nfs3acl.c 6.4 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271
  1. /*
  2. * Process version 3 NFSACL requests.
  3. *
  4. * Copyright (C) 2002-2003 Andreas Gruenbacher <agruen@suse.de>
  5. */
  6. #include "nfsd.h"
  7. /* FIXME: nfsacl.h is a broken header */
  8. #include <linux/nfsacl.h>
  9. #include <linux/gfp.h>
  10. #include "cache.h"
  11. #include "xdr3.h"
  12. #include "vfs.h"
  13. #define RETURN_STATUS(st) { resp->status = (st); return (st); }
  14. /*
  15. * NULL call.
  16. */
  17. static __be32
  18. nfsd3_proc_null(struct svc_rqst *rqstp, void *argp, void *resp)
  19. {
  20. return nfs_ok;
  21. }
  22. /*
  23. * Get the Access and/or Default ACL of a file.
  24. */
  25. static __be32 nfsd3_proc_getacl(struct svc_rqst * rqstp,
  26. struct nfsd3_getaclargs *argp, struct nfsd3_getaclres *resp)
  27. {
  28. struct posix_acl *acl;
  29. struct inode *inode;
  30. svc_fh *fh;
  31. __be32 nfserr = 0;
  32. fh = fh_copy(&resp->fh, &argp->fh);
  33. nfserr = fh_verify(rqstp, &resp->fh, 0, NFSD_MAY_NOP);
  34. if (nfserr)
  35. RETURN_STATUS(nfserr);
  36. inode = fh->fh_dentry->d_inode;
  37. if (argp->mask & ~(NFS_ACL|NFS_ACLCNT|NFS_DFACL|NFS_DFACLCNT))
  38. RETURN_STATUS(nfserr_inval);
  39. resp->mask = argp->mask;
  40. if (resp->mask & (NFS_ACL|NFS_ACLCNT)) {
  41. acl = get_acl(inode, ACL_TYPE_ACCESS);
  42. if (IS_ERR(acl)) {
  43. nfserr = nfserrno(PTR_ERR(acl));
  44. goto fail;
  45. }
  46. if (acl == NULL) {
  47. /* Solaris returns the inode's minimum ACL. */
  48. acl = posix_acl_from_mode(inode->i_mode, GFP_KERNEL);
  49. }
  50. resp->acl_access = acl;
  51. }
  52. if (resp->mask & (NFS_DFACL|NFS_DFACLCNT)) {
  53. /* Check how Solaris handles requests for the Default ACL
  54. of a non-directory! */
  55. acl = get_acl(inode, ACL_TYPE_DEFAULT);
  56. if (IS_ERR(acl)) {
  57. nfserr = nfserrno(PTR_ERR(acl));
  58. goto fail;
  59. }
  60. resp->acl_default = acl;
  61. }
  62. /* resp->acl_{access,default} are released in nfs3svc_release_getacl. */
  63. RETURN_STATUS(0);
  64. fail:
  65. posix_acl_release(resp->acl_access);
  66. posix_acl_release(resp->acl_default);
  67. RETURN_STATUS(nfserr);
  68. }
  69. /*
  70. * Set the Access and/or Default ACL of a file.
  71. */
  72. static __be32 nfsd3_proc_setacl(struct svc_rqst * rqstp,
  73. struct nfsd3_setaclargs *argp,
  74. struct nfsd3_attrstat *resp)
  75. {
  76. struct inode *inode;
  77. svc_fh *fh;
  78. __be32 nfserr = 0;
  79. int error;
  80. fh = fh_copy(&resp->fh, &argp->fh);
  81. nfserr = fh_verify(rqstp, &resp->fh, 0, NFSD_MAY_SATTR);
  82. if (nfserr)
  83. goto out;
  84. inode = fh->fh_dentry->d_inode;
  85. if (!IS_POSIXACL(inode) || !inode->i_op->set_acl) {
  86. error = -EOPNOTSUPP;
  87. goto out_errno;
  88. }
  89. error = fh_want_write(fh);
  90. if (error)
  91. goto out_errno;
  92. error = inode->i_op->set_acl(inode, argp->acl_access, ACL_TYPE_ACCESS);
  93. if (error)
  94. goto out_drop_write;
  95. error = inode->i_op->set_acl(inode, argp->acl_default,
  96. ACL_TYPE_DEFAULT);
  97. out_drop_write:
  98. fh_drop_write(fh);
  99. out_errno:
  100. nfserr = nfserrno(error);
  101. out:
  102. /* argp->acl_{access,default} may have been allocated in
  103. nfs3svc_decode_setaclargs. */
  104. posix_acl_release(argp->acl_access);
  105. posix_acl_release(argp->acl_default);
  106. RETURN_STATUS(nfserr);
  107. }
  108. /*
  109. * XDR decode functions
  110. */
  111. static int nfs3svc_decode_getaclargs(struct svc_rqst *rqstp, __be32 *p,
  112. struct nfsd3_getaclargs *args)
  113. {
  114. if (!(p = nfs3svc_decode_fh(p, &args->fh)))
  115. return 0;
  116. args->mask = ntohl(*p); p++;
  117. return xdr_argsize_check(rqstp, p);
  118. }
  119. static int nfs3svc_decode_setaclargs(struct svc_rqst *rqstp, __be32 *p,
  120. struct nfsd3_setaclargs *args)
  121. {
  122. struct kvec *head = rqstp->rq_arg.head;
  123. unsigned int base;
  124. int n;
  125. if (!(p = nfs3svc_decode_fh(p, &args->fh)))
  126. return 0;
  127. args->mask = ntohl(*p++);
  128. if (args->mask & ~(NFS_ACL|NFS_ACLCNT|NFS_DFACL|NFS_DFACLCNT) ||
  129. !xdr_argsize_check(rqstp, p))
  130. return 0;
  131. base = (char *)p - (char *)head->iov_base;
  132. n = nfsacl_decode(&rqstp->rq_arg, base, NULL,
  133. (args->mask & NFS_ACL) ?
  134. &args->acl_access : NULL);
  135. if (n > 0)
  136. n = nfsacl_decode(&rqstp->rq_arg, base + n, NULL,
  137. (args->mask & NFS_DFACL) ?
  138. &args->acl_default : NULL);
  139. return (n > 0);
  140. }
  141. /*
  142. * XDR encode functions
  143. */
  144. /* GETACL */
  145. static int nfs3svc_encode_getaclres(struct svc_rqst *rqstp, __be32 *p,
  146. struct nfsd3_getaclres *resp)
  147. {
  148. struct dentry *dentry = resp->fh.fh_dentry;
  149. p = nfs3svc_encode_post_op_attr(rqstp, p, &resp->fh);
  150. if (resp->status == 0 && dentry && dentry->d_inode) {
  151. struct inode *inode = dentry->d_inode;
  152. struct kvec *head = rqstp->rq_res.head;
  153. unsigned int base;
  154. int n;
  155. int w;
  156. *p++ = htonl(resp->mask);
  157. if (!xdr_ressize_check(rqstp, p))
  158. return 0;
  159. base = (char *)p - (char *)head->iov_base;
  160. rqstp->rq_res.page_len = w = nfsacl_size(
  161. (resp->mask & NFS_ACL) ? resp->acl_access : NULL,
  162. (resp->mask & NFS_DFACL) ? resp->acl_default : NULL);
  163. while (w > 0) {
  164. if (!*(rqstp->rq_next_page++))
  165. return 0;
  166. w -= PAGE_SIZE;
  167. }
  168. n = nfsacl_encode(&rqstp->rq_res, base, inode,
  169. resp->acl_access,
  170. resp->mask & NFS_ACL, 0);
  171. if (n > 0)
  172. n = nfsacl_encode(&rqstp->rq_res, base + n, inode,
  173. resp->acl_default,
  174. resp->mask & NFS_DFACL,
  175. NFS_ACL_DEFAULT);
  176. if (n <= 0)
  177. return 0;
  178. } else
  179. if (!xdr_ressize_check(rqstp, p))
  180. return 0;
  181. return 1;
  182. }
  183. /* SETACL */
  184. static int nfs3svc_encode_setaclres(struct svc_rqst *rqstp, __be32 *p,
  185. struct nfsd3_attrstat *resp)
  186. {
  187. p = nfs3svc_encode_post_op_attr(rqstp, p, &resp->fh);
  188. return xdr_ressize_check(rqstp, p);
  189. }
  190. /*
  191. * XDR release functions
  192. */
  193. static int nfs3svc_release_getacl(struct svc_rqst *rqstp, __be32 *p,
  194. struct nfsd3_getaclres *resp)
  195. {
  196. fh_put(&resp->fh);
  197. posix_acl_release(resp->acl_access);
  198. posix_acl_release(resp->acl_default);
  199. return 1;
  200. }
  201. #define nfs3svc_decode_voidargs NULL
  202. #define nfs3svc_release_void NULL
  203. #define nfsd3_setaclres nfsd3_attrstat
  204. #define nfsd3_voidres nfsd3_voidargs
  205. struct nfsd3_voidargs { int dummy; };
  206. #define PROC(name, argt, rest, relt, cache, respsize) \
  207. { (svc_procfunc) nfsd3_proc_##name, \
  208. (kxdrproc_t) nfs3svc_decode_##argt##args, \
  209. (kxdrproc_t) nfs3svc_encode_##rest##res, \
  210. (kxdrproc_t) nfs3svc_release_##relt, \
  211. sizeof(struct nfsd3_##argt##args), \
  212. sizeof(struct nfsd3_##rest##res), \
  213. 0, \
  214. cache, \
  215. respsize, \
  216. }
  217. #define ST 1 /* status*/
  218. #define AT 21 /* attributes */
  219. #define pAT (1+AT) /* post attributes - conditional */
  220. #define ACL (1+NFS_ACL_MAX_ENTRIES*3) /* Access Control List */
  221. static struct svc_procedure nfsd_acl_procedures3[] = {
  222. PROC(null, void, void, void, RC_NOCACHE, ST),
  223. PROC(getacl, getacl, getacl, getacl, RC_NOCACHE, ST+1+2*(1+ACL)),
  224. PROC(setacl, setacl, setacl, fhandle, RC_NOCACHE, ST+pAT),
  225. };
  226. struct svc_version nfsd_acl_version3 = {
  227. .vs_vers = 3,
  228. .vs_nproc = 3,
  229. .vs_proc = nfsd_acl_procedures3,
  230. .vs_dispatch = nfsd_dispatch,
  231. .vs_xdrsize = NFS3_SVC_XDRSIZE,
  232. .vs_hidden = 0,
  233. };