Loading...
1// SPDX-License-Identifier: GPL-2.0
2#include "reiserfs.h"
3#include <linux/errno.h>
4#include <linux/fs.h>
5#include <linux/pagemap.h>
6#include <linux/xattr.h>
7#include <linux/slab.h>
8#include "xattr.h"
9#include <linux/security.h>
10#include <linux/uaccess.h>
11
12static int
13security_get(const struct xattr_handler *handler, struct dentry *unused,
14 struct inode *inode, const char *name, void *buffer, size_t size)
15{
16 if (IS_PRIVATE(inode))
17 return -EPERM;
18
19 return reiserfs_xattr_get(inode, xattr_full_name(handler, name),
20 buffer, size);
21}
22
23static int
24security_set(const struct xattr_handler *handler,
25 struct user_namespace *mnt_userns, struct dentry *unused,
26 struct inode *inode, const char *name, const void *buffer,
27 size_t size, int flags)
28{
29 if (IS_PRIVATE(inode))
30 return -EPERM;
31
32 return reiserfs_xattr_set(inode,
33 xattr_full_name(handler, name),
34 buffer, size, flags);
35}
36
37static bool security_list(struct dentry *dentry)
38{
39 return !IS_PRIVATE(d_inode(dentry));
40}
41
42/* Initializes the security context for a new inode and returns the number
43 * of blocks needed for the transaction. If successful, reiserfs_security
44 * must be released using reiserfs_security_free when the caller is done. */
45int reiserfs_security_init(struct inode *dir, struct inode *inode,
46 const struct qstr *qstr,
47 struct reiserfs_security_handle *sec)
48{
49 int blocks = 0;
50 int error;
51
52 sec->name = NULL;
53 sec->value = NULL;
54
55 /* Don't add selinux attributes on xattrs - they'll never get used */
56 if (IS_PRIVATE(dir))
57 return 0;
58
59 error = security_old_inode_init_security(inode, dir, qstr, &sec->name,
60 &sec->value, &sec->length);
61 if (error) {
62 if (error == -EOPNOTSUPP)
63 error = 0;
64
65 sec->name = NULL;
66 sec->value = NULL;
67 sec->length = 0;
68 return error;
69 }
70
71 if (sec->length && reiserfs_xattrs_initialized(inode->i_sb)) {
72 blocks = reiserfs_xattr_jcreate_nblocks(inode) +
73 reiserfs_xattr_nblocks(inode, sec->length);
74 /* We don't want to count the directories twice if we have
75 * a default ACL. */
76 REISERFS_I(inode)->i_flags |= i_has_xattr_dir;
77 }
78 return blocks;
79}
80
81int reiserfs_security_write(struct reiserfs_transaction_handle *th,
82 struct inode *inode,
83 struct reiserfs_security_handle *sec)
84{
85 int error;
86 if (strlen(sec->name) < sizeof(XATTR_SECURITY_PREFIX))
87 return -EINVAL;
88
89 error = reiserfs_xattr_set_handle(th, inode, sec->name, sec->value,
90 sec->length, XATTR_CREATE);
91 if (error == -ENODATA || error == -EOPNOTSUPP)
92 error = 0;
93
94 return error;
95}
96
97void reiserfs_security_free(struct reiserfs_security_handle *sec)
98{
99 kfree(sec->value);
100 sec->name = NULL;
101 sec->value = NULL;
102}
103
104const struct xattr_handler reiserfs_xattr_security_handler = {
105 .prefix = XATTR_SECURITY_PREFIX,
106 .get = security_get,
107 .set = security_set,
108 .list = security_list,
109};
1#include <linux/reiserfs_fs.h>
2#include <linux/errno.h>
3#include <linux/fs.h>
4#include <linux/pagemap.h>
5#include <linux/xattr.h>
6#include <linux/slab.h>
7#include <linux/reiserfs_xattr.h>
8#include <linux/security.h>
9#include <asm/uaccess.h>
10
11static int
12security_get(struct dentry *dentry, const char *name, void *buffer, size_t size,
13 int handler_flags)
14{
15 if (strlen(name) < sizeof(XATTR_SECURITY_PREFIX))
16 return -EINVAL;
17
18 if (IS_PRIVATE(dentry->d_inode))
19 return -EPERM;
20
21 return reiserfs_xattr_get(dentry->d_inode, name, buffer, size);
22}
23
24static int
25security_set(struct dentry *dentry, const char *name, const void *buffer,
26 size_t size, int flags, int handler_flags)
27{
28 if (strlen(name) < sizeof(XATTR_SECURITY_PREFIX))
29 return -EINVAL;
30
31 if (IS_PRIVATE(dentry->d_inode))
32 return -EPERM;
33
34 return reiserfs_xattr_set(dentry->d_inode, name, buffer, size, flags);
35}
36
37static size_t security_list(struct dentry *dentry, char *list, size_t list_len,
38 const char *name, size_t namelen, int handler_flags)
39{
40 const size_t len = namelen + 1;
41
42 if (IS_PRIVATE(dentry->d_inode))
43 return 0;
44
45 if (list && len <= list_len) {
46 memcpy(list, name, namelen);
47 list[namelen] = '\0';
48 }
49
50 return len;
51}
52
53/* Initializes the security context for a new inode and returns the number
54 * of blocks needed for the transaction. If successful, reiserfs_security
55 * must be released using reiserfs_security_free when the caller is done. */
56int reiserfs_security_init(struct inode *dir, struct inode *inode,
57 const struct qstr *qstr,
58 struct reiserfs_security_handle *sec)
59{
60 int blocks = 0;
61 int error;
62
63 sec->name = NULL;
64
65 /* Don't add selinux attributes on xattrs - they'll never get used */
66 if (IS_PRIVATE(dir))
67 return 0;
68
69 error = security_inode_init_security(inode, dir, qstr, &sec->name,
70 &sec->value, &sec->length);
71 if (error) {
72 if (error == -EOPNOTSUPP)
73 error = 0;
74
75 sec->name = NULL;
76 sec->value = NULL;
77 sec->length = 0;
78 return error;
79 }
80
81 if (sec->length && reiserfs_xattrs_initialized(inode->i_sb)) {
82 blocks = reiserfs_xattr_jcreate_nblocks(inode) +
83 reiserfs_xattr_nblocks(inode, sec->length);
84 /* We don't want to count the directories twice if we have
85 * a default ACL. */
86 REISERFS_I(inode)->i_flags |= i_has_xattr_dir;
87 }
88 return blocks;
89}
90
91int reiserfs_security_write(struct reiserfs_transaction_handle *th,
92 struct inode *inode,
93 struct reiserfs_security_handle *sec)
94{
95 int error;
96 if (strlen(sec->name) < sizeof(XATTR_SECURITY_PREFIX))
97 return -EINVAL;
98
99 error = reiserfs_xattr_set_handle(th, inode, sec->name, sec->value,
100 sec->length, XATTR_CREATE);
101 if (error == -ENODATA || error == -EOPNOTSUPP)
102 error = 0;
103
104 return error;
105}
106
107void reiserfs_security_free(struct reiserfs_security_handle *sec)
108{
109 kfree(sec->name);
110 kfree(sec->value);
111 sec->name = NULL;
112 sec->value = NULL;
113}
114
115const struct xattr_handler reiserfs_xattr_security_handler = {
116 .prefix = XATTR_SECURITY_PREFIX,
117 .get = security_get,
118 .set = security_set,
119 .list = security_list,
120};