1 /* 2 * 3 * Copyright (C) 2011 Novell Inc. 4 * 5 * This program is free software; you can redistribute it and/or modify it 6 * under the terms of the GNU General Public License version 2 as published by 7 * the Free Software Foundation. 8 */ 9 10 #include <linux/fs.h> 11 #include <linux/slab.h> 12 #include <linux/xattr.h> 13 #include "overlayfs.h" 14 15 static int ovl_copy_up_last(struct dentry *dentry, struct iattr *attr, 16 bool no_data) 17 { 18 int err; 19 struct dentry *parent; 20 struct kstat stat; 21 struct path lowerpath; 22 23 parent = dget_parent(dentry); 24 err = ovl_copy_up(parent); 25 if (err) 26 goto out_dput_parent; 27 28 ovl_path_lower(dentry, &lowerpath); 29 err = vfs_getattr(&lowerpath, &stat); 30 if (err) 31 goto out_dput_parent; 32 33 if (no_data) 34 stat.size = 0; 35 36 err = ovl_copy_up_one(parent, dentry, &lowerpath, &stat, attr); 37 38 out_dput_parent: 39 dput(parent); 40 return err; 41 } 42 43 int ovl_setattr(struct dentry *dentry, struct iattr *attr) 44 { 45 int err; 46 struct dentry *upperdentry; 47 48 err = ovl_want_write(dentry); 49 if (err) 50 goto out; 51 52 upperdentry = ovl_dentry_upper(dentry); 53 if (upperdentry) { 54 mutex_lock(&upperdentry->d_inode->i_mutex); 55 err = notify_change(upperdentry, attr, NULL); 56 mutex_unlock(&upperdentry->d_inode->i_mutex); 57 } else { 58 err = ovl_copy_up_last(dentry, attr, false); 59 } 60 ovl_drop_write(dentry); 61 out: 62 return err; 63 } 64 65 static int ovl_getattr(struct vfsmount *mnt, struct dentry *dentry, 66 struct kstat *stat) 67 { 68 struct path realpath; 69 70 ovl_path_real(dentry, &realpath); 71 return vfs_getattr(&realpath, stat); 72 } 73 74 int ovl_permission(struct inode *inode, int mask) 75 { 76 struct ovl_entry *oe; 77 struct dentry *alias = NULL; 78 struct inode *realinode; 79 struct dentry *realdentry; 80 bool is_upper; 81 int err; 82 83 if (S_ISDIR(inode->i_mode)) { 84 oe = inode->i_private; 85 } else if (mask & MAY_NOT_BLOCK) { 86 return -ECHILD; 87 } else { 88 /* 89 * For non-directories find an alias and get the info 90 * from there. 91 */ 92 alias = d_find_any_alias(inode); 93 if (WARN_ON(!alias)) 94 return -ENOENT; 95 96 oe = alias->d_fsdata; 97 } 98 99 realdentry = ovl_entry_real(oe, &is_upper); 100 101 /* Careful in RCU walk mode */ 102 realinode = ACCESS_ONCE(realdentry->d_inode); 103 if (!realinode) { 104 WARN_ON(!(mask & MAY_NOT_BLOCK)); 105 err = -ENOENT; 106 goto out_dput; 107 } 108 109 if (mask & MAY_WRITE) { 110 umode_t mode = realinode->i_mode; 111 112 /* 113 * Writes will always be redirected to upper layer, so 114 * ignore lower layer being read-only. 115 * 116 * If the overlay itself is read-only then proceed 117 * with the permission check, don't return EROFS. 118 * This will only happen if this is the lower layer of 119 * another overlayfs. 120 * 121 * If upper fs becomes read-only after the overlay was 122 * constructed return EROFS to prevent modification of 123 * upper layer. 124 */ 125 err = -EROFS; 126 if (is_upper && !IS_RDONLY(inode) && IS_RDONLY(realinode) && 127 (S_ISREG(mode) || S_ISDIR(mode) || S_ISLNK(mode))) 128 goto out_dput; 129 } 130 131 err = __inode_permission(realinode, mask); 132 out_dput: 133 dput(alias); 134 return err; 135 } 136 137 138 struct ovl_link_data { 139 struct dentry *realdentry; 140 void *cookie; 141 }; 142 143 static const char *ovl_follow_link(struct dentry *dentry, void **cookie) 144 { 145 struct dentry *realdentry; 146 struct inode *realinode; 147 struct ovl_link_data *data = NULL; 148 const char *ret; 149 150 realdentry = ovl_dentry_real(dentry); 151 realinode = realdentry->d_inode; 152 153 if (WARN_ON(!realinode->i_op->follow_link)) 154 return ERR_PTR(-EPERM); 155 156 if (realinode->i_op->put_link) { 157 data = kmalloc(sizeof(struct ovl_link_data), GFP_KERNEL); 158 if (!data) 159 return ERR_PTR(-ENOMEM); 160 data->realdentry = realdentry; 161 } 162 163 ret = realinode->i_op->follow_link(realdentry, cookie); 164 if (IS_ERR_OR_NULL(ret)) { 165 kfree(data); 166 return ret; 167 } 168 169 if (data) 170 data->cookie = *cookie; 171 172 *cookie = data; 173 174 return ret; 175 } 176 177 static void ovl_put_link(struct inode *unused, void *c) 178 { 179 struct inode *realinode; 180 struct ovl_link_data *data = c; 181 182 if (!data) 183 return; 184 185 realinode = data->realdentry->d_inode; 186 realinode->i_op->put_link(realinode, data->cookie); 187 kfree(data); 188 } 189 190 static int ovl_readlink(struct dentry *dentry, char __user *buf, int bufsiz) 191 { 192 struct path realpath; 193 struct inode *realinode; 194 195 ovl_path_real(dentry, &realpath); 196 realinode = realpath.dentry->d_inode; 197 198 if (!realinode->i_op->readlink) 199 return -EINVAL; 200 201 touch_atime(&realpath); 202 203 return realinode->i_op->readlink(realpath.dentry, buf, bufsiz); 204 } 205 206 207 static bool ovl_is_private_xattr(const char *name) 208 { 209 return strncmp(name, OVL_XATTR_PRE_NAME, OVL_XATTR_PRE_LEN) == 0; 210 } 211 212 int ovl_setxattr(struct dentry *dentry, const char *name, 213 const void *value, size_t size, int flags) 214 { 215 int err; 216 struct dentry *upperdentry; 217 218 err = ovl_want_write(dentry); 219 if (err) 220 goto out; 221 222 err = -EPERM; 223 if (ovl_is_private_xattr(name)) 224 goto out_drop_write; 225 226 err = ovl_copy_up(dentry); 227 if (err) 228 goto out_drop_write; 229 230 upperdentry = ovl_dentry_upper(dentry); 231 err = vfs_setxattr(upperdentry, name, value, size, flags); 232 233 out_drop_write: 234 ovl_drop_write(dentry); 235 out: 236 return err; 237 } 238 239 static bool ovl_need_xattr_filter(struct dentry *dentry, 240 enum ovl_path_type type) 241 { 242 if ((type & (__OVL_PATH_PURE | __OVL_PATH_UPPER)) == __OVL_PATH_UPPER) 243 return S_ISDIR(dentry->d_inode->i_mode); 244 else 245 return false; 246 } 247 248 ssize_t ovl_getxattr(struct dentry *dentry, const char *name, 249 void *value, size_t size) 250 { 251 struct path realpath; 252 enum ovl_path_type type = ovl_path_real(dentry, &realpath); 253 254 if (ovl_need_xattr_filter(dentry, type) && ovl_is_private_xattr(name)) 255 return -ENODATA; 256 257 return vfs_getxattr(realpath.dentry, name, value, size); 258 } 259 260 ssize_t ovl_listxattr(struct dentry *dentry, char *list, size_t size) 261 { 262 struct path realpath; 263 enum ovl_path_type type = ovl_path_real(dentry, &realpath); 264 ssize_t res; 265 int off; 266 267 res = vfs_listxattr(realpath.dentry, list, size); 268 if (res <= 0 || size == 0) 269 return res; 270 271 if (!ovl_need_xattr_filter(dentry, type)) 272 return res; 273 274 /* filter out private xattrs */ 275 for (off = 0; off < res;) { 276 char *s = list + off; 277 size_t slen = strlen(s) + 1; 278 279 BUG_ON(off + slen > res); 280 281 if (ovl_is_private_xattr(s)) { 282 res -= slen; 283 memmove(s, s + slen, res - off); 284 } else { 285 off += slen; 286 } 287 } 288 289 return res; 290 } 291 292 int ovl_removexattr(struct dentry *dentry, const char *name) 293 { 294 int err; 295 struct path realpath; 296 enum ovl_path_type type = ovl_path_real(dentry, &realpath); 297 298 err = ovl_want_write(dentry); 299 if (err) 300 goto out; 301 302 err = -ENODATA; 303 if (ovl_need_xattr_filter(dentry, type) && ovl_is_private_xattr(name)) 304 goto out_drop_write; 305 306 if (!OVL_TYPE_UPPER(type)) { 307 err = vfs_getxattr(realpath.dentry, name, NULL, 0); 308 if (err < 0) 309 goto out_drop_write; 310 311 err = ovl_copy_up(dentry); 312 if (err) 313 goto out_drop_write; 314 315 ovl_path_upper(dentry, &realpath); 316 } 317 318 err = vfs_removexattr(realpath.dentry, name); 319 out_drop_write: 320 ovl_drop_write(dentry); 321 out: 322 return err; 323 } 324 325 static bool ovl_open_need_copy_up(int flags, enum ovl_path_type type, 326 struct dentry *realdentry) 327 { 328 if (OVL_TYPE_UPPER(type)) 329 return false; 330 331 if (special_file(realdentry->d_inode->i_mode)) 332 return false; 333 334 if (!(OPEN_FMODE(flags) & FMODE_WRITE) && !(flags & O_TRUNC)) 335 return false; 336 337 return true; 338 } 339 340 struct inode *ovl_d_select_inode(struct dentry *dentry, unsigned file_flags) 341 { 342 int err; 343 struct path realpath; 344 enum ovl_path_type type; 345 346 if (d_is_dir(dentry)) 347 return d_backing_inode(dentry); 348 349 type = ovl_path_real(dentry, &realpath); 350 if (ovl_open_need_copy_up(file_flags, type, realpath.dentry)) { 351 err = ovl_want_write(dentry); 352 if (err) 353 return ERR_PTR(err); 354 355 if (file_flags & O_TRUNC) 356 err = ovl_copy_up_last(dentry, NULL, true); 357 else 358 err = ovl_copy_up(dentry); 359 ovl_drop_write(dentry); 360 if (err) 361 return ERR_PTR(err); 362 363 ovl_path_upper(dentry, &realpath); 364 } 365 366 if (realpath.dentry->d_flags & DCACHE_OP_SELECT_INODE) 367 return realpath.dentry->d_op->d_select_inode(realpath.dentry, file_flags); 368 369 return d_backing_inode(realpath.dentry); 370 } 371 372 static const struct inode_operations ovl_file_inode_operations = { 373 .setattr = ovl_setattr, 374 .permission = ovl_permission, 375 .getattr = ovl_getattr, 376 .setxattr = ovl_setxattr, 377 .getxattr = ovl_getxattr, 378 .listxattr = ovl_listxattr, 379 .removexattr = ovl_removexattr, 380 }; 381 382 static const struct inode_operations ovl_symlink_inode_operations = { 383 .setattr = ovl_setattr, 384 .follow_link = ovl_follow_link, 385 .put_link = ovl_put_link, 386 .readlink = ovl_readlink, 387 .getattr = ovl_getattr, 388 .setxattr = ovl_setxattr, 389 .getxattr = ovl_getxattr, 390 .listxattr = ovl_listxattr, 391 .removexattr = ovl_removexattr, 392 }; 393 394 struct inode *ovl_new_inode(struct super_block *sb, umode_t mode, 395 struct ovl_entry *oe) 396 { 397 struct inode *inode; 398 399 inode = new_inode(sb); 400 if (!inode) 401 return NULL; 402 403 mode &= S_IFMT; 404 405 inode->i_ino = get_next_ino(); 406 inode->i_mode = mode; 407 inode->i_flags |= S_NOATIME | S_NOCMTIME; 408 409 switch (mode) { 410 case S_IFDIR: 411 inode->i_private = oe; 412 inode->i_op = &ovl_dir_inode_operations; 413 inode->i_fop = &ovl_dir_operations; 414 break; 415 416 case S_IFLNK: 417 inode->i_op = &ovl_symlink_inode_operations; 418 break; 419 420 case S_IFREG: 421 case S_IFSOCK: 422 case S_IFBLK: 423 case S_IFCHR: 424 case S_IFIFO: 425 inode->i_op = &ovl_file_inode_operations; 426 break; 427 428 default: 429 WARN(1, "illegal file type: %i\n", mode); 430 iput(inode); 431 inode = NULL; 432 } 433 434 return inode; 435 } 436