lustre/smfs/audit_transfer.c

   1 /* -*- mode: c; c-basic-offset: 8; indent-tabs-mode: nil; -*-
   2  * vim:expandtab:shiftwidth=8:tabstop=8:
   3  *
   4  *  lustre/smfs/audit_transfer.c
   5  *
   6  *  Copyright (C) 2004 Cluster File Systems, Inc.
   7  *
   8  *   This file is part of Lustre, http://www.lustre.org.
   9  *
  10  *   Lustre is free software; you can redistribute it and/or
  11  *   modify it under the terms of version 2 of the GNU General Public
  12  *   License as published by the Free Software Foundation.
  13  *
  14  *   Lustre is distributed in the hope that it will be useful,
  15  *   but WITHOUT ANY WARRANTY; without even the implied warranty of
  16  *   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  17  *   GNU General Public License for more details.
  18  *
  19  *   You should have received a copy of the GNU General Public License
  20  *   along with Lustre; if not, write to the Free Software
  21  *   Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
  22  */
  23 #ifndef EXPORT_SYMTAB
  24 # define EXPORT_SYMTAB
  25 #endif
  26
  27 #define DEBUG_SUBSYSTEM S_SM
  28
  29 #include <linux/fs.h>
  30 #include <linux/slab.h>
  31 #include <linux/obd_class.h>
  32 #include <linux/obd_support.h>
  33 #include <linux/lustre_lib.h>
  34 #include <linux/lustre_idl.h>
  35 #include <linux/lustre_fsfilt.h>
  36 #include <linux/lustre_smfs.h>
  37 #include <linux/lustre_audit.h>
  38 #include <linux/lustre_log.h>
  39 #include "smfs_internal.h"
  40
  41 struct transfer_item {
  42         struct llog_handle      *ti_llh;
  43         struct list_head        ti_link;
  44         void * id2name;
  45 };
  46
  47 #define TRANSFERD_STOP          0
  48 struct transferd_ctl {
  49         unsigned long           tc_flags;
  50         wait_queue_head_t       tc_waitq;
  51         struct completion       tc_starting;
  52         struct completion       tc_stopping;
  53
  54         struct list_head        tc_list;
  55         spinlock_t              tc_lock;
  56 };
  57
  58 static struct transferd_ctl transferd_tc;
  59 static DECLARE_MUTEX(transferd_sem);
  60 static int transferd_users = 0;
  61 char *buf = NULL;
  62
  63 int audit_notify(struct llog_handle *llh, void * arg)
  64 {
  65         struct transfer_item *ti;
  66         ENTRY;
  67
  68         down(&transferd_sem);
  69         if (transferd_users == 0) {
  70                 up(&transferd_sem);
  71                 RETURN(0);
  72         }
  73         up(&transferd_sem);
  74
  75         if (test_bit(TRANSFERD_STOP, &transferd_tc.tc_flags)) {
  76                 CDEBUG(D_INFO, "transfer daemon stopped\n");
  77                 RETURN(0);
  78         }
  79
  80         OBD_ALLOC(ti, sizeof(*ti));
  81         if (ti == NULL)
  82                 RETURN(-ENOMEM);
  83
  84         INIT_LIST_HEAD(&ti->ti_link);
  85         ti->ti_llh = llh;
  86         ti->id2name = arg;
  87
  88         spin_lock(&transferd_tc.tc_lock);
  89         list_add_tail(&ti->ti_link, &transferd_tc.tc_list);
  90         spin_unlock(&transferd_tc.tc_lock);
  91
  92         wake_up(&transferd_tc.tc_waitq);
  93
  94         RETURN(0);
  95 }
  96
  97 const char *opstr[AUDIT_MAX] = {
  98         [AUDIT_UNKNOWN]  "unknown",
  99         [AUDIT_CREATE]   "create",
 100         [AUDIT_LINK]     "link",
 101         [AUDIT_UNLINK]   "unlink",
 102         [AUDIT_RENAME]   "rename",
 103         [AUDIT_SETATTR]  "setattr",
 104         [AUDIT_WRITE]    "write",
 105         [AUDIT_READ]     "read",
 106         [AUDIT_OPEN]     "open",
 107         [AUDIT_STAT]     "stat",
 108         [AUDIT_MMAP]     "mmap",
 109         [AUDIT_READLINK] "readlink",
 110         [AUDIT_READDIR]  "readdir",
 111 };
 112
 113 #define construct_header(buf, size, rec, id_rec)                        \
 114         snprintf(buf, size, "AUDIT:"LPX64":%u/%u:%s:%d:"DLID4":",       \
 115         rec->nid, rec->uid, rec->gid, opstr[rec->opcode], (__s16)rec->result,\
 116         (unsigned long)id_rec->au_fid, (unsigned long)id_rec->au_mds, \
 117         (unsigned long)id_rec->au_num, (unsigned long)id_rec->au_gen);
 118
 119 #define REC2ID(rec, id) {                                       \
 120         id_ino(id) = rec->au_num;                               \
 121         id_gen(id) = rec->au_gen;                               \
 122         id_type(id) = rec->au_type;                             \
 123         id_fid(id) = rec->au_fid;                               \
 124         id_group(id) = rec->au_mds;                             \
 125 }
 126
 127 static int
 128 transfer_record(struct obd_device *obd, struct audit_record *rec, int type, void * data)
 129 {
 130         struct audit_id_record *id_rec =
 131                 (struct audit_id_record *)((char *)rec + sizeof(*rec));
 132         struct audit_name_record *name_rec = NULL;
 133         int (*audit_id2name)(struct obd_device *obd, char **name,
 134                      int *namelen, struct lustre_id *id) = data;
 135
 136         int n, rc = 0;
 137         ENTRY;
 138
 139         CDEBUG(D_INFO, "transfer %s\n", opstr[rec->opcode]);
 140
 141         memset(buf, 0, PAGE_SIZE);
 142         n = construct_header(buf, PAGE_SIZE, rec, id_rec);
 143         if (n < 0)
 144                 RETURN(n);
 145
 146         switch (rec->opcode)
 147         {
 148                 case AUDIT_UNLINK:
 149                         if (type != SMFS_AUDIT_NAME_REC)
 150                                 break;
 151                 case AUDIT_LINK:
 152                 case AUDIT_RENAME:
 153                         id_rec++;
 154                 default:
 155                         break;
 156         }
 157
 158         if (audit_id2name) {
 159                 char *name = NULL;
 160                 struct lustre_id id;
 161                 int namelen = 0;
 162
 163                 REC2ID(id_rec, &id);
 164
 165                 //LASSERT(id_type(&id) & S_IFMT);
 166                 rc = audit_id2name(obd, &name, &namelen, &id);
 167                 if (rc < 0) {
 168                         strncat(buf, "unknown", PAGE_SIZE - n);
 169                         n += strlen("unknown");
 170                 } else if (namelen == 0) {
 171                         //root itself
 172                         if (type != SMFS_AUDIT_NAME_REC)
 173                                 strcat(buf, "/");
 174                 } else {
 175                         strncat(buf, name, PAGE_SIZE - n);
 176                         n += namelen;
 177                         OBD_FREE(name, namelen);
 178                 }
 179         }
 180
 181         if (type == SMFS_AUDIT_NAME_REC) {
 182                 name_rec = (struct audit_name_record *)((char *)(++id_rec));
 183                 strncat(buf, "/", 1);
 184                 n += 1;
 185                 strncat(buf, name_rec->name, PAGE_SIZE - n);
 186         }
 187
 188         CDEBUG(D_INFO, "%s\n", buf);
 189
 190         printk("%s\n", buf);
 191
 192         RETURN(0);
 193 }
 194
 195 static int transfer_cb(struct llog_handle *llh, struct llog_rec_hdr *rec,
 196                        void *data)
 197 {
 198         struct obd_device *obd = llh->lgh_ctxt->loc_obd;
 199         struct audit_record *ad_rec;
 200         struct llog_cookie cookie;
 201         ENTRY;
 202
 203         if (!(le32_to_cpu(llh->lgh_hdr->llh_flags) & LLOG_F_IS_PLAIN)) {
 204                 CERROR("log is not plain\n");
 205                 RETURN(-EINVAL);
 206         }
 207         if (rec->lrh_type != cpu_to_le32(SMFS_AUDIT_GEN_REC) &&
 208             rec->lrh_type != cpu_to_le32(SMFS_AUDIT_NAME_REC)) {
 209                 CERROR("log record type error\n");
 210                 RETURN(-EINVAL);
 211         }
 212
 213         ad_rec = (struct audit_record *)((char *)rec + sizeof(*rec));
 214
 215         LASSERT(ad_rec->opcode < AUDIT_MAX);
 216
 217         cookie.lgc_lgl = llh->lgh_id;
 218         cookie.lgc_subsys = LLOG_AUDIT_ORIG_CTXT;
 219         cookie.lgc_index = le32_to_cpu(rec->lrh_index);
 220
 221         transfer_record(obd, ad_rec, rec->lrh_type, data);
 222
 223         llog_cancel(llh->lgh_ctxt, 1, &cookie, 0, NULL);
 224
 225         RETURN(0);
 226 }
 227
 228 static int audit_transfer(struct transfer_item *ti)
 229 {
 230         struct llog_handle *llh = ti->ti_llh;
 231         int rc = 0;
 232         ENTRY;
 233
 234         rc = llog_cat_process(llh, (llog_cb_t)&transfer_cb, ti->id2name);
 235         if (rc)
 236                 CERROR("process catalog log failed: rc(%d)\n", rc);
 237
 238         RETURN(0);
 239 }
 240
 241 static int transferd_check(struct transferd_ctl *tc)
 242 {
 243         int rc = 0;
 244         ENTRY;
 245
 246         if (test_bit(TRANSFERD_STOP, &tc->tc_flags))
 247                 RETURN(1);
 248
 249         spin_lock(&tc->tc_lock);
 250         rc = list_empty(&tc->tc_list) ? 0 : 1;
 251         spin_unlock(&tc->tc_lock);
 252
 253         RETURN(rc);
 254 }
 255
 256 static int transferd(void *arg)
 257 {
 258         struct transferd_ctl *tc = arg;
 259         unsigned long flags;
 260         struct list_head *pos, *tmp;
 261         struct transfer_item *ti = NULL;
 262         ENTRY;
 263
 264         lock_kernel();
 265
 266         /* ptlrpc_daemonize() */
 267         exit_mm(current);
 268         lustre_daemonize_helper();
 269         exit_files(current);
 270         reparent_to_init();
 271
 272         SIGNAL_MASK_LOCK(current, flags);
 273         sigfillset(&current->blocked);
 274         RECALC_SIGPENDING;
 275         SIGNAL_MASK_UNLOCK(current, flags);
 276         THREAD_NAME(current->comm, sizeof(current->comm) - 1, "%s",
 277                     "audit_transferd");
 278         unlock_kernel();
 279
 280         complete(&tc->tc_starting);
 281
 282         LASSERT(buf == NULL);
 283         OBD_ALLOC(buf, PAGE_SIZE);
 284         LASSERT(buf != NULL);
 285
 286         while (1) {
 287                 struct l_wait_info lwi = { 0 };
 288
 289                 l_wait_event(tc->tc_waitq, transferd_check(tc), &lwi);
 290
 291                 if (test_bit(TRANSFERD_STOP, &tc->tc_flags))
 292                         break;
 293
 294                 spin_lock(&tc->tc_lock);
 295                 LASSERT(!list_empty(&tc->tc_list));
 296                 ti = list_entry(tc->tc_list.next, struct transfer_item, ti_link);
 297                 list_del_init(&ti->ti_link);
 298                 spin_unlock(&tc->tc_lock);
 299
 300                 audit_transfer(ti);
 301                 OBD_FREE(ti, sizeof(*ti));
 302
 303         }
 304
 305         OBD_FREE(buf, PAGE_SIZE);
 306
 307         spin_lock(&tc->tc_lock);
 308         list_for_each_safe(pos, tmp, &tc->tc_list) {
 309                 ti = list_entry(pos, struct transfer_item, ti_link);
 310                 list_del_init(&ti->ti_link);
 311                 OBD_FREE(ti, sizeof(*ti));
 312         }
 313         spin_unlock(&tc->tc_lock);
 314
 315         complete(&tc->tc_stopping);
 316         RETURN(0);
 317 }
 318
 319 int audit_start_transferd()
 320 {
 321         int rc = 0;
 322         ENTRY;
 323
 324         down(&transferd_sem);
 325         if (++transferd_users != 1)
 326                 GOTO(out, rc = 0);
 327
 328         memset(&transferd_tc, 0, sizeof(transferd_tc));
 329         init_completion(&transferd_tc.tc_starting);
 330         init_completion(&transferd_tc.tc_stopping);
 331         init_waitqueue_head(&transferd_tc.tc_waitq);
 332         transferd_tc.tc_flags = 0;
 333         INIT_LIST_HEAD(&transferd_tc.tc_list);
 334         spin_lock_init(&transferd_tc.tc_lock);
 335
 336         if (kernel_thread(transferd, &transferd_tc, 0) < 0) {
 337                 transferd_users--;
 338                 GOTO(out, rc = -ECHILD);
 339         }
 340
 341         wait_for_completion(&transferd_tc.tc_starting);
 342 out:
 343         up(&transferd_sem);
 344         RETURN(rc);
 345 }
 346
 347 int audit_stop_transferd(void)
 348 {
 349         int rc = 0;
 350         ENTRY;
 351
 352         down(&transferd_sem);
 353         if (--transferd_users > 0)
 354                 GOTO(out, rc = 0);
 355
 356         set_bit(TRANSFERD_STOP, &transferd_tc.tc_flags);
 357         wake_up(&transferd_tc.tc_waitq);
 358         wait_for_completion(&transferd_tc.tc_stopping);
 359 out:
 360         up(&transferd_sem);
 361         RETURN(rc);
 362 }