[mirror_ubuntu-zesty-kernel.git] / fs / nfs / nfs3acl.c

#include <linux/fs.h>
#include <linux/nfs.h>
#include <linux/nfs3.h>
#include <linux/nfs_fs.h>
#include <linux/posix_acl_xattr.h>
#include <linux/nfsacl.h>

#define NFSDBG_FACILITY	NFSDBG_PROC

ssize_t nfs3_listxattr(struct dentry *dentry, char *buffer, size_t size)
{
	struct inode *inode = dentry->d_inode;
	struct posix_acl *acl;
	int pos=0, len=0;

#	define output(s) do {						\
			if (pos + sizeof(s) <= size) {			\
				memcpy(buffer + pos, s, sizeof(s));	\
				pos += sizeof(s);			\
			}						\
			len += sizeof(s);				\
		} while(0)

	acl = nfs3_proc_getacl(inode, ACL_TYPE_ACCESS);
	if (IS_ERR(acl))
		return PTR_ERR(acl);
	if (acl) {
		output("system.posix_acl_access");
		posix_acl_release(acl);
	}

	if (S_ISDIR(inode->i_mode)) {
		acl = nfs3_proc_getacl(inode, ACL_TYPE_DEFAULT);
		if (IS_ERR(acl))
			return PTR_ERR(acl);
		if (acl) {
			output("system.posix_acl_default");
			posix_acl_release(acl);
		}
	}

#	undef output

	if (!buffer || len <= size)
		return len;
	return -ERANGE;
}

ssize_t nfs3_getxattr(struct dentry *dentry, const char *name,
		void *buffer, size_t size)
{
	struct inode *inode = dentry->d_inode;
	struct posix_acl *acl;
	int type, error = 0;

	if (strcmp(name, POSIX_ACL_XATTR_ACCESS) == 0)
		type = ACL_TYPE_ACCESS;
	else if (strcmp(name, POSIX_ACL_XATTR_DEFAULT) == 0)
		type = ACL_TYPE_DEFAULT;
	else
		return -EOPNOTSUPP;

	acl = nfs3_proc_getacl(inode, type);
	if (IS_ERR(acl))
		return PTR_ERR(acl);
	else if (acl) {
		if (type == ACL_TYPE_ACCESS && acl->a_count == 0)
			error = -ENODATA;
		else
			error = posix_acl_to_xattr(acl, buffer, size);
		posix_acl_release(acl);
	} else
		error = -ENODATA;

	return error;
}

int nfs3_setxattr(struct dentry *dentry, const char *name,
	     const void *value, size_t size, int flags)
{
	struct inode *inode = dentry->d_inode;
	struct posix_acl *acl;
	int type, error;

	if (strcmp(name, POSIX_ACL_XATTR_ACCESS) == 0)
		type = ACL_TYPE_ACCESS;
	else if (strcmp(name, POSIX_ACL_XATTR_DEFAULT) == 0)
		type = ACL_TYPE_DEFAULT;
	else
		return -EOPNOTSUPP;

	acl = posix_acl_from_xattr(value, size);
	if (IS_ERR(acl))
		return PTR_ERR(acl);
	error = nfs3_proc_setacl(inode, type, acl);
	posix_acl_release(acl);

	return error;
}

int nfs3_removexattr(struct dentry *dentry, const char *name)
{
	struct inode *inode = dentry->d_inode;
	int type;

	if (strcmp(name, POSIX_ACL_XATTR_ACCESS) == 0)
		type = ACL_TYPE_ACCESS;
	else if (strcmp(name, POSIX_ACL_XATTR_DEFAULT) == 0)
		type = ACL_TYPE_DEFAULT;
	else
		return -EOPNOTSUPP;

	return nfs3_proc_setacl(inode, type, NULL);
}

static void __nfs3_forget_cached_acls(struct nfs_inode *nfsi)
{
	if (!IS_ERR(nfsi->acl_access)) {
		posix_acl_release(nfsi->acl_access);
		nfsi->acl_access = ERR_PTR(-EAGAIN);
	}
	if (!IS_ERR(nfsi->acl_default)) {
		posix_acl_release(nfsi->acl_default);
		nfsi->acl_default = ERR_PTR(-EAGAIN);
	}
}

void nfs3_forget_cached_acls(struct inode *inode)
{
	dprintk("NFS: nfs3_forget_cached_acls(%s/%ld)\n", inode->i_sb->s_id,
		inode->i_ino);
	spin_lock(&inode->i_lock);
	__nfs3_forget_cached_acls(NFS_I(inode));
	spin_unlock(&inode->i_lock);
}

static struct posix_acl *nfs3_get_cached_acl(struct inode *inode, int type)
{
	struct nfs_inode *nfsi = NFS_I(inode);
	struct posix_acl *acl = ERR_PTR(-EINVAL);

	spin_lock(&inode->i_lock);
	switch(type) {
		case ACL_TYPE_ACCESS:
			acl = nfsi->acl_access;
			break;

		case ACL_TYPE_DEFAULT:
			acl = nfsi->acl_default;
			break;

		default:
			goto out;
	}
	if (IS_ERR(acl))
		acl = ERR_PTR(-EAGAIN);
	else
		acl = posix_acl_dup(acl);
out:
	spin_unlock(&inode->i_lock);
	dprintk("NFS: nfs3_get_cached_acl(%s/%ld, %d) = %p\n", inode->i_sb->s_id,
		inode->i_ino, type, acl);
	return acl;
}

static void nfs3_cache_acls(struct inode *inode, struct posix_acl *acl,
		    struct posix_acl *dfacl)
{
	struct nfs_inode *nfsi = NFS_I(inode);

	dprintk("nfs3_cache_acls(%s/%ld, %p, %p)\n", inode->i_sb->s_id,
		inode->i_ino, acl, dfacl);
	spin_lock(&inode->i_lock);
	__nfs3_forget_cached_acls(NFS_I(inode));
	if (!IS_ERR(acl))
		nfsi->acl_access = posix_acl_dup(acl);
	if (!IS_ERR(dfacl))
		nfsi->acl_default = posix_acl_dup(dfacl);
	spin_unlock(&inode->i_lock);
}

struct posix_acl *nfs3_proc_getacl(struct inode *inode, int type)
{
	struct nfs_server *server = NFS_SERVER(inode);
	struct nfs_fattr fattr;
	struct page *pages[NFSACL_MAXPAGES] = { };
	struct nfs3_getaclargs args = {
		.fh = NFS_FH(inode),
		/* The xdr layer may allocate pages here. */
		.pages = pages,
	};
	struct nfs3_getaclres res = {
		.fattr =	&fattr,
	};
	struct rpc_message msg = {
		.rpc_argp	= &args,
		.rpc_resp	= &res,
	};
	struct posix_acl *acl;
	int status, count;

	if (!nfs_server_capable(inode, NFS_CAP_ACLS))
		return ERR_PTR(-EOPNOTSUPP);

	status = nfs_revalidate_inode(server, inode);
	if (status < 0)
		return ERR_PTR(status);
	acl = nfs3_get_cached_acl(inode, type);
	if (acl != ERR_PTR(-EAGAIN))
		return acl;
	acl = NULL;

	/*
	 * Only get the access acl when explicitly requested: We don't
	 * need it for access decisions, and only some applications use
	 * it. Applications which request the access acl first are not
	 * penalized from this optimization.
	 */
	if (type == ACL_TYPE_ACCESS)
		args.mask |= NFS_ACLCNT|NFS_ACL;
	if (S_ISDIR(inode->i_mode))
		args.mask |= NFS_DFACLCNT|NFS_DFACL;
	if (args.mask == 0)
		return NULL;

	dprintk("NFS call getacl\n");
	msg.rpc_proc = &server->client_acl->cl_procinfo[ACLPROC3_GETACL];
	status = rpc_call_sync(server->client_acl, &msg, 0);
	dprintk("NFS reply getacl: %d\n", status);

	/* pages may have been allocated at the xdr layer. */
	for (count = 0; count < NFSACL_MAXPAGES && args.pages[count]; count++)
		__free_page(args.pages[count]);

	switch (status) {
		case 0:
			status = nfs_refresh_inode(inode, &fattr);
			break;
		case -EPFNOSUPPORT:
		case -EPROTONOSUPPORT:
			dprintk("NFS_V3_ACL extension not supported; disabling\n");
			server->caps &= ~NFS_CAP_ACLS;
		case -ENOTSUPP:
			status = -EOPNOTSUPP;
		default:
			goto getout;
	}
	if ((args.mask & res.mask) != args.mask) {
		status = -EIO;
		goto getout;
	}

	if (res.acl_access != NULL) {
		if (posix_acl_equiv_mode(res.acl_access, NULL) == 0) {
			posix_acl_release(res.acl_access);
			res.acl_access = NULL;
		}
	}
	nfs3_cache_acls(inode,
		(res.mask & NFS_ACL)   ? res.acl_access  : ERR_PTR(-EINVAL),
		(res.mask & NFS_DFACL) ? res.acl_default : ERR_PTR(-EINVAL));

	switch(type) {
		case ACL_TYPE_ACCESS:
			acl = res.acl_access;
			res.acl_access = NULL;
			break;

		case ACL_TYPE_DEFAULT:
			acl = res.acl_default;
			res.acl_default = NULL;
	}

getout:
	posix_acl_release(res.acl_access);
	posix_acl_release(res.acl_default);

	if (status != 0) {
		posix_acl_release(acl);
		acl = ERR_PTR(status);
	}
	return acl;
}

static int nfs3_proc_setacls(struct inode *inode, struct posix_acl *acl,
		  struct posix_acl *dfacl)
{
	struct nfs_server *server = NFS_SERVER(inode);
	struct nfs_fattr fattr;
	struct page *pages[NFSACL_MAXPAGES] = { };
	struct nfs3_setaclargs args = {
		.inode = inode,
		.mask = NFS_ACL,
		.acl_access = acl,
		.pages = pages,
	};
	struct rpc_message msg = {
		.rpc_argp	= &args,
		.rpc_resp	= &fattr,
	};
	int status, count;

	status = -EOPNOTSUPP;
	if (!nfs_server_capable(inode, NFS_CAP_ACLS))
		goto out;

	/* We are doing this here, because XDR marshalling can only
	   return -ENOMEM. */
	status = -ENOSPC;
	if (acl != NULL && acl->a_count > NFS_ACL_MAX_ENTRIES)
		goto out;
	if (dfacl != NULL && dfacl->a_count > NFS_ACL_MAX_ENTRIES)
		goto out;
	if (S_ISDIR(inode->i_mode)) {
		args.mask |= NFS_DFACL;
		args.acl_default = dfacl;
	}

	dprintk("NFS call setacl\n");
	msg.rpc_proc = &server->client_acl->cl_procinfo[ACLPROC3_SETACL];
	status = rpc_call_sync(server->client_acl, &msg, 0);
	spin_lock(&inode->i_lock);
	NFS_I(inode)->cache_validity |= NFS_INO_INVALID_ACCESS;
	spin_unlock(&inode->i_lock);
	dprintk("NFS reply setacl: %d\n", status);

	/* pages may have been allocated at the xdr layer. */
	for (count = 0; count < NFSACL_MAXPAGES && args.pages[count]; count++)
		__free_page(args.pages[count]);

	switch (status) {
		case 0:
			status = nfs_refresh_inode(inode, &fattr);
			nfs3_cache_acls(inode, acl, dfacl);
			break;
		case -EPFNOSUPPORT:
		case -EPROTONOSUPPORT:
			dprintk("NFS_V3_ACL SETACL RPC not supported"
					"(will not retry)\n");
			server->caps &= ~NFS_CAP_ACLS;
		case -ENOTSUPP:
			status = -EOPNOTSUPP;
	}
out:
	return status;
}

int nfs3_proc_setacl(struct inode *inode, int type, struct posix_acl *acl)
{
	struct posix_acl *alloc = NULL, *dfacl = NULL;
	int status;

	if (S_ISDIR(inode->i_mode)) {
		switch(type) {
			case ACL_TYPE_ACCESS:
				alloc = dfacl = nfs3_proc_getacl(inode,
						ACL_TYPE_DEFAULT);
				if (IS_ERR(alloc))
					goto fail;
				break;

			case ACL_TYPE_DEFAULT:
				dfacl = acl;
				alloc = acl = nfs3_proc_getacl(inode,
						ACL_TYPE_ACCESS);
				if (IS_ERR(alloc))
					goto fail;
				break;

			default:
				return -EINVAL;
		}
	} else if (type != ACL_TYPE_ACCESS)
			return -EINVAL;

	if (acl == NULL) {
		alloc = acl = posix_acl_from_mode(inode->i_mode, GFP_KERNEL);
		if (IS_ERR(alloc))
			goto fail;
	}
	status = nfs3_proc_setacls(inode, acl, dfacl);
	posix_acl_release(alloc);
	return status;

fail:
	return PTR_ERR(alloc);
}

int nfs3_proc_set_default_acl(struct inode *dir, struct inode *inode,
		mode_t mode)
{
	struct posix_acl *dfacl, *acl;
	int error = 0;

	dfacl = nfs3_proc_getacl(dir, ACL_TYPE_DEFAULT);
	if (IS_ERR(dfacl)) {
		error = PTR_ERR(dfacl);
		return (error == -EOPNOTSUPP) ? 0 : error;
	}
	if (!dfacl)
		return 0;
	acl = posix_acl_clone(dfacl, GFP_KERNEL);
	error = -ENOMEM;
	if (!acl)
		goto out_release_dfacl;
	error = posix_acl_create_masq(acl, &mode);
	if (error < 0)
		goto out_release_acl;
	error = nfs3_proc_setacls(inode, acl, S_ISDIR(inode->i_mode) ?
						      dfacl : NULL);
out_release_acl:
	posix_acl_release(acl);
out_release_dfacl:
	posix_acl_release(dfacl);
	return error;
}
Commit	Line	Data
b7fa0554 AG	1	#include <linux/fs.h>
	2	#include <linux/nfs.h>
	3	#include <linux/nfs3.h>
	4	#include <linux/nfs_fs.h>
334a13ec	5	#include <linux/posix_acl_xattr.h>
b7fa0554 AG	6	#include <linux/nfsacl.h>
	7
	8	#define NFSDBG_FACILITY NFSDBG_PROC
	9
	10	ssize_t nfs3_listxattr(struct dentry dentry, char buffer, size_t size)
	11	{
	12	struct inode *inode = dentry->d_inode;
	13	struct posix_acl *acl;
	14	int pos=0, len=0;
	15
	16	# define output(s) do { \
	17	if (pos + sizeof(s) <= size) { \
	18	memcpy(buffer + pos, s, sizeof(s)); \
	19	pos += sizeof(s); \
	20	} \
	21	len += sizeof(s); \
	22	} while(0)
	23
	24	acl = nfs3_proc_getacl(inode, ACL_TYPE_ACCESS);
	25	if (IS_ERR(acl))
	26	return PTR_ERR(acl);
	27	if (acl) {
	28	output("system.posix_acl_access");
	29	posix_acl_release(acl);
	30	}
	31
	32	if (S_ISDIR(inode->i_mode)) {
	33	acl = nfs3_proc_getacl(inode, ACL_TYPE_DEFAULT);
	34	if (IS_ERR(acl))
	35	return PTR_ERR(acl);
	36	if (acl) {
	37	output("system.posix_acl_default");
	38	posix_acl_release(acl);
	39	}
	40	}
	41
	42	# undef output
	43
	44	if (!buffer \|\| len <= size)
	45	return len;
	46	return -ERANGE;
	47	}
	48
	49	ssize_t nfs3_getxattr(struct dentry dentry, const char name,
	50	void *buffer, size_t size)
	51	{
	52	struct inode *inode = dentry->d_inode;
	53	struct posix_acl *acl;
	54	int type, error = 0;
	55
334a13ec	56	if (strcmp(name, POSIX_ACL_XATTR_ACCESS) == 0)
b7fa0554	57	type = ACL_TYPE_ACCESS;
334a13ec	58	else if (strcmp(name, POSIX_ACL_XATTR_DEFAULT) == 0)
b7fa0554 AG	59	type = ACL_TYPE_DEFAULT;
	60	else
	61	return -EOPNOTSUPP;
	62
	63	acl = nfs3_proc_getacl(inode, type);
	64	if (IS_ERR(acl))
	65	return PTR_ERR(acl);
	66	else if (acl) {
	67	if (type == ACL_TYPE_ACCESS && acl->a_count == 0)
	68	error = -ENODATA;
	69	else
	70	error = posix_acl_to_xattr(acl, buffer, size);
	71	posix_acl_release(acl);
	72	} else
	73	error = -ENODATA;
	74
	75	return error;
	76	}
	77
	78	int nfs3_setxattr(struct dentry dentry, const char name,
	79	const void *value, size_t size, int flags)
	80	{
	81	struct inode *inode = dentry->d_inode;
	82	struct posix_acl *acl;
	83	int type, error;
	84
334a13ec	85	if (strcmp(name, POSIX_ACL_XATTR_ACCESS) == 0)
b7fa0554	86	type = ACL_TYPE_ACCESS;
334a13ec	87	else if (strcmp(name, POSIX_ACL_XATTR_DEFAULT) == 0)
b7fa0554 AG	88	type = ACL_TYPE_DEFAULT;
	89	else
	90	return -EOPNOTSUPP;
	91
	92	acl = posix_acl_from_xattr(value, size);
	93	if (IS_ERR(acl))
	94	return PTR_ERR(acl);
	95	error = nfs3_proc_setacl(inode, type, acl);
	96	posix_acl_release(acl);
	97
	98	return error;
	99	}
	100
	101	int nfs3_removexattr(struct dentry dentry, const char name)
	102	{
	103	struct inode *inode = dentry->d_inode;
	104	int type;
	105
334a13ec	106	if (strcmp(name, POSIX_ACL_XATTR_ACCESS) == 0)
b7fa0554	107	type = ACL_TYPE_ACCESS;
334a13ec	108	else if (strcmp(name, POSIX_ACL_XATTR_DEFAULT) == 0)
b7fa0554 AG	109	type = ACL_TYPE_DEFAULT;
	110	else
	111	return -EOPNOTSUPP;
	112
	113	return nfs3_proc_setacl(inode, type, NULL);
	114	}
	115
5c6a9f7d AG	116	static void __nfs3_forget_cached_acls(struct nfs_inode *nfsi)
5c6a9f7d AG	117	{
458818ed	118	if (!IS_ERR(nfsi->acl_access)) {
5c6a9f7d AG	119	posix_acl_release(nfsi->acl_access);
	120	nfsi->acl_access = ERR_PTR(-EAGAIN);
	121	}
458818ed	122	if (!IS_ERR(nfsi->acl_default)) {
5c6a9f7d AG	123	posix_acl_release(nfsi->acl_default);
	124	nfsi->acl_default = ERR_PTR(-EAGAIN);
	125	}
	126	}
	127
	128	void nfs3_forget_cached_acls(struct inode *inode)
	129	{
	130	dprintk("NFS: nfs3_forget_cached_acls(%s/%ld)\n", inode->i_sb->s_id,
	131	inode->i_ino);
	132	spin_lock(&inode->i_lock);
	133	__nfs3_forget_cached_acls(NFS_I(inode));
	134	spin_unlock(&inode->i_lock);
	135	}
	136
	137	static struct posix_acl nfs3_get_cached_acl(struct inode inode, int type)
	138	{
	139	struct nfs_inode *nfsi = NFS_I(inode);
458818ed	140	struct posix_acl *acl = ERR_PTR(-EINVAL);
5c6a9f7d AG	141
	142	spin_lock(&inode->i_lock);
	143	switch(type) {
	144	case ACL_TYPE_ACCESS:
	145	acl = nfsi->acl_access;
	146	break;
	147
	148	case ACL_TYPE_DEFAULT:
	149	acl = nfsi->acl_default;
	150	break;
	151
	152	default:
458818ed	153	goto out;
5c6a9f7d	154	}
458818ed	155	if (IS_ERR(acl))
5c6a9f7d AG	156	acl = ERR_PTR(-EAGAIN);
	157	else
	158	acl = posix_acl_dup(acl);
458818ed	159	out:
5c6a9f7d AG	160	spin_unlock(&inode->i_lock);
	161	dprintk("NFS: nfs3_get_cached_acl(%s/%ld, %d) = %p\n", inode->i_sb->s_id,
	162	inode->i_ino, type, acl);
	163	return acl;
	164	}
	165
	166	static void nfs3_cache_acls(struct inode inode, struct posix_acl acl,
	167	struct posix_acl *dfacl)
	168	{
	169	struct nfs_inode *nfsi = NFS_I(inode);
	170
	171	dprintk("nfs3_cache_acls(%s/%ld, %p, %p)\n", inode->i_sb->s_id,
	172	inode->i_ino, acl, dfacl);
	173	spin_lock(&inode->i_lock);
	174	__nfs3_forget_cached_acls(NFS_I(inode));
4814f56d AG	175	if (!IS_ERR(acl))
	176	nfsi->acl_access = posix_acl_dup(acl);
	177	if (!IS_ERR(dfacl))
	178	nfsi->acl_default = posix_acl_dup(dfacl);
5c6a9f7d AG	179	spin_unlock(&inode->i_lock);
	180	}
	181
b7fa0554 AG	182	struct posix_acl nfs3_proc_getacl(struct inode inode, int type)
	183	{
	184	struct nfs_server *server = NFS_SERVER(inode);
	185	struct nfs_fattr fattr;
	186	struct page *pages[NFSACL_MAXPAGES] = { };
	187	struct nfs3_getaclargs args = {
	188	.fh = NFS_FH(inode),
	189	/* The xdr layer may allocate pages here. */
	190	.pages = pages,
	191	};
	192	struct nfs3_getaclres res = {
	193	.fattr = &fattr,
	194	};
dead28da CL	195	struct rpc_message msg = {
	196	.rpc_argp = &args,
	197	.rpc_resp = &res,
	198	};
5c6a9f7d	199	struct posix_acl *acl;
b7fa0554 AG	200	int status, count;
	201
	202	if (!nfs_server_capable(inode, NFS_CAP_ACLS))
	203	return ERR_PTR(-EOPNOTSUPP);
	204
5c6a9f7d AG	205	status = nfs_revalidate_inode(server, inode);
	206	if (status < 0)
	207	return ERR_PTR(status);
	208	acl = nfs3_get_cached_acl(inode, type);
	209	if (acl != ERR_PTR(-EAGAIN))
	210	return acl;
	211	acl = NULL;
b7fa0554	212
5c6a9f7d AG	213	/*
	214	* Only get the access acl when explicitly requested: We don't
	215	* need it for access decisions, and only some applications use
	216	* it. Applications which request the access acl first are not
	217	* penalized from this optimization.
	218	*/
	219	if (type == ACL_TYPE_ACCESS)
	220	args.mask \|= NFS_ACLCNT\|NFS_ACL;
	221	if (S_ISDIR(inode->i_mode))
	222	args.mask \|= NFS_DFACLCNT\|NFS_DFACL;
	223	if (args.mask == 0)
	224	return NULL;
b7fa0554 AG	225
b7fa0554 AG	226	dprintk("NFS call getacl\n");
dead28da CL	227	msg.rpc_proc = &server->client_acl->cl_procinfo[ACLPROC3_GETACL];
dead28da CL	228	status = rpc_call_sync(server->client_acl, &msg, 0);
b7fa0554 AG	229	dprintk("NFS reply getacl: %d\n", status);
	230
	231	/* pages may have been allocated at the xdr layer. */
	232	for (count = 0; count < NFSACL_MAXPAGES && args.pages[count]; count++)
	233	__free_page(args.pages[count]);
	234
	235	switch (status) {
	236	case 0:
	237	status = nfs_refresh_inode(inode, &fattr);
	238	break;
	239	case -EPFNOSUPPORT:
	240	case -EPROTONOSUPPORT:
	241	dprintk("NFS_V3_ACL extension not supported; disabling\n");
	242	server->caps &= ~NFS_CAP_ACLS;
	243	case -ENOTSUPP:
	244	status = -EOPNOTSUPP;
	245	default:
	246	goto getout;
	247	}
	248	if ((args.mask & res.mask) != args.mask) {
	249	status = -EIO;
	250	goto getout;
	251	}
	252
	253	if (res.acl_access != NULL) {
	254	if (posix_acl_equiv_mode(res.acl_access, NULL) == 0) {
	255	posix_acl_release(res.acl_access);
	256	res.acl_access = NULL;
	257	}
	258	}
4814f56d AG	259	nfs3_cache_acls(inode,
	260	(res.mask & NFS_ACL) ? res.acl_access : ERR_PTR(-EINVAL),
	261	(res.mask & NFS_DFACL) ? res.acl_default : ERR_PTR(-EINVAL));
b7fa0554 AG	262
	263	switch(type) {
	264	case ACL_TYPE_ACCESS:
	265	acl = res.acl_access;
	266	res.acl_access = NULL;
	267	break;
	268
	269	case ACL_TYPE_DEFAULT:
	270	acl = res.acl_default;
	271	res.acl_default = NULL;
	272	}
	273
	274	getout:
	275	posix_acl_release(res.acl_access);
	276	posix_acl_release(res.acl_default);
	277
	278	if (status != 0) {
	279	posix_acl_release(acl);
	280	acl = ERR_PTR(status);
	281	}
	282	return acl;
	283	}
	284
	285	static int nfs3_proc_setacls(struct inode inode, struct posix_acl acl,
	286	struct posix_acl *dfacl)
	287	{
	288	struct nfs_server *server = NFS_SERVER(inode);
	289	struct nfs_fattr fattr;
	290	struct page *pages[NFSACL_MAXPAGES] = { };
	291	struct nfs3_setaclargs args = {
	292	.inode = inode,
	293	.mask = NFS_ACL,
	294	.acl_access = acl,
	295	.pages = pages,
	296	};
dead28da CL	297	struct rpc_message msg = {
	298	.rpc_argp = &args,
	299	.rpc_resp = &fattr,
	300	};
b7fa0554 AG	301	int status, count;
	302
	303	status = -EOPNOTSUPP;
	304	if (!nfs_server_capable(inode, NFS_CAP_ACLS))
	305	goto out;
	306
	307	/* We are doing this here, because XDR marshalling can only
	308	return -ENOMEM. */
	309	status = -ENOSPC;
	310	if (acl != NULL && acl->a_count > NFS_ACL_MAX_ENTRIES)
	311	goto out;
	312	if (dfacl != NULL && dfacl->a_count > NFS_ACL_MAX_ENTRIES)
	313	goto out;
	314	if (S_ISDIR(inode->i_mode)) {
	315	args.mask \|= NFS_DFACL;
	316	args.acl_default = dfacl;
	317	}
	318
	319	dprintk("NFS call setacl\n");
dead28da CL	320	msg.rpc_proc = &server->client_acl->cl_procinfo[ACLPROC3_SETACL];
dead28da CL	321	status = rpc_call_sync(server->client_acl, &msg, 0);
dc59250c	322	spin_lock(&inode->i_lock);
55296809	323	NFS_I(inode)->cache_validity \|= NFS_INO_INVALID_ACCESS;
dc59250c	324	spin_unlock(&inode->i_lock);
b7fa0554 AG	325	dprintk("NFS reply setacl: %d\n", status);
	326
	327	/* pages may have been allocated at the xdr layer. */
	328	for (count = 0; count < NFSACL_MAXPAGES && args.pages[count]; count++)
	329	__free_page(args.pages[count]);
	330
	331	switch (status) {
	332	case 0:
	333	status = nfs_refresh_inode(inode, &fattr);
4814f56d	334	nfs3_cache_acls(inode, acl, dfacl);
b7fa0554 AG	335	break;
	336	case -EPFNOSUPPORT:
	337	case -EPROTONOSUPPORT:
	338	dprintk("NFS_V3_ACL SETACL RPC not supported"
	339	"(will not retry)\n");
	340	server->caps &= ~NFS_CAP_ACLS;
	341	case -ENOTSUPP:
	342	status = -EOPNOTSUPP;
	343	}
	344	out:
	345	return status;
	346	}
	347
	348	int nfs3_proc_setacl(struct inode inode, int type, struct posix_acl acl)
	349	{
	350	struct posix_acl alloc = NULL, dfacl = NULL;
	351	int status;
	352
	353	if (S_ISDIR(inode->i_mode)) {
	354	switch(type) {
	355	case ACL_TYPE_ACCESS:
	356	alloc = dfacl = nfs3_proc_getacl(inode,
	357	ACL_TYPE_DEFAULT);
	358	if (IS_ERR(alloc))
	359	goto fail;
	360	break;
	361
	362	case ACL_TYPE_DEFAULT:
	363	dfacl = acl;
	364	alloc = acl = nfs3_proc_getacl(inode,
	365	ACL_TYPE_ACCESS);
	366	if (IS_ERR(alloc))
	367	goto fail;
	368	break;
	369
	370	default:
	371	return -EINVAL;
	372	}
	373	} else if (type != ACL_TYPE_ACCESS)
	374	return -EINVAL;
	375
	376	if (acl == NULL) {
	377	alloc = acl = posix_acl_from_mode(inode->i_mode, GFP_KERNEL);
	378	if (IS_ERR(alloc))
	379	goto fail;
	380	}
	381	status = nfs3_proc_setacls(inode, acl, dfacl);
	382	posix_acl_release(alloc);
	383	return status;
	384
	385	fail:
	386	return PTR_ERR(alloc);
	387	}
055ffbea AG	388
	389	int nfs3_proc_set_default_acl(struct inode dir, struct inode inode,
	390	mode_t mode)
	391	{
	392	struct posix_acl dfacl, acl;
	393	int error = 0;
	394
	395	dfacl = nfs3_proc_getacl(dir, ACL_TYPE_DEFAULT);
	396	if (IS_ERR(dfacl)) {
	397	error = PTR_ERR(dfacl);
	398	return (error == -EOPNOTSUPP) ? 0 : error;
	399	}
	400	if (!dfacl)
	401	return 0;
	402	acl = posix_acl_clone(dfacl, GFP_KERNEL);
	403	error = -ENOMEM;
	404	if (!acl)
	405	goto out_release_dfacl;
	406	error = posix_acl_create_masq(acl, &mode);
	407	if (error < 0)
	408	goto out_release_acl;
	409	error = nfs3_proc_setacls(inode, acl, S_ISDIR(inode->i_mode) ?
	410	dfacl : NULL);
	411	out_release_acl:
	412	posix_acl_release(acl);
	413	out_release_dfacl:
	414	posix_acl_release(dfacl);
	415	return error;
	416	}