Daniel Campello | 35c9e24 | 2015-07-20 16:23:50 -0700 | [diff] [blame] | 1 | /* |
| 2 | * fs/sdcardfs/derived_perm.c |
| 3 | * |
| 4 | * Copyright (c) 2013 Samsung Electronics Co. Ltd |
| 5 | * Authors: Daeho Jeong, Woojoong Lee, Seunghwan Hyun, |
| 6 | * Sunghwan Yun, Sungjong Seo |
| 7 | * |
| 8 | * This program has been developed as a stackable file system based on |
| 9 | * the WrapFS which written by |
| 10 | * |
| 11 | * Copyright (c) 1998-2011 Erez Zadok |
| 12 | * Copyright (c) 2009 Shrikar Archak |
| 13 | * Copyright (c) 2003-2011 Stony Brook University |
| 14 | * Copyright (c) 2003-2011 The Research Foundation of SUNY |
| 15 | * |
| 16 | * This file is dual licensed. It may be redistributed and/or modified |
| 17 | * under the terms of the Apache 2.0 License OR version 2 of the GNU |
| 18 | * General Public License. |
| 19 | */ |
| 20 | |
| 21 | #include "sdcardfs.h" |
| 22 | |
| 23 | /* copy derived state from parent inode */ |
| 24 | static void inherit_derived_state(struct inode *parent, struct inode *child) |
| 25 | { |
| 26 | struct sdcardfs_inode_info *pi = SDCARDFS_I(parent); |
| 27 | struct sdcardfs_inode_info *ci = SDCARDFS_I(child); |
| 28 | |
Daniel Rosenberg | a56a105 | 2017-05-15 14:03:15 -0700 | [diff] [blame] | 29 | ci->data->perm = PERM_INHERIT; |
| 30 | ci->data->userid = pi->data->userid; |
| 31 | ci->data->d_uid = pi->data->d_uid; |
| 32 | ci->data->under_android = pi->data->under_android; |
| 33 | ci->data->under_cache = pi->data->under_cache; |
| 34 | ci->data->under_obb = pi->data->under_obb; |
| 35 | set_top(ci, pi->top_data); |
Daniel Campello | 35c9e24 | 2015-07-20 16:23:50 -0700 | [diff] [blame] | 36 | } |
| 37 | |
| 38 | /* helper function for derived state */ |
Daniel Rosenberg | 5080d24 | 2016-05-18 16:57:10 -0700 | [diff] [blame] | 39 | void setup_derived_state(struct inode *inode, perm_t perm, userid_t userid, |
Daniel Rosenberg | a56a105 | 2017-05-15 14:03:15 -0700 | [diff] [blame] | 40 | uid_t uid, bool under_android, |
| 41 | struct sdcardfs_inode_data *top) |
Daniel Campello | 35c9e24 | 2015-07-20 16:23:50 -0700 | [diff] [blame] | 42 | { |
| 43 | struct sdcardfs_inode_info *info = SDCARDFS_I(inode); |
| 44 | |
Daniel Rosenberg | a56a105 | 2017-05-15 14:03:15 -0700 | [diff] [blame] | 45 | info->data->perm = perm; |
| 46 | info->data->userid = userid; |
| 47 | info->data->d_uid = uid; |
| 48 | info->data->under_android = under_android; |
| 49 | info->data->under_cache = false; |
| 50 | info->data->under_obb = false; |
Daniel Rosenberg | 5080d24 | 2016-05-18 16:57:10 -0700 | [diff] [blame] | 51 | set_top(info, top); |
Daniel Campello | 35c9e24 | 2015-07-20 16:23:50 -0700 | [diff] [blame] | 52 | } |
| 53 | |
Daniel Rosenberg | 5e024f6 | 2017-03-16 17:42:58 -0700 | [diff] [blame] | 54 | /* While renaming, there is a point where we want the path from dentry, |
| 55 | * but the name from newdentry |
| 56 | */ |
| 57 | void get_derived_permission_new(struct dentry *parent, struct dentry *dentry, |
| 58 | const struct qstr *name) |
Daniel Campello | 35c9e24 | 2015-07-20 16:23:50 -0700 | [diff] [blame] | 59 | { |
Daniel Rosenberg | 63d2076 | 2016-12-01 14:36:29 -0800 | [diff] [blame] | 60 | struct sdcardfs_inode_info *info = SDCARDFS_I(d_inode(dentry)); |
Daniel Rosenberg | a56a105 | 2017-05-15 14:03:15 -0700 | [diff] [blame] | 61 | struct sdcardfs_inode_data *parent_data = |
| 62 | SDCARDFS_I(d_inode(parent))->data; |
Daniel Campello | 35c9e24 | 2015-07-20 16:23:50 -0700 | [diff] [blame] | 63 | appid_t appid; |
Daniel Rosenberg | 3c42d40 | 2017-03-16 19:32:59 -0700 | [diff] [blame] | 64 | unsigned long user_num; |
| 65 | int err; |
Daniel Rosenberg | 5004c5f | 2017-01-31 20:07:51 -0800 | [diff] [blame] | 66 | struct qstr q_Android = QSTR_LITERAL("Android"); |
| 67 | struct qstr q_data = QSTR_LITERAL("data"); |
| 68 | struct qstr q_obb = QSTR_LITERAL("obb"); |
| 69 | struct qstr q_media = QSTR_LITERAL("media"); |
| 70 | struct qstr q_cache = QSTR_LITERAL("cache"); |
Daniel Campello | 35c9e24 | 2015-07-20 16:23:50 -0700 | [diff] [blame] | 71 | |
| 72 | /* By default, each inode inherits from its parent. |
| 73 | * the properties are maintained on its private fields |
| 74 | * because the inode attributes will be modified with that of |
| 75 | * its lower inode. |
Daniel Rosenberg | ad90525 | 2017-01-25 13:48:45 -0800 | [diff] [blame] | 76 | * These values are used by our custom permission call instead |
| 77 | * of using the inode permissions. |
Daniel Campello | 35c9e24 | 2015-07-20 16:23:50 -0700 | [diff] [blame] | 78 | */ |
| 79 | |
Daniel Rosenberg | 63d2076 | 2016-12-01 14:36:29 -0800 | [diff] [blame] | 80 | inherit_derived_state(d_inode(parent), d_inode(dentry)); |
Daniel Campello | 35c9e24 | 2015-07-20 16:23:50 -0700 | [diff] [blame] | 81 | |
Daniel Rosenberg | ad90525 | 2017-01-25 13:48:45 -0800 | [diff] [blame] | 82 | /* Files don't get special labels */ |
| 83 | if (!S_ISDIR(d_inode(dentry)->i_mode)) |
| 84 | return; |
Daniel Campello | 35c9e24 | 2015-07-20 16:23:50 -0700 | [diff] [blame] | 85 | /* Derive custom permissions based on parent and current node */ |
Daniel Rosenberg | a56a105 | 2017-05-15 14:03:15 -0700 | [diff] [blame] | 86 | switch (parent_data->perm) { |
Daniel Rosenberg | ad90525 | 2017-01-25 13:48:45 -0800 | [diff] [blame] | 87 | case PERM_INHERIT: |
| 88 | case PERM_ANDROID_PACKAGE_CACHE: |
| 89 | /* Already inherited above */ |
| 90 | break; |
| 91 | case PERM_PRE_ROOT: |
| 92 | /* Legacy internal layout places users at top level */ |
Daniel Rosenberg | a56a105 | 2017-05-15 14:03:15 -0700 | [diff] [blame] | 93 | info->data->perm = PERM_ROOT; |
Daniel Rosenberg | 3c42d40 | 2017-03-16 19:32:59 -0700 | [diff] [blame] | 94 | err = kstrtoul(name->name, 10, &user_num); |
| 95 | if (err) |
Daniel Rosenberg | a56a105 | 2017-05-15 14:03:15 -0700 | [diff] [blame] | 96 | info->data->userid = 0; |
Daniel Rosenberg | 3c42d40 | 2017-03-16 19:32:59 -0700 | [diff] [blame] | 97 | else |
Daniel Rosenberg | a56a105 | 2017-05-15 14:03:15 -0700 | [diff] [blame] | 98 | info->data->userid = user_num; |
| 99 | set_top(info, info->data); |
Daniel Rosenberg | ad90525 | 2017-01-25 13:48:45 -0800 | [diff] [blame] | 100 | break; |
| 101 | case PERM_ROOT: |
| 102 | /* Assume masked off by default. */ |
Daniel Rosenberg | 5004c5f | 2017-01-31 20:07:51 -0800 | [diff] [blame] | 103 | if (qstr_case_eq(name, &q_Android)) { |
Daniel Rosenberg | ad90525 | 2017-01-25 13:48:45 -0800 | [diff] [blame] | 104 | /* App-specific directories inside; let anyone traverse */ |
Daniel Rosenberg | a56a105 | 2017-05-15 14:03:15 -0700 | [diff] [blame] | 105 | info->data->perm = PERM_ANDROID; |
| 106 | info->data->under_android = true; |
| 107 | set_top(info, info->data); |
Daniel Rosenberg | ad90525 | 2017-01-25 13:48:45 -0800 | [diff] [blame] | 108 | } |
| 109 | break; |
| 110 | case PERM_ANDROID: |
Daniel Rosenberg | 5004c5f | 2017-01-31 20:07:51 -0800 | [diff] [blame] | 111 | if (qstr_case_eq(name, &q_data)) { |
Daniel Rosenberg | ad90525 | 2017-01-25 13:48:45 -0800 | [diff] [blame] | 112 | /* App-specific directories inside; let anyone traverse */ |
Daniel Rosenberg | a56a105 | 2017-05-15 14:03:15 -0700 | [diff] [blame] | 113 | info->data->perm = PERM_ANDROID_DATA; |
| 114 | set_top(info, info->data); |
Daniel Rosenberg | 5004c5f | 2017-01-31 20:07:51 -0800 | [diff] [blame] | 115 | } else if (qstr_case_eq(name, &q_obb)) { |
Daniel Rosenberg | ad90525 | 2017-01-25 13:48:45 -0800 | [diff] [blame] | 116 | /* App-specific directories inside; let anyone traverse */ |
Daniel Rosenberg | a56a105 | 2017-05-15 14:03:15 -0700 | [diff] [blame] | 117 | info->data->perm = PERM_ANDROID_OBB; |
| 118 | info->data->under_obb = true; |
| 119 | set_top(info, info->data); |
Daniel Rosenberg | ad90525 | 2017-01-25 13:48:45 -0800 | [diff] [blame] | 120 | /* Single OBB directory is always shared */ |
Daniel Rosenberg | 5004c5f | 2017-01-31 20:07:51 -0800 | [diff] [blame] | 121 | } else if (qstr_case_eq(name, &q_media)) { |
Daniel Rosenberg | ad90525 | 2017-01-25 13:48:45 -0800 | [diff] [blame] | 122 | /* App-specific directories inside; let anyone traverse */ |
Daniel Rosenberg | a56a105 | 2017-05-15 14:03:15 -0700 | [diff] [blame] | 123 | info->data->perm = PERM_ANDROID_MEDIA; |
| 124 | set_top(info, info->data); |
Daniel Rosenberg | ad90525 | 2017-01-25 13:48:45 -0800 | [diff] [blame] | 125 | } |
| 126 | break; |
| 127 | case PERM_ANDROID_OBB: |
| 128 | case PERM_ANDROID_DATA: |
| 129 | case PERM_ANDROID_MEDIA: |
Daniel Rosenberg | a56a105 | 2017-05-15 14:03:15 -0700 | [diff] [blame] | 130 | info->data->perm = PERM_ANDROID_PACKAGE; |
Daniel Rosenberg | 5004c5f | 2017-01-31 20:07:51 -0800 | [diff] [blame] | 131 | appid = get_appid(name->name); |
Daniel Rosenberg | a56a105 | 2017-05-15 14:03:15 -0700 | [diff] [blame] | 132 | if (appid != 0 && !is_excluded(name->name, parent_data->userid)) |
| 133 | info->data->d_uid = |
| 134 | multiuser_get_uid(parent_data->userid, appid); |
| 135 | set_top(info, info->data); |
Daniel Rosenberg | ad90525 | 2017-01-25 13:48:45 -0800 | [diff] [blame] | 136 | break; |
| 137 | case PERM_ANDROID_PACKAGE: |
Daniel Rosenberg | 5004c5f | 2017-01-31 20:07:51 -0800 | [diff] [blame] | 138 | if (qstr_case_eq(name, &q_cache)) { |
Daniel Rosenberg | a56a105 | 2017-05-15 14:03:15 -0700 | [diff] [blame] | 139 | info->data->perm = PERM_ANDROID_PACKAGE_CACHE; |
| 140 | info->data->under_cache = true; |
Daniel Rosenberg | ad90525 | 2017-01-25 13:48:45 -0800 | [diff] [blame] | 141 | } |
| 142 | break; |
Daniel Campello | 35c9e24 | 2015-07-20 16:23:50 -0700 | [diff] [blame] | 143 | } |
| 144 | } |
| 145 | |
Daniel Rosenberg | 497ac90 | 2016-02-03 21:08:21 -0800 | [diff] [blame] | 146 | void get_derived_permission(struct dentry *parent, struct dentry *dentry) |
| 147 | { |
Daniel Rosenberg | 5004c5f | 2017-01-31 20:07:51 -0800 | [diff] [blame] | 148 | get_derived_permission_new(parent, dentry, &dentry->d_name); |
Daniel Rosenberg | ad90525 | 2017-01-25 13:48:45 -0800 | [diff] [blame] | 149 | } |
| 150 | |
| 151 | static appid_t get_type(const char *name) |
| 152 | { |
| 153 | const char *ext = strrchr(name, '.'); |
| 154 | appid_t id; |
| 155 | |
| 156 | if (ext && ext[0]) { |
| 157 | ext = &ext[1]; |
| 158 | id = get_ext_gid(ext); |
| 159 | return id?:AID_MEDIA_RW; |
| 160 | } |
| 161 | return AID_MEDIA_RW; |
| 162 | } |
| 163 | |
| 164 | void fixup_lower_ownership(struct dentry *dentry, const char *name) |
| 165 | { |
| 166 | struct path path; |
| 167 | struct inode *inode; |
| 168 | struct inode *delegated_inode = NULL; |
| 169 | int error; |
| 170 | struct sdcardfs_inode_info *info; |
Daniel Rosenberg | a56a105 | 2017-05-15 14:03:15 -0700 | [diff] [blame] | 171 | struct sdcardfs_inode_data *info_d; |
| 172 | struct sdcardfs_inode_data *info_top; |
Daniel Rosenberg | ad90525 | 2017-01-25 13:48:45 -0800 | [diff] [blame] | 173 | perm_t perm; |
| 174 | struct sdcardfs_sb_info *sbi = SDCARDFS_SB(dentry->d_sb); |
| 175 | uid_t uid = sbi->options.fs_low_uid; |
| 176 | gid_t gid = sbi->options.fs_low_gid; |
| 177 | struct iattr newattrs; |
| 178 | |
Daniel Rosenberg | 7d10e43 | 2017-07-19 17:25:07 -0700 | [diff] [blame^] | 179 | if (!sbi->options.gid_derivation) |
| 180 | return; |
| 181 | |
Daniel Rosenberg | ad90525 | 2017-01-25 13:48:45 -0800 | [diff] [blame] | 182 | info = SDCARDFS_I(d_inode(dentry)); |
Daniel Rosenberg | a56a105 | 2017-05-15 14:03:15 -0700 | [diff] [blame] | 183 | info_d = info->data; |
| 184 | perm = info_d->perm; |
| 185 | if (info_d->under_obb) { |
Daniel Rosenberg | ad90525 | 2017-01-25 13:48:45 -0800 | [diff] [blame] | 186 | perm = PERM_ANDROID_OBB; |
Daniel Rosenberg | a56a105 | 2017-05-15 14:03:15 -0700 | [diff] [blame] | 187 | } else if (info_d->under_cache) { |
Daniel Rosenberg | ad90525 | 2017-01-25 13:48:45 -0800 | [diff] [blame] | 188 | perm = PERM_ANDROID_PACKAGE_CACHE; |
| 189 | } else if (perm == PERM_INHERIT) { |
Daniel Rosenberg | a56a105 | 2017-05-15 14:03:15 -0700 | [diff] [blame] | 190 | info_top = top_data_get(info); |
Daniel Rosenberg | ad90525 | 2017-01-25 13:48:45 -0800 | [diff] [blame] | 191 | perm = info_top->perm; |
Daniel Rosenberg | a56a105 | 2017-05-15 14:03:15 -0700 | [diff] [blame] | 192 | data_put(info_top); |
Daniel Rosenberg | ad90525 | 2017-01-25 13:48:45 -0800 | [diff] [blame] | 193 | } |
| 194 | |
| 195 | switch (perm) { |
| 196 | case PERM_ROOT: |
| 197 | case PERM_ANDROID: |
| 198 | case PERM_ANDROID_DATA: |
| 199 | case PERM_ANDROID_MEDIA: |
| 200 | case PERM_ANDROID_PACKAGE: |
| 201 | case PERM_ANDROID_PACKAGE_CACHE: |
Daniel Rosenberg | a56a105 | 2017-05-15 14:03:15 -0700 | [diff] [blame] | 202 | uid = multiuser_get_uid(info_d->userid, uid); |
Daniel Rosenberg | ad90525 | 2017-01-25 13:48:45 -0800 | [diff] [blame] | 203 | break; |
| 204 | case PERM_ANDROID_OBB: |
| 205 | uid = AID_MEDIA_OBB; |
| 206 | break; |
| 207 | case PERM_PRE_ROOT: |
| 208 | default: |
| 209 | break; |
| 210 | } |
| 211 | switch (perm) { |
| 212 | case PERM_ROOT: |
| 213 | case PERM_ANDROID: |
| 214 | case PERM_ANDROID_DATA: |
| 215 | case PERM_ANDROID_MEDIA: |
| 216 | if (S_ISDIR(d_inode(dentry)->i_mode)) |
Daniel Rosenberg | a56a105 | 2017-05-15 14:03:15 -0700 | [diff] [blame] | 217 | gid = multiuser_get_uid(info_d->userid, AID_MEDIA_RW); |
Daniel Rosenberg | ad90525 | 2017-01-25 13:48:45 -0800 | [diff] [blame] | 218 | else |
Daniel Rosenberg | a56a105 | 2017-05-15 14:03:15 -0700 | [diff] [blame] | 219 | gid = multiuser_get_uid(info_d->userid, get_type(name)); |
Daniel Rosenberg | ad90525 | 2017-01-25 13:48:45 -0800 | [diff] [blame] | 220 | break; |
| 221 | case PERM_ANDROID_OBB: |
| 222 | gid = AID_MEDIA_OBB; |
| 223 | break; |
| 224 | case PERM_ANDROID_PACKAGE: |
Daniel Rosenberg | a56a105 | 2017-05-15 14:03:15 -0700 | [diff] [blame] | 225 | if (uid_is_app(info_d->d_uid)) |
| 226 | gid = multiuser_get_ext_gid(info_d->d_uid); |
Daniel Rosenberg | ad90525 | 2017-01-25 13:48:45 -0800 | [diff] [blame] | 227 | else |
Daniel Rosenberg | a56a105 | 2017-05-15 14:03:15 -0700 | [diff] [blame] | 228 | gid = multiuser_get_uid(info_d->userid, AID_MEDIA_RW); |
Daniel Rosenberg | ad90525 | 2017-01-25 13:48:45 -0800 | [diff] [blame] | 229 | break; |
| 230 | case PERM_ANDROID_PACKAGE_CACHE: |
Daniel Rosenberg | a56a105 | 2017-05-15 14:03:15 -0700 | [diff] [blame] | 231 | if (uid_is_app(info_d->d_uid)) |
| 232 | gid = multiuser_get_ext_cache_gid(info_d->d_uid); |
Daniel Rosenberg | ad90525 | 2017-01-25 13:48:45 -0800 | [diff] [blame] | 233 | else |
Daniel Rosenberg | a56a105 | 2017-05-15 14:03:15 -0700 | [diff] [blame] | 234 | gid = multiuser_get_uid(info_d->userid, AID_MEDIA_RW); |
Daniel Rosenberg | ad90525 | 2017-01-25 13:48:45 -0800 | [diff] [blame] | 235 | break; |
| 236 | case PERM_PRE_ROOT: |
| 237 | default: |
| 238 | break; |
| 239 | } |
| 240 | |
| 241 | sdcardfs_get_lower_path(dentry, &path); |
| 242 | inode = d_inode(path.dentry); |
| 243 | if (d_inode(path.dentry)->i_gid.val != gid || d_inode(path.dentry)->i_uid.val != uid) { |
| 244 | retry_deleg: |
| 245 | newattrs.ia_valid = ATTR_GID | ATTR_UID | ATTR_FORCE; |
| 246 | newattrs.ia_uid = make_kuid(current_user_ns(), uid); |
| 247 | newattrs.ia_gid = make_kgid(current_user_ns(), gid); |
| 248 | if (!S_ISDIR(inode->i_mode)) |
| 249 | newattrs.ia_valid |= |
| 250 | ATTR_KILL_SUID | ATTR_KILL_SGID | ATTR_KILL_PRIV; |
| 251 | inode_lock(inode); |
| 252 | error = security_path_chown(&path, newattrs.ia_uid, newattrs.ia_gid); |
| 253 | if (!error) |
| 254 | error = notify_change2(path.mnt, path.dentry, &newattrs, &delegated_inode); |
| 255 | inode_unlock(inode); |
| 256 | if (delegated_inode) { |
| 257 | error = break_deleg_wait(&delegated_inode); |
| 258 | if (!error) |
| 259 | goto retry_deleg; |
| 260 | } |
| 261 | if (error) |
Daniel Rosenberg | 33efe54 | 2017-04-18 22:49:38 -0700 | [diff] [blame] | 262 | pr_debug("sdcardfs: Failed to touch up lower fs gid/uid for %s\n", name); |
Daniel Rosenberg | ad90525 | 2017-01-25 13:48:45 -0800 | [diff] [blame] | 263 | } |
Daniel Rosenberg | f61bc5a | 2017-02-16 17:55:22 -0800 | [diff] [blame] | 264 | sdcardfs_put_lower_path(dentry, &path); |
Daniel Rosenberg | 497ac90 | 2016-02-03 21:08:21 -0800 | [diff] [blame] | 265 | } |
| 266 | |
Daniel Rosenberg | a56a105 | 2017-05-15 14:03:15 -0700 | [diff] [blame] | 267 | static int descendant_may_need_fixup(struct sdcardfs_inode_data *data, |
| 268 | struct limit_search *limit) |
Daniel Rosenberg | d8caaf9 | 2017-01-22 15:32:49 -0800 | [diff] [blame] | 269 | { |
Daniel Rosenberg | a56a105 | 2017-05-15 14:03:15 -0700 | [diff] [blame] | 270 | if (data->perm == PERM_ROOT) |
| 271 | return (limit->flags & BY_USERID) ? |
| 272 | data->userid == limit->userid : 1; |
| 273 | if (data->perm == PERM_PRE_ROOT || data->perm == PERM_ANDROID) |
Daniel Rosenberg | 5080d24 | 2016-05-18 16:57:10 -0700 | [diff] [blame] | 274 | return 1; |
| 275 | return 0; |
| 276 | } |
| 277 | |
Daniel Rosenberg | 5e024f6 | 2017-03-16 17:42:58 -0700 | [diff] [blame] | 278 | static int needs_fixup(perm_t perm) |
| 279 | { |
Daniel Rosenberg | 5080d24 | 2016-05-18 16:57:10 -0700 | [diff] [blame] | 280 | if (perm == PERM_ANDROID_DATA || perm == PERM_ANDROID_OBB |
| 281 | || perm == PERM_ANDROID_MEDIA) |
| 282 | return 1; |
| 283 | return 0; |
| 284 | } |
| 285 | |
Daniel Rosenberg | fb4d191 | 2017-03-02 15:11:27 -0800 | [diff] [blame] | 286 | static void __fixup_perms_recursive(struct dentry *dentry, struct limit_search *limit, int depth) |
Daniel Rosenberg | d8caaf9 | 2017-01-22 15:32:49 -0800 | [diff] [blame] | 287 | { |
Daniel Rosenberg | 5080d24 | 2016-05-18 16:57:10 -0700 | [diff] [blame] | 288 | struct dentry *child; |
| 289 | struct sdcardfs_inode_info *info; |
Daniel Rosenberg | fb4d191 | 2017-03-02 15:11:27 -0800 | [diff] [blame] | 290 | |
| 291 | /* |
| 292 | * All paths will terminate their recursion on hitting PERM_ANDROID_OBB, |
| 293 | * PERM_ANDROID_MEDIA, or PERM_ANDROID_DATA. This happens at a depth of |
| 294 | * at most 3. |
| 295 | */ |
| 296 | WARN(depth > 3, "%s: Max expected depth exceeded!\n", __func__); |
| 297 | spin_lock_nested(&dentry->d_lock, depth); |
Daniel Rosenberg | 63d2076 | 2016-12-01 14:36:29 -0800 | [diff] [blame] | 298 | if (!d_inode(dentry)) { |
Daniel Rosenberg | fb4d191 | 2017-03-02 15:11:27 -0800 | [diff] [blame] | 299 | spin_unlock(&dentry->d_lock); |
Daniel Rosenberg | 5080d24 | 2016-05-18 16:57:10 -0700 | [diff] [blame] | 300 | return; |
| 301 | } |
| 302 | info = SDCARDFS_I(d_inode(dentry)); |
| 303 | |
Daniel Rosenberg | a56a105 | 2017-05-15 14:03:15 -0700 | [diff] [blame] | 304 | if (needs_fixup(info->data->perm)) { |
Daniel Rosenberg | 3adfc03 | 2016-12-27 12:36:29 -0800 | [diff] [blame] | 305 | list_for_each_entry(child, &dentry->d_subdirs, d_child) { |
Daniel Rosenberg | fb4d191 | 2017-03-02 15:11:27 -0800 | [diff] [blame] | 306 | spin_lock_nested(&child->d_lock, depth + 1); |
Daniel Rosenberg | 721274a | 2017-03-08 17:20:02 -0800 | [diff] [blame] | 307 | if (!(limit->flags & BY_NAME) || qstr_case_eq(&child->d_name, &limit->name)) { |
Daniel Rosenberg | d8caaf9 | 2017-01-22 15:32:49 -0800 | [diff] [blame] | 308 | if (d_inode(child)) { |
| 309 | get_derived_permission(dentry, child); |
| 310 | fixup_tmp_permissions(d_inode(child)); |
Daniel Rosenberg | fb4d191 | 2017-03-02 15:11:27 -0800 | [diff] [blame] | 311 | spin_unlock(&child->d_lock); |
Daniel Rosenberg | d8caaf9 | 2017-01-22 15:32:49 -0800 | [diff] [blame] | 312 | break; |
Daniel Rosenberg | 3adfc03 | 2016-12-27 12:36:29 -0800 | [diff] [blame] | 313 | } |
Daniel Rosenberg | d8caaf9 | 2017-01-22 15:32:49 -0800 | [diff] [blame] | 314 | } |
Daniel Rosenberg | fb4d191 | 2017-03-02 15:11:27 -0800 | [diff] [blame] | 315 | spin_unlock(&child->d_lock); |
Daniel Rosenberg | 5080d24 | 2016-05-18 16:57:10 -0700 | [diff] [blame] | 316 | } |
Daniel Rosenberg | a56a105 | 2017-05-15 14:03:15 -0700 | [diff] [blame] | 317 | } else if (descendant_may_need_fixup(info->data, limit)) { |
Daniel Rosenberg | 5080d24 | 2016-05-18 16:57:10 -0700 | [diff] [blame] | 318 | list_for_each_entry(child, &dentry->d_subdirs, d_child) { |
Daniel Rosenberg | 5e024f6 | 2017-03-16 17:42:58 -0700 | [diff] [blame] | 319 | __fixup_perms_recursive(child, limit, depth + 1); |
Daniel Rosenberg | 5080d24 | 2016-05-18 16:57:10 -0700 | [diff] [blame] | 320 | } |
Daniel Rosenberg | 5080d24 | 2016-05-18 16:57:10 -0700 | [diff] [blame] | 321 | } |
Daniel Rosenberg | fb4d191 | 2017-03-02 15:11:27 -0800 | [diff] [blame] | 322 | spin_unlock(&dentry->d_lock); |
| 323 | } |
| 324 | |
| 325 | void fixup_perms_recursive(struct dentry *dentry, struct limit_search *limit) |
| 326 | { |
| 327 | __fixup_perms_recursive(dentry, limit, 0); |
Daniel Rosenberg | 5080d24 | 2016-05-18 16:57:10 -0700 | [diff] [blame] | 328 | } |
| 329 | |
Daniel Campello | 35c9e24 | 2015-07-20 16:23:50 -0700 | [diff] [blame] | 330 | /* main function for updating derived permission */ |
Daniel Rosenberg | 497ac90 | 2016-02-03 21:08:21 -0800 | [diff] [blame] | 331 | inline void update_derived_permission_lock(struct dentry *dentry) |
Daniel Campello | 35c9e24 | 2015-07-20 16:23:50 -0700 | [diff] [blame] | 332 | { |
| 333 | struct dentry *parent; |
| 334 | |
Daniel Rosenberg | 5e024f6 | 2017-03-16 17:42:58 -0700 | [diff] [blame] | 335 | if (!dentry || !d_inode(dentry)) { |
Daniel Rosenberg | 77ecf21 | 2017-03-16 17:46:13 -0700 | [diff] [blame] | 336 | pr_err("sdcardfs: %s: invalid dentry\n", __func__); |
Daniel Campello | 35c9e24 | 2015-07-20 16:23:50 -0700 | [diff] [blame] | 337 | return; |
| 338 | } |
| 339 | /* FIXME: |
| 340 | * 1. need to check whether the dentry is updated or not |
| 341 | * 2. remove the root dentry update |
| 342 | */ |
Daniel Rosenberg | d64126c | 2017-03-16 19:33:35 -0700 | [diff] [blame] | 343 | if (!IS_ROOT(dentry)) { |
Daniel Campello | 35c9e24 | 2015-07-20 16:23:50 -0700 | [diff] [blame] | 344 | parent = dget_parent(dentry); |
Daniel Rosenberg | 5e024f6 | 2017-03-16 17:42:58 -0700 | [diff] [blame] | 345 | if (parent) { |
Daniel Campello | 35c9e24 | 2015-07-20 16:23:50 -0700 | [diff] [blame] | 346 | get_derived_permission(parent, dentry); |
| 347 | dput(parent); |
| 348 | } |
| 349 | } |
Daniel Rosenberg | 9021927 | 2016-10-26 20:27:20 -0700 | [diff] [blame] | 350 | fixup_tmp_permissions(d_inode(dentry)); |
Daniel Campello | 35c9e24 | 2015-07-20 16:23:50 -0700 | [diff] [blame] | 351 | } |
| 352 | |
| 353 | int need_graft_path(struct dentry *dentry) |
| 354 | { |
| 355 | int ret = 0; |
| 356 | struct dentry *parent = dget_parent(dentry); |
Daniel Rosenberg | 5e024f6 | 2017-03-16 17:42:58 -0700 | [diff] [blame] | 357 | struct sdcardfs_inode_info *parent_info = SDCARDFS_I(d_inode(parent)); |
Daniel Campello | 35c9e24 | 2015-07-20 16:23:50 -0700 | [diff] [blame] | 358 | struct sdcardfs_sb_info *sbi = SDCARDFS_SB(dentry->d_sb); |
Daniel Rosenberg | 5004c5f | 2017-01-31 20:07:51 -0800 | [diff] [blame] | 359 | struct qstr obb = QSTR_LITERAL("obb"); |
Daniel Campello | 35c9e24 | 2015-07-20 16:23:50 -0700 | [diff] [blame] | 360 | |
Daniel Rosenberg | a56a105 | 2017-05-15 14:03:15 -0700 | [diff] [blame] | 361 | if (parent_info->data->perm == PERM_ANDROID && |
Daniel Rosenberg | 5004c5f | 2017-01-31 20:07:51 -0800 | [diff] [blame] | 362 | qstr_case_eq(&dentry->d_name, &obb)) { |
Daniel Campello | 35c9e24 | 2015-07-20 16:23:50 -0700 | [diff] [blame] | 363 | |
| 364 | /* /Android/obb is the base obbpath of DERIVED_UNIFIED */ |
Daniel Rosenberg | 5e024f6 | 2017-03-16 17:42:58 -0700 | [diff] [blame] | 365 | if (!(sbi->options.multiuser == false |
Daniel Rosenberg | a56a105 | 2017-05-15 14:03:15 -0700 | [diff] [blame] | 366 | && parent_info->data->userid == 0)) { |
Daniel Campello | 35c9e24 | 2015-07-20 16:23:50 -0700 | [diff] [blame] | 367 | ret = 1; |
| 368 | } |
| 369 | } |
| 370 | dput(parent); |
| 371 | return ret; |
| 372 | } |
| 373 | |
| 374 | int is_obbpath_invalid(struct dentry *dent) |
| 375 | { |
| 376 | int ret = 0; |
| 377 | struct sdcardfs_dentry_info *di = SDCARDFS_D(dent); |
| 378 | struct sdcardfs_sb_info *sbi = SDCARDFS_SB(dent->d_sb); |
| 379 | char *path_buf, *obbpath_s; |
Daniel Rosenberg | e2538da | 2017-03-10 13:54:30 -0800 | [diff] [blame] | 380 | int need_put = 0; |
| 381 | struct path lower_path; |
Daniel Campello | 35c9e24 | 2015-07-20 16:23:50 -0700 | [diff] [blame] | 382 | |
| 383 | /* check the base obbpath has been changed. |
| 384 | * this routine can check an uninitialized obb dentry as well. |
Daniel Rosenberg | 5e024f6 | 2017-03-16 17:42:58 -0700 | [diff] [blame] | 385 | * regarding the uninitialized obb, refer to the sdcardfs_mkdir() |
| 386 | */ |
Daniel Campello | 35c9e24 | 2015-07-20 16:23:50 -0700 | [diff] [blame] | 387 | spin_lock(&di->lock); |
Daniel Rosenberg | 5e024f6 | 2017-03-16 17:42:58 -0700 | [diff] [blame] | 388 | if (di->orig_path.dentry) { |
| 389 | if (!di->lower_path.dentry) { |
Daniel Campello | 35c9e24 | 2015-07-20 16:23:50 -0700 | [diff] [blame] | 390 | ret = 1; |
| 391 | } else { |
| 392 | path_get(&di->lower_path); |
Daniel Campello | 35c9e24 | 2015-07-20 16:23:50 -0700 | [diff] [blame] | 393 | |
| 394 | path_buf = kmalloc(PATH_MAX, GFP_ATOMIC); |
Daniel Rosenberg | 5e024f6 | 2017-03-16 17:42:58 -0700 | [diff] [blame] | 395 | if (!path_buf) { |
Daniel Campello | 35c9e24 | 2015-07-20 16:23:50 -0700 | [diff] [blame] | 396 | ret = 1; |
Daniel Rosenberg | 77ecf21 | 2017-03-16 17:46:13 -0700 | [diff] [blame] | 397 | pr_err("sdcardfs: fail to allocate path_buf in %s.\n", __func__); |
Daniel Campello | 35c9e24 | 2015-07-20 16:23:50 -0700 | [diff] [blame] | 398 | } else { |
| 399 | obbpath_s = d_path(&di->lower_path, path_buf, PATH_MAX); |
| 400 | if (d_unhashed(di->lower_path.dentry) || |
Daniel Rosenberg | 5004c5f | 2017-01-31 20:07:51 -0800 | [diff] [blame] | 401 | !str_case_eq(sbi->obbpath_s, obbpath_s)) { |
Daniel Campello | 35c9e24 | 2015-07-20 16:23:50 -0700 | [diff] [blame] | 402 | ret = 1; |
| 403 | } |
| 404 | kfree(path_buf); |
| 405 | } |
| 406 | |
Daniel Rosenberg | e2538da | 2017-03-10 13:54:30 -0800 | [diff] [blame] | 407 | pathcpy(&lower_path, &di->lower_path); |
| 408 | need_put = 1; |
Daniel Campello | 35c9e24 | 2015-07-20 16:23:50 -0700 | [diff] [blame] | 409 | } |
| 410 | } |
| 411 | spin_unlock(&di->lock); |
Daniel Rosenberg | e2538da | 2017-03-10 13:54:30 -0800 | [diff] [blame] | 412 | if (need_put) |
| 413 | path_put(&lower_path); |
Daniel Campello | 35c9e24 | 2015-07-20 16:23:50 -0700 | [diff] [blame] | 414 | return ret; |
| 415 | } |
| 416 | |
| 417 | int is_base_obbpath(struct dentry *dentry) |
| 418 | { |
| 419 | int ret = 0; |
| 420 | struct dentry *parent = dget_parent(dentry); |
Daniel Rosenberg | 5e024f6 | 2017-03-16 17:42:58 -0700 | [diff] [blame] | 421 | struct sdcardfs_inode_info *parent_info = SDCARDFS_I(d_inode(parent)); |
Daniel Campello | 35c9e24 | 2015-07-20 16:23:50 -0700 | [diff] [blame] | 422 | struct sdcardfs_sb_info *sbi = SDCARDFS_SB(dentry->d_sb); |
Daniel Rosenberg | 5004c5f | 2017-01-31 20:07:51 -0800 | [diff] [blame] | 423 | struct qstr q_obb = QSTR_LITERAL("obb"); |
Daniel Campello | 35c9e24 | 2015-07-20 16:23:50 -0700 | [diff] [blame] | 424 | |
| 425 | spin_lock(&SDCARDFS_D(dentry)->lock); |
Daniel Rosenberg | 497ac90 | 2016-02-03 21:08:21 -0800 | [diff] [blame] | 426 | if (sbi->options.multiuser) { |
Daniel Rosenberg | a56a105 | 2017-05-15 14:03:15 -0700 | [diff] [blame] | 427 | if (parent_info->data->perm == PERM_PRE_ROOT && |
Daniel Rosenberg | 5004c5f | 2017-01-31 20:07:51 -0800 | [diff] [blame] | 428 | qstr_case_eq(&dentry->d_name, &q_obb)) { |
Daniel Rosenberg | 497ac90 | 2016-02-03 21:08:21 -0800 | [diff] [blame] | 429 | ret = 1; |
| 430 | } |
Daniel Rosenberg | a56a105 | 2017-05-15 14:03:15 -0700 | [diff] [blame] | 431 | } else if (parent_info->data->perm == PERM_ANDROID && |
Daniel Rosenberg | 5004c5f | 2017-01-31 20:07:51 -0800 | [diff] [blame] | 432 | qstr_case_eq(&dentry->d_name, &q_obb)) { |
Daniel Campello | 35c9e24 | 2015-07-20 16:23:50 -0700 | [diff] [blame] | 433 | ret = 1; |
| 434 | } |
Daniel Campello | 35c9e24 | 2015-07-20 16:23:50 -0700 | [diff] [blame] | 435 | spin_unlock(&SDCARDFS_D(dentry)->lock); |
Daniel Campello | 35c9e24 | 2015-07-20 16:23:50 -0700 | [diff] [blame] | 436 | return ret; |
| 437 | } |
| 438 | |
| 439 | /* The lower_path will be stored to the dentry's orig_path |
| 440 | * and the base obbpath will be copyed to the lower_path variable. |
| 441 | * if an error returned, there's no change in the lower_path |
Daniel Rosenberg | 5e024f6 | 2017-03-16 17:42:58 -0700 | [diff] [blame] | 442 | * returns: -ERRNO if error (0: no error) |
| 443 | */ |
Daniel Campello | 35c9e24 | 2015-07-20 16:23:50 -0700 | [diff] [blame] | 444 | int setup_obb_dentry(struct dentry *dentry, struct path *lower_path) |
| 445 | { |
| 446 | int err = 0; |
| 447 | struct sdcardfs_sb_info *sbi = SDCARDFS_SB(dentry->d_sb); |
| 448 | struct path obbpath; |
| 449 | |
| 450 | /* A local obb dentry must have its own orig_path to support rmdir |
| 451 | * and mkdir of itself. Usually, we expect that the sbi->obbpath |
Daniel Rosenberg | d64126c | 2017-03-16 19:33:35 -0700 | [diff] [blame] | 452 | * is avaiable on this stage. |
| 453 | */ |
Daniel Campello | 35c9e24 | 2015-07-20 16:23:50 -0700 | [diff] [blame] | 454 | sdcardfs_set_orig_path(dentry, lower_path); |
| 455 | |
| 456 | err = kern_path(sbi->obbpath_s, |
| 457 | LOOKUP_FOLLOW | LOOKUP_DIRECTORY, &obbpath); |
| 458 | |
Daniel Rosenberg | 5e024f6 | 2017-03-16 17:42:58 -0700 | [diff] [blame] | 459 | if (!err) { |
Daniel Campello | 35c9e24 | 2015-07-20 16:23:50 -0700 | [diff] [blame] | 460 | /* the obbpath base has been found */ |
Daniel Campello | 35c9e24 | 2015-07-20 16:23:50 -0700 | [diff] [blame] | 461 | pathcpy(lower_path, &obbpath); |
| 462 | } else { |
| 463 | /* if the sbi->obbpath is not available, we can optionally |
| 464 | * setup the lower_path with its orig_path. |
| 465 | * but, the current implementation just returns an error |
| 466 | * because the sdcard daemon also regards this case as |
Daniel Rosenberg | 5e024f6 | 2017-03-16 17:42:58 -0700 | [diff] [blame] | 467 | * a lookup fail. |
| 468 | */ |
Daniel Rosenberg | 77ecf21 | 2017-03-16 17:46:13 -0700 | [diff] [blame] | 469 | pr_info("sdcardfs: the sbi->obbpath is not available\n"); |
Daniel Campello | 35c9e24 | 2015-07-20 16:23:50 -0700 | [diff] [blame] | 470 | } |
| 471 | return err; |
| 472 | } |
| 473 | |
| 474 | |