ocfs2: add ocfs2_check_acl
[GitHub/mt8127/android_kernel_alcatel_ttab.git] / fs / ocfs2 / acl.c
CommitLineData
929fb014
TY
1/* -*- mode: c; c-basic-offset: 8; -*-
2 * vim: noexpandtab sw=8 ts=8 sts=0:
3 *
4 * acl.c
5 *
6 * Copyright (C) 2004, 2008 Oracle. All rights reserved.
7 *
8 * CREDITS:
9 * Lots of code in this file is copy from linux/fs/ext3/acl.c.
10 * Copyright (C) 2001-2003 Andreas Gruenbacher, <agruen@suse.de>
11 *
12 * This program is free software; you can redistribute it and/or
13 * modify it under the terms of the GNU General Public
14 * License version 2 as published by the Free Software Foundation.
15 *
16 * This program is distributed in the hope that it will be useful,
17 * but WITHOUT ANY WARRANTY; without even the implied warranty of
18 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
19 * General Public License for more details.
20 */
21
22#include <linux/init.h>
23#include <linux/module.h>
24#include <linux/string.h>
25
26#define MLOG_MASK_PREFIX ML_INODE
27#include <cluster/masklog.h>
28
29#include "ocfs2.h"
30#include "alloc.h"
31#include "dlmglue.h"
32#include "file.h"
33#include "ocfs2_fs.h"
34
35#include "xattr.h"
36#include "acl.h"
37
38/*
39 * Convert from xattr value to acl struct.
40 */
41static struct posix_acl *ocfs2_acl_from_xattr(const void *value, size_t size)
42{
43 int n, count;
44 struct posix_acl *acl;
45
46 if (!value)
47 return NULL;
48 if (size < sizeof(struct posix_acl_entry))
49 return ERR_PTR(-EINVAL);
50
51 count = size / sizeof(struct posix_acl_entry);
52 if (count < 0)
53 return ERR_PTR(-EINVAL);
54 if (count == 0)
55 return NULL;
56
57 acl = posix_acl_alloc(count, GFP_NOFS);
58 if (!acl)
59 return ERR_PTR(-ENOMEM);
60 for (n = 0; n < count; n++) {
61 struct ocfs2_acl_entry *entry =
62 (struct ocfs2_acl_entry *)value;
63
64 acl->a_entries[n].e_tag = le16_to_cpu(entry->e_tag);
65 acl->a_entries[n].e_perm = le16_to_cpu(entry->e_perm);
66 acl->a_entries[n].e_id = le32_to_cpu(entry->e_id);
67 value += sizeof(struct posix_acl_entry);
68
69 }
70 return acl;
71}
72
73/*
74 * Convert acl struct to xattr value.
75 */
76static void *ocfs2_acl_to_xattr(const struct posix_acl *acl, size_t *size)
77{
78 struct ocfs2_acl_entry *entry = NULL;
79 char *ocfs2_acl;
80 size_t n;
81
82 *size = acl->a_count * sizeof(struct posix_acl_entry);
83
84 ocfs2_acl = kmalloc(*size, GFP_NOFS);
85 if (!ocfs2_acl)
86 return ERR_PTR(-ENOMEM);
87
88 entry = (struct ocfs2_acl_entry *)ocfs2_acl;
89 for (n = 0; n < acl->a_count; n++, entry++) {
90 entry->e_tag = cpu_to_le16(acl->a_entries[n].e_tag);
91 entry->e_perm = cpu_to_le16(acl->a_entries[n].e_perm);
92 entry->e_id = cpu_to_le32(acl->a_entries[n].e_id);
93 }
94 return ocfs2_acl;
95}
96
97static struct posix_acl *ocfs2_get_acl_nolock(struct inode *inode,
98 int type,
99 struct buffer_head *di_bh)
100{
101 struct ocfs2_super *osb = OCFS2_SB(inode->i_sb);
102 int name_index;
103 char *value = NULL;
104 struct posix_acl *acl;
105 int retval;
106
107 if (!(osb->s_mount_opt & OCFS2_MOUNT_POSIX_ACL))
108 return NULL;
109
110 switch (type) {
111 case ACL_TYPE_ACCESS:
112 name_index = OCFS2_XATTR_INDEX_POSIX_ACL_ACCESS;
113 break;
114 case ACL_TYPE_DEFAULT:
115 name_index = OCFS2_XATTR_INDEX_POSIX_ACL_DEFAULT;
116 break;
117 default:
118 return ERR_PTR(-EINVAL);
119 }
120
121 retval = ocfs2_xattr_get_nolock(inode, di_bh, name_index, "", NULL, 0);
122 if (retval > 0) {
123 value = kmalloc(retval, GFP_NOFS);
124 if (!value)
125 return ERR_PTR(-ENOMEM);
126 retval = ocfs2_xattr_get_nolock(inode, di_bh, name_index,
127 "", value, retval);
128 }
129
130 if (retval > 0)
131 acl = ocfs2_acl_from_xattr(value, retval);
132 else if (retval == -ENODATA || retval == 0)
133 acl = NULL;
134 else
135 acl = ERR_PTR(retval);
136
137 kfree(value);
138
139 return acl;
140}
141
142
143/*
144 * Get posix acl.
145 */
146static struct posix_acl *ocfs2_get_acl(struct inode *inode, int type)
147{
148 struct ocfs2_super *osb = OCFS2_SB(inode->i_sb);
149 struct buffer_head *di_bh = NULL;
150 struct posix_acl *acl;
151 int ret;
152
153 if (!(osb->s_mount_opt & OCFS2_MOUNT_POSIX_ACL))
154 return NULL;
155
156 ret = ocfs2_inode_lock(inode, &di_bh, 0);
157 if (ret < 0) {
158 mlog_errno(ret);
159 acl = ERR_PTR(ret);
160 return acl;
161 }
162
163 acl = ocfs2_get_acl_nolock(inode, type, di_bh);
164
165 ocfs2_inode_unlock(inode, 0);
166
167 brelse(di_bh);
168
169 return acl;
170}
171
172/*
173 * Set the access or default ACL of an inode.
174 */
175static int ocfs2_set_acl(handle_t *handle,
176 struct inode *inode,
177 struct buffer_head *di_bh,
178 int type,
179 struct posix_acl *acl,
180 struct ocfs2_alloc_context *meta_ac,
181 struct ocfs2_alloc_context *data_ac)
182{
183 int name_index;
184 void *value = NULL;
185 size_t size = 0;
186 int ret;
187
188 if (S_ISLNK(inode->i_mode))
189 return -EOPNOTSUPP;
190
191 switch (type) {
192 case ACL_TYPE_ACCESS:
193 name_index = OCFS2_XATTR_INDEX_POSIX_ACL_ACCESS;
194 if (acl) {
195 mode_t mode = inode->i_mode;
196 ret = posix_acl_equiv_mode(acl, &mode);
197 if (ret < 0)
198 return ret;
199 else {
200 inode->i_mode = mode;
201 if (ret == 0)
202 acl = NULL;
203 }
204 }
205 break;
206 case ACL_TYPE_DEFAULT:
207 name_index = OCFS2_XATTR_INDEX_POSIX_ACL_DEFAULT;
208 if (!S_ISDIR(inode->i_mode))
209 return acl ? -EACCES : 0;
210 break;
211 default:
212 return -EINVAL;
213 }
214
215 if (acl) {
216 value = ocfs2_acl_to_xattr(acl, &size);
217 if (IS_ERR(value))
218 return (int)PTR_ERR(value);
219 }
220
221 if (handle)
222 ret = ocfs2_xattr_set_handle(handle, inode, di_bh, name_index,
223 "", value, size, 0,
224 meta_ac, data_ac);
225 else
226 ret = ocfs2_xattr_set(inode, name_index, "", value, size, 0);
227
228 kfree(value);
229
230 return ret;
231}
232
23fc2702
TY
233int ocfs2_check_acl(struct inode *inode, int mask)
234{
235 struct posix_acl *acl = ocfs2_get_acl(inode, ACL_TYPE_ACCESS);
236
237 if (IS_ERR(acl))
238 return PTR_ERR(acl);
239 if (acl) {
240 int ret = posix_acl_permission(inode, acl, mask);
241 posix_acl_release(acl);
242 return ret;
243 }
244
245 return -EAGAIN;
246}
247
929fb014
TY
248static size_t ocfs2_xattr_list_acl_access(struct inode *inode,
249 char *list,
250 size_t list_len,
251 const char *name,
252 size_t name_len)
253{
254 struct ocfs2_super *osb = OCFS2_SB(inode->i_sb);
255 const size_t size = sizeof(POSIX_ACL_XATTR_ACCESS);
256
257 if (!(osb->s_mount_opt & OCFS2_MOUNT_POSIX_ACL))
258 return 0;
259
260 if (list && size <= list_len)
261 memcpy(list, POSIX_ACL_XATTR_ACCESS, size);
262 return size;
263}
264
265static size_t ocfs2_xattr_list_acl_default(struct inode *inode,
266 char *list,
267 size_t list_len,
268 const char *name,
269 size_t name_len)
270{
271 struct ocfs2_super *osb = OCFS2_SB(inode->i_sb);
272 const size_t size = sizeof(POSIX_ACL_XATTR_DEFAULT);
273
274 if (!(osb->s_mount_opt & OCFS2_MOUNT_POSIX_ACL))
275 return 0;
276
277 if (list && size <= list_len)
278 memcpy(list, POSIX_ACL_XATTR_DEFAULT, size);
279 return size;
280}
281
282static int ocfs2_xattr_get_acl(struct inode *inode,
283 int type,
284 void *buffer,
285 size_t size)
286{
287 struct ocfs2_super *osb = OCFS2_SB(inode->i_sb);
288 struct posix_acl *acl;
289 int ret;
290
291 if (!(osb->s_mount_opt & OCFS2_MOUNT_POSIX_ACL))
292 return -EOPNOTSUPP;
293
294 acl = ocfs2_get_acl(inode, type);
295 if (IS_ERR(acl))
296 return PTR_ERR(acl);
297 if (acl == NULL)
298 return -ENODATA;
299 ret = posix_acl_to_xattr(acl, buffer, size);
300 posix_acl_release(acl);
301
302 return ret;
303}
304
305static int ocfs2_xattr_get_acl_access(struct inode *inode,
306 const char *name,
307 void *buffer,
308 size_t size)
309{
310 if (strcmp(name, "") != 0)
311 return -EINVAL;
312 return ocfs2_xattr_get_acl(inode, ACL_TYPE_ACCESS, buffer, size);
313}
314
315static int ocfs2_xattr_get_acl_default(struct inode *inode,
316 const char *name,
317 void *buffer,
318 size_t size)
319{
320 if (strcmp(name, "") != 0)
321 return -EINVAL;
322 return ocfs2_xattr_get_acl(inode, ACL_TYPE_DEFAULT, buffer, size);
323}
324
325static int ocfs2_xattr_set_acl(struct inode *inode,
326 int type,
327 const void *value,
328 size_t size)
329{
330 struct ocfs2_super *osb = OCFS2_SB(inode->i_sb);
331 struct posix_acl *acl;
332 int ret = 0;
333
334 if (!(osb->s_mount_opt & OCFS2_MOUNT_POSIX_ACL))
335 return -EOPNOTSUPP;
336
337 if (!is_owner_or_cap(inode))
338 return -EPERM;
339
340 if (value) {
341 acl = posix_acl_from_xattr(value, size);
342 if (IS_ERR(acl))
343 return PTR_ERR(acl);
344 else if (acl) {
345 ret = posix_acl_valid(acl);
346 if (ret)
347 goto cleanup;
348 }
349 } else
350 acl = NULL;
351
352 ret = ocfs2_set_acl(NULL, inode, NULL, type, acl, NULL, NULL);
353
354cleanup:
355 posix_acl_release(acl);
356 return ret;
357}
358
359static int ocfs2_xattr_set_acl_access(struct inode *inode,
360 const char *name,
361 const void *value,
362 size_t size,
363 int flags)
364{
365 if (strcmp(name, "") != 0)
366 return -EINVAL;
367 return ocfs2_xattr_set_acl(inode, ACL_TYPE_ACCESS, value, size);
368}
369
370static int ocfs2_xattr_set_acl_default(struct inode *inode,
371 const char *name,
372 const void *value,
373 size_t size,
374 int flags)
375{
376 if (strcmp(name, "") != 0)
377 return -EINVAL;
378 return ocfs2_xattr_set_acl(inode, ACL_TYPE_DEFAULT, value, size);
379}
380
381struct xattr_handler ocfs2_xattr_acl_access_handler = {
382 .prefix = POSIX_ACL_XATTR_ACCESS,
383 .list = ocfs2_xattr_list_acl_access,
384 .get = ocfs2_xattr_get_acl_access,
385 .set = ocfs2_xattr_set_acl_access,
386};
387
388struct xattr_handler ocfs2_xattr_acl_default_handler = {
389 .prefix = POSIX_ACL_XATTR_DEFAULT,
390 .list = ocfs2_xattr_list_acl_default,
391 .get = ocfs2_xattr_get_acl_default,
392 .set = ocfs2_xattr_set_acl_default,
393};