4 * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
6 * This program is free software; you can redistribute it and/or modify
7 * it under the terms of the GNU General Public License version 2 only,
8 * as published by the Free Software Foundation.
10 * This program is distributed in the hope that it will be useful, but
11 * WITHOUT ANY WARRANTY; without even the implied warranty of
12 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
13 * General Public License version 2 for more details (a copy is included
14 * in the LICENSE file that accompanied this code).
16 * You should have received a copy of the GNU General Public License
17 * version 2 along with this program; If not, see
18 * http://www.gnu.org/licenses/gpl-2.0.html
23 * Copyright (c) 2008, 2010, Oracle and/or its affiliates. All rights reserved.
24 * Use is subject to license terms.
26 * Copyright (c) 2012, 2013, Intel Corporation.
29 * This file is part of Lustre, http://www.lustre.org/
30 * Lustre is a trademark of Sun Microsystems, Inc.
32 * lustre/obdclass/acl.c
34 * Lustre Access Control List.
36 * Author: Fan Yong <fanyong@clusterfs.com>
39 #define DEBUG_SUBSYSTEM S_SEC
40 #include <lu_object.h>
41 #include <lustre_acl.h>
42 #include <lustre_eacl.h>
43 #include <obd_support.h>
44 #ifdef HAVE_SERVER_SUPPORT
45 # include <lustre_idmap.h>
46 # include <md_object.h>
47 #endif /* HAVE_SERVER_SUPPORT */
49 #ifdef CONFIG_LUSTRE_FS_POSIX_ACL
51 static inline void lustre_posix_acl_le_to_cpu(posix_acl_xattr_entry *d,
52 posix_acl_xattr_entry *s)
54 d->e_tag = le16_to_cpu(s->e_tag);
55 d->e_perm = le16_to_cpu(s->e_perm);
56 d->e_id = le32_to_cpu(s->e_id);
60 static inline void lustre_posix_acl_cpu_to_le(posix_acl_xattr_entry *d,
61 posix_acl_xattr_entry *s)
63 d->e_tag = cpu_to_le16(s->e_tag);
64 d->e_perm = cpu_to_le16(s->e_perm);
65 d->e_id = cpu_to_le32(s->e_id);
70 * Check permission based on POSIX ACL.
72 int lustre_posix_acl_permission(struct lu_ucred *mu, const struct lu_attr *la,
73 unsigned int may_mask,
74 posix_acl_xattr_entry *entry, int count)
76 posix_acl_xattr_entry *pa, *pe, *mask_obj;
77 posix_acl_xattr_entry ae, me;
84 /* There is implicit conversion between MAY_* modes and ACL_* modes.
85 * Don't bother explicitly converting them unless they actually change.
88 acl_want = (may_mask & MAY_READ ? ACL_READ : 0) |
89 (may_mask & MAY_WRITE ? ACL_WRITE : 0) |
90 (may_mask & MAY_EXEC ? ACL_EXECUTE : 0);
92 BUILD_BUG_ON(MAY_READ != ACL_READ);
93 BUILD_BUG_ON(MAY_WRITE != ACL_WRITE);
94 BUILD_BUG_ON(MAY_EXEC != ACL_EXECUTE);
99 for (pa = &entry[0], pe = &entry[count - 1]; pa <= pe; pa++) {
100 lustre_posix_acl_le_to_cpu(&ae, pa);
103 /* (May have been checked already) */
104 if (la->la_uid == mu->uc_fsuid)
108 if (ae.e_id == mu->uc_fsuid)
112 if (lustre_in_group_p(mu, la->la_gid)) {
114 if ((ae.e_perm & acl_want) == acl_want)
119 if (lustre_in_group_p(mu, ae.e_id)) {
121 if ((ae.e_perm & acl_want) == acl_want)
138 for (mask_obj = pa + 1; mask_obj <= pe; mask_obj++) {
139 lustre_posix_acl_le_to_cpu(&me, mask_obj);
140 if (me.e_tag == ACL_MASK) {
141 if ((ae.e_perm & me.e_perm & acl_want) == acl_want)
149 if ((ae.e_perm & acl_want) == acl_want)
154 EXPORT_SYMBOL(lustre_posix_acl_permission);
157 * Modify the ACL for the chmod.
159 int lustre_posix_acl_chmod_masq(posix_acl_xattr_entry *entry, u32 mode,
162 posix_acl_xattr_entry *group_obj = NULL, *mask_obj = NULL, *pa, *pe;
164 /* There is implicit conversion between S_IRWX modes and ACL_* modes.
165 * Don't bother explicitly converting them unless they actually change.
167 BUILD_BUG_ON(S_IROTH != ACL_READ);
168 BUILD_BUG_ON(S_IWOTH != ACL_WRITE);
169 BUILD_BUG_ON(S_IXOTH != ACL_EXECUTE);
171 for (pa = &entry[0], pe = &entry[count - 1]; pa <= pe; pa++) {
172 switch (le16_to_cpu(pa->e_tag)) {
174 pa->e_perm = cpu_to_le16((mode & S_IRWXU) >> 6);
186 pa->e_perm = cpu_to_le16(mode & S_IRWXO);
194 mask_obj->e_perm = cpu_to_le16((mode & S_IRWXG) >> 3);
198 group_obj->e_perm = cpu_to_le16((mode & S_IRWXG) >> 3);
203 EXPORT_SYMBOL(lustre_posix_acl_chmod_masq);
206 * Returns 0 if the acl can be exactly represented in the traditional
207 * file mode permission bits, or else 1. Returns -E... on error.
210 lustre_posix_acl_equiv_mode(posix_acl_xattr_entry *entry, mode_t *mode_p,
213 posix_acl_xattr_entry *pa, *pe;
217 for (pa = &entry[0], pe = &entry[count - 1]; pa <= pe; pa++) {
218 __u16 perm = le16_to_cpu(pa->e_perm);
219 switch (le16_to_cpu(pa->e_tag)) {
221 mode |= (perm & S_IRWXO) << 6;
224 mode |= (perm & S_IRWXO) << 3;
227 mode |= perm & S_IRWXO;
230 mode = (mode & ~S_IRWXG) |
231 ((perm & S_IRWXO) << 3);
243 *mode_p = (*mode_p & ~S_IRWXUGO) | mode;
246 EXPORT_SYMBOL(lustre_posix_acl_equiv_mode);
249 * Modify acl when creating a new object.
251 int lustre_posix_acl_create_masq(posix_acl_xattr_entry *entry, u32 *pmode,
254 posix_acl_xattr_entry *group_obj = NULL, *mask_obj = NULL, *pa, *pe;
255 posix_acl_xattr_entry ae;
259 for (pa = &entry[0], pe = &entry[count - 1]; pa <= pe; pa++) {
260 lustre_posix_acl_le_to_cpu(&ae, pa);
263 ae.e_perm &= (mode >> 6) | ~(0007);
264 pa->e_perm = cpu_to_le16(ae.e_perm);
265 mode &= (ae.e_perm << 6) | ~S_IRWXU;
275 ae.e_perm &= mode | ~(0007);
276 pa->e_perm = cpu_to_le16(ae.e_perm);
277 mode &= ae.e_perm | ~(0007);
289 ae.e_perm = le16_to_cpu(mask_obj->e_perm) &
290 ((mode >> 3) | ~(0007));
291 mode &= (ae.e_perm << 3) | ~S_IRWXG;
292 mask_obj->e_perm = cpu_to_le16(ae.e_perm);
296 ae.e_perm = le16_to_cpu(group_obj->e_perm) &
297 ((mode >> 3) | ~(0007));
298 mode &= (ae.e_perm << 3) | ~S_IRWXG;
299 group_obj->e_perm = cpu_to_le16(ae.e_perm);
302 *pmode = (*pmode & ~S_IRWXUGO) | mode;
305 EXPORT_SYMBOL(lustre_posix_acl_create_masq);