nfs3acl.c 6.4 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269
  1. /*
  2. * linux/fs/nfsd/nfs3acl.c
  3. *
  4. * Process version 3 NFSACL requests.
  5. *
  6. * Copyright (C) 2002-2003 Andreas Gruenbacher <agruen@suse.de>
  7. */
  8. #include <linux/sunrpc/svc.h>
  9. #include <linux/nfs3.h>
  10. #include <linux/nfsd/nfsd.h>
  11. #include <linux/nfsd/cache.h>
  12. #include <linux/nfsd/xdr3.h>
  13. #include <linux/posix_acl.h>
  14. #include <linux/nfsacl.h>
  15. #define RETURN_STATUS(st) { resp->status = (st); return (st); }
  16. /*
  17. * NULL call.
  18. */
  19. static __be32
  20. nfsd3_proc_null(struct svc_rqst *rqstp, void *argp, void *resp)
  21. {
  22. return nfs_ok;
  23. }
  24. /*
  25. * Get the Access and/or Default ACL of a file.
  26. */
  27. static __be32 nfsd3_proc_getacl(struct svc_rqst * rqstp,
  28. struct nfsd3_getaclargs *argp, struct nfsd3_getaclres *resp)
  29. {
  30. svc_fh *fh;
  31. struct posix_acl *acl;
  32. __be32 nfserr = 0;
  33. fh = fh_copy(&resp->fh, &argp->fh);
  34. nfserr = fh_verify(rqstp, &resp->fh, 0, NFSD_MAY_NOP);
  35. if (nfserr)
  36. RETURN_STATUS(nfserr);
  37. if (argp->mask & ~(NFS_ACL|NFS_ACLCNT|NFS_DFACL|NFS_DFACLCNT))
  38. RETURN_STATUS(nfserr_inval);
  39. resp->mask = argp->mask;
  40. if (resp->mask & (NFS_ACL|NFS_ACLCNT)) {
  41. acl = nfsd_get_posix_acl(fh, ACL_TYPE_ACCESS);
  42. if (IS_ERR(acl)) {
  43. int err = PTR_ERR(acl);
  44. if (err == -ENODATA || err == -EOPNOTSUPP)
  45. acl = NULL;
  46. else {
  47. nfserr = nfserrno(err);
  48. goto fail;
  49. }
  50. }
  51. if (acl == NULL) {
  52. /* Solaris returns the inode's minimum ACL. */
  53. struct inode *inode = fh->fh_dentry->d_inode;
  54. acl = posix_acl_from_mode(inode->i_mode, GFP_KERNEL);
  55. }
  56. resp->acl_access = acl;
  57. }
  58. if (resp->mask & (NFS_DFACL|NFS_DFACLCNT)) {
  59. /* Check how Solaris handles requests for the Default ACL
  60. of a non-directory! */
  61. acl = nfsd_get_posix_acl(fh, ACL_TYPE_DEFAULT);
  62. if (IS_ERR(acl)) {
  63. int err = PTR_ERR(acl);
  64. if (err == -ENODATA || err == -EOPNOTSUPP)
  65. acl = NULL;
  66. else {
  67. nfserr = nfserrno(err);
  68. goto fail;
  69. }
  70. }
  71. resp->acl_default = acl;
  72. }
  73. /* resp->acl_{access,default} are released in nfs3svc_release_getacl. */
  74. RETURN_STATUS(0);
  75. fail:
  76. posix_acl_release(resp->acl_access);
  77. posix_acl_release(resp->acl_default);
  78. RETURN_STATUS(nfserr);
  79. }
  80. /*
  81. * Set the Access and/or Default ACL of a file.
  82. */
  83. static __be32 nfsd3_proc_setacl(struct svc_rqst * rqstp,
  84. struct nfsd3_setaclargs *argp,
  85. struct nfsd3_attrstat *resp)
  86. {
  87. svc_fh *fh;
  88. __be32 nfserr = 0;
  89. fh = fh_copy(&resp->fh, &argp->fh);
  90. nfserr = fh_verify(rqstp, &resp->fh, 0, NFSD_MAY_SATTR);
  91. if (!nfserr) {
  92. nfserr = nfserrno( nfsd_set_posix_acl(
  93. fh, ACL_TYPE_ACCESS, argp->acl_access) );
  94. }
  95. if (!nfserr) {
  96. nfserr = nfserrno( nfsd_set_posix_acl(
  97. fh, ACL_TYPE_DEFAULT, argp->acl_default) );
  98. }
  99. /* argp->acl_{access,default} may have been allocated in
  100. nfs3svc_decode_setaclargs. */
  101. posix_acl_release(argp->acl_access);
  102. posix_acl_release(argp->acl_default);
  103. RETURN_STATUS(nfserr);
  104. }
  105. /*
  106. * XDR decode functions
  107. */
  108. static int nfs3svc_decode_getaclargs(struct svc_rqst *rqstp, __be32 *p,
  109. struct nfsd3_getaclargs *args)
  110. {
  111. if (!(p = nfs3svc_decode_fh(p, &args->fh)))
  112. return 0;
  113. args->mask = ntohl(*p); p++;
  114. return xdr_argsize_check(rqstp, p);
  115. }
  116. static int nfs3svc_decode_setaclargs(struct svc_rqst *rqstp, __be32 *p,
  117. struct nfsd3_setaclargs *args)
  118. {
  119. struct kvec *head = rqstp->rq_arg.head;
  120. unsigned int base;
  121. int n;
  122. if (!(p = nfs3svc_decode_fh(p, &args->fh)))
  123. return 0;
  124. args->mask = ntohl(*p++);
  125. if (args->mask & ~(NFS_ACL|NFS_ACLCNT|NFS_DFACL|NFS_DFACLCNT) ||
  126. !xdr_argsize_check(rqstp, p))
  127. return 0;
  128. base = (char *)p - (char *)head->iov_base;
  129. n = nfsacl_decode(&rqstp->rq_arg, base, NULL,
  130. (args->mask & NFS_ACL) ?
  131. &args->acl_access : NULL);
  132. if (n > 0)
  133. n = nfsacl_decode(&rqstp->rq_arg, base + n, NULL,
  134. (args->mask & NFS_DFACL) ?
  135. &args->acl_default : NULL);
  136. return (n > 0);
  137. }
  138. /*
  139. * XDR encode functions
  140. */
  141. /* GETACL */
  142. static int nfs3svc_encode_getaclres(struct svc_rqst *rqstp, __be32 *p,
  143. struct nfsd3_getaclres *resp)
  144. {
  145. struct dentry *dentry = resp->fh.fh_dentry;
  146. p = nfs3svc_encode_post_op_attr(rqstp, p, &resp->fh);
  147. if (resp->status == 0 && dentry && dentry->d_inode) {
  148. struct inode *inode = dentry->d_inode;
  149. struct kvec *head = rqstp->rq_res.head;
  150. unsigned int base;
  151. int n;
  152. int w;
  153. *p++ = htonl(resp->mask);
  154. if (!xdr_ressize_check(rqstp, p))
  155. return 0;
  156. base = (char *)p - (char *)head->iov_base;
  157. rqstp->rq_res.page_len = w = nfsacl_size(
  158. (resp->mask & NFS_ACL) ? resp->acl_access : NULL,
  159. (resp->mask & NFS_DFACL) ? resp->acl_default : NULL);
  160. while (w > 0) {
  161. if (!rqstp->rq_respages[rqstp->rq_resused++])
  162. return 0;
  163. w -= PAGE_SIZE;
  164. }
  165. n = nfsacl_encode(&rqstp->rq_res, base, inode,
  166. resp->acl_access,
  167. resp->mask & NFS_ACL, 0);
  168. if (n > 0)
  169. n = nfsacl_encode(&rqstp->rq_res, base + n, inode,
  170. resp->acl_default,
  171. resp->mask & NFS_DFACL,
  172. NFS_ACL_DEFAULT);
  173. if (n <= 0)
  174. return 0;
  175. } else
  176. if (!xdr_ressize_check(rqstp, p))
  177. return 0;
  178. return 1;
  179. }
  180. /* SETACL */
  181. static int nfs3svc_encode_setaclres(struct svc_rqst *rqstp, __be32 *p,
  182. struct nfsd3_attrstat *resp)
  183. {
  184. p = nfs3svc_encode_post_op_attr(rqstp, p, &resp->fh);
  185. return xdr_ressize_check(rqstp, p);
  186. }
  187. /*
  188. * XDR release functions
  189. */
  190. static int nfs3svc_release_getacl(struct svc_rqst *rqstp, __be32 *p,
  191. struct nfsd3_getaclres *resp)
  192. {
  193. fh_put(&resp->fh);
  194. posix_acl_release(resp->acl_access);
  195. posix_acl_release(resp->acl_default);
  196. return 1;
  197. }
  198. #define nfs3svc_decode_voidargs NULL
  199. #define nfs3svc_release_void NULL
  200. #define nfsd3_setaclres nfsd3_attrstat
  201. #define nfsd3_voidres nfsd3_voidargs
  202. struct nfsd3_voidargs { int dummy; };
  203. #define PROC(name, argt, rest, relt, cache, respsize) \
  204. { (svc_procfunc) nfsd3_proc_##name, \
  205. (kxdrproc_t) nfs3svc_decode_##argt##args, \
  206. (kxdrproc_t) nfs3svc_encode_##rest##res, \
  207. (kxdrproc_t) nfs3svc_release_##relt, \
  208. sizeof(struct nfsd3_##argt##args), \
  209. sizeof(struct nfsd3_##rest##res), \
  210. 0, \
  211. cache, \
  212. respsize, \
  213. }
  214. #define ST 1 /* status*/
  215. #define AT 21 /* attributes */
  216. #define pAT (1+AT) /* post attributes - conditional */
  217. #define ACL (1+NFS_ACL_MAX_ENTRIES*3) /* Access Control List */
  218. static struct svc_procedure nfsd_acl_procedures3[] = {
  219. PROC(null, void, void, void, RC_NOCACHE, ST),
  220. PROC(getacl, getacl, getacl, getacl, RC_NOCACHE, ST+1+2*(1+ACL)),
  221. PROC(setacl, setacl, setacl, fhandle, RC_NOCACHE, ST+pAT),
  222. };
  223. struct svc_version nfsd_acl_version3 = {
  224. .vs_vers = 3,
  225. .vs_nproc = 3,
  226. .vs_proc = nfsd_acl_procedures3,
  227. .vs_dispatch = nfsd_dispatch,
  228. .vs_xdrsize = NFS3_SVC_XDRSIZE,
  229. .vs_hidden = 1,
  230. };