CIFS: Fix wrong restart readdir for SMB1
[GitHub/mt8127/android_kernel_alcatel_ttab.git] / fs / open.c
CommitLineData
1da177e4
LT
1/*
2 * linux/fs/open.c
3 *
4 * Copyright (C) 1991, 1992 Linus Torvalds
5 */
6
7#include <linux/string.h>
8#include <linux/mm.h>
1da177e4 9#include <linux/file.h>
9f3acc31 10#include <linux/fdtable.h>
0eeca283 11#include <linux/fsnotify.h>
1da177e4 12#include <linux/module.h>
1da177e4
LT
13#include <linux/tty.h>
14#include <linux/namei.h>
15#include <linux/backing-dev.h>
16f7e0fe 16#include <linux/capability.h>
086f7316 17#include <linux/securebits.h>
1da177e4
LT
18#include <linux/security.h>
19#include <linux/mount.h>
5590ff0d 20#include <linux/fcntl.h>
5a0e3ad6 21#include <linux/slab.h>
1da177e4
LT
22#include <asm/uaccess.h>
23#include <linux/fs.h>
ef3daeda 24#include <linux/personality.h>
1da177e4
LT
25#include <linux/pagemap.h>
26#include <linux/syscalls.h>
ab2af1f5 27#include <linux/rcupdate.h>
73241ccc 28#include <linux/audit.h>
97ac7350 29#include <linux/falloc.h>
5ad4e53b 30#include <linux/fs_struct.h>
b65a9cfc 31#include <linux/ima.h>
2dfc1cae 32#include <linux/dnotify.h>
3f6d078d 33#include <linux/compat.h>
1da177e4 34
e81e3f4d
EP
35#include "internal.h"
36
4a30131e
N
37int do_truncate(struct dentry *dentry, loff_t length, unsigned int time_attrs,
38 struct file *filp)
1da177e4 39{
939a9421 40 int ret;
1da177e4
LT
41 struct iattr newattrs;
42
43 /* Not pretty: "inode->i_size" shouldn't really be signed. But it is. */
44 if (length < 0)
45 return -EINVAL;
46
47 newattrs.ia_size = length;
4a30131e 48 newattrs.ia_valid = ATTR_SIZE | time_attrs;
cc4e69de
MS
49 if (filp) {
50 newattrs.ia_file = filp;
51 newattrs.ia_valid |= ATTR_FILE;
52 }
1da177e4 53
7b82dc0e 54 /* Remove suid/sgid on truncate too */
939a9421
AW
55 ret = should_remove_suid(dentry);
56 if (ret)
57 newattrs.ia_valid |= ret | ATTR_FORCE;
7b82dc0e 58
1b1dcc1b 59 mutex_lock(&dentry->d_inode->i_mutex);
939a9421 60 ret = notify_change(dentry, &newattrs);
1b1dcc1b 61 mutex_unlock(&dentry->d_inode->i_mutex);
939a9421 62 return ret;
1da177e4
LT
63}
64
a02de960 65long vfs_truncate(struct path *path, loff_t length)
1da177e4 66{
2d8f3038 67 struct inode *inode;
a02de960 68 long error;
1da177e4 69
a02de960 70 inode = path->dentry->d_inode;
1da177e4
LT
71
72 /* For directories it's -EISDIR, for other non-regulars - -EINVAL */
1da177e4 73 if (S_ISDIR(inode->i_mode))
a02de960 74 return -EISDIR;
1da177e4 75 if (!S_ISREG(inode->i_mode))
a02de960 76 return -EINVAL;
1da177e4 77
a02de960 78 error = mnt_want_write(path->mnt);
1da177e4 79 if (error)
a02de960 80 goto out;
1da177e4 81
256984a8 82 error = inode_permission(inode, MAY_WRITE);
9ac9b847
DH
83 if (error)
84 goto mnt_drop_write_and_out;
1da177e4
LT
85
86 error = -EPERM;
c82e42da 87 if (IS_APPEND(inode))
9ac9b847 88 goto mnt_drop_write_and_out;
1da177e4 89
9700382c 90 error = get_write_access(inode);
1da177e4 91 if (error)
9ac9b847 92 goto mnt_drop_write_and_out;
1da177e4 93
9700382c 94 /*
95 * Make sure that there are no leases. get_write_access() protects
96 * against the truncate racing with a lease-granting setlease().
97 */
8737c930 98 error = break_lease(inode, O_WRONLY);
1da177e4 99 if (error)
9700382c 100 goto put_write_and_out;
1da177e4
LT
101
102 error = locks_verify_truncate(inode, NULL, length);
be6d3e56 103 if (!error)
a02de960 104 error = security_path_truncate(path);
907f4554 105 if (!error)
a02de960 106 error = do_truncate(path->dentry, length, 0, NULL);
1da177e4 107
9700382c 108put_write_and_out:
109 put_write_access(inode);
9ac9b847 110mnt_drop_write_and_out:
a02de960 111 mnt_drop_write(path->mnt);
1da177e4
LT
112out:
113 return error;
114}
a02de960
DH
115EXPORT_SYMBOL_GPL(vfs_truncate);
116
117static long do_sys_truncate(const char __user *pathname, loff_t length)
118{
48f7530d 119 unsigned int lookup_flags = LOOKUP_FOLLOW;
a02de960
DH
120 struct path path;
121 int error;
122
123 if (length < 0) /* sorry, but loff_t says... */
124 return -EINVAL;
125
48f7530d
JL
126retry:
127 error = user_path_at(AT_FDCWD, pathname, lookup_flags, &path);
a02de960
DH
128 if (!error) {
129 error = vfs_truncate(&path, length);
130 path_put(&path);
131 }
48f7530d
JL
132 if (retry_estale(error, lookup_flags)) {
133 lookup_flags |= LOOKUP_REVAL;
134 goto retry;
135 }
a02de960
DH
136 return error;
137}
1da177e4 138
4fd8da8d 139SYSCALL_DEFINE2(truncate, const char __user *, path, long, length)
1da177e4 140{
4fd8da8d 141 return do_sys_truncate(path, length);
1da177e4
LT
142}
143
3f6d078d
AV
144#ifdef CONFIG_COMPAT
145COMPAT_SYSCALL_DEFINE2(truncate, const char __user *, path, compat_off_t, length)
146{
147 return do_sys_truncate(path, length);
148}
149#endif
150
b01ec0ef 151static long do_sys_ftruncate(unsigned int fd, loff_t length, int small)
1da177e4 152{
bf2965d5 153 struct inode *inode;
1da177e4 154 struct dentry *dentry;
2903ff01 155 struct fd f;
1da177e4
LT
156 int error;
157
158 error = -EINVAL;
159 if (length < 0)
160 goto out;
161 error = -EBADF;
2903ff01
AV
162 f = fdget(fd);
163 if (!f.file)
1da177e4
LT
164 goto out;
165
166 /* explicitly opened as large or we are on 64-bit box */
2903ff01 167 if (f.file->f_flags & O_LARGEFILE)
1da177e4
LT
168 small = 0;
169
2903ff01 170 dentry = f.file->f_path.dentry;
1da177e4
LT
171 inode = dentry->d_inode;
172 error = -EINVAL;
2903ff01 173 if (!S_ISREG(inode->i_mode) || !(f.file->f_mode & FMODE_WRITE))
1da177e4
LT
174 goto out_putf;
175
176 error = -EINVAL;
177 /* Cannot ftruncate over 2^31 bytes without large file support */
178 if (small && length > MAX_NON_LFS)
179 goto out_putf;
180
181 error = -EPERM;
182 if (IS_APPEND(inode))
183 goto out_putf;
184
14da9200 185 sb_start_write(inode->i_sb);
2903ff01 186 error = locks_verify_truncate(inode, f.file, length);
be6d3e56 187 if (!error)
2903ff01 188 error = security_path_truncate(&f.file->f_path);
1da177e4 189 if (!error)
2903ff01 190 error = do_truncate(dentry, length, ATTR_MTIME|ATTR_CTIME, f.file);
14da9200 191 sb_end_write(inode->i_sb);
1da177e4 192out_putf:
2903ff01 193 fdput(f);
1da177e4
LT
194out:
195 return error;
196}
197
bdc480e3 198SYSCALL_DEFINE2(ftruncate, unsigned int, fd, unsigned long, length)
1da177e4 199{
2cf09666 200 return do_sys_ftruncate(fd, length, 1);
1da177e4
LT
201}
202
3f6d078d
AV
203#ifdef CONFIG_COMPAT
204COMPAT_SYSCALL_DEFINE2(ftruncate, unsigned int, fd, compat_ulong_t, length)
205{
206 return do_sys_ftruncate(fd, length, 1);
207}
208#endif
209
1da177e4
LT
210/* LFS versions of truncate are only needed on 32 bit machines */
211#if BITS_PER_LONG == 32
4a0fd5bf 212SYSCALL_DEFINE2(truncate64, const char __user *, path, loff_t, length)
1da177e4
LT
213{
214 return do_sys_truncate(path, length);
215}
216
4a0fd5bf 217SYSCALL_DEFINE2(ftruncate64, unsigned int, fd, loff_t, length)
1da177e4 218{
2cf09666 219 return do_sys_ftruncate(fd, length, 0);
1da177e4 220}
6673e0c3 221#endif /* BITS_PER_LONG == 32 */
1da177e4 222
3e63cbb1
AJ
223
224int do_fallocate(struct file *file, int mode, loff_t offset, loff_t len)
97ac7350 225{
496ad9aa 226 struct inode *inode = file_inode(file);
3e63cbb1 227 long ret;
97ac7350
AA
228
229 if (offset < 0 || len <= 0)
3e63cbb1 230 return -EINVAL;
97ac7350
AA
231
232 /* Return error if mode is not supported */
79124f18
JB
233 if (mode & ~(FALLOC_FL_KEEP_SIZE | FALLOC_FL_PUNCH_HOLE))
234 return -EOPNOTSUPP;
235
236 /* Punch hole must have keep size set */
237 if ((mode & FALLOC_FL_PUNCH_HOLE) &&
238 !(mode & FALLOC_FL_KEEP_SIZE))
3e63cbb1 239 return -EOPNOTSUPP;
97ac7350 240
97ac7350 241 if (!(file->f_mode & FMODE_WRITE))
3e63cbb1 242 return -EBADF;
1ca551c6
MS
243
244 /* It's not possible punch hole on append only file */
245 if (mode & FALLOC_FL_PUNCH_HOLE && IS_APPEND(inode))
246 return -EPERM;
247
248 if (IS_IMMUTABLE(inode))
249 return -EPERM;
250
97ac7350
AA
251 /*
252 * Revalidate the write permissions, in case security policy has
253 * changed since the files were opened.
254 */
255 ret = security_file_permission(file, MAY_WRITE);
256 if (ret)
3e63cbb1 257 return ret;
97ac7350 258
97ac7350 259 if (S_ISFIFO(inode->i_mode))
3e63cbb1 260 return -ESPIPE;
97ac7350 261
97ac7350
AA
262 /*
263 * Let individual file system decide if it supports preallocation
264 * for directories or not.
265 */
266 if (!S_ISREG(inode->i_mode) && !S_ISDIR(inode->i_mode))
3e63cbb1 267 return -ENODEV;
97ac7350 268
97ac7350
AA
269 /* Check for wrap through zero too */
270 if (((offset + len) > inode->i_sb->s_maxbytes) || ((offset + len) < 0))
3e63cbb1 271 return -EFBIG;
97ac7350 272
2fe17c10 273 if (!file->f_op->fallocate)
3e63cbb1 274 return -EOPNOTSUPP;
97ac7350 275
14da9200
JK
276 sb_start_write(inode->i_sb);
277 ret = file->f_op->fallocate(file, mode, offset, len);
278 sb_end_write(inode->i_sb);
279 return ret;
3e63cbb1
AJ
280}
281
4a0fd5bf 282SYSCALL_DEFINE4(fallocate, int, fd, int, mode, loff_t, offset, loff_t, len)
3e63cbb1 283{
2903ff01 284 struct fd f = fdget(fd);
3e63cbb1
AJ
285 int error = -EBADF;
286
2903ff01
AV
287 if (f.file) {
288 error = do_fallocate(f.file, mode, offset, len);
289 fdput(f);
3e63cbb1 290 }
3e63cbb1 291 return error;
97ac7350 292}
3e63cbb1 293
1da177e4
LT
294/*
295 * access() needs to use the real uid/gid, not the effective uid/gid.
296 * We do this by temporarily clearing all FS-related capabilities and
297 * switching the fsuid/fsgid around to the real ones.
298 */
6559eed8 299SYSCALL_DEFINE3(faccessat, int, dfd, const char __user *, filename, int, mode)
1da177e4 300{
d84f4f99
DH
301 const struct cred *old_cred;
302 struct cred *override_cred;
2d8f3038 303 struct path path;
256984a8 304 struct inode *inode;
1da177e4 305 int res;
87fa5595 306 unsigned int lookup_flags = LOOKUP_FOLLOW;
1da177e4
LT
307
308 if (mode & ~S_IRWXO) /* where's F_OK, X_OK, W_OK, R_OK? */
309 return -EINVAL;
310
d84f4f99
DH
311 override_cred = prepare_creds();
312 if (!override_cred)
313 return -ENOMEM;
1da177e4 314
d84f4f99
DH
315 override_cred->fsuid = override_cred->uid;
316 override_cred->fsgid = override_cred->gid;
1da177e4 317
086f7316 318 if (!issecure(SECURE_NO_SETUID_FIXUP)) {
1cdcbec1 319 /* Clear the capabilities if we switch to a non-root user */
18815a18
EB
320 kuid_t root_uid = make_kuid(override_cred->user_ns, 0);
321 if (!uid_eq(override_cred->uid, root_uid))
d84f4f99 322 cap_clear(override_cred->cap_effective);
086f7316 323 else
d84f4f99
DH
324 override_cred->cap_effective =
325 override_cred->cap_permitted;
086f7316 326 }
1da177e4 327
d84f4f99 328 old_cred = override_creds(override_cred);
87fa5595
JL
329retry:
330 res = user_path_at(dfd, filename, lookup_flags, &path);
6902d925
DH
331 if (res)
332 goto out;
333
2d8f3038 334 inode = path.dentry->d_inode;
256984a8
AV
335
336 if ((mode & MAY_EXEC) && S_ISREG(inode->i_mode)) {
30524472
AV
337 /*
338 * MAY_EXEC on regular files is denied if the fs is mounted
339 * with the "noexec" flag.
340 */
341 res = -EACCES;
2d8f3038 342 if (path.mnt->mnt_flags & MNT_NOEXEC)
30524472
AV
343 goto out_path_release;
344 }
345
256984a8 346 res = inode_permission(inode, mode | MAY_ACCESS);
6902d925 347 /* SuS v2 requires we report a read only fs too */
256984a8 348 if (res || !(mode & S_IWOTH) || special_file(inode->i_mode))
6902d925 349 goto out_path_release;
2f676cbc
DH
350 /*
351 * This is a rare case where using __mnt_is_readonly()
352 * is OK without a mnt_want/drop_write() pair. Since
353 * no actual write to the fs is performed here, we do
354 * not need to telegraph to that to anyone.
355 *
356 * By doing this, we accept that this access is
357 * inherently racy and know that the fs may change
358 * state before we even see this result.
359 */
2d8f3038 360 if (__mnt_is_readonly(path.mnt))
6902d925 361 res = -EROFS;
1da177e4 362
6902d925 363out_path_release:
2d8f3038 364 path_put(&path);
87fa5595
JL
365 if (retry_estale(res, lookup_flags)) {
366 lookup_flags |= LOOKUP_REVAL;
367 goto retry;
368 }
6902d925 369out:
d84f4f99
DH
370 revert_creds(old_cred);
371 put_cred(override_cred);
1da177e4
LT
372 return res;
373}
374
ca013e94 375SYSCALL_DEFINE2(access, const char __user *, filename, int, mode)
5590ff0d
UD
376{
377 return sys_faccessat(AT_FDCWD, filename, mode);
378}
379
3cdad428 380SYSCALL_DEFINE1(chdir, const char __user *, filename)
1da177e4 381{
2d8f3038 382 struct path path;
1da177e4 383 int error;
0291c0a5
JL
384 unsigned int lookup_flags = LOOKUP_FOLLOW | LOOKUP_DIRECTORY;
385retry:
386 error = user_path_at(AT_FDCWD, filename, lookup_flags, &path);
1da177e4
LT
387 if (error)
388 goto out;
389
9cfcac81 390 error = inode_permission(path.dentry->d_inode, MAY_EXEC | MAY_CHDIR);
1da177e4
LT
391 if (error)
392 goto dput_and_out;
393
2d8f3038 394 set_fs_pwd(current->fs, &path);
1da177e4
LT
395
396dput_and_out:
2d8f3038 397 path_put(&path);
0291c0a5
JL
398 if (retry_estale(error, lookup_flags)) {
399 lookup_flags |= LOOKUP_REVAL;
400 goto retry;
401 }
1da177e4
LT
402out:
403 return error;
404}
405
3cdad428 406SYSCALL_DEFINE1(fchdir, unsigned int, fd)
1da177e4 407{
2903ff01 408 struct fd f = fdget_raw(fd);
1da177e4 409 struct inode *inode;
2903ff01 410 int error = -EBADF;
1da177e4
LT
411
412 error = -EBADF;
2903ff01 413 if (!f.file)
1da177e4
LT
414 goto out;
415
496ad9aa 416 inode = file_inode(f.file);
1da177e4
LT
417
418 error = -ENOTDIR;
419 if (!S_ISDIR(inode->i_mode))
420 goto out_putf;
421
9cfcac81 422 error = inode_permission(inode, MAY_EXEC | MAY_CHDIR);
1da177e4 423 if (!error)
2903ff01 424 set_fs_pwd(current->fs, &f.file->f_path);
1da177e4 425out_putf:
2903ff01 426 fdput(f);
1da177e4
LT
427out:
428 return error;
429}
430
3480b257 431SYSCALL_DEFINE1(chroot, const char __user *, filename)
1da177e4 432{
2d8f3038 433 struct path path;
1da177e4 434 int error;
2771261e
JL
435 unsigned int lookup_flags = LOOKUP_FOLLOW | LOOKUP_DIRECTORY;
436retry:
437 error = user_path_at(AT_FDCWD, filename, lookup_flags, &path);
1da177e4
LT
438 if (error)
439 goto out;
440
9cfcac81 441 error = inode_permission(path.dentry->d_inode, MAY_EXEC | MAY_CHDIR);
1da177e4
LT
442 if (error)
443 goto dput_and_out;
444
445 error = -EPERM;
a85fb273 446 if (!nsown_capable(CAP_SYS_CHROOT))
1da177e4 447 goto dput_and_out;
8b8efb44
TH
448 error = security_path_chroot(&path);
449 if (error)
450 goto dput_and_out;
1da177e4 451
2d8f3038 452 set_fs_root(current->fs, &path);
1da177e4
LT
453 error = 0;
454dput_and_out:
2d8f3038 455 path_put(&path);
2771261e
JL
456 if (retry_estale(error, lookup_flags)) {
457 lookup_flags |= LOOKUP_REVAL;
458 goto retry;
459 }
1da177e4
LT
460out:
461 return error;
462}
463
e57712eb 464static int chmod_common(struct path *path, umode_t mode)
1da177e4 465{
e57712eb 466 struct inode *inode = path->dentry->d_inode;
1da177e4 467 struct iattr newattrs;
e57712eb 468 int error;
1da177e4 469
e57712eb
AV
470 error = mnt_want_write(path->mnt);
471 if (error)
472 return error;
fe542cf5 473 mutex_lock(&inode->i_mutex);
cdcf116d 474 error = security_path_chmod(path, mode);
e57712eb 475 if (error)
fe542cf5 476 goto out_unlock;
1da177e4
LT
477 newattrs.ia_mode = (mode & S_IALLUGO) | (inode->i_mode & ~S_IALLUGO);
478 newattrs.ia_valid = ATTR_MODE | ATTR_CTIME;
e57712eb 479 error = notify_change(path->dentry, &newattrs);
fe542cf5 480out_unlock:
1b1dcc1b 481 mutex_unlock(&inode->i_mutex);
e57712eb
AV
482 mnt_drop_write(path->mnt);
483 return error;
484}
485
49f0a076 486SYSCALL_DEFINE2(fchmod, unsigned int, fd, umode_t, mode)
e57712eb
AV
487{
488 struct file * file;
489 int err = -EBADF;
490
491 file = fget(fd);
492 if (file) {
bfcec708 493 audit_inode(NULL, file->f_path.dentry, 0);
e57712eb
AV
494 err = chmod_common(&file->f_path, mode);
495 fput(file);
496 }
1da177e4
LT
497 return err;
498}
499
49f0a076 500SYSCALL_DEFINE3(fchmodat, int, dfd, const char __user *, filename, umode_t, mode)
1da177e4 501{
2d8f3038 502 struct path path;
1da177e4 503 int error;
14ff690c
JL
504 unsigned int lookup_flags = LOOKUP_FOLLOW;
505retry:
506 error = user_path_at(dfd, filename, lookup_flags, &path);
e57712eb
AV
507 if (!error) {
508 error = chmod_common(&path, mode);
509 path_put(&path);
14ff690c
JL
510 if (retry_estale(error, lookup_flags)) {
511 lookup_flags |= LOOKUP_REVAL;
512 goto retry;
513 }
e57712eb 514 }
1da177e4
LT
515 return error;
516}
517
49f0a076 518SYSCALL_DEFINE2(chmod, const char __user *, filename, umode_t, mode)
5590ff0d
UD
519{
520 return sys_fchmodat(AT_FDCWD, filename, mode);
521}
522
fe542cf5 523static int chown_common(struct path *path, uid_t user, gid_t group)
1da177e4 524{
fe542cf5 525 struct inode *inode = path->dentry->d_inode;
1da177e4
LT
526 int error;
527 struct iattr newattrs;
52137abe
EB
528 kuid_t uid;
529 kgid_t gid;
530
531 uid = make_kuid(current_user_ns(), user);
532 gid = make_kgid(current_user_ns(), group);
1da177e4 533
1da177e4
LT
534 newattrs.ia_valid = ATTR_CTIME;
535 if (user != (uid_t) -1) {
52137abe
EB
536 if (!uid_valid(uid))
537 return -EINVAL;
1da177e4 538 newattrs.ia_valid |= ATTR_UID;
52137abe 539 newattrs.ia_uid = uid;
1da177e4
LT
540 }
541 if (group != (gid_t) -1) {
52137abe
EB
542 if (!gid_valid(gid))
543 return -EINVAL;
1da177e4 544 newattrs.ia_valid |= ATTR_GID;
52137abe 545 newattrs.ia_gid = gid;
1da177e4
LT
546 }
547 if (!S_ISDIR(inode->i_mode))
b5376771
SH
548 newattrs.ia_valid |=
549 ATTR_KILL_SUID | ATTR_KILL_SGID | ATTR_KILL_PRIV;
1b1dcc1b 550 mutex_lock(&inode->i_mutex);
d2b31ca6 551 error = security_path_chown(path, uid, gid);
fe542cf5
TH
552 if (!error)
553 error = notify_change(path->dentry, &newattrs);
1b1dcc1b 554 mutex_unlock(&inode->i_mutex);
beb29e05 555
1da177e4
LT
556 return error;
557}
558
6559eed8
HC
559SYSCALL_DEFINE5(fchownat, int, dfd, const char __user *, filename, uid_t, user,
560 gid_t, group, int, flag)
5590ff0d 561{
2d8f3038 562 struct path path;
5590ff0d 563 int error = -EINVAL;
65cfc672 564 int lookup_flags;
5590ff0d 565
65cfc672 566 if ((flag & ~(AT_SYMLINK_NOFOLLOW | AT_EMPTY_PATH)) != 0)
5590ff0d
UD
567 goto out;
568
65cfc672
AV
569 lookup_flags = (flag & AT_SYMLINK_NOFOLLOW) ? 0 : LOOKUP_FOLLOW;
570 if (flag & AT_EMPTY_PATH)
571 lookup_flags |= LOOKUP_EMPTY;
99a5df37 572retry:
65cfc672 573 error = user_path_at(dfd, filename, lookup_flags, &path);
6902d925
DH
574 if (error)
575 goto out;
2d8f3038 576 error = mnt_want_write(path.mnt);
2af482a7
DH
577 if (error)
578 goto out_release;
fe542cf5 579 error = chown_common(&path, user, group);
2d8f3038 580 mnt_drop_write(path.mnt);
2af482a7 581out_release:
2d8f3038 582 path_put(&path);
99a5df37
JL
583 if (retry_estale(error, lookup_flags)) {
584 lookup_flags |= LOOKUP_REVAL;
585 goto retry;
586 }
5590ff0d
UD
587out:
588 return error;
589}
590
55e4def0 591SYSCALL_DEFINE3(chown, const char __user *, filename, uid_t, user, gid_t, group)
1da177e4 592{
55e4def0
DH
593 return sys_fchownat(AT_FDCWD, filename, user, group, 0);
594}
1da177e4 595
55e4def0
DH
596SYSCALL_DEFINE3(lchown, const char __user *, filename, uid_t, user, gid_t, group)
597{
598 return sys_fchownat(AT_FDCWD, filename, user, group,
599 AT_SYMLINK_NOFOLLOW);
1da177e4
LT
600}
601
ca013e94 602SYSCALL_DEFINE3(fchown, unsigned int, fd, uid_t, user, gid_t, group)
1da177e4 603{
2903ff01 604 struct fd f = fdget(fd);
1da177e4
LT
605 int error = -EBADF;
606
2903ff01 607 if (!f.file)
6902d925
DH
608 goto out;
609
2903ff01 610 error = mnt_want_write_file(f.file);
2af482a7
DH
611 if (error)
612 goto out_fput;
bfcec708 613 audit_inode(NULL, f.file->f_path.dentry, 0);
2903ff01
AV
614 error = chown_common(&f.file->f_path, user, group);
615 mnt_drop_write_file(f.file);
2af482a7 616out_fput:
2903ff01 617 fdput(f);
6902d925 618out:
1da177e4
LT
619 return error;
620}
621
4a3fd211
DH
622/*
623 * You have to be very careful that these write
624 * counts get cleaned up in error cases and
625 * upon __fput(). This should probably never
626 * be called outside of __dentry_open().
627 */
628static inline int __get_file_write_access(struct inode *inode,
629 struct vfsmount *mnt)
630{
68ad89c7 631 int error = get_write_access(inode);
4a3fd211
DH
632 if (error)
633 return error;
68ad89c7
AV
634 error = __mnt_want_write(mnt);
635 if (error)
636 put_write_access(inode);
4a3fd211
DH
637 return error;
638}
639
90ad1a8e
MS
640int open_check_o_direct(struct file *f)
641{
642 /* NB: we're sure to have correct a_ops only after f_op->open */
643 if (f->f_flags & O_DIRECT) {
644 if (!f->f_mapping->a_ops ||
645 ((!f->f_mapping->a_ops->direct_IO) &&
646 (!f->f_mapping->a_ops->get_xip_mem))) {
647 return -EINVAL;
648 }
649 }
650 return 0;
651}
652
02e5180d 653static int do_dentry_open(struct file *f,
96b7e579
AV
654 int (*open)(struct inode *, struct file *),
655 const struct cred *cred)
1da177e4 656{
1abf0c71 657 static const struct file_operations empty_fops = {};
1da177e4
LT
658 struct inode *inode;
659 int error;
660
5300990c 661 f->f_mode = OPEN_FMODE(f->f_flags) | FMODE_LSEEK |
a1a5b3d9 662 FMODE_PREAD | FMODE_PWRITE;
1abf0c71
AV
663
664 if (unlikely(f->f_flags & O_PATH))
665 f->f_mode = FMODE_PATH;
666
b5bcdda3 667 path_get(&f->f_path);
dd37978c 668 inode = f->f_inode = f->f_path.dentry->d_inode;
68ad89c7 669 if (f->f_mode & FMODE_WRITE && !special_file(inode->i_mode)) {
02e5180d 670 error = __get_file_write_access(inode, f->f_path.mnt);
1da177e4
LT
671 if (error)
672 goto cleanup_file;
68ad89c7 673 file_take_write(f);
1da177e4
LT
674 }
675
676 f->f_mapping = inode->i_mapping;
ee2ffa0d 677 file_sb_list_add(f, inode->i_sb);
1da177e4 678
1abf0c71
AV
679 if (unlikely(f->f_mode & FMODE_PATH)) {
680 f->f_op = &empty_fops;
96b7e579 681 return 0;
1abf0c71
AV
682 }
683
684 f->f_op = fops_get(inode->i_fop);
685
83d49856 686 error = security_file_open(f, cred);
788e7dd4
YN
687 if (error)
688 goto cleanup_all;
689
f3c7691e
BF
690 error = break_lease(inode, f->f_flags);
691 if (error)
692 goto cleanup_all;
693
834f2a4a
TM
694 if (!open && f->f_op)
695 open = f->f_op->open;
696 if (open) {
697 error = open(inode, f);
1da177e4
LT
698 if (error)
699 goto cleanup_all;
700 }
890275b5
MZ
701 if ((f->f_mode & (FMODE_READ | FMODE_WRITE)) == FMODE_READ)
702 i_readcount_inc(inode);
834f2a4a 703
1da177e4
LT
704 f->f_flags &= ~(O_CREAT | O_EXCL | O_NOCTTY | O_TRUNC);
705
706 file_ra_state_init(&f->f_ra, f->f_mapping->host->i_mapping);
707
96b7e579 708 return 0;
1da177e4
LT
709
710cleanup_all:
711 fops_put(f->f_op);
c3c4f694 712 file_sb_list_del(f);
4a3fd211 713 if (f->f_mode & FMODE_WRITE) {
ad775f5a
DH
714 if (!special_file(inode->i_mode)) {
715 /*
716 * We don't consider this a real
717 * mnt_want/drop_write() pair
718 * because it all happenend right
719 * here, so just reset the state.
720 */
68ad89c7 721 put_write_access(inode);
ad775f5a 722 file_reset_write(f);
fe7c8051 723 __mnt_drop_write(f->f_path.mnt);
ad775f5a 724 }
4a3fd211 725 }
1da177e4 726cleanup_file:
02e5180d
AV
727 path_put(&f->f_path);
728 f->f_path.mnt = NULL;
729 f->f_path.dentry = NULL;
dd37978c 730 f->f_inode = NULL;
96b7e579 731 return error;
1da177e4
LT
732}
733
d18e9008
MS
734/**
735 * finish_open - finish opening a file
736 * @od: opaque open data
737 * @dentry: pointer to dentry
738 * @open: open callback
739 *
740 * This can be used to finish opening a file passed to i_op->atomic_open().
741 *
742 * If the open callback is set to NULL, then the standard f_op->open()
743 * filesystem callback is substituted.
744 */
30d90494
AV
745int finish_open(struct file *file, struct dentry *dentry,
746 int (*open)(struct inode *, struct file *),
747 int *opened)
d18e9008 748{
96b7e579 749 int error;
3d8a00d2 750 BUG_ON(*opened & FILE_OPENED); /* once it's opened, it's opened */
d18e9008 751
b5bcdda3 752 file->f_path.dentry = dentry;
02e5180d 753 error = do_dentry_open(file, open, current_cred());
96b7e579 754 if (!error)
47237687 755 *opened |= FILE_OPENED;
d18e9008 756
96b7e579 757 return error;
d18e9008
MS
758}
759EXPORT_SYMBOL(finish_open);
760
761/**
762 * finish_no_open - finish ->atomic_open() without opening the file
763 *
764 * @od: opaque open data
765 * @dentry: dentry or NULL (as returned from ->lookup())
766 *
767 * This can be used to set the result of a successful lookup in ->atomic_open().
768 * The filesystem's atomic_open() method shall return NULL after calling this.
769 */
e45198a6 770int finish_no_open(struct file *file, struct dentry *dentry)
d18e9008 771{
30d90494 772 file->f_path.dentry = dentry;
e45198a6 773 return 1;
d18e9008
MS
774}
775EXPORT_SYMBOL(finish_no_open);
776
765927b2 777struct file *dentry_open(const struct path *path, int flags,
745ca247 778 const struct cred *cred)
a1a5b3d9
PS
779{
780 int error;
781 struct file *f;
782
e0e81739
DH
783 validate_creds(cred);
784
c212f9aa 785 /* We must always pass in a valid mount pointer. */
765927b2 786 BUG_ON(!path->mnt);
322ee5b3 787
a1a5b3d9 788 f = get_empty_filp();
1afc99be
AV
789 if (!IS_ERR(f)) {
790 f->f_flags = flags;
791 f->f_path = *path;
792 error = do_dentry_open(f, NULL, cred);
793 if (!error) {
794 /* from now on we need fput() to dispose of f */
795 error = open_check_o_direct(f);
796 if (error) {
797 fput(f);
798 f = ERR_PTR(error);
799 }
800 } else {
801 put_filp(f);
2a027e7a
AV
802 f = ERR_PTR(error);
803 }
2a027e7a
AV
804 }
805 return f;
a1a5b3d9 806}
1da177e4
LT
807EXPORT_SYMBOL(dentry_open);
808
a218d0fd 809static inline int build_open_flags(int flags, umode_t mode, struct open_flags *op)
47c805dc
AV
810{
811 int lookup_flags = 0;
812 int acc_mode;
813
e68726ff
MS
814 if (flags & O_CREAT)
815 op->mode = (mode & S_IALLUGO) | S_IFREG;
816 else
817 op->mode = 0;
47c805dc
AV
818
819 /* Must never be set by userspace */
c6f3d811 820 flags &= ~FMODE_NONOTIFY & ~O_CLOEXEC;
47c805dc
AV
821
822 /*
823 * O_SYNC is implemented as __O_SYNC|O_DSYNC. As many places only
824 * check for O_DSYNC if the need any syncing at all we enforce it's
825 * always set instead of having to deal with possibly weird behaviour
826 * for malicious applications setting only __O_SYNC.
827 */
828 if (flags & __O_SYNC)
829 flags |= O_DSYNC;
830
1abf0c71
AV
831 /*
832 * If we have O_PATH in the open flag. Then we
833 * cannot have anything other than the below set of flags
834 */
835 if (flags & O_PATH) {
836 flags &= O_DIRECTORY | O_NOFOLLOW | O_PATH;
837 acc_mode = 0;
838 } else {
839 acc_mode = MAY_OPEN | ACC_MODE(flags);
840 }
47c805dc 841
1abf0c71 842 op->open_flag = flags;
47c805dc
AV
843
844 /* O_TRUNC implies we need access checks for write permissions */
845 if (flags & O_TRUNC)
846 acc_mode |= MAY_WRITE;
847
848 /* Allow the LSM permission hook to distinguish append
849 access from general write access. */
850 if (flags & O_APPEND)
851 acc_mode |= MAY_APPEND;
852
853 op->acc_mode = acc_mode;
854
1abf0c71
AV
855 op->intent = flags & O_PATH ? 0 : LOOKUP_OPEN;
856
47c805dc
AV
857 if (flags & O_CREAT) {
858 op->intent |= LOOKUP_CREATE;
859 if (flags & O_EXCL)
860 op->intent |= LOOKUP_EXCL;
861 }
862
863 if (flags & O_DIRECTORY)
864 lookup_flags |= LOOKUP_DIRECTORY;
865 if (!(flags & O_NOFOLLOW))
866 lookup_flags |= LOOKUP_FOLLOW;
867 return lookup_flags;
868}
869
669abf4e
JL
870/**
871 * file_open_name - open file and return file pointer
872 *
873 * @name: struct filename containing path to open
874 * @flags: open flags as per the open(2) second argument
875 * @mode: mode for the new file if O_CREAT is set, else ignored
876 *
877 * This is the helper to open a file from kernelspace if you really
878 * have to. But in generally you should not do this, so please move
879 * along, nothing to see here..
880 */
881struct file *file_open_name(struct filename *name, int flags, umode_t mode)
882{
883 struct open_flags op;
884 int lookup = build_open_flags(flags, mode, &op);
885 return do_filp_open(AT_FDCWD, name, &op, lookup);
886}
887
47c805dc
AV
888/**
889 * filp_open - open file and return file pointer
890 *
891 * @filename: path to open
892 * @flags: open flags as per the open(2) second argument
893 * @mode: mode for the new file if O_CREAT is set, else ignored
894 *
895 * This is the helper to open a file from kernelspace if you really
896 * have to. But in generally you should not do this, so please move
897 * along, nothing to see here..
898 */
a218d0fd 899struct file *filp_open(const char *filename, int flags, umode_t mode)
47c805dc 900{
669abf4e
JL
901 struct filename name = {.name = filename};
902 return file_open_name(&name, flags, mode);
47c805dc
AV
903}
904EXPORT_SYMBOL(filp_open);
905
73d049a4
AV
906struct file *file_open_root(struct dentry *dentry, struct vfsmount *mnt,
907 const char *filename, int flags)
908{
909 struct open_flags op;
910 int lookup = build_open_flags(flags, 0, &op);
911 if (flags & O_CREAT)
912 return ERR_PTR(-EINVAL);
913 if (!filename && (flags & O_DIRECTORY))
914 if (!dentry->d_inode->i_op->lookup)
915 return ERR_PTR(-ENOTDIR);
916 return do_file_open_root(dentry, mnt, filename, &op, lookup);
917}
918EXPORT_SYMBOL(file_open_root);
919
a218d0fd 920long do_sys_open(int dfd, const char __user *filename, int flags, umode_t mode)
1da177e4 921{
47c805dc
AV
922 struct open_flags op;
923 int lookup = build_open_flags(flags, mode, &op);
91a27b2a 924 struct filename *tmp = getname(filename);
e922efc3 925 int fd = PTR_ERR(tmp);
1da177e4 926
1da177e4 927 if (!IS_ERR(tmp)) {
f23513e8 928 fd = get_unused_fd_flags(flags);
1da177e4 929 if (fd >= 0) {
669abf4e 930 struct file *f = do_filp_open(dfd, tmp, &op, lookup);
fed2fc18
TN
931 if (IS_ERR(f)) {
932 put_unused_fd(fd);
933 fd = PTR_ERR(f);
934 } else {
2a12a9d7 935 fsnotify_open(f);
fed2fc18
TN
936 fd_install(fd, f);
937 }
1da177e4 938 }
1da177e4
LT
939 putname(tmp);
940 }
941 return fd;
1da177e4 942}
e922efc3 943
a218d0fd 944SYSCALL_DEFINE3(open, const char __user *, filename, int, flags, umode_t, mode)
e922efc3
MS
945{
946 if (force_o_largefile())
947 flags |= O_LARGEFILE;
948
2cf09666 949 return do_sys_open(AT_FDCWD, filename, flags, mode);
e922efc3 950}
1da177e4 951
6559eed8 952SYSCALL_DEFINE4(openat, int, dfd, const char __user *, filename, int, flags,
a218d0fd 953 umode_t, mode)
5590ff0d
UD
954{
955 if (force_o_largefile())
956 flags |= O_LARGEFILE;
957
2cf09666 958 return do_sys_open(dfd, filename, flags, mode);
5590ff0d 959}
5590ff0d 960
1da177e4
LT
961#ifndef __alpha__
962
963/*
964 * For backward compatibility? Maybe this should be moved
965 * into arch/i386 instead?
966 */
a218d0fd 967SYSCALL_DEFINE2(creat, const char __user *, pathname, umode_t, mode)
1da177e4
LT
968{
969 return sys_open(pathname, O_CREAT | O_WRONLY | O_TRUNC, mode);
970}
971
972#endif
973
974/*
975 * "id" is the POSIX thread ID. We use the
976 * files pointer for this..
977 */
978int filp_close(struct file *filp, fl_owner_t id)
979{
45778ca8 980 int retval = 0;
1da177e4
LT
981
982 if (!file_count(filp)) {
983 printk(KERN_ERR "VFS: Close: file count is 0\n");
45778ca8 984 return 0;
1da177e4
LT
985 }
986
45778ca8 987 if (filp->f_op && filp->f_op->flush)
75e1fcc0 988 retval = filp->f_op->flush(filp, id);
1da177e4 989
1abf0c71
AV
990 if (likely(!(filp->f_mode & FMODE_PATH))) {
991 dnotify_flush(filp, id);
992 locks_remove_posix(filp, id);
993 }
1da177e4
LT
994 fput(filp);
995 return retval;
996}
997
998EXPORT_SYMBOL(filp_close);
999
1000/*
1001 * Careful here! We test whether the file pointer is NULL before
1002 * releasing the fd. This ensures that one clone task can't release
1003 * an fd while another clone is opening it.
1004 */
ca013e94 1005SYSCALL_DEFINE1(close, unsigned int, fd)
1da177e4 1006{
483ce1d4 1007 int retval = __close_fd(current->files, fd);
ee731f4f
EP
1008
1009 /* can't restart close syscall because file table entry was cleared */
1010 if (unlikely(retval == -ERESTARTSYS ||
1011 retval == -ERESTARTNOINTR ||
1012 retval == -ERESTARTNOHAND ||
1013 retval == -ERESTART_RESTARTBLOCK))
1014 retval = -EINTR;
1015
1016 return retval;
1da177e4 1017}
1da177e4
LT
1018EXPORT_SYMBOL(sys_close);
1019
1020/*
1021 * This routine simulates a hangup on the tty, to arrange that users
1022 * are given clean terminals at login time.
1023 */
ca013e94 1024SYSCALL_DEFINE0(vhangup)
1da177e4
LT
1025{
1026 if (capable(CAP_SYS_TTY_CONFIG)) {
2cb5998b 1027 tty_vhangup_self();
1da177e4
LT
1028 return 0;
1029 }
1030 return -EPERM;
1031}
1032
1033/*
1034 * Called when an inode is about to be open.
1035 * We use this to disallow opening large files on 32bit systems if
1036 * the caller didn't specify O_LARGEFILE. On 64bit systems we force
1037 * on this flag in sys_open.
1038 */
1039int generic_file_open(struct inode * inode, struct file * filp)
1040{
1041 if (!(filp->f_flags & O_LARGEFILE) && i_size_read(inode) > MAX_NON_LFS)
a9c62a18 1042 return -EOVERFLOW;
1da177e4
LT
1043 return 0;
1044}
1045
1046EXPORT_SYMBOL(generic_file_open);
1047
1048/*
1049 * This is used by subsystems that don't want seekable
06b1e104
DT
1050 * file descriptors. The function is not supposed to ever fail, the only
1051 * reason it returns an 'int' and not 'void' is so that it can be plugged
1052 * directly into file_operations structure.
1da177e4
LT
1053 */
1054int nonseekable_open(struct inode *inode, struct file *filp)
1055{
1056 filp->f_mode &= ~(FMODE_LSEEK | FMODE_PREAD | FMODE_PWRITE);
1057 return 0;
1058}
1059
1060EXPORT_SYMBOL(nonseekable_open);