lustre/smfs/audit_transfer.c

   1 /* -*- mode: c; c-basic-offset: 8; indent-tabs-mode: nil; -*-
   2  * vim:expandtab:shiftwidth=8:tabstop=8:
   3  *
   4  *  lustre/smfs/audit_transfer.c
   5  *
   6  *  Copyright (C) 2004 Cluster File Systems, Inc.
   7  *
   8  *   This file is part of Lustre, http://www.lustre.org.
   9  *
  10  *   Lustre is free software; you can redistribute it and/or
  11  *   modify it under the terms of version 2 of the GNU General Public
  12  *   License as published by the Free Software Foundation.
  13  *
  14  *   Lustre is distributed in the hope that it will be useful,
  15  *   but WITHOUT ANY WARRANTY; without even the implied warranty of
  16  *   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  17  *   GNU General Public License for more details.
  18  *
  19  *   You should have received a copy of the GNU General Public License
  20  *   along with Lustre; if not, write to the Free Software
  21  *   Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
  22  */
  23 #ifndef EXPORT_SYMTAB
  24 # define EXPORT_SYMTAB
  25 #endif
  26
  27 #define DEBUG_SUBSYSTEM S_SM
  28
  29 #include <linux/fs.h>
  30 #include <linux/slab.h>
  31 #include <linux/obd_class.h>
  32 #include <linux/obd_support.h>
  33 #include <linux/lustre_lib.h>
  34 #include <linux/lustre_idl.h>
  35 #include <linux/lustre_fsfilt.h>
  36 #include <linux/lustre_smfs.h>
  37 #include <linux/lustre_audit.h>
  38 #include <linux/lustre_log.h>
  39 #include "smfs_internal.h"
  40
  41 struct transfer_item {
  42         struct llog_handle      *ti_llh;
  43         struct list_head        ti_link;
  44         void * id2name;
  45 };
  46
  47 #define TRANSFERD_STOP          0
  48 struct transferd_ctl {
  49         unsigned long           tc_flags;
  50         wait_queue_head_t       tc_waitq;
  51         struct completion       tc_starting;
  52         struct completion       tc_stopping;
  53
  54         struct list_head        tc_list;
  55         spinlock_t              tc_lock;
  56 };
  57
  58 static struct transferd_ctl transferd_tc;
  59 static DECLARE_MUTEX(transferd_sem);
  60 static int transferd_users = 0;
  61 char *buf = NULL;
  62
  63 int audit_notify(struct llog_handle *llh, void * arg)
  64 {
  65         struct transfer_item *ti;
  66         ENTRY;
  67
  68         down(&transferd_sem);
  69         if (transferd_users == 0) {
  70                 up(&transferd_sem);
  71                 RETURN(0);
  72         }
  73         up(&transferd_sem);
  74
  75         if (test_bit(TRANSFERD_STOP, &transferd_tc.tc_flags)) {
  76                 CDEBUG(D_INFO, "transfer daemon stopped\n");
  77                 RETURN(0);
  78         }
  79
  80         OBD_ALLOC(ti, sizeof(*ti));
  81         if (ti == NULL)
  82                 RETURN(-ENOMEM);
  83
  84         INIT_LIST_HEAD(&ti->ti_link);
  85         ti->ti_llh = llh;
  86         ti->id2name = arg;
  87
  88         spin_lock(&transferd_tc.tc_lock);
  89         list_add_tail(&ti->ti_link, &transferd_tc.tc_list);
  90         spin_unlock(&transferd_tc.tc_lock);
  91
  92         wake_up(&transferd_tc.tc_waitq);
  93
  94         RETURN(0);
  95 }
  96
  97 const char *opstr[AUDIT_MAX] = {
  98         [AUDIT_NONE]     "null",
  99         [AUDIT_CREATE]   "create",
 100         [AUDIT_LINK]     "link",
 101         [AUDIT_UNLINK]   "unlink",
 102         [AUDIT_SYMLINK]  "symlink",
 103         [AUDIT_RENAME]   "rename",
 104         [AUDIT_SETATTR]  "setattr",
 105         [AUDIT_WRITE]    "write",
 106         [AUDIT_READ]     "read",
 107         [AUDIT_OPEN]     "open",
 108         [AUDIT_STAT]     "stat",
 109         [AUDIT_MMAP]     "mmap",
 110         [AUDIT_READLINK] "readlink",
 111         [AUDIT_READDIR]  "readdir",
 112 };
 113
 114 #define construct_header(buf, size, rec, id_rec)                        \
 115         snprintf(buf, size, "AUDIT:"LPX64":%u/%u:%s:%d:"DLID4":",       \
 116         rec->nid, rec->uid, rec->gid, opstr[rec->opcode], (__s16)rec->result,\
 117         (unsigned long)id_rec->au_fid, (unsigned long)id_rec->au_mds, \
 118         (unsigned long)id_rec->au_num, (unsigned long)id_rec->au_gen);
 119
 120 #define REC2ID(rec, id) {                                       \
 121         id_ino(id) = rec->au_num;                               \
 122         id_gen(id) = rec->au_gen;                               \
 123         id_type(id) = rec->au_type;                             \
 124         id_fid(id) = rec->au_fid;                               \
 125         id_group(id) = rec->au_mds;                             \
 126 }
 127
 128 static int
 129 transfer_record(struct obd_device *obd, struct audit_record *rec, int type, void * data)
 130 {
 131         struct audit_id_record *id_rec =
 132                 (struct audit_id_record *)((char *)rec + sizeof(*rec));
 133         struct audit_name_record *name_rec = NULL;
 134         int (*audit_id2name)(struct obd_device *obd, char **name,
 135                      int *namelen, struct lustre_id *id) = data;
 136
 137         int n, rc = 0;
 138         ENTRY;
 139
 140         CDEBUG(D_INFO, "transfer %s\n", opstr[rec->opcode]);
 141
 142         memset(buf, 0, PAGE_SIZE);
 143         n = construct_header(buf, PAGE_SIZE, rec, id_rec);
 144         if (n < 0)
 145                 RETURN(n);
 146
 147         switch (rec->opcode)
 148         {
 149                 case AUDIT_UNLINK:
 150                         if (type != SMFS_AUDIT_NAME_REC)
 151                                 break;
 152                 case AUDIT_LINK:
 153                 case AUDIT_RENAME:
 154                         id_rec++;
 155                 default:
 156                         break;
 157         }
 158
 159         if (audit_id2name) {
 160                 char *name = NULL;
 161                 struct lustre_id id;
 162                 int namelen = 0;
 163
 164                 REC2ID(id_rec, &id);
 165
 166                 //LASSERT(id_type(&id) & S_IFMT);
 167                 rc = audit_id2name(obd, &name, &namelen, &id);
 168                 if (rc < 0) {
 169                         strncat(buf, "unknown", PAGE_SIZE - n);
 170                         n += strlen("unknown");
 171                 } else if (namelen == 0) {
 172                         //root itself
 173                         if (type != SMFS_AUDIT_NAME_REC)
 174                                 strcat(buf, "/");
 175                 } else {
 176                         strncat(buf, name, PAGE_SIZE - n);
 177                         n += namelen;
 178                         OBD_FREE(name, namelen);
 179                 }
 180         }
 181
 182         if (type == SMFS_AUDIT_NAME_REC) {
 183                 name_rec = (struct audit_name_record *)((char *)(++id_rec));
 184                 strncat(buf, "/", 1);
 185                 n += 1;
 186                 strncat(buf, name_rec->name, PAGE_SIZE - n);
 187         }
 188
 189         CDEBUG(D_INFO, "%s\n", buf);
 190
 191         printk("%s\n", buf);
 192
 193         RETURN(0);
 194 }
 195
 196 static int transfer_cb(struct llog_handle *llh, struct llog_rec_hdr *rec,
 197                        void *data)
 198 {
 199         struct obd_device *obd = llh->lgh_ctxt->loc_obd;
 200         struct audit_record *ad_rec;
 201         struct llog_cookie cookie;
 202         ENTRY;
 203
 204         if (!(le32_to_cpu(llh->lgh_hdr->llh_flags) & LLOG_F_IS_PLAIN)) {
 205                 CERROR("log is not plain\n");
 206                 RETURN(-EINVAL);
 207         }
 208         if (rec->lrh_type != cpu_to_le32(SMFS_AUDIT_GEN_REC) &&
 209             rec->lrh_type != cpu_to_le32(SMFS_AUDIT_NAME_REC)) {
 210                 CERROR("log record type error\n");
 211                 RETURN(-EINVAL);
 212         }
 213
 214         ad_rec = (struct audit_record *)((char *)rec + sizeof(*rec));
 215
 216         LASSERT(ad_rec->opcode < AUDIT_MAX);
 217
 218         cookie.lgc_lgl = llh->lgh_id;
 219         cookie.lgc_subsys = LLOG_AUDIT_ORIG_CTXT;
 220         cookie.lgc_index = le32_to_cpu(rec->lrh_index);
 221
 222         transfer_record(obd, ad_rec, rec->lrh_type, data);
 223
 224         llog_cancel(llh->lgh_ctxt, 1, &cookie, 0, NULL);
 225
 226         RETURN(0);
 227 }
 228
 229 static int audit_transfer(struct transfer_item *ti)
 230 {
 231         struct llog_handle *llh = ti->ti_llh;
 232         int rc = 0;
 233         ENTRY;
 234
 235         rc = llog_cat_process(llh, (llog_cb_t)&transfer_cb, ti->id2name);
 236         if (rc)
 237                 CERROR("process catalog log failed: rc(%d)\n", rc);
 238
 239         RETURN(0);
 240 }
 241
 242 static int transferd_check(struct transferd_ctl *tc)
 243 {
 244         int rc = 0;
 245         ENTRY;
 246
 247         if (test_bit(TRANSFERD_STOP, &tc->tc_flags))
 248                 RETURN(1);
 249
 250         spin_lock(&tc->tc_lock);
 251         rc = list_empty(&tc->tc_list) ? 0 : 1;
 252         spin_unlock(&tc->tc_lock);
 253
 254         RETURN(rc);
 255 }
 256
 257 static int transferd(void *arg)
 258 {
 259         struct transferd_ctl *tc = arg;
 260         unsigned long flags;
 261         struct list_head *pos, *tmp;
 262         struct transfer_item *ti = NULL;
 263         ENTRY;
 264
 265         lock_kernel();
 266
 267         /* ptlrpc_daemonize() */
 268         exit_mm(current);
 269         lustre_daemonize_helper();
 270         exit_files(current);
 271         reparent_to_init();
 272
 273         SIGNAL_MASK_LOCK(current, flags);
 274         sigfillset(&current->blocked);
 275         RECALC_SIGPENDING;
 276         SIGNAL_MASK_UNLOCK(current, flags);
 277         THREAD_NAME(current->comm, sizeof(current->comm) - 1, "%s",
 278                     "audit_transferd");
 279         unlock_kernel();
 280
 281         complete(&tc->tc_starting);
 282
 283         LASSERT(buf == NULL);
 284         OBD_ALLOC(buf, PAGE_SIZE);
 285         LASSERT(buf != NULL);
 286
 287         while (1) {
 288                 struct l_wait_info lwi = { 0 };
 289
 290                 l_wait_event(tc->tc_waitq, transferd_check(tc), &lwi);
 291
 292                 if (test_bit(TRANSFERD_STOP, &tc->tc_flags))
 293                         break;
 294
 295                 spin_lock(&tc->tc_lock);
 296                 LASSERT(!list_empty(&tc->tc_list));
 297                 ti = list_entry(tc->tc_list.next, struct transfer_item, ti_link);
 298                 list_del_init(&ti->ti_link);
 299                 spin_unlock(&tc->tc_lock);
 300
 301                 audit_transfer(ti);
 302                 OBD_FREE(ti, sizeof(*ti));
 303
 304         }
 305
 306         OBD_FREE(buf, PAGE_SIZE);
 307
 308         spin_lock(&tc->tc_lock);
 309         list_for_each_safe(pos, tmp, &tc->tc_list) {
 310                 ti = list_entry(pos, struct transfer_item, ti_link);
 311                 list_del_init(&ti->ti_link);
 312                 OBD_FREE(ti, sizeof(*ti));
 313         }
 314         spin_unlock(&tc->tc_lock);
 315
 316         complete(&tc->tc_stopping);
 317         RETURN(0);
 318 }
 319
 320 int audit_start_transferd()
 321 {
 322         int rc = 0;
 323         ENTRY;
 324
 325         down(&transferd_sem);
 326         if (++transferd_users != 1)
 327                 GOTO(out, rc = 0);
 328
 329         memset(&transferd_tc, 0, sizeof(transferd_tc));
 330         init_completion(&transferd_tc.tc_starting);
 331         init_completion(&transferd_tc.tc_stopping);
 332         init_waitqueue_head(&transferd_tc.tc_waitq);
 333         transferd_tc.tc_flags = 0;
 334         INIT_LIST_HEAD(&transferd_tc.tc_list);
 335         spin_lock_init(&transferd_tc.tc_lock);
 336
 337         if (kernel_thread(transferd, &transferd_tc, 0) < 0) {
 338                 transferd_users--;
 339                 GOTO(out, rc = -ECHILD);
 340         }
 341
 342         wait_for_completion(&transferd_tc.tc_starting);
 343 out:
 344         up(&transferd_sem);
 345         RETURN(rc);
 346 }
 347
 348 int audit_stop_transferd(void)
 349 {
 350         int rc = 0;
 351         ENTRY;
 352
 353         down(&transferd_sem);
 354         if (--transferd_users > 0)
 355                 GOTO(out, rc = 0);
 356
 357         set_bit(TRANSFERD_STOP, &transferd_tc.tc_flags);
 358         wake_up(&transferd_tc.tc_waitq);
 359         wait_for_completion(&transferd_tc.tc_stopping);
 360 out:
 361         up(&transferd_sem);
 362         RETURN(rc);
 363 }