]> git.ipfire.org Git - people/arne_f/kernel.git/blame - fs/f2fs/acl.c
netfilter: layer7 fix wrong fuzzy match change
[people/arne_f/kernel.git] / fs / f2fs / acl.c
CommitLineData
0a8165d7 1/*
af48b85b
JK
2 * fs/f2fs/acl.c
3 *
4 * Copyright (c) 2012 Samsung Electronics Co., Ltd.
5 * http://www.samsung.com/
6 *
7 * Portions of this code from linux/fs/ext2/acl.c
8 *
9 * Copyright (C) 2001-2003 Andreas Gruenbacher, <agruen@suse.de>
10 *
11 * This program is free software; you can redistribute it and/or modify
12 * it under the terms of the GNU General Public License version 2 as
13 * published by the Free Software Foundation.
14 */
15#include <linux/f2fs_fs.h>
16#include "f2fs.h"
17#include "xattr.h"
18#include "acl.h"
19
af48b85b
JK
20static inline size_t f2fs_acl_size(int count)
21{
22 if (count <= 4) {
23 return sizeof(struct f2fs_acl_header) +
24 count * sizeof(struct f2fs_acl_entry_short);
25 } else {
26 return sizeof(struct f2fs_acl_header) +
27 4 * sizeof(struct f2fs_acl_entry_short) +
28 (count - 4) * sizeof(struct f2fs_acl_entry);
29 }
30}
31
32static inline int f2fs_acl_count(size_t size)
33{
34 ssize_t s;
35 size -= sizeof(struct f2fs_acl_header);
36 s = size - 4 * sizeof(struct f2fs_acl_entry_short);
37 if (s < 0) {
38 if (size % sizeof(struct f2fs_acl_entry_short))
39 return -1;
40 return size / sizeof(struct f2fs_acl_entry_short);
41 } else {
42 if (s % sizeof(struct f2fs_acl_entry))
43 return -1;
44 return s / sizeof(struct f2fs_acl_entry) + 4;
45 }
46}
47
48static struct posix_acl *f2fs_acl_from_disk(const char *value, size_t size)
49{
50 int i, count;
51 struct posix_acl *acl;
52 struct f2fs_acl_header *hdr = (struct f2fs_acl_header *)value;
53 struct f2fs_acl_entry *entry = (struct f2fs_acl_entry *)(hdr + 1);
54 const char *end = value + size;
55
56 if (hdr->a_version != cpu_to_le32(F2FS_ACL_VERSION))
57 return ERR_PTR(-EINVAL);
58
59 count = f2fs_acl_count(size);
60 if (count < 0)
61 return ERR_PTR(-EINVAL);
62 if (count == 0)
63 return NULL;
64
dd802406 65 acl = posix_acl_alloc(count, GFP_NOFS);
af48b85b
JK
66 if (!acl)
67 return ERR_PTR(-ENOMEM);
68
69 for (i = 0; i < count; i++) {
70
71 if ((char *)entry > end)
72 goto fail;
73
74 acl->a_entries[i].e_tag = le16_to_cpu(entry->e_tag);
75 acl->a_entries[i].e_perm = le16_to_cpu(entry->e_perm);
76
77 switch (acl->a_entries[i].e_tag) {
78 case ACL_USER_OBJ:
79 case ACL_GROUP_OBJ:
80 case ACL_MASK:
81 case ACL_OTHER:
af48b85b
JK
82 entry = (struct f2fs_acl_entry *)((char *)entry +
83 sizeof(struct f2fs_acl_entry_short));
84 break;
85
86 case ACL_USER:
87 acl->a_entries[i].e_uid =
88 make_kuid(&init_user_ns,
89 le32_to_cpu(entry->e_id));
90 entry = (struct f2fs_acl_entry *)((char *)entry +
91 sizeof(struct f2fs_acl_entry));
92 break;
93 case ACL_GROUP:
94 acl->a_entries[i].e_gid =
95 make_kgid(&init_user_ns,
96 le32_to_cpu(entry->e_id));
97 entry = (struct f2fs_acl_entry *)((char *)entry +
98 sizeof(struct f2fs_acl_entry));
99 break;
100 default:
101 goto fail;
102 }
103 }
104 if ((char *)entry != end)
105 goto fail;
106 return acl;
107fail:
108 posix_acl_release(acl);
109 return ERR_PTR(-EINVAL);
110}
111
1ecc0c5c
CY
112static void *f2fs_acl_to_disk(struct f2fs_sb_info *sbi,
113 const struct posix_acl *acl, size_t *size)
af48b85b
JK
114{
115 struct f2fs_acl_header *f2fs_acl;
116 struct f2fs_acl_entry *entry;
117 int i;
118
1ecc0c5c
CY
119 f2fs_acl = f2fs_kmalloc(sbi, sizeof(struct f2fs_acl_header) +
120 acl->a_count * sizeof(struct f2fs_acl_entry),
121 GFP_NOFS);
af48b85b
JK
122 if (!f2fs_acl)
123 return ERR_PTR(-ENOMEM);
124
125 f2fs_acl->a_version = cpu_to_le32(F2FS_ACL_VERSION);
126 entry = (struct f2fs_acl_entry *)(f2fs_acl + 1);
127
128 for (i = 0; i < acl->a_count; i++) {
129
130 entry->e_tag = cpu_to_le16(acl->a_entries[i].e_tag);
131 entry->e_perm = cpu_to_le16(acl->a_entries[i].e_perm);
132
133 switch (acl->a_entries[i].e_tag) {
134 case ACL_USER:
135 entry->e_id = cpu_to_le32(
136 from_kuid(&init_user_ns,
137 acl->a_entries[i].e_uid));
138 entry = (struct f2fs_acl_entry *)((char *)entry +
139 sizeof(struct f2fs_acl_entry));
140 break;
141 case ACL_GROUP:
142 entry->e_id = cpu_to_le32(
143 from_kgid(&init_user_ns,
144 acl->a_entries[i].e_gid));
145 entry = (struct f2fs_acl_entry *)((char *)entry +
146 sizeof(struct f2fs_acl_entry));
147 break;
148 case ACL_USER_OBJ:
149 case ACL_GROUP_OBJ:
150 case ACL_MASK:
151 case ACL_OTHER:
152 entry = (struct f2fs_acl_entry *)((char *)entry +
153 sizeof(struct f2fs_acl_entry_short));
154 break;
155 default:
156 goto fail;
157 }
158 }
159 *size = f2fs_acl_size(acl->a_count);
160 return (void *)f2fs_acl;
161
162fail:
163 kfree(f2fs_acl);
164 return ERR_PTR(-EINVAL);
165}
166
bce8d112
JK
167static struct posix_acl *__f2fs_get_acl(struct inode *inode, int type,
168 struct page *dpage)
af48b85b 169{
af48b85b
JK
170 int name_index = F2FS_XATTR_INDEX_POSIX_ACL_DEFAULT;
171 void *value = NULL;
172 struct posix_acl *acl;
173 int retval;
174
af48b85b
JK
175 if (type == ACL_TYPE_ACCESS)
176 name_index = F2FS_XATTR_INDEX_POSIX_ACL_ACCESS;
177
bce8d112 178 retval = f2fs_getxattr(inode, name_index, "", NULL, 0, dpage);
af48b85b 179 if (retval > 0) {
1ecc0c5c 180 value = f2fs_kmalloc(F2FS_I_SB(inode), retval, GFP_F2FS_ZERO);
af48b85b
JK
181 if (!value)
182 return ERR_PTR(-ENOMEM);
bce8d112
JK
183 retval = f2fs_getxattr(inode, name_index, "", value,
184 retval, dpage);
af48b85b
JK
185 }
186
c1b75eab 187 if (retval > 0)
af48b85b 188 acl = f2fs_acl_from_disk(value, retval);
c1b75eab
JK
189 else if (retval == -ENODATA)
190 acl = NULL;
191 else
192 acl = ERR_PTR(retval);
af48b85b 193 kfree(value);
c1b75eab 194
af48b85b
JK
195 return acl;
196}
197
bce8d112
JK
198struct posix_acl *f2fs_get_acl(struct inode *inode, int type)
199{
200 return __f2fs_get_acl(inode, type, NULL);
201}
202
a6dda0e6 203static int __f2fs_set_acl(struct inode *inode, int type,
2ed2d5b3 204 struct posix_acl *acl, struct page *ipage)
af48b85b 205{
af48b85b
JK
206 int name_index;
207 void *value = NULL;
208 size_t size = 0;
209 int error;
14af20fc 210 umode_t mode = inode->i_mode;
af48b85b 211
af48b85b
JK
212 switch (type) {
213 case ACL_TYPE_ACCESS:
214 name_index = F2FS_XATTR_INDEX_POSIX_ACL_ACCESS;
c925dc16 215 if (acl && !ipage) {
14af20fc 216 error = posix_acl_update_mode(inode, &mode, &acl);
07393101 217 if (error)
af48b85b 218 return error;
14af20fc 219 set_acl_inode(inode, mode);
af48b85b
JK
220 }
221 break;
222
223 case ACL_TYPE_DEFAULT:
224 name_index = F2FS_XATTR_INDEX_POSIX_ACL_DEFAULT;
225 if (!S_ISDIR(inode->i_mode))
226 return acl ? -EACCES : 0;
227 break;
228
229 default:
230 return -EINVAL;
231 }
232
233 if (acl) {
1ecc0c5c 234 value = f2fs_acl_to_disk(F2FS_I_SB(inode), acl, &size);
af48b85b 235 if (IS_ERR(value)) {
91942321 236 clear_inode_flag(inode, FI_ACL_MODE);
68390dd9 237 return PTR_ERR(value);
af48b85b
JK
238 }
239 }
240
c02745ef 241 error = f2fs_setxattr(inode, name_index, "", value, size, ipage, 0);
af48b85b
JK
242
243 kfree(value);
244 if (!error)
245 set_cached_acl(inode, type, acl);
246
91942321 247 clear_inode_flag(inode, FI_ACL_MODE);
af48b85b
JK
248 return error;
249}
250
a6dda0e6 251int f2fs_set_acl(struct inode *inode, struct posix_acl *acl, int type)
af48b85b 252{
a6dda0e6 253 return __f2fs_set_acl(inode, type, acl, NULL);
af48b85b
JK
254}
255
bce8d112
JK
256/*
257 * Most part of f2fs_acl_clone, f2fs_acl_create_masq, f2fs_acl_create
258 * are copied from posix_acl.c
259 */
260static struct posix_acl *f2fs_acl_clone(const struct posix_acl *acl,
261 gfp_t flags)
262{
263 struct posix_acl *clone = NULL;
264
265 if (acl) {
266 int size = sizeof(struct posix_acl) + acl->a_count *
267 sizeof(struct posix_acl_entry);
268 clone = kmemdup(acl, size, flags);
269 if (clone)
270 atomic_set(&clone->a_refcount, 1);
271 }
272 return clone;
273}
274
275static int f2fs_acl_create_masq(struct posix_acl *acl, umode_t *mode_p)
276{
277 struct posix_acl_entry *pa, *pe;
278 struct posix_acl_entry *group_obj = NULL, *mask_obj = NULL;
279 umode_t mode = *mode_p;
280 int not_equiv = 0;
281
282 /* assert(atomic_read(acl->a_refcount) == 1); */
283
284 FOREACH_ACL_ENTRY(pa, acl, pe) {
285 switch(pa->e_tag) {
286 case ACL_USER_OBJ:
287 pa->e_perm &= (mode >> 6) | ~S_IRWXO;
288 mode &= (pa->e_perm << 6) | ~S_IRWXU;
289 break;
290
291 case ACL_USER:
292 case ACL_GROUP:
293 not_equiv = 1;
294 break;
295
296 case ACL_GROUP_OBJ:
297 group_obj = pa;
298 break;
299
300 case ACL_OTHER:
301 pa->e_perm &= mode | ~S_IRWXO;
302 mode &= pa->e_perm | ~S_IRWXO;
303 break;
304
305 case ACL_MASK:
306 mask_obj = pa;
307 not_equiv = 1;
308 break;
309
310 default:
311 return -EIO;
312 }
313 }
314
315 if (mask_obj) {
316 mask_obj->e_perm &= (mode >> 3) | ~S_IRWXO;
317 mode &= (mask_obj->e_perm << 3) | ~S_IRWXG;
318 } else {
319 if (!group_obj)
320 return -EIO;
321 group_obj->e_perm &= (mode >> 3) | ~S_IRWXO;
322 mode &= (group_obj->e_perm << 3) | ~S_IRWXG;
323 }
324
325 *mode_p = (*mode_p & ~S_IRWXUGO) | mode;
326 return not_equiv;
327}
328
329static int f2fs_acl_create(struct inode *dir, umode_t *mode,
330 struct posix_acl **default_acl, struct posix_acl **acl,
331 struct page *dpage)
332{
333 struct posix_acl *p;
272e083f 334 struct posix_acl *clone;
bce8d112
JK
335 int ret;
336
272e083f
CY
337 *acl = NULL;
338 *default_acl = NULL;
339
bce8d112 340 if (S_ISLNK(*mode) || !IS_POSIXACL(dir))
272e083f 341 return 0;
bce8d112
JK
342
343 p = __f2fs_get_acl(dir, ACL_TYPE_DEFAULT, dpage);
272e083f
CY
344 if (!p || p == ERR_PTR(-EOPNOTSUPP)) {
345 *mode &= ~current_umask();
346 return 0;
bce8d112 347 }
272e083f
CY
348 if (IS_ERR(p))
349 return PTR_ERR(p);
bce8d112 350
272e083f
CY
351 clone = f2fs_acl_clone(p, GFP_NOFS);
352 if (!clone)
83dfe53c 353 goto no_mem;
bce8d112 354
272e083f 355 ret = f2fs_acl_create_masq(clone, mode);
83dfe53c
CY
356 if (ret < 0)
357 goto no_mem_clone;
bce8d112 358
272e083f
CY
359 if (ret == 0)
360 posix_acl_release(clone);
361 else
362 *acl = clone;
bce8d112 363
272e083f 364 if (!S_ISDIR(*mode))
bce8d112 365 posix_acl_release(p);
272e083f 366 else
bce8d112 367 *default_acl = p;
bce8d112 368
bce8d112 369 return 0;
83dfe53c
CY
370
371no_mem_clone:
272e083f 372 posix_acl_release(clone);
83dfe53c
CY
373no_mem:
374 posix_acl_release(p);
375 return -ENOMEM;
bce8d112
JK
376}
377
378int f2fs_init_acl(struct inode *inode, struct inode *dir, struct page *ipage,
379 struct page *dpage)
af48b85b 380{
bce8d112 381 struct posix_acl *default_acl = NULL, *acl = NULL;
a6dda0e6 382 int error = 0;
af48b85b 383
bce8d112 384 error = f2fs_acl_create(dir, &inode->i_mode, &default_acl, &acl, dpage);
af48b85b
JK
385 if (error)
386 return error;
b8b60e1a 387
7c45729a 388 f2fs_mark_inode_dirty_sync(inode, true);
205b9822 389
a6dda0e6
CH
390 if (default_acl) {
391 error = __f2fs_set_acl(inode, ACL_TYPE_DEFAULT, default_acl,
392 ipage);
393 posix_acl_release(default_acl);
394 }
395 if (acl) {
3b6709b7 396 if (!error)
a6dda0e6
CH
397 error = __f2fs_set_acl(inode, ACL_TYPE_ACCESS, acl,
398 ipage);
399 posix_acl_release(acl);
af48b85b
JK
400 }
401
af48b85b
JK
402 return error;
403}