1 /*
2  * Syscall interface to knfsd.
3  *
4  * Copyright (C) 1995, 1996 Olaf Kirch <okir@monad.swb.de>
5  */
6 
7 #include <linux/slab.h>
8 #include <linux/namei.h>
9 #include <linux/ctype.h>
10 
11 #include <linux/sunrpc/svcsock.h>
12 #include <linux/lockd/lockd.h>
13 #include <linux/sunrpc/clnt.h>
14 #include <linux/sunrpc/gss_api.h>
15 #include <linux/sunrpc/gss_krb5_enctypes.h>
16 #include <linux/sunrpc/rpc_pipe_fs.h>
17 #include <linux/module.h>
18 
19 #include "idmap.h"
20 #include "nfsd.h"
21 #include "cache.h"
22 #include "fault_inject.h"
23 #include "netns.h"
24 
25 /*
26  *	We have a single directory with several nodes in it.
27  */
28 enum {
29 	NFSD_Root = 1,
30 	NFSD_List,
31 	NFSD_Export_features,
32 	NFSD_Fh,
33 	NFSD_FO_UnlockIP,
34 	NFSD_FO_UnlockFS,
35 	NFSD_Threads,
36 	NFSD_Pool_Threads,
37 	NFSD_Pool_Stats,
38 	NFSD_Versions,
39 	NFSD_Ports,
40 	NFSD_MaxBlkSize,
41 	NFSD_SupportedEnctypes,
42 	/*
43 	 * The below MUST come last.  Otherwise we leave a hole in nfsd_files[]
44 	 * with !CONFIG_NFSD_V4 and simple_fill_super() goes oops
45 	 */
46 #ifdef CONFIG_NFSD_V4
47 	NFSD_Leasetime,
48 	NFSD_Gracetime,
49 	NFSD_RecoveryDir,
50 #endif
51 };
52 
53 /*
54  * write() for these nodes.
55  */
56 static ssize_t write_filehandle(struct file *file, char *buf, size_t size);
57 static ssize_t write_unlock_ip(struct file *file, char *buf, size_t size);
58 static ssize_t write_unlock_fs(struct file *file, char *buf, size_t size);
59 static ssize_t write_threads(struct file *file, char *buf, size_t size);
60 static ssize_t write_pool_threads(struct file *file, char *buf, size_t size);
61 static ssize_t write_versions(struct file *file, char *buf, size_t size);
62 static ssize_t write_ports(struct file *file, char *buf, size_t size);
63 static ssize_t write_maxblksize(struct file *file, char *buf, size_t size);
64 #ifdef CONFIG_NFSD_V4
65 static ssize_t write_leasetime(struct file *file, char *buf, size_t size);
66 static ssize_t write_gracetime(struct file *file, char *buf, size_t size);
67 static ssize_t write_recoverydir(struct file *file, char *buf, size_t size);
68 #endif
69 
70 static ssize_t (*write_op[])(struct file *, char *, size_t) = {
71 	[NFSD_Fh] = write_filehandle,
72 	[NFSD_FO_UnlockIP] = write_unlock_ip,
73 	[NFSD_FO_UnlockFS] = write_unlock_fs,
74 	[NFSD_Threads] = write_threads,
75 	[NFSD_Pool_Threads] = write_pool_threads,
76 	[NFSD_Versions] = write_versions,
77 	[NFSD_Ports] = write_ports,
78 	[NFSD_MaxBlkSize] = write_maxblksize,
79 #ifdef CONFIG_NFSD_V4
80 	[NFSD_Leasetime] = write_leasetime,
81 	[NFSD_Gracetime] = write_gracetime,
82 	[NFSD_RecoveryDir] = write_recoverydir,
83 #endif
84 };
85 
nfsctl_transaction_write(struct file * file,const char __user * buf,size_t size,loff_t * pos)86 static ssize_t nfsctl_transaction_write(struct file *file, const char __user *buf, size_t size, loff_t *pos)
87 {
88 	ino_t ino =  file->f_path.dentry->d_inode->i_ino;
89 	char *data;
90 	ssize_t rv;
91 
92 	if (ino >= ARRAY_SIZE(write_op) || !write_op[ino])
93 		return -EINVAL;
94 
95 	data = simple_transaction_get(file, buf, size);
96 	if (IS_ERR(data))
97 		return PTR_ERR(data);
98 
99 	rv =  write_op[ino](file, data, size);
100 	if (rv >= 0) {
101 		simple_transaction_set(file, rv);
102 		rv = size;
103 	}
104 	return rv;
105 }
106 
nfsctl_transaction_read(struct file * file,char __user * buf,size_t size,loff_t * pos)107 static ssize_t nfsctl_transaction_read(struct file *file, char __user *buf, size_t size, loff_t *pos)
108 {
109 	if (! file->private_data) {
110 		/* An attempt to read a transaction file without writing
111 		 * causes a 0-byte write so that the file can return
112 		 * state information
113 		 */
114 		ssize_t rv = nfsctl_transaction_write(file, buf, 0, pos);
115 		if (rv < 0)
116 			return rv;
117 	}
118 	return simple_transaction_read(file, buf, size, pos);
119 }
120 
121 static const struct file_operations transaction_ops = {
122 	.write		= nfsctl_transaction_write,
123 	.read		= nfsctl_transaction_read,
124 	.release	= simple_transaction_release,
125 	.llseek		= default_llseek,
126 };
127 
exports_open(struct inode * inode,struct file * file)128 static int exports_open(struct inode *inode, struct file *file)
129 {
130 	return seq_open(file, &nfs_exports_op);
131 }
132 
133 static const struct file_operations exports_operations = {
134 	.open		= exports_open,
135 	.read		= seq_read,
136 	.llseek		= seq_lseek,
137 	.release	= seq_release,
138 	.owner		= THIS_MODULE,
139 };
140 
export_features_show(struct seq_file * m,void * v)141 static int export_features_show(struct seq_file *m, void *v)
142 {
143 	seq_printf(m, "0x%x 0x%x\n", NFSEXP_ALLFLAGS, NFSEXP_SECINFO_FLAGS);
144 	return 0;
145 }
146 
export_features_open(struct inode * inode,struct file * file)147 static int export_features_open(struct inode *inode, struct file *file)
148 {
149 	return single_open(file, export_features_show, NULL);
150 }
151 
152 static struct file_operations export_features_operations = {
153 	.open		= export_features_open,
154 	.read		= seq_read,
155 	.llseek		= seq_lseek,
156 	.release	= single_release,
157 };
158 
159 #if defined(CONFIG_SUNRPC_GSS) || defined(CONFIG_SUNRPC_GSS_MODULE)
supported_enctypes_show(struct seq_file * m,void * v)160 static int supported_enctypes_show(struct seq_file *m, void *v)
161 {
162 	seq_printf(m, KRB5_SUPPORTED_ENCTYPES);
163 	return 0;
164 }
165 
supported_enctypes_open(struct inode * inode,struct file * file)166 static int supported_enctypes_open(struct inode *inode, struct file *file)
167 {
168 	return single_open(file, supported_enctypes_show, NULL);
169 }
170 
171 static struct file_operations supported_enctypes_ops = {
172 	.open		= supported_enctypes_open,
173 	.read		= seq_read,
174 	.llseek		= seq_lseek,
175 	.release	= single_release,
176 };
177 #endif /* CONFIG_SUNRPC_GSS or CONFIG_SUNRPC_GSS_MODULE */
178 
179 extern int nfsd_pool_stats_open(struct inode *inode, struct file *file);
180 extern int nfsd_pool_stats_release(struct inode *inode, struct file *file);
181 
182 static const struct file_operations pool_stats_operations = {
183 	.open		= nfsd_pool_stats_open,
184 	.read		= seq_read,
185 	.llseek		= seq_lseek,
186 	.release	= nfsd_pool_stats_release,
187 	.owner		= THIS_MODULE,
188 };
189 
190 /*----------------------------------------------------------------------------*/
191 /*
192  * payload - write methods
193  */
194 
195 
196 /**
197  * write_unlock_ip - Release all locks used by a client
198  *
199  * Experimental.
200  *
201  * Input:
202  *			buf:	'\n'-terminated C string containing a
203  *				presentation format IP address
204  *			size:	length of C string in @buf
205  * Output:
206  *	On success:	returns zero if all specified locks were released;
207  *			returns one if one or more locks were not released
208  *	On error:	return code is negative errno value
209  */
write_unlock_ip(struct file * file,char * buf,size_t size)210 static ssize_t write_unlock_ip(struct file *file, char *buf, size_t size)
211 {
212 	struct sockaddr_storage address;
213 	struct sockaddr *sap = (struct sockaddr *)&address;
214 	size_t salen = sizeof(address);
215 	char *fo_path;
216 	struct net *net = file->f_dentry->d_sb->s_fs_info;
217 
218 	/* sanity check */
219 	if (size == 0)
220 		return -EINVAL;
221 
222 	if (buf[size-1] != '\n')
223 		return -EINVAL;
224 
225 	fo_path = buf;
226 	if (qword_get(&buf, fo_path, size) < 0)
227 		return -EINVAL;
228 
229 	if (rpc_pton(net, fo_path, size, sap, salen) == 0)
230 		return -EINVAL;
231 
232 	return nlmsvc_unlock_all_by_ip(sap);
233 }
234 
235 /**
236  * write_unlock_fs - Release all locks on a local file system
237  *
238  * Experimental.
239  *
240  * Input:
241  *			buf:	'\n'-terminated C string containing the
242  *				absolute pathname of a local file system
243  *			size:	length of C string in @buf
244  * Output:
245  *	On success:	returns zero if all specified locks were released;
246  *			returns one if one or more locks were not released
247  *	On error:	return code is negative errno value
248  */
write_unlock_fs(struct file * file,char * buf,size_t size)249 static ssize_t write_unlock_fs(struct file *file, char *buf, size_t size)
250 {
251 	struct path path;
252 	char *fo_path;
253 	int error;
254 
255 	/* sanity check */
256 	if (size == 0)
257 		return -EINVAL;
258 
259 	if (buf[size-1] != '\n')
260 		return -EINVAL;
261 
262 	fo_path = buf;
263 	if (qword_get(&buf, fo_path, size) < 0)
264 		return -EINVAL;
265 
266 	error = kern_path(fo_path, 0, &path);
267 	if (error)
268 		return error;
269 
270 	/*
271 	 * XXX: Needs better sanity checking.  Otherwise we could end up
272 	 * releasing locks on the wrong file system.
273 	 *
274 	 * For example:
275 	 * 1.  Does the path refer to a directory?
276 	 * 2.  Is that directory a mount point, or
277 	 * 3.  Is that directory the root of an exported file system?
278 	 */
279 	error = nlmsvc_unlock_all_by_sb(path.dentry->d_sb);
280 
281 	path_put(&path);
282 	return error;
283 }
284 
285 /**
286  * write_filehandle - Get a variable-length NFS file handle by path
287  *
288  * On input, the buffer contains a '\n'-terminated C string comprised of
289  * three alphanumeric words separated by whitespace.  The string may
290  * contain escape sequences.
291  *
292  * Input:
293  *			buf:
294  *				domain:		client domain name
295  *				path:		export pathname
296  *				maxsize:	numeric maximum size of
297  *						@buf
298  *			size:	length of C string in @buf
299  * Output:
300  *	On success:	passed-in buffer filled with '\n'-terminated C
301  *			string containing a ASCII hex text version
302  *			of the NFS file handle;
303  *			return code is the size in bytes of the string
304  *	On error:	return code is negative errno value
305  */
write_filehandle(struct file * file,char * buf,size_t size)306 static ssize_t write_filehandle(struct file *file, char *buf, size_t size)
307 {
308 	char *dname, *path;
309 	int uninitialized_var(maxsize);
310 	char *mesg = buf;
311 	int len;
312 	struct auth_domain *dom;
313 	struct knfsd_fh fh;
314 
315 	if (size == 0)
316 		return -EINVAL;
317 
318 	if (buf[size-1] != '\n')
319 		return -EINVAL;
320 	buf[size-1] = 0;
321 
322 	dname = mesg;
323 	len = qword_get(&mesg, dname, size);
324 	if (len <= 0)
325 		return -EINVAL;
326 
327 	path = dname+len+1;
328 	len = qword_get(&mesg, path, size);
329 	if (len <= 0)
330 		return -EINVAL;
331 
332 	len = get_int(&mesg, &maxsize);
333 	if (len)
334 		return len;
335 
336 	if (maxsize < NFS_FHSIZE)
337 		return -EINVAL;
338 	if (maxsize > NFS3_FHSIZE)
339 		maxsize = NFS3_FHSIZE;
340 
341 	if (qword_get(&mesg, mesg, size)>0)
342 		return -EINVAL;
343 
344 	/* we have all the words, they are in buf.. */
345 	dom = unix_domain_find(dname);
346 	if (!dom)
347 		return -ENOMEM;
348 
349 	len = exp_rootfh(dom, path, &fh,  maxsize);
350 	auth_domain_put(dom);
351 	if (len)
352 		return len;
353 
354 	mesg = buf;
355 	len = SIMPLE_TRANSACTION_LIMIT;
356 	qword_addhex(&mesg, &len, (char*)&fh.fh_base, fh.fh_size);
357 	mesg[-1] = '\n';
358 	return mesg - buf;
359 }
360 
361 /**
362  * write_threads - Start NFSD, or report the current number of running threads
363  *
364  * Input:
365  *			buf:		ignored
366  *			size:		zero
367  * Output:
368  *	On success:	passed-in buffer filled with '\n'-terminated C
369  *			string numeric value representing the number of
370  *			running NFSD threads;
371  *			return code is the size in bytes of the string
372  *	On error:	return code is zero
373  *
374  * OR
375  *
376  * Input:
377  *			buf:		C string containing an unsigned
378  *					integer value representing the
379  *					number of NFSD threads to start
380  *			size:		non-zero length of C string in @buf
381  * Output:
382  *	On success:	NFS service is started;
383  *			passed-in buffer filled with '\n'-terminated C
384  *			string numeric value representing the number of
385  *			running NFSD threads;
386  *			return code is the size in bytes of the string
387  *	On error:	return code is zero or a negative errno value
388  */
write_threads(struct file * file,char * buf,size_t size)389 static ssize_t write_threads(struct file *file, char *buf, size_t size)
390 {
391 	char *mesg = buf;
392 	int rv;
393 	struct net *net = file->f_dentry->d_sb->s_fs_info;
394 
395 	if (size > 0) {
396 		int newthreads;
397 		rv = get_int(&mesg, &newthreads);
398 		if (rv)
399 			return rv;
400 		if (newthreads < 0)
401 			return -EINVAL;
402 		rv = nfsd_svc(NFS_PORT, newthreads, net);
403 		if (rv < 0)
404 			return rv;
405 	} else
406 		rv = nfsd_nrthreads();
407 
408 	return scnprintf(buf, SIMPLE_TRANSACTION_LIMIT, "%d\n", rv);
409 }
410 
411 /**
412  * write_pool_threads - Set or report the current number of threads per pool
413  *
414  * Input:
415  *			buf:		ignored
416  *			size:		zero
417  *
418  * OR
419  *
420  * Input:
421  * 			buf:		C string containing whitespace-
422  * 					separated unsigned integer values
423  *					representing the number of NFSD
424  *					threads to start in each pool
425  *			size:		non-zero length of C string in @buf
426  * Output:
427  *	On success:	passed-in buffer filled with '\n'-terminated C
428  *			string containing integer values representing the
429  *			number of NFSD threads in each pool;
430  *			return code is the size in bytes of the string
431  *	On error:	return code is zero or a negative errno value
432  */
write_pool_threads(struct file * file,char * buf,size_t size)433 static ssize_t write_pool_threads(struct file *file, char *buf, size_t size)
434 {
435 	/* if size > 0, look for an array of number of threads per node
436 	 * and apply them  then write out number of threads per node as reply
437 	 */
438 	char *mesg = buf;
439 	int i;
440 	int rv;
441 	int len;
442 	int npools;
443 	int *nthreads;
444 	struct net *net = file->f_dentry->d_sb->s_fs_info;
445 
446 	mutex_lock(&nfsd_mutex);
447 	npools = nfsd_nrpools();
448 	if (npools == 0) {
449 		/*
450 		 * NFS is shut down.  The admin can start it by
451 		 * writing to the threads file but NOT the pool_threads
452 		 * file, sorry.  Report zero threads.
453 		 */
454 		mutex_unlock(&nfsd_mutex);
455 		strcpy(buf, "0\n");
456 		return strlen(buf);
457 	}
458 
459 	nthreads = kcalloc(npools, sizeof(int), GFP_KERNEL);
460 	rv = -ENOMEM;
461 	if (nthreads == NULL)
462 		goto out_free;
463 
464 	if (size > 0) {
465 		for (i = 0; i < npools; i++) {
466 			rv = get_int(&mesg, &nthreads[i]);
467 			if (rv == -ENOENT)
468 				break;		/* fewer numbers than pools */
469 			if (rv)
470 				goto out_free;	/* syntax error */
471 			rv = -EINVAL;
472 			if (nthreads[i] < 0)
473 				goto out_free;
474 		}
475 		rv = nfsd_set_nrthreads(i, nthreads, net);
476 		if (rv)
477 			goto out_free;
478 	}
479 
480 	rv = nfsd_get_nrthreads(npools, nthreads);
481 	if (rv)
482 		goto out_free;
483 
484 	mesg = buf;
485 	size = SIMPLE_TRANSACTION_LIMIT;
486 	for (i = 0; i < npools && size > 0; i++) {
487 		snprintf(mesg, size, "%d%c", nthreads[i], (i == npools-1 ? '\n' : ' '));
488 		len = strlen(mesg);
489 		size -= len;
490 		mesg += len;
491 	}
492 	rv = mesg - buf;
493 out_free:
494 	kfree(nthreads);
495 	mutex_unlock(&nfsd_mutex);
496 	return rv;
497 }
498 
__write_versions(struct file * file,char * buf,size_t size)499 static ssize_t __write_versions(struct file *file, char *buf, size_t size)
500 {
501 	char *mesg = buf;
502 	char *vers, *minorp, sign;
503 	int len, num, remaining;
504 	unsigned minor;
505 	ssize_t tlen = 0;
506 	char *sep;
507 
508 	if (size>0) {
509 		if (nfsd_serv)
510 			/* Cannot change versions without updating
511 			 * nfsd_serv->sv_xdrsize, and reallocing
512 			 * rq_argp and rq_resp
513 			 */
514 			return -EBUSY;
515 		if (buf[size-1] != '\n')
516 			return -EINVAL;
517 		buf[size-1] = 0;
518 
519 		vers = mesg;
520 		len = qword_get(&mesg, vers, size);
521 		if (len <= 0) return -EINVAL;
522 		do {
523 			sign = *vers;
524 			if (sign == '+' || sign == '-')
525 				num = simple_strtol((vers+1), &minorp, 0);
526 			else
527 				num = simple_strtol(vers, &minorp, 0);
528 			if (*minorp == '.') {
529 				if (num < 4)
530 					return -EINVAL;
531 				minor = simple_strtoul(minorp+1, NULL, 0);
532 				if (minor == 0)
533 					return -EINVAL;
534 				if (nfsd_minorversion(minor, sign == '-' ?
535 						     NFSD_CLEAR : NFSD_SET) < 0)
536 					return -EINVAL;
537 				goto next;
538 			}
539 			switch(num) {
540 			case 2:
541 			case 3:
542 			case 4:
543 				nfsd_vers(num, sign == '-' ? NFSD_CLEAR : NFSD_SET);
544 				break;
545 			default:
546 				return -EINVAL;
547 			}
548 		next:
549 			vers += len + 1;
550 		} while ((len = qword_get(&mesg, vers, size)) > 0);
551 		/* If all get turned off, turn them back on, as
552 		 * having no versions is BAD
553 		 */
554 		nfsd_reset_versions();
555 	}
556 
557 	/* Now write current state into reply buffer */
558 	len = 0;
559 	sep = "";
560 	remaining = SIMPLE_TRANSACTION_LIMIT;
561 	for (num=2 ; num <= 4 ; num++)
562 		if (nfsd_vers(num, NFSD_AVAIL)) {
563 			len = snprintf(buf, remaining, "%s%c%d", sep,
564 				       nfsd_vers(num, NFSD_TEST)?'+':'-',
565 				       num);
566 			sep = " ";
567 
568 			if (len > remaining)
569 				break;
570 			remaining -= len;
571 			buf += len;
572 			tlen += len;
573 		}
574 	if (nfsd_vers(4, NFSD_AVAIL))
575 		for (minor = 1; minor <= NFSD_SUPPORTED_MINOR_VERSION;
576 		     minor++) {
577 			len = snprintf(buf, remaining, " %c4.%u",
578 					(nfsd_vers(4, NFSD_TEST) &&
579 					 nfsd_minorversion(minor, NFSD_TEST)) ?
580 						'+' : '-',
581 					minor);
582 
583 			if (len > remaining)
584 				break;
585 			remaining -= len;
586 			buf += len;
587 			tlen += len;
588 		}
589 
590 	len = snprintf(buf, remaining, "\n");
591 	if (len > remaining)
592 		return -EINVAL;
593 	return tlen + len;
594 }
595 
596 /**
597  * write_versions - Set or report the available NFS protocol versions
598  *
599  * Input:
600  *			buf:		ignored
601  *			size:		zero
602  * Output:
603  *	On success:	passed-in buffer filled with '\n'-terminated C
604  *			string containing positive or negative integer
605  *			values representing the current status of each
606  *			protocol version;
607  *			return code is the size in bytes of the string
608  *	On error:	return code is zero or a negative errno value
609  *
610  * OR
611  *
612  * Input:
613  * 			buf:		C string containing whitespace-
614  * 					separated positive or negative
615  * 					integer values representing NFS
616  * 					protocol versions to enable ("+n")
617  * 					or disable ("-n")
618  *			size:		non-zero length of C string in @buf
619  * Output:
620  *	On success:	status of zero or more protocol versions has
621  *			been updated; passed-in buffer filled with
622  *			'\n'-terminated C string containing positive
623  *			or negative integer values representing the
624  *			current status of each protocol version;
625  *			return code is the size in bytes of the string
626  *	On error:	return code is zero or a negative errno value
627  */
write_versions(struct file * file,char * buf,size_t size)628 static ssize_t write_versions(struct file *file, char *buf, size_t size)
629 {
630 	ssize_t rv;
631 
632 	mutex_lock(&nfsd_mutex);
633 	rv = __write_versions(file, buf, size);
634 	mutex_unlock(&nfsd_mutex);
635 	return rv;
636 }
637 
638 /*
639  * Zero-length write.  Return a list of NFSD's current listener
640  * transports.
641  */
__write_ports_names(char * buf)642 static ssize_t __write_ports_names(char *buf)
643 {
644 	if (nfsd_serv == NULL)
645 		return 0;
646 	return svc_xprt_names(nfsd_serv, buf, SIMPLE_TRANSACTION_LIMIT);
647 }
648 
649 /*
650  * A single 'fd' number was written, in which case it must be for
651  * a socket of a supported family/protocol, and we use it as an
652  * nfsd listener.
653  */
__write_ports_addfd(char * buf,struct net * net)654 static ssize_t __write_ports_addfd(char *buf, struct net *net)
655 {
656 	char *mesg = buf;
657 	int fd, err;
658 
659 	err = get_int(&mesg, &fd);
660 	if (err != 0 || fd < 0)
661 		return -EINVAL;
662 
663 	if (svc_alien_sock(net, fd)) {
664 		printk(KERN_ERR "%s: socket net is different to NFSd's one\n", __func__);
665 		return -EINVAL;
666 	}
667 
668 	err = nfsd_create_serv(net);
669 	if (err != 0)
670 		return err;
671 
672 	err = svc_addsock(nfsd_serv, fd, buf, SIMPLE_TRANSACTION_LIMIT);
673 	if (err < 0) {
674 		nfsd_destroy(net);
675 		return err;
676 	}
677 
678 	/* Decrease the count, but don't shut down the service */
679 	nfsd_serv->sv_nrthreads--;
680 	return err;
681 }
682 
683 /*
684  * A '-' followed by the 'name' of a socket means we close the socket.
685  */
__write_ports_delfd(char * buf)686 static ssize_t __write_ports_delfd(char *buf)
687 {
688 	char *toclose;
689 	int len = 0;
690 
691 	toclose = kstrdup(buf + 1, GFP_KERNEL);
692 	if (toclose == NULL)
693 		return -ENOMEM;
694 
695 	if (nfsd_serv != NULL)
696 		len = svc_sock_names(nfsd_serv, buf,
697 					SIMPLE_TRANSACTION_LIMIT, toclose);
698 	kfree(toclose);
699 	return len;
700 }
701 
702 /*
703  * A transport listener is added by writing it's transport name and
704  * a port number.
705  */
__write_ports_addxprt(char * buf,struct net * net)706 static ssize_t __write_ports_addxprt(char *buf, struct net *net)
707 {
708 	char transport[16];
709 	struct svc_xprt *xprt;
710 	int port, err;
711 
712 	if (sscanf(buf, "%15s %4u", transport, &port) != 2)
713 		return -EINVAL;
714 
715 	if (port < 1 || port > USHRT_MAX)
716 		return -EINVAL;
717 
718 	err = nfsd_create_serv(net);
719 	if (err != 0)
720 		return err;
721 
722 	err = svc_create_xprt(nfsd_serv, transport, net,
723 				PF_INET, port, SVC_SOCK_ANONYMOUS);
724 	if (err < 0)
725 		goto out_err;
726 
727 	err = svc_create_xprt(nfsd_serv, transport, net,
728 				PF_INET6, port, SVC_SOCK_ANONYMOUS);
729 	if (err < 0 && err != -EAFNOSUPPORT)
730 		goto out_close;
731 
732 	/* Decrease the count, but don't shut down the service */
733 	nfsd_serv->sv_nrthreads--;
734 	return 0;
735 out_close:
736 	xprt = svc_find_xprt(nfsd_serv, transport, net, PF_INET, port);
737 	if (xprt != NULL) {
738 		svc_close_xprt(xprt);
739 		svc_xprt_put(xprt);
740 	}
741 out_err:
742 	nfsd_destroy(net);
743 	return err;
744 }
745 
746 /*
747  * A transport listener is removed by writing a "-", it's transport
748  * name, and it's port number.
749  */
__write_ports_delxprt(char * buf,struct net * net)750 static ssize_t __write_ports_delxprt(char *buf, struct net *net)
751 {
752 	struct svc_xprt *xprt;
753 	char transport[16];
754 	int port;
755 
756 	if (sscanf(&buf[1], "%15s %4u", transport, &port) != 2)
757 		return -EINVAL;
758 
759 	if (port < 1 || port > USHRT_MAX || nfsd_serv == NULL)
760 		return -EINVAL;
761 
762 	xprt = svc_find_xprt(nfsd_serv, transport, net, AF_UNSPEC, port);
763 	if (xprt == NULL)
764 		return -ENOTCONN;
765 
766 	svc_close_xprt(xprt);
767 	svc_xprt_put(xprt);
768 	return 0;
769 }
770 
__write_ports(struct file * file,char * buf,size_t size,struct net * net)771 static ssize_t __write_ports(struct file *file, char *buf, size_t size,
772 				struct net *net)
773 {
774 	if (size == 0)
775 		return __write_ports_names(buf);
776 
777 	if (isdigit(buf[0]))
778 		return __write_ports_addfd(buf, net);
779 
780 	if (buf[0] == '-' && isdigit(buf[1]))
781 		return __write_ports_delfd(buf);
782 
783 	if (isalpha(buf[0]))
784 		return __write_ports_addxprt(buf, net);
785 
786 	if (buf[0] == '-' && isalpha(buf[1]))
787 		return __write_ports_delxprt(buf, net);
788 
789 	return -EINVAL;
790 }
791 
792 /**
793  * write_ports - Pass a socket file descriptor or transport name to listen on
794  *
795  * Input:
796  *			buf:		ignored
797  *			size:		zero
798  * Output:
799  *	On success:	passed-in buffer filled with a '\n'-terminated C
800  *			string containing a whitespace-separated list of
801  *			named NFSD listeners;
802  *			return code is the size in bytes of the string
803  *	On error:	return code is zero or a negative errno value
804  *
805  * OR
806  *
807  * Input:
808  *			buf:		C string containing an unsigned
809  *					integer value representing a bound
810  *					but unconnected socket that is to be
811  *					used as an NFSD listener; listen(3)
812  *					must be called for a SOCK_STREAM
813  *					socket, otherwise it is ignored
814  *			size:		non-zero length of C string in @buf
815  * Output:
816  *	On success:	NFS service is started;
817  *			passed-in buffer filled with a '\n'-terminated C
818  *			string containing a unique alphanumeric name of
819  *			the listener;
820  *			return code is the size in bytes of the string
821  *	On error:	return code is a negative errno value
822  *
823  * OR
824  *
825  * Input:
826  *			buf:		C string containing a "-" followed
827  *					by an integer value representing a
828  *					previously passed in socket file
829  *					descriptor
830  *			size:		non-zero length of C string in @buf
831  * Output:
832  *	On success:	NFS service no longer listens on that socket;
833  *			passed-in buffer filled with a '\n'-terminated C
834  *			string containing a unique name of the listener;
835  *			return code is the size in bytes of the string
836  *	On error:	return code is a negative errno value
837  *
838  * OR
839  *
840  * Input:
841  *			buf:		C string containing a transport
842  *					name and an unsigned integer value
843  *					representing the port to listen on,
844  *					separated by whitespace
845  *			size:		non-zero length of C string in @buf
846  * Output:
847  *	On success:	returns zero; NFS service is started
848  *	On error:	return code is a negative errno value
849  *
850  * OR
851  *
852  * Input:
853  *			buf:		C string containing a "-" followed
854  *					by a transport name and an unsigned
855  *					integer value representing the port
856  *					to listen on, separated by whitespace
857  *			size:		non-zero length of C string in @buf
858  * Output:
859  *	On success:	returns zero; NFS service no longer listens
860  *			on that transport
861  *	On error:	return code is a negative errno value
862  */
write_ports(struct file * file,char * buf,size_t size)863 static ssize_t write_ports(struct file *file, char *buf, size_t size)
864 {
865 	ssize_t rv;
866 	struct net *net = file->f_dentry->d_sb->s_fs_info;
867 
868 	mutex_lock(&nfsd_mutex);
869 	rv = __write_ports(file, buf, size, net);
870 	mutex_unlock(&nfsd_mutex);
871 	return rv;
872 }
873 
874 
875 int nfsd_max_blksize;
876 
877 /**
878  * write_maxblksize - Set or report the current NFS blksize
879  *
880  * Input:
881  *			buf:		ignored
882  *			size:		zero
883  *
884  * OR
885  *
886  * Input:
887  * 			buf:		C string containing an unsigned
888  * 					integer value representing the new
889  * 					NFS blksize
890  *			size:		non-zero length of C string in @buf
891  * Output:
892  *	On success:	passed-in buffer filled with '\n'-terminated C string
893  *			containing numeric value of the current NFS blksize
894  *			setting;
895  *			return code is the size in bytes of the string
896  *	On error:	return code is zero or a negative errno value
897  */
write_maxblksize(struct file * file,char * buf,size_t size)898 static ssize_t write_maxblksize(struct file *file, char *buf, size_t size)
899 {
900 	char *mesg = buf;
901 	if (size > 0) {
902 		int bsize;
903 		int rv = get_int(&mesg, &bsize);
904 		if (rv)
905 			return rv;
906 		/* force bsize into allowed range and
907 		 * required alignment.
908 		 */
909 		if (bsize < 1024)
910 			bsize = 1024;
911 		if (bsize > NFSSVC_MAXBLKSIZE)
912 			bsize = NFSSVC_MAXBLKSIZE;
913 		bsize &= ~(1024-1);
914 		mutex_lock(&nfsd_mutex);
915 		if (nfsd_serv) {
916 			mutex_unlock(&nfsd_mutex);
917 			return -EBUSY;
918 		}
919 		nfsd_max_blksize = bsize;
920 		mutex_unlock(&nfsd_mutex);
921 	}
922 
923 	return scnprintf(buf, SIMPLE_TRANSACTION_LIMIT, "%d\n",
924 							nfsd_max_blksize);
925 }
926 
927 #ifdef CONFIG_NFSD_V4
__nfsd4_write_time(struct file * file,char * buf,size_t size,time_t * time)928 static ssize_t __nfsd4_write_time(struct file *file, char *buf, size_t size, time_t *time)
929 {
930 	char *mesg = buf;
931 	int rv, i;
932 
933 	if (size > 0) {
934 		if (nfsd_serv)
935 			return -EBUSY;
936 		rv = get_int(&mesg, &i);
937 		if (rv)
938 			return rv;
939 		/*
940 		 * Some sanity checking.  We don't have a reason for
941 		 * these particular numbers, but problems with the
942 		 * extremes are:
943 		 *	- Too short: the briefest network outage may
944 		 *	  cause clients to lose all their locks.  Also,
945 		 *	  the frequent polling may be wasteful.
946 		 *	- Too long: do you really want reboot recovery
947 		 *	  to take more than an hour?  Or to make other
948 		 *	  clients wait an hour before being able to
949 		 *	  revoke a dead client's locks?
950 		 */
951 		if (i < 10 || i > 3600)
952 			return -EINVAL;
953 		*time = i;
954 	}
955 
956 	return scnprintf(buf, SIMPLE_TRANSACTION_LIMIT, "%ld\n", *time);
957 }
958 
nfsd4_write_time(struct file * file,char * buf,size_t size,time_t * time)959 static ssize_t nfsd4_write_time(struct file *file, char *buf, size_t size, time_t *time)
960 {
961 	ssize_t rv;
962 
963 	mutex_lock(&nfsd_mutex);
964 	rv = __nfsd4_write_time(file, buf, size, time);
965 	mutex_unlock(&nfsd_mutex);
966 	return rv;
967 }
968 
969 /**
970  * write_leasetime - Set or report the current NFSv4 lease time
971  *
972  * Input:
973  *			buf:		ignored
974  *			size:		zero
975  *
976  * OR
977  *
978  * Input:
979  *			buf:		C string containing an unsigned
980  *					integer value representing the new
981  *					NFSv4 lease expiry time
982  *			size:		non-zero length of C string in @buf
983  * Output:
984  *	On success:	passed-in buffer filled with '\n'-terminated C
985  *			string containing unsigned integer value of the
986  *			current lease expiry time;
987  *			return code is the size in bytes of the string
988  *	On error:	return code is zero or a negative errno value
989  */
write_leasetime(struct file * file,char * buf,size_t size)990 static ssize_t write_leasetime(struct file *file, char *buf, size_t size)
991 {
992 	return nfsd4_write_time(file, buf, size, &nfsd4_lease);
993 }
994 
995 /**
996  * write_gracetime - Set or report current NFSv4 grace period time
997  *
998  * As above, but sets the time of the NFSv4 grace period.
999  *
1000  * Note this should never be set to less than the *previous*
1001  * lease-period time, but we don't try to enforce this.  (In the common
1002  * case (a new boot), we don't know what the previous lease time was
1003  * anyway.)
1004  */
write_gracetime(struct file * file,char * buf,size_t size)1005 static ssize_t write_gracetime(struct file *file, char *buf, size_t size)
1006 {
1007 	return nfsd4_write_time(file, buf, size, &nfsd4_grace);
1008 }
1009 
1010 extern char *nfs4_recoverydir(void);
1011 
__write_recoverydir(struct file * file,char * buf,size_t size)1012 static ssize_t __write_recoverydir(struct file *file, char *buf, size_t size)
1013 {
1014 	char *mesg = buf;
1015 	char *recdir;
1016 	int len, status;
1017 
1018 	if (size > 0) {
1019 		if (nfsd_serv)
1020 			return -EBUSY;
1021 		if (size > PATH_MAX || buf[size-1] != '\n')
1022 			return -EINVAL;
1023 		buf[size-1] = 0;
1024 
1025 		recdir = mesg;
1026 		len = qword_get(&mesg, recdir, size);
1027 		if (len <= 0)
1028 			return -EINVAL;
1029 
1030 		status = nfs4_reset_recoverydir(recdir);
1031 		if (status)
1032 			return status;
1033 	}
1034 
1035 	return scnprintf(buf, SIMPLE_TRANSACTION_LIMIT, "%s\n",
1036 							nfs4_recoverydir());
1037 }
1038 
1039 /**
1040  * write_recoverydir - Set or report the pathname of the recovery directory
1041  *
1042  * Input:
1043  *			buf:		ignored
1044  *			size:		zero
1045  *
1046  * OR
1047  *
1048  * Input:
1049  *			buf:		C string containing the pathname
1050  *					of the directory on a local file
1051  *					system containing permanent NFSv4
1052  *					recovery data
1053  *			size:		non-zero length of C string in @buf
1054  * Output:
1055  *	On success:	passed-in buffer filled with '\n'-terminated C string
1056  *			containing the current recovery pathname setting;
1057  *			return code is the size in bytes of the string
1058  *	On error:	return code is zero or a negative errno value
1059  */
write_recoverydir(struct file * file,char * buf,size_t size)1060 static ssize_t write_recoverydir(struct file *file, char *buf, size_t size)
1061 {
1062 	ssize_t rv;
1063 
1064 	mutex_lock(&nfsd_mutex);
1065 	rv = __write_recoverydir(file, buf, size);
1066 	mutex_unlock(&nfsd_mutex);
1067 	return rv;
1068 }
1069 
1070 #endif
1071 
1072 /*----------------------------------------------------------------------------*/
1073 /*
1074  *	populating the filesystem.
1075  */
1076 
nfsd_fill_super(struct super_block * sb,void * data,int silent)1077 static int nfsd_fill_super(struct super_block * sb, void * data, int silent)
1078 {
1079 	static struct tree_descr nfsd_files[] = {
1080 		[NFSD_List] = {"exports", &exports_operations, S_IRUGO},
1081 		[NFSD_Export_features] = {"export_features",
1082 					&export_features_operations, S_IRUGO},
1083 		[NFSD_FO_UnlockIP] = {"unlock_ip",
1084 					&transaction_ops, S_IWUSR|S_IRUSR},
1085 		[NFSD_FO_UnlockFS] = {"unlock_filesystem",
1086 					&transaction_ops, S_IWUSR|S_IRUSR},
1087 		[NFSD_Fh] = {"filehandle", &transaction_ops, S_IWUSR|S_IRUSR},
1088 		[NFSD_Threads] = {"threads", &transaction_ops, S_IWUSR|S_IRUSR},
1089 		[NFSD_Pool_Threads] = {"pool_threads", &transaction_ops, S_IWUSR|S_IRUSR},
1090 		[NFSD_Pool_Stats] = {"pool_stats", &pool_stats_operations, S_IRUGO},
1091 		[NFSD_Versions] = {"versions", &transaction_ops, S_IWUSR|S_IRUSR},
1092 		[NFSD_Ports] = {"portlist", &transaction_ops, S_IWUSR|S_IRUGO},
1093 		[NFSD_MaxBlkSize] = {"max_block_size", &transaction_ops, S_IWUSR|S_IRUGO},
1094 #if defined(CONFIG_SUNRPC_GSS) || defined(CONFIG_SUNRPC_GSS_MODULE)
1095 		[NFSD_SupportedEnctypes] = {"supported_krb5_enctypes", &supported_enctypes_ops, S_IRUGO},
1096 #endif /* CONFIG_SUNRPC_GSS or CONFIG_SUNRPC_GSS_MODULE */
1097 #ifdef CONFIG_NFSD_V4
1098 		[NFSD_Leasetime] = {"nfsv4leasetime", &transaction_ops, S_IWUSR|S_IRUSR},
1099 		[NFSD_Gracetime] = {"nfsv4gracetime", &transaction_ops, S_IWUSR|S_IRUSR},
1100 		[NFSD_RecoveryDir] = {"nfsv4recoverydir", &transaction_ops, S_IWUSR|S_IRUSR},
1101 #endif
1102 		/* last one */ {""}
1103 	};
1104 	struct net *net = data;
1105 	int ret;
1106 
1107 	ret = simple_fill_super(sb, 0x6e667364, nfsd_files);
1108 	if (ret)
1109 		return ret;
1110 	sb->s_fs_info = get_net(net);
1111 	return 0;
1112 }
1113 
nfsd_mount(struct file_system_type * fs_type,int flags,const char * dev_name,void * data)1114 static struct dentry *nfsd_mount(struct file_system_type *fs_type,
1115 	int flags, const char *dev_name, void *data)
1116 {
1117 	return mount_ns(fs_type, flags, current->nsproxy->net_ns, nfsd_fill_super);
1118 }
1119 
nfsd_umount(struct super_block * sb)1120 static void nfsd_umount(struct super_block *sb)
1121 {
1122 	struct net *net = sb->s_fs_info;
1123 
1124 	kill_litter_super(sb);
1125 	put_net(net);
1126 }
1127 
1128 static struct file_system_type nfsd_fs_type = {
1129 	.owner		= THIS_MODULE,
1130 	.name		= "nfsd",
1131 	.mount		= nfsd_mount,
1132 	.kill_sb	= nfsd_umount,
1133 };
1134 
1135 #ifdef CONFIG_PROC_FS
create_proc_exports_entry(void)1136 static int create_proc_exports_entry(void)
1137 {
1138 	struct proc_dir_entry *entry;
1139 
1140 	entry = proc_mkdir("fs/nfs", NULL);
1141 	if (!entry)
1142 		return -ENOMEM;
1143 	entry = proc_create("exports", 0, entry, &exports_operations);
1144 	if (!entry)
1145 		return -ENOMEM;
1146 	return 0;
1147 }
1148 #else /* CONFIG_PROC_FS */
create_proc_exports_entry(void)1149 static int create_proc_exports_entry(void)
1150 {
1151 	return 0;
1152 }
1153 #endif
1154 
1155 int nfsd_net_id;
1156 static struct pernet_operations nfsd_net_ops = {
1157 	.id   = &nfsd_net_id,
1158 	.size = sizeof(struct nfsd_net),
1159 };
1160 
init_nfsd(void)1161 static int __init init_nfsd(void)
1162 {
1163 	int retval;
1164 	printk(KERN_INFO "Installing knfsd (copyright (C) 1996 okir@monad.swb.de).\n");
1165 
1166 	retval = register_cld_notifier();
1167 	if (retval)
1168 		return retval;
1169 	retval = register_pernet_subsys(&nfsd_net_ops);
1170 	if (retval < 0)
1171 		goto out_unregister_notifier;
1172 	retval = nfsd4_init_slabs();
1173 	if (retval)
1174 		goto out_unregister_pernet;
1175 	nfs4_state_init();
1176 	retval = nfsd_fault_inject_init(); /* nfsd fault injection controls */
1177 	if (retval)
1178 		goto out_free_slabs;
1179 	nfsd_stat_init();	/* Statistics */
1180 	retval = nfsd_reply_cache_init();
1181 	if (retval)
1182 		goto out_free_stat;
1183 	retval = nfsd_export_init();
1184 	if (retval)
1185 		goto out_free_cache;
1186 	nfsd_lockd_init();	/* lockd->nfsd callbacks */
1187 	retval = nfsd_idmap_init();
1188 	if (retval)
1189 		goto out_free_lockd;
1190 	retval = create_proc_exports_entry();
1191 	if (retval)
1192 		goto out_free_idmap;
1193 	retval = register_filesystem(&nfsd_fs_type);
1194 	if (retval)
1195 		goto out_free_all;
1196 	return 0;
1197 out_free_all:
1198 	remove_proc_entry("fs/nfs/exports", NULL);
1199 	remove_proc_entry("fs/nfs", NULL);
1200 out_free_idmap:
1201 	nfsd_idmap_shutdown();
1202 out_free_lockd:
1203 	nfsd_lockd_shutdown();
1204 	nfsd_export_shutdown();
1205 out_free_cache:
1206 	nfsd_reply_cache_shutdown();
1207 out_free_stat:
1208 	nfsd_stat_shutdown();
1209 	nfsd_fault_inject_cleanup();
1210 out_free_slabs:
1211 	nfsd4_free_slabs();
1212 out_unregister_pernet:
1213 	unregister_pernet_subsys(&nfsd_net_ops);
1214 out_unregister_notifier:
1215 	unregister_cld_notifier();
1216 	return retval;
1217 }
1218 
exit_nfsd(void)1219 static void __exit exit_nfsd(void)
1220 {
1221 	nfsd_export_shutdown();
1222 	nfsd_reply_cache_shutdown();
1223 	remove_proc_entry("fs/nfs/exports", NULL);
1224 	remove_proc_entry("fs/nfs", NULL);
1225 	nfsd_stat_shutdown();
1226 	nfsd_lockd_shutdown();
1227 	nfsd_idmap_shutdown();
1228 	nfsd4_free_slabs();
1229 	nfsd_fault_inject_cleanup();
1230 	unregister_filesystem(&nfsd_fs_type);
1231 	unregister_pernet_subsys(&nfsd_net_ops);
1232 	unregister_cld_notifier();
1233 }
1234 
1235 MODULE_AUTHOR("Olaf Kirch <okir@monad.swb.de>");
1236 MODULE_LICENSE("GPL");
1237 module_init(init_nfsd)
1238 module_exit(exit_nfsd)
1239