1 // SPDX-License-Identifier: GPL-2.0-or-later 2 /* 3 * Copyright (C) 2016 Namjae Jeon <linkinjeon@kernel.org> 4 * Copyright (C) 2018 Samsung Electronics Co., Ltd. 5 */ 6 7 #include <crypto/sha2.h> 8 #include <linux/kernel.h> 9 #include <linux/fs.h> 10 #include <linux/filelock.h> 11 #include <linux/uaccess.h> 12 #include <linux/backing-dev.h> 13 #include <linux/writeback.h> 14 #include <linux/xattr.h> 15 #include <linux/falloc.h> 16 #include <linux/fsnotify.h> 17 #include <linux/dcache.h> 18 #include <linux/slab.h> 19 #include <linux/vmalloc.h> 20 #include <linux/sched/xacct.h> 21 #include <linux/crc32c.h> 22 #include <linux/namei.h> 23 24 #include "glob.h" 25 #include "oplock.h" 26 #include "connection.h" 27 #include "vfs.h" 28 #include "vfs_cache.h" 29 #include "smbacl.h" 30 #include "ndr.h" 31 #include "auth.h" 32 #include "misc.h" 33 34 #include "smb_common.h" 35 #include "mgmt/share_config.h" 36 #include "mgmt/tree_connect.h" 37 #include "mgmt/user_session.h" 38 #include "mgmt/user_config.h" 39 40 static void ksmbd_vfs_inherit_owner(struct ksmbd_work *work, 41 struct inode *parent_inode, 42 struct inode *inode) 43 { 44 if (!test_share_config_flag(work->tcon->share_conf, 45 KSMBD_SHARE_FLAG_INHERIT_OWNER)) 46 return; 47 48 i_uid_write(inode, i_uid_read(parent_inode)); 49 } 50 51 /** 52 * ksmbd_vfs_lock_parent() - lock parent dentry if it is stable 53 * @parent: parent dentry 54 * @child: child dentry 55 * 56 * Returns: %0 on success, %-ENOENT if the parent dentry is not stable 57 */ 58 int ksmbd_vfs_lock_parent(struct dentry *parent, struct dentry *child) 59 { 60 inode_lock_nested(d_inode(parent), I_MUTEX_PARENT); 61 if (child->d_parent != parent) { 62 inode_unlock(d_inode(parent)); 63 return -ENOENT; 64 } 65 66 return 0; 67 } 68 69 static int ksmbd_vfs_path_lookup_locked(struct ksmbd_share_config *share_conf, 70 char *pathname, unsigned int flags, 71 struct path *parent_path, 72 struct path *path) 73 { 74 struct qstr last; 75 struct filename *filename; 76 struct path *root_share_path = &share_conf->vfs_path; 77 int err, type; 78 struct dentry *d; 79 80 if (pathname[0] == '\0') { 81 pathname = share_conf->path; 82 root_share_path = NULL; 83 } else { 84 flags |= LOOKUP_BENEATH; 85 } 86 87 filename = getname_kernel(pathname); 88 if (IS_ERR(filename)) 89 return PTR_ERR(filename); 90 91 err = vfs_path_parent_lookup(filename, flags, 92 parent_path, &last, &type, 93 root_share_path); 94 if (err) { 95 putname(filename); 96 return err; 97 } 98 99 if (unlikely(type != LAST_NORM)) { 100 path_put(parent_path); 101 putname(filename); 102 return -ENOENT; 103 } 104 105 err = mnt_want_write(parent_path->mnt); 106 if (err) { 107 path_put(parent_path); 108 putname(filename); 109 return -ENOENT; 110 } 111 112 inode_lock_nested(parent_path->dentry->d_inode, I_MUTEX_PARENT); 113 d = lookup_one_qstr_excl(&last, parent_path->dentry, 0); 114 if (IS_ERR(d)) 115 goto err_out; 116 117 path->dentry = d; 118 path->mnt = mntget(parent_path->mnt); 119 120 if (test_share_config_flag(share_conf, KSMBD_SHARE_FLAG_CROSSMNT)) { 121 err = follow_down(path, 0); 122 if (err < 0) { 123 path_put(path); 124 goto err_out; 125 } 126 } 127 128 putname(filename); 129 return 0; 130 131 err_out: 132 inode_unlock(d_inode(parent_path->dentry)); 133 mnt_drop_write(parent_path->mnt); 134 path_put(parent_path); 135 putname(filename); 136 return -ENOENT; 137 } 138 139 void ksmbd_vfs_query_maximal_access(struct mnt_idmap *idmap, 140 struct dentry *dentry, __le32 *daccess) 141 { 142 *daccess = cpu_to_le32(FILE_READ_ATTRIBUTES | READ_CONTROL); 143 144 if (!inode_permission(idmap, d_inode(dentry), MAY_OPEN | MAY_WRITE)) 145 *daccess |= cpu_to_le32(WRITE_DAC | WRITE_OWNER | SYNCHRONIZE | 146 FILE_WRITE_DATA | FILE_APPEND_DATA | 147 FILE_WRITE_EA | FILE_WRITE_ATTRIBUTES | 148 FILE_DELETE_CHILD); 149 150 if (!inode_permission(idmap, d_inode(dentry), MAY_OPEN | MAY_READ)) 151 *daccess |= FILE_READ_DATA_LE | FILE_READ_EA_LE; 152 153 if (!inode_permission(idmap, d_inode(dentry), MAY_OPEN | MAY_EXEC)) 154 *daccess |= FILE_EXECUTE_LE; 155 156 if (!inode_permission(idmap, d_inode(dentry->d_parent), MAY_EXEC | MAY_WRITE)) 157 *daccess |= FILE_DELETE_LE; 158 } 159 160 /** 161 * ksmbd_vfs_create() - vfs helper for smb create file 162 * @work: work 163 * @name: file name that is relative to share 164 * @mode: file create mode 165 * 166 * Return: 0 on success, otherwise error 167 */ 168 int ksmbd_vfs_create(struct ksmbd_work *work, const char *name, umode_t mode) 169 { 170 struct path path; 171 struct dentry *dentry; 172 int err; 173 174 dentry = ksmbd_vfs_kern_path_create(work, name, 175 LOOKUP_NO_SYMLINKS, &path); 176 if (IS_ERR(dentry)) { 177 err = PTR_ERR(dentry); 178 if (err != -ENOENT) 179 pr_err("path create failed for %s, err %d\n", 180 name, err); 181 return err; 182 } 183 184 mode |= S_IFREG; 185 err = vfs_create(mnt_idmap(path.mnt), d_inode(path.dentry), 186 dentry, mode, true); 187 if (!err) { 188 ksmbd_vfs_inherit_owner(work, d_inode(path.dentry), 189 d_inode(dentry)); 190 } else { 191 pr_err("File(%s): creation failed (err:%d)\n", name, err); 192 } 193 194 done_path_create(&path, dentry); 195 return err; 196 } 197 198 /** 199 * ksmbd_vfs_mkdir() - vfs helper for smb create directory 200 * @work: work 201 * @name: directory name that is relative to share 202 * @mode: directory create mode 203 * 204 * Return: 0 on success, otherwise error 205 */ 206 int ksmbd_vfs_mkdir(struct ksmbd_work *work, const char *name, umode_t mode) 207 { 208 struct mnt_idmap *idmap; 209 struct path path; 210 struct dentry *dentry, *d; 211 int err = 0; 212 213 dentry = ksmbd_vfs_kern_path_create(work, name, 214 LOOKUP_NO_SYMLINKS | LOOKUP_DIRECTORY, 215 &path); 216 if (IS_ERR(dentry)) { 217 err = PTR_ERR(dentry); 218 if (err != -EEXIST) 219 ksmbd_debug(VFS, "path create failed for %s, err %d\n", 220 name, err); 221 return err; 222 } 223 224 idmap = mnt_idmap(path.mnt); 225 mode |= S_IFDIR; 226 d = dentry; 227 dentry = vfs_mkdir(idmap, d_inode(path.dentry), dentry, mode); 228 if (IS_ERR(dentry)) 229 err = PTR_ERR(dentry); 230 else if (d_is_negative(dentry)) 231 err = -ENOENT; 232 if (!err && dentry != d) 233 ksmbd_vfs_inherit_owner(work, d_inode(path.dentry), d_inode(dentry)); 234 235 done_path_create(&path, dentry); 236 if (err) 237 pr_err("mkdir(%s): creation failed (err:%d)\n", name, err); 238 return err; 239 } 240 241 static ssize_t ksmbd_vfs_getcasexattr(struct mnt_idmap *idmap, 242 struct dentry *dentry, char *attr_name, 243 int attr_name_len, char **attr_value) 244 { 245 char *name, *xattr_list = NULL; 246 ssize_t value_len = -ENOENT, xattr_list_len; 247 248 xattr_list_len = ksmbd_vfs_listxattr(dentry, &xattr_list); 249 if (xattr_list_len <= 0) 250 goto out; 251 252 for (name = xattr_list; name - xattr_list < xattr_list_len; 253 name += strlen(name) + 1) { 254 ksmbd_debug(VFS, "%s, len %zd\n", name, strlen(name)); 255 if (strncasecmp(attr_name, name, attr_name_len)) 256 continue; 257 258 value_len = ksmbd_vfs_getxattr(idmap, 259 dentry, 260 name, 261 attr_value); 262 if (value_len < 0) 263 pr_err("failed to get xattr in file\n"); 264 break; 265 } 266 267 out: 268 kvfree(xattr_list); 269 return value_len; 270 } 271 272 static int ksmbd_vfs_stream_read(struct ksmbd_file *fp, char *buf, loff_t *pos, 273 size_t count) 274 { 275 ssize_t v_len; 276 char *stream_buf = NULL; 277 278 ksmbd_debug(VFS, "read stream data pos : %llu, count : %zd\n", 279 *pos, count); 280 281 v_len = ksmbd_vfs_getcasexattr(file_mnt_idmap(fp->filp), 282 fp->filp->f_path.dentry, 283 fp->stream.name, 284 fp->stream.size, 285 &stream_buf); 286 if ((int)v_len <= 0) 287 return (int)v_len; 288 289 if (v_len <= *pos) { 290 count = -EINVAL; 291 goto free_buf; 292 } 293 294 if (v_len - *pos < count) 295 count = v_len - *pos; 296 fp->stream.pos = v_len; 297 298 memcpy(buf, &stream_buf[*pos], count); 299 300 free_buf: 301 kvfree(stream_buf); 302 return count; 303 } 304 305 /** 306 * check_lock_range() - vfs helper for smb byte range file locking 307 * @filp: the file to apply the lock to 308 * @start: lock start byte offset 309 * @end: lock end byte offset 310 * @type: byte range type read/write 311 * 312 * Return: 0 on success, otherwise error 313 */ 314 static int check_lock_range(struct file *filp, loff_t start, loff_t end, 315 unsigned char type) 316 { 317 struct file_lock *flock; 318 struct file_lock_context *ctx = locks_inode_context(file_inode(filp)); 319 int error = 0; 320 321 if (!ctx || list_empty_careful(&ctx->flc_posix)) 322 return 0; 323 324 spin_lock(&ctx->flc_lock); 325 for_each_file_lock(flock, &ctx->flc_posix) { 326 /* check conflict locks */ 327 if (flock->fl_end >= start && end >= flock->fl_start) { 328 if (lock_is_read(flock)) { 329 if (type == WRITE) { 330 pr_err("not allow write by shared lock\n"); 331 error = 1; 332 goto out; 333 } 334 } else if (lock_is_write(flock)) { 335 /* check owner in lock */ 336 if (flock->c.flc_file != filp) { 337 error = 1; 338 pr_err("not allow rw access by exclusive lock from other opens\n"); 339 goto out; 340 } 341 } 342 } 343 } 344 out: 345 spin_unlock(&ctx->flc_lock); 346 return error; 347 } 348 349 /** 350 * ksmbd_vfs_read() - vfs helper for smb file read 351 * @work: smb work 352 * @fp: ksmbd file pointer 353 * @count: read byte count 354 * @pos: file pos 355 * @rbuf: read data buffer 356 * 357 * Return: number of read bytes on success, otherwise error 358 */ 359 int ksmbd_vfs_read(struct ksmbd_work *work, struct ksmbd_file *fp, size_t count, 360 loff_t *pos, char *rbuf) 361 { 362 struct file *filp = fp->filp; 363 ssize_t nbytes = 0; 364 struct inode *inode = file_inode(filp); 365 366 if (S_ISDIR(inode->i_mode)) 367 return -EISDIR; 368 369 if (unlikely(count == 0)) 370 return 0; 371 372 if (work->conn->connection_type) { 373 if (!(fp->daccess & (FILE_READ_DATA_LE | FILE_EXECUTE_LE))) { 374 pr_err("no right to read(%pD)\n", fp->filp); 375 return -EACCES; 376 } 377 } 378 379 if (ksmbd_stream_fd(fp)) 380 return ksmbd_vfs_stream_read(fp, rbuf, pos, count); 381 382 if (!work->tcon->posix_extensions) { 383 int ret; 384 385 ret = check_lock_range(filp, *pos, *pos + count - 1, READ); 386 if (ret) { 387 pr_err("unable to read due to lock\n"); 388 return -EAGAIN; 389 } 390 } 391 392 nbytes = kernel_read(filp, rbuf, count, pos); 393 if (nbytes < 0) { 394 pr_err("smb read failed, err = %zd\n", nbytes); 395 return nbytes; 396 } 397 398 filp->f_pos = *pos; 399 return nbytes; 400 } 401 402 static int ksmbd_vfs_stream_write(struct ksmbd_file *fp, char *buf, loff_t *pos, 403 size_t count) 404 { 405 char *stream_buf = NULL, *wbuf; 406 struct mnt_idmap *idmap = file_mnt_idmap(fp->filp); 407 size_t size; 408 ssize_t v_len; 409 int err = 0; 410 411 ksmbd_debug(VFS, "write stream data pos : %llu, count : %zd\n", 412 *pos, count); 413 414 if (*pos >= XATTR_SIZE_MAX) { 415 pr_err("stream write position %lld is out of bounds\n", *pos); 416 return -EINVAL; 417 } 418 419 size = *pos + count; 420 if (size > XATTR_SIZE_MAX) { 421 size = XATTR_SIZE_MAX; 422 count = XATTR_SIZE_MAX - *pos; 423 } 424 425 v_len = ksmbd_vfs_getcasexattr(idmap, 426 fp->filp->f_path.dentry, 427 fp->stream.name, 428 fp->stream.size, 429 &stream_buf); 430 if (v_len < 0) { 431 pr_err("not found stream in xattr : %zd\n", v_len); 432 err = v_len; 433 goto out; 434 } 435 436 if (v_len < size) { 437 wbuf = kvzalloc(size, KSMBD_DEFAULT_GFP); 438 if (!wbuf) { 439 err = -ENOMEM; 440 goto out; 441 } 442 443 if (v_len > 0) 444 memcpy(wbuf, stream_buf, v_len); 445 kvfree(stream_buf); 446 stream_buf = wbuf; 447 } 448 449 memcpy(&stream_buf[*pos], buf, count); 450 451 err = ksmbd_vfs_setxattr(idmap, 452 &fp->filp->f_path, 453 fp->stream.name, 454 (void *)stream_buf, 455 size, 456 0, 457 true); 458 if (err < 0) 459 goto out; 460 else 461 fp->stream.pos = size; 462 err = 0; 463 out: 464 kvfree(stream_buf); 465 return err; 466 } 467 468 /** 469 * ksmbd_vfs_write() - vfs helper for smb file write 470 * @work: work 471 * @fp: ksmbd file pointer 472 * @buf: buf containing data for writing 473 * @count: read byte count 474 * @pos: file pos 475 * @sync: fsync after write 476 * @written: number of bytes written 477 * 478 * Return: 0 on success, otherwise error 479 */ 480 int ksmbd_vfs_write(struct ksmbd_work *work, struct ksmbd_file *fp, 481 char *buf, size_t count, loff_t *pos, bool sync, 482 ssize_t *written) 483 { 484 struct file *filp; 485 loff_t offset = *pos; 486 int err = 0; 487 488 if (work->conn->connection_type) { 489 if (!(fp->daccess & (FILE_WRITE_DATA_LE | FILE_APPEND_DATA_LE)) || 490 S_ISDIR(file_inode(fp->filp)->i_mode)) { 491 pr_err("no right to write(%pD)\n", fp->filp); 492 err = -EACCES; 493 goto out; 494 } 495 } 496 497 filp = fp->filp; 498 499 if (ksmbd_stream_fd(fp)) { 500 err = ksmbd_vfs_stream_write(fp, buf, pos, count); 501 if (!err) 502 *written = count; 503 goto out; 504 } 505 506 if (!work->tcon->posix_extensions) { 507 err = check_lock_range(filp, *pos, *pos + count - 1, WRITE); 508 if (err) { 509 pr_err("unable to write due to lock\n"); 510 err = -EAGAIN; 511 goto out; 512 } 513 } 514 515 /* Reserve lease break for parent dir at closing time */ 516 fp->reserve_lease_break = true; 517 518 /* Do we need to break any of a levelII oplock? */ 519 smb_break_all_levII_oplock(work, fp, 1); 520 521 err = kernel_write(filp, buf, count, pos); 522 if (err < 0) { 523 ksmbd_debug(VFS, "smb write failed, err = %d\n", err); 524 goto out; 525 } 526 527 filp->f_pos = *pos; 528 *written = err; 529 err = 0; 530 if (sync) { 531 err = vfs_fsync_range(filp, offset, offset + *written, 0); 532 if (err < 0) 533 pr_err("fsync failed for filename = %pD, err = %d\n", 534 fp->filp, err); 535 } 536 537 out: 538 return err; 539 } 540 541 /** 542 * ksmbd_vfs_getattr() - vfs helper for smb getattr 543 * @path: path of dentry 544 * @stat: pointer to returned kernel stat structure 545 * Return: 0 on success, otherwise error 546 */ 547 int ksmbd_vfs_getattr(const struct path *path, struct kstat *stat) 548 { 549 int err; 550 551 err = vfs_getattr(path, stat, STATX_BTIME, AT_STATX_SYNC_AS_STAT); 552 if (err) 553 pr_err("getattr failed, err %d\n", err); 554 return err; 555 } 556 557 /** 558 * ksmbd_vfs_fsync() - vfs helper for smb fsync 559 * @work: work 560 * @fid: file id of open file 561 * @p_id: persistent file id 562 * 563 * Return: 0 on success, otherwise error 564 */ 565 int ksmbd_vfs_fsync(struct ksmbd_work *work, u64 fid, u64 p_id) 566 { 567 struct ksmbd_file *fp; 568 int err; 569 570 fp = ksmbd_lookup_fd_slow(work, fid, p_id); 571 if (!fp) { 572 pr_err("failed to get filp for fid %llu\n", fid); 573 return -ENOENT; 574 } 575 err = vfs_fsync(fp->filp, 0); 576 if (err < 0) 577 pr_err("smb fsync failed, err = %d\n", err); 578 ksmbd_fd_put(work, fp); 579 return err; 580 } 581 582 /** 583 * ksmbd_vfs_remove_file() - vfs helper for smb rmdir or unlink 584 * @work: work 585 * @path: path of dentry 586 * 587 * Return: 0 on success, otherwise error 588 */ 589 int ksmbd_vfs_remove_file(struct ksmbd_work *work, const struct path *path) 590 { 591 struct mnt_idmap *idmap; 592 struct dentry *parent = path->dentry->d_parent; 593 int err; 594 595 if (ksmbd_override_fsids(work)) 596 return -ENOMEM; 597 598 if (!d_inode(path->dentry)->i_nlink) { 599 err = -ENOENT; 600 goto out_err; 601 } 602 603 idmap = mnt_idmap(path->mnt); 604 if (S_ISDIR(d_inode(path->dentry)->i_mode)) { 605 err = vfs_rmdir(idmap, d_inode(parent), path->dentry); 606 if (err && err != -ENOTEMPTY) 607 ksmbd_debug(VFS, "rmdir failed, err %d\n", err); 608 } else { 609 err = vfs_unlink(idmap, d_inode(parent), path->dentry, NULL); 610 if (err) 611 ksmbd_debug(VFS, "unlink failed, err %d\n", err); 612 } 613 614 out_err: 615 ksmbd_revert_fsids(work); 616 return err; 617 } 618 619 /** 620 * ksmbd_vfs_link() - vfs helper for creating smb hardlink 621 * @work: work 622 * @oldname: source file name 623 * @newname: hardlink name that is relative to share 624 * 625 * Return: 0 on success, otherwise error 626 */ 627 int ksmbd_vfs_link(struct ksmbd_work *work, const char *oldname, 628 const char *newname) 629 { 630 struct path oldpath, newpath; 631 struct dentry *dentry; 632 int err; 633 634 if (ksmbd_override_fsids(work)) 635 return -ENOMEM; 636 637 err = kern_path(oldname, LOOKUP_NO_SYMLINKS, &oldpath); 638 if (err) { 639 pr_err("cannot get linux path for %s, err = %d\n", 640 oldname, err); 641 goto out1; 642 } 643 644 dentry = ksmbd_vfs_kern_path_create(work, newname, 645 LOOKUP_NO_SYMLINKS | LOOKUP_REVAL, 646 &newpath); 647 if (IS_ERR(dentry)) { 648 err = PTR_ERR(dentry); 649 pr_err("path create err for %s, err %d\n", newname, err); 650 goto out2; 651 } 652 653 err = -EXDEV; 654 if (oldpath.mnt != newpath.mnt) { 655 pr_err("vfs_link failed err %d\n", err); 656 goto out3; 657 } 658 659 err = vfs_link(oldpath.dentry, mnt_idmap(newpath.mnt), 660 d_inode(newpath.dentry), 661 dentry, NULL); 662 if (err) 663 ksmbd_debug(VFS, "vfs_link failed err %d\n", err); 664 665 out3: 666 done_path_create(&newpath, dentry); 667 out2: 668 path_put(&oldpath); 669 out1: 670 ksmbd_revert_fsids(work); 671 return err; 672 } 673 674 int ksmbd_vfs_rename(struct ksmbd_work *work, const struct path *old_path, 675 char *newname, int flags) 676 { 677 struct dentry *old_parent, *new_dentry, *trap; 678 struct dentry *old_child = old_path->dentry; 679 struct path new_path; 680 struct qstr new_last; 681 struct renamedata rd; 682 struct filename *to; 683 struct ksmbd_share_config *share_conf = work->tcon->share_conf; 684 struct ksmbd_file *parent_fp; 685 int new_type; 686 int err, lookup_flags = LOOKUP_NO_SYMLINKS; 687 int target_lookup_flags = LOOKUP_RENAME_TARGET | LOOKUP_CREATE; 688 689 if (ksmbd_override_fsids(work)) 690 return -ENOMEM; 691 692 to = getname_kernel(newname); 693 if (IS_ERR(to)) { 694 err = PTR_ERR(to); 695 goto revert_fsids; 696 } 697 698 /* 699 * explicitly handle file overwrite case, for compatibility with 700 * filesystems that may not support rename flags (e.g: fuse) 701 */ 702 if (flags & RENAME_NOREPLACE) 703 target_lookup_flags |= LOOKUP_EXCL; 704 flags &= ~(RENAME_NOREPLACE); 705 706 retry: 707 err = vfs_path_parent_lookup(to, lookup_flags | LOOKUP_BENEATH, 708 &new_path, &new_last, &new_type, 709 &share_conf->vfs_path); 710 if (err) 711 goto out1; 712 713 if (old_path->mnt != new_path.mnt) { 714 err = -EXDEV; 715 goto out2; 716 } 717 718 err = mnt_want_write(old_path->mnt); 719 if (err) 720 goto out2; 721 722 trap = lock_rename_child(old_child, new_path.dentry); 723 if (IS_ERR(trap)) { 724 err = PTR_ERR(trap); 725 goto out_drop_write; 726 } 727 728 old_parent = dget(old_child->d_parent); 729 if (d_unhashed(old_child)) { 730 err = -EINVAL; 731 goto out3; 732 } 733 734 parent_fp = ksmbd_lookup_fd_inode(old_child->d_parent); 735 if (parent_fp) { 736 if (parent_fp->daccess & FILE_DELETE_LE) { 737 pr_err("parent dir is opened with delete access\n"); 738 err = -ESHARE; 739 ksmbd_fd_put(work, parent_fp); 740 goto out3; 741 } 742 ksmbd_fd_put(work, parent_fp); 743 } 744 745 new_dentry = lookup_one_qstr_excl(&new_last, new_path.dentry, 746 lookup_flags | target_lookup_flags); 747 if (IS_ERR(new_dentry)) { 748 err = PTR_ERR(new_dentry); 749 goto out3; 750 } 751 752 if (d_is_symlink(new_dentry)) { 753 err = -EACCES; 754 goto out4; 755 } 756 757 if (old_child == trap) { 758 err = -EINVAL; 759 goto out4; 760 } 761 762 if (new_dentry == trap) { 763 err = -ENOTEMPTY; 764 goto out4; 765 } 766 767 rd.old_mnt_idmap = mnt_idmap(old_path->mnt), 768 rd.old_dir = d_inode(old_parent), 769 rd.old_dentry = old_child, 770 rd.new_mnt_idmap = mnt_idmap(new_path.mnt), 771 rd.new_dir = new_path.dentry->d_inode, 772 rd.new_dentry = new_dentry, 773 rd.flags = flags, 774 rd.delegated_inode = NULL, 775 err = vfs_rename(&rd); 776 if (err) 777 ksmbd_debug(VFS, "vfs_rename failed err %d\n", err); 778 779 out4: 780 dput(new_dentry); 781 out3: 782 dput(old_parent); 783 unlock_rename(old_parent, new_path.dentry); 784 out_drop_write: 785 mnt_drop_write(old_path->mnt); 786 out2: 787 path_put(&new_path); 788 789 if (retry_estale(err, lookup_flags)) { 790 lookup_flags |= LOOKUP_REVAL; 791 goto retry; 792 } 793 out1: 794 putname(to); 795 revert_fsids: 796 ksmbd_revert_fsids(work); 797 return err; 798 } 799 800 /** 801 * ksmbd_vfs_truncate() - vfs helper for smb file truncate 802 * @work: work 803 * @fp: ksmbd file pointer 804 * @size: truncate to given size 805 * 806 * Return: 0 on success, otherwise error 807 */ 808 int ksmbd_vfs_truncate(struct ksmbd_work *work, 809 struct ksmbd_file *fp, loff_t size) 810 { 811 int err = 0; 812 struct file *filp; 813 814 filp = fp->filp; 815 816 /* Do we need to break any of a levelII oplock? */ 817 smb_break_all_levII_oplock(work, fp, 1); 818 819 if (!work->tcon->posix_extensions) { 820 struct inode *inode = file_inode(filp); 821 822 if (size < inode->i_size) { 823 err = check_lock_range(filp, size, 824 inode->i_size - 1, WRITE); 825 } else { 826 err = check_lock_range(filp, inode->i_size, 827 size - 1, WRITE); 828 } 829 830 if (err) { 831 pr_err("failed due to lock\n"); 832 return -EAGAIN; 833 } 834 } 835 836 err = vfs_truncate(&filp->f_path, size); 837 if (err) 838 pr_err("truncate failed, err %d\n", err); 839 return err; 840 } 841 842 /** 843 * ksmbd_vfs_listxattr() - vfs helper for smb list extended attributes 844 * @dentry: dentry of file for listing xattrs 845 * @list: destination buffer 846 * 847 * Return: xattr list length on success, otherwise error 848 */ 849 ssize_t ksmbd_vfs_listxattr(struct dentry *dentry, char **list) 850 { 851 ssize_t size; 852 char *vlist = NULL; 853 854 size = vfs_listxattr(dentry, NULL, 0); 855 if (size <= 0) 856 return size; 857 858 vlist = kvzalloc(size, KSMBD_DEFAULT_GFP); 859 if (!vlist) 860 return -ENOMEM; 861 862 *list = vlist; 863 size = vfs_listxattr(dentry, vlist, size); 864 if (size < 0) { 865 ksmbd_debug(VFS, "listxattr failed\n"); 866 kvfree(vlist); 867 *list = NULL; 868 } 869 870 return size; 871 } 872 873 static ssize_t ksmbd_vfs_xattr_len(struct mnt_idmap *idmap, 874 struct dentry *dentry, char *xattr_name) 875 { 876 return vfs_getxattr(idmap, dentry, xattr_name, NULL, 0); 877 } 878 879 /** 880 * ksmbd_vfs_getxattr() - vfs helper for smb get extended attributes value 881 * @idmap: idmap 882 * @dentry: dentry of file for getting xattrs 883 * @xattr_name: name of xattr name to query 884 * @xattr_buf: destination buffer xattr value 885 * 886 * Return: read xattr value length on success, otherwise error 887 */ 888 ssize_t ksmbd_vfs_getxattr(struct mnt_idmap *idmap, 889 struct dentry *dentry, 890 char *xattr_name, char **xattr_buf) 891 { 892 ssize_t xattr_len; 893 char *buf; 894 895 *xattr_buf = NULL; 896 xattr_len = ksmbd_vfs_xattr_len(idmap, dentry, xattr_name); 897 if (xattr_len < 0) 898 return xattr_len; 899 900 buf = kmalloc(xattr_len + 1, KSMBD_DEFAULT_GFP); 901 if (!buf) 902 return -ENOMEM; 903 904 xattr_len = vfs_getxattr(idmap, dentry, xattr_name, 905 (void *)buf, xattr_len); 906 if (xattr_len > 0) 907 *xattr_buf = buf; 908 else 909 kfree(buf); 910 return xattr_len; 911 } 912 913 /** 914 * ksmbd_vfs_setxattr() - vfs helper for smb set extended attributes value 915 * @idmap: idmap of the relevant mount 916 * @path: path of dentry to set XATTR at 917 * @attr_name: xattr name for setxattr 918 * @attr_value: xattr value to set 919 * @attr_size: size of xattr value 920 * @flags: destination buffer length 921 * @get_write: get write access to a mount 922 * 923 * Return: 0 on success, otherwise error 924 */ 925 int ksmbd_vfs_setxattr(struct mnt_idmap *idmap, 926 const struct path *path, const char *attr_name, 927 void *attr_value, size_t attr_size, int flags, 928 bool get_write) 929 { 930 int err; 931 932 if (get_write == true) { 933 err = mnt_want_write(path->mnt); 934 if (err) 935 return err; 936 } 937 938 err = vfs_setxattr(idmap, 939 path->dentry, 940 attr_name, 941 attr_value, 942 attr_size, 943 flags); 944 if (err) 945 ksmbd_debug(VFS, "setxattr failed, err %d\n", err); 946 if (get_write == true) 947 mnt_drop_write(path->mnt); 948 return err; 949 } 950 951 /** 952 * ksmbd_vfs_set_fadvise() - convert smb IO caching options to linux options 953 * @filp: file pointer for IO 954 * @option: smb IO options 955 */ 956 void ksmbd_vfs_set_fadvise(struct file *filp, __le32 option) 957 { 958 struct address_space *mapping; 959 960 mapping = filp->f_mapping; 961 962 if (!option || !mapping) 963 return; 964 965 if (option & FILE_WRITE_THROUGH_LE) { 966 filp->f_flags |= O_SYNC; 967 } else if (option & FILE_SEQUENTIAL_ONLY_LE) { 968 filp->f_ra.ra_pages = inode_to_bdi(mapping->host)->ra_pages * 2; 969 spin_lock(&filp->f_lock); 970 filp->f_mode &= ~FMODE_RANDOM; 971 spin_unlock(&filp->f_lock); 972 } else if (option & FILE_RANDOM_ACCESS_LE) { 973 spin_lock(&filp->f_lock); 974 filp->f_mode |= FMODE_RANDOM; 975 spin_unlock(&filp->f_lock); 976 } 977 } 978 979 int ksmbd_vfs_zero_data(struct ksmbd_work *work, struct ksmbd_file *fp, 980 loff_t off, loff_t len) 981 { 982 smb_break_all_levII_oplock(work, fp, 1); 983 if (fp->f_ci->m_fattr & FILE_ATTRIBUTE_SPARSE_FILE_LE) 984 return vfs_fallocate(fp->filp, 985 FALLOC_FL_PUNCH_HOLE | FALLOC_FL_KEEP_SIZE, 986 off, len); 987 988 return vfs_fallocate(fp->filp, 989 FALLOC_FL_ZERO_RANGE | FALLOC_FL_KEEP_SIZE, 990 off, len); 991 } 992 993 int ksmbd_vfs_fqar_lseek(struct ksmbd_file *fp, loff_t start, loff_t length, 994 struct file_allocated_range_buffer *ranges, 995 unsigned int in_count, unsigned int *out_count) 996 { 997 struct file *f = fp->filp; 998 struct inode *inode = file_inode(fp->filp); 999 loff_t maxbytes = (u64)inode->i_sb->s_maxbytes, end; 1000 loff_t extent_start, extent_end; 1001 int ret = 0; 1002 1003 if (start > maxbytes) 1004 return -EFBIG; 1005 1006 if (!in_count) 1007 return 0; 1008 1009 /* 1010 * Shrink request scope to what the fs can actually handle. 1011 */ 1012 if (length > maxbytes || (maxbytes - length) < start) 1013 length = maxbytes - start; 1014 1015 if (start + length > inode->i_size) 1016 length = inode->i_size - start; 1017 1018 *out_count = 0; 1019 end = start + length; 1020 while (start < end && *out_count < in_count) { 1021 extent_start = vfs_llseek(f, start, SEEK_DATA); 1022 if (extent_start < 0) { 1023 if (extent_start != -ENXIO) 1024 ret = (int)extent_start; 1025 break; 1026 } 1027 1028 if (extent_start >= end) 1029 break; 1030 1031 extent_end = vfs_llseek(f, extent_start, SEEK_HOLE); 1032 if (extent_end < 0) { 1033 if (extent_end != -ENXIO) 1034 ret = (int)extent_end; 1035 break; 1036 } else if (extent_start >= extent_end) { 1037 break; 1038 } 1039 1040 ranges[*out_count].file_offset = cpu_to_le64(extent_start); 1041 ranges[(*out_count)++].length = 1042 cpu_to_le64(min(extent_end, end) - extent_start); 1043 1044 start = extent_end; 1045 } 1046 1047 return ret; 1048 } 1049 1050 int ksmbd_vfs_remove_xattr(struct mnt_idmap *idmap, 1051 const struct path *path, char *attr_name, 1052 bool get_write) 1053 { 1054 int err; 1055 1056 if (get_write == true) { 1057 err = mnt_want_write(path->mnt); 1058 if (err) 1059 return err; 1060 } 1061 1062 err = vfs_removexattr(idmap, path->dentry, attr_name); 1063 1064 if (get_write == true) 1065 mnt_drop_write(path->mnt); 1066 1067 return err; 1068 } 1069 1070 int ksmbd_vfs_unlink(struct file *filp) 1071 { 1072 int err = 0; 1073 struct dentry *dir, *dentry = filp->f_path.dentry; 1074 struct mnt_idmap *idmap = file_mnt_idmap(filp); 1075 1076 err = mnt_want_write(filp->f_path.mnt); 1077 if (err) 1078 return err; 1079 1080 dir = dget_parent(dentry); 1081 err = ksmbd_vfs_lock_parent(dir, dentry); 1082 if (err) 1083 goto out; 1084 dget(dentry); 1085 1086 if (S_ISDIR(d_inode(dentry)->i_mode)) 1087 err = vfs_rmdir(idmap, d_inode(dir), dentry); 1088 else 1089 err = vfs_unlink(idmap, d_inode(dir), dentry, NULL); 1090 1091 dput(dentry); 1092 inode_unlock(d_inode(dir)); 1093 if (err) 1094 ksmbd_debug(VFS, "failed to delete, err %d\n", err); 1095 out: 1096 dput(dir); 1097 mnt_drop_write(filp->f_path.mnt); 1098 1099 return err; 1100 } 1101 1102 static bool __dir_empty(struct dir_context *ctx, const char *name, int namlen, 1103 loff_t offset, u64 ino, unsigned int d_type) 1104 { 1105 struct ksmbd_readdir_data *buf; 1106 1107 buf = container_of(ctx, struct ksmbd_readdir_data, ctx); 1108 if (!is_dot_dotdot(name, namlen)) 1109 buf->dirent_count++; 1110 1111 return !buf->dirent_count; 1112 } 1113 1114 /** 1115 * ksmbd_vfs_empty_dir() - check for empty directory 1116 * @fp: ksmbd file pointer 1117 * 1118 * Return: true if directory empty, otherwise false 1119 */ 1120 int ksmbd_vfs_empty_dir(struct ksmbd_file *fp) 1121 { 1122 int err; 1123 struct ksmbd_readdir_data readdir_data; 1124 1125 memset(&readdir_data, 0, sizeof(struct ksmbd_readdir_data)); 1126 1127 set_ctx_actor(&readdir_data.ctx, __dir_empty); 1128 readdir_data.dirent_count = 0; 1129 1130 err = iterate_dir(fp->filp, &readdir_data.ctx); 1131 if (readdir_data.dirent_count) 1132 err = -ENOTEMPTY; 1133 else 1134 err = 0; 1135 return err; 1136 } 1137 1138 static bool __caseless_lookup(struct dir_context *ctx, const char *name, 1139 int namlen, loff_t offset, u64 ino, 1140 unsigned int d_type) 1141 { 1142 struct ksmbd_readdir_data *buf; 1143 int cmp = -EINVAL; 1144 1145 buf = container_of(ctx, struct ksmbd_readdir_data, ctx); 1146 1147 if (buf->used != namlen) 1148 return true; 1149 if (IS_ENABLED(CONFIG_UNICODE) && buf->um) { 1150 const struct qstr q_buf = {.name = buf->private, 1151 .len = buf->used}; 1152 const struct qstr q_name = {.name = name, 1153 .len = namlen}; 1154 1155 cmp = utf8_strncasecmp(buf->um, &q_buf, &q_name); 1156 } 1157 if (cmp < 0) 1158 cmp = strncasecmp((char *)buf->private, name, namlen); 1159 if (!cmp) { 1160 memcpy((char *)buf->private, name, buf->used); 1161 buf->dirent_count = 1; 1162 return false; 1163 } 1164 return true; 1165 } 1166 1167 /** 1168 * ksmbd_vfs_lookup_in_dir() - lookup a file in a directory 1169 * @dir: path info 1170 * @name: filename to lookup 1171 * @namelen: filename length 1172 * @um: &struct unicode_map to use 1173 * 1174 * Return: 0 on success, otherwise error 1175 */ 1176 static int ksmbd_vfs_lookup_in_dir(const struct path *dir, char *name, 1177 size_t namelen, struct unicode_map *um) 1178 { 1179 int ret; 1180 struct file *dfilp; 1181 int flags = O_RDONLY | O_LARGEFILE; 1182 struct ksmbd_readdir_data readdir_data = { 1183 .ctx.actor = __caseless_lookup, 1184 .private = name, 1185 .used = namelen, 1186 .dirent_count = 0, 1187 .um = um, 1188 }; 1189 1190 dfilp = dentry_open(dir, flags, current_cred()); 1191 if (IS_ERR(dfilp)) 1192 return PTR_ERR(dfilp); 1193 1194 ret = iterate_dir(dfilp, &readdir_data.ctx); 1195 if (readdir_data.dirent_count > 0) 1196 ret = 0; 1197 fput(dfilp); 1198 return ret; 1199 } 1200 1201 /** 1202 * ksmbd_vfs_kern_path_locked() - lookup a file and get path info 1203 * @work: work 1204 * @name: file path that is relative to share 1205 * @flags: lookup flags 1206 * @parent_path: if lookup succeed, return parent_path info 1207 * @path: if lookup succeed, return path info 1208 * @caseless: caseless filename lookup 1209 * 1210 * Return: 0 on success, otherwise error 1211 */ 1212 int ksmbd_vfs_kern_path_locked(struct ksmbd_work *work, char *name, 1213 unsigned int flags, struct path *parent_path, 1214 struct path *path, bool caseless) 1215 { 1216 struct ksmbd_share_config *share_conf = work->tcon->share_conf; 1217 int err; 1218 1219 err = ksmbd_vfs_path_lookup_locked(share_conf, name, flags, parent_path, 1220 path); 1221 if (!err) 1222 return 0; 1223 1224 if (caseless) { 1225 char *filepath; 1226 size_t path_len, remain_len; 1227 1228 filepath = name; 1229 path_len = strlen(filepath); 1230 remain_len = path_len; 1231 1232 *parent_path = share_conf->vfs_path; 1233 path_get(parent_path); 1234 1235 while (d_can_lookup(parent_path->dentry)) { 1236 char *filename = filepath + path_len - remain_len; 1237 char *next = strchrnul(filename, '/'); 1238 size_t filename_len = next - filename; 1239 bool is_last = !next[0]; 1240 1241 if (filename_len == 0) 1242 break; 1243 1244 err = ksmbd_vfs_lookup_in_dir(parent_path, filename, 1245 filename_len, 1246 work->conn->um); 1247 if (err) 1248 goto out2; 1249 1250 next[0] = '\0'; 1251 1252 err = vfs_path_lookup(share_conf->vfs_path.dentry, 1253 share_conf->vfs_path.mnt, 1254 filepath, 1255 flags, 1256 path); 1257 if (!is_last) 1258 next[0] = '/'; 1259 if (err) 1260 goto out2; 1261 else if (is_last) 1262 goto out1; 1263 path_put(parent_path); 1264 *parent_path = *path; 1265 1266 remain_len -= filename_len + 1; 1267 } 1268 1269 err = -EINVAL; 1270 out2: 1271 path_put(parent_path); 1272 } 1273 1274 out1: 1275 if (!err) { 1276 err = mnt_want_write(parent_path->mnt); 1277 if (err) { 1278 path_put(path); 1279 path_put(parent_path); 1280 return err; 1281 } 1282 1283 err = ksmbd_vfs_lock_parent(parent_path->dentry, path->dentry); 1284 if (err) { 1285 mnt_drop_write(parent_path->mnt); 1286 path_put(path); 1287 path_put(parent_path); 1288 } 1289 } 1290 return err; 1291 } 1292 1293 void ksmbd_vfs_kern_path_unlock(struct path *parent_path, struct path *path) 1294 { 1295 inode_unlock(d_inode(parent_path->dentry)); 1296 mnt_drop_write(parent_path->mnt); 1297 path_put(path); 1298 path_put(parent_path); 1299 } 1300 1301 struct dentry *ksmbd_vfs_kern_path_create(struct ksmbd_work *work, 1302 const char *name, 1303 unsigned int flags, 1304 struct path *path) 1305 { 1306 char *abs_name; 1307 struct dentry *dent; 1308 1309 abs_name = convert_to_unix_name(work->tcon->share_conf, name); 1310 if (!abs_name) 1311 return ERR_PTR(-ENOMEM); 1312 1313 dent = kern_path_create(AT_FDCWD, abs_name, path, flags); 1314 kfree(abs_name); 1315 return dent; 1316 } 1317 1318 int ksmbd_vfs_remove_acl_xattrs(struct mnt_idmap *idmap, 1319 const struct path *path) 1320 { 1321 char *name, *xattr_list = NULL; 1322 ssize_t xattr_list_len; 1323 int err = 0; 1324 1325 xattr_list_len = ksmbd_vfs_listxattr(path->dentry, &xattr_list); 1326 if (xattr_list_len < 0) { 1327 goto out; 1328 } else if (!xattr_list_len) { 1329 ksmbd_debug(SMB, "empty xattr in the file\n"); 1330 goto out; 1331 } 1332 1333 err = mnt_want_write(path->mnt); 1334 if (err) 1335 goto out; 1336 1337 for (name = xattr_list; name - xattr_list < xattr_list_len; 1338 name += strlen(name) + 1) { 1339 ksmbd_debug(SMB, "%s, len %zd\n", name, strlen(name)); 1340 1341 if (!strncmp(name, XATTR_NAME_POSIX_ACL_ACCESS, 1342 sizeof(XATTR_NAME_POSIX_ACL_ACCESS) - 1) || 1343 !strncmp(name, XATTR_NAME_POSIX_ACL_DEFAULT, 1344 sizeof(XATTR_NAME_POSIX_ACL_DEFAULT) - 1)) { 1345 err = vfs_remove_acl(idmap, path->dentry, name); 1346 if (err) 1347 ksmbd_debug(SMB, 1348 "remove acl xattr failed : %s\n", name); 1349 } 1350 } 1351 mnt_drop_write(path->mnt); 1352 1353 out: 1354 kvfree(xattr_list); 1355 return err; 1356 } 1357 1358 int ksmbd_vfs_remove_sd_xattrs(struct mnt_idmap *idmap, const struct path *path) 1359 { 1360 char *name, *xattr_list = NULL; 1361 ssize_t xattr_list_len; 1362 int err = 0; 1363 1364 xattr_list_len = ksmbd_vfs_listxattr(path->dentry, &xattr_list); 1365 if (xattr_list_len < 0) { 1366 goto out; 1367 } else if (!xattr_list_len) { 1368 ksmbd_debug(SMB, "empty xattr in the file\n"); 1369 goto out; 1370 } 1371 1372 for (name = xattr_list; name - xattr_list < xattr_list_len; 1373 name += strlen(name) + 1) { 1374 ksmbd_debug(SMB, "%s, len %zd\n", name, strlen(name)); 1375 1376 if (!strncmp(name, XATTR_NAME_SD, XATTR_NAME_SD_LEN)) { 1377 err = ksmbd_vfs_remove_xattr(idmap, path, name, true); 1378 if (err) 1379 ksmbd_debug(SMB, "remove xattr failed : %s\n", name); 1380 } 1381 } 1382 out: 1383 kvfree(xattr_list); 1384 return err; 1385 } 1386 1387 static struct xattr_smb_acl *ksmbd_vfs_make_xattr_posix_acl(struct mnt_idmap *idmap, 1388 struct inode *inode, 1389 int acl_type) 1390 { 1391 struct xattr_smb_acl *smb_acl = NULL; 1392 struct posix_acl *posix_acls; 1393 struct posix_acl_entry *pa_entry; 1394 struct xattr_acl_entry *xa_entry; 1395 int i; 1396 1397 if (!IS_ENABLED(CONFIG_FS_POSIX_ACL)) 1398 return NULL; 1399 1400 posix_acls = get_inode_acl(inode, acl_type); 1401 if (IS_ERR_OR_NULL(posix_acls)) 1402 return NULL; 1403 1404 smb_acl = kzalloc(sizeof(struct xattr_smb_acl) + 1405 sizeof(struct xattr_acl_entry) * posix_acls->a_count, 1406 KSMBD_DEFAULT_GFP); 1407 if (!smb_acl) 1408 goto out; 1409 1410 smb_acl->count = posix_acls->a_count; 1411 pa_entry = posix_acls->a_entries; 1412 xa_entry = smb_acl->entries; 1413 for (i = 0; i < posix_acls->a_count; i++, pa_entry++, xa_entry++) { 1414 switch (pa_entry->e_tag) { 1415 case ACL_USER: 1416 xa_entry->type = SMB_ACL_USER; 1417 xa_entry->uid = posix_acl_uid_translate(idmap, pa_entry); 1418 break; 1419 case ACL_USER_OBJ: 1420 xa_entry->type = SMB_ACL_USER_OBJ; 1421 break; 1422 case ACL_GROUP: 1423 xa_entry->type = SMB_ACL_GROUP; 1424 xa_entry->gid = posix_acl_gid_translate(idmap, pa_entry); 1425 break; 1426 case ACL_GROUP_OBJ: 1427 xa_entry->type = SMB_ACL_GROUP_OBJ; 1428 break; 1429 case ACL_OTHER: 1430 xa_entry->type = SMB_ACL_OTHER; 1431 break; 1432 case ACL_MASK: 1433 xa_entry->type = SMB_ACL_MASK; 1434 break; 1435 default: 1436 pr_err("unknown type : 0x%x\n", pa_entry->e_tag); 1437 goto out; 1438 } 1439 1440 if (pa_entry->e_perm & ACL_READ) 1441 xa_entry->perm |= SMB_ACL_READ; 1442 if (pa_entry->e_perm & ACL_WRITE) 1443 xa_entry->perm |= SMB_ACL_WRITE; 1444 if (pa_entry->e_perm & ACL_EXECUTE) 1445 xa_entry->perm |= SMB_ACL_EXECUTE; 1446 } 1447 out: 1448 posix_acl_release(posix_acls); 1449 return smb_acl; 1450 } 1451 1452 int ksmbd_vfs_set_sd_xattr(struct ksmbd_conn *conn, 1453 struct mnt_idmap *idmap, 1454 const struct path *path, 1455 struct smb_ntsd *pntsd, int len, 1456 bool get_write) 1457 { 1458 int rc; 1459 struct ndr sd_ndr = {0}, acl_ndr = {0}; 1460 struct xattr_ntacl acl = {0}; 1461 struct xattr_smb_acl *smb_acl, *def_smb_acl = NULL; 1462 struct dentry *dentry = path->dentry; 1463 struct inode *inode = d_inode(dentry); 1464 1465 acl.version = 4; 1466 acl.hash_type = XATTR_SD_HASH_TYPE_SHA256; 1467 acl.current_time = ksmbd_UnixTimeToNT(current_time(inode)); 1468 1469 memcpy(acl.desc, "posix_acl", 9); 1470 acl.desc_len = 10; 1471 1472 pntsd->osidoffset = 1473 cpu_to_le32(le32_to_cpu(pntsd->osidoffset) + NDR_NTSD_OFFSETOF); 1474 pntsd->gsidoffset = 1475 cpu_to_le32(le32_to_cpu(pntsd->gsidoffset) + NDR_NTSD_OFFSETOF); 1476 pntsd->dacloffset = 1477 cpu_to_le32(le32_to_cpu(pntsd->dacloffset) + NDR_NTSD_OFFSETOF); 1478 1479 acl.sd_buf = (char *)pntsd; 1480 acl.sd_size = len; 1481 1482 sha256(acl.sd_buf, acl.sd_size, acl.hash); 1483 1484 smb_acl = ksmbd_vfs_make_xattr_posix_acl(idmap, inode, 1485 ACL_TYPE_ACCESS); 1486 if (S_ISDIR(inode->i_mode)) 1487 def_smb_acl = ksmbd_vfs_make_xattr_posix_acl(idmap, inode, 1488 ACL_TYPE_DEFAULT); 1489 1490 rc = ndr_encode_posix_acl(&acl_ndr, idmap, inode, 1491 smb_acl, def_smb_acl); 1492 if (rc) { 1493 pr_err("failed to encode ndr to posix acl\n"); 1494 goto out; 1495 } 1496 1497 sha256(acl_ndr.data, acl_ndr.offset, acl.posix_acl_hash); 1498 1499 rc = ndr_encode_v4_ntacl(&sd_ndr, &acl); 1500 if (rc) { 1501 pr_err("failed to encode ndr to posix acl\n"); 1502 goto out; 1503 } 1504 1505 rc = ksmbd_vfs_setxattr(idmap, path, 1506 XATTR_NAME_SD, sd_ndr.data, 1507 sd_ndr.offset, 0, get_write); 1508 if (rc < 0) 1509 pr_err("Failed to store XATTR ntacl :%d\n", rc); 1510 1511 kfree(sd_ndr.data); 1512 out: 1513 kfree(acl_ndr.data); 1514 kfree(smb_acl); 1515 kfree(def_smb_acl); 1516 return rc; 1517 } 1518 1519 int ksmbd_vfs_get_sd_xattr(struct ksmbd_conn *conn, 1520 struct mnt_idmap *idmap, 1521 struct dentry *dentry, 1522 struct smb_ntsd **pntsd) 1523 { 1524 int rc; 1525 struct ndr n; 1526 struct inode *inode = d_inode(dentry); 1527 struct ndr acl_ndr = {0}; 1528 struct xattr_ntacl acl; 1529 struct xattr_smb_acl *smb_acl = NULL, *def_smb_acl = NULL; 1530 __u8 cmp_hash[XATTR_SD_HASH_SIZE] = {0}; 1531 1532 rc = ksmbd_vfs_getxattr(idmap, dentry, XATTR_NAME_SD, &n.data); 1533 if (rc <= 0) 1534 return rc; 1535 1536 n.length = rc; 1537 rc = ndr_decode_v4_ntacl(&n, &acl); 1538 if (rc) 1539 goto free_n_data; 1540 1541 smb_acl = ksmbd_vfs_make_xattr_posix_acl(idmap, inode, 1542 ACL_TYPE_ACCESS); 1543 if (S_ISDIR(inode->i_mode)) 1544 def_smb_acl = ksmbd_vfs_make_xattr_posix_acl(idmap, inode, 1545 ACL_TYPE_DEFAULT); 1546 1547 rc = ndr_encode_posix_acl(&acl_ndr, idmap, inode, smb_acl, 1548 def_smb_acl); 1549 if (rc) { 1550 pr_err("failed to encode ndr to posix acl\n"); 1551 goto out_free; 1552 } 1553 1554 sha256(acl_ndr.data, acl_ndr.offset, cmp_hash); 1555 1556 if (memcmp(cmp_hash, acl.posix_acl_hash, XATTR_SD_HASH_SIZE)) { 1557 pr_err("hash value diff\n"); 1558 rc = -EINVAL; 1559 goto out_free; 1560 } 1561 1562 *pntsd = acl.sd_buf; 1563 if (acl.sd_size < sizeof(struct smb_ntsd)) { 1564 pr_err("sd size is invalid\n"); 1565 goto out_free; 1566 } 1567 1568 (*pntsd)->osidoffset = cpu_to_le32(le32_to_cpu((*pntsd)->osidoffset) - 1569 NDR_NTSD_OFFSETOF); 1570 (*pntsd)->gsidoffset = cpu_to_le32(le32_to_cpu((*pntsd)->gsidoffset) - 1571 NDR_NTSD_OFFSETOF); 1572 (*pntsd)->dacloffset = cpu_to_le32(le32_to_cpu((*pntsd)->dacloffset) - 1573 NDR_NTSD_OFFSETOF); 1574 1575 rc = acl.sd_size; 1576 out_free: 1577 kfree(acl_ndr.data); 1578 kfree(smb_acl); 1579 kfree(def_smb_acl); 1580 if (rc < 0) { 1581 kfree(acl.sd_buf); 1582 *pntsd = NULL; 1583 } 1584 1585 free_n_data: 1586 kfree(n.data); 1587 return rc; 1588 } 1589 1590 int ksmbd_vfs_set_dos_attrib_xattr(struct mnt_idmap *idmap, 1591 const struct path *path, 1592 struct xattr_dos_attrib *da, 1593 bool get_write) 1594 { 1595 struct ndr n; 1596 int err; 1597 1598 err = ndr_encode_dos_attr(&n, da); 1599 if (err) 1600 return err; 1601 1602 err = ksmbd_vfs_setxattr(idmap, path, XATTR_NAME_DOS_ATTRIBUTE, 1603 (void *)n.data, n.offset, 0, get_write); 1604 if (err) 1605 ksmbd_debug(SMB, "failed to store dos attribute in xattr\n"); 1606 kfree(n.data); 1607 1608 return err; 1609 } 1610 1611 int ksmbd_vfs_get_dos_attrib_xattr(struct mnt_idmap *idmap, 1612 struct dentry *dentry, 1613 struct xattr_dos_attrib *da) 1614 { 1615 struct ndr n; 1616 int err; 1617 1618 err = ksmbd_vfs_getxattr(idmap, dentry, XATTR_NAME_DOS_ATTRIBUTE, 1619 (char **)&n.data); 1620 if (err > 0) { 1621 n.length = err; 1622 if (ndr_decode_dos_attr(&n, da)) 1623 err = -EINVAL; 1624 kfree(n.data); 1625 } else { 1626 ksmbd_debug(SMB, "failed to load dos attribute in xattr\n"); 1627 } 1628 1629 return err; 1630 } 1631 1632 /** 1633 * ksmbd_vfs_init_kstat() - convert unix stat information to smb stat format 1634 * @p: destination buffer 1635 * @ksmbd_kstat: ksmbd kstat wrapper 1636 * 1637 * Returns: pointer to the converted &struct file_directory_info 1638 */ 1639 void *ksmbd_vfs_init_kstat(char **p, struct ksmbd_kstat *ksmbd_kstat) 1640 { 1641 struct file_directory_info *info = (struct file_directory_info *)(*p); 1642 struct kstat *kstat = ksmbd_kstat->kstat; 1643 u64 time; 1644 1645 info->FileIndex = 0; 1646 info->CreationTime = cpu_to_le64(ksmbd_kstat->create_time); 1647 time = ksmbd_UnixTimeToNT(kstat->atime); 1648 info->LastAccessTime = cpu_to_le64(time); 1649 time = ksmbd_UnixTimeToNT(kstat->mtime); 1650 info->LastWriteTime = cpu_to_le64(time); 1651 time = ksmbd_UnixTimeToNT(kstat->ctime); 1652 info->ChangeTime = cpu_to_le64(time); 1653 1654 if (ksmbd_kstat->file_attributes & FILE_ATTRIBUTE_DIRECTORY_LE) { 1655 info->EndOfFile = 0; 1656 info->AllocationSize = 0; 1657 } else { 1658 info->EndOfFile = cpu_to_le64(kstat->size); 1659 info->AllocationSize = cpu_to_le64(kstat->blocks << 9); 1660 } 1661 info->ExtFileAttributes = ksmbd_kstat->file_attributes; 1662 1663 return info; 1664 } 1665 1666 int ksmbd_vfs_fill_dentry_attrs(struct ksmbd_work *work, 1667 struct mnt_idmap *idmap, 1668 struct dentry *dentry, 1669 struct ksmbd_kstat *ksmbd_kstat) 1670 { 1671 struct ksmbd_share_config *share_conf = work->tcon->share_conf; 1672 u64 time; 1673 int rc; 1674 struct path path = { 1675 .mnt = share_conf->vfs_path.mnt, 1676 .dentry = dentry, 1677 }; 1678 1679 rc = vfs_getattr(&path, ksmbd_kstat->kstat, 1680 STATX_BASIC_STATS | STATX_BTIME, 1681 AT_STATX_SYNC_AS_STAT); 1682 if (rc) 1683 return rc; 1684 1685 time = ksmbd_UnixTimeToNT(ksmbd_kstat->kstat->ctime); 1686 ksmbd_kstat->create_time = time; 1687 1688 /* 1689 * set default value for the case that store dos attributes is not yes 1690 * or that acl is disable in server's filesystem and the config is yes. 1691 */ 1692 if (S_ISDIR(ksmbd_kstat->kstat->mode)) 1693 ksmbd_kstat->file_attributes = FILE_ATTRIBUTE_DIRECTORY_LE; 1694 else 1695 ksmbd_kstat->file_attributes = FILE_ATTRIBUTE_ARCHIVE_LE; 1696 1697 if (test_share_config_flag(work->tcon->share_conf, 1698 KSMBD_SHARE_FLAG_STORE_DOS_ATTRS)) { 1699 struct xattr_dos_attrib da; 1700 1701 rc = ksmbd_vfs_get_dos_attrib_xattr(idmap, dentry, &da); 1702 if (rc > 0) { 1703 ksmbd_kstat->file_attributes = cpu_to_le32(da.attr); 1704 ksmbd_kstat->create_time = da.create_time; 1705 } else { 1706 ksmbd_debug(VFS, "fail to load dos attribute.\n"); 1707 } 1708 } 1709 1710 return 0; 1711 } 1712 1713 ssize_t ksmbd_vfs_casexattr_len(struct mnt_idmap *idmap, 1714 struct dentry *dentry, char *attr_name, 1715 int attr_name_len) 1716 { 1717 char *name, *xattr_list = NULL; 1718 ssize_t value_len = -ENOENT, xattr_list_len; 1719 1720 xattr_list_len = ksmbd_vfs_listxattr(dentry, &xattr_list); 1721 if (xattr_list_len <= 0) 1722 goto out; 1723 1724 for (name = xattr_list; name - xattr_list < xattr_list_len; 1725 name += strlen(name) + 1) { 1726 ksmbd_debug(VFS, "%s, len %zd\n", name, strlen(name)); 1727 if (strncasecmp(attr_name, name, attr_name_len)) 1728 continue; 1729 1730 value_len = ksmbd_vfs_xattr_len(idmap, dentry, name); 1731 break; 1732 } 1733 1734 out: 1735 kvfree(xattr_list); 1736 return value_len; 1737 } 1738 1739 int ksmbd_vfs_xattr_stream_name(char *stream_name, char **xattr_stream_name, 1740 size_t *xattr_stream_name_size, int s_type) 1741 { 1742 char *type, *buf; 1743 1744 if (s_type == DIR_STREAM) 1745 type = ":$INDEX_ALLOCATION"; 1746 else 1747 type = ":$DATA"; 1748 1749 buf = kasprintf(KSMBD_DEFAULT_GFP, "%s%s%s", 1750 XATTR_NAME_STREAM, stream_name, type); 1751 if (!buf) 1752 return -ENOMEM; 1753 1754 *xattr_stream_name = buf; 1755 *xattr_stream_name_size = strlen(buf) + 1; 1756 1757 return 0; 1758 } 1759 1760 int ksmbd_vfs_copy_file_ranges(struct ksmbd_work *work, 1761 struct ksmbd_file *src_fp, 1762 struct ksmbd_file *dst_fp, 1763 struct srv_copychunk *chunks, 1764 unsigned int chunk_count, 1765 unsigned int *chunk_count_written, 1766 unsigned int *chunk_size_written, 1767 loff_t *total_size_written) 1768 { 1769 unsigned int i; 1770 loff_t src_off, dst_off, src_file_size; 1771 size_t len; 1772 int ret; 1773 1774 *chunk_count_written = 0; 1775 *chunk_size_written = 0; 1776 *total_size_written = 0; 1777 1778 if (!(src_fp->daccess & (FILE_READ_DATA_LE | FILE_EXECUTE_LE))) { 1779 pr_err("no right to read(%pD)\n", src_fp->filp); 1780 return -EACCES; 1781 } 1782 if (!(dst_fp->daccess & (FILE_WRITE_DATA_LE | FILE_APPEND_DATA_LE))) { 1783 pr_err("no right to write(%pD)\n", dst_fp->filp); 1784 return -EACCES; 1785 } 1786 1787 if (ksmbd_stream_fd(src_fp) || ksmbd_stream_fd(dst_fp)) 1788 return -EBADF; 1789 1790 smb_break_all_levII_oplock(work, dst_fp, 1); 1791 1792 if (!work->tcon->posix_extensions) { 1793 for (i = 0; i < chunk_count; i++) { 1794 src_off = le64_to_cpu(chunks[i].SourceOffset); 1795 dst_off = le64_to_cpu(chunks[i].TargetOffset); 1796 len = le32_to_cpu(chunks[i].Length); 1797 1798 if (check_lock_range(src_fp->filp, src_off, 1799 src_off + len - 1, READ)) 1800 return -EAGAIN; 1801 if (check_lock_range(dst_fp->filp, dst_off, 1802 dst_off + len - 1, WRITE)) 1803 return -EAGAIN; 1804 } 1805 } 1806 1807 src_file_size = i_size_read(file_inode(src_fp->filp)); 1808 1809 for (i = 0; i < chunk_count; i++) { 1810 src_off = le64_to_cpu(chunks[i].SourceOffset); 1811 dst_off = le64_to_cpu(chunks[i].TargetOffset); 1812 len = le32_to_cpu(chunks[i].Length); 1813 1814 if (src_off + len > src_file_size) 1815 return -E2BIG; 1816 1817 ret = vfs_copy_file_range(src_fp->filp, src_off, 1818 dst_fp->filp, dst_off, len, 0); 1819 if (ret == -EOPNOTSUPP || ret == -EXDEV) 1820 ret = vfs_copy_file_range(src_fp->filp, src_off, 1821 dst_fp->filp, dst_off, len, 1822 COPY_FILE_SPLICE); 1823 if (ret < 0) 1824 return ret; 1825 1826 *chunk_count_written += 1; 1827 *total_size_written += ret; 1828 } 1829 return 0; 1830 } 1831 1832 void ksmbd_vfs_posix_lock_wait(struct file_lock *flock) 1833 { 1834 wait_event(flock->c.flc_wait, !flock->c.flc_blocker); 1835 } 1836 1837 void ksmbd_vfs_posix_lock_unblock(struct file_lock *flock) 1838 { 1839 locks_delete_block(flock); 1840 } 1841 1842 int ksmbd_vfs_set_init_posix_acl(struct mnt_idmap *idmap, 1843 struct path *path) 1844 { 1845 struct posix_acl_state acl_state; 1846 struct posix_acl *acls; 1847 struct dentry *dentry = path->dentry; 1848 struct inode *inode = d_inode(dentry); 1849 int rc; 1850 1851 if (!IS_ENABLED(CONFIG_FS_POSIX_ACL)) 1852 return -EOPNOTSUPP; 1853 1854 ksmbd_debug(SMB, "Set posix acls\n"); 1855 rc = init_acl_state(&acl_state, 1); 1856 if (rc) 1857 return rc; 1858 1859 /* Set default owner group */ 1860 acl_state.owner.allow = (inode->i_mode & 0700) >> 6; 1861 acl_state.group.allow = (inode->i_mode & 0070) >> 3; 1862 acl_state.other.allow = inode->i_mode & 0007; 1863 acl_state.users->aces[acl_state.users->n].uid = inode->i_uid; 1864 acl_state.users->aces[acl_state.users->n++].perms.allow = 1865 acl_state.owner.allow; 1866 acl_state.groups->aces[acl_state.groups->n].gid = inode->i_gid; 1867 acl_state.groups->aces[acl_state.groups->n++].perms.allow = 1868 acl_state.group.allow; 1869 acl_state.mask.allow = 0x07; 1870 1871 acls = posix_acl_alloc(6, KSMBD_DEFAULT_GFP); 1872 if (!acls) { 1873 free_acl_state(&acl_state); 1874 return -ENOMEM; 1875 } 1876 posix_state_to_acl(&acl_state, acls->a_entries); 1877 1878 rc = set_posix_acl(idmap, dentry, ACL_TYPE_ACCESS, acls); 1879 if (rc < 0) 1880 ksmbd_debug(SMB, "Set posix acl(ACL_TYPE_ACCESS) failed, rc : %d\n", 1881 rc); 1882 else if (S_ISDIR(inode->i_mode)) { 1883 posix_state_to_acl(&acl_state, acls->a_entries); 1884 rc = set_posix_acl(idmap, dentry, ACL_TYPE_DEFAULT, acls); 1885 if (rc < 0) 1886 ksmbd_debug(SMB, "Set posix acl(ACL_TYPE_DEFAULT) failed, rc : %d\n", 1887 rc); 1888 } 1889 1890 free_acl_state(&acl_state); 1891 posix_acl_release(acls); 1892 return rc; 1893 } 1894 1895 int ksmbd_vfs_inherit_posix_acl(struct mnt_idmap *idmap, 1896 struct path *path, struct inode *parent_inode) 1897 { 1898 struct posix_acl *acls; 1899 struct posix_acl_entry *pace; 1900 struct dentry *dentry = path->dentry; 1901 struct inode *inode = d_inode(dentry); 1902 int rc, i; 1903 1904 if (!IS_ENABLED(CONFIG_FS_POSIX_ACL)) 1905 return -EOPNOTSUPP; 1906 1907 acls = get_inode_acl(parent_inode, ACL_TYPE_DEFAULT); 1908 if (IS_ERR_OR_NULL(acls)) 1909 return -ENOENT; 1910 pace = acls->a_entries; 1911 1912 for (i = 0; i < acls->a_count; i++, pace++) { 1913 if (pace->e_tag == ACL_MASK) { 1914 pace->e_perm = 0x07; 1915 break; 1916 } 1917 } 1918 1919 rc = set_posix_acl(idmap, dentry, ACL_TYPE_ACCESS, acls); 1920 if (rc < 0) 1921 ksmbd_debug(SMB, "Set posix acl(ACL_TYPE_ACCESS) failed, rc : %d\n", 1922 rc); 1923 if (S_ISDIR(inode->i_mode)) { 1924 rc = set_posix_acl(idmap, dentry, ACL_TYPE_DEFAULT, 1925 acls); 1926 if (rc < 0) 1927 ksmbd_debug(SMB, "Set posix acl(ACL_TYPE_DEFAULT) failed, rc : %d\n", 1928 rc); 1929 } 1930 1931 posix_acl_release(acls); 1932 return rc; 1933 } 1934