1f466c6fdSAl Viro #include "reiserfs.h" 21da177e4SLinus Torvalds #include <linux/errno.h> 31da177e4SLinus Torvalds #include <linux/fs.h> 41da177e4SLinus Torvalds #include <linux/pagemap.h> 51da177e4SLinus Torvalds #include <linux/xattr.h> 65a0e3ad6STejun Heo #include <linux/slab.h> 7c45ac888SAl Viro #include "xattr.h" 857fe60dfSJeff Mahoney #include <linux/security.h> 91da177e4SLinus Torvalds #include <asm/uaccess.h> 101da177e4SLinus Torvalds 111da177e4SLinus Torvalds static int 12431547b3SChristoph Hellwig security_get(struct dentry *dentry, const char *name, void *buffer, size_t size, 13431547b3SChristoph Hellwig int handler_flags) 141da177e4SLinus Torvalds { 151da177e4SLinus Torvalds if (strlen(name) < sizeof(XATTR_SECURITY_PREFIX)) 161da177e4SLinus Torvalds return -EINVAL; 171da177e4SLinus Torvalds 18431547b3SChristoph Hellwig if (IS_PRIVATE(dentry->d_inode)) 191da177e4SLinus Torvalds return -EPERM; 201da177e4SLinus Torvalds 21431547b3SChristoph Hellwig return reiserfs_xattr_get(dentry->d_inode, name, buffer, size); 221da177e4SLinus Torvalds } 231da177e4SLinus Torvalds 241da177e4SLinus Torvalds static int 25431547b3SChristoph Hellwig security_set(struct dentry *dentry, const char *name, const void *buffer, 26431547b3SChristoph Hellwig size_t size, int flags, int handler_flags) 271da177e4SLinus Torvalds { 281da177e4SLinus Torvalds if (strlen(name) < sizeof(XATTR_SECURITY_PREFIX)) 291da177e4SLinus Torvalds return -EINVAL; 301da177e4SLinus Torvalds 31431547b3SChristoph Hellwig if (IS_PRIVATE(dentry->d_inode)) 321da177e4SLinus Torvalds return -EPERM; 331da177e4SLinus Torvalds 34431547b3SChristoph Hellwig return reiserfs_xattr_set(dentry->d_inode, name, buffer, size, flags); 351da177e4SLinus Torvalds } 361da177e4SLinus Torvalds 37431547b3SChristoph Hellwig static size_t security_list(struct dentry *dentry, char *list, size_t list_len, 38431547b3SChristoph Hellwig const char *name, size_t namelen, int handler_flags) 391da177e4SLinus Torvalds { 4048b32a35SJeff Mahoney const size_t len = namelen + 1; 411da177e4SLinus Torvalds 42431547b3SChristoph Hellwig if (IS_PRIVATE(dentry->d_inode)) 431da177e4SLinus Torvalds return 0; 4448b32a35SJeff Mahoney 4548b32a35SJeff Mahoney if (list && len <= list_len) { 4648b32a35SJeff Mahoney memcpy(list, name, namelen); 4748b32a35SJeff Mahoney list[namelen] = '\0'; 481da177e4SLinus Torvalds } 491da177e4SLinus Torvalds 501da177e4SLinus Torvalds return len; 511da177e4SLinus Torvalds } 521da177e4SLinus Torvalds 5357fe60dfSJeff Mahoney /* Initializes the security context for a new inode and returns the number 5457fe60dfSJeff Mahoney * of blocks needed for the transaction. If successful, reiserfs_security 5557fe60dfSJeff Mahoney * must be released using reiserfs_security_free when the caller is done. */ 5657fe60dfSJeff Mahoney int reiserfs_security_init(struct inode *dir, struct inode *inode, 572a7dba39SEric Paris const struct qstr *qstr, 5857fe60dfSJeff Mahoney struct reiserfs_security_handle *sec) 5957fe60dfSJeff Mahoney { 6057fe60dfSJeff Mahoney int blocks = 0; 61b82bb72bSJeff Mahoney int error; 62b82bb72bSJeff Mahoney 63b82bb72bSJeff Mahoney sec->name = NULL; 64b82bb72bSJeff Mahoney 65b82bb72bSJeff Mahoney /* Don't add selinux attributes on xattrs - they'll never get used */ 66b82bb72bSJeff Mahoney if (IS_PRIVATE(dir)) 67b82bb72bSJeff Mahoney return 0; 68b82bb72bSJeff Mahoney 699d8f13baSMimi Zohar error = security_old_inode_init_security(inode, dir, qstr, &sec->name, 7057fe60dfSJeff Mahoney &sec->value, &sec->length); 7157fe60dfSJeff Mahoney if (error) { 7257fe60dfSJeff Mahoney if (error == -EOPNOTSUPP) 7357fe60dfSJeff Mahoney error = 0; 7457fe60dfSJeff Mahoney 7557fe60dfSJeff Mahoney sec->name = NULL; 7657fe60dfSJeff Mahoney sec->value = NULL; 7757fe60dfSJeff Mahoney sec->length = 0; 7857fe60dfSJeff Mahoney return error; 7957fe60dfSJeff Mahoney } 8057fe60dfSJeff Mahoney 816cb4aff0SJeff Mahoney if (sec->length && reiserfs_xattrs_initialized(inode->i_sb)) { 8257fe60dfSJeff Mahoney blocks = reiserfs_xattr_jcreate_nblocks(inode) + 8357fe60dfSJeff Mahoney reiserfs_xattr_nblocks(inode, sec->length); 8457fe60dfSJeff Mahoney /* We don't want to count the directories twice if we have 8557fe60dfSJeff Mahoney * a default ACL. */ 8657fe60dfSJeff Mahoney REISERFS_I(inode)->i_flags |= i_has_xattr_dir; 8757fe60dfSJeff Mahoney } 8857fe60dfSJeff Mahoney return blocks; 8957fe60dfSJeff Mahoney } 9057fe60dfSJeff Mahoney 9157fe60dfSJeff Mahoney int reiserfs_security_write(struct reiserfs_transaction_handle *th, 9257fe60dfSJeff Mahoney struct inode *inode, 9357fe60dfSJeff Mahoney struct reiserfs_security_handle *sec) 9457fe60dfSJeff Mahoney { 9557fe60dfSJeff Mahoney int error; 9657fe60dfSJeff Mahoney if (strlen(sec->name) < sizeof(XATTR_SECURITY_PREFIX)) 9757fe60dfSJeff Mahoney return -EINVAL; 9857fe60dfSJeff Mahoney 9957fe60dfSJeff Mahoney error = reiserfs_xattr_set_handle(th, inode, sec->name, sec->value, 10057fe60dfSJeff Mahoney sec->length, XATTR_CREATE); 10157fe60dfSJeff Mahoney if (error == -ENODATA || error == -EOPNOTSUPP) 10257fe60dfSJeff Mahoney error = 0; 10357fe60dfSJeff Mahoney 10457fe60dfSJeff Mahoney return error; 10557fe60dfSJeff Mahoney } 10657fe60dfSJeff Mahoney 10757fe60dfSJeff Mahoney void reiserfs_security_free(struct reiserfs_security_handle *sec) 10857fe60dfSJeff Mahoney { 10957fe60dfSJeff Mahoney kfree(sec->name); 11057fe60dfSJeff Mahoney kfree(sec->value); 11157fe60dfSJeff Mahoney sec->name = NULL; 11257fe60dfSJeff Mahoney sec->value = NULL; 11357fe60dfSJeff Mahoney } 11457fe60dfSJeff Mahoney 11594d09a98SStephen Hemminger const struct xattr_handler reiserfs_xattr_security_handler = { 1161da177e4SLinus Torvalds .prefix = XATTR_SECURITY_PREFIX, 1171da177e4SLinus Torvalds .get = security_get, 1181da177e4SLinus Torvalds .set = security_set, 1191da177e4SLinus Torvalds .list = security_list, 1201da177e4SLinus Torvalds }; 121