/*
* (C) 2005 Andreas Gruenbacher <agruen@suse.de>
*
* This file is released under the GPL.
* Generic ACL support for in-memory filesystems.
*/
#include <linux/sched.h>
#include <linux/fs.h>
#include <linux/generic_acl.h>
#include <linux/posix_acl.h>
#include <linux/posix_acl_xattr.h>
static size_t
generic_acl_list(struct dentry *dentry, char *list, size_t list_size,
const char *name, size_t name_len, int type)
{
struct posix_acl *acl;
const char *xname;
size_t size;
acl = get_cached_acl(dentry->d_inode, type);
if (!acl)
return 0;
posix_acl_release(acl);
switch (type) {
case ACL_TYPE_ACCESS:
xname = POSIX_ACL_XATTR_ACCESS;
break;
case ACL_TYPE_DEFAULT:
xname = POSIX_ACL_XATTR_DEFAULT;
default:
}
size = strlen(xname) + 1;
if (list && size <= list_size)
memcpy(list, xname, size);
return size;
static int
generic_acl_get(struct dentry *dentry, const char *name, void *buffer,
size_t size, int type)
int error;
if (strcmp(name, "") != 0)
return -EINVAL;
return -ENODATA;
error = posix_acl_to_xattr(acl, buffer, size);
return error;
generic_acl_set(struct dentry *dentry, const char *name, const void *value,
size_t size, int flags, int type)
struct inode *inode = dentry->d_inode;
struct posix_acl *acl = NULL;
if (S_ISLNK(inode->i_mode))
return -EOPNOTSUPP;
if (!is_owner_or_cap(inode))
return -EPERM;
if (value) {
acl = posix_acl_from_xattr(value, size);
if (IS_ERR(acl))
return PTR_ERR(acl);
if (acl) {
mode_t mode;
error = posix_acl_valid(acl);
if (error)
goto failed;
mode = inode->i_mode;
error = posix_acl_equiv_mode(acl, &mode);
if (error < 0)
inode->i_mode = mode;
if (error == 0) {
acl = NULL;
if (!S_ISDIR(inode->i_mode)) {
error = -EINVAL;
set_cached_acl(inode, type, acl);
error = 0;
failed:
/**
* generic_acl_init - Take care of acl inheritance at @inode create time
* Files created inside a directory with a default ACL inherit the
* directory's default ACL.
int
generic_acl_init(struct inode *inode, struct inode *dir)
mode_t mode = inode->i_mode;
inode->i_mode = mode & ~current_umask();
if (!S_ISLNK(inode->i_mode))
acl = get_cached_acl(dir, ACL_TYPE_DEFAULT);
struct posix_acl *clone;
if (S_ISDIR(inode->i_mode)) {
clone = posix_acl_clone(acl, GFP_KERNEL);
error = -ENOMEM;
if (!clone)
goto cleanup;
set_cached_acl(inode, ACL_TYPE_DEFAULT, clone);
posix_acl_release(clone);
error = posix_acl_create_masq(clone, &mode);
if (error >= 0) {
if (error > 0)
set_cached_acl(inode, ACL_TYPE_ACCESS, clone);
cleanup:
* generic_acl_chmod - change the access acl of @inode upon chmod()
* A chmod also changes the permissions of the owner, group/mask, and
* other ACL entries.
generic_acl_chmod(struct inode *inode)
struct posix_acl *acl, *clone;
int error = 0;
acl = get_cached_acl(inode, ACL_TYPE_ACCESS);
return -ENOMEM;
error = posix_acl_chmod_masq(clone, inode->i_mode);
if (!error)
generic_check_acl(struct inode *inode, int mask)
struct posix_acl *acl = get_cached_acl(inode, ACL_TYPE_ACCESS);
int error = posix_acl_permission(inode, acl, mask);
return -EAGAIN;
struct xattr_handler generic_acl_access_handler = {
.prefix = POSIX_ACL_XATTR_ACCESS,
.flags = ACL_TYPE_ACCESS,
.list = generic_acl_list,
.get = generic_acl_get,
.set = generic_acl_set,
};
struct xattr_handler generic_acl_default_handler = {
.prefix = POSIX_ACL_XATTR_DEFAULT,
.flags = ACL_TYPE_DEFAULT,