diff options
Diffstat (limited to 'fs/ecryptfs/inode.c')
| -rw-r--r-- | fs/ecryptfs/inode.c | 129 |
1 files changed, 67 insertions, 62 deletions
diff --git a/fs/ecryptfs/inode.c b/fs/ecryptfs/inode.c index d3362faf3852..e2d4418affac 100644 --- a/fs/ecryptfs/inode.c +++ b/fs/ecryptfs/inode.c | |||
| @@ -324,6 +324,7 @@ int ecryptfs_lookup_and_interpose_lower(struct dentry *ecryptfs_dentry, | |||
| 324 | rc = ecryptfs_read_and_validate_header_region(page_virt, | 324 | rc = ecryptfs_read_and_validate_header_region(page_virt, |
| 325 | ecryptfs_dentry->d_inode); | 325 | ecryptfs_dentry->d_inode); |
| 326 | if (rc) { | 326 | if (rc) { |
| 327 | memset(page_virt, 0, PAGE_CACHE_SIZE); | ||
| 327 | rc = ecryptfs_read_and_validate_xattr_region(page_virt, | 328 | rc = ecryptfs_read_and_validate_xattr_region(page_virt, |
| 328 | ecryptfs_dentry); | 329 | ecryptfs_dentry); |
| 329 | if (rc) { | 330 | if (rc) { |
| @@ -336,7 +337,7 @@ int ecryptfs_lookup_and_interpose_lower(struct dentry *ecryptfs_dentry, | |||
| 336 | ecryptfs_dentry->d_sb)->mount_crypt_stat; | 337 | ecryptfs_dentry->d_sb)->mount_crypt_stat; |
| 337 | if (mount_crypt_stat->flags & ECRYPTFS_ENCRYPTED_VIEW_ENABLED) { | 338 | if (mount_crypt_stat->flags & ECRYPTFS_ENCRYPTED_VIEW_ENABLED) { |
| 338 | if (crypt_stat->flags & ECRYPTFS_METADATA_IN_XATTR) | 339 | if (crypt_stat->flags & ECRYPTFS_METADATA_IN_XATTR) |
| 339 | file_size = (crypt_stat->num_header_bytes_at_front | 340 | file_size = (crypt_stat->metadata_size |
| 340 | + i_size_read(lower_dentry->d_inode)); | 341 | + i_size_read(lower_dentry->d_inode)); |
| 341 | else | 342 | else |
| 342 | file_size = i_size_read(lower_dentry->d_inode); | 343 | file_size = i_size_read(lower_dentry->d_inode); |
| @@ -388,9 +389,9 @@ static struct dentry *ecryptfs_lookup(struct inode *ecryptfs_dir_inode, | |||
| 388 | mutex_unlock(&lower_dir_dentry->d_inode->i_mutex); | 389 | mutex_unlock(&lower_dir_dentry->d_inode->i_mutex); |
| 389 | if (IS_ERR(lower_dentry)) { | 390 | if (IS_ERR(lower_dentry)) { |
| 390 | rc = PTR_ERR(lower_dentry); | 391 | rc = PTR_ERR(lower_dentry); |
| 391 | printk(KERN_ERR "%s: lookup_one_len() returned [%d] on " | 392 | ecryptfs_printk(KERN_DEBUG, "%s: lookup_one_len() returned " |
| 392 | "lower_dentry = [%s]\n", __func__, rc, | 393 | "[%d] on lower_dentry = [%s]\n", __func__, rc, |
| 393 | ecryptfs_dentry->d_name.name); | 394 | encrypted_and_encoded_name); |
| 394 | goto out_d_drop; | 395 | goto out_d_drop; |
| 395 | } | 396 | } |
| 396 | if (lower_dentry->d_inode) | 397 | if (lower_dentry->d_inode) |
| @@ -417,9 +418,9 @@ static struct dentry *ecryptfs_lookup(struct inode *ecryptfs_dir_inode, | |||
| 417 | mutex_unlock(&lower_dir_dentry->d_inode->i_mutex); | 418 | mutex_unlock(&lower_dir_dentry->d_inode->i_mutex); |
| 418 | if (IS_ERR(lower_dentry)) { | 419 | if (IS_ERR(lower_dentry)) { |
| 419 | rc = PTR_ERR(lower_dentry); | 420 | rc = PTR_ERR(lower_dentry); |
| 420 | printk(KERN_ERR "%s: lookup_one_len() returned [%d] on " | 421 | ecryptfs_printk(KERN_DEBUG, "%s: lookup_one_len() returned " |
| 421 | "lower_dentry = [%s]\n", __func__, rc, | 422 | "[%d] on lower_dentry = [%s]\n", __func__, rc, |
| 422 | encrypted_and_encoded_name); | 423 | encrypted_and_encoded_name); |
| 423 | goto out_d_drop; | 424 | goto out_d_drop; |
| 424 | } | 425 | } |
| 425 | lookup_and_interpose: | 426 | lookup_and_interpose: |
| @@ -456,8 +457,8 @@ static int ecryptfs_link(struct dentry *old_dentry, struct inode *dir, | |||
| 456 | rc = ecryptfs_interpose(lower_new_dentry, new_dentry, dir->i_sb, 0); | 457 | rc = ecryptfs_interpose(lower_new_dentry, new_dentry, dir->i_sb, 0); |
| 457 | if (rc) | 458 | if (rc) |
| 458 | goto out_lock; | 459 | goto out_lock; |
| 459 | fsstack_copy_attr_times(dir, lower_new_dentry->d_inode); | 460 | fsstack_copy_attr_times(dir, lower_dir_dentry->d_inode); |
| 460 | fsstack_copy_inode_size(dir, lower_new_dentry->d_inode); | 461 | fsstack_copy_inode_size(dir, lower_dir_dentry->d_inode); |
| 461 | old_dentry->d_inode->i_nlink = | 462 | old_dentry->d_inode->i_nlink = |
| 462 | ecryptfs_inode_to_lower(old_dentry->d_inode)->i_nlink; | 463 | ecryptfs_inode_to_lower(old_dentry->d_inode)->i_nlink; |
| 463 | i_size_write(new_dentry->d_inode, file_size_save); | 464 | i_size_write(new_dentry->d_inode, file_size_save); |
| @@ -648,38 +649,17 @@ out_lock: | |||
| 648 | return rc; | 649 | return rc; |
| 649 | } | 650 | } |
| 650 | 651 | ||
| 651 | static int | 652 | static int ecryptfs_readlink_lower(struct dentry *dentry, char **buf, |
| 652 | ecryptfs_readlink(struct dentry *dentry, char __user *buf, int bufsiz) | 653 | size_t *bufsiz) |
| 653 | { | 654 | { |
| 655 | struct dentry *lower_dentry = ecryptfs_dentry_to_lower(dentry); | ||
| 654 | char *lower_buf; | 656 | char *lower_buf; |
| 655 | size_t lower_bufsiz; | 657 | size_t lower_bufsiz = PATH_MAX; |
| 656 | struct dentry *lower_dentry; | ||
| 657 | struct ecryptfs_mount_crypt_stat *mount_crypt_stat; | ||
| 658 | char *plaintext_name; | ||
| 659 | size_t plaintext_name_size; | ||
| 660 | mm_segment_t old_fs; | 658 | mm_segment_t old_fs; |
| 661 | int rc; | 659 | int rc; |
| 662 | 660 | ||
| 663 | lower_dentry = ecryptfs_dentry_to_lower(dentry); | ||
| 664 | if (!lower_dentry->d_inode->i_op->readlink) { | ||
| 665 | rc = -EINVAL; | ||
| 666 | goto out; | ||
| 667 | } | ||
| 668 | mount_crypt_stat = &ecryptfs_superblock_to_private( | ||
| 669 | dentry->d_sb)->mount_crypt_stat; | ||
| 670 | /* | ||
| 671 | * If the lower filename is encrypted, it will result in a significantly | ||
| 672 | * longer name. If needed, truncate the name after decode and decrypt. | ||
| 673 | */ | ||
| 674 | if (mount_crypt_stat->flags & ECRYPTFS_GLOBAL_ENCRYPT_FILENAMES) | ||
| 675 | lower_bufsiz = PATH_MAX; | ||
| 676 | else | ||
| 677 | lower_bufsiz = bufsiz; | ||
| 678 | /* Released in this function */ | ||
| 679 | lower_buf = kmalloc(lower_bufsiz, GFP_KERNEL); | 661 | lower_buf = kmalloc(lower_bufsiz, GFP_KERNEL); |
| 680 | if (lower_buf == NULL) { | 662 | if (!lower_buf) { |
| 681 | printk(KERN_ERR "%s: Out of memory whilst attempting to " | ||
| 682 | "kmalloc [%zd] bytes\n", __func__, lower_bufsiz); | ||
| 683 | rc = -ENOMEM; | 663 | rc = -ENOMEM; |
| 684 | goto out; | 664 | goto out; |
| 685 | } | 665 | } |
| @@ -689,29 +669,31 @@ ecryptfs_readlink(struct dentry *dentry, char __user *buf, int bufsiz) | |||
| 689 | (char __user *)lower_buf, | 669 | (char __user *)lower_buf, |
| 690 | lower_bufsiz); | 670 | lower_bufsiz); |
| 691 | set_fs(old_fs); | 671 | set_fs(old_fs); |
| 692 | if (rc >= 0) { | 672 | if (rc < 0) |
| 693 | rc = ecryptfs_decode_and_decrypt_filename(&plaintext_name, | 673 | goto out; |
| 694 | &plaintext_name_size, | 674 | lower_bufsiz = rc; |
| 695 | dentry, lower_buf, | 675 | rc = ecryptfs_decode_and_decrypt_filename(buf, bufsiz, dentry, |
| 696 | rc); | 676 | lower_buf, lower_bufsiz); |
| 697 | if (rc) { | 677 | out: |
| 698 | printk(KERN_ERR "%s: Error attempting to decode and " | ||
| 699 | "decrypt filename; rc = [%d]\n", __func__, | ||
| 700 | rc); | ||
| 701 | goto out_free_lower_buf; | ||
| 702 | } | ||
| 703 | /* Check for bufsiz <= 0 done in sys_readlinkat() */ | ||
| 704 | rc = copy_to_user(buf, plaintext_name, | ||
| 705 | min((size_t) bufsiz, plaintext_name_size)); | ||
| 706 | if (rc) | ||
| 707 | rc = -EFAULT; | ||
| 708 | else | ||
| 709 | rc = plaintext_name_size; | ||
| 710 | kfree(plaintext_name); | ||
| 711 | fsstack_copy_attr_atime(dentry->d_inode, lower_dentry->d_inode); | ||
| 712 | } | ||
| 713 | out_free_lower_buf: | ||
| 714 | kfree(lower_buf); | 678 | kfree(lower_buf); |
| 679 | return rc; | ||
| 680 | } | ||
| 681 | |||
| 682 | static int | ||
| 683 | ecryptfs_readlink(struct dentry *dentry, char __user *buf, int bufsiz) | ||
| 684 | { | ||
| 685 | char *kbuf; | ||
| 686 | size_t kbufsiz, copied; | ||
| 687 | int rc; | ||
| 688 | |||
| 689 | rc = ecryptfs_readlink_lower(dentry, &kbuf, &kbufsiz); | ||
| 690 | if (rc) | ||
| 691 | goto out; | ||
| 692 | copied = min_t(size_t, bufsiz, kbufsiz); | ||
| 693 | rc = copy_to_user(buf, kbuf, copied) ? -EFAULT : copied; | ||
| 694 | kfree(kbuf); | ||
| 695 | fsstack_copy_attr_atime(dentry->d_inode, | ||
| 696 | ecryptfs_dentry_to_lower(dentry)->d_inode); | ||
| 715 | out: | 697 | out: |
| 716 | return rc; | 698 | return rc; |
| 717 | } | 699 | } |
| @@ -769,7 +751,7 @@ upper_size_to_lower_size(struct ecryptfs_crypt_stat *crypt_stat, | |||
| 769 | { | 751 | { |
| 770 | loff_t lower_size; | 752 | loff_t lower_size; |
| 771 | 753 | ||
| 772 | lower_size = crypt_stat->num_header_bytes_at_front; | 754 | lower_size = ecryptfs_lower_header_size(crypt_stat); |
| 773 | if (upper_size != 0) { | 755 | if (upper_size != 0) { |
| 774 | loff_t num_extents; | 756 | loff_t num_extents; |
| 775 | 757 | ||
| @@ -1016,6 +998,28 @@ out: | |||
| 1016 | return rc; | 998 | return rc; |
| 1017 | } | 999 | } |
| 1018 | 1000 | ||
| 1001 | int ecryptfs_getattr_link(struct vfsmount *mnt, struct dentry *dentry, | ||
| 1002 | struct kstat *stat) | ||
| 1003 | { | ||
| 1004 | struct ecryptfs_mount_crypt_stat *mount_crypt_stat; | ||
| 1005 | int rc = 0; | ||
| 1006 | |||
| 1007 | mount_crypt_stat = &ecryptfs_superblock_to_private( | ||
| 1008 | dentry->d_sb)->mount_crypt_stat; | ||
| 1009 | generic_fillattr(dentry->d_inode, stat); | ||
| 1010 | if (mount_crypt_stat->flags & ECRYPTFS_GLOBAL_ENCRYPT_FILENAMES) { | ||
| 1011 | char *target; | ||
| 1012 | size_t targetsiz; | ||
| 1013 | |||
| 1014 | rc = ecryptfs_readlink_lower(dentry, &target, &targetsiz); | ||
| 1015 | if (!rc) { | ||
| 1016 | kfree(target); | ||
| 1017 | stat->size = targetsiz; | ||
| 1018 | } | ||
| 1019 | } | ||
| 1020 | return rc; | ||
| 1021 | } | ||
| 1022 | |||
| 1019 | int ecryptfs_getattr(struct vfsmount *mnt, struct dentry *dentry, | 1023 | int ecryptfs_getattr(struct vfsmount *mnt, struct dentry *dentry, |
| 1020 | struct kstat *stat) | 1024 | struct kstat *stat) |
| 1021 | { | 1025 | { |
| @@ -1040,7 +1044,7 @@ ecryptfs_setxattr(struct dentry *dentry, const char *name, const void *value, | |||
| 1040 | 1044 | ||
| 1041 | lower_dentry = ecryptfs_dentry_to_lower(dentry); | 1045 | lower_dentry = ecryptfs_dentry_to_lower(dentry); |
| 1042 | if (!lower_dentry->d_inode->i_op->setxattr) { | 1046 | if (!lower_dentry->d_inode->i_op->setxattr) { |
| 1043 | rc = -ENOSYS; | 1047 | rc = -EOPNOTSUPP; |
| 1044 | goto out; | 1048 | goto out; |
| 1045 | } | 1049 | } |
| 1046 | mutex_lock(&lower_dentry->d_inode->i_mutex); | 1050 | mutex_lock(&lower_dentry->d_inode->i_mutex); |
| @@ -1058,7 +1062,7 @@ ecryptfs_getxattr_lower(struct dentry *lower_dentry, const char *name, | |||
| 1058 | int rc = 0; | 1062 | int rc = 0; |
| 1059 | 1063 | ||
| 1060 | if (!lower_dentry->d_inode->i_op->getxattr) { | 1064 | if (!lower_dentry->d_inode->i_op->getxattr) { |
| 1061 | rc = -ENOSYS; | 1065 | rc = -EOPNOTSUPP; |
| 1062 | goto out; | 1066 | goto out; |
| 1063 | } | 1067 | } |
| 1064 | mutex_lock(&lower_dentry->d_inode->i_mutex); | 1068 | mutex_lock(&lower_dentry->d_inode->i_mutex); |
| @@ -1085,7 +1089,7 @@ ecryptfs_listxattr(struct dentry *dentry, char *list, size_t size) | |||
| 1085 | 1089 | ||
| 1086 | lower_dentry = ecryptfs_dentry_to_lower(dentry); | 1090 | lower_dentry = ecryptfs_dentry_to_lower(dentry); |
| 1087 | if (!lower_dentry->d_inode->i_op->listxattr) { | 1091 | if (!lower_dentry->d_inode->i_op->listxattr) { |
| 1088 | rc = -ENOSYS; | 1092 | rc = -EOPNOTSUPP; |
| 1089 | goto out; | 1093 | goto out; |
| 1090 | } | 1094 | } |
| 1091 | mutex_lock(&lower_dentry->d_inode->i_mutex); | 1095 | mutex_lock(&lower_dentry->d_inode->i_mutex); |
| @@ -1102,7 +1106,7 @@ static int ecryptfs_removexattr(struct dentry *dentry, const char *name) | |||
| 1102 | 1106 | ||
| 1103 | lower_dentry = ecryptfs_dentry_to_lower(dentry); | 1107 | lower_dentry = ecryptfs_dentry_to_lower(dentry); |
| 1104 | if (!lower_dentry->d_inode->i_op->removexattr) { | 1108 | if (!lower_dentry->d_inode->i_op->removexattr) { |
| 1105 | rc = -ENOSYS; | 1109 | rc = -EOPNOTSUPP; |
| 1106 | goto out; | 1110 | goto out; |
| 1107 | } | 1111 | } |
| 1108 | mutex_lock(&lower_dentry->d_inode->i_mutex); | 1112 | mutex_lock(&lower_dentry->d_inode->i_mutex); |
| @@ -1133,6 +1137,7 @@ const struct inode_operations ecryptfs_symlink_iops = { | |||
| 1133 | .put_link = ecryptfs_put_link, | 1137 | .put_link = ecryptfs_put_link, |
| 1134 | .permission = ecryptfs_permission, | 1138 | .permission = ecryptfs_permission, |
| 1135 | .setattr = ecryptfs_setattr, | 1139 | .setattr = ecryptfs_setattr, |
| 1140 | .getattr = ecryptfs_getattr_link, | ||
| 1136 | .setxattr = ecryptfs_setxattr, | 1141 | .setxattr = ecryptfs_setxattr, |
| 1137 | .getxattr = ecryptfs_getxattr, | 1142 | .getxattr = ecryptfs_getxattr, |
| 1138 | .listxattr = ecryptfs_listxattr, | 1143 | .listxattr = ecryptfs_listxattr, |
