libcli/smb/smb_unix_ext.h

   1 /*
   2    Unix SMB/CIFS implementation.
   3    SMB transaction2 handling
   4
   5    Copyright (C) James Peach 2007
   6    Copyright (C) Jeremy Allison 1994-2002.
   7
   8    Extensively modified by Andrew Tridgell, 1995
   9
  10    This program is free software; you can redistribute it and/or modify
  11    it under the terms of the GNU General Public License as published by
  12    the Free Software Foundation; either version 3 of the License, or
  13    (at your option) any later version.
  14
  15    This program is distributed in the hope that it will be useful,
  16    but WITHOUT ANY WARRANTY; without even the implied warranty of
  17    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  18    GNU General Public License for more details.
  19
  20    You should have received a copy of the GNU General Public License
  21    along with this program.  If not, see <http://www.gnu.org/licenses/>.
  22 */
  23
  24 /* UNIX CIFS Extensions - created by HP */
  25 /*
  26  * UNIX CIFS Extensions have the range 0x200 - 0x2FF reserved.
  27  * Supposedly Microsoft have agreed to this.
  28  */
  29
  30 #define MIN_UNIX_INFO_LEVEL 0x200
  31 #define MAX_UNIX_INFO_LEVEL 0x2FF
  32
  33 #define INFO_LEVEL_IS_UNIX(level) (((level) >= MIN_UNIX_INFO_LEVEL) && ((level) <= MAX_UNIX_INFO_LEVEL))
  34
  35 #define SMB_QUERY_FILE_UNIX_BASIC      0x200   /* UNIX File Info*/
  36 #define SMB_SET_FILE_UNIX_BASIC        0x200
  37 #define SMB_SET_FILE_UNIX_INFO2        0x20B   /* UNIX File Info2 */
  38
  39 #define SMB_MODE_NO_CHANGE                 0xFFFFFFFF     /* file mode value which */
  40                                               /* means "don't change it" */
  41 #define SMB_UID_NO_CHANGE                  0xFFFFFFFF
  42 #define SMB_GID_NO_CHANGE                  0xFFFFFFFF
  43
  44 #define SMB_SIZE_NO_CHANGE_LO              0xFFFFFFFF
  45 #define SMB_SIZE_NO_CHANGE_HI              0xFFFFFFFF
  46
  47 #define SMB_TIME_NO_CHANGE_LO              0xFFFFFFFF
  48 #define SMB_TIME_NO_CHANGE_HI              0xFFFFFFFF
  49
  50 /*
  51 Offset Size         Name
  52 0      LARGE_INTEGER EndOfFile                File size
  53 8      LARGE_INTEGER Blocks                   Number of bytes used on disk (st_blocks).
  54 16     LARGE_INTEGER CreationTime             Creation time
  55 24     LARGE_INTEGER LastAccessTime           Last access time
  56 32     LARGE_INTEGER LastModificationTime     Last modification time
  57 40     LARGE_INTEGER Uid                      Numeric user id for the owner
  58 48     LARGE_INTEGER Gid                      Numeric group id of owner
  59 56     ULONG Type                             Enumeration specifying the pathname type:
  60                                               0 -- File
  61                                               1 -- Directory
  62                                               2 -- Symbolic link
  63                                               3 -- Character device
  64                                               4 -- Block device
  65                                               5 -- FIFO (named pipe)
  66                                               6 -- Unix domain socket
  67
  68 60     LARGE_INTEGER devmajor                 Major device number if type is device
  69 68     LARGE_INTEGER devminor                 Minor device number if type is device
  70 76     LARGE_INTEGER uniqueid                 This is a server-assigned unique id for the file. The client
  71                                               will typically map this onto an inode number. The scope of
  72                                               uniqueness is the share.
  73 84     LARGE_INTEGER permissions              Standard UNIX file permissions  - see below.
  74 92     LARGE_INTEGER nlinks                   The number of directory entries that map to this entry
  75                                               (number of hard links)
  76
  77 100 - end.
  78 */
  79
  80 #define SMB_FILE_UNIX_BASIC_SIZE 100
  81
  82 /* UNIX filetype mappings. */
  83
  84 #define UNIX_TYPE_FILE 0
  85 #define UNIX_TYPE_DIR 1
  86 #define UNIX_TYPE_SYMLINK 2
  87 #define UNIX_TYPE_CHARDEV 3
  88 #define UNIX_TYPE_BLKDEV 4
  89 #define UNIX_TYPE_FIFO 5
  90 #define UNIX_TYPE_SOCKET 6
  91 #define UNIX_TYPE_UNKNOWN 0xFFFFFFFF
  92
  93 /*
  94  * Oh this is fun. "Standard UNIX permissions" has no
  95  * meaning in POSIX. We need to define the mapping onto
  96  * and off the wire as this was not done in the original HP
  97  * spec. JRA.
  98  */
  99
 100 #define UNIX_X_OTH                      0000001
 101 #define UNIX_W_OTH                      0000002
 102 #define UNIX_R_OTH                      0000004
 103 #define UNIX_X_GRP                      0000010
 104 #define UNIX_W_GRP                      0000020
 105 #define UNIX_R_GRP                      0000040
 106 #define UNIX_X_USR                      0000100
 107 #define UNIX_W_USR                      0000200
 108 #define UNIX_R_USR                      0000400
 109 #define UNIX_STICKY                     0001000
 110 #define UNIX_SET_GID                    0002000
 111 #define UNIX_SET_UID                    0004000
 112
 113 /* Masks for the above */
 114 #define UNIX_OTH_MASK                   0000007
 115 #define UNIX_GRP_MASK                   0000070
 116 #define UNIX_USR_MASK                   0000700
 117 #define UNIX_PERM_MASK                  0000777
 118 #define UNIX_EXTRA_MASK                 0007000
 119 #define UNIX_ALL_MASK                   0007777
 120
 121 /* Flags for chflags (CIFS_UNIX_EXTATTR_CAP capability) and
 122  * SMB_QUERY_FILE_UNIX_INFO2.
 123  */
 124 #define EXT_SECURE_DELETE               0x00000001
 125 #define EXT_ENABLE_UNDELETE             0x00000002
 126 #define EXT_SYNCHRONOUS                 0x00000004
 127 #define EXT_IMMUTABLE                   0x00000008
 128 #define EXT_OPEN_APPEND_ONLY            0x00000010
 129 #define EXT_DO_NOT_BACKUP               0x00000020
 130 #define EXT_NO_UPDATE_ATIME             0x00000040
 131 #define EXT_HIDDEN                      0x00000080
 132
 133 #define SMB_QUERY_FILE_UNIX_LINK       0x201
 134 #define SMB_SET_FILE_UNIX_LINK         0x201
 135 #define SMB_SET_FILE_UNIX_HLINK        0x203
 136 /* SMB_QUERY_POSIX_ACL 0x204 see below */
 137 #define SMB_QUERY_XATTR                0x205 /* need for non-user XATTRs */
 138 #define SMB_QUERY_ATTR_FLAGS           0x206 /* chflags, chattr */
 139 #define SMB_SET_ATTR_FLAGS             0x206
 140 #define SMB_QUERY_POSIX_PERMISSION     0x207
 141 /* Only valid for qfileinfo */
 142 #define SMB_QUERY_POSIX_LOCK           0x208
 143 /* Only valid for setfileinfo */
 144 #define SMB_SET_POSIX_LOCK             0x208
 145
 146 /* The set info levels for POSIX path operations. */
 147 #define SMB_POSIX_PATH_OPEN            0x209
 148 #define SMB_POSIX_PATH_UNLINK          0x20A
 149
 150 #define SMB_QUERY_FILE_UNIX_INFO2      0x20B   /* UNIX File Info2 */
 151 #define SMB_SET_FILE_UNIX_INFO2        0x20B
 152
 153 /*
 154 SMB_QUERY_FILE_UNIX_INFO2 is SMB_QUERY_FILE_UNIX_BASIC with create
 155 time and file flags appended. The corresponding info level for
 156 findfirst/findnext is SMB_FIND_FILE_UNIX_INFO2.
 157     Size    Offset  Value
 158     ---------------------
 159     0      LARGE_INTEGER EndOfFile  File size
 160     8      LARGE_INTEGER Blocks     Number of blocks used on disk
 161     16     LARGE_INTEGER ChangeTime Attribute change time
 162     24     LARGE_INTEGER LastAccessTime           Last access time
 163     32     LARGE_INTEGER LastModificationTime     Last modification time
 164     40     LARGE_INTEGER Uid        Numeric user id for the owner
 165     48     LARGE_INTEGER Gid        Numeric group id of owner
 166     56     ULONG Type               Enumeration specifying the file type
 167     60     LARGE_INTEGER devmajor   Major device number if type is device
 168     68     LARGE_INTEGER devminor   Minor device number if type is device
 169     76     LARGE_INTEGER uniqueid   This is a server-assigned unique id
 170     84     LARGE_INTEGER permissions            Standard UNIX permissions
 171     92     LARGE_INTEGER nlinks                 Number of hard links
 172     100    LARGE_INTEGER CreationTime           Create/birth time
 173     108    ULONG FileFlags          File flags enumeration
 174     112    ULONG FileFlagsMask      Mask of valid flags
 175 */
 176
 177 /* Transact 2 Find First levels */
 178 #define SMB_FIND_FILE_UNIX             0x202
 179 #define SMB_FIND_FILE_UNIX_INFO2       0x20B /* UNIX File Info2 */
 180
 181 #define SMB_FILE_UNIX_INFO2_SIZE 116
 182
 183 /*
 184  Info level for TRANS2_QFSINFO - returns version of CIFS UNIX extensions, plus
 185  64-bits worth of capability fun :-).
 186  Use the same info level for TRANS2_SETFSINFO
 187 */
 188
 189 #define SMB_QUERY_CIFS_UNIX_INFO      0x200
 190 #define SMB_SET_CIFS_UNIX_INFO        0x200
 191
 192 /* Returns or sets the following.
 193
 194   UINT16             major version number
 195   UINT16             minor version number
 196   LARGE_INTEGER      capability bitfield
 197
 198 */
 199
 200 #define CIFS_UNIX_MAJOR_VERSION 1
 201 #define CIFS_UNIX_MINOR_VERSION 0
 202
 203 #define CIFS_UNIX_FCNTL_LOCKS_CAP           0x1
 204 #define CIFS_UNIX_POSIX_ACLS_CAP            0x2
 205 #define CIFS_UNIX_XATTTR_CAP                0x4 /* for support of other xattr
 206                                                 namespaces such as system,
 207                                                 security and trusted */
 208 #define CIFS_UNIX_EXTATTR_CAP               0x8 /* for support of chattr
 209                                                 (chflags) and lsattr */
 210 #define CIFS_UNIX_POSIX_PATHNAMES_CAP      0x10 /* Use POSIX pathnames on the wire. */
 211 #define CIFS_UNIX_POSIX_PATH_OPERATIONS_CAP        0x20 /* We can cope with POSIX open/mkdir/unlink etc. */
 212 #define CIFS_UNIX_LARGE_READ_CAP           0x40 /* We can cope with 24 bit reads in readX. */
 213 #define CIFS_UNIX_LARGE_WRITE_CAP          0x80 /* We can cope with 24 bit writes in writeX. */
 214 #define CIFS_UNIX_TRANSPORT_ENCRYPTION_CAP      0x100 /* We can do SPNEGO negotiations for encryption. */
 215 #define CIFS_UNIX_TRANSPORT_ENCRYPTION_MANDATORY_CAP    0x200 /* We *must* SPNEGO negotiations for encryption. */
 216
 217 #define SMB_QUERY_POSIX_FS_INFO     0x201
 218
 219 /* Returns FILE_SYSTEM_POSIX_INFO struct as follows
 220       (NB   For undefined values return -1 in that field)
 221    le32 OptimalTransferSize;    bsize on some os, iosize on other os, This
 222                                 is a hint to the client about best size. Server
 223                                 can return -1 if no preference, ie if SMB
 224                                 negotiated size is adequate for optimal
 225                                 read/write performance
 226    le32 BlockSize; (often 512 bytes) NB: BlockSize * TotalBlocks = disk space
 227    le64 TotalBlocks;  redundant with other infolevels but easy to ret here
 228    le64 BlocksAvail;  although redundant, easy to return
 229    le64 UserBlocksAvail;      bavail
 230    le64 TotalFileNodes;
 231    le64 FreeFileNodes;
 232    le64 FileSysIdentifier;    fsid
 233    (NB statfs field Namelen comes from FILE_SYSTEM_ATTRIBUTE_INFO call)
 234    (NB statfs field flags can come from FILE_SYSTEM_DEVICE_INFO call)
 235 */
 236
 237 #define SMB_QUERY_POSIX_WHO_AM_I  0x202 /* QFS Info */
 238 /* returns:
 239         __u32 flags;  0 = Authenticated user 1 = GUEST
 240         __u32 mask;  which flags bits server understands ie 0x0001
 241         __u64 unix_user_id;
 242         __u64 unix_user_gid;
 243         __u32 number_of_supplementary_gids;  may be zero
 244         __u32 number_of_sids;  may be zero
 245         __u32 length_of_sid_array;  in bytes - may be zero
 246         __u32 pad;  reserved - MBZ
 247         __u64 gid_array[0];  may be empty
 248         __u8 * psid_list  may be empty
 249 */
 250
 251 /* ... more as we think of them :-). */
 252
 253 /* SMB POSIX ACL definitions. */
 254 /* Wire format is (all little endian) :
 255
 256 [2 bytes]              -     Version number.
 257 [2 bytes]              -     Number of ACE entries to follow.
 258 [2 bytes]              -     Number of default ACE entries to follow.
 259 -------------------------------------
 260 ^
 261 |
 262 ACE entries
 263 |
 264 v
 265 -------------------------------------
 266 ^
 267 |
 268 Default ACE entries
 269 |
 270 v
 271 -------------------------------------
 272
 273 Where an ACE entry looks like :
 274
 275 [1 byte]           - Entry type.
 276
 277 Entry types are :
 278
 279 ACL_USER_OBJ            0x01
 280 ACL_USER                0x02
 281 ACL_GROUP_OBJ           0x04
 282 ACL_GROUP               0x08
 283 ACL_MASK                0x10
 284 ACL_OTHER               0x20
 285
 286 [1 byte]          - permissions (perm_t)
 287
 288 perm_t types are :
 289
 290 ACL_READ                0x04
 291 ACL_WRITE               0x02
 292 ACL_EXECUTE             0x01
 293
 294 [8 bytes]         - uid/gid to apply this permission to.
 295
 296 In the same format as the uid/gid fields in the other
 297 UNIX extensions definitions. Use 0xFFFFFFFFFFFFFFFF for
 298 the MASK and OTHER entry types.
 299
 300 If the Number of ACE entries for either file or default ACE's
 301 is set to 0xFFFF this means ignore this kind of ACE (and the
 302 number of entries sent will be zero.
 303
 304 */
 305
 306 #define SMB_QUERY_POSIX_WHOAMI     0x202
 307
 308 enum smb_whoami_flags {
 309     SMB_WHOAMI_GUEST = 0x1 /* Logged in as (or squashed to) guest */
 310 };
 311
 312 /* Mask of which WHOAMI bits are valid. This should make it easier for clients
 313  * to cope with servers that have different sets of WHOAMI flags (as more get
 314  * added).
 315  */
 316 #define SMB_WHOAMI_MASK 0x00000001
 317
 318 /*
 319    SMBWhoami - Query the user mapping performed by the server for the
 320    connected tree. This is a subcommand of the TRANS2_QFSINFO.
 321
 322    Returns:
 323         4 bytes unsigned -      mapping flags (smb_whoami_flags)
 324         4 bytes unsigned -      flags mask
 325
 326         8 bytes unsigned -      primary UID
 327         8 bytes unsigned -      primary GID
 328         4 bytes unsigned -      number of supplementary GIDs
 329         4 bytes unsigned -      number of SIDs
 330         4 bytes unsigned -      SID list byte count
 331         4 bytes -               pad / reserved (must be zero)
 332
 333         8 bytes unsigned[] -    list of GIDs (may be empty)
 334         struct dom_sid[] -              list of SIDs (may be empty)
 335 */
 336
 337 /*
 338  * The following trans2 is done between client and server
 339  * as a FSINFO call to set up the encryption state for transport
 340  * encryption.
 341  * This is a subcommand of the TRANS2_QFSINFO.
 342  *
 343  * The request looks like :
 344  *
 345  * [data block] -> SPNEGO framed GSSAPI request.
 346  *
 347  * The reply looks like :
 348  *
 349  * [data block] -> SPNEGO framed GSSAPI reply - if error
 350  *                 is NT_STATUS_OK then we're done, if it's
 351  *                 NT_STATUS_MORE_PROCESSING_REQUIRED then the
 352  *                 client needs to keep going. If it's an
 353  *                 error it can be any NT_STATUS error.
 354  *
 355  */
 356
 357 #define SMB_REQUEST_TRANSPORT_ENCRYPTION     0x203 /* QFSINFO */
 358
 359
 360 /* The query/set info levels for POSIX ACLs. */
 361 #define SMB_QUERY_POSIX_ACL  0x204
 362 #define SMB_SET_POSIX_ACL  0x204
 363
 364 /* Current on the wire ACL version. */
 365 #define SMB_POSIX_ACL_VERSION 1
 366
 367 /* ACE entry type. */
 368 #define SMB_POSIX_ACL_USER_OBJ            0x01
 369 #define SMB_POSIX_ACL_USER                0x02
 370 #define SMB_POSIX_ACL_GROUP_OBJ           0x04
 371 #define SMB_POSIX_ACL_GROUP               0x08
 372 #define SMB_POSIX_ACL_MASK                0x10
 373 #define SMB_POSIX_ACL_OTHER               0x20
 374
 375 /* perm_t types. */
 376 #define SMB_POSIX_ACL_READ                0x04
 377 #define SMB_POSIX_ACL_WRITE               0x02
 378 #define SMB_POSIX_ACL_EXECUTE             0x01
 379
 380 #define SMB_POSIX_ACL_HEADER_SIZE         6
 381 #define SMB_POSIX_ACL_ENTRY_SIZE         10
 382
 383 #define SMB_POSIX_IGNORE_ACE_ENTRIES    0xFFFF
 384
 385 /* Definition of data block of SMB_SET_POSIX_LOCK */
 386 /*
 387   [2 bytes] lock_type - 0 = Read, 1 = Write, 2 = Unlock
 388   [2 bytes] lock_flags - 1 = Wait (only valid for setlock)
 389   [4 bytes] pid = locking context.
 390   [8 bytes] start = unsigned 64 bits.
 391   [8 bytes] length = unsigned 64 bits.
 392 */
 393
 394 #define POSIX_LOCK_TYPE_OFFSET 0
 395 #define POSIX_LOCK_FLAGS_OFFSET 2
 396 #define POSIX_LOCK_PID_OFFSET 4
 397 #define POSIX_LOCK_START_OFFSET 8
 398 #define POSIX_LOCK_LEN_OFFSET 16
 399 #define POSIX_LOCK_DATA_SIZE 24
 400
 401 #define POSIX_LOCK_FLAG_NOWAIT 0
 402 #define POSIX_LOCK_FLAG_WAIT 1
 403
 404 #define POSIX_LOCK_TYPE_READ 0
 405 #define POSIX_LOCK_TYPE_WRITE 1
 406 #define POSIX_LOCK_TYPE_UNLOCK 2
 407
 408 /* SMB_POSIX_PATH_OPEN "open_mode" definitions. */
 409 #define SMB_O_RDONLY                      0x1
 410 #define SMB_O_WRONLY                      0x2
 411 #define SMB_O_RDWR                        0x4
 412
 413 #define SMB_ACCMODE                       0x7
 414
 415 #define SMB_O_CREAT                      0x10
 416 #define SMB_O_EXCL                       0x20
 417 #define SMB_O_TRUNC                      0x40
 418 #define SMB_O_APPEND                     0x80
 419 #define SMB_O_SYNC                      0x100
 420 #define SMB_O_DIRECTORY                 0x200
 421 #define SMB_O_NOFOLLOW                  0x400
 422 #define SMB_O_DIRECT                    0x800
 423
 424 /* Definition of request data block for SMB_POSIX_PATH_OPEN */
 425 /*
 426   [4 bytes] flags (as smb_ntcreate_Flags).
 427   [4 bytes] open_mode                   - SMB_O_xxx flags above.
 428   [8 bytes] mode_t (permissions)        - same encoding as "Standard UNIX permissions" above in SMB_SET_FILE_UNIX_BASIC.
 429   [2 bytes] ret_info_level      - optimization. Info level to be returned.
 430 */
 431
 432 /* Definition of reply data block for SMB_POSIX_PATH_OPEN */
 433
 434 #define SMB_NO_INFO_LEVEL_RETURNED 0xFFFF
 435
 436 /*
 437   [2 bytes] - flags field. Identical to flags reply for oplock response field in SMBNTCreateX)
 438   [2 bytes] - FID returned.
 439   [4 bytes] - CreateAction (same as in NTCreateX response).
 440   [2 bytes] - reply info level    - as requested or 0xFFFF if not available.
 441   [2 bytes] - padding (must be zero)
 442   [n bytes] - info level reply  - if available.
 443 */
 444
 445 /* Definition of request data block for SMB_POSIX_UNLINK */
 446 /*
 447   [2 bytes] flags (defined below).
 448 */
 449
 450 #define SMB_POSIX_UNLINK_FILE_TARGET 0
 451 #define SMB_POSIX_UNLINK_DIRECTORY_TARGET 1
 452