2 * Copyright (c) 2000-2005 Silicon Graphics, Inc.
5 * This program is free software; you can redistribute it and/or
6 * modify it under the terms of the GNU General Public License as
7 * published by the Free Software Foundation.
9 * This program is distributed in the hope that it would be useful,
10 * but WITHOUT ANY WARRANTY; without even the implied warranty of
11 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12 * GNU General Public License for more details.
14 * You should have received a copy of the GNU General Public License
15 * along with this program; if not, write the Free Software Foundation,
16 * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
23 #include "xfs_trans.h"
27 #include "xfs_alloc.h"
28 #include "xfs_dmapi.h"
29 #include "xfs_mount.h"
30 #include "xfs_bmap_btree.h"
31 #include "xfs_alloc_btree.h"
32 #include "xfs_ialloc_btree.h"
33 #include "xfs_attr_sf.h"
34 #include "xfs_dir2_sf.h"
35 #include "xfs_dinode.h"
36 #include "xfs_inode.h"
37 #include "xfs_ioctl.h"
38 #include "xfs_btree.h"
39 #include "xfs_ialloc.h"
40 #include "xfs_rtalloc.h"
41 #include "xfs_itable.h"
42 #include "xfs_error.h"
46 #include "xfs_buf_item.h"
47 #include "xfs_utils.h"
48 #include "xfs_dfrag.h"
49 #include "xfs_fsops.h"
50 #include "xfs_vnodeops.h"
51 #include "xfs_quota.h"
52 #include "xfs_inode_item.h"
53 #include "xfs_export.h"
55 #include <linux/capability.h>
56 #include <linux/dcache.h>
57 #include <linux/mount.h>
58 #include <linux/namei.h>
59 #include <linux/pagemap.h>
60 #include <linux/exportfs.h>
63 * xfs_find_handle maps from userspace xfs_fsop_handlereq structure to
64 * a file or fs handle.
66 * XFS_IOC_PATH_TO_FSHANDLE
67 * returns fs handle for a mount point or path within that mount point
68 * XFS_IOC_FD_TO_HANDLE
69 * returns full handle for a FD opened in user space
70 * XFS_IOC_PATH_TO_HANDLE
71 * returns full handle for a path
76 xfs_fsop_handlereq_t *hreq)
81 struct file *file = NULL;
86 if (cmd == XFS_IOC_FD_TO_HANDLE) {
87 file = fget(hreq->fd);
90 inode = file->f_path.dentry->d_inode;
92 error = user_lpath((const char __user *)hreq->path, &path);
95 inode = path.dentry->d_inode;
100 * We can only generate handles for inodes residing on a XFS filesystem,
101 * and only for regular files, directories or symbolic links.
104 if (inode->i_sb->s_magic != XFS_SB_MAGIC)
108 if (!S_ISREG(inode->i_mode) &&
109 !S_ISDIR(inode->i_mode) &&
110 !S_ISLNK(inode->i_mode))
114 memcpy(&handle.ha_fsid, ip->i_mount->m_fixedfsid, sizeof(xfs_fsid_t));
116 if (cmd == XFS_IOC_PATH_TO_FSHANDLE) {
118 * This handle only contains an fsid, zero the rest.
120 memset(&handle.ha_fid, 0, sizeof(handle.ha_fid));
121 hsize = sizeof(xfs_fsid_t);
125 lock_mode = xfs_ilock_map_shared(ip);
126 handle.ha_fid.fid_len = sizeof(xfs_fid_t) -
127 sizeof(handle.ha_fid.fid_len);
128 handle.ha_fid.fid_pad = 0;
129 handle.ha_fid.fid_gen = ip->i_d.di_gen;
130 handle.ha_fid.fid_ino = ip->i_ino;
131 xfs_iunlock_map_shared(ip, lock_mode);
133 hsize = XFS_HSIZE(handle);
137 if (copy_to_user(hreq->ohandle, &handle, hsize) ||
138 copy_to_user(hreq->ohandlen, &hsize, sizeof(__s32)))
144 if (cmd == XFS_IOC_FD_TO_HANDLE)
152 * No need to do permission checks on the various pathname components
153 * as the handle operations are privileged.
156 xfs_handle_acceptable(
158 struct dentry *dentry)
164 * Convert userspace handle data into a dentry.
167 xfs_handle_to_dentry(
168 struct file *parfilp,
169 void __user *uhandle,
173 struct xfs_fid64 fid;
176 * Only allow handle opens under a directory.
178 if (!S_ISDIR(parfilp->f_path.dentry->d_inode->i_mode))
179 return ERR_PTR(-ENOTDIR);
181 if (hlen != sizeof(xfs_handle_t))
182 return ERR_PTR(-EINVAL);
183 if (copy_from_user(&handle, uhandle, hlen))
184 return ERR_PTR(-EFAULT);
185 if (handle.ha_fid.fid_len !=
186 sizeof(handle.ha_fid) - sizeof(handle.ha_fid.fid_len))
187 return ERR_PTR(-EINVAL);
189 memset(&fid, 0, sizeof(struct fid));
190 fid.ino = handle.ha_fid.fid_ino;
191 fid.gen = handle.ha_fid.fid_gen;
193 return exportfs_decode_fh(parfilp->f_path.mnt, (struct fid *)&fid, 3,
194 FILEID_INO32_GEN | XFS_FILEID_TYPE_64FLAG,
195 xfs_handle_acceptable, NULL);
198 STATIC struct dentry *
199 xfs_handlereq_to_dentry(
200 struct file *parfilp,
201 xfs_fsop_handlereq_t *hreq)
203 return xfs_handle_to_dentry(parfilp, hreq->ihandle, hreq->ihandlen);
208 struct file *parfilp,
209 xfs_fsop_handlereq_t *hreq)
211 const struct cred *cred = current_cred();
217 struct dentry *dentry;
219 if (!capable(CAP_SYS_ADMIN))
220 return -XFS_ERROR(EPERM);
222 dentry = xfs_handlereq_to_dentry(parfilp, hreq);
224 return PTR_ERR(dentry);
225 inode = dentry->d_inode;
227 /* Restrict xfs_open_by_handle to directories & regular files. */
228 if (!(S_ISREG(inode->i_mode) || S_ISDIR(inode->i_mode))) {
229 error = -XFS_ERROR(EPERM);
233 #if BITS_PER_LONG != 32
234 hreq->oflags |= O_LARGEFILE;
237 /* Put open permission in namei format. */
238 permflag = hreq->oflags;
239 if ((permflag+1) & O_ACCMODE)
241 if (permflag & O_TRUNC)
244 if ((!(permflag & O_APPEND) || (permflag & O_TRUNC)) &&
245 (permflag & FMODE_WRITE) && IS_APPEND(inode)) {
246 error = -XFS_ERROR(EPERM);
250 if ((permflag & FMODE_WRITE) && IS_IMMUTABLE(inode)) {
251 error = -XFS_ERROR(EACCES);
255 /* Can't write directories. */
256 if (S_ISDIR(inode->i_mode) && (permflag & FMODE_WRITE)) {
257 error = -XFS_ERROR(EISDIR);
261 fd = get_unused_fd();
267 filp = dentry_open(dentry, mntget(parfilp->f_path.mnt),
271 return PTR_ERR(filp);
274 if (inode->i_mode & S_IFREG) {
275 filp->f_flags |= O_NOATIME;
276 filp->f_mode |= FMODE_NOCMTIME;
279 fd_install(fd, filp);
288 * This is a copy from fs/namei.c:vfs_readlink(), except for removing it's
289 * unused first argument.
304 if (len > (unsigned) buflen)
306 if (copy_to_user(buffer, link, len))
314 xfs_readlink_by_handle(
315 struct file *parfilp,
316 xfs_fsop_handlereq_t *hreq)
318 struct dentry *dentry;
323 if (!capable(CAP_SYS_ADMIN))
324 return -XFS_ERROR(EPERM);
326 dentry = xfs_handlereq_to_dentry(parfilp, hreq);
328 return PTR_ERR(dentry);
330 /* Restrict this handle operation to symlinks only. */
331 if (!S_ISLNK(dentry->d_inode->i_mode)) {
332 error = -XFS_ERROR(EINVAL);
336 if (copy_from_user(&olen, hreq->ohandlen, sizeof(__u32))) {
337 error = -XFS_ERROR(EFAULT);
341 link = kmalloc(MAXPATHLEN+1, GFP_KERNEL);
343 error = -XFS_ERROR(ENOMEM);
347 error = -xfs_readlink(XFS_I(dentry->d_inode), link);
350 error = do_readlink(hreq->ohandle, olen, link);
362 xfs_fssetdm_by_handle(
363 struct file *parfilp,
367 struct fsdmidata fsd;
368 xfs_fsop_setdm_handlereq_t dmhreq;
369 struct dentry *dentry;
371 if (!capable(CAP_MKNOD))
372 return -XFS_ERROR(EPERM);
373 if (copy_from_user(&dmhreq, arg, sizeof(xfs_fsop_setdm_handlereq_t)))
374 return -XFS_ERROR(EFAULT);
376 dentry = xfs_handlereq_to_dentry(parfilp, &dmhreq.hreq);
378 return PTR_ERR(dentry);
380 if (IS_IMMUTABLE(dentry->d_inode) || IS_APPEND(dentry->d_inode)) {
381 error = -XFS_ERROR(EPERM);
385 if (copy_from_user(&fsd, dmhreq.data, sizeof(fsd))) {
386 error = -XFS_ERROR(EFAULT);
390 error = -xfs_set_dmattrs(XFS_I(dentry->d_inode), fsd.fsd_dmevmask,
399 xfs_attrlist_by_handle(
400 struct file *parfilp,
404 attrlist_cursor_kern_t *cursor;
405 xfs_fsop_attrlist_handlereq_t al_hreq;
406 struct dentry *dentry;
409 if (!capable(CAP_SYS_ADMIN))
410 return -XFS_ERROR(EPERM);
411 if (copy_from_user(&al_hreq, arg, sizeof(xfs_fsop_attrlist_handlereq_t)))
412 return -XFS_ERROR(EFAULT);
413 if (al_hreq.buflen > XATTR_LIST_MAX)
414 return -XFS_ERROR(EINVAL);
417 * Reject flags, only allow namespaces.
419 if (al_hreq.flags & ~(ATTR_ROOT | ATTR_SECURE))
420 return -XFS_ERROR(EINVAL);
422 dentry = xfs_handlereq_to_dentry(parfilp, &al_hreq.hreq);
424 return PTR_ERR(dentry);
426 kbuf = kmalloc(al_hreq.buflen, GFP_KERNEL);
430 cursor = (attrlist_cursor_kern_t *)&al_hreq.pos;
431 error = -xfs_attr_list(XFS_I(dentry->d_inode), kbuf, al_hreq.buflen,
432 al_hreq.flags, cursor);
436 if (copy_to_user(al_hreq.buffer, kbuf, al_hreq.buflen))
447 xfs_attrmulti_attr_get(
457 if (*len > XATTR_SIZE_MAX)
459 kbuf = kmalloc(*len, GFP_KERNEL);
463 error = xfs_attr_get(XFS_I(inode), name, kbuf, (int *)len, flags);
467 if (copy_to_user(ubuf, kbuf, *len))
476 xfs_attrmulti_attr_set(
479 const char __user *ubuf,
486 if (IS_IMMUTABLE(inode) || IS_APPEND(inode))
488 if (len > XATTR_SIZE_MAX)
491 kbuf = memdup_user(ubuf, len);
493 return PTR_ERR(kbuf);
495 error = xfs_attr_set(XFS_I(inode), name, kbuf, len, flags);
501 xfs_attrmulti_attr_remove(
506 if (IS_IMMUTABLE(inode) || IS_APPEND(inode))
508 return xfs_attr_remove(XFS_I(inode), name, flags);
512 xfs_attrmulti_by_handle(
513 struct file *parfilp,
517 xfs_attr_multiop_t *ops;
518 xfs_fsop_attrmulti_handlereq_t am_hreq;
519 struct dentry *dentry;
520 unsigned int i, size;
523 if (!capable(CAP_SYS_ADMIN))
524 return -XFS_ERROR(EPERM);
525 if (copy_from_user(&am_hreq, arg, sizeof(xfs_fsop_attrmulti_handlereq_t)))
526 return -XFS_ERROR(EFAULT);
528 dentry = xfs_handlereq_to_dentry(parfilp, &am_hreq.hreq);
530 return PTR_ERR(dentry);
533 size = am_hreq.opcount * sizeof(xfs_attr_multiop_t);
534 if (!size || size > 16 * PAGE_SIZE)
537 ops = memdup_user(am_hreq.ops, size);
539 error = PTR_ERR(ops);
543 attr_name = kmalloc(MAXNAMELEN, GFP_KERNEL);
548 for (i = 0; i < am_hreq.opcount; i++) {
549 ops[i].am_error = strncpy_from_user(attr_name,
550 ops[i].am_attrname, MAXNAMELEN);
551 if (ops[i].am_error == 0 || ops[i].am_error == MAXNAMELEN)
553 if (ops[i].am_error < 0)
556 switch (ops[i].am_opcode) {
558 ops[i].am_error = xfs_attrmulti_attr_get(
559 dentry->d_inode, attr_name,
560 ops[i].am_attrvalue, &ops[i].am_length,
564 ops[i].am_error = mnt_want_write(parfilp->f_path.mnt);
567 ops[i].am_error = xfs_attrmulti_attr_set(
568 dentry->d_inode, attr_name,
569 ops[i].am_attrvalue, ops[i].am_length,
571 mnt_drop_write(parfilp->f_path.mnt);
574 ops[i].am_error = mnt_want_write(parfilp->f_path.mnt);
577 ops[i].am_error = xfs_attrmulti_attr_remove(
578 dentry->d_inode, attr_name,
580 mnt_drop_write(parfilp->f_path.mnt);
583 ops[i].am_error = EINVAL;
587 if (copy_to_user(am_hreq.ops, ops, size))
588 error = XFS_ERROR(EFAULT);
600 struct xfs_inode *ip,
611 * Only allow the sys admin to reserve space unless
612 * unwritten extents are enabled.
614 if (!xfs_sb_version_hasextflgbit(&ip->i_mount->m_sb) &&
615 !capable(CAP_SYS_ADMIN))
616 return -XFS_ERROR(EPERM);
618 if (inode->i_flags & (S_IMMUTABLE|S_APPEND))
619 return -XFS_ERROR(EPERM);
621 if (!(filp->f_mode & FMODE_WRITE))
622 return -XFS_ERROR(EBADF);
624 if (!S_ISREG(inode->i_mode))
625 return -XFS_ERROR(EINVAL);
627 if (filp->f_flags & (O_NDELAY|O_NONBLOCK))
628 attr_flags |= XFS_ATTR_NONBLOCK;
629 if (ioflags & IO_INVIS)
630 attr_flags |= XFS_ATTR_DMI;
632 error = xfs_change_file_space(ip, cmd, bf, filp->f_pos, attr_flags);
642 xfs_fsop_bulkreq_t bulkreq;
643 int count; /* # of records returned */
644 xfs_ino_t inlast; /* last inode number */
648 /* done = 1 if there are more stats to get and if bulkstat */
649 /* should be called again (unused here, but used in dmapi) */
651 if (!capable(CAP_SYS_ADMIN))
654 if (XFS_FORCED_SHUTDOWN(mp))
655 return -XFS_ERROR(EIO);
657 if (copy_from_user(&bulkreq, arg, sizeof(xfs_fsop_bulkreq_t)))
658 return -XFS_ERROR(EFAULT);
660 if (copy_from_user(&inlast, bulkreq.lastip, sizeof(__s64)))
661 return -XFS_ERROR(EFAULT);
663 if ((count = bulkreq.icount) <= 0)
664 return -XFS_ERROR(EINVAL);
666 if (bulkreq.ubuffer == NULL)
667 return -XFS_ERROR(EINVAL);
669 if (cmd == XFS_IOC_FSINUMBERS)
670 error = xfs_inumbers(mp, &inlast, &count,
671 bulkreq.ubuffer, xfs_inumbers_fmt);
672 else if (cmd == XFS_IOC_FSBULKSTAT_SINGLE)
673 error = xfs_bulkstat_single(mp, &inlast,
674 bulkreq.ubuffer, &done);
675 else /* XFS_IOC_FSBULKSTAT */
676 error = xfs_bulkstat(mp, &inlast, &count,
677 (bulkstat_one_pf)xfs_bulkstat_one, NULL,
678 sizeof(xfs_bstat_t), bulkreq.ubuffer,
679 BULKSTAT_FG_QUICK, &done);
684 if (bulkreq.ocount != NULL) {
685 if (copy_to_user(bulkreq.lastip, &inlast,
687 return -XFS_ERROR(EFAULT);
689 if (copy_to_user(bulkreq.ocount, &count, sizeof(count)))
690 return -XFS_ERROR(EFAULT);
697 xfs_ioc_fsgeometry_v1(
701 xfs_fsop_geom_v1_t fsgeo;
704 error = xfs_fs_geometry(mp, (xfs_fsop_geom_t *)&fsgeo, 3);
708 if (copy_to_user(arg, &fsgeo, sizeof(fsgeo)))
709 return -XFS_ERROR(EFAULT);
718 xfs_fsop_geom_t fsgeo;
721 error = xfs_fs_geometry(mp, &fsgeo, 4);
725 if (copy_to_user(arg, &fsgeo, sizeof(fsgeo)))
726 return -XFS_ERROR(EFAULT);
731 * Linux extended inode flags interface.
735 xfs_merge_ioc_xflags(
739 unsigned int xflags = start;
741 if (flags & FS_IMMUTABLE_FL)
742 xflags |= XFS_XFLAG_IMMUTABLE;
744 xflags &= ~XFS_XFLAG_IMMUTABLE;
745 if (flags & FS_APPEND_FL)
746 xflags |= XFS_XFLAG_APPEND;
748 xflags &= ~XFS_XFLAG_APPEND;
749 if (flags & FS_SYNC_FL)
750 xflags |= XFS_XFLAG_SYNC;
752 xflags &= ~XFS_XFLAG_SYNC;
753 if (flags & FS_NOATIME_FL)
754 xflags |= XFS_XFLAG_NOATIME;
756 xflags &= ~XFS_XFLAG_NOATIME;
757 if (flags & FS_NODUMP_FL)
758 xflags |= XFS_XFLAG_NODUMP;
760 xflags &= ~XFS_XFLAG_NODUMP;
769 unsigned int flags = 0;
771 if (di_flags & XFS_DIFLAG_IMMUTABLE)
772 flags |= FS_IMMUTABLE_FL;
773 if (di_flags & XFS_DIFLAG_APPEND)
774 flags |= FS_APPEND_FL;
775 if (di_flags & XFS_DIFLAG_SYNC)
777 if (di_flags & XFS_DIFLAG_NOATIME)
778 flags |= FS_NOATIME_FL;
779 if (di_flags & XFS_DIFLAG_NODUMP)
780 flags |= FS_NODUMP_FL;
792 memset(&fa, 0, sizeof(struct fsxattr));
794 xfs_ilock(ip, XFS_ILOCK_SHARED);
795 fa.fsx_xflags = xfs_ip2xflags(ip);
796 fa.fsx_extsize = ip->i_d.di_extsize << ip->i_mount->m_sb.sb_blocklog;
797 fa.fsx_projid = ip->i_d.di_projid;
801 if (ip->i_afp->if_flags & XFS_IFEXTENTS)
802 fa.fsx_nextents = ip->i_afp->if_bytes /
803 sizeof(xfs_bmbt_rec_t);
805 fa.fsx_nextents = ip->i_d.di_anextents;
809 if (ip->i_df.if_flags & XFS_IFEXTENTS)
810 fa.fsx_nextents = ip->i_df.if_bytes /
811 sizeof(xfs_bmbt_rec_t);
813 fa.fsx_nextents = ip->i_d.di_nextents;
815 xfs_iunlock(ip, XFS_ILOCK_SHARED);
817 if (copy_to_user(arg, &fa, sizeof(fa)))
824 struct xfs_inode *ip,
827 unsigned int di_flags;
829 /* can't set PREALLOC this way, just preserve it */
830 di_flags = (ip->i_d.di_flags & XFS_DIFLAG_PREALLOC);
831 if (xflags & XFS_XFLAG_IMMUTABLE)
832 di_flags |= XFS_DIFLAG_IMMUTABLE;
833 if (xflags & XFS_XFLAG_APPEND)
834 di_flags |= XFS_DIFLAG_APPEND;
835 if (xflags & XFS_XFLAG_SYNC)
836 di_flags |= XFS_DIFLAG_SYNC;
837 if (xflags & XFS_XFLAG_NOATIME)
838 di_flags |= XFS_DIFLAG_NOATIME;
839 if (xflags & XFS_XFLAG_NODUMP)
840 di_flags |= XFS_DIFLAG_NODUMP;
841 if (xflags & XFS_XFLAG_PROJINHERIT)
842 di_flags |= XFS_DIFLAG_PROJINHERIT;
843 if (xflags & XFS_XFLAG_NODEFRAG)
844 di_flags |= XFS_DIFLAG_NODEFRAG;
845 if (xflags & XFS_XFLAG_FILESTREAM)
846 di_flags |= XFS_DIFLAG_FILESTREAM;
847 if ((ip->i_d.di_mode & S_IFMT) == S_IFDIR) {
848 if (xflags & XFS_XFLAG_RTINHERIT)
849 di_flags |= XFS_DIFLAG_RTINHERIT;
850 if (xflags & XFS_XFLAG_NOSYMLINKS)
851 di_flags |= XFS_DIFLAG_NOSYMLINKS;
852 if (xflags & XFS_XFLAG_EXTSZINHERIT)
853 di_flags |= XFS_DIFLAG_EXTSZINHERIT;
854 } else if ((ip->i_d.di_mode & S_IFMT) == S_IFREG) {
855 if (xflags & XFS_XFLAG_REALTIME)
856 di_flags |= XFS_DIFLAG_REALTIME;
857 if (xflags & XFS_XFLAG_EXTSIZE)
858 di_flags |= XFS_DIFLAG_EXTSIZE;
861 ip->i_d.di_flags = di_flags;
865 xfs_diflags_to_linux(
866 struct xfs_inode *ip)
868 struct inode *inode = VFS_I(ip);
869 unsigned int xflags = xfs_ip2xflags(ip);
871 if (xflags & XFS_XFLAG_IMMUTABLE)
872 inode->i_flags |= S_IMMUTABLE;
874 inode->i_flags &= ~S_IMMUTABLE;
875 if (xflags & XFS_XFLAG_APPEND)
876 inode->i_flags |= S_APPEND;
878 inode->i_flags &= ~S_APPEND;
879 if (xflags & XFS_XFLAG_SYNC)
880 inode->i_flags |= S_SYNC;
882 inode->i_flags &= ~S_SYNC;
883 if (xflags & XFS_XFLAG_NOATIME)
884 inode->i_flags |= S_NOATIME;
886 inode->i_flags &= ~S_NOATIME;
890 #define FSX_EXTSIZE 2
892 #define FSX_NONBLOCK 8
900 struct xfs_mount *mp = ip->i_mount;
901 struct xfs_trans *tp;
902 unsigned int lock_flags = 0;
903 struct xfs_dquot *udqp = NULL;
904 struct xfs_dquot *gdqp = NULL;
905 struct xfs_dquot *olddquot = NULL;
908 xfs_itrace_entry(ip);
910 if (mp->m_flags & XFS_MOUNT_RDONLY)
911 return XFS_ERROR(EROFS);
912 if (XFS_FORCED_SHUTDOWN(mp))
913 return XFS_ERROR(EIO);
916 * If disk quotas is on, we make sure that the dquots do exist on disk,
917 * before we start any other transactions. Trying to do this later
918 * is messy. We don't care to take a readlock to look at the ids
919 * in inode here, because we can't hold it across the trans_reserve.
920 * If the IDs do change before we take the ilock, we're covered
921 * because the i_*dquot fields will get updated anyway.
923 if (XFS_IS_QUOTA_ON(mp) && (mask & FSX_PROJID)) {
924 code = xfs_qm_vop_dqalloc(ip, ip->i_d.di_uid,
925 ip->i_d.di_gid, fa->fsx_projid,
926 XFS_QMOPT_PQUOTA, &udqp, &gdqp);
932 * For the other attributes, we acquire the inode lock and
933 * first do an error checking pass.
935 tp = xfs_trans_alloc(mp, XFS_TRANS_SETATTR_NOT_SIZE);
936 code = xfs_trans_reserve(tp, 0, XFS_ICHANGE_LOG_RES(mp), 0, 0, 0);
940 lock_flags = XFS_ILOCK_EXCL;
941 xfs_ilock(ip, lock_flags);
944 * CAP_FOWNER overrides the following restrictions:
946 * The user ID of the calling process must be equal
947 * to the file owner ID, except in cases where the
948 * CAP_FSETID capability is applicable.
950 if (current_fsuid() != ip->i_d.di_uid && !capable(CAP_FOWNER)) {
951 code = XFS_ERROR(EPERM);
956 * Do a quota reservation only if projid is actually going to change.
958 if (mask & FSX_PROJID) {
959 if (XFS_IS_QUOTA_RUNNING(mp) &&
960 XFS_IS_PQUOTA_ON(mp) &&
961 ip->i_d.di_projid != fa->fsx_projid) {
963 code = xfs_qm_vop_chown_reserve(tp, ip, udqp, gdqp,
964 capable(CAP_FOWNER) ?
965 XFS_QMOPT_FORCE_RES : 0);
966 if (code) /* out of quota */
971 if (mask & FSX_EXTSIZE) {
973 * Can't change extent size if any extents are allocated.
975 if (ip->i_d.di_nextents &&
976 ((ip->i_d.di_extsize << mp->m_sb.sb_blocklog) !=
978 code = XFS_ERROR(EINVAL); /* EFBIG? */
983 * Extent size must be a multiple of the appropriate block
984 * size, if set at all.
986 if (fa->fsx_extsize != 0) {
989 if (XFS_IS_REALTIME_INODE(ip) ||
990 ((mask & FSX_XFLAGS) &&
991 (fa->fsx_xflags & XFS_XFLAG_REALTIME))) {
992 size = mp->m_sb.sb_rextsize <<
993 mp->m_sb.sb_blocklog;
995 size = mp->m_sb.sb_blocksize;
998 if (fa->fsx_extsize % size) {
999 code = XFS_ERROR(EINVAL);
1006 if (mask & FSX_XFLAGS) {
1008 * Can't change realtime flag if any extents are allocated.
1010 if ((ip->i_d.di_nextents || ip->i_delayed_blks) &&
1011 (XFS_IS_REALTIME_INODE(ip)) !=
1012 (fa->fsx_xflags & XFS_XFLAG_REALTIME)) {
1013 code = XFS_ERROR(EINVAL); /* EFBIG? */
1018 * If realtime flag is set then must have realtime data.
1020 if ((fa->fsx_xflags & XFS_XFLAG_REALTIME)) {
1021 if ((mp->m_sb.sb_rblocks == 0) ||
1022 (mp->m_sb.sb_rextsize == 0) ||
1023 (ip->i_d.di_extsize % mp->m_sb.sb_rextsize)) {
1024 code = XFS_ERROR(EINVAL);
1030 * Can't modify an immutable/append-only file unless
1031 * we have appropriate permission.
1033 if ((ip->i_d.di_flags &
1034 (XFS_DIFLAG_IMMUTABLE|XFS_DIFLAG_APPEND) ||
1036 (XFS_XFLAG_IMMUTABLE | XFS_XFLAG_APPEND))) &&
1037 !capable(CAP_LINUX_IMMUTABLE)) {
1038 code = XFS_ERROR(EPERM);
1043 xfs_trans_ijoin(tp, ip, lock_flags);
1044 xfs_trans_ihold(tp, ip);
1047 * Change file ownership. Must be the owner or privileged.
1049 if (mask & FSX_PROJID) {
1051 * CAP_FSETID overrides the following restrictions:
1053 * The set-user-ID and set-group-ID bits of a file will be
1054 * cleared upon successful return from chown()
1056 if ((ip->i_d.di_mode & (S_ISUID|S_ISGID)) &&
1057 !capable(CAP_FSETID))
1058 ip->i_d.di_mode &= ~(S_ISUID|S_ISGID);
1061 * Change the ownerships and register quota modifications
1062 * in the transaction.
1064 if (ip->i_d.di_projid != fa->fsx_projid) {
1065 if (XFS_IS_QUOTA_RUNNING(mp) && XFS_IS_PQUOTA_ON(mp)) {
1066 olddquot = xfs_qm_vop_chown(tp, ip,
1067 &ip->i_gdquot, gdqp);
1069 ip->i_d.di_projid = fa->fsx_projid;
1072 * We may have to rev the inode as well as
1073 * the superblock version number since projids didn't
1074 * exist before DINODE_VERSION_2 and SB_VERSION_NLINK.
1076 if (ip->i_d.di_version == 1)
1077 xfs_bump_ino_vers2(tp, ip);
1082 if (mask & FSX_EXTSIZE)
1083 ip->i_d.di_extsize = fa->fsx_extsize >> mp->m_sb.sb_blocklog;
1084 if (mask & FSX_XFLAGS) {
1085 xfs_set_diflags(ip, fa->fsx_xflags);
1086 xfs_diflags_to_linux(ip);
1089 xfs_trans_log_inode(tp, ip, XFS_ILOG_CORE);
1090 xfs_ichgtime(ip, XFS_ICHGTIME_CHG);
1092 XFS_STATS_INC(xs_ig_attrchg);
1095 * If this is a synchronous mount, make sure that the
1096 * transaction goes to disk before returning to the user.
1097 * This is slightly sub-optimal in that truncates require
1098 * two sync transactions instead of one for wsync filesystems.
1099 * One for the truncate and one for the timestamps since we
1100 * don't want to change the timestamps unless we're sure the
1101 * truncate worked. Truncates are less than 1% of the laddis
1102 * mix so this probably isn't worth the trouble to optimize.
1104 if (mp->m_flags & XFS_MOUNT_WSYNC)
1105 xfs_trans_set_sync(tp);
1106 code = xfs_trans_commit(tp, 0);
1107 xfs_iunlock(ip, lock_flags);
1110 * Release any dquot(s) the inode had kept before chown.
1112 xfs_qm_dqrele(olddquot);
1113 xfs_qm_dqrele(udqp);
1114 xfs_qm_dqrele(gdqp);
1119 if (DM_EVENT_ENABLED(ip, DM_EVENT_ATTRIBUTE)) {
1120 XFS_SEND_NAMESP(mp, DM_EVENT_ATTRIBUTE, ip, DM_RIGHT_NULL,
1121 NULL, DM_RIGHT_NULL, NULL, NULL, 0, 0,
1122 (mask & FSX_NONBLOCK) ? DM_FLAGS_NDELAY : 0);
1128 xfs_qm_dqrele(udqp);
1129 xfs_qm_dqrele(gdqp);
1130 xfs_trans_cancel(tp, 0);
1132 xfs_iunlock(ip, lock_flags);
1145 if (copy_from_user(&fa, arg, sizeof(fa)))
1148 mask = FSX_XFLAGS | FSX_EXTSIZE | FSX_PROJID;
1149 if (filp->f_flags & (O_NDELAY|O_NONBLOCK))
1150 mask |= FSX_NONBLOCK;
1152 return -xfs_ioctl_setattr(ip, &fa, mask);
1162 flags = xfs_di2lxflags(ip->i_d.di_flags);
1163 if (copy_to_user(arg, &flags, sizeof(flags)))
1178 if (copy_from_user(&flags, arg, sizeof(flags)))
1181 if (flags & ~(FS_IMMUTABLE_FL | FS_APPEND_FL | \
1182 FS_NOATIME_FL | FS_NODUMP_FL | \
1187 if (filp->f_flags & (O_NDELAY|O_NONBLOCK))
1188 mask |= FSX_NONBLOCK;
1189 fa.fsx_xflags = xfs_merge_ioc_xflags(flags, xfs_ip2xflags(ip));
1191 return -xfs_ioctl_setattr(ip, &fa, mask);
1195 xfs_getbmap_format(void **ap, struct getbmapx *bmv, int *full)
1197 struct getbmap __user *base = *ap;
1199 /* copy only getbmap portion (not getbmapx) */
1200 if (copy_to_user(base, bmv, sizeof(struct getbmap)))
1201 return XFS_ERROR(EFAULT);
1203 *ap += sizeof(struct getbmap);
1209 struct xfs_inode *ip,
1214 struct getbmapx bmx;
1217 if (copy_from_user(&bmx, arg, sizeof(struct getbmapx)))
1218 return -XFS_ERROR(EFAULT);
1220 if (bmx.bmv_count < 2)
1221 return -XFS_ERROR(EINVAL);
1223 bmx.bmv_iflags = (cmd == XFS_IOC_GETBMAPA ? BMV_IF_ATTRFORK : 0);
1224 if (ioflags & IO_INVIS)
1225 bmx.bmv_iflags |= BMV_IF_NO_DMAPI_READ;
1227 error = xfs_getbmap(ip, &bmx, xfs_getbmap_format,
1228 (struct getbmap *)arg+1);
1232 /* copy back header - only size of getbmap */
1233 if (copy_to_user(arg, &bmx, sizeof(struct getbmap)))
1234 return -XFS_ERROR(EFAULT);
1239 xfs_getbmapx_format(void **ap, struct getbmapx *bmv, int *full)
1241 struct getbmapx __user *base = *ap;
1243 if (copy_to_user(base, bmv, sizeof(struct getbmapx)))
1244 return XFS_ERROR(EFAULT);
1246 *ap += sizeof(struct getbmapx);
1252 struct xfs_inode *ip,
1255 struct getbmapx bmx;
1258 if (copy_from_user(&bmx, arg, sizeof(bmx)))
1259 return -XFS_ERROR(EFAULT);
1261 if (bmx.bmv_count < 2)
1262 return -XFS_ERROR(EINVAL);
1264 if (bmx.bmv_iflags & (~BMV_IF_VALID))
1265 return -XFS_ERROR(EINVAL);
1267 error = xfs_getbmap(ip, &bmx, xfs_getbmapx_format,
1268 (struct getbmapx *)arg+1);
1272 /* copy back header */
1273 if (copy_to_user(arg, &bmx, sizeof(struct getbmapx)))
1274 return -XFS_ERROR(EFAULT);
1280 * Note: some of the ioctl's return positive numbers as a
1281 * byte count indicating success, such as readlink_by_handle.
1282 * So we don't "sign flip" like most other routines. This means
1283 * true errors need to be returned as a negative value.
1291 struct inode *inode = filp->f_path.dentry->d_inode;
1292 struct xfs_inode *ip = XFS_I(inode);
1293 struct xfs_mount *mp = ip->i_mount;
1294 void __user *arg = (void __user *)p;
1298 if (filp->f_mode & FMODE_NOCMTIME)
1299 ioflags |= IO_INVIS;
1301 xfs_itrace_entry(ip);
1304 case XFS_IOC_ALLOCSP:
1305 case XFS_IOC_FREESP:
1306 case XFS_IOC_RESVSP:
1307 case XFS_IOC_UNRESVSP:
1308 case XFS_IOC_ALLOCSP64:
1309 case XFS_IOC_FREESP64:
1310 case XFS_IOC_RESVSP64:
1311 case XFS_IOC_UNRESVSP64: {
1314 if (copy_from_user(&bf, arg, sizeof(bf)))
1315 return -XFS_ERROR(EFAULT);
1316 return xfs_ioc_space(ip, inode, filp, ioflags, cmd, &bf);
1318 case XFS_IOC_DIOINFO: {
1320 xfs_buftarg_t *target =
1321 XFS_IS_REALTIME_INODE(ip) ?
1322 mp->m_rtdev_targp : mp->m_ddev_targp;
1324 da.d_mem = da.d_miniosz = 1 << target->bt_sshift;
1325 da.d_maxiosz = INT_MAX & ~(da.d_miniosz - 1);
1327 if (copy_to_user(arg, &da, sizeof(da)))
1328 return -XFS_ERROR(EFAULT);
1332 case XFS_IOC_FSBULKSTAT_SINGLE:
1333 case XFS_IOC_FSBULKSTAT:
1334 case XFS_IOC_FSINUMBERS:
1335 return xfs_ioc_bulkstat(mp, cmd, arg);
1337 case XFS_IOC_FSGEOMETRY_V1:
1338 return xfs_ioc_fsgeometry_v1(mp, arg);
1340 case XFS_IOC_FSGEOMETRY:
1341 return xfs_ioc_fsgeometry(mp, arg);
1343 case XFS_IOC_GETVERSION:
1344 return put_user(inode->i_generation, (int __user *)arg);
1346 case XFS_IOC_FSGETXATTR:
1347 return xfs_ioc_fsgetxattr(ip, 0, arg);
1348 case XFS_IOC_FSGETXATTRA:
1349 return xfs_ioc_fsgetxattr(ip, 1, arg);
1350 case XFS_IOC_FSSETXATTR:
1351 return xfs_ioc_fssetxattr(ip, filp, arg);
1352 case XFS_IOC_GETXFLAGS:
1353 return xfs_ioc_getxflags(ip, arg);
1354 case XFS_IOC_SETXFLAGS:
1355 return xfs_ioc_setxflags(ip, filp, arg);
1357 case XFS_IOC_FSSETDM: {
1358 struct fsdmidata dmi;
1360 if (copy_from_user(&dmi, arg, sizeof(dmi)))
1361 return -XFS_ERROR(EFAULT);
1363 error = xfs_set_dmattrs(ip, dmi.fsd_dmevmask,
1368 case XFS_IOC_GETBMAP:
1369 case XFS_IOC_GETBMAPA:
1370 return xfs_ioc_getbmap(ip, ioflags, cmd, arg);
1372 case XFS_IOC_GETBMAPX:
1373 return xfs_ioc_getbmapx(ip, arg);
1375 case XFS_IOC_FD_TO_HANDLE:
1376 case XFS_IOC_PATH_TO_HANDLE:
1377 case XFS_IOC_PATH_TO_FSHANDLE: {
1378 xfs_fsop_handlereq_t hreq;
1380 if (copy_from_user(&hreq, arg, sizeof(hreq)))
1381 return -XFS_ERROR(EFAULT);
1382 return xfs_find_handle(cmd, &hreq);
1384 case XFS_IOC_OPEN_BY_HANDLE: {
1385 xfs_fsop_handlereq_t hreq;
1387 if (copy_from_user(&hreq, arg, sizeof(xfs_fsop_handlereq_t)))
1388 return -XFS_ERROR(EFAULT);
1389 return xfs_open_by_handle(filp, &hreq);
1391 case XFS_IOC_FSSETDM_BY_HANDLE:
1392 return xfs_fssetdm_by_handle(filp, arg);
1394 case XFS_IOC_READLINK_BY_HANDLE: {
1395 xfs_fsop_handlereq_t hreq;
1397 if (copy_from_user(&hreq, arg, sizeof(xfs_fsop_handlereq_t)))
1398 return -XFS_ERROR(EFAULT);
1399 return xfs_readlink_by_handle(filp, &hreq);
1401 case XFS_IOC_ATTRLIST_BY_HANDLE:
1402 return xfs_attrlist_by_handle(filp, arg);
1404 case XFS_IOC_ATTRMULTI_BY_HANDLE:
1405 return xfs_attrmulti_by_handle(filp, arg);
1407 case XFS_IOC_SWAPEXT: {
1408 struct xfs_swapext sxp;
1410 if (copy_from_user(&sxp, arg, sizeof(xfs_swapext_t)))
1411 return -XFS_ERROR(EFAULT);
1412 error = xfs_swapext(&sxp);
1416 case XFS_IOC_FSCOUNTS: {
1417 xfs_fsop_counts_t out;
1419 error = xfs_fs_counts(mp, &out);
1423 if (copy_to_user(arg, &out, sizeof(out)))
1424 return -XFS_ERROR(EFAULT);
1428 case XFS_IOC_SET_RESBLKS: {
1429 xfs_fsop_resblks_t inout;
1432 if (!capable(CAP_SYS_ADMIN))
1435 if (copy_from_user(&inout, arg, sizeof(inout)))
1436 return -XFS_ERROR(EFAULT);
1438 /* input parameter is passed in resblks field of structure */
1440 error = xfs_reserve_blocks(mp, &in, &inout);
1444 if (copy_to_user(arg, &inout, sizeof(inout)))
1445 return -XFS_ERROR(EFAULT);
1449 case XFS_IOC_GET_RESBLKS: {
1450 xfs_fsop_resblks_t out;
1452 if (!capable(CAP_SYS_ADMIN))
1455 error = xfs_reserve_blocks(mp, NULL, &out);
1459 if (copy_to_user(arg, &out, sizeof(out)))
1460 return -XFS_ERROR(EFAULT);
1465 case XFS_IOC_FSGROWFSDATA: {
1466 xfs_growfs_data_t in;
1468 if (copy_from_user(&in, arg, sizeof(in)))
1469 return -XFS_ERROR(EFAULT);
1471 error = xfs_growfs_data(mp, &in);
1475 case XFS_IOC_FSGROWFSLOG: {
1476 xfs_growfs_log_t in;
1478 if (copy_from_user(&in, arg, sizeof(in)))
1479 return -XFS_ERROR(EFAULT);
1481 error = xfs_growfs_log(mp, &in);
1485 case XFS_IOC_FSGROWFSRT: {
1488 if (copy_from_user(&in, arg, sizeof(in)))
1489 return -XFS_ERROR(EFAULT);
1491 error = xfs_growfs_rt(mp, &in);
1495 case XFS_IOC_GOINGDOWN: {
1498 if (!capable(CAP_SYS_ADMIN))
1501 if (get_user(in, (__uint32_t __user *)arg))
1502 return -XFS_ERROR(EFAULT);
1504 error = xfs_fs_goingdown(mp, in);
1508 case XFS_IOC_ERROR_INJECTION: {
1509 xfs_error_injection_t in;
1511 if (!capable(CAP_SYS_ADMIN))
1514 if (copy_from_user(&in, arg, sizeof(in)))
1515 return -XFS_ERROR(EFAULT);
1517 error = xfs_errortag_add(in.errtag, mp);
1521 case XFS_IOC_ERROR_CLEARALL:
1522 if (!capable(CAP_SYS_ADMIN))
1525 error = xfs_errortag_clearall(mp, 1);