1da6c28aaSamw /* 2da6c28aaSamw * CDDL HEADER START 3da6c28aaSamw * 4da6c28aaSamw * The contents of this file are subject to the terms of the 5da6c28aaSamw * Common Development and Distribution License (the "License"). 6da6c28aaSamw * You may not use this file except in compliance with the License. 7da6c28aaSamw * 8da6c28aaSamw * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE 9da6c28aaSamw * or http://www.opensolaris.org/os/licensing. 10da6c28aaSamw * See the License for the specific language governing permissions 11da6c28aaSamw * and limitations under the License. 12da6c28aaSamw * 13da6c28aaSamw * When distributing Covered Code, include this CDDL HEADER in each 14da6c28aaSamw * file and include the License file at usr/src/OPENSOLARIS.LICENSE. 15da6c28aaSamw * If applicable, add the following below this CDDL HEADER, with the 16da6c28aaSamw * fields enclosed by brackets "[]" replaced with your own identifying 17da6c28aaSamw * information: Portions Copyright [yyyy] [name of copyright owner] 18da6c28aaSamw * 19da6c28aaSamw * CDDL HEADER END 20da6c28aaSamw */ 21da6c28aaSamw /* 22148c5f43SAlan Wright * Copyright (c) 2007, 2010, Oracle and/or its affiliates. All rights reserved. 23*d11e14a7SMatt Barden * Copyright 2020 Nexenta by DDN, Inc. All rights reserved. 24da6c28aaSamw */ 25da6c28aaSamw 26da6c28aaSamw #include <sys/sid.h> 27dc20a302Sas200622 #include <sys/nbmlock.h> 28da6c28aaSamw #include <smbsrv/smb_fsops.h> 2955bf511dSas200622 #include <smbsrv/smb_kproto.h> 30da6c28aaSamw #include <acl/acl_common.h> 31dc20a302Sas200622 #include <sys/fcntl.h> 3255f0a249SGordon Ross #include <sys/filio.h> 33dc20a302Sas200622 #include <sys/flock.h> 34dc20a302Sas200622 #include <fs/fs_subr.h> 35da6c28aaSamw 36faa1795aSjb150015 extern caller_context_t smb_ct; 37faa1795aSjb150015 38eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States static int smb_fsop_create_stream(smb_request_t *, cred_t *, smb_node_t *, 39037cac00Sjoyce mcintosh char *, char *, int, smb_attr_t *, smb_node_t **); 40eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States 41eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States static int smb_fsop_create_file(smb_request_t *, cred_t *, smb_node_t *, 42037cac00Sjoyce mcintosh char *, int, smb_attr_t *, smb_node_t **); 43eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States 44b819cea2SGordon Ross #ifdef _KERNEL 45eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States static int smb_fsop_create_with_sd(smb_request_t *, cred_t *, smb_node_t *, 46037cac00Sjoyce mcintosh char *, smb_attr_t *, smb_node_t **, smb_fssd_t *); 47eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States static int smb_fsop_sdinherit(smb_request_t *, smb_node_t *, smb_fssd_t *); 48b819cea2SGordon Ross #endif /* _KERNEL */ 49da6c28aaSamw 50da6c28aaSamw /* 51da6c28aaSamw * The smb_fsop_* functions have knowledge of CIFS semantics. 52da6c28aaSamw * 53da6c28aaSamw * The smb_vop_* functions have minimal knowledge of CIFS semantics and 54da6c28aaSamw * serve as an interface to the VFS layer. 55da6c28aaSamw * 56da6c28aaSamw * Hence, smb_request_t and smb_node_t structures should not be passed 57da6c28aaSamw * from the smb_fsop_* layer to the smb_vop_* layer. 58da6c28aaSamw * 59da6c28aaSamw * In general, CIFS service code should only ever call smb_fsop_* 60da6c28aaSamw * functions directly, and never smb_vop_* functions directly. 61da6c28aaSamw * 62da6c28aaSamw * smb_fsop_* functions should call smb_vop_* functions where possible, instead 63da6c28aaSamw * of their smb_fsop_* counterparts. However, there are times when 64da6c28aaSamw * this cannot be avoided. 65da6c28aaSamw */ 66da6c28aaSamw 67da6c28aaSamw /* 68da6c28aaSamw * Note: Stream names cannot be mangled. 69da6c28aaSamw */ 70da6c28aaSamw 71da6c28aaSamw /* 728c10a865Sas200622 * smb_fsop_amask_to_omode 738c10a865Sas200622 * 748c10a865Sas200622 * Convert the access mask to the open mode (for use 758c10a865Sas200622 * with the VOP_OPEN call). 768c10a865Sas200622 * 778c10a865Sas200622 * Note that opening a file for attribute only access 788c10a865Sas200622 * will also translate into an FREAD or FWRITE open mode 798c10a865Sas200622 * (i.e., it's not just for data). 808c10a865Sas200622 * 818c10a865Sas200622 * This is needed so that opens are tracked appropriately 828c10a865Sas200622 * for oplock processing. 83da6c28aaSamw */ 84da6c28aaSamw 85da6c28aaSamw int 868c10a865Sas200622 smb_fsop_amask_to_omode(uint32_t access) 87da6c28aaSamw { 88da6c28aaSamw int mode = 0; 89da6c28aaSamw 908c10a865Sas200622 if (access & (FILE_READ_DATA | FILE_EXECUTE | 918c10a865Sas200622 FILE_READ_ATTRIBUTES | FILE_READ_EA)) 92da6c28aaSamw mode |= FREAD; 93da6c28aaSamw 948c10a865Sas200622 if (access & (FILE_WRITE_DATA | FILE_APPEND_DATA | 958c10a865Sas200622 FILE_WRITE_ATTRIBUTES | FILE_WRITE_EA)) 96da6c28aaSamw mode |= FWRITE; 97da6c28aaSamw 988c10a865Sas200622 if (access & FILE_APPEND_DATA) 99da6c28aaSamw mode |= FAPPEND; 100da6c28aaSamw 101da6c28aaSamw return (mode); 102da6c28aaSamw } 103da6c28aaSamw 1048c10a865Sas200622 int 1058c10a865Sas200622 smb_fsop_open(smb_node_t *node, int mode, cred_t *cred) 1068c10a865Sas200622 { 1078c10a865Sas200622 /* 1088c10a865Sas200622 * Assuming that the same vnode is returned as we had before. 1098c10a865Sas200622 * (I.e., with certain types of files or file systems, a 1108c10a865Sas200622 * different vnode might be returned by VOP_OPEN) 1118c10a865Sas200622 */ 1128c10a865Sas200622 return (smb_vop_open(&node->vp, mode, cred)); 1138c10a865Sas200622 } 1148c10a865Sas200622 115c8ec8eeaSjose borrego void 1168c10a865Sas200622 smb_fsop_close(smb_node_t *node, int mode, cred_t *cred) 1178c10a865Sas200622 { 118c8ec8eeaSjose borrego smb_vop_close(node->vp, mode, cred); 1198c10a865Sas200622 } 1208c10a865Sas200622 121b819cea2SGordon Ross #ifdef _KERNEL 122da6c28aaSamw static int 123eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States smb_fsop_create_with_sd(smb_request_t *sr, cred_t *cr, 124eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States smb_node_t *dnode, char *name, 125037cac00Sjoyce mcintosh smb_attr_t *attr, smb_node_t **ret_snode, smb_fssd_t *fs_sd) 126da6c28aaSamw { 127da6c28aaSamw vsecattr_t *vsap; 128da6c28aaSamw vsecattr_t vsecattr; 129da6c28aaSamw smb_attr_t set_attr; 1308622ec45SGordon Ross acl_t *acl, *dacl, *sacl; 131da6c28aaSamw vnode_t *vp; 1328622ec45SGordon Ross cred_t *kcr = zone_kcred(); 133da6c28aaSamw int aclbsize = 0; /* size of acl list in bytes */ 134da6c28aaSamw int flags = 0; 135da6c28aaSamw int rc; 1362c1b14e5Sjose borrego boolean_t is_dir; 137da6c28aaSamw 138da6c28aaSamw ASSERT(fs_sd); 139da6c28aaSamw 140c8ec8eeaSjose borrego if (SMB_TREE_IS_CASEINSENSITIVE(sr)) 141da6c28aaSamw flags = SMB_IGNORE_CASE; 1428b2cc8acSafshin salek ardakani - Sun Microsystems - Irvine United States if (SMB_TREE_SUPPORTS_CATIA(sr)) 1438b2cc8acSafshin salek ardakani - Sun Microsystems - Irvine United States flags |= SMB_CATIA; 144da6c28aaSamw 145da6c28aaSamw ASSERT(cr); 146da6c28aaSamw 147da6c28aaSamw is_dir = ((fs_sd->sd_flags & SMB_FSSD_FLAGS_DIR) != 0); 148da6c28aaSamw 149c8ec8eeaSjose borrego if (smb_tree_has_feature(sr->tid_tree, SMB_TREE_ACLONCREATE)) { 150da6c28aaSamw dacl = fs_sd->sd_zdacl; 151da6c28aaSamw sacl = fs_sd->sd_zsacl; 152*d11e14a7SMatt Barden if (dacl != NULL || sacl != NULL) { 153da6c28aaSamw if (dacl && sacl) { 15455bf511dSas200622 acl = smb_fsacl_merge(dacl, sacl); 155da6c28aaSamw } else if (dacl) { 156da6c28aaSamw acl = dacl; 157da6c28aaSamw } else { 158da6c28aaSamw acl = sacl; 159da6c28aaSamw } 160da6c28aaSamw 16155bf511dSas200622 rc = smb_fsacl_to_vsa(acl, &vsecattr, &aclbsize); 162da6c28aaSamw 163da6c28aaSamw if (dacl && sacl) 164da6c28aaSamw acl_free(acl); 165da6c28aaSamw 1662c1b14e5Sjose borrego if (rc != 0) 167da6c28aaSamw return (rc); 168da6c28aaSamw 169da6c28aaSamw vsap = &vsecattr; 1702c1b14e5Sjose borrego } else { 171da6c28aaSamw vsap = NULL; 1722c1b14e5Sjose borrego } 173da6c28aaSamw 174743a77edSAlan Wright /* The tree ACEs may prevent a create */ 175743a77edSAlan Wright rc = EACCES; 176da6c28aaSamw if (is_dir) { 177743a77edSAlan Wright if (SMB_TREE_HAS_ACCESS(sr, ACE_ADD_SUBDIRECTORY) != 0) 178eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States rc = smb_vop_mkdir(dnode->vp, name, attr, 179743a77edSAlan Wright &vp, flags, cr, vsap); 180da6c28aaSamw } else { 181743a77edSAlan Wright if (SMB_TREE_HAS_ACCESS(sr, ACE_ADD_FILE) != 0) 182eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States rc = smb_vop_create(dnode->vp, name, attr, 183743a77edSAlan Wright &vp, flags, cr, vsap); 184da6c28aaSamw } 185da6c28aaSamw 186da6c28aaSamw if (vsap != NULL) 187da6c28aaSamw kmem_free(vsap->vsa_aclentp, aclbsize); 188da6c28aaSamw 189da6c28aaSamw if (rc != 0) 190da6c28aaSamw return (rc); 191da6c28aaSamw 192da6c28aaSamw set_attr.sa_mask = 0; 193da6c28aaSamw 194da6c28aaSamw /* 195da6c28aaSamw * Ideally we should be able to specify the owner and owning 196da6c28aaSamw * group at create time along with the ACL. Since we cannot 197da6c28aaSamw * do that right now, kcred is passed to smb_vop_setattr so it 198da6c28aaSamw * doesn't fail due to lack of permission. 199da6c28aaSamw */ 200da6c28aaSamw if (fs_sd->sd_secinfo & SMB_OWNER_SECINFO) { 201da6c28aaSamw set_attr.sa_vattr.va_uid = fs_sd->sd_uid; 202da6c28aaSamw set_attr.sa_mask |= SMB_AT_UID; 203da6c28aaSamw } 204da6c28aaSamw 205da6c28aaSamw if (fs_sd->sd_secinfo & SMB_GROUP_SECINFO) { 206da6c28aaSamw set_attr.sa_vattr.va_gid = fs_sd->sd_gid; 207da6c28aaSamw set_attr.sa_mask |= SMB_AT_GID; 208da6c28aaSamw } 209da6c28aaSamw 2109660e5cbSJanice Chang if (set_attr.sa_mask) 2118622ec45SGordon Ross rc = smb_vop_setattr(vp, NULL, &set_attr, 0, kcr); 212da6c28aaSamw 2132c1b14e5Sjose borrego if (rc == 0) { 2142c1b14e5Sjose borrego *ret_snode = smb_node_lookup(sr, &sr->arg.open, cr, vp, 215037cac00Sjoyce mcintosh name, dnode, NULL); 2162c1b14e5Sjose borrego 2177f667e74Sjose borrego if (*ret_snode == NULL) 2182c1b14e5Sjose borrego rc = ENOMEM; 2197f667e74Sjose borrego 2207f667e74Sjose borrego VN_RELE(vp); 2212c1b14e5Sjose borrego } 222da6c28aaSamw } else { 223da6c28aaSamw /* 224da6c28aaSamw * For filesystems that don't support ACL-on-create, try 225da6c28aaSamw * to set the specified SD after create, which could actually 226da6c28aaSamw * fail because of conflicts between inherited security 227da6c28aaSamw * attributes upon creation and the specified SD. 228da6c28aaSamw * 229da6c28aaSamw * Passing kcred to smb_fsop_sdwrite() to overcome this issue. 230da6c28aaSamw */ 231da6c28aaSamw 232da6c28aaSamw if (is_dir) { 233eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States rc = smb_vop_mkdir(dnode->vp, name, attr, &vp, 2342c1b14e5Sjose borrego flags, cr, NULL); 235da6c28aaSamw } else { 236eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States rc = smb_vop_create(dnode->vp, name, attr, &vp, 2372c1b14e5Sjose borrego flags, cr, NULL); 238da6c28aaSamw } 239da6c28aaSamw 24055bf511dSas200622 if (rc != 0) 24155bf511dSas200622 return (rc); 24255bf511dSas200622 2432c1b14e5Sjose borrego *ret_snode = smb_node_lookup(sr, &sr->arg.open, cr, vp, 244037cac00Sjoyce mcintosh name, dnode, NULL); 245da6c28aaSamw 2462c1b14e5Sjose borrego if (*ret_snode != NULL) { 2472c1b14e5Sjose borrego if (!smb_tree_has_feature(sr->tid_tree, 2482c1b14e5Sjose borrego SMB_TREE_NFS_MOUNTED)) 2498622ec45SGordon Ross rc = smb_fsop_sdwrite(sr, kcr, *ret_snode, 2502c1b14e5Sjose borrego fs_sd, 1); 2512c1b14e5Sjose borrego } else { 252da6c28aaSamw rc = ENOMEM; 253da6c28aaSamw } 2547f667e74Sjose borrego 2557f667e74Sjose borrego VN_RELE(vp); 256da6c28aaSamw } 257da6c28aaSamw 25855bf511dSas200622 if (rc != 0) { 2592c1b14e5Sjose borrego if (is_dir) 260eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States (void) smb_vop_rmdir(dnode->vp, name, flags, cr); 2612c1b14e5Sjose borrego else 262eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States (void) smb_vop_remove(dnode->vp, name, flags, cr); 26355bf511dSas200622 } 26455bf511dSas200622 265da6c28aaSamw return (rc); 266da6c28aaSamw } 267b819cea2SGordon Ross #endif /* _KERNEL */ 268da6c28aaSamw 269da6c28aaSamw /* 270da6c28aaSamw * smb_fsop_create 271da6c28aaSamw * 272da6c28aaSamw * All SMB functions should use this wrapper to ensure that 273da6c28aaSamw * all the smb_vop_creates are performed with the appropriate credentials. 274eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States * Please document any direct calls to explain the reason for avoiding 275eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States * this wrapper. 276da6c28aaSamw * 277da6c28aaSamw * *ret_snode is returned with a reference upon success. No reference is 278da6c28aaSamw * taken if an error is returned. 279da6c28aaSamw */ 280da6c28aaSamw int 281037cac00Sjoyce mcintosh smb_fsop_create(smb_request_t *sr, cred_t *cr, smb_node_t *dnode, 282037cac00Sjoyce mcintosh char *name, smb_attr_t *attr, smb_node_t **ret_snode) 283da6c28aaSamw { 284da6c28aaSamw int rc = 0; 285eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States int flags = 0; 286eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States char *fname, *sname; 287eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States char *longname = NULL; 288da6c28aaSamw 289da6c28aaSamw ASSERT(cr); 290eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States ASSERT(dnode); 291eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States ASSERT(dnode->n_magic == SMB_NODE_MAGIC); 292eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States ASSERT(dnode->n_state != SMB_NODE_STATE_DESTROYING); 293da6c28aaSamw 294da6c28aaSamw ASSERT(ret_snode); 295da6c28aaSamw *ret_snode = 0; 296da6c28aaSamw 297da6c28aaSamw ASSERT(name); 298da6c28aaSamw if (*name == 0) 299da6c28aaSamw return (EINVAL); 300da6c28aaSamw 301da6c28aaSamw ASSERT(sr); 302da6c28aaSamw ASSERT(sr->tid_tree); 303c8ec8eeaSjose borrego 304eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States if (SMB_TREE_CONTAINS_NODE(sr, dnode) == 0) 305c8ec8eeaSjose borrego return (EACCES); 306c8ec8eeaSjose borrego 307c8ec8eeaSjose borrego if (SMB_TREE_IS_READONLY(sr)) 308da6c28aaSamw return (EROFS); 309da6c28aaSamw 310c8ec8eeaSjose borrego if (SMB_TREE_IS_CASEINSENSITIVE(sr)) 311da6c28aaSamw flags = SMB_IGNORE_CASE; 3128b2cc8acSafshin salek ardakani - Sun Microsystems - Irvine United States if (SMB_TREE_SUPPORTS_CATIA(sr)) 3138b2cc8acSafshin salek ardakani - Sun Microsystems - Irvine United States flags |= SMB_CATIA; 314e3f2c991SKeyur Desai if (SMB_TREE_SUPPORTS_ABE(sr)) 315e3f2c991SKeyur Desai flags |= SMB_ABE; 316da6c28aaSamw 3178b2cc8acSafshin salek ardakani - Sun Microsystems - Irvine United States if (smb_is_stream_name(name)) { 318da6c28aaSamw fname = kmem_alloc(MAXNAMELEN, KM_SLEEP); 319da6c28aaSamw sname = kmem_alloc(MAXNAMELEN, KM_SLEEP); 320eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States smb_stream_parse_name(name, fname, sname); 321da6c28aaSamw 322eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States rc = smb_fsop_create_stream(sr, cr, dnode, 323037cac00Sjoyce mcintosh fname, sname, flags, attr, ret_snode); 3248b2cc8acSafshin salek ardakani - Sun Microsystems - Irvine United States 325da6c28aaSamw kmem_free(fname, MAXNAMELEN); 326da6c28aaSamw kmem_free(sname, MAXNAMELEN); 3278b2cc8acSafshin salek ardakani - Sun Microsystems - Irvine United States return (rc); 328da6c28aaSamw } 3298b2cc8acSafshin salek ardakani - Sun Microsystems - Irvine United States 3308b2cc8acSafshin salek ardakani - Sun Microsystems - Irvine United States /* Not a named stream */ 331eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States 332cb174861Sjoyce mcintosh if (SMB_TREE_SUPPORTS_SHORTNAMES(sr) && smb_maybe_mangled(name)) { 3338b2cc8acSafshin salek ardakani - Sun Microsystems - Irvine United States longname = kmem_alloc(MAXNAMELEN, KM_SLEEP); 334148c5f43SAlan Wright rc = smb_unmangle(dnode, name, longname, MAXNAMELEN, flags); 3358b2cc8acSafshin salek ardakani - Sun Microsystems - Irvine United States kmem_free(longname, MAXNAMELEN); 3368b2cc8acSafshin salek ardakani - Sun Microsystems - Irvine United States 3378b2cc8acSafshin salek ardakani - Sun Microsystems - Irvine United States if (rc == 0) 3388b2cc8acSafshin salek ardakani - Sun Microsystems - Irvine United States rc = EEXIST; 3398b2cc8acSafshin salek ardakani - Sun Microsystems - Irvine United States if (rc != ENOENT) 3408b2cc8acSafshin salek ardakani - Sun Microsystems - Irvine United States return (rc); 3418b2cc8acSafshin salek ardakani - Sun Microsystems - Irvine United States } 3428b2cc8acSafshin salek ardakani - Sun Microsystems - Irvine United States 343eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States rc = smb_fsop_create_file(sr, cr, dnode, name, flags, 344037cac00Sjoyce mcintosh attr, ret_snode); 345eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States return (rc); 346eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States 347eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States } 348eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States 349eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States 350eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States /* 351eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States * smb_fsop_create_stream 352eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States * 353eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States * Create NTFS named stream file (sname) on unnamed stream 354eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States * file (fname), creating the unnamed stream file if it 355eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States * doesn't exist. 356eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States * If we created the unnamed stream file and then creation 357eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States * of the named stream file fails, we delete the unnamed stream. 358eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States * Since we use the real file name for the smb_vop_remove we 359eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States * clear the SMB_IGNORE_CASE flag to ensure a case sensitive 360eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States * match. 361eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States * 362eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States * The second parameter of smb_vop_setattr() is set to 363eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States * NULL, even though an unnamed stream exists. This is 364eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States * because we want to set the UID and GID on the named 365eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States * stream in this case for consistency with the (unnamed 366eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States * stream) file (see comments for smb_vop_setattr()). 3678d94f651SGordon Ross * 3688d94f651SGordon Ross * Note that some stream "types" are "restricted" and only 3698d94f651SGordon Ross * internal callers (cr == kcred) can create those. 370eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States */ 371eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States static int 372eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States smb_fsop_create_stream(smb_request_t *sr, cred_t *cr, 373eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States smb_node_t *dnode, char *fname, char *sname, int flags, 374037cac00Sjoyce mcintosh smb_attr_t *attr, smb_node_t **ret_snode) 375eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States { 376eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States smb_attr_t fattr; 3778622ec45SGordon Ross smb_node_t *fnode; 378eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States vnode_t *xattrdvp; 379eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States vnode_t *vp; 3808622ec45SGordon Ross cred_t *kcr = zone_kcred(); 381eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States int rc = 0; 382eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States boolean_t fcreate = B_FALSE; 383eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States 3848d94f651SGordon Ross if (cr != kcr && smb_strname_restricted(sname)) 3858d94f651SGordon Ross return (EACCES); 3868d94f651SGordon Ross 387eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States /* Look up / create the unnamed stream, fname */ 388eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States rc = smb_fsop_lookup(sr, cr, flags | SMB_FOLLOW_LINKS, 389037cac00Sjoyce mcintosh sr->tid_tree->t_snode, dnode, fname, &fnode); 390245d1332SMatt Barden if (rc == 0) { 391245d1332SMatt Barden if (smb_fsop_access(sr, sr->user_cr, fnode, 392245d1332SMatt Barden sr->sr_open.desired_access) != 0) 393245d1332SMatt Barden rc = EACCES; 394245d1332SMatt Barden } else if (rc == ENOENT) { 395eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States fcreate = B_TRUE; 396eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States rc = smb_fsop_create_file(sr, cr, dnode, fname, flags, 397037cac00Sjoyce mcintosh attr, &fnode); 398eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States } 399eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States if (rc != 0) 400eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States return (rc); 401eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States 402037cac00Sjoyce mcintosh fattr.sa_mask = SMB_AT_UID | SMB_AT_GID; 4038622ec45SGordon Ross rc = smb_vop_getattr(fnode->vp, NULL, &fattr, 0, kcr); 404037cac00Sjoyce mcintosh 405037cac00Sjoyce mcintosh if (rc == 0) { 406eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States /* create the named stream, sname */ 407037cac00Sjoyce mcintosh rc = smb_vop_stream_create(fnode->vp, sname, attr, 408037cac00Sjoyce mcintosh &vp, &xattrdvp, flags, cr); 409037cac00Sjoyce mcintosh } 410eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States if (rc != 0) { 411eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States if (fcreate) { 412eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States flags &= ~SMB_IGNORE_CASE; 413eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States (void) smb_vop_remove(dnode->vp, 414eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States fnode->od_name, flags, cr); 415eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States } 416eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States smb_node_release(fnode); 417eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States return (rc); 418eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States } 419eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States 420eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States attr->sa_vattr.va_uid = fattr.sa_vattr.va_uid; 421eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States attr->sa_vattr.va_gid = fattr.sa_vattr.va_gid; 422eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States attr->sa_mask = SMB_AT_UID | SMB_AT_GID; 423eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States 4248622ec45SGordon Ross rc = smb_vop_setattr(vp, NULL, attr, 0, kcr); 425eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States if (rc != 0) { 426eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States smb_node_release(fnode); 427eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States return (rc); 428eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States } 429eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States 430eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States *ret_snode = smb_stream_node_lookup(sr, cr, fnode, xattrdvp, 431037cac00Sjoyce mcintosh vp, sname); 432eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States 433eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States smb_node_release(fnode); 434eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States VN_RELE(xattrdvp); 435eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States VN_RELE(vp); 436eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States 437eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States if (*ret_snode == NULL) 438eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States rc = ENOMEM; 439eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States 4409fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States /* notify change to the unnamed stream */ 4419fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States if (rc == 0) 442ccc71be5SGordon Ross smb_node_notify_change(dnode, 443ccc71be5SGordon Ross FILE_ACTION_ADDED_STREAM, fname); 4449fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States 445eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States return (rc); 446eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States } 447eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States 448eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States /* 449eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States * smb_fsop_create_file 450eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States */ 451eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States static int 452eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States smb_fsop_create_file(smb_request_t *sr, cred_t *cr, 453eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States smb_node_t *dnode, char *name, int flags, 454037cac00Sjoyce mcintosh smb_attr_t *attr, smb_node_t **ret_snode) 455eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States { 456148c5f43SAlan Wright smb_arg_open_t *op = &sr->sr_open; 457eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States vnode_t *vp; 458b819cea2SGordon Ross int rc; 459b819cea2SGordon Ross 460b819cea2SGordon Ross #ifdef _KERNEL 461eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States smb_fssd_t fs_sd; 462eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States uint32_t secinfo; 463eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States uint32_t status; 464eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States 46555bf511dSas200622 if (op->sd) { 466da6c28aaSamw /* 467da6c28aaSamw * SD sent by client in Windows format. Needs to be 468*d11e14a7SMatt Barden * converted to FS format. Inherit DACL/SACL if they're not 469*d11e14a7SMatt Barden * specified. 470da6c28aaSamw */ 47155bf511dSas200622 secinfo = smb_sd_get_secinfo(op->sd); 472*d11e14a7SMatt Barden 47355bf511dSas200622 smb_fssd_init(&fs_sd, secinfo, 0); 474da6c28aaSamw 47555bf511dSas200622 status = smb_sd_tofs(op->sd, &fs_sd); 476da6c28aaSamw if (status == NT_STATUS_SUCCESS) { 477*d11e14a7SMatt Barden rc = smb_fsop_sdinherit(sr, dnode, &fs_sd); 478*d11e14a7SMatt Barden if (rc == 0) 479eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States rc = smb_fsop_create_with_sd(sr, cr, dnode, 480037cac00Sjoyce mcintosh name, attr, ret_snode, &fs_sd); 481*d11e14a7SMatt Barden 4828b2cc8acSafshin salek ardakani - Sun Microsystems - Irvine United States } else { 483da6c28aaSamw rc = EINVAL; 4848b2cc8acSafshin salek ardakani - Sun Microsystems - Irvine United States } 48555bf511dSas200622 smb_fssd_term(&fs_sd); 486da6c28aaSamw } else if (sr->tid_tree->t_acltype == ACE_T) { 487da6c28aaSamw /* 488da6c28aaSamw * No incoming SD and filesystem is ZFS 489da6c28aaSamw * Server applies Windows inheritance rules, 490da6c28aaSamw * see smb_fsop_sdinherit() comments as to why. 491da6c28aaSamw */ 492*d11e14a7SMatt Barden smb_fssd_init(&fs_sd, 0, 0); 493eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States rc = smb_fsop_sdinherit(sr, dnode, &fs_sd); 494da6c28aaSamw if (rc == 0) { 495eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States rc = smb_fsop_create_with_sd(sr, cr, dnode, 496037cac00Sjoyce mcintosh name, attr, ret_snode, &fs_sd); 497da6c28aaSamw } 498da6c28aaSamw 49955bf511dSas200622 smb_fssd_term(&fs_sd); 500b819cea2SGordon Ross } else 501b819cea2SGordon Ross #endif /* _KERNEL */ 502b819cea2SGordon Ross { 503da6c28aaSamw /* 504da6c28aaSamw * No incoming SD and filesystem is not ZFS 505da6c28aaSamw * let the filesystem handles the inheritance. 506da6c28aaSamw */ 507eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States rc = smb_vop_create(dnode->vp, name, attr, &vp, 508dc20a302Sas200622 flags, cr, NULL); 509da6c28aaSamw 510da6c28aaSamw if (rc == 0) { 511da6c28aaSamw *ret_snode = smb_node_lookup(sr, op, cr, vp, 512037cac00Sjoyce mcintosh name, dnode, NULL); 513da6c28aaSamw 5147f667e74Sjose borrego if (*ret_snode == NULL) 515da6c28aaSamw rc = ENOMEM; 5167f667e74Sjose borrego 5177f667e74Sjose borrego VN_RELE(vp); 518da6c28aaSamw } 519da6c28aaSamw 520da6c28aaSamw } 5219fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States 5229fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States if (rc == 0) 523b819cea2SGordon Ross smb_node_notify_change(dnode, FILE_ACTION_ADDED, name); 5249fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States 525da6c28aaSamw return (rc); 526da6c28aaSamw } 527da6c28aaSamw 528da6c28aaSamw /* 529da6c28aaSamw * smb_fsop_mkdir 530da6c28aaSamw * 531da6c28aaSamw * All SMB functions should use this wrapper to ensure that 532da6c28aaSamw * the the calls are performed with the appropriate credentials. 533da6c28aaSamw * Please document any direct call to explain the reason 534da6c28aaSamw * for avoiding this wrapper. 535da6c28aaSamw * 536da6c28aaSamw * It is assumed that a reference exists on snode coming into this routine. 537da6c28aaSamw * 538da6c28aaSamw * *ret_snode is returned with a reference upon success. No reference is 539da6c28aaSamw * taken if an error is returned. 540da6c28aaSamw */ 541da6c28aaSamw int 542da6c28aaSamw smb_fsop_mkdir( 543faa1795aSjb150015 smb_request_t *sr, 544da6c28aaSamw cred_t *cr, 545eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States smb_node_t *dnode, 546da6c28aaSamw char *name, 547da6c28aaSamw smb_attr_t *attr, 548037cac00Sjoyce mcintosh smb_node_t **ret_snode) 549da6c28aaSamw { 550da6c28aaSamw struct open_param *op = &sr->arg.open; 551da6c28aaSamw char *longname; 552da6c28aaSamw vnode_t *vp; 553da6c28aaSamw int flags = 0; 554b819cea2SGordon Ross int rc; 555b819cea2SGordon Ross 556b819cea2SGordon Ross #ifdef _KERNEL 557da6c28aaSamw smb_fssd_t fs_sd; 558da6c28aaSamw uint32_t secinfo; 559da6c28aaSamw uint32_t status; 560b819cea2SGordon Ross #endif /* _KERNEL */ 561b819cea2SGordon Ross 562da6c28aaSamw ASSERT(cr); 563eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States ASSERT(dnode); 564eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States ASSERT(dnode->n_magic == SMB_NODE_MAGIC); 565eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States ASSERT(dnode->n_state != SMB_NODE_STATE_DESTROYING); 566da6c28aaSamw 567da6c28aaSamw ASSERT(ret_snode); 568da6c28aaSamw *ret_snode = 0; 569da6c28aaSamw 570da6c28aaSamw ASSERT(name); 571da6c28aaSamw if (*name == 0) 572da6c28aaSamw return (EINVAL); 573da6c28aaSamw 574da6c28aaSamw ASSERT(sr); 575da6c28aaSamw ASSERT(sr->tid_tree); 576c8ec8eeaSjose borrego 577eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States if (SMB_TREE_CONTAINS_NODE(sr, dnode) == 0) 578c8ec8eeaSjose borrego return (EACCES); 579c8ec8eeaSjose borrego 580c8ec8eeaSjose borrego if (SMB_TREE_IS_READONLY(sr)) 581da6c28aaSamw return (EROFS); 5828b2cc8acSafshin salek ardakani - Sun Microsystems - Irvine United States if (SMB_TREE_SUPPORTS_CATIA(sr)) 5838b2cc8acSafshin salek ardakani - Sun Microsystems - Irvine United States flags |= SMB_CATIA; 584e3f2c991SKeyur Desai if (SMB_TREE_SUPPORTS_ABE(sr)) 585e3f2c991SKeyur Desai flags |= SMB_ABE; 586da6c28aaSamw 587cb174861Sjoyce mcintosh if (SMB_TREE_SUPPORTS_SHORTNAMES(sr) && smb_maybe_mangled(name)) { 588da6c28aaSamw longname = kmem_alloc(MAXNAMELEN, KM_SLEEP); 589148c5f43SAlan Wright rc = smb_unmangle(dnode, name, longname, MAXNAMELEN, flags); 590da6c28aaSamw kmem_free(longname, MAXNAMELEN); 591da6c28aaSamw 592da6c28aaSamw /* 593da6c28aaSamw * If the name passed in by the client has an unmangled 594da6c28aaSamw * equivalent that is found in the specified directory, 595da6c28aaSamw * then the mkdir cannot succeed. Return EEXIST. 596da6c28aaSamw * 597da6c28aaSamw * Only if ENOENT is returned will a mkdir be attempted. 598da6c28aaSamw */ 599da6c28aaSamw 600da6c28aaSamw if (rc == 0) 601da6c28aaSamw rc = EEXIST; 602da6c28aaSamw 603da6c28aaSamw if (rc != ENOENT) 604da6c28aaSamw return (rc); 605da6c28aaSamw } 606da6c28aaSamw 607c8ec8eeaSjose borrego if (SMB_TREE_IS_CASEINSENSITIVE(sr)) 608da6c28aaSamw flags = SMB_IGNORE_CASE; 609da6c28aaSamw 610b819cea2SGordon Ross #ifdef _KERNEL 61155bf511dSas200622 if (op->sd) { 612da6c28aaSamw /* 613da6c28aaSamw * SD sent by client in Windows format. Needs to be 614*d11e14a7SMatt Barden * converted to FS format. Inherit DACL/SACL if they're not 615*d11e14a7SMatt Barden * specified. 616da6c28aaSamw */ 61755bf511dSas200622 secinfo = smb_sd_get_secinfo(op->sd); 618*d11e14a7SMatt Barden 61955bf511dSas200622 smb_fssd_init(&fs_sd, secinfo, SMB_FSSD_FLAGS_DIR); 620da6c28aaSamw 62155bf511dSas200622 status = smb_sd_tofs(op->sd, &fs_sd); 622da6c28aaSamw if (status == NT_STATUS_SUCCESS) { 623*d11e14a7SMatt Barden rc = smb_fsop_sdinherit(sr, dnode, &fs_sd); 624*d11e14a7SMatt Barden if (rc == 0) 625eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States rc = smb_fsop_create_with_sd(sr, cr, dnode, 626037cac00Sjoyce mcintosh name, attr, ret_snode, &fs_sd); 627da6c28aaSamw } 628da6c28aaSamw else 629da6c28aaSamw rc = EINVAL; 63055bf511dSas200622 smb_fssd_term(&fs_sd); 631da6c28aaSamw } else if (sr->tid_tree->t_acltype == ACE_T) { 632da6c28aaSamw /* 633da6c28aaSamw * No incoming SD and filesystem is ZFS 634da6c28aaSamw * Server applies Windows inheritance rules, 635da6c28aaSamw * see smb_fsop_sdinherit() comments as to why. 636da6c28aaSamw */ 637*d11e14a7SMatt Barden smb_fssd_init(&fs_sd, 0, SMB_FSSD_FLAGS_DIR); 638eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States rc = smb_fsop_sdinherit(sr, dnode, &fs_sd); 639da6c28aaSamw if (rc == 0) { 640eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States rc = smb_fsop_create_with_sd(sr, cr, dnode, 641037cac00Sjoyce mcintosh name, attr, ret_snode, &fs_sd); 642da6c28aaSamw } 643da6c28aaSamw 64455bf511dSas200622 smb_fssd_term(&fs_sd); 645da6c28aaSamw 646b819cea2SGordon Ross } else 647b819cea2SGordon Ross #endif /* _KERNEL */ 648b819cea2SGordon Ross { 649eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States rc = smb_vop_mkdir(dnode->vp, name, attr, &vp, flags, cr, 650dc20a302Sas200622 NULL); 651da6c28aaSamw 652da6c28aaSamw if (rc == 0) { 653da6c28aaSamw *ret_snode = smb_node_lookup(sr, op, cr, vp, name, 654037cac00Sjoyce mcintosh dnode, NULL); 655da6c28aaSamw 6567f667e74Sjose borrego if (*ret_snode == NULL) 657da6c28aaSamw rc = ENOMEM; 6587f667e74Sjose borrego 6597f667e74Sjose borrego VN_RELE(vp); 660da6c28aaSamw } 661da6c28aaSamw } 662da6c28aaSamw 6639fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States if (rc == 0) 664b819cea2SGordon Ross smb_node_notify_change(dnode, FILE_ACTION_ADDED, name); 6659fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States 666da6c28aaSamw return (rc); 667da6c28aaSamw } 668da6c28aaSamw 669da6c28aaSamw /* 670da6c28aaSamw * smb_fsop_remove 671da6c28aaSamw * 672da6c28aaSamw * All SMB functions should use this wrapper to ensure that 673da6c28aaSamw * the the calls are performed with the appropriate credentials. 674da6c28aaSamw * Please document any direct call to explain the reason 675da6c28aaSamw * for avoiding this wrapper. 676da6c28aaSamw * 677da6c28aaSamw * It is assumed that a reference exists on snode coming into this routine. 678da6c28aaSamw * 679da6c28aaSamw * A null smb_request might be passed to this function. 6808d94f651SGordon Ross * 6818d94f651SGordon Ross * Note that some stream "types" are "restricted" and only 6828d94f651SGordon Ross * internal callers (cr == kcred) can remove those. 683da6c28aaSamw */ 684da6c28aaSamw int 685da6c28aaSamw smb_fsop_remove( 686faa1795aSjb150015 smb_request_t *sr, 687da6c28aaSamw cred_t *cr, 688eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States smb_node_t *dnode, 689da6c28aaSamw char *name, 6908b2cc8acSafshin salek ardakani - Sun Microsystems - Irvine United States uint32_t flags) 691da6c28aaSamw { 692da6c28aaSamw smb_node_t *fnode; 693da6c28aaSamw char *longname; 694da6c28aaSamw char *fname; 695da6c28aaSamw char *sname; 696da6c28aaSamw int rc; 697da6c28aaSamw 698da6c28aaSamw ASSERT(cr); 699da6c28aaSamw /* 700da6c28aaSamw * The state of the node could be SMB_NODE_STATE_DESTROYING if this 701da6c28aaSamw * function is called during the deletion of the node (because of 702da6c28aaSamw * DELETE_ON_CLOSE). 703da6c28aaSamw */ 704eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States ASSERT(dnode); 705eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States ASSERT(dnode->n_magic == SMB_NODE_MAGIC); 706da6c28aaSamw 707eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States if (SMB_TREE_CONTAINS_NODE(sr, dnode) == 0 || 708743a77edSAlan Wright SMB_TREE_HAS_ACCESS(sr, ACE_DELETE) == 0) 709da6c28aaSamw return (EACCES); 710da6c28aaSamw 711c8ec8eeaSjose borrego if (SMB_TREE_IS_READONLY(sr)) 712da6c28aaSamw return (EROFS); 713da6c28aaSamw 714da6c28aaSamw fname = kmem_alloc(MAXNAMELEN, KM_SLEEP); 715da6c28aaSamw sname = kmem_alloc(MAXNAMELEN, KM_SLEEP); 716da6c28aaSamw 717eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States if (dnode->flags & NODE_XATTR_DIR) { 7188d94f651SGordon Ross if (cr != zone_kcred() && smb_strname_restricted(name)) { 7198d94f651SGordon Ross rc = EACCES; 7208d94f651SGordon Ross goto out; 7218d94f651SGordon Ross } 7228d94f651SGordon Ross 7239fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States fnode = dnode->n_dnode; 7249fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States rc = smb_vop_stream_remove(fnode->vp, name, flags, cr); 7259fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States 7269fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States /* notify change to the unnamed stream */ 727ccc71be5SGordon Ross if ((rc == 0) && fnode->n_dnode) { 728ccc71be5SGordon Ross smb_node_notify_change(fnode->n_dnode, 729ccc71be5SGordon Ross FILE_ACTION_REMOVED_STREAM, fnode->od_name); 730ccc71be5SGordon Ross } 731eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States } else if (smb_is_stream_name(name)) { 732eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States smb_stream_parse_name(name, fname, sname); 7338d7e4166Sjose borrego 7348d94f651SGordon Ross if (cr != zone_kcred() && smb_strname_restricted(sname)) { 7358d94f651SGordon Ross rc = EACCES; 7368d94f651SGordon Ross goto out; 7378d94f651SGordon Ross } 7388d94f651SGordon Ross 739cbfb650aScp160787 /* 740da6c28aaSamw * Look up the unnamed stream (i.e. fname). 741da6c28aaSamw * Unmangle processing will be done on fname 742da6c28aaSamw * as well as any link target. 743da6c28aaSamw */ 744da6c28aaSamw 745da6c28aaSamw rc = smb_fsop_lookup(sr, cr, flags | SMB_FOLLOW_LINKS, 746037cac00Sjoyce mcintosh sr->tid_tree->t_snode, dnode, fname, &fnode); 747da6c28aaSamw 748da6c28aaSamw if (rc != 0) { 7498d94f651SGordon Ross goto out; 750da6c28aaSamw } 751da6c28aaSamw 752da6c28aaSamw /* 753da6c28aaSamw * XXX 754da6c28aaSamw * Need to find out what permission is required by NTFS 755da6c28aaSamw * to remove a stream. 756da6c28aaSamw */ 757dc20a302Sas200622 rc = smb_vop_stream_remove(fnode->vp, sname, flags, cr); 758da6c28aaSamw 759da6c28aaSamw smb_node_release(fnode); 7609fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States 7619fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States /* notify change to the unnamed stream */ 762ccc71be5SGordon Ross if (rc == 0) { 763ccc71be5SGordon Ross smb_node_notify_change(dnode, 764ccc71be5SGordon Ross FILE_ACTION_REMOVED_STREAM, fname); 765ccc71be5SGordon Ross } 766da6c28aaSamw } else { 767eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States rc = smb_vop_remove(dnode->vp, name, flags, cr); 768da6c28aaSamw 769da6c28aaSamw if (rc == ENOENT) { 770cb174861Sjoyce mcintosh if (!SMB_TREE_SUPPORTS_SHORTNAMES(sr) || 771cb174861Sjoyce mcintosh !smb_maybe_mangled(name)) { 7728d94f651SGordon Ross goto out; 773da6c28aaSamw } 774da6c28aaSamw longname = kmem_alloc(MAXNAMELEN, KM_SLEEP); 775da6c28aaSamw 776e3f2c991SKeyur Desai if (SMB_TREE_SUPPORTS_ABE(sr)) 777e3f2c991SKeyur Desai flags |= SMB_ABE; 778e3f2c991SKeyur Desai 779148c5f43SAlan Wright rc = smb_unmangle(dnode, name, longname, MAXNAMELEN, 780148c5f43SAlan Wright flags); 781da6c28aaSamw 782da6c28aaSamw if (rc == 0) { 783da6c28aaSamw /* 7848b2cc8acSafshin salek ardakani - Sun Microsystems - Irvine United States * longname is the real (case-sensitive) 7858b2cc8acSafshin salek ardakani - Sun Microsystems - Irvine United States * on-disk name. 786da6c28aaSamw * We make sure we do a remove on this exact 787da6c28aaSamw * name, as the name was mangled and denotes 788da6c28aaSamw * a unique file. 789da6c28aaSamw */ 790da6c28aaSamw flags &= ~SMB_IGNORE_CASE; 791eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States rc = smb_vop_remove(dnode->vp, longname, 792dc20a302Sas200622 flags, cr); 793da6c28aaSamw } 794da6c28aaSamw kmem_free(longname, MAXNAMELEN); 795da6c28aaSamw } 796b819cea2SGordon Ross if (rc == 0) { 797b819cea2SGordon Ross smb_node_notify_change(dnode, 798b819cea2SGordon Ross FILE_ACTION_REMOVED, name); 799b819cea2SGordon Ross } 800da6c28aaSamw } 801da6c28aaSamw 8028d94f651SGordon Ross out: 803da6c28aaSamw kmem_free(fname, MAXNAMELEN); 804da6c28aaSamw kmem_free(sname, MAXNAMELEN); 8059fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States 806da6c28aaSamw return (rc); 807da6c28aaSamw } 808da6c28aaSamw 809da6c28aaSamw /* 810da6c28aaSamw * smb_fsop_remove_streams 811da6c28aaSamw * 812da6c28aaSamw * This function removes a file's streams without removing the 813da6c28aaSamw * file itself. 814da6c28aaSamw * 8157f667e74Sjose borrego * It is assumed that fnode is not a link. 816da6c28aaSamw */ 817a90cf9f2SGordon Ross uint32_t 818faa1795aSjb150015 smb_fsop_remove_streams(smb_request_t *sr, cred_t *cr, smb_node_t *fnode) 819da6c28aaSamw { 8207f667e74Sjose borrego int rc, flags = 0; 8217f667e74Sjose borrego smb_odir_t *od; 8227f667e74Sjose borrego smb_odirent_t *odirent; 823a90cf9f2SGordon Ross uint32_t status; 8247f667e74Sjose borrego boolean_t eos; 825da6c28aaSamw 826c8ec8eeaSjose borrego ASSERT(sr); 827da6c28aaSamw ASSERT(cr); 828da6c28aaSamw ASSERT(fnode); 829da6c28aaSamw ASSERT(fnode->n_magic == SMB_NODE_MAGIC); 830da6c28aaSamw ASSERT(fnode->n_state != SMB_NODE_STATE_DESTROYING); 831da6c28aaSamw 832a90cf9f2SGordon Ross if (SMB_TREE_CONTAINS_NODE(sr, fnode) == 0) 833a90cf9f2SGordon Ross return (NT_STATUS_ACCESS_DENIED); 834da6c28aaSamw 835a90cf9f2SGordon Ross if (SMB_TREE_IS_READONLY(sr)) 836a90cf9f2SGordon Ross return (NT_STATUS_ACCESS_DENIED); 837da6c28aaSamw 838c8ec8eeaSjose borrego if (SMB_TREE_IS_CASEINSENSITIVE(sr)) 839da6c28aaSamw flags = SMB_IGNORE_CASE; 840eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States 8418b2cc8acSafshin salek ardakani - Sun Microsystems - Irvine United States if (SMB_TREE_SUPPORTS_CATIA(sr)) 8428b2cc8acSafshin salek ardakani - Sun Microsystems - Irvine United States flags |= SMB_CATIA; 843da6c28aaSamw 844a90cf9f2SGordon Ross status = smb_odir_openat(sr, fnode, &od); 845a90cf9f2SGordon Ross switch (status) { 846a90cf9f2SGordon Ross case 0: 847a90cf9f2SGordon Ross break; 848d2488fe8SGordon Ross case NT_STATUS_OBJECT_NAME_NOT_FOUND: 849a90cf9f2SGordon Ross case NT_STATUS_NO_SUCH_FILE: 850a90cf9f2SGordon Ross case NT_STATUS_NOT_SUPPORTED: 851a90cf9f2SGordon Ross /* No streams to remove. */ 852a90cf9f2SGordon Ross return (0); 853a90cf9f2SGordon Ross default: 854a90cf9f2SGordon Ross return (status); 855eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States } 8567f667e74Sjose borrego 8577f667e74Sjose borrego odirent = kmem_alloc(sizeof (smb_odirent_t), KM_SLEEP); 858da6c28aaSamw for (;;) { 8597f667e74Sjose borrego rc = smb_odir_read(sr, od, odirent, &eos); 8607f667e74Sjose borrego if ((rc != 0) || (eos)) 861da6c28aaSamw break; 8627f667e74Sjose borrego (void) smb_vop_remove(od->d_dnode->vp, odirent->od_name, 8637f667e74Sjose borrego flags, cr); 864da6c28aaSamw } 8657f667e74Sjose borrego kmem_free(odirent, sizeof (smb_odirent_t)); 866a90cf9f2SGordon Ross if (eos && rc == ENOENT) 867a90cf9f2SGordon Ross rc = 0; 8687f667e74Sjose borrego 8697f667e74Sjose borrego smb_odir_close(od); 870a1511e6bSjoyce mcintosh smb_odir_release(od); 871a90cf9f2SGordon Ross if (rc) 872a90cf9f2SGordon Ross status = smb_errno2status(rc); 873a90cf9f2SGordon Ross return (status); 874da6c28aaSamw } 875da6c28aaSamw 876da6c28aaSamw /* 877da6c28aaSamw * smb_fsop_rmdir 878da6c28aaSamw * 879da6c28aaSamw * All SMB functions should use this wrapper to ensure that 880da6c28aaSamw * the the calls are performed with the appropriate credentials. 881da6c28aaSamw * Please document any direct call to explain the reason 882da6c28aaSamw * for avoiding this wrapper. 883da6c28aaSamw * 884da6c28aaSamw * It is assumed that a reference exists on snode coming into this routine. 885da6c28aaSamw */ 886da6c28aaSamw int 887da6c28aaSamw smb_fsop_rmdir( 888faa1795aSjb150015 smb_request_t *sr, 889da6c28aaSamw cred_t *cr, 890eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States smb_node_t *dnode, 891da6c28aaSamw char *name, 8928b2cc8acSafshin salek ardakani - Sun Microsystems - Irvine United States uint32_t flags) 893da6c28aaSamw { 894da6c28aaSamw int rc; 895da6c28aaSamw char *longname; 896da6c28aaSamw 897da6c28aaSamw ASSERT(cr); 898da6c28aaSamw /* 899da6c28aaSamw * The state of the node could be SMB_NODE_STATE_DESTROYING if this 900da6c28aaSamw * function is called during the deletion of the node (because of 901da6c28aaSamw * DELETE_ON_CLOSE). 902da6c28aaSamw */ 903eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States ASSERT(dnode); 904eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States ASSERT(dnode->n_magic == SMB_NODE_MAGIC); 905da6c28aaSamw 906eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States if (SMB_TREE_CONTAINS_NODE(sr, dnode) == 0 || 907743a77edSAlan Wright SMB_TREE_HAS_ACCESS(sr, ACE_DELETE_CHILD) == 0) 908da6c28aaSamw return (EACCES); 909da6c28aaSamw 910c8ec8eeaSjose borrego if (SMB_TREE_IS_READONLY(sr)) 911da6c28aaSamw return (EROFS); 912da6c28aaSamw 913eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States rc = smb_vop_rmdir(dnode->vp, name, flags, cr); 914da6c28aaSamw 915da6c28aaSamw if (rc == ENOENT) { 916cb174861Sjoyce mcintosh if (!SMB_TREE_SUPPORTS_SHORTNAMES(sr) || 917cb174861Sjoyce mcintosh !smb_maybe_mangled(name)) { 918da6c28aaSamw return (rc); 919cb174861Sjoyce mcintosh } 920da6c28aaSamw 921da6c28aaSamw longname = kmem_alloc(MAXNAMELEN, KM_SLEEP); 922e3f2c991SKeyur Desai 923e3f2c991SKeyur Desai if (SMB_TREE_SUPPORTS_ABE(sr)) 924e3f2c991SKeyur Desai flags |= SMB_ABE; 925148c5f43SAlan Wright rc = smb_unmangle(dnode, name, longname, MAXNAMELEN, flags); 926da6c28aaSamw 927da6c28aaSamw if (rc == 0) { 928da6c28aaSamw /* 9298b2cc8acSafshin salek ardakani - Sun Microsystems - Irvine United States * longname is the real (case-sensitive) 9308b2cc8acSafshin salek ardakani - Sun Microsystems - Irvine United States * on-disk name. 931da6c28aaSamw * We make sure we do a rmdir on this exact 932da6c28aaSamw * name, as the name was mangled and denotes 933da6c28aaSamw * a unique directory. 934da6c28aaSamw */ 935da6c28aaSamw flags &= ~SMB_IGNORE_CASE; 936eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States rc = smb_vop_rmdir(dnode->vp, longname, flags, cr); 937da6c28aaSamw } 938da6c28aaSamw 939da6c28aaSamw kmem_free(longname, MAXNAMELEN); 940da6c28aaSamw } 941da6c28aaSamw 9429fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States if (rc == 0) 943b819cea2SGordon Ross smb_node_notify_change(dnode, FILE_ACTION_REMOVED, name); 9449fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States 945da6c28aaSamw return (rc); 946da6c28aaSamw } 947da6c28aaSamw 948da6c28aaSamw /* 949da6c28aaSamw * smb_fsop_getattr 950da6c28aaSamw * 951da6c28aaSamw * All SMB functions should use this wrapper to ensure that 952da6c28aaSamw * the the calls are performed with the appropriate credentials. 953da6c28aaSamw * Please document any direct call to explain the reason 954da6c28aaSamw * for avoiding this wrapper. 955da6c28aaSamw * 956da6c28aaSamw * It is assumed that a reference exists on snode coming into this routine. 957da6c28aaSamw */ 958da6c28aaSamw int 959faa1795aSjb150015 smb_fsop_getattr(smb_request_t *sr, cred_t *cr, smb_node_t *snode, 960da6c28aaSamw smb_attr_t *attr) 961da6c28aaSamw { 962da6c28aaSamw smb_node_t *unnamed_node; 963da6c28aaSamw vnode_t *unnamed_vp = NULL; 964da6c28aaSamw uint32_t status; 965da6c28aaSamw uint32_t access = 0; 966da6c28aaSamw int flags = 0; 967dc20a302Sas200622 int rc; 968da6c28aaSamw 969da6c28aaSamw ASSERT(cr); 970da6c28aaSamw ASSERT(snode); 971da6c28aaSamw ASSERT(snode->n_magic == SMB_NODE_MAGIC); 972da6c28aaSamw ASSERT(snode->n_state != SMB_NODE_STATE_DESTROYING); 973da6c28aaSamw 974743a77edSAlan Wright if (SMB_TREE_CONTAINS_NODE(sr, snode) == 0 || 975743a77edSAlan Wright SMB_TREE_HAS_ACCESS(sr, ACE_READ_ATTRIBUTES) == 0) 976da6c28aaSamw return (EACCES); 977da6c28aaSamw 978037cac00Sjoyce mcintosh /* sr could be NULL in some cases */ 979037cac00Sjoyce mcintosh if (sr && sr->fid_ofile) { 980da6c28aaSamw /* if uid and/or gid is requested */ 981da6c28aaSamw if (attr->sa_mask & (SMB_AT_UID|SMB_AT_GID)) 982da6c28aaSamw access |= READ_CONTROL; 983da6c28aaSamw 984da6c28aaSamw /* if anything else is also requested */ 985da6c28aaSamw if (attr->sa_mask & ~(SMB_AT_UID|SMB_AT_GID)) 986da6c28aaSamw access |= FILE_READ_ATTRIBUTES; 987da6c28aaSamw 988da6c28aaSamw status = smb_ofile_access(sr->fid_ofile, cr, access); 989da6c28aaSamw if (status != NT_STATUS_SUCCESS) 990da6c28aaSamw return (EACCES); 991da6c28aaSamw 992c8ec8eeaSjose borrego if (smb_tree_has_feature(sr->tid_tree, 993c8ec8eeaSjose borrego SMB_TREE_ACEMASKONACCESS)) 994da6c28aaSamw flags = ATTR_NOACLCHECK; 995da6c28aaSamw } 996da6c28aaSamw 997da6c28aaSamw unnamed_node = SMB_IS_STREAM(snode); 998da6c28aaSamw 999da6c28aaSamw if (unnamed_node) { 1000da6c28aaSamw ASSERT(unnamed_node->n_magic == SMB_NODE_MAGIC); 1001da6c28aaSamw ASSERT(unnamed_node->n_state != SMB_NODE_STATE_DESTROYING); 1002da6c28aaSamw unnamed_vp = unnamed_node->vp; 1003da6c28aaSamw } 1004da6c28aaSamw 1005dc20a302Sas200622 rc = smb_vop_getattr(snode->vp, unnamed_vp, attr, flags, cr); 10069fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States 10079fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States if ((rc == 0) && smb_node_is_dfslink(snode)) { 10089fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States /* a DFS link should be treated as a directory */ 10099fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States attr->sa_dosattr |= FILE_ATTRIBUTE_DIRECTORY; 10109fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States } 10119fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States 1012dc20a302Sas200622 return (rc); 1013da6c28aaSamw } 1014da6c28aaSamw 1015da6c28aaSamw /* 1016b1352070SAlan Wright * smb_fsop_link 1017b1352070SAlan Wright * 1018b1352070SAlan Wright * All SMB functions should use this smb_vop_link wrapper to ensure that 1019b1352070SAlan Wright * the smb_vop_link is performed with the appropriate credentials. 1020b1352070SAlan Wright * Please document any direct call to smb_vop_link to explain the reason 1021b1352070SAlan Wright * for avoiding this wrapper. 1022b1352070SAlan Wright * 1023b1352070SAlan Wright * It is assumed that references exist on from_dnode and to_dnode coming 1024b1352070SAlan Wright * into this routine. 1025b1352070SAlan Wright */ 1026b1352070SAlan Wright int 1027bbf6f00cSJordan Brown smb_fsop_link(smb_request_t *sr, cred_t *cr, smb_node_t *from_fnode, 1028bbf6f00cSJordan Brown smb_node_t *to_dnode, char *to_name) 1029b1352070SAlan Wright { 1030b1352070SAlan Wright char *longname = NULL; 1031b1352070SAlan Wright int flags = 0; 1032b1352070SAlan Wright int rc; 1033b1352070SAlan Wright 1034b1352070SAlan Wright ASSERT(sr); 1035b1352070SAlan Wright ASSERT(sr->tid_tree); 1036b1352070SAlan Wright ASSERT(cr); 1037b1352070SAlan Wright ASSERT(to_dnode); 1038b1352070SAlan Wright ASSERT(to_dnode->n_magic == SMB_NODE_MAGIC); 1039b1352070SAlan Wright ASSERT(to_dnode->n_state != SMB_NODE_STATE_DESTROYING); 1040b1352070SAlan Wright ASSERT(from_fnode); 1041b1352070SAlan Wright ASSERT(from_fnode->n_magic == SMB_NODE_MAGIC); 1042b1352070SAlan Wright ASSERT(from_fnode->n_state != SMB_NODE_STATE_DESTROYING); 1043b1352070SAlan Wright 1044b1352070SAlan Wright if (SMB_TREE_CONTAINS_NODE(sr, from_fnode) == 0) 1045b1352070SAlan Wright return (EACCES); 1046b1352070SAlan Wright 1047b1352070SAlan Wright if (SMB_TREE_CONTAINS_NODE(sr, to_dnode) == 0) 1048b1352070SAlan Wright return (EACCES); 1049b1352070SAlan Wright 1050b1352070SAlan Wright if (SMB_TREE_IS_READONLY(sr)) 1051b1352070SAlan Wright return (EROFS); 1052b1352070SAlan Wright 1053b1352070SAlan Wright if (SMB_TREE_IS_CASEINSENSITIVE(sr)) 1054b1352070SAlan Wright flags = SMB_IGNORE_CASE; 1055b1352070SAlan Wright if (SMB_TREE_SUPPORTS_CATIA(sr)) 1056b1352070SAlan Wright flags |= SMB_CATIA; 1057e3f2c991SKeyur Desai if (SMB_TREE_SUPPORTS_ABE(sr)) 1058e3f2c991SKeyur Desai flags |= SMB_ABE; 1059b1352070SAlan Wright 1060cb174861Sjoyce mcintosh if (SMB_TREE_SUPPORTS_SHORTNAMES(sr) && smb_maybe_mangled(to_name)) { 1061b1352070SAlan Wright longname = kmem_alloc(MAXNAMELEN, KM_SLEEP); 1062148c5f43SAlan Wright rc = smb_unmangle(to_dnode, to_name, longname, 1063148c5f43SAlan Wright MAXNAMELEN, flags); 1064b1352070SAlan Wright kmem_free(longname, MAXNAMELEN); 1065b1352070SAlan Wright 1066b1352070SAlan Wright if (rc == 0) 1067b1352070SAlan Wright rc = EEXIST; 1068b1352070SAlan Wright if (rc != ENOENT) 1069b1352070SAlan Wright return (rc); 1070b1352070SAlan Wright } 1071b1352070SAlan Wright 1072b1352070SAlan Wright rc = smb_vop_link(to_dnode->vp, from_fnode->vp, to_name, flags, cr); 10739fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States 1074b819cea2SGordon Ross if (rc == 0) 1075b819cea2SGordon Ross smb_node_notify_change(to_dnode, FILE_ACTION_ADDED, to_name); 10769fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States 1077b1352070SAlan Wright return (rc); 1078b1352070SAlan Wright } 1079b1352070SAlan Wright 1080b1352070SAlan Wright /* 1081da6c28aaSamw * smb_fsop_rename 1082da6c28aaSamw * 1083da6c28aaSamw * All SMB functions should use this smb_vop_rename wrapper to ensure that 1084da6c28aaSamw * the smb_vop_rename is performed with the appropriate credentials. 1085da6c28aaSamw * Please document any direct call to smb_vop_rename to explain the reason 1086da6c28aaSamw * for avoiding this wrapper. 1087da6c28aaSamw * 1088eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States * It is assumed that references exist on from_dnode and to_dnode coming 1089da6c28aaSamw * into this routine. 1090da6c28aaSamw */ 1091da6c28aaSamw int 1092da6c28aaSamw smb_fsop_rename( 1093faa1795aSjb150015 smb_request_t *sr, 1094da6c28aaSamw cred_t *cr, 1095eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States smb_node_t *from_dnode, 1096da6c28aaSamw char *from_name, 1097eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States smb_node_t *to_dnode, 1098da6c28aaSamw char *to_name) 1099da6c28aaSamw { 1100da6c28aaSamw smb_node_t *from_snode; 11019fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States smb_attr_t from_attr; 1102da6c28aaSamw vnode_t *from_vp; 11038b2cc8acSafshin salek ardakani - Sun Microsystems - Irvine United States int flags = 0, ret_flags; 1104da6c28aaSamw int rc; 1105743a77edSAlan Wright boolean_t isdir; 1106da6c28aaSamw 1107da6c28aaSamw ASSERT(cr); 1108eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States ASSERT(from_dnode); 1109eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States ASSERT(from_dnode->n_magic == SMB_NODE_MAGIC); 1110eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States ASSERT(from_dnode->n_state != SMB_NODE_STATE_DESTROYING); 1111da6c28aaSamw 1112eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States ASSERT(to_dnode); 1113eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States ASSERT(to_dnode->n_magic == SMB_NODE_MAGIC); 1114eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States ASSERT(to_dnode->n_state != SMB_NODE_STATE_DESTROYING); 1115da6c28aaSamw 1116eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States if (SMB_TREE_CONTAINS_NODE(sr, from_dnode) == 0) 1117da6c28aaSamw return (EACCES); 1118da6c28aaSamw 1119eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States if (SMB_TREE_CONTAINS_NODE(sr, to_dnode) == 0) 1120da6c28aaSamw return (EACCES); 1121da6c28aaSamw 1122da6c28aaSamw ASSERT(sr); 1123da6c28aaSamw ASSERT(sr->tid_tree); 1124c8ec8eeaSjose borrego if (SMB_TREE_IS_READONLY(sr)) 1125da6c28aaSamw return (EROFS); 1126da6c28aaSamw 1127da6c28aaSamw /* 1128c8ec8eeaSjose borrego * Note: There is no need to check SMB_TREE_IS_CASEINSENSITIVE 1129da6c28aaSamw * here. 1130da6c28aaSamw * 1131da6c28aaSamw * A case-sensitive rename is always done in this routine 1132da6c28aaSamw * because we are using the on-disk name from an earlier lookup. 1133da6c28aaSamw * If a mangled name was passed in by the caller (denoting a 1134da6c28aaSamw * deterministic lookup), then the exact file must be renamed 1135da6c28aaSamw * (i.e. SMB_IGNORE_CASE must not be passed to VOP_RENAME, or 1136da6c28aaSamw * else the underlying file system might return a "first-match" 1137da6c28aaSamw * on this on-disk name, possibly resulting in the wrong file). 1138da6c28aaSamw */ 1139da6c28aaSamw 11408b2cc8acSafshin salek ardakani - Sun Microsystems - Irvine United States if (SMB_TREE_SUPPORTS_CATIA(sr)) 11418b2cc8acSafshin salek ardakani - Sun Microsystems - Irvine United States flags |= SMB_CATIA; 11428b2cc8acSafshin salek ardakani - Sun Microsystems - Irvine United States 1143da6c28aaSamw /* 1144da6c28aaSamw * XXX: Lock required through smb_node_release() below? 1145da6c28aaSamw */ 1146da6c28aaSamw 1147eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States rc = smb_vop_lookup(from_dnode->vp, from_name, &from_vp, NULL, 11489fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States flags, &ret_flags, NULL, &from_attr, cr); 1149da6c28aaSamw 1150da6c28aaSamw if (rc != 0) 1151da6c28aaSamw return (rc); 1152da6c28aaSamw 11539fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States if (from_attr.sa_dosattr & FILE_ATTRIBUTE_REPARSE_POINT) { 11549fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States VN_RELE(from_vp); 11559fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States return (EACCES); 11569fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States } 11579fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States 11589fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States isdir = ((from_attr.sa_dosattr & FILE_ATTRIBUTE_DIRECTORY) != 0); 1159743a77edSAlan Wright 1160743a77edSAlan Wright if ((isdir && SMB_TREE_HAS_ACCESS(sr, 1161743a77edSAlan Wright ACE_DELETE_CHILD | ACE_ADD_SUBDIRECTORY) != 1162743a77edSAlan Wright (ACE_DELETE_CHILD | ACE_ADD_SUBDIRECTORY)) || 1163743a77edSAlan Wright (!isdir && SMB_TREE_HAS_ACCESS(sr, ACE_DELETE | ACE_ADD_FILE) != 11649fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States (ACE_DELETE | ACE_ADD_FILE))) { 11659fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States VN_RELE(from_vp); 1166743a77edSAlan Wright return (EACCES); 11679fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States } 1168743a77edSAlan Wright 1169bbf6f00cSJordan Brown /* 1170bbf6f00cSJordan Brown * SMB checks access on open and retains an access granted 1171bbf6f00cSJordan Brown * mask for use while the file is open. ACL changes should 1172bbf6f00cSJordan Brown * not affect access to an open file. 1173bbf6f00cSJordan Brown * 1174bbf6f00cSJordan Brown * If the rename is being performed on an ofile: 1175bbf6f00cSJordan Brown * - Check the ofile's access granted mask to see if the 1176bbf6f00cSJordan Brown * rename is permitted - requires DELETE access. 1177bbf6f00cSJordan Brown * - If the file system does access checking, set the 1178bbf6f00cSJordan Brown * ATTR_NOACLCHECK flag to ensure that the file system 1179bbf6f00cSJordan Brown * does not check permissions on subsequent calls. 1180bbf6f00cSJordan Brown */ 1181bbf6f00cSJordan Brown if (sr && sr->fid_ofile) { 1182bbf6f00cSJordan Brown rc = smb_ofile_access(sr->fid_ofile, cr, DELETE); 11839fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States if (rc != NT_STATUS_SUCCESS) { 11849fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States VN_RELE(from_vp); 1185bbf6f00cSJordan Brown return (EACCES); 11869fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States } 1187bbf6f00cSJordan Brown 1188bbf6f00cSJordan Brown if (smb_tree_has_feature(sr->tid_tree, 1189bbf6f00cSJordan Brown SMB_TREE_ACEMASKONACCESS)) 1190bbf6f00cSJordan Brown flags = ATTR_NOACLCHECK; 1191bbf6f00cSJordan Brown } 1192bbf6f00cSJordan Brown 1193eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States rc = smb_vop_rename(from_dnode->vp, from_name, to_dnode->vp, 1194dc20a302Sas200622 to_name, flags, cr); 1195da6c28aaSamw 1196da6c28aaSamw if (rc == 0) { 1197da6c28aaSamw from_snode = smb_node_lookup(sr, NULL, cr, from_vp, from_name, 1198037cac00Sjoyce mcintosh from_dnode, NULL); 1199da6c28aaSamw 1200da6c28aaSamw if (from_snode == NULL) { 12017f667e74Sjose borrego rc = ENOMEM; 1202da6c28aaSamw } else { 1203eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States smb_node_rename(from_dnode, from_snode, 1204eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States to_dnode, to_name); 12057f667e74Sjose borrego smb_node_release(from_snode); 1206da6c28aaSamw } 12077f667e74Sjose borrego } 12087f667e74Sjose borrego VN_RELE(from_vp); 1209da6c28aaSamw 1210b819cea2SGordon Ross if (rc == 0) { 1211b819cea2SGordon Ross if (from_dnode == to_dnode) { 1212b819cea2SGordon Ross smb_node_notify_change(from_dnode, 1213b819cea2SGordon Ross FILE_ACTION_RENAMED_OLD_NAME, from_name); 1214b819cea2SGordon Ross smb_node_notify_change(to_dnode, 1215b819cea2SGordon Ross FILE_ACTION_RENAMED_NEW_NAME, to_name); 1216b819cea2SGordon Ross } else { 1217b819cea2SGordon Ross smb_node_notify_change(from_dnode, 1218b819cea2SGordon Ross FILE_ACTION_REMOVED, from_name); 1219b819cea2SGordon Ross smb_node_notify_change(to_dnode, 1220b819cea2SGordon Ross FILE_ACTION_ADDED, to_name); 1221b819cea2SGordon Ross } 1222b819cea2SGordon Ross } 12239fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States 1224da6c28aaSamw /* XXX: unlock */ 1225da6c28aaSamw 1226da6c28aaSamw return (rc); 1227da6c28aaSamw } 1228da6c28aaSamw 1229da6c28aaSamw /* 1230da6c28aaSamw * smb_fsop_setattr 1231da6c28aaSamw * 1232da6c28aaSamw * All SMB functions should use this wrapper to ensure that 1233da6c28aaSamw * the the calls are performed with the appropriate credentials. 1234da6c28aaSamw * Please document any direct call to explain the reason 1235da6c28aaSamw * for avoiding this wrapper. 1236da6c28aaSamw * 1237e3f2c991SKeyur Desai * It is assumed that a reference exists on snode coming into 1238e3f2c991SKeyur Desai * this function. 1239da6c28aaSamw * A null smb_request might be passed to this function. 1240da6c28aaSamw */ 1241da6c28aaSamw int 1242da6c28aaSamw smb_fsop_setattr( 1243da6c28aaSamw smb_request_t *sr, 1244da6c28aaSamw cred_t *cr, 1245da6c28aaSamw smb_node_t *snode, 1246037cac00Sjoyce mcintosh smb_attr_t *set_attr) 1247da6c28aaSamw { 1248da6c28aaSamw smb_node_t *unnamed_node; 1249da6c28aaSamw vnode_t *unnamed_vp = NULL; 1250da6c28aaSamw uint32_t status; 12512c1b14e5Sjose borrego uint32_t access; 1252da6c28aaSamw int rc = 0; 1253da6c28aaSamw int flags = 0; 12542c1b14e5Sjose borrego uint_t sa_mask; 1255da6c28aaSamw 1256da6c28aaSamw ASSERT(cr); 1257da6c28aaSamw ASSERT(snode); 1258da6c28aaSamw ASSERT(snode->n_magic == SMB_NODE_MAGIC); 1259da6c28aaSamw ASSERT(snode->n_state != SMB_NODE_STATE_DESTROYING); 1260da6c28aaSamw 1261c8ec8eeaSjose borrego if (SMB_TREE_CONTAINS_NODE(sr, snode) == 0) 1262da6c28aaSamw return (EACCES); 1263da6c28aaSamw 1264c8ec8eeaSjose borrego if (SMB_TREE_IS_READONLY(sr)) 1265da6c28aaSamw return (EROFS); 1266da6c28aaSamw 1267743a77edSAlan Wright if (SMB_TREE_HAS_ACCESS(sr, 1268743a77edSAlan Wright ACE_WRITE_ATTRIBUTES | ACE_WRITE_NAMED_ATTRS) == 0) 1269743a77edSAlan Wright return (EACCES); 1270743a77edSAlan Wright 1271e3f2c991SKeyur Desai /* 1272e3f2c991SKeyur Desai * SMB checks access on open and retains an access granted 1273e3f2c991SKeyur Desai * mask for use while the file is open. ACL changes should 1274e3f2c991SKeyur Desai * not affect access to an open file. 1275e3f2c991SKeyur Desai * 1276e3f2c991SKeyur Desai * If the setattr is being performed on an ofile: 1277e3f2c991SKeyur Desai * - Check the ofile's access granted mask to see if the 1278e3f2c991SKeyur Desai * setattr is permitted. 1279e3f2c991SKeyur Desai * UID, GID - require WRITE_OWNER 1280e3f2c991SKeyur Desai * SIZE, ALLOCSZ - require FILE_WRITE_DATA 1281e3f2c991SKeyur Desai * all other attributes require FILE_WRITE_ATTRIBUTES 1282e3f2c991SKeyur Desai * 1283e3f2c991SKeyur Desai * - If the file system does access checking, set the 1284e3f2c991SKeyur Desai * ATTR_NOACLCHECK flag to ensure that the file system 1285e3f2c991SKeyur Desai * does not check permissions on subsequent calls. 1286e3f2c991SKeyur Desai */ 1287da6c28aaSamw if (sr && sr->fid_ofile) { 12882c1b14e5Sjose borrego sa_mask = set_attr->sa_mask; 12892c1b14e5Sjose borrego access = 0; 1290c8ec8eeaSjose borrego 1291e3f2c991SKeyur Desai if (sa_mask & (SMB_AT_SIZE | SMB_AT_ALLOCSZ)) { 12922c1b14e5Sjose borrego access |= FILE_WRITE_DATA; 1293e3f2c991SKeyur Desai sa_mask &= ~(SMB_AT_SIZE | SMB_AT_ALLOCSZ); 12942c1b14e5Sjose borrego } 12952c1b14e5Sjose borrego 12962c1b14e5Sjose borrego if (sa_mask & (SMB_AT_UID|SMB_AT_GID)) { 1297da6c28aaSamw access |= WRITE_OWNER; 12982c1b14e5Sjose borrego sa_mask &= ~(SMB_AT_UID|SMB_AT_GID); 12992c1b14e5Sjose borrego } 1300da6c28aaSamw 13012c1b14e5Sjose borrego if (sa_mask) 1302da6c28aaSamw access |= FILE_WRITE_ATTRIBUTES; 1303da6c28aaSamw 1304da6c28aaSamw status = smb_ofile_access(sr->fid_ofile, cr, access); 1305da6c28aaSamw if (status != NT_STATUS_SUCCESS) 1306da6c28aaSamw return (EACCES); 1307da6c28aaSamw 1308c8ec8eeaSjose borrego if (smb_tree_has_feature(sr->tid_tree, 1309c8ec8eeaSjose borrego SMB_TREE_ACEMASKONACCESS)) 1310da6c28aaSamw flags = ATTR_NOACLCHECK; 1311da6c28aaSamw } 1312da6c28aaSamw 1313da6c28aaSamw unnamed_node = SMB_IS_STREAM(snode); 1314da6c28aaSamw 1315da6c28aaSamw if (unnamed_node) { 1316da6c28aaSamw ASSERT(unnamed_node->n_magic == SMB_NODE_MAGIC); 1317da6c28aaSamw ASSERT(unnamed_node->n_state != SMB_NODE_STATE_DESTROYING); 1318da6c28aaSamw unnamed_vp = unnamed_node->vp; 1319da6c28aaSamw } 1320da6c28aaSamw 13219660e5cbSJanice Chang rc = smb_vop_setattr(snode->vp, unnamed_vp, set_attr, flags, cr); 1322da6c28aaSamw return (rc); 1323da6c28aaSamw } 1324da6c28aaSamw 1325da6c28aaSamw /* 1326a90cf9f2SGordon Ross * Support for SMB2 setinfo FileValidDataLengthInformation. 132755f0a249SGordon Ross * Free (zero out) data in the range off, off+len 1328a90cf9f2SGordon Ross */ 1329a90cf9f2SGordon Ross int 133055f0a249SGordon Ross smb_fsop_freesp( 1331a90cf9f2SGordon Ross smb_request_t *sr, 1332a90cf9f2SGordon Ross cred_t *cr, 133355f0a249SGordon Ross smb_ofile_t *ofile, 133455f0a249SGordon Ross off64_t off, 133555f0a249SGordon Ross off64_t len) 1336a90cf9f2SGordon Ross { 1337a90cf9f2SGordon Ross flock64_t flk; 133855f0a249SGordon Ross smb_node_t *node = ofile->f_node; 1339a90cf9f2SGordon Ross uint32_t status; 1340a90cf9f2SGordon Ross uint32_t access = FILE_WRITE_DATA; 1341a90cf9f2SGordon Ross int rc; 1342a90cf9f2SGordon Ross 1343a90cf9f2SGordon Ross ASSERT(cr); 1344a90cf9f2SGordon Ross ASSERT(node); 1345a90cf9f2SGordon Ross ASSERT(node->n_magic == SMB_NODE_MAGIC); 1346a90cf9f2SGordon Ross ASSERT(node->n_state != SMB_NODE_STATE_DESTROYING); 1347a90cf9f2SGordon Ross 1348a90cf9f2SGordon Ross if (SMB_TREE_CONTAINS_NODE(sr, node) == 0) 1349a90cf9f2SGordon Ross return (EACCES); 1350a90cf9f2SGordon Ross 1351a90cf9f2SGordon Ross if (SMB_TREE_IS_READONLY(sr)) 1352a90cf9f2SGordon Ross return (EROFS); 1353a90cf9f2SGordon Ross 1354a90cf9f2SGordon Ross if (SMB_TREE_HAS_ACCESS(sr, access) == 0) 1355a90cf9f2SGordon Ross return (EACCES); 1356a90cf9f2SGordon Ross 1357a90cf9f2SGordon Ross /* 1358a90cf9f2SGordon Ross * SMB checks access on open and retains an access granted 1359a90cf9f2SGordon Ross * mask for use while the file is open. ACL changes should 1360a90cf9f2SGordon Ross * not affect access to an open file. 1361a90cf9f2SGordon Ross * 1362a90cf9f2SGordon Ross * If the setattr is being performed on an ofile: 1363a90cf9f2SGordon Ross * - Check the ofile's access granted mask to see if this 1364a90cf9f2SGordon Ross * modification should be permitted (FILE_WRITE_DATA) 1365a90cf9f2SGordon Ross */ 1366a90cf9f2SGordon Ross status = smb_ofile_access(sr->fid_ofile, cr, access); 1367a90cf9f2SGordon Ross if (status != NT_STATUS_SUCCESS) 1368a90cf9f2SGordon Ross return (EACCES); 1369a90cf9f2SGordon Ross 1370a90cf9f2SGordon Ross bzero(&flk, sizeof (flk)); 137155f0a249SGordon Ross flk.l_start = off; 137255f0a249SGordon Ross flk.l_len = len; 1373a90cf9f2SGordon Ross 1374a90cf9f2SGordon Ross rc = smb_vop_space(node->vp, F_FREESP, &flk, FWRITE, 0LL, cr); 1375a90cf9f2SGordon Ross return (rc); 1376a90cf9f2SGordon Ross } 1377a90cf9f2SGordon Ross 1378a90cf9f2SGordon Ross /* 1379da6c28aaSamw * smb_fsop_read 1380da6c28aaSamw * 1381da6c28aaSamw * All SMB functions should use this wrapper to ensure that 1382da6c28aaSamw * the the calls are performed with the appropriate credentials. 1383da6c28aaSamw * Please document any direct call to explain the reason 1384da6c28aaSamw * for avoiding this wrapper. 1385da6c28aaSamw * 1386da6c28aaSamw * It is assumed that a reference exists on snode coming into this routine. 138755f0a249SGordon Ross * Note that ofile may be different from sr->fid_ofile, or may be NULL. 1388da6c28aaSamw */ 1389da6c28aaSamw int 139055f0a249SGordon Ross smb_fsop_read(smb_request_t *sr, cred_t *cr, smb_node_t *snode, 1391dfa42fabSMatt Barden smb_ofile_t *ofile, uio_t *uio, int ioflag) 1392da6c28aaSamw { 1393c8ec8eeaSjose borrego caller_context_t ct; 13948622ec45SGordon Ross cred_t *kcr = zone_kcred(); 139555f0a249SGordon Ross uint32_t amask; 1396dc20a302Sas200622 int svmand; 1397da6c28aaSamw int rc; 1398da6c28aaSamw 1399da6c28aaSamw ASSERT(cr); 1400da6c28aaSamw ASSERT(snode); 1401da6c28aaSamw ASSERT(snode->n_magic == SMB_NODE_MAGIC); 1402da6c28aaSamw ASSERT(snode->n_state != SMB_NODE_STATE_DESTROYING); 1403da6c28aaSamw 1404da6c28aaSamw ASSERT(sr); 1405da6c28aaSamw 140655f0a249SGordon Ross if (ofile != NULL) { 140755f0a249SGordon Ross /* 140855f0a249SGordon Ross * Check tree access. Not SMB_TREE_HAS_ACCESS 140955f0a249SGordon Ross * because we need to use ofile->f_tree 141055f0a249SGordon Ross */ 141155f0a249SGordon Ross if ((ofile->f_tree->t_access & ACE_READ_DATA) == 0) 1412743a77edSAlan Wright return (EACCES); 1413743a77edSAlan Wright 141455f0a249SGordon Ross /* 141555f0a249SGordon Ross * Check ofile access. Use in-line smb_ofile_access 141655f0a249SGordon Ross * so we can check both amask bits at the same time. 141755f0a249SGordon Ross * If any bit in amask is granted, allow this read. 141855f0a249SGordon Ross */ 141955f0a249SGordon Ross amask = FILE_READ_DATA; 142055f0a249SGordon Ross if (sr->smb_flg2 & SMB_FLAGS2_READ_IF_EXECUTE) 142155f0a249SGordon Ross amask |= FILE_EXECUTE; 142255f0a249SGordon Ross if (cr != kcr && (ofile->f_granted_access & amask) == 0) 1423da6c28aaSamw return (EACCES); 142455f0a249SGordon Ross } 1425da6c28aaSamw 1426da6c28aaSamw /* 1427da6c28aaSamw * Streams permission are checked against the unnamed stream, 1428da6c28aaSamw * but in FS level they have their own permissions. To avoid 1429da6c28aaSamw * rejection by FS due to lack of permission on the actual 1430da6c28aaSamw * extended attr kcred is passed for streams. 1431da6c28aaSamw */ 1432037cac00Sjoyce mcintosh if (SMB_IS_STREAM(snode)) 14338622ec45SGordon Ross cr = kcr; 1434da6c28aaSamw 1435dc20a302Sas200622 smb_node_start_crit(snode, RW_READER); 14368622ec45SGordon Ross rc = nbl_svmand(snode->vp, kcr, &svmand); 1437dc20a302Sas200622 if (rc) { 1438dc20a302Sas200622 smb_node_end_crit(snode); 1439dc20a302Sas200622 return (rc); 1440dc20a302Sas200622 } 1441da6c28aaSamw 14420897f7fbSGordon Ross /* 14430897f7fbSGordon Ross * Note: SMB allows a zero-byte read, which should not 14440897f7fbSGordon Ross * conflict with any locks. However nbl_lock_conflict 14450897f7fbSGordon Ross * takes a zero-byte length as lock to EOF, so we must 14460897f7fbSGordon Ross * special case that here. 14470897f7fbSGordon Ross */ 14480897f7fbSGordon Ross if (uio->uio_resid > 0) { 1449c8ec8eeaSjose borrego ct = smb_ct; 145055f0a249SGordon Ross if (ofile != NULL) 145155f0a249SGordon Ross ct.cc_pid = ofile->f_uniqid; 1452dc20a302Sas200622 rc = nbl_lock_conflict(snode->vp, NBL_READ, uio->uio_loffset, 14530897f7fbSGordon Ross uio->uio_resid, svmand, &ct); 14540897f7fbSGordon Ross if (rc != 0) { 1455dc20a302Sas200622 smb_node_end_crit(snode); 14566537f381Sas200622 return (ERANGE); 1457dc20a302Sas200622 } 14580897f7fbSGordon Ross } 1459037cac00Sjoyce mcintosh 1460dfa42fabSMatt Barden rc = smb_vop_read(snode->vp, uio, ioflag, cr); 1461dc20a302Sas200622 smb_node_end_crit(snode); 1462da6c28aaSamw 1463da6c28aaSamw return (rc); 1464da6c28aaSamw } 1465da6c28aaSamw 1466da6c28aaSamw /* 1467da6c28aaSamw * smb_fsop_write 1468da6c28aaSamw * 1469da6c28aaSamw * It is assumed that a reference exists on snode coming into this routine. 147055f0a249SGordon Ross * Note that ofile may be different from sr->fid_ofile, or may be NULL. 1471da6c28aaSamw */ 1472da6c28aaSamw int 1473da6c28aaSamw smb_fsop_write( 1474faa1795aSjb150015 smb_request_t *sr, 1475da6c28aaSamw cred_t *cr, 1476da6c28aaSamw smb_node_t *snode, 147755f0a249SGordon Ross smb_ofile_t *ofile, 1478da6c28aaSamw uio_t *uio, 1479da6c28aaSamw uint32_t *lcount, 14803db3f65cSamw int ioflag) 1481da6c28aaSamw { 1482c8ec8eeaSjose borrego caller_context_t ct; 14835fd03bc0SGordon Ross smb_attr_t attr; 148455f0a249SGordon Ross cred_t *kcr = zone_kcred(); 14855fd03bc0SGordon Ross smb_node_t *u_node; 14865fd03bc0SGordon Ross vnode_t *u_vp = NULL; 14875fd03bc0SGordon Ross vnode_t *vp; 148855f0a249SGordon Ross uint32_t amask; 1489dc20a302Sas200622 int svmand; 1490da6c28aaSamw int rc; 1491da6c28aaSamw 1492da6c28aaSamw ASSERT(cr); 1493da6c28aaSamw ASSERT(snode); 1494da6c28aaSamw ASSERT(snode->n_magic == SMB_NODE_MAGIC); 1495da6c28aaSamw ASSERT(snode->n_state != SMB_NODE_STATE_DESTROYING); 1496da6c28aaSamw 1497da6c28aaSamw ASSERT(sr); 14985fd03bc0SGordon Ross vp = snode->vp; 1499da6c28aaSamw 150055f0a249SGordon Ross if (ofile != NULL) { 150155f0a249SGordon Ross amask = FILE_WRITE_DATA | FILE_APPEND_DATA; 150255f0a249SGordon Ross 150355f0a249SGordon Ross /* Check tree access. */ 150455f0a249SGordon Ross if ((ofile->f_tree->t_access & amask) == 0) 1505da6c28aaSamw return (EROFS); 1506dc20a302Sas200622 150755f0a249SGordon Ross /* 150855f0a249SGordon Ross * Check ofile access. Use in-line smb_ofile_access 150955f0a249SGordon Ross * so we can check both amask bits at the same time. 151055f0a249SGordon Ross * If any bit in amask is granted, allow this write. 151155f0a249SGordon Ross */ 151255f0a249SGordon Ross if (cr != kcr && (ofile->f_granted_access & amask) == 0) 1513da6c28aaSamw return (EACCES); 1514dc20a302Sas200622 } 1515da6c28aaSamw 1516da6c28aaSamw /* 1517da6c28aaSamw * Streams permission are checked against the unnamed stream, 1518da6c28aaSamw * but in FS level they have their own permissions. To avoid 1519da6c28aaSamw * rejection by FS due to lack of permission on the actual 1520da6c28aaSamw * extended attr kcred is passed for streams. 1521da6c28aaSamw */ 15225fd03bc0SGordon Ross u_node = SMB_IS_STREAM(snode); 15235fd03bc0SGordon Ross if (u_node != NULL) { 15245fd03bc0SGordon Ross ASSERT(u_node->n_magic == SMB_NODE_MAGIC); 15255fd03bc0SGordon Ross ASSERT(u_node->n_state != SMB_NODE_STATE_DESTROYING); 15265fd03bc0SGordon Ross u_vp = u_node->vp; 15278622ec45SGordon Ross cr = kcr; 15285fd03bc0SGordon Ross } 1529da6c28aaSamw 15305fd03bc0SGordon Ross smb_node_start_crit(snode, RW_WRITER); 15318622ec45SGordon Ross rc = nbl_svmand(vp, kcr, &svmand); 1532dc20a302Sas200622 if (rc) { 1533dc20a302Sas200622 smb_node_end_crit(snode); 1534dc20a302Sas200622 return (rc); 1535dc20a302Sas200622 } 1536c8ec8eeaSjose borrego 15370897f7fbSGordon Ross /* 15380897f7fbSGordon Ross * Note: SMB allows a zero-byte write, which should not 15390897f7fbSGordon Ross * conflict with any locks. However nbl_lock_conflict 15400897f7fbSGordon Ross * takes a zero-byte length as lock to EOF, so we must 15410897f7fbSGordon Ross * special case that here. 15420897f7fbSGordon Ross */ 15430897f7fbSGordon Ross if (uio->uio_resid > 0) { 1544c8ec8eeaSjose borrego ct = smb_ct; 154555f0a249SGordon Ross if (ofile != NULL) 154655f0a249SGordon Ross ct.cc_pid = ofile->f_uniqid; 15475fd03bc0SGordon Ross rc = nbl_lock_conflict(vp, NBL_WRITE, uio->uio_loffset, 15480897f7fbSGordon Ross uio->uio_resid, svmand, &ct); 15490897f7fbSGordon Ross if (rc != 0) { 1550dc20a302Sas200622 smb_node_end_crit(snode); 15516537f381Sas200622 return (ERANGE); 1552dc20a302Sas200622 } 15530897f7fbSGordon Ross } 1554037cac00Sjoyce mcintosh 15555fd03bc0SGordon Ross rc = smb_vop_write(vp, uio, ioflag, lcount, cr); 15565fd03bc0SGordon Ross 15575fd03bc0SGordon Ross /* 15585fd03bc0SGordon Ross * Once the mtime has been set via this ofile, the 15595fd03bc0SGordon Ross * automatic mtime changes from writes via this ofile 15605fd03bc0SGordon Ross * should cease, preserving the mtime that was set. 15615fd03bc0SGordon Ross * See: [MS-FSA] 2.1.5.14 and smb_node_setattr. 15625fd03bc0SGordon Ross * 15635fd03bc0SGordon Ross * The VFS interface does not offer a way to ask it to 15645fd03bc0SGordon Ross * skip the mtime updates, so we simulate the desired 15655fd03bc0SGordon Ross * behavior by re-setting the mtime after writes on a 15665fd03bc0SGordon Ross * handle where the mtime has been set. 15675fd03bc0SGordon Ross */ 156855f0a249SGordon Ross if (ofile != NULL && 156955f0a249SGordon Ross (ofile->f_pending_attr.sa_mask & SMB_AT_MTIME) != 0) { 157055f0a249SGordon Ross bcopy(&ofile->f_pending_attr, &attr, sizeof (attr)); 15715fd03bc0SGordon Ross attr.sa_mask = SMB_AT_MTIME; 15728622ec45SGordon Ross (void) smb_vop_setattr(vp, u_vp, &attr, 0, kcr); 15735fd03bc0SGordon Ross } 15745fd03bc0SGordon Ross 1575dc20a302Sas200622 smb_node_end_crit(snode); 1576da6c28aaSamw 1577da6c28aaSamw return (rc); 1578da6c28aaSamw } 1579da6c28aaSamw 1580da6c28aaSamw /* 158155f0a249SGordon Ross * Find the next allocated range starting at or after 158255f0a249SGordon Ross * the offset (*datap), returning the start/end of 158355f0a249SGordon Ross * that range in (*datap, *holep) 158455f0a249SGordon Ross */ 158555f0a249SGordon Ross int 158655f0a249SGordon Ross smb_fsop_next_alloc_range( 158755f0a249SGordon Ross cred_t *cr, 158855f0a249SGordon Ross smb_node_t *node, 158955f0a249SGordon Ross off64_t *datap, 159055f0a249SGordon Ross off64_t *holep) 159155f0a249SGordon Ross { 159255f0a249SGordon Ross int err; 159355f0a249SGordon Ross 159455f0a249SGordon Ross err = smb_vop_ioctl(node->vp, _FIO_SEEK_DATA, datap, cr); 159555f0a249SGordon Ross if (err != 0) 159655f0a249SGordon Ross return (err); 159755f0a249SGordon Ross 159855f0a249SGordon Ross *holep = *datap; 159955f0a249SGordon Ross err = smb_vop_ioctl(node->vp, _FIO_SEEK_HOLE, holep, cr); 160055f0a249SGordon Ross 160155f0a249SGordon Ross return (err); 160255f0a249SGordon Ross } 160355f0a249SGordon Ross 160455f0a249SGordon Ross /* 1605da6c28aaSamw * smb_fsop_statfs 1606da6c28aaSamw * 1607da6c28aaSamw * This is a wrapper function used for stat operations. 1608da6c28aaSamw */ 1609da6c28aaSamw int 1610da6c28aaSamw smb_fsop_statfs( 1611da6c28aaSamw cred_t *cr, 1612da6c28aaSamw smb_node_t *snode, 1613da6c28aaSamw struct statvfs64 *statp) 1614da6c28aaSamw { 1615da6c28aaSamw ASSERT(cr); 1616da6c28aaSamw ASSERT(snode); 1617da6c28aaSamw ASSERT(snode->n_magic == SMB_NODE_MAGIC); 1618da6c28aaSamw ASSERT(snode->n_state != SMB_NODE_STATE_DESTROYING); 1619da6c28aaSamw 1620da6c28aaSamw return (smb_vop_statfs(snode->vp, statp, cr)); 1621da6c28aaSamw } 1622da6c28aaSamw 1623da6c28aaSamw /* 1624da6c28aaSamw * smb_fsop_access 1625ee60c47bSjm199354 * 1626ee60c47bSjm199354 * Named streams do not have separate permissions from the associated 1627ee60c47bSjm199354 * unnamed stream. Thus, if node is a named stream, the permissions 1628ee60c47bSjm199354 * check will be performed on the associated unnamed stream. 1629ee60c47bSjm199354 * 1630ee60c47bSjm199354 * However, our named streams do have their own quarantine attribute, 1631ee60c47bSjm199354 * separate from that on the unnamed stream. If READ or EXECUTE 1632ee60c47bSjm199354 * access has been requested on a named stream, an additional access 1633ee60c47bSjm199354 * check is performed on the named stream in case it has been 1634ee60c47bSjm199354 * quarantined. kcred is used to avoid issues with the permissions 1635ee60c47bSjm199354 * set on the extended attribute file representing the named stream. 16368d94f651SGordon Ross * 16378d94f651SGordon Ross * Note that some stream "types" are "restricted" and only 16388d94f651SGordon Ross * internal callers (cr == kcred) can access those. 1639da6c28aaSamw */ 1640da6c28aaSamw int 1641da6c28aaSamw smb_fsop_access(smb_request_t *sr, cred_t *cr, smb_node_t *snode, 1642da6c28aaSamw uint32_t faccess) 1643da6c28aaSamw { 1644da6c28aaSamw int access = 0; 1645da6c28aaSamw int error; 1646da6c28aaSamw vnode_t *dir_vp; 1647da6c28aaSamw boolean_t acl_check = B_TRUE; 1648da6c28aaSamw smb_node_t *unnamed_node; 1649da6c28aaSamw 1650c8ec8eeaSjose borrego ASSERT(sr); 1651da6c28aaSamw ASSERT(cr); 1652da6c28aaSamw ASSERT(snode); 1653da6c28aaSamw ASSERT(snode->n_magic == SMB_NODE_MAGIC); 1654da6c28aaSamw ASSERT(snode->n_state != SMB_NODE_STATE_DESTROYING); 1655da6c28aaSamw 1656c8ec8eeaSjose borrego if (SMB_TREE_IS_READONLY(sr)) { 1657da6c28aaSamw if (faccess & (FILE_WRITE_DATA|FILE_APPEND_DATA| 1658da6c28aaSamw FILE_WRITE_EA|FILE_DELETE_CHILD|FILE_WRITE_ATTRIBUTES| 1659da6c28aaSamw DELETE|WRITE_DAC|WRITE_OWNER)) { 1660da6c28aaSamw return (NT_STATUS_ACCESS_DENIED); 1661da6c28aaSamw } 1662da6c28aaSamw } 1663da6c28aaSamw 16649fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States if (smb_node_is_reparse(snode) && (faccess & DELETE)) 16659fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States return (NT_STATUS_ACCESS_DENIED); 16669fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States 1667da6c28aaSamw unnamed_node = SMB_IS_STREAM(snode); 1668da6c28aaSamw if (unnamed_node) { 16698d94f651SGordon Ross cred_t *kcr = zone_kcred(); 16708d94f651SGordon Ross 1671da6c28aaSamw ASSERT(unnamed_node->n_magic == SMB_NODE_MAGIC); 1672da6c28aaSamw ASSERT(unnamed_node->n_state != SMB_NODE_STATE_DESTROYING); 1673ee60c47bSjm199354 16748d94f651SGordon Ross if (cr != kcr && smb_strname_restricted(snode->od_name)) 16758d94f651SGordon Ross return (NT_STATUS_ACCESS_DENIED); 16768d94f651SGordon Ross 1677ee60c47bSjm199354 /* 1678ee60c47bSjm199354 * Perform VREAD access check on the named stream in case it 1679ee60c47bSjm199354 * is quarantined. kcred is passed to smb_vop_access so it 1680ee60c47bSjm199354 * doesn't fail due to lack of permission. 1681ee60c47bSjm199354 */ 1682ee60c47bSjm199354 if (faccess & (FILE_READ_DATA | FILE_EXECUTE)) { 1683ee60c47bSjm199354 error = smb_vop_access(snode->vp, VREAD, 16848d94f651SGordon Ross 0, NULL, kcr); 1685ee60c47bSjm199354 if (error) 1686ee60c47bSjm199354 return (NT_STATUS_ACCESS_DENIED); 1687ee60c47bSjm199354 } 1688ee60c47bSjm199354 1689da6c28aaSamw /* 1690da6c28aaSamw * Streams authorization should be performed against the 1691da6c28aaSamw * unnamed stream. 1692da6c28aaSamw */ 1693da6c28aaSamw snode = unnamed_node; 1694da6c28aaSamw } 1695da6c28aaSamw 1696da6c28aaSamw if (faccess & ACCESS_SYSTEM_SECURITY) { 1697da6c28aaSamw /* 1698da6c28aaSamw * This permission is required for reading/writing SACL and 1699da6c28aaSamw * it's not part of DACL. It's only granted via proper 1700da6c28aaSamw * privileges. 1701da6c28aaSamw */ 1702da6c28aaSamw if ((sr->uid_user->u_privileges & 1703da6c28aaSamw (SMB_USER_PRIV_BACKUP | 1704da6c28aaSamw SMB_USER_PRIV_RESTORE | 1705da6c28aaSamw SMB_USER_PRIV_SECURITY)) == 0) 1706da6c28aaSamw return (NT_STATUS_PRIVILEGE_NOT_HELD); 1707da6c28aaSamw 1708da6c28aaSamw faccess &= ~ACCESS_SYSTEM_SECURITY; 1709da6c28aaSamw } 1710da6c28aaSamw 1711da6c28aaSamw /* Links don't have ACL */ 1712c8ec8eeaSjose borrego if ((!smb_tree_has_feature(sr->tid_tree, SMB_TREE_ACEMASKONACCESS)) || 17139fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States smb_node_is_symlink(snode)) 1714da6c28aaSamw acl_check = B_FALSE; 1715da6c28aaSamw 1716cb174861Sjoyce mcintosh /* Deny access based on the share access mask */ 1717cb174861Sjoyce mcintosh 1718cb174861Sjoyce mcintosh if ((faccess & ~sr->tid_tree->t_access) != 0) 1719cb174861Sjoyce mcintosh return (NT_STATUS_ACCESS_DENIED); 1720743a77edSAlan Wright 1721da6c28aaSamw if (acl_check) { 17221fcced4cSJordan Brown dir_vp = (snode->n_dnode) ? snode->n_dnode->vp : NULL; 1723da6c28aaSamw error = smb_vop_access(snode->vp, faccess, V_ACE_MASK, dir_vp, 1724da6c28aaSamw cr); 1725da6c28aaSamw } else { 1726da6c28aaSamw /* 1727da6c28aaSamw * FS doesn't understand 32-bit mask, need to map 1728da6c28aaSamw */ 1729da6c28aaSamw if (faccess & (FILE_WRITE_DATA | FILE_APPEND_DATA)) 1730da6c28aaSamw access |= VWRITE; 1731da6c28aaSamw 1732da6c28aaSamw if (faccess & FILE_READ_DATA) 1733da6c28aaSamw access |= VREAD; 1734da6c28aaSamw 1735da6c28aaSamw if (faccess & FILE_EXECUTE) 1736da6c28aaSamw access |= VEXEC; 1737da6c28aaSamw 1738da6c28aaSamw error = smb_vop_access(snode->vp, access, 0, NULL, cr); 1739da6c28aaSamw } 1740da6c28aaSamw 1741da6c28aaSamw return ((error) ? NT_STATUS_ACCESS_DENIED : NT_STATUS_SUCCESS); 1742da6c28aaSamw } 1743da6c28aaSamw 1744da6c28aaSamw /* 1745da6c28aaSamw * smb_fsop_lookup_name() 1746da6c28aaSamw * 1747b89a8333Snatalie li - Sun Microsystems - Irvine United States * If name indicates that the file is a stream file, perform 1748b89a8333Snatalie li - Sun Microsystems - Irvine United States * stream specific lookup, otherwise call smb_fsop_lookup. 1749da6c28aaSamw * 1750b89a8333Snatalie li - Sun Microsystems - Irvine United States * Return an error if the looked-up file is in outside the tree. 1751b89a8333Snatalie li - Sun Microsystems - Irvine United States * (Required when invoked from open path.) 1752148c5f43SAlan Wright * 1753148c5f43SAlan Wright * Case sensitivity flags (SMB_IGNORE_CASE, SMB_CASE_SENSITIVE): 1754148c5f43SAlan Wright * if SMB_CASE_SENSITIVE is set, the SMB_IGNORE_CASE flag will NOT be set 1755148c5f43SAlan Wright * based on the tree's case sensitivity. However, if the SMB_IGNORE_CASE 1756148c5f43SAlan Wright * flag is set in the flags value passed as a parameter, a case insensitive 1757148c5f43SAlan Wright * lookup WILL be done (regardless of whether SMB_CASE_SENSITIVE is set 1758148c5f43SAlan Wright * or not). 1759da6c28aaSamw */ 1760da6c28aaSamw 1761da6c28aaSamw int 1762da6c28aaSamw smb_fsop_lookup_name( 1763faa1795aSjb150015 smb_request_t *sr, 1764da6c28aaSamw cred_t *cr, 1765da6c28aaSamw int flags, 1766da6c28aaSamw smb_node_t *root_node, 1767eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States smb_node_t *dnode, 1768da6c28aaSamw char *name, 1769037cac00Sjoyce mcintosh smb_node_t **ret_snode) 1770da6c28aaSamw { 1771da6c28aaSamw smb_node_t *fnode; 1772da6c28aaSamw vnode_t *xattrdirvp; 1773da6c28aaSamw vnode_t *vp; 1774da6c28aaSamw char *od_name; 1775da6c28aaSamw char *fname; 1776da6c28aaSamw char *sname; 1777da6c28aaSamw int rc; 1778da6c28aaSamw 1779da6c28aaSamw ASSERT(cr); 1780eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States ASSERT(dnode); 1781eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States ASSERT(dnode->n_magic == SMB_NODE_MAGIC); 1782eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States ASSERT(dnode->n_state != SMB_NODE_STATE_DESTROYING); 1783da6c28aaSamw 1784da6c28aaSamw /* 1785da6c28aaSamw * The following check is required for streams processing, below 1786da6c28aaSamw */ 1787da6c28aaSamw 1788148c5f43SAlan Wright if (!(flags & SMB_CASE_SENSITIVE)) { 1789c8ec8eeaSjose borrego if (SMB_TREE_IS_CASEINSENSITIVE(sr)) 1790da6c28aaSamw flags |= SMB_IGNORE_CASE; 1791148c5f43SAlan Wright } 1792da6c28aaSamw 1793da6c28aaSamw fname = kmem_alloc(MAXNAMELEN, KM_SLEEP); 1794da6c28aaSamw sname = kmem_alloc(MAXNAMELEN, KM_SLEEP); 1795da6c28aaSamw 1796eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States if (smb_is_stream_name(name)) { 1797eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States smb_stream_parse_name(name, fname, sname); 17988d7e4166Sjose borrego 1799da6c28aaSamw /* 1800da6c28aaSamw * Look up the unnamed stream (i.e. fname). 1801da6c28aaSamw * Unmangle processing will be done on fname 1802da6c28aaSamw * as well as any link target. 1803da6c28aaSamw */ 1804037cac00Sjoyce mcintosh rc = smb_fsop_lookup(sr, cr, flags, root_node, dnode, 1805037cac00Sjoyce mcintosh fname, &fnode); 1806da6c28aaSamw 1807da6c28aaSamw if (rc != 0) { 1808da6c28aaSamw kmem_free(fname, MAXNAMELEN); 1809da6c28aaSamw kmem_free(sname, MAXNAMELEN); 1810da6c28aaSamw return (rc); 1811da6c28aaSamw } 1812da6c28aaSamw 1813da6c28aaSamw od_name = kmem_alloc(MAXNAMELEN, KM_SLEEP); 1814da6c28aaSamw 1815da6c28aaSamw /* 1816da6c28aaSamw * od_name is the on-disk name of the stream, except 1817da6c28aaSamw * without the prepended stream prefix (SMB_STREAM_PREFIX) 1818da6c28aaSamw */ 1819da6c28aaSamw 1820da6c28aaSamw /* 1821da6c28aaSamw * XXX 1822da6c28aaSamw * What permissions NTFS requires for stream lookup if any? 1823da6c28aaSamw */ 1824da6c28aaSamw rc = smb_vop_stream_lookup(fnode->vp, sname, &vp, od_name, 1825dc20a302Sas200622 &xattrdirvp, flags, root_node->vp, cr); 1826da6c28aaSamw 1827da6c28aaSamw if (rc != 0) { 1828da6c28aaSamw smb_node_release(fnode); 1829da6c28aaSamw kmem_free(fname, MAXNAMELEN); 1830da6c28aaSamw kmem_free(sname, MAXNAMELEN); 1831da6c28aaSamw kmem_free(od_name, MAXNAMELEN); 1832da6c28aaSamw return (rc); 1833da6c28aaSamw } 1834da6c28aaSamw 1835da6c28aaSamw *ret_snode = smb_stream_node_lookup(sr, cr, fnode, xattrdirvp, 1836037cac00Sjoyce mcintosh vp, od_name); 1837da6c28aaSamw 1838da6c28aaSamw kmem_free(od_name, MAXNAMELEN); 1839da6c28aaSamw smb_node_release(fnode); 1840da6c28aaSamw VN_RELE(xattrdirvp); 1841da6c28aaSamw VN_RELE(vp); 18427f667e74Sjose borrego 18437f667e74Sjose borrego if (*ret_snode == NULL) { 1844da6c28aaSamw kmem_free(fname, MAXNAMELEN); 1845da6c28aaSamw kmem_free(sname, MAXNAMELEN); 1846da6c28aaSamw return (ENOMEM); 1847da6c28aaSamw } 1848da6c28aaSamw } else { 1849eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States rc = smb_fsop_lookup(sr, cr, flags, root_node, dnode, name, 1850037cac00Sjoyce mcintosh ret_snode); 1851da6c28aaSamw } 1852da6c28aaSamw 1853da6c28aaSamw if (rc == 0) { 1854da6c28aaSamw ASSERT(ret_snode); 1855c8ec8eeaSjose borrego if (SMB_TREE_CONTAINS_NODE(sr, *ret_snode) == 0) { 1856da6c28aaSamw smb_node_release(*ret_snode); 1857da6c28aaSamw *ret_snode = NULL; 1858da6c28aaSamw rc = EACCES; 1859da6c28aaSamw } 1860da6c28aaSamw } 1861da6c28aaSamw 1862da6c28aaSamw kmem_free(fname, MAXNAMELEN); 1863da6c28aaSamw kmem_free(sname, MAXNAMELEN); 1864da6c28aaSamw 1865da6c28aaSamw return (rc); 1866da6c28aaSamw } 1867da6c28aaSamw 1868da6c28aaSamw /* 1869da6c28aaSamw * smb_fsop_lookup 1870da6c28aaSamw * 1871da6c28aaSamw * All SMB functions should use this smb_vop_lookup wrapper to ensure that 1872da6c28aaSamw * the smb_vop_lookup is performed with the appropriate credentials and using 1873da6c28aaSamw * case insensitive compares. Please document any direct call to smb_vop_lookup 1874da6c28aaSamw * to explain the reason for avoiding this wrapper. 1875da6c28aaSamw * 1876eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States * It is assumed that a reference exists on dnode coming into this routine 1877da6c28aaSamw * (and that it is safe from deallocation). 1878da6c28aaSamw * 1879da6c28aaSamw * Same with the root_node. 1880da6c28aaSamw * 1881da6c28aaSamw * *ret_snode is returned with a reference upon success. No reference is 1882da6c28aaSamw * taken if an error is returned. 1883da6c28aaSamw * 1884da6c28aaSamw * Note: The returned ret_snode may be in a child mount. This is ok for 18857f667e74Sjose borrego * readdir. 1886da6c28aaSamw * 1887c8ec8eeaSjose borrego * Other smb_fsop_* routines will call SMB_TREE_CONTAINS_NODE() to prevent 1888da6c28aaSamw * operations on files not in the parent mount. 1889bbf6f00cSJordan Brown * 1890bbf6f00cSJordan Brown * Case sensitivity flags (SMB_IGNORE_CASE, SMB_CASE_SENSITIVE): 1891bbf6f00cSJordan Brown * if SMB_CASE_SENSITIVE is set, the SMB_IGNORE_CASE flag will NOT be set 1892bbf6f00cSJordan Brown * based on the tree's case sensitivity. However, if the SMB_IGNORE_CASE 1893bbf6f00cSJordan Brown * flag is set in the flags value passed as a parameter, a case insensitive 1894bbf6f00cSJordan Brown * lookup WILL be done (regardless of whether SMB_CASE_SENSITIVE is set 1895bbf6f00cSJordan Brown * or not). 1896da6c28aaSamw */ 1897da6c28aaSamw int 1898da6c28aaSamw smb_fsop_lookup( 1899faa1795aSjb150015 smb_request_t *sr, 1900da6c28aaSamw cred_t *cr, 1901da6c28aaSamw int flags, 1902da6c28aaSamw smb_node_t *root_node, 1903eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States smb_node_t *dnode, 1904da6c28aaSamw char *name, 1905037cac00Sjoyce mcintosh smb_node_t **ret_snode) 1906da6c28aaSamw { 1907da6c28aaSamw smb_node_t *lnk_target_node; 1908da6c28aaSamw smb_node_t *lnk_dnode; 1909da6c28aaSamw char *longname; 1910da6c28aaSamw char *od_name; 1911da6c28aaSamw vnode_t *vp; 1912da6c28aaSamw int rc; 19138b2cc8acSafshin salek ardakani - Sun Microsystems - Irvine United States int ret_flags; 19149fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States smb_attr_t attr; 1915da6c28aaSamw 1916da6c28aaSamw ASSERT(cr); 1917eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States ASSERT(dnode); 1918eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States ASSERT(dnode->n_magic == SMB_NODE_MAGIC); 1919eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States ASSERT(dnode->n_state != SMB_NODE_STATE_DESTROYING); 1920da6c28aaSamw 1921da6c28aaSamw if (name == NULL) 1922da6c28aaSamw return (EINVAL); 1923da6c28aaSamw 1924eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States if (SMB_TREE_CONTAINS_NODE(sr, dnode) == 0) 1925da6c28aaSamw return (EACCES); 1926da6c28aaSamw 1927bbf6f00cSJordan Brown if (!(flags & SMB_CASE_SENSITIVE)) { 1928c8ec8eeaSjose borrego if (SMB_TREE_IS_CASEINSENSITIVE(sr)) 1929da6c28aaSamw flags |= SMB_IGNORE_CASE; 1930bbf6f00cSJordan Brown } 19318b2cc8acSafshin salek ardakani - Sun Microsystems - Irvine United States if (SMB_TREE_SUPPORTS_CATIA(sr)) 19328b2cc8acSafshin salek ardakani - Sun Microsystems - Irvine United States flags |= SMB_CATIA; 1933e3f2c991SKeyur Desai if (SMB_TREE_SUPPORTS_ABE(sr)) 1934e3f2c991SKeyur Desai flags |= SMB_ABE; 1935da6c28aaSamw 1936d082c877SGordon Ross /* 1937d082c877SGordon Ross * Can have "" or "." when opening named streams on a directory. 1938d082c877SGordon Ross */ 1939d082c877SGordon Ross if (name[0] == '\0' || (name[0] == '.' && name[1] == '\0')) { 1940d082c877SGordon Ross smb_node_ref(dnode); 1941d082c877SGordon Ross *ret_snode = dnode; 1942d082c877SGordon Ross return (0); 1943d082c877SGordon Ross } 1944d082c877SGordon Ross 1945da6c28aaSamw od_name = kmem_alloc(MAXNAMELEN, KM_SLEEP); 1946da6c28aaSamw 1947eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States rc = smb_vop_lookup(dnode->vp, name, &vp, od_name, flags, 19489fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States &ret_flags, root_node ? root_node->vp : NULL, &attr, cr); 1949da6c28aaSamw 1950da6c28aaSamw if (rc != 0) { 1951cb174861Sjoyce mcintosh if (!SMB_TREE_SUPPORTS_SHORTNAMES(sr) || 1952cb174861Sjoyce mcintosh !smb_maybe_mangled(name)) { 1953da6c28aaSamw kmem_free(od_name, MAXNAMELEN); 1954da6c28aaSamw return (rc); 1955da6c28aaSamw } 1956da6c28aaSamw 1957da6c28aaSamw longname = kmem_alloc(MAXNAMELEN, KM_SLEEP); 1958148c5f43SAlan Wright rc = smb_unmangle(dnode, name, longname, MAXNAMELEN, flags); 1959da6c28aaSamw if (rc != 0) { 1960da6c28aaSamw kmem_free(od_name, MAXNAMELEN); 1961da6c28aaSamw kmem_free(longname, MAXNAMELEN); 1962da6c28aaSamw return (rc); 1963da6c28aaSamw } 1964da6c28aaSamw 1965da6c28aaSamw /* 19668b2cc8acSafshin salek ardakani - Sun Microsystems - Irvine United States * longname is the real (case-sensitive) 19678b2cc8acSafshin salek ardakani - Sun Microsystems - Irvine United States * on-disk name. 1968da6c28aaSamw * We make sure we do a lookup on this exact 1969da6c28aaSamw * name, as the name was mangled and denotes 1970da6c28aaSamw * a unique file. 1971da6c28aaSamw */ 1972da6c28aaSamw 1973da6c28aaSamw if (flags & SMB_IGNORE_CASE) 1974da6c28aaSamw flags &= ~SMB_IGNORE_CASE; 1975da6c28aaSamw 1976eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States rc = smb_vop_lookup(dnode->vp, longname, &vp, od_name, 19779fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States flags, &ret_flags, root_node ? root_node->vp : NULL, &attr, 19789fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States cr); 1979da6c28aaSamw 1980da6c28aaSamw kmem_free(longname, MAXNAMELEN); 1981da6c28aaSamw 1982da6c28aaSamw if (rc != 0) { 1983da6c28aaSamw kmem_free(od_name, MAXNAMELEN); 1984da6c28aaSamw return (rc); 1985da6c28aaSamw } 1986da6c28aaSamw } 1987da6c28aaSamw 19889fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States if ((flags & SMB_FOLLOW_LINKS) && (vp->v_type == VLNK) && 19899fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States ((attr.sa_dosattr & FILE_ATTRIBUTE_REPARSE_POINT) == 0)) { 1990eb1d736bSafshin salek ardakani - Sun Microsystems - Irvine United States rc = smb_pathname(sr, od_name, FOLLOW, root_node, dnode, 19911bc6aeeeSMatt Barden &lnk_dnode, &lnk_target_node, cr, NULL); 1992da6c28aaSamw 1993da6c28aaSamw if (rc != 0) { 1994da6c28aaSamw /* 1995da6c28aaSamw * The link is assumed to be for the last component 1996da6c28aaSamw * of a path. Hence any ENOTDIR error will be returned 1997da6c28aaSamw * as ENOENT. 1998da6c28aaSamw */ 1999da6c28aaSamw if (rc == ENOTDIR) 2000da6c28aaSamw rc = ENOENT; 2001da6c28aaSamw 2002da6c28aaSamw VN_RELE(vp); 2003da6c28aaSamw kmem_free(od_name, MAXNAMELEN); 2004da6c28aaSamw return (rc); 2005da6c28aaSamw } 2006da6c28aaSamw 2007da6c28aaSamw /* 2008da6c28aaSamw * Release the original VLNK vnode 2009da6c28aaSamw */ 2010da6c28aaSamw 2011da6c28aaSamw VN_RELE(vp); 2012da6c28aaSamw vp = lnk_target_node->vp; 2013da6c28aaSamw 2014da6c28aaSamw rc = smb_vop_traverse_check(&vp); 2015da6c28aaSamw 2016da6c28aaSamw if (rc != 0) { 2017da6c28aaSamw smb_node_release(lnk_dnode); 2018da6c28aaSamw smb_node_release(lnk_target_node); 2019da6c28aaSamw kmem_free(od_name, MAXNAMELEN); 2020da6c28aaSamw return (rc); 2021da6c28aaSamw } 2022da6c28aaSamw 2023da6c28aaSamw /* 2024da6c28aaSamw * smb_vop_traverse_check() may have returned a different vnode 2025da6c28aaSamw */ 2026da6c28aaSamw 2027da6c28aaSamw if (lnk_target_node->vp == vp) { 2028da6c28aaSamw *ret_snode = lnk_target_node; 2029da6c28aaSamw } else { 2030da6c28aaSamw *ret_snode = smb_node_lookup(sr, NULL, cr, vp, 2031037cac00Sjoyce mcintosh lnk_target_node->od_name, lnk_dnode, NULL); 2032da6c28aaSamw VN_RELE(vp); 20337f667e74Sjose borrego 20347f667e74Sjose borrego if (*ret_snode == NULL) 2035da6c28aaSamw rc = ENOMEM; 2036da6c28aaSamw smb_node_release(lnk_target_node); 2037da6c28aaSamw } 2038da6c28aaSamw 2039da6c28aaSamw smb_node_release(lnk_dnode); 2040da6c28aaSamw 2041da6c28aaSamw } else { 2042da6c28aaSamw 2043da6c28aaSamw rc = smb_vop_traverse_check(&vp); 2044da6c28aaSamw if (rc) { 2045da6c28aaSamw VN_RELE(vp); 2046da6c28aaSamw kmem_free(od_name, MAXNAMELEN); 2047da6c28aaSamw return (rc); 2048da6c28aaSamw } 2049da6c28aaSamw 2050da6c28aaSamw *ret_snode = smb_node_lookup(sr, NULL, cr, vp, od_name, 2051037cac00Sjoyce mcintosh dnode, NULL); 2052da6c28aaSamw VN_RELE(vp); 20537f667e74Sjose borrego 20547f667e74Sjose borrego if (*ret_snode == NULL) 2055da6c28aaSamw rc = ENOMEM; 2056da6c28aaSamw } 2057da6c28aaSamw 2058da6c28aaSamw kmem_free(od_name, MAXNAMELEN); 2059da6c28aaSamw return (rc); 2060da6c28aaSamw } 2061da6c28aaSamw 2062da6c28aaSamw int /*ARGSUSED*/ 2063da6c28aaSamw smb_fsop_commit(smb_request_t *sr, cred_t *cr, smb_node_t *snode) 2064da6c28aaSamw { 2065da6c28aaSamw ASSERT(cr); 2066da6c28aaSamw ASSERT(snode); 2067da6c28aaSamw ASSERT(snode->n_magic == SMB_NODE_MAGIC); 2068da6c28aaSamw ASSERT(snode->n_state != SMB_NODE_STATE_DESTROYING); 2069da6c28aaSamw 2070da6c28aaSamw ASSERT(sr); 2071da6c28aaSamw ASSERT(sr->tid_tree); 2072c8ec8eeaSjose borrego if (SMB_TREE_IS_READONLY(sr)) 2073da6c28aaSamw return (EROFS); 2074da6c28aaSamw 2075dc20a302Sas200622 return (smb_vop_commit(snode->vp, cr)); 2076da6c28aaSamw } 2077da6c28aaSamw 2078da6c28aaSamw /* 2079da6c28aaSamw * smb_fsop_aclread 2080da6c28aaSamw * 2081da6c28aaSamw * Retrieve filesystem ACL. Depends on requested ACLs in 2082da6c28aaSamw * fs_sd->sd_secinfo, it'll set DACL and SACL pointers in 2083da6c28aaSamw * fs_sd. Note that requesting a DACL/SACL doesn't mean that 2084da6c28aaSamw * the corresponding field in fs_sd should be non-NULL upon 2085da6c28aaSamw * return, since the target ACL might not contain that type of 2086da6c28aaSamw * entries. 2087da6c28aaSamw * 2088da6c28aaSamw * Returned ACL is always in ACE_T (aka ZFS) format. 2089da6c28aaSamw * If successful the allocated memory for the ACL should be freed 209055bf511dSas200622 * using smb_fsacl_free() or smb_fssd_term() 2091da6c28aaSamw */ 2092da6c28aaSamw int 2093da6c28aaSamw smb_fsop_aclread(smb_request_t *sr, cred_t *cr, smb_node_t *snode, 2094da6c28aaSamw smb_fssd_t *fs_sd) 2095da6c28aaSamw { 2096da6c28aaSamw int error = 0; 2097da6c28aaSamw int flags = 0; 2098da6c28aaSamw int access = 0; 2099da6c28aaSamw acl_t *acl; 2100da6c28aaSamw 2101da6c28aaSamw ASSERT(cr); 2102da6c28aaSamw 2103245d1332SMatt Barden /* Can't query security on named streams */ 2104245d1332SMatt Barden if (SMB_IS_STREAM(snode) != NULL) 2105245d1332SMatt Barden return (EINVAL); 2106245d1332SMatt Barden 2107743a77edSAlan Wright if (SMB_TREE_HAS_ACCESS(sr, ACE_READ_ACL) == 0) 2108743a77edSAlan Wright return (EACCES); 2109743a77edSAlan Wright 2110da6c28aaSamw if (sr->fid_ofile) { 2111da6c28aaSamw if (fs_sd->sd_secinfo & SMB_DACL_SECINFO) 2112da6c28aaSamw access = READ_CONTROL; 2113da6c28aaSamw 2114da6c28aaSamw if (fs_sd->sd_secinfo & SMB_SACL_SECINFO) 2115da6c28aaSamw access |= ACCESS_SYSTEM_SECURITY; 2116da6c28aaSamw 2117da6c28aaSamw error = smb_ofile_access(sr->fid_ofile, cr, access); 2118da6c28aaSamw if (error != NT_STATUS_SUCCESS) { 2119da6c28aaSamw return (EACCES); 2120da6c28aaSamw } 2121da6c28aaSamw } 2122da6c28aaSamw 2123da6c28aaSamw 2124c8ec8eeaSjose borrego if (smb_tree_has_feature(sr->tid_tree, SMB_TREE_ACEMASKONACCESS)) 2125da6c28aaSamw flags = ATTR_NOACLCHECK; 2126da6c28aaSamw 2127da6c28aaSamw error = smb_vop_acl_read(snode->vp, &acl, flags, 2128dc20a302Sas200622 sr->tid_tree->t_acltype, cr); 2129da6c28aaSamw if (error != 0) { 2130da6c28aaSamw return (error); 2131da6c28aaSamw } 2132da6c28aaSamw 2133da6c28aaSamw error = acl_translate(acl, _ACL_ACE_ENABLED, 21349fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States smb_node_is_dir(snode), fs_sd->sd_uid, fs_sd->sd_gid); 2135da6c28aaSamw 2136da6c28aaSamw if (error == 0) { 213755bf511dSas200622 smb_fsacl_split(acl, &fs_sd->sd_zdacl, &fs_sd->sd_zsacl, 2138da6c28aaSamw fs_sd->sd_secinfo); 2139da6c28aaSamw } 2140da6c28aaSamw 2141da6c28aaSamw acl_free(acl); 2142da6c28aaSamw return (error); 2143da6c28aaSamw } 2144da6c28aaSamw 2145da6c28aaSamw /* 2146da6c28aaSamw * smb_fsop_aclwrite 2147da6c28aaSamw * 2148da6c28aaSamw * Stores the filesystem ACL provided in fs_sd->sd_acl. 2149da6c28aaSamw */ 2150da6c28aaSamw int 2151da6c28aaSamw smb_fsop_aclwrite(smb_request_t *sr, cred_t *cr, smb_node_t *snode, 2152da6c28aaSamw smb_fssd_t *fs_sd) 2153da6c28aaSamw { 2154da6c28aaSamw int target_flavor; 2155da6c28aaSamw int error = 0; 2156da6c28aaSamw int flags = 0; 2157da6c28aaSamw int access = 0; 2158da6c28aaSamw acl_t *acl, *dacl, *sacl; 2159da6c28aaSamw 2160da6c28aaSamw ASSERT(cr); 2161da6c28aaSamw 2162da6c28aaSamw ASSERT(sr); 2163da6c28aaSamw ASSERT(sr->tid_tree); 2164c8ec8eeaSjose borrego if (SMB_TREE_IS_READONLY(sr)) 2165da6c28aaSamw return (EROFS); 2166da6c28aaSamw 2167245d1332SMatt Barden /* Can't set security on named streams */ 2168245d1332SMatt Barden if (SMB_IS_STREAM(snode) != NULL) 2169245d1332SMatt Barden return (EINVAL); 2170245d1332SMatt Barden 2171743a77edSAlan Wright if (SMB_TREE_HAS_ACCESS(sr, ACE_WRITE_ACL) == 0) 2172743a77edSAlan Wright return (EACCES); 2173743a77edSAlan Wright 2174da6c28aaSamw if (sr->fid_ofile) { 2175da6c28aaSamw if (fs_sd->sd_secinfo & SMB_DACL_SECINFO) 2176da6c28aaSamw access = WRITE_DAC; 2177da6c28aaSamw 2178da6c28aaSamw if (fs_sd->sd_secinfo & SMB_SACL_SECINFO) 2179da6c28aaSamw access |= ACCESS_SYSTEM_SECURITY; 2180da6c28aaSamw 2181da6c28aaSamw error = smb_ofile_access(sr->fid_ofile, cr, access); 2182da6c28aaSamw if (error != NT_STATUS_SUCCESS) 2183da6c28aaSamw return (EACCES); 2184da6c28aaSamw } 2185da6c28aaSamw 2186da6c28aaSamw switch (sr->tid_tree->t_acltype) { 2187da6c28aaSamw case ACLENT_T: 2188da6c28aaSamw target_flavor = _ACL_ACLENT_ENABLED; 2189da6c28aaSamw break; 2190da6c28aaSamw 2191da6c28aaSamw case ACE_T: 2192da6c28aaSamw target_flavor = _ACL_ACE_ENABLED; 2193da6c28aaSamw break; 2194da6c28aaSamw default: 2195da6c28aaSamw return (EINVAL); 2196da6c28aaSamw } 2197da6c28aaSamw 2198da6c28aaSamw dacl = fs_sd->sd_zdacl; 2199da6c28aaSamw sacl = fs_sd->sd_zsacl; 2200da6c28aaSamw 2201da6c28aaSamw ASSERT(dacl || sacl); 2202da6c28aaSamw if ((dacl == NULL) && (sacl == NULL)) 2203da6c28aaSamw return (EINVAL); 2204da6c28aaSamw 2205da6c28aaSamw if (dacl && sacl) 220655bf511dSas200622 acl = smb_fsacl_merge(dacl, sacl); 2207da6c28aaSamw else if (dacl) 2208da6c28aaSamw acl = dacl; 2209da6c28aaSamw else 2210da6c28aaSamw acl = sacl; 2211da6c28aaSamw 22129fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States error = acl_translate(acl, target_flavor, smb_node_is_dir(snode), 2213da6c28aaSamw fs_sd->sd_uid, fs_sd->sd_gid); 2214da6c28aaSamw if (error == 0) { 2215c8ec8eeaSjose borrego if (smb_tree_has_feature(sr->tid_tree, 2216c8ec8eeaSjose borrego SMB_TREE_ACEMASKONACCESS)) 2217da6c28aaSamw flags = ATTR_NOACLCHECK; 2218da6c28aaSamw 2219dc20a302Sas200622 error = smb_vop_acl_write(snode->vp, acl, flags, cr); 2220da6c28aaSamw } 2221da6c28aaSamw 2222da6c28aaSamw if (dacl && sacl) 2223da6c28aaSamw acl_free(acl); 2224da6c28aaSamw 2225da6c28aaSamw return (error); 2226da6c28aaSamw } 2227da6c28aaSamw 2228da6c28aaSamw acl_type_t 2229da6c28aaSamw smb_fsop_acltype(smb_node_t *snode) 2230da6c28aaSamw { 2231da6c28aaSamw return (smb_vop_acl_type(snode->vp)); 2232da6c28aaSamw } 2233da6c28aaSamw 2234da6c28aaSamw /* 2235da6c28aaSamw * smb_fsop_sdread 2236da6c28aaSamw * 2237da6c28aaSamw * Read the requested security descriptor items from filesystem. 2238da6c28aaSamw * The items are specified in fs_sd->sd_secinfo. 2239da6c28aaSamw */ 2240da6c28aaSamw int 2241da6c28aaSamw smb_fsop_sdread(smb_request_t *sr, cred_t *cr, smb_node_t *snode, 2242da6c28aaSamw smb_fssd_t *fs_sd) 2243da6c28aaSamw { 2244da6c28aaSamw int error = 0; 2245da6c28aaSamw int getowner = 0; 2246da6c28aaSamw cred_t *ga_cred; 2247da6c28aaSamw smb_attr_t attr; 2248da6c28aaSamw 2249da6c28aaSamw ASSERT(cr); 2250da6c28aaSamw ASSERT(fs_sd); 2251da6c28aaSamw 2252245d1332SMatt Barden /* Can't query security on named streams */ 2253245d1332SMatt Barden if (SMB_IS_STREAM(snode) != NULL) 2254245d1332SMatt Barden return (EINVAL); 2255245d1332SMatt Barden 2256da6c28aaSamw /* 2257da6c28aaSamw * File's uid/gid is fetched in two cases: 2258da6c28aaSamw * 2259da6c28aaSamw * 1. it's explicitly requested 2260da6c28aaSamw * 2261da6c28aaSamw * 2. target ACL is ACE_T (ZFS ACL). They're needed for 2262da6c28aaSamw * owner@/group@ entries. In this case kcred should be used 2263da6c28aaSamw * because uid/gid are fetched on behalf of smb server. 2264da6c28aaSamw */ 2265da6c28aaSamw if (fs_sd->sd_secinfo & (SMB_OWNER_SECINFO | SMB_GROUP_SECINFO)) { 2266da6c28aaSamw getowner = 1; 2267da6c28aaSamw ga_cred = cr; 2268da6c28aaSamw } else if (sr->tid_tree->t_acltype == ACE_T) { 2269da6c28aaSamw getowner = 1; 22708622ec45SGordon Ross ga_cred = zone_kcred(); 2271da6c28aaSamw } 2272da6c28aaSamw 2273da6c28aaSamw if (getowner) { 2274da6c28aaSamw /* 2275da6c28aaSamw * Windows require READ_CONTROL to read owner/group SID since 2276da6c28aaSamw * they're part of Security Descriptor. 2277da6c28aaSamw * ZFS only requires read_attribute. Need to have a explicit 2278da6c28aaSamw * access check here. 2279da6c28aaSamw */ 2280da6c28aaSamw if (sr->fid_ofile == NULL) { 2281da6c28aaSamw error = smb_fsop_access(sr, ga_cred, snode, 2282da6c28aaSamw READ_CONTROL); 2283da6c28aaSamw if (error) 2284b1352070SAlan Wright return (EACCES); 2285da6c28aaSamw } 2286da6c28aaSamw 2287da6c28aaSamw attr.sa_mask = SMB_AT_UID | SMB_AT_GID; 2288da6c28aaSamw error = smb_fsop_getattr(sr, ga_cred, snode, &attr); 2289da6c28aaSamw if (error == 0) { 2290da6c28aaSamw fs_sd->sd_uid = attr.sa_vattr.va_uid; 2291da6c28aaSamw fs_sd->sd_gid = attr.sa_vattr.va_gid; 2292da6c28aaSamw } else { 2293da6c28aaSamw return (error); 2294da6c28aaSamw } 2295da6c28aaSamw } 2296da6c28aaSamw 2297da6c28aaSamw if (fs_sd->sd_secinfo & SMB_ACL_SECINFO) { 2298da6c28aaSamw error = smb_fsop_aclread(sr, cr, snode, fs_sd); 2299da6c28aaSamw } 2300da6c28aaSamw 2301da6c28aaSamw return (error); 2302da6c28aaSamw } 2303da6c28aaSamw 2304da6c28aaSamw /* 2305da6c28aaSamw * smb_fsop_sdmerge 2306da6c28aaSamw * 2307da6c28aaSamw * From SMB point of view DACL and SACL are two separate list 2308da6c28aaSamw * which can be manipulated independently without one affecting 2309da6c28aaSamw * the other, but entries for both DACL and SACL will end up 2310da6c28aaSamw * in the same ACL if target filesystem supports ACE_T ACLs. 2311da6c28aaSamw * 2312da6c28aaSamw * So, if either DACL or SACL is present in the client set request 2313da6c28aaSamw * the entries corresponding to the non-present ACL shouldn't 2314da6c28aaSamw * be touched in the FS ACL. 2315da6c28aaSamw * 2316da6c28aaSamw * fs_sd parameter contains DACL and SACL specified by SMB 2317da6c28aaSamw * client to be set on a file/directory. The client could 2318da6c28aaSamw * specify both or one of these ACLs (if none is specified 2319da6c28aaSamw * we don't get this far). When both DACL and SACL are given 2320da6c28aaSamw * by client the existing ACL should be overwritten. If only 2321da6c28aaSamw * one of them is specified the entries corresponding to the other 2322da6c28aaSamw * ACL should not be touched. For example, if only DACL 2323da6c28aaSamw * is specified in input fs_sd, the function reads audit entries 2324da6c28aaSamw * of the existing ACL of the file and point fs_sd->sd_zsdacl 2325da6c28aaSamw * pointer to the fetched SACL, this way when smb_fsop_sdwrite() 2326da6c28aaSamw * function is called the passed fs_sd would point to the specified 2327da6c28aaSamw * DACL by client and fetched SACL from filesystem, so the file 2328da6c28aaSamw * will end up with correct ACL. 2329da6c28aaSamw */ 2330da6c28aaSamw static int 2331da6c28aaSamw smb_fsop_sdmerge(smb_request_t *sr, smb_node_t *snode, smb_fssd_t *fs_sd) 2332da6c28aaSamw { 2333da6c28aaSamw smb_fssd_t cur_sd; 23348622ec45SGordon Ross cred_t *kcr = zone_kcred(); 2335da6c28aaSamw int error = 0; 2336da6c28aaSamw 2337da6c28aaSamw if (sr->tid_tree->t_acltype != ACE_T) 2338da6c28aaSamw /* Don't bother if target FS doesn't support ACE_T */ 2339da6c28aaSamw return (0); 2340da6c28aaSamw 2341da6c28aaSamw if ((fs_sd->sd_secinfo & SMB_ACL_SECINFO) != SMB_ACL_SECINFO) { 2342da6c28aaSamw if (fs_sd->sd_secinfo & SMB_DACL_SECINFO) { 2343da6c28aaSamw /* 2344da6c28aaSamw * Don't overwrite existing audit entries 2345da6c28aaSamw */ 234655bf511dSas200622 smb_fssd_init(&cur_sd, SMB_SACL_SECINFO, 2347da6c28aaSamw fs_sd->sd_flags); 2348da6c28aaSamw 23498622ec45SGordon Ross error = smb_fsop_sdread(sr, kcr, snode, &cur_sd); 2350da6c28aaSamw if (error == 0) { 2351da6c28aaSamw ASSERT(fs_sd->sd_zsacl == NULL); 2352da6c28aaSamw fs_sd->sd_zsacl = cur_sd.sd_zsacl; 2353da6c28aaSamw if (fs_sd->sd_zsacl && fs_sd->sd_zdacl) 2354da6c28aaSamw fs_sd->sd_zsacl->acl_flags = 2355da6c28aaSamw fs_sd->sd_zdacl->acl_flags; 2356da6c28aaSamw } 2357da6c28aaSamw } else { 2358da6c28aaSamw /* 2359da6c28aaSamw * Don't overwrite existing access entries 2360da6c28aaSamw */ 236155bf511dSas200622 smb_fssd_init(&cur_sd, SMB_DACL_SECINFO, 2362da6c28aaSamw fs_sd->sd_flags); 2363da6c28aaSamw 23648622ec45SGordon Ross error = smb_fsop_sdread(sr, kcr, snode, &cur_sd); 2365da6c28aaSamw if (error == 0) { 2366da6c28aaSamw ASSERT(fs_sd->sd_zdacl == NULL); 2367da6c28aaSamw fs_sd->sd_zdacl = cur_sd.sd_zdacl; 2368da6c28aaSamw if (fs_sd->sd_zdacl && fs_sd->sd_zsacl) 2369da6c28aaSamw fs_sd->sd_zdacl->acl_flags = 2370da6c28aaSamw fs_sd->sd_zsacl->acl_flags; 2371da6c28aaSamw } 2372da6c28aaSamw } 2373da6c28aaSamw 2374da6c28aaSamw if (error) 237555bf511dSas200622 smb_fssd_term(&cur_sd); 2376da6c28aaSamw } 2377da6c28aaSamw 2378da6c28aaSamw return (error); 2379da6c28aaSamw } 2380da6c28aaSamw 2381da6c28aaSamw /* 2382da6c28aaSamw * smb_fsop_sdwrite 2383da6c28aaSamw * 2384da6c28aaSamw * Stores the given uid, gid and acl in filesystem. 2385da6c28aaSamw * Provided items in fs_sd are specified by fs_sd->sd_secinfo. 2386da6c28aaSamw * 2387da6c28aaSamw * A SMB security descriptor could contain owner, primary group, 2388da6c28aaSamw * DACL and SACL. Setting an SD should be atomic but here it has to 2389da6c28aaSamw * be done via two separate FS operations: VOP_SETATTR and 2390da6c28aaSamw * VOP_SETSECATTR. Therefore, this function has to simulate the 2391da6c28aaSamw * atomicity as well as it can. 23922c1b14e5Sjose borrego * 23932c1b14e5Sjose borrego * Get the current uid, gid before setting the new uid/gid 23942c1b14e5Sjose borrego * so if smb_fsop_aclwrite fails they can be restored. root cred is 23952c1b14e5Sjose borrego * used to get currend uid/gid since this operation is performed on 23962c1b14e5Sjose borrego * behalf of the server not the user. 23972c1b14e5Sjose borrego * 23982c1b14e5Sjose borrego * If setting uid/gid fails with EPERM it means that and invalid 23992c1b14e5Sjose borrego * owner has been specified. Callers should translate this to 24002c1b14e5Sjose borrego * STATUS_INVALID_OWNER which is not the normal mapping for EPERM 24012c1b14e5Sjose borrego * in upper layers, so EPERM is mapped to EBADE. 2402*d11e14a7SMatt Barden * 2403*d11e14a7SMatt Barden * If 'overwrite' is non-zero, then the existing ACL is ignored. 2404da6c28aaSamw */ 2405da6c28aaSamw int 2406da6c28aaSamw smb_fsop_sdwrite(smb_request_t *sr, cred_t *cr, smb_node_t *snode, 2407da6c28aaSamw smb_fssd_t *fs_sd, int overwrite) 2408da6c28aaSamw { 2409da6c28aaSamw smb_attr_t set_attr; 2410da6c28aaSamw smb_attr_t orig_attr; 24118622ec45SGordon Ross cred_t *kcr = zone_kcred(); 24128622ec45SGordon Ross int error = 0; 24138622ec45SGordon Ross int access = 0; 2414da6c28aaSamw 2415da6c28aaSamw ASSERT(cr); 2416da6c28aaSamw ASSERT(fs_sd); 2417da6c28aaSamw 2418da6c28aaSamw ASSERT(sr); 2419da6c28aaSamw ASSERT(sr->tid_tree); 2420c8ec8eeaSjose borrego if (SMB_TREE_IS_READONLY(sr)) 2421da6c28aaSamw return (EROFS); 2422da6c28aaSamw 2423245d1332SMatt Barden /* Can't set security on named streams */ 2424245d1332SMatt Barden if (SMB_IS_STREAM(snode) != NULL) 2425245d1332SMatt Barden return (EINVAL); 2426245d1332SMatt Barden 2427da6c28aaSamw bzero(&set_attr, sizeof (smb_attr_t)); 2428da6c28aaSamw 2429da6c28aaSamw if (fs_sd->sd_secinfo & SMB_OWNER_SECINFO) { 2430da6c28aaSamw set_attr.sa_vattr.va_uid = fs_sd->sd_uid; 2431da6c28aaSamw set_attr.sa_mask |= SMB_AT_UID; 24322c1b14e5Sjose borrego access |= WRITE_OWNER; 2433da6c28aaSamw } 2434da6c28aaSamw 2435da6c28aaSamw if (fs_sd->sd_secinfo & SMB_GROUP_SECINFO) { 2436da6c28aaSamw set_attr.sa_vattr.va_gid = fs_sd->sd_gid; 2437da6c28aaSamw set_attr.sa_mask |= SMB_AT_GID; 24382c1b14e5Sjose borrego access |= WRITE_OWNER; 2439da6c28aaSamw } 2440da6c28aaSamw 2441da6c28aaSamw if (fs_sd->sd_secinfo & SMB_DACL_SECINFO) 2442da6c28aaSamw access |= WRITE_DAC; 2443da6c28aaSamw 2444da6c28aaSamw if (fs_sd->sd_secinfo & SMB_SACL_SECINFO) 2445da6c28aaSamw access |= ACCESS_SYSTEM_SECURITY; 2446da6c28aaSamw 2447da6c28aaSamw if (sr->fid_ofile) 2448da6c28aaSamw error = smb_ofile_access(sr->fid_ofile, cr, access); 2449da6c28aaSamw else 2450da6c28aaSamw error = smb_fsop_access(sr, cr, snode, access); 2451da6c28aaSamw 2452da6c28aaSamw if (error) 2453da6c28aaSamw return (EACCES); 2454da6c28aaSamw 2455da6c28aaSamw if (set_attr.sa_mask) { 2456da6c28aaSamw orig_attr.sa_mask = SMB_AT_UID | SMB_AT_GID; 24578622ec45SGordon Ross error = smb_fsop_getattr(sr, kcr, snode, &orig_attr); 24582c1b14e5Sjose borrego if (error == 0) { 2459037cac00Sjoyce mcintosh error = smb_fsop_setattr(sr, cr, snode, &set_attr); 24602c1b14e5Sjose borrego if (error == EPERM) 24612c1b14e5Sjose borrego error = EBADE; 24622c1b14e5Sjose borrego } 2463da6c28aaSamw 2464da6c28aaSamw if (error) 2465da6c28aaSamw return (error); 2466da6c28aaSamw } 2467da6c28aaSamw 2468da6c28aaSamw if (fs_sd->sd_secinfo & SMB_ACL_SECINFO) { 2469*d11e14a7SMatt Barden if (overwrite == 0) 2470da6c28aaSamw error = smb_fsop_sdmerge(sr, snode, fs_sd); 2471da6c28aaSamw 2472*d11e14a7SMatt Barden if (error == 0) 2473da6c28aaSamw error = smb_fsop_aclwrite(sr, cr, snode, fs_sd); 2474*d11e14a7SMatt Barden 2475*d11e14a7SMatt Barden if (error != 0) { 2476da6c28aaSamw /* 2477da6c28aaSamw * Revert uid/gid changes if required. 2478da6c28aaSamw */ 2479da6c28aaSamw if (set_attr.sa_mask) { 2480da6c28aaSamw orig_attr.sa_mask = set_attr.sa_mask; 24818622ec45SGordon Ross (void) smb_fsop_setattr(sr, kcr, snode, 2482037cac00Sjoyce mcintosh &orig_attr); 2483da6c28aaSamw } 2484da6c28aaSamw } 2485da6c28aaSamw } 2486da6c28aaSamw 2487da6c28aaSamw return (error); 2488da6c28aaSamw } 2489da6c28aaSamw 2490b819cea2SGordon Ross #ifdef _KERNEL 2491da6c28aaSamw /* 2492da6c28aaSamw * smb_fsop_sdinherit 2493da6c28aaSamw * 2494da6c28aaSamw * Inherit the security descriptor from the parent container. 2495da6c28aaSamw * This function is called after FS has created the file/folder 2496da6c28aaSamw * so if this doesn't do anything it means FS inheritance is 2497da6c28aaSamw * in place. 2498da6c28aaSamw * 2499da6c28aaSamw * Do inheritance for ZFS internally. 2500da6c28aaSamw * 2501da6c28aaSamw * If we want to let ZFS does the inheritance the 2502da6c28aaSamw * following setting should be true: 2503da6c28aaSamw * 2504da6c28aaSamw * - aclinherit = passthrough 2505da6c28aaSamw * - aclmode = passthrough 2506da6c28aaSamw * - smbd umask = 0777 2507da6c28aaSamw * 2508da6c28aaSamw * This will result in right effective permissions but 2509da6c28aaSamw * ZFS will always add 6 ACEs for owner, owning group 2510da6c28aaSamw * and others to be POSIX compliant. This is not what 2511da6c28aaSamw * Windows clients/users expect, so we decided that CIFS 2512da6c28aaSamw * implements Windows rules and overwrite whatever ZFS 2513da6c28aaSamw * comes up with. This way we also don't have to care 2514da6c28aaSamw * about ZFS aclinherit and aclmode settings. 2515da6c28aaSamw */ 2516da6c28aaSamw static int 2517da6c28aaSamw smb_fsop_sdinherit(smb_request_t *sr, smb_node_t *dnode, smb_fssd_t *fs_sd) 2518da6c28aaSamw { 251955bf511dSas200622 acl_t *dacl = NULL; 252055bf511dSas200622 acl_t *sacl = NULL; 25219fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States int is_dir; 2522da6c28aaSamw int error; 2523*d11e14a7SMatt Barden uint32_t secinfo; 2524*d11e14a7SMatt Barden smb_fssd_t pfs_sd; 2525da6c28aaSamw 2526da6c28aaSamw ASSERT(fs_sd); 2527da6c28aaSamw 2528*d11e14a7SMatt Barden secinfo = fs_sd->sd_secinfo; 2529*d11e14a7SMatt Barden 2530*d11e14a7SMatt Barden /* Anything to do? */ 2531*d11e14a7SMatt Barden if ((secinfo & SMB_ACL_SECINFO) == SMB_ACL_SECINFO) 2532*d11e14a7SMatt Barden return (0); 2533*d11e14a7SMatt Barden 2534da6c28aaSamw /* 2535da6c28aaSamw * No forced inheritance for non-ZFS filesystems. 2536da6c28aaSamw */ 2537*d11e14a7SMatt Barden if (sr->tid_tree->t_acltype != ACE_T) 2538da6c28aaSamw return (0); 2539da6c28aaSamw 2540*d11e14a7SMatt Barden smb_fssd_init(&pfs_sd, SMB_ACL_SECINFO, fs_sd->sd_flags); 2541da6c28aaSamw 2542da6c28aaSamw /* Fetch parent directory's ACL */ 2543*d11e14a7SMatt Barden error = smb_fsop_sdread(sr, zone_kcred(), dnode, &pfs_sd); 2544da6c28aaSamw if (error) { 2545da6c28aaSamw return (error); 2546da6c28aaSamw } 2547da6c28aaSamw 2548da6c28aaSamw is_dir = (fs_sd->sd_flags & SMB_FSSD_FLAGS_DIR); 2549*d11e14a7SMatt Barden if ((secinfo & SMB_DACL_SECINFO) == 0) { 2550*d11e14a7SMatt Barden dacl = smb_fsacl_inherit(pfs_sd.sd_zdacl, is_dir, 2551*d11e14a7SMatt Barden SMB_DACL_SECINFO, sr->user_cr); 2552da6c28aaSamw fs_sd->sd_zdacl = dacl; 2553*d11e14a7SMatt Barden } 2554da6c28aaSamw 2555*d11e14a7SMatt Barden if ((secinfo & SMB_SACL_SECINFO) == 0) { 2556*d11e14a7SMatt Barden sacl = smb_fsacl_inherit(pfs_sd.sd_zsacl, is_dir, 2557*d11e14a7SMatt Barden SMB_SACL_SECINFO, sr->user_cr); 2558*d11e14a7SMatt Barden fs_sd->sd_zsacl = sacl; 2559*d11e14a7SMatt Barden } 2560*d11e14a7SMatt Barden 2561*d11e14a7SMatt Barden smb_fsacl_free(pfs_sd.sd_zdacl); 2562*d11e14a7SMatt Barden smb_fsacl_free(pfs_sd.sd_zsacl); 2563da6c28aaSamw return (0); 2564da6c28aaSamw } 2565b819cea2SGordon Ross #endif /* _KERNEL */ 2566da6c28aaSamw 2567da6c28aaSamw /* 2568da6c28aaSamw * smb_fsop_eaccess 2569da6c28aaSamw * 2570da6c28aaSamw * Returns the effective permission of the given credential for the 2571da6c28aaSamw * specified object. 2572da6c28aaSamw * 2573da6c28aaSamw * This is just a workaround. We need VFS/FS support for this. 2574da6c28aaSamw */ 2575da6c28aaSamw void 2576da6c28aaSamw smb_fsop_eaccess(smb_request_t *sr, cred_t *cr, smb_node_t *snode, 2577da6c28aaSamw uint32_t *eaccess) 2578da6c28aaSamw { 2579da6c28aaSamw int access = 0; 2580da6c28aaSamw vnode_t *dir_vp; 2581da6c28aaSamw smb_node_t *unnamed_node; 2582da6c28aaSamw 2583da6c28aaSamw ASSERT(cr); 2584da6c28aaSamw ASSERT(snode); 2585da6c28aaSamw ASSERT(snode->n_magic == SMB_NODE_MAGIC); 2586da6c28aaSamw ASSERT(snode->n_state != SMB_NODE_STATE_DESTROYING); 2587da6c28aaSamw 2588da6c28aaSamw unnamed_node = SMB_IS_STREAM(snode); 2589da6c28aaSamw if (unnamed_node) { 2590da6c28aaSamw ASSERT(unnamed_node->n_magic == SMB_NODE_MAGIC); 2591da6c28aaSamw ASSERT(unnamed_node->n_state != SMB_NODE_STATE_DESTROYING); 2592da6c28aaSamw /* 2593da6c28aaSamw * Streams authorization should be performed against the 2594da6c28aaSamw * unnamed stream. 2595da6c28aaSamw */ 2596da6c28aaSamw snode = unnamed_node; 2597da6c28aaSamw } 2598da6c28aaSamw 2599c8ec8eeaSjose borrego if (smb_tree_has_feature(sr->tid_tree, SMB_TREE_ACEMASKONACCESS)) { 26001fcced4cSJordan Brown dir_vp = (snode->n_dnode) ? snode->n_dnode->vp : NULL; 2601da6c28aaSamw smb_vop_eaccess(snode->vp, (int *)eaccess, V_ACE_MASK, dir_vp, 2602da6c28aaSamw cr); 2603da6c28aaSamw return; 2604da6c28aaSamw } 2605da6c28aaSamw 2606da6c28aaSamw /* 2607da6c28aaSamw * FS doesn't understand 32-bit mask 2608da6c28aaSamw */ 2609da6c28aaSamw smb_vop_eaccess(snode->vp, &access, 0, NULL, cr); 2610743a77edSAlan Wright access &= sr->tid_tree->t_access; 2611da6c28aaSamw 2612da6c28aaSamw *eaccess = READ_CONTROL | FILE_READ_EA | FILE_READ_ATTRIBUTES; 2613da6c28aaSamw 2614da6c28aaSamw if (access & VREAD) 2615da6c28aaSamw *eaccess |= FILE_READ_DATA; 2616da6c28aaSamw 2617da6c28aaSamw if (access & VEXEC) 2618da6c28aaSamw *eaccess |= FILE_EXECUTE; 2619da6c28aaSamw 2620da6c28aaSamw if (access & VWRITE) 2621da6c28aaSamw *eaccess |= FILE_WRITE_DATA | FILE_WRITE_ATTRIBUTES | 2622da6c28aaSamw FILE_WRITE_EA | FILE_APPEND_DATA | FILE_DELETE_CHILD; 2623d2488fe8SGordon Ross 2624d2488fe8SGordon Ross if (access & (VREAD | VWRITE)) 2625d2488fe8SGordon Ross *eaccess |= SYNCHRONIZE; 2626d2488fe8SGordon Ross 2627d2488fe8SGordon Ross #ifdef _FAKE_KERNEL 2628d2488fe8SGordon Ross /* Should be: if (we are the owner)... */ 2629d2488fe8SGordon Ross if (access & VWRITE) 2630d2488fe8SGordon Ross *eaccess |= DELETE | WRITE_DAC | WRITE_OWNER; 2631d2488fe8SGordon Ross #endif 2632da6c28aaSamw } 263355bf511dSas200622 2634dc20a302Sas200622 /* 2635dc20a302Sas200622 * smb_fsop_shrlock 2636dc20a302Sas200622 * 2637dc20a302Sas200622 * For the current open request, check file sharing rules 2638dc20a302Sas200622 * against existing opens. 2639dc20a302Sas200622 * 2640dc20a302Sas200622 * Returns NT_STATUS_SHARING_VIOLATION if there is any 2641dc20a302Sas200622 * sharing conflict. Returns NT_STATUS_SUCCESS otherwise. 2642dc20a302Sas200622 * 2643dc20a302Sas200622 * Full system-wide share reservation synchronization is available 2644dc20a302Sas200622 * when the nbmand (non-blocking mandatory) mount option is set 2645dc20a302Sas200622 * (i.e. nbl_need_crit() is true) and nbmand critical regions are used. 2646dc20a302Sas200622 * This provides synchronization with NFS and local processes. The 2647dc20a302Sas200622 * critical regions are entered in VOP_SHRLOCK()/fs_shrlock() (called 2648dc20a302Sas200622 * from smb_open_subr()/smb_fsop_shrlock()/smb_vop_shrlock()) as well 2649dc20a302Sas200622 * as the CIFS rename and delete paths. 2650dc20a302Sas200622 * 2651dc20a302Sas200622 * The CIFS server will also enter the nbl critical region in the open, 2652dc20a302Sas200622 * rename, and delete paths when nbmand is not set. There is limited 2653dc20a302Sas200622 * coordination with local and VFS share reservations in this case. 2654dc20a302Sas200622 * Note that when the nbmand mount option is not set, the VFS layer 2655dc20a302Sas200622 * only processes advisory reservations and the delete mode is not checked. 2656dc20a302Sas200622 * 2657dc20a302Sas200622 * Whether or not the nbmand mount option is set, intra-CIFS share 2658dc20a302Sas200622 * checking is done in the open, delete, and rename paths using a CIFS 2659dc20a302Sas200622 * critical region (node->n_share_lock). 2660dc20a302Sas200622 */ 2661dc20a302Sas200622 uint32_t 2662faa1795aSjb150015 smb_fsop_shrlock(cred_t *cr, smb_node_t *node, uint32_t uniq_fid, 2663dc20a302Sas200622 uint32_t desired_access, uint32_t share_access) 266455bf511dSas200622 { 2665dc20a302Sas200622 int rc; 2666dc20a302Sas200622 2667dc20a302Sas200622 /* Allow access if the request is just for meta data */ 2668dc20a302Sas200622 if ((desired_access & FILE_DATA_ALL) == 0) 2669dc20a302Sas200622 return (NT_STATUS_SUCCESS); 2670dc20a302Sas200622 26719fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States rc = smb_node_open_check(node, desired_access, share_access); 2672dc20a302Sas200622 if (rc) 2673dc20a302Sas200622 return (NT_STATUS_SHARING_VIOLATION); 2674dc20a302Sas200622 2675dc20a302Sas200622 rc = smb_vop_shrlock(node->vp, uniq_fid, desired_access, share_access, 2676dc20a302Sas200622 cr); 2677dc20a302Sas200622 if (rc) 2678dc20a302Sas200622 return (NT_STATUS_SHARING_VIOLATION); 2679dc20a302Sas200622 2680dc20a302Sas200622 return (NT_STATUS_SUCCESS); 2681dc20a302Sas200622 } 2682dc20a302Sas200622 2683dc20a302Sas200622 void 2684dc20a302Sas200622 smb_fsop_unshrlock(cred_t *cr, smb_node_t *node, uint32_t uniq_fid) 2685dc20a302Sas200622 { 2686dc20a302Sas200622 (void) smb_vop_unshrlock(node->vp, uniq_fid, cr); 2687dc20a302Sas200622 } 26888c10a865Sas200622 26898c10a865Sas200622 int 26908c10a865Sas200622 smb_fsop_frlock(smb_node_t *node, smb_lock_t *lock, boolean_t unlock, 26918c10a865Sas200622 cred_t *cr) 26928c10a865Sas200622 { 26938c10a865Sas200622 flock64_t bf; 26948c10a865Sas200622 int flag = F_REMOTELOCK; 26958c10a865Sas200622 26963ad684d6Sjb150015 /* 26973ad684d6Sjb150015 * VOP_FRLOCK() will not be called if: 26983ad684d6Sjb150015 * 26993ad684d6Sjb150015 * 1) The lock has a range of zero bytes. The semantics of Windows and 27003ad684d6Sjb150015 * POSIX are different. In the case of POSIX it asks for the locking 27013ad684d6Sjb150015 * of all the bytes from the offset provided until the end of the 27023ad684d6Sjb150015 * file. In the case of Windows a range of zero locks nothing and 27033ad684d6Sjb150015 * doesn't conflict with any other lock. 27043ad684d6Sjb150015 * 27053ad684d6Sjb150015 * 2) The lock rolls over (start + lenght < start). Solaris will assert 27063ad684d6Sjb150015 * if such a request is submitted. This will not create 27073ad684d6Sjb150015 * incompatibilities between POSIX and Windows. In the Windows world, 27083ad684d6Sjb150015 * if a client submits such a lock, the server will not lock any 27093ad684d6Sjb150015 * bytes. Interestingly if the same lock (same offset and length) is 27103ad684d6Sjb150015 * resubmitted Windows will consider that there is an overlap and 27113ad684d6Sjb150015 * the granting rules will then apply. 27120897f7fbSGordon Ross * 27130897f7fbSGordon Ross * 3) The SMB-level process IDs (smb_pid) are not passed down to the 27140897f7fbSGordon Ross * POSIX level in l_pid because (a) the rules about lock PIDs are 27150897f7fbSGordon Ross * different in SMB, and (b) we're putting our ofile f_uniqid in 27160897f7fbSGordon Ross * the POSIX l_pid field to segregate locks per SMB ofile. 27170897f7fbSGordon Ross * (We're also using a "remote" system ID in l_sysid.) 27180897f7fbSGordon Ross * All SMB locking PIDs are handled at the SMB level and 27190897f7fbSGordon Ross * not exposed in POSIX locking. 27203ad684d6Sjb150015 */ 27213ad684d6Sjb150015 if ((lock->l_length == 0) || 27223ad684d6Sjb150015 ((lock->l_start + lock->l_length - 1) < lock->l_start)) 27233ad684d6Sjb150015 return (0); 27243ad684d6Sjb150015 27258c10a865Sas200622 bzero(&bf, sizeof (bf)); 27268c10a865Sas200622 27278c10a865Sas200622 if (unlock) { 27288c10a865Sas200622 bf.l_type = F_UNLCK; 27298c10a865Sas200622 } else if (lock->l_type == SMB_LOCK_TYPE_READONLY) { 27308c10a865Sas200622 bf.l_type = F_RDLCK; 27318c10a865Sas200622 flag |= FREAD; 27328c10a865Sas200622 } else if (lock->l_type == SMB_LOCK_TYPE_READWRITE) { 27338c10a865Sas200622 bf.l_type = F_WRLCK; 27348c10a865Sas200622 flag |= FWRITE; 27358c10a865Sas200622 } 27368c10a865Sas200622 27378c10a865Sas200622 bf.l_start = lock->l_start; 27388c10a865Sas200622 bf.l_len = lock->l_length; 2739c8ec8eeaSjose borrego bf.l_pid = lock->l_file->f_uniqid; 27408c10a865Sas200622 bf.l_sysid = smb_ct.cc_sysid; 27418c10a865Sas200622 27428c10a865Sas200622 return (smb_vop_frlock(node->vp, cr, flag, &bf)); 27438c10a865Sas200622 } 2744