xattr.c 22 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934935936937938939940941942943944945946947948949950951952953954955956957958959960961962963964965966967968969970971972973974975
  1. /*
  2. File: fs/xattr.c
  3. Extended attribute handling.
  4. Copyright (C) 2001 by Andreas Gruenbacher <a.gruenbacher@computer.org>
  5. Copyright (C) 2001 SGI - Silicon Graphics, Inc <linux-xfs@oss.sgi.com>
  6. Copyright (c) 2004 Red Hat, Inc., James Morris <jmorris@redhat.com>
  7. */
  8. #include <linux/fs.h>
  9. #include <linux/slab.h>
  10. #include <linux/file.h>
  11. #include <linux/xattr.h>
  12. #include <linux/mount.h>
  13. #include <linux/namei.h>
  14. #include <linux/security.h>
  15. #include <linux/evm.h>
  16. #include <linux/syscalls.h>
  17. #include <linux/export.h>
  18. #include <linux/fsnotify.h>
  19. #include <linux/audit.h>
  20. #include <linux/vmalloc.h>
  21. #include <linux/posix_acl_xattr.h>
  22. #include <asm/uaccess.h>
  23. /*
  24. * Check permissions for extended attribute access. This is a bit complicated
  25. * because different namespaces have very different rules.
  26. */
  27. static int
  28. xattr_permission(struct inode *inode, const char *name, int mask)
  29. {
  30. /*
  31. * We can never set or remove an extended attribute on a read-only
  32. * filesystem or on an immutable / append-only inode.
  33. */
  34. if (mask & MAY_WRITE) {
  35. if (IS_IMMUTABLE(inode) || IS_APPEND(inode))
  36. return -EPERM;
  37. }
  38. /*
  39. * No restriction for security.* and system.* from the VFS. Decision
  40. * on these is left to the underlying filesystem / security module.
  41. */
  42. if (!strncmp(name, XATTR_SECURITY_PREFIX, XATTR_SECURITY_PREFIX_LEN) ||
  43. !strncmp(name, XATTR_SYSTEM_PREFIX, XATTR_SYSTEM_PREFIX_LEN))
  44. return 0;
  45. /*
  46. * The trusted.* namespace can only be accessed by privileged users.
  47. */
  48. if (!strncmp(name, XATTR_TRUSTED_PREFIX, XATTR_TRUSTED_PREFIX_LEN)) {
  49. if (!capable(CAP_SYS_ADMIN))
  50. return (mask & MAY_WRITE) ? -EPERM : -ENODATA;
  51. return 0;
  52. }
  53. /*
  54. * In the user.* namespace, only regular files and directories can have
  55. * extended attributes. For sticky directories, only the owner and
  56. * privileged users can write attributes.
  57. */
  58. if (!strncmp(name, XATTR_USER_PREFIX, XATTR_USER_PREFIX_LEN)) {
  59. if (!S_ISREG(inode->i_mode) && !S_ISDIR(inode->i_mode))
  60. return (mask & MAY_WRITE) ? -EPERM : -ENODATA;
  61. if (S_ISDIR(inode->i_mode) && (inode->i_mode & S_ISVTX) &&
  62. (mask & MAY_WRITE) && !inode_owner_or_capable(inode))
  63. return -EPERM;
  64. }
  65. return inode_permission2(ERR_PTR(-EOPNOTSUPP), inode, mask);
  66. }
  67. /**
  68. * __vfs_setxattr_noperm - perform setxattr operation without performing
  69. * permission checks.
  70. *
  71. * @dentry - object to perform setxattr on
  72. * @name - xattr name to set
  73. * @value - value to set @name to
  74. * @size - size of @value
  75. * @flags - flags to pass into filesystem operations
  76. *
  77. * returns the result of the internal setxattr or setsecurity operations.
  78. *
  79. * This function requires the caller to lock the inode's i_mutex before it
  80. * is executed. It also assumes that the caller will make the appropriate
  81. * permission checks.
  82. */
  83. int __vfs_setxattr_noperm(struct dentry *dentry, const char *name,
  84. const void *value, size_t size, int flags)
  85. {
  86. struct inode *inode = dentry->d_inode;
  87. int error = -EOPNOTSUPP;
  88. int issec = !strncmp(name, XATTR_SECURITY_PREFIX,
  89. XATTR_SECURITY_PREFIX_LEN);
  90. if (issec)
  91. inode->i_flags &= ~S_NOSEC;
  92. if (inode->i_op->setxattr) {
  93. error = inode->i_op->setxattr(dentry, name, value, size, flags);
  94. if (!error) {
  95. fsnotify_xattr(dentry);
  96. security_inode_post_setxattr(dentry, name, value,
  97. size, flags);
  98. }
  99. } else if (issec) {
  100. const char *suffix = name + XATTR_SECURITY_PREFIX_LEN;
  101. error = security_inode_setsecurity(inode, suffix, value,
  102. size, flags);
  103. if (!error)
  104. fsnotify_xattr(dentry);
  105. }
  106. return error;
  107. }
  108. int
  109. vfs_setxattr(struct dentry *dentry, const char *name, const void *value,
  110. size_t size, int flags)
  111. {
  112. struct inode *inode = dentry->d_inode;
  113. int error;
  114. error = xattr_permission(inode, name, MAY_WRITE);
  115. if (error)
  116. return error;
  117. mutex_lock(&inode->i_mutex);
  118. error = security_inode_setxattr(dentry, name, value, size, flags);
  119. if (error)
  120. goto out;
  121. error = __vfs_setxattr_noperm(dentry, name, value, size, flags);
  122. out:
  123. mutex_unlock(&inode->i_mutex);
  124. return error;
  125. }
  126. EXPORT_SYMBOL_GPL(vfs_setxattr);
  127. ssize_t
  128. xattr_getsecurity(struct inode *inode, const char *name, void *value,
  129. size_t size)
  130. {
  131. void *buffer = NULL;
  132. ssize_t len;
  133. if (!value || !size) {
  134. len = security_inode_getsecurity(inode, name, &buffer, false);
  135. goto out_noalloc;
  136. }
  137. len = security_inode_getsecurity(inode, name, &buffer, true);
  138. if (len < 0)
  139. return len;
  140. if (size < len) {
  141. len = -ERANGE;
  142. goto out;
  143. }
  144. memcpy(value, buffer, len);
  145. out:
  146. security_release_secctx(buffer, len);
  147. out_noalloc:
  148. return len;
  149. }
  150. EXPORT_SYMBOL_GPL(xattr_getsecurity);
  151. /*
  152. * vfs_getxattr_alloc - allocate memory, if necessary, before calling getxattr
  153. *
  154. * Allocate memory, if not already allocated, or re-allocate correct size,
  155. * before retrieving the extended attribute.
  156. *
  157. * Returns the result of alloc, if failed, or the getxattr operation.
  158. */
  159. ssize_t
  160. vfs_getxattr_alloc(struct dentry *dentry, const char *name, char **xattr_value,
  161. size_t xattr_size, gfp_t flags)
  162. {
  163. struct inode *inode = dentry->d_inode;
  164. char *value = *xattr_value;
  165. int error;
  166. error = xattr_permission(inode, name, MAY_READ);
  167. if (error)
  168. return error;
  169. if (!inode->i_op->getxattr)
  170. return -EOPNOTSUPP;
  171. error = inode->i_op->getxattr(dentry, name, NULL, 0);
  172. if (error < 0)
  173. return error;
  174. if (!value || (error > xattr_size)) {
  175. value = krealloc(*xattr_value, error + 1, flags);
  176. if (!value)
  177. return -ENOMEM;
  178. memset(value, 0, error + 1);
  179. }
  180. error = inode->i_op->getxattr(dentry, name, value, error);
  181. *xattr_value = value;
  182. return error;
  183. }
  184. /* Compare an extended attribute value with the given value */
  185. int vfs_xattr_cmp(struct dentry *dentry, const char *xattr_name,
  186. const char *value, size_t size, gfp_t flags)
  187. {
  188. char *xattr_value = NULL;
  189. int rc;
  190. rc = vfs_getxattr_alloc(dentry, xattr_name, &xattr_value, 0, flags);
  191. if (rc < 0)
  192. return rc;
  193. if ((rc != size) || (memcmp(xattr_value, value, rc) != 0))
  194. rc = -EINVAL;
  195. else
  196. rc = 0;
  197. kfree(xattr_value);
  198. return rc;
  199. }
  200. ssize_t
  201. vfs_getxattr(struct dentry *dentry, const char *name, void *value, size_t size)
  202. {
  203. struct inode *inode = dentry->d_inode;
  204. int error;
  205. error = xattr_permission(inode, name, MAY_READ);
  206. if (error)
  207. return error;
  208. error = security_inode_getxattr(dentry, name);
  209. if (error)
  210. return error;
  211. if (!strncmp(name, XATTR_SECURITY_PREFIX,
  212. XATTR_SECURITY_PREFIX_LEN)) {
  213. const char *suffix = name + XATTR_SECURITY_PREFIX_LEN;
  214. int ret = xattr_getsecurity(inode, suffix, value, size);
  215. /*
  216. * Only overwrite the return value if a security module
  217. * is actually active.
  218. */
  219. if (ret == -EOPNOTSUPP)
  220. goto nolsm;
  221. return ret;
  222. }
  223. nolsm:
  224. if (inode->i_op->getxattr)
  225. error = inode->i_op->getxattr(dentry, name, value, size);
  226. else
  227. error = -EOPNOTSUPP;
  228. return error;
  229. }
  230. EXPORT_SYMBOL_GPL(vfs_getxattr);
  231. ssize_t
  232. vfs_listxattr(struct dentry *d, char *list, size_t size)
  233. {
  234. ssize_t error;
  235. error = security_inode_listxattr(d);
  236. if (error)
  237. return error;
  238. error = -EOPNOTSUPP;
  239. if (d->d_inode->i_op->listxattr) {
  240. error = d->d_inode->i_op->listxattr(d, list, size);
  241. } else {
  242. error = security_inode_listsecurity(d->d_inode, list, size);
  243. if (size && error > size)
  244. error = -ERANGE;
  245. }
  246. return error;
  247. }
  248. EXPORT_SYMBOL_GPL(vfs_listxattr);
  249. int
  250. vfs_removexattr(struct dentry *dentry, const char *name)
  251. {
  252. struct inode *inode = dentry->d_inode;
  253. int error;
  254. if (!inode->i_op->removexattr)
  255. return -EOPNOTSUPP;
  256. error = xattr_permission(inode, name, MAY_WRITE);
  257. if (error)
  258. return error;
  259. mutex_lock(&inode->i_mutex);
  260. error = security_inode_removexattr(dentry, name);
  261. if (error) {
  262. mutex_unlock(&inode->i_mutex);
  263. return error;
  264. }
  265. error = inode->i_op->removexattr(dentry, name);
  266. mutex_unlock(&inode->i_mutex);
  267. if (!error) {
  268. fsnotify_xattr(dentry);
  269. evm_inode_post_removexattr(dentry, name);
  270. }
  271. return error;
  272. }
  273. EXPORT_SYMBOL_GPL(vfs_removexattr);
  274. /*
  275. * Extended attribute SET operations
  276. */
  277. static long
  278. setxattr(struct dentry *d, const char __user *name, const void __user *value,
  279. size_t size, int flags)
  280. {
  281. int error;
  282. void *kvalue = NULL;
  283. void *vvalue = NULL; /* If non-NULL, we used vmalloc() */
  284. char kname[XATTR_NAME_MAX + 1];
  285. if (flags & ~(XATTR_CREATE|XATTR_REPLACE))
  286. return -EINVAL;
  287. error = strncpy_from_user(kname, name, sizeof(kname));
  288. if (error == 0 || error == sizeof(kname))
  289. error = -ERANGE;
  290. if (error < 0)
  291. return error;
  292. if (size) {
  293. if (size > XATTR_SIZE_MAX)
  294. return -E2BIG;
  295. kvalue = kmalloc(size, GFP_KERNEL | __GFP_NOWARN);
  296. if (!kvalue) {
  297. vvalue = vmalloc(size);
  298. if (!vvalue)
  299. return -ENOMEM;
  300. kvalue = vvalue;
  301. }
  302. if (copy_from_user(kvalue, value, size)) {
  303. error = -EFAULT;
  304. goto out;
  305. }
  306. if ((strcmp(kname, XATTR_NAME_POSIX_ACL_ACCESS) == 0) ||
  307. (strcmp(kname, XATTR_NAME_POSIX_ACL_DEFAULT) == 0))
  308. posix_acl_fix_xattr_from_user(kvalue, size);
  309. }
  310. error = vfs_setxattr(d, kname, kvalue, size, flags);
  311. out:
  312. if (vvalue)
  313. vfree(vvalue);
  314. else
  315. kfree(kvalue);
  316. return error;
  317. }
  318. SYSCALL_DEFINE5(setxattr, const char __user *, pathname,
  319. const char __user *, name, const void __user *, value,
  320. size_t, size, int, flags)
  321. {
  322. struct path path;
  323. int error;
  324. error = user_path(pathname, &path);
  325. if (error)
  326. return error;
  327. error = mnt_want_write(path.mnt);
  328. if (!error) {
  329. error = setxattr(path.dentry, name, value, size, flags);
  330. mnt_drop_write(path.mnt);
  331. }
  332. path_put(&path);
  333. return error;
  334. }
  335. SYSCALL_DEFINE5(lsetxattr, const char __user *, pathname,
  336. const char __user *, name, const void __user *, value,
  337. size_t, size, int, flags)
  338. {
  339. struct path path;
  340. int error;
  341. error = user_lpath(pathname, &path);
  342. if (error)
  343. return error;
  344. error = mnt_want_write(path.mnt);
  345. if (!error) {
  346. error = setxattr(path.dentry, name, value, size, flags);
  347. mnt_drop_write(path.mnt);
  348. }
  349. path_put(&path);
  350. return error;
  351. }
  352. SYSCALL_DEFINE5(fsetxattr, int, fd, const char __user *, name,
  353. const void __user *,value, size_t, size, int, flags)
  354. {
  355. int fput_needed;
  356. struct file *f;
  357. struct dentry *dentry;
  358. int error = -EBADF;
  359. f = fget_light(fd, &fput_needed);
  360. if (!f)
  361. return error;
  362. dentry = f->f_path.dentry;
  363. audit_inode(NULL, dentry);
  364. error = mnt_want_write_file(f);
  365. if (!error) {
  366. error = setxattr(dentry, name, value, size, flags);
  367. mnt_drop_write_file(f);
  368. }
  369. fput_light(f, fput_needed);
  370. return error;
  371. }
  372. /*
  373. * Extended attribute GET operations
  374. */
  375. static ssize_t
  376. getxattr(struct dentry *d, const char __user *name, void __user *value,
  377. size_t size)
  378. {
  379. ssize_t error;
  380. void *kvalue = NULL;
  381. char kname[XATTR_NAME_MAX + 1];
  382. error = strncpy_from_user(kname, name, sizeof(kname));
  383. if (error == 0 || error == sizeof(kname))
  384. error = -ERANGE;
  385. if (error < 0)
  386. return error;
  387. if (size) {
  388. if (size > XATTR_SIZE_MAX)
  389. size = XATTR_SIZE_MAX;
  390. kvalue = kzalloc(size, GFP_KERNEL);
  391. if (!kvalue)
  392. return -ENOMEM;
  393. }
  394. error = vfs_getxattr(d, kname, kvalue, size);
  395. if (error > 0) {
  396. if ((strcmp(kname, XATTR_NAME_POSIX_ACL_ACCESS) == 0) ||
  397. (strcmp(kname, XATTR_NAME_POSIX_ACL_DEFAULT) == 0))
  398. posix_acl_fix_xattr_to_user(kvalue, error);
  399. if (size && copy_to_user(value, kvalue, error))
  400. error = -EFAULT;
  401. } else if (error == -ERANGE && size >= XATTR_SIZE_MAX) {
  402. /* The file system tried to returned a value bigger
  403. than XATTR_SIZE_MAX bytes. Not possible. */
  404. error = -E2BIG;
  405. }
  406. kfree(kvalue);
  407. return error;
  408. }
  409. SYSCALL_DEFINE4(getxattr, const char __user *, pathname,
  410. const char __user *, name, void __user *, value, size_t, size)
  411. {
  412. struct path path;
  413. ssize_t error;
  414. error = user_path(pathname, &path);
  415. if (error)
  416. return error;
  417. error = getxattr(path.dentry, name, value, size);
  418. path_put(&path);
  419. return error;
  420. }
  421. SYSCALL_DEFINE4(lgetxattr, const char __user *, pathname,
  422. const char __user *, name, void __user *, value, size_t, size)
  423. {
  424. struct path path;
  425. ssize_t error;
  426. error = user_lpath(pathname, &path);
  427. if (error)
  428. return error;
  429. error = getxattr(path.dentry, name, value, size);
  430. path_put(&path);
  431. return error;
  432. }
  433. SYSCALL_DEFINE4(fgetxattr, int, fd, const char __user *, name,
  434. void __user *, value, size_t, size)
  435. {
  436. int fput_needed;
  437. struct file *f;
  438. ssize_t error = -EBADF;
  439. f = fget_light(fd, &fput_needed);
  440. if (!f)
  441. return error;
  442. audit_inode(NULL, f->f_path.dentry);
  443. error = getxattr(f->f_path.dentry, name, value, size);
  444. fput_light(f, fput_needed);
  445. return error;
  446. }
  447. /*
  448. * Extended attribute LIST operations
  449. */
  450. static ssize_t
  451. listxattr(struct dentry *d, char __user *list, size_t size)
  452. {
  453. ssize_t error;
  454. char *klist = NULL;
  455. char *vlist = NULL; /* If non-NULL, we used vmalloc() */
  456. if (size) {
  457. if (size > XATTR_LIST_MAX)
  458. size = XATTR_LIST_MAX;
  459. klist = kmalloc(size, __GFP_NOWARN | GFP_KERNEL);
  460. if (!klist) {
  461. vlist = vmalloc(size);
  462. if (!vlist)
  463. return -ENOMEM;
  464. klist = vlist;
  465. }
  466. }
  467. error = vfs_listxattr(d, klist, size);
  468. if (error > 0) {
  469. if (size && copy_to_user(list, klist, error))
  470. error = -EFAULT;
  471. } else if (error == -ERANGE && size >= XATTR_LIST_MAX) {
  472. /* The file system tried to returned a list bigger
  473. than XATTR_LIST_MAX bytes. Not possible. */
  474. error = -E2BIG;
  475. }
  476. if (vlist)
  477. vfree(vlist);
  478. else
  479. kfree(klist);
  480. return error;
  481. }
  482. SYSCALL_DEFINE3(listxattr, const char __user *, pathname, char __user *, list,
  483. size_t, size)
  484. {
  485. struct path path;
  486. ssize_t error;
  487. error = user_path(pathname, &path);
  488. if (error)
  489. return error;
  490. error = listxattr(path.dentry, list, size);
  491. path_put(&path);
  492. return error;
  493. }
  494. SYSCALL_DEFINE3(llistxattr, const char __user *, pathname, char __user *, list,
  495. size_t, size)
  496. {
  497. struct path path;
  498. ssize_t error;
  499. error = user_lpath(pathname, &path);
  500. if (error)
  501. return error;
  502. error = listxattr(path.dentry, list, size);
  503. path_put(&path);
  504. return error;
  505. }
  506. SYSCALL_DEFINE3(flistxattr, int, fd, char __user *, list, size_t, size)
  507. {
  508. int fput_needed;
  509. struct file *f;
  510. ssize_t error = -EBADF;
  511. f = fget_light(fd, &fput_needed);
  512. if (!f)
  513. return error;
  514. audit_inode(NULL, f->f_path.dentry);
  515. error = listxattr(f->f_path.dentry, list, size);
  516. fput_light(f, fput_needed);
  517. return error;
  518. }
  519. /*
  520. * Extended attribute REMOVE operations
  521. */
  522. static long
  523. removexattr(struct dentry *d, const char __user *name)
  524. {
  525. int error;
  526. char kname[XATTR_NAME_MAX + 1];
  527. error = strncpy_from_user(kname, name, sizeof(kname));
  528. if (error == 0 || error == sizeof(kname))
  529. error = -ERANGE;
  530. if (error < 0)
  531. return error;
  532. return vfs_removexattr(d, kname);
  533. }
  534. SYSCALL_DEFINE2(removexattr, const char __user *, pathname,
  535. const char __user *, name)
  536. {
  537. struct path path;
  538. int error;
  539. error = user_path(pathname, &path);
  540. if (error)
  541. return error;
  542. error = mnt_want_write(path.mnt);
  543. if (!error) {
  544. error = removexattr(path.dentry, name);
  545. mnt_drop_write(path.mnt);
  546. }
  547. path_put(&path);
  548. return error;
  549. }
  550. SYSCALL_DEFINE2(lremovexattr, const char __user *, pathname,
  551. const char __user *, name)
  552. {
  553. struct path path;
  554. int error;
  555. error = user_lpath(pathname, &path);
  556. if (error)
  557. return error;
  558. error = mnt_want_write(path.mnt);
  559. if (!error) {
  560. error = removexattr(path.dentry, name);
  561. mnt_drop_write(path.mnt);
  562. }
  563. path_put(&path);
  564. return error;
  565. }
  566. SYSCALL_DEFINE2(fremovexattr, int, fd, const char __user *, name)
  567. {
  568. int fput_needed;
  569. struct file *f;
  570. struct dentry *dentry;
  571. int error = -EBADF;
  572. f = fget_light(fd, &fput_needed);
  573. if (!f)
  574. return error;
  575. dentry = f->f_path.dentry;
  576. audit_inode(NULL, dentry);
  577. error = mnt_want_write_file(f);
  578. if (!error) {
  579. error = removexattr(dentry, name);
  580. mnt_drop_write_file(f);
  581. }
  582. fput_light(f, fput_needed);
  583. return error;
  584. }
  585. static const char *
  586. strcmp_prefix(const char *a, const char *a_prefix)
  587. {
  588. while (*a_prefix && *a == *a_prefix) {
  589. a++;
  590. a_prefix++;
  591. }
  592. return *a_prefix ? NULL : a;
  593. }
  594. /*
  595. * In order to implement different sets of xattr operations for each xattr
  596. * prefix with the generic xattr API, a filesystem should create a
  597. * null-terminated array of struct xattr_handler (one for each prefix) and
  598. * hang a pointer to it off of the s_xattr field of the superblock.
  599. *
  600. * The generic_fooxattr() functions will use this list to dispatch xattr
  601. * operations to the correct xattr_handler.
  602. */
  603. #define for_each_xattr_handler(handlers, handler) \
  604. for ((handler) = *(handlers)++; \
  605. (handler) != NULL; \
  606. (handler) = *(handlers)++)
  607. /*
  608. * Find the xattr_handler with the matching prefix.
  609. */
  610. static const struct xattr_handler *
  611. xattr_resolve_name(const struct xattr_handler **handlers, const char **name)
  612. {
  613. const struct xattr_handler *handler;
  614. if (!*name)
  615. return NULL;
  616. for_each_xattr_handler(handlers, handler) {
  617. const char *n = strcmp_prefix(*name, handler->prefix);
  618. if (n) {
  619. *name = n;
  620. break;
  621. }
  622. }
  623. return handler;
  624. }
  625. /*
  626. * Find the handler for the prefix and dispatch its get() operation.
  627. */
  628. ssize_t
  629. generic_getxattr(struct dentry *dentry, const char *name, void *buffer, size_t size)
  630. {
  631. const struct xattr_handler *handler;
  632. handler = xattr_resolve_name(dentry->d_sb->s_xattr, &name);
  633. if (!handler)
  634. return -EOPNOTSUPP;
  635. return handler->get(dentry, name, buffer, size, handler->flags);
  636. }
  637. /*
  638. * Combine the results of the list() operation from every xattr_handler in the
  639. * list.
  640. */
  641. ssize_t
  642. generic_listxattr(struct dentry *dentry, char *buffer, size_t buffer_size)
  643. {
  644. const struct xattr_handler *handler, **handlers = dentry->d_sb->s_xattr;
  645. unsigned int size = 0;
  646. if (!buffer) {
  647. for_each_xattr_handler(handlers, handler) {
  648. size += handler->list(dentry, NULL, 0, NULL, 0,
  649. handler->flags);
  650. }
  651. } else {
  652. char *buf = buffer;
  653. for_each_xattr_handler(handlers, handler) {
  654. size = handler->list(dentry, buf, buffer_size,
  655. NULL, 0, handler->flags);
  656. if (size > buffer_size)
  657. return -ERANGE;
  658. buf += size;
  659. buffer_size -= size;
  660. }
  661. size = buf - buffer;
  662. }
  663. return size;
  664. }
  665. /*
  666. * Find the handler for the prefix and dispatch its set() operation.
  667. */
  668. int
  669. generic_setxattr(struct dentry *dentry, const char *name, const void *value, size_t size, int flags)
  670. {
  671. const struct xattr_handler *handler;
  672. if (size == 0)
  673. value = ""; /* empty EA, do not remove */
  674. handler = xattr_resolve_name(dentry->d_sb->s_xattr, &name);
  675. if (!handler)
  676. return -EOPNOTSUPP;
  677. return handler->set(dentry, name, value, size, flags, handler->flags);
  678. }
  679. /*
  680. * Find the handler for the prefix and dispatch its set() operation to remove
  681. * any associated extended attribute.
  682. */
  683. int
  684. generic_removexattr(struct dentry *dentry, const char *name)
  685. {
  686. const struct xattr_handler *handler;
  687. handler = xattr_resolve_name(dentry->d_sb->s_xattr, &name);
  688. if (!handler)
  689. return -EOPNOTSUPP;
  690. return handler->set(dentry, name, NULL, 0,
  691. XATTR_REPLACE, handler->flags);
  692. }
  693. EXPORT_SYMBOL(generic_getxattr);
  694. EXPORT_SYMBOL(generic_listxattr);
  695. EXPORT_SYMBOL(generic_setxattr);
  696. EXPORT_SYMBOL(generic_removexattr);
  697. /*
  698. * Allocate new xattr and copy in the value; but leave the name to callers.
  699. */
  700. struct simple_xattr *simple_xattr_alloc(const void *value, size_t size)
  701. {
  702. struct simple_xattr *new_xattr;
  703. size_t len;
  704. /* wrap around? */
  705. len = sizeof(*new_xattr) + size;
  706. if (len <= sizeof(*new_xattr))
  707. return NULL;
  708. new_xattr = kmalloc(len, GFP_KERNEL);
  709. if (!new_xattr)
  710. return NULL;
  711. new_xattr->size = size;
  712. memcpy(new_xattr->value, value, size);
  713. return new_xattr;
  714. }
  715. /*
  716. * xattr GET operation for in-memory/pseudo filesystems
  717. */
  718. int simple_xattr_get(struct simple_xattrs *xattrs, const char *name,
  719. void *buffer, size_t size)
  720. {
  721. struct simple_xattr *xattr;
  722. int ret = -ENODATA;
  723. spin_lock(&xattrs->lock);
  724. list_for_each_entry(xattr, &xattrs->head, list) {
  725. if (strcmp(name, xattr->name))
  726. continue;
  727. ret = xattr->size;
  728. if (buffer) {
  729. if (size < xattr->size)
  730. ret = -ERANGE;
  731. else
  732. memcpy(buffer, xattr->value, xattr->size);
  733. }
  734. break;
  735. }
  736. spin_unlock(&xattrs->lock);
  737. return ret;
  738. }
  739. static int __simple_xattr_set(struct simple_xattrs *xattrs, const char *name,
  740. const void *value, size_t size, int flags)
  741. {
  742. struct simple_xattr *xattr;
  743. struct simple_xattr *new_xattr = NULL;
  744. int err = 0;
  745. /* value == NULL means remove */
  746. if (value) {
  747. new_xattr = simple_xattr_alloc(value, size);
  748. if (!new_xattr)
  749. return -ENOMEM;
  750. new_xattr->name = kstrdup(name, GFP_KERNEL);
  751. if (!new_xattr->name) {
  752. kfree(new_xattr);
  753. return -ENOMEM;
  754. }
  755. }
  756. spin_lock(&xattrs->lock);
  757. list_for_each_entry(xattr, &xattrs->head, list) {
  758. if (!strcmp(name, xattr->name)) {
  759. if (flags & XATTR_CREATE) {
  760. xattr = new_xattr;
  761. err = -EEXIST;
  762. } else if (new_xattr) {
  763. list_replace(&xattr->list, &new_xattr->list);
  764. } else {
  765. list_del(&xattr->list);
  766. }
  767. goto out;
  768. }
  769. }
  770. if (flags & XATTR_REPLACE) {
  771. xattr = new_xattr;
  772. err = -ENODATA;
  773. } else {
  774. list_add(&new_xattr->list, &xattrs->head);
  775. xattr = NULL;
  776. }
  777. out:
  778. spin_unlock(&xattrs->lock);
  779. if (xattr) {
  780. kfree(xattr->name);
  781. kfree(xattr);
  782. }
  783. return err;
  784. }
  785. /**
  786. * simple_xattr_set - xattr SET operation for in-memory/pseudo filesystems
  787. * @xattrs: target simple_xattr list
  788. * @name: name of the new extended attribute
  789. * @value: value of the new xattr. If %NULL, will remove the attribute
  790. * @size: size of the new xattr
  791. * @flags: %XATTR_{CREATE|REPLACE}
  792. *
  793. * %XATTR_CREATE is set, the xattr shouldn't exist already; otherwise fails
  794. * with -EEXIST. If %XATTR_REPLACE is set, the xattr should exist;
  795. * otherwise, fails with -ENODATA.
  796. *
  797. * Returns 0 on success, -errno on failure.
  798. */
  799. int simple_xattr_set(struct simple_xattrs *xattrs, const char *name,
  800. const void *value, size_t size, int flags)
  801. {
  802. if (size == 0)
  803. value = ""; /* empty EA, do not remove */
  804. return __simple_xattr_set(xattrs, name, value, size, flags);
  805. }
  806. /*
  807. * xattr REMOVE operation for in-memory/pseudo filesystems
  808. */
  809. int simple_xattr_remove(struct simple_xattrs *xattrs, const char *name)
  810. {
  811. return __simple_xattr_set(xattrs, name, NULL, 0, XATTR_REPLACE);
  812. }
  813. static bool xattr_is_trusted(const char *name)
  814. {
  815. return !strncmp(name, XATTR_TRUSTED_PREFIX, XATTR_TRUSTED_PREFIX_LEN);
  816. }
  817. /*
  818. * xattr LIST operation for in-memory/pseudo filesystems
  819. */
  820. ssize_t simple_xattr_list(struct simple_xattrs *xattrs, char *buffer,
  821. size_t size)
  822. {
  823. bool trusted = capable(CAP_SYS_ADMIN);
  824. struct simple_xattr *xattr;
  825. size_t used = 0;
  826. spin_lock(&xattrs->lock);
  827. list_for_each_entry(xattr, &xattrs->head, list) {
  828. size_t len;
  829. /* skip "trusted." attributes for unprivileged callers */
  830. if (!trusted && xattr_is_trusted(xattr->name))
  831. continue;
  832. len = strlen(xattr->name) + 1;
  833. used += len;
  834. if (buffer) {
  835. if (size < used) {
  836. used = -ERANGE;
  837. break;
  838. }
  839. memcpy(buffer, xattr->name, len);
  840. buffer += len;
  841. }
  842. }
  843. spin_unlock(&xattrs->lock);
  844. return used;
  845. }
  846. /*
  847. * Adds an extended attribute to the list
  848. */
  849. void simple_xattr_list_add(struct simple_xattrs *xattrs,
  850. struct simple_xattr *new_xattr)
  851. {
  852. spin_lock(&xattrs->lock);
  853. list_add(&new_xattr->list, &xattrs->head);
  854. spin_unlock(&xattrs->lock);
  855. }