nfs3acl.c 6.4 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268
  1. /*
  2. * linux/fs/nfsd/nfs3acl.c
  3. *
  4. * Process version 3 NFSACL requests.
  5. *
  6. * Copyright (C) 2002-2003 Andreas Gruenbacher <agruen@suse.de>
  7. */
  8. #include <linux/sunrpc/svc.h>
  9. #include <linux/nfs3.h>
  10. #include <linux/nfsd/nfsd.h>
  11. #include <linux/nfsd/cache.h>
  12. #include <linux/nfsd/xdr3.h>
  13. #include <linux/posix_acl.h>
  14. #include <linux/nfsacl.h>
  15. #define RETURN_STATUS(st) { resp->status = (st); return (st); }
  16. /*
  17. * NULL call.
  18. */
  19. static __be32
  20. nfsd3_proc_null(struct svc_rqst *rqstp, void *argp, void *resp)
  21. {
  22. return nfs_ok;
  23. }
  24. /*
  25. * Get the Access and/or Default ACL of a file.
  26. */
  27. static __be32 nfsd3_proc_getacl(struct svc_rqst * rqstp,
  28. struct nfsd3_getaclargs *argp, struct nfsd3_getaclres *resp)
  29. {
  30. svc_fh *fh;
  31. struct posix_acl *acl;
  32. __be32 nfserr = 0;
  33. fh = fh_copy(&resp->fh, &argp->fh);
  34. if ((nfserr = fh_verify(rqstp, &resp->fh, 0, MAY_NOP)))
  35. RETURN_STATUS(nfserr_inval);
  36. if (argp->mask & ~(NFS_ACL|NFS_ACLCNT|NFS_DFACL|NFS_DFACLCNT))
  37. RETURN_STATUS(nfserr_inval);
  38. resp->mask = argp->mask;
  39. if (resp->mask & (NFS_ACL|NFS_ACLCNT)) {
  40. acl = nfsd_get_posix_acl(fh, ACL_TYPE_ACCESS);
  41. if (IS_ERR(acl)) {
  42. int err = PTR_ERR(acl);
  43. if (err == -ENODATA || err == -EOPNOTSUPP)
  44. acl = NULL;
  45. else {
  46. nfserr = nfserrno(err);
  47. goto fail;
  48. }
  49. }
  50. if (acl == NULL) {
  51. /* Solaris returns the inode's minimum ACL. */
  52. struct inode *inode = fh->fh_dentry->d_inode;
  53. acl = posix_acl_from_mode(inode->i_mode, GFP_KERNEL);
  54. }
  55. resp->acl_access = acl;
  56. }
  57. if (resp->mask & (NFS_DFACL|NFS_DFACLCNT)) {
  58. /* Check how Solaris handles requests for the Default ACL
  59. of a non-directory! */
  60. acl = nfsd_get_posix_acl(fh, ACL_TYPE_DEFAULT);
  61. if (IS_ERR(acl)) {
  62. int err = PTR_ERR(acl);
  63. if (err == -ENODATA || err == -EOPNOTSUPP)
  64. acl = NULL;
  65. else {
  66. nfserr = nfserrno(err);
  67. goto fail;
  68. }
  69. }
  70. resp->acl_default = acl;
  71. }
  72. /* resp->acl_{access,default} are released in nfs3svc_release_getacl. */
  73. RETURN_STATUS(0);
  74. fail:
  75. posix_acl_release(resp->acl_access);
  76. posix_acl_release(resp->acl_default);
  77. RETURN_STATUS(nfserr);
  78. }
  79. /*
  80. * Set the Access and/or Default ACL of a file.
  81. */
  82. static __be32 nfsd3_proc_setacl(struct svc_rqst * rqstp,
  83. struct nfsd3_setaclargs *argp,
  84. struct nfsd3_attrstat *resp)
  85. {
  86. svc_fh *fh;
  87. __be32 nfserr = 0;
  88. fh = fh_copy(&resp->fh, &argp->fh);
  89. nfserr = fh_verify(rqstp, &resp->fh, 0, MAY_SATTR);
  90. if (!nfserr) {
  91. nfserr = nfserrno( nfsd_set_posix_acl(
  92. fh, ACL_TYPE_ACCESS, argp->acl_access) );
  93. }
  94. if (!nfserr) {
  95. nfserr = nfserrno( nfsd_set_posix_acl(
  96. fh, ACL_TYPE_DEFAULT, argp->acl_default) );
  97. }
  98. /* argp->acl_{access,default} may have been allocated in
  99. nfs3svc_decode_setaclargs. */
  100. posix_acl_release(argp->acl_access);
  101. posix_acl_release(argp->acl_default);
  102. RETURN_STATUS(nfserr);
  103. }
  104. /*
  105. * XDR decode functions
  106. */
  107. static int nfs3svc_decode_getaclargs(struct svc_rqst *rqstp, __be32 *p,
  108. struct nfsd3_getaclargs *args)
  109. {
  110. if (!(p = nfs3svc_decode_fh(p, &args->fh)))
  111. return 0;
  112. args->mask = ntohl(*p); p++;
  113. return xdr_argsize_check(rqstp, p);
  114. }
  115. static int nfs3svc_decode_setaclargs(struct svc_rqst *rqstp, __be32 *p,
  116. struct nfsd3_setaclargs *args)
  117. {
  118. struct kvec *head = rqstp->rq_arg.head;
  119. unsigned int base;
  120. int n;
  121. if (!(p = nfs3svc_decode_fh(p, &args->fh)))
  122. return 0;
  123. args->mask = ntohl(*p++);
  124. if (args->mask & ~(NFS_ACL|NFS_ACLCNT|NFS_DFACL|NFS_DFACLCNT) ||
  125. !xdr_argsize_check(rqstp, p))
  126. return 0;
  127. base = (char *)p - (char *)head->iov_base;
  128. n = nfsacl_decode(&rqstp->rq_arg, base, NULL,
  129. (args->mask & NFS_ACL) ?
  130. &args->acl_access : NULL);
  131. if (n > 0)
  132. n = nfsacl_decode(&rqstp->rq_arg, base + n, NULL,
  133. (args->mask & NFS_DFACL) ?
  134. &args->acl_default : NULL);
  135. return (n > 0);
  136. }
  137. /*
  138. * XDR encode functions
  139. */
  140. /* GETACL */
  141. static int nfs3svc_encode_getaclres(struct svc_rqst *rqstp, __be32 *p,
  142. struct nfsd3_getaclres *resp)
  143. {
  144. struct dentry *dentry = resp->fh.fh_dentry;
  145. p = nfs3svc_encode_post_op_attr(rqstp, p, &resp->fh);
  146. if (resp->status == 0 && dentry && dentry->d_inode) {
  147. struct inode *inode = dentry->d_inode;
  148. struct kvec *head = rqstp->rq_res.head;
  149. unsigned int base;
  150. int n;
  151. int w;
  152. *p++ = htonl(resp->mask);
  153. if (!xdr_ressize_check(rqstp, p))
  154. return 0;
  155. base = (char *)p - (char *)head->iov_base;
  156. rqstp->rq_res.page_len = w = nfsacl_size(
  157. (resp->mask & NFS_ACL) ? resp->acl_access : NULL,
  158. (resp->mask & NFS_DFACL) ? resp->acl_default : NULL);
  159. while (w > 0) {
  160. if (!rqstp->rq_respages[rqstp->rq_resused++])
  161. return 0;
  162. w -= PAGE_SIZE;
  163. }
  164. n = nfsacl_encode(&rqstp->rq_res, base, inode,
  165. resp->acl_access,
  166. resp->mask & NFS_ACL, 0);
  167. if (n > 0)
  168. n = nfsacl_encode(&rqstp->rq_res, base + n, inode,
  169. resp->acl_default,
  170. resp->mask & NFS_DFACL,
  171. NFS_ACL_DEFAULT);
  172. if (n <= 0)
  173. return 0;
  174. } else
  175. if (!xdr_ressize_check(rqstp, p))
  176. return 0;
  177. return 1;
  178. }
  179. /* SETACL */
  180. static int nfs3svc_encode_setaclres(struct svc_rqst *rqstp, __be32 *p,
  181. struct nfsd3_attrstat *resp)
  182. {
  183. p = nfs3svc_encode_post_op_attr(rqstp, p, &resp->fh);
  184. return xdr_ressize_check(rqstp, p);
  185. }
  186. /*
  187. * XDR release functions
  188. */
  189. static int nfs3svc_release_getacl(struct svc_rqst *rqstp, __be32 *p,
  190. struct nfsd3_getaclres *resp)
  191. {
  192. fh_put(&resp->fh);
  193. posix_acl_release(resp->acl_access);
  194. posix_acl_release(resp->acl_default);
  195. return 1;
  196. }
  197. #define nfs3svc_decode_voidargs NULL
  198. #define nfs3svc_release_void NULL
  199. #define nfsd3_setaclres nfsd3_attrstat
  200. #define nfsd3_voidres nfsd3_voidargs
  201. struct nfsd3_voidargs { int dummy; };
  202. #define PROC(name, argt, rest, relt, cache, respsize) \
  203. { (svc_procfunc) nfsd3_proc_##name, \
  204. (kxdrproc_t) nfs3svc_decode_##argt##args, \
  205. (kxdrproc_t) nfs3svc_encode_##rest##res, \
  206. (kxdrproc_t) nfs3svc_release_##relt, \
  207. sizeof(struct nfsd3_##argt##args), \
  208. sizeof(struct nfsd3_##rest##res), \
  209. 0, \
  210. cache, \
  211. respsize, \
  212. }
  213. #define ST 1 /* status*/
  214. #define AT 21 /* attributes */
  215. #define pAT (1+AT) /* post attributes - conditional */
  216. #define ACL (1+NFS_ACL_MAX_ENTRIES*3) /* Access Control List */
  217. static struct svc_procedure nfsd_acl_procedures3[] = {
  218. PROC(null, void, void, void, RC_NOCACHE, ST),
  219. PROC(getacl, getacl, getacl, getacl, RC_NOCACHE, ST+1+2*(1+ACL)),
  220. PROC(setacl, setacl, setacl, fhandle, RC_NOCACHE, ST+pAT),
  221. };
  222. struct svc_version nfsd_acl_version3 = {
  223. .vs_vers = 3,
  224. .vs_nproc = 3,
  225. .vs_proc = nfsd_acl_procedures3,
  226. .vs_dispatch = nfsd_dispatch,
  227. .vs_xdrsize = NFS3_SVC_XDRSIZE,
  228. .vs_hidden = 1,
  229. };