1b2441318SGreg Kroah-Hartman // SPDX-License-Identifier: GPL-2.0 21da177e4SLinus Torvalds /* 31da177e4SLinus Torvalds * File operations used by nfsd. Some of these have been ripped from 41da177e4SLinus Torvalds * other parts of the kernel because they weren't exported, others 51da177e4SLinus Torvalds * are partial duplicates with added or changed functionality. 61da177e4SLinus Torvalds * 71da177e4SLinus Torvalds * Note that several functions dget() the dentry upon which they want 81da177e4SLinus Torvalds * to act, most notably those that create directory entries. Response 91da177e4SLinus Torvalds * dentry's are dput()'d if necessary in the release callback. 101da177e4SLinus Torvalds * So if you notice code paths that apparently fail to dput() the 111da177e4SLinus Torvalds * dentry, don't worry--they have been taken care of. 121da177e4SLinus Torvalds * 131da177e4SLinus Torvalds * Copyright (C) 1995-1999 Olaf Kirch <okir@monad.swb.de> 141da177e4SLinus Torvalds * Zerocpy NFS support (C) 2002 Hirokazu Takahashi <taka@valinux.co.jp> 151da177e4SLinus Torvalds */ 161da177e4SLinus Torvalds 171da177e4SLinus Torvalds #include <linux/fs.h> 181da177e4SLinus Torvalds #include <linux/file.h> 19d6b29d7cSJens Axboe #include <linux/splice.h> 2095d871f0SAnna Schumaker #include <linux/falloc.h> 211da177e4SLinus Torvalds #include <linux/fcntl.h> 221da177e4SLinus Torvalds #include <linux/namei.h> 231da177e4SLinus Torvalds #include <linux/delay.h> 240eeca283SRobert Love #include <linux/fsnotify.h> 251da177e4SLinus Torvalds #include <linux/posix_acl_xattr.h> 261da177e4SLinus Torvalds #include <linux/xattr.h> 279a74af21SBoaz Harrosh #include <linux/jhash.h> 289a74af21SBoaz Harrosh #include <linux/ima.h> 295a0e3ad6STejun Heo #include <linux/slab.h> 307c0f6ba6SLinus Torvalds #include <linux/uaccess.h> 31f501912aSBen Myers #include <linux/exportfs.h> 32f501912aSBen Myers #include <linux/writeback.h> 3318032ca0SDavid Quigley #include <linux/security.h> 349a74af21SBoaz Harrosh 359a74af21SBoaz Harrosh #ifdef CONFIG_NFSD_V3 369a74af21SBoaz Harrosh #include "xdr3.h" 379a74af21SBoaz Harrosh #endif /* CONFIG_NFSD_V3 */ 389a74af21SBoaz Harrosh 395be196e5SChristoph Hellwig #ifdef CONFIG_NFSD_V4 40ffa0160aSChristoph Hellwig #include "../internal.h" 412ca72e17SJ. Bruce Fields #include "acl.h" 422ca72e17SJ. Bruce Fields #include "idmap.h" 431da177e4SLinus Torvalds #endif /* CONFIG_NFSD_V4 */ 441da177e4SLinus Torvalds 459a74af21SBoaz Harrosh #include "nfsd.h" 469a74af21SBoaz Harrosh #include "vfs.h" 47b4935239SJeff Layton #include "filecache.h" 486e8b50d1SJeff Layton #include "trace.h" 491da177e4SLinus Torvalds 501da177e4SLinus Torvalds #define NFSDDBG_FACILITY NFSDDBG_FILEOP 511da177e4SLinus Torvalds 521da177e4SLinus Torvalds /* 531da177e4SLinus Torvalds * Called from nfsd_lookup and encode_dirent. Check if we have crossed 541da177e4SLinus Torvalds * a mount point. 55e0bb89efSJ.Bruce Fields * Returns -EAGAIN or -ETIMEDOUT leaving *dpp and *expp unchanged, 561da177e4SLinus Torvalds * or nfs_ok having possibly changed *dpp and *expp 571da177e4SLinus Torvalds */ 581da177e4SLinus Torvalds int 591da177e4SLinus Torvalds nfsd_cross_mnt(struct svc_rqst *rqstp, struct dentry **dpp, 601da177e4SLinus Torvalds struct svc_export **expp) 611da177e4SLinus Torvalds { 621da177e4SLinus Torvalds struct svc_export *exp = *expp, *exp2 = NULL; 631da177e4SLinus Torvalds struct dentry *dentry = *dpp; 6491c9fa8fSAl Viro struct path path = {.mnt = mntget(exp->ex_path.mnt), 6591c9fa8fSAl Viro .dentry = dget(dentry)}; 666264d69dSAl Viro int err = 0; 671da177e4SLinus Torvalds 687cc90cc3SAl Viro err = follow_down(&path); 69cc53ce53SDavid Howells if (err < 0) 70cc53ce53SDavid Howells goto out; 7199bbf6ecSNeilBrown if (path.mnt == exp->ex_path.mnt && path.dentry == dentry && 7299bbf6ecSNeilBrown nfsd_mountpoint(dentry, exp) == 2) { 7399bbf6ecSNeilBrown /* This is only a mountpoint in some other namespace */ 7499bbf6ecSNeilBrown path_put(&path); 7599bbf6ecSNeilBrown goto out; 7699bbf6ecSNeilBrown } 771da177e4SLinus Torvalds 7891c9fa8fSAl Viro exp2 = rqst_exp_get_by_name(rqstp, &path); 791da177e4SLinus Torvalds if (IS_ERR(exp2)) { 801da177e4SLinus Torvalds err = PTR_ERR(exp2); 813b6cee7bSJ. Bruce Fields /* 823b6cee7bSJ. Bruce Fields * We normally allow NFS clients to continue 833b6cee7bSJ. Bruce Fields * "underneath" a mountpoint that is not exported. 843b6cee7bSJ. Bruce Fields * The exception is V4ROOT, where no traversal is ever 853b6cee7bSJ. Bruce Fields * allowed without an explicit export of the new 863b6cee7bSJ. Bruce Fields * directory. 873b6cee7bSJ. Bruce Fields */ 883b6cee7bSJ. Bruce Fields if (err == -ENOENT && !(exp->ex_flags & NFSEXP_V4ROOT)) 893b6cee7bSJ. Bruce Fields err = 0; 9091c9fa8fSAl Viro path_put(&path); 911da177e4SLinus Torvalds goto out; 921da177e4SLinus Torvalds } 933c394ddaSSteve Dickson if (nfsd_v4client(rqstp) || 943c394ddaSSteve Dickson (exp->ex_flags & NFSEXP_CROSSMOUNT) || EX_NOHIDE(exp2)) { 951da177e4SLinus Torvalds /* successfully crossed mount point */ 961644ccc8SAl Viro /* 9791c9fa8fSAl Viro * This is subtle: path.dentry is *not* on path.mnt 9891c9fa8fSAl Viro * at this point. The only reason we are safe is that 9991c9fa8fSAl Viro * original mnt is pinned down by exp, so we should 10091c9fa8fSAl Viro * put path *before* putting exp 1011644ccc8SAl Viro */ 10291c9fa8fSAl Viro *dpp = path.dentry; 10391c9fa8fSAl Viro path.dentry = dentry; 1041644ccc8SAl Viro *expp = exp2; 10591c9fa8fSAl Viro exp2 = exp; 1061da177e4SLinus Torvalds } 10791c9fa8fSAl Viro path_put(&path); 10891c9fa8fSAl Viro exp_put(exp2); 1091da177e4SLinus Torvalds out: 1101da177e4SLinus Torvalds return err; 1111da177e4SLinus Torvalds } 1121da177e4SLinus Torvalds 113289ede45SJ. Bruce Fields static void follow_to_parent(struct path *path) 114289ede45SJ. Bruce Fields { 115289ede45SJ. Bruce Fields struct dentry *dp; 116289ede45SJ. Bruce Fields 117289ede45SJ. Bruce Fields while (path->dentry == path->mnt->mnt_root && follow_up(path)) 118289ede45SJ. Bruce Fields ; 119289ede45SJ. Bruce Fields dp = dget_parent(path->dentry); 120289ede45SJ. Bruce Fields dput(path->dentry); 121289ede45SJ. Bruce Fields path->dentry = dp; 122289ede45SJ. Bruce Fields } 123289ede45SJ. Bruce Fields 124289ede45SJ. Bruce Fields static int nfsd_lookup_parent(struct svc_rqst *rqstp, struct dentry *dparent, struct svc_export **exp, struct dentry **dentryp) 125289ede45SJ. Bruce Fields { 126289ede45SJ. Bruce Fields struct svc_export *exp2; 127289ede45SJ. Bruce Fields struct path path = {.mnt = mntget((*exp)->ex_path.mnt), 128289ede45SJ. Bruce Fields .dentry = dget(dparent)}; 129289ede45SJ. Bruce Fields 130289ede45SJ. Bruce Fields follow_to_parent(&path); 131289ede45SJ. Bruce Fields 132289ede45SJ. Bruce Fields exp2 = rqst_exp_parent(rqstp, &path); 133289ede45SJ. Bruce Fields if (PTR_ERR(exp2) == -ENOENT) { 134289ede45SJ. Bruce Fields *dentryp = dget(dparent); 135289ede45SJ. Bruce Fields } else if (IS_ERR(exp2)) { 136289ede45SJ. Bruce Fields path_put(&path); 137289ede45SJ. Bruce Fields return PTR_ERR(exp2); 138289ede45SJ. Bruce Fields } else { 139289ede45SJ. Bruce Fields *dentryp = dget(path.dentry); 140289ede45SJ. Bruce Fields exp_put(*exp); 141289ede45SJ. Bruce Fields *exp = exp2; 142289ede45SJ. Bruce Fields } 143289ede45SJ. Bruce Fields path_put(&path); 144289ede45SJ. Bruce Fields return 0; 145289ede45SJ. Bruce Fields } 146289ede45SJ. Bruce Fields 14782ead7feSJ. Bruce Fields /* 14882ead7feSJ. Bruce Fields * For nfsd purposes, we treat V4ROOT exports as though there was an 14982ead7feSJ. Bruce Fields * export at *every* directory. 15099bbf6ecSNeilBrown * We return: 15199bbf6ecSNeilBrown * '1' if this dentry *must* be an export point, 15299bbf6ecSNeilBrown * '2' if it might be, if there is really a mount here, and 15399bbf6ecSNeilBrown * '0' if there is no chance of an export point here. 15482ead7feSJ. Bruce Fields */ 1553227fa41SJ. Bruce Fields int nfsd_mountpoint(struct dentry *dentry, struct svc_export *exp) 15682ead7feSJ. Bruce Fields { 15799bbf6ecSNeilBrown if (!d_inode(dentry)) 15899bbf6ecSNeilBrown return 0; 15999bbf6ecSNeilBrown if (exp->ex_flags & NFSEXP_V4ROOT) 16082ead7feSJ. Bruce Fields return 1; 16111fcee02STrond Myklebust if (nfsd4_is_junction(dentry)) 16211fcee02STrond Myklebust return 1; 16399bbf6ecSNeilBrown if (d_mountpoint(dentry)) 16499bbf6ecSNeilBrown /* 16599bbf6ecSNeilBrown * Might only be a mountpoint in a different namespace, 16699bbf6ecSNeilBrown * but we need to check. 16799bbf6ecSNeilBrown */ 16899bbf6ecSNeilBrown return 2; 16982ead7feSJ. Bruce Fields return 0; 17082ead7feSJ. Bruce Fields } 17182ead7feSJ. Bruce Fields 1726264d69dSAl Viro __be32 1736c0a654dSJ. Bruce Fields nfsd_lookup_dentry(struct svc_rqst *rqstp, struct svc_fh *fhp, 1745a022fc8SChuck Lever const char *name, unsigned int len, 1756c0a654dSJ. Bruce Fields struct svc_export **exp_ret, struct dentry **dentry_ret) 1761da177e4SLinus Torvalds { 1771da177e4SLinus Torvalds struct svc_export *exp; 1781da177e4SLinus Torvalds struct dentry *dparent; 1791da177e4SLinus Torvalds struct dentry *dentry; 1806264d69dSAl Viro int host_err; 1811da177e4SLinus Torvalds 1821da177e4SLinus Torvalds dprintk("nfsd: nfsd_lookup(fh %s, %.*s)\n", SVCFH_fmt(fhp), len,name); 1831da177e4SLinus Torvalds 1841da177e4SLinus Torvalds dparent = fhp->fh_dentry; 185bf18f163SKinglong Mee exp = exp_get(fhp->fh_export); 1861da177e4SLinus Torvalds 1871da177e4SLinus Torvalds /* Lookup the name, but don't follow links */ 1881da177e4SLinus Torvalds if (isdotent(name, len)) { 1891da177e4SLinus Torvalds if (len==1) 1901da177e4SLinus Torvalds dentry = dget(dparent); 19154775491SJan Blunck else if (dparent != exp->ex_path.dentry) 1921da177e4SLinus Torvalds dentry = dget_parent(dparent); 193fed83811SJ. Bruce Fields else if (!EX_NOHIDE(exp) && !nfsd_v4client(rqstp)) 1941da177e4SLinus Torvalds dentry = dget(dparent); /* .. == . just like at / */ 1951da177e4SLinus Torvalds else { 1961da177e4SLinus Torvalds /* checking mountpoint crossing is very different when stepping up */ 197289ede45SJ. Bruce Fields host_err = nfsd_lookup_parent(rqstp, dparent, &exp, &dentry); 198289ede45SJ. Bruce Fields if (host_err) 1991da177e4SLinus Torvalds goto out_nfserr; 2001da177e4SLinus Torvalds } 2011da177e4SLinus Torvalds } else { 2024335723eSJ. Bruce Fields /* 2034335723eSJ. Bruce Fields * In the nfsd4_open() case, this may be held across 2044335723eSJ. Bruce Fields * subsequent open and delegation acquisition which may 2054335723eSJ. Bruce Fields * need to take the child's i_mutex: 2064335723eSJ. Bruce Fields */ 2074335723eSJ. Bruce Fields fh_lock_nested(fhp, I_MUTEX_PARENT); 2081da177e4SLinus Torvalds dentry = lookup_one_len(name, dparent, len); 2096264d69dSAl Viro host_err = PTR_ERR(dentry); 2101da177e4SLinus Torvalds if (IS_ERR(dentry)) 2111da177e4SLinus Torvalds goto out_nfserr; 21282ead7feSJ. Bruce Fields if (nfsd_mountpoint(dentry, exp)) { 213bbddca8eSNeilBrown /* 214bbddca8eSNeilBrown * We don't need the i_mutex after all. It's 215bbddca8eSNeilBrown * still possible we could open this (regular 216bbddca8eSNeilBrown * files can be mountpoints too), but the 217bbddca8eSNeilBrown * i_mutex is just there to prevent renames of 218bbddca8eSNeilBrown * something that we might be about to delegate, 219bbddca8eSNeilBrown * and a mountpoint won't be renamed: 220bbddca8eSNeilBrown */ 221bbddca8eSNeilBrown fh_unlock(fhp); 2226264d69dSAl Viro if ((host_err = nfsd_cross_mnt(rqstp, &dentry, &exp))) { 2231da177e4SLinus Torvalds dput(dentry); 2241da177e4SLinus Torvalds goto out_nfserr; 2251da177e4SLinus Torvalds } 2261da177e4SLinus Torvalds } 2271da177e4SLinus Torvalds } 2286c0a654dSJ. Bruce Fields *dentry_ret = dentry; 2296c0a654dSJ. Bruce Fields *exp_ret = exp; 2306c0a654dSJ. Bruce Fields return 0; 2316c0a654dSJ. Bruce Fields 2326c0a654dSJ. Bruce Fields out_nfserr: 2336c0a654dSJ. Bruce Fields exp_put(exp); 2346c0a654dSJ. Bruce Fields return nfserrno(host_err); 2356c0a654dSJ. Bruce Fields } 2366c0a654dSJ. Bruce Fields 2376c0a654dSJ. Bruce Fields /* 2386c0a654dSJ. Bruce Fields * Look up one component of a pathname. 2396c0a654dSJ. Bruce Fields * N.B. After this call _both_ fhp and resfh need an fh_put 2406c0a654dSJ. Bruce Fields * 2416c0a654dSJ. Bruce Fields * If the lookup would cross a mountpoint, and the mounted filesystem 2426c0a654dSJ. Bruce Fields * is exported to the client with NFSEXP_NOHIDE, then the lookup is 2436c0a654dSJ. Bruce Fields * accepted as it stands and the mounted directory is 2446c0a654dSJ. Bruce Fields * returned. Otherwise the covered directory is returned. 2456c0a654dSJ. Bruce Fields * NOTE: this mountpoint crossing is not supported properly by all 2466c0a654dSJ. Bruce Fields * clients and is explicitly disallowed for NFSv3 2476c0a654dSJ. Bruce Fields * NeilBrown <neilb@cse.unsw.edu.au> 2486c0a654dSJ. Bruce Fields */ 2496c0a654dSJ. Bruce Fields __be32 2506c0a654dSJ. Bruce Fields nfsd_lookup(struct svc_rqst *rqstp, struct svc_fh *fhp, const char *name, 2515a022fc8SChuck Lever unsigned int len, struct svc_fh *resfh) 2526c0a654dSJ. Bruce Fields { 2536c0a654dSJ. Bruce Fields struct svc_export *exp; 2546c0a654dSJ. Bruce Fields struct dentry *dentry; 2556c0a654dSJ. Bruce Fields __be32 err; 2566c0a654dSJ. Bruce Fields 25729a78a3eSJ. Bruce Fields err = fh_verify(rqstp, fhp, S_IFDIR, NFSD_MAY_EXEC); 25829a78a3eSJ. Bruce Fields if (err) 25929a78a3eSJ. Bruce Fields return err; 2606c0a654dSJ. Bruce Fields err = nfsd_lookup_dentry(rqstp, fhp, name, len, &exp, &dentry); 2616c0a654dSJ. Bruce Fields if (err) 2626c0a654dSJ. Bruce Fields return err; 26332c1eb0cSAndy Adamson err = check_nfsd_access(exp, rqstp); 26432c1eb0cSAndy Adamson if (err) 26532c1eb0cSAndy Adamson goto out; 2661da177e4SLinus Torvalds /* 2671da177e4SLinus Torvalds * Note: we compose the file handle now, but as the 2681da177e4SLinus Torvalds * dentry may be negative, it may need to be updated. 2691da177e4SLinus Torvalds */ 2701da177e4SLinus Torvalds err = fh_compose(resfh, exp, dentry, fhp); 2712b0143b5SDavid Howells if (!err && d_really_is_negative(dentry)) 2721da177e4SLinus Torvalds err = nfserr_noent; 27332c1eb0cSAndy Adamson out: 2741da177e4SLinus Torvalds dput(dentry); 2751da177e4SLinus Torvalds exp_put(exp); 2761da177e4SLinus Torvalds return err; 2771da177e4SLinus Torvalds } 2781da177e4SLinus Torvalds 279f501912aSBen Myers /* 280f501912aSBen Myers * Commit metadata changes to stable storage. 281f501912aSBen Myers */ 282f501912aSBen Myers static int 28357f64034STrond Myklebust commit_inode_metadata(struct inode *inode) 284f501912aSBen Myers { 285f501912aSBen Myers const struct export_operations *export_ops = inode->i_sb->s_export_op; 286f501912aSBen Myers 287c3765016SChristoph Hellwig if (export_ops->commit_metadata) 288c3765016SChristoph Hellwig return export_ops->commit_metadata(inode); 289c3765016SChristoph Hellwig return sync_inode_metadata(inode, 1); 290f501912aSBen Myers } 2916c0a654dSJ. Bruce Fields 29257f64034STrond Myklebust static int 29357f64034STrond Myklebust commit_metadata(struct svc_fh *fhp) 29457f64034STrond Myklebust { 29557f64034STrond Myklebust struct inode *inode = d_inode(fhp->fh_dentry); 29657f64034STrond Myklebust 29757f64034STrond Myklebust if (!EX_ISSYNC(fhp->fh_export)) 29857f64034STrond Myklebust return 0; 29957f64034STrond Myklebust return commit_inode_metadata(inode); 30057f64034STrond Myklebust } 30157f64034STrond Myklebust 3021da177e4SLinus Torvalds /* 303818e5a22SChristoph Hellwig * Go over the attributes and take care of the small differences between 304818e5a22SChristoph Hellwig * NFS semantics and what Linux expects. 305818e5a22SChristoph Hellwig */ 306818e5a22SChristoph Hellwig static void 307818e5a22SChristoph Hellwig nfsd_sanitize_attrs(struct inode *inode, struct iattr *iap) 308818e5a22SChristoph Hellwig { 309818e5a22SChristoph Hellwig /* sanitize the mode change */ 310818e5a22SChristoph Hellwig if (iap->ia_valid & ATTR_MODE) { 311818e5a22SChristoph Hellwig iap->ia_mode &= S_IALLUGO; 312818e5a22SChristoph Hellwig iap->ia_mode |= (inode->i_mode & ~S_IALLUGO); 313818e5a22SChristoph Hellwig } 314818e5a22SChristoph Hellwig 315818e5a22SChristoph Hellwig /* Revoke setuid/setgid on chown */ 316818e5a22SChristoph Hellwig if (!S_ISDIR(inode->i_mode) && 317c4fa6d7cSStanislav Kholmanskikh ((iap->ia_valid & ATTR_UID) || (iap->ia_valid & ATTR_GID))) { 318818e5a22SChristoph Hellwig iap->ia_valid |= ATTR_KILL_PRIV; 319818e5a22SChristoph Hellwig if (iap->ia_valid & ATTR_MODE) { 320818e5a22SChristoph Hellwig /* we're setting mode too, just clear the s*id bits */ 321818e5a22SChristoph Hellwig iap->ia_mode &= ~S_ISUID; 322818e5a22SChristoph Hellwig if (iap->ia_mode & S_IXGRP) 323818e5a22SChristoph Hellwig iap->ia_mode &= ~S_ISGID; 324818e5a22SChristoph Hellwig } else { 325818e5a22SChristoph Hellwig /* set ATTR_KILL_* bits and let VFS handle it */ 326818e5a22SChristoph Hellwig iap->ia_valid |= (ATTR_KILL_SUID | ATTR_KILL_SGID); 327818e5a22SChristoph Hellwig } 328818e5a22SChristoph Hellwig } 329818e5a22SChristoph Hellwig } 330818e5a22SChristoph Hellwig 3310839ffb8SJ. Bruce Fields static __be32 3320839ffb8SJ. Bruce Fields nfsd_get_write_access(struct svc_rqst *rqstp, struct svc_fh *fhp, 3330839ffb8SJ. Bruce Fields struct iattr *iap) 3340839ffb8SJ. Bruce Fields { 3350839ffb8SJ. Bruce Fields struct inode *inode = d_inode(fhp->fh_dentry); 3360839ffb8SJ. Bruce Fields int host_err; 3370839ffb8SJ. Bruce Fields 3380839ffb8SJ. Bruce Fields if (iap->ia_size < inode->i_size) { 3390839ffb8SJ. Bruce Fields __be32 err; 3400839ffb8SJ. Bruce Fields 3410839ffb8SJ. Bruce Fields err = nfsd_permission(rqstp, fhp->fh_export, fhp->fh_dentry, 3420839ffb8SJ. Bruce Fields NFSD_MAY_TRUNC | NFSD_MAY_OWNER_OVERRIDE); 3430839ffb8SJ. Bruce Fields if (err) 3440839ffb8SJ. Bruce Fields return err; 3450839ffb8SJ. Bruce Fields } 3460839ffb8SJ. Bruce Fields 3470839ffb8SJ. Bruce Fields host_err = get_write_access(inode); 3480839ffb8SJ. Bruce Fields if (host_err) 3490839ffb8SJ. Bruce Fields goto out_nfserrno; 3500839ffb8SJ. Bruce Fields 3510839ffb8SJ. Bruce Fields host_err = locks_verify_truncate(inode, NULL, iap->ia_size); 3520839ffb8SJ. Bruce Fields if (host_err) 3530839ffb8SJ. Bruce Fields goto out_put_write_access; 3540839ffb8SJ. Bruce Fields return 0; 3550839ffb8SJ. Bruce Fields 3560839ffb8SJ. Bruce Fields out_put_write_access: 3570839ffb8SJ. Bruce Fields put_write_access(inode); 3580839ffb8SJ. Bruce Fields out_nfserrno: 3590839ffb8SJ. Bruce Fields return nfserrno(host_err); 3600839ffb8SJ. Bruce Fields } 3610839ffb8SJ. Bruce Fields 362818e5a22SChristoph Hellwig /* 363818e5a22SChristoph Hellwig * Set various file attributes. After this call fhp needs an fh_put. 3641da177e4SLinus Torvalds */ 3656264d69dSAl Viro __be32 3661da177e4SLinus Torvalds nfsd_setattr(struct svc_rqst *rqstp, struct svc_fh *fhp, struct iattr *iap, 3672a1aa489SArnd Bergmann int check_guard, time64_t guardtime) 3681da177e4SLinus Torvalds { 3691da177e4SLinus Torvalds struct dentry *dentry; 3701da177e4SLinus Torvalds struct inode *inode; 3718837abcaSMiklos Szeredi int accmode = NFSD_MAY_SATTR; 372175a4eb7SAl Viro umode_t ftype = 0; 3736264d69dSAl Viro __be32 err; 3746264d69dSAl Viro int host_err; 3759f67f189SJ. Bruce Fields bool get_write_count; 376758e99feSChristoph Hellwig bool size_change = (iap->ia_valid & ATTR_SIZE); 3771da177e4SLinus Torvalds 378255fbca6Szhengbin if (iap->ia_valid & ATTR_SIZE) { 3798837abcaSMiklos Szeredi accmode |= NFSD_MAY_WRITE|NFSD_MAY_OWNER_OVERRIDE; 3801da177e4SLinus Torvalds ftype = S_IFREG; 381255fbca6Szhengbin } 382255fbca6Szhengbin 383255fbca6Szhengbin /* 384255fbca6Szhengbin * If utimes(2) and friends are called with times not NULL, we should 385255fbca6Szhengbin * not set NFSD_MAY_WRITE bit. Otherwise fh_verify->nfsd_permission 386e977cc83SGeert Uytterhoeven * will return EACCES, when the caller's effective UID does not match 387255fbca6Szhengbin * the owner of the file, and the caller is not privileged. In this 388255fbca6Szhengbin * situation, we should return EPERM(notify_change will return this). 389255fbca6Szhengbin */ 390255fbca6Szhengbin if (iap->ia_valid & (ATTR_ATIME | ATTR_MTIME)) { 391255fbca6Szhengbin accmode |= NFSD_MAY_OWNER_OVERRIDE; 392255fbca6Szhengbin if (!(iap->ia_valid & (ATTR_ATIME_SET | ATTR_MTIME_SET))) 393255fbca6Szhengbin accmode |= NFSD_MAY_WRITE; 394255fbca6Szhengbin } 3951da177e4SLinus Torvalds 3969f67f189SJ. Bruce Fields /* Callers that do fh_verify should do the fh_want_write: */ 3979f67f189SJ. Bruce Fields get_write_count = !fhp->fh_dentry; 3989f67f189SJ. Bruce Fields 3991da177e4SLinus Torvalds /* Get inode */ 4001da177e4SLinus Torvalds err = fh_verify(rqstp, fhp, ftype, accmode); 40115b7a1b8SNeilBrown if (err) 402758e99feSChristoph Hellwig return err; 4039f67f189SJ. Bruce Fields if (get_write_count) { 4049f67f189SJ. Bruce Fields host_err = fh_want_write(fhp); 4059f67f189SJ. Bruce Fields if (host_err) 406758e99feSChristoph Hellwig goto out; 4079f67f189SJ. Bruce Fields } 4081da177e4SLinus Torvalds 4091da177e4SLinus Torvalds dentry = fhp->fh_dentry; 4102b0143b5SDavid Howells inode = d_inode(dentry); 4111da177e4SLinus Torvalds 41215b7a1b8SNeilBrown /* Ignore any mode updates on symlinks */ 41315b7a1b8SNeilBrown if (S_ISLNK(inode->i_mode)) 41415b7a1b8SNeilBrown iap->ia_valid &= ~ATTR_MODE; 41515b7a1b8SNeilBrown 41615b7a1b8SNeilBrown if (!iap->ia_valid) 417758e99feSChristoph Hellwig return 0; 41815b7a1b8SNeilBrown 419818e5a22SChristoph Hellwig nfsd_sanitize_attrs(inode, iap); 4201da177e4SLinus Torvalds 421758e99feSChristoph Hellwig if (check_guard && guardtime != inode->i_ctime.tv_sec) 422758e99feSChristoph Hellwig return nfserr_notsync; 423758e99feSChristoph Hellwig 424f0c63124SChristoph Hellwig /* 42541f53350SChristoph Hellwig * The size case is special, it changes the file in addition to the 426783112f7SChristoph Hellwig * attributes, and file systems don't expect it to be mixed with 427783112f7SChristoph Hellwig * "random" attribute changes. We thus split out the size change 428783112f7SChristoph Hellwig * into a separate call to ->setattr, and do the rest as a separate 429783112f7SChristoph Hellwig * setattr call. 430f0c63124SChristoph Hellwig */ 431758e99feSChristoph Hellwig if (size_change) { 4320839ffb8SJ. Bruce Fields err = nfsd_get_write_access(rqstp, fhp, iap); 4330839ffb8SJ. Bruce Fields if (err) 434758e99feSChristoph Hellwig return err; 435783112f7SChristoph Hellwig } 43641f53350SChristoph Hellwig 437783112f7SChristoph Hellwig fh_lock(fhp); 438783112f7SChristoph Hellwig if (size_change) { 43941f53350SChristoph Hellwig /* 4400839ffb8SJ. Bruce Fields * RFC5661, Section 18.30.4: 4410839ffb8SJ. Bruce Fields * Changing the size of a file with SETATTR indirectly 4420839ffb8SJ. Bruce Fields * changes the time_modify and change attributes. 4430839ffb8SJ. Bruce Fields * 4440839ffb8SJ. Bruce Fields * (and similar for the older RFCs) 44541f53350SChristoph Hellwig */ 446783112f7SChristoph Hellwig struct iattr size_attr = { 447783112f7SChristoph Hellwig .ia_valid = ATTR_SIZE | ATTR_CTIME | ATTR_MTIME, 448783112f7SChristoph Hellwig .ia_size = iap->ia_size, 449783112f7SChristoph Hellwig }; 450783112f7SChristoph Hellwig 4512f221d6fSChristian Brauner host_err = notify_change(&init_user_ns, dentry, &size_attr, NULL); 452783112f7SChristoph Hellwig if (host_err) 453783112f7SChristoph Hellwig goto out_unlock; 454783112f7SChristoph Hellwig iap->ia_valid &= ~ATTR_SIZE; 455783112f7SChristoph Hellwig 456783112f7SChristoph Hellwig /* 457783112f7SChristoph Hellwig * Avoid the additional setattr call below if the only other 458783112f7SChristoph Hellwig * attribute that the client sends is the mtime, as we update 459783112f7SChristoph Hellwig * it as part of the size change above. 460783112f7SChristoph Hellwig */ 461783112f7SChristoph Hellwig if ((iap->ia_valid & ~ATTR_MTIME) == 0) 462783112f7SChristoph Hellwig goto out_unlock; 4631da177e4SLinus Torvalds } 4641da177e4SLinus Torvalds 4651da177e4SLinus Torvalds iap->ia_valid |= ATTR_CTIME; 4662f221d6fSChristian Brauner host_err = notify_change(&init_user_ns, dentry, iap, NULL); 467987da479SChristoph Hellwig 468783112f7SChristoph Hellwig out_unlock: 469783112f7SChristoph Hellwig fh_unlock(fhp); 4700839ffb8SJ. Bruce Fields if (size_change) 4710839ffb8SJ. Bruce Fields put_write_access(inode); 4720839ffb8SJ. Bruce Fields out: 473758e99feSChristoph Hellwig if (!host_err) 474758e99feSChristoph Hellwig host_err = commit_metadata(fhp); 475758e99feSChristoph Hellwig return nfserrno(host_err); 4761da177e4SLinus Torvalds } 4771da177e4SLinus Torvalds 4785be196e5SChristoph Hellwig #if defined(CONFIG_NFSD_V4) 4799b4146e8SChuck Lever /* 4809b4146e8SChuck Lever * NFS junction information is stored in an extended attribute. 4819b4146e8SChuck Lever */ 4829b4146e8SChuck Lever #define NFSD_JUNCTION_XATTR_NAME XATTR_TRUSTED_PREFIX "junction.nfs" 4839b4146e8SChuck Lever 4849b4146e8SChuck Lever /** 4859b4146e8SChuck Lever * nfsd4_is_junction - Test if an object could be an NFS junction 4869b4146e8SChuck Lever * 4879b4146e8SChuck Lever * @dentry: object to test 4889b4146e8SChuck Lever * 4899b4146e8SChuck Lever * Returns 1 if "dentry" appears to contain NFS junction information. 4909b4146e8SChuck Lever * Otherwise 0 is returned. 4919b4146e8SChuck Lever */ 49211fcee02STrond Myklebust int nfsd4_is_junction(struct dentry *dentry) 49311fcee02STrond Myklebust { 4942b0143b5SDavid Howells struct inode *inode = d_inode(dentry); 49511fcee02STrond Myklebust 49611fcee02STrond Myklebust if (inode == NULL) 49711fcee02STrond Myklebust return 0; 49811fcee02STrond Myklebust if (inode->i_mode & S_IXUGO) 49911fcee02STrond Myklebust return 0; 50011fcee02STrond Myklebust if (!(inode->i_mode & S_ISVTX)) 50111fcee02STrond Myklebust return 0; 502c7c7a1a1STycho Andersen if (vfs_getxattr(&init_user_ns, dentry, NFSD_JUNCTION_XATTR_NAME, 503c7c7a1a1STycho Andersen NULL, 0) <= 0) 50411fcee02STrond Myklebust return 0; 50511fcee02STrond Myklebust return 1; 50611fcee02STrond Myklebust } 50718032ca0SDavid Quigley #ifdef CONFIG_NFSD_V4_SECURITY_LABEL 50818032ca0SDavid Quigley __be32 nfsd4_set_nfs4_label(struct svc_rqst *rqstp, struct svc_fh *fhp, 50918032ca0SDavid Quigley struct xdr_netobj *label) 51018032ca0SDavid Quigley { 51118032ca0SDavid Quigley __be32 error; 51218032ca0SDavid Quigley int host_error; 51318032ca0SDavid Quigley struct dentry *dentry; 51418032ca0SDavid Quigley 51518032ca0SDavid Quigley error = fh_verify(rqstp, fhp, 0 /* S_IFREG */, NFSD_MAY_SATTR); 51618032ca0SDavid Quigley if (error) 51718032ca0SDavid Quigley return error; 51818032ca0SDavid Quigley 51918032ca0SDavid Quigley dentry = fhp->fh_dentry; 52018032ca0SDavid Quigley 5215955102cSAl Viro inode_lock(d_inode(dentry)); 52218032ca0SDavid Quigley host_error = security_inode_setsecctx(dentry, label->data, label->len); 5235955102cSAl Viro inode_unlock(d_inode(dentry)); 52418032ca0SDavid Quigley return nfserrno(host_error); 52518032ca0SDavid Quigley } 52618032ca0SDavid Quigley #else 52718032ca0SDavid Quigley __be32 nfsd4_set_nfs4_label(struct svc_rqst *rqstp, struct svc_fh *fhp, 52818032ca0SDavid Quigley struct xdr_netobj *label) 52918032ca0SDavid Quigley { 53018032ca0SDavid Quigley return nfserr_notsupp; 53118032ca0SDavid Quigley } 53218032ca0SDavid Quigley #endif 53318032ca0SDavid Quigley 534b66ae6ddSTrond Myklebust __be32 nfsd4_clone_file_range(struct nfsd_file *nf_src, u64 src_pos, 535b66ae6ddSTrond Myklebust struct nfsd_file *nf_dst, u64 dst_pos, u64 count, bool sync) 536ffa0160aSChristoph Hellwig { 537b66ae6ddSTrond Myklebust struct file *src = nf_src->nf_file; 538b66ae6ddSTrond Myklebust struct file *dst = nf_dst->nf_file; 53942ec3d4cSDarrick J. Wong loff_t cloned; 5401b28d756STrond Myklebust __be32 ret = 0; 54142ec3d4cSDarrick J. Wong 5421b28d756STrond Myklebust down_write(&nf_dst->nf_rwsem); 543452ce659SDarrick J. Wong cloned = vfs_clone_file_range(src, src_pos, dst, dst_pos, count, 0); 5441b28d756STrond Myklebust if (cloned < 0) { 5451b28d756STrond Myklebust ret = nfserrno(cloned); 5461b28d756STrond Myklebust goto out_err; 5471b28d756STrond Myklebust } 5481b28d756STrond Myklebust if (count && cloned != count) { 5491b28d756STrond Myklebust ret = nfserrno(-EINVAL); 5501b28d756STrond Myklebust goto out_err; 5511b28d756STrond Myklebust } 552a25e3726STrond Myklebust if (sync) { 553a25e3726STrond Myklebust loff_t dst_end = count ? dst_pos + count - 1 : LLONG_MAX; 554a25e3726STrond Myklebust int status = vfs_fsync_range(dst, dst_pos, dst_end, 0); 55557f64034STrond Myklebust 55657f64034STrond Myklebust if (!status) 55757f64034STrond Myklebust status = commit_inode_metadata(file_inode(src)); 5581b28d756STrond Myklebust if (status < 0) { 5591b28d756STrond Myklebust nfsd_reset_boot_verifier(net_generic(nf_dst->nf_net, 5601b28d756STrond Myklebust nfsd_net_id)); 5611b28d756STrond Myklebust ret = nfserrno(status); 562a25e3726STrond Myklebust } 5631b28d756STrond Myklebust } 5641b28d756STrond Myklebust out_err: 5651b28d756STrond Myklebust up_write(&nf_dst->nf_rwsem); 5661b28d756STrond Myklebust return ret; 567ffa0160aSChristoph Hellwig } 568ffa0160aSChristoph Hellwig 56929ae7f9dSAnna Schumaker ssize_t nfsd_copy_file_range(struct file *src, u64 src_pos, struct file *dst, 57029ae7f9dSAnna Schumaker u64 dst_pos, u64 count) 57129ae7f9dSAnna Schumaker { 57229ae7f9dSAnna Schumaker 57329ae7f9dSAnna Schumaker /* 57429ae7f9dSAnna Schumaker * Limit copy to 4MB to prevent indefinitely blocking an nfsd 57529ae7f9dSAnna Schumaker * thread and client rpc slot. The choice of 4MB is somewhat 57629ae7f9dSAnna Schumaker * arbitrary. We might instead base this on r/wsize, or make it 57729ae7f9dSAnna Schumaker * tunable, or use a time instead of a byte limit, or implement 57829ae7f9dSAnna Schumaker * asynchronous copy. In theory a client could also recognize a 57929ae7f9dSAnna Schumaker * limit like this and pipeline multiple COPY requests. 58029ae7f9dSAnna Schumaker */ 58129ae7f9dSAnna Schumaker count = min_t(u64, count, 1 << 22); 58229ae7f9dSAnna Schumaker return vfs_copy_file_range(src, src_pos, dst, dst_pos, count, 0); 58329ae7f9dSAnna Schumaker } 58429ae7f9dSAnna Schumaker 58595d871f0SAnna Schumaker __be32 nfsd4_vfs_fallocate(struct svc_rqst *rqstp, struct svc_fh *fhp, 58695d871f0SAnna Schumaker struct file *file, loff_t offset, loff_t len, 58795d871f0SAnna Schumaker int flags) 58895d871f0SAnna Schumaker { 58995d871f0SAnna Schumaker int error; 59095d871f0SAnna Schumaker 59195d871f0SAnna Schumaker if (!S_ISREG(file_inode(file)->i_mode)) 59295d871f0SAnna Schumaker return nfserr_inval; 59395d871f0SAnna Schumaker 59495d871f0SAnna Schumaker error = vfs_fallocate(file, flags, offset, len); 59595d871f0SAnna Schumaker if (!error) 59695d871f0SAnna Schumaker error = commit_metadata(fhp); 59795d871f0SAnna Schumaker 59895d871f0SAnna Schumaker return nfserrno(error); 59995d871f0SAnna Schumaker } 6006a85d6c7SJ. Bruce Fields #endif /* defined(CONFIG_NFSD_V4) */ 6011da177e4SLinus Torvalds 6021da177e4SLinus Torvalds #ifdef CONFIG_NFSD_V3 6031da177e4SLinus Torvalds /* 6041da177e4SLinus Torvalds * Check server access rights to a file system object 6051da177e4SLinus Torvalds */ 6061da177e4SLinus Torvalds struct accessmap { 6071da177e4SLinus Torvalds u32 access; 6081da177e4SLinus Torvalds int how; 6091da177e4SLinus Torvalds }; 6101da177e4SLinus Torvalds static struct accessmap nfs3_regaccess[] = { 6118837abcaSMiklos Szeredi { NFS3_ACCESS_READ, NFSD_MAY_READ }, 6128837abcaSMiklos Szeredi { NFS3_ACCESS_EXECUTE, NFSD_MAY_EXEC }, 6138837abcaSMiklos Szeredi { NFS3_ACCESS_MODIFY, NFSD_MAY_WRITE|NFSD_MAY_TRUNC }, 6148837abcaSMiklos Szeredi { NFS3_ACCESS_EXTEND, NFSD_MAY_WRITE }, 6151da177e4SLinus Torvalds 616c11d7fd1SFrank van der Linden #ifdef CONFIG_NFSD_V4 617c11d7fd1SFrank van der Linden { NFS4_ACCESS_XAREAD, NFSD_MAY_READ }, 618c11d7fd1SFrank van der Linden { NFS4_ACCESS_XAWRITE, NFSD_MAY_WRITE }, 619c11d7fd1SFrank van der Linden { NFS4_ACCESS_XALIST, NFSD_MAY_READ }, 620c11d7fd1SFrank van der Linden #endif 621c11d7fd1SFrank van der Linden 6221da177e4SLinus Torvalds { 0, 0 } 6231da177e4SLinus Torvalds }; 6241da177e4SLinus Torvalds 6251da177e4SLinus Torvalds static struct accessmap nfs3_diraccess[] = { 6268837abcaSMiklos Szeredi { NFS3_ACCESS_READ, NFSD_MAY_READ }, 6278837abcaSMiklos Szeredi { NFS3_ACCESS_LOOKUP, NFSD_MAY_EXEC }, 6288837abcaSMiklos Szeredi { NFS3_ACCESS_MODIFY, NFSD_MAY_EXEC|NFSD_MAY_WRITE|NFSD_MAY_TRUNC}, 6298837abcaSMiklos Szeredi { NFS3_ACCESS_EXTEND, NFSD_MAY_EXEC|NFSD_MAY_WRITE }, 6308837abcaSMiklos Szeredi { NFS3_ACCESS_DELETE, NFSD_MAY_REMOVE }, 6311da177e4SLinus Torvalds 632c11d7fd1SFrank van der Linden #ifdef CONFIG_NFSD_V4 633c11d7fd1SFrank van der Linden { NFS4_ACCESS_XAREAD, NFSD_MAY_READ }, 634c11d7fd1SFrank van der Linden { NFS4_ACCESS_XAWRITE, NFSD_MAY_WRITE }, 635c11d7fd1SFrank van der Linden { NFS4_ACCESS_XALIST, NFSD_MAY_READ }, 636c11d7fd1SFrank van der Linden #endif 637c11d7fd1SFrank van der Linden 6381da177e4SLinus Torvalds { 0, 0 } 6391da177e4SLinus Torvalds }; 6401da177e4SLinus Torvalds 6411da177e4SLinus Torvalds static struct accessmap nfs3_anyaccess[] = { 6421da177e4SLinus Torvalds /* Some clients - Solaris 2.6 at least, make an access call 6431da177e4SLinus Torvalds * to the server to check for access for things like /dev/null 6441da177e4SLinus Torvalds * (which really, the server doesn't care about). So 6451da177e4SLinus Torvalds * We provide simple access checking for them, looking 6461da177e4SLinus Torvalds * mainly at mode bits, and we make sure to ignore read-only 6471da177e4SLinus Torvalds * filesystem checks 6481da177e4SLinus Torvalds */ 6498837abcaSMiklos Szeredi { NFS3_ACCESS_READ, NFSD_MAY_READ }, 6508837abcaSMiklos Szeredi { NFS3_ACCESS_EXECUTE, NFSD_MAY_EXEC }, 6518837abcaSMiklos Szeredi { NFS3_ACCESS_MODIFY, NFSD_MAY_WRITE|NFSD_MAY_LOCAL_ACCESS }, 6528837abcaSMiklos Szeredi { NFS3_ACCESS_EXTEND, NFSD_MAY_WRITE|NFSD_MAY_LOCAL_ACCESS }, 6531da177e4SLinus Torvalds 6541da177e4SLinus Torvalds { 0, 0 } 6551da177e4SLinus Torvalds }; 6561da177e4SLinus Torvalds 6576264d69dSAl Viro __be32 6581da177e4SLinus Torvalds nfsd_access(struct svc_rqst *rqstp, struct svc_fh *fhp, u32 *access, u32 *supported) 6591da177e4SLinus Torvalds { 6601da177e4SLinus Torvalds struct accessmap *map; 6611da177e4SLinus Torvalds struct svc_export *export; 6621da177e4SLinus Torvalds struct dentry *dentry; 6631da177e4SLinus Torvalds u32 query, result = 0, sresult = 0; 6646264d69dSAl Viro __be32 error; 6651da177e4SLinus Torvalds 6668837abcaSMiklos Szeredi error = fh_verify(rqstp, fhp, 0, NFSD_MAY_NOP); 6671da177e4SLinus Torvalds if (error) 6681da177e4SLinus Torvalds goto out; 6691da177e4SLinus Torvalds 6701da177e4SLinus Torvalds export = fhp->fh_export; 6711da177e4SLinus Torvalds dentry = fhp->fh_dentry; 6721da177e4SLinus Torvalds 673e36cb0b8SDavid Howells if (d_is_reg(dentry)) 6741da177e4SLinus Torvalds map = nfs3_regaccess; 675e36cb0b8SDavid Howells else if (d_is_dir(dentry)) 6761da177e4SLinus Torvalds map = nfs3_diraccess; 6771da177e4SLinus Torvalds else 6781da177e4SLinus Torvalds map = nfs3_anyaccess; 6791da177e4SLinus Torvalds 6801da177e4SLinus Torvalds 6811da177e4SLinus Torvalds query = *access; 6821da177e4SLinus Torvalds for (; map->access; map++) { 6831da177e4SLinus Torvalds if (map->access & query) { 6846264d69dSAl Viro __be32 err2; 6851da177e4SLinus Torvalds 6861da177e4SLinus Torvalds sresult |= map->access; 6871da177e4SLinus Torvalds 6880ec757dfSJ. Bruce Fields err2 = nfsd_permission(rqstp, export, dentry, map->how); 6891da177e4SLinus Torvalds switch (err2) { 6901da177e4SLinus Torvalds case nfs_ok: 6911da177e4SLinus Torvalds result |= map->access; 6921da177e4SLinus Torvalds break; 6931da177e4SLinus Torvalds 6941da177e4SLinus Torvalds /* the following error codes just mean the access was not allowed, 6951da177e4SLinus Torvalds * rather than an error occurred */ 6961da177e4SLinus Torvalds case nfserr_rofs: 6971da177e4SLinus Torvalds case nfserr_acces: 6981da177e4SLinus Torvalds case nfserr_perm: 6991da177e4SLinus Torvalds /* simply don't "or" in the access bit. */ 7001da177e4SLinus Torvalds break; 7011da177e4SLinus Torvalds default: 7021da177e4SLinus Torvalds error = err2; 7031da177e4SLinus Torvalds goto out; 7041da177e4SLinus Torvalds } 7051da177e4SLinus Torvalds } 7061da177e4SLinus Torvalds } 7071da177e4SLinus Torvalds *access = result; 7081da177e4SLinus Torvalds if (supported) 7091da177e4SLinus Torvalds *supported = sresult; 7101da177e4SLinus Torvalds 7111da177e4SLinus Torvalds out: 7121da177e4SLinus Torvalds return error; 7131da177e4SLinus Torvalds } 7141da177e4SLinus Torvalds #endif /* CONFIG_NFSD_V3 */ 7151da177e4SLinus Torvalds 71665294c1fSJeff Layton int nfsd_open_break_lease(struct inode *inode, int access) 717105f4622SJ. Bruce Fields { 718105f4622SJ. Bruce Fields unsigned int mode; 7191da177e4SLinus Torvalds 720105f4622SJ. Bruce Fields if (access & NFSD_MAY_NOT_BREAK_LEASE) 721105f4622SJ. Bruce Fields return 0; 722105f4622SJ. Bruce Fields mode = (access & NFSD_MAY_WRITE) ? O_WRONLY : O_RDONLY; 723105f4622SJ. Bruce Fields return break_lease(inode, mode | O_NONBLOCK); 724105f4622SJ. Bruce Fields } 7251da177e4SLinus Torvalds 7261da177e4SLinus Torvalds /* 7271da177e4SLinus Torvalds * Open an existing file or directory. 728999448a8SBernd Schubert * The may_flags argument indicates the type of open (read/write/lock) 729999448a8SBernd Schubert * and additional flags. 7301da177e4SLinus Torvalds * N.B. After this call fhp needs an fh_put 7311da177e4SLinus Torvalds */ 73265294c1fSJeff Layton static __be32 73365294c1fSJeff Layton __nfsd_open(struct svc_rqst *rqstp, struct svc_fh *fhp, umode_t type, 734999448a8SBernd Schubert int may_flags, struct file **filp) 7351da177e4SLinus Torvalds { 736765927b2SAl Viro struct path path; 7371da177e4SLinus Torvalds struct inode *inode; 7388519f994SKinglong Mee struct file *file; 7396264d69dSAl Viro int flags = O_RDONLY|O_LARGEFILE; 7406264d69dSAl Viro __be32 err; 74191885258SJeff Layton int host_err = 0; 7421da177e4SLinus Torvalds 743765927b2SAl Viro path.mnt = fhp->fh_export->ex_path.mnt; 744765927b2SAl Viro path.dentry = fhp->fh_dentry; 7452b0143b5SDavid Howells inode = d_inode(path.dentry); 7461da177e4SLinus Torvalds 7471da177e4SLinus Torvalds /* Disallow write access to files with the append-only bit set 7481da177e4SLinus Torvalds * or any access when mandatory locking enabled 7491da177e4SLinus Torvalds */ 7501da177e4SLinus Torvalds err = nfserr_perm; 751999448a8SBernd Schubert if (IS_APPEND(inode) && (may_flags & NFSD_MAY_WRITE)) 7521da177e4SLinus Torvalds goto out; 7535e7fc436SJ. Bruce Fields /* 7545e7fc436SJ. Bruce Fields * We must ignore files (but only files) which might have mandatory 7555e7fc436SJ. Bruce Fields * locks on them because there is no way to know if the accesser has 7565e7fc436SJ. Bruce Fields * the lock. 7575e7fc436SJ. Bruce Fields */ 7585e7fc436SJ. Bruce Fields if (S_ISREG((inode)->i_mode) && mandatory_lock(inode)) 7591da177e4SLinus Torvalds goto out; 7601da177e4SLinus Torvalds 7611da177e4SLinus Torvalds if (!inode->i_fop) 7621da177e4SLinus Torvalds goto out; 7631da177e4SLinus Torvalds 764999448a8SBernd Schubert host_err = nfsd_open_break_lease(inode, may_flags); 7656264d69dSAl Viro if (host_err) /* NOMEM or WOULDBLOCK */ 7661da177e4SLinus Torvalds goto out_nfserr; 7671da177e4SLinus Torvalds 768999448a8SBernd Schubert if (may_flags & NFSD_MAY_WRITE) { 769999448a8SBernd Schubert if (may_flags & NFSD_MAY_READ) 7709ecb6a08SJ. Bruce Fields flags = O_RDWR|O_LARGEFILE; 7719ecb6a08SJ. Bruce Fields else 7721da177e4SLinus Torvalds flags = O_WRONLY|O_LARGEFILE; 7731da177e4SLinus Torvalds } 774999448a8SBernd Schubert 7758519f994SKinglong Mee file = dentry_open(&path, flags, current_cred()); 7768519f994SKinglong Mee if (IS_ERR(file)) { 7778519f994SKinglong Mee host_err = PTR_ERR(file); 7788519f994SKinglong Mee goto out_nfserr; 77906effdbbSBernd Schubert } 78006effdbbSBernd Schubert 7816035a27bSAl Viro host_err = ima_file_check(file, may_flags); 7828519f994SKinglong Mee if (host_err) { 783fd891454SChristoph Hellwig fput(file); 7848519f994SKinglong Mee goto out_nfserr; 7858519f994SKinglong Mee } 7868519f994SKinglong Mee 7878519f994SKinglong Mee if (may_flags & NFSD_MAY_64BIT_COOKIE) 7888519f994SKinglong Mee file->f_mode |= FMODE_64BITHASH; 7898519f994SKinglong Mee else 7908519f994SKinglong Mee file->f_mode |= FMODE_32BITHASH; 7918519f994SKinglong Mee 7928519f994SKinglong Mee *filp = file; 7931da177e4SLinus Torvalds out_nfserr: 7946264d69dSAl Viro err = nfserrno(host_err); 7951da177e4SLinus Torvalds out: 79665294c1fSJeff Layton return err; 79765294c1fSJeff Layton } 79865294c1fSJeff Layton 79965294c1fSJeff Layton __be32 80065294c1fSJeff Layton nfsd_open(struct svc_rqst *rqstp, struct svc_fh *fhp, umode_t type, 80165294c1fSJeff Layton int may_flags, struct file **filp) 80265294c1fSJeff Layton { 80365294c1fSJeff Layton __be32 err; 80465294c1fSJeff Layton 80565294c1fSJeff Layton validate_process_creds(); 80665294c1fSJeff Layton /* 80765294c1fSJeff Layton * If we get here, then the client has already done an "open", 80865294c1fSJeff Layton * and (hopefully) checked permission - so allow OWNER_OVERRIDE 80965294c1fSJeff Layton * in case a chmod has now revoked permission. 81065294c1fSJeff Layton * 81165294c1fSJeff Layton * Arguably we should also allow the owner override for 81265294c1fSJeff Layton * directories, but we never have and it doesn't seem to have 81365294c1fSJeff Layton * caused anyone a problem. If we were to change this, note 81465294c1fSJeff Layton * also that our filldir callbacks would need a variant of 81565294c1fSJeff Layton * lookup_one_len that doesn't check permissions. 81665294c1fSJeff Layton */ 81765294c1fSJeff Layton if (type == S_IFREG) 81865294c1fSJeff Layton may_flags |= NFSD_MAY_OWNER_OVERRIDE; 81965294c1fSJeff Layton err = fh_verify(rqstp, fhp, type, may_flags); 82065294c1fSJeff Layton if (!err) 82165294c1fSJeff Layton err = __nfsd_open(rqstp, fhp, type, may_flags, filp); 822e0e81739SDavid Howells validate_process_creds(); 8231da177e4SLinus Torvalds return err; 8241da177e4SLinus Torvalds } 8251da177e4SLinus Torvalds 82665294c1fSJeff Layton __be32 82765294c1fSJeff Layton nfsd_open_verified(struct svc_rqst *rqstp, struct svc_fh *fhp, umode_t type, 82865294c1fSJeff Layton int may_flags, struct file **filp) 82965294c1fSJeff Layton { 83065294c1fSJeff Layton __be32 err; 83165294c1fSJeff Layton 83265294c1fSJeff Layton validate_process_creds(); 83365294c1fSJeff Layton err = __nfsd_open(rqstp, fhp, type, may_flags, filp); 83465294c1fSJeff Layton validate_process_creds(); 83565294c1fSJeff Layton return err; 83665294c1fSJeff Layton } 83765294c1fSJeff Layton 8381da177e4SLinus Torvalds /* 839cf8208d0SJens Axboe * Grab and keep cached pages associated with a file in the svc_rqst 840cf8208d0SJens Axboe * so that they can be passed to the network sendmsg/sendpage routines 841cf8208d0SJens Axboe * directly. They will be released after the sending has completed. 8421da177e4SLinus Torvalds */ 8431da177e4SLinus Torvalds static int 844cf8208d0SJens Axboe nfsd_splice_actor(struct pipe_inode_info *pipe, struct pipe_buffer *buf, 845cf8208d0SJens Axboe struct splice_desc *sd) 8461da177e4SLinus Torvalds { 847cf8208d0SJens Axboe struct svc_rqst *rqstp = sd->u.data; 848afc59400SJ. Bruce Fields struct page **pp = rqstp->rq_next_page; 849cf8208d0SJens Axboe struct page *page = buf->page; 8501da177e4SLinus Torvalds 8511da177e4SLinus Torvalds if (rqstp->rq_res.page_len == 0) { 8521da177e4SLinus Torvalds get_page(page); 853afc59400SJ. Bruce Fields put_page(*rqstp->rq_next_page); 854afc59400SJ. Bruce Fields *(rqstp->rq_next_page++) = page; 855cf8208d0SJens Axboe rqstp->rq_res.page_base = buf->offset; 85644524359SNeilBrown } else if (page != pp[-1]) { 8571da177e4SLinus Torvalds get_page(page); 858afc59400SJ. Bruce Fields if (*rqstp->rq_next_page) 859afc59400SJ. Bruce Fields put_page(*rqstp->rq_next_page); 860afc59400SJ. Bruce Fields *(rqstp->rq_next_page++) = page; 861*c7e0b781SChuck Lever } 862*c7e0b781SChuck Lever rqstp->rq_res.page_len += sd->len; 8631da177e4SLinus Torvalds 864*c7e0b781SChuck Lever return sd->len; 8651da177e4SLinus Torvalds } 8661da177e4SLinus Torvalds 867cf8208d0SJens Axboe static int nfsd_direct_splice_actor(struct pipe_inode_info *pipe, 868cf8208d0SJens Axboe struct splice_desc *sd) 869cf8208d0SJens Axboe { 870cf8208d0SJens Axboe return __splice_from_pipe(pipe, sd, nfsd_splice_actor); 871cf8208d0SJens Axboe } 872cf8208d0SJens Axboe 87383a63072STrond Myklebust static u32 nfsd_eof_on_read(struct file *file, loff_t offset, ssize_t len, 87483a63072STrond Myklebust size_t expected) 87583a63072STrond Myklebust { 87683a63072STrond Myklebust if (expected != 0 && len == 0) 87783a63072STrond Myklebust return 1; 87883a63072STrond Myklebust if (offset+len >= i_size_read(file_inode(file))) 87983a63072STrond Myklebust return 1; 88083a63072STrond Myklebust return 0; 88183a63072STrond Myklebust } 88283a63072STrond Myklebust 88387c5942eSChuck Lever static __be32 nfsd_finish_read(struct svc_rqst *rqstp, struct svc_fh *fhp, 88487c5942eSChuck Lever struct file *file, loff_t offset, 88583a63072STrond Myklebust unsigned long *count, u32 *eof, ssize_t host_err) 8861da177e4SLinus Torvalds { 887dc97618dSJ. Bruce Fields if (host_err >= 0) { 88820ad856eSAmir Goldstein nfsd_stats_io_read_add(fhp->fh_export, host_err); 88983a63072STrond Myklebust *eof = nfsd_eof_on_read(file, offset, host_err, *count); 890dc97618dSJ. Bruce Fields *count = host_err; 891dc97618dSJ. Bruce Fields fsnotify_access(file); 89287c5942eSChuck Lever trace_nfsd_read_io_done(rqstp, fhp, offset, *count); 893dc97618dSJ. Bruce Fields return 0; 89487c5942eSChuck Lever } else { 89587c5942eSChuck Lever trace_nfsd_read_err(rqstp, fhp, offset, host_err); 896dc97618dSJ. Bruce Fields return nfserrno(host_err); 897dc97618dSJ. Bruce Fields } 89887c5942eSChuck Lever } 8991da177e4SLinus Torvalds 90087c5942eSChuck Lever __be32 nfsd_splice_read(struct svc_rqst *rqstp, struct svc_fh *fhp, 90183a63072STrond Myklebust struct file *file, loff_t offset, unsigned long *count, 90283a63072STrond Myklebust u32 *eof) 903dc97618dSJ. Bruce Fields { 904cf8208d0SJens Axboe struct splice_desc sd = { 905cf8208d0SJens Axboe .len = 0, 906cf8208d0SJens Axboe .total_len = *count, 907cf8208d0SJens Axboe .pos = offset, 908cf8208d0SJens Axboe .u.data = rqstp, 909cf8208d0SJens Axboe }; 91083a63072STrond Myklebust ssize_t host_err; 911cf8208d0SJens Axboe 91287c5942eSChuck Lever trace_nfsd_read_splice(rqstp, fhp, offset, *count); 913afc59400SJ. Bruce Fields rqstp->rq_next_page = rqstp->rq_respages + 1; 914cf8208d0SJens Axboe host_err = splice_direct_to_actor(file, &sd, nfsd_direct_splice_actor); 91583a63072STrond Myklebust return nfsd_finish_read(rqstp, fhp, file, offset, count, eof, host_err); 916dc97618dSJ. Bruce Fields } 917dc97618dSJ. Bruce Fields 91887c5942eSChuck Lever __be32 nfsd_readv(struct svc_rqst *rqstp, struct svc_fh *fhp, 91987c5942eSChuck Lever struct file *file, loff_t offset, 92083a63072STrond Myklebust struct kvec *vec, int vlen, unsigned long *count, 92183a63072STrond Myklebust u32 *eof) 922dc97618dSJ. Bruce Fields { 92373da852eSChristoph Hellwig struct iov_iter iter; 92483a63072STrond Myklebust loff_t ppos = offset; 92583a63072STrond Myklebust ssize_t host_err; 926dc97618dSJ. Bruce Fields 92787c5942eSChuck Lever trace_nfsd_read_vector(rqstp, fhp, offset, *count); 928aa563d7bSDavid Howells iov_iter_kvec(&iter, READ, vec, vlen, *count); 92983a63072STrond Myklebust host_err = vfs_iter_read(file, &iter, &ppos, 0); 93083a63072STrond Myklebust return nfsd_finish_read(rqstp, fhp, file, offset, count, eof, host_err); 9311da177e4SLinus Torvalds } 9321da177e4SLinus Torvalds 933d911df7bSJ. Bruce Fields /* 934d911df7bSJ. Bruce Fields * Gathered writes: If another process is currently writing to the file, 935d911df7bSJ. Bruce Fields * there's a high chance this is another nfsd (triggered by a bulk write 936d911df7bSJ. Bruce Fields * from a client's biod). Rather than syncing the file with each write 937d911df7bSJ. Bruce Fields * request, we sleep for 10 msec. 938d911df7bSJ. Bruce Fields * 939d911df7bSJ. Bruce Fields * I don't know if this roughly approximates C. Juszak's idea of 940d911df7bSJ. Bruce Fields * gathered writes, but it's a nice and simple solution (IMHO), and it 941d911df7bSJ. Bruce Fields * seems to work:-) 942d911df7bSJ. Bruce Fields * 943d911df7bSJ. Bruce Fields * Note: we do this only in the NFSv2 case, since v3 and higher have a 944d911df7bSJ. Bruce Fields * better tool (separate unstable writes and commits) for solving this 945d911df7bSJ. Bruce Fields * problem. 946d911df7bSJ. Bruce Fields */ 947d911df7bSJ. Bruce Fields static int wait_for_concurrent_writes(struct file *file) 948d911df7bSJ. Bruce Fields { 949496ad9aaSAl Viro struct inode *inode = file_inode(file); 950d911df7bSJ. Bruce Fields static ino_t last_ino; 951d911df7bSJ. Bruce Fields static dev_t last_dev; 952d911df7bSJ. Bruce Fields int err = 0; 953d911df7bSJ. Bruce Fields 954d911df7bSJ. Bruce Fields if (atomic_read(&inode->i_writecount) > 1 955d911df7bSJ. Bruce Fields || (last_ino == inode->i_ino && last_dev == inode->i_sb->s_dev)) { 956d911df7bSJ. Bruce Fields dprintk("nfsd: write defer %d\n", task_pid_nr(current)); 957d911df7bSJ. Bruce Fields msleep(10); 958d911df7bSJ. Bruce Fields dprintk("nfsd: write resume %d\n", task_pid_nr(current)); 959d911df7bSJ. Bruce Fields } 960d911df7bSJ. Bruce Fields 961d911df7bSJ. Bruce Fields if (inode->i_state & I_DIRTY) { 962d911df7bSJ. Bruce Fields dprintk("nfsd: write sync %d\n", task_pid_nr(current)); 9638018ab05SChristoph Hellwig err = vfs_fsync(file, 0); 964d911df7bSJ. Bruce Fields } 965d911df7bSJ. Bruce Fields last_ino = inode->i_ino; 966d911df7bSJ. Bruce Fields last_dev = inode->i_sb->s_dev; 967d911df7bSJ. Bruce Fields return err; 968d911df7bSJ. Bruce Fields } 969d911df7bSJ. Bruce Fields 970af90f707SChristoph Hellwig __be32 97116f8f894STrond Myklebust nfsd_vfs_write(struct svc_rqst *rqstp, struct svc_fh *fhp, struct nfsd_file *nf, 9721da177e4SLinus Torvalds loff_t offset, struct kvec *vec, int vlen, 97319e0663fSTrond Myklebust unsigned long *cnt, int stable, 97419e0663fSTrond Myklebust __be32 *verf) 9751da177e4SLinus Torvalds { 97616f8f894STrond Myklebust struct file *file = nf->nf_file; 97701cbf385STrond Myklebust struct super_block *sb = file_inode(file)->i_sb; 9781da177e4SLinus Torvalds struct svc_export *exp; 97973da852eSChristoph Hellwig struct iov_iter iter; 980d890be15SChuck Lever __be32 nfserr; 9816264d69dSAl Viro int host_err; 98248e03bc5STrond Myklebust int use_wgather; 983e49dbbf3SKent Overstreet loff_t pos = offset; 98401cbf385STrond Myklebust unsigned long exp_op_flags = 0; 9858658452eSNeilBrown unsigned int pflags = current->flags; 986ddef7ed2SChristoph Hellwig rwf_t flags = 0; 98701cbf385STrond Myklebust bool restore_flags = false; 9888658452eSNeilBrown 989d890be15SChuck Lever trace_nfsd_write_opened(rqstp, fhp, offset, *cnt); 990d890be15SChuck Lever 99101cbf385STrond Myklebust if (sb->s_export_op) 99201cbf385STrond Myklebust exp_op_flags = sb->s_export_op->flags; 99301cbf385STrond Myklebust 99401cbf385STrond Myklebust if (test_bit(RQ_LOCAL, &rqstp->rq_flags) && 99501cbf385STrond Myklebust !(exp_op_flags & EXPORT_OP_REMOTE_FS)) { 9968658452eSNeilBrown /* 997a37b0715SNeilBrown * We want throttling in balance_dirty_pages() 998a37b0715SNeilBrown * and shrink_inactive_list() to only consider 999a37b0715SNeilBrown * the backingdev we are writing to, so that nfs to 10008658452eSNeilBrown * localhost doesn't cause nfsd to lock up due to all 10018658452eSNeilBrown * the client's dirty pages or its congested queue. 10028658452eSNeilBrown */ 1003a37b0715SNeilBrown current->flags |= PF_LOCAL_THROTTLE; 100401cbf385STrond Myklebust restore_flags = true; 100501cbf385STrond Myklebust } 10061da177e4SLinus Torvalds 10071da177e4SLinus Torvalds exp = fhp->fh_export; 100848e03bc5STrond Myklebust use_wgather = (rqstp->rq_vers == 2) && EX_WGATHER(exp); 10091da177e4SLinus Torvalds 10101da177e4SLinus Torvalds if (!EX_ISSYNC(exp)) 101154bbb7d2SKinglong Mee stable = NFS_UNSTABLE; 10121da177e4SLinus Torvalds 101324368aadSChristoph Hellwig if (stable && !use_wgather) 101424368aadSChristoph Hellwig flags |= RWF_SYNC; 101524368aadSChristoph Hellwig 1016aa563d7bSDavid Howells iov_iter_kvec(&iter, WRITE, vec, vlen, *cnt); 10175011af4cSTrond Myklebust if (flags & RWF_SYNC) { 10185011af4cSTrond Myklebust down_write(&nf->nf_rwsem); 101973da852eSChristoph Hellwig host_err = vfs_iter_write(file, &iter, &pos, flags); 1020e4636d53SJ. Bruce Fields if (host_err < 0) 10215011af4cSTrond Myklebust nfsd_reset_boot_verifier(net_generic(SVC_NET(rqstp), 10225011af4cSTrond Myklebust nfsd_net_id)); 10235011af4cSTrond Myklebust up_write(&nf->nf_rwsem); 10245011af4cSTrond Myklebust } else { 10255011af4cSTrond Myklebust down_read(&nf->nf_rwsem); 102619e0663fSTrond Myklebust if (verf) 102719e0663fSTrond Myklebust nfsd_copy_boot_verifier(verf, 102819e0663fSTrond Myklebust net_generic(SVC_NET(rqstp), 102919e0663fSTrond Myklebust nfsd_net_id)); 10305011af4cSTrond Myklebust host_err = vfs_iter_write(file, &iter, &pos, flags); 10315011af4cSTrond Myklebust up_read(&nf->nf_rwsem); 10325011af4cSTrond Myklebust } 10337bf94c6bSTrond Myklebust if (host_err < 0) { 10347bf94c6bSTrond Myklebust nfsd_reset_boot_verifier(net_generic(SVC_NET(rqstp), 10357bf94c6bSTrond Myklebust nfsd_net_id)); 1036e4636d53SJ. Bruce Fields goto out_nfserr; 10377bf94c6bSTrond Myklebust } 103809a80f2aSTrond Myklebust *cnt = host_err; 103920ad856eSAmir Goldstein nfsd_stats_io_write_add(exp, *cnt); 10402a12a9d7SEric Paris fsnotify_modify(file); 10411da177e4SLinus Torvalds 1042bbf2f098STrond Myklebust if (stable && use_wgather) { 1043d911df7bSJ. Bruce Fields host_err = wait_for_concurrent_writes(file); 1044bbf2f098STrond Myklebust if (host_err < 0) 1045bbf2f098STrond Myklebust nfsd_reset_boot_verifier(net_generic(SVC_NET(rqstp), 1046bbf2f098STrond Myklebust nfsd_net_id)); 1047bbf2f098STrond Myklebust } 10481da177e4SLinus Torvalds 1049e4636d53SJ. Bruce Fields out_nfserr: 1050d890be15SChuck Lever if (host_err >= 0) { 1051d890be15SChuck Lever trace_nfsd_write_io_done(rqstp, fhp, offset, *cnt); 1052d890be15SChuck Lever nfserr = nfs_ok; 1053d890be15SChuck Lever } else { 1054d890be15SChuck Lever trace_nfsd_write_err(rqstp, fhp, offset, host_err); 1055d890be15SChuck Lever nfserr = nfserrno(host_err); 1056d890be15SChuck Lever } 105701cbf385STrond Myklebust if (restore_flags) 1058a37b0715SNeilBrown current_restore_flags(pflags, PF_LOCAL_THROTTLE); 1059d890be15SChuck Lever return nfserr; 10601da177e4SLinus Torvalds } 10611da177e4SLinus Torvalds 1062dc97618dSJ. Bruce Fields /* 1063dc97618dSJ. Bruce Fields * Read data from a file. count must contain the requested read count 1064dc97618dSJ. Bruce Fields * on entry. On return, *count contains the number of bytes actually read. 1065dc97618dSJ. Bruce Fields * N.B. After this call fhp needs an fh_put 1066dc97618dSJ. Bruce Fields */ 1067dc97618dSJ. Bruce Fields __be32 nfsd_read(struct svc_rqst *rqstp, struct svc_fh *fhp, 106883a63072STrond Myklebust loff_t offset, struct kvec *vec, int vlen, unsigned long *count, 106983a63072STrond Myklebust u32 *eof) 1070dc97618dSJ. Bruce Fields { 107148cd7b51SJeff Layton struct nfsd_file *nf; 1072dc97618dSJ. Bruce Fields struct file *file; 1073dc97618dSJ. Bruce Fields __be32 err; 1074dc97618dSJ. Bruce Fields 1075f394b62bSChuck Lever trace_nfsd_read_start(rqstp, fhp, offset, *count); 107648cd7b51SJeff Layton err = nfsd_file_acquire(rqstp, fhp, NFSD_MAY_READ, &nf); 1077dc97618dSJ. Bruce Fields if (err) 1078dc97618dSJ. Bruce Fields return err; 1079dc97618dSJ. Bruce Fields 108048cd7b51SJeff Layton file = nf->nf_file; 1081a4058c5bSChristoph Hellwig if (file->f_op->splice_read && test_bit(RQ_SPLICE_OK, &rqstp->rq_flags)) 108283a63072STrond Myklebust err = nfsd_splice_read(rqstp, fhp, file, offset, count, eof); 1083a4058c5bSChristoph Hellwig else 108483a63072STrond Myklebust err = nfsd_readv(rqstp, fhp, file, offset, vec, vlen, count, eof); 10856e8b50d1SJeff Layton 108648cd7b51SJeff Layton nfsd_file_put(nf); 1087dc97618dSJ. Bruce Fields 1088f394b62bSChuck Lever trace_nfsd_read_done(rqstp, fhp, offset, *count); 10896e8b50d1SJeff Layton 1090fa0a2126SJ. Bruce Fields return err; 1091fa0a2126SJ. Bruce Fields } 1092fa0a2126SJ. Bruce Fields 10931da177e4SLinus Torvalds /* 10941da177e4SLinus Torvalds * Write data to a file. 10951da177e4SLinus Torvalds * The stable flag requests synchronous writes. 10961da177e4SLinus Torvalds * N.B. After this call fhp needs an fh_put 10971da177e4SLinus Torvalds */ 10986264d69dSAl Viro __be32 109952e380e0SKinglong Mee nfsd_write(struct svc_rqst *rqstp, struct svc_fh *fhp, loff_t offset, 110019e0663fSTrond Myklebust struct kvec *vec, int vlen, unsigned long *cnt, int stable, 110119e0663fSTrond Myklebust __be32 *verf) 11021da177e4SLinus Torvalds { 1103b4935239SJeff Layton struct nfsd_file *nf; 1104b4935239SJeff Layton __be32 err; 11051da177e4SLinus Torvalds 1106f394b62bSChuck Lever trace_nfsd_write_start(rqstp, fhp, offset, *cnt); 11076e8b50d1SJeff Layton 1108b4935239SJeff Layton err = nfsd_file_acquire(rqstp, fhp, NFSD_MAY_WRITE, &nf); 11091da177e4SLinus Torvalds if (err) 11101da177e4SLinus Torvalds goto out; 11111da177e4SLinus Torvalds 111216f8f894STrond Myklebust err = nfsd_vfs_write(rqstp, fhp, nf, offset, vec, 111319e0663fSTrond Myklebust vlen, cnt, stable, verf); 1114b4935239SJeff Layton nfsd_file_put(nf); 11151da177e4SLinus Torvalds out: 1116f394b62bSChuck Lever trace_nfsd_write_done(rqstp, fhp, offset, *cnt); 11171da177e4SLinus Torvalds return err; 11181da177e4SLinus Torvalds } 11191da177e4SLinus Torvalds 11201da177e4SLinus Torvalds #ifdef CONFIG_NFSD_V3 1121474bc334STrond Myklebust static int 1122474bc334STrond Myklebust nfsd_filemap_write_and_wait_range(struct nfsd_file *nf, loff_t offset, 1123474bc334STrond Myklebust loff_t end) 1124474bc334STrond Myklebust { 1125474bc334STrond Myklebust struct address_space *mapping = nf->nf_file->f_mapping; 1126474bc334STrond Myklebust int ret = filemap_fdatawrite_range(mapping, offset, end); 1127474bc334STrond Myklebust 1128474bc334STrond Myklebust if (ret) 1129474bc334STrond Myklebust return ret; 1130474bc334STrond Myklebust filemap_fdatawait_range_keep_errors(mapping, offset, end); 1131474bc334STrond Myklebust return 0; 1132474bc334STrond Myklebust } 1133474bc334STrond Myklebust 11341da177e4SLinus Torvalds /* 11351da177e4SLinus Torvalds * Commit all pending writes to stable storage. 1136aa696a6fSTrond Myklebust * 1137aa696a6fSTrond Myklebust * Note: we only guarantee that data that lies within the range specified 1138aa696a6fSTrond Myklebust * by the 'offset' and 'count' parameters will be synced. 11391da177e4SLinus Torvalds * 11401da177e4SLinus Torvalds * Unfortunately we cannot lock the file to make sure we return full WCC 11411da177e4SLinus Torvalds * data to the client, as locking happens lower down in the filesystem. 11421da177e4SLinus Torvalds */ 11436264d69dSAl Viro __be32 11441da177e4SLinus Torvalds nfsd_commit(struct svc_rqst *rqstp, struct svc_fh *fhp, 1145524ff1afSTrond Myklebust loff_t offset, unsigned long count, __be32 *verf) 11461da177e4SLinus Torvalds { 11475920afa3SJeff Layton struct nfsd_file *nf; 1148aa696a6fSTrond Myklebust loff_t end = LLONG_MAX; 1149aa696a6fSTrond Myklebust __be32 err = nfserr_inval; 11501da177e4SLinus Torvalds 1151aa696a6fSTrond Myklebust if (offset < 0) 1152aa696a6fSTrond Myklebust goto out; 1153aa696a6fSTrond Myklebust if (count != 0) { 1154aa696a6fSTrond Myklebust end = offset + (loff_t)count - 1; 1155aa696a6fSTrond Myklebust if (end < offset) 1156aa696a6fSTrond Myklebust goto out; 1157aa696a6fSTrond Myklebust } 11581da177e4SLinus Torvalds 11595920afa3SJeff Layton err = nfsd_file_acquire(rqstp, fhp, 11605920afa3SJeff Layton NFSD_MAY_WRITE|NFSD_MAY_NOT_BREAK_LEASE, &nf); 11618837abcaSMiklos Szeredi if (err) 1162aa696a6fSTrond Myklebust goto out; 11631da177e4SLinus Torvalds if (EX_ISSYNC(fhp->fh_export)) { 1164474bc334STrond Myklebust int err2 = nfsd_filemap_write_and_wait_range(nf, offset, end); 1165aa696a6fSTrond Myklebust 11665011af4cSTrond Myklebust down_write(&nf->nf_rwsem); 1167474bc334STrond Myklebust if (!err2) 11685011af4cSTrond Myklebust err2 = vfs_fsync_range(nf->nf_file, offset, end, 0); 1169bbf2f098STrond Myklebust switch (err2) { 1170bbf2f098STrond Myklebust case 0: 1171524ff1afSTrond Myklebust nfsd_copy_boot_verifier(verf, net_generic(nf->nf_net, 1172524ff1afSTrond Myklebust nfsd_net_id)); 1173bbf2f098STrond Myklebust break; 1174bbf2f098STrond Myklebust case -EINVAL: 11751da177e4SLinus Torvalds err = nfserr_notsupp; 1176bbf2f098STrond Myklebust break; 1177bbf2f098STrond Myklebust default: 1178bbf2f098STrond Myklebust err = nfserrno(err2); 1179bbf2f098STrond Myklebust nfsd_reset_boot_verifier(net_generic(nf->nf_net, 1180bbf2f098STrond Myklebust nfsd_net_id)); 1181bbf2f098STrond Myklebust } 11825011af4cSTrond Myklebust up_write(&nf->nf_rwsem); 1183524ff1afSTrond Myklebust } else 1184524ff1afSTrond Myklebust nfsd_copy_boot_verifier(verf, net_generic(nf->nf_net, 1185524ff1afSTrond Myklebust nfsd_net_id)); 11861da177e4SLinus Torvalds 11875920afa3SJeff Layton nfsd_file_put(nf); 1188aa696a6fSTrond Myklebust out: 11891da177e4SLinus Torvalds return err; 11901da177e4SLinus Torvalds } 11911da177e4SLinus Torvalds #endif /* CONFIG_NFSD_V3 */ 11921da177e4SLinus Torvalds 1193f2b0dee2SAdrian Bunk static __be32 11945c002b3bSJ. Bruce Fields nfsd_create_setattr(struct svc_rqst *rqstp, struct svc_fh *resfhp, 11955c002b3bSJ. Bruce Fields struct iattr *iap) 11965c002b3bSJ. Bruce Fields { 11975c002b3bSJ. Bruce Fields /* 11985c002b3bSJ. Bruce Fields * Mode has already been set earlier in create: 11995c002b3bSJ. Bruce Fields */ 12005c002b3bSJ. Bruce Fields iap->ia_valid &= ~ATTR_MODE; 12015c002b3bSJ. Bruce Fields /* 12025c002b3bSJ. Bruce Fields * Setting uid/gid works only for root. Irix appears to 12035c002b3bSJ. Bruce Fields * send along the gid on create when it tries to implement 12045c002b3bSJ. Bruce Fields * setgid directories via NFS: 12055c002b3bSJ. Bruce Fields */ 12066fab8779SEric W. Biederman if (!uid_eq(current_fsuid(), GLOBAL_ROOT_UID)) 12075c002b3bSJ. Bruce Fields iap->ia_valid &= ~(ATTR_UID|ATTR_GID); 12085c002b3bSJ. Bruce Fields if (iap->ia_valid) 12092a1aa489SArnd Bergmann return nfsd_setattr(rqstp, resfhp, iap, 0, (time64_t)0); 12100f3a24b4STrond Myklebust /* Callers expect file metadata to be committed here */ 1211722b620dSJeff Layton return nfserrno(commit_metadata(resfhp)); 12125c002b3bSJ. Bruce Fields } 12135c002b3bSJ. Bruce Fields 12144ac35c2fSwengang wang /* HPUX client sometimes creates a file in mode 000, and sets size to 0. 12154ac35c2fSwengang wang * setting size to 0 may fail for some specific file systems by the permission 12164ac35c2fSwengang wang * checking which requires WRITE permission but the mode is 000. 12174ac35c2fSwengang wang * we ignore the resizing(to 0) on the just new created file, since the size is 12184ac35c2fSwengang wang * 0 after file created. 12194ac35c2fSwengang wang * 12204ac35c2fSwengang wang * call this only after vfs_create() is called. 12214ac35c2fSwengang wang * */ 12224ac35c2fSwengang wang static void 12234ac35c2fSwengang wang nfsd_check_ignore_resizing(struct iattr *iap) 12244ac35c2fSwengang wang { 12254ac35c2fSwengang wang if ((iap->ia_valid & ATTR_SIZE) && (iap->ia_size == 0)) 12264ac35c2fSwengang wang iap->ia_valid &= ~ATTR_SIZE; 12274ac35c2fSwengang wang } 12284ac35c2fSwengang wang 1229b44061d0SJ. Bruce Fields /* The parent directory should already be locked: */ 12306264d69dSAl Viro __be32 1231b44061d0SJ. Bruce Fields nfsd_create_locked(struct svc_rqst *rqstp, struct svc_fh *fhp, 12321da177e4SLinus Torvalds char *fname, int flen, struct iattr *iap, 12331da177e4SLinus Torvalds int type, dev_t rdev, struct svc_fh *resfhp) 12341da177e4SLinus Torvalds { 12352b118859SDan Carpenter struct dentry *dentry, *dchild; 12361da177e4SLinus Torvalds struct inode *dirp; 12376264d69dSAl Viro __be32 err; 12385c002b3bSJ. Bruce Fields __be32 err2; 12396264d69dSAl Viro int host_err; 12401da177e4SLinus Torvalds 12411da177e4SLinus Torvalds dentry = fhp->fh_dentry; 12422b0143b5SDavid Howells dirp = d_inode(dentry); 12431da177e4SLinus Torvalds 12441da177e4SLinus Torvalds dchild = dget(resfhp->fh_dentry); 12451da177e4SLinus Torvalds if (!fhp->fh_locked) { 1246b44061d0SJ. Bruce Fields WARN_ONCE(1, "nfsd_create: parent %pd2 not locked!\n", 1247a6a9f18fSAl Viro dentry); 1248d75f2b9fSAl Viro err = nfserr_io; 12491da177e4SLinus Torvalds goto out; 12501da177e4SLinus Torvalds } 12511da177e4SLinus Torvalds 12527eed34f1SOleg Drokin err = nfsd_permission(rqstp, fhp->fh_export, dentry, NFSD_MAY_CREATE); 12537eed34f1SOleg Drokin if (err) 12547eed34f1SOleg Drokin goto out; 12557eed34f1SOleg Drokin 12561da177e4SLinus Torvalds if (!(iap->ia_valid & ATTR_MODE)) 12571da177e4SLinus Torvalds iap->ia_mode = 0; 12581da177e4SLinus Torvalds iap->ia_mode = (iap->ia_mode & S_IALLUGO) | type; 12591da177e4SLinus Torvalds 126022cf8419SJ. Bruce Fields if (!IS_POSIXACL(dirp)) 126122cf8419SJ. Bruce Fields iap->ia_mode &= ~current_umask(); 126222cf8419SJ. Bruce Fields 1263088406bcSJ. Bruce Fields err = 0; 12644a55c101SJan Kara host_err = 0; 12651da177e4SLinus Torvalds switch (type) { 12661da177e4SLinus Torvalds case S_IFREG: 12676521f891SChristian Brauner host_err = vfs_create(&init_user_ns, dirp, dchild, iap->ia_mode, true); 12684ac35c2fSwengang wang if (!host_err) 12694ac35c2fSwengang wang nfsd_check_ignore_resizing(iap); 12701da177e4SLinus Torvalds break; 12711da177e4SLinus Torvalds case S_IFDIR: 12726521f891SChristian Brauner host_err = vfs_mkdir(&init_user_ns, dirp, dchild, iap->ia_mode); 12733819bb0dSAl Viro if (!host_err && unlikely(d_unhashed(dchild))) { 12743819bb0dSAl Viro struct dentry *d; 12753819bb0dSAl Viro d = lookup_one_len(dchild->d_name.name, 12763819bb0dSAl Viro dchild->d_parent, 12773819bb0dSAl Viro dchild->d_name.len); 12783819bb0dSAl Viro if (IS_ERR(d)) { 12793819bb0dSAl Viro host_err = PTR_ERR(d); 12803819bb0dSAl Viro break; 12813819bb0dSAl Viro } 12823819bb0dSAl Viro if (unlikely(d_is_negative(d))) { 12833819bb0dSAl Viro dput(d); 12843819bb0dSAl Viro err = nfserr_serverfault; 12853819bb0dSAl Viro goto out; 12863819bb0dSAl Viro } 12873819bb0dSAl Viro dput(resfhp->fh_dentry); 12883819bb0dSAl Viro resfhp->fh_dentry = dget(d); 12893819bb0dSAl Viro err = fh_update(resfhp); 12903819bb0dSAl Viro dput(dchild); 12913819bb0dSAl Viro dchild = d; 12923819bb0dSAl Viro if (err) 12933819bb0dSAl Viro goto out; 12943819bb0dSAl Viro } 12951da177e4SLinus Torvalds break; 12961da177e4SLinus Torvalds case S_IFCHR: 12971da177e4SLinus Torvalds case S_IFBLK: 12981da177e4SLinus Torvalds case S_IFIFO: 12991da177e4SLinus Torvalds case S_IFSOCK: 13006521f891SChristian Brauner host_err = vfs_mknod(&init_user_ns, dirp, dchild, 13016521f891SChristian Brauner iap->ia_mode, rdev); 13021da177e4SLinus Torvalds break; 130371423274SJ. Bruce Fields default: 130471423274SJ. Bruce Fields printk(KERN_WARNING "nfsd: bad file type %o in nfsd_create\n", 130571423274SJ. Bruce Fields type); 130671423274SJ. Bruce Fields host_err = -EINVAL; 1307463c3197SDave Hansen } 13084a55c101SJan Kara if (host_err < 0) 1309463c3197SDave Hansen goto out_nfserr; 13101da177e4SLinus Torvalds 1311f501912aSBen Myers err = nfsd_create_setattr(rqstp, resfhp, iap); 13121da177e4SLinus Torvalds 1313f501912aSBen Myers /* 13140f3a24b4STrond Myklebust * nfsd_create_setattr already committed the child. Transactional 13150f3a24b4STrond Myklebust * filesystems had a chance to commit changes for both parent and 1316b44061d0SJ. Bruce Fields * child simultaneously making the following commit_metadata a 13170f3a24b4STrond Myklebust * noop. 1318f501912aSBen Myers */ 1319f501912aSBen Myers err2 = nfserrno(commit_metadata(fhp)); 1320f193fbabSYAMAMOTO Takashi if (err2) 1321f193fbabSYAMAMOTO Takashi err = err2; 13221da177e4SLinus Torvalds /* 13231da177e4SLinus Torvalds * Update the file handle to get the new inode info. 13241da177e4SLinus Torvalds */ 13251da177e4SLinus Torvalds if (!err) 13261da177e4SLinus Torvalds err = fh_update(resfhp); 13271da177e4SLinus Torvalds out: 13281da177e4SLinus Torvalds dput(dchild); 13291da177e4SLinus Torvalds return err; 13301da177e4SLinus Torvalds 13311da177e4SLinus Torvalds out_nfserr: 13326264d69dSAl Viro err = nfserrno(host_err); 13331da177e4SLinus Torvalds goto out; 13341da177e4SLinus Torvalds } 13351da177e4SLinus Torvalds 1336b44061d0SJ. Bruce Fields /* 1337b44061d0SJ. Bruce Fields * Create a filesystem object (regular, directory, special). 1338b44061d0SJ. Bruce Fields * Note that the parent directory is left locked. 1339b44061d0SJ. Bruce Fields * 1340b44061d0SJ. Bruce Fields * N.B. Every call to nfsd_create needs an fh_put for _both_ fhp and resfhp 1341b44061d0SJ. Bruce Fields */ 1342b44061d0SJ. Bruce Fields __be32 1343b44061d0SJ. Bruce Fields nfsd_create(struct svc_rqst *rqstp, struct svc_fh *fhp, 1344b44061d0SJ. Bruce Fields char *fname, int flen, struct iattr *iap, 1345b44061d0SJ. Bruce Fields int type, dev_t rdev, struct svc_fh *resfhp) 1346b44061d0SJ. Bruce Fields { 1347b44061d0SJ. Bruce Fields struct dentry *dentry, *dchild = NULL; 1348b44061d0SJ. Bruce Fields __be32 err; 1349b44061d0SJ. Bruce Fields int host_err; 1350b44061d0SJ. Bruce Fields 1351b44061d0SJ. Bruce Fields if (isdotent(fname, flen)) 1352b44061d0SJ. Bruce Fields return nfserr_exist; 1353b44061d0SJ. Bruce Fields 1354fa08139dSJ. Bruce Fields err = fh_verify(rqstp, fhp, S_IFDIR, NFSD_MAY_NOP); 1355b44061d0SJ. Bruce Fields if (err) 1356b44061d0SJ. Bruce Fields return err; 1357b44061d0SJ. Bruce Fields 1358b44061d0SJ. Bruce Fields dentry = fhp->fh_dentry; 1359b44061d0SJ. Bruce Fields 1360b44061d0SJ. Bruce Fields host_err = fh_want_write(fhp); 1361b44061d0SJ. Bruce Fields if (host_err) 1362b44061d0SJ. Bruce Fields return nfserrno(host_err); 1363b44061d0SJ. Bruce Fields 1364b44061d0SJ. Bruce Fields fh_lock_nested(fhp, I_MUTEX_PARENT); 1365b44061d0SJ. Bruce Fields dchild = lookup_one_len(fname, dentry, flen); 1366b44061d0SJ. Bruce Fields host_err = PTR_ERR(dchild); 1367b44061d0SJ. Bruce Fields if (IS_ERR(dchild)) 1368b44061d0SJ. Bruce Fields return nfserrno(host_err); 1369b44061d0SJ. Bruce Fields err = fh_compose(resfhp, fhp->fh_export, dchild, fhp); 1370502aa0a5SJosef Bacik /* 1371502aa0a5SJosef Bacik * We unconditionally drop our ref to dchild as fh_compose will have 1372502aa0a5SJosef Bacik * already grabbed its own ref for it. 1373502aa0a5SJosef Bacik */ 1374b44061d0SJ. Bruce Fields dput(dchild); 1375502aa0a5SJosef Bacik if (err) 1376b44061d0SJ. Bruce Fields return err; 1377b44061d0SJ. Bruce Fields return nfsd_create_locked(rqstp, fhp, fname, flen, iap, type, 1378b44061d0SJ. Bruce Fields rdev, resfhp); 1379b44061d0SJ. Bruce Fields } 1380b44061d0SJ. Bruce Fields 13811da177e4SLinus Torvalds #ifdef CONFIG_NFSD_V3 1382ac6721a1SMi Jinlong 13831da177e4SLinus Torvalds /* 1384ac6721a1SMi Jinlong * NFSv3 and NFSv4 version of nfsd_create 13851da177e4SLinus Torvalds */ 13866264d69dSAl Viro __be32 1387ac6721a1SMi Jinlong do_nfsd_create(struct svc_rqst *rqstp, struct svc_fh *fhp, 13881da177e4SLinus Torvalds char *fname, int flen, struct iattr *iap, 13891da177e4SLinus Torvalds struct svc_fh *resfhp, int createmode, u32 *verifier, 1390856121b2SJ. Bruce Fields bool *truncp, bool *created) 13911da177e4SLinus Torvalds { 13921da177e4SLinus Torvalds struct dentry *dentry, *dchild = NULL; 13931da177e4SLinus Torvalds struct inode *dirp; 13946264d69dSAl Viro __be32 err; 13956264d69dSAl Viro int host_err; 13961da177e4SLinus Torvalds __u32 v_mtime=0, v_atime=0; 13971da177e4SLinus Torvalds 13981da177e4SLinus Torvalds err = nfserr_perm; 13991da177e4SLinus Torvalds if (!flen) 14001da177e4SLinus Torvalds goto out; 14011da177e4SLinus Torvalds err = nfserr_exist; 14021da177e4SLinus Torvalds if (isdotent(fname, flen)) 14031da177e4SLinus Torvalds goto out; 14041da177e4SLinus Torvalds if (!(iap->ia_valid & ATTR_MODE)) 14051da177e4SLinus Torvalds iap->ia_mode = 0; 14061574dff8SSachin Prabhu err = fh_verify(rqstp, fhp, S_IFDIR, NFSD_MAY_EXEC); 14071da177e4SLinus Torvalds if (err) 14081da177e4SLinus Torvalds goto out; 14091da177e4SLinus Torvalds 14101da177e4SLinus Torvalds dentry = fhp->fh_dentry; 14112b0143b5SDavid Howells dirp = d_inode(dentry); 14121da177e4SLinus Torvalds 14134a55c101SJan Kara host_err = fh_want_write(fhp); 14144a55c101SJan Kara if (host_err) 14154a55c101SJan Kara goto out_nfserr; 14164a55c101SJan Kara 141712fd3520SPeter Zijlstra fh_lock_nested(fhp, I_MUTEX_PARENT); 14181da177e4SLinus Torvalds 14191da177e4SLinus Torvalds /* 14201da177e4SLinus Torvalds * Compose the response file handle. 14211da177e4SLinus Torvalds */ 14221da177e4SLinus Torvalds dchild = lookup_one_len(fname, dentry, flen); 14236264d69dSAl Viro host_err = PTR_ERR(dchild); 14241da177e4SLinus Torvalds if (IS_ERR(dchild)) 14251da177e4SLinus Torvalds goto out_nfserr; 14261da177e4SLinus Torvalds 14271574dff8SSachin Prabhu /* If file doesn't exist, check for permissions to create one */ 14282b0143b5SDavid Howells if (d_really_is_negative(dchild)) { 14291574dff8SSachin Prabhu err = fh_verify(rqstp, fhp, S_IFDIR, NFSD_MAY_CREATE); 14301574dff8SSachin Prabhu if (err) 14311574dff8SSachin Prabhu goto out; 14321574dff8SSachin Prabhu } 14331574dff8SSachin Prabhu 14341da177e4SLinus Torvalds err = fh_compose(resfhp, fhp->fh_export, dchild, fhp); 14351da177e4SLinus Torvalds if (err) 14361da177e4SLinus Torvalds goto out; 14371da177e4SLinus Torvalds 1438ac6721a1SMi Jinlong if (nfsd_create_is_exclusive(createmode)) { 1439c397852cSPeter Staubach /* solaris7 gets confused (bugid 4218508) if these have 1440749997e5SJeff Layton * the high bit set, so just clear the high bits. If this is 1441749997e5SJeff Layton * ever changed to use different attrs for storing the 1442749997e5SJeff Layton * verifier, then do_open_lookup() will also need to be fixed 1443749997e5SJeff Layton * accordingly. 14441da177e4SLinus Torvalds */ 14451da177e4SLinus Torvalds v_mtime = verifier[0]&0x7fffffff; 14461da177e4SLinus Torvalds v_atime = verifier[1]&0x7fffffff; 14471da177e4SLinus Torvalds } 14481da177e4SLinus Torvalds 14492b0143b5SDavid Howells if (d_really_is_positive(dchild)) { 14501da177e4SLinus Torvalds err = 0; 14511da177e4SLinus Torvalds 14521da177e4SLinus Torvalds switch (createmode) { 14531da177e4SLinus Torvalds case NFS3_CREATE_UNCHECKED: 1454e36cb0b8SDavid Howells if (! d_is_reg(dchild)) 14559dc4e6c4SJ. Bruce Fields goto out; 14561da177e4SLinus Torvalds else if (truncp) { 14571da177e4SLinus Torvalds /* in nfsv4, we need to treat this case a little 14581da177e4SLinus Torvalds * differently. we don't want to truncate the 14591da177e4SLinus Torvalds * file now; this would be wrong if the OPEN 14601da177e4SLinus Torvalds * fails for some other reason. furthermore, 14611da177e4SLinus Torvalds * if the size is nonzero, we should ignore it 14621da177e4SLinus Torvalds * according to spec! 14631da177e4SLinus Torvalds */ 14641da177e4SLinus Torvalds *truncp = (iap->ia_valid & ATTR_SIZE) && !iap->ia_size; 14651da177e4SLinus Torvalds } 14661da177e4SLinus Torvalds else { 14671da177e4SLinus Torvalds iap->ia_valid &= ATTR_SIZE; 14681da177e4SLinus Torvalds goto set_attr; 14691da177e4SLinus Torvalds } 14701da177e4SLinus Torvalds break; 14711da177e4SLinus Torvalds case NFS3_CREATE_EXCLUSIVE: 14722b0143b5SDavid Howells if ( d_inode(dchild)->i_mtime.tv_sec == v_mtime 14732b0143b5SDavid Howells && d_inode(dchild)->i_atime.tv_sec == v_atime 14742b0143b5SDavid Howells && d_inode(dchild)->i_size == 0 ) { 14757007c90fSNeil Brown if (created) 1476384a7ccaSzhengbin *created = true; 14771da177e4SLinus Torvalds break; 14787007c90fSNeil Brown } 1479df561f66SGustavo A. R. Silva fallthrough; 1480ac6721a1SMi Jinlong case NFS4_CREATE_EXCLUSIVE4_1: 14812b0143b5SDavid Howells if ( d_inode(dchild)->i_mtime.tv_sec == v_mtime 14822b0143b5SDavid Howells && d_inode(dchild)->i_atime.tv_sec == v_atime 14832b0143b5SDavid Howells && d_inode(dchild)->i_size == 0 ) { 14847007c90fSNeil Brown if (created) 1485384a7ccaSzhengbin *created = true; 1486ac6721a1SMi Jinlong goto set_attr; 14877007c90fSNeil Brown } 1488df561f66SGustavo A. R. Silva fallthrough; 14891da177e4SLinus Torvalds case NFS3_CREATE_GUARDED: 14901da177e4SLinus Torvalds err = nfserr_exist; 14911da177e4SLinus Torvalds } 1492bad0dcffSAl Viro fh_drop_write(fhp); 14931da177e4SLinus Torvalds goto out; 14941da177e4SLinus Torvalds } 14951da177e4SLinus Torvalds 149622cf8419SJ. Bruce Fields if (!IS_POSIXACL(dirp)) 149722cf8419SJ. Bruce Fields iap->ia_mode &= ~current_umask(); 149822cf8419SJ. Bruce Fields 14996521f891SChristian Brauner host_err = vfs_create(&init_user_ns, dirp, dchild, iap->ia_mode, true); 1500463c3197SDave Hansen if (host_err < 0) { 1501bad0dcffSAl Viro fh_drop_write(fhp); 15021da177e4SLinus Torvalds goto out_nfserr; 1503463c3197SDave Hansen } 150481ac95c5SJ. Bruce Fields if (created) 1505384a7ccaSzhengbin *created = true; 15061da177e4SLinus Torvalds 15074ac35c2fSwengang wang nfsd_check_ignore_resizing(iap); 15084ac35c2fSwengang wang 1509ac6721a1SMi Jinlong if (nfsd_create_is_exclusive(createmode)) { 1510c397852cSPeter Staubach /* Cram the verifier into atime/mtime */ 15111da177e4SLinus Torvalds iap->ia_valid = ATTR_MTIME|ATTR_ATIME 1512c397852cSPeter Staubach | ATTR_MTIME_SET|ATTR_ATIME_SET; 15131da177e4SLinus Torvalds /* XXX someone who knows this better please fix it for nsec */ 15141da177e4SLinus Torvalds iap->ia_mtime.tv_sec = v_mtime; 15151da177e4SLinus Torvalds iap->ia_atime.tv_sec = v_atime; 15161da177e4SLinus Torvalds iap->ia_mtime.tv_nsec = 0; 15171da177e4SLinus Torvalds iap->ia_atime.tv_nsec = 0; 15181da177e4SLinus Torvalds } 15191da177e4SLinus Torvalds 15201da177e4SLinus Torvalds set_attr: 1521f501912aSBen Myers err = nfsd_create_setattr(rqstp, resfhp, iap); 1522f501912aSBen Myers 1523f501912aSBen Myers /* 15240f3a24b4STrond Myklebust * nfsd_create_setattr already committed the child 15250f3a24b4STrond Myklebust * (and possibly also the parent). 1526f501912aSBen Myers */ 1527f501912aSBen Myers if (!err) 1528f501912aSBen Myers err = nfserrno(commit_metadata(fhp)); 1529f193fbabSYAMAMOTO Takashi 1530f193fbabSYAMAMOTO Takashi /* 1531f193fbabSYAMAMOTO Takashi * Update the filehandle to get the new inode info. 1532f193fbabSYAMAMOTO Takashi */ 1533f193fbabSYAMAMOTO Takashi if (!err) 1534f193fbabSYAMAMOTO Takashi err = fh_update(resfhp); 15351da177e4SLinus Torvalds 15361da177e4SLinus Torvalds out: 15371da177e4SLinus Torvalds fh_unlock(fhp); 15381da177e4SLinus Torvalds if (dchild && !IS_ERR(dchild)) 15391da177e4SLinus Torvalds dput(dchild); 15404a55c101SJan Kara fh_drop_write(fhp); 15411da177e4SLinus Torvalds return err; 15421da177e4SLinus Torvalds 15431da177e4SLinus Torvalds out_nfserr: 15446264d69dSAl Viro err = nfserrno(host_err); 15451da177e4SLinus Torvalds goto out; 15461da177e4SLinus Torvalds } 15471da177e4SLinus Torvalds #endif /* CONFIG_NFSD_V3 */ 15481da177e4SLinus Torvalds 15491da177e4SLinus Torvalds /* 15501da177e4SLinus Torvalds * Read a symlink. On entry, *lenp must contain the maximum path length that 15511da177e4SLinus Torvalds * fits into the buffer. On return, it contains the true length. 15521da177e4SLinus Torvalds * N.B. After this call fhp needs an fh_put 15531da177e4SLinus Torvalds */ 15546264d69dSAl Viro __be32 15551da177e4SLinus Torvalds nfsd_readlink(struct svc_rqst *rqstp, struct svc_fh *fhp, char *buf, int *lenp) 15561da177e4SLinus Torvalds { 15576264d69dSAl Viro __be32 err; 15584d7edbc3SAl Viro const char *link; 155968ac1234SAl Viro struct path path; 15604d7edbc3SAl Viro DEFINE_DELAYED_CALL(done); 15614d7edbc3SAl Viro int len; 15621da177e4SLinus Torvalds 15638837abcaSMiklos Szeredi err = fh_verify(rqstp, fhp, S_IFLNK, NFSD_MAY_NOP); 15644d7edbc3SAl Viro if (unlikely(err)) 15654d7edbc3SAl Viro return err; 15661da177e4SLinus Torvalds 156768ac1234SAl Viro path.mnt = fhp->fh_export->ex_path.mnt; 156868ac1234SAl Viro path.dentry = fhp->fh_dentry; 15691da177e4SLinus Torvalds 15704d7edbc3SAl Viro if (unlikely(!d_is_symlink(path.dentry))) 15714d7edbc3SAl Viro return nfserr_inval; 15721da177e4SLinus Torvalds 157368ac1234SAl Viro touch_atime(&path); 15741da177e4SLinus Torvalds 15754d7edbc3SAl Viro link = vfs_get_link(path.dentry, &done); 15764d7edbc3SAl Viro if (IS_ERR(link)) 15774d7edbc3SAl Viro return nfserrno(PTR_ERR(link)); 15781da177e4SLinus Torvalds 15794d7edbc3SAl Viro len = strlen(link); 15804d7edbc3SAl Viro if (len < *lenp) 15814d7edbc3SAl Viro *lenp = len; 15824d7edbc3SAl Viro memcpy(buf, link, *lenp); 15834d7edbc3SAl Viro do_delayed_call(&done); 15844d7edbc3SAl Viro return 0; 15851da177e4SLinus Torvalds } 15861da177e4SLinus Torvalds 15871da177e4SLinus Torvalds /* 15881da177e4SLinus Torvalds * Create a symlink and look up its inode 15891da177e4SLinus Torvalds * N.B. After this call _both_ fhp and resfhp need an fh_put 15901da177e4SLinus Torvalds */ 15916264d69dSAl Viro __be32 15921da177e4SLinus Torvalds nfsd_symlink(struct svc_rqst *rqstp, struct svc_fh *fhp, 15931da177e4SLinus Torvalds char *fname, int flen, 159452ee0433SJ. Bruce Fields char *path, 15951e444f5bSKinglong Mee struct svc_fh *resfhp) 15961da177e4SLinus Torvalds { 15971da177e4SLinus Torvalds struct dentry *dentry, *dnew; 15986264d69dSAl Viro __be32 err, cerr; 15996264d69dSAl Viro int host_err; 16001da177e4SLinus Torvalds 16011da177e4SLinus Torvalds err = nfserr_noent; 160252ee0433SJ. Bruce Fields if (!flen || path[0] == '\0') 16031da177e4SLinus Torvalds goto out; 16041da177e4SLinus Torvalds err = nfserr_exist; 16051da177e4SLinus Torvalds if (isdotent(fname, flen)) 16061da177e4SLinus Torvalds goto out; 16071da177e4SLinus Torvalds 16088837abcaSMiklos Szeredi err = fh_verify(rqstp, fhp, S_IFDIR, NFSD_MAY_CREATE); 16091da177e4SLinus Torvalds if (err) 16101da177e4SLinus Torvalds goto out; 16114a55c101SJan Kara 16124a55c101SJan Kara host_err = fh_want_write(fhp); 16134a55c101SJan Kara if (host_err) 16144a55c101SJan Kara goto out_nfserr; 16154a55c101SJan Kara 16161da177e4SLinus Torvalds fh_lock(fhp); 16171da177e4SLinus Torvalds dentry = fhp->fh_dentry; 16181da177e4SLinus Torvalds dnew = lookup_one_len(fname, dentry, flen); 16196264d69dSAl Viro host_err = PTR_ERR(dnew); 16201da177e4SLinus Torvalds if (IS_ERR(dnew)) 16211da177e4SLinus Torvalds goto out_nfserr; 16221da177e4SLinus Torvalds 16236521f891SChristian Brauner host_err = vfs_symlink(&init_user_ns, d_inode(dentry), dnew, path); 16246264d69dSAl Viro err = nfserrno(host_err); 1625eeeadbb9SJ. Bruce Fields fh_unlock(fhp); 1626f501912aSBen Myers if (!err) 1627f501912aSBen Myers err = nfserrno(commit_metadata(fhp)); 16281da177e4SLinus Torvalds 1629bad0dcffSAl Viro fh_drop_write(fhp); 163075c3f29dSDave Hansen 16311da177e4SLinus Torvalds cerr = fh_compose(resfhp, fhp->fh_export, dnew, fhp); 16321da177e4SLinus Torvalds dput(dnew); 16331da177e4SLinus Torvalds if (err==0) err = cerr; 16341da177e4SLinus Torvalds out: 16351da177e4SLinus Torvalds return err; 16361da177e4SLinus Torvalds 16371da177e4SLinus Torvalds out_nfserr: 16386264d69dSAl Viro err = nfserrno(host_err); 16391da177e4SLinus Torvalds goto out; 16401da177e4SLinus Torvalds } 16411da177e4SLinus Torvalds 16421da177e4SLinus Torvalds /* 16431da177e4SLinus Torvalds * Create a hardlink 16441da177e4SLinus Torvalds * N.B. After this call _both_ ffhp and tfhp need an fh_put 16451da177e4SLinus Torvalds */ 16466264d69dSAl Viro __be32 16471da177e4SLinus Torvalds nfsd_link(struct svc_rqst *rqstp, struct svc_fh *ffhp, 16481da177e4SLinus Torvalds char *name, int len, struct svc_fh *tfhp) 16491da177e4SLinus Torvalds { 16501da177e4SLinus Torvalds struct dentry *ddir, *dnew, *dold; 165155b13354SJ. Bruce Fields struct inode *dirp; 16526264d69dSAl Viro __be32 err; 16536264d69dSAl Viro int host_err; 16541da177e4SLinus Torvalds 16558837abcaSMiklos Szeredi err = fh_verify(rqstp, ffhp, S_IFDIR, NFSD_MAY_CREATE); 16561da177e4SLinus Torvalds if (err) 16571da177e4SLinus Torvalds goto out; 16587d818a7bSJ. Bruce Fields err = fh_verify(rqstp, tfhp, 0, NFSD_MAY_NOP); 16591da177e4SLinus Torvalds if (err) 16601da177e4SLinus Torvalds goto out; 16617d818a7bSJ. Bruce Fields err = nfserr_isdir; 1662e36cb0b8SDavid Howells if (d_is_dir(tfhp->fh_dentry)) 16637d818a7bSJ. Bruce Fields goto out; 16641da177e4SLinus Torvalds err = nfserr_perm; 16651da177e4SLinus Torvalds if (!len) 16661da177e4SLinus Torvalds goto out; 16671da177e4SLinus Torvalds err = nfserr_exist; 16681da177e4SLinus Torvalds if (isdotent(name, len)) 16691da177e4SLinus Torvalds goto out; 16701da177e4SLinus Torvalds 16714a55c101SJan Kara host_err = fh_want_write(tfhp); 16724a55c101SJan Kara if (host_err) { 16734a55c101SJan Kara err = nfserrno(host_err); 16744a55c101SJan Kara goto out; 16754a55c101SJan Kara } 16764a55c101SJan Kara 167712fd3520SPeter Zijlstra fh_lock_nested(ffhp, I_MUTEX_PARENT); 16781da177e4SLinus Torvalds ddir = ffhp->fh_dentry; 16792b0143b5SDavid Howells dirp = d_inode(ddir); 16801da177e4SLinus Torvalds 16811da177e4SLinus Torvalds dnew = lookup_one_len(name, ddir, len); 16826264d69dSAl Viro host_err = PTR_ERR(dnew); 16831da177e4SLinus Torvalds if (IS_ERR(dnew)) 16841da177e4SLinus Torvalds goto out_nfserr; 16851da177e4SLinus Torvalds 16861da177e4SLinus Torvalds dold = tfhp->fh_dentry; 16871da177e4SLinus Torvalds 16884795bb37SJ. Bruce Fields err = nfserr_noent; 16892b0143b5SDavid Howells if (d_really_is_negative(dold)) 16904a55c101SJan Kara goto out_dput; 16916521f891SChristian Brauner host_err = vfs_link(dold, &init_user_ns, dirp, dnew, NULL); 1692eeeadbb9SJ. Bruce Fields fh_unlock(ffhp); 16936264d69dSAl Viro if (!host_err) { 1694f501912aSBen Myers err = nfserrno(commit_metadata(ffhp)); 1695f501912aSBen Myers if (!err) 1696f501912aSBen Myers err = nfserrno(commit_metadata(tfhp)); 16971da177e4SLinus Torvalds } else { 16986264d69dSAl Viro if (host_err == -EXDEV && rqstp->rq_vers == 2) 16991da177e4SLinus Torvalds err = nfserr_acces; 17001da177e4SLinus Torvalds else 17016264d69dSAl Viro err = nfserrno(host_err); 17021da177e4SLinus Torvalds } 170375c3f29dSDave Hansen out_dput: 17041da177e4SLinus Torvalds dput(dnew); 1705270d56e5SDavid M. Richter out_unlock: 1706270d56e5SDavid M. Richter fh_unlock(ffhp); 17074a55c101SJan Kara fh_drop_write(tfhp); 17081da177e4SLinus Torvalds out: 17091da177e4SLinus Torvalds return err; 17101da177e4SLinus Torvalds 17111da177e4SLinus Torvalds out_nfserr: 17126264d69dSAl Viro err = nfserrno(host_err); 1713270d56e5SDavid M. Richter goto out_unlock; 17141da177e4SLinus Torvalds } 17151da177e4SLinus Torvalds 17167775ec57SJeff Layton static void 17177775ec57SJeff Layton nfsd_close_cached_files(struct dentry *dentry) 17187775ec57SJeff Layton { 17197775ec57SJeff Layton struct inode *inode = d_inode(dentry); 17207775ec57SJeff Layton 17217775ec57SJeff Layton if (inode && S_ISREG(inode->i_mode)) 17227775ec57SJeff Layton nfsd_file_close_inode_sync(inode); 17237775ec57SJeff Layton } 17247775ec57SJeff Layton 17257775ec57SJeff Layton static bool 17267775ec57SJeff Layton nfsd_has_cached_files(struct dentry *dentry) 17277775ec57SJeff Layton { 17287775ec57SJeff Layton bool ret = false; 17297775ec57SJeff Layton struct inode *inode = d_inode(dentry); 17307775ec57SJeff Layton 17317775ec57SJeff Layton if (inode && S_ISREG(inode->i_mode)) 17327775ec57SJeff Layton ret = nfsd_file_is_cached(inode); 17337775ec57SJeff Layton return ret; 17347775ec57SJeff Layton } 17357775ec57SJeff Layton 17361da177e4SLinus Torvalds /* 17371da177e4SLinus Torvalds * Rename a file 17381da177e4SLinus Torvalds * N.B. After this call _both_ ffhp and tfhp need an fh_put 17391da177e4SLinus Torvalds */ 17406264d69dSAl Viro __be32 17411da177e4SLinus Torvalds nfsd_rename(struct svc_rqst *rqstp, struct svc_fh *ffhp, char *fname, int flen, 17421da177e4SLinus Torvalds struct svc_fh *tfhp, char *tname, int tlen) 17431da177e4SLinus Torvalds { 17441da177e4SLinus Torvalds struct dentry *fdentry, *tdentry, *odentry, *ndentry, *trap; 17451da177e4SLinus Torvalds struct inode *fdir, *tdir; 17466264d69dSAl Viro __be32 err; 17476264d69dSAl Viro int host_err; 17487f84b488SJeff Layton bool close_cached = false; 17491da177e4SLinus Torvalds 17508837abcaSMiklos Szeredi err = fh_verify(rqstp, ffhp, S_IFDIR, NFSD_MAY_REMOVE); 17511da177e4SLinus Torvalds if (err) 17521da177e4SLinus Torvalds goto out; 17538837abcaSMiklos Szeredi err = fh_verify(rqstp, tfhp, S_IFDIR, NFSD_MAY_CREATE); 17541da177e4SLinus Torvalds if (err) 17551da177e4SLinus Torvalds goto out; 17561da177e4SLinus Torvalds 17571da177e4SLinus Torvalds fdentry = ffhp->fh_dentry; 17582b0143b5SDavid Howells fdir = d_inode(fdentry); 17591da177e4SLinus Torvalds 17601da177e4SLinus Torvalds tdentry = tfhp->fh_dentry; 17612b0143b5SDavid Howells tdir = d_inode(tdentry); 17621da177e4SLinus Torvalds 17631da177e4SLinus Torvalds err = nfserr_perm; 17641da177e4SLinus Torvalds if (!flen || isdotent(fname, flen) || !tlen || isdotent(tname, tlen)) 17651da177e4SLinus Torvalds goto out; 17661da177e4SLinus Torvalds 17677775ec57SJeff Layton retry: 17684a55c101SJan Kara host_err = fh_want_write(ffhp); 17694a55c101SJan Kara if (host_err) { 17704a55c101SJan Kara err = nfserrno(host_err); 17714a55c101SJan Kara goto out; 17724a55c101SJan Kara } 17734a55c101SJan Kara 17741da177e4SLinus Torvalds /* cannot use fh_lock as we need deadlock protective ordering 17751da177e4SLinus Torvalds * so do it by hand */ 17761da177e4SLinus Torvalds trap = lock_rename(tdentry, fdentry); 1777aaf91ec1SJeff Layton ffhp->fh_locked = tfhp->fh_locked = true; 17781da177e4SLinus Torvalds fill_pre_wcc(ffhp); 17791da177e4SLinus Torvalds fill_pre_wcc(tfhp); 17801da177e4SLinus Torvalds 17811da177e4SLinus Torvalds odentry = lookup_one_len(fname, fdentry, flen); 17826264d69dSAl Viro host_err = PTR_ERR(odentry); 17831da177e4SLinus Torvalds if (IS_ERR(odentry)) 17841da177e4SLinus Torvalds goto out_nfserr; 17851da177e4SLinus Torvalds 17866264d69dSAl Viro host_err = -ENOENT; 17872b0143b5SDavid Howells if (d_really_is_negative(odentry)) 17881da177e4SLinus Torvalds goto out_dput_old; 17896264d69dSAl Viro host_err = -EINVAL; 17901da177e4SLinus Torvalds if (odentry == trap) 17911da177e4SLinus Torvalds goto out_dput_old; 17921da177e4SLinus Torvalds 17931da177e4SLinus Torvalds ndentry = lookup_one_len(tname, tdentry, tlen); 17946264d69dSAl Viro host_err = PTR_ERR(ndentry); 17951da177e4SLinus Torvalds if (IS_ERR(ndentry)) 17961da177e4SLinus Torvalds goto out_dput_old; 17976264d69dSAl Viro host_err = -ENOTEMPTY; 17981da177e4SLinus Torvalds if (ndentry == trap) 17991da177e4SLinus Torvalds goto out_dput_new; 18001da177e4SLinus Torvalds 18019079b1ebSDave Hansen host_err = -EXDEV; 18029079b1ebSDave Hansen if (ffhp->fh_export->ex_path.mnt != tfhp->fh_export->ex_path.mnt) 18039079b1ebSDave Hansen goto out_dput_new; 1804aa387d6cSJ. Bruce Fields if (ffhp->fh_export->ex_path.dentry != tfhp->fh_export->ex_path.dentry) 1805aa387d6cSJ. Bruce Fields goto out_dput_new; 18069079b1ebSDave Hansen 18077f84b488SJeff Layton if ((ndentry->d_sb->s_export_op->flags & EXPORT_OP_CLOSE_BEFORE_UNLINK) && 18087f84b488SJeff Layton nfsd_has_cached_files(ndentry)) { 18097f84b488SJeff Layton close_cached = true; 18107775ec57SJeff Layton goto out_dput_old; 18117775ec57SJeff Layton } else { 18129fe61450SChristian Brauner struct renamedata rd = { 18136521f891SChristian Brauner .old_mnt_userns = &init_user_ns, 18149fe61450SChristian Brauner .old_dir = fdir, 18159fe61450SChristian Brauner .old_dentry = odentry, 18166521f891SChristian Brauner .new_mnt_userns = &init_user_ns, 18179fe61450SChristian Brauner .new_dir = tdir, 18189fe61450SChristian Brauner .new_dentry = ndentry, 18199fe61450SChristian Brauner }; 18209fe61450SChristian Brauner host_err = vfs_rename(&rd); 1821f501912aSBen Myers if (!host_err) { 1822f501912aSBen Myers host_err = commit_metadata(tfhp); 18236264d69dSAl Viro if (!host_err) 1824f501912aSBen Myers host_err = commit_metadata(ffhp); 18251da177e4SLinus Torvalds } 18267775ec57SJeff Layton } 18271da177e4SLinus Torvalds out_dput_new: 18281da177e4SLinus Torvalds dput(ndentry); 18291da177e4SLinus Torvalds out_dput_old: 18301da177e4SLinus Torvalds dput(odentry); 18311da177e4SLinus Torvalds out_nfserr: 18326264d69dSAl Viro err = nfserrno(host_err); 1833fbb74a34SJ. Bruce Fields /* 1834fbb74a34SJ. Bruce Fields * We cannot rely on fh_unlock on the two filehandles, 18351da177e4SLinus Torvalds * as that would do the wrong thing if the two directories 1836fbb74a34SJ. Bruce Fields * were the same, so again we do it by hand. 18371da177e4SLinus Torvalds */ 18387f84b488SJeff Layton if (!close_cached) { 18391da177e4SLinus Torvalds fill_post_wcc(ffhp); 18401da177e4SLinus Torvalds fill_post_wcc(tfhp); 18417775ec57SJeff Layton } 18421da177e4SLinus Torvalds unlock_rename(tdentry, fdentry); 1843aaf91ec1SJeff Layton ffhp->fh_locked = tfhp->fh_locked = false; 18444a55c101SJan Kara fh_drop_write(ffhp); 18451da177e4SLinus Torvalds 18467775ec57SJeff Layton /* 18477775ec57SJeff Layton * If the target dentry has cached open files, then we need to try to 18487775ec57SJeff Layton * close them prior to doing the rename. Flushing delayed fput 18497775ec57SJeff Layton * shouldn't be done with locks held however, so we delay it until this 18507775ec57SJeff Layton * point and then reattempt the whole shebang. 18517775ec57SJeff Layton */ 18527f84b488SJeff Layton if (close_cached) { 18537f84b488SJeff Layton close_cached = false; 18547775ec57SJeff Layton nfsd_close_cached_files(ndentry); 18557775ec57SJeff Layton dput(ndentry); 18567775ec57SJeff Layton goto retry; 18577775ec57SJeff Layton } 18581da177e4SLinus Torvalds out: 18591da177e4SLinus Torvalds return err; 18601da177e4SLinus Torvalds } 18611da177e4SLinus Torvalds 18621da177e4SLinus Torvalds /* 18631da177e4SLinus Torvalds * Unlink a file or directory 18641da177e4SLinus Torvalds * N.B. After this call fhp needs an fh_put 18651da177e4SLinus Torvalds */ 18666264d69dSAl Viro __be32 18671da177e4SLinus Torvalds nfsd_unlink(struct svc_rqst *rqstp, struct svc_fh *fhp, int type, 18681da177e4SLinus Torvalds char *fname, int flen) 18691da177e4SLinus Torvalds { 18701da177e4SLinus Torvalds struct dentry *dentry, *rdentry; 18711da177e4SLinus Torvalds struct inode *dirp; 1872e5d74a2dSYu Hsiang Huang struct inode *rinode; 18736264d69dSAl Viro __be32 err; 18746264d69dSAl Viro int host_err; 18751da177e4SLinus Torvalds 18761da177e4SLinus Torvalds err = nfserr_acces; 18771da177e4SLinus Torvalds if (!flen || isdotent(fname, flen)) 18781da177e4SLinus Torvalds goto out; 18798837abcaSMiklos Szeredi err = fh_verify(rqstp, fhp, S_IFDIR, NFSD_MAY_REMOVE); 18801da177e4SLinus Torvalds if (err) 18811da177e4SLinus Torvalds goto out; 18821da177e4SLinus Torvalds 18834a55c101SJan Kara host_err = fh_want_write(fhp); 18844a55c101SJan Kara if (host_err) 18854a55c101SJan Kara goto out_nfserr; 18864a55c101SJan Kara 188712fd3520SPeter Zijlstra fh_lock_nested(fhp, I_MUTEX_PARENT); 18881da177e4SLinus Torvalds dentry = fhp->fh_dentry; 18892b0143b5SDavid Howells dirp = d_inode(dentry); 18901da177e4SLinus Torvalds 18911da177e4SLinus Torvalds rdentry = lookup_one_len(fname, dentry, flen); 18926264d69dSAl Viro host_err = PTR_ERR(rdentry); 18931da177e4SLinus Torvalds if (IS_ERR(rdentry)) 18940ca0c9d7SJ. Bruce Fields goto out_drop_write; 18951da177e4SLinus Torvalds 18962b0143b5SDavid Howells if (d_really_is_negative(rdentry)) { 18971da177e4SLinus Torvalds dput(rdentry); 18980ca0c9d7SJ. Bruce Fields host_err = -ENOENT; 18990ca0c9d7SJ. Bruce Fields goto out_drop_write; 19001da177e4SLinus Torvalds } 1901e5d74a2dSYu Hsiang Huang rinode = d_inode(rdentry); 1902e5d74a2dSYu Hsiang Huang ihold(rinode); 19031da177e4SLinus Torvalds 19041da177e4SLinus Torvalds if (!type) 19052b0143b5SDavid Howells type = d_inode(rdentry)->i_mode & S_IFMT; 19061da177e4SLinus Torvalds 19077775ec57SJeff Layton if (type != S_IFDIR) { 19087f84b488SJeff Layton if (rdentry->d_sb->s_export_op->flags & EXPORT_OP_CLOSE_BEFORE_UNLINK) 19097775ec57SJeff Layton nfsd_close_cached_files(rdentry); 19106521f891SChristian Brauner host_err = vfs_unlink(&init_user_ns, dirp, rdentry, NULL); 19117775ec57SJeff Layton } else { 19126521f891SChristian Brauner host_err = vfs_rmdir(&init_user_ns, dirp, rdentry); 19137775ec57SJeff Layton } 19147775ec57SJeff Layton 1915eeeadbb9SJ. Bruce Fields fh_unlock(fhp); 1916541ce98cSJ. Bruce Fields if (!host_err) 1917541ce98cSJ. Bruce Fields host_err = commit_metadata(fhp); 19181da177e4SLinus Torvalds dput(rdentry); 1919e5d74a2dSYu Hsiang Huang iput(rinode); /* truncate the inode here */ 19201da177e4SLinus Torvalds 19210ca0c9d7SJ. Bruce Fields out_drop_write: 19220ca0c9d7SJ. Bruce Fields fh_drop_write(fhp); 19231da177e4SLinus Torvalds out_nfserr: 1924466e16f0SNeilBrown if (host_err == -EBUSY) { 1925466e16f0SNeilBrown /* name is mounted-on. There is no perfect 1926466e16f0SNeilBrown * error status. 1927466e16f0SNeilBrown */ 1928466e16f0SNeilBrown if (nfsd_v4client(rqstp)) 1929466e16f0SNeilBrown err = nfserr_file_open; 1930466e16f0SNeilBrown else 1931466e16f0SNeilBrown err = nfserr_acces; 1932466e16f0SNeilBrown } else { 19336264d69dSAl Viro err = nfserrno(host_err); 1934466e16f0SNeilBrown } 1935f193fbabSYAMAMOTO Takashi out: 1936f193fbabSYAMAMOTO Takashi return err; 19371da177e4SLinus Torvalds } 19381da177e4SLinus Torvalds 19391da177e4SLinus Torvalds /* 194014f7dd63SDavid Woodhouse * We do this buffering because we must not call back into the file 194114f7dd63SDavid Woodhouse * system's ->lookup() method from the filldir callback. That may well 194214f7dd63SDavid Woodhouse * deadlock a number of file systems. 194314f7dd63SDavid Woodhouse * 194414f7dd63SDavid Woodhouse * This is based heavily on the implementation of same in XFS. 194514f7dd63SDavid Woodhouse */ 194614f7dd63SDavid Woodhouse struct buffered_dirent { 194714f7dd63SDavid Woodhouse u64 ino; 194814f7dd63SDavid Woodhouse loff_t offset; 194914f7dd63SDavid Woodhouse int namlen; 195014f7dd63SDavid Woodhouse unsigned int d_type; 195114f7dd63SDavid Woodhouse char name[]; 195214f7dd63SDavid Woodhouse }; 195314f7dd63SDavid Woodhouse 195414f7dd63SDavid Woodhouse struct readdir_data { 19555c0ba4e0SAl Viro struct dir_context ctx; 195614f7dd63SDavid Woodhouse char *dirent; 195714f7dd63SDavid Woodhouse size_t used; 195853c9c5c0SAl Viro int full; 195914f7dd63SDavid Woodhouse }; 196014f7dd63SDavid Woodhouse 1961ac7576f4SMiklos Szeredi static int nfsd_buffered_filldir(struct dir_context *ctx, const char *name, 1962ac7576f4SMiklos Szeredi int namlen, loff_t offset, u64 ino, 1963ac7576f4SMiklos Szeredi unsigned int d_type) 196414f7dd63SDavid Woodhouse { 1965ac7576f4SMiklos Szeredi struct readdir_data *buf = 1966ac7576f4SMiklos Szeredi container_of(ctx, struct readdir_data, ctx); 196714f7dd63SDavid Woodhouse struct buffered_dirent *de = (void *)(buf->dirent + buf->used); 196814f7dd63SDavid Woodhouse unsigned int reclen; 196914f7dd63SDavid Woodhouse 197014f7dd63SDavid Woodhouse reclen = ALIGN(sizeof(struct buffered_dirent) + namlen, sizeof(u64)); 197153c9c5c0SAl Viro if (buf->used + reclen > PAGE_SIZE) { 197253c9c5c0SAl Viro buf->full = 1; 197314f7dd63SDavid Woodhouse return -EINVAL; 197453c9c5c0SAl Viro } 197514f7dd63SDavid Woodhouse 197614f7dd63SDavid Woodhouse de->namlen = namlen; 197714f7dd63SDavid Woodhouse de->offset = offset; 197814f7dd63SDavid Woodhouse de->ino = ino; 197914f7dd63SDavid Woodhouse de->d_type = d_type; 198014f7dd63SDavid Woodhouse memcpy(de->name, name, namlen); 198114f7dd63SDavid Woodhouse buf->used += reclen; 198214f7dd63SDavid Woodhouse 198314f7dd63SDavid Woodhouse return 0; 198414f7dd63SDavid Woodhouse } 198514f7dd63SDavid Woodhouse 19866019ce07SChuck Lever static __be32 nfsd_buffered_readdir(struct file *file, struct svc_fh *fhp, 19876019ce07SChuck Lever nfsd_filldir_t func, struct readdir_cd *cdp, 19886019ce07SChuck Lever loff_t *offsetp) 19892628b766SDavid Woodhouse { 199014f7dd63SDavid Woodhouse struct buffered_dirent *de; 19912628b766SDavid Woodhouse int host_err; 199214f7dd63SDavid Woodhouse int size; 199314f7dd63SDavid Woodhouse loff_t offset; 1994ac6614b7SAl Viro struct readdir_data buf = { 1995ac6614b7SAl Viro .ctx.actor = nfsd_buffered_filldir, 1996ac6614b7SAl Viro .dirent = (void *)__get_free_page(GFP_KERNEL) 1997ac6614b7SAl Viro }; 19982628b766SDavid Woodhouse 199914f7dd63SDavid Woodhouse if (!buf.dirent) 20002f9092e1SDavid Woodhouse return nfserrno(-ENOMEM); 200114f7dd63SDavid Woodhouse 200214f7dd63SDavid Woodhouse offset = *offsetp; 20032628b766SDavid Woodhouse 200414f7dd63SDavid Woodhouse while (1) { 200514f7dd63SDavid Woodhouse unsigned int reclen; 200614f7dd63SDavid Woodhouse 2007b726e923SDoug Nazar cdp->err = nfserr_eof; /* will be cleared on successful read */ 200814f7dd63SDavid Woodhouse buf.used = 0; 200953c9c5c0SAl Viro buf.full = 0; 201014f7dd63SDavid Woodhouse 20115c0ba4e0SAl Viro host_err = iterate_dir(file, &buf.ctx); 201253c9c5c0SAl Viro if (buf.full) 201353c9c5c0SAl Viro host_err = 0; 201453c9c5c0SAl Viro 201553c9c5c0SAl Viro if (host_err < 0) 201614f7dd63SDavid Woodhouse break; 201714f7dd63SDavid Woodhouse 201814f7dd63SDavid Woodhouse size = buf.used; 201914f7dd63SDavid Woodhouse 202014f7dd63SDavid Woodhouse if (!size) 202114f7dd63SDavid Woodhouse break; 202214f7dd63SDavid Woodhouse 202314f7dd63SDavid Woodhouse de = (struct buffered_dirent *)buf.dirent; 202414f7dd63SDavid Woodhouse while (size > 0) { 202514f7dd63SDavid Woodhouse offset = de->offset; 202614f7dd63SDavid Woodhouse 202714f7dd63SDavid Woodhouse if (func(cdp, de->name, de->namlen, de->offset, 202814f7dd63SDavid Woodhouse de->ino, de->d_type)) 20292f9092e1SDavid Woodhouse break; 203014f7dd63SDavid Woodhouse 203114f7dd63SDavid Woodhouse if (cdp->err != nfs_ok) 20322f9092e1SDavid Woodhouse break; 203314f7dd63SDavid Woodhouse 20346019ce07SChuck Lever trace_nfsd_dirent(fhp, de->ino, de->name, de->namlen); 20356019ce07SChuck Lever 203614f7dd63SDavid Woodhouse reclen = ALIGN(sizeof(*de) + de->namlen, 203714f7dd63SDavid Woodhouse sizeof(u64)); 203814f7dd63SDavid Woodhouse size -= reclen; 203914f7dd63SDavid Woodhouse de = (struct buffered_dirent *)((char *)de + reclen); 204014f7dd63SDavid Woodhouse } 20412f9092e1SDavid Woodhouse if (size > 0) /* We bailed out early */ 20422f9092e1SDavid Woodhouse break; 20432f9092e1SDavid Woodhouse 2044c002a6c7SDavid Woodhouse offset = vfs_llseek(file, 0, SEEK_CUR); 204514f7dd63SDavid Woodhouse } 204614f7dd63SDavid Woodhouse 204714f7dd63SDavid Woodhouse free_page((unsigned long)(buf.dirent)); 20482628b766SDavid Woodhouse 20492628b766SDavid Woodhouse if (host_err) 20502628b766SDavid Woodhouse return nfserrno(host_err); 205114f7dd63SDavid Woodhouse 205214f7dd63SDavid Woodhouse *offsetp = offset; 20532628b766SDavid Woodhouse return cdp->err; 20542628b766SDavid Woodhouse } 20552628b766SDavid Woodhouse 20561da177e4SLinus Torvalds /* 20571da177e4SLinus Torvalds * Read entries from a directory. 20581da177e4SLinus Torvalds * The NFSv3/4 verifier we ignore for now. 20591da177e4SLinus Torvalds */ 20606264d69dSAl Viro __be32 20611da177e4SLinus Torvalds nfsd_readdir(struct svc_rqst *rqstp, struct svc_fh *fhp, loff_t *offsetp, 2062ac7576f4SMiklos Szeredi struct readdir_cd *cdp, nfsd_filldir_t func) 20631da177e4SLinus Torvalds { 20646264d69dSAl Viro __be32 err; 20651da177e4SLinus Torvalds struct file *file; 20661da177e4SLinus Torvalds loff_t offset = *offsetp; 206706effdbbSBernd Schubert int may_flags = NFSD_MAY_READ; 20681da177e4SLinus Torvalds 206906effdbbSBernd Schubert /* NFSv2 only supports 32 bit cookies */ 207006effdbbSBernd Schubert if (rqstp->rq_vers > 2) 207106effdbbSBernd Schubert may_flags |= NFSD_MAY_64BIT_COOKIE; 207206effdbbSBernd Schubert 207306effdbbSBernd Schubert err = nfsd_open(rqstp, fhp, S_IFDIR, may_flags, &file); 20741da177e4SLinus Torvalds if (err) 20751da177e4SLinus Torvalds goto out; 20761da177e4SLinus Torvalds 2077b108fe6bSJeff Layton offset = vfs_llseek(file, offset, SEEK_SET); 20781da177e4SLinus Torvalds if (offset < 0) { 20791da177e4SLinus Torvalds err = nfserrno((int)offset); 20801da177e4SLinus Torvalds goto out_close; 20811da177e4SLinus Torvalds } 20821da177e4SLinus Torvalds 20836019ce07SChuck Lever err = nfsd_buffered_readdir(file, fhp, func, cdp, offsetp); 20841da177e4SLinus Torvalds 20851da177e4SLinus Torvalds if (err == nfserr_eof || err == nfserr_toosmall) 20861da177e4SLinus Torvalds err = nfs_ok; /* can still be found in ->err */ 20871da177e4SLinus Torvalds out_close: 2088fd891454SChristoph Hellwig fput(file); 20891da177e4SLinus Torvalds out: 20901da177e4SLinus Torvalds return err; 20911da177e4SLinus Torvalds } 20921da177e4SLinus Torvalds 20931da177e4SLinus Torvalds /* 20941da177e4SLinus Torvalds * Get file system stats 20951da177e4SLinus Torvalds * N.B. After this call fhp needs an fh_put 20961da177e4SLinus Torvalds */ 20976264d69dSAl Viro __be32 209804716e66SJ. Bruce Fields nfsd_statfs(struct svc_rqst *rqstp, struct svc_fh *fhp, struct kstatfs *stat, int access) 20991da177e4SLinus Torvalds { 2100f6360efbSTakashi Iwai __be32 err; 2101f6360efbSTakashi Iwai 2102f6360efbSTakashi Iwai err = fh_verify(rqstp, fhp, 0, NFSD_MAY_NOP | access); 2103f6360efbSTakashi Iwai if (!err) { 2104ebabe9a9SChristoph Hellwig struct path path = { 2105ebabe9a9SChristoph Hellwig .mnt = fhp->fh_export->ex_path.mnt, 2106ebabe9a9SChristoph Hellwig .dentry = fhp->fh_dentry, 2107ebabe9a9SChristoph Hellwig }; 2108f6360efbSTakashi Iwai if (vfs_statfs(&path, stat)) 21091da177e4SLinus Torvalds err = nfserr_io; 2110f6360efbSTakashi Iwai } 21111da177e4SLinus Torvalds return err; 21121da177e4SLinus Torvalds } 21131da177e4SLinus Torvalds 2114c7d51402SJ. Bruce Fields static int exp_rdonly(struct svc_rqst *rqstp, struct svc_export *exp) 2115e22841c6SJ. Bruce Fields { 2116c7d51402SJ. Bruce Fields return nfsexp_flags(rqstp, exp) & NFSEXP_READONLY; 2117e22841c6SJ. Bruce Fields } 2118e22841c6SJ. Bruce Fields 211932119446SFrank van der Linden #ifdef CONFIG_NFSD_V4 212032119446SFrank van der Linden /* 212132119446SFrank van der Linden * Helper function to translate error numbers. In the case of xattr operations, 212232119446SFrank van der Linden * some error codes need to be translated outside of the standard translations. 212332119446SFrank van der Linden * 212432119446SFrank van der Linden * ENODATA needs to be translated to nfserr_noxattr. 212532119446SFrank van der Linden * E2BIG to nfserr_xattr2big. 212632119446SFrank van der Linden * 212732119446SFrank van der Linden * Additionally, vfs_listxattr can return -ERANGE. This means that the 212832119446SFrank van der Linden * file has too many extended attributes to retrieve inside an 212932119446SFrank van der Linden * XATTR_LIST_MAX sized buffer. This is a bug in the xattr implementation: 213032119446SFrank van der Linden * filesystems will allow the adding of extended attributes until they hit 213132119446SFrank van der Linden * their own internal limit. This limit may be larger than XATTR_LIST_MAX. 213232119446SFrank van der Linden * So, at that point, the attributes are present and valid, but can't 213332119446SFrank van der Linden * be retrieved using listxattr, since the upper level xattr code enforces 213432119446SFrank van der Linden * the XATTR_LIST_MAX limit. 213532119446SFrank van der Linden * 213632119446SFrank van der Linden * This bug means that we need to deal with listxattr returning -ERANGE. The 213732119446SFrank van der Linden * best mapping is to return TOOSMALL. 213832119446SFrank van der Linden */ 213932119446SFrank van der Linden static __be32 214032119446SFrank van der Linden nfsd_xattr_errno(int err) 214132119446SFrank van der Linden { 214232119446SFrank van der Linden switch (err) { 214332119446SFrank van der Linden case -ENODATA: 214432119446SFrank van der Linden return nfserr_noxattr; 214532119446SFrank van der Linden case -E2BIG: 214632119446SFrank van der Linden return nfserr_xattr2big; 214732119446SFrank van der Linden case -ERANGE: 214832119446SFrank van der Linden return nfserr_toosmall; 214932119446SFrank van der Linden } 215032119446SFrank van der Linden return nfserrno(err); 215132119446SFrank van der Linden } 215232119446SFrank van der Linden 215332119446SFrank van der Linden /* 215432119446SFrank van der Linden * Retrieve the specified user extended attribute. To avoid always 215532119446SFrank van der Linden * having to allocate the maximum size (since we are not getting 215632119446SFrank van der Linden * a maximum size from the RPC), do a probe + alloc. Hold a reader 215732119446SFrank van der Linden * lock on i_rwsem to prevent the extended attribute from changing 215832119446SFrank van der Linden * size while we're doing this. 215932119446SFrank van der Linden */ 216032119446SFrank van der Linden __be32 216132119446SFrank van der Linden nfsd_getxattr(struct svc_rqst *rqstp, struct svc_fh *fhp, char *name, 216232119446SFrank van der Linden void **bufp, int *lenp) 216332119446SFrank van der Linden { 216432119446SFrank van der Linden ssize_t len; 216532119446SFrank van der Linden __be32 err; 216632119446SFrank van der Linden char *buf; 216732119446SFrank van der Linden struct inode *inode; 216832119446SFrank van der Linden struct dentry *dentry; 216932119446SFrank van der Linden 217032119446SFrank van der Linden err = fh_verify(rqstp, fhp, 0, NFSD_MAY_READ); 217132119446SFrank van der Linden if (err) 217232119446SFrank van der Linden return err; 217332119446SFrank van der Linden 217432119446SFrank van der Linden err = nfs_ok; 217532119446SFrank van der Linden dentry = fhp->fh_dentry; 217632119446SFrank van der Linden inode = d_inode(dentry); 217732119446SFrank van der Linden 217832119446SFrank van der Linden inode_lock_shared(inode); 217932119446SFrank van der Linden 2180c7c7a1a1STycho Andersen len = vfs_getxattr(&init_user_ns, dentry, name, NULL, 0); 218132119446SFrank van der Linden 218232119446SFrank van der Linden /* 218332119446SFrank van der Linden * Zero-length attribute, just return. 218432119446SFrank van der Linden */ 218532119446SFrank van der Linden if (len == 0) { 218632119446SFrank van der Linden *bufp = NULL; 218732119446SFrank van der Linden *lenp = 0; 218832119446SFrank van der Linden goto out; 218932119446SFrank van der Linden } 219032119446SFrank van der Linden 219132119446SFrank van der Linden if (len < 0) { 219232119446SFrank van der Linden err = nfsd_xattr_errno(len); 219332119446SFrank van der Linden goto out; 219432119446SFrank van der Linden } 219532119446SFrank van der Linden 219632119446SFrank van der Linden if (len > *lenp) { 219732119446SFrank van der Linden err = nfserr_toosmall; 219832119446SFrank van der Linden goto out; 219932119446SFrank van der Linden } 220032119446SFrank van der Linden 220132119446SFrank van der Linden buf = kvmalloc(len, GFP_KERNEL | GFP_NOFS); 220232119446SFrank van der Linden if (buf == NULL) { 220332119446SFrank van der Linden err = nfserr_jukebox; 220432119446SFrank van der Linden goto out; 220532119446SFrank van der Linden } 220632119446SFrank van der Linden 2207c7c7a1a1STycho Andersen len = vfs_getxattr(&init_user_ns, dentry, name, buf, len); 220832119446SFrank van der Linden if (len <= 0) { 220932119446SFrank van der Linden kvfree(buf); 221032119446SFrank van der Linden buf = NULL; 221132119446SFrank van der Linden err = nfsd_xattr_errno(len); 221232119446SFrank van der Linden } 221332119446SFrank van der Linden 221432119446SFrank van der Linden *lenp = len; 221532119446SFrank van der Linden *bufp = buf; 221632119446SFrank van der Linden 221732119446SFrank van der Linden out: 221832119446SFrank van der Linden inode_unlock_shared(inode); 221932119446SFrank van der Linden 222032119446SFrank van der Linden return err; 222132119446SFrank van der Linden } 222232119446SFrank van der Linden 222332119446SFrank van der Linden /* 222432119446SFrank van der Linden * Retrieve the xattr names. Since we can't know how many are 222532119446SFrank van der Linden * user extended attributes, we must get all attributes here, 222632119446SFrank van der Linden * and have the XDR encode filter out the "user." ones. 222732119446SFrank van der Linden * 222832119446SFrank van der Linden * While this could always just allocate an XATTR_LIST_MAX 222932119446SFrank van der Linden * buffer, that's a waste, so do a probe + allocate. To 223032119446SFrank van der Linden * avoid any changes between the probe and allocate, wrap 223132119446SFrank van der Linden * this in inode_lock. 223232119446SFrank van der Linden */ 223332119446SFrank van der Linden __be32 223432119446SFrank van der Linden nfsd_listxattr(struct svc_rqst *rqstp, struct svc_fh *fhp, char **bufp, 223532119446SFrank van der Linden int *lenp) 223632119446SFrank van der Linden { 223732119446SFrank van der Linden ssize_t len; 223832119446SFrank van der Linden __be32 err; 223932119446SFrank van der Linden char *buf; 224032119446SFrank van der Linden struct inode *inode; 224132119446SFrank van der Linden struct dentry *dentry; 224232119446SFrank van der Linden 224332119446SFrank van der Linden err = fh_verify(rqstp, fhp, 0, NFSD_MAY_READ); 224432119446SFrank van der Linden if (err) 224532119446SFrank van der Linden return err; 224632119446SFrank van der Linden 224732119446SFrank van der Linden dentry = fhp->fh_dentry; 224832119446SFrank van der Linden inode = d_inode(dentry); 224932119446SFrank van der Linden *lenp = 0; 225032119446SFrank van der Linden 225132119446SFrank van der Linden inode_lock_shared(inode); 225232119446SFrank van der Linden 225332119446SFrank van der Linden len = vfs_listxattr(dentry, NULL, 0); 225432119446SFrank van der Linden if (len <= 0) { 225532119446SFrank van der Linden err = nfsd_xattr_errno(len); 225632119446SFrank van der Linden goto out; 225732119446SFrank van der Linden } 225832119446SFrank van der Linden 225932119446SFrank van der Linden if (len > XATTR_LIST_MAX) { 226032119446SFrank van der Linden err = nfserr_xattr2big; 226132119446SFrank van der Linden goto out; 226232119446SFrank van der Linden } 226332119446SFrank van der Linden 226432119446SFrank van der Linden /* 226532119446SFrank van der Linden * We're holding i_rwsem - use GFP_NOFS. 226632119446SFrank van der Linden */ 226732119446SFrank van der Linden buf = kvmalloc(len, GFP_KERNEL | GFP_NOFS); 226832119446SFrank van der Linden if (buf == NULL) { 226932119446SFrank van der Linden err = nfserr_jukebox; 227032119446SFrank van der Linden goto out; 227132119446SFrank van der Linden } 227232119446SFrank van der Linden 227332119446SFrank van der Linden len = vfs_listxattr(dentry, buf, len); 227432119446SFrank van der Linden if (len <= 0) { 227532119446SFrank van der Linden kvfree(buf); 227632119446SFrank van der Linden err = nfsd_xattr_errno(len); 227732119446SFrank van der Linden goto out; 227832119446SFrank van der Linden } 227932119446SFrank van der Linden 228032119446SFrank van der Linden *lenp = len; 228132119446SFrank van der Linden *bufp = buf; 228232119446SFrank van der Linden 228332119446SFrank van der Linden err = nfs_ok; 228432119446SFrank van der Linden out: 228532119446SFrank van der Linden inode_unlock_shared(inode); 228632119446SFrank van der Linden 228732119446SFrank van der Linden return err; 228832119446SFrank van der Linden } 228932119446SFrank van der Linden 229032119446SFrank van der Linden /* 229132119446SFrank van der Linden * Removexattr and setxattr need to call fh_lock to both lock the inode 229232119446SFrank van der Linden * and set the change attribute. Since the top-level vfs_removexattr 229332119446SFrank van der Linden * and vfs_setxattr calls already do their own inode_lock calls, call 229432119446SFrank van der Linden * the _locked variant. Pass in a NULL pointer for delegated_inode, 229532119446SFrank van der Linden * and let the client deal with NFS4ERR_DELAY (same as with e.g. 229632119446SFrank van der Linden * setattr and remove). 229732119446SFrank van der Linden */ 229832119446SFrank van der Linden __be32 229932119446SFrank van der Linden nfsd_removexattr(struct svc_rqst *rqstp, struct svc_fh *fhp, char *name) 230032119446SFrank van der Linden { 23018237284aSChuck Lever __be32 err; 23028237284aSChuck Lever int ret; 230332119446SFrank van der Linden 230432119446SFrank van der Linden err = fh_verify(rqstp, fhp, 0, NFSD_MAY_WRITE); 230532119446SFrank van der Linden if (err) 230632119446SFrank van der Linden return err; 230732119446SFrank van der Linden 230832119446SFrank van der Linden ret = fh_want_write(fhp); 230932119446SFrank van der Linden if (ret) 231032119446SFrank van der Linden return nfserrno(ret); 231132119446SFrank van der Linden 231232119446SFrank van der Linden fh_lock(fhp); 231332119446SFrank van der Linden 2314c7c7a1a1STycho Andersen ret = __vfs_removexattr_locked(&init_user_ns, fhp->fh_dentry, 2315c7c7a1a1STycho Andersen name, NULL); 231632119446SFrank van der Linden 231732119446SFrank van der Linden fh_unlock(fhp); 231832119446SFrank van der Linden fh_drop_write(fhp); 231932119446SFrank van der Linden 232032119446SFrank van der Linden return nfsd_xattr_errno(ret); 232132119446SFrank van der Linden } 232232119446SFrank van der Linden 232332119446SFrank van der Linden __be32 232432119446SFrank van der Linden nfsd_setxattr(struct svc_rqst *rqstp, struct svc_fh *fhp, char *name, 232532119446SFrank van der Linden void *buf, u32 len, u32 flags) 232632119446SFrank van der Linden { 23278237284aSChuck Lever __be32 err; 23288237284aSChuck Lever int ret; 232932119446SFrank van der Linden 233032119446SFrank van der Linden err = fh_verify(rqstp, fhp, 0, NFSD_MAY_WRITE); 233132119446SFrank van der Linden if (err) 233232119446SFrank van der Linden return err; 233332119446SFrank van der Linden 233432119446SFrank van der Linden ret = fh_want_write(fhp); 233532119446SFrank van der Linden if (ret) 233632119446SFrank van der Linden return nfserrno(ret); 233732119446SFrank van der Linden fh_lock(fhp); 233832119446SFrank van der Linden 2339c7c7a1a1STycho Andersen ret = __vfs_setxattr_locked(&init_user_ns, fhp->fh_dentry, name, buf, 2340c7c7a1a1STycho Andersen len, flags, NULL); 234132119446SFrank van der Linden 234232119446SFrank van der Linden fh_unlock(fhp); 234332119446SFrank van der Linden fh_drop_write(fhp); 234432119446SFrank van der Linden 234532119446SFrank van der Linden return nfsd_xattr_errno(ret); 234632119446SFrank van der Linden } 234732119446SFrank van der Linden #endif 234832119446SFrank van der Linden 23491da177e4SLinus Torvalds /* 23501da177e4SLinus Torvalds * Check for a user's access permissions to this inode. 23511da177e4SLinus Torvalds */ 23526264d69dSAl Viro __be32 23530ec757dfSJ. Bruce Fields nfsd_permission(struct svc_rqst *rqstp, struct svc_export *exp, 23540ec757dfSJ. Bruce Fields struct dentry *dentry, int acc) 23551da177e4SLinus Torvalds { 23562b0143b5SDavid Howells struct inode *inode = d_inode(dentry); 23571da177e4SLinus Torvalds int err; 23581da177e4SLinus Torvalds 2359aea93397SJ. Bruce Fields if ((acc & NFSD_MAY_MASK) == NFSD_MAY_NOP) 23601da177e4SLinus Torvalds return 0; 23611da177e4SLinus Torvalds #if 0 23621da177e4SLinus Torvalds dprintk("nfsd: permission 0x%x%s%s%s%s%s%s%s mode 0%o%s%s%s\n", 23631da177e4SLinus Torvalds acc, 23648837abcaSMiklos Szeredi (acc & NFSD_MAY_READ)? " read" : "", 23658837abcaSMiklos Szeredi (acc & NFSD_MAY_WRITE)? " write" : "", 23668837abcaSMiklos Szeredi (acc & NFSD_MAY_EXEC)? " exec" : "", 23678837abcaSMiklos Szeredi (acc & NFSD_MAY_SATTR)? " sattr" : "", 23688837abcaSMiklos Szeredi (acc & NFSD_MAY_TRUNC)? " trunc" : "", 23698837abcaSMiklos Szeredi (acc & NFSD_MAY_LOCK)? " lock" : "", 23708837abcaSMiklos Szeredi (acc & NFSD_MAY_OWNER_OVERRIDE)? " owneroverride" : "", 23711da177e4SLinus Torvalds inode->i_mode, 23721da177e4SLinus Torvalds IS_IMMUTABLE(inode)? " immut" : "", 23731da177e4SLinus Torvalds IS_APPEND(inode)? " append" : "", 23742c463e95SDave Hansen __mnt_is_readonly(exp->ex_path.mnt)? " ro" : ""); 23751da177e4SLinus Torvalds dprintk(" owner %d/%d user %d/%d\n", 23765cc0a840SDavid Howells inode->i_uid, inode->i_gid, current_fsuid(), current_fsgid()); 23771da177e4SLinus Torvalds #endif 23781da177e4SLinus Torvalds 23791da177e4SLinus Torvalds /* Normally we reject any write/sattr etc access on a read-only file 23801da177e4SLinus Torvalds * system. But if it is IRIX doing check on write-access for a 23811da177e4SLinus Torvalds * device special file, we ignore rofs. 23821da177e4SLinus Torvalds */ 23838837abcaSMiklos Szeredi if (!(acc & NFSD_MAY_LOCAL_ACCESS)) 23848837abcaSMiklos Szeredi if (acc & (NFSD_MAY_WRITE | NFSD_MAY_SATTR | NFSD_MAY_TRUNC)) { 23852c463e95SDave Hansen if (exp_rdonly(rqstp, exp) || 23862c463e95SDave Hansen __mnt_is_readonly(exp->ex_path.mnt)) 23871da177e4SLinus Torvalds return nfserr_rofs; 23888837abcaSMiklos Szeredi if (/* (acc & NFSD_MAY_WRITE) && */ IS_IMMUTABLE(inode)) 23891da177e4SLinus Torvalds return nfserr_perm; 23901da177e4SLinus Torvalds } 23918837abcaSMiklos Szeredi if ((acc & NFSD_MAY_TRUNC) && IS_APPEND(inode)) 23921da177e4SLinus Torvalds return nfserr_perm; 23931da177e4SLinus Torvalds 23948837abcaSMiklos Szeredi if (acc & NFSD_MAY_LOCK) { 23951da177e4SLinus Torvalds /* If we cannot rely on authentication in NLM requests, 23961da177e4SLinus Torvalds * just allow locks, otherwise require read permission, or 23971da177e4SLinus Torvalds * ownership 23981da177e4SLinus Torvalds */ 23991da177e4SLinus Torvalds if (exp->ex_flags & NFSEXP_NOAUTHNLM) 24001da177e4SLinus Torvalds return 0; 24011da177e4SLinus Torvalds else 24028837abcaSMiklos Szeredi acc = NFSD_MAY_READ | NFSD_MAY_OWNER_OVERRIDE; 24031da177e4SLinus Torvalds } 24041da177e4SLinus Torvalds /* 24051da177e4SLinus Torvalds * The file owner always gets access permission for accesses that 24061da177e4SLinus Torvalds * would normally be checked at open time. This is to make 24071da177e4SLinus Torvalds * file access work even when the client has done a fchmod(fd, 0). 24081da177e4SLinus Torvalds * 24091da177e4SLinus Torvalds * However, `cp foo bar' should fail nevertheless when bar is 24101da177e4SLinus Torvalds * readonly. A sensible way to do this might be to reject all 24111da177e4SLinus Torvalds * attempts to truncate a read-only file, because a creat() call 24121da177e4SLinus Torvalds * always implies file truncation. 24131da177e4SLinus Torvalds * ... but this isn't really fair. A process may reasonably call 24141da177e4SLinus Torvalds * ftruncate on an open file descriptor on a file with perm 000. 24151da177e4SLinus Torvalds * We must trust the client to do permission checking - using "ACCESS" 24161da177e4SLinus Torvalds * with NFSv3. 24171da177e4SLinus Torvalds */ 24188837abcaSMiklos Szeredi if ((acc & NFSD_MAY_OWNER_OVERRIDE) && 24196fab8779SEric W. Biederman uid_eq(inode->i_uid, current_fsuid())) 24201da177e4SLinus Torvalds return 0; 24211da177e4SLinus Torvalds 24228837abcaSMiklos Szeredi /* This assumes NFSD_MAY_{READ,WRITE,EXEC} == MAY_{READ,WRITE,EXEC} */ 242347291baaSChristian Brauner err = inode_permission(&init_user_ns, inode, 242447291baaSChristian Brauner acc & (MAY_READ | MAY_WRITE | MAY_EXEC)); 24251da177e4SLinus Torvalds 24261da177e4SLinus Torvalds /* Allow read access to binaries even when mode 111 */ 24271da177e4SLinus Torvalds if (err == -EACCES && S_ISREG(inode->i_mode) && 2428a043226bSJ. Bruce Fields (acc == (NFSD_MAY_READ | NFSD_MAY_OWNER_OVERRIDE) || 2429a043226bSJ. Bruce Fields acc == (NFSD_MAY_READ | NFSD_MAY_READ_IF_EXEC))) 243047291baaSChristian Brauner err = inode_permission(&init_user_ns, inode, MAY_EXEC); 24311da177e4SLinus Torvalds 24321da177e4SLinus Torvalds return err? nfserrno(err) : 0; 24331da177e4SLinus Torvalds } 2434