?  search:
summary | log | graphiclog1 | graphiclog2 | commit | commitdiff | tree | refs | edit | fork
blame | history | raw | HEAD
s3: Re-run make samba3-idl.
[Samba/gebeck_regimport.git] / source3 / smbd / open.c
blob0834e6d3d3950c679c6f67b05cf76f16ecb0bbf9
1 /*
2 Unix SMB/CIFS implementation.
3 file opening and share modes
4 Copyright (C) Andrew Tridgell 1992-1998
5 Copyright (C) Jeremy Allison 2001-2004
6 Copyright (C) Volker Lendecke 2005
7
8 This program is free software; you can redistribute it and/or modify
9 it under the terms of the GNU General Public License as published by
10 the Free Software Foundation; either version 3 of the License, or
11 (at your option) any later version.
12
13 This program is distributed in the hope that it will be useful,
14 but WITHOUT ANY WARRANTY; without even the implied warranty of
15 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
16 GNU General Public License for more details.
17
18 You should have received a copy of the GNU General Public License
19 along with this program. If not, see <http://www.gnu.org/licenses/>.
20 */
21
22 #include "includes.h"
23 #include "smbd/globals.h"
24
25 extern const struct generic_mapping file_generic_mapping;
26
27 struct deferred_open_record {
28 bool delayed_for_oplocks;
29 struct file_id id;
30 };
31
32 static NTSTATUS create_file_unixpath(connection_struct *conn,
33 struct smb_request *req,
34 struct smb_filename *smb_fname,
35 uint32_t access_mask,
36 uint32_t share_access,
37 uint32_t create_disposition,
38 uint32_t create_options,
39 uint32_t file_attributes,
40 uint32_t oplock_request,
41 uint64_t allocation_size,
42 uint32_t private_flags,
43 struct security_descriptor *sd,
44 struct ea_list *ea_list,
45
46 files_struct **result,
47 int *pinfo);
48
49 /****************************************************************************
50 SMB1 file varient of se_access_check. Never test FILE_READ_ATTRIBUTES.
51 ****************************************************************************/
52
53 NTSTATUS smb1_file_se_access_check(struct connection_struct *conn,
54 const struct security_descriptor *sd,
55 const NT_USER_TOKEN *token,
56 uint32_t access_desired,
57 uint32_t *access_granted)
58 {
59 *access_granted = 0;
60
61 if (get_current_uid(conn) == (uid_t)0) {
62 /* I'm sorry sir, I didn't know you were root... */
63 *access_granted = access_desired;
64 if (access_desired & SEC_FLAG_MAXIMUM_ALLOWED) {
65 *access_granted |= FILE_GENERIC_ALL;
66 }
67 return NT_STATUS_OK;
68 }
69
70 return se_access_check(sd,
71 token,
72 (access_desired & ~FILE_READ_ATTRIBUTES),
73 access_granted);
74 }
75
76 /****************************************************************************
77 Check if we have open rights.
78 ****************************************************************************/
79
80 NTSTATUS smbd_check_open_rights(struct connection_struct *conn,
81 const struct smb_filename *smb_fname,
82 uint32_t access_mask,
83 uint32_t *access_granted)
84 {
85 /* Check if we have rights to open. */
86 NTSTATUS status;
87 struct security_descriptor *sd = NULL;
88
89 status = SMB_VFS_GET_NT_ACL(conn, smb_fname->base_name,
90 (OWNER_SECURITY_INFORMATION |
91 GROUP_SECURITY_INFORMATION |
92 DACL_SECURITY_INFORMATION),&sd);
93
94 if (!NT_STATUS_IS_OK(status)) {
95 DEBUG(10, ("smbd_check_open_rights: Could not get acl "
96 "on %s: %s\n",
97 smb_fname_str_dbg(smb_fname),
98 nt_errstr(status)));
99 return status;
100 }
101
102 status = smb1_file_se_access_check(conn,
103 sd,
104 get_current_nttok(conn),
105 access_mask,
106 access_granted);
107
108 DEBUG(10,("smbd_check_open_rights: file %s requesting "
109 "0x%x returning 0x%x (%s)\n",
110 smb_fname_str_dbg(smb_fname),
111 (unsigned int)access_mask,
112 (unsigned int)*access_granted,
113 nt_errstr(status) ));
114
115 if (!NT_STATUS_IS_OK(status)) {
116 if (DEBUGLEVEL >= 10) {
117 DEBUG(10,("smbd_check_open_rights: acl for %s is:\n",
118 smb_fname_str_dbg(smb_fname) ));
119 NDR_PRINT_DEBUG(security_descriptor, sd);
120 }
121 }
122
123 TALLOC_FREE(sd);
124
125 return status;
126 }
127
128 /****************************************************************************
129 fd support routines - attempt to do a dos_open.
130 ****************************************************************************/
131
132 static NTSTATUS fd_open(struct connection_struct *conn,
133 files_struct *fsp,
134 int flags,
135 mode_t mode)
136 {
137 struct smb_filename *smb_fname = fsp->fsp_name;
138 NTSTATUS status = NT_STATUS_OK;
139
140 #ifdef O_NOFOLLOW
141 /*
142 * Never follow symlinks on a POSIX client. The
143 * client should be doing this.
144 */
145
146 if (fsp->posix_open || !lp_symlinks(SNUM(conn))) {
147 flags |= O_NOFOLLOW;
148 }
149 #endif
150
151 fsp->fh->fd = SMB_VFS_OPEN(conn, smb_fname, fsp, flags, mode);
152 if (fsp->fh->fd == -1) {
153 status = map_nt_error_from_unix(errno);
154 if (errno == EMFILE) {
155 static time_t last_warned = 0L;
156
157 if (time((time_t *) NULL) > last_warned) {
158 DEBUG(0,("Too many open files, unable "
159 "to open more! smbd's max "
160 "open files = %d\n",
161 lp_max_open_files()));
162 last_warned = time((time_t *) NULL);
163 }
164 }
165
166 }
167
168 DEBUG(10,("fd_open: name %s, flags = 0%o mode = 0%o, fd = %d. %s\n",
169 smb_fname_str_dbg(smb_fname), flags, (int)mode, fsp->fh->fd,
170 (fsp->fh->fd == -1) ? strerror(errno) : "" ));
171
172 return status;
173 }
174
175 /****************************************************************************
176 Close the file associated with a fsp.
177 ****************************************************************************/
178
179 NTSTATUS fd_close(files_struct *fsp)
180 {
181 int ret;
182
183 if (fsp->fh->fd == -1) {
184 return NT_STATUS_OK; /* What we used to call a stat open. */
185 }
186 if (fsp->fh->ref_count > 1) {
187 return NT_STATUS_OK; /* Shared handle. Only close last reference. */
188 }
189
190 ret = SMB_VFS_CLOSE(fsp);
191 fsp->fh->fd = -1;
192 if (ret == -1) {
193 return map_nt_error_from_unix(errno);
194 }
195 return NT_STATUS_OK;
196 }
197
198 /****************************************************************************
199 Change the ownership of a file to that of the parent directory.
200 Do this by fd if possible.
201 ****************************************************************************/
202
203 void change_file_owner_to_parent(connection_struct *conn,
204 const char *inherit_from_dir,
205 files_struct *fsp)
206 {
207 struct smb_filename *smb_fname_parent = NULL;
208 NTSTATUS status;
209 int ret;
210
211 status = create_synthetic_smb_fname(talloc_tos(), inherit_from_dir,
212 NULL, NULL, &smb_fname_parent);
213 if (!NT_STATUS_IS_OK(status)) {
214 return;
215 }
216
217 ret = SMB_VFS_STAT(conn, smb_fname_parent);
218 if (ret == -1) {
219 DEBUG(0,("change_file_owner_to_parent: failed to stat parent "
220 "directory %s. Error was %s\n",
221 smb_fname_str_dbg(smb_fname_parent),
222 strerror(errno)));
223 return;
224 }
225
226 become_root();
227 ret = SMB_VFS_FCHOWN(fsp, smb_fname_parent->st.st_ex_uid, (gid_t)-1);
228 unbecome_root();
229 if (ret == -1) {
230 DEBUG(0,("change_file_owner_to_parent: failed to fchown "
231 "file %s to parent directory uid %u. Error "
232 "was %s\n", fsp_str_dbg(fsp),
233 (unsigned int)smb_fname_parent->st.st_ex_uid,
234 strerror(errno) ));
235 }
236
237 DEBUG(10,("change_file_owner_to_parent: changed new file %s to "
238 "parent directory uid %u.\n", fsp_str_dbg(fsp),
239 (unsigned int)smb_fname_parent->st.st_ex_uid));
240
241 TALLOC_FREE(smb_fname_parent);
242 }
243
244 NTSTATUS change_dir_owner_to_parent(connection_struct *conn,
245 const char *inherit_from_dir,
246 const char *fname,
247 SMB_STRUCT_STAT *psbuf)
248 {
249 struct smb_filename *smb_fname_parent = NULL;
250 struct smb_filename *smb_fname_cwd = NULL;
251 char *saved_dir = NULL;
252 TALLOC_CTX *ctx = talloc_tos();
253 NTSTATUS status = NT_STATUS_OK;
254 int ret;
255
256 status = create_synthetic_smb_fname(ctx, inherit_from_dir, NULL, NULL,
257 &smb_fname_parent);
258 if (!NT_STATUS_IS_OK(status)) {
259 return status;
260 }
261
262 ret = SMB_VFS_STAT(conn, smb_fname_parent);
263 if (ret == -1) {
264 status = map_nt_error_from_unix(errno);
265 DEBUG(0,("change_dir_owner_to_parent: failed to stat parent "
266 "directory %s. Error was %s\n",
267 smb_fname_str_dbg(smb_fname_parent),
268 strerror(errno)));
269 goto out;
270 }
271
272 /* We've already done an lstat into psbuf, and we know it's a
273 directory. If we can cd into the directory and the dev/ino
274 are the same then we can safely chown without races as
275 we're locking the directory in place by being in it. This
276 should work on any UNIX (thanks tridge :-). JRA.
277 */
278
279 saved_dir = vfs_GetWd(ctx,conn);
280 if (!saved_dir) {
281 status = map_nt_error_from_unix(errno);
282 DEBUG(0,("change_dir_owner_to_parent: failed to get "
283 "current working directory. Error was %s\n",
284 strerror(errno)));
285 goto out;
286 }
287
288 /* Chdir into the new path. */
289 if (vfs_ChDir(conn, fname) == -1) {
290 status = map_nt_error_from_unix(errno);
291 DEBUG(0,("change_dir_owner_to_parent: failed to change "
292 "current working directory to %s. Error "
293 "was %s\n", fname, strerror(errno) ));
294 goto chdir;
295 }
296
297 status = create_synthetic_smb_fname(ctx, ".", NULL, NULL,
298 &smb_fname_cwd);
299 if (!NT_STATUS_IS_OK(status)) {
300 return status;
301 }
302
303 ret = SMB_VFS_STAT(conn, smb_fname_cwd);
304 if (ret == -1) {
305 status = map_nt_error_from_unix(errno);
306 DEBUG(0,("change_dir_owner_to_parent: failed to stat "
307 "directory '.' (%s) Error was %s\n",
308 fname, strerror(errno)));
309 goto chdir;
310 }
311
312 /* Ensure we're pointing at the same place. */
313 if (smb_fname_cwd->st.st_ex_dev != psbuf->st_ex_dev ||
314 smb_fname_cwd->st.st_ex_ino != psbuf->st_ex_ino ||
315 smb_fname_cwd->st.st_ex_mode != psbuf->st_ex_mode ) {
316 DEBUG(0,("change_dir_owner_to_parent: "
317 "device/inode/mode on directory %s changed. "
318 "Refusing to chown !\n", fname ));
319 status = NT_STATUS_ACCESS_DENIED;
320 goto chdir;
321 }
322
323 become_root();
324 ret = SMB_VFS_CHOWN(conn, ".", smb_fname_parent->st.st_ex_uid,
325 (gid_t)-1);
326 unbecome_root();
327 if (ret == -1) {
328 status = map_nt_error_from_unix(errno);
329 DEBUG(10,("change_dir_owner_to_parent: failed to chown "
330 "directory %s to parent directory uid %u. "
331 "Error was %s\n", fname,
332 (unsigned int)smb_fname_parent->st.st_ex_uid,
333 strerror(errno) ));
334 goto chdir;
335 }
336
337 DEBUG(10,("change_dir_owner_to_parent: changed ownership of new "
338 "directory %s to parent directory uid %u.\n",
339 fname, (unsigned int)smb_fname_parent->st.st_ex_uid ));
340
341 chdir:
342 vfs_ChDir(conn,saved_dir);
343 out:
344 TALLOC_FREE(smb_fname_parent);
345 TALLOC_FREE(smb_fname_cwd);
346 return status;
347 }
348
349 /****************************************************************************
350 Open a file.
351 ****************************************************************************/
352
353 static NTSTATUS open_file(files_struct *fsp,
354 connection_struct *conn,
355 struct smb_request *req,
356 const char *parent_dir,
357 int flags,
358 mode_t unx_mode,
359 uint32 access_mask, /* client requested access mask. */
360 uint32 open_access_mask) /* what we're actually using in the open. */
361 {
362 struct smb_filename *smb_fname = fsp->fsp_name;
363 NTSTATUS status = NT_STATUS_OK;
364 int accmode = (flags & O_ACCMODE);
365 int local_flags = flags;
366 bool file_existed = VALID_STAT(fsp->fsp_name->st);
367
368 fsp->fh->fd = -1;
369 errno = EPERM;
370
371 /* Check permissions */
372
373 /*
374 * This code was changed after seeing a client open request
375 * containing the open mode of (DENY_WRITE/read-only) with
376 * the 'create if not exist' bit set. The previous code
377 * would fail to open the file read only on a read-only share
378 * as it was checking the flags parameter directly against O_RDONLY,
379 * this was failing as the flags parameter was set to O_RDONLY|O_CREAT.
380 * JRA.
381 */
382
383 if (!CAN_WRITE(conn)) {
384 /* It's a read-only share - fail if we wanted to write. */
385 if(accmode != O_RDONLY || (flags & O_TRUNC) || (flags & O_APPEND)) {
386 DEBUG(3,("Permission denied opening %s\n",
387 smb_fname_str_dbg(smb_fname)));
388 return NT_STATUS_ACCESS_DENIED;
389 } else if(flags & O_CREAT) {
390 /* We don't want to write - but we must make sure that
391 O_CREAT doesn't create the file if we have write
392 access into the directory.
393 */
394 flags &= ~(O_CREAT|O_EXCL);
395 local_flags &= ~(O_CREAT|O_EXCL);
396 }
397 }
398
399 /*
400 * This little piece of insanity is inspired by the
401 * fact that an NT client can open a file for O_RDONLY,
402 * but set the create disposition to FILE_EXISTS_TRUNCATE.
403 * If the client *can* write to the file, then it expects to
404 * truncate the file, even though it is opening for readonly.
405 * Quicken uses this stupid trick in backup file creation...
406 * Thanks *greatly* to "David W. Chapman Jr." <dwcjr@inethouston.net>
407 * for helping track this one down. It didn't bite us in 2.0.x
408 * as we always opened files read-write in that release. JRA.
409 */
410
411 if ((accmode == O_RDONLY) && ((flags & O_TRUNC) == O_TRUNC)) {
412 DEBUG(10,("open_file: truncate requested on read-only open "
413 "for file %s\n", smb_fname_str_dbg(smb_fname)));
414 local_flags = (flags & ~O_ACCMODE)|O_RDWR;
415 }
416
417 if ((open_access_mask & (FILE_READ_DATA|FILE_WRITE_DATA|FILE_APPEND_DATA|FILE_EXECUTE)) ||
418 (!file_existed && (local_flags & O_CREAT)) ||
419 ((local_flags & O_TRUNC) == O_TRUNC) ) {
420 const char *wild;
421
422 /*
423 * We can't actually truncate here as the file may be locked.
424 * open_file_ntcreate will take care of the truncate later. JRA.
425 */
426
427 local_flags &= ~O_TRUNC;
428
429 #if defined(O_NONBLOCK) && defined(S_ISFIFO)
430 /*
431 * We would block on opening a FIFO with no one else on the
432 * other end. Do what we used to do and add O_NONBLOCK to the
433 * open flags. JRA.
434 */
435
436 if (file_existed && S_ISFIFO(smb_fname->st.st_ex_mode)) {
437 local_flags |= O_NONBLOCK;
438 }
439 #endif
440
441 /* Don't create files with Microsoft wildcard characters. */
442 if (fsp->base_fsp) {
443 /*
444 * wildcard characters are allowed in stream names
445 * only test the basefilename
446 */
447 wild = fsp->base_fsp->fsp_name->base_name;
448 } else {
449 wild = smb_fname->base_name;
450 }
451 if ((local_flags & O_CREAT) && !file_existed &&
452 ms_has_wild(wild)) {
453 return NT_STATUS_OBJECT_NAME_INVALID;
454 }
455
456 /* Actually do the open */
457 status = fd_open(conn, fsp, local_flags, unx_mode);
458 if (!NT_STATUS_IS_OK(status)) {
459 DEBUG(3,("Error opening file %s (%s) (local_flags=%d) "
460 "(flags=%d)\n", smb_fname_str_dbg(smb_fname),
461 nt_errstr(status),local_flags,flags));
462 return status;
463 }
464
465 if ((local_flags & O_CREAT) && !file_existed) {
466
467 /* Inherit the ACL if required */
468 if (lp_inherit_perms(SNUM(conn))) {
469 inherit_access_posix_acl(conn, parent_dir,
470 smb_fname->base_name,
471 unx_mode);
472 }
473
474 /* Change the owner if required. */
475 if (lp_inherit_owner(SNUM(conn))) {
476 change_file_owner_to_parent(conn, parent_dir,
477 fsp);
478 }
479
480 notify_fname(conn, NOTIFY_ACTION_ADDED,
481 FILE_NOTIFY_CHANGE_FILE_NAME,
482 smb_fname->base_name);
483 }
484
485 } else {
486 fsp->fh->fd = -1; /* What we used to call a stat open. */
487 if (file_existed) {
488 uint32_t access_granted = 0;
489
490 status = smbd_check_open_rights(conn,
491 smb_fname,
492 access_mask,
493 &access_granted);
494 if (!NT_STATUS_IS_OK(status)) {
495 if (NT_STATUS_EQUAL(status, NT_STATUS_ACCESS_DENIED)) {
496 /*
497 * On NT_STATUS_ACCESS_DENIED, access_granted
498 * contains the denied bits.
499 */
500
501 if ((access_mask & FILE_WRITE_ATTRIBUTES) &&
502 (access_granted & FILE_WRITE_ATTRIBUTES) &&
503 (lp_map_readonly(SNUM(conn)) ||
504 lp_map_archive(SNUM(conn)) ||
505 lp_map_hidden(SNUM(conn)) ||
506 lp_map_system(SNUM(conn)))) {
507 access_granted &= ~FILE_WRITE_ATTRIBUTES;
508
509 DEBUG(10,("open_file: "
510 "overrode "
511 "FILE_WRITE_"
512 "ATTRIBUTES "
513 "on file %s\n",
514 smb_fname_str_dbg(
515 smb_fname)));
516 }
517
518 if ((access_mask & DELETE_ACCESS) &&
519 (access_granted & DELETE_ACCESS) &&
520 can_delete_file_in_directory(conn,
521 smb_fname)) {
522 /* Were we trying to do a stat open
523 * for delete and didn't get DELETE
524 * access (only) ? Check if the
525 * directory allows DELETE_CHILD.
526 * See here:
527 * http://blogs.msdn.com/oldnewthing/archive/2004/06/04/148426.aspx
528 * for details. */
529
530 access_granted &= ~DELETE_ACCESS;
531
532 DEBUG(10,("open_file: "
533 "overrode "
534 "DELETE_ACCESS on "
535 "file %s\n",
536 smb_fname_str_dbg(
537 smb_fname)));
538 }
539
540 if (access_granted != 0) {
541 DEBUG(10,("open_file: Access "
542 "denied on file "
543 "%s\n",
544 smb_fname_str_dbg(
545 smb_fname)));
546 return status;
547 }
548 } else if (NT_STATUS_EQUAL(status, NT_STATUS_OBJECT_NAME_NOT_FOUND) &&
549 fsp->posix_open &&
550 S_ISLNK(smb_fname->st.st_ex_mode)) {
551 /* This is a POSIX stat open for delete
552 * or rename on a symlink that points
553 * nowhere. Allow. */
554 DEBUG(10,("open_file: allowing POSIX "
555 "open on bad symlink %s\n",
556 smb_fname_str_dbg(
557 smb_fname)));
558 } else {
559 DEBUG(10,("open_file: "
560 "smbd_check_open_rights on file "
561 "%s returned %s\n",
562 smb_fname_str_dbg(smb_fname),
563 nt_errstr(status) ));
564 return status;
565 }
566 }
567 }
568 }
569
570 if (!file_existed) {
571 int ret;
572
573 if (fsp->fh->fd == -1) {
574 ret = SMB_VFS_STAT(conn, smb_fname);
575 } else {
576 ret = SMB_VFS_FSTAT(fsp, &smb_fname->st);
577 /* If we have an fd, this stat should succeed. */
578 if (ret == -1) {
579 DEBUG(0,("Error doing fstat on open file %s "
580 "(%s)\n",
581 smb_fname_str_dbg(smb_fname),
582 strerror(errno) ));
583 }
584 }
585
586 /* For a non-io open, this stat failing means file not found. JRA */
587 if (ret == -1) {
588 status = map_nt_error_from_unix(errno);
589 fd_close(fsp);
590 return status;
591 }
592 }
593
594 /*
595 * POSIX allows read-only opens of directories. We don't
596 * want to do this (we use a different code path for this)
597 * so catch a directory open and return an EISDIR. JRA.
598 */
599
600 if(S_ISDIR(smb_fname->st.st_ex_mode)) {
601 fd_close(fsp);
602 errno = EISDIR;
603 return NT_STATUS_FILE_IS_A_DIRECTORY;
604 }
605
606 fsp->mode = smb_fname->st.st_ex_mode;
607 fsp->file_id = vfs_file_id_from_sbuf(conn, &smb_fname->st);
608 fsp->vuid = req ? req->vuid : UID_FIELD_INVALID;
609 fsp->file_pid = req ? req->smbpid : 0;
610 fsp->can_lock = True;
611 fsp->can_read = (access_mask & (FILE_READ_DATA)) ? True : False;
612 if (!CAN_WRITE(conn)) {
613 fsp->can_write = False;
614 } else {
615 fsp->can_write = (access_mask & (FILE_WRITE_DATA | FILE_APPEND_DATA)) ?
616 True : False;
617 }
618 fsp->print_file = False;
619 fsp->modified = False;
620 fsp->sent_oplock_break = NO_BREAK_SENT;
621 fsp->is_directory = False;
622 if (conn->aio_write_behind_list &&
623 is_in_path(smb_fname->base_name, conn->aio_write_behind_list,
624 conn->case_sensitive)) {
625 fsp->aio_write_behind = True;
626 }
627
628 fsp->wcp = NULL; /* Write cache pointer. */
629
630 DEBUG(2,("%s opened file %s read=%s write=%s (numopen=%d)\n",
631 conn->server_info->unix_name,
632 smb_fname_str_dbg(smb_fname),
633 BOOLSTR(fsp->can_read), BOOLSTR(fsp->can_write),
634 conn->num_files_open));
635
636 errno = 0;
637 return NT_STATUS_OK;
638 }
639
640 /*******************************************************************
641 Return True if the filename is one of the special executable types.
642 ********************************************************************/
643
644 bool is_executable(const char *fname)
645 {
646 if ((fname = strrchr_m(fname,'.'))) {
647 if (strequal(fname,".com") ||
648 strequal(fname,".dll") ||
649 strequal(fname,".exe") ||
650 strequal(fname,".sym")) {
651 return True;
652 }
653 }
654 return False;
655 }
656
657 /****************************************************************************
658 Check if we can open a file with a share mode.
659 Returns True if conflict, False if not.
660 ****************************************************************************/
661
662 static bool share_conflict(struct share_mode_entry *entry,
663 uint32 access_mask,
664 uint32 share_access)
665 {
666 DEBUG(10,("share_conflict: entry->access_mask = 0x%x, "
667 "entry->share_access = 0x%x, "
668 "entry->private_options = 0x%x\n",
669 (unsigned int)entry->access_mask,
670 (unsigned int)entry->share_access,
671 (unsigned int)entry->private_options));
672
673 DEBUG(10,("share_conflict: access_mask = 0x%x, share_access = 0x%x\n",
674 (unsigned int)access_mask, (unsigned int)share_access));
675
676 if ((entry->access_mask & (FILE_WRITE_DATA|
677 FILE_APPEND_DATA|
678 FILE_READ_DATA|
679 FILE_EXECUTE|
680 DELETE_ACCESS)) == 0) {
681 DEBUG(10,("share_conflict: No conflict due to "
682 "entry->access_mask = 0x%x\n",
683 (unsigned int)entry->access_mask ));
684 return False;
685 }
686
687 if ((access_mask & (FILE_WRITE_DATA|
688 FILE_APPEND_DATA|
689 FILE_READ_DATA|
690 FILE_EXECUTE|
691 DELETE_ACCESS)) == 0) {
692 DEBUG(10,("share_conflict: No conflict due to "
693 "access_mask = 0x%x\n",
694 (unsigned int)access_mask ));
695 return False;
696 }
697
698 #if 1 /* JRA TEST - Superdebug. */
699 #define CHECK_MASK(num, am, right, sa, share) \
700 DEBUG(10,("share_conflict: [%d] am (0x%x) & right (0x%x) = 0x%x\n", \
701 (unsigned int)(num), (unsigned int)(am), \
702 (unsigned int)(right), (unsigned int)(am)&(right) )); \
703 DEBUG(10,("share_conflict: [%d] sa (0x%x) & share (0x%x) = 0x%x\n", \
704 (unsigned int)(num), (unsigned int)(sa), \
705 (unsigned int)(share), (unsigned int)(sa)&(share) )); \
706 if (((am) & (right)) && !((sa) & (share))) { \
707 DEBUG(10,("share_conflict: check %d conflict am = 0x%x, right = 0x%x, \
708 sa = 0x%x, share = 0x%x\n", (num), (unsigned int)(am), (unsigned int)(right), (unsigned int)(sa), \
709 (unsigned int)(share) )); \
710 return True; \
711 }
712 #else
713 #define CHECK_MASK(num, am, right, sa, share) \
714 if (((am) & (right)) && !((sa) & (share))) { \
715 DEBUG(10,("share_conflict: check %d conflict am = 0x%x, right = 0x%x, \
716 sa = 0x%x, share = 0x%x\n", (num), (unsigned int)(am), (unsigned int)(right), (unsigned int)(sa), \
717 (unsigned int)(share) )); \
718 return True; \
719 }
720 #endif
721
722 CHECK_MASK(1, entry->access_mask, FILE_WRITE_DATA | FILE_APPEND_DATA,
723 share_access, FILE_SHARE_WRITE);
724 CHECK_MASK(2, access_mask, FILE_WRITE_DATA | FILE_APPEND_DATA,
725 entry->share_access, FILE_SHARE_WRITE);
726
727 CHECK_MASK(3, entry->access_mask, FILE_READ_DATA | FILE_EXECUTE,
728 share_access, FILE_SHARE_READ);
729 CHECK_MASK(4, access_mask, FILE_READ_DATA | FILE_EXECUTE,
730 entry->share_access, FILE_SHARE_READ);
731
732 CHECK_MASK(5, entry->access_mask, DELETE_ACCESS,
733 share_access, FILE_SHARE_DELETE);
734 CHECK_MASK(6, access_mask, DELETE_ACCESS,
735 entry->share_access, FILE_SHARE_DELETE);
736
737 DEBUG(10,("share_conflict: No conflict.\n"));
738 return False;
739 }
740
741 #if defined(DEVELOPER)
742 static void validate_my_share_entries(int num,
743 struct share_mode_entry *share_entry)
744 {
745 files_struct *fsp;
746
747 if (!procid_is_me(&share_entry->pid)) {
748 return;
749 }
750
751 if (is_deferred_open_entry(share_entry) &&
752 !open_was_deferred(share_entry->op_mid)) {
753 char *str = talloc_asprintf(talloc_tos(),
754 "Got a deferred entry without a request: "
755 "PANIC: %s\n",
756 share_mode_str(talloc_tos(), num, share_entry));
757 smb_panic(str);
758 }
759
760 if (!is_valid_share_mode_entry(share_entry)) {
761 return;
762 }
763
764 fsp = file_find_dif(share_entry->id,
765 share_entry->share_file_id);
766 if (!fsp) {
767 DEBUG(0,("validate_my_share_entries: PANIC : %s\n",
768 share_mode_str(talloc_tos(), num, share_entry) ));
769 smb_panic("validate_my_share_entries: Cannot match a "
770 "share entry with an open file\n");
771 }
772
773 if (is_deferred_open_entry(share_entry) ||
774 is_unused_share_mode_entry(share_entry)) {
775 goto panic;
776 }
777
778 if ((share_entry->op_type == NO_OPLOCK) &&
779 (fsp->oplock_type == FAKE_LEVEL_II_OPLOCK)) {
780 /* Someone has already written to it, but I haven't yet
781 * noticed */
782 return;
783 }
784
785 if (((uint16)fsp->oplock_type) != share_entry->op_type) {
786 goto panic;
787 }
788
789 return;
790
791 panic:
792 {
793 char *str;
794 DEBUG(0,("validate_my_share_entries: PANIC : %s\n",
795 share_mode_str(talloc_tos(), num, share_entry) ));
796 str = talloc_asprintf(talloc_tos(),
797 "validate_my_share_entries: "
798 "file %s, oplock_type = 0x%x, op_type = 0x%x\n",
799 fsp->fsp_name->base_name,
800 (unsigned int)fsp->oplock_type,
801 (unsigned int)share_entry->op_type );
802 smb_panic(str);
803 }
804 }
805 #endif
806
807 bool is_stat_open(uint32 access_mask)
808 {
809 return (access_mask &&
810 ((access_mask & ~(SYNCHRONIZE_ACCESS| FILE_READ_ATTRIBUTES|
811 FILE_WRITE_ATTRIBUTES))==0) &&
812 ((access_mask & (SYNCHRONIZE_ACCESS|FILE_READ_ATTRIBUTES|
813 FILE_WRITE_ATTRIBUTES)) != 0));
814 }
815
816 /****************************************************************************
817 Deal with share modes
818 Invarient: Share mode must be locked on entry and exit.
819 Returns -1 on error, or number of share modes on success (may be zero).
820 ****************************************************************************/
821
822 static NTSTATUS open_mode_check(connection_struct *conn,
823 struct share_mode_lock *lck,
824 uint32 access_mask,
825 uint32 share_access,
826 uint32 create_options,
827 bool *file_existed)
828 {
829 int i;
830
831 if(lck->num_share_modes == 0) {
832 return NT_STATUS_OK;
833 }
834
835 *file_existed = True;
836
837 /* A delete on close prohibits everything */
838
839 if (lck->delete_on_close) {
840 return NT_STATUS_DELETE_PENDING;
841 }
842
843 if (is_stat_open(access_mask)) {
844 /* Stat open that doesn't trigger oplock breaks or share mode
845 * checks... ! JRA. */
846 return NT_STATUS_OK;
847 }
848
849 /*
850 * Check if the share modes will give us access.
851 */
852
853 #if defined(DEVELOPER)
854 for(i = 0; i < lck->num_share_modes; i++) {
855 validate_my_share_entries(i, &lck->share_modes[i]);
856 }
857 #endif
858
859 if (!lp_share_modes(SNUM(conn))) {
860 return NT_STATUS_OK;
861 }
862
863 /* Now we check the share modes, after any oplock breaks. */
864 for(i = 0; i < lck->num_share_modes; i++) {
865
866 if (!is_valid_share_mode_entry(&lck->share_modes[i])) {
867 continue;
868 }
869
870 /* someone else has a share lock on it, check to see if we can
871 * too */
872 if (share_conflict(&lck->share_modes[i],
873 access_mask, share_access)) {
874 return NT_STATUS_SHARING_VIOLATION;
875 }
876 }
877
878 return NT_STATUS_OK;
879 }
880
881 static bool is_delete_request(files_struct *fsp) {
882 return ((fsp->access_mask == DELETE_ACCESS) &&
883 (fsp->oplock_type == NO_OPLOCK));
884 }
885
886 /*
887 * Send a break message to the oplock holder and delay the open for
888 * our client.
889 */
890
891 static NTSTATUS send_break_message(files_struct *fsp,
892 struct share_mode_entry *exclusive,
893 uint16 mid,
894 int oplock_request)
895 {
896 NTSTATUS status;
897 char msg[MSG_SMB_SHARE_MODE_ENTRY_SIZE];
898
899 DEBUG(10, ("Sending break request to PID %s\n",
900 procid_str_static(&exclusive->pid)));
901 exclusive->op_mid = mid;
902
903 /* Create the message. */
904 share_mode_entry_to_message(msg, exclusive);
905
906 /* Add in the FORCE_OPLOCK_BREAK_TO_NONE bit in the message if set. We
907 don't want this set in the share mode struct pointed to by lck. */
908
909 if (oplock_request & FORCE_OPLOCK_BREAK_TO_NONE) {
910 SSVAL(msg,6,exclusive->op_type | FORCE_OPLOCK_BREAK_TO_NONE);
911 }
912
913 status = messaging_send_buf(smbd_messaging_context(), exclusive->pid,
914 MSG_SMB_BREAK_REQUEST,
915 (uint8 *)msg,
916 MSG_SMB_SHARE_MODE_ENTRY_SIZE);
917 if (!NT_STATUS_IS_OK(status)) {
918 DEBUG(3, ("Could not send oplock break message: %s\n",
919 nt_errstr(status)));
920 }
921
922 return status;
923 }
924
925 /*
926 * 1) No files open at all or internal open: Grant whatever the client wants.
927 *
928 * 2) Exclusive (or batch) oplock around: If the requested access is a delete
929 * request, break if the oplock around is a batch oplock. If it's another
930 * requested access type, break.
931 *
932 * 3) Only level2 around: Grant level2 and do nothing else.
933 */
934
935 static bool delay_for_oplocks(struct share_mode_lock *lck,
936 files_struct *fsp,
937 uint16 mid,
938 int pass_number,
939 int oplock_request)
940 {
941 int i;
942 struct share_mode_entry *exclusive = NULL;
943 bool valid_entry = false;
944 bool have_level2 = false;
945 bool have_a_none_oplock = false;
946 bool allow_level2 = (global_client_caps & CAP_LEVEL_II_OPLOCKS) &&
947 lp_level2_oplocks(SNUM(fsp->conn));
948
949 if (oplock_request & INTERNAL_OPEN_ONLY) {
950 fsp->oplock_type = NO_OPLOCK;
951 }
952
953 if ((oplock_request & INTERNAL_OPEN_ONLY) || is_stat_open(fsp->access_mask)) {
954 return false;
955 }
956
957 for (i=0; i<lck->num_share_modes; i++) {
958
959 if (!is_valid_share_mode_entry(&lck->share_modes[i])) {
960 continue;
961 }
962
963 /* At least one entry is not an invalid or deferred entry. */
964 valid_entry = true;
965
966 if (pass_number == 1) {
967 if (BATCH_OPLOCK_TYPE(lck->share_modes[i].op_type)) {
968 SMB_ASSERT(exclusive == NULL);
969 exclusive = &lck->share_modes[i];
970 }
971 } else {
972 if (EXCLUSIVE_OPLOCK_TYPE(lck->share_modes[i].op_type)) {
973 SMB_ASSERT(exclusive == NULL);
974 exclusive = &lck->share_modes[i];
975 }
976 }
977
978 if (LEVEL_II_OPLOCK_TYPE(lck->share_modes[i].op_type)) {
979 SMB_ASSERT(exclusive == NULL);
980 have_level2 = true;
981 }
982
983 if (lck->share_modes[i].op_type == NO_OPLOCK) {
984 have_a_none_oplock = true;
985 }
986 }
987
988 if (exclusive != NULL) { /* Found an exclusive oplock */
989 bool delay_it = is_delete_request(fsp) ?
990 BATCH_OPLOCK_TYPE(exclusive->op_type) : true;
991 SMB_ASSERT(!have_level2);
992 if (delay_it) {
993 send_break_message(fsp, exclusive, mid, oplock_request);
994 return true;
995 }
996 }
997
998 /*
999 * Match what was requested (fsp->oplock_type) with
1000 * what was found in the existing share modes.
1001 */
1002
1003 if (!valid_entry) {
1004 /* All entries are placeholders or deferred.
1005 * Directly grant whatever the client wants. */
1006 if (fsp->oplock_type == NO_OPLOCK) {
1007 /* Store a level2 oplock, but don't tell the client */
1008 fsp->oplock_type = FAKE_LEVEL_II_OPLOCK;
1009 }
1010 } else if (have_a_none_oplock) {
1011 fsp->oplock_type = NO_OPLOCK;
1012 } else if (have_level2) {
1013 if (fsp->oplock_type == NO_OPLOCK ||
1014 fsp->oplock_type == FAKE_LEVEL_II_OPLOCK) {
1015 /* Store a level2 oplock, but don't tell the client */
1016 fsp->oplock_type = FAKE_LEVEL_II_OPLOCK;
1017 } else {
1018 fsp->oplock_type = LEVEL_II_OPLOCK;
1019 }
1020 } else {
1021 /* This case can never happen. */
1022 SMB_ASSERT(1);
1023 }
1024
1025 /*
1026 * Don't grant level2 to clients that don't want them
1027 * or if we've turned them off.
1028 */
1029 if (fsp->oplock_type == LEVEL_II_OPLOCK && !allow_level2) {
1030 fsp->oplock_type = FAKE_LEVEL_II_OPLOCK;
1031 }
1032
1033 DEBUG(10,("delay_for_oplocks: oplock type 0x%x on file %s\n",
1034 fsp->oplock_type, fsp_str_dbg(fsp)));
1035
1036 /* No delay. */
1037 return false;
1038 }
1039
1040 bool request_timed_out(struct timeval request_time,
1041 struct timeval timeout)
1042 {
1043 struct timeval now, end_time;
1044 GetTimeOfDay(&now);
1045 end_time = timeval_sum(&request_time, &timeout);
1046 return (timeval_compare(&end_time, &now) < 0);
1047 }
1048
1049 /****************************************************************************
1050 Handle the 1 second delay in returning a SHARING_VIOLATION error.
1051 ****************************************************************************/
1052
1053 static void defer_open(struct share_mode_lock *lck,
1054 struct timeval request_time,
1055 struct timeval timeout,
1056 struct smb_request *req,
1057 struct deferred_open_record *state)
1058 {
1059 int i;
1060
1061 /* Paranoia check */
1062
1063 for (i=0; i<lck->num_share_modes; i++) {
1064 struct share_mode_entry *e = &lck->share_modes[i];
1065
1066 if (!is_deferred_open_entry(e)) {
1067 continue;
1068 }
1069
1070 if (procid_is_me(&e->pid) && (e->op_mid == req->mid)) {
1071 DEBUG(0, ("Trying to defer an already deferred "
1072 "request: mid=%d, exiting\n", req->mid));
1073 exit_server("attempt to defer a deferred request");
1074 }
1075 }
1076
1077 /* End paranoia check */
1078
1079 DEBUG(10,("defer_open_sharing_error: time [%u.%06u] adding deferred "
1080 "open entry for mid %u\n",
1081 (unsigned int)request_time.tv_sec,
1082 (unsigned int)request_time.tv_usec,
1083 (unsigned int)req->mid));
1084
1085 if (!push_deferred_smb_message(req, request_time, timeout,
1086 (char *)state, sizeof(*state))) {
1087 exit_server("push_deferred_smb_message failed");
1088 }
1089 add_deferred_open(lck, req->mid, request_time, state->id);
1090 }
1091
1092
1093 /****************************************************************************
1094 On overwrite open ensure that the attributes match.
1095 ****************************************************************************/
1096
1097 bool open_match_attributes(connection_struct *conn,
1098 uint32 old_dos_attr,
1099 uint32 new_dos_attr,
1100 mode_t existing_unx_mode,
1101 mode_t new_unx_mode,
1102 mode_t *returned_unx_mode)
1103 {
1104 uint32 noarch_old_dos_attr, noarch_new_dos_attr;
1105
1106 noarch_old_dos_attr = (old_dos_attr & ~FILE_ATTRIBUTE_ARCHIVE);
1107 noarch_new_dos_attr = (new_dos_attr & ~FILE_ATTRIBUTE_ARCHIVE);
1108
1109 if((noarch_old_dos_attr == 0 && noarch_new_dos_attr != 0) ||
1110 (noarch_old_dos_attr != 0 && ((noarch_old_dos_attr & noarch_new_dos_attr) == noarch_old_dos_attr))) {
1111 *returned_unx_mode = new_unx_mode;
1112 } else {
1113 *returned_unx_mode = (mode_t)0;
1114 }
1115
1116 DEBUG(10,("open_match_attributes: old_dos_attr = 0x%x, "
1117 "existing_unx_mode = 0%o, new_dos_attr = 0x%x "
1118 "returned_unx_mode = 0%o\n",
1119 (unsigned int)old_dos_attr,
1120 (unsigned int)existing_unx_mode,
1121 (unsigned int)new_dos_attr,
1122 (unsigned int)*returned_unx_mode ));
1123
1124 /* If we're mapping SYSTEM and HIDDEN ensure they match. */
1125 if (lp_map_system(SNUM(conn)) || lp_store_dos_attributes(SNUM(conn))) {
1126 if ((old_dos_attr & FILE_ATTRIBUTE_SYSTEM) &&
1127 !(new_dos_attr & FILE_ATTRIBUTE_SYSTEM)) {
1128 return False;
1129 }
1130 }
1131 if (lp_map_hidden(SNUM(conn)) || lp_store_dos_attributes(SNUM(conn))) {
1132 if ((old_dos_attr & FILE_ATTRIBUTE_HIDDEN) &&
1133 !(new_dos_attr & FILE_ATTRIBUTE_HIDDEN)) {
1134 return False;
1135 }
1136 }
1137 return True;
1138 }
1139
1140 /****************************************************************************
1141 Special FCB or DOS processing in the case of a sharing violation.
1142 Try and find a duplicated file handle.
1143 ****************************************************************************/
1144
1145 NTSTATUS fcb_or_dos_open(struct smb_request *req,
1146 connection_struct *conn,
1147 files_struct *fsp_to_dup_into,
1148 const struct smb_filename *smb_fname,
1149 struct file_id id,
1150 uint16 file_pid,
1151 uint16 vuid,
1152 uint32 access_mask,
1153 uint32 share_access,
1154 uint32 create_options)
1155 {
1156 files_struct *fsp;
1157
1158 DEBUG(5,("fcb_or_dos_open: attempting old open semantics for "
1159 "file %s.\n", smb_fname_str_dbg(smb_fname)));
1160
1161 for(fsp = file_find_di_first(id); fsp;
1162 fsp = file_find_di_next(fsp)) {
1163
1164 DEBUG(10,("fcb_or_dos_open: checking file %s, fd = %d, "
1165 "vuid = %u, file_pid = %u, private_options = 0x%x "
1166 "access_mask = 0x%x\n", fsp_str_dbg(fsp),
1167 fsp->fh->fd, (unsigned int)fsp->vuid,
1168 (unsigned int)fsp->file_pid,
1169 (unsigned int)fsp->fh->private_options,
1170 (unsigned int)fsp->access_mask ));
1171
1172 if (fsp->fh->fd != -1 &&
1173 fsp->vuid == vuid &&
1174 fsp->file_pid == file_pid &&
1175 (fsp->fh->private_options & (NTCREATEX_OPTIONS_PRIVATE_DENY_DOS |
1176 NTCREATEX_OPTIONS_PRIVATE_DENY_FCB)) &&
1177 (fsp->access_mask & FILE_WRITE_DATA) &&
1178 strequal(fsp->fsp_name->base_name, smb_fname->base_name) &&
1179 strequal(fsp->fsp_name->stream_name,
1180 smb_fname->stream_name)) {
1181 DEBUG(10,("fcb_or_dos_open: file match\n"));
1182 break;
1183 }
1184 }
1185
1186 if (!fsp) {
1187 return NT_STATUS_NOT_FOUND;
1188 }
1189
1190 /* quite an insane set of semantics ... */
1191 if (is_executable(smb_fname->base_name) &&
1192 (fsp->fh->private_options & NTCREATEX_OPTIONS_PRIVATE_DENY_DOS)) {
1193 DEBUG(10,("fcb_or_dos_open: file fail due to is_executable.\n"));
1194 return NT_STATUS_INVALID_PARAMETER;
1195 }
1196
1197 /* We need to duplicate this fsp. */
1198 return dup_file_fsp(req, fsp, access_mask, share_access,
1199 create_options, fsp_to_dup_into);
1200 }
1201
1202 /****************************************************************************
1203 Open a file with a share mode - old openX method - map into NTCreate.
1204 ****************************************************************************/
1205
1206 bool map_open_params_to_ntcreate(const struct smb_filename *smb_fname,
1207 int deny_mode, int open_func,
1208 uint32 *paccess_mask,
1209 uint32 *pshare_mode,
1210 uint32 *pcreate_disposition,
1211 uint32 *pcreate_options,
1212 uint32_t *pprivate_flags)
1213 {
1214 uint32 access_mask;
1215 uint32 share_mode;
1216 uint32 create_disposition;
1217 uint32 create_options = FILE_NON_DIRECTORY_FILE;
1218 uint32_t private_flags = 0;
1219
1220 DEBUG(10,("map_open_params_to_ntcreate: fname = %s, deny_mode = 0x%x, "
1221 "open_func = 0x%x\n",
1222 smb_fname_str_dbg(smb_fname), (unsigned int)deny_mode,
1223 (unsigned int)open_func ));
1224
1225 /* Create the NT compatible access_mask. */
1226 switch (GET_OPENX_MODE(deny_mode)) {
1227 case DOS_OPEN_EXEC: /* Implies read-only - used to be FILE_READ_DATA */
1228 case DOS_OPEN_RDONLY:
1229 access_mask = FILE_GENERIC_READ;
1230 break;
1231 case DOS_OPEN_WRONLY:
1232 access_mask = FILE_GENERIC_WRITE;
1233 break;
1234 case DOS_OPEN_RDWR:
1235 case DOS_OPEN_FCB:
1236 access_mask = FILE_GENERIC_READ|FILE_GENERIC_WRITE;
1237 break;
1238 default:
1239 DEBUG(10,("map_open_params_to_ntcreate: bad open mode = 0x%x\n",
1240 (unsigned int)GET_OPENX_MODE(deny_mode)));
1241 return False;
1242 }
1243
1244 /* Create the NT compatible create_disposition. */
1245 switch (open_func) {
1246 case OPENX_FILE_EXISTS_FAIL|OPENX_FILE_CREATE_IF_NOT_EXIST:
1247 create_disposition = FILE_CREATE;
1248 break;
1249
1250 case OPENX_FILE_EXISTS_OPEN:
1251 create_disposition = FILE_OPEN;
1252 break;
1253
1254 case OPENX_FILE_EXISTS_OPEN|OPENX_FILE_CREATE_IF_NOT_EXIST:
1255 create_disposition = FILE_OPEN_IF;
1256 break;
1257
1258 case OPENX_FILE_EXISTS_TRUNCATE:
1259 create_disposition = FILE_OVERWRITE;
1260 break;
1261
1262 case OPENX_FILE_EXISTS_TRUNCATE|OPENX_FILE_CREATE_IF_NOT_EXIST:
1263 create_disposition = FILE_OVERWRITE_IF;
1264 break;
1265
1266 default:
1267 /* From samba4 - to be confirmed. */
1268 if (GET_OPENX_MODE(deny_mode) == DOS_OPEN_EXEC) {
1269 create_disposition = FILE_CREATE;
1270 break;
1271 }
1272 DEBUG(10,("map_open_params_to_ntcreate: bad "
1273 "open_func 0x%x\n", (unsigned int)open_func));
1274 return False;
1275 }
1276
1277 /* Create the NT compatible share modes. */
1278 switch (GET_DENY_MODE(deny_mode)) {
1279 case DENY_ALL:
1280 share_mode = FILE_SHARE_NONE;
1281 break;
1282
1283 case DENY_WRITE:
1284 share_mode = FILE_SHARE_READ;
1285 break;
1286
1287 case DENY_READ:
1288 share_mode = FILE_SHARE_WRITE;
1289 break;
1290
1291 case DENY_NONE:
1292 share_mode = FILE_SHARE_READ|FILE_SHARE_WRITE;
1293 break;
1294
1295 case DENY_DOS:
1296 private_flags |= NTCREATEX_OPTIONS_PRIVATE_DENY_DOS;
1297 if (is_executable(smb_fname->base_name)) {
1298 share_mode = FILE_SHARE_READ|FILE_SHARE_WRITE;
1299 } else {
1300 if (GET_OPENX_MODE(deny_mode) == DOS_OPEN_RDONLY) {
1301 share_mode = FILE_SHARE_READ;
1302 } else {
1303 share_mode = FILE_SHARE_NONE;
1304 }
1305 }
1306 break;
1307
1308 case DENY_FCB:
1309 private_flags |= NTCREATEX_OPTIONS_PRIVATE_DENY_FCB;
1310 share_mode = FILE_SHARE_NONE;
1311 break;
1312
1313 default:
1314 DEBUG(10,("map_open_params_to_ntcreate: bad deny_mode 0x%x\n",
1315 (unsigned int)GET_DENY_MODE(deny_mode) ));
1316 return False;
1317 }
1318
1319 DEBUG(10,("map_open_params_to_ntcreate: file %s, access_mask = 0x%x, "
1320 "share_mode = 0x%x, create_disposition = 0x%x, "
1321 "create_options = 0x%x private_flags = 0x%x\n",
1322 smb_fname_str_dbg(smb_fname),
1323 (unsigned int)access_mask,
1324 (unsigned int)share_mode,
1325 (unsigned int)create_disposition,
1326 (unsigned int)create_options,
1327 (unsigned int)private_flags));
1328
1329 if (paccess_mask) {
1330 *paccess_mask = access_mask;
1331 }
1332 if (pshare_mode) {
1333 *pshare_mode = share_mode;
1334 }
1335 if (pcreate_disposition) {
1336 *pcreate_disposition = create_disposition;
1337 }
1338 if (pcreate_options) {
1339 *pcreate_options = create_options;
1340 }
1341 if (pprivate_flags) {
1342 *pprivate_flags = private_flags;
1343 }
1344
1345 return True;
1346
1347 }
1348
1349 static void schedule_defer_open(struct share_mode_lock *lck,
1350 struct timeval request_time,
1351 struct smb_request *req)
1352 {
1353 struct deferred_open_record state;
1354
1355 /* This is a relative time, added to the absolute
1356 request_time value to get the absolute timeout time.
1357 Note that if this is the second or greater time we enter
1358 this codepath for this particular request mid then
1359 request_time is left as the absolute time of the *first*
1360 time this request mid was processed. This is what allows
1361 the request to eventually time out. */
1362
1363 struct timeval timeout;
1364
1365 /* Normally the smbd we asked should respond within
1366 * OPLOCK_BREAK_TIMEOUT seconds regardless of whether
1367 * the client did, give twice the timeout as a safety
1368 * measure here in case the other smbd is stuck
1369 * somewhere else. */
1370
1371 timeout = timeval_set(OPLOCK_BREAK_TIMEOUT*2, 0);
1372
1373 /* Nothing actually uses state.delayed_for_oplocks
1374 but it's handy to differentiate in debug messages
1375 between a 30 second delay due to oplock break, and
1376 a 1 second delay for share mode conflicts. */
1377
1378 state.delayed_for_oplocks = True;
1379 state.id = lck->id;
1380
1381 if (!request_timed_out(request_time, timeout)) {
1382 defer_open(lck, request_time, timeout, req, &state);
1383 }
1384 }
1385
1386 /****************************************************************************
1387 Work out what access_mask to use from what the client sent us.
1388 ****************************************************************************/
1389
1390 static NTSTATUS calculate_access_mask(connection_struct *conn,
1391 const struct smb_filename *smb_fname,
1392 bool file_existed,
1393 uint32_t access_mask,
1394 uint32_t *access_mask_out)
1395 {
1396 NTSTATUS status;
1397
1398 /*
1399 * Convert GENERIC bits to specific bits.
1400 */
1401
1402 se_map_generic(&access_mask, &file_generic_mapping);
1403
1404 /* Calculate MAXIMUM_ALLOWED_ACCESS if requested. */
1405 if (access_mask & MAXIMUM_ALLOWED_ACCESS) {
1406 if (file_existed) {
1407
1408 struct security_descriptor *sd;
1409 uint32_t access_granted = 0;
1410
1411 status = SMB_VFS_GET_NT_ACL(conn, smb_fname->base_name,
1412 (OWNER_SECURITY_INFORMATION |
1413 GROUP_SECURITY_INFORMATION |
1414 DACL_SECURITY_INFORMATION),&sd);
1415
1416 if (!NT_STATUS_IS_OK(status)) {
1417 DEBUG(10, ("calculate_access_mask: Could not get acl "
1418 "on file %s: %s\n",
1419 smb_fname_str_dbg(smb_fname),
1420 nt_errstr(status)));
1421 return NT_STATUS_ACCESS_DENIED;
1422 }
1423
1424 status = smb1_file_se_access_check(conn,
1425 sd,
1426 get_current_nttok(conn),
1427 access_mask,
1428 &access_granted);
1429
1430 TALLOC_FREE(sd);
1431
1432 if (!NT_STATUS_IS_OK(status)) {
1433 DEBUG(10, ("calculate_access_mask: Access denied on "
1434 "file %s: when calculating maximum access\n",
1435 smb_fname_str_dbg(smb_fname)));
1436 return NT_STATUS_ACCESS_DENIED;
1437 }
1438
1439 access_mask = access_granted;
1440 } else {
1441 access_mask = FILE_GENERIC_ALL;
1442 }
1443 }
1444
1445 *access_mask_out = access_mask;
1446 return NT_STATUS_OK;
1447 }
1448
1449 /****************************************************************************
1450 Open a file with a share mode. Passed in an already created files_struct *.
1451 ****************************************************************************/
1452
1453 static NTSTATUS open_file_ntcreate(connection_struct *conn,
1454 struct smb_request *req,
1455 uint32 access_mask, /* access bits (FILE_READ_DATA etc.) */
1456 uint32 share_access, /* share constants (FILE_SHARE_READ etc) */
1457 uint32 create_disposition, /* FILE_OPEN_IF etc. */
1458 uint32 create_options, /* options such as delete on close. */
1459 uint32 new_dos_attributes, /* attributes used for new file. */
1460 int oplock_request, /* internal Samba oplock codes. */
1461 /* Information (FILE_EXISTS etc.) */
1462 uint32_t private_flags, /* Samba specific flags. */
1463 int *pinfo,
1464 files_struct *fsp)
1465 {
1466 struct smb_filename *smb_fname = fsp->fsp_name;
1467 int flags=0;
1468 int flags2=0;
1469 bool file_existed = VALID_STAT(smb_fname->st);
1470 bool def_acl = False;
1471 bool posix_open = False;
1472 bool new_file_created = False;
1473 bool clear_ads = false;
1474 struct file_id id;
1475 NTSTATUS fsp_open = NT_STATUS_ACCESS_DENIED;
1476 mode_t new_unx_mode = (mode_t)0;
1477 mode_t unx_mode = (mode_t)0;
1478 int info;
1479 uint32 existing_dos_attributes = 0;
1480 struct pending_message_list *pml = NULL;
1481 struct timeval request_time = timeval_zero();
1482 struct share_mode_lock *lck = NULL;
1483 uint32 open_access_mask = access_mask;
1484 NTSTATUS status;
1485 char *parent_dir;
1486
1487 ZERO_STRUCT(id);
1488
1489 if (conn->printer) {
1490 /*
1491 * Printers are handled completely differently.
1492 * Most of the passed parameters are ignored.
1493 */
1494
1495 if (pinfo) {
1496 *pinfo = FILE_WAS_CREATED;
1497 }
1498
1499 DEBUG(10, ("open_file_ntcreate: printer open fname=%s\n",
1500 smb_fname_str_dbg(smb_fname)));
1501
1502 if (!req) {
1503 DEBUG(0,("open_file_ntcreate: printer open without "
1504 "an SMB request!\n"));
1505 return NT_STATUS_INTERNAL_ERROR;
1506 }
1507
1508 return print_fsp_open(req, conn, smb_fname->base_name,
1509 req->vuid, fsp);
1510 }
1511
1512 if (!parent_dirname(talloc_tos(), smb_fname->base_name, &parent_dir,
1513 NULL)) {
1514 return NT_STATUS_NO_MEMORY;
1515 }
1516
1517 if (new_dos_attributes & FILE_FLAG_POSIX_SEMANTICS) {
1518 posix_open = True;
1519 unx_mode = (mode_t)(new_dos_attributes & ~FILE_FLAG_POSIX_SEMANTICS);
1520 new_dos_attributes = 0;
1521 } else {
1522 /* We add aARCH to this as this mode is only used if the file is
1523 * created new. */
1524 unx_mode = unix_mode(conn, new_dos_attributes | aARCH,
1525 smb_fname, parent_dir);
1526 }
1527
1528 DEBUG(10, ("open_file_ntcreate: fname=%s, dos_attrs=0x%x "
1529 "access_mask=0x%x share_access=0x%x "
1530 "create_disposition = 0x%x create_options=0x%x "
1531 "unix mode=0%o oplock_request=%d private_flags = 0x%x\n",
1532 smb_fname_str_dbg(smb_fname), new_dos_attributes,
1533 access_mask, share_access, create_disposition,
1534 create_options, (unsigned int)unx_mode, oplock_request,
1535 (unsigned int)private_flags));
1536
1537 if ((req == NULL) && ((oplock_request & INTERNAL_OPEN_ONLY) == 0)) {
1538 DEBUG(0, ("No smb request but not an internal only open!\n"));
1539 return NT_STATUS_INTERNAL_ERROR;
1540 }
1541
1542 /*
1543 * Only non-internal opens can be deferred at all
1544 */
1545
1546 if ((req != NULL)
1547 && ((pml = get_open_deferred_message(req->mid)) != NULL)) {
1548 struct deferred_open_record *state =
1549 (struct deferred_open_record *)pml->private_data.data;
1550
1551 /* Remember the absolute time of the original
1552 request with this mid. We'll use it later to
1553 see if this has timed out. */
1554
1555 request_time = pml->request_time;
1556
1557 /* Remove the deferred open entry under lock. */
1558 lck = get_share_mode_lock(talloc_tos(), state->id, NULL, NULL,
1559 NULL);
1560 if (lck == NULL) {
1561 DEBUG(0, ("could not get share mode lock\n"));
1562 } else {
1563 del_deferred_open_entry(lck, req->mid);
1564 TALLOC_FREE(lck);
1565 }
1566
1567 /* Ensure we don't reprocess this message. */
1568 remove_deferred_open_smb_message(req->mid);
1569 }
1570
1571 status = check_name(conn, smb_fname->base_name);
1572 if (!NT_STATUS_IS_OK(status)) {
1573 return status;
1574 }
1575
1576 if (!posix_open) {
1577 new_dos_attributes &= SAMBA_ATTRIBUTES_MASK;
1578 if (file_existed) {
1579 existing_dos_attributes = dos_mode(conn, smb_fname);
1580 }
1581 }
1582
1583 /* ignore any oplock requests if oplocks are disabled */
1584 if (!lp_oplocks(SNUM(conn)) || global_client_failed_oplock_break ||
1585 IS_VETO_OPLOCK_PATH(conn, smb_fname->base_name)) {
1586 /* Mask off everything except the private Samba bits. */
1587 oplock_request &= SAMBA_PRIVATE_OPLOCK_MASK;
1588 }
1589
1590 /* this is for OS/2 long file names - say we don't support them */
1591 if (!lp_posix_pathnames() && strstr(smb_fname->base_name,".+,;=[].")) {
1592 /* OS/2 Workplace shell fix may be main code stream in a later
1593 * release. */
1594 DEBUG(5,("open_file_ntcreate: OS/2 long filenames are not "
1595 "supported.\n"));
1596 if (use_nt_status()) {
1597 return NT_STATUS_OBJECT_NAME_NOT_FOUND;
1598 }
1599 return NT_STATUS_DOS(ERRDOS, ERRcannotopen);
1600 }
1601
1602 switch( create_disposition ) {
1603 /*
1604 * Currently we're using FILE_SUPERSEDE as the same as
1605 * FILE_OVERWRITE_IF but they really are
1606 * different. FILE_SUPERSEDE deletes an existing file
1607 * (requiring delete access) then recreates it.
1608 */
1609 case FILE_SUPERSEDE:
1610 /* If file exists replace/overwrite. If file doesn't
1611 * exist create. */
1612 flags2 |= (O_CREAT | O_TRUNC);
1613 clear_ads = true;
1614 break;
1615
1616 case FILE_OVERWRITE_IF:
1617 /* If file exists replace/overwrite. If file doesn't
1618 * exist create. */
1619 flags2 |= (O_CREAT | O_TRUNC);
1620 clear_ads = true;
1621 break;
1622
1623 case FILE_OPEN:
1624 /* If file exists open. If file doesn't exist error. */
1625 if (!file_existed) {
1626 DEBUG(5,("open_file_ntcreate: FILE_OPEN "
1627 "requested for file %s and file "
1628 "doesn't exist.\n",
1629 smb_fname_str_dbg(smb_fname)));
1630 errno = ENOENT;
1631 return NT_STATUS_OBJECT_NAME_NOT_FOUND;
1632 }
1633 break;
1634
1635 case FILE_OVERWRITE:
1636 /* If file exists overwrite. If file doesn't exist
1637 * error. */
1638 if (!file_existed) {
1639 DEBUG(5,("open_file_ntcreate: FILE_OVERWRITE "
1640 "requested for file %s and file "
1641 "doesn't exist.\n",
1642 smb_fname_str_dbg(smb_fname) ));
1643 errno = ENOENT;
1644 return NT_STATUS_OBJECT_NAME_NOT_FOUND;
1645 }
1646 flags2 |= O_TRUNC;
1647 clear_ads = true;
1648 break;
1649
1650 case FILE_CREATE:
1651 /* If file exists error. If file doesn't exist
1652 * create. */
1653 if (file_existed) {
1654 DEBUG(5,("open_file_ntcreate: FILE_CREATE "
1655 "requested for file %s and file "
1656 "already exists.\n",
1657 smb_fname_str_dbg(smb_fname)));
1658 if (S_ISDIR(smb_fname->st.st_ex_mode)) {
1659 errno = EISDIR;
1660 } else {
1661 errno = EEXIST;
1662 }
1663 return map_nt_error_from_unix(errno);
1664 }
1665 flags2 |= (O_CREAT|O_EXCL);
1666 break;
1667
1668 case FILE_OPEN_IF:
1669 /* If file exists open. If file doesn't exist
1670 * create. */
1671 flags2 |= O_CREAT;
1672 break;
1673
1674 default:
1675 return NT_STATUS_INVALID_PARAMETER;
1676 }
1677
1678 /* We only care about matching attributes on file exists and
1679 * overwrite. */
1680
1681 if (!posix_open && file_existed && ((create_disposition == FILE_OVERWRITE) ||
1682 (create_disposition == FILE_OVERWRITE_IF))) {
1683 if (!open_match_attributes(conn, existing_dos_attributes,
1684 new_dos_attributes,
1685 smb_fname->st.st_ex_mode,
1686 unx_mode, &new_unx_mode)) {
1687 DEBUG(5,("open_file_ntcreate: attributes missmatch "
1688 "for file %s (%x %x) (0%o, 0%o)\n",
1689 smb_fname_str_dbg(smb_fname),
1690 existing_dos_attributes,
1691 new_dos_attributes,
1692 (unsigned int)smb_fname->st.st_ex_mode,
1693 (unsigned int)unx_mode ));
1694 errno = EACCES;
1695 return NT_STATUS_ACCESS_DENIED;
1696 }
1697 }
1698
1699 status = calculate_access_mask(conn, smb_fname, file_existed,
1700 access_mask,
1701 &access_mask);
1702 if (!NT_STATUS_IS_OK(status)) {
1703 DEBUG(10, ("open_file_ntcreate: calculate_access_mask "
1704 "on file %s returned %s\n",
1705 smb_fname_str_dbg(smb_fname), nt_errstr(status)));
1706 return status;
1707 }
1708
1709 open_access_mask = access_mask;
1710
1711 if ((flags2 & O_TRUNC) || (oplock_request & FORCE_OPLOCK_BREAK_TO_NONE)) {
1712 open_access_mask |= FILE_WRITE_DATA; /* This will cause oplock breaks. */
1713 }
1714
1715 DEBUG(10, ("open_file_ntcreate: fname=%s, after mapping "
1716 "access_mask=0x%x\n", smb_fname_str_dbg(smb_fname),
1717 access_mask));
1718
1719 /*
1720 * Note that we ignore the append flag as append does not
1721 * mean the same thing under DOS and Unix.
1722 */
1723
1724 if ((access_mask & (FILE_WRITE_DATA | FILE_APPEND_DATA)) ||
1725 (oplock_request & FORCE_OPLOCK_BREAK_TO_NONE)) {
1726 /* DENY_DOS opens are always underlying read-write on the
1727 file handle, no matter what the requested access mask
1728 says. */
1729 if ((private_flags & NTCREATEX_OPTIONS_PRIVATE_DENY_DOS) ||
1730 access_mask & (FILE_READ_ATTRIBUTES|FILE_READ_DATA|FILE_READ_EA|FILE_EXECUTE)) {
1731 flags = O_RDWR;
1732 } else {
1733 flags = O_WRONLY;
1734 }
1735 } else {
1736 flags = O_RDONLY;
1737 }
1738
1739 /*
1740 * Currently we only look at FILE_WRITE_THROUGH for create options.
1741 */
1742
1743 #if defined(O_SYNC)
1744 if ((create_options & FILE_WRITE_THROUGH) && lp_strict_sync(SNUM(conn))) {
1745 flags2 |= O_SYNC;
1746 }
1747 #endif /* O_SYNC */
1748
1749 if (posix_open && (access_mask & FILE_APPEND_DATA)) {
1750 flags2 |= O_APPEND;
1751 }
1752
1753 if (!posix_open && !CAN_WRITE(conn)) {
1754 /*
1755 * We should really return a permission denied error if either
1756 * O_CREAT or O_TRUNC are set, but for compatibility with
1757 * older versions of Samba we just AND them out.
1758 */
1759 flags2 &= ~(O_CREAT|O_TRUNC);
1760 }
1761
1762 /*
1763 * Ensure we can't write on a read-only share or file.
1764 */
1765
1766 if (flags != O_RDONLY && file_existed &&
1767 (!CAN_WRITE(conn) || IS_DOS_READONLY(existing_dos_attributes))) {
1768 DEBUG(5,("open_file_ntcreate: write access requested for "
1769 "file %s on read only %s\n",
1770 smb_fname_str_dbg(smb_fname),
1771 !CAN_WRITE(conn) ? "share" : "file" ));
1772 errno = EACCES;
1773 return NT_STATUS_ACCESS_DENIED;
1774 }
1775
1776 fsp->file_id = vfs_file_id_from_sbuf(conn, &smb_fname->st);
1777 fsp->share_access = share_access;
1778 fsp->fh->private_options = private_flags;
1779 fsp->access_mask = open_access_mask; /* We change this to the
1780 * requested access_mask after
1781 * the open is done. */
1782 fsp->posix_open = posix_open;
1783
1784 /* Ensure no SAMBA_PRIVATE bits can be set. */
1785 fsp->oplock_type = (oplock_request & ~SAMBA_PRIVATE_OPLOCK_MASK);
1786
1787 if (timeval_is_zero(&request_time)) {
1788 request_time = fsp->open_time;
1789 }
1790
1791 if (file_existed) {
1792 struct timespec old_write_time = smb_fname->st.st_ex_mtime;
1793 id = vfs_file_id_from_sbuf(conn, &smb_fname->st);
1794
1795 lck = get_share_mode_lock(talloc_tos(), id,
1796 conn->connectpath,
1797 smb_fname, &old_write_time);
1798
1799 if (lck == NULL) {
1800 DEBUG(0, ("Could not get share mode lock\n"));
1801 return NT_STATUS_SHARING_VIOLATION;
1802 }
1803
1804 /* First pass - send break only on batch oplocks. */
1805 if ((req != NULL)
1806 && delay_for_oplocks(lck, fsp, req->mid, 1,
1807 oplock_request)) {
1808 schedule_defer_open(lck, request_time, req);
1809 TALLOC_FREE(lck);
1810 return NT_STATUS_SHARING_VIOLATION;
1811 }
1812
1813 /* Use the client requested access mask here, not the one we
1814 * open with. */
1815 status = open_mode_check(conn, lck, access_mask, share_access,
1816 create_options, &file_existed);
1817
1818 if (NT_STATUS_IS_OK(status)) {
1819 /* We might be going to allow this open. Check oplock
1820 * status again. */
1821 /* Second pass - send break for both batch or
1822 * exclusive oplocks. */
1823 if ((req != NULL)
1824 && delay_for_oplocks(lck, fsp, req->mid, 2,
1825 oplock_request)) {
1826 schedule_defer_open(lck, request_time, req);
1827 TALLOC_FREE(lck);
1828 return NT_STATUS_SHARING_VIOLATION;
1829 }
1830 }
1831
1832 if (NT_STATUS_EQUAL(status, NT_STATUS_DELETE_PENDING)) {
1833 /* DELETE_PENDING is not deferred for a second */
1834 TALLOC_FREE(lck);
1835 return status;
1836 }
1837
1838 if (!NT_STATUS_IS_OK(status)) {
1839 uint32 can_access_mask;
1840 bool can_access = True;
1841
1842 SMB_ASSERT(NT_STATUS_EQUAL(status, NT_STATUS_SHARING_VIOLATION));
1843
1844 /* Check if this can be done with the deny_dos and fcb
1845 * calls. */
1846 if (private_flags &
1847 (NTCREATEX_OPTIONS_PRIVATE_DENY_DOS|
1848 NTCREATEX_OPTIONS_PRIVATE_DENY_FCB)) {
1849 if (req == NULL) {
1850 DEBUG(0, ("DOS open without an SMB "
1851 "request!\n"));
1852 TALLOC_FREE(lck);
1853 return NT_STATUS_INTERNAL_ERROR;
1854 }
1855
1856 /* Use the client requested access mask here,
1857 * not the one we open with. */
1858 status = fcb_or_dos_open(req,
1859 conn,
1860 fsp,
1861 smb_fname,
1862 id,
1863 req->smbpid,
1864 req->vuid,
1865 access_mask,
1866 share_access,
1867 create_options);
1868
1869 if (NT_STATUS_IS_OK(status)) {
1870 TALLOC_FREE(lck);
1871 if (pinfo) {
1872 *pinfo = FILE_WAS_OPENED;
1873 }
1874 return NT_STATUS_OK;
1875 }
1876 }
1877
1878 /*
1879 * This next line is a subtlety we need for
1880 * MS-Access. If a file open will fail due to share
1881 * permissions and also for security (access) reasons,
1882 * we need to return the access failed error, not the
1883 * share error. We can't open the file due to kernel
1884 * oplock deadlock (it's possible we failed above on
1885 * the open_mode_check()) so use a userspace check.
1886 */
1887
1888 if (flags & O_RDWR) {
1889 can_access_mask = FILE_READ_DATA|FILE_WRITE_DATA;
1890 } else if (flags & O_WRONLY) {
1891 can_access_mask = FILE_WRITE_DATA;
1892 } else {
1893 can_access_mask = FILE_READ_DATA;
1894 }
1895
1896 if (((can_access_mask & FILE_WRITE_DATA) &&
1897 !CAN_WRITE(conn)) ||
1898 !can_access_file_data(conn, smb_fname,
1899 can_access_mask)) {
1900 can_access = False;
1901 }
1902
1903 /*
1904 * If we're returning a share violation, ensure we
1905 * cope with the braindead 1 second delay.
1906 */
1907
1908 if (!(oplock_request & INTERNAL_OPEN_ONLY) &&
1909 lp_defer_sharing_violations()) {
1910 struct timeval timeout;
1911 struct deferred_open_record state;
1912 int timeout_usecs;
1913
1914 /* this is a hack to speed up torture tests
1915 in 'make test' */
1916 timeout_usecs = lp_parm_int(SNUM(conn),
1917 "smbd","sharedelay",
1918 SHARING_VIOLATION_USEC_WAIT);
1919
1920 /* This is a relative time, added to the absolute
1921 request_time value to get the absolute timeout time.
1922 Note that if this is the second or greater time we enter
1923 this codepath for this particular request mid then
1924 request_time is left as the absolute time of the *first*
1925 time this request mid was processed. This is what allows
1926 the request to eventually time out. */
1927
1928 timeout = timeval_set(0, timeout_usecs);
1929
1930 /* Nothing actually uses state.delayed_for_oplocks
1931 but it's handy to differentiate in debug messages
1932 between a 30 second delay due to oplock break, and
1933 a 1 second delay for share mode conflicts. */
1934
1935 state.delayed_for_oplocks = False;
1936 state.id = id;
1937
1938 if ((req != NULL)
1939 && !request_timed_out(request_time,
1940 timeout)) {
1941 defer_open(lck, request_time, timeout,
1942 req, &state);
1943 }
1944 }
1945
1946 TALLOC_FREE(lck);
1947 if (can_access) {
1948 /*
1949 * We have detected a sharing violation here
1950 * so return the correct error code
1951 */
1952 status = NT_STATUS_SHARING_VIOLATION;
1953 } else {
1954 status = NT_STATUS_ACCESS_DENIED;
1955 }
1956 return status;
1957 }
1958
1959 /*
1960 * We exit this block with the share entry *locked*.....
1961 */
1962 }
1963
1964 SMB_ASSERT(!file_existed || (lck != NULL));
1965
1966 /*
1967 * Ensure we pay attention to default ACLs on directories if required.
1968 */
1969
1970 if ((flags2 & O_CREAT) && lp_inherit_acls(SNUM(conn)) &&
1971 (def_acl = directory_has_default_acl(conn, parent_dir))) {
1972 unx_mode = 0777;
1973 }
1974
1975 DEBUG(4,("calling open_file with flags=0x%X flags2=0x%X mode=0%o, "
1976 "access_mask = 0x%x, open_access_mask = 0x%x\n",
1977 (unsigned int)flags, (unsigned int)flags2,
1978 (unsigned int)unx_mode, (unsigned int)access_mask,
1979 (unsigned int)open_access_mask));
1980
1981 /*
1982 * open_file strips any O_TRUNC flags itself.
1983 */
1984
1985 fsp_open = open_file(fsp, conn, req, parent_dir,
1986 flags|flags2, unx_mode, access_mask,
1987 open_access_mask);
1988
1989 if (!NT_STATUS_IS_OK(fsp_open)) {
1990 if (lck != NULL) {
1991 TALLOC_FREE(lck);
1992 }
1993 return fsp_open;
1994 }
1995
1996 if (!file_existed) {
1997 struct timespec old_write_time = smb_fname->st.st_ex_mtime;
1998 /*
1999 * Deal with the race condition where two smbd's detect the
2000 * file doesn't exist and do the create at the same time. One
2001 * of them will win and set a share mode, the other (ie. this
2002 * one) should check if the requested share mode for this
2003 * create is allowed.
2004 */
2005
2006 /*
2007 * Now the file exists and fsp is successfully opened,
2008 * fsp->dev and fsp->inode are valid and should replace the
2009 * dev=0,inode=0 from a non existent file. Spotted by
2010 * Nadav Danieli <nadavd@exanet.com>. JRA.
2011 */
2012
2013 id = fsp->file_id;
2014
2015 lck = get_share_mode_lock(talloc_tos(), id,
2016 conn->connectpath,
2017 smb_fname, &old_write_time);
2018
2019 if (lck == NULL) {
2020 DEBUG(0, ("open_file_ntcreate: Could not get share "
2021 "mode lock for %s\n",
2022 smb_fname_str_dbg(smb_fname)));
2023 fd_close(fsp);
2024 return NT_STATUS_SHARING_VIOLATION;
2025 }
2026
2027 /* First pass - send break only on batch oplocks. */
2028 if ((req != NULL)
2029 && delay_for_oplocks(lck, fsp, req->mid, 1,
2030 oplock_request)) {
2031 schedule_defer_open(lck, request_time, req);
2032 TALLOC_FREE(lck);
2033 fd_close(fsp);
2034 return NT_STATUS_SHARING_VIOLATION;
2035 }
2036
2037 status = open_mode_check(conn, lck, access_mask, share_access,
2038 create_options, &file_existed);
2039
2040 if (NT_STATUS_IS_OK(status)) {
2041 /* We might be going to allow this open. Check oplock
2042 * status again. */
2043 /* Second pass - send break for both batch or
2044 * exclusive oplocks. */
2045 if ((req != NULL)
2046 && delay_for_oplocks(lck, fsp, req->mid, 2,
2047 oplock_request)) {
2048 schedule_defer_open(lck, request_time, req);
2049 TALLOC_FREE(lck);
2050 fd_close(fsp);
2051 return NT_STATUS_SHARING_VIOLATION;
2052 }
2053 }
2054
2055 if (!NT_STATUS_IS_OK(status)) {
2056 struct deferred_open_record state;
2057
2058 fd_close(fsp);
2059
2060 state.delayed_for_oplocks = False;
2061 state.id = id;
2062
2063 /* Do it all over again immediately. In the second
2064 * round we will find that the file existed and handle
2065 * the DELETE_PENDING and FCB cases correctly. No need
2066 * to duplicate the code here. Essentially this is a
2067 * "goto top of this function", but don't tell
2068 * anybody... */
2069
2070 if (req != NULL) {
2071 defer_open(lck, request_time, timeval_zero(),
2072 req, &state);
2073 }
2074 TALLOC_FREE(lck);
2075 return status;
2076 }
2077
2078 /*
2079 * We exit this block with the share entry *locked*.....
2080 */
2081
2082 }
2083
2084 SMB_ASSERT(lck != NULL);
2085
2086 /* Delete streams if create_disposition requires it */
2087 if (file_existed && clear_ads &&
2088 !is_ntfs_stream_smb_fname(smb_fname)) {
2089 status = delete_all_streams(conn, smb_fname->base_name);
2090 if (!NT_STATUS_IS_OK(status)) {
2091 TALLOC_FREE(lck);
2092 fd_close(fsp);
2093 return status;
2094 }
2095 }
2096
2097 /* note that we ignore failure for the following. It is
2098 basically a hack for NFS, and NFS will never set one of
2099 these only read them. Nobody but Samba can ever set a deny
2100 mode and we have already checked our more authoritative
2101 locking database for permission to set this deny mode. If
2102 the kernel refuses the operations then the kernel is wrong.
2103 note that GPFS supports it as well - jmcd */
2104
2105 if (fsp->fh->fd != -1) {
2106 int ret_flock;
2107 ret_flock = SMB_VFS_KERNEL_FLOCK(fsp, share_access, access_mask);
2108 if(ret_flock == -1 ){
2109
2110 TALLOC_FREE(lck);
2111 fd_close(fsp);
2112
2113 return NT_STATUS_SHARING_VIOLATION;
2114 }
2115 }
2116
2117 /*
2118 * At this point onwards, we can guarentee that the share entry
2119 * is locked, whether we created the file or not, and that the
2120 * deny mode is compatible with all current opens.
2121 */
2122
2123 /*
2124 * If requested, truncate the file.
2125 */
2126
2127 if (flags2&O_TRUNC) {
2128 /*
2129 * We are modifing the file after open - update the stat
2130 * struct..
2131 */
2132 if ((SMB_VFS_FTRUNCATE(fsp, 0) == -1) ||
2133 (SMB_VFS_FSTAT(fsp, &smb_fname->st)==-1)) {
2134 status = map_nt_error_from_unix(errno);
2135 TALLOC_FREE(lck);
2136 fd_close(fsp);
2137 return status;
2138 }
2139 }
2140
2141 /*
2142 * According to Samba4, SEC_FILE_READ_ATTRIBUTE is always granted,
2143 */
2144 fsp->access_mask = access_mask | FILE_READ_ATTRIBUTES;
2145
2146 if (file_existed) {
2147 /* stat opens on existing files don't get oplocks. */
2148 if (is_stat_open(open_access_mask)) {
2149 fsp->oplock_type = NO_OPLOCK;
2150 }
2151
2152 if (!(flags2 & O_TRUNC)) {
2153 info = FILE_WAS_OPENED;
2154 } else {
2155 info = FILE_WAS_OVERWRITTEN;
2156 }
2157 } else {
2158 info = FILE_WAS_CREATED;
2159 }
2160
2161 if (pinfo) {
2162 *pinfo = info;
2163 }
2164
2165 /*
2166 * Setup the oplock info in both the shared memory and
2167 * file structs.
2168 */
2169
2170 if (!set_file_oplock(fsp, fsp->oplock_type)) {
2171 /* Could not get the kernel oplock */
2172 fsp->oplock_type = NO_OPLOCK;
2173 }
2174
2175 if (info == FILE_WAS_OVERWRITTEN || info == FILE_WAS_CREATED || info == FILE_WAS_SUPERSEDED) {
2176 new_file_created = True;
2177 }
2178
2179 set_share_mode(lck, fsp, get_current_uid(conn), 0,
2180 fsp->oplock_type);
2181
2182 /* Handle strange delete on close create semantics. */
2183 if (create_options & FILE_DELETE_ON_CLOSE) {
2184
2185 status = can_set_delete_on_close(fsp, new_dos_attributes);
2186
2187 if (!NT_STATUS_IS_OK(status)) {
2188 /* Remember to delete the mode we just added. */
2189 del_share_mode(lck, fsp);
2190 TALLOC_FREE(lck);
2191 fd_close(fsp);
2192 return status;
2193 }
2194 /* Note that here we set the *inital* delete on close flag,
2195 not the regular one. The magic gets handled in close. */
2196 fsp->initial_delete_on_close = True;
2197 }
2198
2199 if (new_file_created) {
2200 /* Files should be initially set as archive */
2201 if (lp_map_archive(SNUM(conn)) ||
2202 lp_store_dos_attributes(SNUM(conn))) {
2203 if (!posix_open) {
2204 if (file_set_dosmode(conn, smb_fname,
2205 new_dos_attributes | aARCH,
2206 parent_dir, true) == 0) {
2207 unx_mode = smb_fname->st.st_ex_mode;
2208 }
2209 }
2210 }
2211 }
2212
2213 /*
2214 * Take care of inherited ACLs on created files - if default ACL not
2215 * selected.
2216 */
2217
2218 if (!posix_open && !file_existed && !def_acl) {
2219
2220 int saved_errno = errno; /* We might get ENOSYS in the next
2221 * call.. */
2222
2223 if (SMB_VFS_FCHMOD_ACL(fsp, unx_mode) == -1 &&
2224 errno == ENOSYS) {
2225 errno = saved_errno; /* Ignore ENOSYS */
2226 }
2227
2228 } else if (new_unx_mode) {
2229
2230 int ret = -1;
2231
2232 /* Attributes need changing. File already existed. */
2233
2234 {
2235 int saved_errno = errno; /* We might get ENOSYS in the
2236 * next call.. */
2237 ret = SMB_VFS_FCHMOD_ACL(fsp, new_unx_mode);
2238
2239 if (ret == -1 && errno == ENOSYS) {
2240 errno = saved_errno; /* Ignore ENOSYS */
2241 } else {
2242 DEBUG(5, ("open_file_ntcreate: reset "
2243 "attributes of file %s to 0%o\n",
2244 smb_fname_str_dbg(smb_fname),
2245 (unsigned int)new_unx_mode));
2246 ret = 0; /* Don't do the fchmod below. */
2247 }
2248 }
2249
2250 if ((ret == -1) &&
2251 (SMB_VFS_FCHMOD(fsp, new_unx_mode) == -1))
2252 DEBUG(5, ("open_file_ntcreate: failed to reset "
2253 "attributes of file %s to 0%o\n",
2254 smb_fname_str_dbg(smb_fname),
2255 (unsigned int)new_unx_mode));
2256 }
2257
2258 /* If this is a successful open, we must remove any deferred open
2259 * records. */
2260 if (req != NULL) {
2261 del_deferred_open_entry(lck, req->mid);
2262 }
2263 TALLOC_FREE(lck);
2264
2265 return NT_STATUS_OK;
2266 }
2267
2268
2269 /****************************************************************************
2270 Open a file for for write to ensure that we can fchmod it.
2271 ****************************************************************************/
2272
2273 NTSTATUS open_file_fchmod(struct smb_request *req, connection_struct *conn,
2274 struct smb_filename *smb_fname,
2275 files_struct **result)
2276 {
2277 files_struct *fsp = NULL;
2278 NTSTATUS status;
2279
2280 if (!VALID_STAT(smb_fname->st)) {
2281 return NT_STATUS_INVALID_PARAMETER;
2282 }
2283
2284 status = file_new(req, conn, &fsp);
2285 if(!NT_STATUS_IS_OK(status)) {
2286 return status;
2287 }
2288
2289 status = SMB_VFS_CREATE_FILE(
2290 conn, /* conn */
2291 NULL, /* req */
2292 0, /* root_dir_fid */
2293 smb_fname, /* fname */
2294 FILE_WRITE_DATA, /* access_mask */
2295 (FILE_SHARE_READ | FILE_SHARE_WRITE | /* share_access */
2296 FILE_SHARE_DELETE),
2297 FILE_OPEN, /* create_disposition*/
2298 0, /* create_options */
2299 0, /* file_attributes */
2300 0, /* oplock_request */
2301 0, /* allocation_size */
2302 0, /* private_flags */
2303 NULL, /* sd */
2304 NULL, /* ea_list */
2305 &fsp, /* result */
2306 NULL); /* pinfo */
2307
2308 /*
2309 * This is not a user visible file open.
2310 * Don't set a share mode.
2311 */
2312
2313 if (!NT_STATUS_IS_OK(status)) {
2314 file_free(req, fsp);
2315 return status;
2316 }
2317
2318 *result = fsp;
2319 return NT_STATUS_OK;
2320 }
2321
2322 /****************************************************************************
2323 Close the fchmod file fd - ensure no locks are lost.
2324 ****************************************************************************/
2325
2326 NTSTATUS close_file_fchmod(struct smb_request *req, files_struct *fsp)
2327 {
2328 NTSTATUS status = fd_close(fsp);
2329 file_free(req, fsp);
2330 return status;
2331 }
2332
2333 static NTSTATUS mkdir_internal(connection_struct *conn,
2334 struct smb_filename *smb_dname,
2335 uint32 file_attributes)
2336 {
2337 mode_t mode;
2338 char *parent_dir;
2339 NTSTATUS status;
2340 bool posix_open = false;
2341
2342 if(!CAN_WRITE(conn)) {
2343 DEBUG(5,("mkdir_internal: failing create on read-only share "
2344 "%s\n", lp_servicename(SNUM(conn))));
2345 return NT_STATUS_ACCESS_DENIED;
2346 }
2347
2348 status = check_name(conn, smb_dname->base_name);
2349 if (!NT_STATUS_IS_OK(status)) {
2350 return status;
2351 }
2352
2353 if (!parent_dirname(talloc_tos(), smb_dname->base_name, &parent_dir,
2354 NULL)) {
2355 return NT_STATUS_NO_MEMORY;
2356 }
2357
2358 if (file_attributes & FILE_FLAG_POSIX_SEMANTICS) {
2359 posix_open = true;
2360 mode = (mode_t)(file_attributes & ~FILE_FLAG_POSIX_SEMANTICS);
2361 } else {
2362 mode = unix_mode(conn, aDIR, smb_dname, parent_dir);
2363 }
2364
2365 if (SMB_VFS_MKDIR(conn, smb_dname->base_name, mode) != 0) {
2366 return map_nt_error_from_unix(errno);
2367 }
2368
2369 /* Ensure we're checking for a symlink here.... */
2370 /* We don't want to get caught by a symlink racer. */
2371
2372 if (SMB_VFS_LSTAT(conn, smb_dname) == -1) {
2373 DEBUG(2, ("Could not stat directory '%s' just created: %s\n",
2374 smb_fname_str_dbg(smb_dname), strerror(errno)));
2375 return map_nt_error_from_unix(errno);
2376 }
2377
2378 if (!S_ISDIR(smb_dname->st.st_ex_mode)) {
2379 DEBUG(0, ("Directory just '%s' created is not a directory\n",
2380 smb_fname_str_dbg(smb_dname)));
2381 return NT_STATUS_ACCESS_DENIED;
2382 }
2383
2384 if (lp_store_dos_attributes(SNUM(conn))) {
2385 if (!posix_open) {
2386 file_set_dosmode(conn, smb_dname,
2387 file_attributes | aDIR,
2388 parent_dir, true);
2389 }
2390 }
2391
2392 if (lp_inherit_perms(SNUM(conn))) {
2393 inherit_access_posix_acl(conn, parent_dir,
2394 smb_dname->base_name, mode);
2395 }
2396
2397 if (!posix_open) {
2398 /*
2399 * Check if high bits should have been set,
2400 * then (if bits are missing): add them.
2401 * Consider bits automagically set by UNIX, i.e. SGID bit from parent
2402 * dir.
2403 */
2404 if ((mode & ~(S_IRWXU|S_IRWXG|S_IRWXO)) &&
2405 (mode & ~smb_dname->st.st_ex_mode)) {
2406 SMB_VFS_CHMOD(conn, smb_dname->base_name,
2407 (smb_dname->st.st_ex_mode |
2408 (mode & ~smb_dname->st.st_ex_mode)));
2409 }
2410 }
2411
2412 /* Change the owner if required. */
2413 if (lp_inherit_owner(SNUM(conn))) {
2414 change_dir_owner_to_parent(conn, parent_dir,
2415 smb_dname->base_name,
2416 &smb_dname->st);
2417 }
2418
2419 notify_fname(conn, NOTIFY_ACTION_ADDED, FILE_NOTIFY_CHANGE_DIR_NAME,
2420 smb_dname->base_name);
2421
2422 return NT_STATUS_OK;
2423 }
2424
2425 /****************************************************************************
2426 Open a directory from an NT SMB call.
2427 ****************************************************************************/
2428
2429 static NTSTATUS open_directory(connection_struct *conn,
2430 struct smb_request *req,
2431 struct smb_filename *smb_dname,
2432 uint32 access_mask,
2433 uint32 share_access,
2434 uint32 create_disposition,
2435 uint32 create_options,
2436 uint32 file_attributes,
2437 int *pinfo,
2438 files_struct **result)
2439 {
2440 files_struct *fsp = NULL;
2441 bool dir_existed = VALID_STAT(smb_dname->st) ? True : False;
2442 struct share_mode_lock *lck = NULL;
2443 NTSTATUS status;
2444 struct timespec mtimespec;
2445 int info = 0;
2446
2447 SMB_ASSERT(!is_ntfs_stream_smb_fname(smb_dname));
2448
2449 DEBUG(5,("open_directory: opening directory %s, access_mask = 0x%x, "
2450 "share_access = 0x%x create_options = 0x%x, "
2451 "create_disposition = 0x%x, file_attributes = 0x%x\n",
2452 smb_fname_str_dbg(smb_dname),
2453 (unsigned int)access_mask,
2454 (unsigned int)share_access,
2455 (unsigned int)create_options,
2456 (unsigned int)create_disposition,
2457 (unsigned int)file_attributes));
2458
2459 if (!(file_attributes & FILE_FLAG_POSIX_SEMANTICS) &&
2460 (conn->fs_capabilities & FILE_NAMED_STREAMS) &&
2461 is_ntfs_stream_smb_fname(smb_dname)) {
2462 DEBUG(2, ("open_directory: %s is a stream name!\n",
2463 smb_fname_str_dbg(smb_dname)));
2464 return NT_STATUS_NOT_A_DIRECTORY;
2465 }
2466
2467 status = calculate_access_mask(conn, smb_dname, dir_existed,
2468 access_mask, &access_mask);
2469 if (!NT_STATUS_IS_OK(status)) {
2470 DEBUG(10, ("open_directory: calculate_access_mask "
2471 "on file %s returned %s\n",
2472 smb_fname_str_dbg(smb_dname),
2473 nt_errstr(status)));
2474 return status;
2475 }
2476
2477 /* We need to support SeSecurityPrivilege for this. */
2478 if (access_mask & SEC_FLAG_SYSTEM_SECURITY) {
2479 DEBUG(10, ("open_directory: open on %s "
2480 "failed - SEC_FLAG_SYSTEM_SECURITY denied.\n",
2481 smb_fname_str_dbg(smb_dname)));
2482 return NT_STATUS_PRIVILEGE_NOT_HELD;
2483 }
2484
2485 switch( create_disposition ) {
2486 case FILE_OPEN:
2487
2488 info = FILE_WAS_OPENED;
2489
2490 /*
2491 * We want to follow symlinks here.
2492 */
2493
2494 if (SMB_VFS_STAT(conn, smb_dname) != 0) {
2495 return map_nt_error_from_unix(errno);
2496 }
2497
2498 break;
2499
2500 case FILE_CREATE:
2501
2502 /* If directory exists error. If directory doesn't
2503 * exist create. */
2504
2505 status = mkdir_internal(conn, smb_dname,
2506 file_attributes);
2507
2508 if (!NT_STATUS_IS_OK(status)) {
2509 DEBUG(2, ("open_directory: unable to create "
2510 "%s. Error was %s\n",
2511 smb_fname_str_dbg(smb_dname),
2512 nt_errstr(status)));
2513 return status;
2514 }
2515
2516 info = FILE_WAS_CREATED;
2517 break;
2518
2519 case FILE_OPEN_IF:
2520 /*
2521 * If directory exists open. If directory doesn't
2522 * exist create.
2523 */
2524
2525 status = mkdir_internal(conn, smb_dname,
2526 file_attributes);
2527
2528 if (NT_STATUS_IS_OK(status)) {
2529 info = FILE_WAS_CREATED;
2530 }
2531
2532 if (NT_STATUS_EQUAL(status,
2533 NT_STATUS_OBJECT_NAME_COLLISION)) {
2534 info = FILE_WAS_OPENED;
2535 status = NT_STATUS_OK;
2536 }
2537
2538 break;
2539
2540 case FILE_SUPERSEDE:
2541 case FILE_OVERWRITE:
2542 case FILE_OVERWRITE_IF:
2543 default:
2544 DEBUG(5,("open_directory: invalid create_disposition "
2545 "0x%x for directory %s\n",
2546 (unsigned int)create_disposition,
2547 smb_fname_str_dbg(smb_dname)));
2548 return NT_STATUS_INVALID_PARAMETER;
2549 }
2550
2551 if(!S_ISDIR(smb_dname->st.st_ex_mode)) {
2552 DEBUG(5,("open_directory: %s is not a directory !\n",
2553 smb_fname_str_dbg(smb_dname)));
2554 return NT_STATUS_NOT_A_DIRECTORY;
2555 }
2556
2557 if (info == FILE_WAS_OPENED) {
2558 uint32_t access_granted = 0;
2559 status = smbd_check_open_rights(conn, smb_dname, access_mask,
2560 &access_granted);
2561
2562 /* Were we trying to do a directory open
2563 * for delete and didn't get DELETE
2564 * access (only) ? Check if the
2565 * directory allows DELETE_CHILD.
2566 * See here:
2567 * http://blogs.msdn.com/oldnewthing/archive/2004/06/04/148426.aspx
2568 * for details. */
2569
2570 if ((NT_STATUS_EQUAL(status, NT_STATUS_ACCESS_DENIED) &&
2571 (access_mask & DELETE_ACCESS) &&
2572 (access_granted == DELETE_ACCESS) &&
2573 can_delete_file_in_directory(conn, smb_dname))) {
2574 DEBUG(10,("open_directory: overrode ACCESS_DENIED "
2575 "on directory %s\n",
2576 smb_fname_str_dbg(smb_dname)));
2577 status = NT_STATUS_OK;
2578 }
2579
2580 if (!NT_STATUS_IS_OK(status)) {
2581 DEBUG(10, ("open_directory: smbd_check_open_rights on "
2582 "file %s failed with %s\n",
2583 smb_fname_str_dbg(smb_dname),
2584 nt_errstr(status)));
2585 return status;
2586 }
2587 }
2588
2589 status = file_new(req, conn, &fsp);
2590 if(!NT_STATUS_IS_OK(status)) {
2591 return status;
2592 }
2593
2594 /*
2595 * Setup the files_struct for it.
2596 */
2597
2598 fsp->mode = smb_dname->st.st_ex_mode;
2599 fsp->file_id = vfs_file_id_from_sbuf(conn, &smb_dname->st);
2600 fsp->vuid = req ? req->vuid : UID_FIELD_INVALID;
2601 fsp->file_pid = req ? req->smbpid : 0;
2602 fsp->can_lock = False;
2603 fsp->can_read = False;
2604 fsp->can_write = False;
2605
2606 fsp->share_access = share_access;
2607 fsp->fh->private_options = 0;
2608 /*
2609 * According to Samba4, SEC_FILE_READ_ATTRIBUTE is always granted,
2610 */
2611 fsp->access_mask = access_mask | FILE_READ_ATTRIBUTES;
2612 fsp->print_file = False;
2613 fsp->modified = False;
2614 fsp->oplock_type = NO_OPLOCK;
2615 fsp->sent_oplock_break = NO_BREAK_SENT;
2616 fsp->is_directory = True;
2617 fsp->posix_open = (file_attributes & FILE_FLAG_POSIX_SEMANTICS) ? True : False;
2618 status = fsp_set_smb_fname(fsp, smb_dname);
2619 if (!NT_STATUS_IS_OK(status)) {
2620 return status;
2621 }
2622
2623 mtimespec = smb_dname->st.st_ex_mtime;
2624
2625 lck = get_share_mode_lock(talloc_tos(), fsp->file_id,
2626 conn->connectpath, smb_dname, &mtimespec);
2627
2628 if (lck == NULL) {
2629 DEBUG(0, ("open_directory: Could not get share mode lock for "
2630 "%s\n", smb_fname_str_dbg(smb_dname)));
2631 file_free(req, fsp);
2632 return NT_STATUS_SHARING_VIOLATION;
2633 }
2634
2635 status = open_mode_check(conn, lck, access_mask, share_access,
2636 create_options, &dir_existed);
2637
2638 if (!NT_STATUS_IS_OK(status)) {
2639 TALLOC_FREE(lck);
2640 file_free(req, fsp);
2641 return status;
2642 }
2643
2644 set_share_mode(lck, fsp, get_current_uid(conn), 0, NO_OPLOCK);
2645
2646 /* For directories the delete on close bit at open time seems
2647 always to be honored on close... See test 19 in Samba4 BASE-DELETE. */
2648 if (create_options & FILE_DELETE_ON_CLOSE) {
2649 status = can_set_delete_on_close(fsp, 0);
2650 if (!NT_STATUS_IS_OK(status) && !NT_STATUS_EQUAL(status, NT_STATUS_DIRECTORY_NOT_EMPTY)) {
2651 TALLOC_FREE(lck);
2652 file_free(req, fsp);
2653 return status;
2654 }
2655
2656 if (NT_STATUS_IS_OK(status)) {
2657 /* Note that here we set the *inital* delete on close flag,
2658 not the regular one. The magic gets handled in close. */
2659 fsp->initial_delete_on_close = True;
2660 }
2661 }
2662
2663 TALLOC_FREE(lck);
2664
2665 if (pinfo) {
2666 *pinfo = info;
2667 }
2668
2669 *result = fsp;
2670 return NT_STATUS_OK;
2671 }
2672
2673 NTSTATUS create_directory(connection_struct *conn, struct smb_request *req,
2674 struct smb_filename *smb_dname)
2675 {
2676 NTSTATUS status;
2677 files_struct *fsp;
2678
2679 status = SMB_VFS_CREATE_FILE(
2680 conn, /* conn */
2681 req, /* req */
2682 0, /* root_dir_fid */
2683 smb_dname, /* fname */
2684 FILE_READ_ATTRIBUTES, /* access_mask */
2685 FILE_SHARE_NONE, /* share_access */
2686 FILE_CREATE, /* create_disposition*/
2687 FILE_DIRECTORY_FILE, /* create_options */
2688 FILE_ATTRIBUTE_DIRECTORY, /* file_attributes */
2689 0, /* oplock_request */
2690 0, /* allocation_size */
2691 0, /* private_flags */
2692 NULL, /* sd */
2693 NULL, /* ea_list */
2694 &fsp, /* result */
2695 NULL); /* pinfo */
2696
2697 if (NT_STATUS_IS_OK(status)) {
2698 close_file(req, fsp, NORMAL_CLOSE);
2699 }
2700
2701 return status;
2702 }
2703
2704 /****************************************************************************
2705 Receive notification that one of our open files has been renamed by another
2706 smbd process.
2707 ****************************************************************************/
2708
2709 void msg_file_was_renamed(struct messaging_context *msg,
2710 void *private_data,
2711 uint32_t msg_type,
2712 struct server_id server_id,
2713 DATA_BLOB *data)
2714 {
2715 files_struct *fsp;
2716 char *frm = (char *)data->data;
2717 struct file_id id;
2718 const char *sharepath;
2719 const char *base_name;
2720 const char *stream_name;
2721 struct smb_filename *smb_fname = NULL;
2722 size_t sp_len, bn_len;
2723 NTSTATUS status;
2724
2725 if (data->data == NULL
2726 || data->length < MSG_FILE_RENAMED_MIN_SIZE + 2) {
2727 DEBUG(0, ("msg_file_was_renamed: Got invalid msg len %d\n",
2728 (int)data->length));
2729 return;
2730 }
2731
2732 /* Unpack the message. */
2733 pull_file_id_24(frm, &id);
2734 sharepath = &frm[24];
2735 sp_len = strlen(sharepath);
2736 base_name = sharepath + sp_len + 1;
2737 bn_len = strlen(base_name);
2738 stream_name = sharepath + sp_len + 1 + bn_len + 1;
2739
2740 /* stream_name must always be NULL if there is no stream. */
2741 if (stream_name[0] == '\0') {
2742 stream_name = NULL;
2743 }
2744
2745 status = create_synthetic_smb_fname(talloc_tos(), base_name,
2746 stream_name, NULL, &smb_fname);
2747 if (!NT_STATUS_IS_OK(status)) {
2748 return;
2749 }
2750
2751 DEBUG(10,("msg_file_was_renamed: Got rename message for sharepath %s, new name %s, "
2752 "file_id %s\n",
2753 sharepath, smb_fname_str_dbg(smb_fname),
2754 file_id_string_tos(&id)));
2755
2756 for(fsp = file_find_di_first(id); fsp; fsp = file_find_di_next(fsp)) {
2757 if (memcmp(fsp->conn->connectpath, sharepath, sp_len) == 0) {
2758
2759 DEBUG(10,("msg_file_was_renamed: renaming file fnum %d from %s -> %s\n",
2760 fsp->fnum, fsp_str_dbg(fsp),
2761 smb_fname_str_dbg(smb_fname)));
2762 status = fsp_set_smb_fname(fsp, smb_fname);
2763 if (!NT_STATUS_IS_OK(status)) {
2764 goto out;
2765 }
2766 } else {
2767 /* TODO. JRA. */
2768 /* Now we have the complete path we can work out if this is
2769 actually within this share and adjust newname accordingly. */
2770 DEBUG(10,("msg_file_was_renamed: share mismatch (sharepath %s "
2771 "not sharepath %s) "
2772 "fnum %d from %s -> %s\n",
2773 fsp->conn->connectpath,
2774 sharepath,
2775 fsp->fnum,
2776 fsp_str_dbg(fsp),
2777 smb_fname_str_dbg(smb_fname)));
2778 }
2779 }
2780 out:
2781 TALLOC_FREE(smb_fname);
2782 return;
2783 }
2784
2785 /*
2786 * If a main file is opened for delete, all streams need to be checked for
2787 * !FILE_SHARE_DELETE. Do this by opening with DELETE_ACCESS.
2788 * If that works, delete them all by setting the delete on close and close.
2789 */
2790
2791 NTSTATUS open_streams_for_delete(connection_struct *conn,
2792 const char *fname)
2793 {
2794 struct stream_struct *stream_info;
2795 files_struct **streams;
2796 int i;
2797 unsigned int num_streams;
2798 TALLOC_CTX *frame = talloc_stackframe();
2799 NTSTATUS status;
2800
2801 status = SMB_VFS_STREAMINFO(conn, NULL, fname, talloc_tos(),
2802 &num_streams, &stream_info);
2803
2804 if (NT_STATUS_EQUAL(status, NT_STATUS_NOT_IMPLEMENTED)
2805 || NT_STATUS_EQUAL(status, NT_STATUS_OBJECT_NAME_NOT_FOUND)) {
2806 DEBUG(10, ("no streams around\n"));
2807 TALLOC_FREE(frame);
2808 return NT_STATUS_OK;
2809 }
2810
2811 if (!NT_STATUS_IS_OK(status)) {
2812 DEBUG(10, ("SMB_VFS_STREAMINFO failed: %s\n",
2813 nt_errstr(status)));
2814 goto fail;
2815 }
2816
2817 DEBUG(10, ("open_streams_for_delete found %d streams\n",
2818 num_streams));
2819
2820 if (num_streams == 0) {
2821 TALLOC_FREE(frame);
2822 return NT_STATUS_OK;
2823 }
2824
2825 streams = TALLOC_ARRAY(talloc_tos(), files_struct *, num_streams);
2826 if (streams == NULL) {
2827 DEBUG(0, ("talloc failed\n"));
2828 status = NT_STATUS_NO_MEMORY;
2829 goto fail;
2830 }
2831
2832 for (i=0; i<num_streams; i++) {
2833 struct smb_filename *smb_fname = NULL;
2834
2835 if (strequal(stream_info[i].name, "::$DATA")) {
2836 streams[i] = NULL;
2837 continue;
2838 }
2839
2840 status = create_synthetic_smb_fname(talloc_tos(), fname,
2841 stream_info[i].name,
2842 NULL, &smb_fname);
2843 if (!NT_STATUS_IS_OK(status)) {
2844 goto fail;
2845 }
2846
2847 if (SMB_VFS_STAT(conn, smb_fname) == -1) {
2848 DEBUG(10, ("Unable to stat stream: %s\n",
2849 smb_fname_str_dbg(smb_fname)));
2850 }
2851
2852 status = SMB_VFS_CREATE_FILE(
2853 conn, /* conn */
2854 NULL, /* req */
2855 0, /* root_dir_fid */
2856 smb_fname, /* fname */
2857 DELETE_ACCESS, /* access_mask */
2858 (FILE_SHARE_READ | /* share_access */
2859 FILE_SHARE_WRITE | FILE_SHARE_DELETE),
2860 FILE_OPEN, /* create_disposition*/
2861 0, /* create_options */
2862 FILE_ATTRIBUTE_NORMAL, /* file_attributes */
2863 0, /* oplock_request */
2864 0, /* allocation_size */
2865 NTCREATEX_OPTIONS_PRIVATE_STREAM_DELETE, /* private_flags */
2866 NULL, /* sd */
2867 NULL, /* ea_list */
2868 &streams[i], /* result */
2869 NULL); /* pinfo */
2870
2871 if (!NT_STATUS_IS_OK(status)) {
2872 DEBUG(10, ("Could not open stream %s: %s\n",
2873 smb_fname_str_dbg(smb_fname),
2874 nt_errstr(status)));
2875
2876 TALLOC_FREE(smb_fname);
2877 break;
2878 }
2879 TALLOC_FREE(smb_fname);
2880 }
2881
2882 /*
2883 * don't touch the variable "status" beyond this point :-)
2884 */
2885
2886 for (i -= 1 ; i >= 0; i--) {
2887 if (streams[i] == NULL) {
2888 continue;
2889 }
2890
2891 DEBUG(10, ("Closing stream # %d, %s\n", i,
2892 fsp_str_dbg(streams[i])));
2893 close_file(NULL, streams[i], NORMAL_CLOSE);
2894 }
2895
2896 fail:
2897 TALLOC_FREE(frame);
2898 return status;
2899 }
2900
2901 /*
2902 * Wrapper around open_file_ntcreate and open_directory
2903 */
2904
2905 static NTSTATUS create_file_unixpath(connection_struct *conn,
2906 struct smb_request *req,
2907 struct smb_filename *smb_fname,
2908 uint32_t access_mask,
2909 uint32_t share_access,
2910 uint32_t create_disposition,
2911 uint32_t create_options,
2912 uint32_t file_attributes,
2913 uint32_t oplock_request,
2914 uint64_t allocation_size,
2915 uint32_t private_flags,
2916 struct security_descriptor *sd,
2917 struct ea_list *ea_list,
2918
2919 files_struct **result,
2920 int *pinfo)
2921 {
2922 int info = FILE_WAS_OPENED;
2923 files_struct *base_fsp = NULL;
2924 files_struct *fsp = NULL;
2925 NTSTATUS status;
2926
2927 DEBUG(10,("create_file_unixpath: access_mask = 0x%x "
2928 "file_attributes = 0x%x, share_access = 0x%x, "
2929 "create_disposition = 0x%x create_options = 0x%x "
2930 "oplock_request = 0x%x private_flags = 0x%x "
2931 "ea_list = 0x%p, sd = 0x%p, "
2932 "fname = %s\n",
2933 (unsigned int)access_mask,
2934 (unsigned int)file_attributes,
2935 (unsigned int)share_access,
2936 (unsigned int)create_disposition,
2937 (unsigned int)create_options,
2938 (unsigned int)oplock_request,
2939 (unsigned int)private_flags,
2940 ea_list, sd, smb_fname_str_dbg(smb_fname)));
2941
2942 if (create_options & FILE_OPEN_BY_FILE_ID) {
2943 status = NT_STATUS_NOT_SUPPORTED;
2944 goto fail;
2945 }
2946
2947 if (create_options & NTCREATEX_OPTIONS_INVALID_PARAM_MASK) {
2948 status = NT_STATUS_INVALID_PARAMETER;
2949 goto fail;
2950 }
2951
2952 if (req == NULL) {
2953 oplock_request |= INTERNAL_OPEN_ONLY;
2954 }
2955
2956 if ((conn->fs_capabilities & FILE_NAMED_STREAMS)
2957 && (access_mask & DELETE_ACCESS)
2958 && !is_ntfs_stream_smb_fname(smb_fname)) {
2959 /*
2960 * We can't open a file with DELETE access if any of the
2961 * streams is open without FILE_SHARE_DELETE
2962 */
2963 status = open_streams_for_delete(conn, smb_fname->base_name);
2964
2965 if (!NT_STATUS_IS_OK(status)) {
2966 goto fail;
2967 }
2968 }
2969
2970 /* This is the correct thing to do (check every time) but can_delete
2971 * is expensive (it may have to read the parent directory
2972 * permissions). So for now we're not doing it unless we have a strong
2973 * hint the client is really going to delete this file. If the client
2974 * is forcing FILE_CREATE let the filesystem take care of the
2975 * permissions. */
2976
2977 /* Setting FILE_SHARE_DELETE is the hint. */
2978
2979 if (lp_acl_check_permissions(SNUM(conn))
2980 && (create_disposition != FILE_CREATE)
2981 && (share_access & FILE_SHARE_DELETE)
2982 && (access_mask & DELETE_ACCESS)
2983 && (!(can_delete_file_in_directory(conn, smb_fname) ||
2984 can_access_file_acl(conn, smb_fname, DELETE_ACCESS)))) {
2985 status = NT_STATUS_ACCESS_DENIED;
2986 DEBUG(10,("create_file_unixpath: open file %s "
2987 "for delete ACCESS_DENIED\n",
2988 smb_fname_str_dbg(smb_fname)));
2989 goto fail;
2990 }
2991
2992 #if 0
2993 /* We need to support SeSecurityPrivilege for this. */
2994 if ((access_mask & SEC_FLAG_SYSTEM_SECURITY) &&
2995 !user_has_privileges(current_user.nt_user_token,
2996 &se_security)) {
2997 status = NT_STATUS_PRIVILEGE_NOT_HELD;
2998 goto fail;
2999 }
3000 #else
3001 /* We need to support SeSecurityPrivilege for this. */
3002 if (access_mask & SEC_FLAG_SYSTEM_SECURITY) {
3003 status = NT_STATUS_PRIVILEGE_NOT_HELD;
3004 goto fail;
3005 }
3006 /* Don't allow a SACL set from an NTtrans create until we
3007 * support SeSecurityPrivilege. */
3008 if (!VALID_STAT(smb_fname->st) &&
3009 lp_nt_acl_support(SNUM(conn)) &&
3010 sd && (sd->sacl != NULL)) {
3011 status = NT_STATUS_PRIVILEGE_NOT_HELD;
3012 goto fail;
3013 }
3014 #endif
3015
3016 if ((conn->fs_capabilities & FILE_NAMED_STREAMS)
3017 && is_ntfs_stream_smb_fname(smb_fname)
3018 && (!(private_flags & NTCREATEX_OPTIONS_PRIVATE_STREAM_DELETE))) {
3019 uint32 base_create_disposition;
3020 struct smb_filename *smb_fname_base = NULL;
3021
3022 if (create_options & FILE_DIRECTORY_FILE) {
3023 status = NT_STATUS_NOT_A_DIRECTORY;
3024 goto fail;
3025 }
3026
3027 switch (create_disposition) {
3028 case FILE_OPEN:
3029 base_create_disposition = FILE_OPEN;
3030 break;
3031 default:
3032 base_create_disposition = FILE_OPEN_IF;
3033 break;
3034 }
3035
3036 /* Create an smb_filename with stream_name == NULL. */
3037 status = create_synthetic_smb_fname(talloc_tos(),
3038 smb_fname->base_name,
3039 NULL, NULL,
3040 &smb_fname_base);
3041 if (!NT_STATUS_IS_OK(status)) {
3042 goto fail;
3043 }
3044
3045 if (SMB_VFS_STAT(conn, smb_fname_base) == -1) {
3046 DEBUG(10, ("Unable to stat stream: %s\n",
3047 smb_fname_str_dbg(smb_fname_base)));
3048 }
3049
3050 /* Open the base file. */
3051 status = create_file_unixpath(conn, NULL, smb_fname_base, 0,
3052 FILE_SHARE_READ
3053 | FILE_SHARE_WRITE
3054 | FILE_SHARE_DELETE,
3055 base_create_disposition,
3056 0, 0, 0, 0, 0, NULL, NULL,
3057 &base_fsp, NULL);
3058 TALLOC_FREE(smb_fname_base);
3059
3060 if (!NT_STATUS_IS_OK(status)) {
3061 DEBUG(10, ("create_file_unixpath for base %s failed: "
3062 "%s\n", smb_fname->base_name,
3063 nt_errstr(status)));
3064 goto fail;
3065 }
3066 /* we don't need to low level fd */
3067 fd_close(base_fsp);
3068 }
3069
3070 /*
3071 * If it's a request for a directory open, deal with it separately.
3072 */
3073
3074 if (create_options & FILE_DIRECTORY_FILE) {
3075
3076 if (create_options & FILE_NON_DIRECTORY_FILE) {
3077 status = NT_STATUS_INVALID_PARAMETER;
3078 goto fail;
3079 }
3080
3081 /* Can't open a temp directory. IFS kit test. */
3082 if (!(file_attributes & FILE_FLAG_POSIX_SEMANTICS) &&
3083 (file_attributes & FILE_ATTRIBUTE_TEMPORARY)) {
3084 status = NT_STATUS_INVALID_PARAMETER;
3085 goto fail;
3086 }
3087
3088 /*
3089 * We will get a create directory here if the Win32
3090 * app specified a security descriptor in the
3091 * CreateDirectory() call.
3092 */
3093
3094 oplock_request = 0;
3095 status = open_directory(
3096 conn, req, smb_fname, access_mask, share_access,
3097 create_disposition, create_options, file_attributes,
3098 &info, &fsp);
3099 } else {
3100
3101 /*
3102 * Ordinary file case.
3103 */
3104
3105 status = file_new(req, conn, &fsp);
3106 if(!NT_STATUS_IS_OK(status)) {
3107 goto fail;
3108 }
3109
3110 status = fsp_set_smb_fname(fsp, smb_fname);
3111 if (!NT_STATUS_IS_OK(status)) {
3112 goto fail;
3113 }
3114
3115 /*
3116 * We're opening the stream element of a base_fsp
3117 * we already opened. Set up the base_fsp pointer.
3118 */
3119 if (base_fsp) {
3120 fsp->base_fsp = base_fsp;
3121 }
3122
3123 status = open_file_ntcreate(conn,
3124 req,
3125 access_mask,
3126 share_access,
3127 create_disposition,
3128 create_options,
3129 file_attributes,
3130 oplock_request,
3131 private_flags,
3132 &info,
3133 fsp);
3134
3135 if(!NT_STATUS_IS_OK(status)) {
3136 file_free(req, fsp);
3137 fsp = NULL;
3138 }
3139
3140 if (NT_STATUS_EQUAL(status, NT_STATUS_FILE_IS_A_DIRECTORY)) {
3141
3142 /* A stream open never opens a directory */
3143
3144 if (base_fsp) {
3145 status = NT_STATUS_FILE_IS_A_DIRECTORY;
3146 goto fail;
3147 }
3148
3149 /*
3150 * Fail the open if it was explicitly a non-directory
3151 * file.
3152 */
3153
3154 if (create_options & FILE_NON_DIRECTORY_FILE) {
3155 status = NT_STATUS_FILE_IS_A_DIRECTORY;
3156 goto fail;
3157 }
3158
3159 oplock_request = 0;
3160 status = open_directory(
3161 conn, req, smb_fname, access_mask,
3162 share_access, create_disposition,
3163 create_options, file_attributes,
3164 &info, &fsp);
3165 }
3166 }
3167
3168 if (!NT_STATUS_IS_OK(status)) {
3169 goto fail;
3170 }
3171
3172 fsp->base_fsp = base_fsp;
3173
3174 /*
3175 * According to the MS documentation, the only time the security
3176 * descriptor is applied to the opened file is iff we *created* the
3177 * file; an existing file stays the same.
3178 *
3179 * Also, it seems (from observation) that you can open the file with
3180 * any access mask but you can still write the sd. We need to override
3181 * the granted access before we call set_sd
3182 * Patch for bug #2242 from Tom Lackemann <cessnatomny@yahoo.com>.
3183 */
3184
3185 if ((sd != NULL) && (info == FILE_WAS_CREATED)
3186 && lp_nt_acl_support(SNUM(conn))) {
3187
3188 uint32_t sec_info_sent;
3189 uint32_t saved_access_mask = fsp->access_mask;
3190
3191 sec_info_sent = get_sec_info(sd);
3192
3193 fsp->access_mask = FILE_GENERIC_ALL;
3194
3195 /* Convert all the generic bits. */
3196 security_acl_map_generic(sd->dacl, &file_generic_mapping);
3197 security_acl_map_generic(sd->sacl, &file_generic_mapping);
3198
3199 if (sec_info_sent & (OWNER_SECURITY_INFORMATION|
3200 GROUP_SECURITY_INFORMATION|
3201 DACL_SECURITY_INFORMATION|
3202 SACL_SECURITY_INFORMATION)) {
3203 status = SMB_VFS_FSET_NT_ACL(fsp, sec_info_sent, sd);
3204 }
3205
3206 fsp->access_mask = saved_access_mask;
3207
3208 if (!NT_STATUS_IS_OK(status)) {
3209 goto fail;
3210 }
3211 }
3212
3213 if ((ea_list != NULL) &&
3214 ((info == FILE_WAS_CREATED) || (info == FILE_WAS_OVERWRITTEN))) {
3215 status = set_ea(conn, fsp, fsp->fsp_name, ea_list);
3216 if (!NT_STATUS_IS_OK(status)) {
3217 goto fail;
3218 }
3219 }
3220
3221 if (!fsp->is_directory && S_ISDIR(fsp->fsp_name->st.st_ex_mode)) {
3222 status = NT_STATUS_ACCESS_DENIED;
3223 goto fail;
3224 }
3225
3226 /* Save the requested allocation size. */
3227 if ((info == FILE_WAS_CREATED) || (info == FILE_WAS_OVERWRITTEN)) {
3228 if (allocation_size
3229 && (allocation_size > fsp->fsp_name->st.st_ex_size)) {
3230 fsp->initial_allocation_size = smb_roundup(
3231 fsp->conn, allocation_size);
3232 if (fsp->is_directory) {
3233 /* Can't set allocation size on a directory. */
3234 status = NT_STATUS_ACCESS_DENIED;
3235 goto fail;
3236 }
3237 if (vfs_allocate_file_space(
3238 fsp, fsp->initial_allocation_size) == -1) {
3239 status = NT_STATUS_DISK_FULL;
3240 goto fail;
3241 }
3242 } else {
3243 fsp->initial_allocation_size = smb_roundup(
3244 fsp->conn, (uint64_t)fsp->fsp_name->st.st_ex_size);
3245 }
3246 }
3247
3248 DEBUG(10, ("create_file_unixpath: info=%d\n", info));
3249
3250 *result = fsp;
3251 if (pinfo != NULL) {
3252 *pinfo = info;
3253 }
3254
3255 smb_fname->st = fsp->fsp_name->st;
3256
3257 return NT_STATUS_OK;
3258
3259 fail:
3260 DEBUG(10, ("create_file_unixpath: %s\n", nt_errstr(status)));
3261
3262 if (fsp != NULL) {
3263 if (base_fsp && fsp->base_fsp == base_fsp) {
3264 /*
3265 * The close_file below will close
3266 * fsp->base_fsp.
3267 */
3268 base_fsp = NULL;
3269 }
3270 close_file(req, fsp, ERROR_CLOSE);
3271 fsp = NULL;
3272 }
3273 if (base_fsp != NULL) {
3274 close_file(req, base_fsp, ERROR_CLOSE);
3275 base_fsp = NULL;
3276 }
3277 return status;
3278 }
3279
3280 /*
3281 * Calculate the full path name given a relative fid.
3282 */
3283 NTSTATUS get_relative_fid_filename(connection_struct *conn,
3284 struct smb_request *req,
3285 uint16_t root_dir_fid,
3286 struct smb_filename *smb_fname)
3287 {
3288 files_struct *dir_fsp;
3289 char *parent_fname = NULL;
3290 char *new_base_name = NULL;
3291 NTSTATUS status;
3292
3293 if (root_dir_fid == 0 || !smb_fname) {
3294 status = NT_STATUS_INTERNAL_ERROR;
3295 goto out;
3296 }
3297
3298 dir_fsp = file_fsp(req, root_dir_fid);
3299
3300 if (dir_fsp == NULL) {
3301 status = NT_STATUS_INVALID_HANDLE;
3302 goto out;
3303 }
3304
3305 if (is_ntfs_stream_smb_fname(dir_fsp->fsp_name)) {
3306 status = NT_STATUS_INVALID_HANDLE;
3307 goto out;
3308 }
3309
3310 if (!dir_fsp->is_directory) {
3311
3312 /*
3313 * Check to see if this is a mac fork of some kind.
3314 */
3315
3316 if ((conn->fs_capabilities & FILE_NAMED_STREAMS) &&
3317 is_ntfs_stream_smb_fname(smb_fname)) {
3318 status = NT_STATUS_OBJECT_PATH_NOT_FOUND;
3319 goto out;
3320 }
3321
3322 /*
3323 we need to handle the case when we get a
3324 relative open relative to a file and the
3325 pathname is blank - this is a reopen!
3326 (hint from demyn plantenberg)
3327 */
3328
3329 status = NT_STATUS_INVALID_HANDLE;
3330 goto out;
3331 }
3332
3333 if (ISDOT(dir_fsp->fsp_name->base_name)) {
3334 /*
3335 * We're at the toplevel dir, the final file name
3336 * must not contain ./, as this is filtered out
3337 * normally by srvstr_get_path and unix_convert
3338 * explicitly rejects paths containing ./.
3339 */
3340 parent_fname = talloc_strdup(talloc_tos(), "");
3341 if (parent_fname == NULL) {
3342 status = NT_STATUS_NO_MEMORY;
3343 goto out;
3344 }
3345 } else {
3346 size_t dir_name_len = strlen(dir_fsp->fsp_name->base_name);
3347
3348 /*
3349 * Copy in the base directory name.
3350 */
3351
3352 parent_fname = TALLOC_ARRAY(talloc_tos(), char,
3353 dir_name_len+2);
3354 if (parent_fname == NULL) {
3355 status = NT_STATUS_NO_MEMORY;
3356 goto out;
3357 }
3358 memcpy(parent_fname, dir_fsp->fsp_name->base_name,
3359 dir_name_len+1);
3360
3361 /*
3362 * Ensure it ends in a '/'.
3363 * We used TALLOC_SIZE +2 to add space for the '/'.
3364 */
3365
3366 if(dir_name_len
3367 && (parent_fname[dir_name_len-1] != '\\')
3368 && (parent_fname[dir_name_len-1] != '/')) {
3369 parent_fname[dir_name_len] = '/';
3370 parent_fname[dir_name_len+1] = '\0';
3371 }
3372 }
3373
3374 new_base_name = talloc_asprintf(smb_fname, "%s%s", parent_fname,
3375 smb_fname->base_name);
3376 if (new_base_name == NULL) {
3377 status = NT_STATUS_NO_MEMORY;
3378 goto out;
3379 }
3380
3381 TALLOC_FREE(smb_fname->base_name);
3382 smb_fname->base_name = new_base_name;
3383 status = NT_STATUS_OK;
3384
3385 out:
3386 TALLOC_FREE(parent_fname);
3387 return status;
3388 }
3389
3390 NTSTATUS create_file_default(connection_struct *conn,
3391 struct smb_request *req,
3392 uint16_t root_dir_fid,
3393 struct smb_filename *smb_fname,
3394 uint32_t access_mask,
3395 uint32_t share_access,
3396 uint32_t create_disposition,
3397 uint32_t create_options,
3398 uint32_t file_attributes,
3399 uint32_t oplock_request,
3400 uint64_t allocation_size,
3401 uint32_t private_flags,
3402 struct security_descriptor *sd,
3403 struct ea_list *ea_list,
3404 files_struct **result,
3405 int *pinfo)
3406 {
3407 int info = FILE_WAS_OPENED;
3408 files_struct *fsp = NULL;
3409 NTSTATUS status;
3410
3411 DEBUG(10,("create_file: access_mask = 0x%x "
3412 "file_attributes = 0x%x, share_access = 0x%x, "
3413 "create_disposition = 0x%x create_options = 0x%x "
3414 "oplock_request = 0x%x "
3415 "private_flags = 0x%x "
3416 "root_dir_fid = 0x%x, ea_list = 0x%p, sd = 0x%p, "
3417 "fname = %s\n",
3418 (unsigned int)access_mask,
3419 (unsigned int)file_attributes,
3420 (unsigned int)share_access,
3421 (unsigned int)create_disposition,
3422 (unsigned int)create_options,
3423 (unsigned int)oplock_request,
3424 (unsigned int)private_flags,
3425 (unsigned int)root_dir_fid,
3426 ea_list, sd, smb_fname_str_dbg(smb_fname)));
3427
3428 /*
3429 * Calculate the filename from the root_dir_if if necessary.
3430 */
3431
3432 if (root_dir_fid != 0) {
3433 status = get_relative_fid_filename(conn, req, root_dir_fid,
3434 smb_fname);
3435 if (!NT_STATUS_IS_OK(status)) {
3436 goto fail;
3437 }
3438 }
3439
3440 /*
3441 * Check to see if this is a mac fork of some kind.
3442 */
3443
3444 if (is_ntfs_stream_smb_fname(smb_fname)) {
3445 enum FAKE_FILE_TYPE fake_file_type;
3446
3447 fake_file_type = is_fake_file(smb_fname);
3448
3449 if (fake_file_type != FAKE_FILE_TYPE_NONE) {
3450
3451 /*
3452 * Here we go! support for changing the disk quotas
3453 * --metze
3454 *
3455 * We need to fake up to open this MAGIC QUOTA file
3456 * and return a valid FID.
3457 *
3458 * w2k close this file directly after openening xp
3459 * also tries a QUERY_FILE_INFO on the file and then
3460 * close it
3461 */
3462 status = open_fake_file(req, conn, req->vuid,
3463 fake_file_type, smb_fname,
3464 access_mask, &fsp);
3465 if (!NT_STATUS_IS_OK(status)) {
3466 goto fail;
3467 }
3468
3469 ZERO_STRUCT(smb_fname->st);
3470 goto done;
3471 }
3472
3473 if (!(conn->fs_capabilities & FILE_NAMED_STREAMS)) {
3474 status = NT_STATUS_OBJECT_NAME_NOT_FOUND;
3475 goto fail;
3476 }
3477 }
3478
3479 /* All file access must go through check_name() */
3480
3481 status = check_name(conn, smb_fname->base_name);
3482 if (!NT_STATUS_IS_OK(status)) {
3483 goto fail;
3484 }
3485
3486 status = create_file_unixpath(
3487 conn, req, smb_fname, access_mask, share_access,
3488 create_disposition, create_options, file_attributes,
3489 oplock_request, allocation_size, private_flags,
3490 sd, ea_list,
3491 &fsp, &info);
3492
3493 if (!NT_STATUS_IS_OK(status)) {
3494 goto fail;
3495 }
3496
3497 done:
3498 DEBUG(10, ("create_file: info=%d\n", info));
3499
3500 *result = fsp;
3501 if (pinfo != NULL) {
3502 *pinfo = info;
3503 }
3504 return NT_STATUS_OK;
3505
3506 fail:
3507 DEBUG(10, ("create_file: %s\n", nt_errstr(status)));
3508
3509 if (fsp != NULL) {
3510 close_file(req, fsp, ERROR_CLOSE);
3511 fsp = NULL;
3512 }
3513 return status;
3514 }
reg import