s3:smbd: use smbXsrv_open_close() instead of smbXsrv_open_update()
[Samba/gebeck_regimport.git] / source3 / smbd / close.c
blob9e7ccc7c05224152c13420145a2afb1f2a0df7c2
1 /*
2 Unix SMB/CIFS implementation.
3 file closing
4 Copyright (C) Andrew Tridgell 1992-1998
5 Copyright (C) Jeremy Allison 1992-2007.
6 Copyright (C) Volker Lendecke 2005
8 This program is free software; you can redistribute it and/or modify
9 it under the terms of the GNU General Public License as published by
10 the Free Software Foundation; either version 3 of the License, or
11 (at your option) any later version.
13 This program is distributed in the hope that it will be useful,
14 but WITHOUT ANY WARRANTY; without even the implied warranty of
15 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
16 GNU General Public License for more details.
18 You should have received a copy of the GNU General Public License
19 along with this program. If not, see <http://www.gnu.org/licenses/>.
22 #include "includes.h"
23 #include "system/filesys.h"
24 #include "printing.h"
25 #include "smbd/smbd.h"
26 #include "smbd/globals.h"
27 #include "fake_file.h"
28 #include "transfer_file.h"
29 #include "auth.h"
30 #include "messages.h"
31 #include "../librpc/gen_ndr/open_files.h"
33 /****************************************************************************
34 Run a file if it is a magic script.
35 ****************************************************************************/
37 static NTSTATUS check_magic(struct files_struct *fsp)
39 int ret;
40 const char *magic_output = NULL;
41 SMB_STRUCT_STAT st;
42 int tmp_fd, outfd;
43 TALLOC_CTX *ctx = NULL;
44 const char *p;
45 struct connection_struct *conn = fsp->conn;
46 char *fname = NULL;
47 NTSTATUS status;
49 if (!*lp_magicscript(talloc_tos(), SNUM(conn))) {
50 return NT_STATUS_OK;
53 DEBUG(5,("checking magic for %s\n", fsp_str_dbg(fsp)));
55 ctx = talloc_stackframe();
57 fname = fsp->fsp_name->base_name;
59 if (!(p = strrchr_m(fname,'/'))) {
60 p = fname;
61 } else {
62 p++;
65 if (!strequal(lp_magicscript(talloc_tos(), SNUM(conn)),p)) {
66 status = NT_STATUS_OK;
67 goto out;
70 if (*lp_magicoutput(talloc_tos(), SNUM(conn))) {
71 magic_output = lp_magicoutput(talloc_tos(), SNUM(conn));
72 } else {
73 magic_output = talloc_asprintf(ctx,
74 "%s.out",
75 fname);
77 if (!magic_output) {
78 status = NT_STATUS_NO_MEMORY;
79 goto out;
82 /* Ensure we don't depend on user's PATH. */
83 p = talloc_asprintf(ctx, "./%s", fname);
84 if (!p) {
85 status = NT_STATUS_NO_MEMORY;
86 goto out;
89 if (chmod(fname, 0755) == -1) {
90 status = map_nt_error_from_unix(errno);
91 goto out;
93 ret = smbrun(p,&tmp_fd);
94 DEBUG(3,("Invoking magic command %s gave %d\n",
95 p,ret));
97 unlink(fname);
98 if (ret != 0 || tmp_fd == -1) {
99 if (tmp_fd != -1) {
100 close(tmp_fd);
102 status = NT_STATUS_UNSUCCESSFUL;
103 goto out;
105 outfd = open(magic_output, O_CREAT|O_EXCL|O_RDWR, 0600);
106 if (outfd == -1) {
107 int err = errno;
108 close(tmp_fd);
109 status = map_nt_error_from_unix(err);
110 goto out;
113 if (sys_fstat(tmp_fd, &st, false) == -1) {
114 int err = errno;
115 close(tmp_fd);
116 close(outfd);
117 status = map_nt_error_from_unix(err);
118 goto out;
121 if (transfer_file(tmp_fd,outfd,(off_t)st.st_ex_size) == (off_t)-1) {
122 int err = errno;
123 close(tmp_fd);
124 close(outfd);
125 status = map_nt_error_from_unix(err);
126 goto out;
128 close(tmp_fd);
129 if (close(outfd) == -1) {
130 status = map_nt_error_from_unix(errno);
131 goto out;
134 status = NT_STATUS_OK;
136 out:
137 TALLOC_FREE(ctx);
138 return status;
141 /****************************************************************************
142 Common code to close a file or a directory.
143 ****************************************************************************/
145 static NTSTATUS close_filestruct(files_struct *fsp)
147 NTSTATUS status = NT_STATUS_OK;
149 if (fsp->fh->fd != -1) {
150 if(flush_write_cache(fsp, CLOSE_FLUSH) == -1) {
151 status = map_nt_error_from_unix(errno);
153 delete_write_cache(fsp);
156 return status;
159 static int compare_share_mode_times(const void *p1, const void *p2)
161 const struct share_mode_entry *s1 = (const struct share_mode_entry *)p1;
162 const struct share_mode_entry *s2 = (const struct share_mode_entry *)p2;
163 return timeval_compare(&s1->time, &s2->time);
166 /****************************************************************************
167 If any deferred opens are waiting on this close, notify them.
168 ****************************************************************************/
170 static void notify_deferred_opens(struct smbd_server_connection *sconn,
171 struct share_mode_lock *lck)
173 struct server_id self = messaging_server_id(sconn->msg_ctx);
174 uint32_t i, num_deferred;
175 struct share_mode_entry *deferred;
177 if (!should_notify_deferred_opens(sconn)) {
178 return;
181 num_deferred = 0;
182 for (i=0; i<lck->data->num_share_modes; i++) {
183 struct share_mode_entry *e = &lck->data->share_modes[i];
185 if (!is_deferred_open_entry(e)) {
186 continue;
188 if (share_mode_stale_pid(lck->data, i)) {
189 continue;
191 num_deferred += 1;
193 if (num_deferred == 0) {
194 return;
197 deferred = talloc_array(talloc_tos(), struct share_mode_entry,
198 num_deferred);
199 if (deferred == NULL) {
200 return;
203 num_deferred = 0;
204 for (i=0; i<lck->data->num_share_modes; i++) {
205 struct share_mode_entry *e = &lck->data->share_modes[i];
206 if (is_deferred_open_entry(e)) {
207 deferred[num_deferred] = *e;
208 num_deferred += 1;
213 * We need to sort the notifications by initial request time. Imagine
214 * two opens come in asyncronously, both conflicting with the open we
215 * just close here. If we don't sort the notifications, the one that
216 * came in last might get the response before the one that came in
217 * first. This is demonstrated with the smbtorture4 raw.mux test.
219 * As long as we had the UNUSED_SHARE_MODE_ENTRY, we happened to
220 * survive this particular test. Without UNUSED_SHARE_MODE_ENTRY, we
221 * shuffle the share mode entries around a bit, so that we do not
222 * survive raw.mux anymore.
224 * We could have kept the ordering in del_share_mode, but as the
225 * ordering was never formalized I think it is better to do it here
226 * where it is necessary.
229 qsort(deferred, num_deferred, sizeof(struct share_mode_entry),
230 compare_share_mode_times);
232 for (i=0; i<num_deferred; i++) {
233 struct share_mode_entry *e = &deferred[i];
235 if (serverid_equal(&self, &e->pid)) {
237 * We need to notify ourself to retry the open. Do
238 * this by finding the queued SMB record, moving it to
239 * the head of the queue and changing the wait time to
240 * zero.
242 schedule_deferred_open_message_smb(sconn, e->op_mid);
243 } else {
244 char msg[MSG_SMB_SHARE_MODE_ENTRY_SIZE];
246 share_mode_entry_to_message(msg, e);
248 messaging_send_buf(sconn->msg_ctx, e->pid,
249 MSG_SMB_OPEN_RETRY,
250 (uint8 *)msg,
251 MSG_SMB_SHARE_MODE_ENTRY_SIZE);
254 TALLOC_FREE(deferred);
257 /****************************************************************************
258 Delete all streams
259 ****************************************************************************/
261 NTSTATUS delete_all_streams(connection_struct *conn, const char *fname)
263 struct stream_struct *stream_info = NULL;
264 int i;
265 unsigned int num_streams = 0;
266 TALLOC_CTX *frame = talloc_stackframe();
267 NTSTATUS status;
269 status = vfs_streaminfo(conn, NULL, fname, talloc_tos(),
270 &num_streams, &stream_info);
272 if (NT_STATUS_EQUAL(status, NT_STATUS_NOT_IMPLEMENTED)) {
273 DEBUG(10, ("no streams around\n"));
274 TALLOC_FREE(frame);
275 return NT_STATUS_OK;
278 if (!NT_STATUS_IS_OK(status)) {
279 DEBUG(10, ("vfs_streaminfo failed: %s\n",
280 nt_errstr(status)));
281 goto fail;
284 DEBUG(10, ("delete_all_streams found %d streams\n",
285 num_streams));
287 if (num_streams == 0) {
288 TALLOC_FREE(frame);
289 return NT_STATUS_OK;
292 for (i=0; i<num_streams; i++) {
293 int res;
294 struct smb_filename *smb_fname_stream = NULL;
296 if (strequal(stream_info[i].name, "::$DATA")) {
297 continue;
300 status = create_synthetic_smb_fname(talloc_tos(), fname,
301 stream_info[i].name, NULL,
302 &smb_fname_stream);
304 if (!NT_STATUS_IS_OK(status)) {
305 DEBUG(0, ("talloc_aprintf failed\n"));
306 goto fail;
309 res = SMB_VFS_UNLINK(conn, smb_fname_stream);
311 if (res == -1) {
312 status = map_nt_error_from_unix(errno);
313 DEBUG(10, ("Could not delete stream %s: %s\n",
314 smb_fname_str_dbg(smb_fname_stream),
315 strerror(errno)));
316 TALLOC_FREE(smb_fname_stream);
317 break;
319 TALLOC_FREE(smb_fname_stream);
322 fail:
323 TALLOC_FREE(frame);
324 return status;
327 /****************************************************************************
328 Deal with removing a share mode on last close.
329 ****************************************************************************/
331 static NTSTATUS close_remove_share_mode(files_struct *fsp,
332 enum file_close_type close_type)
334 connection_struct *conn = fsp->conn;
335 struct server_id self = messaging_server_id(conn->sconn->msg_ctx);
336 bool delete_file = false;
337 bool changed_user = false;
338 struct share_mode_lock *lck = NULL;
339 NTSTATUS status = NT_STATUS_OK;
340 NTSTATUS tmp_status;
341 struct file_id id;
342 const struct security_unix_token *del_token = NULL;
343 const struct security_token *del_nt_token = NULL;
344 bool got_tokens = false;
345 bool normal_close;
347 /* Ensure any pending write time updates are done. */
348 if (fsp->update_write_time_event) {
349 update_write_time_handler(fsp->conn->sconn->ev_ctx,
350 fsp->update_write_time_event,
351 timeval_current(),
352 (void *)fsp);
356 * Lock the share entries, and determine if we should delete
357 * on close. If so delete whilst the lock is still in effect.
358 * This prevents race conditions with the file being created. JRA.
361 lck = get_existing_share_mode_lock(talloc_tos(), fsp->file_id);
362 if (lck == NULL) {
363 DEBUG(0, ("close_remove_share_mode: Could not get share mode "
364 "lock for file %s\n", fsp_str_dbg(fsp)));
365 return NT_STATUS_INVALID_PARAMETER;
368 if (fsp->write_time_forced) {
369 DEBUG(10,("close_remove_share_mode: write time forced "
370 "for file %s\n",
371 fsp_str_dbg(fsp)));
372 set_close_write_time(fsp, lck->data->changed_write_time);
373 } else if (fsp->update_write_time_on_close) {
374 /* Someone had a pending write. */
375 if (null_timespec(fsp->close_write_time)) {
376 DEBUG(10,("close_remove_share_mode: update to current time "
377 "for file %s\n",
378 fsp_str_dbg(fsp)));
379 /* Update to current time due to "normal" write. */
380 set_close_write_time(fsp, timespec_current());
381 } else {
382 DEBUG(10,("close_remove_share_mode: write time pending "
383 "for file %s\n",
384 fsp_str_dbg(fsp)));
385 /* Update to time set on close call. */
386 set_close_write_time(fsp, fsp->close_write_time);
390 if (fsp->initial_delete_on_close &&
391 !is_delete_on_close_set(lck, fsp->name_hash)) {
392 bool became_user = False;
394 /* Initial delete on close was set and no one else
395 * wrote a real delete on close. */
397 if (get_current_vuid(conn) != fsp->vuid) {
398 become_user(conn, fsp->vuid);
399 became_user = True;
401 fsp->delete_on_close = true;
402 set_delete_on_close_lck(fsp, lck, True,
403 get_current_nttok(conn),
404 get_current_utok(conn));
405 if (became_user) {
406 unbecome_user();
410 delete_file = is_delete_on_close_set(lck, fsp->name_hash);
412 if (delete_file) {
413 int i;
414 /* See if others still have the file open via this pathname.
415 If this is the case, then don't delete. If all opens are
416 POSIX delete now. */
417 for (i=0; i<lck->data->num_share_modes; i++) {
418 struct share_mode_entry *e = &lck->data->share_modes[i];
420 if (!is_valid_share_mode_entry(e)) {
421 continue;
423 if (e->name_hash != fsp->name_hash) {
424 continue;
426 if (fsp->posix_open
427 && (e->flags & SHARE_MODE_FLAG_POSIX_OPEN)) {
428 continue;
430 if (serverid_equal(&self, &e->pid) &&
431 (e->share_file_id == fsp->fh->gen_id)) {
432 continue;
434 if (share_mode_stale_pid(lck->data, i)) {
435 continue;
437 delete_file = False;
438 break;
442 /* Notify any deferred opens waiting on this close. */
443 notify_deferred_opens(conn->sconn, lck);
444 reply_to_oplock_break_requests(fsp);
447 * NT can set delete_on_close of the last open
448 * reference to a file.
451 normal_close = (close_type == NORMAL_CLOSE || close_type == SHUTDOWN_CLOSE);
453 if (!normal_close || !delete_file) {
455 if (!del_share_mode(lck, fsp)) {
456 DEBUG(0, ("close_remove_share_mode: Could not delete "
457 "share entry for file %s\n",
458 fsp_str_dbg(fsp)));
461 TALLOC_FREE(lck);
462 return NT_STATUS_OK;
466 * Ok, we have to delete the file
469 DEBUG(5,("close_remove_share_mode: file %s. Delete on close was set "
470 "- deleting file.\n", fsp_str_dbg(fsp)));
473 * Don't try to update the write time when we delete the file
475 fsp->update_write_time_on_close = false;
477 got_tokens = get_delete_on_close_token(lck, fsp->name_hash,
478 &del_nt_token, &del_token);
479 SMB_ASSERT(got_tokens);
481 if (!unix_token_equal(del_token, get_current_utok(conn))) {
482 /* Become the user who requested the delete. */
484 DEBUG(5,("close_remove_share_mode: file %s. "
485 "Change user to uid %u\n",
486 fsp_str_dbg(fsp),
487 (unsigned int)del_token->uid));
489 if (!push_sec_ctx()) {
490 smb_panic("close_remove_share_mode: file %s. failed to push "
491 "sec_ctx.\n");
494 set_sec_ctx(del_token->uid,
495 del_token->gid,
496 del_token->ngroups,
497 del_token->groups,
498 del_nt_token);
500 changed_user = true;
503 /* We can only delete the file if the name we have is still valid and
504 hasn't been renamed. */
506 tmp_status = vfs_stat_fsp(fsp);
507 if (!NT_STATUS_IS_OK(tmp_status)) {
508 DEBUG(5,("close_remove_share_mode: file %s. Delete on close "
509 "was set and stat failed with error %s\n",
510 fsp_str_dbg(fsp), nt_errstr(tmp_status)));
512 * Don't save the errno here, we ignore this error
514 goto done;
517 id = vfs_file_id_from_sbuf(conn, &fsp->fsp_name->st);
519 if (!file_id_equal(&fsp->file_id, &id)) {
520 DEBUG(5,("close_remove_share_mode: file %s. Delete on close "
521 "was set and dev and/or inode does not match\n",
522 fsp_str_dbg(fsp)));
523 DEBUG(5,("close_remove_share_mode: file %s. stored file_id %s, "
524 "stat file_id %s\n",
525 fsp_str_dbg(fsp),
526 file_id_string_tos(&fsp->file_id),
527 file_id_string_tos(&id)));
529 * Don't save the errno here, we ignore this error
531 goto done;
534 if ((conn->fs_capabilities & FILE_NAMED_STREAMS)
535 && !is_ntfs_stream_smb_fname(fsp->fsp_name)) {
537 status = delete_all_streams(conn, fsp->fsp_name->base_name);
539 if (!NT_STATUS_IS_OK(status)) {
540 DEBUG(5, ("delete_all_streams failed: %s\n",
541 nt_errstr(status)));
542 goto done;
547 if (SMB_VFS_UNLINK(conn, fsp->fsp_name) != 0) {
549 * This call can potentially fail as another smbd may
550 * have had the file open with delete on close set and
551 * deleted it when its last reference to this file
552 * went away. Hence we log this but not at debug level
553 * zero.
556 DEBUG(5,("close_remove_share_mode: file %s. Delete on close "
557 "was set and unlink failed with error %s\n",
558 fsp_str_dbg(fsp), strerror(errno)));
560 status = map_nt_error_from_unix(errno);
563 /* As we now have POSIX opens which can unlink
564 * with other open files we may have taken
565 * this code path with more than one share mode
566 * entry - ensure we only delete once by resetting
567 * the delete on close flag. JRA.
570 fsp->delete_on_close = false;
571 set_delete_on_close_lck(fsp, lck, false, NULL, NULL);
573 done:
575 if (changed_user) {
576 /* unbecome user. */
577 pop_sec_ctx();
580 if (!del_share_mode(lck, fsp)) {
581 DEBUG(0, ("close_remove_share_mode: Could not delete share "
582 "entry for file %s\n", fsp_str_dbg(fsp)));
585 TALLOC_FREE(lck);
587 if (delete_file) {
589 * Do the notification after we released the share
590 * mode lock. Inside notify_fname we take out another
591 * tdb lock. With ctdb also accessing our databases,
592 * this can lead to deadlocks. Putting this notify
593 * after the TALLOC_FREE(lck) above we avoid locking
594 * two records simultaneously. Notifies are async and
595 * informational only, so calling the notify_fname
596 * without holding the share mode lock should not do
597 * any harm.
599 notify_fname(conn, NOTIFY_ACTION_REMOVED,
600 FILE_NOTIFY_CHANGE_FILE_NAME,
601 fsp->fsp_name->base_name);
604 return status;
607 void set_close_write_time(struct files_struct *fsp, struct timespec ts)
609 DEBUG(6,("close_write_time: %s" , time_to_asc(convert_timespec_to_time_t(ts))));
611 if (null_timespec(ts)) {
612 return;
614 fsp->write_time_forced = false;
615 fsp->update_write_time_on_close = true;
616 fsp->close_write_time = ts;
619 static NTSTATUS update_write_time_on_close(struct files_struct *fsp)
621 struct smb_file_time ft;
622 NTSTATUS status;
623 struct share_mode_lock *lck = NULL;
625 ZERO_STRUCT(ft);
627 if (!fsp->update_write_time_on_close) {
628 return NT_STATUS_OK;
631 if (null_timespec(fsp->close_write_time)) {
632 fsp->close_write_time = timespec_current();
635 /* Ensure we have a valid stat struct for the source. */
636 status = vfs_stat_fsp(fsp);
637 if (!NT_STATUS_IS_OK(status)) {
638 return status;
641 if (!VALID_STAT(fsp->fsp_name->st)) {
642 /* if it doesn't seem to be a real file */
643 return NT_STATUS_OK;
647 * get_existing_share_mode_lock() isn't really the right
648 * call here, as we're being called after
649 * close_remove_share_mode() inside close_normal_file()
650 * so it's quite normal to not have an existing share
651 * mode here. However, get_share_mode_lock() doesn't
652 * work because that will create a new share mode if
653 * one doesn't exist - so stick with this call (just
654 * ignore any error we get if the share mode doesn't
655 * exist.
658 lck = get_existing_share_mode_lock(talloc_tos(), fsp->file_id);
659 if (lck) {
660 /* On close if we're changing the real file time we
661 * must update it in the open file db too. */
662 (void)set_write_time(fsp->file_id, fsp->close_write_time);
664 /* Close write times overwrite sticky write times
665 so we must replace any sticky write time here. */
666 if (!null_timespec(lck->data->changed_write_time)) {
667 (void)set_sticky_write_time(fsp->file_id, fsp->close_write_time);
669 TALLOC_FREE(lck);
672 ft.mtime = fsp->close_write_time;
673 /* As this is a close based update, we are not directly changing the
674 file attributes from a client call, but indirectly from a write. */
675 status = smb_set_file_time(fsp->conn, fsp, fsp->fsp_name, &ft, false);
676 if (!NT_STATUS_IS_OK(status)) {
677 DEBUG(10,("update_write_time_on_close: smb_set_file_time "
678 "on file %s returned %s\n",
679 fsp_str_dbg(fsp),
680 nt_errstr(status)));
681 return status;
684 return status;
687 static NTSTATUS ntstatus_keeperror(NTSTATUS s1, NTSTATUS s2)
689 if (!NT_STATUS_IS_OK(s1)) {
690 return s1;
692 return s2;
695 /****************************************************************************
696 Close a file.
698 close_type can be NORMAL_CLOSE=0,SHUTDOWN_CLOSE,ERROR_CLOSE.
699 printing and magic scripts are only run on normal close.
700 delete on close is done on normal and shutdown close.
701 ****************************************************************************/
703 static NTSTATUS close_normal_file(struct smb_request *req, files_struct *fsp,
704 enum file_close_type close_type)
706 NTSTATUS status = NT_STATUS_OK;
707 NTSTATUS tmp;
708 connection_struct *conn = fsp->conn;
709 bool is_durable = false;
711 if (fsp->num_aio_requests != 0) {
713 if (close_type != SHUTDOWN_CLOSE) {
715 * reply_close and the smb2 close must have
716 * taken care of this. No other callers of
717 * close_file should ever have created async
718 * I/O.
720 * We need to panic here because if we close()
721 * the fd while we have outstanding async I/O
722 * requests, in the worst case we could end up
723 * writing to the wrong file.
725 DEBUG(0, ("fsp->num_aio_requests=%u\n",
726 fsp->num_aio_requests));
727 smb_panic("can not close with outstanding aio "
728 "requests");
732 * For shutdown close, just drop the async requests
733 * including a potential close request pending for
734 * this fsp. Drop the close request first, the
735 * destructor for the aio_requests would execute it.
737 TALLOC_FREE(fsp->deferred_close);
739 while (fsp->num_aio_requests != 0) {
741 * The destructor of the req will remove
742 * itself from the fsp
744 TALLOC_FREE(fsp->aio_requests[0]);
749 * If we're flushing on a close we can get a write
750 * error here, we must remember this.
753 tmp = close_filestruct(fsp);
754 status = ntstatus_keeperror(status, tmp);
756 if (NT_STATUS_IS_OK(status) && fsp->op != NULL) {
757 is_durable = fsp->op->global->durable;
760 if (close_type != SHUTDOWN_CLOSE) {
761 is_durable = false;
764 if (is_durable) {
765 DATA_BLOB new_cookie = data_blob_null;
767 tmp = SMB_VFS_DURABLE_DISCONNECT(fsp,
768 fsp->op->global->backend_cookie,
769 fsp->op,
770 &new_cookie);
771 if (NT_STATUS_IS_OK(tmp)) {
772 struct timeval tv;
773 NTTIME now;
775 if (req != NULL) {
776 tv = req->request_time;
777 } else {
778 tv = timeval_current();
780 now = timeval_to_nttime(&tv);
782 data_blob_free(&fsp->op->global->backend_cookie);
783 fsp->op->global->backend_cookie = new_cookie;
785 tmp = smbXsrv_open_close(fsp->op, now);
787 if (!NT_STATUS_IS_OK(tmp)) {
788 is_durable = false;
792 if (is_durable) {
794 * This is the case where we successfully disconnected
795 * a durable handle and closed the underlying file.
796 * In all other cases, we proceed with a genuine close.
798 file_free(req, fsp);
799 return NT_STATUS_OK;
802 if (fsp->op != NULL) {
804 * Make sure the handle is not marked as durable anymore
806 fsp->op->global->durable = false;
809 if (fsp->print_file) {
810 /* FIXME: return spool errors */
811 print_spool_end(fsp, close_type);
812 file_free(req, fsp);
813 return NT_STATUS_OK;
816 /* Remove the oplock before potentially deleting the file. */
817 if(fsp->oplock_type) {
818 release_file_oplock(fsp);
821 /* If this is an old DOS or FCB open and we have multiple opens on
822 the same handle we only have one share mode. Ensure we only remove
823 the share mode on the last close. */
825 if (fsp->fh->ref_count == 1) {
826 /* Should we return on error here... ? */
827 tmp = close_remove_share_mode(fsp, close_type);
828 status = ntstatus_keeperror(status, tmp);
831 locking_close_file(conn->sconn->msg_ctx, fsp, close_type);
833 tmp = fd_close(fsp);
834 status = ntstatus_keeperror(status, tmp);
836 /* check for magic scripts */
837 if (close_type == NORMAL_CLOSE) {
838 tmp = check_magic(fsp);
839 status = ntstatus_keeperror(status, tmp);
843 * Ensure pending modtime is set after close.
846 tmp = update_write_time_on_close(fsp);
847 if (NT_STATUS_EQUAL(tmp, NT_STATUS_OBJECT_NAME_NOT_FOUND)) {
848 /* Someone renamed the file or a parent directory containing
849 * this file. We can't do anything about this, we don't have
850 * an "update timestamp by fd" call in POSIX. Eat the error. */
852 tmp = NT_STATUS_OK;
855 status = ntstatus_keeperror(status, tmp);
857 DEBUG(2,("%s closed file %s (numopen=%d) %s\n",
858 conn->session_info->unix_info->unix_name, fsp_str_dbg(fsp),
859 conn->num_files_open - 1,
860 nt_errstr(status) ));
862 file_free(req, fsp);
863 return status;
865 /****************************************************************************
866 Function used by reply_rmdir to delete an entire directory
867 tree recursively. Return True on ok, False on fail.
868 ****************************************************************************/
870 bool recursive_rmdir(TALLOC_CTX *ctx,
871 connection_struct *conn,
872 struct smb_filename *smb_dname)
874 const char *dname = NULL;
875 char *talloced = NULL;
876 bool ret = True;
877 long offset = 0;
878 SMB_STRUCT_STAT st;
879 struct smb_Dir *dir_hnd;
881 SMB_ASSERT(!is_ntfs_stream_smb_fname(smb_dname));
883 dir_hnd = OpenDir(talloc_tos(), conn, smb_dname->base_name, NULL, 0);
884 if(dir_hnd == NULL)
885 return False;
887 while((dname = ReadDirName(dir_hnd, &offset, &st, &talloced))) {
888 struct smb_filename *smb_dname_full = NULL;
889 char *fullname = NULL;
890 bool do_break = true;
891 NTSTATUS status;
893 if (ISDOT(dname) || ISDOTDOT(dname)) {
894 TALLOC_FREE(talloced);
895 continue;
898 if (!is_visible_file(conn, smb_dname->base_name, dname, &st,
899 false)) {
900 TALLOC_FREE(talloced);
901 continue;
904 /* Construct the full name. */
905 fullname = talloc_asprintf(ctx,
906 "%s/%s",
907 smb_dname->base_name,
908 dname);
909 if (!fullname) {
910 errno = ENOMEM;
911 goto err_break;
914 status = create_synthetic_smb_fname(talloc_tos(), fullname,
915 NULL, NULL,
916 &smb_dname_full);
917 if (!NT_STATUS_IS_OK(status)) {
918 goto err_break;
921 if(SMB_VFS_LSTAT(conn, smb_dname_full) != 0) {
922 goto err_break;
925 if(smb_dname_full->st.st_ex_mode & S_IFDIR) {
926 if(!recursive_rmdir(ctx, conn, smb_dname_full)) {
927 goto err_break;
929 if(SMB_VFS_RMDIR(conn,
930 smb_dname_full->base_name) != 0) {
931 goto err_break;
933 } else if(SMB_VFS_UNLINK(conn, smb_dname_full) != 0) {
934 goto err_break;
937 /* Successful iteration. */
938 do_break = false;
940 err_break:
941 TALLOC_FREE(smb_dname_full);
942 TALLOC_FREE(fullname);
943 TALLOC_FREE(talloced);
944 if (do_break) {
945 ret = false;
946 break;
949 TALLOC_FREE(dir_hnd);
950 return ret;
953 /****************************************************************************
954 The internals of the rmdir code - called elsewhere.
955 ****************************************************************************/
957 static NTSTATUS rmdir_internals(TALLOC_CTX *ctx, files_struct *fsp)
959 connection_struct *conn = fsp->conn;
960 struct smb_filename *smb_dname = fsp->fsp_name;
961 int ret;
963 SMB_ASSERT(!is_ntfs_stream_smb_fname(smb_dname));
965 /* Might be a symlink. */
966 if(SMB_VFS_LSTAT(conn, smb_dname) != 0) {
967 return map_nt_error_from_unix(errno);
970 if (S_ISLNK(smb_dname->st.st_ex_mode)) {
971 /* Is what it points to a directory ? */
972 if(SMB_VFS_STAT(conn, smb_dname) != 0) {
973 return map_nt_error_from_unix(errno);
975 if (!(S_ISDIR(smb_dname->st.st_ex_mode))) {
976 return NT_STATUS_NOT_A_DIRECTORY;
978 ret = SMB_VFS_UNLINK(conn, smb_dname);
979 } else {
980 ret = SMB_VFS_RMDIR(conn, smb_dname->base_name);
982 if (ret == 0) {
983 notify_fname(conn, NOTIFY_ACTION_REMOVED,
984 FILE_NOTIFY_CHANGE_DIR_NAME,
985 smb_dname->base_name);
986 return NT_STATUS_OK;
989 if(((errno == ENOTEMPTY)||(errno == EEXIST)) && *lp_veto_files(talloc_tos(), SNUM(conn))) {
991 * Check to see if the only thing in this directory are
992 * vetoed files/directories. If so then delete them and
993 * retry. If we fail to delete any of them (and we *don't*
994 * do a recursive delete) then fail the rmdir.
996 SMB_STRUCT_STAT st;
997 const char *dname = NULL;
998 char *talloced = NULL;
999 long dirpos = 0;
1000 struct smb_Dir *dir_hnd = OpenDir(talloc_tos(), conn,
1001 smb_dname->base_name, NULL,
1004 if(dir_hnd == NULL) {
1005 errno = ENOTEMPTY;
1006 goto err;
1009 while ((dname = ReadDirName(dir_hnd, &dirpos, &st,
1010 &talloced)) != NULL) {
1011 if((strcmp(dname, ".") == 0) || (strcmp(dname, "..")==0)) {
1012 TALLOC_FREE(talloced);
1013 continue;
1015 if (!is_visible_file(conn, smb_dname->base_name, dname,
1016 &st, false)) {
1017 TALLOC_FREE(talloced);
1018 continue;
1020 if(!IS_VETO_PATH(conn, dname)) {
1021 TALLOC_FREE(dir_hnd);
1022 TALLOC_FREE(talloced);
1023 errno = ENOTEMPTY;
1024 goto err;
1026 TALLOC_FREE(talloced);
1029 /* We only have veto files/directories.
1030 * Are we allowed to delete them ? */
1032 if(!lp_recursive_veto_delete(SNUM(conn))) {
1033 TALLOC_FREE(dir_hnd);
1034 errno = ENOTEMPTY;
1035 goto err;
1038 /* Do a recursive delete. */
1039 RewindDir(dir_hnd,&dirpos);
1040 while ((dname = ReadDirName(dir_hnd, &dirpos, &st,
1041 &talloced)) != NULL) {
1042 struct smb_filename *smb_dname_full = NULL;
1043 char *fullname = NULL;
1044 bool do_break = true;
1045 NTSTATUS status;
1047 if (ISDOT(dname) || ISDOTDOT(dname)) {
1048 TALLOC_FREE(talloced);
1049 continue;
1051 if (!is_visible_file(conn, smb_dname->base_name, dname,
1052 &st, false)) {
1053 TALLOC_FREE(talloced);
1054 continue;
1057 fullname = talloc_asprintf(ctx,
1058 "%s/%s",
1059 smb_dname->base_name,
1060 dname);
1062 if(!fullname) {
1063 errno = ENOMEM;
1064 goto err_break;
1067 status = create_synthetic_smb_fname(talloc_tos(),
1068 fullname, NULL,
1069 NULL,
1070 &smb_dname_full);
1071 if (!NT_STATUS_IS_OK(status)) {
1072 errno = map_errno_from_nt_status(status);
1073 goto err_break;
1076 if(SMB_VFS_LSTAT(conn, smb_dname_full) != 0) {
1077 goto err_break;
1079 if(smb_dname_full->st.st_ex_mode & S_IFDIR) {
1080 if(!recursive_rmdir(ctx, conn,
1081 smb_dname_full)) {
1082 goto err_break;
1084 if(SMB_VFS_RMDIR(conn,
1085 smb_dname_full->base_name) != 0) {
1086 goto err_break;
1088 } else if(SMB_VFS_UNLINK(conn, smb_dname_full) != 0) {
1089 goto err_break;
1092 /* Successful iteration. */
1093 do_break = false;
1095 err_break:
1096 TALLOC_FREE(fullname);
1097 TALLOC_FREE(smb_dname_full);
1098 TALLOC_FREE(talloced);
1099 if (do_break)
1100 break;
1102 TALLOC_FREE(dir_hnd);
1103 /* Retry the rmdir */
1104 ret = SMB_VFS_RMDIR(conn, smb_dname->base_name);
1107 err:
1109 if (ret != 0) {
1110 DEBUG(3,("rmdir_internals: couldn't remove directory %s : "
1111 "%s\n", smb_fname_str_dbg(smb_dname),
1112 strerror(errno)));
1113 return map_nt_error_from_unix(errno);
1116 notify_fname(conn, NOTIFY_ACTION_REMOVED,
1117 FILE_NOTIFY_CHANGE_DIR_NAME,
1118 smb_dname->base_name);
1120 return NT_STATUS_OK;
1123 /****************************************************************************
1124 Close a directory opened by an NT SMB call.
1125 ****************************************************************************/
1127 static NTSTATUS close_directory(struct smb_request *req, files_struct *fsp,
1128 enum file_close_type close_type)
1130 struct server_id self = messaging_server_id(fsp->conn->sconn->msg_ctx);
1131 struct share_mode_lock *lck = NULL;
1132 bool delete_dir = False;
1133 NTSTATUS status = NT_STATUS_OK;
1134 NTSTATUS status1 = NT_STATUS_OK;
1135 const struct security_token *del_nt_token = NULL;
1136 const struct security_unix_token *del_token = NULL;
1139 * NT can set delete_on_close of the last open
1140 * reference to a directory also.
1143 lck = get_existing_share_mode_lock(talloc_tos(), fsp->file_id);
1144 if (lck == NULL) {
1145 DEBUG(0, ("close_directory: Could not get share mode lock for "
1146 "%s\n", fsp_str_dbg(fsp)));
1147 return NT_STATUS_INVALID_PARAMETER;
1150 if (fsp->initial_delete_on_close) {
1151 bool became_user = False;
1153 /* Initial delete on close was set - for
1154 * directories we don't care if anyone else
1155 * wrote a real delete on close. */
1157 if (get_current_vuid(fsp->conn) != fsp->vuid) {
1158 become_user(fsp->conn, fsp->vuid);
1159 became_user = True;
1161 send_stat_cache_delete_message(fsp->conn->sconn->msg_ctx,
1162 fsp->fsp_name->base_name);
1163 set_delete_on_close_lck(fsp, lck, true,
1164 get_current_nttok(fsp->conn),
1165 get_current_utok(fsp->conn));
1166 fsp->delete_on_close = true;
1167 if (became_user) {
1168 unbecome_user();
1172 delete_dir = get_delete_on_close_token(lck, fsp->name_hash,
1173 &del_nt_token, &del_token);
1175 if (delete_dir) {
1176 int i;
1177 /* See if others still have the dir open. If this is the
1178 * case, then don't delete. If all opens are POSIX delete now. */
1179 for (i=0; i<lck->data->num_share_modes; i++) {
1180 struct share_mode_entry *e = &lck->data->share_modes[i];
1181 if (is_valid_share_mode_entry(e) &&
1182 e->name_hash == fsp->name_hash) {
1183 if (fsp->posix_open && (e->flags & SHARE_MODE_FLAG_POSIX_OPEN)) {
1184 continue;
1186 if (serverid_equal(&self, &e->pid) &&
1187 (e->share_file_id == fsp->fh->gen_id)) {
1188 continue;
1190 if (share_mode_stale_pid(lck->data, i)) {
1191 continue;
1193 delete_dir = False;
1194 break;
1199 if ((close_type == NORMAL_CLOSE || close_type == SHUTDOWN_CLOSE) &&
1200 delete_dir) {
1202 /* Become the user who requested the delete. */
1204 if (!push_sec_ctx()) {
1205 smb_panic("close_directory: failed to push sec_ctx.\n");
1208 set_sec_ctx(del_token->uid,
1209 del_token->gid,
1210 del_token->ngroups,
1211 del_token->groups,
1212 del_nt_token);
1214 if (!del_share_mode(lck, fsp)) {
1215 DEBUG(0, ("close_directory: Could not delete share entry for "
1216 "%s\n", fsp_str_dbg(fsp)));
1219 TALLOC_FREE(lck);
1221 if ((fsp->conn->fs_capabilities & FILE_NAMED_STREAMS)
1222 && !is_ntfs_stream_smb_fname(fsp->fsp_name)) {
1224 status = delete_all_streams(fsp->conn, fsp->fsp_name->base_name);
1225 if (!NT_STATUS_IS_OK(status)) {
1226 DEBUG(5, ("delete_all_streams failed: %s\n",
1227 nt_errstr(status)));
1228 return status;
1232 status = rmdir_internals(talloc_tos(), fsp);
1234 DEBUG(5,("close_directory: %s. Delete on close was set - "
1235 "deleting directory returned %s.\n",
1236 fsp_str_dbg(fsp), nt_errstr(status)));
1238 /* unbecome user. */
1239 pop_sec_ctx();
1242 * Ensure we remove any change notify requests that would
1243 * now fail as the directory has been deleted.
1246 if(NT_STATUS_IS_OK(status)) {
1247 remove_pending_change_notify_requests_by_fid(fsp, NT_STATUS_DELETE_PENDING);
1249 } else {
1250 if (!del_share_mode(lck, fsp)) {
1251 DEBUG(0, ("close_directory: Could not delete share entry for "
1252 "%s\n", fsp_str_dbg(fsp)));
1255 TALLOC_FREE(lck);
1256 remove_pending_change_notify_requests_by_fid(
1257 fsp, NT_STATUS_OK);
1260 status1 = fd_close(fsp);
1262 if (!NT_STATUS_IS_OK(status1)) {
1263 DEBUG(0, ("Could not close dir! fname=%s, fd=%d, err=%d=%s\n",
1264 fsp_str_dbg(fsp), fsp->fh->fd, errno,
1265 strerror(errno)));
1269 * Do the code common to files and directories.
1271 close_filestruct(fsp);
1272 file_free(req, fsp);
1274 if (NT_STATUS_IS_OK(status) && !NT_STATUS_IS_OK(status1)) {
1275 status = status1;
1277 return status;
1280 /****************************************************************************
1281 Close a files_struct.
1282 ****************************************************************************/
1284 NTSTATUS close_file(struct smb_request *req, files_struct *fsp,
1285 enum file_close_type close_type)
1287 NTSTATUS status;
1288 struct files_struct *base_fsp = fsp->base_fsp;
1290 if(fsp->is_directory) {
1291 status = close_directory(req, fsp, close_type);
1292 } else if (fsp->fake_file_handle != NULL) {
1293 status = close_fake_file(req, fsp);
1294 } else {
1295 status = close_normal_file(req, fsp, close_type);
1298 if ((base_fsp != NULL) && (close_type != SHUTDOWN_CLOSE)) {
1301 * fsp was a stream, the base fsp can't be a stream as well
1303 * For SHUTDOWN_CLOSE this is not possible here, because
1304 * SHUTDOWN_CLOSE only happens from files.c which walks the
1305 * complete list of files. If we mess with more than one fsp
1306 * those loops will become confused.
1309 SMB_ASSERT(base_fsp->base_fsp == NULL);
1310 close_file(req, base_fsp, close_type);
1313 return status;
1316 /****************************************************************************
1317 Deal with an (authorized) message to close a file given the share mode
1318 entry.
1319 ****************************************************************************/
1321 void msg_close_file(struct messaging_context *msg_ctx,
1322 void *private_data,
1323 uint32_t msg_type,
1324 struct server_id server_id,
1325 DATA_BLOB *data)
1327 files_struct *fsp = NULL;
1328 struct share_mode_entry e;
1329 struct smbd_server_connection *sconn =
1330 talloc_get_type_abort(private_data,
1331 struct smbd_server_connection);
1333 message_to_share_mode_entry(&e, (char *)data->data);
1335 if(DEBUGLVL(10)) {
1336 char *sm_str = share_mode_str(NULL, 0, &e);
1337 if (!sm_str) {
1338 smb_panic("talloc failed");
1340 DEBUG(10,("msg_close_file: got request to close share mode "
1341 "entry %s\n", sm_str));
1342 TALLOC_FREE(sm_str);
1345 fsp = file_find_dif(sconn, e.id, e.share_file_id);
1346 if (!fsp) {
1347 DEBUG(10,("msg_close_file: failed to find file.\n"));
1348 return;
1350 close_file(NULL, fsp, NORMAL_CLOSE);