1b2441318SGreg Kroah-Hartman // SPDX-License-Identifier: GPL-2.0 2f466c6fdSAl Viro #include "reiserfs.h" 31da177e4SLinus Torvalds #include <linux/errno.h> 41da177e4SLinus Torvalds #include <linux/fs.h> 51da177e4SLinus Torvalds #include <linux/pagemap.h> 61da177e4SLinus Torvalds #include <linux/xattr.h> 75a0e3ad6STejun Heo #include <linux/slab.h> 8c45ac888SAl Viro #include "xattr.h" 957fe60dfSJeff Mahoney #include <linux/security.h> 1017093991SFabian Frederick #include <linux/uaccess.h> 111da177e4SLinus Torvalds 121da177e4SLinus Torvalds static int 13b296821aSAl Viro security_get(const struct xattr_handler *handler, struct dentry *unused, 14b296821aSAl Viro struct inode *inode, const char *name, void *buffer, size_t size) 151da177e4SLinus Torvalds { 16b296821aSAl Viro if (IS_PRIVATE(inode)) 171da177e4SLinus Torvalds return -EPERM; 181da177e4SLinus Torvalds 19b296821aSAl Viro return reiserfs_xattr_get(inode, xattr_full_name(handler, name), 2079a628d1SAl Viro buffer, size); 211da177e4SLinus Torvalds } 221da177e4SLinus Torvalds 231da177e4SLinus Torvalds static int 24e65ce2a5SChristian Brauner security_set(const struct xattr_handler *handler, 25*39f60c1cSChristian Brauner struct mnt_idmap *idmap, struct dentry *unused, 2659301226SAl Viro struct inode *inode, const char *name, const void *buffer, 2759301226SAl Viro size_t size, int flags) 281da177e4SLinus Torvalds { 2959301226SAl Viro if (IS_PRIVATE(inode)) 301da177e4SLinus Torvalds return -EPERM; 311da177e4SLinus Torvalds 3259301226SAl Viro return reiserfs_xattr_set(inode, 3379a628d1SAl Viro xattr_full_name(handler, name), 3479a628d1SAl Viro buffer, size, flags); 351da177e4SLinus Torvalds } 361da177e4SLinus Torvalds 37764a5c6bSAndreas Gruenbacher static bool security_list(struct dentry *dentry) 381da177e4SLinus Torvalds { 39764a5c6bSAndreas Gruenbacher return !IS_PRIVATE(d_inode(dentry)); 401da177e4SLinus Torvalds } 411da177e4SLinus Torvalds 4257fe60dfSJeff Mahoney /* Initializes the security context for a new inode and returns the number 4357fe60dfSJeff Mahoney * of blocks needed for the transaction. If successful, reiserfs_security 4457fe60dfSJeff Mahoney * must be released using reiserfs_security_free when the caller is done. */ 4557fe60dfSJeff Mahoney int reiserfs_security_init(struct inode *dir, struct inode *inode, 462a7dba39SEric Paris const struct qstr *qstr, 4757fe60dfSJeff Mahoney struct reiserfs_security_handle *sec) 4857fe60dfSJeff Mahoney { 4957fe60dfSJeff Mahoney int blocks = 0; 50b82bb72bSJeff Mahoney int error; 51b82bb72bSJeff Mahoney 52b82bb72bSJeff Mahoney sec->name = NULL; 53572302afSRoberto Sassu sec->value = NULL; 54b82bb72bSJeff Mahoney 55b82bb72bSJeff Mahoney /* Don't add selinux attributes on xattrs - they'll never get used */ 56b82bb72bSJeff Mahoney if (IS_PRIVATE(dir)) 57b82bb72bSJeff Mahoney return 0; 58b82bb72bSJeff Mahoney 599d8f13baSMimi Zohar error = security_old_inode_init_security(inode, dir, qstr, &sec->name, 6057fe60dfSJeff Mahoney &sec->value, &sec->length); 6157fe60dfSJeff Mahoney if (error) { 6257fe60dfSJeff Mahoney if (error == -EOPNOTSUPP) 6357fe60dfSJeff Mahoney error = 0; 6457fe60dfSJeff Mahoney 6557fe60dfSJeff Mahoney sec->name = NULL; 6657fe60dfSJeff Mahoney sec->value = NULL; 6757fe60dfSJeff Mahoney sec->length = 0; 6857fe60dfSJeff Mahoney return error; 6957fe60dfSJeff Mahoney } 7057fe60dfSJeff Mahoney 716cb4aff0SJeff Mahoney if (sec->length && reiserfs_xattrs_initialized(inode->i_sb)) { 7257fe60dfSJeff Mahoney blocks = reiserfs_xattr_jcreate_nblocks(inode) + 7357fe60dfSJeff Mahoney reiserfs_xattr_nblocks(inode, sec->length); 7457fe60dfSJeff Mahoney /* We don't want to count the directories twice if we have 7557fe60dfSJeff Mahoney * a default ACL. */ 7657fe60dfSJeff Mahoney REISERFS_I(inode)->i_flags |= i_has_xattr_dir; 7757fe60dfSJeff Mahoney } 7857fe60dfSJeff Mahoney return blocks; 7957fe60dfSJeff Mahoney } 8057fe60dfSJeff Mahoney 8157fe60dfSJeff Mahoney int reiserfs_security_write(struct reiserfs_transaction_handle *th, 8257fe60dfSJeff Mahoney struct inode *inode, 8357fe60dfSJeff Mahoney struct reiserfs_security_handle *sec) 8457fe60dfSJeff Mahoney { 8557fe60dfSJeff Mahoney int error; 8657fe60dfSJeff Mahoney if (strlen(sec->name) < sizeof(XATTR_SECURITY_PREFIX)) 8757fe60dfSJeff Mahoney return -EINVAL; 8857fe60dfSJeff Mahoney 8957fe60dfSJeff Mahoney error = reiserfs_xattr_set_handle(th, inode, sec->name, sec->value, 9057fe60dfSJeff Mahoney sec->length, XATTR_CREATE); 9157fe60dfSJeff Mahoney if (error == -ENODATA || error == -EOPNOTSUPP) 9257fe60dfSJeff Mahoney error = 0; 9357fe60dfSJeff Mahoney 9457fe60dfSJeff Mahoney return error; 9557fe60dfSJeff Mahoney } 9657fe60dfSJeff Mahoney 9757fe60dfSJeff Mahoney void reiserfs_security_free(struct reiserfs_security_handle *sec) 9857fe60dfSJeff Mahoney { 9957fe60dfSJeff Mahoney kfree(sec->value); 10057fe60dfSJeff Mahoney sec->name = NULL; 10157fe60dfSJeff Mahoney sec->value = NULL; 10257fe60dfSJeff Mahoney } 10357fe60dfSJeff Mahoney 10494d09a98SStephen Hemminger const struct xattr_handler reiserfs_xattr_security_handler = { 1051da177e4SLinus Torvalds .prefix = XATTR_SECURITY_PREFIX, 1061da177e4SLinus Torvalds .get = security_get, 1071da177e4SLinus Torvalds .set = security_set, 1081da177e4SLinus Torvalds .list = security_list, 1091da177e4SLinus Torvalds }; 110