set CONFIG_LOCALVERSION_AUTO
[GitHub/mt8127/android_kernel_alcatel_ttab.git] / fs / open.c
CommitLineData
1da177e4
LT
1/*
2 * linux/fs/open.c
3 *
4 * Copyright (C) 1991, 1992 Linus Torvalds
5 */
6
7#include <linux/string.h>
8#include <linux/mm.h>
1da177e4 9#include <linux/file.h>
9f3acc31 10#include <linux/fdtable.h>
0eeca283 11#include <linux/fsnotify.h>
1da177e4 12#include <linux/module.h>
1da177e4
LT
13#include <linux/tty.h>
14#include <linux/namei.h>
15#include <linux/backing-dev.h>
16f7e0fe 16#include <linux/capability.h>
086f7316 17#include <linux/securebits.h>
1da177e4
LT
18#include <linux/security.h>
19#include <linux/mount.h>
5590ff0d 20#include <linux/fcntl.h>
5a0e3ad6 21#include <linux/slab.h>
1da177e4
LT
22#include <asm/uaccess.h>
23#include <linux/fs.h>
ef3daeda 24#include <linux/personality.h>
1da177e4
LT
25#include <linux/pagemap.h>
26#include <linux/syscalls.h>
ab2af1f5 27#include <linux/rcupdate.h>
73241ccc 28#include <linux/audit.h>
97ac7350 29#include <linux/falloc.h>
5ad4e53b 30#include <linux/fs_struct.h>
b65a9cfc 31#include <linux/ima.h>
2dfc1cae 32#include <linux/dnotify.h>
3f6d078d 33#include <linux/compat.h>
1da177e4 34
e81e3f4d
EP
35#include "internal.h"
36
4a30131e
N
37int do_truncate(struct dentry *dentry, loff_t length, unsigned int time_attrs,
38 struct file *filp)
1da177e4 39{
939a9421 40 int ret;
1da177e4
LT
41 struct iattr newattrs;
42
43 /* Not pretty: "inode->i_size" shouldn't really be signed. But it is. */
44 if (length < 0)
45 return -EINVAL;
46
47 newattrs.ia_size = length;
4a30131e 48 newattrs.ia_valid = ATTR_SIZE | time_attrs;
cc4e69de
MS
49 if (filp) {
50 newattrs.ia_file = filp;
51 newattrs.ia_valid |= ATTR_FILE;
52 }
1da177e4 53
7b82dc0e 54 /* Remove suid/sgid on truncate too */
939a9421
AW
55 ret = should_remove_suid(dentry);
56 if (ret)
57 newattrs.ia_valid |= ret | ATTR_FORCE;
7b82dc0e 58
1b1dcc1b 59 mutex_lock(&dentry->d_inode->i_mutex);
939a9421 60 ret = notify_change(dentry, &newattrs);
1b1dcc1b 61 mutex_unlock(&dentry->d_inode->i_mutex);
939a9421 62 return ret;
1da177e4
LT
63}
64
a02de960 65long vfs_truncate(struct path *path, loff_t length)
1da177e4 66{
2d8f3038 67 struct inode *inode;
a02de960 68 long error;
1da177e4 69
a02de960 70 inode = path->dentry->d_inode;
1da177e4
LT
71
72 /* For directories it's -EISDIR, for other non-regulars - -EINVAL */
1da177e4 73 if (S_ISDIR(inode->i_mode))
a02de960 74 return -EISDIR;
1da177e4 75 if (!S_ISREG(inode->i_mode))
a02de960 76 return -EINVAL;
1da177e4 77
a02de960 78 error = mnt_want_write(path->mnt);
1da177e4 79 if (error)
a02de960 80 goto out;
1da177e4 81
256984a8 82 error = inode_permission(inode, MAY_WRITE);
9ac9b847
DH
83 if (error)
84 goto mnt_drop_write_and_out;
1da177e4
LT
85
86 error = -EPERM;
c82e42da 87 if (IS_APPEND(inode))
9ac9b847 88 goto mnt_drop_write_and_out;
1da177e4 89
9700382c 90 error = get_write_access(inode);
1da177e4 91 if (error)
9ac9b847 92 goto mnt_drop_write_and_out;
1da177e4 93
9700382c 94 /*
95 * Make sure that there are no leases. get_write_access() protects
96 * against the truncate racing with a lease-granting setlease().
97 */
8737c930 98 error = break_lease(inode, O_WRONLY);
1da177e4 99 if (error)
9700382c 100 goto put_write_and_out;
1da177e4
LT
101
102 error = locks_verify_truncate(inode, NULL, length);
be6d3e56 103 if (!error)
a02de960 104 error = security_path_truncate(path);
907f4554 105 if (!error)
a02de960 106 error = do_truncate(path->dentry, length, 0, NULL);
1da177e4 107
9700382c 108put_write_and_out:
109 put_write_access(inode);
9ac9b847 110mnt_drop_write_and_out:
a02de960 111 mnt_drop_write(path->mnt);
1da177e4
LT
112out:
113 return error;
114}
a02de960
DH
115EXPORT_SYMBOL_GPL(vfs_truncate);
116
117static long do_sys_truncate(const char __user *pathname, loff_t length)
118{
48f7530d 119 unsigned int lookup_flags = LOOKUP_FOLLOW;
a02de960
DH
120 struct path path;
121 int error;
122
123 if (length < 0) /* sorry, but loff_t says... */
124 return -EINVAL;
125
48f7530d
JL
126retry:
127 error = user_path_at(AT_FDCWD, pathname, lookup_flags, &path);
a02de960
DH
128 if (!error) {
129 error = vfs_truncate(&path, length);
130 path_put(&path);
131 }
48f7530d
JL
132 if (retry_estale(error, lookup_flags)) {
133 lookup_flags |= LOOKUP_REVAL;
134 goto retry;
135 }
a02de960
DH
136 return error;
137}
1da177e4 138
4fd8da8d 139SYSCALL_DEFINE2(truncate, const char __user *, path, long, length)
1da177e4 140{
4fd8da8d 141 return do_sys_truncate(path, length);
1da177e4
LT
142}
143
3f6d078d
AV
144#ifdef CONFIG_COMPAT
145COMPAT_SYSCALL_DEFINE2(truncate, const char __user *, path, compat_off_t, length)
146{
147 return do_sys_truncate(path, length);
148}
149#endif
150
b01ec0ef 151static long do_sys_ftruncate(unsigned int fd, loff_t length, int small)
1da177e4 152{
bf2965d5 153 struct inode *inode;
1da177e4 154 struct dentry *dentry;
2903ff01 155 struct fd f;
1da177e4
LT
156 int error;
157
158 error = -EINVAL;
159 if (length < 0)
160 goto out;
161 error = -EBADF;
2903ff01
AV
162 f = fdget(fd);
163 if (!f.file)
1da177e4
LT
164 goto out;
165
166 /* explicitly opened as large or we are on 64-bit box */
2903ff01 167 if (f.file->f_flags & O_LARGEFILE)
1da177e4
LT
168 small = 0;
169
2903ff01 170 dentry = f.file->f_path.dentry;
1da177e4
LT
171 inode = dentry->d_inode;
172 error = -EINVAL;
2903ff01 173 if (!S_ISREG(inode->i_mode) || !(f.file->f_mode & FMODE_WRITE))
1da177e4
LT
174 goto out_putf;
175
176 error = -EINVAL;
177 /* Cannot ftruncate over 2^31 bytes without large file support */
178 if (small && length > MAX_NON_LFS)
179 goto out_putf;
180
181 error = -EPERM;
182 if (IS_APPEND(inode))
183 goto out_putf;
184
14da9200 185 sb_start_write(inode->i_sb);
2903ff01 186 error = locks_verify_truncate(inode, f.file, length);
be6d3e56 187 if (!error)
2903ff01 188 error = security_path_truncate(&f.file->f_path);
1da177e4 189 if (!error)
2903ff01 190 error = do_truncate(dentry, length, ATTR_MTIME|ATTR_CTIME, f.file);
14da9200 191 sb_end_write(inode->i_sb);
1da177e4 192out_putf:
2903ff01 193 fdput(f);
1da177e4
LT
194out:
195 return error;
196}
197
bdc480e3 198SYSCALL_DEFINE2(ftruncate, unsigned int, fd, unsigned long, length)
1da177e4 199{
2cf09666 200 return do_sys_ftruncate(fd, length, 1);
1da177e4
LT
201}
202
3f6d078d
AV
203#ifdef CONFIG_COMPAT
204COMPAT_SYSCALL_DEFINE2(ftruncate, unsigned int, fd, compat_ulong_t, length)
205{
206 return do_sys_ftruncate(fd, length, 1);
207}
208#endif
209
1da177e4
LT
210/* LFS versions of truncate are only needed on 32 bit machines */
211#if BITS_PER_LONG == 32
4a0fd5bf 212SYSCALL_DEFINE2(truncate64, const char __user *, path, loff_t, length)
1da177e4
LT
213{
214 return do_sys_truncate(path, length);
215}
216
4a0fd5bf 217SYSCALL_DEFINE2(ftruncate64, unsigned int, fd, loff_t, length)
1da177e4 218{
2cf09666 219 return do_sys_ftruncate(fd, length, 0);
1da177e4 220}
6673e0c3 221#endif /* BITS_PER_LONG == 32 */
1da177e4 222
3e63cbb1
AJ
223
224int do_fallocate(struct file *file, int mode, loff_t offset, loff_t len)
97ac7350 225{
496ad9aa 226 struct inode *inode = file_inode(file);
3e63cbb1 227 long ret;
97ac7350
AA
228
229 if (offset < 0 || len <= 0)
3e63cbb1 230 return -EINVAL;
97ac7350
AA
231
232 /* Return error if mode is not supported */
79124f18
JB
233 if (mode & ~(FALLOC_FL_KEEP_SIZE | FALLOC_FL_PUNCH_HOLE))
234 return -EOPNOTSUPP;
235
236 /* Punch hole must have keep size set */
237 if ((mode & FALLOC_FL_PUNCH_HOLE) &&
238 !(mode & FALLOC_FL_KEEP_SIZE))
3e63cbb1 239 return -EOPNOTSUPP;
97ac7350 240
97ac7350 241 if (!(file->f_mode & FMODE_WRITE))
3e63cbb1 242 return -EBADF;
1ca551c6
MS
243
244 /* It's not possible punch hole on append only file */
245 if (mode & FALLOC_FL_PUNCH_HOLE && IS_APPEND(inode))
246 return -EPERM;
247
248 if (IS_IMMUTABLE(inode))
249 return -EPERM;
250
97ac7350
AA
251 /*
252 * Revalidate the write permissions, in case security policy has
253 * changed since the files were opened.
254 */
255 ret = security_file_permission(file, MAY_WRITE);
256 if (ret)
3e63cbb1 257 return ret;
97ac7350 258
97ac7350 259 if (S_ISFIFO(inode->i_mode))
3e63cbb1 260 return -ESPIPE;
97ac7350 261
97ac7350
AA
262 /*
263 * Let individual file system decide if it supports preallocation
264 * for directories or not.
265 */
266 if (!S_ISREG(inode->i_mode) && !S_ISDIR(inode->i_mode))
3e63cbb1 267 return -ENODEV;
97ac7350 268
97ac7350
AA
269 /* Check for wrap through zero too */
270 if (((offset + len) > inode->i_sb->s_maxbytes) || ((offset + len) < 0))
3e63cbb1 271 return -EFBIG;
97ac7350 272
2fe17c10 273 if (!file->f_op->fallocate)
3e63cbb1 274 return -EOPNOTSUPP;
97ac7350 275
14da9200
JK
276 sb_start_write(inode->i_sb);
277 ret = file->f_op->fallocate(file, mode, offset, len);
278 sb_end_write(inode->i_sb);
279 return ret;
3e63cbb1
AJ
280}
281
4a0fd5bf 282SYSCALL_DEFINE4(fallocate, int, fd, int, mode, loff_t, offset, loff_t, len)
3e63cbb1 283{
2903ff01 284 struct fd f = fdget(fd);
3e63cbb1
AJ
285 int error = -EBADF;
286
2903ff01
AV
287 if (f.file) {
288 error = do_fallocate(f.file, mode, offset, len);
289 fdput(f);
3e63cbb1 290 }
3e63cbb1 291 return error;
97ac7350 292}
3e63cbb1 293
1da177e4
LT
294/*
295 * access() needs to use the real uid/gid, not the effective uid/gid.
296 * We do this by temporarily clearing all FS-related capabilities and
297 * switching the fsuid/fsgid around to the real ones.
298 */
6559eed8 299SYSCALL_DEFINE3(faccessat, int, dfd, const char __user *, filename, int, mode)
1da177e4 300{
d84f4f99
DH
301 const struct cred *old_cred;
302 struct cred *override_cred;
2d8f3038 303 struct path path;
256984a8 304 struct inode *inode;
1da177e4 305 int res;
87fa5595 306 unsigned int lookup_flags = LOOKUP_FOLLOW;
1da177e4
LT
307
308 if (mode & ~S_IRWXO) /* where's F_OK, X_OK, W_OK, R_OK? */
309 return -EINVAL;
310
d84f4f99
DH
311 override_cred = prepare_creds();
312 if (!override_cred)
313 return -ENOMEM;
1da177e4 314
d84f4f99
DH
315 override_cred->fsuid = override_cred->uid;
316 override_cred->fsgid = override_cred->gid;
1da177e4 317
086f7316 318 if (!issecure(SECURE_NO_SETUID_FIXUP)) {
1cdcbec1 319 /* Clear the capabilities if we switch to a non-root user */
18815a18
EB
320 kuid_t root_uid = make_kuid(override_cred->user_ns, 0);
321 if (!uid_eq(override_cred->uid, root_uid))
d84f4f99 322 cap_clear(override_cred->cap_effective);
086f7316 323 else
d84f4f99
DH
324 override_cred->cap_effective =
325 override_cred->cap_permitted;
086f7316 326 }
1da177e4 327
d84f4f99 328 old_cred = override_creds(override_cred);
87fa5595
JL
329retry:
330 res = user_path_at(dfd, filename, lookup_flags, &path);
6902d925
DH
331 if (res)
332 goto out;
333
2d8f3038 334 inode = path.dentry->d_inode;
256984a8
AV
335
336 if ((mode & MAY_EXEC) && S_ISREG(inode->i_mode)) {
30524472
AV
337 /*
338 * MAY_EXEC on regular files is denied if the fs is mounted
339 * with the "noexec" flag.
340 */
341 res = -EACCES;
2d8f3038 342 if (path.mnt->mnt_flags & MNT_NOEXEC)
30524472
AV
343 goto out_path_release;
344 }
345
256984a8 346 res = inode_permission(inode, mode | MAY_ACCESS);
6902d925 347 /* SuS v2 requires we report a read only fs too */
256984a8 348 if (res || !(mode & S_IWOTH) || special_file(inode->i_mode))
6902d925 349 goto out_path_release;
2f676cbc
DH
350 /*
351 * This is a rare case where using __mnt_is_readonly()
352 * is OK without a mnt_want/drop_write() pair. Since
353 * no actual write to the fs is performed here, we do
354 * not need to telegraph to that to anyone.
355 *
356 * By doing this, we accept that this access is
357 * inherently racy and know that the fs may change
358 * state before we even see this result.
359 */
2d8f3038 360 if (__mnt_is_readonly(path.mnt))
6902d925 361 res = -EROFS;
1da177e4 362
6902d925 363out_path_release:
2d8f3038 364 path_put(&path);
87fa5595
JL
365 if (retry_estale(res, lookup_flags)) {
366 lookup_flags |= LOOKUP_REVAL;
367 goto retry;
368 }
6902d925 369out:
d84f4f99
DH
370 revert_creds(old_cred);
371 put_cred(override_cred);
1da177e4
LT
372 return res;
373}
374
ca013e94 375SYSCALL_DEFINE2(access, const char __user *, filename, int, mode)
5590ff0d
UD
376{
377 return sys_faccessat(AT_FDCWD, filename, mode);
378}
379
3cdad428 380SYSCALL_DEFINE1(chdir, const char __user *, filename)
1da177e4 381{
2d8f3038 382 struct path path;
1da177e4 383 int error;
0291c0a5
JL
384 unsigned int lookup_flags = LOOKUP_FOLLOW | LOOKUP_DIRECTORY;
385retry:
386 error = user_path_at(AT_FDCWD, filename, lookup_flags, &path);
1da177e4
LT
387 if (error)
388 goto out;
389
9cfcac81 390 error = inode_permission(path.dentry->d_inode, MAY_EXEC | MAY_CHDIR);
1da177e4
LT
391 if (error)
392 goto dput_and_out;
393
2d8f3038 394 set_fs_pwd(current->fs, &path);
1da177e4
LT
395
396dput_and_out:
2d8f3038 397 path_put(&path);
0291c0a5
JL
398 if (retry_estale(error, lookup_flags)) {
399 lookup_flags |= LOOKUP_REVAL;
400 goto retry;
401 }
1da177e4
LT
402out:
403 return error;
404}
405
3cdad428 406SYSCALL_DEFINE1(fchdir, unsigned int, fd)
1da177e4 407{
2903ff01 408 struct fd f = fdget_raw(fd);
1da177e4 409 struct inode *inode;
2903ff01 410 int error = -EBADF;
1da177e4
LT
411
412 error = -EBADF;
2903ff01 413 if (!f.file)
1da177e4
LT
414 goto out;
415
496ad9aa 416 inode = file_inode(f.file);
1da177e4
LT
417
418 error = -ENOTDIR;
419 if (!S_ISDIR(inode->i_mode))
420 goto out_putf;
421
9cfcac81 422 error = inode_permission(inode, MAY_EXEC | MAY_CHDIR);
1da177e4 423 if (!error)
2903ff01 424 set_fs_pwd(current->fs, &f.file->f_path);
1da177e4 425out_putf:
2903ff01 426 fdput(f);
1da177e4
LT
427out:
428 return error;
429}
430
3480b257 431SYSCALL_DEFINE1(chroot, const char __user *, filename)
1da177e4 432{
2d8f3038 433 struct path path;
1da177e4 434 int error;
2771261e
JL
435 unsigned int lookup_flags = LOOKUP_FOLLOW | LOOKUP_DIRECTORY;
436retry:
437 error = user_path_at(AT_FDCWD, filename, lookup_flags, &path);
1da177e4
LT
438 if (error)
439 goto out;
440
9cfcac81 441 error = inode_permission(path.dentry->d_inode, MAY_EXEC | MAY_CHDIR);
1da177e4
LT
442 if (error)
443 goto dput_and_out;
444
445 error = -EPERM;
a85fb273 446 if (!nsown_capable(CAP_SYS_CHROOT))
1da177e4 447 goto dput_and_out;
8b8efb44
TH
448 error = security_path_chroot(&path);
449 if (error)
450 goto dput_and_out;
1da177e4 451
2d8f3038 452 set_fs_root(current->fs, &path);
1da177e4
LT
453 error = 0;
454dput_and_out:
2d8f3038 455 path_put(&path);
2771261e
JL
456 if (retry_estale(error, lookup_flags)) {
457 lookup_flags |= LOOKUP_REVAL;
458 goto retry;
459 }
1da177e4
LT
460out:
461 return error;
462}
463
e57712eb 464static int chmod_common(struct path *path, umode_t mode)
1da177e4 465{
e57712eb 466 struct inode *inode = path->dentry->d_inode;
1da177e4 467 struct iattr newattrs;
e57712eb 468 int error;
1da177e4 469
e57712eb
AV
470 error = mnt_want_write(path->mnt);
471 if (error)
472 return error;
fe542cf5 473 mutex_lock(&inode->i_mutex);
cdcf116d 474 error = security_path_chmod(path, mode);
e57712eb 475 if (error)
fe542cf5 476 goto out_unlock;
1da177e4
LT
477 newattrs.ia_mode = (mode & S_IALLUGO) | (inode->i_mode & ~S_IALLUGO);
478 newattrs.ia_valid = ATTR_MODE | ATTR_CTIME;
e57712eb 479 error = notify_change(path->dentry, &newattrs);
fe542cf5 480out_unlock:
1b1dcc1b 481 mutex_unlock(&inode->i_mutex);
e57712eb
AV
482 mnt_drop_write(path->mnt);
483 return error;
484}
485
49f0a076 486SYSCALL_DEFINE2(fchmod, unsigned int, fd, umode_t, mode)
e57712eb
AV
487{
488 struct file * file;
489 int err = -EBADF;
490
491 file = fget(fd);
492 if (file) {
bfcec708 493 audit_inode(NULL, file->f_path.dentry, 0);
e57712eb
AV
494 err = chmod_common(&file->f_path, mode);
495 fput(file);
496 }
1da177e4
LT
497 return err;
498}
499
49f0a076 500SYSCALL_DEFINE3(fchmodat, int, dfd, const char __user *, filename, umode_t, mode)
1da177e4 501{
2d8f3038 502 struct path path;
1da177e4 503 int error;
14ff690c
JL
504 unsigned int lookup_flags = LOOKUP_FOLLOW;
505retry:
506 error = user_path_at(dfd, filename, lookup_flags, &path);
e57712eb
AV
507 if (!error) {
508 error = chmod_common(&path, mode);
509 path_put(&path);
14ff690c
JL
510 if (retry_estale(error, lookup_flags)) {
511 lookup_flags |= LOOKUP_REVAL;
512 goto retry;
513 }
e57712eb 514 }
1da177e4
LT
515 return error;
516}
517
49f0a076 518SYSCALL_DEFINE2(chmod, const char __user *, filename, umode_t, mode)
5590ff0d
UD
519{
520 return sys_fchmodat(AT_FDCWD, filename, mode);
521}
522
fe542cf5 523static int chown_common(struct path *path, uid_t user, gid_t group)
1da177e4 524{
fe542cf5 525 struct inode *inode = path->dentry->d_inode;
1da177e4
LT
526 int error;
527 struct iattr newattrs;
52137abe
EB
528 kuid_t uid;
529 kgid_t gid;
530
531 uid = make_kuid(current_user_ns(), user);
532 gid = make_kgid(current_user_ns(), group);
1da177e4 533
1da177e4
LT
534 newattrs.ia_valid = ATTR_CTIME;
535 if (user != (uid_t) -1) {
52137abe
EB
536 if (!uid_valid(uid))
537 return -EINVAL;
1da177e4 538 newattrs.ia_valid |= ATTR_UID;
52137abe 539 newattrs.ia_uid = uid;
1da177e4
LT
540 }
541 if (group != (gid_t) -1) {
52137abe
EB
542 if (!gid_valid(gid))
543 return -EINVAL;
1da177e4 544 newattrs.ia_valid |= ATTR_GID;
52137abe 545 newattrs.ia_gid = gid;
1da177e4
LT
546 }
547 if (!S_ISDIR(inode->i_mode))
b5376771
SH
548 newattrs.ia_valid |=
549 ATTR_KILL_SUID | ATTR_KILL_SGID | ATTR_KILL_PRIV;
1b1dcc1b 550 mutex_lock(&inode->i_mutex);
d2b31ca6 551 error = security_path_chown(path, uid, gid);
fe542cf5
TH
552 if (!error)
553 error = notify_change(path->dentry, &newattrs);
1b1dcc1b 554 mutex_unlock(&inode->i_mutex);
beb29e05 555
1da177e4
LT
556 return error;
557}
558
6559eed8
HC
559SYSCALL_DEFINE5(fchownat, int, dfd, const char __user *, filename, uid_t, user,
560 gid_t, group, int, flag)
5590ff0d 561{
2d8f3038 562 struct path path;
5590ff0d 563 int error = -EINVAL;
65cfc672 564 int lookup_flags;
5590ff0d 565
65cfc672 566 if ((flag & ~(AT_SYMLINK_NOFOLLOW | AT_EMPTY_PATH)) != 0)
5590ff0d
UD
567 goto out;
568
65cfc672
AV
569 lookup_flags = (flag & AT_SYMLINK_NOFOLLOW) ? 0 : LOOKUP_FOLLOW;
570 if (flag & AT_EMPTY_PATH)
571 lookup_flags |= LOOKUP_EMPTY;
99a5df37 572retry:
65cfc672 573 error = user_path_at(dfd, filename, lookup_flags, &path);
6902d925
DH
574 if (error)
575 goto out;
2d8f3038 576 error = mnt_want_write(path.mnt);
2af482a7
DH
577 if (error)
578 goto out_release;
fe542cf5 579 error = chown_common(&path, user, group);
2d8f3038 580 mnt_drop_write(path.mnt);
2af482a7 581out_release:
2d8f3038 582 path_put(&path);
99a5df37
JL
583 if (retry_estale(error, lookup_flags)) {
584 lookup_flags |= LOOKUP_REVAL;
585 goto retry;
586 }
5590ff0d
UD
587out:
588 return error;
589}
590
55e4def0 591SYSCALL_DEFINE3(chown, const char __user *, filename, uid_t, user, gid_t, group)
1da177e4 592{
55e4def0
DH
593 return sys_fchownat(AT_FDCWD, filename, user, group, 0);
594}
1da177e4 595
55e4def0
DH
596SYSCALL_DEFINE3(lchown, const char __user *, filename, uid_t, user, gid_t, group)
597{
598 return sys_fchownat(AT_FDCWD, filename, user, group,
599 AT_SYMLINK_NOFOLLOW);
1da177e4
LT
600}
601
ca013e94 602SYSCALL_DEFINE3(fchown, unsigned int, fd, uid_t, user, gid_t, group)
1da177e4 603{
2903ff01 604 struct fd f = fdget(fd);
1da177e4
LT
605 int error = -EBADF;
606
2903ff01 607 if (!f.file)
6902d925
DH
608 goto out;
609
2903ff01 610 error = mnt_want_write_file(f.file);
2af482a7
DH
611 if (error)
612 goto out_fput;
bfcec708 613 audit_inode(NULL, f.file->f_path.dentry, 0);
2903ff01
AV
614 error = chown_common(&f.file->f_path, user, group);
615 mnt_drop_write_file(f.file);
2af482a7 616out_fput:
2903ff01 617 fdput(f);
6902d925 618out:
1da177e4
LT
619 return error;
620}
621
4a3fd211
DH
622/*
623 * You have to be very careful that these write
624 * counts get cleaned up in error cases and
625 * upon __fput(). This should probably never
626 * be called outside of __dentry_open().
627 */
628static inline int __get_file_write_access(struct inode *inode,
629 struct vfsmount *mnt)
630{
68ad89c7 631 int error = get_write_access(inode);
4a3fd211
DH
632 if (error)
633 return error;
68ad89c7
AV
634 error = __mnt_want_write(mnt);
635 if (error)
636 put_write_access(inode);
4a3fd211
DH
637 return error;
638}
639
90ad1a8e
MS
640int open_check_o_direct(struct file *f)
641{
642 /* NB: we're sure to have correct a_ops only after f_op->open */
643 if (f->f_flags & O_DIRECT) {
644 if (!f->f_mapping->a_ops ||
645 ((!f->f_mapping->a_ops->direct_IO) &&
646 (!f->f_mapping->a_ops->get_xip_mem))) {
647 return -EINVAL;
648 }
649 }
650 return 0;
651}
652
02e5180d 653static int do_dentry_open(struct file *f,
96b7e579
AV
654 int (*open)(struct inode *, struct file *),
655 const struct cred *cred)
1da177e4 656{
1abf0c71 657 static const struct file_operations empty_fops = {};
1da177e4
LT
658 struct inode *inode;
659 int error;
660
5300990c 661 f->f_mode = OPEN_FMODE(f->f_flags) | FMODE_LSEEK |
a1a5b3d9 662 FMODE_PREAD | FMODE_PWRITE;
1abf0c71
AV
663
664 if (unlikely(f->f_flags & O_PATH))
665 f->f_mode = FMODE_PATH;
666
b5bcdda3 667 path_get(&f->f_path);
dd37978c 668 inode = f->f_inode = f->f_path.dentry->d_inode;
68ad89c7 669 if (f->f_mode & FMODE_WRITE && !special_file(inode->i_mode)) {
02e5180d 670 error = __get_file_write_access(inode, f->f_path.mnt);
1da177e4
LT
671 if (error)
672 goto cleanup_file;
68ad89c7 673 file_take_write(f);
1da177e4
LT
674 }
675
676 f->f_mapping = inode->i_mapping;
1da177e4 677
1abf0c71
AV
678 if (unlikely(f->f_mode & FMODE_PATH)) {
679 f->f_op = &empty_fops;
96b7e579 680 return 0;
1abf0c71
AV
681 }
682
683 f->f_op = fops_get(inode->i_fop);
684
83d49856 685 error = security_file_open(f, cred);
788e7dd4
YN
686 if (error)
687 goto cleanup_all;
688
f3c7691e
BF
689 error = break_lease(inode, f->f_flags);
690 if (error)
691 goto cleanup_all;
692
834f2a4a
TM
693 if (!open && f->f_op)
694 open = f->f_op->open;
695 if (open) {
696 error = open(inode, f);
1da177e4
LT
697 if (error)
698 goto cleanup_all;
699 }
890275b5
MZ
700 if ((f->f_mode & (FMODE_READ | FMODE_WRITE)) == FMODE_READ)
701 i_readcount_inc(inode);
834f2a4a 702
1da177e4
LT
703 f->f_flags &= ~(O_CREAT | O_EXCL | O_NOCTTY | O_TRUNC);
704
705 file_ra_state_init(&f->f_ra, f->f_mapping->host->i_mapping);
706
96b7e579 707 return 0;
1da177e4
LT
708
709cleanup_all:
710 fops_put(f->f_op);
4a3fd211 711 if (f->f_mode & FMODE_WRITE) {
ad775f5a
DH
712 if (!special_file(inode->i_mode)) {
713 /*
714 * We don't consider this a real
715 * mnt_want/drop_write() pair
716 * because it all happenend right
717 * here, so just reset the state.
718 */
68ad89c7 719 put_write_access(inode);
ad775f5a 720 file_reset_write(f);
fe7c8051 721 __mnt_drop_write(f->f_path.mnt);
ad775f5a 722 }
4a3fd211 723 }
1da177e4 724cleanup_file:
02e5180d
AV
725 path_put(&f->f_path);
726 f->f_path.mnt = NULL;
727 f->f_path.dentry = NULL;
dd37978c 728 f->f_inode = NULL;
96b7e579 729 return error;
1da177e4
LT
730}
731
d18e9008
MS
732/**
733 * finish_open - finish opening a file
734 * @od: opaque open data
735 * @dentry: pointer to dentry
736 * @open: open callback
737 *
738 * This can be used to finish opening a file passed to i_op->atomic_open().
739 *
740 * If the open callback is set to NULL, then the standard f_op->open()
741 * filesystem callback is substituted.
742 */
30d90494
AV
743int finish_open(struct file *file, struct dentry *dentry,
744 int (*open)(struct inode *, struct file *),
745 int *opened)
d18e9008 746{
96b7e579 747 int error;
3d8a00d2 748 BUG_ON(*opened & FILE_OPENED); /* once it's opened, it's opened */
d18e9008 749
b5bcdda3 750 file->f_path.dentry = dentry;
02e5180d 751 error = do_dentry_open(file, open, current_cred());
96b7e579 752 if (!error)
47237687 753 *opened |= FILE_OPENED;
d18e9008 754
96b7e579 755 return error;
d18e9008
MS
756}
757EXPORT_SYMBOL(finish_open);
758
759/**
760 * finish_no_open - finish ->atomic_open() without opening the file
761 *
762 * @od: opaque open data
763 * @dentry: dentry or NULL (as returned from ->lookup())
764 *
765 * This can be used to set the result of a successful lookup in ->atomic_open().
766 * The filesystem's atomic_open() method shall return NULL after calling this.
767 */
e45198a6 768int finish_no_open(struct file *file, struct dentry *dentry)
d18e9008 769{
30d90494 770 file->f_path.dentry = dentry;
e45198a6 771 return 1;
d18e9008
MS
772}
773EXPORT_SYMBOL(finish_no_open);
774
765927b2 775struct file *dentry_open(const struct path *path, int flags,
745ca247 776 const struct cred *cred)
a1a5b3d9
PS
777{
778 int error;
779 struct file *f;
780
e0e81739
DH
781 validate_creds(cred);
782
c212f9aa 783 /* We must always pass in a valid mount pointer. */
765927b2 784 BUG_ON(!path->mnt);
322ee5b3 785
a1a5b3d9 786 f = get_empty_filp();
1afc99be
AV
787 if (!IS_ERR(f)) {
788 f->f_flags = flags;
789 f->f_path = *path;
790 error = do_dentry_open(f, NULL, cred);
791 if (!error) {
792 /* from now on we need fput() to dispose of f */
793 error = open_check_o_direct(f);
794 if (error) {
795 fput(f);
796 f = ERR_PTR(error);
797 }
798 } else {
799 put_filp(f);
2a027e7a
AV
800 f = ERR_PTR(error);
801 }
2a027e7a
AV
802 }
803 return f;
a1a5b3d9 804}
1da177e4
LT
805EXPORT_SYMBOL(dentry_open);
806
a218d0fd 807static inline int build_open_flags(int flags, umode_t mode, struct open_flags *op)
47c805dc
AV
808{
809 int lookup_flags = 0;
810 int acc_mode;
811
e68726ff
MS
812 if (flags & O_CREAT)
813 op->mode = (mode & S_IALLUGO) | S_IFREG;
814 else
815 op->mode = 0;
47c805dc
AV
816
817 /* Must never be set by userspace */
c6f3d811 818 flags &= ~FMODE_NONOTIFY & ~O_CLOEXEC;
47c805dc
AV
819
820 /*
821 * O_SYNC is implemented as __O_SYNC|O_DSYNC. As many places only
822 * check for O_DSYNC if the need any syncing at all we enforce it's
823 * always set instead of having to deal with possibly weird behaviour
824 * for malicious applications setting only __O_SYNC.
825 */
826 if (flags & __O_SYNC)
827 flags |= O_DSYNC;
828
1abf0c71
AV
829 /*
830 * If we have O_PATH in the open flag. Then we
831 * cannot have anything other than the below set of flags
832 */
833 if (flags & O_PATH) {
834 flags &= O_DIRECTORY | O_NOFOLLOW | O_PATH;
835 acc_mode = 0;
836 } else {
837 acc_mode = MAY_OPEN | ACC_MODE(flags);
838 }
47c805dc 839
1abf0c71 840 op->open_flag = flags;
47c805dc
AV
841
842 /* O_TRUNC implies we need access checks for write permissions */
843 if (flags & O_TRUNC)
844 acc_mode |= MAY_WRITE;
845
846 /* Allow the LSM permission hook to distinguish append
847 access from general write access. */
848 if (flags & O_APPEND)
849 acc_mode |= MAY_APPEND;
850
851 op->acc_mode = acc_mode;
852
1abf0c71
AV
853 op->intent = flags & O_PATH ? 0 : LOOKUP_OPEN;
854
47c805dc
AV
855 if (flags & O_CREAT) {
856 op->intent |= LOOKUP_CREATE;
857 if (flags & O_EXCL)
858 op->intent |= LOOKUP_EXCL;
859 }
860
861 if (flags & O_DIRECTORY)
862 lookup_flags |= LOOKUP_DIRECTORY;
863 if (!(flags & O_NOFOLLOW))
864 lookup_flags |= LOOKUP_FOLLOW;
865 return lookup_flags;
866}
867
669abf4e
JL
868/**
869 * file_open_name - open file and return file pointer
870 *
871 * @name: struct filename containing path to open
872 * @flags: open flags as per the open(2) second argument
873 * @mode: mode for the new file if O_CREAT is set, else ignored
874 *
875 * This is the helper to open a file from kernelspace if you really
876 * have to. But in generally you should not do this, so please move
877 * along, nothing to see here..
878 */
879struct file *file_open_name(struct filename *name, int flags, umode_t mode)
880{
881 struct open_flags op;
882 int lookup = build_open_flags(flags, mode, &op);
883 return do_filp_open(AT_FDCWD, name, &op, lookup);
884}
885
47c805dc
AV
886/**
887 * filp_open - open file and return file pointer
888 *
889 * @filename: path to open
890 * @flags: open flags as per the open(2) second argument
891 * @mode: mode for the new file if O_CREAT is set, else ignored
892 *
893 * This is the helper to open a file from kernelspace if you really
894 * have to. But in generally you should not do this, so please move
895 * along, nothing to see here..
896 */
a218d0fd 897struct file *filp_open(const char *filename, int flags, umode_t mode)
47c805dc 898{
669abf4e
JL
899 struct filename name = {.name = filename};
900 return file_open_name(&name, flags, mode);
47c805dc
AV
901}
902EXPORT_SYMBOL(filp_open);
903
73d049a4
AV
904struct file *file_open_root(struct dentry *dentry, struct vfsmount *mnt,
905 const char *filename, int flags)
906{
907 struct open_flags op;
908 int lookup = build_open_flags(flags, 0, &op);
909 if (flags & O_CREAT)
910 return ERR_PTR(-EINVAL);
911 if (!filename && (flags & O_DIRECTORY))
912 if (!dentry->d_inode->i_op->lookup)
913 return ERR_PTR(-ENOTDIR);
914 return do_file_open_root(dentry, mnt, filename, &op, lookup);
915}
916EXPORT_SYMBOL(file_open_root);
917
a218d0fd 918long do_sys_open(int dfd, const char __user *filename, int flags, umode_t mode)
1da177e4 919{
47c805dc
AV
920 struct open_flags op;
921 int lookup = build_open_flags(flags, mode, &op);
91a27b2a 922 struct filename *tmp = getname(filename);
e922efc3 923 int fd = PTR_ERR(tmp);
1da177e4 924
1da177e4 925 if (!IS_ERR(tmp)) {
f23513e8 926 fd = get_unused_fd_flags(flags);
1da177e4 927 if (fd >= 0) {
669abf4e 928 struct file *f = do_filp_open(dfd, tmp, &op, lookup);
fed2fc18
TN
929 if (IS_ERR(f)) {
930 put_unused_fd(fd);
931 fd = PTR_ERR(f);
932 } else {
2a12a9d7 933 fsnotify_open(f);
fed2fc18
TN
934 fd_install(fd, f);
935 }
1da177e4 936 }
1da177e4
LT
937 putname(tmp);
938 }
939 return fd;
1da177e4 940}
e922efc3 941
a218d0fd 942SYSCALL_DEFINE3(open, const char __user *, filename, int, flags, umode_t, mode)
e922efc3
MS
943{
944 if (force_o_largefile())
945 flags |= O_LARGEFILE;
946
2cf09666 947 return do_sys_open(AT_FDCWD, filename, flags, mode);
e922efc3 948}
1da177e4 949
6559eed8 950SYSCALL_DEFINE4(openat, int, dfd, const char __user *, filename, int, flags,
a218d0fd 951 umode_t, mode)
5590ff0d
UD
952{
953 if (force_o_largefile())
954 flags |= O_LARGEFILE;
955
2cf09666 956 return do_sys_open(dfd, filename, flags, mode);
5590ff0d 957}
5590ff0d 958
1da177e4
LT
959#ifndef __alpha__
960
961/*
962 * For backward compatibility? Maybe this should be moved
963 * into arch/i386 instead?
964 */
a218d0fd 965SYSCALL_DEFINE2(creat, const char __user *, pathname, umode_t, mode)
1da177e4
LT
966{
967 return sys_open(pathname, O_CREAT | O_WRONLY | O_TRUNC, mode);
968}
969
970#endif
971
972/*
973 * "id" is the POSIX thread ID. We use the
974 * files pointer for this..
975 */
976int filp_close(struct file *filp, fl_owner_t id)
977{
45778ca8 978 int retval = 0;
1da177e4
LT
979
980 if (!file_count(filp)) {
981 printk(KERN_ERR "VFS: Close: file count is 0\n");
45778ca8 982 return 0;
1da177e4
LT
983 }
984
45778ca8 985 if (filp->f_op && filp->f_op->flush)
75e1fcc0 986 retval = filp->f_op->flush(filp, id);
1da177e4 987
1abf0c71
AV
988 if (likely(!(filp->f_mode & FMODE_PATH))) {
989 dnotify_flush(filp, id);
990 locks_remove_posix(filp, id);
991 }
1da177e4
LT
992 fput(filp);
993 return retval;
994}
995
996EXPORT_SYMBOL(filp_close);
997
998/*
999 * Careful here! We test whether the file pointer is NULL before
1000 * releasing the fd. This ensures that one clone task can't release
1001 * an fd while another clone is opening it.
1002 */
ca013e94 1003SYSCALL_DEFINE1(close, unsigned int, fd)
1da177e4 1004{
483ce1d4 1005 int retval = __close_fd(current->files, fd);
ee731f4f
EP
1006
1007 /* can't restart close syscall because file table entry was cleared */
1008 if (unlikely(retval == -ERESTARTSYS ||
1009 retval == -ERESTARTNOINTR ||
1010 retval == -ERESTARTNOHAND ||
1011 retval == -ERESTART_RESTARTBLOCK))
1012 retval = -EINTR;
1013
1014 return retval;
1da177e4 1015}
1da177e4
LT
1016EXPORT_SYMBOL(sys_close);
1017
1018/*
1019 * This routine simulates a hangup on the tty, to arrange that users
1020 * are given clean terminals at login time.
1021 */
ca013e94 1022SYSCALL_DEFINE0(vhangup)
1da177e4
LT
1023{
1024 if (capable(CAP_SYS_TTY_CONFIG)) {
2cb5998b 1025 tty_vhangup_self();
1da177e4
LT
1026 return 0;
1027 }
1028 return -EPERM;
1029}
1030
1031/*
1032 * Called when an inode is about to be open.
1033 * We use this to disallow opening large files on 32bit systems if
1034 * the caller didn't specify O_LARGEFILE. On 64bit systems we force
1035 * on this flag in sys_open.
1036 */
1037int generic_file_open(struct inode * inode, struct file * filp)
1038{
1039 if (!(filp->f_flags & O_LARGEFILE) && i_size_read(inode) > MAX_NON_LFS)
a9c62a18 1040 return -EOVERFLOW;
1da177e4
LT
1041 return 0;
1042}
1043
1044EXPORT_SYMBOL(generic_file_open);
1045
1046/*
1047 * This is used by subsystems that don't want seekable
06b1e104
DT
1048 * file descriptors. The function is not supposed to ever fail, the only
1049 * reason it returns an 'int' and not 'void' is so that it can be plugged
1050 * directly into file_operations structure.
1da177e4
LT
1051 */
1052int nonseekable_open(struct inode *inode, struct file *filp)
1053{
1054 filp->f_mode &= ~(FMODE_LSEEK | FMODE_PREAD | FMODE_PWRITE);
1055 return 0;
1056}
1057
1058EXPORT_SYMBOL(nonseekable_open);