2 * Copyright (c) 1982, 1986 Regents of the University of California.
5 * This code is derived from software contributed to Berkeley by
6 * Robert Elz at The University of Melbourne.
8 * Redistribution and use in source and binary forms, with or without
9 * modification, are permitted provided that the following conditions
11 * 1. Redistributions of source code must retain the above copyright
12 * notice, this list of conditions and the following disclaimer.
13 * 2. Redistributions in binary form must reproduce the above copyright
14 * notice, this list of conditions and the following disclaimer in the
15 * documentation and/or other materials provided with the distribution.
16 * 3. Neither the name of the University nor the names of its contributors
17 * may be used to endorse or promote products derived from this software
18 * without specific prior written permission.
20 * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
21 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
22 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
23 * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
24 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
25 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
26 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
27 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
28 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
29 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
35 #include <linux/list.h>
36 #include <linux/mutex.h>
37 #include <linux/rwsem.h>
38 #include <linux/spinlock.h>
39 #include <linux/wait.h>
40 #include <linux/percpu_counter.h>
42 #include <linux/dqblk_xfs.h>
43 #include <linux/dqblk_v1.h>
44 #include <linux/dqblk_v2.h>
46 #include <linux/atomic.h>
47 #include <linux/uidgid.h>
48 #include <linux/projid.h>
49 #include <uapi/linux/quota.h>
54 USRQUOTA = 0, /* element used for user quotas */
55 GRPQUOTA = 1, /* element used for group quotas */
56 PRJQUOTA = 2, /* element used for project quotas */
59 /* Masks for quota types when used as a bitmask */
60 #define QTYPE_MASK_USR (1 << USRQUOTA)
61 #define QTYPE_MASK_GRP (1 << GRPQUOTA)
62 #define QTYPE_MASK_PRJ (1 << PRJQUOTA)
64 typedef __kernel_uid32_t qid_t; /* Type in which we store ids in memory */
65 typedef long long qsize_t; /* Type in which we store sizes */
67 struct kqid { /* Type in which we store the quota identifier */
73 enum quota_type type; /* USRQUOTA (uid) or GRPQUOTA (gid) or PRJQUOTA (projid) */
76 extern bool qid_eq(struct kqid left, struct kqid right);
77 extern bool qid_lt(struct kqid left, struct kqid right);
78 extern qid_t from_kqid(struct user_namespace *to, struct kqid qid);
79 extern qid_t from_kqid_munged(struct user_namespace *to, struct kqid qid);
80 extern bool qid_valid(struct kqid qid);
83 * make_kqid - Map a user-namespace, type, qid tuple into a kqid.
84 * @from: User namespace that the qid is in
85 * @type: The type of quota
86 * @qid: Quota identifier
88 * Maps a user-namespace, type qid tuple into a kernel internal
89 * kqid, and returns that kqid.
91 * When there is no mapping defined for the user-namespace, type,
92 * qid tuple an invalid kqid is returned. Callers are expected to
93 * test for and handle handle invalid kqids being returned.
94 * Invalid kqids may be tested for using qid_valid().
96 static inline struct kqid make_kqid(struct user_namespace *from,
97 enum quota_type type, qid_t qid)
104 kqid.uid = make_kuid(from, qid);
107 kqid.gid = make_kgid(from, qid);
110 kqid.projid = make_kprojid(from, qid);
119 * make_kqid_invalid - Explicitly make an invalid kqid
120 * @type: The type of quota identifier
122 * Returns an invalid kqid with the specified type.
124 static inline struct kqid make_kqid_invalid(enum quota_type type)
131 kqid.uid = INVALID_UID;
134 kqid.gid = INVALID_GID;
137 kqid.projid = INVALID_PROJID;
146 * make_kqid_uid - Make a kqid from a kuid
147 * @uid: The kuid to make the quota identifier from
149 static inline struct kqid make_kqid_uid(kuid_t uid)
152 kqid.type = USRQUOTA;
158 * make_kqid_gid - Make a kqid from a kgid
159 * @gid: The kgid to make the quota identifier from
161 static inline struct kqid make_kqid_gid(kgid_t gid)
164 kqid.type = GRPQUOTA;
170 * make_kqid_projid - Make a kqid from a projid
171 * @projid: The kprojid to make the quota identifier from
173 static inline struct kqid make_kqid_projid(kprojid_t projid)
176 kqid.type = PRJQUOTA;
177 kqid.projid = projid;
182 extern spinlock_t dq_data_lock;
184 /* Maximal numbers of writes for quota operation (insert/delete/update)
185 * (over VFS all formats) */
186 #define DQUOT_INIT_ALLOC max(V1_INIT_ALLOC, V2_INIT_ALLOC)
187 #define DQUOT_INIT_REWRITE max(V1_INIT_REWRITE, V2_INIT_REWRITE)
188 #define DQUOT_DEL_ALLOC max(V1_DEL_ALLOC, V2_DEL_ALLOC)
189 #define DQUOT_DEL_REWRITE max(V1_DEL_REWRITE, V2_DEL_REWRITE)
192 * Data for one user/group kept in memory
195 qsize_t dqb_bhardlimit; /* absolute limit on disk blks alloc */
196 qsize_t dqb_bsoftlimit; /* preferred limit on disk blks */
197 qsize_t dqb_curspace; /* current used space */
198 qsize_t dqb_rsvspace; /* current reserved space for delalloc*/
199 qsize_t dqb_ihardlimit; /* absolute limit on allocated inodes */
200 qsize_t dqb_isoftlimit; /* preferred inode limit */
201 qsize_t dqb_curinodes; /* current # allocated inodes */
202 time_t dqb_btime; /* time limit for excessive disk use */
203 time_t dqb_itime; /* time limit for excessive inode use */
207 * Data for one quotafile kept in memory
209 struct quota_format_type;
212 struct quota_format_type *dqi_format;
213 int dqi_fmt_id; /* Id of the dqi_format - used when turning
214 * quotas on after remount RW */
215 struct list_head dqi_dirty_list; /* List of dirty dquots */
216 unsigned long dqi_flags;
217 unsigned int dqi_bgrace;
218 unsigned int dqi_igrace;
219 qsize_t dqi_max_spc_limit;
220 qsize_t dqi_max_ino_limit;
226 /* Mask for flags passed to userspace */
227 #define DQF_GETINFO_MASK (DQF_ROOT_SQUASH | DQF_SYS_FILE)
228 /* Mask for flags modifiable from userspace */
229 #define DQF_SETINFO_MASK DQF_ROOT_SQUASH
232 DQF_INFO_DIRTY_B = DQF_PRIVATE,
234 #define DQF_INFO_DIRTY (1 << DQF_INFO_DIRTY_B) /* Is info dirty? */
236 extern void mark_info_dirty(struct super_block *sb, int type);
237 static inline int info_dirty(struct mem_dqinfo *info)
239 return test_bit(DQF_INFO_DIRTY_B, &info->dqi_flags);
255 int stat[_DQST_DQSTAT_LAST];
256 struct percpu_counter counter[_DQST_DQSTAT_LAST];
259 extern struct dqstats *dqstats_pcpu;
260 extern struct dqstats dqstats;
262 static inline void dqstats_inc(unsigned int type)
264 percpu_counter_inc(&dqstats.counter[type]);
267 static inline void dqstats_dec(unsigned int type)
269 percpu_counter_dec(&dqstats.counter[type]);
272 #define DQ_MOD_B 0 /* dquot modified since read */
273 #define DQ_BLKS_B 1 /* uid/gid has been warned about blk limit */
274 #define DQ_INODES_B 2 /* uid/gid has been warned about inode limit */
275 #define DQ_FAKE_B 3 /* no limits only usage */
276 #define DQ_READ_B 4 /* dquot was read into memory */
277 #define DQ_ACTIVE_B 5 /* dquot is active (dquot_release not called) */
278 #define DQ_LASTSET_B 6 /* Following 6 bits (see QIF_) are reserved\
279 * for the mask of entries set via SETQUOTA\
280 * quotactl. They are set under dq_data_lock\
281 * and the quota format handling dquot can\
282 * clear them when it sees fit. */
285 struct hlist_node dq_hash; /* Hash list in memory */
286 struct list_head dq_inuse; /* List of all quotas */
287 struct list_head dq_free; /* Free list element */
288 struct list_head dq_dirty; /* List of dirty dquots */
289 struct mutex dq_lock; /* dquot IO lock */
290 atomic_t dq_count; /* Use count */
291 wait_queue_head_t dq_wait_unused; /* Wait queue for dquot to become unused */
292 struct super_block *dq_sb; /* superblock this applies to */
293 struct kqid dq_id; /* ID this applies to (uid, gid, projid) */
294 loff_t dq_off; /* Offset of dquot on disk */
295 unsigned long dq_flags; /* See DQ_* */
296 struct mem_dqblk dq_dqb; /* Diskquota usage */
299 /* Operations which must be implemented by each quota format */
300 struct quota_format_ops {
301 int (*check_quota_file)(struct super_block *sb, int type); /* Detect whether file is in our format */
302 int (*read_file_info)(struct super_block *sb, int type); /* Read main info about file - called on quotaon() */
303 int (*write_file_info)(struct super_block *sb, int type); /* Write main info about file */
304 int (*free_file_info)(struct super_block *sb, int type); /* Called on quotaoff() */
305 int (*read_dqblk)(struct dquot *dquot); /* Read structure for one user */
306 int (*commit_dqblk)(struct dquot *dquot); /* Write structure for one user */
307 int (*release_dqblk)(struct dquot *dquot); /* Called when last reference to dquot is being dropped */
310 /* Operations working with dquots */
311 struct dquot_operations {
312 int (*write_dquot) (struct dquot *); /* Ordinary dquot write */
313 struct dquot *(*alloc_dquot)(struct super_block *, int); /* Allocate memory for new dquot */
314 void (*destroy_dquot)(struct dquot *); /* Free memory for dquot */
315 int (*acquire_dquot) (struct dquot *); /* Quota is going to be created on disk */
316 int (*release_dquot) (struct dquot *); /* Quota is going to be deleted from disk */
317 int (*mark_dirty) (struct dquot *); /* Dquot is marked dirty */
318 int (*write_info) (struct super_block *, int); /* Write of quota "superblock" */
319 /* get reserved quota for delayed alloc, value returned is managed by
321 qsize_t *(*get_reserved_space) (struct inode *);
326 /* Structure for communicating via ->get_dqblk() & ->set_dqblk() */
328 int d_fieldmask; /* mask of fields to change in ->set_dqblk() */
329 u64 d_spc_hardlimit; /* absolute limit on used space */
330 u64 d_spc_softlimit; /* preferred limit on used space */
331 u64 d_ino_hardlimit; /* maximum # allocated inodes */
332 u64 d_ino_softlimit; /* preferred inode limit */
333 u64 d_space; /* Space owned by the user */
334 u64 d_ino_count; /* # inodes owned by the user */
335 s64 d_ino_timer; /* zero if within inode limits */
336 /* if not, we refuse service */
337 s64 d_spc_timer; /* similar to above; for space */
338 int d_ino_warns; /* # warnings issued wrt num inodes */
339 int d_spc_warns; /* # warnings issued wrt used space */
340 u64 d_rt_spc_hardlimit; /* absolute limit on realtime space */
341 u64 d_rt_spc_softlimit; /* preferred limit on RT space */
342 u64 d_rt_space; /* realtime space owned */
343 s64 d_rt_spc_timer; /* similar to above; for RT space */
344 int d_rt_spc_warns; /* # warnings issued wrt RT space */
347 /* Field specifiers for ->set_dqblk() in struct qc_dqblk */
348 #define QC_INO_SOFT (1<<0)
349 #define QC_INO_HARD (1<<1)
350 #define QC_SPC_SOFT (1<<2)
351 #define QC_SPC_HARD (1<<3)
352 #define QC_RT_SPC_SOFT (1<<4)
353 #define QC_RT_SPC_HARD (1<<5)
354 #define QC_LIMIT_MASK (QC_INO_SOFT | QC_INO_HARD | QC_SPC_SOFT | QC_SPC_HARD | \
355 QC_RT_SPC_SOFT | QC_RT_SPC_HARD)
356 #define QC_SPC_TIMER (1<<6)
357 #define QC_INO_TIMER (1<<7)
358 #define QC_RT_SPC_TIMER (1<<8)
359 #define QC_TIMER_MASK (QC_SPC_TIMER | QC_INO_TIMER | QC_RT_SPC_TIMER)
360 #define QC_SPC_WARNS (1<<9)
361 #define QC_INO_WARNS (1<<10)
362 #define QC_RT_SPC_WARNS (1<<11)
363 #define QC_WARNS_MASK (QC_SPC_WARNS | QC_INO_WARNS | QC_RT_SPC_WARNS)
364 #define QC_SPACE (1<<12)
365 #define QC_INO_COUNT (1<<13)
366 #define QC_RT_SPACE (1<<14)
367 #define QC_ACCT_MASK (QC_SPACE | QC_INO_COUNT | QC_RT_SPACE)
369 /* Operations handling requests from userspace */
370 struct quotactl_ops {
371 int (*quota_on)(struct super_block *, int, int, struct path *);
372 int (*quota_off)(struct super_block *, int);
373 int (*quota_enable)(struct super_block *, unsigned int);
374 int (*quota_disable)(struct super_block *, unsigned int);
375 int (*quota_sync)(struct super_block *, int);
376 int (*get_info)(struct super_block *, int, struct if_dqinfo *);
377 int (*set_info)(struct super_block *, int, struct if_dqinfo *);
378 int (*get_dqblk)(struct super_block *, struct kqid, struct qc_dqblk *);
379 int (*set_dqblk)(struct super_block *, struct kqid, struct qc_dqblk *);
380 int (*get_xstate)(struct super_block *, struct fs_quota_stat *);
381 int (*get_xstatev)(struct super_block *, struct fs_quota_statv *);
382 int (*rm_xquota)(struct super_block *, unsigned int);
385 struct quota_format_type {
386 int qf_fmt_id; /* Quota format id */
387 const struct quota_format_ops *qf_ops; /* Operations of format */
388 struct module *qf_owner; /* Module implementing quota format */
389 struct quota_format_type *qf_next;
392 /* Quota state flags - they actually come in two flavors - for users and groups */
394 _DQUOT_USAGE_ENABLED = 0, /* Track disk usage for users */
395 _DQUOT_LIMITS_ENABLED, /* Enforce quota limits for users */
396 _DQUOT_SUSPENDED, /* User diskquotas are off, but
397 * we have necessary info in
398 * memory to turn them on */
401 #define DQUOT_USAGE_ENABLED (1 << _DQUOT_USAGE_ENABLED)
402 #define DQUOT_LIMITS_ENABLED (1 << _DQUOT_LIMITS_ENABLED)
403 #define DQUOT_SUSPENDED (1 << _DQUOT_SUSPENDED)
404 #define DQUOT_STATE_FLAGS (DQUOT_USAGE_ENABLED | DQUOT_LIMITS_ENABLED | \
406 /* Other quota flags */
407 #define DQUOT_STATE_LAST (_DQUOT_STATE_FLAGS * MAXQUOTAS)
408 #define DQUOT_QUOTA_SYS_FILE (1 << DQUOT_STATE_LAST)
409 /* Quota file is a special
410 * system file and user cannot
411 * touch it. Filesystem is
412 * responsible for setting
413 * S_NOQUOTA, S_NOATIME flags
415 #define DQUOT_NEGATIVE_USAGE (1 << (DQUOT_STATE_LAST + 1))
416 /* Allow negative quota usage */
418 static inline unsigned int dquot_state_flag(unsigned int flags, int type)
420 return flags << _DQUOT_STATE_FLAGS * type;
423 static inline unsigned int dquot_generic_flag(unsigned int flags, int type)
425 return (flags >> _DQUOT_STATE_FLAGS * type) & DQUOT_STATE_FLAGS;
428 #ifdef CONFIG_QUOTA_NETLINK_INTERFACE
429 extern void quota_send_warning(struct kqid qid, dev_t dev,
430 const char warntype);
432 static inline void quota_send_warning(struct kqid qid, dev_t dev,
437 #endif /* CONFIG_QUOTA_NETLINK_INTERFACE */
440 unsigned int flags; /* Flags for diskquotas on this device */
441 struct mutex dqio_mutex; /* lock device while I/O in progress */
442 struct mutex dqonoff_mutex; /* Serialize quotaon & quotaoff */
443 struct inode *files[MAXQUOTAS]; /* inodes of quotafiles */
444 struct mem_dqinfo info[MAXQUOTAS]; /* Information for each quota type */
445 const struct quota_format_ops *ops[MAXQUOTAS]; /* Operations for each type */
448 int register_quota_format(struct quota_format_type *fmt);
449 void unregister_quota_format(struct quota_format_type *fmt);
451 struct quota_module_name {
456 #define INIT_QUOTA_MODULE_NAMES {\
457 {QFMT_VFS_OLD, "quota_v1"},\
458 {QFMT_VFS_V0, "quota_v2"},\
459 {QFMT_VFS_V1, "quota_v2"},\