1b2441318SGreg Kroah-Hartman // SPDX-License-Identifier: GPL-2.0 21da177e4SLinus Torvalds /* 31da177e4SLinus Torvalds * File operations used by nfsd. Some of these have been ripped from 41da177e4SLinus Torvalds * other parts of the kernel because they weren't exported, others 51da177e4SLinus Torvalds * are partial duplicates with added or changed functionality. 61da177e4SLinus Torvalds * 71da177e4SLinus Torvalds * Note that several functions dget() the dentry upon which they want 81da177e4SLinus Torvalds * to act, most notably those that create directory entries. Response 91da177e4SLinus Torvalds * dentry's are dput()'d if necessary in the release callback. 101da177e4SLinus Torvalds * So if you notice code paths that apparently fail to dput() the 111da177e4SLinus Torvalds * dentry, don't worry--they have been taken care of. 121da177e4SLinus Torvalds * 131da177e4SLinus Torvalds * Copyright (C) 1995-1999 Olaf Kirch <okir@monad.swb.de> 141da177e4SLinus Torvalds * Zerocpy NFS support (C) 2002 Hirokazu Takahashi <taka@valinux.co.jp> 151da177e4SLinus Torvalds */ 161da177e4SLinus Torvalds 171da177e4SLinus Torvalds #include <linux/fs.h> 181da177e4SLinus Torvalds #include <linux/file.h> 19d6b29d7cSJens Axboe #include <linux/splice.h> 2095d871f0SAnna Schumaker #include <linux/falloc.h> 211da177e4SLinus Torvalds #include <linux/fcntl.h> 221da177e4SLinus Torvalds #include <linux/namei.h> 231da177e4SLinus Torvalds #include <linux/delay.h> 240eeca283SRobert Love #include <linux/fsnotify.h> 251da177e4SLinus Torvalds #include <linux/posix_acl_xattr.h> 261da177e4SLinus Torvalds #include <linux/xattr.h> 279a74af21SBoaz Harrosh #include <linux/jhash.h> 289a74af21SBoaz Harrosh #include <linux/ima.h> 295a0e3ad6STejun Heo #include <linux/slab.h> 307c0f6ba6SLinus Torvalds #include <linux/uaccess.h> 31f501912aSBen Myers #include <linux/exportfs.h> 32f501912aSBen Myers #include <linux/writeback.h> 3318032ca0SDavid Quigley #include <linux/security.h> 349a74af21SBoaz Harrosh 359a74af21SBoaz Harrosh #ifdef CONFIG_NFSD_V3 369a74af21SBoaz Harrosh #include "xdr3.h" 379a74af21SBoaz Harrosh #endif /* CONFIG_NFSD_V3 */ 389a74af21SBoaz Harrosh 395be196e5SChristoph Hellwig #ifdef CONFIG_NFSD_V4 40ffa0160aSChristoph Hellwig #include "../internal.h" 412ca72e17SJ. Bruce Fields #include "acl.h" 422ca72e17SJ. Bruce Fields #include "idmap.h" 431da177e4SLinus Torvalds #endif /* CONFIG_NFSD_V4 */ 441da177e4SLinus Torvalds 459a74af21SBoaz Harrosh #include "nfsd.h" 469a74af21SBoaz Harrosh #include "vfs.h" 47b4935239SJeff Layton #include "filecache.h" 486e8b50d1SJeff Layton #include "trace.h" 491da177e4SLinus Torvalds 501da177e4SLinus Torvalds #define NFSDDBG_FACILITY NFSDDBG_FILEOP 511da177e4SLinus Torvalds 521da177e4SLinus Torvalds /* 531da177e4SLinus Torvalds * Called from nfsd_lookup and encode_dirent. Check if we have crossed 541da177e4SLinus Torvalds * a mount point. 55e0bb89efSJ.Bruce Fields * Returns -EAGAIN or -ETIMEDOUT leaving *dpp and *expp unchanged, 561da177e4SLinus Torvalds * or nfs_ok having possibly changed *dpp and *expp 571da177e4SLinus Torvalds */ 581da177e4SLinus Torvalds int 591da177e4SLinus Torvalds nfsd_cross_mnt(struct svc_rqst *rqstp, struct dentry **dpp, 601da177e4SLinus Torvalds struct svc_export **expp) 611da177e4SLinus Torvalds { 621da177e4SLinus Torvalds struct svc_export *exp = *expp, *exp2 = NULL; 631da177e4SLinus Torvalds struct dentry *dentry = *dpp; 6491c9fa8fSAl Viro struct path path = {.mnt = mntget(exp->ex_path.mnt), 6591c9fa8fSAl Viro .dentry = dget(dentry)}; 666264d69dSAl Viro int err = 0; 671da177e4SLinus Torvalds 687cc90cc3SAl Viro err = follow_down(&path); 69cc53ce53SDavid Howells if (err < 0) 70cc53ce53SDavid Howells goto out; 7199bbf6ecSNeilBrown if (path.mnt == exp->ex_path.mnt && path.dentry == dentry && 7299bbf6ecSNeilBrown nfsd_mountpoint(dentry, exp) == 2) { 7399bbf6ecSNeilBrown /* This is only a mountpoint in some other namespace */ 7499bbf6ecSNeilBrown path_put(&path); 7599bbf6ecSNeilBrown goto out; 7699bbf6ecSNeilBrown } 771da177e4SLinus Torvalds 7891c9fa8fSAl Viro exp2 = rqst_exp_get_by_name(rqstp, &path); 791da177e4SLinus Torvalds if (IS_ERR(exp2)) { 801da177e4SLinus Torvalds err = PTR_ERR(exp2); 813b6cee7bSJ. Bruce Fields /* 823b6cee7bSJ. Bruce Fields * We normally allow NFS clients to continue 833b6cee7bSJ. Bruce Fields * "underneath" a mountpoint that is not exported. 843b6cee7bSJ. Bruce Fields * The exception is V4ROOT, where no traversal is ever 853b6cee7bSJ. Bruce Fields * allowed without an explicit export of the new 863b6cee7bSJ. Bruce Fields * directory. 873b6cee7bSJ. Bruce Fields */ 883b6cee7bSJ. Bruce Fields if (err == -ENOENT && !(exp->ex_flags & NFSEXP_V4ROOT)) 893b6cee7bSJ. Bruce Fields err = 0; 9091c9fa8fSAl Viro path_put(&path); 911da177e4SLinus Torvalds goto out; 921da177e4SLinus Torvalds } 933c394ddaSSteve Dickson if (nfsd_v4client(rqstp) || 943c394ddaSSteve Dickson (exp->ex_flags & NFSEXP_CROSSMOUNT) || EX_NOHIDE(exp2)) { 951da177e4SLinus Torvalds /* successfully crossed mount point */ 961644ccc8SAl Viro /* 9791c9fa8fSAl Viro * This is subtle: path.dentry is *not* on path.mnt 9891c9fa8fSAl Viro * at this point. The only reason we are safe is that 9991c9fa8fSAl Viro * original mnt is pinned down by exp, so we should 10091c9fa8fSAl Viro * put path *before* putting exp 1011644ccc8SAl Viro */ 10291c9fa8fSAl Viro *dpp = path.dentry; 10391c9fa8fSAl Viro path.dentry = dentry; 1041644ccc8SAl Viro *expp = exp2; 10591c9fa8fSAl Viro exp2 = exp; 1061da177e4SLinus Torvalds } 10791c9fa8fSAl Viro path_put(&path); 10891c9fa8fSAl Viro exp_put(exp2); 1091da177e4SLinus Torvalds out: 1101da177e4SLinus Torvalds return err; 1111da177e4SLinus Torvalds } 1121da177e4SLinus Torvalds 113289ede45SJ. Bruce Fields static void follow_to_parent(struct path *path) 114289ede45SJ. Bruce Fields { 115289ede45SJ. Bruce Fields struct dentry *dp; 116289ede45SJ. Bruce Fields 117289ede45SJ. Bruce Fields while (path->dentry == path->mnt->mnt_root && follow_up(path)) 118289ede45SJ. Bruce Fields ; 119289ede45SJ. Bruce Fields dp = dget_parent(path->dentry); 120289ede45SJ. Bruce Fields dput(path->dentry); 121289ede45SJ. Bruce Fields path->dentry = dp; 122289ede45SJ. Bruce Fields } 123289ede45SJ. Bruce Fields 124289ede45SJ. Bruce Fields static int nfsd_lookup_parent(struct svc_rqst *rqstp, struct dentry *dparent, struct svc_export **exp, struct dentry **dentryp) 125289ede45SJ. Bruce Fields { 126289ede45SJ. Bruce Fields struct svc_export *exp2; 127289ede45SJ. Bruce Fields struct path path = {.mnt = mntget((*exp)->ex_path.mnt), 128289ede45SJ. Bruce Fields .dentry = dget(dparent)}; 129289ede45SJ. Bruce Fields 130289ede45SJ. Bruce Fields follow_to_parent(&path); 131289ede45SJ. Bruce Fields 132289ede45SJ. Bruce Fields exp2 = rqst_exp_parent(rqstp, &path); 133289ede45SJ. Bruce Fields if (PTR_ERR(exp2) == -ENOENT) { 134289ede45SJ. Bruce Fields *dentryp = dget(dparent); 135289ede45SJ. Bruce Fields } else if (IS_ERR(exp2)) { 136289ede45SJ. Bruce Fields path_put(&path); 137289ede45SJ. Bruce Fields return PTR_ERR(exp2); 138289ede45SJ. Bruce Fields } else { 139289ede45SJ. Bruce Fields *dentryp = dget(path.dentry); 140289ede45SJ. Bruce Fields exp_put(*exp); 141289ede45SJ. Bruce Fields *exp = exp2; 142289ede45SJ. Bruce Fields } 143289ede45SJ. Bruce Fields path_put(&path); 144289ede45SJ. Bruce Fields return 0; 145289ede45SJ. Bruce Fields } 146289ede45SJ. Bruce Fields 14782ead7feSJ. Bruce Fields /* 14882ead7feSJ. Bruce Fields * For nfsd purposes, we treat V4ROOT exports as though there was an 14982ead7feSJ. Bruce Fields * export at *every* directory. 15099bbf6ecSNeilBrown * We return: 15199bbf6ecSNeilBrown * '1' if this dentry *must* be an export point, 15299bbf6ecSNeilBrown * '2' if it might be, if there is really a mount here, and 15399bbf6ecSNeilBrown * '0' if there is no chance of an export point here. 15482ead7feSJ. Bruce Fields */ 1553227fa41SJ. Bruce Fields int nfsd_mountpoint(struct dentry *dentry, struct svc_export *exp) 15682ead7feSJ. Bruce Fields { 15799bbf6ecSNeilBrown if (!d_inode(dentry)) 15899bbf6ecSNeilBrown return 0; 15999bbf6ecSNeilBrown if (exp->ex_flags & NFSEXP_V4ROOT) 16082ead7feSJ. Bruce Fields return 1; 16111fcee02STrond Myklebust if (nfsd4_is_junction(dentry)) 16211fcee02STrond Myklebust return 1; 16399bbf6ecSNeilBrown if (d_mountpoint(dentry)) 16499bbf6ecSNeilBrown /* 16599bbf6ecSNeilBrown * Might only be a mountpoint in a different namespace, 16699bbf6ecSNeilBrown * but we need to check. 16799bbf6ecSNeilBrown */ 16899bbf6ecSNeilBrown return 2; 16982ead7feSJ. Bruce Fields return 0; 17082ead7feSJ. Bruce Fields } 17182ead7feSJ. Bruce Fields 1726264d69dSAl Viro __be32 1736c0a654dSJ. Bruce Fields nfsd_lookup_dentry(struct svc_rqst *rqstp, struct svc_fh *fhp, 1745a022fc8SChuck Lever const char *name, unsigned int len, 1756c0a654dSJ. Bruce Fields struct svc_export **exp_ret, struct dentry **dentry_ret) 1761da177e4SLinus Torvalds { 1771da177e4SLinus Torvalds struct svc_export *exp; 1781da177e4SLinus Torvalds struct dentry *dparent; 1791da177e4SLinus Torvalds struct dentry *dentry; 1806264d69dSAl Viro int host_err; 1811da177e4SLinus Torvalds 1821da177e4SLinus Torvalds dprintk("nfsd: nfsd_lookup(fh %s, %.*s)\n", SVCFH_fmt(fhp), len,name); 1831da177e4SLinus Torvalds 1841da177e4SLinus Torvalds dparent = fhp->fh_dentry; 185bf18f163SKinglong Mee exp = exp_get(fhp->fh_export); 1861da177e4SLinus Torvalds 1871da177e4SLinus Torvalds /* Lookup the name, but don't follow links */ 1881da177e4SLinus Torvalds if (isdotent(name, len)) { 1891da177e4SLinus Torvalds if (len==1) 1901da177e4SLinus Torvalds dentry = dget(dparent); 19154775491SJan Blunck else if (dparent != exp->ex_path.dentry) 1921da177e4SLinus Torvalds dentry = dget_parent(dparent); 193fed83811SJ. Bruce Fields else if (!EX_NOHIDE(exp) && !nfsd_v4client(rqstp)) 1941da177e4SLinus Torvalds dentry = dget(dparent); /* .. == . just like at / */ 1951da177e4SLinus Torvalds else { 1961da177e4SLinus Torvalds /* checking mountpoint crossing is very different when stepping up */ 197289ede45SJ. Bruce Fields host_err = nfsd_lookup_parent(rqstp, dparent, &exp, &dentry); 198289ede45SJ. Bruce Fields if (host_err) 1991da177e4SLinus Torvalds goto out_nfserr; 2001da177e4SLinus Torvalds } 2011da177e4SLinus Torvalds } else { 2024335723eSJ. Bruce Fields /* 2034335723eSJ. Bruce Fields * In the nfsd4_open() case, this may be held across 2044335723eSJ. Bruce Fields * subsequent open and delegation acquisition which may 2054335723eSJ. Bruce Fields * need to take the child's i_mutex: 2064335723eSJ. Bruce Fields */ 2074335723eSJ. Bruce Fields fh_lock_nested(fhp, I_MUTEX_PARENT); 2081da177e4SLinus Torvalds dentry = lookup_one_len(name, dparent, len); 2096264d69dSAl Viro host_err = PTR_ERR(dentry); 2101da177e4SLinus Torvalds if (IS_ERR(dentry)) 2111da177e4SLinus Torvalds goto out_nfserr; 21282ead7feSJ. Bruce Fields if (nfsd_mountpoint(dentry, exp)) { 213bbddca8eSNeilBrown /* 214bbddca8eSNeilBrown * We don't need the i_mutex after all. It's 215bbddca8eSNeilBrown * still possible we could open this (regular 216bbddca8eSNeilBrown * files can be mountpoints too), but the 217bbddca8eSNeilBrown * i_mutex is just there to prevent renames of 218bbddca8eSNeilBrown * something that we might be about to delegate, 219bbddca8eSNeilBrown * and a mountpoint won't be renamed: 220bbddca8eSNeilBrown */ 221bbddca8eSNeilBrown fh_unlock(fhp); 2226264d69dSAl Viro if ((host_err = nfsd_cross_mnt(rqstp, &dentry, &exp))) { 2231da177e4SLinus Torvalds dput(dentry); 2241da177e4SLinus Torvalds goto out_nfserr; 2251da177e4SLinus Torvalds } 2261da177e4SLinus Torvalds } 2271da177e4SLinus Torvalds } 2286c0a654dSJ. Bruce Fields *dentry_ret = dentry; 2296c0a654dSJ. Bruce Fields *exp_ret = exp; 2306c0a654dSJ. Bruce Fields return 0; 2316c0a654dSJ. Bruce Fields 2326c0a654dSJ. Bruce Fields out_nfserr: 2336c0a654dSJ. Bruce Fields exp_put(exp); 2346c0a654dSJ. Bruce Fields return nfserrno(host_err); 2356c0a654dSJ. Bruce Fields } 2366c0a654dSJ. Bruce Fields 2376c0a654dSJ. Bruce Fields /* 2386c0a654dSJ. Bruce Fields * Look up one component of a pathname. 2396c0a654dSJ. Bruce Fields * N.B. After this call _both_ fhp and resfh need an fh_put 2406c0a654dSJ. Bruce Fields * 2416c0a654dSJ. Bruce Fields * If the lookup would cross a mountpoint, and the mounted filesystem 2426c0a654dSJ. Bruce Fields * is exported to the client with NFSEXP_NOHIDE, then the lookup is 2436c0a654dSJ. Bruce Fields * accepted as it stands and the mounted directory is 2446c0a654dSJ. Bruce Fields * returned. Otherwise the covered directory is returned. 2456c0a654dSJ. Bruce Fields * NOTE: this mountpoint crossing is not supported properly by all 2466c0a654dSJ. Bruce Fields * clients and is explicitly disallowed for NFSv3 2476c0a654dSJ. Bruce Fields * NeilBrown <neilb@cse.unsw.edu.au> 2486c0a654dSJ. Bruce Fields */ 2496c0a654dSJ. Bruce Fields __be32 2506c0a654dSJ. Bruce Fields nfsd_lookup(struct svc_rqst *rqstp, struct svc_fh *fhp, const char *name, 2515a022fc8SChuck Lever unsigned int len, struct svc_fh *resfh) 2526c0a654dSJ. Bruce Fields { 2536c0a654dSJ. Bruce Fields struct svc_export *exp; 2546c0a654dSJ. Bruce Fields struct dentry *dentry; 2556c0a654dSJ. Bruce Fields __be32 err; 2566c0a654dSJ. Bruce Fields 25729a78a3eSJ. Bruce Fields err = fh_verify(rqstp, fhp, S_IFDIR, NFSD_MAY_EXEC); 25829a78a3eSJ. Bruce Fields if (err) 25929a78a3eSJ. Bruce Fields return err; 2606c0a654dSJ. Bruce Fields err = nfsd_lookup_dentry(rqstp, fhp, name, len, &exp, &dentry); 2616c0a654dSJ. Bruce Fields if (err) 2626c0a654dSJ. Bruce Fields return err; 26332c1eb0cSAndy Adamson err = check_nfsd_access(exp, rqstp); 26432c1eb0cSAndy Adamson if (err) 26532c1eb0cSAndy Adamson goto out; 2661da177e4SLinus Torvalds /* 2671da177e4SLinus Torvalds * Note: we compose the file handle now, but as the 2681da177e4SLinus Torvalds * dentry may be negative, it may need to be updated. 2691da177e4SLinus Torvalds */ 2701da177e4SLinus Torvalds err = fh_compose(resfh, exp, dentry, fhp); 2712b0143b5SDavid Howells if (!err && d_really_is_negative(dentry)) 2721da177e4SLinus Torvalds err = nfserr_noent; 27332c1eb0cSAndy Adamson out: 2741da177e4SLinus Torvalds dput(dentry); 2751da177e4SLinus Torvalds exp_put(exp); 2761da177e4SLinus Torvalds return err; 2771da177e4SLinus Torvalds } 2781da177e4SLinus Torvalds 279f501912aSBen Myers /* 280f501912aSBen Myers * Commit metadata changes to stable storage. 281f501912aSBen Myers */ 282f501912aSBen Myers static int 28357f64034STrond Myklebust commit_inode_metadata(struct inode *inode) 284f501912aSBen Myers { 285f501912aSBen Myers const struct export_operations *export_ops = inode->i_sb->s_export_op; 286f501912aSBen Myers 287c3765016SChristoph Hellwig if (export_ops->commit_metadata) 288c3765016SChristoph Hellwig return export_ops->commit_metadata(inode); 289c3765016SChristoph Hellwig return sync_inode_metadata(inode, 1); 290f501912aSBen Myers } 2916c0a654dSJ. Bruce Fields 29257f64034STrond Myklebust static int 29357f64034STrond Myklebust commit_metadata(struct svc_fh *fhp) 29457f64034STrond Myklebust { 29557f64034STrond Myklebust struct inode *inode = d_inode(fhp->fh_dentry); 29657f64034STrond Myklebust 29757f64034STrond Myklebust if (!EX_ISSYNC(fhp->fh_export)) 29857f64034STrond Myklebust return 0; 29957f64034STrond Myklebust return commit_inode_metadata(inode); 30057f64034STrond Myklebust } 30157f64034STrond Myklebust 3021da177e4SLinus Torvalds /* 303818e5a22SChristoph Hellwig * Go over the attributes and take care of the small differences between 304818e5a22SChristoph Hellwig * NFS semantics and what Linux expects. 305818e5a22SChristoph Hellwig */ 306818e5a22SChristoph Hellwig static void 307818e5a22SChristoph Hellwig nfsd_sanitize_attrs(struct inode *inode, struct iattr *iap) 308818e5a22SChristoph Hellwig { 309818e5a22SChristoph Hellwig /* sanitize the mode change */ 310818e5a22SChristoph Hellwig if (iap->ia_valid & ATTR_MODE) { 311818e5a22SChristoph Hellwig iap->ia_mode &= S_IALLUGO; 312818e5a22SChristoph Hellwig iap->ia_mode |= (inode->i_mode & ~S_IALLUGO); 313818e5a22SChristoph Hellwig } 314818e5a22SChristoph Hellwig 315818e5a22SChristoph Hellwig /* Revoke setuid/setgid on chown */ 316818e5a22SChristoph Hellwig if (!S_ISDIR(inode->i_mode) && 317c4fa6d7cSStanislav Kholmanskikh ((iap->ia_valid & ATTR_UID) || (iap->ia_valid & ATTR_GID))) { 318818e5a22SChristoph Hellwig iap->ia_valid |= ATTR_KILL_PRIV; 319818e5a22SChristoph Hellwig if (iap->ia_valid & ATTR_MODE) { 320818e5a22SChristoph Hellwig /* we're setting mode too, just clear the s*id bits */ 321818e5a22SChristoph Hellwig iap->ia_mode &= ~S_ISUID; 322818e5a22SChristoph Hellwig if (iap->ia_mode & S_IXGRP) 323818e5a22SChristoph Hellwig iap->ia_mode &= ~S_ISGID; 324818e5a22SChristoph Hellwig } else { 325818e5a22SChristoph Hellwig /* set ATTR_KILL_* bits and let VFS handle it */ 326818e5a22SChristoph Hellwig iap->ia_valid |= (ATTR_KILL_SUID | ATTR_KILL_SGID); 327818e5a22SChristoph Hellwig } 328818e5a22SChristoph Hellwig } 329818e5a22SChristoph Hellwig } 330818e5a22SChristoph Hellwig 3310839ffb8SJ. Bruce Fields static __be32 3320839ffb8SJ. Bruce Fields nfsd_get_write_access(struct svc_rqst *rqstp, struct svc_fh *fhp, 3330839ffb8SJ. Bruce Fields struct iattr *iap) 3340839ffb8SJ. Bruce Fields { 3350839ffb8SJ. Bruce Fields struct inode *inode = d_inode(fhp->fh_dentry); 3360839ffb8SJ. Bruce Fields int host_err; 3370839ffb8SJ. Bruce Fields 3380839ffb8SJ. Bruce Fields if (iap->ia_size < inode->i_size) { 3390839ffb8SJ. Bruce Fields __be32 err; 3400839ffb8SJ. Bruce Fields 3410839ffb8SJ. Bruce Fields err = nfsd_permission(rqstp, fhp->fh_export, fhp->fh_dentry, 3420839ffb8SJ. Bruce Fields NFSD_MAY_TRUNC | NFSD_MAY_OWNER_OVERRIDE); 3430839ffb8SJ. Bruce Fields if (err) 3440839ffb8SJ. Bruce Fields return err; 3450839ffb8SJ. Bruce Fields } 3460839ffb8SJ. Bruce Fields 3470839ffb8SJ. Bruce Fields host_err = get_write_access(inode); 3480839ffb8SJ. Bruce Fields if (host_err) 3490839ffb8SJ. Bruce Fields goto out_nfserrno; 3500839ffb8SJ. Bruce Fields 3510839ffb8SJ. Bruce Fields host_err = locks_verify_truncate(inode, NULL, iap->ia_size); 3520839ffb8SJ. Bruce Fields if (host_err) 3530839ffb8SJ. Bruce Fields goto out_put_write_access; 3540839ffb8SJ. Bruce Fields return 0; 3550839ffb8SJ. Bruce Fields 3560839ffb8SJ. Bruce Fields out_put_write_access: 3570839ffb8SJ. Bruce Fields put_write_access(inode); 3580839ffb8SJ. Bruce Fields out_nfserrno: 3590839ffb8SJ. Bruce Fields return nfserrno(host_err); 3600839ffb8SJ. Bruce Fields } 3610839ffb8SJ. Bruce Fields 362818e5a22SChristoph Hellwig /* 363818e5a22SChristoph Hellwig * Set various file attributes. After this call fhp needs an fh_put. 3641da177e4SLinus Torvalds */ 3656264d69dSAl Viro __be32 3661da177e4SLinus Torvalds nfsd_setattr(struct svc_rqst *rqstp, struct svc_fh *fhp, struct iattr *iap, 3672a1aa489SArnd Bergmann int check_guard, time64_t guardtime) 3681da177e4SLinus Torvalds { 3691da177e4SLinus Torvalds struct dentry *dentry; 3701da177e4SLinus Torvalds struct inode *inode; 3718837abcaSMiklos Szeredi int accmode = NFSD_MAY_SATTR; 372175a4eb7SAl Viro umode_t ftype = 0; 3736264d69dSAl Viro __be32 err; 3746264d69dSAl Viro int host_err; 3759f67f189SJ. Bruce Fields bool get_write_count; 376758e99feSChristoph Hellwig bool size_change = (iap->ia_valid & ATTR_SIZE); 3771da177e4SLinus Torvalds 378255fbca6Szhengbin if (iap->ia_valid & ATTR_SIZE) { 3798837abcaSMiklos Szeredi accmode |= NFSD_MAY_WRITE|NFSD_MAY_OWNER_OVERRIDE; 3801da177e4SLinus Torvalds ftype = S_IFREG; 381255fbca6Szhengbin } 382255fbca6Szhengbin 383255fbca6Szhengbin /* 384255fbca6Szhengbin * If utimes(2) and friends are called with times not NULL, we should 385255fbca6Szhengbin * not set NFSD_MAY_WRITE bit. Otherwise fh_verify->nfsd_permission 386e977cc83SGeert Uytterhoeven * will return EACCES, when the caller's effective UID does not match 387255fbca6Szhengbin * the owner of the file, and the caller is not privileged. In this 388255fbca6Szhengbin * situation, we should return EPERM(notify_change will return this). 389255fbca6Szhengbin */ 390255fbca6Szhengbin if (iap->ia_valid & (ATTR_ATIME | ATTR_MTIME)) { 391255fbca6Szhengbin accmode |= NFSD_MAY_OWNER_OVERRIDE; 392255fbca6Szhengbin if (!(iap->ia_valid & (ATTR_ATIME_SET | ATTR_MTIME_SET))) 393255fbca6Szhengbin accmode |= NFSD_MAY_WRITE; 394255fbca6Szhengbin } 3951da177e4SLinus Torvalds 3969f67f189SJ. Bruce Fields /* Callers that do fh_verify should do the fh_want_write: */ 3979f67f189SJ. Bruce Fields get_write_count = !fhp->fh_dentry; 3989f67f189SJ. Bruce Fields 3991da177e4SLinus Torvalds /* Get inode */ 4001da177e4SLinus Torvalds err = fh_verify(rqstp, fhp, ftype, accmode); 40115b7a1b8SNeilBrown if (err) 402758e99feSChristoph Hellwig return err; 4039f67f189SJ. Bruce Fields if (get_write_count) { 4049f67f189SJ. Bruce Fields host_err = fh_want_write(fhp); 4059f67f189SJ. Bruce Fields if (host_err) 406758e99feSChristoph Hellwig goto out; 4079f67f189SJ. Bruce Fields } 4081da177e4SLinus Torvalds 4091da177e4SLinus Torvalds dentry = fhp->fh_dentry; 4102b0143b5SDavid Howells inode = d_inode(dentry); 4111da177e4SLinus Torvalds 41215b7a1b8SNeilBrown /* Ignore any mode updates on symlinks */ 41315b7a1b8SNeilBrown if (S_ISLNK(inode->i_mode)) 41415b7a1b8SNeilBrown iap->ia_valid &= ~ATTR_MODE; 41515b7a1b8SNeilBrown 41615b7a1b8SNeilBrown if (!iap->ia_valid) 417758e99feSChristoph Hellwig return 0; 41815b7a1b8SNeilBrown 419818e5a22SChristoph Hellwig nfsd_sanitize_attrs(inode, iap); 4201da177e4SLinus Torvalds 421758e99feSChristoph Hellwig if (check_guard && guardtime != inode->i_ctime.tv_sec) 422758e99feSChristoph Hellwig return nfserr_notsync; 423758e99feSChristoph Hellwig 424f0c63124SChristoph Hellwig /* 42541f53350SChristoph Hellwig * The size case is special, it changes the file in addition to the 426783112f7SChristoph Hellwig * attributes, and file systems don't expect it to be mixed with 427783112f7SChristoph Hellwig * "random" attribute changes. We thus split out the size change 428783112f7SChristoph Hellwig * into a separate call to ->setattr, and do the rest as a separate 429783112f7SChristoph Hellwig * setattr call. 430f0c63124SChristoph Hellwig */ 431758e99feSChristoph Hellwig if (size_change) { 4320839ffb8SJ. Bruce Fields err = nfsd_get_write_access(rqstp, fhp, iap); 4330839ffb8SJ. Bruce Fields if (err) 434758e99feSChristoph Hellwig return err; 435783112f7SChristoph Hellwig } 43641f53350SChristoph Hellwig 437783112f7SChristoph Hellwig fh_lock(fhp); 438783112f7SChristoph Hellwig if (size_change) { 43941f53350SChristoph Hellwig /* 4400839ffb8SJ. Bruce Fields * RFC5661, Section 18.30.4: 4410839ffb8SJ. Bruce Fields * Changing the size of a file with SETATTR indirectly 4420839ffb8SJ. Bruce Fields * changes the time_modify and change attributes. 4430839ffb8SJ. Bruce Fields * 4440839ffb8SJ. Bruce Fields * (and similar for the older RFCs) 44541f53350SChristoph Hellwig */ 446783112f7SChristoph Hellwig struct iattr size_attr = { 447783112f7SChristoph Hellwig .ia_valid = ATTR_SIZE | ATTR_CTIME | ATTR_MTIME, 448783112f7SChristoph Hellwig .ia_size = iap->ia_size, 449783112f7SChristoph Hellwig }; 450783112f7SChristoph Hellwig 451*2f221d6fSChristian Brauner host_err = notify_change(&init_user_ns, dentry, &size_attr, NULL); 452783112f7SChristoph Hellwig if (host_err) 453783112f7SChristoph Hellwig goto out_unlock; 454783112f7SChristoph Hellwig iap->ia_valid &= ~ATTR_SIZE; 455783112f7SChristoph Hellwig 456783112f7SChristoph Hellwig /* 457783112f7SChristoph Hellwig * Avoid the additional setattr call below if the only other 458783112f7SChristoph Hellwig * attribute that the client sends is the mtime, as we update 459783112f7SChristoph Hellwig * it as part of the size change above. 460783112f7SChristoph Hellwig */ 461783112f7SChristoph Hellwig if ((iap->ia_valid & ~ATTR_MTIME) == 0) 462783112f7SChristoph Hellwig goto out_unlock; 4631da177e4SLinus Torvalds } 4641da177e4SLinus Torvalds 4651da177e4SLinus Torvalds iap->ia_valid |= ATTR_CTIME; 466*2f221d6fSChristian Brauner host_err = notify_change(&init_user_ns, dentry, iap, NULL); 467987da479SChristoph Hellwig 468783112f7SChristoph Hellwig out_unlock: 469783112f7SChristoph Hellwig fh_unlock(fhp); 4700839ffb8SJ. Bruce Fields if (size_change) 4710839ffb8SJ. Bruce Fields put_write_access(inode); 4720839ffb8SJ. Bruce Fields out: 473758e99feSChristoph Hellwig if (!host_err) 474758e99feSChristoph Hellwig host_err = commit_metadata(fhp); 475758e99feSChristoph Hellwig return nfserrno(host_err); 4761da177e4SLinus Torvalds } 4771da177e4SLinus Torvalds 4785be196e5SChristoph Hellwig #if defined(CONFIG_NFSD_V4) 4799b4146e8SChuck Lever /* 4809b4146e8SChuck Lever * NFS junction information is stored in an extended attribute. 4819b4146e8SChuck Lever */ 4829b4146e8SChuck Lever #define NFSD_JUNCTION_XATTR_NAME XATTR_TRUSTED_PREFIX "junction.nfs" 4839b4146e8SChuck Lever 4849b4146e8SChuck Lever /** 4859b4146e8SChuck Lever * nfsd4_is_junction - Test if an object could be an NFS junction 4869b4146e8SChuck Lever * 4879b4146e8SChuck Lever * @dentry: object to test 4889b4146e8SChuck Lever * 4899b4146e8SChuck Lever * Returns 1 if "dentry" appears to contain NFS junction information. 4909b4146e8SChuck Lever * Otherwise 0 is returned. 4919b4146e8SChuck Lever */ 49211fcee02STrond Myklebust int nfsd4_is_junction(struct dentry *dentry) 49311fcee02STrond Myklebust { 4942b0143b5SDavid Howells struct inode *inode = d_inode(dentry); 49511fcee02STrond Myklebust 49611fcee02STrond Myklebust if (inode == NULL) 49711fcee02STrond Myklebust return 0; 49811fcee02STrond Myklebust if (inode->i_mode & S_IXUGO) 49911fcee02STrond Myklebust return 0; 50011fcee02STrond Myklebust if (!(inode->i_mode & S_ISVTX)) 50111fcee02STrond Myklebust return 0; 5029b4146e8SChuck Lever if (vfs_getxattr(dentry, NFSD_JUNCTION_XATTR_NAME, NULL, 0) <= 0) 50311fcee02STrond Myklebust return 0; 50411fcee02STrond Myklebust return 1; 50511fcee02STrond Myklebust } 50618032ca0SDavid Quigley #ifdef CONFIG_NFSD_V4_SECURITY_LABEL 50718032ca0SDavid Quigley __be32 nfsd4_set_nfs4_label(struct svc_rqst *rqstp, struct svc_fh *fhp, 50818032ca0SDavid Quigley struct xdr_netobj *label) 50918032ca0SDavid Quigley { 51018032ca0SDavid Quigley __be32 error; 51118032ca0SDavid Quigley int host_error; 51218032ca0SDavid Quigley struct dentry *dentry; 51318032ca0SDavid Quigley 51418032ca0SDavid Quigley error = fh_verify(rqstp, fhp, 0 /* S_IFREG */, NFSD_MAY_SATTR); 51518032ca0SDavid Quigley if (error) 51618032ca0SDavid Quigley return error; 51718032ca0SDavid Quigley 51818032ca0SDavid Quigley dentry = fhp->fh_dentry; 51918032ca0SDavid Quigley 5205955102cSAl Viro inode_lock(d_inode(dentry)); 52118032ca0SDavid Quigley host_error = security_inode_setsecctx(dentry, label->data, label->len); 5225955102cSAl Viro inode_unlock(d_inode(dentry)); 52318032ca0SDavid Quigley return nfserrno(host_error); 52418032ca0SDavid Quigley } 52518032ca0SDavid Quigley #else 52618032ca0SDavid Quigley __be32 nfsd4_set_nfs4_label(struct svc_rqst *rqstp, struct svc_fh *fhp, 52718032ca0SDavid Quigley struct xdr_netobj *label) 52818032ca0SDavid Quigley { 52918032ca0SDavid Quigley return nfserr_notsupp; 53018032ca0SDavid Quigley } 53118032ca0SDavid Quigley #endif 53218032ca0SDavid Quigley 533b66ae6ddSTrond Myklebust __be32 nfsd4_clone_file_range(struct nfsd_file *nf_src, u64 src_pos, 534b66ae6ddSTrond Myklebust struct nfsd_file *nf_dst, u64 dst_pos, u64 count, bool sync) 535ffa0160aSChristoph Hellwig { 536b66ae6ddSTrond Myklebust struct file *src = nf_src->nf_file; 537b66ae6ddSTrond Myklebust struct file *dst = nf_dst->nf_file; 53842ec3d4cSDarrick J. Wong loff_t cloned; 5391b28d756STrond Myklebust __be32 ret = 0; 54042ec3d4cSDarrick J. Wong 5411b28d756STrond Myklebust down_write(&nf_dst->nf_rwsem); 542452ce659SDarrick J. Wong cloned = vfs_clone_file_range(src, src_pos, dst, dst_pos, count, 0); 5431b28d756STrond Myklebust if (cloned < 0) { 5441b28d756STrond Myklebust ret = nfserrno(cloned); 5451b28d756STrond Myklebust goto out_err; 5461b28d756STrond Myklebust } 5471b28d756STrond Myklebust if (count && cloned != count) { 5481b28d756STrond Myklebust ret = nfserrno(-EINVAL); 5491b28d756STrond Myklebust goto out_err; 5501b28d756STrond Myklebust } 551a25e3726STrond Myklebust if (sync) { 552a25e3726STrond Myklebust loff_t dst_end = count ? dst_pos + count - 1 : LLONG_MAX; 553a25e3726STrond Myklebust int status = vfs_fsync_range(dst, dst_pos, dst_end, 0); 55457f64034STrond Myklebust 55557f64034STrond Myklebust if (!status) 55657f64034STrond Myklebust status = commit_inode_metadata(file_inode(src)); 5571b28d756STrond Myklebust if (status < 0) { 5581b28d756STrond Myklebust nfsd_reset_boot_verifier(net_generic(nf_dst->nf_net, 5591b28d756STrond Myklebust nfsd_net_id)); 5601b28d756STrond Myklebust ret = nfserrno(status); 561a25e3726STrond Myklebust } 5621b28d756STrond Myklebust } 5631b28d756STrond Myklebust out_err: 5641b28d756STrond Myklebust up_write(&nf_dst->nf_rwsem); 5651b28d756STrond Myklebust return ret; 566ffa0160aSChristoph Hellwig } 567ffa0160aSChristoph Hellwig 56829ae7f9dSAnna Schumaker ssize_t nfsd_copy_file_range(struct file *src, u64 src_pos, struct file *dst, 56929ae7f9dSAnna Schumaker u64 dst_pos, u64 count) 57029ae7f9dSAnna Schumaker { 57129ae7f9dSAnna Schumaker 57229ae7f9dSAnna Schumaker /* 57329ae7f9dSAnna Schumaker * Limit copy to 4MB to prevent indefinitely blocking an nfsd 57429ae7f9dSAnna Schumaker * thread and client rpc slot. The choice of 4MB is somewhat 57529ae7f9dSAnna Schumaker * arbitrary. We might instead base this on r/wsize, or make it 57629ae7f9dSAnna Schumaker * tunable, or use a time instead of a byte limit, or implement 57729ae7f9dSAnna Schumaker * asynchronous copy. In theory a client could also recognize a 57829ae7f9dSAnna Schumaker * limit like this and pipeline multiple COPY requests. 57929ae7f9dSAnna Schumaker */ 58029ae7f9dSAnna Schumaker count = min_t(u64, count, 1 << 22); 58129ae7f9dSAnna Schumaker return vfs_copy_file_range(src, src_pos, dst, dst_pos, count, 0); 58229ae7f9dSAnna Schumaker } 58329ae7f9dSAnna Schumaker 58495d871f0SAnna Schumaker __be32 nfsd4_vfs_fallocate(struct svc_rqst *rqstp, struct svc_fh *fhp, 58595d871f0SAnna Schumaker struct file *file, loff_t offset, loff_t len, 58695d871f0SAnna Schumaker int flags) 58795d871f0SAnna Schumaker { 58895d871f0SAnna Schumaker int error; 58995d871f0SAnna Schumaker 59095d871f0SAnna Schumaker if (!S_ISREG(file_inode(file)->i_mode)) 59195d871f0SAnna Schumaker return nfserr_inval; 59295d871f0SAnna Schumaker 59395d871f0SAnna Schumaker error = vfs_fallocate(file, flags, offset, len); 59495d871f0SAnna Schumaker if (!error) 59595d871f0SAnna Schumaker error = commit_metadata(fhp); 59695d871f0SAnna Schumaker 59795d871f0SAnna Schumaker return nfserrno(error); 59895d871f0SAnna Schumaker } 5996a85d6c7SJ. Bruce Fields #endif /* defined(CONFIG_NFSD_V4) */ 6001da177e4SLinus Torvalds 6011da177e4SLinus Torvalds #ifdef CONFIG_NFSD_V3 6021da177e4SLinus Torvalds /* 6031da177e4SLinus Torvalds * Check server access rights to a file system object 6041da177e4SLinus Torvalds */ 6051da177e4SLinus Torvalds struct accessmap { 6061da177e4SLinus Torvalds u32 access; 6071da177e4SLinus Torvalds int how; 6081da177e4SLinus Torvalds }; 6091da177e4SLinus Torvalds static struct accessmap nfs3_regaccess[] = { 6108837abcaSMiklos Szeredi { NFS3_ACCESS_READ, NFSD_MAY_READ }, 6118837abcaSMiklos Szeredi { NFS3_ACCESS_EXECUTE, NFSD_MAY_EXEC }, 6128837abcaSMiklos Szeredi { NFS3_ACCESS_MODIFY, NFSD_MAY_WRITE|NFSD_MAY_TRUNC }, 6138837abcaSMiklos Szeredi { NFS3_ACCESS_EXTEND, NFSD_MAY_WRITE }, 6141da177e4SLinus Torvalds 615c11d7fd1SFrank van der Linden #ifdef CONFIG_NFSD_V4 616c11d7fd1SFrank van der Linden { NFS4_ACCESS_XAREAD, NFSD_MAY_READ }, 617c11d7fd1SFrank van der Linden { NFS4_ACCESS_XAWRITE, NFSD_MAY_WRITE }, 618c11d7fd1SFrank van der Linden { NFS4_ACCESS_XALIST, NFSD_MAY_READ }, 619c11d7fd1SFrank van der Linden #endif 620c11d7fd1SFrank van der Linden 6211da177e4SLinus Torvalds { 0, 0 } 6221da177e4SLinus Torvalds }; 6231da177e4SLinus Torvalds 6241da177e4SLinus Torvalds static struct accessmap nfs3_diraccess[] = { 6258837abcaSMiklos Szeredi { NFS3_ACCESS_READ, NFSD_MAY_READ }, 6268837abcaSMiklos Szeredi { NFS3_ACCESS_LOOKUP, NFSD_MAY_EXEC }, 6278837abcaSMiklos Szeredi { NFS3_ACCESS_MODIFY, NFSD_MAY_EXEC|NFSD_MAY_WRITE|NFSD_MAY_TRUNC}, 6288837abcaSMiklos Szeredi { NFS3_ACCESS_EXTEND, NFSD_MAY_EXEC|NFSD_MAY_WRITE }, 6298837abcaSMiklos Szeredi { NFS3_ACCESS_DELETE, NFSD_MAY_REMOVE }, 6301da177e4SLinus Torvalds 631c11d7fd1SFrank van der Linden #ifdef CONFIG_NFSD_V4 632c11d7fd1SFrank van der Linden { NFS4_ACCESS_XAREAD, NFSD_MAY_READ }, 633c11d7fd1SFrank van der Linden { NFS4_ACCESS_XAWRITE, NFSD_MAY_WRITE }, 634c11d7fd1SFrank van der Linden { NFS4_ACCESS_XALIST, NFSD_MAY_READ }, 635c11d7fd1SFrank van der Linden #endif 636c11d7fd1SFrank van der Linden 6371da177e4SLinus Torvalds { 0, 0 } 6381da177e4SLinus Torvalds }; 6391da177e4SLinus Torvalds 6401da177e4SLinus Torvalds static struct accessmap nfs3_anyaccess[] = { 6411da177e4SLinus Torvalds /* Some clients - Solaris 2.6 at least, make an access call 6421da177e4SLinus Torvalds * to the server to check for access for things like /dev/null 6431da177e4SLinus Torvalds * (which really, the server doesn't care about). So 6441da177e4SLinus Torvalds * We provide simple access checking for them, looking 6451da177e4SLinus Torvalds * mainly at mode bits, and we make sure to ignore read-only 6461da177e4SLinus Torvalds * filesystem checks 6471da177e4SLinus Torvalds */ 6488837abcaSMiklos Szeredi { NFS3_ACCESS_READ, NFSD_MAY_READ }, 6498837abcaSMiklos Szeredi { NFS3_ACCESS_EXECUTE, NFSD_MAY_EXEC }, 6508837abcaSMiklos Szeredi { NFS3_ACCESS_MODIFY, NFSD_MAY_WRITE|NFSD_MAY_LOCAL_ACCESS }, 6518837abcaSMiklos Szeredi { NFS3_ACCESS_EXTEND, NFSD_MAY_WRITE|NFSD_MAY_LOCAL_ACCESS }, 6521da177e4SLinus Torvalds 6531da177e4SLinus Torvalds { 0, 0 } 6541da177e4SLinus Torvalds }; 6551da177e4SLinus Torvalds 6566264d69dSAl Viro __be32 6571da177e4SLinus Torvalds nfsd_access(struct svc_rqst *rqstp, struct svc_fh *fhp, u32 *access, u32 *supported) 6581da177e4SLinus Torvalds { 6591da177e4SLinus Torvalds struct accessmap *map; 6601da177e4SLinus Torvalds struct svc_export *export; 6611da177e4SLinus Torvalds struct dentry *dentry; 6621da177e4SLinus Torvalds u32 query, result = 0, sresult = 0; 6636264d69dSAl Viro __be32 error; 6641da177e4SLinus Torvalds 6658837abcaSMiklos Szeredi error = fh_verify(rqstp, fhp, 0, NFSD_MAY_NOP); 6661da177e4SLinus Torvalds if (error) 6671da177e4SLinus Torvalds goto out; 6681da177e4SLinus Torvalds 6691da177e4SLinus Torvalds export = fhp->fh_export; 6701da177e4SLinus Torvalds dentry = fhp->fh_dentry; 6711da177e4SLinus Torvalds 672e36cb0b8SDavid Howells if (d_is_reg(dentry)) 6731da177e4SLinus Torvalds map = nfs3_regaccess; 674e36cb0b8SDavid Howells else if (d_is_dir(dentry)) 6751da177e4SLinus Torvalds map = nfs3_diraccess; 6761da177e4SLinus Torvalds else 6771da177e4SLinus Torvalds map = nfs3_anyaccess; 6781da177e4SLinus Torvalds 6791da177e4SLinus Torvalds 6801da177e4SLinus Torvalds query = *access; 6811da177e4SLinus Torvalds for (; map->access; map++) { 6821da177e4SLinus Torvalds if (map->access & query) { 6836264d69dSAl Viro __be32 err2; 6841da177e4SLinus Torvalds 6851da177e4SLinus Torvalds sresult |= map->access; 6861da177e4SLinus Torvalds 6870ec757dfSJ. Bruce Fields err2 = nfsd_permission(rqstp, export, dentry, map->how); 6881da177e4SLinus Torvalds switch (err2) { 6891da177e4SLinus Torvalds case nfs_ok: 6901da177e4SLinus Torvalds result |= map->access; 6911da177e4SLinus Torvalds break; 6921da177e4SLinus Torvalds 6931da177e4SLinus Torvalds /* the following error codes just mean the access was not allowed, 6941da177e4SLinus Torvalds * rather than an error occurred */ 6951da177e4SLinus Torvalds case nfserr_rofs: 6961da177e4SLinus Torvalds case nfserr_acces: 6971da177e4SLinus Torvalds case nfserr_perm: 6981da177e4SLinus Torvalds /* simply don't "or" in the access bit. */ 6991da177e4SLinus Torvalds break; 7001da177e4SLinus Torvalds default: 7011da177e4SLinus Torvalds error = err2; 7021da177e4SLinus Torvalds goto out; 7031da177e4SLinus Torvalds } 7041da177e4SLinus Torvalds } 7051da177e4SLinus Torvalds } 7061da177e4SLinus Torvalds *access = result; 7071da177e4SLinus Torvalds if (supported) 7081da177e4SLinus Torvalds *supported = sresult; 7091da177e4SLinus Torvalds 7101da177e4SLinus Torvalds out: 7111da177e4SLinus Torvalds return error; 7121da177e4SLinus Torvalds } 7131da177e4SLinus Torvalds #endif /* CONFIG_NFSD_V3 */ 7141da177e4SLinus Torvalds 71565294c1fSJeff Layton int nfsd_open_break_lease(struct inode *inode, int access) 716105f4622SJ. Bruce Fields { 717105f4622SJ. Bruce Fields unsigned int mode; 7181da177e4SLinus Torvalds 719105f4622SJ. Bruce Fields if (access & NFSD_MAY_NOT_BREAK_LEASE) 720105f4622SJ. Bruce Fields return 0; 721105f4622SJ. Bruce Fields mode = (access & NFSD_MAY_WRITE) ? O_WRONLY : O_RDONLY; 722105f4622SJ. Bruce Fields return break_lease(inode, mode | O_NONBLOCK); 723105f4622SJ. Bruce Fields } 7241da177e4SLinus Torvalds 7251da177e4SLinus Torvalds /* 7261da177e4SLinus Torvalds * Open an existing file or directory. 727999448a8SBernd Schubert * The may_flags argument indicates the type of open (read/write/lock) 728999448a8SBernd Schubert * and additional flags. 7291da177e4SLinus Torvalds * N.B. After this call fhp needs an fh_put 7301da177e4SLinus Torvalds */ 73165294c1fSJeff Layton static __be32 73265294c1fSJeff Layton __nfsd_open(struct svc_rqst *rqstp, struct svc_fh *fhp, umode_t type, 733999448a8SBernd Schubert int may_flags, struct file **filp) 7341da177e4SLinus Torvalds { 735765927b2SAl Viro struct path path; 7361da177e4SLinus Torvalds struct inode *inode; 7378519f994SKinglong Mee struct file *file; 7386264d69dSAl Viro int flags = O_RDONLY|O_LARGEFILE; 7396264d69dSAl Viro __be32 err; 74091885258SJeff Layton int host_err = 0; 7411da177e4SLinus Torvalds 742765927b2SAl Viro path.mnt = fhp->fh_export->ex_path.mnt; 743765927b2SAl Viro path.dentry = fhp->fh_dentry; 7442b0143b5SDavid Howells inode = d_inode(path.dentry); 7451da177e4SLinus Torvalds 7461da177e4SLinus Torvalds /* Disallow write access to files with the append-only bit set 7471da177e4SLinus Torvalds * or any access when mandatory locking enabled 7481da177e4SLinus Torvalds */ 7491da177e4SLinus Torvalds err = nfserr_perm; 750999448a8SBernd Schubert if (IS_APPEND(inode) && (may_flags & NFSD_MAY_WRITE)) 7511da177e4SLinus Torvalds goto out; 7525e7fc436SJ. Bruce Fields /* 7535e7fc436SJ. Bruce Fields * We must ignore files (but only files) which might have mandatory 7545e7fc436SJ. Bruce Fields * locks on them because there is no way to know if the accesser has 7555e7fc436SJ. Bruce Fields * the lock. 7565e7fc436SJ. Bruce Fields */ 7575e7fc436SJ. Bruce Fields if (S_ISREG((inode)->i_mode) && mandatory_lock(inode)) 7581da177e4SLinus Torvalds goto out; 7591da177e4SLinus Torvalds 7601da177e4SLinus Torvalds if (!inode->i_fop) 7611da177e4SLinus Torvalds goto out; 7621da177e4SLinus Torvalds 763999448a8SBernd Schubert host_err = nfsd_open_break_lease(inode, may_flags); 7646264d69dSAl Viro if (host_err) /* NOMEM or WOULDBLOCK */ 7651da177e4SLinus Torvalds goto out_nfserr; 7661da177e4SLinus Torvalds 767999448a8SBernd Schubert if (may_flags & NFSD_MAY_WRITE) { 768999448a8SBernd Schubert if (may_flags & NFSD_MAY_READ) 7699ecb6a08SJ. Bruce Fields flags = O_RDWR|O_LARGEFILE; 7709ecb6a08SJ. Bruce Fields else 7711da177e4SLinus Torvalds flags = O_WRONLY|O_LARGEFILE; 7721da177e4SLinus Torvalds } 773999448a8SBernd Schubert 7748519f994SKinglong Mee file = dentry_open(&path, flags, current_cred()); 7758519f994SKinglong Mee if (IS_ERR(file)) { 7768519f994SKinglong Mee host_err = PTR_ERR(file); 7778519f994SKinglong Mee goto out_nfserr; 77806effdbbSBernd Schubert } 77906effdbbSBernd Schubert 7806035a27bSAl Viro host_err = ima_file_check(file, may_flags); 7818519f994SKinglong Mee if (host_err) { 782fd891454SChristoph Hellwig fput(file); 7838519f994SKinglong Mee goto out_nfserr; 7848519f994SKinglong Mee } 7858519f994SKinglong Mee 7868519f994SKinglong Mee if (may_flags & NFSD_MAY_64BIT_COOKIE) 7878519f994SKinglong Mee file->f_mode |= FMODE_64BITHASH; 7888519f994SKinglong Mee else 7898519f994SKinglong Mee file->f_mode |= FMODE_32BITHASH; 7908519f994SKinglong Mee 7918519f994SKinglong Mee *filp = file; 7921da177e4SLinus Torvalds out_nfserr: 7936264d69dSAl Viro err = nfserrno(host_err); 7941da177e4SLinus Torvalds out: 79565294c1fSJeff Layton return err; 79665294c1fSJeff Layton } 79765294c1fSJeff Layton 79865294c1fSJeff Layton __be32 79965294c1fSJeff Layton nfsd_open(struct svc_rqst *rqstp, struct svc_fh *fhp, umode_t type, 80065294c1fSJeff Layton int may_flags, struct file **filp) 80165294c1fSJeff Layton { 80265294c1fSJeff Layton __be32 err; 80365294c1fSJeff Layton 80465294c1fSJeff Layton validate_process_creds(); 80565294c1fSJeff Layton /* 80665294c1fSJeff Layton * If we get here, then the client has already done an "open", 80765294c1fSJeff Layton * and (hopefully) checked permission - so allow OWNER_OVERRIDE 80865294c1fSJeff Layton * in case a chmod has now revoked permission. 80965294c1fSJeff Layton * 81065294c1fSJeff Layton * Arguably we should also allow the owner override for 81165294c1fSJeff Layton * directories, but we never have and it doesn't seem to have 81265294c1fSJeff Layton * caused anyone a problem. If we were to change this, note 81365294c1fSJeff Layton * also that our filldir callbacks would need a variant of 81465294c1fSJeff Layton * lookup_one_len that doesn't check permissions. 81565294c1fSJeff Layton */ 81665294c1fSJeff Layton if (type == S_IFREG) 81765294c1fSJeff Layton may_flags |= NFSD_MAY_OWNER_OVERRIDE; 81865294c1fSJeff Layton err = fh_verify(rqstp, fhp, type, may_flags); 81965294c1fSJeff Layton if (!err) 82065294c1fSJeff Layton err = __nfsd_open(rqstp, fhp, type, may_flags, filp); 821e0e81739SDavid Howells validate_process_creds(); 8221da177e4SLinus Torvalds return err; 8231da177e4SLinus Torvalds } 8241da177e4SLinus Torvalds 82565294c1fSJeff Layton __be32 82665294c1fSJeff Layton nfsd_open_verified(struct svc_rqst *rqstp, struct svc_fh *fhp, umode_t type, 82765294c1fSJeff Layton int may_flags, struct file **filp) 82865294c1fSJeff Layton { 82965294c1fSJeff Layton __be32 err; 83065294c1fSJeff Layton 83165294c1fSJeff Layton validate_process_creds(); 83265294c1fSJeff Layton err = __nfsd_open(rqstp, fhp, type, may_flags, filp); 83365294c1fSJeff Layton validate_process_creds(); 83465294c1fSJeff Layton return err; 83565294c1fSJeff Layton } 83665294c1fSJeff Layton 8371da177e4SLinus Torvalds /* 838cf8208d0SJens Axboe * Grab and keep cached pages associated with a file in the svc_rqst 839cf8208d0SJens Axboe * so that they can be passed to the network sendmsg/sendpage routines 840cf8208d0SJens Axboe * directly. They will be released after the sending has completed. 8411da177e4SLinus Torvalds */ 8421da177e4SLinus Torvalds static int 843cf8208d0SJens Axboe nfsd_splice_actor(struct pipe_inode_info *pipe, struct pipe_buffer *buf, 844cf8208d0SJens Axboe struct splice_desc *sd) 8451da177e4SLinus Torvalds { 846cf8208d0SJens Axboe struct svc_rqst *rqstp = sd->u.data; 847afc59400SJ. Bruce Fields struct page **pp = rqstp->rq_next_page; 848cf8208d0SJens Axboe struct page *page = buf->page; 849cf8208d0SJens Axboe size_t size; 850cf8208d0SJens Axboe 851cf8208d0SJens Axboe size = sd->len; 8521da177e4SLinus Torvalds 8531da177e4SLinus Torvalds if (rqstp->rq_res.page_len == 0) { 8541da177e4SLinus Torvalds get_page(page); 855afc59400SJ. Bruce Fields put_page(*rqstp->rq_next_page); 856afc59400SJ. Bruce Fields *(rqstp->rq_next_page++) = page; 857cf8208d0SJens Axboe rqstp->rq_res.page_base = buf->offset; 8581da177e4SLinus Torvalds rqstp->rq_res.page_len = size; 85944524359SNeilBrown } else if (page != pp[-1]) { 8601da177e4SLinus Torvalds get_page(page); 861afc59400SJ. Bruce Fields if (*rqstp->rq_next_page) 862afc59400SJ. Bruce Fields put_page(*rqstp->rq_next_page); 863afc59400SJ. Bruce Fields *(rqstp->rq_next_page++) = page; 8641da177e4SLinus Torvalds rqstp->rq_res.page_len += size; 86544524359SNeilBrown } else 8661da177e4SLinus Torvalds rqstp->rq_res.page_len += size; 8671da177e4SLinus Torvalds 8681da177e4SLinus Torvalds return size; 8691da177e4SLinus Torvalds } 8701da177e4SLinus Torvalds 871cf8208d0SJens Axboe static int nfsd_direct_splice_actor(struct pipe_inode_info *pipe, 872cf8208d0SJens Axboe struct splice_desc *sd) 873cf8208d0SJens Axboe { 874cf8208d0SJens Axboe return __splice_from_pipe(pipe, sd, nfsd_splice_actor); 875cf8208d0SJens Axboe } 876cf8208d0SJens Axboe 87783a63072STrond Myklebust static u32 nfsd_eof_on_read(struct file *file, loff_t offset, ssize_t len, 87883a63072STrond Myklebust size_t expected) 87983a63072STrond Myklebust { 88083a63072STrond Myklebust if (expected != 0 && len == 0) 88183a63072STrond Myklebust return 1; 88283a63072STrond Myklebust if (offset+len >= i_size_read(file_inode(file))) 88383a63072STrond Myklebust return 1; 88483a63072STrond Myklebust return 0; 88583a63072STrond Myklebust } 88683a63072STrond Myklebust 88787c5942eSChuck Lever static __be32 nfsd_finish_read(struct svc_rqst *rqstp, struct svc_fh *fhp, 88887c5942eSChuck Lever struct file *file, loff_t offset, 88983a63072STrond Myklebust unsigned long *count, u32 *eof, ssize_t host_err) 8901da177e4SLinus Torvalds { 891dc97618dSJ. Bruce Fields if (host_err >= 0) { 892dc97618dSJ. Bruce Fields nfsdstats.io_read += host_err; 89383a63072STrond Myklebust *eof = nfsd_eof_on_read(file, offset, host_err, *count); 894dc97618dSJ. Bruce Fields *count = host_err; 895dc97618dSJ. Bruce Fields fsnotify_access(file); 89687c5942eSChuck Lever trace_nfsd_read_io_done(rqstp, fhp, offset, *count); 897dc97618dSJ. Bruce Fields return 0; 89887c5942eSChuck Lever } else { 89987c5942eSChuck Lever trace_nfsd_read_err(rqstp, fhp, offset, host_err); 900dc97618dSJ. Bruce Fields return nfserrno(host_err); 901dc97618dSJ. Bruce Fields } 90287c5942eSChuck Lever } 9031da177e4SLinus Torvalds 90487c5942eSChuck Lever __be32 nfsd_splice_read(struct svc_rqst *rqstp, struct svc_fh *fhp, 90583a63072STrond Myklebust struct file *file, loff_t offset, unsigned long *count, 90683a63072STrond Myklebust u32 *eof) 907dc97618dSJ. Bruce Fields { 908cf8208d0SJens Axboe struct splice_desc sd = { 909cf8208d0SJens Axboe .len = 0, 910cf8208d0SJens Axboe .total_len = *count, 911cf8208d0SJens Axboe .pos = offset, 912cf8208d0SJens Axboe .u.data = rqstp, 913cf8208d0SJens Axboe }; 91483a63072STrond Myklebust ssize_t host_err; 915cf8208d0SJens Axboe 91687c5942eSChuck Lever trace_nfsd_read_splice(rqstp, fhp, offset, *count); 917afc59400SJ. Bruce Fields rqstp->rq_next_page = rqstp->rq_respages + 1; 918cf8208d0SJens Axboe host_err = splice_direct_to_actor(file, &sd, nfsd_direct_splice_actor); 91983a63072STrond Myklebust return nfsd_finish_read(rqstp, fhp, file, offset, count, eof, host_err); 920dc97618dSJ. Bruce Fields } 921dc97618dSJ. Bruce Fields 92287c5942eSChuck Lever __be32 nfsd_readv(struct svc_rqst *rqstp, struct svc_fh *fhp, 92387c5942eSChuck Lever struct file *file, loff_t offset, 92483a63072STrond Myklebust struct kvec *vec, int vlen, unsigned long *count, 92583a63072STrond Myklebust u32 *eof) 926dc97618dSJ. Bruce Fields { 92773da852eSChristoph Hellwig struct iov_iter iter; 92883a63072STrond Myklebust loff_t ppos = offset; 92983a63072STrond Myklebust ssize_t host_err; 930dc97618dSJ. Bruce Fields 93187c5942eSChuck Lever trace_nfsd_read_vector(rqstp, fhp, offset, *count); 932aa563d7bSDavid Howells iov_iter_kvec(&iter, READ, vec, vlen, *count); 93383a63072STrond Myklebust host_err = vfs_iter_read(file, &iter, &ppos, 0); 93483a63072STrond Myklebust return nfsd_finish_read(rqstp, fhp, file, offset, count, eof, host_err); 9351da177e4SLinus Torvalds } 9361da177e4SLinus Torvalds 937d911df7bSJ. Bruce Fields /* 938d911df7bSJ. Bruce Fields * Gathered writes: If another process is currently writing to the file, 939d911df7bSJ. Bruce Fields * there's a high chance this is another nfsd (triggered by a bulk write 940d911df7bSJ. Bruce Fields * from a client's biod). Rather than syncing the file with each write 941d911df7bSJ. Bruce Fields * request, we sleep for 10 msec. 942d911df7bSJ. Bruce Fields * 943d911df7bSJ. Bruce Fields * I don't know if this roughly approximates C. Juszak's idea of 944d911df7bSJ. Bruce Fields * gathered writes, but it's a nice and simple solution (IMHO), and it 945d911df7bSJ. Bruce Fields * seems to work:-) 946d911df7bSJ. Bruce Fields * 947d911df7bSJ. Bruce Fields * Note: we do this only in the NFSv2 case, since v3 and higher have a 948d911df7bSJ. Bruce Fields * better tool (separate unstable writes and commits) for solving this 949d911df7bSJ. Bruce Fields * problem. 950d911df7bSJ. Bruce Fields */ 951d911df7bSJ. Bruce Fields static int wait_for_concurrent_writes(struct file *file) 952d911df7bSJ. Bruce Fields { 953496ad9aaSAl Viro struct inode *inode = file_inode(file); 954d911df7bSJ. Bruce Fields static ino_t last_ino; 955d911df7bSJ. Bruce Fields static dev_t last_dev; 956d911df7bSJ. Bruce Fields int err = 0; 957d911df7bSJ. Bruce Fields 958d911df7bSJ. Bruce Fields if (atomic_read(&inode->i_writecount) > 1 959d911df7bSJ. Bruce Fields || (last_ino == inode->i_ino && last_dev == inode->i_sb->s_dev)) { 960d911df7bSJ. Bruce Fields dprintk("nfsd: write defer %d\n", task_pid_nr(current)); 961d911df7bSJ. Bruce Fields msleep(10); 962d911df7bSJ. Bruce Fields dprintk("nfsd: write resume %d\n", task_pid_nr(current)); 963d911df7bSJ. Bruce Fields } 964d911df7bSJ. Bruce Fields 965d911df7bSJ. Bruce Fields if (inode->i_state & I_DIRTY) { 966d911df7bSJ. Bruce Fields dprintk("nfsd: write sync %d\n", task_pid_nr(current)); 9678018ab05SChristoph Hellwig err = vfs_fsync(file, 0); 968d911df7bSJ. Bruce Fields } 969d911df7bSJ. Bruce Fields last_ino = inode->i_ino; 970d911df7bSJ. Bruce Fields last_dev = inode->i_sb->s_dev; 971d911df7bSJ. Bruce Fields return err; 972d911df7bSJ. Bruce Fields } 973d911df7bSJ. Bruce Fields 974af90f707SChristoph Hellwig __be32 97516f8f894STrond Myklebust nfsd_vfs_write(struct svc_rqst *rqstp, struct svc_fh *fhp, struct nfsd_file *nf, 9761da177e4SLinus Torvalds loff_t offset, struct kvec *vec, int vlen, 97719e0663fSTrond Myklebust unsigned long *cnt, int stable, 97819e0663fSTrond Myklebust __be32 *verf) 9791da177e4SLinus Torvalds { 98016f8f894STrond Myklebust struct file *file = nf->nf_file; 98101cbf385STrond Myklebust struct super_block *sb = file_inode(file)->i_sb; 9821da177e4SLinus Torvalds struct svc_export *exp; 98373da852eSChristoph Hellwig struct iov_iter iter; 984d890be15SChuck Lever __be32 nfserr; 9856264d69dSAl Viro int host_err; 98648e03bc5STrond Myklebust int use_wgather; 987e49dbbf3SKent Overstreet loff_t pos = offset; 98801cbf385STrond Myklebust unsigned long exp_op_flags = 0; 9898658452eSNeilBrown unsigned int pflags = current->flags; 990ddef7ed2SChristoph Hellwig rwf_t flags = 0; 99101cbf385STrond Myklebust bool restore_flags = false; 9928658452eSNeilBrown 993d890be15SChuck Lever trace_nfsd_write_opened(rqstp, fhp, offset, *cnt); 994d890be15SChuck Lever 99501cbf385STrond Myklebust if (sb->s_export_op) 99601cbf385STrond Myklebust exp_op_flags = sb->s_export_op->flags; 99701cbf385STrond Myklebust 99801cbf385STrond Myklebust if (test_bit(RQ_LOCAL, &rqstp->rq_flags) && 99901cbf385STrond Myklebust !(exp_op_flags & EXPORT_OP_REMOTE_FS)) { 10008658452eSNeilBrown /* 1001a37b0715SNeilBrown * We want throttling in balance_dirty_pages() 1002a37b0715SNeilBrown * and shrink_inactive_list() to only consider 1003a37b0715SNeilBrown * the backingdev we are writing to, so that nfs to 10048658452eSNeilBrown * localhost doesn't cause nfsd to lock up due to all 10058658452eSNeilBrown * the client's dirty pages or its congested queue. 10068658452eSNeilBrown */ 1007a37b0715SNeilBrown current->flags |= PF_LOCAL_THROTTLE; 100801cbf385STrond Myklebust restore_flags = true; 100901cbf385STrond Myklebust } 10101da177e4SLinus Torvalds 10111da177e4SLinus Torvalds exp = fhp->fh_export; 101248e03bc5STrond Myklebust use_wgather = (rqstp->rq_vers == 2) && EX_WGATHER(exp); 10131da177e4SLinus Torvalds 10141da177e4SLinus Torvalds if (!EX_ISSYNC(exp)) 101554bbb7d2SKinglong Mee stable = NFS_UNSTABLE; 10161da177e4SLinus Torvalds 101724368aadSChristoph Hellwig if (stable && !use_wgather) 101824368aadSChristoph Hellwig flags |= RWF_SYNC; 101924368aadSChristoph Hellwig 1020aa563d7bSDavid Howells iov_iter_kvec(&iter, WRITE, vec, vlen, *cnt); 10215011af4cSTrond Myklebust if (flags & RWF_SYNC) { 10225011af4cSTrond Myklebust down_write(&nf->nf_rwsem); 102373da852eSChristoph Hellwig host_err = vfs_iter_write(file, &iter, &pos, flags); 1024e4636d53SJ. Bruce Fields if (host_err < 0) 10255011af4cSTrond Myklebust nfsd_reset_boot_verifier(net_generic(SVC_NET(rqstp), 10265011af4cSTrond Myklebust nfsd_net_id)); 10275011af4cSTrond Myklebust up_write(&nf->nf_rwsem); 10285011af4cSTrond Myklebust } else { 10295011af4cSTrond Myklebust down_read(&nf->nf_rwsem); 103019e0663fSTrond Myklebust if (verf) 103119e0663fSTrond Myklebust nfsd_copy_boot_verifier(verf, 103219e0663fSTrond Myklebust net_generic(SVC_NET(rqstp), 103319e0663fSTrond Myklebust nfsd_net_id)); 10345011af4cSTrond Myklebust host_err = vfs_iter_write(file, &iter, &pos, flags); 10355011af4cSTrond Myklebust up_read(&nf->nf_rwsem); 10365011af4cSTrond Myklebust } 10377bf94c6bSTrond Myklebust if (host_err < 0) { 10387bf94c6bSTrond Myklebust nfsd_reset_boot_verifier(net_generic(SVC_NET(rqstp), 10397bf94c6bSTrond Myklebust nfsd_net_id)); 1040e4636d53SJ. Bruce Fields goto out_nfserr; 10417bf94c6bSTrond Myklebust } 104209a80f2aSTrond Myklebust *cnt = host_err; 1043d890be15SChuck Lever nfsdstats.io_write += *cnt; 10442a12a9d7SEric Paris fsnotify_modify(file); 10451da177e4SLinus Torvalds 1046bbf2f098STrond Myklebust if (stable && use_wgather) { 1047d911df7bSJ. Bruce Fields host_err = wait_for_concurrent_writes(file); 1048bbf2f098STrond Myklebust if (host_err < 0) 1049bbf2f098STrond Myklebust nfsd_reset_boot_verifier(net_generic(SVC_NET(rqstp), 1050bbf2f098STrond Myklebust nfsd_net_id)); 1051bbf2f098STrond Myklebust } 10521da177e4SLinus Torvalds 1053e4636d53SJ. Bruce Fields out_nfserr: 1054d890be15SChuck Lever if (host_err >= 0) { 1055d890be15SChuck Lever trace_nfsd_write_io_done(rqstp, fhp, offset, *cnt); 1056d890be15SChuck Lever nfserr = nfs_ok; 1057d890be15SChuck Lever } else { 1058d890be15SChuck Lever trace_nfsd_write_err(rqstp, fhp, offset, host_err); 1059d890be15SChuck Lever nfserr = nfserrno(host_err); 1060d890be15SChuck Lever } 106101cbf385STrond Myklebust if (restore_flags) 1062a37b0715SNeilBrown current_restore_flags(pflags, PF_LOCAL_THROTTLE); 1063d890be15SChuck Lever return nfserr; 10641da177e4SLinus Torvalds } 10651da177e4SLinus Torvalds 1066dc97618dSJ. Bruce Fields /* 1067dc97618dSJ. Bruce Fields * Read data from a file. count must contain the requested read count 1068dc97618dSJ. Bruce Fields * on entry. On return, *count contains the number of bytes actually read. 1069dc97618dSJ. Bruce Fields * N.B. After this call fhp needs an fh_put 1070dc97618dSJ. Bruce Fields */ 1071dc97618dSJ. Bruce Fields __be32 nfsd_read(struct svc_rqst *rqstp, struct svc_fh *fhp, 107283a63072STrond Myklebust loff_t offset, struct kvec *vec, int vlen, unsigned long *count, 107383a63072STrond Myklebust u32 *eof) 1074dc97618dSJ. Bruce Fields { 107548cd7b51SJeff Layton struct nfsd_file *nf; 1076dc97618dSJ. Bruce Fields struct file *file; 1077dc97618dSJ. Bruce Fields __be32 err; 1078dc97618dSJ. Bruce Fields 1079f394b62bSChuck Lever trace_nfsd_read_start(rqstp, fhp, offset, *count); 108048cd7b51SJeff Layton err = nfsd_file_acquire(rqstp, fhp, NFSD_MAY_READ, &nf); 1081dc97618dSJ. Bruce Fields if (err) 1082dc97618dSJ. Bruce Fields return err; 1083dc97618dSJ. Bruce Fields 108448cd7b51SJeff Layton file = nf->nf_file; 1085a4058c5bSChristoph Hellwig if (file->f_op->splice_read && test_bit(RQ_SPLICE_OK, &rqstp->rq_flags)) 108683a63072STrond Myklebust err = nfsd_splice_read(rqstp, fhp, file, offset, count, eof); 1087a4058c5bSChristoph Hellwig else 108883a63072STrond Myklebust err = nfsd_readv(rqstp, fhp, file, offset, vec, vlen, count, eof); 10896e8b50d1SJeff Layton 109048cd7b51SJeff Layton nfsd_file_put(nf); 1091dc97618dSJ. Bruce Fields 1092f394b62bSChuck Lever trace_nfsd_read_done(rqstp, fhp, offset, *count); 10936e8b50d1SJeff Layton 1094fa0a2126SJ. Bruce Fields return err; 1095fa0a2126SJ. Bruce Fields } 1096fa0a2126SJ. Bruce Fields 10971da177e4SLinus Torvalds /* 10981da177e4SLinus Torvalds * Write data to a file. 10991da177e4SLinus Torvalds * The stable flag requests synchronous writes. 11001da177e4SLinus Torvalds * N.B. After this call fhp needs an fh_put 11011da177e4SLinus Torvalds */ 11026264d69dSAl Viro __be32 110352e380e0SKinglong Mee nfsd_write(struct svc_rqst *rqstp, struct svc_fh *fhp, loff_t offset, 110419e0663fSTrond Myklebust struct kvec *vec, int vlen, unsigned long *cnt, int stable, 110519e0663fSTrond Myklebust __be32 *verf) 11061da177e4SLinus Torvalds { 1107b4935239SJeff Layton struct nfsd_file *nf; 1108b4935239SJeff Layton __be32 err; 11091da177e4SLinus Torvalds 1110f394b62bSChuck Lever trace_nfsd_write_start(rqstp, fhp, offset, *cnt); 11116e8b50d1SJeff Layton 1112b4935239SJeff Layton err = nfsd_file_acquire(rqstp, fhp, NFSD_MAY_WRITE, &nf); 11131da177e4SLinus Torvalds if (err) 11141da177e4SLinus Torvalds goto out; 11151da177e4SLinus Torvalds 111616f8f894STrond Myklebust err = nfsd_vfs_write(rqstp, fhp, nf, offset, vec, 111719e0663fSTrond Myklebust vlen, cnt, stable, verf); 1118b4935239SJeff Layton nfsd_file_put(nf); 11191da177e4SLinus Torvalds out: 1120f394b62bSChuck Lever trace_nfsd_write_done(rqstp, fhp, offset, *cnt); 11211da177e4SLinus Torvalds return err; 11221da177e4SLinus Torvalds } 11231da177e4SLinus Torvalds 11241da177e4SLinus Torvalds #ifdef CONFIG_NFSD_V3 11251da177e4SLinus Torvalds /* 11261da177e4SLinus Torvalds * Commit all pending writes to stable storage. 1127aa696a6fSTrond Myklebust * 1128aa696a6fSTrond Myklebust * Note: we only guarantee that data that lies within the range specified 1129aa696a6fSTrond Myklebust * by the 'offset' and 'count' parameters will be synced. 11301da177e4SLinus Torvalds * 11311da177e4SLinus Torvalds * Unfortunately we cannot lock the file to make sure we return full WCC 11321da177e4SLinus Torvalds * data to the client, as locking happens lower down in the filesystem. 11331da177e4SLinus Torvalds */ 11346264d69dSAl Viro __be32 11351da177e4SLinus Torvalds nfsd_commit(struct svc_rqst *rqstp, struct svc_fh *fhp, 1136524ff1afSTrond Myklebust loff_t offset, unsigned long count, __be32 *verf) 11371da177e4SLinus Torvalds { 11385920afa3SJeff Layton struct nfsd_file *nf; 1139aa696a6fSTrond Myklebust loff_t end = LLONG_MAX; 1140aa696a6fSTrond Myklebust __be32 err = nfserr_inval; 11411da177e4SLinus Torvalds 1142aa696a6fSTrond Myklebust if (offset < 0) 1143aa696a6fSTrond Myklebust goto out; 1144aa696a6fSTrond Myklebust if (count != 0) { 1145aa696a6fSTrond Myklebust end = offset + (loff_t)count - 1; 1146aa696a6fSTrond Myklebust if (end < offset) 1147aa696a6fSTrond Myklebust goto out; 1148aa696a6fSTrond Myklebust } 11491da177e4SLinus Torvalds 11505920afa3SJeff Layton err = nfsd_file_acquire(rqstp, fhp, 11515920afa3SJeff Layton NFSD_MAY_WRITE|NFSD_MAY_NOT_BREAK_LEASE, &nf); 11528837abcaSMiklos Szeredi if (err) 1153aa696a6fSTrond Myklebust goto out; 11541da177e4SLinus Torvalds if (EX_ISSYNC(fhp->fh_export)) { 11555011af4cSTrond Myklebust int err2; 1156aa696a6fSTrond Myklebust 11575011af4cSTrond Myklebust down_write(&nf->nf_rwsem); 11585011af4cSTrond Myklebust err2 = vfs_fsync_range(nf->nf_file, offset, end, 0); 1159bbf2f098STrond Myklebust switch (err2) { 1160bbf2f098STrond Myklebust case 0: 1161524ff1afSTrond Myklebust nfsd_copy_boot_verifier(verf, net_generic(nf->nf_net, 1162524ff1afSTrond Myklebust nfsd_net_id)); 1163bbf2f098STrond Myklebust break; 1164bbf2f098STrond Myklebust case -EINVAL: 11651da177e4SLinus Torvalds err = nfserr_notsupp; 1166bbf2f098STrond Myklebust break; 1167bbf2f098STrond Myklebust default: 1168bbf2f098STrond Myklebust err = nfserrno(err2); 1169bbf2f098STrond Myklebust nfsd_reset_boot_verifier(net_generic(nf->nf_net, 1170bbf2f098STrond Myklebust nfsd_net_id)); 1171bbf2f098STrond Myklebust } 11725011af4cSTrond Myklebust up_write(&nf->nf_rwsem); 1173524ff1afSTrond Myklebust } else 1174524ff1afSTrond Myklebust nfsd_copy_boot_verifier(verf, net_generic(nf->nf_net, 1175524ff1afSTrond Myklebust nfsd_net_id)); 11761da177e4SLinus Torvalds 11775920afa3SJeff Layton nfsd_file_put(nf); 1178aa696a6fSTrond Myklebust out: 11791da177e4SLinus Torvalds return err; 11801da177e4SLinus Torvalds } 11811da177e4SLinus Torvalds #endif /* CONFIG_NFSD_V3 */ 11821da177e4SLinus Torvalds 1183f2b0dee2SAdrian Bunk static __be32 11845c002b3bSJ. Bruce Fields nfsd_create_setattr(struct svc_rqst *rqstp, struct svc_fh *resfhp, 11855c002b3bSJ. Bruce Fields struct iattr *iap) 11865c002b3bSJ. Bruce Fields { 11875c002b3bSJ. Bruce Fields /* 11885c002b3bSJ. Bruce Fields * Mode has already been set earlier in create: 11895c002b3bSJ. Bruce Fields */ 11905c002b3bSJ. Bruce Fields iap->ia_valid &= ~ATTR_MODE; 11915c002b3bSJ. Bruce Fields /* 11925c002b3bSJ. Bruce Fields * Setting uid/gid works only for root. Irix appears to 11935c002b3bSJ. Bruce Fields * send along the gid on create when it tries to implement 11945c002b3bSJ. Bruce Fields * setgid directories via NFS: 11955c002b3bSJ. Bruce Fields */ 11966fab8779SEric W. Biederman if (!uid_eq(current_fsuid(), GLOBAL_ROOT_UID)) 11975c002b3bSJ. Bruce Fields iap->ia_valid &= ~(ATTR_UID|ATTR_GID); 11985c002b3bSJ. Bruce Fields if (iap->ia_valid) 11992a1aa489SArnd Bergmann return nfsd_setattr(rqstp, resfhp, iap, 0, (time64_t)0); 12000f3a24b4STrond Myklebust /* Callers expect file metadata to be committed here */ 1201722b620dSJeff Layton return nfserrno(commit_metadata(resfhp)); 12025c002b3bSJ. Bruce Fields } 12035c002b3bSJ. Bruce Fields 12044ac35c2fSwengang wang /* HPUX client sometimes creates a file in mode 000, and sets size to 0. 12054ac35c2fSwengang wang * setting size to 0 may fail for some specific file systems by the permission 12064ac35c2fSwengang wang * checking which requires WRITE permission but the mode is 000. 12074ac35c2fSwengang wang * we ignore the resizing(to 0) on the just new created file, since the size is 12084ac35c2fSwengang wang * 0 after file created. 12094ac35c2fSwengang wang * 12104ac35c2fSwengang wang * call this only after vfs_create() is called. 12114ac35c2fSwengang wang * */ 12124ac35c2fSwengang wang static void 12134ac35c2fSwengang wang nfsd_check_ignore_resizing(struct iattr *iap) 12144ac35c2fSwengang wang { 12154ac35c2fSwengang wang if ((iap->ia_valid & ATTR_SIZE) && (iap->ia_size == 0)) 12164ac35c2fSwengang wang iap->ia_valid &= ~ATTR_SIZE; 12174ac35c2fSwengang wang } 12184ac35c2fSwengang wang 1219b44061d0SJ. Bruce Fields /* The parent directory should already be locked: */ 12206264d69dSAl Viro __be32 1221b44061d0SJ. Bruce Fields nfsd_create_locked(struct svc_rqst *rqstp, struct svc_fh *fhp, 12221da177e4SLinus Torvalds char *fname, int flen, struct iattr *iap, 12231da177e4SLinus Torvalds int type, dev_t rdev, struct svc_fh *resfhp) 12241da177e4SLinus Torvalds { 12252b118859SDan Carpenter struct dentry *dentry, *dchild; 12261da177e4SLinus Torvalds struct inode *dirp; 12276264d69dSAl Viro __be32 err; 12285c002b3bSJ. Bruce Fields __be32 err2; 12296264d69dSAl Viro int host_err; 12301da177e4SLinus Torvalds 12311da177e4SLinus Torvalds dentry = fhp->fh_dentry; 12322b0143b5SDavid Howells dirp = d_inode(dentry); 12331da177e4SLinus Torvalds 12341da177e4SLinus Torvalds dchild = dget(resfhp->fh_dentry); 12351da177e4SLinus Torvalds if (!fhp->fh_locked) { 1236b44061d0SJ. Bruce Fields WARN_ONCE(1, "nfsd_create: parent %pd2 not locked!\n", 1237a6a9f18fSAl Viro dentry); 1238d75f2b9fSAl Viro err = nfserr_io; 12391da177e4SLinus Torvalds goto out; 12401da177e4SLinus Torvalds } 12411da177e4SLinus Torvalds 12427eed34f1SOleg Drokin err = nfsd_permission(rqstp, fhp->fh_export, dentry, NFSD_MAY_CREATE); 12437eed34f1SOleg Drokin if (err) 12447eed34f1SOleg Drokin goto out; 12457eed34f1SOleg Drokin 12461da177e4SLinus Torvalds if (!(iap->ia_valid & ATTR_MODE)) 12471da177e4SLinus Torvalds iap->ia_mode = 0; 12481da177e4SLinus Torvalds iap->ia_mode = (iap->ia_mode & S_IALLUGO) | type; 12491da177e4SLinus Torvalds 125022cf8419SJ. Bruce Fields if (!IS_POSIXACL(dirp)) 125122cf8419SJ. Bruce Fields iap->ia_mode &= ~current_umask(); 125222cf8419SJ. Bruce Fields 1253088406bcSJ. Bruce Fields err = 0; 12544a55c101SJan Kara host_err = 0; 12551da177e4SLinus Torvalds switch (type) { 12561da177e4SLinus Torvalds case S_IFREG: 1257312b63fbSAl Viro host_err = vfs_create(dirp, dchild, iap->ia_mode, true); 12584ac35c2fSwengang wang if (!host_err) 12594ac35c2fSwengang wang nfsd_check_ignore_resizing(iap); 12601da177e4SLinus Torvalds break; 12611da177e4SLinus Torvalds case S_IFDIR: 12626264d69dSAl Viro host_err = vfs_mkdir(dirp, dchild, iap->ia_mode); 12633819bb0dSAl Viro if (!host_err && unlikely(d_unhashed(dchild))) { 12643819bb0dSAl Viro struct dentry *d; 12653819bb0dSAl Viro d = lookup_one_len(dchild->d_name.name, 12663819bb0dSAl Viro dchild->d_parent, 12673819bb0dSAl Viro dchild->d_name.len); 12683819bb0dSAl Viro if (IS_ERR(d)) { 12693819bb0dSAl Viro host_err = PTR_ERR(d); 12703819bb0dSAl Viro break; 12713819bb0dSAl Viro } 12723819bb0dSAl Viro if (unlikely(d_is_negative(d))) { 12733819bb0dSAl Viro dput(d); 12743819bb0dSAl Viro err = nfserr_serverfault; 12753819bb0dSAl Viro goto out; 12763819bb0dSAl Viro } 12773819bb0dSAl Viro dput(resfhp->fh_dentry); 12783819bb0dSAl Viro resfhp->fh_dentry = dget(d); 12793819bb0dSAl Viro err = fh_update(resfhp); 12803819bb0dSAl Viro dput(dchild); 12813819bb0dSAl Viro dchild = d; 12823819bb0dSAl Viro if (err) 12833819bb0dSAl Viro goto out; 12843819bb0dSAl Viro } 12851da177e4SLinus Torvalds break; 12861da177e4SLinus Torvalds case S_IFCHR: 12871da177e4SLinus Torvalds case S_IFBLK: 12881da177e4SLinus Torvalds case S_IFIFO: 12891da177e4SLinus Torvalds case S_IFSOCK: 12906264d69dSAl Viro host_err = vfs_mknod(dirp, dchild, iap->ia_mode, rdev); 12911da177e4SLinus Torvalds break; 129271423274SJ. Bruce Fields default: 129371423274SJ. Bruce Fields printk(KERN_WARNING "nfsd: bad file type %o in nfsd_create\n", 129471423274SJ. Bruce Fields type); 129571423274SJ. Bruce Fields host_err = -EINVAL; 1296463c3197SDave Hansen } 12974a55c101SJan Kara if (host_err < 0) 1298463c3197SDave Hansen goto out_nfserr; 12991da177e4SLinus Torvalds 1300f501912aSBen Myers err = nfsd_create_setattr(rqstp, resfhp, iap); 13011da177e4SLinus Torvalds 1302f501912aSBen Myers /* 13030f3a24b4STrond Myklebust * nfsd_create_setattr already committed the child. Transactional 13040f3a24b4STrond Myklebust * filesystems had a chance to commit changes for both parent and 1305b44061d0SJ. Bruce Fields * child simultaneously making the following commit_metadata a 13060f3a24b4STrond Myklebust * noop. 1307f501912aSBen Myers */ 1308f501912aSBen Myers err2 = nfserrno(commit_metadata(fhp)); 1309f193fbabSYAMAMOTO Takashi if (err2) 1310f193fbabSYAMAMOTO Takashi err = err2; 13111da177e4SLinus Torvalds /* 13121da177e4SLinus Torvalds * Update the file handle to get the new inode info. 13131da177e4SLinus Torvalds */ 13141da177e4SLinus Torvalds if (!err) 13151da177e4SLinus Torvalds err = fh_update(resfhp); 13161da177e4SLinus Torvalds out: 13171da177e4SLinus Torvalds dput(dchild); 13181da177e4SLinus Torvalds return err; 13191da177e4SLinus Torvalds 13201da177e4SLinus Torvalds out_nfserr: 13216264d69dSAl Viro err = nfserrno(host_err); 13221da177e4SLinus Torvalds goto out; 13231da177e4SLinus Torvalds } 13241da177e4SLinus Torvalds 1325b44061d0SJ. Bruce Fields /* 1326b44061d0SJ. Bruce Fields * Create a filesystem object (regular, directory, special). 1327b44061d0SJ. Bruce Fields * Note that the parent directory is left locked. 1328b44061d0SJ. Bruce Fields * 1329b44061d0SJ. Bruce Fields * N.B. Every call to nfsd_create needs an fh_put for _both_ fhp and resfhp 1330b44061d0SJ. Bruce Fields */ 1331b44061d0SJ. Bruce Fields __be32 1332b44061d0SJ. Bruce Fields nfsd_create(struct svc_rqst *rqstp, struct svc_fh *fhp, 1333b44061d0SJ. Bruce Fields char *fname, int flen, struct iattr *iap, 1334b44061d0SJ. Bruce Fields int type, dev_t rdev, struct svc_fh *resfhp) 1335b44061d0SJ. Bruce Fields { 1336b44061d0SJ. Bruce Fields struct dentry *dentry, *dchild = NULL; 1337b44061d0SJ. Bruce Fields __be32 err; 1338b44061d0SJ. Bruce Fields int host_err; 1339b44061d0SJ. Bruce Fields 1340b44061d0SJ. Bruce Fields if (isdotent(fname, flen)) 1341b44061d0SJ. Bruce Fields return nfserr_exist; 1342b44061d0SJ. Bruce Fields 1343fa08139dSJ. Bruce Fields err = fh_verify(rqstp, fhp, S_IFDIR, NFSD_MAY_NOP); 1344b44061d0SJ. Bruce Fields if (err) 1345b44061d0SJ. Bruce Fields return err; 1346b44061d0SJ. Bruce Fields 1347b44061d0SJ. Bruce Fields dentry = fhp->fh_dentry; 1348b44061d0SJ. Bruce Fields 1349b44061d0SJ. Bruce Fields host_err = fh_want_write(fhp); 1350b44061d0SJ. Bruce Fields if (host_err) 1351b44061d0SJ. Bruce Fields return nfserrno(host_err); 1352b44061d0SJ. Bruce Fields 1353b44061d0SJ. Bruce Fields fh_lock_nested(fhp, I_MUTEX_PARENT); 1354b44061d0SJ. Bruce Fields dchild = lookup_one_len(fname, dentry, flen); 1355b44061d0SJ. Bruce Fields host_err = PTR_ERR(dchild); 1356b44061d0SJ. Bruce Fields if (IS_ERR(dchild)) 1357b44061d0SJ. Bruce Fields return nfserrno(host_err); 1358b44061d0SJ. Bruce Fields err = fh_compose(resfhp, fhp->fh_export, dchild, fhp); 1359502aa0a5SJosef Bacik /* 1360502aa0a5SJosef Bacik * We unconditionally drop our ref to dchild as fh_compose will have 1361502aa0a5SJosef Bacik * already grabbed its own ref for it. 1362502aa0a5SJosef Bacik */ 1363b44061d0SJ. Bruce Fields dput(dchild); 1364502aa0a5SJosef Bacik if (err) 1365b44061d0SJ. Bruce Fields return err; 1366b44061d0SJ. Bruce Fields return nfsd_create_locked(rqstp, fhp, fname, flen, iap, type, 1367b44061d0SJ. Bruce Fields rdev, resfhp); 1368b44061d0SJ. Bruce Fields } 1369b44061d0SJ. Bruce Fields 13701da177e4SLinus Torvalds #ifdef CONFIG_NFSD_V3 1371ac6721a1SMi Jinlong 13721da177e4SLinus Torvalds /* 1373ac6721a1SMi Jinlong * NFSv3 and NFSv4 version of nfsd_create 13741da177e4SLinus Torvalds */ 13756264d69dSAl Viro __be32 1376ac6721a1SMi Jinlong do_nfsd_create(struct svc_rqst *rqstp, struct svc_fh *fhp, 13771da177e4SLinus Torvalds char *fname, int flen, struct iattr *iap, 13781da177e4SLinus Torvalds struct svc_fh *resfhp, int createmode, u32 *verifier, 1379856121b2SJ. Bruce Fields bool *truncp, bool *created) 13801da177e4SLinus Torvalds { 13811da177e4SLinus Torvalds struct dentry *dentry, *dchild = NULL; 13821da177e4SLinus Torvalds struct inode *dirp; 13836264d69dSAl Viro __be32 err; 13846264d69dSAl Viro int host_err; 13851da177e4SLinus Torvalds __u32 v_mtime=0, v_atime=0; 13861da177e4SLinus Torvalds 13871da177e4SLinus Torvalds err = nfserr_perm; 13881da177e4SLinus Torvalds if (!flen) 13891da177e4SLinus Torvalds goto out; 13901da177e4SLinus Torvalds err = nfserr_exist; 13911da177e4SLinus Torvalds if (isdotent(fname, flen)) 13921da177e4SLinus Torvalds goto out; 13931da177e4SLinus Torvalds if (!(iap->ia_valid & ATTR_MODE)) 13941da177e4SLinus Torvalds iap->ia_mode = 0; 13951574dff8SSachin Prabhu err = fh_verify(rqstp, fhp, S_IFDIR, NFSD_MAY_EXEC); 13961da177e4SLinus Torvalds if (err) 13971da177e4SLinus Torvalds goto out; 13981da177e4SLinus Torvalds 13991da177e4SLinus Torvalds dentry = fhp->fh_dentry; 14002b0143b5SDavid Howells dirp = d_inode(dentry); 14011da177e4SLinus Torvalds 14024a55c101SJan Kara host_err = fh_want_write(fhp); 14034a55c101SJan Kara if (host_err) 14044a55c101SJan Kara goto out_nfserr; 14054a55c101SJan Kara 140612fd3520SPeter Zijlstra fh_lock_nested(fhp, I_MUTEX_PARENT); 14071da177e4SLinus Torvalds 14081da177e4SLinus Torvalds /* 14091da177e4SLinus Torvalds * Compose the response file handle. 14101da177e4SLinus Torvalds */ 14111da177e4SLinus Torvalds dchild = lookup_one_len(fname, dentry, flen); 14126264d69dSAl Viro host_err = PTR_ERR(dchild); 14131da177e4SLinus Torvalds if (IS_ERR(dchild)) 14141da177e4SLinus Torvalds goto out_nfserr; 14151da177e4SLinus Torvalds 14161574dff8SSachin Prabhu /* If file doesn't exist, check for permissions to create one */ 14172b0143b5SDavid Howells if (d_really_is_negative(dchild)) { 14181574dff8SSachin Prabhu err = fh_verify(rqstp, fhp, S_IFDIR, NFSD_MAY_CREATE); 14191574dff8SSachin Prabhu if (err) 14201574dff8SSachin Prabhu goto out; 14211574dff8SSachin Prabhu } 14221574dff8SSachin Prabhu 14231da177e4SLinus Torvalds err = fh_compose(resfhp, fhp->fh_export, dchild, fhp); 14241da177e4SLinus Torvalds if (err) 14251da177e4SLinus Torvalds goto out; 14261da177e4SLinus Torvalds 1427ac6721a1SMi Jinlong if (nfsd_create_is_exclusive(createmode)) { 1428c397852cSPeter Staubach /* solaris7 gets confused (bugid 4218508) if these have 1429749997e5SJeff Layton * the high bit set, so just clear the high bits. If this is 1430749997e5SJeff Layton * ever changed to use different attrs for storing the 1431749997e5SJeff Layton * verifier, then do_open_lookup() will also need to be fixed 1432749997e5SJeff Layton * accordingly. 14331da177e4SLinus Torvalds */ 14341da177e4SLinus Torvalds v_mtime = verifier[0]&0x7fffffff; 14351da177e4SLinus Torvalds v_atime = verifier[1]&0x7fffffff; 14361da177e4SLinus Torvalds } 14371da177e4SLinus Torvalds 14382b0143b5SDavid Howells if (d_really_is_positive(dchild)) { 14391da177e4SLinus Torvalds err = 0; 14401da177e4SLinus Torvalds 14411da177e4SLinus Torvalds switch (createmode) { 14421da177e4SLinus Torvalds case NFS3_CREATE_UNCHECKED: 1443e36cb0b8SDavid Howells if (! d_is_reg(dchild)) 14449dc4e6c4SJ. Bruce Fields goto out; 14451da177e4SLinus Torvalds else if (truncp) { 14461da177e4SLinus Torvalds /* in nfsv4, we need to treat this case a little 14471da177e4SLinus Torvalds * differently. we don't want to truncate the 14481da177e4SLinus Torvalds * file now; this would be wrong if the OPEN 14491da177e4SLinus Torvalds * fails for some other reason. furthermore, 14501da177e4SLinus Torvalds * if the size is nonzero, we should ignore it 14511da177e4SLinus Torvalds * according to spec! 14521da177e4SLinus Torvalds */ 14531da177e4SLinus Torvalds *truncp = (iap->ia_valid & ATTR_SIZE) && !iap->ia_size; 14541da177e4SLinus Torvalds } 14551da177e4SLinus Torvalds else { 14561da177e4SLinus Torvalds iap->ia_valid &= ATTR_SIZE; 14571da177e4SLinus Torvalds goto set_attr; 14581da177e4SLinus Torvalds } 14591da177e4SLinus Torvalds break; 14601da177e4SLinus Torvalds case NFS3_CREATE_EXCLUSIVE: 14612b0143b5SDavid Howells if ( d_inode(dchild)->i_mtime.tv_sec == v_mtime 14622b0143b5SDavid Howells && d_inode(dchild)->i_atime.tv_sec == v_atime 14632b0143b5SDavid Howells && d_inode(dchild)->i_size == 0 ) { 14647007c90fSNeil Brown if (created) 1465384a7ccaSzhengbin *created = true; 14661da177e4SLinus Torvalds break; 14677007c90fSNeil Brown } 1468df561f66SGustavo A. R. Silva fallthrough; 1469ac6721a1SMi Jinlong case NFS4_CREATE_EXCLUSIVE4_1: 14702b0143b5SDavid Howells if ( d_inode(dchild)->i_mtime.tv_sec == v_mtime 14712b0143b5SDavid Howells && d_inode(dchild)->i_atime.tv_sec == v_atime 14722b0143b5SDavid Howells && d_inode(dchild)->i_size == 0 ) { 14737007c90fSNeil Brown if (created) 1474384a7ccaSzhengbin *created = true; 1475ac6721a1SMi Jinlong goto set_attr; 14767007c90fSNeil Brown } 1477df561f66SGustavo A. R. Silva fallthrough; 14781da177e4SLinus Torvalds case NFS3_CREATE_GUARDED: 14791da177e4SLinus Torvalds err = nfserr_exist; 14801da177e4SLinus Torvalds } 1481bad0dcffSAl Viro fh_drop_write(fhp); 14821da177e4SLinus Torvalds goto out; 14831da177e4SLinus Torvalds } 14841da177e4SLinus Torvalds 148522cf8419SJ. Bruce Fields if (!IS_POSIXACL(dirp)) 148622cf8419SJ. Bruce Fields iap->ia_mode &= ~current_umask(); 148722cf8419SJ. Bruce Fields 1488312b63fbSAl Viro host_err = vfs_create(dirp, dchild, iap->ia_mode, true); 1489463c3197SDave Hansen if (host_err < 0) { 1490bad0dcffSAl Viro fh_drop_write(fhp); 14911da177e4SLinus Torvalds goto out_nfserr; 1492463c3197SDave Hansen } 149381ac95c5SJ. Bruce Fields if (created) 1494384a7ccaSzhengbin *created = true; 14951da177e4SLinus Torvalds 14964ac35c2fSwengang wang nfsd_check_ignore_resizing(iap); 14974ac35c2fSwengang wang 1498ac6721a1SMi Jinlong if (nfsd_create_is_exclusive(createmode)) { 1499c397852cSPeter Staubach /* Cram the verifier into atime/mtime */ 15001da177e4SLinus Torvalds iap->ia_valid = ATTR_MTIME|ATTR_ATIME 1501c397852cSPeter Staubach | ATTR_MTIME_SET|ATTR_ATIME_SET; 15021da177e4SLinus Torvalds /* XXX someone who knows this better please fix it for nsec */ 15031da177e4SLinus Torvalds iap->ia_mtime.tv_sec = v_mtime; 15041da177e4SLinus Torvalds iap->ia_atime.tv_sec = v_atime; 15051da177e4SLinus Torvalds iap->ia_mtime.tv_nsec = 0; 15061da177e4SLinus Torvalds iap->ia_atime.tv_nsec = 0; 15071da177e4SLinus Torvalds } 15081da177e4SLinus Torvalds 15091da177e4SLinus Torvalds set_attr: 1510f501912aSBen Myers err = nfsd_create_setattr(rqstp, resfhp, iap); 1511f501912aSBen Myers 1512f501912aSBen Myers /* 15130f3a24b4STrond Myklebust * nfsd_create_setattr already committed the child 15140f3a24b4STrond Myklebust * (and possibly also the parent). 1515f501912aSBen Myers */ 1516f501912aSBen Myers if (!err) 1517f501912aSBen Myers err = nfserrno(commit_metadata(fhp)); 1518f193fbabSYAMAMOTO Takashi 1519f193fbabSYAMAMOTO Takashi /* 1520f193fbabSYAMAMOTO Takashi * Update the filehandle to get the new inode info. 1521f193fbabSYAMAMOTO Takashi */ 1522f193fbabSYAMAMOTO Takashi if (!err) 1523f193fbabSYAMAMOTO Takashi err = fh_update(resfhp); 15241da177e4SLinus Torvalds 15251da177e4SLinus Torvalds out: 15261da177e4SLinus Torvalds fh_unlock(fhp); 15271da177e4SLinus Torvalds if (dchild && !IS_ERR(dchild)) 15281da177e4SLinus Torvalds dput(dchild); 15294a55c101SJan Kara fh_drop_write(fhp); 15301da177e4SLinus Torvalds return err; 15311da177e4SLinus Torvalds 15321da177e4SLinus Torvalds out_nfserr: 15336264d69dSAl Viro err = nfserrno(host_err); 15341da177e4SLinus Torvalds goto out; 15351da177e4SLinus Torvalds } 15361da177e4SLinus Torvalds #endif /* CONFIG_NFSD_V3 */ 15371da177e4SLinus Torvalds 15381da177e4SLinus Torvalds /* 15391da177e4SLinus Torvalds * Read a symlink. On entry, *lenp must contain the maximum path length that 15401da177e4SLinus Torvalds * fits into the buffer. On return, it contains the true length. 15411da177e4SLinus Torvalds * N.B. After this call fhp needs an fh_put 15421da177e4SLinus Torvalds */ 15436264d69dSAl Viro __be32 15441da177e4SLinus Torvalds nfsd_readlink(struct svc_rqst *rqstp, struct svc_fh *fhp, char *buf, int *lenp) 15451da177e4SLinus Torvalds { 15466264d69dSAl Viro __be32 err; 15474d7edbc3SAl Viro const char *link; 154868ac1234SAl Viro struct path path; 15494d7edbc3SAl Viro DEFINE_DELAYED_CALL(done); 15504d7edbc3SAl Viro int len; 15511da177e4SLinus Torvalds 15528837abcaSMiklos Szeredi err = fh_verify(rqstp, fhp, S_IFLNK, NFSD_MAY_NOP); 15534d7edbc3SAl Viro if (unlikely(err)) 15544d7edbc3SAl Viro return err; 15551da177e4SLinus Torvalds 155668ac1234SAl Viro path.mnt = fhp->fh_export->ex_path.mnt; 155768ac1234SAl Viro path.dentry = fhp->fh_dentry; 15581da177e4SLinus Torvalds 15594d7edbc3SAl Viro if (unlikely(!d_is_symlink(path.dentry))) 15604d7edbc3SAl Viro return nfserr_inval; 15611da177e4SLinus Torvalds 156268ac1234SAl Viro touch_atime(&path); 15631da177e4SLinus Torvalds 15644d7edbc3SAl Viro link = vfs_get_link(path.dentry, &done); 15654d7edbc3SAl Viro if (IS_ERR(link)) 15664d7edbc3SAl Viro return nfserrno(PTR_ERR(link)); 15671da177e4SLinus Torvalds 15684d7edbc3SAl Viro len = strlen(link); 15694d7edbc3SAl Viro if (len < *lenp) 15704d7edbc3SAl Viro *lenp = len; 15714d7edbc3SAl Viro memcpy(buf, link, *lenp); 15724d7edbc3SAl Viro do_delayed_call(&done); 15734d7edbc3SAl Viro return 0; 15741da177e4SLinus Torvalds } 15751da177e4SLinus Torvalds 15761da177e4SLinus Torvalds /* 15771da177e4SLinus Torvalds * Create a symlink and look up its inode 15781da177e4SLinus Torvalds * N.B. After this call _both_ fhp and resfhp need an fh_put 15791da177e4SLinus Torvalds */ 15806264d69dSAl Viro __be32 15811da177e4SLinus Torvalds nfsd_symlink(struct svc_rqst *rqstp, struct svc_fh *fhp, 15821da177e4SLinus Torvalds char *fname, int flen, 158352ee0433SJ. Bruce Fields char *path, 15841e444f5bSKinglong Mee struct svc_fh *resfhp) 15851da177e4SLinus Torvalds { 15861da177e4SLinus Torvalds struct dentry *dentry, *dnew; 15876264d69dSAl Viro __be32 err, cerr; 15886264d69dSAl Viro int host_err; 15891da177e4SLinus Torvalds 15901da177e4SLinus Torvalds err = nfserr_noent; 159152ee0433SJ. Bruce Fields if (!flen || path[0] == '\0') 15921da177e4SLinus Torvalds goto out; 15931da177e4SLinus Torvalds err = nfserr_exist; 15941da177e4SLinus Torvalds if (isdotent(fname, flen)) 15951da177e4SLinus Torvalds goto out; 15961da177e4SLinus Torvalds 15978837abcaSMiklos Szeredi err = fh_verify(rqstp, fhp, S_IFDIR, NFSD_MAY_CREATE); 15981da177e4SLinus Torvalds if (err) 15991da177e4SLinus Torvalds goto out; 16004a55c101SJan Kara 16014a55c101SJan Kara host_err = fh_want_write(fhp); 16024a55c101SJan Kara if (host_err) 16034a55c101SJan Kara goto out_nfserr; 16044a55c101SJan Kara 16051da177e4SLinus Torvalds fh_lock(fhp); 16061da177e4SLinus Torvalds dentry = fhp->fh_dentry; 16071da177e4SLinus Torvalds dnew = lookup_one_len(fname, dentry, flen); 16086264d69dSAl Viro host_err = PTR_ERR(dnew); 16091da177e4SLinus Torvalds if (IS_ERR(dnew)) 16101da177e4SLinus Torvalds goto out_nfserr; 16111da177e4SLinus Torvalds 16122b0143b5SDavid Howells host_err = vfs_symlink(d_inode(dentry), dnew, path); 16136264d69dSAl Viro err = nfserrno(host_err); 1614f501912aSBen Myers if (!err) 1615f501912aSBen Myers err = nfserrno(commit_metadata(fhp)); 16161da177e4SLinus Torvalds fh_unlock(fhp); 16171da177e4SLinus Torvalds 1618bad0dcffSAl Viro fh_drop_write(fhp); 161975c3f29dSDave Hansen 16201da177e4SLinus Torvalds cerr = fh_compose(resfhp, fhp->fh_export, dnew, fhp); 16211da177e4SLinus Torvalds dput(dnew); 16221da177e4SLinus Torvalds if (err==0) err = cerr; 16231da177e4SLinus Torvalds out: 16241da177e4SLinus Torvalds return err; 16251da177e4SLinus Torvalds 16261da177e4SLinus Torvalds out_nfserr: 16276264d69dSAl Viro err = nfserrno(host_err); 16281da177e4SLinus Torvalds goto out; 16291da177e4SLinus Torvalds } 16301da177e4SLinus Torvalds 16311da177e4SLinus Torvalds /* 16321da177e4SLinus Torvalds * Create a hardlink 16331da177e4SLinus Torvalds * N.B. After this call _both_ ffhp and tfhp need an fh_put 16341da177e4SLinus Torvalds */ 16356264d69dSAl Viro __be32 16361da177e4SLinus Torvalds nfsd_link(struct svc_rqst *rqstp, struct svc_fh *ffhp, 16371da177e4SLinus Torvalds char *name, int len, struct svc_fh *tfhp) 16381da177e4SLinus Torvalds { 16391da177e4SLinus Torvalds struct dentry *ddir, *dnew, *dold; 164055b13354SJ. Bruce Fields struct inode *dirp; 16416264d69dSAl Viro __be32 err; 16426264d69dSAl Viro int host_err; 16431da177e4SLinus Torvalds 16448837abcaSMiklos Szeredi err = fh_verify(rqstp, ffhp, S_IFDIR, NFSD_MAY_CREATE); 16451da177e4SLinus Torvalds if (err) 16461da177e4SLinus Torvalds goto out; 16477d818a7bSJ. Bruce Fields err = fh_verify(rqstp, tfhp, 0, NFSD_MAY_NOP); 16481da177e4SLinus Torvalds if (err) 16491da177e4SLinus Torvalds goto out; 16507d818a7bSJ. Bruce Fields err = nfserr_isdir; 1651e36cb0b8SDavid Howells if (d_is_dir(tfhp->fh_dentry)) 16527d818a7bSJ. Bruce Fields goto out; 16531da177e4SLinus Torvalds err = nfserr_perm; 16541da177e4SLinus Torvalds if (!len) 16551da177e4SLinus Torvalds goto out; 16561da177e4SLinus Torvalds err = nfserr_exist; 16571da177e4SLinus Torvalds if (isdotent(name, len)) 16581da177e4SLinus Torvalds goto out; 16591da177e4SLinus Torvalds 16604a55c101SJan Kara host_err = fh_want_write(tfhp); 16614a55c101SJan Kara if (host_err) { 16624a55c101SJan Kara err = nfserrno(host_err); 16634a55c101SJan Kara goto out; 16644a55c101SJan Kara } 16654a55c101SJan Kara 166612fd3520SPeter Zijlstra fh_lock_nested(ffhp, I_MUTEX_PARENT); 16671da177e4SLinus Torvalds ddir = ffhp->fh_dentry; 16682b0143b5SDavid Howells dirp = d_inode(ddir); 16691da177e4SLinus Torvalds 16701da177e4SLinus Torvalds dnew = lookup_one_len(name, ddir, len); 16716264d69dSAl Viro host_err = PTR_ERR(dnew); 16721da177e4SLinus Torvalds if (IS_ERR(dnew)) 16731da177e4SLinus Torvalds goto out_nfserr; 16741da177e4SLinus Torvalds 16751da177e4SLinus Torvalds dold = tfhp->fh_dentry; 16761da177e4SLinus Torvalds 16774795bb37SJ. Bruce Fields err = nfserr_noent; 16782b0143b5SDavid Howells if (d_really_is_negative(dold)) 16794a55c101SJan Kara goto out_dput; 1680146a8595SJ. Bruce Fields host_err = vfs_link(dold, dirp, dnew, NULL); 16816264d69dSAl Viro if (!host_err) { 1682f501912aSBen Myers err = nfserrno(commit_metadata(ffhp)); 1683f501912aSBen Myers if (!err) 1684f501912aSBen Myers err = nfserrno(commit_metadata(tfhp)); 16851da177e4SLinus Torvalds } else { 16866264d69dSAl Viro if (host_err == -EXDEV && rqstp->rq_vers == 2) 16871da177e4SLinus Torvalds err = nfserr_acces; 16881da177e4SLinus Torvalds else 16896264d69dSAl Viro err = nfserrno(host_err); 16901da177e4SLinus Torvalds } 169175c3f29dSDave Hansen out_dput: 16921da177e4SLinus Torvalds dput(dnew); 1693270d56e5SDavid M. Richter out_unlock: 1694270d56e5SDavid M. Richter fh_unlock(ffhp); 16954a55c101SJan Kara fh_drop_write(tfhp); 16961da177e4SLinus Torvalds out: 16971da177e4SLinus Torvalds return err; 16981da177e4SLinus Torvalds 16991da177e4SLinus Torvalds out_nfserr: 17006264d69dSAl Viro err = nfserrno(host_err); 1701270d56e5SDavid M. Richter goto out_unlock; 17021da177e4SLinus Torvalds } 17031da177e4SLinus Torvalds 17047775ec57SJeff Layton static void 17057775ec57SJeff Layton nfsd_close_cached_files(struct dentry *dentry) 17067775ec57SJeff Layton { 17077775ec57SJeff Layton struct inode *inode = d_inode(dentry); 17087775ec57SJeff Layton 17097775ec57SJeff Layton if (inode && S_ISREG(inode->i_mode)) 17107775ec57SJeff Layton nfsd_file_close_inode_sync(inode); 17117775ec57SJeff Layton } 17127775ec57SJeff Layton 17137775ec57SJeff Layton static bool 17147775ec57SJeff Layton nfsd_has_cached_files(struct dentry *dentry) 17157775ec57SJeff Layton { 17167775ec57SJeff Layton bool ret = false; 17177775ec57SJeff Layton struct inode *inode = d_inode(dentry); 17187775ec57SJeff Layton 17197775ec57SJeff Layton if (inode && S_ISREG(inode->i_mode)) 17207775ec57SJeff Layton ret = nfsd_file_is_cached(inode); 17217775ec57SJeff Layton return ret; 17227775ec57SJeff Layton } 17237775ec57SJeff Layton 17241da177e4SLinus Torvalds /* 17251da177e4SLinus Torvalds * Rename a file 17261da177e4SLinus Torvalds * N.B. After this call _both_ ffhp and tfhp need an fh_put 17271da177e4SLinus Torvalds */ 17286264d69dSAl Viro __be32 17291da177e4SLinus Torvalds nfsd_rename(struct svc_rqst *rqstp, struct svc_fh *ffhp, char *fname, int flen, 17301da177e4SLinus Torvalds struct svc_fh *tfhp, char *tname, int tlen) 17311da177e4SLinus Torvalds { 17321da177e4SLinus Torvalds struct dentry *fdentry, *tdentry, *odentry, *ndentry, *trap; 17331da177e4SLinus Torvalds struct inode *fdir, *tdir; 17346264d69dSAl Viro __be32 err; 17356264d69dSAl Viro int host_err; 17367f84b488SJeff Layton bool close_cached = false; 17371da177e4SLinus Torvalds 17388837abcaSMiklos Szeredi err = fh_verify(rqstp, ffhp, S_IFDIR, NFSD_MAY_REMOVE); 17391da177e4SLinus Torvalds if (err) 17401da177e4SLinus Torvalds goto out; 17418837abcaSMiklos Szeredi err = fh_verify(rqstp, tfhp, S_IFDIR, NFSD_MAY_CREATE); 17421da177e4SLinus Torvalds if (err) 17431da177e4SLinus Torvalds goto out; 17441da177e4SLinus Torvalds 17451da177e4SLinus Torvalds fdentry = ffhp->fh_dentry; 17462b0143b5SDavid Howells fdir = d_inode(fdentry); 17471da177e4SLinus Torvalds 17481da177e4SLinus Torvalds tdentry = tfhp->fh_dentry; 17492b0143b5SDavid Howells tdir = d_inode(tdentry); 17501da177e4SLinus Torvalds 17511da177e4SLinus Torvalds err = nfserr_perm; 17521da177e4SLinus Torvalds if (!flen || isdotent(fname, flen) || !tlen || isdotent(tname, tlen)) 17531da177e4SLinus Torvalds goto out; 17541da177e4SLinus Torvalds 17557775ec57SJeff Layton retry: 17564a55c101SJan Kara host_err = fh_want_write(ffhp); 17574a55c101SJan Kara if (host_err) { 17584a55c101SJan Kara err = nfserrno(host_err); 17594a55c101SJan Kara goto out; 17604a55c101SJan Kara } 17614a55c101SJan Kara 17621da177e4SLinus Torvalds /* cannot use fh_lock as we need deadlock protective ordering 17631da177e4SLinus Torvalds * so do it by hand */ 17641da177e4SLinus Torvalds trap = lock_rename(tdentry, fdentry); 1765aaf91ec1SJeff Layton ffhp->fh_locked = tfhp->fh_locked = true; 17661da177e4SLinus Torvalds fill_pre_wcc(ffhp); 17671da177e4SLinus Torvalds fill_pre_wcc(tfhp); 17681da177e4SLinus Torvalds 17691da177e4SLinus Torvalds odentry = lookup_one_len(fname, fdentry, flen); 17706264d69dSAl Viro host_err = PTR_ERR(odentry); 17711da177e4SLinus Torvalds if (IS_ERR(odentry)) 17721da177e4SLinus Torvalds goto out_nfserr; 17731da177e4SLinus Torvalds 17746264d69dSAl Viro host_err = -ENOENT; 17752b0143b5SDavid Howells if (d_really_is_negative(odentry)) 17761da177e4SLinus Torvalds goto out_dput_old; 17776264d69dSAl Viro host_err = -EINVAL; 17781da177e4SLinus Torvalds if (odentry == trap) 17791da177e4SLinus Torvalds goto out_dput_old; 17801da177e4SLinus Torvalds 17811da177e4SLinus Torvalds ndentry = lookup_one_len(tname, tdentry, tlen); 17826264d69dSAl Viro host_err = PTR_ERR(ndentry); 17831da177e4SLinus Torvalds if (IS_ERR(ndentry)) 17841da177e4SLinus Torvalds goto out_dput_old; 17856264d69dSAl Viro host_err = -ENOTEMPTY; 17861da177e4SLinus Torvalds if (ndentry == trap) 17871da177e4SLinus Torvalds goto out_dput_new; 17881da177e4SLinus Torvalds 17899079b1ebSDave Hansen host_err = -EXDEV; 17909079b1ebSDave Hansen if (ffhp->fh_export->ex_path.mnt != tfhp->fh_export->ex_path.mnt) 17919079b1ebSDave Hansen goto out_dput_new; 1792aa387d6cSJ. Bruce Fields if (ffhp->fh_export->ex_path.dentry != tfhp->fh_export->ex_path.dentry) 1793aa387d6cSJ. Bruce Fields goto out_dput_new; 17949079b1ebSDave Hansen 17957f84b488SJeff Layton if ((ndentry->d_sb->s_export_op->flags & EXPORT_OP_CLOSE_BEFORE_UNLINK) && 17967f84b488SJeff Layton nfsd_has_cached_files(ndentry)) { 17977f84b488SJeff Layton close_cached = true; 17987775ec57SJeff Layton goto out_dput_old; 17997775ec57SJeff Layton } else { 1800520c8b16SMiklos Szeredi host_err = vfs_rename(fdir, odentry, tdir, ndentry, NULL, 0); 1801f501912aSBen Myers if (!host_err) { 1802f501912aSBen Myers host_err = commit_metadata(tfhp); 18036264d69dSAl Viro if (!host_err) 1804f501912aSBen Myers host_err = commit_metadata(ffhp); 18051da177e4SLinus Torvalds } 18067775ec57SJeff Layton } 18071da177e4SLinus Torvalds out_dput_new: 18081da177e4SLinus Torvalds dput(ndentry); 18091da177e4SLinus Torvalds out_dput_old: 18101da177e4SLinus Torvalds dput(odentry); 18111da177e4SLinus Torvalds out_nfserr: 18126264d69dSAl Viro err = nfserrno(host_err); 1813fbb74a34SJ. Bruce Fields /* 1814fbb74a34SJ. Bruce Fields * We cannot rely on fh_unlock on the two filehandles, 18151da177e4SLinus Torvalds * as that would do the wrong thing if the two directories 1816fbb74a34SJ. Bruce Fields * were the same, so again we do it by hand. 18171da177e4SLinus Torvalds */ 18187f84b488SJeff Layton if (!close_cached) { 18191da177e4SLinus Torvalds fill_post_wcc(ffhp); 18201da177e4SLinus Torvalds fill_post_wcc(tfhp); 18217775ec57SJeff Layton } 18221da177e4SLinus Torvalds unlock_rename(tdentry, fdentry); 1823aaf91ec1SJeff Layton ffhp->fh_locked = tfhp->fh_locked = false; 18244a55c101SJan Kara fh_drop_write(ffhp); 18251da177e4SLinus Torvalds 18267775ec57SJeff Layton /* 18277775ec57SJeff Layton * If the target dentry has cached open files, then we need to try to 18287775ec57SJeff Layton * close them prior to doing the rename. Flushing delayed fput 18297775ec57SJeff Layton * shouldn't be done with locks held however, so we delay it until this 18307775ec57SJeff Layton * point and then reattempt the whole shebang. 18317775ec57SJeff Layton */ 18327f84b488SJeff Layton if (close_cached) { 18337f84b488SJeff Layton close_cached = false; 18347775ec57SJeff Layton nfsd_close_cached_files(ndentry); 18357775ec57SJeff Layton dput(ndentry); 18367775ec57SJeff Layton goto retry; 18377775ec57SJeff Layton } 18381da177e4SLinus Torvalds out: 18391da177e4SLinus Torvalds return err; 18401da177e4SLinus Torvalds } 18411da177e4SLinus Torvalds 18421da177e4SLinus Torvalds /* 18431da177e4SLinus Torvalds * Unlink a file or directory 18441da177e4SLinus Torvalds * N.B. After this call fhp needs an fh_put 18451da177e4SLinus Torvalds */ 18466264d69dSAl Viro __be32 18471da177e4SLinus Torvalds nfsd_unlink(struct svc_rqst *rqstp, struct svc_fh *fhp, int type, 18481da177e4SLinus Torvalds char *fname, int flen) 18491da177e4SLinus Torvalds { 18501da177e4SLinus Torvalds struct dentry *dentry, *rdentry; 18511da177e4SLinus Torvalds struct inode *dirp; 18526264d69dSAl Viro __be32 err; 18536264d69dSAl Viro int host_err; 18541da177e4SLinus Torvalds 18551da177e4SLinus Torvalds err = nfserr_acces; 18561da177e4SLinus Torvalds if (!flen || isdotent(fname, flen)) 18571da177e4SLinus Torvalds goto out; 18588837abcaSMiklos Szeredi err = fh_verify(rqstp, fhp, S_IFDIR, NFSD_MAY_REMOVE); 18591da177e4SLinus Torvalds if (err) 18601da177e4SLinus Torvalds goto out; 18611da177e4SLinus Torvalds 18624a55c101SJan Kara host_err = fh_want_write(fhp); 18634a55c101SJan Kara if (host_err) 18644a55c101SJan Kara goto out_nfserr; 18654a55c101SJan Kara 186612fd3520SPeter Zijlstra fh_lock_nested(fhp, I_MUTEX_PARENT); 18671da177e4SLinus Torvalds dentry = fhp->fh_dentry; 18682b0143b5SDavid Howells dirp = d_inode(dentry); 18691da177e4SLinus Torvalds 18701da177e4SLinus Torvalds rdentry = lookup_one_len(fname, dentry, flen); 18716264d69dSAl Viro host_err = PTR_ERR(rdentry); 18721da177e4SLinus Torvalds if (IS_ERR(rdentry)) 18730ca0c9d7SJ. Bruce Fields goto out_drop_write; 18741da177e4SLinus Torvalds 18752b0143b5SDavid Howells if (d_really_is_negative(rdentry)) { 18761da177e4SLinus Torvalds dput(rdentry); 18770ca0c9d7SJ. Bruce Fields host_err = -ENOENT; 18780ca0c9d7SJ. Bruce Fields goto out_drop_write; 18791da177e4SLinus Torvalds } 18801da177e4SLinus Torvalds 18811da177e4SLinus Torvalds if (!type) 18822b0143b5SDavid Howells type = d_inode(rdentry)->i_mode & S_IFMT; 18831da177e4SLinus Torvalds 18847775ec57SJeff Layton if (type != S_IFDIR) { 18857f84b488SJeff Layton if (rdentry->d_sb->s_export_op->flags & EXPORT_OP_CLOSE_BEFORE_UNLINK) 18867775ec57SJeff Layton nfsd_close_cached_files(rdentry); 1887b21996e3SJ. Bruce Fields host_err = vfs_unlink(dirp, rdentry, NULL); 18887775ec57SJeff Layton } else { 18896264d69dSAl Viro host_err = vfs_rmdir(dirp, rdentry); 18907775ec57SJeff Layton } 18917775ec57SJeff Layton 1892541ce98cSJ. Bruce Fields if (!host_err) 1893541ce98cSJ. Bruce Fields host_err = commit_metadata(fhp); 18941da177e4SLinus Torvalds dput(rdentry); 18951da177e4SLinus Torvalds 18960ca0c9d7SJ. Bruce Fields out_drop_write: 18970ca0c9d7SJ. Bruce Fields fh_drop_write(fhp); 18981da177e4SLinus Torvalds out_nfserr: 1899466e16f0SNeilBrown if (host_err == -EBUSY) { 1900466e16f0SNeilBrown /* name is mounted-on. There is no perfect 1901466e16f0SNeilBrown * error status. 1902466e16f0SNeilBrown */ 1903466e16f0SNeilBrown if (nfsd_v4client(rqstp)) 1904466e16f0SNeilBrown err = nfserr_file_open; 1905466e16f0SNeilBrown else 1906466e16f0SNeilBrown err = nfserr_acces; 1907466e16f0SNeilBrown } else { 19086264d69dSAl Viro err = nfserrno(host_err); 1909466e16f0SNeilBrown } 1910f193fbabSYAMAMOTO Takashi out: 1911f193fbabSYAMAMOTO Takashi return err; 19121da177e4SLinus Torvalds } 19131da177e4SLinus Torvalds 19141da177e4SLinus Torvalds /* 191514f7dd63SDavid Woodhouse * We do this buffering because we must not call back into the file 191614f7dd63SDavid Woodhouse * system's ->lookup() method from the filldir callback. That may well 191714f7dd63SDavid Woodhouse * deadlock a number of file systems. 191814f7dd63SDavid Woodhouse * 191914f7dd63SDavid Woodhouse * This is based heavily on the implementation of same in XFS. 192014f7dd63SDavid Woodhouse */ 192114f7dd63SDavid Woodhouse struct buffered_dirent { 192214f7dd63SDavid Woodhouse u64 ino; 192314f7dd63SDavid Woodhouse loff_t offset; 192414f7dd63SDavid Woodhouse int namlen; 192514f7dd63SDavid Woodhouse unsigned int d_type; 192614f7dd63SDavid Woodhouse char name[]; 192714f7dd63SDavid Woodhouse }; 192814f7dd63SDavid Woodhouse 192914f7dd63SDavid Woodhouse struct readdir_data { 19305c0ba4e0SAl Viro struct dir_context ctx; 193114f7dd63SDavid Woodhouse char *dirent; 193214f7dd63SDavid Woodhouse size_t used; 193353c9c5c0SAl Viro int full; 193414f7dd63SDavid Woodhouse }; 193514f7dd63SDavid Woodhouse 1936ac7576f4SMiklos Szeredi static int nfsd_buffered_filldir(struct dir_context *ctx, const char *name, 1937ac7576f4SMiklos Szeredi int namlen, loff_t offset, u64 ino, 1938ac7576f4SMiklos Szeredi unsigned int d_type) 193914f7dd63SDavid Woodhouse { 1940ac7576f4SMiklos Szeredi struct readdir_data *buf = 1941ac7576f4SMiklos Szeredi container_of(ctx, struct readdir_data, ctx); 194214f7dd63SDavid Woodhouse struct buffered_dirent *de = (void *)(buf->dirent + buf->used); 194314f7dd63SDavid Woodhouse unsigned int reclen; 194414f7dd63SDavid Woodhouse 194514f7dd63SDavid Woodhouse reclen = ALIGN(sizeof(struct buffered_dirent) + namlen, sizeof(u64)); 194653c9c5c0SAl Viro if (buf->used + reclen > PAGE_SIZE) { 194753c9c5c0SAl Viro buf->full = 1; 194814f7dd63SDavid Woodhouse return -EINVAL; 194953c9c5c0SAl Viro } 195014f7dd63SDavid Woodhouse 195114f7dd63SDavid Woodhouse de->namlen = namlen; 195214f7dd63SDavid Woodhouse de->offset = offset; 195314f7dd63SDavid Woodhouse de->ino = ino; 195414f7dd63SDavid Woodhouse de->d_type = d_type; 195514f7dd63SDavid Woodhouse memcpy(de->name, name, namlen); 195614f7dd63SDavid Woodhouse buf->used += reclen; 195714f7dd63SDavid Woodhouse 195814f7dd63SDavid Woodhouse return 0; 195914f7dd63SDavid Woodhouse } 196014f7dd63SDavid Woodhouse 1961ac7576f4SMiklos Szeredi static __be32 nfsd_buffered_readdir(struct file *file, nfsd_filldir_t func, 19622628b766SDavid Woodhouse struct readdir_cd *cdp, loff_t *offsetp) 19632628b766SDavid Woodhouse { 196414f7dd63SDavid Woodhouse struct buffered_dirent *de; 19652628b766SDavid Woodhouse int host_err; 196614f7dd63SDavid Woodhouse int size; 196714f7dd63SDavid Woodhouse loff_t offset; 1968ac6614b7SAl Viro struct readdir_data buf = { 1969ac6614b7SAl Viro .ctx.actor = nfsd_buffered_filldir, 1970ac6614b7SAl Viro .dirent = (void *)__get_free_page(GFP_KERNEL) 1971ac6614b7SAl Viro }; 19722628b766SDavid Woodhouse 197314f7dd63SDavid Woodhouse if (!buf.dirent) 19742f9092e1SDavid Woodhouse return nfserrno(-ENOMEM); 197514f7dd63SDavid Woodhouse 197614f7dd63SDavid Woodhouse offset = *offsetp; 19772628b766SDavid Woodhouse 197814f7dd63SDavid Woodhouse while (1) { 197914f7dd63SDavid Woodhouse unsigned int reclen; 198014f7dd63SDavid Woodhouse 1981b726e923SDoug Nazar cdp->err = nfserr_eof; /* will be cleared on successful read */ 198214f7dd63SDavid Woodhouse buf.used = 0; 198353c9c5c0SAl Viro buf.full = 0; 198414f7dd63SDavid Woodhouse 19855c0ba4e0SAl Viro host_err = iterate_dir(file, &buf.ctx); 198653c9c5c0SAl Viro if (buf.full) 198753c9c5c0SAl Viro host_err = 0; 198853c9c5c0SAl Viro 198953c9c5c0SAl Viro if (host_err < 0) 199014f7dd63SDavid Woodhouse break; 199114f7dd63SDavid Woodhouse 199214f7dd63SDavid Woodhouse size = buf.used; 199314f7dd63SDavid Woodhouse 199414f7dd63SDavid Woodhouse if (!size) 199514f7dd63SDavid Woodhouse break; 199614f7dd63SDavid Woodhouse 199714f7dd63SDavid Woodhouse de = (struct buffered_dirent *)buf.dirent; 199814f7dd63SDavid Woodhouse while (size > 0) { 199914f7dd63SDavid Woodhouse offset = de->offset; 200014f7dd63SDavid Woodhouse 200114f7dd63SDavid Woodhouse if (func(cdp, de->name, de->namlen, de->offset, 200214f7dd63SDavid Woodhouse de->ino, de->d_type)) 20032f9092e1SDavid Woodhouse break; 200414f7dd63SDavid Woodhouse 200514f7dd63SDavid Woodhouse if (cdp->err != nfs_ok) 20062f9092e1SDavid Woodhouse break; 200714f7dd63SDavid Woodhouse 200814f7dd63SDavid Woodhouse reclen = ALIGN(sizeof(*de) + de->namlen, 200914f7dd63SDavid Woodhouse sizeof(u64)); 201014f7dd63SDavid Woodhouse size -= reclen; 201114f7dd63SDavid Woodhouse de = (struct buffered_dirent *)((char *)de + reclen); 201214f7dd63SDavid Woodhouse } 20132f9092e1SDavid Woodhouse if (size > 0) /* We bailed out early */ 20142f9092e1SDavid Woodhouse break; 20152f9092e1SDavid Woodhouse 2016c002a6c7SDavid Woodhouse offset = vfs_llseek(file, 0, SEEK_CUR); 201714f7dd63SDavid Woodhouse } 201814f7dd63SDavid Woodhouse 201914f7dd63SDavid Woodhouse free_page((unsigned long)(buf.dirent)); 20202628b766SDavid Woodhouse 20212628b766SDavid Woodhouse if (host_err) 20222628b766SDavid Woodhouse return nfserrno(host_err); 202314f7dd63SDavid Woodhouse 202414f7dd63SDavid Woodhouse *offsetp = offset; 20252628b766SDavid Woodhouse return cdp->err; 20262628b766SDavid Woodhouse } 20272628b766SDavid Woodhouse 20281da177e4SLinus Torvalds /* 20291da177e4SLinus Torvalds * Read entries from a directory. 20301da177e4SLinus Torvalds * The NFSv3/4 verifier we ignore for now. 20311da177e4SLinus Torvalds */ 20326264d69dSAl Viro __be32 20331da177e4SLinus Torvalds nfsd_readdir(struct svc_rqst *rqstp, struct svc_fh *fhp, loff_t *offsetp, 2034ac7576f4SMiklos Szeredi struct readdir_cd *cdp, nfsd_filldir_t func) 20351da177e4SLinus Torvalds { 20366264d69dSAl Viro __be32 err; 20371da177e4SLinus Torvalds struct file *file; 20381da177e4SLinus Torvalds loff_t offset = *offsetp; 203906effdbbSBernd Schubert int may_flags = NFSD_MAY_READ; 20401da177e4SLinus Torvalds 204106effdbbSBernd Schubert /* NFSv2 only supports 32 bit cookies */ 204206effdbbSBernd Schubert if (rqstp->rq_vers > 2) 204306effdbbSBernd Schubert may_flags |= NFSD_MAY_64BIT_COOKIE; 204406effdbbSBernd Schubert 204506effdbbSBernd Schubert err = nfsd_open(rqstp, fhp, S_IFDIR, may_flags, &file); 20461da177e4SLinus Torvalds if (err) 20471da177e4SLinus Torvalds goto out; 20481da177e4SLinus Torvalds 2049b108fe6bSJeff Layton offset = vfs_llseek(file, offset, SEEK_SET); 20501da177e4SLinus Torvalds if (offset < 0) { 20511da177e4SLinus Torvalds err = nfserrno((int)offset); 20521da177e4SLinus Torvalds goto out_close; 20531da177e4SLinus Torvalds } 20541da177e4SLinus Torvalds 205514f7dd63SDavid Woodhouse err = nfsd_buffered_readdir(file, func, cdp, offsetp); 20561da177e4SLinus Torvalds 20571da177e4SLinus Torvalds if (err == nfserr_eof || err == nfserr_toosmall) 20581da177e4SLinus Torvalds err = nfs_ok; /* can still be found in ->err */ 20591da177e4SLinus Torvalds out_close: 2060fd891454SChristoph Hellwig fput(file); 20611da177e4SLinus Torvalds out: 20621da177e4SLinus Torvalds return err; 20631da177e4SLinus Torvalds } 20641da177e4SLinus Torvalds 20651da177e4SLinus Torvalds /* 20661da177e4SLinus Torvalds * Get file system stats 20671da177e4SLinus Torvalds * N.B. After this call fhp needs an fh_put 20681da177e4SLinus Torvalds */ 20696264d69dSAl Viro __be32 207004716e66SJ. Bruce Fields nfsd_statfs(struct svc_rqst *rqstp, struct svc_fh *fhp, struct kstatfs *stat, int access) 20711da177e4SLinus Torvalds { 2072f6360efbSTakashi Iwai __be32 err; 2073f6360efbSTakashi Iwai 2074f6360efbSTakashi Iwai err = fh_verify(rqstp, fhp, 0, NFSD_MAY_NOP | access); 2075f6360efbSTakashi Iwai if (!err) { 2076ebabe9a9SChristoph Hellwig struct path path = { 2077ebabe9a9SChristoph Hellwig .mnt = fhp->fh_export->ex_path.mnt, 2078ebabe9a9SChristoph Hellwig .dentry = fhp->fh_dentry, 2079ebabe9a9SChristoph Hellwig }; 2080f6360efbSTakashi Iwai if (vfs_statfs(&path, stat)) 20811da177e4SLinus Torvalds err = nfserr_io; 2082f6360efbSTakashi Iwai } 20831da177e4SLinus Torvalds return err; 20841da177e4SLinus Torvalds } 20851da177e4SLinus Torvalds 2086c7d51402SJ. Bruce Fields static int exp_rdonly(struct svc_rqst *rqstp, struct svc_export *exp) 2087e22841c6SJ. Bruce Fields { 2088c7d51402SJ. Bruce Fields return nfsexp_flags(rqstp, exp) & NFSEXP_READONLY; 2089e22841c6SJ. Bruce Fields } 2090e22841c6SJ. Bruce Fields 209132119446SFrank van der Linden #ifdef CONFIG_NFSD_V4 209232119446SFrank van der Linden /* 209332119446SFrank van der Linden * Helper function to translate error numbers. In the case of xattr operations, 209432119446SFrank van der Linden * some error codes need to be translated outside of the standard translations. 209532119446SFrank van der Linden * 209632119446SFrank van der Linden * ENODATA needs to be translated to nfserr_noxattr. 209732119446SFrank van der Linden * E2BIG to nfserr_xattr2big. 209832119446SFrank van der Linden * 209932119446SFrank van der Linden * Additionally, vfs_listxattr can return -ERANGE. This means that the 210032119446SFrank van der Linden * file has too many extended attributes to retrieve inside an 210132119446SFrank van der Linden * XATTR_LIST_MAX sized buffer. This is a bug in the xattr implementation: 210232119446SFrank van der Linden * filesystems will allow the adding of extended attributes until they hit 210332119446SFrank van der Linden * their own internal limit. This limit may be larger than XATTR_LIST_MAX. 210432119446SFrank van der Linden * So, at that point, the attributes are present and valid, but can't 210532119446SFrank van der Linden * be retrieved using listxattr, since the upper level xattr code enforces 210632119446SFrank van der Linden * the XATTR_LIST_MAX limit. 210732119446SFrank van der Linden * 210832119446SFrank van der Linden * This bug means that we need to deal with listxattr returning -ERANGE. The 210932119446SFrank van der Linden * best mapping is to return TOOSMALL. 211032119446SFrank van der Linden */ 211132119446SFrank van der Linden static __be32 211232119446SFrank van der Linden nfsd_xattr_errno(int err) 211332119446SFrank van der Linden { 211432119446SFrank van der Linden switch (err) { 211532119446SFrank van der Linden case -ENODATA: 211632119446SFrank van der Linden return nfserr_noxattr; 211732119446SFrank van der Linden case -E2BIG: 211832119446SFrank van der Linden return nfserr_xattr2big; 211932119446SFrank van der Linden case -ERANGE: 212032119446SFrank van der Linden return nfserr_toosmall; 212132119446SFrank van der Linden } 212232119446SFrank van der Linden return nfserrno(err); 212332119446SFrank van der Linden } 212432119446SFrank van der Linden 212532119446SFrank van der Linden /* 212632119446SFrank van der Linden * Retrieve the specified user extended attribute. To avoid always 212732119446SFrank van der Linden * having to allocate the maximum size (since we are not getting 212832119446SFrank van der Linden * a maximum size from the RPC), do a probe + alloc. Hold a reader 212932119446SFrank van der Linden * lock on i_rwsem to prevent the extended attribute from changing 213032119446SFrank van der Linden * size while we're doing this. 213132119446SFrank van der Linden */ 213232119446SFrank van der Linden __be32 213332119446SFrank van der Linden nfsd_getxattr(struct svc_rqst *rqstp, struct svc_fh *fhp, char *name, 213432119446SFrank van der Linden void **bufp, int *lenp) 213532119446SFrank van der Linden { 213632119446SFrank van der Linden ssize_t len; 213732119446SFrank van der Linden __be32 err; 213832119446SFrank van der Linden char *buf; 213932119446SFrank van der Linden struct inode *inode; 214032119446SFrank van der Linden struct dentry *dentry; 214132119446SFrank van der Linden 214232119446SFrank van der Linden err = fh_verify(rqstp, fhp, 0, NFSD_MAY_READ); 214332119446SFrank van der Linden if (err) 214432119446SFrank van der Linden return err; 214532119446SFrank van der Linden 214632119446SFrank van der Linden err = nfs_ok; 214732119446SFrank van der Linden dentry = fhp->fh_dentry; 214832119446SFrank van der Linden inode = d_inode(dentry); 214932119446SFrank van der Linden 215032119446SFrank van der Linden inode_lock_shared(inode); 215132119446SFrank van der Linden 215232119446SFrank van der Linden len = vfs_getxattr(dentry, name, NULL, 0); 215332119446SFrank van der Linden 215432119446SFrank van der Linden /* 215532119446SFrank van der Linden * Zero-length attribute, just return. 215632119446SFrank van der Linden */ 215732119446SFrank van der Linden if (len == 0) { 215832119446SFrank van der Linden *bufp = NULL; 215932119446SFrank van der Linden *lenp = 0; 216032119446SFrank van der Linden goto out; 216132119446SFrank van der Linden } 216232119446SFrank van der Linden 216332119446SFrank van der Linden if (len < 0) { 216432119446SFrank van der Linden err = nfsd_xattr_errno(len); 216532119446SFrank van der Linden goto out; 216632119446SFrank van der Linden } 216732119446SFrank van der Linden 216832119446SFrank van der Linden if (len > *lenp) { 216932119446SFrank van der Linden err = nfserr_toosmall; 217032119446SFrank van der Linden goto out; 217132119446SFrank van der Linden } 217232119446SFrank van der Linden 217332119446SFrank van der Linden buf = kvmalloc(len, GFP_KERNEL | GFP_NOFS); 217432119446SFrank van der Linden if (buf == NULL) { 217532119446SFrank van der Linden err = nfserr_jukebox; 217632119446SFrank van der Linden goto out; 217732119446SFrank van der Linden } 217832119446SFrank van der Linden 217932119446SFrank van der Linden len = vfs_getxattr(dentry, name, buf, len); 218032119446SFrank van der Linden if (len <= 0) { 218132119446SFrank van der Linden kvfree(buf); 218232119446SFrank van der Linden buf = NULL; 218332119446SFrank van der Linden err = nfsd_xattr_errno(len); 218432119446SFrank van der Linden } 218532119446SFrank van der Linden 218632119446SFrank van der Linden *lenp = len; 218732119446SFrank van der Linden *bufp = buf; 218832119446SFrank van der Linden 218932119446SFrank van der Linden out: 219032119446SFrank van der Linden inode_unlock_shared(inode); 219132119446SFrank van der Linden 219232119446SFrank van der Linden return err; 219332119446SFrank van der Linden } 219432119446SFrank van der Linden 219532119446SFrank van der Linden /* 219632119446SFrank van der Linden * Retrieve the xattr names. Since we can't know how many are 219732119446SFrank van der Linden * user extended attributes, we must get all attributes here, 219832119446SFrank van der Linden * and have the XDR encode filter out the "user." ones. 219932119446SFrank van der Linden * 220032119446SFrank van der Linden * While this could always just allocate an XATTR_LIST_MAX 220132119446SFrank van der Linden * buffer, that's a waste, so do a probe + allocate. To 220232119446SFrank van der Linden * avoid any changes between the probe and allocate, wrap 220332119446SFrank van der Linden * this in inode_lock. 220432119446SFrank van der Linden */ 220532119446SFrank van der Linden __be32 220632119446SFrank van der Linden nfsd_listxattr(struct svc_rqst *rqstp, struct svc_fh *fhp, char **bufp, 220732119446SFrank van der Linden int *lenp) 220832119446SFrank van der Linden { 220932119446SFrank van der Linden ssize_t len; 221032119446SFrank van der Linden __be32 err; 221132119446SFrank van der Linden char *buf; 221232119446SFrank van der Linden struct inode *inode; 221332119446SFrank van der Linden struct dentry *dentry; 221432119446SFrank van der Linden 221532119446SFrank van der Linden err = fh_verify(rqstp, fhp, 0, NFSD_MAY_READ); 221632119446SFrank van der Linden if (err) 221732119446SFrank van der Linden return err; 221832119446SFrank van der Linden 221932119446SFrank van der Linden dentry = fhp->fh_dentry; 222032119446SFrank van der Linden inode = d_inode(dentry); 222132119446SFrank van der Linden *lenp = 0; 222232119446SFrank van der Linden 222332119446SFrank van der Linden inode_lock_shared(inode); 222432119446SFrank van der Linden 222532119446SFrank van der Linden len = vfs_listxattr(dentry, NULL, 0); 222632119446SFrank van der Linden if (len <= 0) { 222732119446SFrank van der Linden err = nfsd_xattr_errno(len); 222832119446SFrank van der Linden goto out; 222932119446SFrank van der Linden } 223032119446SFrank van der Linden 223132119446SFrank van der Linden if (len > XATTR_LIST_MAX) { 223232119446SFrank van der Linden err = nfserr_xattr2big; 223332119446SFrank van der Linden goto out; 223432119446SFrank van der Linden } 223532119446SFrank van der Linden 223632119446SFrank van der Linden /* 223732119446SFrank van der Linden * We're holding i_rwsem - use GFP_NOFS. 223832119446SFrank van der Linden */ 223932119446SFrank van der Linden buf = kvmalloc(len, GFP_KERNEL | GFP_NOFS); 224032119446SFrank van der Linden if (buf == NULL) { 224132119446SFrank van der Linden err = nfserr_jukebox; 224232119446SFrank van der Linden goto out; 224332119446SFrank van der Linden } 224432119446SFrank van der Linden 224532119446SFrank van der Linden len = vfs_listxattr(dentry, buf, len); 224632119446SFrank van der Linden if (len <= 0) { 224732119446SFrank van der Linden kvfree(buf); 224832119446SFrank van der Linden err = nfsd_xattr_errno(len); 224932119446SFrank van der Linden goto out; 225032119446SFrank van der Linden } 225132119446SFrank van der Linden 225232119446SFrank van der Linden *lenp = len; 225332119446SFrank van der Linden *bufp = buf; 225432119446SFrank van der Linden 225532119446SFrank van der Linden err = nfs_ok; 225632119446SFrank van der Linden out: 225732119446SFrank van der Linden inode_unlock_shared(inode); 225832119446SFrank van der Linden 225932119446SFrank van der Linden return err; 226032119446SFrank van der Linden } 226132119446SFrank van der Linden 226232119446SFrank van der Linden /* 226332119446SFrank van der Linden * Removexattr and setxattr need to call fh_lock to both lock the inode 226432119446SFrank van der Linden * and set the change attribute. Since the top-level vfs_removexattr 226532119446SFrank van der Linden * and vfs_setxattr calls already do their own inode_lock calls, call 226632119446SFrank van der Linden * the _locked variant. Pass in a NULL pointer for delegated_inode, 226732119446SFrank van der Linden * and let the client deal with NFS4ERR_DELAY (same as with e.g. 226832119446SFrank van der Linden * setattr and remove). 226932119446SFrank van der Linden */ 227032119446SFrank van der Linden __be32 227132119446SFrank van der Linden nfsd_removexattr(struct svc_rqst *rqstp, struct svc_fh *fhp, char *name) 227232119446SFrank van der Linden { 22738237284aSChuck Lever __be32 err; 22748237284aSChuck Lever int ret; 227532119446SFrank van der Linden 227632119446SFrank van der Linden err = fh_verify(rqstp, fhp, 0, NFSD_MAY_WRITE); 227732119446SFrank van der Linden if (err) 227832119446SFrank van der Linden return err; 227932119446SFrank van der Linden 228032119446SFrank van der Linden ret = fh_want_write(fhp); 228132119446SFrank van der Linden if (ret) 228232119446SFrank van der Linden return nfserrno(ret); 228332119446SFrank van der Linden 228432119446SFrank van der Linden fh_lock(fhp); 228532119446SFrank van der Linden 228632119446SFrank van der Linden ret = __vfs_removexattr_locked(fhp->fh_dentry, name, NULL); 228732119446SFrank van der Linden 228832119446SFrank van der Linden fh_unlock(fhp); 228932119446SFrank van der Linden fh_drop_write(fhp); 229032119446SFrank van der Linden 229132119446SFrank van der Linden return nfsd_xattr_errno(ret); 229232119446SFrank van der Linden } 229332119446SFrank van der Linden 229432119446SFrank van der Linden __be32 229532119446SFrank van der Linden nfsd_setxattr(struct svc_rqst *rqstp, struct svc_fh *fhp, char *name, 229632119446SFrank van der Linden void *buf, u32 len, u32 flags) 229732119446SFrank van der Linden { 22988237284aSChuck Lever __be32 err; 22998237284aSChuck Lever int ret; 230032119446SFrank van der Linden 230132119446SFrank van der Linden err = fh_verify(rqstp, fhp, 0, NFSD_MAY_WRITE); 230232119446SFrank van der Linden if (err) 230332119446SFrank van der Linden return err; 230432119446SFrank van der Linden 230532119446SFrank van der Linden ret = fh_want_write(fhp); 230632119446SFrank van der Linden if (ret) 230732119446SFrank van der Linden return nfserrno(ret); 230832119446SFrank van der Linden fh_lock(fhp); 230932119446SFrank van der Linden 231032119446SFrank van der Linden ret = __vfs_setxattr_locked(fhp->fh_dentry, name, buf, len, flags, 231132119446SFrank van der Linden NULL); 231232119446SFrank van der Linden 231332119446SFrank van der Linden fh_unlock(fhp); 231432119446SFrank van der Linden fh_drop_write(fhp); 231532119446SFrank van der Linden 231632119446SFrank van der Linden return nfsd_xattr_errno(ret); 231732119446SFrank van der Linden } 231832119446SFrank van der Linden #endif 231932119446SFrank van der Linden 23201da177e4SLinus Torvalds /* 23211da177e4SLinus Torvalds * Check for a user's access permissions to this inode. 23221da177e4SLinus Torvalds */ 23236264d69dSAl Viro __be32 23240ec757dfSJ. Bruce Fields nfsd_permission(struct svc_rqst *rqstp, struct svc_export *exp, 23250ec757dfSJ. Bruce Fields struct dentry *dentry, int acc) 23261da177e4SLinus Torvalds { 23272b0143b5SDavid Howells struct inode *inode = d_inode(dentry); 23281da177e4SLinus Torvalds int err; 23291da177e4SLinus Torvalds 2330aea93397SJ. Bruce Fields if ((acc & NFSD_MAY_MASK) == NFSD_MAY_NOP) 23311da177e4SLinus Torvalds return 0; 23321da177e4SLinus Torvalds #if 0 23331da177e4SLinus Torvalds dprintk("nfsd: permission 0x%x%s%s%s%s%s%s%s mode 0%o%s%s%s\n", 23341da177e4SLinus Torvalds acc, 23358837abcaSMiklos Szeredi (acc & NFSD_MAY_READ)? " read" : "", 23368837abcaSMiklos Szeredi (acc & NFSD_MAY_WRITE)? " write" : "", 23378837abcaSMiklos Szeredi (acc & NFSD_MAY_EXEC)? " exec" : "", 23388837abcaSMiklos Szeredi (acc & NFSD_MAY_SATTR)? " sattr" : "", 23398837abcaSMiklos Szeredi (acc & NFSD_MAY_TRUNC)? " trunc" : "", 23408837abcaSMiklos Szeredi (acc & NFSD_MAY_LOCK)? " lock" : "", 23418837abcaSMiklos Szeredi (acc & NFSD_MAY_OWNER_OVERRIDE)? " owneroverride" : "", 23421da177e4SLinus Torvalds inode->i_mode, 23431da177e4SLinus Torvalds IS_IMMUTABLE(inode)? " immut" : "", 23441da177e4SLinus Torvalds IS_APPEND(inode)? " append" : "", 23452c463e95SDave Hansen __mnt_is_readonly(exp->ex_path.mnt)? " ro" : ""); 23461da177e4SLinus Torvalds dprintk(" owner %d/%d user %d/%d\n", 23475cc0a840SDavid Howells inode->i_uid, inode->i_gid, current_fsuid(), current_fsgid()); 23481da177e4SLinus Torvalds #endif 23491da177e4SLinus Torvalds 23501da177e4SLinus Torvalds /* Normally we reject any write/sattr etc access on a read-only file 23511da177e4SLinus Torvalds * system. But if it is IRIX doing check on write-access for a 23521da177e4SLinus Torvalds * device special file, we ignore rofs. 23531da177e4SLinus Torvalds */ 23548837abcaSMiklos Szeredi if (!(acc & NFSD_MAY_LOCAL_ACCESS)) 23558837abcaSMiklos Szeredi if (acc & (NFSD_MAY_WRITE | NFSD_MAY_SATTR | NFSD_MAY_TRUNC)) { 23562c463e95SDave Hansen if (exp_rdonly(rqstp, exp) || 23572c463e95SDave Hansen __mnt_is_readonly(exp->ex_path.mnt)) 23581da177e4SLinus Torvalds return nfserr_rofs; 23598837abcaSMiklos Szeredi if (/* (acc & NFSD_MAY_WRITE) && */ IS_IMMUTABLE(inode)) 23601da177e4SLinus Torvalds return nfserr_perm; 23611da177e4SLinus Torvalds } 23628837abcaSMiklos Szeredi if ((acc & NFSD_MAY_TRUNC) && IS_APPEND(inode)) 23631da177e4SLinus Torvalds return nfserr_perm; 23641da177e4SLinus Torvalds 23658837abcaSMiklos Szeredi if (acc & NFSD_MAY_LOCK) { 23661da177e4SLinus Torvalds /* If we cannot rely on authentication in NLM requests, 23671da177e4SLinus Torvalds * just allow locks, otherwise require read permission, or 23681da177e4SLinus Torvalds * ownership 23691da177e4SLinus Torvalds */ 23701da177e4SLinus Torvalds if (exp->ex_flags & NFSEXP_NOAUTHNLM) 23711da177e4SLinus Torvalds return 0; 23721da177e4SLinus Torvalds else 23738837abcaSMiklos Szeredi acc = NFSD_MAY_READ | NFSD_MAY_OWNER_OVERRIDE; 23741da177e4SLinus Torvalds } 23751da177e4SLinus Torvalds /* 23761da177e4SLinus Torvalds * The file owner always gets access permission for accesses that 23771da177e4SLinus Torvalds * would normally be checked at open time. This is to make 23781da177e4SLinus Torvalds * file access work even when the client has done a fchmod(fd, 0). 23791da177e4SLinus Torvalds * 23801da177e4SLinus Torvalds * However, `cp foo bar' should fail nevertheless when bar is 23811da177e4SLinus Torvalds * readonly. A sensible way to do this might be to reject all 23821da177e4SLinus Torvalds * attempts to truncate a read-only file, because a creat() call 23831da177e4SLinus Torvalds * always implies file truncation. 23841da177e4SLinus Torvalds * ... but this isn't really fair. A process may reasonably call 23851da177e4SLinus Torvalds * ftruncate on an open file descriptor on a file with perm 000. 23861da177e4SLinus Torvalds * We must trust the client to do permission checking - using "ACCESS" 23871da177e4SLinus Torvalds * with NFSv3. 23881da177e4SLinus Torvalds */ 23898837abcaSMiklos Szeredi if ((acc & NFSD_MAY_OWNER_OVERRIDE) && 23906fab8779SEric W. Biederman uid_eq(inode->i_uid, current_fsuid())) 23911da177e4SLinus Torvalds return 0; 23921da177e4SLinus Torvalds 23938837abcaSMiklos Szeredi /* This assumes NFSD_MAY_{READ,WRITE,EXEC} == MAY_{READ,WRITE,EXEC} */ 239447291baaSChristian Brauner err = inode_permission(&init_user_ns, inode, 239547291baaSChristian Brauner acc & (MAY_READ | MAY_WRITE | MAY_EXEC)); 23961da177e4SLinus Torvalds 23971da177e4SLinus Torvalds /* Allow read access to binaries even when mode 111 */ 23981da177e4SLinus Torvalds if (err == -EACCES && S_ISREG(inode->i_mode) && 2399a043226bSJ. Bruce Fields (acc == (NFSD_MAY_READ | NFSD_MAY_OWNER_OVERRIDE) || 2400a043226bSJ. Bruce Fields acc == (NFSD_MAY_READ | NFSD_MAY_READ_IF_EXEC))) 240147291baaSChristian Brauner err = inode_permission(&init_user_ns, inode, MAY_EXEC); 24021da177e4SLinus Torvalds 24031da177e4SLinus Torvalds return err? nfserrno(err) : 0; 24041da177e4SLinus Torvalds } 2405