1 | // SPDX-License-Identifier: GPL-2.0 |
2 | /* |
3 | * Process version 3 NFSACL requests. |
4 | * |
5 | * Copyright (C) 2002-2003 Andreas Gruenbacher <agruen@suse.de> |
6 | */ |
7 | |
8 | #include "nfsd.h" |
9 | /* FIXME: nfsacl.h is a broken header */ |
10 | #include <linux/nfsacl.h> |
11 | #include <linux/gfp.h> |
12 | #include "cache.h" |
13 | #include "xdr3.h" |
14 | #include "vfs.h" |
15 | |
16 | /* |
17 | * NULL call. |
18 | */ |
19 | static __be32 |
20 | nfsd3_proc_null(struct svc_rqst *rqstp) |
21 | { |
22 | return rpc_success; |
23 | } |
24 | |
25 | /* |
26 | * Get the Access and/or Default ACL of a file. |
27 | */ |
28 | static __be32 nfsd3_proc_getacl(struct svc_rqst *rqstp) |
29 | { |
30 | struct nfsd3_getaclargs *argp = rqstp->rq_argp; |
31 | struct nfsd3_getaclres *resp = rqstp->rq_resp; |
32 | struct posix_acl *acl; |
33 | struct inode *inode; |
34 | svc_fh *fh; |
35 | |
36 | fh = fh_copy(dst: &resp->fh, src: &argp->fh); |
37 | resp->status = fh_verify(rqstp, &resp->fh, 0, NFSD_MAY_NOP); |
38 | if (resp->status != nfs_ok) |
39 | goto out; |
40 | |
41 | inode = d_inode(dentry: fh->fh_dentry); |
42 | |
43 | if (argp->mask & ~NFS_ACL_MASK) { |
44 | resp->status = nfserr_inval; |
45 | goto out; |
46 | } |
47 | resp->mask = argp->mask; |
48 | |
49 | if (resp->mask & (NFS_ACL|NFS_ACLCNT)) { |
50 | acl = get_inode_acl(inode, ACL_TYPE_ACCESS); |
51 | if (acl == NULL) { |
52 | /* Solaris returns the inode's minimum ACL. */ |
53 | acl = posix_acl_from_mode(inode->i_mode, GFP_KERNEL); |
54 | } |
55 | if (IS_ERR(ptr: acl)) { |
56 | resp->status = nfserrno(errno: PTR_ERR(ptr: acl)); |
57 | goto fail; |
58 | } |
59 | resp->acl_access = acl; |
60 | } |
61 | if (resp->mask & (NFS_DFACL|NFS_DFACLCNT)) { |
62 | /* Check how Solaris handles requests for the Default ACL |
63 | of a non-directory! */ |
64 | acl = get_inode_acl(inode, ACL_TYPE_DEFAULT); |
65 | if (IS_ERR(ptr: acl)) { |
66 | resp->status = nfserrno(errno: PTR_ERR(ptr: acl)); |
67 | goto fail; |
68 | } |
69 | resp->acl_default = acl; |
70 | } |
71 | |
72 | /* resp->acl_{access,default} are released in nfs3svc_release_getacl. */ |
73 | out: |
74 | return rpc_success; |
75 | |
76 | fail: |
77 | posix_acl_release(acl: resp->acl_access); |
78 | posix_acl_release(acl: resp->acl_default); |
79 | goto out; |
80 | } |
81 | |
82 | /* |
83 | * Set the Access and/or Default ACL of a file. |
84 | */ |
85 | static __be32 nfsd3_proc_setacl(struct svc_rqst *rqstp) |
86 | { |
87 | struct nfsd3_setaclargs *argp = rqstp->rq_argp; |
88 | struct nfsd3_attrstat *resp = rqstp->rq_resp; |
89 | struct inode *inode; |
90 | svc_fh *fh; |
91 | int error; |
92 | |
93 | fh = fh_copy(dst: &resp->fh, src: &argp->fh); |
94 | resp->status = fh_verify(rqstp, &resp->fh, 0, NFSD_MAY_SATTR); |
95 | if (resp->status != nfs_ok) |
96 | goto out; |
97 | |
98 | inode = d_inode(dentry: fh->fh_dentry); |
99 | |
100 | error = fh_want_write(fh); |
101 | if (error) |
102 | goto out_errno; |
103 | |
104 | inode_lock(inode); |
105 | |
106 | error = set_posix_acl(&nop_mnt_idmap, fh->fh_dentry, ACL_TYPE_ACCESS, |
107 | argp->acl_access); |
108 | if (error) |
109 | goto out_drop_lock; |
110 | error = set_posix_acl(&nop_mnt_idmap, fh->fh_dentry, ACL_TYPE_DEFAULT, |
111 | argp->acl_default); |
112 | |
113 | out_drop_lock: |
114 | inode_unlock(inode); |
115 | fh_drop_write(fh); |
116 | out_errno: |
117 | resp->status = nfserrno(errno: error); |
118 | out: |
119 | /* argp->acl_{access,default} may have been allocated in |
120 | nfs3svc_decode_setaclargs. */ |
121 | posix_acl_release(acl: argp->acl_access); |
122 | posix_acl_release(acl: argp->acl_default); |
123 | return rpc_success; |
124 | } |
125 | |
126 | /* |
127 | * XDR decode functions |
128 | */ |
129 | |
130 | static bool |
131 | nfs3svc_decode_getaclargs(struct svc_rqst *rqstp, struct xdr_stream *xdr) |
132 | { |
133 | struct nfsd3_getaclargs *args = rqstp->rq_argp; |
134 | |
135 | if (!svcxdr_decode_nfs_fh3(xdr, fhp: &args->fh)) |
136 | return false; |
137 | if (xdr_stream_decode_u32(xdr, ptr: &args->mask) < 0) |
138 | return false; |
139 | |
140 | return true; |
141 | } |
142 | |
143 | static bool |
144 | nfs3svc_decode_setaclargs(struct svc_rqst *rqstp, struct xdr_stream *xdr) |
145 | { |
146 | struct nfsd3_setaclargs *argp = rqstp->rq_argp; |
147 | |
148 | if (!svcxdr_decode_nfs_fh3(xdr, fhp: &argp->fh)) |
149 | return false; |
150 | if (xdr_stream_decode_u32(xdr, ptr: &argp->mask) < 0) |
151 | return false; |
152 | if (argp->mask & ~NFS_ACL_MASK) |
153 | return false; |
154 | if (!nfs_stream_decode_acl(xdr, NULL, pacl: (argp->mask & NFS_ACL) ? |
155 | &argp->acl_access : NULL)) |
156 | return false; |
157 | if (!nfs_stream_decode_acl(xdr, NULL, pacl: (argp->mask & NFS_DFACL) ? |
158 | &argp->acl_default : NULL)) |
159 | return false; |
160 | |
161 | return true; |
162 | } |
163 | |
164 | /* |
165 | * XDR encode functions |
166 | */ |
167 | |
168 | /* GETACL */ |
169 | static bool |
170 | nfs3svc_encode_getaclres(struct svc_rqst *rqstp, struct xdr_stream *xdr) |
171 | { |
172 | struct nfsd3_getaclres *resp = rqstp->rq_resp; |
173 | struct dentry *dentry = resp->fh.fh_dentry; |
174 | struct inode *inode; |
175 | |
176 | if (!svcxdr_encode_nfsstat3(xdr, status: resp->status)) |
177 | return false; |
178 | switch (resp->status) { |
179 | case nfs_ok: |
180 | inode = d_inode(dentry); |
181 | if (!svcxdr_encode_post_op_attr(rqstp, xdr, fhp: &resp->fh)) |
182 | return false; |
183 | if (xdr_stream_encode_u32(xdr, n: resp->mask) < 0) |
184 | return false; |
185 | |
186 | if (!nfs_stream_encode_acl(xdr, inode, acl: resp->acl_access, |
187 | encode_entries: resp->mask & NFS_ACL, typeflag: 0)) |
188 | return false; |
189 | if (!nfs_stream_encode_acl(xdr, inode, acl: resp->acl_default, |
190 | encode_entries: resp->mask & NFS_DFACL, |
191 | NFS_ACL_DEFAULT)) |
192 | return false; |
193 | break; |
194 | default: |
195 | if (!svcxdr_encode_post_op_attr(rqstp, xdr, fhp: &resp->fh)) |
196 | return false; |
197 | } |
198 | |
199 | return true; |
200 | } |
201 | |
202 | /* SETACL */ |
203 | static bool |
204 | nfs3svc_encode_setaclres(struct svc_rqst *rqstp, struct xdr_stream *xdr) |
205 | { |
206 | struct nfsd3_attrstat *resp = rqstp->rq_resp; |
207 | |
208 | return svcxdr_encode_nfsstat3(xdr, status: resp->status) && |
209 | svcxdr_encode_post_op_attr(rqstp, xdr, fhp: &resp->fh); |
210 | } |
211 | |
212 | /* |
213 | * XDR release functions |
214 | */ |
215 | static void nfs3svc_release_getacl(struct svc_rqst *rqstp) |
216 | { |
217 | struct nfsd3_getaclres *resp = rqstp->rq_resp; |
218 | |
219 | fh_put(&resp->fh); |
220 | posix_acl_release(acl: resp->acl_access); |
221 | posix_acl_release(acl: resp->acl_default); |
222 | } |
223 | |
224 | struct nfsd3_voidargs { int dummy; }; |
225 | |
226 | #define ST 1 /* status*/ |
227 | #define AT 21 /* attributes */ |
228 | #define pAT (1+AT) /* post attributes - conditional */ |
229 | #define ACL (1+NFS_ACL_MAX_ENTRIES*3) /* Access Control List */ |
230 | |
231 | static const struct svc_procedure nfsd_acl_procedures3[3] = { |
232 | [ACLPROC3_NULL] = { |
233 | .pc_func = nfsd3_proc_null, |
234 | .pc_decode = nfssvc_decode_voidarg, |
235 | .pc_encode = nfssvc_encode_voidres, |
236 | .pc_argsize = sizeof(struct nfsd_voidargs), |
237 | .pc_argzero = sizeof(struct nfsd_voidargs), |
238 | .pc_ressize = sizeof(struct nfsd_voidres), |
239 | .pc_cachetype = RC_NOCACHE, |
240 | .pc_xdrressize = ST, |
241 | .pc_name = "NULL" , |
242 | }, |
243 | [ACLPROC3_GETACL] = { |
244 | .pc_func = nfsd3_proc_getacl, |
245 | .pc_decode = nfs3svc_decode_getaclargs, |
246 | .pc_encode = nfs3svc_encode_getaclres, |
247 | .pc_release = nfs3svc_release_getacl, |
248 | .pc_argsize = sizeof(struct nfsd3_getaclargs), |
249 | .pc_argzero = sizeof(struct nfsd3_getaclargs), |
250 | .pc_ressize = sizeof(struct nfsd3_getaclres), |
251 | .pc_cachetype = RC_NOCACHE, |
252 | .pc_xdrressize = ST+1+2*(1+ACL), |
253 | .pc_name = "GETACL" , |
254 | }, |
255 | [ACLPROC3_SETACL] = { |
256 | .pc_func = nfsd3_proc_setacl, |
257 | .pc_decode = nfs3svc_decode_setaclargs, |
258 | .pc_encode = nfs3svc_encode_setaclres, |
259 | .pc_release = nfs3svc_release_fhandle, |
260 | .pc_argsize = sizeof(struct nfsd3_setaclargs), |
261 | .pc_argzero = sizeof(struct nfsd3_setaclargs), |
262 | .pc_ressize = sizeof(struct nfsd3_attrstat), |
263 | .pc_cachetype = RC_NOCACHE, |
264 | .pc_xdrressize = ST+pAT, |
265 | .pc_name = "SETACL" , |
266 | }, |
267 | }; |
268 | |
269 | static DEFINE_PER_CPU_ALIGNED(unsigned long, |
270 | nfsd_acl_count3[ARRAY_SIZE(nfsd_acl_procedures3)]); |
271 | const struct svc_version nfsd_acl_version3 = { |
272 | .vs_vers = 3, |
273 | .vs_nproc = ARRAY_SIZE(nfsd_acl_procedures3), |
274 | .vs_proc = nfsd_acl_procedures3, |
275 | .vs_count = nfsd_acl_count3, |
276 | .vs_dispatch = nfsd_dispatch, |
277 | .vs_xdrsize = NFS3_SVC_XDRSIZE, |
278 | }; |
279 | |
280 | |