blob: be7a8d02c9a7e40cea775bd9cdc7eb8e56c0d00e [file] [log] [blame]
Linus Torvalds1da177e2005-04-16 15:20:36 -07001/*
2 * linux/fs/ext2/xattr_security.c
3 * Handler for storing security labels as extended attributes.
4 */
5
Tejun Heo5a0e3ad2010-03-24 17:04:11 +09006#include <linux/slab.h>
Linus Torvalds1da177e2005-04-16 15:20:36 -07007#include <linux/string.h>
8#include <linux/fs.h>
Linus Torvalds1da177e2005-04-16 15:20:36 -07009#include <linux/ext2_fs.h>
Stephen Smalley10f47e62005-09-09 13:01:39 -070010#include <linux/security.h>
Linus Torvalds1da177e2005-04-16 15:20:36 -070011#include "xattr.h"
12
13static size_t
Christoph Hellwig431547b2009-11-13 09:52:56 +000014ext2_xattr_security_list(struct dentry *dentry, char *list, size_t list_size,
15 const char *name, size_t name_len, int type)
Linus Torvalds1da177e2005-04-16 15:20:36 -070016{
Shen Fengf905f062008-07-25 01:46:15 -070017 const int prefix_len = XATTR_SECURITY_PREFIX_LEN;
Linus Torvalds1da177e2005-04-16 15:20:36 -070018 const size_t total_len = prefix_len + name_len + 1;
19
20 if (list && total_len <= list_size) {
21 memcpy(list, XATTR_SECURITY_PREFIX, prefix_len);
22 memcpy(list+prefix_len, name, name_len);
23 list[prefix_len + name_len] = '\0';
24 }
25 return total_len;
26}
27
28static int
Christoph Hellwig431547b2009-11-13 09:52:56 +000029ext2_xattr_security_get(struct dentry *dentry, const char *name,
30 void *buffer, size_t size, int type)
Linus Torvalds1da177e2005-04-16 15:20:36 -070031{
32 if (strcmp(name, "") == 0)
33 return -EINVAL;
Christoph Hellwig431547b2009-11-13 09:52:56 +000034 return ext2_xattr_get(dentry->d_inode, EXT2_XATTR_INDEX_SECURITY, name,
Linus Torvalds1da177e2005-04-16 15:20:36 -070035 buffer, size);
36}
37
38static int
Christoph Hellwig431547b2009-11-13 09:52:56 +000039ext2_xattr_security_set(struct dentry *dentry, const char *name,
40 const void *value, size_t size, int flags, int type)
Linus Torvalds1da177e2005-04-16 15:20:36 -070041{
42 if (strcmp(name, "") == 0)
43 return -EINVAL;
Christoph Hellwig431547b2009-11-13 09:52:56 +000044 return ext2_xattr_set(dentry->d_inode, EXT2_XATTR_INDEX_SECURITY, name,
Linus Torvalds1da177e2005-04-16 15:20:36 -070045 value, size, flags);
46}
47
Mimi Zohar9d8f13b2011-06-06 15:29:25 -040048int ext2_initxattrs(struct inode *inode, const struct xattr *xattr_array,
49 void *fs_info)
50{
51 const struct xattr *xattr;
52 int err = 0;
53
54 for (xattr = xattr_array; xattr->name != NULL; xattr++) {
55 err = ext2_xattr_set(inode, EXT2_XATTR_INDEX_SECURITY,
56 xattr->name, xattr->value,
57 xattr->value_len, 0);
58 if (err < 0)
59 break;
60 }
61 return err;
62}
63
Stephen Smalley10f47e62005-09-09 13:01:39 -070064int
Eric Paris2a7dba32011-02-01 11:05:39 -050065ext2_init_security(struct inode *inode, struct inode *dir,
66 const struct qstr *qstr)
Stephen Smalley10f47e62005-09-09 13:01:39 -070067{
Mimi Zohar9d8f13b2011-06-06 15:29:25 -040068 return security_inode_init_security(inode, dir, qstr,
69 &ext2_initxattrs, NULL);
Stephen Smalley10f47e62005-09-09 13:01:39 -070070}
71
Stephen Hemminger749c72e2010-05-13 17:53:16 -070072const struct xattr_handler ext2_xattr_security_handler = {
Linus Torvalds1da177e2005-04-16 15:20:36 -070073 .prefix = XATTR_SECURITY_PREFIX,
74 .list = ext2_xattr_security_list,
75 .get = ext2_xattr_security_get,
76 .set = ext2_xattr_security_set,
77};