1b2441318SGreg Kroah-Hartman // SPDX-License-Identifier: GPL-2.0 21da177e4SLinus Torvalds /* 31da177e4SLinus Torvalds * File operations used by nfsd. Some of these have been ripped from 41da177e4SLinus Torvalds * other parts of the kernel because they weren't exported, others 51da177e4SLinus Torvalds * are partial duplicates with added or changed functionality. 61da177e4SLinus Torvalds * 71da177e4SLinus Torvalds * Note that several functions dget() the dentry upon which they want 81da177e4SLinus Torvalds * to act, most notably those that create directory entries. Response 91da177e4SLinus Torvalds * dentry's are dput()'d if necessary in the release callback. 101da177e4SLinus Torvalds * So if you notice code paths that apparently fail to dput() the 111da177e4SLinus Torvalds * dentry, don't worry--they have been taken care of. 121da177e4SLinus Torvalds * 131da177e4SLinus Torvalds * Copyright (C) 1995-1999 Olaf Kirch <okir@monad.swb.de> 141da177e4SLinus Torvalds * Zerocpy NFS support (C) 2002 Hirokazu Takahashi <taka@valinux.co.jp> 151da177e4SLinus Torvalds */ 161da177e4SLinus Torvalds 171da177e4SLinus Torvalds #include <linux/fs.h> 181da177e4SLinus Torvalds #include <linux/file.h> 19d6b29d7cSJens Axboe #include <linux/splice.h> 2095d871f0SAnna Schumaker #include <linux/falloc.h> 211da177e4SLinus Torvalds #include <linux/fcntl.h> 221da177e4SLinus Torvalds #include <linux/namei.h> 231da177e4SLinus Torvalds #include <linux/delay.h> 240eeca283SRobert Love #include <linux/fsnotify.h> 251da177e4SLinus Torvalds #include <linux/posix_acl_xattr.h> 261da177e4SLinus Torvalds #include <linux/xattr.h> 279a74af21SBoaz Harrosh #include <linux/jhash.h> 289a74af21SBoaz Harrosh #include <linux/ima.h> 295a0e3ad6STejun Heo #include <linux/slab.h> 307c0f6ba6SLinus Torvalds #include <linux/uaccess.h> 31f501912aSBen Myers #include <linux/exportfs.h> 32f501912aSBen Myers #include <linux/writeback.h> 3318032ca0SDavid Quigley #include <linux/security.h> 349a74af21SBoaz Harrosh 359a74af21SBoaz Harrosh #ifdef CONFIG_NFSD_V3 369a74af21SBoaz Harrosh #include "xdr3.h" 379a74af21SBoaz Harrosh #endif /* CONFIG_NFSD_V3 */ 389a74af21SBoaz Harrosh 395be196e5SChristoph Hellwig #ifdef CONFIG_NFSD_V4 40ffa0160aSChristoph Hellwig #include "../internal.h" 412ca72e17SJ. Bruce Fields #include "acl.h" 422ca72e17SJ. Bruce Fields #include "idmap.h" 431da177e4SLinus Torvalds #endif /* CONFIG_NFSD_V4 */ 441da177e4SLinus Torvalds 459a74af21SBoaz Harrosh #include "nfsd.h" 469a74af21SBoaz Harrosh #include "vfs.h" 476e8b50d1SJeff Layton #include "trace.h" 481da177e4SLinus Torvalds 491da177e4SLinus Torvalds #define NFSDDBG_FACILITY NFSDDBG_FILEOP 501da177e4SLinus Torvalds 511da177e4SLinus Torvalds 521da177e4SLinus Torvalds /* 531da177e4SLinus Torvalds * This is a cache of readahead params that help us choose the proper 541da177e4SLinus Torvalds * readahead strategy. Initially, we set all readahead parameters to 0 551da177e4SLinus Torvalds * and let the VFS handle things. 561da177e4SLinus Torvalds * If you increase the number of cached files very much, you'll need to 571da177e4SLinus Torvalds * add a hash table here. 581da177e4SLinus Torvalds */ 591da177e4SLinus Torvalds struct raparms { 601da177e4SLinus Torvalds struct raparms *p_next; 611da177e4SLinus Torvalds unsigned int p_count; 621da177e4SLinus Torvalds ino_t p_ino; 631da177e4SLinus Torvalds dev_t p_dev; 641da177e4SLinus Torvalds int p_set; 651da177e4SLinus Torvalds struct file_ra_state p_ra; 66fce1456aSGreg Banks unsigned int p_hindex; 671da177e4SLinus Torvalds }; 681da177e4SLinus Torvalds 69fce1456aSGreg Banks struct raparm_hbucket { 70fce1456aSGreg Banks struct raparms *pb_head; 71fce1456aSGreg Banks spinlock_t pb_lock; 72fce1456aSGreg Banks } ____cacheline_aligned_in_smp; 73fce1456aSGreg Banks 74fce1456aSGreg Banks #define RAPARM_HASH_BITS 4 75fce1456aSGreg Banks #define RAPARM_HASH_SIZE (1<<RAPARM_HASH_BITS) 76fce1456aSGreg Banks #define RAPARM_HASH_MASK (RAPARM_HASH_SIZE-1) 77fce1456aSGreg Banks static struct raparm_hbucket raparm_hash[RAPARM_HASH_SIZE]; 781da177e4SLinus Torvalds 791da177e4SLinus Torvalds /* 801da177e4SLinus Torvalds * Called from nfsd_lookup and encode_dirent. Check if we have crossed 811da177e4SLinus Torvalds * a mount point. 82e0bb89efSJ.Bruce Fields * Returns -EAGAIN or -ETIMEDOUT leaving *dpp and *expp unchanged, 831da177e4SLinus Torvalds * or nfs_ok having possibly changed *dpp and *expp 841da177e4SLinus Torvalds */ 851da177e4SLinus Torvalds int 861da177e4SLinus Torvalds nfsd_cross_mnt(struct svc_rqst *rqstp, struct dentry **dpp, 871da177e4SLinus Torvalds struct svc_export **expp) 881da177e4SLinus Torvalds { 891da177e4SLinus Torvalds struct svc_export *exp = *expp, *exp2 = NULL; 901da177e4SLinus Torvalds struct dentry *dentry = *dpp; 9191c9fa8fSAl Viro struct path path = {.mnt = mntget(exp->ex_path.mnt), 9291c9fa8fSAl Viro .dentry = dget(dentry)}; 936264d69dSAl Viro int err = 0; 941da177e4SLinus Torvalds 957cc90cc3SAl Viro err = follow_down(&path); 96cc53ce53SDavid Howells if (err < 0) 97cc53ce53SDavid Howells goto out; 9899bbf6ecSNeilBrown if (path.mnt == exp->ex_path.mnt && path.dentry == dentry && 9999bbf6ecSNeilBrown nfsd_mountpoint(dentry, exp) == 2) { 10099bbf6ecSNeilBrown /* This is only a mountpoint in some other namespace */ 10199bbf6ecSNeilBrown path_put(&path); 10299bbf6ecSNeilBrown goto out; 10399bbf6ecSNeilBrown } 1041da177e4SLinus Torvalds 10591c9fa8fSAl Viro exp2 = rqst_exp_get_by_name(rqstp, &path); 1061da177e4SLinus Torvalds if (IS_ERR(exp2)) { 1071da177e4SLinus Torvalds err = PTR_ERR(exp2); 1083b6cee7bSJ. Bruce Fields /* 1093b6cee7bSJ. Bruce Fields * We normally allow NFS clients to continue 1103b6cee7bSJ. Bruce Fields * "underneath" a mountpoint that is not exported. 1113b6cee7bSJ. Bruce Fields * The exception is V4ROOT, where no traversal is ever 1123b6cee7bSJ. Bruce Fields * allowed without an explicit export of the new 1133b6cee7bSJ. Bruce Fields * directory. 1143b6cee7bSJ. Bruce Fields */ 1153b6cee7bSJ. Bruce Fields if (err == -ENOENT && !(exp->ex_flags & NFSEXP_V4ROOT)) 1163b6cee7bSJ. Bruce Fields err = 0; 11791c9fa8fSAl Viro path_put(&path); 1181da177e4SLinus Torvalds goto out; 1191da177e4SLinus Torvalds } 1203c394ddaSSteve Dickson if (nfsd_v4client(rqstp) || 1213c394ddaSSteve Dickson (exp->ex_flags & NFSEXP_CROSSMOUNT) || EX_NOHIDE(exp2)) { 1221da177e4SLinus Torvalds /* successfully crossed mount point */ 1231644ccc8SAl Viro /* 12491c9fa8fSAl Viro * This is subtle: path.dentry is *not* on path.mnt 12591c9fa8fSAl Viro * at this point. The only reason we are safe is that 12691c9fa8fSAl Viro * original mnt is pinned down by exp, so we should 12791c9fa8fSAl Viro * put path *before* putting exp 1281644ccc8SAl Viro */ 12991c9fa8fSAl Viro *dpp = path.dentry; 13091c9fa8fSAl Viro path.dentry = dentry; 1311644ccc8SAl Viro *expp = exp2; 13291c9fa8fSAl Viro exp2 = exp; 1331da177e4SLinus Torvalds } 13491c9fa8fSAl Viro path_put(&path); 13591c9fa8fSAl Viro exp_put(exp2); 1361da177e4SLinus Torvalds out: 1371da177e4SLinus Torvalds return err; 1381da177e4SLinus Torvalds } 1391da177e4SLinus Torvalds 140289ede45SJ. Bruce Fields static void follow_to_parent(struct path *path) 141289ede45SJ. Bruce Fields { 142289ede45SJ. Bruce Fields struct dentry *dp; 143289ede45SJ. Bruce Fields 144289ede45SJ. Bruce Fields while (path->dentry == path->mnt->mnt_root && follow_up(path)) 145289ede45SJ. Bruce Fields ; 146289ede45SJ. Bruce Fields dp = dget_parent(path->dentry); 147289ede45SJ. Bruce Fields dput(path->dentry); 148289ede45SJ. Bruce Fields path->dentry = dp; 149289ede45SJ. Bruce Fields } 150289ede45SJ. Bruce Fields 151289ede45SJ. Bruce Fields static int nfsd_lookup_parent(struct svc_rqst *rqstp, struct dentry *dparent, struct svc_export **exp, struct dentry **dentryp) 152289ede45SJ. Bruce Fields { 153289ede45SJ. Bruce Fields struct svc_export *exp2; 154289ede45SJ. Bruce Fields struct path path = {.mnt = mntget((*exp)->ex_path.mnt), 155289ede45SJ. Bruce Fields .dentry = dget(dparent)}; 156289ede45SJ. Bruce Fields 157289ede45SJ. Bruce Fields follow_to_parent(&path); 158289ede45SJ. Bruce Fields 159289ede45SJ. Bruce Fields exp2 = rqst_exp_parent(rqstp, &path); 160289ede45SJ. Bruce Fields if (PTR_ERR(exp2) == -ENOENT) { 161289ede45SJ. Bruce Fields *dentryp = dget(dparent); 162289ede45SJ. Bruce Fields } else if (IS_ERR(exp2)) { 163289ede45SJ. Bruce Fields path_put(&path); 164289ede45SJ. Bruce Fields return PTR_ERR(exp2); 165289ede45SJ. Bruce Fields } else { 166289ede45SJ. Bruce Fields *dentryp = dget(path.dentry); 167289ede45SJ. Bruce Fields exp_put(*exp); 168289ede45SJ. Bruce Fields *exp = exp2; 169289ede45SJ. Bruce Fields } 170289ede45SJ. Bruce Fields path_put(&path); 171289ede45SJ. Bruce Fields return 0; 172289ede45SJ. Bruce Fields } 173289ede45SJ. Bruce Fields 17482ead7feSJ. Bruce Fields /* 17582ead7feSJ. Bruce Fields * For nfsd purposes, we treat V4ROOT exports as though there was an 17682ead7feSJ. Bruce Fields * export at *every* directory. 17799bbf6ecSNeilBrown * We return: 17899bbf6ecSNeilBrown * '1' if this dentry *must* be an export point, 17999bbf6ecSNeilBrown * '2' if it might be, if there is really a mount here, and 18099bbf6ecSNeilBrown * '0' if there is no chance of an export point here. 18182ead7feSJ. Bruce Fields */ 1823227fa41SJ. Bruce Fields int nfsd_mountpoint(struct dentry *dentry, struct svc_export *exp) 18382ead7feSJ. Bruce Fields { 18499bbf6ecSNeilBrown if (!d_inode(dentry)) 18599bbf6ecSNeilBrown return 0; 18699bbf6ecSNeilBrown if (exp->ex_flags & NFSEXP_V4ROOT) 18782ead7feSJ. Bruce Fields return 1; 18811fcee02STrond Myklebust if (nfsd4_is_junction(dentry)) 18911fcee02STrond Myklebust return 1; 19099bbf6ecSNeilBrown if (d_mountpoint(dentry)) 19199bbf6ecSNeilBrown /* 19299bbf6ecSNeilBrown * Might only be a mountpoint in a different namespace, 19399bbf6ecSNeilBrown * but we need to check. 19499bbf6ecSNeilBrown */ 19599bbf6ecSNeilBrown return 2; 19682ead7feSJ. Bruce Fields return 0; 19782ead7feSJ. Bruce Fields } 19882ead7feSJ. Bruce Fields 1996264d69dSAl Viro __be32 2006c0a654dSJ. Bruce Fields nfsd_lookup_dentry(struct svc_rqst *rqstp, struct svc_fh *fhp, 2015a022fc8SChuck Lever const char *name, unsigned int len, 2026c0a654dSJ. Bruce Fields struct svc_export **exp_ret, struct dentry **dentry_ret) 2031da177e4SLinus Torvalds { 2041da177e4SLinus Torvalds struct svc_export *exp; 2051da177e4SLinus Torvalds struct dentry *dparent; 2061da177e4SLinus Torvalds struct dentry *dentry; 2076264d69dSAl Viro int host_err; 2081da177e4SLinus Torvalds 2091da177e4SLinus Torvalds dprintk("nfsd: nfsd_lookup(fh %s, %.*s)\n", SVCFH_fmt(fhp), len,name); 2101da177e4SLinus Torvalds 2111da177e4SLinus Torvalds dparent = fhp->fh_dentry; 212bf18f163SKinglong Mee exp = exp_get(fhp->fh_export); 2131da177e4SLinus Torvalds 2141da177e4SLinus Torvalds /* Lookup the name, but don't follow links */ 2151da177e4SLinus Torvalds if (isdotent(name, len)) { 2161da177e4SLinus Torvalds if (len==1) 2171da177e4SLinus Torvalds dentry = dget(dparent); 21854775491SJan Blunck else if (dparent != exp->ex_path.dentry) 2191da177e4SLinus Torvalds dentry = dget_parent(dparent); 220fed83811SJ. Bruce Fields else if (!EX_NOHIDE(exp) && !nfsd_v4client(rqstp)) 2211da177e4SLinus Torvalds dentry = dget(dparent); /* .. == . just like at / */ 2221da177e4SLinus Torvalds else { 2231da177e4SLinus Torvalds /* checking mountpoint crossing is very different when stepping up */ 224289ede45SJ. Bruce Fields host_err = nfsd_lookup_parent(rqstp, dparent, &exp, &dentry); 225289ede45SJ. Bruce Fields if (host_err) 2261da177e4SLinus Torvalds goto out_nfserr; 2271da177e4SLinus Torvalds } 2281da177e4SLinus Torvalds } else { 2294335723eSJ. Bruce Fields /* 2304335723eSJ. Bruce Fields * In the nfsd4_open() case, this may be held across 2314335723eSJ. Bruce Fields * subsequent open and delegation acquisition which may 2324335723eSJ. Bruce Fields * need to take the child's i_mutex: 2334335723eSJ. Bruce Fields */ 2344335723eSJ. Bruce Fields fh_lock_nested(fhp, I_MUTEX_PARENT); 2351da177e4SLinus Torvalds dentry = lookup_one_len(name, dparent, len); 2366264d69dSAl Viro host_err = PTR_ERR(dentry); 2371da177e4SLinus Torvalds if (IS_ERR(dentry)) 2381da177e4SLinus Torvalds goto out_nfserr; 23982ead7feSJ. Bruce Fields if (nfsd_mountpoint(dentry, exp)) { 240bbddca8eSNeilBrown /* 241bbddca8eSNeilBrown * We don't need the i_mutex after all. It's 242bbddca8eSNeilBrown * still possible we could open this (regular 243bbddca8eSNeilBrown * files can be mountpoints too), but the 244bbddca8eSNeilBrown * i_mutex is just there to prevent renames of 245bbddca8eSNeilBrown * something that we might be about to delegate, 246bbddca8eSNeilBrown * and a mountpoint won't be renamed: 247bbddca8eSNeilBrown */ 248bbddca8eSNeilBrown fh_unlock(fhp); 2496264d69dSAl Viro if ((host_err = nfsd_cross_mnt(rqstp, &dentry, &exp))) { 2501da177e4SLinus Torvalds dput(dentry); 2511da177e4SLinus Torvalds goto out_nfserr; 2521da177e4SLinus Torvalds } 2531da177e4SLinus Torvalds } 2541da177e4SLinus Torvalds } 2556c0a654dSJ. Bruce Fields *dentry_ret = dentry; 2566c0a654dSJ. Bruce Fields *exp_ret = exp; 2576c0a654dSJ. Bruce Fields return 0; 2586c0a654dSJ. Bruce Fields 2596c0a654dSJ. Bruce Fields out_nfserr: 2606c0a654dSJ. Bruce Fields exp_put(exp); 2616c0a654dSJ. Bruce Fields return nfserrno(host_err); 2626c0a654dSJ. Bruce Fields } 2636c0a654dSJ. Bruce Fields 2646c0a654dSJ. Bruce Fields /* 2656c0a654dSJ. Bruce Fields * Look up one component of a pathname. 2666c0a654dSJ. Bruce Fields * N.B. After this call _both_ fhp and resfh need an fh_put 2676c0a654dSJ. Bruce Fields * 2686c0a654dSJ. Bruce Fields * If the lookup would cross a mountpoint, and the mounted filesystem 2696c0a654dSJ. Bruce Fields * is exported to the client with NFSEXP_NOHIDE, then the lookup is 2706c0a654dSJ. Bruce Fields * accepted as it stands and the mounted directory is 2716c0a654dSJ. Bruce Fields * returned. Otherwise the covered directory is returned. 2726c0a654dSJ. Bruce Fields * NOTE: this mountpoint crossing is not supported properly by all 2736c0a654dSJ. Bruce Fields * clients and is explicitly disallowed for NFSv3 2746c0a654dSJ. Bruce Fields * NeilBrown <neilb@cse.unsw.edu.au> 2756c0a654dSJ. Bruce Fields */ 2766c0a654dSJ. Bruce Fields __be32 2776c0a654dSJ. Bruce Fields nfsd_lookup(struct svc_rqst *rqstp, struct svc_fh *fhp, const char *name, 2785a022fc8SChuck Lever unsigned int len, struct svc_fh *resfh) 2796c0a654dSJ. Bruce Fields { 2806c0a654dSJ. Bruce Fields struct svc_export *exp; 2816c0a654dSJ. Bruce Fields struct dentry *dentry; 2826c0a654dSJ. Bruce Fields __be32 err; 2836c0a654dSJ. Bruce Fields 28429a78a3eSJ. Bruce Fields err = fh_verify(rqstp, fhp, S_IFDIR, NFSD_MAY_EXEC); 28529a78a3eSJ. Bruce Fields if (err) 28629a78a3eSJ. Bruce Fields return err; 2876c0a654dSJ. Bruce Fields err = nfsd_lookup_dentry(rqstp, fhp, name, len, &exp, &dentry); 2886c0a654dSJ. Bruce Fields if (err) 2896c0a654dSJ. Bruce Fields return err; 29032c1eb0cSAndy Adamson err = check_nfsd_access(exp, rqstp); 29132c1eb0cSAndy Adamson if (err) 29232c1eb0cSAndy Adamson goto out; 2931da177e4SLinus Torvalds /* 2941da177e4SLinus Torvalds * Note: we compose the file handle now, but as the 2951da177e4SLinus Torvalds * dentry may be negative, it may need to be updated. 2961da177e4SLinus Torvalds */ 2971da177e4SLinus Torvalds err = fh_compose(resfh, exp, dentry, fhp); 2982b0143b5SDavid Howells if (!err && d_really_is_negative(dentry)) 2991da177e4SLinus Torvalds err = nfserr_noent; 30032c1eb0cSAndy Adamson out: 3011da177e4SLinus Torvalds dput(dentry); 3021da177e4SLinus Torvalds exp_put(exp); 3031da177e4SLinus Torvalds return err; 3041da177e4SLinus Torvalds } 3051da177e4SLinus Torvalds 306f501912aSBen Myers /* 307f501912aSBen Myers * Commit metadata changes to stable storage. 308f501912aSBen Myers */ 309f501912aSBen Myers static int 310f501912aSBen Myers commit_metadata(struct svc_fh *fhp) 311f501912aSBen Myers { 3122b0143b5SDavid Howells struct inode *inode = d_inode(fhp->fh_dentry); 313f501912aSBen Myers const struct export_operations *export_ops = inode->i_sb->s_export_op; 314f501912aSBen Myers 315f501912aSBen Myers if (!EX_ISSYNC(fhp->fh_export)) 316f501912aSBen Myers return 0; 317f501912aSBen Myers 318c3765016SChristoph Hellwig if (export_ops->commit_metadata) 319c3765016SChristoph Hellwig return export_ops->commit_metadata(inode); 320c3765016SChristoph Hellwig return sync_inode_metadata(inode, 1); 321f501912aSBen Myers } 3226c0a654dSJ. Bruce Fields 3231da177e4SLinus Torvalds /* 324818e5a22SChristoph Hellwig * Go over the attributes and take care of the small differences between 325818e5a22SChristoph Hellwig * NFS semantics and what Linux expects. 326818e5a22SChristoph Hellwig */ 327818e5a22SChristoph Hellwig static void 328818e5a22SChristoph Hellwig nfsd_sanitize_attrs(struct inode *inode, struct iattr *iap) 329818e5a22SChristoph Hellwig { 330818e5a22SChristoph Hellwig /* sanitize the mode change */ 331818e5a22SChristoph Hellwig if (iap->ia_valid & ATTR_MODE) { 332818e5a22SChristoph Hellwig iap->ia_mode &= S_IALLUGO; 333818e5a22SChristoph Hellwig iap->ia_mode |= (inode->i_mode & ~S_IALLUGO); 334818e5a22SChristoph Hellwig } 335818e5a22SChristoph Hellwig 336818e5a22SChristoph Hellwig /* Revoke setuid/setgid on chown */ 337818e5a22SChristoph Hellwig if (!S_ISDIR(inode->i_mode) && 338c4fa6d7cSStanislav Kholmanskikh ((iap->ia_valid & ATTR_UID) || (iap->ia_valid & ATTR_GID))) { 339818e5a22SChristoph Hellwig iap->ia_valid |= ATTR_KILL_PRIV; 340818e5a22SChristoph Hellwig if (iap->ia_valid & ATTR_MODE) { 341818e5a22SChristoph Hellwig /* we're setting mode too, just clear the s*id bits */ 342818e5a22SChristoph Hellwig iap->ia_mode &= ~S_ISUID; 343818e5a22SChristoph Hellwig if (iap->ia_mode & S_IXGRP) 344818e5a22SChristoph Hellwig iap->ia_mode &= ~S_ISGID; 345818e5a22SChristoph Hellwig } else { 346818e5a22SChristoph Hellwig /* set ATTR_KILL_* bits and let VFS handle it */ 347818e5a22SChristoph Hellwig iap->ia_valid |= (ATTR_KILL_SUID | ATTR_KILL_SGID); 348818e5a22SChristoph Hellwig } 349818e5a22SChristoph Hellwig } 350818e5a22SChristoph Hellwig } 351818e5a22SChristoph Hellwig 3520839ffb8SJ. Bruce Fields static __be32 3530839ffb8SJ. Bruce Fields nfsd_get_write_access(struct svc_rqst *rqstp, struct svc_fh *fhp, 3540839ffb8SJ. Bruce Fields struct iattr *iap) 3550839ffb8SJ. Bruce Fields { 3560839ffb8SJ. Bruce Fields struct inode *inode = d_inode(fhp->fh_dentry); 3570839ffb8SJ. Bruce Fields int host_err; 3580839ffb8SJ. Bruce Fields 3590839ffb8SJ. Bruce Fields if (iap->ia_size < inode->i_size) { 3600839ffb8SJ. Bruce Fields __be32 err; 3610839ffb8SJ. Bruce Fields 3620839ffb8SJ. Bruce Fields err = nfsd_permission(rqstp, fhp->fh_export, fhp->fh_dentry, 3630839ffb8SJ. Bruce Fields NFSD_MAY_TRUNC | NFSD_MAY_OWNER_OVERRIDE); 3640839ffb8SJ. Bruce Fields if (err) 3650839ffb8SJ. Bruce Fields return err; 3660839ffb8SJ. Bruce Fields } 3670839ffb8SJ. Bruce Fields 3680839ffb8SJ. Bruce Fields host_err = get_write_access(inode); 3690839ffb8SJ. Bruce Fields if (host_err) 3700839ffb8SJ. Bruce Fields goto out_nfserrno; 3710839ffb8SJ. Bruce Fields 3720839ffb8SJ. Bruce Fields host_err = locks_verify_truncate(inode, NULL, iap->ia_size); 3730839ffb8SJ. Bruce Fields if (host_err) 3740839ffb8SJ. Bruce Fields goto out_put_write_access; 3750839ffb8SJ. Bruce Fields return 0; 3760839ffb8SJ. Bruce Fields 3770839ffb8SJ. Bruce Fields out_put_write_access: 3780839ffb8SJ. Bruce Fields put_write_access(inode); 3790839ffb8SJ. Bruce Fields out_nfserrno: 3800839ffb8SJ. Bruce Fields return nfserrno(host_err); 3810839ffb8SJ. Bruce Fields } 3820839ffb8SJ. Bruce Fields 383818e5a22SChristoph Hellwig /* 384818e5a22SChristoph Hellwig * Set various file attributes. After this call fhp needs an fh_put. 3851da177e4SLinus Torvalds */ 3866264d69dSAl Viro __be32 3871da177e4SLinus Torvalds nfsd_setattr(struct svc_rqst *rqstp, struct svc_fh *fhp, struct iattr *iap, 3881da177e4SLinus Torvalds int check_guard, time_t guardtime) 3891da177e4SLinus Torvalds { 3901da177e4SLinus Torvalds struct dentry *dentry; 3911da177e4SLinus Torvalds struct inode *inode; 3928837abcaSMiklos Szeredi int accmode = NFSD_MAY_SATTR; 393175a4eb7SAl Viro umode_t ftype = 0; 3946264d69dSAl Viro __be32 err; 3956264d69dSAl Viro int host_err; 3969f67f189SJ. Bruce Fields bool get_write_count; 397758e99feSChristoph Hellwig bool size_change = (iap->ia_valid & ATTR_SIZE); 3981da177e4SLinus Torvalds 3991da177e4SLinus Torvalds if (iap->ia_valid & (ATTR_ATIME | ATTR_MTIME | ATTR_SIZE)) 4008837abcaSMiklos Szeredi accmode |= NFSD_MAY_WRITE|NFSD_MAY_OWNER_OVERRIDE; 4011da177e4SLinus Torvalds if (iap->ia_valid & ATTR_SIZE) 4021da177e4SLinus Torvalds ftype = S_IFREG; 4031da177e4SLinus Torvalds 4049f67f189SJ. Bruce Fields /* Callers that do fh_verify should do the fh_want_write: */ 4059f67f189SJ. Bruce Fields get_write_count = !fhp->fh_dentry; 4069f67f189SJ. Bruce Fields 4071da177e4SLinus Torvalds /* Get inode */ 4081da177e4SLinus Torvalds err = fh_verify(rqstp, fhp, ftype, accmode); 40915b7a1b8SNeilBrown if (err) 410758e99feSChristoph Hellwig return err; 4119f67f189SJ. Bruce Fields if (get_write_count) { 4129f67f189SJ. Bruce Fields host_err = fh_want_write(fhp); 4139f67f189SJ. Bruce Fields if (host_err) 414758e99feSChristoph Hellwig goto out; 4159f67f189SJ. Bruce Fields } 4161da177e4SLinus Torvalds 4171da177e4SLinus Torvalds dentry = fhp->fh_dentry; 4182b0143b5SDavid Howells inode = d_inode(dentry); 4191da177e4SLinus Torvalds 42015b7a1b8SNeilBrown /* Ignore any mode updates on symlinks */ 42115b7a1b8SNeilBrown if (S_ISLNK(inode->i_mode)) 42215b7a1b8SNeilBrown iap->ia_valid &= ~ATTR_MODE; 42315b7a1b8SNeilBrown 42415b7a1b8SNeilBrown if (!iap->ia_valid) 425758e99feSChristoph Hellwig return 0; 42615b7a1b8SNeilBrown 427818e5a22SChristoph Hellwig nfsd_sanitize_attrs(inode, iap); 4281da177e4SLinus Torvalds 429758e99feSChristoph Hellwig if (check_guard && guardtime != inode->i_ctime.tv_sec) 430758e99feSChristoph Hellwig return nfserr_notsync; 431758e99feSChristoph Hellwig 432f0c63124SChristoph Hellwig /* 43341f53350SChristoph Hellwig * The size case is special, it changes the file in addition to the 434783112f7SChristoph Hellwig * attributes, and file systems don't expect it to be mixed with 435783112f7SChristoph Hellwig * "random" attribute changes. We thus split out the size change 436783112f7SChristoph Hellwig * into a separate call to ->setattr, and do the rest as a separate 437783112f7SChristoph Hellwig * setattr call. 438f0c63124SChristoph Hellwig */ 439758e99feSChristoph Hellwig if (size_change) { 4400839ffb8SJ. Bruce Fields err = nfsd_get_write_access(rqstp, fhp, iap); 4410839ffb8SJ. Bruce Fields if (err) 442758e99feSChristoph Hellwig return err; 443783112f7SChristoph Hellwig } 44441f53350SChristoph Hellwig 445783112f7SChristoph Hellwig fh_lock(fhp); 446783112f7SChristoph Hellwig if (size_change) { 44741f53350SChristoph Hellwig /* 4480839ffb8SJ. Bruce Fields * RFC5661, Section 18.30.4: 4490839ffb8SJ. Bruce Fields * Changing the size of a file with SETATTR indirectly 4500839ffb8SJ. Bruce Fields * changes the time_modify and change attributes. 4510839ffb8SJ. Bruce Fields * 4520839ffb8SJ. Bruce Fields * (and similar for the older RFCs) 45341f53350SChristoph Hellwig */ 454783112f7SChristoph Hellwig struct iattr size_attr = { 455783112f7SChristoph Hellwig .ia_valid = ATTR_SIZE | ATTR_CTIME | ATTR_MTIME, 456783112f7SChristoph Hellwig .ia_size = iap->ia_size, 457783112f7SChristoph Hellwig }; 458783112f7SChristoph Hellwig 459783112f7SChristoph Hellwig host_err = notify_change(dentry, &size_attr, NULL); 460783112f7SChristoph Hellwig if (host_err) 461783112f7SChristoph Hellwig goto out_unlock; 462783112f7SChristoph Hellwig iap->ia_valid &= ~ATTR_SIZE; 463783112f7SChristoph Hellwig 464783112f7SChristoph Hellwig /* 465783112f7SChristoph Hellwig * Avoid the additional setattr call below if the only other 466783112f7SChristoph Hellwig * attribute that the client sends is the mtime, as we update 467783112f7SChristoph Hellwig * it as part of the size change above. 468783112f7SChristoph Hellwig */ 469783112f7SChristoph Hellwig if ((iap->ia_valid & ~ATTR_MTIME) == 0) 470783112f7SChristoph Hellwig goto out_unlock; 4711da177e4SLinus Torvalds } 4721da177e4SLinus Torvalds 4731da177e4SLinus Torvalds iap->ia_valid |= ATTR_CTIME; 47427ac0ffeSJ. Bruce Fields host_err = notify_change(dentry, iap, NULL); 475987da479SChristoph Hellwig 476783112f7SChristoph Hellwig out_unlock: 477783112f7SChristoph Hellwig fh_unlock(fhp); 4780839ffb8SJ. Bruce Fields if (size_change) 4790839ffb8SJ. Bruce Fields put_write_access(inode); 4800839ffb8SJ. Bruce Fields out: 481758e99feSChristoph Hellwig if (!host_err) 482758e99feSChristoph Hellwig host_err = commit_metadata(fhp); 483758e99feSChristoph Hellwig return nfserrno(host_err); 4841da177e4SLinus Torvalds } 4851da177e4SLinus Torvalds 4865be196e5SChristoph Hellwig #if defined(CONFIG_NFSD_V4) 4879b4146e8SChuck Lever /* 4889b4146e8SChuck Lever * NFS junction information is stored in an extended attribute. 4899b4146e8SChuck Lever */ 4909b4146e8SChuck Lever #define NFSD_JUNCTION_XATTR_NAME XATTR_TRUSTED_PREFIX "junction.nfs" 4919b4146e8SChuck Lever 4929b4146e8SChuck Lever /** 4939b4146e8SChuck Lever * nfsd4_is_junction - Test if an object could be an NFS junction 4949b4146e8SChuck Lever * 4959b4146e8SChuck Lever * @dentry: object to test 4969b4146e8SChuck Lever * 4979b4146e8SChuck Lever * Returns 1 if "dentry" appears to contain NFS junction information. 4989b4146e8SChuck Lever * Otherwise 0 is returned. 4999b4146e8SChuck Lever */ 50011fcee02STrond Myklebust int nfsd4_is_junction(struct dentry *dentry) 50111fcee02STrond Myklebust { 5022b0143b5SDavid Howells struct inode *inode = d_inode(dentry); 50311fcee02STrond Myklebust 50411fcee02STrond Myklebust if (inode == NULL) 50511fcee02STrond Myklebust return 0; 50611fcee02STrond Myklebust if (inode->i_mode & S_IXUGO) 50711fcee02STrond Myklebust return 0; 50811fcee02STrond Myklebust if (!(inode->i_mode & S_ISVTX)) 50911fcee02STrond Myklebust return 0; 5109b4146e8SChuck Lever if (vfs_getxattr(dentry, NFSD_JUNCTION_XATTR_NAME, NULL, 0) <= 0) 51111fcee02STrond Myklebust return 0; 51211fcee02STrond Myklebust return 1; 51311fcee02STrond Myklebust } 51418032ca0SDavid Quigley #ifdef CONFIG_NFSD_V4_SECURITY_LABEL 51518032ca0SDavid Quigley __be32 nfsd4_set_nfs4_label(struct svc_rqst *rqstp, struct svc_fh *fhp, 51618032ca0SDavid Quigley struct xdr_netobj *label) 51718032ca0SDavid Quigley { 51818032ca0SDavid Quigley __be32 error; 51918032ca0SDavid Quigley int host_error; 52018032ca0SDavid Quigley struct dentry *dentry; 52118032ca0SDavid Quigley 52218032ca0SDavid Quigley error = fh_verify(rqstp, fhp, 0 /* S_IFREG */, NFSD_MAY_SATTR); 52318032ca0SDavid Quigley if (error) 52418032ca0SDavid Quigley return error; 52518032ca0SDavid Quigley 52618032ca0SDavid Quigley dentry = fhp->fh_dentry; 52718032ca0SDavid Quigley 5285955102cSAl Viro inode_lock(d_inode(dentry)); 52918032ca0SDavid Quigley host_error = security_inode_setsecctx(dentry, label->data, label->len); 5305955102cSAl Viro inode_unlock(d_inode(dentry)); 53118032ca0SDavid Quigley return nfserrno(host_error); 53218032ca0SDavid Quigley } 53318032ca0SDavid Quigley #else 53418032ca0SDavid Quigley __be32 nfsd4_set_nfs4_label(struct svc_rqst *rqstp, struct svc_fh *fhp, 53518032ca0SDavid Quigley struct xdr_netobj *label) 53618032ca0SDavid Quigley { 53718032ca0SDavid Quigley return nfserr_notsupp; 53818032ca0SDavid Quigley } 53918032ca0SDavid Quigley #endif 54018032ca0SDavid Quigley 541ffa0160aSChristoph Hellwig __be32 nfsd4_clone_file_range(struct file *src, u64 src_pos, struct file *dst, 542ffa0160aSChristoph Hellwig u64 dst_pos, u64 count) 543ffa0160aSChristoph Hellwig { 544*42ec3d4cSDarrick J. Wong loff_t cloned; 545*42ec3d4cSDarrick J. Wong 546*42ec3d4cSDarrick J. Wong cloned = vfs_clone_file_range(src, src_pos, dst, dst_pos, count); 547*42ec3d4cSDarrick J. Wong if (count && cloned != count) 548*42ec3d4cSDarrick J. Wong cloned = -EINVAL; 549*42ec3d4cSDarrick J. Wong return nfserrno(cloned < 0 ? cloned : 0); 550ffa0160aSChristoph Hellwig } 551ffa0160aSChristoph Hellwig 55229ae7f9dSAnna Schumaker ssize_t nfsd_copy_file_range(struct file *src, u64 src_pos, struct file *dst, 55329ae7f9dSAnna Schumaker u64 dst_pos, u64 count) 55429ae7f9dSAnna Schumaker { 55529ae7f9dSAnna Schumaker 55629ae7f9dSAnna Schumaker /* 55729ae7f9dSAnna Schumaker * Limit copy to 4MB to prevent indefinitely blocking an nfsd 55829ae7f9dSAnna Schumaker * thread and client rpc slot. The choice of 4MB is somewhat 55929ae7f9dSAnna Schumaker * arbitrary. We might instead base this on r/wsize, or make it 56029ae7f9dSAnna Schumaker * tunable, or use a time instead of a byte limit, or implement 56129ae7f9dSAnna Schumaker * asynchronous copy. In theory a client could also recognize a 56229ae7f9dSAnna Schumaker * limit like this and pipeline multiple COPY requests. 56329ae7f9dSAnna Schumaker */ 56429ae7f9dSAnna Schumaker count = min_t(u64, count, 1 << 22); 56529ae7f9dSAnna Schumaker return vfs_copy_file_range(src, src_pos, dst, dst_pos, count, 0); 56629ae7f9dSAnna Schumaker } 56729ae7f9dSAnna Schumaker 56895d871f0SAnna Schumaker __be32 nfsd4_vfs_fallocate(struct svc_rqst *rqstp, struct svc_fh *fhp, 56995d871f0SAnna Schumaker struct file *file, loff_t offset, loff_t len, 57095d871f0SAnna Schumaker int flags) 57195d871f0SAnna Schumaker { 57295d871f0SAnna Schumaker int error; 57395d871f0SAnna Schumaker 57495d871f0SAnna Schumaker if (!S_ISREG(file_inode(file)->i_mode)) 57595d871f0SAnna Schumaker return nfserr_inval; 57695d871f0SAnna Schumaker 57795d871f0SAnna Schumaker error = vfs_fallocate(file, flags, offset, len); 57895d871f0SAnna Schumaker if (!error) 57995d871f0SAnna Schumaker error = commit_metadata(fhp); 58095d871f0SAnna Schumaker 58195d871f0SAnna Schumaker return nfserrno(error); 58295d871f0SAnna Schumaker } 5836a85d6c7SJ. Bruce Fields #endif /* defined(CONFIG_NFSD_V4) */ 5841da177e4SLinus Torvalds 5851da177e4SLinus Torvalds #ifdef CONFIG_NFSD_V3 5861da177e4SLinus Torvalds /* 5871da177e4SLinus Torvalds * Check server access rights to a file system object 5881da177e4SLinus Torvalds */ 5891da177e4SLinus Torvalds struct accessmap { 5901da177e4SLinus Torvalds u32 access; 5911da177e4SLinus Torvalds int how; 5921da177e4SLinus Torvalds }; 5931da177e4SLinus Torvalds static struct accessmap nfs3_regaccess[] = { 5948837abcaSMiklos Szeredi { NFS3_ACCESS_READ, NFSD_MAY_READ }, 5958837abcaSMiklos Szeredi { NFS3_ACCESS_EXECUTE, NFSD_MAY_EXEC }, 5968837abcaSMiklos Szeredi { NFS3_ACCESS_MODIFY, NFSD_MAY_WRITE|NFSD_MAY_TRUNC }, 5978837abcaSMiklos Szeredi { NFS3_ACCESS_EXTEND, NFSD_MAY_WRITE }, 5981da177e4SLinus Torvalds 5991da177e4SLinus Torvalds { 0, 0 } 6001da177e4SLinus Torvalds }; 6011da177e4SLinus Torvalds 6021da177e4SLinus Torvalds static struct accessmap nfs3_diraccess[] = { 6038837abcaSMiklos Szeredi { NFS3_ACCESS_READ, NFSD_MAY_READ }, 6048837abcaSMiklos Szeredi { NFS3_ACCESS_LOOKUP, NFSD_MAY_EXEC }, 6058837abcaSMiklos Szeredi { NFS3_ACCESS_MODIFY, NFSD_MAY_EXEC|NFSD_MAY_WRITE|NFSD_MAY_TRUNC}, 6068837abcaSMiklos Szeredi { NFS3_ACCESS_EXTEND, NFSD_MAY_EXEC|NFSD_MAY_WRITE }, 6078837abcaSMiklos Szeredi { NFS3_ACCESS_DELETE, NFSD_MAY_REMOVE }, 6081da177e4SLinus Torvalds 6091da177e4SLinus Torvalds { 0, 0 } 6101da177e4SLinus Torvalds }; 6111da177e4SLinus Torvalds 6121da177e4SLinus Torvalds static struct accessmap nfs3_anyaccess[] = { 6131da177e4SLinus Torvalds /* Some clients - Solaris 2.6 at least, make an access call 6141da177e4SLinus Torvalds * to the server to check for access for things like /dev/null 6151da177e4SLinus Torvalds * (which really, the server doesn't care about). So 6161da177e4SLinus Torvalds * We provide simple access checking for them, looking 6171da177e4SLinus Torvalds * mainly at mode bits, and we make sure to ignore read-only 6181da177e4SLinus Torvalds * filesystem checks 6191da177e4SLinus Torvalds */ 6208837abcaSMiklos Szeredi { NFS3_ACCESS_READ, NFSD_MAY_READ }, 6218837abcaSMiklos Szeredi { NFS3_ACCESS_EXECUTE, NFSD_MAY_EXEC }, 6228837abcaSMiklos Szeredi { NFS3_ACCESS_MODIFY, NFSD_MAY_WRITE|NFSD_MAY_LOCAL_ACCESS }, 6238837abcaSMiklos Szeredi { NFS3_ACCESS_EXTEND, NFSD_MAY_WRITE|NFSD_MAY_LOCAL_ACCESS }, 6241da177e4SLinus Torvalds 6251da177e4SLinus Torvalds { 0, 0 } 6261da177e4SLinus Torvalds }; 6271da177e4SLinus Torvalds 6286264d69dSAl Viro __be32 6291da177e4SLinus Torvalds nfsd_access(struct svc_rqst *rqstp, struct svc_fh *fhp, u32 *access, u32 *supported) 6301da177e4SLinus Torvalds { 6311da177e4SLinus Torvalds struct accessmap *map; 6321da177e4SLinus Torvalds struct svc_export *export; 6331da177e4SLinus Torvalds struct dentry *dentry; 6341da177e4SLinus Torvalds u32 query, result = 0, sresult = 0; 6356264d69dSAl Viro __be32 error; 6361da177e4SLinus Torvalds 6378837abcaSMiklos Szeredi error = fh_verify(rqstp, fhp, 0, NFSD_MAY_NOP); 6381da177e4SLinus Torvalds if (error) 6391da177e4SLinus Torvalds goto out; 6401da177e4SLinus Torvalds 6411da177e4SLinus Torvalds export = fhp->fh_export; 6421da177e4SLinus Torvalds dentry = fhp->fh_dentry; 6431da177e4SLinus Torvalds 644e36cb0b8SDavid Howells if (d_is_reg(dentry)) 6451da177e4SLinus Torvalds map = nfs3_regaccess; 646e36cb0b8SDavid Howells else if (d_is_dir(dentry)) 6471da177e4SLinus Torvalds map = nfs3_diraccess; 6481da177e4SLinus Torvalds else 6491da177e4SLinus Torvalds map = nfs3_anyaccess; 6501da177e4SLinus Torvalds 6511da177e4SLinus Torvalds 6521da177e4SLinus Torvalds query = *access; 6531da177e4SLinus Torvalds for (; map->access; map++) { 6541da177e4SLinus Torvalds if (map->access & query) { 6556264d69dSAl Viro __be32 err2; 6561da177e4SLinus Torvalds 6571da177e4SLinus Torvalds sresult |= map->access; 6581da177e4SLinus Torvalds 6590ec757dfSJ. Bruce Fields err2 = nfsd_permission(rqstp, export, dentry, map->how); 6601da177e4SLinus Torvalds switch (err2) { 6611da177e4SLinus Torvalds case nfs_ok: 6621da177e4SLinus Torvalds result |= map->access; 6631da177e4SLinus Torvalds break; 6641da177e4SLinus Torvalds 6651da177e4SLinus Torvalds /* the following error codes just mean the access was not allowed, 6661da177e4SLinus Torvalds * rather than an error occurred */ 6671da177e4SLinus Torvalds case nfserr_rofs: 6681da177e4SLinus Torvalds case nfserr_acces: 6691da177e4SLinus Torvalds case nfserr_perm: 6701da177e4SLinus Torvalds /* simply don't "or" in the access bit. */ 6711da177e4SLinus Torvalds break; 6721da177e4SLinus Torvalds default: 6731da177e4SLinus Torvalds error = err2; 6741da177e4SLinus Torvalds goto out; 6751da177e4SLinus Torvalds } 6761da177e4SLinus Torvalds } 6771da177e4SLinus Torvalds } 6781da177e4SLinus Torvalds *access = result; 6791da177e4SLinus Torvalds if (supported) 6801da177e4SLinus Torvalds *supported = sresult; 6811da177e4SLinus Torvalds 6821da177e4SLinus Torvalds out: 6831da177e4SLinus Torvalds return error; 6841da177e4SLinus Torvalds } 6851da177e4SLinus Torvalds #endif /* CONFIG_NFSD_V3 */ 6861da177e4SLinus Torvalds 687105f4622SJ. Bruce Fields static int nfsd_open_break_lease(struct inode *inode, int access) 688105f4622SJ. Bruce Fields { 689105f4622SJ. Bruce Fields unsigned int mode; 6901da177e4SLinus Torvalds 691105f4622SJ. Bruce Fields if (access & NFSD_MAY_NOT_BREAK_LEASE) 692105f4622SJ. Bruce Fields return 0; 693105f4622SJ. Bruce Fields mode = (access & NFSD_MAY_WRITE) ? O_WRONLY : O_RDONLY; 694105f4622SJ. Bruce Fields return break_lease(inode, mode | O_NONBLOCK); 695105f4622SJ. Bruce Fields } 6961da177e4SLinus Torvalds 6971da177e4SLinus Torvalds /* 6981da177e4SLinus Torvalds * Open an existing file or directory. 699999448a8SBernd Schubert * The may_flags argument indicates the type of open (read/write/lock) 700999448a8SBernd Schubert * and additional flags. 7011da177e4SLinus Torvalds * N.B. After this call fhp needs an fh_put 7021da177e4SLinus Torvalds */ 7036264d69dSAl Viro __be32 704175a4eb7SAl Viro nfsd_open(struct svc_rqst *rqstp, struct svc_fh *fhp, umode_t type, 705999448a8SBernd Schubert int may_flags, struct file **filp) 7061da177e4SLinus Torvalds { 707765927b2SAl Viro struct path path; 7081da177e4SLinus Torvalds struct inode *inode; 7098519f994SKinglong Mee struct file *file; 7106264d69dSAl Viro int flags = O_RDONLY|O_LARGEFILE; 7116264d69dSAl Viro __be32 err; 71291885258SJeff Layton int host_err = 0; 7131da177e4SLinus Torvalds 714e0e81739SDavid Howells validate_process_creds(); 715e0e81739SDavid Howells 7161da177e4SLinus Torvalds /* 7171da177e4SLinus Torvalds * If we get here, then the client has already done an "open", 7181da177e4SLinus Torvalds * and (hopefully) checked permission - so allow OWNER_OVERRIDE 7191da177e4SLinus Torvalds * in case a chmod has now revoked permission. 720d91d0b56SJ. Bruce Fields * 721d91d0b56SJ. Bruce Fields * Arguably we should also allow the owner override for 722d91d0b56SJ. Bruce Fields * directories, but we never have and it doesn't seem to have 723d91d0b56SJ. Bruce Fields * caused anyone a problem. If we were to change this, note 724d91d0b56SJ. Bruce Fields * also that our filldir callbacks would need a variant of 725d91d0b56SJ. Bruce Fields * lookup_one_len that doesn't check permissions. 7261da177e4SLinus Torvalds */ 727d91d0b56SJ. Bruce Fields if (type == S_IFREG) 728d91d0b56SJ. Bruce Fields may_flags |= NFSD_MAY_OWNER_OVERRIDE; 729d91d0b56SJ. Bruce Fields err = fh_verify(rqstp, fhp, type, may_flags); 7301da177e4SLinus Torvalds if (err) 7311da177e4SLinus Torvalds goto out; 7321da177e4SLinus Torvalds 733765927b2SAl Viro path.mnt = fhp->fh_export->ex_path.mnt; 734765927b2SAl Viro path.dentry = fhp->fh_dentry; 7352b0143b5SDavid Howells inode = d_inode(path.dentry); 7361da177e4SLinus Torvalds 7371da177e4SLinus Torvalds /* Disallow write access to files with the append-only bit set 7381da177e4SLinus Torvalds * or any access when mandatory locking enabled 7391da177e4SLinus Torvalds */ 7401da177e4SLinus Torvalds err = nfserr_perm; 741999448a8SBernd Schubert if (IS_APPEND(inode) && (may_flags & NFSD_MAY_WRITE)) 7421da177e4SLinus Torvalds goto out; 7435e7fc436SJ. Bruce Fields /* 7445e7fc436SJ. Bruce Fields * We must ignore files (but only files) which might have mandatory 7455e7fc436SJ. Bruce Fields * locks on them because there is no way to know if the accesser has 7465e7fc436SJ. Bruce Fields * the lock. 7475e7fc436SJ. Bruce Fields */ 7485e7fc436SJ. Bruce Fields if (S_ISREG((inode)->i_mode) && mandatory_lock(inode)) 7491da177e4SLinus Torvalds goto out; 7501da177e4SLinus Torvalds 7511da177e4SLinus Torvalds if (!inode->i_fop) 7521da177e4SLinus Torvalds goto out; 7531da177e4SLinus Torvalds 754999448a8SBernd Schubert host_err = nfsd_open_break_lease(inode, may_flags); 7556264d69dSAl Viro if (host_err) /* NOMEM or WOULDBLOCK */ 7561da177e4SLinus Torvalds goto out_nfserr; 7571da177e4SLinus Torvalds 758999448a8SBernd Schubert if (may_flags & NFSD_MAY_WRITE) { 759999448a8SBernd Schubert if (may_flags & NFSD_MAY_READ) 7609ecb6a08SJ. Bruce Fields flags = O_RDWR|O_LARGEFILE; 7619ecb6a08SJ. Bruce Fields else 7621da177e4SLinus Torvalds flags = O_WRONLY|O_LARGEFILE; 7631da177e4SLinus Torvalds } 764999448a8SBernd Schubert 7658519f994SKinglong Mee file = dentry_open(&path, flags, current_cred()); 7668519f994SKinglong Mee if (IS_ERR(file)) { 7678519f994SKinglong Mee host_err = PTR_ERR(file); 7688519f994SKinglong Mee goto out_nfserr; 76906effdbbSBernd Schubert } 77006effdbbSBernd Schubert 7716035a27bSAl Viro host_err = ima_file_check(file, may_flags); 7728519f994SKinglong Mee if (host_err) { 773fd891454SChristoph Hellwig fput(file); 7748519f994SKinglong Mee goto out_nfserr; 7758519f994SKinglong Mee } 7768519f994SKinglong Mee 7778519f994SKinglong Mee if (may_flags & NFSD_MAY_64BIT_COOKIE) 7788519f994SKinglong Mee file->f_mode |= FMODE_64BITHASH; 7798519f994SKinglong Mee else 7808519f994SKinglong Mee file->f_mode |= FMODE_32BITHASH; 7818519f994SKinglong Mee 7828519f994SKinglong Mee *filp = file; 7831da177e4SLinus Torvalds out_nfserr: 7846264d69dSAl Viro err = nfserrno(host_err); 7851da177e4SLinus Torvalds out: 786e0e81739SDavid Howells validate_process_creds(); 7871da177e4SLinus Torvalds return err; 7881da177e4SLinus Torvalds } 7891da177e4SLinus Torvalds 790e749a462SChristoph Hellwig struct raparms * 791e749a462SChristoph Hellwig nfsd_init_raparms(struct file *file) 7921da177e4SLinus Torvalds { 793e749a462SChristoph Hellwig struct inode *inode = file_inode(file); 794e749a462SChristoph Hellwig dev_t dev = inode->i_sb->s_dev; 795e749a462SChristoph Hellwig ino_t ino = inode->i_ino; 7961da177e4SLinus Torvalds struct raparms *ra, **rap, **frap = NULL; 7971da177e4SLinus Torvalds int depth = 0; 798fce1456aSGreg Banks unsigned int hash; 799fce1456aSGreg Banks struct raparm_hbucket *rab; 8001da177e4SLinus Torvalds 801fce1456aSGreg Banks hash = jhash_2words(dev, ino, 0xfeedbeef) & RAPARM_HASH_MASK; 802fce1456aSGreg Banks rab = &raparm_hash[hash]; 803fce1456aSGreg Banks 804fce1456aSGreg Banks spin_lock(&rab->pb_lock); 805fce1456aSGreg Banks for (rap = &rab->pb_head; (ra = *rap); rap = &ra->p_next) { 8061da177e4SLinus Torvalds if (ra->p_ino == ino && ra->p_dev == dev) 8071da177e4SLinus Torvalds goto found; 8081da177e4SLinus Torvalds depth++; 8091da177e4SLinus Torvalds if (ra->p_count == 0) 8101da177e4SLinus Torvalds frap = rap; 8111da177e4SLinus Torvalds } 8123aa6e0aaSKonstantin Khorenko depth = nfsdstats.ra_size; 8131da177e4SLinus Torvalds if (!frap) { 814fce1456aSGreg Banks spin_unlock(&rab->pb_lock); 8151da177e4SLinus Torvalds return NULL; 8161da177e4SLinus Torvalds } 8171da177e4SLinus Torvalds rap = frap; 8181da177e4SLinus Torvalds ra = *frap; 8191da177e4SLinus Torvalds ra->p_dev = dev; 8201da177e4SLinus Torvalds ra->p_ino = ino; 8211da177e4SLinus Torvalds ra->p_set = 0; 822fce1456aSGreg Banks ra->p_hindex = hash; 8231da177e4SLinus Torvalds found: 824fce1456aSGreg Banks if (rap != &rab->pb_head) { 8251da177e4SLinus Torvalds *rap = ra->p_next; 826fce1456aSGreg Banks ra->p_next = rab->pb_head; 827fce1456aSGreg Banks rab->pb_head = ra; 8281da177e4SLinus Torvalds } 8291da177e4SLinus Torvalds ra->p_count++; 8301da177e4SLinus Torvalds nfsdstats.ra_depth[depth*10/nfsdstats.ra_size]++; 831fce1456aSGreg Banks spin_unlock(&rab->pb_lock); 832e749a462SChristoph Hellwig 833e749a462SChristoph Hellwig if (ra->p_set) 834e749a462SChristoph Hellwig file->f_ra = ra->p_ra; 8351da177e4SLinus Torvalds return ra; 8361da177e4SLinus Torvalds } 8371da177e4SLinus Torvalds 838e749a462SChristoph Hellwig void nfsd_put_raparams(struct file *file, struct raparms *ra) 839e749a462SChristoph Hellwig { 840e749a462SChristoph Hellwig struct raparm_hbucket *rab = &raparm_hash[ra->p_hindex]; 841e749a462SChristoph Hellwig 842e749a462SChristoph Hellwig spin_lock(&rab->pb_lock); 843e749a462SChristoph Hellwig ra->p_ra = file->f_ra; 844e749a462SChristoph Hellwig ra->p_set = 1; 845e749a462SChristoph Hellwig ra->p_count--; 846e749a462SChristoph Hellwig spin_unlock(&rab->pb_lock); 847e749a462SChristoph Hellwig } 848e749a462SChristoph Hellwig 8491da177e4SLinus Torvalds /* 850cf8208d0SJens Axboe * Grab and keep cached pages associated with a file in the svc_rqst 851cf8208d0SJens Axboe * so that they can be passed to the network sendmsg/sendpage routines 852cf8208d0SJens Axboe * directly. They will be released after the sending has completed. 8531da177e4SLinus Torvalds */ 8541da177e4SLinus Torvalds static int 855cf8208d0SJens Axboe nfsd_splice_actor(struct pipe_inode_info *pipe, struct pipe_buffer *buf, 856cf8208d0SJens Axboe struct splice_desc *sd) 8571da177e4SLinus Torvalds { 858cf8208d0SJens Axboe struct svc_rqst *rqstp = sd->u.data; 859afc59400SJ. Bruce Fields struct page **pp = rqstp->rq_next_page; 860cf8208d0SJens Axboe struct page *page = buf->page; 861cf8208d0SJens Axboe size_t size; 862cf8208d0SJens Axboe 863cf8208d0SJens Axboe size = sd->len; 8641da177e4SLinus Torvalds 8651da177e4SLinus Torvalds if (rqstp->rq_res.page_len == 0) { 8661da177e4SLinus Torvalds get_page(page); 867afc59400SJ. Bruce Fields put_page(*rqstp->rq_next_page); 868afc59400SJ. Bruce Fields *(rqstp->rq_next_page++) = page; 869cf8208d0SJens Axboe rqstp->rq_res.page_base = buf->offset; 8701da177e4SLinus Torvalds rqstp->rq_res.page_len = size; 87144524359SNeilBrown } else if (page != pp[-1]) { 8721da177e4SLinus Torvalds get_page(page); 873afc59400SJ. Bruce Fields if (*rqstp->rq_next_page) 874afc59400SJ. Bruce Fields put_page(*rqstp->rq_next_page); 875afc59400SJ. Bruce Fields *(rqstp->rq_next_page++) = page; 8761da177e4SLinus Torvalds rqstp->rq_res.page_len += size; 87744524359SNeilBrown } else 8781da177e4SLinus Torvalds rqstp->rq_res.page_len += size; 8791da177e4SLinus Torvalds 8801da177e4SLinus Torvalds return size; 8811da177e4SLinus Torvalds } 8821da177e4SLinus Torvalds 883cf8208d0SJens Axboe static int nfsd_direct_splice_actor(struct pipe_inode_info *pipe, 884cf8208d0SJens Axboe struct splice_desc *sd) 885cf8208d0SJens Axboe { 886cf8208d0SJens Axboe return __splice_from_pipe(pipe, sd, nfsd_splice_actor); 887cf8208d0SJens Axboe } 888cf8208d0SJens Axboe 88987c5942eSChuck Lever static __be32 nfsd_finish_read(struct svc_rqst *rqstp, struct svc_fh *fhp, 89087c5942eSChuck Lever struct file *file, loff_t offset, 89187c5942eSChuck Lever unsigned long *count, int host_err) 8921da177e4SLinus Torvalds { 893dc97618dSJ. Bruce Fields if (host_err >= 0) { 894dc97618dSJ. Bruce Fields nfsdstats.io_read += host_err; 895dc97618dSJ. Bruce Fields *count = host_err; 896dc97618dSJ. Bruce Fields fsnotify_access(file); 89787c5942eSChuck Lever trace_nfsd_read_io_done(rqstp, fhp, offset, *count); 898dc97618dSJ. Bruce Fields return 0; 89987c5942eSChuck Lever } else { 90087c5942eSChuck Lever trace_nfsd_read_err(rqstp, fhp, offset, host_err); 901dc97618dSJ. Bruce Fields return nfserrno(host_err); 902dc97618dSJ. Bruce Fields } 90387c5942eSChuck Lever } 9041da177e4SLinus Torvalds 90587c5942eSChuck Lever __be32 nfsd_splice_read(struct svc_rqst *rqstp, struct svc_fh *fhp, 906dc97618dSJ. Bruce Fields struct file *file, loff_t offset, unsigned long *count) 907dc97618dSJ. Bruce Fields { 908cf8208d0SJens Axboe struct splice_desc sd = { 909cf8208d0SJens Axboe .len = 0, 910cf8208d0SJens Axboe .total_len = *count, 911cf8208d0SJens Axboe .pos = offset, 912cf8208d0SJens Axboe .u.data = rqstp, 913cf8208d0SJens Axboe }; 914dc97618dSJ. Bruce Fields int host_err; 915cf8208d0SJens Axboe 91687c5942eSChuck Lever trace_nfsd_read_splice(rqstp, fhp, offset, *count); 917afc59400SJ. Bruce Fields rqstp->rq_next_page = rqstp->rq_respages + 1; 918cf8208d0SJens Axboe host_err = splice_direct_to_actor(file, &sd, nfsd_direct_splice_actor); 91987c5942eSChuck Lever return nfsd_finish_read(rqstp, fhp, file, offset, count, host_err); 920dc97618dSJ. Bruce Fields } 921dc97618dSJ. Bruce Fields 92287c5942eSChuck Lever __be32 nfsd_readv(struct svc_rqst *rqstp, struct svc_fh *fhp, 92387c5942eSChuck Lever struct file *file, loff_t offset, 92487c5942eSChuck Lever struct kvec *vec, int vlen, unsigned long *count) 925dc97618dSJ. Bruce Fields { 92673da852eSChristoph Hellwig struct iov_iter iter; 927dc97618dSJ. Bruce Fields int host_err; 928dc97618dSJ. Bruce Fields 92987c5942eSChuck Lever trace_nfsd_read_vector(rqstp, fhp, offset, *count); 93073da852eSChristoph Hellwig iov_iter_kvec(&iter, READ | ITER_KVEC, vec, vlen, *count); 93173da852eSChristoph Hellwig host_err = vfs_iter_read(file, &iter, &offset, 0); 93287c5942eSChuck Lever return nfsd_finish_read(rqstp, fhp, file, offset, count, host_err); 9331da177e4SLinus Torvalds } 9341da177e4SLinus Torvalds 935d911df7bSJ. Bruce Fields /* 936d911df7bSJ. Bruce Fields * Gathered writes: If another process is currently writing to the file, 937d911df7bSJ. Bruce Fields * there's a high chance this is another nfsd (triggered by a bulk write 938d911df7bSJ. Bruce Fields * from a client's biod). Rather than syncing the file with each write 939d911df7bSJ. Bruce Fields * request, we sleep for 10 msec. 940d911df7bSJ. Bruce Fields * 941d911df7bSJ. Bruce Fields * I don't know if this roughly approximates C. Juszak's idea of 942d911df7bSJ. Bruce Fields * gathered writes, but it's a nice and simple solution (IMHO), and it 943d911df7bSJ. Bruce Fields * seems to work:-) 944d911df7bSJ. Bruce Fields * 945d911df7bSJ. Bruce Fields * Note: we do this only in the NFSv2 case, since v3 and higher have a 946d911df7bSJ. Bruce Fields * better tool (separate unstable writes and commits) for solving this 947d911df7bSJ. Bruce Fields * problem. 948d911df7bSJ. Bruce Fields */ 949d911df7bSJ. Bruce Fields static int wait_for_concurrent_writes(struct file *file) 950d911df7bSJ. Bruce Fields { 951496ad9aaSAl Viro struct inode *inode = file_inode(file); 952d911df7bSJ. Bruce Fields static ino_t last_ino; 953d911df7bSJ. Bruce Fields static dev_t last_dev; 954d911df7bSJ. Bruce Fields int err = 0; 955d911df7bSJ. Bruce Fields 956d911df7bSJ. Bruce Fields if (atomic_read(&inode->i_writecount) > 1 957d911df7bSJ. Bruce Fields || (last_ino == inode->i_ino && last_dev == inode->i_sb->s_dev)) { 958d911df7bSJ. Bruce Fields dprintk("nfsd: write defer %d\n", task_pid_nr(current)); 959d911df7bSJ. Bruce Fields msleep(10); 960d911df7bSJ. Bruce Fields dprintk("nfsd: write resume %d\n", task_pid_nr(current)); 961d911df7bSJ. Bruce Fields } 962d911df7bSJ. Bruce Fields 963d911df7bSJ. Bruce Fields if (inode->i_state & I_DIRTY) { 964d911df7bSJ. Bruce Fields dprintk("nfsd: write sync %d\n", task_pid_nr(current)); 9658018ab05SChristoph Hellwig err = vfs_fsync(file, 0); 966d911df7bSJ. Bruce Fields } 967d911df7bSJ. Bruce Fields last_ino = inode->i_ino; 968d911df7bSJ. Bruce Fields last_dev = inode->i_sb->s_dev; 969d911df7bSJ. Bruce Fields return err; 970d911df7bSJ. Bruce Fields } 971d911df7bSJ. Bruce Fields 972af90f707SChristoph Hellwig __be32 9731da177e4SLinus Torvalds nfsd_vfs_write(struct svc_rqst *rqstp, struct svc_fh *fhp, struct file *file, 9741da177e4SLinus Torvalds loff_t offset, struct kvec *vec, int vlen, 97554bbb7d2SKinglong Mee unsigned long *cnt, int stable) 9761da177e4SLinus Torvalds { 9771da177e4SLinus Torvalds struct svc_export *exp; 97873da852eSChristoph Hellwig struct iov_iter iter; 979d890be15SChuck Lever __be32 nfserr; 9806264d69dSAl Viro int host_err; 98148e03bc5STrond Myklebust int use_wgather; 982e49dbbf3SKent Overstreet loff_t pos = offset; 9838658452eSNeilBrown unsigned int pflags = current->flags; 984ddef7ed2SChristoph Hellwig rwf_t flags = 0; 9858658452eSNeilBrown 986d890be15SChuck Lever trace_nfsd_write_opened(rqstp, fhp, offset, *cnt); 987d890be15SChuck Lever 9887501cc2bSJeff Layton if (test_bit(RQ_LOCAL, &rqstp->rq_flags)) 9898658452eSNeilBrown /* 9908658452eSNeilBrown * We want less throttling in balance_dirty_pages() 9918658452eSNeilBrown * and shrink_inactive_list() so that nfs to 9928658452eSNeilBrown * localhost doesn't cause nfsd to lock up due to all 9938658452eSNeilBrown * the client's dirty pages or its congested queue. 9948658452eSNeilBrown */ 9958658452eSNeilBrown current->flags |= PF_LESS_THROTTLE; 9961da177e4SLinus Torvalds 9971da177e4SLinus Torvalds exp = fhp->fh_export; 99848e03bc5STrond Myklebust use_wgather = (rqstp->rq_vers == 2) && EX_WGATHER(exp); 9991da177e4SLinus Torvalds 10001da177e4SLinus Torvalds if (!EX_ISSYNC(exp)) 100154bbb7d2SKinglong Mee stable = NFS_UNSTABLE; 10021da177e4SLinus Torvalds 100324368aadSChristoph Hellwig if (stable && !use_wgather) 100424368aadSChristoph Hellwig flags |= RWF_SYNC; 100524368aadSChristoph Hellwig 100673da852eSChristoph Hellwig iov_iter_kvec(&iter, WRITE | ITER_KVEC, vec, vlen, *cnt); 100773da852eSChristoph Hellwig host_err = vfs_iter_write(file, &iter, &pos, flags); 1008e4636d53SJ. Bruce Fields if (host_err < 0) 1009e4636d53SJ. Bruce Fields goto out_nfserr; 1010d890be15SChuck Lever nfsdstats.io_write += *cnt; 10112a12a9d7SEric Paris fsnotify_modify(file); 10121da177e4SLinus Torvalds 101324368aadSChristoph Hellwig if (stable && use_wgather) 1014d911df7bSJ. Bruce Fields host_err = wait_for_concurrent_writes(file); 10151da177e4SLinus Torvalds 1016e4636d53SJ. Bruce Fields out_nfserr: 1017d890be15SChuck Lever if (host_err >= 0) { 1018d890be15SChuck Lever trace_nfsd_write_io_done(rqstp, fhp, offset, *cnt); 1019d890be15SChuck Lever nfserr = nfs_ok; 1020d890be15SChuck Lever } else { 1021d890be15SChuck Lever trace_nfsd_write_err(rqstp, fhp, offset, host_err); 1022d890be15SChuck Lever nfserr = nfserrno(host_err); 1023d890be15SChuck Lever } 10247501cc2bSJeff Layton if (test_bit(RQ_LOCAL, &rqstp->rq_flags)) 1025717a94b5SNeilBrown current_restore_flags(pflags, PF_LESS_THROTTLE); 1026d890be15SChuck Lever return nfserr; 10271da177e4SLinus Torvalds } 10281da177e4SLinus Torvalds 1029dc97618dSJ. Bruce Fields /* 1030dc97618dSJ. Bruce Fields * Read data from a file. count must contain the requested read count 1031dc97618dSJ. Bruce Fields * on entry. On return, *count contains the number of bytes actually read. 1032dc97618dSJ. Bruce Fields * N.B. After this call fhp needs an fh_put 1033dc97618dSJ. Bruce Fields */ 1034dc97618dSJ. Bruce Fields __be32 nfsd_read(struct svc_rqst *rqstp, struct svc_fh *fhp, 1035dc97618dSJ. Bruce Fields loff_t offset, struct kvec *vec, int vlen, unsigned long *count) 1036dc97618dSJ. Bruce Fields { 1037dc97618dSJ. Bruce Fields struct file *file; 1038dc97618dSJ. Bruce Fields struct raparms *ra; 1039dc97618dSJ. Bruce Fields __be32 err; 1040dc97618dSJ. Bruce Fields 1041f394b62bSChuck Lever trace_nfsd_read_start(rqstp, fhp, offset, *count); 1042e749a462SChristoph Hellwig err = nfsd_open(rqstp, fhp, S_IFREG, NFSD_MAY_READ, &file); 1043dc97618dSJ. Bruce Fields if (err) 1044dc97618dSJ. Bruce Fields return err; 1045dc97618dSJ. Bruce Fields 1046e749a462SChristoph Hellwig ra = nfsd_init_raparms(file); 10476e8b50d1SJeff Layton 1048a4058c5bSChristoph Hellwig if (file->f_op->splice_read && test_bit(RQ_SPLICE_OK, &rqstp->rq_flags)) 104987c5942eSChuck Lever err = nfsd_splice_read(rqstp, fhp, file, offset, count); 1050a4058c5bSChristoph Hellwig else 105187c5942eSChuck Lever err = nfsd_readv(rqstp, fhp, file, offset, vec, vlen, count); 10526e8b50d1SJeff Layton 1053e749a462SChristoph Hellwig if (ra) 1054e749a462SChristoph Hellwig nfsd_put_raparams(file, ra); 1055e749a462SChristoph Hellwig fput(file); 1056dc97618dSJ. Bruce Fields 1057f394b62bSChuck Lever trace_nfsd_read_done(rqstp, fhp, offset, *count); 10586e8b50d1SJeff Layton 1059fa0a2126SJ. Bruce Fields return err; 1060fa0a2126SJ. Bruce Fields } 1061fa0a2126SJ. Bruce Fields 10621da177e4SLinus Torvalds /* 10631da177e4SLinus Torvalds * Write data to a file. 10641da177e4SLinus Torvalds * The stable flag requests synchronous writes. 10651da177e4SLinus Torvalds * N.B. After this call fhp needs an fh_put 10661da177e4SLinus Torvalds */ 10676264d69dSAl Viro __be32 106852e380e0SKinglong Mee nfsd_write(struct svc_rqst *rqstp, struct svc_fh *fhp, loff_t offset, 106952e380e0SKinglong Mee struct kvec *vec, int vlen, unsigned long *cnt, int stable) 10701da177e4SLinus Torvalds { 107152e380e0SKinglong Mee struct file *file = NULL; 10726264d69dSAl Viro __be32 err = 0; 10731da177e4SLinus Torvalds 1074f394b62bSChuck Lever trace_nfsd_write_start(rqstp, fhp, offset, *cnt); 10756e8b50d1SJeff Layton 10768837abcaSMiklos Szeredi err = nfsd_open(rqstp, fhp, S_IFREG, NFSD_MAY_WRITE, &file); 10771da177e4SLinus Torvalds if (err) 10781da177e4SLinus Torvalds goto out; 10791da177e4SLinus Torvalds 108052e380e0SKinglong Mee err = nfsd_vfs_write(rqstp, fhp, file, offset, vec, vlen, cnt, stable); 1081fd891454SChristoph Hellwig fput(file); 10821da177e4SLinus Torvalds out: 1083f394b62bSChuck Lever trace_nfsd_write_done(rqstp, fhp, offset, *cnt); 10841da177e4SLinus Torvalds return err; 10851da177e4SLinus Torvalds } 10861da177e4SLinus Torvalds 10871da177e4SLinus Torvalds #ifdef CONFIG_NFSD_V3 10881da177e4SLinus Torvalds /* 10891da177e4SLinus Torvalds * Commit all pending writes to stable storage. 1090aa696a6fSTrond Myklebust * 1091aa696a6fSTrond Myklebust * Note: we only guarantee that data that lies within the range specified 1092aa696a6fSTrond Myklebust * by the 'offset' and 'count' parameters will be synced. 10931da177e4SLinus Torvalds * 10941da177e4SLinus Torvalds * Unfortunately we cannot lock the file to make sure we return full WCC 10951da177e4SLinus Torvalds * data to the client, as locking happens lower down in the filesystem. 10961da177e4SLinus Torvalds */ 10976264d69dSAl Viro __be32 10981da177e4SLinus Torvalds nfsd_commit(struct svc_rqst *rqstp, struct svc_fh *fhp, 10991da177e4SLinus Torvalds loff_t offset, unsigned long count) 11001da177e4SLinus Torvalds { 11011da177e4SLinus Torvalds struct file *file; 1102aa696a6fSTrond Myklebust loff_t end = LLONG_MAX; 1103aa696a6fSTrond Myklebust __be32 err = nfserr_inval; 11041da177e4SLinus Torvalds 1105aa696a6fSTrond Myklebust if (offset < 0) 1106aa696a6fSTrond Myklebust goto out; 1107aa696a6fSTrond Myklebust if (count != 0) { 1108aa696a6fSTrond Myklebust end = offset + (loff_t)count - 1; 1109aa696a6fSTrond Myklebust if (end < offset) 1110aa696a6fSTrond Myklebust goto out; 1111aa696a6fSTrond Myklebust } 11121da177e4SLinus Torvalds 111391885258SJeff Layton err = nfsd_open(rqstp, fhp, S_IFREG, 111491885258SJeff Layton NFSD_MAY_WRITE|NFSD_MAY_NOT_BREAK_LEASE, &file); 11158837abcaSMiklos Szeredi if (err) 1116aa696a6fSTrond Myklebust goto out; 11171da177e4SLinus Torvalds if (EX_ISSYNC(fhp->fh_export)) { 11188018ab05SChristoph Hellwig int err2 = vfs_fsync_range(file, offset, end, 0); 1119aa696a6fSTrond Myklebust 1120aa696a6fSTrond Myklebust if (err2 != -EINVAL) 1121aa696a6fSTrond Myklebust err = nfserrno(err2); 1122aa696a6fSTrond Myklebust else 11231da177e4SLinus Torvalds err = nfserr_notsupp; 11241da177e4SLinus Torvalds } 11251da177e4SLinus Torvalds 1126fd891454SChristoph Hellwig fput(file); 1127aa696a6fSTrond Myklebust out: 11281da177e4SLinus Torvalds return err; 11291da177e4SLinus Torvalds } 11301da177e4SLinus Torvalds #endif /* CONFIG_NFSD_V3 */ 11311da177e4SLinus Torvalds 1132f2b0dee2SAdrian Bunk static __be32 11335c002b3bSJ. Bruce Fields nfsd_create_setattr(struct svc_rqst *rqstp, struct svc_fh *resfhp, 11345c002b3bSJ. Bruce Fields struct iattr *iap) 11355c002b3bSJ. Bruce Fields { 11365c002b3bSJ. Bruce Fields /* 11375c002b3bSJ. Bruce Fields * Mode has already been set earlier in create: 11385c002b3bSJ. Bruce Fields */ 11395c002b3bSJ. Bruce Fields iap->ia_valid &= ~ATTR_MODE; 11405c002b3bSJ. Bruce Fields /* 11415c002b3bSJ. Bruce Fields * Setting uid/gid works only for root. Irix appears to 11425c002b3bSJ. Bruce Fields * send along the gid on create when it tries to implement 11435c002b3bSJ. Bruce Fields * setgid directories via NFS: 11445c002b3bSJ. Bruce Fields */ 11456fab8779SEric W. Biederman if (!uid_eq(current_fsuid(), GLOBAL_ROOT_UID)) 11465c002b3bSJ. Bruce Fields iap->ia_valid &= ~(ATTR_UID|ATTR_GID); 11475c002b3bSJ. Bruce Fields if (iap->ia_valid) 11485c002b3bSJ. Bruce Fields return nfsd_setattr(rqstp, resfhp, iap, 0, (time_t)0); 11490f3a24b4STrond Myklebust /* Callers expect file metadata to be committed here */ 1150722b620dSJeff Layton return nfserrno(commit_metadata(resfhp)); 11515c002b3bSJ. Bruce Fields } 11525c002b3bSJ. Bruce Fields 11534ac35c2fSwengang wang /* HPUX client sometimes creates a file in mode 000, and sets size to 0. 11544ac35c2fSwengang wang * setting size to 0 may fail for some specific file systems by the permission 11554ac35c2fSwengang wang * checking which requires WRITE permission but the mode is 000. 11564ac35c2fSwengang wang * we ignore the resizing(to 0) on the just new created file, since the size is 11574ac35c2fSwengang wang * 0 after file created. 11584ac35c2fSwengang wang * 11594ac35c2fSwengang wang * call this only after vfs_create() is called. 11604ac35c2fSwengang wang * */ 11614ac35c2fSwengang wang static void 11624ac35c2fSwengang wang nfsd_check_ignore_resizing(struct iattr *iap) 11634ac35c2fSwengang wang { 11644ac35c2fSwengang wang if ((iap->ia_valid & ATTR_SIZE) && (iap->ia_size == 0)) 11654ac35c2fSwengang wang iap->ia_valid &= ~ATTR_SIZE; 11664ac35c2fSwengang wang } 11674ac35c2fSwengang wang 1168b44061d0SJ. Bruce Fields /* The parent directory should already be locked: */ 11696264d69dSAl Viro __be32 1170b44061d0SJ. Bruce Fields nfsd_create_locked(struct svc_rqst *rqstp, struct svc_fh *fhp, 11711da177e4SLinus Torvalds char *fname, int flen, struct iattr *iap, 11721da177e4SLinus Torvalds int type, dev_t rdev, struct svc_fh *resfhp) 11731da177e4SLinus Torvalds { 11742b118859SDan Carpenter struct dentry *dentry, *dchild; 11751da177e4SLinus Torvalds struct inode *dirp; 11766264d69dSAl Viro __be32 err; 11775c002b3bSJ. Bruce Fields __be32 err2; 11786264d69dSAl Viro int host_err; 11791da177e4SLinus Torvalds 11801da177e4SLinus Torvalds dentry = fhp->fh_dentry; 11812b0143b5SDavid Howells dirp = d_inode(dentry); 11821da177e4SLinus Torvalds 11831da177e4SLinus Torvalds dchild = dget(resfhp->fh_dentry); 11841da177e4SLinus Torvalds if (!fhp->fh_locked) { 1185b44061d0SJ. Bruce Fields WARN_ONCE(1, "nfsd_create: parent %pd2 not locked!\n", 1186a6a9f18fSAl Viro dentry); 1187d75f2b9fSAl Viro err = nfserr_io; 11881da177e4SLinus Torvalds goto out; 11891da177e4SLinus Torvalds } 11901da177e4SLinus Torvalds 11917eed34f1SOleg Drokin err = nfsd_permission(rqstp, fhp->fh_export, dentry, NFSD_MAY_CREATE); 11927eed34f1SOleg Drokin if (err) 11937eed34f1SOleg Drokin goto out; 11947eed34f1SOleg Drokin 11951da177e4SLinus Torvalds if (!(iap->ia_valid & ATTR_MODE)) 11961da177e4SLinus Torvalds iap->ia_mode = 0; 11971da177e4SLinus Torvalds iap->ia_mode = (iap->ia_mode & S_IALLUGO) | type; 11981da177e4SLinus Torvalds 1199088406bcSJ. Bruce Fields err = 0; 12004a55c101SJan Kara host_err = 0; 12011da177e4SLinus Torvalds switch (type) { 12021da177e4SLinus Torvalds case S_IFREG: 1203312b63fbSAl Viro host_err = vfs_create(dirp, dchild, iap->ia_mode, true); 12044ac35c2fSwengang wang if (!host_err) 12054ac35c2fSwengang wang nfsd_check_ignore_resizing(iap); 12061da177e4SLinus Torvalds break; 12071da177e4SLinus Torvalds case S_IFDIR: 12086264d69dSAl Viro host_err = vfs_mkdir(dirp, dchild, iap->ia_mode); 12093819bb0dSAl Viro if (!host_err && unlikely(d_unhashed(dchild))) { 12103819bb0dSAl Viro struct dentry *d; 12113819bb0dSAl Viro d = lookup_one_len(dchild->d_name.name, 12123819bb0dSAl Viro dchild->d_parent, 12133819bb0dSAl Viro dchild->d_name.len); 12143819bb0dSAl Viro if (IS_ERR(d)) { 12153819bb0dSAl Viro host_err = PTR_ERR(d); 12163819bb0dSAl Viro break; 12173819bb0dSAl Viro } 12183819bb0dSAl Viro if (unlikely(d_is_negative(d))) { 12193819bb0dSAl Viro dput(d); 12203819bb0dSAl Viro err = nfserr_serverfault; 12213819bb0dSAl Viro goto out; 12223819bb0dSAl Viro } 12233819bb0dSAl Viro dput(resfhp->fh_dentry); 12243819bb0dSAl Viro resfhp->fh_dentry = dget(d); 12253819bb0dSAl Viro err = fh_update(resfhp); 12263819bb0dSAl Viro dput(dchild); 12273819bb0dSAl Viro dchild = d; 12283819bb0dSAl Viro if (err) 12293819bb0dSAl Viro goto out; 12303819bb0dSAl Viro } 12311da177e4SLinus Torvalds break; 12321da177e4SLinus Torvalds case S_IFCHR: 12331da177e4SLinus Torvalds case S_IFBLK: 12341da177e4SLinus Torvalds case S_IFIFO: 12351da177e4SLinus Torvalds case S_IFSOCK: 12366264d69dSAl Viro host_err = vfs_mknod(dirp, dchild, iap->ia_mode, rdev); 12371da177e4SLinus Torvalds break; 123871423274SJ. Bruce Fields default: 123971423274SJ. Bruce Fields printk(KERN_WARNING "nfsd: bad file type %o in nfsd_create\n", 124071423274SJ. Bruce Fields type); 124171423274SJ. Bruce Fields host_err = -EINVAL; 1242463c3197SDave Hansen } 12434a55c101SJan Kara if (host_err < 0) 1244463c3197SDave Hansen goto out_nfserr; 12451da177e4SLinus Torvalds 1246f501912aSBen Myers err = nfsd_create_setattr(rqstp, resfhp, iap); 12471da177e4SLinus Torvalds 1248f501912aSBen Myers /* 12490f3a24b4STrond Myklebust * nfsd_create_setattr already committed the child. Transactional 12500f3a24b4STrond Myklebust * filesystems had a chance to commit changes for both parent and 1251b44061d0SJ. Bruce Fields * child simultaneously making the following commit_metadata a 12520f3a24b4STrond Myklebust * noop. 1253f501912aSBen Myers */ 1254f501912aSBen Myers err2 = nfserrno(commit_metadata(fhp)); 1255f193fbabSYAMAMOTO Takashi if (err2) 1256f193fbabSYAMAMOTO Takashi err = err2; 12571da177e4SLinus Torvalds /* 12581da177e4SLinus Torvalds * Update the file handle to get the new inode info. 12591da177e4SLinus Torvalds */ 12601da177e4SLinus Torvalds if (!err) 12611da177e4SLinus Torvalds err = fh_update(resfhp); 12621da177e4SLinus Torvalds out: 12631da177e4SLinus Torvalds dput(dchild); 12641da177e4SLinus Torvalds return err; 12651da177e4SLinus Torvalds 12661da177e4SLinus Torvalds out_nfserr: 12676264d69dSAl Viro err = nfserrno(host_err); 12681da177e4SLinus Torvalds goto out; 12691da177e4SLinus Torvalds } 12701da177e4SLinus Torvalds 1271b44061d0SJ. Bruce Fields /* 1272b44061d0SJ. Bruce Fields * Create a filesystem object (regular, directory, special). 1273b44061d0SJ. Bruce Fields * Note that the parent directory is left locked. 1274b44061d0SJ. Bruce Fields * 1275b44061d0SJ. Bruce Fields * N.B. Every call to nfsd_create needs an fh_put for _both_ fhp and resfhp 1276b44061d0SJ. Bruce Fields */ 1277b44061d0SJ. Bruce Fields __be32 1278b44061d0SJ. Bruce Fields nfsd_create(struct svc_rqst *rqstp, struct svc_fh *fhp, 1279b44061d0SJ. Bruce Fields char *fname, int flen, struct iattr *iap, 1280b44061d0SJ. Bruce Fields int type, dev_t rdev, struct svc_fh *resfhp) 1281b44061d0SJ. Bruce Fields { 1282b44061d0SJ. Bruce Fields struct dentry *dentry, *dchild = NULL; 1283b44061d0SJ. Bruce Fields struct inode *dirp; 1284b44061d0SJ. Bruce Fields __be32 err; 1285b44061d0SJ. Bruce Fields int host_err; 1286b44061d0SJ. Bruce Fields 1287b44061d0SJ. Bruce Fields if (isdotent(fname, flen)) 1288b44061d0SJ. Bruce Fields return nfserr_exist; 1289b44061d0SJ. Bruce Fields 1290fa08139dSJ. Bruce Fields err = fh_verify(rqstp, fhp, S_IFDIR, NFSD_MAY_NOP); 1291b44061d0SJ. Bruce Fields if (err) 1292b44061d0SJ. Bruce Fields return err; 1293b44061d0SJ. Bruce Fields 1294b44061d0SJ. Bruce Fields dentry = fhp->fh_dentry; 1295b44061d0SJ. Bruce Fields dirp = d_inode(dentry); 1296b44061d0SJ. Bruce Fields 1297b44061d0SJ. Bruce Fields host_err = fh_want_write(fhp); 1298b44061d0SJ. Bruce Fields if (host_err) 1299b44061d0SJ. Bruce Fields return nfserrno(host_err); 1300b44061d0SJ. Bruce Fields 1301b44061d0SJ. Bruce Fields fh_lock_nested(fhp, I_MUTEX_PARENT); 1302b44061d0SJ. Bruce Fields dchild = lookup_one_len(fname, dentry, flen); 1303b44061d0SJ. Bruce Fields host_err = PTR_ERR(dchild); 1304b44061d0SJ. Bruce Fields if (IS_ERR(dchild)) 1305b44061d0SJ. Bruce Fields return nfserrno(host_err); 1306b44061d0SJ. Bruce Fields err = fh_compose(resfhp, fhp->fh_export, dchild, fhp); 1307502aa0a5SJosef Bacik /* 1308502aa0a5SJosef Bacik * We unconditionally drop our ref to dchild as fh_compose will have 1309502aa0a5SJosef Bacik * already grabbed its own ref for it. 1310502aa0a5SJosef Bacik */ 1311b44061d0SJ. Bruce Fields dput(dchild); 1312502aa0a5SJosef Bacik if (err) 1313b44061d0SJ. Bruce Fields return err; 1314b44061d0SJ. Bruce Fields return nfsd_create_locked(rqstp, fhp, fname, flen, iap, type, 1315b44061d0SJ. Bruce Fields rdev, resfhp); 1316b44061d0SJ. Bruce Fields } 1317b44061d0SJ. Bruce Fields 13181da177e4SLinus Torvalds #ifdef CONFIG_NFSD_V3 1319ac6721a1SMi Jinlong 13201da177e4SLinus Torvalds /* 1321ac6721a1SMi Jinlong * NFSv3 and NFSv4 version of nfsd_create 13221da177e4SLinus Torvalds */ 13236264d69dSAl Viro __be32 1324ac6721a1SMi Jinlong do_nfsd_create(struct svc_rqst *rqstp, struct svc_fh *fhp, 13251da177e4SLinus Torvalds char *fname, int flen, struct iattr *iap, 13261da177e4SLinus Torvalds struct svc_fh *resfhp, int createmode, u32 *verifier, 1327856121b2SJ. Bruce Fields bool *truncp, bool *created) 13281da177e4SLinus Torvalds { 13291da177e4SLinus Torvalds struct dentry *dentry, *dchild = NULL; 13301da177e4SLinus Torvalds struct inode *dirp; 13316264d69dSAl Viro __be32 err; 13326264d69dSAl Viro int host_err; 13331da177e4SLinus Torvalds __u32 v_mtime=0, v_atime=0; 13341da177e4SLinus Torvalds 13351da177e4SLinus Torvalds err = nfserr_perm; 13361da177e4SLinus Torvalds if (!flen) 13371da177e4SLinus Torvalds goto out; 13381da177e4SLinus Torvalds err = nfserr_exist; 13391da177e4SLinus Torvalds if (isdotent(fname, flen)) 13401da177e4SLinus Torvalds goto out; 13411da177e4SLinus Torvalds if (!(iap->ia_valid & ATTR_MODE)) 13421da177e4SLinus Torvalds iap->ia_mode = 0; 13431574dff8SSachin Prabhu err = fh_verify(rqstp, fhp, S_IFDIR, NFSD_MAY_EXEC); 13441da177e4SLinus Torvalds if (err) 13451da177e4SLinus Torvalds goto out; 13461da177e4SLinus Torvalds 13471da177e4SLinus Torvalds dentry = fhp->fh_dentry; 13482b0143b5SDavid Howells dirp = d_inode(dentry); 13491da177e4SLinus Torvalds 13504a55c101SJan Kara host_err = fh_want_write(fhp); 13514a55c101SJan Kara if (host_err) 13524a55c101SJan Kara goto out_nfserr; 13534a55c101SJan Kara 135412fd3520SPeter Zijlstra fh_lock_nested(fhp, I_MUTEX_PARENT); 13551da177e4SLinus Torvalds 13561da177e4SLinus Torvalds /* 13571da177e4SLinus Torvalds * Compose the response file handle. 13581da177e4SLinus Torvalds */ 13591da177e4SLinus Torvalds dchild = lookup_one_len(fname, dentry, flen); 13606264d69dSAl Viro host_err = PTR_ERR(dchild); 13611da177e4SLinus Torvalds if (IS_ERR(dchild)) 13621da177e4SLinus Torvalds goto out_nfserr; 13631da177e4SLinus Torvalds 13641574dff8SSachin Prabhu /* If file doesn't exist, check for permissions to create one */ 13652b0143b5SDavid Howells if (d_really_is_negative(dchild)) { 13661574dff8SSachin Prabhu err = fh_verify(rqstp, fhp, S_IFDIR, NFSD_MAY_CREATE); 13671574dff8SSachin Prabhu if (err) 13681574dff8SSachin Prabhu goto out; 13691574dff8SSachin Prabhu } 13701574dff8SSachin Prabhu 13711da177e4SLinus Torvalds err = fh_compose(resfhp, fhp->fh_export, dchild, fhp); 13721da177e4SLinus Torvalds if (err) 13731da177e4SLinus Torvalds goto out; 13741da177e4SLinus Torvalds 1375ac6721a1SMi Jinlong if (nfsd_create_is_exclusive(createmode)) { 1376c397852cSPeter Staubach /* solaris7 gets confused (bugid 4218508) if these have 1377749997e5SJeff Layton * the high bit set, so just clear the high bits. If this is 1378749997e5SJeff Layton * ever changed to use different attrs for storing the 1379749997e5SJeff Layton * verifier, then do_open_lookup() will also need to be fixed 1380749997e5SJeff Layton * accordingly. 13811da177e4SLinus Torvalds */ 13821da177e4SLinus Torvalds v_mtime = verifier[0]&0x7fffffff; 13831da177e4SLinus Torvalds v_atime = verifier[1]&0x7fffffff; 13841da177e4SLinus Torvalds } 13851da177e4SLinus Torvalds 13862b0143b5SDavid Howells if (d_really_is_positive(dchild)) { 13871da177e4SLinus Torvalds err = 0; 13881da177e4SLinus Torvalds 13891da177e4SLinus Torvalds switch (createmode) { 13901da177e4SLinus Torvalds case NFS3_CREATE_UNCHECKED: 1391e36cb0b8SDavid Howells if (! d_is_reg(dchild)) 13929dc4e6c4SJ. Bruce Fields goto out; 13931da177e4SLinus Torvalds else if (truncp) { 13941da177e4SLinus Torvalds /* in nfsv4, we need to treat this case a little 13951da177e4SLinus Torvalds * differently. we don't want to truncate the 13961da177e4SLinus Torvalds * file now; this would be wrong if the OPEN 13971da177e4SLinus Torvalds * fails for some other reason. furthermore, 13981da177e4SLinus Torvalds * if the size is nonzero, we should ignore it 13991da177e4SLinus Torvalds * according to spec! 14001da177e4SLinus Torvalds */ 14011da177e4SLinus Torvalds *truncp = (iap->ia_valid & ATTR_SIZE) && !iap->ia_size; 14021da177e4SLinus Torvalds } 14031da177e4SLinus Torvalds else { 14041da177e4SLinus Torvalds iap->ia_valid &= ATTR_SIZE; 14051da177e4SLinus Torvalds goto set_attr; 14061da177e4SLinus Torvalds } 14071da177e4SLinus Torvalds break; 14081da177e4SLinus Torvalds case NFS3_CREATE_EXCLUSIVE: 14092b0143b5SDavid Howells if ( d_inode(dchild)->i_mtime.tv_sec == v_mtime 14102b0143b5SDavid Howells && d_inode(dchild)->i_atime.tv_sec == v_atime 14112b0143b5SDavid Howells && d_inode(dchild)->i_size == 0 ) { 14127007c90fSNeil Brown if (created) 14137007c90fSNeil Brown *created = 1; 14141da177e4SLinus Torvalds break; 14157007c90fSNeil Brown } 1416ac6721a1SMi Jinlong case NFS4_CREATE_EXCLUSIVE4_1: 14172b0143b5SDavid Howells if ( d_inode(dchild)->i_mtime.tv_sec == v_mtime 14182b0143b5SDavid Howells && d_inode(dchild)->i_atime.tv_sec == v_atime 14192b0143b5SDavid Howells && d_inode(dchild)->i_size == 0 ) { 14207007c90fSNeil Brown if (created) 14217007c90fSNeil Brown *created = 1; 1422ac6721a1SMi Jinlong goto set_attr; 14237007c90fSNeil Brown } 14241da177e4SLinus Torvalds /* fallthru */ 14251da177e4SLinus Torvalds case NFS3_CREATE_GUARDED: 14261da177e4SLinus Torvalds err = nfserr_exist; 14271da177e4SLinus Torvalds } 1428bad0dcffSAl Viro fh_drop_write(fhp); 14291da177e4SLinus Torvalds goto out; 14301da177e4SLinus Torvalds } 14311da177e4SLinus Torvalds 1432312b63fbSAl Viro host_err = vfs_create(dirp, dchild, iap->ia_mode, true); 1433463c3197SDave Hansen if (host_err < 0) { 1434bad0dcffSAl Viro fh_drop_write(fhp); 14351da177e4SLinus Torvalds goto out_nfserr; 1436463c3197SDave Hansen } 143781ac95c5SJ. Bruce Fields if (created) 143881ac95c5SJ. Bruce Fields *created = 1; 14391da177e4SLinus Torvalds 14404ac35c2fSwengang wang nfsd_check_ignore_resizing(iap); 14414ac35c2fSwengang wang 1442ac6721a1SMi Jinlong if (nfsd_create_is_exclusive(createmode)) { 1443c397852cSPeter Staubach /* Cram the verifier into atime/mtime */ 14441da177e4SLinus Torvalds iap->ia_valid = ATTR_MTIME|ATTR_ATIME 1445c397852cSPeter Staubach | ATTR_MTIME_SET|ATTR_ATIME_SET; 14461da177e4SLinus Torvalds /* XXX someone who knows this better please fix it for nsec */ 14471da177e4SLinus Torvalds iap->ia_mtime.tv_sec = v_mtime; 14481da177e4SLinus Torvalds iap->ia_atime.tv_sec = v_atime; 14491da177e4SLinus Torvalds iap->ia_mtime.tv_nsec = 0; 14501da177e4SLinus Torvalds iap->ia_atime.tv_nsec = 0; 14511da177e4SLinus Torvalds } 14521da177e4SLinus Torvalds 14531da177e4SLinus Torvalds set_attr: 1454f501912aSBen Myers err = nfsd_create_setattr(rqstp, resfhp, iap); 1455f501912aSBen Myers 1456f501912aSBen Myers /* 14570f3a24b4STrond Myklebust * nfsd_create_setattr already committed the child 14580f3a24b4STrond Myklebust * (and possibly also the parent). 1459f501912aSBen Myers */ 1460f501912aSBen Myers if (!err) 1461f501912aSBen Myers err = nfserrno(commit_metadata(fhp)); 1462f193fbabSYAMAMOTO Takashi 1463f193fbabSYAMAMOTO Takashi /* 1464f193fbabSYAMAMOTO Takashi * Update the filehandle to get the new inode info. 1465f193fbabSYAMAMOTO Takashi */ 1466f193fbabSYAMAMOTO Takashi if (!err) 1467f193fbabSYAMAMOTO Takashi err = fh_update(resfhp); 14681da177e4SLinus Torvalds 14691da177e4SLinus Torvalds out: 14701da177e4SLinus Torvalds fh_unlock(fhp); 14711da177e4SLinus Torvalds if (dchild && !IS_ERR(dchild)) 14721da177e4SLinus Torvalds dput(dchild); 14734a55c101SJan Kara fh_drop_write(fhp); 14741da177e4SLinus Torvalds return err; 14751da177e4SLinus Torvalds 14761da177e4SLinus Torvalds out_nfserr: 14776264d69dSAl Viro err = nfserrno(host_err); 14781da177e4SLinus Torvalds goto out; 14791da177e4SLinus Torvalds } 14801da177e4SLinus Torvalds #endif /* CONFIG_NFSD_V3 */ 14811da177e4SLinus Torvalds 14821da177e4SLinus Torvalds /* 14831da177e4SLinus Torvalds * Read a symlink. On entry, *lenp must contain the maximum path length that 14841da177e4SLinus Torvalds * fits into the buffer. On return, it contains the true length. 14851da177e4SLinus Torvalds * N.B. After this call fhp needs an fh_put 14861da177e4SLinus Torvalds */ 14876264d69dSAl Viro __be32 14881da177e4SLinus Torvalds nfsd_readlink(struct svc_rqst *rqstp, struct svc_fh *fhp, char *buf, int *lenp) 14891da177e4SLinus Torvalds { 14906264d69dSAl Viro __be32 err; 14914d7edbc3SAl Viro const char *link; 149268ac1234SAl Viro struct path path; 14934d7edbc3SAl Viro DEFINE_DELAYED_CALL(done); 14944d7edbc3SAl Viro int len; 14951da177e4SLinus Torvalds 14968837abcaSMiklos Szeredi err = fh_verify(rqstp, fhp, S_IFLNK, NFSD_MAY_NOP); 14974d7edbc3SAl Viro if (unlikely(err)) 14984d7edbc3SAl Viro return err; 14991da177e4SLinus Torvalds 150068ac1234SAl Viro path.mnt = fhp->fh_export->ex_path.mnt; 150168ac1234SAl Viro path.dentry = fhp->fh_dentry; 15021da177e4SLinus Torvalds 15034d7edbc3SAl Viro if (unlikely(!d_is_symlink(path.dentry))) 15044d7edbc3SAl Viro return nfserr_inval; 15051da177e4SLinus Torvalds 150668ac1234SAl Viro touch_atime(&path); 15071da177e4SLinus Torvalds 15084d7edbc3SAl Viro link = vfs_get_link(path.dentry, &done); 15094d7edbc3SAl Viro if (IS_ERR(link)) 15104d7edbc3SAl Viro return nfserrno(PTR_ERR(link)); 15111da177e4SLinus Torvalds 15124d7edbc3SAl Viro len = strlen(link); 15134d7edbc3SAl Viro if (len < *lenp) 15144d7edbc3SAl Viro *lenp = len; 15154d7edbc3SAl Viro memcpy(buf, link, *lenp); 15164d7edbc3SAl Viro do_delayed_call(&done); 15174d7edbc3SAl Viro return 0; 15181da177e4SLinus Torvalds } 15191da177e4SLinus Torvalds 15201da177e4SLinus Torvalds /* 15211da177e4SLinus Torvalds * Create a symlink and look up its inode 15221da177e4SLinus Torvalds * N.B. After this call _both_ fhp and resfhp need an fh_put 15231da177e4SLinus Torvalds */ 15246264d69dSAl Viro __be32 15251da177e4SLinus Torvalds nfsd_symlink(struct svc_rqst *rqstp, struct svc_fh *fhp, 15261da177e4SLinus Torvalds char *fname, int flen, 152752ee0433SJ. Bruce Fields char *path, 15281e444f5bSKinglong Mee struct svc_fh *resfhp) 15291da177e4SLinus Torvalds { 15301da177e4SLinus Torvalds struct dentry *dentry, *dnew; 15316264d69dSAl Viro __be32 err, cerr; 15326264d69dSAl Viro int host_err; 15331da177e4SLinus Torvalds 15341da177e4SLinus Torvalds err = nfserr_noent; 153552ee0433SJ. Bruce Fields if (!flen || path[0] == '\0') 15361da177e4SLinus Torvalds goto out; 15371da177e4SLinus Torvalds err = nfserr_exist; 15381da177e4SLinus Torvalds if (isdotent(fname, flen)) 15391da177e4SLinus Torvalds goto out; 15401da177e4SLinus Torvalds 15418837abcaSMiklos Szeredi err = fh_verify(rqstp, fhp, S_IFDIR, NFSD_MAY_CREATE); 15421da177e4SLinus Torvalds if (err) 15431da177e4SLinus Torvalds goto out; 15444a55c101SJan Kara 15454a55c101SJan Kara host_err = fh_want_write(fhp); 15464a55c101SJan Kara if (host_err) 15474a55c101SJan Kara goto out_nfserr; 15484a55c101SJan Kara 15491da177e4SLinus Torvalds fh_lock(fhp); 15501da177e4SLinus Torvalds dentry = fhp->fh_dentry; 15511da177e4SLinus Torvalds dnew = lookup_one_len(fname, dentry, flen); 15526264d69dSAl Viro host_err = PTR_ERR(dnew); 15531da177e4SLinus Torvalds if (IS_ERR(dnew)) 15541da177e4SLinus Torvalds goto out_nfserr; 15551da177e4SLinus Torvalds 15562b0143b5SDavid Howells host_err = vfs_symlink(d_inode(dentry), dnew, path); 15576264d69dSAl Viro err = nfserrno(host_err); 1558f501912aSBen Myers if (!err) 1559f501912aSBen Myers err = nfserrno(commit_metadata(fhp)); 15601da177e4SLinus Torvalds fh_unlock(fhp); 15611da177e4SLinus Torvalds 1562bad0dcffSAl Viro fh_drop_write(fhp); 156375c3f29dSDave Hansen 15641da177e4SLinus Torvalds cerr = fh_compose(resfhp, fhp->fh_export, dnew, fhp); 15651da177e4SLinus Torvalds dput(dnew); 15661da177e4SLinus Torvalds if (err==0) err = cerr; 15671da177e4SLinus Torvalds out: 15681da177e4SLinus Torvalds return err; 15691da177e4SLinus Torvalds 15701da177e4SLinus Torvalds out_nfserr: 15716264d69dSAl Viro err = nfserrno(host_err); 15721da177e4SLinus Torvalds goto out; 15731da177e4SLinus Torvalds } 15741da177e4SLinus Torvalds 15751da177e4SLinus Torvalds /* 15761da177e4SLinus Torvalds * Create a hardlink 15771da177e4SLinus Torvalds * N.B. After this call _both_ ffhp and tfhp need an fh_put 15781da177e4SLinus Torvalds */ 15796264d69dSAl Viro __be32 15801da177e4SLinus Torvalds nfsd_link(struct svc_rqst *rqstp, struct svc_fh *ffhp, 15811da177e4SLinus Torvalds char *name, int len, struct svc_fh *tfhp) 15821da177e4SLinus Torvalds { 15831da177e4SLinus Torvalds struct dentry *ddir, *dnew, *dold; 158455b13354SJ. Bruce Fields struct inode *dirp; 15856264d69dSAl Viro __be32 err; 15866264d69dSAl Viro int host_err; 15871da177e4SLinus Torvalds 15888837abcaSMiklos Szeredi err = fh_verify(rqstp, ffhp, S_IFDIR, NFSD_MAY_CREATE); 15891da177e4SLinus Torvalds if (err) 15901da177e4SLinus Torvalds goto out; 15917d818a7bSJ. Bruce Fields err = fh_verify(rqstp, tfhp, 0, NFSD_MAY_NOP); 15921da177e4SLinus Torvalds if (err) 15931da177e4SLinus Torvalds goto out; 15947d818a7bSJ. Bruce Fields err = nfserr_isdir; 1595e36cb0b8SDavid Howells if (d_is_dir(tfhp->fh_dentry)) 15967d818a7bSJ. Bruce Fields goto out; 15971da177e4SLinus Torvalds err = nfserr_perm; 15981da177e4SLinus Torvalds if (!len) 15991da177e4SLinus Torvalds goto out; 16001da177e4SLinus Torvalds err = nfserr_exist; 16011da177e4SLinus Torvalds if (isdotent(name, len)) 16021da177e4SLinus Torvalds goto out; 16031da177e4SLinus Torvalds 16044a55c101SJan Kara host_err = fh_want_write(tfhp); 16054a55c101SJan Kara if (host_err) { 16064a55c101SJan Kara err = nfserrno(host_err); 16074a55c101SJan Kara goto out; 16084a55c101SJan Kara } 16094a55c101SJan Kara 161012fd3520SPeter Zijlstra fh_lock_nested(ffhp, I_MUTEX_PARENT); 16111da177e4SLinus Torvalds ddir = ffhp->fh_dentry; 16122b0143b5SDavid Howells dirp = d_inode(ddir); 16131da177e4SLinus Torvalds 16141da177e4SLinus Torvalds dnew = lookup_one_len(name, ddir, len); 16156264d69dSAl Viro host_err = PTR_ERR(dnew); 16161da177e4SLinus Torvalds if (IS_ERR(dnew)) 16171da177e4SLinus Torvalds goto out_nfserr; 16181da177e4SLinus Torvalds 16191da177e4SLinus Torvalds dold = tfhp->fh_dentry; 16201da177e4SLinus Torvalds 16214795bb37SJ. Bruce Fields err = nfserr_noent; 16222b0143b5SDavid Howells if (d_really_is_negative(dold)) 16234a55c101SJan Kara goto out_dput; 1624146a8595SJ. Bruce Fields host_err = vfs_link(dold, dirp, dnew, NULL); 16256264d69dSAl Viro if (!host_err) { 1626f501912aSBen Myers err = nfserrno(commit_metadata(ffhp)); 1627f501912aSBen Myers if (!err) 1628f501912aSBen Myers err = nfserrno(commit_metadata(tfhp)); 16291da177e4SLinus Torvalds } else { 16306264d69dSAl Viro if (host_err == -EXDEV && rqstp->rq_vers == 2) 16311da177e4SLinus Torvalds err = nfserr_acces; 16321da177e4SLinus Torvalds else 16336264d69dSAl Viro err = nfserrno(host_err); 16341da177e4SLinus Torvalds } 163575c3f29dSDave Hansen out_dput: 16361da177e4SLinus Torvalds dput(dnew); 1637270d56e5SDavid M. Richter out_unlock: 1638270d56e5SDavid M. Richter fh_unlock(ffhp); 16394a55c101SJan Kara fh_drop_write(tfhp); 16401da177e4SLinus Torvalds out: 16411da177e4SLinus Torvalds return err; 16421da177e4SLinus Torvalds 16431da177e4SLinus Torvalds out_nfserr: 16446264d69dSAl Viro err = nfserrno(host_err); 1645270d56e5SDavid M. Richter goto out_unlock; 16461da177e4SLinus Torvalds } 16471da177e4SLinus Torvalds 16481da177e4SLinus Torvalds /* 16491da177e4SLinus Torvalds * Rename a file 16501da177e4SLinus Torvalds * N.B. After this call _both_ ffhp and tfhp need an fh_put 16511da177e4SLinus Torvalds */ 16526264d69dSAl Viro __be32 16531da177e4SLinus Torvalds nfsd_rename(struct svc_rqst *rqstp, struct svc_fh *ffhp, char *fname, int flen, 16541da177e4SLinus Torvalds struct svc_fh *tfhp, char *tname, int tlen) 16551da177e4SLinus Torvalds { 16561da177e4SLinus Torvalds struct dentry *fdentry, *tdentry, *odentry, *ndentry, *trap; 16571da177e4SLinus Torvalds struct inode *fdir, *tdir; 16586264d69dSAl Viro __be32 err; 16596264d69dSAl Viro int host_err; 16601da177e4SLinus Torvalds 16618837abcaSMiklos Szeredi err = fh_verify(rqstp, ffhp, S_IFDIR, NFSD_MAY_REMOVE); 16621da177e4SLinus Torvalds if (err) 16631da177e4SLinus Torvalds goto out; 16648837abcaSMiklos Szeredi err = fh_verify(rqstp, tfhp, S_IFDIR, NFSD_MAY_CREATE); 16651da177e4SLinus Torvalds if (err) 16661da177e4SLinus Torvalds goto out; 16671da177e4SLinus Torvalds 16681da177e4SLinus Torvalds fdentry = ffhp->fh_dentry; 16692b0143b5SDavid Howells fdir = d_inode(fdentry); 16701da177e4SLinus Torvalds 16711da177e4SLinus Torvalds tdentry = tfhp->fh_dentry; 16722b0143b5SDavid Howells tdir = d_inode(tdentry); 16731da177e4SLinus Torvalds 16741da177e4SLinus Torvalds err = nfserr_perm; 16751da177e4SLinus Torvalds if (!flen || isdotent(fname, flen) || !tlen || isdotent(tname, tlen)) 16761da177e4SLinus Torvalds goto out; 16771da177e4SLinus Torvalds 16784a55c101SJan Kara host_err = fh_want_write(ffhp); 16794a55c101SJan Kara if (host_err) { 16804a55c101SJan Kara err = nfserrno(host_err); 16814a55c101SJan Kara goto out; 16824a55c101SJan Kara } 16834a55c101SJan Kara 16841da177e4SLinus Torvalds /* cannot use fh_lock as we need deadlock protective ordering 16851da177e4SLinus Torvalds * so do it by hand */ 16861da177e4SLinus Torvalds trap = lock_rename(tdentry, fdentry); 1687aaf91ec1SJeff Layton ffhp->fh_locked = tfhp->fh_locked = true; 16881da177e4SLinus Torvalds fill_pre_wcc(ffhp); 16891da177e4SLinus Torvalds fill_pre_wcc(tfhp); 16901da177e4SLinus Torvalds 16911da177e4SLinus Torvalds odentry = lookup_one_len(fname, fdentry, flen); 16926264d69dSAl Viro host_err = PTR_ERR(odentry); 16931da177e4SLinus Torvalds if (IS_ERR(odentry)) 16941da177e4SLinus Torvalds goto out_nfserr; 16951da177e4SLinus Torvalds 16966264d69dSAl Viro host_err = -ENOENT; 16972b0143b5SDavid Howells if (d_really_is_negative(odentry)) 16981da177e4SLinus Torvalds goto out_dput_old; 16996264d69dSAl Viro host_err = -EINVAL; 17001da177e4SLinus Torvalds if (odentry == trap) 17011da177e4SLinus Torvalds goto out_dput_old; 17021da177e4SLinus Torvalds 17031da177e4SLinus Torvalds ndentry = lookup_one_len(tname, tdentry, tlen); 17046264d69dSAl Viro host_err = PTR_ERR(ndentry); 17051da177e4SLinus Torvalds if (IS_ERR(ndentry)) 17061da177e4SLinus Torvalds goto out_dput_old; 17076264d69dSAl Viro host_err = -ENOTEMPTY; 17081da177e4SLinus Torvalds if (ndentry == trap) 17091da177e4SLinus Torvalds goto out_dput_new; 17101da177e4SLinus Torvalds 17119079b1ebSDave Hansen host_err = -EXDEV; 17129079b1ebSDave Hansen if (ffhp->fh_export->ex_path.mnt != tfhp->fh_export->ex_path.mnt) 17139079b1ebSDave Hansen goto out_dput_new; 1714aa387d6cSJ. Bruce Fields if (ffhp->fh_export->ex_path.dentry != tfhp->fh_export->ex_path.dentry) 1715aa387d6cSJ. Bruce Fields goto out_dput_new; 17169079b1ebSDave Hansen 1717520c8b16SMiklos Szeredi host_err = vfs_rename(fdir, odentry, tdir, ndentry, NULL, 0); 1718f501912aSBen Myers if (!host_err) { 1719f501912aSBen Myers host_err = commit_metadata(tfhp); 17206264d69dSAl Viro if (!host_err) 1721f501912aSBen Myers host_err = commit_metadata(ffhp); 17221da177e4SLinus Torvalds } 17231da177e4SLinus Torvalds out_dput_new: 17241da177e4SLinus Torvalds dput(ndentry); 17251da177e4SLinus Torvalds out_dput_old: 17261da177e4SLinus Torvalds dput(odentry); 17271da177e4SLinus Torvalds out_nfserr: 17286264d69dSAl Viro err = nfserrno(host_err); 1729fbb74a34SJ. Bruce Fields /* 1730fbb74a34SJ. Bruce Fields * We cannot rely on fh_unlock on the two filehandles, 17311da177e4SLinus Torvalds * as that would do the wrong thing if the two directories 1732fbb74a34SJ. Bruce Fields * were the same, so again we do it by hand. 17331da177e4SLinus Torvalds */ 17341da177e4SLinus Torvalds fill_post_wcc(ffhp); 17351da177e4SLinus Torvalds fill_post_wcc(tfhp); 17361da177e4SLinus Torvalds unlock_rename(tdentry, fdentry); 1737aaf91ec1SJeff Layton ffhp->fh_locked = tfhp->fh_locked = false; 17384a55c101SJan Kara fh_drop_write(ffhp); 17391da177e4SLinus Torvalds 17401da177e4SLinus Torvalds out: 17411da177e4SLinus Torvalds return err; 17421da177e4SLinus Torvalds } 17431da177e4SLinus Torvalds 17441da177e4SLinus Torvalds /* 17451da177e4SLinus Torvalds * Unlink a file or directory 17461da177e4SLinus Torvalds * N.B. After this call fhp needs an fh_put 17471da177e4SLinus Torvalds */ 17486264d69dSAl Viro __be32 17491da177e4SLinus Torvalds nfsd_unlink(struct svc_rqst *rqstp, struct svc_fh *fhp, int type, 17501da177e4SLinus Torvalds char *fname, int flen) 17511da177e4SLinus Torvalds { 17521da177e4SLinus Torvalds struct dentry *dentry, *rdentry; 17531da177e4SLinus Torvalds struct inode *dirp; 17546264d69dSAl Viro __be32 err; 17556264d69dSAl Viro int host_err; 17561da177e4SLinus Torvalds 17571da177e4SLinus Torvalds err = nfserr_acces; 17581da177e4SLinus Torvalds if (!flen || isdotent(fname, flen)) 17591da177e4SLinus Torvalds goto out; 17608837abcaSMiklos Szeredi err = fh_verify(rqstp, fhp, S_IFDIR, NFSD_MAY_REMOVE); 17611da177e4SLinus Torvalds if (err) 17621da177e4SLinus Torvalds goto out; 17631da177e4SLinus Torvalds 17644a55c101SJan Kara host_err = fh_want_write(fhp); 17654a55c101SJan Kara if (host_err) 17664a55c101SJan Kara goto out_nfserr; 17674a55c101SJan Kara 176812fd3520SPeter Zijlstra fh_lock_nested(fhp, I_MUTEX_PARENT); 17691da177e4SLinus Torvalds dentry = fhp->fh_dentry; 17702b0143b5SDavid Howells dirp = d_inode(dentry); 17711da177e4SLinus Torvalds 17721da177e4SLinus Torvalds rdentry = lookup_one_len(fname, dentry, flen); 17736264d69dSAl Viro host_err = PTR_ERR(rdentry); 17741da177e4SLinus Torvalds if (IS_ERR(rdentry)) 17751da177e4SLinus Torvalds goto out_nfserr; 17761da177e4SLinus Torvalds 17772b0143b5SDavid Howells if (d_really_is_negative(rdentry)) { 17781da177e4SLinus Torvalds dput(rdentry); 17791da177e4SLinus Torvalds err = nfserr_noent; 17801da177e4SLinus Torvalds goto out; 17811da177e4SLinus Torvalds } 17821da177e4SLinus Torvalds 17831da177e4SLinus Torvalds if (!type) 17842b0143b5SDavid Howells type = d_inode(rdentry)->i_mode & S_IFMT; 17851da177e4SLinus Torvalds 17869ce137eeSJ. Bruce Fields if (type != S_IFDIR) 1787b21996e3SJ. Bruce Fields host_err = vfs_unlink(dirp, rdentry, NULL); 17889ce137eeSJ. Bruce Fields else 17896264d69dSAl Viro host_err = vfs_rmdir(dirp, rdentry); 1790541ce98cSJ. Bruce Fields if (!host_err) 1791541ce98cSJ. Bruce Fields host_err = commit_metadata(fhp); 17921da177e4SLinus Torvalds dput(rdentry); 17931da177e4SLinus Torvalds 17941da177e4SLinus Torvalds out_nfserr: 17956264d69dSAl Viro err = nfserrno(host_err); 1796f193fbabSYAMAMOTO Takashi out: 1797f193fbabSYAMAMOTO Takashi return err; 17981da177e4SLinus Torvalds } 17991da177e4SLinus Torvalds 18001da177e4SLinus Torvalds /* 180114f7dd63SDavid Woodhouse * We do this buffering because we must not call back into the file 180214f7dd63SDavid Woodhouse * system's ->lookup() method from the filldir callback. That may well 180314f7dd63SDavid Woodhouse * deadlock a number of file systems. 180414f7dd63SDavid Woodhouse * 180514f7dd63SDavid Woodhouse * This is based heavily on the implementation of same in XFS. 180614f7dd63SDavid Woodhouse */ 180714f7dd63SDavid Woodhouse struct buffered_dirent { 180814f7dd63SDavid Woodhouse u64 ino; 180914f7dd63SDavid Woodhouse loff_t offset; 181014f7dd63SDavid Woodhouse int namlen; 181114f7dd63SDavid Woodhouse unsigned int d_type; 181214f7dd63SDavid Woodhouse char name[]; 181314f7dd63SDavid Woodhouse }; 181414f7dd63SDavid Woodhouse 181514f7dd63SDavid Woodhouse struct readdir_data { 18165c0ba4e0SAl Viro struct dir_context ctx; 181714f7dd63SDavid Woodhouse char *dirent; 181814f7dd63SDavid Woodhouse size_t used; 181953c9c5c0SAl Viro int full; 182014f7dd63SDavid Woodhouse }; 182114f7dd63SDavid Woodhouse 1822ac7576f4SMiklos Szeredi static int nfsd_buffered_filldir(struct dir_context *ctx, const char *name, 1823ac7576f4SMiklos Szeredi int namlen, loff_t offset, u64 ino, 1824ac7576f4SMiklos Szeredi unsigned int d_type) 182514f7dd63SDavid Woodhouse { 1826ac7576f4SMiklos Szeredi struct readdir_data *buf = 1827ac7576f4SMiklos Szeredi container_of(ctx, struct readdir_data, ctx); 182814f7dd63SDavid Woodhouse struct buffered_dirent *de = (void *)(buf->dirent + buf->used); 182914f7dd63SDavid Woodhouse unsigned int reclen; 183014f7dd63SDavid Woodhouse 183114f7dd63SDavid Woodhouse reclen = ALIGN(sizeof(struct buffered_dirent) + namlen, sizeof(u64)); 183253c9c5c0SAl Viro if (buf->used + reclen > PAGE_SIZE) { 183353c9c5c0SAl Viro buf->full = 1; 183414f7dd63SDavid Woodhouse return -EINVAL; 183553c9c5c0SAl Viro } 183614f7dd63SDavid Woodhouse 183714f7dd63SDavid Woodhouse de->namlen = namlen; 183814f7dd63SDavid Woodhouse de->offset = offset; 183914f7dd63SDavid Woodhouse de->ino = ino; 184014f7dd63SDavid Woodhouse de->d_type = d_type; 184114f7dd63SDavid Woodhouse memcpy(de->name, name, namlen); 184214f7dd63SDavid Woodhouse buf->used += reclen; 184314f7dd63SDavid Woodhouse 184414f7dd63SDavid Woodhouse return 0; 184514f7dd63SDavid Woodhouse } 184614f7dd63SDavid Woodhouse 1847ac7576f4SMiklos Szeredi static __be32 nfsd_buffered_readdir(struct file *file, nfsd_filldir_t func, 18482628b766SDavid Woodhouse struct readdir_cd *cdp, loff_t *offsetp) 18492628b766SDavid Woodhouse { 185014f7dd63SDavid Woodhouse struct buffered_dirent *de; 18512628b766SDavid Woodhouse int host_err; 185214f7dd63SDavid Woodhouse int size; 185314f7dd63SDavid Woodhouse loff_t offset; 1854ac6614b7SAl Viro struct readdir_data buf = { 1855ac6614b7SAl Viro .ctx.actor = nfsd_buffered_filldir, 1856ac6614b7SAl Viro .dirent = (void *)__get_free_page(GFP_KERNEL) 1857ac6614b7SAl Viro }; 18582628b766SDavid Woodhouse 185914f7dd63SDavid Woodhouse if (!buf.dirent) 18602f9092e1SDavid Woodhouse return nfserrno(-ENOMEM); 186114f7dd63SDavid Woodhouse 186214f7dd63SDavid Woodhouse offset = *offsetp; 18632628b766SDavid Woodhouse 186414f7dd63SDavid Woodhouse while (1) { 186514f7dd63SDavid Woodhouse unsigned int reclen; 186614f7dd63SDavid Woodhouse 1867b726e923SDoug Nazar cdp->err = nfserr_eof; /* will be cleared on successful read */ 186814f7dd63SDavid Woodhouse buf.used = 0; 186953c9c5c0SAl Viro buf.full = 0; 187014f7dd63SDavid Woodhouse 18715c0ba4e0SAl Viro host_err = iterate_dir(file, &buf.ctx); 187253c9c5c0SAl Viro if (buf.full) 187353c9c5c0SAl Viro host_err = 0; 187453c9c5c0SAl Viro 187553c9c5c0SAl Viro if (host_err < 0) 187614f7dd63SDavid Woodhouse break; 187714f7dd63SDavid Woodhouse 187814f7dd63SDavid Woodhouse size = buf.used; 187914f7dd63SDavid Woodhouse 188014f7dd63SDavid Woodhouse if (!size) 188114f7dd63SDavid Woodhouse break; 188214f7dd63SDavid Woodhouse 188314f7dd63SDavid Woodhouse de = (struct buffered_dirent *)buf.dirent; 188414f7dd63SDavid Woodhouse while (size > 0) { 188514f7dd63SDavid Woodhouse offset = de->offset; 188614f7dd63SDavid Woodhouse 188714f7dd63SDavid Woodhouse if (func(cdp, de->name, de->namlen, de->offset, 188814f7dd63SDavid Woodhouse de->ino, de->d_type)) 18892f9092e1SDavid Woodhouse break; 189014f7dd63SDavid Woodhouse 189114f7dd63SDavid Woodhouse if (cdp->err != nfs_ok) 18922f9092e1SDavid Woodhouse break; 189314f7dd63SDavid Woodhouse 189414f7dd63SDavid Woodhouse reclen = ALIGN(sizeof(*de) + de->namlen, 189514f7dd63SDavid Woodhouse sizeof(u64)); 189614f7dd63SDavid Woodhouse size -= reclen; 189714f7dd63SDavid Woodhouse de = (struct buffered_dirent *)((char *)de + reclen); 189814f7dd63SDavid Woodhouse } 18992f9092e1SDavid Woodhouse if (size > 0) /* We bailed out early */ 19002f9092e1SDavid Woodhouse break; 19012f9092e1SDavid Woodhouse 1902c002a6c7SDavid Woodhouse offset = vfs_llseek(file, 0, SEEK_CUR); 190314f7dd63SDavid Woodhouse } 190414f7dd63SDavid Woodhouse 190514f7dd63SDavid Woodhouse free_page((unsigned long)(buf.dirent)); 19062628b766SDavid Woodhouse 19072628b766SDavid Woodhouse if (host_err) 19082628b766SDavid Woodhouse return nfserrno(host_err); 190914f7dd63SDavid Woodhouse 191014f7dd63SDavid Woodhouse *offsetp = offset; 19112628b766SDavid Woodhouse return cdp->err; 19122628b766SDavid Woodhouse } 19132628b766SDavid Woodhouse 19141da177e4SLinus Torvalds /* 19151da177e4SLinus Torvalds * Read entries from a directory. 19161da177e4SLinus Torvalds * The NFSv3/4 verifier we ignore for now. 19171da177e4SLinus Torvalds */ 19186264d69dSAl Viro __be32 19191da177e4SLinus Torvalds nfsd_readdir(struct svc_rqst *rqstp, struct svc_fh *fhp, loff_t *offsetp, 1920ac7576f4SMiklos Szeredi struct readdir_cd *cdp, nfsd_filldir_t func) 19211da177e4SLinus Torvalds { 19226264d69dSAl Viro __be32 err; 19231da177e4SLinus Torvalds struct file *file; 19241da177e4SLinus Torvalds loff_t offset = *offsetp; 192506effdbbSBernd Schubert int may_flags = NFSD_MAY_READ; 19261da177e4SLinus Torvalds 192706effdbbSBernd Schubert /* NFSv2 only supports 32 bit cookies */ 192806effdbbSBernd Schubert if (rqstp->rq_vers > 2) 192906effdbbSBernd Schubert may_flags |= NFSD_MAY_64BIT_COOKIE; 193006effdbbSBernd Schubert 193106effdbbSBernd Schubert err = nfsd_open(rqstp, fhp, S_IFDIR, may_flags, &file); 19321da177e4SLinus Torvalds if (err) 19331da177e4SLinus Torvalds goto out; 19341da177e4SLinus Torvalds 1935b108fe6bSJeff Layton offset = vfs_llseek(file, offset, SEEK_SET); 19361da177e4SLinus Torvalds if (offset < 0) { 19371da177e4SLinus Torvalds err = nfserrno((int)offset); 19381da177e4SLinus Torvalds goto out_close; 19391da177e4SLinus Torvalds } 19401da177e4SLinus Torvalds 194114f7dd63SDavid Woodhouse err = nfsd_buffered_readdir(file, func, cdp, offsetp); 19421da177e4SLinus Torvalds 19431da177e4SLinus Torvalds if (err == nfserr_eof || err == nfserr_toosmall) 19441da177e4SLinus Torvalds err = nfs_ok; /* can still be found in ->err */ 19451da177e4SLinus Torvalds out_close: 1946fd891454SChristoph Hellwig fput(file); 19471da177e4SLinus Torvalds out: 19481da177e4SLinus Torvalds return err; 19491da177e4SLinus Torvalds } 19501da177e4SLinus Torvalds 19511da177e4SLinus Torvalds /* 19521da177e4SLinus Torvalds * Get file system stats 19531da177e4SLinus Torvalds * N.B. After this call fhp needs an fh_put 19541da177e4SLinus Torvalds */ 19556264d69dSAl Viro __be32 195604716e66SJ. Bruce Fields nfsd_statfs(struct svc_rqst *rqstp, struct svc_fh *fhp, struct kstatfs *stat, int access) 19571da177e4SLinus Torvalds { 1958f6360efbSTakashi Iwai __be32 err; 1959f6360efbSTakashi Iwai 1960f6360efbSTakashi Iwai err = fh_verify(rqstp, fhp, 0, NFSD_MAY_NOP | access); 1961f6360efbSTakashi Iwai if (!err) { 1962ebabe9a9SChristoph Hellwig struct path path = { 1963ebabe9a9SChristoph Hellwig .mnt = fhp->fh_export->ex_path.mnt, 1964ebabe9a9SChristoph Hellwig .dentry = fhp->fh_dentry, 1965ebabe9a9SChristoph Hellwig }; 1966f6360efbSTakashi Iwai if (vfs_statfs(&path, stat)) 19671da177e4SLinus Torvalds err = nfserr_io; 1968f6360efbSTakashi Iwai } 19691da177e4SLinus Torvalds return err; 19701da177e4SLinus Torvalds } 19711da177e4SLinus Torvalds 1972c7d51402SJ. Bruce Fields static int exp_rdonly(struct svc_rqst *rqstp, struct svc_export *exp) 1973e22841c6SJ. Bruce Fields { 1974c7d51402SJ. Bruce Fields return nfsexp_flags(rqstp, exp) & NFSEXP_READONLY; 1975e22841c6SJ. Bruce Fields } 1976e22841c6SJ. Bruce Fields 19771da177e4SLinus Torvalds /* 19781da177e4SLinus Torvalds * Check for a user's access permissions to this inode. 19791da177e4SLinus Torvalds */ 19806264d69dSAl Viro __be32 19810ec757dfSJ. Bruce Fields nfsd_permission(struct svc_rqst *rqstp, struct svc_export *exp, 19820ec757dfSJ. Bruce Fields struct dentry *dentry, int acc) 19831da177e4SLinus Torvalds { 19842b0143b5SDavid Howells struct inode *inode = d_inode(dentry); 19851da177e4SLinus Torvalds int err; 19861da177e4SLinus Torvalds 1987aea93397SJ. Bruce Fields if ((acc & NFSD_MAY_MASK) == NFSD_MAY_NOP) 19881da177e4SLinus Torvalds return 0; 19891da177e4SLinus Torvalds #if 0 19901da177e4SLinus Torvalds dprintk("nfsd: permission 0x%x%s%s%s%s%s%s%s mode 0%o%s%s%s\n", 19911da177e4SLinus Torvalds acc, 19928837abcaSMiklos Szeredi (acc & NFSD_MAY_READ)? " read" : "", 19938837abcaSMiklos Szeredi (acc & NFSD_MAY_WRITE)? " write" : "", 19948837abcaSMiklos Szeredi (acc & NFSD_MAY_EXEC)? " exec" : "", 19958837abcaSMiklos Szeredi (acc & NFSD_MAY_SATTR)? " sattr" : "", 19968837abcaSMiklos Szeredi (acc & NFSD_MAY_TRUNC)? " trunc" : "", 19978837abcaSMiklos Szeredi (acc & NFSD_MAY_LOCK)? " lock" : "", 19988837abcaSMiklos Szeredi (acc & NFSD_MAY_OWNER_OVERRIDE)? " owneroverride" : "", 19991da177e4SLinus Torvalds inode->i_mode, 20001da177e4SLinus Torvalds IS_IMMUTABLE(inode)? " immut" : "", 20011da177e4SLinus Torvalds IS_APPEND(inode)? " append" : "", 20022c463e95SDave Hansen __mnt_is_readonly(exp->ex_path.mnt)? " ro" : ""); 20031da177e4SLinus Torvalds dprintk(" owner %d/%d user %d/%d\n", 20045cc0a840SDavid Howells inode->i_uid, inode->i_gid, current_fsuid(), current_fsgid()); 20051da177e4SLinus Torvalds #endif 20061da177e4SLinus Torvalds 20071da177e4SLinus Torvalds /* Normally we reject any write/sattr etc access on a read-only file 20081da177e4SLinus Torvalds * system. But if it is IRIX doing check on write-access for a 20091da177e4SLinus Torvalds * device special file, we ignore rofs. 20101da177e4SLinus Torvalds */ 20118837abcaSMiklos Szeredi if (!(acc & NFSD_MAY_LOCAL_ACCESS)) 20128837abcaSMiklos Szeredi if (acc & (NFSD_MAY_WRITE | NFSD_MAY_SATTR | NFSD_MAY_TRUNC)) { 20132c463e95SDave Hansen if (exp_rdonly(rqstp, exp) || 20142c463e95SDave Hansen __mnt_is_readonly(exp->ex_path.mnt)) 20151da177e4SLinus Torvalds return nfserr_rofs; 20168837abcaSMiklos Szeredi if (/* (acc & NFSD_MAY_WRITE) && */ IS_IMMUTABLE(inode)) 20171da177e4SLinus Torvalds return nfserr_perm; 20181da177e4SLinus Torvalds } 20198837abcaSMiklos Szeredi if ((acc & NFSD_MAY_TRUNC) && IS_APPEND(inode)) 20201da177e4SLinus Torvalds return nfserr_perm; 20211da177e4SLinus Torvalds 20228837abcaSMiklos Szeredi if (acc & NFSD_MAY_LOCK) { 20231da177e4SLinus Torvalds /* If we cannot rely on authentication in NLM requests, 20241da177e4SLinus Torvalds * just allow locks, otherwise require read permission, or 20251da177e4SLinus Torvalds * ownership 20261da177e4SLinus Torvalds */ 20271da177e4SLinus Torvalds if (exp->ex_flags & NFSEXP_NOAUTHNLM) 20281da177e4SLinus Torvalds return 0; 20291da177e4SLinus Torvalds else 20308837abcaSMiklos Szeredi acc = NFSD_MAY_READ | NFSD_MAY_OWNER_OVERRIDE; 20311da177e4SLinus Torvalds } 20321da177e4SLinus Torvalds /* 20331da177e4SLinus Torvalds * The file owner always gets access permission for accesses that 20341da177e4SLinus Torvalds * would normally be checked at open time. This is to make 20351da177e4SLinus Torvalds * file access work even when the client has done a fchmod(fd, 0). 20361da177e4SLinus Torvalds * 20371da177e4SLinus Torvalds * However, `cp foo bar' should fail nevertheless when bar is 20381da177e4SLinus Torvalds * readonly. A sensible way to do this might be to reject all 20391da177e4SLinus Torvalds * attempts to truncate a read-only file, because a creat() call 20401da177e4SLinus Torvalds * always implies file truncation. 20411da177e4SLinus Torvalds * ... but this isn't really fair. A process may reasonably call 20421da177e4SLinus Torvalds * ftruncate on an open file descriptor on a file with perm 000. 20431da177e4SLinus Torvalds * We must trust the client to do permission checking - using "ACCESS" 20441da177e4SLinus Torvalds * with NFSv3. 20451da177e4SLinus Torvalds */ 20468837abcaSMiklos Szeredi if ((acc & NFSD_MAY_OWNER_OVERRIDE) && 20476fab8779SEric W. Biederman uid_eq(inode->i_uid, current_fsuid())) 20481da177e4SLinus Torvalds return 0; 20491da177e4SLinus Torvalds 20508837abcaSMiklos Szeredi /* This assumes NFSD_MAY_{READ,WRITE,EXEC} == MAY_{READ,WRITE,EXEC} */ 2051f419a2e3SAl Viro err = inode_permission(inode, acc & (MAY_READ|MAY_WRITE|MAY_EXEC)); 20521da177e4SLinus Torvalds 20531da177e4SLinus Torvalds /* Allow read access to binaries even when mode 111 */ 20541da177e4SLinus Torvalds if (err == -EACCES && S_ISREG(inode->i_mode) && 2055a043226bSJ. Bruce Fields (acc == (NFSD_MAY_READ | NFSD_MAY_OWNER_OVERRIDE) || 2056a043226bSJ. Bruce Fields acc == (NFSD_MAY_READ | NFSD_MAY_READ_IF_EXEC))) 2057f419a2e3SAl Viro err = inode_permission(inode, MAY_EXEC); 20581da177e4SLinus Torvalds 20591da177e4SLinus Torvalds return err? nfserrno(err) : 0; 20601da177e4SLinus Torvalds } 20611da177e4SLinus Torvalds 20621da177e4SLinus Torvalds void 20631da177e4SLinus Torvalds nfsd_racache_shutdown(void) 20641da177e4SLinus Torvalds { 206554a66e54SJeff Layton struct raparms *raparm, *last_raparm; 206654a66e54SJeff Layton unsigned int i; 206754a66e54SJeff Layton 20681da177e4SLinus Torvalds dprintk("nfsd: freeing readahead buffers.\n"); 206954a66e54SJeff Layton 207054a66e54SJeff Layton for (i = 0; i < RAPARM_HASH_SIZE; i++) { 207154a66e54SJeff Layton raparm = raparm_hash[i].pb_head; 207254a66e54SJeff Layton while(raparm) { 207354a66e54SJeff Layton last_raparm = raparm; 207454a66e54SJeff Layton raparm = raparm->p_next; 207554a66e54SJeff Layton kfree(last_raparm); 207654a66e54SJeff Layton } 207754a66e54SJeff Layton raparm_hash[i].pb_head = NULL; 207854a66e54SJeff Layton } 20791da177e4SLinus Torvalds } 20801da177e4SLinus Torvalds /* 20811da177e4SLinus Torvalds * Initialize readahead param cache 20821da177e4SLinus Torvalds */ 20831da177e4SLinus Torvalds int 20841da177e4SLinus Torvalds nfsd_racache_init(int cache_size) 20851da177e4SLinus Torvalds { 20861da177e4SLinus Torvalds int i; 2087fce1456aSGreg Banks int j = 0; 2088fce1456aSGreg Banks int nperbucket; 208954a66e54SJeff Layton struct raparms **raparm = NULL; 20901da177e4SLinus Torvalds 2091fce1456aSGreg Banks 209254a66e54SJeff Layton if (raparm_hash[0].pb_head) 20931da177e4SLinus Torvalds return 0; 209454a66e54SJeff Layton nperbucket = DIV_ROUND_UP(cache_size, RAPARM_HASH_SIZE); 20953c7aa15dSKinglong Mee nperbucket = max(2, nperbucket); 209654a66e54SJeff Layton cache_size = nperbucket * RAPARM_HASH_SIZE; 20974b3bb06bSYan Burman 20984b3bb06bSYan Burman dprintk("nfsd: allocating %d readahead buffers.\n", cache_size); 209954a66e54SJeff Layton 2100fce1456aSGreg Banks for (i = 0; i < RAPARM_HASH_SIZE; i++) { 2101fce1456aSGreg Banks spin_lock_init(&raparm_hash[i].pb_lock); 210254a66e54SJeff Layton 210354a66e54SJeff Layton raparm = &raparm_hash[i].pb_head; 210454a66e54SJeff Layton for (j = 0; j < nperbucket; j++) { 210554a66e54SJeff Layton *raparm = kzalloc(sizeof(struct raparms), GFP_KERNEL); 210654a66e54SJeff Layton if (!*raparm) 210754a66e54SJeff Layton goto out_nomem; 210854a66e54SJeff Layton raparm = &(*raparm)->p_next; 2109fce1456aSGreg Banks } 211054a66e54SJeff Layton *raparm = NULL; 21111da177e4SLinus Torvalds } 21124b3bb06bSYan Burman 21131da177e4SLinus Torvalds nfsdstats.ra_size = cache_size; 21141da177e4SLinus Torvalds return 0; 211554a66e54SJeff Layton 211654a66e54SJeff Layton out_nomem: 211754a66e54SJeff Layton dprintk("nfsd: kmalloc failed, freeing readahead buffers\n"); 211854a66e54SJeff Layton nfsd_racache_shutdown(); 211954a66e54SJeff Layton return -ENOMEM; 21201da177e4SLinus Torvalds } 2121