|  | /* | 
|  | * Copyright (C) 2007 Red Hat.  All rights reserved. | 
|  | * | 
|  | * This program is free software; you can redistribute it and/or | 
|  | * modify it under the terms of the GNU General Public | 
|  | * License v2 as published by the Free Software Foundation. | 
|  | * | 
|  | * This program is distributed in the hope that it will be useful, | 
|  | * but WITHOUT ANY WARRANTY; without even the implied warranty of | 
|  | * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU | 
|  | * General Public License for more details. | 
|  | * | 
|  | * You should have received a copy of the GNU General Public | 
|  | * License along with this program; if not, write to the | 
|  | * Free Software Foundation, Inc., 59 Temple Place - Suite 330, | 
|  | * Boston, MA 021110-1307, USA. | 
|  | */ | 
|  |  | 
|  | #include <linux/init.h> | 
|  | #include <linux/fs.h> | 
|  | #include <linux/slab.h> | 
|  | #include <linux/rwsem.h> | 
|  | #include <linux/xattr.h> | 
|  | #include <linux/security.h> | 
|  | #include "ctree.h" | 
|  | #include "btrfs_inode.h" | 
|  | #include "transaction.h" | 
|  | #include "xattr.h" | 
|  | #include "disk-io.h" | 
|  |  | 
|  |  | 
|  | ssize_t __btrfs_getxattr(struct inode *inode, const char *name, | 
|  | void *buffer, size_t size) | 
|  | { | 
|  | struct btrfs_dir_item *di; | 
|  | struct btrfs_root *root = BTRFS_I(inode)->root; | 
|  | struct btrfs_path *path; | 
|  | struct extent_buffer *leaf; | 
|  | int ret = 0; | 
|  | unsigned long data_ptr; | 
|  |  | 
|  | path = btrfs_alloc_path(); | 
|  | if (!path) | 
|  | return -ENOMEM; | 
|  |  | 
|  | /* lookup the xattr by name */ | 
|  | di = btrfs_lookup_xattr(NULL, root, path, btrfs_ino(inode), name, | 
|  | strlen(name), 0); | 
|  | if (!di) { | 
|  | ret = -ENODATA; | 
|  | goto out; | 
|  | } else if (IS_ERR(di)) { | 
|  | ret = PTR_ERR(di); | 
|  | goto out; | 
|  | } | 
|  |  | 
|  | leaf = path->nodes[0]; | 
|  | /* if size is 0, that means we want the size of the attr */ | 
|  | if (!size) { | 
|  | ret = btrfs_dir_data_len(leaf, di); | 
|  | goto out; | 
|  | } | 
|  |  | 
|  | /* now get the data out of our dir_item */ | 
|  | if (btrfs_dir_data_len(leaf, di) > size) { | 
|  | ret = -ERANGE; | 
|  | goto out; | 
|  | } | 
|  |  | 
|  | /* | 
|  | * The way things are packed into the leaf is like this | 
|  | * |struct btrfs_dir_item|name|data| | 
|  | * where name is the xattr name, so security.foo, and data is the | 
|  | * content of the xattr.  data_ptr points to the location in memory | 
|  | * where the data starts in the in memory leaf | 
|  | */ | 
|  | data_ptr = (unsigned long)((char *)(di + 1) + | 
|  | btrfs_dir_name_len(leaf, di)); | 
|  | read_extent_buffer(leaf, buffer, data_ptr, | 
|  | btrfs_dir_data_len(leaf, di)); | 
|  | ret = btrfs_dir_data_len(leaf, di); | 
|  |  | 
|  | out: | 
|  | btrfs_free_path(path); | 
|  | return ret; | 
|  | } | 
|  |  | 
|  | static int do_setxattr(struct btrfs_trans_handle *trans, | 
|  | struct inode *inode, const char *name, | 
|  | const void *value, size_t size, int flags) | 
|  | { | 
|  | struct btrfs_dir_item *di; | 
|  | struct btrfs_root *root = BTRFS_I(inode)->root; | 
|  | struct btrfs_path *path; | 
|  | size_t name_len = strlen(name); | 
|  | int ret = 0; | 
|  |  | 
|  | if (name_len + size > BTRFS_MAX_XATTR_SIZE(root)) | 
|  | return -ENOSPC; | 
|  |  | 
|  | path = btrfs_alloc_path(); | 
|  | if (!path) | 
|  | return -ENOMEM; | 
|  |  | 
|  | if (flags & XATTR_REPLACE) { | 
|  | di = btrfs_lookup_xattr(trans, root, path, btrfs_ino(inode), name, | 
|  | name_len, -1); | 
|  | if (IS_ERR(di)) { | 
|  | ret = PTR_ERR(di); | 
|  | goto out; | 
|  | } else if (!di) { | 
|  | ret = -ENODATA; | 
|  | goto out; | 
|  | } | 
|  | ret = btrfs_delete_one_dir_name(trans, root, path, di); | 
|  | if (ret) | 
|  | goto out; | 
|  | btrfs_release_path(path); | 
|  |  | 
|  | /* | 
|  | * remove the attribute | 
|  | */ | 
|  | if (!value) | 
|  | goto out; | 
|  | } else { | 
|  | di = btrfs_lookup_xattr(NULL, root, path, btrfs_ino(inode), | 
|  | name, name_len, 0); | 
|  | if (IS_ERR(di)) { | 
|  | ret = PTR_ERR(di); | 
|  | goto out; | 
|  | } | 
|  | if (!di && !value) | 
|  | goto out; | 
|  | btrfs_release_path(path); | 
|  | } | 
|  |  | 
|  | again: | 
|  | ret = btrfs_insert_xattr_item(trans, root, path, btrfs_ino(inode), | 
|  | name, name_len, value, size); | 
|  | /* | 
|  | * If we're setting an xattr to a new value but the new value is say | 
|  | * exactly BTRFS_MAX_XATTR_SIZE, we could end up with EOVERFLOW getting | 
|  | * back from split_leaf.  This is because it thinks we'll be extending | 
|  | * the existing item size, but we're asking for enough space to add the | 
|  | * item itself.  So if we get EOVERFLOW just set ret to EEXIST and let | 
|  | * the rest of the function figure it out. | 
|  | */ | 
|  | if (ret == -EOVERFLOW) | 
|  | ret = -EEXIST; | 
|  |  | 
|  | if (ret == -EEXIST) { | 
|  | if (flags & XATTR_CREATE) | 
|  | goto out; | 
|  | /* | 
|  | * We can't use the path we already have since we won't have the | 
|  | * proper locking for a delete, so release the path and | 
|  | * re-lookup to delete the thing. | 
|  | */ | 
|  | btrfs_release_path(path); | 
|  | di = btrfs_lookup_xattr(trans, root, path, btrfs_ino(inode), | 
|  | name, name_len, -1); | 
|  | if (IS_ERR(di)) { | 
|  | ret = PTR_ERR(di); | 
|  | goto out; | 
|  | } else if (!di) { | 
|  | /* Shouldn't happen but just in case... */ | 
|  | btrfs_release_path(path); | 
|  | goto again; | 
|  | } | 
|  |  | 
|  | ret = btrfs_delete_one_dir_name(trans, root, path, di); | 
|  | if (ret) | 
|  | goto out; | 
|  |  | 
|  | /* | 
|  | * We have a value to set, so go back and try to insert it now. | 
|  | */ | 
|  | if (value) { | 
|  | btrfs_release_path(path); | 
|  | goto again; | 
|  | } | 
|  | } | 
|  | out: | 
|  | btrfs_free_path(path); | 
|  | return ret; | 
|  | } | 
|  |  | 
|  | /* | 
|  | * @value: "" makes the attribute to empty, NULL removes it | 
|  | */ | 
|  | int __btrfs_setxattr(struct btrfs_trans_handle *trans, | 
|  | struct inode *inode, const char *name, | 
|  | const void *value, size_t size, int flags) | 
|  | { | 
|  | struct btrfs_root *root = BTRFS_I(inode)->root; | 
|  | int ret; | 
|  |  | 
|  | if (trans) | 
|  | return do_setxattr(trans, inode, name, value, size, flags); | 
|  |  | 
|  | trans = btrfs_start_transaction(root, 2); | 
|  | if (IS_ERR(trans)) | 
|  | return PTR_ERR(trans); | 
|  |  | 
|  | ret = do_setxattr(trans, inode, name, value, size, flags); | 
|  | if (ret) | 
|  | goto out; | 
|  |  | 
|  | inode_inc_iversion(inode); | 
|  | inode->i_ctime = CURRENT_TIME; | 
|  | set_bit(BTRFS_INODE_COPY_EVERYTHING, &BTRFS_I(inode)->runtime_flags); | 
|  | ret = btrfs_update_inode(trans, root, inode); | 
|  | BUG_ON(ret); | 
|  | out: | 
|  | btrfs_end_transaction(trans, root); | 
|  | return ret; | 
|  | } | 
|  |  | 
|  | ssize_t btrfs_listxattr(struct dentry *dentry, char *buffer, size_t size) | 
|  | { | 
|  | struct btrfs_key key, found_key; | 
|  | struct inode *inode = dentry->d_inode; | 
|  | struct btrfs_root *root = BTRFS_I(inode)->root; | 
|  | struct btrfs_path *path; | 
|  | struct extent_buffer *leaf; | 
|  | struct btrfs_dir_item *di; | 
|  | int ret = 0, slot; | 
|  | size_t total_size = 0, size_left = size; | 
|  | unsigned long name_ptr; | 
|  | size_t name_len; | 
|  |  | 
|  | /* | 
|  | * ok we want all objects associated with this id. | 
|  | * NOTE: we set key.offset = 0; because we want to start with the | 
|  | * first xattr that we find and walk forward | 
|  | */ | 
|  | key.objectid = btrfs_ino(inode); | 
|  | btrfs_set_key_type(&key, BTRFS_XATTR_ITEM_KEY); | 
|  | key.offset = 0; | 
|  |  | 
|  | path = btrfs_alloc_path(); | 
|  | if (!path) | 
|  | return -ENOMEM; | 
|  | path->reada = 2; | 
|  |  | 
|  | /* search for our xattrs */ | 
|  | ret = btrfs_search_slot(NULL, root, &key, path, 0, 0); | 
|  | if (ret < 0) | 
|  | goto err; | 
|  |  | 
|  | while (1) { | 
|  | leaf = path->nodes[0]; | 
|  | slot = path->slots[0]; | 
|  |  | 
|  | /* this is where we start walking through the path */ | 
|  | if (slot >= btrfs_header_nritems(leaf)) { | 
|  | /* | 
|  | * if we've reached the last slot in this leaf we need | 
|  | * to go to the next leaf and reset everything | 
|  | */ | 
|  | ret = btrfs_next_leaf(root, path); | 
|  | if (ret < 0) | 
|  | goto err; | 
|  | else if (ret > 0) | 
|  | break; | 
|  | continue; | 
|  | } | 
|  |  | 
|  | btrfs_item_key_to_cpu(leaf, &found_key, slot); | 
|  |  | 
|  | /* check to make sure this item is what we want */ | 
|  | if (found_key.objectid != key.objectid) | 
|  | break; | 
|  | if (btrfs_key_type(&found_key) != BTRFS_XATTR_ITEM_KEY) | 
|  | break; | 
|  |  | 
|  | di = btrfs_item_ptr(leaf, slot, struct btrfs_dir_item); | 
|  | if (verify_dir_item(root, leaf, di)) | 
|  | goto next; | 
|  |  | 
|  | name_len = btrfs_dir_name_len(leaf, di); | 
|  | total_size += name_len + 1; | 
|  |  | 
|  | /* we are just looking for how big our buffer needs to be */ | 
|  | if (!size) | 
|  | goto next; | 
|  |  | 
|  | if (!buffer || (name_len + 1) > size_left) { | 
|  | ret = -ERANGE; | 
|  | goto err; | 
|  | } | 
|  |  | 
|  | name_ptr = (unsigned long)(di + 1); | 
|  | read_extent_buffer(leaf, buffer, name_ptr, name_len); | 
|  | buffer[name_len] = '\0'; | 
|  |  | 
|  | size_left -= name_len + 1; | 
|  | buffer += name_len + 1; | 
|  | next: | 
|  | path->slots[0]++; | 
|  | } | 
|  | ret = total_size; | 
|  |  | 
|  | err: | 
|  | btrfs_free_path(path); | 
|  |  | 
|  | return ret; | 
|  | } | 
|  |  | 
|  | /* | 
|  | * List of handlers for synthetic system.* attributes.  All real ondisk | 
|  | * attributes are handled directly. | 
|  | */ | 
|  | const struct xattr_handler *btrfs_xattr_handlers[] = { | 
|  | #ifdef CONFIG_BTRFS_FS_POSIX_ACL | 
|  | &btrfs_xattr_acl_access_handler, | 
|  | &btrfs_xattr_acl_default_handler, | 
|  | #endif | 
|  | NULL, | 
|  | }; | 
|  |  | 
|  | /* | 
|  | * Check if the attribute is in a supported namespace. | 
|  | * | 
|  | * This applied after the check for the synthetic attributes in the system | 
|  | * namespace. | 
|  | */ | 
|  | static bool btrfs_is_valid_xattr(const char *name) | 
|  | { | 
|  | return !strncmp(name, XATTR_SECURITY_PREFIX, | 
|  | XATTR_SECURITY_PREFIX_LEN) || | 
|  | !strncmp(name, XATTR_SYSTEM_PREFIX, XATTR_SYSTEM_PREFIX_LEN) || | 
|  | !strncmp(name, XATTR_TRUSTED_PREFIX, XATTR_TRUSTED_PREFIX_LEN) || | 
|  | !strncmp(name, XATTR_USER_PREFIX, XATTR_USER_PREFIX_LEN); | 
|  | } | 
|  |  | 
|  | ssize_t btrfs_getxattr(struct dentry *dentry, const char *name, | 
|  | void *buffer, size_t size) | 
|  | { | 
|  | /* | 
|  | * If this is a request for a synthetic attribute in the system.* | 
|  | * namespace use the generic infrastructure to resolve a handler | 
|  | * for it via sb->s_xattr. | 
|  | */ | 
|  | if (!strncmp(name, XATTR_SYSTEM_PREFIX, XATTR_SYSTEM_PREFIX_LEN)) | 
|  | return generic_getxattr(dentry, name, buffer, size); | 
|  |  | 
|  | if (!btrfs_is_valid_xattr(name)) | 
|  | return -EOPNOTSUPP; | 
|  | return __btrfs_getxattr(dentry->d_inode, name, buffer, size); | 
|  | } | 
|  |  | 
|  | int btrfs_setxattr(struct dentry *dentry, const char *name, const void *value, | 
|  | size_t size, int flags) | 
|  | { | 
|  | struct btrfs_root *root = BTRFS_I(dentry->d_inode)->root; | 
|  |  | 
|  | /* | 
|  | * The permission on security.* and system.* is not checked | 
|  | * in permission(). | 
|  | */ | 
|  | if (btrfs_root_readonly(root)) | 
|  | return -EROFS; | 
|  |  | 
|  | /* | 
|  | * If this is a request for a synthetic attribute in the system.* | 
|  | * namespace use the generic infrastructure to resolve a handler | 
|  | * for it via sb->s_xattr. | 
|  | */ | 
|  | if (!strncmp(name, XATTR_SYSTEM_PREFIX, XATTR_SYSTEM_PREFIX_LEN)) | 
|  | return generic_setxattr(dentry, name, value, size, flags); | 
|  |  | 
|  | if (!btrfs_is_valid_xattr(name)) | 
|  | return -EOPNOTSUPP; | 
|  |  | 
|  | if (size == 0) | 
|  | value = "";  /* empty EA, do not remove */ | 
|  |  | 
|  | return __btrfs_setxattr(NULL, dentry->d_inode, name, value, size, | 
|  | flags); | 
|  | } | 
|  |  | 
|  | int btrfs_removexattr(struct dentry *dentry, const char *name) | 
|  | { | 
|  | struct btrfs_root *root = BTRFS_I(dentry->d_inode)->root; | 
|  |  | 
|  | /* | 
|  | * The permission on security.* and system.* is not checked | 
|  | * in permission(). | 
|  | */ | 
|  | if (btrfs_root_readonly(root)) | 
|  | return -EROFS; | 
|  |  | 
|  | /* | 
|  | * If this is a request for a synthetic attribute in the system.* | 
|  | * namespace use the generic infrastructure to resolve a handler | 
|  | * for it via sb->s_xattr. | 
|  | */ | 
|  | if (!strncmp(name, XATTR_SYSTEM_PREFIX, XATTR_SYSTEM_PREFIX_LEN)) | 
|  | return generic_removexattr(dentry, name); | 
|  |  | 
|  | if (!btrfs_is_valid_xattr(name)) | 
|  | return -EOPNOTSUPP; | 
|  |  | 
|  | return __btrfs_setxattr(NULL, dentry->d_inode, name, NULL, 0, | 
|  | XATTR_REPLACE); | 
|  | } | 
|  |  | 
|  | static int btrfs_initxattrs(struct inode *inode, | 
|  | const struct xattr *xattr_array, void *fs_info) | 
|  | { | 
|  | const struct xattr *xattr; | 
|  | struct btrfs_trans_handle *trans = fs_info; | 
|  | char *name; | 
|  | int err = 0; | 
|  |  | 
|  | for (xattr = xattr_array; xattr->name != NULL; xattr++) { | 
|  | name = kmalloc(XATTR_SECURITY_PREFIX_LEN + | 
|  | strlen(xattr->name) + 1, GFP_NOFS); | 
|  | if (!name) { | 
|  | err = -ENOMEM; | 
|  | break; | 
|  | } | 
|  | strcpy(name, XATTR_SECURITY_PREFIX); | 
|  | strcpy(name + XATTR_SECURITY_PREFIX_LEN, xattr->name); | 
|  | err = __btrfs_setxattr(trans, inode, name, | 
|  | xattr->value, xattr->value_len, 0); | 
|  | kfree(name); | 
|  | if (err < 0) | 
|  | break; | 
|  | } | 
|  | return err; | 
|  | } | 
|  |  | 
|  | int btrfs_xattr_security_init(struct btrfs_trans_handle *trans, | 
|  | struct inode *inode, struct inode *dir, | 
|  | const struct qstr *qstr) | 
|  | { | 
|  | return security_inode_init_security(inode, dir, qstr, | 
|  | &btrfs_initxattrs, trans); | 
|  | } |