116038816SMartin Matuska /* 216038816SMartin Matuska * CDDL HEADER START 316038816SMartin Matuska * 416038816SMartin Matuska * The contents of this file are subject to the terms of the 516038816SMartin Matuska * Common Development and Distribution License (the "License"). 616038816SMartin Matuska * You may not use this file except in compliance with the License. 716038816SMartin Matuska * 816038816SMartin Matuska * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE 9*271171e0SMartin Matuska * or https://opensource.org/licenses/CDDL-1.0. 1016038816SMartin Matuska * See the License for the specific language governing permissions 1116038816SMartin Matuska * and limitations under the License. 1216038816SMartin Matuska * 1316038816SMartin Matuska * When distributing Covered Code, include this CDDL HEADER in each 1416038816SMartin Matuska * file and include the License file at usr/src/OPENSOLARIS.LICENSE. 1516038816SMartin Matuska * If applicable, add the following below this CDDL HEADER, with the 1616038816SMartin Matuska * fields enclosed by brackets "[]" replaced with your own identifying 1716038816SMartin Matuska * information: Portions Copyright [yyyy] [name of copyright owner] 1816038816SMartin Matuska * 1916038816SMartin Matuska * CDDL HEADER END 2016038816SMartin Matuska */ 2116038816SMartin Matuska 2216038816SMartin Matuska 2316038816SMartin Matuska #include <sys/types.h> 2416038816SMartin Matuska #include <sys/stat.h> 2516038816SMartin Matuska #include <sys/file.h> 2616038816SMartin Matuska #include <fcntl.h> 27716fd348SMartin Matuska #include <ctype.h> 2816038816SMartin Matuska #include <stdio.h> 2916038816SMartin Matuska #include <errno.h> 3016038816SMartin Matuska #include <libshare.h> 3116038816SMartin Matuska #include "nfs.h" 3216038816SMartin Matuska 3316038816SMartin Matuska 3416038816SMartin Matuska /* 3516038816SMartin Matuska * nfs_exports_[lock|unlock] are used to guard against conconcurrent 3616038816SMartin Matuska * updates to the exports file. Each protocol is responsible for 3716038816SMartin Matuska * providing the necessary locking to ensure consistency. 3816038816SMartin Matuska */ 3916038816SMartin Matuska static int 40716fd348SMartin Matuska nfs_exports_lock(const char *name, int *nfs_lock_fd) 4116038816SMartin Matuska { 4216038816SMartin Matuska int err; 4316038816SMartin Matuska 44716fd348SMartin Matuska *nfs_lock_fd = open(name, O_RDWR | O_CREAT | O_CLOEXEC, 0600); 45716fd348SMartin Matuska if (*nfs_lock_fd == -1) { 4616038816SMartin Matuska err = errno; 4716038816SMartin Matuska fprintf(stderr, "failed to lock %s: %s\n", name, strerror(err)); 4816038816SMartin Matuska return (err); 4916038816SMartin Matuska } 5016038816SMartin Matuska 51716fd348SMartin Matuska while ((err = flock(*nfs_lock_fd, LOCK_EX)) != 0 && errno == EINTR) 52e92ffd9bSMartin Matuska ; 53e92ffd9bSMartin Matuska if (err != 0) { 5416038816SMartin Matuska err = errno; 5516038816SMartin Matuska fprintf(stderr, "failed to lock %s: %s\n", name, strerror(err)); 56716fd348SMartin Matuska (void) close(*nfs_lock_fd); 57716fd348SMartin Matuska *nfs_lock_fd = -1; 5816038816SMartin Matuska return (err); 5916038816SMartin Matuska } 6016038816SMartin Matuska 6116038816SMartin Matuska return (0); 6216038816SMartin Matuska } 6316038816SMartin Matuska 6416038816SMartin Matuska static void 65716fd348SMartin Matuska nfs_exports_unlock(const char *name, int *nfs_lock_fd) 6616038816SMartin Matuska { 67716fd348SMartin Matuska verify(*nfs_lock_fd > 0); 6816038816SMartin Matuska 69716fd348SMartin Matuska if (flock(*nfs_lock_fd, LOCK_UN) != 0) 7016038816SMartin Matuska fprintf(stderr, "failed to unlock %s: %s\n", 7116038816SMartin Matuska name, strerror(errno)); 7216038816SMartin Matuska 73716fd348SMartin Matuska (void) close(*nfs_lock_fd); 74716fd348SMartin Matuska *nfs_lock_fd = -1; 7516038816SMartin Matuska } 7616038816SMartin Matuska 77e92ffd9bSMartin Matuska struct tmpfile { 78e92ffd9bSMartin Matuska /* 79e92ffd9bSMartin Matuska * This only needs to be as wide as ZFS_EXPORTS_FILE and mktemp suffix, 80e92ffd9bSMartin Matuska * 64 is more than enough. 81e92ffd9bSMartin Matuska */ 82e92ffd9bSMartin Matuska char name[64]; 83e92ffd9bSMartin Matuska FILE *fp; 84e92ffd9bSMartin Matuska }; 8516038816SMartin Matuska 86e92ffd9bSMartin Matuska static boolean_t 87e92ffd9bSMartin Matuska nfs_init_tmpfile(const char *prefix, const char *mdir, struct tmpfile *tmpf) 88e92ffd9bSMartin Matuska { 8916038816SMartin Matuska if (mdir != NULL && 90e92ffd9bSMartin Matuska mkdir(mdir, 0755) < 0 && 91e92ffd9bSMartin Matuska errno != EEXIST) { 9216038816SMartin Matuska fprintf(stderr, "failed to create %s: %s\n", 9316038816SMartin Matuska mdir, strerror(errno)); 94e92ffd9bSMartin Matuska return (B_FALSE); 9516038816SMartin Matuska } 9616038816SMartin Matuska 97e92ffd9bSMartin Matuska strcpy(tmpf->name, prefix); 98e92ffd9bSMartin Matuska strcat(tmpf->name, ".XXXXXXXX"); 9916038816SMartin Matuska 100e92ffd9bSMartin Matuska int fd = mkostemp(tmpf->name, O_CLOEXEC); 10116038816SMartin Matuska if (fd == -1) { 10216038816SMartin Matuska fprintf(stderr, "Unable to create temporary file: %s", 10316038816SMartin Matuska strerror(errno)); 104e92ffd9bSMartin Matuska return (B_FALSE); 10516038816SMartin Matuska } 106e92ffd9bSMartin Matuska 107e92ffd9bSMartin Matuska tmpf->fp = fdopen(fd, "w+"); 108e92ffd9bSMartin Matuska if (tmpf->fp == NULL) { 109e92ffd9bSMartin Matuska fprintf(stderr, "Unable to reopen temporary file: %s", 110e92ffd9bSMartin Matuska strerror(errno)); 11116038816SMartin Matuska close(fd); 112e92ffd9bSMartin Matuska return (B_FALSE); 113e92ffd9bSMartin Matuska } 114e92ffd9bSMartin Matuska 115e92ffd9bSMartin Matuska return (B_TRUE); 116e92ffd9bSMartin Matuska } 117e92ffd9bSMartin Matuska 118e92ffd9bSMartin Matuska static void 119e92ffd9bSMartin Matuska nfs_abort_tmpfile(struct tmpfile *tmpf) 120e92ffd9bSMartin Matuska { 121e92ffd9bSMartin Matuska unlink(tmpf->name); 122e92ffd9bSMartin Matuska fclose(tmpf->fp); 12316038816SMartin Matuska } 12416038816SMartin Matuska 12516038816SMartin Matuska static int 126e92ffd9bSMartin Matuska nfs_fini_tmpfile(const char *exports, struct tmpfile *tmpf) 12716038816SMartin Matuska { 128e92ffd9bSMartin Matuska if (fflush(tmpf->fp) != 0) { 129e92ffd9bSMartin Matuska fprintf(stderr, "Failed to write to temporary file: %s\n", 13016038816SMartin Matuska strerror(errno)); 131e92ffd9bSMartin Matuska nfs_abort_tmpfile(tmpf); 13216038816SMartin Matuska return (SA_SYSTEM_ERR); 13316038816SMartin Matuska } 134e92ffd9bSMartin Matuska 135e92ffd9bSMartin Matuska if (rename(tmpf->name, exports) == -1) { 136e92ffd9bSMartin Matuska fprintf(stderr, "Unable to rename %s -> %s: %s\n", 137e92ffd9bSMartin Matuska tmpf->name, exports, strerror(errno)); 138e92ffd9bSMartin Matuska nfs_abort_tmpfile(tmpf); 139e92ffd9bSMartin Matuska return (SA_SYSTEM_ERR); 140e92ffd9bSMartin Matuska } 141e92ffd9bSMartin Matuska 142e92ffd9bSMartin Matuska (void) fchmod(fileno(tmpf->fp), 0644); 143e92ffd9bSMartin Matuska fclose(tmpf->fp); 14416038816SMartin Matuska return (SA_OK); 14516038816SMartin Matuska } 14616038816SMartin Matuska 147716fd348SMartin Matuska int 148716fd348SMartin Matuska nfs_escape_mountpoint(const char *mp, char **out, boolean_t *need_free) 149716fd348SMartin Matuska { 150716fd348SMartin Matuska if (strpbrk(mp, "\t\n\v\f\r \\") == NULL) { 151716fd348SMartin Matuska *out = (char *)mp; 152716fd348SMartin Matuska *need_free = B_FALSE; 153716fd348SMartin Matuska return (SA_OK); 154716fd348SMartin Matuska } else { 155716fd348SMartin Matuska size_t len = strlen(mp); 156716fd348SMartin Matuska *out = malloc(len * 4 + 1); 157716fd348SMartin Matuska if (!*out) 158716fd348SMartin Matuska return (SA_NO_MEMORY); 159716fd348SMartin Matuska *need_free = B_TRUE; 160716fd348SMartin Matuska 161716fd348SMartin Matuska char *oc = *out; 162716fd348SMartin Matuska for (const char *c = mp; c < mp + len; ++c) 163716fd348SMartin Matuska if (memchr("\t\n\v\f\r \\", *c, 164716fd348SMartin Matuska strlen("\t\n\v\f\r \\"))) { 165716fd348SMartin Matuska sprintf(oc, "\\%03hho", *c); 166716fd348SMartin Matuska oc += 4; 167716fd348SMartin Matuska } else 168716fd348SMartin Matuska *oc++ = *c; 169716fd348SMartin Matuska *oc = '\0'; 170716fd348SMartin Matuska } 171716fd348SMartin Matuska 172716fd348SMartin Matuska return (SA_OK); 173716fd348SMartin Matuska } 174716fd348SMartin Matuska 175e92ffd9bSMartin Matuska static int 176e92ffd9bSMartin Matuska nfs_process_exports(const char *exports, const char *mountpoint, 177e92ffd9bSMartin Matuska boolean_t (*cbk)(void *userdata, char *line, boolean_t found_mountpoint), 178e92ffd9bSMartin Matuska void *userdata) 179e92ffd9bSMartin Matuska { 180e92ffd9bSMartin Matuska int error = SA_OK; 181e92ffd9bSMartin Matuska boolean_t cont = B_TRUE; 182e92ffd9bSMartin Matuska 183e92ffd9bSMartin Matuska FILE *oldfp = fopen(exports, "re"); 184e92ffd9bSMartin Matuska if (oldfp != NULL) { 185716fd348SMartin Matuska boolean_t need_mp_free; 186716fd348SMartin Matuska char *mp; 187716fd348SMartin Matuska if ((error = nfs_escape_mountpoint(mountpoint, 188716fd348SMartin Matuska &mp, &need_mp_free)) != SA_OK) { 189716fd348SMartin Matuska (void) fclose(oldfp); 190716fd348SMartin Matuska return (error); 191716fd348SMartin Matuska } 192716fd348SMartin Matuska 193e92ffd9bSMartin Matuska char *buf = NULL, *sep; 194716fd348SMartin Matuska size_t buflen = 0, mplen = strlen(mp); 195e92ffd9bSMartin Matuska 196e92ffd9bSMartin Matuska while (cont && getline(&buf, &buflen, oldfp) != -1) { 197e92ffd9bSMartin Matuska if (buf[0] == '\n' || buf[0] == '#') 198e92ffd9bSMartin Matuska continue; 199e92ffd9bSMartin Matuska 200e92ffd9bSMartin Matuska cont = cbk(userdata, buf, 201e92ffd9bSMartin Matuska (sep = strpbrk(buf, "\t \n")) != NULL && 202e92ffd9bSMartin Matuska sep - buf == mplen && 203716fd348SMartin Matuska strncmp(buf, mp, mplen) == 0); 204e92ffd9bSMartin Matuska } 205e92ffd9bSMartin Matuska free(buf); 206716fd348SMartin Matuska if (need_mp_free) 207716fd348SMartin Matuska free(mp); 208e92ffd9bSMartin Matuska 209e92ffd9bSMartin Matuska if (ferror(oldfp) != 0) 210e92ffd9bSMartin Matuska error = ferror(oldfp); 211e92ffd9bSMartin Matuska 212e92ffd9bSMartin Matuska if (fclose(oldfp) != 0) { 213e92ffd9bSMartin Matuska fprintf(stderr, "Unable to close file %s: %s\n", 214e92ffd9bSMartin Matuska exports, strerror(errno)); 215e92ffd9bSMartin Matuska error = error != SA_OK ? error : SA_SYSTEM_ERR; 216e92ffd9bSMartin Matuska } 217e92ffd9bSMartin Matuska } 218e92ffd9bSMartin Matuska 219e92ffd9bSMartin Matuska return (error); 220e92ffd9bSMartin Matuska } 221e92ffd9bSMartin Matuska 222e92ffd9bSMartin Matuska static boolean_t 223e92ffd9bSMartin Matuska nfs_copy_entries_cb(void *userdata, char *line, boolean_t found_mountpoint) 224e92ffd9bSMartin Matuska { 225e92ffd9bSMartin Matuska FILE *newfp = userdata; 226e92ffd9bSMartin Matuska if (!found_mountpoint) 227e92ffd9bSMartin Matuska fputs(line, newfp); 228e92ffd9bSMartin Matuska return (B_TRUE); 229e92ffd9bSMartin Matuska } 230e92ffd9bSMartin Matuska 231e92ffd9bSMartin Matuska /* 232e92ffd9bSMartin Matuska * Copy all entries from the exports file (if it exists) to newfp, 233e92ffd9bSMartin Matuska * omitting any entries for the specified mountpoint. 234e92ffd9bSMartin Matuska */ 235e92ffd9bSMartin Matuska static int 236e92ffd9bSMartin Matuska nfs_copy_entries(FILE *newfp, const char *exports, const char *mountpoint) 237e92ffd9bSMartin Matuska { 238e92ffd9bSMartin Matuska fputs(FILE_HEADER, newfp); 239e92ffd9bSMartin Matuska 240e92ffd9bSMartin Matuska int error = nfs_process_exports( 241e92ffd9bSMartin Matuska exports, mountpoint, nfs_copy_entries_cb, newfp); 242e92ffd9bSMartin Matuska 243e92ffd9bSMartin Matuska if (error == SA_OK && ferror(newfp) != 0) 244e92ffd9bSMartin Matuska error = ferror(newfp); 245e92ffd9bSMartin Matuska 246e92ffd9bSMartin Matuska return (error); 247e92ffd9bSMartin Matuska } 248e92ffd9bSMartin Matuska 2493ff01b23SMartin Matuska int 25016038816SMartin Matuska nfs_toggle_share(const char *lockfile, const char *exports, 25116038816SMartin Matuska const char *expdir, sa_share_impl_t impl_share, 252e92ffd9bSMartin Matuska int(*cbk)(sa_share_impl_t impl_share, FILE *tmpfile)) 25316038816SMartin Matuska { 254716fd348SMartin Matuska int error, nfs_lock_fd = -1; 255e92ffd9bSMartin Matuska struct tmpfile tmpf; 25616038816SMartin Matuska 257e92ffd9bSMartin Matuska if (!nfs_init_tmpfile(exports, expdir, &tmpf)) 25816038816SMartin Matuska return (SA_SYSTEM_ERR); 25916038816SMartin Matuska 260716fd348SMartin Matuska error = nfs_exports_lock(lockfile, &nfs_lock_fd); 26116038816SMartin Matuska if (error != 0) { 262e92ffd9bSMartin Matuska nfs_abort_tmpfile(&tmpf); 26316038816SMartin Matuska return (error); 26416038816SMartin Matuska } 26516038816SMartin Matuska 266e92ffd9bSMartin Matuska error = nfs_copy_entries(tmpf.fp, exports, impl_share->sa_mountpoint); 26716038816SMartin Matuska if (error != SA_OK) 26816038816SMartin Matuska goto fullerr; 26916038816SMartin Matuska 270e92ffd9bSMartin Matuska error = cbk(impl_share, tmpf.fp); 27116038816SMartin Matuska if (error != SA_OK) 27216038816SMartin Matuska goto fullerr; 27316038816SMartin Matuska 274e92ffd9bSMartin Matuska error = nfs_fini_tmpfile(exports, &tmpf); 275716fd348SMartin Matuska nfs_exports_unlock(lockfile, &nfs_lock_fd); 27616038816SMartin Matuska return (error); 27716038816SMartin Matuska 27816038816SMartin Matuska fullerr: 279e92ffd9bSMartin Matuska nfs_abort_tmpfile(&tmpf); 280716fd348SMartin Matuska nfs_exports_unlock(lockfile, &nfs_lock_fd); 28116038816SMartin Matuska return (error); 28216038816SMartin Matuska } 283e92ffd9bSMartin Matuska 284e92ffd9bSMartin Matuska static boolean_t 285e92ffd9bSMartin Matuska nfs_is_shared_cb(void *userdata, char *line, boolean_t found_mountpoint) 286e92ffd9bSMartin Matuska { 287e92ffd9bSMartin Matuska (void) line; 288e92ffd9bSMartin Matuska 289e92ffd9bSMartin Matuska boolean_t *found = userdata; 290e92ffd9bSMartin Matuska *found = found_mountpoint; 291e92ffd9bSMartin Matuska return (!found_mountpoint); 292e92ffd9bSMartin Matuska } 293e92ffd9bSMartin Matuska 294e92ffd9bSMartin Matuska boolean_t 295e92ffd9bSMartin Matuska nfs_is_shared_impl(const char *exports, sa_share_impl_t impl_share) 296e92ffd9bSMartin Matuska { 297e92ffd9bSMartin Matuska boolean_t found = B_FALSE; 298e92ffd9bSMartin Matuska nfs_process_exports(exports, impl_share->sa_mountpoint, 299e92ffd9bSMartin Matuska nfs_is_shared_cb, &found); 300e92ffd9bSMartin Matuska return (found); 301e92ffd9bSMartin Matuska } 302