1 /* 2 * fs/nfsd/nfs4proc.c 3 * 4 * Server-side procedures for NFSv4. 5 * 6 * Copyright (c) 2002 The Regents of the University of Michigan. 7 * All rights reserved. 8 * 9 * Kendrick Smith <kmsmith@umich.edu> 10 * Andy Adamson <andros@umich.edu> 11 * 12 * Redistribution and use in source and binary forms, with or without 13 * modification, are permitted provided that the following conditions 14 * are met: 15 * 16 * 1. Redistributions of source code must retain the above copyright 17 * notice, this list of conditions and the following disclaimer. 18 * 2. Redistributions in binary form must reproduce the above copyright 19 * notice, this list of conditions and the following disclaimer in the 20 * documentation and/or other materials provided with the distribution. 21 * 3. Neither the name of the University nor the names of its 22 * contributors may be used to endorse or promote products derived 23 * from this software without specific prior written permission. 24 * 25 * THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED 26 * WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF 27 * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE 28 * DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE 29 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR 30 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF 31 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR 32 * BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF 33 * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING 34 * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS 35 * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 36 */ 37 38 #include <linux/param.h> 39 #include <linux/major.h> 40 #include <linux/slab.h> 41 #include <linux/file.h> 42 43 #include <linux/sunrpc/svc.h> 44 #include <linux/nfsd/nfsd.h> 45 #include <linux/nfsd/cache.h> 46 #include <linux/nfs4.h> 47 #include <linux/nfsd/state.h> 48 #include <linux/nfsd/xdr4.h> 49 #include <linux/nfs4_acl.h> 50 #include <linux/sunrpc/gss_api.h> 51 52 #define NFSDDBG_FACILITY NFSDDBG_PROC 53 54 static inline void 55 fh_dup2(struct svc_fh *dst, struct svc_fh *src) 56 { 57 fh_put(dst); 58 dget(src->fh_dentry); 59 if (src->fh_export) 60 cache_get(&src->fh_export->h); 61 *dst = *src; 62 } 63 64 static __be32 65 do_open_permission(struct svc_rqst *rqstp, struct svc_fh *current_fh, struct nfsd4_open *open, int accmode) 66 { 67 __be32 status; 68 69 if (open->op_truncate && 70 !(open->op_share_access & NFS4_SHARE_ACCESS_WRITE)) 71 return nfserr_inval; 72 73 if (open->op_share_access & NFS4_SHARE_ACCESS_READ) 74 accmode |= NFSD_MAY_READ; 75 if (open->op_share_access & NFS4_SHARE_ACCESS_WRITE) 76 accmode |= (NFSD_MAY_WRITE | NFSD_MAY_TRUNC); 77 if (open->op_share_deny & NFS4_SHARE_DENY_WRITE) 78 accmode |= NFSD_MAY_WRITE; 79 80 status = fh_verify(rqstp, current_fh, S_IFREG, accmode); 81 82 return status; 83 } 84 85 static __be32 86 do_open_lookup(struct svc_rqst *rqstp, struct svc_fh *current_fh, struct nfsd4_open *open) 87 { 88 struct svc_fh resfh; 89 __be32 status; 90 int created = 0; 91 92 fh_init(&resfh, NFS4_FHSIZE); 93 open->op_truncate = 0; 94 95 if (open->op_create) { 96 /* 97 * Note: create modes (UNCHECKED,GUARDED...) are the same 98 * in NFSv4 as in v3. 99 */ 100 status = nfsd_create_v3(rqstp, current_fh, open->op_fname.data, 101 open->op_fname.len, &open->op_iattr, 102 &resfh, open->op_createmode, 103 (u32 *)open->op_verf.data, 104 &open->op_truncate, &created); 105 106 /* If we ever decide to use different attrs to store the 107 * verifier in nfsd_create_v3, then we'll need to change this 108 */ 109 if (open->op_createmode == NFS4_CREATE_EXCLUSIVE && status == 0) 110 open->op_bmval[1] |= (FATTR4_WORD1_TIME_ACCESS | 111 FATTR4_WORD1_TIME_MODIFY); 112 } else { 113 status = nfsd_lookup(rqstp, current_fh, 114 open->op_fname.data, open->op_fname.len, &resfh); 115 fh_unlock(current_fh); 116 } 117 if (status) 118 goto out; 119 120 set_change_info(&open->op_cinfo, current_fh); 121 122 /* set reply cache */ 123 fh_dup2(current_fh, &resfh); 124 open->op_stateowner->so_replay.rp_openfh_len = resfh.fh_handle.fh_size; 125 memcpy(open->op_stateowner->so_replay.rp_openfh, 126 &resfh.fh_handle.fh_base, resfh.fh_handle.fh_size); 127 128 if (!created) 129 status = do_open_permission(rqstp, current_fh, open, 130 NFSD_MAY_NOP); 131 132 out: 133 fh_put(&resfh); 134 return status; 135 } 136 137 static __be32 138 do_open_fhandle(struct svc_rqst *rqstp, struct svc_fh *current_fh, struct nfsd4_open *open) 139 { 140 __be32 status; 141 142 /* Only reclaims from previously confirmed clients are valid */ 143 if ((status = nfs4_check_open_reclaim(&open->op_clientid))) 144 return status; 145 146 /* We don't know the target directory, and therefore can not 147 * set the change info 148 */ 149 150 memset(&open->op_cinfo, 0, sizeof(struct nfsd4_change_info)); 151 152 /* set replay cache */ 153 open->op_stateowner->so_replay.rp_openfh_len = current_fh->fh_handle.fh_size; 154 memcpy(open->op_stateowner->so_replay.rp_openfh, 155 ¤t_fh->fh_handle.fh_base, 156 current_fh->fh_handle.fh_size); 157 158 open->op_truncate = (open->op_iattr.ia_valid & ATTR_SIZE) && 159 (open->op_iattr.ia_size == 0); 160 161 status = do_open_permission(rqstp, current_fh, open, 162 NFSD_MAY_OWNER_OVERRIDE); 163 164 return status; 165 } 166 167 168 static __be32 169 nfsd4_open(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 170 struct nfsd4_open *open) 171 { 172 __be32 status; 173 dprintk("NFSD: nfsd4_open filename %.*s op_stateowner %p\n", 174 (int)open->op_fname.len, open->op_fname.data, 175 open->op_stateowner); 176 177 /* This check required by spec. */ 178 if (open->op_create && open->op_claim_type != NFS4_OPEN_CLAIM_NULL) 179 return nfserr_inval; 180 181 nfs4_lock_state(); 182 183 /* check seqid for replay. set nfs4_owner */ 184 status = nfsd4_process_open1(open); 185 if (status == nfserr_replay_me) { 186 struct nfs4_replay *rp = &open->op_stateowner->so_replay; 187 fh_put(&cstate->current_fh); 188 cstate->current_fh.fh_handle.fh_size = rp->rp_openfh_len; 189 memcpy(&cstate->current_fh.fh_handle.fh_base, rp->rp_openfh, 190 rp->rp_openfh_len); 191 status = fh_verify(rqstp, &cstate->current_fh, 0, NFSD_MAY_NOP); 192 if (status) 193 dprintk("nfsd4_open: replay failed" 194 " restoring previous filehandle\n"); 195 else 196 status = nfserr_replay_me; 197 } 198 if (status) 199 goto out; 200 201 /* Openowner is now set, so sequence id will get bumped. Now we need 202 * these checks before we do any creates: */ 203 status = nfserr_grace; 204 if (nfs4_in_grace() && open->op_claim_type != NFS4_OPEN_CLAIM_PREVIOUS) 205 goto out; 206 status = nfserr_no_grace; 207 if (!nfs4_in_grace() && open->op_claim_type == NFS4_OPEN_CLAIM_PREVIOUS) 208 goto out; 209 210 switch (open->op_claim_type) { 211 case NFS4_OPEN_CLAIM_DELEGATE_CUR: 212 status = nfserr_inval; 213 if (open->op_create) 214 goto out; 215 /* fall through */ 216 case NFS4_OPEN_CLAIM_NULL: 217 /* 218 * (1) set CURRENT_FH to the file being opened, 219 * creating it if necessary, (2) set open->op_cinfo, 220 * (3) set open->op_truncate if the file is to be 221 * truncated after opening, (4) do permission checking. 222 */ 223 status = do_open_lookup(rqstp, &cstate->current_fh, 224 open); 225 if (status) 226 goto out; 227 break; 228 case NFS4_OPEN_CLAIM_PREVIOUS: 229 open->op_stateowner->so_confirmed = 1; 230 /* 231 * The CURRENT_FH is already set to the file being 232 * opened. (1) set open->op_cinfo, (2) set 233 * open->op_truncate if the file is to be truncated 234 * after opening, (3) do permission checking. 235 */ 236 status = do_open_fhandle(rqstp, &cstate->current_fh, 237 open); 238 if (status) 239 goto out; 240 break; 241 case NFS4_OPEN_CLAIM_DELEGATE_PREV: 242 open->op_stateowner->so_confirmed = 1; 243 dprintk("NFSD: unsupported OPEN claim type %d\n", 244 open->op_claim_type); 245 status = nfserr_notsupp; 246 goto out; 247 default: 248 dprintk("NFSD: Invalid OPEN claim type %d\n", 249 open->op_claim_type); 250 status = nfserr_inval; 251 goto out; 252 } 253 /* 254 * nfsd4_process_open2() does the actual opening of the file. If 255 * successful, it (1) truncates the file if open->op_truncate was 256 * set, (2) sets open->op_stateid, (3) sets open->op_delegation. 257 */ 258 status = nfsd4_process_open2(rqstp, &cstate->current_fh, open); 259 out: 260 if (open->op_stateowner) { 261 nfs4_get_stateowner(open->op_stateowner); 262 cstate->replay_owner = open->op_stateowner; 263 } 264 nfs4_unlock_state(); 265 return status; 266 } 267 268 /* 269 * filehandle-manipulating ops. 270 */ 271 static __be32 272 nfsd4_getfh(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 273 struct svc_fh **getfh) 274 { 275 if (!cstate->current_fh.fh_dentry) 276 return nfserr_nofilehandle; 277 278 *getfh = &cstate->current_fh; 279 return nfs_ok; 280 } 281 282 static __be32 283 nfsd4_putfh(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 284 struct nfsd4_putfh *putfh) 285 { 286 fh_put(&cstate->current_fh); 287 cstate->current_fh.fh_handle.fh_size = putfh->pf_fhlen; 288 memcpy(&cstate->current_fh.fh_handle.fh_base, putfh->pf_fhval, 289 putfh->pf_fhlen); 290 return fh_verify(rqstp, &cstate->current_fh, 0, NFSD_MAY_NOP); 291 } 292 293 static __be32 294 nfsd4_putrootfh(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 295 void *arg) 296 { 297 __be32 status; 298 299 fh_put(&cstate->current_fh); 300 status = exp_pseudoroot(rqstp, &cstate->current_fh); 301 return status; 302 } 303 304 static __be32 305 nfsd4_restorefh(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 306 void *arg) 307 { 308 if (!cstate->save_fh.fh_dentry) 309 return nfserr_restorefh; 310 311 fh_dup2(&cstate->current_fh, &cstate->save_fh); 312 return nfs_ok; 313 } 314 315 static __be32 316 nfsd4_savefh(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 317 void *arg) 318 { 319 if (!cstate->current_fh.fh_dentry) 320 return nfserr_nofilehandle; 321 322 fh_dup2(&cstate->save_fh, &cstate->current_fh); 323 return nfs_ok; 324 } 325 326 /* 327 * misc nfsv4 ops 328 */ 329 static __be32 330 nfsd4_access(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 331 struct nfsd4_access *access) 332 { 333 if (access->ac_req_access & ~NFS3_ACCESS_FULL) 334 return nfserr_inval; 335 336 access->ac_resp_access = access->ac_req_access; 337 return nfsd_access(rqstp, &cstate->current_fh, &access->ac_resp_access, 338 &access->ac_supported); 339 } 340 341 static __be32 342 nfsd4_commit(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 343 struct nfsd4_commit *commit) 344 { 345 __be32 status; 346 347 u32 *p = (u32 *)commit->co_verf.data; 348 *p++ = nfssvc_boot.tv_sec; 349 *p++ = nfssvc_boot.tv_usec; 350 351 status = nfsd_commit(rqstp, &cstate->current_fh, commit->co_offset, 352 commit->co_count); 353 if (status == nfserr_symlink) 354 status = nfserr_inval; 355 return status; 356 } 357 358 static __be32 359 nfsd4_create(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 360 struct nfsd4_create *create) 361 { 362 struct svc_fh resfh; 363 __be32 status; 364 dev_t rdev; 365 366 fh_init(&resfh, NFS4_FHSIZE); 367 368 status = fh_verify(rqstp, &cstate->current_fh, S_IFDIR, 369 NFSD_MAY_CREATE); 370 if (status == nfserr_symlink) 371 status = nfserr_notdir; 372 if (status) 373 return status; 374 375 switch (create->cr_type) { 376 case NF4LNK: 377 /* ugh! we have to null-terminate the linktext, or 378 * vfs_symlink() will choke. it is always safe to 379 * null-terminate by brute force, since at worst we 380 * will overwrite the first byte of the create namelen 381 * in the XDR buffer, which has already been extracted 382 * during XDR decode. 383 */ 384 create->cr_linkname[create->cr_linklen] = 0; 385 386 status = nfsd_symlink(rqstp, &cstate->current_fh, 387 create->cr_name, create->cr_namelen, 388 create->cr_linkname, create->cr_linklen, 389 &resfh, &create->cr_iattr); 390 break; 391 392 case NF4BLK: 393 rdev = MKDEV(create->cr_specdata1, create->cr_specdata2); 394 if (MAJOR(rdev) != create->cr_specdata1 || 395 MINOR(rdev) != create->cr_specdata2) 396 return nfserr_inval; 397 status = nfsd_create(rqstp, &cstate->current_fh, 398 create->cr_name, create->cr_namelen, 399 &create->cr_iattr, S_IFBLK, rdev, &resfh); 400 break; 401 402 case NF4CHR: 403 rdev = MKDEV(create->cr_specdata1, create->cr_specdata2); 404 if (MAJOR(rdev) != create->cr_specdata1 || 405 MINOR(rdev) != create->cr_specdata2) 406 return nfserr_inval; 407 status = nfsd_create(rqstp, &cstate->current_fh, 408 create->cr_name, create->cr_namelen, 409 &create->cr_iattr,S_IFCHR, rdev, &resfh); 410 break; 411 412 case NF4SOCK: 413 status = nfsd_create(rqstp, &cstate->current_fh, 414 create->cr_name, create->cr_namelen, 415 &create->cr_iattr, S_IFSOCK, 0, &resfh); 416 break; 417 418 case NF4FIFO: 419 status = nfsd_create(rqstp, &cstate->current_fh, 420 create->cr_name, create->cr_namelen, 421 &create->cr_iattr, S_IFIFO, 0, &resfh); 422 break; 423 424 case NF4DIR: 425 create->cr_iattr.ia_valid &= ~ATTR_SIZE; 426 status = nfsd_create(rqstp, &cstate->current_fh, 427 create->cr_name, create->cr_namelen, 428 &create->cr_iattr, S_IFDIR, 0, &resfh); 429 break; 430 431 default: 432 status = nfserr_badtype; 433 } 434 435 if (!status) { 436 fh_unlock(&cstate->current_fh); 437 set_change_info(&create->cr_cinfo, &cstate->current_fh); 438 fh_dup2(&cstate->current_fh, &resfh); 439 } 440 441 fh_put(&resfh); 442 return status; 443 } 444 445 static __be32 446 nfsd4_getattr(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 447 struct nfsd4_getattr *getattr) 448 { 449 __be32 status; 450 451 status = fh_verify(rqstp, &cstate->current_fh, 0, NFSD_MAY_NOP); 452 if (status) 453 return status; 454 455 if (getattr->ga_bmval[1] & NFSD_WRITEONLY_ATTRS_WORD1) 456 return nfserr_inval; 457 458 getattr->ga_bmval[0] &= NFSD_SUPPORTED_ATTRS_WORD0; 459 getattr->ga_bmval[1] &= NFSD_SUPPORTED_ATTRS_WORD1; 460 461 getattr->ga_fhp = &cstate->current_fh; 462 return nfs_ok; 463 } 464 465 static __be32 466 nfsd4_link(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 467 struct nfsd4_link *link) 468 { 469 __be32 status = nfserr_nofilehandle; 470 471 if (!cstate->save_fh.fh_dentry) 472 return status; 473 status = nfsd_link(rqstp, &cstate->current_fh, 474 link->li_name, link->li_namelen, &cstate->save_fh); 475 if (!status) 476 set_change_info(&link->li_cinfo, &cstate->current_fh); 477 return status; 478 } 479 480 static __be32 481 nfsd4_lookupp(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 482 void *arg) 483 { 484 struct svc_fh tmp_fh; 485 __be32 ret; 486 487 fh_init(&tmp_fh, NFS4_FHSIZE); 488 ret = exp_pseudoroot(rqstp, &tmp_fh); 489 if (ret) 490 return ret; 491 if (tmp_fh.fh_dentry == cstate->current_fh.fh_dentry) { 492 fh_put(&tmp_fh); 493 return nfserr_noent; 494 } 495 fh_put(&tmp_fh); 496 return nfsd_lookup(rqstp, &cstate->current_fh, 497 "..", 2, &cstate->current_fh); 498 } 499 500 static __be32 501 nfsd4_lookup(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 502 struct nfsd4_lookup *lookup) 503 { 504 return nfsd_lookup(rqstp, &cstate->current_fh, 505 lookup->lo_name, lookup->lo_len, 506 &cstate->current_fh); 507 } 508 509 static __be32 510 nfsd4_read(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 511 struct nfsd4_read *read) 512 { 513 __be32 status; 514 515 /* no need to check permission - this will be done in nfsd_read() */ 516 517 read->rd_filp = NULL; 518 if (read->rd_offset >= OFFSET_MAX) 519 return nfserr_inval; 520 521 nfs4_lock_state(); 522 /* check stateid */ 523 if ((status = nfs4_preprocess_stateid_op(&cstate->current_fh, 524 &read->rd_stateid, 525 CHECK_FH | RD_STATE, &read->rd_filp))) { 526 dprintk("NFSD: nfsd4_read: couldn't process stateid!\n"); 527 goto out; 528 } 529 if (read->rd_filp) 530 get_file(read->rd_filp); 531 status = nfs_ok; 532 out: 533 nfs4_unlock_state(); 534 read->rd_rqstp = rqstp; 535 read->rd_fhp = &cstate->current_fh; 536 return status; 537 } 538 539 static __be32 540 nfsd4_readdir(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 541 struct nfsd4_readdir *readdir) 542 { 543 u64 cookie = readdir->rd_cookie; 544 static const nfs4_verifier zeroverf; 545 546 /* no need to check permission - this will be done in nfsd_readdir() */ 547 548 if (readdir->rd_bmval[1] & NFSD_WRITEONLY_ATTRS_WORD1) 549 return nfserr_inval; 550 551 readdir->rd_bmval[0] &= NFSD_SUPPORTED_ATTRS_WORD0; 552 readdir->rd_bmval[1] &= NFSD_SUPPORTED_ATTRS_WORD1; 553 554 if ((cookie > ~(u32)0) || (cookie == 1) || (cookie == 2) || 555 (cookie == 0 && memcmp(readdir->rd_verf.data, zeroverf.data, NFS4_VERIFIER_SIZE))) 556 return nfserr_bad_cookie; 557 558 readdir->rd_rqstp = rqstp; 559 readdir->rd_fhp = &cstate->current_fh; 560 return nfs_ok; 561 } 562 563 static __be32 564 nfsd4_readlink(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 565 struct nfsd4_readlink *readlink) 566 { 567 readlink->rl_rqstp = rqstp; 568 readlink->rl_fhp = &cstate->current_fh; 569 return nfs_ok; 570 } 571 572 static __be32 573 nfsd4_remove(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 574 struct nfsd4_remove *remove) 575 { 576 __be32 status; 577 578 if (nfs4_in_grace()) 579 return nfserr_grace; 580 status = nfsd_unlink(rqstp, &cstate->current_fh, 0, 581 remove->rm_name, remove->rm_namelen); 582 if (status == nfserr_symlink) 583 return nfserr_notdir; 584 if (!status) { 585 fh_unlock(&cstate->current_fh); 586 set_change_info(&remove->rm_cinfo, &cstate->current_fh); 587 } 588 return status; 589 } 590 591 static __be32 592 nfsd4_rename(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 593 struct nfsd4_rename *rename) 594 { 595 __be32 status = nfserr_nofilehandle; 596 597 if (!cstate->save_fh.fh_dentry) 598 return status; 599 if (nfs4_in_grace() && !(cstate->save_fh.fh_export->ex_flags 600 & NFSEXP_NOSUBTREECHECK)) 601 return nfserr_grace; 602 status = nfsd_rename(rqstp, &cstate->save_fh, rename->rn_sname, 603 rename->rn_snamelen, &cstate->current_fh, 604 rename->rn_tname, rename->rn_tnamelen); 605 606 /* the underlying filesystem returns different error's than required 607 * by NFSv4. both save_fh and current_fh have been verified.. */ 608 if (status == nfserr_isdir) 609 status = nfserr_exist; 610 else if ((status == nfserr_notdir) && 611 (S_ISDIR(cstate->save_fh.fh_dentry->d_inode->i_mode) && 612 S_ISDIR(cstate->current_fh.fh_dentry->d_inode->i_mode))) 613 status = nfserr_exist; 614 else if (status == nfserr_symlink) 615 status = nfserr_notdir; 616 617 if (!status) { 618 set_change_info(&rename->rn_sinfo, &cstate->current_fh); 619 set_change_info(&rename->rn_tinfo, &cstate->save_fh); 620 } 621 return status; 622 } 623 624 static __be32 625 nfsd4_secinfo(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 626 struct nfsd4_secinfo *secinfo) 627 { 628 struct svc_fh resfh; 629 struct svc_export *exp; 630 struct dentry *dentry; 631 __be32 err; 632 633 fh_init(&resfh, NFS4_FHSIZE); 634 err = nfsd_lookup_dentry(rqstp, &cstate->current_fh, 635 secinfo->si_name, secinfo->si_namelen, 636 &exp, &dentry); 637 if (err) 638 return err; 639 if (dentry->d_inode == NULL) { 640 exp_put(exp); 641 err = nfserr_noent; 642 } else 643 secinfo->si_exp = exp; 644 dput(dentry); 645 return err; 646 } 647 648 static __be32 649 nfsd4_setattr(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 650 struct nfsd4_setattr *setattr) 651 { 652 __be32 status = nfs_ok; 653 654 if (setattr->sa_iattr.ia_valid & ATTR_SIZE) { 655 nfs4_lock_state(); 656 status = nfs4_preprocess_stateid_op(&cstate->current_fh, 657 &setattr->sa_stateid, CHECK_FH | WR_STATE, NULL); 658 nfs4_unlock_state(); 659 if (status) { 660 dprintk("NFSD: nfsd4_setattr: couldn't process stateid!\n"); 661 return status; 662 } 663 } 664 status = mnt_want_write(cstate->current_fh.fh_export->ex_path.mnt); 665 if (status) 666 return status; 667 status = nfs_ok; 668 if (setattr->sa_acl != NULL) 669 status = nfsd4_set_nfs4_acl(rqstp, &cstate->current_fh, 670 setattr->sa_acl); 671 if (status) 672 goto out; 673 status = nfsd_setattr(rqstp, &cstate->current_fh, &setattr->sa_iattr, 674 0, (time_t)0); 675 out: 676 mnt_drop_write(cstate->current_fh.fh_export->ex_path.mnt); 677 return status; 678 } 679 680 static __be32 681 nfsd4_write(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 682 struct nfsd4_write *write) 683 { 684 stateid_t *stateid = &write->wr_stateid; 685 struct file *filp = NULL; 686 u32 *p; 687 __be32 status = nfs_ok; 688 689 /* no need to check permission - this will be done in nfsd_write() */ 690 691 if (write->wr_offset >= OFFSET_MAX) 692 return nfserr_inval; 693 694 nfs4_lock_state(); 695 status = nfs4_preprocess_stateid_op(&cstate->current_fh, stateid, 696 CHECK_FH | WR_STATE, &filp); 697 if (filp) 698 get_file(filp); 699 nfs4_unlock_state(); 700 701 if (status) { 702 dprintk("NFSD: nfsd4_write: couldn't process stateid!\n"); 703 return status; 704 } 705 706 write->wr_bytes_written = write->wr_buflen; 707 write->wr_how_written = write->wr_stable_how; 708 p = (u32 *)write->wr_verifier.data; 709 *p++ = nfssvc_boot.tv_sec; 710 *p++ = nfssvc_boot.tv_usec; 711 712 status = nfsd_write(rqstp, &cstate->current_fh, filp, 713 write->wr_offset, rqstp->rq_vec, write->wr_vlen, 714 write->wr_buflen, &write->wr_how_written); 715 if (filp) 716 fput(filp); 717 718 if (status == nfserr_symlink) 719 status = nfserr_inval; 720 return status; 721 } 722 723 /* This routine never returns NFS_OK! If there are no other errors, it 724 * will return NFSERR_SAME or NFSERR_NOT_SAME depending on whether the 725 * attributes matched. VERIFY is implemented by mapping NFSERR_SAME 726 * to NFS_OK after the call; NVERIFY by mapping NFSERR_NOT_SAME to NFS_OK. 727 */ 728 static __be32 729 _nfsd4_verify(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 730 struct nfsd4_verify *verify) 731 { 732 __be32 *buf, *p; 733 int count; 734 __be32 status; 735 736 status = fh_verify(rqstp, &cstate->current_fh, 0, NFSD_MAY_NOP); 737 if (status) 738 return status; 739 740 if ((verify->ve_bmval[0] & ~NFSD_SUPPORTED_ATTRS_WORD0) 741 || (verify->ve_bmval[1] & ~NFSD_SUPPORTED_ATTRS_WORD1)) 742 return nfserr_attrnotsupp; 743 if ((verify->ve_bmval[0] & FATTR4_WORD0_RDATTR_ERROR) 744 || (verify->ve_bmval[1] & NFSD_WRITEONLY_ATTRS_WORD1)) 745 return nfserr_inval; 746 if (verify->ve_attrlen & 3) 747 return nfserr_inval; 748 749 /* count in words: 750 * bitmap_len(1) + bitmap(2) + attr_len(1) = 4 751 */ 752 count = 4 + (verify->ve_attrlen >> 2); 753 buf = kmalloc(count << 2, GFP_KERNEL); 754 if (!buf) 755 return nfserr_resource; 756 757 status = nfsd4_encode_fattr(&cstate->current_fh, 758 cstate->current_fh.fh_export, 759 cstate->current_fh.fh_dentry, buf, 760 &count, verify->ve_bmval, 761 rqstp, 0); 762 763 /* this means that nfsd4_encode_fattr() ran out of space */ 764 if (status == nfserr_resource && count == 0) 765 status = nfserr_not_same; 766 if (status) 767 goto out_kfree; 768 769 p = buf + 3; 770 status = nfserr_not_same; 771 if (ntohl(*p++) != verify->ve_attrlen) 772 goto out_kfree; 773 if (!memcmp(p, verify->ve_attrval, verify->ve_attrlen)) 774 status = nfserr_same; 775 776 out_kfree: 777 kfree(buf); 778 return status; 779 } 780 781 static __be32 782 nfsd4_nverify(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 783 struct nfsd4_verify *verify) 784 { 785 __be32 status; 786 787 status = _nfsd4_verify(rqstp, cstate, verify); 788 return status == nfserr_not_same ? nfs_ok : status; 789 } 790 791 static __be32 792 nfsd4_verify(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 793 struct nfsd4_verify *verify) 794 { 795 __be32 status; 796 797 status = _nfsd4_verify(rqstp, cstate, verify); 798 return status == nfserr_same ? nfs_ok : status; 799 } 800 801 /* 802 * NULL call. 803 */ 804 static __be32 805 nfsd4_proc_null(struct svc_rqst *rqstp, void *argp, void *resp) 806 { 807 return nfs_ok; 808 } 809 810 static inline void nfsd4_increment_op_stats(u32 opnum) 811 { 812 if (opnum >= FIRST_NFS4_OP && opnum <= LAST_NFS4_OP) 813 nfsdstats.nfs4_opcount[opnum]++; 814 } 815 816 static void cstate_free(struct nfsd4_compound_state *cstate) 817 { 818 if (cstate == NULL) 819 return; 820 fh_put(&cstate->current_fh); 821 fh_put(&cstate->save_fh); 822 BUG_ON(cstate->replay_owner); 823 kfree(cstate); 824 } 825 826 static struct nfsd4_compound_state *cstate_alloc(void) 827 { 828 struct nfsd4_compound_state *cstate; 829 830 cstate = kmalloc(sizeof(struct nfsd4_compound_state), GFP_KERNEL); 831 if (cstate == NULL) 832 return NULL; 833 fh_init(&cstate->current_fh, NFS4_FHSIZE); 834 fh_init(&cstate->save_fh, NFS4_FHSIZE); 835 cstate->replay_owner = NULL; 836 return cstate; 837 } 838 839 typedef __be32(*nfsd4op_func)(struct svc_rqst *, struct nfsd4_compound_state *, 840 void *); 841 842 struct nfsd4_operation { 843 nfsd4op_func op_func; 844 u32 op_flags; 845 /* Most ops require a valid current filehandle; a few don't: */ 846 #define ALLOWED_WITHOUT_FH 1 847 /* GETATTR and ops not listed as returning NFS4ERR_MOVED: */ 848 #define ALLOWED_ON_ABSENT_FS 2 849 char *op_name; 850 }; 851 852 static struct nfsd4_operation nfsd4_ops[]; 853 854 static inline char *nfsd4_op_name(unsigned opnum); 855 856 /* 857 * COMPOUND call. 858 */ 859 static __be32 860 nfsd4_proc_compound(struct svc_rqst *rqstp, 861 struct nfsd4_compoundargs *args, 862 struct nfsd4_compoundres *resp) 863 { 864 struct nfsd4_op *op; 865 struct nfsd4_operation *opdesc; 866 struct nfsd4_compound_state *cstate = NULL; 867 int slack_bytes; 868 __be32 status; 869 870 status = nfserr_resource; 871 cstate = cstate_alloc(); 872 if (cstate == NULL) 873 goto out; 874 875 resp->xbuf = &rqstp->rq_res; 876 resp->p = rqstp->rq_res.head[0].iov_base + rqstp->rq_res.head[0].iov_len; 877 resp->tagp = resp->p; 878 /* reserve space for: taglen, tag, and opcnt */ 879 resp->p += 2 + XDR_QUADLEN(args->taglen); 880 resp->end = rqstp->rq_res.head[0].iov_base + PAGE_SIZE; 881 resp->taglen = args->taglen; 882 resp->tag = args->tag; 883 resp->opcnt = 0; 884 resp->rqstp = rqstp; 885 886 /* 887 * According to RFC3010, this takes precedence over all other errors. 888 */ 889 status = nfserr_minor_vers_mismatch; 890 if (args->minorversion > NFSD_SUPPORTED_MINOR_VERSION) 891 goto out; 892 893 status = nfs_ok; 894 while (!status && resp->opcnt < args->opcnt) { 895 op = &args->ops[resp->opcnt++]; 896 897 dprintk("nfsv4 compound op #%d/%d: %d (%s)\n", 898 resp->opcnt, args->opcnt, op->opnum, 899 nfsd4_op_name(op->opnum)); 900 901 /* 902 * The XDR decode routines may have pre-set op->status; 903 * for example, if there is a miscellaneous XDR error 904 * it will be set to nfserr_bad_xdr. 905 */ 906 if (op->status) 907 goto encode_op; 908 909 /* We must be able to encode a successful response to 910 * this operation, with enough room left over to encode a 911 * failed response to the next operation. If we don't 912 * have enough room, fail with ERR_RESOURCE. 913 */ 914 slack_bytes = (char *)resp->end - (char *)resp->p; 915 if (slack_bytes < COMPOUND_SLACK_SPACE 916 + COMPOUND_ERR_SLACK_SPACE) { 917 BUG_ON(slack_bytes < COMPOUND_ERR_SLACK_SPACE); 918 op->status = nfserr_resource; 919 goto encode_op; 920 } 921 922 opdesc = &nfsd4_ops[op->opnum]; 923 924 if (!cstate->current_fh.fh_dentry) { 925 if (!(opdesc->op_flags & ALLOWED_WITHOUT_FH)) { 926 op->status = nfserr_nofilehandle; 927 goto encode_op; 928 } 929 } else if (cstate->current_fh.fh_export->ex_fslocs.migrated && 930 !(opdesc->op_flags & ALLOWED_ON_ABSENT_FS)) { 931 op->status = nfserr_moved; 932 goto encode_op; 933 } 934 935 if (opdesc->op_func) 936 op->status = opdesc->op_func(rqstp, cstate, &op->u); 937 else 938 BUG_ON(op->status == nfs_ok); 939 940 encode_op: 941 if (op->status == nfserr_replay_me) { 942 op->replay = &cstate->replay_owner->so_replay; 943 nfsd4_encode_replay(resp, op); 944 status = op->status = op->replay->rp_status; 945 } else { 946 nfsd4_encode_operation(resp, op); 947 status = op->status; 948 } 949 if (cstate->replay_owner) { 950 nfs4_put_stateowner(cstate->replay_owner); 951 cstate->replay_owner = NULL; 952 } 953 /* XXX Ugh, we need to get rid of this kind of special case: */ 954 if (op->opnum == OP_READ && op->u.read.rd_filp) 955 fput(op->u.read.rd_filp); 956 957 nfsd4_increment_op_stats(op->opnum); 958 } 959 960 out: 961 nfsd4_release_compoundargs(args); 962 cstate_free(cstate); 963 dprintk("nfsv4 compound returned %d\n", ntohl(status)); 964 return status; 965 } 966 967 static struct nfsd4_operation nfsd4_ops[OP_RELEASE_LOCKOWNER+1] = { 968 [OP_ACCESS] = { 969 .op_func = (nfsd4op_func)nfsd4_access, 970 .op_name = "OP_ACCESS", 971 }, 972 [OP_CLOSE] = { 973 .op_func = (nfsd4op_func)nfsd4_close, 974 .op_name = "OP_CLOSE", 975 }, 976 [OP_COMMIT] = { 977 .op_func = (nfsd4op_func)nfsd4_commit, 978 .op_name = "OP_COMMIT", 979 }, 980 [OP_CREATE] = { 981 .op_func = (nfsd4op_func)nfsd4_create, 982 .op_name = "OP_CREATE", 983 }, 984 [OP_DELEGRETURN] = { 985 .op_func = (nfsd4op_func)nfsd4_delegreturn, 986 .op_name = "OP_DELEGRETURN", 987 }, 988 [OP_GETATTR] = { 989 .op_func = (nfsd4op_func)nfsd4_getattr, 990 .op_flags = ALLOWED_ON_ABSENT_FS, 991 .op_name = "OP_GETATTR", 992 }, 993 [OP_GETFH] = { 994 .op_func = (nfsd4op_func)nfsd4_getfh, 995 .op_name = "OP_GETFH", 996 }, 997 [OP_LINK] = { 998 .op_func = (nfsd4op_func)nfsd4_link, 999 .op_name = "OP_LINK", 1000 }, 1001 [OP_LOCK] = { 1002 .op_func = (nfsd4op_func)nfsd4_lock, 1003 .op_name = "OP_LOCK", 1004 }, 1005 [OP_LOCKT] = { 1006 .op_func = (nfsd4op_func)nfsd4_lockt, 1007 .op_name = "OP_LOCKT", 1008 }, 1009 [OP_LOCKU] = { 1010 .op_func = (nfsd4op_func)nfsd4_locku, 1011 .op_name = "OP_LOCKU", 1012 }, 1013 [OP_LOOKUP] = { 1014 .op_func = (nfsd4op_func)nfsd4_lookup, 1015 .op_name = "OP_LOOKUP", 1016 }, 1017 [OP_LOOKUPP] = { 1018 .op_func = (nfsd4op_func)nfsd4_lookupp, 1019 .op_name = "OP_LOOKUPP", 1020 }, 1021 [OP_NVERIFY] = { 1022 .op_func = (nfsd4op_func)nfsd4_nverify, 1023 .op_name = "OP_NVERIFY", 1024 }, 1025 [OP_OPEN] = { 1026 .op_func = (nfsd4op_func)nfsd4_open, 1027 .op_name = "OP_OPEN", 1028 }, 1029 [OP_OPEN_CONFIRM] = { 1030 .op_func = (nfsd4op_func)nfsd4_open_confirm, 1031 .op_name = "OP_OPEN_CONFIRM", 1032 }, 1033 [OP_OPEN_DOWNGRADE] = { 1034 .op_func = (nfsd4op_func)nfsd4_open_downgrade, 1035 .op_name = "OP_OPEN_DOWNGRADE", 1036 }, 1037 [OP_PUTFH] = { 1038 .op_func = (nfsd4op_func)nfsd4_putfh, 1039 .op_flags = ALLOWED_WITHOUT_FH | ALLOWED_ON_ABSENT_FS, 1040 .op_name = "OP_PUTFH", 1041 }, 1042 [OP_PUTPUBFH] = { 1043 /* unsupported, just for future reference: */ 1044 .op_flags = ALLOWED_WITHOUT_FH | ALLOWED_ON_ABSENT_FS, 1045 .op_name = "OP_PUTPUBFH", 1046 }, 1047 [OP_PUTROOTFH] = { 1048 .op_func = (nfsd4op_func)nfsd4_putrootfh, 1049 .op_flags = ALLOWED_WITHOUT_FH | ALLOWED_ON_ABSENT_FS, 1050 .op_name = "OP_PUTROOTFH", 1051 }, 1052 [OP_READ] = { 1053 .op_func = (nfsd4op_func)nfsd4_read, 1054 .op_name = "OP_READ", 1055 }, 1056 [OP_READDIR] = { 1057 .op_func = (nfsd4op_func)nfsd4_readdir, 1058 .op_name = "OP_READDIR", 1059 }, 1060 [OP_READLINK] = { 1061 .op_func = (nfsd4op_func)nfsd4_readlink, 1062 .op_name = "OP_READLINK", 1063 }, 1064 [OP_REMOVE] = { 1065 .op_func = (nfsd4op_func)nfsd4_remove, 1066 .op_name = "OP_REMOVE", 1067 }, 1068 [OP_RENAME] = { 1069 .op_name = "OP_RENAME", 1070 .op_func = (nfsd4op_func)nfsd4_rename, 1071 }, 1072 [OP_RENEW] = { 1073 .op_func = (nfsd4op_func)nfsd4_renew, 1074 .op_flags = ALLOWED_WITHOUT_FH | ALLOWED_ON_ABSENT_FS, 1075 .op_name = "OP_RENEW", 1076 }, 1077 [OP_RESTOREFH] = { 1078 .op_func = (nfsd4op_func)nfsd4_restorefh, 1079 .op_flags = ALLOWED_WITHOUT_FH | ALLOWED_ON_ABSENT_FS, 1080 .op_name = "OP_RESTOREFH", 1081 }, 1082 [OP_SAVEFH] = { 1083 .op_func = (nfsd4op_func)nfsd4_savefh, 1084 .op_name = "OP_SAVEFH", 1085 }, 1086 [OP_SECINFO] = { 1087 .op_func = (nfsd4op_func)nfsd4_secinfo, 1088 .op_name = "OP_SECINFO", 1089 }, 1090 [OP_SETATTR] = { 1091 .op_func = (nfsd4op_func)nfsd4_setattr, 1092 .op_name = "OP_SETATTR", 1093 }, 1094 [OP_SETCLIENTID] = { 1095 .op_func = (nfsd4op_func)nfsd4_setclientid, 1096 .op_flags = ALLOWED_WITHOUT_FH | ALLOWED_ON_ABSENT_FS, 1097 .op_name = "OP_SETCLIENTID", 1098 }, 1099 [OP_SETCLIENTID_CONFIRM] = { 1100 .op_func = (nfsd4op_func)nfsd4_setclientid_confirm, 1101 .op_flags = ALLOWED_WITHOUT_FH | ALLOWED_ON_ABSENT_FS, 1102 .op_name = "OP_SETCLIENTID_CONFIRM", 1103 }, 1104 [OP_VERIFY] = { 1105 .op_func = (nfsd4op_func)nfsd4_verify, 1106 .op_name = "OP_VERIFY", 1107 }, 1108 [OP_WRITE] = { 1109 .op_func = (nfsd4op_func)nfsd4_write, 1110 .op_name = "OP_WRITE", 1111 }, 1112 [OP_RELEASE_LOCKOWNER] = { 1113 .op_func = (nfsd4op_func)nfsd4_release_lockowner, 1114 .op_flags = ALLOWED_WITHOUT_FH | ALLOWED_ON_ABSENT_FS, 1115 .op_name = "OP_RELEASE_LOCKOWNER", 1116 }, 1117 }; 1118 1119 static inline char * 1120 nfsd4_op_name(unsigned opnum) 1121 { 1122 if (opnum < ARRAY_SIZE(nfsd4_ops)) 1123 return nfsd4_ops[opnum].op_name; 1124 return "unknown_operation"; 1125 } 1126 1127 #define nfs4svc_decode_voidargs NULL 1128 #define nfs4svc_release_void NULL 1129 #define nfsd4_voidres nfsd4_voidargs 1130 #define nfs4svc_release_compound NULL 1131 struct nfsd4_voidargs { int dummy; }; 1132 1133 #define PROC(name, argt, rest, relt, cache, respsize) \ 1134 { (svc_procfunc) nfsd4_proc_##name, \ 1135 (kxdrproc_t) nfs4svc_decode_##argt##args, \ 1136 (kxdrproc_t) nfs4svc_encode_##rest##res, \ 1137 (kxdrproc_t) nfs4svc_release_##relt, \ 1138 sizeof(struct nfsd4_##argt##args), \ 1139 sizeof(struct nfsd4_##rest##res), \ 1140 0, \ 1141 cache, \ 1142 respsize, \ 1143 } 1144 1145 /* 1146 * TODO: At the present time, the NFSv4 server does not do XID caching 1147 * of requests. Implementing XID caching would not be a serious problem, 1148 * although it would require a mild change in interfaces since one 1149 * doesn't know whether an NFSv4 request is idempotent until after the 1150 * XDR decode. However, XID caching totally confuses pynfs (Peter 1151 * Astrand's regression testsuite for NFSv4 servers), which reuses 1152 * XID's liberally, so I've left it unimplemented until pynfs generates 1153 * better XID's. 1154 */ 1155 static struct svc_procedure nfsd_procedures4[2] = { 1156 PROC(null, void, void, void, RC_NOCACHE, 1), 1157 PROC(compound, compound, compound, compound, RC_NOCACHE, NFSD_BUFSIZE/4) 1158 }; 1159 1160 struct svc_version nfsd_version4 = { 1161 .vs_vers = 4, 1162 .vs_nproc = 2, 1163 .vs_proc = nfsd_procedures4, 1164 .vs_dispatch = nfsd_dispatch, 1165 .vs_xdrsize = NFS4_SVC_XDRSIZE, 1166 }; 1167 1168 /* 1169 * Local variables: 1170 * c-basic-offset: 8 1171 * End: 1172 */ 1173