blob: 85d7cf7ff2c8f263780433f54abd101a2ca3d831 [file] [log] [blame]
Steve Frenchbcb02032007-09-25 16:17:24 +00001/*
2 * fs/cifs/cifsacl.c
3 *
Steve French8b1327f2008-03-14 22:37:16 +00004 * Copyright (C) International Business Machines Corp., 2007,2008
Steve Frenchbcb02032007-09-25 16:17:24 +00005 * Author(s): Steve French (sfrench@us.ibm.com)
6 *
7 * Contains the routines for mapping CIFS/NTFS ACLs
8 *
9 * This library is free software; you can redistribute it and/or modify
10 * it under the terms of the GNU Lesser General Public License as published
11 * by the Free Software Foundation; either version 2.1 of the License, or
12 * (at your option) any later version.
13 *
14 * This library is distributed in the hope that it will be useful,
15 * but WITHOUT ANY WARRANTY; without even the implied warranty of
16 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See
17 * the GNU Lesser General Public License for more details.
18 *
19 * You should have received a copy of the GNU Lesser General Public License
20 * along with this library; if not, write to the Free Software
21 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
22 */
23
Steve French65874002007-09-25 19:53:44 +000024#include <linux/fs.h>
Tejun Heo5a0e3ad2010-03-24 17:04:11 +090025#include <linux/slab.h>
Steve French65874002007-09-25 19:53:44 +000026#include "cifspdu.h"
27#include "cifsglob.h"
Shirish Pargaonkard0d66c42007-10-03 18:22:19 +000028#include "cifsacl.h"
Steve French65874002007-09-25 19:53:44 +000029#include "cifsproto.h"
30#include "cifs_debug.h"
Steve French65874002007-09-25 19:53:44 +000031
Steve French297647c2007-10-12 04:11:59 +000032
33#ifdef CONFIG_CIFS_EXPERIMENTAL
34
Steve Frenchaf6f4612007-10-16 18:40:37 +000035static struct cifs_wksid wksidarr[NUM_WK_SIDS] = {
Steve French297647c2007-10-12 04:11:59 +000036 {{1, 0, {0, 0, 0, 0, 0, 0}, {0, 0, 0, 0, 0} }, "null user"},
37 {{1, 1, {0, 0, 0, 0, 0, 1}, {0, 0, 0, 0, 0} }, "nobody"},
Jeff Layton536abdb2008-07-12 13:48:00 -070038 {{1, 1, {0, 0, 0, 0, 0, 5}, {__constant_cpu_to_le32(11), 0, 0, 0, 0} }, "net-users"},
39 {{1, 1, {0, 0, 0, 0, 0, 5}, {__constant_cpu_to_le32(18), 0, 0, 0, 0} }, "sys"},
40 {{1, 2, {0, 0, 0, 0, 0, 5}, {__constant_cpu_to_le32(32), __constant_cpu_to_le32(544), 0, 0, 0} }, "root"},
41 {{1, 2, {0, 0, 0, 0, 0, 5}, {__constant_cpu_to_le32(32), __constant_cpu_to_le32(545), 0, 0, 0} }, "users"},
42 {{1, 2, {0, 0, 0, 0, 0, 5}, {__constant_cpu_to_le32(32), __constant_cpu_to_le32(546), 0, 0, 0} }, "guest"} }
Steve French44093ca2007-10-23 21:22:55 +000043;
Steve French297647c2007-10-12 04:11:59 +000044
45
Steve Frenchbcb02032007-09-25 16:17:24 +000046/* security id for everyone */
Shirish Pargaonkare01b6402007-10-30 04:45:14 +000047static const struct cifs_sid sid_everyone = {
48 1, 1, {0, 0, 0, 0, 0, 1}, {0} };
Steve Frenchbcb02032007-09-25 16:17:24 +000049/* group users */
Steve Frenchad7a2922008-02-07 23:25:02 +000050static const struct cifs_sid sid_user = {1, 2 , {0, 0, 0, 0, 0, 5}, {} };
Shirish Pargaonkard0d66c42007-10-03 18:22:19 +000051
Steve French297647c2007-10-12 04:11:59 +000052
53int match_sid(struct cifs_sid *ctsid)
54{
55 int i, j;
56 int num_subauth, num_sat, num_saw;
57 struct cifs_sid *cwsid;
58
59 if (!ctsid)
Shirish Pargaonkaref571ca2008-07-24 15:56:05 +000060 return -1;
Steve French297647c2007-10-12 04:11:59 +000061
62 for (i = 0; i < NUM_WK_SIDS; ++i) {
63 cwsid = &(wksidarr[i].cifssid);
64
65 /* compare the revision */
66 if (ctsid->revision != cwsid->revision)
67 continue;
68
69 /* compare all of the six auth values */
70 for (j = 0; j < 6; ++j) {
71 if (ctsid->authority[j] != cwsid->authority[j])
72 break;
73 }
74 if (j < 6)
75 continue; /* all of the auth values did not match */
76
77 /* compare all of the subauth values if any */
Dave Kleikampce51ae12007-10-16 21:35:39 +000078 num_sat = ctsid->num_subauth;
79 num_saw = cwsid->num_subauth;
Steve French297647c2007-10-12 04:11:59 +000080 num_subauth = num_sat < num_saw ? num_sat : num_saw;
81 if (num_subauth) {
82 for (j = 0; j < num_subauth; ++j) {
83 if (ctsid->sub_auth[j] != cwsid->sub_auth[j])
84 break;
85 }
86 if (j < num_subauth)
87 continue; /* all sub_auth values do not match */
88 }
89
Joe Perchesb6b38f72010-04-21 03:50:45 +000090 cFYI(1, "matching sid: %s\n", wksidarr[i].sidname);
Shirish Pargaonkaref571ca2008-07-24 15:56:05 +000091 return 0; /* sids compare/match */
Steve French297647c2007-10-12 04:11:59 +000092 }
93
Joe Perchesb6b38f72010-04-21 03:50:45 +000094 cFYI(1, "No matching sid");
Shirish Pargaonkaref571ca2008-07-24 15:56:05 +000095 return -1;
Steve French297647c2007-10-12 04:11:59 +000096}
97
Steve Frencha750e772007-10-17 22:50:39 +000098/* if the two SIDs (roughly equivalent to a UUID for a user or group) are
99 the same returns 1, if they do not match returns 0 */
Steve French630f3f0c2007-10-25 21:17:17 +0000100int compare_sids(const struct cifs_sid *ctsid, const struct cifs_sid *cwsid)
Steve French297647c2007-10-12 04:11:59 +0000101{
102 int i;
103 int num_subauth, num_sat, num_saw;
104
105 if ((!ctsid) || (!cwsid))
Shirish Pargaonkaref571ca2008-07-24 15:56:05 +0000106 return 0;
Steve French297647c2007-10-12 04:11:59 +0000107
108 /* compare the revision */
109 if (ctsid->revision != cwsid->revision)
Shirish Pargaonkaref571ca2008-07-24 15:56:05 +0000110 return 0;
Steve French297647c2007-10-12 04:11:59 +0000111
112 /* compare all of the six auth values */
113 for (i = 0; i < 6; ++i) {
114 if (ctsid->authority[i] != cwsid->authority[i])
Shirish Pargaonkaref571ca2008-07-24 15:56:05 +0000115 return 0;
Steve French297647c2007-10-12 04:11:59 +0000116 }
117
118 /* compare all of the subauth values if any */
Steve Frenchadbc0352007-10-17 02:12:46 +0000119 num_sat = ctsid->num_subauth;
Steve Frenchadddd492007-10-17 02:48:17 +0000120 num_saw = cwsid->num_subauth;
Steve French297647c2007-10-12 04:11:59 +0000121 num_subauth = num_sat < num_saw ? num_sat : num_saw;
122 if (num_subauth) {
123 for (i = 0; i < num_subauth; ++i) {
124 if (ctsid->sub_auth[i] != cwsid->sub_auth[i])
Shirish Pargaonkaref571ca2008-07-24 15:56:05 +0000125 return 0;
Steve French297647c2007-10-12 04:11:59 +0000126 }
127 }
128
Shirish Pargaonkaref571ca2008-07-24 15:56:05 +0000129 return 1; /* sids compare/match */
Steve French297647c2007-10-12 04:11:59 +0000130}
131
Steve French97837582007-12-31 07:47:21 +0000132
133/* copy ntsd, owner sid, and group sid from a security descriptor to another */
134static void copy_sec_desc(const struct cifs_ntsd *pntsd,
135 struct cifs_ntsd *pnntsd, __u32 sidsoffset)
136{
137 int i;
138
139 struct cifs_sid *owner_sid_ptr, *group_sid_ptr;
140 struct cifs_sid *nowner_sid_ptr, *ngroup_sid_ptr;
141
142 /* copy security descriptor control portion */
143 pnntsd->revision = pntsd->revision;
144 pnntsd->type = pntsd->type;
145 pnntsd->dacloffset = cpu_to_le32(sizeof(struct cifs_ntsd));
146 pnntsd->sacloffset = 0;
147 pnntsd->osidoffset = cpu_to_le32(sidsoffset);
148 pnntsd->gsidoffset = cpu_to_le32(sidsoffset + sizeof(struct cifs_sid));
149
150 /* copy owner sid */
151 owner_sid_ptr = (struct cifs_sid *)((char *)pntsd +
152 le32_to_cpu(pntsd->osidoffset));
153 nowner_sid_ptr = (struct cifs_sid *)((char *)pnntsd + sidsoffset);
154
155 nowner_sid_ptr->revision = owner_sid_ptr->revision;
156 nowner_sid_ptr->num_subauth = owner_sid_ptr->num_subauth;
157 for (i = 0; i < 6; i++)
158 nowner_sid_ptr->authority[i] = owner_sid_ptr->authority[i];
159 for (i = 0; i < 5; i++)
160 nowner_sid_ptr->sub_auth[i] = owner_sid_ptr->sub_auth[i];
161
162 /* copy group sid */
163 group_sid_ptr = (struct cifs_sid *)((char *)pntsd +
164 le32_to_cpu(pntsd->gsidoffset));
165 ngroup_sid_ptr = (struct cifs_sid *)((char *)pnntsd + sidsoffset +
166 sizeof(struct cifs_sid));
167
168 ngroup_sid_ptr->revision = group_sid_ptr->revision;
169 ngroup_sid_ptr->num_subauth = group_sid_ptr->num_subauth;
170 for (i = 0; i < 6; i++)
171 ngroup_sid_ptr->authority[i] = group_sid_ptr->authority[i];
172 for (i = 0; i < 5; i++)
Shirish Pargaonkarb1910ad2008-07-24 14:53:20 +0000173 ngroup_sid_ptr->sub_auth[i] = group_sid_ptr->sub_auth[i];
Steve French97837582007-12-31 07:47:21 +0000174
175 return;
176}
177
178
Steve French630f3f0c2007-10-25 21:17:17 +0000179/*
180 change posix mode to reflect permissions
181 pmode is the existing mode (we only want to overwrite part of this
182 bits to set can be: S_IRWXU, S_IRWXG or S_IRWXO ie 00700 or 00070 or 00007
183*/
Al Viro9b5e6852007-12-05 08:24:38 +0000184static void access_flags_to_mode(__le32 ace_flags, int type, umode_t *pmode,
Steve French15b03952007-11-08 17:57:40 +0000185 umode_t *pbits_to_set)
Steve French4879b442007-10-19 21:57:39 +0000186{
Al Viro9b5e6852007-12-05 08:24:38 +0000187 __u32 flags = le32_to_cpu(ace_flags);
Steve French15b03952007-11-08 17:57:40 +0000188 /* the order of ACEs is important. The canonical order is to begin with
Steve Frenchce06c9f2007-11-08 21:12:01 +0000189 DENY entries followed by ALLOW, otherwise an allow entry could be
Steve French15b03952007-11-08 17:57:40 +0000190 encountered first, making the subsequent deny entry like "dead code"
Steve Frenchce06c9f2007-11-08 21:12:01 +0000191 which would be superflous since Windows stops when a match is made
Steve French15b03952007-11-08 17:57:40 +0000192 for the operation you are trying to perform for your user */
193
194 /* For deny ACEs we change the mask so that subsequent allow access
195 control entries do not turn on the bits we are denying */
196 if (type == ACCESS_DENIED) {
Steve Frenchad7a2922008-02-07 23:25:02 +0000197 if (flags & GENERIC_ALL)
Steve French15b03952007-11-08 17:57:40 +0000198 *pbits_to_set &= ~S_IRWXUGO;
Steve Frenchad7a2922008-02-07 23:25:02 +0000199
Al Viro9b5e6852007-12-05 08:24:38 +0000200 if ((flags & GENERIC_WRITE) ||
201 ((flags & FILE_WRITE_RIGHTS) == FILE_WRITE_RIGHTS))
Steve French15b03952007-11-08 17:57:40 +0000202 *pbits_to_set &= ~S_IWUGO;
Al Viro9b5e6852007-12-05 08:24:38 +0000203 if ((flags & GENERIC_READ) ||
204 ((flags & FILE_READ_RIGHTS) == FILE_READ_RIGHTS))
Steve French15b03952007-11-08 17:57:40 +0000205 *pbits_to_set &= ~S_IRUGO;
Al Viro9b5e6852007-12-05 08:24:38 +0000206 if ((flags & GENERIC_EXECUTE) ||
207 ((flags & FILE_EXEC_RIGHTS) == FILE_EXEC_RIGHTS))
Steve French15b03952007-11-08 17:57:40 +0000208 *pbits_to_set &= ~S_IXUGO;
209 return;
210 } else if (type != ACCESS_ALLOWED) {
Joe Perchesb6b38f72010-04-21 03:50:45 +0000211 cERROR(1, "unknown access control type %d", type);
Steve French15b03952007-11-08 17:57:40 +0000212 return;
213 }
214 /* else ACCESS_ALLOWED type */
Steve French44093ca2007-10-23 21:22:55 +0000215
Al Viro9b5e6852007-12-05 08:24:38 +0000216 if (flags & GENERIC_ALL) {
Steve French15b03952007-11-08 17:57:40 +0000217 *pmode |= (S_IRWXUGO & (*pbits_to_set));
Joe Perchesb6b38f72010-04-21 03:50:45 +0000218 cFYI(DBG2, "all perms");
Steve Frenchd61e5802007-10-26 04:32:43 +0000219 return;
220 }
Al Viro9b5e6852007-12-05 08:24:38 +0000221 if ((flags & GENERIC_WRITE) ||
222 ((flags & FILE_WRITE_RIGHTS) == FILE_WRITE_RIGHTS))
Steve French15b03952007-11-08 17:57:40 +0000223 *pmode |= (S_IWUGO & (*pbits_to_set));
Al Viro9b5e6852007-12-05 08:24:38 +0000224 if ((flags & GENERIC_READ) ||
225 ((flags & FILE_READ_RIGHTS) == FILE_READ_RIGHTS))
Steve French15b03952007-11-08 17:57:40 +0000226 *pmode |= (S_IRUGO & (*pbits_to_set));
Al Viro9b5e6852007-12-05 08:24:38 +0000227 if ((flags & GENERIC_EXECUTE) ||
228 ((flags & FILE_EXEC_RIGHTS) == FILE_EXEC_RIGHTS))
Steve French15b03952007-11-08 17:57:40 +0000229 *pmode |= (S_IXUGO & (*pbits_to_set));
Steve Frenchd61e5802007-10-26 04:32:43 +0000230
Joe Perchesb6b38f72010-04-21 03:50:45 +0000231 cFYI(DBG2, "access flags 0x%x mode now 0x%x", flags, *pmode);
Steve French630f3f0c2007-10-25 21:17:17 +0000232 return;
233}
234
Steve Frenchce06c9f2007-11-08 21:12:01 +0000235/*
236 Generate access flags to reflect permissions mode is the existing mode.
237 This function is called for every ACE in the DACL whose SID matches
238 with either owner or group or everyone.
239*/
240
241static void mode_to_access_flags(umode_t mode, umode_t bits_to_use,
242 __u32 *pace_flags)
243{
244 /* reset access mask */
245 *pace_flags = 0x0;
246
247 /* bits to use are either S_IRWXU or S_IRWXG or S_IRWXO */
248 mode &= bits_to_use;
249
250 /* check for R/W/X UGO since we do not know whose flags
251 is this but we have cleared all the bits sans RWX for
252 either user or group or other as per bits_to_use */
253 if (mode & S_IRUGO)
254 *pace_flags |= SET_FILE_READ_RIGHTS;
255 if (mode & S_IWUGO)
256 *pace_flags |= SET_FILE_WRITE_RIGHTS;
257 if (mode & S_IXUGO)
258 *pace_flags |= SET_FILE_EXEC_RIGHTS;
259
Joe Perchesb6b38f72010-04-21 03:50:45 +0000260 cFYI(DBG2, "mode: 0x%x, access flags now 0x%x", mode, *pace_flags);
Steve Frenchce06c9f2007-11-08 21:12:01 +0000261 return;
262}
263
Al Viro2b210ad2008-03-29 03:09:18 +0000264static __u16 fill_ace_for_sid(struct cifs_ace *pntace,
Steve French97837582007-12-31 07:47:21 +0000265 const struct cifs_sid *psid, __u64 nmode, umode_t bits)
266{
267 int i;
268 __u16 size = 0;
269 __u32 access_req = 0;
270
271 pntace->type = ACCESS_ALLOWED;
272 pntace->flags = 0x0;
273 mode_to_access_flags(nmode, bits, &access_req);
274 if (!access_req)
275 access_req = SET_MINIMUM_RIGHTS;
276 pntace->access_req = cpu_to_le32(access_req);
277
278 pntace->sid.revision = psid->revision;
279 pntace->sid.num_subauth = psid->num_subauth;
280 for (i = 0; i < 6; i++)
281 pntace->sid.authority[i] = psid->authority[i];
282 for (i = 0; i < psid->num_subauth; i++)
283 pntace->sid.sub_auth[i] = psid->sub_auth[i];
284
285 size = 1 + 1 + 2 + 4 + 1 + 1 + 6 + (psid->num_subauth * 4);
286 pntace->size = cpu_to_le16(size);
287
Shirish Pargaonkaref571ca2008-07-24 15:56:05 +0000288 return size;
Steve French97837582007-12-31 07:47:21 +0000289}
290
Steve French297647c2007-10-12 04:11:59 +0000291
Steve French953f8682007-10-31 04:54:42 +0000292#ifdef CONFIG_CIFS_DEBUG2
293static void dump_ace(struct cifs_ace *pace, char *end_of_acl)
Shirish Pargaonkard0d66c42007-10-03 18:22:19 +0000294{
Shirish Pargaonkard0d66c42007-10-03 18:22:19 +0000295 int num_subauth;
Shirish Pargaonkard0d66c42007-10-03 18:22:19 +0000296
297 /* validate that we do not go past end of acl */
Steve French297647c2007-10-12 04:11:59 +0000298
Steve French44093ca2007-10-23 21:22:55 +0000299 if (le16_to_cpu(pace->size) < 16) {
Joe Perchesb6b38f72010-04-21 03:50:45 +0000300 cERROR(1, "ACE too small %d", le16_to_cpu(pace->size));
Steve French44093ca2007-10-23 21:22:55 +0000301 return;
302 }
303
304 if (end_of_acl < (char *)pace + le16_to_cpu(pace->size)) {
Joe Perchesb6b38f72010-04-21 03:50:45 +0000305 cERROR(1, "ACL too small to parse ACE");
Shirish Pargaonkard0d66c42007-10-03 18:22:19 +0000306 return;
Steve French44093ca2007-10-23 21:22:55 +0000307 }
Shirish Pargaonkard0d66c42007-10-03 18:22:19 +0000308
Steve French44093ca2007-10-23 21:22:55 +0000309 num_subauth = pace->sid.num_subauth;
Shirish Pargaonkard0d66c42007-10-03 18:22:19 +0000310 if (num_subauth) {
Steve French8f18c132007-10-12 18:54:12 +0000311 int i;
Joe Perchesb6b38f72010-04-21 03:50:45 +0000312 cFYI(1, "ACE revision %d num_auth %d type %d flags %d size %d",
Steve French44093ca2007-10-23 21:22:55 +0000313 pace->sid.revision, pace->sid.num_subauth, pace->type,
Joe Perchesb6b38f72010-04-21 03:50:45 +0000314 pace->flags, le16_to_cpu(pace->size));
Steve Frenchd12fd122007-10-03 19:43:19 +0000315 for (i = 0; i < num_subauth; ++i) {
Joe Perchesb6b38f72010-04-21 03:50:45 +0000316 cFYI(1, "ACE sub_auth[%d]: 0x%x", i,
317 le32_to_cpu(pace->sid.sub_auth[i]));
Steve Frenchd12fd122007-10-03 19:43:19 +0000318 }
Shirish Pargaonkard0d66c42007-10-03 18:22:19 +0000319
Steve Frenchd12fd122007-10-03 19:43:19 +0000320 /* BB add length check to make sure that we do not have huge
321 num auths and therefore go off the end */
Steve Frenchd12fd122007-10-03 19:43:19 +0000322 }
Shirish Pargaonkard0d66c42007-10-03 18:22:19 +0000323
Steve Frenchd12fd122007-10-03 19:43:19 +0000324 return;
325}
Steve French953f8682007-10-31 04:54:42 +0000326#endif
Shirish Pargaonkard0d66c42007-10-03 18:22:19 +0000327
Shirish Pargaonkard0d66c42007-10-03 18:22:19 +0000328
Steve Frencha750e772007-10-17 22:50:39 +0000329static void parse_dacl(struct cifs_acl *pdacl, char *end_of_acl,
Steve Frenchd61e5802007-10-26 04:32:43 +0000330 struct cifs_sid *pownersid, struct cifs_sid *pgrpsid,
Jeff Layton0b8f18e2009-07-09 01:46:37 -0400331 struct cifs_fattr *fattr)
Shirish Pargaonkard0d66c42007-10-03 18:22:19 +0000332{
333 int i;
334 int num_aces = 0;
335 int acl_size;
336 char *acl_base;
Shirish Pargaonkard0d66c42007-10-03 18:22:19 +0000337 struct cifs_ace **ppace;
338
339 /* BB need to add parm so we can store the SID BB */
340
Steve French2b834572007-11-25 10:01:00 +0000341 if (!pdacl) {
342 /* no DACL in the security descriptor, set
343 all the permissions for user/group/other */
Jeff Layton0b8f18e2009-07-09 01:46:37 -0400344 fattr->cf_mode |= S_IRWXUGO;
Steve French2b834572007-11-25 10:01:00 +0000345 return;
346 }
347
Shirish Pargaonkard0d66c42007-10-03 18:22:19 +0000348 /* validate that we do not go past end of acl */
Steve Frenchaf6f4612007-10-16 18:40:37 +0000349 if (end_of_acl < (char *)pdacl + le16_to_cpu(pdacl->size)) {
Joe Perchesb6b38f72010-04-21 03:50:45 +0000350 cERROR(1, "ACL too small to parse DACL");
Shirish Pargaonkard0d66c42007-10-03 18:22:19 +0000351 return;
352 }
353
Joe Perchesb6b38f72010-04-21 03:50:45 +0000354 cFYI(DBG2, "DACL revision %d size %d num aces %d",
Steve Frenchaf6f4612007-10-16 18:40:37 +0000355 le16_to_cpu(pdacl->revision), le16_to_cpu(pdacl->size),
Joe Perchesb6b38f72010-04-21 03:50:45 +0000356 le32_to_cpu(pdacl->num_aces));
Shirish Pargaonkard0d66c42007-10-03 18:22:19 +0000357
Steve French7505e052007-11-01 18:03:01 +0000358 /* reset rwx permissions for user/group/other.
359 Also, if num_aces is 0 i.e. DACL has no ACEs,
360 user/group/other have no permissions */
Jeff Layton0b8f18e2009-07-09 01:46:37 -0400361 fattr->cf_mode &= ~(S_IRWXUGO);
Steve French7505e052007-11-01 18:03:01 +0000362
Shirish Pargaonkard0d66c42007-10-03 18:22:19 +0000363 acl_base = (char *)pdacl;
364 acl_size = sizeof(struct cifs_acl);
365
Steve Frenchadbc0352007-10-17 02:12:46 +0000366 num_aces = le32_to_cpu(pdacl->num_aces);
Shirish Pargaonkard0d66c42007-10-03 18:22:19 +0000367 if (num_aces > 0) {
Steve French15b03952007-11-08 17:57:40 +0000368 umode_t user_mask = S_IRWXU;
369 umode_t group_mask = S_IRWXG;
370 umode_t other_mask = S_IRWXO;
371
Shirish Pargaonkard0d66c42007-10-03 18:22:19 +0000372 ppace = kmalloc(num_aces * sizeof(struct cifs_ace *),
373 GFP_KERNEL);
374
Shirish Pargaonkard0d66c42007-10-03 18:22:19 +0000375 for (i = 0; i < num_aces; ++i) {
Steve French44093ca2007-10-23 21:22:55 +0000376 ppace[i] = (struct cifs_ace *) (acl_base + acl_size);
Steve French953f8682007-10-31 04:54:42 +0000377#ifdef CONFIG_CIFS_DEBUG2
378 dump_ace(ppace[i], end_of_acl);
379#endif
Shirish Pargaonkare01b6402007-10-30 04:45:14 +0000380 if (compare_sids(&(ppace[i]->sid), pownersid))
381 access_flags_to_mode(ppace[i]->access_req,
Steve French15b03952007-11-08 17:57:40 +0000382 ppace[i]->type,
Jeff Layton0b8f18e2009-07-09 01:46:37 -0400383 &fattr->cf_mode,
Steve French15b03952007-11-08 17:57:40 +0000384 &user_mask);
Shirish Pargaonkare01b6402007-10-30 04:45:14 +0000385 if (compare_sids(&(ppace[i]->sid), pgrpsid))
386 access_flags_to_mode(ppace[i]->access_req,
Steve French15b03952007-11-08 17:57:40 +0000387 ppace[i]->type,
Jeff Layton0b8f18e2009-07-09 01:46:37 -0400388 &fattr->cf_mode,
Steve French15b03952007-11-08 17:57:40 +0000389 &group_mask);
Shirish Pargaonkare01b6402007-10-30 04:45:14 +0000390 if (compare_sids(&(ppace[i]->sid), &sid_everyone))
391 access_flags_to_mode(ppace[i]->access_req,
Steve French15b03952007-11-08 17:57:40 +0000392 ppace[i]->type,
Jeff Layton0b8f18e2009-07-09 01:46:37 -0400393 &fattr->cf_mode,
Steve French15b03952007-11-08 17:57:40 +0000394 &other_mask);
Shirish Pargaonkare01b6402007-10-30 04:45:14 +0000395
Steve French44093ca2007-10-23 21:22:55 +0000396/* memcpy((void *)(&(cifscred->aces[i])),
Steve Frenchd12fd122007-10-03 19:43:19 +0000397 (void *)ppace[i],
398 sizeof(struct cifs_ace)); */
Shirish Pargaonkard0d66c42007-10-03 18:22:19 +0000399
Steve French44093ca2007-10-23 21:22:55 +0000400 acl_base = (char *)ppace[i];
401 acl_size = le16_to_cpu(ppace[i]->size);
Shirish Pargaonkard0d66c42007-10-03 18:22:19 +0000402 }
403
404 kfree(ppace);
Shirish Pargaonkard0d66c42007-10-03 18:22:19 +0000405 }
406
407 return;
408}
409
Steve Frenchbcb02032007-09-25 16:17:24 +0000410
Steve French97837582007-12-31 07:47:21 +0000411static int set_chmod_dacl(struct cifs_acl *pndacl, struct cifs_sid *pownersid,
412 struct cifs_sid *pgrpsid, __u64 nmode)
413{
Al Viro2b210ad2008-03-29 03:09:18 +0000414 u16 size = 0;
Steve French97837582007-12-31 07:47:21 +0000415 struct cifs_acl *pnndacl;
416
417 pnndacl = (struct cifs_acl *)((char *)pndacl + sizeof(struct cifs_acl));
418
419 size += fill_ace_for_sid((struct cifs_ace *) ((char *)pnndacl + size),
420 pownersid, nmode, S_IRWXU);
421 size += fill_ace_for_sid((struct cifs_ace *)((char *)pnndacl + size),
422 pgrpsid, nmode, S_IRWXG);
423 size += fill_ace_for_sid((struct cifs_ace *)((char *)pnndacl + size),
424 &sid_everyone, nmode, S_IRWXO);
425
426 pndacl->size = cpu_to_le16(size + sizeof(struct cifs_acl));
Shirish Pargaonkard9f382e2008-02-12 20:46:26 +0000427 pndacl->num_aces = cpu_to_le32(3);
Steve French97837582007-12-31 07:47:21 +0000428
Shirish Pargaonkaref571ca2008-07-24 15:56:05 +0000429 return 0;
Steve French97837582007-12-31 07:47:21 +0000430}
431
432
Steve Frenchbcb02032007-09-25 16:17:24 +0000433static int parse_sid(struct cifs_sid *psid, char *end_of_acl)
434{
435 /* BB need to add parm so we can store the SID BB */
436
Steve Frenchb9c7a2b2007-10-26 23:40:20 +0000437 /* validate that we do not go past end of ACL - sid must be at least 8
438 bytes long (assuming no sub-auths - e.g. the null SID */
439 if (end_of_acl < (char *)psid + 8) {
Joe Perchesb6b38f72010-04-21 03:50:45 +0000440 cERROR(1, "ACL too small to parse SID %p", psid);
Steve Frenchbcb02032007-09-25 16:17:24 +0000441 return -EINVAL;
442 }
Steve Frenchbcb02032007-09-25 16:17:24 +0000443
Steve Frenchaf6f4612007-10-16 18:40:37 +0000444 if (psid->num_subauth) {
Shirish Pargaonkard0d66c42007-10-03 18:22:19 +0000445#ifdef CONFIG_CIFS_DEBUG2
Steve French8f18c132007-10-12 18:54:12 +0000446 int i;
Joe Perchesb6b38f72010-04-21 03:50:45 +0000447 cFYI(1, "SID revision %d num_auth %d",
448 psid->revision, psid->num_subauth);
Shirish Pargaonkard0d66c42007-10-03 18:22:19 +0000449
Steve Frenchaf6f4612007-10-16 18:40:37 +0000450 for (i = 0; i < psid->num_subauth; i++) {
Joe Perchesb6b38f72010-04-21 03:50:45 +0000451 cFYI(1, "SID sub_auth[%d]: 0x%x ", i,
452 le32_to_cpu(psid->sub_auth[i]));
Shirish Pargaonkard0d66c42007-10-03 18:22:19 +0000453 }
454
Steve Frenchd12fd122007-10-03 19:43:19 +0000455 /* BB add length check to make sure that we do not have huge
Shirish Pargaonkard0d66c42007-10-03 18:22:19 +0000456 num auths and therefore go off the end */
Joe Perchesb6b38f72010-04-21 03:50:45 +0000457 cFYI(1, "RID 0x%x",
458 le32_to_cpu(psid->sub_auth[psid->num_subauth-1]));
Steve Frenchbcb02032007-09-25 16:17:24 +0000459#endif
Shirish Pargaonkard0d66c42007-10-03 18:22:19 +0000460 }
461
Steve Frenchbcb02032007-09-25 16:17:24 +0000462 return 0;
463}
464
Shirish Pargaonkard0d66c42007-10-03 18:22:19 +0000465
Steve Frenchbcb02032007-09-25 16:17:24 +0000466/* Convert CIFS ACL to POSIX form */
Steve French630f3f0c2007-10-25 21:17:17 +0000467static int parse_sec_desc(struct cifs_ntsd *pntsd, int acl_len,
Jeff Layton0b8f18e2009-07-09 01:46:37 -0400468 struct cifs_fattr *fattr)
Steve Frenchbcb02032007-09-25 16:17:24 +0000469{
Shirish Pargaonkard0d66c42007-10-03 18:22:19 +0000470 int rc;
Steve Frenchbcb02032007-09-25 16:17:24 +0000471 struct cifs_sid *owner_sid_ptr, *group_sid_ptr;
472 struct cifs_acl *dacl_ptr; /* no need for SACL ptr */
Steve Frenchbcb02032007-09-25 16:17:24 +0000473 char *end_of_acl = ((char *)pntsd) + acl_len;
Steve French7505e052007-11-01 18:03:01 +0000474 __u32 dacloffset;
Steve Frenchbcb02032007-09-25 16:17:24 +0000475
Jeff Layton0b8f18e2009-07-09 01:46:37 -0400476 if (pntsd == NULL)
Steve Frenchb9c7a2b2007-10-26 23:40:20 +0000477 return -EIO;
478
Steve Frenchbcb02032007-09-25 16:17:24 +0000479 owner_sid_ptr = (struct cifs_sid *)((char *)pntsd +
Steve Frenchaf6f4612007-10-16 18:40:37 +0000480 le32_to_cpu(pntsd->osidoffset));
Steve Frenchbcb02032007-09-25 16:17:24 +0000481 group_sid_ptr = (struct cifs_sid *)((char *)pntsd +
Steve Frenchaf6f4612007-10-16 18:40:37 +0000482 le32_to_cpu(pntsd->gsidoffset));
Steve French7505e052007-11-01 18:03:01 +0000483 dacloffset = le32_to_cpu(pntsd->dacloffset);
Steve French63d25832007-11-05 21:46:10 +0000484 dacl_ptr = (struct cifs_acl *)((char *)pntsd + dacloffset);
Joe Perchesb6b38f72010-04-21 03:50:45 +0000485 cFYI(DBG2, "revision %d type 0x%x ooffset 0x%x goffset 0x%x "
Steve Frenchbcb02032007-09-25 16:17:24 +0000486 "sacloffset 0x%x dacloffset 0x%x",
Steve Frenchaf6f4612007-10-16 18:40:37 +0000487 pntsd->revision, pntsd->type, le32_to_cpu(pntsd->osidoffset),
488 le32_to_cpu(pntsd->gsidoffset),
Joe Perchesb6b38f72010-04-21 03:50:45 +0000489 le32_to_cpu(pntsd->sacloffset), dacloffset);
Steve Frenchb9c7a2b2007-10-26 23:40:20 +0000490/* cifs_dump_mem("owner_sid: ", owner_sid_ptr, 64); */
Steve Frenchbcb02032007-09-25 16:17:24 +0000491 rc = parse_sid(owner_sid_ptr, end_of_acl);
492 if (rc)
493 return rc;
494
495 rc = parse_sid(group_sid_ptr, end_of_acl);
496 if (rc)
497 return rc;
498
Steve French7505e052007-11-01 18:03:01 +0000499 if (dacloffset)
500 parse_dacl(dacl_ptr, end_of_acl, owner_sid_ptr,
Jeff Layton0b8f18e2009-07-09 01:46:37 -0400501 group_sid_ptr, fattr);
Steve French7505e052007-11-01 18:03:01 +0000502 else
Joe Perchesb6b38f72010-04-21 03:50:45 +0000503 cFYI(1, "no ACL"); /* BB grant all or default perms? */
Shirish Pargaonkard0d66c42007-10-03 18:22:19 +0000504
Steve Frenchbcb02032007-09-25 16:17:24 +0000505/* cifscred->uid = owner_sid_ptr->rid;
506 cifscred->gid = group_sid_ptr->rid;
507 memcpy((void *)(&(cifscred->osid)), (void *)owner_sid_ptr,
Steve French630f3f0c2007-10-25 21:17:17 +0000508 sizeof(struct cifs_sid));
Steve Frenchbcb02032007-09-25 16:17:24 +0000509 memcpy((void *)(&(cifscred->gsid)), (void *)group_sid_ptr,
Steve French630f3f0c2007-10-25 21:17:17 +0000510 sizeof(struct cifs_sid)); */
Steve Frenchbcb02032007-09-25 16:17:24 +0000511
Shirish Pargaonkaref571ca2008-07-24 15:56:05 +0000512 return 0;
Steve Frenchbcb02032007-09-25 16:17:24 +0000513}
Steve Frenchb9c7a2b2007-10-26 23:40:20 +0000514
515
Steve French97837582007-12-31 07:47:21 +0000516/* Convert permission bits from mode to equivalent CIFS ACL */
517static int build_sec_desc(struct cifs_ntsd *pntsd, struct cifs_ntsd *pnntsd,
Steve Frenchcce246e2008-04-09 20:55:31 +0000518 struct inode *inode, __u64 nmode)
Steve French97837582007-12-31 07:47:21 +0000519{
520 int rc = 0;
521 __u32 dacloffset;
522 __u32 ndacloffset;
523 __u32 sidsoffset;
524 struct cifs_sid *owner_sid_ptr, *group_sid_ptr;
525 struct cifs_acl *dacl_ptr = NULL; /* no need for SACL ptr */
526 struct cifs_acl *ndacl_ptr = NULL; /* no need for SACL ptr */
527
528 if ((inode == NULL) || (pntsd == NULL) || (pnntsd == NULL))
Shirish Pargaonkaref571ca2008-07-24 15:56:05 +0000529 return -EIO;
Steve French97837582007-12-31 07:47:21 +0000530
531 owner_sid_ptr = (struct cifs_sid *)((char *)pntsd +
532 le32_to_cpu(pntsd->osidoffset));
533 group_sid_ptr = (struct cifs_sid *)((char *)pntsd +
534 le32_to_cpu(pntsd->gsidoffset));
535
536 dacloffset = le32_to_cpu(pntsd->dacloffset);
537 dacl_ptr = (struct cifs_acl *)((char *)pntsd + dacloffset);
538
539 ndacloffset = sizeof(struct cifs_ntsd);
540 ndacl_ptr = (struct cifs_acl *)((char *)pnntsd + ndacloffset);
541 ndacl_ptr->revision = dacl_ptr->revision;
542 ndacl_ptr->size = 0;
543 ndacl_ptr->num_aces = 0;
544
545 rc = set_chmod_dacl(ndacl_ptr, owner_sid_ptr, group_sid_ptr, nmode);
546
547 sidsoffset = ndacloffset + le16_to_cpu(ndacl_ptr->size);
548
549 /* copy security descriptor control portion and owner and group sid */
550 copy_sec_desc(pntsd, pnntsd, sidsoffset);
551
Shirish Pargaonkaref571ca2008-07-24 15:56:05 +0000552 return rc;
Steve French97837582007-12-31 07:47:21 +0000553}
554
Christoph Hellwig1bf40722009-05-27 09:37:33 -0400555static struct cifs_ntsd *get_cifs_acl_by_fid(struct cifs_sb_info *cifs_sb,
556 __u16 fid, u32 *pacllen)
Steve Frenchb9c7a2b2007-10-26 23:40:20 +0000557{
Steve Frenchb9c7a2b2007-10-26 23:40:20 +0000558 struct cifs_ntsd *pntsd = NULL;
Christoph Hellwig1bf40722009-05-27 09:37:33 -0400559 int xid, rc;
Steve Frenchb9c7a2b2007-10-26 23:40:20 +0000560
561 xid = GetXid();
Christoph Hellwig1bf40722009-05-27 09:37:33 -0400562 rc = CIFSSMBGetCIFSACL(xid, cifs_sb->tcon, fid, &pntsd, pacllen);
563 FreeXid(xid);
Steve French8b1327f2008-03-14 22:37:16 +0000564
Steve Frenchb9c7a2b2007-10-26 23:40:20 +0000565
Joe Perchesb6b38f72010-04-21 03:50:45 +0000566 cFYI(1, "GetCIFSACL rc = %d ACL len %d", rc, *pacllen);
Christoph Hellwig1bf40722009-05-27 09:37:33 -0400567 return pntsd;
568}
569
570static struct cifs_ntsd *get_cifs_acl_by_path(struct cifs_sb_info *cifs_sb,
571 const char *path, u32 *pacllen)
572{
573 struct cifs_ntsd *pntsd = NULL;
574 int oplock = 0;
575 int xid, rc;
576 __u16 fid;
577
578 xid = GetXid();
579
580 rc = CIFSSMBOpen(xid, cifs_sb->tcon, path, FILE_OPEN, READ_CONTROL, 0,
581 &fid, &oplock, NULL, cifs_sb->local_nls,
582 cifs_sb->mnt_cifs_flags & CIFS_MOUNT_MAP_SPECIAL_CHR);
583 if (rc) {
Joe Perchesb6b38f72010-04-21 03:50:45 +0000584 cERROR(1, "Unable to open file to get ACL");
Christoph Hellwig1bf40722009-05-27 09:37:33 -0400585 goto out;
Steve Frenchb9c7a2b2007-10-26 23:40:20 +0000586 }
587
Steve French7505e052007-11-01 18:03:01 +0000588 rc = CIFSSMBGetCIFSACL(xid, cifs_sb->tcon, fid, &pntsd, pacllen);
Joe Perchesb6b38f72010-04-21 03:50:45 +0000589 cFYI(1, "GetCIFSACL rc = %d ACL len %d", rc, *pacllen);
Steve Frenchb9c7a2b2007-10-26 23:40:20 +0000590
Christoph Hellwig1bf40722009-05-27 09:37:33 -0400591 CIFSSMBClose(xid, cifs_sb->tcon, fid);
592 out:
Steve Frenchb9c7a2b2007-10-26 23:40:20 +0000593 FreeXid(xid);
Steve French7505e052007-11-01 18:03:01 +0000594 return pntsd;
595}
596
Christoph Hellwig1bf40722009-05-27 09:37:33 -0400597/* Retrieve an ACL from the server */
598static struct cifs_ntsd *get_cifs_acl(struct cifs_sb_info *cifs_sb,
599 struct inode *inode, const char *path,
600 u32 *pacllen)
601{
602 struct cifs_ntsd *pntsd = NULL;
603 struct cifsFileInfo *open_file = NULL;
604
605 if (inode)
606 open_file = find_readable_file(CIFS_I(inode));
607 if (!open_file)
608 return get_cifs_acl_by_path(cifs_sb, path, pacllen);
609
610 pntsd = get_cifs_acl_by_fid(cifs_sb, open_file->netfid, pacllen);
Dave Kleikamp6ab409b2009-08-31 11:07:12 -0400611 cifsFileInfo_put(open_file);
Christoph Hellwig1bf40722009-05-27 09:37:33 -0400612 return pntsd;
613}
614
Christoph Hellwigb96d31a2009-05-27 09:37:33 -0400615static int set_cifs_acl_by_fid(struct cifs_sb_info *cifs_sb, __u16 fid,
616 struct cifs_ntsd *pnntsd, u32 acllen)
Steve French97837582007-12-31 07:47:21 +0000617{
Christoph Hellwigb96d31a2009-05-27 09:37:33 -0400618 int xid, rc;
619
620 xid = GetXid();
621 rc = CIFSSMBSetCIFSACL(xid, cifs_sb->tcon, fid, pnntsd, acllen);
622 FreeXid(xid);
623
Joe Perchesb6b38f72010-04-21 03:50:45 +0000624 cFYI(DBG2, "SetCIFSACL rc = %d", rc);
Christoph Hellwigb96d31a2009-05-27 09:37:33 -0400625 return rc;
626}
627
628static int set_cifs_acl_by_path(struct cifs_sb_info *cifs_sb, const char *path,
629 struct cifs_ntsd *pnntsd, u32 acllen)
630{
631 int oplock = 0;
632 int xid, rc;
Steve French97837582007-12-31 07:47:21 +0000633 __u16 fid;
Steve French97837582007-12-31 07:47:21 +0000634
Steve French97837582007-12-31 07:47:21 +0000635 xid = GetXid();
636
Christoph Hellwigb96d31a2009-05-27 09:37:33 -0400637 rc = CIFSSMBOpen(xid, cifs_sb->tcon, path, FILE_OPEN, WRITE_DAC, 0,
638 &fid, &oplock, NULL, cifs_sb->local_nls,
639 cifs_sb->mnt_cifs_flags & CIFS_MOUNT_MAP_SPECIAL_CHR);
640 if (rc) {
Joe Perchesb6b38f72010-04-21 03:50:45 +0000641 cERROR(1, "Unable to open file to set ACL");
Christoph Hellwigb96d31a2009-05-27 09:37:33 -0400642 goto out;
Steve French97837582007-12-31 07:47:21 +0000643 }
644
645 rc = CIFSSMBSetCIFSACL(xid, cifs_sb->tcon, fid, pnntsd, acllen);
Joe Perchesb6b38f72010-04-21 03:50:45 +0000646 cFYI(DBG2, "SetCIFSACL rc = %d", rc);
Steve French97837582007-12-31 07:47:21 +0000647
Christoph Hellwigb96d31a2009-05-27 09:37:33 -0400648 CIFSSMBClose(xid, cifs_sb->tcon, fid);
649 out:
Steve French97837582007-12-31 07:47:21 +0000650 FreeXid(xid);
Christoph Hellwigb96d31a2009-05-27 09:37:33 -0400651 return rc;
652}
Steve French97837582007-12-31 07:47:21 +0000653
Christoph Hellwigb96d31a2009-05-27 09:37:33 -0400654/* Set an ACL on the server */
655static int set_cifs_acl(struct cifs_ntsd *pnntsd, __u32 acllen,
656 struct inode *inode, const char *path)
657{
658 struct cifs_sb_info *cifs_sb = CIFS_SB(inode->i_sb);
659 struct cifsFileInfo *open_file;
660 int rc;
661
Joe Perchesb6b38f72010-04-21 03:50:45 +0000662 cFYI(DBG2, "set ACL for %s from mode 0x%x", path, inode->i_mode);
Christoph Hellwigb96d31a2009-05-27 09:37:33 -0400663
664 open_file = find_readable_file(CIFS_I(inode));
665 if (!open_file)
666 return set_cifs_acl_by_path(cifs_sb, path, pnntsd, acllen);
667
668 rc = set_cifs_acl_by_fid(cifs_sb, open_file->netfid, pnntsd, acllen);
Dave Kleikamp6ab409b2009-08-31 11:07:12 -0400669 cifsFileInfo_put(open_file);
Shirish Pargaonkaref571ca2008-07-24 15:56:05 +0000670 return rc;
Steve French97837582007-12-31 07:47:21 +0000671}
672
Steve French7505e052007-11-01 18:03:01 +0000673/* Translate the CIFS ACL (simlar to NTFS ACL) for a file into mode bits */
Jeff Layton0b8f18e2009-07-09 01:46:37 -0400674void
675cifs_acl_to_fattr(struct cifs_sb_info *cifs_sb, struct cifs_fattr *fattr,
676 struct inode *inode, const char *path, const __u16 *pfid)
Steve French7505e052007-11-01 18:03:01 +0000677{
678 struct cifs_ntsd *pntsd = NULL;
679 u32 acllen = 0;
680 int rc = 0;
681
Joe Perchesb6b38f72010-04-21 03:50:45 +0000682 cFYI(DBG2, "converting ACL to mode for %s", path);
Christoph Hellwig1bf40722009-05-27 09:37:33 -0400683
684 if (pfid)
685 pntsd = get_cifs_acl_by_fid(cifs_sb, *pfid, &acllen);
686 else
687 pntsd = get_cifs_acl(cifs_sb, inode, path, &acllen);
Steve French7505e052007-11-01 18:03:01 +0000688
689 /* if we can retrieve the ACL, now parse Access Control Entries, ACEs */
690 if (pntsd)
Jeff Layton0b8f18e2009-07-09 01:46:37 -0400691 rc = parse_sec_desc(pntsd, acllen, fattr);
Steve French7505e052007-11-01 18:03:01 +0000692 if (rc)
Joe Perchesb6b38f72010-04-21 03:50:45 +0000693 cFYI(1, "parse sec desc failed rc = %d", rc);
Steve French7505e052007-11-01 18:03:01 +0000694
695 kfree(pntsd);
Steve Frenchb9c7a2b2007-10-26 23:40:20 +0000696 return;
697}
Steve French953f8682007-10-31 04:54:42 +0000698
Steve French7505e052007-11-01 18:03:01 +0000699/* Convert mode bits to an ACL so we can update the ACL on the server */
Steve French97837582007-12-31 07:47:21 +0000700int mode_to_acl(struct inode *inode, const char *path, __u64 nmode)
Steve French953f8682007-10-31 04:54:42 +0000701{
702 int rc = 0;
Steve Frenchcce246e2008-04-09 20:55:31 +0000703 __u32 secdesclen = 0;
Steve French97837582007-12-31 07:47:21 +0000704 struct cifs_ntsd *pntsd = NULL; /* acl obtained from server */
705 struct cifs_ntsd *pnntsd = NULL; /* modified acl to be sent to server */
Steve French953f8682007-10-31 04:54:42 +0000706
Joe Perchesb6b38f72010-04-21 03:50:45 +0000707 cFYI(DBG2, "set ACL from mode for %s", path);
Steve French953f8682007-10-31 04:54:42 +0000708
709 /* Get the security descriptor */
Christoph Hellwig1bf40722009-05-27 09:37:33 -0400710 pntsd = get_cifs_acl(CIFS_SB(inode->i_sb), inode, path, &secdesclen);
Steve French953f8682007-10-31 04:54:42 +0000711
Steve French97837582007-12-31 07:47:21 +0000712 /* Add three ACEs for owner, group, everyone getting rid of
713 other ACEs as chmod disables ACEs and set the security descriptor */
Steve French953f8682007-10-31 04:54:42 +0000714
Steve French97837582007-12-31 07:47:21 +0000715 if (pntsd) {
716 /* allocate memory for the smb header,
717 set security descriptor request security descriptor
718 parameters, and secuirty descriptor itself */
Steve French953f8682007-10-31 04:54:42 +0000719
Steve Frenchcce246e2008-04-09 20:55:31 +0000720 secdesclen = secdesclen < DEFSECDESCLEN ?
721 DEFSECDESCLEN : secdesclen;
722 pnntsd = kmalloc(secdesclen, GFP_KERNEL);
Steve French97837582007-12-31 07:47:21 +0000723 if (!pnntsd) {
Joe Perchesb6b38f72010-04-21 03:50:45 +0000724 cERROR(1, "Unable to allocate security descriptor");
Steve French97837582007-12-31 07:47:21 +0000725 kfree(pntsd);
Shirish Pargaonkaref571ca2008-07-24 15:56:05 +0000726 return -ENOMEM;
Steve French97837582007-12-31 07:47:21 +0000727 }
Steve French7505e052007-11-01 18:03:01 +0000728
Steve Frenchcce246e2008-04-09 20:55:31 +0000729 rc = build_sec_desc(pntsd, pnntsd, inode, nmode);
Steve French97837582007-12-31 07:47:21 +0000730
Joe Perchesb6b38f72010-04-21 03:50:45 +0000731 cFYI(DBG2, "build_sec_desc rc: %d", rc);
Steve French97837582007-12-31 07:47:21 +0000732
733 if (!rc) {
734 /* Set the security descriptor */
Steve Frenchcce246e2008-04-09 20:55:31 +0000735 rc = set_cifs_acl(pnntsd, secdesclen, inode, path);
Joe Perchesb6b38f72010-04-21 03:50:45 +0000736 cFYI(DBG2, "set_cifs_acl rc: %d", rc);
Steve French97837582007-12-31 07:47:21 +0000737 }
738
739 kfree(pnntsd);
740 kfree(pntsd);
741 }
742
Shirish Pargaonkaref571ca2008-07-24 15:56:05 +0000743 return rc;
Steve French953f8682007-10-31 04:54:42 +0000744}
Steve French297647c2007-10-12 04:11:59 +0000745#endif /* CONFIG_CIFS_EXPERIMENTAL */