]>
git.proxmox.com Git - mirror_ubuntu-jammy-kernel.git/blob - fs/nfsd/auth.c
1 // SPDX-License-Identifier: GPL-2.0
2 /* Copyright (C) 1995, 1996 Olaf Kirch <okir@monad.swb.de> */
4 #include <linux/sched.h>
8 int nfsexp_flags(struct svc_rqst
*rqstp
, struct svc_export
*exp
)
10 struct exp_flavor_info
*f
;
11 struct exp_flavor_info
*end
= exp
->ex_flavors
+ exp
->ex_nflavors
;
13 for (f
= exp
->ex_flavors
; f
< end
; f
++) {
14 if (f
->pseudoflavor
== rqstp
->rq_cred
.cr_flavor
)
21 int nfsd_setuser(struct svc_rqst
*rqstp
, struct svc_export
*exp
)
23 struct group_info
*rqgi
;
24 struct group_info
*gi
;
27 int flags
= nfsexp_flags(rqstp
, exp
);
29 validate_process_creds();
31 /* discard any old override before preparing the new set */
32 revert_creds(get_cred(current_real_cred()));
33 new = prepare_creds();
37 new->fsuid
= rqstp
->rq_cred
.cr_uid
;
38 new->fsgid
= rqstp
->rq_cred
.cr_gid
;
40 rqgi
= rqstp
->rq_cred
.cr_group_info
;
42 if (flags
& NFSEXP_ALLSQUASH
) {
43 new->fsuid
= exp
->ex_anon_uid
;
44 new->fsgid
= exp
->ex_anon_gid
;
48 } else if (flags
& NFSEXP_ROOTSQUASH
) {
49 if (uid_eq(new->fsuid
, GLOBAL_ROOT_UID
))
50 new->fsuid
= exp
->ex_anon_uid
;
51 if (gid_eq(new->fsgid
, GLOBAL_ROOT_GID
))
52 new->fsgid
= exp
->ex_anon_gid
;
54 gi
= groups_alloc(rqgi
->ngroups
);
58 for (i
= 0; i
< rqgi
->ngroups
; i
++) {
59 if (gid_eq(GLOBAL_ROOT_GID
, rqgi
->gid
[i
]))
60 gi
->gid
[i
] = exp
->ex_anon_gid
;
62 gi
->gid
[i
] = rqgi
->gid
[i
];
65 /* Each thread allocates its own gi, no race */
68 gi
= get_group_info(rqgi
);
71 if (uid_eq(new->fsuid
, INVALID_UID
))
72 new->fsuid
= exp
->ex_anon_uid
;
73 if (gid_eq(new->fsgid
, INVALID_GID
))
74 new->fsgid
= exp
->ex_anon_gid
;
79 if (!uid_eq(new->fsuid
, GLOBAL_ROOT_UID
))
80 new->cap_effective
= cap_drop_nfsd_set(new->cap_effective
);
82 new->cap_effective
= cap_raise_nfsd_set(new->cap_effective
,
84 validate_process_creds();
85 put_cred(override_creds(new));
87 validate_process_creds();