1 /* 2 * fs/cifs/cifsacl.h 3 * 4 * Copyright (c) International Business Machines Corp., 2007 5 * Author(s): Steve French (sfrench@us.ibm.com) 6 * 7 * This library is free software; you can redistribute it and/or modify 8 * it under the terms of the GNU Lesser General Public License as published 9 * by the Free Software Foundation; either version 2.1 of the License, or 10 * (at your option) any later version. 11 * 12 * This library is distributed in the hope that it will be useful, 13 * but WITHOUT ANY WARRANTY; without even the implied warranty of 14 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See 15 * the GNU Lesser General Public License for more details. 16 * 17 * You should have received a copy of the GNU Lesser General Public License 18 * along with this library; if not, write to the Free Software 19 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA 20 */ 21 22 #ifndef _CIFSACL_H 23 #define _CIFSACL_H 24 25 26 #define NUM_AUTHS 6 /* number of authority fields */ 27 #define NUM_SUBAUTHS 5 /* number of sub authority fields */ 28 #define NUM_WK_SIDS 7 /* number of well known sids */ 29 #define SIDNAMELENGTH 20 /* long enough for the ones we care about */ 30 #define DEFSECDESCLEN 192 /* sec desc len contaiting a dacl with three aces */ 31 32 #define READ_BIT 0x4 33 #define WRITE_BIT 0x2 34 #define EXEC_BIT 0x1 35 36 #define UBITSHIFT 6 37 #define GBITSHIFT 3 38 39 #define ACCESS_ALLOWED 0 40 #define ACCESS_DENIED 1 41 42 #define SIDOWNER 1 43 #define SIDGROUP 2 44 #define SIDLEN 150 /* S- 1 revision- 6 authorities- max 5 sub authorities */ 45 46 #define SID_ID_MAPPED 0 47 #define SID_ID_PENDING 1 48 #define SID_MAP_EXPIRE (3600 * HZ) /* map entry expires after one hour */ 49 #define SID_MAP_RETRY (300 * HZ) /* wait 5 minutes for next attempt to map */ 50 51 struct cifs_ntsd { 52 __le16 revision; /* revision level */ 53 __le16 type; 54 __le32 osidoffset; 55 __le32 gsidoffset; 56 __le32 sacloffset; 57 __le32 dacloffset; 58 } __attribute__((packed)); 59 60 struct cifs_sid { 61 __u8 revision; /* revision level */ 62 __u8 num_subauth; 63 __u8 authority[6]; 64 __le32 sub_auth[5]; /* sub_auth[num_subauth] */ 65 } __attribute__((packed)); 66 67 struct cifs_acl { 68 __le16 revision; /* revision level */ 69 __le16 size; 70 __le32 num_aces; 71 } __attribute__((packed)); 72 73 struct cifs_ace { 74 __u8 type; 75 __u8 flags; 76 __le16 size; 77 __le32 access_req; 78 struct cifs_sid sid; /* ie UUID of user or group who gets these perms */ 79 } __attribute__((packed)); 80 81 struct cifs_wksid { 82 struct cifs_sid cifssid; 83 char sidname[SIDNAMELENGTH]; 84 } __attribute__((packed)); 85 86 struct cifs_sid_id { 87 unsigned int refcount; /* increment with spinlock, decrement without */ 88 unsigned long id; 89 unsigned long time; 90 unsigned long state; 91 char *sidstr; 92 struct rb_node rbnode; 93 struct cifs_sid sid; 94 }; 95 96 #ifdef __KERNEL__ 97 extern struct key_type cifs_idmap_key_type; 98 extern const struct cred *root_cred; 99 #endif /* KERNEL */ 100 101 extern int compare_sids(const struct cifs_sid *, const struct cifs_sid *); 102 103 #endif /* _CIFSACL_H */ 104