nfs3acl.c 6.4 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270
  1. /*
  2. * linux/fs/nfsd/nfs3acl.c
  3. *
  4. * Process version 3 NFSACL requests.
  5. *
  6. * Copyright (C) 2002-2003 Andreas Gruenbacher <agruen@suse.de>
  7. */
  8. #include <linux/sunrpc/svc.h>
  9. #include <linux/nfs3.h>
  10. #include <linux/nfsd/nfsd.h>
  11. #include <linux/nfsd/cache.h>
  12. #include <linux/nfsd/xdr3.h>
  13. #include <linux/posix_acl.h>
  14. #include <linux/nfsacl.h>
  15. #include "vfs.h"
  16. #define RETURN_STATUS(st) { resp->status = (st); return (st); }
  17. /*
  18. * NULL call.
  19. */
  20. static __be32
  21. nfsd3_proc_null(struct svc_rqst *rqstp, void *argp, void *resp)
  22. {
  23. return nfs_ok;
  24. }
  25. /*
  26. * Get the Access and/or Default ACL of a file.
  27. */
  28. static __be32 nfsd3_proc_getacl(struct svc_rqst * rqstp,
  29. struct nfsd3_getaclargs *argp, struct nfsd3_getaclres *resp)
  30. {
  31. svc_fh *fh;
  32. struct posix_acl *acl;
  33. __be32 nfserr = 0;
  34. fh = fh_copy(&resp->fh, &argp->fh);
  35. nfserr = fh_verify(rqstp, &resp->fh, 0, NFSD_MAY_NOP);
  36. if (nfserr)
  37. RETURN_STATUS(nfserr);
  38. if (argp->mask & ~(NFS_ACL|NFS_ACLCNT|NFS_DFACL|NFS_DFACLCNT))
  39. RETURN_STATUS(nfserr_inval);
  40. resp->mask = argp->mask;
  41. if (resp->mask & (NFS_ACL|NFS_ACLCNT)) {
  42. acl = nfsd_get_posix_acl(fh, ACL_TYPE_ACCESS);
  43. if (IS_ERR(acl)) {
  44. int err = PTR_ERR(acl);
  45. if (err == -ENODATA || err == -EOPNOTSUPP)
  46. acl = NULL;
  47. else {
  48. nfserr = nfserrno(err);
  49. goto fail;
  50. }
  51. }
  52. if (acl == NULL) {
  53. /* Solaris returns the inode's minimum ACL. */
  54. struct inode *inode = fh->fh_dentry->d_inode;
  55. acl = posix_acl_from_mode(inode->i_mode, GFP_KERNEL);
  56. }
  57. resp->acl_access = acl;
  58. }
  59. if (resp->mask & (NFS_DFACL|NFS_DFACLCNT)) {
  60. /* Check how Solaris handles requests for the Default ACL
  61. of a non-directory! */
  62. acl = nfsd_get_posix_acl(fh, ACL_TYPE_DEFAULT);
  63. if (IS_ERR(acl)) {
  64. int err = PTR_ERR(acl);
  65. if (err == -ENODATA || err == -EOPNOTSUPP)
  66. acl = NULL;
  67. else {
  68. nfserr = nfserrno(err);
  69. goto fail;
  70. }
  71. }
  72. resp->acl_default = acl;
  73. }
  74. /* resp->acl_{access,default} are released in nfs3svc_release_getacl. */
  75. RETURN_STATUS(0);
  76. fail:
  77. posix_acl_release(resp->acl_access);
  78. posix_acl_release(resp->acl_default);
  79. RETURN_STATUS(nfserr);
  80. }
  81. /*
  82. * Set the Access and/or Default ACL of a file.
  83. */
  84. static __be32 nfsd3_proc_setacl(struct svc_rqst * rqstp,
  85. struct nfsd3_setaclargs *argp,
  86. struct nfsd3_attrstat *resp)
  87. {
  88. svc_fh *fh;
  89. __be32 nfserr = 0;
  90. fh = fh_copy(&resp->fh, &argp->fh);
  91. nfserr = fh_verify(rqstp, &resp->fh, 0, NFSD_MAY_SATTR);
  92. if (!nfserr) {
  93. nfserr = nfserrno( nfsd_set_posix_acl(
  94. fh, ACL_TYPE_ACCESS, argp->acl_access) );
  95. }
  96. if (!nfserr) {
  97. nfserr = nfserrno( nfsd_set_posix_acl(
  98. fh, ACL_TYPE_DEFAULT, argp->acl_default) );
  99. }
  100. /* argp->acl_{access,default} may have been allocated in
  101. nfs3svc_decode_setaclargs. */
  102. posix_acl_release(argp->acl_access);
  103. posix_acl_release(argp->acl_default);
  104. RETURN_STATUS(nfserr);
  105. }
  106. /*
  107. * XDR decode functions
  108. */
  109. static int nfs3svc_decode_getaclargs(struct svc_rqst *rqstp, __be32 *p,
  110. struct nfsd3_getaclargs *args)
  111. {
  112. if (!(p = nfs3svc_decode_fh(p, &args->fh)))
  113. return 0;
  114. args->mask = ntohl(*p); p++;
  115. return xdr_argsize_check(rqstp, p);
  116. }
  117. static int nfs3svc_decode_setaclargs(struct svc_rqst *rqstp, __be32 *p,
  118. struct nfsd3_setaclargs *args)
  119. {
  120. struct kvec *head = rqstp->rq_arg.head;
  121. unsigned int base;
  122. int n;
  123. if (!(p = nfs3svc_decode_fh(p, &args->fh)))
  124. return 0;
  125. args->mask = ntohl(*p++);
  126. if (args->mask & ~(NFS_ACL|NFS_ACLCNT|NFS_DFACL|NFS_DFACLCNT) ||
  127. !xdr_argsize_check(rqstp, p))
  128. return 0;
  129. base = (char *)p - (char *)head->iov_base;
  130. n = nfsacl_decode(&rqstp->rq_arg, base, NULL,
  131. (args->mask & NFS_ACL) ?
  132. &args->acl_access : NULL);
  133. if (n > 0)
  134. n = nfsacl_decode(&rqstp->rq_arg, base + n, NULL,
  135. (args->mask & NFS_DFACL) ?
  136. &args->acl_default : NULL);
  137. return (n > 0);
  138. }
  139. /*
  140. * XDR encode functions
  141. */
  142. /* GETACL */
  143. static int nfs3svc_encode_getaclres(struct svc_rqst *rqstp, __be32 *p,
  144. struct nfsd3_getaclres *resp)
  145. {
  146. struct dentry *dentry = resp->fh.fh_dentry;
  147. p = nfs3svc_encode_post_op_attr(rqstp, p, &resp->fh);
  148. if (resp->status == 0 && dentry && dentry->d_inode) {
  149. struct inode *inode = dentry->d_inode;
  150. struct kvec *head = rqstp->rq_res.head;
  151. unsigned int base;
  152. int n;
  153. int w;
  154. *p++ = htonl(resp->mask);
  155. if (!xdr_ressize_check(rqstp, p))
  156. return 0;
  157. base = (char *)p - (char *)head->iov_base;
  158. rqstp->rq_res.page_len = w = nfsacl_size(
  159. (resp->mask & NFS_ACL) ? resp->acl_access : NULL,
  160. (resp->mask & NFS_DFACL) ? resp->acl_default : NULL);
  161. while (w > 0) {
  162. if (!rqstp->rq_respages[rqstp->rq_resused++])
  163. return 0;
  164. w -= PAGE_SIZE;
  165. }
  166. n = nfsacl_encode(&rqstp->rq_res, base, inode,
  167. resp->acl_access,
  168. resp->mask & NFS_ACL, 0);
  169. if (n > 0)
  170. n = nfsacl_encode(&rqstp->rq_res, base + n, inode,
  171. resp->acl_default,
  172. resp->mask & NFS_DFACL,
  173. NFS_ACL_DEFAULT);
  174. if (n <= 0)
  175. return 0;
  176. } else
  177. if (!xdr_ressize_check(rqstp, p))
  178. return 0;
  179. return 1;
  180. }
  181. /* SETACL */
  182. static int nfs3svc_encode_setaclres(struct svc_rqst *rqstp, __be32 *p,
  183. struct nfsd3_attrstat *resp)
  184. {
  185. p = nfs3svc_encode_post_op_attr(rqstp, p, &resp->fh);
  186. return xdr_ressize_check(rqstp, p);
  187. }
  188. /*
  189. * XDR release functions
  190. */
  191. static int nfs3svc_release_getacl(struct svc_rqst *rqstp, __be32 *p,
  192. struct nfsd3_getaclres *resp)
  193. {
  194. fh_put(&resp->fh);
  195. posix_acl_release(resp->acl_access);
  196. posix_acl_release(resp->acl_default);
  197. return 1;
  198. }
  199. #define nfs3svc_decode_voidargs NULL
  200. #define nfs3svc_release_void NULL
  201. #define nfsd3_setaclres nfsd3_attrstat
  202. #define nfsd3_voidres nfsd3_voidargs
  203. struct nfsd3_voidargs { int dummy; };
  204. #define PROC(name, argt, rest, relt, cache, respsize) \
  205. { (svc_procfunc) nfsd3_proc_##name, \
  206. (kxdrproc_t) nfs3svc_decode_##argt##args, \
  207. (kxdrproc_t) nfs3svc_encode_##rest##res, \
  208. (kxdrproc_t) nfs3svc_release_##relt, \
  209. sizeof(struct nfsd3_##argt##args), \
  210. sizeof(struct nfsd3_##rest##res), \
  211. 0, \
  212. cache, \
  213. respsize, \
  214. }
  215. #define ST 1 /* status*/
  216. #define AT 21 /* attributes */
  217. #define pAT (1+AT) /* post attributes - conditional */
  218. #define ACL (1+NFS_ACL_MAX_ENTRIES*3) /* Access Control List */
  219. static struct svc_procedure nfsd_acl_procedures3[] = {
  220. PROC(null, void, void, void, RC_NOCACHE, ST),
  221. PROC(getacl, getacl, getacl, getacl, RC_NOCACHE, ST+1+2*(1+ACL)),
  222. PROC(setacl, setacl, setacl, fhandle, RC_NOCACHE, ST+pAT),
  223. };
  224. struct svc_version nfsd_acl_version3 = {
  225. .vs_vers = 3,
  226. .vs_nproc = 3,
  227. .vs_proc = nfsd_acl_procedures3,
  228. .vs_dispatch = nfsd_dispatch,
  229. .vs_xdrsize = NFS3_SVC_XDRSIZE,
  230. .vs_hidden = 0,
  231. };