4 #include <linux/nfs3.h>
5 #include <linux/nfs_fs.h>
6 #include <linux/posix_acl_xattr.h>
7 #include <linux/nfsacl.h>
11 #define NFSDBG_FACILITY NFSDBG_PROC
13 ssize_t nfs3_listxattr(struct dentry *dentry, char *buffer, size_t size)
15 struct inode *inode = dentry->d_inode;
16 struct posix_acl *acl;
19 # define output(s) do { \
20 if (pos + sizeof(s) <= size) { \
21 memcpy(buffer + pos, s, sizeof(s)); \
27 acl = nfs3_proc_getacl(inode, ACL_TYPE_ACCESS);
31 output("system.posix_acl_access");
32 posix_acl_release(acl);
35 if (S_ISDIR(inode->i_mode)) {
36 acl = nfs3_proc_getacl(inode, ACL_TYPE_DEFAULT);
40 output("system.posix_acl_default");
41 posix_acl_release(acl);
47 if (!buffer || len <= size)
52 ssize_t nfs3_getxattr(struct dentry *dentry, const char *name,
53 void *buffer, size_t size)
55 struct inode *inode = dentry->d_inode;
56 struct posix_acl *acl;
59 if (strcmp(name, POSIX_ACL_XATTR_ACCESS) == 0)
60 type = ACL_TYPE_ACCESS;
61 else if (strcmp(name, POSIX_ACL_XATTR_DEFAULT) == 0)
62 type = ACL_TYPE_DEFAULT;
66 acl = nfs3_proc_getacl(inode, type);
70 if (type == ACL_TYPE_ACCESS && acl->a_count == 0)
73 error = posix_acl_to_xattr(acl, buffer, size);
74 posix_acl_release(acl);
81 int nfs3_setxattr(struct dentry *dentry, const char *name,
82 const void *value, size_t size, int flags)
84 struct inode *inode = dentry->d_inode;
85 struct posix_acl *acl;
88 if (strcmp(name, POSIX_ACL_XATTR_ACCESS) == 0)
89 type = ACL_TYPE_ACCESS;
90 else if (strcmp(name, POSIX_ACL_XATTR_DEFAULT) == 0)
91 type = ACL_TYPE_DEFAULT;
95 acl = posix_acl_from_xattr(value, size);
98 error = nfs3_proc_setacl(inode, type, acl);
99 posix_acl_release(acl);
104 int nfs3_removexattr(struct dentry *dentry, const char *name)
106 struct inode *inode = dentry->d_inode;
109 if (strcmp(name, POSIX_ACL_XATTR_ACCESS) == 0)
110 type = ACL_TYPE_ACCESS;
111 else if (strcmp(name, POSIX_ACL_XATTR_DEFAULT) == 0)
112 type = ACL_TYPE_DEFAULT;
116 return nfs3_proc_setacl(inode, type, NULL);
119 static void __nfs3_forget_cached_acls(struct nfs_inode *nfsi)
121 if (!IS_ERR(nfsi->acl_access)) {
122 posix_acl_release(nfsi->acl_access);
123 nfsi->acl_access = ERR_PTR(-EAGAIN);
125 if (!IS_ERR(nfsi->acl_default)) {
126 posix_acl_release(nfsi->acl_default);
127 nfsi->acl_default = ERR_PTR(-EAGAIN);
131 void nfs3_forget_cached_acls(struct inode *inode)
133 dprintk("NFS: nfs3_forget_cached_acls(%s/%ld)\n", inode->i_sb->s_id,
135 spin_lock(&inode->i_lock);
136 __nfs3_forget_cached_acls(NFS_I(inode));
137 spin_unlock(&inode->i_lock);
140 static struct posix_acl *nfs3_get_cached_acl(struct inode *inode, int type)
142 struct nfs_inode *nfsi = NFS_I(inode);
143 struct posix_acl *acl = ERR_PTR(-EINVAL);
145 spin_lock(&inode->i_lock);
147 case ACL_TYPE_ACCESS:
148 acl = nfsi->acl_access;
151 case ACL_TYPE_DEFAULT:
152 acl = nfsi->acl_default;
159 acl = ERR_PTR(-EAGAIN);
161 acl = posix_acl_dup(acl);
163 spin_unlock(&inode->i_lock);
164 dprintk("NFS: nfs3_get_cached_acl(%s/%ld, %d) = %p\n", inode->i_sb->s_id,
165 inode->i_ino, type, acl);
169 static void nfs3_cache_acls(struct inode *inode, struct posix_acl *acl,
170 struct posix_acl *dfacl)
172 struct nfs_inode *nfsi = NFS_I(inode);
174 dprintk("nfs3_cache_acls(%s/%ld, %p, %p)\n", inode->i_sb->s_id,
175 inode->i_ino, acl, dfacl);
176 spin_lock(&inode->i_lock);
177 __nfs3_forget_cached_acls(NFS_I(inode));
179 nfsi->acl_access = posix_acl_dup(acl);
181 nfsi->acl_default = posix_acl_dup(dfacl);
182 spin_unlock(&inode->i_lock);
185 struct posix_acl *nfs3_proc_getacl(struct inode *inode, int type)
187 struct nfs_server *server = NFS_SERVER(inode);
188 struct nfs_fattr fattr;
189 struct page *pages[NFSACL_MAXPAGES] = { };
190 struct nfs3_getaclargs args = {
192 /* The xdr layer may allocate pages here. */
195 struct nfs3_getaclres res = {
198 struct rpc_message msg = {
202 struct posix_acl *acl;
205 if (!nfs_server_capable(inode, NFS_CAP_ACLS))
206 return ERR_PTR(-EOPNOTSUPP);
208 status = nfs_revalidate_inode(server, inode);
210 return ERR_PTR(status);
211 acl = nfs3_get_cached_acl(inode, type);
212 if (acl != ERR_PTR(-EAGAIN))
217 * Only get the access acl when explicitly requested: We don't
218 * need it for access decisions, and only some applications use
219 * it. Applications which request the access acl first are not
220 * penalized from this optimization.
222 if (type == ACL_TYPE_ACCESS)
223 args.mask |= NFS_ACLCNT|NFS_ACL;
224 if (S_ISDIR(inode->i_mode))
225 args.mask |= NFS_DFACLCNT|NFS_DFACL;
229 dprintk("NFS call getacl\n");
230 msg.rpc_proc = &server->client_acl->cl_procinfo[ACLPROC3_GETACL];
231 nfs_fattr_init(&fattr);
232 status = rpc_call_sync(server->client_acl, &msg, 0);
233 dprintk("NFS reply getacl: %d\n", status);
235 /* pages may have been allocated at the xdr layer. */
236 for (count = 0; count < NFSACL_MAXPAGES && args.pages[count]; count++)
237 __free_page(args.pages[count]);
241 status = nfs_refresh_inode(inode, &fattr);
244 case -EPROTONOSUPPORT:
245 dprintk("NFS_V3_ACL extension not supported; disabling\n");
246 server->caps &= ~NFS_CAP_ACLS;
248 status = -EOPNOTSUPP;
252 if ((args.mask & res.mask) != args.mask) {
257 if (res.acl_access != NULL) {
258 if (posix_acl_equiv_mode(res.acl_access, NULL) == 0) {
259 posix_acl_release(res.acl_access);
260 res.acl_access = NULL;
263 nfs3_cache_acls(inode,
264 (res.mask & NFS_ACL) ? res.acl_access : ERR_PTR(-EINVAL),
265 (res.mask & NFS_DFACL) ? res.acl_default : ERR_PTR(-EINVAL));
268 case ACL_TYPE_ACCESS:
269 acl = res.acl_access;
270 res.acl_access = NULL;
273 case ACL_TYPE_DEFAULT:
274 acl = res.acl_default;
275 res.acl_default = NULL;
279 posix_acl_release(res.acl_access);
280 posix_acl_release(res.acl_default);
283 posix_acl_release(acl);
284 acl = ERR_PTR(status);
289 static int nfs3_proc_setacls(struct inode *inode, struct posix_acl *acl,
290 struct posix_acl *dfacl)
292 struct nfs_server *server = NFS_SERVER(inode);
293 struct nfs_fattr fattr;
294 struct page *pages[NFSACL_MAXPAGES];
295 struct nfs3_setaclargs args = {
301 struct rpc_message msg = {
307 status = -EOPNOTSUPP;
308 if (!nfs_server_capable(inode, NFS_CAP_ACLS))
311 /* We are doing this here, because XDR marshalling can only
314 if (acl != NULL && acl->a_count > NFS_ACL_MAX_ENTRIES)
316 if (dfacl != NULL && dfacl->a_count > NFS_ACL_MAX_ENTRIES)
318 if (S_ISDIR(inode->i_mode)) {
319 args.mask |= NFS_DFACL;
320 args.acl_default = dfacl;
321 args.len = nfsacl_size(acl, dfacl);
323 args.len = nfsacl_size(acl, NULL);
325 if (args.len > NFS_ACL_INLINE_BUFSIZE) {
326 unsigned int npages = 1 + ((args.len - 1) >> PAGE_SHIFT);
330 args.pages[args.npages] = alloc_page(GFP_KERNEL);
331 if (args.pages[args.npages] == NULL)
334 } while (args.npages < npages);
337 dprintk("NFS call setacl\n");
338 msg.rpc_proc = &server->client_acl->cl_procinfo[ACLPROC3_SETACL];
339 nfs_fattr_init(&fattr);
340 status = rpc_call_sync(server->client_acl, &msg, 0);
341 nfs_access_zap_cache(inode);
342 nfs_zap_acl_cache(inode);
343 dprintk("NFS reply setacl: %d\n", status);
347 status = nfs_refresh_inode(inode, &fattr);
348 nfs3_cache_acls(inode, acl, dfacl);
351 case -EPROTONOSUPPORT:
352 dprintk("NFS_V3_ACL SETACL RPC not supported"
353 "(will not retry)\n");
354 server->caps &= ~NFS_CAP_ACLS;
356 status = -EOPNOTSUPP;
359 while (args.npages != 0) {
361 __free_page(args.pages[args.npages]);
367 int nfs3_proc_setacl(struct inode *inode, int type, struct posix_acl *acl)
369 struct posix_acl *alloc = NULL, *dfacl = NULL;
372 if (S_ISDIR(inode->i_mode)) {
374 case ACL_TYPE_ACCESS:
375 alloc = dfacl = nfs3_proc_getacl(inode,
381 case ACL_TYPE_DEFAULT:
383 alloc = acl = nfs3_proc_getacl(inode,
392 } else if (type != ACL_TYPE_ACCESS)
396 alloc = acl = posix_acl_from_mode(inode->i_mode, GFP_KERNEL);
400 status = nfs3_proc_setacls(inode, acl, dfacl);
401 posix_acl_release(alloc);
405 return PTR_ERR(alloc);
408 int nfs3_proc_set_default_acl(struct inode *dir, struct inode *inode,
411 struct posix_acl *dfacl, *acl;
414 dfacl = nfs3_proc_getacl(dir, ACL_TYPE_DEFAULT);
416 error = PTR_ERR(dfacl);
417 return (error == -EOPNOTSUPP) ? 0 : error;
421 acl = posix_acl_clone(dfacl, GFP_KERNEL);
424 goto out_release_dfacl;
425 error = posix_acl_create_masq(acl, &mode);
427 goto out_release_acl;
428 error = nfs3_proc_setacls(inode, acl, S_ISDIR(inode->i_mode) ?
431 posix_acl_release(acl);
433 posix_acl_release(dfacl);