10b61f8a4SDave Chinner // SPDX-License-Identifier: GPL-2.0
2c59d87c4SChristoph Hellwig /*
3c59d87c4SChristoph Hellwig * Copyright (c) 2008, Christoph Hellwig
4c59d87c4SChristoph Hellwig * All Rights Reserved.
5c59d87c4SChristoph Hellwig */
6c59d87c4SChristoph Hellwig #include "xfs.h"
75467b34bSDarrick J. Wong #include "xfs_shared.h"
8a4fbe6abSDave Chinner #include "xfs_format.h"
969432832SDave Chinner #include "xfs_log_format.h"
107fd36c44SDave Chinner #include "xfs_trans_resv.h"
110a8aa193SDave Chinner #include "xfs_mount.h"
12a4fbe6abSDave Chinner #include "xfs_inode.h"
13e0c41089SDave Chinner #include "xfs_da_format.h"
14e0c41089SDave Chinner #include "xfs_da_btree.h"
15a4fbe6abSDave Chinner #include "xfs_attr.h"
16c59d87c4SChristoph Hellwig #include "xfs_trace.h"
17a5155b87SDarrick J. Wong #include "xfs_error.h"
185f213ddbSDarrick J. Wong #include "xfs_acl.h"
195d24ec4cSChristoph Hellwig #include "xfs_trans.h"
20efc2efebSDarrick J. Wong #include "xfs_xattr.h"
21c59d87c4SChristoph Hellwig
225f213ddbSDarrick J. Wong #include <linux/posix_acl_xattr.h>
23c59d87c4SChristoph Hellwig
24c59d87c4SChristoph Hellwig /*
25c59d87c4SChristoph Hellwig * Locking scheme:
26c59d87c4SChristoph Hellwig * - all ACL updates are protected by inode->i_mutex, which is taken before
27c59d87c4SChristoph Hellwig * calling into this file.
28c59d87c4SChristoph Hellwig */
29c59d87c4SChristoph Hellwig
30c59d87c4SChristoph Hellwig STATIC struct posix_acl *
xfs_acl_from_disk(struct xfs_mount * mp,const struct xfs_acl * aclp,int len,int max_entries)310a8aa193SDave Chinner xfs_acl_from_disk(
32a5155b87SDarrick J. Wong struct xfs_mount *mp,
3386a21c79SAndreas Gruenbacher const struct xfs_acl *aclp,
3486a21c79SAndreas Gruenbacher int len,
350a8aa193SDave Chinner int max_entries)
36c59d87c4SChristoph Hellwig {
37c59d87c4SChristoph Hellwig struct posix_acl_entry *acl_e;
38c59d87c4SChristoph Hellwig struct posix_acl *acl;
3986a21c79SAndreas Gruenbacher const struct xfs_acl_entry *ace;
40093019cfSXi Wang unsigned int count, i;
41c59d87c4SChristoph Hellwig
42a5155b87SDarrick J. Wong if (len < sizeof(*aclp)) {
43a5155b87SDarrick J. Wong XFS_CORRUPTION_ERROR(__func__, XFS_ERRLEVEL_LOW, mp, aclp,
44a5155b87SDarrick J. Wong len);
4586a21c79SAndreas Gruenbacher return ERR_PTR(-EFSCORRUPTED);
46a5155b87SDarrick J. Wong }
47a5155b87SDarrick J. Wong
48c59d87c4SChristoph Hellwig count = be32_to_cpu(aclp->acl_cnt);
49a5155b87SDarrick J. Wong if (count > max_entries || XFS_ACL_SIZE(count) != len) {
50a5155b87SDarrick J. Wong XFS_CORRUPTION_ERROR(__func__, XFS_ERRLEVEL_LOW, mp, aclp,
51a5155b87SDarrick J. Wong len);
52fa8b18edSChristoph Hellwig return ERR_PTR(-EFSCORRUPTED);
53a5155b87SDarrick J. Wong }
54c59d87c4SChristoph Hellwig
55c59d87c4SChristoph Hellwig acl = posix_acl_alloc(count, GFP_KERNEL);
56c59d87c4SChristoph Hellwig if (!acl)
57c59d87c4SChristoph Hellwig return ERR_PTR(-ENOMEM);
58c59d87c4SChristoph Hellwig
59c59d87c4SChristoph Hellwig for (i = 0; i < count; i++) {
60c59d87c4SChristoph Hellwig acl_e = &acl->a_entries[i];
61c59d87c4SChristoph Hellwig ace = &aclp->acl_entry[i];
62c59d87c4SChristoph Hellwig
63c59d87c4SChristoph Hellwig /*
64c59d87c4SChristoph Hellwig * The tag is 32 bits on disk and 16 bits in core.
65c59d87c4SChristoph Hellwig *
66c59d87c4SChristoph Hellwig * Because every access to it goes through the core
67c59d87c4SChristoph Hellwig * format first this is not a problem.
68c59d87c4SChristoph Hellwig */
69c59d87c4SChristoph Hellwig acl_e->e_tag = be32_to_cpu(ace->ae_tag);
70c59d87c4SChristoph Hellwig acl_e->e_perm = be16_to_cpu(ace->ae_perm);
71c59d87c4SChristoph Hellwig
72c59d87c4SChristoph Hellwig switch (acl_e->e_tag) {
73c59d87c4SChristoph Hellwig case ACL_USER:
74ba8adad5SChristoph Hellwig acl_e->e_uid = make_kuid(&init_user_ns,
75ba8adad5SChristoph Hellwig be32_to_cpu(ace->ae_id));
76288bbe0eSDwight Engen break;
77c59d87c4SChristoph Hellwig case ACL_GROUP:
78ba8adad5SChristoph Hellwig acl_e->e_gid = make_kgid(&init_user_ns,
79ba8adad5SChristoph Hellwig be32_to_cpu(ace->ae_id));
80c59d87c4SChristoph Hellwig break;
81c59d87c4SChristoph Hellwig case ACL_USER_OBJ:
82c59d87c4SChristoph Hellwig case ACL_GROUP_OBJ:
83c59d87c4SChristoph Hellwig case ACL_MASK:
84c59d87c4SChristoph Hellwig case ACL_OTHER:
85c59d87c4SChristoph Hellwig break;
86c59d87c4SChristoph Hellwig default:
87c59d87c4SChristoph Hellwig goto fail;
88c59d87c4SChristoph Hellwig }
89c59d87c4SChristoph Hellwig }
90c59d87c4SChristoph Hellwig return acl;
91c59d87c4SChristoph Hellwig
92c59d87c4SChristoph Hellwig fail:
93c59d87c4SChristoph Hellwig posix_acl_release(acl);
94c59d87c4SChristoph Hellwig return ERR_PTR(-EINVAL);
95c59d87c4SChristoph Hellwig }
96c59d87c4SChristoph Hellwig
97c59d87c4SChristoph Hellwig STATIC void
xfs_acl_to_disk(struct xfs_acl * aclp,const struct posix_acl * acl)98c59d87c4SChristoph Hellwig xfs_acl_to_disk(struct xfs_acl *aclp, const struct posix_acl *acl)
99c59d87c4SChristoph Hellwig {
100c59d87c4SChristoph Hellwig const struct posix_acl_entry *acl_e;
101c59d87c4SChristoph Hellwig struct xfs_acl_entry *ace;
102c59d87c4SChristoph Hellwig int i;
103c59d87c4SChristoph Hellwig
104c59d87c4SChristoph Hellwig aclp->acl_cnt = cpu_to_be32(acl->a_count);
105c59d87c4SChristoph Hellwig for (i = 0; i < acl->a_count; i++) {
106c59d87c4SChristoph Hellwig ace = &aclp->acl_entry[i];
107c59d87c4SChristoph Hellwig acl_e = &acl->a_entries[i];
108c59d87c4SChristoph Hellwig
109c59d87c4SChristoph Hellwig ace->ae_tag = cpu_to_be32(acl_e->e_tag);
110288bbe0eSDwight Engen switch (acl_e->e_tag) {
111288bbe0eSDwight Engen case ACL_USER:
112ba8adad5SChristoph Hellwig ace->ae_id = cpu_to_be32(
113ba8adad5SChristoph Hellwig from_kuid(&init_user_ns, acl_e->e_uid));
114288bbe0eSDwight Engen break;
115288bbe0eSDwight Engen case ACL_GROUP:
116ba8adad5SChristoph Hellwig ace->ae_id = cpu_to_be32(
117ba8adad5SChristoph Hellwig from_kgid(&init_user_ns, acl_e->e_gid));
118288bbe0eSDwight Engen break;
119288bbe0eSDwight Engen default:
120288bbe0eSDwight Engen ace->ae_id = cpu_to_be32(ACL_UNDEFINED_ID);
121288bbe0eSDwight Engen break;
122288bbe0eSDwight Engen }
123288bbe0eSDwight Engen
124c59d87c4SChristoph Hellwig ace->ae_perm = cpu_to_be16(acl_e->e_perm);
125c59d87c4SChristoph Hellwig }
126c59d87c4SChristoph Hellwig }
127c59d87c4SChristoph Hellwig
128c59d87c4SChristoph Hellwig struct posix_acl *
xfs_get_acl(struct inode * inode,int type,bool rcu)1290cad6246SMiklos Szeredi xfs_get_acl(struct inode *inode, int type, bool rcu)
130c59d87c4SChristoph Hellwig {
131c59d87c4SChristoph Hellwig struct xfs_inode *ip = XFS_I(inode);
132e5171d7eSChristoph Hellwig struct xfs_mount *mp = ip->i_mount;
1332401dc29SChristoph Hellwig struct posix_acl *acl = NULL;
134e5171d7eSChristoph Hellwig struct xfs_da_args args = {
135e5171d7eSChristoph Hellwig .dp = ip,
136d5f0f49aSChristoph Hellwig .attr_filter = XFS_ATTR_ROOT,
137e5171d7eSChristoph Hellwig .valuelen = XFS_ACL_MAX_SIZE(mp),
138e5171d7eSChristoph Hellwig };
139c59d87c4SChristoph Hellwig int error;
140c59d87c4SChristoph Hellwig
1410cad6246SMiklos Szeredi if (rcu)
1420cad6246SMiklos Szeredi return ERR_PTR(-ECHILD);
1430cad6246SMiklos Szeredi
144c59d87c4SChristoph Hellwig trace_xfs_get_acl(ip);
145c59d87c4SChristoph Hellwig
146c59d87c4SChristoph Hellwig switch (type) {
147c59d87c4SChristoph Hellwig case ACL_TYPE_ACCESS:
148e5171d7eSChristoph Hellwig args.name = SGI_ACL_FILE;
149c59d87c4SChristoph Hellwig break;
150c59d87c4SChristoph Hellwig case ACL_TYPE_DEFAULT:
151e5171d7eSChristoph Hellwig args.name = SGI_ACL_DEFAULT;
152c59d87c4SChristoph Hellwig break;
153c59d87c4SChristoph Hellwig default:
154c59d87c4SChristoph Hellwig BUG();
155c59d87c4SChristoph Hellwig }
156e5171d7eSChristoph Hellwig args.namelen = strlen(args.name);
157c59d87c4SChristoph Hellwig
158c59d87c4SChristoph Hellwig /*
159d49db18bSChristoph Hellwig * If the attribute doesn't exist make sure we have a negative cache
160d49db18bSChristoph Hellwig * entry, for any other error assume it is transient.
161c59d87c4SChristoph Hellwig */
162d49db18bSChristoph Hellwig error = xfs_attr_get(&args);
163d49db18bSChristoph Hellwig if (!error) {
164e5171d7eSChristoph Hellwig acl = xfs_acl_from_disk(mp, args.value, args.valuelen,
165e5171d7eSChristoph Hellwig XFS_ACL_MAX_ENTRIES(mp));
166d49db18bSChristoph Hellwig } else if (error != -ENOATTR) {
167d49db18bSChristoph Hellwig acl = ERR_PTR(error);
168ddbca70cSDave Chinner }
169d49db18bSChristoph Hellwig
170d49db18bSChristoph Hellwig kmem_free(args.value);
171c59d87c4SChristoph Hellwig return acl;
172c59d87c4SChristoph Hellwig }
173c59d87c4SChristoph Hellwig
1748ba35875SJan Kara int
__xfs_set_acl(struct inode * inode,struct posix_acl * acl,int type)1758ba35875SJan Kara __xfs_set_acl(struct inode *inode, struct posix_acl *acl, int type)
176c59d87c4SChristoph Hellwig {
177c59d87c4SChristoph Hellwig struct xfs_inode *ip = XFS_I(inode);
178a2544622SChristoph Hellwig struct xfs_da_args args = {
179a2544622SChristoph Hellwig .dp = ip,
180d5f0f49aSChristoph Hellwig .attr_filter = XFS_ATTR_ROOT,
181a2544622SChristoph Hellwig };
182c59d87c4SChristoph Hellwig int error;
183c59d87c4SChristoph Hellwig
184c59d87c4SChristoph Hellwig switch (type) {
185c59d87c4SChristoph Hellwig case ACL_TYPE_ACCESS:
186a2544622SChristoph Hellwig args.name = SGI_ACL_FILE;
187c59d87c4SChristoph Hellwig break;
188c59d87c4SChristoph Hellwig case ACL_TYPE_DEFAULT:
189c59d87c4SChristoph Hellwig if (!S_ISDIR(inode->i_mode))
190c59d87c4SChristoph Hellwig return acl ? -EACCES : 0;
191a2544622SChristoph Hellwig args.name = SGI_ACL_DEFAULT;
192c59d87c4SChristoph Hellwig break;
193c59d87c4SChristoph Hellwig default:
194c59d87c4SChristoph Hellwig return -EINVAL;
195c59d87c4SChristoph Hellwig }
196a2544622SChristoph Hellwig args.namelen = strlen(args.name);
197c59d87c4SChristoph Hellwig
198c59d87c4SChristoph Hellwig if (acl) {
199ed02d13fSChristoph Hellwig args.valuelen = XFS_ACL_SIZE(acl->a_count);
2008ca79df8SCarlos Maiolino args.value = kvzalloc(args.valuelen, GFP_KERNEL);
201a2544622SChristoph Hellwig if (!args.value)
202c59d87c4SChristoph Hellwig return -ENOMEM;
203a2544622SChristoph Hellwig xfs_acl_to_disk(args.value, acl);
2040eb81a5fSChristoph Hellwig }
205c59d87c4SChristoph Hellwig
206efc2efebSDarrick J. Wong error = xfs_attr_change(&args);
207a2544622SChristoph Hellwig kmem_free(args.value);
208c59d87c4SChristoph Hellwig
209c59d87c4SChristoph Hellwig /*
210c59d87c4SChristoph Hellwig * If the attribute didn't exist to start with that's fine.
211c59d87c4SChristoph Hellwig */
2120eb81a5fSChristoph Hellwig if (!acl && error == -ENOATTR)
213c59d87c4SChristoph Hellwig error = 0;
214c59d87c4SChristoph Hellwig if (!error)
215c59d87c4SChristoph Hellwig set_cached_acl(inode, type, acl);
216c59d87c4SChristoph Hellwig return error;
217c59d87c4SChristoph Hellwig }
218c59d87c4SChristoph Hellwig
219c59d87c4SChristoph Hellwig static int
xfs_acl_set_mode(struct inode * inode,umode_t mode)2205d24ec4cSChristoph Hellwig xfs_acl_set_mode(
2215d24ec4cSChristoph Hellwig struct inode *inode,
2225d24ec4cSChristoph Hellwig umode_t mode)
223c59d87c4SChristoph Hellwig {
2245d24ec4cSChristoph Hellwig struct xfs_inode *ip = XFS_I(inode);
2255d24ec4cSChristoph Hellwig struct xfs_mount *mp = ip->i_mount;
2265d24ec4cSChristoph Hellwig struct xfs_trans *tp;
2275d24ec4cSChristoph Hellwig int error;
228c59d87c4SChristoph Hellwig
2295d24ec4cSChristoph Hellwig error = xfs_trans_alloc(mp, &M_RES(mp)->tr_ichange, 0, 0, 0, &tp);
2305d24ec4cSChristoph Hellwig if (error)
231c59d87c4SChristoph Hellwig return error;
2325d24ec4cSChristoph Hellwig
2335d24ec4cSChristoph Hellwig xfs_ilock(ip, XFS_ILOCK_EXCL);
2345d24ec4cSChristoph Hellwig xfs_trans_ijoin(tp, ip, XFS_ILOCK_EXCL);
2355d24ec4cSChristoph Hellwig inode->i_mode = mode;
236*a0a415e3SJeff Layton inode_set_ctime_current(inode);
2375d24ec4cSChristoph Hellwig xfs_trans_log_inode(tp, ip, XFS_ILOG_CORE);
2385d24ec4cSChristoph Hellwig
2390560f31aSDave Chinner if (xfs_has_wsync(mp))
2405d24ec4cSChristoph Hellwig xfs_trans_set_sync(tp);
2415d24ec4cSChristoph Hellwig return xfs_trans_commit(tp);
242c59d87c4SChristoph Hellwig }
243c59d87c4SChristoph Hellwig
244c59d87c4SChristoph Hellwig int
xfs_set_acl(struct mnt_idmap * idmap,struct dentry * dentry,struct posix_acl * acl,int type)24513e83a49SChristian Brauner xfs_set_acl(struct mnt_idmap *idmap, struct dentry *dentry,
246549c7297SChristian Brauner struct posix_acl *acl, int type)
247c59d87c4SChristoph Hellwig {
24867f2ffe3SDave Chinner umode_t mode;
24967f2ffe3SDave Chinner bool set_mode = false;
250c59d87c4SChristoph Hellwig int error = 0;
251138060baSChristian Brauner struct inode *inode = d_inode(dentry);
252c59d87c4SChristoph Hellwig
2532401dc29SChristoph Hellwig if (!acl)
254c59d87c4SChristoph Hellwig goto set_acl;
255c59d87c4SChristoph Hellwig
2564ae69feaSJie Liu error = -E2BIG;
2570a8aa193SDave Chinner if (acl->a_count > XFS_ACL_MAX_ENTRIES(XFS_M(inode->i_sb)))
2582401dc29SChristoph Hellwig return error;
259c59d87c4SChristoph Hellwig
260c59d87c4SChristoph Hellwig if (type == ACL_TYPE_ACCESS) {
261700b7940SChristian Brauner error = posix_acl_update_mode(idmap, inode, &mode, &acl);
26207393101SJan Kara if (error)
263c59d87c4SChristoph Hellwig return error;
26467f2ffe3SDave Chinner set_mode = true;
265c59d87c4SChristoph Hellwig }
266c59d87c4SChristoph Hellwig
2672401dc29SChristoph Hellwig set_acl:
26867f2ffe3SDave Chinner /*
26967f2ffe3SDave Chinner * We set the mode after successfully updating the ACL xattr because the
27067f2ffe3SDave Chinner * xattr update can fail at ENOSPC and we don't want to change the mode
27167f2ffe3SDave Chinner * if the ACL update hasn't been applied.
27267f2ffe3SDave Chinner */
2735d24ec4cSChristoph Hellwig error = __xfs_set_acl(inode, acl, type);
2745d24ec4cSChristoph Hellwig if (!error && set_mode && mode != inode->i_mode)
2755d24ec4cSChristoph Hellwig error = xfs_acl_set_mode(inode, mode);
27667f2ffe3SDave Chinner return error;
2772401dc29SChristoph Hellwig }
2785a3930e2SChristoph Hellwig
2795a3930e2SChristoph Hellwig /*
2805a3930e2SChristoph Hellwig * Invalidate any cached ACLs if the user has bypassed the ACL interface.
2815a3930e2SChristoph Hellwig * We don't validate the content whatsoever so it is caller responsibility to
2825a3930e2SChristoph Hellwig * provide data in valid format and ensure i_mode is consistent.
2835a3930e2SChristoph Hellwig */
2845a3930e2SChristoph Hellwig void
xfs_forget_acl(struct inode * inode,const char * name)2855a3930e2SChristoph Hellwig xfs_forget_acl(
2865a3930e2SChristoph Hellwig struct inode *inode,
2875a3930e2SChristoph Hellwig const char *name)
2885a3930e2SChristoph Hellwig {
2895a3930e2SChristoph Hellwig if (!strcmp(name, SGI_ACL_FILE))
2905a3930e2SChristoph Hellwig forget_cached_acl(inode, ACL_TYPE_ACCESS);
2915a3930e2SChristoph Hellwig else if (!strcmp(name, SGI_ACL_DEFAULT))
2925a3930e2SChristoph Hellwig forget_cached_acl(inode, ACL_TYPE_DEFAULT);
2935a3930e2SChristoph Hellwig }
294