]> bbs.cooldavid.org Git - net-next-2.6.git/blame - fs/nfsd/nfs2acl.c
nfs: move more to Documentation/filesystems/nfs
[net-next-2.6.git] / fs / nfsd / nfs2acl.c
CommitLineData
a257cdd0 1/*
f30c2269 2 * linux/fs/nfsd/nfs2acl.c
a257cdd0
AG
3 *
4 * Process version 2 NFSACL requests.
5 *
6 * Copyright (C) 2002-2003 Andreas Gruenbacher <agruen@suse.de>
7 */
8
9#include <linux/sunrpc/svc.h>
10#include <linux/nfs.h>
11#include <linux/nfsd/nfsd.h>
12#include <linux/nfsd/cache.h>
13#include <linux/nfsd/xdr.h>
14#include <linux/nfsd/xdr3.h>
15#include <linux/posix_acl.h>
16#include <linux/nfsacl.h>
17
18#define NFSDDBG_FACILITY NFSDDBG_PROC
19#define RETURN_STATUS(st) { resp->status = (st); return (st); }
20
21/*
22 * NULL call.
23 */
7111c66e 24static __be32
a257cdd0
AG
25nfsacld_proc_null(struct svc_rqst *rqstp, void *argp, void *resp)
26{
27 return nfs_ok;
28}
29
30/*
31 * Get the Access and/or Default ACL of a file.
32 */
7111c66e 33static __be32 nfsacld_proc_getacl(struct svc_rqst * rqstp,
a257cdd0
AG
34 struct nfsd3_getaclargs *argp, struct nfsd3_getaclres *resp)
35{
36 svc_fh *fh;
37 struct posix_acl *acl;
c4d987ba 38 __be32 nfserr = 0;
a257cdd0
AG
39
40 dprintk("nfsd: GETACL(2acl) %s\n", SVCFH_fmt(&argp->fh));
41
42 fh = fh_copy(&resp->fh, &argp->fh);
8837abca
MS
43 nfserr = fh_verify(rqstp, &resp->fh, 0, NFSD_MAY_NOP);
44 if (nfserr)
ac8587dc 45 RETURN_STATUS(nfserr);
a257cdd0
AG
46
47 if (argp->mask & ~(NFS_ACL|NFS_ACLCNT|NFS_DFACL|NFS_DFACLCNT))
48 RETURN_STATUS(nfserr_inval);
49 resp->mask = argp->mask;
50
51 if (resp->mask & (NFS_ACL|NFS_ACLCNT)) {
52 acl = nfsd_get_posix_acl(fh, ACL_TYPE_ACCESS);
53 if (IS_ERR(acl)) {
54 int err = PTR_ERR(acl);
55
56 if (err == -ENODATA || err == -EOPNOTSUPP)
57 acl = NULL;
58 else {
59 nfserr = nfserrno(err);
60 goto fail;
61 }
62 }
63 if (acl == NULL) {
64 /* Solaris returns the inode's minimum ACL. */
65
66 struct inode *inode = fh->fh_dentry->d_inode;
67 acl = posix_acl_from_mode(inode->i_mode, GFP_KERNEL);
68 }
69 resp->acl_access = acl;
70 }
71 if (resp->mask & (NFS_DFACL|NFS_DFACLCNT)) {
72 /* Check how Solaris handles requests for the Default ACL
73 of a non-directory! */
74
75 acl = nfsd_get_posix_acl(fh, ACL_TYPE_DEFAULT);
76 if (IS_ERR(acl)) {
77 int err = PTR_ERR(acl);
78
79 if (err == -ENODATA || err == -EOPNOTSUPP)
80 acl = NULL;
81 else {
82 nfserr = nfserrno(err);
83 goto fail;
84 }
85 }
86 resp->acl_default = acl;
87 }
88
89 /* resp->acl_{access,default} are released in nfssvc_release_getacl. */
90 RETURN_STATUS(0);
91
92fail:
93 posix_acl_release(resp->acl_access);
94 posix_acl_release(resp->acl_default);
95 RETURN_STATUS(nfserr);
96}
97
98/*
99 * Set the Access and/or Default ACL of a file.
100 */
7111c66e 101static __be32 nfsacld_proc_setacl(struct svc_rqst * rqstp,
a257cdd0
AG
102 struct nfsd3_setaclargs *argp,
103 struct nfsd_attrstat *resp)
104{
105 svc_fh *fh;
c4d987ba 106 __be32 nfserr = 0;
a257cdd0
AG
107
108 dprintk("nfsd: SETACL(2acl) %s\n", SVCFH_fmt(&argp->fh));
109
110 fh = fh_copy(&resp->fh, &argp->fh);
8837abca 111 nfserr = fh_verify(rqstp, &resp->fh, 0, NFSD_MAY_SATTR);
a257cdd0
AG
112
113 if (!nfserr) {
114 nfserr = nfserrno( nfsd_set_posix_acl(
115 fh, ACL_TYPE_ACCESS, argp->acl_access) );
116 }
117 if (!nfserr) {
118 nfserr = nfserrno( nfsd_set_posix_acl(
119 fh, ACL_TYPE_DEFAULT, argp->acl_default) );
120 }
121
122 /* argp->acl_{access,default} may have been allocated in
123 nfssvc_decode_setaclargs. */
124 posix_acl_release(argp->acl_access);
125 posix_acl_release(argp->acl_default);
126 return nfserr;
127}
128
129/*
130 * Check file attributes
131 */
7111c66e 132static __be32 nfsacld_proc_getattr(struct svc_rqst * rqstp,
a257cdd0
AG
133 struct nfsd_fhandle *argp, struct nfsd_attrstat *resp)
134{
135 dprintk("nfsd: GETATTR %s\n", SVCFH_fmt(&argp->fh));
136
137 fh_copy(&resp->fh, &argp->fh);
8837abca 138 return fh_verify(rqstp, &resp->fh, 0, NFSD_MAY_NOP);
a257cdd0
AG
139}
140
141/*
142 * Check file access
143 */
7111c66e 144static __be32 nfsacld_proc_access(struct svc_rqst *rqstp, struct nfsd3_accessargs *argp,
a257cdd0
AG
145 struct nfsd3_accessres *resp)
146{
c4d987ba 147 __be32 nfserr;
a257cdd0
AG
148
149 dprintk("nfsd: ACCESS(2acl) %s 0x%x\n",
150 SVCFH_fmt(&argp->fh),
151 argp->access);
152
153 fh_copy(&resp->fh, &argp->fh);
154 resp->access = argp->access;
155 nfserr = nfsd_access(rqstp, &resp->fh, &resp->access, NULL);
156 return nfserr;
157}
158
159/*
160 * XDR decode functions
161 */
131a21c2 162static int nfsaclsvc_decode_getaclargs(struct svc_rqst *rqstp, __be32 *p,
a257cdd0
AG
163 struct nfsd3_getaclargs *argp)
164{
165 if (!(p = nfs2svc_decode_fh(p, &argp->fh)))
166 return 0;
167 argp->mask = ntohl(*p); p++;
168
169 return xdr_argsize_check(rqstp, p);
170}
171
172
131a21c2 173static int nfsaclsvc_decode_setaclargs(struct svc_rqst *rqstp, __be32 *p,
a257cdd0
AG
174 struct nfsd3_setaclargs *argp)
175{
176 struct kvec *head = rqstp->rq_arg.head;
177 unsigned int base;
178 int n;
179
180 if (!(p = nfs2svc_decode_fh(p, &argp->fh)))
181 return 0;
182 argp->mask = ntohl(*p++);
183 if (argp->mask & ~(NFS_ACL|NFS_ACLCNT|NFS_DFACL|NFS_DFACLCNT) ||
184 !xdr_argsize_check(rqstp, p))
185 return 0;
186
187 base = (char *)p - (char *)head->iov_base;
188 n = nfsacl_decode(&rqstp->rq_arg, base, NULL,
189 (argp->mask & NFS_ACL) ?
190 &argp->acl_access : NULL);
191 if (n > 0)
192 n = nfsacl_decode(&rqstp->rq_arg, base + n, NULL,
193 (argp->mask & NFS_DFACL) ?
194 &argp->acl_default : NULL);
195 return (n > 0);
196}
197
131a21c2 198static int nfsaclsvc_decode_fhandleargs(struct svc_rqst *rqstp, __be32 *p,
a257cdd0
AG
199 struct nfsd_fhandle *argp)
200{
201 if (!(p = nfs2svc_decode_fh(p, &argp->fh)))
202 return 0;
203 return xdr_argsize_check(rqstp, p);
204}
205
131a21c2 206static int nfsaclsvc_decode_accessargs(struct svc_rqst *rqstp, __be32 *p,
a257cdd0
AG
207 struct nfsd3_accessargs *argp)
208{
209 if (!(p = nfs2svc_decode_fh(p, &argp->fh)))
210 return 0;
211 argp->access = ntohl(*p++);
212
213 return xdr_argsize_check(rqstp, p);
214}
215
216/*
217 * XDR encode functions
218 */
219
1b7e0403
PS
220/*
221 * There must be an encoding function for void results so svc_process
222 * will work properly.
223 */
224int
225nfsaclsvc_encode_voidres(struct svc_rqst *rqstp, __be32 *p, void *dummy)
226{
227 return xdr_ressize_check(rqstp, p);
228}
229
a257cdd0 230/* GETACL */
131a21c2 231static int nfsaclsvc_encode_getaclres(struct svc_rqst *rqstp, __be32 *p,
a257cdd0
AG
232 struct nfsd3_getaclres *resp)
233{
234 struct dentry *dentry = resp->fh.fh_dentry;
aefa89d1 235 struct inode *inode;
a257cdd0
AG
236 struct kvec *head = rqstp->rq_res.head;
237 unsigned int base;
238 int n;
cb65a5ba 239 int w;
a257cdd0 240
aefa89d1
P
241 /*
242 * Since this is version 2, the check for nfserr in
243 * nfsd_dispatch actually ensures the following cannot happen.
244 * However, it seems fragile to depend on that.
245 */
a257cdd0
AG
246 if (dentry == NULL || dentry->d_inode == NULL)
247 return 0;
248 inode = dentry->d_inode;
249
250 p = nfs2svc_encode_fattr(rqstp, p, &resp->fh);
251 *p++ = htonl(resp->mask);
252 if (!xdr_ressize_check(rqstp, p))
253 return 0;
254 base = (char *)p - (char *)head->iov_base;
255
cb65a5ba
JJ
256 rqstp->rq_res.page_len = w = nfsacl_size(
257 (resp->mask & NFS_ACL) ? resp->acl_access : NULL,
258 (resp->mask & NFS_DFACL) ? resp->acl_default : NULL);
a257cdd0 259 while (w > 0) {
44524359 260 if (!rqstp->rq_respages[rqstp->rq_resused++])
a257cdd0
AG
261 return 0;
262 w -= PAGE_SIZE;
263 }
264
265 n = nfsacl_encode(&rqstp->rq_res, base, inode,
266 resp->acl_access,
267 resp->mask & NFS_ACL, 0);
268 if (n > 0)
269 n = nfsacl_encode(&rqstp->rq_res, base + n, inode,
270 resp->acl_default,
271 resp->mask & NFS_DFACL,
272 NFS_ACL_DEFAULT);
273 if (n <= 0)
274 return 0;
275 return 1;
276}
277
131a21c2 278static int nfsaclsvc_encode_attrstatres(struct svc_rqst *rqstp, __be32 *p,
a257cdd0
AG
279 struct nfsd_attrstat *resp)
280{
281 p = nfs2svc_encode_fattr(rqstp, p, &resp->fh);
282 return xdr_ressize_check(rqstp, p);
283}
284
285/* ACCESS */
131a21c2 286static int nfsaclsvc_encode_accessres(struct svc_rqst *rqstp, __be32 *p,
a257cdd0
AG
287 struct nfsd3_accessres *resp)
288{
289 p = nfs2svc_encode_fattr(rqstp, p, &resp->fh);
290 *p++ = htonl(resp->access);
291 return xdr_ressize_check(rqstp, p);
292}
293
294/*
295 * XDR release functions
296 */
131a21c2 297static int nfsaclsvc_release_getacl(struct svc_rqst *rqstp, __be32 *p,
a257cdd0
AG
298 struct nfsd3_getaclres *resp)
299{
300 fh_put(&resp->fh);
301 posix_acl_release(resp->acl_access);
302 posix_acl_release(resp->acl_default);
303 return 1;
304}
305
c9ce2283
GB
306static int nfsaclsvc_release_attrstat(struct svc_rqst *rqstp, __be32 *p,
307 struct nfsd_attrstat *resp)
a257cdd0
AG
308{
309 fh_put(&resp->fh);
310 return 1;
311}
312
c9ce2283
GB
313static int nfsaclsvc_release_access(struct svc_rqst *rqstp, __be32 *p,
314 struct nfsd3_accessres *resp)
315{
316 fh_put(&resp->fh);
317 return 1;
318}
319
a257cdd0 320#define nfsaclsvc_decode_voidargs NULL
a257cdd0
AG
321#define nfsaclsvc_release_void NULL
322#define nfsd3_fhandleargs nfsd_fhandle
323#define nfsd3_attrstatres nfsd_attrstat
324#define nfsd3_voidres nfsd3_voidargs
325struct nfsd3_voidargs { int dummy; };
326
327#define PROC(name, argt, rest, relt, cache, respsize) \
328 { (svc_procfunc) nfsacld_proc_##name, \
329 (kxdrproc_t) nfsaclsvc_decode_##argt##args, \
330 (kxdrproc_t) nfsaclsvc_encode_##rest##res, \
331 (kxdrproc_t) nfsaclsvc_release_##relt, \
332 sizeof(struct nfsd3_##argt##args), \
333 sizeof(struct nfsd3_##rest##res), \
334 0, \
335 cache, \
336 respsize, \
337 }
338
339#define ST 1 /* status*/
340#define AT 21 /* attributes */
341#define pAT (1+AT) /* post attributes - conditional */
342#define ACL (1+NFS_ACL_MAX_ENTRIES*3) /* Access Control List */
343
344static struct svc_procedure nfsd_acl_procedures2[] = {
345 PROC(null, void, void, void, RC_NOCACHE, ST),
346 PROC(getacl, getacl, getacl, getacl, RC_NOCACHE, ST+1+2*(1+ACL)),
c9ce2283
GB
347 PROC(setacl, setacl, attrstat, attrstat, RC_NOCACHE, ST+AT),
348 PROC(getattr, fhandle, attrstat, attrstat, RC_NOCACHE, ST+AT),
349 PROC(access, access, access, access, RC_NOCACHE, ST+AT+1),
a257cdd0
AG
350};
351
352struct svc_version nfsd_acl_version2 = {
353 .vs_vers = 2,
354 .vs_nproc = 5,
355 .vs_proc = nfsd_acl_procedures2,
356 .vs_dispatch = nfsd_dispatch,
357 .vs_xdrsize = NFS3_SVC_XDRSIZE,
1b7e0403 358 .vs_hidden = 0,
a257cdd0 359};