xref: /titanic_41/usr/src/uts/common/nfs/export.h (revision 98c080d502548e68bb9815459ea56e6ae282c430)
1 /*
2  * CDDL HEADER START
3  *
4  * The contents of this file are subject to the terms of the
5  * Common Development and Distribution License (the "License").
6  * You may not use this file except in compliance with the License.
7  *
8  * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
9  * or http://www.opensolaris.org/os/licensing.
10  * See the License for the specific language governing permissions
11  * and limitations under the License.
12  *
13  * When distributing Covered Code, include this CDDL HEADER in each
14  * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
15  * If applicable, add the following below this CDDL HEADER, with the
16  * fields enclosed by brackets "[]" replaced with your own identifying
17  * information: Portions Copyright [yyyy] [name of copyright owner]
18  *
19  * CDDL HEADER END
20  */
21 /*
22  * Copyright 2010 Sun Microsystems, Inc.  All rights reserved.
23  * Use is subject to license terms.
24  */
25 
26 /*	Copyright (c) 1984, 1986, 1987, 1988, 1989 AT&T	*/
27 /*	  All Rights Reserved  	*/
28 
29 #ifndef	_NFS_EXPORT_H
30 #define	_NFS_EXPORT_H
31 
32 #include <nfs/nfs_sec.h>
33 #include <nfs/auth.h>
34 #include <sys/vnode.h>
35 #include <nfs/nfs4.h>
36 #include <sys/kiconv.h>
37 
38 #ifdef	__cplusplus
39 extern "C" {
40 #endif
41 
42 /*
43  * nfs pseudo flavor number is owned by IANA. Need to make sure the
44  * Solaris specific NFS_FLAVOR_NOMAP number will not overlap with any
45  * new IANA defined pseudo flavor numbers. The chance for the overlap
46  * is very small since the growth of new flavor numbers is expected
47  * to be limited.
48  */
49 #define	NFS_FLAVOR_NOMAP	999999	/* no nfs flavor mapping */
50 
51 /*
52  * As duplicate flavors can be passed into exportfs in the arguments, we
53  * allocate a cleaned up array with non duplicate flavors on the stack.
54  * So we need to know how much to allocate.
55  */
56 #define	MAX_FLAVORS		6	/* none, sys, dh, krb5, krb5i krb5p */
57 
58 /*
59  * Note: exported_lock is currently used to ensure the integrity of
60  * the secinfo fields.
61  */
62 struct secinfo {
63 	seconfig_t	s_secinfo;	/* /etc/nfssec.conf entry */
64 	unsigned int	s_flags;	/* flags (see below) */
65 	int32_t		s_refcnt;	/* reference count for tracking */
66 					/* how many children (self included) */
67 					/* use this flavor. */
68 	int 		s_window;	/* window */
69 	uint_t		s_rootid;	/* UID to use for authorized roots */
70 	int		s_rootcnt;	/* count of root names */
71 	caddr_t		*s_rootnames;	/* array of root names */
72 					/* they are strings for AUTH_DES and */
73 					/* rpc_gss_principal_t for RPCSEC_GSS */
74 };
75 
76 #ifdef _SYSCALL32
77 struct secinfo32 {
78 	seconfig32_t	s_secinfo;	/* /etc/nfssec.conf entry */
79 	uint32_t	s_flags;	/* flags (see below) */
80 	int32_t		s_refcnt;	/* reference count for tracking */
81 					/* how many children (self included) */
82 					/* use this flavor. */
83 	int32_t 	s_window;	/* window */
84 	uint32_t	s_rootid;	/* UID to use for authorized roots */
85 	int32_t		s_rootcnt;	/* count of root names */
86 	caddr32_t	s_rootnames;	/* array of root names */
87 					/* they are strings for AUTH_DES and */
88 					/* rpc_gss_principal_t for RPCSEC_GSS */
89 };
90 #endif /* _SYSCALL32 */
91 
92 /*
93  * security negotiation related
94  */
95 
96 #define	SEC_QUERY	0x01	/* query sec modes */
97 
98 struct sec_ol {
99 	int		sec_flags;	/* security nego flags */
100 	uint_t		sec_index;	/* index into sec flavor array */
101 };
102 
103 /*
104  * Per-mode flags (secinfo.s_flags)
105  */
106 #define	M_RO		0x01	/* exported ro to all */
107 #define	M_ROL		0x02	/* exported ro to all listed */
108 #define	M_RW		0x04	/* exported rw to all */
109 #define	M_RWL		0x08	/* exported ro to all listed */
110 #define	M_ROOT		0x10	/* root list is defined */
111 #define	M_4SEC_EXPORTED	0x20	/* this is an explicitly shared flavor */
112 #define	M_NONE		0x40	/* none list is defined */
113 
114 /* invalid secinfo reference count */
115 #define	SEC_REF_INVALID(p) ((p)->s_refcnt < 1)
116 
117 /* last secinfo reference */
118 #define	SEC_REF_LAST(p) ((p)->s_refcnt == 1)
119 
120 /* sec flavor explicitly shared for the exported node */
121 #define	SEC_REF_EXPORTED(p) ((p)->s_flags & M_4SEC_EXPORTED)
122 
123 /* the only reference count left is for referring itself */
124 #define	SEC_REF_SELF(p) (SEC_REF_LAST(p) && SEC_REF_EXPORTED(p))
125 
126 /*
127  * The export information passed to exportfs() (Version 2)
128  */
129 #define	EX_CURRENT_VERSION 2	/* current version of exportdata struct */
130 
131 struct exportdata {
132 	int		ex_version;	/* structure version */
133 	char		*ex_path;	/* exported path */
134 	size_t		ex_pathlen;	/* path length */
135 	int		ex_flags;	/* flags */
136 	unsigned int	ex_anon;	/* uid for unauthenticated requests */
137 	int		ex_seccnt;	/* count of security modes */
138 	struct secinfo	*ex_secinfo;	/* security mode info */
139 	char		*ex_index;	/* index file for public filesystem */
140 	char		*ex_log_buffer;	/* path to logging buffer file */
141 	size_t		ex_log_bufferlen;	/* buffer file path len */
142 	char		*ex_tag;	/* tag used to identify log config */
143 	size_t		ex_taglen;	/* tag length */
144 };
145 
146 #ifdef _SYSCALL32
147 struct exportdata32 {
148 	int32_t		ex_version;	/* structure version */
149 	caddr32_t	ex_path;	/* exported path */
150 	int32_t		ex_pathlen;	/* path length */
151 	int32_t		ex_flags;	/* flags */
152 	uint32_t	ex_anon;	/* uid for unauthenticated requests */
153 	int32_t		ex_seccnt;	/* count of security modes */
154 	caddr32_t	ex_secinfo;	/* security mode info */
155 	caddr32_t	ex_index;	/* index file for public filesystem */
156 	caddr32_t	ex_log_buffer;	/* path to logging buffer file */
157 	int32_t		ex_log_bufferlen;	/* buffer file path len */
158 	caddr32_t	ex_tag;		/* tag used to identify log config */
159 	int32_t		ex_taglen;	/* tag length */
160 };
161 #endif /* _SYSCALL32 */
162 
163 /*
164  * exported vfs flags.
165  */
166 
167 #define	EX_NOSUID	0x01	/* exported with unsetable set[ug]ids */
168 #define	EX_ACLOK	0x02	/* exported with maximal access if acl exists */
169 #define	EX_PUBLIC	0x04	/* exported with public filehandle */
170 #define	EX_NOSUB	0x08	/* no nfs_getfh or MCL below export point */
171 #define	EX_INDEX	0x10	/* exported with index file specified */
172 #define	EX_LOG		0x20	/* logging enabled */
173 #define	EX_LOG_ALLOPS	0x40	/* logging of all RPC operations enabled */
174 				/* by default only operations which affect */
175 				/* transaction logging are enabled */
176 #define	EX_PSEUDO	0x80	/* pseudo filesystem export */
177 #ifdef VOLATILE_FH_TEST
178 #define	EX_VOLFH	0x100	/* XXX nfsv4 fh may expire anytime */
179 #define	EX_VOLRNM	0x200	/* XXX nfsv4 fh expire at rename */
180 #define	EX_VOLMIG	0x400	/* XXX nfsv4 fh expire at migration */
181 #define	EX_NOEXPOPEN	0x800	/* XXX nfsv4 fh no expire with open */
182 #endif /* VOLATILE_FH_TEST */
183 
184 #define	EX_CHARMAP	0x1000	/* NFS may need a character set conversion */
185 #define	EX_NOACLFAB	0x2000	/* If set, NFSv2 and v3 servers doesn't */
186 				/* fabricate ACL for VOP_GETSECATTR OTW call */
187 
188 #ifdef	_KERNEL
189 
190 #define	RPC_IDEMPOTENT	0x1	/* idempotent or not */
191 /*
192  * Be very careful about which NFS procedures get the RPC_ALLOWANON bit.
193  * Right now, it this bit is on, we ignore the results of per NFS request
194  * access control.
195  */
196 #define	RPC_ALLOWANON	0x2	/* allow anonymous access */
197 #define	RPC_MAPRESP	0x4	/* use mapped response buffer */
198 #define	RPC_AVOIDWORK	0x8	/* do work avoidance for dups */
199 #define	RPC_PUBLICFH_OK	0x10	/* allow use of public filehandle */
200 
201 /*
202  * RPC_ALL is an or of all above bits to be used with "don't care"
203  * nfsv4 ops. The flags of an nfsv4 request is the bit-AND of the
204  * per-op flags.
205  */
206 #define	RPC_ALL	(RPC_IDEMPOTENT|RPC_ALLOWANON|RPC_AVOIDWORK|RPC_PUBLICFH_OK)
207 
208 
209 #ifdef VOLATILE_FH_TEST
210 struct ex_vol_rename {
211 	nfs_fh4_fmt_t vrn_fh_fmt;
212 	struct ex_vol_rename *vrn_next;
213 };
214 #endif /* VOLATILE_FH_TEST */
215 
216 /*
217  * An authorization cache entry
218  */
219 struct auth_cache {
220 	struct netbuf		auth_addr;
221 	int			auth_flavor;
222 	int			auth_access;
223 	time_t			auth_time;
224 	struct auth_cache	*auth_next;
225 };
226 
227 #define	AUTH_TABLESIZE	32
228 
229 /*
230  * Structure containing log file meta-data.
231  */
232 struct log_file {
233 	unsigned int	lf_flags;	/* flags (see below) */
234 	int		lf_writers;	/* outstanding writers */
235 	int		lf_refcnt;	/* references to this struct */
236 	caddr_t		lf_path;	/* buffer file location */
237 	vnode_t		*lf_vp;		/* vnode for the buffer file */
238 	kmutex_t	lf_lock;
239 	kcondvar_t	lf_cv_waiters;
240 };
241 
242 /*
243  * log_file and log_buffer flags.
244  */
245 #define	L_WAITING	0x01		/* flush of in-core data to stable */
246 					/* storage in progress */
247 #define	L_PRINTED	0x02		/* error message printed to console */
248 #define	L_ERROR		0x04		/* error condition detected */
249 
250 /*
251  * The logging buffer information.
252  * This structure may be shared by multiple exportinfo structures,
253  * if they share the same buffer file.
254  * This structure contains the basic information about the buffer, such
255  * as it's location in the filesystem.
256  *
257  * 'lb_lock' protects all the fields in this structure except for 'lb_path',
258  * and 'lb_next'.
259  * 'lb_path' is a write-once/read-many field which needs no locking, it is
260  * set before the structure is linked to any exportinfo structure.
261  * 'lb_next' is protected by the log_buffer_list_lock.
262  */
263 struct log_buffer {
264 	unsigned int	lb_flags;	/* L_ONLIST set? */
265 	int		lb_refcnt;	/* references to this struct */
266 	unsigned int	lb_rec_id;	/* used to generate unique id */
267 	caddr_t		lb_path;	/* buffer file pathname */
268 	struct log_file	*lb_logfile;	/* points to log_file structure */
269 	kmutex_t	lb_lock;
270 	struct log_buffer	*lb_next;
271 	kcondvar_t	lb_cv_waiters;
272 	caddr_t		lb_records;	/* linked list of records to write */
273 	int		lb_num_recs;	/* # of records to write */
274 	ssize_t		lb_size_queued; /* number of bytes queued for write */
275 };
276 
277 #define	LOG_BUFFER_HOLD(lbp)	{ \
278 	mutex_enter(&(lbp)->lb_lock); \
279 	(lbp)->lb_refcnt++; \
280 	mutex_exit(&(lbp)->lb_lock); \
281 }
282 
283 #define	LOG_BUFFER_RELE(lbp)	{ \
284 	log_buffer_rele(lbp); \
285 }
286 
287 /*
288  * Structure for character set conversion mapping based on client address.
289  */
290 struct charset_cache {
291 	struct charset_cache *next;
292 	kiconv_t	inbound;
293 	kiconv_t	outbound;
294 	struct sockaddr	client_addr;
295 };
296 
297 /* Forward declarations */
298 struct exportinfo;
299 struct exp_visible;
300 struct svc_req;
301 
302 /*
303  * Treenodes are used to build tree representing every node which is part
304  * of nfs server pseudo namespace. They are connected with both exportinfo
305  * and exp_visible struct. They were introduced to avoid lookup of ".."
306  * in the underlying file system during unshare, which was failing if the
307  * file system was forcibly unmounted or if the directory was removed.
308  * One exp_visible_t can be shared via several treenode_t, i.e.
309  * different tree_vis can point to the same exp_visible_t.
310  * This will happen if some directory is on two different shared paths:
311  * E.g. after share /tmp/a/b1 and share /tmp/a/b2 there will be two treenodes
312  * corresponding to /tmp/a and both will have same value in tree_vis.
313  *
314  *
315  *
316  *     NEW DATA STRUCT         ORIGINAL DATA STRUCT
317  *
318  * ns_root +---+               +----------+
319  *         | / |               |PSEUDO EXP|-->+---+   +---+   +---+
320  *         +---+---------  ----+----------+   | a |-->| k |-->| b |
321  *          /\                                +---+   +---+   +---+
322  *         /  \                                .       .       .
323  *     +---+...\.........  .....................       .       .
324  *    *| a |    \              +----------+            .       .
325  *     +---+-----\-------  ----|REAL EXP a|            .       .
326  *       /        \            +----------+            .       .
327  *      /        +===+...  .............................       .
328  *     /        *| k |         +----------+                    .
329  *    /          +===+---  ----|REAL EXP k|                    .
330  *   /                         +----------+                    .
331  *  +===+................  .....................................
332  * *| b |                      +----------+
333  *  +===+----------------  ----|REAL EXP b|-->+---+
334  *     \                       +----------+   | d |
335  *     +===+.............  ...................+---+
336  *     | d |                   +----------+
337  *     +===+-------------  ----|PSEUDO EXP|-->+---+   +---+
338  *     /                       +----------+   | e |-->| g |
339  * +---+.................  ...................+---+   +---+
340  * | e |                                              .
341  * +---+                                              .
342  *    \                                               .
343  *    +---+..............  ............................
344  *   *| g |                    +----------+
345  *    +---+--------------  ----|REAL EXP g|
346  *                             +----------+
347  *
348  *
349  *
350  * +===+               +---+                    +---+
351  * | b |..mountpoint   | e |..directory/file   *| a |..node is shared
352  * +===+  (VROOT)      +---+                    +---+
353  *
354  *
355  * Bi-directional interconnect:
356  * treenode_t::tree_exi ---------  exportinfo_t::exi_tree
357  * One-way direction connection:
358  * treenode_t::tree_vis .........> exp_visible_t
359  */
360 /* Access to treenode_t is under protection of exported_lock RW_LOCK */
361 typedef struct treenode {
362 	/* support for generic n-ary trees */
363 	struct treenode *tree_parent;
364 	struct treenode *tree_child_first;
365 	struct treenode *tree_sibling; /* next sibling */
366 	/* private, nfs specific part */
367 	struct exportinfo  *tree_exi;
368 	struct exp_visible *tree_vis;
369 } treenode_t;
370 
371 /*
372  * TREE_ROOT checks if the node corresponds to a filesystem root
373  * TREE_EXPORTED checks if the node is explicitly shared
374  */
375 
376 #define	TREE_ROOT(t) \
377 	((t)->tree_exi && (t)->tree_exi->exi_vp->v_flag & VROOT)
378 
379 #define	TREE_EXPORTED(t) \
380 	((t)->tree_exi && !PSEUDO((t)->tree_exi))
381 
382 /* Root of nfs pseudo namespace */
383 extern treenode_t *ns_root;
384 
385 #define	EXPTABLESIZE	16
386 
387 /*
388  * A node associated with an export entry on the
389  * list of exported filesystems.
390  *
391  * exi_count+exi_lock protects an individual exportinfo from being freed
392  * when in use.
393  * You must have the writer lock on exported_lock to add/delete an exportinfo
394  * structure to/from the list.
395  *
396  * exi_volatile_dev maps to VSW_VOLATILEDEV.  It means that the
397  * underlying fs devno can change on each mount.  When set, the server
398  * should not use va_fsid for a GETATTR(FATTR4_FSID) reply.  It must
399  * use exi_fsid because it is guaranteed to be persistent.  This isn't
400  * in any way related to NFS4 volatile filehandles.
401  */
402 struct exportinfo {
403 	struct exportdata	exi_export;
404 	fsid_t			exi_fsid;
405 	struct fid		exi_fid;
406 	struct exportinfo	*exi_hash;
407 	struct treenode		*exi_tree;
408 	fhandle_t		exi_fh;
409 	krwlock_t		exi_cache_lock;
410 	kmutex_t		exi_lock;
411 	uint_t			exi_count;
412 	vnode_t			*exi_vp;
413 	vnode_t			*exi_dvp;
414 	struct auth_cache	*exi_cache[AUTH_TABLESIZE];
415 	struct log_buffer	*exi_logbuffer;
416 	struct exp_visible	*exi_visible;
417 	struct charset_cache	*exi_charset;
418 	unsigned		exi_volatile_dev:1;
419 	unsigned		exi_moved:1;
420 #ifdef VOLATILE_FH_TEST
421 	uint32_t		exi_volatile_id;
422 	struct ex_vol_rename	*exi_vol_rename;
423 	kmutex_t		exi_vol_rename_lock;
424 #endif /* VOLATILE_FH_TEST */
425 };
426 
427 typedef struct exportinfo exportinfo_t;
428 typedef struct exportdata exportdata_t;
429 typedef struct secinfo secinfo_t;
430 
431 /*
432  * exp_visible is a visible list per filesystem. It is for filesystems
433  * that may need a limited view of its contents. A pseudo export and
434  * a real export at the mount point (VROOT) which has a subtree shared
435  * has a visible list.
436  *
437  * The exi_visible field is NULL for normal, non=pseudo filesystems
438  * which do not have any subtree exported. If the field is non-null,
439  * it points to a list of visible entries, identified by vis_fid and/or
440  * vis_ino. The presence of a "visible" list means that if this export
441  * can only have a limited view, it can only view the entries in the
442  * exp_visible list. The directories in the fid list comprise paths that
443  * lead to exported directories.
444  *
445  * The vis_count field records the number of paths in this filesystem
446  * that use this directory. The vis_exported field is non-zero if the
447  * entry is an exported directory (leaf node).
448  *
449  * exp_visible itself is not reference counted. Each exp_visible is
450  * referenced twice:
451  * 1) from treenode::tree_vis
452  * 2) linked from exportinfo::exi_visible
453  * The 'owner' of exp_visible is the exportinfo structure. exp_visible should
454  * be always freed only from exportinfo_t, never from treenode::tree_vis.
455  */
456 
457 struct exp_visible {
458 	vnode_t			*vis_vp;
459 	fid_t			vis_fid;
460 	u_longlong_t		vis_ino;
461 	int			vis_count;
462 	int			vis_exported;
463 	struct exp_visible	*vis_next;
464 	struct secinfo		*vis_secinfo;
465 	int			vis_seccnt;
466 };
467 typedef struct exp_visible exp_visible_t;
468 
469 #define	PSEUDO(exi)	((exi)->exi_export.ex_flags & EX_PSEUDO)
470 
471 #define	EQFSID(fsidp1, fsidp2)	\
472 	(((fsidp1)->val[0] == (fsidp2)->val[0]) && \
473 	    ((fsidp1)->val[1] == (fsidp2)->val[1]))
474 
475 #define	EQFID(fidp1, fidp2)	\
476 	((fidp1)->fid_len == (fidp2)->fid_len && \
477 	    bcmp((char *)(fidp1)->fid_data, (char *)(fidp2)->fid_data, \
478 	    (uint_t)(fidp1)->fid_len) == 0)
479 
480 #define	exportmatch(exi, fsid, fid)	\
481 	(EQFSID(&(exi)->exi_fsid, (fsid)) && EQFID(&(exi)->exi_fid, (fid)))
482 
483 /*
484  * Returns true iff exported filesystem is read-only to the given host.
485  *
486  * Note:  this macro should be as fast as possible since it's called
487  * on each NFS modification request.
488  */
489 #define	rdonly(exi, req)  (nfsauth_access(exi, req) & NFSAUTH_RO)
490 #define	rdonly4(exi, vp, req)  \
491 	(vn_is_readonly(vp) || \
492 	    (nfsauth4_access(exi, vp, req) & (NFSAUTH_RO | NFSAUTH_LIMITED)))
493 
494 extern int	nfsauth4_access(struct exportinfo *, vnode_t *,
495 				struct svc_req *);
496 extern int	nfsauth4_secinfo_access(struct exportinfo *,
497 				struct svc_req *, int, int);
498 extern int	nfs_fhhash(fsid_t *, fid_t *);
499 extern int	nfs_fhbcmp(char *, char *, int);
500 extern int	nfs_exportinit(void);
501 extern void	nfs_exportfini(void);
502 extern int	chk_clnt_sec(struct exportinfo *, struct svc_req *req);
503 extern int	makefh(fhandle_t *, struct vnode *, struct exportinfo *);
504 extern int	makefh_ol(fhandle_t *, struct exportinfo *, uint_t);
505 extern int	makefh3(nfs_fh3 *, struct vnode *, struct exportinfo *);
506 extern int	makefh3_ol(nfs_fh3 *, struct exportinfo *, uint_t);
507 extern vnode_t *nfs_fhtovp(fhandle_t *, struct exportinfo *);
508 extern vnode_t *nfs3_fhtovp(nfs_fh3 *, struct exportinfo *);
509 extern vnode_t *lm_fhtovp(fhandle_t *fh);
510 extern vnode_t *lm_nfs3_fhtovp(nfs_fh3 *fh);
511 extern struct	exportinfo *checkexport(fsid_t *, struct fid *);
512 extern struct	exportinfo *checkexport4(fsid_t *, struct fid *, vnode_t *vp);
513 extern void	exi_rele(struct exportinfo *);
514 extern struct exportinfo *nfs_vptoexi(vnode_t *, vnode_t *, cred_t *, int *,
515     int *, bool_t);
516 extern int	nfs_check_vpexi(vnode_t *, vnode_t *, cred_t *,
517 			struct exportinfo **);
518 extern void	export_link(struct exportinfo *);
519 extern int	export_unlink(fsid_t *, fid_t *, vnode_t *,
520 			struct exportinfo **);
521 extern vnode_t *untraverse(vnode_t *);
522 extern int	vn_is_nfs_reparse(vnode_t *, cred_t *);
523 extern int	client_is_downrev(struct svc_req *);
524 extern char    *build_symlink(vnode_t *, cred_t *, size_t *);
525 
526 /*
527  * Functions that handle the NFSv4 server namespace
528  */
529 extern exportinfo_t *vis2exi(treenode_t *);
530 extern int	treeclimb_export(struct exportinfo *);
531 extern void	treeclimb_unexport(struct exportinfo *);
532 extern int	nfs_visible(struct exportinfo *, vnode_t *, int *);
533 extern int	nfs_visible_inode(struct exportinfo *, ino64_t, int *);
534 extern int	has_visible(struct exportinfo *, vnode_t *);
535 extern void	free_visible(struct exp_visible *);
536 extern int	nfs_exported(struct exportinfo *, vnode_t *);
537 extern int	pseudo_exportfs(vnode_t *, struct exp_visible *,
538     struct exportdata *, struct exportinfo **);
539 extern int	vop_fid_pseudo(vnode_t *, fid_t *fidp);
540 extern int	nfs4_vget_pseudo(struct exportinfo *, vnode_t **, fid_t *);
541 /*
542  * Functions that handle the NFSv4 server namespace security flavors
543  * information.
544  */
545 extern void	srv_secinfo_exp2pseu(struct exportdata *, struct exportdata *);
546 extern void	srv_secinfo_list_free(struct secinfo *, int);
547 
548 /*
549  * "public" and default (root) location for public filehandle
550  */
551 extern struct exportinfo *exi_public, *exi_root;
552 extern fhandle_t nullfh2;	/* for comparing V2 filehandles */
553 extern krwlock_t exported_lock;
554 extern struct exportinfo *exptable[];
555 
556 /*
557  * Two macros for identifying public filehandles.
558  * A v2 public filehandle is 32 zero bytes.
559  * A v3 public filehandle is zero length.
560  */
561 #define	PUBLIC_FH2(fh) \
562 	((fh)->fh_fsid.val[1] == 0 && \
563 	bcmp((fh), &nullfh2, sizeof (fhandle_t)) == 0)
564 
565 #define	PUBLIC_FH3(fh) \
566 	((fh)->fh3_length == 0)
567 
568 extern int	makefh4(nfs_fh4 *, struct vnode *, struct exportinfo *);
569 extern vnode_t *nfs4_fhtovp(nfs_fh4 *, struct exportinfo *, nfsstat4 *);
570 
571 #endif /* _KERNEL */
572 
573 #ifdef	__cplusplus
574 }
575 #endif
576 
577 #endif	/* _NFS_EXPORT_H */
578