fs/btrfs/acl.c

   1 /*
   2  * Copyright (C) 2007 Red Hat.  All rights reserved.
   3  *
   4  * This program is free software; you can redistribute it and/or
   5  * modify it under the terms of the GNU General Public
   6  * License v2 as published by the Free Software Foundation.
   7  *
   8  * This program is distributed in the hope that it will be useful,
   9  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  10  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
  11  * General Public License for more details.
  12  *
  13  * You should have received a copy of the GNU General Public
  14  * License along with this program; if not, write to the
  15  * Free Software Foundation, Inc., 59 Temple Place - Suite 330,
  16  * Boston, MA 021110-1307, USA.
  17  */
  18
  19 #include <linux/fs.h>
  20 #include <linux/string.h>
  21 #include <linux/xattr.h>
  22 #include <linux/posix_acl_xattr.h>
  23 #include <linux/posix_acl.h>
  24 #include <linux/sched.h>
  25 #include <linux/slab.h>
  26
  27 #include "ctree.h"
  28 #include "btrfs_inode.h"
  29 #include "xattr.h"
  30
  31 static struct posix_acl *btrfs_get_acl(struct inode *inode, int type)
  32 {
  33         int size;
  34         const char *name;
  35         char *value = NULL;
  36         struct posix_acl *acl;
  37
  38         if (!IS_POSIXACL(inode))
  39                 return NULL;
  40
  41         acl = get_cached_acl(inode, type);
  42         if (acl != ACL_NOT_CACHED)
  43                 return acl;
  44
  45         switch (type) {
  46         case ACL_TYPE_ACCESS:
  47                 name = POSIX_ACL_XATTR_ACCESS;
  48                 break;
  49         case ACL_TYPE_DEFAULT:
  50                 name = POSIX_ACL_XATTR_DEFAULT;
  51                 break;
  52         default:
  53                 BUG();
  54         }
  55
  56         size = __btrfs_getxattr(inode, name, "", 0);
  57         if (size > 0) {
  58                 value = kzalloc(size, GFP_NOFS);
  59                 if (!value)
  60                         return ERR_PTR(-ENOMEM);
  61                 size = __btrfs_getxattr(inode, name, value, size);
  62                 if (size > 0) {
  63                         acl = posix_acl_from_xattr(value, size);
  64                         if (IS_ERR(acl)) {
  65                                 kfree(value);
  66                                 return acl;
  67                         }
  68                         set_cached_acl(inode, type, acl);
  69                 }
  70                 kfree(value);
  71         } else if (size == -ENOENT || size == -ENODATA || size == 0) {
  72                 /* FIXME, who returns -ENOENT?  I think nobody */
  73                 acl = NULL;
  74                 set_cached_acl(inode, type, acl);
  75         } else {
  76                 acl = ERR_PTR(-EIO);
  77         }
  78
  79         return acl;
  80 }
  81
  82 static int btrfs_xattr_acl_get(struct dentry *dentry, const char *name,
  83                 void *value, size_t size, int type)
  84 {
  85         struct posix_acl *acl;
  86         int ret = 0;
  87
  88         if (!IS_POSIXACL(dentry->d_inode))
  89                 return -EOPNOTSUPP;
  90
  91         acl = btrfs_get_acl(dentry->d_inode, type);
  92
  93         if (IS_ERR(acl))
  94                 return PTR_ERR(acl);
  95         if (acl == NULL)
  96                 return -ENODATA;
  97         ret = posix_acl_to_xattr(acl, value, size);
  98         posix_acl_release(acl);
  99
 100         return ret;
 101 }
 102
 103 /*
 104  * Needs to be called with fs_mutex held
 105  */
 106 static int btrfs_set_acl(struct btrfs_trans_handle *trans,
 107                          struct inode *inode, struct posix_acl *acl, int type)
 108 {
 109         int ret, size = 0;
 110         const char *name;
 111         char *value = NULL;
 112         mode_t mode;
 113
 114         if (acl) {
 115                 ret = posix_acl_valid(acl);
 116                 if (ret < 0)
 117                         return ret;
 118                 ret = 0;
 119         }
 120
 121         switch (type) {
 122         case ACL_TYPE_ACCESS:
 123                 mode = inode->i_mode;
 124                 name = POSIX_ACL_XATTR_ACCESS;
 125                 if (acl) {
 126                         ret = posix_acl_equiv_mode(acl, &mode);
 127                         if (ret < 0)
 128                                 return ret;
 129                         inode->i_mode = mode;
 130                 }
 131                 ret = 0;
 132                 break;
 133         case ACL_TYPE_DEFAULT:
 134                 if (!S_ISDIR(inode->i_mode))
 135                         return acl ? -EINVAL : 0;
 136                 name = POSIX_ACL_XATTR_DEFAULT;
 137                 break;
 138         default:
 139                 return -EINVAL;
 140         }
 141
 142         if (acl) {
 143                 size = posix_acl_xattr_size(acl->a_count);
 144                 value = kmalloc(size, GFP_NOFS);
 145                 if (!value) {
 146                         ret = -ENOMEM;
 147                         goto out;
 148                 }
 149
 150                 ret = posix_acl_to_xattr(acl, value, size);
 151                 if (ret < 0)
 152                         goto out;
 153         }
 154
 155         ret = __btrfs_setxattr(trans, inode, name, value, size, 0);
 156 out:
 157         kfree(value);
 158
 159         if (!ret)
 160                 set_cached_acl(inode, type, acl);
 161
 162         return ret;
 163 }
 164
 165 static int btrfs_xattr_acl_set(struct dentry *dentry, const char *name,
 166                 const void *value, size_t size, int flags, int type)
 167 {
 168         int ret;
 169         struct posix_acl *acl = NULL;
 170
 171         if (!inode_owner_or_capable(dentry->d_inode))
 172                 return -EPERM;
 173
 174         if (!IS_POSIXACL(dentry->d_inode))
 175                 return -EOPNOTSUPP;
 176
 177         if (value) {
 178                 acl = posix_acl_from_xattr(value, size);
 179                 if (IS_ERR(acl))
 180                         return PTR_ERR(acl);
 181
 182                 if (acl) {
 183                         ret = posix_acl_valid(acl);
 184                         if (ret)
 185                                 goto out;
 186                 }
 187         }
 188
 189         ret = btrfs_set_acl(NULL, dentry->d_inode, acl, type);
 190 out:
 191         posix_acl_release(acl);
 192
 193         return ret;
 194 }
 195
 196 int btrfs_check_acl(struct inode *inode, int mask, unsigned int flags)
 197 {
 198         int error = -EAGAIN;
 199
 200         if (flags & IPERM_FLAG_RCU) {
 201                 if (!negative_cached_acl(inode, ACL_TYPE_ACCESS))
 202                         error = -ECHILD;
 203
 204         } else {
 205                 struct posix_acl *acl;
 206                 acl = btrfs_get_acl(inode, ACL_TYPE_ACCESS);
 207                 if (IS_ERR(acl))
 208                         return PTR_ERR(acl);
 209                 if (acl) {
 210                         error = posix_acl_permission(inode, acl, mask);
 211                         posix_acl_release(acl);
 212                 }
 213         }
 214
 215         return error;
 216 }
 217
 218 /*
 219  * btrfs_init_acl is already generally called under fs_mutex, so the locking
 220  * stuff has been fixed to work with that.  If the locking stuff changes, we
 221  * need to re-evaluate the acl locking stuff.
 222  */
 223 int btrfs_init_acl(struct btrfs_trans_handle *trans,
 224                    struct inode *inode, struct inode *dir)
 225 {
 226         struct posix_acl *acl = NULL;
 227         int ret = 0;
 228
 229         /* this happens with subvols */
 230         if (!dir)
 231                 return 0;
 232
 233         if (!S_ISLNK(inode->i_mode)) {
 234                 if (IS_POSIXACL(dir)) {
 235                         acl = btrfs_get_acl(dir, ACL_TYPE_DEFAULT);
 236                         if (IS_ERR(acl))
 237                                 return PTR_ERR(acl);
 238                 }
 239
 240                 if (!acl)
 241                         inode->i_mode &= ~current_umask();
 242         }
 243
 244         if (IS_POSIXACL(dir) && acl) {
 245                 struct posix_acl *clone;
 246                 mode_t mode;
 247
 248                 if (S_ISDIR(inode->i_mode)) {
 249                         ret = btrfs_set_acl(trans, inode, acl,
 250                                             ACL_TYPE_DEFAULT);
 251                         if (ret)
 252                                 goto failed;
 253                 }
 254                 clone = posix_acl_clone(acl, GFP_NOFS);
 255                 ret = -ENOMEM;
 256                 if (!clone)
 257                         goto failed;
 258
 259                 mode = inode->i_mode;
 260                 ret = posix_acl_create_masq(clone, &mode);
 261                 if (ret >= 0) {
 262                         inode->i_mode = mode;
 263                         if (ret > 0) {
 264                                 /* we need an acl */
 265                                 ret = btrfs_set_acl(trans, inode, clone,
 266                                                     ACL_TYPE_ACCESS);
 267                         }
 268                 }
 269                 posix_acl_release(clone);
 270         }
 271 failed:
 272         posix_acl_release(acl);
 273
 274         return ret;
 275 }
 276
 277 int btrfs_acl_chmod(struct inode *inode)
 278 {
 279         struct posix_acl *acl, *clone;
 280         int ret = 0;
 281
 282         if (S_ISLNK(inode->i_mode))
 283                 return -EOPNOTSUPP;
 284
 285         if (!IS_POSIXACL(inode))
 286                 return 0;
 287
 288         acl = btrfs_get_acl(inode, ACL_TYPE_ACCESS);
 289         if (IS_ERR_OR_NULL(acl))
 290                 return PTR_ERR(acl);
 291
 292         clone = posix_acl_clone(acl, GFP_KERNEL);
 293         posix_acl_release(acl);
 294         if (!clone)
 295                 return -ENOMEM;
 296
 297         ret = posix_acl_chmod_masq(clone, inode->i_mode);
 298         if (!ret)
 299                 ret = btrfs_set_acl(NULL, inode, clone, ACL_TYPE_ACCESS);
 300
 301         posix_acl_release(clone);
 302
 303         return ret;
 304 }
 305
 306 const struct xattr_handler btrfs_xattr_acl_default_handler = {
 307         .prefix = POSIX_ACL_XATTR_DEFAULT,
 308         .flags  = ACL_TYPE_DEFAULT,
 309         .get    = btrfs_xattr_acl_get,
 310         .set    = btrfs_xattr_acl_set,
 311 };
 312
 313 const struct xattr_handler btrfs_xattr_acl_access_handler = {
 314         .prefix = POSIX_ACL_XATTR_ACCESS,
 315         .flags  = ACL_TYPE_ACCESS,
 316         .get    = btrfs_xattr_acl_get,
 317         .set    = btrfs_xattr_acl_set,
 318 };