Orangefs: kernel client part 2
Signed-off-by: Mike Marshall <hubcap@omnibond.com>
This commit is contained in:
175
fs/orangefs/acl.c
Normal file
175
fs/orangefs/acl.c
Normal file
@@ -0,0 +1,175 @@
|
||||
/*
|
||||
* (C) 2001 Clemson University and The University of Chicago
|
||||
*
|
||||
* See COPYING in top-level directory.
|
||||
*/
|
||||
|
||||
#include "protocol.h"
|
||||
#include "pvfs2-kernel.h"
|
||||
#include "pvfs2-bufmap.h"
|
||||
#include <linux/posix_acl_xattr.h>
|
||||
#include <linux/fs_struct.h>
|
||||
|
||||
struct posix_acl *pvfs2_get_acl(struct inode *inode, int type)
|
||||
{
|
||||
struct posix_acl *acl;
|
||||
int ret;
|
||||
char *key = NULL, *value = NULL;
|
||||
|
||||
switch (type) {
|
||||
case ACL_TYPE_ACCESS:
|
||||
key = PVFS2_XATTR_NAME_ACL_ACCESS;
|
||||
break;
|
||||
case ACL_TYPE_DEFAULT:
|
||||
key = PVFS2_XATTR_NAME_ACL_DEFAULT;
|
||||
break;
|
||||
default:
|
||||
gossip_err("pvfs2_get_acl: bogus value of type %d\n", type);
|
||||
return ERR_PTR(-EINVAL);
|
||||
}
|
||||
/*
|
||||
* Rather than incurring a network call just to determine the exact
|
||||
* length of the attribute, I just allocate a max length to save on
|
||||
* the network call. Conceivably, we could pass NULL to
|
||||
* pvfs2_inode_getxattr() to probe the length of the value, but
|
||||
* I don't do that for now.
|
||||
*/
|
||||
value = kmalloc(PVFS_MAX_XATTR_VALUELEN, GFP_KERNEL);
|
||||
if (value == NULL)
|
||||
return ERR_PTR(-ENOMEM);
|
||||
|
||||
gossip_debug(GOSSIP_ACL_DEBUG,
|
||||
"inode %pU, key %s, type %d\n",
|
||||
get_khandle_from_ino(inode),
|
||||
key,
|
||||
type);
|
||||
ret = pvfs2_inode_getxattr(inode,
|
||||
"",
|
||||
key,
|
||||
value,
|
||||
PVFS_MAX_XATTR_VALUELEN);
|
||||
/* if the key exists, convert it to an in-memory rep */
|
||||
if (ret > 0) {
|
||||
acl = posix_acl_from_xattr(&init_user_ns, value, ret);
|
||||
} else if (ret == -ENODATA || ret == -ENOSYS) {
|
||||
acl = NULL;
|
||||
} else {
|
||||
gossip_err("inode %pU retrieving acl's failed with error %d\n",
|
||||
get_khandle_from_ino(inode),
|
||||
ret);
|
||||
acl = ERR_PTR(ret);
|
||||
}
|
||||
/* kfree(NULL) is safe, so don't worry if value ever got used */
|
||||
kfree(value);
|
||||
return acl;
|
||||
}
|
||||
|
||||
int pvfs2_set_acl(struct inode *inode, struct posix_acl *acl, int type)
|
||||
{
|
||||
struct pvfs2_inode_s *pvfs2_inode = PVFS2_I(inode);
|
||||
int error = 0;
|
||||
void *value = NULL;
|
||||
size_t size = 0;
|
||||
const char *name = NULL;
|
||||
|
||||
switch (type) {
|
||||
case ACL_TYPE_ACCESS:
|
||||
name = PVFS2_XATTR_NAME_ACL_ACCESS;
|
||||
if (acl) {
|
||||
umode_t mode = inode->i_mode;
|
||||
/*
|
||||
* can we represent this with the traditional file
|
||||
* mode permission bits?
|
||||
*/
|
||||
error = posix_acl_equiv_mode(acl, &mode);
|
||||
if (error < 0) {
|
||||
gossip_err("%s: posix_acl_equiv_mode err: %d\n",
|
||||
__func__,
|
||||
error);
|
||||
return error;
|
||||
}
|
||||
|
||||
if (inode->i_mode != mode)
|
||||
SetModeFlag(pvfs2_inode);
|
||||
inode->i_mode = mode;
|
||||
mark_inode_dirty_sync(inode);
|
||||
if (error == 0)
|
||||
acl = NULL;
|
||||
}
|
||||
break;
|
||||
case ACL_TYPE_DEFAULT:
|
||||
name = PVFS2_XATTR_NAME_ACL_DEFAULT;
|
||||
break;
|
||||
default:
|
||||
gossip_err("%s: invalid type %d!\n", __func__, type);
|
||||
return -EINVAL;
|
||||
}
|
||||
|
||||
gossip_debug(GOSSIP_ACL_DEBUG,
|
||||
"%s: inode %pU, key %s type %d\n",
|
||||
__func__, get_khandle_from_ino(inode),
|
||||
name,
|
||||
type);
|
||||
|
||||
if (acl) {
|
||||
size = posix_acl_xattr_size(acl->a_count);
|
||||
value = kmalloc(size, GFP_KERNEL);
|
||||
if (!value)
|
||||
return -ENOMEM;
|
||||
|
||||
error = posix_acl_to_xattr(&init_user_ns, acl, value, size);
|
||||
if (error < 0)
|
||||
goto out;
|
||||
}
|
||||
|
||||
gossip_debug(GOSSIP_ACL_DEBUG,
|
||||
"%s: name %s, value %p, size %zd, acl %p\n",
|
||||
__func__, name, value, size, acl);
|
||||
/*
|
||||
* Go ahead and set the extended attribute now. NOTE: Suppose acl
|
||||
* was NULL, then value will be NULL and size will be 0 and that
|
||||
* will xlate to a removexattr. However, we don't want removexattr
|
||||
* complain if attributes does not exist.
|
||||
*/
|
||||
error = pvfs2_inode_setxattr(inode, "", name, value, size, 0);
|
||||
|
||||
out:
|
||||
kfree(value);
|
||||
if (!error)
|
||||
set_cached_acl(inode, type, acl);
|
||||
return error;
|
||||
}
|
||||
|
||||
int pvfs2_init_acl(struct inode *inode, struct inode *dir)
|
||||
{
|
||||
struct pvfs2_inode_s *pvfs2_inode = PVFS2_I(inode);
|
||||
struct posix_acl *default_acl, *acl;
|
||||
umode_t mode = inode->i_mode;
|
||||
int error = 0;
|
||||
|
||||
ClearModeFlag(pvfs2_inode);
|
||||
|
||||
error = posix_acl_create(dir, &mode, &default_acl, &acl);
|
||||
if (error)
|
||||
return error;
|
||||
|
||||
if (default_acl) {
|
||||
error = pvfs2_set_acl(inode, default_acl, ACL_TYPE_DEFAULT);
|
||||
posix_acl_release(default_acl);
|
||||
}
|
||||
|
||||
if (acl) {
|
||||
if (!error)
|
||||
error = pvfs2_set_acl(inode, acl, ACL_TYPE_ACCESS);
|
||||
posix_acl_release(acl);
|
||||
}
|
||||
|
||||
/* If mode of the inode was changed, then do a forcible ->setattr */
|
||||
if (mode != inode->i_mode) {
|
||||
SetModeFlag(pvfs2_inode);
|
||||
inode->i_mode = mode;
|
||||
pvfs2_flush_inode(inode);
|
||||
}
|
||||
|
||||
return error;
|
||||
}
|
Reference in New Issue
Block a user