1 // SPDX-License-Identifier: GPL-2.0-only
2 /*
3  * Syscall interface to knfsd.
4  *
5  * Copyright (C) 1995, 1996 Olaf Kirch <okir@monad.swb.de>
6  */
7 
8 #include <linux/slab.h>
9 #include <linux/namei.h>
10 #include <linux/ctype.h>
11 #include <linux/fs_context.h>
12 
13 #include <linux/sunrpc/svcsock.h>
14 #include <linux/lockd/lockd.h>
15 #include <linux/sunrpc/addr.h>
16 #include <linux/sunrpc/gss_api.h>
17 #include <linux/sunrpc/rpc_pipe_fs.h>
18 #include <linux/sunrpc/svc.h>
19 #include <linux/module.h>
20 #include <linux/fsnotify.h>
21 #include <linux/nfslocalio.h>
22 
23 #include "idmap.h"
24 #include "nfsd.h"
25 #include "cache.h"
26 #include "state.h"
27 #include "netns.h"
28 #include "pnfs.h"
29 #include "filecache.h"
30 #include "trace.h"
31 #include "netlink.h"
32 
33 /*
34  *	We have a single directory with several nodes in it.
35  */
36 enum {
37 	NFSD_Root = 1,
38 	NFSD_List,
39 	NFSD_Export_Stats,
40 	NFSD_Export_features,
41 	NFSD_Fh,
42 	NFSD_FO_UnlockIP,
43 	NFSD_FO_UnlockFS,
44 	NFSD_Threads,
45 	NFSD_Pool_Threads,
46 	NFSD_Pool_Stats,
47 	NFSD_Reply_Cache_Stats,
48 	NFSD_Versions,
49 	NFSD_Ports,
50 	NFSD_MaxBlkSize,
51 	NFSD_MaxConnections,
52 	NFSD_Filecache,
53 	NFSD_Leasetime,
54 	NFSD_Gracetime,
55 	NFSD_RecoveryDir,
56 	NFSD_V4EndGrace,
57 	NFSD_MaxReserved
58 };
59 
60 /*
61  * write() for these nodes.
62  */
63 static ssize_t write_filehandle(struct file *file, char *buf, size_t size);
64 static ssize_t write_unlock_ip(struct file *file, char *buf, size_t size);
65 static ssize_t write_unlock_fs(struct file *file, char *buf, size_t size);
66 static ssize_t write_threads(struct file *file, char *buf, size_t size);
67 static ssize_t write_pool_threads(struct file *file, char *buf, size_t size);
68 static ssize_t write_versions(struct file *file, char *buf, size_t size);
69 static ssize_t write_ports(struct file *file, char *buf, size_t size);
70 static ssize_t write_maxblksize(struct file *file, char *buf, size_t size);
71 static ssize_t write_maxconn(struct file *file, char *buf, size_t size);
72 #ifdef CONFIG_NFSD_V4
73 static ssize_t write_leasetime(struct file *file, char *buf, size_t size);
74 static ssize_t write_gracetime(struct file *file, char *buf, size_t size);
75 #ifdef CONFIG_NFSD_LEGACY_CLIENT_TRACKING
76 static ssize_t write_recoverydir(struct file *file, char *buf, size_t size);
77 #endif
78 static ssize_t write_v4_end_grace(struct file *file, char *buf, size_t size);
79 #endif
80 
81 static ssize_t (*const write_op[])(struct file *, char *, size_t) = {
82 	[NFSD_Fh] = write_filehandle,
83 	[NFSD_FO_UnlockIP] = write_unlock_ip,
84 	[NFSD_FO_UnlockFS] = write_unlock_fs,
85 	[NFSD_Threads] = write_threads,
86 	[NFSD_Pool_Threads] = write_pool_threads,
87 	[NFSD_Versions] = write_versions,
88 	[NFSD_Ports] = write_ports,
89 	[NFSD_MaxBlkSize] = write_maxblksize,
90 	[NFSD_MaxConnections] = write_maxconn,
91 #ifdef CONFIG_NFSD_V4
92 	[NFSD_Leasetime] = write_leasetime,
93 	[NFSD_Gracetime] = write_gracetime,
94 #ifdef CONFIG_NFSD_LEGACY_CLIENT_TRACKING
95 	[NFSD_RecoveryDir] = write_recoverydir,
96 #endif
97 	[NFSD_V4EndGrace] = write_v4_end_grace,
98 #endif
99 };
100 
nfsctl_transaction_write(struct file * file,const char __user * buf,size_t size,loff_t * pos)101 static ssize_t nfsctl_transaction_write(struct file *file, const char __user *buf, size_t size, loff_t *pos)
102 {
103 	ino_t ino =  file_inode(file)->i_ino;
104 	char *data;
105 	ssize_t rv;
106 
107 	if (ino >= ARRAY_SIZE(write_op) || !write_op[ino])
108 		return -EINVAL;
109 
110 	data = simple_transaction_get(file, buf, size);
111 	if (IS_ERR(data))
112 		return PTR_ERR(data);
113 
114 	rv = write_op[ino](file, data, size);
115 	if (rv < 0)
116 		return rv;
117 
118 	simple_transaction_set(file, rv);
119 	return size;
120 }
121 
nfsctl_transaction_read(struct file * file,char __user * buf,size_t size,loff_t * pos)122 static ssize_t nfsctl_transaction_read(struct file *file, char __user *buf, size_t size, loff_t *pos)
123 {
124 	if (! file->private_data) {
125 		/* An attempt to read a transaction file without writing
126 		 * causes a 0-byte write so that the file can return
127 		 * state information
128 		 */
129 		ssize_t rv = nfsctl_transaction_write(file, buf, 0, pos);
130 		if (rv < 0)
131 			return rv;
132 	}
133 	return simple_transaction_read(file, buf, size, pos);
134 }
135 
136 static const struct file_operations transaction_ops = {
137 	.write		= nfsctl_transaction_write,
138 	.read		= nfsctl_transaction_read,
139 	.release	= simple_transaction_release,
140 	.llseek		= default_llseek,
141 };
142 
exports_net_open(struct net * net,struct file * file)143 static int exports_net_open(struct net *net, struct file *file)
144 {
145 	int err;
146 	struct seq_file *seq;
147 	struct nfsd_net *nn = net_generic(net, nfsd_net_id);
148 
149 	err = seq_open(file, &nfs_exports_op);
150 	if (err)
151 		return err;
152 
153 	seq = file->private_data;
154 	seq->private = nn->svc_export_cache;
155 	return 0;
156 }
157 
exports_nfsd_open(struct inode * inode,struct file * file)158 static int exports_nfsd_open(struct inode *inode, struct file *file)
159 {
160 	return exports_net_open(inode->i_sb->s_fs_info, file);
161 }
162 
163 static const struct file_operations exports_nfsd_operations = {
164 	.open		= exports_nfsd_open,
165 	.read		= seq_read,
166 	.llseek		= seq_lseek,
167 	.release	= seq_release,
168 };
169 
export_features_show(struct seq_file * m,void * v)170 static int export_features_show(struct seq_file *m, void *v)
171 {
172 	seq_printf(m, "0x%x 0x%x\n", NFSEXP_ALLFLAGS, NFSEXP_SECINFO_FLAGS);
173 	return 0;
174 }
175 
176 DEFINE_SHOW_ATTRIBUTE(export_features);
177 
nfsd_pool_stats_open(struct inode * inode,struct file * file)178 static int nfsd_pool_stats_open(struct inode *inode, struct file *file)
179 {
180 	struct nfsd_net *nn = net_generic(inode->i_sb->s_fs_info, nfsd_net_id);
181 
182 	return svc_pool_stats_open(&nn->nfsd_info, file);
183 }
184 
185 static const struct file_operations pool_stats_operations = {
186 	.open		= nfsd_pool_stats_open,
187 	.read		= seq_read,
188 	.llseek		= seq_lseek,
189 	.release	= seq_release,
190 };
191 
192 DEFINE_SHOW_ATTRIBUTE(nfsd_reply_cache_stats);
193 
194 DEFINE_SHOW_ATTRIBUTE(nfsd_file_cache_stats);
195 
196 /*----------------------------------------------------------------------------*/
197 /*
198  * payload - write methods
199  */
200 
netns(struct file * file)201 static inline struct net *netns(struct file *file)
202 {
203 	return file_inode(file)->i_sb->s_fs_info;
204 }
205 
206 /*
207  * write_unlock_ip - Release all locks used by a client
208  *
209  * Experimental.
210  *
211  * Input:
212  *			buf:	'\n'-terminated C string containing a
213  *				presentation format IP address
214  *			size:	length of C string in @buf
215  * Output:
216  *	On success:	returns zero if all specified locks were released;
217  *			returns one if one or more locks were not released
218  *	On error:	return code is negative errno value
219  */
write_unlock_ip(struct file * file,char * buf,size_t size)220 static ssize_t write_unlock_ip(struct file *file, char *buf, size_t size)
221 {
222 	struct sockaddr_storage address;
223 	struct sockaddr *sap = (struct sockaddr *)&address;
224 	size_t salen = sizeof(address);
225 	char *fo_path;
226 	struct net *net = netns(file);
227 
228 	/* sanity check */
229 	if (size == 0)
230 		return -EINVAL;
231 
232 	if (buf[size-1] != '\n')
233 		return -EINVAL;
234 
235 	fo_path = buf;
236 	if (qword_get(&buf, fo_path, size) < 0)
237 		return -EINVAL;
238 
239 	if (rpc_pton(net, fo_path, size, sap, salen) == 0)
240 		return -EINVAL;
241 
242 	trace_nfsd_ctl_unlock_ip(net, buf);
243 	return nlmsvc_unlock_all_by_ip(sap);
244 }
245 
246 /*
247  * write_unlock_fs - Release all locks on a local file system
248  *
249  * Experimental.
250  *
251  * Input:
252  *			buf:	'\n'-terminated C string containing the
253  *				absolute pathname of a local file system
254  *			size:	length of C string in @buf
255  * Output:
256  *	On success:	returns zero if all specified locks were released;
257  *			returns one if one or more locks were not released
258  *	On error:	return code is negative errno value
259  */
write_unlock_fs(struct file * file,char * buf,size_t size)260 static ssize_t write_unlock_fs(struct file *file, char *buf, size_t size)
261 {
262 	struct path path;
263 	char *fo_path;
264 	int error;
265 
266 	/* sanity check */
267 	if (size == 0)
268 		return -EINVAL;
269 
270 	if (buf[size-1] != '\n')
271 		return -EINVAL;
272 
273 	fo_path = buf;
274 	if (qword_get(&buf, fo_path, size) < 0)
275 		return -EINVAL;
276 	trace_nfsd_ctl_unlock_fs(netns(file), fo_path);
277 	error = kern_path(fo_path, 0, &path);
278 	if (error)
279 		return error;
280 
281 	/*
282 	 * XXX: Needs better sanity checking.  Otherwise we could end up
283 	 * releasing locks on the wrong file system.
284 	 *
285 	 * For example:
286 	 * 1.  Does the path refer to a directory?
287 	 * 2.  Is that directory a mount point, or
288 	 * 3.  Is that directory the root of an exported file system?
289 	 */
290 	error = nlmsvc_unlock_all_by_sb(path.dentry->d_sb);
291 	nfsd4_revoke_states(netns(file), path.dentry->d_sb);
292 
293 	path_put(&path);
294 	return error;
295 }
296 
297 /*
298  * write_filehandle - Get a variable-length NFS file handle by path
299  *
300  * On input, the buffer contains a '\n'-terminated C string comprised of
301  * three alphanumeric words separated by whitespace.  The string may
302  * contain escape sequences.
303  *
304  * Input:
305  *			buf:
306  *				domain:		client domain name
307  *				path:		export pathname
308  *				maxsize:	numeric maximum size of
309  *						@buf
310  *			size:	length of C string in @buf
311  * Output:
312  *	On success:	passed-in buffer filled with '\n'-terminated C
313  *			string containing a ASCII hex text version
314  *			of the NFS file handle;
315  *			return code is the size in bytes of the string
316  *	On error:	return code is negative errno value
317  */
write_filehandle(struct file * file,char * buf,size_t size)318 static ssize_t write_filehandle(struct file *file, char *buf, size_t size)
319 {
320 	char *dname, *path;
321 	int maxsize;
322 	char *mesg = buf;
323 	int len;
324 	struct auth_domain *dom;
325 	struct knfsd_fh fh;
326 
327 	if (size == 0)
328 		return -EINVAL;
329 
330 	if (buf[size-1] != '\n')
331 		return -EINVAL;
332 	buf[size-1] = 0;
333 
334 	dname = mesg;
335 	len = qword_get(&mesg, dname, size);
336 	if (len <= 0)
337 		return -EINVAL;
338 
339 	path = dname+len+1;
340 	len = qword_get(&mesg, path, size);
341 	if (len <= 0)
342 		return -EINVAL;
343 
344 	len = get_int(&mesg, &maxsize);
345 	if (len)
346 		return len;
347 
348 	if (maxsize < NFS_FHSIZE)
349 		return -EINVAL;
350 	maxsize = min(maxsize, NFS3_FHSIZE);
351 
352 	if (qword_get(&mesg, mesg, size) > 0)
353 		return -EINVAL;
354 
355 	trace_nfsd_ctl_filehandle(netns(file), dname, path, maxsize);
356 
357 	/* we have all the words, they are in buf.. */
358 	dom = unix_domain_find(dname);
359 	if (!dom)
360 		return -ENOMEM;
361 
362 	len = exp_rootfh(netns(file), dom, path, &fh, maxsize);
363 	auth_domain_put(dom);
364 	if (len)
365 		return len;
366 
367 	mesg = buf;
368 	len = SIMPLE_TRANSACTION_LIMIT;
369 	qword_addhex(&mesg, &len, fh.fh_raw, fh.fh_size);
370 	mesg[-1] = '\n';
371 	return mesg - buf;
372 }
373 
374 /*
375  * write_threads - Start NFSD, or report the current number of running threads
376  *
377  * Input:
378  *			buf:		ignored
379  *			size:		zero
380  * Output:
381  *	On success:	passed-in buffer filled with '\n'-terminated C
382  *			string numeric value representing the number of
383  *			running NFSD threads;
384  *			return code is the size in bytes of the string
385  *	On error:	return code is zero
386  *
387  * OR
388  *
389  * Input:
390  *			buf:		C string containing an unsigned
391  *					integer value representing the
392  *					number of NFSD threads to start
393  *			size:		non-zero length of C string in @buf
394  * Output:
395  *	On success:	NFS service is started;
396  *			passed-in buffer filled with '\n'-terminated C
397  *			string numeric value representing the number of
398  *			running NFSD threads;
399  *			return code is the size in bytes of the string
400  *	On error:	return code is zero or a negative errno value
401  */
write_threads(struct file * file,char * buf,size_t size)402 static ssize_t write_threads(struct file *file, char *buf, size_t size)
403 {
404 	char *mesg = buf;
405 	int rv;
406 	struct net *net = netns(file);
407 
408 	if (size > 0) {
409 		int newthreads;
410 		rv = get_int(&mesg, &newthreads);
411 		if (rv)
412 			return rv;
413 		if (newthreads < 0)
414 			return -EINVAL;
415 		trace_nfsd_ctl_threads(net, newthreads);
416 		mutex_lock(&nfsd_mutex);
417 		rv = nfsd_svc(1, &newthreads, net, file->f_cred, NULL);
418 		mutex_unlock(&nfsd_mutex);
419 		if (rv < 0)
420 			return rv;
421 	} else
422 		rv = nfsd_nrthreads(net);
423 
424 	return scnprintf(buf, SIMPLE_TRANSACTION_LIMIT, "%d\n", rv);
425 }
426 
427 /*
428  * write_pool_threads - Set or report the current number of threads per pool
429  *
430  * Input:
431  *			buf:		ignored
432  *			size:		zero
433  *
434  * OR
435  *
436  * Input:
437  *			buf:		C string containing whitespace-
438  *					separated unsigned integer values
439  *					representing the number of NFSD
440  *					threads to start in each pool
441  *			size:		non-zero length of C string in @buf
442  * Output:
443  *	On success:	passed-in buffer filled with '\n'-terminated C
444  *			string containing integer values representing the
445  *			number of NFSD threads in each pool;
446  *			return code is the size in bytes of the string
447  *	On error:	return code is zero or a negative errno value
448  */
write_pool_threads(struct file * file,char * buf,size_t size)449 static ssize_t write_pool_threads(struct file *file, char *buf, size_t size)
450 {
451 	/* if size > 0, look for an array of number of threads per node
452 	 * and apply them  then write out number of threads per node as reply
453 	 */
454 	char *mesg = buf;
455 	int i;
456 	int rv;
457 	int len;
458 	int npools;
459 	int *nthreads;
460 	struct net *net = netns(file);
461 
462 	mutex_lock(&nfsd_mutex);
463 	npools = nfsd_nrpools(net);
464 	if (npools == 0) {
465 		/*
466 		 * NFS is shut down.  The admin can start it by
467 		 * writing to the threads file but NOT the pool_threads
468 		 * file, sorry.  Report zero threads.
469 		 */
470 		mutex_unlock(&nfsd_mutex);
471 		strcpy(buf, "0\n");
472 		return strlen(buf);
473 	}
474 
475 	nthreads = kcalloc(npools, sizeof(int), GFP_KERNEL);
476 	rv = -ENOMEM;
477 	if (nthreads == NULL)
478 		goto out_free;
479 
480 	if (size > 0) {
481 		for (i = 0; i < npools; i++) {
482 			rv = get_int(&mesg, &nthreads[i]);
483 			if (rv == -ENOENT)
484 				break;		/* fewer numbers than pools */
485 			if (rv)
486 				goto out_free;	/* syntax error */
487 			rv = -EINVAL;
488 			if (nthreads[i] < 0)
489 				goto out_free;
490 			trace_nfsd_ctl_pool_threads(net, i, nthreads[i]);
491 		}
492 
493 		/*
494 		 * There must always be a thread in pool 0; the admin
495 		 * can't shut down NFS completely using pool_threads.
496 		 */
497 		if (nthreads[0] == 0)
498 			nthreads[0] = 1;
499 
500 		rv = nfsd_set_nrthreads(i, nthreads, net);
501 		if (rv)
502 			goto out_free;
503 	}
504 
505 	rv = nfsd_get_nrthreads(npools, nthreads, net);
506 	if (rv)
507 		goto out_free;
508 
509 	mesg = buf;
510 	size = SIMPLE_TRANSACTION_LIMIT;
511 	for (i = 0; i < npools && size > 0; i++) {
512 		snprintf(mesg, size, "%d%c", nthreads[i], (i == npools-1 ? '\n' : ' '));
513 		len = strlen(mesg);
514 		size -= len;
515 		mesg += len;
516 	}
517 	rv = mesg - buf;
518 out_free:
519 	kfree(nthreads);
520 	mutex_unlock(&nfsd_mutex);
521 	return rv;
522 }
523 
524 static ssize_t
nfsd_print_version_support(struct nfsd_net * nn,char * buf,int remaining,const char * sep,unsigned vers,int minor)525 nfsd_print_version_support(struct nfsd_net *nn, char *buf, int remaining,
526 		const char *sep, unsigned vers, int minor)
527 {
528 	const char *format = minor < 0 ? "%s%c%u" : "%s%c%u.%u";
529 	bool supported = !!nfsd_vers(nn, vers, NFSD_TEST);
530 
531 	if (vers == 4 && minor >= 0 &&
532 	    !nfsd_minorversion(nn, minor, NFSD_TEST))
533 		supported = false;
534 	if (minor == 0 && supported)
535 		/*
536 		 * special case for backward compatability.
537 		 * +4.0 is never reported, it is implied by
538 		 * +4, unless -4.0 is present.
539 		 */
540 		return 0;
541 	return snprintf(buf, remaining, format, sep,
542 			supported ? '+' : '-', vers, minor);
543 }
544 
__write_versions(struct file * file,char * buf,size_t size)545 static ssize_t __write_versions(struct file *file, char *buf, size_t size)
546 {
547 	char *mesg = buf;
548 	char *vers, *minorp, sign;
549 	int len, num, remaining;
550 	ssize_t tlen = 0;
551 	char *sep;
552 	struct nfsd_net *nn = net_generic(netns(file), nfsd_net_id);
553 
554 	if (size > 0) {
555 		if (nn->nfsd_serv)
556 			/* Cannot change versions without updating
557 			 * nn->nfsd_serv->sv_xdrsize, and reallocing
558 			 * rq_argp and rq_resp
559 			 */
560 			return -EBUSY;
561 		if (buf[size-1] != '\n')
562 			return -EINVAL;
563 		buf[size-1] = 0;
564 		trace_nfsd_ctl_version(netns(file), buf);
565 
566 		vers = mesg;
567 		len = qword_get(&mesg, vers, size);
568 		if (len <= 0) return -EINVAL;
569 		do {
570 			enum vers_op cmd;
571 			unsigned minor;
572 			sign = *vers;
573 			if (sign == '+' || sign == '-')
574 				num = simple_strtol((vers+1), &minorp, 0);
575 			else
576 				num = simple_strtol(vers, &minorp, 0);
577 			if (*minorp == '.') {
578 				if (num != 4)
579 					return -EINVAL;
580 				if (kstrtouint(minorp+1, 0, &minor) < 0)
581 					return -EINVAL;
582 			}
583 
584 			cmd = sign == '-' ? NFSD_CLEAR : NFSD_SET;
585 			switch(num) {
586 #ifdef CONFIG_NFSD_V2
587 			case 2:
588 #endif
589 			case 3:
590 				nfsd_vers(nn, num, cmd);
591 				break;
592 			case 4:
593 				if (*minorp == '.') {
594 					if (nfsd_minorversion(nn, minor, cmd) < 0)
595 						return -EINVAL;
596 				} else if ((cmd == NFSD_SET) != nfsd_vers(nn, num, NFSD_TEST)) {
597 					/*
598 					 * Either we have +4 and no minors are enabled,
599 					 * or we have -4 and at least one minor is enabled.
600 					 * In either case, propagate 'cmd' to all minors.
601 					 */
602 					minor = 0;
603 					while (nfsd_minorversion(nn, minor, cmd) >= 0)
604 						minor++;
605 				}
606 				break;
607 			default:
608 				/* Ignore requests to disable non-existent versions */
609 				if (cmd == NFSD_SET)
610 					return -EINVAL;
611 			}
612 			vers += len + 1;
613 		} while ((len = qword_get(&mesg, vers, size)) > 0);
614 		/* If all get turned off, turn them back on, as
615 		 * having no versions is BAD
616 		 */
617 		nfsd_reset_versions(nn);
618 	}
619 
620 	/* Now write current state into reply buffer */
621 	sep = "";
622 	remaining = SIMPLE_TRANSACTION_LIMIT;
623 	for (num=2 ; num <= 4 ; num++) {
624 		int minor;
625 		if (!nfsd_vers(nn, num, NFSD_AVAIL))
626 			continue;
627 
628 		minor = -1;
629 		do {
630 			len = nfsd_print_version_support(nn, buf, remaining,
631 					sep, num, minor);
632 			if (len >= remaining)
633 				goto out;
634 			remaining -= len;
635 			buf += len;
636 			tlen += len;
637 			minor++;
638 			if (len)
639 				sep = " ";
640 		} while (num == 4 && minor <= NFSD_SUPPORTED_MINOR_VERSION);
641 	}
642 out:
643 	len = snprintf(buf, remaining, "\n");
644 	if (len >= remaining)
645 		return -EINVAL;
646 	return tlen + len;
647 }
648 
649 /*
650  * write_versions - Set or report the available NFS protocol versions
651  *
652  * Input:
653  *			buf:		ignored
654  *			size:		zero
655  * Output:
656  *	On success:	passed-in buffer filled with '\n'-terminated C
657  *			string containing positive or negative integer
658  *			values representing the current status of each
659  *			protocol version;
660  *			return code is the size in bytes of the string
661  *	On error:	return code is zero or a negative errno value
662  *
663  * OR
664  *
665  * Input:
666  *			buf:		C string containing whitespace-
667  *					separated positive or negative
668  *					integer values representing NFS
669  *					protocol versions to enable ("+n")
670  *					or disable ("-n")
671  *			size:		non-zero length of C string in @buf
672  * Output:
673  *	On success:	status of zero or more protocol versions has
674  *			been updated; passed-in buffer filled with
675  *			'\n'-terminated C string containing positive
676  *			or negative integer values representing the
677  *			current status of each protocol version;
678  *			return code is the size in bytes of the string
679  *	On error:	return code is zero or a negative errno value
680  */
write_versions(struct file * file,char * buf,size_t size)681 static ssize_t write_versions(struct file *file, char *buf, size_t size)
682 {
683 	ssize_t rv;
684 
685 	mutex_lock(&nfsd_mutex);
686 	rv = __write_versions(file, buf, size);
687 	mutex_unlock(&nfsd_mutex);
688 	return rv;
689 }
690 
691 /*
692  * Zero-length write.  Return a list of NFSD's current listener
693  * transports.
694  */
__write_ports_names(char * buf,struct net * net)695 static ssize_t __write_ports_names(char *buf, struct net *net)
696 {
697 	struct nfsd_net *nn = net_generic(net, nfsd_net_id);
698 
699 	if (nn->nfsd_serv == NULL)
700 		return 0;
701 	return svc_xprt_names(nn->nfsd_serv, buf, SIMPLE_TRANSACTION_LIMIT);
702 }
703 
704 /*
705  * A single 'fd' number was written, in which case it must be for
706  * a socket of a supported family/protocol, and we use it as an
707  * nfsd listener.
708  */
__write_ports_addfd(char * buf,struct net * net,const struct cred * cred)709 static ssize_t __write_ports_addfd(char *buf, struct net *net, const struct cred *cred)
710 {
711 	char *mesg = buf;
712 	int fd, err;
713 	struct nfsd_net *nn = net_generic(net, nfsd_net_id);
714 	struct svc_serv *serv;
715 
716 	err = get_int(&mesg, &fd);
717 	if (err != 0 || fd < 0)
718 		return -EINVAL;
719 	trace_nfsd_ctl_ports_addfd(net, fd);
720 
721 	err = nfsd_create_serv(net);
722 	if (err != 0)
723 		return err;
724 
725 	serv = nn->nfsd_serv;
726 	err = svc_addsock(serv, net, fd, buf, SIMPLE_TRANSACTION_LIMIT, cred);
727 
728 	if (!serv->sv_nrthreads && list_empty(&nn->nfsd_serv->sv_permsocks))
729 		nfsd_destroy_serv(net);
730 
731 	return err;
732 }
733 
734 /*
735  * A transport listener is added by writing its transport name and
736  * a port number.
737  */
__write_ports_addxprt(char * buf,struct net * net,const struct cred * cred)738 static ssize_t __write_ports_addxprt(char *buf, struct net *net, const struct cred *cred)
739 {
740 	char transport[16];
741 	struct svc_xprt *xprt;
742 	int port, err;
743 	struct nfsd_net *nn = net_generic(net, nfsd_net_id);
744 	struct svc_serv *serv;
745 
746 	if (sscanf(buf, "%15s %5u", transport, &port) != 2)
747 		return -EINVAL;
748 
749 	if (port < 1 || port > USHRT_MAX)
750 		return -EINVAL;
751 	trace_nfsd_ctl_ports_addxprt(net, transport, port);
752 
753 	err = nfsd_create_serv(net);
754 	if (err != 0)
755 		return err;
756 
757 	serv = nn->nfsd_serv;
758 	err = svc_xprt_create(serv, transport, net,
759 			      PF_INET, port, SVC_SOCK_ANONYMOUS, cred);
760 	if (err < 0)
761 		goto out_err;
762 
763 	err = svc_xprt_create(serv, transport, net,
764 			      PF_INET6, port, SVC_SOCK_ANONYMOUS, cred);
765 	if (err < 0 && err != -EAFNOSUPPORT)
766 		goto out_close;
767 
768 	return 0;
769 out_close:
770 	xprt = svc_find_xprt(serv, transport, net, PF_INET, port);
771 	if (xprt != NULL) {
772 		svc_xprt_close(xprt);
773 		svc_xprt_put(xprt);
774 	}
775 out_err:
776 	if (!serv->sv_nrthreads && list_empty(&nn->nfsd_serv->sv_permsocks))
777 		nfsd_destroy_serv(net);
778 
779 	return err;
780 }
781 
__write_ports(struct file * file,char * buf,size_t size,struct net * net)782 static ssize_t __write_ports(struct file *file, char *buf, size_t size,
783 			     struct net *net)
784 {
785 	if (size == 0)
786 		return __write_ports_names(buf, net);
787 
788 	if (isdigit(buf[0]))
789 		return __write_ports_addfd(buf, net, file->f_cred);
790 
791 	if (isalpha(buf[0]))
792 		return __write_ports_addxprt(buf, net, file->f_cred);
793 
794 	return -EINVAL;
795 }
796 
797 /*
798  * write_ports - Pass a socket file descriptor or transport name to listen on
799  *
800  * Input:
801  *			buf:		ignored
802  *			size:		zero
803  * Output:
804  *	On success:	passed-in buffer filled with a '\n'-terminated C
805  *			string containing a whitespace-separated list of
806  *			named NFSD listeners;
807  *			return code is the size in bytes of the string
808  *	On error:	return code is zero or a negative errno value
809  *
810  * OR
811  *
812  * Input:
813  *			buf:		C string containing an unsigned
814  *					integer value representing a bound
815  *					but unconnected socket that is to be
816  *					used as an NFSD listener; listen(3)
817  *					must be called for a SOCK_STREAM
818  *					socket, otherwise it is ignored
819  *			size:		non-zero length of C string in @buf
820  * Output:
821  *	On success:	NFS service is started;
822  *			passed-in buffer filled with a '\n'-terminated C
823  *			string containing a unique alphanumeric name of
824  *			the listener;
825  *			return code is the size in bytes of the string
826  *	On error:	return code is a negative errno value
827  *
828  * OR
829  *
830  * Input:
831  *			buf:		C string containing a transport
832  *					name and an unsigned integer value
833  *					representing the port to listen on,
834  *					separated by whitespace
835  *			size:		non-zero length of C string in @buf
836  * Output:
837  *	On success:	returns zero; NFS service is started
838  *	On error:	return code is a negative errno value
839  */
write_ports(struct file * file,char * buf,size_t size)840 static ssize_t write_ports(struct file *file, char *buf, size_t size)
841 {
842 	ssize_t rv;
843 
844 	mutex_lock(&nfsd_mutex);
845 	rv = __write_ports(file, buf, size, netns(file));
846 	mutex_unlock(&nfsd_mutex);
847 	return rv;
848 }
849 
850 
851 int nfsd_max_blksize;
852 
853 /*
854  * write_maxblksize - Set or report the current NFS blksize
855  *
856  * Input:
857  *			buf:		ignored
858  *			size:		zero
859  *
860  * OR
861  *
862  * Input:
863  *			buf:		C string containing an unsigned
864  *					integer value representing the new
865  *					NFS blksize
866  *			size:		non-zero length of C string in @buf
867  * Output:
868  *	On success:	passed-in buffer filled with '\n'-terminated C string
869  *			containing numeric value of the current NFS blksize
870  *			setting;
871  *			return code is the size in bytes of the string
872  *	On error:	return code is zero or a negative errno value
873  */
write_maxblksize(struct file * file,char * buf,size_t size)874 static ssize_t write_maxblksize(struct file *file, char *buf, size_t size)
875 {
876 	char *mesg = buf;
877 	struct nfsd_net *nn = net_generic(netns(file), nfsd_net_id);
878 
879 	if (size > 0) {
880 		int bsize;
881 		int rv = get_int(&mesg, &bsize);
882 		if (rv)
883 			return rv;
884 		trace_nfsd_ctl_maxblksize(netns(file), bsize);
885 
886 		/* force bsize into allowed range and
887 		 * required alignment.
888 		 */
889 		bsize = max_t(int, bsize, 1024);
890 		bsize = min_t(int, bsize, NFSSVC_MAXBLKSIZE);
891 		bsize &= ~(1024-1);
892 		mutex_lock(&nfsd_mutex);
893 		if (nn->nfsd_serv) {
894 			mutex_unlock(&nfsd_mutex);
895 			return -EBUSY;
896 		}
897 		nfsd_max_blksize = bsize;
898 		mutex_unlock(&nfsd_mutex);
899 	}
900 
901 	return scnprintf(buf, SIMPLE_TRANSACTION_LIMIT, "%d\n",
902 							nfsd_max_blksize);
903 }
904 
905 /*
906  * write_maxconn - Set or report the current max number of connections
907  *
908  * Input:
909  *			buf:		ignored
910  *			size:		zero
911  * OR
912  *
913  * Input:
914  *			buf:		C string containing an unsigned
915  *					integer value representing the new
916  *					number of max connections
917  *			size:		non-zero length of C string in @buf
918  * Output:
919  *	On success:	passed-in buffer filled with '\n'-terminated C string
920  *			containing numeric value of max_connections setting
921  *			for this net namespace;
922  *			return code is the size in bytes of the string
923  *	On error:	return code is zero or a negative errno value
924  */
write_maxconn(struct file * file,char * buf,size_t size)925 static ssize_t write_maxconn(struct file *file, char *buf, size_t size)
926 {
927 	char *mesg = buf;
928 	struct nfsd_net *nn = net_generic(netns(file), nfsd_net_id);
929 	unsigned int maxconn = nn->max_connections;
930 
931 	if (size > 0) {
932 		int rv = get_uint(&mesg, &maxconn);
933 
934 		if (rv)
935 			return rv;
936 		trace_nfsd_ctl_maxconn(netns(file), maxconn);
937 		nn->max_connections = maxconn;
938 	}
939 
940 	return scnprintf(buf, SIMPLE_TRANSACTION_LIMIT, "%u\n", maxconn);
941 }
942 
943 #ifdef CONFIG_NFSD_V4
__nfsd4_write_time(struct file * file,char * buf,size_t size,time64_t * time,struct nfsd_net * nn)944 static ssize_t __nfsd4_write_time(struct file *file, char *buf, size_t size,
945 				  time64_t *time, struct nfsd_net *nn)
946 {
947 	struct dentry *dentry = file_dentry(file);
948 	char *mesg = buf;
949 	int rv, i;
950 
951 	if (size > 0) {
952 		if (nn->nfsd_serv)
953 			return -EBUSY;
954 		rv = get_int(&mesg, &i);
955 		if (rv)
956 			return rv;
957 		trace_nfsd_ctl_time(netns(file), dentry->d_name.name,
958 				    dentry->d_name.len, i);
959 
960 		/*
961 		 * Some sanity checking.  We don't have a reason for
962 		 * these particular numbers, but problems with the
963 		 * extremes are:
964 		 *	- Too short: the briefest network outage may
965 		 *	  cause clients to lose all their locks.  Also,
966 		 *	  the frequent polling may be wasteful.
967 		 *	- Too long: do you really want reboot recovery
968 		 *	  to take more than an hour?  Or to make other
969 		 *	  clients wait an hour before being able to
970 		 *	  revoke a dead client's locks?
971 		 */
972 		if (i < 10 || i > 3600)
973 			return -EINVAL;
974 		*time = i;
975 	}
976 
977 	return scnprintf(buf, SIMPLE_TRANSACTION_LIMIT, "%lld\n", *time);
978 }
979 
nfsd4_write_time(struct file * file,char * buf,size_t size,time64_t * time,struct nfsd_net * nn)980 static ssize_t nfsd4_write_time(struct file *file, char *buf, size_t size,
981 				time64_t *time, struct nfsd_net *nn)
982 {
983 	ssize_t rv;
984 
985 	mutex_lock(&nfsd_mutex);
986 	rv = __nfsd4_write_time(file, buf, size, time, nn);
987 	mutex_unlock(&nfsd_mutex);
988 	return rv;
989 }
990 
991 /*
992  * write_leasetime - Set or report the current NFSv4 lease time
993  *
994  * Input:
995  *			buf:		ignored
996  *			size:		zero
997  *
998  * OR
999  *
1000  * Input:
1001  *			buf:		C string containing an unsigned
1002  *					integer value representing the new
1003  *					NFSv4 lease expiry time
1004  *			size:		non-zero length of C string in @buf
1005  * Output:
1006  *	On success:	passed-in buffer filled with '\n'-terminated C
1007  *			string containing unsigned integer value of the
1008  *			current lease expiry time;
1009  *			return code is the size in bytes of the string
1010  *	On error:	return code is zero or a negative errno value
1011  */
write_leasetime(struct file * file,char * buf,size_t size)1012 static ssize_t write_leasetime(struct file *file, char *buf, size_t size)
1013 {
1014 	struct nfsd_net *nn = net_generic(netns(file), nfsd_net_id);
1015 	return nfsd4_write_time(file, buf, size, &nn->nfsd4_lease, nn);
1016 }
1017 
1018 /*
1019  * write_gracetime - Set or report current NFSv4 grace period time
1020  *
1021  * As above, but sets the time of the NFSv4 grace period.
1022  *
1023  * Note this should never be set to less than the *previous*
1024  * lease-period time, but we don't try to enforce this.  (In the common
1025  * case (a new boot), we don't know what the previous lease time was
1026  * anyway.)
1027  */
write_gracetime(struct file * file,char * buf,size_t size)1028 static ssize_t write_gracetime(struct file *file, char *buf, size_t size)
1029 {
1030 	struct nfsd_net *nn = net_generic(netns(file), nfsd_net_id);
1031 	return nfsd4_write_time(file, buf, size, &nn->nfsd4_grace, nn);
1032 }
1033 
1034 #ifdef CONFIG_NFSD_LEGACY_CLIENT_TRACKING
__write_recoverydir(struct file * file,char * buf,size_t size,struct nfsd_net * nn)1035 static ssize_t __write_recoverydir(struct file *file, char *buf, size_t size,
1036 				   struct nfsd_net *nn)
1037 {
1038 	char *mesg = buf;
1039 	char *recdir;
1040 	int len, status;
1041 
1042 	if (size > 0) {
1043 		if (nn->nfsd_serv)
1044 			return -EBUSY;
1045 		if (size > PATH_MAX || buf[size-1] != '\n')
1046 			return -EINVAL;
1047 		buf[size-1] = 0;
1048 
1049 		recdir = mesg;
1050 		len = qword_get(&mesg, recdir, size);
1051 		if (len <= 0)
1052 			return -EINVAL;
1053 		trace_nfsd_ctl_recoverydir(netns(file), recdir);
1054 
1055 		status = nfs4_reset_recoverydir(recdir);
1056 		if (status)
1057 			return status;
1058 	}
1059 
1060 	return scnprintf(buf, SIMPLE_TRANSACTION_LIMIT, "%s\n",
1061 							nfs4_recoverydir());
1062 }
1063 
1064 /*
1065  * write_recoverydir - Set or report the pathname of the recovery directory
1066  *
1067  * Input:
1068  *			buf:		ignored
1069  *			size:		zero
1070  *
1071  * OR
1072  *
1073  * Input:
1074  *			buf:		C string containing the pathname
1075  *					of the directory on a local file
1076  *					system containing permanent NFSv4
1077  *					recovery data
1078  *			size:		non-zero length of C string in @buf
1079  * Output:
1080  *	On success:	passed-in buffer filled with '\n'-terminated C string
1081  *			containing the current recovery pathname setting;
1082  *			return code is the size in bytes of the string
1083  *	On error:	return code is zero or a negative errno value
1084  */
write_recoverydir(struct file * file,char * buf,size_t size)1085 static ssize_t write_recoverydir(struct file *file, char *buf, size_t size)
1086 {
1087 	ssize_t rv;
1088 	struct nfsd_net *nn = net_generic(netns(file), nfsd_net_id);
1089 
1090 	mutex_lock(&nfsd_mutex);
1091 	rv = __write_recoverydir(file, buf, size, nn);
1092 	mutex_unlock(&nfsd_mutex);
1093 	return rv;
1094 }
1095 #endif
1096 
1097 /*
1098  * write_v4_end_grace - release grace period for nfsd's v4.x lock manager
1099  *
1100  * Input:
1101  *			buf:		ignored
1102  *			size:		zero
1103  * OR
1104  *
1105  * Input:
1106  *			buf:		any value
1107  *			size:		non-zero length of C string in @buf
1108  * Output:
1109  *			passed-in buffer filled with "Y" or "N" with a newline
1110  *			and NULL-terminated C string. This indicates whether
1111  *			the grace period has ended in the current net
1112  *			namespace. Return code is the size in bytes of the
1113  *			string. Writing a string that starts with 'Y', 'y', or
1114  *			'1' to the file will end the grace period for nfsd's v4
1115  *			lock manager.
1116  */
write_v4_end_grace(struct file * file,char * buf,size_t size)1117 static ssize_t write_v4_end_grace(struct file *file, char *buf, size_t size)
1118 {
1119 	struct nfsd_net *nn = net_generic(netns(file), nfsd_net_id);
1120 
1121 	if (size > 0) {
1122 		switch(buf[0]) {
1123 		case 'Y':
1124 		case 'y':
1125 		case '1':
1126 			if (!nn->nfsd_serv)
1127 				return -EBUSY;
1128 			trace_nfsd_end_grace(netns(file));
1129 			nfsd4_end_grace(nn);
1130 			break;
1131 		default:
1132 			return -EINVAL;
1133 		}
1134 	}
1135 
1136 	return scnprintf(buf, SIMPLE_TRANSACTION_LIMIT, "%c\n",
1137 			 nn->grace_ended ? 'Y' : 'N');
1138 }
1139 
1140 #endif
1141 
1142 /*----------------------------------------------------------------------------*/
1143 /*
1144  *	populating the filesystem.
1145  */
1146 
1147 /* Basically copying rpc_get_inode. */
nfsd_get_inode(struct super_block * sb,umode_t mode)1148 static struct inode *nfsd_get_inode(struct super_block *sb, umode_t mode)
1149 {
1150 	struct inode *inode = new_inode(sb);
1151 	if (!inode)
1152 		return NULL;
1153 	/* Following advice from simple_fill_super documentation: */
1154 	inode->i_ino = iunique(sb, NFSD_MaxReserved);
1155 	inode->i_mode = mode;
1156 	simple_inode_init_ts(inode);
1157 	switch (mode & S_IFMT) {
1158 	case S_IFDIR:
1159 		inode->i_fop = &simple_dir_operations;
1160 		inode->i_op = &simple_dir_inode_operations;
1161 		inc_nlink(inode);
1162 		break;
1163 	case S_IFLNK:
1164 		inode->i_op = &simple_symlink_inode_operations;
1165 		break;
1166 	default:
1167 		break;
1168 	}
1169 	return inode;
1170 }
1171 
__nfsd_mkdir(struct inode * dir,struct dentry * dentry,umode_t mode,struct nfsdfs_client * ncl)1172 static int __nfsd_mkdir(struct inode *dir, struct dentry *dentry, umode_t mode, struct nfsdfs_client *ncl)
1173 {
1174 	struct inode *inode;
1175 
1176 	inode = nfsd_get_inode(dir->i_sb, mode);
1177 	if (!inode)
1178 		return -ENOMEM;
1179 	if (ncl) {
1180 		inode->i_private = ncl;
1181 		kref_get(&ncl->cl_ref);
1182 	}
1183 	d_add(dentry, inode);
1184 	inc_nlink(dir);
1185 	fsnotify_mkdir(dir, dentry);
1186 	return 0;
1187 }
1188 
nfsd_mkdir(struct dentry * parent,struct nfsdfs_client * ncl,char * name)1189 static struct dentry *nfsd_mkdir(struct dentry *parent, struct nfsdfs_client *ncl, char *name)
1190 {
1191 	struct inode *dir = parent->d_inode;
1192 	struct dentry *dentry;
1193 	int ret = -ENOMEM;
1194 
1195 	inode_lock(dir);
1196 	dentry = d_alloc_name(parent, name);
1197 	if (!dentry)
1198 		goto out_err;
1199 	ret = __nfsd_mkdir(d_inode(parent), dentry, S_IFDIR | 0600, ncl);
1200 	if (ret)
1201 		goto out_err;
1202 out:
1203 	inode_unlock(dir);
1204 	return dentry;
1205 out_err:
1206 	dput(dentry);
1207 	dentry = ERR_PTR(ret);
1208 	goto out;
1209 }
1210 
1211 #if IS_ENABLED(CONFIG_SUNRPC_GSS)
__nfsd_symlink(struct inode * dir,struct dentry * dentry,umode_t mode,const char * content)1212 static int __nfsd_symlink(struct inode *dir, struct dentry *dentry,
1213 			  umode_t mode, const char *content)
1214 {
1215 	struct inode *inode;
1216 
1217 	inode = nfsd_get_inode(dir->i_sb, mode);
1218 	if (!inode)
1219 		return -ENOMEM;
1220 
1221 	inode->i_link = (char *)content;
1222 	inode->i_size = strlen(content);
1223 
1224 	d_add(dentry, inode);
1225 	inc_nlink(dir);
1226 	fsnotify_create(dir, dentry);
1227 	return 0;
1228 }
1229 
1230 /*
1231  * @content is assumed to be a NUL-terminated string that lives
1232  * longer than the symlink itself.
1233  */
_nfsd_symlink(struct dentry * parent,const char * name,const char * content)1234 static void _nfsd_symlink(struct dentry *parent, const char *name,
1235 			  const char *content)
1236 {
1237 	struct inode *dir = parent->d_inode;
1238 	struct dentry *dentry;
1239 	int ret;
1240 
1241 	inode_lock(dir);
1242 	dentry = d_alloc_name(parent, name);
1243 	if (!dentry)
1244 		goto out;
1245 	ret = __nfsd_symlink(d_inode(parent), dentry, S_IFLNK | 0777, content);
1246 	if (ret)
1247 		dput(dentry);
1248 out:
1249 	inode_unlock(dir);
1250 }
1251 #else
_nfsd_symlink(struct dentry * parent,const char * name,const char * content)1252 static inline void _nfsd_symlink(struct dentry *parent, const char *name,
1253 				 const char *content)
1254 {
1255 }
1256 
1257 #endif
1258 
clear_ncl(struct dentry * dentry)1259 static void clear_ncl(struct dentry *dentry)
1260 {
1261 	struct inode *inode = d_inode(dentry);
1262 	struct nfsdfs_client *ncl = inode->i_private;
1263 
1264 	spin_lock(&inode->i_lock);
1265 	inode->i_private = NULL;
1266 	spin_unlock(&inode->i_lock);
1267 	kref_put(&ncl->cl_ref, ncl->cl_release);
1268 }
1269 
get_nfsdfs_client(struct inode * inode)1270 struct nfsdfs_client *get_nfsdfs_client(struct inode *inode)
1271 {
1272 	struct nfsdfs_client *nc;
1273 
1274 	spin_lock(&inode->i_lock);
1275 	nc = inode->i_private;
1276 	if (nc)
1277 		kref_get(&nc->cl_ref);
1278 	spin_unlock(&inode->i_lock);
1279 	return nc;
1280 }
1281 
1282 /* XXX: cut'n'paste from simple_fill_super; figure out if we could share
1283  * code instead. */
nfsdfs_create_files(struct dentry * root,const struct tree_descr * files,struct nfsdfs_client * ncl,struct dentry ** fdentries)1284 static  int nfsdfs_create_files(struct dentry *root,
1285 				const struct tree_descr *files,
1286 				struct nfsdfs_client *ncl,
1287 				struct dentry **fdentries)
1288 {
1289 	struct inode *dir = d_inode(root);
1290 	struct inode *inode;
1291 	struct dentry *dentry;
1292 	int i;
1293 
1294 	inode_lock(dir);
1295 	for (i = 0; files->name && files->name[0]; i++, files++) {
1296 		dentry = d_alloc_name(root, files->name);
1297 		if (!dentry)
1298 			goto out;
1299 		inode = nfsd_get_inode(d_inode(root)->i_sb,
1300 					S_IFREG | files->mode);
1301 		if (!inode) {
1302 			dput(dentry);
1303 			goto out;
1304 		}
1305 		kref_get(&ncl->cl_ref);
1306 		inode->i_fop = files->ops;
1307 		inode->i_private = ncl;
1308 		d_add(dentry, inode);
1309 		fsnotify_create(dir, dentry);
1310 		if (fdentries)
1311 			fdentries[i] = dentry;
1312 	}
1313 	inode_unlock(dir);
1314 	return 0;
1315 out:
1316 	inode_unlock(dir);
1317 	return -ENOMEM;
1318 }
1319 
1320 /* on success, returns positive number unique to that client. */
nfsd_client_mkdir(struct nfsd_net * nn,struct nfsdfs_client * ncl,u32 id,const struct tree_descr * files,struct dentry ** fdentries)1321 struct dentry *nfsd_client_mkdir(struct nfsd_net *nn,
1322 				 struct nfsdfs_client *ncl, u32 id,
1323 				 const struct tree_descr *files,
1324 				 struct dentry **fdentries)
1325 {
1326 	struct dentry *dentry;
1327 	char name[11];
1328 	int ret;
1329 
1330 	sprintf(name, "%u", id);
1331 
1332 	dentry = nfsd_mkdir(nn->nfsd_client_dir, ncl, name);
1333 	if (IS_ERR(dentry)) /* XXX: tossing errors? */
1334 		return NULL;
1335 	ret = nfsdfs_create_files(dentry, files, ncl, fdentries);
1336 	if (ret) {
1337 		nfsd_client_rmdir(dentry);
1338 		return NULL;
1339 	}
1340 	return dentry;
1341 }
1342 
1343 /* Taken from __rpc_rmdir: */
nfsd_client_rmdir(struct dentry * dentry)1344 void nfsd_client_rmdir(struct dentry *dentry)
1345 {
1346 	simple_recursive_removal(dentry, clear_ncl);
1347 }
1348 
nfsd_fill_super(struct super_block * sb,struct fs_context * fc)1349 static int nfsd_fill_super(struct super_block *sb, struct fs_context *fc)
1350 {
1351 	struct nfsd_net *nn = net_generic(current->nsproxy->net_ns,
1352 							nfsd_net_id);
1353 	struct dentry *dentry;
1354 	int ret;
1355 
1356 	static const struct tree_descr nfsd_files[] = {
1357 		[NFSD_List] = {"exports", &exports_nfsd_operations, S_IRUGO},
1358 		/* Per-export io stats use same ops as exports file */
1359 		[NFSD_Export_Stats] = {"export_stats", &exports_nfsd_operations, S_IRUGO},
1360 		[NFSD_Export_features] = {"export_features",
1361 					&export_features_fops, S_IRUGO},
1362 		[NFSD_FO_UnlockIP] = {"unlock_ip",
1363 					&transaction_ops, S_IWUSR|S_IRUSR},
1364 		[NFSD_FO_UnlockFS] = {"unlock_filesystem",
1365 					&transaction_ops, S_IWUSR|S_IRUSR},
1366 		[NFSD_Fh] = {"filehandle", &transaction_ops, S_IWUSR|S_IRUSR},
1367 		[NFSD_Threads] = {"threads", &transaction_ops, S_IWUSR|S_IRUSR},
1368 		[NFSD_Pool_Threads] = {"pool_threads", &transaction_ops, S_IWUSR|S_IRUSR},
1369 		[NFSD_Pool_Stats] = {"pool_stats", &pool_stats_operations, S_IRUGO},
1370 		[NFSD_Reply_Cache_Stats] = {"reply_cache_stats",
1371 					&nfsd_reply_cache_stats_fops, S_IRUGO},
1372 		[NFSD_Versions] = {"versions", &transaction_ops, S_IWUSR|S_IRUSR},
1373 		[NFSD_Ports] = {"portlist", &transaction_ops, S_IWUSR|S_IRUGO},
1374 		[NFSD_MaxBlkSize] = {"max_block_size", &transaction_ops, S_IWUSR|S_IRUGO},
1375 		[NFSD_MaxConnections] = {"max_connections", &transaction_ops, S_IWUSR|S_IRUGO},
1376 		[NFSD_Filecache] = {"filecache", &nfsd_file_cache_stats_fops, S_IRUGO},
1377 #ifdef CONFIG_NFSD_V4
1378 		[NFSD_Leasetime] = {"nfsv4leasetime", &transaction_ops, S_IWUSR|S_IRUSR},
1379 		[NFSD_Gracetime] = {"nfsv4gracetime", &transaction_ops, S_IWUSR|S_IRUSR},
1380 #ifdef CONFIG_NFSD_LEGACY_CLIENT_TRACKING
1381 		[NFSD_RecoveryDir] = {"nfsv4recoverydir", &transaction_ops, S_IWUSR|S_IRUSR},
1382 #endif
1383 		[NFSD_V4EndGrace] = {"v4_end_grace", &transaction_ops, S_IWUSR|S_IRUGO},
1384 #endif
1385 		/* last one */ {""}
1386 	};
1387 
1388 	ret = simple_fill_super(sb, 0x6e667364, nfsd_files);
1389 	if (ret)
1390 		return ret;
1391 	_nfsd_symlink(sb->s_root, "supported_krb5_enctypes",
1392 		      "/proc/net/rpc/gss_krb5_enctypes");
1393 	dentry = nfsd_mkdir(sb->s_root, NULL, "clients");
1394 	if (IS_ERR(dentry))
1395 		return PTR_ERR(dentry);
1396 	nn->nfsd_client_dir = dentry;
1397 	return 0;
1398 }
1399 
nfsd_fs_get_tree(struct fs_context * fc)1400 static int nfsd_fs_get_tree(struct fs_context *fc)
1401 {
1402 	return get_tree_keyed(fc, nfsd_fill_super, get_net(fc->net_ns));
1403 }
1404 
nfsd_fs_free_fc(struct fs_context * fc)1405 static void nfsd_fs_free_fc(struct fs_context *fc)
1406 {
1407 	if (fc->s_fs_info)
1408 		put_net(fc->s_fs_info);
1409 }
1410 
1411 static const struct fs_context_operations nfsd_fs_context_ops = {
1412 	.free		= nfsd_fs_free_fc,
1413 	.get_tree	= nfsd_fs_get_tree,
1414 };
1415 
nfsd_init_fs_context(struct fs_context * fc)1416 static int nfsd_init_fs_context(struct fs_context *fc)
1417 {
1418 	put_user_ns(fc->user_ns);
1419 	fc->user_ns = get_user_ns(fc->net_ns->user_ns);
1420 	fc->ops = &nfsd_fs_context_ops;
1421 	return 0;
1422 }
1423 
nfsd_umount(struct super_block * sb)1424 static void nfsd_umount(struct super_block *sb)
1425 {
1426 	struct net *net = sb->s_fs_info;
1427 
1428 	nfsd_shutdown_threads(net);
1429 
1430 	kill_litter_super(sb);
1431 	put_net(net);
1432 }
1433 
1434 static struct file_system_type nfsd_fs_type = {
1435 	.owner		= THIS_MODULE,
1436 	.name		= "nfsd",
1437 	.init_fs_context = nfsd_init_fs_context,
1438 	.kill_sb	= nfsd_umount,
1439 };
1440 MODULE_ALIAS_FS("nfsd");
1441 
1442 #ifdef CONFIG_PROC_FS
1443 
exports_proc_open(struct inode * inode,struct file * file)1444 static int exports_proc_open(struct inode *inode, struct file *file)
1445 {
1446 	return exports_net_open(current->nsproxy->net_ns, file);
1447 }
1448 
1449 static const struct proc_ops exports_proc_ops = {
1450 	.proc_open	= exports_proc_open,
1451 	.proc_read	= seq_read,
1452 	.proc_lseek	= seq_lseek,
1453 	.proc_release	= seq_release,
1454 };
1455 
create_proc_exports_entry(void)1456 static int create_proc_exports_entry(void)
1457 {
1458 	struct proc_dir_entry *entry;
1459 
1460 	entry = proc_mkdir("fs/nfs", NULL);
1461 	if (!entry)
1462 		return -ENOMEM;
1463 	entry = proc_create("exports", 0, entry, &exports_proc_ops);
1464 	if (!entry) {
1465 		remove_proc_entry("fs/nfs", NULL);
1466 		return -ENOMEM;
1467 	}
1468 	return 0;
1469 }
1470 #else /* CONFIG_PROC_FS */
create_proc_exports_entry(void)1471 static int create_proc_exports_entry(void)
1472 {
1473 	return 0;
1474 }
1475 #endif
1476 
1477 unsigned int nfsd_net_id;
1478 
nfsd_genl_rpc_status_compose_msg(struct sk_buff * skb,struct netlink_callback * cb,struct nfsd_genl_rqstp * rqstp)1479 static int nfsd_genl_rpc_status_compose_msg(struct sk_buff *skb,
1480 					    struct netlink_callback *cb,
1481 					    struct nfsd_genl_rqstp *rqstp)
1482 {
1483 	void *hdr;
1484 	u32 i;
1485 
1486 	hdr = genlmsg_put(skb, NETLINK_CB(cb->skb).portid, cb->nlh->nlmsg_seq,
1487 			  &nfsd_nl_family, 0, NFSD_CMD_RPC_STATUS_GET);
1488 	if (!hdr)
1489 		return -ENOBUFS;
1490 
1491 	if (nla_put_be32(skb, NFSD_A_RPC_STATUS_XID, rqstp->rq_xid) ||
1492 	    nla_put_u32(skb, NFSD_A_RPC_STATUS_FLAGS, rqstp->rq_flags) ||
1493 	    nla_put_u32(skb, NFSD_A_RPC_STATUS_PROG, rqstp->rq_prog) ||
1494 	    nla_put_u32(skb, NFSD_A_RPC_STATUS_PROC, rqstp->rq_proc) ||
1495 	    nla_put_u8(skb, NFSD_A_RPC_STATUS_VERSION, rqstp->rq_vers) ||
1496 	    nla_put_s64(skb, NFSD_A_RPC_STATUS_SERVICE_TIME,
1497 			ktime_to_us(rqstp->rq_stime),
1498 			NFSD_A_RPC_STATUS_PAD))
1499 		return -ENOBUFS;
1500 
1501 	switch (rqstp->rq_saddr.sa_family) {
1502 	case AF_INET: {
1503 		const struct sockaddr_in *s_in, *d_in;
1504 
1505 		s_in = (const struct sockaddr_in *)&rqstp->rq_saddr;
1506 		d_in = (const struct sockaddr_in *)&rqstp->rq_daddr;
1507 		if (nla_put_in_addr(skb, NFSD_A_RPC_STATUS_SADDR4,
1508 				    s_in->sin_addr.s_addr) ||
1509 		    nla_put_in_addr(skb, NFSD_A_RPC_STATUS_DADDR4,
1510 				    d_in->sin_addr.s_addr) ||
1511 		    nla_put_be16(skb, NFSD_A_RPC_STATUS_SPORT,
1512 				 s_in->sin_port) ||
1513 		    nla_put_be16(skb, NFSD_A_RPC_STATUS_DPORT,
1514 				 d_in->sin_port))
1515 			return -ENOBUFS;
1516 		break;
1517 	}
1518 	case AF_INET6: {
1519 		const struct sockaddr_in6 *s_in, *d_in;
1520 
1521 		s_in = (const struct sockaddr_in6 *)&rqstp->rq_saddr;
1522 		d_in = (const struct sockaddr_in6 *)&rqstp->rq_daddr;
1523 		if (nla_put_in6_addr(skb, NFSD_A_RPC_STATUS_SADDR6,
1524 				     &s_in->sin6_addr) ||
1525 		    nla_put_in6_addr(skb, NFSD_A_RPC_STATUS_DADDR6,
1526 				     &d_in->sin6_addr) ||
1527 		    nla_put_be16(skb, NFSD_A_RPC_STATUS_SPORT,
1528 				 s_in->sin6_port) ||
1529 		    nla_put_be16(skb, NFSD_A_RPC_STATUS_DPORT,
1530 				 d_in->sin6_port))
1531 			return -ENOBUFS;
1532 		break;
1533 	}
1534 	}
1535 
1536 	for (i = 0; i < rqstp->rq_opcnt; i++)
1537 		if (nla_put_u32(skb, NFSD_A_RPC_STATUS_COMPOUND_OPS,
1538 				rqstp->rq_opnum[i]))
1539 			return -ENOBUFS;
1540 
1541 	genlmsg_end(skb, hdr);
1542 	return 0;
1543 }
1544 
1545 /**
1546  * nfsd_nl_rpc_status_get_dumpit - Handle rpc_status_get dumpit
1547  * @skb: reply buffer
1548  * @cb: netlink metadata and command arguments
1549  *
1550  * Returns the size of the reply or a negative errno.
1551  */
nfsd_nl_rpc_status_get_dumpit(struct sk_buff * skb,struct netlink_callback * cb)1552 int nfsd_nl_rpc_status_get_dumpit(struct sk_buff *skb,
1553 				  struct netlink_callback *cb)
1554 {
1555 	int i, ret, rqstp_index = 0;
1556 	struct nfsd_net *nn;
1557 
1558 	mutex_lock(&nfsd_mutex);
1559 
1560 	nn = net_generic(sock_net(skb->sk), nfsd_net_id);
1561 	if (!nn->nfsd_serv) {
1562 		ret = -ENODEV;
1563 		goto out_unlock;
1564 	}
1565 
1566 	rcu_read_lock();
1567 
1568 	for (i = 0; i < nn->nfsd_serv->sv_nrpools; i++) {
1569 		struct svc_rqst *rqstp;
1570 
1571 		if (i < cb->args[0]) /* already consumed */
1572 			continue;
1573 
1574 		rqstp_index = 0;
1575 		list_for_each_entry_rcu(rqstp,
1576 				&nn->nfsd_serv->sv_pools[i].sp_all_threads,
1577 				rq_all) {
1578 			struct nfsd_genl_rqstp genl_rqstp;
1579 			unsigned int status_counter;
1580 
1581 			if (rqstp_index++ < cb->args[1]) /* already consumed */
1582 				continue;
1583 			/*
1584 			 * Acquire rq_status_counter before parsing the rqst
1585 			 * fields. rq_status_counter is set to an odd value in
1586 			 * order to notify the consumers the rqstp fields are
1587 			 * meaningful.
1588 			 */
1589 			status_counter =
1590 				smp_load_acquire(&rqstp->rq_status_counter);
1591 			if (!(status_counter & 1))
1592 				continue;
1593 
1594 			genl_rqstp.rq_xid = rqstp->rq_xid;
1595 			genl_rqstp.rq_flags = rqstp->rq_flags;
1596 			genl_rqstp.rq_vers = rqstp->rq_vers;
1597 			genl_rqstp.rq_prog = rqstp->rq_prog;
1598 			genl_rqstp.rq_proc = rqstp->rq_proc;
1599 			genl_rqstp.rq_stime = rqstp->rq_stime;
1600 			genl_rqstp.rq_opcnt = 0;
1601 			memcpy(&genl_rqstp.rq_daddr, svc_daddr(rqstp),
1602 			       sizeof(struct sockaddr));
1603 			memcpy(&genl_rqstp.rq_saddr, svc_addr(rqstp),
1604 			       sizeof(struct sockaddr));
1605 
1606 #ifdef CONFIG_NFSD_V4
1607 			if (rqstp->rq_vers == NFS4_VERSION &&
1608 			    rqstp->rq_proc == NFSPROC4_COMPOUND) {
1609 				/* NFSv4 compound */
1610 				struct nfsd4_compoundargs *args;
1611 				int j;
1612 
1613 				args = rqstp->rq_argp;
1614 				genl_rqstp.rq_opcnt = args->opcnt;
1615 				for (j = 0; j < genl_rqstp.rq_opcnt; j++)
1616 					genl_rqstp.rq_opnum[j] =
1617 						args->ops[j].opnum;
1618 			}
1619 #endif /* CONFIG_NFSD_V4 */
1620 
1621 			/*
1622 			 * Acquire rq_status_counter before reporting the rqst
1623 			 * fields to the user.
1624 			 */
1625 			if (smp_load_acquire(&rqstp->rq_status_counter) !=
1626 			    status_counter)
1627 				continue;
1628 
1629 			ret = nfsd_genl_rpc_status_compose_msg(skb, cb,
1630 							       &genl_rqstp);
1631 			if (ret)
1632 				goto out;
1633 		}
1634 	}
1635 
1636 	cb->args[0] = i;
1637 	cb->args[1] = rqstp_index;
1638 	ret = skb->len;
1639 out:
1640 	rcu_read_unlock();
1641 out_unlock:
1642 	mutex_unlock(&nfsd_mutex);
1643 
1644 	return ret;
1645 }
1646 
1647 /**
1648  * nfsd_nl_threads_set_doit - set the number of running threads
1649  * @skb: reply buffer
1650  * @info: netlink metadata and command arguments
1651  *
1652  * Return 0 on success or a negative errno.
1653  */
nfsd_nl_threads_set_doit(struct sk_buff * skb,struct genl_info * info)1654 int nfsd_nl_threads_set_doit(struct sk_buff *skb, struct genl_info *info)
1655 {
1656 	int *nthreads, nrpools = 0, i, ret = -EOPNOTSUPP, rem;
1657 	struct net *net = genl_info_net(info);
1658 	struct nfsd_net *nn = net_generic(net, nfsd_net_id);
1659 	const struct nlattr *attr;
1660 	const char *scope = NULL;
1661 
1662 	if (GENL_REQ_ATTR_CHECK(info, NFSD_A_SERVER_THREADS))
1663 		return -EINVAL;
1664 
1665 	/* count number of SERVER_THREADS values */
1666 	nlmsg_for_each_attr(attr, info->nlhdr, GENL_HDRLEN, rem) {
1667 		if (nla_type(attr) == NFSD_A_SERVER_THREADS)
1668 			nrpools++;
1669 	}
1670 
1671 	mutex_lock(&nfsd_mutex);
1672 
1673 	nthreads = kcalloc(nrpools, sizeof(int), GFP_KERNEL);
1674 	if (!nthreads) {
1675 		ret = -ENOMEM;
1676 		goto out_unlock;
1677 	}
1678 
1679 	i = 0;
1680 	nlmsg_for_each_attr(attr, info->nlhdr, GENL_HDRLEN, rem) {
1681 		if (nla_type(attr) == NFSD_A_SERVER_THREADS) {
1682 			nthreads[i++] = nla_get_u32(attr);
1683 			if (i >= nrpools)
1684 				break;
1685 		}
1686 	}
1687 
1688 	if (info->attrs[NFSD_A_SERVER_GRACETIME] ||
1689 	    info->attrs[NFSD_A_SERVER_LEASETIME] ||
1690 	    info->attrs[NFSD_A_SERVER_SCOPE]) {
1691 		ret = -EBUSY;
1692 		if (nn->nfsd_serv && nn->nfsd_serv->sv_nrthreads)
1693 			goto out_unlock;
1694 
1695 		ret = -EINVAL;
1696 		attr = info->attrs[NFSD_A_SERVER_GRACETIME];
1697 		if (attr) {
1698 			u32 gracetime = nla_get_u32(attr);
1699 
1700 			if (gracetime < 10 || gracetime > 3600)
1701 				goto out_unlock;
1702 
1703 			nn->nfsd4_grace = gracetime;
1704 		}
1705 
1706 		attr = info->attrs[NFSD_A_SERVER_LEASETIME];
1707 		if (attr) {
1708 			u32 leasetime = nla_get_u32(attr);
1709 
1710 			if (leasetime < 10 || leasetime > 3600)
1711 				goto out_unlock;
1712 
1713 			nn->nfsd4_lease = leasetime;
1714 		}
1715 
1716 		attr = info->attrs[NFSD_A_SERVER_SCOPE];
1717 		if (attr)
1718 			scope = nla_data(attr);
1719 	}
1720 
1721 	ret = nfsd_svc(nrpools, nthreads, net, get_current_cred(), scope);
1722 	if (ret > 0)
1723 		ret = 0;
1724 out_unlock:
1725 	mutex_unlock(&nfsd_mutex);
1726 	kfree(nthreads);
1727 	return ret;
1728 }
1729 
1730 /**
1731  * nfsd_nl_threads_get_doit - get the number of running threads
1732  * @skb: reply buffer
1733  * @info: netlink metadata and command arguments
1734  *
1735  * Return 0 on success or a negative errno.
1736  */
nfsd_nl_threads_get_doit(struct sk_buff * skb,struct genl_info * info)1737 int nfsd_nl_threads_get_doit(struct sk_buff *skb, struct genl_info *info)
1738 {
1739 	struct net *net = genl_info_net(info);
1740 	struct nfsd_net *nn = net_generic(net, nfsd_net_id);
1741 	void *hdr;
1742 	int err;
1743 
1744 	skb = genlmsg_new(GENLMSG_DEFAULT_SIZE, GFP_KERNEL);
1745 	if (!skb)
1746 		return -ENOMEM;
1747 
1748 	hdr = genlmsg_iput(skb, info);
1749 	if (!hdr) {
1750 		err = -EMSGSIZE;
1751 		goto err_free_msg;
1752 	}
1753 
1754 	mutex_lock(&nfsd_mutex);
1755 
1756 	err = nla_put_u32(skb, NFSD_A_SERVER_GRACETIME,
1757 			  nn->nfsd4_grace) ||
1758 	      nla_put_u32(skb, NFSD_A_SERVER_LEASETIME,
1759 			  nn->nfsd4_lease) ||
1760 	      nla_put_string(skb, NFSD_A_SERVER_SCOPE,
1761 			  nn->nfsd_name);
1762 	if (err)
1763 		goto err_unlock;
1764 
1765 	if (nn->nfsd_serv) {
1766 		int i;
1767 
1768 		for (i = 0; i < nfsd_nrpools(net); ++i) {
1769 			struct svc_pool *sp = &nn->nfsd_serv->sv_pools[i];
1770 
1771 			err = nla_put_u32(skb, NFSD_A_SERVER_THREADS,
1772 					  sp->sp_nrthreads);
1773 			if (err)
1774 				goto err_unlock;
1775 		}
1776 	} else {
1777 		err = nla_put_u32(skb, NFSD_A_SERVER_THREADS, 0);
1778 		if (err)
1779 			goto err_unlock;
1780 	}
1781 
1782 	mutex_unlock(&nfsd_mutex);
1783 
1784 	genlmsg_end(skb, hdr);
1785 
1786 	return genlmsg_reply(skb, info);
1787 
1788 err_unlock:
1789 	mutex_unlock(&nfsd_mutex);
1790 err_free_msg:
1791 	nlmsg_free(skb);
1792 
1793 	return err;
1794 }
1795 
1796 /**
1797  * nfsd_nl_version_set_doit - set the nfs enabled versions
1798  * @skb: reply buffer
1799  * @info: netlink metadata and command arguments
1800  *
1801  * Return 0 on success or a negative errno.
1802  */
nfsd_nl_version_set_doit(struct sk_buff * skb,struct genl_info * info)1803 int nfsd_nl_version_set_doit(struct sk_buff *skb, struct genl_info *info)
1804 {
1805 	const struct nlattr *attr;
1806 	struct nfsd_net *nn;
1807 	int i, rem;
1808 
1809 	if (GENL_REQ_ATTR_CHECK(info, NFSD_A_SERVER_PROTO_VERSION))
1810 		return -EINVAL;
1811 
1812 	mutex_lock(&nfsd_mutex);
1813 
1814 	nn = net_generic(genl_info_net(info), nfsd_net_id);
1815 	if (nn->nfsd_serv) {
1816 		mutex_unlock(&nfsd_mutex);
1817 		return -EBUSY;
1818 	}
1819 
1820 	/* clear current supported versions. */
1821 	nfsd_vers(nn, 2, NFSD_CLEAR);
1822 	nfsd_vers(nn, 3, NFSD_CLEAR);
1823 	for (i = 0; i <= NFSD_SUPPORTED_MINOR_VERSION; i++)
1824 		nfsd_minorversion(nn, i, NFSD_CLEAR);
1825 
1826 	nlmsg_for_each_attr(attr, info->nlhdr, GENL_HDRLEN, rem) {
1827 		struct nlattr *tb[NFSD_A_VERSION_MAX + 1];
1828 		u32 major, minor = 0;
1829 		bool enabled;
1830 
1831 		if (nla_type(attr) != NFSD_A_SERVER_PROTO_VERSION)
1832 			continue;
1833 
1834 		if (nla_parse_nested(tb, NFSD_A_VERSION_MAX, attr,
1835 				     nfsd_version_nl_policy, info->extack) < 0)
1836 			continue;
1837 
1838 		if (!tb[NFSD_A_VERSION_MAJOR])
1839 			continue;
1840 
1841 		major = nla_get_u32(tb[NFSD_A_VERSION_MAJOR]);
1842 		if (tb[NFSD_A_VERSION_MINOR])
1843 			minor = nla_get_u32(tb[NFSD_A_VERSION_MINOR]);
1844 
1845 		enabled = nla_get_flag(tb[NFSD_A_VERSION_ENABLED]);
1846 
1847 		switch (major) {
1848 		case 4:
1849 			nfsd_minorversion(nn, minor, enabled ? NFSD_SET : NFSD_CLEAR);
1850 			break;
1851 		case 3:
1852 		case 2:
1853 			if (!minor)
1854 				nfsd_vers(nn, major, enabled ? NFSD_SET : NFSD_CLEAR);
1855 			break;
1856 		default:
1857 			break;
1858 		}
1859 	}
1860 
1861 	mutex_unlock(&nfsd_mutex);
1862 
1863 	return 0;
1864 }
1865 
1866 /**
1867  * nfsd_nl_version_get_doit - get the enabled status for all supported nfs versions
1868  * @skb: reply buffer
1869  * @info: netlink metadata and command arguments
1870  *
1871  * Return 0 on success or a negative errno.
1872  */
nfsd_nl_version_get_doit(struct sk_buff * skb,struct genl_info * info)1873 int nfsd_nl_version_get_doit(struct sk_buff *skb, struct genl_info *info)
1874 {
1875 	struct nfsd_net *nn;
1876 	int i, err;
1877 	void *hdr;
1878 
1879 	skb = genlmsg_new(GENLMSG_DEFAULT_SIZE, GFP_KERNEL);
1880 	if (!skb)
1881 		return -ENOMEM;
1882 
1883 	hdr = genlmsg_iput(skb, info);
1884 	if (!hdr) {
1885 		err = -EMSGSIZE;
1886 		goto err_free_msg;
1887 	}
1888 
1889 	mutex_lock(&nfsd_mutex);
1890 	nn = net_generic(genl_info_net(info), nfsd_net_id);
1891 
1892 	for (i = 2; i <= 4; i++) {
1893 		int j;
1894 
1895 		for (j = 0; j <= NFSD_SUPPORTED_MINOR_VERSION; j++) {
1896 			struct nlattr *attr;
1897 
1898 			/* Don't record any versions the kernel doesn't have
1899 			 * compiled in
1900 			 */
1901 			if (!nfsd_support_version(i))
1902 				continue;
1903 
1904 			/* NFSv{2,3} does not support minor numbers */
1905 			if (i < 4 && j)
1906 				continue;
1907 
1908 			attr = nla_nest_start(skb,
1909 					      NFSD_A_SERVER_PROTO_VERSION);
1910 			if (!attr) {
1911 				err = -EINVAL;
1912 				goto err_nfsd_unlock;
1913 			}
1914 
1915 			if (nla_put_u32(skb, NFSD_A_VERSION_MAJOR, i) ||
1916 			    nla_put_u32(skb, NFSD_A_VERSION_MINOR, j)) {
1917 				err = -EINVAL;
1918 				goto err_nfsd_unlock;
1919 			}
1920 
1921 			/* Set the enabled flag if the version is enabled */
1922 			if (nfsd_vers(nn, i, NFSD_TEST) &&
1923 			    (i < 4 || nfsd_minorversion(nn, j, NFSD_TEST)) &&
1924 			    nla_put_flag(skb, NFSD_A_VERSION_ENABLED)) {
1925 				err = -EINVAL;
1926 				goto err_nfsd_unlock;
1927 			}
1928 
1929 			nla_nest_end(skb, attr);
1930 		}
1931 	}
1932 
1933 	mutex_unlock(&nfsd_mutex);
1934 	genlmsg_end(skb, hdr);
1935 
1936 	return genlmsg_reply(skb, info);
1937 
1938 err_nfsd_unlock:
1939 	mutex_unlock(&nfsd_mutex);
1940 err_free_msg:
1941 	nlmsg_free(skb);
1942 
1943 	return err;
1944 }
1945 
1946 /**
1947  * nfsd_nl_listener_set_doit - set the nfs running sockets
1948  * @skb: reply buffer
1949  * @info: netlink metadata and command arguments
1950  *
1951  * Return 0 on success or a negative errno.
1952  */
nfsd_nl_listener_set_doit(struct sk_buff * skb,struct genl_info * info)1953 int nfsd_nl_listener_set_doit(struct sk_buff *skb, struct genl_info *info)
1954 {
1955 	struct net *net = genl_info_net(info);
1956 	struct svc_xprt *xprt, *tmp;
1957 	const struct nlattr *attr;
1958 	struct svc_serv *serv;
1959 	LIST_HEAD(permsocks);
1960 	struct nfsd_net *nn;
1961 	bool delete = false;
1962 	int err, rem;
1963 
1964 	mutex_lock(&nfsd_mutex);
1965 
1966 	err = nfsd_create_serv(net);
1967 	if (err) {
1968 		mutex_unlock(&nfsd_mutex);
1969 		return err;
1970 	}
1971 
1972 	nn = net_generic(net, nfsd_net_id);
1973 	serv = nn->nfsd_serv;
1974 
1975 	spin_lock_bh(&serv->sv_lock);
1976 
1977 	/* Move all of the old listener sockets to a temp list */
1978 	list_splice_init(&serv->sv_permsocks, &permsocks);
1979 
1980 	/*
1981 	 * Walk the list of server_socks from userland and move any that match
1982 	 * back to sv_permsocks
1983 	 */
1984 	nlmsg_for_each_attr(attr, info->nlhdr, GENL_HDRLEN, rem) {
1985 		struct nlattr *tb[NFSD_A_SOCK_MAX + 1];
1986 		const char *xcl_name;
1987 		struct sockaddr *sa;
1988 
1989 		if (nla_type(attr) != NFSD_A_SERVER_SOCK_ADDR)
1990 			continue;
1991 
1992 		if (nla_parse_nested(tb, NFSD_A_SOCK_MAX, attr,
1993 				     nfsd_sock_nl_policy, info->extack) < 0)
1994 			continue;
1995 
1996 		if (!tb[NFSD_A_SOCK_ADDR] || !tb[NFSD_A_SOCK_TRANSPORT_NAME])
1997 			continue;
1998 
1999 		if (nla_len(tb[NFSD_A_SOCK_ADDR]) < sizeof(*sa))
2000 			continue;
2001 
2002 		xcl_name = nla_data(tb[NFSD_A_SOCK_TRANSPORT_NAME]);
2003 		sa = nla_data(tb[NFSD_A_SOCK_ADDR]);
2004 
2005 		/* Put back any matching sockets */
2006 		list_for_each_entry_safe(xprt, tmp, &permsocks, xpt_list) {
2007 			/* This shouldn't be possible */
2008 			if (WARN_ON_ONCE(xprt->xpt_net != net)) {
2009 				list_move(&xprt->xpt_list, &serv->sv_permsocks);
2010 				continue;
2011 			}
2012 
2013 			/* If everything matches, put it back */
2014 			if (!strcmp(xprt->xpt_class->xcl_name, xcl_name) &&
2015 			    rpc_cmp_addr_port(sa, (struct sockaddr *)&xprt->xpt_local)) {
2016 				list_move(&xprt->xpt_list, &serv->sv_permsocks);
2017 				break;
2018 			}
2019 		}
2020 	}
2021 
2022 	/*
2023 	 * If there are listener transports remaining on the permsocks list,
2024 	 * it means we were asked to remove a listener.
2025 	 */
2026 	if (!list_empty(&permsocks)) {
2027 		list_splice_init(&permsocks, &serv->sv_permsocks);
2028 		delete = true;
2029 	}
2030 	spin_unlock_bh(&serv->sv_lock);
2031 
2032 	/* Do not remove listeners while there are active threads. */
2033 	if (serv->sv_nrthreads) {
2034 		err = -EBUSY;
2035 		goto out_unlock_mtx;
2036 	}
2037 
2038 	/*
2039 	 * Since we can't delete an arbitrary llist entry, destroy the
2040 	 * remaining listeners and recreate the list.
2041 	 */
2042 	if (delete)
2043 		svc_xprt_destroy_all(serv, net);
2044 
2045 	/* walk list of addrs again, open any that still don't exist */
2046 	nlmsg_for_each_attr(attr, info->nlhdr, GENL_HDRLEN, rem) {
2047 		struct nlattr *tb[NFSD_A_SOCK_MAX + 1];
2048 		const char *xcl_name;
2049 		struct sockaddr *sa;
2050 		int ret;
2051 
2052 		if (nla_type(attr) != NFSD_A_SERVER_SOCK_ADDR)
2053 			continue;
2054 
2055 		if (nla_parse_nested(tb, NFSD_A_SOCK_MAX, attr,
2056 				     nfsd_sock_nl_policy, info->extack) < 0)
2057 			continue;
2058 
2059 		if (!tb[NFSD_A_SOCK_ADDR] || !tb[NFSD_A_SOCK_TRANSPORT_NAME])
2060 			continue;
2061 
2062 		if (nla_len(tb[NFSD_A_SOCK_ADDR]) < sizeof(*sa))
2063 			continue;
2064 
2065 		xcl_name = nla_data(tb[NFSD_A_SOCK_TRANSPORT_NAME]);
2066 		sa = nla_data(tb[NFSD_A_SOCK_ADDR]);
2067 
2068 		xprt = svc_find_listener(serv, xcl_name, net, sa);
2069 		if (xprt) {
2070 			if (delete)
2071 				WARN_ONCE(1, "Transport type=%s already exists\n",
2072 					  xcl_name);
2073 			svc_xprt_put(xprt);
2074 			continue;
2075 		}
2076 
2077 		ret = svc_xprt_create_from_sa(serv, xcl_name, net, sa, 0,
2078 					      get_current_cred());
2079 		/* always save the latest error */
2080 		if (ret < 0)
2081 			err = ret;
2082 	}
2083 
2084 	if (!serv->sv_nrthreads && list_empty(&nn->nfsd_serv->sv_permsocks))
2085 		nfsd_destroy_serv(net);
2086 
2087 out_unlock_mtx:
2088 	mutex_unlock(&nfsd_mutex);
2089 
2090 	return err;
2091 }
2092 
2093 /**
2094  * nfsd_nl_listener_get_doit - get the nfs running listeners
2095  * @skb: reply buffer
2096  * @info: netlink metadata and command arguments
2097  *
2098  * Return 0 on success or a negative errno.
2099  */
nfsd_nl_listener_get_doit(struct sk_buff * skb,struct genl_info * info)2100 int nfsd_nl_listener_get_doit(struct sk_buff *skb, struct genl_info *info)
2101 {
2102 	struct svc_xprt *xprt;
2103 	struct svc_serv *serv;
2104 	struct nfsd_net *nn;
2105 	void *hdr;
2106 	int err;
2107 
2108 	skb = genlmsg_new(GENLMSG_DEFAULT_SIZE, GFP_KERNEL);
2109 	if (!skb)
2110 		return -ENOMEM;
2111 
2112 	hdr = genlmsg_iput(skb, info);
2113 	if (!hdr) {
2114 		err = -EMSGSIZE;
2115 		goto err_free_msg;
2116 	}
2117 
2118 	mutex_lock(&nfsd_mutex);
2119 	nn = net_generic(genl_info_net(info), nfsd_net_id);
2120 
2121 	/* no nfs server? Just send empty socket list */
2122 	if (!nn->nfsd_serv)
2123 		goto out_unlock_mtx;
2124 
2125 	serv = nn->nfsd_serv;
2126 	spin_lock_bh(&serv->sv_lock);
2127 	list_for_each_entry(xprt, &serv->sv_permsocks, xpt_list) {
2128 		struct nlattr *attr;
2129 
2130 		attr = nla_nest_start(skb, NFSD_A_SERVER_SOCK_ADDR);
2131 		if (!attr) {
2132 			err = -EINVAL;
2133 			goto err_serv_unlock;
2134 		}
2135 
2136 		if (nla_put_string(skb, NFSD_A_SOCK_TRANSPORT_NAME,
2137 				   xprt->xpt_class->xcl_name) ||
2138 		    nla_put(skb, NFSD_A_SOCK_ADDR,
2139 			    sizeof(struct sockaddr_storage),
2140 			    &xprt->xpt_local)) {
2141 			err = -EINVAL;
2142 			goto err_serv_unlock;
2143 		}
2144 
2145 		nla_nest_end(skb, attr);
2146 	}
2147 	spin_unlock_bh(&serv->sv_lock);
2148 out_unlock_mtx:
2149 	mutex_unlock(&nfsd_mutex);
2150 	genlmsg_end(skb, hdr);
2151 
2152 	return genlmsg_reply(skb, info);
2153 
2154 err_serv_unlock:
2155 	spin_unlock_bh(&serv->sv_lock);
2156 	mutex_unlock(&nfsd_mutex);
2157 err_free_msg:
2158 	nlmsg_free(skb);
2159 
2160 	return err;
2161 }
2162 
2163 /**
2164  * nfsd_nl_pool_mode_set_doit - set the number of running threads
2165  * @skb: reply buffer
2166  * @info: netlink metadata and command arguments
2167  *
2168  * Return 0 on success or a negative errno.
2169  */
nfsd_nl_pool_mode_set_doit(struct sk_buff * skb,struct genl_info * info)2170 int nfsd_nl_pool_mode_set_doit(struct sk_buff *skb, struct genl_info *info)
2171 {
2172 	const struct nlattr *attr;
2173 
2174 	if (GENL_REQ_ATTR_CHECK(info, NFSD_A_POOL_MODE_MODE))
2175 		return -EINVAL;
2176 
2177 	attr = info->attrs[NFSD_A_POOL_MODE_MODE];
2178 	return sunrpc_set_pool_mode(nla_data(attr));
2179 }
2180 
2181 /**
2182  * nfsd_nl_pool_mode_get_doit - get info about pool_mode
2183  * @skb: reply buffer
2184  * @info: netlink metadata and command arguments
2185  *
2186  * Return 0 on success or a negative errno.
2187  */
nfsd_nl_pool_mode_get_doit(struct sk_buff * skb,struct genl_info * info)2188 int nfsd_nl_pool_mode_get_doit(struct sk_buff *skb, struct genl_info *info)
2189 {
2190 	struct net *net = genl_info_net(info);
2191 	char buf[16];
2192 	void *hdr;
2193 	int err;
2194 
2195 	if (sunrpc_get_pool_mode(buf, ARRAY_SIZE(buf)) >= ARRAY_SIZE(buf))
2196 		return -ERANGE;
2197 
2198 	skb = genlmsg_new(GENLMSG_DEFAULT_SIZE, GFP_KERNEL);
2199 	if (!skb)
2200 		return -ENOMEM;
2201 
2202 	err = -EMSGSIZE;
2203 	hdr = genlmsg_iput(skb, info);
2204 	if (!hdr)
2205 		goto err_free_msg;
2206 
2207 	err = nla_put_string(skb, NFSD_A_POOL_MODE_MODE, buf) |
2208 	      nla_put_u32(skb, NFSD_A_POOL_MODE_NPOOLS, nfsd_nrpools(net));
2209 	if (err)
2210 		goto err_free_msg;
2211 
2212 	genlmsg_end(skb, hdr);
2213 	return genlmsg_reply(skb, info);
2214 
2215 err_free_msg:
2216 	nlmsg_free(skb);
2217 	return err;
2218 }
2219 
2220 /**
2221  * nfsd_net_init - Prepare the nfsd_net portion of a new net namespace
2222  * @net: a freshly-created network namespace
2223  *
2224  * This information stays around as long as the network namespace is
2225  * alive whether or not there is an NFSD instance running in the
2226  * namespace.
2227  *
2228  * Returns zero on success, or a negative errno otherwise.
2229  */
nfsd_net_init(struct net * net)2230 static __net_init int nfsd_net_init(struct net *net)
2231 {
2232 	struct nfsd_net *nn = net_generic(net, nfsd_net_id);
2233 	int retval;
2234 	int i;
2235 
2236 	retval = nfsd_export_init(net);
2237 	if (retval)
2238 		goto out_export_error;
2239 	retval = nfsd_idmap_init(net);
2240 	if (retval)
2241 		goto out_idmap_error;
2242 	retval = percpu_counter_init_many(nn->counter, 0, GFP_KERNEL,
2243 					  NFSD_STATS_COUNTERS_NUM);
2244 	if (retval)
2245 		goto out_repcache_error;
2246 
2247 	memset(&nn->nfsd_svcstats, 0, sizeof(nn->nfsd_svcstats));
2248 	nn->nfsd_svcstats.program = &nfsd_programs[0];
2249 	if (!nfsd_proc_stat_init(net)) {
2250 		retval = -ENOMEM;
2251 		goto out_proc_error;
2252 	}
2253 
2254 	for (i = 0; i < sizeof(nn->nfsd_versions); i++)
2255 		nn->nfsd_versions[i] = nfsd_support_version(i);
2256 	for (i = 0; i < sizeof(nn->nfsd4_minorversions); i++)
2257 		nn->nfsd4_minorversions[i] = nfsd_support_version(4);
2258 	nn->nfsd_info.mutex = &nfsd_mutex;
2259 	nn->nfsd_serv = NULL;
2260 	nfsd4_init_leases_net(nn);
2261 	get_random_bytes(&nn->siphash_key, sizeof(nn->siphash_key));
2262 	seqlock_init(&nn->writeverf_lock);
2263 #if IS_ENABLED(CONFIG_NFS_LOCALIO)
2264 	INIT_LIST_HEAD(&nn->local_clients);
2265 #endif
2266 	return 0;
2267 
2268 out_proc_error:
2269 	percpu_counter_destroy_many(nn->counter, NFSD_STATS_COUNTERS_NUM);
2270 out_repcache_error:
2271 	nfsd_idmap_shutdown(net);
2272 out_idmap_error:
2273 	nfsd_export_shutdown(net);
2274 out_export_error:
2275 	return retval;
2276 }
2277 
2278 #if IS_ENABLED(CONFIG_NFS_LOCALIO)
2279 /**
2280  * nfsd_net_pre_exit - Disconnect localio clients from net namespace
2281  * @net: a network namespace that is about to be destroyed
2282  *
2283  * This invalidated ->net pointers held by localio clients
2284  * while they can still safely access nn->counter.
2285  */
nfsd_net_pre_exit(struct net * net)2286 static __net_exit void nfsd_net_pre_exit(struct net *net)
2287 {
2288 	struct nfsd_net *nn = net_generic(net, nfsd_net_id);
2289 
2290 	nfs_uuid_invalidate_clients(&nn->local_clients);
2291 }
2292 #endif
2293 
2294 /**
2295  * nfsd_net_exit - Release the nfsd_net portion of a net namespace
2296  * @net: a network namespace that is about to be destroyed
2297  *
2298  */
nfsd_net_exit(struct net * net)2299 static __net_exit void nfsd_net_exit(struct net *net)
2300 {
2301 	struct nfsd_net *nn = net_generic(net, nfsd_net_id);
2302 
2303 	nfsd_proc_stat_shutdown(net);
2304 	percpu_counter_destroy_many(nn->counter, NFSD_STATS_COUNTERS_NUM);
2305 	nfsd_idmap_shutdown(net);
2306 	nfsd_export_shutdown(net);
2307 }
2308 
2309 static struct pernet_operations nfsd_net_ops = {
2310 	.init = nfsd_net_init,
2311 #if IS_ENABLED(CONFIG_NFS_LOCALIO)
2312 	.pre_exit = nfsd_net_pre_exit,
2313 #endif
2314 	.exit = nfsd_net_exit,
2315 	.id   = &nfsd_net_id,
2316 	.size = sizeof(struct nfsd_net),
2317 };
2318 
init_nfsd(void)2319 static int __init init_nfsd(void)
2320 {
2321 	int retval;
2322 
2323 	retval = nfsd4_init_slabs();
2324 	if (retval)
2325 		return retval;
2326 	retval = nfsd4_init_pnfs();
2327 	if (retval)
2328 		goto out_free_slabs;
2329 	retval = nfsd_drc_slab_create();
2330 	if (retval)
2331 		goto out_free_pnfs;
2332 	nfsd_lockd_init();	/* lockd->nfsd callbacks */
2333 	retval = register_pernet_subsys(&nfsd_net_ops);
2334 	if (retval < 0)
2335 		goto out_free_lockd;
2336 	retval = register_cld_notifier();
2337 	if (retval)
2338 		goto out_free_subsys;
2339 	retval = nfsd4_create_laundry_wq();
2340 	if (retval)
2341 		goto out_free_cld;
2342 	retval = register_filesystem(&nfsd_fs_type);
2343 	if (retval)
2344 		goto out_free_nfsd4;
2345 	retval = genl_register_family(&nfsd_nl_family);
2346 	if (retval)
2347 		goto out_free_filesystem;
2348 	retval = create_proc_exports_entry();
2349 	if (retval)
2350 		goto out_free_all;
2351 	nfsd_localio_ops_init();
2352 
2353 	return 0;
2354 out_free_all:
2355 	genl_unregister_family(&nfsd_nl_family);
2356 out_free_filesystem:
2357 	unregister_filesystem(&nfsd_fs_type);
2358 out_free_nfsd4:
2359 	nfsd4_destroy_laundry_wq();
2360 out_free_cld:
2361 	unregister_cld_notifier();
2362 out_free_subsys:
2363 	unregister_pernet_subsys(&nfsd_net_ops);
2364 out_free_lockd:
2365 	nfsd_lockd_shutdown();
2366 	nfsd_drc_slab_free();
2367 out_free_pnfs:
2368 	nfsd4_exit_pnfs();
2369 out_free_slabs:
2370 	nfsd4_free_slabs();
2371 	return retval;
2372 }
2373 
exit_nfsd(void)2374 static void __exit exit_nfsd(void)
2375 {
2376 	remove_proc_entry("fs/nfs/exports", NULL);
2377 	remove_proc_entry("fs/nfs", NULL);
2378 	genl_unregister_family(&nfsd_nl_family);
2379 	unregister_filesystem(&nfsd_fs_type);
2380 	nfsd4_destroy_laundry_wq();
2381 	unregister_cld_notifier();
2382 	unregister_pernet_subsys(&nfsd_net_ops);
2383 	nfsd_drc_slab_free();
2384 	nfsd_lockd_shutdown();
2385 	nfsd4_free_slabs();
2386 	nfsd4_exit_pnfs();
2387 }
2388 
2389 MODULE_AUTHOR("Olaf Kirch <okir@monad.swb.de>");
2390 MODULE_DESCRIPTION("In-kernel NFS server");
2391 MODULE_LICENSE("GPL");
2392 module_init(init_nfsd)
2393 module_exit(exit_nfsd)
2394