Commit | Line | Data |
---|---|---|
1da177e4 LT |
1 | /* |
2 | * fs/nfs/idmap.c | |
3 | * | |
4 | * UID and GID to name mapping for clients. | |
5 | * | |
6 | * Copyright (c) 2002 The Regents of the University of Michigan. | |
7 | * All rights reserved. | |
8 | * | |
9 | * Marius Aamodt Eriksen <marius@umich.edu> | |
10 | * | |
11 | * Redistribution and use in source and binary forms, with or without | |
12 | * modification, are permitted provided that the following conditions | |
13 | * are met: | |
14 | * | |
15 | * 1. Redistributions of source code must retain the above copyright | |
16 | * notice, this list of conditions and the following disclaimer. | |
17 | * 2. Redistributions in binary form must reproduce the above copyright | |
18 | * notice, this list of conditions and the following disclaimer in the | |
19 | * documentation and/or other materials provided with the distribution. | |
20 | * 3. Neither the name of the University nor the names of its | |
21 | * contributors may be used to endorse or promote products derived | |
22 | * from this software without specific prior written permission. | |
23 | * | |
24 | * THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED | |
25 | * WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF | |
26 | * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE | |
27 | * DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE | |
28 | * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR | |
29 | * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF | |
30 | * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR | |
31 | * BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF | |
32 | * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING | |
33 | * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS | |
34 | * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. | |
35 | */ | |
5cf36cfd TM |
36 | #include <linux/types.h> |
37 | #include <linux/string.h> | |
38 | #include <linux/kernel.h> | |
e44ba033 VI |
39 | #include <linux/slab.h> |
40 | #include <linux/nfs_idmap.h> | |
6926afd1 | 41 | #include <linux/nfs_fs.h> |
3cd0f37a BS |
42 | #include <linux/cred.h> |
43 | #include <linux/sunrpc/sched.h> | |
44 | #include <linux/nfs4.h> | |
45 | #include <linux/nfs_fs_sb.h> | |
46 | #include <linux/keyctl.h> | |
47 | #include <linux/key-type.h> | |
48 | #include <linux/rcupdate.h> | |
49 | #include <linux/err.h> | |
50 | #include <keys/user-type.h> | |
51 | ||
52 | /* include files needed by legacy idmapper */ | |
53 | #include <linux/module.h> | |
54 | #include <linux/mutex.h> | |
55 | #include <linux/init.h> | |
56 | #include <linux/socket.h> | |
57 | #include <linux/in.h> | |
58 | #include <linux/sched.h> | |
59 | #include <linux/sunrpc/clnt.h> | |
60 | #include <linux/workqueue.h> | |
61 | #include <linux/sunrpc/rpc_pipe_fs.h> | |
62 | #include <linux/nfs_fs.h> | |
63 | #include "nfs4_fs.h" | |
64 | #include "internal.h" | |
65 | ||
66 | #define NFS_UINT_MAXLEN 11 | |
67 | #define IDMAP_HASH_SZ 128 | |
68 | ||
69 | /* Default cache timeout is 10 minutes */ | |
70 | unsigned int nfs_idmap_cache_timeout = 600 * HZ; | |
71 | const struct cred *id_resolver_cache; | |
72 | ||
6926afd1 TM |
73 | |
74 | /** | |
75 | * nfs_fattr_init_names - initialise the nfs_fattr owner_name/group_name fields | |
76 | * @fattr: fully initialised struct nfs_fattr | |
77 | * @owner_name: owner name string cache | |
78 | * @group_name: group name string cache | |
79 | */ | |
80 | void nfs_fattr_init_names(struct nfs_fattr *fattr, | |
81 | struct nfs4_string *owner_name, | |
82 | struct nfs4_string *group_name) | |
83 | { | |
84 | fattr->owner_name = owner_name; | |
85 | fattr->group_name = group_name; | |
86 | } | |
87 | ||
88 | static void nfs_fattr_free_owner_name(struct nfs_fattr *fattr) | |
89 | { | |
90 | fattr->valid &= ~NFS_ATTR_FATTR_OWNER_NAME; | |
91 | kfree(fattr->owner_name->data); | |
92 | } | |
93 | ||
94 | static void nfs_fattr_free_group_name(struct nfs_fattr *fattr) | |
95 | { | |
96 | fattr->valid &= ~NFS_ATTR_FATTR_GROUP_NAME; | |
97 | kfree(fattr->group_name->data); | |
98 | } | |
99 | ||
100 | static bool nfs_fattr_map_owner_name(struct nfs_server *server, struct nfs_fattr *fattr) | |
101 | { | |
102 | struct nfs4_string *owner = fattr->owner_name; | |
103 | __u32 uid; | |
104 | ||
105 | if (!(fattr->valid & NFS_ATTR_FATTR_OWNER_NAME)) | |
106 | return false; | |
107 | if (nfs_map_name_to_uid(server, owner->data, owner->len, &uid) == 0) { | |
108 | fattr->uid = uid; | |
109 | fattr->valid |= NFS_ATTR_FATTR_OWNER; | |
110 | } | |
111 | return true; | |
112 | } | |
113 | ||
114 | static bool nfs_fattr_map_group_name(struct nfs_server *server, struct nfs_fattr *fattr) | |
115 | { | |
116 | struct nfs4_string *group = fattr->group_name; | |
117 | __u32 gid; | |
118 | ||
119 | if (!(fattr->valid & NFS_ATTR_FATTR_GROUP_NAME)) | |
120 | return false; | |
121 | if (nfs_map_group_to_gid(server, group->data, group->len, &gid) == 0) { | |
122 | fattr->gid = gid; | |
123 | fattr->valid |= NFS_ATTR_FATTR_GROUP; | |
124 | } | |
125 | return true; | |
126 | } | |
127 | ||
128 | /** | |
129 | * nfs_fattr_free_names - free up the NFSv4 owner and group strings | |
130 | * @fattr: a fully initialised nfs_fattr structure | |
131 | */ | |
132 | void nfs_fattr_free_names(struct nfs_fattr *fattr) | |
133 | { | |
134 | if (fattr->valid & NFS_ATTR_FATTR_OWNER_NAME) | |
135 | nfs_fattr_free_owner_name(fattr); | |
136 | if (fattr->valid & NFS_ATTR_FATTR_GROUP_NAME) | |
137 | nfs_fattr_free_group_name(fattr); | |
138 | } | |
139 | ||
140 | /** | |
141 | * nfs_fattr_map_and_free_names - map owner/group strings into uid/gid and free | |
142 | * @server: pointer to the filesystem nfs_server structure | |
143 | * @fattr: a fully initialised nfs_fattr structure | |
144 | * | |
145 | * This helper maps the cached NFSv4 owner/group strings in fattr into | |
146 | * their numeric uid/gid equivalents, and then frees the cached strings. | |
147 | */ | |
148 | void nfs_fattr_map_and_free_names(struct nfs_server *server, struct nfs_fattr *fattr) | |
149 | { | |
150 | if (nfs_fattr_map_owner_name(server, fattr)) | |
151 | nfs_fattr_free_owner_name(fattr); | |
152 | if (nfs_fattr_map_group_name(server, fattr)) | |
153 | nfs_fattr_free_group_name(fattr); | |
154 | } | |
5cf36cfd TM |
155 | |
156 | static int nfs_map_string_to_numeric(const char *name, size_t namelen, __u32 *res) | |
157 | { | |
158 | unsigned long val; | |
159 | char buf[16]; | |
160 | ||
161 | if (memchr(name, '@', namelen) != NULL || namelen >= sizeof(buf)) | |
162 | return 0; | |
163 | memcpy(buf, name, namelen); | |
164 | buf[namelen] = '\0'; | |
165 | if (strict_strtoul(buf, 0, &val) != 0) | |
166 | return 0; | |
167 | *res = val; | |
168 | return 1; | |
169 | } | |
1da177e4 | 170 | |
f0b85168 TM |
171 | static int nfs_map_numeric_to_string(__u32 id, char *buf, size_t buflen) |
172 | { | |
173 | return snprintf(buf, buflen, "%u", id); | |
174 | } | |
175 | ||
955a857e BS |
176 | struct key_type key_type_id_resolver = { |
177 | .name = "id_resolver", | |
178 | .instantiate = user_instantiate, | |
179 | .match = user_match, | |
180 | .revoke = user_revoke, | |
181 | .destroy = user_destroy, | |
182 | .describe = user_describe, | |
183 | .read = user_read, | |
184 | }; | |
185 | ||
e6499c6f | 186 | static int nfs_idmap_init_keyring(void) |
955a857e BS |
187 | { |
188 | struct cred *cred; | |
189 | struct key *keyring; | |
190 | int ret = 0; | |
191 | ||
f9fd2d9c WAA |
192 | printk(KERN_NOTICE "NFS: Registering the %s key type\n", |
193 | key_type_id_resolver.name); | |
955a857e BS |
194 | |
195 | cred = prepare_kernel_cred(NULL); | |
196 | if (!cred) | |
197 | return -ENOMEM; | |
198 | ||
199 | keyring = key_alloc(&key_type_keyring, ".id_resolver", 0, 0, cred, | |
200 | (KEY_POS_ALL & ~KEY_POS_SETATTR) | | |
201 | KEY_USR_VIEW | KEY_USR_READ, | |
202 | KEY_ALLOC_NOT_IN_QUOTA); | |
203 | if (IS_ERR(keyring)) { | |
204 | ret = PTR_ERR(keyring); | |
205 | goto failed_put_cred; | |
206 | } | |
207 | ||
208 | ret = key_instantiate_and_link(keyring, NULL, 0, NULL, NULL); | |
209 | if (ret < 0) | |
210 | goto failed_put_key; | |
211 | ||
212 | ret = register_key_type(&key_type_id_resolver); | |
213 | if (ret < 0) | |
214 | goto failed_put_key; | |
215 | ||
216 | cred->thread_keyring = keyring; | |
217 | cred->jit_keyring = KEY_REQKEY_DEFL_THREAD_KEYRING; | |
218 | id_resolver_cache = cred; | |
219 | return 0; | |
220 | ||
221 | failed_put_key: | |
222 | key_put(keyring); | |
223 | failed_put_cred: | |
224 | put_cred(cred); | |
225 | return ret; | |
226 | } | |
227 | ||
e6499c6f | 228 | static void nfs_idmap_quit_keyring(void) |
955a857e BS |
229 | { |
230 | key_revoke(id_resolver_cache->thread_keyring); | |
231 | unregister_key_type(&key_type_id_resolver); | |
232 | put_cred(id_resolver_cache); | |
233 | } | |
234 | ||
235 | /* | |
236 | * Assemble the description to pass to request_key() | |
237 | * This function will allocate a new string and update dest to point | |
238 | * at it. The caller is responsible for freeing dest. | |
239 | * | |
240 | * On error 0 is returned. Otherwise, the length of dest is returned. | |
241 | */ | |
242 | static ssize_t nfs_idmap_get_desc(const char *name, size_t namelen, | |
243 | const char *type, size_t typelen, char **desc) | |
244 | { | |
245 | char *cp; | |
246 | size_t desclen = typelen + namelen + 2; | |
247 | ||
248 | *desc = kmalloc(desclen, GFP_KERNEL); | |
8f0d97b4 | 249 | if (!*desc) |
955a857e BS |
250 | return -ENOMEM; |
251 | ||
252 | cp = *desc; | |
253 | memcpy(cp, type, typelen); | |
254 | cp += typelen; | |
255 | *cp++ = ':'; | |
256 | ||
257 | memcpy(cp, name, namelen); | |
258 | cp += namelen; | |
259 | *cp = '\0'; | |
260 | return desclen; | |
261 | } | |
262 | ||
263 | static ssize_t nfs_idmap_request_key(const char *name, size_t namelen, | |
264 | const char *type, void *data, size_t data_size) | |
265 | { | |
266 | const struct cred *saved_cred; | |
267 | struct key *rkey; | |
268 | char *desc; | |
269 | struct user_key_payload *payload; | |
270 | ssize_t ret; | |
271 | ||
272 | ret = nfs_idmap_get_desc(name, namelen, type, strlen(type), &desc); | |
273 | if (ret <= 0) | |
274 | goto out; | |
275 | ||
276 | saved_cred = override_creds(id_resolver_cache); | |
277 | rkey = request_key(&key_type_id_resolver, desc, ""); | |
278 | revert_creds(saved_cred); | |
279 | kfree(desc); | |
280 | if (IS_ERR(rkey)) { | |
281 | ret = PTR_ERR(rkey); | |
282 | goto out; | |
283 | } | |
284 | ||
285 | rcu_read_lock(); | |
286 | rkey->perm |= KEY_USR_VIEW; | |
287 | ||
288 | ret = key_validate(rkey); | |
289 | if (ret < 0) | |
290 | goto out_up; | |
291 | ||
292 | payload = rcu_dereference(rkey->payload.data); | |
293 | if (IS_ERR_OR_NULL(payload)) { | |
294 | ret = PTR_ERR(payload); | |
295 | goto out_up; | |
296 | } | |
297 | ||
298 | ret = payload->datalen; | |
299 | if (ret > 0 && ret <= data_size) | |
300 | memcpy(data, payload->data, ret); | |
301 | else | |
302 | ret = -EINVAL; | |
303 | ||
304 | out_up: | |
305 | rcu_read_unlock(); | |
306 | key_put(rkey); | |
307 | out: | |
308 | return ret; | |
309 | } | |
310 | ||
311 | ||
312 | /* ID -> Name */ | |
313 | static ssize_t nfs_idmap_lookup_name(__u32 id, const char *type, char *buf, size_t buflen) | |
314 | { | |
315 | char id_str[NFS_UINT_MAXLEN]; | |
316 | int id_len; | |
317 | ssize_t ret; | |
318 | ||
319 | id_len = snprintf(id_str, sizeof(id_str), "%u", id); | |
320 | ret = nfs_idmap_request_key(id_str, id_len, type, buf, buflen); | |
321 | if (ret < 0) | |
322 | return -EINVAL; | |
323 | return ret; | |
324 | } | |
325 | ||
326 | /* Name -> ID */ | |
327 | static int nfs_idmap_lookup_id(const char *name, size_t namelen, | |
328 | const char *type, __u32 *id) | |
329 | { | |
330 | char id_str[NFS_UINT_MAXLEN]; | |
331 | long id_long; | |
332 | ssize_t data_size; | |
333 | int ret = 0; | |
334 | ||
335 | data_size = nfs_idmap_request_key(name, namelen, type, id_str, NFS_UINT_MAXLEN); | |
336 | if (data_size <= 0) { | |
337 | ret = -EINVAL; | |
338 | } else { | |
339 | ret = strict_strtol(id_str, 10, &id_long); | |
340 | *id = (__u32)id_long; | |
341 | } | |
342 | return ret; | |
343 | } | |
344 | ||
e6499c6f | 345 | /* idmap classic begins here */ |
7d4e2747 DH |
346 | static int param_set_idmap_timeout(const char *val, struct kernel_param *kp) |
347 | { | |
348 | char *endp; | |
349 | int num = simple_strtol(val, &endp, 0); | |
350 | int jif = num * HZ; | |
351 | if (endp == val || *endp || num < 0 || jif < num) | |
352 | return -EINVAL; | |
353 | *((int *)kp->arg) = jif; | |
354 | return 0; | |
355 | } | |
356 | ||
357 | module_param_call(idmap_cache_timeout, param_set_idmap_timeout, param_get_int, | |
358 | &nfs_idmap_cache_timeout, 0644); | |
359 | ||
1da177e4 | 360 | struct idmap_hashent { |
369af0f1 CL |
361 | unsigned long ih_expires; |
362 | __u32 ih_id; | |
d24aae41 | 363 | size_t ih_namelen; |
369af0f1 | 364 | char ih_name[IDMAP_NAMESZ]; |
1da177e4 LT |
365 | }; |
366 | ||
367 | struct idmap_hashtable { | |
369af0f1 CL |
368 | __u8 h_type; |
369 | struct idmap_hashent h_entries[IDMAP_HASH_SZ]; | |
1da177e4 LT |
370 | }; |
371 | ||
372 | struct idmap { | |
c239d83b | 373 | struct rpc_pipe *idmap_pipe; |
369af0f1 CL |
374 | wait_queue_head_t idmap_wq; |
375 | struct idmap_msg idmap_im; | |
376 | struct mutex idmap_lock; /* Serializes upcalls */ | |
377 | struct mutex idmap_im_lock; /* Protects the hashtable */ | |
378 | struct idmap_hashtable idmap_user_hash; | |
379 | struct idmap_hashtable idmap_group_hash; | |
1da177e4 LT |
380 | }; |
381 | ||
369af0f1 CL |
382 | static ssize_t idmap_pipe_downcall(struct file *, const char __user *, |
383 | size_t); | |
384 | static void idmap_pipe_destroy_msg(struct rpc_pipe_msg *); | |
1da177e4 LT |
385 | |
386 | static unsigned int fnvhash32(const void *, size_t); | |
387 | ||
b693ba4a | 388 | static const struct rpc_pipe_ops idmap_upcall_ops = { |
c1225158 | 389 | .upcall = rpc_pipe_generic_upcall, |
369af0f1 CL |
390 | .downcall = idmap_pipe_downcall, |
391 | .destroy_msg = idmap_pipe_destroy_msg, | |
1da177e4 LT |
392 | }; |
393 | ||
4929d1d3 SK |
394 | static void __nfs_idmap_unregister(struct rpc_pipe *pipe) |
395 | { | |
396 | if (pipe->dentry) | |
397 | rpc_unlink(pipe->dentry); | |
398 | } | |
399 | ||
400 | static int __nfs_idmap_register(struct dentry *dir, | |
401 | struct idmap *idmap, | |
402 | struct rpc_pipe *pipe) | |
403 | { | |
404 | struct dentry *dentry; | |
405 | ||
406 | dentry = rpc_mkpipe_dentry(dir, "idmap", idmap, pipe); | |
407 | if (IS_ERR(dentry)) | |
408 | return PTR_ERR(dentry); | |
409 | pipe->dentry = dentry; | |
410 | return 0; | |
411 | } | |
412 | ||
413 | static void nfs_idmap_unregister(struct nfs_client *clp, | |
414 | struct rpc_pipe *pipe) | |
415 | { | |
416 | struct net *net = clp->net; | |
417 | struct super_block *pipefs_sb; | |
418 | ||
419 | pipefs_sb = rpc_get_sb_net(net); | |
420 | if (pipefs_sb) { | |
421 | __nfs_idmap_unregister(pipe); | |
422 | rpc_put_sb_net(net); | |
423 | } | |
424 | } | |
425 | ||
426 | static int nfs_idmap_register(struct nfs_client *clp, | |
427 | struct idmap *idmap, | |
428 | struct rpc_pipe *pipe) | |
429 | { | |
430 | struct net *net = clp->net; | |
431 | struct super_block *pipefs_sb; | |
432 | int err = 0; | |
433 | ||
434 | pipefs_sb = rpc_get_sb_net(net); | |
435 | if (pipefs_sb) { | |
436 | if (clp->cl_rpcclient->cl_dentry) | |
437 | err = __nfs_idmap_register(clp->cl_rpcclient->cl_dentry, | |
438 | idmap, pipe); | |
439 | rpc_put_sb_net(net); | |
440 | } | |
441 | return err; | |
442 | } | |
443 | ||
b7162792 | 444 | int |
adfa6f98 | 445 | nfs_idmap_new(struct nfs_client *clp) |
1da177e4 LT |
446 | { |
447 | struct idmap *idmap; | |
c239d83b | 448 | struct rpc_pipe *pipe; |
b7162792 | 449 | int error; |
1da177e4 | 450 | |
54ceac45 | 451 | BUG_ON(clp->cl_idmap != NULL); |
b7162792 | 452 | |
369af0f1 CL |
453 | idmap = kzalloc(sizeof(*idmap), GFP_KERNEL); |
454 | if (idmap == NULL) | |
455 | return -ENOMEM; | |
1da177e4 | 456 | |
c239d83b SK |
457 | pipe = rpc_mkpipe_data(&idmap_upcall_ops, 0); |
458 | if (IS_ERR(pipe)) { | |
459 | error = PTR_ERR(pipe); | |
1da177e4 | 460 | kfree(idmap); |
b7162792 | 461 | return error; |
1da177e4 | 462 | } |
4929d1d3 SK |
463 | error = nfs_idmap_register(clp, idmap, pipe); |
464 | if (error) { | |
c239d83b SK |
465 | rpc_destroy_pipe_data(pipe); |
466 | kfree(idmap); | |
467 | return error; | |
468 | } | |
469 | idmap->idmap_pipe = pipe; | |
369af0f1 CL |
470 | mutex_init(&idmap->idmap_lock); |
471 | mutex_init(&idmap->idmap_im_lock); | |
1da177e4 LT |
472 | init_waitqueue_head(&idmap->idmap_wq); |
473 | idmap->idmap_user_hash.h_type = IDMAP_TYPE_USER; | |
474 | idmap->idmap_group_hash.h_type = IDMAP_TYPE_GROUP; | |
475 | ||
476 | clp->cl_idmap = idmap; | |
b7162792 | 477 | return 0; |
1da177e4 LT |
478 | } |
479 | ||
480 | void | |
adfa6f98 | 481 | nfs_idmap_delete(struct nfs_client *clp) |
1da177e4 LT |
482 | { |
483 | struct idmap *idmap = clp->cl_idmap; | |
484 | ||
485 | if (!idmap) | |
486 | return; | |
4929d1d3 | 487 | nfs_idmap_unregister(clp, idmap->idmap_pipe); |
c239d83b | 488 | rpc_destroy_pipe_data(idmap->idmap_pipe); |
1da177e4 LT |
489 | clp->cl_idmap = NULL; |
490 | kfree(idmap); | |
491 | } | |
492 | ||
eee17325 SK |
493 | static int __rpc_pipefs_event(struct nfs_client *clp, unsigned long event, |
494 | struct super_block *sb) | |
495 | { | |
496 | int err = 0; | |
497 | ||
498 | switch (event) { | |
499 | case RPC_PIPEFS_MOUNT: | |
500 | BUG_ON(clp->cl_rpcclient->cl_dentry == NULL); | |
501 | err = __nfs_idmap_register(clp->cl_rpcclient->cl_dentry, | |
502 | clp->cl_idmap, | |
503 | clp->cl_idmap->idmap_pipe); | |
504 | break; | |
505 | case RPC_PIPEFS_UMOUNT: | |
506 | if (clp->cl_idmap->idmap_pipe) { | |
507 | struct dentry *parent; | |
508 | ||
509 | parent = clp->cl_idmap->idmap_pipe->dentry->d_parent; | |
510 | __nfs_idmap_unregister(clp->cl_idmap->idmap_pipe); | |
511 | /* | |
512 | * Note: This is a dirty hack. SUNRPC hook has been | |
513 | * called already but simple_rmdir() call for the | |
514 | * directory returned with error because of idmap pipe | |
515 | * inside. Thus now we have to remove this directory | |
516 | * here. | |
517 | */ | |
518 | if (rpc_rmdir(parent)) | |
a030889a WAA |
519 | printk(KERN_ERR "NFS: %s: failed to remove " |
520 | "clnt dir!\n", __func__); | |
eee17325 SK |
521 | } |
522 | break; | |
523 | default: | |
a030889a WAA |
524 | printk(KERN_ERR "NFS: %s: unknown event: %ld\n", __func__, |
525 | event); | |
eee17325 SK |
526 | return -ENOTSUPP; |
527 | } | |
528 | return err; | |
529 | } | |
530 | ||
531 | static int rpc_pipefs_event(struct notifier_block *nb, unsigned long event, | |
532 | void *ptr) | |
533 | { | |
534 | struct super_block *sb = ptr; | |
535 | struct nfs_client *clp; | |
536 | int error = 0; | |
537 | ||
538 | spin_lock(&nfs_client_lock); | |
539 | list_for_each_entry(clp, &nfs_client_list, cl_share_link) { | |
540 | if (clp->net != sb->s_fs_info) | |
541 | continue; | |
542 | if (clp->rpc_ops != &nfs_v4_clientops) | |
543 | continue; | |
544 | error = __rpc_pipefs_event(clp, event, sb); | |
545 | if (error) | |
546 | break; | |
547 | } | |
548 | spin_unlock(&nfs_client_lock); | |
549 | return error; | |
550 | } | |
551 | ||
552 | #define PIPEFS_NFS_PRIO 1 | |
553 | ||
554 | static struct notifier_block nfs_idmap_block = { | |
555 | .notifier_call = rpc_pipefs_event, | |
556 | .priority = SUNRPC_PIPEFS_NFS_PRIO, | |
557 | }; | |
558 | ||
559 | int nfs_idmap_init(void) | |
560 | { | |
e6499c6f BS |
561 | int ret; |
562 | ret = nfs_idmap_init_keyring(); | |
563 | if (ret != 0) | |
564 | goto out; | |
565 | ret = rpc_pipefs_notifier_register(&nfs_idmap_block); | |
566 | if (ret != 0) | |
567 | nfs_idmap_quit_keyring(); | |
568 | out: | |
569 | return ret; | |
eee17325 SK |
570 | } |
571 | ||
572 | void nfs_idmap_quit(void) | |
573 | { | |
574 | rpc_pipefs_notifier_unregister(&nfs_idmap_block); | |
e6499c6f | 575 | nfs_idmap_quit_keyring(); |
eee17325 SK |
576 | } |
577 | ||
1da177e4 LT |
578 | /* |
579 | * Helper routines for manipulating the hashtable | |
580 | */ | |
581 | static inline struct idmap_hashent * | |
582 | idmap_name_hash(struct idmap_hashtable* h, const char *name, size_t len) | |
583 | { | |
584 | return &h->h_entries[fnvhash32(name, len) % IDMAP_HASH_SZ]; | |
585 | } | |
586 | ||
587 | static struct idmap_hashent * | |
588 | idmap_lookup_name(struct idmap_hashtable *h, const char *name, size_t len) | |
589 | { | |
590 | struct idmap_hashent *he = idmap_name_hash(h, name, len); | |
591 | ||
592 | if (he->ih_namelen != len || memcmp(he->ih_name, name, len) != 0) | |
593 | return NULL; | |
58df095b TM |
594 | if (time_after(jiffies, he->ih_expires)) |
595 | return NULL; | |
1da177e4 LT |
596 | return he; |
597 | } | |
598 | ||
599 | static inline struct idmap_hashent * | |
600 | idmap_id_hash(struct idmap_hashtable* h, __u32 id) | |
601 | { | |
602 | return &h->h_entries[fnvhash32(&id, sizeof(id)) % IDMAP_HASH_SZ]; | |
603 | } | |
604 | ||
605 | static struct idmap_hashent * | |
606 | idmap_lookup_id(struct idmap_hashtable *h, __u32 id) | |
607 | { | |
608 | struct idmap_hashent *he = idmap_id_hash(h, id); | |
609 | if (he->ih_id != id || he->ih_namelen == 0) | |
610 | return NULL; | |
58df095b TM |
611 | if (time_after(jiffies, he->ih_expires)) |
612 | return NULL; | |
1da177e4 LT |
613 | return he; |
614 | } | |
615 | ||
616 | /* | |
617 | * Routines for allocating new entries in the hashtable. | |
618 | * For now, we just have 1 entry per bucket, so it's all | |
619 | * pretty trivial. | |
620 | */ | |
621 | static inline struct idmap_hashent * | |
d24aae41 | 622 | idmap_alloc_name(struct idmap_hashtable *h, char *name, size_t len) |
1da177e4 LT |
623 | { |
624 | return idmap_name_hash(h, name, len); | |
625 | } | |
626 | ||
627 | static inline struct idmap_hashent * | |
628 | idmap_alloc_id(struct idmap_hashtable *h, __u32 id) | |
629 | { | |
630 | return idmap_id_hash(h, id); | |
631 | } | |
632 | ||
633 | static void | |
634 | idmap_update_entry(struct idmap_hashent *he, const char *name, | |
635 | size_t namelen, __u32 id) | |
636 | { | |
637 | he->ih_id = id; | |
638 | memcpy(he->ih_name, name, namelen); | |
639 | he->ih_name[namelen] = '\0'; | |
640 | he->ih_namelen = namelen; | |
58df095b | 641 | he->ih_expires = jiffies + nfs_idmap_cache_timeout; |
1da177e4 LT |
642 | } |
643 | ||
644 | /* | |
645 | * Name -> ID | |
646 | */ | |
647 | static int | |
648 | nfs_idmap_id(struct idmap *idmap, struct idmap_hashtable *h, | |
649 | const char *name, size_t namelen, __u32 *id) | |
650 | { | |
651 | struct rpc_pipe_msg msg; | |
652 | struct idmap_msg *im; | |
653 | struct idmap_hashent *he; | |
654 | DECLARE_WAITQUEUE(wq, current); | |
655 | int ret = -EIO; | |
656 | ||
657 | im = &idmap->idmap_im; | |
658 | ||
659 | /* | |
660 | * String sanity checks | |
661 | * Note that the userland daemon expects NUL terminated strings | |
662 | */ | |
663 | for (;;) { | |
664 | if (namelen == 0) | |
665 | return -EINVAL; | |
666 | if (name[namelen-1] != '\0') | |
667 | break; | |
668 | namelen--; | |
669 | } | |
670 | if (namelen >= IDMAP_NAMESZ) | |
671 | return -EINVAL; | |
672 | ||
c9d5128a IM |
673 | mutex_lock(&idmap->idmap_lock); |
674 | mutex_lock(&idmap->idmap_im_lock); | |
1da177e4 LT |
675 | |
676 | he = idmap_lookup_name(h, name, namelen); | |
677 | if (he != NULL) { | |
678 | *id = he->ih_id; | |
679 | ret = 0; | |
680 | goto out; | |
681 | } | |
682 | ||
683 | memset(im, 0, sizeof(*im)); | |
684 | memcpy(im->im_name, name, namelen); | |
685 | ||
686 | im->im_type = h->h_type; | |
687 | im->im_conv = IDMAP_CONV_NAMETOID; | |
688 | ||
689 | memset(&msg, 0, sizeof(msg)); | |
690 | msg.data = im; | |
691 | msg.len = sizeof(*im); | |
692 | ||
693 | add_wait_queue(&idmap->idmap_wq, &wq); | |
c239d83b | 694 | if (rpc_queue_upcall(idmap->idmap_pipe, &msg) < 0) { |
1da177e4 LT |
695 | remove_wait_queue(&idmap->idmap_wq, &wq); |
696 | goto out; | |
697 | } | |
698 | ||
699 | set_current_state(TASK_UNINTERRUPTIBLE); | |
c9d5128a | 700 | mutex_unlock(&idmap->idmap_im_lock); |
1da177e4 | 701 | schedule(); |
fee7f23f | 702 | __set_current_state(TASK_RUNNING); |
1da177e4 | 703 | remove_wait_queue(&idmap->idmap_wq, &wq); |
c9d5128a | 704 | mutex_lock(&idmap->idmap_im_lock); |
1da177e4 LT |
705 | |
706 | if (im->im_status & IDMAP_STATUS_SUCCESS) { | |
707 | *id = im->im_id; | |
708 | ret = 0; | |
709 | } | |
710 | ||
711 | out: | |
712 | memset(im, 0, sizeof(*im)); | |
c9d5128a IM |
713 | mutex_unlock(&idmap->idmap_im_lock); |
714 | mutex_unlock(&idmap->idmap_lock); | |
369af0f1 | 715 | return ret; |
1da177e4 LT |
716 | } |
717 | ||
718 | /* | |
719 | * ID -> Name | |
720 | */ | |
721 | static int | |
722 | nfs_idmap_name(struct idmap *idmap, struct idmap_hashtable *h, | |
723 | __u32 id, char *name) | |
724 | { | |
725 | struct rpc_pipe_msg msg; | |
726 | struct idmap_msg *im; | |
727 | struct idmap_hashent *he; | |
728 | DECLARE_WAITQUEUE(wq, current); | |
729 | int ret = -EIO; | |
730 | unsigned int len; | |
731 | ||
732 | im = &idmap->idmap_im; | |
733 | ||
c9d5128a IM |
734 | mutex_lock(&idmap->idmap_lock); |
735 | mutex_lock(&idmap->idmap_im_lock); | |
1da177e4 LT |
736 | |
737 | he = idmap_lookup_id(h, id); | |
90dc7d27 | 738 | if (he) { |
1da177e4 LT |
739 | memcpy(name, he->ih_name, he->ih_namelen); |
740 | ret = he->ih_namelen; | |
741 | goto out; | |
742 | } | |
743 | ||
744 | memset(im, 0, sizeof(*im)); | |
745 | im->im_type = h->h_type; | |
746 | im->im_conv = IDMAP_CONV_IDTONAME; | |
747 | im->im_id = id; | |
748 | ||
749 | memset(&msg, 0, sizeof(msg)); | |
750 | msg.data = im; | |
751 | msg.len = sizeof(*im); | |
752 | ||
753 | add_wait_queue(&idmap->idmap_wq, &wq); | |
754 | ||
c239d83b | 755 | if (rpc_queue_upcall(idmap->idmap_pipe, &msg) < 0) { |
1da177e4 LT |
756 | remove_wait_queue(&idmap->idmap_wq, &wq); |
757 | goto out; | |
758 | } | |
759 | ||
760 | set_current_state(TASK_UNINTERRUPTIBLE); | |
c9d5128a | 761 | mutex_unlock(&idmap->idmap_im_lock); |
1da177e4 | 762 | schedule(); |
fee7f23f | 763 | __set_current_state(TASK_RUNNING); |
1da177e4 | 764 | remove_wait_queue(&idmap->idmap_wq, &wq); |
c9d5128a | 765 | mutex_lock(&idmap->idmap_im_lock); |
1da177e4 LT |
766 | |
767 | if (im->im_status & IDMAP_STATUS_SUCCESS) { | |
768 | if ((len = strnlen(im->im_name, IDMAP_NAMESZ)) == 0) | |
769 | goto out; | |
770 | memcpy(name, im->im_name, len); | |
771 | ret = len; | |
772 | } | |
773 | ||
774 | out: | |
775 | memset(im, 0, sizeof(*im)); | |
c9d5128a IM |
776 | mutex_unlock(&idmap->idmap_im_lock); |
777 | mutex_unlock(&idmap->idmap_lock); | |
1da177e4 LT |
778 | return ret; |
779 | } | |
780 | ||
1da177e4 LT |
781 | static ssize_t |
782 | idmap_pipe_downcall(struct file *filp, const char __user *src, size_t mlen) | |
783 | { | |
369af0f1 | 784 | struct rpc_inode *rpci = RPC_I(filp->f_path.dentry->d_inode); |
1da177e4 LT |
785 | struct idmap *idmap = (struct idmap *)rpci->private; |
786 | struct idmap_msg im_in, *im = &idmap->idmap_im; | |
787 | struct idmap_hashtable *h; | |
788 | struct idmap_hashent *he = NULL; | |
d24aae41 | 789 | size_t namelen_in; |
1da177e4 LT |
790 | int ret; |
791 | ||
369af0f1 CL |
792 | if (mlen != sizeof(im_in)) |
793 | return -ENOSPC; | |
1da177e4 | 794 | |
369af0f1 CL |
795 | if (copy_from_user(&im_in, src, mlen) != 0) |
796 | return -EFAULT; | |
1da177e4 | 797 | |
c9d5128a | 798 | mutex_lock(&idmap->idmap_im_lock); |
1da177e4 LT |
799 | |
800 | ret = mlen; | |
801 | im->im_status = im_in.im_status; | |
802 | /* If we got an error, terminate now, and wake up pending upcalls */ | |
803 | if (!(im_in.im_status & IDMAP_STATUS_SUCCESS)) { | |
804 | wake_up(&idmap->idmap_wq); | |
805 | goto out; | |
806 | } | |
807 | ||
808 | /* Sanity checking of strings */ | |
809 | ret = -EINVAL; | |
810 | namelen_in = strnlen(im_in.im_name, IDMAP_NAMESZ); | |
811 | if (namelen_in == 0 || namelen_in == IDMAP_NAMESZ) | |
812 | goto out; | |
813 | ||
814 | switch (im_in.im_type) { | |
815 | case IDMAP_TYPE_USER: | |
816 | h = &idmap->idmap_user_hash; | |
817 | break; | |
818 | case IDMAP_TYPE_GROUP: | |
819 | h = &idmap->idmap_group_hash; | |
820 | break; | |
821 | default: | |
822 | goto out; | |
823 | } | |
824 | ||
825 | switch (im_in.im_conv) { | |
826 | case IDMAP_CONV_IDTONAME: | |
827 | /* Did we match the current upcall? */ | |
828 | if (im->im_conv == IDMAP_CONV_IDTONAME | |
829 | && im->im_type == im_in.im_type | |
830 | && im->im_id == im_in.im_id) { | |
831 | /* Yes: copy string, including the terminating '\0' */ | |
832 | memcpy(im->im_name, im_in.im_name, namelen_in); | |
833 | im->im_name[namelen_in] = '\0'; | |
834 | wake_up(&idmap->idmap_wq); | |
835 | } | |
836 | he = idmap_alloc_id(h, im_in.im_id); | |
837 | break; | |
838 | case IDMAP_CONV_NAMETOID: | |
839 | /* Did we match the current upcall? */ | |
840 | if (im->im_conv == IDMAP_CONV_NAMETOID | |
841 | && im->im_type == im_in.im_type | |
842 | && strnlen(im->im_name, IDMAP_NAMESZ) == namelen_in | |
843 | && memcmp(im->im_name, im_in.im_name, namelen_in) == 0) { | |
844 | im->im_id = im_in.im_id; | |
845 | wake_up(&idmap->idmap_wq); | |
846 | } | |
847 | he = idmap_alloc_name(h, im_in.im_name, namelen_in); | |
848 | break; | |
849 | default: | |
850 | goto out; | |
851 | } | |
852 | ||
853 | /* If the entry is valid, also copy it to the cache */ | |
854 | if (he != NULL) | |
855 | idmap_update_entry(he, im_in.im_name, namelen_in, im_in.im_id); | |
856 | ret = mlen; | |
857 | out: | |
c9d5128a | 858 | mutex_unlock(&idmap->idmap_im_lock); |
1da177e4 LT |
859 | return ret; |
860 | } | |
861 | ||
75c96f85 | 862 | static void |
1da177e4 LT |
863 | idmap_pipe_destroy_msg(struct rpc_pipe_msg *msg) |
864 | { | |
865 | struct idmap_msg *im = msg->data; | |
866 | struct idmap *idmap = container_of(im, struct idmap, idmap_im); | |
867 | ||
868 | if (msg->errno >= 0) | |
869 | return; | |
c9d5128a | 870 | mutex_lock(&idmap->idmap_im_lock); |
1da177e4 LT |
871 | im->im_status = IDMAP_STATUS_LOOKUPFAIL; |
872 | wake_up(&idmap->idmap_wq); | |
c9d5128a | 873 | mutex_unlock(&idmap->idmap_im_lock); |
1da177e4 LT |
874 | } |
875 | ||
876 | /* | |
877 | * Fowler/Noll/Vo hash | |
878 | * http://www.isthe.com/chongo/tech/comp/fnv/ | |
879 | */ | |
880 | ||
881 | #define FNV_P_32 ((unsigned int)0x01000193) /* 16777619 */ | |
882 | #define FNV_1_32 ((unsigned int)0x811c9dc5) /* 2166136261 */ | |
883 | ||
884 | static unsigned int fnvhash32(const void *buf, size_t buflen) | |
885 | { | |
886 | const unsigned char *p, *end = (const unsigned char *)buf + buflen; | |
887 | unsigned int hash = FNV_1_32; | |
888 | ||
889 | for (p = buf; p < end; p++) { | |
890 | hash *= FNV_P_32; | |
891 | hash ^= (unsigned int)*p; | |
892 | } | |
893 | ||
369af0f1 | 894 | return hash; |
1da177e4 LT |
895 | } |
896 | ||
e4fd72a1 | 897 | int nfs_map_name_to_uid(const struct nfs_server *server, const char *name, size_t namelen, __u32 *uid) |
1da177e4 | 898 | { |
e4fd72a1 | 899 | struct idmap *idmap = server->nfs_client->cl_idmap; |
e6499c6f | 900 | int ret = -EINVAL; |
1da177e4 | 901 | |
5cf36cfd TM |
902 | if (nfs_map_string_to_numeric(name, namelen, uid)) |
903 | return 0; | |
e6499c6f BS |
904 | ret = nfs_idmap_lookup_id(name, namelen, "uid", uid); |
905 | if (ret < 0) | |
906 | ret = nfs_idmap_id(idmap, &idmap->idmap_user_hash, name, namelen, uid); | |
907 | return ret; | |
1da177e4 LT |
908 | } |
909 | ||
e6499c6f | 910 | int nfs_map_group_to_gid(const struct nfs_server *server, const char *name, size_t namelen, __u32 *gid) |
1da177e4 | 911 | { |
e4fd72a1 | 912 | struct idmap *idmap = server->nfs_client->cl_idmap; |
e6499c6f | 913 | int ret = -EINVAL; |
1da177e4 | 914 | |
e6499c6f | 915 | if (nfs_map_string_to_numeric(name, namelen, gid)) |
5cf36cfd | 916 | return 0; |
e6499c6f BS |
917 | ret = nfs_idmap_lookup_id(name, namelen, "gid", gid); |
918 | if (ret < 0) | |
919 | ret = nfs_idmap_id(idmap, &idmap->idmap_group_hash, name, namelen, gid); | |
920 | return ret; | |
1da177e4 LT |
921 | } |
922 | ||
e4fd72a1 | 923 | int nfs_map_uid_to_name(const struct nfs_server *server, __u32 uid, char *buf, size_t buflen) |
1da177e4 | 924 | { |
e4fd72a1 | 925 | struct idmap *idmap = server->nfs_client->cl_idmap; |
b064eca2 | 926 | int ret = -EINVAL; |
1da177e4 | 927 | |
e6499c6f BS |
928 | if (!(server->caps & NFS_CAP_UIDGID_NOMAP)) { |
929 | ret = nfs_idmap_lookup_name(uid, "user", buf, buflen); | |
930 | if (ret < 0) | |
931 | ret = nfs_idmap_name(idmap, &idmap->idmap_user_hash, uid, buf); | |
932 | } | |
f0b85168 TM |
933 | if (ret < 0) |
934 | ret = nfs_map_numeric_to_string(uid, buf, buflen); | |
935 | return ret; | |
1da177e4 | 936 | } |
e6499c6f | 937 | int nfs_map_gid_to_group(const struct nfs_server *server, __u32 gid, char *buf, size_t buflen) |
1da177e4 | 938 | { |
e4fd72a1 | 939 | struct idmap *idmap = server->nfs_client->cl_idmap; |
b064eca2 | 940 | int ret = -EINVAL; |
1da177e4 | 941 | |
e6499c6f BS |
942 | if (!(server->caps & NFS_CAP_UIDGID_NOMAP)) { |
943 | ret = nfs_idmap_lookup_name(gid, "group", buf, buflen); | |
944 | if (ret < 0) | |
945 | ret = nfs_idmap_name(idmap, &idmap->idmap_group_hash, gid, buf); | |
946 | } | |
f0b85168 | 947 | if (ret < 0) |
e6499c6f | 948 | ret = nfs_map_numeric_to_string(gid, buf, buflen); |
f0b85168 | 949 | return ret; |
1da177e4 | 950 | } |