blob: 03f89dbb2512a8469ad9513c9a4d81613e1a243f [file] [log] [blame]
Mike Marshall5db11c22015-07-17 10:38:12 -04001/*
2 * (C) 2001 Clemson University and The University of Chicago
3 *
4 * See COPYING in top-level directory.
5 */
6
7#include "protocol.h"
Mike Marshall575e9462015-12-04 12:56:14 -05008#include "orangefs-kernel.h"
9#include "orangefs-bufmap.h"
Mike Marshall5db11c22015-07-17 10:38:12 -040010#include <linux/posix_acl_xattr.h>
11#include <linux/fs_struct.h>
12
Yi Liu8bb8aef2015-11-24 15:12:14 -050013struct posix_acl *orangefs_get_acl(struct inode *inode, int type)
Mike Marshall5db11c22015-07-17 10:38:12 -040014{
15 struct posix_acl *acl;
16 int ret;
17 char *key = NULL, *value = NULL;
18
19 switch (type) {
20 case ACL_TYPE_ACCESS:
Yi Liu8bb8aef2015-11-24 15:12:14 -050021 key = ORANGEFS_XATTR_NAME_ACL_ACCESS;
Mike Marshall5db11c22015-07-17 10:38:12 -040022 break;
23 case ACL_TYPE_DEFAULT:
Yi Liu8bb8aef2015-11-24 15:12:14 -050024 key = ORANGEFS_XATTR_NAME_ACL_DEFAULT;
Mike Marshall5db11c22015-07-17 10:38:12 -040025 break;
26 default:
Yi Liu8bb8aef2015-11-24 15:12:14 -050027 gossip_err("orangefs_get_acl: bogus value of type %d\n", type);
Mike Marshall5db11c22015-07-17 10:38:12 -040028 return ERR_PTR(-EINVAL);
29 }
30 /*
31 * Rather than incurring a network call just to determine the exact
32 * length of the attribute, I just allocate a max length to save on
33 * the network call. Conceivably, we could pass NULL to
Yi Liu8bb8aef2015-11-24 15:12:14 -050034 * orangefs_inode_getxattr() to probe the length of the value, but
Mike Marshall5db11c22015-07-17 10:38:12 -040035 * I don't do that for now.
36 */
Yi Liu8bb8aef2015-11-24 15:12:14 -050037 value = kmalloc(ORANGEFS_MAX_XATTR_VALUELEN, GFP_KERNEL);
Mike Marshall5db11c22015-07-17 10:38:12 -040038 if (value == NULL)
39 return ERR_PTR(-ENOMEM);
40
41 gossip_debug(GOSSIP_ACL_DEBUG,
42 "inode %pU, key %s, type %d\n",
43 get_khandle_from_ino(inode),
44 key,
45 type);
Yi Liu8bb8aef2015-11-24 15:12:14 -050046 ret = orangefs_inode_getxattr(inode,
Mike Marshall5db11c22015-07-17 10:38:12 -040047 "",
48 key,
49 value,
Yi Liu8bb8aef2015-11-24 15:12:14 -050050 ORANGEFS_MAX_XATTR_VALUELEN);
Mike Marshall5db11c22015-07-17 10:38:12 -040051 /* if the key exists, convert it to an in-memory rep */
52 if (ret > 0) {
53 acl = posix_acl_from_xattr(&init_user_ns, value, ret);
54 } else if (ret == -ENODATA || ret == -ENOSYS) {
55 acl = NULL;
56 } else {
57 gossip_err("inode %pU retrieving acl's failed with error %d\n",
58 get_khandle_from_ino(inode),
59 ret);
60 acl = ERR_PTR(ret);
61 }
62 /* kfree(NULL) is safe, so don't worry if value ever got used */
63 kfree(value);
64 return acl;
65}
66
Yi Liu8bb8aef2015-11-24 15:12:14 -050067int orangefs_set_acl(struct inode *inode, struct posix_acl *acl, int type)
Mike Marshall5db11c22015-07-17 10:38:12 -040068{
Yi Liu8bb8aef2015-11-24 15:12:14 -050069 struct orangefs_inode_s *orangefs_inode = ORANGEFS_I(inode);
Mike Marshall5db11c22015-07-17 10:38:12 -040070 int error = 0;
71 void *value = NULL;
72 size_t size = 0;
73 const char *name = NULL;
74
75 switch (type) {
76 case ACL_TYPE_ACCESS:
Yi Liu8bb8aef2015-11-24 15:12:14 -050077 name = ORANGEFS_XATTR_NAME_ACL_ACCESS;
Mike Marshall5db11c22015-07-17 10:38:12 -040078 if (acl) {
79 umode_t mode = inode->i_mode;
80 /*
81 * can we represent this with the traditional file
82 * mode permission bits?
83 */
84 error = posix_acl_equiv_mode(acl, &mode);
85 if (error < 0) {
86 gossip_err("%s: posix_acl_equiv_mode err: %d\n",
87 __func__,
88 error);
89 return error;
90 }
91
92 if (inode->i_mode != mode)
Yi Liu8bb8aef2015-11-24 15:12:14 -050093 SetModeFlag(orangefs_inode);
Mike Marshall5db11c22015-07-17 10:38:12 -040094 inode->i_mode = mode;
95 mark_inode_dirty_sync(inode);
96 if (error == 0)
97 acl = NULL;
98 }
99 break;
100 case ACL_TYPE_DEFAULT:
Yi Liu8bb8aef2015-11-24 15:12:14 -0500101 name = ORANGEFS_XATTR_NAME_ACL_DEFAULT;
Mike Marshall5db11c22015-07-17 10:38:12 -0400102 break;
103 default:
104 gossip_err("%s: invalid type %d!\n", __func__, type);
105 return -EINVAL;
106 }
107
108 gossip_debug(GOSSIP_ACL_DEBUG,
109 "%s: inode %pU, key %s type %d\n",
110 __func__, get_khandle_from_ino(inode),
111 name,
112 type);
113
114 if (acl) {
115 size = posix_acl_xattr_size(acl->a_count);
116 value = kmalloc(size, GFP_KERNEL);
117 if (!value)
118 return -ENOMEM;
119
120 error = posix_acl_to_xattr(&init_user_ns, acl, value, size);
121 if (error < 0)
122 goto out;
123 }
124
125 gossip_debug(GOSSIP_ACL_DEBUG,
126 "%s: name %s, value %p, size %zd, acl %p\n",
127 __func__, name, value, size, acl);
128 /*
129 * Go ahead and set the extended attribute now. NOTE: Suppose acl
130 * was NULL, then value will be NULL and size will be 0 and that
131 * will xlate to a removexattr. However, we don't want removexattr
132 * complain if attributes does not exist.
133 */
Yi Liu8bb8aef2015-11-24 15:12:14 -0500134 error = orangefs_inode_setxattr(inode, "", name, value, size, 0);
Mike Marshall5db11c22015-07-17 10:38:12 -0400135
136out:
137 kfree(value);
138 if (!error)
139 set_cached_acl(inode, type, acl);
140 return error;
141}
142
Yi Liu8bb8aef2015-11-24 15:12:14 -0500143int orangefs_init_acl(struct inode *inode, struct inode *dir)
Mike Marshall5db11c22015-07-17 10:38:12 -0400144{
Yi Liu8bb8aef2015-11-24 15:12:14 -0500145 struct orangefs_inode_s *orangefs_inode = ORANGEFS_I(inode);
Mike Marshall5db11c22015-07-17 10:38:12 -0400146 struct posix_acl *default_acl, *acl;
147 umode_t mode = inode->i_mode;
148 int error = 0;
149
Yi Liu8bb8aef2015-11-24 15:12:14 -0500150 ClearModeFlag(orangefs_inode);
Mike Marshall5db11c22015-07-17 10:38:12 -0400151
152 error = posix_acl_create(dir, &mode, &default_acl, &acl);
153 if (error)
154 return error;
155
156 if (default_acl) {
Yi Liu8bb8aef2015-11-24 15:12:14 -0500157 error = orangefs_set_acl(inode, default_acl, ACL_TYPE_DEFAULT);
Mike Marshall5db11c22015-07-17 10:38:12 -0400158 posix_acl_release(default_acl);
159 }
160
161 if (acl) {
162 if (!error)
Yi Liu8bb8aef2015-11-24 15:12:14 -0500163 error = orangefs_set_acl(inode, acl, ACL_TYPE_ACCESS);
Mike Marshall5db11c22015-07-17 10:38:12 -0400164 posix_acl_release(acl);
165 }
166
167 /* If mode of the inode was changed, then do a forcible ->setattr */
168 if (mode != inode->i_mode) {
Yi Liu8bb8aef2015-11-24 15:12:14 -0500169 SetModeFlag(orangefs_inode);
Mike Marshall5db11c22015-07-17 10:38:12 -0400170 inode->i_mode = mode;
Yi Liu8bb8aef2015-11-24 15:12:14 -0500171 orangefs_flush_inode(inode);
Mike Marshall5db11c22015-07-17 10:38:12 -0400172 }
173
174 return error;
175}