1f466c6fdSAl Viro #include "reiserfs.h" 21da177e4SLinus Torvalds #include <linux/errno.h> 31da177e4SLinus Torvalds #include <linux/fs.h> 41da177e4SLinus Torvalds #include <linux/pagemap.h> 51da177e4SLinus Torvalds #include <linux/xattr.h> 65a0e3ad6STejun Heo #include <linux/slab.h> 7c45ac888SAl Viro #include "xattr.h" 857fe60dfSJeff Mahoney #include <linux/security.h> 917093991SFabian Frederick #include <linux/uaccess.h> 101da177e4SLinus Torvalds 111da177e4SLinus Torvalds static int 12b296821aSAl Viro security_get(const struct xattr_handler *handler, struct dentry *unused, 13b296821aSAl Viro struct inode *inode, const char *name, void *buffer, size_t size) 141da177e4SLinus Torvalds { 15b296821aSAl Viro if (IS_PRIVATE(inode)) 161da177e4SLinus Torvalds return -EPERM; 171da177e4SLinus Torvalds 18b296821aSAl Viro return reiserfs_xattr_get(inode, xattr_full_name(handler, name), 1979a628d1SAl Viro buffer, size); 201da177e4SLinus Torvalds } 211da177e4SLinus Torvalds 221da177e4SLinus Torvalds static int 2359301226SAl Viro security_set(const struct xattr_handler *handler, struct dentry *unused, 2459301226SAl Viro struct inode *inode, const char *name, const void *buffer, 2559301226SAl Viro size_t size, int flags) 261da177e4SLinus Torvalds { 2759301226SAl Viro if (IS_PRIVATE(inode)) 281da177e4SLinus Torvalds return -EPERM; 291da177e4SLinus Torvalds 3059301226SAl Viro return reiserfs_xattr_set(inode, 3179a628d1SAl Viro xattr_full_name(handler, name), 3279a628d1SAl Viro buffer, size, flags); 331da177e4SLinus Torvalds } 341da177e4SLinus Torvalds 35764a5c6bSAndreas Gruenbacher static bool security_list(struct dentry *dentry) 361da177e4SLinus Torvalds { 37764a5c6bSAndreas Gruenbacher return !IS_PRIVATE(d_inode(dentry)); 381da177e4SLinus Torvalds } 391da177e4SLinus Torvalds 4057fe60dfSJeff Mahoney /* Initializes the security context for a new inode and returns the number 4157fe60dfSJeff Mahoney * of blocks needed for the transaction. If successful, reiserfs_security 4257fe60dfSJeff Mahoney * must be released using reiserfs_security_free when the caller is done. */ 4357fe60dfSJeff Mahoney int reiserfs_security_init(struct inode *dir, struct inode *inode, 442a7dba39SEric Paris const struct qstr *qstr, 4557fe60dfSJeff Mahoney struct reiserfs_security_handle *sec) 4657fe60dfSJeff Mahoney { 4757fe60dfSJeff Mahoney int blocks = 0; 48b82bb72bSJeff Mahoney int error; 49b82bb72bSJeff Mahoney 50b82bb72bSJeff Mahoney sec->name = NULL; 51b82bb72bSJeff Mahoney 52b82bb72bSJeff Mahoney /* Don't add selinux attributes on xattrs - they'll never get used */ 53b82bb72bSJeff Mahoney if (IS_PRIVATE(dir)) 54b82bb72bSJeff Mahoney return 0; 55b82bb72bSJeff Mahoney 569d8f13baSMimi Zohar error = security_old_inode_init_security(inode, dir, qstr, &sec->name, 5757fe60dfSJeff Mahoney &sec->value, &sec->length); 5857fe60dfSJeff Mahoney if (error) { 5957fe60dfSJeff Mahoney if (error == -EOPNOTSUPP) 6057fe60dfSJeff Mahoney error = 0; 6157fe60dfSJeff Mahoney 6257fe60dfSJeff Mahoney sec->name = NULL; 6357fe60dfSJeff Mahoney sec->value = NULL; 6457fe60dfSJeff Mahoney sec->length = 0; 6557fe60dfSJeff Mahoney return error; 6657fe60dfSJeff Mahoney } 6757fe60dfSJeff Mahoney 686cb4aff0SJeff Mahoney if (sec->length && reiserfs_xattrs_initialized(inode->i_sb)) { 6957fe60dfSJeff Mahoney blocks = reiserfs_xattr_jcreate_nblocks(inode) + 7057fe60dfSJeff Mahoney reiserfs_xattr_nblocks(inode, sec->length); 7157fe60dfSJeff Mahoney /* We don't want to count the directories twice if we have 7257fe60dfSJeff Mahoney * a default ACL. */ 7357fe60dfSJeff Mahoney REISERFS_I(inode)->i_flags |= i_has_xattr_dir; 7457fe60dfSJeff Mahoney } 7557fe60dfSJeff Mahoney return blocks; 7657fe60dfSJeff Mahoney } 7757fe60dfSJeff Mahoney 7857fe60dfSJeff Mahoney int reiserfs_security_write(struct reiserfs_transaction_handle *th, 7957fe60dfSJeff Mahoney struct inode *inode, 8057fe60dfSJeff Mahoney struct reiserfs_security_handle *sec) 8157fe60dfSJeff Mahoney { 8257fe60dfSJeff Mahoney int error; 8357fe60dfSJeff Mahoney if (strlen(sec->name) < sizeof(XATTR_SECURITY_PREFIX)) 8457fe60dfSJeff Mahoney return -EINVAL; 8557fe60dfSJeff Mahoney 8657fe60dfSJeff Mahoney error = reiserfs_xattr_set_handle(th, inode, sec->name, sec->value, 8757fe60dfSJeff Mahoney sec->length, XATTR_CREATE); 8857fe60dfSJeff Mahoney if (error == -ENODATA || error == -EOPNOTSUPP) 8957fe60dfSJeff Mahoney error = 0; 9057fe60dfSJeff Mahoney 9157fe60dfSJeff Mahoney return error; 9257fe60dfSJeff Mahoney } 9357fe60dfSJeff Mahoney 9457fe60dfSJeff Mahoney void reiserfs_security_free(struct reiserfs_security_handle *sec) 9557fe60dfSJeff Mahoney { 9657fe60dfSJeff Mahoney kfree(sec->name); 9757fe60dfSJeff Mahoney kfree(sec->value); 9857fe60dfSJeff Mahoney sec->name = NULL; 9957fe60dfSJeff Mahoney sec->value = NULL; 10057fe60dfSJeff Mahoney } 10157fe60dfSJeff Mahoney 10294d09a98SStephen Hemminger const struct xattr_handler reiserfs_xattr_security_handler = { 1031da177e4SLinus Torvalds .prefix = XATTR_SECURITY_PREFIX, 1041da177e4SLinus Torvalds .get = security_get, 1051da177e4SLinus Torvalds .set = security_set, 1061da177e4SLinus Torvalds .list = security_list, 1071da177e4SLinus Torvalds }; 108