f2fs crypto: add encryption support in read/write paths
[deliverable/linux.git] / fs / f2fs / file.c
index 2b52e48d74824dd67cfb8975a09b246a701a870f..452123ecd8fcc563c2ed722007b9b8addd0c0c8a 100644 (file)
@@ -20,6 +20,7 @@
 #include <linux/uaccess.h>
 #include <linux/mount.h>
 #include <linux/pagevec.h>
+#include <linux/random.h>
 
 #include "f2fs.h"
 #include "node.h"
@@ -271,7 +272,7 @@ flush_out:
        ret = f2fs_issue_flush(sbi);
 out:
        trace_f2fs_sync_file_exit(inode, need_cp, datasync, ret);
-       f2fs_trace_ios(NULL, NULL, 1);
+       f2fs_trace_ios(NULL, 1);
        return ret;
 }
 
@@ -407,6 +408,12 @@ static int f2fs_file_mmap(struct file *file, struct vm_area_struct *vma)
 {
        struct inode *inode = file_inode(file);
 
+       if (f2fs_encrypted_inode(inode)) {
+               int err = f2fs_get_encryption_info(inode);
+               if (err)
+                       return 0;
+       }
+
        /* we don't need to use inline_data strictly */
        if (f2fs_has_inline_data(inode)) {
                int err = f2fs_convert_inline_inode(inode);
@@ -419,6 +426,18 @@ static int f2fs_file_mmap(struct file *file, struct vm_area_struct *vma)
        return 0;
 }
 
+static int f2fs_file_open(struct inode *inode, struct file *filp)
+{
+       int ret = generic_file_open(inode, filp);
+
+       if (!ret && f2fs_encrypted_inode(inode)) {
+               ret = f2fs_get_encryption_info(inode);
+               if (ret)
+                       ret = -EACCES;
+       }
+       return ret;
+}
+
 int truncate_data_blocks_range(struct dnode_of_data *dn, int count)
 {
        int nr_free = 0, ofs = dn->ofs_in_node;
@@ -461,28 +480,32 @@ void truncate_data_blocks(struct dnode_of_data *dn)
 }
 
 static int truncate_partial_data_page(struct inode *inode, u64 from,
-                                                               bool force)
+                                                               bool cache_only)
 {
        unsigned offset = from & (PAGE_CACHE_SIZE - 1);
+       pgoff_t index = from >> PAGE_CACHE_SHIFT;
+       struct address_space *mapping = inode->i_mapping;
        struct page *page;
 
-       if (!offset && !force)
+       if (!offset && !cache_only)
                return 0;
 
-       page = find_data_page(inode, from >> PAGE_CACHE_SHIFT, force);
-       if (IS_ERR(page))
+       if (cache_only) {
+               page = grab_cache_page(mapping, index);
+               if (page && PageUptodate(page))
+                       goto truncate_out;
+               f2fs_put_page(page, 1);
                return 0;
+       }
 
-       lock_page(page);
-       if (unlikely(!PageUptodate(page) ||
-                       page->mapping != inode->i_mapping))
-               goto out;
-
+       page = get_lock_data_page(inode, index);
+       if (IS_ERR(page))
+               return 0;
+truncate_out:
        f2fs_wait_on_page_writeback(page, DATA);
        zero_user(page, offset, PAGE_CACHE_SIZE - offset);
-       if (!force)
+       if (!cache_only || !f2fs_encrypted_inode(inode) || !S_ISREG(inode->i_mode))
                set_page_dirty(page);
-out:
        f2fs_put_page(page, 1);
        return 0;
 }
@@ -560,7 +583,7 @@ void f2fs_truncate(struct inode *inode)
        trace_f2fs_truncate(inode);
 
        /* we should check inline_data size */
-       if (f2fs_has_inline_data(inode) && !f2fs_may_inline(inode)) {
+       if (f2fs_has_inline_data(inode) && !f2fs_may_inline_data(inode)) {
                if (f2fs_convert_inline_inode(inode))
                        return;
        }
@@ -622,6 +645,10 @@ int f2fs_setattr(struct dentry *dentry, struct iattr *attr)
                return err;
 
        if (attr->ia_valid & ATTR_SIZE) {
+               if (f2fs_encrypted_inode(inode) &&
+                               f2fs_get_encryption_info(inode))
+                       return -EACCES;
+
                if (attr->ia_size != i_size_read(inode)) {
                        truncate_setsize(inode, attr->ia_size);
                        f2fs_truncate(inode);
@@ -718,10 +745,6 @@ static int punch_hole(struct inode *inode, loff_t offset, loff_t len)
        if (!S_ISREG(inode->i_mode))
                return -EOPNOTSUPP;
 
-       /* skip punching hole beyond i_size */
-       if (offset >= inode->i_size)
-               return ret;
-
        if (f2fs_has_inline_data(inode)) {
                ret = f2fs_convert_inline_inode(inode);
                if (ret)
@@ -765,6 +788,234 @@ static int punch_hole(struct inode *inode, loff_t offset, loff_t len)
        return ret;
 }
 
+static int f2fs_do_collapse(struct inode *inode, pgoff_t start, pgoff_t end)
+{
+       struct f2fs_sb_info *sbi = F2FS_I_SB(inode);
+       struct dnode_of_data dn;
+       pgoff_t nrpages = (i_size_read(inode) + PAGE_SIZE - 1) / PAGE_SIZE;
+       int ret = 0;
+
+       f2fs_lock_op(sbi);
+
+       for (; end < nrpages; start++, end++) {
+               block_t new_addr, old_addr;
+
+               set_new_dnode(&dn, inode, NULL, NULL, 0);
+               ret = get_dnode_of_data(&dn, end, LOOKUP_NODE_RA);
+               if (ret && ret != -ENOENT) {
+                       goto out;
+               } else if (ret == -ENOENT) {
+                       new_addr = NULL_ADDR;
+               } else {
+                       new_addr = dn.data_blkaddr;
+                       truncate_data_blocks_range(&dn, 1);
+                       f2fs_put_dnode(&dn);
+               }
+
+               if (new_addr == NULL_ADDR) {
+                       set_new_dnode(&dn, inode, NULL, NULL, 0);
+                       ret = get_dnode_of_data(&dn, start, LOOKUP_NODE_RA);
+                       if (ret && ret != -ENOENT)
+                               goto out;
+                       else if (ret == -ENOENT)
+                               continue;
+
+                       if (dn.data_blkaddr == NULL_ADDR) {
+                               f2fs_put_dnode(&dn);
+                               continue;
+                       } else {
+                               truncate_data_blocks_range(&dn, 1);
+                       }
+
+                       f2fs_put_dnode(&dn);
+               } else {
+                       struct page *ipage;
+
+                       ipage = get_node_page(sbi, inode->i_ino);
+                       if (IS_ERR(ipage)) {
+                               ret = PTR_ERR(ipage);
+                               goto out;
+                       }
+
+                       set_new_dnode(&dn, inode, ipage, NULL, 0);
+                       ret = f2fs_reserve_block(&dn, start);
+                       if (ret)
+                               goto out;
+
+                       old_addr = dn.data_blkaddr;
+                       if (old_addr != NEW_ADDR && new_addr == NEW_ADDR) {
+                               dn.data_blkaddr = NULL_ADDR;
+                               f2fs_update_extent_cache(&dn);
+                               invalidate_blocks(sbi, old_addr);
+
+                               dn.data_blkaddr = new_addr;
+                               set_data_blkaddr(&dn);
+                       } else if (new_addr != NEW_ADDR) {
+                               struct node_info ni;
+                               struct f2fs_summary sum;
+
+                               get_node_info(sbi, dn.nid, &ni);
+                               set_summary(&sum, dn.nid, dn.ofs_in_node,
+                                                               ni.version);
+
+                               f2fs_replace_block(sbi, &sum, old_addr,
+                                                               new_addr, true);
+
+                               dn.data_blkaddr = new_addr;
+                               set_data_blkaddr(&dn);
+                               f2fs_update_extent_cache(&dn);
+                       }
+
+                       f2fs_put_dnode(&dn);
+               }
+       }
+       ret = 0;
+out:
+       f2fs_unlock_op(sbi);
+       return ret;
+}
+
+static int f2fs_collapse_range(struct inode *inode, loff_t offset, loff_t len)
+{
+       pgoff_t pg_start, pg_end;
+       loff_t new_size;
+       int ret;
+
+       if (!S_ISREG(inode->i_mode))
+               return -EINVAL;
+
+       if (offset + len >= i_size_read(inode))
+               return -EINVAL;
+
+       /* collapse range should be aligned to block size of f2fs. */
+       if (offset & (F2FS_BLKSIZE - 1) || len & (F2FS_BLKSIZE - 1))
+               return -EINVAL;
+
+       pg_start = offset >> PAGE_CACHE_SHIFT;
+       pg_end = (offset + len) >> PAGE_CACHE_SHIFT;
+
+       /* write out all dirty pages from offset */
+       ret = filemap_write_and_wait_range(inode->i_mapping, offset, LLONG_MAX);
+       if (ret)
+               return ret;
+
+       truncate_pagecache(inode, offset);
+
+       ret = f2fs_do_collapse(inode, pg_start, pg_end);
+       if (ret)
+               return ret;
+
+       new_size = i_size_read(inode) - len;
+
+       ret = truncate_blocks(inode, new_size, true);
+       if (!ret)
+               i_size_write(inode, new_size);
+
+       return ret;
+}
+
+static int f2fs_zero_range(struct inode *inode, loff_t offset, loff_t len,
+                                                               int mode)
+{
+       struct f2fs_sb_info *sbi = F2FS_I_SB(inode);
+       struct address_space *mapping = inode->i_mapping;
+       pgoff_t index, pg_start, pg_end;
+       loff_t new_size = i_size_read(inode);
+       loff_t off_start, off_end;
+       int ret = 0;
+
+       if (!S_ISREG(inode->i_mode))
+               return -EINVAL;
+
+       ret = inode_newsize_ok(inode, (len + offset));
+       if (ret)
+               return ret;
+
+       f2fs_balance_fs(sbi);
+
+       if (f2fs_has_inline_data(inode)) {
+               ret = f2fs_convert_inline_inode(inode);
+               if (ret)
+                       return ret;
+       }
+
+       ret = filemap_write_and_wait_range(mapping, offset, offset + len - 1);
+       if (ret)
+               return ret;
+
+       truncate_pagecache_range(inode, offset, offset + len - 1);
+
+       pg_start = ((unsigned long long) offset) >> PAGE_CACHE_SHIFT;
+       pg_end = ((unsigned long long) offset + len) >> PAGE_CACHE_SHIFT;
+
+       off_start = offset & (PAGE_CACHE_SIZE - 1);
+       off_end = (offset + len) & (PAGE_CACHE_SIZE - 1);
+
+       if (pg_start == pg_end) {
+               fill_zero(inode, pg_start, off_start, off_end - off_start);
+               if (offset + len > new_size)
+                       new_size = offset + len;
+               new_size = max_t(loff_t, new_size, offset + len);
+       } else {
+               if (off_start) {
+                       fill_zero(inode, pg_start++, off_start,
+                                       PAGE_CACHE_SIZE - off_start);
+                       new_size = max_t(loff_t, new_size,
+                                               pg_start << PAGE_CACHE_SHIFT);
+               }
+
+               for (index = pg_start; index < pg_end; index++) {
+                       struct dnode_of_data dn;
+                       struct page *ipage;
+
+                       f2fs_lock_op(sbi);
+
+                       ipage = get_node_page(sbi, inode->i_ino);
+                       if (IS_ERR(ipage)) {
+                               ret = PTR_ERR(ipage);
+                               f2fs_unlock_op(sbi);
+                               goto out;
+                       }
+
+                       set_new_dnode(&dn, inode, ipage, NULL, 0);
+                       ret = f2fs_reserve_block(&dn, index);
+                       if (ret) {
+                               f2fs_unlock_op(sbi);
+                               goto out;
+                       }
+
+                       if (dn.data_blkaddr != NEW_ADDR) {
+                               invalidate_blocks(sbi, dn.data_blkaddr);
+
+                               dn.data_blkaddr = NEW_ADDR;
+                               set_data_blkaddr(&dn);
+
+                               dn.data_blkaddr = NULL_ADDR;
+                               f2fs_update_extent_cache(&dn);
+                       }
+                       f2fs_put_dnode(&dn);
+                       f2fs_unlock_op(sbi);
+
+                       new_size = max_t(loff_t, new_size,
+                                       (index + 1) << PAGE_CACHE_SHIFT);
+               }
+
+               if (off_end) {
+                       fill_zero(inode, pg_end, 0, off_end);
+                       new_size = max_t(loff_t, new_size, offset + len);
+               }
+       }
+
+out:
+       if (!(mode & FALLOC_FL_KEEP_SIZE) && i_size_read(inode) < new_size) {
+               i_size_write(inode, new_size);
+               mark_inode_dirty(inode);
+               update_inode_page(inode);
+       }
+
+       return ret;
+}
+
 static int expand_inode_data(struct inode *inode, loff_t offset,
                                        loff_t len, int mode)
 {
@@ -830,23 +1081,36 @@ static long f2fs_fallocate(struct file *file, int mode,
                                loff_t offset, loff_t len)
 {
        struct inode *inode = file_inode(file);
-       long ret;
+       long ret = 0;
+
+       if (f2fs_encrypted_inode(inode) && (mode & FALLOC_FL_COLLAPSE_RANGE))
+               return -EOPNOTSUPP;
 
-       if (mode & ~(FALLOC_FL_KEEP_SIZE | FALLOC_FL_PUNCH_HOLE))
+       if (mode & ~(FALLOC_FL_KEEP_SIZE | FALLOC_FL_PUNCH_HOLE |
+                       FALLOC_FL_COLLAPSE_RANGE | FALLOC_FL_ZERO_RANGE))
                return -EOPNOTSUPP;
 
        mutex_lock(&inode->i_mutex);
 
-       if (mode & FALLOC_FL_PUNCH_HOLE)
+       if (mode & FALLOC_FL_PUNCH_HOLE) {
+               if (offset >= inode->i_size)
+                       goto out;
+
                ret = punch_hole(inode, offset, len);
-       else
+       } else if (mode & FALLOC_FL_COLLAPSE_RANGE) {
+               ret = f2fs_collapse_range(inode, offset, len);
+       } else if (mode & FALLOC_FL_ZERO_RANGE) {
+               ret = f2fs_zero_range(inode, offset, len, mode);
+       } else {
                ret = expand_inode_data(inode, offset, len, mode);
+       }
 
        if (!ret) {
                inode->i_mtime = inode->i_ctime = CURRENT_TIME;
                mark_inode_dirty(inode);
        }
 
+out:
        mutex_unlock(&inode->i_mutex);
 
        trace_f2fs_fallocate(inode, mode, offset, len, ret);
@@ -1109,6 +1373,92 @@ static int f2fs_ioc_fitrim(struct file *filp, unsigned long arg)
        return 0;
 }
 
+static bool uuid_is_nonzero(__u8 u[16])
+{
+       int i;
+
+       for (i = 0; i < 16; i++)
+               if (u[i])
+                       return true;
+       return false;
+}
+
+static int f2fs_ioc_set_encryption_policy(struct file *filp, unsigned long arg)
+{
+#ifdef CONFIG_F2FS_FS_ENCRYPTION
+       struct f2fs_encryption_policy policy;
+       struct inode *inode = file_inode(filp);
+
+       if (copy_from_user(&policy, (struct f2fs_encryption_policy __user *)arg,
+                               sizeof(policy)))
+               return -EFAULT;
+
+       if (f2fs_has_inline_data(inode)) {
+               int ret = f2fs_convert_inline_inode(inode);
+               if (ret)
+                       return ret;
+       }
+
+       return f2fs_process_policy(&policy, inode);
+#else
+       return -EOPNOTSUPP;
+#endif
+}
+
+static int f2fs_ioc_get_encryption_policy(struct file *filp, unsigned long arg)
+{
+#ifdef CONFIG_F2FS_FS_ENCRYPTION
+       struct f2fs_encryption_policy policy;
+       struct inode *inode = file_inode(filp);
+       int err;
+
+       err = f2fs_get_policy(inode, &policy);
+       if (err)
+               return err;
+
+       if (copy_to_user((struct f2fs_encryption_policy __user *)arg, &policy,
+                                                       sizeof(policy)))
+               return -EFAULT;
+       return 0;
+#else
+       return -EOPNOTSUPP;
+#endif
+}
+
+static int f2fs_ioc_get_encryption_pwsalt(struct file *filp, unsigned long arg)
+{
+       struct inode *inode = file_inode(filp);
+       struct f2fs_sb_info *sbi = F2FS_I_SB(inode);
+       int err;
+
+       if (!f2fs_sb_has_crypto(inode->i_sb))
+               return -EOPNOTSUPP;
+
+       if (uuid_is_nonzero(sbi->raw_super->encrypt_pw_salt))
+               goto got_it;
+
+       err = mnt_want_write_file(filp);
+       if (err)
+               return err;
+
+       /* update superblock with uuid */
+       generate_random_uuid(sbi->raw_super->encrypt_pw_salt);
+
+       err = f2fs_commit_super(sbi);
+
+       mnt_drop_write_file(filp);
+       if (err) {
+               /* undo new data */
+               memset(sbi->raw_super->encrypt_pw_salt, 0, 16);
+               return err;
+       }
+got_it:
+       if (copy_to_user((__u8 __user *)arg, sbi->raw_super->encrypt_pw_salt,
+                                                                       16))
+               return -EFAULT;
+       return 0;
+}
+
 long f2fs_ioctl(struct file *filp, unsigned int cmd, unsigned long arg)
 {
        switch (cmd) {
@@ -1132,11 +1482,29 @@ long f2fs_ioctl(struct file *filp, unsigned int cmd, unsigned long arg)
                return f2fs_ioc_shutdown(filp, arg);
        case FITRIM:
                return f2fs_ioc_fitrim(filp, arg);
+       case F2FS_IOC_SET_ENCRYPTION_POLICY:
+               return f2fs_ioc_set_encryption_policy(filp, arg);
+       case F2FS_IOC_GET_ENCRYPTION_POLICY:
+               return f2fs_ioc_get_encryption_policy(filp, arg);
+       case F2FS_IOC_GET_ENCRYPTION_PWSALT:
+               return f2fs_ioc_get_encryption_pwsalt(filp, arg);
        default:
                return -ENOTTY;
        }
 }
 
+static ssize_t f2fs_file_write_iter(struct kiocb *iocb, struct iov_iter *from)
+{
+       struct inode *inode = file_inode(iocb->ki_filp);
+
+       if (f2fs_encrypted_inode(inode) &&
+                               !f2fs_has_encryption_key(inode) &&
+                               f2fs_get_encryption_info(inode))
+               return -EACCES;
+
+       return generic_file_write_iter(iocb, from);
+}
+
 #ifdef CONFIG_COMPAT
 long f2fs_compat_ioctl(struct file *file, unsigned int cmd, unsigned long arg)
 {
@@ -1157,8 +1525,8 @@ long f2fs_compat_ioctl(struct file *file, unsigned int cmd, unsigned long arg)
 const struct file_operations f2fs_file_operations = {
        .llseek         = f2fs_llseek,
        .read_iter      = generic_file_read_iter,
-       .write_iter     = generic_file_write_iter,
-       .open           = generic_file_open,
+       .write_iter     = f2fs_file_write_iter,
+       .open           = f2fs_file_open,
        .release        = f2fs_release_file,
        .mmap           = f2fs_file_mmap,
        .fsync          = f2fs_sync_file,
This page took 0.032346 seconds and 5 git commands to generate.