2 * Copyright (c) 2000-2005 Silicon Graphics, Inc.
5 * This program is free software; you can redistribute it and/or
6 * modify it under the terms of the GNU General Public License as
7 * published by the Free Software Foundation.
9 * This program is distributed in the hope that it would be useful,
10 * but WITHOUT ANY WARRANTY; without even the implied warranty of
11 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12 * GNU General Public License for more details.
14 * You should have received a copy of the GNU General Public License
15 * along with this program; if not, write the Free Software Foundation,
16 * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
20 #include "xfs_shared.h"
21 #include "xfs_format.h"
22 #include "xfs_log_format.h"
23 #include "xfs_trans_resv.h"
24 #include "xfs_mount.h"
25 #include "xfs_inode.h"
26 #include "xfs_ioctl.h"
27 #include "xfs_alloc.h"
28 #include "xfs_rtalloc.h"
29 #include "xfs_itable.h"
30 #include "xfs_error.h"
33 #include "xfs_bmap_util.h"
34 #include "xfs_fsops.h"
35 #include "xfs_discard.h"
36 #include "xfs_quota.h"
37 #include "xfs_export.h"
38 #include "xfs_trace.h"
39 #include "xfs_icache.h"
40 #include "xfs_symlink.h"
41 #include "xfs_trans.h"
43 #include <linux/capability.h>
44 #include <linux/dcache.h>
45 #include <linux/mount.h>
46 #include <linux/namei.h>
47 #include <linux/pagemap.h>
48 #include <linux/slab.h>
49 #include <linux/exportfs.h>
52 * xfs_find_handle maps from userspace xfs_fsop_handlereq structure to
53 * a file or fs handle.
55 * XFS_IOC_PATH_TO_FSHANDLE
56 * returns fs handle for a mount point or path within that mount point
57 * XFS_IOC_FD_TO_HANDLE
58 * returns full handle for a FD opened in user space
59 * XFS_IOC_PATH_TO_HANDLE
60 * returns full handle for a path
65 xfs_fsop_handlereq_t *hreq)
75 if (cmd == XFS_IOC_FD_TO_HANDLE) {
79 inode = file_inode(f.file);
81 error = user_lpath((const char __user *)hreq->path, &path);
84 inode = path.dentry->d_inode;
89 * We can only generate handles for inodes residing on a XFS filesystem,
90 * and only for regular files, directories or symbolic links.
93 if (inode->i_sb->s_magic != XFS_SB_MAGIC)
97 if (!S_ISREG(inode->i_mode) &&
98 !S_ISDIR(inode->i_mode) &&
99 !S_ISLNK(inode->i_mode))
103 memcpy(&handle.ha_fsid, ip->i_mount->m_fixedfsid, sizeof(xfs_fsid_t));
105 if (cmd == XFS_IOC_PATH_TO_FSHANDLE) {
107 * This handle only contains an fsid, zero the rest.
109 memset(&handle.ha_fid, 0, sizeof(handle.ha_fid));
110 hsize = sizeof(xfs_fsid_t);
112 handle.ha_fid.fid_len = sizeof(xfs_fid_t) -
113 sizeof(handle.ha_fid.fid_len);
114 handle.ha_fid.fid_pad = 0;
115 handle.ha_fid.fid_gen = ip->i_d.di_gen;
116 handle.ha_fid.fid_ino = ip->i_ino;
118 hsize = XFS_HSIZE(handle);
122 if (copy_to_user(hreq->ohandle, &handle, hsize) ||
123 copy_to_user(hreq->ohandlen, &hsize, sizeof(__s32)))
129 if (cmd == XFS_IOC_FD_TO_HANDLE)
137 * No need to do permission checks on the various pathname components
138 * as the handle operations are privileged.
141 xfs_handle_acceptable(
143 struct dentry *dentry)
149 * Convert userspace handle data into a dentry.
152 xfs_handle_to_dentry(
153 struct file *parfilp,
154 void __user *uhandle,
158 struct xfs_fid64 fid;
161 * Only allow handle opens under a directory.
163 if (!S_ISDIR(file_inode(parfilp)->i_mode))
164 return ERR_PTR(-ENOTDIR);
166 if (hlen != sizeof(xfs_handle_t))
167 return ERR_PTR(-EINVAL);
168 if (copy_from_user(&handle, uhandle, hlen))
169 return ERR_PTR(-EFAULT);
170 if (handle.ha_fid.fid_len !=
171 sizeof(handle.ha_fid) - sizeof(handle.ha_fid.fid_len))
172 return ERR_PTR(-EINVAL);
174 memset(&fid, 0, sizeof(struct fid));
175 fid.ino = handle.ha_fid.fid_ino;
176 fid.gen = handle.ha_fid.fid_gen;
178 return exportfs_decode_fh(parfilp->f_path.mnt, (struct fid *)&fid, 3,
179 FILEID_INO32_GEN | XFS_FILEID_TYPE_64FLAG,
180 xfs_handle_acceptable, NULL);
183 STATIC struct dentry *
184 xfs_handlereq_to_dentry(
185 struct file *parfilp,
186 xfs_fsop_handlereq_t *hreq)
188 return xfs_handle_to_dentry(parfilp, hreq->ihandle, hreq->ihandlen);
193 struct file *parfilp,
194 xfs_fsop_handlereq_t *hreq)
196 const struct cred *cred = current_cred();
202 struct dentry *dentry;
206 if (!capable(CAP_SYS_ADMIN))
209 dentry = xfs_handlereq_to_dentry(parfilp, hreq);
211 return PTR_ERR(dentry);
212 inode = dentry->d_inode;
214 /* Restrict xfs_open_by_handle to directories & regular files. */
215 if (!(S_ISREG(inode->i_mode) || S_ISDIR(inode->i_mode))) {
220 #if BITS_PER_LONG != 32
221 hreq->oflags |= O_LARGEFILE;
224 permflag = hreq->oflags;
225 fmode = OPEN_FMODE(permflag);
226 if ((!(permflag & O_APPEND) || (permflag & O_TRUNC)) &&
227 (fmode & FMODE_WRITE) && IS_APPEND(inode)) {
232 if ((fmode & FMODE_WRITE) && IS_IMMUTABLE(inode)) {
237 /* Can't write directories. */
238 if (S_ISDIR(inode->i_mode) && (fmode & FMODE_WRITE)) {
243 fd = get_unused_fd_flags(0);
249 path.mnt = parfilp->f_path.mnt;
250 path.dentry = dentry;
251 filp = dentry_open(&path, hreq->oflags, cred);
255 return PTR_ERR(filp);
258 if (S_ISREG(inode->i_mode)) {
259 filp->f_flags |= O_NOATIME;
260 filp->f_mode |= FMODE_NOCMTIME;
263 fd_install(fd, filp);
272 xfs_readlink_by_handle(
273 struct file *parfilp,
274 xfs_fsop_handlereq_t *hreq)
276 struct dentry *dentry;
281 if (!capable(CAP_SYS_ADMIN))
284 dentry = xfs_handlereq_to_dentry(parfilp, hreq);
286 return PTR_ERR(dentry);
288 /* Restrict this handle operation to symlinks only. */
289 if (!S_ISLNK(dentry->d_inode->i_mode)) {
294 if (copy_from_user(&olen, hreq->ohandlen, sizeof(__u32))) {
299 link = kmalloc(MAXPATHLEN+1, GFP_KERNEL);
305 error = xfs_readlink(XFS_I(dentry->d_inode), link);
308 error = readlink_copy(hreq->ohandle, olen, link);
325 xfs_mount_t *mp = ip->i_mount;
329 if (!capable(CAP_SYS_ADMIN))
332 if (XFS_FORCED_SHUTDOWN(mp))
335 tp = xfs_trans_alloc(mp, XFS_TRANS_SET_DMATTRS);
336 error = xfs_trans_reserve(tp, &M_RES(mp)->tr_ichange, 0, 0);
338 xfs_trans_cancel(tp, 0);
341 xfs_ilock(ip, XFS_ILOCK_EXCL);
342 xfs_trans_ijoin(tp, ip, XFS_ILOCK_EXCL);
344 ip->i_d.di_dmevmask = evmask;
345 ip->i_d.di_dmstate = state;
347 xfs_trans_log_inode(tp, ip, XFS_ILOG_CORE);
348 error = xfs_trans_commit(tp, 0);
354 xfs_fssetdm_by_handle(
355 struct file *parfilp,
359 struct fsdmidata fsd;
360 xfs_fsop_setdm_handlereq_t dmhreq;
361 struct dentry *dentry;
363 if (!capable(CAP_MKNOD))
365 if (copy_from_user(&dmhreq, arg, sizeof(xfs_fsop_setdm_handlereq_t)))
368 error = mnt_want_write_file(parfilp);
372 dentry = xfs_handlereq_to_dentry(parfilp, &dmhreq.hreq);
373 if (IS_ERR(dentry)) {
374 mnt_drop_write_file(parfilp);
375 return PTR_ERR(dentry);
378 if (IS_IMMUTABLE(dentry->d_inode) || IS_APPEND(dentry->d_inode)) {
383 if (copy_from_user(&fsd, dmhreq.data, sizeof(fsd))) {
388 error = xfs_set_dmattrs(XFS_I(dentry->d_inode), fsd.fsd_dmevmask,
392 mnt_drop_write_file(parfilp);
398 xfs_attrlist_by_handle(
399 struct file *parfilp,
403 attrlist_cursor_kern_t *cursor;
404 xfs_fsop_attrlist_handlereq_t al_hreq;
405 struct dentry *dentry;
408 if (!capable(CAP_SYS_ADMIN))
410 if (copy_from_user(&al_hreq, arg, sizeof(xfs_fsop_attrlist_handlereq_t)))
412 if (al_hreq.buflen < sizeof(struct attrlist) ||
413 al_hreq.buflen > XATTR_LIST_MAX)
417 * Reject flags, only allow namespaces.
419 if (al_hreq.flags & ~(ATTR_ROOT | ATTR_SECURE))
422 dentry = xfs_handlereq_to_dentry(parfilp, &al_hreq.hreq);
424 return PTR_ERR(dentry);
426 kbuf = kmem_zalloc_large(al_hreq.buflen, KM_SLEEP);
430 cursor = (attrlist_cursor_kern_t *)&al_hreq.pos;
431 error = xfs_attr_list(XFS_I(dentry->d_inode), kbuf, al_hreq.buflen,
432 al_hreq.flags, cursor);
436 if (copy_to_user(al_hreq.buffer, kbuf, al_hreq.buflen))
447 xfs_attrmulti_attr_get(
450 unsigned char __user *ubuf,
457 if (*len > XATTR_SIZE_MAX)
459 kbuf = kmem_zalloc_large(*len, KM_SLEEP);
463 error = xfs_attr_get(XFS_I(inode), name, kbuf, (int *)len, flags);
467 if (copy_to_user(ubuf, kbuf, *len))
476 xfs_attrmulti_attr_set(
479 const unsigned char __user *ubuf,
485 if (IS_IMMUTABLE(inode) || IS_APPEND(inode))
487 if (len > XATTR_SIZE_MAX)
490 kbuf = memdup_user(ubuf, len);
492 return PTR_ERR(kbuf);
494 return xfs_attr_set(XFS_I(inode), name, kbuf, len, flags);
498 xfs_attrmulti_attr_remove(
503 if (IS_IMMUTABLE(inode) || IS_APPEND(inode))
505 return xfs_attr_remove(XFS_I(inode), name, flags);
509 xfs_attrmulti_by_handle(
510 struct file *parfilp,
514 xfs_attr_multiop_t *ops;
515 xfs_fsop_attrmulti_handlereq_t am_hreq;
516 struct dentry *dentry;
517 unsigned int i, size;
518 unsigned char *attr_name;
520 if (!capable(CAP_SYS_ADMIN))
522 if (copy_from_user(&am_hreq, arg, sizeof(xfs_fsop_attrmulti_handlereq_t)))
526 if (am_hreq.opcount >= INT_MAX / sizeof(xfs_attr_multiop_t))
529 dentry = xfs_handlereq_to_dentry(parfilp, &am_hreq.hreq);
531 return PTR_ERR(dentry);
534 size = am_hreq.opcount * sizeof(xfs_attr_multiop_t);
535 if (!size || size > 16 * PAGE_SIZE)
538 ops = memdup_user(am_hreq.ops, size);
540 error = PTR_ERR(ops);
545 attr_name = kmalloc(MAXNAMELEN, GFP_KERNEL);
550 for (i = 0; i < am_hreq.opcount; i++) {
551 ops[i].am_error = strncpy_from_user((char *)attr_name,
552 ops[i].am_attrname, MAXNAMELEN);
553 if (ops[i].am_error == 0 || ops[i].am_error == MAXNAMELEN)
555 if (ops[i].am_error < 0)
558 switch (ops[i].am_opcode) {
560 ops[i].am_error = xfs_attrmulti_attr_get(
561 dentry->d_inode, attr_name,
562 ops[i].am_attrvalue, &ops[i].am_length,
566 ops[i].am_error = mnt_want_write_file(parfilp);
569 ops[i].am_error = xfs_attrmulti_attr_set(
570 dentry->d_inode, attr_name,
571 ops[i].am_attrvalue, ops[i].am_length,
573 mnt_drop_write_file(parfilp);
576 ops[i].am_error = mnt_want_write_file(parfilp);
579 ops[i].am_error = xfs_attrmulti_attr_remove(
580 dentry->d_inode, attr_name,
582 mnt_drop_write_file(parfilp);
585 ops[i].am_error = -EINVAL;
589 if (copy_to_user(am_hreq.ops, ops, size))
602 struct xfs_inode *ip,
610 enum xfs_prealloc_flags flags = 0;
614 * Only allow the sys admin to reserve space unless
615 * unwritten extents are enabled.
617 if (!xfs_sb_version_hasextflgbit(&ip->i_mount->m_sb) &&
618 !capable(CAP_SYS_ADMIN))
621 if (inode->i_flags & (S_IMMUTABLE|S_APPEND))
624 if (!(filp->f_mode & FMODE_WRITE))
627 if (!S_ISREG(inode->i_mode))
630 if (filp->f_flags & O_DSYNC)
631 flags |= XFS_PREALLOC_SYNC;
632 if (ioflags & XFS_IO_INVIS)
633 flags |= XFS_PREALLOC_INVISIBLE;
635 error = mnt_want_write_file(filp);
639 xfs_ilock(ip, XFS_IOLOCK_EXCL);
641 switch (bf->l_whence) {
645 bf->l_start += filp->f_pos;
648 bf->l_start += XFS_ISIZE(ip);
656 * length of <= 0 for resv/unresv/zero is invalid. length for
657 * alloc/free is ignored completely and we have no idea what userspace
658 * might have set it to, so set it to zero to allow range
662 case XFS_IOC_ZERO_RANGE:
664 case XFS_IOC_RESVSP64:
665 case XFS_IOC_UNRESVSP:
666 case XFS_IOC_UNRESVSP64:
667 if (bf->l_len <= 0) {
677 if (bf->l_start < 0 ||
678 bf->l_start > inode->i_sb->s_maxbytes ||
679 bf->l_start + bf->l_len < 0 ||
680 bf->l_start + bf->l_len >= inode->i_sb->s_maxbytes) {
686 case XFS_IOC_ZERO_RANGE:
687 flags |= XFS_PREALLOC_SET;
688 error = xfs_zero_file_space(ip, bf->l_start, bf->l_len);
691 case XFS_IOC_RESVSP64:
692 flags |= XFS_PREALLOC_SET;
693 error = xfs_alloc_file_space(ip, bf->l_start, bf->l_len,
696 case XFS_IOC_UNRESVSP:
697 case XFS_IOC_UNRESVSP64:
698 error = xfs_free_file_space(ip, bf->l_start, bf->l_len);
700 case XFS_IOC_ALLOCSP:
701 case XFS_IOC_ALLOCSP64:
703 case XFS_IOC_FREESP64:
704 flags |= XFS_PREALLOC_CLEAR;
705 if (bf->l_start > XFS_ISIZE(ip)) {
706 error = xfs_alloc_file_space(ip, XFS_ISIZE(ip),
707 bf->l_start - XFS_ISIZE(ip), 0);
712 iattr.ia_valid = ATTR_SIZE;
713 iattr.ia_size = bf->l_start;
715 error = xfs_setattr_size(ip, &iattr);
725 error = xfs_update_prealloc_flags(ip, flags);
728 xfs_iunlock(ip, XFS_IOLOCK_EXCL);
729 mnt_drop_write_file(filp);
739 xfs_fsop_bulkreq_t bulkreq;
740 int count; /* # of records returned */
741 xfs_ino_t inlast; /* last inode number */
745 /* done = 1 if there are more stats to get and if bulkstat */
746 /* should be called again (unused here, but used in dmapi) */
748 if (!capable(CAP_SYS_ADMIN))
751 if (XFS_FORCED_SHUTDOWN(mp))
754 if (copy_from_user(&bulkreq, arg, sizeof(xfs_fsop_bulkreq_t)))
757 if (copy_from_user(&inlast, bulkreq.lastip, sizeof(__s64)))
760 if ((count = bulkreq.icount) <= 0)
763 if (bulkreq.ubuffer == NULL)
766 if (cmd == XFS_IOC_FSINUMBERS)
767 error = xfs_inumbers(mp, &inlast, &count,
768 bulkreq.ubuffer, xfs_inumbers_fmt);
769 else if (cmd == XFS_IOC_FSBULKSTAT_SINGLE)
770 error = xfs_bulkstat_one(mp, inlast, bulkreq.ubuffer,
771 sizeof(xfs_bstat_t), NULL, &done);
772 else /* XFS_IOC_FSBULKSTAT */
773 error = xfs_bulkstat(mp, &inlast, &count, xfs_bulkstat_one,
774 sizeof(xfs_bstat_t), bulkreq.ubuffer,
780 if (bulkreq.ocount != NULL) {
781 if (copy_to_user(bulkreq.lastip, &inlast,
785 if (copy_to_user(bulkreq.ocount, &count, sizeof(count)))
793 xfs_ioc_fsgeometry_v1(
797 xfs_fsop_geom_t fsgeo;
800 error = xfs_fs_geometry(mp, &fsgeo, 3);
805 * Caller should have passed an argument of type
806 * xfs_fsop_geom_v1_t. This is a proper subset of the
807 * xfs_fsop_geom_t that xfs_fs_geometry() fills in.
809 if (copy_to_user(arg, &fsgeo, sizeof(xfs_fsop_geom_v1_t)))
819 xfs_fsop_geom_t fsgeo;
822 error = xfs_fs_geometry(mp, &fsgeo, 4);
826 if (copy_to_user(arg, &fsgeo, sizeof(fsgeo)))
832 * Linux extended inode flags interface.
836 xfs_merge_ioc_xflags(
840 unsigned int xflags = start;
842 if (flags & FS_IMMUTABLE_FL)
843 xflags |= XFS_XFLAG_IMMUTABLE;
845 xflags &= ~XFS_XFLAG_IMMUTABLE;
846 if (flags & FS_APPEND_FL)
847 xflags |= XFS_XFLAG_APPEND;
849 xflags &= ~XFS_XFLAG_APPEND;
850 if (flags & FS_SYNC_FL)
851 xflags |= XFS_XFLAG_SYNC;
853 xflags &= ~XFS_XFLAG_SYNC;
854 if (flags & FS_NOATIME_FL)
855 xflags |= XFS_XFLAG_NOATIME;
857 xflags &= ~XFS_XFLAG_NOATIME;
858 if (flags & FS_NODUMP_FL)
859 xflags |= XFS_XFLAG_NODUMP;
861 xflags &= ~XFS_XFLAG_NODUMP;
870 unsigned int flags = 0;
872 if (di_flags & XFS_DIFLAG_IMMUTABLE)
873 flags |= FS_IMMUTABLE_FL;
874 if (di_flags & XFS_DIFLAG_APPEND)
875 flags |= FS_APPEND_FL;
876 if (di_flags & XFS_DIFLAG_SYNC)
878 if (di_flags & XFS_DIFLAG_NOATIME)
879 flags |= FS_NOATIME_FL;
880 if (di_flags & XFS_DIFLAG_NODUMP)
881 flags |= FS_NODUMP_FL;
893 memset(&fa, 0, sizeof(struct fsxattr));
895 xfs_ilock(ip, XFS_ILOCK_SHARED);
896 fa.fsx_xflags = xfs_ip2xflags(ip);
897 fa.fsx_extsize = ip->i_d.di_extsize << ip->i_mount->m_sb.sb_blocklog;
898 fa.fsx_projid = xfs_get_projid(ip);
902 if (ip->i_afp->if_flags & XFS_IFEXTENTS)
903 fa.fsx_nextents = ip->i_afp->if_bytes /
904 sizeof(xfs_bmbt_rec_t);
906 fa.fsx_nextents = ip->i_d.di_anextents;
910 if (ip->i_df.if_flags & XFS_IFEXTENTS)
911 fa.fsx_nextents = ip->i_df.if_bytes /
912 sizeof(xfs_bmbt_rec_t);
914 fa.fsx_nextents = ip->i_d.di_nextents;
916 xfs_iunlock(ip, XFS_ILOCK_SHARED);
918 if (copy_to_user(arg, &fa, sizeof(fa)))
925 struct xfs_inode *ip,
928 unsigned int di_flags;
930 /* can't set PREALLOC this way, just preserve it */
931 di_flags = (ip->i_d.di_flags & XFS_DIFLAG_PREALLOC);
932 if (xflags & XFS_XFLAG_IMMUTABLE)
933 di_flags |= XFS_DIFLAG_IMMUTABLE;
934 if (xflags & XFS_XFLAG_APPEND)
935 di_flags |= XFS_DIFLAG_APPEND;
936 if (xflags & XFS_XFLAG_SYNC)
937 di_flags |= XFS_DIFLAG_SYNC;
938 if (xflags & XFS_XFLAG_NOATIME)
939 di_flags |= XFS_DIFLAG_NOATIME;
940 if (xflags & XFS_XFLAG_NODUMP)
941 di_flags |= XFS_DIFLAG_NODUMP;
942 if (xflags & XFS_XFLAG_NODEFRAG)
943 di_flags |= XFS_DIFLAG_NODEFRAG;
944 if (xflags & XFS_XFLAG_FILESTREAM)
945 di_flags |= XFS_DIFLAG_FILESTREAM;
946 if (S_ISDIR(ip->i_d.di_mode)) {
947 if (xflags & XFS_XFLAG_RTINHERIT)
948 di_flags |= XFS_DIFLAG_RTINHERIT;
949 if (xflags & XFS_XFLAG_NOSYMLINKS)
950 di_flags |= XFS_DIFLAG_NOSYMLINKS;
951 if (xflags & XFS_XFLAG_EXTSZINHERIT)
952 di_flags |= XFS_DIFLAG_EXTSZINHERIT;
953 if (xflags & XFS_XFLAG_PROJINHERIT)
954 di_flags |= XFS_DIFLAG_PROJINHERIT;
955 } else if (S_ISREG(ip->i_d.di_mode)) {
956 if (xflags & XFS_XFLAG_REALTIME)
957 di_flags |= XFS_DIFLAG_REALTIME;
958 if (xflags & XFS_XFLAG_EXTSIZE)
959 di_flags |= XFS_DIFLAG_EXTSIZE;
962 ip->i_d.di_flags = di_flags;
966 xfs_diflags_to_linux(
967 struct xfs_inode *ip)
969 struct inode *inode = VFS_I(ip);
970 unsigned int xflags = xfs_ip2xflags(ip);
972 if (xflags & XFS_XFLAG_IMMUTABLE)
973 inode->i_flags |= S_IMMUTABLE;
975 inode->i_flags &= ~S_IMMUTABLE;
976 if (xflags & XFS_XFLAG_APPEND)
977 inode->i_flags |= S_APPEND;
979 inode->i_flags &= ~S_APPEND;
980 if (xflags & XFS_XFLAG_SYNC)
981 inode->i_flags |= S_SYNC;
983 inode->i_flags &= ~S_SYNC;
984 if (xflags & XFS_XFLAG_NOATIME)
985 inode->i_flags |= S_NOATIME;
987 inode->i_flags &= ~S_NOATIME;
991 xfs_ioctl_setattr_xflags(
992 struct xfs_trans *tp,
993 struct xfs_inode *ip,
996 struct xfs_mount *mp = ip->i_mount;
998 /* Can't change realtime flag if any extents are allocated. */
999 if ((ip->i_d.di_nextents || ip->i_delayed_blks) &&
1000 XFS_IS_REALTIME_INODE(ip) != (fa->fsx_xflags & XFS_XFLAG_REALTIME))
1003 /* If realtime flag is set then must have realtime device */
1004 if (fa->fsx_xflags & XFS_XFLAG_REALTIME) {
1005 if (mp->m_sb.sb_rblocks == 0 || mp->m_sb.sb_rextsize == 0 ||
1006 (ip->i_d.di_extsize % mp->m_sb.sb_rextsize))
1011 * Can't modify an immutable/append-only file unless
1012 * we have appropriate permission.
1014 if (((ip->i_d.di_flags & (XFS_DIFLAG_IMMUTABLE | XFS_DIFLAG_APPEND)) ||
1015 (fa->fsx_xflags & (XFS_XFLAG_IMMUTABLE | XFS_XFLAG_APPEND))) &&
1016 !capable(CAP_LINUX_IMMUTABLE))
1019 xfs_set_diflags(ip, fa->fsx_xflags);
1020 xfs_diflags_to_linux(ip);
1021 xfs_trans_ichgtime(tp, ip, XFS_ICHGTIME_CHG);
1022 xfs_trans_log_inode(tp, ip, XFS_ILOG_CORE);
1023 XFS_STATS_INC(xs_ig_attrchg);
1028 * Set up the transaction structure for the setattr operation, checking that we
1029 * have permission to do so. On success, return a clean transaction and the
1030 * inode locked exclusively ready for further operation specific checks. On
1031 * failure, return an error without modifying or locking the inode.
1033 static struct xfs_trans *
1034 xfs_ioctl_setattr_get_trans(
1035 struct xfs_inode *ip)
1037 struct xfs_mount *mp = ip->i_mount;
1038 struct xfs_trans *tp;
1041 if (mp->m_flags & XFS_MOUNT_RDONLY)
1042 return ERR_PTR(-EROFS);
1043 if (XFS_FORCED_SHUTDOWN(mp))
1044 return ERR_PTR(-EIO);
1046 tp = xfs_trans_alloc(mp, XFS_TRANS_SETATTR_NOT_SIZE);
1047 error = xfs_trans_reserve(tp, &M_RES(mp)->tr_ichange, 0, 0);
1051 xfs_ilock(ip, XFS_ILOCK_EXCL);
1052 xfs_trans_ijoin(tp, ip, XFS_ILOCK_EXCL);
1055 * CAP_FOWNER overrides the following restrictions:
1057 * The user ID of the calling process must be equal to the file owner
1058 * ID, except in cases where the CAP_FSETID capability is applicable.
1060 if (!inode_owner_or_capable(VFS_I(ip))) {
1065 if (mp->m_flags & XFS_MOUNT_WSYNC)
1066 xfs_trans_set_sync(tp);
1071 xfs_trans_cancel(tp, 0);
1072 return ERR_PTR(error);
1076 * extent size hint validation is somewhat cumbersome. Rules are:
1078 * 1. extent size hint is only valid for directories and regular files
1079 * 2. XFS_XFLAG_EXTSIZE is only valid for regular files
1080 * 3. XFS_XFLAG_EXTSZINHERIT is only valid for directories.
1081 * 4. can only be changed on regular files if no extents are allocated
1082 * 5. can be changed on directories at any time
1083 * 6. extsize hint of 0 turns off hints, clears inode flags.
1084 * 7. Extent size must be a multiple of the appropriate block size.
1085 * 8. for non-realtime files, the extent size hint must be limited
1086 * to half the AG size to avoid alignment extending the extent beyond the
1090 xfs_ioctl_setattr_check_extsize(
1091 struct xfs_inode *ip,
1094 struct xfs_mount *mp = ip->i_mount;
1096 if ((fa->fsx_xflags & XFS_XFLAG_EXTSIZE) && !S_ISREG(ip->i_d.di_mode))
1099 if ((fa->fsx_xflags & XFS_XFLAG_EXTSZINHERIT) &&
1100 !S_ISDIR(ip->i_d.di_mode))
1103 if (S_ISREG(ip->i_d.di_mode) && ip->i_d.di_nextents &&
1104 ((ip->i_d.di_extsize << mp->m_sb.sb_blocklog) != fa->fsx_extsize))
1107 if (fa->fsx_extsize != 0) {
1109 xfs_fsblock_t extsize_fsb;
1111 extsize_fsb = XFS_B_TO_FSB(mp, fa->fsx_extsize);
1112 if (extsize_fsb > MAXEXTLEN)
1115 if (XFS_IS_REALTIME_INODE(ip) ||
1116 (fa->fsx_xflags & XFS_XFLAG_REALTIME)) {
1117 size = mp->m_sb.sb_rextsize << mp->m_sb.sb_blocklog;
1119 size = mp->m_sb.sb_blocksize;
1120 if (extsize_fsb > mp->m_sb.sb_agblocks / 2)
1124 if (fa->fsx_extsize % size)
1127 fa->fsx_xflags &= ~(XFS_XFLAG_EXTSIZE | XFS_XFLAG_EXTSZINHERIT);
1133 xfs_ioctl_setattr_check_projid(
1134 struct xfs_inode *ip,
1137 /* Disallow 32bit project ids if projid32bit feature is not enabled. */
1138 if (fa->fsx_projid > (__uint16_t)-1 &&
1139 !xfs_sb_version_hasprojid32bit(&ip->i_mount->m_sb))
1143 * Project Quota ID state is only allowed to change from within the init
1144 * namespace. Enforce that restriction only if we are trying to change
1145 * the quota ID state. Everything else is allowed in user namespaces.
1147 if (current_user_ns() == &init_user_ns)
1150 if (xfs_get_projid(ip) != fa->fsx_projid)
1152 if ((fa->fsx_xflags & XFS_XFLAG_PROJINHERIT) !=
1153 (ip->i_d.di_flags & XFS_DIFLAG_PROJINHERIT))
1164 struct xfs_mount *mp = ip->i_mount;
1165 struct xfs_trans *tp;
1166 struct xfs_dquot *udqp = NULL;
1167 struct xfs_dquot *pdqp = NULL;
1168 struct xfs_dquot *olddquot = NULL;
1171 trace_xfs_ioctl_setattr(ip);
1173 code = xfs_ioctl_setattr_check_projid(ip, fa);
1178 * If disk quotas is on, we make sure that the dquots do exist on disk,
1179 * before we start any other transactions. Trying to do this later
1180 * is messy. We don't care to take a readlock to look at the ids
1181 * in inode here, because we can't hold it across the trans_reserve.
1182 * If the IDs do change before we take the ilock, we're covered
1183 * because the i_*dquot fields will get updated anyway.
1185 if (XFS_IS_QUOTA_ON(mp)) {
1186 code = xfs_qm_vop_dqalloc(ip, ip->i_d.di_uid,
1187 ip->i_d.di_gid, fa->fsx_projid,
1188 XFS_QMOPT_PQUOTA, &udqp, NULL, &pdqp);
1193 tp = xfs_ioctl_setattr_get_trans(ip);
1196 goto error_free_dquots;
1200 if (XFS_IS_QUOTA_RUNNING(mp) && XFS_IS_PQUOTA_ON(mp) &&
1201 xfs_get_projid(ip) != fa->fsx_projid) {
1202 code = xfs_qm_vop_chown_reserve(tp, ip, udqp, NULL, pdqp,
1203 capable(CAP_FOWNER) ? XFS_QMOPT_FORCE_RES : 0);
1204 if (code) /* out of quota */
1205 goto error_trans_cancel;
1208 code = xfs_ioctl_setattr_check_extsize(ip, fa);
1210 goto error_trans_cancel;
1212 code = xfs_ioctl_setattr_xflags(tp, ip, fa);
1214 goto error_trans_cancel;
1217 * Change file ownership. Must be the owner or privileged. CAP_FSETID
1218 * overrides the following restrictions:
1220 * The set-user-ID and set-group-ID bits of a file will be cleared upon
1221 * successful return from chown()
1224 if ((ip->i_d.di_mode & (S_ISUID|S_ISGID)) &&
1225 !capable_wrt_inode_uidgid(VFS_I(ip), CAP_FSETID))
1226 ip->i_d.di_mode &= ~(S_ISUID|S_ISGID);
1228 /* Change the ownerships and register project quota modifications */
1229 if (xfs_get_projid(ip) != fa->fsx_projid) {
1230 if (XFS_IS_QUOTA_RUNNING(mp) && XFS_IS_PQUOTA_ON(mp)) {
1231 olddquot = xfs_qm_vop_chown(tp, ip,
1232 &ip->i_pdquot, pdqp);
1234 ASSERT(ip->i_d.di_version > 1);
1235 xfs_set_projid(ip, fa->fsx_projid);
1239 * Only set the extent size hint if we've already determined that the
1240 * extent size hint should be set on the inode. If no extent size flags
1241 * are set on the inode then unconditionally clear the extent size hint.
1243 if (ip->i_d.di_flags & (XFS_DIFLAG_EXTSIZE | XFS_DIFLAG_EXTSZINHERIT))
1244 ip->i_d.di_extsize = fa->fsx_extsize >> mp->m_sb.sb_blocklog;
1246 ip->i_d.di_extsize = 0;
1248 code = xfs_trans_commit(tp, 0);
1251 * Release any dquot(s) the inode had kept before chown.
1253 xfs_qm_dqrele(olddquot);
1254 xfs_qm_dqrele(udqp);
1255 xfs_qm_dqrele(pdqp);
1260 xfs_trans_cancel(tp, 0);
1262 xfs_qm_dqrele(udqp);
1263 xfs_qm_dqrele(pdqp);
1276 if (copy_from_user(&fa, arg, sizeof(fa)))
1279 error = mnt_want_write_file(filp);
1282 error = xfs_ioctl_setattr(ip, &fa);
1283 mnt_drop_write_file(filp);
1294 flags = xfs_di2lxflags(ip->i_d.di_flags);
1295 if (copy_to_user(arg, &flags, sizeof(flags)))
1302 struct xfs_inode *ip,
1306 struct xfs_trans *tp;
1311 if (copy_from_user(&flags, arg, sizeof(flags)))
1314 if (flags & ~(FS_IMMUTABLE_FL | FS_APPEND_FL | \
1315 FS_NOATIME_FL | FS_NODUMP_FL | \
1319 fa.fsx_xflags = xfs_merge_ioc_xflags(flags, xfs_ip2xflags(ip));
1321 error = mnt_want_write_file(filp);
1325 tp = xfs_ioctl_setattr_get_trans(ip);
1327 error = PTR_ERR(tp);
1328 goto out_drop_write;
1331 error = xfs_ioctl_setattr_xflags(tp, ip, &fa);
1333 xfs_trans_cancel(tp, 0);
1334 goto out_drop_write;
1337 error = xfs_trans_commit(tp, 0);
1339 mnt_drop_write_file(filp);
1344 xfs_getbmap_format(void **ap, struct getbmapx *bmv, int *full)
1346 struct getbmap __user *base = (struct getbmap __user *)*ap;
1348 /* copy only getbmap portion (not getbmapx) */
1349 if (copy_to_user(base, bmv, sizeof(struct getbmap)))
1352 *ap += sizeof(struct getbmap);
1358 struct xfs_inode *ip,
1363 struct getbmapx bmx;
1366 if (copy_from_user(&bmx, arg, sizeof(struct getbmapx)))
1369 if (bmx.bmv_count < 2)
1372 bmx.bmv_iflags = (cmd == XFS_IOC_GETBMAPA ? BMV_IF_ATTRFORK : 0);
1373 if (ioflags & XFS_IO_INVIS)
1374 bmx.bmv_iflags |= BMV_IF_NO_DMAPI_READ;
1376 error = xfs_getbmap(ip, &bmx, xfs_getbmap_format,
1377 (__force struct getbmap *)arg+1);
1381 /* copy back header - only size of getbmap */
1382 if (copy_to_user(arg, &bmx, sizeof(struct getbmap)))
1388 xfs_getbmapx_format(void **ap, struct getbmapx *bmv, int *full)
1390 struct getbmapx __user *base = (struct getbmapx __user *)*ap;
1392 if (copy_to_user(base, bmv, sizeof(struct getbmapx)))
1395 *ap += sizeof(struct getbmapx);
1401 struct xfs_inode *ip,
1404 struct getbmapx bmx;
1407 if (copy_from_user(&bmx, arg, sizeof(bmx)))
1410 if (bmx.bmv_count < 2)
1413 if (bmx.bmv_iflags & (~BMV_IF_VALID))
1416 error = xfs_getbmap(ip, &bmx, xfs_getbmapx_format,
1417 (__force struct getbmapx *)arg+1);
1421 /* copy back header */
1422 if (copy_to_user(arg, &bmx, sizeof(struct getbmapx)))
1432 xfs_inode_t *ip, *tip;
1436 /* Pull information for the target fd */
1437 f = fdget((int)sxp->sx_fdtarget);
1443 if (!(f.file->f_mode & FMODE_WRITE) ||
1444 !(f.file->f_mode & FMODE_READ) ||
1445 (f.file->f_flags & O_APPEND)) {
1450 tmp = fdget((int)sxp->sx_fdtmp);
1456 if (!(tmp.file->f_mode & FMODE_WRITE) ||
1457 !(tmp.file->f_mode & FMODE_READ) ||
1458 (tmp.file->f_flags & O_APPEND)) {
1460 goto out_put_tmp_file;
1463 if (IS_SWAPFILE(file_inode(f.file)) ||
1464 IS_SWAPFILE(file_inode(tmp.file))) {
1466 goto out_put_tmp_file;
1469 ip = XFS_I(file_inode(f.file));
1470 tip = XFS_I(file_inode(tmp.file));
1472 if (ip->i_mount != tip->i_mount) {
1474 goto out_put_tmp_file;
1477 if (ip->i_ino == tip->i_ino) {
1479 goto out_put_tmp_file;
1482 if (XFS_FORCED_SHUTDOWN(ip->i_mount)) {
1484 goto out_put_tmp_file;
1487 error = xfs_swap_extents(ip, tip, sxp);
1498 * Note: some of the ioctl's return positive numbers as a
1499 * byte count indicating success, such as readlink_by_handle.
1500 * So we don't "sign flip" like most other routines. This means
1501 * true errors need to be returned as a negative value.
1509 struct inode *inode = file_inode(filp);
1510 struct xfs_inode *ip = XFS_I(inode);
1511 struct xfs_mount *mp = ip->i_mount;
1512 void __user *arg = (void __user *)p;
1516 if (filp->f_mode & FMODE_NOCMTIME)
1517 ioflags |= XFS_IO_INVIS;
1519 trace_xfs_file_ioctl(ip);
1523 return xfs_ioc_trim(mp, arg);
1524 case XFS_IOC_ALLOCSP:
1525 case XFS_IOC_FREESP:
1526 case XFS_IOC_RESVSP:
1527 case XFS_IOC_UNRESVSP:
1528 case XFS_IOC_ALLOCSP64:
1529 case XFS_IOC_FREESP64:
1530 case XFS_IOC_RESVSP64:
1531 case XFS_IOC_UNRESVSP64:
1532 case XFS_IOC_ZERO_RANGE: {
1535 if (copy_from_user(&bf, arg, sizeof(bf)))
1537 return xfs_ioc_space(ip, inode, filp, ioflags, cmd, &bf);
1539 case XFS_IOC_DIOINFO: {
1541 xfs_buftarg_t *target =
1542 XFS_IS_REALTIME_INODE(ip) ?
1543 mp->m_rtdev_targp : mp->m_ddev_targp;
1545 da.d_mem = da.d_miniosz = target->bt_logical_sectorsize;
1546 da.d_maxiosz = INT_MAX & ~(da.d_miniosz - 1);
1548 if (copy_to_user(arg, &da, sizeof(da)))
1553 case XFS_IOC_FSBULKSTAT_SINGLE:
1554 case XFS_IOC_FSBULKSTAT:
1555 case XFS_IOC_FSINUMBERS:
1556 return xfs_ioc_bulkstat(mp, cmd, arg);
1558 case XFS_IOC_FSGEOMETRY_V1:
1559 return xfs_ioc_fsgeometry_v1(mp, arg);
1561 case XFS_IOC_FSGEOMETRY:
1562 return xfs_ioc_fsgeometry(mp, arg);
1564 case XFS_IOC_GETVERSION:
1565 return put_user(inode->i_generation, (int __user *)arg);
1567 case XFS_IOC_FSGETXATTR:
1568 return xfs_ioc_fsgetxattr(ip, 0, arg);
1569 case XFS_IOC_FSGETXATTRA:
1570 return xfs_ioc_fsgetxattr(ip, 1, arg);
1571 case XFS_IOC_FSSETXATTR:
1572 return xfs_ioc_fssetxattr(ip, filp, arg);
1573 case XFS_IOC_GETXFLAGS:
1574 return xfs_ioc_getxflags(ip, arg);
1575 case XFS_IOC_SETXFLAGS:
1576 return xfs_ioc_setxflags(ip, filp, arg);
1578 case XFS_IOC_FSSETDM: {
1579 struct fsdmidata dmi;
1581 if (copy_from_user(&dmi, arg, sizeof(dmi)))
1584 error = mnt_want_write_file(filp);
1588 error = xfs_set_dmattrs(ip, dmi.fsd_dmevmask,
1590 mnt_drop_write_file(filp);
1594 case XFS_IOC_GETBMAP:
1595 case XFS_IOC_GETBMAPA:
1596 return xfs_ioc_getbmap(ip, ioflags, cmd, arg);
1598 case XFS_IOC_GETBMAPX:
1599 return xfs_ioc_getbmapx(ip, arg);
1601 case XFS_IOC_FD_TO_HANDLE:
1602 case XFS_IOC_PATH_TO_HANDLE:
1603 case XFS_IOC_PATH_TO_FSHANDLE: {
1604 xfs_fsop_handlereq_t hreq;
1606 if (copy_from_user(&hreq, arg, sizeof(hreq)))
1608 return xfs_find_handle(cmd, &hreq);
1610 case XFS_IOC_OPEN_BY_HANDLE: {
1611 xfs_fsop_handlereq_t hreq;
1613 if (copy_from_user(&hreq, arg, sizeof(xfs_fsop_handlereq_t)))
1615 return xfs_open_by_handle(filp, &hreq);
1617 case XFS_IOC_FSSETDM_BY_HANDLE:
1618 return xfs_fssetdm_by_handle(filp, arg);
1620 case XFS_IOC_READLINK_BY_HANDLE: {
1621 xfs_fsop_handlereq_t hreq;
1623 if (copy_from_user(&hreq, arg, sizeof(xfs_fsop_handlereq_t)))
1625 return xfs_readlink_by_handle(filp, &hreq);
1627 case XFS_IOC_ATTRLIST_BY_HANDLE:
1628 return xfs_attrlist_by_handle(filp, arg);
1630 case XFS_IOC_ATTRMULTI_BY_HANDLE:
1631 return xfs_attrmulti_by_handle(filp, arg);
1633 case XFS_IOC_SWAPEXT: {
1634 struct xfs_swapext sxp;
1636 if (copy_from_user(&sxp, arg, sizeof(xfs_swapext_t)))
1638 error = mnt_want_write_file(filp);
1641 error = xfs_ioc_swapext(&sxp);
1642 mnt_drop_write_file(filp);
1646 case XFS_IOC_FSCOUNTS: {
1647 xfs_fsop_counts_t out;
1649 error = xfs_fs_counts(mp, &out);
1653 if (copy_to_user(arg, &out, sizeof(out)))
1658 case XFS_IOC_SET_RESBLKS: {
1659 xfs_fsop_resblks_t inout;
1662 if (!capable(CAP_SYS_ADMIN))
1665 if (mp->m_flags & XFS_MOUNT_RDONLY)
1668 if (copy_from_user(&inout, arg, sizeof(inout)))
1671 error = mnt_want_write_file(filp);
1675 /* input parameter is passed in resblks field of structure */
1677 error = xfs_reserve_blocks(mp, &in, &inout);
1678 mnt_drop_write_file(filp);
1682 if (copy_to_user(arg, &inout, sizeof(inout)))
1687 case XFS_IOC_GET_RESBLKS: {
1688 xfs_fsop_resblks_t out;
1690 if (!capable(CAP_SYS_ADMIN))
1693 error = xfs_reserve_blocks(mp, NULL, &out);
1697 if (copy_to_user(arg, &out, sizeof(out)))
1703 case XFS_IOC_FSGROWFSDATA: {
1704 xfs_growfs_data_t in;
1706 if (copy_from_user(&in, arg, sizeof(in)))
1709 error = mnt_want_write_file(filp);
1712 error = xfs_growfs_data(mp, &in);
1713 mnt_drop_write_file(filp);
1717 case XFS_IOC_FSGROWFSLOG: {
1718 xfs_growfs_log_t in;
1720 if (copy_from_user(&in, arg, sizeof(in)))
1723 error = mnt_want_write_file(filp);
1726 error = xfs_growfs_log(mp, &in);
1727 mnt_drop_write_file(filp);
1731 case XFS_IOC_FSGROWFSRT: {
1734 if (copy_from_user(&in, arg, sizeof(in)))
1737 error = mnt_want_write_file(filp);
1740 error = xfs_growfs_rt(mp, &in);
1741 mnt_drop_write_file(filp);
1745 case XFS_IOC_GOINGDOWN: {
1748 if (!capable(CAP_SYS_ADMIN))
1751 if (get_user(in, (__uint32_t __user *)arg))
1754 return xfs_fs_goingdown(mp, in);
1757 case XFS_IOC_ERROR_INJECTION: {
1758 xfs_error_injection_t in;
1760 if (!capable(CAP_SYS_ADMIN))
1763 if (copy_from_user(&in, arg, sizeof(in)))
1766 return xfs_errortag_add(in.errtag, mp);
1769 case XFS_IOC_ERROR_CLEARALL:
1770 if (!capable(CAP_SYS_ADMIN))
1773 return xfs_errortag_clearall(mp, 1);
1775 case XFS_IOC_FREE_EOFBLOCKS: {
1776 struct xfs_fs_eofblocks eofb;
1777 struct xfs_eofblocks keofb;
1779 if (!capable(CAP_SYS_ADMIN))
1782 if (mp->m_flags & XFS_MOUNT_RDONLY)
1785 if (copy_from_user(&eofb, arg, sizeof(eofb)))
1788 error = xfs_fs_eofblocks_from_user(&eofb, &keofb);
1792 return xfs_icache_free_eofblocks(mp, &keofb);