2 Unix SMB/Netbios implementation.
4 VFS initialisation and support functions
5 Copyright (C) Tim Potter 1999
6 Copyright (C) Alexander Bokovoy 2002
7 Copyright (C) James Peach 2006
9 This program is free software; you can redistribute it and/or modify
10 it under the terms of the GNU General Public License as published by
11 the Free Software Foundation; either version 3 of the License, or
12 (at your option) any later version.
14 This program is distributed in the hope that it will be useful,
15 but WITHOUT ANY WARRANTY; without even the implied warranty of
16 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
17 GNU General Public License for more details.
19 You should have received a copy of the GNU General Public License
20 along with this program. If not, see <http://www.gnu.org/licenses/>.
22 This work was sponsored by Optifacio Software Services, Inc.
26 #include "smbd/globals.h"
29 #define DBGC_CLASS DBGC_VFS
33 struct vfs_init_function_entry
{
35 const vfs_op_tuple
*vfs_op_tuples
;
36 struct vfs_init_function_entry
*prev
, *next
;
39 /****************************************************************************
40 maintain the list of available backends
41 ****************************************************************************/
43 static struct vfs_init_function_entry
*vfs_find_backend_entry(const char *name
)
45 struct vfs_init_function_entry
*entry
= backends
;
47 DEBUG(10, ("vfs_find_backend_entry called for %s\n", name
));
50 if (strcmp(entry
->name
, name
)==0) return entry
;
57 NTSTATUS
smb_register_vfs(int version
, const char *name
, const vfs_op_tuple
*vfs_op_tuples
)
59 struct vfs_init_function_entry
*entry
= backends
;
61 if ((version
!= SMB_VFS_INTERFACE_VERSION
)) {
62 DEBUG(0, ("Failed to register vfs module.\n"
63 "The module was compiled against SMB_VFS_INTERFACE_VERSION %d,\n"
64 "current SMB_VFS_INTERFACE_VERSION is %d.\n"
65 "Please recompile against the current Samba Version!\n",
66 version
, SMB_VFS_INTERFACE_VERSION
));
67 return NT_STATUS_OBJECT_TYPE_MISMATCH
;
70 if (!name
|| !name
[0] || !vfs_op_tuples
) {
71 DEBUG(0,("smb_register_vfs() called with NULL pointer or empty name!\n"));
72 return NT_STATUS_INVALID_PARAMETER
;
75 if (vfs_find_backend_entry(name
)) {
76 DEBUG(0,("VFS module %s already loaded!\n", name
));
77 return NT_STATUS_OBJECT_NAME_COLLISION
;
80 entry
= SMB_XMALLOC_P(struct vfs_init_function_entry
);
81 entry
->name
= smb_xstrdup(name
);
82 entry
->vfs_op_tuples
= vfs_op_tuples
;
84 DLIST_ADD(backends
, entry
);
85 DEBUG(5, ("Successfully added vfs backend '%s'\n", name
));
89 /****************************************************************************
90 initialise default vfs hooks
91 ****************************************************************************/
93 static void vfs_init_default(connection_struct
*conn
)
95 DEBUG(3, ("Initialising default vfs hooks\n"));
96 vfs_init_custom(conn
, DEFAULT_VFS_MODULE_NAME
);
99 /****************************************************************************
100 initialise custom vfs hooks
101 ****************************************************************************/
103 static inline void vfs_set_operation(struct vfs_ops
* vfs
, vfs_op_type which
,
104 struct vfs_handle_struct
* handle
, void * op
)
106 ((struct vfs_handle_struct
**)&vfs
->handles
)[which
] = handle
;
107 ((void **)(void *)&vfs
->ops
)[which
] = op
;
110 bool vfs_init_custom(connection_struct
*conn
, const char *vfs_object
)
112 const vfs_op_tuple
*ops
;
113 char *module_path
= NULL
;
114 char *module_name
= NULL
;
115 char *module_param
= NULL
, *p
;
117 vfs_handle_struct
*handle
;
118 const struct vfs_init_function_entry
*entry
;
120 if (!conn
||!vfs_object
||!vfs_object
[0]) {
121 DEBUG(0,("vfs_init_custon() called with NULL pointer or emtpy vfs_object!\n"));
129 DEBUG(3, ("Initialising custom vfs hooks from [%s]\n", vfs_object
));
131 module_path
= smb_xstrdup(vfs_object
);
133 p
= strchr_m(module_path
, ':');
138 trim_char(module_param
, ' ', ' ');
141 trim_char(module_path
, ' ', ' ');
143 module_name
= smb_xstrdup(module_path
);
145 if ((module_name
[0] == '/') &&
146 (strcmp(module_path
, DEFAULT_VFS_MODULE_NAME
) != 0)) {
149 * Extract the module name from the path. Just use the base
150 * name of the last path component.
153 SAFE_FREE(module_name
);
154 module_name
= smb_xstrdup(strrchr_m(module_path
, '/')+1);
156 p
= strchr_m(module_name
, '.');
163 /* First, try to load the module with the new module system */
164 entry
= vfs_find_backend_entry(module_name
);
168 DEBUG(5, ("vfs module [%s] not loaded - trying to load...\n",
171 status
= smb_probe_module("vfs", module_path
);
172 if (!NT_STATUS_IS_OK(status
)) {
173 DEBUG(0, ("error probing vfs module '%s': %s\n",
174 module_path
, nt_errstr(status
)));
178 entry
= vfs_find_backend_entry(module_name
);
180 DEBUG(0,("Can't find a vfs module [%s]\n",vfs_object
));
185 DEBUGADD(5,("Successfully loaded vfs module [%s] with the new modules system\n", vfs_object
));
186 if ((ops
= entry
->vfs_op_tuples
) == NULL
) {
187 DEBUG(0, ("entry->vfs_op_tuples==NULL for [%s] failed\n", vfs_object
));
191 handle
= TALLOC_ZERO_P(conn
, vfs_handle_struct
);
193 DEBUG(0,("TALLOC_ZERO() failed!\n"));
196 memcpy(&handle
->vfs_next
, &conn
->vfs
, sizeof(struct vfs_ops
));
199 handle
->param
= talloc_strdup(conn
, module_param
);
201 DLIST_ADD(conn
->vfs_handles
, handle
);
203 for(i
=0; ops
[i
].op
!= NULL
; i
++) {
204 DEBUG(5, ("Checking operation #%d (type %d, layer %d)\n", i
, ops
[i
].type
, ops
[i
].layer
));
205 if(ops
[i
].layer
== SMB_VFS_LAYER_OPAQUE
) {
206 /* If this operation was already made opaque by different module, it
207 * will be overridden here.
209 DEBUGADD(5, ("Making operation type %d opaque [module %s]\n", ops
[i
].type
, vfs_object
));
210 vfs_set_operation(&conn
->vfs_opaque
, ops
[i
].type
, handle
, ops
[i
].op
);
212 /* Change current VFS disposition*/
213 DEBUGADD(5, ("Accepting operation type %d from module %s\n", ops
[i
].type
, vfs_object
));
214 vfs_set_operation(&conn
->vfs
, ops
[i
].type
, handle
, ops
[i
].op
);
217 SAFE_FREE(module_path
);
218 SAFE_FREE(module_name
);
222 SAFE_FREE(module_path
);
223 SAFE_FREE(module_name
);
227 /*****************************************************************
228 Allow VFS modules to extend files_struct with VFS-specific state.
229 This will be ok for small numbers of extensions, but might need to
230 be refactored if it becomes more widely used.
231 ******************************************************************/
233 #define EXT_DATA_AREA(e) ((uint8 *)(e) + sizeof(struct vfs_fsp_data))
235 void *vfs_add_fsp_extension_notype(vfs_handle_struct
*handle
,
236 files_struct
*fsp
, size_t ext_size
,
237 void (*destroy_fn
)(void *p_data
))
239 struct vfs_fsp_data
*ext
;
242 /* Prevent VFS modules adding multiple extensions. */
243 if ((ext_data
= vfs_fetch_fsp_extension(handle
, fsp
))) {
247 ext
= (struct vfs_fsp_data
*)TALLOC_ZERO(
248 handle
->conn
, sizeof(struct vfs_fsp_data
) + ext_size
);
254 ext
->next
= fsp
->vfs_extension
;
255 ext
->destroy
= destroy_fn
;
256 fsp
->vfs_extension
= ext
;
257 return EXT_DATA_AREA(ext
);
260 void vfs_remove_fsp_extension(vfs_handle_struct
*handle
, files_struct
*fsp
)
262 struct vfs_fsp_data
*curr
;
263 struct vfs_fsp_data
*prev
;
265 for (curr
= fsp
->vfs_extension
, prev
= NULL
;
267 prev
= curr
, curr
= curr
->next
) {
268 if (curr
->owner
== handle
) {
270 prev
->next
= curr
->next
;
272 fsp
->vfs_extension
= curr
->next
;
275 curr
->destroy(EXT_DATA_AREA(curr
));
283 void *vfs_memctx_fsp_extension(vfs_handle_struct
*handle
, files_struct
*fsp
)
285 struct vfs_fsp_data
*head
;
287 for (head
= fsp
->vfs_extension
; head
; head
= head
->next
) {
288 if (head
->owner
== handle
) {
296 void *vfs_fetch_fsp_extension(vfs_handle_struct
*handle
, files_struct
*fsp
)
298 struct vfs_fsp_data
*head
;
300 head
= (struct vfs_fsp_data
*)vfs_memctx_fsp_extension(handle
, fsp
);
302 return EXT_DATA_AREA(head
);
310 /*****************************************************************
312 ******************************************************************/
314 bool smbd_vfs_init(connection_struct
*conn
)
316 const char **vfs_objects
;
320 /* Normal share - initialise with disk access functions */
321 vfs_init_default(conn
);
322 vfs_objects
= lp_vfs_objects(SNUM(conn
));
324 /* Override VFS functions if 'vfs object' was not specified*/
325 if (!vfs_objects
|| !vfs_objects
[0])
328 for (i
=0; vfs_objects
[i
] ;) {
332 for (j
=i
-1; j
>= 0; j
--) {
333 if (!vfs_init_custom(conn
, vfs_objects
[j
])) {
334 DEBUG(0, ("smbd_vfs_init: vfs_init_custom failed for %s\n", vfs_objects
[j
]));
341 /*******************************************************************
342 Check if directory exists.
343 ********************************************************************/
345 bool vfs_directory_exist(connection_struct
*conn
, const char *dname
, SMB_STRUCT_STAT
*st
)
353 if (SMB_VFS_STAT(conn
,dname
,st
) != 0)
356 ret
= S_ISDIR(st
->st_ex_mode
);
363 /*******************************************************************
364 Check if an object exists in the vfs.
365 ********************************************************************/
367 bool vfs_object_exist(connection_struct
*conn
,const char *fname
,SMB_STRUCT_STAT
*sbuf
)
376 if (SMB_VFS_STAT(conn
,fname
,sbuf
) == -1)
381 /*******************************************************************
382 Check if a file exists in the vfs.
383 ********************************************************************/
385 bool vfs_file_exist(connection_struct
*conn
, const char *fname
,SMB_STRUCT_STAT
*sbuf
)
394 if (SMB_VFS_STAT(conn
,fname
,sbuf
) == -1)
396 return(S_ISREG(sbuf
->st_ex_mode
));
399 /****************************************************************************
400 Read data from fsp on the vfs. (note: EINTR re-read differs from vfs_write_data)
401 ****************************************************************************/
403 ssize_t
vfs_read_data(files_struct
*fsp
, char *buf
, size_t byte_count
)
407 while (total
< byte_count
)
409 ssize_t ret
= SMB_VFS_READ(fsp
, buf
+ total
,
412 if (ret
== 0) return total
;
421 return (ssize_t
)total
;
424 ssize_t
vfs_pread_data(files_struct
*fsp
, char *buf
,
425 size_t byte_count
, SMB_OFF_T offset
)
429 while (total
< byte_count
)
431 ssize_t ret
= SMB_VFS_PREAD(fsp
, buf
+ total
,
432 byte_count
- total
, offset
+ total
);
434 if (ret
== 0) return total
;
443 return (ssize_t
)total
;
446 /****************************************************************************
447 Write data to a fd on the vfs.
448 ****************************************************************************/
450 ssize_t
vfs_write_data(struct smb_request
*req
,
458 if (req
&& req
->unread_bytes
) {
459 SMB_ASSERT(req
->unread_bytes
== N
);
460 /* VFS_RECVFILE must drain the socket
461 * before returning. */
462 req
->unread_bytes
= 0;
463 return SMB_VFS_RECVFILE(smbd_server_fd(),
470 ret
= SMB_VFS_WRITE(fsp
, buffer
+ total
, N
- total
);
479 return (ssize_t
)total
;
482 ssize_t
vfs_pwrite_data(struct smb_request
*req
,
491 if (req
&& req
->unread_bytes
) {
492 SMB_ASSERT(req
->unread_bytes
== N
);
493 /* VFS_RECVFILE must drain the socket
494 * before returning. */
495 req
->unread_bytes
= 0;
496 return SMB_VFS_RECVFILE(smbd_server_fd(),
503 ret
= SMB_VFS_PWRITE(fsp
, buffer
+ total
, N
- total
,
513 return (ssize_t
)total
;
515 /****************************************************************************
516 An allocate file space call using the vfs interface.
517 Allocates space for a file from a filedescriptor.
518 Returns 0 on success, -1 on failure.
519 ****************************************************************************/
521 int vfs_allocate_file_space(files_struct
*fsp
, uint64_t len
)
525 connection_struct
*conn
= fsp
->conn
;
526 uint64_t space_avail
;
527 uint64_t bsize
,dfree
,dsize
;
530 * Actually try and commit the space on disk....
533 DEBUG(10,("vfs_allocate_file_space: file %s, len %.0f\n", fsp
->fsp_name
, (double)len
));
535 if (((SMB_OFF_T
)len
) < 0) {
536 DEBUG(0,("vfs_allocate_file_space: %s negative len requested.\n", fsp
->fsp_name
));
541 ret
= SMB_VFS_FSTAT(fsp
, &st
);
545 if (len
== (uint64_t)st
.st_ex_size
)
548 if (len
< (uint64_t)st
.st_ex_size
) {
549 /* Shrink - use ftruncate. */
551 DEBUG(10,("vfs_allocate_file_space: file %s, shrink. Current size %.0f\n",
552 fsp
->fsp_name
, (double)st
.st_ex_size
));
554 contend_level2_oplocks_begin(fsp
, LEVEL2_CONTEND_ALLOC_SHRINK
);
556 flush_write_cache(fsp
, SIZECHANGE_FLUSH
);
557 if ((ret
= SMB_VFS_FTRUNCATE(fsp
, (SMB_OFF_T
)len
)) != -1) {
558 set_filelen_write_cache(fsp
, len
);
561 contend_level2_oplocks_end(fsp
, LEVEL2_CONTEND_ALLOC_SHRINK
);
566 /* Grow - we need to test if we have enough space. */
568 contend_level2_oplocks_begin(fsp
, LEVEL2_CONTEND_ALLOC_GROW
);
569 contend_level2_oplocks_end(fsp
, LEVEL2_CONTEND_ALLOC_GROW
);
571 if (!lp_strict_allocate(SNUM(fsp
->conn
)))
574 len
-= st
.st_ex_size
;
575 len
/= 1024; /* Len is now number of 1k blocks needed. */
576 space_avail
= get_dfree_info(conn
,fsp
->fsp_name
,False
,&bsize
,&dfree
,&dsize
);
577 if (space_avail
== (uint64_t)-1) {
581 DEBUG(10,("vfs_allocate_file_space: file %s, grow. Current size %.0f, needed blocks = %.0f, space avail = %.0f\n",
582 fsp
->fsp_name
, (double)st
.st_ex_size
, (double)len
, (double)space_avail
));
584 if (len
> space_avail
) {
592 /****************************************************************************
593 A vfs set_filelen call.
594 set the length of a file from a filedescriptor.
595 Returns 0 on success, -1 on failure.
596 ****************************************************************************/
598 int vfs_set_filelen(files_struct
*fsp
, SMB_OFF_T len
)
602 contend_level2_oplocks_begin(fsp
, LEVEL2_CONTEND_SET_FILE_LEN
);
604 DEBUG(10,("vfs_set_filelen: ftruncate %s to len %.0f\n", fsp
->fsp_name
, (double)len
));
605 flush_write_cache(fsp
, SIZECHANGE_FLUSH
);
606 if ((ret
= SMB_VFS_FTRUNCATE(fsp
, len
)) != -1) {
607 set_filelen_write_cache(fsp
, len
);
608 notify_fname(fsp
->conn
, NOTIFY_ACTION_MODIFIED
,
609 FILE_NOTIFY_CHANGE_SIZE
610 | FILE_NOTIFY_CHANGE_ATTRIBUTES
,
614 contend_level2_oplocks_end(fsp
, LEVEL2_CONTEND_SET_FILE_LEN
);
619 /****************************************************************************
620 A vfs fill sparse call.
621 Writes zeros from the end of file to len, if len is greater than EOF.
622 Used only by strict_sync.
623 Returns 0 on success, -1 on failure.
624 ****************************************************************************/
626 #define SPARSE_BUF_WRITE_SIZE (32*1024)
628 int vfs_fill_sparse(files_struct
*fsp
, SMB_OFF_T len
)
637 ret
= SMB_VFS_FSTAT(fsp
, &st
);
642 if (len
<= st
.st_ex_size
) {
646 DEBUG(10,("vfs_fill_sparse: write zeros in file %s from len %.0f to len %.0f (%.0f bytes)\n",
647 fsp
->fsp_name
, (double)st
.st_ex_size
, (double)len
, (double)(len
- st
.st_ex_size
)));
649 contend_level2_oplocks_begin(fsp
, LEVEL2_CONTEND_FILL_SPARSE
);
651 flush_write_cache(fsp
, SIZECHANGE_FLUSH
);
654 sparse_buf
= SMB_CALLOC_ARRAY(char, SPARSE_BUF_WRITE_SIZE
);
662 offset
= st
.st_ex_size
;
663 num_to_write
= len
- st
.st_ex_size
;
666 while (total
< num_to_write
) {
667 size_t curr_write_size
= MIN(SPARSE_BUF_WRITE_SIZE
, (num_to_write
- total
));
669 pwrite_ret
= SMB_VFS_PWRITE(fsp
, sparse_buf
, curr_write_size
, offset
+ total
);
670 if (pwrite_ret
== -1) {
671 DEBUG(10,("vfs_fill_sparse: SMB_VFS_PWRITE for file %s failed with error %s\n",
672 fsp
->fsp_name
, strerror(errno
) ));
676 if (pwrite_ret
== 0) {
684 set_filelen_write_cache(fsp
, len
);
688 contend_level2_oplocks_end(fsp
, LEVEL2_CONTEND_FILL_SPARSE
);
692 /****************************************************************************
693 Transfer some data (n bytes) between two file_struct's.
694 ****************************************************************************/
696 static ssize_t
vfs_read_fn(void *file
, void *buf
, size_t len
)
698 struct files_struct
*fsp
= (struct files_struct
*)file
;
700 return SMB_VFS_READ(fsp
, buf
, len
);
703 static ssize_t
vfs_write_fn(void *file
, const void *buf
, size_t len
)
705 struct files_struct
*fsp
= (struct files_struct
*)file
;
707 return SMB_VFS_WRITE(fsp
, buf
, len
);
710 SMB_OFF_T
vfs_transfer_file(files_struct
*in
, files_struct
*out
, SMB_OFF_T n
)
712 return transfer_file_internal((void *)in
, (void *)out
, n
,
713 vfs_read_fn
, vfs_write_fn
);
716 /*******************************************************************
717 A vfs_readdir wrapper which just returns the file name.
718 ********************************************************************/
720 char *vfs_readdirname(connection_struct
*conn
, void *p
, SMB_STRUCT_STAT
*sbuf
)
722 SMB_STRUCT_DIRENT
*ptr
= NULL
;
728 ptr
= SMB_VFS_READDIR(conn
, (DIR *)p
, sbuf
);
739 #ifdef HAVE_BROKEN_READDIR_NAME
740 /* using /usr/ucb/cc is BAD */
747 /*******************************************************************
748 A wrapper for vfs_chdir().
749 ********************************************************************/
751 int vfs_ChDir(connection_struct
*conn
, const char *path
)
756 LastDir
= SMB_STRDUP("");
759 if (strcsequal(path
,"."))
762 if (*path
== '/' && strcsequal(LastDir
,path
))
765 DEBUG(4,("vfs_ChDir to %s\n",path
));
767 res
= SMB_VFS_CHDIR(conn
,path
);
770 LastDir
= SMB_STRDUP(path
);
775 /*******************************************************************
776 Return the absolute current directory path - given a UNIX pathname.
777 Note that this path is returned in DOS format, not UNIX
778 format. Note this can be called with conn == NULL.
779 ********************************************************************/
781 char *vfs_GetWd(TALLOC_CTX
*ctx
, connection_struct
*conn
)
784 SMB_STRUCT_STAT st
, st2
;
786 DATA_BLOB cache_value
;
791 if (!lp_getwd_cache()) {
795 SET_STAT_INVALID(st
);
797 if (SMB_VFS_STAT(conn
, ".",&st
) == -1) {
799 * Known to fail for root: the directory may be NFS-mounted
800 * and exported with root_squash (so has no root access).
802 DEBUG(1,("vfs_GetWd: couldn't stat \".\" error %s "
803 "(NFS problem ?)\n", strerror(errno
) ));
807 key
= vfs_file_id_from_sbuf(conn
, &st
);
809 if (!memcache_lookup(smbd_memcache(), GETWD_CACHE
,
810 data_blob_const(&key
, sizeof(key
)),
815 SMB_ASSERT((cache_value
.length
> 0)
816 && (cache_value
.data
[cache_value
.length
-1] == '\0'));
818 if ((SMB_VFS_STAT(conn
, (char *)cache_value
.data
, &st2
) == 0)
819 && (st
.st_ex_dev
== st2
.st_ex_dev
) && (st
.st_ex_ino
== st2
.st_ex_ino
)
820 && (S_ISDIR(st
.st_ex_mode
))) {
824 result
= talloc_strdup(ctx
, (char *)cache_value
.data
);
825 if (result
== NULL
) {
834 * We don't have the information to hand so rely on traditional
835 * methods. The very slow getcwd, which spawns a process on some
836 * systems, or the not quite so bad getwd.
839 if (!SMB_VFS_GETWD(conn
,s
)) {
840 DEBUG(0, ("vfs_GetWd: SMB_VFS_GETWD call failed: %s\n",
845 if (lp_getwd_cache() && VALID_STAT(st
)) {
846 key
= vfs_file_id_from_sbuf(conn
, &st
);
848 memcache_add(smbd_memcache(), GETWD_CACHE
,
849 data_blob_const(&key
, sizeof(key
)),
850 data_blob_const(s
, strlen(s
)+1));
853 result
= talloc_strdup(ctx
, s
);
854 if (result
== NULL
) {
860 /*******************************************************************
861 Reduce a file name, removing .. elements and checking that
862 it is below dir in the heirachy. This uses realpath.
863 ********************************************************************/
865 NTSTATUS
check_reduced_name(connection_struct
*conn
, const char *fname
)
867 #ifdef REALPATH_TAKES_NULL
868 bool free_resolved_name
= True
;
870 char resolved_name_buf
[PATH_MAX
+1];
871 bool free_resolved_name
= False
;
873 char *resolved_name
= NULL
;
874 size_t con_path_len
= strlen(conn
->connectpath
);
877 DEBUG(3,("reduce_name [%s] [%s]\n", fname
, conn
->connectpath
));
879 #ifdef REALPATH_TAKES_NULL
880 resolved_name
= SMB_VFS_REALPATH(conn
,fname
,NULL
);
882 resolved_name
= SMB_VFS_REALPATH(conn
,fname
,resolved_name_buf
);
885 if (!resolved_name
) {
888 DEBUG(3,("reduce_name: Component not a directory in getting realpath for %s\n", fname
));
889 return map_nt_error_from_unix(errno
);
892 TALLOC_CTX
*ctx
= talloc_tos();
893 char *tmp_fname
= NULL
;
894 char *last_component
= NULL
;
895 /* Last component didn't exist. Remove it and try and canonicalise the directory. */
897 tmp_fname
= talloc_strdup(ctx
, fname
);
899 return NT_STATUS_NO_MEMORY
;
901 p
= strrchr_m(tmp_fname
, '/');
906 last_component
= tmp_fname
;
907 tmp_fname
= talloc_strdup(ctx
,
910 return NT_STATUS_NO_MEMORY
;
914 #ifdef REALPATH_TAKES_NULL
915 resolved_name
= SMB_VFS_REALPATH(conn
,tmp_fname
,NULL
);
917 resolved_name
= SMB_VFS_REALPATH(conn
,tmp_fname
,resolved_name_buf
);
919 if (!resolved_name
) {
920 DEBUG(3,("reduce_name: couldn't get realpath for %s\n", fname
));
921 return map_nt_error_from_unix(errno
);
923 tmp_fname
= talloc_asprintf(ctx
,
928 return NT_STATUS_NO_MEMORY
;
930 #ifdef REALPATH_TAKES_NULL
931 SAFE_FREE(resolved_name
);
932 resolved_name
= SMB_STRDUP(tmp_fname
);
933 if (!resolved_name
) {
934 DEBUG(0,("reduce_name: malloc fail for %s\n", tmp_fname
));
935 return NT_STATUS_NO_MEMORY
;
938 safe_strcpy(resolved_name_buf
, tmp_fname
, PATH_MAX
);
939 resolved_name
= resolved_name_buf
;
944 DEBUG(1,("reduce_name: couldn't get realpath for %s\n", fname
));
945 return map_nt_error_from_unix(errno
);
949 DEBUG(10,("reduce_name realpath [%s] -> [%s]\n", fname
, resolved_name
));
951 if (*resolved_name
!= '/') {
952 DEBUG(0,("reduce_name: realpath doesn't return absolute paths !\n"));
953 if (free_resolved_name
) {
954 SAFE_FREE(resolved_name
);
956 return NT_STATUS_OBJECT_NAME_INVALID
;
959 /* Check for widelinks allowed. */
960 if (!lp_widelinks(SNUM(conn
)) && (strncmp(conn
->connectpath
, resolved_name
, con_path_len
) != 0)) {
961 DEBUG(2, ("reduce_name: Bad access attempt: %s is a symlink outside the share path", fname
));
962 if (free_resolved_name
) {
963 SAFE_FREE(resolved_name
);
965 return NT_STATUS_ACCESS_DENIED
;
968 /* Check if we are allowing users to follow symlinks */
969 /* Patch from David Clerc <David.Clerc@cui.unige.ch>
970 University of Geneva */
973 if (!lp_symlinks(SNUM(conn
))) {
974 SMB_STRUCT_STAT statbuf
;
975 if ( (SMB_VFS_LSTAT(conn
,fname
,&statbuf
) != -1) &&
976 (S_ISLNK(statbuf
.st_ex_mode
)) ) {
977 if (free_resolved_name
) {
978 SAFE_FREE(resolved_name
);
980 DEBUG(3,("reduce_name: denied: file path name %s is a symlink\n",resolved_name
));
981 return NT_STATUS_ACCESS_DENIED
;
986 DEBUG(3,("reduce_name: %s reduced to %s\n", fname
, resolved_name
));
987 if (free_resolved_name
) {
988 SAFE_FREE(resolved_name
);