nfs3acl.c 6.3 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266
  1. /*
  2. * Process version 3 NFSACL requests.
  3. *
  4. * Copyright (C) 2002-2003 Andreas Gruenbacher <agruen@suse.de>
  5. */
  6. #include "nfsd.h"
  7. /* FIXME: nfsacl.h is a broken header */
  8. #include <linux/nfsacl.h>
  9. #include "cache.h"
  10. #include "xdr3.h"
  11. #include "vfs.h"
  12. #define RETURN_STATUS(st) { resp->status = (st); return (st); }
  13. /*
  14. * NULL call.
  15. */
  16. static __be32
  17. nfsd3_proc_null(struct svc_rqst *rqstp, void *argp, void *resp)
  18. {
  19. return nfs_ok;
  20. }
  21. /*
  22. * Get the Access and/or Default ACL of a file.
  23. */
  24. static __be32 nfsd3_proc_getacl(struct svc_rqst * rqstp,
  25. struct nfsd3_getaclargs *argp, struct nfsd3_getaclres *resp)
  26. {
  27. svc_fh *fh;
  28. struct posix_acl *acl;
  29. __be32 nfserr = 0;
  30. fh = fh_copy(&resp->fh, &argp->fh);
  31. nfserr = fh_verify(rqstp, &resp->fh, 0, NFSD_MAY_NOP);
  32. if (nfserr)
  33. RETURN_STATUS(nfserr);
  34. if (argp->mask & ~(NFS_ACL|NFS_ACLCNT|NFS_DFACL|NFS_DFACLCNT))
  35. RETURN_STATUS(nfserr_inval);
  36. resp->mask = argp->mask;
  37. if (resp->mask & (NFS_ACL|NFS_ACLCNT)) {
  38. acl = nfsd_get_posix_acl(fh, ACL_TYPE_ACCESS);
  39. if (IS_ERR(acl)) {
  40. int err = PTR_ERR(acl);
  41. if (err == -ENODATA || err == -EOPNOTSUPP)
  42. acl = NULL;
  43. else {
  44. nfserr = nfserrno(err);
  45. goto fail;
  46. }
  47. }
  48. if (acl == NULL) {
  49. /* Solaris returns the inode's minimum ACL. */
  50. struct inode *inode = fh->fh_dentry->d_inode;
  51. acl = posix_acl_from_mode(inode->i_mode, GFP_KERNEL);
  52. }
  53. resp->acl_access = acl;
  54. }
  55. if (resp->mask & (NFS_DFACL|NFS_DFACLCNT)) {
  56. /* Check how Solaris handles requests for the Default ACL
  57. of a non-directory! */
  58. acl = nfsd_get_posix_acl(fh, ACL_TYPE_DEFAULT);
  59. if (IS_ERR(acl)) {
  60. int err = PTR_ERR(acl);
  61. if (err == -ENODATA || err == -EOPNOTSUPP)
  62. acl = NULL;
  63. else {
  64. nfserr = nfserrno(err);
  65. goto fail;
  66. }
  67. }
  68. resp->acl_default = acl;
  69. }
  70. /* resp->acl_{access,default} are released in nfs3svc_release_getacl. */
  71. RETURN_STATUS(0);
  72. fail:
  73. posix_acl_release(resp->acl_access);
  74. posix_acl_release(resp->acl_default);
  75. RETURN_STATUS(nfserr);
  76. }
  77. /*
  78. * Set the Access and/or Default ACL of a file.
  79. */
  80. static __be32 nfsd3_proc_setacl(struct svc_rqst * rqstp,
  81. struct nfsd3_setaclargs *argp,
  82. struct nfsd3_attrstat *resp)
  83. {
  84. svc_fh *fh;
  85. __be32 nfserr = 0;
  86. fh = fh_copy(&resp->fh, &argp->fh);
  87. nfserr = fh_verify(rqstp, &resp->fh, 0, NFSD_MAY_SATTR);
  88. if (!nfserr) {
  89. nfserr = nfserrno( nfsd_set_posix_acl(
  90. fh, ACL_TYPE_ACCESS, argp->acl_access) );
  91. }
  92. if (!nfserr) {
  93. nfserr = nfserrno( nfsd_set_posix_acl(
  94. fh, ACL_TYPE_DEFAULT, argp->acl_default) );
  95. }
  96. /* argp->acl_{access,default} may have been allocated in
  97. nfs3svc_decode_setaclargs. */
  98. posix_acl_release(argp->acl_access);
  99. posix_acl_release(argp->acl_default);
  100. RETURN_STATUS(nfserr);
  101. }
  102. /*
  103. * XDR decode functions
  104. */
  105. static int nfs3svc_decode_getaclargs(struct svc_rqst *rqstp, __be32 *p,
  106. struct nfsd3_getaclargs *args)
  107. {
  108. if (!(p = nfs3svc_decode_fh(p, &args->fh)))
  109. return 0;
  110. args->mask = ntohl(*p); p++;
  111. return xdr_argsize_check(rqstp, p);
  112. }
  113. static int nfs3svc_decode_setaclargs(struct svc_rqst *rqstp, __be32 *p,
  114. struct nfsd3_setaclargs *args)
  115. {
  116. struct kvec *head = rqstp->rq_arg.head;
  117. unsigned int base;
  118. int n;
  119. if (!(p = nfs3svc_decode_fh(p, &args->fh)))
  120. return 0;
  121. args->mask = ntohl(*p++);
  122. if (args->mask & ~(NFS_ACL|NFS_ACLCNT|NFS_DFACL|NFS_DFACLCNT) ||
  123. !xdr_argsize_check(rqstp, p))
  124. return 0;
  125. base = (char *)p - (char *)head->iov_base;
  126. n = nfsacl_decode(&rqstp->rq_arg, base, NULL,
  127. (args->mask & NFS_ACL) ?
  128. &args->acl_access : NULL);
  129. if (n > 0)
  130. n = nfsacl_decode(&rqstp->rq_arg, base + n, NULL,
  131. (args->mask & NFS_DFACL) ?
  132. &args->acl_default : NULL);
  133. return (n > 0);
  134. }
  135. /*
  136. * XDR encode functions
  137. */
  138. /* GETACL */
  139. static int nfs3svc_encode_getaclres(struct svc_rqst *rqstp, __be32 *p,
  140. struct nfsd3_getaclres *resp)
  141. {
  142. struct dentry *dentry = resp->fh.fh_dentry;
  143. p = nfs3svc_encode_post_op_attr(rqstp, p, &resp->fh);
  144. if (resp->status == 0 && dentry && dentry->d_inode) {
  145. struct inode *inode = dentry->d_inode;
  146. struct kvec *head = rqstp->rq_res.head;
  147. unsigned int base;
  148. int n;
  149. int w;
  150. *p++ = htonl(resp->mask);
  151. if (!xdr_ressize_check(rqstp, p))
  152. return 0;
  153. base = (char *)p - (char *)head->iov_base;
  154. rqstp->rq_res.page_len = w = nfsacl_size(
  155. (resp->mask & NFS_ACL) ? resp->acl_access : NULL,
  156. (resp->mask & NFS_DFACL) ? resp->acl_default : NULL);
  157. while (w > 0) {
  158. if (!rqstp->rq_respages[rqstp->rq_resused++])
  159. return 0;
  160. w -= PAGE_SIZE;
  161. }
  162. n = nfsacl_encode(&rqstp->rq_res, base, inode,
  163. resp->acl_access,
  164. resp->mask & NFS_ACL, 0);
  165. if (n > 0)
  166. n = nfsacl_encode(&rqstp->rq_res, base + n, inode,
  167. resp->acl_default,
  168. resp->mask & NFS_DFACL,
  169. NFS_ACL_DEFAULT);
  170. if (n <= 0)
  171. return 0;
  172. } else
  173. if (!xdr_ressize_check(rqstp, p))
  174. return 0;
  175. return 1;
  176. }
  177. /* SETACL */
  178. static int nfs3svc_encode_setaclres(struct svc_rqst *rqstp, __be32 *p,
  179. struct nfsd3_attrstat *resp)
  180. {
  181. p = nfs3svc_encode_post_op_attr(rqstp, p, &resp->fh);
  182. return xdr_ressize_check(rqstp, p);
  183. }
  184. /*
  185. * XDR release functions
  186. */
  187. static int nfs3svc_release_getacl(struct svc_rqst *rqstp, __be32 *p,
  188. struct nfsd3_getaclres *resp)
  189. {
  190. fh_put(&resp->fh);
  191. posix_acl_release(resp->acl_access);
  192. posix_acl_release(resp->acl_default);
  193. return 1;
  194. }
  195. #define nfs3svc_decode_voidargs NULL
  196. #define nfs3svc_release_void NULL
  197. #define nfsd3_setaclres nfsd3_attrstat
  198. #define nfsd3_voidres nfsd3_voidargs
  199. struct nfsd3_voidargs { int dummy; };
  200. #define PROC(name, argt, rest, relt, cache, respsize) \
  201. { (svc_procfunc) nfsd3_proc_##name, \
  202. (kxdrproc_t) nfs3svc_decode_##argt##args, \
  203. (kxdrproc_t) nfs3svc_encode_##rest##res, \
  204. (kxdrproc_t) nfs3svc_release_##relt, \
  205. sizeof(struct nfsd3_##argt##args), \
  206. sizeof(struct nfsd3_##rest##res), \
  207. 0, \
  208. cache, \
  209. respsize, \
  210. }
  211. #define ST 1 /* status*/
  212. #define AT 21 /* attributes */
  213. #define pAT (1+AT) /* post attributes - conditional */
  214. #define ACL (1+NFS_ACL_MAX_ENTRIES*3) /* Access Control List */
  215. static struct svc_procedure nfsd_acl_procedures3[] = {
  216. PROC(null, void, void, void, RC_NOCACHE, ST),
  217. PROC(getacl, getacl, getacl, getacl, RC_NOCACHE, ST+1+2*(1+ACL)),
  218. PROC(setacl, setacl, setacl, fhandle, RC_NOCACHE, ST+pAT),
  219. };
  220. struct svc_version nfsd_acl_version3 = {
  221. .vs_vers = 3,
  222. .vs_nproc = 3,
  223. .vs_proc = nfsd_acl_procedures3,
  224. .vs_dispatch = nfsd_dispatch,
  225. .vs_xdrsize = NFS3_SVC_XDRSIZE,
  226. .vs_hidden = 0,
  227. };