1 // SPDX-License-Identifier: GPL-2.0-or-later
2 /*
3 * Copyright (C) 2016 Namjae Jeon <linkinjeon@kernel.org>
4 * Copyright (C) 2018 Samsung Electronics Co., Ltd.
5 */
6
7 #include <linux/kernel.h>
8 #include <linux/fs.h>
9 #include <linux/uaccess.h>
10 #include <linux/backing-dev.h>
11 #include <linux/writeback.h>
12 #include <linux/xattr.h>
13 #include <linux/falloc.h>
14 #include <linux/genhd.h>
15 #include <linux/fsnotify.h>
16 #include <linux/dcache.h>
17 #include <linux/slab.h>
18 #include <linux/vmalloc.h>
19 #include <linux/sched/xacct.h>
20 #include <linux/crc32c.h>
21 #include <linux/namei.h>
22
23 #include "glob.h"
24 #include "oplock.h"
25 #include "connection.h"
26 #include "vfs.h"
27 #include "vfs_cache.h"
28 #include "smbacl.h"
29 #include "ndr.h"
30 #include "auth.h"
31 #include "misc.h"
32
33 #include "smb_common.h"
34 #include "mgmt/share_config.h"
35 #include "mgmt/tree_connect.h"
36 #include "mgmt/user_session.h"
37 #include "mgmt/user_config.h"
38
ksmbd_vfs_inherit_owner(struct ksmbd_work * work,struct inode * parent_inode,struct inode * inode)39 static void ksmbd_vfs_inherit_owner(struct ksmbd_work *work,
40 struct inode *parent_inode,
41 struct inode *inode)
42 {
43 if (!test_share_config_flag(work->tcon->share_conf,
44 KSMBD_SHARE_FLAG_INHERIT_OWNER))
45 return;
46
47 i_uid_write(inode, i_uid_read(parent_inode));
48 }
49
50 /**
51 * ksmbd_vfs_lock_parent() - lock parent dentry if it is stable
52 */
ksmbd_vfs_lock_parent(struct dentry * parent,struct dentry * child)53 int ksmbd_vfs_lock_parent(struct dentry *parent, struct dentry *child)
54 {
55 inode_lock_nested(d_inode(parent), I_MUTEX_PARENT);
56 if (child->d_parent != parent) {
57 inode_unlock(d_inode(parent));
58 return -ENOENT;
59 }
60
61 return 0;
62 }
63
ksmbd_vfs_path_lookup_locked(struct ksmbd_share_config * share_conf,char * pathname,unsigned int flags,struct path * parent_path,struct path * path)64 static int ksmbd_vfs_path_lookup_locked(struct ksmbd_share_config *share_conf,
65 char *pathname, unsigned int flags,
66 struct path *parent_path,
67 struct path *path)
68 {
69 struct qstr last;
70 struct filename *filename;
71 struct path *root_share_path = &share_conf->vfs_path;
72 int err, type;
73 struct dentry *d;
74
75 if (pathname[0] == '\0') {
76 pathname = share_conf->path;
77 root_share_path = NULL;
78 } else {
79 flags |= LOOKUP_BENEATH;
80 }
81
82 filename = getname_kernel(pathname);
83 if (IS_ERR(filename))
84 return PTR_ERR(filename);
85
86 err = vfs_path_parent_lookup(filename, flags,
87 parent_path, &last, &type,
88 root_share_path);
89 if (err) {
90 putname(filename);
91 return err;
92 }
93
94 if (unlikely(type != LAST_NORM)) {
95 path_put(parent_path);
96 putname(filename);
97 return -ENOENT;
98 }
99
100 err = mnt_want_write(parent_path->mnt);
101 if (err) {
102 path_put(parent_path);
103 putname(filename);
104 return -ENOENT;
105 }
106
107 inode_lock_nested(parent_path->dentry->d_inode, I_MUTEX_PARENT);
108 d = lookup_one_qstr_excl(&last, parent_path->dentry, 0);
109 if (IS_ERR(d))
110 goto err_out;
111
112 if (d_is_negative(d)) {
113 dput(d);
114 goto err_out;
115 }
116
117 path->dentry = d;
118 path->mnt = mntget(parent_path->mnt);
119
120 if (test_share_config_flag(share_conf, KSMBD_SHARE_FLAG_CROSSMNT)) {
121 err = follow_down(path);
122 if (err < 0) {
123 path_put(path);
124 goto err_out;
125 }
126 }
127
128 putname(filename);
129 return 0;
130
131 err_out:
132 inode_unlock(d_inode(parent_path->dentry));
133 mnt_drop_write(parent_path->mnt);
134 path_put(parent_path);
135 putname(filename);
136 return -ENOENT;
137 }
138
ksmbd_vfs_query_maximal_access(struct user_namespace * user_ns,struct dentry * dentry,__le32 * daccess)139 void ksmbd_vfs_query_maximal_access(struct user_namespace *user_ns,
140 struct dentry *dentry, __le32 *daccess)
141 {
142 *daccess = cpu_to_le32(FILE_READ_ATTRIBUTES | READ_CONTROL);
143
144 if (!inode_permission(user_ns, d_inode(dentry), MAY_OPEN | MAY_WRITE))
145 *daccess |= cpu_to_le32(WRITE_DAC | WRITE_OWNER | SYNCHRONIZE |
146 FILE_WRITE_DATA | FILE_APPEND_DATA |
147 FILE_WRITE_EA | FILE_WRITE_ATTRIBUTES |
148 FILE_DELETE_CHILD);
149
150 if (!inode_permission(user_ns, d_inode(dentry), MAY_OPEN | MAY_READ))
151 *daccess |= FILE_READ_DATA_LE | FILE_READ_EA_LE;
152
153 if (!inode_permission(user_ns, d_inode(dentry), MAY_OPEN | MAY_EXEC))
154 *daccess |= FILE_EXECUTE_LE;
155
156 if (!inode_permission(user_ns, d_inode(dentry->d_parent), MAY_EXEC | MAY_WRITE))
157 *daccess |= FILE_DELETE_LE;
158 }
159
160 /**
161 * ksmbd_vfs_create() - vfs helper for smb create file
162 * @work: work
163 * @name: file name that is relative to share
164 * @mode: file create mode
165 *
166 * Return: 0 on success, otherwise error
167 */
ksmbd_vfs_create(struct ksmbd_work * work,const char * name,umode_t mode)168 int ksmbd_vfs_create(struct ksmbd_work *work, const char *name, umode_t mode)
169 {
170 struct path path;
171 struct dentry *dentry;
172 int err;
173
174 dentry = ksmbd_vfs_kern_path_create(work, name,
175 LOOKUP_NO_SYMLINKS, &path);
176 if (IS_ERR(dentry)) {
177 err = PTR_ERR(dentry);
178 if (err != -ENOENT)
179 pr_err("path create failed for %s, err %d\n",
180 name, err);
181 return err;
182 }
183
184 mode |= S_IFREG;
185 err = vfs_create(mnt_user_ns(path.mnt), d_inode(path.dentry),
186 dentry, mode, true);
187 if (!err) {
188 ksmbd_vfs_inherit_owner(work, d_inode(path.dentry),
189 d_inode(dentry));
190 } else {
191 pr_err("File(%s): creation failed (err:%d)\n", name, err);
192 }
193
194 done_path_create(&path, dentry);
195 return err;
196 }
197
198 /**
199 * ksmbd_vfs_mkdir() - vfs helper for smb create directory
200 * @work: work
201 * @name: directory name that is relative to share
202 * @mode: directory create mode
203 *
204 * Return: 0 on success, otherwise error
205 */
ksmbd_vfs_mkdir(struct ksmbd_work * work,const char * name,umode_t mode)206 int ksmbd_vfs_mkdir(struct ksmbd_work *work, const char *name, umode_t mode)
207 {
208 struct user_namespace *user_ns;
209 struct path path;
210 struct dentry *dentry;
211 int err;
212
213 dentry = ksmbd_vfs_kern_path_create(work, name,
214 LOOKUP_NO_SYMLINKS | LOOKUP_DIRECTORY,
215 &path);
216 if (IS_ERR(dentry)) {
217 err = PTR_ERR(dentry);
218 if (err != -EEXIST)
219 ksmbd_debug(VFS, "path create failed for %s, err %d\n",
220 name, err);
221 return err;
222 }
223
224 user_ns = mnt_user_ns(path.mnt);
225 mode |= S_IFDIR;
226 err = vfs_mkdir(user_ns, d_inode(path.dentry), dentry, mode);
227 if (!err && d_unhashed(dentry)) {
228 struct dentry *d;
229
230 d = lookup_one(user_ns, dentry->d_name.name, dentry->d_parent,
231 dentry->d_name.len);
232 if (IS_ERR(d)) {
233 err = PTR_ERR(d);
234 goto out_err;
235 }
236 if (unlikely(d_is_negative(d))) {
237 dput(d);
238 err = -ENOENT;
239 goto out_err;
240 }
241
242 ksmbd_vfs_inherit_owner(work, d_inode(path.dentry), d_inode(d));
243 dput(d);
244 }
245
246 out_err:
247 done_path_create(&path, dentry);
248 if (err)
249 pr_err("mkdir(%s): creation failed (err:%d)\n", name, err);
250 return err;
251 }
252
ksmbd_vfs_getcasexattr(struct user_namespace * user_ns,struct dentry * dentry,char * attr_name,int attr_name_len,char ** attr_value)253 static ssize_t ksmbd_vfs_getcasexattr(struct user_namespace *user_ns,
254 struct dentry *dentry, char *attr_name,
255 int attr_name_len, char **attr_value)
256 {
257 char *name, *xattr_list = NULL;
258 ssize_t value_len = -ENOENT, xattr_list_len;
259
260 xattr_list_len = ksmbd_vfs_listxattr(dentry, &xattr_list);
261 if (xattr_list_len <= 0)
262 goto out;
263
264 for (name = xattr_list; name - xattr_list < xattr_list_len;
265 name += strlen(name) + 1) {
266 ksmbd_debug(VFS, "%s, len %zd\n", name, strlen(name));
267 if (strncasecmp(attr_name, name, attr_name_len))
268 continue;
269
270 value_len = ksmbd_vfs_getxattr(user_ns,
271 dentry,
272 name,
273 attr_value);
274 if (value_len < 0)
275 pr_err("failed to get xattr in file\n");
276 break;
277 }
278
279 out:
280 kvfree(xattr_list);
281 return value_len;
282 }
283
ksmbd_vfs_stream_read(struct ksmbd_file * fp,char * buf,loff_t * pos,size_t count)284 static int ksmbd_vfs_stream_read(struct ksmbd_file *fp, char *buf, loff_t *pos,
285 size_t count)
286 {
287 ssize_t v_len;
288 char *stream_buf = NULL;
289
290 ksmbd_debug(VFS, "read stream data pos : %llu, count : %zd\n",
291 *pos, count);
292
293 v_len = ksmbd_vfs_getcasexattr(file_mnt_user_ns(fp->filp),
294 fp->filp->f_path.dentry,
295 fp->stream.name,
296 fp->stream.size,
297 &stream_buf);
298 if ((int)v_len <= 0)
299 return (int)v_len;
300
301 if (v_len <= *pos) {
302 count = -EINVAL;
303 goto free_buf;
304 }
305
306 if (v_len - *pos < count)
307 count = v_len - *pos;
308
309 memcpy(buf, &stream_buf[*pos], count);
310
311 free_buf:
312 kvfree(stream_buf);
313 return count;
314 }
315
316 /**
317 * check_lock_range() - vfs helper for smb byte range file locking
318 * @filp: the file to apply the lock to
319 * @start: lock start byte offset
320 * @end: lock end byte offset
321 * @type: byte range type read/write
322 *
323 * Return: 0 on success, otherwise error
324 */
check_lock_range(struct file * filp,loff_t start,loff_t end,unsigned char type)325 static int check_lock_range(struct file *filp, loff_t start, loff_t end,
326 unsigned char type)
327 {
328 struct file_lock *flock;
329 struct file_lock_context *ctx = file_inode(filp)->i_flctx;
330 int error = 0;
331
332 if (!ctx || list_empty_careful(&ctx->flc_posix))
333 return 0;
334
335 spin_lock(&ctx->flc_lock);
336 list_for_each_entry(flock, &ctx->flc_posix, fl_list) {
337 /* check conflict locks */
338 if (flock->fl_end >= start && end >= flock->fl_start) {
339 if (flock->fl_type == F_RDLCK) {
340 if (type == WRITE) {
341 pr_err("not allow write by shared lock\n");
342 error = 1;
343 goto out;
344 }
345 } else if (flock->fl_type == F_WRLCK) {
346 /* check owner in lock */
347 if (flock->fl_file != filp) {
348 error = 1;
349 pr_err("not allow rw access by exclusive lock from other opens\n");
350 goto out;
351 }
352 }
353 }
354 }
355 out:
356 spin_unlock(&ctx->flc_lock);
357 return error;
358 }
359
360 /**
361 * ksmbd_vfs_read() - vfs helper for smb file read
362 * @work: smb work
363 * @fid: file id of open file
364 * @count: read byte count
365 * @pos: file pos
366 * @rbuf: read data buffer
367 *
368 * Return: number of read bytes on success, otherwise error
369 */
ksmbd_vfs_read(struct ksmbd_work * work,struct ksmbd_file * fp,size_t count,loff_t * pos,char * rbuf)370 int ksmbd_vfs_read(struct ksmbd_work *work, struct ksmbd_file *fp, size_t count,
371 loff_t *pos, char *rbuf)
372 {
373 struct file *filp = fp->filp;
374 ssize_t nbytes = 0;
375 struct inode *inode = file_inode(filp);
376
377 if (S_ISDIR(inode->i_mode))
378 return -EISDIR;
379
380 if (unlikely(count == 0))
381 return 0;
382
383 if (work->conn->connection_type) {
384 if (!(fp->daccess & (FILE_READ_DATA_LE | FILE_EXECUTE_LE))) {
385 pr_err("no right to read(%pD)\n", fp->filp);
386 return -EACCES;
387 }
388 }
389
390 if (ksmbd_stream_fd(fp))
391 return ksmbd_vfs_stream_read(fp, rbuf, pos, count);
392
393 if (!work->tcon->posix_extensions) {
394 int ret;
395
396 ret = check_lock_range(filp, *pos, *pos + count - 1, READ);
397 if (ret) {
398 pr_err("unable to read due to lock\n");
399 return -EAGAIN;
400 }
401 }
402
403 nbytes = kernel_read(filp, rbuf, count, pos);
404 if (nbytes < 0) {
405 pr_err("smb read failed, err = %zd\n", nbytes);
406 return nbytes;
407 }
408
409 filp->f_pos = *pos;
410 return nbytes;
411 }
412
ksmbd_vfs_stream_write(struct ksmbd_file * fp,char * buf,loff_t * pos,size_t count)413 static int ksmbd_vfs_stream_write(struct ksmbd_file *fp, char *buf, loff_t *pos,
414 size_t count)
415 {
416 char *stream_buf = NULL, *wbuf;
417 struct user_namespace *user_ns = file_mnt_user_ns(fp->filp);
418 size_t size;
419 ssize_t v_len;
420 int err = 0;
421
422 ksmbd_debug(VFS, "write stream data pos : %llu, count : %zd\n",
423 *pos, count);
424
425 size = *pos + count;
426 if (size > XATTR_SIZE_MAX) {
427 size = XATTR_SIZE_MAX;
428 count = (*pos + count) - XATTR_SIZE_MAX;
429 }
430
431 v_len = ksmbd_vfs_getcasexattr(user_ns,
432 fp->filp->f_path.dentry,
433 fp->stream.name,
434 fp->stream.size,
435 &stream_buf);
436 if (v_len < 0) {
437 pr_err("not found stream in xattr : %zd\n", v_len);
438 err = v_len;
439 goto out;
440 }
441
442 if (v_len < size) {
443 wbuf = kvzalloc(size, GFP_KERNEL);
444 if (!wbuf) {
445 err = -ENOMEM;
446 goto out;
447 }
448
449 if (v_len > 0)
450 memcpy(wbuf, stream_buf, v_len);
451 kvfree(stream_buf);
452 stream_buf = wbuf;
453 }
454
455 memcpy(&stream_buf[*pos], buf, count);
456
457 err = ksmbd_vfs_setxattr(user_ns,
458 &fp->filp->f_path,
459 fp->stream.name,
460 (void *)stream_buf,
461 size,
462 0,
463 true);
464 if (err < 0)
465 goto out;
466
467 fp->filp->f_pos = *pos;
468 err = 0;
469 out:
470 kvfree(stream_buf);
471 return err;
472 }
473
474 /**
475 * ksmbd_vfs_write() - vfs helper for smb file write
476 * @work: work
477 * @fid: file id of open file
478 * @buf: buf containing data for writing
479 * @count: read byte count
480 * @pos: file pos
481 * @sync: fsync after write
482 * @written: number of bytes written
483 *
484 * Return: 0 on success, otherwise error
485 */
ksmbd_vfs_write(struct ksmbd_work * work,struct ksmbd_file * fp,char * buf,size_t count,loff_t * pos,bool sync,ssize_t * written)486 int ksmbd_vfs_write(struct ksmbd_work *work, struct ksmbd_file *fp,
487 char *buf, size_t count, loff_t *pos, bool sync,
488 ssize_t *written)
489 {
490 struct file *filp;
491 loff_t offset = *pos;
492 int err = 0;
493
494 if (work->conn->connection_type) {
495 if (!(fp->daccess & FILE_WRITE_DATA_LE)) {
496 pr_err("no right to write(%pD)\n", fp->filp);
497 err = -EACCES;
498 goto out;
499 }
500 }
501
502 filp = fp->filp;
503
504 if (ksmbd_stream_fd(fp)) {
505 err = ksmbd_vfs_stream_write(fp, buf, pos, count);
506 if (!err)
507 *written = count;
508 goto out;
509 }
510
511 if (!work->tcon->posix_extensions) {
512 err = check_lock_range(filp, *pos, *pos + count - 1, WRITE);
513 if (err) {
514 pr_err("unable to write due to lock\n");
515 err = -EAGAIN;
516 goto out;
517 }
518 }
519
520 /* Reserve lease break for parent dir at closing time */
521 fp->reserve_lease_break = true;
522
523 /* Do we need to break any of a levelII oplock? */
524 smb_break_all_levII_oplock(work, fp, 1);
525
526 err = kernel_write(filp, buf, count, pos);
527 if (err < 0) {
528 ksmbd_debug(VFS, "smb write failed, err = %d\n", err);
529 goto out;
530 }
531
532 filp->f_pos = *pos;
533 *written = err;
534 err = 0;
535 if (sync) {
536 err = vfs_fsync_range(filp, offset, offset + *written, 0);
537 if (err < 0)
538 pr_err("fsync failed for filename = %pD, err = %d\n",
539 fp->filp, err);
540 }
541
542 out:
543 return err;
544 }
545
546 /**
547 * ksmbd_vfs_getattr() - vfs helper for smb getattr
548 * @work: work
549 * @fid: file id of open file
550 * @attrs: inode attributes
551 *
552 * Return: 0 on success, otherwise error
553 */
ksmbd_vfs_getattr(const struct path * path,struct kstat * stat)554 int ksmbd_vfs_getattr(const struct path *path, struct kstat *stat)
555 {
556 int err;
557
558 err = vfs_getattr(path, stat, STATX_BTIME, AT_STATX_SYNC_AS_STAT);
559 if (err)
560 pr_err("getattr failed, err %d\n", err);
561 return err;
562 }
563
564 /**
565 * ksmbd_vfs_fsync() - vfs helper for smb fsync
566 * @work: work
567 * @fid: file id of open file
568 *
569 * Return: 0 on success, otherwise error
570 */
ksmbd_vfs_fsync(struct ksmbd_work * work,u64 fid,u64 p_id)571 int ksmbd_vfs_fsync(struct ksmbd_work *work, u64 fid, u64 p_id)
572 {
573 struct ksmbd_file *fp;
574 int err;
575
576 fp = ksmbd_lookup_fd_slow(work, fid, p_id);
577 if (!fp) {
578 pr_err("failed to get filp for fid %llu\n", fid);
579 return -ENOENT;
580 }
581 err = vfs_fsync(fp->filp, 0);
582 if (err < 0)
583 pr_err("smb fsync failed, err = %d\n", err);
584 ksmbd_fd_put(work, fp);
585 return err;
586 }
587
588 /**
589 * ksmbd_vfs_remove_file() - vfs helper for smb rmdir or unlink
590 * @name: directory or file name that is relative to share
591 *
592 * Return: 0 on success, otherwise error
593 */
ksmbd_vfs_remove_file(struct ksmbd_work * work,const struct path * path)594 int ksmbd_vfs_remove_file(struct ksmbd_work *work, const struct path *path)
595 {
596 struct user_namespace *user_ns;
597 struct dentry *parent = path->dentry->d_parent;
598 int err;
599
600 if (ksmbd_override_fsids(work))
601 return -ENOMEM;
602
603 if (!d_inode(path->dentry)->i_nlink) {
604 err = -ENOENT;
605 goto out_err;
606 }
607
608 user_ns = mnt_user_ns(path->mnt);
609 if (S_ISDIR(d_inode(path->dentry)->i_mode)) {
610 err = vfs_rmdir(user_ns, d_inode(parent), path->dentry);
611 if (err && err != -ENOTEMPTY)
612 ksmbd_debug(VFS, "rmdir failed, err %d\n", err);
613 } else {
614 err = vfs_unlink(user_ns, d_inode(parent), path->dentry, NULL);
615 if (err)
616 ksmbd_debug(VFS, "unlink failed, err %d\n", err);
617 }
618
619 out_err:
620 ksmbd_revert_fsids(work);
621 return err;
622 }
623
624 /**
625 * ksmbd_vfs_link() - vfs helper for creating smb hardlink
626 * @oldname: source file name
627 * @newname: hardlink name that is relative to share
628 *
629 * Return: 0 on success, otherwise error
630 */
ksmbd_vfs_link(struct ksmbd_work * work,const char * oldname,const char * newname)631 int ksmbd_vfs_link(struct ksmbd_work *work, const char *oldname,
632 const char *newname)
633 {
634 struct path oldpath, newpath;
635 struct dentry *dentry;
636 int err;
637
638 if (ksmbd_override_fsids(work))
639 return -ENOMEM;
640
641 err = kern_path(oldname, LOOKUP_NO_SYMLINKS, &oldpath);
642 if (err) {
643 pr_err("cannot get linux path for %s, err = %d\n",
644 oldname, err);
645 goto out1;
646 }
647
648 dentry = ksmbd_vfs_kern_path_create(work, newname,
649 LOOKUP_NO_SYMLINKS | LOOKUP_REVAL,
650 &newpath);
651 if (IS_ERR(dentry)) {
652 err = PTR_ERR(dentry);
653 pr_err("path create err for %s, err %d\n", newname, err);
654 goto out2;
655 }
656
657 err = -EXDEV;
658 if (oldpath.mnt != newpath.mnt) {
659 pr_err("vfs_link failed err %d\n", err);
660 goto out3;
661 }
662
663 err = vfs_link(oldpath.dentry, mnt_user_ns(newpath.mnt),
664 d_inode(newpath.dentry),
665 dentry, NULL);
666 if (err)
667 ksmbd_debug(VFS, "vfs_link failed err %d\n", err);
668
669 out3:
670 done_path_create(&newpath, dentry);
671 out2:
672 path_put(&oldpath);
673 out1:
674 ksmbd_revert_fsids(work);
675 return err;
676 }
677
ksmbd_vfs_rename(struct ksmbd_work * work,const struct path * old_path,char * newname,int flags)678 int ksmbd_vfs_rename(struct ksmbd_work *work, const struct path *old_path,
679 char *newname, int flags)
680 {
681 struct dentry *old_parent, *new_dentry, *trap;
682 struct dentry *old_child = old_path->dentry;
683 struct path new_path;
684 struct qstr new_last;
685 struct renamedata rd;
686 struct filename *to;
687 struct ksmbd_share_config *share_conf = work->tcon->share_conf;
688 struct ksmbd_file *parent_fp;
689 int new_type;
690 int err, lookup_flags = LOOKUP_NO_SYMLINKS;
691
692 if (ksmbd_override_fsids(work))
693 return -ENOMEM;
694
695 to = getname_kernel(newname);
696 if (IS_ERR(to)) {
697 err = PTR_ERR(to);
698 goto revert_fsids;
699 }
700
701 retry:
702 err = vfs_path_parent_lookup(to, lookup_flags | LOOKUP_BENEATH,
703 &new_path, &new_last, &new_type,
704 &share_conf->vfs_path);
705 if (err)
706 goto out1;
707
708 if (old_path->mnt != new_path.mnt) {
709 err = -EXDEV;
710 goto out2;
711 }
712
713 err = mnt_want_write(old_path->mnt);
714 if (err)
715 goto out2;
716
717 trap = lock_rename_child(old_child, new_path.dentry);
718
719 old_parent = dget(old_child->d_parent);
720 if (d_unhashed(old_child)) {
721 err = -EINVAL;
722 goto out3;
723 }
724
725 parent_fp = ksmbd_lookup_fd_inode(old_child->d_parent);
726 if (parent_fp) {
727 if (parent_fp->daccess & FILE_DELETE_LE) {
728 pr_err("parent dir is opened with delete access\n");
729 err = -ESHARE;
730 ksmbd_fd_put(work, parent_fp);
731 goto out3;
732 }
733 ksmbd_fd_put(work, parent_fp);
734 }
735
736 new_dentry = lookup_one_qstr_excl(&new_last, new_path.dentry,
737 lookup_flags | LOOKUP_RENAME_TARGET);
738 if (IS_ERR(new_dentry)) {
739 err = PTR_ERR(new_dentry);
740 goto out3;
741 }
742
743 if (d_is_symlink(new_dentry)) {
744 err = -EACCES;
745 goto out4;
746 }
747
748 if ((flags & RENAME_NOREPLACE) && d_is_positive(new_dentry)) {
749 err = -EEXIST;
750 goto out4;
751 }
752
753 if (old_child == trap) {
754 err = -EINVAL;
755 goto out4;
756 }
757
758 if (new_dentry == trap) {
759 err = -ENOTEMPTY;
760 goto out4;
761 }
762
763 rd.old_mnt_userns = mnt_user_ns(old_path->mnt),
764 rd.old_dir = d_inode(old_parent),
765 rd.old_dentry = old_child,
766 rd.new_mnt_userns = mnt_user_ns(new_path.mnt),
767 rd.new_dir = new_path.dentry->d_inode,
768 rd.new_dentry = new_dentry,
769 rd.flags = flags,
770 rd.delegated_inode = NULL,
771 err = vfs_rename(&rd);
772 if (err)
773 ksmbd_debug(VFS, "vfs_rename failed err %d\n", err);
774
775 out4:
776 dput(new_dentry);
777 out3:
778 dput(old_parent);
779 unlock_rename(old_parent, new_path.dentry);
780 mnt_drop_write(old_path->mnt);
781 out2:
782 path_put(&new_path);
783
784 if (retry_estale(err, lookup_flags)) {
785 lookup_flags |= LOOKUP_REVAL;
786 goto retry;
787 }
788 out1:
789 putname(to);
790 revert_fsids:
791 ksmbd_revert_fsids(work);
792 return err;
793 }
794
795 /**
796 * ksmbd_vfs_truncate() - vfs helper for smb file truncate
797 * @work: work
798 * @fid: file id of old file
799 * @size: truncate to given size
800 *
801 * Return: 0 on success, otherwise error
802 */
ksmbd_vfs_truncate(struct ksmbd_work * work,struct ksmbd_file * fp,loff_t size)803 int ksmbd_vfs_truncate(struct ksmbd_work *work,
804 struct ksmbd_file *fp, loff_t size)
805 {
806 int err = 0;
807 struct file *filp;
808
809 filp = fp->filp;
810
811 /* Do we need to break any of a levelII oplock? */
812 smb_break_all_levII_oplock(work, fp, 1);
813
814 if (!work->tcon->posix_extensions) {
815 struct inode *inode = file_inode(filp);
816
817 if (size < inode->i_size) {
818 err = check_lock_range(filp, size,
819 inode->i_size - 1, WRITE);
820 } else {
821 err = check_lock_range(filp, inode->i_size,
822 size - 1, WRITE);
823 }
824
825 if (err) {
826 pr_err("failed due to lock\n");
827 return -EAGAIN;
828 }
829 }
830
831 err = vfs_truncate(&filp->f_path, size);
832 if (err)
833 pr_err("truncate failed, err %d\n", err);
834 return err;
835 }
836
837 /**
838 * ksmbd_vfs_listxattr() - vfs helper for smb list extended attributes
839 * @dentry: dentry of file for listing xattrs
840 * @list: destination buffer
841 * @size: destination buffer length
842 *
843 * Return: xattr list length on success, otherwise error
844 */
ksmbd_vfs_listxattr(struct dentry * dentry,char ** list)845 ssize_t ksmbd_vfs_listxattr(struct dentry *dentry, char **list)
846 {
847 ssize_t size;
848 char *vlist = NULL;
849
850 size = vfs_listxattr(dentry, NULL, 0);
851 if (size <= 0)
852 return size;
853
854 vlist = kvzalloc(size, GFP_KERNEL);
855 if (!vlist)
856 return -ENOMEM;
857
858 *list = vlist;
859 size = vfs_listxattr(dentry, vlist, size);
860 if (size < 0) {
861 ksmbd_debug(VFS, "listxattr failed\n");
862 kvfree(vlist);
863 *list = NULL;
864 }
865
866 return size;
867 }
868
ksmbd_vfs_xattr_len(struct user_namespace * user_ns,struct dentry * dentry,char * xattr_name)869 static ssize_t ksmbd_vfs_xattr_len(struct user_namespace *user_ns,
870 struct dentry *dentry, char *xattr_name)
871 {
872 return vfs_getxattr(user_ns, dentry, xattr_name, NULL, 0);
873 }
874
875 /**
876 * ksmbd_vfs_getxattr() - vfs helper for smb get extended attributes value
877 * @user_ns: user namespace
878 * @dentry: dentry of file for getting xattrs
879 * @xattr_name: name of xattr name to query
880 * @xattr_buf: destination buffer xattr value
881 *
882 * Return: read xattr value length on success, otherwise error
883 */
ksmbd_vfs_getxattr(struct user_namespace * user_ns,struct dentry * dentry,char * xattr_name,char ** xattr_buf)884 ssize_t ksmbd_vfs_getxattr(struct user_namespace *user_ns,
885 struct dentry *dentry,
886 char *xattr_name, char **xattr_buf)
887 {
888 ssize_t xattr_len;
889 char *buf;
890
891 *xattr_buf = NULL;
892 xattr_len = ksmbd_vfs_xattr_len(user_ns, dentry, xattr_name);
893 if (xattr_len < 0)
894 return xattr_len;
895
896 buf = kmalloc(xattr_len + 1, GFP_KERNEL);
897 if (!buf)
898 return -ENOMEM;
899
900 xattr_len = vfs_getxattr(user_ns, dentry, xattr_name,
901 (void *)buf, xattr_len);
902 if (xattr_len > 0)
903 *xattr_buf = buf;
904 else
905 kfree(buf);
906 return xattr_len;
907 }
908
909 /**
910 * ksmbd_vfs_setxattr() - vfs helper for smb set extended attributes value
911 * @user_ns: user namespace
912 * @path: path of dentry to set XATTR at
913 * @attr_name: xattr name for setxattr
914 * @attr_value: xattr value to set
915 * @attr_size: size of xattr value
916 * @flags: destination buffer length
917 * @get_write: get write access to a mount
918 *
919 * Return: 0 on success, otherwise error
920 */
ksmbd_vfs_setxattr(struct user_namespace * user_ns,const struct path * path,const char * attr_name,const void * attr_value,size_t attr_size,int flags,bool get_write)921 int ksmbd_vfs_setxattr(struct user_namespace *user_ns,
922 const struct path *path, const char *attr_name,
923 const void *attr_value, size_t attr_size, int flags,
924 bool get_write)
925 {
926 int err;
927
928 if (get_write == true) {
929 err = mnt_want_write(path->mnt);
930 if (err)
931 return err;
932 }
933
934 err = vfs_setxattr(user_ns,
935 path->dentry,
936 attr_name,
937 attr_value,
938 attr_size,
939 flags);
940 if (err)
941 ksmbd_debug(VFS, "setxattr failed, err %d\n", err);
942 if (get_write == true)
943 mnt_drop_write(path->mnt);
944 return err;
945 }
946
947 /**
948 * ksmbd_vfs_set_fadvise() - convert smb IO caching options to linux options
949 * @filp: file pointer for IO
950 * @options: smb IO options
951 */
ksmbd_vfs_set_fadvise(struct file * filp,__le32 option)952 void ksmbd_vfs_set_fadvise(struct file *filp, __le32 option)
953 {
954 struct address_space *mapping;
955
956 mapping = filp->f_mapping;
957
958 if (!option || !mapping)
959 return;
960
961 if (option & FILE_WRITE_THROUGH_LE) {
962 filp->f_flags |= O_SYNC;
963 } else if (option & FILE_SEQUENTIAL_ONLY_LE) {
964 filp->f_ra.ra_pages = inode_to_bdi(mapping->host)->ra_pages * 2;
965 spin_lock(&filp->f_lock);
966 filp->f_mode &= ~FMODE_RANDOM;
967 spin_unlock(&filp->f_lock);
968 } else if (option & FILE_RANDOM_ACCESS_LE) {
969 spin_lock(&filp->f_lock);
970 filp->f_mode |= FMODE_RANDOM;
971 spin_unlock(&filp->f_lock);
972 }
973 }
974
ksmbd_vfs_zero_data(struct ksmbd_work * work,struct ksmbd_file * fp,loff_t off,loff_t len)975 int ksmbd_vfs_zero_data(struct ksmbd_work *work, struct ksmbd_file *fp,
976 loff_t off, loff_t len)
977 {
978 smb_break_all_levII_oplock(work, fp, 1);
979 if (fp->f_ci->m_fattr & ATTR_SPARSE_FILE_LE)
980 return vfs_fallocate(fp->filp,
981 FALLOC_FL_PUNCH_HOLE | FALLOC_FL_KEEP_SIZE,
982 off, len);
983
984 return vfs_fallocate(fp->filp,
985 FALLOC_FL_ZERO_RANGE | FALLOC_FL_KEEP_SIZE,
986 off, len);
987 }
988
ksmbd_vfs_fqar_lseek(struct ksmbd_file * fp,loff_t start,loff_t length,struct file_allocated_range_buffer * ranges,unsigned int in_count,unsigned int * out_count)989 int ksmbd_vfs_fqar_lseek(struct ksmbd_file *fp, loff_t start, loff_t length,
990 struct file_allocated_range_buffer *ranges,
991 unsigned int in_count, unsigned int *out_count)
992 {
993 struct file *f = fp->filp;
994 struct inode *inode = file_inode(fp->filp);
995 loff_t maxbytes = (u64)inode->i_sb->s_maxbytes, end;
996 loff_t extent_start, extent_end;
997 int ret = 0;
998
999 if (start > maxbytes)
1000 return -EFBIG;
1001
1002 if (!in_count)
1003 return 0;
1004
1005 /*
1006 * Shrink request scope to what the fs can actually handle.
1007 */
1008 if (length > maxbytes || (maxbytes - length) < start)
1009 length = maxbytes - start;
1010
1011 if (start + length > inode->i_size)
1012 length = inode->i_size - start;
1013
1014 *out_count = 0;
1015 end = start + length;
1016 while (start < end && *out_count < in_count) {
1017 extent_start = vfs_llseek(f, start, SEEK_DATA);
1018 if (extent_start < 0) {
1019 if (extent_start != -ENXIO)
1020 ret = (int)extent_start;
1021 break;
1022 }
1023
1024 if (extent_start >= end)
1025 break;
1026
1027 extent_end = vfs_llseek(f, extent_start, SEEK_HOLE);
1028 if (extent_end < 0) {
1029 if (extent_end != -ENXIO)
1030 ret = (int)extent_end;
1031 break;
1032 } else if (extent_start >= extent_end) {
1033 break;
1034 }
1035
1036 ranges[*out_count].file_offset = cpu_to_le64(extent_start);
1037 ranges[(*out_count)++].length =
1038 cpu_to_le64(min(extent_end, end) - extent_start);
1039
1040 start = extent_end;
1041 }
1042
1043 return ret;
1044 }
1045
ksmbd_vfs_remove_xattr(struct user_namespace * user_ns,const struct path * path,char * attr_name)1046 int ksmbd_vfs_remove_xattr(struct user_namespace *user_ns,
1047 const struct path *path, char *attr_name)
1048 {
1049 int err;
1050
1051 err = mnt_want_write(path->mnt);
1052 if (err)
1053 return err;
1054
1055 err = vfs_removexattr(user_ns, path->dentry, attr_name);
1056 mnt_drop_write(path->mnt);
1057
1058 return err;
1059 }
1060
ksmbd_vfs_unlink(struct file * filp)1061 int ksmbd_vfs_unlink(struct file *filp)
1062 {
1063 int err = 0;
1064 struct dentry *dir, *dentry = filp->f_path.dentry;
1065 struct user_namespace *user_ns = file_mnt_user_ns(filp);
1066
1067 err = mnt_want_write(filp->f_path.mnt);
1068 if (err)
1069 return err;
1070
1071 dir = dget_parent(dentry);
1072 err = ksmbd_vfs_lock_parent(dir, dentry);
1073 if (err)
1074 goto out;
1075 dget(dentry);
1076
1077 if (S_ISDIR(d_inode(dentry)->i_mode))
1078 err = vfs_rmdir(user_ns, d_inode(dir), dentry);
1079 else
1080 err = vfs_unlink(user_ns, d_inode(dir), dentry, NULL);
1081
1082 dput(dentry);
1083 inode_unlock(d_inode(dir));
1084 if (err)
1085 ksmbd_debug(VFS, "failed to delete, err %d\n", err);
1086 out:
1087 dput(dir);
1088 mnt_drop_write(filp->f_path.mnt);
1089
1090 return err;
1091 }
1092
__dir_empty(struct dir_context * ctx,const char * name,int namlen,loff_t offset,u64 ino,unsigned int d_type)1093 static int __dir_empty(struct dir_context *ctx, const char *name, int namlen,
1094 loff_t offset, u64 ino, unsigned int d_type)
1095 {
1096 struct ksmbd_readdir_data *buf;
1097
1098 buf = container_of(ctx, struct ksmbd_readdir_data, ctx);
1099 buf->dirent_count++;
1100
1101 if (buf->dirent_count > 2)
1102 return -ENOTEMPTY;
1103 return 0;
1104 }
1105
1106 /**
1107 * ksmbd_vfs_empty_dir() - check for empty directory
1108 * @fp: ksmbd file pointer
1109 *
1110 * Return: true if directory empty, otherwise false
1111 */
ksmbd_vfs_empty_dir(struct ksmbd_file * fp)1112 int ksmbd_vfs_empty_dir(struct ksmbd_file *fp)
1113 {
1114 int err;
1115 struct ksmbd_readdir_data readdir_data;
1116
1117 memset(&readdir_data, 0, sizeof(struct ksmbd_readdir_data));
1118
1119 set_ctx_actor(&readdir_data.ctx, __dir_empty);
1120 readdir_data.dirent_count = 0;
1121
1122 err = iterate_dir(fp->filp, &readdir_data.ctx);
1123 if (readdir_data.dirent_count > 2)
1124 err = -ENOTEMPTY;
1125 else
1126 err = 0;
1127 return err;
1128 }
1129
__caseless_lookup(struct dir_context * ctx,const char * name,int namlen,loff_t offset,u64 ino,unsigned int d_type)1130 static int __caseless_lookup(struct dir_context *ctx, const char *name,
1131 int namlen, loff_t offset, u64 ino,
1132 unsigned int d_type)
1133 {
1134 struct ksmbd_readdir_data *buf;
1135 int cmp = -EINVAL;
1136
1137 buf = container_of(ctx, struct ksmbd_readdir_data, ctx);
1138
1139 if (buf->used != namlen)
1140 return 0;
1141 if (IS_ENABLED(CONFIG_UNICODE) && buf->um) {
1142 const struct qstr q_buf = {.name = buf->private,
1143 .len = buf->used};
1144 const struct qstr q_name = {.name = name,
1145 .len = namlen};
1146
1147 cmp = utf8_strncasecmp(buf->um, &q_buf, &q_name);
1148 }
1149 if (cmp < 0)
1150 cmp = strncasecmp((char *)buf->private, name, namlen);
1151 if (!cmp) {
1152 memcpy((char *)buf->private, name, namlen);
1153 buf->dirent_count = 1;
1154 return -EEXIST;
1155 }
1156 return 0;
1157 }
1158
1159 /**
1160 * ksmbd_vfs_lookup_in_dir() - lookup a file in a directory
1161 * @dir: path info
1162 * @name: filename to lookup
1163 * @namelen: filename length
1164 *
1165 * Return: 0 on success, otherwise error
1166 */
ksmbd_vfs_lookup_in_dir(const struct path * dir,char * name,size_t namelen,struct unicode_map * um)1167 static int ksmbd_vfs_lookup_in_dir(const struct path *dir, char *name,
1168 size_t namelen, struct unicode_map *um)
1169 {
1170 int ret;
1171 struct file *dfilp;
1172 int flags = O_RDONLY | O_LARGEFILE;
1173 struct ksmbd_readdir_data readdir_data = {
1174 .ctx.actor = __caseless_lookup,
1175 .private = name,
1176 .used = namelen,
1177 .dirent_count = 0,
1178 .um = um,
1179 };
1180
1181 dfilp = dentry_open(dir, flags, current_cred());
1182 if (IS_ERR(dfilp))
1183 return PTR_ERR(dfilp);
1184
1185 ret = iterate_dir(dfilp, &readdir_data.ctx);
1186 if (readdir_data.dirent_count > 0)
1187 ret = 0;
1188 fput(dfilp);
1189 return ret;
1190 }
1191
1192 /**
1193 * ksmbd_vfs_kern_path_locked() - lookup a file and get path info
1194 * @name: file path that is relative to share
1195 * @flags: lookup flags
1196 * @parent_path: if lookup succeed, return parent_path info
1197 * @path: if lookup succeed, return path info
1198 * @caseless: caseless filename lookup
1199 *
1200 * Return: 0 on success, otherwise error
1201 */
ksmbd_vfs_kern_path_locked(struct ksmbd_work * work,char * name,unsigned int flags,struct path * parent_path,struct path * path,bool caseless)1202 int ksmbd_vfs_kern_path_locked(struct ksmbd_work *work, char *name,
1203 unsigned int flags, struct path *parent_path,
1204 struct path *path, bool caseless)
1205 {
1206 struct ksmbd_share_config *share_conf = work->tcon->share_conf;
1207 int err;
1208
1209 err = ksmbd_vfs_path_lookup_locked(share_conf, name, flags, parent_path,
1210 path);
1211 if (!err)
1212 return 0;
1213
1214 if (caseless) {
1215 char *filepath;
1216 size_t path_len, remain_len;
1217
1218 filepath = kstrdup(name, GFP_KERNEL);
1219 if (!filepath)
1220 return -ENOMEM;
1221
1222 path_len = strlen(filepath);
1223 remain_len = path_len;
1224
1225 *parent_path = share_conf->vfs_path;
1226 path_get(parent_path);
1227
1228 while (d_can_lookup(parent_path->dentry)) {
1229 char *filename = filepath + path_len - remain_len;
1230 char *next = strchrnul(filename, '/');
1231 size_t filename_len = next - filename;
1232 bool is_last = !next[0];
1233
1234 if (filename_len == 0)
1235 break;
1236
1237 err = ksmbd_vfs_lookup_in_dir(parent_path, filename,
1238 filename_len,
1239 work->conn->um);
1240 if (err)
1241 goto out2;
1242
1243 next[0] = '\0';
1244
1245 err = vfs_path_lookup(share_conf->vfs_path.dentry,
1246 share_conf->vfs_path.mnt,
1247 filepath,
1248 flags,
1249 path);
1250 if (err)
1251 goto out2;
1252 else if (is_last)
1253 goto out1;
1254 path_put(parent_path);
1255 *parent_path = *path;
1256
1257 next[0] = '/';
1258 remain_len -= filename_len + 1;
1259 }
1260
1261 err = -EINVAL;
1262 out2:
1263 path_put(parent_path);
1264 out1:
1265 kfree(filepath);
1266 }
1267
1268 if (!err) {
1269 err = mnt_want_write(parent_path->mnt);
1270 if (err) {
1271 path_put(path);
1272 path_put(parent_path);
1273 return err;
1274 }
1275
1276 err = ksmbd_vfs_lock_parent(parent_path->dentry, path->dentry);
1277 if (err) {
1278 path_put(path);
1279 path_put(parent_path);
1280 }
1281 }
1282 return err;
1283 }
1284
ksmbd_vfs_kern_path_unlock(struct path * parent_path,struct path * path)1285 void ksmbd_vfs_kern_path_unlock(struct path *parent_path, struct path *path)
1286 {
1287 inode_unlock(d_inode(parent_path->dentry));
1288 mnt_drop_write(parent_path->mnt);
1289 path_put(path);
1290 path_put(parent_path);
1291 }
1292
ksmbd_vfs_kern_path_create(struct ksmbd_work * work,const char * name,unsigned int flags,struct path * path)1293 struct dentry *ksmbd_vfs_kern_path_create(struct ksmbd_work *work,
1294 const char *name,
1295 unsigned int flags,
1296 struct path *path)
1297 {
1298 char *abs_name;
1299 struct dentry *dent;
1300
1301 abs_name = convert_to_unix_name(work->tcon->share_conf, name);
1302 if (!abs_name)
1303 return ERR_PTR(-ENOMEM);
1304
1305 dent = kern_path_create(AT_FDCWD, abs_name, path, flags);
1306 kfree(abs_name);
1307 return dent;
1308 }
1309
ksmbd_vfs_remove_acl_xattrs(struct user_namespace * user_ns,const struct path * path)1310 int ksmbd_vfs_remove_acl_xattrs(struct user_namespace *user_ns,
1311 const struct path *path)
1312 {
1313 char *name, *xattr_list = NULL;
1314 ssize_t xattr_list_len;
1315 int err = 0;
1316
1317 xattr_list_len = ksmbd_vfs_listxattr(path->dentry, &xattr_list);
1318 if (xattr_list_len < 0) {
1319 goto out;
1320 } else if (!xattr_list_len) {
1321 ksmbd_debug(SMB, "empty xattr in the file\n");
1322 goto out;
1323 }
1324
1325 for (name = xattr_list; name - xattr_list < xattr_list_len;
1326 name += strlen(name) + 1) {
1327 ksmbd_debug(SMB, "%s, len %zd\n", name, strlen(name));
1328
1329 if (!strncmp(name, XATTR_NAME_POSIX_ACL_ACCESS,
1330 sizeof(XATTR_NAME_POSIX_ACL_ACCESS) - 1) ||
1331 !strncmp(name, XATTR_NAME_POSIX_ACL_DEFAULT,
1332 sizeof(XATTR_NAME_POSIX_ACL_DEFAULT) - 1)) {
1333 err = ksmbd_vfs_remove_xattr(user_ns, path, name);
1334 if (err)
1335 ksmbd_debug(SMB,
1336 "remove acl xattr failed : %s\n", name);
1337 }
1338 }
1339
1340 out:
1341 kvfree(xattr_list);
1342 return err;
1343 }
1344
ksmbd_vfs_remove_sd_xattrs(struct user_namespace * user_ns,const struct path * path)1345 int ksmbd_vfs_remove_sd_xattrs(struct user_namespace *user_ns, const struct path *path)
1346 {
1347 char *name, *xattr_list = NULL;
1348 ssize_t xattr_list_len;
1349 int err = 0;
1350
1351 xattr_list_len = ksmbd_vfs_listxattr(path->dentry, &xattr_list);
1352 if (xattr_list_len < 0) {
1353 goto out;
1354 } else if (!xattr_list_len) {
1355 ksmbd_debug(SMB, "empty xattr in the file\n");
1356 goto out;
1357 }
1358
1359 for (name = xattr_list; name - xattr_list < xattr_list_len;
1360 name += strlen(name) + 1) {
1361 ksmbd_debug(SMB, "%s, len %zd\n", name, strlen(name));
1362
1363 if (!strncmp(name, XATTR_NAME_SD, XATTR_NAME_SD_LEN)) {
1364 err = ksmbd_vfs_remove_xattr(user_ns, path, name);
1365 if (err)
1366 ksmbd_debug(SMB, "remove xattr failed : %s\n", name);
1367 }
1368 }
1369 out:
1370 kvfree(xattr_list);
1371 return err;
1372 }
1373
ksmbd_vfs_make_xattr_posix_acl(struct user_namespace * user_ns,struct inode * inode,int acl_type)1374 static struct xattr_smb_acl *ksmbd_vfs_make_xattr_posix_acl(struct user_namespace *user_ns,
1375 struct inode *inode,
1376 int acl_type)
1377 {
1378 struct xattr_smb_acl *smb_acl = NULL;
1379 struct posix_acl *posix_acls;
1380 struct posix_acl_entry *pa_entry;
1381 struct xattr_acl_entry *xa_entry;
1382 int i;
1383
1384 if (!IS_ENABLED(CONFIG_FS_POSIX_ACL))
1385 return NULL;
1386
1387 posix_acls = get_acl(inode, acl_type);
1388 if (IS_ERR_OR_NULL(posix_acls))
1389 return NULL;
1390
1391 smb_acl = kzalloc(sizeof(struct xattr_smb_acl) +
1392 sizeof(struct xattr_acl_entry) * posix_acls->a_count,
1393 GFP_KERNEL);
1394 if (!smb_acl)
1395 goto out;
1396
1397 smb_acl->count = posix_acls->a_count;
1398 pa_entry = posix_acls->a_entries;
1399 xa_entry = smb_acl->entries;
1400 for (i = 0; i < posix_acls->a_count; i++, pa_entry++, xa_entry++) {
1401 switch (pa_entry->e_tag) {
1402 case ACL_USER:
1403 xa_entry->type = SMB_ACL_USER;
1404 xa_entry->uid = posix_acl_uid_translate(user_ns, pa_entry);
1405 break;
1406 case ACL_USER_OBJ:
1407 xa_entry->type = SMB_ACL_USER_OBJ;
1408 break;
1409 case ACL_GROUP:
1410 xa_entry->type = SMB_ACL_GROUP;
1411 xa_entry->gid = posix_acl_gid_translate(user_ns, pa_entry);
1412 break;
1413 case ACL_GROUP_OBJ:
1414 xa_entry->type = SMB_ACL_GROUP_OBJ;
1415 break;
1416 case ACL_OTHER:
1417 xa_entry->type = SMB_ACL_OTHER;
1418 break;
1419 case ACL_MASK:
1420 xa_entry->type = SMB_ACL_MASK;
1421 break;
1422 default:
1423 pr_err("unknown type : 0x%x\n", pa_entry->e_tag);
1424 goto out;
1425 }
1426
1427 if (pa_entry->e_perm & ACL_READ)
1428 xa_entry->perm |= SMB_ACL_READ;
1429 if (pa_entry->e_perm & ACL_WRITE)
1430 xa_entry->perm |= SMB_ACL_WRITE;
1431 if (pa_entry->e_perm & ACL_EXECUTE)
1432 xa_entry->perm |= SMB_ACL_EXECUTE;
1433 }
1434 out:
1435 posix_acl_release(posix_acls);
1436 return smb_acl;
1437 }
1438
ksmbd_vfs_set_sd_xattr(struct ksmbd_conn * conn,struct user_namespace * user_ns,const struct path * path,struct smb_ntsd * pntsd,int len,bool get_write)1439 int ksmbd_vfs_set_sd_xattr(struct ksmbd_conn *conn,
1440 struct user_namespace *user_ns,
1441 const struct path *path,
1442 struct smb_ntsd *pntsd, int len,
1443 bool get_write)
1444 {
1445 int rc;
1446 struct ndr sd_ndr = {0}, acl_ndr = {0};
1447 struct xattr_ntacl acl = {0};
1448 struct xattr_smb_acl *smb_acl, *def_smb_acl = NULL;
1449 struct dentry *dentry = path->dentry;
1450 struct inode *inode = d_inode(dentry);
1451
1452 acl.version = 4;
1453 acl.hash_type = XATTR_SD_HASH_TYPE_SHA256;
1454 acl.current_time = ksmbd_UnixTimeToNT(current_time(inode));
1455
1456 memcpy(acl.desc, "posix_acl", 9);
1457 acl.desc_len = 10;
1458
1459 pntsd->osidoffset =
1460 cpu_to_le32(le32_to_cpu(pntsd->osidoffset) + NDR_NTSD_OFFSETOF);
1461 pntsd->gsidoffset =
1462 cpu_to_le32(le32_to_cpu(pntsd->gsidoffset) + NDR_NTSD_OFFSETOF);
1463 pntsd->dacloffset =
1464 cpu_to_le32(le32_to_cpu(pntsd->dacloffset) + NDR_NTSD_OFFSETOF);
1465
1466 acl.sd_buf = (char *)pntsd;
1467 acl.sd_size = len;
1468
1469 rc = ksmbd_gen_sd_hash(conn, acl.sd_buf, acl.sd_size, acl.hash);
1470 if (rc) {
1471 pr_err("failed to generate hash for ndr acl\n");
1472 return rc;
1473 }
1474
1475 smb_acl = ksmbd_vfs_make_xattr_posix_acl(user_ns, inode,
1476 ACL_TYPE_ACCESS);
1477 if (S_ISDIR(inode->i_mode))
1478 def_smb_acl = ksmbd_vfs_make_xattr_posix_acl(user_ns, inode,
1479 ACL_TYPE_DEFAULT);
1480
1481 rc = ndr_encode_posix_acl(&acl_ndr, user_ns, inode,
1482 smb_acl, def_smb_acl);
1483 if (rc) {
1484 pr_err("failed to encode ndr to posix acl\n");
1485 goto out;
1486 }
1487
1488 rc = ksmbd_gen_sd_hash(conn, acl_ndr.data, acl_ndr.offset,
1489 acl.posix_acl_hash);
1490 if (rc) {
1491 pr_err("failed to generate hash for ndr acl\n");
1492 goto out;
1493 }
1494
1495 rc = ndr_encode_v4_ntacl(&sd_ndr, &acl);
1496 if (rc) {
1497 pr_err("failed to encode ndr to posix acl\n");
1498 goto out;
1499 }
1500
1501 rc = ksmbd_vfs_setxattr(user_ns, path,
1502 XATTR_NAME_SD, sd_ndr.data,
1503 sd_ndr.offset, 0, get_write);
1504 if (rc < 0)
1505 pr_err("Failed to store XATTR ntacl :%d\n", rc);
1506
1507 kfree(sd_ndr.data);
1508 out:
1509 kfree(acl_ndr.data);
1510 kfree(smb_acl);
1511 kfree(def_smb_acl);
1512 return rc;
1513 }
1514
ksmbd_vfs_get_sd_xattr(struct ksmbd_conn * conn,struct user_namespace * user_ns,struct dentry * dentry,struct smb_ntsd ** pntsd)1515 int ksmbd_vfs_get_sd_xattr(struct ksmbd_conn *conn,
1516 struct user_namespace *user_ns,
1517 struct dentry *dentry,
1518 struct smb_ntsd **pntsd)
1519 {
1520 int rc;
1521 struct ndr n;
1522 struct inode *inode = d_inode(dentry);
1523 struct ndr acl_ndr = {0};
1524 struct xattr_ntacl acl;
1525 struct xattr_smb_acl *smb_acl = NULL, *def_smb_acl = NULL;
1526 __u8 cmp_hash[XATTR_SD_HASH_SIZE] = {0};
1527
1528 rc = ksmbd_vfs_getxattr(user_ns, dentry, XATTR_NAME_SD, &n.data);
1529 if (rc <= 0)
1530 return rc;
1531
1532 n.length = rc;
1533 rc = ndr_decode_v4_ntacl(&n, &acl);
1534 if (rc)
1535 goto free_n_data;
1536
1537 smb_acl = ksmbd_vfs_make_xattr_posix_acl(user_ns, inode,
1538 ACL_TYPE_ACCESS);
1539 if (S_ISDIR(inode->i_mode))
1540 def_smb_acl = ksmbd_vfs_make_xattr_posix_acl(user_ns, inode,
1541 ACL_TYPE_DEFAULT);
1542
1543 rc = ndr_encode_posix_acl(&acl_ndr, user_ns, inode, smb_acl,
1544 def_smb_acl);
1545 if (rc) {
1546 pr_err("failed to encode ndr to posix acl\n");
1547 goto out_free;
1548 }
1549
1550 rc = ksmbd_gen_sd_hash(conn, acl_ndr.data, acl_ndr.offset, cmp_hash);
1551 if (rc) {
1552 pr_err("failed to generate hash for ndr acl\n");
1553 goto out_free;
1554 }
1555
1556 if (memcmp(cmp_hash, acl.posix_acl_hash, XATTR_SD_HASH_SIZE)) {
1557 pr_err("hash value diff\n");
1558 rc = -EINVAL;
1559 goto out_free;
1560 }
1561
1562 *pntsd = acl.sd_buf;
1563 if (acl.sd_size < sizeof(struct smb_ntsd)) {
1564 pr_err("sd size is invalid\n");
1565 goto out_free;
1566 }
1567
1568 (*pntsd)->osidoffset = cpu_to_le32(le32_to_cpu((*pntsd)->osidoffset) -
1569 NDR_NTSD_OFFSETOF);
1570 (*pntsd)->gsidoffset = cpu_to_le32(le32_to_cpu((*pntsd)->gsidoffset) -
1571 NDR_NTSD_OFFSETOF);
1572 (*pntsd)->dacloffset = cpu_to_le32(le32_to_cpu((*pntsd)->dacloffset) -
1573 NDR_NTSD_OFFSETOF);
1574
1575 rc = acl.sd_size;
1576 out_free:
1577 kfree(acl_ndr.data);
1578 kfree(smb_acl);
1579 kfree(def_smb_acl);
1580 if (rc < 0) {
1581 kfree(acl.sd_buf);
1582 *pntsd = NULL;
1583 }
1584
1585 free_n_data:
1586 kfree(n.data);
1587 return rc;
1588 }
1589
ksmbd_vfs_set_dos_attrib_xattr(struct user_namespace * user_ns,const struct path * path,struct xattr_dos_attrib * da,bool get_write)1590 int ksmbd_vfs_set_dos_attrib_xattr(struct user_namespace *user_ns,
1591 const struct path *path,
1592 struct xattr_dos_attrib *da,
1593 bool get_write)
1594 {
1595 struct ndr n;
1596 int err;
1597
1598 err = ndr_encode_dos_attr(&n, da);
1599 if (err)
1600 return err;
1601
1602 err = ksmbd_vfs_setxattr(user_ns, path, XATTR_NAME_DOS_ATTRIBUTE,
1603 (void *)n.data, n.offset, 0, get_write);
1604 if (err)
1605 ksmbd_debug(SMB, "failed to store dos attribute in xattr\n");
1606 kfree(n.data);
1607
1608 return err;
1609 }
1610
ksmbd_vfs_get_dos_attrib_xattr(struct user_namespace * user_ns,struct dentry * dentry,struct xattr_dos_attrib * da)1611 int ksmbd_vfs_get_dos_attrib_xattr(struct user_namespace *user_ns,
1612 struct dentry *dentry,
1613 struct xattr_dos_attrib *da)
1614 {
1615 struct ndr n;
1616 int err;
1617
1618 err = ksmbd_vfs_getxattr(user_ns, dentry, XATTR_NAME_DOS_ATTRIBUTE,
1619 (char **)&n.data);
1620 if (err > 0) {
1621 n.length = err;
1622 if (ndr_decode_dos_attr(&n, da))
1623 err = -EINVAL;
1624 kfree(n.data);
1625 } else {
1626 ksmbd_debug(SMB, "failed to load dos attribute in xattr\n");
1627 }
1628
1629 return err;
1630 }
1631
1632 /**
1633 * ksmbd_vfs_init_kstat() - convert unix stat information to smb stat format
1634 * @p: destination buffer
1635 * @ksmbd_kstat: ksmbd kstat wrapper
1636 */
ksmbd_vfs_init_kstat(char ** p,struct ksmbd_kstat * ksmbd_kstat)1637 void *ksmbd_vfs_init_kstat(char **p, struct ksmbd_kstat *ksmbd_kstat)
1638 {
1639 struct file_directory_info *info = (struct file_directory_info *)(*p);
1640 struct kstat *kstat = ksmbd_kstat->kstat;
1641 u64 time;
1642
1643 info->FileIndex = 0;
1644 info->CreationTime = cpu_to_le64(ksmbd_kstat->create_time);
1645 time = ksmbd_UnixTimeToNT(kstat->atime);
1646 info->LastAccessTime = cpu_to_le64(time);
1647 time = ksmbd_UnixTimeToNT(kstat->mtime);
1648 info->LastWriteTime = cpu_to_le64(time);
1649 time = ksmbd_UnixTimeToNT(kstat->ctime);
1650 info->ChangeTime = cpu_to_le64(time);
1651
1652 if (ksmbd_kstat->file_attributes & ATTR_DIRECTORY_LE) {
1653 info->EndOfFile = 0;
1654 info->AllocationSize = 0;
1655 } else {
1656 info->EndOfFile = cpu_to_le64(kstat->size);
1657 info->AllocationSize = cpu_to_le64(kstat->blocks << 9);
1658 }
1659 info->ExtFileAttributes = ksmbd_kstat->file_attributes;
1660
1661 return info;
1662 }
1663
ksmbd_vfs_fill_dentry_attrs(struct ksmbd_work * work,struct user_namespace * user_ns,struct dentry * dentry,struct ksmbd_kstat * ksmbd_kstat)1664 int ksmbd_vfs_fill_dentry_attrs(struct ksmbd_work *work,
1665 struct user_namespace *user_ns,
1666 struct dentry *dentry,
1667 struct ksmbd_kstat *ksmbd_kstat)
1668 {
1669 u64 time;
1670 int rc;
1671
1672 generic_fillattr(user_ns, d_inode(dentry), ksmbd_kstat->kstat);
1673
1674 time = ksmbd_UnixTimeToNT(ksmbd_kstat->kstat->ctime);
1675 ksmbd_kstat->create_time = time;
1676
1677 /*
1678 * set default value for the case that store dos attributes is not yes
1679 * or that acl is disable in server's filesystem and the config is yes.
1680 */
1681 if (S_ISDIR(ksmbd_kstat->kstat->mode))
1682 ksmbd_kstat->file_attributes = ATTR_DIRECTORY_LE;
1683 else
1684 ksmbd_kstat->file_attributes = ATTR_ARCHIVE_LE;
1685
1686 if (test_share_config_flag(work->tcon->share_conf,
1687 KSMBD_SHARE_FLAG_STORE_DOS_ATTRS)) {
1688 struct xattr_dos_attrib da;
1689
1690 rc = ksmbd_vfs_get_dos_attrib_xattr(user_ns, dentry, &da);
1691 if (rc > 0) {
1692 ksmbd_kstat->file_attributes = cpu_to_le32(da.attr);
1693 ksmbd_kstat->create_time = da.create_time;
1694 } else {
1695 ksmbd_debug(VFS, "fail to load dos attribute.\n");
1696 }
1697 }
1698
1699 return 0;
1700 }
1701
ksmbd_vfs_casexattr_len(struct user_namespace * user_ns,struct dentry * dentry,char * attr_name,int attr_name_len)1702 ssize_t ksmbd_vfs_casexattr_len(struct user_namespace *user_ns,
1703 struct dentry *dentry, char *attr_name,
1704 int attr_name_len)
1705 {
1706 char *name, *xattr_list = NULL;
1707 ssize_t value_len = -ENOENT, xattr_list_len;
1708
1709 xattr_list_len = ksmbd_vfs_listxattr(dentry, &xattr_list);
1710 if (xattr_list_len <= 0)
1711 goto out;
1712
1713 for (name = xattr_list; name - xattr_list < xattr_list_len;
1714 name += strlen(name) + 1) {
1715 ksmbd_debug(VFS, "%s, len %zd\n", name, strlen(name));
1716 if (strncasecmp(attr_name, name, attr_name_len))
1717 continue;
1718
1719 value_len = ksmbd_vfs_xattr_len(user_ns, dentry, name);
1720 break;
1721 }
1722
1723 out:
1724 kvfree(xattr_list);
1725 return value_len;
1726 }
1727
ksmbd_vfs_xattr_stream_name(char * stream_name,char ** xattr_stream_name,size_t * xattr_stream_name_size,int s_type)1728 int ksmbd_vfs_xattr_stream_name(char *stream_name, char **xattr_stream_name,
1729 size_t *xattr_stream_name_size, int s_type)
1730 {
1731 char *type, *buf;
1732
1733 if (s_type == DIR_STREAM)
1734 type = ":$INDEX_ALLOCATION";
1735 else
1736 type = ":$DATA";
1737
1738 buf = kasprintf(GFP_KERNEL, "%s%s%s",
1739 XATTR_NAME_STREAM, stream_name, type);
1740 if (!buf)
1741 return -ENOMEM;
1742
1743 *xattr_stream_name = buf;
1744 *xattr_stream_name_size = strlen(buf) + 1;
1745
1746 return 0;
1747 }
1748
ksmbd_vfs_copy_file_ranges(struct ksmbd_work * work,struct ksmbd_file * src_fp,struct ksmbd_file * dst_fp,struct srv_copychunk * chunks,unsigned int chunk_count,unsigned int * chunk_count_written,unsigned int * chunk_size_written,loff_t * total_size_written)1749 int ksmbd_vfs_copy_file_ranges(struct ksmbd_work *work,
1750 struct ksmbd_file *src_fp,
1751 struct ksmbd_file *dst_fp,
1752 struct srv_copychunk *chunks,
1753 unsigned int chunk_count,
1754 unsigned int *chunk_count_written,
1755 unsigned int *chunk_size_written,
1756 loff_t *total_size_written)
1757 {
1758 unsigned int i;
1759 loff_t src_off, dst_off, src_file_size;
1760 size_t len;
1761 int ret;
1762
1763 *chunk_count_written = 0;
1764 *chunk_size_written = 0;
1765 *total_size_written = 0;
1766
1767 if (!(src_fp->daccess & (FILE_READ_DATA_LE | FILE_EXECUTE_LE))) {
1768 pr_err("no right to read(%pD)\n", src_fp->filp);
1769 return -EACCES;
1770 }
1771 if (!(dst_fp->daccess & (FILE_WRITE_DATA_LE | FILE_APPEND_DATA_LE))) {
1772 pr_err("no right to write(%pD)\n", dst_fp->filp);
1773 return -EACCES;
1774 }
1775
1776 if (ksmbd_stream_fd(src_fp) || ksmbd_stream_fd(dst_fp))
1777 return -EBADF;
1778
1779 smb_break_all_levII_oplock(work, dst_fp, 1);
1780
1781 if (!work->tcon->posix_extensions) {
1782 for (i = 0; i < chunk_count; i++) {
1783 src_off = le64_to_cpu(chunks[i].SourceOffset);
1784 dst_off = le64_to_cpu(chunks[i].TargetOffset);
1785 len = le32_to_cpu(chunks[i].Length);
1786
1787 if (check_lock_range(src_fp->filp, src_off,
1788 src_off + len - 1, READ))
1789 return -EAGAIN;
1790 if (check_lock_range(dst_fp->filp, dst_off,
1791 dst_off + len - 1, WRITE))
1792 return -EAGAIN;
1793 }
1794 }
1795
1796 src_file_size = i_size_read(file_inode(src_fp->filp));
1797
1798 for (i = 0; i < chunk_count; i++) {
1799 src_off = le64_to_cpu(chunks[i].SourceOffset);
1800 dst_off = le64_to_cpu(chunks[i].TargetOffset);
1801 len = le32_to_cpu(chunks[i].Length);
1802
1803 if (src_off + len > src_file_size)
1804 return -E2BIG;
1805
1806 ret = vfs_copy_file_range(src_fp->filp, src_off,
1807 dst_fp->filp, dst_off, len, 0);
1808 if (ret == -EOPNOTSUPP || ret == -EXDEV)
1809 ret = vfs_copy_file_range(src_fp->filp, src_off,
1810 dst_fp->filp, dst_off, len,
1811 COPY_FILE_SPLICE);
1812 if (ret < 0)
1813 return ret;
1814
1815 *chunk_count_written += 1;
1816 *total_size_written += ret;
1817 }
1818 return 0;
1819 }
1820
ksmbd_vfs_posix_lock_wait(struct file_lock * flock)1821 void ksmbd_vfs_posix_lock_wait(struct file_lock *flock)
1822 {
1823 wait_event(flock->fl_wait, !flock->fl_blocker);
1824 }
1825
ksmbd_vfs_posix_lock_wait_timeout(struct file_lock * flock,long timeout)1826 int ksmbd_vfs_posix_lock_wait_timeout(struct file_lock *flock, long timeout)
1827 {
1828 return wait_event_interruptible_timeout(flock->fl_wait,
1829 !flock->fl_blocker,
1830 timeout);
1831 }
1832
ksmbd_vfs_posix_lock_unblock(struct file_lock * flock)1833 void ksmbd_vfs_posix_lock_unblock(struct file_lock *flock)
1834 {
1835 locks_delete_block(flock);
1836 }
1837
ksmbd_vfs_set_init_posix_acl(struct user_namespace * user_ns,struct path * path)1838 int ksmbd_vfs_set_init_posix_acl(struct user_namespace *user_ns,
1839 struct path *path)
1840 {
1841 struct posix_acl_state acl_state;
1842 struct posix_acl *acls;
1843 struct inode *inode = d_inode(path->dentry);
1844 int rc;
1845
1846 if (!IS_ENABLED(CONFIG_FS_POSIX_ACL))
1847 return -EOPNOTSUPP;
1848
1849 ksmbd_debug(SMB, "Set posix acls\n");
1850 rc = init_acl_state(&acl_state, 1);
1851 if (rc)
1852 return rc;
1853
1854 /* Set default owner group */
1855 acl_state.owner.allow = (inode->i_mode & 0700) >> 6;
1856 acl_state.group.allow = (inode->i_mode & 0070) >> 3;
1857 acl_state.other.allow = inode->i_mode & 0007;
1858 acl_state.users->aces[acl_state.users->n].uid = inode->i_uid;
1859 acl_state.users->aces[acl_state.users->n++].perms.allow =
1860 acl_state.owner.allow;
1861 acl_state.groups->aces[acl_state.groups->n].gid = inode->i_gid;
1862 acl_state.groups->aces[acl_state.groups->n++].perms.allow =
1863 acl_state.group.allow;
1864 acl_state.mask.allow = 0x07;
1865
1866 acls = posix_acl_alloc(6, GFP_KERNEL);
1867 if (!acls) {
1868 free_acl_state(&acl_state);
1869 return -ENOMEM;
1870 }
1871 posix_state_to_acl(&acl_state, acls->a_entries);
1872
1873 rc = set_posix_acl(user_ns, inode, ACL_TYPE_ACCESS, acls);
1874 if (rc < 0)
1875 ksmbd_debug(SMB, "Set posix acl(ACL_TYPE_ACCESS) failed, rc : %d\n",
1876 rc);
1877 else if (S_ISDIR(inode->i_mode)) {
1878 posix_state_to_acl(&acl_state, acls->a_entries);
1879 rc = set_posix_acl(user_ns, inode, ACL_TYPE_DEFAULT,
1880 acls);
1881 if (rc < 0)
1882 ksmbd_debug(SMB, "Set posix acl(ACL_TYPE_DEFAULT) failed, rc : %d\n",
1883 rc);
1884 }
1885
1886 free_acl_state(&acl_state);
1887 posix_acl_release(acls);
1888 return rc;
1889 }
1890
ksmbd_vfs_inherit_posix_acl(struct user_namespace * user_ns,struct path * path,struct inode * parent_inode)1891 int ksmbd_vfs_inherit_posix_acl(struct user_namespace *user_ns,
1892 struct path *path, struct inode *parent_inode)
1893 {
1894 struct posix_acl *acls;
1895 struct posix_acl_entry *pace;
1896 struct inode *inode = d_inode(path->dentry);
1897 int rc, i;
1898
1899 if (!IS_ENABLED(CONFIG_FS_POSIX_ACL))
1900 return -EOPNOTSUPP;
1901
1902 acls = get_acl(parent_inode, ACL_TYPE_DEFAULT);
1903 if (IS_ERR_OR_NULL(acls))
1904 return -ENOENT;
1905 pace = acls->a_entries;
1906
1907 for (i = 0; i < acls->a_count; i++, pace++) {
1908 if (pace->e_tag == ACL_MASK) {
1909 pace->e_perm = 0x07;
1910 break;
1911 }
1912 }
1913
1914 rc = set_posix_acl(user_ns, inode, ACL_TYPE_ACCESS, acls);
1915 if (rc < 0)
1916 ksmbd_debug(SMB, "Set posix acl(ACL_TYPE_ACCESS) failed, rc : %d\n",
1917 rc);
1918 if (S_ISDIR(inode->i_mode)) {
1919 rc = set_posix_acl(user_ns, inode, ACL_TYPE_DEFAULT,
1920 acls);
1921 if (rc < 0)
1922 ksmbd_debug(SMB, "Set posix acl(ACL_TYPE_DEFAULT) failed, rc : %d\n",
1923 rc);
1924 }
1925
1926 posix_acl_release(acls);
1927 return rc;
1928 }
1929