNT|NFS_DFACL|NFS_DFACLCNT))
  40. RETURN_STATUS(nfserr_inval);
  41. resp->mask = argp->mask;
  42. if (resp->mask & (NFS_ACL|NFS_ACLCNT)) {
  43. acl = nfsd_get_posix_acl(fh, ACL_TYPE_ACCESS);
  44. if (IS_ERR(acl)) {
  45. int err = PTR_ERR(acl);
  46. if (err == -ENODATA || err == -EOPNOTSUPP)
  47. acl = NULL;
  48. else {
  49. nfserr = nfserrno(err);
  50. goto fail;
  51. }
  52. }
  53. if (acl == NULL) {
  54. /* Solaris returns the inode's minimum ACL. */
  55. struct inode *inode = fh->fh_dentry->d_inode;
  56. acl = posix_acl_from_mode(inode->i_mode, GFP_KERNEL);
  57. }
  58. resp->acl_access = acl;
  59. }
  60. if (resp->mask & (NFS_DFACL|NFS_DFACLCNT)) {
  61. /* Check how Solaris handles requests for the Default ACL
  62. of a non-directory! */
  63. acl = nfsd_get_posix_acl(fh, ACL_TYPE_DEFAULT);
  64. if (IS_ERR(acl)) {
  65. int err = PTR_ERR(acl);
  66. if (err == -ENODATA || err == -EOPNOTSUPP)
  67. acl = NULL;
  68. else {
  69. nfserr = nfserrno(err);
  70. goto fail;
  71. }
  72. }
  73. resp->acl_default = acl;
  74. }
  75. /* resp->acl_{access,default} are released in nfssvc_release_getacl. */
  76. RETURN_STATUS(0);
  77. fail:
  78. posix_acl_release(resp->acl_access);
  79. posix_acl_release(resp->acl_default);
  80. RETURN_STATUS(nfserr);
  81. }
  82. /*
  83. * Set the Access and/or Default ACL of a file.
  84. */
  85. static __be32 nfsacld_proc_setacl(struct svc_rqst * rqstp,
  86. struct nfsd3_setaclargs *argp,
  87. struct nfsd_attrstat *resp)
  88. {
  89. svc_fh *fh;
  90. __be32 nfserr = 0;
  91. dprintk("nfsd: SETACL(2acl) %s\n", SVCFH_fmt(&argp->fh));
  92. fh = fh_copy(&resp->fh, &argp->fh);
  93. nfserr = fh_verify(rqstp, &resp->fh, 0, MAY_SATTR);
  94. if (!nfserr) {
  95. nfserr = nfserrno( nfsd_set_posix_acl(
  96. fh, ACL_TYPE_ACCESS, argp->acl_access) );
  97. }
  98. if (!nfserr) {
  99. nfserr = nfserrno( nfsd_set_posix_acl(
  100. fh, ACL_TYPE_DEFAULT, argp->acl_default) );
  101. }
  102. /* argp->acl_{access,default} may have been allocated in
  103. nfssvc_decode_setaclargs. */
  104. posix_acl_release(argp->acl_access);
  105. posix_acl_release(argp->acl_default);
  106. return nfserr;
  107. }
  108. /*
  109. * Check file attributes
  110. */
  111. static __be32 nfsacld_proc_getattr(struct svc_rqst * rqstp,
  112. struct nfsd_fhandle *argp, struct nfsd_attrstat *resp)
  113. {
  114. dprintk("nfsd: GETATTR %s\n", SVCFH_fmt(&argp->fh));
  115. fh_copy(&resp->fh, &argp->fh);
  116. return fh_verify(rqstp, &resp->fh, 0, MAY_NOP);
  117. }
  118. /*
  119. * Check file access
  120. */
  121. static __be32 nfsacld_proc_access(struct svc_rqst *rqstp, struct nfsd3_accessargs *argp,
  122. struct nfsd3_accessres *resp)
  123. {
  124. __be32 nfserr;
  125. dprintk("nfsd: ACCESS(2acl) %s 0x%x\n",
  126. SVCFH_fmt(&argp->fh),
  127. argp->access);
  128. fh_copy(&resp->fh, &argp->fh);
  129. resp->access = argp->access;
  130. nfserr = nfsd_access(rqstp, &resp->fh, &resp->access, NULL);
  131. return nfserr;
  132. }
  133. /*
  134. * XDR decode functions
  135. */
  136. static int nfsaclsvc_decode_getaclargs(struct svc_rqst *rqstp, __be32 *p,
  137. struct nfsd3_getaclargs *argp)
  138. {
  139. if (!(p = nfs2svc_decode_fh(p, &argp->fh)))
  140. return 0;
  141. argp->mask = ntohl(*p); p++;
  142. return xdr_argsize_check(rqstp, p);
  143. }
  144. static int nfsaclsvc_decode_setaclargs(struct svc_rqst *rqstp, __be32 *p,
  145. struct nfsd3_setaclargs *argp)
  146. {
  147. struct kvec *head = rqstp->rq_arg.head;
  148. unsigned int base;
  149. int n;
  150. if (!(p = nfs2svc_decode_fh(p, &argp->fh)))
  151. return 0;
  152. argp->mask = ntohl(*p++);
  153. if (argp->mask & ~(NFS_ACL|NFS_ACLCNT|NFS_DFACL|NFS_DFACLCNT) ||
  154. !xdr_argsize_check(rqstp, p))
  155. return 0;
  156. base = (char *)p - (char *)head->iov_base;
  157. n = nfsacl_decode(&rqstp->rq_arg, base, NULL,
  158. (argp->mask & NFS_ACL) ?
  159. &argp->acl_access : NULL);
  160. if (n > 0)
  161. n = nfsacl_decode(&rqstp->rq_arg, base + n, NULL,
  162. (argp->mask & NFS_DFACL) ?
  163. &argp->acl_default : NULL);
  164. return (n > 0);
  165. }
  166. static int nfsaclsvc_decode_fhandleargs(struct svc_rqst *rqstp, __be32 *p,
  167. struct nfsd_fhandle *argp)
  168. {
  169. if (!(p = nfs2svc_decode_fh(p, &argp->fh)))
  170. return 0;
  171. return xdr_argsize_check(rqstp, p);
  172. }
  173. static int nfsaclsvc_decode_accessargs(struct svc_rqst *rqstp, __be32 *p,
  174. struct nfsd3_accessargs *argp)
  175. {
  176. if (!(p = nfs2svc_decode_fh(p, &argp->fh)))
  177. return 0;
  178. argp->access = ntohl(*p++);
  179. return xdr_argsize_check(rqstp, p);
  180. }
  181. /*
  182. * XDR encode functions
  183. */
  184. /* GETACL */
  185. static int nfsaclsvc_encode_getaclres(struct svc_rqst *rqstp, __be32 *p,
  186. struct nfsd3_getaclres *resp)
  187. {
  188. struct dentry *dentry = resp->fh.fh_dentry;
  189. struct inode *inode = dentry->d_inode;
  190. struct kvec *head = rqstp->rq_res.head;
  191. unsigned int base;
  192. int n;
  193. int w;
  194. if (dentry == NULL || dentry->d_inode == NULL)
  195. return 0;
  196. inode = dentry->d_inode;
  197. p = nfs2svc_encode_fattr(rqstp, p, &resp->fh);
  198. *p++ = htonl(resp->mask);
  199. if (!xdr_ressize_check(rqstp, p))
  200. return 0;
  201. base = (char *)p - (char *)head->iov_base;
  202. rqstp->rq_res.page_len = w = nfsacl_size(
  203. (resp->mask & NFS_ACL) ? resp->acl_access : NULL,
  204. (resp->mask & NFS_DFACL) ? resp->acl_default : NULL);
  205. while (w > 0) {
  206. if (!rqstp->rq_respages[rqstp->rq_resused++])
  207. return 0;
  208. w -= PAGE_SIZE;
  209. }
  210. n = nfsacl_encode(&rqstp->rq_res, base, inode,
  211. resp->acl_access,
  212. resp->mask & NFS_ACL, 0);
  213. if (n > 0)
  214. n = nfsacl_encode(&rqstp->rq_res, base + n, inode,
  215. resp->acl_default,
  216. resp->mask & NFS_DFACL,
  217. NFS_ACL_DEFAULT);
  218. if (n <= 0)
  219. return 0;
  220. return 1;
  221. }
  222. static int nfsaclsvc_encode_attrstatres(struct svc_rqst *rqstp, __be32 *p,
  223. struct nfsd_attrstat *resp)
  224. {
  225. p = nfs2svc_encode_fattr(rqstp, p, &resp->fh);
  226. return xdr_ressize_check(rqstp, p);
  227. }
  228. /* ACCESS */
  229. static int nfsaclsvc_encode_accessres(struct svc_rqst *rqstp, __be32 *p,
  230. struct nfsd3_accessres *resp)
  231. {
  232. p = nfs2svc_encode_fattr(rqstp, p, &resp->fh);
  233. *p++ = htonl(resp->access);
  234. return xdr_ressize_check(rqstp, p);
  235. }
  236. /*
  237. * XDR release functions
  238. */
  239. static int nfsaclsvc_release_getacl(struct svc_rqst *rqstp, __be32 *p,
  240. struct nfsd3_getaclres *resp)
  241. {
  242. fh_put(&resp->fh);
  243. posix_acl_release(resp->acl_access);
  244. posix_acl_release(resp->acl_default);
  245. return 1;
  246. }
  247. static int nfsaclsvc_release_attrstat(struct svc_rqst *rqstp, __be32 *p,
  248. struct nfsd_attrstat *resp)
  249. {
  250. fh_put(&resp->fh);
  251. return 1;
  252. }
  253. static int nfsaclsvc_release_access(struct svc_rqst *rqstp, __be32 *p,
  254. struct nfsd3_accessres *resp)
  255. {
  256. fh_put(&resp->fh);
  257. return 1;
  258. }
  259. #define nfsaclsvc_decode_voidargs NULL
  260. #define nfsaclsvc_encode_voidres NULL
  261. #define nfsaclsvc_release_void NULL
  262. #define nfsd3_fhandleargs nfsd_fhandle
  263. #define nfsd3_attrstatres nfsd_attrstat
  264. #define nfsd3_voidres nfsd3_voidargs
  265. struct nfsd3_voidargs { int dummy; };
  266. #define PROC(name, argt, rest, relt, cache, respsize) \
  267. { (svc_procfunc) nfsacld_proc_##name, \
  268. (kxdrproc_t) nfsaclsvc_decode_##argt##args, \
  269. (kxdrproc_t) nfsaclsvc_encode_##rest##res, \
  270. (kxdrproc_t) nfsaclsvc_release_##relt, \
  271. sizeof(struct nfsd3_##argt##args), \
  272. sizeof(struct nfsd3_##rest##res), \
  273. 0, \
  274. cache, \
  275. respsize, \
  276. }
  277. #define ST 1 /* status*/
  278. #define AT 21 /* attributes */
  279. #define pAT (1+AT) /* post attributes - conditional */
  280. #define ACL (1+NFS_ACL_MAX_ENTRIES*3) /* Access Control List */
  281. static struct svc_procedure nfsd_acl_procedures2[] = {
  282. PROC(null, void, void, void, RC_NOCACHE, ST),
  283. PROC(getacl, getacl, getacl, getacl, RC_NOCACHE, ST+1+2*(1+ACL)),
  284. PROC(setacl, setacl, attrstat, attrstat, RC_NOCACHE, ST+AT),
  285. PROC(getattr, fhandle, attrstat, attrstat, RC_NOCACHE, ST+AT),
  286. PROC(access, access, access, access, RC_NOCACHE, ST+AT+1),
  287. };
  288. struct svc_version nfsd_acl_version2 = {
  289. .vs_vers = 2,
  290. .vs_nproc = 5,
  291. .vs_proc = nfsd_acl_procedures2,
  292. .vs_dispatch = nfsd_dispatch,
  293. .vs_xdrsize = NFS3_SVC_XDRSIZE,
  294. .vs_hidden = 1,
  295. };