1b2441318SGreg Kroah-Hartman // SPDX-License-Identifier: GPL-2.0 21da177e4SLinus Torvalds /* 31da177e4SLinus Torvalds * File operations used by nfsd. Some of these have been ripped from 41da177e4SLinus Torvalds * other parts of the kernel because they weren't exported, others 51da177e4SLinus Torvalds * are partial duplicates with added or changed functionality. 61da177e4SLinus Torvalds * 71da177e4SLinus Torvalds * Note that several functions dget() the dentry upon which they want 81da177e4SLinus Torvalds * to act, most notably those that create directory entries. Response 91da177e4SLinus Torvalds * dentry's are dput()'d if necessary in the release callback. 101da177e4SLinus Torvalds * So if you notice code paths that apparently fail to dput() the 111da177e4SLinus Torvalds * dentry, don't worry--they have been taken care of. 121da177e4SLinus Torvalds * 131da177e4SLinus Torvalds * Copyright (C) 1995-1999 Olaf Kirch <okir@monad.swb.de> 141da177e4SLinus Torvalds * Zerocpy NFS support (C) 2002 Hirokazu Takahashi <taka@valinux.co.jp> 151da177e4SLinus Torvalds */ 161da177e4SLinus Torvalds 171da177e4SLinus Torvalds #include <linux/fs.h> 181da177e4SLinus Torvalds #include <linux/file.h> 19d6b29d7cSJens Axboe #include <linux/splice.h> 2095d871f0SAnna Schumaker #include <linux/falloc.h> 211da177e4SLinus Torvalds #include <linux/fcntl.h> 221da177e4SLinus Torvalds #include <linux/namei.h> 231da177e4SLinus Torvalds #include <linux/delay.h> 240eeca283SRobert Love #include <linux/fsnotify.h> 251da177e4SLinus Torvalds #include <linux/posix_acl_xattr.h> 261da177e4SLinus Torvalds #include <linux/xattr.h> 279a74af21SBoaz Harrosh #include <linux/jhash.h> 289a74af21SBoaz Harrosh #include <linux/ima.h> 295a0e3ad6STejun Heo #include <linux/slab.h> 307c0f6ba6SLinus Torvalds #include <linux/uaccess.h> 31f501912aSBen Myers #include <linux/exportfs.h> 32f501912aSBen Myers #include <linux/writeback.h> 3318032ca0SDavid Quigley #include <linux/security.h> 349a74af21SBoaz Harrosh 359a74af21SBoaz Harrosh #ifdef CONFIG_NFSD_V3 369a74af21SBoaz Harrosh #include "xdr3.h" 379a74af21SBoaz Harrosh #endif /* CONFIG_NFSD_V3 */ 389a74af21SBoaz Harrosh 395be196e5SChristoph Hellwig #ifdef CONFIG_NFSD_V4 40ffa0160aSChristoph Hellwig #include "../internal.h" 412ca72e17SJ. Bruce Fields #include "acl.h" 422ca72e17SJ. Bruce Fields #include "idmap.h" 43a2f4c3faSTrond Myklebust #include "xdr4.h" 441da177e4SLinus Torvalds #endif /* CONFIG_NFSD_V4 */ 451da177e4SLinus Torvalds 469a74af21SBoaz Harrosh #include "nfsd.h" 479a74af21SBoaz Harrosh #include "vfs.h" 48b4935239SJeff Layton #include "filecache.h" 496e8b50d1SJeff Layton #include "trace.h" 501da177e4SLinus Torvalds 511da177e4SLinus Torvalds #define NFSDDBG_FACILITY NFSDDBG_FILEOP 521da177e4SLinus Torvalds 531da177e4SLinus Torvalds /* 541da177e4SLinus Torvalds * Called from nfsd_lookup and encode_dirent. Check if we have crossed 551da177e4SLinus Torvalds * a mount point. 56e0bb89efSJ.Bruce Fields * Returns -EAGAIN or -ETIMEDOUT leaving *dpp and *expp unchanged, 571da177e4SLinus Torvalds * or nfs_ok having possibly changed *dpp and *expp 581da177e4SLinus Torvalds */ 591da177e4SLinus Torvalds int 601da177e4SLinus Torvalds nfsd_cross_mnt(struct svc_rqst *rqstp, struct dentry **dpp, 611da177e4SLinus Torvalds struct svc_export **expp) 621da177e4SLinus Torvalds { 631da177e4SLinus Torvalds struct svc_export *exp = *expp, *exp2 = NULL; 641da177e4SLinus Torvalds struct dentry *dentry = *dpp; 6591c9fa8fSAl Viro struct path path = {.mnt = mntget(exp->ex_path.mnt), 6691c9fa8fSAl Viro .dentry = dget(dentry)}; 676264d69dSAl Viro int err = 0; 681da177e4SLinus Torvalds 697cc90cc3SAl Viro err = follow_down(&path); 70cc53ce53SDavid Howells if (err < 0) 71cc53ce53SDavid Howells goto out; 7299bbf6ecSNeilBrown if (path.mnt == exp->ex_path.mnt && path.dentry == dentry && 7399bbf6ecSNeilBrown nfsd_mountpoint(dentry, exp) == 2) { 7499bbf6ecSNeilBrown /* This is only a mountpoint in some other namespace */ 7599bbf6ecSNeilBrown path_put(&path); 7699bbf6ecSNeilBrown goto out; 7799bbf6ecSNeilBrown } 781da177e4SLinus Torvalds 7991c9fa8fSAl Viro exp2 = rqst_exp_get_by_name(rqstp, &path); 801da177e4SLinus Torvalds if (IS_ERR(exp2)) { 811da177e4SLinus Torvalds err = PTR_ERR(exp2); 823b6cee7bSJ. Bruce Fields /* 833b6cee7bSJ. Bruce Fields * We normally allow NFS clients to continue 843b6cee7bSJ. Bruce Fields * "underneath" a mountpoint that is not exported. 853b6cee7bSJ. Bruce Fields * The exception is V4ROOT, where no traversal is ever 863b6cee7bSJ. Bruce Fields * allowed without an explicit export of the new 873b6cee7bSJ. Bruce Fields * directory. 883b6cee7bSJ. Bruce Fields */ 893b6cee7bSJ. Bruce Fields if (err == -ENOENT && !(exp->ex_flags & NFSEXP_V4ROOT)) 903b6cee7bSJ. Bruce Fields err = 0; 9191c9fa8fSAl Viro path_put(&path); 921da177e4SLinus Torvalds goto out; 931da177e4SLinus Torvalds } 943c394ddaSSteve Dickson if (nfsd_v4client(rqstp) || 953c394ddaSSteve Dickson (exp->ex_flags & NFSEXP_CROSSMOUNT) || EX_NOHIDE(exp2)) { 961da177e4SLinus Torvalds /* successfully crossed mount point */ 971644ccc8SAl Viro /* 9891c9fa8fSAl Viro * This is subtle: path.dentry is *not* on path.mnt 9991c9fa8fSAl Viro * at this point. The only reason we are safe is that 10091c9fa8fSAl Viro * original mnt is pinned down by exp, so we should 10191c9fa8fSAl Viro * put path *before* putting exp 1021644ccc8SAl Viro */ 10391c9fa8fSAl Viro *dpp = path.dentry; 10491c9fa8fSAl Viro path.dentry = dentry; 1051644ccc8SAl Viro *expp = exp2; 10691c9fa8fSAl Viro exp2 = exp; 1071da177e4SLinus Torvalds } 10891c9fa8fSAl Viro path_put(&path); 10991c9fa8fSAl Viro exp_put(exp2); 1101da177e4SLinus Torvalds out: 1111da177e4SLinus Torvalds return err; 1121da177e4SLinus Torvalds } 1131da177e4SLinus Torvalds 114289ede45SJ. Bruce Fields static void follow_to_parent(struct path *path) 115289ede45SJ. Bruce Fields { 116289ede45SJ. Bruce Fields struct dentry *dp; 117289ede45SJ. Bruce Fields 118289ede45SJ. Bruce Fields while (path->dentry == path->mnt->mnt_root && follow_up(path)) 119289ede45SJ. Bruce Fields ; 120289ede45SJ. Bruce Fields dp = dget_parent(path->dentry); 121289ede45SJ. Bruce Fields dput(path->dentry); 122289ede45SJ. Bruce Fields path->dentry = dp; 123289ede45SJ. Bruce Fields } 124289ede45SJ. Bruce Fields 125289ede45SJ. Bruce Fields static int nfsd_lookup_parent(struct svc_rqst *rqstp, struct dentry *dparent, struct svc_export **exp, struct dentry **dentryp) 126289ede45SJ. Bruce Fields { 127289ede45SJ. Bruce Fields struct svc_export *exp2; 128289ede45SJ. Bruce Fields struct path path = {.mnt = mntget((*exp)->ex_path.mnt), 129289ede45SJ. Bruce Fields .dentry = dget(dparent)}; 130289ede45SJ. Bruce Fields 131289ede45SJ. Bruce Fields follow_to_parent(&path); 132289ede45SJ. Bruce Fields 133289ede45SJ. Bruce Fields exp2 = rqst_exp_parent(rqstp, &path); 134289ede45SJ. Bruce Fields if (PTR_ERR(exp2) == -ENOENT) { 135289ede45SJ. Bruce Fields *dentryp = dget(dparent); 136289ede45SJ. Bruce Fields } else if (IS_ERR(exp2)) { 137289ede45SJ. Bruce Fields path_put(&path); 138289ede45SJ. Bruce Fields return PTR_ERR(exp2); 139289ede45SJ. Bruce Fields } else { 140289ede45SJ. Bruce Fields *dentryp = dget(path.dentry); 141289ede45SJ. Bruce Fields exp_put(*exp); 142289ede45SJ. Bruce Fields *exp = exp2; 143289ede45SJ. Bruce Fields } 144289ede45SJ. Bruce Fields path_put(&path); 145289ede45SJ. Bruce Fields return 0; 146289ede45SJ. Bruce Fields } 147289ede45SJ. Bruce Fields 14882ead7feSJ. Bruce Fields /* 14982ead7feSJ. Bruce Fields * For nfsd purposes, we treat V4ROOT exports as though there was an 15082ead7feSJ. Bruce Fields * export at *every* directory. 15199bbf6ecSNeilBrown * We return: 15299bbf6ecSNeilBrown * '1' if this dentry *must* be an export point, 15399bbf6ecSNeilBrown * '2' if it might be, if there is really a mount here, and 15499bbf6ecSNeilBrown * '0' if there is no chance of an export point here. 15582ead7feSJ. Bruce Fields */ 1563227fa41SJ. Bruce Fields int nfsd_mountpoint(struct dentry *dentry, struct svc_export *exp) 15782ead7feSJ. Bruce Fields { 15899bbf6ecSNeilBrown if (!d_inode(dentry)) 15999bbf6ecSNeilBrown return 0; 16099bbf6ecSNeilBrown if (exp->ex_flags & NFSEXP_V4ROOT) 16182ead7feSJ. Bruce Fields return 1; 16211fcee02STrond Myklebust if (nfsd4_is_junction(dentry)) 16311fcee02STrond Myklebust return 1; 16499bbf6ecSNeilBrown if (d_mountpoint(dentry)) 16599bbf6ecSNeilBrown /* 16699bbf6ecSNeilBrown * Might only be a mountpoint in a different namespace, 16799bbf6ecSNeilBrown * but we need to check. 16899bbf6ecSNeilBrown */ 16999bbf6ecSNeilBrown return 2; 17082ead7feSJ. Bruce Fields return 0; 17182ead7feSJ. Bruce Fields } 17282ead7feSJ. Bruce Fields 1736264d69dSAl Viro __be32 1746c0a654dSJ. Bruce Fields nfsd_lookup_dentry(struct svc_rqst *rqstp, struct svc_fh *fhp, 1755a022fc8SChuck Lever const char *name, unsigned int len, 1766c0a654dSJ. Bruce Fields struct svc_export **exp_ret, struct dentry **dentry_ret) 1771da177e4SLinus Torvalds { 1781da177e4SLinus Torvalds struct svc_export *exp; 1791da177e4SLinus Torvalds struct dentry *dparent; 1801da177e4SLinus Torvalds struct dentry *dentry; 1816264d69dSAl Viro int host_err; 1821da177e4SLinus Torvalds 1831da177e4SLinus Torvalds dprintk("nfsd: nfsd_lookup(fh %s, %.*s)\n", SVCFH_fmt(fhp), len,name); 1841da177e4SLinus Torvalds 1851da177e4SLinus Torvalds dparent = fhp->fh_dentry; 186bf18f163SKinglong Mee exp = exp_get(fhp->fh_export); 1871da177e4SLinus Torvalds 1881da177e4SLinus Torvalds /* Lookup the name, but don't follow links */ 1891da177e4SLinus Torvalds if (isdotent(name, len)) { 1901da177e4SLinus Torvalds if (len==1) 1911da177e4SLinus Torvalds dentry = dget(dparent); 19254775491SJan Blunck else if (dparent != exp->ex_path.dentry) 1931da177e4SLinus Torvalds dentry = dget_parent(dparent); 194fed83811SJ. Bruce Fields else if (!EX_NOHIDE(exp) && !nfsd_v4client(rqstp)) 1951da177e4SLinus Torvalds dentry = dget(dparent); /* .. == . just like at / */ 1961da177e4SLinus Torvalds else { 1971da177e4SLinus Torvalds /* checking mountpoint crossing is very different when stepping up */ 198289ede45SJ. Bruce Fields host_err = nfsd_lookup_parent(rqstp, dparent, &exp, &dentry); 199289ede45SJ. Bruce Fields if (host_err) 2001da177e4SLinus Torvalds goto out_nfserr; 2011da177e4SLinus Torvalds } 2021da177e4SLinus Torvalds } else { 2034335723eSJ. Bruce Fields /* 2044335723eSJ. Bruce Fields * In the nfsd4_open() case, this may be held across 2054335723eSJ. Bruce Fields * subsequent open and delegation acquisition which may 2064335723eSJ. Bruce Fields * need to take the child's i_mutex: 2074335723eSJ. Bruce Fields */ 2084335723eSJ. Bruce Fields fh_lock_nested(fhp, I_MUTEX_PARENT); 2091da177e4SLinus Torvalds dentry = lookup_one_len(name, dparent, len); 2106264d69dSAl Viro host_err = PTR_ERR(dentry); 2111da177e4SLinus Torvalds if (IS_ERR(dentry)) 2121da177e4SLinus Torvalds goto out_nfserr; 21382ead7feSJ. Bruce Fields if (nfsd_mountpoint(dentry, exp)) { 214bbddca8eSNeilBrown /* 215bbddca8eSNeilBrown * We don't need the i_mutex after all. It's 216bbddca8eSNeilBrown * still possible we could open this (regular 217bbddca8eSNeilBrown * files can be mountpoints too), but the 218bbddca8eSNeilBrown * i_mutex is just there to prevent renames of 219bbddca8eSNeilBrown * something that we might be about to delegate, 220bbddca8eSNeilBrown * and a mountpoint won't be renamed: 221bbddca8eSNeilBrown */ 222bbddca8eSNeilBrown fh_unlock(fhp); 2236264d69dSAl Viro if ((host_err = nfsd_cross_mnt(rqstp, &dentry, &exp))) { 2241da177e4SLinus Torvalds dput(dentry); 2251da177e4SLinus Torvalds goto out_nfserr; 2261da177e4SLinus Torvalds } 2271da177e4SLinus Torvalds } 2281da177e4SLinus Torvalds } 2296c0a654dSJ. Bruce Fields *dentry_ret = dentry; 2306c0a654dSJ. Bruce Fields *exp_ret = exp; 2316c0a654dSJ. Bruce Fields return 0; 2326c0a654dSJ. Bruce Fields 2336c0a654dSJ. Bruce Fields out_nfserr: 2346c0a654dSJ. Bruce Fields exp_put(exp); 2356c0a654dSJ. Bruce Fields return nfserrno(host_err); 2366c0a654dSJ. Bruce Fields } 2376c0a654dSJ. Bruce Fields 2386c0a654dSJ. Bruce Fields /* 2396c0a654dSJ. Bruce Fields * Look up one component of a pathname. 2406c0a654dSJ. Bruce Fields * N.B. After this call _both_ fhp and resfh need an fh_put 2416c0a654dSJ. Bruce Fields * 2426c0a654dSJ. Bruce Fields * If the lookup would cross a mountpoint, and the mounted filesystem 2436c0a654dSJ. Bruce Fields * is exported to the client with NFSEXP_NOHIDE, then the lookup is 2446c0a654dSJ. Bruce Fields * accepted as it stands and the mounted directory is 2456c0a654dSJ. Bruce Fields * returned. Otherwise the covered directory is returned. 2466c0a654dSJ. Bruce Fields * NOTE: this mountpoint crossing is not supported properly by all 2476c0a654dSJ. Bruce Fields * clients and is explicitly disallowed for NFSv3 248ef5825e3SNeilBrown * NeilBrown <neilb@cse.unsw.edu.au> 2496c0a654dSJ. Bruce Fields */ 2506c0a654dSJ. Bruce Fields __be32 2516c0a654dSJ. Bruce Fields nfsd_lookup(struct svc_rqst *rqstp, struct svc_fh *fhp, const char *name, 2525a022fc8SChuck Lever unsigned int len, struct svc_fh *resfh) 2536c0a654dSJ. Bruce Fields { 2546c0a654dSJ. Bruce Fields struct svc_export *exp; 2556c0a654dSJ. Bruce Fields struct dentry *dentry; 2566c0a654dSJ. Bruce Fields __be32 err; 2576c0a654dSJ. Bruce Fields 25829a78a3eSJ. Bruce Fields err = fh_verify(rqstp, fhp, S_IFDIR, NFSD_MAY_EXEC); 25929a78a3eSJ. Bruce Fields if (err) 26029a78a3eSJ. Bruce Fields return err; 2616c0a654dSJ. Bruce Fields err = nfsd_lookup_dentry(rqstp, fhp, name, len, &exp, &dentry); 2626c0a654dSJ. Bruce Fields if (err) 2636c0a654dSJ. Bruce Fields return err; 26432c1eb0cSAndy Adamson err = check_nfsd_access(exp, rqstp); 26532c1eb0cSAndy Adamson if (err) 26632c1eb0cSAndy Adamson goto out; 2671da177e4SLinus Torvalds /* 2681da177e4SLinus Torvalds * Note: we compose the file handle now, but as the 2691da177e4SLinus Torvalds * dentry may be negative, it may need to be updated. 2701da177e4SLinus Torvalds */ 2711da177e4SLinus Torvalds err = fh_compose(resfh, exp, dentry, fhp); 2722b0143b5SDavid Howells if (!err && d_really_is_negative(dentry)) 2731da177e4SLinus Torvalds err = nfserr_noent; 27432c1eb0cSAndy Adamson out: 2751da177e4SLinus Torvalds dput(dentry); 2761da177e4SLinus Torvalds exp_put(exp); 2771da177e4SLinus Torvalds return err; 2781da177e4SLinus Torvalds } 2791da177e4SLinus Torvalds 280f501912aSBen Myers /* 281f501912aSBen Myers * Commit metadata changes to stable storage. 282f501912aSBen Myers */ 283f501912aSBen Myers static int 28457f64034STrond Myklebust commit_inode_metadata(struct inode *inode) 285f501912aSBen Myers { 286f501912aSBen Myers const struct export_operations *export_ops = inode->i_sb->s_export_op; 287f501912aSBen Myers 288c3765016SChristoph Hellwig if (export_ops->commit_metadata) 289c3765016SChristoph Hellwig return export_ops->commit_metadata(inode); 290c3765016SChristoph Hellwig return sync_inode_metadata(inode, 1); 291f501912aSBen Myers } 2926c0a654dSJ. Bruce Fields 29357f64034STrond Myklebust static int 29457f64034STrond Myklebust commit_metadata(struct svc_fh *fhp) 29557f64034STrond Myklebust { 29657f64034STrond Myklebust struct inode *inode = d_inode(fhp->fh_dentry); 29757f64034STrond Myklebust 29857f64034STrond Myklebust if (!EX_ISSYNC(fhp->fh_export)) 29957f64034STrond Myklebust return 0; 30057f64034STrond Myklebust return commit_inode_metadata(inode); 30157f64034STrond Myklebust } 30257f64034STrond Myklebust 3031da177e4SLinus Torvalds /* 304818e5a22SChristoph Hellwig * Go over the attributes and take care of the small differences between 305818e5a22SChristoph Hellwig * NFS semantics and what Linux expects. 306818e5a22SChristoph Hellwig */ 307818e5a22SChristoph Hellwig static void 308818e5a22SChristoph Hellwig nfsd_sanitize_attrs(struct inode *inode, struct iattr *iap) 309818e5a22SChristoph Hellwig { 310818e5a22SChristoph Hellwig /* sanitize the mode change */ 311818e5a22SChristoph Hellwig if (iap->ia_valid & ATTR_MODE) { 312818e5a22SChristoph Hellwig iap->ia_mode &= S_IALLUGO; 313818e5a22SChristoph Hellwig iap->ia_mode |= (inode->i_mode & ~S_IALLUGO); 314818e5a22SChristoph Hellwig } 315818e5a22SChristoph Hellwig 316818e5a22SChristoph Hellwig /* Revoke setuid/setgid on chown */ 317818e5a22SChristoph Hellwig if (!S_ISDIR(inode->i_mode) && 318c4fa6d7cSStanislav Kholmanskikh ((iap->ia_valid & ATTR_UID) || (iap->ia_valid & ATTR_GID))) { 319818e5a22SChristoph Hellwig iap->ia_valid |= ATTR_KILL_PRIV; 320818e5a22SChristoph Hellwig if (iap->ia_valid & ATTR_MODE) { 321818e5a22SChristoph Hellwig /* we're setting mode too, just clear the s*id bits */ 322818e5a22SChristoph Hellwig iap->ia_mode &= ~S_ISUID; 323818e5a22SChristoph Hellwig if (iap->ia_mode & S_IXGRP) 324818e5a22SChristoph Hellwig iap->ia_mode &= ~S_ISGID; 325818e5a22SChristoph Hellwig } else { 326818e5a22SChristoph Hellwig /* set ATTR_KILL_* bits and let VFS handle it */ 327818e5a22SChristoph Hellwig iap->ia_valid |= (ATTR_KILL_SUID | ATTR_KILL_SGID); 328818e5a22SChristoph Hellwig } 329818e5a22SChristoph Hellwig } 330818e5a22SChristoph Hellwig } 331818e5a22SChristoph Hellwig 3320839ffb8SJ. Bruce Fields static __be32 3330839ffb8SJ. Bruce Fields nfsd_get_write_access(struct svc_rqst *rqstp, struct svc_fh *fhp, 3340839ffb8SJ. Bruce Fields struct iattr *iap) 3350839ffb8SJ. Bruce Fields { 3360839ffb8SJ. Bruce Fields struct inode *inode = d_inode(fhp->fh_dentry); 3370839ffb8SJ. Bruce Fields 3380839ffb8SJ. Bruce Fields if (iap->ia_size < inode->i_size) { 3390839ffb8SJ. Bruce Fields __be32 err; 3400839ffb8SJ. Bruce Fields 3410839ffb8SJ. Bruce Fields err = nfsd_permission(rqstp, fhp->fh_export, fhp->fh_dentry, 3420839ffb8SJ. Bruce Fields NFSD_MAY_TRUNC | NFSD_MAY_OWNER_OVERRIDE); 3430839ffb8SJ. Bruce Fields if (err) 3440839ffb8SJ. Bruce Fields return err; 3450839ffb8SJ. Bruce Fields } 346f7e33bdbSJeff Layton return nfserrno(get_write_access(inode)); 3470839ffb8SJ. Bruce Fields } 3480839ffb8SJ. Bruce Fields 349818e5a22SChristoph Hellwig /* 350818e5a22SChristoph Hellwig * Set various file attributes. After this call fhp needs an fh_put. 3511da177e4SLinus Torvalds */ 3526264d69dSAl Viro __be32 3531da177e4SLinus Torvalds nfsd_setattr(struct svc_rqst *rqstp, struct svc_fh *fhp, struct iattr *iap, 3542a1aa489SArnd Bergmann int check_guard, time64_t guardtime) 3551da177e4SLinus Torvalds { 3561da177e4SLinus Torvalds struct dentry *dentry; 3571da177e4SLinus Torvalds struct inode *inode; 3588837abcaSMiklos Szeredi int accmode = NFSD_MAY_SATTR; 359175a4eb7SAl Viro umode_t ftype = 0; 3606264d69dSAl Viro __be32 err; 3616264d69dSAl Viro int host_err; 3629f67f189SJ. Bruce Fields bool get_write_count; 363758e99feSChristoph Hellwig bool size_change = (iap->ia_valid & ATTR_SIZE); 3641da177e4SLinus Torvalds 365255fbca6Szhengbin if (iap->ia_valid & ATTR_SIZE) { 3668837abcaSMiklos Szeredi accmode |= NFSD_MAY_WRITE|NFSD_MAY_OWNER_OVERRIDE; 3671da177e4SLinus Torvalds ftype = S_IFREG; 368255fbca6Szhengbin } 369255fbca6Szhengbin 370255fbca6Szhengbin /* 371255fbca6Szhengbin * If utimes(2) and friends are called with times not NULL, we should 372255fbca6Szhengbin * not set NFSD_MAY_WRITE bit. Otherwise fh_verify->nfsd_permission 373e977cc83SGeert Uytterhoeven * will return EACCES, when the caller's effective UID does not match 374255fbca6Szhengbin * the owner of the file, and the caller is not privileged. In this 375255fbca6Szhengbin * situation, we should return EPERM(notify_change will return this). 376255fbca6Szhengbin */ 377255fbca6Szhengbin if (iap->ia_valid & (ATTR_ATIME | ATTR_MTIME)) { 378255fbca6Szhengbin accmode |= NFSD_MAY_OWNER_OVERRIDE; 379255fbca6Szhengbin if (!(iap->ia_valid & (ATTR_ATIME_SET | ATTR_MTIME_SET))) 380255fbca6Szhengbin accmode |= NFSD_MAY_WRITE; 381255fbca6Szhengbin } 3821da177e4SLinus Torvalds 3839f67f189SJ. Bruce Fields /* Callers that do fh_verify should do the fh_want_write: */ 3849f67f189SJ. Bruce Fields get_write_count = !fhp->fh_dentry; 3859f67f189SJ. Bruce Fields 3861da177e4SLinus Torvalds /* Get inode */ 3871da177e4SLinus Torvalds err = fh_verify(rqstp, fhp, ftype, accmode); 38815b7a1b8SNeilBrown if (err) 389758e99feSChristoph Hellwig return err; 3909f67f189SJ. Bruce Fields if (get_write_count) { 3919f67f189SJ. Bruce Fields host_err = fh_want_write(fhp); 3929f67f189SJ. Bruce Fields if (host_err) 393758e99feSChristoph Hellwig goto out; 3949f67f189SJ. Bruce Fields } 3951da177e4SLinus Torvalds 3961da177e4SLinus Torvalds dentry = fhp->fh_dentry; 3972b0143b5SDavid Howells inode = d_inode(dentry); 3981da177e4SLinus Torvalds 39915b7a1b8SNeilBrown /* Ignore any mode updates on symlinks */ 40015b7a1b8SNeilBrown if (S_ISLNK(inode->i_mode)) 40115b7a1b8SNeilBrown iap->ia_valid &= ~ATTR_MODE; 40215b7a1b8SNeilBrown 40315b7a1b8SNeilBrown if (!iap->ia_valid) 404758e99feSChristoph Hellwig return 0; 40515b7a1b8SNeilBrown 406818e5a22SChristoph Hellwig nfsd_sanitize_attrs(inode, iap); 4071da177e4SLinus Torvalds 408758e99feSChristoph Hellwig if (check_guard && guardtime != inode->i_ctime.tv_sec) 409758e99feSChristoph Hellwig return nfserr_notsync; 410758e99feSChristoph Hellwig 411f0c63124SChristoph Hellwig /* 41241f53350SChristoph Hellwig * The size case is special, it changes the file in addition to the 413783112f7SChristoph Hellwig * attributes, and file systems don't expect it to be mixed with 414783112f7SChristoph Hellwig * "random" attribute changes. We thus split out the size change 415783112f7SChristoph Hellwig * into a separate call to ->setattr, and do the rest as a separate 416783112f7SChristoph Hellwig * setattr call. 417f0c63124SChristoph Hellwig */ 418758e99feSChristoph Hellwig if (size_change) { 4190839ffb8SJ. Bruce Fields err = nfsd_get_write_access(rqstp, fhp, iap); 4200839ffb8SJ. Bruce Fields if (err) 421758e99feSChristoph Hellwig return err; 422783112f7SChristoph Hellwig } 42341f53350SChristoph Hellwig 424783112f7SChristoph Hellwig fh_lock(fhp); 425783112f7SChristoph Hellwig if (size_change) { 42641f53350SChristoph Hellwig /* 4270839ffb8SJ. Bruce Fields * RFC5661, Section 18.30.4: 4280839ffb8SJ. Bruce Fields * Changing the size of a file with SETATTR indirectly 4290839ffb8SJ. Bruce Fields * changes the time_modify and change attributes. 4300839ffb8SJ. Bruce Fields * 4310839ffb8SJ. Bruce Fields * (and similar for the older RFCs) 43241f53350SChristoph Hellwig */ 433783112f7SChristoph Hellwig struct iattr size_attr = { 434783112f7SChristoph Hellwig .ia_valid = ATTR_SIZE | ATTR_CTIME | ATTR_MTIME, 435783112f7SChristoph Hellwig .ia_size = iap->ia_size, 436783112f7SChristoph Hellwig }; 437783112f7SChristoph Hellwig 438e6faac3fSChuck Lever host_err = -EFBIG; 439e6faac3fSChuck Lever if (iap->ia_size < 0) 440e6faac3fSChuck Lever goto out_unlock; 441e6faac3fSChuck Lever 4422f221d6fSChristian Brauner host_err = notify_change(&init_user_ns, dentry, &size_attr, NULL); 443783112f7SChristoph Hellwig if (host_err) 444783112f7SChristoph Hellwig goto out_unlock; 445783112f7SChristoph Hellwig iap->ia_valid &= ~ATTR_SIZE; 446783112f7SChristoph Hellwig 447783112f7SChristoph Hellwig /* 448783112f7SChristoph Hellwig * Avoid the additional setattr call below if the only other 449783112f7SChristoph Hellwig * attribute that the client sends is the mtime, as we update 450783112f7SChristoph Hellwig * it as part of the size change above. 451783112f7SChristoph Hellwig */ 452783112f7SChristoph Hellwig if ((iap->ia_valid & ~ATTR_MTIME) == 0) 453783112f7SChristoph Hellwig goto out_unlock; 4541da177e4SLinus Torvalds } 4551da177e4SLinus Torvalds 4561da177e4SLinus Torvalds iap->ia_valid |= ATTR_CTIME; 4572f221d6fSChristian Brauner host_err = notify_change(&init_user_ns, dentry, iap, NULL); 458987da479SChristoph Hellwig 459783112f7SChristoph Hellwig out_unlock: 460783112f7SChristoph Hellwig fh_unlock(fhp); 4610839ffb8SJ. Bruce Fields if (size_change) 4620839ffb8SJ. Bruce Fields put_write_access(inode); 4630839ffb8SJ. Bruce Fields out: 464758e99feSChristoph Hellwig if (!host_err) 465758e99feSChristoph Hellwig host_err = commit_metadata(fhp); 466758e99feSChristoph Hellwig return nfserrno(host_err); 4671da177e4SLinus Torvalds } 4681da177e4SLinus Torvalds 4695be196e5SChristoph Hellwig #if defined(CONFIG_NFSD_V4) 4709b4146e8SChuck Lever /* 4719b4146e8SChuck Lever * NFS junction information is stored in an extended attribute. 4729b4146e8SChuck Lever */ 4739b4146e8SChuck Lever #define NFSD_JUNCTION_XATTR_NAME XATTR_TRUSTED_PREFIX "junction.nfs" 4749b4146e8SChuck Lever 4759b4146e8SChuck Lever /** 4769b4146e8SChuck Lever * nfsd4_is_junction - Test if an object could be an NFS junction 4779b4146e8SChuck Lever * 4789b4146e8SChuck Lever * @dentry: object to test 4799b4146e8SChuck Lever * 4809b4146e8SChuck Lever * Returns 1 if "dentry" appears to contain NFS junction information. 4819b4146e8SChuck Lever * Otherwise 0 is returned. 4829b4146e8SChuck Lever */ 48311fcee02STrond Myklebust int nfsd4_is_junction(struct dentry *dentry) 48411fcee02STrond Myklebust { 4852b0143b5SDavid Howells struct inode *inode = d_inode(dentry); 48611fcee02STrond Myklebust 48711fcee02STrond Myklebust if (inode == NULL) 48811fcee02STrond Myklebust return 0; 48911fcee02STrond Myklebust if (inode->i_mode & S_IXUGO) 49011fcee02STrond Myklebust return 0; 49111fcee02STrond Myklebust if (!(inode->i_mode & S_ISVTX)) 49211fcee02STrond Myklebust return 0; 493c7c7a1a1STycho Andersen if (vfs_getxattr(&init_user_ns, dentry, NFSD_JUNCTION_XATTR_NAME, 494c7c7a1a1STycho Andersen NULL, 0) <= 0) 49511fcee02STrond Myklebust return 0; 49611fcee02STrond Myklebust return 1; 49711fcee02STrond Myklebust } 49818032ca0SDavid Quigley #ifdef CONFIG_NFSD_V4_SECURITY_LABEL 49918032ca0SDavid Quigley __be32 nfsd4_set_nfs4_label(struct svc_rqst *rqstp, struct svc_fh *fhp, 50018032ca0SDavid Quigley struct xdr_netobj *label) 50118032ca0SDavid Quigley { 50218032ca0SDavid Quigley __be32 error; 50318032ca0SDavid Quigley int host_error; 50418032ca0SDavid Quigley struct dentry *dentry; 50518032ca0SDavid Quigley 50618032ca0SDavid Quigley error = fh_verify(rqstp, fhp, 0 /* S_IFREG */, NFSD_MAY_SATTR); 50718032ca0SDavid Quigley if (error) 50818032ca0SDavid Quigley return error; 50918032ca0SDavid Quigley 51018032ca0SDavid Quigley dentry = fhp->fh_dentry; 51118032ca0SDavid Quigley 5125955102cSAl Viro inode_lock(d_inode(dentry)); 51318032ca0SDavid Quigley host_error = security_inode_setsecctx(dentry, label->data, label->len); 5145955102cSAl Viro inode_unlock(d_inode(dentry)); 51518032ca0SDavid Quigley return nfserrno(host_error); 51618032ca0SDavid Quigley } 51718032ca0SDavid Quigley #else 51818032ca0SDavid Quigley __be32 nfsd4_set_nfs4_label(struct svc_rqst *rqstp, struct svc_fh *fhp, 51918032ca0SDavid Quigley struct xdr_netobj *label) 52018032ca0SDavid Quigley { 52118032ca0SDavid Quigley return nfserr_notsupp; 52218032ca0SDavid Quigley } 52318032ca0SDavid Quigley #endif 52418032ca0SDavid Quigley 525a2f4c3faSTrond Myklebust static struct nfsd4_compound_state *nfsd4_get_cstate(struct svc_rqst *rqstp) 526a2f4c3faSTrond Myklebust { 527a2f4c3faSTrond Myklebust return &((struct nfsd4_compoundres *)rqstp->rq_resp)->cstate; 528a2f4c3faSTrond Myklebust } 529a2f4c3faSTrond Myklebust 530a2f4c3faSTrond Myklebust __be32 nfsd4_clone_file_range(struct svc_rqst *rqstp, 531a2f4c3faSTrond Myklebust struct nfsd_file *nf_src, u64 src_pos, 532a2f4c3faSTrond Myklebust struct nfsd_file *nf_dst, u64 dst_pos, 533a2f4c3faSTrond Myklebust u64 count, bool sync) 534ffa0160aSChristoph Hellwig { 535b66ae6ddSTrond Myklebust struct file *src = nf_src->nf_file; 536b66ae6ddSTrond Myklebust struct file *dst = nf_dst->nf_file; 537555dbf1aSTrond Myklebust errseq_t since; 53842ec3d4cSDarrick J. Wong loff_t cloned; 5391b28d756STrond Myklebust __be32 ret = 0; 54042ec3d4cSDarrick J. Wong 541555dbf1aSTrond Myklebust since = READ_ONCE(dst->f_wb_err); 542452ce659SDarrick J. Wong cloned = vfs_clone_file_range(src, src_pos, dst, dst_pos, count, 0); 5431b28d756STrond Myklebust if (cloned < 0) { 5441b28d756STrond Myklebust ret = nfserrno(cloned); 5451b28d756STrond Myklebust goto out_err; 5461b28d756STrond Myklebust } 5471b28d756STrond Myklebust if (count && cloned != count) { 5481b28d756STrond Myklebust ret = nfserrno(-EINVAL); 5491b28d756STrond Myklebust goto out_err; 5501b28d756STrond Myklebust } 551a25e3726STrond Myklebust if (sync) { 552a25e3726STrond Myklebust loff_t dst_end = count ? dst_pos + count - 1 : LLONG_MAX; 553a25e3726STrond Myklebust int status = vfs_fsync_range(dst, dst_pos, dst_end, 0); 55457f64034STrond Myklebust 55557f64034STrond Myklebust if (!status) 556555dbf1aSTrond Myklebust status = filemap_check_wb_err(dst->f_mapping, since); 557555dbf1aSTrond Myklebust if (!status) 55857f64034STrond Myklebust status = commit_inode_metadata(file_inode(src)); 5591b28d756STrond Myklebust if (status < 0) { 56075acacb6SChuck Lever struct nfsd_net *nn = net_generic(nf_dst->nf_net, 56175acacb6SChuck Lever nfsd_net_id); 56275acacb6SChuck Lever 563a2f4c3faSTrond Myklebust trace_nfsd_clone_file_range_err(rqstp, 564a2f4c3faSTrond Myklebust &nfsd4_get_cstate(rqstp)->save_fh, 565a2f4c3faSTrond Myklebust src_pos, 566a2f4c3faSTrond Myklebust &nfsd4_get_cstate(rqstp)->current_fh, 567a2f4c3faSTrond Myklebust dst_pos, 568a2f4c3faSTrond Myklebust count, status); 56975acacb6SChuck Lever nfsd_reset_write_verifier(nn); 57075acacb6SChuck Lever trace_nfsd_writeverf_reset(nn, rqstp, status); 5711b28d756STrond Myklebust ret = nfserrno(status); 572a25e3726STrond Myklebust } 5731b28d756STrond Myklebust } 5741b28d756STrond Myklebust out_err: 5751b28d756STrond Myklebust return ret; 576ffa0160aSChristoph Hellwig } 577ffa0160aSChristoph Hellwig 57829ae7f9dSAnna Schumaker ssize_t nfsd_copy_file_range(struct file *src, u64 src_pos, struct file *dst, 57929ae7f9dSAnna Schumaker u64 dst_pos, u64 count) 58029ae7f9dSAnna Schumaker { 58129ae7f9dSAnna Schumaker 58229ae7f9dSAnna Schumaker /* 58329ae7f9dSAnna Schumaker * Limit copy to 4MB to prevent indefinitely blocking an nfsd 58429ae7f9dSAnna Schumaker * thread and client rpc slot. The choice of 4MB is somewhat 58529ae7f9dSAnna Schumaker * arbitrary. We might instead base this on r/wsize, or make it 58629ae7f9dSAnna Schumaker * tunable, or use a time instead of a byte limit, or implement 58729ae7f9dSAnna Schumaker * asynchronous copy. In theory a client could also recognize a 58829ae7f9dSAnna Schumaker * limit like this and pipeline multiple COPY requests. 58929ae7f9dSAnna Schumaker */ 59029ae7f9dSAnna Schumaker count = min_t(u64, count, 1 << 22); 59129ae7f9dSAnna Schumaker return vfs_copy_file_range(src, src_pos, dst, dst_pos, count, 0); 59229ae7f9dSAnna Schumaker } 59329ae7f9dSAnna Schumaker 59495d871f0SAnna Schumaker __be32 nfsd4_vfs_fallocate(struct svc_rqst *rqstp, struct svc_fh *fhp, 59595d871f0SAnna Schumaker struct file *file, loff_t offset, loff_t len, 59695d871f0SAnna Schumaker int flags) 59795d871f0SAnna Schumaker { 59895d871f0SAnna Schumaker int error; 59995d871f0SAnna Schumaker 60095d871f0SAnna Schumaker if (!S_ISREG(file_inode(file)->i_mode)) 60195d871f0SAnna Schumaker return nfserr_inval; 60295d871f0SAnna Schumaker 60395d871f0SAnna Schumaker error = vfs_fallocate(file, flags, offset, len); 60495d871f0SAnna Schumaker if (!error) 60595d871f0SAnna Schumaker error = commit_metadata(fhp); 60695d871f0SAnna Schumaker 60795d871f0SAnna Schumaker return nfserrno(error); 60895d871f0SAnna Schumaker } 6096a85d6c7SJ. Bruce Fields #endif /* defined(CONFIG_NFSD_V4) */ 6101da177e4SLinus Torvalds 6111da177e4SLinus Torvalds #ifdef CONFIG_NFSD_V3 6121da177e4SLinus Torvalds /* 6131da177e4SLinus Torvalds * Check server access rights to a file system object 6141da177e4SLinus Torvalds */ 6151da177e4SLinus Torvalds struct accessmap { 6161da177e4SLinus Torvalds u32 access; 6171da177e4SLinus Torvalds int how; 6181da177e4SLinus Torvalds }; 6191da177e4SLinus Torvalds static struct accessmap nfs3_regaccess[] = { 6208837abcaSMiklos Szeredi { NFS3_ACCESS_READ, NFSD_MAY_READ }, 6218837abcaSMiklos Szeredi { NFS3_ACCESS_EXECUTE, NFSD_MAY_EXEC }, 6228837abcaSMiklos Szeredi { NFS3_ACCESS_MODIFY, NFSD_MAY_WRITE|NFSD_MAY_TRUNC }, 6238837abcaSMiklos Szeredi { NFS3_ACCESS_EXTEND, NFSD_MAY_WRITE }, 6241da177e4SLinus Torvalds 625c11d7fd1SFrank van der Linden #ifdef CONFIG_NFSD_V4 626c11d7fd1SFrank van der Linden { NFS4_ACCESS_XAREAD, NFSD_MAY_READ }, 627c11d7fd1SFrank van der Linden { NFS4_ACCESS_XAWRITE, NFSD_MAY_WRITE }, 628c11d7fd1SFrank van der Linden { NFS4_ACCESS_XALIST, NFSD_MAY_READ }, 629c11d7fd1SFrank van der Linden #endif 630c11d7fd1SFrank van der Linden 6311da177e4SLinus Torvalds { 0, 0 } 6321da177e4SLinus Torvalds }; 6331da177e4SLinus Torvalds 6341da177e4SLinus Torvalds static struct accessmap nfs3_diraccess[] = { 6358837abcaSMiklos Szeredi { NFS3_ACCESS_READ, NFSD_MAY_READ }, 6368837abcaSMiklos Szeredi { NFS3_ACCESS_LOOKUP, NFSD_MAY_EXEC }, 6378837abcaSMiklos Szeredi { NFS3_ACCESS_MODIFY, NFSD_MAY_EXEC|NFSD_MAY_WRITE|NFSD_MAY_TRUNC}, 6388837abcaSMiklos Szeredi { NFS3_ACCESS_EXTEND, NFSD_MAY_EXEC|NFSD_MAY_WRITE }, 6398837abcaSMiklos Szeredi { NFS3_ACCESS_DELETE, NFSD_MAY_REMOVE }, 6401da177e4SLinus Torvalds 641c11d7fd1SFrank van der Linden #ifdef CONFIG_NFSD_V4 642c11d7fd1SFrank van der Linden { NFS4_ACCESS_XAREAD, NFSD_MAY_READ }, 643c11d7fd1SFrank van der Linden { NFS4_ACCESS_XAWRITE, NFSD_MAY_WRITE }, 644c11d7fd1SFrank van der Linden { NFS4_ACCESS_XALIST, NFSD_MAY_READ }, 645c11d7fd1SFrank van der Linden #endif 646c11d7fd1SFrank van der Linden 6471da177e4SLinus Torvalds { 0, 0 } 6481da177e4SLinus Torvalds }; 6491da177e4SLinus Torvalds 6501da177e4SLinus Torvalds static struct accessmap nfs3_anyaccess[] = { 6511da177e4SLinus Torvalds /* Some clients - Solaris 2.6 at least, make an access call 6521da177e4SLinus Torvalds * to the server to check for access for things like /dev/null 6531da177e4SLinus Torvalds * (which really, the server doesn't care about). So 6541da177e4SLinus Torvalds * We provide simple access checking for them, looking 6551da177e4SLinus Torvalds * mainly at mode bits, and we make sure to ignore read-only 6561da177e4SLinus Torvalds * filesystem checks 6571da177e4SLinus Torvalds */ 6588837abcaSMiklos Szeredi { NFS3_ACCESS_READ, NFSD_MAY_READ }, 6598837abcaSMiklos Szeredi { NFS3_ACCESS_EXECUTE, NFSD_MAY_EXEC }, 6608837abcaSMiklos Szeredi { NFS3_ACCESS_MODIFY, NFSD_MAY_WRITE|NFSD_MAY_LOCAL_ACCESS }, 6618837abcaSMiklos Szeredi { NFS3_ACCESS_EXTEND, NFSD_MAY_WRITE|NFSD_MAY_LOCAL_ACCESS }, 6621da177e4SLinus Torvalds 6631da177e4SLinus Torvalds { 0, 0 } 6641da177e4SLinus Torvalds }; 6651da177e4SLinus Torvalds 6666264d69dSAl Viro __be32 6671da177e4SLinus Torvalds nfsd_access(struct svc_rqst *rqstp, struct svc_fh *fhp, u32 *access, u32 *supported) 6681da177e4SLinus Torvalds { 6691da177e4SLinus Torvalds struct accessmap *map; 6701da177e4SLinus Torvalds struct svc_export *export; 6711da177e4SLinus Torvalds struct dentry *dentry; 6721da177e4SLinus Torvalds u32 query, result = 0, sresult = 0; 6736264d69dSAl Viro __be32 error; 6741da177e4SLinus Torvalds 6758837abcaSMiklos Szeredi error = fh_verify(rqstp, fhp, 0, NFSD_MAY_NOP); 6761da177e4SLinus Torvalds if (error) 6771da177e4SLinus Torvalds goto out; 6781da177e4SLinus Torvalds 6791da177e4SLinus Torvalds export = fhp->fh_export; 6801da177e4SLinus Torvalds dentry = fhp->fh_dentry; 6811da177e4SLinus Torvalds 682e36cb0b8SDavid Howells if (d_is_reg(dentry)) 6831da177e4SLinus Torvalds map = nfs3_regaccess; 684e36cb0b8SDavid Howells else if (d_is_dir(dentry)) 6851da177e4SLinus Torvalds map = nfs3_diraccess; 6861da177e4SLinus Torvalds else 6871da177e4SLinus Torvalds map = nfs3_anyaccess; 6881da177e4SLinus Torvalds 6891da177e4SLinus Torvalds 6901da177e4SLinus Torvalds query = *access; 6911da177e4SLinus Torvalds for (; map->access; map++) { 6921da177e4SLinus Torvalds if (map->access & query) { 6936264d69dSAl Viro __be32 err2; 6941da177e4SLinus Torvalds 6951da177e4SLinus Torvalds sresult |= map->access; 6961da177e4SLinus Torvalds 6970ec757dfSJ. Bruce Fields err2 = nfsd_permission(rqstp, export, dentry, map->how); 6981da177e4SLinus Torvalds switch (err2) { 6991da177e4SLinus Torvalds case nfs_ok: 7001da177e4SLinus Torvalds result |= map->access; 7011da177e4SLinus Torvalds break; 7021da177e4SLinus Torvalds 7031da177e4SLinus Torvalds /* the following error codes just mean the access was not allowed, 7041da177e4SLinus Torvalds * rather than an error occurred */ 7051da177e4SLinus Torvalds case nfserr_rofs: 7061da177e4SLinus Torvalds case nfserr_acces: 7071da177e4SLinus Torvalds case nfserr_perm: 7081da177e4SLinus Torvalds /* simply don't "or" in the access bit. */ 7091da177e4SLinus Torvalds break; 7101da177e4SLinus Torvalds default: 7111da177e4SLinus Torvalds error = err2; 7121da177e4SLinus Torvalds goto out; 7131da177e4SLinus Torvalds } 7141da177e4SLinus Torvalds } 7151da177e4SLinus Torvalds } 7161da177e4SLinus Torvalds *access = result; 7171da177e4SLinus Torvalds if (supported) 7181da177e4SLinus Torvalds *supported = sresult; 7191da177e4SLinus Torvalds 7201da177e4SLinus Torvalds out: 7211da177e4SLinus Torvalds return error; 7221da177e4SLinus Torvalds } 7231da177e4SLinus Torvalds #endif /* CONFIG_NFSD_V3 */ 7241da177e4SLinus Torvalds 72565294c1fSJeff Layton int nfsd_open_break_lease(struct inode *inode, int access) 726105f4622SJ. Bruce Fields { 727105f4622SJ. Bruce Fields unsigned int mode; 7281da177e4SLinus Torvalds 729105f4622SJ. Bruce Fields if (access & NFSD_MAY_NOT_BREAK_LEASE) 730105f4622SJ. Bruce Fields return 0; 731105f4622SJ. Bruce Fields mode = (access & NFSD_MAY_WRITE) ? O_WRONLY : O_RDONLY; 732105f4622SJ. Bruce Fields return break_lease(inode, mode | O_NONBLOCK); 733105f4622SJ. Bruce Fields } 7341da177e4SLinus Torvalds 7351da177e4SLinus Torvalds /* 7361da177e4SLinus Torvalds * Open an existing file or directory. 737999448a8SBernd Schubert * The may_flags argument indicates the type of open (read/write/lock) 738999448a8SBernd Schubert * and additional flags. 7391da177e4SLinus Torvalds * N.B. After this call fhp needs an fh_put 7401da177e4SLinus Torvalds */ 74165294c1fSJeff Layton static __be32 74265294c1fSJeff Layton __nfsd_open(struct svc_rqst *rqstp, struct svc_fh *fhp, umode_t type, 743999448a8SBernd Schubert int may_flags, struct file **filp) 7441da177e4SLinus Torvalds { 745765927b2SAl Viro struct path path; 7461da177e4SLinus Torvalds struct inode *inode; 7478519f994SKinglong Mee struct file *file; 7486264d69dSAl Viro int flags = O_RDONLY|O_LARGEFILE; 7496264d69dSAl Viro __be32 err; 75091885258SJeff Layton int host_err = 0; 7511da177e4SLinus Torvalds 752765927b2SAl Viro path.mnt = fhp->fh_export->ex_path.mnt; 753765927b2SAl Viro path.dentry = fhp->fh_dentry; 7542b0143b5SDavid Howells inode = d_inode(path.dentry); 7551da177e4SLinus Torvalds 7561da177e4SLinus Torvalds err = nfserr_perm; 757999448a8SBernd Schubert if (IS_APPEND(inode) && (may_flags & NFSD_MAY_WRITE)) 7581da177e4SLinus Torvalds goto out; 7591da177e4SLinus Torvalds 7601da177e4SLinus Torvalds if (!inode->i_fop) 7611da177e4SLinus Torvalds goto out; 7621da177e4SLinus Torvalds 763999448a8SBernd Schubert host_err = nfsd_open_break_lease(inode, may_flags); 7646264d69dSAl Viro if (host_err) /* NOMEM or WOULDBLOCK */ 7651da177e4SLinus Torvalds goto out_nfserr; 7661da177e4SLinus Torvalds 767999448a8SBernd Schubert if (may_flags & NFSD_MAY_WRITE) { 768999448a8SBernd Schubert if (may_flags & NFSD_MAY_READ) 7699ecb6a08SJ. Bruce Fields flags = O_RDWR|O_LARGEFILE; 7709ecb6a08SJ. Bruce Fields else 7711da177e4SLinus Torvalds flags = O_WRONLY|O_LARGEFILE; 7721da177e4SLinus Torvalds } 773999448a8SBernd Schubert 7748519f994SKinglong Mee file = dentry_open(&path, flags, current_cred()); 7758519f994SKinglong Mee if (IS_ERR(file)) { 7768519f994SKinglong Mee host_err = PTR_ERR(file); 7778519f994SKinglong Mee goto out_nfserr; 77806effdbbSBernd Schubert } 77906effdbbSBernd Schubert 7806035a27bSAl Viro host_err = ima_file_check(file, may_flags); 7818519f994SKinglong Mee if (host_err) { 782fd891454SChristoph Hellwig fput(file); 7838519f994SKinglong Mee goto out_nfserr; 7848519f994SKinglong Mee } 7858519f994SKinglong Mee 7868519f994SKinglong Mee if (may_flags & NFSD_MAY_64BIT_COOKIE) 7878519f994SKinglong Mee file->f_mode |= FMODE_64BITHASH; 7888519f994SKinglong Mee else 7898519f994SKinglong Mee file->f_mode |= FMODE_32BITHASH; 7908519f994SKinglong Mee 7918519f994SKinglong Mee *filp = file; 7921da177e4SLinus Torvalds out_nfserr: 7936264d69dSAl Viro err = nfserrno(host_err); 7941da177e4SLinus Torvalds out: 79565294c1fSJeff Layton return err; 79665294c1fSJeff Layton } 79765294c1fSJeff Layton 79865294c1fSJeff Layton __be32 79965294c1fSJeff Layton nfsd_open(struct svc_rqst *rqstp, struct svc_fh *fhp, umode_t type, 80065294c1fSJeff Layton int may_flags, struct file **filp) 80165294c1fSJeff Layton { 80265294c1fSJeff Layton __be32 err; 80312bcbd40SJeff Layton bool retried = false; 80465294c1fSJeff Layton 80565294c1fSJeff Layton validate_process_creds(); 80665294c1fSJeff Layton /* 80765294c1fSJeff Layton * If we get here, then the client has already done an "open", 80865294c1fSJeff Layton * and (hopefully) checked permission - so allow OWNER_OVERRIDE 80965294c1fSJeff Layton * in case a chmod has now revoked permission. 81065294c1fSJeff Layton * 81165294c1fSJeff Layton * Arguably we should also allow the owner override for 81265294c1fSJeff Layton * directories, but we never have and it doesn't seem to have 81365294c1fSJeff Layton * caused anyone a problem. If we were to change this, note 81465294c1fSJeff Layton * also that our filldir callbacks would need a variant of 81565294c1fSJeff Layton * lookup_one_len that doesn't check permissions. 81665294c1fSJeff Layton */ 81765294c1fSJeff Layton if (type == S_IFREG) 81865294c1fSJeff Layton may_flags |= NFSD_MAY_OWNER_OVERRIDE; 81912bcbd40SJeff Layton retry: 82065294c1fSJeff Layton err = fh_verify(rqstp, fhp, type, may_flags); 82112bcbd40SJeff Layton if (!err) { 82265294c1fSJeff Layton err = __nfsd_open(rqstp, fhp, type, may_flags, filp); 82312bcbd40SJeff Layton if (err == nfserr_stale && !retried) { 82412bcbd40SJeff Layton retried = true; 82512bcbd40SJeff Layton fh_put(fhp); 82612bcbd40SJeff Layton goto retry; 82712bcbd40SJeff Layton } 82812bcbd40SJeff Layton } 829e0e81739SDavid Howells validate_process_creds(); 8301da177e4SLinus Torvalds return err; 8311da177e4SLinus Torvalds } 8321da177e4SLinus Torvalds 83365294c1fSJeff Layton __be32 83465294c1fSJeff Layton nfsd_open_verified(struct svc_rqst *rqstp, struct svc_fh *fhp, umode_t type, 83565294c1fSJeff Layton int may_flags, struct file **filp) 83665294c1fSJeff Layton { 83765294c1fSJeff Layton __be32 err; 83865294c1fSJeff Layton 83965294c1fSJeff Layton validate_process_creds(); 84065294c1fSJeff Layton err = __nfsd_open(rqstp, fhp, type, may_flags, filp); 84165294c1fSJeff Layton validate_process_creds(); 84265294c1fSJeff Layton return err; 84365294c1fSJeff Layton } 84465294c1fSJeff Layton 8451da177e4SLinus Torvalds /* 846cf8208d0SJens Axboe * Grab and keep cached pages associated with a file in the svc_rqst 847cf8208d0SJens Axboe * so that they can be passed to the network sendmsg/sendpage routines 848cf8208d0SJens Axboe * directly. They will be released after the sending has completed. 8491da177e4SLinus Torvalds */ 8501da177e4SLinus Torvalds static int 851cf8208d0SJens Axboe nfsd_splice_actor(struct pipe_inode_info *pipe, struct pipe_buffer *buf, 852cf8208d0SJens Axboe struct splice_desc *sd) 8531da177e4SLinus Torvalds { 854cf8208d0SJens Axboe struct svc_rqst *rqstp = sd->u.data; 855afc59400SJ. Bruce Fields struct page **pp = rqstp->rq_next_page; 856cf8208d0SJens Axboe struct page *page = buf->page; 8571da177e4SLinus Torvalds 8581da177e4SLinus Torvalds if (rqstp->rq_res.page_len == 0) { 859496d83cfSChuck Lever svc_rqst_replace_page(rqstp, page); 860cf8208d0SJens Axboe rqstp->rq_res.page_base = buf->offset; 86144524359SNeilBrown } else if (page != pp[-1]) { 862496d83cfSChuck Lever svc_rqst_replace_page(rqstp, page); 863c7e0b781SChuck Lever } 864c7e0b781SChuck Lever rqstp->rq_res.page_len += sd->len; 8651da177e4SLinus Torvalds 866c7e0b781SChuck Lever return sd->len; 8671da177e4SLinus Torvalds } 8681da177e4SLinus Torvalds 869cf8208d0SJens Axboe static int nfsd_direct_splice_actor(struct pipe_inode_info *pipe, 870cf8208d0SJens Axboe struct splice_desc *sd) 871cf8208d0SJens Axboe { 872cf8208d0SJens Axboe return __splice_from_pipe(pipe, sd, nfsd_splice_actor); 873cf8208d0SJens Axboe } 874cf8208d0SJens Axboe 87583a63072STrond Myklebust static u32 nfsd_eof_on_read(struct file *file, loff_t offset, ssize_t len, 87683a63072STrond Myklebust size_t expected) 87783a63072STrond Myklebust { 87883a63072STrond Myklebust if (expected != 0 && len == 0) 87983a63072STrond Myklebust return 1; 88083a63072STrond Myklebust if (offset+len >= i_size_read(file_inode(file))) 88183a63072STrond Myklebust return 1; 88283a63072STrond Myklebust return 0; 88383a63072STrond Myklebust } 88483a63072STrond Myklebust 88587c5942eSChuck Lever static __be32 nfsd_finish_read(struct svc_rqst *rqstp, struct svc_fh *fhp, 88687c5942eSChuck Lever struct file *file, loff_t offset, 88783a63072STrond Myklebust unsigned long *count, u32 *eof, ssize_t host_err) 8881da177e4SLinus Torvalds { 889dc97618dSJ. Bruce Fields if (host_err >= 0) { 89020ad856eSAmir Goldstein nfsd_stats_io_read_add(fhp->fh_export, host_err); 89183a63072STrond Myklebust *eof = nfsd_eof_on_read(file, offset, host_err, *count); 892dc97618dSJ. Bruce Fields *count = host_err; 893dc97618dSJ. Bruce Fields fsnotify_access(file); 89487c5942eSChuck Lever trace_nfsd_read_io_done(rqstp, fhp, offset, *count); 895dc97618dSJ. Bruce Fields return 0; 89687c5942eSChuck Lever } else { 89787c5942eSChuck Lever trace_nfsd_read_err(rqstp, fhp, offset, host_err); 898dc97618dSJ. Bruce Fields return nfserrno(host_err); 899dc97618dSJ. Bruce Fields } 90087c5942eSChuck Lever } 9011da177e4SLinus Torvalds 90287c5942eSChuck Lever __be32 nfsd_splice_read(struct svc_rqst *rqstp, struct svc_fh *fhp, 90383a63072STrond Myklebust struct file *file, loff_t offset, unsigned long *count, 90483a63072STrond Myklebust u32 *eof) 905dc97618dSJ. Bruce Fields { 906cf8208d0SJens Axboe struct splice_desc sd = { 907cf8208d0SJens Axboe .len = 0, 908cf8208d0SJens Axboe .total_len = *count, 909cf8208d0SJens Axboe .pos = offset, 910cf8208d0SJens Axboe .u.data = rqstp, 911cf8208d0SJens Axboe }; 91283a63072STrond Myklebust ssize_t host_err; 913cf8208d0SJens Axboe 91487c5942eSChuck Lever trace_nfsd_read_splice(rqstp, fhp, offset, *count); 915afc59400SJ. Bruce Fields rqstp->rq_next_page = rqstp->rq_respages + 1; 916cf8208d0SJens Axboe host_err = splice_direct_to_actor(file, &sd, nfsd_direct_splice_actor); 91783a63072STrond Myklebust return nfsd_finish_read(rqstp, fhp, file, offset, count, eof, host_err); 918dc97618dSJ. Bruce Fields } 919dc97618dSJ. Bruce Fields 92087c5942eSChuck Lever __be32 nfsd_readv(struct svc_rqst *rqstp, struct svc_fh *fhp, 92187c5942eSChuck Lever struct file *file, loff_t offset, 92283a63072STrond Myklebust struct kvec *vec, int vlen, unsigned long *count, 92383a63072STrond Myklebust u32 *eof) 924dc97618dSJ. Bruce Fields { 92573da852eSChristoph Hellwig struct iov_iter iter; 92683a63072STrond Myklebust loff_t ppos = offset; 92783a63072STrond Myklebust ssize_t host_err; 928dc97618dSJ. Bruce Fields 92987c5942eSChuck Lever trace_nfsd_read_vector(rqstp, fhp, offset, *count); 930aa563d7bSDavid Howells iov_iter_kvec(&iter, READ, vec, vlen, *count); 93183a63072STrond Myklebust host_err = vfs_iter_read(file, &iter, &ppos, 0); 93283a63072STrond Myklebust return nfsd_finish_read(rqstp, fhp, file, offset, count, eof, host_err); 9331da177e4SLinus Torvalds } 9341da177e4SLinus Torvalds 935d911df7bSJ. Bruce Fields /* 936d911df7bSJ. Bruce Fields * Gathered writes: If another process is currently writing to the file, 937d911df7bSJ. Bruce Fields * there's a high chance this is another nfsd (triggered by a bulk write 938d911df7bSJ. Bruce Fields * from a client's biod). Rather than syncing the file with each write 939d911df7bSJ. Bruce Fields * request, we sleep for 10 msec. 940d911df7bSJ. Bruce Fields * 941d911df7bSJ. Bruce Fields * I don't know if this roughly approximates C. Juszak's idea of 942d911df7bSJ. Bruce Fields * gathered writes, but it's a nice and simple solution (IMHO), and it 943d911df7bSJ. Bruce Fields * seems to work:-) 944d911df7bSJ. Bruce Fields * 945d911df7bSJ. Bruce Fields * Note: we do this only in the NFSv2 case, since v3 and higher have a 946d911df7bSJ. Bruce Fields * better tool (separate unstable writes and commits) for solving this 947d911df7bSJ. Bruce Fields * problem. 948d911df7bSJ. Bruce Fields */ 949d911df7bSJ. Bruce Fields static int wait_for_concurrent_writes(struct file *file) 950d911df7bSJ. Bruce Fields { 951496ad9aaSAl Viro struct inode *inode = file_inode(file); 952d911df7bSJ. Bruce Fields static ino_t last_ino; 953d911df7bSJ. Bruce Fields static dev_t last_dev; 954d911df7bSJ. Bruce Fields int err = 0; 955d911df7bSJ. Bruce Fields 956d911df7bSJ. Bruce Fields if (atomic_read(&inode->i_writecount) > 1 957d911df7bSJ. Bruce Fields || (last_ino == inode->i_ino && last_dev == inode->i_sb->s_dev)) { 958d911df7bSJ. Bruce Fields dprintk("nfsd: write defer %d\n", task_pid_nr(current)); 959d911df7bSJ. Bruce Fields msleep(10); 960d911df7bSJ. Bruce Fields dprintk("nfsd: write resume %d\n", task_pid_nr(current)); 961d911df7bSJ. Bruce Fields } 962d911df7bSJ. Bruce Fields 963d911df7bSJ. Bruce Fields if (inode->i_state & I_DIRTY) { 964d911df7bSJ. Bruce Fields dprintk("nfsd: write sync %d\n", task_pid_nr(current)); 9658018ab05SChristoph Hellwig err = vfs_fsync(file, 0); 966d911df7bSJ. Bruce Fields } 967d911df7bSJ. Bruce Fields last_ino = inode->i_ino; 968d911df7bSJ. Bruce Fields last_dev = inode->i_sb->s_dev; 969d911df7bSJ. Bruce Fields return err; 970d911df7bSJ. Bruce Fields } 971d911df7bSJ. Bruce Fields 972af90f707SChristoph Hellwig __be32 97316f8f894STrond Myklebust nfsd_vfs_write(struct svc_rqst *rqstp, struct svc_fh *fhp, struct nfsd_file *nf, 9741da177e4SLinus Torvalds loff_t offset, struct kvec *vec, int vlen, 97519e0663fSTrond Myklebust unsigned long *cnt, int stable, 97619e0663fSTrond Myklebust __be32 *verf) 9771da177e4SLinus Torvalds { 978fb7622c2SChuck Lever struct nfsd_net *nn = net_generic(SVC_NET(rqstp), nfsd_net_id); 97916f8f894STrond Myklebust struct file *file = nf->nf_file; 98001cbf385STrond Myklebust struct super_block *sb = file_inode(file)->i_sb; 9811da177e4SLinus Torvalds struct svc_export *exp; 98273da852eSChristoph Hellwig struct iov_iter iter; 983555dbf1aSTrond Myklebust errseq_t since; 984d890be15SChuck Lever __be32 nfserr; 9856264d69dSAl Viro int host_err; 98648e03bc5STrond Myklebust int use_wgather; 987e49dbbf3SKent Overstreet loff_t pos = offset; 98801cbf385STrond Myklebust unsigned long exp_op_flags = 0; 9898658452eSNeilBrown unsigned int pflags = current->flags; 990ddef7ed2SChristoph Hellwig rwf_t flags = 0; 99101cbf385STrond Myklebust bool restore_flags = false; 9928658452eSNeilBrown 993d890be15SChuck Lever trace_nfsd_write_opened(rqstp, fhp, offset, *cnt); 994d890be15SChuck Lever 99501cbf385STrond Myklebust if (sb->s_export_op) 99601cbf385STrond Myklebust exp_op_flags = sb->s_export_op->flags; 99701cbf385STrond Myklebust 99801cbf385STrond Myklebust if (test_bit(RQ_LOCAL, &rqstp->rq_flags) && 99901cbf385STrond Myklebust !(exp_op_flags & EXPORT_OP_REMOTE_FS)) { 10008658452eSNeilBrown /* 1001a37b0715SNeilBrown * We want throttling in balance_dirty_pages() 1002a37b0715SNeilBrown * and shrink_inactive_list() to only consider 1003a37b0715SNeilBrown * the backingdev we are writing to, so that nfs to 10048658452eSNeilBrown * localhost doesn't cause nfsd to lock up due to all 10058658452eSNeilBrown * the client's dirty pages or its congested queue. 10068658452eSNeilBrown */ 1007a37b0715SNeilBrown current->flags |= PF_LOCAL_THROTTLE; 100801cbf385STrond Myklebust restore_flags = true; 100901cbf385STrond Myklebust } 10101da177e4SLinus Torvalds 10111da177e4SLinus Torvalds exp = fhp->fh_export; 101248e03bc5STrond Myklebust use_wgather = (rqstp->rq_vers == 2) && EX_WGATHER(exp); 10131da177e4SLinus Torvalds 10141da177e4SLinus Torvalds if (!EX_ISSYNC(exp)) 101554bbb7d2SKinglong Mee stable = NFS_UNSTABLE; 10161da177e4SLinus Torvalds 101724368aadSChristoph Hellwig if (stable && !use_wgather) 101824368aadSChristoph Hellwig flags |= RWF_SYNC; 101924368aadSChristoph Hellwig 1020aa563d7bSDavid Howells iov_iter_kvec(&iter, WRITE, vec, vlen, *cnt); 1021555dbf1aSTrond Myklebust since = READ_ONCE(file->f_wb_err); 1022f11ad7aaSChuck Lever if (verf) 10233988a578SChuck Lever nfsd_copy_write_verifier(verf, nn); 102473da852eSChristoph Hellwig host_err = vfs_iter_write(file, &iter, &pos, flags); 10257bf94c6bSTrond Myklebust if (host_err < 0) { 10263988a578SChuck Lever nfsd_reset_write_verifier(nn); 102775acacb6SChuck Lever trace_nfsd_writeverf_reset(nn, rqstp, host_err); 1028e4636d53SJ. Bruce Fields goto out_nfserr; 10297bf94c6bSTrond Myklebust } 103009a80f2aSTrond Myklebust *cnt = host_err; 103120ad856eSAmir Goldstein nfsd_stats_io_write_add(exp, *cnt); 10322a12a9d7SEric Paris fsnotify_modify(file); 1033555dbf1aSTrond Myklebust host_err = filemap_check_wb_err(file->f_mapping, since); 1034555dbf1aSTrond Myklebust if (host_err < 0) 1035555dbf1aSTrond Myklebust goto out_nfserr; 10361da177e4SLinus Torvalds 1037bbf2f098STrond Myklebust if (stable && use_wgather) { 1038d911df7bSJ. Bruce Fields host_err = wait_for_concurrent_writes(file); 103975acacb6SChuck Lever if (host_err < 0) { 10403988a578SChuck Lever nfsd_reset_write_verifier(nn); 104175acacb6SChuck Lever trace_nfsd_writeverf_reset(nn, rqstp, host_err); 104275acacb6SChuck Lever } 1043bbf2f098STrond Myklebust } 10441da177e4SLinus Torvalds 1045e4636d53SJ. Bruce Fields out_nfserr: 1046d890be15SChuck Lever if (host_err >= 0) { 1047d890be15SChuck Lever trace_nfsd_write_io_done(rqstp, fhp, offset, *cnt); 1048d890be15SChuck Lever nfserr = nfs_ok; 1049d890be15SChuck Lever } else { 1050d890be15SChuck Lever trace_nfsd_write_err(rqstp, fhp, offset, host_err); 1051d890be15SChuck Lever nfserr = nfserrno(host_err); 1052d890be15SChuck Lever } 105301cbf385STrond Myklebust if (restore_flags) 1054a37b0715SNeilBrown current_restore_flags(pflags, PF_LOCAL_THROTTLE); 1055d890be15SChuck Lever return nfserr; 10561da177e4SLinus Torvalds } 10571da177e4SLinus Torvalds 1058dc97618dSJ. Bruce Fields /* 1059dc97618dSJ. Bruce Fields * Read data from a file. count must contain the requested read count 1060dc97618dSJ. Bruce Fields * on entry. On return, *count contains the number of bytes actually read. 1061dc97618dSJ. Bruce Fields * N.B. After this call fhp needs an fh_put 1062dc97618dSJ. Bruce Fields */ 1063dc97618dSJ. Bruce Fields __be32 nfsd_read(struct svc_rqst *rqstp, struct svc_fh *fhp, 106483a63072STrond Myklebust loff_t offset, struct kvec *vec, int vlen, unsigned long *count, 106583a63072STrond Myklebust u32 *eof) 1066dc97618dSJ. Bruce Fields { 106748cd7b51SJeff Layton struct nfsd_file *nf; 1068dc97618dSJ. Bruce Fields struct file *file; 1069dc97618dSJ. Bruce Fields __be32 err; 1070dc97618dSJ. Bruce Fields 1071f394b62bSChuck Lever trace_nfsd_read_start(rqstp, fhp, offset, *count); 107248cd7b51SJeff Layton err = nfsd_file_acquire(rqstp, fhp, NFSD_MAY_READ, &nf); 1073dc97618dSJ. Bruce Fields if (err) 1074dc97618dSJ. Bruce Fields return err; 1075dc97618dSJ. Bruce Fields 107648cd7b51SJeff Layton file = nf->nf_file; 1077a4058c5bSChristoph Hellwig if (file->f_op->splice_read && test_bit(RQ_SPLICE_OK, &rqstp->rq_flags)) 107883a63072STrond Myklebust err = nfsd_splice_read(rqstp, fhp, file, offset, count, eof); 1079a4058c5bSChristoph Hellwig else 108083a63072STrond Myklebust err = nfsd_readv(rqstp, fhp, file, offset, vec, vlen, count, eof); 10816e8b50d1SJeff Layton 108248cd7b51SJeff Layton nfsd_file_put(nf); 1083dc97618dSJ. Bruce Fields 1084f394b62bSChuck Lever trace_nfsd_read_done(rqstp, fhp, offset, *count); 10856e8b50d1SJeff Layton 1086fa0a2126SJ. Bruce Fields return err; 1087fa0a2126SJ. Bruce Fields } 1088fa0a2126SJ. Bruce Fields 10891da177e4SLinus Torvalds /* 10901da177e4SLinus Torvalds * Write data to a file. 10911da177e4SLinus Torvalds * The stable flag requests synchronous writes. 10921da177e4SLinus Torvalds * N.B. After this call fhp needs an fh_put 10931da177e4SLinus Torvalds */ 10946264d69dSAl Viro __be32 109552e380e0SKinglong Mee nfsd_write(struct svc_rqst *rqstp, struct svc_fh *fhp, loff_t offset, 109619e0663fSTrond Myklebust struct kvec *vec, int vlen, unsigned long *cnt, int stable, 109719e0663fSTrond Myklebust __be32 *verf) 10981da177e4SLinus Torvalds { 1099b4935239SJeff Layton struct nfsd_file *nf; 1100b4935239SJeff Layton __be32 err; 11011da177e4SLinus Torvalds 1102f394b62bSChuck Lever trace_nfsd_write_start(rqstp, fhp, offset, *cnt); 11036e8b50d1SJeff Layton 1104b4935239SJeff Layton err = nfsd_file_acquire(rqstp, fhp, NFSD_MAY_WRITE, &nf); 11051da177e4SLinus Torvalds if (err) 11061da177e4SLinus Torvalds goto out; 11071da177e4SLinus Torvalds 110816f8f894STrond Myklebust err = nfsd_vfs_write(rqstp, fhp, nf, offset, vec, 110919e0663fSTrond Myklebust vlen, cnt, stable, verf); 1110b4935239SJeff Layton nfsd_file_put(nf); 11111da177e4SLinus Torvalds out: 1112f394b62bSChuck Lever trace_nfsd_write_done(rqstp, fhp, offset, *cnt); 11131da177e4SLinus Torvalds return err; 11141da177e4SLinus Torvalds } 11151da177e4SLinus Torvalds 11161da177e4SLinus Torvalds #ifdef CONFIG_NFSD_V3 1117*3f965021SChuck Lever /** 1118*3f965021SChuck Lever * nfsd_commit - Commit pending writes to stable storage 1119*3f965021SChuck Lever * @rqstp: RPC request being processed 1120*3f965021SChuck Lever * @fhp: NFS filehandle 1121*3f965021SChuck Lever * @offset: raw offset from beginning of file 1122*3f965021SChuck Lever * @count: raw count of bytes to sync 1123*3f965021SChuck Lever * @verf: filled in with the server's current write verifier 1124aa696a6fSTrond Myklebust * 1125*3f965021SChuck Lever * Note: we guarantee that data that lies within the range specified 1126*3f965021SChuck Lever * by the 'offset' and 'count' parameters will be synced. The server 1127*3f965021SChuck Lever * is permitted to sync data that lies outside this range at the 1128*3f965021SChuck Lever * same time. 11291da177e4SLinus Torvalds * 11301da177e4SLinus Torvalds * Unfortunately we cannot lock the file to make sure we return full WCC 11311da177e4SLinus Torvalds * data to the client, as locking happens lower down in the filesystem. 1132*3f965021SChuck Lever * 1133*3f965021SChuck Lever * Return values: 1134*3f965021SChuck Lever * An nfsstat value in network byte order. 11351da177e4SLinus Torvalds */ 11366264d69dSAl Viro __be32 1137*3f965021SChuck Lever nfsd_commit(struct svc_rqst *rqstp, struct svc_fh *fhp, u64 offset, 1138*3f965021SChuck Lever u32 count, __be32 *verf) 11391da177e4SLinus Torvalds { 1140*3f965021SChuck Lever u64 maxbytes; 1141*3f965021SChuck Lever loff_t start, end; 11422c445a0eSChuck Lever struct nfsd_net *nn; 11435920afa3SJeff Layton struct nfsd_file *nf; 1144*3f965021SChuck Lever __be32 err; 11451da177e4SLinus Torvalds 11465920afa3SJeff Layton err = nfsd_file_acquire(rqstp, fhp, 11475920afa3SJeff Layton NFSD_MAY_WRITE|NFSD_MAY_NOT_BREAK_LEASE, &nf); 11488837abcaSMiklos Szeredi if (err) 1149aa696a6fSTrond Myklebust goto out; 1150*3f965021SChuck Lever 1151*3f965021SChuck Lever /* 1152*3f965021SChuck Lever * Convert the client-provided (offset, count) range to a 1153*3f965021SChuck Lever * (start, end) range. If the client-provided range falls 1154*3f965021SChuck Lever * outside the maximum file size of the underlying FS, 1155*3f965021SChuck Lever * clamp the sync range appropriately. 1156*3f965021SChuck Lever */ 1157*3f965021SChuck Lever start = 0; 1158*3f965021SChuck Lever end = LLONG_MAX; 1159*3f965021SChuck Lever maxbytes = (u64)fhp->fh_dentry->d_sb->s_maxbytes; 1160*3f965021SChuck Lever if (offset < maxbytes) { 1161*3f965021SChuck Lever start = offset; 1162*3f965021SChuck Lever if (count && (offset + count - 1 < maxbytes)) 1163*3f965021SChuck Lever end = offset + count - 1; 1164*3f965021SChuck Lever } 1165*3f965021SChuck Lever 11662c445a0eSChuck Lever nn = net_generic(nf->nf_net, nfsd_net_id); 11671da177e4SLinus Torvalds if (EX_ISSYNC(fhp->fh_export)) { 1168555dbf1aSTrond Myklebust errseq_t since = READ_ONCE(nf->nf_file->f_wb_err); 1169555dbf1aSTrond Myklebust int err2; 1170aa696a6fSTrond Myklebust 1171*3f965021SChuck Lever err2 = vfs_fsync_range(nf->nf_file, start, end, 0); 1172bbf2f098STrond Myklebust switch (err2) { 1173bbf2f098STrond Myklebust case 0: 11743988a578SChuck Lever nfsd_copy_write_verifier(verf, nn); 1175555dbf1aSTrond Myklebust err2 = filemap_check_wb_err(nf->nf_file->f_mapping, 1176555dbf1aSTrond Myklebust since); 1177bbf2f098STrond Myklebust break; 1178bbf2f098STrond Myklebust case -EINVAL: 11791da177e4SLinus Torvalds err = nfserr_notsupp; 1180bbf2f098STrond Myklebust break; 1181bbf2f098STrond Myklebust default: 11823988a578SChuck Lever nfsd_reset_write_verifier(nn); 118375acacb6SChuck Lever trace_nfsd_writeverf_reset(nn, rqstp, err2); 1184bbf2f098STrond Myklebust } 1185555dbf1aSTrond Myklebust err = nfserrno(err2); 1186524ff1afSTrond Myklebust } else 11873988a578SChuck Lever nfsd_copy_write_verifier(verf, nn); 11881da177e4SLinus Torvalds 11895920afa3SJeff Layton nfsd_file_put(nf); 1190aa696a6fSTrond Myklebust out: 11911da177e4SLinus Torvalds return err; 11921da177e4SLinus Torvalds } 11931da177e4SLinus Torvalds #endif /* CONFIG_NFSD_V3 */ 11941da177e4SLinus Torvalds 1195f2b0dee2SAdrian Bunk static __be32 11965c002b3bSJ. Bruce Fields nfsd_create_setattr(struct svc_rqst *rqstp, struct svc_fh *resfhp, 11975c002b3bSJ. Bruce Fields struct iattr *iap) 11985c002b3bSJ. Bruce Fields { 11995c002b3bSJ. Bruce Fields /* 12005c002b3bSJ. Bruce Fields * Mode has already been set earlier in create: 12015c002b3bSJ. Bruce Fields */ 12025c002b3bSJ. Bruce Fields iap->ia_valid &= ~ATTR_MODE; 12035c002b3bSJ. Bruce Fields /* 12045c002b3bSJ. Bruce Fields * Setting uid/gid works only for root. Irix appears to 12055c002b3bSJ. Bruce Fields * send along the gid on create when it tries to implement 12065c002b3bSJ. Bruce Fields * setgid directories via NFS: 12075c002b3bSJ. Bruce Fields */ 12086fab8779SEric W. Biederman if (!uid_eq(current_fsuid(), GLOBAL_ROOT_UID)) 12095c002b3bSJ. Bruce Fields iap->ia_valid &= ~(ATTR_UID|ATTR_GID); 12105c002b3bSJ. Bruce Fields if (iap->ia_valid) 12112a1aa489SArnd Bergmann return nfsd_setattr(rqstp, resfhp, iap, 0, (time64_t)0); 12120f3a24b4STrond Myklebust /* Callers expect file metadata to be committed here */ 1213722b620dSJeff Layton return nfserrno(commit_metadata(resfhp)); 12145c002b3bSJ. Bruce Fields } 12155c002b3bSJ. Bruce Fields 12164ac35c2fSwengang wang /* HPUX client sometimes creates a file in mode 000, and sets size to 0. 12174ac35c2fSwengang wang * setting size to 0 may fail for some specific file systems by the permission 12184ac35c2fSwengang wang * checking which requires WRITE permission but the mode is 000. 12194ac35c2fSwengang wang * we ignore the resizing(to 0) on the just new created file, since the size is 12204ac35c2fSwengang wang * 0 after file created. 12214ac35c2fSwengang wang * 12224ac35c2fSwengang wang * call this only after vfs_create() is called. 12234ac35c2fSwengang wang * */ 12244ac35c2fSwengang wang static void 12254ac35c2fSwengang wang nfsd_check_ignore_resizing(struct iattr *iap) 12264ac35c2fSwengang wang { 12274ac35c2fSwengang wang if ((iap->ia_valid & ATTR_SIZE) && (iap->ia_size == 0)) 12284ac35c2fSwengang wang iap->ia_valid &= ~ATTR_SIZE; 12294ac35c2fSwengang wang } 12304ac35c2fSwengang wang 1231b44061d0SJ. Bruce Fields /* The parent directory should already be locked: */ 12326264d69dSAl Viro __be32 1233b44061d0SJ. Bruce Fields nfsd_create_locked(struct svc_rqst *rqstp, struct svc_fh *fhp, 12341da177e4SLinus Torvalds char *fname, int flen, struct iattr *iap, 12351da177e4SLinus Torvalds int type, dev_t rdev, struct svc_fh *resfhp) 12361da177e4SLinus Torvalds { 12372b118859SDan Carpenter struct dentry *dentry, *dchild; 12381da177e4SLinus Torvalds struct inode *dirp; 12396264d69dSAl Viro __be32 err; 12405c002b3bSJ. Bruce Fields __be32 err2; 12416264d69dSAl Viro int host_err; 12421da177e4SLinus Torvalds 12431da177e4SLinus Torvalds dentry = fhp->fh_dentry; 12442b0143b5SDavid Howells dirp = d_inode(dentry); 12451da177e4SLinus Torvalds 12461da177e4SLinus Torvalds dchild = dget(resfhp->fh_dentry); 12471da177e4SLinus Torvalds if (!fhp->fh_locked) { 1248b44061d0SJ. Bruce Fields WARN_ONCE(1, "nfsd_create: parent %pd2 not locked!\n", 1249a6a9f18fSAl Viro dentry); 1250d75f2b9fSAl Viro err = nfserr_io; 12511da177e4SLinus Torvalds goto out; 12521da177e4SLinus Torvalds } 12531da177e4SLinus Torvalds 12547eed34f1SOleg Drokin err = nfsd_permission(rqstp, fhp->fh_export, dentry, NFSD_MAY_CREATE); 12557eed34f1SOleg Drokin if (err) 12567eed34f1SOleg Drokin goto out; 12577eed34f1SOleg Drokin 12581da177e4SLinus Torvalds if (!(iap->ia_valid & ATTR_MODE)) 12591da177e4SLinus Torvalds iap->ia_mode = 0; 12601da177e4SLinus Torvalds iap->ia_mode = (iap->ia_mode & S_IALLUGO) | type; 12611da177e4SLinus Torvalds 126222cf8419SJ. Bruce Fields if (!IS_POSIXACL(dirp)) 126322cf8419SJ. Bruce Fields iap->ia_mode &= ~current_umask(); 126422cf8419SJ. Bruce Fields 1265088406bcSJ. Bruce Fields err = 0; 12664a55c101SJan Kara host_err = 0; 12671da177e4SLinus Torvalds switch (type) { 12681da177e4SLinus Torvalds case S_IFREG: 12696521f891SChristian Brauner host_err = vfs_create(&init_user_ns, dirp, dchild, iap->ia_mode, true); 12704ac35c2fSwengang wang if (!host_err) 12714ac35c2fSwengang wang nfsd_check_ignore_resizing(iap); 12721da177e4SLinus Torvalds break; 12731da177e4SLinus Torvalds case S_IFDIR: 12746521f891SChristian Brauner host_err = vfs_mkdir(&init_user_ns, dirp, dchild, iap->ia_mode); 12753819bb0dSAl Viro if (!host_err && unlikely(d_unhashed(dchild))) { 12763819bb0dSAl Viro struct dentry *d; 12773819bb0dSAl Viro d = lookup_one_len(dchild->d_name.name, 12783819bb0dSAl Viro dchild->d_parent, 12793819bb0dSAl Viro dchild->d_name.len); 12803819bb0dSAl Viro if (IS_ERR(d)) { 12813819bb0dSAl Viro host_err = PTR_ERR(d); 12823819bb0dSAl Viro break; 12833819bb0dSAl Viro } 12843819bb0dSAl Viro if (unlikely(d_is_negative(d))) { 12853819bb0dSAl Viro dput(d); 12863819bb0dSAl Viro err = nfserr_serverfault; 12873819bb0dSAl Viro goto out; 12883819bb0dSAl Viro } 12893819bb0dSAl Viro dput(resfhp->fh_dentry); 12903819bb0dSAl Viro resfhp->fh_dentry = dget(d); 12913819bb0dSAl Viro err = fh_update(resfhp); 12923819bb0dSAl Viro dput(dchild); 12933819bb0dSAl Viro dchild = d; 12943819bb0dSAl Viro if (err) 12953819bb0dSAl Viro goto out; 12963819bb0dSAl Viro } 12971da177e4SLinus Torvalds break; 12981da177e4SLinus Torvalds case S_IFCHR: 12991da177e4SLinus Torvalds case S_IFBLK: 13001da177e4SLinus Torvalds case S_IFIFO: 13011da177e4SLinus Torvalds case S_IFSOCK: 13026521f891SChristian Brauner host_err = vfs_mknod(&init_user_ns, dirp, dchild, 13036521f891SChristian Brauner iap->ia_mode, rdev); 13041da177e4SLinus Torvalds break; 130571423274SJ. Bruce Fields default: 130671423274SJ. Bruce Fields printk(KERN_WARNING "nfsd: bad file type %o in nfsd_create\n", 130771423274SJ. Bruce Fields type); 130871423274SJ. Bruce Fields host_err = -EINVAL; 1309463c3197SDave Hansen } 13104a55c101SJan Kara if (host_err < 0) 1311463c3197SDave Hansen goto out_nfserr; 13121da177e4SLinus Torvalds 1313f501912aSBen Myers err = nfsd_create_setattr(rqstp, resfhp, iap); 13141da177e4SLinus Torvalds 1315f501912aSBen Myers /* 13160f3a24b4STrond Myklebust * nfsd_create_setattr already committed the child. Transactional 13170f3a24b4STrond Myklebust * filesystems had a chance to commit changes for both parent and 1318b44061d0SJ. Bruce Fields * child simultaneously making the following commit_metadata a 13190f3a24b4STrond Myklebust * noop. 1320f501912aSBen Myers */ 1321f501912aSBen Myers err2 = nfserrno(commit_metadata(fhp)); 1322f193fbabSYAMAMOTO Takashi if (err2) 1323f193fbabSYAMAMOTO Takashi err = err2; 13241da177e4SLinus Torvalds /* 13251da177e4SLinus Torvalds * Update the file handle to get the new inode info. 13261da177e4SLinus Torvalds */ 13271da177e4SLinus Torvalds if (!err) 13281da177e4SLinus Torvalds err = fh_update(resfhp); 13291da177e4SLinus Torvalds out: 13301da177e4SLinus Torvalds dput(dchild); 13311da177e4SLinus Torvalds return err; 13321da177e4SLinus Torvalds 13331da177e4SLinus Torvalds out_nfserr: 13346264d69dSAl Viro err = nfserrno(host_err); 13351da177e4SLinus Torvalds goto out; 13361da177e4SLinus Torvalds } 13371da177e4SLinus Torvalds 1338b44061d0SJ. Bruce Fields /* 1339b44061d0SJ. Bruce Fields * Create a filesystem object (regular, directory, special). 1340b44061d0SJ. Bruce Fields * Note that the parent directory is left locked. 1341b44061d0SJ. Bruce Fields * 1342b44061d0SJ. Bruce Fields * N.B. Every call to nfsd_create needs an fh_put for _both_ fhp and resfhp 1343b44061d0SJ. Bruce Fields */ 1344b44061d0SJ. Bruce Fields __be32 1345b44061d0SJ. Bruce Fields nfsd_create(struct svc_rqst *rqstp, struct svc_fh *fhp, 1346b44061d0SJ. Bruce Fields char *fname, int flen, struct iattr *iap, 1347b44061d0SJ. Bruce Fields int type, dev_t rdev, struct svc_fh *resfhp) 1348b44061d0SJ. Bruce Fields { 1349b44061d0SJ. Bruce Fields struct dentry *dentry, *dchild = NULL; 1350b44061d0SJ. Bruce Fields __be32 err; 1351b44061d0SJ. Bruce Fields int host_err; 1352b44061d0SJ. Bruce Fields 1353b44061d0SJ. Bruce Fields if (isdotent(fname, flen)) 1354b44061d0SJ. Bruce Fields return nfserr_exist; 1355b44061d0SJ. Bruce Fields 1356fa08139dSJ. Bruce Fields err = fh_verify(rqstp, fhp, S_IFDIR, NFSD_MAY_NOP); 1357b44061d0SJ. Bruce Fields if (err) 1358b44061d0SJ. Bruce Fields return err; 1359b44061d0SJ. Bruce Fields 1360b44061d0SJ. Bruce Fields dentry = fhp->fh_dentry; 1361b44061d0SJ. Bruce Fields 1362b44061d0SJ. Bruce Fields host_err = fh_want_write(fhp); 1363b44061d0SJ. Bruce Fields if (host_err) 1364b44061d0SJ. Bruce Fields return nfserrno(host_err); 1365b44061d0SJ. Bruce Fields 1366b44061d0SJ. Bruce Fields fh_lock_nested(fhp, I_MUTEX_PARENT); 1367b44061d0SJ. Bruce Fields dchild = lookup_one_len(fname, dentry, flen); 1368b44061d0SJ. Bruce Fields host_err = PTR_ERR(dchild); 1369b44061d0SJ. Bruce Fields if (IS_ERR(dchild)) 1370b44061d0SJ. Bruce Fields return nfserrno(host_err); 1371b44061d0SJ. Bruce Fields err = fh_compose(resfhp, fhp->fh_export, dchild, fhp); 1372502aa0a5SJosef Bacik /* 1373502aa0a5SJosef Bacik * We unconditionally drop our ref to dchild as fh_compose will have 1374502aa0a5SJosef Bacik * already grabbed its own ref for it. 1375502aa0a5SJosef Bacik */ 1376b44061d0SJ. Bruce Fields dput(dchild); 1377502aa0a5SJosef Bacik if (err) 1378b44061d0SJ. Bruce Fields return err; 1379b44061d0SJ. Bruce Fields return nfsd_create_locked(rqstp, fhp, fname, flen, iap, type, 1380b44061d0SJ. Bruce Fields rdev, resfhp); 1381b44061d0SJ. Bruce Fields } 1382b44061d0SJ. Bruce Fields 13831da177e4SLinus Torvalds #ifdef CONFIG_NFSD_V3 1384ac6721a1SMi Jinlong 13851da177e4SLinus Torvalds /* 1386ac6721a1SMi Jinlong * NFSv3 and NFSv4 version of nfsd_create 13871da177e4SLinus Torvalds */ 13886264d69dSAl Viro __be32 1389ac6721a1SMi Jinlong do_nfsd_create(struct svc_rqst *rqstp, struct svc_fh *fhp, 13901da177e4SLinus Torvalds char *fname, int flen, struct iattr *iap, 13911da177e4SLinus Torvalds struct svc_fh *resfhp, int createmode, u32 *verifier, 1392856121b2SJ. Bruce Fields bool *truncp, bool *created) 13931da177e4SLinus Torvalds { 13941da177e4SLinus Torvalds struct dentry *dentry, *dchild = NULL; 13951da177e4SLinus Torvalds struct inode *dirp; 13966264d69dSAl Viro __be32 err; 13976264d69dSAl Viro int host_err; 13981da177e4SLinus Torvalds __u32 v_mtime=0, v_atime=0; 13991da177e4SLinus Torvalds 14001da177e4SLinus Torvalds err = nfserr_perm; 14011da177e4SLinus Torvalds if (!flen) 14021da177e4SLinus Torvalds goto out; 14031da177e4SLinus Torvalds err = nfserr_exist; 14041da177e4SLinus Torvalds if (isdotent(fname, flen)) 14051da177e4SLinus Torvalds goto out; 14061da177e4SLinus Torvalds if (!(iap->ia_valid & ATTR_MODE)) 14071da177e4SLinus Torvalds iap->ia_mode = 0; 14081574dff8SSachin Prabhu err = fh_verify(rqstp, fhp, S_IFDIR, NFSD_MAY_EXEC); 14091da177e4SLinus Torvalds if (err) 14101da177e4SLinus Torvalds goto out; 14111da177e4SLinus Torvalds 14121da177e4SLinus Torvalds dentry = fhp->fh_dentry; 14132b0143b5SDavid Howells dirp = d_inode(dentry); 14141da177e4SLinus Torvalds 14154a55c101SJan Kara host_err = fh_want_write(fhp); 14164a55c101SJan Kara if (host_err) 14174a55c101SJan Kara goto out_nfserr; 14184a55c101SJan Kara 141912fd3520SPeter Zijlstra fh_lock_nested(fhp, I_MUTEX_PARENT); 14201da177e4SLinus Torvalds 14211da177e4SLinus Torvalds /* 14221da177e4SLinus Torvalds * Compose the response file handle. 14231da177e4SLinus Torvalds */ 14241da177e4SLinus Torvalds dchild = lookup_one_len(fname, dentry, flen); 14256264d69dSAl Viro host_err = PTR_ERR(dchild); 14261da177e4SLinus Torvalds if (IS_ERR(dchild)) 14271da177e4SLinus Torvalds goto out_nfserr; 14281da177e4SLinus Torvalds 14291574dff8SSachin Prabhu /* If file doesn't exist, check for permissions to create one */ 14302b0143b5SDavid Howells if (d_really_is_negative(dchild)) { 14311574dff8SSachin Prabhu err = fh_verify(rqstp, fhp, S_IFDIR, NFSD_MAY_CREATE); 14321574dff8SSachin Prabhu if (err) 14331574dff8SSachin Prabhu goto out; 14341574dff8SSachin Prabhu } 14351574dff8SSachin Prabhu 14361da177e4SLinus Torvalds err = fh_compose(resfhp, fhp->fh_export, dchild, fhp); 14371da177e4SLinus Torvalds if (err) 14381da177e4SLinus Torvalds goto out; 14391da177e4SLinus Torvalds 1440ac6721a1SMi Jinlong if (nfsd_create_is_exclusive(createmode)) { 1441c397852cSPeter Staubach /* solaris7 gets confused (bugid 4218508) if these have 14422336d696SJ. Bruce Fields * the high bit set, as do xfs filesystems without the 14432336d696SJ. Bruce Fields * "bigtime" feature. So just clear the high bits. If this is 1444749997e5SJeff Layton * ever changed to use different attrs for storing the 1445749997e5SJeff Layton * verifier, then do_open_lookup() will also need to be fixed 1446749997e5SJeff Layton * accordingly. 14471da177e4SLinus Torvalds */ 14481da177e4SLinus Torvalds v_mtime = verifier[0]&0x7fffffff; 14491da177e4SLinus Torvalds v_atime = verifier[1]&0x7fffffff; 14501da177e4SLinus Torvalds } 14511da177e4SLinus Torvalds 14522b0143b5SDavid Howells if (d_really_is_positive(dchild)) { 14531da177e4SLinus Torvalds err = 0; 14541da177e4SLinus Torvalds 14551da177e4SLinus Torvalds switch (createmode) { 14561da177e4SLinus Torvalds case NFS3_CREATE_UNCHECKED: 1457e36cb0b8SDavid Howells if (! d_is_reg(dchild)) 14589dc4e6c4SJ. Bruce Fields goto out; 14591da177e4SLinus Torvalds else if (truncp) { 14601da177e4SLinus Torvalds /* in nfsv4, we need to treat this case a little 14611da177e4SLinus Torvalds * differently. we don't want to truncate the 14621da177e4SLinus Torvalds * file now; this would be wrong if the OPEN 14631da177e4SLinus Torvalds * fails for some other reason. furthermore, 14641da177e4SLinus Torvalds * if the size is nonzero, we should ignore it 14651da177e4SLinus Torvalds * according to spec! 14661da177e4SLinus Torvalds */ 14671da177e4SLinus Torvalds *truncp = (iap->ia_valid & ATTR_SIZE) && !iap->ia_size; 14681da177e4SLinus Torvalds } 14691da177e4SLinus Torvalds else { 14701da177e4SLinus Torvalds iap->ia_valid &= ATTR_SIZE; 14711da177e4SLinus Torvalds goto set_attr; 14721da177e4SLinus Torvalds } 14731da177e4SLinus Torvalds break; 14741da177e4SLinus Torvalds case NFS3_CREATE_EXCLUSIVE: 14752b0143b5SDavid Howells if ( d_inode(dchild)->i_mtime.tv_sec == v_mtime 14762b0143b5SDavid Howells && d_inode(dchild)->i_atime.tv_sec == v_atime 14772b0143b5SDavid Howells && d_inode(dchild)->i_size == 0 ) { 14787007c90fSNeil Brown if (created) 1479384a7ccaSzhengbin *created = true; 14801da177e4SLinus Torvalds break; 14817007c90fSNeil Brown } 1482df561f66SGustavo A. R. Silva fallthrough; 1483ac6721a1SMi Jinlong case NFS4_CREATE_EXCLUSIVE4_1: 14842b0143b5SDavid Howells if ( d_inode(dchild)->i_mtime.tv_sec == v_mtime 14852b0143b5SDavid Howells && d_inode(dchild)->i_atime.tv_sec == v_atime 14862b0143b5SDavid Howells && d_inode(dchild)->i_size == 0 ) { 14877007c90fSNeil Brown if (created) 1488384a7ccaSzhengbin *created = true; 1489ac6721a1SMi Jinlong goto set_attr; 14907007c90fSNeil Brown } 1491df561f66SGustavo A. R. Silva fallthrough; 14921da177e4SLinus Torvalds case NFS3_CREATE_GUARDED: 14931da177e4SLinus Torvalds err = nfserr_exist; 14941da177e4SLinus Torvalds } 1495bad0dcffSAl Viro fh_drop_write(fhp); 14961da177e4SLinus Torvalds goto out; 14971da177e4SLinus Torvalds } 14981da177e4SLinus Torvalds 149922cf8419SJ. Bruce Fields if (!IS_POSIXACL(dirp)) 150022cf8419SJ. Bruce Fields iap->ia_mode &= ~current_umask(); 150122cf8419SJ. Bruce Fields 15026521f891SChristian Brauner host_err = vfs_create(&init_user_ns, dirp, dchild, iap->ia_mode, true); 1503463c3197SDave Hansen if (host_err < 0) { 1504bad0dcffSAl Viro fh_drop_write(fhp); 15051da177e4SLinus Torvalds goto out_nfserr; 1506463c3197SDave Hansen } 150781ac95c5SJ. Bruce Fields if (created) 1508384a7ccaSzhengbin *created = true; 15091da177e4SLinus Torvalds 15104ac35c2fSwengang wang nfsd_check_ignore_resizing(iap); 15114ac35c2fSwengang wang 1512ac6721a1SMi Jinlong if (nfsd_create_is_exclusive(createmode)) { 1513c397852cSPeter Staubach /* Cram the verifier into atime/mtime */ 15141da177e4SLinus Torvalds iap->ia_valid = ATTR_MTIME|ATTR_ATIME 1515c397852cSPeter Staubach | ATTR_MTIME_SET|ATTR_ATIME_SET; 15161da177e4SLinus Torvalds /* XXX someone who knows this better please fix it for nsec */ 15171da177e4SLinus Torvalds iap->ia_mtime.tv_sec = v_mtime; 15181da177e4SLinus Torvalds iap->ia_atime.tv_sec = v_atime; 15191da177e4SLinus Torvalds iap->ia_mtime.tv_nsec = 0; 15201da177e4SLinus Torvalds iap->ia_atime.tv_nsec = 0; 15211da177e4SLinus Torvalds } 15221da177e4SLinus Torvalds 15231da177e4SLinus Torvalds set_attr: 1524f501912aSBen Myers err = nfsd_create_setattr(rqstp, resfhp, iap); 1525f501912aSBen Myers 1526f501912aSBen Myers /* 15270f3a24b4STrond Myklebust * nfsd_create_setattr already committed the child 15280f3a24b4STrond Myklebust * (and possibly also the parent). 1529f501912aSBen Myers */ 1530f501912aSBen Myers if (!err) 1531f501912aSBen Myers err = nfserrno(commit_metadata(fhp)); 1532f193fbabSYAMAMOTO Takashi 1533f193fbabSYAMAMOTO Takashi /* 1534f193fbabSYAMAMOTO Takashi * Update the filehandle to get the new inode info. 1535f193fbabSYAMAMOTO Takashi */ 1536f193fbabSYAMAMOTO Takashi if (!err) 1537f193fbabSYAMAMOTO Takashi err = fh_update(resfhp); 15381da177e4SLinus Torvalds 15391da177e4SLinus Torvalds out: 15401da177e4SLinus Torvalds fh_unlock(fhp); 15411da177e4SLinus Torvalds if (dchild && !IS_ERR(dchild)) 15421da177e4SLinus Torvalds dput(dchild); 15434a55c101SJan Kara fh_drop_write(fhp); 15441da177e4SLinus Torvalds return err; 15451da177e4SLinus Torvalds 15461da177e4SLinus Torvalds out_nfserr: 15476264d69dSAl Viro err = nfserrno(host_err); 15481da177e4SLinus Torvalds goto out; 15491da177e4SLinus Torvalds } 15501da177e4SLinus Torvalds #endif /* CONFIG_NFSD_V3 */ 15511da177e4SLinus Torvalds 15521da177e4SLinus Torvalds /* 15531da177e4SLinus Torvalds * Read a symlink. On entry, *lenp must contain the maximum path length that 15541da177e4SLinus Torvalds * fits into the buffer. On return, it contains the true length. 15551da177e4SLinus Torvalds * N.B. After this call fhp needs an fh_put 15561da177e4SLinus Torvalds */ 15576264d69dSAl Viro __be32 15581da177e4SLinus Torvalds nfsd_readlink(struct svc_rqst *rqstp, struct svc_fh *fhp, char *buf, int *lenp) 15591da177e4SLinus Torvalds { 15606264d69dSAl Viro __be32 err; 15614d7edbc3SAl Viro const char *link; 156268ac1234SAl Viro struct path path; 15634d7edbc3SAl Viro DEFINE_DELAYED_CALL(done); 15644d7edbc3SAl Viro int len; 15651da177e4SLinus Torvalds 15668837abcaSMiklos Szeredi err = fh_verify(rqstp, fhp, S_IFLNK, NFSD_MAY_NOP); 15674d7edbc3SAl Viro if (unlikely(err)) 15684d7edbc3SAl Viro return err; 15691da177e4SLinus Torvalds 157068ac1234SAl Viro path.mnt = fhp->fh_export->ex_path.mnt; 157168ac1234SAl Viro path.dentry = fhp->fh_dentry; 15721da177e4SLinus Torvalds 15734d7edbc3SAl Viro if (unlikely(!d_is_symlink(path.dentry))) 15744d7edbc3SAl Viro return nfserr_inval; 15751da177e4SLinus Torvalds 157668ac1234SAl Viro touch_atime(&path); 15771da177e4SLinus Torvalds 15784d7edbc3SAl Viro link = vfs_get_link(path.dentry, &done); 15794d7edbc3SAl Viro if (IS_ERR(link)) 15804d7edbc3SAl Viro return nfserrno(PTR_ERR(link)); 15811da177e4SLinus Torvalds 15824d7edbc3SAl Viro len = strlen(link); 15834d7edbc3SAl Viro if (len < *lenp) 15844d7edbc3SAl Viro *lenp = len; 15854d7edbc3SAl Viro memcpy(buf, link, *lenp); 15864d7edbc3SAl Viro do_delayed_call(&done); 15874d7edbc3SAl Viro return 0; 15881da177e4SLinus Torvalds } 15891da177e4SLinus Torvalds 15901da177e4SLinus Torvalds /* 15911da177e4SLinus Torvalds * Create a symlink and look up its inode 15921da177e4SLinus Torvalds * N.B. After this call _both_ fhp and resfhp need an fh_put 15931da177e4SLinus Torvalds */ 15946264d69dSAl Viro __be32 15951da177e4SLinus Torvalds nfsd_symlink(struct svc_rqst *rqstp, struct svc_fh *fhp, 15961da177e4SLinus Torvalds char *fname, int flen, 159752ee0433SJ. Bruce Fields char *path, 15981e444f5bSKinglong Mee struct svc_fh *resfhp) 15991da177e4SLinus Torvalds { 16001da177e4SLinus Torvalds struct dentry *dentry, *dnew; 16016264d69dSAl Viro __be32 err, cerr; 16026264d69dSAl Viro int host_err; 16031da177e4SLinus Torvalds 16041da177e4SLinus Torvalds err = nfserr_noent; 160552ee0433SJ. Bruce Fields if (!flen || path[0] == '\0') 16061da177e4SLinus Torvalds goto out; 16071da177e4SLinus Torvalds err = nfserr_exist; 16081da177e4SLinus Torvalds if (isdotent(fname, flen)) 16091da177e4SLinus Torvalds goto out; 16101da177e4SLinus Torvalds 16118837abcaSMiklos Szeredi err = fh_verify(rqstp, fhp, S_IFDIR, NFSD_MAY_CREATE); 16121da177e4SLinus Torvalds if (err) 16131da177e4SLinus Torvalds goto out; 16144a55c101SJan Kara 16154a55c101SJan Kara host_err = fh_want_write(fhp); 16164a55c101SJan Kara if (host_err) 16174a55c101SJan Kara goto out_nfserr; 16184a55c101SJan Kara 16191da177e4SLinus Torvalds fh_lock(fhp); 16201da177e4SLinus Torvalds dentry = fhp->fh_dentry; 16211da177e4SLinus Torvalds dnew = lookup_one_len(fname, dentry, flen); 16226264d69dSAl Viro host_err = PTR_ERR(dnew); 16231da177e4SLinus Torvalds if (IS_ERR(dnew)) 16241da177e4SLinus Torvalds goto out_nfserr; 16251da177e4SLinus Torvalds 16266521f891SChristian Brauner host_err = vfs_symlink(&init_user_ns, d_inode(dentry), dnew, path); 16276264d69dSAl Viro err = nfserrno(host_err); 1628eeeadbb9SJ. Bruce Fields fh_unlock(fhp); 1629f501912aSBen Myers if (!err) 1630f501912aSBen Myers err = nfserrno(commit_metadata(fhp)); 16311da177e4SLinus Torvalds 1632bad0dcffSAl Viro fh_drop_write(fhp); 163375c3f29dSDave Hansen 16341da177e4SLinus Torvalds cerr = fh_compose(resfhp, fhp->fh_export, dnew, fhp); 16351da177e4SLinus Torvalds dput(dnew); 16361da177e4SLinus Torvalds if (err==0) err = cerr; 16371da177e4SLinus Torvalds out: 16381da177e4SLinus Torvalds return err; 16391da177e4SLinus Torvalds 16401da177e4SLinus Torvalds out_nfserr: 16416264d69dSAl Viro err = nfserrno(host_err); 16421da177e4SLinus Torvalds goto out; 16431da177e4SLinus Torvalds } 16441da177e4SLinus Torvalds 16451da177e4SLinus Torvalds /* 16461da177e4SLinus Torvalds * Create a hardlink 16471da177e4SLinus Torvalds * N.B. After this call _both_ ffhp and tfhp need an fh_put 16481da177e4SLinus Torvalds */ 16496264d69dSAl Viro __be32 16501da177e4SLinus Torvalds nfsd_link(struct svc_rqst *rqstp, struct svc_fh *ffhp, 16511da177e4SLinus Torvalds char *name, int len, struct svc_fh *tfhp) 16521da177e4SLinus Torvalds { 16531da177e4SLinus Torvalds struct dentry *ddir, *dnew, *dold; 165455b13354SJ. Bruce Fields struct inode *dirp; 16556264d69dSAl Viro __be32 err; 16566264d69dSAl Viro int host_err; 16571da177e4SLinus Torvalds 16588837abcaSMiklos Szeredi err = fh_verify(rqstp, ffhp, S_IFDIR, NFSD_MAY_CREATE); 16591da177e4SLinus Torvalds if (err) 16601da177e4SLinus Torvalds goto out; 16617d818a7bSJ. Bruce Fields err = fh_verify(rqstp, tfhp, 0, NFSD_MAY_NOP); 16621da177e4SLinus Torvalds if (err) 16631da177e4SLinus Torvalds goto out; 16647d818a7bSJ. Bruce Fields err = nfserr_isdir; 1665e36cb0b8SDavid Howells if (d_is_dir(tfhp->fh_dentry)) 16667d818a7bSJ. Bruce Fields goto out; 16671da177e4SLinus Torvalds err = nfserr_perm; 16681da177e4SLinus Torvalds if (!len) 16691da177e4SLinus Torvalds goto out; 16701da177e4SLinus Torvalds err = nfserr_exist; 16711da177e4SLinus Torvalds if (isdotent(name, len)) 16721da177e4SLinus Torvalds goto out; 16731da177e4SLinus Torvalds 16744a55c101SJan Kara host_err = fh_want_write(tfhp); 16754a55c101SJan Kara if (host_err) { 16764a55c101SJan Kara err = nfserrno(host_err); 16774a55c101SJan Kara goto out; 16784a55c101SJan Kara } 16794a55c101SJan Kara 168012fd3520SPeter Zijlstra fh_lock_nested(ffhp, I_MUTEX_PARENT); 16811da177e4SLinus Torvalds ddir = ffhp->fh_dentry; 16822b0143b5SDavid Howells dirp = d_inode(ddir); 16831da177e4SLinus Torvalds 16841da177e4SLinus Torvalds dnew = lookup_one_len(name, ddir, len); 16856264d69dSAl Viro host_err = PTR_ERR(dnew); 16861da177e4SLinus Torvalds if (IS_ERR(dnew)) 16871da177e4SLinus Torvalds goto out_nfserr; 16881da177e4SLinus Torvalds 16891da177e4SLinus Torvalds dold = tfhp->fh_dentry; 16901da177e4SLinus Torvalds 16914795bb37SJ. Bruce Fields err = nfserr_noent; 16922b0143b5SDavid Howells if (d_really_is_negative(dold)) 16934a55c101SJan Kara goto out_dput; 16946521f891SChristian Brauner host_err = vfs_link(dold, &init_user_ns, dirp, dnew, NULL); 1695eeeadbb9SJ. Bruce Fields fh_unlock(ffhp); 16966264d69dSAl Viro if (!host_err) { 1697f501912aSBen Myers err = nfserrno(commit_metadata(ffhp)); 1698f501912aSBen Myers if (!err) 1699f501912aSBen Myers err = nfserrno(commit_metadata(tfhp)); 17001da177e4SLinus Torvalds } else { 17016264d69dSAl Viro if (host_err == -EXDEV && rqstp->rq_vers == 2) 17021da177e4SLinus Torvalds err = nfserr_acces; 17031da177e4SLinus Torvalds else 17046264d69dSAl Viro err = nfserrno(host_err); 17051da177e4SLinus Torvalds } 170675c3f29dSDave Hansen out_dput: 17071da177e4SLinus Torvalds dput(dnew); 1708270d56e5SDavid M. Richter out_unlock: 1709270d56e5SDavid M. Richter fh_unlock(ffhp); 17104a55c101SJan Kara fh_drop_write(tfhp); 17111da177e4SLinus Torvalds out: 17121da177e4SLinus Torvalds return err; 17131da177e4SLinus Torvalds 17141da177e4SLinus Torvalds out_nfserr: 17156264d69dSAl Viro err = nfserrno(host_err); 1716270d56e5SDavid M. Richter goto out_unlock; 17171da177e4SLinus Torvalds } 17181da177e4SLinus Torvalds 17197775ec57SJeff Layton static void 17207775ec57SJeff Layton nfsd_close_cached_files(struct dentry *dentry) 17217775ec57SJeff Layton { 17227775ec57SJeff Layton struct inode *inode = d_inode(dentry); 17237775ec57SJeff Layton 17247775ec57SJeff Layton if (inode && S_ISREG(inode->i_mode)) 17257775ec57SJeff Layton nfsd_file_close_inode_sync(inode); 17267775ec57SJeff Layton } 17277775ec57SJeff Layton 17287775ec57SJeff Layton static bool 17297775ec57SJeff Layton nfsd_has_cached_files(struct dentry *dentry) 17307775ec57SJeff Layton { 17317775ec57SJeff Layton bool ret = false; 17327775ec57SJeff Layton struct inode *inode = d_inode(dentry); 17337775ec57SJeff Layton 17347775ec57SJeff Layton if (inode && S_ISREG(inode->i_mode)) 17357775ec57SJeff Layton ret = nfsd_file_is_cached(inode); 17367775ec57SJeff Layton return ret; 17377775ec57SJeff Layton } 17387775ec57SJeff Layton 17391da177e4SLinus Torvalds /* 17401da177e4SLinus Torvalds * Rename a file 17411da177e4SLinus Torvalds * N.B. After this call _both_ ffhp and tfhp need an fh_put 17421da177e4SLinus Torvalds */ 17436264d69dSAl Viro __be32 17441da177e4SLinus Torvalds nfsd_rename(struct svc_rqst *rqstp, struct svc_fh *ffhp, char *fname, int flen, 17451da177e4SLinus Torvalds struct svc_fh *tfhp, char *tname, int tlen) 17461da177e4SLinus Torvalds { 17471da177e4SLinus Torvalds struct dentry *fdentry, *tdentry, *odentry, *ndentry, *trap; 17481da177e4SLinus Torvalds struct inode *fdir, *tdir; 17496264d69dSAl Viro __be32 err; 17506264d69dSAl Viro int host_err; 17517f84b488SJeff Layton bool close_cached = false; 17521da177e4SLinus Torvalds 17538837abcaSMiklos Szeredi err = fh_verify(rqstp, ffhp, S_IFDIR, NFSD_MAY_REMOVE); 17541da177e4SLinus Torvalds if (err) 17551da177e4SLinus Torvalds goto out; 17568837abcaSMiklos Szeredi err = fh_verify(rqstp, tfhp, S_IFDIR, NFSD_MAY_CREATE); 17571da177e4SLinus Torvalds if (err) 17581da177e4SLinus Torvalds goto out; 17591da177e4SLinus Torvalds 17601da177e4SLinus Torvalds fdentry = ffhp->fh_dentry; 17612b0143b5SDavid Howells fdir = d_inode(fdentry); 17621da177e4SLinus Torvalds 17631da177e4SLinus Torvalds tdentry = tfhp->fh_dentry; 17642b0143b5SDavid Howells tdir = d_inode(tdentry); 17651da177e4SLinus Torvalds 17661da177e4SLinus Torvalds err = nfserr_perm; 17671da177e4SLinus Torvalds if (!flen || isdotent(fname, flen) || !tlen || isdotent(tname, tlen)) 17681da177e4SLinus Torvalds goto out; 17691da177e4SLinus Torvalds 17707775ec57SJeff Layton retry: 17714a55c101SJan Kara host_err = fh_want_write(ffhp); 17724a55c101SJan Kara if (host_err) { 17734a55c101SJan Kara err = nfserrno(host_err); 17744a55c101SJan Kara goto out; 17754a55c101SJan Kara } 17764a55c101SJan Kara 17771da177e4SLinus Torvalds /* cannot use fh_lock as we need deadlock protective ordering 17781da177e4SLinus Torvalds * so do it by hand */ 17791da177e4SLinus Torvalds trap = lock_rename(tdentry, fdentry); 1780aaf91ec1SJeff Layton ffhp->fh_locked = tfhp->fh_locked = true; 1781fcb5e3faSChuck Lever fh_fill_pre_attrs(ffhp); 1782fcb5e3faSChuck Lever fh_fill_pre_attrs(tfhp); 17831da177e4SLinus Torvalds 17841da177e4SLinus Torvalds odentry = lookup_one_len(fname, fdentry, flen); 17856264d69dSAl Viro host_err = PTR_ERR(odentry); 17861da177e4SLinus Torvalds if (IS_ERR(odentry)) 17871da177e4SLinus Torvalds goto out_nfserr; 17881da177e4SLinus Torvalds 17896264d69dSAl Viro host_err = -ENOENT; 17902b0143b5SDavid Howells if (d_really_is_negative(odentry)) 17911da177e4SLinus Torvalds goto out_dput_old; 17926264d69dSAl Viro host_err = -EINVAL; 17931da177e4SLinus Torvalds if (odentry == trap) 17941da177e4SLinus Torvalds goto out_dput_old; 17951da177e4SLinus Torvalds 17961da177e4SLinus Torvalds ndentry = lookup_one_len(tname, tdentry, tlen); 17976264d69dSAl Viro host_err = PTR_ERR(ndentry); 17981da177e4SLinus Torvalds if (IS_ERR(ndentry)) 17991da177e4SLinus Torvalds goto out_dput_old; 18006264d69dSAl Viro host_err = -ENOTEMPTY; 18011da177e4SLinus Torvalds if (ndentry == trap) 18021da177e4SLinus Torvalds goto out_dput_new; 18031da177e4SLinus Torvalds 18049079b1ebSDave Hansen host_err = -EXDEV; 18059079b1ebSDave Hansen if (ffhp->fh_export->ex_path.mnt != tfhp->fh_export->ex_path.mnt) 18069079b1ebSDave Hansen goto out_dput_new; 1807aa387d6cSJ. Bruce Fields if (ffhp->fh_export->ex_path.dentry != tfhp->fh_export->ex_path.dentry) 1808aa387d6cSJ. Bruce Fields goto out_dput_new; 18099079b1ebSDave Hansen 18107f84b488SJeff Layton if ((ndentry->d_sb->s_export_op->flags & EXPORT_OP_CLOSE_BEFORE_UNLINK) && 18117f84b488SJeff Layton nfsd_has_cached_files(ndentry)) { 18127f84b488SJeff Layton close_cached = true; 18137775ec57SJeff Layton goto out_dput_old; 18147775ec57SJeff Layton } else { 18159fe61450SChristian Brauner struct renamedata rd = { 18166521f891SChristian Brauner .old_mnt_userns = &init_user_ns, 18179fe61450SChristian Brauner .old_dir = fdir, 18189fe61450SChristian Brauner .old_dentry = odentry, 18196521f891SChristian Brauner .new_mnt_userns = &init_user_ns, 18209fe61450SChristian Brauner .new_dir = tdir, 18219fe61450SChristian Brauner .new_dentry = ndentry, 18229fe61450SChristian Brauner }; 18239fe61450SChristian Brauner host_err = vfs_rename(&rd); 1824f501912aSBen Myers if (!host_err) { 1825f501912aSBen Myers host_err = commit_metadata(tfhp); 18266264d69dSAl Viro if (!host_err) 1827f501912aSBen Myers host_err = commit_metadata(ffhp); 18281da177e4SLinus Torvalds } 18297775ec57SJeff Layton } 18301da177e4SLinus Torvalds out_dput_new: 18311da177e4SLinus Torvalds dput(ndentry); 18321da177e4SLinus Torvalds out_dput_old: 18331da177e4SLinus Torvalds dput(odentry); 18341da177e4SLinus Torvalds out_nfserr: 18356264d69dSAl Viro err = nfserrno(host_err); 1836fbb74a34SJ. Bruce Fields /* 1837fbb74a34SJ. Bruce Fields * We cannot rely on fh_unlock on the two filehandles, 18381da177e4SLinus Torvalds * as that would do the wrong thing if the two directories 1839fbb74a34SJ. Bruce Fields * were the same, so again we do it by hand. 18401da177e4SLinus Torvalds */ 18417f84b488SJeff Layton if (!close_cached) { 1842fcb5e3faSChuck Lever fh_fill_post_attrs(ffhp); 1843fcb5e3faSChuck Lever fh_fill_post_attrs(tfhp); 18447775ec57SJeff Layton } 18451da177e4SLinus Torvalds unlock_rename(tdentry, fdentry); 1846aaf91ec1SJeff Layton ffhp->fh_locked = tfhp->fh_locked = false; 18474a55c101SJan Kara fh_drop_write(ffhp); 18481da177e4SLinus Torvalds 18497775ec57SJeff Layton /* 18507775ec57SJeff Layton * If the target dentry has cached open files, then we need to try to 18517775ec57SJeff Layton * close them prior to doing the rename. Flushing delayed fput 18527775ec57SJeff Layton * shouldn't be done with locks held however, so we delay it until this 18537775ec57SJeff Layton * point and then reattempt the whole shebang. 18547775ec57SJeff Layton */ 18557f84b488SJeff Layton if (close_cached) { 18567f84b488SJeff Layton close_cached = false; 18577775ec57SJeff Layton nfsd_close_cached_files(ndentry); 18587775ec57SJeff Layton dput(ndentry); 18597775ec57SJeff Layton goto retry; 18607775ec57SJeff Layton } 18611da177e4SLinus Torvalds out: 18621da177e4SLinus Torvalds return err; 18631da177e4SLinus Torvalds } 18641da177e4SLinus Torvalds 18651da177e4SLinus Torvalds /* 18661da177e4SLinus Torvalds * Unlink a file or directory 18671da177e4SLinus Torvalds * N.B. After this call fhp needs an fh_put 18681da177e4SLinus Torvalds */ 18696264d69dSAl Viro __be32 18701da177e4SLinus Torvalds nfsd_unlink(struct svc_rqst *rqstp, struct svc_fh *fhp, int type, 18711da177e4SLinus Torvalds char *fname, int flen) 18721da177e4SLinus Torvalds { 18731da177e4SLinus Torvalds struct dentry *dentry, *rdentry; 18741da177e4SLinus Torvalds struct inode *dirp; 1875e5d74a2dSYu Hsiang Huang struct inode *rinode; 18766264d69dSAl Viro __be32 err; 18776264d69dSAl Viro int host_err; 18781da177e4SLinus Torvalds 18791da177e4SLinus Torvalds err = nfserr_acces; 18801da177e4SLinus Torvalds if (!flen || isdotent(fname, flen)) 18811da177e4SLinus Torvalds goto out; 18828837abcaSMiklos Szeredi err = fh_verify(rqstp, fhp, S_IFDIR, NFSD_MAY_REMOVE); 18831da177e4SLinus Torvalds if (err) 18841da177e4SLinus Torvalds goto out; 18851da177e4SLinus Torvalds 18864a55c101SJan Kara host_err = fh_want_write(fhp); 18874a55c101SJan Kara if (host_err) 18884a55c101SJan Kara goto out_nfserr; 18894a55c101SJan Kara 189012fd3520SPeter Zijlstra fh_lock_nested(fhp, I_MUTEX_PARENT); 18911da177e4SLinus Torvalds dentry = fhp->fh_dentry; 18922b0143b5SDavid Howells dirp = d_inode(dentry); 18931da177e4SLinus Torvalds 18941da177e4SLinus Torvalds rdentry = lookup_one_len(fname, dentry, flen); 18956264d69dSAl Viro host_err = PTR_ERR(rdentry); 18961da177e4SLinus Torvalds if (IS_ERR(rdentry)) 18970ca0c9d7SJ. Bruce Fields goto out_drop_write; 18981da177e4SLinus Torvalds 18992b0143b5SDavid Howells if (d_really_is_negative(rdentry)) { 19001da177e4SLinus Torvalds dput(rdentry); 19010ca0c9d7SJ. Bruce Fields host_err = -ENOENT; 19020ca0c9d7SJ. Bruce Fields goto out_drop_write; 19031da177e4SLinus Torvalds } 1904e5d74a2dSYu Hsiang Huang rinode = d_inode(rdentry); 1905e5d74a2dSYu Hsiang Huang ihold(rinode); 19061da177e4SLinus Torvalds 19071da177e4SLinus Torvalds if (!type) 19082b0143b5SDavid Howells type = d_inode(rdentry)->i_mode & S_IFMT; 19091da177e4SLinus Torvalds 19107775ec57SJeff Layton if (type != S_IFDIR) { 19117f84b488SJeff Layton if (rdentry->d_sb->s_export_op->flags & EXPORT_OP_CLOSE_BEFORE_UNLINK) 19127775ec57SJeff Layton nfsd_close_cached_files(rdentry); 19136521f891SChristian Brauner host_err = vfs_unlink(&init_user_ns, dirp, rdentry, NULL); 19147775ec57SJeff Layton } else { 19156521f891SChristian Brauner host_err = vfs_rmdir(&init_user_ns, dirp, rdentry); 19167775ec57SJeff Layton } 19177775ec57SJeff Layton 1918eeeadbb9SJ. Bruce Fields fh_unlock(fhp); 1919541ce98cSJ. Bruce Fields if (!host_err) 1920541ce98cSJ. Bruce Fields host_err = commit_metadata(fhp); 19211da177e4SLinus Torvalds dput(rdentry); 1922e5d74a2dSYu Hsiang Huang iput(rinode); /* truncate the inode here */ 19231da177e4SLinus Torvalds 19240ca0c9d7SJ. Bruce Fields out_drop_write: 19250ca0c9d7SJ. Bruce Fields fh_drop_write(fhp); 19261da177e4SLinus Torvalds out_nfserr: 1927466e16f0SNeilBrown if (host_err == -EBUSY) { 1928466e16f0SNeilBrown /* name is mounted-on. There is no perfect 1929466e16f0SNeilBrown * error status. 1930466e16f0SNeilBrown */ 1931466e16f0SNeilBrown if (nfsd_v4client(rqstp)) 1932466e16f0SNeilBrown err = nfserr_file_open; 1933466e16f0SNeilBrown else 1934466e16f0SNeilBrown err = nfserr_acces; 1935466e16f0SNeilBrown } else { 19366264d69dSAl Viro err = nfserrno(host_err); 1937466e16f0SNeilBrown } 1938f193fbabSYAMAMOTO Takashi out: 1939f193fbabSYAMAMOTO Takashi return err; 19401da177e4SLinus Torvalds } 19411da177e4SLinus Torvalds 19421da177e4SLinus Torvalds /* 194314f7dd63SDavid Woodhouse * We do this buffering because we must not call back into the file 194414f7dd63SDavid Woodhouse * system's ->lookup() method from the filldir callback. That may well 194514f7dd63SDavid Woodhouse * deadlock a number of file systems. 194614f7dd63SDavid Woodhouse * 194714f7dd63SDavid Woodhouse * This is based heavily on the implementation of same in XFS. 194814f7dd63SDavid Woodhouse */ 194914f7dd63SDavid Woodhouse struct buffered_dirent { 195014f7dd63SDavid Woodhouse u64 ino; 195114f7dd63SDavid Woodhouse loff_t offset; 195214f7dd63SDavid Woodhouse int namlen; 195314f7dd63SDavid Woodhouse unsigned int d_type; 195414f7dd63SDavid Woodhouse char name[]; 195514f7dd63SDavid Woodhouse }; 195614f7dd63SDavid Woodhouse 195714f7dd63SDavid Woodhouse struct readdir_data { 19585c0ba4e0SAl Viro struct dir_context ctx; 195914f7dd63SDavid Woodhouse char *dirent; 196014f7dd63SDavid Woodhouse size_t used; 196153c9c5c0SAl Viro int full; 196214f7dd63SDavid Woodhouse }; 196314f7dd63SDavid Woodhouse 1964ac7576f4SMiklos Szeredi static int nfsd_buffered_filldir(struct dir_context *ctx, const char *name, 1965ac7576f4SMiklos Szeredi int namlen, loff_t offset, u64 ino, 1966ac7576f4SMiklos Szeredi unsigned int d_type) 196714f7dd63SDavid Woodhouse { 1968ac7576f4SMiklos Szeredi struct readdir_data *buf = 1969ac7576f4SMiklos Szeredi container_of(ctx, struct readdir_data, ctx); 197014f7dd63SDavid Woodhouse struct buffered_dirent *de = (void *)(buf->dirent + buf->used); 197114f7dd63SDavid Woodhouse unsigned int reclen; 197214f7dd63SDavid Woodhouse 197314f7dd63SDavid Woodhouse reclen = ALIGN(sizeof(struct buffered_dirent) + namlen, sizeof(u64)); 197453c9c5c0SAl Viro if (buf->used + reclen > PAGE_SIZE) { 197553c9c5c0SAl Viro buf->full = 1; 197614f7dd63SDavid Woodhouse return -EINVAL; 197753c9c5c0SAl Viro } 197814f7dd63SDavid Woodhouse 197914f7dd63SDavid Woodhouse de->namlen = namlen; 198014f7dd63SDavid Woodhouse de->offset = offset; 198114f7dd63SDavid Woodhouse de->ino = ino; 198214f7dd63SDavid Woodhouse de->d_type = d_type; 198314f7dd63SDavid Woodhouse memcpy(de->name, name, namlen); 198414f7dd63SDavid Woodhouse buf->used += reclen; 198514f7dd63SDavid Woodhouse 198614f7dd63SDavid Woodhouse return 0; 198714f7dd63SDavid Woodhouse } 198814f7dd63SDavid Woodhouse 19896019ce07SChuck Lever static __be32 nfsd_buffered_readdir(struct file *file, struct svc_fh *fhp, 19906019ce07SChuck Lever nfsd_filldir_t func, struct readdir_cd *cdp, 19916019ce07SChuck Lever loff_t *offsetp) 19922628b766SDavid Woodhouse { 199314f7dd63SDavid Woodhouse struct buffered_dirent *de; 19942628b766SDavid Woodhouse int host_err; 199514f7dd63SDavid Woodhouse int size; 199614f7dd63SDavid Woodhouse loff_t offset; 1997ac6614b7SAl Viro struct readdir_data buf = { 1998ac6614b7SAl Viro .ctx.actor = nfsd_buffered_filldir, 1999ac6614b7SAl Viro .dirent = (void *)__get_free_page(GFP_KERNEL) 2000ac6614b7SAl Viro }; 20012628b766SDavid Woodhouse 200214f7dd63SDavid Woodhouse if (!buf.dirent) 20032f9092e1SDavid Woodhouse return nfserrno(-ENOMEM); 200414f7dd63SDavid Woodhouse 200514f7dd63SDavid Woodhouse offset = *offsetp; 20062628b766SDavid Woodhouse 200714f7dd63SDavid Woodhouse while (1) { 200814f7dd63SDavid Woodhouse unsigned int reclen; 200914f7dd63SDavid Woodhouse 2010b726e923SDoug Nazar cdp->err = nfserr_eof; /* will be cleared on successful read */ 201114f7dd63SDavid Woodhouse buf.used = 0; 201253c9c5c0SAl Viro buf.full = 0; 201314f7dd63SDavid Woodhouse 20145c0ba4e0SAl Viro host_err = iterate_dir(file, &buf.ctx); 201553c9c5c0SAl Viro if (buf.full) 201653c9c5c0SAl Viro host_err = 0; 201753c9c5c0SAl Viro 201853c9c5c0SAl Viro if (host_err < 0) 201914f7dd63SDavid Woodhouse break; 202014f7dd63SDavid Woodhouse 202114f7dd63SDavid Woodhouse size = buf.used; 202214f7dd63SDavid Woodhouse 202314f7dd63SDavid Woodhouse if (!size) 202414f7dd63SDavid Woodhouse break; 202514f7dd63SDavid Woodhouse 202614f7dd63SDavid Woodhouse de = (struct buffered_dirent *)buf.dirent; 202714f7dd63SDavid Woodhouse while (size > 0) { 202814f7dd63SDavid Woodhouse offset = de->offset; 202914f7dd63SDavid Woodhouse 203014f7dd63SDavid Woodhouse if (func(cdp, de->name, de->namlen, de->offset, 203114f7dd63SDavid Woodhouse de->ino, de->d_type)) 20322f9092e1SDavid Woodhouse break; 203314f7dd63SDavid Woodhouse 203414f7dd63SDavid Woodhouse if (cdp->err != nfs_ok) 20352f9092e1SDavid Woodhouse break; 203614f7dd63SDavid Woodhouse 20376019ce07SChuck Lever trace_nfsd_dirent(fhp, de->ino, de->name, de->namlen); 20386019ce07SChuck Lever 203914f7dd63SDavid Woodhouse reclen = ALIGN(sizeof(*de) + de->namlen, 204014f7dd63SDavid Woodhouse sizeof(u64)); 204114f7dd63SDavid Woodhouse size -= reclen; 204214f7dd63SDavid Woodhouse de = (struct buffered_dirent *)((char *)de + reclen); 204314f7dd63SDavid Woodhouse } 20442f9092e1SDavid Woodhouse if (size > 0) /* We bailed out early */ 20452f9092e1SDavid Woodhouse break; 20462f9092e1SDavid Woodhouse 2047c002a6c7SDavid Woodhouse offset = vfs_llseek(file, 0, SEEK_CUR); 204814f7dd63SDavid Woodhouse } 204914f7dd63SDavid Woodhouse 205014f7dd63SDavid Woodhouse free_page((unsigned long)(buf.dirent)); 20512628b766SDavid Woodhouse 20522628b766SDavid Woodhouse if (host_err) 20532628b766SDavid Woodhouse return nfserrno(host_err); 205414f7dd63SDavid Woodhouse 205514f7dd63SDavid Woodhouse *offsetp = offset; 20562628b766SDavid Woodhouse return cdp->err; 20572628b766SDavid Woodhouse } 20582628b766SDavid Woodhouse 20591da177e4SLinus Torvalds /* 20601da177e4SLinus Torvalds * Read entries from a directory. 20611da177e4SLinus Torvalds * The NFSv3/4 verifier we ignore for now. 20621da177e4SLinus Torvalds */ 20636264d69dSAl Viro __be32 20641da177e4SLinus Torvalds nfsd_readdir(struct svc_rqst *rqstp, struct svc_fh *fhp, loff_t *offsetp, 2065ac7576f4SMiklos Szeredi struct readdir_cd *cdp, nfsd_filldir_t func) 20661da177e4SLinus Torvalds { 20676264d69dSAl Viro __be32 err; 20681da177e4SLinus Torvalds struct file *file; 20691da177e4SLinus Torvalds loff_t offset = *offsetp; 207006effdbbSBernd Schubert int may_flags = NFSD_MAY_READ; 20711da177e4SLinus Torvalds 207206effdbbSBernd Schubert /* NFSv2 only supports 32 bit cookies */ 207306effdbbSBernd Schubert if (rqstp->rq_vers > 2) 207406effdbbSBernd Schubert may_flags |= NFSD_MAY_64BIT_COOKIE; 207506effdbbSBernd Schubert 207606effdbbSBernd Schubert err = nfsd_open(rqstp, fhp, S_IFDIR, may_flags, &file); 20771da177e4SLinus Torvalds if (err) 20781da177e4SLinus Torvalds goto out; 20791da177e4SLinus Torvalds 2080b108fe6bSJeff Layton offset = vfs_llseek(file, offset, SEEK_SET); 20811da177e4SLinus Torvalds if (offset < 0) { 20821da177e4SLinus Torvalds err = nfserrno((int)offset); 20831da177e4SLinus Torvalds goto out_close; 20841da177e4SLinus Torvalds } 20851da177e4SLinus Torvalds 20866019ce07SChuck Lever err = nfsd_buffered_readdir(file, fhp, func, cdp, offsetp); 20871da177e4SLinus Torvalds 20881da177e4SLinus Torvalds if (err == nfserr_eof || err == nfserr_toosmall) 20891da177e4SLinus Torvalds err = nfs_ok; /* can still be found in ->err */ 20901da177e4SLinus Torvalds out_close: 2091fd891454SChristoph Hellwig fput(file); 20921da177e4SLinus Torvalds out: 20931da177e4SLinus Torvalds return err; 20941da177e4SLinus Torvalds } 20951da177e4SLinus Torvalds 20961da177e4SLinus Torvalds /* 20971da177e4SLinus Torvalds * Get file system stats 20981da177e4SLinus Torvalds * N.B. After this call fhp needs an fh_put 20991da177e4SLinus Torvalds */ 21006264d69dSAl Viro __be32 210104716e66SJ. Bruce Fields nfsd_statfs(struct svc_rqst *rqstp, struct svc_fh *fhp, struct kstatfs *stat, int access) 21021da177e4SLinus Torvalds { 2103f6360efbSTakashi Iwai __be32 err; 2104f6360efbSTakashi Iwai 2105f6360efbSTakashi Iwai err = fh_verify(rqstp, fhp, 0, NFSD_MAY_NOP | access); 2106f6360efbSTakashi Iwai if (!err) { 2107ebabe9a9SChristoph Hellwig struct path path = { 2108ebabe9a9SChristoph Hellwig .mnt = fhp->fh_export->ex_path.mnt, 2109ebabe9a9SChristoph Hellwig .dentry = fhp->fh_dentry, 2110ebabe9a9SChristoph Hellwig }; 2111f6360efbSTakashi Iwai if (vfs_statfs(&path, stat)) 21121da177e4SLinus Torvalds err = nfserr_io; 2113f6360efbSTakashi Iwai } 21141da177e4SLinus Torvalds return err; 21151da177e4SLinus Torvalds } 21161da177e4SLinus Torvalds 2117c7d51402SJ. Bruce Fields static int exp_rdonly(struct svc_rqst *rqstp, struct svc_export *exp) 2118e22841c6SJ. Bruce Fields { 2119c7d51402SJ. Bruce Fields return nfsexp_flags(rqstp, exp) & NFSEXP_READONLY; 2120e22841c6SJ. Bruce Fields } 2121e22841c6SJ. Bruce Fields 212232119446SFrank van der Linden #ifdef CONFIG_NFSD_V4 212332119446SFrank van der Linden /* 212432119446SFrank van der Linden * Helper function to translate error numbers. In the case of xattr operations, 212532119446SFrank van der Linden * some error codes need to be translated outside of the standard translations. 212632119446SFrank van der Linden * 212732119446SFrank van der Linden * ENODATA needs to be translated to nfserr_noxattr. 212832119446SFrank van der Linden * E2BIG to nfserr_xattr2big. 212932119446SFrank van der Linden * 213032119446SFrank van der Linden * Additionally, vfs_listxattr can return -ERANGE. This means that the 213132119446SFrank van der Linden * file has too many extended attributes to retrieve inside an 213232119446SFrank van der Linden * XATTR_LIST_MAX sized buffer. This is a bug in the xattr implementation: 213332119446SFrank van der Linden * filesystems will allow the adding of extended attributes until they hit 213432119446SFrank van der Linden * their own internal limit. This limit may be larger than XATTR_LIST_MAX. 213532119446SFrank van der Linden * So, at that point, the attributes are present and valid, but can't 213632119446SFrank van der Linden * be retrieved using listxattr, since the upper level xattr code enforces 213732119446SFrank van der Linden * the XATTR_LIST_MAX limit. 213832119446SFrank van der Linden * 213932119446SFrank van der Linden * This bug means that we need to deal with listxattr returning -ERANGE. The 214032119446SFrank van der Linden * best mapping is to return TOOSMALL. 214132119446SFrank van der Linden */ 214232119446SFrank van der Linden static __be32 214332119446SFrank van der Linden nfsd_xattr_errno(int err) 214432119446SFrank van der Linden { 214532119446SFrank van der Linden switch (err) { 214632119446SFrank van der Linden case -ENODATA: 214732119446SFrank van der Linden return nfserr_noxattr; 214832119446SFrank van der Linden case -E2BIG: 214932119446SFrank van der Linden return nfserr_xattr2big; 215032119446SFrank van der Linden case -ERANGE: 215132119446SFrank van der Linden return nfserr_toosmall; 215232119446SFrank van der Linden } 215332119446SFrank van der Linden return nfserrno(err); 215432119446SFrank van der Linden } 215532119446SFrank van der Linden 215632119446SFrank van der Linden /* 215732119446SFrank van der Linden * Retrieve the specified user extended attribute. To avoid always 215832119446SFrank van der Linden * having to allocate the maximum size (since we are not getting 215932119446SFrank van der Linden * a maximum size from the RPC), do a probe + alloc. Hold a reader 216032119446SFrank van der Linden * lock on i_rwsem to prevent the extended attribute from changing 216132119446SFrank van der Linden * size while we're doing this. 216232119446SFrank van der Linden */ 216332119446SFrank van der Linden __be32 216432119446SFrank van der Linden nfsd_getxattr(struct svc_rqst *rqstp, struct svc_fh *fhp, char *name, 216532119446SFrank van der Linden void **bufp, int *lenp) 216632119446SFrank van der Linden { 216732119446SFrank van der Linden ssize_t len; 216832119446SFrank van der Linden __be32 err; 216932119446SFrank van der Linden char *buf; 217032119446SFrank van der Linden struct inode *inode; 217132119446SFrank van der Linden struct dentry *dentry; 217232119446SFrank van der Linden 217332119446SFrank van der Linden err = fh_verify(rqstp, fhp, 0, NFSD_MAY_READ); 217432119446SFrank van der Linden if (err) 217532119446SFrank van der Linden return err; 217632119446SFrank van der Linden 217732119446SFrank van der Linden err = nfs_ok; 217832119446SFrank van der Linden dentry = fhp->fh_dentry; 217932119446SFrank van der Linden inode = d_inode(dentry); 218032119446SFrank van der Linden 218132119446SFrank van der Linden inode_lock_shared(inode); 218232119446SFrank van der Linden 2183c7c7a1a1STycho Andersen len = vfs_getxattr(&init_user_ns, dentry, name, NULL, 0); 218432119446SFrank van der Linden 218532119446SFrank van der Linden /* 218632119446SFrank van der Linden * Zero-length attribute, just return. 218732119446SFrank van der Linden */ 218832119446SFrank van der Linden if (len == 0) { 218932119446SFrank van der Linden *bufp = NULL; 219032119446SFrank van der Linden *lenp = 0; 219132119446SFrank van der Linden goto out; 219232119446SFrank van der Linden } 219332119446SFrank van der Linden 219432119446SFrank van der Linden if (len < 0) { 219532119446SFrank van der Linden err = nfsd_xattr_errno(len); 219632119446SFrank van der Linden goto out; 219732119446SFrank van der Linden } 219832119446SFrank van der Linden 219932119446SFrank van der Linden if (len > *lenp) { 220032119446SFrank van der Linden err = nfserr_toosmall; 220132119446SFrank van der Linden goto out; 220232119446SFrank van der Linden } 220332119446SFrank van der Linden 220432119446SFrank van der Linden buf = kvmalloc(len, GFP_KERNEL | GFP_NOFS); 220532119446SFrank van der Linden if (buf == NULL) { 220632119446SFrank van der Linden err = nfserr_jukebox; 220732119446SFrank van der Linden goto out; 220832119446SFrank van der Linden } 220932119446SFrank van der Linden 2210c7c7a1a1STycho Andersen len = vfs_getxattr(&init_user_ns, dentry, name, buf, len); 221132119446SFrank van der Linden if (len <= 0) { 221232119446SFrank van der Linden kvfree(buf); 221332119446SFrank van der Linden buf = NULL; 221432119446SFrank van der Linden err = nfsd_xattr_errno(len); 221532119446SFrank van der Linden } 221632119446SFrank van der Linden 221732119446SFrank van der Linden *lenp = len; 221832119446SFrank van der Linden *bufp = buf; 221932119446SFrank van der Linden 222032119446SFrank van der Linden out: 222132119446SFrank van der Linden inode_unlock_shared(inode); 222232119446SFrank van der Linden 222332119446SFrank van der Linden return err; 222432119446SFrank van der Linden } 222532119446SFrank van der Linden 222632119446SFrank van der Linden /* 222732119446SFrank van der Linden * Retrieve the xattr names. Since we can't know how many are 222832119446SFrank van der Linden * user extended attributes, we must get all attributes here, 222932119446SFrank van der Linden * and have the XDR encode filter out the "user." ones. 223032119446SFrank van der Linden * 223132119446SFrank van der Linden * While this could always just allocate an XATTR_LIST_MAX 223232119446SFrank van der Linden * buffer, that's a waste, so do a probe + allocate. To 223332119446SFrank van der Linden * avoid any changes between the probe and allocate, wrap 223432119446SFrank van der Linden * this in inode_lock. 223532119446SFrank van der Linden */ 223632119446SFrank van der Linden __be32 223732119446SFrank van der Linden nfsd_listxattr(struct svc_rqst *rqstp, struct svc_fh *fhp, char **bufp, 223832119446SFrank van der Linden int *lenp) 223932119446SFrank van der Linden { 224032119446SFrank van der Linden ssize_t len; 224132119446SFrank van der Linden __be32 err; 224232119446SFrank van der Linden char *buf; 224332119446SFrank van der Linden struct inode *inode; 224432119446SFrank van der Linden struct dentry *dentry; 224532119446SFrank van der Linden 224632119446SFrank van der Linden err = fh_verify(rqstp, fhp, 0, NFSD_MAY_READ); 224732119446SFrank van der Linden if (err) 224832119446SFrank van der Linden return err; 224932119446SFrank van der Linden 225032119446SFrank van der Linden dentry = fhp->fh_dentry; 225132119446SFrank van der Linden inode = d_inode(dentry); 225232119446SFrank van der Linden *lenp = 0; 225332119446SFrank van der Linden 225432119446SFrank van der Linden inode_lock_shared(inode); 225532119446SFrank van der Linden 225632119446SFrank van der Linden len = vfs_listxattr(dentry, NULL, 0); 225732119446SFrank van der Linden if (len <= 0) { 225832119446SFrank van der Linden err = nfsd_xattr_errno(len); 225932119446SFrank van der Linden goto out; 226032119446SFrank van der Linden } 226132119446SFrank van der Linden 226232119446SFrank van der Linden if (len > XATTR_LIST_MAX) { 226332119446SFrank van der Linden err = nfserr_xattr2big; 226432119446SFrank van der Linden goto out; 226532119446SFrank van der Linden } 226632119446SFrank van der Linden 226732119446SFrank van der Linden /* 226832119446SFrank van der Linden * We're holding i_rwsem - use GFP_NOFS. 226932119446SFrank van der Linden */ 227032119446SFrank van der Linden buf = kvmalloc(len, GFP_KERNEL | GFP_NOFS); 227132119446SFrank van der Linden if (buf == NULL) { 227232119446SFrank van der Linden err = nfserr_jukebox; 227332119446SFrank van der Linden goto out; 227432119446SFrank van der Linden } 227532119446SFrank van der Linden 227632119446SFrank van der Linden len = vfs_listxattr(dentry, buf, len); 227732119446SFrank van der Linden if (len <= 0) { 227832119446SFrank van der Linden kvfree(buf); 227932119446SFrank van der Linden err = nfsd_xattr_errno(len); 228032119446SFrank van der Linden goto out; 228132119446SFrank van der Linden } 228232119446SFrank van der Linden 228332119446SFrank van der Linden *lenp = len; 228432119446SFrank van der Linden *bufp = buf; 228532119446SFrank van der Linden 228632119446SFrank van der Linden err = nfs_ok; 228732119446SFrank van der Linden out: 228832119446SFrank van der Linden inode_unlock_shared(inode); 228932119446SFrank van der Linden 229032119446SFrank van der Linden return err; 229132119446SFrank van der Linden } 229232119446SFrank van der Linden 229332119446SFrank van der Linden /* 229432119446SFrank van der Linden * Removexattr and setxattr need to call fh_lock to both lock the inode 229532119446SFrank van der Linden * and set the change attribute. Since the top-level vfs_removexattr 229632119446SFrank van der Linden * and vfs_setxattr calls already do their own inode_lock calls, call 229732119446SFrank van der Linden * the _locked variant. Pass in a NULL pointer for delegated_inode, 229832119446SFrank van der Linden * and let the client deal with NFS4ERR_DELAY (same as with e.g. 229932119446SFrank van der Linden * setattr and remove). 230032119446SFrank van der Linden */ 230132119446SFrank van der Linden __be32 230232119446SFrank van der Linden nfsd_removexattr(struct svc_rqst *rqstp, struct svc_fh *fhp, char *name) 230332119446SFrank van der Linden { 23048237284aSChuck Lever __be32 err; 23058237284aSChuck Lever int ret; 230632119446SFrank van der Linden 230732119446SFrank van der Linden err = fh_verify(rqstp, fhp, 0, NFSD_MAY_WRITE); 230832119446SFrank van der Linden if (err) 230932119446SFrank van der Linden return err; 231032119446SFrank van der Linden 231132119446SFrank van der Linden ret = fh_want_write(fhp); 231232119446SFrank van der Linden if (ret) 231332119446SFrank van der Linden return nfserrno(ret); 231432119446SFrank van der Linden 231532119446SFrank van der Linden fh_lock(fhp); 231632119446SFrank van der Linden 2317c7c7a1a1STycho Andersen ret = __vfs_removexattr_locked(&init_user_ns, fhp->fh_dentry, 2318c7c7a1a1STycho Andersen name, NULL); 231932119446SFrank van der Linden 232032119446SFrank van der Linden fh_unlock(fhp); 232132119446SFrank van der Linden fh_drop_write(fhp); 232232119446SFrank van der Linden 232332119446SFrank van der Linden return nfsd_xattr_errno(ret); 232432119446SFrank van der Linden } 232532119446SFrank van der Linden 232632119446SFrank van der Linden __be32 232732119446SFrank van der Linden nfsd_setxattr(struct svc_rqst *rqstp, struct svc_fh *fhp, char *name, 232832119446SFrank van der Linden void *buf, u32 len, u32 flags) 232932119446SFrank van der Linden { 23308237284aSChuck Lever __be32 err; 23318237284aSChuck Lever int ret; 233232119446SFrank van der Linden 233332119446SFrank van der Linden err = fh_verify(rqstp, fhp, 0, NFSD_MAY_WRITE); 233432119446SFrank van der Linden if (err) 233532119446SFrank van der Linden return err; 233632119446SFrank van der Linden 233732119446SFrank van der Linden ret = fh_want_write(fhp); 233832119446SFrank van der Linden if (ret) 233932119446SFrank van der Linden return nfserrno(ret); 234032119446SFrank van der Linden fh_lock(fhp); 234132119446SFrank van der Linden 2342c7c7a1a1STycho Andersen ret = __vfs_setxattr_locked(&init_user_ns, fhp->fh_dentry, name, buf, 2343c7c7a1a1STycho Andersen len, flags, NULL); 234432119446SFrank van der Linden 234532119446SFrank van der Linden fh_unlock(fhp); 234632119446SFrank van der Linden fh_drop_write(fhp); 234732119446SFrank van der Linden 234832119446SFrank van der Linden return nfsd_xattr_errno(ret); 234932119446SFrank van der Linden } 235032119446SFrank van der Linden #endif 235132119446SFrank van der Linden 23521da177e4SLinus Torvalds /* 23531da177e4SLinus Torvalds * Check for a user's access permissions to this inode. 23541da177e4SLinus Torvalds */ 23556264d69dSAl Viro __be32 23560ec757dfSJ. Bruce Fields nfsd_permission(struct svc_rqst *rqstp, struct svc_export *exp, 23570ec757dfSJ. Bruce Fields struct dentry *dentry, int acc) 23581da177e4SLinus Torvalds { 23592b0143b5SDavid Howells struct inode *inode = d_inode(dentry); 23601da177e4SLinus Torvalds int err; 23611da177e4SLinus Torvalds 2362aea93397SJ. Bruce Fields if ((acc & NFSD_MAY_MASK) == NFSD_MAY_NOP) 23631da177e4SLinus Torvalds return 0; 23641da177e4SLinus Torvalds #if 0 23651da177e4SLinus Torvalds dprintk("nfsd: permission 0x%x%s%s%s%s%s%s%s mode 0%o%s%s%s\n", 23661da177e4SLinus Torvalds acc, 23678837abcaSMiklos Szeredi (acc & NFSD_MAY_READ)? " read" : "", 23688837abcaSMiklos Szeredi (acc & NFSD_MAY_WRITE)? " write" : "", 23698837abcaSMiklos Szeredi (acc & NFSD_MAY_EXEC)? " exec" : "", 23708837abcaSMiklos Szeredi (acc & NFSD_MAY_SATTR)? " sattr" : "", 23718837abcaSMiklos Szeredi (acc & NFSD_MAY_TRUNC)? " trunc" : "", 23728837abcaSMiklos Szeredi (acc & NFSD_MAY_LOCK)? " lock" : "", 23738837abcaSMiklos Szeredi (acc & NFSD_MAY_OWNER_OVERRIDE)? " owneroverride" : "", 23741da177e4SLinus Torvalds inode->i_mode, 23751da177e4SLinus Torvalds IS_IMMUTABLE(inode)? " immut" : "", 23761da177e4SLinus Torvalds IS_APPEND(inode)? " append" : "", 23772c463e95SDave Hansen __mnt_is_readonly(exp->ex_path.mnt)? " ro" : ""); 23781da177e4SLinus Torvalds dprintk(" owner %d/%d user %d/%d\n", 23795cc0a840SDavid Howells inode->i_uid, inode->i_gid, current_fsuid(), current_fsgid()); 23801da177e4SLinus Torvalds #endif 23811da177e4SLinus Torvalds 23821da177e4SLinus Torvalds /* Normally we reject any write/sattr etc access on a read-only file 23831da177e4SLinus Torvalds * system. But if it is IRIX doing check on write-access for a 23841da177e4SLinus Torvalds * device special file, we ignore rofs. 23851da177e4SLinus Torvalds */ 23868837abcaSMiklos Szeredi if (!(acc & NFSD_MAY_LOCAL_ACCESS)) 23878837abcaSMiklos Szeredi if (acc & (NFSD_MAY_WRITE | NFSD_MAY_SATTR | NFSD_MAY_TRUNC)) { 23882c463e95SDave Hansen if (exp_rdonly(rqstp, exp) || 23892c463e95SDave Hansen __mnt_is_readonly(exp->ex_path.mnt)) 23901da177e4SLinus Torvalds return nfserr_rofs; 23918837abcaSMiklos Szeredi if (/* (acc & NFSD_MAY_WRITE) && */ IS_IMMUTABLE(inode)) 23921da177e4SLinus Torvalds return nfserr_perm; 23931da177e4SLinus Torvalds } 23948837abcaSMiklos Szeredi if ((acc & NFSD_MAY_TRUNC) && IS_APPEND(inode)) 23951da177e4SLinus Torvalds return nfserr_perm; 23961da177e4SLinus Torvalds 23978837abcaSMiklos Szeredi if (acc & NFSD_MAY_LOCK) { 23981da177e4SLinus Torvalds /* If we cannot rely on authentication in NLM requests, 23991da177e4SLinus Torvalds * just allow locks, otherwise require read permission, or 24001da177e4SLinus Torvalds * ownership 24011da177e4SLinus Torvalds */ 24021da177e4SLinus Torvalds if (exp->ex_flags & NFSEXP_NOAUTHNLM) 24031da177e4SLinus Torvalds return 0; 24041da177e4SLinus Torvalds else 24058837abcaSMiklos Szeredi acc = NFSD_MAY_READ | NFSD_MAY_OWNER_OVERRIDE; 24061da177e4SLinus Torvalds } 24071da177e4SLinus Torvalds /* 24081da177e4SLinus Torvalds * The file owner always gets access permission for accesses that 24091da177e4SLinus Torvalds * would normally be checked at open time. This is to make 24101da177e4SLinus Torvalds * file access work even when the client has done a fchmod(fd, 0). 24111da177e4SLinus Torvalds * 24121da177e4SLinus Torvalds * However, `cp foo bar' should fail nevertheless when bar is 24131da177e4SLinus Torvalds * readonly. A sensible way to do this might be to reject all 24141da177e4SLinus Torvalds * attempts to truncate a read-only file, because a creat() call 24151da177e4SLinus Torvalds * always implies file truncation. 24161da177e4SLinus Torvalds * ... but this isn't really fair. A process may reasonably call 24171da177e4SLinus Torvalds * ftruncate on an open file descriptor on a file with perm 000. 24181da177e4SLinus Torvalds * We must trust the client to do permission checking - using "ACCESS" 24191da177e4SLinus Torvalds * with NFSv3. 24201da177e4SLinus Torvalds */ 24218837abcaSMiklos Szeredi if ((acc & NFSD_MAY_OWNER_OVERRIDE) && 24226fab8779SEric W. Biederman uid_eq(inode->i_uid, current_fsuid())) 24231da177e4SLinus Torvalds return 0; 24241da177e4SLinus Torvalds 24258837abcaSMiklos Szeredi /* This assumes NFSD_MAY_{READ,WRITE,EXEC} == MAY_{READ,WRITE,EXEC} */ 242647291baaSChristian Brauner err = inode_permission(&init_user_ns, inode, 242747291baaSChristian Brauner acc & (MAY_READ | MAY_WRITE | MAY_EXEC)); 24281da177e4SLinus Torvalds 24291da177e4SLinus Torvalds /* Allow read access to binaries even when mode 111 */ 24301da177e4SLinus Torvalds if (err == -EACCES && S_ISREG(inode->i_mode) && 2431a043226bSJ. Bruce Fields (acc == (NFSD_MAY_READ | NFSD_MAY_OWNER_OVERRIDE) || 2432a043226bSJ. Bruce Fields acc == (NFSD_MAY_READ | NFSD_MAY_READ_IF_EXEC))) 243347291baaSChristian Brauner err = inode_permission(&init_user_ns, inode, MAY_EXEC); 24341da177e4SLinus Torvalds 24351da177e4SLinus Torvalds return err? nfserrno(err) : 0; 24361da177e4SLinus Torvalds } 2437