1 // SPDX-License-Identifier: GPL-2.0-or-later 2 /* 3 * Copyright (C) 2016 Namjae Jeon <linkinjeon@kernel.org> 4 * Copyright (C) 2018 Samsung Electronics Co., Ltd. 5 */ 6 7 #include <crypto/sha2.h> 8 #include <linux/kernel.h> 9 #include <linux/fs.h> 10 #include <linux/filelock.h> 11 #include <linux/uaccess.h> 12 #include <linux/backing-dev.h> 13 #include <linux/writeback.h> 14 #include <linux/xattr.h> 15 #include <linux/falloc.h> 16 #include <linux/fsnotify.h> 17 #include <linux/dcache.h> 18 #include <linux/slab.h> 19 #include <linux/vmalloc.h> 20 #include <linux/sched/xacct.h> 21 #include <linux/crc32c.h> 22 #include <linux/namei.h> 23 24 #include "glob.h" 25 #include "oplock.h" 26 #include "connection.h" 27 #include "vfs.h" 28 #include "vfs_cache.h" 29 #include "smbacl.h" 30 #include "ndr.h" 31 #include "auth.h" 32 #include "misc.h" 33 34 #include "smb_common.h" 35 #include "mgmt/share_config.h" 36 #include "mgmt/tree_connect.h" 37 #include "mgmt/user_session.h" 38 #include "mgmt/user_config.h" 39 40 static void ksmbd_vfs_inherit_owner(struct ksmbd_work *work, 41 struct inode *parent_inode, 42 struct inode *inode) 43 { 44 if (!test_share_config_flag(work->tcon->share_conf, 45 KSMBD_SHARE_FLAG_INHERIT_OWNER)) 46 return; 47 48 i_uid_write(inode, i_uid_read(parent_inode)); 49 } 50 51 /** 52 * ksmbd_vfs_lock_parent() - lock parent dentry if it is stable 53 * @parent: parent dentry 54 * @child: child dentry 55 * 56 * Returns: %0 on success, %-ENOENT if the parent dentry is not stable 57 */ 58 int ksmbd_vfs_lock_parent(struct dentry *parent, struct dentry *child) 59 { 60 inode_lock_nested(d_inode(parent), I_MUTEX_PARENT); 61 if (child->d_parent != parent) { 62 inode_unlock(d_inode(parent)); 63 return -ENOENT; 64 } 65 66 return 0; 67 } 68 69 static int ksmbd_vfs_path_lookup_locked(struct ksmbd_share_config *share_conf, 70 char *pathname, unsigned int flags, 71 struct path *parent_path, 72 struct path *path) 73 { 74 struct qstr last; 75 struct filename *filename; 76 struct path *root_share_path = &share_conf->vfs_path; 77 int err, type; 78 struct dentry *d; 79 80 if (pathname[0] == '\0') { 81 pathname = share_conf->path; 82 root_share_path = NULL; 83 } else { 84 flags |= LOOKUP_BENEATH; 85 } 86 87 filename = getname_kernel(pathname); 88 if (IS_ERR(filename)) 89 return PTR_ERR(filename); 90 91 err = vfs_path_parent_lookup(filename, flags, 92 parent_path, &last, &type, 93 root_share_path); 94 if (err) { 95 putname(filename); 96 return err; 97 } 98 99 if (unlikely(type != LAST_NORM)) { 100 path_put(parent_path); 101 putname(filename); 102 return -ENOENT; 103 } 104 105 err = mnt_want_write(parent_path->mnt); 106 if (err) { 107 path_put(parent_path); 108 putname(filename); 109 return -ENOENT; 110 } 111 112 inode_lock_nested(parent_path->dentry->d_inode, I_MUTEX_PARENT); 113 d = lookup_one_qstr_excl(&last, parent_path->dentry, 0); 114 if (IS_ERR(d)) 115 goto err_out; 116 117 path->dentry = d; 118 path->mnt = mntget(parent_path->mnt); 119 120 if (test_share_config_flag(share_conf, KSMBD_SHARE_FLAG_CROSSMNT)) { 121 err = follow_down(path, 0); 122 if (err < 0) { 123 path_put(path); 124 goto err_out; 125 } 126 } 127 128 putname(filename); 129 return 0; 130 131 err_out: 132 inode_unlock(d_inode(parent_path->dentry)); 133 mnt_drop_write(parent_path->mnt); 134 path_put(parent_path); 135 putname(filename); 136 return -ENOENT; 137 } 138 139 void ksmbd_vfs_query_maximal_access(struct mnt_idmap *idmap, 140 struct dentry *dentry, __le32 *daccess) 141 { 142 *daccess = cpu_to_le32(FILE_READ_ATTRIBUTES | READ_CONTROL); 143 144 if (!inode_permission(idmap, d_inode(dentry), MAY_OPEN | MAY_WRITE)) 145 *daccess |= cpu_to_le32(WRITE_DAC | WRITE_OWNER | SYNCHRONIZE | 146 FILE_WRITE_DATA | FILE_APPEND_DATA | 147 FILE_WRITE_EA | FILE_WRITE_ATTRIBUTES | 148 FILE_DELETE_CHILD); 149 150 if (!inode_permission(idmap, d_inode(dentry), MAY_OPEN | MAY_READ)) 151 *daccess |= FILE_READ_DATA_LE | FILE_READ_EA_LE; 152 153 if (!inode_permission(idmap, d_inode(dentry), MAY_OPEN | MAY_EXEC)) 154 *daccess |= FILE_EXECUTE_LE; 155 156 if (!inode_permission(idmap, d_inode(dentry->d_parent), MAY_EXEC | MAY_WRITE)) 157 *daccess |= FILE_DELETE_LE; 158 } 159 160 /** 161 * ksmbd_vfs_create() - vfs helper for smb create file 162 * @work: work 163 * @name: file name that is relative to share 164 * @mode: file create mode 165 * 166 * Return: 0 on success, otherwise error 167 */ 168 int ksmbd_vfs_create(struct ksmbd_work *work, const char *name, umode_t mode) 169 { 170 struct path path; 171 struct dentry *dentry; 172 int err; 173 174 dentry = ksmbd_vfs_kern_path_create(work, name, 175 LOOKUP_NO_SYMLINKS, &path); 176 if (IS_ERR(dentry)) { 177 err = PTR_ERR(dentry); 178 if (err != -ENOENT) 179 pr_err("path create failed for %s, err %d\n", 180 name, err); 181 return err; 182 } 183 184 mode |= S_IFREG; 185 err = vfs_create(mnt_idmap(path.mnt), d_inode(path.dentry), 186 dentry, mode, true); 187 if (!err) { 188 ksmbd_vfs_inherit_owner(work, d_inode(path.dentry), 189 d_inode(dentry)); 190 } else { 191 pr_err("File(%s): creation failed (err:%d)\n", name, err); 192 } 193 194 done_path_create(&path, dentry); 195 return err; 196 } 197 198 /** 199 * ksmbd_vfs_mkdir() - vfs helper for smb create directory 200 * @work: work 201 * @name: directory name that is relative to share 202 * @mode: directory create mode 203 * 204 * Return: 0 on success, otherwise error 205 */ 206 int ksmbd_vfs_mkdir(struct ksmbd_work *work, const char *name, umode_t mode) 207 { 208 struct mnt_idmap *idmap; 209 struct path path; 210 struct dentry *dentry, *d; 211 int err = 0; 212 213 dentry = ksmbd_vfs_kern_path_create(work, name, 214 LOOKUP_NO_SYMLINKS | LOOKUP_DIRECTORY, 215 &path); 216 if (IS_ERR(dentry)) { 217 err = PTR_ERR(dentry); 218 if (err != -EEXIST) 219 ksmbd_debug(VFS, "path create failed for %s, err %d\n", 220 name, err); 221 return err; 222 } 223 224 idmap = mnt_idmap(path.mnt); 225 mode |= S_IFDIR; 226 d = dentry; 227 dentry = vfs_mkdir(idmap, d_inode(path.dentry), dentry, mode); 228 if (IS_ERR(dentry)) 229 err = PTR_ERR(dentry); 230 else if (d_is_negative(dentry)) 231 err = -ENOENT; 232 if (!err && dentry != d) 233 ksmbd_vfs_inherit_owner(work, d_inode(path.dentry), d_inode(dentry)); 234 235 done_path_create(&path, dentry); 236 if (err) 237 pr_err("mkdir(%s): creation failed (err:%d)\n", name, err); 238 return err; 239 } 240 241 static ssize_t ksmbd_vfs_getcasexattr(struct mnt_idmap *idmap, 242 struct dentry *dentry, char *attr_name, 243 int attr_name_len, char **attr_value) 244 { 245 char *name, *xattr_list = NULL; 246 ssize_t value_len = -ENOENT, xattr_list_len; 247 248 xattr_list_len = ksmbd_vfs_listxattr(dentry, &xattr_list); 249 if (xattr_list_len <= 0) 250 goto out; 251 252 for (name = xattr_list; name - xattr_list < xattr_list_len; 253 name += strlen(name) + 1) { 254 ksmbd_debug(VFS, "%s, len %zd\n", name, strlen(name)); 255 if (strncasecmp(attr_name, name, attr_name_len)) 256 continue; 257 258 value_len = ksmbd_vfs_getxattr(idmap, 259 dentry, 260 name, 261 attr_value); 262 if (value_len < 0) 263 pr_err("failed to get xattr in file\n"); 264 break; 265 } 266 267 out: 268 kvfree(xattr_list); 269 return value_len; 270 } 271 272 static int ksmbd_vfs_stream_read(struct ksmbd_file *fp, char *buf, loff_t *pos, 273 size_t count) 274 { 275 ssize_t v_len; 276 char *stream_buf = NULL; 277 278 ksmbd_debug(VFS, "read stream data pos : %llu, count : %zd\n", 279 *pos, count); 280 281 v_len = ksmbd_vfs_getcasexattr(file_mnt_idmap(fp->filp), 282 fp->filp->f_path.dentry, 283 fp->stream.name, 284 fp->stream.size, 285 &stream_buf); 286 if ((int)v_len <= 0) 287 return (int)v_len; 288 289 if (v_len <= *pos) { 290 count = -EINVAL; 291 goto free_buf; 292 } 293 294 if (v_len - *pos < count) 295 count = v_len - *pos; 296 fp->stream.pos = v_len; 297 298 memcpy(buf, &stream_buf[*pos], count); 299 300 free_buf: 301 kvfree(stream_buf); 302 return count; 303 } 304 305 /** 306 * check_lock_range() - vfs helper for smb byte range file locking 307 * @filp: the file to apply the lock to 308 * @start: lock start byte offset 309 * @end: lock end byte offset 310 * @type: byte range type read/write 311 * 312 * Return: 0 on success, otherwise error 313 */ 314 static int check_lock_range(struct file *filp, loff_t start, loff_t end, 315 unsigned char type) 316 { 317 struct file_lock *flock; 318 struct file_lock_context *ctx = locks_inode_context(file_inode(filp)); 319 int error = 0; 320 321 if (!ctx || list_empty_careful(&ctx->flc_posix)) 322 return 0; 323 324 spin_lock(&ctx->flc_lock); 325 for_each_file_lock(flock, &ctx->flc_posix) { 326 /* check conflict locks */ 327 if (flock->fl_end >= start && end >= flock->fl_start) { 328 if (lock_is_read(flock)) { 329 if (type == WRITE) { 330 pr_err("not allow write by shared lock\n"); 331 error = 1; 332 goto out; 333 } 334 } else if (lock_is_write(flock)) { 335 /* check owner in lock */ 336 if (flock->c.flc_file != filp) { 337 error = 1; 338 pr_err("not allow rw access by exclusive lock from other opens\n"); 339 goto out; 340 } 341 } 342 } 343 } 344 out: 345 spin_unlock(&ctx->flc_lock); 346 return error; 347 } 348 349 /** 350 * ksmbd_vfs_read() - vfs helper for smb file read 351 * @work: smb work 352 * @fp: ksmbd file pointer 353 * @count: read byte count 354 * @pos: file pos 355 * @rbuf: read data buffer 356 * 357 * Return: number of read bytes on success, otherwise error 358 */ 359 int ksmbd_vfs_read(struct ksmbd_work *work, struct ksmbd_file *fp, size_t count, 360 loff_t *pos, char *rbuf) 361 { 362 struct file *filp = fp->filp; 363 ssize_t nbytes = 0; 364 struct inode *inode = file_inode(filp); 365 366 if (S_ISDIR(inode->i_mode)) 367 return -EISDIR; 368 369 if (unlikely(count == 0)) 370 return 0; 371 372 if (work->conn->connection_type) { 373 if (!(fp->daccess & (FILE_READ_DATA_LE | FILE_EXECUTE_LE))) { 374 pr_err("no right to read(%pD)\n", fp->filp); 375 return -EACCES; 376 } 377 } 378 379 if (ksmbd_stream_fd(fp)) 380 return ksmbd_vfs_stream_read(fp, rbuf, pos, count); 381 382 if (!work->tcon->posix_extensions) { 383 int ret; 384 385 ret = check_lock_range(filp, *pos, *pos + count - 1, READ); 386 if (ret) { 387 pr_err("unable to read due to lock\n"); 388 return -EAGAIN; 389 } 390 } 391 392 nbytes = kernel_read(filp, rbuf, count, pos); 393 if (nbytes < 0) { 394 pr_err("smb read failed, err = %zd\n", nbytes); 395 return nbytes; 396 } 397 398 filp->f_pos = *pos; 399 return nbytes; 400 } 401 402 static int ksmbd_vfs_stream_write(struct ksmbd_file *fp, char *buf, loff_t *pos, 403 size_t count) 404 { 405 char *stream_buf = NULL, *wbuf; 406 struct mnt_idmap *idmap = file_mnt_idmap(fp->filp); 407 size_t size; 408 ssize_t v_len; 409 int err = 0; 410 411 ksmbd_debug(VFS, "write stream data pos : %llu, count : %zd\n", 412 *pos, count); 413 414 if (*pos >= XATTR_SIZE_MAX) { 415 pr_err("stream write position %lld is out of bounds\n", *pos); 416 return -EINVAL; 417 } 418 419 size = *pos + count; 420 if (size > XATTR_SIZE_MAX) { 421 size = XATTR_SIZE_MAX; 422 count = XATTR_SIZE_MAX - *pos; 423 } 424 425 v_len = ksmbd_vfs_getcasexattr(idmap, 426 fp->filp->f_path.dentry, 427 fp->stream.name, 428 fp->stream.size, 429 &stream_buf); 430 if (v_len < 0) { 431 pr_err("not found stream in xattr : %zd\n", v_len); 432 err = v_len; 433 goto out; 434 } 435 436 if (v_len < size) { 437 wbuf = kvzalloc(size, KSMBD_DEFAULT_GFP); 438 if (!wbuf) { 439 err = -ENOMEM; 440 goto out; 441 } 442 443 if (v_len > 0) 444 memcpy(wbuf, stream_buf, v_len); 445 kvfree(stream_buf); 446 stream_buf = wbuf; 447 } 448 449 memcpy(&stream_buf[*pos], buf, count); 450 451 err = ksmbd_vfs_setxattr(idmap, 452 &fp->filp->f_path, 453 fp->stream.name, 454 (void *)stream_buf, 455 size, 456 0, 457 true); 458 if (err < 0) 459 goto out; 460 else 461 fp->stream.pos = size; 462 err = 0; 463 out: 464 kvfree(stream_buf); 465 return err; 466 } 467 468 /** 469 * ksmbd_vfs_write() - vfs helper for smb file write 470 * @work: work 471 * @fp: ksmbd file pointer 472 * @buf: buf containing data for writing 473 * @count: read byte count 474 * @pos: file pos 475 * @sync: fsync after write 476 * @written: number of bytes written 477 * 478 * Return: 0 on success, otherwise error 479 */ 480 int ksmbd_vfs_write(struct ksmbd_work *work, struct ksmbd_file *fp, 481 char *buf, size_t count, loff_t *pos, bool sync, 482 ssize_t *written) 483 { 484 struct file *filp; 485 loff_t offset = *pos; 486 int err = 0; 487 488 if (work->conn->connection_type) { 489 if (!(fp->daccess & (FILE_WRITE_DATA_LE | FILE_APPEND_DATA_LE)) || 490 S_ISDIR(file_inode(fp->filp)->i_mode)) { 491 pr_err("no right to write(%pD)\n", fp->filp); 492 err = -EACCES; 493 goto out; 494 } 495 } 496 497 filp = fp->filp; 498 499 if (ksmbd_stream_fd(fp)) { 500 err = ksmbd_vfs_stream_write(fp, buf, pos, count); 501 if (!err) 502 *written = count; 503 goto out; 504 } 505 506 if (!work->tcon->posix_extensions) { 507 err = check_lock_range(filp, *pos, *pos + count - 1, WRITE); 508 if (err) { 509 pr_err("unable to write due to lock\n"); 510 err = -EAGAIN; 511 goto out; 512 } 513 } 514 515 /* Reserve lease break for parent dir at closing time */ 516 fp->reserve_lease_break = true; 517 518 /* Do we need to break any of a levelII oplock? */ 519 smb_break_all_levII_oplock(work, fp, 1); 520 521 err = kernel_write(filp, buf, count, pos); 522 if (err < 0) { 523 ksmbd_debug(VFS, "smb write failed, err = %d\n", err); 524 goto out; 525 } 526 527 filp->f_pos = *pos; 528 *written = err; 529 err = 0; 530 if (sync) { 531 err = vfs_fsync_range(filp, offset, offset + *written, 0); 532 if (err < 0) 533 pr_err("fsync failed for filename = %pD, err = %d\n", 534 fp->filp, err); 535 } 536 537 out: 538 return err; 539 } 540 541 /** 542 * ksmbd_vfs_getattr() - vfs helper for smb getattr 543 * @path: path of dentry 544 * @stat: pointer to returned kernel stat structure 545 * Return: 0 on success, otherwise error 546 */ 547 int ksmbd_vfs_getattr(const struct path *path, struct kstat *stat) 548 { 549 int err; 550 551 err = vfs_getattr(path, stat, STATX_BTIME, AT_STATX_SYNC_AS_STAT); 552 if (err) 553 pr_err("getattr failed, err %d\n", err); 554 return err; 555 } 556 557 /** 558 * ksmbd_vfs_fsync() - vfs helper for smb fsync 559 * @work: work 560 * @fid: file id of open file 561 * @p_id: persistent file id 562 * 563 * Return: 0 on success, otherwise error 564 */ 565 int ksmbd_vfs_fsync(struct ksmbd_work *work, u64 fid, u64 p_id) 566 { 567 struct ksmbd_file *fp; 568 int err; 569 570 fp = ksmbd_lookup_fd_slow(work, fid, p_id); 571 if (!fp) { 572 pr_err("failed to get filp for fid %llu\n", fid); 573 return -ENOENT; 574 } 575 err = vfs_fsync(fp->filp, 0); 576 if (err < 0) 577 pr_err("smb fsync failed, err = %d\n", err); 578 ksmbd_fd_put(work, fp); 579 return err; 580 } 581 582 /** 583 * ksmbd_vfs_remove_file() - vfs helper for smb rmdir or unlink 584 * @work: work 585 * @path: path of dentry 586 * 587 * Return: 0 on success, otherwise error 588 */ 589 int ksmbd_vfs_remove_file(struct ksmbd_work *work, const struct path *path) 590 { 591 struct mnt_idmap *idmap; 592 struct dentry *parent = path->dentry->d_parent; 593 int err; 594 595 if (ksmbd_override_fsids(work)) 596 return -ENOMEM; 597 598 if (!d_inode(path->dentry)->i_nlink) { 599 err = -ENOENT; 600 goto out_err; 601 } 602 603 idmap = mnt_idmap(path->mnt); 604 if (S_ISDIR(d_inode(path->dentry)->i_mode)) { 605 err = vfs_rmdir(idmap, d_inode(parent), path->dentry); 606 if (err && err != -ENOTEMPTY) 607 ksmbd_debug(VFS, "rmdir failed, err %d\n", err); 608 } else { 609 err = vfs_unlink(idmap, d_inode(parent), path->dentry, NULL); 610 if (err) 611 ksmbd_debug(VFS, "unlink failed, err %d\n", err); 612 } 613 614 out_err: 615 ksmbd_revert_fsids(work); 616 return err; 617 } 618 619 /** 620 * ksmbd_vfs_link() - vfs helper for creating smb hardlink 621 * @work: work 622 * @oldname: source file name 623 * @newname: hardlink name that is relative to share 624 * 625 * Return: 0 on success, otherwise error 626 */ 627 int ksmbd_vfs_link(struct ksmbd_work *work, const char *oldname, 628 const char *newname) 629 { 630 struct path oldpath, newpath; 631 struct dentry *dentry; 632 int err; 633 634 if (ksmbd_override_fsids(work)) 635 return -ENOMEM; 636 637 err = kern_path(oldname, LOOKUP_NO_SYMLINKS, &oldpath); 638 if (err) { 639 pr_err("cannot get linux path for %s, err = %d\n", 640 oldname, err); 641 goto out1; 642 } 643 644 dentry = ksmbd_vfs_kern_path_create(work, newname, 645 LOOKUP_NO_SYMLINKS | LOOKUP_REVAL, 646 &newpath); 647 if (IS_ERR(dentry)) { 648 err = PTR_ERR(dentry); 649 pr_err("path create err for %s, err %d\n", newname, err); 650 goto out2; 651 } 652 653 err = -EXDEV; 654 if (oldpath.mnt != newpath.mnt) { 655 pr_err("vfs_link failed err %d\n", err); 656 goto out3; 657 } 658 659 err = vfs_link(oldpath.dentry, mnt_idmap(newpath.mnt), 660 d_inode(newpath.dentry), 661 dentry, NULL); 662 if (err) 663 ksmbd_debug(VFS, "vfs_link failed err %d\n", err); 664 665 out3: 666 done_path_create(&newpath, dentry); 667 out2: 668 path_put(&oldpath); 669 out1: 670 ksmbd_revert_fsids(work); 671 return err; 672 } 673 674 int ksmbd_vfs_rename(struct ksmbd_work *work, const struct path *old_path, 675 char *newname, int flags) 676 { 677 struct dentry *old_parent, *new_dentry, *trap; 678 struct dentry *old_child = old_path->dentry; 679 struct path new_path; 680 struct qstr new_last; 681 struct renamedata rd; 682 struct filename *to; 683 struct ksmbd_share_config *share_conf = work->tcon->share_conf; 684 struct ksmbd_file *parent_fp; 685 int new_type; 686 int err, lookup_flags = LOOKUP_NO_SYMLINKS; 687 int target_lookup_flags = LOOKUP_RENAME_TARGET | LOOKUP_CREATE; 688 689 if (ksmbd_override_fsids(work)) 690 return -ENOMEM; 691 692 to = getname_kernel(newname); 693 if (IS_ERR(to)) { 694 err = PTR_ERR(to); 695 goto revert_fsids; 696 } 697 698 /* 699 * explicitly handle file overwrite case, for compatibility with 700 * filesystems that may not support rename flags (e.g: fuse) 701 */ 702 if (flags & RENAME_NOREPLACE) 703 target_lookup_flags |= LOOKUP_EXCL; 704 flags &= ~(RENAME_NOREPLACE); 705 706 retry: 707 err = vfs_path_parent_lookup(to, lookup_flags | LOOKUP_BENEATH, 708 &new_path, &new_last, &new_type, 709 &share_conf->vfs_path); 710 if (err) 711 goto out1; 712 713 if (old_path->mnt != new_path.mnt) { 714 err = -EXDEV; 715 goto out2; 716 } 717 718 err = mnt_want_write(old_path->mnt); 719 if (err) 720 goto out2; 721 722 trap = lock_rename_child(old_child, new_path.dentry); 723 if (IS_ERR(trap)) { 724 err = PTR_ERR(trap); 725 goto out_drop_write; 726 } 727 728 old_parent = dget(old_child->d_parent); 729 if (d_unhashed(old_child)) { 730 err = -EINVAL; 731 goto out3; 732 } 733 734 parent_fp = ksmbd_lookup_fd_inode(old_child->d_parent); 735 if (parent_fp) { 736 if (parent_fp->daccess & FILE_DELETE_LE) { 737 pr_err("parent dir is opened with delete access\n"); 738 err = -ESHARE; 739 ksmbd_fd_put(work, parent_fp); 740 goto out3; 741 } 742 ksmbd_fd_put(work, parent_fp); 743 } 744 745 new_dentry = lookup_one_qstr_excl(&new_last, new_path.dentry, 746 lookup_flags | target_lookup_flags); 747 if (IS_ERR(new_dentry)) { 748 err = PTR_ERR(new_dentry); 749 goto out3; 750 } 751 752 if (d_is_symlink(new_dentry)) { 753 err = -EACCES; 754 goto out4; 755 } 756 757 if (old_child == trap) { 758 err = -EINVAL; 759 goto out4; 760 } 761 762 if (new_dentry == trap) { 763 err = -ENOTEMPTY; 764 goto out4; 765 } 766 767 rd.old_mnt_idmap = mnt_idmap(old_path->mnt), 768 rd.old_dir = d_inode(old_parent), 769 rd.old_dentry = old_child, 770 rd.new_mnt_idmap = mnt_idmap(new_path.mnt), 771 rd.new_dir = new_path.dentry->d_inode, 772 rd.new_dentry = new_dentry, 773 rd.flags = flags, 774 rd.delegated_inode = NULL, 775 err = vfs_rename(&rd); 776 if (err) 777 ksmbd_debug(VFS, "vfs_rename failed err %d\n", err); 778 779 out4: 780 dput(new_dentry); 781 out3: 782 dput(old_parent); 783 unlock_rename(old_parent, new_path.dentry); 784 out_drop_write: 785 mnt_drop_write(old_path->mnt); 786 out2: 787 path_put(&new_path); 788 789 if (retry_estale(err, lookup_flags)) { 790 lookup_flags |= LOOKUP_REVAL; 791 goto retry; 792 } 793 out1: 794 putname(to); 795 revert_fsids: 796 ksmbd_revert_fsids(work); 797 return err; 798 } 799 800 /** 801 * ksmbd_vfs_truncate() - vfs helper for smb file truncate 802 * @work: work 803 * @fp: ksmbd file pointer 804 * @size: truncate to given size 805 * 806 * Return: 0 on success, otherwise error 807 */ 808 int ksmbd_vfs_truncate(struct ksmbd_work *work, 809 struct ksmbd_file *fp, loff_t size) 810 { 811 int err = 0; 812 struct file *filp; 813 814 filp = fp->filp; 815 816 /* Do we need to break any of a levelII oplock? */ 817 smb_break_all_levII_oplock(work, fp, 1); 818 819 if (!work->tcon->posix_extensions) { 820 struct inode *inode = file_inode(filp); 821 822 if (size < inode->i_size) { 823 err = check_lock_range(filp, size, 824 inode->i_size - 1, WRITE); 825 } else { 826 err = check_lock_range(filp, inode->i_size, 827 size - 1, WRITE); 828 } 829 830 if (err) { 831 pr_err("failed due to lock\n"); 832 return -EAGAIN; 833 } 834 } 835 836 err = vfs_truncate(&filp->f_path, size); 837 if (err) 838 pr_err("truncate failed, err %d\n", err); 839 return err; 840 } 841 842 /** 843 * ksmbd_vfs_listxattr() - vfs helper for smb list extended attributes 844 * @dentry: dentry of file for listing xattrs 845 * @list: destination buffer 846 * 847 * Return: xattr list length on success, otherwise error 848 */ 849 ssize_t ksmbd_vfs_listxattr(struct dentry *dentry, char **list) 850 { 851 ssize_t size; 852 char *vlist = NULL; 853 854 size = vfs_listxattr(dentry, NULL, 0); 855 if (size <= 0) 856 return size; 857 858 vlist = kvzalloc(size, KSMBD_DEFAULT_GFP); 859 if (!vlist) 860 return -ENOMEM; 861 862 *list = vlist; 863 size = vfs_listxattr(dentry, vlist, size); 864 if (size < 0) { 865 ksmbd_debug(VFS, "listxattr failed\n"); 866 kvfree(vlist); 867 *list = NULL; 868 } 869 870 return size; 871 } 872 873 static ssize_t ksmbd_vfs_xattr_len(struct mnt_idmap *idmap, 874 struct dentry *dentry, char *xattr_name) 875 { 876 return vfs_getxattr(idmap, dentry, xattr_name, NULL, 0); 877 } 878 879 /** 880 * ksmbd_vfs_getxattr() - vfs helper for smb get extended attributes value 881 * @idmap: idmap 882 * @dentry: dentry of file for getting xattrs 883 * @xattr_name: name of xattr name to query 884 * @xattr_buf: destination buffer xattr value 885 * 886 * Return: read xattr value length on success, otherwise error 887 */ 888 ssize_t ksmbd_vfs_getxattr(struct mnt_idmap *idmap, 889 struct dentry *dentry, 890 char *xattr_name, char **xattr_buf) 891 { 892 ssize_t xattr_len; 893 char *buf; 894 895 *xattr_buf = NULL; 896 xattr_len = ksmbd_vfs_xattr_len(idmap, dentry, xattr_name); 897 if (xattr_len < 0) 898 return xattr_len; 899 900 buf = kmalloc(xattr_len + 1, KSMBD_DEFAULT_GFP); 901 if (!buf) 902 return -ENOMEM; 903 904 xattr_len = vfs_getxattr(idmap, dentry, xattr_name, 905 (void *)buf, xattr_len); 906 if (xattr_len > 0) 907 *xattr_buf = buf; 908 else 909 kfree(buf); 910 return xattr_len; 911 } 912 913 /** 914 * ksmbd_vfs_setxattr() - vfs helper for smb set extended attributes value 915 * @idmap: idmap of the relevant mount 916 * @path: path of dentry to set XATTR at 917 * @attr_name: xattr name for setxattr 918 * @attr_value: xattr value to set 919 * @attr_size: size of xattr value 920 * @flags: destination buffer length 921 * @get_write: get write access to a mount 922 * 923 * Return: 0 on success, otherwise error 924 */ 925 int ksmbd_vfs_setxattr(struct mnt_idmap *idmap, 926 const struct path *path, const char *attr_name, 927 void *attr_value, size_t attr_size, int flags, 928 bool get_write) 929 { 930 int err; 931 932 if (get_write == true) { 933 err = mnt_want_write(path->mnt); 934 if (err) 935 return err; 936 } 937 938 err = vfs_setxattr(idmap, 939 path->dentry, 940 attr_name, 941 attr_value, 942 attr_size, 943 flags); 944 if (err) 945 ksmbd_debug(VFS, "setxattr failed, err %d\n", err); 946 if (get_write == true) 947 mnt_drop_write(path->mnt); 948 return err; 949 } 950 951 /** 952 * ksmbd_vfs_set_fadvise() - convert smb IO caching options to linux options 953 * @filp: file pointer for IO 954 * @option: smb IO options 955 */ 956 void ksmbd_vfs_set_fadvise(struct file *filp, __le32 option) 957 { 958 struct address_space *mapping; 959 960 mapping = filp->f_mapping; 961 962 if (!option || !mapping) 963 return; 964 965 if (option & FILE_WRITE_THROUGH_LE) { 966 filp->f_flags |= O_SYNC; 967 } else if (option & FILE_SEQUENTIAL_ONLY_LE) { 968 filp->f_ra.ra_pages = inode_to_bdi(mapping->host)->ra_pages * 2; 969 spin_lock(&filp->f_lock); 970 filp->f_mode &= ~FMODE_RANDOM; 971 spin_unlock(&filp->f_lock); 972 } else if (option & FILE_RANDOM_ACCESS_LE) { 973 spin_lock(&filp->f_lock); 974 filp->f_mode |= FMODE_RANDOM; 975 spin_unlock(&filp->f_lock); 976 } 977 } 978 979 int ksmbd_vfs_zero_data(struct ksmbd_work *work, struct ksmbd_file *fp, 980 loff_t off, loff_t len) 981 { 982 smb_break_all_levII_oplock(work, fp, 1); 983 if (fp->f_ci->m_fattr & FILE_ATTRIBUTE_SPARSE_FILE_LE) 984 return vfs_fallocate(fp->filp, 985 FALLOC_FL_PUNCH_HOLE | FALLOC_FL_KEEP_SIZE, 986 off, len); 987 988 return vfs_fallocate(fp->filp, 989 FALLOC_FL_ZERO_RANGE | FALLOC_FL_KEEP_SIZE, 990 off, len); 991 } 992 993 int ksmbd_vfs_fqar_lseek(struct ksmbd_file *fp, loff_t start, loff_t length, 994 struct file_allocated_range_buffer *ranges, 995 unsigned int in_count, unsigned int *out_count) 996 { 997 struct file *f = fp->filp; 998 struct inode *inode = file_inode(fp->filp); 999 loff_t maxbytes = (u64)inode->i_sb->s_maxbytes, end; 1000 loff_t extent_start, extent_end; 1001 int ret = 0; 1002 1003 if (start > maxbytes) 1004 return -EFBIG; 1005 1006 if (!in_count) 1007 return 0; 1008 1009 /* 1010 * Shrink request scope to what the fs can actually handle. 1011 */ 1012 if (length > maxbytes || (maxbytes - length) < start) 1013 length = maxbytes - start; 1014 1015 if (start + length > inode->i_size) 1016 length = inode->i_size - start; 1017 1018 *out_count = 0; 1019 end = start + length; 1020 while (start < end && *out_count < in_count) { 1021 extent_start = vfs_llseek(f, start, SEEK_DATA); 1022 if (extent_start < 0) { 1023 if (extent_start != -ENXIO) 1024 ret = (int)extent_start; 1025 break; 1026 } 1027 1028 if (extent_start >= end) 1029 break; 1030 1031 extent_end = vfs_llseek(f, extent_start, SEEK_HOLE); 1032 if (extent_end < 0) { 1033 if (extent_end != -ENXIO) 1034 ret = (int)extent_end; 1035 break; 1036 } else if (extent_start >= extent_end) { 1037 break; 1038 } 1039 1040 ranges[*out_count].file_offset = cpu_to_le64(extent_start); 1041 ranges[(*out_count)++].length = 1042 cpu_to_le64(min(extent_end, end) - extent_start); 1043 1044 start = extent_end; 1045 } 1046 1047 return ret; 1048 } 1049 1050 int ksmbd_vfs_remove_xattr(struct mnt_idmap *idmap, 1051 const struct path *path, char *attr_name, 1052 bool get_write) 1053 { 1054 int err; 1055 1056 if (get_write == true) { 1057 err = mnt_want_write(path->mnt); 1058 if (err) 1059 return err; 1060 } 1061 1062 err = vfs_removexattr(idmap, path->dentry, attr_name); 1063 1064 if (get_write == true) 1065 mnt_drop_write(path->mnt); 1066 1067 return err; 1068 } 1069 1070 int ksmbd_vfs_unlink(struct file *filp) 1071 { 1072 int err = 0; 1073 struct dentry *dir, *dentry = filp->f_path.dentry; 1074 struct mnt_idmap *idmap = file_mnt_idmap(filp); 1075 1076 err = mnt_want_write(filp->f_path.mnt); 1077 if (err) 1078 return err; 1079 1080 dir = dget_parent(dentry); 1081 err = ksmbd_vfs_lock_parent(dir, dentry); 1082 if (err) 1083 goto out; 1084 dget(dentry); 1085 1086 if (S_ISDIR(d_inode(dentry)->i_mode)) 1087 err = vfs_rmdir(idmap, d_inode(dir), dentry); 1088 else 1089 err = vfs_unlink(idmap, d_inode(dir), dentry, NULL); 1090 1091 dput(dentry); 1092 inode_unlock(d_inode(dir)); 1093 if (err) 1094 ksmbd_debug(VFS, "failed to delete, err %d\n", err); 1095 out: 1096 dput(dir); 1097 mnt_drop_write(filp->f_path.mnt); 1098 1099 return err; 1100 } 1101 1102 static bool __dir_empty(struct dir_context *ctx, const char *name, int namlen, 1103 loff_t offset, u64 ino, unsigned int d_type) 1104 { 1105 struct ksmbd_readdir_data *buf; 1106 1107 buf = container_of(ctx, struct ksmbd_readdir_data, ctx); 1108 if (!is_dot_dotdot(name, namlen)) 1109 buf->dirent_count++; 1110 1111 return !buf->dirent_count; 1112 } 1113 1114 /** 1115 * ksmbd_vfs_empty_dir() - check for empty directory 1116 * @fp: ksmbd file pointer 1117 * 1118 * Return: true if directory empty, otherwise false 1119 */ 1120 int ksmbd_vfs_empty_dir(struct ksmbd_file *fp) 1121 { 1122 int err; 1123 struct ksmbd_readdir_data readdir_data; 1124 1125 memset(&readdir_data, 0, sizeof(struct ksmbd_readdir_data)); 1126 1127 set_ctx_actor(&readdir_data.ctx, __dir_empty); 1128 readdir_data.dirent_count = 0; 1129 1130 err = iterate_dir(fp->filp, &readdir_data.ctx); 1131 if (readdir_data.dirent_count) 1132 err = -ENOTEMPTY; 1133 else 1134 err = 0; 1135 return err; 1136 } 1137 1138 static bool __caseless_lookup(struct dir_context *ctx, const char *name, 1139 int namlen, loff_t offset, u64 ino, 1140 unsigned int d_type) 1141 { 1142 struct ksmbd_readdir_data *buf; 1143 int cmp = -EINVAL; 1144 1145 buf = container_of(ctx, struct ksmbd_readdir_data, ctx); 1146 1147 if (buf->used != namlen) 1148 return true; 1149 if (IS_ENABLED(CONFIG_UNICODE) && buf->um) { 1150 const struct qstr q_buf = {.name = buf->private, 1151 .len = buf->used}; 1152 const struct qstr q_name = {.name = name, 1153 .len = namlen}; 1154 1155 cmp = utf8_strncasecmp(buf->um, &q_buf, &q_name); 1156 } 1157 if (cmp < 0) 1158 cmp = strncasecmp((char *)buf->private, name, namlen); 1159 if (!cmp) { 1160 memcpy((char *)buf->private, name, buf->used); 1161 buf->dirent_count = 1; 1162 return false; 1163 } 1164 return true; 1165 } 1166 1167 /** 1168 * ksmbd_vfs_lookup_in_dir() - lookup a file in a directory 1169 * @dir: path info 1170 * @name: filename to lookup 1171 * @namelen: filename length 1172 * @um: &struct unicode_map to use 1173 * 1174 * Return: 0 on success, otherwise error 1175 */ 1176 static int ksmbd_vfs_lookup_in_dir(const struct path *dir, char *name, 1177 size_t namelen, struct unicode_map *um) 1178 { 1179 int ret; 1180 struct file *dfilp; 1181 int flags = O_RDONLY | O_LARGEFILE; 1182 struct ksmbd_readdir_data readdir_data = { 1183 .ctx.actor = __caseless_lookup, 1184 .private = name, 1185 .used = namelen, 1186 .dirent_count = 0, 1187 .um = um, 1188 }; 1189 1190 dfilp = dentry_open(dir, flags, current_cred()); 1191 if (IS_ERR(dfilp)) 1192 return PTR_ERR(dfilp); 1193 1194 ret = iterate_dir(dfilp, &readdir_data.ctx); 1195 if (readdir_data.dirent_count > 0) 1196 ret = 0; 1197 fput(dfilp); 1198 return ret; 1199 } 1200 1201 /** 1202 * ksmbd_vfs_kern_path_locked() - lookup a file and get path info 1203 * @work: work 1204 * @name: file path that is relative to share 1205 * @flags: lookup flags 1206 * @parent_path: if lookup succeed, return parent_path info 1207 * @path: if lookup succeed, return path info 1208 * @caseless: caseless filename lookup 1209 * 1210 * Return: 0 on success, otherwise error 1211 */ 1212 int ksmbd_vfs_kern_path_locked(struct ksmbd_work *work, char *name, 1213 unsigned int flags, struct path *parent_path, 1214 struct path *path, bool caseless) 1215 { 1216 struct ksmbd_share_config *share_conf = work->tcon->share_conf; 1217 int err; 1218 1219 err = ksmbd_vfs_path_lookup_locked(share_conf, name, flags, parent_path, 1220 path); 1221 if (!err) 1222 return 0; 1223 1224 if (caseless) { 1225 char *filepath; 1226 size_t path_len, remain_len; 1227 1228 filepath = name; 1229 path_len = strlen(filepath); 1230 remain_len = path_len; 1231 1232 *parent_path = share_conf->vfs_path; 1233 path_get(parent_path); 1234 1235 while (d_can_lookup(parent_path->dentry)) { 1236 char *filename = filepath + path_len - remain_len; 1237 char *next = strchrnul(filename, '/'); 1238 size_t filename_len = next - filename; 1239 bool is_last = !next[0]; 1240 1241 if (filename_len == 0) 1242 break; 1243 1244 err = ksmbd_vfs_lookup_in_dir(parent_path, filename, 1245 filename_len, 1246 work->conn->um); 1247 if (err) 1248 goto out2; 1249 1250 next[0] = '\0'; 1251 1252 err = vfs_path_lookup(share_conf->vfs_path.dentry, 1253 share_conf->vfs_path.mnt, 1254 filepath, 1255 flags, 1256 path); 1257 if (!is_last) 1258 next[0] = '/'; 1259 if (err) 1260 goto out2; 1261 else if (is_last) 1262 goto out1; 1263 path_put(parent_path); 1264 *parent_path = *path; 1265 1266 remain_len -= filename_len + 1; 1267 } 1268 1269 err = -EINVAL; 1270 out2: 1271 path_put(parent_path); 1272 } 1273 1274 out1: 1275 if (!err) { 1276 err = mnt_want_write(parent_path->mnt); 1277 if (err) { 1278 path_put(path); 1279 path_put(parent_path); 1280 return err; 1281 } 1282 1283 err = ksmbd_vfs_lock_parent(parent_path->dentry, path->dentry); 1284 if (err) { 1285 path_put(path); 1286 path_put(parent_path); 1287 } 1288 } 1289 return err; 1290 } 1291 1292 void ksmbd_vfs_kern_path_unlock(struct path *parent_path, struct path *path) 1293 { 1294 inode_unlock(d_inode(parent_path->dentry)); 1295 mnt_drop_write(parent_path->mnt); 1296 path_put(path); 1297 path_put(parent_path); 1298 } 1299 1300 struct dentry *ksmbd_vfs_kern_path_create(struct ksmbd_work *work, 1301 const char *name, 1302 unsigned int flags, 1303 struct path *path) 1304 { 1305 char *abs_name; 1306 struct dentry *dent; 1307 1308 abs_name = convert_to_unix_name(work->tcon->share_conf, name); 1309 if (!abs_name) 1310 return ERR_PTR(-ENOMEM); 1311 1312 dent = kern_path_create(AT_FDCWD, abs_name, path, flags); 1313 kfree(abs_name); 1314 return dent; 1315 } 1316 1317 int ksmbd_vfs_remove_acl_xattrs(struct mnt_idmap *idmap, 1318 const struct path *path) 1319 { 1320 char *name, *xattr_list = NULL; 1321 ssize_t xattr_list_len; 1322 int err = 0; 1323 1324 xattr_list_len = ksmbd_vfs_listxattr(path->dentry, &xattr_list); 1325 if (xattr_list_len < 0) { 1326 goto out; 1327 } else if (!xattr_list_len) { 1328 ksmbd_debug(SMB, "empty xattr in the file\n"); 1329 goto out; 1330 } 1331 1332 err = mnt_want_write(path->mnt); 1333 if (err) 1334 goto out; 1335 1336 for (name = xattr_list; name - xattr_list < xattr_list_len; 1337 name += strlen(name) + 1) { 1338 ksmbd_debug(SMB, "%s, len %zd\n", name, strlen(name)); 1339 1340 if (!strncmp(name, XATTR_NAME_POSIX_ACL_ACCESS, 1341 sizeof(XATTR_NAME_POSIX_ACL_ACCESS) - 1) || 1342 !strncmp(name, XATTR_NAME_POSIX_ACL_DEFAULT, 1343 sizeof(XATTR_NAME_POSIX_ACL_DEFAULT) - 1)) { 1344 err = vfs_remove_acl(idmap, path->dentry, name); 1345 if (err) 1346 ksmbd_debug(SMB, 1347 "remove acl xattr failed : %s\n", name); 1348 } 1349 } 1350 mnt_drop_write(path->mnt); 1351 1352 out: 1353 kvfree(xattr_list); 1354 return err; 1355 } 1356 1357 int ksmbd_vfs_remove_sd_xattrs(struct mnt_idmap *idmap, const struct path *path) 1358 { 1359 char *name, *xattr_list = NULL; 1360 ssize_t xattr_list_len; 1361 int err = 0; 1362 1363 xattr_list_len = ksmbd_vfs_listxattr(path->dentry, &xattr_list); 1364 if (xattr_list_len < 0) { 1365 goto out; 1366 } else if (!xattr_list_len) { 1367 ksmbd_debug(SMB, "empty xattr in the file\n"); 1368 goto out; 1369 } 1370 1371 for (name = xattr_list; name - xattr_list < xattr_list_len; 1372 name += strlen(name) + 1) { 1373 ksmbd_debug(SMB, "%s, len %zd\n", name, strlen(name)); 1374 1375 if (!strncmp(name, XATTR_NAME_SD, XATTR_NAME_SD_LEN)) { 1376 err = ksmbd_vfs_remove_xattr(idmap, path, name, true); 1377 if (err) 1378 ksmbd_debug(SMB, "remove xattr failed : %s\n", name); 1379 } 1380 } 1381 out: 1382 kvfree(xattr_list); 1383 return err; 1384 } 1385 1386 static struct xattr_smb_acl *ksmbd_vfs_make_xattr_posix_acl(struct mnt_idmap *idmap, 1387 struct inode *inode, 1388 int acl_type) 1389 { 1390 struct xattr_smb_acl *smb_acl = NULL; 1391 struct posix_acl *posix_acls; 1392 struct posix_acl_entry *pa_entry; 1393 struct xattr_acl_entry *xa_entry; 1394 int i; 1395 1396 if (!IS_ENABLED(CONFIG_FS_POSIX_ACL)) 1397 return NULL; 1398 1399 posix_acls = get_inode_acl(inode, acl_type); 1400 if (IS_ERR_OR_NULL(posix_acls)) 1401 return NULL; 1402 1403 smb_acl = kzalloc(sizeof(struct xattr_smb_acl) + 1404 sizeof(struct xattr_acl_entry) * posix_acls->a_count, 1405 KSMBD_DEFAULT_GFP); 1406 if (!smb_acl) 1407 goto out; 1408 1409 smb_acl->count = posix_acls->a_count; 1410 pa_entry = posix_acls->a_entries; 1411 xa_entry = smb_acl->entries; 1412 for (i = 0; i < posix_acls->a_count; i++, pa_entry++, xa_entry++) { 1413 switch (pa_entry->e_tag) { 1414 case ACL_USER: 1415 xa_entry->type = SMB_ACL_USER; 1416 xa_entry->uid = posix_acl_uid_translate(idmap, pa_entry); 1417 break; 1418 case ACL_USER_OBJ: 1419 xa_entry->type = SMB_ACL_USER_OBJ; 1420 break; 1421 case ACL_GROUP: 1422 xa_entry->type = SMB_ACL_GROUP; 1423 xa_entry->gid = posix_acl_gid_translate(idmap, pa_entry); 1424 break; 1425 case ACL_GROUP_OBJ: 1426 xa_entry->type = SMB_ACL_GROUP_OBJ; 1427 break; 1428 case ACL_OTHER: 1429 xa_entry->type = SMB_ACL_OTHER; 1430 break; 1431 case ACL_MASK: 1432 xa_entry->type = SMB_ACL_MASK; 1433 break; 1434 default: 1435 pr_err("unknown type : 0x%x\n", pa_entry->e_tag); 1436 goto out; 1437 } 1438 1439 if (pa_entry->e_perm & ACL_READ) 1440 xa_entry->perm |= SMB_ACL_READ; 1441 if (pa_entry->e_perm & ACL_WRITE) 1442 xa_entry->perm |= SMB_ACL_WRITE; 1443 if (pa_entry->e_perm & ACL_EXECUTE) 1444 xa_entry->perm |= SMB_ACL_EXECUTE; 1445 } 1446 out: 1447 posix_acl_release(posix_acls); 1448 return smb_acl; 1449 } 1450 1451 int ksmbd_vfs_set_sd_xattr(struct ksmbd_conn *conn, 1452 struct mnt_idmap *idmap, 1453 const struct path *path, 1454 struct smb_ntsd *pntsd, int len, 1455 bool get_write) 1456 { 1457 int rc; 1458 struct ndr sd_ndr = {0}, acl_ndr = {0}; 1459 struct xattr_ntacl acl = {0}; 1460 struct xattr_smb_acl *smb_acl, *def_smb_acl = NULL; 1461 struct dentry *dentry = path->dentry; 1462 struct inode *inode = d_inode(dentry); 1463 1464 acl.version = 4; 1465 acl.hash_type = XATTR_SD_HASH_TYPE_SHA256; 1466 acl.current_time = ksmbd_UnixTimeToNT(current_time(inode)); 1467 1468 memcpy(acl.desc, "posix_acl", 9); 1469 acl.desc_len = 10; 1470 1471 pntsd->osidoffset = 1472 cpu_to_le32(le32_to_cpu(pntsd->osidoffset) + NDR_NTSD_OFFSETOF); 1473 pntsd->gsidoffset = 1474 cpu_to_le32(le32_to_cpu(pntsd->gsidoffset) + NDR_NTSD_OFFSETOF); 1475 pntsd->dacloffset = 1476 cpu_to_le32(le32_to_cpu(pntsd->dacloffset) + NDR_NTSD_OFFSETOF); 1477 1478 acl.sd_buf = (char *)pntsd; 1479 acl.sd_size = len; 1480 1481 sha256(acl.sd_buf, acl.sd_size, acl.hash); 1482 1483 smb_acl = ksmbd_vfs_make_xattr_posix_acl(idmap, inode, 1484 ACL_TYPE_ACCESS); 1485 if (S_ISDIR(inode->i_mode)) 1486 def_smb_acl = ksmbd_vfs_make_xattr_posix_acl(idmap, inode, 1487 ACL_TYPE_DEFAULT); 1488 1489 rc = ndr_encode_posix_acl(&acl_ndr, idmap, inode, 1490 smb_acl, def_smb_acl); 1491 if (rc) { 1492 pr_err("failed to encode ndr to posix acl\n"); 1493 goto out; 1494 } 1495 1496 sha256(acl_ndr.data, acl_ndr.offset, acl.posix_acl_hash); 1497 1498 rc = ndr_encode_v4_ntacl(&sd_ndr, &acl); 1499 if (rc) { 1500 pr_err("failed to encode ndr to posix acl\n"); 1501 goto out; 1502 } 1503 1504 rc = ksmbd_vfs_setxattr(idmap, path, 1505 XATTR_NAME_SD, sd_ndr.data, 1506 sd_ndr.offset, 0, get_write); 1507 if (rc < 0) 1508 pr_err("Failed to store XATTR ntacl :%d\n", rc); 1509 1510 kfree(sd_ndr.data); 1511 out: 1512 kfree(acl_ndr.data); 1513 kfree(smb_acl); 1514 kfree(def_smb_acl); 1515 return rc; 1516 } 1517 1518 int ksmbd_vfs_get_sd_xattr(struct ksmbd_conn *conn, 1519 struct mnt_idmap *idmap, 1520 struct dentry *dentry, 1521 struct smb_ntsd **pntsd) 1522 { 1523 int rc; 1524 struct ndr n; 1525 struct inode *inode = d_inode(dentry); 1526 struct ndr acl_ndr = {0}; 1527 struct xattr_ntacl acl; 1528 struct xattr_smb_acl *smb_acl = NULL, *def_smb_acl = NULL; 1529 __u8 cmp_hash[XATTR_SD_HASH_SIZE] = {0}; 1530 1531 rc = ksmbd_vfs_getxattr(idmap, dentry, XATTR_NAME_SD, &n.data); 1532 if (rc <= 0) 1533 return rc; 1534 1535 n.length = rc; 1536 rc = ndr_decode_v4_ntacl(&n, &acl); 1537 if (rc) 1538 goto free_n_data; 1539 1540 smb_acl = ksmbd_vfs_make_xattr_posix_acl(idmap, inode, 1541 ACL_TYPE_ACCESS); 1542 if (S_ISDIR(inode->i_mode)) 1543 def_smb_acl = ksmbd_vfs_make_xattr_posix_acl(idmap, inode, 1544 ACL_TYPE_DEFAULT); 1545 1546 rc = ndr_encode_posix_acl(&acl_ndr, idmap, inode, smb_acl, 1547 def_smb_acl); 1548 if (rc) { 1549 pr_err("failed to encode ndr to posix acl\n"); 1550 goto out_free; 1551 } 1552 1553 sha256(acl_ndr.data, acl_ndr.offset, cmp_hash); 1554 1555 if (memcmp(cmp_hash, acl.posix_acl_hash, XATTR_SD_HASH_SIZE)) { 1556 pr_err("hash value diff\n"); 1557 rc = -EINVAL; 1558 goto out_free; 1559 } 1560 1561 *pntsd = acl.sd_buf; 1562 if (acl.sd_size < sizeof(struct smb_ntsd)) { 1563 pr_err("sd size is invalid\n"); 1564 goto out_free; 1565 } 1566 1567 (*pntsd)->osidoffset = cpu_to_le32(le32_to_cpu((*pntsd)->osidoffset) - 1568 NDR_NTSD_OFFSETOF); 1569 (*pntsd)->gsidoffset = cpu_to_le32(le32_to_cpu((*pntsd)->gsidoffset) - 1570 NDR_NTSD_OFFSETOF); 1571 (*pntsd)->dacloffset = cpu_to_le32(le32_to_cpu((*pntsd)->dacloffset) - 1572 NDR_NTSD_OFFSETOF); 1573 1574 rc = acl.sd_size; 1575 out_free: 1576 kfree(acl_ndr.data); 1577 kfree(smb_acl); 1578 kfree(def_smb_acl); 1579 if (rc < 0) { 1580 kfree(acl.sd_buf); 1581 *pntsd = NULL; 1582 } 1583 1584 free_n_data: 1585 kfree(n.data); 1586 return rc; 1587 } 1588 1589 int ksmbd_vfs_set_dos_attrib_xattr(struct mnt_idmap *idmap, 1590 const struct path *path, 1591 struct xattr_dos_attrib *da, 1592 bool get_write) 1593 { 1594 struct ndr n; 1595 int err; 1596 1597 err = ndr_encode_dos_attr(&n, da); 1598 if (err) 1599 return err; 1600 1601 err = ksmbd_vfs_setxattr(idmap, path, XATTR_NAME_DOS_ATTRIBUTE, 1602 (void *)n.data, n.offset, 0, get_write); 1603 if (err) 1604 ksmbd_debug(SMB, "failed to store dos attribute in xattr\n"); 1605 kfree(n.data); 1606 1607 return err; 1608 } 1609 1610 int ksmbd_vfs_get_dos_attrib_xattr(struct mnt_idmap *idmap, 1611 struct dentry *dentry, 1612 struct xattr_dos_attrib *da) 1613 { 1614 struct ndr n; 1615 int err; 1616 1617 err = ksmbd_vfs_getxattr(idmap, dentry, XATTR_NAME_DOS_ATTRIBUTE, 1618 (char **)&n.data); 1619 if (err > 0) { 1620 n.length = err; 1621 if (ndr_decode_dos_attr(&n, da)) 1622 err = -EINVAL; 1623 kfree(n.data); 1624 } else { 1625 ksmbd_debug(SMB, "failed to load dos attribute in xattr\n"); 1626 } 1627 1628 return err; 1629 } 1630 1631 /** 1632 * ksmbd_vfs_init_kstat() - convert unix stat information to smb stat format 1633 * @p: destination buffer 1634 * @ksmbd_kstat: ksmbd kstat wrapper 1635 * 1636 * Returns: pointer to the converted &struct file_directory_info 1637 */ 1638 void *ksmbd_vfs_init_kstat(char **p, struct ksmbd_kstat *ksmbd_kstat) 1639 { 1640 struct file_directory_info *info = (struct file_directory_info *)(*p); 1641 struct kstat *kstat = ksmbd_kstat->kstat; 1642 u64 time; 1643 1644 info->FileIndex = 0; 1645 info->CreationTime = cpu_to_le64(ksmbd_kstat->create_time); 1646 time = ksmbd_UnixTimeToNT(kstat->atime); 1647 info->LastAccessTime = cpu_to_le64(time); 1648 time = ksmbd_UnixTimeToNT(kstat->mtime); 1649 info->LastWriteTime = cpu_to_le64(time); 1650 time = ksmbd_UnixTimeToNT(kstat->ctime); 1651 info->ChangeTime = cpu_to_le64(time); 1652 1653 if (ksmbd_kstat->file_attributes & FILE_ATTRIBUTE_DIRECTORY_LE) { 1654 info->EndOfFile = 0; 1655 info->AllocationSize = 0; 1656 } else { 1657 info->EndOfFile = cpu_to_le64(kstat->size); 1658 info->AllocationSize = cpu_to_le64(kstat->blocks << 9); 1659 } 1660 info->ExtFileAttributes = ksmbd_kstat->file_attributes; 1661 1662 return info; 1663 } 1664 1665 int ksmbd_vfs_fill_dentry_attrs(struct ksmbd_work *work, 1666 struct mnt_idmap *idmap, 1667 struct dentry *dentry, 1668 struct ksmbd_kstat *ksmbd_kstat) 1669 { 1670 struct ksmbd_share_config *share_conf = work->tcon->share_conf; 1671 u64 time; 1672 int rc; 1673 struct path path = { 1674 .mnt = share_conf->vfs_path.mnt, 1675 .dentry = dentry, 1676 }; 1677 1678 rc = vfs_getattr(&path, ksmbd_kstat->kstat, 1679 STATX_BASIC_STATS | STATX_BTIME, 1680 AT_STATX_SYNC_AS_STAT); 1681 if (rc) 1682 return rc; 1683 1684 time = ksmbd_UnixTimeToNT(ksmbd_kstat->kstat->ctime); 1685 ksmbd_kstat->create_time = time; 1686 1687 /* 1688 * set default value for the case that store dos attributes is not yes 1689 * or that acl is disable in server's filesystem and the config is yes. 1690 */ 1691 if (S_ISDIR(ksmbd_kstat->kstat->mode)) 1692 ksmbd_kstat->file_attributes = FILE_ATTRIBUTE_DIRECTORY_LE; 1693 else 1694 ksmbd_kstat->file_attributes = FILE_ATTRIBUTE_ARCHIVE_LE; 1695 1696 if (test_share_config_flag(work->tcon->share_conf, 1697 KSMBD_SHARE_FLAG_STORE_DOS_ATTRS)) { 1698 struct xattr_dos_attrib da; 1699 1700 rc = ksmbd_vfs_get_dos_attrib_xattr(idmap, dentry, &da); 1701 if (rc > 0) { 1702 ksmbd_kstat->file_attributes = cpu_to_le32(da.attr); 1703 ksmbd_kstat->create_time = da.create_time; 1704 } else { 1705 ksmbd_debug(VFS, "fail to load dos attribute.\n"); 1706 } 1707 } 1708 1709 return 0; 1710 } 1711 1712 ssize_t ksmbd_vfs_casexattr_len(struct mnt_idmap *idmap, 1713 struct dentry *dentry, char *attr_name, 1714 int attr_name_len) 1715 { 1716 char *name, *xattr_list = NULL; 1717 ssize_t value_len = -ENOENT, xattr_list_len; 1718 1719 xattr_list_len = ksmbd_vfs_listxattr(dentry, &xattr_list); 1720 if (xattr_list_len <= 0) 1721 goto out; 1722 1723 for (name = xattr_list; name - xattr_list < xattr_list_len; 1724 name += strlen(name) + 1) { 1725 ksmbd_debug(VFS, "%s, len %zd\n", name, strlen(name)); 1726 if (strncasecmp(attr_name, name, attr_name_len)) 1727 continue; 1728 1729 value_len = ksmbd_vfs_xattr_len(idmap, dentry, name); 1730 break; 1731 } 1732 1733 out: 1734 kvfree(xattr_list); 1735 return value_len; 1736 } 1737 1738 int ksmbd_vfs_xattr_stream_name(char *stream_name, char **xattr_stream_name, 1739 size_t *xattr_stream_name_size, int s_type) 1740 { 1741 char *type, *buf; 1742 1743 if (s_type == DIR_STREAM) 1744 type = ":$INDEX_ALLOCATION"; 1745 else 1746 type = ":$DATA"; 1747 1748 buf = kasprintf(KSMBD_DEFAULT_GFP, "%s%s%s", 1749 XATTR_NAME_STREAM, stream_name, type); 1750 if (!buf) 1751 return -ENOMEM; 1752 1753 *xattr_stream_name = buf; 1754 *xattr_stream_name_size = strlen(buf) + 1; 1755 1756 return 0; 1757 } 1758 1759 int ksmbd_vfs_copy_file_ranges(struct ksmbd_work *work, 1760 struct ksmbd_file *src_fp, 1761 struct ksmbd_file *dst_fp, 1762 struct srv_copychunk *chunks, 1763 unsigned int chunk_count, 1764 unsigned int *chunk_count_written, 1765 unsigned int *chunk_size_written, 1766 loff_t *total_size_written) 1767 { 1768 unsigned int i; 1769 loff_t src_off, dst_off, src_file_size; 1770 size_t len; 1771 int ret; 1772 1773 *chunk_count_written = 0; 1774 *chunk_size_written = 0; 1775 *total_size_written = 0; 1776 1777 if (!(src_fp->daccess & (FILE_READ_DATA_LE | FILE_EXECUTE_LE))) { 1778 pr_err("no right to read(%pD)\n", src_fp->filp); 1779 return -EACCES; 1780 } 1781 if (!(dst_fp->daccess & (FILE_WRITE_DATA_LE | FILE_APPEND_DATA_LE))) { 1782 pr_err("no right to write(%pD)\n", dst_fp->filp); 1783 return -EACCES; 1784 } 1785 1786 if (ksmbd_stream_fd(src_fp) || ksmbd_stream_fd(dst_fp)) 1787 return -EBADF; 1788 1789 smb_break_all_levII_oplock(work, dst_fp, 1); 1790 1791 if (!work->tcon->posix_extensions) { 1792 for (i = 0; i < chunk_count; i++) { 1793 src_off = le64_to_cpu(chunks[i].SourceOffset); 1794 dst_off = le64_to_cpu(chunks[i].TargetOffset); 1795 len = le32_to_cpu(chunks[i].Length); 1796 1797 if (check_lock_range(src_fp->filp, src_off, 1798 src_off + len - 1, READ)) 1799 return -EAGAIN; 1800 if (check_lock_range(dst_fp->filp, dst_off, 1801 dst_off + len - 1, WRITE)) 1802 return -EAGAIN; 1803 } 1804 } 1805 1806 src_file_size = i_size_read(file_inode(src_fp->filp)); 1807 1808 for (i = 0; i < chunk_count; i++) { 1809 src_off = le64_to_cpu(chunks[i].SourceOffset); 1810 dst_off = le64_to_cpu(chunks[i].TargetOffset); 1811 len = le32_to_cpu(chunks[i].Length); 1812 1813 if (src_off + len > src_file_size) 1814 return -E2BIG; 1815 1816 ret = vfs_copy_file_range(src_fp->filp, src_off, 1817 dst_fp->filp, dst_off, len, 0); 1818 if (ret == -EOPNOTSUPP || ret == -EXDEV) 1819 ret = vfs_copy_file_range(src_fp->filp, src_off, 1820 dst_fp->filp, dst_off, len, 1821 COPY_FILE_SPLICE); 1822 if (ret < 0) 1823 return ret; 1824 1825 *chunk_count_written += 1; 1826 *total_size_written += ret; 1827 } 1828 return 0; 1829 } 1830 1831 void ksmbd_vfs_posix_lock_wait(struct file_lock *flock) 1832 { 1833 wait_event(flock->c.flc_wait, !flock->c.flc_blocker); 1834 } 1835 1836 void ksmbd_vfs_posix_lock_unblock(struct file_lock *flock) 1837 { 1838 locks_delete_block(flock); 1839 } 1840 1841 int ksmbd_vfs_set_init_posix_acl(struct mnt_idmap *idmap, 1842 struct path *path) 1843 { 1844 struct posix_acl_state acl_state; 1845 struct posix_acl *acls; 1846 struct dentry *dentry = path->dentry; 1847 struct inode *inode = d_inode(dentry); 1848 int rc; 1849 1850 if (!IS_ENABLED(CONFIG_FS_POSIX_ACL)) 1851 return -EOPNOTSUPP; 1852 1853 ksmbd_debug(SMB, "Set posix acls\n"); 1854 rc = init_acl_state(&acl_state, 1); 1855 if (rc) 1856 return rc; 1857 1858 /* Set default owner group */ 1859 acl_state.owner.allow = (inode->i_mode & 0700) >> 6; 1860 acl_state.group.allow = (inode->i_mode & 0070) >> 3; 1861 acl_state.other.allow = inode->i_mode & 0007; 1862 acl_state.users->aces[acl_state.users->n].uid = inode->i_uid; 1863 acl_state.users->aces[acl_state.users->n++].perms.allow = 1864 acl_state.owner.allow; 1865 acl_state.groups->aces[acl_state.groups->n].gid = inode->i_gid; 1866 acl_state.groups->aces[acl_state.groups->n++].perms.allow = 1867 acl_state.group.allow; 1868 acl_state.mask.allow = 0x07; 1869 1870 acls = posix_acl_alloc(6, KSMBD_DEFAULT_GFP); 1871 if (!acls) { 1872 free_acl_state(&acl_state); 1873 return -ENOMEM; 1874 } 1875 posix_state_to_acl(&acl_state, acls->a_entries); 1876 1877 rc = set_posix_acl(idmap, dentry, ACL_TYPE_ACCESS, acls); 1878 if (rc < 0) 1879 ksmbd_debug(SMB, "Set posix acl(ACL_TYPE_ACCESS) failed, rc : %d\n", 1880 rc); 1881 else if (S_ISDIR(inode->i_mode)) { 1882 posix_state_to_acl(&acl_state, acls->a_entries); 1883 rc = set_posix_acl(idmap, dentry, ACL_TYPE_DEFAULT, acls); 1884 if (rc < 0) 1885 ksmbd_debug(SMB, "Set posix acl(ACL_TYPE_DEFAULT) failed, rc : %d\n", 1886 rc); 1887 } 1888 1889 free_acl_state(&acl_state); 1890 posix_acl_release(acls); 1891 return rc; 1892 } 1893 1894 int ksmbd_vfs_inherit_posix_acl(struct mnt_idmap *idmap, 1895 struct path *path, struct inode *parent_inode) 1896 { 1897 struct posix_acl *acls; 1898 struct posix_acl_entry *pace; 1899 struct dentry *dentry = path->dentry; 1900 struct inode *inode = d_inode(dentry); 1901 int rc, i; 1902 1903 if (!IS_ENABLED(CONFIG_FS_POSIX_ACL)) 1904 return -EOPNOTSUPP; 1905 1906 acls = get_inode_acl(parent_inode, ACL_TYPE_DEFAULT); 1907 if (IS_ERR_OR_NULL(acls)) 1908 return -ENOENT; 1909 pace = acls->a_entries; 1910 1911 for (i = 0; i < acls->a_count; i++, pace++) { 1912 if (pace->e_tag == ACL_MASK) { 1913 pace->e_perm = 0x07; 1914 break; 1915 } 1916 } 1917 1918 rc = set_posix_acl(idmap, dentry, ACL_TYPE_ACCESS, acls); 1919 if (rc < 0) 1920 ksmbd_debug(SMB, "Set posix acl(ACL_TYPE_ACCESS) failed, rc : %d\n", 1921 rc); 1922 if (S_ISDIR(inode->i_mode)) { 1923 rc = set_posix_acl(idmap, dentry, ACL_TYPE_DEFAULT, 1924 acls); 1925 if (rc < 0) 1926 ksmbd_debug(SMB, "Set posix acl(ACL_TYPE_DEFAULT) failed, rc : %d\n", 1927 rc); 1928 } 1929 1930 posix_acl_release(acls); 1931 return rc; 1932 } 1933