1da6c28aaSamw /* 2da6c28aaSamw * CDDL HEADER START 3da6c28aaSamw * 4da6c28aaSamw * The contents of this file are subject to the terms of the 5da6c28aaSamw * Common Development and Distribution License (the "License"). 6da6c28aaSamw * You may not use this file except in compliance with the License. 7da6c28aaSamw * 8da6c28aaSamw * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE 9da6c28aaSamw * or http://www.opensolaris.org/os/licensing. 10da6c28aaSamw * See the License for the specific language governing permissions 11da6c28aaSamw * and limitations under the License. 12da6c28aaSamw * 13da6c28aaSamw * When distributing Covered Code, include this CDDL HEADER in each 14da6c28aaSamw * file and include the License file at usr/src/OPENSOLARIS.LICENSE. 15da6c28aaSamw * If applicable, add the following below this CDDL HEADER, with the 16da6c28aaSamw * fields enclosed by brackets "[]" replaced with your own identifying 17da6c28aaSamw * information: Portions Copyright [yyyy] [name of copyright owner] 18da6c28aaSamw * 19da6c28aaSamw * CDDL HEADER END 20da6c28aaSamw */ 21da6c28aaSamw /* 22148c5f43SAlan Wright * Copyright (c) 2007, 2010, Oracle and/or its affiliates. All rights reserved. 23245d1332SMatt Barden * Copyright 2018 Nexenta Systems, Inc. All rights reserved. 24da6c28aaSamw */ 25da6c28aaSamw 26da6c28aaSamw #include <sys/sid.h> 27dc20a302Sas200622 #include <sys/nbmlock.h> 28da6c28aaSamw #include <smbsrv/smb_fsops.h> 2955bf511dSas200622 #include <smbsrv/smb_kproto.h> 30da6c28aaSamw #include <acl/acl_common.h> 31dc20a302Sas200622 #include <sys/fcntl.h> 32*55f0a249SGordon Ross #include <sys/filio.h> 33dc20a302Sas200622 #include <sys/flock.h> 34dc20a302Sas200622 #include <fs/fs_subr.h> 35da6c28aaSamw 36faa1795aSjb150015 extern caller_context_t smb_ct; 37faa1795aSjb150015 38eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States static int smb_fsop_create_stream(smb_request_t *, cred_t *, smb_node_t *, 39037cac00Sjoyce mcintosh char *, char *, int, smb_attr_t *, smb_node_t **); 40eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States 41eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States static int smb_fsop_create_file(smb_request_t *, cred_t *, smb_node_t *, 42037cac00Sjoyce mcintosh char *, int, smb_attr_t *, smb_node_t **); 43eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States 44b819cea2SGordon Ross #ifdef _KERNEL 45eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States static int smb_fsop_create_with_sd(smb_request_t *, cred_t *, smb_node_t *, 46037cac00Sjoyce mcintosh char *, smb_attr_t *, smb_node_t **, smb_fssd_t *); 47eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States static int smb_fsop_sdinherit(smb_request_t *, smb_node_t *, smb_fssd_t *); 48b819cea2SGordon Ross #endif /* _KERNEL */ 49da6c28aaSamw 50da6c28aaSamw /* 51da6c28aaSamw * The smb_fsop_* functions have knowledge of CIFS semantics. 52da6c28aaSamw * 53da6c28aaSamw * The smb_vop_* functions have minimal knowledge of CIFS semantics and 54da6c28aaSamw * serve as an interface to the VFS layer. 55da6c28aaSamw * 56da6c28aaSamw * Hence, smb_request_t and smb_node_t structures should not be passed 57da6c28aaSamw * from the smb_fsop_* layer to the smb_vop_* layer. 58da6c28aaSamw * 59da6c28aaSamw * In general, CIFS service code should only ever call smb_fsop_* 60da6c28aaSamw * functions directly, and never smb_vop_* functions directly. 61da6c28aaSamw * 62da6c28aaSamw * smb_fsop_* functions should call smb_vop_* functions where possible, instead 63da6c28aaSamw * of their smb_fsop_* counterparts. However, there are times when 64da6c28aaSamw * this cannot be avoided. 65da6c28aaSamw */ 66da6c28aaSamw 67da6c28aaSamw /* 68da6c28aaSamw * Note: Stream names cannot be mangled. 69da6c28aaSamw */ 70da6c28aaSamw 71da6c28aaSamw /* 728c10a865Sas200622 * smb_fsop_amask_to_omode 738c10a865Sas200622 * 748c10a865Sas200622 * Convert the access mask to the open mode (for use 758c10a865Sas200622 * with the VOP_OPEN call). 768c10a865Sas200622 * 778c10a865Sas200622 * Note that opening a file for attribute only access 788c10a865Sas200622 * will also translate into an FREAD or FWRITE open mode 798c10a865Sas200622 * (i.e., it's not just for data). 808c10a865Sas200622 * 818c10a865Sas200622 * This is needed so that opens are tracked appropriately 828c10a865Sas200622 * for oplock processing. 83da6c28aaSamw */ 84da6c28aaSamw 85da6c28aaSamw int 868c10a865Sas200622 smb_fsop_amask_to_omode(uint32_t access) 87da6c28aaSamw { 88da6c28aaSamw int mode = 0; 89da6c28aaSamw 908c10a865Sas200622 if (access & (FILE_READ_DATA | FILE_EXECUTE | 918c10a865Sas200622 FILE_READ_ATTRIBUTES | FILE_READ_EA)) 92da6c28aaSamw mode |= FREAD; 93da6c28aaSamw 948c10a865Sas200622 if (access & (FILE_WRITE_DATA | FILE_APPEND_DATA | 958c10a865Sas200622 FILE_WRITE_ATTRIBUTES | FILE_WRITE_EA)) 96da6c28aaSamw mode |= FWRITE; 97da6c28aaSamw 988c10a865Sas200622 if (access & FILE_APPEND_DATA) 99da6c28aaSamw mode |= FAPPEND; 100da6c28aaSamw 101da6c28aaSamw return (mode); 102da6c28aaSamw } 103da6c28aaSamw 1048c10a865Sas200622 int 1058c10a865Sas200622 smb_fsop_open(smb_node_t *node, int mode, cred_t *cred) 1068c10a865Sas200622 { 1078c10a865Sas200622 /* 1088c10a865Sas200622 * Assuming that the same vnode is returned as we had before. 1098c10a865Sas200622 * (I.e., with certain types of files or file systems, a 1108c10a865Sas200622 * different vnode might be returned by VOP_OPEN) 1118c10a865Sas200622 */ 1128c10a865Sas200622 return (smb_vop_open(&node->vp, mode, cred)); 1138c10a865Sas200622 } 1148c10a865Sas200622 115c8ec8eeaSjose borrego void 1168c10a865Sas200622 smb_fsop_close(smb_node_t *node, int mode, cred_t *cred) 1178c10a865Sas200622 { 118c8ec8eeaSjose borrego smb_vop_close(node->vp, mode, cred); 1198c10a865Sas200622 } 1208c10a865Sas200622 121b819cea2SGordon Ross #ifdef _KERNEL 122da6c28aaSamw static int 123eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States smb_fsop_create_with_sd(smb_request_t *sr, cred_t *cr, 124eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States smb_node_t *dnode, char *name, 125037cac00Sjoyce mcintosh smb_attr_t *attr, smb_node_t **ret_snode, smb_fssd_t *fs_sd) 126da6c28aaSamw { 127da6c28aaSamw vsecattr_t *vsap; 128da6c28aaSamw vsecattr_t vsecattr; 129da6c28aaSamw smb_attr_t set_attr; 1308622ec45SGordon Ross acl_t *acl, *dacl, *sacl; 131da6c28aaSamw vnode_t *vp; 1328622ec45SGordon Ross cred_t *kcr = zone_kcred(); 133da6c28aaSamw int aclbsize = 0; /* size of acl list in bytes */ 134da6c28aaSamw int flags = 0; 135da6c28aaSamw int rc; 1362c1b14e5Sjose borrego boolean_t is_dir; 137da6c28aaSamw 138da6c28aaSamw ASSERT(fs_sd); 139da6c28aaSamw 140c8ec8eeaSjose borrego if (SMB_TREE_IS_CASEINSENSITIVE(sr)) 141da6c28aaSamw flags = SMB_IGNORE_CASE; 1428b2cc8acSafshin salek ardakani - Sun Microsystems - Irvine United States if (SMB_TREE_SUPPORTS_CATIA(sr)) 1438b2cc8acSafshin salek ardakani - Sun Microsystems - Irvine United States flags |= SMB_CATIA; 144da6c28aaSamw 145da6c28aaSamw ASSERT(cr); 146da6c28aaSamw 147da6c28aaSamw is_dir = ((fs_sd->sd_flags & SMB_FSSD_FLAGS_DIR) != 0); 148da6c28aaSamw 149c8ec8eeaSjose borrego if (smb_tree_has_feature(sr->tid_tree, SMB_TREE_ACLONCREATE)) { 150da6c28aaSamw if (fs_sd->sd_secinfo & SMB_ACL_SECINFO) { 151da6c28aaSamw dacl = fs_sd->sd_zdacl; 152da6c28aaSamw sacl = fs_sd->sd_zsacl; 153da6c28aaSamw ASSERT(dacl || sacl); 154da6c28aaSamw if (dacl && sacl) { 15555bf511dSas200622 acl = smb_fsacl_merge(dacl, sacl); 156da6c28aaSamw } else if (dacl) { 157da6c28aaSamw acl = dacl; 158da6c28aaSamw } else { 159da6c28aaSamw acl = sacl; 160da6c28aaSamw } 161da6c28aaSamw 16255bf511dSas200622 rc = smb_fsacl_to_vsa(acl, &vsecattr, &aclbsize); 163da6c28aaSamw 164da6c28aaSamw if (dacl && sacl) 165da6c28aaSamw acl_free(acl); 166da6c28aaSamw 1672c1b14e5Sjose borrego if (rc != 0) 168da6c28aaSamw return (rc); 169da6c28aaSamw 170da6c28aaSamw vsap = &vsecattr; 1712c1b14e5Sjose borrego } else { 172da6c28aaSamw vsap = NULL; 1732c1b14e5Sjose borrego } 174da6c28aaSamw 175743a77edSAlan Wright /* The tree ACEs may prevent a create */ 176743a77edSAlan Wright rc = EACCES; 177da6c28aaSamw if (is_dir) { 178743a77edSAlan Wright if (SMB_TREE_HAS_ACCESS(sr, ACE_ADD_SUBDIRECTORY) != 0) 179eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States rc = smb_vop_mkdir(dnode->vp, name, attr, 180743a77edSAlan Wright &vp, flags, cr, vsap); 181da6c28aaSamw } else { 182743a77edSAlan Wright if (SMB_TREE_HAS_ACCESS(sr, ACE_ADD_FILE) != 0) 183eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States rc = smb_vop_create(dnode->vp, name, attr, 184743a77edSAlan Wright &vp, flags, cr, vsap); 185da6c28aaSamw } 186da6c28aaSamw 187da6c28aaSamw if (vsap != NULL) 188da6c28aaSamw kmem_free(vsap->vsa_aclentp, aclbsize); 189da6c28aaSamw 190da6c28aaSamw if (rc != 0) 191da6c28aaSamw return (rc); 192da6c28aaSamw 193da6c28aaSamw set_attr.sa_mask = 0; 194da6c28aaSamw 195da6c28aaSamw /* 196da6c28aaSamw * Ideally we should be able to specify the owner and owning 197da6c28aaSamw * group at create time along with the ACL. Since we cannot 198da6c28aaSamw * do that right now, kcred is passed to smb_vop_setattr so it 199da6c28aaSamw * doesn't fail due to lack of permission. 200da6c28aaSamw */ 201da6c28aaSamw if (fs_sd->sd_secinfo & SMB_OWNER_SECINFO) { 202da6c28aaSamw set_attr.sa_vattr.va_uid = fs_sd->sd_uid; 203da6c28aaSamw set_attr.sa_mask |= SMB_AT_UID; 204da6c28aaSamw } 205da6c28aaSamw 206da6c28aaSamw if (fs_sd->sd_secinfo & SMB_GROUP_SECINFO) { 207da6c28aaSamw set_attr.sa_vattr.va_gid = fs_sd->sd_gid; 208da6c28aaSamw set_attr.sa_mask |= SMB_AT_GID; 209da6c28aaSamw } 210da6c28aaSamw 2119660e5cbSJanice Chang if (set_attr.sa_mask) 2128622ec45SGordon Ross rc = smb_vop_setattr(vp, NULL, &set_attr, 0, kcr); 213da6c28aaSamw 2142c1b14e5Sjose borrego if (rc == 0) { 2152c1b14e5Sjose borrego *ret_snode = smb_node_lookup(sr, &sr->arg.open, cr, vp, 216037cac00Sjoyce mcintosh name, dnode, NULL); 2172c1b14e5Sjose borrego 2187f667e74Sjose borrego if (*ret_snode == NULL) 2192c1b14e5Sjose borrego rc = ENOMEM; 2207f667e74Sjose borrego 2217f667e74Sjose borrego VN_RELE(vp); 2222c1b14e5Sjose borrego } 223da6c28aaSamw } else { 224da6c28aaSamw /* 225da6c28aaSamw * For filesystems that don't support ACL-on-create, try 226da6c28aaSamw * to set the specified SD after create, which could actually 227da6c28aaSamw * fail because of conflicts between inherited security 228da6c28aaSamw * attributes upon creation and the specified SD. 229da6c28aaSamw * 230da6c28aaSamw * Passing kcred to smb_fsop_sdwrite() to overcome this issue. 231da6c28aaSamw */ 232da6c28aaSamw 233da6c28aaSamw if (is_dir) { 234eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States rc = smb_vop_mkdir(dnode->vp, name, attr, &vp, 2352c1b14e5Sjose borrego flags, cr, NULL); 236da6c28aaSamw } else { 237eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States rc = smb_vop_create(dnode->vp, name, attr, &vp, 2382c1b14e5Sjose borrego flags, cr, NULL); 239da6c28aaSamw } 240da6c28aaSamw 24155bf511dSas200622 if (rc != 0) 24255bf511dSas200622 return (rc); 24355bf511dSas200622 2442c1b14e5Sjose borrego *ret_snode = smb_node_lookup(sr, &sr->arg.open, cr, vp, 245037cac00Sjoyce mcintosh name, dnode, NULL); 246da6c28aaSamw 2472c1b14e5Sjose borrego if (*ret_snode != NULL) { 2482c1b14e5Sjose borrego if (!smb_tree_has_feature(sr->tid_tree, 2492c1b14e5Sjose borrego SMB_TREE_NFS_MOUNTED)) 2508622ec45SGordon Ross rc = smb_fsop_sdwrite(sr, kcr, *ret_snode, 2512c1b14e5Sjose borrego fs_sd, 1); 2522c1b14e5Sjose borrego } else { 253da6c28aaSamw rc = ENOMEM; 254da6c28aaSamw } 2557f667e74Sjose borrego 2567f667e74Sjose borrego VN_RELE(vp); 257da6c28aaSamw } 258da6c28aaSamw 25955bf511dSas200622 if (rc != 0) { 2602c1b14e5Sjose borrego if (is_dir) 261eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States (void) smb_vop_rmdir(dnode->vp, name, flags, cr); 2622c1b14e5Sjose borrego else 263eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States (void) smb_vop_remove(dnode->vp, name, flags, cr); 26455bf511dSas200622 } 26555bf511dSas200622 266da6c28aaSamw return (rc); 267da6c28aaSamw } 268b819cea2SGordon Ross #endif /* _KERNEL */ 269da6c28aaSamw 270da6c28aaSamw /* 271da6c28aaSamw * smb_fsop_create 272da6c28aaSamw * 273da6c28aaSamw * All SMB functions should use this wrapper to ensure that 274da6c28aaSamw * all the smb_vop_creates are performed with the appropriate credentials. 275eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States * Please document any direct calls to explain the reason for avoiding 276eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States * this wrapper. 277da6c28aaSamw * 278da6c28aaSamw * *ret_snode is returned with a reference upon success. No reference is 279da6c28aaSamw * taken if an error is returned. 280da6c28aaSamw */ 281da6c28aaSamw int 282037cac00Sjoyce mcintosh smb_fsop_create(smb_request_t *sr, cred_t *cr, smb_node_t *dnode, 283037cac00Sjoyce mcintosh char *name, smb_attr_t *attr, smb_node_t **ret_snode) 284da6c28aaSamw { 285da6c28aaSamw int rc = 0; 286eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States int flags = 0; 287eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States char *fname, *sname; 288eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States char *longname = NULL; 289da6c28aaSamw 290da6c28aaSamw ASSERT(cr); 291eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States ASSERT(dnode); 292eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States ASSERT(dnode->n_magic == SMB_NODE_MAGIC); 293eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States ASSERT(dnode->n_state != SMB_NODE_STATE_DESTROYING); 294da6c28aaSamw 295da6c28aaSamw ASSERT(ret_snode); 296da6c28aaSamw *ret_snode = 0; 297da6c28aaSamw 298da6c28aaSamw ASSERT(name); 299da6c28aaSamw if (*name == 0) 300da6c28aaSamw return (EINVAL); 301da6c28aaSamw 302da6c28aaSamw ASSERT(sr); 303da6c28aaSamw ASSERT(sr->tid_tree); 304c8ec8eeaSjose borrego 305eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States if (SMB_TREE_CONTAINS_NODE(sr, dnode) == 0) 306c8ec8eeaSjose borrego return (EACCES); 307c8ec8eeaSjose borrego 308c8ec8eeaSjose borrego if (SMB_TREE_IS_READONLY(sr)) 309da6c28aaSamw return (EROFS); 310da6c28aaSamw 311c8ec8eeaSjose borrego if (SMB_TREE_IS_CASEINSENSITIVE(sr)) 312da6c28aaSamw flags = SMB_IGNORE_CASE; 3138b2cc8acSafshin salek ardakani - Sun Microsystems - Irvine United States if (SMB_TREE_SUPPORTS_CATIA(sr)) 3148b2cc8acSafshin salek ardakani - Sun Microsystems - Irvine United States flags |= SMB_CATIA; 315e3f2c991SKeyur Desai if (SMB_TREE_SUPPORTS_ABE(sr)) 316e3f2c991SKeyur Desai flags |= SMB_ABE; 317da6c28aaSamw 3188b2cc8acSafshin salek ardakani - Sun Microsystems - Irvine United States if (smb_is_stream_name(name)) { 319da6c28aaSamw fname = kmem_alloc(MAXNAMELEN, KM_SLEEP); 320da6c28aaSamw sname = kmem_alloc(MAXNAMELEN, KM_SLEEP); 321eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States smb_stream_parse_name(name, fname, sname); 322da6c28aaSamw 323eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States rc = smb_fsop_create_stream(sr, cr, dnode, 324037cac00Sjoyce mcintosh fname, sname, flags, attr, ret_snode); 3258b2cc8acSafshin salek ardakani - Sun Microsystems - Irvine United States 326da6c28aaSamw kmem_free(fname, MAXNAMELEN); 327da6c28aaSamw kmem_free(sname, MAXNAMELEN); 3288b2cc8acSafshin salek ardakani - Sun Microsystems - Irvine United States return (rc); 329da6c28aaSamw } 3308b2cc8acSafshin salek ardakani - Sun Microsystems - Irvine United States 3318b2cc8acSafshin salek ardakani - Sun Microsystems - Irvine United States /* Not a named stream */ 332eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States 333cb174861Sjoyce mcintosh if (SMB_TREE_SUPPORTS_SHORTNAMES(sr) && smb_maybe_mangled(name)) { 3348b2cc8acSafshin salek ardakani - Sun Microsystems - Irvine United States longname = kmem_alloc(MAXNAMELEN, KM_SLEEP); 335148c5f43SAlan Wright rc = smb_unmangle(dnode, name, longname, MAXNAMELEN, flags); 3368b2cc8acSafshin salek ardakani - Sun Microsystems - Irvine United States kmem_free(longname, MAXNAMELEN); 3378b2cc8acSafshin salek ardakani - Sun Microsystems - Irvine United States 3388b2cc8acSafshin salek ardakani - Sun Microsystems - Irvine United States if (rc == 0) 3398b2cc8acSafshin salek ardakani - Sun Microsystems - Irvine United States rc = EEXIST; 3408b2cc8acSafshin salek ardakani - Sun Microsystems - Irvine United States if (rc != ENOENT) 3418b2cc8acSafshin salek ardakani - Sun Microsystems - Irvine United States return (rc); 3428b2cc8acSafshin salek ardakani - Sun Microsystems - Irvine United States } 3438b2cc8acSafshin salek ardakani - Sun Microsystems - Irvine United States 344eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States rc = smb_fsop_create_file(sr, cr, dnode, name, flags, 345037cac00Sjoyce mcintosh attr, ret_snode); 346eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States return (rc); 347eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States 348eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States } 349eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States 350eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States 351eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States /* 352eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States * smb_fsop_create_stream 353eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States * 354eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States * Create NTFS named stream file (sname) on unnamed stream 355eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States * file (fname), creating the unnamed stream file if it 356eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States * doesn't exist. 357eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States * If we created the unnamed stream file and then creation 358eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States * of the named stream file fails, we delete the unnamed stream. 359eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States * Since we use the real file name for the smb_vop_remove we 360eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States * clear the SMB_IGNORE_CASE flag to ensure a case sensitive 361eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States * match. 362eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States * 363eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States * The second parameter of smb_vop_setattr() is set to 364eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States * NULL, even though an unnamed stream exists. This is 365eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States * because we want to set the UID and GID on the named 366eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States * stream in this case for consistency with the (unnamed 367eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States * stream) file (see comments for smb_vop_setattr()). 368eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States */ 369eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States static int 370eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States smb_fsop_create_stream(smb_request_t *sr, cred_t *cr, 371eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States smb_node_t *dnode, char *fname, char *sname, int flags, 372037cac00Sjoyce mcintosh smb_attr_t *attr, smb_node_t **ret_snode) 373eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States { 374eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States smb_attr_t fattr; 3758622ec45SGordon Ross smb_node_t *fnode; 376eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States vnode_t *xattrdvp; 377eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States vnode_t *vp; 3788622ec45SGordon Ross cred_t *kcr = zone_kcred(); 379eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States int rc = 0; 380eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States boolean_t fcreate = B_FALSE; 381eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States 382eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States /* Look up / create the unnamed stream, fname */ 383eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States rc = smb_fsop_lookup(sr, cr, flags | SMB_FOLLOW_LINKS, 384037cac00Sjoyce mcintosh sr->tid_tree->t_snode, dnode, fname, &fnode); 385245d1332SMatt Barden if (rc == 0) { 386245d1332SMatt Barden if (smb_fsop_access(sr, sr->user_cr, fnode, 387245d1332SMatt Barden sr->sr_open.desired_access) != 0) 388245d1332SMatt Barden rc = EACCES; 389245d1332SMatt Barden } else if (rc == ENOENT) { 390eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States fcreate = B_TRUE; 391eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States rc = smb_fsop_create_file(sr, cr, dnode, fname, flags, 392037cac00Sjoyce mcintosh attr, &fnode); 393eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States } 394eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States if (rc != 0) 395eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States return (rc); 396eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States 397037cac00Sjoyce mcintosh fattr.sa_mask = SMB_AT_UID | SMB_AT_GID; 3988622ec45SGordon Ross rc = smb_vop_getattr(fnode->vp, NULL, &fattr, 0, kcr); 399037cac00Sjoyce mcintosh 400037cac00Sjoyce mcintosh if (rc == 0) { 401eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States /* create the named stream, sname */ 402037cac00Sjoyce mcintosh rc = smb_vop_stream_create(fnode->vp, sname, attr, 403037cac00Sjoyce mcintosh &vp, &xattrdvp, flags, cr); 404037cac00Sjoyce mcintosh } 405eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States if (rc != 0) { 406eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States if (fcreate) { 407eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States flags &= ~SMB_IGNORE_CASE; 408eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States (void) smb_vop_remove(dnode->vp, 409eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States fnode->od_name, flags, cr); 410eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States } 411eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States smb_node_release(fnode); 412eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States return (rc); 413eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States } 414eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States 415eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States attr->sa_vattr.va_uid = fattr.sa_vattr.va_uid; 416eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States attr->sa_vattr.va_gid = fattr.sa_vattr.va_gid; 417eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States attr->sa_mask = SMB_AT_UID | SMB_AT_GID; 418eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States 4198622ec45SGordon Ross rc = smb_vop_setattr(vp, NULL, attr, 0, kcr); 420eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States if (rc != 0) { 421eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States smb_node_release(fnode); 422eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States return (rc); 423eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States } 424eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States 425eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States *ret_snode = smb_stream_node_lookup(sr, cr, fnode, xattrdvp, 426037cac00Sjoyce mcintosh vp, sname); 427eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States 428eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States smb_node_release(fnode); 429eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States VN_RELE(xattrdvp); 430eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States VN_RELE(vp); 431eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States 432eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States if (*ret_snode == NULL) 433eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States rc = ENOMEM; 434eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States 4359fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States /* notify change to the unnamed stream */ 4369fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States if (rc == 0) 437ccc71be5SGordon Ross smb_node_notify_change(dnode, 438ccc71be5SGordon Ross FILE_ACTION_ADDED_STREAM, fname); 4399fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States 440eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States return (rc); 441eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States } 442eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States 443eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States /* 444eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States * smb_fsop_create_file 445eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States */ 446eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States static int 447eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States smb_fsop_create_file(smb_request_t *sr, cred_t *cr, 448eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States smb_node_t *dnode, char *name, int flags, 449037cac00Sjoyce mcintosh smb_attr_t *attr, smb_node_t **ret_snode) 450eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States { 451148c5f43SAlan Wright smb_arg_open_t *op = &sr->sr_open; 452eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States vnode_t *vp; 453b819cea2SGordon Ross int rc; 454b819cea2SGordon Ross 455b819cea2SGordon Ross #ifdef _KERNEL 456eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States smb_fssd_t fs_sd; 457eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States uint32_t secinfo; 458eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States uint32_t status; 459eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States 46055bf511dSas200622 if (op->sd) { 461da6c28aaSamw /* 462da6c28aaSamw * SD sent by client in Windows format. Needs to be 463da6c28aaSamw * converted to FS format. No inheritance. 464da6c28aaSamw */ 46555bf511dSas200622 secinfo = smb_sd_get_secinfo(op->sd); 46655bf511dSas200622 smb_fssd_init(&fs_sd, secinfo, 0); 467da6c28aaSamw 46855bf511dSas200622 status = smb_sd_tofs(op->sd, &fs_sd); 469da6c28aaSamw if (status == NT_STATUS_SUCCESS) { 470eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States rc = smb_fsop_create_with_sd(sr, cr, dnode, 471037cac00Sjoyce mcintosh name, attr, ret_snode, &fs_sd); 4728b2cc8acSafshin salek ardakani - Sun Microsystems - Irvine United States } else { 473da6c28aaSamw rc = EINVAL; 4748b2cc8acSafshin salek ardakani - Sun Microsystems - Irvine United States } 47555bf511dSas200622 smb_fssd_term(&fs_sd); 476da6c28aaSamw } else if (sr->tid_tree->t_acltype == ACE_T) { 477da6c28aaSamw /* 478da6c28aaSamw * No incoming SD and filesystem is ZFS 479da6c28aaSamw * Server applies Windows inheritance rules, 480da6c28aaSamw * see smb_fsop_sdinherit() comments as to why. 481da6c28aaSamw */ 48255bf511dSas200622 smb_fssd_init(&fs_sd, SMB_ACL_SECINFO, 0); 483eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States rc = smb_fsop_sdinherit(sr, dnode, &fs_sd); 484da6c28aaSamw if (rc == 0) { 485eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States rc = smb_fsop_create_with_sd(sr, cr, dnode, 486037cac00Sjoyce mcintosh name, attr, ret_snode, &fs_sd); 487da6c28aaSamw } 488da6c28aaSamw 48955bf511dSas200622 smb_fssd_term(&fs_sd); 490b819cea2SGordon Ross } else 491b819cea2SGordon Ross #endif /* _KERNEL */ 492b819cea2SGordon Ross { 493da6c28aaSamw /* 494da6c28aaSamw * No incoming SD and filesystem is not ZFS 495da6c28aaSamw * let the filesystem handles the inheritance. 496da6c28aaSamw */ 497eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States rc = smb_vop_create(dnode->vp, name, attr, &vp, 498dc20a302Sas200622 flags, cr, NULL); 499da6c28aaSamw 500da6c28aaSamw if (rc == 0) { 501da6c28aaSamw *ret_snode = smb_node_lookup(sr, op, cr, vp, 502037cac00Sjoyce mcintosh name, dnode, NULL); 503da6c28aaSamw 5047f667e74Sjose borrego if (*ret_snode == NULL) 505da6c28aaSamw rc = ENOMEM; 5067f667e74Sjose borrego 5077f667e74Sjose borrego VN_RELE(vp); 508da6c28aaSamw } 509da6c28aaSamw 510da6c28aaSamw } 5119fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States 5129fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States if (rc == 0) 513b819cea2SGordon Ross smb_node_notify_change(dnode, FILE_ACTION_ADDED, name); 5149fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States 515da6c28aaSamw return (rc); 516da6c28aaSamw } 517da6c28aaSamw 518da6c28aaSamw /* 519da6c28aaSamw * smb_fsop_mkdir 520da6c28aaSamw * 521da6c28aaSamw * All SMB functions should use this wrapper to ensure that 522da6c28aaSamw * the the calls are performed with the appropriate credentials. 523da6c28aaSamw * Please document any direct call to explain the reason 524da6c28aaSamw * for avoiding this wrapper. 525da6c28aaSamw * 526da6c28aaSamw * It is assumed that a reference exists on snode coming into this routine. 527da6c28aaSamw * 528da6c28aaSamw * *ret_snode is returned with a reference upon success. No reference is 529da6c28aaSamw * taken if an error is returned. 530da6c28aaSamw */ 531da6c28aaSamw int 532da6c28aaSamw smb_fsop_mkdir( 533faa1795aSjb150015 smb_request_t *sr, 534da6c28aaSamw cred_t *cr, 535eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States smb_node_t *dnode, 536da6c28aaSamw char *name, 537da6c28aaSamw smb_attr_t *attr, 538037cac00Sjoyce mcintosh smb_node_t **ret_snode) 539da6c28aaSamw { 540da6c28aaSamw struct open_param *op = &sr->arg.open; 541da6c28aaSamw char *longname; 542da6c28aaSamw vnode_t *vp; 543da6c28aaSamw int flags = 0; 544b819cea2SGordon Ross int rc; 545b819cea2SGordon Ross 546b819cea2SGordon Ross #ifdef _KERNEL 547da6c28aaSamw smb_fssd_t fs_sd; 548da6c28aaSamw uint32_t secinfo; 549da6c28aaSamw uint32_t status; 550b819cea2SGordon Ross #endif /* _KERNEL */ 551b819cea2SGordon Ross 552da6c28aaSamw ASSERT(cr); 553eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States ASSERT(dnode); 554eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States ASSERT(dnode->n_magic == SMB_NODE_MAGIC); 555eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States ASSERT(dnode->n_state != SMB_NODE_STATE_DESTROYING); 556da6c28aaSamw 557da6c28aaSamw ASSERT(ret_snode); 558da6c28aaSamw *ret_snode = 0; 559da6c28aaSamw 560da6c28aaSamw ASSERT(name); 561da6c28aaSamw if (*name == 0) 562da6c28aaSamw return (EINVAL); 563da6c28aaSamw 564da6c28aaSamw ASSERT(sr); 565da6c28aaSamw ASSERT(sr->tid_tree); 566c8ec8eeaSjose borrego 567eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States if (SMB_TREE_CONTAINS_NODE(sr, dnode) == 0) 568c8ec8eeaSjose borrego return (EACCES); 569c8ec8eeaSjose borrego 570c8ec8eeaSjose borrego if (SMB_TREE_IS_READONLY(sr)) 571da6c28aaSamw return (EROFS); 5728b2cc8acSafshin salek ardakani - Sun Microsystems - Irvine United States if (SMB_TREE_SUPPORTS_CATIA(sr)) 5738b2cc8acSafshin salek ardakani - Sun Microsystems - Irvine United States flags |= SMB_CATIA; 574e3f2c991SKeyur Desai if (SMB_TREE_SUPPORTS_ABE(sr)) 575e3f2c991SKeyur Desai flags |= SMB_ABE; 576da6c28aaSamw 577cb174861Sjoyce mcintosh if (SMB_TREE_SUPPORTS_SHORTNAMES(sr) && smb_maybe_mangled(name)) { 578da6c28aaSamw longname = kmem_alloc(MAXNAMELEN, KM_SLEEP); 579148c5f43SAlan Wright rc = smb_unmangle(dnode, name, longname, MAXNAMELEN, flags); 580da6c28aaSamw kmem_free(longname, MAXNAMELEN); 581da6c28aaSamw 582da6c28aaSamw /* 583da6c28aaSamw * If the name passed in by the client has an unmangled 584da6c28aaSamw * equivalent that is found in the specified directory, 585da6c28aaSamw * then the mkdir cannot succeed. Return EEXIST. 586da6c28aaSamw * 587da6c28aaSamw * Only if ENOENT is returned will a mkdir be attempted. 588da6c28aaSamw */ 589da6c28aaSamw 590da6c28aaSamw if (rc == 0) 591da6c28aaSamw rc = EEXIST; 592da6c28aaSamw 593da6c28aaSamw if (rc != ENOENT) 594da6c28aaSamw return (rc); 595da6c28aaSamw } 596da6c28aaSamw 597c8ec8eeaSjose borrego if (SMB_TREE_IS_CASEINSENSITIVE(sr)) 598da6c28aaSamw flags = SMB_IGNORE_CASE; 599da6c28aaSamw 600b819cea2SGordon Ross #ifdef _KERNEL 60155bf511dSas200622 if (op->sd) { 602da6c28aaSamw /* 603da6c28aaSamw * SD sent by client in Windows format. Needs to be 604da6c28aaSamw * converted to FS format. No inheritance. 605da6c28aaSamw */ 60655bf511dSas200622 secinfo = smb_sd_get_secinfo(op->sd); 60755bf511dSas200622 smb_fssd_init(&fs_sd, secinfo, SMB_FSSD_FLAGS_DIR); 608da6c28aaSamw 60955bf511dSas200622 status = smb_sd_tofs(op->sd, &fs_sd); 610da6c28aaSamw if (status == NT_STATUS_SUCCESS) { 611eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States rc = smb_fsop_create_with_sd(sr, cr, dnode, 612037cac00Sjoyce mcintosh name, attr, ret_snode, &fs_sd); 613da6c28aaSamw } 614da6c28aaSamw else 615da6c28aaSamw rc = EINVAL; 61655bf511dSas200622 smb_fssd_term(&fs_sd); 617da6c28aaSamw } else if (sr->tid_tree->t_acltype == ACE_T) { 618da6c28aaSamw /* 619da6c28aaSamw * No incoming SD and filesystem is ZFS 620da6c28aaSamw * Server applies Windows inheritance rules, 621da6c28aaSamw * see smb_fsop_sdinherit() comments as to why. 622da6c28aaSamw */ 62355bf511dSas200622 smb_fssd_init(&fs_sd, SMB_ACL_SECINFO, SMB_FSSD_FLAGS_DIR); 624eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States rc = smb_fsop_sdinherit(sr, dnode, &fs_sd); 625da6c28aaSamw if (rc == 0) { 626eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States rc = smb_fsop_create_with_sd(sr, cr, dnode, 627037cac00Sjoyce mcintosh name, attr, ret_snode, &fs_sd); 628da6c28aaSamw } 629da6c28aaSamw 63055bf511dSas200622 smb_fssd_term(&fs_sd); 631da6c28aaSamw 632b819cea2SGordon Ross } else 633b819cea2SGordon Ross #endif /* _KERNEL */ 634b819cea2SGordon Ross { 635eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States rc = smb_vop_mkdir(dnode->vp, name, attr, &vp, flags, cr, 636dc20a302Sas200622 NULL); 637da6c28aaSamw 638da6c28aaSamw if (rc == 0) { 639da6c28aaSamw *ret_snode = smb_node_lookup(sr, op, cr, vp, name, 640037cac00Sjoyce mcintosh dnode, NULL); 641da6c28aaSamw 6427f667e74Sjose borrego if (*ret_snode == NULL) 643da6c28aaSamw rc = ENOMEM; 6447f667e74Sjose borrego 6457f667e74Sjose borrego VN_RELE(vp); 646da6c28aaSamw } 647da6c28aaSamw } 648da6c28aaSamw 6499fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States if (rc == 0) 650b819cea2SGordon Ross smb_node_notify_change(dnode, FILE_ACTION_ADDED, name); 6519fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States 652da6c28aaSamw return (rc); 653da6c28aaSamw } 654da6c28aaSamw 655da6c28aaSamw /* 656da6c28aaSamw * smb_fsop_remove 657da6c28aaSamw * 658da6c28aaSamw * All SMB functions should use this wrapper to ensure that 659da6c28aaSamw * the the calls are performed with the appropriate credentials. 660da6c28aaSamw * Please document any direct call to explain the reason 661da6c28aaSamw * for avoiding this wrapper. 662da6c28aaSamw * 663da6c28aaSamw * It is assumed that a reference exists on snode coming into this routine. 664da6c28aaSamw * 665da6c28aaSamw * A null smb_request might be passed to this function. 666da6c28aaSamw */ 667da6c28aaSamw int 668da6c28aaSamw smb_fsop_remove( 669faa1795aSjb150015 smb_request_t *sr, 670da6c28aaSamw cred_t *cr, 671eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States smb_node_t *dnode, 672da6c28aaSamw char *name, 6738b2cc8acSafshin salek ardakani - Sun Microsystems - Irvine United States uint32_t flags) 674da6c28aaSamw { 675da6c28aaSamw smb_node_t *fnode; 676da6c28aaSamw char *longname; 677da6c28aaSamw char *fname; 678da6c28aaSamw char *sname; 679da6c28aaSamw int rc; 680da6c28aaSamw 681da6c28aaSamw ASSERT(cr); 682da6c28aaSamw /* 683da6c28aaSamw * The state of the node could be SMB_NODE_STATE_DESTROYING if this 684da6c28aaSamw * function is called during the deletion of the node (because of 685da6c28aaSamw * DELETE_ON_CLOSE). 686da6c28aaSamw */ 687eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States ASSERT(dnode); 688eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States ASSERT(dnode->n_magic == SMB_NODE_MAGIC); 689da6c28aaSamw 690eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States if (SMB_TREE_CONTAINS_NODE(sr, dnode) == 0 || 691743a77edSAlan Wright SMB_TREE_HAS_ACCESS(sr, ACE_DELETE) == 0) 692da6c28aaSamw return (EACCES); 693da6c28aaSamw 694c8ec8eeaSjose borrego if (SMB_TREE_IS_READONLY(sr)) 695da6c28aaSamw return (EROFS); 696da6c28aaSamw 697da6c28aaSamw fname = kmem_alloc(MAXNAMELEN, KM_SLEEP); 698da6c28aaSamw sname = kmem_alloc(MAXNAMELEN, KM_SLEEP); 699da6c28aaSamw 700eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States if (dnode->flags & NODE_XATTR_DIR) { 7019fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States fnode = dnode->n_dnode; 7029fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States rc = smb_vop_stream_remove(fnode->vp, name, flags, cr); 7039fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States 7049fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States /* notify change to the unnamed stream */ 705ccc71be5SGordon Ross if ((rc == 0) && fnode->n_dnode) { 706ccc71be5SGordon Ross smb_node_notify_change(fnode->n_dnode, 707ccc71be5SGordon Ross FILE_ACTION_REMOVED_STREAM, fnode->od_name); 708ccc71be5SGordon Ross } 709eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States } else if (smb_is_stream_name(name)) { 710eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States smb_stream_parse_name(name, fname, sname); 7118d7e4166Sjose borrego 712cbfb650aScp160787 /* 713da6c28aaSamw * Look up the unnamed stream (i.e. fname). 714da6c28aaSamw * Unmangle processing will be done on fname 715da6c28aaSamw * as well as any link target. 716da6c28aaSamw */ 717da6c28aaSamw 718da6c28aaSamw rc = smb_fsop_lookup(sr, cr, flags | SMB_FOLLOW_LINKS, 719037cac00Sjoyce mcintosh sr->tid_tree->t_snode, dnode, fname, &fnode); 720da6c28aaSamw 721da6c28aaSamw if (rc != 0) { 722da6c28aaSamw kmem_free(fname, MAXNAMELEN); 723da6c28aaSamw kmem_free(sname, MAXNAMELEN); 724da6c28aaSamw return (rc); 725da6c28aaSamw } 726da6c28aaSamw 727da6c28aaSamw /* 728da6c28aaSamw * XXX 729da6c28aaSamw * Need to find out what permission is required by NTFS 730da6c28aaSamw * to remove a stream. 731da6c28aaSamw */ 732dc20a302Sas200622 rc = smb_vop_stream_remove(fnode->vp, sname, flags, cr); 733da6c28aaSamw 734da6c28aaSamw smb_node_release(fnode); 7359fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States 7369fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States /* notify change to the unnamed stream */ 737ccc71be5SGordon Ross if (rc == 0) { 738ccc71be5SGordon Ross smb_node_notify_change(dnode, 739ccc71be5SGordon Ross FILE_ACTION_REMOVED_STREAM, fname); 740ccc71be5SGordon Ross } 741da6c28aaSamw } else { 742eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States rc = smb_vop_remove(dnode->vp, name, flags, cr); 743da6c28aaSamw 744da6c28aaSamw if (rc == ENOENT) { 745cb174861Sjoyce mcintosh if (!SMB_TREE_SUPPORTS_SHORTNAMES(sr) || 746cb174861Sjoyce mcintosh !smb_maybe_mangled(name)) { 747da6c28aaSamw kmem_free(fname, MAXNAMELEN); 748da6c28aaSamw kmem_free(sname, MAXNAMELEN); 749da6c28aaSamw return (rc); 750da6c28aaSamw } 751da6c28aaSamw longname = kmem_alloc(MAXNAMELEN, KM_SLEEP); 752da6c28aaSamw 753e3f2c991SKeyur Desai if (SMB_TREE_SUPPORTS_ABE(sr)) 754e3f2c991SKeyur Desai flags |= SMB_ABE; 755e3f2c991SKeyur Desai 756148c5f43SAlan Wright rc = smb_unmangle(dnode, name, longname, MAXNAMELEN, 757148c5f43SAlan Wright flags); 758da6c28aaSamw 759da6c28aaSamw if (rc == 0) { 760da6c28aaSamw /* 7618b2cc8acSafshin salek ardakani - Sun Microsystems - Irvine United States * longname is the real (case-sensitive) 7628b2cc8acSafshin salek ardakani - Sun Microsystems - Irvine United States * on-disk name. 763da6c28aaSamw * We make sure we do a remove on this exact 764da6c28aaSamw * name, as the name was mangled and denotes 765da6c28aaSamw * a unique file. 766da6c28aaSamw */ 767da6c28aaSamw flags &= ~SMB_IGNORE_CASE; 768eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States rc = smb_vop_remove(dnode->vp, longname, 769dc20a302Sas200622 flags, cr); 770da6c28aaSamw } 771da6c28aaSamw kmem_free(longname, MAXNAMELEN); 772da6c28aaSamw } 773b819cea2SGordon Ross if (rc == 0) { 774b819cea2SGordon Ross smb_node_notify_change(dnode, 775b819cea2SGordon Ross FILE_ACTION_REMOVED, name); 776b819cea2SGordon Ross } 777da6c28aaSamw } 778da6c28aaSamw 779da6c28aaSamw kmem_free(fname, MAXNAMELEN); 780da6c28aaSamw kmem_free(sname, MAXNAMELEN); 7819fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States 782da6c28aaSamw return (rc); 783da6c28aaSamw } 784da6c28aaSamw 785da6c28aaSamw /* 786da6c28aaSamw * smb_fsop_remove_streams 787da6c28aaSamw * 788da6c28aaSamw * This function removes a file's streams without removing the 789da6c28aaSamw * file itself. 790da6c28aaSamw * 7917f667e74Sjose borrego * It is assumed that fnode is not a link. 792da6c28aaSamw */ 793a90cf9f2SGordon Ross uint32_t 794faa1795aSjb150015 smb_fsop_remove_streams(smb_request_t *sr, cred_t *cr, smb_node_t *fnode) 795da6c28aaSamw { 7967f667e74Sjose borrego int rc, flags = 0; 7977f667e74Sjose borrego smb_odir_t *od; 7987f667e74Sjose borrego smb_odirent_t *odirent; 799a90cf9f2SGordon Ross uint32_t status; 8007f667e74Sjose borrego boolean_t eos; 801da6c28aaSamw 802c8ec8eeaSjose borrego ASSERT(sr); 803da6c28aaSamw ASSERT(cr); 804da6c28aaSamw ASSERT(fnode); 805da6c28aaSamw ASSERT(fnode->n_magic == SMB_NODE_MAGIC); 806da6c28aaSamw ASSERT(fnode->n_state != SMB_NODE_STATE_DESTROYING); 807da6c28aaSamw 808a90cf9f2SGordon Ross if (SMB_TREE_CONTAINS_NODE(sr, fnode) == 0) 809a90cf9f2SGordon Ross return (NT_STATUS_ACCESS_DENIED); 810da6c28aaSamw 811a90cf9f2SGordon Ross if (SMB_TREE_IS_READONLY(sr)) 812a90cf9f2SGordon Ross return (NT_STATUS_ACCESS_DENIED); 813da6c28aaSamw 814c8ec8eeaSjose borrego if (SMB_TREE_IS_CASEINSENSITIVE(sr)) 815da6c28aaSamw flags = SMB_IGNORE_CASE; 816eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States 8178b2cc8acSafshin salek ardakani - Sun Microsystems - Irvine United States if (SMB_TREE_SUPPORTS_CATIA(sr)) 8188b2cc8acSafshin salek ardakani - Sun Microsystems - Irvine United States flags |= SMB_CATIA; 819da6c28aaSamw 820a90cf9f2SGordon Ross status = smb_odir_openat(sr, fnode, &od); 821a90cf9f2SGordon Ross switch (status) { 822a90cf9f2SGordon Ross case 0: 823a90cf9f2SGordon Ross break; 824d2488fe8SGordon Ross case NT_STATUS_OBJECT_NAME_NOT_FOUND: 825a90cf9f2SGordon Ross case NT_STATUS_NO_SUCH_FILE: 826a90cf9f2SGordon Ross case NT_STATUS_NOT_SUPPORTED: 827a90cf9f2SGordon Ross /* No streams to remove. */ 828a90cf9f2SGordon Ross return (0); 829a90cf9f2SGordon Ross default: 830a90cf9f2SGordon Ross return (status); 831eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States } 8327f667e74Sjose borrego 8337f667e74Sjose borrego odirent = kmem_alloc(sizeof (smb_odirent_t), KM_SLEEP); 834da6c28aaSamw for (;;) { 8357f667e74Sjose borrego rc = smb_odir_read(sr, od, odirent, &eos); 8367f667e74Sjose borrego if ((rc != 0) || (eos)) 837da6c28aaSamw break; 8387f667e74Sjose borrego (void) smb_vop_remove(od->d_dnode->vp, odirent->od_name, 8397f667e74Sjose borrego flags, cr); 840da6c28aaSamw } 8417f667e74Sjose borrego kmem_free(odirent, sizeof (smb_odirent_t)); 842a90cf9f2SGordon Ross if (eos && rc == ENOENT) 843a90cf9f2SGordon Ross rc = 0; 8447f667e74Sjose borrego 8457f667e74Sjose borrego smb_odir_close(od); 846a1511e6bSjoyce mcintosh smb_odir_release(od); 847a90cf9f2SGordon Ross if (rc) 848a90cf9f2SGordon Ross status = smb_errno2status(rc); 849a90cf9f2SGordon Ross return (status); 850da6c28aaSamw } 851da6c28aaSamw 852da6c28aaSamw /* 853da6c28aaSamw * smb_fsop_rmdir 854da6c28aaSamw * 855da6c28aaSamw * All SMB functions should use this wrapper to ensure that 856da6c28aaSamw * the the calls are performed with the appropriate credentials. 857da6c28aaSamw * Please document any direct call to explain the reason 858da6c28aaSamw * for avoiding this wrapper. 859da6c28aaSamw * 860da6c28aaSamw * It is assumed that a reference exists on snode coming into this routine. 861da6c28aaSamw */ 862da6c28aaSamw int 863da6c28aaSamw smb_fsop_rmdir( 864faa1795aSjb150015 smb_request_t *sr, 865da6c28aaSamw cred_t *cr, 866eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States smb_node_t *dnode, 867da6c28aaSamw char *name, 8688b2cc8acSafshin salek ardakani - Sun Microsystems - Irvine United States uint32_t flags) 869da6c28aaSamw { 870da6c28aaSamw int rc; 871da6c28aaSamw char *longname; 872da6c28aaSamw 873da6c28aaSamw ASSERT(cr); 874da6c28aaSamw /* 875da6c28aaSamw * The state of the node could be SMB_NODE_STATE_DESTROYING if this 876da6c28aaSamw * function is called during the deletion of the node (because of 877da6c28aaSamw * DELETE_ON_CLOSE). 878da6c28aaSamw */ 879eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States ASSERT(dnode); 880eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States ASSERT(dnode->n_magic == SMB_NODE_MAGIC); 881da6c28aaSamw 882eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States if (SMB_TREE_CONTAINS_NODE(sr, dnode) == 0 || 883743a77edSAlan Wright SMB_TREE_HAS_ACCESS(sr, ACE_DELETE_CHILD) == 0) 884da6c28aaSamw return (EACCES); 885da6c28aaSamw 886c8ec8eeaSjose borrego if (SMB_TREE_IS_READONLY(sr)) 887da6c28aaSamw return (EROFS); 888da6c28aaSamw 889eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States rc = smb_vop_rmdir(dnode->vp, name, flags, cr); 890da6c28aaSamw 891da6c28aaSamw if (rc == ENOENT) { 892cb174861Sjoyce mcintosh if (!SMB_TREE_SUPPORTS_SHORTNAMES(sr) || 893cb174861Sjoyce mcintosh !smb_maybe_mangled(name)) { 894da6c28aaSamw return (rc); 895cb174861Sjoyce mcintosh } 896da6c28aaSamw 897da6c28aaSamw longname = kmem_alloc(MAXNAMELEN, KM_SLEEP); 898e3f2c991SKeyur Desai 899e3f2c991SKeyur Desai if (SMB_TREE_SUPPORTS_ABE(sr)) 900e3f2c991SKeyur Desai flags |= SMB_ABE; 901148c5f43SAlan Wright rc = smb_unmangle(dnode, name, longname, MAXNAMELEN, flags); 902da6c28aaSamw 903da6c28aaSamw if (rc == 0) { 904da6c28aaSamw /* 9058b2cc8acSafshin salek ardakani - Sun Microsystems - Irvine United States * longname is the real (case-sensitive) 9068b2cc8acSafshin salek ardakani - Sun Microsystems - Irvine United States * on-disk name. 907da6c28aaSamw * We make sure we do a rmdir on this exact 908da6c28aaSamw * name, as the name was mangled and denotes 909da6c28aaSamw * a unique directory. 910da6c28aaSamw */ 911da6c28aaSamw flags &= ~SMB_IGNORE_CASE; 912eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States rc = smb_vop_rmdir(dnode->vp, longname, flags, cr); 913da6c28aaSamw } 914da6c28aaSamw 915da6c28aaSamw kmem_free(longname, MAXNAMELEN); 916da6c28aaSamw } 917da6c28aaSamw 9189fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States if (rc == 0) 919b819cea2SGordon Ross smb_node_notify_change(dnode, FILE_ACTION_REMOVED, name); 9209fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States 921da6c28aaSamw return (rc); 922da6c28aaSamw } 923da6c28aaSamw 924da6c28aaSamw /* 925da6c28aaSamw * smb_fsop_getattr 926da6c28aaSamw * 927da6c28aaSamw * All SMB functions should use this wrapper to ensure that 928da6c28aaSamw * the the calls are performed with the appropriate credentials. 929da6c28aaSamw * Please document any direct call to explain the reason 930da6c28aaSamw * for avoiding this wrapper. 931da6c28aaSamw * 932da6c28aaSamw * It is assumed that a reference exists on snode coming into this routine. 933da6c28aaSamw */ 934da6c28aaSamw int 935faa1795aSjb150015 smb_fsop_getattr(smb_request_t *sr, cred_t *cr, smb_node_t *snode, 936da6c28aaSamw smb_attr_t *attr) 937da6c28aaSamw { 938da6c28aaSamw smb_node_t *unnamed_node; 939da6c28aaSamw vnode_t *unnamed_vp = NULL; 940da6c28aaSamw uint32_t status; 941da6c28aaSamw uint32_t access = 0; 942da6c28aaSamw int flags = 0; 943dc20a302Sas200622 int rc; 944da6c28aaSamw 945da6c28aaSamw ASSERT(cr); 946da6c28aaSamw ASSERT(snode); 947da6c28aaSamw ASSERT(snode->n_magic == SMB_NODE_MAGIC); 948da6c28aaSamw ASSERT(snode->n_state != SMB_NODE_STATE_DESTROYING); 949da6c28aaSamw 950743a77edSAlan Wright if (SMB_TREE_CONTAINS_NODE(sr, snode) == 0 || 951743a77edSAlan Wright SMB_TREE_HAS_ACCESS(sr, ACE_READ_ATTRIBUTES) == 0) 952da6c28aaSamw return (EACCES); 953da6c28aaSamw 954037cac00Sjoyce mcintosh /* sr could be NULL in some cases */ 955037cac00Sjoyce mcintosh if (sr && sr->fid_ofile) { 956da6c28aaSamw /* if uid and/or gid is requested */ 957da6c28aaSamw if (attr->sa_mask & (SMB_AT_UID|SMB_AT_GID)) 958da6c28aaSamw access |= READ_CONTROL; 959da6c28aaSamw 960da6c28aaSamw /* if anything else is also requested */ 961da6c28aaSamw if (attr->sa_mask & ~(SMB_AT_UID|SMB_AT_GID)) 962da6c28aaSamw access |= FILE_READ_ATTRIBUTES; 963da6c28aaSamw 964da6c28aaSamw status = smb_ofile_access(sr->fid_ofile, cr, access); 965da6c28aaSamw if (status != NT_STATUS_SUCCESS) 966da6c28aaSamw return (EACCES); 967da6c28aaSamw 968c8ec8eeaSjose borrego if (smb_tree_has_feature(sr->tid_tree, 969c8ec8eeaSjose borrego SMB_TREE_ACEMASKONACCESS)) 970da6c28aaSamw flags = ATTR_NOACLCHECK; 971da6c28aaSamw } 972da6c28aaSamw 973da6c28aaSamw unnamed_node = SMB_IS_STREAM(snode); 974da6c28aaSamw 975da6c28aaSamw if (unnamed_node) { 976da6c28aaSamw ASSERT(unnamed_node->n_magic == SMB_NODE_MAGIC); 977da6c28aaSamw ASSERT(unnamed_node->n_state != SMB_NODE_STATE_DESTROYING); 978da6c28aaSamw unnamed_vp = unnamed_node->vp; 979da6c28aaSamw } 980da6c28aaSamw 981dc20a302Sas200622 rc = smb_vop_getattr(snode->vp, unnamed_vp, attr, flags, cr); 9829fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States 9839fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States if ((rc == 0) && smb_node_is_dfslink(snode)) { 9849fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States /* a DFS link should be treated as a directory */ 9859fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States attr->sa_dosattr |= FILE_ATTRIBUTE_DIRECTORY; 9869fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States } 9879fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States 988dc20a302Sas200622 return (rc); 989da6c28aaSamw } 990da6c28aaSamw 991da6c28aaSamw /* 992b1352070SAlan Wright * smb_fsop_link 993b1352070SAlan Wright * 994b1352070SAlan Wright * All SMB functions should use this smb_vop_link wrapper to ensure that 995b1352070SAlan Wright * the smb_vop_link is performed with the appropriate credentials. 996b1352070SAlan Wright * Please document any direct call to smb_vop_link to explain the reason 997b1352070SAlan Wright * for avoiding this wrapper. 998b1352070SAlan Wright * 999b1352070SAlan Wright * It is assumed that references exist on from_dnode and to_dnode coming 1000b1352070SAlan Wright * into this routine. 1001b1352070SAlan Wright */ 1002b1352070SAlan Wright int 1003bbf6f00cSJordan Brown smb_fsop_link(smb_request_t *sr, cred_t *cr, smb_node_t *from_fnode, 1004bbf6f00cSJordan Brown smb_node_t *to_dnode, char *to_name) 1005b1352070SAlan Wright { 1006b1352070SAlan Wright char *longname = NULL; 1007b1352070SAlan Wright int flags = 0; 1008b1352070SAlan Wright int rc; 1009b1352070SAlan Wright 1010b1352070SAlan Wright ASSERT(sr); 1011b1352070SAlan Wright ASSERT(sr->tid_tree); 1012b1352070SAlan Wright ASSERT(cr); 1013b1352070SAlan Wright ASSERT(to_dnode); 1014b1352070SAlan Wright ASSERT(to_dnode->n_magic == SMB_NODE_MAGIC); 1015b1352070SAlan Wright ASSERT(to_dnode->n_state != SMB_NODE_STATE_DESTROYING); 1016b1352070SAlan Wright ASSERT(from_fnode); 1017b1352070SAlan Wright ASSERT(from_fnode->n_magic == SMB_NODE_MAGIC); 1018b1352070SAlan Wright ASSERT(from_fnode->n_state != SMB_NODE_STATE_DESTROYING); 1019b1352070SAlan Wright 1020b1352070SAlan Wright if (SMB_TREE_CONTAINS_NODE(sr, from_fnode) == 0) 1021b1352070SAlan Wright return (EACCES); 1022b1352070SAlan Wright 1023b1352070SAlan Wright if (SMB_TREE_CONTAINS_NODE(sr, to_dnode) == 0) 1024b1352070SAlan Wright return (EACCES); 1025b1352070SAlan Wright 1026b1352070SAlan Wright if (SMB_TREE_IS_READONLY(sr)) 1027b1352070SAlan Wright return (EROFS); 1028b1352070SAlan Wright 1029b1352070SAlan Wright if (SMB_TREE_IS_CASEINSENSITIVE(sr)) 1030b1352070SAlan Wright flags = SMB_IGNORE_CASE; 1031b1352070SAlan Wright if (SMB_TREE_SUPPORTS_CATIA(sr)) 1032b1352070SAlan Wright flags |= SMB_CATIA; 1033e3f2c991SKeyur Desai if (SMB_TREE_SUPPORTS_ABE(sr)) 1034e3f2c991SKeyur Desai flags |= SMB_ABE; 1035b1352070SAlan Wright 1036cb174861Sjoyce mcintosh if (SMB_TREE_SUPPORTS_SHORTNAMES(sr) && smb_maybe_mangled(to_name)) { 1037b1352070SAlan Wright longname = kmem_alloc(MAXNAMELEN, KM_SLEEP); 1038148c5f43SAlan Wright rc = smb_unmangle(to_dnode, to_name, longname, 1039148c5f43SAlan Wright MAXNAMELEN, flags); 1040b1352070SAlan Wright kmem_free(longname, MAXNAMELEN); 1041b1352070SAlan Wright 1042b1352070SAlan Wright if (rc == 0) 1043b1352070SAlan Wright rc = EEXIST; 1044b1352070SAlan Wright if (rc != ENOENT) 1045b1352070SAlan Wright return (rc); 1046b1352070SAlan Wright } 1047b1352070SAlan Wright 1048b1352070SAlan Wright rc = smb_vop_link(to_dnode->vp, from_fnode->vp, to_name, flags, cr); 10499fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States 1050b819cea2SGordon Ross if (rc == 0) 1051b819cea2SGordon Ross smb_node_notify_change(to_dnode, FILE_ACTION_ADDED, to_name); 10529fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States 1053b1352070SAlan Wright return (rc); 1054b1352070SAlan Wright } 1055b1352070SAlan Wright 1056b1352070SAlan Wright /* 1057da6c28aaSamw * smb_fsop_rename 1058da6c28aaSamw * 1059da6c28aaSamw * All SMB functions should use this smb_vop_rename wrapper to ensure that 1060da6c28aaSamw * the smb_vop_rename is performed with the appropriate credentials. 1061da6c28aaSamw * Please document any direct call to smb_vop_rename to explain the reason 1062da6c28aaSamw * for avoiding this wrapper. 1063da6c28aaSamw * 1064eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States * It is assumed that references exist on from_dnode and to_dnode coming 1065da6c28aaSamw * into this routine. 1066da6c28aaSamw */ 1067da6c28aaSamw int 1068da6c28aaSamw smb_fsop_rename( 1069faa1795aSjb150015 smb_request_t *sr, 1070da6c28aaSamw cred_t *cr, 1071eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States smb_node_t *from_dnode, 1072da6c28aaSamw char *from_name, 1073eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States smb_node_t *to_dnode, 1074da6c28aaSamw char *to_name) 1075da6c28aaSamw { 1076da6c28aaSamw smb_node_t *from_snode; 10779fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States smb_attr_t from_attr; 1078da6c28aaSamw vnode_t *from_vp; 10798b2cc8acSafshin salek ardakani - Sun Microsystems - Irvine United States int flags = 0, ret_flags; 1080da6c28aaSamw int rc; 1081743a77edSAlan Wright boolean_t isdir; 1082da6c28aaSamw 1083da6c28aaSamw ASSERT(cr); 1084eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States ASSERT(from_dnode); 1085eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States ASSERT(from_dnode->n_magic == SMB_NODE_MAGIC); 1086eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States ASSERT(from_dnode->n_state != SMB_NODE_STATE_DESTROYING); 1087da6c28aaSamw 1088eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States ASSERT(to_dnode); 1089eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States ASSERT(to_dnode->n_magic == SMB_NODE_MAGIC); 1090eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States ASSERT(to_dnode->n_state != SMB_NODE_STATE_DESTROYING); 1091da6c28aaSamw 1092eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States if (SMB_TREE_CONTAINS_NODE(sr, from_dnode) == 0) 1093da6c28aaSamw return (EACCES); 1094da6c28aaSamw 1095eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States if (SMB_TREE_CONTAINS_NODE(sr, to_dnode) == 0) 1096da6c28aaSamw return (EACCES); 1097da6c28aaSamw 1098da6c28aaSamw ASSERT(sr); 1099da6c28aaSamw ASSERT(sr->tid_tree); 1100c8ec8eeaSjose borrego if (SMB_TREE_IS_READONLY(sr)) 1101da6c28aaSamw return (EROFS); 1102da6c28aaSamw 1103da6c28aaSamw /* 1104c8ec8eeaSjose borrego * Note: There is no need to check SMB_TREE_IS_CASEINSENSITIVE 1105da6c28aaSamw * here. 1106da6c28aaSamw * 1107da6c28aaSamw * A case-sensitive rename is always done in this routine 1108da6c28aaSamw * because we are using the on-disk name from an earlier lookup. 1109da6c28aaSamw * If a mangled name was passed in by the caller (denoting a 1110da6c28aaSamw * deterministic lookup), then the exact file must be renamed 1111da6c28aaSamw * (i.e. SMB_IGNORE_CASE must not be passed to VOP_RENAME, or 1112da6c28aaSamw * else the underlying file system might return a "first-match" 1113da6c28aaSamw * on this on-disk name, possibly resulting in the wrong file). 1114da6c28aaSamw */ 1115da6c28aaSamw 11168b2cc8acSafshin salek ardakani - Sun Microsystems - Irvine United States if (SMB_TREE_SUPPORTS_CATIA(sr)) 11178b2cc8acSafshin salek ardakani - Sun Microsystems - Irvine United States flags |= SMB_CATIA; 11188b2cc8acSafshin salek ardakani - Sun Microsystems - Irvine United States 1119da6c28aaSamw /* 1120da6c28aaSamw * XXX: Lock required through smb_node_release() below? 1121da6c28aaSamw */ 1122da6c28aaSamw 1123eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States rc = smb_vop_lookup(from_dnode->vp, from_name, &from_vp, NULL, 11249fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States flags, &ret_flags, NULL, &from_attr, cr); 1125da6c28aaSamw 1126da6c28aaSamw if (rc != 0) 1127da6c28aaSamw return (rc); 1128da6c28aaSamw 11299fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States if (from_attr.sa_dosattr & FILE_ATTRIBUTE_REPARSE_POINT) { 11309fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States VN_RELE(from_vp); 11319fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States return (EACCES); 11329fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States } 11339fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States 11349fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States isdir = ((from_attr.sa_dosattr & FILE_ATTRIBUTE_DIRECTORY) != 0); 1135743a77edSAlan Wright 1136743a77edSAlan Wright if ((isdir && SMB_TREE_HAS_ACCESS(sr, 1137743a77edSAlan Wright ACE_DELETE_CHILD | ACE_ADD_SUBDIRECTORY) != 1138743a77edSAlan Wright (ACE_DELETE_CHILD | ACE_ADD_SUBDIRECTORY)) || 1139743a77edSAlan Wright (!isdir && SMB_TREE_HAS_ACCESS(sr, ACE_DELETE | ACE_ADD_FILE) != 11409fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States (ACE_DELETE | ACE_ADD_FILE))) { 11419fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States VN_RELE(from_vp); 1142743a77edSAlan Wright return (EACCES); 11439fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States } 1144743a77edSAlan Wright 1145bbf6f00cSJordan Brown /* 1146bbf6f00cSJordan Brown * SMB checks access on open and retains an access granted 1147bbf6f00cSJordan Brown * mask for use while the file is open. ACL changes should 1148bbf6f00cSJordan Brown * not affect access to an open file. 1149bbf6f00cSJordan Brown * 1150bbf6f00cSJordan Brown * If the rename is being performed on an ofile: 1151bbf6f00cSJordan Brown * - Check the ofile's access granted mask to see if the 1152bbf6f00cSJordan Brown * rename is permitted - requires DELETE access. 1153bbf6f00cSJordan Brown * - If the file system does access checking, set the 1154bbf6f00cSJordan Brown * ATTR_NOACLCHECK flag to ensure that the file system 1155bbf6f00cSJordan Brown * does not check permissions on subsequent calls. 1156bbf6f00cSJordan Brown */ 1157bbf6f00cSJordan Brown if (sr && sr->fid_ofile) { 1158bbf6f00cSJordan Brown rc = smb_ofile_access(sr->fid_ofile, cr, DELETE); 11599fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States if (rc != NT_STATUS_SUCCESS) { 11609fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States VN_RELE(from_vp); 1161bbf6f00cSJordan Brown return (EACCES); 11629fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States } 1163bbf6f00cSJordan Brown 1164bbf6f00cSJordan Brown if (smb_tree_has_feature(sr->tid_tree, 1165bbf6f00cSJordan Brown SMB_TREE_ACEMASKONACCESS)) 1166bbf6f00cSJordan Brown flags = ATTR_NOACLCHECK; 1167bbf6f00cSJordan Brown } 1168bbf6f00cSJordan Brown 1169eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States rc = smb_vop_rename(from_dnode->vp, from_name, to_dnode->vp, 1170dc20a302Sas200622 to_name, flags, cr); 1171da6c28aaSamw 1172da6c28aaSamw if (rc == 0) { 1173da6c28aaSamw from_snode = smb_node_lookup(sr, NULL, cr, from_vp, from_name, 1174037cac00Sjoyce mcintosh from_dnode, NULL); 1175da6c28aaSamw 1176da6c28aaSamw if (from_snode == NULL) { 11777f667e74Sjose borrego rc = ENOMEM; 1178da6c28aaSamw } else { 1179eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States smb_node_rename(from_dnode, from_snode, 1180eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States to_dnode, to_name); 11817f667e74Sjose borrego smb_node_release(from_snode); 1182da6c28aaSamw } 11837f667e74Sjose borrego } 11847f667e74Sjose borrego VN_RELE(from_vp); 1185da6c28aaSamw 1186b819cea2SGordon Ross if (rc == 0) { 1187b819cea2SGordon Ross if (from_dnode == to_dnode) { 1188b819cea2SGordon Ross smb_node_notify_change(from_dnode, 1189b819cea2SGordon Ross FILE_ACTION_RENAMED_OLD_NAME, from_name); 1190b819cea2SGordon Ross smb_node_notify_change(to_dnode, 1191b819cea2SGordon Ross FILE_ACTION_RENAMED_NEW_NAME, to_name); 1192b819cea2SGordon Ross } else { 1193b819cea2SGordon Ross smb_node_notify_change(from_dnode, 1194b819cea2SGordon Ross FILE_ACTION_REMOVED, from_name); 1195b819cea2SGordon Ross smb_node_notify_change(to_dnode, 1196b819cea2SGordon Ross FILE_ACTION_ADDED, to_name); 1197b819cea2SGordon Ross } 1198b819cea2SGordon Ross } 11999fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States 1200da6c28aaSamw /* XXX: unlock */ 1201da6c28aaSamw 1202da6c28aaSamw return (rc); 1203da6c28aaSamw } 1204da6c28aaSamw 1205da6c28aaSamw /* 1206da6c28aaSamw * smb_fsop_setattr 1207da6c28aaSamw * 1208da6c28aaSamw * All SMB functions should use this wrapper to ensure that 1209da6c28aaSamw * the the calls are performed with the appropriate credentials. 1210da6c28aaSamw * Please document any direct call to explain the reason 1211da6c28aaSamw * for avoiding this wrapper. 1212da6c28aaSamw * 1213e3f2c991SKeyur Desai * It is assumed that a reference exists on snode coming into 1214e3f2c991SKeyur Desai * this function. 1215da6c28aaSamw * A null smb_request might be passed to this function. 1216da6c28aaSamw */ 1217da6c28aaSamw int 1218da6c28aaSamw smb_fsop_setattr( 1219da6c28aaSamw smb_request_t *sr, 1220da6c28aaSamw cred_t *cr, 1221da6c28aaSamw smb_node_t *snode, 1222037cac00Sjoyce mcintosh smb_attr_t *set_attr) 1223da6c28aaSamw { 1224da6c28aaSamw smb_node_t *unnamed_node; 1225da6c28aaSamw vnode_t *unnamed_vp = NULL; 1226da6c28aaSamw uint32_t status; 12272c1b14e5Sjose borrego uint32_t access; 1228da6c28aaSamw int rc = 0; 1229da6c28aaSamw int flags = 0; 12302c1b14e5Sjose borrego uint_t sa_mask; 1231da6c28aaSamw 1232da6c28aaSamw ASSERT(cr); 1233da6c28aaSamw ASSERT(snode); 1234da6c28aaSamw ASSERT(snode->n_magic == SMB_NODE_MAGIC); 1235da6c28aaSamw ASSERT(snode->n_state != SMB_NODE_STATE_DESTROYING); 1236da6c28aaSamw 1237c8ec8eeaSjose borrego if (SMB_TREE_CONTAINS_NODE(sr, snode) == 0) 1238da6c28aaSamw return (EACCES); 1239da6c28aaSamw 1240c8ec8eeaSjose borrego if (SMB_TREE_IS_READONLY(sr)) 1241da6c28aaSamw return (EROFS); 1242da6c28aaSamw 1243743a77edSAlan Wright if (SMB_TREE_HAS_ACCESS(sr, 1244743a77edSAlan Wright ACE_WRITE_ATTRIBUTES | ACE_WRITE_NAMED_ATTRS) == 0) 1245743a77edSAlan Wright return (EACCES); 1246743a77edSAlan Wright 1247e3f2c991SKeyur Desai /* 1248e3f2c991SKeyur Desai * SMB checks access on open and retains an access granted 1249e3f2c991SKeyur Desai * mask for use while the file is open. ACL changes should 1250e3f2c991SKeyur Desai * not affect access to an open file. 1251e3f2c991SKeyur Desai * 1252e3f2c991SKeyur Desai * If the setattr is being performed on an ofile: 1253e3f2c991SKeyur Desai * - Check the ofile's access granted mask to see if the 1254e3f2c991SKeyur Desai * setattr is permitted. 1255e3f2c991SKeyur Desai * UID, GID - require WRITE_OWNER 1256e3f2c991SKeyur Desai * SIZE, ALLOCSZ - require FILE_WRITE_DATA 1257e3f2c991SKeyur Desai * all other attributes require FILE_WRITE_ATTRIBUTES 1258e3f2c991SKeyur Desai * 1259e3f2c991SKeyur Desai * - If the file system does access checking, set the 1260e3f2c991SKeyur Desai * ATTR_NOACLCHECK flag to ensure that the file system 1261e3f2c991SKeyur Desai * does not check permissions on subsequent calls. 1262e3f2c991SKeyur Desai */ 1263da6c28aaSamw if (sr && sr->fid_ofile) { 12642c1b14e5Sjose borrego sa_mask = set_attr->sa_mask; 12652c1b14e5Sjose borrego access = 0; 1266c8ec8eeaSjose borrego 1267e3f2c991SKeyur Desai if (sa_mask & (SMB_AT_SIZE | SMB_AT_ALLOCSZ)) { 12682c1b14e5Sjose borrego access |= FILE_WRITE_DATA; 1269e3f2c991SKeyur Desai sa_mask &= ~(SMB_AT_SIZE | SMB_AT_ALLOCSZ); 12702c1b14e5Sjose borrego } 12712c1b14e5Sjose borrego 12722c1b14e5Sjose borrego if (sa_mask & (SMB_AT_UID|SMB_AT_GID)) { 1273da6c28aaSamw access |= WRITE_OWNER; 12742c1b14e5Sjose borrego sa_mask &= ~(SMB_AT_UID|SMB_AT_GID); 12752c1b14e5Sjose borrego } 1276da6c28aaSamw 12772c1b14e5Sjose borrego if (sa_mask) 1278da6c28aaSamw access |= FILE_WRITE_ATTRIBUTES; 1279da6c28aaSamw 1280da6c28aaSamw status = smb_ofile_access(sr->fid_ofile, cr, access); 1281da6c28aaSamw if (status != NT_STATUS_SUCCESS) 1282da6c28aaSamw return (EACCES); 1283da6c28aaSamw 1284c8ec8eeaSjose borrego if (smb_tree_has_feature(sr->tid_tree, 1285c8ec8eeaSjose borrego SMB_TREE_ACEMASKONACCESS)) 1286da6c28aaSamw flags = ATTR_NOACLCHECK; 1287da6c28aaSamw } 1288da6c28aaSamw 1289da6c28aaSamw unnamed_node = SMB_IS_STREAM(snode); 1290da6c28aaSamw 1291da6c28aaSamw if (unnamed_node) { 1292da6c28aaSamw ASSERT(unnamed_node->n_magic == SMB_NODE_MAGIC); 1293da6c28aaSamw ASSERT(unnamed_node->n_state != SMB_NODE_STATE_DESTROYING); 1294da6c28aaSamw unnamed_vp = unnamed_node->vp; 1295da6c28aaSamw } 1296da6c28aaSamw 12979660e5cbSJanice Chang rc = smb_vop_setattr(snode->vp, unnamed_vp, set_attr, flags, cr); 1298da6c28aaSamw return (rc); 1299da6c28aaSamw } 1300da6c28aaSamw 1301da6c28aaSamw /* 1302a90cf9f2SGordon Ross * Support for SMB2 setinfo FileValidDataLengthInformation. 1303*55f0a249SGordon Ross * Free (zero out) data in the range off, off+len 1304a90cf9f2SGordon Ross */ 1305a90cf9f2SGordon Ross int 1306*55f0a249SGordon Ross smb_fsop_freesp( 1307a90cf9f2SGordon Ross smb_request_t *sr, 1308a90cf9f2SGordon Ross cred_t *cr, 1309*55f0a249SGordon Ross smb_ofile_t *ofile, 1310*55f0a249SGordon Ross off64_t off, 1311*55f0a249SGordon Ross off64_t len) 1312a90cf9f2SGordon Ross { 1313a90cf9f2SGordon Ross flock64_t flk; 1314*55f0a249SGordon Ross smb_node_t *node = ofile->f_node; 1315a90cf9f2SGordon Ross uint32_t status; 1316a90cf9f2SGordon Ross uint32_t access = FILE_WRITE_DATA; 1317a90cf9f2SGordon Ross int rc; 1318a90cf9f2SGordon Ross 1319a90cf9f2SGordon Ross ASSERT(cr); 1320a90cf9f2SGordon Ross ASSERT(node); 1321a90cf9f2SGordon Ross ASSERT(node->n_magic == SMB_NODE_MAGIC); 1322a90cf9f2SGordon Ross ASSERT(node->n_state != SMB_NODE_STATE_DESTROYING); 1323a90cf9f2SGordon Ross 1324a90cf9f2SGordon Ross if (SMB_TREE_CONTAINS_NODE(sr, node) == 0) 1325a90cf9f2SGordon Ross return (EACCES); 1326a90cf9f2SGordon Ross 1327a90cf9f2SGordon Ross if (SMB_TREE_IS_READONLY(sr)) 1328a90cf9f2SGordon Ross return (EROFS); 1329a90cf9f2SGordon Ross 1330a90cf9f2SGordon Ross if (SMB_TREE_HAS_ACCESS(sr, access) == 0) 1331a90cf9f2SGordon Ross return (EACCES); 1332a90cf9f2SGordon Ross 1333a90cf9f2SGordon Ross /* 1334a90cf9f2SGordon Ross * SMB checks access on open and retains an access granted 1335a90cf9f2SGordon Ross * mask for use while the file is open. ACL changes should 1336a90cf9f2SGordon Ross * not affect access to an open file. 1337a90cf9f2SGordon Ross * 1338a90cf9f2SGordon Ross * If the setattr is being performed on an ofile: 1339a90cf9f2SGordon Ross * - Check the ofile's access granted mask to see if this 1340a90cf9f2SGordon Ross * modification should be permitted (FILE_WRITE_DATA) 1341a90cf9f2SGordon Ross */ 1342a90cf9f2SGordon Ross status = smb_ofile_access(sr->fid_ofile, cr, access); 1343a90cf9f2SGordon Ross if (status != NT_STATUS_SUCCESS) 1344a90cf9f2SGordon Ross return (EACCES); 1345a90cf9f2SGordon Ross 1346a90cf9f2SGordon Ross bzero(&flk, sizeof (flk)); 1347*55f0a249SGordon Ross flk.l_start = off; 1348*55f0a249SGordon Ross flk.l_len = len; 1349a90cf9f2SGordon Ross 1350a90cf9f2SGordon Ross rc = smb_vop_space(node->vp, F_FREESP, &flk, FWRITE, 0LL, cr); 1351a90cf9f2SGordon Ross return (rc); 1352a90cf9f2SGordon Ross } 1353a90cf9f2SGordon Ross 1354a90cf9f2SGordon Ross /* 1355da6c28aaSamw * smb_fsop_read 1356da6c28aaSamw * 1357da6c28aaSamw * All SMB functions should use this wrapper to ensure that 1358da6c28aaSamw * the the calls are performed with the appropriate credentials. 1359da6c28aaSamw * Please document any direct call to explain the reason 1360da6c28aaSamw * for avoiding this wrapper. 1361da6c28aaSamw * 1362da6c28aaSamw * It is assumed that a reference exists on snode coming into this routine. 1363*55f0a249SGordon Ross * Note that ofile may be different from sr->fid_ofile, or may be NULL. 1364da6c28aaSamw */ 1365da6c28aaSamw int 1366*55f0a249SGordon Ross smb_fsop_read(smb_request_t *sr, cred_t *cr, smb_node_t *snode, 1367*55f0a249SGordon Ross smb_ofile_t *ofile, uio_t *uio) 1368da6c28aaSamw { 1369c8ec8eeaSjose borrego caller_context_t ct; 13708622ec45SGordon Ross cred_t *kcr = zone_kcred(); 1371*55f0a249SGordon Ross uint32_t amask; 1372dc20a302Sas200622 int svmand; 1373da6c28aaSamw int rc; 1374da6c28aaSamw 1375da6c28aaSamw ASSERT(cr); 1376da6c28aaSamw ASSERT(snode); 1377da6c28aaSamw ASSERT(snode->n_magic == SMB_NODE_MAGIC); 1378da6c28aaSamw ASSERT(snode->n_state != SMB_NODE_STATE_DESTROYING); 1379da6c28aaSamw 1380da6c28aaSamw ASSERT(sr); 1381da6c28aaSamw 1382*55f0a249SGordon Ross if (ofile != NULL) { 1383*55f0a249SGordon Ross /* 1384*55f0a249SGordon Ross * Check tree access. Not SMB_TREE_HAS_ACCESS 1385*55f0a249SGordon Ross * because we need to use ofile->f_tree 1386*55f0a249SGordon Ross */ 1387*55f0a249SGordon Ross if ((ofile->f_tree->t_access & ACE_READ_DATA) == 0) 1388743a77edSAlan Wright return (EACCES); 1389743a77edSAlan Wright 1390*55f0a249SGordon Ross /* 1391*55f0a249SGordon Ross * Check ofile access. Use in-line smb_ofile_access 1392*55f0a249SGordon Ross * so we can check both amask bits at the same time. 1393*55f0a249SGordon Ross * If any bit in amask is granted, allow this read. 1394*55f0a249SGordon Ross */ 1395*55f0a249SGordon Ross amask = FILE_READ_DATA; 1396*55f0a249SGordon Ross if (sr->smb_flg2 & SMB_FLAGS2_READ_IF_EXECUTE) 1397*55f0a249SGordon Ross amask |= FILE_EXECUTE; 1398*55f0a249SGordon Ross if (cr != kcr && (ofile->f_granted_access & amask) == 0) 1399da6c28aaSamw return (EACCES); 1400*55f0a249SGordon Ross } 1401da6c28aaSamw 1402da6c28aaSamw /* 1403da6c28aaSamw * Streams permission are checked against the unnamed stream, 1404da6c28aaSamw * but in FS level they have their own permissions. To avoid 1405da6c28aaSamw * rejection by FS due to lack of permission on the actual 1406da6c28aaSamw * extended attr kcred is passed for streams. 1407da6c28aaSamw */ 1408037cac00Sjoyce mcintosh if (SMB_IS_STREAM(snode)) 14098622ec45SGordon Ross cr = kcr; 1410da6c28aaSamw 1411dc20a302Sas200622 smb_node_start_crit(snode, RW_READER); 14128622ec45SGordon Ross rc = nbl_svmand(snode->vp, kcr, &svmand); 1413dc20a302Sas200622 if (rc) { 1414dc20a302Sas200622 smb_node_end_crit(snode); 1415dc20a302Sas200622 return (rc); 1416dc20a302Sas200622 } 1417da6c28aaSamw 14180897f7fbSGordon Ross /* 14190897f7fbSGordon Ross * Note: SMB allows a zero-byte read, which should not 14200897f7fbSGordon Ross * conflict with any locks. However nbl_lock_conflict 14210897f7fbSGordon Ross * takes a zero-byte length as lock to EOF, so we must 14220897f7fbSGordon Ross * special case that here. 14230897f7fbSGordon Ross */ 14240897f7fbSGordon Ross if (uio->uio_resid > 0) { 1425c8ec8eeaSjose borrego ct = smb_ct; 1426*55f0a249SGordon Ross if (ofile != NULL) 1427*55f0a249SGordon Ross ct.cc_pid = ofile->f_uniqid; 1428dc20a302Sas200622 rc = nbl_lock_conflict(snode->vp, NBL_READ, uio->uio_loffset, 14290897f7fbSGordon Ross uio->uio_resid, svmand, &ct); 14300897f7fbSGordon Ross if (rc != 0) { 1431dc20a302Sas200622 smb_node_end_crit(snode); 14326537f381Sas200622 return (ERANGE); 1433dc20a302Sas200622 } 14340897f7fbSGordon Ross } 1435037cac00Sjoyce mcintosh 1436dc20a302Sas200622 rc = smb_vop_read(snode->vp, uio, cr); 1437dc20a302Sas200622 smb_node_end_crit(snode); 1438da6c28aaSamw 1439da6c28aaSamw return (rc); 1440da6c28aaSamw } 1441da6c28aaSamw 1442da6c28aaSamw /* 1443da6c28aaSamw * smb_fsop_write 1444da6c28aaSamw * 1445da6c28aaSamw * It is assumed that a reference exists on snode coming into this routine. 1446*55f0a249SGordon Ross * Note that ofile may be different from sr->fid_ofile, or may be NULL. 1447da6c28aaSamw */ 1448da6c28aaSamw int 1449da6c28aaSamw smb_fsop_write( 1450faa1795aSjb150015 smb_request_t *sr, 1451da6c28aaSamw cred_t *cr, 1452da6c28aaSamw smb_node_t *snode, 1453*55f0a249SGordon Ross smb_ofile_t *ofile, 1454da6c28aaSamw uio_t *uio, 1455da6c28aaSamw uint32_t *lcount, 14563db3f65cSamw int ioflag) 1457da6c28aaSamw { 1458c8ec8eeaSjose borrego caller_context_t ct; 14595fd03bc0SGordon Ross smb_attr_t attr; 1460*55f0a249SGordon Ross cred_t *kcr = zone_kcred(); 14615fd03bc0SGordon Ross smb_node_t *u_node; 14625fd03bc0SGordon Ross vnode_t *u_vp = NULL; 14635fd03bc0SGordon Ross vnode_t *vp; 1464*55f0a249SGordon Ross uint32_t amask; 1465dc20a302Sas200622 int svmand; 1466da6c28aaSamw int rc; 1467da6c28aaSamw 1468da6c28aaSamw ASSERT(cr); 1469da6c28aaSamw ASSERT(snode); 1470da6c28aaSamw ASSERT(snode->n_magic == SMB_NODE_MAGIC); 1471da6c28aaSamw ASSERT(snode->n_state != SMB_NODE_STATE_DESTROYING); 1472da6c28aaSamw 1473da6c28aaSamw ASSERT(sr); 14745fd03bc0SGordon Ross vp = snode->vp; 1475da6c28aaSamw 1476*55f0a249SGordon Ross if (ofile != NULL) { 1477*55f0a249SGordon Ross amask = FILE_WRITE_DATA | FILE_APPEND_DATA; 1478*55f0a249SGordon Ross 1479*55f0a249SGordon Ross /* Check tree access. */ 1480*55f0a249SGordon Ross if ((ofile->f_tree->t_access & amask) == 0) 1481da6c28aaSamw return (EROFS); 1482dc20a302Sas200622 1483*55f0a249SGordon Ross /* 1484*55f0a249SGordon Ross * Check ofile access. Use in-line smb_ofile_access 1485*55f0a249SGordon Ross * so we can check both amask bits at the same time. 1486*55f0a249SGordon Ross * If any bit in amask is granted, allow this write. 1487*55f0a249SGordon Ross */ 1488*55f0a249SGordon Ross if (cr != kcr && (ofile->f_granted_access & amask) == 0) 1489da6c28aaSamw return (EACCES); 1490dc20a302Sas200622 } 1491da6c28aaSamw 1492da6c28aaSamw /* 1493da6c28aaSamw * Streams permission are checked against the unnamed stream, 1494da6c28aaSamw * but in FS level they have their own permissions. To avoid 1495da6c28aaSamw * rejection by FS due to lack of permission on the actual 1496da6c28aaSamw * extended attr kcred is passed for streams. 1497da6c28aaSamw */ 14985fd03bc0SGordon Ross u_node = SMB_IS_STREAM(snode); 14995fd03bc0SGordon Ross if (u_node != NULL) { 15005fd03bc0SGordon Ross ASSERT(u_node->n_magic == SMB_NODE_MAGIC); 15015fd03bc0SGordon Ross ASSERT(u_node->n_state != SMB_NODE_STATE_DESTROYING); 15025fd03bc0SGordon Ross u_vp = u_node->vp; 15038622ec45SGordon Ross cr = kcr; 15045fd03bc0SGordon Ross } 1505da6c28aaSamw 15065fd03bc0SGordon Ross smb_node_start_crit(snode, RW_WRITER); 15078622ec45SGordon Ross rc = nbl_svmand(vp, kcr, &svmand); 1508dc20a302Sas200622 if (rc) { 1509dc20a302Sas200622 smb_node_end_crit(snode); 1510dc20a302Sas200622 return (rc); 1511dc20a302Sas200622 } 1512c8ec8eeaSjose borrego 15130897f7fbSGordon Ross /* 15140897f7fbSGordon Ross * Note: SMB allows a zero-byte write, which should not 15150897f7fbSGordon Ross * conflict with any locks. However nbl_lock_conflict 15160897f7fbSGordon Ross * takes a zero-byte length as lock to EOF, so we must 15170897f7fbSGordon Ross * special case that here. 15180897f7fbSGordon Ross */ 15190897f7fbSGordon Ross if (uio->uio_resid > 0) { 1520c8ec8eeaSjose borrego ct = smb_ct; 1521*55f0a249SGordon Ross if (ofile != NULL) 1522*55f0a249SGordon Ross ct.cc_pid = ofile->f_uniqid; 15235fd03bc0SGordon Ross rc = nbl_lock_conflict(vp, NBL_WRITE, uio->uio_loffset, 15240897f7fbSGordon Ross uio->uio_resid, svmand, &ct); 15250897f7fbSGordon Ross if (rc != 0) { 1526dc20a302Sas200622 smb_node_end_crit(snode); 15276537f381Sas200622 return (ERANGE); 1528dc20a302Sas200622 } 15290897f7fbSGordon Ross } 1530037cac00Sjoyce mcintosh 15315fd03bc0SGordon Ross rc = smb_vop_write(vp, uio, ioflag, lcount, cr); 15325fd03bc0SGordon Ross 15335fd03bc0SGordon Ross /* 15345fd03bc0SGordon Ross * Once the mtime has been set via this ofile, the 15355fd03bc0SGordon Ross * automatic mtime changes from writes via this ofile 15365fd03bc0SGordon Ross * should cease, preserving the mtime that was set. 15375fd03bc0SGordon Ross * See: [MS-FSA] 2.1.5.14 and smb_node_setattr. 15385fd03bc0SGordon Ross * 15395fd03bc0SGordon Ross * The VFS interface does not offer a way to ask it to 15405fd03bc0SGordon Ross * skip the mtime updates, so we simulate the desired 15415fd03bc0SGordon Ross * behavior by re-setting the mtime after writes on a 15425fd03bc0SGordon Ross * handle where the mtime has been set. 15435fd03bc0SGordon Ross */ 1544*55f0a249SGordon Ross if (ofile != NULL && 1545*55f0a249SGordon Ross (ofile->f_pending_attr.sa_mask & SMB_AT_MTIME) != 0) { 1546*55f0a249SGordon Ross bcopy(&ofile->f_pending_attr, &attr, sizeof (attr)); 15475fd03bc0SGordon Ross attr.sa_mask = SMB_AT_MTIME; 15488622ec45SGordon Ross (void) smb_vop_setattr(vp, u_vp, &attr, 0, kcr); 15495fd03bc0SGordon Ross } 15505fd03bc0SGordon Ross 1551dc20a302Sas200622 smb_node_end_crit(snode); 1552da6c28aaSamw 1553da6c28aaSamw return (rc); 1554da6c28aaSamw } 1555da6c28aaSamw 1556da6c28aaSamw /* 1557*55f0a249SGordon Ross * Find the next allocated range starting at or after 1558*55f0a249SGordon Ross * the offset (*datap), returning the start/end of 1559*55f0a249SGordon Ross * that range in (*datap, *holep) 1560*55f0a249SGordon Ross */ 1561*55f0a249SGordon Ross int 1562*55f0a249SGordon Ross smb_fsop_next_alloc_range( 1563*55f0a249SGordon Ross cred_t *cr, 1564*55f0a249SGordon Ross smb_node_t *node, 1565*55f0a249SGordon Ross off64_t *datap, 1566*55f0a249SGordon Ross off64_t *holep) 1567*55f0a249SGordon Ross { 1568*55f0a249SGordon Ross int err; 1569*55f0a249SGordon Ross 1570*55f0a249SGordon Ross err = smb_vop_ioctl(node->vp, _FIO_SEEK_DATA, datap, cr); 1571*55f0a249SGordon Ross if (err != 0) 1572*55f0a249SGordon Ross return (err); 1573*55f0a249SGordon Ross 1574*55f0a249SGordon Ross *holep = *datap; 1575*55f0a249SGordon Ross err = smb_vop_ioctl(node->vp, _FIO_SEEK_HOLE, holep, cr); 1576*55f0a249SGordon Ross 1577*55f0a249SGordon Ross return (err); 1578*55f0a249SGordon Ross } 1579*55f0a249SGordon Ross 1580*55f0a249SGordon Ross /* 1581da6c28aaSamw * smb_fsop_statfs 1582da6c28aaSamw * 1583da6c28aaSamw * This is a wrapper function used for stat operations. 1584da6c28aaSamw */ 1585da6c28aaSamw int 1586da6c28aaSamw smb_fsop_statfs( 1587da6c28aaSamw cred_t *cr, 1588da6c28aaSamw smb_node_t *snode, 1589da6c28aaSamw struct statvfs64 *statp) 1590da6c28aaSamw { 1591da6c28aaSamw ASSERT(cr); 1592da6c28aaSamw ASSERT(snode); 1593da6c28aaSamw ASSERT(snode->n_magic == SMB_NODE_MAGIC); 1594da6c28aaSamw ASSERT(snode->n_state != SMB_NODE_STATE_DESTROYING); 1595da6c28aaSamw 1596da6c28aaSamw return (smb_vop_statfs(snode->vp, statp, cr)); 1597da6c28aaSamw } 1598da6c28aaSamw 1599da6c28aaSamw /* 1600da6c28aaSamw * smb_fsop_access 1601ee60c47bSjm199354 * 1602ee60c47bSjm199354 * Named streams do not have separate permissions from the associated 1603ee60c47bSjm199354 * unnamed stream. Thus, if node is a named stream, the permissions 1604ee60c47bSjm199354 * check will be performed on the associated unnamed stream. 1605ee60c47bSjm199354 * 1606ee60c47bSjm199354 * However, our named streams do have their own quarantine attribute, 1607ee60c47bSjm199354 * separate from that on the unnamed stream. If READ or EXECUTE 1608ee60c47bSjm199354 * access has been requested on a named stream, an additional access 1609ee60c47bSjm199354 * check is performed on the named stream in case it has been 1610ee60c47bSjm199354 * quarantined. kcred is used to avoid issues with the permissions 1611ee60c47bSjm199354 * set on the extended attribute file representing the named stream. 1612da6c28aaSamw */ 1613da6c28aaSamw int 1614da6c28aaSamw smb_fsop_access(smb_request_t *sr, cred_t *cr, smb_node_t *snode, 1615da6c28aaSamw uint32_t faccess) 1616da6c28aaSamw { 1617da6c28aaSamw int access = 0; 1618da6c28aaSamw int error; 1619da6c28aaSamw vnode_t *dir_vp; 1620da6c28aaSamw boolean_t acl_check = B_TRUE; 1621da6c28aaSamw smb_node_t *unnamed_node; 1622da6c28aaSamw 1623c8ec8eeaSjose borrego ASSERT(sr); 1624da6c28aaSamw ASSERT(cr); 1625da6c28aaSamw ASSERT(snode); 1626da6c28aaSamw ASSERT(snode->n_magic == SMB_NODE_MAGIC); 1627da6c28aaSamw ASSERT(snode->n_state != SMB_NODE_STATE_DESTROYING); 1628da6c28aaSamw 1629c8ec8eeaSjose borrego if (SMB_TREE_IS_READONLY(sr)) { 1630da6c28aaSamw if (faccess & (FILE_WRITE_DATA|FILE_APPEND_DATA| 1631da6c28aaSamw FILE_WRITE_EA|FILE_DELETE_CHILD|FILE_WRITE_ATTRIBUTES| 1632da6c28aaSamw DELETE|WRITE_DAC|WRITE_OWNER)) { 1633da6c28aaSamw return (NT_STATUS_ACCESS_DENIED); 1634da6c28aaSamw } 1635da6c28aaSamw } 1636da6c28aaSamw 16379fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States if (smb_node_is_reparse(snode) && (faccess & DELETE)) 16389fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States return (NT_STATUS_ACCESS_DENIED); 16399fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States 1640da6c28aaSamw unnamed_node = SMB_IS_STREAM(snode); 1641da6c28aaSamw if (unnamed_node) { 1642da6c28aaSamw ASSERT(unnamed_node->n_magic == SMB_NODE_MAGIC); 1643da6c28aaSamw ASSERT(unnamed_node->n_state != SMB_NODE_STATE_DESTROYING); 1644ee60c47bSjm199354 1645ee60c47bSjm199354 /* 1646ee60c47bSjm199354 * Perform VREAD access check on the named stream in case it 1647ee60c47bSjm199354 * is quarantined. kcred is passed to smb_vop_access so it 1648ee60c47bSjm199354 * doesn't fail due to lack of permission. 1649ee60c47bSjm199354 */ 1650ee60c47bSjm199354 if (faccess & (FILE_READ_DATA | FILE_EXECUTE)) { 1651ee60c47bSjm199354 error = smb_vop_access(snode->vp, VREAD, 16528622ec45SGordon Ross 0, NULL, zone_kcred()); 1653ee60c47bSjm199354 if (error) 1654ee60c47bSjm199354 return (NT_STATUS_ACCESS_DENIED); 1655ee60c47bSjm199354 } 1656ee60c47bSjm199354 1657da6c28aaSamw /* 1658da6c28aaSamw * Streams authorization should be performed against the 1659da6c28aaSamw * unnamed stream. 1660da6c28aaSamw */ 1661da6c28aaSamw snode = unnamed_node; 1662da6c28aaSamw } 1663da6c28aaSamw 1664da6c28aaSamw if (faccess & ACCESS_SYSTEM_SECURITY) { 1665da6c28aaSamw /* 1666da6c28aaSamw * This permission is required for reading/writing SACL and 1667da6c28aaSamw * it's not part of DACL. It's only granted via proper 1668da6c28aaSamw * privileges. 1669da6c28aaSamw */ 1670da6c28aaSamw if ((sr->uid_user->u_privileges & 1671da6c28aaSamw (SMB_USER_PRIV_BACKUP | 1672da6c28aaSamw SMB_USER_PRIV_RESTORE | 1673da6c28aaSamw SMB_USER_PRIV_SECURITY)) == 0) 1674da6c28aaSamw return (NT_STATUS_PRIVILEGE_NOT_HELD); 1675da6c28aaSamw 1676da6c28aaSamw faccess &= ~ACCESS_SYSTEM_SECURITY; 1677da6c28aaSamw } 1678da6c28aaSamw 1679da6c28aaSamw /* Links don't have ACL */ 1680c8ec8eeaSjose borrego if ((!smb_tree_has_feature(sr->tid_tree, SMB_TREE_ACEMASKONACCESS)) || 16819fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States smb_node_is_symlink(snode)) 1682da6c28aaSamw acl_check = B_FALSE; 1683da6c28aaSamw 1684cb174861Sjoyce mcintosh /* Deny access based on the share access mask */ 1685cb174861Sjoyce mcintosh 1686cb174861Sjoyce mcintosh if ((faccess & ~sr->tid_tree->t_access) != 0) 1687cb174861Sjoyce mcintosh return (NT_STATUS_ACCESS_DENIED); 1688743a77edSAlan Wright 1689da6c28aaSamw if (acl_check) { 16901fcced4cSJordan Brown dir_vp = (snode->n_dnode) ? snode->n_dnode->vp : NULL; 1691da6c28aaSamw error = smb_vop_access(snode->vp, faccess, V_ACE_MASK, dir_vp, 1692da6c28aaSamw cr); 1693da6c28aaSamw } else { 1694da6c28aaSamw /* 1695da6c28aaSamw * FS doesn't understand 32-bit mask, need to map 1696da6c28aaSamw */ 1697da6c28aaSamw if (faccess & (FILE_WRITE_DATA | FILE_APPEND_DATA)) 1698da6c28aaSamw access |= VWRITE; 1699da6c28aaSamw 1700da6c28aaSamw if (faccess & FILE_READ_DATA) 1701da6c28aaSamw access |= VREAD; 1702da6c28aaSamw 1703da6c28aaSamw if (faccess & FILE_EXECUTE) 1704da6c28aaSamw access |= VEXEC; 1705da6c28aaSamw 1706da6c28aaSamw error = smb_vop_access(snode->vp, access, 0, NULL, cr); 1707da6c28aaSamw } 1708da6c28aaSamw 1709da6c28aaSamw return ((error) ? NT_STATUS_ACCESS_DENIED : NT_STATUS_SUCCESS); 1710da6c28aaSamw } 1711da6c28aaSamw 1712da6c28aaSamw /* 1713da6c28aaSamw * smb_fsop_lookup_name() 1714da6c28aaSamw * 1715b89a8333Snatalie li - Sun Microsystems - Irvine United States * If name indicates that the file is a stream file, perform 1716b89a8333Snatalie li - Sun Microsystems - Irvine United States * stream specific lookup, otherwise call smb_fsop_lookup. 1717da6c28aaSamw * 1718b89a8333Snatalie li - Sun Microsystems - Irvine United States * Return an error if the looked-up file is in outside the tree. 1719b89a8333Snatalie li - Sun Microsystems - Irvine United States * (Required when invoked from open path.) 1720148c5f43SAlan Wright * 1721148c5f43SAlan Wright * Case sensitivity flags (SMB_IGNORE_CASE, SMB_CASE_SENSITIVE): 1722148c5f43SAlan Wright * if SMB_CASE_SENSITIVE is set, the SMB_IGNORE_CASE flag will NOT be set 1723148c5f43SAlan Wright * based on the tree's case sensitivity. However, if the SMB_IGNORE_CASE 1724148c5f43SAlan Wright * flag is set in the flags value passed as a parameter, a case insensitive 1725148c5f43SAlan Wright * lookup WILL be done (regardless of whether SMB_CASE_SENSITIVE is set 1726148c5f43SAlan Wright * or not). 1727da6c28aaSamw */ 1728da6c28aaSamw 1729da6c28aaSamw int 1730da6c28aaSamw smb_fsop_lookup_name( 1731faa1795aSjb150015 smb_request_t *sr, 1732da6c28aaSamw cred_t *cr, 1733da6c28aaSamw int flags, 1734da6c28aaSamw smb_node_t *root_node, 1735eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States smb_node_t *dnode, 1736da6c28aaSamw char *name, 1737037cac00Sjoyce mcintosh smb_node_t **ret_snode) 1738da6c28aaSamw { 1739da6c28aaSamw smb_node_t *fnode; 1740da6c28aaSamw vnode_t *xattrdirvp; 1741da6c28aaSamw vnode_t *vp; 1742da6c28aaSamw char *od_name; 1743da6c28aaSamw char *fname; 1744da6c28aaSamw char *sname; 1745da6c28aaSamw int rc; 1746da6c28aaSamw 1747da6c28aaSamw ASSERT(cr); 1748eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States ASSERT(dnode); 1749eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States ASSERT(dnode->n_magic == SMB_NODE_MAGIC); 1750eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States ASSERT(dnode->n_state != SMB_NODE_STATE_DESTROYING); 1751da6c28aaSamw 1752da6c28aaSamw /* 1753da6c28aaSamw * The following check is required for streams processing, below 1754da6c28aaSamw */ 1755da6c28aaSamw 1756148c5f43SAlan Wright if (!(flags & SMB_CASE_SENSITIVE)) { 1757c8ec8eeaSjose borrego if (SMB_TREE_IS_CASEINSENSITIVE(sr)) 1758da6c28aaSamw flags |= SMB_IGNORE_CASE; 1759148c5f43SAlan Wright } 1760da6c28aaSamw 1761da6c28aaSamw fname = kmem_alloc(MAXNAMELEN, KM_SLEEP); 1762da6c28aaSamw sname = kmem_alloc(MAXNAMELEN, KM_SLEEP); 1763da6c28aaSamw 1764eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States if (smb_is_stream_name(name)) { 1765eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States smb_stream_parse_name(name, fname, sname); 17668d7e4166Sjose borrego 1767da6c28aaSamw /* 1768da6c28aaSamw * Look up the unnamed stream (i.e. fname). 1769da6c28aaSamw * Unmangle processing will be done on fname 1770da6c28aaSamw * as well as any link target. 1771da6c28aaSamw */ 1772037cac00Sjoyce mcintosh rc = smb_fsop_lookup(sr, cr, flags, root_node, dnode, 1773037cac00Sjoyce mcintosh fname, &fnode); 1774da6c28aaSamw 1775da6c28aaSamw if (rc != 0) { 1776da6c28aaSamw kmem_free(fname, MAXNAMELEN); 1777da6c28aaSamw kmem_free(sname, MAXNAMELEN); 1778da6c28aaSamw return (rc); 1779da6c28aaSamw } 1780da6c28aaSamw 1781da6c28aaSamw od_name = kmem_alloc(MAXNAMELEN, KM_SLEEP); 1782da6c28aaSamw 1783da6c28aaSamw /* 1784da6c28aaSamw * od_name is the on-disk name of the stream, except 1785da6c28aaSamw * without the prepended stream prefix (SMB_STREAM_PREFIX) 1786da6c28aaSamw */ 1787da6c28aaSamw 1788da6c28aaSamw /* 1789da6c28aaSamw * XXX 1790da6c28aaSamw * What permissions NTFS requires for stream lookup if any? 1791da6c28aaSamw */ 1792da6c28aaSamw rc = smb_vop_stream_lookup(fnode->vp, sname, &vp, od_name, 1793dc20a302Sas200622 &xattrdirvp, flags, root_node->vp, cr); 1794da6c28aaSamw 1795da6c28aaSamw if (rc != 0) { 1796da6c28aaSamw smb_node_release(fnode); 1797da6c28aaSamw kmem_free(fname, MAXNAMELEN); 1798da6c28aaSamw kmem_free(sname, MAXNAMELEN); 1799da6c28aaSamw kmem_free(od_name, MAXNAMELEN); 1800da6c28aaSamw return (rc); 1801da6c28aaSamw } 1802da6c28aaSamw 1803da6c28aaSamw *ret_snode = smb_stream_node_lookup(sr, cr, fnode, xattrdirvp, 1804037cac00Sjoyce mcintosh vp, od_name); 1805da6c28aaSamw 1806da6c28aaSamw kmem_free(od_name, MAXNAMELEN); 1807da6c28aaSamw smb_node_release(fnode); 1808da6c28aaSamw VN_RELE(xattrdirvp); 1809da6c28aaSamw VN_RELE(vp); 18107f667e74Sjose borrego 18117f667e74Sjose borrego if (*ret_snode == NULL) { 1812da6c28aaSamw kmem_free(fname, MAXNAMELEN); 1813da6c28aaSamw kmem_free(sname, MAXNAMELEN); 1814da6c28aaSamw return (ENOMEM); 1815da6c28aaSamw } 1816da6c28aaSamw } else { 1817eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States rc = smb_fsop_lookup(sr, cr, flags, root_node, dnode, name, 1818037cac00Sjoyce mcintosh ret_snode); 1819da6c28aaSamw } 1820da6c28aaSamw 1821da6c28aaSamw if (rc == 0) { 1822da6c28aaSamw ASSERT(ret_snode); 1823c8ec8eeaSjose borrego if (SMB_TREE_CONTAINS_NODE(sr, *ret_snode) == 0) { 1824da6c28aaSamw smb_node_release(*ret_snode); 1825da6c28aaSamw *ret_snode = NULL; 1826da6c28aaSamw rc = EACCES; 1827da6c28aaSamw } 1828da6c28aaSamw } 1829da6c28aaSamw 1830da6c28aaSamw kmem_free(fname, MAXNAMELEN); 1831da6c28aaSamw kmem_free(sname, MAXNAMELEN); 1832da6c28aaSamw 1833da6c28aaSamw return (rc); 1834da6c28aaSamw } 1835da6c28aaSamw 1836da6c28aaSamw /* 1837da6c28aaSamw * smb_fsop_lookup 1838da6c28aaSamw * 1839da6c28aaSamw * All SMB functions should use this smb_vop_lookup wrapper to ensure that 1840da6c28aaSamw * the smb_vop_lookup is performed with the appropriate credentials and using 1841da6c28aaSamw * case insensitive compares. Please document any direct call to smb_vop_lookup 1842da6c28aaSamw * to explain the reason for avoiding this wrapper. 1843da6c28aaSamw * 1844eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States * It is assumed that a reference exists on dnode coming into this routine 1845da6c28aaSamw * (and that it is safe from deallocation). 1846da6c28aaSamw * 1847da6c28aaSamw * Same with the root_node. 1848da6c28aaSamw * 1849da6c28aaSamw * *ret_snode is returned with a reference upon success. No reference is 1850da6c28aaSamw * taken if an error is returned. 1851da6c28aaSamw * 1852da6c28aaSamw * Note: The returned ret_snode may be in a child mount. This is ok for 18537f667e74Sjose borrego * readdir. 1854da6c28aaSamw * 1855c8ec8eeaSjose borrego * Other smb_fsop_* routines will call SMB_TREE_CONTAINS_NODE() to prevent 1856da6c28aaSamw * operations on files not in the parent mount. 1857bbf6f00cSJordan Brown * 1858bbf6f00cSJordan Brown * Case sensitivity flags (SMB_IGNORE_CASE, SMB_CASE_SENSITIVE): 1859bbf6f00cSJordan Brown * if SMB_CASE_SENSITIVE is set, the SMB_IGNORE_CASE flag will NOT be set 1860bbf6f00cSJordan Brown * based on the tree's case sensitivity. However, if the SMB_IGNORE_CASE 1861bbf6f00cSJordan Brown * flag is set in the flags value passed as a parameter, a case insensitive 1862bbf6f00cSJordan Brown * lookup WILL be done (regardless of whether SMB_CASE_SENSITIVE is set 1863bbf6f00cSJordan Brown * or not). 1864da6c28aaSamw */ 1865da6c28aaSamw int 1866da6c28aaSamw smb_fsop_lookup( 1867faa1795aSjb150015 smb_request_t *sr, 1868da6c28aaSamw cred_t *cr, 1869da6c28aaSamw int flags, 1870da6c28aaSamw smb_node_t *root_node, 1871eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States smb_node_t *dnode, 1872da6c28aaSamw char *name, 1873037cac00Sjoyce mcintosh smb_node_t **ret_snode) 1874da6c28aaSamw { 1875da6c28aaSamw smb_node_t *lnk_target_node; 1876da6c28aaSamw smb_node_t *lnk_dnode; 1877da6c28aaSamw char *longname; 1878da6c28aaSamw char *od_name; 1879da6c28aaSamw vnode_t *vp; 1880da6c28aaSamw int rc; 18818b2cc8acSafshin salek ardakani - Sun Microsystems - Irvine United States int ret_flags; 18829fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States smb_attr_t attr; 1883da6c28aaSamw 1884da6c28aaSamw ASSERT(cr); 1885eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States ASSERT(dnode); 1886eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States ASSERT(dnode->n_magic == SMB_NODE_MAGIC); 1887eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States ASSERT(dnode->n_state != SMB_NODE_STATE_DESTROYING); 1888da6c28aaSamw 1889da6c28aaSamw if (name == NULL) 1890da6c28aaSamw return (EINVAL); 1891da6c28aaSamw 1892eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States if (SMB_TREE_CONTAINS_NODE(sr, dnode) == 0) 1893da6c28aaSamw return (EACCES); 1894da6c28aaSamw 1895bbf6f00cSJordan Brown if (!(flags & SMB_CASE_SENSITIVE)) { 1896c8ec8eeaSjose borrego if (SMB_TREE_IS_CASEINSENSITIVE(sr)) 1897da6c28aaSamw flags |= SMB_IGNORE_CASE; 1898bbf6f00cSJordan Brown } 18998b2cc8acSafshin salek ardakani - Sun Microsystems - Irvine United States if (SMB_TREE_SUPPORTS_CATIA(sr)) 19008b2cc8acSafshin salek ardakani - Sun Microsystems - Irvine United States flags |= SMB_CATIA; 1901e3f2c991SKeyur Desai if (SMB_TREE_SUPPORTS_ABE(sr)) 1902e3f2c991SKeyur Desai flags |= SMB_ABE; 1903da6c28aaSamw 1904d082c877SGordon Ross /* 1905d082c877SGordon Ross * Can have "" or "." when opening named streams on a directory. 1906d082c877SGordon Ross */ 1907d082c877SGordon Ross if (name[0] == '\0' || (name[0] == '.' && name[1] == '\0')) { 1908d082c877SGordon Ross smb_node_ref(dnode); 1909d082c877SGordon Ross *ret_snode = dnode; 1910d082c877SGordon Ross return (0); 1911d082c877SGordon Ross } 1912d082c877SGordon Ross 1913da6c28aaSamw od_name = kmem_alloc(MAXNAMELEN, KM_SLEEP); 1914da6c28aaSamw 1915eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States rc = smb_vop_lookup(dnode->vp, name, &vp, od_name, flags, 19169fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States &ret_flags, root_node ? root_node->vp : NULL, &attr, cr); 1917da6c28aaSamw 1918da6c28aaSamw if (rc != 0) { 1919cb174861Sjoyce mcintosh if (!SMB_TREE_SUPPORTS_SHORTNAMES(sr) || 1920cb174861Sjoyce mcintosh !smb_maybe_mangled(name)) { 1921da6c28aaSamw kmem_free(od_name, MAXNAMELEN); 1922da6c28aaSamw return (rc); 1923da6c28aaSamw } 1924da6c28aaSamw 1925da6c28aaSamw longname = kmem_alloc(MAXNAMELEN, KM_SLEEP); 1926148c5f43SAlan Wright rc = smb_unmangle(dnode, name, longname, MAXNAMELEN, flags); 1927da6c28aaSamw if (rc != 0) { 1928da6c28aaSamw kmem_free(od_name, MAXNAMELEN); 1929da6c28aaSamw kmem_free(longname, MAXNAMELEN); 1930da6c28aaSamw return (rc); 1931da6c28aaSamw } 1932da6c28aaSamw 1933da6c28aaSamw /* 19348b2cc8acSafshin salek ardakani - Sun Microsystems - Irvine United States * longname is the real (case-sensitive) 19358b2cc8acSafshin salek ardakani - Sun Microsystems - Irvine United States * on-disk name. 1936da6c28aaSamw * We make sure we do a lookup on this exact 1937da6c28aaSamw * name, as the name was mangled and denotes 1938da6c28aaSamw * a unique file. 1939da6c28aaSamw */ 1940da6c28aaSamw 1941da6c28aaSamw if (flags & SMB_IGNORE_CASE) 1942da6c28aaSamw flags &= ~SMB_IGNORE_CASE; 1943da6c28aaSamw 1944eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States rc = smb_vop_lookup(dnode->vp, longname, &vp, od_name, 19459fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States flags, &ret_flags, root_node ? root_node->vp : NULL, &attr, 19469fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States cr); 1947da6c28aaSamw 1948da6c28aaSamw kmem_free(longname, MAXNAMELEN); 1949da6c28aaSamw 1950da6c28aaSamw if (rc != 0) { 1951da6c28aaSamw kmem_free(od_name, MAXNAMELEN); 1952da6c28aaSamw return (rc); 1953da6c28aaSamw } 1954da6c28aaSamw } 1955da6c28aaSamw 19569fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States if ((flags & SMB_FOLLOW_LINKS) && (vp->v_type == VLNK) && 19579fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States ((attr.sa_dosattr & FILE_ATTRIBUTE_REPARSE_POINT) == 0)) { 1958eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States rc = smb_pathname(sr, od_name, FOLLOW, root_node, dnode, 1959da6c28aaSamw &lnk_dnode, &lnk_target_node, cr); 1960da6c28aaSamw 1961da6c28aaSamw if (rc != 0) { 1962da6c28aaSamw /* 1963da6c28aaSamw * The link is assumed to be for the last component 1964da6c28aaSamw * of a path. Hence any ENOTDIR error will be returned 1965da6c28aaSamw * as ENOENT. 1966da6c28aaSamw */ 1967da6c28aaSamw if (rc == ENOTDIR) 1968da6c28aaSamw rc = ENOENT; 1969da6c28aaSamw 1970da6c28aaSamw VN_RELE(vp); 1971da6c28aaSamw kmem_free(od_name, MAXNAMELEN); 1972da6c28aaSamw return (rc); 1973da6c28aaSamw } 1974da6c28aaSamw 1975da6c28aaSamw /* 1976da6c28aaSamw * Release the original VLNK vnode 1977da6c28aaSamw */ 1978da6c28aaSamw 1979da6c28aaSamw VN_RELE(vp); 1980da6c28aaSamw vp = lnk_target_node->vp; 1981da6c28aaSamw 1982da6c28aaSamw rc = smb_vop_traverse_check(&vp); 1983da6c28aaSamw 1984da6c28aaSamw if (rc != 0) { 1985da6c28aaSamw smb_node_release(lnk_dnode); 1986da6c28aaSamw smb_node_release(lnk_target_node); 1987da6c28aaSamw kmem_free(od_name, MAXNAMELEN); 1988da6c28aaSamw return (rc); 1989da6c28aaSamw } 1990da6c28aaSamw 1991da6c28aaSamw /* 1992da6c28aaSamw * smb_vop_traverse_check() may have returned a different vnode 1993da6c28aaSamw */ 1994da6c28aaSamw 1995da6c28aaSamw if (lnk_target_node->vp == vp) { 1996da6c28aaSamw *ret_snode = lnk_target_node; 1997da6c28aaSamw } else { 1998da6c28aaSamw *ret_snode = smb_node_lookup(sr, NULL, cr, vp, 1999037cac00Sjoyce mcintosh lnk_target_node->od_name, lnk_dnode, NULL); 2000da6c28aaSamw VN_RELE(vp); 20017f667e74Sjose borrego 20027f667e74Sjose borrego if (*ret_snode == NULL) 2003da6c28aaSamw rc = ENOMEM; 2004da6c28aaSamw smb_node_release(lnk_target_node); 2005da6c28aaSamw } 2006da6c28aaSamw 2007da6c28aaSamw smb_node_release(lnk_dnode); 2008da6c28aaSamw 2009da6c28aaSamw } else { 2010da6c28aaSamw 2011da6c28aaSamw rc = smb_vop_traverse_check(&vp); 2012da6c28aaSamw if (rc) { 2013da6c28aaSamw VN_RELE(vp); 2014da6c28aaSamw kmem_free(od_name, MAXNAMELEN); 2015da6c28aaSamw return (rc); 2016da6c28aaSamw } 2017da6c28aaSamw 2018da6c28aaSamw *ret_snode = smb_node_lookup(sr, NULL, cr, vp, od_name, 2019037cac00Sjoyce mcintosh dnode, NULL); 2020da6c28aaSamw VN_RELE(vp); 20217f667e74Sjose borrego 20227f667e74Sjose borrego if (*ret_snode == NULL) 2023da6c28aaSamw rc = ENOMEM; 2024da6c28aaSamw } 2025da6c28aaSamw 2026da6c28aaSamw kmem_free(od_name, MAXNAMELEN); 2027da6c28aaSamw return (rc); 2028da6c28aaSamw } 2029da6c28aaSamw 2030da6c28aaSamw int /*ARGSUSED*/ 2031da6c28aaSamw smb_fsop_commit(smb_request_t *sr, cred_t *cr, smb_node_t *snode) 2032da6c28aaSamw { 2033da6c28aaSamw ASSERT(cr); 2034da6c28aaSamw ASSERT(snode); 2035da6c28aaSamw ASSERT(snode->n_magic == SMB_NODE_MAGIC); 2036da6c28aaSamw ASSERT(snode->n_state != SMB_NODE_STATE_DESTROYING); 2037da6c28aaSamw 2038da6c28aaSamw ASSERT(sr); 2039da6c28aaSamw ASSERT(sr->tid_tree); 2040c8ec8eeaSjose borrego if (SMB_TREE_IS_READONLY(sr)) 2041da6c28aaSamw return (EROFS); 2042da6c28aaSamw 2043dc20a302Sas200622 return (smb_vop_commit(snode->vp, cr)); 2044da6c28aaSamw } 2045da6c28aaSamw 2046da6c28aaSamw /* 2047da6c28aaSamw * smb_fsop_aclread 2048da6c28aaSamw * 2049da6c28aaSamw * Retrieve filesystem ACL. Depends on requested ACLs in 2050da6c28aaSamw * fs_sd->sd_secinfo, it'll set DACL and SACL pointers in 2051da6c28aaSamw * fs_sd. Note that requesting a DACL/SACL doesn't mean that 2052da6c28aaSamw * the corresponding field in fs_sd should be non-NULL upon 2053da6c28aaSamw * return, since the target ACL might not contain that type of 2054da6c28aaSamw * entries. 2055da6c28aaSamw * 2056da6c28aaSamw * Returned ACL is always in ACE_T (aka ZFS) format. 2057da6c28aaSamw * If successful the allocated memory for the ACL should be freed 205855bf511dSas200622 * using smb_fsacl_free() or smb_fssd_term() 2059da6c28aaSamw */ 2060da6c28aaSamw int 2061da6c28aaSamw smb_fsop_aclread(smb_request_t *sr, cred_t *cr, smb_node_t *snode, 2062da6c28aaSamw smb_fssd_t *fs_sd) 2063da6c28aaSamw { 2064da6c28aaSamw int error = 0; 2065da6c28aaSamw int flags = 0; 2066da6c28aaSamw int access = 0; 2067da6c28aaSamw acl_t *acl; 2068da6c28aaSamw 2069da6c28aaSamw ASSERT(cr); 2070da6c28aaSamw 2071245d1332SMatt Barden /* Can't query security on named streams */ 2072245d1332SMatt Barden if (SMB_IS_STREAM(snode) != NULL) 2073245d1332SMatt Barden return (EINVAL); 2074245d1332SMatt Barden 2075743a77edSAlan Wright if (SMB_TREE_HAS_ACCESS(sr, ACE_READ_ACL) == 0) 2076743a77edSAlan Wright return (EACCES); 2077743a77edSAlan Wright 2078da6c28aaSamw if (sr->fid_ofile) { 2079da6c28aaSamw if (fs_sd->sd_secinfo & SMB_DACL_SECINFO) 2080da6c28aaSamw access = READ_CONTROL; 2081da6c28aaSamw 2082da6c28aaSamw if (fs_sd->sd_secinfo & SMB_SACL_SECINFO) 2083da6c28aaSamw access |= ACCESS_SYSTEM_SECURITY; 2084da6c28aaSamw 2085da6c28aaSamw error = smb_ofile_access(sr->fid_ofile, cr, access); 2086da6c28aaSamw if (error != NT_STATUS_SUCCESS) { 2087da6c28aaSamw return (EACCES); 2088da6c28aaSamw } 2089da6c28aaSamw } 2090da6c28aaSamw 2091da6c28aaSamw 2092c8ec8eeaSjose borrego if (smb_tree_has_feature(sr->tid_tree, SMB_TREE_ACEMASKONACCESS)) 2093da6c28aaSamw flags = ATTR_NOACLCHECK; 2094da6c28aaSamw 2095da6c28aaSamw error = smb_vop_acl_read(snode->vp, &acl, flags, 2096dc20a302Sas200622 sr->tid_tree->t_acltype, cr); 2097da6c28aaSamw if (error != 0) { 2098da6c28aaSamw return (error); 2099da6c28aaSamw } 2100da6c28aaSamw 2101da6c28aaSamw error = acl_translate(acl, _ACL_ACE_ENABLED, 21029fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States smb_node_is_dir(snode), fs_sd->sd_uid, fs_sd->sd_gid); 2103da6c28aaSamw 2104da6c28aaSamw if (error == 0) { 210555bf511dSas200622 smb_fsacl_split(acl, &fs_sd->sd_zdacl, &fs_sd->sd_zsacl, 2106da6c28aaSamw fs_sd->sd_secinfo); 2107da6c28aaSamw } 2108da6c28aaSamw 2109da6c28aaSamw acl_free(acl); 2110da6c28aaSamw return (error); 2111da6c28aaSamw } 2112da6c28aaSamw 2113da6c28aaSamw /* 2114da6c28aaSamw * smb_fsop_aclwrite 2115da6c28aaSamw * 2116da6c28aaSamw * Stores the filesystem ACL provided in fs_sd->sd_acl. 2117da6c28aaSamw */ 2118da6c28aaSamw int 2119da6c28aaSamw smb_fsop_aclwrite(smb_request_t *sr, cred_t *cr, smb_node_t *snode, 2120da6c28aaSamw smb_fssd_t *fs_sd) 2121da6c28aaSamw { 2122da6c28aaSamw int target_flavor; 2123da6c28aaSamw int error = 0; 2124da6c28aaSamw int flags = 0; 2125da6c28aaSamw int access = 0; 2126da6c28aaSamw acl_t *acl, *dacl, *sacl; 2127da6c28aaSamw 2128da6c28aaSamw ASSERT(cr); 2129da6c28aaSamw 2130da6c28aaSamw ASSERT(sr); 2131da6c28aaSamw ASSERT(sr->tid_tree); 2132c8ec8eeaSjose borrego if (SMB_TREE_IS_READONLY(sr)) 2133da6c28aaSamw return (EROFS); 2134da6c28aaSamw 2135245d1332SMatt Barden /* Can't set security on named streams */ 2136245d1332SMatt Barden if (SMB_IS_STREAM(snode) != NULL) 2137245d1332SMatt Barden return (EINVAL); 2138245d1332SMatt Barden 2139743a77edSAlan Wright if (SMB_TREE_HAS_ACCESS(sr, ACE_WRITE_ACL) == 0) 2140743a77edSAlan Wright return (EACCES); 2141743a77edSAlan Wright 2142da6c28aaSamw if (sr->fid_ofile) { 2143da6c28aaSamw if (fs_sd->sd_secinfo & SMB_DACL_SECINFO) 2144da6c28aaSamw access = WRITE_DAC; 2145da6c28aaSamw 2146da6c28aaSamw if (fs_sd->sd_secinfo & SMB_SACL_SECINFO) 2147da6c28aaSamw access |= ACCESS_SYSTEM_SECURITY; 2148da6c28aaSamw 2149da6c28aaSamw error = smb_ofile_access(sr->fid_ofile, cr, access); 2150da6c28aaSamw if (error != NT_STATUS_SUCCESS) 2151da6c28aaSamw return (EACCES); 2152da6c28aaSamw } 2153da6c28aaSamw 2154da6c28aaSamw switch (sr->tid_tree->t_acltype) { 2155da6c28aaSamw case ACLENT_T: 2156da6c28aaSamw target_flavor = _ACL_ACLENT_ENABLED; 2157da6c28aaSamw break; 2158da6c28aaSamw 2159da6c28aaSamw case ACE_T: 2160da6c28aaSamw target_flavor = _ACL_ACE_ENABLED; 2161da6c28aaSamw break; 2162da6c28aaSamw default: 2163da6c28aaSamw return (EINVAL); 2164da6c28aaSamw } 2165da6c28aaSamw 2166da6c28aaSamw dacl = fs_sd->sd_zdacl; 2167da6c28aaSamw sacl = fs_sd->sd_zsacl; 2168da6c28aaSamw 2169da6c28aaSamw ASSERT(dacl || sacl); 2170da6c28aaSamw if ((dacl == NULL) && (sacl == NULL)) 2171da6c28aaSamw return (EINVAL); 2172da6c28aaSamw 2173da6c28aaSamw if (dacl && sacl) 217455bf511dSas200622 acl = smb_fsacl_merge(dacl, sacl); 2175da6c28aaSamw else if (dacl) 2176da6c28aaSamw acl = dacl; 2177da6c28aaSamw else 2178da6c28aaSamw acl = sacl; 2179da6c28aaSamw 21809fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States error = acl_translate(acl, target_flavor, smb_node_is_dir(snode), 2181da6c28aaSamw fs_sd->sd_uid, fs_sd->sd_gid); 2182da6c28aaSamw if (error == 0) { 2183c8ec8eeaSjose borrego if (smb_tree_has_feature(sr->tid_tree, 2184c8ec8eeaSjose borrego SMB_TREE_ACEMASKONACCESS)) 2185da6c28aaSamw flags = ATTR_NOACLCHECK; 2186da6c28aaSamw 2187dc20a302Sas200622 error = smb_vop_acl_write(snode->vp, acl, flags, cr); 2188da6c28aaSamw } 2189da6c28aaSamw 2190da6c28aaSamw if (dacl && sacl) 2191da6c28aaSamw acl_free(acl); 2192da6c28aaSamw 2193da6c28aaSamw return (error); 2194da6c28aaSamw } 2195da6c28aaSamw 2196da6c28aaSamw acl_type_t 2197da6c28aaSamw smb_fsop_acltype(smb_node_t *snode) 2198da6c28aaSamw { 2199da6c28aaSamw return (smb_vop_acl_type(snode->vp)); 2200da6c28aaSamw } 2201da6c28aaSamw 2202da6c28aaSamw /* 2203da6c28aaSamw * smb_fsop_sdread 2204da6c28aaSamw * 2205da6c28aaSamw * Read the requested security descriptor items from filesystem. 2206da6c28aaSamw * The items are specified in fs_sd->sd_secinfo. 2207da6c28aaSamw */ 2208da6c28aaSamw int 2209da6c28aaSamw smb_fsop_sdread(smb_request_t *sr, cred_t *cr, smb_node_t *snode, 2210da6c28aaSamw smb_fssd_t *fs_sd) 2211da6c28aaSamw { 2212da6c28aaSamw int error = 0; 2213da6c28aaSamw int getowner = 0; 2214da6c28aaSamw cred_t *ga_cred; 2215da6c28aaSamw smb_attr_t attr; 2216da6c28aaSamw 2217da6c28aaSamw ASSERT(cr); 2218da6c28aaSamw ASSERT(fs_sd); 2219da6c28aaSamw 2220245d1332SMatt Barden /* Can't query security on named streams */ 2221245d1332SMatt Barden if (SMB_IS_STREAM(snode) != NULL) 2222245d1332SMatt Barden return (EINVAL); 2223245d1332SMatt Barden 2224da6c28aaSamw /* 2225da6c28aaSamw * File's uid/gid is fetched in two cases: 2226da6c28aaSamw * 2227da6c28aaSamw * 1. it's explicitly requested 2228da6c28aaSamw * 2229da6c28aaSamw * 2. target ACL is ACE_T (ZFS ACL). They're needed for 2230da6c28aaSamw * owner@/group@ entries. In this case kcred should be used 2231da6c28aaSamw * because uid/gid are fetched on behalf of smb server. 2232da6c28aaSamw */ 2233da6c28aaSamw if (fs_sd->sd_secinfo & (SMB_OWNER_SECINFO | SMB_GROUP_SECINFO)) { 2234da6c28aaSamw getowner = 1; 2235da6c28aaSamw ga_cred = cr; 2236da6c28aaSamw } else if (sr->tid_tree->t_acltype == ACE_T) { 2237da6c28aaSamw getowner = 1; 22388622ec45SGordon Ross ga_cred = zone_kcred(); 2239da6c28aaSamw } 2240da6c28aaSamw 2241da6c28aaSamw if (getowner) { 2242da6c28aaSamw /* 2243da6c28aaSamw * Windows require READ_CONTROL to read owner/group SID since 2244da6c28aaSamw * they're part of Security Descriptor. 2245da6c28aaSamw * ZFS only requires read_attribute. Need to have a explicit 2246da6c28aaSamw * access check here. 2247da6c28aaSamw */ 2248da6c28aaSamw if (sr->fid_ofile == NULL) { 2249da6c28aaSamw error = smb_fsop_access(sr, ga_cred, snode, 2250da6c28aaSamw READ_CONTROL); 2251da6c28aaSamw if (error) 2252b1352070SAlan Wright return (EACCES); 2253da6c28aaSamw } 2254da6c28aaSamw 2255da6c28aaSamw attr.sa_mask = SMB_AT_UID | SMB_AT_GID; 2256da6c28aaSamw error = smb_fsop_getattr(sr, ga_cred, snode, &attr); 2257da6c28aaSamw if (error == 0) { 2258da6c28aaSamw fs_sd->sd_uid = attr.sa_vattr.va_uid; 2259da6c28aaSamw fs_sd->sd_gid = attr.sa_vattr.va_gid; 2260da6c28aaSamw } else { 2261da6c28aaSamw return (error); 2262da6c28aaSamw } 2263da6c28aaSamw } 2264da6c28aaSamw 2265da6c28aaSamw if (fs_sd->sd_secinfo & SMB_ACL_SECINFO) { 2266da6c28aaSamw error = smb_fsop_aclread(sr, cr, snode, fs_sd); 2267da6c28aaSamw } 2268da6c28aaSamw 2269da6c28aaSamw return (error); 2270da6c28aaSamw } 2271da6c28aaSamw 2272da6c28aaSamw /* 2273da6c28aaSamw * smb_fsop_sdmerge 2274da6c28aaSamw * 2275da6c28aaSamw * From SMB point of view DACL and SACL are two separate list 2276da6c28aaSamw * which can be manipulated independently without one affecting 2277da6c28aaSamw * the other, but entries for both DACL and SACL will end up 2278da6c28aaSamw * in the same ACL if target filesystem supports ACE_T ACLs. 2279da6c28aaSamw * 2280da6c28aaSamw * So, if either DACL or SACL is present in the client set request 2281da6c28aaSamw * the entries corresponding to the non-present ACL shouldn't 2282da6c28aaSamw * be touched in the FS ACL. 2283da6c28aaSamw * 2284da6c28aaSamw * fs_sd parameter contains DACL and SACL specified by SMB 2285da6c28aaSamw * client to be set on a file/directory. The client could 2286da6c28aaSamw * specify both or one of these ACLs (if none is specified 2287da6c28aaSamw * we don't get this far). When both DACL and SACL are given 2288da6c28aaSamw * by client the existing ACL should be overwritten. If only 2289da6c28aaSamw * one of them is specified the entries corresponding to the other 2290da6c28aaSamw * ACL should not be touched. For example, if only DACL 2291da6c28aaSamw * is specified in input fs_sd, the function reads audit entries 2292da6c28aaSamw * of the existing ACL of the file and point fs_sd->sd_zsdacl 2293da6c28aaSamw * pointer to the fetched SACL, this way when smb_fsop_sdwrite() 2294da6c28aaSamw * function is called the passed fs_sd would point to the specified 2295da6c28aaSamw * DACL by client and fetched SACL from filesystem, so the file 2296da6c28aaSamw * will end up with correct ACL. 2297da6c28aaSamw */ 2298da6c28aaSamw static int 2299da6c28aaSamw smb_fsop_sdmerge(smb_request_t *sr, smb_node_t *snode, smb_fssd_t *fs_sd) 2300da6c28aaSamw { 2301da6c28aaSamw smb_fssd_t cur_sd; 23028622ec45SGordon Ross cred_t *kcr = zone_kcred(); 2303da6c28aaSamw int error = 0; 2304da6c28aaSamw 2305da6c28aaSamw if (sr->tid_tree->t_acltype != ACE_T) 2306da6c28aaSamw /* Don't bother if target FS doesn't support ACE_T */ 2307da6c28aaSamw return (0); 2308da6c28aaSamw 2309da6c28aaSamw if ((fs_sd->sd_secinfo & SMB_ACL_SECINFO) != SMB_ACL_SECINFO) { 2310da6c28aaSamw if (fs_sd->sd_secinfo & SMB_DACL_SECINFO) { 2311da6c28aaSamw /* 2312da6c28aaSamw * Don't overwrite existing audit entries 2313da6c28aaSamw */ 231455bf511dSas200622 smb_fssd_init(&cur_sd, SMB_SACL_SECINFO, 2315da6c28aaSamw fs_sd->sd_flags); 2316da6c28aaSamw 23178622ec45SGordon Ross error = smb_fsop_sdread(sr, kcr, snode, &cur_sd); 2318da6c28aaSamw if (error == 0) { 2319da6c28aaSamw ASSERT(fs_sd->sd_zsacl == NULL); 2320da6c28aaSamw fs_sd->sd_zsacl = cur_sd.sd_zsacl; 2321da6c28aaSamw if (fs_sd->sd_zsacl && fs_sd->sd_zdacl) 2322da6c28aaSamw fs_sd->sd_zsacl->acl_flags = 2323da6c28aaSamw fs_sd->sd_zdacl->acl_flags; 2324da6c28aaSamw } 2325da6c28aaSamw } else { 2326da6c28aaSamw /* 2327da6c28aaSamw * Don't overwrite existing access entries 2328da6c28aaSamw */ 232955bf511dSas200622 smb_fssd_init(&cur_sd, SMB_DACL_SECINFO, 2330da6c28aaSamw fs_sd->sd_flags); 2331da6c28aaSamw 23328622ec45SGordon Ross error = smb_fsop_sdread(sr, kcr, snode, &cur_sd); 2333da6c28aaSamw if (error == 0) { 2334da6c28aaSamw ASSERT(fs_sd->sd_zdacl == NULL); 2335da6c28aaSamw fs_sd->sd_zdacl = cur_sd.sd_zdacl; 2336da6c28aaSamw if (fs_sd->sd_zdacl && fs_sd->sd_zsacl) 2337da6c28aaSamw fs_sd->sd_zdacl->acl_flags = 2338da6c28aaSamw fs_sd->sd_zsacl->acl_flags; 2339da6c28aaSamw } 2340da6c28aaSamw } 2341da6c28aaSamw 2342da6c28aaSamw if (error) 234355bf511dSas200622 smb_fssd_term(&cur_sd); 2344da6c28aaSamw } 2345da6c28aaSamw 2346da6c28aaSamw return (error); 2347da6c28aaSamw } 2348da6c28aaSamw 2349da6c28aaSamw /* 2350da6c28aaSamw * smb_fsop_sdwrite 2351da6c28aaSamw * 2352da6c28aaSamw * Stores the given uid, gid and acl in filesystem. 2353da6c28aaSamw * Provided items in fs_sd are specified by fs_sd->sd_secinfo. 2354da6c28aaSamw * 2355da6c28aaSamw * A SMB security descriptor could contain owner, primary group, 2356da6c28aaSamw * DACL and SACL. Setting an SD should be atomic but here it has to 2357da6c28aaSamw * be done via two separate FS operations: VOP_SETATTR and 2358da6c28aaSamw * VOP_SETSECATTR. Therefore, this function has to simulate the 2359da6c28aaSamw * atomicity as well as it can. 23602c1b14e5Sjose borrego * 23612c1b14e5Sjose borrego * Get the current uid, gid before setting the new uid/gid 23622c1b14e5Sjose borrego * so if smb_fsop_aclwrite fails they can be restored. root cred is 23632c1b14e5Sjose borrego * used to get currend uid/gid since this operation is performed on 23642c1b14e5Sjose borrego * behalf of the server not the user. 23652c1b14e5Sjose borrego * 23662c1b14e5Sjose borrego * If setting uid/gid fails with EPERM it means that and invalid 23672c1b14e5Sjose borrego * owner has been specified. Callers should translate this to 23682c1b14e5Sjose borrego * STATUS_INVALID_OWNER which is not the normal mapping for EPERM 23692c1b14e5Sjose borrego * in upper layers, so EPERM is mapped to EBADE. 2370da6c28aaSamw */ 2371da6c28aaSamw int 2372da6c28aaSamw smb_fsop_sdwrite(smb_request_t *sr, cred_t *cr, smb_node_t *snode, 2373da6c28aaSamw smb_fssd_t *fs_sd, int overwrite) 2374da6c28aaSamw { 2375da6c28aaSamw smb_attr_t set_attr; 2376da6c28aaSamw smb_attr_t orig_attr; 23778622ec45SGordon Ross cred_t *kcr = zone_kcred(); 23788622ec45SGordon Ross int error = 0; 23798622ec45SGordon Ross int access = 0; 2380da6c28aaSamw 2381da6c28aaSamw ASSERT(cr); 2382da6c28aaSamw ASSERT(fs_sd); 2383da6c28aaSamw 2384da6c28aaSamw ASSERT(sr); 2385da6c28aaSamw ASSERT(sr->tid_tree); 2386c8ec8eeaSjose borrego if (SMB_TREE_IS_READONLY(sr)) 2387da6c28aaSamw return (EROFS); 2388da6c28aaSamw 2389245d1332SMatt Barden /* Can't set security on named streams */ 2390245d1332SMatt Barden if (SMB_IS_STREAM(snode) != NULL) 2391245d1332SMatt Barden return (EINVAL); 2392245d1332SMatt Barden 2393da6c28aaSamw bzero(&set_attr, sizeof (smb_attr_t)); 2394da6c28aaSamw 2395da6c28aaSamw if (fs_sd->sd_secinfo & SMB_OWNER_SECINFO) { 2396da6c28aaSamw set_attr.sa_vattr.va_uid = fs_sd->sd_uid; 2397da6c28aaSamw set_attr.sa_mask |= SMB_AT_UID; 23982c1b14e5Sjose borrego access |= WRITE_OWNER; 2399da6c28aaSamw } 2400da6c28aaSamw 2401da6c28aaSamw if (fs_sd->sd_secinfo & SMB_GROUP_SECINFO) { 2402da6c28aaSamw set_attr.sa_vattr.va_gid = fs_sd->sd_gid; 2403da6c28aaSamw set_attr.sa_mask |= SMB_AT_GID; 24042c1b14e5Sjose borrego access |= WRITE_OWNER; 2405da6c28aaSamw } 2406da6c28aaSamw 2407da6c28aaSamw if (fs_sd->sd_secinfo & SMB_DACL_SECINFO) 2408da6c28aaSamw access |= WRITE_DAC; 2409da6c28aaSamw 2410da6c28aaSamw if (fs_sd->sd_secinfo & SMB_SACL_SECINFO) 2411da6c28aaSamw access |= ACCESS_SYSTEM_SECURITY; 2412da6c28aaSamw 2413da6c28aaSamw if (sr->fid_ofile) 2414da6c28aaSamw error = smb_ofile_access(sr->fid_ofile, cr, access); 2415da6c28aaSamw else 2416da6c28aaSamw error = smb_fsop_access(sr, cr, snode, access); 2417da6c28aaSamw 2418da6c28aaSamw if (error) 2419da6c28aaSamw return (EACCES); 2420da6c28aaSamw 2421da6c28aaSamw if (set_attr.sa_mask) { 2422da6c28aaSamw orig_attr.sa_mask = SMB_AT_UID | SMB_AT_GID; 24238622ec45SGordon Ross error = smb_fsop_getattr(sr, kcr, snode, &orig_attr); 24242c1b14e5Sjose borrego if (error == 0) { 2425037cac00Sjoyce mcintosh error = smb_fsop_setattr(sr, cr, snode, &set_attr); 24262c1b14e5Sjose borrego if (error == EPERM) 24272c1b14e5Sjose borrego error = EBADE; 24282c1b14e5Sjose borrego } 2429da6c28aaSamw 2430da6c28aaSamw if (error) 2431da6c28aaSamw return (error); 2432da6c28aaSamw } 2433da6c28aaSamw 2434da6c28aaSamw if (fs_sd->sd_secinfo & SMB_ACL_SECINFO) { 2435da6c28aaSamw if (overwrite == 0) { 2436da6c28aaSamw error = smb_fsop_sdmerge(sr, snode, fs_sd); 2437da6c28aaSamw if (error) 2438da6c28aaSamw return (error); 2439da6c28aaSamw } 2440da6c28aaSamw 2441da6c28aaSamw error = smb_fsop_aclwrite(sr, cr, snode, fs_sd); 2442da6c28aaSamw if (error) { 2443da6c28aaSamw /* 2444da6c28aaSamw * Revert uid/gid changes if required. 2445da6c28aaSamw */ 2446da6c28aaSamw if (set_attr.sa_mask) { 2447da6c28aaSamw orig_attr.sa_mask = set_attr.sa_mask; 24488622ec45SGordon Ross (void) smb_fsop_setattr(sr, kcr, snode, 2449037cac00Sjoyce mcintosh &orig_attr); 2450da6c28aaSamw } 2451da6c28aaSamw } 2452da6c28aaSamw } 2453da6c28aaSamw 2454da6c28aaSamw return (error); 2455da6c28aaSamw } 2456da6c28aaSamw 2457b819cea2SGordon Ross #ifdef _KERNEL 2458da6c28aaSamw /* 2459da6c28aaSamw * smb_fsop_sdinherit 2460da6c28aaSamw * 2461da6c28aaSamw * Inherit the security descriptor from the parent container. 2462da6c28aaSamw * This function is called after FS has created the file/folder 2463da6c28aaSamw * so if this doesn't do anything it means FS inheritance is 2464da6c28aaSamw * in place. 2465da6c28aaSamw * 2466da6c28aaSamw * Do inheritance for ZFS internally. 2467da6c28aaSamw * 2468da6c28aaSamw * If we want to let ZFS does the inheritance the 2469da6c28aaSamw * following setting should be true: 2470da6c28aaSamw * 2471da6c28aaSamw * - aclinherit = passthrough 2472da6c28aaSamw * - aclmode = passthrough 2473da6c28aaSamw * - smbd umask = 0777 2474da6c28aaSamw * 2475da6c28aaSamw * This will result in right effective permissions but 2476da6c28aaSamw * ZFS will always add 6 ACEs for owner, owning group 2477da6c28aaSamw * and others to be POSIX compliant. This is not what 2478da6c28aaSamw * Windows clients/users expect, so we decided that CIFS 2479da6c28aaSamw * implements Windows rules and overwrite whatever ZFS 2480da6c28aaSamw * comes up with. This way we also don't have to care 2481da6c28aaSamw * about ZFS aclinherit and aclmode settings. 2482da6c28aaSamw */ 2483da6c28aaSamw static int 2484da6c28aaSamw smb_fsop_sdinherit(smb_request_t *sr, smb_node_t *dnode, smb_fssd_t *fs_sd) 2485da6c28aaSamw { 248655bf511dSas200622 acl_t *dacl = NULL; 248755bf511dSas200622 acl_t *sacl = NULL; 24889fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States int is_dir; 2489da6c28aaSamw int error; 2490da6c28aaSamw 2491da6c28aaSamw ASSERT(fs_sd); 2492da6c28aaSamw 2493da6c28aaSamw if (sr->tid_tree->t_acltype != ACE_T) { 2494da6c28aaSamw /* 2495da6c28aaSamw * No forced inheritance for non-ZFS filesystems. 2496da6c28aaSamw */ 2497da6c28aaSamw fs_sd->sd_secinfo = 0; 2498da6c28aaSamw return (0); 2499da6c28aaSamw } 2500da6c28aaSamw 2501da6c28aaSamw 2502da6c28aaSamw /* Fetch parent directory's ACL */ 25038622ec45SGordon Ross error = smb_fsop_sdread(sr, zone_kcred(), dnode, fs_sd); 2504da6c28aaSamw if (error) { 2505da6c28aaSamw return (error); 2506da6c28aaSamw } 2507da6c28aaSamw 2508da6c28aaSamw is_dir = (fs_sd->sd_flags & SMB_FSSD_FLAGS_DIR); 250955bf511dSas200622 dacl = smb_fsacl_inherit(fs_sd->sd_zdacl, is_dir, SMB_DACL_SECINFO, 25109fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States sr->user_cr); 251155bf511dSas200622 sacl = smb_fsacl_inherit(fs_sd->sd_zsacl, is_dir, SMB_SACL_SECINFO, 25129fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States sr->user_cr); 2513da6c28aaSamw 251455bf511dSas200622 if (sacl == NULL) 251555bf511dSas200622 fs_sd->sd_secinfo &= ~SMB_SACL_SECINFO; 251655bf511dSas200622 251755bf511dSas200622 smb_fsacl_free(fs_sd->sd_zdacl); 251855bf511dSas200622 smb_fsacl_free(fs_sd->sd_zsacl); 2519da6c28aaSamw 2520da6c28aaSamw fs_sd->sd_zdacl = dacl; 2521da6c28aaSamw fs_sd->sd_zsacl = sacl; 2522da6c28aaSamw 2523da6c28aaSamw return (0); 2524da6c28aaSamw } 2525b819cea2SGordon Ross #endif /* _KERNEL */ 2526da6c28aaSamw 2527da6c28aaSamw /* 2528da6c28aaSamw * smb_fsop_eaccess 2529da6c28aaSamw * 2530da6c28aaSamw * Returns the effective permission of the given credential for the 2531da6c28aaSamw * specified object. 2532da6c28aaSamw * 2533da6c28aaSamw * This is just a workaround. We need VFS/FS support for this. 2534da6c28aaSamw */ 2535da6c28aaSamw void 2536da6c28aaSamw smb_fsop_eaccess(smb_request_t *sr, cred_t *cr, smb_node_t *snode, 2537da6c28aaSamw uint32_t *eaccess) 2538da6c28aaSamw { 2539da6c28aaSamw int access = 0; 2540da6c28aaSamw vnode_t *dir_vp; 2541da6c28aaSamw smb_node_t *unnamed_node; 2542da6c28aaSamw 2543da6c28aaSamw ASSERT(cr); 2544da6c28aaSamw ASSERT(snode); 2545da6c28aaSamw ASSERT(snode->n_magic == SMB_NODE_MAGIC); 2546da6c28aaSamw ASSERT(snode->n_state != SMB_NODE_STATE_DESTROYING); 2547da6c28aaSamw 2548da6c28aaSamw unnamed_node = SMB_IS_STREAM(snode); 2549da6c28aaSamw if (unnamed_node) { 2550da6c28aaSamw ASSERT(unnamed_node->n_magic == SMB_NODE_MAGIC); 2551da6c28aaSamw ASSERT(unnamed_node->n_state != SMB_NODE_STATE_DESTROYING); 2552da6c28aaSamw /* 2553da6c28aaSamw * Streams authorization should be performed against the 2554da6c28aaSamw * unnamed stream. 2555da6c28aaSamw */ 2556da6c28aaSamw snode = unnamed_node; 2557da6c28aaSamw } 2558da6c28aaSamw 2559c8ec8eeaSjose borrego if (smb_tree_has_feature(sr->tid_tree, SMB_TREE_ACEMASKONACCESS)) { 25601fcced4cSJordan Brown dir_vp = (snode->n_dnode) ? snode->n_dnode->vp : NULL; 2561da6c28aaSamw smb_vop_eaccess(snode->vp, (int *)eaccess, V_ACE_MASK, dir_vp, 2562da6c28aaSamw cr); 2563da6c28aaSamw return; 2564da6c28aaSamw } 2565da6c28aaSamw 2566da6c28aaSamw /* 2567da6c28aaSamw * FS doesn't understand 32-bit mask 2568da6c28aaSamw */ 2569da6c28aaSamw smb_vop_eaccess(snode->vp, &access, 0, NULL, cr); 2570743a77edSAlan Wright access &= sr->tid_tree->t_access; 2571da6c28aaSamw 2572da6c28aaSamw *eaccess = READ_CONTROL | FILE_READ_EA | FILE_READ_ATTRIBUTES; 2573da6c28aaSamw 2574da6c28aaSamw if (access & VREAD) 2575da6c28aaSamw *eaccess |= FILE_READ_DATA; 2576da6c28aaSamw 2577da6c28aaSamw if (access & VEXEC) 2578da6c28aaSamw *eaccess |= FILE_EXECUTE; 2579da6c28aaSamw 2580da6c28aaSamw if (access & VWRITE) 2581da6c28aaSamw *eaccess |= FILE_WRITE_DATA | FILE_WRITE_ATTRIBUTES | 2582da6c28aaSamw FILE_WRITE_EA | FILE_APPEND_DATA | FILE_DELETE_CHILD; 2583d2488fe8SGordon Ross 2584d2488fe8SGordon Ross if (access & (VREAD | VWRITE)) 2585d2488fe8SGordon Ross *eaccess |= SYNCHRONIZE; 2586d2488fe8SGordon Ross 2587d2488fe8SGordon Ross #ifdef _FAKE_KERNEL 2588d2488fe8SGordon Ross /* Should be: if (we are the owner)... */ 2589d2488fe8SGordon Ross if (access & VWRITE) 2590d2488fe8SGordon Ross *eaccess |= DELETE | WRITE_DAC | WRITE_OWNER; 2591d2488fe8SGordon Ross #endif 2592da6c28aaSamw } 259355bf511dSas200622 2594dc20a302Sas200622 /* 2595dc20a302Sas200622 * smb_fsop_shrlock 2596dc20a302Sas200622 * 2597dc20a302Sas200622 * For the current open request, check file sharing rules 2598dc20a302Sas200622 * against existing opens. 2599dc20a302Sas200622 * 2600dc20a302Sas200622 * Returns NT_STATUS_SHARING_VIOLATION if there is any 2601dc20a302Sas200622 * sharing conflict. Returns NT_STATUS_SUCCESS otherwise. 2602dc20a302Sas200622 * 2603dc20a302Sas200622 * Full system-wide share reservation synchronization is available 2604dc20a302Sas200622 * when the nbmand (non-blocking mandatory) mount option is set 2605dc20a302Sas200622 * (i.e. nbl_need_crit() is true) and nbmand critical regions are used. 2606dc20a302Sas200622 * This provides synchronization with NFS and local processes. The 2607dc20a302Sas200622 * critical regions are entered in VOP_SHRLOCK()/fs_shrlock() (called 2608dc20a302Sas200622 * from smb_open_subr()/smb_fsop_shrlock()/smb_vop_shrlock()) as well 2609dc20a302Sas200622 * as the CIFS rename and delete paths. 2610dc20a302Sas200622 * 2611dc20a302Sas200622 * The CIFS server will also enter the nbl critical region in the open, 2612dc20a302Sas200622 * rename, and delete paths when nbmand is not set. There is limited 2613dc20a302Sas200622 * coordination with local and VFS share reservations in this case. 2614dc20a302Sas200622 * Note that when the nbmand mount option is not set, the VFS layer 2615dc20a302Sas200622 * only processes advisory reservations and the delete mode is not checked. 2616dc20a302Sas200622 * 2617dc20a302Sas200622 * Whether or not the nbmand mount option is set, intra-CIFS share 2618dc20a302Sas200622 * checking is done in the open, delete, and rename paths using a CIFS 2619dc20a302Sas200622 * critical region (node->n_share_lock). 2620dc20a302Sas200622 */ 2621dc20a302Sas200622 uint32_t 2622faa1795aSjb150015 smb_fsop_shrlock(cred_t *cr, smb_node_t *node, uint32_t uniq_fid, 2623dc20a302Sas200622 uint32_t desired_access, uint32_t share_access) 262455bf511dSas200622 { 2625dc20a302Sas200622 int rc; 2626dc20a302Sas200622 2627dc20a302Sas200622 /* Allow access if the request is just for meta data */ 2628dc20a302Sas200622 if ((desired_access & FILE_DATA_ALL) == 0) 2629dc20a302Sas200622 return (NT_STATUS_SUCCESS); 2630dc20a302Sas200622 26319fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States rc = smb_node_open_check(node, desired_access, share_access); 2632dc20a302Sas200622 if (rc) 2633dc20a302Sas200622 return (NT_STATUS_SHARING_VIOLATION); 2634dc20a302Sas200622 2635dc20a302Sas200622 rc = smb_vop_shrlock(node->vp, uniq_fid, desired_access, share_access, 2636dc20a302Sas200622 cr); 2637dc20a302Sas200622 if (rc) 2638dc20a302Sas200622 return (NT_STATUS_SHARING_VIOLATION); 2639dc20a302Sas200622 2640dc20a302Sas200622 return (NT_STATUS_SUCCESS); 2641dc20a302Sas200622 } 2642dc20a302Sas200622 2643dc20a302Sas200622 void 2644dc20a302Sas200622 smb_fsop_unshrlock(cred_t *cr, smb_node_t *node, uint32_t uniq_fid) 2645dc20a302Sas200622 { 2646dc20a302Sas200622 (void) smb_vop_unshrlock(node->vp, uniq_fid, cr); 2647dc20a302Sas200622 } 26488c10a865Sas200622 26498c10a865Sas200622 int 26508c10a865Sas200622 smb_fsop_frlock(smb_node_t *node, smb_lock_t *lock, boolean_t unlock, 26518c10a865Sas200622 cred_t *cr) 26528c10a865Sas200622 { 26538c10a865Sas200622 flock64_t bf; 26548c10a865Sas200622 int flag = F_REMOTELOCK; 26558c10a865Sas200622 26563ad684d6Sjb150015 /* 26573ad684d6Sjb150015 * VOP_FRLOCK() will not be called if: 26583ad684d6Sjb150015 * 26593ad684d6Sjb150015 * 1) The lock has a range of zero bytes. The semantics of Windows and 26603ad684d6Sjb150015 * POSIX are different. In the case of POSIX it asks for the locking 26613ad684d6Sjb150015 * of all the bytes from the offset provided until the end of the 26623ad684d6Sjb150015 * file. In the case of Windows a range of zero locks nothing and 26633ad684d6Sjb150015 * doesn't conflict with any other lock. 26643ad684d6Sjb150015 * 26653ad684d6Sjb150015 * 2) The lock rolls over (start + lenght < start). Solaris will assert 26663ad684d6Sjb150015 * if such a request is submitted. This will not create 26673ad684d6Sjb150015 * incompatibilities between POSIX and Windows. In the Windows world, 26683ad684d6Sjb150015 * if a client submits such a lock, the server will not lock any 26693ad684d6Sjb150015 * bytes. Interestingly if the same lock (same offset and length) is 26703ad684d6Sjb150015 * resubmitted Windows will consider that there is an overlap and 26713ad684d6Sjb150015 * the granting rules will then apply. 26720897f7fbSGordon Ross * 26730897f7fbSGordon Ross * 3) The SMB-level process IDs (smb_pid) are not passed down to the 26740897f7fbSGordon Ross * POSIX level in l_pid because (a) the rules about lock PIDs are 26750897f7fbSGordon Ross * different in SMB, and (b) we're putting our ofile f_uniqid in 26760897f7fbSGordon Ross * the POSIX l_pid field to segregate locks per SMB ofile. 26770897f7fbSGordon Ross * (We're also using a "remote" system ID in l_sysid.) 26780897f7fbSGordon Ross * All SMB locking PIDs are handled at the SMB level and 26790897f7fbSGordon Ross * not exposed in POSIX locking. 26803ad684d6Sjb150015 */ 26813ad684d6Sjb150015 if ((lock->l_length == 0) || 26823ad684d6Sjb150015 ((lock->l_start + lock->l_length - 1) < lock->l_start)) 26833ad684d6Sjb150015 return (0); 26843ad684d6Sjb150015 26858c10a865Sas200622 bzero(&bf, sizeof (bf)); 26868c10a865Sas200622 26878c10a865Sas200622 if (unlock) { 26888c10a865Sas200622 bf.l_type = F_UNLCK; 26898c10a865Sas200622 } else if (lock->l_type == SMB_LOCK_TYPE_READONLY) { 26908c10a865Sas200622 bf.l_type = F_RDLCK; 26918c10a865Sas200622 flag |= FREAD; 26928c10a865Sas200622 } else if (lock->l_type == SMB_LOCK_TYPE_READWRITE) { 26938c10a865Sas200622 bf.l_type = F_WRLCK; 26948c10a865Sas200622 flag |= FWRITE; 26958c10a865Sas200622 } 26968c10a865Sas200622 26978c10a865Sas200622 bf.l_start = lock->l_start; 26988c10a865Sas200622 bf.l_len = lock->l_length; 2699c8ec8eeaSjose borrego bf.l_pid = lock->l_file->f_uniqid; 27008c10a865Sas200622 bf.l_sysid = smb_ct.cc_sysid; 27018c10a865Sas200622 27028c10a865Sas200622 return (smb_vop_frlock(node->vp, cr, flag, &bf)); 27038c10a865Sas200622 } 2704