1 /* 2 * CDDL HEADER START 3 * 4 * The contents of this file are subject to the terms of the 5 * Common Development and Distribution License (the "License"). 6 * You may not use this file except in compliance with the License. 7 * 8 * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE 9 * or http://www.opensolaris.org/os/licensing. 10 * See the License for the specific language governing permissions 11 * and limitations under the License. 12 * 13 * When distributing Covered Code, include this CDDL HEADER in each 14 * file and include the License file at usr/src/OPENSOLARIS.LICENSE. 15 * If applicable, add the following below this CDDL HEADER, with the 16 * fields enclosed by brackets "[]" replaced with your own identifying 17 * information: Portions Copyright [yyyy] [name of copyright owner] 18 * 19 * CDDL HEADER END 20 */ 21 /* 22 * Copyright 2008 Sun Microsystems, Inc. All rights reserved. 23 * Use is subject to license terms. 24 */ 25 26 #include <sys/types.h> 27 #include <sys/param.h> 28 #include <sys/errno.h> 29 #include <sys/uio.h> 30 #include <sys/buf.h> 31 #include <sys/modctl.h> 32 #include <sys/open.h> 33 #include <sys/file.h> 34 #include <sys/kmem.h> 35 #include <sys/conf.h> 36 #include <sys/cmn_err.h> 37 #include <sys/stat.h> 38 #include <sys/zfs_ioctl.h> 39 #include <sys/zfs_znode.h> 40 #include <sys/zap.h> 41 #include <sys/spa.h> 42 #include <sys/spa_impl.h> 43 #include <sys/vdev.h> 44 #include <sys/vdev_impl.h> 45 #include <sys/dmu.h> 46 #include <sys/dsl_dir.h> 47 #include <sys/dsl_dataset.h> 48 #include <sys/dsl_prop.h> 49 #include <sys/dsl_deleg.h> 50 #include <sys/dmu_objset.h> 51 #include <sys/ddi.h> 52 #include <sys/sunddi.h> 53 #include <sys/sunldi.h> 54 #include <sys/policy.h> 55 #include <sys/zone.h> 56 #include <sys/nvpair.h> 57 #include <sys/pathname.h> 58 #include <sys/mount.h> 59 #include <sys/sdt.h> 60 #include <sys/fs/zfs.h> 61 #include <sys/zfs_ctldir.h> 62 #include <sys/zfs_dir.h> 63 #include <sys/zvol.h> 64 #include <sharefs/share.h> 65 #include <sys/dmu_objset.h> 66 67 #include "zfs_namecheck.h" 68 #include "zfs_prop.h" 69 #include "zfs_deleg.h" 70 71 extern struct modlfs zfs_modlfs; 72 73 extern void zfs_init(void); 74 extern void zfs_fini(void); 75 76 ldi_ident_t zfs_li = NULL; 77 dev_info_t *zfs_dip; 78 79 typedef int zfs_ioc_func_t(zfs_cmd_t *); 80 typedef int zfs_secpolicy_func_t(zfs_cmd_t *, cred_t *); 81 82 typedef struct zfs_ioc_vec { 83 zfs_ioc_func_t *zvec_func; 84 zfs_secpolicy_func_t *zvec_secpolicy; 85 enum { 86 NO_NAME, 87 POOL_NAME, 88 DATASET_NAME 89 } zvec_namecheck; 90 boolean_t zvec_his_log; 91 } zfs_ioc_vec_t; 92 93 static void clear_props(char *dataset, nvlist_t *props); 94 static int zfs_fill_zplprops_root(uint64_t, nvlist_t *, nvlist_t *, 95 boolean_t *); 96 int zfs_set_prop_nvlist(const char *, nvlist_t *); 97 98 /* _NOTE(PRINTFLIKE(4)) - this is printf-like, but lint is too whiney */ 99 void 100 __dprintf(const char *file, const char *func, int line, const char *fmt, ...) 101 { 102 const char *newfile; 103 char buf[256]; 104 va_list adx; 105 106 /* 107 * Get rid of annoying "../common/" prefix to filename. 108 */ 109 newfile = strrchr(file, '/'); 110 if (newfile != NULL) { 111 newfile = newfile + 1; /* Get rid of leading / */ 112 } else { 113 newfile = file; 114 } 115 116 va_start(adx, fmt); 117 (void) vsnprintf(buf, sizeof (buf), fmt, adx); 118 va_end(adx); 119 120 /* 121 * To get this data, use the zfs-dprintf probe as so: 122 * dtrace -q -n 'zfs-dprintf \ 123 * /stringof(arg0) == "dbuf.c"/ \ 124 * {printf("%s: %s", stringof(arg1), stringof(arg3))}' 125 * arg0 = file name 126 * arg1 = function name 127 * arg2 = line number 128 * arg3 = message 129 */ 130 DTRACE_PROBE4(zfs__dprintf, 131 char *, newfile, char *, func, int, line, char *, buf); 132 } 133 134 static void 135 history_str_free(char *buf) 136 { 137 kmem_free(buf, HIS_MAX_RECORD_LEN); 138 } 139 140 static char * 141 history_str_get(zfs_cmd_t *zc) 142 { 143 char *buf; 144 145 if (zc->zc_history == NULL) 146 return (NULL); 147 148 buf = kmem_alloc(HIS_MAX_RECORD_LEN, KM_SLEEP); 149 if (copyinstr((void *)(uintptr_t)zc->zc_history, 150 buf, HIS_MAX_RECORD_LEN, NULL) != 0) { 151 history_str_free(buf); 152 return (NULL); 153 } 154 155 buf[HIS_MAX_RECORD_LEN -1] = '\0'; 156 157 return (buf); 158 } 159 160 /* 161 * Check to see if the named dataset is currently defined as bootable 162 */ 163 static boolean_t 164 zfs_is_bootfs(const char *name) 165 { 166 spa_t *spa; 167 boolean_t ret = B_FALSE; 168 169 if (spa_open(name, &spa, FTAG) == 0) { 170 if (spa->spa_bootfs) { 171 objset_t *os; 172 173 if (dmu_objset_open(name, DMU_OST_ZFS, 174 DS_MODE_USER | DS_MODE_READONLY, &os) == 0) { 175 ret = (dmu_objset_id(os) == spa->spa_bootfs); 176 dmu_objset_close(os); 177 } 178 } 179 spa_close(spa, FTAG); 180 } 181 return (ret); 182 } 183 184 /* 185 * zfs_earlier_version 186 * 187 * Return non-zero if the spa version is less than requested version. 188 */ 189 static int 190 zfs_earlier_version(const char *name, int version) 191 { 192 spa_t *spa; 193 194 if (spa_open(name, &spa, FTAG) == 0) { 195 if (spa_version(spa) < version) { 196 spa_close(spa, FTAG); 197 return (1); 198 } 199 spa_close(spa, FTAG); 200 } 201 return (0); 202 } 203 204 /* 205 * zpl_earlier_version 206 * 207 * Return TRUE if the ZPL version is less than requested version. 208 */ 209 static boolean_t 210 zpl_earlier_version(const char *name, int version) 211 { 212 objset_t *os; 213 boolean_t rc = B_TRUE; 214 215 if (dmu_objset_open(name, DMU_OST_ANY, 216 DS_MODE_USER | DS_MODE_READONLY, &os) == 0) { 217 uint64_t zplversion; 218 219 if (zfs_get_zplprop(os, ZFS_PROP_VERSION, &zplversion) == 0) 220 rc = zplversion < version; 221 dmu_objset_close(os); 222 } 223 return (rc); 224 } 225 226 static void 227 zfs_log_history(zfs_cmd_t *zc) 228 { 229 spa_t *spa; 230 char *buf; 231 232 if ((buf = history_str_get(zc)) == NULL) 233 return; 234 235 if (spa_open(zc->zc_name, &spa, FTAG) == 0) { 236 if (spa_version(spa) >= SPA_VERSION_ZPOOL_HISTORY) 237 (void) spa_history_log(spa, buf, LOG_CMD_NORMAL); 238 spa_close(spa, FTAG); 239 } 240 history_str_free(buf); 241 } 242 243 /* 244 * Policy for top-level read operations (list pools). Requires no privileges, 245 * and can be used in the local zone, as there is no associated dataset. 246 */ 247 /* ARGSUSED */ 248 static int 249 zfs_secpolicy_none(zfs_cmd_t *zc, cred_t *cr) 250 { 251 return (0); 252 } 253 254 /* 255 * Policy for dataset read operations (list children, get statistics). Requires 256 * no privileges, but must be visible in the local zone. 257 */ 258 /* ARGSUSED */ 259 static int 260 zfs_secpolicy_read(zfs_cmd_t *zc, cred_t *cr) 261 { 262 if (INGLOBALZONE(curproc) || 263 zone_dataset_visible(zc->zc_name, NULL)) 264 return (0); 265 266 return (ENOENT); 267 } 268 269 static int 270 zfs_dozonecheck(const char *dataset, cred_t *cr) 271 { 272 uint64_t zoned; 273 int writable = 1; 274 275 /* 276 * The dataset must be visible by this zone -- check this first 277 * so they don't see EPERM on something they shouldn't know about. 278 */ 279 if (!INGLOBALZONE(curproc) && 280 !zone_dataset_visible(dataset, &writable)) 281 return (ENOENT); 282 283 if (dsl_prop_get_integer(dataset, "zoned", &zoned, NULL)) 284 return (ENOENT); 285 286 if (INGLOBALZONE(curproc)) { 287 /* 288 * If the fs is zoned, only root can access it from the 289 * global zone. 290 */ 291 if (secpolicy_zfs(cr) && zoned) 292 return (EPERM); 293 } else { 294 /* 295 * If we are in a local zone, the 'zoned' property must be set. 296 */ 297 if (!zoned) 298 return (EPERM); 299 300 /* must be writable by this zone */ 301 if (!writable) 302 return (EPERM); 303 } 304 return (0); 305 } 306 307 int 308 zfs_secpolicy_write_perms(const char *name, const char *perm, cred_t *cr) 309 { 310 int error; 311 312 error = zfs_dozonecheck(name, cr); 313 if (error == 0) { 314 error = secpolicy_zfs(cr); 315 if (error) 316 error = dsl_deleg_access(name, perm, cr); 317 } 318 return (error); 319 } 320 321 static int 322 zfs_secpolicy_setprop(const char *name, zfs_prop_t prop, cred_t *cr) 323 { 324 /* 325 * Check permissions for special properties. 326 */ 327 switch (prop) { 328 case ZFS_PROP_ZONED: 329 /* 330 * Disallow setting of 'zoned' from within a local zone. 331 */ 332 if (!INGLOBALZONE(curproc)) 333 return (EPERM); 334 break; 335 336 case ZFS_PROP_QUOTA: 337 if (!INGLOBALZONE(curproc)) { 338 uint64_t zoned; 339 char setpoint[MAXNAMELEN]; 340 /* 341 * Unprivileged users are allowed to modify the 342 * quota on things *under* (ie. contained by) 343 * the thing they own. 344 */ 345 if (dsl_prop_get_integer(name, "zoned", &zoned, 346 setpoint)) 347 return (EPERM); 348 if (!zoned || strlen(name) <= strlen(setpoint)) 349 return (EPERM); 350 } 351 break; 352 } 353 354 return (zfs_secpolicy_write_perms(name, zfs_prop_to_name(prop), cr)); 355 } 356 357 int 358 zfs_secpolicy_fsacl(zfs_cmd_t *zc, cred_t *cr) 359 { 360 int error; 361 362 error = zfs_dozonecheck(zc->zc_name, cr); 363 if (error) 364 return (error); 365 366 /* 367 * permission to set permissions will be evaluated later in 368 * dsl_deleg_can_allow() 369 */ 370 return (0); 371 } 372 373 int 374 zfs_secpolicy_rollback(zfs_cmd_t *zc, cred_t *cr) 375 { 376 int error; 377 error = zfs_secpolicy_write_perms(zc->zc_name, 378 ZFS_DELEG_PERM_ROLLBACK, cr); 379 if (error == 0) 380 error = zfs_secpolicy_write_perms(zc->zc_name, 381 ZFS_DELEG_PERM_MOUNT, cr); 382 return (error); 383 } 384 385 int 386 zfs_secpolicy_send(zfs_cmd_t *zc, cred_t *cr) 387 { 388 return (zfs_secpolicy_write_perms(zc->zc_name, 389 ZFS_DELEG_PERM_SEND, cr)); 390 } 391 392 int 393 zfs_secpolicy_share(zfs_cmd_t *zc, cred_t *cr) 394 { 395 if (!INGLOBALZONE(curproc)) 396 return (EPERM); 397 398 if (secpolicy_nfs(cr) == 0) { 399 return (0); 400 } else { 401 vnode_t *vp; 402 int error; 403 404 if ((error = lookupname(zc->zc_value, UIO_SYSSPACE, 405 NO_FOLLOW, NULL, &vp)) != 0) 406 return (error); 407 408 /* Now make sure mntpnt and dataset are ZFS */ 409 410 if (vp->v_vfsp->vfs_fstype != zfsfstype || 411 (strcmp((char *)refstr_value(vp->v_vfsp->vfs_resource), 412 zc->zc_name) != 0)) { 413 VN_RELE(vp); 414 return (EPERM); 415 } 416 417 VN_RELE(vp); 418 return (dsl_deleg_access(zc->zc_name, 419 ZFS_DELEG_PERM_SHARE, cr)); 420 } 421 } 422 423 static int 424 zfs_get_parent(const char *datasetname, char *parent, int parentsize) 425 { 426 char *cp; 427 428 /* 429 * Remove the @bla or /bla from the end of the name to get the parent. 430 */ 431 (void) strncpy(parent, datasetname, parentsize); 432 cp = strrchr(parent, '@'); 433 if (cp != NULL) { 434 cp[0] = '\0'; 435 } else { 436 cp = strrchr(parent, '/'); 437 if (cp == NULL) 438 return (ENOENT); 439 cp[0] = '\0'; 440 } 441 442 return (0); 443 } 444 445 int 446 zfs_secpolicy_destroy_perms(const char *name, cred_t *cr) 447 { 448 int error; 449 450 if ((error = zfs_secpolicy_write_perms(name, 451 ZFS_DELEG_PERM_MOUNT, cr)) != 0) 452 return (error); 453 454 return (zfs_secpolicy_write_perms(name, ZFS_DELEG_PERM_DESTROY, cr)); 455 } 456 457 static int 458 zfs_secpolicy_destroy(zfs_cmd_t *zc, cred_t *cr) 459 { 460 return (zfs_secpolicy_destroy_perms(zc->zc_name, cr)); 461 } 462 463 /* 464 * Must have sys_config privilege to check the iscsi permission 465 */ 466 /* ARGSUSED */ 467 static int 468 zfs_secpolicy_iscsi(zfs_cmd_t *zc, cred_t *cr) 469 { 470 return (secpolicy_zfs(cr)); 471 } 472 473 int 474 zfs_secpolicy_rename_perms(const char *from, const char *to, cred_t *cr) 475 { 476 char parentname[MAXNAMELEN]; 477 int error; 478 479 if ((error = zfs_secpolicy_write_perms(from, 480 ZFS_DELEG_PERM_RENAME, cr)) != 0) 481 return (error); 482 483 if ((error = zfs_secpolicy_write_perms(from, 484 ZFS_DELEG_PERM_MOUNT, cr)) != 0) 485 return (error); 486 487 if ((error = zfs_get_parent(to, parentname, 488 sizeof (parentname))) != 0) 489 return (error); 490 491 if ((error = zfs_secpolicy_write_perms(parentname, 492 ZFS_DELEG_PERM_CREATE, cr)) != 0) 493 return (error); 494 495 if ((error = zfs_secpolicy_write_perms(parentname, 496 ZFS_DELEG_PERM_MOUNT, cr)) != 0) 497 return (error); 498 499 return (error); 500 } 501 502 static int 503 zfs_secpolicy_rename(zfs_cmd_t *zc, cred_t *cr) 504 { 505 return (zfs_secpolicy_rename_perms(zc->zc_name, zc->zc_value, cr)); 506 } 507 508 static int 509 zfs_secpolicy_promote(zfs_cmd_t *zc, cred_t *cr) 510 { 511 char parentname[MAXNAMELEN]; 512 objset_t *clone; 513 int error; 514 515 error = zfs_secpolicy_write_perms(zc->zc_name, 516 ZFS_DELEG_PERM_PROMOTE, cr); 517 if (error) 518 return (error); 519 520 error = dmu_objset_open(zc->zc_name, DMU_OST_ANY, 521 DS_MODE_USER | DS_MODE_READONLY, &clone); 522 523 if (error == 0) { 524 dsl_dataset_t *pclone = NULL; 525 dsl_dir_t *dd; 526 dd = clone->os->os_dsl_dataset->ds_dir; 527 528 rw_enter(&dd->dd_pool->dp_config_rwlock, RW_READER); 529 error = dsl_dataset_hold_obj(dd->dd_pool, 530 dd->dd_phys->dd_origin_obj, FTAG, &pclone); 531 rw_exit(&dd->dd_pool->dp_config_rwlock); 532 if (error) { 533 dmu_objset_close(clone); 534 return (error); 535 } 536 537 error = zfs_secpolicy_write_perms(zc->zc_name, 538 ZFS_DELEG_PERM_MOUNT, cr); 539 540 dsl_dataset_name(pclone, parentname); 541 dmu_objset_close(clone); 542 dsl_dataset_rele(pclone, FTAG); 543 if (error == 0) 544 error = zfs_secpolicy_write_perms(parentname, 545 ZFS_DELEG_PERM_PROMOTE, cr); 546 } 547 return (error); 548 } 549 550 static int 551 zfs_secpolicy_receive(zfs_cmd_t *zc, cred_t *cr) 552 { 553 int error; 554 555 if ((error = zfs_secpolicy_write_perms(zc->zc_name, 556 ZFS_DELEG_PERM_RECEIVE, cr)) != 0) 557 return (error); 558 559 if ((error = zfs_secpolicy_write_perms(zc->zc_name, 560 ZFS_DELEG_PERM_MOUNT, cr)) != 0) 561 return (error); 562 563 return (zfs_secpolicy_write_perms(zc->zc_name, 564 ZFS_DELEG_PERM_CREATE, cr)); 565 } 566 567 int 568 zfs_secpolicy_snapshot_perms(const char *name, cred_t *cr) 569 { 570 int error; 571 572 if ((error = zfs_secpolicy_write_perms(name, 573 ZFS_DELEG_PERM_SNAPSHOT, cr)) != 0) 574 return (error); 575 576 error = zfs_secpolicy_write_perms(name, 577 ZFS_DELEG_PERM_MOUNT, cr); 578 579 return (error); 580 } 581 582 static int 583 zfs_secpolicy_snapshot(zfs_cmd_t *zc, cred_t *cr) 584 { 585 586 return (zfs_secpolicy_snapshot_perms(zc->zc_name, cr)); 587 } 588 589 static int 590 zfs_secpolicy_create(zfs_cmd_t *zc, cred_t *cr) 591 { 592 char parentname[MAXNAMELEN]; 593 int error; 594 595 if ((error = zfs_get_parent(zc->zc_name, parentname, 596 sizeof (parentname))) != 0) 597 return (error); 598 599 if (zc->zc_value[0] != '\0') { 600 if ((error = zfs_secpolicy_write_perms(zc->zc_value, 601 ZFS_DELEG_PERM_CLONE, cr)) != 0) 602 return (error); 603 } 604 605 if ((error = zfs_secpolicy_write_perms(parentname, 606 ZFS_DELEG_PERM_CREATE, cr)) != 0) 607 return (error); 608 609 error = zfs_secpolicy_write_perms(parentname, 610 ZFS_DELEG_PERM_MOUNT, cr); 611 612 return (error); 613 } 614 615 static int 616 zfs_secpolicy_umount(zfs_cmd_t *zc, cred_t *cr) 617 { 618 int error; 619 620 error = secpolicy_fs_unmount(cr, NULL); 621 if (error) { 622 error = dsl_deleg_access(zc->zc_name, ZFS_DELEG_PERM_MOUNT, cr); 623 } 624 return (error); 625 } 626 627 /* 628 * Policy for pool operations - create/destroy pools, add vdevs, etc. Requires 629 * SYS_CONFIG privilege, which is not available in a local zone. 630 */ 631 /* ARGSUSED */ 632 static int 633 zfs_secpolicy_config(zfs_cmd_t *zc, cred_t *cr) 634 { 635 if (secpolicy_sys_config(cr, B_FALSE) != 0) 636 return (EPERM); 637 638 return (0); 639 } 640 641 /* 642 * Just like zfs_secpolicy_config, except that we will check for 643 * mount permission on the dataset for permission to create/remove 644 * the minor nodes. 645 */ 646 static int 647 zfs_secpolicy_minor(zfs_cmd_t *zc, cred_t *cr) 648 { 649 if (secpolicy_sys_config(cr, B_FALSE) != 0) { 650 return (dsl_deleg_access(zc->zc_name, 651 ZFS_DELEG_PERM_MOUNT, cr)); 652 } 653 654 return (0); 655 } 656 657 /* 658 * Policy for fault injection. Requires all privileges. 659 */ 660 /* ARGSUSED */ 661 static int 662 zfs_secpolicy_inject(zfs_cmd_t *zc, cred_t *cr) 663 { 664 return (secpolicy_zinject(cr)); 665 } 666 667 static int 668 zfs_secpolicy_inherit(zfs_cmd_t *zc, cred_t *cr) 669 { 670 zfs_prop_t prop = zfs_name_to_prop(zc->zc_value); 671 672 if (prop == ZPROP_INVAL) { 673 if (!zfs_prop_user(zc->zc_value)) 674 return (EINVAL); 675 return (zfs_secpolicy_write_perms(zc->zc_name, 676 ZFS_DELEG_PERM_USERPROP, cr)); 677 } else { 678 if (!zfs_prop_inheritable(prop)) 679 return (EINVAL); 680 return (zfs_secpolicy_setprop(zc->zc_name, prop, cr)); 681 } 682 } 683 684 /* 685 * Returns the nvlist as specified by the user in the zfs_cmd_t. 686 */ 687 static int 688 get_nvlist(uint64_t nvl, uint64_t size, nvlist_t **nvp) 689 { 690 char *packed; 691 int error; 692 nvlist_t *list = NULL; 693 694 /* 695 * Read in and unpack the user-supplied nvlist. 696 */ 697 if (size == 0) 698 return (EINVAL); 699 700 packed = kmem_alloc(size, KM_SLEEP); 701 702 if ((error = xcopyin((void *)(uintptr_t)nvl, packed, size)) != 0) { 703 kmem_free(packed, size); 704 return (error); 705 } 706 707 if ((error = nvlist_unpack(packed, size, &list, 0)) != 0) { 708 kmem_free(packed, size); 709 return (error); 710 } 711 712 kmem_free(packed, size); 713 714 *nvp = list; 715 return (0); 716 } 717 718 static int 719 put_nvlist(zfs_cmd_t *zc, nvlist_t *nvl) 720 { 721 char *packed = NULL; 722 size_t size; 723 int error; 724 725 VERIFY(nvlist_size(nvl, &size, NV_ENCODE_NATIVE) == 0); 726 727 if (size > zc->zc_nvlist_dst_size) { 728 error = ENOMEM; 729 } else { 730 packed = kmem_alloc(size, KM_SLEEP); 731 VERIFY(nvlist_pack(nvl, &packed, &size, NV_ENCODE_NATIVE, 732 KM_SLEEP) == 0); 733 error = xcopyout(packed, (void *)(uintptr_t)zc->zc_nvlist_dst, 734 size); 735 kmem_free(packed, size); 736 } 737 738 zc->zc_nvlist_dst_size = size; 739 return (error); 740 } 741 742 static int 743 zfs_ioc_pool_create(zfs_cmd_t *zc) 744 { 745 int error; 746 nvlist_t *config, *props = NULL; 747 nvlist_t *rootprops = NULL; 748 nvlist_t *zplprops = NULL; 749 char *buf; 750 751 if (error = get_nvlist(zc->zc_nvlist_conf, zc->zc_nvlist_conf_size, 752 &config)) 753 return (error); 754 755 if (zc->zc_nvlist_src_size != 0 && (error = 756 get_nvlist(zc->zc_nvlist_src, zc->zc_nvlist_src_size, &props))) { 757 nvlist_free(config); 758 return (error); 759 } 760 761 if (props) { 762 nvlist_t *nvl = NULL; 763 uint64_t version = SPA_VERSION; 764 765 (void) nvlist_lookup_uint64(props, 766 zpool_prop_to_name(ZPOOL_PROP_VERSION), &version); 767 if (version < SPA_VERSION_INITIAL || version > SPA_VERSION) { 768 error = EINVAL; 769 goto pool_props_bad; 770 } 771 (void) nvlist_lookup_nvlist(props, ZPOOL_ROOTFS_PROPS, &nvl); 772 if (nvl) { 773 error = nvlist_dup(nvl, &rootprops, KM_SLEEP); 774 if (error != 0) { 775 nvlist_free(config); 776 nvlist_free(props); 777 return (error); 778 } 779 (void) nvlist_remove_all(props, ZPOOL_ROOTFS_PROPS); 780 } 781 VERIFY(nvlist_alloc(&zplprops, NV_UNIQUE_NAME, KM_SLEEP) == 0); 782 error = zfs_fill_zplprops_root(version, rootprops, 783 zplprops, NULL); 784 if (error) 785 goto pool_props_bad; 786 } 787 788 buf = history_str_get(zc); 789 790 error = spa_create(zc->zc_name, config, props, buf, zplprops); 791 792 /* 793 * Set the remaining root properties 794 */ 795 if (!error && 796 (error = zfs_set_prop_nvlist(zc->zc_name, rootprops)) != 0) 797 (void) spa_destroy(zc->zc_name); 798 799 if (buf != NULL) 800 history_str_free(buf); 801 802 pool_props_bad: 803 nvlist_free(rootprops); 804 nvlist_free(zplprops); 805 nvlist_free(config); 806 nvlist_free(props); 807 808 return (error); 809 } 810 811 static int 812 zfs_ioc_pool_destroy(zfs_cmd_t *zc) 813 { 814 int error; 815 zfs_log_history(zc); 816 error = spa_destroy(zc->zc_name); 817 return (error); 818 } 819 820 static int 821 zfs_ioc_pool_import(zfs_cmd_t *zc) 822 { 823 int error; 824 nvlist_t *config, *props = NULL; 825 uint64_t guid; 826 827 if ((error = get_nvlist(zc->zc_nvlist_conf, zc->zc_nvlist_conf_size, 828 &config)) != 0) 829 return (error); 830 831 if (zc->zc_nvlist_src_size != 0 && (error = 832 get_nvlist(zc->zc_nvlist_src, zc->zc_nvlist_src_size, &props))) { 833 nvlist_free(config); 834 return (error); 835 } 836 837 if (nvlist_lookup_uint64(config, ZPOOL_CONFIG_POOL_GUID, &guid) != 0 || 838 guid != zc->zc_guid) 839 error = EINVAL; 840 else if (zc->zc_cookie) 841 error = spa_import_faulted(zc->zc_name, config, 842 props); 843 else 844 error = spa_import(zc->zc_name, config, props); 845 846 nvlist_free(config); 847 848 if (props) 849 nvlist_free(props); 850 851 return (error); 852 } 853 854 static int 855 zfs_ioc_pool_export(zfs_cmd_t *zc) 856 { 857 int error; 858 boolean_t force = (boolean_t)zc->zc_cookie; 859 boolean_t hardforce = (boolean_t)zc->zc_guid; 860 861 zfs_log_history(zc); 862 error = spa_export(zc->zc_name, NULL, force, hardforce); 863 return (error); 864 } 865 866 static int 867 zfs_ioc_pool_configs(zfs_cmd_t *zc) 868 { 869 nvlist_t *configs; 870 int error; 871 872 if ((configs = spa_all_configs(&zc->zc_cookie)) == NULL) 873 return (EEXIST); 874 875 error = put_nvlist(zc, configs); 876 877 nvlist_free(configs); 878 879 return (error); 880 } 881 882 static int 883 zfs_ioc_pool_stats(zfs_cmd_t *zc) 884 { 885 nvlist_t *config; 886 int error; 887 int ret = 0; 888 889 error = spa_get_stats(zc->zc_name, &config, zc->zc_value, 890 sizeof (zc->zc_value)); 891 892 if (config != NULL) { 893 ret = put_nvlist(zc, config); 894 nvlist_free(config); 895 896 /* 897 * The config may be present even if 'error' is non-zero. 898 * In this case we return success, and preserve the real errno 899 * in 'zc_cookie'. 900 */ 901 zc->zc_cookie = error; 902 } else { 903 ret = error; 904 } 905 906 return (ret); 907 } 908 909 /* 910 * Try to import the given pool, returning pool stats as appropriate so that 911 * user land knows which devices are available and overall pool health. 912 */ 913 static int 914 zfs_ioc_pool_tryimport(zfs_cmd_t *zc) 915 { 916 nvlist_t *tryconfig, *config; 917 int error; 918 919 if ((error = get_nvlist(zc->zc_nvlist_conf, zc->zc_nvlist_conf_size, 920 &tryconfig)) != 0) 921 return (error); 922 923 config = spa_tryimport(tryconfig); 924 925 nvlist_free(tryconfig); 926 927 if (config == NULL) 928 return (EINVAL); 929 930 error = put_nvlist(zc, config); 931 nvlist_free(config); 932 933 return (error); 934 } 935 936 static int 937 zfs_ioc_pool_scrub(zfs_cmd_t *zc) 938 { 939 spa_t *spa; 940 int error; 941 942 if ((error = spa_open(zc->zc_name, &spa, FTAG)) != 0) 943 return (error); 944 945 error = spa_scrub(spa, zc->zc_cookie); 946 947 spa_close(spa, FTAG); 948 949 return (error); 950 } 951 952 static int 953 zfs_ioc_pool_freeze(zfs_cmd_t *zc) 954 { 955 spa_t *spa; 956 int error; 957 958 error = spa_open(zc->zc_name, &spa, FTAG); 959 if (error == 0) { 960 spa_freeze(spa); 961 spa_close(spa, FTAG); 962 } 963 return (error); 964 } 965 966 static int 967 zfs_ioc_pool_upgrade(zfs_cmd_t *zc) 968 { 969 spa_t *spa; 970 int error; 971 972 if ((error = spa_open(zc->zc_name, &spa, FTAG)) != 0) 973 return (error); 974 975 if (zc->zc_cookie < spa_version(spa) || zc->zc_cookie > SPA_VERSION) { 976 spa_close(spa, FTAG); 977 return (EINVAL); 978 } 979 980 spa_upgrade(spa, zc->zc_cookie); 981 spa_close(spa, FTAG); 982 983 return (error); 984 } 985 986 static int 987 zfs_ioc_pool_get_history(zfs_cmd_t *zc) 988 { 989 spa_t *spa; 990 char *hist_buf; 991 uint64_t size; 992 int error; 993 994 if ((size = zc->zc_history_len) == 0) 995 return (EINVAL); 996 997 if ((error = spa_open(zc->zc_name, &spa, FTAG)) != 0) 998 return (error); 999 1000 if (spa_version(spa) < SPA_VERSION_ZPOOL_HISTORY) { 1001 spa_close(spa, FTAG); 1002 return (ENOTSUP); 1003 } 1004 1005 hist_buf = kmem_alloc(size, KM_SLEEP); 1006 if ((error = spa_history_get(spa, &zc->zc_history_offset, 1007 &zc->zc_history_len, hist_buf)) == 0) { 1008 error = xcopyout(hist_buf, 1009 (char *)(uintptr_t)zc->zc_history, 1010 zc->zc_history_len); 1011 } 1012 1013 spa_close(spa, FTAG); 1014 kmem_free(hist_buf, size); 1015 return (error); 1016 } 1017 1018 static int 1019 zfs_ioc_dsobj_to_dsname(zfs_cmd_t *zc) 1020 { 1021 int error; 1022 1023 if (error = dsl_dsobj_to_dsname(zc->zc_name, zc->zc_obj, zc->zc_value)) 1024 return (error); 1025 1026 return (0); 1027 } 1028 1029 static int 1030 zfs_ioc_obj_to_path(zfs_cmd_t *zc) 1031 { 1032 objset_t *osp; 1033 int error; 1034 1035 if ((error = dmu_objset_open(zc->zc_name, DMU_OST_ZFS, 1036 DS_MODE_USER | DS_MODE_READONLY, &osp)) != 0) 1037 return (error); 1038 error = zfs_obj_to_path(osp, zc->zc_obj, zc->zc_value, 1039 sizeof (zc->zc_value)); 1040 dmu_objset_close(osp); 1041 1042 return (error); 1043 } 1044 1045 static int 1046 zfs_ioc_vdev_add(zfs_cmd_t *zc) 1047 { 1048 spa_t *spa; 1049 int error; 1050 nvlist_t *config, **l2cache, **spares; 1051 uint_t nl2cache = 0, nspares = 0; 1052 1053 error = spa_open(zc->zc_name, &spa, FTAG); 1054 if (error != 0) 1055 return (error); 1056 1057 error = get_nvlist(zc->zc_nvlist_conf, zc->zc_nvlist_conf_size, 1058 &config); 1059 (void) nvlist_lookup_nvlist_array(config, ZPOOL_CONFIG_L2CACHE, 1060 &l2cache, &nl2cache); 1061 1062 (void) nvlist_lookup_nvlist_array(config, ZPOOL_CONFIG_SPARES, 1063 &spares, &nspares); 1064 1065 /* 1066 * A root pool with concatenated devices is not supported. 1067 * Thus, can not add a device to a root pool. 1068 * 1069 * Intent log device can not be added to a rootpool because 1070 * during mountroot, zil is replayed, a seperated log device 1071 * can not be accessed during the mountroot time. 1072 * 1073 * l2cache and spare devices are ok to be added to a rootpool. 1074 */ 1075 if (spa->spa_bootfs != 0 && nl2cache == 0 && nspares == 0) { 1076 spa_close(spa, FTAG); 1077 return (EDOM); 1078 } 1079 1080 if (error == 0) { 1081 error = spa_vdev_add(spa, config); 1082 nvlist_free(config); 1083 } 1084 spa_close(spa, FTAG); 1085 return (error); 1086 } 1087 1088 static int 1089 zfs_ioc_vdev_remove(zfs_cmd_t *zc) 1090 { 1091 spa_t *spa; 1092 int error; 1093 1094 error = spa_open(zc->zc_name, &spa, FTAG); 1095 if (error != 0) 1096 return (error); 1097 error = spa_vdev_remove(spa, zc->zc_guid, B_FALSE); 1098 spa_close(spa, FTAG); 1099 return (error); 1100 } 1101 1102 static int 1103 zfs_ioc_vdev_set_state(zfs_cmd_t *zc) 1104 { 1105 spa_t *spa; 1106 int error; 1107 vdev_state_t newstate = VDEV_STATE_UNKNOWN; 1108 1109 if ((error = spa_open(zc->zc_name, &spa, FTAG)) != 0) 1110 return (error); 1111 switch (zc->zc_cookie) { 1112 case VDEV_STATE_ONLINE: 1113 error = vdev_online(spa, zc->zc_guid, zc->zc_obj, &newstate); 1114 break; 1115 1116 case VDEV_STATE_OFFLINE: 1117 error = vdev_offline(spa, zc->zc_guid, zc->zc_obj); 1118 break; 1119 1120 case VDEV_STATE_FAULTED: 1121 error = vdev_fault(spa, zc->zc_guid); 1122 break; 1123 1124 case VDEV_STATE_DEGRADED: 1125 error = vdev_degrade(spa, zc->zc_guid); 1126 break; 1127 1128 default: 1129 error = EINVAL; 1130 } 1131 zc->zc_cookie = newstate; 1132 spa_close(spa, FTAG); 1133 return (error); 1134 } 1135 1136 static int 1137 zfs_ioc_vdev_attach(zfs_cmd_t *zc) 1138 { 1139 spa_t *spa; 1140 int replacing = zc->zc_cookie; 1141 nvlist_t *config; 1142 int error; 1143 1144 if ((error = spa_open(zc->zc_name, &spa, FTAG)) != 0) 1145 return (error); 1146 1147 if ((error = get_nvlist(zc->zc_nvlist_conf, zc->zc_nvlist_conf_size, 1148 &config)) == 0) { 1149 error = spa_vdev_attach(spa, zc->zc_guid, config, replacing); 1150 nvlist_free(config); 1151 } 1152 1153 spa_close(spa, FTAG); 1154 return (error); 1155 } 1156 1157 static int 1158 zfs_ioc_vdev_detach(zfs_cmd_t *zc) 1159 { 1160 spa_t *spa; 1161 int error; 1162 1163 if ((error = spa_open(zc->zc_name, &spa, FTAG)) != 0) 1164 return (error); 1165 1166 error = spa_vdev_detach(spa, zc->zc_guid, 0, B_FALSE); 1167 1168 spa_close(spa, FTAG); 1169 return (error); 1170 } 1171 1172 static int 1173 zfs_ioc_vdev_setpath(zfs_cmd_t *zc) 1174 { 1175 spa_t *spa; 1176 char *path = zc->zc_value; 1177 uint64_t guid = zc->zc_guid; 1178 int error; 1179 1180 error = spa_open(zc->zc_name, &spa, FTAG); 1181 if (error != 0) 1182 return (error); 1183 1184 error = spa_vdev_setpath(spa, guid, path); 1185 spa_close(spa, FTAG); 1186 return (error); 1187 } 1188 1189 /* 1190 * inputs: 1191 * zc_name name of filesystem 1192 * zc_nvlist_dst_size size of buffer for property nvlist 1193 * 1194 * outputs: 1195 * zc_objset_stats stats 1196 * zc_nvlist_dst property nvlist 1197 * zc_nvlist_dst_size size of property nvlist 1198 */ 1199 static int 1200 zfs_ioc_objset_stats(zfs_cmd_t *zc) 1201 { 1202 objset_t *os = NULL; 1203 int error; 1204 nvlist_t *nv; 1205 1206 if (error = dmu_objset_open(zc->zc_name, 1207 DMU_OST_ANY, DS_MODE_USER | DS_MODE_READONLY, &os)) 1208 return (error); 1209 1210 dmu_objset_fast_stat(os, &zc->zc_objset_stats); 1211 1212 if (zc->zc_nvlist_dst != 0 && 1213 (error = dsl_prop_get_all(os, &nv, FALSE)) == 0) { 1214 dmu_objset_stats(os, nv); 1215 /* 1216 * NB: zvol_get_stats() will read the objset contents, 1217 * which we aren't supposed to do with a 1218 * DS_MODE_USER hold, because it could be 1219 * inconsistent. So this is a bit of a workaround... 1220 */ 1221 if (!zc->zc_objset_stats.dds_inconsistent) { 1222 if (dmu_objset_type(os) == DMU_OST_ZVOL) 1223 VERIFY(zvol_get_stats(os, nv) == 0); 1224 } 1225 error = put_nvlist(zc, nv); 1226 nvlist_free(nv); 1227 } 1228 1229 dmu_objset_close(os); 1230 return (error); 1231 } 1232 1233 static int 1234 nvl_add_zplprop(objset_t *os, nvlist_t *props, zfs_prop_t prop) 1235 { 1236 uint64_t value; 1237 int error; 1238 1239 /* 1240 * zfs_get_zplprop() will either find a value or give us 1241 * the default value (if there is one). 1242 */ 1243 if ((error = zfs_get_zplprop(os, prop, &value)) != 0) 1244 return (error); 1245 VERIFY(nvlist_add_uint64(props, zfs_prop_to_name(prop), value) == 0); 1246 return (0); 1247 } 1248 1249 /* 1250 * inputs: 1251 * zc_name name of filesystem 1252 * zc_nvlist_dst_size size of buffer for zpl property nvlist 1253 * 1254 * outputs: 1255 * zc_nvlist_dst zpl property nvlist 1256 * zc_nvlist_dst_size size of zpl property nvlist 1257 */ 1258 static int 1259 zfs_ioc_objset_zplprops(zfs_cmd_t *zc) 1260 { 1261 objset_t *os; 1262 int err; 1263 1264 if (err = dmu_objset_open(zc->zc_name, 1265 DMU_OST_ANY, DS_MODE_USER | DS_MODE_READONLY, &os)) 1266 return (err); 1267 1268 dmu_objset_fast_stat(os, &zc->zc_objset_stats); 1269 1270 /* 1271 * NB: nvl_add_zplprop() will read the objset contents, 1272 * which we aren't supposed to do with a DS_MODE_USER 1273 * hold, because it could be inconsistent. 1274 */ 1275 if (zc->zc_nvlist_dst != NULL && 1276 !zc->zc_objset_stats.dds_inconsistent && 1277 dmu_objset_type(os) == DMU_OST_ZFS) { 1278 nvlist_t *nv; 1279 1280 VERIFY(nvlist_alloc(&nv, NV_UNIQUE_NAME, KM_SLEEP) == 0); 1281 if ((err = nvl_add_zplprop(os, nv, ZFS_PROP_VERSION)) == 0 && 1282 (err = nvl_add_zplprop(os, nv, ZFS_PROP_NORMALIZE)) == 0 && 1283 (err = nvl_add_zplprop(os, nv, ZFS_PROP_UTF8ONLY)) == 0 && 1284 (err = nvl_add_zplprop(os, nv, ZFS_PROP_CASE)) == 0) 1285 err = put_nvlist(zc, nv); 1286 nvlist_free(nv); 1287 } else { 1288 err = ENOENT; 1289 } 1290 dmu_objset_close(os); 1291 return (err); 1292 } 1293 1294 /* 1295 * inputs: 1296 * zc_name name of filesystem 1297 * zc_cookie zap cursor 1298 * zc_nvlist_dst_size size of buffer for property nvlist 1299 * 1300 * outputs: 1301 * zc_name name of next filesystem 1302 * zc_objset_stats stats 1303 * zc_nvlist_dst property nvlist 1304 * zc_nvlist_dst_size size of property nvlist 1305 */ 1306 static int 1307 zfs_ioc_dataset_list_next(zfs_cmd_t *zc) 1308 { 1309 objset_t *os; 1310 int error; 1311 char *p; 1312 1313 if (error = dmu_objset_open(zc->zc_name, 1314 DMU_OST_ANY, DS_MODE_USER | DS_MODE_READONLY, &os)) { 1315 if (error == ENOENT) 1316 error = ESRCH; 1317 return (error); 1318 } 1319 1320 p = strrchr(zc->zc_name, '/'); 1321 if (p == NULL || p[1] != '\0') 1322 (void) strlcat(zc->zc_name, "/", sizeof (zc->zc_name)); 1323 p = zc->zc_name + strlen(zc->zc_name); 1324 1325 do { 1326 error = dmu_dir_list_next(os, 1327 sizeof (zc->zc_name) - (p - zc->zc_name), p, 1328 NULL, &zc->zc_cookie); 1329 if (error == ENOENT) 1330 error = ESRCH; 1331 } while (error == 0 && !INGLOBALZONE(curproc) && 1332 !zone_dataset_visible(zc->zc_name, NULL)); 1333 dmu_objset_close(os); 1334 1335 /* 1336 * If it's a hidden dataset (ie. with a '$' in its name), don't 1337 * try to get stats for it. Userland will skip over it. 1338 */ 1339 if (error == 0 && strchr(zc->zc_name, '$') == NULL) 1340 error = zfs_ioc_objset_stats(zc); /* fill in the stats */ 1341 1342 return (error); 1343 } 1344 1345 /* 1346 * inputs: 1347 * zc_name name of filesystem 1348 * zc_cookie zap cursor 1349 * zc_nvlist_dst_size size of buffer for property nvlist 1350 * 1351 * outputs: 1352 * zc_name name of next snapshot 1353 * zc_objset_stats stats 1354 * zc_nvlist_dst property nvlist 1355 * zc_nvlist_dst_size size of property nvlist 1356 */ 1357 static int 1358 zfs_ioc_snapshot_list_next(zfs_cmd_t *zc) 1359 { 1360 objset_t *os; 1361 int error; 1362 1363 error = dmu_objset_open(zc->zc_name, 1364 DMU_OST_ANY, DS_MODE_USER | DS_MODE_READONLY, &os); 1365 if (error) 1366 return (error == ENOENT ? ESRCH : error); 1367 1368 /* 1369 * A dataset name of maximum length cannot have any snapshots, 1370 * so exit immediately. 1371 */ 1372 if (strlcat(zc->zc_name, "@", sizeof (zc->zc_name)) >= MAXNAMELEN) { 1373 dmu_objset_close(os); 1374 return (ESRCH); 1375 } 1376 1377 error = dmu_snapshot_list_next(os, 1378 sizeof (zc->zc_name) - strlen(zc->zc_name), 1379 zc->zc_name + strlen(zc->zc_name), NULL, &zc->zc_cookie, NULL); 1380 dmu_objset_close(os); 1381 if (error == 0) 1382 error = zfs_ioc_objset_stats(zc); /* fill in the stats */ 1383 else if (error == ENOENT) 1384 error = ESRCH; 1385 1386 /* if we failed, undo the @ that we tacked on to zc_name */ 1387 if (error) 1388 *strchr(zc->zc_name, '@') = '\0'; 1389 return (error); 1390 } 1391 1392 int 1393 zfs_set_prop_nvlist(const char *name, nvlist_t *nvl) 1394 { 1395 nvpair_t *elem; 1396 int error; 1397 uint64_t intval; 1398 char *strval; 1399 1400 /* 1401 * First validate permission to set all of the properties 1402 */ 1403 elem = NULL; 1404 while ((elem = nvlist_next_nvpair(nvl, elem)) != NULL) { 1405 const char *propname = nvpair_name(elem); 1406 zfs_prop_t prop = zfs_name_to_prop(propname); 1407 1408 if (prop == ZPROP_INVAL) { 1409 /* 1410 * If this is a user-defined property, it must be a 1411 * string, and there is no further validation to do. 1412 */ 1413 if (!zfs_prop_user(propname) || 1414 nvpair_type(elem) != DATA_TYPE_STRING) 1415 return (EINVAL); 1416 1417 if (error = zfs_secpolicy_write_perms(name, 1418 ZFS_DELEG_PERM_USERPROP, CRED())) 1419 return (error); 1420 continue; 1421 } 1422 1423 if ((error = zfs_secpolicy_setprop(name, prop, CRED())) != 0) 1424 return (error); 1425 1426 /* 1427 * Check that this value is valid for this pool version 1428 */ 1429 switch (prop) { 1430 case ZFS_PROP_COMPRESSION: 1431 /* 1432 * If the user specified gzip compression, make sure 1433 * the SPA supports it. We ignore any errors here since 1434 * we'll catch them later. 1435 */ 1436 if (nvpair_type(elem) == DATA_TYPE_UINT64 && 1437 nvpair_value_uint64(elem, &intval) == 0) { 1438 if (intval >= ZIO_COMPRESS_GZIP_1 && 1439 intval <= ZIO_COMPRESS_GZIP_9 && 1440 zfs_earlier_version(name, 1441 SPA_VERSION_GZIP_COMPRESSION)) 1442 return (ENOTSUP); 1443 1444 /* 1445 * If this is a bootable dataset then 1446 * verify that the compression algorithm 1447 * is supported for booting. We must return 1448 * something other than ENOTSUP since it 1449 * implies a downrev pool version. 1450 */ 1451 if (zfs_is_bootfs(name) && 1452 !BOOTFS_COMPRESS_VALID(intval)) 1453 return (ERANGE); 1454 } 1455 break; 1456 1457 case ZFS_PROP_COPIES: 1458 if (zfs_earlier_version(name, 1459 SPA_VERSION_DITTO_BLOCKS)) 1460 return (ENOTSUP); 1461 break; 1462 1463 case ZFS_PROP_SHARESMB: 1464 if (zpl_earlier_version(name, ZPL_VERSION_FUID)) 1465 return (ENOTSUP); 1466 break; 1467 1468 case ZFS_PROP_ACLINHERIT: 1469 if (nvpair_type(elem) == DATA_TYPE_UINT64 && 1470 nvpair_value_uint64(elem, &intval) == 0) 1471 if (intval == ZFS_ACL_PASSTHROUGH_X && 1472 zfs_earlier_version(name, 1473 SPA_VERSION_PASSTHROUGH_X)) 1474 return (ENOTSUP); 1475 } 1476 } 1477 1478 elem = NULL; 1479 while ((elem = nvlist_next_nvpair(nvl, elem)) != NULL) { 1480 const char *propname = nvpair_name(elem); 1481 zfs_prop_t prop = zfs_name_to_prop(propname); 1482 1483 if (prop == ZPROP_INVAL) { 1484 VERIFY(nvpair_value_string(elem, &strval) == 0); 1485 error = dsl_prop_set(name, propname, 1, 1486 strlen(strval) + 1, strval); 1487 if (error == 0) 1488 continue; 1489 else 1490 return (error); 1491 } 1492 1493 switch (prop) { 1494 case ZFS_PROP_QUOTA: 1495 if ((error = nvpair_value_uint64(elem, &intval)) != 0 || 1496 (error = dsl_dir_set_quota(name, intval)) != 0) 1497 return (error); 1498 break; 1499 1500 case ZFS_PROP_REFQUOTA: 1501 if ((error = nvpair_value_uint64(elem, &intval)) != 0 || 1502 (error = dsl_dataset_set_quota(name, intval)) != 0) 1503 return (error); 1504 break; 1505 1506 case ZFS_PROP_RESERVATION: 1507 if ((error = nvpair_value_uint64(elem, &intval)) != 0 || 1508 (error = dsl_dir_set_reservation(name, 1509 intval)) != 0) 1510 return (error); 1511 break; 1512 1513 case ZFS_PROP_REFRESERVATION: 1514 if ((error = nvpair_value_uint64(elem, &intval)) != 0 || 1515 (error = dsl_dataset_set_reservation(name, 1516 intval)) != 0) 1517 return (error); 1518 break; 1519 1520 case ZFS_PROP_VOLSIZE: 1521 if ((error = nvpair_value_uint64(elem, &intval)) != 0 || 1522 (error = zvol_set_volsize(name, 1523 ddi_driver_major(zfs_dip), intval)) != 0) 1524 return (error); 1525 break; 1526 1527 case ZFS_PROP_VOLBLOCKSIZE: 1528 if ((error = nvpair_value_uint64(elem, &intval)) != 0 || 1529 (error = zvol_set_volblocksize(name, intval)) != 0) 1530 return (error); 1531 break; 1532 1533 case ZFS_PROP_VERSION: 1534 if ((error = nvpair_value_uint64(elem, &intval)) != 0 || 1535 (error = zfs_set_version(name, intval)) != 0) 1536 return (error); 1537 break; 1538 1539 default: 1540 if (nvpair_type(elem) == DATA_TYPE_STRING) { 1541 if (zfs_prop_get_type(prop) != 1542 PROP_TYPE_STRING) 1543 return (EINVAL); 1544 VERIFY(nvpair_value_string(elem, &strval) == 0); 1545 if ((error = dsl_prop_set(name, 1546 nvpair_name(elem), 1, strlen(strval) + 1, 1547 strval)) != 0) 1548 return (error); 1549 } else if (nvpair_type(elem) == DATA_TYPE_UINT64) { 1550 const char *unused; 1551 1552 VERIFY(nvpair_value_uint64(elem, &intval) == 0); 1553 1554 switch (zfs_prop_get_type(prop)) { 1555 case PROP_TYPE_NUMBER: 1556 break; 1557 case PROP_TYPE_STRING: 1558 return (EINVAL); 1559 case PROP_TYPE_INDEX: 1560 if (zfs_prop_index_to_string(prop, 1561 intval, &unused) != 0) 1562 return (EINVAL); 1563 break; 1564 default: 1565 cmn_err(CE_PANIC, 1566 "unknown property type"); 1567 break; 1568 } 1569 1570 if ((error = dsl_prop_set(name, propname, 1571 8, 1, &intval)) != 0) 1572 return (error); 1573 } else { 1574 return (EINVAL); 1575 } 1576 break; 1577 } 1578 } 1579 1580 return (0); 1581 } 1582 1583 /* 1584 * inputs: 1585 * zc_name name of filesystem 1586 * zc_value name of property to inherit 1587 * zc_nvlist_src{_size} nvlist of properties to apply 1588 * zc_cookie clear existing local props? 1589 * 1590 * outputs: none 1591 */ 1592 static int 1593 zfs_ioc_set_prop(zfs_cmd_t *zc) 1594 { 1595 nvlist_t *nvl; 1596 int error; 1597 1598 if ((error = get_nvlist(zc->zc_nvlist_src, zc->zc_nvlist_src_size, 1599 &nvl)) != 0) 1600 return (error); 1601 1602 if (zc->zc_cookie) { 1603 nvlist_t *origprops; 1604 objset_t *os; 1605 1606 if (dmu_objset_open(zc->zc_name, DMU_OST_ANY, 1607 DS_MODE_USER | DS_MODE_READONLY, &os) == 0) { 1608 if (dsl_prop_get_all(os, &origprops, TRUE) == 0) { 1609 clear_props(zc->zc_name, origprops); 1610 nvlist_free(origprops); 1611 } 1612 dmu_objset_close(os); 1613 } 1614 1615 } 1616 1617 error = zfs_set_prop_nvlist(zc->zc_name, nvl); 1618 1619 nvlist_free(nvl); 1620 return (error); 1621 } 1622 1623 /* 1624 * inputs: 1625 * zc_name name of filesystem 1626 * zc_value name of property to inherit 1627 * 1628 * outputs: none 1629 */ 1630 static int 1631 zfs_ioc_inherit_prop(zfs_cmd_t *zc) 1632 { 1633 /* the property name has been validated by zfs_secpolicy_inherit() */ 1634 return (dsl_prop_set(zc->zc_name, zc->zc_value, 0, 0, NULL)); 1635 } 1636 1637 static int 1638 zfs_ioc_pool_set_props(zfs_cmd_t *zc) 1639 { 1640 nvlist_t *props; 1641 spa_t *spa; 1642 int error; 1643 1644 if ((error = get_nvlist(zc->zc_nvlist_src, zc->zc_nvlist_src_size, 1645 &props))) 1646 return (error); 1647 1648 if ((error = spa_open(zc->zc_name, &spa, FTAG)) != 0) { 1649 nvlist_free(props); 1650 return (error); 1651 } 1652 1653 error = spa_prop_set(spa, props); 1654 1655 nvlist_free(props); 1656 spa_close(spa, FTAG); 1657 1658 return (error); 1659 } 1660 1661 static int 1662 zfs_ioc_pool_get_props(zfs_cmd_t *zc) 1663 { 1664 spa_t *spa; 1665 int error; 1666 nvlist_t *nvp = NULL; 1667 1668 if ((error = spa_open(zc->zc_name, &spa, FTAG)) != 0) 1669 return (error); 1670 1671 error = spa_prop_get(spa, &nvp); 1672 1673 if (error == 0 && zc->zc_nvlist_dst != NULL) 1674 error = put_nvlist(zc, nvp); 1675 else 1676 error = EFAULT; 1677 1678 spa_close(spa, FTAG); 1679 1680 if (nvp) 1681 nvlist_free(nvp); 1682 return (error); 1683 } 1684 1685 static int 1686 zfs_ioc_iscsi_perm_check(zfs_cmd_t *zc) 1687 { 1688 nvlist_t *nvp; 1689 int error; 1690 uint32_t uid; 1691 uint32_t gid; 1692 uint32_t *groups; 1693 uint_t group_cnt; 1694 cred_t *usercred; 1695 1696 if ((error = get_nvlist(zc->zc_nvlist_src, zc->zc_nvlist_src_size, 1697 &nvp)) != 0) { 1698 return (error); 1699 } 1700 1701 if ((error = nvlist_lookup_uint32(nvp, 1702 ZFS_DELEG_PERM_UID, &uid)) != 0) { 1703 nvlist_free(nvp); 1704 return (EPERM); 1705 } 1706 1707 if ((error = nvlist_lookup_uint32(nvp, 1708 ZFS_DELEG_PERM_GID, &gid)) != 0) { 1709 nvlist_free(nvp); 1710 return (EPERM); 1711 } 1712 1713 if ((error = nvlist_lookup_uint32_array(nvp, ZFS_DELEG_PERM_GROUPS, 1714 &groups, &group_cnt)) != 0) { 1715 nvlist_free(nvp); 1716 return (EPERM); 1717 } 1718 usercred = cralloc(); 1719 if ((crsetugid(usercred, uid, gid) != 0) || 1720 (crsetgroups(usercred, group_cnt, (gid_t *)groups) != 0)) { 1721 nvlist_free(nvp); 1722 crfree(usercred); 1723 return (EPERM); 1724 } 1725 nvlist_free(nvp); 1726 error = dsl_deleg_access(zc->zc_name, 1727 zfs_prop_to_name(ZFS_PROP_SHAREISCSI), usercred); 1728 crfree(usercred); 1729 return (error); 1730 } 1731 1732 /* 1733 * inputs: 1734 * zc_name name of filesystem 1735 * zc_nvlist_src{_size} nvlist of delegated permissions 1736 * zc_perm_action allow/unallow flag 1737 * 1738 * outputs: none 1739 */ 1740 static int 1741 zfs_ioc_set_fsacl(zfs_cmd_t *zc) 1742 { 1743 int error; 1744 nvlist_t *fsaclnv = NULL; 1745 1746 if ((error = get_nvlist(zc->zc_nvlist_src, zc->zc_nvlist_src_size, 1747 &fsaclnv)) != 0) 1748 return (error); 1749 1750 /* 1751 * Verify nvlist is constructed correctly 1752 */ 1753 if ((error = zfs_deleg_verify_nvlist(fsaclnv)) != 0) { 1754 nvlist_free(fsaclnv); 1755 return (EINVAL); 1756 } 1757 1758 /* 1759 * If we don't have PRIV_SYS_MOUNT, then validate 1760 * that user is allowed to hand out each permission in 1761 * the nvlist(s) 1762 */ 1763 1764 error = secpolicy_zfs(CRED()); 1765 if (error) { 1766 if (zc->zc_perm_action == B_FALSE) { 1767 error = dsl_deleg_can_allow(zc->zc_name, 1768 fsaclnv, CRED()); 1769 } else { 1770 error = dsl_deleg_can_unallow(zc->zc_name, 1771 fsaclnv, CRED()); 1772 } 1773 } 1774 1775 if (error == 0) 1776 error = dsl_deleg_set(zc->zc_name, fsaclnv, zc->zc_perm_action); 1777 1778 nvlist_free(fsaclnv); 1779 return (error); 1780 } 1781 1782 /* 1783 * inputs: 1784 * zc_name name of filesystem 1785 * 1786 * outputs: 1787 * zc_nvlist_src{_size} nvlist of delegated permissions 1788 */ 1789 static int 1790 zfs_ioc_get_fsacl(zfs_cmd_t *zc) 1791 { 1792 nvlist_t *nvp; 1793 int error; 1794 1795 if ((error = dsl_deleg_get(zc->zc_name, &nvp)) == 0) { 1796 error = put_nvlist(zc, nvp); 1797 nvlist_free(nvp); 1798 } 1799 1800 return (error); 1801 } 1802 1803 /* 1804 * inputs: 1805 * zc_name name of volume 1806 * 1807 * outputs: none 1808 */ 1809 static int 1810 zfs_ioc_create_minor(zfs_cmd_t *zc) 1811 { 1812 return (zvol_create_minor(zc->zc_name, ddi_driver_major(zfs_dip))); 1813 } 1814 1815 /* 1816 * inputs: 1817 * zc_name name of volume 1818 * 1819 * outputs: none 1820 */ 1821 static int 1822 zfs_ioc_remove_minor(zfs_cmd_t *zc) 1823 { 1824 return (zvol_remove_minor(zc->zc_name)); 1825 } 1826 1827 /* 1828 * Search the vfs list for a specified resource. Returns a pointer to it 1829 * or NULL if no suitable entry is found. The caller of this routine 1830 * is responsible for releasing the returned vfs pointer. 1831 */ 1832 static vfs_t * 1833 zfs_get_vfs(const char *resource) 1834 { 1835 struct vfs *vfsp; 1836 struct vfs *vfs_found = NULL; 1837 1838 vfs_list_read_lock(); 1839 vfsp = rootvfs; 1840 do { 1841 if (strcmp(refstr_value(vfsp->vfs_resource), resource) == 0) { 1842 VFS_HOLD(vfsp); 1843 vfs_found = vfsp; 1844 break; 1845 } 1846 vfsp = vfsp->vfs_next; 1847 } while (vfsp != rootvfs); 1848 vfs_list_unlock(); 1849 return (vfs_found); 1850 } 1851 1852 /* ARGSUSED */ 1853 static void 1854 zfs_create_cb(objset_t *os, void *arg, cred_t *cr, dmu_tx_t *tx) 1855 { 1856 zfs_creat_t *zct = arg; 1857 1858 zfs_create_fs(os, cr, zct->zct_zplprops, tx); 1859 } 1860 1861 #define ZFS_PROP_UNDEFINED ((uint64_t)-1) 1862 1863 /* 1864 * inputs: 1865 * createprops list of properties requested by creator 1866 * default_zplver zpl version to use if unspecified in createprops 1867 * fuids_ok fuids allowed in this version of the spa? 1868 * os parent objset pointer (NULL if root fs) 1869 * 1870 * outputs: 1871 * zplprops values for the zplprops we attach to the master node object 1872 * is_ci true if requested file system will be purely case-insensitive 1873 * 1874 * Determine the settings for utf8only, normalization and 1875 * casesensitivity. Specific values may have been requested by the 1876 * creator and/or we can inherit values from the parent dataset. If 1877 * the file system is of too early a vintage, a creator can not 1878 * request settings for these properties, even if the requested 1879 * setting is the default value. We don't actually want to create dsl 1880 * properties for these, so remove them from the source nvlist after 1881 * processing. 1882 */ 1883 static int 1884 zfs_fill_zplprops_impl(objset_t *os, uint64_t default_zplver, 1885 boolean_t fuids_ok, nvlist_t *createprops, nvlist_t *zplprops, 1886 boolean_t *is_ci) 1887 { 1888 uint64_t zplver = default_zplver; 1889 uint64_t sense = ZFS_PROP_UNDEFINED; 1890 uint64_t norm = ZFS_PROP_UNDEFINED; 1891 uint64_t u8 = ZFS_PROP_UNDEFINED; 1892 1893 ASSERT(zplprops != NULL); 1894 1895 /* 1896 * Pull out creator prop choices, if any. 1897 */ 1898 if (createprops) { 1899 (void) nvlist_lookup_uint64(createprops, 1900 zfs_prop_to_name(ZFS_PROP_VERSION), &zplver); 1901 (void) nvlist_lookup_uint64(createprops, 1902 zfs_prop_to_name(ZFS_PROP_NORMALIZE), &norm); 1903 (void) nvlist_remove_all(createprops, 1904 zfs_prop_to_name(ZFS_PROP_NORMALIZE)); 1905 (void) nvlist_lookup_uint64(createprops, 1906 zfs_prop_to_name(ZFS_PROP_UTF8ONLY), &u8); 1907 (void) nvlist_remove_all(createprops, 1908 zfs_prop_to_name(ZFS_PROP_UTF8ONLY)); 1909 (void) nvlist_lookup_uint64(createprops, 1910 zfs_prop_to_name(ZFS_PROP_CASE), &sense); 1911 (void) nvlist_remove_all(createprops, 1912 zfs_prop_to_name(ZFS_PROP_CASE)); 1913 } 1914 1915 /* 1916 * If the zpl version requested is whacky or the file system 1917 * or pool is version is too "young" to support normalization 1918 * and the creator tried to set a value for one of the props, 1919 * error out. 1920 */ 1921 if ((zplver < ZPL_VERSION_INITIAL || zplver > ZPL_VERSION) || 1922 (zplver >= ZPL_VERSION_FUID && !fuids_ok) || 1923 (zplver < ZPL_VERSION_NORMALIZATION && 1924 (norm != ZFS_PROP_UNDEFINED || u8 != ZFS_PROP_UNDEFINED || 1925 sense != ZFS_PROP_UNDEFINED))) 1926 return (ENOTSUP); 1927 1928 /* 1929 * Put the version in the zplprops 1930 */ 1931 VERIFY(nvlist_add_uint64(zplprops, 1932 zfs_prop_to_name(ZFS_PROP_VERSION), zplver) == 0); 1933 1934 if (norm == ZFS_PROP_UNDEFINED) 1935 VERIFY(zfs_get_zplprop(os, ZFS_PROP_NORMALIZE, &norm) == 0); 1936 VERIFY(nvlist_add_uint64(zplprops, 1937 zfs_prop_to_name(ZFS_PROP_NORMALIZE), norm) == 0); 1938 1939 /* 1940 * If we're normalizing, names must always be valid UTF-8 strings. 1941 */ 1942 if (norm) 1943 u8 = 1; 1944 if (u8 == ZFS_PROP_UNDEFINED) 1945 VERIFY(zfs_get_zplprop(os, ZFS_PROP_UTF8ONLY, &u8) == 0); 1946 VERIFY(nvlist_add_uint64(zplprops, 1947 zfs_prop_to_name(ZFS_PROP_UTF8ONLY), u8) == 0); 1948 1949 if (sense == ZFS_PROP_UNDEFINED) 1950 VERIFY(zfs_get_zplprop(os, ZFS_PROP_CASE, &sense) == 0); 1951 VERIFY(nvlist_add_uint64(zplprops, 1952 zfs_prop_to_name(ZFS_PROP_CASE), sense) == 0); 1953 1954 if (is_ci) 1955 *is_ci = (sense == ZFS_CASE_INSENSITIVE); 1956 1957 return (0); 1958 } 1959 1960 static int 1961 zfs_fill_zplprops(const char *dataset, nvlist_t *createprops, 1962 nvlist_t *zplprops, boolean_t *is_ci) 1963 { 1964 boolean_t fuids_ok = B_TRUE; 1965 uint64_t zplver = ZPL_VERSION; 1966 objset_t *os = NULL; 1967 char parentname[MAXNAMELEN]; 1968 char *cp; 1969 int error; 1970 1971 (void) strlcpy(parentname, dataset, sizeof (parentname)); 1972 cp = strrchr(parentname, '/'); 1973 ASSERT(cp != NULL); 1974 cp[0] = '\0'; 1975 1976 if (zfs_earlier_version(dataset, SPA_VERSION_FUID)) { 1977 zplver = ZPL_VERSION_FUID - 1; 1978 fuids_ok = B_FALSE; 1979 } 1980 1981 /* 1982 * Open parent object set so we can inherit zplprop values. 1983 */ 1984 if ((error = dmu_objset_open(parentname, DMU_OST_ANY, 1985 DS_MODE_USER | DS_MODE_READONLY, &os)) != 0) 1986 return (error); 1987 1988 error = zfs_fill_zplprops_impl(os, zplver, fuids_ok, createprops, 1989 zplprops, is_ci); 1990 dmu_objset_close(os); 1991 return (error); 1992 } 1993 1994 static int 1995 zfs_fill_zplprops_root(uint64_t spa_vers, nvlist_t *createprops, 1996 nvlist_t *zplprops, boolean_t *is_ci) 1997 { 1998 boolean_t fuids_ok = B_TRUE; 1999 uint64_t zplver = ZPL_VERSION; 2000 int error; 2001 2002 if (spa_vers < SPA_VERSION_FUID) { 2003 zplver = ZPL_VERSION_FUID - 1; 2004 fuids_ok = B_FALSE; 2005 } 2006 2007 error = zfs_fill_zplprops_impl(NULL, zplver, fuids_ok, createprops, 2008 zplprops, is_ci); 2009 return (error); 2010 } 2011 2012 /* 2013 * inputs: 2014 * zc_objset_type type of objset to create (fs vs zvol) 2015 * zc_name name of new objset 2016 * zc_value name of snapshot to clone from (may be empty) 2017 * zc_nvlist_src{_size} nvlist of properties to apply 2018 * 2019 * outputs: none 2020 */ 2021 static int 2022 zfs_ioc_create(zfs_cmd_t *zc) 2023 { 2024 objset_t *clone; 2025 int error = 0; 2026 zfs_creat_t zct; 2027 nvlist_t *nvprops = NULL; 2028 void (*cbfunc)(objset_t *os, void *arg, cred_t *cr, dmu_tx_t *tx); 2029 dmu_objset_type_t type = zc->zc_objset_type; 2030 2031 switch (type) { 2032 2033 case DMU_OST_ZFS: 2034 cbfunc = zfs_create_cb; 2035 break; 2036 2037 case DMU_OST_ZVOL: 2038 cbfunc = zvol_create_cb; 2039 break; 2040 2041 default: 2042 cbfunc = NULL; 2043 break; 2044 } 2045 if (strchr(zc->zc_name, '@') || 2046 strchr(zc->zc_name, '%')) 2047 return (EINVAL); 2048 2049 if (zc->zc_nvlist_src != NULL && 2050 (error = get_nvlist(zc->zc_nvlist_src, zc->zc_nvlist_src_size, 2051 &nvprops)) != 0) 2052 return (error); 2053 2054 zct.zct_zplprops = NULL; 2055 zct.zct_props = nvprops; 2056 2057 if (zc->zc_value[0] != '\0') { 2058 /* 2059 * We're creating a clone of an existing snapshot. 2060 */ 2061 zc->zc_value[sizeof (zc->zc_value) - 1] = '\0'; 2062 if (dataset_namecheck(zc->zc_value, NULL, NULL) != 0) { 2063 nvlist_free(nvprops); 2064 return (EINVAL); 2065 } 2066 2067 error = dmu_objset_open(zc->zc_value, type, 2068 DS_MODE_USER | DS_MODE_READONLY, &clone); 2069 if (error) { 2070 nvlist_free(nvprops); 2071 return (error); 2072 } 2073 2074 error = dmu_objset_create(zc->zc_name, type, clone, 0, 2075 NULL, NULL); 2076 if (error) { 2077 dmu_objset_close(clone); 2078 nvlist_free(nvprops); 2079 return (error); 2080 } 2081 dmu_objset_close(clone); 2082 } else { 2083 boolean_t is_insensitive = B_FALSE; 2084 2085 if (cbfunc == NULL) { 2086 nvlist_free(nvprops); 2087 return (EINVAL); 2088 } 2089 2090 if (type == DMU_OST_ZVOL) { 2091 uint64_t volsize, volblocksize; 2092 2093 if (nvprops == NULL || 2094 nvlist_lookup_uint64(nvprops, 2095 zfs_prop_to_name(ZFS_PROP_VOLSIZE), 2096 &volsize) != 0) { 2097 nvlist_free(nvprops); 2098 return (EINVAL); 2099 } 2100 2101 if ((error = nvlist_lookup_uint64(nvprops, 2102 zfs_prop_to_name(ZFS_PROP_VOLBLOCKSIZE), 2103 &volblocksize)) != 0 && error != ENOENT) { 2104 nvlist_free(nvprops); 2105 return (EINVAL); 2106 } 2107 2108 if (error != 0) 2109 volblocksize = zfs_prop_default_numeric( 2110 ZFS_PROP_VOLBLOCKSIZE); 2111 2112 if ((error = zvol_check_volblocksize( 2113 volblocksize)) != 0 || 2114 (error = zvol_check_volsize(volsize, 2115 volblocksize)) != 0) { 2116 nvlist_free(nvprops); 2117 return (error); 2118 } 2119 } else if (type == DMU_OST_ZFS) { 2120 int error; 2121 2122 /* 2123 * We have to have normalization and 2124 * case-folding flags correct when we do the 2125 * file system creation, so go figure them out 2126 * now. 2127 */ 2128 VERIFY(nvlist_alloc(&zct.zct_zplprops, 2129 NV_UNIQUE_NAME, KM_SLEEP) == 0); 2130 error = zfs_fill_zplprops(zc->zc_name, nvprops, 2131 zct.zct_zplprops, &is_insensitive); 2132 if (error != 0) { 2133 nvlist_free(nvprops); 2134 nvlist_free(zct.zct_zplprops); 2135 return (error); 2136 } 2137 } 2138 error = dmu_objset_create(zc->zc_name, type, NULL, 2139 is_insensitive ? DS_FLAG_CI_DATASET : 0, cbfunc, &zct); 2140 nvlist_free(zct.zct_zplprops); 2141 } 2142 2143 /* 2144 * It would be nice to do this atomically. 2145 */ 2146 if (error == 0) { 2147 if ((error = zfs_set_prop_nvlist(zc->zc_name, nvprops)) != 0) 2148 (void) dmu_objset_destroy(zc->zc_name); 2149 } 2150 nvlist_free(nvprops); 2151 return (error); 2152 } 2153 2154 struct snap_prop_arg { 2155 nvlist_t *nvprops; 2156 const char *snapname; 2157 }; 2158 2159 static int 2160 set_snap_props(char *name, void *arg) 2161 { 2162 struct snap_prop_arg *snpa = arg; 2163 int len = strlen(name) + strlen(snpa->snapname) + 2; 2164 char *buf = kmem_alloc(len, KM_SLEEP); 2165 int err; 2166 2167 (void) snprintf(buf, len, "%s@%s", name, snpa->snapname); 2168 err = zfs_set_prop_nvlist(buf, snpa->nvprops); 2169 if (err) 2170 (void) dmu_objset_destroy(buf); 2171 kmem_free(buf, len); 2172 return (err); 2173 } 2174 2175 /* 2176 * inputs: 2177 * zc_name name of filesystem 2178 * zc_value short name of snapshot 2179 * zc_cookie recursive flag 2180 * 2181 * outputs: none 2182 */ 2183 static int 2184 zfs_ioc_snapshot(zfs_cmd_t *zc) 2185 { 2186 nvlist_t *nvprops = NULL; 2187 int error; 2188 boolean_t recursive = zc->zc_cookie; 2189 2190 if (snapshot_namecheck(zc->zc_value, NULL, NULL) != 0) 2191 return (EINVAL); 2192 2193 if (zc->zc_nvlist_src != NULL && 2194 (error = get_nvlist(zc->zc_nvlist_src, zc->zc_nvlist_src_size, 2195 &nvprops)) != 0) 2196 return (error); 2197 2198 error = dmu_objset_snapshot(zc->zc_name, zc->zc_value, recursive); 2199 2200 /* 2201 * It would be nice to do this atomically. 2202 */ 2203 if (error == 0) { 2204 struct snap_prop_arg snpa; 2205 snpa.nvprops = nvprops; 2206 snpa.snapname = zc->zc_value; 2207 if (recursive) { 2208 error = dmu_objset_find(zc->zc_name, 2209 set_snap_props, &snpa, DS_FIND_CHILDREN); 2210 if (error) { 2211 (void) dmu_snapshots_destroy(zc->zc_name, 2212 zc->zc_value); 2213 } 2214 } else { 2215 error = set_snap_props(zc->zc_name, &snpa); 2216 } 2217 } 2218 nvlist_free(nvprops); 2219 return (error); 2220 } 2221 2222 int 2223 zfs_unmount_snap(char *name, void *arg) 2224 { 2225 vfs_t *vfsp = NULL; 2226 2227 if (arg) { 2228 char *snapname = arg; 2229 int len = strlen(name) + strlen(snapname) + 2; 2230 char *buf = kmem_alloc(len, KM_SLEEP); 2231 2232 (void) strcpy(buf, name); 2233 (void) strcat(buf, "@"); 2234 (void) strcat(buf, snapname); 2235 vfsp = zfs_get_vfs(buf); 2236 kmem_free(buf, len); 2237 } else if (strchr(name, '@')) { 2238 vfsp = zfs_get_vfs(name); 2239 } 2240 2241 if (vfsp) { 2242 /* 2243 * Always force the unmount for snapshots. 2244 */ 2245 int flag = MS_FORCE; 2246 int err; 2247 2248 if ((err = vn_vfswlock(vfsp->vfs_vnodecovered)) != 0) { 2249 VFS_RELE(vfsp); 2250 return (err); 2251 } 2252 VFS_RELE(vfsp); 2253 if ((err = dounmount(vfsp, flag, kcred)) != 0) 2254 return (err); 2255 } 2256 return (0); 2257 } 2258 2259 /* 2260 * inputs: 2261 * zc_name name of filesystem 2262 * zc_value short name of snapshot 2263 * 2264 * outputs: none 2265 */ 2266 static int 2267 zfs_ioc_destroy_snaps(zfs_cmd_t *zc) 2268 { 2269 int err; 2270 2271 if (snapshot_namecheck(zc->zc_value, NULL, NULL) != 0) 2272 return (EINVAL); 2273 err = dmu_objset_find(zc->zc_name, 2274 zfs_unmount_snap, zc->zc_value, DS_FIND_CHILDREN); 2275 if (err) 2276 return (err); 2277 return (dmu_snapshots_destroy(zc->zc_name, zc->zc_value)); 2278 } 2279 2280 /* 2281 * inputs: 2282 * zc_name name of dataset to destroy 2283 * zc_objset_type type of objset 2284 * 2285 * outputs: none 2286 */ 2287 static int 2288 zfs_ioc_destroy(zfs_cmd_t *zc) 2289 { 2290 if (strchr(zc->zc_name, '@') && zc->zc_objset_type == DMU_OST_ZFS) { 2291 int err = zfs_unmount_snap(zc->zc_name, NULL); 2292 if (err) 2293 return (err); 2294 } 2295 2296 return (dmu_objset_destroy(zc->zc_name)); 2297 } 2298 2299 /* 2300 * inputs: 2301 * zc_name name of dataset to rollback (to most recent snapshot) 2302 * 2303 * outputs: none 2304 */ 2305 static int 2306 zfs_ioc_rollback(zfs_cmd_t *zc) 2307 { 2308 objset_t *os; 2309 int error; 2310 zfsvfs_t *zfsvfs = NULL; 2311 2312 /* 2313 * Get the zfsvfs for the receiving objset. There 2314 * won't be one if we're operating on a zvol, if the 2315 * objset doesn't exist yet, or is not mounted. 2316 */ 2317 error = dmu_objset_open(zc->zc_name, DMU_OST_ANY, DS_MODE_USER, &os); 2318 if (error) 2319 return (error); 2320 2321 if (dmu_objset_type(os) == DMU_OST_ZFS) { 2322 mutex_enter(&os->os->os_user_ptr_lock); 2323 zfsvfs = dmu_objset_get_user(os); 2324 if (zfsvfs != NULL) 2325 VFS_HOLD(zfsvfs->z_vfs); 2326 mutex_exit(&os->os->os_user_ptr_lock); 2327 } 2328 2329 if (zfsvfs != NULL) { 2330 char *osname; 2331 int mode; 2332 2333 osname = kmem_alloc(MAXNAMELEN, KM_SLEEP); 2334 error = zfs_suspend_fs(zfsvfs, osname, &mode); 2335 if (error == 0) { 2336 int resume_err; 2337 2338 ASSERT(strcmp(osname, zc->zc_name) == 0); 2339 error = dmu_objset_rollback(os); 2340 resume_err = zfs_resume_fs(zfsvfs, osname, mode); 2341 error = error ? error : resume_err; 2342 } else { 2343 dmu_objset_close(os); 2344 } 2345 kmem_free(osname, MAXNAMELEN); 2346 VFS_RELE(zfsvfs->z_vfs); 2347 } else { 2348 error = dmu_objset_rollback(os); 2349 } 2350 /* Note, the dmu_objset_rollback() releases the objset for us. */ 2351 2352 return (error); 2353 } 2354 2355 /* 2356 * inputs: 2357 * zc_name old name of dataset 2358 * zc_value new name of dataset 2359 * zc_cookie recursive flag (only valid for snapshots) 2360 * 2361 * outputs: none 2362 */ 2363 static int 2364 zfs_ioc_rename(zfs_cmd_t *zc) 2365 { 2366 boolean_t recursive = zc->zc_cookie & 1; 2367 2368 zc->zc_value[sizeof (zc->zc_value) - 1] = '\0'; 2369 if (dataset_namecheck(zc->zc_value, NULL, NULL) != 0 || 2370 strchr(zc->zc_value, '%')) 2371 return (EINVAL); 2372 2373 /* 2374 * Unmount snapshot unless we're doing a recursive rename, 2375 * in which case the dataset code figures out which snapshots 2376 * to unmount. 2377 */ 2378 if (!recursive && strchr(zc->zc_name, '@') != NULL && 2379 zc->zc_objset_type == DMU_OST_ZFS) { 2380 int err = zfs_unmount_snap(zc->zc_name, NULL); 2381 if (err) 2382 return (err); 2383 } 2384 return (dmu_objset_rename(zc->zc_name, zc->zc_value, recursive)); 2385 } 2386 2387 static void 2388 clear_props(char *dataset, nvlist_t *props) 2389 { 2390 zfs_cmd_t *zc; 2391 nvpair_t *prop; 2392 2393 if (props == NULL) 2394 return; 2395 zc = kmem_alloc(sizeof (zfs_cmd_t), KM_SLEEP); 2396 (void) strcpy(zc->zc_name, dataset); 2397 for (prop = nvlist_next_nvpair(props, NULL); prop; 2398 prop = nvlist_next_nvpair(props, prop)) { 2399 (void) strcpy(zc->zc_value, nvpair_name(prop)); 2400 if (zfs_secpolicy_inherit(zc, CRED()) == 0) 2401 (void) zfs_ioc_inherit_prop(zc); 2402 } 2403 kmem_free(zc, sizeof (zfs_cmd_t)); 2404 } 2405 2406 /* 2407 * inputs: 2408 * zc_name name of containing filesystem 2409 * zc_nvlist_src{_size} nvlist of properties to apply 2410 * zc_value name of snapshot to create 2411 * zc_string name of clone origin (if DRR_FLAG_CLONE) 2412 * zc_cookie file descriptor to recv from 2413 * zc_begin_record the BEGIN record of the stream (not byteswapped) 2414 * zc_guid force flag 2415 * 2416 * outputs: 2417 * zc_cookie number of bytes read 2418 */ 2419 static int 2420 zfs_ioc_recv(zfs_cmd_t *zc) 2421 { 2422 file_t *fp; 2423 objset_t *os; 2424 dmu_recv_cookie_t drc; 2425 zfsvfs_t *zfsvfs = NULL; 2426 boolean_t force = (boolean_t)zc->zc_guid; 2427 int error, fd; 2428 offset_t off; 2429 nvlist_t *props = NULL; 2430 nvlist_t *origprops = NULL; 2431 objset_t *origin = NULL; 2432 char *tosnap; 2433 char tofs[ZFS_MAXNAMELEN]; 2434 2435 if (dataset_namecheck(zc->zc_value, NULL, NULL) != 0 || 2436 strchr(zc->zc_value, '@') == NULL || 2437 strchr(zc->zc_value, '%')) 2438 return (EINVAL); 2439 2440 (void) strcpy(tofs, zc->zc_value); 2441 tosnap = strchr(tofs, '@'); 2442 *tosnap = '\0'; 2443 tosnap++; 2444 2445 if (zc->zc_nvlist_src != NULL && 2446 (error = get_nvlist(zc->zc_nvlist_src, zc->zc_nvlist_src_size, 2447 &props)) != 0) 2448 return (error); 2449 2450 fd = zc->zc_cookie; 2451 fp = getf(fd); 2452 if (fp == NULL) { 2453 nvlist_free(props); 2454 return (EBADF); 2455 } 2456 2457 if (dmu_objset_open(tofs, DMU_OST_ANY, 2458 DS_MODE_USER | DS_MODE_READONLY, &os) == 0) { 2459 /* 2460 * Try to get the zfsvfs for the receiving objset. 2461 * There won't be one if we're operating on a zvol, 2462 * if the objset doesn't exist yet, or is not mounted. 2463 */ 2464 mutex_enter(&os->os->os_user_ptr_lock); 2465 if (zfsvfs = dmu_objset_get_user(os)) { 2466 if (!mutex_tryenter(&zfsvfs->z_online_recv_lock)) { 2467 mutex_exit(&os->os->os_user_ptr_lock); 2468 dmu_objset_close(os); 2469 zfsvfs = NULL; 2470 error = EBUSY; 2471 goto out; 2472 } 2473 VFS_HOLD(zfsvfs->z_vfs); 2474 } 2475 mutex_exit(&os->os->os_user_ptr_lock); 2476 2477 /* 2478 * If new properties are supplied, they are to completely 2479 * replace the existing ones, so stash away the existing ones. 2480 */ 2481 if (props) 2482 (void) dsl_prop_get_all(os, &origprops, TRUE); 2483 2484 dmu_objset_close(os); 2485 } 2486 2487 if (zc->zc_string[0]) { 2488 error = dmu_objset_open(zc->zc_string, DMU_OST_ANY, 2489 DS_MODE_USER | DS_MODE_READONLY, &origin); 2490 if (error) 2491 goto out; 2492 } 2493 2494 error = dmu_recv_begin(tofs, tosnap, &zc->zc_begin_record, 2495 force, origin, zfsvfs != NULL, &drc); 2496 if (origin) 2497 dmu_objset_close(origin); 2498 if (error) 2499 goto out; 2500 2501 /* 2502 * Reset properties. We do this before we receive the stream 2503 * so that the properties are applied to the new data. 2504 */ 2505 if (props) { 2506 clear_props(tofs, origprops); 2507 /* 2508 * XXX - Note, this is all-or-nothing; should be best-effort. 2509 */ 2510 (void) zfs_set_prop_nvlist(tofs, props); 2511 } 2512 2513 off = fp->f_offset; 2514 error = dmu_recv_stream(&drc, fp->f_vnode, &off); 2515 2516 if (error == 0 && zfsvfs) { 2517 char *osname; 2518 int mode; 2519 2520 /* online recv */ 2521 osname = kmem_alloc(MAXNAMELEN, KM_SLEEP); 2522 error = zfs_suspend_fs(zfsvfs, osname, &mode); 2523 if (error == 0) { 2524 int resume_err; 2525 2526 error = dmu_recv_end(&drc); 2527 resume_err = zfs_resume_fs(zfsvfs, osname, mode); 2528 error = error ? error : resume_err; 2529 } else { 2530 dmu_recv_abort_cleanup(&drc); 2531 } 2532 kmem_free(osname, MAXNAMELEN); 2533 } else if (error == 0) { 2534 error = dmu_recv_end(&drc); 2535 } 2536 2537 zc->zc_cookie = off - fp->f_offset; 2538 if (VOP_SEEK(fp->f_vnode, fp->f_offset, &off, NULL) == 0) 2539 fp->f_offset = off; 2540 2541 /* 2542 * On error, restore the original props. 2543 */ 2544 if (error && props) { 2545 clear_props(tofs, props); 2546 (void) zfs_set_prop_nvlist(tofs, origprops); 2547 } 2548 out: 2549 if (zfsvfs) { 2550 mutex_exit(&zfsvfs->z_online_recv_lock); 2551 VFS_RELE(zfsvfs->z_vfs); 2552 } 2553 nvlist_free(props); 2554 nvlist_free(origprops); 2555 releasef(fd); 2556 return (error); 2557 } 2558 2559 /* 2560 * inputs: 2561 * zc_name name of snapshot to send 2562 * zc_value short name of incremental fromsnap (may be empty) 2563 * zc_cookie file descriptor to send stream to 2564 * zc_obj fromorigin flag (mutually exclusive with zc_value) 2565 * 2566 * outputs: none 2567 */ 2568 static int 2569 zfs_ioc_send(zfs_cmd_t *zc) 2570 { 2571 objset_t *fromsnap = NULL; 2572 objset_t *tosnap; 2573 file_t *fp; 2574 int error; 2575 offset_t off; 2576 2577 error = dmu_objset_open(zc->zc_name, DMU_OST_ANY, 2578 DS_MODE_USER | DS_MODE_READONLY, &tosnap); 2579 if (error) 2580 return (error); 2581 2582 if (zc->zc_value[0] != '\0') { 2583 char *buf; 2584 char *cp; 2585 2586 buf = kmem_alloc(MAXPATHLEN, KM_SLEEP); 2587 (void) strncpy(buf, zc->zc_name, MAXPATHLEN); 2588 cp = strchr(buf, '@'); 2589 if (cp) 2590 *(cp+1) = 0; 2591 (void) strncat(buf, zc->zc_value, MAXPATHLEN); 2592 error = dmu_objset_open(buf, DMU_OST_ANY, 2593 DS_MODE_USER | DS_MODE_READONLY, &fromsnap); 2594 kmem_free(buf, MAXPATHLEN); 2595 if (error) { 2596 dmu_objset_close(tosnap); 2597 return (error); 2598 } 2599 } 2600 2601 fp = getf(zc->zc_cookie); 2602 if (fp == NULL) { 2603 dmu_objset_close(tosnap); 2604 if (fromsnap) 2605 dmu_objset_close(fromsnap); 2606 return (EBADF); 2607 } 2608 2609 off = fp->f_offset; 2610 error = dmu_sendbackup(tosnap, fromsnap, zc->zc_obj, fp->f_vnode, &off); 2611 2612 if (VOP_SEEK(fp->f_vnode, fp->f_offset, &off, NULL) == 0) 2613 fp->f_offset = off; 2614 releasef(zc->zc_cookie); 2615 if (fromsnap) 2616 dmu_objset_close(fromsnap); 2617 dmu_objset_close(tosnap); 2618 return (error); 2619 } 2620 2621 static int 2622 zfs_ioc_inject_fault(zfs_cmd_t *zc) 2623 { 2624 int id, error; 2625 2626 error = zio_inject_fault(zc->zc_name, (int)zc->zc_guid, &id, 2627 &zc->zc_inject_record); 2628 2629 if (error == 0) 2630 zc->zc_guid = (uint64_t)id; 2631 2632 return (error); 2633 } 2634 2635 static int 2636 zfs_ioc_clear_fault(zfs_cmd_t *zc) 2637 { 2638 return (zio_clear_fault((int)zc->zc_guid)); 2639 } 2640 2641 static int 2642 zfs_ioc_inject_list_next(zfs_cmd_t *zc) 2643 { 2644 int id = (int)zc->zc_guid; 2645 int error; 2646 2647 error = zio_inject_list_next(&id, zc->zc_name, sizeof (zc->zc_name), 2648 &zc->zc_inject_record); 2649 2650 zc->zc_guid = id; 2651 2652 return (error); 2653 } 2654 2655 static int 2656 zfs_ioc_error_log(zfs_cmd_t *zc) 2657 { 2658 spa_t *spa; 2659 int error; 2660 size_t count = (size_t)zc->zc_nvlist_dst_size; 2661 2662 if ((error = spa_open(zc->zc_name, &spa, FTAG)) != 0) 2663 return (error); 2664 2665 error = spa_get_errlog(spa, (void *)(uintptr_t)zc->zc_nvlist_dst, 2666 &count); 2667 if (error == 0) 2668 zc->zc_nvlist_dst_size = count; 2669 else 2670 zc->zc_nvlist_dst_size = spa_get_errlog_size(spa); 2671 2672 spa_close(spa, FTAG); 2673 2674 return (error); 2675 } 2676 2677 static int 2678 zfs_ioc_clear(zfs_cmd_t *zc) 2679 { 2680 spa_t *spa; 2681 vdev_t *vd; 2682 int error; 2683 2684 /* 2685 * On zpool clear we also fix up missing slogs 2686 */ 2687 mutex_enter(&spa_namespace_lock); 2688 spa = spa_lookup(zc->zc_name); 2689 if (spa == NULL) { 2690 mutex_exit(&spa_namespace_lock); 2691 return (EIO); 2692 } 2693 if (spa->spa_log_state == SPA_LOG_MISSING) { 2694 /* we need to let spa_open/spa_load clear the chains */ 2695 spa->spa_log_state = SPA_LOG_CLEAR; 2696 } 2697 mutex_exit(&spa_namespace_lock); 2698 2699 if ((error = spa_open(zc->zc_name, &spa, FTAG)) != 0) 2700 return (error); 2701 2702 spa_vdev_state_enter(spa); 2703 2704 if (zc->zc_guid == 0) { 2705 vd = NULL; 2706 } else { 2707 vd = spa_lookup_by_guid(spa, zc->zc_guid, B_TRUE); 2708 if (vd == NULL) { 2709 (void) spa_vdev_state_exit(spa, NULL, ENODEV); 2710 spa_close(spa, FTAG); 2711 return (ENODEV); 2712 } 2713 } 2714 2715 vdev_clear(spa, vd); 2716 2717 (void) spa_vdev_state_exit(spa, NULL, 0); 2718 2719 /* 2720 * Resume any suspended I/Os. 2721 */ 2722 zio_resume(spa); 2723 2724 spa_close(spa, FTAG); 2725 2726 return (0); 2727 } 2728 2729 /* 2730 * inputs: 2731 * zc_name name of filesystem 2732 * zc_value name of origin snapshot 2733 * 2734 * outputs: none 2735 */ 2736 static int 2737 zfs_ioc_promote(zfs_cmd_t *zc) 2738 { 2739 char *cp; 2740 2741 /* 2742 * We don't need to unmount *all* the origin fs's snapshots, but 2743 * it's easier. 2744 */ 2745 cp = strchr(zc->zc_value, '@'); 2746 if (cp) 2747 *cp = '\0'; 2748 (void) dmu_objset_find(zc->zc_value, 2749 zfs_unmount_snap, NULL, DS_FIND_SNAPSHOTS); 2750 return (dsl_dataset_promote(zc->zc_name)); 2751 } 2752 2753 /* 2754 * We don't want to have a hard dependency 2755 * against some special symbols in sharefs 2756 * nfs, and smbsrv. Determine them if needed when 2757 * the first file system is shared. 2758 * Neither sharefs, nfs or smbsrv are unloadable modules. 2759 */ 2760 int (*znfsexport_fs)(void *arg); 2761 int (*zshare_fs)(enum sharefs_sys_op, share_t *, uint32_t); 2762 int (*zsmbexport_fs)(void *arg, boolean_t add_share); 2763 2764 int zfs_nfsshare_inited; 2765 int zfs_smbshare_inited; 2766 2767 ddi_modhandle_t nfs_mod; 2768 ddi_modhandle_t sharefs_mod; 2769 ddi_modhandle_t smbsrv_mod; 2770 kmutex_t zfs_share_lock; 2771 2772 static int 2773 zfs_init_sharefs() 2774 { 2775 int error; 2776 2777 ASSERT(MUTEX_HELD(&zfs_share_lock)); 2778 /* Both NFS and SMB shares also require sharetab support. */ 2779 if (sharefs_mod == NULL && ((sharefs_mod = 2780 ddi_modopen("fs/sharefs", 2781 KRTLD_MODE_FIRST, &error)) == NULL)) { 2782 return (ENOSYS); 2783 } 2784 if (zshare_fs == NULL && ((zshare_fs = 2785 (int (*)(enum sharefs_sys_op, share_t *, uint32_t)) 2786 ddi_modsym(sharefs_mod, "sharefs_impl", &error)) == NULL)) { 2787 return (ENOSYS); 2788 } 2789 return (0); 2790 } 2791 2792 static int 2793 zfs_ioc_share(zfs_cmd_t *zc) 2794 { 2795 int error; 2796 int opcode; 2797 2798 switch (zc->zc_share.z_sharetype) { 2799 case ZFS_SHARE_NFS: 2800 case ZFS_UNSHARE_NFS: 2801 if (zfs_nfsshare_inited == 0) { 2802 mutex_enter(&zfs_share_lock); 2803 if (nfs_mod == NULL && ((nfs_mod = ddi_modopen("fs/nfs", 2804 KRTLD_MODE_FIRST, &error)) == NULL)) { 2805 mutex_exit(&zfs_share_lock); 2806 return (ENOSYS); 2807 } 2808 if (znfsexport_fs == NULL && 2809 ((znfsexport_fs = (int (*)(void *)) 2810 ddi_modsym(nfs_mod, 2811 "nfs_export", &error)) == NULL)) { 2812 mutex_exit(&zfs_share_lock); 2813 return (ENOSYS); 2814 } 2815 error = zfs_init_sharefs(); 2816 if (error) { 2817 mutex_exit(&zfs_share_lock); 2818 return (ENOSYS); 2819 } 2820 zfs_nfsshare_inited = 1; 2821 mutex_exit(&zfs_share_lock); 2822 } 2823 break; 2824 case ZFS_SHARE_SMB: 2825 case ZFS_UNSHARE_SMB: 2826 if (zfs_smbshare_inited == 0) { 2827 mutex_enter(&zfs_share_lock); 2828 if (smbsrv_mod == NULL && ((smbsrv_mod = 2829 ddi_modopen("drv/smbsrv", 2830 KRTLD_MODE_FIRST, &error)) == NULL)) { 2831 mutex_exit(&zfs_share_lock); 2832 return (ENOSYS); 2833 } 2834 if (zsmbexport_fs == NULL && ((zsmbexport_fs = 2835 (int (*)(void *, boolean_t))ddi_modsym(smbsrv_mod, 2836 "smb_server_share", &error)) == NULL)) { 2837 mutex_exit(&zfs_share_lock); 2838 return (ENOSYS); 2839 } 2840 error = zfs_init_sharefs(); 2841 if (error) { 2842 mutex_exit(&zfs_share_lock); 2843 return (ENOSYS); 2844 } 2845 zfs_smbshare_inited = 1; 2846 mutex_exit(&zfs_share_lock); 2847 } 2848 break; 2849 default: 2850 return (EINVAL); 2851 } 2852 2853 switch (zc->zc_share.z_sharetype) { 2854 case ZFS_SHARE_NFS: 2855 case ZFS_UNSHARE_NFS: 2856 if (error = 2857 znfsexport_fs((void *) 2858 (uintptr_t)zc->zc_share.z_exportdata)) 2859 return (error); 2860 break; 2861 case ZFS_SHARE_SMB: 2862 case ZFS_UNSHARE_SMB: 2863 if (error = zsmbexport_fs((void *) 2864 (uintptr_t)zc->zc_share.z_exportdata, 2865 zc->zc_share.z_sharetype == ZFS_SHARE_SMB ? 2866 B_TRUE : B_FALSE)) { 2867 return (error); 2868 } 2869 break; 2870 } 2871 2872 opcode = (zc->zc_share.z_sharetype == ZFS_SHARE_NFS || 2873 zc->zc_share.z_sharetype == ZFS_SHARE_SMB) ? 2874 SHAREFS_ADD : SHAREFS_REMOVE; 2875 2876 /* 2877 * Add or remove share from sharetab 2878 */ 2879 error = zshare_fs(opcode, 2880 (void *)(uintptr_t)zc->zc_share.z_sharedata, 2881 zc->zc_share.z_sharemax); 2882 2883 return (error); 2884 2885 } 2886 2887 /* 2888 * pool create, destroy, and export don't log the history as part of 2889 * zfsdev_ioctl, but rather zfs_ioc_pool_create, and zfs_ioc_pool_export 2890 * do the logging of those commands. 2891 */ 2892 static zfs_ioc_vec_t zfs_ioc_vec[] = { 2893 { zfs_ioc_pool_create, zfs_secpolicy_config, POOL_NAME, B_FALSE }, 2894 { zfs_ioc_pool_destroy, zfs_secpolicy_config, POOL_NAME, B_FALSE }, 2895 { zfs_ioc_pool_import, zfs_secpolicy_config, POOL_NAME, B_TRUE }, 2896 { zfs_ioc_pool_export, zfs_secpolicy_config, POOL_NAME, B_FALSE }, 2897 { zfs_ioc_pool_configs, zfs_secpolicy_none, NO_NAME, B_FALSE }, 2898 { zfs_ioc_pool_stats, zfs_secpolicy_read, POOL_NAME, B_FALSE }, 2899 { zfs_ioc_pool_tryimport, zfs_secpolicy_config, NO_NAME, B_FALSE }, 2900 { zfs_ioc_pool_scrub, zfs_secpolicy_config, POOL_NAME, B_TRUE }, 2901 { zfs_ioc_pool_freeze, zfs_secpolicy_config, NO_NAME, B_FALSE }, 2902 { zfs_ioc_pool_upgrade, zfs_secpolicy_config, POOL_NAME, B_TRUE }, 2903 { zfs_ioc_pool_get_history, zfs_secpolicy_config, POOL_NAME, B_FALSE }, 2904 { zfs_ioc_vdev_add, zfs_secpolicy_config, POOL_NAME, B_TRUE }, 2905 { zfs_ioc_vdev_remove, zfs_secpolicy_config, POOL_NAME, B_TRUE }, 2906 { zfs_ioc_vdev_set_state, zfs_secpolicy_config, POOL_NAME, B_TRUE }, 2907 { zfs_ioc_vdev_attach, zfs_secpolicy_config, POOL_NAME, B_TRUE }, 2908 { zfs_ioc_vdev_detach, zfs_secpolicy_config, POOL_NAME, B_TRUE }, 2909 { zfs_ioc_vdev_setpath, zfs_secpolicy_config, POOL_NAME, B_FALSE }, 2910 { zfs_ioc_objset_stats, zfs_secpolicy_read, DATASET_NAME, B_FALSE }, 2911 { zfs_ioc_objset_zplprops, zfs_secpolicy_read, DATASET_NAME, B_FALSE }, 2912 { zfs_ioc_dataset_list_next, zfs_secpolicy_read, 2913 DATASET_NAME, B_FALSE }, 2914 { zfs_ioc_snapshot_list_next, zfs_secpolicy_read, 2915 DATASET_NAME, B_FALSE }, 2916 { zfs_ioc_set_prop, zfs_secpolicy_none, DATASET_NAME, B_TRUE }, 2917 { zfs_ioc_create_minor, zfs_secpolicy_minor, DATASET_NAME, B_FALSE }, 2918 { zfs_ioc_remove_minor, zfs_secpolicy_minor, DATASET_NAME, B_FALSE }, 2919 { zfs_ioc_create, zfs_secpolicy_create, DATASET_NAME, B_TRUE }, 2920 { zfs_ioc_destroy, zfs_secpolicy_destroy, DATASET_NAME, B_TRUE }, 2921 { zfs_ioc_rollback, zfs_secpolicy_rollback, DATASET_NAME, B_TRUE }, 2922 { zfs_ioc_rename, zfs_secpolicy_rename, DATASET_NAME, B_TRUE }, 2923 { zfs_ioc_recv, zfs_secpolicy_receive, DATASET_NAME, B_TRUE }, 2924 { zfs_ioc_send, zfs_secpolicy_send, DATASET_NAME, B_TRUE }, 2925 { zfs_ioc_inject_fault, zfs_secpolicy_inject, NO_NAME, B_FALSE }, 2926 { zfs_ioc_clear_fault, zfs_secpolicy_inject, NO_NAME, B_FALSE }, 2927 { zfs_ioc_inject_list_next, zfs_secpolicy_inject, NO_NAME, B_FALSE }, 2928 { zfs_ioc_error_log, zfs_secpolicy_inject, POOL_NAME, B_FALSE }, 2929 { zfs_ioc_clear, zfs_secpolicy_config, POOL_NAME, B_TRUE }, 2930 { zfs_ioc_promote, zfs_secpolicy_promote, DATASET_NAME, B_TRUE }, 2931 { zfs_ioc_destroy_snaps, zfs_secpolicy_destroy, DATASET_NAME, B_TRUE }, 2932 { zfs_ioc_snapshot, zfs_secpolicy_snapshot, DATASET_NAME, B_TRUE }, 2933 { zfs_ioc_dsobj_to_dsname, zfs_secpolicy_config, POOL_NAME, B_FALSE }, 2934 { zfs_ioc_obj_to_path, zfs_secpolicy_config, NO_NAME, B_FALSE }, 2935 { zfs_ioc_pool_set_props, zfs_secpolicy_config, POOL_NAME, B_TRUE }, 2936 { zfs_ioc_pool_get_props, zfs_secpolicy_read, POOL_NAME, B_FALSE }, 2937 { zfs_ioc_set_fsacl, zfs_secpolicy_fsacl, DATASET_NAME, B_TRUE }, 2938 { zfs_ioc_get_fsacl, zfs_secpolicy_read, DATASET_NAME, B_FALSE }, 2939 { zfs_ioc_iscsi_perm_check, zfs_secpolicy_iscsi, 2940 DATASET_NAME, B_FALSE }, 2941 { zfs_ioc_share, zfs_secpolicy_share, DATASET_NAME, B_FALSE }, 2942 { zfs_ioc_inherit_prop, zfs_secpolicy_inherit, DATASET_NAME, B_TRUE }, 2943 }; 2944 2945 static int 2946 zfsdev_ioctl(dev_t dev, int cmd, intptr_t arg, int flag, cred_t *cr, int *rvalp) 2947 { 2948 zfs_cmd_t *zc; 2949 uint_t vec; 2950 int error, rc; 2951 2952 if (getminor(dev) != 0) 2953 return (zvol_ioctl(dev, cmd, arg, flag, cr, rvalp)); 2954 2955 vec = cmd - ZFS_IOC; 2956 ASSERT3U(getmajor(dev), ==, ddi_driver_major(zfs_dip)); 2957 2958 if (vec >= sizeof (zfs_ioc_vec) / sizeof (zfs_ioc_vec[0])) 2959 return (EINVAL); 2960 2961 zc = kmem_zalloc(sizeof (zfs_cmd_t), KM_SLEEP); 2962 2963 error = xcopyin((void *)arg, zc, sizeof (zfs_cmd_t)); 2964 2965 if (error == 0) 2966 error = zfs_ioc_vec[vec].zvec_secpolicy(zc, cr); 2967 2968 /* 2969 * Ensure that all pool/dataset names are valid before we pass down to 2970 * the lower layers. 2971 */ 2972 if (error == 0) { 2973 zc->zc_name[sizeof (zc->zc_name) - 1] = '\0'; 2974 switch (zfs_ioc_vec[vec].zvec_namecheck) { 2975 case POOL_NAME: 2976 if (pool_namecheck(zc->zc_name, NULL, NULL) != 0) 2977 error = EINVAL; 2978 break; 2979 2980 case DATASET_NAME: 2981 if (dataset_namecheck(zc->zc_name, NULL, NULL) != 0) 2982 error = EINVAL; 2983 break; 2984 2985 case NO_NAME: 2986 break; 2987 } 2988 } 2989 2990 if (error == 0) 2991 error = zfs_ioc_vec[vec].zvec_func(zc); 2992 2993 rc = xcopyout(zc, (void *)arg, sizeof (zfs_cmd_t)); 2994 if (error == 0) { 2995 error = rc; 2996 if (zfs_ioc_vec[vec].zvec_his_log == B_TRUE) 2997 zfs_log_history(zc); 2998 } 2999 3000 kmem_free(zc, sizeof (zfs_cmd_t)); 3001 return (error); 3002 } 3003 3004 static int 3005 zfs_attach(dev_info_t *dip, ddi_attach_cmd_t cmd) 3006 { 3007 if (cmd != DDI_ATTACH) 3008 return (DDI_FAILURE); 3009 3010 if (ddi_create_minor_node(dip, "zfs", S_IFCHR, 0, 3011 DDI_PSEUDO, 0) == DDI_FAILURE) 3012 return (DDI_FAILURE); 3013 3014 zfs_dip = dip; 3015 3016 ddi_report_dev(dip); 3017 3018 return (DDI_SUCCESS); 3019 } 3020 3021 static int 3022 zfs_detach(dev_info_t *dip, ddi_detach_cmd_t cmd) 3023 { 3024 if (spa_busy() || zfs_busy() || zvol_busy()) 3025 return (DDI_FAILURE); 3026 3027 if (cmd != DDI_DETACH) 3028 return (DDI_FAILURE); 3029 3030 zfs_dip = NULL; 3031 3032 ddi_prop_remove_all(dip); 3033 ddi_remove_minor_node(dip, NULL); 3034 3035 return (DDI_SUCCESS); 3036 } 3037 3038 /*ARGSUSED*/ 3039 static int 3040 zfs_info(dev_info_t *dip, ddi_info_cmd_t infocmd, void *arg, void **result) 3041 { 3042 switch (infocmd) { 3043 case DDI_INFO_DEVT2DEVINFO: 3044 *result = zfs_dip; 3045 return (DDI_SUCCESS); 3046 3047 case DDI_INFO_DEVT2INSTANCE: 3048 *result = (void *)0; 3049 return (DDI_SUCCESS); 3050 } 3051 3052 return (DDI_FAILURE); 3053 } 3054 3055 /* 3056 * OK, so this is a little weird. 3057 * 3058 * /dev/zfs is the control node, i.e. minor 0. 3059 * /dev/zvol/[r]dsk/pool/dataset are the zvols, minor > 0. 3060 * 3061 * /dev/zfs has basically nothing to do except serve up ioctls, 3062 * so most of the standard driver entry points are in zvol.c. 3063 */ 3064 static struct cb_ops zfs_cb_ops = { 3065 zvol_open, /* open */ 3066 zvol_close, /* close */ 3067 zvol_strategy, /* strategy */ 3068 nodev, /* print */ 3069 zvol_dump, /* dump */ 3070 zvol_read, /* read */ 3071 zvol_write, /* write */ 3072 zfsdev_ioctl, /* ioctl */ 3073 nodev, /* devmap */ 3074 nodev, /* mmap */ 3075 nodev, /* segmap */ 3076 nochpoll, /* poll */ 3077 ddi_prop_op, /* prop_op */ 3078 NULL, /* streamtab */ 3079 D_NEW | D_MP | D_64BIT, /* Driver compatibility flag */ 3080 CB_REV, /* version */ 3081 nodev, /* async read */ 3082 nodev, /* async write */ 3083 }; 3084 3085 static struct dev_ops zfs_dev_ops = { 3086 DEVO_REV, /* version */ 3087 0, /* refcnt */ 3088 zfs_info, /* info */ 3089 nulldev, /* identify */ 3090 nulldev, /* probe */ 3091 zfs_attach, /* attach */ 3092 zfs_detach, /* detach */ 3093 nodev, /* reset */ 3094 &zfs_cb_ops, /* driver operations */ 3095 NULL, /* no bus operations */ 3096 NULL, /* power */ 3097 ddi_quiesce_not_needed, /* quiesce */ 3098 }; 3099 3100 static struct modldrv zfs_modldrv = { 3101 &mod_driverops, 3102 "ZFS storage pool", 3103 &zfs_dev_ops 3104 }; 3105 3106 static struct modlinkage modlinkage = { 3107 MODREV_1, 3108 (void *)&zfs_modlfs, 3109 (void *)&zfs_modldrv, 3110 NULL 3111 }; 3112 3113 3114 uint_t zfs_fsyncer_key; 3115 extern uint_t rrw_tsd_key; 3116 3117 int 3118 _init(void) 3119 { 3120 int error; 3121 3122 spa_init(FREAD | FWRITE); 3123 zfs_init(); 3124 zvol_init(); 3125 3126 if ((error = mod_install(&modlinkage)) != 0) { 3127 zvol_fini(); 3128 zfs_fini(); 3129 spa_fini(); 3130 return (error); 3131 } 3132 3133 tsd_create(&zfs_fsyncer_key, NULL); 3134 tsd_create(&rrw_tsd_key, NULL); 3135 3136 error = ldi_ident_from_mod(&modlinkage, &zfs_li); 3137 ASSERT(error == 0); 3138 mutex_init(&zfs_share_lock, NULL, MUTEX_DEFAULT, NULL); 3139 3140 return (0); 3141 } 3142 3143 int 3144 _fini(void) 3145 { 3146 int error; 3147 3148 if (spa_busy() || zfs_busy() || zvol_busy() || zio_injection_enabled) 3149 return (EBUSY); 3150 3151 if ((error = mod_remove(&modlinkage)) != 0) 3152 return (error); 3153 3154 zvol_fini(); 3155 zfs_fini(); 3156 spa_fini(); 3157 if (zfs_nfsshare_inited) 3158 (void) ddi_modclose(nfs_mod); 3159 if (zfs_smbshare_inited) 3160 (void) ddi_modclose(smbsrv_mod); 3161 if (zfs_nfsshare_inited || zfs_smbshare_inited) 3162 (void) ddi_modclose(sharefs_mod); 3163 3164 tsd_destroy(&zfs_fsyncer_key); 3165 ldi_ident_release(zfs_li); 3166 zfs_li = NULL; 3167 mutex_destroy(&zfs_share_lock); 3168 3169 return (error); 3170 } 3171 3172 int 3173 _info(struct modinfo *modinfop) 3174 { 3175 return (mod_info(&modlinkage, modinfop)); 3176 } 3177