9p: attach-per-user
Subsystems (3)
Latchesar Ionkov
maintainerPATCH 1/1 9p: attach-per-user
The 9P2000 protocol requires the authentication and permission checks to be done in the file server. For that reason every user that accesses the file server tree has to authenticate and attach to the server separately. Multiple users can share the same connection to the server.
Currently v9fs does a single attach and executes all I/O operations as a single user. This makes using v9fs in multiuser environment unsafe as it depends on the client doing the permission checking.
This patch improves the 9P2000 support by allowing every user to attach separately. The patch defines three modes of access (new mount option 'access'):
- attach-per-user (access=user)
If a user tries to access a file served by v9fs for the first time, v9fs sends an attach command to the server (Tattach) specifying the user. If the attach succeeds, the user can access the v9fs tree.
As there is no uname->uid (string->integer) mapping yet, this mode works only with the 9P2000.u dialect.
- allow only one user to access the tree (access=<uid>)
Only the user with uid can access the v9fs tree. Other users that attempt to access it will get EPERM error.
- do all operations as a single user (access=any)
V9fs does a single attach and all operations are done as a single user. If this mode is selected, the v9fs behavior is identical with the current one.
The patch also renames uid and gid options to dfltuid and dfltgid. The new names describe better the values they set.
---
commit 836f166ce5578b084c1cd75807e29474586bab61
tree c7e1eb631c3e6b0f1cd773ae7884379776c2857d
parent 3ec910913c8c743cbe4cd9cdde17df26a75d02ec
author Latchesar Ionkov <lucho@eregion.(none)> Mon, 03 Sep 2007 14:09:29 -0600 committer Latchesar Ionkov <lucho@eregion.(none)> Mon, 03 Sep 2007 14:09:29 -0600
fs/9p/fid.c | 157 +++++++++++++++++++++++++++++++++++++---------- fs/9p/v9fs.c | 87 +++++++++++++++++++------- fs/9p/v9fs.h | 27 +++++++- fs/9p/vfs_inode.c | 52 ++++++++-------- include/net/9p/9p.h | 7 +- include/net/9p/client.h | 5 + net/9p/client.c | 10 ++- net/9p/conv.c | 32 ++++++++-- 8 files changed, 278 insertions(+), 99 deletions(-)
fs/9p/fid.c +125 -32
@@ -1,6 +1,7 @@/* * V9FS FID Management * +* Copyright (C) 2007 by Latchesar Ionkov <[email protected]> * Copyright (C) 2005, 2006 by Eric Van Hensbergen <[email protected]> * * This program is free software; you can redistribute it and/or modify
@@ -34,9 +35,9 @@#include "fid.h" /** -* v9fs_fid_insert - add a fid to a dentry +* v9fs_fid_add - add a fid to a dentry +* @dentry: dentry that the fid is being added to * @fid: fid to add -* @dentry: dentry that it is being added to * */
@@ -66,52 +67,144 @@ int v9fs_fid_add(struct dentry *dentry, struct p9_fid *fid) }/** -* v9fs_fid_lookup - return a locked fid from a dentry +* v9fs_fid_find - retrieve a fid that belongs to the specified uid * @dentry: dentry to look for fid in -* -* find a fid in the dentry, obtain its semaphore and return a reference to it. -* code calling lookup is responsible for releasing lock -* -* TODO: only match fids that have the same uid as current user +* @uid: return fid that belongs to the specified user +* @any: if non-zero, return any fid associated with the dentry * */ -struct p9_fid *v9fs_fid_lookup (struct dentry *dentry) +static struct p9_fid *v9fs_fid_find (struct dentry *dentry,u32 uid,int any) {struct v9fs_dentry *dent; -struct p9_fid *fid; - -P9_DPRINTK (P9_DEBUG_VFS ," dentry: %s (%p)\n" , dentry->d_iname, dentry); - dent = dentry->d_fsdata; -if (dent) - fid = list_entry(dent->fidlist.next, struct p9_fid, dlist); -else - fid =ERR_PTR (-EBADF ); +struct p9_fid *fid, *ret; + +P9_DPRINTK (P9_DEBUG_VFS ," dentry: %s (%p) uid %d any %d\n" , + dentry->d_iname, dentry, uid, any); + dent = (struct v9fs_dentry *) dentry->d_fsdata; + ret =NULL ; +if (dent) { +spin_lock (&dent->lock); +list_for_each_entry (fid, &dent->fidlist, dlist) { +if (any || fid->uid == uid) { + ret = fid; +break ; + } + } +spin_unlock (&dent->lock); + } -P9_DPRINTK (P9_DEBUG_VFS ," fid: %p\n" , fid); -return fid; +return ret; }/** -* v9fs_fid_clone - lookup the fid for a dentry, clone a private copy and -* release it +* v9fs_fid_lookup - lookup for a fid, try to walk if not found * @dentry: dentry to look for fid in * -* find a fid in the dentry and then clone to a new private fid -* -* TODO: only match fids that have the same uid as current user -* +* Look for a fid in the specified dentry for the current user. +* If no fid is found, try to create one walking from a fid from the parent +* dentry (if it has one), or the root dentry. If the user haven't accessed +* the fs yet, attach now and walk from the root. */ -struct p9_fid *v9fs_fid_clone (struct dentry *dentry) +struct p9_fid *v9fs_fid_lookup (struct dentry *dentry) { -struct p9_fid *ofid, *fid; +int i, n, l, clone, any, access; +u32 uid; +struct p9_fid *fid; +struct dentry *d, *ds; +struct v9fs_session_info *v9ses; +char **wnames, *uname; + + v9ses =v9fs_inode2v9ses (dentry->d_inode); + access = v9ses->flags &V9FS_ACCESS_MASK ; +switch (access) { +case V9FS_ACCESS_SINGLE : +case V9FS_ACCESS_USER : + uid = current->fsuid; + any =0 ; +break ; + +case V9FS_ACCESS_ANY : + uid = v9ses->uid; + any =1 ; +break ; + +default : + uid = ~0 ; + any =0 ; +break ; + } -P9_DPRINTK (P9_DEBUG_VFS ," dentry: %s (%p)\n" , dentry->d_iname, dentry); - ofid =v9fs_fid_lookup (dentry); -if (IS_ERR (ofid)) -return ofid; + fid =v9fs_fid_find (dentry, uid, any); +if (fid) +return fid; + + ds = dentry->d_parent; + fid =v9fs_fid_find (ds, uid, any); +if (!fid) {/* walk from the root */ + n =0 ; +for (ds = dentry; !IS_ROOT (ds); ds = ds->d_parent) + n++; + + fid =v9fs_fid_find (ds, uid, any); +if (!fid) {/* the user is not attached to the fs yet */ +if (access ==V9FS_ACCESS_SINGLE ) +return ERR_PTR (-EPERM ); + +if (v9fs_extended (v9ses)) + uname =NULL ; +else + uname = v9ses->uname; + + fid =p9_client_attach (v9ses->clnt,NULL , uname, uid, + v9ses->aname); + +if (IS_ERR (fid)) +return fid; + +v9fs_fid_add (ds, fid); + } + }else /* walk from the parent */ + n =1 ; + +if (ds == dentry) +return fid; + + wnames =kmalloc (sizeof (char *) * n,GFP_KERNEL ); +if (!wnames) +return ERR_PTR (-ENOMEM ); + +for (d = dentry, i = n; i >=0 ; i--, d = d->d_parent) + wnames[i] = (char *) d->d_name.name; + + clone =1 ; + i =0 ; +while (i < n) { + l =min (n - i,P9_MAXWELEM ); + fid =p9_client_walk (fid, l, &wnames[i], clone); +if (!fid) { +kfree (wnames); +return fid; + } + + i += l; + clone =0 ; + } - fid =p9_client_walk (ofid,0 ,NULL ,1 ); +kfree (wnames); +v9fs_fid_add (dentry, fid);return fid; } + +struct p9_fid *v9fs_fid_clone (struct dentry *dentry) +{ +struct p9_fid *fid, *ret; + + fid =v9fs_fid_lookup (dentry); +if (IS_ERR (fid)) +return fid; + + ret =p9_client_walk (fid,0 ,NULL ,1 ); +return ret; +}
fs/9p/v9fs.c +63 -24
178 lines not on this page · raw message
fs/9p/v9fs.h +22 -5
@@ -29,22 +29,32 @@struct v9fs_session_info {/* options */ unsigned int maxdata; -unsigned char extended;/* set to 1 if we are using UNIX extensions */ +unsigned char flags;/* session flags */ unsigned char nodev;/* set to 1 if no disable device mapping */ unsigned short debug;/* debug level */ unsigned int afid;/* authentication fid */ unsigned int cache;/* cache mode */ char *options;/* copy of mount options */ -char *name;/* user name to mount as */ -char *remotename;/* name of remote hierarchy being mounted */ -unsigned int uid;/* default uid/muid for legacy support */ -unsigned int gid;/* default gid for legacy support */ +char *uname;/* user name to mount as */ +char *aname;/* name of remote hierarchy being mounted */ +unsigned int dfltuid;/* default uid/muid for legacy support */ +unsigned int dfltgid;/* default gid for legacy support */ +u32 uid;/* if ACCESS_SINGLE, the uid that has access */ struct p9_trans_module *trans;/* 9p transport */ struct p9_client *clnt;/* 9p client */ struct dentry *debugfs_dir; }; +/* session flags */ +enum { +V9FS_EXTENDED =0x01 ,/* 9P2000.u */ +V9FS_ACCESS_MASK =0x06 ,/* access mask */ +V9FS_ACCESS_SINGLE =0x02 ,/* only one user can access the files */ +V9FS_ACCESS_USER =0x04 ,/* attache per user */ +V9FS_ACCESS_ANY =0x06 ,/* use the same attach for all users */ +}; +/* possible values of ->cache */ /* eventually support loose, tight, time, session, default always none */ enum {
@@ -65,8 +75,15 @@ void v9fs_session_cancel(struct v9fs_session_info *v9ses);#define V9FS_PORT 564#define V9FS_DEFUSER "nobody"#define V9FS_DEFANAME "" +#define V9FS_DEFUID (0) +#define V9FS_DEFGID (0)static inline struct v9fs_session_info *v9fs_inode2v9ses (struct inode *inode) {return (inode->i_sb->s_fs_info); } + +static inline int v9fs_extended (struct v9fs_session_info *v9ses) +{ +return v9ses->flags &V9FS_EXTENDED ; +}
fs/9p/vfs_inode.c +26 -26
175 lines not on this page · raw message
include/net/9p/9p.h +5 -2
@@ -216,6 +216,7 @@ struct p9_tauth {u32 afid;struct p9_str uname;struct p9_str aname; +u32 n_uname;/* 9P2000.u extensions */ };struct p9_rauth {
@@ -239,6 +240,7 @@ struct p9_tattach {u32 afid;struct p9_str uname;struct p9_str aname; +u32 n_uname;/* 9P2000.u extensions */ };struct p9_rattach {
@@ -382,8 +384,9 @@ int p9_deserialize_fcall(void *buf, u32 buflen, struct p9_fcall *fc, int dotu);void p9_set_tag (struct p9_fcall *fc,u16 tag);struct p9_fcall *p9_create_tversion (u32 msize,char *version);struct p9_fcall *p9_create_tattach (u32 fid,u32 afid,char *uname, -char *aname); -struct p9_fcall *p9_create_tauth (u32 afid,char *uname,char *aname); +char *aname,u32 n_uname,int dotu); +struct p9_fcall *p9_create_tauth (u32 afid,char *uname,char *aname, +u32 n_uname,int dotu);struct p9_fcall *p9_create_tflush (u16 oldtag);struct p9_fcall *p9_create_twalk (u32 fid,u32 newfid,u16 nwname,char **wnames);
include/net/9p/client.h +3 -2
@@ -57,8 +57,9 @@ struct p9_client *p9_client_create(struct p9_trans *trans, int msize,void p9_client_destroy (struct p9_client *clnt);void p9_client_disconnect (struct p9_client *clnt);struct p9_fid *p9_client_attach (struct p9_client *clnt,struct p9_fid *afid, -char *uname,char *aname); -struct p9_fid *p9_client_auth (struct p9_client *clnt,char *uname,char *aname); +char *uname,u32 n_uname,char *aname); +struct p9_fid *p9_client_auth (struct p9_client *clnt,char *uname, +u32 n_uname,char *aname);struct p9_fid *p9_client_walk (struct p9_fid *oldfid,int nwname,char **wnames,int clone);int p9_client_open (struct p9_fid *fid,int mode);
net/9p/client.c +6 -4
@@ -146,7 +146,7 @@ void p9_client_disconnect(struct p9_client *clnt)EXPORT_SYMBOL (p9_client_disconnect);struct p9_fid *p9_client_attach (struct p9_client *clnt,struct p9_fid *afid, -char *uname,char *aname) +char *uname,u32 n_uname,char *aname) {int err;struct p9_fcall *tc, *rc;
@@ -165,7 +165,8 @@ struct p9_fid *p9_client_attach(struct p9_client *clnt, struct p9_fid *afid, goto error; } - tc =p9_create_tattach (fid->fid, afid?afid->fid:P9_NOFID , uname, aname); + tc =p9_create_tattach (fid->fid, afid?afid->fid:P9_NOFID , uname, aname, + n_uname, clnt->dotu);if (IS_ERR (tc)) { err =PTR_ERR (tc); tc =NULL ;
@@ -190,7 +191,8 @@ error: }EXPORT_SYMBOL (p9_client_attach); -struct p9_fid *p9_client_auth (struct p9_client *clnt,char *uname,char *aname) +struct p9_fid *p9_client_auth (struct p9_client *clnt,char *uname, +u32 n_uname,char *aname) {int err;struct p9_fcall *tc, *rc;
@@ -209,7 +211,7 @@ struct p9_fid *p9_client_auth(struct p9_client *clnt, char *uname, char *aname) goto error; } - tc =p9_create_tauth (fid->fid, uname, aname); + tc =p9_create_tauth (fid->fid, uname, aname, n_uname, clnt->dotu);if (IS_ERR (tc)) { err =PTR_ERR (tc); tc =NULL ;
net/9p/conv.c +28 -4
@@ -547,7 +547,8 @@ error: }EXPORT_SYMBOL (p9_create_tversion); -struct p9_fcall *p9_create_tauth (u32 afid,char *uname,char *aname) +struct p9_fcall *p9_create_tauth (u32 afid,char *uname,char *aname, +u32 n_uname,int dotu) {int size;struct p9_fcall *fc;
@@ -555,7 +556,16 @@ struct p9_fcall *p9_create_tauth(u32 afid, char *uname, char *aname)struct cbuf *bufp = &buffer;/* afid[4] uname[s] aname[s] */ - size =4 +2 +strlen (uname) +2 +strlen (aname); + size =4 +2 +2 ; +if (uname) + size +=strlen (uname); + +if (aname) + size +=strlen (aname); + +if (dotu) + size +=4 ;/* n_uname */ + fc =p9_create_common (bufp, size,P9_TAUTH );if (IS_ERR (fc)) goto error;
@@ -563,6 +573,8 @@ struct p9_fcall *p9_create_tauth(u32 afid, char *uname, char *aname)p9_put_int32 (bufp, afid, &fc->params.tauth.afid);p9_put_str (bufp, uname, &fc->params.tauth.uname);p9_put_str (bufp, aname, &fc->params.tauth.aname); +if (dotu) +p9_put_int32 (bufp, n_uname, &fc->params.tauth.n_uname);if (buf_check_overflow (bufp)) {kfree (fc);
@@ -574,7 +586,8 @@ error:EXPORT_SYMBOL (p9_create_tauth);struct p9_fcall * -p9_create_tattach (u32 fid,u32 afid,char *uname,char *aname) +p9_create_tattach (u32 fid,u32 afid,char *uname,char *aname, +u32 n_uname,int dotu) {int size;struct p9_fcall *fc;
@@ -582,7 +595,16 @@ p9_create_tattach(u32 fid, u32 afid, char *uname, char *aname)struct cbuf *bufp = &buffer;/* fid[4] afid[4] uname[s] aname[s] */ - size =4 +4 +2 +strlen (uname) +2 +strlen (aname); + size =4 +4 +2 +2 ; +if (uname) + size +=strlen (uname); + +if (aname) + size +=strlen (aname); + +if (dotu) + size +=4 ;/* n_uname */ + fc =p9_create_common (bufp, size,P9_TATTACH );if (IS_ERR (fc)) goto error;
@@ -591,6 +613,8 @@ p9_create_tattach(u32 fid, u32 afid, char *uname, char *aname)p9_put_int32 (bufp, afid, &fc->params.tattach.afid);p9_put_str (bufp, uname, &fc->params.tattach.uname);p9_put_str (bufp, aname, &fc->params.tattach.aname); +if (dotu) +p9_put_int32 (bufp, n_uname, &fc->params.tattach.n_uname); error:return fc;
Quoted 5 lines · Latchesar Ionkov
This patch improves the 9P2000 support by allowing every user to attach separately. The patch defines three modes of access (new mount option 'access'):
nit picks:
* you added/changed options without updated Documentation/filesystems/9p.txt
* you changed v9fs->extended to be part of a flags structure, that
should have been
a separate patch
* rename of options should have been done in a separate patch
Quoted 7 lines
- attach-per-user (access=user)
If a user tries to access a file served by v9fs for the first time, v9fs sends an attach command to the server (Tattach) specifying the user. If the attach succeeds, the user can access the v9fs tree.
As there is nouname->uid(string->integer) mapping yet, this mode works only with the 9P2000.u dialect.
Quoted 9 lines
- allow only one user to access the tree (access=<uid>)
Only the user with uid can access the v9fs tree. Other users that attempt to access it will get EPERM error.- do all operations as a single user (access=any)
V9fs does a single attach and all operations are done as a single user. If this mode is selected, the v9fs behavior is identical with the current one.
Which option is default?
Review int v9fs_fid_add(struct dentry *dentry, struct p9_fid *fid) · line 67
Quoted 12 lines
/**
- *v9fs_fid_insert- add a fid to a dentry
+ *v9fs_fid_add- add a fid to a dentry
+ * @dentry: dentry that the fid is being added to
* @fid: fid to add
- * @dentry: dentry that it is being added to *
*/(quoted diff) +0
-0@@ -66,52 +67,144 @@ int v9fs_fid_add(struct dentry *dentry, struct p9_fid *fid) }
Even small cleanups like this should probably be confined to a separate patch if they are unrelated.
Quoted 4 lines
fs/9p/fid.c +1
-1-struct p9_fid *v9fs_fid_lookup (struct dentry *dentry) +static struct p9_fid *v9fs_fid_find (struct dentry *dentry,u32 uid,int any) {
...
Quoted 4 lines
fs/9p/fid.c +1
-1-struct p9_fid *v9fs_fid_clone (struct dentry *dentry) +struct p9_fid *v9fs_fid_lookup (struct dentry *dentry) {
...
fs/9p/fid.c int v9fs_fid_add(struct dentry *dentry, struct p9_fid *fid) · line 201
Quoted 3 lines
fs/9p/fid.c +3
-0+ +struct p9_fid *v9fs_fid_clone (struct dentry *dentry) +{
The way the patch got formatted, these look like compulsive renames..but there's an added function and then changes to the other two. I think it might be because of the way you ordered the functions. Put new functions after the old functions and maybe this won't happen. And clone seems to have lost his function header. The code is pretty inconsistent about those these days, but I'd like to do an audit soon and make sure we have proper comment blocks where appropriate.
scripts/checkpatch.pl reports:
ERROR: need a space before the open parenthesis '(' #244: FILE: fs/9p/fid.c:147:
+ for(ds = dentry; !IS_ROOT(ds); ds = ds->d_parent)
ERROR: need a space before the open parenthesis '(' #275: FILE: fs/9p/fid.c:178:
+ for(d = dentry, i = n; i >= 0; i--, d = d->d_parent)
Please fix up these small bits and resubmit.
-eric
Also, go ahead and cc: me directly on patches, for some reason this one missed my normal filters and got lost. If I'm directly cc:'d it will pop to the top of my inbox.
-eric