2017-10-04 19:33:43 +03:00
|
|
|
/*
|
2010-05-18 02:18:00 +04:00
|
|
|
* Copyright (C) 2007-2010 Lawrence Livermore National Security, LLC.
|
|
|
|
* Copyright (C) 2007 The Regents of the University of California.
|
|
|
|
* Produced at Lawrence Livermore National Laboratory (cf, DISCLAIMER).
|
|
|
|
* Written by Brian Behlendorf <behlendorf1@llnl.gov>.
|
|
|
|
* UCRL-CODE-235197
|
|
|
|
*
|
|
|
|
* This file is part of the SPL, Solaris Porting Layer.
|
|
|
|
*
|
|
|
|
* The SPL is free software; you can redistribute it and/or modify it
|
|
|
|
* under the terms of the GNU General Public License as published by the
|
|
|
|
* Free Software Foundation; either version 2 of the License, or (at your
|
|
|
|
* option) any later version.
|
|
|
|
*
|
|
|
|
* The SPL is distributed in the hope that it will be useful, but WITHOUT
|
|
|
|
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
|
|
|
|
* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
|
|
|
|
* for more details.
|
|
|
|
*
|
|
|
|
* You should have received a copy of the GNU General Public License along
|
|
|
|
* with the SPL. If not, see <http://www.gnu.org/licenses/>.
|
2017-10-04 19:33:43 +03:00
|
|
|
*/
|
2010-05-18 02:18:00 +04:00
|
|
|
|
2008-02-28 03:52:31 +03:00
|
|
|
#ifndef _SPL_CRED_H
|
2018-02-07 22:49:38 +03:00
|
|
|
#define _SPL_CRED_H
|
2008-02-26 23:36:04 +03:00
|
|
|
|
2008-02-27 22:09:51 +03:00
|
|
|
#include <linux/module.h>
|
2018-02-15 04:01:15 +03:00
|
|
|
#include <linux/cred.h>
|
2022-11-08 21:28:56 +03:00
|
|
|
#include <linux/sched.h>
|
2008-03-11 23:54:40 +03:00
|
|
|
#include <sys/types.h>
|
2008-03-15 03:05:38 +03:00
|
|
|
#include <sys/vfs.h>
|
2008-02-26 23:36:04 +03:00
|
|
|
|
2009-07-28 04:18:59 +04:00
|
|
|
typedef struct cred cred_t;
|
2008-03-07 23:48:44 +03:00
|
|
|
|
2022-11-08 21:28:56 +03:00
|
|
|
extern struct task_struct init_task;
|
|
|
|
|
2014-10-02 21:41:09 +04:00
|
|
|
#define kcred ((cred_t *)(init_task.cred))
|
|
|
|
#define CRED() ((cred_t *)current_cred())
|
2009-07-10 21:58:06 +04:00
|
|
|
|
2016-10-19 03:30:41 +03:00
|
|
|
/* Linux 4.9 API change, GROUP_AT was removed */
|
|
|
|
#ifndef GROUP_AT
|
|
|
|
#define GROUP_AT(gi, i) ((gi)->gid[i])
|
|
|
|
#endif
|
|
|
|
|
2014-10-02 21:41:09 +04:00
|
|
|
#define KUID_TO_SUID(x) (__kuid_val(x))
|
|
|
|
#define KGID_TO_SGID(x) (__kgid_val(x))
|
|
|
|
#define SUID_TO_KUID(x) (KUIDT_INIT(x))
|
|
|
|
#define SGID_TO_KGID(x) (KGIDT_INIT(x))
|
|
|
|
#define KGIDP_TO_SGIDP(x) (&(x)->val)
|
2013-07-14 00:34:56 +04:00
|
|
|
|
2022-11-08 21:28:56 +03:00
|
|
|
/* Check if the user ns is the initial one */
|
|
|
|
static inline boolean_t
|
|
|
|
zfs_is_init_userns(struct user_namespace *user_ns)
|
2022-10-19 21:17:09 +03:00
|
|
|
{
|
2022-11-08 21:28:56 +03:00
|
|
|
#if defined(CONFIG_USER_NS)
|
|
|
|
return (user_ns == kcred->user_ns);
|
|
|
|
#else
|
|
|
|
return (B_FALSE);
|
|
|
|
#endif
|
2022-10-19 21:17:09 +03:00
|
|
|
}
|
|
|
|
|
2022-11-08 21:28:56 +03:00
|
|
|
static inline struct user_namespace *zfs_i_user_ns(struct inode *inode)
|
2022-10-19 21:17:09 +03:00
|
|
|
{
|
2022-11-08 21:28:56 +03:00
|
|
|
#ifdef HAVE_SUPER_USER_NS
|
|
|
|
return (inode->i_sb->s_user_ns);
|
|
|
|
#else
|
|
|
|
return (kcred->user_ns);
|
|
|
|
#endif
|
2022-10-19 21:17:09 +03:00
|
|
|
}
|
|
|
|
|
2022-11-08 21:28:56 +03:00
|
|
|
static inline boolean_t zfs_no_idmapping(struct user_namespace *mnt_userns,
|
|
|
|
struct user_namespace *fs_userns)
|
2022-10-19 21:17:09 +03:00
|
|
|
{
|
2022-11-08 21:28:56 +03:00
|
|
|
return (zfs_is_init_userns(mnt_userns) || mnt_userns == fs_userns);
|
2022-10-19 21:17:09 +03:00
|
|
|
}
|
|
|
|
|
2022-11-08 21:28:56 +03:00
|
|
|
static inline uid_t zfs_uid_to_vfsuid(struct user_namespace *mnt_userns,
|
|
|
|
struct user_namespace *fs_userns, uid_t uid)
|
2022-10-19 21:17:09 +03:00
|
|
|
{
|
2022-11-08 21:28:56 +03:00
|
|
|
if (zfs_no_idmapping(mnt_userns, fs_userns))
|
|
|
|
return (uid);
|
|
|
|
if (!zfs_is_init_userns(fs_userns))
|
|
|
|
uid = from_kuid(fs_userns, KUIDT_INIT(uid));
|
|
|
|
if (uid == (uid_t)-1)
|
|
|
|
return (uid);
|
|
|
|
return (__kuid_val(make_kuid(mnt_userns, uid)));
|
|
|
|
}
|
|
|
|
|
|
|
|
static inline gid_t zfs_gid_to_vfsgid(struct user_namespace *mnt_userns,
|
|
|
|
struct user_namespace *fs_userns, gid_t gid)
|
|
|
|
{
|
|
|
|
if (zfs_no_idmapping(mnt_userns, fs_userns))
|
|
|
|
return (gid);
|
|
|
|
if (!zfs_is_init_userns(fs_userns))
|
|
|
|
gid = from_kgid(fs_userns, KGIDT_INIT(gid));
|
|
|
|
if (gid == (gid_t)-1)
|
|
|
|
return (gid);
|
|
|
|
return (__kgid_val(make_kgid(mnt_userns, gid)));
|
|
|
|
}
|
|
|
|
|
|
|
|
static inline uid_t zfs_vfsuid_to_uid(struct user_namespace *mnt_userns,
|
|
|
|
struct user_namespace *fs_userns, uid_t uid)
|
|
|
|
{
|
|
|
|
if (zfs_no_idmapping(mnt_userns, fs_userns))
|
|
|
|
return (uid);
|
|
|
|
uid = from_kuid(mnt_userns, KUIDT_INIT(uid));
|
|
|
|
if (uid == (uid_t)-1)
|
|
|
|
return (uid);
|
|
|
|
if (zfs_is_init_userns(fs_userns))
|
|
|
|
return (uid);
|
|
|
|
return (__kuid_val(make_kuid(fs_userns, uid)));
|
|
|
|
}
|
|
|
|
|
|
|
|
static inline gid_t zfs_vfsgid_to_gid(struct user_namespace *mnt_userns,
|
|
|
|
struct user_namespace *fs_userns, gid_t gid)
|
|
|
|
{
|
|
|
|
if (zfs_no_idmapping(mnt_userns, fs_userns))
|
|
|
|
return (gid);
|
|
|
|
gid = from_kgid(mnt_userns, KGIDT_INIT(gid));
|
|
|
|
if (gid == (gid_t)-1)
|
|
|
|
return (gid);
|
|
|
|
if (zfs_is_init_userns(fs_userns))
|
|
|
|
return (gid);
|
|
|
|
return (__kgid_val(make_kgid(fs_userns, gid)));
|
2022-10-19 21:17:09 +03:00
|
|
|
}
|
|
|
|
|
2009-07-28 04:18:59 +04:00
|
|
|
extern void crhold(cred_t *cr);
|
|
|
|
extern void crfree(cred_t *cr);
|
|
|
|
extern uid_t crgetuid(const cred_t *cr);
|
|
|
|
extern uid_t crgetruid(const cred_t *cr);
|
|
|
|
extern gid_t crgetgid(const cred_t *cr);
|
|
|
|
extern int crgetngroups(const cred_t *cr);
|
2018-02-07 22:49:38 +03:00
|
|
|
extern gid_t *crgetgroups(const cred_t *cr);
|
2009-07-28 04:18:59 +04:00
|
|
|
extern int groupmember(gid_t gid, const cred_t *cr);
|
2008-02-28 03:52:31 +03:00
|
|
|
#endif /* _SPL_CRED_H */
|