Loading...
1/*
2 * Copyright (c) 2000-2005 Silicon Graphics, Inc.
3 * All Rights Reserved.
4 *
5 * This program is free software; you can redistribute it and/or
6 * modify it under the terms of the GNU General Public License as
7 * published by the Free Software Foundation.
8 *
9 * This program is distributed in the hope that it would be useful,
10 * but WITHOUT ANY WARRANTY; without even the implied warranty of
11 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12 * GNU General Public License for more details.
13 *
14 * You should have received a copy of the GNU General Public License
15 * along with this program; if not, write the Free Software Foundation,
16 * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
17 */
18
19#include <linux/capability.h>
20
21#include "xfs.h"
22#include "xfs_fs.h"
23#include "xfs_bit.h"
24#include "xfs_log.h"
25#include "xfs_inum.h"
26#include "xfs_trans.h"
27#include "xfs_sb.h"
28#include "xfs_ag.h"
29#include "xfs_alloc.h"
30#include "xfs_quota.h"
31#include "xfs_mount.h"
32#include "xfs_bmap_btree.h"
33#include "xfs_inode.h"
34#include "xfs_itable.h"
35#include "xfs_bmap.h"
36#include "xfs_rtalloc.h"
37#include "xfs_error.h"
38#include "xfs_attr.h"
39#include "xfs_buf_item.h"
40#include "xfs_utils.h"
41#include "xfs_qm.h"
42#include "xfs_trace.h"
43
44STATIC int xfs_qm_log_quotaoff(xfs_mount_t *, xfs_qoff_logitem_t **, uint);
45STATIC int xfs_qm_log_quotaoff_end(xfs_mount_t *, xfs_qoff_logitem_t *,
46 uint);
47STATIC uint xfs_qm_export_flags(uint);
48STATIC uint xfs_qm_export_qtype_flags(uint);
49STATIC void xfs_qm_export_dquot(xfs_mount_t *, xfs_disk_dquot_t *,
50 fs_disk_quota_t *);
51
52
53/*
54 * Turn off quota accounting and/or enforcement for all udquots and/or
55 * gdquots. Called only at unmount time.
56 *
57 * This assumes that there are no dquots of this file system cached
58 * incore, and modifies the ondisk dquot directly. Therefore, for example,
59 * it is an error to call this twice, without purging the cache.
60 */
61int
62xfs_qm_scall_quotaoff(
63 xfs_mount_t *mp,
64 uint flags)
65{
66 struct xfs_quotainfo *q = mp->m_quotainfo;
67 uint dqtype;
68 int error;
69 uint inactivate_flags;
70 xfs_qoff_logitem_t *qoffstart;
71 int nculprits;
72
73 /*
74 * No file system can have quotas enabled on disk but not in core.
75 * Note that quota utilities (like quotaoff) _expect_
76 * errno == EEXIST here.
77 */
78 if ((mp->m_qflags & flags) == 0)
79 return XFS_ERROR(EEXIST);
80 error = 0;
81
82 flags &= (XFS_ALL_QUOTA_ACCT | XFS_ALL_QUOTA_ENFD);
83
84 /*
85 * We don't want to deal with two quotaoffs messing up each other,
86 * so we're going to serialize it. quotaoff isn't exactly a performance
87 * critical thing.
88 * If quotaoff, then we must be dealing with the root filesystem.
89 */
90 ASSERT(q);
91 mutex_lock(&q->qi_quotaofflock);
92
93 /*
94 * If we're just turning off quota enforcement, change mp and go.
95 */
96 if ((flags & XFS_ALL_QUOTA_ACCT) == 0) {
97 mp->m_qflags &= ~(flags);
98
99 spin_lock(&mp->m_sb_lock);
100 mp->m_sb.sb_qflags = mp->m_qflags;
101 spin_unlock(&mp->m_sb_lock);
102 mutex_unlock(&q->qi_quotaofflock);
103
104 /* XXX what to do if error ? Revert back to old vals incore ? */
105 error = xfs_qm_write_sb_changes(mp, XFS_SB_QFLAGS);
106 return (error);
107 }
108
109 dqtype = 0;
110 inactivate_flags = 0;
111 /*
112 * If accounting is off, we must turn enforcement off, clear the
113 * quota 'CHKD' certificate to make it known that we have to
114 * do a quotacheck the next time this quota is turned on.
115 */
116 if (flags & XFS_UQUOTA_ACCT) {
117 dqtype |= XFS_QMOPT_UQUOTA;
118 flags |= (XFS_UQUOTA_CHKD | XFS_UQUOTA_ENFD);
119 inactivate_flags |= XFS_UQUOTA_ACTIVE;
120 }
121 if (flags & XFS_GQUOTA_ACCT) {
122 dqtype |= XFS_QMOPT_GQUOTA;
123 flags |= (XFS_OQUOTA_CHKD | XFS_OQUOTA_ENFD);
124 inactivate_flags |= XFS_GQUOTA_ACTIVE;
125 } else if (flags & XFS_PQUOTA_ACCT) {
126 dqtype |= XFS_QMOPT_PQUOTA;
127 flags |= (XFS_OQUOTA_CHKD | XFS_OQUOTA_ENFD);
128 inactivate_flags |= XFS_PQUOTA_ACTIVE;
129 }
130
131 /*
132 * Nothing to do? Don't complain. This happens when we're just
133 * turning off quota enforcement.
134 */
135 if ((mp->m_qflags & flags) == 0)
136 goto out_unlock;
137
138 /*
139 * Write the LI_QUOTAOFF log record, and do SB changes atomically,
140 * and synchronously. If we fail to write, we should abort the
141 * operation as it cannot be recovered safely if we crash.
142 */
143 error = xfs_qm_log_quotaoff(mp, &qoffstart, flags);
144 if (error)
145 goto out_unlock;
146
147 /*
148 * Next we clear the XFS_MOUNT_*DQ_ACTIVE bit(s) in the mount struct
149 * to take care of the race between dqget and quotaoff. We don't take
150 * any special locks to reset these bits. All processes need to check
151 * these bits *after* taking inode lock(s) to see if the particular
152 * quota type is in the process of being turned off. If *ACTIVE, it is
153 * guaranteed that all dquot structures and all quotainode ptrs will all
154 * stay valid as long as that inode is kept locked.
155 *
156 * There is no turning back after this.
157 */
158 mp->m_qflags &= ~inactivate_flags;
159
160 /*
161 * Give back all the dquot reference(s) held by inodes.
162 * Here we go thru every single incore inode in this file system, and
163 * do a dqrele on the i_udquot/i_gdquot that it may have.
164 * Essentially, as long as somebody has an inode locked, this guarantees
165 * that quotas will not be turned off. This is handy because in a
166 * transaction once we lock the inode(s) and check for quotaon, we can
167 * depend on the quota inodes (and other things) being valid as long as
168 * we keep the lock(s).
169 */
170 xfs_qm_dqrele_all_inodes(mp, flags);
171
172 /*
173 * Next we make the changes in the quota flag in the mount struct.
174 * This isn't protected by a particular lock directly, because we
175 * don't want to take a mrlock every time we depend on quotas being on.
176 */
177 mp->m_qflags &= ~(flags);
178
179 /*
180 * Go through all the dquots of this file system and purge them,
181 * according to what was turned off. We may not be able to get rid
182 * of all dquots, because dquots can have temporary references that
183 * are not attached to inodes. eg. xfs_setattr, xfs_create.
184 * So, if we couldn't purge all the dquots from the filesystem,
185 * we can't get rid of the incore data structures.
186 */
187 while ((nculprits = xfs_qm_dqpurge_all(mp, dqtype)))
188 delay(10 * nculprits);
189
190 /*
191 * Transactions that had started before ACTIVE state bit was cleared
192 * could have logged many dquots, so they'd have higher LSNs than
193 * the first QUOTAOFF log record does. If we happen to crash when
194 * the tail of the log has gone past the QUOTAOFF record, but
195 * before the last dquot modification, those dquots __will__
196 * recover, and that's not good.
197 *
198 * So, we have QUOTAOFF start and end logitems; the start
199 * logitem won't get overwritten until the end logitem appears...
200 */
201 error = xfs_qm_log_quotaoff_end(mp, qoffstart, flags);
202 if (error) {
203 /* We're screwed now. Shutdown is the only option. */
204 xfs_force_shutdown(mp, SHUTDOWN_CORRUPT_INCORE);
205 goto out_unlock;
206 }
207
208 /*
209 * If quotas is completely disabled, close shop.
210 */
211 if (((flags & XFS_MOUNT_QUOTA_ALL) == XFS_MOUNT_QUOTA_SET1) ||
212 ((flags & XFS_MOUNT_QUOTA_ALL) == XFS_MOUNT_QUOTA_SET2)) {
213 mutex_unlock(&q->qi_quotaofflock);
214 xfs_qm_destroy_quotainfo(mp);
215 return (0);
216 }
217
218 /*
219 * Release our quotainode references if we don't need them anymore.
220 */
221 if ((dqtype & XFS_QMOPT_UQUOTA) && q->qi_uquotaip) {
222 IRELE(q->qi_uquotaip);
223 q->qi_uquotaip = NULL;
224 }
225 if ((dqtype & (XFS_QMOPT_GQUOTA|XFS_QMOPT_PQUOTA)) && q->qi_gquotaip) {
226 IRELE(q->qi_gquotaip);
227 q->qi_gquotaip = NULL;
228 }
229
230out_unlock:
231 mutex_unlock(&q->qi_quotaofflock);
232 return error;
233}
234
235STATIC int
236xfs_qm_scall_trunc_qfile(
237 struct xfs_mount *mp,
238 xfs_ino_t ino)
239{
240 struct xfs_inode *ip;
241 struct xfs_trans *tp;
242 int error;
243
244 if (ino == NULLFSINO)
245 return 0;
246
247 error = xfs_iget(mp, NULL, ino, 0, 0, &ip);
248 if (error)
249 return error;
250
251 xfs_ilock(ip, XFS_IOLOCK_EXCL);
252
253 tp = xfs_trans_alloc(mp, XFS_TRANS_TRUNCATE_FILE);
254 error = xfs_trans_reserve(tp, 0, XFS_ITRUNCATE_LOG_RES(mp), 0,
255 XFS_TRANS_PERM_LOG_RES,
256 XFS_ITRUNCATE_LOG_COUNT);
257 if (error) {
258 xfs_trans_cancel(tp, 0);
259 xfs_iunlock(ip, XFS_IOLOCK_EXCL);
260 goto out_put;
261 }
262
263 xfs_ilock(ip, XFS_ILOCK_EXCL);
264 xfs_trans_ijoin(tp, ip);
265
266 error = xfs_itruncate_data(&tp, ip, 0);
267 if (error) {
268 xfs_trans_cancel(tp, XFS_TRANS_RELEASE_LOG_RES |
269 XFS_TRANS_ABORT);
270 goto out_unlock;
271 }
272
273 xfs_trans_ichgtime(tp, ip, XFS_ICHGTIME_MOD | XFS_ICHGTIME_CHG);
274 error = xfs_trans_commit(tp, XFS_TRANS_RELEASE_LOG_RES);
275
276out_unlock:
277 xfs_iunlock(ip, XFS_ILOCK_EXCL | XFS_IOLOCK_EXCL);
278out_put:
279 IRELE(ip);
280 return error;
281}
282
283int
284xfs_qm_scall_trunc_qfiles(
285 xfs_mount_t *mp,
286 uint flags)
287{
288 int error = 0, error2 = 0;
289
290 if (!xfs_sb_version_hasquota(&mp->m_sb) || flags == 0) {
291 xfs_debug(mp, "%s: flags=%x m_qflags=%x\n",
292 __func__, flags, mp->m_qflags);
293 return XFS_ERROR(EINVAL);
294 }
295
296 if (flags & XFS_DQ_USER)
297 error = xfs_qm_scall_trunc_qfile(mp, mp->m_sb.sb_uquotino);
298 if (flags & (XFS_DQ_GROUP|XFS_DQ_PROJ))
299 error2 = xfs_qm_scall_trunc_qfile(mp, mp->m_sb.sb_gquotino);
300
301 return error ? error : error2;
302}
303
304/*
305 * Switch on (a given) quota enforcement for a filesystem. This takes
306 * effect immediately.
307 * (Switching on quota accounting must be done at mount time.)
308 */
309int
310xfs_qm_scall_quotaon(
311 xfs_mount_t *mp,
312 uint flags)
313{
314 int error;
315 uint qf;
316 __int64_t sbflags;
317
318 flags &= (XFS_ALL_QUOTA_ACCT | XFS_ALL_QUOTA_ENFD);
319 /*
320 * Switching on quota accounting must be done at mount time.
321 */
322 flags &= ~(XFS_ALL_QUOTA_ACCT);
323
324 sbflags = 0;
325
326 if (flags == 0) {
327 xfs_debug(mp, "%s: zero flags, m_qflags=%x\n",
328 __func__, mp->m_qflags);
329 return XFS_ERROR(EINVAL);
330 }
331
332 /* No fs can turn on quotas with a delayed effect */
333 ASSERT((flags & XFS_ALL_QUOTA_ACCT) == 0);
334
335 /*
336 * Can't enforce without accounting. We check the superblock
337 * qflags here instead of m_qflags because rootfs can have
338 * quota acct on ondisk without m_qflags' knowing.
339 */
340 if (((flags & XFS_UQUOTA_ACCT) == 0 &&
341 (mp->m_sb.sb_qflags & XFS_UQUOTA_ACCT) == 0 &&
342 (flags & XFS_UQUOTA_ENFD))
343 ||
344 ((flags & XFS_PQUOTA_ACCT) == 0 &&
345 (mp->m_sb.sb_qflags & XFS_PQUOTA_ACCT) == 0 &&
346 (flags & XFS_GQUOTA_ACCT) == 0 &&
347 (mp->m_sb.sb_qflags & XFS_GQUOTA_ACCT) == 0 &&
348 (flags & XFS_OQUOTA_ENFD))) {
349 xfs_debug(mp,
350 "%s: Can't enforce without acct, flags=%x sbflags=%x\n",
351 __func__, flags, mp->m_sb.sb_qflags);
352 return XFS_ERROR(EINVAL);
353 }
354 /*
355 * If everything's up to-date incore, then don't waste time.
356 */
357 if ((mp->m_qflags & flags) == flags)
358 return XFS_ERROR(EEXIST);
359
360 /*
361 * Change sb_qflags on disk but not incore mp->qflags
362 * if this is the root filesystem.
363 */
364 spin_lock(&mp->m_sb_lock);
365 qf = mp->m_sb.sb_qflags;
366 mp->m_sb.sb_qflags = qf | flags;
367 spin_unlock(&mp->m_sb_lock);
368
369 /*
370 * There's nothing to change if it's the same.
371 */
372 if ((qf & flags) == flags && sbflags == 0)
373 return XFS_ERROR(EEXIST);
374 sbflags |= XFS_SB_QFLAGS;
375
376 if ((error = xfs_qm_write_sb_changes(mp, sbflags)))
377 return (error);
378 /*
379 * If we aren't trying to switch on quota enforcement, we are done.
380 */
381 if (((mp->m_sb.sb_qflags & XFS_UQUOTA_ACCT) !=
382 (mp->m_qflags & XFS_UQUOTA_ACCT)) ||
383 ((mp->m_sb.sb_qflags & XFS_PQUOTA_ACCT) !=
384 (mp->m_qflags & XFS_PQUOTA_ACCT)) ||
385 ((mp->m_sb.sb_qflags & XFS_GQUOTA_ACCT) !=
386 (mp->m_qflags & XFS_GQUOTA_ACCT)) ||
387 (flags & XFS_ALL_QUOTA_ENFD) == 0)
388 return (0);
389
390 if (! XFS_IS_QUOTA_RUNNING(mp))
391 return XFS_ERROR(ESRCH);
392
393 /*
394 * Switch on quota enforcement in core.
395 */
396 mutex_lock(&mp->m_quotainfo->qi_quotaofflock);
397 mp->m_qflags |= (flags & XFS_ALL_QUOTA_ENFD);
398 mutex_unlock(&mp->m_quotainfo->qi_quotaofflock);
399
400 return (0);
401}
402
403
404/*
405 * Return quota status information, such as uquota-off, enforcements, etc.
406 */
407int
408xfs_qm_scall_getqstat(
409 struct xfs_mount *mp,
410 struct fs_quota_stat *out)
411{
412 struct xfs_quotainfo *q = mp->m_quotainfo;
413 struct xfs_inode *uip, *gip;
414 boolean_t tempuqip, tempgqip;
415
416 uip = gip = NULL;
417 tempuqip = tempgqip = B_FALSE;
418 memset(out, 0, sizeof(fs_quota_stat_t));
419
420 out->qs_version = FS_QSTAT_VERSION;
421 if (!xfs_sb_version_hasquota(&mp->m_sb)) {
422 out->qs_uquota.qfs_ino = NULLFSINO;
423 out->qs_gquota.qfs_ino = NULLFSINO;
424 return (0);
425 }
426 out->qs_flags = (__uint16_t) xfs_qm_export_flags(mp->m_qflags &
427 (XFS_ALL_QUOTA_ACCT|
428 XFS_ALL_QUOTA_ENFD));
429 out->qs_pad = 0;
430 out->qs_uquota.qfs_ino = mp->m_sb.sb_uquotino;
431 out->qs_gquota.qfs_ino = mp->m_sb.sb_gquotino;
432
433 if (q) {
434 uip = q->qi_uquotaip;
435 gip = q->qi_gquotaip;
436 }
437 if (!uip && mp->m_sb.sb_uquotino != NULLFSINO) {
438 if (xfs_iget(mp, NULL, mp->m_sb.sb_uquotino,
439 0, 0, &uip) == 0)
440 tempuqip = B_TRUE;
441 }
442 if (!gip && mp->m_sb.sb_gquotino != NULLFSINO) {
443 if (xfs_iget(mp, NULL, mp->m_sb.sb_gquotino,
444 0, 0, &gip) == 0)
445 tempgqip = B_TRUE;
446 }
447 if (uip) {
448 out->qs_uquota.qfs_nblks = uip->i_d.di_nblocks;
449 out->qs_uquota.qfs_nextents = uip->i_d.di_nextents;
450 if (tempuqip)
451 IRELE(uip);
452 }
453 if (gip) {
454 out->qs_gquota.qfs_nblks = gip->i_d.di_nblocks;
455 out->qs_gquota.qfs_nextents = gip->i_d.di_nextents;
456 if (tempgqip)
457 IRELE(gip);
458 }
459 if (q) {
460 out->qs_incoredqs = q->qi_dquots;
461 out->qs_btimelimit = q->qi_btimelimit;
462 out->qs_itimelimit = q->qi_itimelimit;
463 out->qs_rtbtimelimit = q->qi_rtbtimelimit;
464 out->qs_bwarnlimit = q->qi_bwarnlimit;
465 out->qs_iwarnlimit = q->qi_iwarnlimit;
466 }
467 return 0;
468}
469
470#define XFS_DQ_MASK \
471 (FS_DQ_LIMIT_MASK | FS_DQ_TIMER_MASK | FS_DQ_WARNS_MASK)
472
473/*
474 * Adjust quota limits, and start/stop timers accordingly.
475 */
476int
477xfs_qm_scall_setqlim(
478 xfs_mount_t *mp,
479 xfs_dqid_t id,
480 uint type,
481 fs_disk_quota_t *newlim)
482{
483 struct xfs_quotainfo *q = mp->m_quotainfo;
484 xfs_disk_dquot_t *ddq;
485 xfs_dquot_t *dqp;
486 xfs_trans_t *tp;
487 int error;
488 xfs_qcnt_t hard, soft;
489
490 if (newlim->d_fieldmask & ~XFS_DQ_MASK)
491 return EINVAL;
492 if ((newlim->d_fieldmask & XFS_DQ_MASK) == 0)
493 return 0;
494
495 tp = xfs_trans_alloc(mp, XFS_TRANS_QM_SETQLIM);
496 if ((error = xfs_trans_reserve(tp, 0, sizeof(xfs_disk_dquot_t) + 128,
497 0, 0, XFS_DEFAULT_LOG_COUNT))) {
498 xfs_trans_cancel(tp, 0);
499 return (error);
500 }
501
502 /*
503 * We don't want to race with a quotaoff so take the quotaoff lock.
504 * (We don't hold an inode lock, so there's nothing else to stop
505 * a quotaoff from happening). (XXXThis doesn't currently happen
506 * because we take the vfslock before calling xfs_qm_sysent).
507 */
508 mutex_lock(&q->qi_quotaofflock);
509
510 /*
511 * Get the dquot (locked), and join it to the transaction.
512 * Allocate the dquot if this doesn't exist.
513 */
514 if ((error = xfs_qm_dqget(mp, NULL, id, type, XFS_QMOPT_DQALLOC, &dqp))) {
515 xfs_trans_cancel(tp, XFS_TRANS_ABORT);
516 ASSERT(error != ENOENT);
517 goto out_unlock;
518 }
519 xfs_trans_dqjoin(tp, dqp);
520 ddq = &dqp->q_core;
521
522 /*
523 * Make sure that hardlimits are >= soft limits before changing.
524 */
525 hard = (newlim->d_fieldmask & FS_DQ_BHARD) ?
526 (xfs_qcnt_t) XFS_BB_TO_FSB(mp, newlim->d_blk_hardlimit) :
527 be64_to_cpu(ddq->d_blk_hardlimit);
528 soft = (newlim->d_fieldmask & FS_DQ_BSOFT) ?
529 (xfs_qcnt_t) XFS_BB_TO_FSB(mp, newlim->d_blk_softlimit) :
530 be64_to_cpu(ddq->d_blk_softlimit);
531 if (hard == 0 || hard >= soft) {
532 ddq->d_blk_hardlimit = cpu_to_be64(hard);
533 ddq->d_blk_softlimit = cpu_to_be64(soft);
534 if (id == 0) {
535 q->qi_bhardlimit = hard;
536 q->qi_bsoftlimit = soft;
537 }
538 } else {
539 xfs_debug(mp, "blkhard %Ld < blksoft %Ld\n", hard, soft);
540 }
541 hard = (newlim->d_fieldmask & FS_DQ_RTBHARD) ?
542 (xfs_qcnt_t) XFS_BB_TO_FSB(mp, newlim->d_rtb_hardlimit) :
543 be64_to_cpu(ddq->d_rtb_hardlimit);
544 soft = (newlim->d_fieldmask & FS_DQ_RTBSOFT) ?
545 (xfs_qcnt_t) XFS_BB_TO_FSB(mp, newlim->d_rtb_softlimit) :
546 be64_to_cpu(ddq->d_rtb_softlimit);
547 if (hard == 0 || hard >= soft) {
548 ddq->d_rtb_hardlimit = cpu_to_be64(hard);
549 ddq->d_rtb_softlimit = cpu_to_be64(soft);
550 if (id == 0) {
551 q->qi_rtbhardlimit = hard;
552 q->qi_rtbsoftlimit = soft;
553 }
554 } else {
555 xfs_debug(mp, "rtbhard %Ld < rtbsoft %Ld\n", hard, soft);
556 }
557
558 hard = (newlim->d_fieldmask & FS_DQ_IHARD) ?
559 (xfs_qcnt_t) newlim->d_ino_hardlimit :
560 be64_to_cpu(ddq->d_ino_hardlimit);
561 soft = (newlim->d_fieldmask & FS_DQ_ISOFT) ?
562 (xfs_qcnt_t) newlim->d_ino_softlimit :
563 be64_to_cpu(ddq->d_ino_softlimit);
564 if (hard == 0 || hard >= soft) {
565 ddq->d_ino_hardlimit = cpu_to_be64(hard);
566 ddq->d_ino_softlimit = cpu_to_be64(soft);
567 if (id == 0) {
568 q->qi_ihardlimit = hard;
569 q->qi_isoftlimit = soft;
570 }
571 } else {
572 xfs_debug(mp, "ihard %Ld < isoft %Ld\n", hard, soft);
573 }
574
575 /*
576 * Update warnings counter(s) if requested
577 */
578 if (newlim->d_fieldmask & FS_DQ_BWARNS)
579 ddq->d_bwarns = cpu_to_be16(newlim->d_bwarns);
580 if (newlim->d_fieldmask & FS_DQ_IWARNS)
581 ddq->d_iwarns = cpu_to_be16(newlim->d_iwarns);
582 if (newlim->d_fieldmask & FS_DQ_RTBWARNS)
583 ddq->d_rtbwarns = cpu_to_be16(newlim->d_rtbwarns);
584
585 if (id == 0) {
586 /*
587 * Timelimits for the super user set the relative time
588 * the other users can be over quota for this file system.
589 * If it is zero a default is used. Ditto for the default
590 * soft and hard limit values (already done, above), and
591 * for warnings.
592 */
593 if (newlim->d_fieldmask & FS_DQ_BTIMER) {
594 q->qi_btimelimit = newlim->d_btimer;
595 ddq->d_btimer = cpu_to_be32(newlim->d_btimer);
596 }
597 if (newlim->d_fieldmask & FS_DQ_ITIMER) {
598 q->qi_itimelimit = newlim->d_itimer;
599 ddq->d_itimer = cpu_to_be32(newlim->d_itimer);
600 }
601 if (newlim->d_fieldmask & FS_DQ_RTBTIMER) {
602 q->qi_rtbtimelimit = newlim->d_rtbtimer;
603 ddq->d_rtbtimer = cpu_to_be32(newlim->d_rtbtimer);
604 }
605 if (newlim->d_fieldmask & FS_DQ_BWARNS)
606 q->qi_bwarnlimit = newlim->d_bwarns;
607 if (newlim->d_fieldmask & FS_DQ_IWARNS)
608 q->qi_iwarnlimit = newlim->d_iwarns;
609 if (newlim->d_fieldmask & FS_DQ_RTBWARNS)
610 q->qi_rtbwarnlimit = newlim->d_rtbwarns;
611 } else {
612 /*
613 * If the user is now over quota, start the timelimit.
614 * The user will not be 'warned'.
615 * Note that we keep the timers ticking, whether enforcement
616 * is on or off. We don't really want to bother with iterating
617 * over all ondisk dquots and turning the timers on/off.
618 */
619 xfs_qm_adjust_dqtimers(mp, ddq);
620 }
621 dqp->dq_flags |= XFS_DQ_DIRTY;
622 xfs_trans_log_dquot(tp, dqp);
623
624 error = xfs_trans_commit(tp, 0);
625 xfs_qm_dqrele(dqp);
626
627 out_unlock:
628 mutex_unlock(&q->qi_quotaofflock);
629 return error;
630}
631
632int
633xfs_qm_scall_getquota(
634 xfs_mount_t *mp,
635 xfs_dqid_t id,
636 uint type,
637 fs_disk_quota_t *out)
638{
639 xfs_dquot_t *dqp;
640 int error;
641
642 /*
643 * Try to get the dquot. We don't want it allocated on disk, so
644 * we aren't passing the XFS_QMOPT_DOALLOC flag. If it doesn't
645 * exist, we'll get ENOENT back.
646 */
647 if ((error = xfs_qm_dqget(mp, NULL, id, type, 0, &dqp))) {
648 return (error);
649 }
650
651 /*
652 * If everything's NULL, this dquot doesn't quite exist as far as
653 * our utility programs are concerned.
654 */
655 if (XFS_IS_DQUOT_UNINITIALIZED(dqp)) {
656 xfs_qm_dqput(dqp);
657 return XFS_ERROR(ENOENT);
658 }
659 /*
660 * Convert the disk dquot to the exportable format
661 */
662 xfs_qm_export_dquot(mp, &dqp->q_core, out);
663 xfs_qm_dqput(dqp);
664 return (error ? XFS_ERROR(EFAULT) : 0);
665}
666
667
668STATIC int
669xfs_qm_log_quotaoff_end(
670 xfs_mount_t *mp,
671 xfs_qoff_logitem_t *startqoff,
672 uint flags)
673{
674 xfs_trans_t *tp;
675 int error;
676 xfs_qoff_logitem_t *qoffi;
677
678 tp = xfs_trans_alloc(mp, XFS_TRANS_QM_QUOTAOFF_END);
679
680 if ((error = xfs_trans_reserve(tp, 0, sizeof(xfs_qoff_logitem_t) * 2,
681 0, 0, XFS_DEFAULT_LOG_COUNT))) {
682 xfs_trans_cancel(tp, 0);
683 return (error);
684 }
685
686 qoffi = xfs_trans_get_qoff_item(tp, startqoff,
687 flags & XFS_ALL_QUOTA_ACCT);
688 xfs_trans_log_quotaoff_item(tp, qoffi);
689
690 /*
691 * We have to make sure that the transaction is secure on disk before we
692 * return and actually stop quota accounting. So, make it synchronous.
693 * We don't care about quotoff's performance.
694 */
695 xfs_trans_set_sync(tp);
696 error = xfs_trans_commit(tp, 0);
697 return (error);
698}
699
700
701STATIC int
702xfs_qm_log_quotaoff(
703 xfs_mount_t *mp,
704 xfs_qoff_logitem_t **qoffstartp,
705 uint flags)
706{
707 xfs_trans_t *tp;
708 int error;
709 xfs_qoff_logitem_t *qoffi=NULL;
710 uint oldsbqflag=0;
711
712 tp = xfs_trans_alloc(mp, XFS_TRANS_QM_QUOTAOFF);
713 if ((error = xfs_trans_reserve(tp, 0,
714 sizeof(xfs_qoff_logitem_t) * 2 +
715 mp->m_sb.sb_sectsize + 128,
716 0,
717 0,
718 XFS_DEFAULT_LOG_COUNT))) {
719 goto error0;
720 }
721
722 qoffi = xfs_trans_get_qoff_item(tp, NULL, flags & XFS_ALL_QUOTA_ACCT);
723 xfs_trans_log_quotaoff_item(tp, qoffi);
724
725 spin_lock(&mp->m_sb_lock);
726 oldsbqflag = mp->m_sb.sb_qflags;
727 mp->m_sb.sb_qflags = (mp->m_qflags & ~(flags)) & XFS_MOUNT_QUOTA_ALL;
728 spin_unlock(&mp->m_sb_lock);
729
730 xfs_mod_sb(tp, XFS_SB_QFLAGS);
731
732 /*
733 * We have to make sure that the transaction is secure on disk before we
734 * return and actually stop quota accounting. So, make it synchronous.
735 * We don't care about quotoff's performance.
736 */
737 xfs_trans_set_sync(tp);
738 error = xfs_trans_commit(tp, 0);
739
740error0:
741 if (error) {
742 xfs_trans_cancel(tp, 0);
743 /*
744 * No one else is modifying sb_qflags, so this is OK.
745 * We still hold the quotaofflock.
746 */
747 spin_lock(&mp->m_sb_lock);
748 mp->m_sb.sb_qflags = oldsbqflag;
749 spin_unlock(&mp->m_sb_lock);
750 }
751 *qoffstartp = qoffi;
752 return (error);
753}
754
755
756/*
757 * Translate an internal style on-disk-dquot to the exportable format.
758 * The main differences are that the counters/limits are all in Basic
759 * Blocks (BBs) instead of the internal FSBs, and all on-disk data has
760 * to be converted to the native endianness.
761 */
762STATIC void
763xfs_qm_export_dquot(
764 xfs_mount_t *mp,
765 xfs_disk_dquot_t *src,
766 struct fs_disk_quota *dst)
767{
768 memset(dst, 0, sizeof(*dst));
769 dst->d_version = FS_DQUOT_VERSION; /* different from src->d_version */
770 dst->d_flags = xfs_qm_export_qtype_flags(src->d_flags);
771 dst->d_id = be32_to_cpu(src->d_id);
772 dst->d_blk_hardlimit =
773 XFS_FSB_TO_BB(mp, be64_to_cpu(src->d_blk_hardlimit));
774 dst->d_blk_softlimit =
775 XFS_FSB_TO_BB(mp, be64_to_cpu(src->d_blk_softlimit));
776 dst->d_ino_hardlimit = be64_to_cpu(src->d_ino_hardlimit);
777 dst->d_ino_softlimit = be64_to_cpu(src->d_ino_softlimit);
778 dst->d_bcount = XFS_FSB_TO_BB(mp, be64_to_cpu(src->d_bcount));
779 dst->d_icount = be64_to_cpu(src->d_icount);
780 dst->d_btimer = be32_to_cpu(src->d_btimer);
781 dst->d_itimer = be32_to_cpu(src->d_itimer);
782 dst->d_iwarns = be16_to_cpu(src->d_iwarns);
783 dst->d_bwarns = be16_to_cpu(src->d_bwarns);
784 dst->d_rtb_hardlimit =
785 XFS_FSB_TO_BB(mp, be64_to_cpu(src->d_rtb_hardlimit));
786 dst->d_rtb_softlimit =
787 XFS_FSB_TO_BB(mp, be64_to_cpu(src->d_rtb_softlimit));
788 dst->d_rtbcount = XFS_FSB_TO_BB(mp, be64_to_cpu(src->d_rtbcount));
789 dst->d_rtbtimer = be32_to_cpu(src->d_rtbtimer);
790 dst->d_rtbwarns = be16_to_cpu(src->d_rtbwarns);
791
792 /*
793 * Internally, we don't reset all the timers when quota enforcement
794 * gets turned off. No need to confuse the user level code,
795 * so return zeroes in that case.
796 */
797 if ((!XFS_IS_UQUOTA_ENFORCED(mp) && src->d_flags == XFS_DQ_USER) ||
798 (!XFS_IS_OQUOTA_ENFORCED(mp) &&
799 (src->d_flags & (XFS_DQ_PROJ | XFS_DQ_GROUP)))) {
800 dst->d_btimer = 0;
801 dst->d_itimer = 0;
802 dst->d_rtbtimer = 0;
803 }
804
805#ifdef DEBUG
806 if (((XFS_IS_UQUOTA_ENFORCED(mp) && dst->d_flags == FS_USER_QUOTA) ||
807 (XFS_IS_OQUOTA_ENFORCED(mp) &&
808 (dst->d_flags & (FS_PROJ_QUOTA | FS_GROUP_QUOTA)))) &&
809 dst->d_id != 0) {
810 if (((int) dst->d_bcount >= (int) dst->d_blk_softlimit) &&
811 (dst->d_blk_softlimit > 0)) {
812 ASSERT(dst->d_btimer != 0);
813 }
814 if (((int) dst->d_icount >= (int) dst->d_ino_softlimit) &&
815 (dst->d_ino_softlimit > 0)) {
816 ASSERT(dst->d_itimer != 0);
817 }
818 }
819#endif
820}
821
822STATIC uint
823xfs_qm_export_qtype_flags(
824 uint flags)
825{
826 /*
827 * Can't be more than one, or none.
828 */
829 ASSERT((flags & (FS_PROJ_QUOTA | FS_USER_QUOTA)) !=
830 (FS_PROJ_QUOTA | FS_USER_QUOTA));
831 ASSERT((flags & (FS_PROJ_QUOTA | FS_GROUP_QUOTA)) !=
832 (FS_PROJ_QUOTA | FS_GROUP_QUOTA));
833 ASSERT((flags & (FS_USER_QUOTA | FS_GROUP_QUOTA)) !=
834 (FS_USER_QUOTA | FS_GROUP_QUOTA));
835 ASSERT((flags & (FS_PROJ_QUOTA|FS_USER_QUOTA|FS_GROUP_QUOTA)) != 0);
836
837 return (flags & XFS_DQ_USER) ?
838 FS_USER_QUOTA : (flags & XFS_DQ_PROJ) ?
839 FS_PROJ_QUOTA : FS_GROUP_QUOTA;
840}
841
842STATIC uint
843xfs_qm_export_flags(
844 uint flags)
845{
846 uint uflags;
847
848 uflags = 0;
849 if (flags & XFS_UQUOTA_ACCT)
850 uflags |= FS_QUOTA_UDQ_ACCT;
851 if (flags & XFS_PQUOTA_ACCT)
852 uflags |= FS_QUOTA_PDQ_ACCT;
853 if (flags & XFS_GQUOTA_ACCT)
854 uflags |= FS_QUOTA_GDQ_ACCT;
855 if (flags & XFS_UQUOTA_ENFD)
856 uflags |= FS_QUOTA_UDQ_ENFD;
857 if (flags & (XFS_OQUOTA_ENFD)) {
858 uflags |= (flags & XFS_GQUOTA_ACCT) ?
859 FS_QUOTA_GDQ_ENFD : FS_QUOTA_PDQ_ENFD;
860 }
861 return (uflags);
862}
863
864
865STATIC int
866xfs_dqrele_inode(
867 struct xfs_inode *ip,
868 struct xfs_perag *pag,
869 int flags)
870{
871 /* skip quota inodes */
872 if (ip == ip->i_mount->m_quotainfo->qi_uquotaip ||
873 ip == ip->i_mount->m_quotainfo->qi_gquotaip) {
874 ASSERT(ip->i_udquot == NULL);
875 ASSERT(ip->i_gdquot == NULL);
876 return 0;
877 }
878
879 xfs_ilock(ip, XFS_ILOCK_EXCL);
880 if ((flags & XFS_UQUOTA_ACCT) && ip->i_udquot) {
881 xfs_qm_dqrele(ip->i_udquot);
882 ip->i_udquot = NULL;
883 }
884 if (flags & (XFS_PQUOTA_ACCT|XFS_GQUOTA_ACCT) && ip->i_gdquot) {
885 xfs_qm_dqrele(ip->i_gdquot);
886 ip->i_gdquot = NULL;
887 }
888 xfs_iunlock(ip, XFS_ILOCK_EXCL);
889 return 0;
890}
891
892
893/*
894 * Go thru all the inodes in the file system, releasing their dquots.
895 *
896 * Note that the mount structure gets modified to indicate that quotas are off
897 * AFTER this, in the case of quotaoff.
898 */
899void
900xfs_qm_dqrele_all_inodes(
901 struct xfs_mount *mp,
902 uint flags)
903{
904 ASSERT(mp->m_quotainfo);
905 xfs_inode_ag_iterator(mp, xfs_dqrele_inode, flags);
906}
1/*
2 * Copyright (c) 2000-2005 Silicon Graphics, Inc.
3 * All Rights Reserved.
4 *
5 * This program is free software; you can redistribute it and/or
6 * modify it under the terms of the GNU General Public License as
7 * published by the Free Software Foundation.
8 *
9 * This program is distributed in the hope that it would be useful,
10 * but WITHOUT ANY WARRANTY; without even the implied warranty of
11 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12 * GNU General Public License for more details.
13 *
14 * You should have received a copy of the GNU General Public License
15 * along with this program; if not, write the Free Software Foundation,
16 * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
17 */
18
19#include <linux/capability.h>
20
21#include "xfs.h"
22#include "xfs_fs.h"
23#include "xfs_bit.h"
24#include "xfs_log.h"
25#include "xfs_trans.h"
26#include "xfs_sb.h"
27#include "xfs_ag.h"
28#include "xfs_alloc.h"
29#include "xfs_quota.h"
30#include "xfs_mount.h"
31#include "xfs_bmap_btree.h"
32#include "xfs_inode.h"
33#include "xfs_inode_item.h"
34#include "xfs_itable.h"
35#include "xfs_bmap.h"
36#include "xfs_rtalloc.h"
37#include "xfs_error.h"
38#include "xfs_attr.h"
39#include "xfs_buf_item.h"
40#include "xfs_utils.h"
41#include "xfs_qm.h"
42#include "xfs_trace.h"
43
44STATIC int xfs_qm_log_quotaoff(xfs_mount_t *, xfs_qoff_logitem_t **, uint);
45STATIC int xfs_qm_log_quotaoff_end(xfs_mount_t *, xfs_qoff_logitem_t *,
46 uint);
47STATIC uint xfs_qm_export_flags(uint);
48STATIC uint xfs_qm_export_qtype_flags(uint);
49
50/*
51 * Turn off quota accounting and/or enforcement for all udquots and/or
52 * gdquots. Called only at unmount time.
53 *
54 * This assumes that there are no dquots of this file system cached
55 * incore, and modifies the ondisk dquot directly. Therefore, for example,
56 * it is an error to call this twice, without purging the cache.
57 */
58int
59xfs_qm_scall_quotaoff(
60 xfs_mount_t *mp,
61 uint flags)
62{
63 struct xfs_quotainfo *q = mp->m_quotainfo;
64 uint dqtype;
65 int error;
66 uint inactivate_flags;
67 xfs_qoff_logitem_t *qoffstart;
68
69 /*
70 * No file system can have quotas enabled on disk but not in core.
71 * Note that quota utilities (like quotaoff) _expect_
72 * errno == EEXIST here.
73 */
74 if ((mp->m_qflags & flags) == 0)
75 return XFS_ERROR(EEXIST);
76 error = 0;
77
78 flags &= (XFS_ALL_QUOTA_ACCT | XFS_ALL_QUOTA_ENFD);
79
80 /*
81 * We don't want to deal with two quotaoffs messing up each other,
82 * so we're going to serialize it. quotaoff isn't exactly a performance
83 * critical thing.
84 * If quotaoff, then we must be dealing with the root filesystem.
85 */
86 ASSERT(q);
87 mutex_lock(&q->qi_quotaofflock);
88
89 /*
90 * If we're just turning off quota enforcement, change mp and go.
91 */
92 if ((flags & XFS_ALL_QUOTA_ACCT) == 0) {
93 mp->m_qflags &= ~(flags);
94
95 spin_lock(&mp->m_sb_lock);
96 mp->m_sb.sb_qflags = mp->m_qflags;
97 spin_unlock(&mp->m_sb_lock);
98 mutex_unlock(&q->qi_quotaofflock);
99
100 /* XXX what to do if error ? Revert back to old vals incore ? */
101 error = xfs_qm_write_sb_changes(mp, XFS_SB_QFLAGS);
102 return (error);
103 }
104
105 dqtype = 0;
106 inactivate_flags = 0;
107 /*
108 * If accounting is off, we must turn enforcement off, clear the
109 * quota 'CHKD' certificate to make it known that we have to
110 * do a quotacheck the next time this quota is turned on.
111 */
112 if (flags & XFS_UQUOTA_ACCT) {
113 dqtype |= XFS_QMOPT_UQUOTA;
114 flags |= (XFS_UQUOTA_CHKD | XFS_UQUOTA_ENFD);
115 inactivate_flags |= XFS_UQUOTA_ACTIVE;
116 }
117 if (flags & XFS_GQUOTA_ACCT) {
118 dqtype |= XFS_QMOPT_GQUOTA;
119 flags |= (XFS_OQUOTA_CHKD | XFS_OQUOTA_ENFD);
120 inactivate_flags |= XFS_GQUOTA_ACTIVE;
121 } else if (flags & XFS_PQUOTA_ACCT) {
122 dqtype |= XFS_QMOPT_PQUOTA;
123 flags |= (XFS_OQUOTA_CHKD | XFS_OQUOTA_ENFD);
124 inactivate_flags |= XFS_PQUOTA_ACTIVE;
125 }
126
127 /*
128 * Nothing to do? Don't complain. This happens when we're just
129 * turning off quota enforcement.
130 */
131 if ((mp->m_qflags & flags) == 0)
132 goto out_unlock;
133
134 /*
135 * Write the LI_QUOTAOFF log record, and do SB changes atomically,
136 * and synchronously. If we fail to write, we should abort the
137 * operation as it cannot be recovered safely if we crash.
138 */
139 error = xfs_qm_log_quotaoff(mp, &qoffstart, flags);
140 if (error)
141 goto out_unlock;
142
143 /*
144 * Next we clear the XFS_MOUNT_*DQ_ACTIVE bit(s) in the mount struct
145 * to take care of the race between dqget and quotaoff. We don't take
146 * any special locks to reset these bits. All processes need to check
147 * these bits *after* taking inode lock(s) to see if the particular
148 * quota type is in the process of being turned off. If *ACTIVE, it is
149 * guaranteed that all dquot structures and all quotainode ptrs will all
150 * stay valid as long as that inode is kept locked.
151 *
152 * There is no turning back after this.
153 */
154 mp->m_qflags &= ~inactivate_flags;
155
156 /*
157 * Give back all the dquot reference(s) held by inodes.
158 * Here we go thru every single incore inode in this file system, and
159 * do a dqrele on the i_udquot/i_gdquot that it may have.
160 * Essentially, as long as somebody has an inode locked, this guarantees
161 * that quotas will not be turned off. This is handy because in a
162 * transaction once we lock the inode(s) and check for quotaon, we can
163 * depend on the quota inodes (and other things) being valid as long as
164 * we keep the lock(s).
165 */
166 xfs_qm_dqrele_all_inodes(mp, flags);
167
168 /*
169 * Next we make the changes in the quota flag in the mount struct.
170 * This isn't protected by a particular lock directly, because we
171 * don't want to take a mrlock every time we depend on quotas being on.
172 */
173 mp->m_qflags &= ~flags;
174
175 /*
176 * Go through all the dquots of this file system and purge them,
177 * according to what was turned off.
178 */
179 xfs_qm_dqpurge_all(mp, dqtype);
180
181 /*
182 * Transactions that had started before ACTIVE state bit was cleared
183 * could have logged many dquots, so they'd have higher LSNs than
184 * the first QUOTAOFF log record does. If we happen to crash when
185 * the tail of the log has gone past the QUOTAOFF record, but
186 * before the last dquot modification, those dquots __will__
187 * recover, and that's not good.
188 *
189 * So, we have QUOTAOFF start and end logitems; the start
190 * logitem won't get overwritten until the end logitem appears...
191 */
192 error = xfs_qm_log_quotaoff_end(mp, qoffstart, flags);
193 if (error) {
194 /* We're screwed now. Shutdown is the only option. */
195 xfs_force_shutdown(mp, SHUTDOWN_CORRUPT_INCORE);
196 goto out_unlock;
197 }
198
199 /*
200 * If quotas is completely disabled, close shop.
201 */
202 if (((flags & XFS_MOUNT_QUOTA_ALL) == XFS_MOUNT_QUOTA_SET1) ||
203 ((flags & XFS_MOUNT_QUOTA_ALL) == XFS_MOUNT_QUOTA_SET2)) {
204 mutex_unlock(&q->qi_quotaofflock);
205 xfs_qm_destroy_quotainfo(mp);
206 return (0);
207 }
208
209 /*
210 * Release our quotainode references if we don't need them anymore.
211 */
212 if ((dqtype & XFS_QMOPT_UQUOTA) && q->qi_uquotaip) {
213 IRELE(q->qi_uquotaip);
214 q->qi_uquotaip = NULL;
215 }
216 if ((dqtype & (XFS_QMOPT_GQUOTA|XFS_QMOPT_PQUOTA)) && q->qi_gquotaip) {
217 IRELE(q->qi_gquotaip);
218 q->qi_gquotaip = NULL;
219 }
220
221out_unlock:
222 mutex_unlock(&q->qi_quotaofflock);
223 return error;
224}
225
226STATIC int
227xfs_qm_scall_trunc_qfile(
228 struct xfs_mount *mp,
229 xfs_ino_t ino)
230{
231 struct xfs_inode *ip;
232 struct xfs_trans *tp;
233 int error;
234
235 if (ino == NULLFSINO)
236 return 0;
237
238 error = xfs_iget(mp, NULL, ino, 0, 0, &ip);
239 if (error)
240 return error;
241
242 xfs_ilock(ip, XFS_IOLOCK_EXCL);
243
244 tp = xfs_trans_alloc(mp, XFS_TRANS_TRUNCATE_FILE);
245 error = xfs_trans_reserve(tp, 0, XFS_ITRUNCATE_LOG_RES(mp), 0,
246 XFS_TRANS_PERM_LOG_RES,
247 XFS_ITRUNCATE_LOG_COUNT);
248 if (error) {
249 xfs_trans_cancel(tp, 0);
250 xfs_iunlock(ip, XFS_IOLOCK_EXCL);
251 goto out_put;
252 }
253
254 xfs_ilock(ip, XFS_ILOCK_EXCL);
255 xfs_trans_ijoin(tp, ip, 0);
256
257 ip->i_d.di_size = 0;
258 xfs_trans_log_inode(tp, ip, XFS_ILOG_CORE);
259
260 error = xfs_itruncate_extents(&tp, ip, XFS_DATA_FORK, 0);
261 if (error) {
262 xfs_trans_cancel(tp, XFS_TRANS_RELEASE_LOG_RES |
263 XFS_TRANS_ABORT);
264 goto out_unlock;
265 }
266
267 ASSERT(ip->i_d.di_nextents == 0);
268
269 xfs_trans_ichgtime(tp, ip, XFS_ICHGTIME_MOD | XFS_ICHGTIME_CHG);
270 error = xfs_trans_commit(tp, XFS_TRANS_RELEASE_LOG_RES);
271
272out_unlock:
273 xfs_iunlock(ip, XFS_ILOCK_EXCL | XFS_IOLOCK_EXCL);
274out_put:
275 IRELE(ip);
276 return error;
277}
278
279int
280xfs_qm_scall_trunc_qfiles(
281 xfs_mount_t *mp,
282 uint flags)
283{
284 int error = 0, error2 = 0;
285
286 if (!xfs_sb_version_hasquota(&mp->m_sb) || flags == 0) {
287 xfs_debug(mp, "%s: flags=%x m_qflags=%x\n",
288 __func__, flags, mp->m_qflags);
289 return XFS_ERROR(EINVAL);
290 }
291
292 if (flags & XFS_DQ_USER)
293 error = xfs_qm_scall_trunc_qfile(mp, mp->m_sb.sb_uquotino);
294 if (flags & (XFS_DQ_GROUP|XFS_DQ_PROJ))
295 error2 = xfs_qm_scall_trunc_qfile(mp, mp->m_sb.sb_gquotino);
296
297 return error ? error : error2;
298}
299
300/*
301 * Switch on (a given) quota enforcement for a filesystem. This takes
302 * effect immediately.
303 * (Switching on quota accounting must be done at mount time.)
304 */
305int
306xfs_qm_scall_quotaon(
307 xfs_mount_t *mp,
308 uint flags)
309{
310 int error;
311 uint qf;
312 __int64_t sbflags;
313
314 flags &= (XFS_ALL_QUOTA_ACCT | XFS_ALL_QUOTA_ENFD);
315 /*
316 * Switching on quota accounting must be done at mount time.
317 */
318 flags &= ~(XFS_ALL_QUOTA_ACCT);
319
320 sbflags = 0;
321
322 if (flags == 0) {
323 xfs_debug(mp, "%s: zero flags, m_qflags=%x\n",
324 __func__, mp->m_qflags);
325 return XFS_ERROR(EINVAL);
326 }
327
328 /* No fs can turn on quotas with a delayed effect */
329 ASSERT((flags & XFS_ALL_QUOTA_ACCT) == 0);
330
331 /*
332 * Can't enforce without accounting. We check the superblock
333 * qflags here instead of m_qflags because rootfs can have
334 * quota acct on ondisk without m_qflags' knowing.
335 */
336 if (((flags & XFS_UQUOTA_ACCT) == 0 &&
337 (mp->m_sb.sb_qflags & XFS_UQUOTA_ACCT) == 0 &&
338 (flags & XFS_UQUOTA_ENFD))
339 ||
340 ((flags & XFS_PQUOTA_ACCT) == 0 &&
341 (mp->m_sb.sb_qflags & XFS_PQUOTA_ACCT) == 0 &&
342 (flags & XFS_GQUOTA_ACCT) == 0 &&
343 (mp->m_sb.sb_qflags & XFS_GQUOTA_ACCT) == 0 &&
344 (flags & XFS_OQUOTA_ENFD))) {
345 xfs_debug(mp,
346 "%s: Can't enforce without acct, flags=%x sbflags=%x\n",
347 __func__, flags, mp->m_sb.sb_qflags);
348 return XFS_ERROR(EINVAL);
349 }
350 /*
351 * If everything's up to-date incore, then don't waste time.
352 */
353 if ((mp->m_qflags & flags) == flags)
354 return XFS_ERROR(EEXIST);
355
356 /*
357 * Change sb_qflags on disk but not incore mp->qflags
358 * if this is the root filesystem.
359 */
360 spin_lock(&mp->m_sb_lock);
361 qf = mp->m_sb.sb_qflags;
362 mp->m_sb.sb_qflags = qf | flags;
363 spin_unlock(&mp->m_sb_lock);
364
365 /*
366 * There's nothing to change if it's the same.
367 */
368 if ((qf & flags) == flags && sbflags == 0)
369 return XFS_ERROR(EEXIST);
370 sbflags |= XFS_SB_QFLAGS;
371
372 if ((error = xfs_qm_write_sb_changes(mp, sbflags)))
373 return (error);
374 /*
375 * If we aren't trying to switch on quota enforcement, we are done.
376 */
377 if (((mp->m_sb.sb_qflags & XFS_UQUOTA_ACCT) !=
378 (mp->m_qflags & XFS_UQUOTA_ACCT)) ||
379 ((mp->m_sb.sb_qflags & XFS_PQUOTA_ACCT) !=
380 (mp->m_qflags & XFS_PQUOTA_ACCT)) ||
381 ((mp->m_sb.sb_qflags & XFS_GQUOTA_ACCT) !=
382 (mp->m_qflags & XFS_GQUOTA_ACCT)) ||
383 (flags & XFS_ALL_QUOTA_ENFD) == 0)
384 return (0);
385
386 if (! XFS_IS_QUOTA_RUNNING(mp))
387 return XFS_ERROR(ESRCH);
388
389 /*
390 * Switch on quota enforcement in core.
391 */
392 mutex_lock(&mp->m_quotainfo->qi_quotaofflock);
393 mp->m_qflags |= (flags & XFS_ALL_QUOTA_ENFD);
394 mutex_unlock(&mp->m_quotainfo->qi_quotaofflock);
395
396 return (0);
397}
398
399
400/*
401 * Return quota status information, such as uquota-off, enforcements, etc.
402 */
403int
404xfs_qm_scall_getqstat(
405 struct xfs_mount *mp,
406 struct fs_quota_stat *out)
407{
408 struct xfs_quotainfo *q = mp->m_quotainfo;
409 struct xfs_inode *uip, *gip;
410 boolean_t tempuqip, tempgqip;
411
412 uip = gip = NULL;
413 tempuqip = tempgqip = B_FALSE;
414 memset(out, 0, sizeof(fs_quota_stat_t));
415
416 out->qs_version = FS_QSTAT_VERSION;
417 if (!xfs_sb_version_hasquota(&mp->m_sb)) {
418 out->qs_uquota.qfs_ino = NULLFSINO;
419 out->qs_gquota.qfs_ino = NULLFSINO;
420 return (0);
421 }
422 out->qs_flags = (__uint16_t) xfs_qm_export_flags(mp->m_qflags &
423 (XFS_ALL_QUOTA_ACCT|
424 XFS_ALL_QUOTA_ENFD));
425 out->qs_pad = 0;
426 out->qs_uquota.qfs_ino = mp->m_sb.sb_uquotino;
427 out->qs_gquota.qfs_ino = mp->m_sb.sb_gquotino;
428
429 if (q) {
430 uip = q->qi_uquotaip;
431 gip = q->qi_gquotaip;
432 }
433 if (!uip && mp->m_sb.sb_uquotino != NULLFSINO) {
434 if (xfs_iget(mp, NULL, mp->m_sb.sb_uquotino,
435 0, 0, &uip) == 0)
436 tempuqip = B_TRUE;
437 }
438 if (!gip && mp->m_sb.sb_gquotino != NULLFSINO) {
439 if (xfs_iget(mp, NULL, mp->m_sb.sb_gquotino,
440 0, 0, &gip) == 0)
441 tempgqip = B_TRUE;
442 }
443 if (uip) {
444 out->qs_uquota.qfs_nblks = uip->i_d.di_nblocks;
445 out->qs_uquota.qfs_nextents = uip->i_d.di_nextents;
446 if (tempuqip)
447 IRELE(uip);
448 }
449 if (gip) {
450 out->qs_gquota.qfs_nblks = gip->i_d.di_nblocks;
451 out->qs_gquota.qfs_nextents = gip->i_d.di_nextents;
452 if (tempgqip)
453 IRELE(gip);
454 }
455 if (q) {
456 out->qs_incoredqs = q->qi_dquots;
457 out->qs_btimelimit = q->qi_btimelimit;
458 out->qs_itimelimit = q->qi_itimelimit;
459 out->qs_rtbtimelimit = q->qi_rtbtimelimit;
460 out->qs_bwarnlimit = q->qi_bwarnlimit;
461 out->qs_iwarnlimit = q->qi_iwarnlimit;
462 }
463 return 0;
464}
465
466#define XFS_DQ_MASK \
467 (FS_DQ_LIMIT_MASK | FS_DQ_TIMER_MASK | FS_DQ_WARNS_MASK)
468
469/*
470 * Adjust quota limits, and start/stop timers accordingly.
471 */
472int
473xfs_qm_scall_setqlim(
474 xfs_mount_t *mp,
475 xfs_dqid_t id,
476 uint type,
477 fs_disk_quota_t *newlim)
478{
479 struct xfs_quotainfo *q = mp->m_quotainfo;
480 xfs_disk_dquot_t *ddq;
481 xfs_dquot_t *dqp;
482 xfs_trans_t *tp;
483 int error;
484 xfs_qcnt_t hard, soft;
485
486 if (newlim->d_fieldmask & ~XFS_DQ_MASK)
487 return EINVAL;
488 if ((newlim->d_fieldmask & XFS_DQ_MASK) == 0)
489 return 0;
490
491 tp = xfs_trans_alloc(mp, XFS_TRANS_QM_SETQLIM);
492 if ((error = xfs_trans_reserve(tp, 0, sizeof(xfs_disk_dquot_t) + 128,
493 0, 0, XFS_DEFAULT_LOG_COUNT))) {
494 xfs_trans_cancel(tp, 0);
495 return (error);
496 }
497
498 /*
499 * We don't want to race with a quotaoff so take the quotaoff lock.
500 * (We don't hold an inode lock, so there's nothing else to stop
501 * a quotaoff from happening). (XXXThis doesn't currently happen
502 * because we take the vfslock before calling xfs_qm_sysent).
503 */
504 mutex_lock(&q->qi_quotaofflock);
505
506 /*
507 * Get the dquot (locked), and join it to the transaction.
508 * Allocate the dquot if this doesn't exist.
509 */
510 if ((error = xfs_qm_dqget(mp, NULL, id, type, XFS_QMOPT_DQALLOC, &dqp))) {
511 xfs_trans_cancel(tp, XFS_TRANS_ABORT);
512 ASSERT(error != ENOENT);
513 goto out_unlock;
514 }
515 xfs_trans_dqjoin(tp, dqp);
516 ddq = &dqp->q_core;
517
518 /*
519 * Make sure that hardlimits are >= soft limits before changing.
520 */
521 hard = (newlim->d_fieldmask & FS_DQ_BHARD) ?
522 (xfs_qcnt_t) XFS_BB_TO_FSB(mp, newlim->d_blk_hardlimit) :
523 be64_to_cpu(ddq->d_blk_hardlimit);
524 soft = (newlim->d_fieldmask & FS_DQ_BSOFT) ?
525 (xfs_qcnt_t) XFS_BB_TO_FSB(mp, newlim->d_blk_softlimit) :
526 be64_to_cpu(ddq->d_blk_softlimit);
527 if (hard == 0 || hard >= soft) {
528 ddq->d_blk_hardlimit = cpu_to_be64(hard);
529 ddq->d_blk_softlimit = cpu_to_be64(soft);
530 if (id == 0) {
531 q->qi_bhardlimit = hard;
532 q->qi_bsoftlimit = soft;
533 }
534 } else {
535 xfs_debug(mp, "blkhard %Ld < blksoft %Ld\n", hard, soft);
536 }
537 hard = (newlim->d_fieldmask & FS_DQ_RTBHARD) ?
538 (xfs_qcnt_t) XFS_BB_TO_FSB(mp, newlim->d_rtb_hardlimit) :
539 be64_to_cpu(ddq->d_rtb_hardlimit);
540 soft = (newlim->d_fieldmask & FS_DQ_RTBSOFT) ?
541 (xfs_qcnt_t) XFS_BB_TO_FSB(mp, newlim->d_rtb_softlimit) :
542 be64_to_cpu(ddq->d_rtb_softlimit);
543 if (hard == 0 || hard >= soft) {
544 ddq->d_rtb_hardlimit = cpu_to_be64(hard);
545 ddq->d_rtb_softlimit = cpu_to_be64(soft);
546 if (id == 0) {
547 q->qi_rtbhardlimit = hard;
548 q->qi_rtbsoftlimit = soft;
549 }
550 } else {
551 xfs_debug(mp, "rtbhard %Ld < rtbsoft %Ld\n", hard, soft);
552 }
553
554 hard = (newlim->d_fieldmask & FS_DQ_IHARD) ?
555 (xfs_qcnt_t) newlim->d_ino_hardlimit :
556 be64_to_cpu(ddq->d_ino_hardlimit);
557 soft = (newlim->d_fieldmask & FS_DQ_ISOFT) ?
558 (xfs_qcnt_t) newlim->d_ino_softlimit :
559 be64_to_cpu(ddq->d_ino_softlimit);
560 if (hard == 0 || hard >= soft) {
561 ddq->d_ino_hardlimit = cpu_to_be64(hard);
562 ddq->d_ino_softlimit = cpu_to_be64(soft);
563 if (id == 0) {
564 q->qi_ihardlimit = hard;
565 q->qi_isoftlimit = soft;
566 }
567 } else {
568 xfs_debug(mp, "ihard %Ld < isoft %Ld\n", hard, soft);
569 }
570
571 /*
572 * Update warnings counter(s) if requested
573 */
574 if (newlim->d_fieldmask & FS_DQ_BWARNS)
575 ddq->d_bwarns = cpu_to_be16(newlim->d_bwarns);
576 if (newlim->d_fieldmask & FS_DQ_IWARNS)
577 ddq->d_iwarns = cpu_to_be16(newlim->d_iwarns);
578 if (newlim->d_fieldmask & FS_DQ_RTBWARNS)
579 ddq->d_rtbwarns = cpu_to_be16(newlim->d_rtbwarns);
580
581 if (id == 0) {
582 /*
583 * Timelimits for the super user set the relative time
584 * the other users can be over quota for this file system.
585 * If it is zero a default is used. Ditto for the default
586 * soft and hard limit values (already done, above), and
587 * for warnings.
588 */
589 if (newlim->d_fieldmask & FS_DQ_BTIMER) {
590 q->qi_btimelimit = newlim->d_btimer;
591 ddq->d_btimer = cpu_to_be32(newlim->d_btimer);
592 }
593 if (newlim->d_fieldmask & FS_DQ_ITIMER) {
594 q->qi_itimelimit = newlim->d_itimer;
595 ddq->d_itimer = cpu_to_be32(newlim->d_itimer);
596 }
597 if (newlim->d_fieldmask & FS_DQ_RTBTIMER) {
598 q->qi_rtbtimelimit = newlim->d_rtbtimer;
599 ddq->d_rtbtimer = cpu_to_be32(newlim->d_rtbtimer);
600 }
601 if (newlim->d_fieldmask & FS_DQ_BWARNS)
602 q->qi_bwarnlimit = newlim->d_bwarns;
603 if (newlim->d_fieldmask & FS_DQ_IWARNS)
604 q->qi_iwarnlimit = newlim->d_iwarns;
605 if (newlim->d_fieldmask & FS_DQ_RTBWARNS)
606 q->qi_rtbwarnlimit = newlim->d_rtbwarns;
607 } else {
608 /*
609 * If the user is now over quota, start the timelimit.
610 * The user will not be 'warned'.
611 * Note that we keep the timers ticking, whether enforcement
612 * is on or off. We don't really want to bother with iterating
613 * over all ondisk dquots and turning the timers on/off.
614 */
615 xfs_qm_adjust_dqtimers(mp, ddq);
616 }
617 dqp->dq_flags |= XFS_DQ_DIRTY;
618 xfs_trans_log_dquot(tp, dqp);
619
620 error = xfs_trans_commit(tp, 0);
621 xfs_qm_dqrele(dqp);
622
623 out_unlock:
624 mutex_unlock(&q->qi_quotaofflock);
625 return error;
626}
627
628STATIC int
629xfs_qm_log_quotaoff_end(
630 xfs_mount_t *mp,
631 xfs_qoff_logitem_t *startqoff,
632 uint flags)
633{
634 xfs_trans_t *tp;
635 int error;
636 xfs_qoff_logitem_t *qoffi;
637
638 tp = xfs_trans_alloc(mp, XFS_TRANS_QM_QUOTAOFF_END);
639
640 if ((error = xfs_trans_reserve(tp, 0, sizeof(xfs_qoff_logitem_t) * 2,
641 0, 0, XFS_DEFAULT_LOG_COUNT))) {
642 xfs_trans_cancel(tp, 0);
643 return (error);
644 }
645
646 qoffi = xfs_trans_get_qoff_item(tp, startqoff,
647 flags & XFS_ALL_QUOTA_ACCT);
648 xfs_trans_log_quotaoff_item(tp, qoffi);
649
650 /*
651 * We have to make sure that the transaction is secure on disk before we
652 * return and actually stop quota accounting. So, make it synchronous.
653 * We don't care about quotoff's performance.
654 */
655 xfs_trans_set_sync(tp);
656 error = xfs_trans_commit(tp, 0);
657 return (error);
658}
659
660
661STATIC int
662xfs_qm_log_quotaoff(
663 xfs_mount_t *mp,
664 xfs_qoff_logitem_t **qoffstartp,
665 uint flags)
666{
667 xfs_trans_t *tp;
668 int error;
669 xfs_qoff_logitem_t *qoffi=NULL;
670 uint oldsbqflag=0;
671
672 tp = xfs_trans_alloc(mp, XFS_TRANS_QM_QUOTAOFF);
673 if ((error = xfs_trans_reserve(tp, 0,
674 sizeof(xfs_qoff_logitem_t) * 2 +
675 mp->m_sb.sb_sectsize + 128,
676 0,
677 0,
678 XFS_DEFAULT_LOG_COUNT))) {
679 goto error0;
680 }
681
682 qoffi = xfs_trans_get_qoff_item(tp, NULL, flags & XFS_ALL_QUOTA_ACCT);
683 xfs_trans_log_quotaoff_item(tp, qoffi);
684
685 spin_lock(&mp->m_sb_lock);
686 oldsbqflag = mp->m_sb.sb_qflags;
687 mp->m_sb.sb_qflags = (mp->m_qflags & ~(flags)) & XFS_MOUNT_QUOTA_ALL;
688 spin_unlock(&mp->m_sb_lock);
689
690 xfs_mod_sb(tp, XFS_SB_QFLAGS);
691
692 /*
693 * We have to make sure that the transaction is secure on disk before we
694 * return and actually stop quota accounting. So, make it synchronous.
695 * We don't care about quotoff's performance.
696 */
697 xfs_trans_set_sync(tp);
698 error = xfs_trans_commit(tp, 0);
699
700error0:
701 if (error) {
702 xfs_trans_cancel(tp, 0);
703 /*
704 * No one else is modifying sb_qflags, so this is OK.
705 * We still hold the quotaofflock.
706 */
707 spin_lock(&mp->m_sb_lock);
708 mp->m_sb.sb_qflags = oldsbqflag;
709 spin_unlock(&mp->m_sb_lock);
710 }
711 *qoffstartp = qoffi;
712 return (error);
713}
714
715
716int
717xfs_qm_scall_getquota(
718 struct xfs_mount *mp,
719 xfs_dqid_t id,
720 uint type,
721 struct fs_disk_quota *dst)
722{
723 struct xfs_dquot *dqp;
724 int error;
725
726 /*
727 * Try to get the dquot. We don't want it allocated on disk, so
728 * we aren't passing the XFS_QMOPT_DOALLOC flag. If it doesn't
729 * exist, we'll get ENOENT back.
730 */
731 error = xfs_qm_dqget(mp, NULL, id, type, 0, &dqp);
732 if (error)
733 return error;
734
735 /*
736 * If everything's NULL, this dquot doesn't quite exist as far as
737 * our utility programs are concerned.
738 */
739 if (XFS_IS_DQUOT_UNINITIALIZED(dqp)) {
740 error = XFS_ERROR(ENOENT);
741 goto out_put;
742 }
743
744 memset(dst, 0, sizeof(*dst));
745 dst->d_version = FS_DQUOT_VERSION;
746 dst->d_flags = xfs_qm_export_qtype_flags(dqp->q_core.d_flags);
747 dst->d_id = be32_to_cpu(dqp->q_core.d_id);
748 dst->d_blk_hardlimit =
749 XFS_FSB_TO_BB(mp, be64_to_cpu(dqp->q_core.d_blk_hardlimit));
750 dst->d_blk_softlimit =
751 XFS_FSB_TO_BB(mp, be64_to_cpu(dqp->q_core.d_blk_softlimit));
752 dst->d_ino_hardlimit = be64_to_cpu(dqp->q_core.d_ino_hardlimit);
753 dst->d_ino_softlimit = be64_to_cpu(dqp->q_core.d_ino_softlimit);
754 dst->d_bcount = XFS_FSB_TO_BB(mp, dqp->q_res_bcount);
755 dst->d_icount = dqp->q_res_icount;
756 dst->d_btimer = be32_to_cpu(dqp->q_core.d_btimer);
757 dst->d_itimer = be32_to_cpu(dqp->q_core.d_itimer);
758 dst->d_iwarns = be16_to_cpu(dqp->q_core.d_iwarns);
759 dst->d_bwarns = be16_to_cpu(dqp->q_core.d_bwarns);
760 dst->d_rtb_hardlimit =
761 XFS_FSB_TO_BB(mp, be64_to_cpu(dqp->q_core.d_rtb_hardlimit));
762 dst->d_rtb_softlimit =
763 XFS_FSB_TO_BB(mp, be64_to_cpu(dqp->q_core.d_rtb_softlimit));
764 dst->d_rtbcount = XFS_FSB_TO_BB(mp, dqp->q_res_rtbcount);
765 dst->d_rtbtimer = be32_to_cpu(dqp->q_core.d_rtbtimer);
766 dst->d_rtbwarns = be16_to_cpu(dqp->q_core.d_rtbwarns);
767
768 /*
769 * Internally, we don't reset all the timers when quota enforcement
770 * gets turned off. No need to confuse the user level code,
771 * so return zeroes in that case.
772 */
773 if ((!XFS_IS_UQUOTA_ENFORCED(mp) && dqp->q_core.d_flags == XFS_DQ_USER) ||
774 (!XFS_IS_OQUOTA_ENFORCED(mp) &&
775 (dqp->q_core.d_flags & (XFS_DQ_PROJ | XFS_DQ_GROUP)))) {
776 dst->d_btimer = 0;
777 dst->d_itimer = 0;
778 dst->d_rtbtimer = 0;
779 }
780
781#ifdef DEBUG
782 if (((XFS_IS_UQUOTA_ENFORCED(mp) && dst->d_flags == FS_USER_QUOTA) ||
783 (XFS_IS_OQUOTA_ENFORCED(mp) &&
784 (dst->d_flags & (FS_PROJ_QUOTA | FS_GROUP_QUOTA)))) &&
785 dst->d_id != 0) {
786 if (((int) dst->d_bcount > (int) dst->d_blk_softlimit) &&
787 (dst->d_blk_softlimit > 0)) {
788 ASSERT(dst->d_btimer != 0);
789 }
790 if (((int) dst->d_icount > (int) dst->d_ino_softlimit) &&
791 (dst->d_ino_softlimit > 0)) {
792 ASSERT(dst->d_itimer != 0);
793 }
794 }
795#endif
796out_put:
797 xfs_qm_dqput(dqp);
798 return error;
799}
800
801STATIC uint
802xfs_qm_export_qtype_flags(
803 uint flags)
804{
805 /*
806 * Can't be more than one, or none.
807 */
808 ASSERT((flags & (FS_PROJ_QUOTA | FS_USER_QUOTA)) !=
809 (FS_PROJ_QUOTA | FS_USER_QUOTA));
810 ASSERT((flags & (FS_PROJ_QUOTA | FS_GROUP_QUOTA)) !=
811 (FS_PROJ_QUOTA | FS_GROUP_QUOTA));
812 ASSERT((flags & (FS_USER_QUOTA | FS_GROUP_QUOTA)) !=
813 (FS_USER_QUOTA | FS_GROUP_QUOTA));
814 ASSERT((flags & (FS_PROJ_QUOTA|FS_USER_QUOTA|FS_GROUP_QUOTA)) != 0);
815
816 return (flags & XFS_DQ_USER) ?
817 FS_USER_QUOTA : (flags & XFS_DQ_PROJ) ?
818 FS_PROJ_QUOTA : FS_GROUP_QUOTA;
819}
820
821STATIC uint
822xfs_qm_export_flags(
823 uint flags)
824{
825 uint uflags;
826
827 uflags = 0;
828 if (flags & XFS_UQUOTA_ACCT)
829 uflags |= FS_QUOTA_UDQ_ACCT;
830 if (flags & XFS_PQUOTA_ACCT)
831 uflags |= FS_QUOTA_PDQ_ACCT;
832 if (flags & XFS_GQUOTA_ACCT)
833 uflags |= FS_QUOTA_GDQ_ACCT;
834 if (flags & XFS_UQUOTA_ENFD)
835 uflags |= FS_QUOTA_UDQ_ENFD;
836 if (flags & (XFS_OQUOTA_ENFD)) {
837 uflags |= (flags & XFS_GQUOTA_ACCT) ?
838 FS_QUOTA_GDQ_ENFD : FS_QUOTA_PDQ_ENFD;
839 }
840 return (uflags);
841}
842
843
844STATIC int
845xfs_dqrele_inode(
846 struct xfs_inode *ip,
847 struct xfs_perag *pag,
848 int flags)
849{
850 /* skip quota inodes */
851 if (ip == ip->i_mount->m_quotainfo->qi_uquotaip ||
852 ip == ip->i_mount->m_quotainfo->qi_gquotaip) {
853 ASSERT(ip->i_udquot == NULL);
854 ASSERT(ip->i_gdquot == NULL);
855 return 0;
856 }
857
858 xfs_ilock(ip, XFS_ILOCK_EXCL);
859 if ((flags & XFS_UQUOTA_ACCT) && ip->i_udquot) {
860 xfs_qm_dqrele(ip->i_udquot);
861 ip->i_udquot = NULL;
862 }
863 if (flags & (XFS_PQUOTA_ACCT|XFS_GQUOTA_ACCT) && ip->i_gdquot) {
864 xfs_qm_dqrele(ip->i_gdquot);
865 ip->i_gdquot = NULL;
866 }
867 xfs_iunlock(ip, XFS_ILOCK_EXCL);
868 return 0;
869}
870
871
872/*
873 * Go thru all the inodes in the file system, releasing their dquots.
874 *
875 * Note that the mount structure gets modified to indicate that quotas are off
876 * AFTER this, in the case of quotaoff.
877 */
878void
879xfs_qm_dqrele_all_inodes(
880 struct xfs_mount *mp,
881 uint flags)
882{
883 ASSERT(mp->m_quotainfo);
884 xfs_inode_ag_iterator(mp, xfs_dqrele_inode, flags);
885}