Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1 | #include <linux/types.h> |
| 2 | #include <linux/sched.h> |
| 3 | #include <linux/module.h> |
| 4 | #include <linux/sunrpc/types.h> |
| 5 | #include <linux/sunrpc/xdr.h> |
| 6 | #include <linux/sunrpc/svcsock.h> |
| 7 | #include <linux/sunrpc/svcauth.h> |
Andy Adamson | c417058 | 2007-07-17 04:04:42 -0700 | [diff] [blame] | 8 | #include <linux/sunrpc/gss_api.h> |
Jeff Layton | 5976687 | 2013-02-04 12:50:00 -0500 | [diff] [blame] | 9 | #include <linux/sunrpc/addr.h> |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 10 | #include <linux/err.h> |
| 11 | #include <linux/seq_file.h> |
| 12 | #include <linux/hash.h> |
Paulo Marques | 543537b | 2005-06-23 00:09:02 -0700 | [diff] [blame] | 13 | #include <linux/string.h> |
Tejun Heo | 5a0e3ad | 2010-03-24 17:04:11 +0900 | [diff] [blame] | 14 | #include <linux/slab.h> |
Greg Banks | 7b2b1fe | 2006-10-04 02:15:50 -0700 | [diff] [blame] | 15 | #include <net/sock.h> |
Aurélien Charbon | f15364b | 2008-01-18 15:50:56 +0100 | [diff] [blame] | 16 | #include <net/ipv6.h> |
| 17 | #include <linux/kernel.h> |
Eric W. Biederman | ae2975b | 2011-11-14 15:56:38 -0800 | [diff] [blame] | 18 | #include <linux/user_namespace.h> |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 19 | #define RPCDBG_FACILITY RPCDBG_AUTH |
| 20 | |
| 21 | |
Pavel Emelyanov | 90d51b0 | 2010-09-27 14:02:29 +0400 | [diff] [blame] | 22 | #include "netns.h" |
| 23 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 24 | /* |
| 25 | * AUTHUNIX and AUTHNULL credentials are both handled here. |
| 26 | * AUTHNULL is treated just like AUTHUNIX except that the uid/gid |
| 27 | * are always nobody (-2). i.e. we do the same IP address checks for |
| 28 | * AUTHNULL as for AUTHUNIX, and that is done here. |
| 29 | */ |
| 30 | |
| 31 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 32 | struct unix_domain { |
| 33 | struct auth_domain h; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 34 | /* other stuff later */ |
| 35 | }; |
| 36 | |
H Hartley Sweeten | 13e0e95 | 2011-06-20 18:19:12 -0700 | [diff] [blame] | 37 | extern struct auth_ops svcauth_null; |
NeilBrown | efc36aa | 2006-03-27 01:14:59 -0800 | [diff] [blame] | 38 | extern struct auth_ops svcauth_unix; |
| 39 | |
J. Bruce Fields | 8b3e07a | 2011-03-07 22:50:47 -0500 | [diff] [blame] | 40 | static void svcauth_unix_domain_release(struct auth_domain *dom) |
| 41 | { |
| 42 | struct unix_domain *ud = container_of(dom, struct unix_domain, h); |
| 43 | |
| 44 | kfree(dom->name); |
| 45 | kfree(ud); |
| 46 | } |
| 47 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 48 | struct auth_domain *unix_domain_find(char *name) |
| 49 | { |
NeilBrown | efc36aa | 2006-03-27 01:14:59 -0800 | [diff] [blame] | 50 | struct auth_domain *rv; |
| 51 | struct unix_domain *new = NULL; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 52 | |
NeilBrown | efc36aa | 2006-03-27 01:14:59 -0800 | [diff] [blame] | 53 | rv = auth_domain_lookup(name, NULL); |
| 54 | while(1) { |
NeilBrown | ad1b522 | 2006-03-27 01:15:11 -0800 | [diff] [blame] | 55 | if (rv) { |
| 56 | if (new && rv != &new->h) |
J. Bruce Fields | 352b5d1 | 2011-03-09 22:40:30 -0500 | [diff] [blame] | 57 | svcauth_unix_domain_release(&new->h); |
NeilBrown | ad1b522 | 2006-03-27 01:15:11 -0800 | [diff] [blame] | 58 | |
| 59 | if (rv->flavour != &svcauth_unix) { |
| 60 | auth_domain_put(rv); |
| 61 | return NULL; |
| 62 | } |
NeilBrown | efc36aa | 2006-03-27 01:14:59 -0800 | [diff] [blame] | 63 | return rv; |
| 64 | } |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 65 | |
NeilBrown | efc36aa | 2006-03-27 01:14:59 -0800 | [diff] [blame] | 66 | new = kmalloc(sizeof(*new), GFP_KERNEL); |
| 67 | if (new == NULL) |
| 68 | return NULL; |
| 69 | kref_init(&new->h.ref); |
| 70 | new->h.name = kstrdup(name, GFP_KERNEL); |
NeilBrown | dd08d6e | 2006-12-13 00:35:44 -0800 | [diff] [blame] | 71 | if (new->h.name == NULL) { |
| 72 | kfree(new); |
| 73 | return NULL; |
| 74 | } |
NeilBrown | efc36aa | 2006-03-27 01:14:59 -0800 | [diff] [blame] | 75 | new->h.flavour = &svcauth_unix; |
NeilBrown | efc36aa | 2006-03-27 01:14:59 -0800 | [diff] [blame] | 76 | rv = auth_domain_lookup(name, &new->h); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 77 | } |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 78 | } |
Trond Myklebust | 24c3767 | 2008-12-23 16:30:12 -0500 | [diff] [blame] | 79 | EXPORT_SYMBOL_GPL(unix_domain_find); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 80 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 81 | |
| 82 | /************************************************** |
| 83 | * cache for IP address to unix_domain |
| 84 | * as needed by AUTH_UNIX |
| 85 | */ |
| 86 | #define IP_HASHBITS 8 |
| 87 | #define IP_HASHMAX (1<<IP_HASHBITS) |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 88 | |
| 89 | struct ip_map { |
| 90 | struct cache_head h; |
| 91 | char m_class[8]; /* e.g. "nfsd" */ |
Aurélien Charbon | f15364b | 2008-01-18 15:50:56 +0100 | [diff] [blame] | 92 | struct in6_addr m_addr; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 93 | struct unix_domain *m_client; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 94 | }; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 95 | |
NeilBrown | baab935 | 2006-03-27 01:15:09 -0800 | [diff] [blame] | 96 | static void ip_map_put(struct kref *kref) |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 97 | { |
NeilBrown | baab935 | 2006-03-27 01:15:09 -0800 | [diff] [blame] | 98 | struct cache_head *item = container_of(kref, struct cache_head, ref); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 99 | struct ip_map *im = container_of(item, struct ip_map,h); |
NeilBrown | baab935 | 2006-03-27 01:15:09 -0800 | [diff] [blame] | 100 | |
| 101 | if (test_bit(CACHE_VALID, &item->flags) && |
| 102 | !test_bit(CACHE_NEGATIVE, &item->flags)) |
| 103 | auth_domain_put(&im->m_client->h); |
| 104 | kfree(im); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 105 | } |
| 106 | |
Eric Dumazet | ddbe503 | 2012-07-18 08:11:12 +0000 | [diff] [blame] | 107 | static inline int hash_ip6(const struct in6_addr *ip) |
NeilBrown | 1f1e030 | 2006-01-06 00:09:49 -0800 | [diff] [blame] | 108 | { |
Eric Dumazet | ddbe503 | 2012-07-18 08:11:12 +0000 | [diff] [blame] | 109 | return hash_32(ipv6_addr_hash(ip), IP_HASHBITS); |
Aurélien Charbon | f15364b | 2008-01-18 15:50:56 +0100 | [diff] [blame] | 110 | } |
NeilBrown | 1a9917c | 2006-03-27 01:15:02 -0800 | [diff] [blame] | 111 | static int ip_map_match(struct cache_head *corig, struct cache_head *cnew) |
| 112 | { |
| 113 | struct ip_map *orig = container_of(corig, struct ip_map, h); |
| 114 | struct ip_map *new = container_of(cnew, struct ip_map, h); |
Joe Perches | f64f9e7 | 2009-11-29 16:55:45 -0800 | [diff] [blame] | 115 | return strcmp(orig->m_class, new->m_class) == 0 && |
| 116 | ipv6_addr_equal(&orig->m_addr, &new->m_addr); |
NeilBrown | 1a9917c | 2006-03-27 01:15:02 -0800 | [diff] [blame] | 117 | } |
| 118 | static void ip_map_init(struct cache_head *cnew, struct cache_head *citem) |
| 119 | { |
| 120 | struct ip_map *new = container_of(cnew, struct ip_map, h); |
| 121 | struct ip_map *item = container_of(citem, struct ip_map, h); |
NeilBrown | 1f1e030 | 2006-01-06 00:09:49 -0800 | [diff] [blame] | 122 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 123 | strcpy(new->m_class, item->m_class); |
Alexey Dobriyan | 4e3fd7a | 2011-11-21 03:39:03 +0000 | [diff] [blame] | 124 | new->m_addr = item->m_addr; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 125 | } |
NeilBrown | 1a9917c | 2006-03-27 01:15:02 -0800 | [diff] [blame] | 126 | static void update(struct cache_head *cnew, struct cache_head *citem) |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 127 | { |
NeilBrown | 1a9917c | 2006-03-27 01:15:02 -0800 | [diff] [blame] | 128 | struct ip_map *new = container_of(cnew, struct ip_map, h); |
| 129 | struct ip_map *item = container_of(citem, struct ip_map, h); |
| 130 | |
NeilBrown | efc36aa | 2006-03-27 01:14:59 -0800 | [diff] [blame] | 131 | kref_get(&item->m_client->h.ref); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 132 | new->m_client = item->m_client; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 133 | } |
NeilBrown | 1a9917c | 2006-03-27 01:15:02 -0800 | [diff] [blame] | 134 | static struct cache_head *ip_map_alloc(void) |
| 135 | { |
| 136 | struct ip_map *i = kmalloc(sizeof(*i), GFP_KERNEL); |
| 137 | if (i) |
| 138 | return &i->h; |
| 139 | else |
| 140 | return NULL; |
| 141 | } |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 142 | |
| 143 | static void ip_map_request(struct cache_detail *cd, |
| 144 | struct cache_head *h, |
| 145 | char **bpp, int *blen) |
| 146 | { |
Aurélien Charbon | f15364b | 2008-01-18 15:50:56 +0100 | [diff] [blame] | 147 | char text_addr[40]; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 148 | struct ip_map *im = container_of(h, struct ip_map, h); |
YOSHIFUJI Hideaki | cca5172 | 2007-02-09 15:38:13 -0800 | [diff] [blame] | 149 | |
Aurélien Charbon | f15364b | 2008-01-18 15:50:56 +0100 | [diff] [blame] | 150 | if (ipv6_addr_v4mapped(&(im->m_addr))) { |
Harvey Harrison | 21454aa | 2008-10-31 00:54:56 -0700 | [diff] [blame] | 151 | snprintf(text_addr, 20, "%pI4", &im->m_addr.s6_addr32[3]); |
Aurélien Charbon | f15364b | 2008-01-18 15:50:56 +0100 | [diff] [blame] | 152 | } else { |
Harvey Harrison | 5b095d989 | 2008-10-29 12:52:50 -0700 | [diff] [blame] | 153 | snprintf(text_addr, 40, "%pI6", &im->m_addr); |
Aurélien Charbon | f15364b | 2008-01-18 15:50:56 +0100 | [diff] [blame] | 154 | } |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 155 | qword_add(bpp, blen, im->m_class); |
| 156 | qword_add(bpp, blen, text_addr); |
| 157 | (*bpp)[-1] = '\n'; |
| 158 | } |
| 159 | |
Pavel Emelyanov | bf18ab3 | 2010-09-27 13:57:36 +0400 | [diff] [blame] | 160 | static struct ip_map *__ip_map_lookup(struct cache_detail *cd, char *class, struct in6_addr *addr); |
| 161 | static int __ip_map_update(struct cache_detail *cd, struct ip_map *ipm, struct unix_domain *udom, time_t expiry); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 162 | |
| 163 | static int ip_map_parse(struct cache_detail *cd, |
| 164 | char *mesg, int mlen) |
| 165 | { |
| 166 | /* class ipaddress [domainname] */ |
| 167 | /* should be safe just to use the start of the input buffer |
| 168 | * for scratch: */ |
| 169 | char *buf = mesg; |
| 170 | int len; |
NeilBrown | 1a9917c | 2006-03-27 01:15:02 -0800 | [diff] [blame] | 171 | char class[8]; |
Chuck Lever | 0739605 | 2010-01-26 14:03:47 -0500 | [diff] [blame] | 172 | union { |
| 173 | struct sockaddr sa; |
| 174 | struct sockaddr_in s4; |
| 175 | struct sockaddr_in6 s6; |
| 176 | } address; |
| 177 | struct sockaddr_in6 sin6; |
NeilBrown | 1a9917c | 2006-03-27 01:15:02 -0800 | [diff] [blame] | 178 | int err; |
| 179 | |
| 180 | struct ip_map *ipmp; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 181 | struct auth_domain *dom; |
| 182 | time_t expiry; |
| 183 | |
| 184 | if (mesg[mlen-1] != '\n') |
| 185 | return -EINVAL; |
| 186 | mesg[mlen-1] = 0; |
| 187 | |
| 188 | /* class */ |
NeilBrown | 1a9917c | 2006-03-27 01:15:02 -0800 | [diff] [blame] | 189 | len = qword_get(&mesg, class, sizeof(class)); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 190 | if (len <= 0) return -EINVAL; |
| 191 | |
| 192 | /* ip address */ |
| 193 | len = qword_get(&mesg, buf, mlen); |
| 194 | if (len <= 0) return -EINVAL; |
| 195 | |
Stanislav Kinsbursky | d05cc1040 | 2012-01-19 21:42:45 +0400 | [diff] [blame] | 196 | if (rpc_pton(cd->net, buf, len, &address.sa, sizeof(address)) == 0) |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 197 | return -EINVAL; |
Chuck Lever | 0739605 | 2010-01-26 14:03:47 -0500 | [diff] [blame] | 198 | switch (address.sa.sa_family) { |
| 199 | case AF_INET: |
| 200 | /* Form a mapped IPv4 address in sin6 */ |
Chuck Lever | 0739605 | 2010-01-26 14:03:47 -0500 | [diff] [blame] | 201 | sin6.sin6_family = AF_INET6; |
Pavel Emelyanov | 70dc78d | 2010-10-05 20:48:02 +0400 | [diff] [blame] | 202 | ipv6_addr_set_v4mapped(address.s4.sin_addr.s_addr, |
| 203 | &sin6.sin6_addr); |
Chuck Lever | 0739605 | 2010-01-26 14:03:47 -0500 | [diff] [blame] | 204 | break; |
Eric Dumazet | dfd56b8 | 2011-12-10 09:48:31 +0000 | [diff] [blame] | 205 | #if IS_ENABLED(CONFIG_IPV6) |
Chuck Lever | 0739605 | 2010-01-26 14:03:47 -0500 | [diff] [blame] | 206 | case AF_INET6: |
| 207 | memcpy(&sin6, &address.s6, sizeof(sin6)); |
| 208 | break; |
| 209 | #endif |
| 210 | default: |
| 211 | return -EINVAL; |
| 212 | } |
YOSHIFUJI Hideaki | cca5172 | 2007-02-09 15:38:13 -0800 | [diff] [blame] | 213 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 214 | expiry = get_expiry(&mesg); |
| 215 | if (expiry ==0) |
| 216 | return -EINVAL; |
| 217 | |
| 218 | /* domainname, or empty for NEGATIVE */ |
| 219 | len = qword_get(&mesg, buf, mlen); |
| 220 | if (len < 0) return -EINVAL; |
| 221 | |
| 222 | if (len) { |
| 223 | dom = unix_domain_find(buf); |
| 224 | if (dom == NULL) |
| 225 | return -ENOENT; |
| 226 | } else |
| 227 | dom = NULL; |
| 228 | |
Chuck Lever | 0739605 | 2010-01-26 14:03:47 -0500 | [diff] [blame] | 229 | /* IPv6 scope IDs are ignored for now */ |
Pavel Emelyanov | bf18ab3 | 2010-09-27 13:57:36 +0400 | [diff] [blame] | 230 | ipmp = __ip_map_lookup(cd, class, &sin6.sin6_addr); |
NeilBrown | 1a9917c | 2006-03-27 01:15:02 -0800 | [diff] [blame] | 231 | if (ipmp) { |
Pavel Emelyanov | bf18ab3 | 2010-09-27 13:57:36 +0400 | [diff] [blame] | 232 | err = __ip_map_update(cd, ipmp, |
NeilBrown | 1a9917c | 2006-03-27 01:15:02 -0800 | [diff] [blame] | 233 | container_of(dom, struct unix_domain, h), |
| 234 | expiry); |
| 235 | } else |
| 236 | err = -ENOMEM; |
| 237 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 238 | if (dom) |
| 239 | auth_domain_put(dom); |
NeilBrown | 1a9917c | 2006-03-27 01:15:02 -0800 | [diff] [blame] | 240 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 241 | cache_flush(); |
NeilBrown | 1a9917c | 2006-03-27 01:15:02 -0800 | [diff] [blame] | 242 | return err; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 243 | } |
| 244 | |
| 245 | static int ip_map_show(struct seq_file *m, |
| 246 | struct cache_detail *cd, |
| 247 | struct cache_head *h) |
| 248 | { |
| 249 | struct ip_map *im; |
Aurélien Charbon | f15364b | 2008-01-18 15:50:56 +0100 | [diff] [blame] | 250 | struct in6_addr addr; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 251 | char *dom = "-no-domain-"; |
| 252 | |
| 253 | if (h == NULL) { |
| 254 | seq_puts(m, "#class IP domain\n"); |
| 255 | return 0; |
| 256 | } |
| 257 | im = container_of(h, struct ip_map, h); |
| 258 | /* class addr domain */ |
Alexey Dobriyan | 4e3fd7a | 2011-11-21 03:39:03 +0000 | [diff] [blame] | 259 | addr = im->m_addr; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 260 | |
YOSHIFUJI Hideaki | cca5172 | 2007-02-09 15:38:13 -0800 | [diff] [blame] | 261 | if (test_bit(CACHE_VALID, &h->flags) && |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 262 | !test_bit(CACHE_NEGATIVE, &h->flags)) |
| 263 | dom = im->m_client->h.name; |
| 264 | |
Aurélien Charbon | f15364b | 2008-01-18 15:50:56 +0100 | [diff] [blame] | 265 | if (ipv6_addr_v4mapped(&addr)) { |
Harvey Harrison | 21454aa | 2008-10-31 00:54:56 -0700 | [diff] [blame] | 266 | seq_printf(m, "%s %pI4 %s\n", |
| 267 | im->m_class, &addr.s6_addr32[3], dom); |
Aurélien Charbon | f15364b | 2008-01-18 15:50:56 +0100 | [diff] [blame] | 268 | } else { |
Harvey Harrison | 5b095d989 | 2008-10-29 12:52:50 -0700 | [diff] [blame] | 269 | seq_printf(m, "%s %pI6 %s\n", im->m_class, &addr, dom); |
Aurélien Charbon | f15364b | 2008-01-18 15:50:56 +0100 | [diff] [blame] | 270 | } |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 271 | return 0; |
| 272 | } |
YOSHIFUJI Hideaki | cca5172 | 2007-02-09 15:38:13 -0800 | [diff] [blame] | 273 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 274 | |
Pavel Emelyanov | bf18ab3 | 2010-09-27 13:57:36 +0400 | [diff] [blame] | 275 | static struct ip_map *__ip_map_lookup(struct cache_detail *cd, char *class, |
| 276 | struct in6_addr *addr) |
NeilBrown | 1a9917c | 2006-03-27 01:15:02 -0800 | [diff] [blame] | 277 | { |
| 278 | struct ip_map ip; |
| 279 | struct cache_head *ch; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 280 | |
NeilBrown | 1a9917c | 2006-03-27 01:15:02 -0800 | [diff] [blame] | 281 | strcpy(ip.m_class, class); |
Alexey Dobriyan | 4e3fd7a | 2011-11-21 03:39:03 +0000 | [diff] [blame] | 282 | ip.m_addr = *addr; |
Pavel Emelyanov | bf18ab3 | 2010-09-27 13:57:36 +0400 | [diff] [blame] | 283 | ch = sunrpc_cache_lookup(cd, &ip.h, |
NeilBrown | 1a9917c | 2006-03-27 01:15:02 -0800 | [diff] [blame] | 284 | hash_str(class, IP_HASHBITS) ^ |
Eric Dumazet | ddbe503 | 2012-07-18 08:11:12 +0000 | [diff] [blame] | 285 | hash_ip6(addr)); |
NeilBrown | 1a9917c | 2006-03-27 01:15:02 -0800 | [diff] [blame] | 286 | |
| 287 | if (ch) |
| 288 | return container_of(ch, struct ip_map, h); |
| 289 | else |
| 290 | return NULL; |
| 291 | } |
| 292 | |
Pavel Emelyanov | 352114f | 2010-09-27 13:59:48 +0400 | [diff] [blame] | 293 | static inline struct ip_map *ip_map_lookup(struct net *net, char *class, |
| 294 | struct in6_addr *addr) |
Pavel Emelyanov | bf18ab3 | 2010-09-27 13:57:36 +0400 | [diff] [blame] | 295 | { |
Pavel Emelyanov | 90d51b0 | 2010-09-27 14:02:29 +0400 | [diff] [blame] | 296 | struct sunrpc_net *sn; |
| 297 | |
| 298 | sn = net_generic(net, sunrpc_net_id); |
| 299 | return __ip_map_lookup(sn->ip_map_cache, class, addr); |
Pavel Emelyanov | bf18ab3 | 2010-09-27 13:57:36 +0400 | [diff] [blame] | 300 | } |
| 301 | |
| 302 | static int __ip_map_update(struct cache_detail *cd, struct ip_map *ipm, |
| 303 | struct unix_domain *udom, time_t expiry) |
NeilBrown | 1a9917c | 2006-03-27 01:15:02 -0800 | [diff] [blame] | 304 | { |
| 305 | struct ip_map ip; |
| 306 | struct cache_head *ch; |
| 307 | |
| 308 | ip.m_client = udom; |
| 309 | ip.h.flags = 0; |
| 310 | if (!udom) |
| 311 | set_bit(CACHE_NEGATIVE, &ip.h.flags); |
NeilBrown | 1a9917c | 2006-03-27 01:15:02 -0800 | [diff] [blame] | 312 | ip.h.expiry_time = expiry; |
Pavel Emelyanov | bf18ab3 | 2010-09-27 13:57:36 +0400 | [diff] [blame] | 313 | ch = sunrpc_cache_update(cd, &ip.h, &ipm->h, |
NeilBrown | 1a9917c | 2006-03-27 01:15:02 -0800 | [diff] [blame] | 314 | hash_str(ipm->m_class, IP_HASHBITS) ^ |
Eric Dumazet | ddbe503 | 2012-07-18 08:11:12 +0000 | [diff] [blame] | 315 | hash_ip6(&ipm->m_addr)); |
NeilBrown | 1a9917c | 2006-03-27 01:15:02 -0800 | [diff] [blame] | 316 | if (!ch) |
| 317 | return -ENOMEM; |
Pavel Emelyanov | bf18ab3 | 2010-09-27 13:57:36 +0400 | [diff] [blame] | 318 | cache_put(ch, cd); |
NeilBrown | 1a9917c | 2006-03-27 01:15:02 -0800 | [diff] [blame] | 319 | return 0; |
| 320 | } |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 321 | |
Pavel Emelyanov | 352114f | 2010-09-27 13:59:48 +0400 | [diff] [blame] | 322 | static inline int ip_map_update(struct net *net, struct ip_map *ipm, |
| 323 | struct unix_domain *udom, time_t expiry) |
Pavel Emelyanov | bf18ab3 | 2010-09-27 13:57:36 +0400 | [diff] [blame] | 324 | { |
Pavel Emelyanov | 90d51b0 | 2010-09-27 14:02:29 +0400 | [diff] [blame] | 325 | struct sunrpc_net *sn; |
| 326 | |
| 327 | sn = net_generic(net, sunrpc_net_id); |
| 328 | return __ip_map_update(sn->ip_map_cache, ipm, udom, expiry); |
Pavel Emelyanov | bf18ab3 | 2010-09-27 13:57:36 +0400 | [diff] [blame] | 329 | } |
| 330 | |
Stanislav Kinsbursky | e5f06f7 | 2012-04-11 15:13:28 +0400 | [diff] [blame] | 331 | void svcauth_unix_purge(struct net *net) |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 332 | { |
Stanislav Kinsbursky | e5f06f7 | 2012-04-11 15:13:28 +0400 | [diff] [blame] | 333 | struct sunrpc_net *sn; |
Pavel Emelyanov | 90d51b0 | 2010-09-27 14:02:29 +0400 | [diff] [blame] | 334 | |
Stanislav Kinsbursky | e5f06f7 | 2012-04-11 15:13:28 +0400 | [diff] [blame] | 335 | sn = net_generic(net, sunrpc_net_id); |
| 336 | cache_purge(sn->ip_map_cache); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 337 | } |
Trond Myklebust | 24c3767 | 2008-12-23 16:30:12 -0500 | [diff] [blame] | 338 | EXPORT_SYMBOL_GPL(svcauth_unix_purge); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 339 | |
Greg Banks | 7b2b1fe | 2006-10-04 02:15:50 -0700 | [diff] [blame] | 340 | static inline struct ip_map * |
Pavel Emelyanov | 3be4479 | 2010-09-27 13:59:13 +0400 | [diff] [blame] | 341 | ip_map_cached_get(struct svc_xprt *xprt) |
Greg Banks | 7b2b1fe | 2006-10-04 02:15:50 -0700 | [diff] [blame] | 342 | { |
Tom Tucker | def13d7 | 2007-12-30 21:08:08 -0600 | [diff] [blame] | 343 | struct ip_map *ipm = NULL; |
Pavel Emelyanov | 90d51b0 | 2010-09-27 14:02:29 +0400 | [diff] [blame] | 344 | struct sunrpc_net *sn; |
Tom Tucker | def13d7 | 2007-12-30 21:08:08 -0600 | [diff] [blame] | 345 | |
| 346 | if (test_bit(XPT_CACHE_AUTH, &xprt->xpt_flags)) { |
| 347 | spin_lock(&xprt->xpt_lock); |
| 348 | ipm = xprt->xpt_auth_cache; |
| 349 | if (ipm != NULL) { |
NeilBrown | 7715cde | 2013-06-13 12:53:42 +1000 | [diff] [blame] | 350 | sn = net_generic(xprt->xpt_net, sunrpc_net_id); |
| 351 | if (cache_is_expired(sn->ip_map_cache, &ipm->h)) { |
Tom Tucker | def13d7 | 2007-12-30 21:08:08 -0600 | [diff] [blame] | 352 | /* |
| 353 | * The entry has been invalidated since it was |
| 354 | * remembered, e.g. by a second mount from the |
| 355 | * same IP address. |
| 356 | */ |
| 357 | xprt->xpt_auth_cache = NULL; |
| 358 | spin_unlock(&xprt->xpt_lock); |
Pavel Emelyanov | 90d51b0 | 2010-09-27 14:02:29 +0400 | [diff] [blame] | 359 | cache_put(&ipm->h, sn->ip_map_cache); |
Tom Tucker | def13d7 | 2007-12-30 21:08:08 -0600 | [diff] [blame] | 360 | return NULL; |
| 361 | } |
| 362 | cache_get(&ipm->h); |
Greg Banks | 7b2b1fe | 2006-10-04 02:15:50 -0700 | [diff] [blame] | 363 | } |
Tom Tucker | def13d7 | 2007-12-30 21:08:08 -0600 | [diff] [blame] | 364 | spin_unlock(&xprt->xpt_lock); |
Greg Banks | 7b2b1fe | 2006-10-04 02:15:50 -0700 | [diff] [blame] | 365 | } |
| 366 | return ipm; |
| 367 | } |
| 368 | |
| 369 | static inline void |
Pavel Emelyanov | 3be4479 | 2010-09-27 13:59:13 +0400 | [diff] [blame] | 370 | ip_map_cached_put(struct svc_xprt *xprt, struct ip_map *ipm) |
Greg Banks | 7b2b1fe | 2006-10-04 02:15:50 -0700 | [diff] [blame] | 371 | { |
Tom Tucker | def13d7 | 2007-12-30 21:08:08 -0600 | [diff] [blame] | 372 | if (test_bit(XPT_CACHE_AUTH, &xprt->xpt_flags)) { |
| 373 | spin_lock(&xprt->xpt_lock); |
| 374 | if (xprt->xpt_auth_cache == NULL) { |
| 375 | /* newly cached, keep the reference */ |
| 376 | xprt->xpt_auth_cache = ipm; |
| 377 | ipm = NULL; |
| 378 | } |
| 379 | spin_unlock(&xprt->xpt_lock); |
NeilBrown | 30f3dee | 2007-04-16 22:53:25 -0700 | [diff] [blame] | 380 | } |
Pavel Emelyanov | 90d51b0 | 2010-09-27 14:02:29 +0400 | [diff] [blame] | 381 | if (ipm) { |
| 382 | struct sunrpc_net *sn; |
| 383 | |
| 384 | sn = net_generic(xprt->xpt_net, sunrpc_net_id); |
| 385 | cache_put(&ipm->h, sn->ip_map_cache); |
| 386 | } |
Greg Banks | 7b2b1fe | 2006-10-04 02:15:50 -0700 | [diff] [blame] | 387 | } |
| 388 | |
| 389 | void |
Pavel Emelyanov | e3bfca0 | 2010-09-27 13:58:42 +0400 | [diff] [blame] | 390 | svcauth_unix_info_release(struct svc_xprt *xpt) |
Greg Banks | 7b2b1fe | 2006-10-04 02:15:50 -0700 | [diff] [blame] | 391 | { |
Pavel Emelyanov | e3bfca0 | 2010-09-27 13:58:42 +0400 | [diff] [blame] | 392 | struct ip_map *ipm; |
| 393 | |
| 394 | ipm = xpt->xpt_auth_cache; |
Pavel Emelyanov | 90d51b0 | 2010-09-27 14:02:29 +0400 | [diff] [blame] | 395 | if (ipm != NULL) { |
| 396 | struct sunrpc_net *sn; |
| 397 | |
| 398 | sn = net_generic(xpt->xpt_net, sunrpc_net_id); |
| 399 | cache_put(&ipm->h, sn->ip_map_cache); |
| 400 | } |
Greg Banks | 7b2b1fe | 2006-10-04 02:15:50 -0700 | [diff] [blame] | 401 | } |
| 402 | |
NeilBrown | 3fc605a | 2007-02-14 00:33:13 -0800 | [diff] [blame] | 403 | /**************************************************************************** |
| 404 | * auth.unix.gid cache |
| 405 | * simple cache to map a UID to a list of GIDs |
Kinglong Mee | 5786461 | 2017-02-07 21:48:11 +0800 | [diff] [blame] | 406 | * because AUTH_UNIX aka AUTH_SYS has a max of UNX_NGROUPS |
NeilBrown | 3fc605a | 2007-02-14 00:33:13 -0800 | [diff] [blame] | 407 | */ |
| 408 | #define GID_HASHBITS 8 |
| 409 | #define GID_HASHMAX (1<<GID_HASHBITS) |
NeilBrown | 3fc605a | 2007-02-14 00:33:13 -0800 | [diff] [blame] | 410 | |
| 411 | struct unix_gid { |
| 412 | struct cache_head h; |
Eric W. Biederman | 7eaf040 | 2013-02-01 16:31:17 -0800 | [diff] [blame] | 413 | kuid_t uid; |
NeilBrown | 3fc605a | 2007-02-14 00:33:13 -0800 | [diff] [blame] | 414 | struct group_info *gi; |
| 415 | }; |
NeilBrown | 3fc605a | 2007-02-14 00:33:13 -0800 | [diff] [blame] | 416 | |
Eric W. Biederman | 9e469e3 | 2013-02-02 01:57:30 -0800 | [diff] [blame] | 417 | static int unix_gid_hash(kuid_t uid) |
| 418 | { |
| 419 | return hash_long(from_kuid(&init_user_ns, uid), GID_HASHBITS); |
| 420 | } |
| 421 | |
NeilBrown | 3fc605a | 2007-02-14 00:33:13 -0800 | [diff] [blame] | 422 | static void unix_gid_put(struct kref *kref) |
| 423 | { |
| 424 | struct cache_head *item = container_of(kref, struct cache_head, ref); |
| 425 | struct unix_gid *ug = container_of(item, struct unix_gid, h); |
| 426 | if (test_bit(CACHE_VALID, &item->flags) && |
| 427 | !test_bit(CACHE_NEGATIVE, &item->flags)) |
| 428 | put_group_info(ug->gi); |
| 429 | kfree(ug); |
| 430 | } |
| 431 | |
| 432 | static int unix_gid_match(struct cache_head *corig, struct cache_head *cnew) |
| 433 | { |
| 434 | struct unix_gid *orig = container_of(corig, struct unix_gid, h); |
| 435 | struct unix_gid *new = container_of(cnew, struct unix_gid, h); |
Eric W. Biederman | 0b4d51b | 2013-02-01 16:39:32 -0800 | [diff] [blame] | 436 | return uid_eq(orig->uid, new->uid); |
NeilBrown | 3fc605a | 2007-02-14 00:33:13 -0800 | [diff] [blame] | 437 | } |
| 438 | static void unix_gid_init(struct cache_head *cnew, struct cache_head *citem) |
| 439 | { |
| 440 | struct unix_gid *new = container_of(cnew, struct unix_gid, h); |
| 441 | struct unix_gid *item = container_of(citem, struct unix_gid, h); |
| 442 | new->uid = item->uid; |
| 443 | } |
| 444 | static void unix_gid_update(struct cache_head *cnew, struct cache_head *citem) |
| 445 | { |
| 446 | struct unix_gid *new = container_of(cnew, struct unix_gid, h); |
| 447 | struct unix_gid *item = container_of(citem, struct unix_gid, h); |
| 448 | |
| 449 | get_group_info(item->gi); |
| 450 | new->gi = item->gi; |
| 451 | } |
| 452 | static struct cache_head *unix_gid_alloc(void) |
| 453 | { |
| 454 | struct unix_gid *g = kmalloc(sizeof(*g), GFP_KERNEL); |
| 455 | if (g) |
| 456 | return &g->h; |
| 457 | else |
| 458 | return NULL; |
| 459 | } |
| 460 | |
| 461 | static void unix_gid_request(struct cache_detail *cd, |
| 462 | struct cache_head *h, |
| 463 | char **bpp, int *blen) |
| 464 | { |
| 465 | char tuid[20]; |
| 466 | struct unix_gid *ug = container_of(h, struct unix_gid, h); |
| 467 | |
Eric W. Biederman | 25da926 | 2013-02-02 02:49:44 -0800 | [diff] [blame] | 468 | snprintf(tuid, 20, "%u", from_kuid(&init_user_ns, ug->uid)); |
NeilBrown | 3fc605a | 2007-02-14 00:33:13 -0800 | [diff] [blame] | 469 | qword_add(bpp, blen, tuid); |
| 470 | (*bpp)[-1] = '\n'; |
| 471 | } |
| 472 | |
Eric W. Biederman | 7eaf040 | 2013-02-01 16:31:17 -0800 | [diff] [blame] | 473 | static struct unix_gid *unix_gid_lookup(struct cache_detail *cd, kuid_t uid); |
NeilBrown | 3fc605a | 2007-02-14 00:33:13 -0800 | [diff] [blame] | 474 | |
| 475 | static int unix_gid_parse(struct cache_detail *cd, |
| 476 | char *mesg, int mlen) |
| 477 | { |
| 478 | /* uid expiry Ngid gid0 gid1 ... gidN-1 */ |
Eric W. Biederman | 25da926 | 2013-02-02 02:49:44 -0800 | [diff] [blame] | 479 | int id; |
| 480 | kuid_t uid; |
NeilBrown | 3fc605a | 2007-02-14 00:33:13 -0800 | [diff] [blame] | 481 | int gids; |
| 482 | int rv; |
| 483 | int i; |
| 484 | int err; |
| 485 | time_t expiry; |
| 486 | struct unix_gid ug, *ugp; |
| 487 | |
Dan Carpenter | 3476964 | 2012-01-20 10:48:18 +0300 | [diff] [blame] | 488 | if (mesg[mlen - 1] != '\n') |
NeilBrown | 3fc605a | 2007-02-14 00:33:13 -0800 | [diff] [blame] | 489 | return -EINVAL; |
| 490 | mesg[mlen-1] = 0; |
| 491 | |
Eric W. Biederman | 25da926 | 2013-02-02 02:49:44 -0800 | [diff] [blame] | 492 | rv = get_int(&mesg, &id); |
NeilBrown | 3fc605a | 2007-02-14 00:33:13 -0800 | [diff] [blame] | 493 | if (rv) |
| 494 | return -EINVAL; |
Eric W. Biederman | 25da926 | 2013-02-02 02:49:44 -0800 | [diff] [blame] | 495 | uid = make_kuid(&init_user_ns, id); |
NeilBrown | 3fc605a | 2007-02-14 00:33:13 -0800 | [diff] [blame] | 496 | ug.uid = uid; |
| 497 | |
| 498 | expiry = get_expiry(&mesg); |
| 499 | if (expiry == 0) |
| 500 | return -EINVAL; |
| 501 | |
| 502 | rv = get_int(&mesg, &gids); |
| 503 | if (rv || gids < 0 || gids > 8192) |
| 504 | return -EINVAL; |
| 505 | |
| 506 | ug.gi = groups_alloc(gids); |
| 507 | if (!ug.gi) |
| 508 | return -ENOMEM; |
| 509 | |
| 510 | for (i = 0 ; i < gids ; i++) { |
| 511 | int gid; |
Eric W. Biederman | ae2975b | 2011-11-14 15:56:38 -0800 | [diff] [blame] | 512 | kgid_t kgid; |
NeilBrown | 3fc605a | 2007-02-14 00:33:13 -0800 | [diff] [blame] | 513 | rv = get_int(&mesg, &gid); |
| 514 | err = -EINVAL; |
| 515 | if (rv) |
| 516 | goto out; |
Eric W. Biederman | ae2975b | 2011-11-14 15:56:38 -0800 | [diff] [blame] | 517 | kgid = make_kgid(&init_user_ns, gid); |
| 518 | if (!gid_valid(kgid)) |
| 519 | goto out; |
Alexey Dobriyan | 81243ea | 2016-10-07 17:03:12 -0700 | [diff] [blame] | 520 | ug.gi->gid[i] = kgid; |
NeilBrown | 3fc605a | 2007-02-14 00:33:13 -0800 | [diff] [blame] | 521 | } |
| 522 | |
Stanislav Kinsbursky | 7339323 | 2012-01-19 21:42:29 +0400 | [diff] [blame] | 523 | ugp = unix_gid_lookup(cd, uid); |
NeilBrown | 3fc605a | 2007-02-14 00:33:13 -0800 | [diff] [blame] | 524 | if (ugp) { |
| 525 | struct cache_head *ch; |
| 526 | ug.h.flags = 0; |
| 527 | ug.h.expiry_time = expiry; |
Stanislav Kinsbursky | 7339323 | 2012-01-19 21:42:29 +0400 | [diff] [blame] | 528 | ch = sunrpc_cache_update(cd, |
NeilBrown | 3fc605a | 2007-02-14 00:33:13 -0800 | [diff] [blame] | 529 | &ug.h, &ugp->h, |
Eric W. Biederman | 9e469e3 | 2013-02-02 01:57:30 -0800 | [diff] [blame] | 530 | unix_gid_hash(uid)); |
NeilBrown | 3fc605a | 2007-02-14 00:33:13 -0800 | [diff] [blame] | 531 | if (!ch) |
| 532 | err = -ENOMEM; |
| 533 | else { |
| 534 | err = 0; |
Stanislav Kinsbursky | 7339323 | 2012-01-19 21:42:29 +0400 | [diff] [blame] | 535 | cache_put(ch, cd); |
NeilBrown | 3fc605a | 2007-02-14 00:33:13 -0800 | [diff] [blame] | 536 | } |
| 537 | } else |
| 538 | err = -ENOMEM; |
| 539 | out: |
| 540 | if (ug.gi) |
| 541 | put_group_info(ug.gi); |
| 542 | return err; |
| 543 | } |
| 544 | |
| 545 | static int unix_gid_show(struct seq_file *m, |
| 546 | struct cache_detail *cd, |
| 547 | struct cache_head *h) |
| 548 | { |
Eric W. Biederman | 25da926 | 2013-02-02 02:49:44 -0800 | [diff] [blame] | 549 | struct user_namespace *user_ns = &init_user_ns; |
NeilBrown | 3fc605a | 2007-02-14 00:33:13 -0800 | [diff] [blame] | 550 | struct unix_gid *ug; |
| 551 | int i; |
| 552 | int glen; |
| 553 | |
| 554 | if (h == NULL) { |
| 555 | seq_puts(m, "#uid cnt: gids...\n"); |
| 556 | return 0; |
| 557 | } |
| 558 | ug = container_of(h, struct unix_gid, h); |
| 559 | if (test_bit(CACHE_VALID, &h->flags) && |
| 560 | !test_bit(CACHE_NEGATIVE, &h->flags)) |
| 561 | glen = ug->gi->ngroups; |
| 562 | else |
| 563 | glen = 0; |
| 564 | |
Eric W. Biederman | 25da926 | 2013-02-02 02:49:44 -0800 | [diff] [blame] | 565 | seq_printf(m, "%u %d:", from_kuid_munged(user_ns, ug->uid), glen); |
NeilBrown | 3fc605a | 2007-02-14 00:33:13 -0800 | [diff] [blame] | 566 | for (i = 0; i < glen; i++) |
Alexey Dobriyan | 81243ea | 2016-10-07 17:03:12 -0700 | [diff] [blame] | 567 | seq_printf(m, " %d", from_kgid_munged(user_ns, ug->gi->gid[i])); |
NeilBrown | 3fc605a | 2007-02-14 00:33:13 -0800 | [diff] [blame] | 568 | seq_printf(m, "\n"); |
| 569 | return 0; |
| 570 | } |
| 571 | |
Stanislav Kinsbursky | 7339323 | 2012-01-19 21:42:29 +0400 | [diff] [blame] | 572 | static struct cache_detail unix_gid_cache_template = { |
NeilBrown | 3fc605a | 2007-02-14 00:33:13 -0800 | [diff] [blame] | 573 | .owner = THIS_MODULE, |
| 574 | .hash_size = GID_HASHMAX, |
NeilBrown | 3fc605a | 2007-02-14 00:33:13 -0800 | [diff] [blame] | 575 | .name = "auth.unix.gid", |
| 576 | .cache_put = unix_gid_put, |
Stanislav Kinsbursky | 73fb847 | 2013-02-04 14:02:45 +0300 | [diff] [blame] | 577 | .cache_request = unix_gid_request, |
NeilBrown | 3fc605a | 2007-02-14 00:33:13 -0800 | [diff] [blame] | 578 | .cache_parse = unix_gid_parse, |
| 579 | .cache_show = unix_gid_show, |
| 580 | .match = unix_gid_match, |
| 581 | .init = unix_gid_init, |
| 582 | .update = unix_gid_update, |
| 583 | .alloc = unix_gid_alloc, |
| 584 | }; |
| 585 | |
Stanislav Kinsbursky | 7339323 | 2012-01-19 21:42:29 +0400 | [diff] [blame] | 586 | int unix_gid_cache_create(struct net *net) |
| 587 | { |
| 588 | struct sunrpc_net *sn = net_generic(net, sunrpc_net_id); |
| 589 | struct cache_detail *cd; |
| 590 | int err; |
| 591 | |
| 592 | cd = cache_create_net(&unix_gid_cache_template, net); |
| 593 | if (IS_ERR(cd)) |
| 594 | return PTR_ERR(cd); |
| 595 | err = cache_register_net(cd, net); |
| 596 | if (err) { |
| 597 | cache_destroy_net(cd, net); |
| 598 | return err; |
| 599 | } |
| 600 | sn->unix_gid_cache = cd; |
| 601 | return 0; |
| 602 | } |
| 603 | |
| 604 | void unix_gid_cache_destroy(struct net *net) |
| 605 | { |
| 606 | struct sunrpc_net *sn = net_generic(net, sunrpc_net_id); |
| 607 | struct cache_detail *cd = sn->unix_gid_cache; |
| 608 | |
| 609 | sn->unix_gid_cache = NULL; |
| 610 | cache_purge(cd); |
| 611 | cache_unregister_net(cd, net); |
| 612 | cache_destroy_net(cd, net); |
| 613 | } |
| 614 | |
Eric W. Biederman | 7eaf040 | 2013-02-01 16:31:17 -0800 | [diff] [blame] | 615 | static struct unix_gid *unix_gid_lookup(struct cache_detail *cd, kuid_t uid) |
NeilBrown | 3fc605a | 2007-02-14 00:33:13 -0800 | [diff] [blame] | 616 | { |
| 617 | struct unix_gid ug; |
| 618 | struct cache_head *ch; |
| 619 | |
| 620 | ug.uid = uid; |
Eric W. Biederman | 9e469e3 | 2013-02-02 01:57:30 -0800 | [diff] [blame] | 621 | ch = sunrpc_cache_lookup(cd, &ug.h, unix_gid_hash(uid)); |
NeilBrown | 3fc605a | 2007-02-14 00:33:13 -0800 | [diff] [blame] | 622 | if (ch) |
| 623 | return container_of(ch, struct unix_gid, h); |
| 624 | else |
| 625 | return NULL; |
| 626 | } |
| 627 | |
Eric W. Biederman | 7eaf040 | 2013-02-01 16:31:17 -0800 | [diff] [blame] | 628 | static struct group_info *unix_gid_find(kuid_t uid, struct svc_rqst *rqstp) |
NeilBrown | 3fc605a | 2007-02-14 00:33:13 -0800 | [diff] [blame] | 629 | { |
J. Bruce Fields | dc83d6e | 2009-10-20 18:51:34 -0400 | [diff] [blame] | 630 | struct unix_gid *ug; |
| 631 | struct group_info *gi; |
| 632 | int ret; |
Stanislav Kinsbursky | 7339323 | 2012-01-19 21:42:29 +0400 | [diff] [blame] | 633 | struct sunrpc_net *sn = net_generic(rqstp->rq_xprt->xpt_net, |
| 634 | sunrpc_net_id); |
J. Bruce Fields | dc83d6e | 2009-10-20 18:51:34 -0400 | [diff] [blame] | 635 | |
Stanislav Kinsbursky | 7339323 | 2012-01-19 21:42:29 +0400 | [diff] [blame] | 636 | ug = unix_gid_lookup(sn->unix_gid_cache, uid); |
NeilBrown | 3fc605a | 2007-02-14 00:33:13 -0800 | [diff] [blame] | 637 | if (!ug) |
J. Bruce Fields | dc83d6e | 2009-10-20 18:51:34 -0400 | [diff] [blame] | 638 | return ERR_PTR(-EAGAIN); |
Stanislav Kinsbursky | 7339323 | 2012-01-19 21:42:29 +0400 | [diff] [blame] | 639 | ret = cache_check(sn->unix_gid_cache, &ug->h, &rqstp->rq_chandle); |
J. Bruce Fields | dc83d6e | 2009-10-20 18:51:34 -0400 | [diff] [blame] | 640 | switch (ret) { |
NeilBrown | 3fc605a | 2007-02-14 00:33:13 -0800 | [diff] [blame] | 641 | case -ENOENT: |
J. Bruce Fields | dc83d6e | 2009-10-20 18:51:34 -0400 | [diff] [blame] | 642 | return ERR_PTR(-ENOENT); |
NeilBrown | 1ebede8 | 2010-08-12 17:04:07 +1000 | [diff] [blame] | 643 | case -ETIMEDOUT: |
| 644 | return ERR_PTR(-ESHUTDOWN); |
NeilBrown | 3fc605a | 2007-02-14 00:33:13 -0800 | [diff] [blame] | 645 | case 0: |
J. Bruce Fields | dc83d6e | 2009-10-20 18:51:34 -0400 | [diff] [blame] | 646 | gi = get_group_info(ug->gi); |
Stanislav Kinsbursky | 7339323 | 2012-01-19 21:42:29 +0400 | [diff] [blame] | 647 | cache_put(&ug->h, sn->unix_gid_cache); |
J. Bruce Fields | dc83d6e | 2009-10-20 18:51:34 -0400 | [diff] [blame] | 648 | return gi; |
NeilBrown | 3fc605a | 2007-02-14 00:33:13 -0800 | [diff] [blame] | 649 | default: |
J. Bruce Fields | dc83d6e | 2009-10-20 18:51:34 -0400 | [diff] [blame] | 650 | return ERR_PTR(-EAGAIN); |
NeilBrown | 3fc605a | 2007-02-14 00:33:13 -0800 | [diff] [blame] | 651 | } |
| 652 | } |
| 653 | |
J. Bruce Fields | 3ab4d8b | 2007-07-17 04:04:46 -0700 | [diff] [blame] | 654 | int |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 655 | svcauth_unix_set_client(struct svc_rqst *rqstp) |
| 656 | { |
Aurélien Charbon | f15364b | 2008-01-18 15:50:56 +0100 | [diff] [blame] | 657 | struct sockaddr_in *sin; |
| 658 | struct sockaddr_in6 *sin6, sin6_storage; |
NeilBrown | 1a9917c | 2006-03-27 01:15:02 -0800 | [diff] [blame] | 659 | struct ip_map *ipm; |
J. Bruce Fields | dc83d6e | 2009-10-20 18:51:34 -0400 | [diff] [blame] | 660 | struct group_info *gi; |
| 661 | struct svc_cred *cred = &rqstp->rq_cred; |
Pavel Emelyanov | 3be4479 | 2010-09-27 13:59:13 +0400 | [diff] [blame] | 662 | struct svc_xprt *xprt = rqstp->rq_xprt; |
Pavel Emelyanov | 90d51b0 | 2010-09-27 14:02:29 +0400 | [diff] [blame] | 663 | struct net *net = xprt->xpt_net; |
| 664 | struct sunrpc_net *sn = net_generic(net, sunrpc_net_id); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 665 | |
Aurélien Charbon | f15364b | 2008-01-18 15:50:56 +0100 | [diff] [blame] | 666 | switch (rqstp->rq_addr.ss_family) { |
| 667 | case AF_INET: |
| 668 | sin = svc_addr_in(rqstp); |
| 669 | sin6 = &sin6_storage; |
Brian Haley | b301e82 | 2009-10-07 13:58:25 -0700 | [diff] [blame] | 670 | ipv6_addr_set_v4mapped(sin->sin_addr.s_addr, &sin6->sin6_addr); |
Aurélien Charbon | f15364b | 2008-01-18 15:50:56 +0100 | [diff] [blame] | 671 | break; |
| 672 | case AF_INET6: |
| 673 | sin6 = svc_addr_in6(rqstp); |
| 674 | break; |
| 675 | default: |
| 676 | BUG(); |
| 677 | } |
| 678 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 679 | rqstp->rq_client = NULL; |
| 680 | if (rqstp->rq_proc == 0) |
| 681 | return SVC_OK; |
| 682 | |
Pavel Emelyanov | 3be4479 | 2010-09-27 13:59:13 +0400 | [diff] [blame] | 683 | ipm = ip_map_cached_get(xprt); |
Greg Banks | 7b2b1fe | 2006-10-04 02:15:50 -0700 | [diff] [blame] | 684 | if (ipm == NULL) |
Pavel Emelyanov | 90d51b0 | 2010-09-27 14:02:29 +0400 | [diff] [blame] | 685 | ipm = __ip_map_lookup(sn->ip_map_cache, rqstp->rq_server->sv_program->pg_class, |
Aurélien Charbon | f15364b | 2008-01-18 15:50:56 +0100 | [diff] [blame] | 686 | &sin6->sin6_addr); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 687 | |
| 688 | if (ipm == NULL) |
| 689 | return SVC_DENIED; |
| 690 | |
Pavel Emelyanov | 90d51b0 | 2010-09-27 14:02:29 +0400 | [diff] [blame] | 691 | switch (cache_check(sn->ip_map_cache, &ipm->h, &rqstp->rq_chandle)) { |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 692 | default: |
| 693 | BUG(); |
J.Bruce Fields | e0bb89e | 2006-12-13 00:35:25 -0800 | [diff] [blame] | 694 | case -ETIMEDOUT: |
NeilBrown | 1ebede8 | 2010-08-12 17:04:07 +1000 | [diff] [blame] | 695 | return SVC_CLOSE; |
| 696 | case -EAGAIN: |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 697 | return SVC_DROP; |
| 698 | case -ENOENT: |
| 699 | return SVC_DENIED; |
| 700 | case 0: |
| 701 | rqstp->rq_client = &ipm->m_client->h; |
NeilBrown | efc36aa | 2006-03-27 01:14:59 -0800 | [diff] [blame] | 702 | kref_get(&rqstp->rq_client->ref); |
Pavel Emelyanov | 3be4479 | 2010-09-27 13:59:13 +0400 | [diff] [blame] | 703 | ip_map_cached_put(xprt, ipm); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 704 | break; |
| 705 | } |
J. Bruce Fields | dc83d6e | 2009-10-20 18:51:34 -0400 | [diff] [blame] | 706 | |
| 707 | gi = unix_gid_find(cred->cr_uid, rqstp); |
| 708 | switch (PTR_ERR(gi)) { |
| 709 | case -EAGAIN: |
| 710 | return SVC_DROP; |
NeilBrown | 1ebede8 | 2010-08-12 17:04:07 +1000 | [diff] [blame] | 711 | case -ESHUTDOWN: |
| 712 | return SVC_CLOSE; |
J. Bruce Fields | dc83d6e | 2009-10-20 18:51:34 -0400 | [diff] [blame] | 713 | case -ENOENT: |
| 714 | break; |
| 715 | default: |
| 716 | put_group_info(cred->cr_group_info); |
| 717 | cred->cr_group_info = gi; |
| 718 | } |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 719 | return SVC_OK; |
| 720 | } |
| 721 | |
Trond Myklebust | 24c3767 | 2008-12-23 16:30:12 -0500 | [diff] [blame] | 722 | EXPORT_SYMBOL_GPL(svcauth_unix_set_client); |
J. Bruce Fields | 3ab4d8b | 2007-07-17 04:04:46 -0700 | [diff] [blame] | 723 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 724 | static int |
Alexey Dobriyan | d8ed029 | 2006-09-26 22:29:38 -0700 | [diff] [blame] | 725 | svcauth_null_accept(struct svc_rqst *rqstp, __be32 *authp) |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 726 | { |
| 727 | struct kvec *argv = &rqstp->rq_arg.head[0]; |
| 728 | struct kvec *resv = &rqstp->rq_res.head[0]; |
| 729 | struct svc_cred *cred = &rqstp->rq_cred; |
| 730 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 731 | if (argv->iov_len < 3*4) |
| 732 | return SVC_GARBAGE; |
| 733 | |
YOSHIFUJI Hideaki | cca5172 | 2007-02-09 15:38:13 -0800 | [diff] [blame] | 734 | if (svc_getu32(argv) != 0) { |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 735 | dprintk("svc: bad null cred\n"); |
| 736 | *authp = rpc_autherr_badcred; |
| 737 | return SVC_DENIED; |
| 738 | } |
Alexey Dobriyan | 7699431 | 2006-09-26 22:28:46 -0700 | [diff] [blame] | 739 | if (svc_getu32(argv) != htonl(RPC_AUTH_NULL) || svc_getu32(argv) != 0) { |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 740 | dprintk("svc: bad null verf\n"); |
| 741 | *authp = rpc_autherr_badverf; |
| 742 | return SVC_DENIED; |
| 743 | } |
| 744 | |
| 745 | /* Signal that mapping to nobody uid/gid is required */ |
Eric W. Biederman | bf37f79 | 2013-02-01 15:55:38 -0800 | [diff] [blame] | 746 | cred->cr_uid = INVALID_UID; |
| 747 | cred->cr_gid = INVALID_GID; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 748 | cred->cr_group_info = groups_alloc(0); |
| 749 | if (cred->cr_group_info == NULL) |
NeilBrown | 1ebede8 | 2010-08-12 17:04:07 +1000 | [diff] [blame] | 750 | return SVC_CLOSE; /* kmalloc failure - client must retry */ |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 751 | |
| 752 | /* Put NULL verifier */ |
Alexey Dobriyan | 7699431 | 2006-09-26 22:28:46 -0700 | [diff] [blame] | 753 | svc_putnl(resv, RPC_AUTH_NULL); |
| 754 | svc_putnl(resv, 0); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 755 | |
J. Bruce Fields | d5497fc | 2012-05-14 22:06:49 -0400 | [diff] [blame] | 756 | rqstp->rq_cred.cr_flavor = RPC_AUTH_NULL; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 757 | return SVC_OK; |
| 758 | } |
| 759 | |
| 760 | static int |
| 761 | svcauth_null_release(struct svc_rqst *rqstp) |
| 762 | { |
| 763 | if (rqstp->rq_client) |
| 764 | auth_domain_put(rqstp->rq_client); |
| 765 | rqstp->rq_client = NULL; |
| 766 | if (rqstp->rq_cred.cr_group_info) |
| 767 | put_group_info(rqstp->rq_cred.cr_group_info); |
| 768 | rqstp->rq_cred.cr_group_info = NULL; |
| 769 | |
| 770 | return 0; /* don't drop */ |
| 771 | } |
| 772 | |
| 773 | |
| 774 | struct auth_ops svcauth_null = { |
| 775 | .name = "null", |
| 776 | .owner = THIS_MODULE, |
| 777 | .flavour = RPC_AUTH_NULL, |
| 778 | .accept = svcauth_null_accept, |
| 779 | .release = svcauth_null_release, |
| 780 | .set_client = svcauth_unix_set_client, |
| 781 | }; |
| 782 | |
| 783 | |
| 784 | static int |
Alexey Dobriyan | d8ed029 | 2006-09-26 22:29:38 -0700 | [diff] [blame] | 785 | svcauth_unix_accept(struct svc_rqst *rqstp, __be32 *authp) |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 786 | { |
| 787 | struct kvec *argv = &rqstp->rq_arg.head[0]; |
| 788 | struct kvec *resv = &rqstp->rq_res.head[0]; |
| 789 | struct svc_cred *cred = &rqstp->rq_cred; |
| 790 | u32 slen, i; |
| 791 | int len = argv->iov_len; |
| 792 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 793 | if ((len -= 3*4) < 0) |
| 794 | return SVC_GARBAGE; |
| 795 | |
| 796 | svc_getu32(argv); /* length */ |
| 797 | svc_getu32(argv); /* time stamp */ |
Alexey Dobriyan | 7699431 | 2006-09-26 22:28:46 -0700 | [diff] [blame] | 798 | slen = XDR_QUADLEN(svc_getnl(argv)); /* machname length */ |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 799 | if (slen > 64 || (len -= (slen + 3)*4) < 0) |
| 800 | goto badcred; |
Alexey Dobriyan | d8ed029 | 2006-09-26 22:29:38 -0700 | [diff] [blame] | 801 | argv->iov_base = (void*)((__be32*)argv->iov_base + slen); /* skip machname */ |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 802 | argv->iov_len -= slen*4; |
J. Bruce Fields | afe3c3f | 2013-05-24 17:24:34 -0400 | [diff] [blame] | 803 | /* |
| 804 | * Note: we skip uid_valid()/gid_valid() checks here for |
| 805 | * backwards compatibility with clients that use -1 id's. |
| 806 | * Instead, -1 uid or gid is later mapped to the |
| 807 | * (export-specific) anonymous id by nfsd_setuser. |
| 808 | * Supplementary gid's will be left alone. |
| 809 | */ |
Eric W. Biederman | f025adf | 2013-02-02 03:03:04 -0800 | [diff] [blame] | 810 | cred->cr_uid = make_kuid(&init_user_ns, svc_getnl(argv)); /* uid */ |
| 811 | cred->cr_gid = make_kgid(&init_user_ns, svc_getnl(argv)); /* gid */ |
Alexey Dobriyan | 7699431 | 2006-09-26 22:28:46 -0700 | [diff] [blame] | 812 | slen = svc_getnl(argv); /* gids length */ |
Kinglong Mee | 5786461 | 2017-02-07 21:48:11 +0800 | [diff] [blame] | 813 | if (slen > UNX_NGROUPS || (len -= (slen + 2)*4) < 0) |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 814 | goto badcred; |
J. Bruce Fields | dc83d6e | 2009-10-20 18:51:34 -0400 | [diff] [blame] | 815 | cred->cr_group_info = groups_alloc(slen); |
| 816 | if (cred->cr_group_info == NULL) |
NeilBrown | 1ebede8 | 2010-08-12 17:04:07 +1000 | [diff] [blame] | 817 | return SVC_CLOSE; |
Eric W. Biederman | ae2975b | 2011-11-14 15:56:38 -0800 | [diff] [blame] | 818 | for (i = 0; i < slen; i++) { |
| 819 | kgid_t kgid = make_kgid(&init_user_ns, svc_getnl(argv)); |
Alexey Dobriyan | 81243ea | 2016-10-07 17:03:12 -0700 | [diff] [blame] | 820 | cred->cr_group_info->gid[i] = kgid; |
Eric W. Biederman | ae2975b | 2011-11-14 15:56:38 -0800 | [diff] [blame] | 821 | } |
Alexey Dobriyan | 7699431 | 2006-09-26 22:28:46 -0700 | [diff] [blame] | 822 | if (svc_getu32(argv) != htonl(RPC_AUTH_NULL) || svc_getu32(argv) != 0) { |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 823 | *authp = rpc_autherr_badverf; |
| 824 | return SVC_DENIED; |
| 825 | } |
| 826 | |
| 827 | /* Put NULL verifier */ |
Alexey Dobriyan | 7699431 | 2006-09-26 22:28:46 -0700 | [diff] [blame] | 828 | svc_putnl(resv, RPC_AUTH_NULL); |
| 829 | svc_putnl(resv, 0); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 830 | |
J. Bruce Fields | d5497fc | 2012-05-14 22:06:49 -0400 | [diff] [blame] | 831 | rqstp->rq_cred.cr_flavor = RPC_AUTH_UNIX; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 832 | return SVC_OK; |
| 833 | |
| 834 | badcred: |
| 835 | *authp = rpc_autherr_badcred; |
| 836 | return SVC_DENIED; |
| 837 | } |
| 838 | |
| 839 | static int |
| 840 | svcauth_unix_release(struct svc_rqst *rqstp) |
| 841 | { |
| 842 | /* Verifier (such as it is) is already in place. |
| 843 | */ |
| 844 | if (rqstp->rq_client) |
| 845 | auth_domain_put(rqstp->rq_client); |
| 846 | rqstp->rq_client = NULL; |
| 847 | if (rqstp->rq_cred.cr_group_info) |
| 848 | put_group_info(rqstp->rq_cred.cr_group_info); |
| 849 | rqstp->rq_cred.cr_group_info = NULL; |
| 850 | |
| 851 | return 0; |
| 852 | } |
| 853 | |
| 854 | |
| 855 | struct auth_ops svcauth_unix = { |
| 856 | .name = "unix", |
| 857 | .owner = THIS_MODULE, |
| 858 | .flavour = RPC_AUTH_UNIX, |
| 859 | .accept = svcauth_unix_accept, |
| 860 | .release = svcauth_unix_release, |
| 861 | .domain_release = svcauth_unix_domain_release, |
| 862 | .set_client = svcauth_unix_set_client, |
| 863 | }; |
| 864 | |
Stanislav Kinsbursky | d05cc1040 | 2012-01-19 21:42:45 +0400 | [diff] [blame] | 865 | static struct cache_detail ip_map_cache_template = { |
| 866 | .owner = THIS_MODULE, |
| 867 | .hash_size = IP_HASHMAX, |
| 868 | .name = "auth.unix.ip", |
| 869 | .cache_put = ip_map_put, |
Stanislav Kinsbursky | 73fb847 | 2013-02-04 14:02:45 +0300 | [diff] [blame] | 870 | .cache_request = ip_map_request, |
Stanislav Kinsbursky | d05cc1040 | 2012-01-19 21:42:45 +0400 | [diff] [blame] | 871 | .cache_parse = ip_map_parse, |
| 872 | .cache_show = ip_map_show, |
| 873 | .match = ip_map_match, |
| 874 | .init = ip_map_init, |
| 875 | .update = update, |
| 876 | .alloc = ip_map_alloc, |
| 877 | }; |
| 878 | |
Pavel Emelyanov | 90d51b0 | 2010-09-27 14:02:29 +0400 | [diff] [blame] | 879 | int ip_map_cache_create(struct net *net) |
| 880 | { |
Pavel Emelyanov | 90d51b0 | 2010-09-27 14:02:29 +0400 | [diff] [blame] | 881 | struct sunrpc_net *sn = net_generic(net, sunrpc_net_id); |
Stanislav Kinsbursky | d05cc1040 | 2012-01-19 21:42:45 +0400 | [diff] [blame] | 882 | struct cache_detail *cd; |
| 883 | int err; |
Pavel Emelyanov | 90d51b0 | 2010-09-27 14:02:29 +0400 | [diff] [blame] | 884 | |
Stanislav Kinsbursky | d05cc1040 | 2012-01-19 21:42:45 +0400 | [diff] [blame] | 885 | cd = cache_create_net(&ip_map_cache_template, net); |
| 886 | if (IS_ERR(cd)) |
| 887 | return PTR_ERR(cd); |
Pavel Emelyanov | 90d51b0 | 2010-09-27 14:02:29 +0400 | [diff] [blame] | 888 | err = cache_register_net(cd, net); |
Stanislav Kinsbursky | d05cc1040 | 2012-01-19 21:42:45 +0400 | [diff] [blame] | 889 | if (err) { |
| 890 | cache_destroy_net(cd, net); |
| 891 | return err; |
| 892 | } |
Pavel Emelyanov | 90d51b0 | 2010-09-27 14:02:29 +0400 | [diff] [blame] | 893 | sn->ip_map_cache = cd; |
| 894 | return 0; |
Pavel Emelyanov | 90d51b0 | 2010-09-27 14:02:29 +0400 | [diff] [blame] | 895 | } |
| 896 | |
| 897 | void ip_map_cache_destroy(struct net *net) |
| 898 | { |
Stanislav Kinsbursky | d05cc1040 | 2012-01-19 21:42:45 +0400 | [diff] [blame] | 899 | struct sunrpc_net *sn = net_generic(net, sunrpc_net_id); |
| 900 | struct cache_detail *cd = sn->ip_map_cache; |
Pavel Emelyanov | 90d51b0 | 2010-09-27 14:02:29 +0400 | [diff] [blame] | 901 | |
Stanislav Kinsbursky | d05cc1040 | 2012-01-19 21:42:45 +0400 | [diff] [blame] | 902 | sn->ip_map_cache = NULL; |
| 903 | cache_purge(cd); |
| 904 | cache_unregister_net(cd, net); |
| 905 | cache_destroy_net(cd, net); |
Pavel Emelyanov | 90d51b0 | 2010-09-27 14:02:29 +0400 | [diff] [blame] | 906 | } |