2 * eCryptfs: Linux filesystem encryption layer
4 * Copyright (C) 2004-2006 International Business Machines Corp.
5 * Author(s): Michael A. Halcrow <mhalcrow@us.ibm.com>
6 * Tyler Hicks <tyhicks@ou.edu>
8 * This program is free software; you can redistribute it and/or
9 * modify it under the terms of the GNU General Public License version
10 * 2 as published by the Free Software Foundation.
12 * This program is distributed in the hope that it will be useful, but
13 * WITHOUT ANY WARRANTY; without even the implied warranty of
14 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
15 * General Public License for more details.
17 * You should have received a copy of the GNU General Public License
18 * along with this program; if not, write to the Free Software
19 * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA
23 #include "ecryptfs_kernel.h"
25 static LIST_HEAD(ecryptfs_msg_ctx_free_list
);
26 static LIST_HEAD(ecryptfs_msg_ctx_alloc_list
);
27 static struct mutex ecryptfs_msg_ctx_lists_mux
;
29 static struct hlist_head
*ecryptfs_daemon_id_hash
;
30 static struct mutex ecryptfs_daemon_id_hash_mux
;
31 static int ecryptfs_hash_buckets
;
32 #define ecryptfs_uid_hash(uid) \
33 hash_long((unsigned long)uid, ecryptfs_hash_buckets)
35 static unsigned int ecryptfs_msg_counter
;
36 static struct ecryptfs_msg_ctx
*ecryptfs_msg_ctx_arr
;
39 * ecryptfs_acquire_free_msg_ctx
40 * @msg_ctx: The context that was acquired from the free list
42 * Acquires a context element from the free list and locks the mutex
43 * on the context. Returns zero on success; non-zero on error or upon
44 * failure to acquire a free context element. Be sure to lock the
45 * list mutex before calling.
47 static int ecryptfs_acquire_free_msg_ctx(struct ecryptfs_msg_ctx
**msg_ctx
)
52 if (list_empty(&ecryptfs_msg_ctx_free_list
)) {
53 ecryptfs_printk(KERN_WARNING
, "The eCryptfs free "
54 "context list is empty. It may be helpful to "
55 "specify the ecryptfs_message_buf_len "
56 "parameter to be greater than the current "
57 "value of [%d]\n", ecryptfs_message_buf_len
);
61 list_for_each(p
, &ecryptfs_msg_ctx_free_list
) {
62 *msg_ctx
= list_entry(p
, struct ecryptfs_msg_ctx
, node
);
63 if (mutex_trylock(&(*msg_ctx
)->mux
)) {
64 (*msg_ctx
)->task
= current
;
75 * ecryptfs_msg_ctx_free_to_alloc
76 * @msg_ctx: The context to move from the free list to the alloc list
78 * Be sure to lock the list mutex and the context mutex before
81 static void ecryptfs_msg_ctx_free_to_alloc(struct ecryptfs_msg_ctx
*msg_ctx
)
83 list_move(&msg_ctx
->node
, &ecryptfs_msg_ctx_alloc_list
);
84 msg_ctx
->state
= ECRYPTFS_MSG_CTX_STATE_PENDING
;
85 msg_ctx
->counter
= ++ecryptfs_msg_counter
;
89 * ecryptfs_msg_ctx_alloc_to_free
90 * @msg_ctx: The context to move from the alloc list to the free list
92 * Be sure to lock the list mutex and the context mutex before
95 static void ecryptfs_msg_ctx_alloc_to_free(struct ecryptfs_msg_ctx
*msg_ctx
)
97 list_move(&(msg_ctx
->node
), &ecryptfs_msg_ctx_free_list
);
100 msg_ctx
->state
= ECRYPTFS_MSG_CTX_STATE_FREE
;
104 * ecryptfs_find_daemon_id
105 * @uid: The user id which maps to the desired daemon id
106 * @id: If return value is zero, points to the desired daemon id
109 * Search the hash list for the given user id. Returns zero if the
110 * user id exists in the list; non-zero otherwise. The daemon id hash
111 * mutex should be held before calling this function.
113 static int ecryptfs_find_daemon_id(uid_t uid
, struct ecryptfs_daemon_id
**id
)
115 struct hlist_node
*elem
;
118 hlist_for_each_entry(*id
, elem
,
119 &ecryptfs_daemon_id_hash
[ecryptfs_uid_hash(uid
)],
121 if ((*id
)->uid
== uid
) {
131 static int ecryptfs_send_raw_message(unsigned int transport
, u16 msg_type
,
137 case ECRYPTFS_TRANSPORT_NETLINK
:
138 rc
= ecryptfs_send_netlink(NULL
, 0, NULL
, msg_type
, 0, pid
);
140 case ECRYPTFS_TRANSPORT_CONNECTOR
:
141 case ECRYPTFS_TRANSPORT_RELAYFS
:
149 * ecryptfs_process_helo
150 * @transport: The underlying transport (netlink, etc.)
151 * @uid: The user ID owner of the message
152 * @pid: The process ID for the userspace program that sent the
155 * Adds the uid and pid values to the daemon id hash. If a uid
156 * already has a daemon pid registered, the daemon will be
157 * unregistered before the new daemon id is put into the hash list.
158 * Returns zero after adding a new daemon id to the hash list;
159 * non-zero otherwise.
161 int ecryptfs_process_helo(unsigned int transport
, uid_t uid
, pid_t pid
)
163 struct ecryptfs_daemon_id
*new_id
;
164 struct ecryptfs_daemon_id
*old_id
;
167 mutex_lock(&ecryptfs_daemon_id_hash_mux
);
168 new_id
= kmalloc(sizeof(*new_id
), GFP_KERNEL
);
171 ecryptfs_printk(KERN_ERR
, "Failed to allocate memory; unable "
172 "to register daemon [%d] for user [%d]\n",
176 if (!ecryptfs_find_daemon_id(uid
, &old_id
)) {
177 printk(KERN_WARNING
"Received request from user [%d] "
178 "to register daemon [%d]; unregistering daemon "
179 "[%d]\n", uid
, pid
, old_id
->pid
);
180 hlist_del(&old_id
->id_chain
);
181 rc
= ecryptfs_send_raw_message(transport
, ECRYPTFS_NLMSG_QUIT
,
184 printk(KERN_WARNING
"Failed to send QUIT "
185 "message to daemon [%d]; rc = [%d]\n",
191 hlist_add_head(&new_id
->id_chain
,
192 &ecryptfs_daemon_id_hash
[ecryptfs_uid_hash(uid
)]);
195 mutex_unlock(&ecryptfs_daemon_id_hash_mux
);
200 * ecryptfs_process_quit
201 * @uid: The user ID owner of the message
202 * @pid: The process ID for the userspace program that sent the
205 * Deletes the corresponding daemon id for the given uid and pid, if
206 * it is the registered that is requesting the deletion. Returns zero
207 * after deleting the desired daemon id; non-zero otherwise.
209 int ecryptfs_process_quit(uid_t uid
, pid_t pid
)
211 struct ecryptfs_daemon_id
*id
;
214 mutex_lock(&ecryptfs_daemon_id_hash_mux
);
215 if (ecryptfs_find_daemon_id(uid
, &id
)) {
217 ecryptfs_printk(KERN_ERR
, "Received request from user [%d] to "
218 "unregister unrecognized daemon [%d]\n", uid
,
222 if (id
->pid
!= pid
) {
224 ecryptfs_printk(KERN_WARNING
, "Received request from user [%d] "
225 "with pid [%d] to unregister daemon [%d]\n",
229 hlist_del(&id
->id_chain
);
233 mutex_unlock(&ecryptfs_daemon_id_hash_mux
);
238 * ecryptfs_process_reponse
239 * @msg: The ecryptfs message received; the caller should sanity check
241 * @pid: The process ID of the userspace application that sent the
243 * @seq: The sequence number of the message
245 * Processes a response message after sending a operation request to
246 * userspace. Returns zero upon delivery to desired context element;
247 * non-zero upon delivery failure or error.
249 int ecryptfs_process_response(struct ecryptfs_message
*msg
, uid_t uid
,
252 struct ecryptfs_daemon_id
*id
;
253 struct ecryptfs_msg_ctx
*msg_ctx
;
257 if (msg
->index
>= ecryptfs_message_buf_len
) {
259 ecryptfs_printk(KERN_ERR
, "Attempt to reference "
260 "context buffer at index [%d]; maximum "
261 "allowable is [%d]\n", msg
->index
,
262 (ecryptfs_message_buf_len
- 1));
265 msg_ctx
= &ecryptfs_msg_ctx_arr
[msg
->index
];
266 mutex_lock(&msg_ctx
->mux
);
267 if (ecryptfs_find_daemon_id(msg_ctx
->task
->euid
, &id
)) {
269 ecryptfs_printk(KERN_WARNING
, "User [%d] received a "
270 "message response from process [%d] but does "
271 "not have a registered daemon\n",
272 msg_ctx
->task
->euid
, pid
);
275 if (msg_ctx
->task
->euid
!= uid
) {
277 ecryptfs_printk(KERN_WARNING
, "Received message from user "
278 "[%d]; expected message from user [%d]\n",
279 uid
, msg_ctx
->task
->euid
);
282 if (id
->pid
!= pid
) {
284 ecryptfs_printk(KERN_ERR
, "User [%d] received a "
285 "message response from an unrecognized "
286 "process [%d]\n", msg_ctx
->task
->euid
, pid
);
289 if (msg_ctx
->state
!= ECRYPTFS_MSG_CTX_STATE_PENDING
) {
291 ecryptfs_printk(KERN_WARNING
, "Desired context element is not "
292 "pending a response\n");
294 } else if (msg_ctx
->counter
!= seq
) {
296 ecryptfs_printk(KERN_WARNING
, "Invalid message sequence; "
297 "expected [%d]; received [%d]\n",
298 msg_ctx
->counter
, seq
);
301 msg_size
= sizeof(*msg
) + msg
->data_len
;
302 msg_ctx
->msg
= kmalloc(msg_size
, GFP_KERNEL
);
305 ecryptfs_printk(KERN_ERR
, "Failed to allocate memory\n");
308 memcpy(msg_ctx
->msg
, msg
, msg_size
);
309 msg_ctx
->state
= ECRYPTFS_MSG_CTX_STATE_DONE
;
312 wake_up_process(msg_ctx
->task
);
314 mutex_unlock(&msg_ctx
->mux
);
320 * ecryptfs_send_message
321 * @transport: The transport over which to send the message (i.e.,
323 * @data: The data to send
324 * @data_len: The length of data
325 * @msg_ctx: The message context allocated for the send
327 int ecryptfs_send_message(unsigned int transport
, char *data
, int data_len
,
328 struct ecryptfs_msg_ctx
**msg_ctx
)
330 struct ecryptfs_daemon_id
*id
;
333 mutex_lock(&ecryptfs_daemon_id_hash_mux
);
334 if (ecryptfs_find_daemon_id(current
->euid
, &id
)) {
335 mutex_unlock(&ecryptfs_daemon_id_hash_mux
);
337 ecryptfs_printk(KERN_ERR
, "User [%d] does not have a daemon "
338 "registered\n", current
->euid
);
341 mutex_unlock(&ecryptfs_daemon_id_hash_mux
);
342 mutex_lock(&ecryptfs_msg_ctx_lists_mux
);
343 rc
= ecryptfs_acquire_free_msg_ctx(msg_ctx
);
345 mutex_unlock(&ecryptfs_msg_ctx_lists_mux
);
346 ecryptfs_printk(KERN_WARNING
, "Could not claim a free "
347 "context element\n");
350 ecryptfs_msg_ctx_free_to_alloc(*msg_ctx
);
351 mutex_unlock(&(*msg_ctx
)->mux
);
352 mutex_unlock(&ecryptfs_msg_ctx_lists_mux
);
354 case ECRYPTFS_TRANSPORT_NETLINK
:
355 rc
= ecryptfs_send_netlink(data
, data_len
, *msg_ctx
,
356 ECRYPTFS_NLMSG_REQUEST
, 0, id
->pid
);
358 case ECRYPTFS_TRANSPORT_CONNECTOR
:
359 case ECRYPTFS_TRANSPORT_RELAYFS
:
364 printk(KERN_ERR
"Error attempting to send message to userspace "
365 "daemon; rc = [%d]\n", rc
);
372 * ecryptfs_wait_for_response
373 * @msg_ctx: The context that was assigned when sending a message
374 * @msg: The incoming message from userspace; not set if rc != 0
376 * Sleeps until awaken by ecryptfs_receive_message or until the amount
377 * of time exceeds ecryptfs_message_wait_timeout. If zero is
378 * returned, msg will point to a valid message from userspace; a
379 * non-zero value is returned upon failure to receive a message or an
382 int ecryptfs_wait_for_response(struct ecryptfs_msg_ctx
*msg_ctx
,
383 struct ecryptfs_message
**msg
)
385 signed long timeout
= ecryptfs_message_wait_timeout
* HZ
;
389 timeout
= schedule_timeout_interruptible(timeout
);
390 mutex_lock(&ecryptfs_msg_ctx_lists_mux
);
391 mutex_lock(&msg_ctx
->mux
);
392 if (msg_ctx
->state
!= ECRYPTFS_MSG_CTX_STATE_DONE
) {
394 mutex_unlock(&msg_ctx
->mux
);
395 mutex_unlock(&ecryptfs_msg_ctx_lists_mux
);
403 ecryptfs_msg_ctx_alloc_to_free(msg_ctx
);
404 mutex_unlock(&msg_ctx
->mux
);
405 mutex_unlock(&ecryptfs_msg_ctx_lists_mux
);
409 int ecryptfs_init_messaging(unsigned int transport
)
414 if (ecryptfs_number_of_users
> ECRYPTFS_MAX_NUM_USERS
) {
415 ecryptfs_number_of_users
= ECRYPTFS_MAX_NUM_USERS
;
416 ecryptfs_printk(KERN_WARNING
, "Specified number of users is "
417 "too large, defaulting to [%d] users\n",
418 ecryptfs_number_of_users
);
420 mutex_init(&ecryptfs_daemon_id_hash_mux
);
421 mutex_lock(&ecryptfs_daemon_id_hash_mux
);
422 ecryptfs_hash_buckets
= 0;
423 while (ecryptfs_number_of_users
>> ++ecryptfs_hash_buckets
);
424 ecryptfs_daemon_id_hash
= kmalloc(sizeof(struct hlist_head
)
425 * ecryptfs_hash_buckets
, GFP_KERNEL
);
426 if (!ecryptfs_daemon_id_hash
) {
428 ecryptfs_printk(KERN_ERR
, "Failed to allocate memory\n");
431 for (i
= 0; i
< ecryptfs_hash_buckets
; i
++)
432 INIT_HLIST_HEAD(&ecryptfs_daemon_id_hash
[i
]);
433 mutex_unlock(&ecryptfs_daemon_id_hash_mux
);
435 ecryptfs_msg_ctx_arr
= kmalloc((sizeof(struct ecryptfs_msg_ctx
)
436 * ecryptfs_message_buf_len
), GFP_KERNEL
);
437 if (!ecryptfs_msg_ctx_arr
) {
439 ecryptfs_printk(KERN_ERR
, "Failed to allocate memory\n");
442 mutex_init(&ecryptfs_msg_ctx_lists_mux
);
443 mutex_lock(&ecryptfs_msg_ctx_lists_mux
);
444 ecryptfs_msg_counter
= 0;
445 for (i
= 0; i
< ecryptfs_message_buf_len
; i
++) {
446 INIT_LIST_HEAD(&ecryptfs_msg_ctx_arr
[i
].node
);
447 mutex_init(&ecryptfs_msg_ctx_arr
[i
].mux
);
448 mutex_lock(&ecryptfs_msg_ctx_arr
[i
].mux
);
449 ecryptfs_msg_ctx_arr
[i
].index
= i
;
450 ecryptfs_msg_ctx_arr
[i
].state
= ECRYPTFS_MSG_CTX_STATE_FREE
;
451 ecryptfs_msg_ctx_arr
[i
].counter
= 0;
452 ecryptfs_msg_ctx_arr
[i
].task
= NULL
;
453 ecryptfs_msg_ctx_arr
[i
].msg
= NULL
;
454 list_add_tail(&ecryptfs_msg_ctx_arr
[i
].node
,
455 &ecryptfs_msg_ctx_free_list
);
456 mutex_unlock(&ecryptfs_msg_ctx_arr
[i
].mux
);
458 mutex_unlock(&ecryptfs_msg_ctx_lists_mux
);
460 case ECRYPTFS_TRANSPORT_NETLINK
:
461 rc
= ecryptfs_init_netlink();
463 ecryptfs_release_messaging(transport
);
465 case ECRYPTFS_TRANSPORT_CONNECTOR
:
466 case ECRYPTFS_TRANSPORT_RELAYFS
:
474 void ecryptfs_release_messaging(unsigned int transport
)
476 if (ecryptfs_msg_ctx_arr
) {
479 mutex_lock(&ecryptfs_msg_ctx_lists_mux
);
480 for (i
= 0; i
< ecryptfs_message_buf_len
; i
++) {
481 mutex_lock(&ecryptfs_msg_ctx_arr
[i
].mux
);
482 if (ecryptfs_msg_ctx_arr
[i
].msg
)
483 kfree(ecryptfs_msg_ctx_arr
[i
].msg
);
484 mutex_unlock(&ecryptfs_msg_ctx_arr
[i
].mux
);
486 kfree(ecryptfs_msg_ctx_arr
);
487 mutex_unlock(&ecryptfs_msg_ctx_lists_mux
);
489 if (ecryptfs_daemon_id_hash
) {
490 struct hlist_node
*elem
;
491 struct ecryptfs_daemon_id
*id
;
494 mutex_lock(&ecryptfs_daemon_id_hash_mux
);
495 for (i
= 0; i
< ecryptfs_hash_buckets
; i
++) {
496 hlist_for_each_entry(id
, elem
,
497 &ecryptfs_daemon_id_hash
[i
],
503 kfree(ecryptfs_daemon_id_hash
);
504 mutex_unlock(&ecryptfs_daemon_id_hash_mux
);
507 case ECRYPTFS_TRANSPORT_NETLINK
:
508 ecryptfs_release_netlink();
510 case ECRYPTFS_TRANSPORT_CONNECTOR
:
511 case ECRYPTFS_TRANSPORT_RELAYFS
: