vfs_syscalls.c revision 1.350.2.7
1 /* $NetBSD: vfs_syscalls.c,v 1.350.2.7 2010/08/11 22:54:44 yamt Exp $ */ 2 3 /*- 4 * Copyright (c) 2008, 2009 The NetBSD Foundation, Inc. 5 * All rights reserved. 6 * 7 * This code is derived from software contributed to The NetBSD Foundation 8 * by Andrew Doran. 9 * 10 * Redistribution and use in source and binary forms, with or without 11 * modification, are permitted provided that the following conditions 12 * are met: 13 * 1. Redistributions of source code must retain the above copyright 14 * notice, this list of conditions and the following disclaimer. 15 * 2. Redistributions in binary form must reproduce the above copyright 16 * notice, this list of conditions and the following disclaimer in the 17 * documentation and/or other materials provided with the distribution. 18 * 19 * THIS SOFTWARE IS PROVIDED BY THE NETBSD FOUNDATION, INC. AND CONTRIBUTORS 20 * ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED 21 * TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR 22 * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS 23 * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR 24 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF 25 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS 26 * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN 27 * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) 28 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE 29 * POSSIBILITY OF SUCH DAMAGE. 30 */ 31 32 /* 33 * Copyright (c) 1989, 1993 34 * The Regents of the University of California. All rights reserved. 35 * (c) UNIX System Laboratories, Inc. 36 * All or some portions of this file are derived from material licensed 37 * to the University of California by American Telephone and Telegraph 38 * Co. or Unix System Laboratories, Inc. and are reproduced herein with 39 * the permission of UNIX System Laboratories, Inc. 40 * 41 * Redistribution and use in source and binary forms, with or without 42 * modification, are permitted provided that the following conditions 43 * are met: 44 * 1. Redistributions of source code must retain the above copyright 45 * notice, this list of conditions and the following disclaimer. 46 * 2. Redistributions in binary form must reproduce the above copyright 47 * notice, this list of conditions and the following disclaimer in the 48 * documentation and/or other materials provided with the distribution. 49 * 3. Neither the name of the University nor the names of its contributors 50 * may be used to endorse or promote products derived from this software 51 * without specific prior written permission. 52 * 53 * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND 54 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 55 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 56 * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE 57 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 58 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 59 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 60 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 61 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 62 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 63 * SUCH DAMAGE. 64 * 65 * @(#)vfs_syscalls.c 8.42 (Berkeley) 7/31/95 66 */ 67 68 #include <sys/cdefs.h> 69 __KERNEL_RCSID(0, "$NetBSD: vfs_syscalls.c,v 1.350.2.7 2010/08/11 22:54:44 yamt Exp $"); 70 71 #ifdef _KERNEL_OPT 72 #include "opt_fileassoc.h" 73 #include "veriexec.h" 74 #endif 75 76 #include <sys/param.h> 77 #include <sys/systm.h> 78 #include <sys/namei.h> 79 #include <sys/filedesc.h> 80 #include <sys/kernel.h> 81 #include <sys/file.h> 82 #include <sys/stat.h> 83 #include <sys/vnode.h> 84 #include <sys/mount.h> 85 #include <sys/proc.h> 86 #include <sys/uio.h> 87 #include <sys/kmem.h> 88 #include <sys/dirent.h> 89 #include <sys/sysctl.h> 90 #include <sys/syscallargs.h> 91 #include <sys/vfs_syscalls.h> 92 #include <sys/ktrace.h> 93 #ifdef FILEASSOC 94 #include <sys/fileassoc.h> 95 #endif /* FILEASSOC */ 96 #include <sys/verified_exec.h> 97 #include <sys/kauth.h> 98 #include <sys/atomic.h> 99 #include <sys/module.h> 100 #include <sys/buf.h> 101 102 #include <miscfs/genfs/genfs.h> 103 #include <miscfs/syncfs/syncfs.h> 104 #include <miscfs/specfs/specdev.h> 105 106 #include <nfs/rpcv2.h> 107 #include <nfs/nfsproto.h> 108 #include <nfs/nfs.h> 109 #include <nfs/nfs_var.h> 110 111 MALLOC_DEFINE(M_MOUNT, "mount", "vfs mount struct"); 112 113 static int change_flags(struct vnode *, u_long, struct lwp *); 114 static int change_mode(struct vnode *, int, struct lwp *l); 115 static int change_owner(struct vnode *, uid_t, gid_t, struct lwp *, int); 116 117 void checkdirs(struct vnode *); 118 119 /* 120 * Virtual File System System Calls 121 */ 122 123 /* 124 * Mount a file system. 125 */ 126 127 /* 128 * This table is used to maintain compatibility with 4.3BSD 129 * and NetBSD 0.9 mount syscalls - and possibly other systems. 130 * Note, the order is important! 131 * 132 * Do not modify this table. It should only contain filesystems 133 * supported by NetBSD 0.9 and 4.3BSD. 134 */ 135 const char * const mountcompatnames[] = { 136 NULL, /* 0 = MOUNT_NONE */ 137 MOUNT_FFS, /* 1 = MOUNT_UFS */ 138 MOUNT_NFS, /* 2 */ 139 MOUNT_MFS, /* 3 */ 140 MOUNT_MSDOS, /* 4 */ 141 MOUNT_CD9660, /* 5 = MOUNT_ISOFS */ 142 MOUNT_FDESC, /* 6 */ 143 MOUNT_KERNFS, /* 7 */ 144 NULL, /* 8 = MOUNT_DEVFS */ 145 MOUNT_AFS, /* 9 */ 146 }; 147 const int nmountcompatnames = sizeof(mountcompatnames) / 148 sizeof(mountcompatnames[0]); 149 150 static int 151 mount_update(struct lwp *l, struct vnode *vp, const char *path, int flags, 152 void *data, size_t *data_len) 153 { 154 struct mount *mp; 155 int error = 0, saved_flags; 156 157 mp = vp->v_mount; 158 saved_flags = mp->mnt_flag; 159 160 /* We can operate only on VV_ROOT nodes. */ 161 if ((vp->v_vflag & VV_ROOT) == 0) { 162 error = EINVAL; 163 goto out; 164 } 165 166 /* 167 * We only allow the filesystem to be reloaded if it 168 * is currently mounted read-only. Additionally, we 169 * prevent read-write to read-only downgrades. 170 */ 171 if ((flags & (MNT_RELOAD | MNT_RDONLY)) != 0 && 172 (mp->mnt_flag & MNT_RDONLY) == 0) { 173 error = EOPNOTSUPP; /* Needs translation */ 174 goto out; 175 } 176 177 error = kauth_authorize_system(l->l_cred, KAUTH_SYSTEM_MOUNT, 178 KAUTH_REQ_SYSTEM_MOUNT_UPDATE, mp, KAUTH_ARG(flags), data); 179 if (error) 180 goto out; 181 182 if (vfs_busy(mp, NULL)) { 183 error = EPERM; 184 goto out; 185 } 186 187 mutex_enter(&mp->mnt_updating); 188 189 mp->mnt_flag &= ~MNT_OP_FLAGS; 190 mp->mnt_flag |= flags & (MNT_RELOAD | MNT_FORCE | MNT_UPDATE); 191 192 /* 193 * Set the mount level flags. 194 */ 195 if (flags & MNT_RDONLY) 196 mp->mnt_flag |= MNT_RDONLY; 197 else if (mp->mnt_flag & MNT_RDONLY) 198 mp->mnt_iflag |= IMNT_WANTRDWR; 199 mp->mnt_flag &= 200 ~(MNT_NOSUID | MNT_NOEXEC | MNT_NODEV | 201 MNT_SYNCHRONOUS | MNT_UNION | MNT_ASYNC | MNT_NOCOREDUMP | 202 MNT_NOATIME | MNT_NODEVMTIME | MNT_SYMPERM | MNT_SOFTDEP | 203 MNT_LOG); 204 mp->mnt_flag |= flags & 205 (MNT_NOSUID | MNT_NOEXEC | MNT_NODEV | 206 MNT_SYNCHRONOUS | MNT_UNION | MNT_ASYNC | MNT_NOCOREDUMP | 207 MNT_NOATIME | MNT_NODEVMTIME | MNT_SYMPERM | MNT_SOFTDEP | 208 MNT_LOG | MNT_IGNORE); 209 210 error = VFS_MOUNT(mp, path, data, data_len); 211 212 if (error && data != NULL) { 213 int error2; 214 215 /* 216 * Update failed; let's try and see if it was an 217 * export request. For compat with 3.0 and earlier. 218 */ 219 error2 = vfs_hooks_reexport(mp, path, data); 220 221 /* 222 * Only update error code if the export request was 223 * understood but some problem occurred while 224 * processing it. 225 */ 226 if (error2 != EJUSTRETURN) 227 error = error2; 228 } 229 230 if (mp->mnt_iflag & IMNT_WANTRDWR) 231 mp->mnt_flag &= ~MNT_RDONLY; 232 if (error) 233 mp->mnt_flag = saved_flags; 234 mp->mnt_flag &= ~MNT_OP_FLAGS; 235 mp->mnt_iflag &= ~IMNT_WANTRDWR; 236 if ((mp->mnt_flag & (MNT_RDONLY | MNT_ASYNC)) == 0) { 237 if (mp->mnt_syncer == NULL) 238 error = vfs_allocate_syncvnode(mp); 239 } else { 240 if (mp->mnt_syncer != NULL) 241 vfs_deallocate_syncvnode(mp); 242 } 243 mutex_exit(&mp->mnt_updating); 244 vfs_unbusy(mp, false, NULL); 245 246 out: 247 return (error); 248 } 249 250 static int 251 mount_get_vfsops(const char *fstype, struct vfsops **vfsops) 252 { 253 char fstypename[sizeof(((struct statvfs *)NULL)->f_fstypename)]; 254 int error; 255 256 /* Copy file-system type from userspace. */ 257 error = copyinstr(fstype, fstypename, sizeof(fstypename), NULL); 258 if (error) { 259 /* 260 * Historically, filesystem types were identified by numbers. 261 * If we get an integer for the filesystem type instead of a 262 * string, we check to see if it matches one of the historic 263 * filesystem types. 264 */ 265 u_long fsindex = (u_long)fstype; 266 if (fsindex >= nmountcompatnames || 267 mountcompatnames[fsindex] == NULL) 268 return ENODEV; 269 strlcpy(fstypename, mountcompatnames[fsindex], 270 sizeof(fstypename)); 271 } 272 273 /* Accept `ufs' as an alias for `ffs', for compatibility. */ 274 if (strcmp(fstypename, "ufs") == 0) 275 fstypename[0] = 'f'; 276 277 if ((*vfsops = vfs_getopsbyname(fstypename)) != NULL) 278 return 0; 279 280 /* If we can autoload a vfs module, try again */ 281 mutex_enter(&module_lock); 282 (void)module_autoload(fstypename, MODULE_CLASS_VFS); 283 mutex_exit(&module_lock); 284 285 if ((*vfsops = vfs_getopsbyname(fstypename)) != NULL) 286 return 0; 287 288 return ENODEV; 289 } 290 291 static int 292 mount_domount(struct lwp *l, struct vnode **vpp, struct vfsops *vfsops, 293 const char *path, int flags, void *data, size_t *data_len) 294 { 295 struct mount *mp; 296 struct vnode *vp = *vpp; 297 struct vattr va; 298 struct nameidata nd; 299 int error; 300 301 error = kauth_authorize_system(l->l_cred, KAUTH_SYSTEM_MOUNT, 302 KAUTH_REQ_SYSTEM_MOUNT_NEW, vp, KAUTH_ARG(flags), data); 303 if (error) { 304 vfs_delref(vfsops); 305 return error; 306 } 307 308 /* Can't make a non-dir a mount-point (from here anyway). */ 309 if (vp->v_type != VDIR) { 310 vfs_delref(vfsops); 311 return ENOTDIR; 312 } 313 314 /* 315 * If the user is not root, ensure that they own the directory 316 * onto which we are attempting to mount. 317 */ 318 if ((error = VOP_GETATTR(vp, &va, l->l_cred)) != 0 || 319 (va.va_uid != kauth_cred_geteuid(l->l_cred) && 320 (error = kauth_authorize_generic(l->l_cred, 321 KAUTH_GENERIC_ISSUSER, NULL)) != 0)) { 322 vfs_delref(vfsops); 323 return error; 324 } 325 326 if (flags & MNT_EXPORTED) { 327 vfs_delref(vfsops); 328 return EINVAL; 329 } 330 331 if ((mp = vfs_mountalloc(vfsops, vp)) == NULL) { 332 vfs_delref(vfsops); 333 return ENOMEM; 334 } 335 336 mp->mnt_stat.f_owner = kauth_cred_geteuid(l->l_cred); 337 338 /* 339 * The underlying file system may refuse the mount for 340 * various reasons. Allow the user to force it to happen. 341 * 342 * Set the mount level flags. 343 */ 344 mp->mnt_flag = flags & 345 (MNT_FORCE | MNT_NOSUID | MNT_NOEXEC | MNT_NODEV | 346 MNT_SYNCHRONOUS | MNT_UNION | MNT_ASYNC | MNT_NOCOREDUMP | 347 MNT_NOATIME | MNT_NODEVMTIME | MNT_SYMPERM | MNT_SOFTDEP | 348 MNT_LOG | MNT_IGNORE | MNT_RDONLY); 349 350 mutex_enter(&mp->mnt_updating); 351 error = VFS_MOUNT(mp, path, data, data_len); 352 mp->mnt_flag &= ~MNT_OP_FLAGS; 353 354 if (error != 0) 355 goto err_unmounted; 356 357 /* 358 * Validate and prepare the mount point. 359 */ 360 NDINIT(&nd, LOOKUP, FOLLOW | LOCKLEAF | TRYEMULROOT, 361 UIO_USERSPACE, path); 362 error = namei(&nd); 363 if (error != 0) { 364 goto err_mounted; 365 } 366 if (nd.ni_vp != vp) { 367 vput(nd.ni_vp); 368 error = EINVAL; 369 goto err_mounted; 370 } 371 if (vp->v_mountedhere != NULL) { 372 vput(nd.ni_vp); 373 error = EBUSY; 374 goto err_mounted; 375 } 376 error = vinvalbuf(vp, V_SAVE, l->l_cred, l, 0, 0); 377 if (error != 0) { 378 vput(nd.ni_vp); 379 goto err_mounted; 380 } 381 382 /* 383 * Put the new filesystem on the mount list after root. 384 */ 385 cache_purge(vp); 386 mp->mnt_iflag &= ~IMNT_WANTRDWR; 387 388 mutex_enter(&mountlist_lock); 389 CIRCLEQ_INSERT_TAIL(&mountlist, mp, mnt_list); 390 mutex_exit(&mountlist_lock); 391 if ((mp->mnt_flag & (MNT_RDONLY | MNT_ASYNC)) == 0) 392 error = vfs_allocate_syncvnode(mp); 393 if (error == 0) 394 vp->v_mountedhere = mp; 395 vput(nd.ni_vp); 396 if (error != 0) 397 goto err_onmountlist; 398 399 checkdirs(vp); 400 mutex_exit(&mp->mnt_updating); 401 402 /* Hold an additional reference to the mount across VFS_START(). */ 403 vfs_unbusy(mp, true, NULL); 404 (void) VFS_STATVFS(mp, &mp->mnt_stat); 405 error = VFS_START(mp, 0); 406 if (error) 407 vrele(vp); 408 /* Drop reference held for VFS_START(). */ 409 vfs_destroy(mp); 410 *vpp = NULL; 411 return error; 412 413 err_onmountlist: 414 mutex_enter(&mountlist_lock); 415 CIRCLEQ_REMOVE(&mountlist, mp, mnt_list); 416 mp->mnt_iflag |= IMNT_GONE; 417 mutex_exit(&mountlist_lock); 418 419 err_mounted: 420 if (VFS_UNMOUNT(mp, MNT_FORCE) != 0) 421 panic("Unmounting fresh file system failed"); 422 423 err_unmounted: 424 vp->v_mountedhere = NULL; 425 mutex_exit(&mp->mnt_updating); 426 vfs_unbusy(mp, false, NULL); 427 vfs_destroy(mp); 428 429 return error; 430 } 431 432 static int 433 mount_getargs(struct lwp *l, struct vnode *vp, const char *path, int flags, 434 void *data, size_t *data_len) 435 { 436 struct mount *mp; 437 int error; 438 439 /* If MNT_GETARGS is specified, it should be the only flag. */ 440 if (flags & ~MNT_GETARGS) 441 return EINVAL; 442 443 mp = vp->v_mount; 444 445 /* XXX: probably some notion of "can see" here if we want isolation. */ 446 error = kauth_authorize_system(l->l_cred, KAUTH_SYSTEM_MOUNT, 447 KAUTH_REQ_SYSTEM_MOUNT_GET, mp, data, NULL); 448 if (error) 449 return error; 450 451 if ((vp->v_vflag & VV_ROOT) == 0) 452 return EINVAL; 453 454 if (vfs_busy(mp, NULL)) 455 return EPERM; 456 457 mutex_enter(&mp->mnt_updating); 458 mp->mnt_flag &= ~MNT_OP_FLAGS; 459 mp->mnt_flag |= MNT_GETARGS; 460 error = VFS_MOUNT(mp, path, data, data_len); 461 mp->mnt_flag &= ~MNT_OP_FLAGS; 462 mutex_exit(&mp->mnt_updating); 463 464 vfs_unbusy(mp, false, NULL); 465 return (error); 466 } 467 468 int 469 sys___mount50(struct lwp *l, const struct sys___mount50_args *uap, register_t *retval) 470 { 471 /* { 472 syscallarg(const char *) type; 473 syscallarg(const char *) path; 474 syscallarg(int) flags; 475 syscallarg(void *) data; 476 syscallarg(size_t) data_len; 477 } */ 478 479 return do_sys_mount(l, NULL, SCARG(uap, type), SCARG(uap, path), 480 SCARG(uap, flags), SCARG(uap, data), UIO_USERSPACE, 481 SCARG(uap, data_len), retval); 482 } 483 484 int 485 do_sys_mount(struct lwp *l, struct vfsops *vfsops, const char *type, 486 const char *path, int flags, void *data, enum uio_seg data_seg, 487 size_t data_len, register_t *retval) 488 { 489 struct vnode *vp; 490 void *data_buf = data; 491 bool vfsopsrele = false; 492 int error; 493 494 /* XXX: The calling convention of this routine is totally bizarre */ 495 if (vfsops) 496 vfsopsrele = true; 497 498 /* 499 * Get vnode to be covered 500 */ 501 error = namei_simple_user(path, NSM_FOLLOW_TRYEMULROOT, &vp); 502 if (error != 0) { 503 vp = NULL; 504 goto done; 505 } 506 507 if (vfsops == NULL) { 508 if (flags & (MNT_GETARGS | MNT_UPDATE)) { 509 vfsops = vp->v_mount->mnt_op; 510 } else { 511 /* 'type' is userspace */ 512 error = mount_get_vfsops(type, &vfsops); 513 if (error != 0) 514 goto done; 515 vfsopsrele = true; 516 } 517 } 518 519 if (data != NULL && data_seg == UIO_USERSPACE) { 520 if (data_len == 0) { 521 /* No length supplied, use default for filesystem */ 522 data_len = vfsops->vfs_min_mount_data; 523 if (data_len > VFS_MAX_MOUNT_DATA) { 524 error = EINVAL; 525 goto done; 526 } 527 /* 528 * Hopefully a longer buffer won't make copyin() fail. 529 * For compatibility with 3.0 and earlier. 530 */ 531 if (flags & MNT_UPDATE 532 && data_len < sizeof (struct mnt_export_args30)) 533 data_len = sizeof (struct mnt_export_args30); 534 } 535 data_buf = kmem_alloc(data_len, KM_SLEEP); 536 537 /* NFS needs the buffer even for mnt_getargs .... */ 538 error = copyin(data, data_buf, data_len); 539 if (error != 0) 540 goto done; 541 } 542 543 if (flags & MNT_GETARGS) { 544 if (data_len == 0) { 545 error = EINVAL; 546 goto done; 547 } 548 error = mount_getargs(l, vp, path, flags, data_buf, &data_len); 549 if (error != 0) 550 goto done; 551 if (data_seg == UIO_USERSPACE) 552 error = copyout(data_buf, data, data_len); 553 *retval = data_len; 554 } else if (flags & MNT_UPDATE) { 555 error = mount_update(l, vp, path, flags, data_buf, &data_len); 556 } else { 557 /* Locking is handled internally in mount_domount(). */ 558 KASSERT(vfsopsrele == true); 559 error = mount_domount(l, &vp, vfsops, path, flags, data_buf, 560 &data_len); 561 vfsopsrele = false; 562 } 563 564 done: 565 if (vfsopsrele) 566 vfs_delref(vfsops); 567 if (vp != NULL) { 568 vrele(vp); 569 } 570 if (data_buf != data) 571 kmem_free(data_buf, data_len); 572 return (error); 573 } 574 575 /* 576 * Scan all active processes to see if any of them have a current 577 * or root directory onto which the new filesystem has just been 578 * mounted. If so, replace them with the new mount point. 579 */ 580 void 581 checkdirs(struct vnode *olddp) 582 { 583 struct cwdinfo *cwdi; 584 struct vnode *newdp, *rele1, *rele2; 585 struct proc *p; 586 bool retry; 587 588 if (olddp->v_usecount == 1) 589 return; 590 if (VFS_ROOT(olddp->v_mountedhere, &newdp)) 591 panic("mount: lost mount"); 592 593 do { 594 retry = false; 595 mutex_enter(proc_lock); 596 PROCLIST_FOREACH(p, &allproc) { 597 if ((cwdi = p->p_cwdi) == NULL) 598 continue; 599 /* 600 * Can't change to the old directory any more, 601 * so even if we see a stale value it's not a 602 * problem. 603 */ 604 if (cwdi->cwdi_cdir != olddp && 605 cwdi->cwdi_rdir != olddp) 606 continue; 607 retry = true; 608 rele1 = NULL; 609 rele2 = NULL; 610 atomic_inc_uint(&cwdi->cwdi_refcnt); 611 mutex_exit(proc_lock); 612 rw_enter(&cwdi->cwdi_lock, RW_WRITER); 613 if (cwdi->cwdi_cdir == olddp) { 614 rele1 = cwdi->cwdi_cdir; 615 vref(newdp); 616 cwdi->cwdi_cdir = newdp; 617 } 618 if (cwdi->cwdi_rdir == olddp) { 619 rele2 = cwdi->cwdi_rdir; 620 vref(newdp); 621 cwdi->cwdi_rdir = newdp; 622 } 623 rw_exit(&cwdi->cwdi_lock); 624 cwdfree(cwdi); 625 if (rele1 != NULL) 626 vrele(rele1); 627 if (rele2 != NULL) 628 vrele(rele2); 629 mutex_enter(proc_lock); 630 break; 631 } 632 mutex_exit(proc_lock); 633 } while (retry); 634 635 if (rootvnode == olddp) { 636 vrele(rootvnode); 637 vref(newdp); 638 rootvnode = newdp; 639 } 640 vput(newdp); 641 } 642 643 /* 644 * Unmount a file system. 645 * 646 * Note: unmount takes a path to the vnode mounted on as argument, 647 * not special file (as before). 648 */ 649 /* ARGSUSED */ 650 int 651 sys_unmount(struct lwp *l, const struct sys_unmount_args *uap, register_t *retval) 652 { 653 /* { 654 syscallarg(const char *) path; 655 syscallarg(int) flags; 656 } */ 657 struct vnode *vp; 658 struct mount *mp; 659 int error; 660 struct nameidata nd; 661 662 NDINIT(&nd, LOOKUP, FOLLOW | LOCKLEAF | TRYEMULROOT, UIO_USERSPACE, 663 SCARG(uap, path)); 664 if ((error = namei(&nd)) != 0) 665 return (error); 666 vp = nd.ni_vp; 667 mp = vp->v_mount; 668 atomic_inc_uint(&mp->mnt_refcnt); 669 VOP_UNLOCK(vp); 670 671 error = kauth_authorize_system(l->l_cred, KAUTH_SYSTEM_MOUNT, 672 KAUTH_REQ_SYSTEM_MOUNT_UNMOUNT, mp, NULL, NULL); 673 if (error) { 674 vrele(vp); 675 vfs_destroy(mp); 676 return (error); 677 } 678 679 /* 680 * Don't allow unmounting the root file system. 681 */ 682 if (mp->mnt_flag & MNT_ROOTFS) { 683 vrele(vp); 684 vfs_destroy(mp); 685 return (EINVAL); 686 } 687 688 /* 689 * Must be the root of the filesystem 690 */ 691 if ((vp->v_vflag & VV_ROOT) == 0) { 692 vrele(vp); 693 vfs_destroy(mp); 694 return (EINVAL); 695 } 696 697 vrele(vp); 698 error = dounmount(mp, SCARG(uap, flags), l); 699 vfs_destroy(mp); 700 return error; 701 } 702 703 /* 704 * Do the actual file system unmount. File system is assumed to have 705 * been locked by the caller. 706 * 707 * => Caller hold reference to the mount, explicitly for dounmount(). 708 */ 709 int 710 dounmount(struct mount *mp, int flags, struct lwp *l) 711 { 712 struct vnode *coveredvp; 713 int error; 714 int async; 715 int used_syncer; 716 717 #if NVERIEXEC > 0 718 error = veriexec_unmountchk(mp); 719 if (error) 720 return (error); 721 #endif /* NVERIEXEC > 0 */ 722 723 /* 724 * XXX Freeze syncer. Must do this before locking the 725 * mount point. See dounmount() for details. 726 */ 727 mutex_enter(&syncer_mutex); 728 rw_enter(&mp->mnt_unmounting, RW_WRITER); 729 if ((mp->mnt_iflag & IMNT_GONE) != 0) { 730 rw_exit(&mp->mnt_unmounting); 731 mutex_exit(&syncer_mutex); 732 return ENOENT; 733 } 734 735 used_syncer = (mp->mnt_syncer != NULL); 736 737 /* 738 * XXX Syncer must be frozen when we get here. This should really 739 * be done on a per-mountpoint basis, but the syncer doesn't work 740 * like that. 741 * 742 * The caller of dounmount() must acquire syncer_mutex because 743 * the syncer itself acquires locks in syncer_mutex -> vfs_busy 744 * order, and we must preserve that order to avoid deadlock. 745 * 746 * So, if the file system did not use the syncer, now is 747 * the time to release the syncer_mutex. 748 */ 749 if (used_syncer == 0) 750 mutex_exit(&syncer_mutex); 751 752 mp->mnt_iflag |= IMNT_UNMOUNT; 753 async = mp->mnt_flag & MNT_ASYNC; 754 mp->mnt_flag &= ~MNT_ASYNC; 755 cache_purgevfs(mp); /* remove cache entries for this file sys */ 756 if (mp->mnt_syncer != NULL) 757 vfs_deallocate_syncvnode(mp); 758 error = 0; 759 if ((mp->mnt_flag & MNT_RDONLY) == 0) { 760 error = VFS_SYNC(mp, MNT_WAIT, l->l_cred); 761 } 762 vfs_scrubvnlist(mp); 763 if (error == 0 || (flags & MNT_FORCE)) 764 error = VFS_UNMOUNT(mp, flags); 765 if (error) { 766 if ((mp->mnt_flag & (MNT_RDONLY | MNT_ASYNC)) == 0) 767 (void) vfs_allocate_syncvnode(mp); 768 mp->mnt_iflag &= ~IMNT_UNMOUNT; 769 mp->mnt_flag |= async; 770 rw_exit(&mp->mnt_unmounting); 771 if (used_syncer) 772 mutex_exit(&syncer_mutex); 773 return (error); 774 } 775 vfs_scrubvnlist(mp); 776 mutex_enter(&mountlist_lock); 777 if ((coveredvp = mp->mnt_vnodecovered) != NULLVP) 778 coveredvp->v_mountedhere = NULL; 779 CIRCLEQ_REMOVE(&mountlist, mp, mnt_list); 780 mp->mnt_iflag |= IMNT_GONE; 781 mutex_exit(&mountlist_lock); 782 if (TAILQ_FIRST(&mp->mnt_vnodelist) != NULL) 783 panic("unmount: dangling vnode"); 784 if (used_syncer) 785 mutex_exit(&syncer_mutex); 786 vfs_hooks_unmount(mp); 787 rw_exit(&mp->mnt_unmounting); 788 vfs_destroy(mp); /* reference from mount() */ 789 if (coveredvp != NULLVP) 790 vrele(coveredvp); 791 return (0); 792 } 793 794 /* 795 * Sync each mounted filesystem. 796 */ 797 #ifdef DEBUG 798 int syncprt = 0; 799 struct ctldebug debug0 = { "syncprt", &syncprt }; 800 #endif 801 802 /* ARGSUSED */ 803 int 804 sys_sync(struct lwp *l, const void *v, register_t *retval) 805 { 806 struct mount *mp, *nmp; 807 int asyncflag; 808 809 if (l == NULL) 810 l = &lwp0; 811 812 mutex_enter(&mountlist_lock); 813 for (mp = CIRCLEQ_FIRST(&mountlist); mp != (void *)&mountlist; 814 mp = nmp) { 815 if (vfs_busy(mp, &nmp)) { 816 continue; 817 } 818 mutex_enter(&mp->mnt_updating); 819 if ((mp->mnt_flag & MNT_RDONLY) == 0) { 820 asyncflag = mp->mnt_flag & MNT_ASYNC; 821 mp->mnt_flag &= ~MNT_ASYNC; 822 VFS_SYNC(mp, MNT_NOWAIT, l->l_cred); 823 if (asyncflag) 824 mp->mnt_flag |= MNT_ASYNC; 825 } 826 mutex_exit(&mp->mnt_updating); 827 vfs_unbusy(mp, false, &nmp); 828 } 829 mutex_exit(&mountlist_lock); 830 #ifdef DEBUG 831 if (syncprt) 832 vfs_bufstats(); 833 #endif /* DEBUG */ 834 return (0); 835 } 836 837 /* 838 * Change filesystem quotas. 839 */ 840 /* ARGSUSED */ 841 int 842 sys_quotactl(struct lwp *l, const struct sys_quotactl_args *uap, register_t *retval) 843 { 844 /* { 845 syscallarg(const char *) path; 846 syscallarg(int) cmd; 847 syscallarg(int) uid; 848 syscallarg(void *) arg; 849 } */ 850 struct mount *mp; 851 int error; 852 struct vnode *vp; 853 854 error = namei_simple_user(SCARG(uap, path), 855 NSM_FOLLOW_TRYEMULROOT, &vp); 856 if (error != 0) 857 return (error); 858 mp = vp->v_mount; 859 error = VFS_QUOTACTL(mp, SCARG(uap, cmd), SCARG(uap, uid), 860 SCARG(uap, arg)); 861 vrele(vp); 862 return (error); 863 } 864 865 int 866 dostatvfs(struct mount *mp, struct statvfs *sp, struct lwp *l, int flags, 867 int root) 868 { 869 struct cwdinfo *cwdi = l->l_proc->p_cwdi; 870 int error = 0; 871 872 /* 873 * If MNT_NOWAIT or MNT_LAZY is specified, do not 874 * refresh the fsstat cache. MNT_WAIT or MNT_LAZY 875 * overrides MNT_NOWAIT. 876 */ 877 if (flags == MNT_NOWAIT || flags == MNT_LAZY || 878 (flags != MNT_WAIT && flags != 0)) { 879 memcpy(sp, &mp->mnt_stat, sizeof(*sp)); 880 goto done; 881 } 882 883 /* Get the filesystem stats now */ 884 memset(sp, 0, sizeof(*sp)); 885 if ((error = VFS_STATVFS(mp, sp)) != 0) { 886 return error; 887 } 888 889 if (cwdi->cwdi_rdir == NULL) 890 (void)memcpy(&mp->mnt_stat, sp, sizeof(mp->mnt_stat)); 891 done: 892 if (cwdi->cwdi_rdir != NULL) { 893 size_t len; 894 char *bp; 895 char c; 896 char *path = PNBUF_GET(); 897 898 bp = path + MAXPATHLEN; 899 *--bp = '\0'; 900 rw_enter(&cwdi->cwdi_lock, RW_READER); 901 error = getcwd_common(cwdi->cwdi_rdir, rootvnode, &bp, path, 902 MAXPATHLEN / 2, 0, l); 903 rw_exit(&cwdi->cwdi_lock); 904 if (error) { 905 PNBUF_PUT(path); 906 return error; 907 } 908 len = strlen(bp); 909 if (len != 1) { 910 /* 911 * for mount points that are below our root, we can see 912 * them, so we fix up the pathname and return them. The 913 * rest we cannot see, so we don't allow viewing the 914 * data. 915 */ 916 if (strncmp(bp, sp->f_mntonname, len) == 0 && 917 ((c = sp->f_mntonname[len]) == '/' || c == '\0')) { 918 (void)strlcpy(sp->f_mntonname, 919 c == '\0' ? "/" : &sp->f_mntonname[len], 920 sizeof(sp->f_mntonname)); 921 } else { 922 if (root) 923 (void)strlcpy(sp->f_mntonname, "/", 924 sizeof(sp->f_mntonname)); 925 else 926 error = EPERM; 927 } 928 } 929 PNBUF_PUT(path); 930 } 931 sp->f_flag = mp->mnt_flag & MNT_VISFLAGMASK; 932 return error; 933 } 934 935 /* 936 * Get filesystem statistics by path. 937 */ 938 int 939 do_sys_pstatvfs(struct lwp *l, const char *path, int flags, struct statvfs *sb) 940 { 941 struct mount *mp; 942 int error; 943 struct vnode *vp; 944 945 error = namei_simple_user(path, NSM_FOLLOW_TRYEMULROOT, &vp); 946 if (error != 0) 947 return error; 948 mp = vp->v_mount; 949 error = dostatvfs(mp, sb, l, flags, 1); 950 vrele(vp); 951 return error; 952 } 953 954 /* ARGSUSED */ 955 int 956 sys_statvfs1(struct lwp *l, const struct sys_statvfs1_args *uap, register_t *retval) 957 { 958 /* { 959 syscallarg(const char *) path; 960 syscallarg(struct statvfs *) buf; 961 syscallarg(int) flags; 962 } */ 963 struct statvfs *sb; 964 int error; 965 966 sb = STATVFSBUF_GET(); 967 error = do_sys_pstatvfs(l, SCARG(uap, path), SCARG(uap, flags), sb); 968 if (error == 0) 969 error = copyout(sb, SCARG(uap, buf), sizeof(*sb)); 970 STATVFSBUF_PUT(sb); 971 return error; 972 } 973 974 /* 975 * Get filesystem statistics by fd. 976 */ 977 int 978 do_sys_fstatvfs(struct lwp *l, int fd, int flags, struct statvfs *sb) 979 { 980 file_t *fp; 981 struct mount *mp; 982 int error; 983 984 /* fd_getvnode() will use the descriptor for us */ 985 if ((error = fd_getvnode(fd, &fp)) != 0) 986 return (error); 987 mp = ((struct vnode *)fp->f_data)->v_mount; 988 error = dostatvfs(mp, sb, curlwp, flags, 1); 989 fd_putfile(fd); 990 return error; 991 } 992 993 /* ARGSUSED */ 994 int 995 sys_fstatvfs1(struct lwp *l, const struct sys_fstatvfs1_args *uap, register_t *retval) 996 { 997 /* { 998 syscallarg(int) fd; 999 syscallarg(struct statvfs *) buf; 1000 syscallarg(int) flags; 1001 } */ 1002 struct statvfs *sb; 1003 int error; 1004 1005 sb = STATVFSBUF_GET(); 1006 error = do_sys_fstatvfs(l, SCARG(uap, fd), SCARG(uap, flags), sb); 1007 if (error == 0) 1008 error = copyout(sb, SCARG(uap, buf), sizeof(*sb)); 1009 STATVFSBUF_PUT(sb); 1010 return error; 1011 } 1012 1013 1014 /* 1015 * Get statistics on all filesystems. 1016 */ 1017 int 1018 do_sys_getvfsstat(struct lwp *l, void *sfsp, size_t bufsize, int flags, 1019 int (*copyfn)(const void *, void *, size_t), size_t entry_sz, 1020 register_t *retval) 1021 { 1022 int root = 0; 1023 struct proc *p = l->l_proc; 1024 struct mount *mp, *nmp; 1025 struct statvfs *sb; 1026 size_t count, maxcount; 1027 int error = 0; 1028 1029 sb = STATVFSBUF_GET(); 1030 maxcount = bufsize / entry_sz; 1031 mutex_enter(&mountlist_lock); 1032 count = 0; 1033 for (mp = CIRCLEQ_FIRST(&mountlist); mp != (void *)&mountlist; 1034 mp = nmp) { 1035 if (vfs_busy(mp, &nmp)) { 1036 continue; 1037 } 1038 if (sfsp && count < maxcount) { 1039 error = dostatvfs(mp, sb, l, flags, 0); 1040 if (error) { 1041 vfs_unbusy(mp, false, &nmp); 1042 error = 0; 1043 continue; 1044 } 1045 error = copyfn(sb, sfsp, entry_sz); 1046 if (error) { 1047 vfs_unbusy(mp, false, NULL); 1048 goto out; 1049 } 1050 sfsp = (char *)sfsp + entry_sz; 1051 root |= strcmp(sb->f_mntonname, "/") == 0; 1052 } 1053 count++; 1054 vfs_unbusy(mp, false, &nmp); 1055 } 1056 mutex_exit(&mountlist_lock); 1057 1058 if (root == 0 && p->p_cwdi->cwdi_rdir) { 1059 /* 1060 * fake a root entry 1061 */ 1062 error = dostatvfs(p->p_cwdi->cwdi_rdir->v_mount, 1063 sb, l, flags, 1); 1064 if (error != 0) 1065 goto out; 1066 if (sfsp) { 1067 error = copyfn(sb, sfsp, entry_sz); 1068 if (error != 0) 1069 goto out; 1070 } 1071 count++; 1072 } 1073 if (sfsp && count > maxcount) 1074 *retval = maxcount; 1075 else 1076 *retval = count; 1077 out: 1078 STATVFSBUF_PUT(sb); 1079 return error; 1080 } 1081 1082 int 1083 sys_getvfsstat(struct lwp *l, const struct sys_getvfsstat_args *uap, register_t *retval) 1084 { 1085 /* { 1086 syscallarg(struct statvfs *) buf; 1087 syscallarg(size_t) bufsize; 1088 syscallarg(int) flags; 1089 } */ 1090 1091 return do_sys_getvfsstat(l, SCARG(uap, buf), SCARG(uap, bufsize), 1092 SCARG(uap, flags), copyout, sizeof (struct statvfs), retval); 1093 } 1094 1095 /* 1096 * Change current working directory to a given file descriptor. 1097 */ 1098 /* ARGSUSED */ 1099 int 1100 sys_fchdir(struct lwp *l, const struct sys_fchdir_args *uap, register_t *retval) 1101 { 1102 /* { 1103 syscallarg(int) fd; 1104 } */ 1105 struct proc *p = l->l_proc; 1106 struct cwdinfo *cwdi; 1107 struct vnode *vp, *tdp; 1108 struct mount *mp; 1109 file_t *fp; 1110 int error, fd; 1111 1112 /* fd_getvnode() will use the descriptor for us */ 1113 fd = SCARG(uap, fd); 1114 if ((error = fd_getvnode(fd, &fp)) != 0) 1115 return (error); 1116 vp = fp->f_data; 1117 1118 vref(vp); 1119 vn_lock(vp, LK_EXCLUSIVE | LK_RETRY); 1120 if (vp->v_type != VDIR) 1121 error = ENOTDIR; 1122 else 1123 error = VOP_ACCESS(vp, VEXEC, l->l_cred); 1124 if (error) { 1125 vput(vp); 1126 goto out; 1127 } 1128 while ((mp = vp->v_mountedhere) != NULL) { 1129 error = vfs_busy(mp, NULL); 1130 vput(vp); 1131 if (error != 0) 1132 goto out; 1133 error = VFS_ROOT(mp, &tdp); 1134 vfs_unbusy(mp, false, NULL); 1135 if (error) 1136 goto out; 1137 vp = tdp; 1138 } 1139 VOP_UNLOCK(vp); 1140 1141 /* 1142 * Disallow changing to a directory not under the process's 1143 * current root directory (if there is one). 1144 */ 1145 cwdi = p->p_cwdi; 1146 rw_enter(&cwdi->cwdi_lock, RW_WRITER); 1147 if (cwdi->cwdi_rdir && !vn_isunder(vp, NULL, l)) { 1148 vrele(vp); 1149 error = EPERM; /* operation not permitted */ 1150 } else { 1151 vrele(cwdi->cwdi_cdir); 1152 cwdi->cwdi_cdir = vp; 1153 } 1154 rw_exit(&cwdi->cwdi_lock); 1155 1156 out: 1157 fd_putfile(fd); 1158 return (error); 1159 } 1160 1161 /* 1162 * Change this process's notion of the root directory to a given file 1163 * descriptor. 1164 */ 1165 int 1166 sys_fchroot(struct lwp *l, const struct sys_fchroot_args *uap, register_t *retval) 1167 { 1168 struct proc *p = l->l_proc; 1169 struct vnode *vp; 1170 file_t *fp; 1171 int error, fd = SCARG(uap, fd); 1172 1173 if ((error = kauth_authorize_system(l->l_cred, KAUTH_SYSTEM_CHROOT, 1174 KAUTH_REQ_SYSTEM_CHROOT_FCHROOT, NULL, NULL, NULL)) != 0) 1175 return error; 1176 /* fd_getvnode() will use the descriptor for us */ 1177 if ((error = fd_getvnode(fd, &fp)) != 0) 1178 return error; 1179 vp = fp->f_data; 1180 vn_lock(vp, LK_EXCLUSIVE | LK_RETRY); 1181 if (vp->v_type != VDIR) 1182 error = ENOTDIR; 1183 else 1184 error = VOP_ACCESS(vp, VEXEC, l->l_cred); 1185 VOP_UNLOCK(vp); 1186 if (error) 1187 goto out; 1188 vref(vp); 1189 1190 change_root(p->p_cwdi, vp, l); 1191 1192 out: 1193 fd_putfile(fd); 1194 return (error); 1195 } 1196 1197 /* 1198 * Change current working directory (``.''). 1199 */ 1200 /* ARGSUSED */ 1201 int 1202 sys_chdir(struct lwp *l, const struct sys_chdir_args *uap, register_t *retval) 1203 { 1204 /* { 1205 syscallarg(const char *) path; 1206 } */ 1207 struct proc *p = l->l_proc; 1208 struct cwdinfo *cwdi; 1209 int error; 1210 struct vnode *vp; 1211 1212 if ((error = chdir_lookup(SCARG(uap, path), UIO_USERSPACE, 1213 &vp, l)) != 0) 1214 return (error); 1215 cwdi = p->p_cwdi; 1216 rw_enter(&cwdi->cwdi_lock, RW_WRITER); 1217 vrele(cwdi->cwdi_cdir); 1218 cwdi->cwdi_cdir = vp; 1219 rw_exit(&cwdi->cwdi_lock); 1220 return (0); 1221 } 1222 1223 /* 1224 * Change notion of root (``/'') directory. 1225 */ 1226 /* ARGSUSED */ 1227 int 1228 sys_chroot(struct lwp *l, const struct sys_chroot_args *uap, register_t *retval) 1229 { 1230 /* { 1231 syscallarg(const char *) path; 1232 } */ 1233 struct proc *p = l->l_proc; 1234 int error; 1235 struct vnode *vp; 1236 1237 if ((error = kauth_authorize_system(l->l_cred, KAUTH_SYSTEM_CHROOT, 1238 KAUTH_REQ_SYSTEM_CHROOT_CHROOT, NULL, NULL, NULL)) != 0) 1239 return (error); 1240 if ((error = chdir_lookup(SCARG(uap, path), UIO_USERSPACE, 1241 &vp, l)) != 0) 1242 return (error); 1243 1244 change_root(p->p_cwdi, vp, l); 1245 1246 return (0); 1247 } 1248 1249 /* 1250 * Common routine for chroot and fchroot. 1251 * NB: callers need to properly authorize the change root operation. 1252 */ 1253 void 1254 change_root(struct cwdinfo *cwdi, struct vnode *vp, struct lwp *l) 1255 { 1256 1257 rw_enter(&cwdi->cwdi_lock, RW_WRITER); 1258 if (cwdi->cwdi_rdir != NULL) 1259 vrele(cwdi->cwdi_rdir); 1260 cwdi->cwdi_rdir = vp; 1261 1262 /* 1263 * Prevent escaping from chroot by putting the root under 1264 * the working directory. Silently chdir to / if we aren't 1265 * already there. 1266 */ 1267 if (!vn_isunder(cwdi->cwdi_cdir, vp, l)) { 1268 /* 1269 * XXX would be more failsafe to change directory to a 1270 * deadfs node here instead 1271 */ 1272 vrele(cwdi->cwdi_cdir); 1273 vref(vp); 1274 cwdi->cwdi_cdir = vp; 1275 } 1276 rw_exit(&cwdi->cwdi_lock); 1277 } 1278 1279 /* 1280 * Common routine for chroot and chdir. 1281 */ 1282 int 1283 chdir_lookup(const char *path, int where, struct vnode **vpp, struct lwp *l) 1284 { 1285 struct nameidata nd; 1286 int error; 1287 1288 NDINIT(&nd, LOOKUP, FOLLOW | LOCKLEAF | TRYEMULROOT, where, 1289 path); 1290 if ((error = namei(&nd)) != 0) 1291 return (error); 1292 *vpp = nd.ni_vp; 1293 if ((*vpp)->v_type != VDIR) 1294 error = ENOTDIR; 1295 else 1296 error = VOP_ACCESS(*vpp, VEXEC, l->l_cred); 1297 1298 if (error) 1299 vput(*vpp); 1300 else 1301 VOP_UNLOCK(*vpp); 1302 return (error); 1303 } 1304 1305 /* 1306 * Check permissions, allocate an open file structure, 1307 * and call the device open routine if any. 1308 */ 1309 int 1310 sys_open(struct lwp *l, const struct sys_open_args *uap, register_t *retval) 1311 { 1312 /* { 1313 syscallarg(const char *) path; 1314 syscallarg(int) flags; 1315 syscallarg(int) mode; 1316 } */ 1317 struct proc *p = l->l_proc; 1318 struct cwdinfo *cwdi = p->p_cwdi; 1319 file_t *fp; 1320 struct vnode *vp; 1321 int flags, cmode; 1322 int type, indx, error; 1323 struct flock lf; 1324 struct nameidata nd; 1325 1326 flags = FFLAGS(SCARG(uap, flags)); 1327 if ((flags & (FREAD | FWRITE)) == 0) 1328 return (EINVAL); 1329 if ((error = fd_allocfile(&fp, &indx)) != 0) 1330 return (error); 1331 /* We're going to read cwdi->cwdi_cmask unlocked here. */ 1332 cmode = ((SCARG(uap, mode) &~ cwdi->cwdi_cmask) & ALLPERMS) &~ S_ISTXT; 1333 NDINIT(&nd, LOOKUP, FOLLOW | TRYEMULROOT, UIO_USERSPACE, 1334 SCARG(uap, path)); 1335 l->l_dupfd = -indx - 1; /* XXX check for fdopen */ 1336 if ((error = vn_open(&nd, flags, cmode)) != 0) { 1337 fd_abort(p, fp, indx); 1338 if ((error == EDUPFD || error == EMOVEFD) && 1339 l->l_dupfd >= 0 && /* XXX from fdopen */ 1340 (error = 1341 fd_dupopen(l->l_dupfd, &indx, flags, error)) == 0) { 1342 *retval = indx; 1343 return (0); 1344 } 1345 if (error == ERESTART) 1346 error = EINTR; 1347 return (error); 1348 } 1349 1350 l->l_dupfd = 0; 1351 vp = nd.ni_vp; 1352 fp->f_flag = flags & FMASK; 1353 fp->f_type = DTYPE_VNODE; 1354 fp->f_ops = &vnops; 1355 fp->f_data = vp; 1356 if (flags & (O_EXLOCK | O_SHLOCK)) { 1357 lf.l_whence = SEEK_SET; 1358 lf.l_start = 0; 1359 lf.l_len = 0; 1360 if (flags & O_EXLOCK) 1361 lf.l_type = F_WRLCK; 1362 else 1363 lf.l_type = F_RDLCK; 1364 type = F_FLOCK; 1365 if ((flags & FNONBLOCK) == 0) 1366 type |= F_WAIT; 1367 VOP_UNLOCK(vp); 1368 error = VOP_ADVLOCK(vp, fp, F_SETLK, &lf, type); 1369 if (error) { 1370 (void) vn_close(vp, fp->f_flag, fp->f_cred); 1371 fd_abort(p, fp, indx); 1372 return (error); 1373 } 1374 vn_lock(vp, LK_EXCLUSIVE | LK_RETRY); 1375 atomic_or_uint(&fp->f_flag, FHASLOCK); 1376 } 1377 VOP_UNLOCK(vp); 1378 *retval = indx; 1379 fd_affix(p, fp, indx); 1380 return (0); 1381 } 1382 1383 static void 1384 vfs__fhfree(fhandle_t *fhp) 1385 { 1386 size_t fhsize; 1387 1388 if (fhp == NULL) { 1389 return; 1390 } 1391 fhsize = FHANDLE_SIZE(fhp); 1392 kmem_free(fhp, fhsize); 1393 } 1394 1395 /* 1396 * vfs_composefh: compose a filehandle. 1397 */ 1398 1399 int 1400 vfs_composefh(struct vnode *vp, fhandle_t *fhp, size_t *fh_size) 1401 { 1402 struct mount *mp; 1403 struct fid *fidp; 1404 int error; 1405 size_t needfhsize; 1406 size_t fidsize; 1407 1408 mp = vp->v_mount; 1409 fidp = NULL; 1410 if (*fh_size < FHANDLE_SIZE_MIN) { 1411 fidsize = 0; 1412 } else { 1413 fidsize = *fh_size - offsetof(fhandle_t, fh_fid); 1414 if (fhp != NULL) { 1415 memset(fhp, 0, *fh_size); 1416 fhp->fh_fsid = mp->mnt_stat.f_fsidx; 1417 fidp = &fhp->fh_fid; 1418 } 1419 } 1420 error = VFS_VPTOFH(vp, fidp, &fidsize); 1421 needfhsize = FHANDLE_SIZE_FROM_FILEID_SIZE(fidsize); 1422 if (error == 0 && *fh_size < needfhsize) { 1423 error = E2BIG; 1424 } 1425 *fh_size = needfhsize; 1426 return error; 1427 } 1428 1429 int 1430 vfs_composefh_alloc(struct vnode *vp, fhandle_t **fhpp) 1431 { 1432 struct mount *mp; 1433 fhandle_t *fhp; 1434 size_t fhsize; 1435 size_t fidsize; 1436 int error; 1437 1438 *fhpp = NULL; 1439 mp = vp->v_mount; 1440 fidsize = 0; 1441 error = VFS_VPTOFH(vp, NULL, &fidsize); 1442 KASSERT(error != 0); 1443 if (error != E2BIG) { 1444 goto out; 1445 } 1446 fhsize = FHANDLE_SIZE_FROM_FILEID_SIZE(fidsize); 1447 fhp = kmem_zalloc(fhsize, KM_SLEEP); 1448 if (fhp == NULL) { 1449 error = ENOMEM; 1450 goto out; 1451 } 1452 fhp->fh_fsid = mp->mnt_stat.f_fsidx; 1453 error = VFS_VPTOFH(vp, &fhp->fh_fid, &fidsize); 1454 if (error == 0) { 1455 KASSERT((FHANDLE_SIZE(fhp) == fhsize && 1456 FHANDLE_FILEID(fhp)->fid_len == fidsize)); 1457 *fhpp = fhp; 1458 } else { 1459 kmem_free(fhp, fhsize); 1460 } 1461 out: 1462 return error; 1463 } 1464 1465 void 1466 vfs_composefh_free(fhandle_t *fhp) 1467 { 1468 1469 vfs__fhfree(fhp); 1470 } 1471 1472 /* 1473 * vfs_fhtovp: lookup a vnode by a filehandle. 1474 */ 1475 1476 int 1477 vfs_fhtovp(fhandle_t *fhp, struct vnode **vpp) 1478 { 1479 struct mount *mp; 1480 int error; 1481 1482 *vpp = NULL; 1483 mp = vfs_getvfs(FHANDLE_FSID(fhp)); 1484 if (mp == NULL) { 1485 error = ESTALE; 1486 goto out; 1487 } 1488 if (mp->mnt_op->vfs_fhtovp == NULL) { 1489 error = EOPNOTSUPP; 1490 goto out; 1491 } 1492 error = VFS_FHTOVP(mp, FHANDLE_FILEID(fhp), vpp); 1493 out: 1494 return error; 1495 } 1496 1497 /* 1498 * vfs_copyinfh_alloc: allocate and copyin a filehandle, given 1499 * the needed size. 1500 */ 1501 1502 int 1503 vfs_copyinfh_alloc(const void *ufhp, size_t fhsize, fhandle_t **fhpp) 1504 { 1505 fhandle_t *fhp; 1506 int error; 1507 1508 *fhpp = NULL; 1509 if (fhsize > FHANDLE_SIZE_MAX) { 1510 return EINVAL; 1511 } 1512 if (fhsize < FHANDLE_SIZE_MIN) { 1513 return EINVAL; 1514 } 1515 again: 1516 fhp = kmem_alloc(fhsize, KM_SLEEP); 1517 if (fhp == NULL) { 1518 return ENOMEM; 1519 } 1520 error = copyin(ufhp, fhp, fhsize); 1521 if (error == 0) { 1522 /* XXX this check shouldn't be here */ 1523 if (FHANDLE_SIZE(fhp) == fhsize) { 1524 *fhpp = fhp; 1525 return 0; 1526 } else if (fhsize == NFSX_V2FH && FHANDLE_SIZE(fhp) < fhsize) { 1527 /* 1528 * a kludge for nfsv2 padded handles. 1529 */ 1530 size_t sz; 1531 1532 sz = FHANDLE_SIZE(fhp); 1533 kmem_free(fhp, fhsize); 1534 fhsize = sz; 1535 goto again; 1536 } else { 1537 /* 1538 * userland told us wrong size. 1539 */ 1540 error = EINVAL; 1541 } 1542 } 1543 kmem_free(fhp, fhsize); 1544 return error; 1545 } 1546 1547 void 1548 vfs_copyinfh_free(fhandle_t *fhp) 1549 { 1550 1551 vfs__fhfree(fhp); 1552 } 1553 1554 /* 1555 * Get file handle system call 1556 */ 1557 int 1558 sys___getfh30(struct lwp *l, const struct sys___getfh30_args *uap, register_t *retval) 1559 { 1560 /* { 1561 syscallarg(char *) fname; 1562 syscallarg(fhandle_t *) fhp; 1563 syscallarg(size_t *) fh_size; 1564 } */ 1565 struct vnode *vp; 1566 fhandle_t *fh; 1567 int error; 1568 struct nameidata nd; 1569 size_t sz; 1570 size_t usz; 1571 1572 /* 1573 * Must be super user 1574 */ 1575 error = kauth_authorize_system(l->l_cred, KAUTH_SYSTEM_FILEHANDLE, 1576 0, NULL, NULL, NULL); 1577 if (error) 1578 return (error); 1579 NDINIT(&nd, LOOKUP, FOLLOW | LOCKLEAF | TRYEMULROOT, UIO_USERSPACE, 1580 SCARG(uap, fname)); 1581 error = namei(&nd); 1582 if (error) 1583 return (error); 1584 vp = nd.ni_vp; 1585 error = vfs_composefh_alloc(vp, &fh); 1586 vput(vp); 1587 if (error != 0) { 1588 goto out; 1589 } 1590 error = copyin(SCARG(uap, fh_size), &usz, sizeof(size_t)); 1591 if (error != 0) { 1592 goto out; 1593 } 1594 sz = FHANDLE_SIZE(fh); 1595 error = copyout(&sz, SCARG(uap, fh_size), sizeof(size_t)); 1596 if (error != 0) { 1597 goto out; 1598 } 1599 if (usz >= sz) { 1600 error = copyout(fh, SCARG(uap, fhp), sz); 1601 } else { 1602 error = E2BIG; 1603 } 1604 out: 1605 vfs_composefh_free(fh); 1606 return (error); 1607 } 1608 1609 /* 1610 * Open a file given a file handle. 1611 * 1612 * Check permissions, allocate an open file structure, 1613 * and call the device open routine if any. 1614 */ 1615 1616 int 1617 dofhopen(struct lwp *l, const void *ufhp, size_t fhsize, int oflags, 1618 register_t *retval) 1619 { 1620 file_t *fp; 1621 struct vnode *vp = NULL; 1622 kauth_cred_t cred = l->l_cred; 1623 file_t *nfp; 1624 int type, indx, error=0; 1625 struct flock lf; 1626 struct vattr va; 1627 fhandle_t *fh; 1628 int flags; 1629 proc_t *p; 1630 1631 p = curproc; 1632 1633 /* 1634 * Must be super user 1635 */ 1636 if ((error = kauth_authorize_system(l->l_cred, KAUTH_SYSTEM_FILEHANDLE, 1637 0, NULL, NULL, NULL))) 1638 return (error); 1639 1640 flags = FFLAGS(oflags); 1641 if ((flags & (FREAD | FWRITE)) == 0) 1642 return (EINVAL); 1643 if ((flags & O_CREAT)) 1644 return (EINVAL); 1645 if ((error = fd_allocfile(&nfp, &indx)) != 0) 1646 return (error); 1647 fp = nfp; 1648 error = vfs_copyinfh_alloc(ufhp, fhsize, &fh); 1649 if (error != 0) { 1650 goto bad; 1651 } 1652 error = vfs_fhtovp(fh, &vp); 1653 if (error != 0) { 1654 goto bad; 1655 } 1656 1657 /* Now do an effective vn_open */ 1658 1659 if (vp->v_type == VSOCK) { 1660 error = EOPNOTSUPP; 1661 goto bad; 1662 } 1663 error = vn_openchk(vp, cred, flags); 1664 if (error != 0) 1665 goto bad; 1666 if (flags & O_TRUNC) { 1667 VOP_UNLOCK(vp); /* XXX */ 1668 vn_lock(vp, LK_EXCLUSIVE | LK_RETRY); /* XXX */ 1669 vattr_null(&va); 1670 va.va_size = 0; 1671 error = VOP_SETATTR(vp, &va, cred); 1672 if (error) 1673 goto bad; 1674 } 1675 if ((error = VOP_OPEN(vp, flags, cred)) != 0) 1676 goto bad; 1677 if (flags & FWRITE) { 1678 mutex_enter(&vp->v_interlock); 1679 vp->v_writecount++; 1680 mutex_exit(&vp->v_interlock); 1681 } 1682 1683 /* done with modified vn_open, now finish what sys_open does. */ 1684 1685 fp->f_flag = flags & FMASK; 1686 fp->f_type = DTYPE_VNODE; 1687 fp->f_ops = &vnops; 1688 fp->f_data = vp; 1689 if (flags & (O_EXLOCK | O_SHLOCK)) { 1690 lf.l_whence = SEEK_SET; 1691 lf.l_start = 0; 1692 lf.l_len = 0; 1693 if (flags & O_EXLOCK) 1694 lf.l_type = F_WRLCK; 1695 else 1696 lf.l_type = F_RDLCK; 1697 type = F_FLOCK; 1698 if ((flags & FNONBLOCK) == 0) 1699 type |= F_WAIT; 1700 VOP_UNLOCK(vp); 1701 error = VOP_ADVLOCK(vp, fp, F_SETLK, &lf, type); 1702 if (error) { 1703 (void) vn_close(vp, fp->f_flag, fp->f_cred); 1704 fd_abort(p, fp, indx); 1705 return (error); 1706 } 1707 vn_lock(vp, LK_EXCLUSIVE | LK_RETRY); 1708 atomic_or_uint(&fp->f_flag, FHASLOCK); 1709 } 1710 VOP_UNLOCK(vp); 1711 *retval = indx; 1712 fd_affix(p, fp, indx); 1713 vfs_copyinfh_free(fh); 1714 return (0); 1715 1716 bad: 1717 fd_abort(p, fp, indx); 1718 if (vp != NULL) 1719 vput(vp); 1720 vfs_copyinfh_free(fh); 1721 return (error); 1722 } 1723 1724 int 1725 sys___fhopen40(struct lwp *l, const struct sys___fhopen40_args *uap, register_t *retval) 1726 { 1727 /* { 1728 syscallarg(const void *) fhp; 1729 syscallarg(size_t) fh_size; 1730 syscallarg(int) flags; 1731 } */ 1732 1733 return dofhopen(l, SCARG(uap, fhp), SCARG(uap, fh_size), 1734 SCARG(uap, flags), retval); 1735 } 1736 1737 int 1738 do_fhstat(struct lwp *l, const void *ufhp, size_t fhsize, struct stat *sb) 1739 { 1740 int error; 1741 fhandle_t *fh; 1742 struct vnode *vp; 1743 1744 /* 1745 * Must be super user 1746 */ 1747 if ((error = kauth_authorize_system(l->l_cred, KAUTH_SYSTEM_FILEHANDLE, 1748 0, NULL, NULL, NULL))) 1749 return (error); 1750 1751 error = vfs_copyinfh_alloc(ufhp, fhsize, &fh); 1752 if (error != 0) 1753 return error; 1754 1755 error = vfs_fhtovp(fh, &vp); 1756 vfs_copyinfh_free(fh); 1757 if (error != 0) 1758 return error; 1759 1760 error = vn_stat(vp, sb); 1761 vput(vp); 1762 return error; 1763 } 1764 1765 1766 /* ARGSUSED */ 1767 int 1768 sys___fhstat50(struct lwp *l, const struct sys___fhstat50_args *uap, register_t *retval) 1769 { 1770 /* { 1771 syscallarg(const void *) fhp; 1772 syscallarg(size_t) fh_size; 1773 syscallarg(struct stat *) sb; 1774 } */ 1775 struct stat sb; 1776 int error; 1777 1778 error = do_fhstat(l, SCARG(uap, fhp), SCARG(uap, fh_size), &sb); 1779 if (error) 1780 return error; 1781 return copyout(&sb, SCARG(uap, sb), sizeof(sb)); 1782 } 1783 1784 int 1785 do_fhstatvfs(struct lwp *l, const void *ufhp, size_t fhsize, struct statvfs *sb, 1786 int flags) 1787 { 1788 fhandle_t *fh; 1789 struct mount *mp; 1790 struct vnode *vp; 1791 int error; 1792 1793 /* 1794 * Must be super user 1795 */ 1796 if ((error = kauth_authorize_system(l->l_cred, KAUTH_SYSTEM_FILEHANDLE, 1797 0, NULL, NULL, NULL))) 1798 return error; 1799 1800 error = vfs_copyinfh_alloc(ufhp, fhsize, &fh); 1801 if (error != 0) 1802 return error; 1803 1804 error = vfs_fhtovp(fh, &vp); 1805 vfs_copyinfh_free(fh); 1806 if (error != 0) 1807 return error; 1808 1809 mp = vp->v_mount; 1810 error = dostatvfs(mp, sb, l, flags, 1); 1811 vput(vp); 1812 return error; 1813 } 1814 1815 /* ARGSUSED */ 1816 int 1817 sys___fhstatvfs140(struct lwp *l, const struct sys___fhstatvfs140_args *uap, register_t *retval) 1818 { 1819 /* { 1820 syscallarg(const void *) fhp; 1821 syscallarg(size_t) fh_size; 1822 syscallarg(struct statvfs *) buf; 1823 syscallarg(int) flags; 1824 } */ 1825 struct statvfs *sb = STATVFSBUF_GET(); 1826 int error; 1827 1828 error = do_fhstatvfs(l, SCARG(uap, fhp), SCARG(uap, fh_size), sb, 1829 SCARG(uap, flags)); 1830 if (error == 0) 1831 error = copyout(sb, SCARG(uap, buf), sizeof(*sb)); 1832 STATVFSBUF_PUT(sb); 1833 return error; 1834 } 1835 1836 /* 1837 * Create a special file. 1838 */ 1839 /* ARGSUSED */ 1840 int 1841 sys___mknod50(struct lwp *l, const struct sys___mknod50_args *uap, 1842 register_t *retval) 1843 { 1844 /* { 1845 syscallarg(const char *) path; 1846 syscallarg(mode_t) mode; 1847 syscallarg(dev_t) dev; 1848 } */ 1849 return do_sys_mknod(l, SCARG(uap, path), SCARG(uap, mode), 1850 SCARG(uap, dev), retval, UIO_USERSPACE); 1851 } 1852 1853 int 1854 do_sys_mknod(struct lwp *l, const char *pathname, mode_t mode, dev_t dev, 1855 register_t *retval, enum uio_seg seg) 1856 { 1857 struct proc *p = l->l_proc; 1858 struct vnode *vp; 1859 struct vattr vattr; 1860 int error, optype; 1861 struct nameidata nd; 1862 char *path; 1863 const char *cpath; 1864 1865 if ((error = kauth_authorize_system(l->l_cred, KAUTH_SYSTEM_MKNOD, 1866 0, NULL, NULL, NULL)) != 0) 1867 return (error); 1868 1869 optype = VOP_MKNOD_DESCOFFSET; 1870 1871 VERIEXEC_PATH_GET(pathname, seg, cpath, path); 1872 NDINIT(&nd, CREATE, LOCKPARENT | TRYEMULROOT, seg, cpath); 1873 1874 if ((error = namei(&nd)) != 0) 1875 goto out; 1876 vp = nd.ni_vp; 1877 if (vp != NULL) 1878 error = EEXIST; 1879 else { 1880 vattr_null(&vattr); 1881 /* We will read cwdi->cwdi_cmask unlocked. */ 1882 vattr.va_mode = (mode & ALLPERMS) &~ p->p_cwdi->cwdi_cmask; 1883 vattr.va_rdev = dev; 1884 1885 switch (mode & S_IFMT) { 1886 case S_IFMT: /* used by badsect to flag bad sectors */ 1887 vattr.va_type = VBAD; 1888 break; 1889 case S_IFCHR: 1890 vattr.va_type = VCHR; 1891 break; 1892 case S_IFBLK: 1893 vattr.va_type = VBLK; 1894 break; 1895 case S_IFWHT: 1896 optype = VOP_WHITEOUT_DESCOFFSET; 1897 break; 1898 case S_IFREG: 1899 #if NVERIEXEC > 0 1900 error = veriexec_openchk(l, nd.ni_vp, nd.ni_dirp, 1901 O_CREAT); 1902 #endif /* NVERIEXEC > 0 */ 1903 vattr.va_type = VREG; 1904 vattr.va_rdev = VNOVAL; 1905 optype = VOP_CREATE_DESCOFFSET; 1906 break; 1907 default: 1908 error = EINVAL; 1909 break; 1910 } 1911 } 1912 if (!error) { 1913 switch (optype) { 1914 case VOP_WHITEOUT_DESCOFFSET: 1915 error = VOP_WHITEOUT(nd.ni_dvp, &nd.ni_cnd, CREATE); 1916 if (error) 1917 VOP_ABORTOP(nd.ni_dvp, &nd.ni_cnd); 1918 vput(nd.ni_dvp); 1919 break; 1920 1921 case VOP_MKNOD_DESCOFFSET: 1922 error = VOP_MKNOD(nd.ni_dvp, &nd.ni_vp, 1923 &nd.ni_cnd, &vattr); 1924 if (error == 0) 1925 vput(nd.ni_vp); 1926 break; 1927 1928 case VOP_CREATE_DESCOFFSET: 1929 error = VOP_CREATE(nd.ni_dvp, &nd.ni_vp, 1930 &nd.ni_cnd, &vattr); 1931 if (error == 0) 1932 vput(nd.ni_vp); 1933 break; 1934 } 1935 } else { 1936 VOP_ABORTOP(nd.ni_dvp, &nd.ni_cnd); 1937 if (nd.ni_dvp == vp) 1938 vrele(nd.ni_dvp); 1939 else 1940 vput(nd.ni_dvp); 1941 if (vp) 1942 vrele(vp); 1943 } 1944 out: 1945 VERIEXEC_PATH_PUT(path); 1946 return (error); 1947 } 1948 1949 /* 1950 * Create a named pipe. 1951 */ 1952 /* ARGSUSED */ 1953 int 1954 sys_mkfifo(struct lwp *l, const struct sys_mkfifo_args *uap, register_t *retval) 1955 { 1956 /* { 1957 syscallarg(const char *) path; 1958 syscallarg(int) mode; 1959 } */ 1960 struct proc *p = l->l_proc; 1961 struct vattr vattr; 1962 int error; 1963 struct nameidata nd; 1964 1965 NDINIT(&nd, CREATE, LOCKPARENT | TRYEMULROOT, UIO_USERSPACE, 1966 SCARG(uap, path)); 1967 if ((error = namei(&nd)) != 0) 1968 return (error); 1969 if (nd.ni_vp != NULL) { 1970 VOP_ABORTOP(nd.ni_dvp, &nd.ni_cnd); 1971 if (nd.ni_dvp == nd.ni_vp) 1972 vrele(nd.ni_dvp); 1973 else 1974 vput(nd.ni_dvp); 1975 vrele(nd.ni_vp); 1976 return (EEXIST); 1977 } 1978 vattr_null(&vattr); 1979 vattr.va_type = VFIFO; 1980 /* We will read cwdi->cwdi_cmask unlocked. */ 1981 vattr.va_mode = (SCARG(uap, mode) & ALLPERMS) &~ p->p_cwdi->cwdi_cmask; 1982 error = VOP_MKNOD(nd.ni_dvp, &nd.ni_vp, &nd.ni_cnd, &vattr); 1983 if (error == 0) 1984 vput(nd.ni_vp); 1985 return (error); 1986 } 1987 1988 /* 1989 * Make a hard file link. 1990 */ 1991 /* ARGSUSED */ 1992 int 1993 sys_link(struct lwp *l, const struct sys_link_args *uap, register_t *retval) 1994 { 1995 /* { 1996 syscallarg(const char *) path; 1997 syscallarg(const char *) link; 1998 } */ 1999 struct vnode *vp; 2000 struct nameidata nd; 2001 int error; 2002 2003 error = namei_simple_user(SCARG(uap, path), 2004 NSM_FOLLOW_TRYEMULROOT, &vp); 2005 if (error != 0) 2006 return (error); 2007 NDINIT(&nd, CREATE, LOCKPARENT | TRYEMULROOT, UIO_USERSPACE, 2008 SCARG(uap, link)); 2009 if ((error = namei(&nd)) != 0) 2010 goto out; 2011 if (nd.ni_vp) { 2012 VOP_ABORTOP(nd.ni_dvp, &nd.ni_cnd); 2013 if (nd.ni_dvp == nd.ni_vp) 2014 vrele(nd.ni_dvp); 2015 else 2016 vput(nd.ni_dvp); 2017 vrele(nd.ni_vp); 2018 error = EEXIST; 2019 goto out; 2020 } 2021 error = VOP_LINK(nd.ni_dvp, vp, &nd.ni_cnd); 2022 out: 2023 vrele(vp); 2024 return (error); 2025 } 2026 2027 int 2028 do_sys_symlink(const char *patharg, const char *link, enum uio_seg seg) 2029 { 2030 struct proc *p = curproc; 2031 struct vattr vattr; 2032 char *path; 2033 int error; 2034 struct nameidata nd; 2035 2036 path = PNBUF_GET(); 2037 if (seg == UIO_USERSPACE) { 2038 if ((error = copyinstr(patharg, path, MAXPATHLEN, NULL)) != 0) 2039 goto out; 2040 } else { 2041 KASSERT(strlen(patharg) < MAXPATHLEN); 2042 strcpy(path, patharg); 2043 } 2044 NDINIT(&nd, CREATE, LOCKPARENT | TRYEMULROOT, seg, link); 2045 if ((error = namei(&nd)) != 0) 2046 goto out; 2047 if (nd.ni_vp) { 2048 VOP_ABORTOP(nd.ni_dvp, &nd.ni_cnd); 2049 if (nd.ni_dvp == nd.ni_vp) 2050 vrele(nd.ni_dvp); 2051 else 2052 vput(nd.ni_dvp); 2053 vrele(nd.ni_vp); 2054 error = EEXIST; 2055 goto out; 2056 } 2057 vattr_null(&vattr); 2058 vattr.va_type = VLNK; 2059 /* We will read cwdi->cwdi_cmask unlocked. */ 2060 vattr.va_mode = ACCESSPERMS &~ p->p_cwdi->cwdi_cmask; 2061 error = VOP_SYMLINK(nd.ni_dvp, &nd.ni_vp, &nd.ni_cnd, &vattr, path); 2062 if (error == 0) 2063 vput(nd.ni_vp); 2064 out: 2065 PNBUF_PUT(path); 2066 return (error); 2067 } 2068 2069 /* 2070 * Make a symbolic link. 2071 */ 2072 /* ARGSUSED */ 2073 int 2074 sys_symlink(struct lwp *l, const struct sys_symlink_args *uap, register_t *retval) 2075 { 2076 /* { 2077 syscallarg(const char *) path; 2078 syscallarg(const char *) link; 2079 } */ 2080 2081 return do_sys_symlink(SCARG(uap, path), SCARG(uap, link), 2082 UIO_USERSPACE); 2083 } 2084 2085 /* 2086 * Delete a whiteout from the filesystem. 2087 */ 2088 /* ARGSUSED */ 2089 int 2090 sys_undelete(struct lwp *l, const struct sys_undelete_args *uap, register_t *retval) 2091 { 2092 /* { 2093 syscallarg(const char *) path; 2094 } */ 2095 int error; 2096 struct nameidata nd; 2097 2098 NDINIT(&nd, DELETE, LOCKPARENT | DOWHITEOUT | TRYEMULROOT, 2099 UIO_USERSPACE, SCARG(uap, path)); 2100 error = namei(&nd); 2101 if (error) 2102 return (error); 2103 2104 if (nd.ni_vp != NULLVP || !(nd.ni_cnd.cn_flags & ISWHITEOUT)) { 2105 VOP_ABORTOP(nd.ni_dvp, &nd.ni_cnd); 2106 if (nd.ni_dvp == nd.ni_vp) 2107 vrele(nd.ni_dvp); 2108 else 2109 vput(nd.ni_dvp); 2110 if (nd.ni_vp) 2111 vrele(nd.ni_vp); 2112 return (EEXIST); 2113 } 2114 if ((error = VOP_WHITEOUT(nd.ni_dvp, &nd.ni_cnd, DELETE)) != 0) 2115 VOP_ABORTOP(nd.ni_dvp, &nd.ni_cnd); 2116 vput(nd.ni_dvp); 2117 return (error); 2118 } 2119 2120 /* 2121 * Delete a name from the filesystem. 2122 */ 2123 /* ARGSUSED */ 2124 int 2125 sys_unlink(struct lwp *l, const struct sys_unlink_args *uap, register_t *retval) 2126 { 2127 /* { 2128 syscallarg(const char *) path; 2129 } */ 2130 2131 return do_sys_unlink(SCARG(uap, path), UIO_USERSPACE); 2132 } 2133 2134 int 2135 do_sys_unlink(const char *arg, enum uio_seg seg) 2136 { 2137 struct vnode *vp; 2138 int error; 2139 struct nameidata nd; 2140 char *path; 2141 const char *cpath; 2142 2143 VERIEXEC_PATH_GET(arg, seg, cpath, path); 2144 NDINIT(&nd, DELETE, LOCKPARENT | LOCKLEAF | TRYEMULROOT, seg, cpath); 2145 2146 if ((error = namei(&nd)) != 0) 2147 goto out; 2148 vp = nd.ni_vp; 2149 2150 /* 2151 * The root of a mounted filesystem cannot be deleted. 2152 */ 2153 if (vp->v_vflag & VV_ROOT) { 2154 VOP_ABORTOP(nd.ni_dvp, &nd.ni_cnd); 2155 if (nd.ni_dvp == vp) 2156 vrele(nd.ni_dvp); 2157 else 2158 vput(nd.ni_dvp); 2159 vput(vp); 2160 error = EBUSY; 2161 goto out; 2162 } 2163 2164 #if NVERIEXEC > 0 2165 /* Handle remove requests for veriexec entries. */ 2166 if ((error = veriexec_removechk(curlwp, nd.ni_vp, nd.ni_dirp)) != 0) { 2167 VOP_ABORTOP(nd.ni_dvp, &nd.ni_cnd); 2168 if (nd.ni_dvp == vp) 2169 vrele(nd.ni_dvp); 2170 else 2171 vput(nd.ni_dvp); 2172 vput(vp); 2173 goto out; 2174 } 2175 #endif /* NVERIEXEC > 0 */ 2176 2177 #ifdef FILEASSOC 2178 (void)fileassoc_file_delete(vp); 2179 #endif /* FILEASSOC */ 2180 error = VOP_REMOVE(nd.ni_dvp, nd.ni_vp, &nd.ni_cnd); 2181 out: 2182 VERIEXEC_PATH_PUT(path); 2183 return (error); 2184 } 2185 2186 /* 2187 * Reposition read/write file offset. 2188 */ 2189 int 2190 sys_lseek(struct lwp *l, const struct sys_lseek_args *uap, register_t *retval) 2191 { 2192 /* { 2193 syscallarg(int) fd; 2194 syscallarg(int) pad; 2195 syscallarg(off_t) offset; 2196 syscallarg(int) whence; 2197 } */ 2198 kauth_cred_t cred = l->l_cred; 2199 file_t *fp; 2200 struct vnode *vp; 2201 struct vattr vattr; 2202 off_t newoff; 2203 int error, fd; 2204 2205 fd = SCARG(uap, fd); 2206 2207 if ((fp = fd_getfile(fd)) == NULL) 2208 return (EBADF); 2209 2210 vp = fp->f_data; 2211 if (fp->f_type != DTYPE_VNODE || vp->v_type == VFIFO) { 2212 error = ESPIPE; 2213 goto out; 2214 } 2215 2216 switch (SCARG(uap, whence)) { 2217 case SEEK_CUR: 2218 newoff = fp->f_offset + SCARG(uap, offset); 2219 break; 2220 case SEEK_END: 2221 vn_lock(vp, LK_SHARED | LK_RETRY); 2222 error = VOP_GETATTR(vp, &vattr, cred); 2223 VOP_UNLOCK(vp); 2224 if (error) { 2225 goto out; 2226 } 2227 newoff = SCARG(uap, offset) + vattr.va_size; 2228 break; 2229 case SEEK_SET: 2230 newoff = SCARG(uap, offset); 2231 break; 2232 default: 2233 error = EINVAL; 2234 goto out; 2235 } 2236 if ((error = VOP_SEEK(vp, fp->f_offset, newoff, cred)) == 0) { 2237 *(off_t *)retval = fp->f_offset = newoff; 2238 } 2239 out: 2240 fd_putfile(fd); 2241 return (error); 2242 } 2243 2244 /* 2245 * Positional read system call. 2246 */ 2247 int 2248 sys_pread(struct lwp *l, const struct sys_pread_args *uap, register_t *retval) 2249 { 2250 /* { 2251 syscallarg(int) fd; 2252 syscallarg(void *) buf; 2253 syscallarg(size_t) nbyte; 2254 syscallarg(off_t) offset; 2255 } */ 2256 file_t *fp; 2257 struct vnode *vp; 2258 off_t offset; 2259 int error, fd = SCARG(uap, fd); 2260 2261 if ((fp = fd_getfile(fd)) == NULL) 2262 return (EBADF); 2263 2264 if ((fp->f_flag & FREAD) == 0) { 2265 fd_putfile(fd); 2266 return (EBADF); 2267 } 2268 2269 vp = fp->f_data; 2270 if (fp->f_type != DTYPE_VNODE || vp->v_type == VFIFO) { 2271 error = ESPIPE; 2272 goto out; 2273 } 2274 2275 offset = SCARG(uap, offset); 2276 2277 /* 2278 * XXX This works because no file systems actually 2279 * XXX take any action on the seek operation. 2280 */ 2281 if ((error = VOP_SEEK(vp, fp->f_offset, offset, fp->f_cred)) != 0) 2282 goto out; 2283 2284 /* dofileread() will unuse the descriptor for us */ 2285 return (dofileread(fd, fp, SCARG(uap, buf), SCARG(uap, nbyte), 2286 &offset, 0, retval)); 2287 2288 out: 2289 fd_putfile(fd); 2290 return (error); 2291 } 2292 2293 /* 2294 * Positional scatter read system call. 2295 */ 2296 int 2297 sys_preadv(struct lwp *l, const struct sys_preadv_args *uap, register_t *retval) 2298 { 2299 /* { 2300 syscallarg(int) fd; 2301 syscallarg(const struct iovec *) iovp; 2302 syscallarg(int) iovcnt; 2303 syscallarg(off_t) offset; 2304 } */ 2305 off_t offset = SCARG(uap, offset); 2306 2307 return do_filereadv(SCARG(uap, fd), SCARG(uap, iovp), 2308 SCARG(uap, iovcnt), &offset, 0, retval); 2309 } 2310 2311 /* 2312 * Positional write system call. 2313 */ 2314 int 2315 sys_pwrite(struct lwp *l, const struct sys_pwrite_args *uap, register_t *retval) 2316 { 2317 /* { 2318 syscallarg(int) fd; 2319 syscallarg(const void *) buf; 2320 syscallarg(size_t) nbyte; 2321 syscallarg(off_t) offset; 2322 } */ 2323 file_t *fp; 2324 struct vnode *vp; 2325 off_t offset; 2326 int error, fd = SCARG(uap, fd); 2327 2328 if ((fp = fd_getfile(fd)) == NULL) 2329 return (EBADF); 2330 2331 if ((fp->f_flag & FWRITE) == 0) { 2332 fd_putfile(fd); 2333 return (EBADF); 2334 } 2335 2336 vp = fp->f_data; 2337 if (fp->f_type != DTYPE_VNODE || vp->v_type == VFIFO) { 2338 error = ESPIPE; 2339 goto out; 2340 } 2341 2342 offset = SCARG(uap, offset); 2343 2344 /* 2345 * XXX This works because no file systems actually 2346 * XXX take any action on the seek operation. 2347 */ 2348 if ((error = VOP_SEEK(vp, fp->f_offset, offset, fp->f_cred)) != 0) 2349 goto out; 2350 2351 /* dofilewrite() will unuse the descriptor for us */ 2352 return (dofilewrite(fd, fp, SCARG(uap, buf), SCARG(uap, nbyte), 2353 &offset, 0, retval)); 2354 2355 out: 2356 fd_putfile(fd); 2357 return (error); 2358 } 2359 2360 /* 2361 * Positional gather write system call. 2362 */ 2363 int 2364 sys_pwritev(struct lwp *l, const struct sys_pwritev_args *uap, register_t *retval) 2365 { 2366 /* { 2367 syscallarg(int) fd; 2368 syscallarg(const struct iovec *) iovp; 2369 syscallarg(int) iovcnt; 2370 syscallarg(off_t) offset; 2371 } */ 2372 off_t offset = SCARG(uap, offset); 2373 2374 return do_filewritev(SCARG(uap, fd), SCARG(uap, iovp), 2375 SCARG(uap, iovcnt), &offset, 0, retval); 2376 } 2377 2378 /* 2379 * Check access permissions. 2380 */ 2381 int 2382 sys_access(struct lwp *l, const struct sys_access_args *uap, register_t *retval) 2383 { 2384 /* { 2385 syscallarg(const char *) path; 2386 syscallarg(int) flags; 2387 } */ 2388 kauth_cred_t cred; 2389 struct vnode *vp; 2390 int error, flags; 2391 struct nameidata nd; 2392 2393 cred = kauth_cred_dup(l->l_cred); 2394 kauth_cred_seteuid(cred, kauth_cred_getuid(l->l_cred)); 2395 kauth_cred_setegid(cred, kauth_cred_getgid(l->l_cred)); 2396 NDINIT(&nd, LOOKUP, FOLLOW | LOCKLEAF | TRYEMULROOT, UIO_USERSPACE, 2397 SCARG(uap, path)); 2398 /* Override default credentials */ 2399 nd.ni_cnd.cn_cred = cred; 2400 if ((error = namei(&nd)) != 0) 2401 goto out; 2402 vp = nd.ni_vp; 2403 2404 /* Flags == 0 means only check for existence. */ 2405 if (SCARG(uap, flags)) { 2406 flags = 0; 2407 if (SCARG(uap, flags) & R_OK) 2408 flags |= VREAD; 2409 if (SCARG(uap, flags) & W_OK) 2410 flags |= VWRITE; 2411 if (SCARG(uap, flags) & X_OK) 2412 flags |= VEXEC; 2413 2414 error = VOP_ACCESS(vp, flags, cred); 2415 if (!error && (flags & VWRITE)) 2416 error = vn_writechk(vp); 2417 } 2418 vput(vp); 2419 out: 2420 kauth_cred_free(cred); 2421 return (error); 2422 } 2423 2424 /* 2425 * Common code for all sys_stat functions, including compat versions. 2426 */ 2427 int 2428 do_sys_stat(const char *path, unsigned int nd_flags, struct stat *sb) 2429 { 2430 int error; 2431 struct nameidata nd; 2432 2433 NDINIT(&nd, LOOKUP, nd_flags | LOCKLEAF | TRYEMULROOT, 2434 UIO_USERSPACE, path); 2435 error = namei(&nd); 2436 if (error != 0) 2437 return error; 2438 error = vn_stat(nd.ni_vp, sb); 2439 vput(nd.ni_vp); 2440 return error; 2441 } 2442 2443 /* 2444 * Get file status; this version follows links. 2445 */ 2446 /* ARGSUSED */ 2447 int 2448 sys___stat50(struct lwp *l, const struct sys___stat50_args *uap, register_t *retval) 2449 { 2450 /* { 2451 syscallarg(const char *) path; 2452 syscallarg(struct stat *) ub; 2453 } */ 2454 struct stat sb; 2455 int error; 2456 2457 error = do_sys_stat(SCARG(uap, path), FOLLOW, &sb); 2458 if (error) 2459 return error; 2460 return copyout(&sb, SCARG(uap, ub), sizeof(sb)); 2461 } 2462 2463 /* 2464 * Get file status; this version does not follow links. 2465 */ 2466 /* ARGSUSED */ 2467 int 2468 sys___lstat50(struct lwp *l, const struct sys___lstat50_args *uap, register_t *retval) 2469 { 2470 /* { 2471 syscallarg(const char *) path; 2472 syscallarg(struct stat *) ub; 2473 } */ 2474 struct stat sb; 2475 int error; 2476 2477 error = do_sys_stat(SCARG(uap, path), NOFOLLOW, &sb); 2478 if (error) 2479 return error; 2480 return copyout(&sb, SCARG(uap, ub), sizeof(sb)); 2481 } 2482 2483 /* 2484 * Get configurable pathname variables. 2485 */ 2486 /* ARGSUSED */ 2487 int 2488 sys_pathconf(struct lwp *l, const struct sys_pathconf_args *uap, register_t *retval) 2489 { 2490 /* { 2491 syscallarg(const char *) path; 2492 syscallarg(int) name; 2493 } */ 2494 int error; 2495 struct nameidata nd; 2496 2497 NDINIT(&nd, LOOKUP, FOLLOW | LOCKLEAF | TRYEMULROOT, UIO_USERSPACE, 2498 SCARG(uap, path)); 2499 if ((error = namei(&nd)) != 0) 2500 return (error); 2501 error = VOP_PATHCONF(nd.ni_vp, SCARG(uap, name), retval); 2502 vput(nd.ni_vp); 2503 return (error); 2504 } 2505 2506 /* 2507 * Return target name of a symbolic link. 2508 */ 2509 /* ARGSUSED */ 2510 int 2511 sys_readlink(struct lwp *l, const struct sys_readlink_args *uap, register_t *retval) 2512 { 2513 /* { 2514 syscallarg(const char *) path; 2515 syscallarg(char *) buf; 2516 syscallarg(size_t) count; 2517 } */ 2518 struct vnode *vp; 2519 struct iovec aiov; 2520 struct uio auio; 2521 int error; 2522 struct nameidata nd; 2523 2524 NDINIT(&nd, LOOKUP, NOFOLLOW | LOCKLEAF | TRYEMULROOT, UIO_USERSPACE, 2525 SCARG(uap, path)); 2526 if ((error = namei(&nd)) != 0) 2527 return (error); 2528 vp = nd.ni_vp; 2529 if (vp->v_type != VLNK) 2530 error = EINVAL; 2531 else if (!(vp->v_mount->mnt_flag & MNT_SYMPERM) || 2532 (error = VOP_ACCESS(vp, VREAD, l->l_cred)) == 0) { 2533 aiov.iov_base = SCARG(uap, buf); 2534 aiov.iov_len = SCARG(uap, count); 2535 auio.uio_iov = &aiov; 2536 auio.uio_iovcnt = 1; 2537 auio.uio_offset = 0; 2538 auio.uio_rw = UIO_READ; 2539 KASSERT(l == curlwp); 2540 auio.uio_vmspace = l->l_proc->p_vmspace; 2541 auio.uio_resid = SCARG(uap, count); 2542 error = VOP_READLINK(vp, &auio, l->l_cred); 2543 } 2544 vput(vp); 2545 *retval = SCARG(uap, count) - auio.uio_resid; 2546 return (error); 2547 } 2548 2549 /* 2550 * Change flags of a file given a path name. 2551 */ 2552 /* ARGSUSED */ 2553 int 2554 sys_chflags(struct lwp *l, const struct sys_chflags_args *uap, register_t *retval) 2555 { 2556 /* { 2557 syscallarg(const char *) path; 2558 syscallarg(u_long) flags; 2559 } */ 2560 struct vnode *vp; 2561 int error; 2562 2563 error = namei_simple_user(SCARG(uap, path), 2564 NSM_FOLLOW_TRYEMULROOT, &vp); 2565 if (error != 0) 2566 return (error); 2567 error = change_flags(vp, SCARG(uap, flags), l); 2568 vput(vp); 2569 return (error); 2570 } 2571 2572 /* 2573 * Change flags of a file given a file descriptor. 2574 */ 2575 /* ARGSUSED */ 2576 int 2577 sys_fchflags(struct lwp *l, const struct sys_fchflags_args *uap, register_t *retval) 2578 { 2579 /* { 2580 syscallarg(int) fd; 2581 syscallarg(u_long) flags; 2582 } */ 2583 struct vnode *vp; 2584 file_t *fp; 2585 int error; 2586 2587 /* fd_getvnode() will use the descriptor for us */ 2588 if ((error = fd_getvnode(SCARG(uap, fd), &fp)) != 0) 2589 return (error); 2590 vp = fp->f_data; 2591 error = change_flags(vp, SCARG(uap, flags), l); 2592 VOP_UNLOCK(vp); 2593 fd_putfile(SCARG(uap, fd)); 2594 return (error); 2595 } 2596 2597 /* 2598 * Change flags of a file given a path name; this version does 2599 * not follow links. 2600 */ 2601 int 2602 sys_lchflags(struct lwp *l, const struct sys_lchflags_args *uap, register_t *retval) 2603 { 2604 /* { 2605 syscallarg(const char *) path; 2606 syscallarg(u_long) flags; 2607 } */ 2608 struct vnode *vp; 2609 int error; 2610 2611 error = namei_simple_user(SCARG(uap, path), 2612 NSM_NOFOLLOW_TRYEMULROOT, &vp); 2613 if (error != 0) 2614 return (error); 2615 error = change_flags(vp, SCARG(uap, flags), l); 2616 vput(vp); 2617 return (error); 2618 } 2619 2620 /* 2621 * Common routine to change flags of a file. 2622 */ 2623 int 2624 change_flags(struct vnode *vp, u_long flags, struct lwp *l) 2625 { 2626 struct vattr vattr; 2627 int error; 2628 2629 vn_lock(vp, LK_EXCLUSIVE | LK_RETRY); 2630 /* 2631 * Non-superusers cannot change the flags on devices, even if they 2632 * own them. 2633 */ 2634 if (kauth_authorize_generic(l->l_cred, KAUTH_GENERIC_ISSUSER, NULL)) { 2635 if ((error = VOP_GETATTR(vp, &vattr, l->l_cred)) != 0) 2636 goto out; 2637 if (vattr.va_type == VCHR || vattr.va_type == VBLK) { 2638 error = EINVAL; 2639 goto out; 2640 } 2641 } 2642 vattr_null(&vattr); 2643 vattr.va_flags = flags; 2644 error = VOP_SETATTR(vp, &vattr, l->l_cred); 2645 out: 2646 return (error); 2647 } 2648 2649 /* 2650 * Change mode of a file given path name; this version follows links. 2651 */ 2652 /* ARGSUSED */ 2653 int 2654 sys_chmod(struct lwp *l, const struct sys_chmod_args *uap, register_t *retval) 2655 { 2656 /* { 2657 syscallarg(const char *) path; 2658 syscallarg(int) mode; 2659 } */ 2660 int error; 2661 struct vnode *vp; 2662 2663 error = namei_simple_user(SCARG(uap, path), 2664 NSM_FOLLOW_TRYEMULROOT, &vp); 2665 if (error != 0) 2666 return (error); 2667 2668 error = change_mode(vp, SCARG(uap, mode), l); 2669 2670 vrele(vp); 2671 return (error); 2672 } 2673 2674 /* 2675 * Change mode of a file given a file descriptor. 2676 */ 2677 /* ARGSUSED */ 2678 int 2679 sys_fchmod(struct lwp *l, const struct sys_fchmod_args *uap, register_t *retval) 2680 { 2681 /* { 2682 syscallarg(int) fd; 2683 syscallarg(int) mode; 2684 } */ 2685 file_t *fp; 2686 int error; 2687 2688 /* fd_getvnode() will use the descriptor for us */ 2689 if ((error = fd_getvnode(SCARG(uap, fd), &fp)) != 0) 2690 return (error); 2691 error = change_mode(fp->f_data, SCARG(uap, mode), l); 2692 fd_putfile(SCARG(uap, fd)); 2693 return (error); 2694 } 2695 2696 /* 2697 * Change mode of a file given path name; this version does not follow links. 2698 */ 2699 /* ARGSUSED */ 2700 int 2701 sys_lchmod(struct lwp *l, const struct sys_lchmod_args *uap, register_t *retval) 2702 { 2703 /* { 2704 syscallarg(const char *) path; 2705 syscallarg(int) mode; 2706 } */ 2707 int error; 2708 struct vnode *vp; 2709 2710 error = namei_simple_user(SCARG(uap, path), 2711 NSM_NOFOLLOW_TRYEMULROOT, &vp); 2712 if (error != 0) 2713 return (error); 2714 2715 error = change_mode(vp, SCARG(uap, mode), l); 2716 2717 vrele(vp); 2718 return (error); 2719 } 2720 2721 /* 2722 * Common routine to set mode given a vnode. 2723 */ 2724 static int 2725 change_mode(struct vnode *vp, int mode, struct lwp *l) 2726 { 2727 struct vattr vattr; 2728 int error; 2729 2730 vn_lock(vp, LK_EXCLUSIVE | LK_RETRY); 2731 vattr_null(&vattr); 2732 vattr.va_mode = mode & ALLPERMS; 2733 error = VOP_SETATTR(vp, &vattr, l->l_cred); 2734 VOP_UNLOCK(vp); 2735 return (error); 2736 } 2737 2738 /* 2739 * Set ownership given a path name; this version follows links. 2740 */ 2741 /* ARGSUSED */ 2742 int 2743 sys_chown(struct lwp *l, const struct sys_chown_args *uap, register_t *retval) 2744 { 2745 /* { 2746 syscallarg(const char *) path; 2747 syscallarg(uid_t) uid; 2748 syscallarg(gid_t) gid; 2749 } */ 2750 int error; 2751 struct vnode *vp; 2752 2753 error = namei_simple_user(SCARG(uap, path), 2754 NSM_FOLLOW_TRYEMULROOT, &vp); 2755 if (error != 0) 2756 return (error); 2757 2758 error = change_owner(vp, SCARG(uap, uid), SCARG(uap, gid), l, 0); 2759 2760 vrele(vp); 2761 return (error); 2762 } 2763 2764 /* 2765 * Set ownership given a path name; this version follows links. 2766 * Provides POSIX semantics. 2767 */ 2768 /* ARGSUSED */ 2769 int 2770 sys___posix_chown(struct lwp *l, const struct sys___posix_chown_args *uap, register_t *retval) 2771 { 2772 /* { 2773 syscallarg(const char *) path; 2774 syscallarg(uid_t) uid; 2775 syscallarg(gid_t) gid; 2776 } */ 2777 int error; 2778 struct vnode *vp; 2779 2780 error = namei_simple_user(SCARG(uap, path), 2781 NSM_FOLLOW_TRYEMULROOT, &vp); 2782 if (error != 0) 2783 return (error); 2784 2785 error = change_owner(vp, SCARG(uap, uid), SCARG(uap, gid), l, 1); 2786 2787 vrele(vp); 2788 return (error); 2789 } 2790 2791 /* 2792 * Set ownership given a file descriptor. 2793 */ 2794 /* ARGSUSED */ 2795 int 2796 sys_fchown(struct lwp *l, const struct sys_fchown_args *uap, register_t *retval) 2797 { 2798 /* { 2799 syscallarg(int) fd; 2800 syscallarg(uid_t) uid; 2801 syscallarg(gid_t) gid; 2802 } */ 2803 int error; 2804 file_t *fp; 2805 2806 /* fd_getvnode() will use the descriptor for us */ 2807 if ((error = fd_getvnode(SCARG(uap, fd), &fp)) != 0) 2808 return (error); 2809 error = change_owner(fp->f_data, SCARG(uap, uid), SCARG(uap, gid), 2810 l, 0); 2811 fd_putfile(SCARG(uap, fd)); 2812 return (error); 2813 } 2814 2815 /* 2816 * Set ownership given a file descriptor, providing POSIX/XPG semantics. 2817 */ 2818 /* ARGSUSED */ 2819 int 2820 sys___posix_fchown(struct lwp *l, const struct sys___posix_fchown_args *uap, register_t *retval) 2821 { 2822 /* { 2823 syscallarg(int) fd; 2824 syscallarg(uid_t) uid; 2825 syscallarg(gid_t) gid; 2826 } */ 2827 int error; 2828 file_t *fp; 2829 2830 /* fd_getvnode() will use the descriptor for us */ 2831 if ((error = fd_getvnode(SCARG(uap, fd), &fp)) != 0) 2832 return (error); 2833 error = change_owner(fp->f_data, SCARG(uap, uid), SCARG(uap, gid), 2834 l, 1); 2835 fd_putfile(SCARG(uap, fd)); 2836 return (error); 2837 } 2838 2839 /* 2840 * Set ownership given a path name; this version does not follow links. 2841 */ 2842 /* ARGSUSED */ 2843 int 2844 sys_lchown(struct lwp *l, const struct sys_lchown_args *uap, register_t *retval) 2845 { 2846 /* { 2847 syscallarg(const char *) path; 2848 syscallarg(uid_t) uid; 2849 syscallarg(gid_t) gid; 2850 } */ 2851 int error; 2852 struct vnode *vp; 2853 2854 error = namei_simple_user(SCARG(uap, path), 2855 NSM_NOFOLLOW_TRYEMULROOT, &vp); 2856 if (error != 0) 2857 return (error); 2858 2859 error = change_owner(vp, SCARG(uap, uid), SCARG(uap, gid), l, 0); 2860 2861 vrele(vp); 2862 return (error); 2863 } 2864 2865 /* 2866 * Set ownership given a path name; this version does not follow links. 2867 * Provides POSIX/XPG semantics. 2868 */ 2869 /* ARGSUSED */ 2870 int 2871 sys___posix_lchown(struct lwp *l, const struct sys___posix_lchown_args *uap, register_t *retval) 2872 { 2873 /* { 2874 syscallarg(const char *) path; 2875 syscallarg(uid_t) uid; 2876 syscallarg(gid_t) gid; 2877 } */ 2878 int error; 2879 struct vnode *vp; 2880 2881 error = namei_simple_user(SCARG(uap, path), 2882 NSM_NOFOLLOW_TRYEMULROOT, &vp); 2883 if (error != 0) 2884 return (error); 2885 2886 error = change_owner(vp, SCARG(uap, uid), SCARG(uap, gid), l, 1); 2887 2888 vrele(vp); 2889 return (error); 2890 } 2891 2892 /* 2893 * Common routine to set ownership given a vnode. 2894 */ 2895 static int 2896 change_owner(struct vnode *vp, uid_t uid, gid_t gid, struct lwp *l, 2897 int posix_semantics) 2898 { 2899 struct vattr vattr; 2900 mode_t newmode; 2901 int error; 2902 2903 vn_lock(vp, LK_EXCLUSIVE | LK_RETRY); 2904 if ((error = VOP_GETATTR(vp, &vattr, l->l_cred)) != 0) 2905 goto out; 2906 2907 #define CHANGED(x) ((int)(x) != -1) 2908 newmode = vattr.va_mode; 2909 if (posix_semantics) { 2910 /* 2911 * POSIX/XPG semantics: if the caller is not the super-user, 2912 * clear set-user-id and set-group-id bits. Both POSIX and 2913 * the XPG consider the behaviour for calls by the super-user 2914 * implementation-defined; we leave the set-user-id and set- 2915 * group-id settings intact in that case. 2916 */ 2917 if (kauth_authorize_generic(l->l_cred, KAUTH_GENERIC_ISSUSER, 2918 NULL) != 0) 2919 newmode &= ~(S_ISUID | S_ISGID); 2920 } else { 2921 /* 2922 * NetBSD semantics: when changing owner and/or group, 2923 * clear the respective bit(s). 2924 */ 2925 if (CHANGED(uid)) 2926 newmode &= ~S_ISUID; 2927 if (CHANGED(gid)) 2928 newmode &= ~S_ISGID; 2929 } 2930 /* Update va_mode iff altered. */ 2931 if (vattr.va_mode == newmode) 2932 newmode = VNOVAL; 2933 2934 vattr_null(&vattr); 2935 vattr.va_uid = CHANGED(uid) ? uid : (uid_t)VNOVAL; 2936 vattr.va_gid = CHANGED(gid) ? gid : (gid_t)VNOVAL; 2937 vattr.va_mode = newmode; 2938 error = VOP_SETATTR(vp, &vattr, l->l_cred); 2939 #undef CHANGED 2940 2941 out: 2942 VOP_UNLOCK(vp); 2943 return (error); 2944 } 2945 2946 /* 2947 * Set the access and modification times given a path name; this 2948 * version follows links. 2949 */ 2950 /* ARGSUSED */ 2951 int 2952 sys___utimes50(struct lwp *l, const struct sys___utimes50_args *uap, 2953 register_t *retval) 2954 { 2955 /* { 2956 syscallarg(const char *) path; 2957 syscallarg(const struct timeval *) tptr; 2958 } */ 2959 2960 return do_sys_utimes(l, NULL, SCARG(uap, path), FOLLOW, 2961 SCARG(uap, tptr), UIO_USERSPACE); 2962 } 2963 2964 /* 2965 * Set the access and modification times given a file descriptor. 2966 */ 2967 /* ARGSUSED */ 2968 int 2969 sys___futimes50(struct lwp *l, const struct sys___futimes50_args *uap, 2970 register_t *retval) 2971 { 2972 /* { 2973 syscallarg(int) fd; 2974 syscallarg(const struct timeval *) tptr; 2975 } */ 2976 int error; 2977 file_t *fp; 2978 2979 /* fd_getvnode() will use the descriptor for us */ 2980 if ((error = fd_getvnode(SCARG(uap, fd), &fp)) != 0) 2981 return (error); 2982 error = do_sys_utimes(l, fp->f_data, NULL, 0, SCARG(uap, tptr), 2983 UIO_USERSPACE); 2984 fd_putfile(SCARG(uap, fd)); 2985 return (error); 2986 } 2987 2988 /* 2989 * Set the access and modification times given a path name; this 2990 * version does not follow links. 2991 */ 2992 int 2993 sys___lutimes50(struct lwp *l, const struct sys___lutimes50_args *uap, 2994 register_t *retval) 2995 { 2996 /* { 2997 syscallarg(const char *) path; 2998 syscallarg(const struct timeval *) tptr; 2999 } */ 3000 3001 return do_sys_utimes(l, NULL, SCARG(uap, path), NOFOLLOW, 3002 SCARG(uap, tptr), UIO_USERSPACE); 3003 } 3004 3005 /* 3006 * Common routine to set access and modification times given a vnode. 3007 */ 3008 int 3009 do_sys_utimes(struct lwp *l, struct vnode *vp, const char *path, int flag, 3010 const struct timeval *tptr, enum uio_seg seg) 3011 { 3012 struct vattr vattr; 3013 int error, dorele = 0; 3014 namei_simple_flags_t sflags; 3015 3016 bool vanull, setbirthtime; 3017 struct timespec ts[2]; 3018 3019 /* 3020 * I have checked all callers and they pass either FOLLOW, 3021 * NOFOLLOW, or 0 (when they don't pass a path), and NOFOLLOW 3022 * is 0. More to the point, they don't pass anything else. 3023 * Let's keep it that way at least until the namei interfaces 3024 * are fully sanitized. 3025 */ 3026 KASSERT(flag == NOFOLLOW || flag == FOLLOW); 3027 sflags = (flag == FOLLOW) ? 3028 NSM_FOLLOW_TRYEMULROOT : NSM_NOFOLLOW_TRYEMULROOT; 3029 3030 if (tptr == NULL) { 3031 vanull = true; 3032 nanotime(&ts[0]); 3033 ts[1] = ts[0]; 3034 } else { 3035 struct timeval tv[2]; 3036 3037 vanull = false; 3038 if (seg != UIO_SYSSPACE) { 3039 error = copyin(tptr, tv, sizeof (tv)); 3040 if (error != 0) 3041 return error; 3042 tptr = tv; 3043 } 3044 TIMEVAL_TO_TIMESPEC(&tptr[0], &ts[0]); 3045 TIMEVAL_TO_TIMESPEC(&tptr[1], &ts[1]); 3046 } 3047 3048 if (vp == NULL) { 3049 /* note: SEG describes TPTR, not PATH; PATH is always user */ 3050 error = namei_simple_user(path, sflags, &vp); 3051 if (error != 0) 3052 return error; 3053 dorele = 1; 3054 } 3055 3056 vn_lock(vp, LK_EXCLUSIVE | LK_RETRY); 3057 setbirthtime = (VOP_GETATTR(vp, &vattr, l->l_cred) == 0 && 3058 timespeccmp(&ts[1], &vattr.va_birthtime, <)); 3059 vattr_null(&vattr); 3060 vattr.va_atime = ts[0]; 3061 vattr.va_mtime = ts[1]; 3062 if (setbirthtime) 3063 vattr.va_birthtime = ts[1]; 3064 if (vanull) 3065 vattr.va_vaflags |= VA_UTIMES_NULL; 3066 error = VOP_SETATTR(vp, &vattr, l->l_cred); 3067 VOP_UNLOCK(vp); 3068 3069 if (dorele != 0) 3070 vrele(vp); 3071 3072 return error; 3073 } 3074 3075 /* 3076 * Truncate a file given its path name. 3077 */ 3078 /* ARGSUSED */ 3079 int 3080 sys_truncate(struct lwp *l, const struct sys_truncate_args *uap, register_t *retval) 3081 { 3082 /* { 3083 syscallarg(const char *) path; 3084 syscallarg(int) pad; 3085 syscallarg(off_t) length; 3086 } */ 3087 struct vnode *vp; 3088 struct vattr vattr; 3089 int error; 3090 3091 error = namei_simple_user(SCARG(uap, path), 3092 NSM_FOLLOW_TRYEMULROOT, &vp); 3093 if (error != 0) 3094 return (error); 3095 vn_lock(vp, LK_EXCLUSIVE | LK_RETRY); 3096 if (vp->v_type == VDIR) 3097 error = EISDIR; 3098 else if ((error = vn_writechk(vp)) == 0 && 3099 (error = VOP_ACCESS(vp, VWRITE, l->l_cred)) == 0) { 3100 vattr_null(&vattr); 3101 vattr.va_size = SCARG(uap, length); 3102 error = VOP_SETATTR(vp, &vattr, l->l_cred); 3103 } 3104 vput(vp); 3105 return (error); 3106 } 3107 3108 /* 3109 * Truncate a file given a file descriptor. 3110 */ 3111 /* ARGSUSED */ 3112 int 3113 sys_ftruncate(struct lwp *l, const struct sys_ftruncate_args *uap, register_t *retval) 3114 { 3115 /* { 3116 syscallarg(int) fd; 3117 syscallarg(int) pad; 3118 syscallarg(off_t) length; 3119 } */ 3120 struct vattr vattr; 3121 struct vnode *vp; 3122 file_t *fp; 3123 int error; 3124 3125 /* fd_getvnode() will use the descriptor for us */ 3126 if ((error = fd_getvnode(SCARG(uap, fd), &fp)) != 0) 3127 return (error); 3128 if ((fp->f_flag & FWRITE) == 0) { 3129 error = EINVAL; 3130 goto out; 3131 } 3132 vp = fp->f_data; 3133 vn_lock(vp, LK_EXCLUSIVE | LK_RETRY); 3134 if (vp->v_type == VDIR) 3135 error = EISDIR; 3136 else if ((error = vn_writechk(vp)) == 0) { 3137 vattr_null(&vattr); 3138 vattr.va_size = SCARG(uap, length); 3139 error = VOP_SETATTR(vp, &vattr, fp->f_cred); 3140 } 3141 VOP_UNLOCK(vp); 3142 out: 3143 fd_putfile(SCARG(uap, fd)); 3144 return (error); 3145 } 3146 3147 /* 3148 * Sync an open file. 3149 */ 3150 /* ARGSUSED */ 3151 int 3152 sys_fsync(struct lwp *l, const struct sys_fsync_args *uap, register_t *retval) 3153 { 3154 /* { 3155 syscallarg(int) fd; 3156 } */ 3157 struct vnode *vp; 3158 file_t *fp; 3159 int error; 3160 3161 /* fd_getvnode() will use the descriptor for us */ 3162 if ((error = fd_getvnode(SCARG(uap, fd), &fp)) != 0) 3163 return (error); 3164 vp = fp->f_data; 3165 vn_lock(vp, LK_EXCLUSIVE | LK_RETRY); 3166 error = VOP_FSYNC(vp, fp->f_cred, FSYNC_WAIT, 0, 0); 3167 VOP_UNLOCK(vp); 3168 fd_putfile(SCARG(uap, fd)); 3169 return (error); 3170 } 3171 3172 /* 3173 * Sync a range of file data. API modeled after that found in AIX. 3174 * 3175 * FDATASYNC indicates that we need only save enough metadata to be able 3176 * to re-read the written data. Note we duplicate AIX's requirement that 3177 * the file be open for writing. 3178 */ 3179 /* ARGSUSED */ 3180 int 3181 sys_fsync_range(struct lwp *l, const struct sys_fsync_range_args *uap, register_t *retval) 3182 { 3183 /* { 3184 syscallarg(int) fd; 3185 syscallarg(int) flags; 3186 syscallarg(off_t) start; 3187 syscallarg(off_t) length; 3188 } */ 3189 struct vnode *vp; 3190 file_t *fp; 3191 int flags, nflags; 3192 off_t s, e, len; 3193 int error; 3194 3195 /* fd_getvnode() will use the descriptor for us */ 3196 if ((error = fd_getvnode(SCARG(uap, fd), &fp)) != 0) 3197 return (error); 3198 3199 if ((fp->f_flag & FWRITE) == 0) { 3200 error = EBADF; 3201 goto out; 3202 } 3203 3204 flags = SCARG(uap, flags); 3205 if (((flags & (FDATASYNC | FFILESYNC)) == 0) || 3206 ((~flags & (FDATASYNC | FFILESYNC)) == 0)) { 3207 error = EINVAL; 3208 goto out; 3209 } 3210 /* Now set up the flags for value(s) to pass to VOP_FSYNC() */ 3211 if (flags & FDATASYNC) 3212 nflags = FSYNC_DATAONLY | FSYNC_WAIT; 3213 else 3214 nflags = FSYNC_WAIT; 3215 if (flags & FDISKSYNC) 3216 nflags |= FSYNC_CACHE; 3217 3218 len = SCARG(uap, length); 3219 /* If length == 0, we do the whole file, and s = l = 0 will do that */ 3220 if (len) { 3221 s = SCARG(uap, start); 3222 e = s + len; 3223 if (e < s) { 3224 error = EINVAL; 3225 goto out; 3226 } 3227 } else { 3228 e = 0; 3229 s = 0; 3230 } 3231 3232 vp = fp->f_data; 3233 vn_lock(vp, LK_EXCLUSIVE | LK_RETRY); 3234 error = VOP_FSYNC(vp, fp->f_cred, nflags, s, e); 3235 VOP_UNLOCK(vp); 3236 out: 3237 fd_putfile(SCARG(uap, fd)); 3238 return (error); 3239 } 3240 3241 /* 3242 * Sync the data of an open file. 3243 */ 3244 /* ARGSUSED */ 3245 int 3246 sys_fdatasync(struct lwp *l, const struct sys_fdatasync_args *uap, register_t *retval) 3247 { 3248 /* { 3249 syscallarg(int) fd; 3250 } */ 3251 struct vnode *vp; 3252 file_t *fp; 3253 int error; 3254 3255 /* fd_getvnode() will use the descriptor for us */ 3256 if ((error = fd_getvnode(SCARG(uap, fd), &fp)) != 0) 3257 return (error); 3258 if ((fp->f_flag & FWRITE) == 0) { 3259 fd_putfile(SCARG(uap, fd)); 3260 return (EBADF); 3261 } 3262 vp = fp->f_data; 3263 vn_lock(vp, LK_EXCLUSIVE | LK_RETRY); 3264 error = VOP_FSYNC(vp, fp->f_cred, FSYNC_WAIT|FSYNC_DATAONLY, 0, 0); 3265 VOP_UNLOCK(vp); 3266 fd_putfile(SCARG(uap, fd)); 3267 return (error); 3268 } 3269 3270 /* 3271 * Rename files, (standard) BSD semantics frontend. 3272 */ 3273 /* ARGSUSED */ 3274 int 3275 sys_rename(struct lwp *l, const struct sys_rename_args *uap, register_t *retval) 3276 { 3277 /* { 3278 syscallarg(const char *) from; 3279 syscallarg(const char *) to; 3280 } */ 3281 3282 return (do_sys_rename(SCARG(uap, from), SCARG(uap, to), UIO_USERSPACE, 0)); 3283 } 3284 3285 /* 3286 * Rename files, POSIX semantics frontend. 3287 */ 3288 /* ARGSUSED */ 3289 int 3290 sys___posix_rename(struct lwp *l, const struct sys___posix_rename_args *uap, register_t *retval) 3291 { 3292 /* { 3293 syscallarg(const char *) from; 3294 syscallarg(const char *) to; 3295 } */ 3296 3297 return (do_sys_rename(SCARG(uap, from), SCARG(uap, to), UIO_USERSPACE, 1)); 3298 } 3299 3300 /* 3301 * Rename files. Source and destination must either both be directories, 3302 * or both not be directories. If target is a directory, it must be empty. 3303 * If `from' and `to' refer to the same object, the value of the `retain' 3304 * argument is used to determine whether `from' will be 3305 * 3306 * (retain == 0) deleted unless `from' and `to' refer to the same 3307 * object in the file system's name space (BSD). 3308 * (retain == 1) always retained (POSIX). 3309 */ 3310 int 3311 do_sys_rename(const char *from, const char *to, enum uio_seg seg, int retain) 3312 { 3313 struct vnode *tvp, *fvp, *tdvp; 3314 struct nameidata fromnd, tond; 3315 struct mount *fs; 3316 struct lwp *l = curlwp; 3317 struct proc *p; 3318 uint32_t saveflag; 3319 int error; 3320 3321 NDINIT(&fromnd, DELETE, LOCKPARENT | SAVESTART | TRYEMULROOT | INRENAME, 3322 seg, from); 3323 if ((error = namei(&fromnd)) != 0) 3324 return (error); 3325 if (fromnd.ni_dvp != fromnd.ni_vp) 3326 VOP_UNLOCK(fromnd.ni_dvp); 3327 fvp = fromnd.ni_vp; 3328 3329 fs = fvp->v_mount; 3330 error = VFS_RENAMELOCK_ENTER(fs); 3331 if (error) { 3332 VOP_ABORTOP(fromnd.ni_dvp, &fromnd.ni_cnd); 3333 vrele(fromnd.ni_dvp); 3334 vrele(fvp); 3335 goto out1; 3336 } 3337 3338 /* 3339 * close, partially, yet another race - ideally we should only 3340 * go as far as getting fromnd.ni_dvp before getting the per-fs 3341 * lock, and then continue to get fromnd.ni_vp, but we can't do 3342 * that with namei as it stands. 3343 * 3344 * This still won't prevent rmdir from nuking fromnd.ni_vp 3345 * under us. The real fix is to get the locks in the right 3346 * order and do the lookups in the right places, but that's a 3347 * major rototill. 3348 * 3349 * Preserve the SAVESTART in cn_flags, because who knows what 3350 * might happen if we don't. 3351 * 3352 * Note: this logic (as well as this whole function) is cloned 3353 * in nfs_serv.c. Proceed accordingly. 3354 */ 3355 vrele(fvp); 3356 if ((fromnd.ni_cnd.cn_namelen == 1 && 3357 fromnd.ni_cnd.cn_nameptr[0] == '.') || 3358 (fromnd.ni_cnd.cn_namelen == 2 && 3359 fromnd.ni_cnd.cn_nameptr[0] == '.' && 3360 fromnd.ni_cnd.cn_nameptr[1] == '.')) { 3361 error = EINVAL; 3362 VFS_RENAMELOCK_EXIT(fs); 3363 VOP_ABORTOP(fromnd.ni_dvp, &fromnd.ni_cnd); 3364 vrele(fromnd.ni_dvp); 3365 goto out1; 3366 } 3367 saveflag = fromnd.ni_cnd.cn_flags & SAVESTART; 3368 fromnd.ni_cnd.cn_flags &= ~SAVESTART; 3369 vn_lock(fromnd.ni_dvp, LK_EXCLUSIVE | LK_RETRY); 3370 error = relookup(fromnd.ni_dvp, &fromnd.ni_vp, &fromnd.ni_cnd); 3371 fromnd.ni_cnd.cn_flags |= saveflag; 3372 if (error) { 3373 VOP_UNLOCK(fromnd.ni_dvp); 3374 VFS_RENAMELOCK_EXIT(fs); 3375 VOP_ABORTOP(fromnd.ni_dvp, &fromnd.ni_cnd); 3376 vrele(fromnd.ni_dvp); 3377 goto out1; 3378 } 3379 VOP_UNLOCK(fromnd.ni_vp); 3380 if (fromnd.ni_dvp != fromnd.ni_vp) 3381 VOP_UNLOCK(fromnd.ni_dvp); 3382 fvp = fromnd.ni_vp; 3383 3384 NDINIT(&tond, RENAME, 3385 LOCKPARENT | LOCKLEAF | NOCACHE | SAVESTART | TRYEMULROOT 3386 | INRENAME | (fvp->v_type == VDIR ? CREATEDIR : 0), 3387 seg, to); 3388 if ((error = namei(&tond)) != 0) { 3389 VFS_RENAMELOCK_EXIT(fs); 3390 VOP_ABORTOP(fromnd.ni_dvp, &fromnd.ni_cnd); 3391 vrele(fromnd.ni_dvp); 3392 vrele(fvp); 3393 goto out1; 3394 } 3395 tdvp = tond.ni_dvp; 3396 tvp = tond.ni_vp; 3397 3398 if (tvp != NULL) { 3399 if (fvp->v_type == VDIR && tvp->v_type != VDIR) { 3400 error = ENOTDIR; 3401 goto out; 3402 } else if (fvp->v_type != VDIR && tvp->v_type == VDIR) { 3403 error = EISDIR; 3404 goto out; 3405 } 3406 } 3407 3408 if (fvp == tdvp) 3409 error = EINVAL; 3410 3411 /* 3412 * Source and destination refer to the same object. 3413 */ 3414 if (fvp == tvp) { 3415 if (retain) 3416 error = -1; 3417 else if (fromnd.ni_dvp == tdvp && 3418 fromnd.ni_cnd.cn_namelen == tond.ni_cnd.cn_namelen && 3419 !memcmp(fromnd.ni_cnd.cn_nameptr, 3420 tond.ni_cnd.cn_nameptr, 3421 fromnd.ni_cnd.cn_namelen)) 3422 error = -1; 3423 } 3424 3425 #if NVERIEXEC > 0 3426 if (!error) { 3427 char *f1, *f2; 3428 size_t f1_len; 3429 size_t f2_len; 3430 3431 f1_len = fromnd.ni_cnd.cn_namelen + 1; 3432 f1 = kmem_alloc(f1_len, KM_SLEEP); 3433 strlcpy(f1, fromnd.ni_cnd.cn_nameptr, f1_len); 3434 3435 f2_len = tond.ni_cnd.cn_namelen + 1; 3436 f2 = kmem_alloc(f2_len, KM_SLEEP); 3437 strlcpy(f2, tond.ni_cnd.cn_nameptr, f2_len); 3438 3439 error = veriexec_renamechk(l, fvp, f1, tvp, f2); 3440 3441 kmem_free(f1, f1_len); 3442 kmem_free(f2, f2_len); 3443 } 3444 #endif /* NVERIEXEC > 0 */ 3445 3446 out: 3447 p = l->l_proc; 3448 if (!error) { 3449 error = VOP_RENAME(fromnd.ni_dvp, fromnd.ni_vp, &fromnd.ni_cnd, 3450 tond.ni_dvp, tond.ni_vp, &tond.ni_cnd); 3451 VFS_RENAMELOCK_EXIT(fs); 3452 } else { 3453 VOP_ABORTOP(tond.ni_dvp, &tond.ni_cnd); 3454 if (tdvp == tvp) 3455 vrele(tdvp); 3456 else 3457 vput(tdvp); 3458 if (tvp) 3459 vput(tvp); 3460 VFS_RENAMELOCK_EXIT(fs); 3461 VOP_ABORTOP(fromnd.ni_dvp, &fromnd.ni_cnd); 3462 vrele(fromnd.ni_dvp); 3463 vrele(fvp); 3464 } 3465 vrele(tond.ni_startdir); 3466 PNBUF_PUT(tond.ni_cnd.cn_pnbuf); 3467 out1: 3468 if (fromnd.ni_startdir) 3469 vrele(fromnd.ni_startdir); 3470 PNBUF_PUT(fromnd.ni_cnd.cn_pnbuf); 3471 return (error == -1 ? 0 : error); 3472 } 3473 3474 /* 3475 * Make a directory file. 3476 */ 3477 /* ARGSUSED */ 3478 int 3479 sys_mkdir(struct lwp *l, const struct sys_mkdir_args *uap, register_t *retval) 3480 { 3481 /* { 3482 syscallarg(const char *) path; 3483 syscallarg(int) mode; 3484 } */ 3485 3486 return do_sys_mkdir(SCARG(uap, path), SCARG(uap, mode), UIO_USERSPACE); 3487 } 3488 3489 int 3490 do_sys_mkdir(const char *path, mode_t mode, enum uio_seg seg) 3491 { 3492 struct proc *p = curlwp->l_proc; 3493 struct vnode *vp; 3494 struct vattr vattr; 3495 int error; 3496 struct nameidata nd; 3497 3498 NDINIT(&nd, CREATE, LOCKPARENT | CREATEDIR | TRYEMULROOT, 3499 seg, path); 3500 if ((error = namei(&nd)) != 0) 3501 return (error); 3502 vp = nd.ni_vp; 3503 if (vp != NULL) { 3504 VOP_ABORTOP(nd.ni_dvp, &nd.ni_cnd); 3505 if (nd.ni_dvp == vp) 3506 vrele(nd.ni_dvp); 3507 else 3508 vput(nd.ni_dvp); 3509 vrele(vp); 3510 return (EEXIST); 3511 } 3512 vattr_null(&vattr); 3513 vattr.va_type = VDIR; 3514 /* We will read cwdi->cwdi_cmask unlocked. */ 3515 vattr.va_mode = (mode & ACCESSPERMS) &~ p->p_cwdi->cwdi_cmask; 3516 error = VOP_MKDIR(nd.ni_dvp, &nd.ni_vp, &nd.ni_cnd, &vattr); 3517 if (!error) 3518 vput(nd.ni_vp); 3519 return (error); 3520 } 3521 3522 /* 3523 * Remove a directory file. 3524 */ 3525 /* ARGSUSED */ 3526 int 3527 sys_rmdir(struct lwp *l, const struct sys_rmdir_args *uap, register_t *retval) 3528 { 3529 /* { 3530 syscallarg(const char *) path; 3531 } */ 3532 struct vnode *vp; 3533 int error; 3534 struct nameidata nd; 3535 3536 NDINIT(&nd, DELETE, LOCKPARENT | LOCKLEAF | TRYEMULROOT, UIO_USERSPACE, 3537 SCARG(uap, path)); 3538 if ((error = namei(&nd)) != 0) 3539 return (error); 3540 vp = nd.ni_vp; 3541 if (vp->v_type != VDIR) { 3542 error = ENOTDIR; 3543 goto out; 3544 } 3545 /* 3546 * No rmdir "." please. 3547 */ 3548 if (nd.ni_dvp == vp) { 3549 error = EINVAL; 3550 goto out; 3551 } 3552 /* 3553 * The root of a mounted filesystem cannot be deleted. 3554 */ 3555 if ((vp->v_vflag & VV_ROOT) != 0 || vp->v_mountedhere != NULL) { 3556 error = EBUSY; 3557 goto out; 3558 } 3559 error = VOP_RMDIR(nd.ni_dvp, nd.ni_vp, &nd.ni_cnd); 3560 return (error); 3561 3562 out: 3563 VOP_ABORTOP(nd.ni_dvp, &nd.ni_cnd); 3564 if (nd.ni_dvp == vp) 3565 vrele(nd.ni_dvp); 3566 else 3567 vput(nd.ni_dvp); 3568 vput(vp); 3569 return (error); 3570 } 3571 3572 /* 3573 * Read a block of directory entries in a file system independent format. 3574 */ 3575 int 3576 sys___getdents30(struct lwp *l, const struct sys___getdents30_args *uap, register_t *retval) 3577 { 3578 /* { 3579 syscallarg(int) fd; 3580 syscallarg(char *) buf; 3581 syscallarg(size_t) count; 3582 } */ 3583 file_t *fp; 3584 int error, done; 3585 3586 /* fd_getvnode() will use the descriptor for us */ 3587 if ((error = fd_getvnode(SCARG(uap, fd), &fp)) != 0) 3588 return (error); 3589 if ((fp->f_flag & FREAD) == 0) { 3590 error = EBADF; 3591 goto out; 3592 } 3593 error = vn_readdir(fp, SCARG(uap, buf), UIO_USERSPACE, 3594 SCARG(uap, count), &done, l, 0, 0); 3595 ktrgenio(SCARG(uap, fd), UIO_READ, SCARG(uap, buf), done, error); 3596 *retval = done; 3597 out: 3598 fd_putfile(SCARG(uap, fd)); 3599 return (error); 3600 } 3601 3602 /* 3603 * Set the mode mask for creation of filesystem nodes. 3604 */ 3605 int 3606 sys_umask(struct lwp *l, const struct sys_umask_args *uap, register_t *retval) 3607 { 3608 /* { 3609 syscallarg(mode_t) newmask; 3610 } */ 3611 struct proc *p = l->l_proc; 3612 struct cwdinfo *cwdi; 3613 3614 /* 3615 * cwdi->cwdi_cmask will be read unlocked elsewhere. What's 3616 * important is that we serialize changes to the mask. The 3617 * rw_exit() will issue a write memory barrier on our behalf, 3618 * and force the changes out to other CPUs (as it must use an 3619 * atomic operation, draining the local CPU's store buffers). 3620 */ 3621 cwdi = p->p_cwdi; 3622 rw_enter(&cwdi->cwdi_lock, RW_WRITER); 3623 *retval = cwdi->cwdi_cmask; 3624 cwdi->cwdi_cmask = SCARG(uap, newmask) & ALLPERMS; 3625 rw_exit(&cwdi->cwdi_lock); 3626 3627 return (0); 3628 } 3629 3630 int 3631 dorevoke(struct vnode *vp, kauth_cred_t cred) 3632 { 3633 struct vattr vattr; 3634 int error; 3635 3636 vn_lock(vp, LK_SHARED | LK_RETRY); 3637 error = VOP_GETATTR(vp, &vattr, cred); 3638 VOP_UNLOCK(vp); 3639 if (error != 0) 3640 return error; 3641 if (kauth_cred_geteuid(cred) == vattr.va_uid || 3642 (error = kauth_authorize_generic(cred, 3643 KAUTH_GENERIC_ISSUSER, NULL)) == 0) 3644 VOP_REVOKE(vp, REVOKEALL); 3645 return (error); 3646 } 3647 3648 /* 3649 * Void all references to file by ripping underlying filesystem 3650 * away from vnode. 3651 */ 3652 /* ARGSUSED */ 3653 int 3654 sys_revoke(struct lwp *l, const struct sys_revoke_args *uap, register_t *retval) 3655 { 3656 /* { 3657 syscallarg(const char *) path; 3658 } */ 3659 struct vnode *vp; 3660 int error; 3661 3662 error = namei_simple_user(SCARG(uap, path), 3663 NSM_FOLLOW_TRYEMULROOT, &vp); 3664 if (error != 0) 3665 return (error); 3666 error = dorevoke(vp, l->l_cred); 3667 vrele(vp); 3668 return (error); 3669 } 3670
Indexes created Fri Oct 03 02:09:57 GMT 2025