Andreas Gruenbacher | b7fa055 | 2005-06-22 17:16:27 +0000 | [diff] [blame] | 1 | #include <linux/fs.h> |
Tejun Heo | 5a0e3ad | 2010-03-24 17:04:11 +0900 | [diff] [blame] | 2 | #include <linux/gfp.h> |
Andreas Gruenbacher | b7fa055 | 2005-06-22 17:16:27 +0000 | [diff] [blame] | 3 | #include <linux/nfs.h> |
| 4 | #include <linux/nfs3.h> |
| 5 | #include <linux/nfs_fs.h> |
Christoph Hellwig | 334a13e | 2005-06-28 20:44:58 -0700 | [diff] [blame] | 6 | #include <linux/posix_acl_xattr.h> |
Andreas Gruenbacher | b7fa055 | 2005-06-22 17:16:27 +0000 | [diff] [blame] | 7 | #include <linux/nfsacl.h> |
| 8 | |
Trond Myklebust | f41f741 | 2008-06-11 17:39:04 -0400 | [diff] [blame] | 9 | #include "internal.h" |
Trond Myklebust | 3fc3edf | 2014-09-25 16:28:53 -0400 | [diff] [blame] | 10 | #include "nfs3_fs.h" |
Trond Myklebust | f41f741 | 2008-06-11 17:39:04 -0400 | [diff] [blame] | 11 | |
Andreas Gruenbacher | b7fa055 | 2005-06-22 17:16:27 +0000 | [diff] [blame] | 12 | #define NFSDBG_FACILITY NFSDBG_PROC |
| 13 | |
Christoph Hellwig | 013cdf1 | 2013-12-20 05:16:53 -0800 | [diff] [blame] | 14 | struct posix_acl *nfs3_get_acl(struct inode *inode, int type) |
Andreas Gruenbacher | b7fa055 | 2005-06-22 17:16:27 +0000 | [diff] [blame] | 15 | { |
| 16 | struct nfs_server *server = NFS_SERVER(inode); |
Andreas Gruenbacher | b7fa055 | 2005-06-22 17:16:27 +0000 | [diff] [blame] | 17 | struct page *pages[NFSACL_MAXPAGES] = { }; |
| 18 | struct nfs3_getaclargs args = { |
| 19 | .fh = NFS_FH(inode), |
| 20 | /* The xdr layer may allocate pages here. */ |
| 21 | .pages = pages, |
| 22 | }; |
| 23 | struct nfs3_getaclres res = { |
Trond Myklebust | 1728017 | 2012-03-11 13:11:00 -0400 | [diff] [blame] | 24 | NULL, |
Andreas Gruenbacher | b7fa055 | 2005-06-22 17:16:27 +0000 | [diff] [blame] | 25 | }; |
Chuck Lever | dead28d | 2006-03-20 13:44:23 -0500 | [diff] [blame] | 26 | struct rpc_message msg = { |
| 27 | .rpc_argp = &args, |
| 28 | .rpc_resp = &res, |
| 29 | }; |
Andreas Gruenbacher | b7fa055 | 2005-06-22 17:16:27 +0000 | [diff] [blame] | 30 | int status, count; |
| 31 | |
| 32 | if (!nfs_server_capable(inode, NFS_CAP_ACLS)) |
| 33 | return ERR_PTR(-EOPNOTSUPP); |
| 34 | |
Andreas Gruenbacher | 5c6a9f7 | 2005-06-22 17:16:27 +0000 | [diff] [blame] | 35 | status = nfs_revalidate_inode(server, inode); |
| 36 | if (status < 0) |
| 37 | return ERR_PTR(status); |
Andreas Gruenbacher | b7fa055 | 2005-06-22 17:16:27 +0000 | [diff] [blame] | 38 | |
Andreas Gruenbacher | 5c6a9f7 | 2005-06-22 17:16:27 +0000 | [diff] [blame] | 39 | /* |
| 40 | * Only get the access acl when explicitly requested: We don't |
| 41 | * need it for access decisions, and only some applications use |
| 42 | * it. Applications which request the access acl first are not |
| 43 | * penalized from this optimization. |
| 44 | */ |
| 45 | if (type == ACL_TYPE_ACCESS) |
| 46 | args.mask |= NFS_ACLCNT|NFS_ACL; |
| 47 | if (S_ISDIR(inode->i_mode)) |
| 48 | args.mask |= NFS_DFACLCNT|NFS_DFACL; |
| 49 | if (args.mask == 0) |
| 50 | return NULL; |
Andreas Gruenbacher | b7fa055 | 2005-06-22 17:16:27 +0000 | [diff] [blame] | 51 | |
| 52 | dprintk("NFS call getacl\n"); |
Chuck Lever | dead28d | 2006-03-20 13:44:23 -0500 | [diff] [blame] | 53 | msg.rpc_proc = &server->client_acl->cl_procinfo[ACLPROC3_GETACL]; |
Trond Myklebust | 6e94d62 | 2010-04-16 16:22:52 -0400 | [diff] [blame] | 54 | res.fattr = nfs_alloc_fattr(); |
| 55 | if (res.fattr == NULL) |
| 56 | return ERR_PTR(-ENOMEM); |
| 57 | |
Chuck Lever | dead28d | 2006-03-20 13:44:23 -0500 | [diff] [blame] | 58 | status = rpc_call_sync(server->client_acl, &msg, 0); |
Andreas Gruenbacher | b7fa055 | 2005-06-22 17:16:27 +0000 | [diff] [blame] | 59 | dprintk("NFS reply getacl: %d\n", status); |
| 60 | |
| 61 | /* pages may have been allocated at the xdr layer. */ |
| 62 | for (count = 0; count < NFSACL_MAXPAGES && args.pages[count]; count++) |
| 63 | __free_page(args.pages[count]); |
| 64 | |
| 65 | switch (status) { |
| 66 | case 0: |
Trond Myklebust | 6e94d62 | 2010-04-16 16:22:52 -0400 | [diff] [blame] | 67 | status = nfs_refresh_inode(inode, res.fattr); |
Andreas Gruenbacher | b7fa055 | 2005-06-22 17:16:27 +0000 | [diff] [blame] | 68 | break; |
| 69 | case -EPFNOSUPPORT: |
| 70 | case -EPROTONOSUPPORT: |
| 71 | dprintk("NFS_V3_ACL extension not supported; disabling\n"); |
| 72 | server->caps &= ~NFS_CAP_ACLS; |
| 73 | case -ENOTSUPP: |
| 74 | status = -EOPNOTSUPP; |
| 75 | default: |
| 76 | goto getout; |
| 77 | } |
| 78 | if ((args.mask & res.mask) != args.mask) { |
| 79 | status = -EIO; |
| 80 | goto getout; |
| 81 | } |
| 82 | |
| 83 | if (res.acl_access != NULL) { |
Noah Massey | 718360c | 2014-01-30 21:31:12 -0500 | [diff] [blame] | 84 | if ((posix_acl_equiv_mode(res.acl_access, NULL) == 0) || |
Christoph Hellwig | 013cdf1 | 2013-12-20 05:16:53 -0800 | [diff] [blame] | 85 | res.acl_access->a_count == 0) { |
Andreas Gruenbacher | b7fa055 | 2005-06-22 17:16:27 +0000 | [diff] [blame] | 86 | posix_acl_release(res.acl_access); |
| 87 | res.acl_access = NULL; |
| 88 | } |
| 89 | } |
| 90 | |
Christoph Hellwig | 013cdf1 | 2013-12-20 05:16:53 -0800 | [diff] [blame] | 91 | if (res.mask & NFS_ACL) |
| 92 | set_cached_acl(inode, ACL_TYPE_ACCESS, res.acl_access); |
| 93 | else |
| 94 | forget_cached_acl(inode, ACL_TYPE_ACCESS); |
Andreas Gruenbacher | b7fa055 | 2005-06-22 17:16:27 +0000 | [diff] [blame] | 95 | |
Christoph Hellwig | 013cdf1 | 2013-12-20 05:16:53 -0800 | [diff] [blame] | 96 | if (res.mask & NFS_DFACL) |
| 97 | set_cached_acl(inode, ACL_TYPE_DEFAULT, res.acl_default); |
| 98 | else |
| 99 | forget_cached_acl(inode, ACL_TYPE_DEFAULT); |
| 100 | |
| 101 | nfs_free_fattr(res.fattr); |
| 102 | if (type == ACL_TYPE_ACCESS) { |
| 103 | posix_acl_release(res.acl_default); |
| 104 | return res.acl_access; |
| 105 | } else { |
| 106 | posix_acl_release(res.acl_access); |
| 107 | return res.acl_default; |
Andreas Gruenbacher | b7fa055 | 2005-06-22 17:16:27 +0000 | [diff] [blame] | 108 | } |
| 109 | |
| 110 | getout: |
| 111 | posix_acl_release(res.acl_access); |
| 112 | posix_acl_release(res.acl_default); |
Trond Myklebust | 6e94d62 | 2010-04-16 16:22:52 -0400 | [diff] [blame] | 113 | nfs_free_fattr(res.fattr); |
Christoph Hellwig | 013cdf1 | 2013-12-20 05:16:53 -0800 | [diff] [blame] | 114 | return ERR_PTR(status); |
Andreas Gruenbacher | b7fa055 | 2005-06-22 17:16:27 +0000 | [diff] [blame] | 115 | } |
| 116 | |
Trond Myklebust | 8f493b9 | 2014-02-02 14:36:42 -0500 | [diff] [blame] | 117 | static int __nfs3_proc_setacls(struct inode *inode, struct posix_acl *acl, |
Christoph Hellwig | 013cdf1 | 2013-12-20 05:16:53 -0800 | [diff] [blame] | 118 | struct posix_acl *dfacl) |
Andreas Gruenbacher | b7fa055 | 2005-06-22 17:16:27 +0000 | [diff] [blame] | 119 | { |
| 120 | struct nfs_server *server = NFS_SERVER(inode); |
Trond Myklebust | 6e94d62 | 2010-04-16 16:22:52 -0400 | [diff] [blame] | 121 | struct nfs_fattr *fattr; |
Trond Myklebust | ae46141f | 2009-03-10 20:33:18 -0400 | [diff] [blame] | 122 | struct page *pages[NFSACL_MAXPAGES]; |
Andreas Gruenbacher | b7fa055 | 2005-06-22 17:16:27 +0000 | [diff] [blame] | 123 | struct nfs3_setaclargs args = { |
| 124 | .inode = inode, |
| 125 | .mask = NFS_ACL, |
| 126 | .acl_access = acl, |
| 127 | .pages = pages, |
| 128 | }; |
Chuck Lever | dead28d | 2006-03-20 13:44:23 -0500 | [diff] [blame] | 129 | struct rpc_message msg = { |
| 130 | .rpc_argp = &args, |
| 131 | .rpc_resp = &fattr, |
| 132 | }; |
Trond Myklebust | f87d928f | 2014-08-24 14:46:48 -0400 | [diff] [blame] | 133 | int status = 0; |
| 134 | |
| 135 | if (acl == NULL && (!S_ISDIR(inode->i_mode) || dfacl == NULL)) |
| 136 | goto out; |
Andreas Gruenbacher | b7fa055 | 2005-06-22 17:16:27 +0000 | [diff] [blame] | 137 | |
| 138 | status = -EOPNOTSUPP; |
| 139 | if (!nfs_server_capable(inode, NFS_CAP_ACLS)) |
| 140 | goto out; |
| 141 | |
Chuck Lever | f61f6da | 2011-01-21 03:05:38 +0000 | [diff] [blame] | 142 | /* We are doing this here because XDR marshalling does not |
| 143 | * return any results, it BUGs. */ |
Andreas Gruenbacher | b7fa055 | 2005-06-22 17:16:27 +0000 | [diff] [blame] | 144 | status = -ENOSPC; |
| 145 | if (acl != NULL && acl->a_count > NFS_ACL_MAX_ENTRIES) |
| 146 | goto out; |
| 147 | if (dfacl != NULL && dfacl->a_count > NFS_ACL_MAX_ENTRIES) |
| 148 | goto out; |
| 149 | if (S_ISDIR(inode->i_mode)) { |
| 150 | args.mask |= NFS_DFACL; |
| 151 | args.acl_default = dfacl; |
Trond Myklebust | ae46141f | 2009-03-10 20:33:18 -0400 | [diff] [blame] | 152 | args.len = nfsacl_size(acl, dfacl); |
| 153 | } else |
| 154 | args.len = nfsacl_size(acl, NULL); |
| 155 | |
| 156 | if (args.len > NFS_ACL_INLINE_BUFSIZE) { |
| 157 | unsigned int npages = 1 + ((args.len - 1) >> PAGE_SHIFT); |
| 158 | |
| 159 | status = -ENOMEM; |
| 160 | do { |
| 161 | args.pages[args.npages] = alloc_page(GFP_KERNEL); |
| 162 | if (args.pages[args.npages] == NULL) |
| 163 | goto out_freepages; |
| 164 | args.npages++; |
| 165 | } while (args.npages < npages); |
Andreas Gruenbacher | b7fa055 | 2005-06-22 17:16:27 +0000 | [diff] [blame] | 166 | } |
| 167 | |
| 168 | dprintk("NFS call setacl\n"); |
Trond Myklebust | 6e94d62 | 2010-04-16 16:22:52 -0400 | [diff] [blame] | 169 | status = -ENOMEM; |
| 170 | fattr = nfs_alloc_fattr(); |
| 171 | if (fattr == NULL) |
| 172 | goto out_freepages; |
| 173 | |
Chuck Lever | dead28d | 2006-03-20 13:44:23 -0500 | [diff] [blame] | 174 | msg.rpc_proc = &server->client_acl->cl_procinfo[ACLPROC3_SETACL]; |
Trond Myklebust | 6e94d62 | 2010-04-16 16:22:52 -0400 | [diff] [blame] | 175 | msg.rpc_resp = fattr; |
Chuck Lever | dead28d | 2006-03-20 13:44:23 -0500 | [diff] [blame] | 176 | status = rpc_call_sync(server->client_acl, &msg, 0); |
Trond Myklebust | f41f741 | 2008-06-11 17:39:04 -0400 | [diff] [blame] | 177 | nfs_access_zap_cache(inode); |
| 178 | nfs_zap_acl_cache(inode); |
Andreas Gruenbacher | b7fa055 | 2005-06-22 17:16:27 +0000 | [diff] [blame] | 179 | dprintk("NFS reply setacl: %d\n", status); |
| 180 | |
Andreas Gruenbacher | b7fa055 | 2005-06-22 17:16:27 +0000 | [diff] [blame] | 181 | switch (status) { |
| 182 | case 0: |
Trond Myklebust | 6e94d62 | 2010-04-16 16:22:52 -0400 | [diff] [blame] | 183 | status = nfs_refresh_inode(inode, fattr); |
Christoph Hellwig | 013cdf1 | 2013-12-20 05:16:53 -0800 | [diff] [blame] | 184 | set_cached_acl(inode, ACL_TYPE_ACCESS, acl); |
| 185 | set_cached_acl(inode, ACL_TYPE_DEFAULT, dfacl); |
Andreas Gruenbacher | b7fa055 | 2005-06-22 17:16:27 +0000 | [diff] [blame] | 186 | break; |
| 187 | case -EPFNOSUPPORT: |
| 188 | case -EPROTONOSUPPORT: |
| 189 | dprintk("NFS_V3_ACL SETACL RPC not supported" |
| 190 | "(will not retry)\n"); |
| 191 | server->caps &= ~NFS_CAP_ACLS; |
| 192 | case -ENOTSUPP: |
| 193 | status = -EOPNOTSUPP; |
| 194 | } |
Trond Myklebust | 6e94d62 | 2010-04-16 16:22:52 -0400 | [diff] [blame] | 195 | nfs_free_fattr(fattr); |
Trond Myklebust | ae46141f | 2009-03-10 20:33:18 -0400 | [diff] [blame] | 196 | out_freepages: |
| 197 | while (args.npages != 0) { |
| 198 | args.npages--; |
| 199 | __free_page(args.pages[args.npages]); |
| 200 | } |
Andreas Gruenbacher | b7fa055 | 2005-06-22 17:16:27 +0000 | [diff] [blame] | 201 | out: |
| 202 | return status; |
| 203 | } |
| 204 | |
Trond Myklebust | 8f493b9 | 2014-02-02 14:36:42 -0500 | [diff] [blame] | 205 | int nfs3_proc_setacls(struct inode *inode, struct posix_acl *acl, |
| 206 | struct posix_acl *dfacl) |
| 207 | { |
| 208 | int ret; |
| 209 | ret = __nfs3_proc_setacls(inode, acl, dfacl); |
| 210 | return (ret == -EOPNOTSUPP) ? 0 : ret; |
| 211 | |
| 212 | } |
| 213 | |
Christoph Hellwig | 013cdf1 | 2013-12-20 05:16:53 -0800 | [diff] [blame] | 214 | int nfs3_set_acl(struct inode *inode, struct posix_acl *acl, int type) |
Andreas Gruenbacher | b7fa055 | 2005-06-22 17:16:27 +0000 | [diff] [blame] | 215 | { |
| 216 | struct posix_acl *alloc = NULL, *dfacl = NULL; |
| 217 | int status; |
| 218 | |
| 219 | if (S_ISDIR(inode->i_mode)) { |
| 220 | switch(type) { |
Christoph Hellwig | 013cdf1 | 2013-12-20 05:16:53 -0800 | [diff] [blame] | 221 | case ACL_TYPE_ACCESS: |
| 222 | alloc = dfacl = get_acl(inode, ACL_TYPE_DEFAULT); |
| 223 | if (IS_ERR(alloc)) |
| 224 | goto fail; |
| 225 | break; |
Andreas Gruenbacher | b7fa055 | 2005-06-22 17:16:27 +0000 | [diff] [blame] | 226 | |
Christoph Hellwig | 013cdf1 | 2013-12-20 05:16:53 -0800 | [diff] [blame] | 227 | case ACL_TYPE_DEFAULT: |
| 228 | dfacl = acl; |
| 229 | alloc = acl = get_acl(inode, ACL_TYPE_ACCESS); |
| 230 | if (IS_ERR(alloc)) |
| 231 | goto fail; |
| 232 | break; |
Andreas Gruenbacher | b7fa055 | 2005-06-22 17:16:27 +0000 | [diff] [blame] | 233 | } |
Christoph Hellwig | 013cdf1 | 2013-12-20 05:16:53 -0800 | [diff] [blame] | 234 | } |
Andreas Gruenbacher | b7fa055 | 2005-06-22 17:16:27 +0000 | [diff] [blame] | 235 | |
| 236 | if (acl == NULL) { |
| 237 | alloc = acl = posix_acl_from_mode(inode->i_mode, GFP_KERNEL); |
| 238 | if (IS_ERR(alloc)) |
| 239 | goto fail; |
| 240 | } |
Trond Myklebust | 8f493b9 | 2014-02-02 14:36:42 -0500 | [diff] [blame] | 241 | status = __nfs3_proc_setacls(inode, acl, dfacl); |
Andreas Gruenbacher | b7fa055 | 2005-06-22 17:16:27 +0000 | [diff] [blame] | 242 | posix_acl_release(alloc); |
| 243 | return status; |
| 244 | |
| 245 | fail: |
| 246 | return PTR_ERR(alloc); |
| 247 | } |
Andreas Gruenbacher | 055ffbe | 2005-06-22 17:16:27 +0000 | [diff] [blame] | 248 | |
Christoph Hellwig | 013cdf1 | 2013-12-20 05:16:53 -0800 | [diff] [blame] | 249 | const struct xattr_handler *nfs3_xattr_handlers[] = { |
| 250 | &posix_acl_access_xattr_handler, |
| 251 | &posix_acl_default_xattr_handler, |
| 252 | NULL, |
| 253 | }; |
Christoph Hellwig | 74adf83 | 2014-06-18 11:07:03 +0200 | [diff] [blame] | 254 | |
| 255 | static int |
| 256 | nfs3_list_one_acl(struct inode *inode, int type, const char *name, void *data, |
| 257 | size_t size, ssize_t *result) |
| 258 | { |
| 259 | struct posix_acl *acl; |
| 260 | char *p = data + *result; |
| 261 | |
| 262 | acl = get_acl(inode, type); |
Andrey Utkin | 7a9e75a | 2014-07-26 14:58:01 +0300 | [diff] [blame] | 263 | if (IS_ERR_OR_NULL(acl)) |
Christoph Hellwig | 74adf83 | 2014-06-18 11:07:03 +0200 | [diff] [blame] | 264 | return 0; |
| 265 | |
| 266 | posix_acl_release(acl); |
| 267 | |
| 268 | *result += strlen(name); |
| 269 | *result += 1; |
| 270 | if (!size) |
| 271 | return 0; |
| 272 | if (*result > size) |
| 273 | return -ERANGE; |
| 274 | |
| 275 | strcpy(p, name); |
| 276 | return 0; |
| 277 | } |
| 278 | |
| 279 | ssize_t |
| 280 | nfs3_listxattr(struct dentry *dentry, char *data, size_t size) |
| 281 | { |
| 282 | struct inode *inode = dentry->d_inode; |
| 283 | ssize_t result = 0; |
| 284 | int error; |
| 285 | |
| 286 | error = nfs3_list_one_acl(inode, ACL_TYPE_ACCESS, |
| 287 | POSIX_ACL_XATTR_ACCESS, data, size, &result); |
| 288 | if (error) |
| 289 | return error; |
| 290 | |
| 291 | error = nfs3_list_one_acl(inode, ACL_TYPE_DEFAULT, |
| 292 | POSIX_ACL_XATTR_DEFAULT, data, size, &result); |
| 293 | if (error) |
| 294 | return error; |
| 295 | return result; |
| 296 | } |