blob: e67d528894483265b94dbef331a867fe4e440614 [file] [log] [blame]
Vyacheslav Dubeyko127e5f52013-02-27 17:03:03 -08001/*
2 * linux/fs/hfsplus/xattr_trusted.c
3 *
4 * Vyacheslav Dubeyko <slava@dubeyko.com>
5 *
6 * Handler for storing security labels as extended attributes.
7 */
8
9#include <linux/security.h>
Hin-Tak Leungbf29e882014-06-06 14:36:22 -070010#include <linux/nls.h>
11
Vyacheslav Dubeyko127e5f52013-02-27 17:03:03 -080012#include "hfsplus_fs.h"
13#include "xattr.h"
Vyacheslav Dubeykob4c11072013-09-11 14:24:30 -070014#include "acl.h"
Vyacheslav Dubeyko127e5f52013-02-27 17:03:03 -080015
16static int hfsplus_security_getxattr(struct dentry *dentry, const char *name,
17 void *buffer, size_t size, int type)
18{
Fabian Fredericka3cef4c2015-04-16 12:46:58 -070019 return hfsplus_getxattr(dentry, name, buffer, size,
20 XATTR_SECURITY_PREFIX,
21 XATTR_SECURITY_PREFIX_LEN);
Vyacheslav Dubeyko127e5f52013-02-27 17:03:03 -080022}
23
24static int hfsplus_security_setxattr(struct dentry *dentry, const char *name,
25 const void *buffer, size_t size, int flags, int type)
26{
Hin-Tak Leungbf29e882014-06-06 14:36:22 -070027 char *xattr_name;
28 int res;
Vyacheslav Dubeyko127e5f52013-02-27 17:03:03 -080029
30 if (!strcmp(name, ""))
31 return -EINVAL;
32
Hin-Tak Leungbf29e882014-06-06 14:36:22 -070033 xattr_name = kmalloc(NLS_MAX_CHARSET_SIZE * HFSPLUS_ATTR_MAX_STRLEN + 1,
34 GFP_KERNEL);
35 if (!xattr_name)
36 return -ENOMEM;
Vyacheslav Dubeyko127e5f52013-02-27 17:03:03 -080037 strcpy(xattr_name, XATTR_SECURITY_PREFIX);
38 strcpy(xattr_name + XATTR_SECURITY_PREFIX_LEN, name);
39
Hin-Tak Leungbf29e882014-06-06 14:36:22 -070040 res = hfsplus_setxattr(dentry, xattr_name, buffer, size, flags);
41 kfree(xattr_name);
42 return res;
Vyacheslav Dubeyko127e5f52013-02-27 17:03:03 -080043}
44
45static size_t hfsplus_security_listxattr(struct dentry *dentry, char *list,
46 size_t list_size, const char *name, size_t name_len, int type)
47{
48 /*
49 * This method is not used.
50 * It is used hfsplus_listxattr() instead of generic_listxattr().
51 */
52 return -EOPNOTSUPP;
53}
54
55static int hfsplus_initxattrs(struct inode *inode,
56 const struct xattr *xattr_array,
57 void *fs_info)
58{
59 const struct xattr *xattr;
Hin-Tak Leungbf29e882014-06-06 14:36:22 -070060 char *xattr_name;
Vyacheslav Dubeyko127e5f52013-02-27 17:03:03 -080061 int err = 0;
62
Hin-Tak Leungbf29e882014-06-06 14:36:22 -070063 xattr_name = kmalloc(NLS_MAX_CHARSET_SIZE * HFSPLUS_ATTR_MAX_STRLEN + 1,
64 GFP_KERNEL);
65 if (!xattr_name)
66 return -ENOMEM;
Vyacheslav Dubeyko127e5f52013-02-27 17:03:03 -080067 for (xattr = xattr_array; xattr->name != NULL; xattr++) {
Vyacheslav Dubeyko127e5f52013-02-27 17:03:03 -080068
Hin-Tak Leungbf29e882014-06-06 14:36:22 -070069 if (!strcmp(xattr->name, ""))
Vyacheslav Dubeyko127e5f52013-02-27 17:03:03 -080070 continue;
71
Vyacheslav Dubeyko127e5f52013-02-27 17:03:03 -080072 strcpy(xattr_name, XATTR_SECURITY_PREFIX);
73 strcpy(xattr_name +
74 XATTR_SECURITY_PREFIX_LEN, xattr->name);
75 memset(xattr_name +
Hin-Tak Leungbf29e882014-06-06 14:36:22 -070076 XATTR_SECURITY_PREFIX_LEN + strlen(xattr->name), 0, 1);
Vyacheslav Dubeyko127e5f52013-02-27 17:03:03 -080077
78 err = __hfsplus_setxattr(inode, xattr_name,
79 xattr->value, xattr->value_len, 0);
80 if (err)
81 break;
82 }
Hin-Tak Leungbf29e882014-06-06 14:36:22 -070083 kfree(xattr_name);
Vyacheslav Dubeyko127e5f52013-02-27 17:03:03 -080084 return err;
85}
86
87int hfsplus_init_security(struct inode *inode, struct inode *dir,
88 const struct qstr *qstr)
89{
90 return security_inode_init_security(inode, dir, qstr,
91 &hfsplus_initxattrs, NULL);
92}
93
Vyacheslav Dubeykob4c11072013-09-11 14:24:30 -070094int hfsplus_init_inode_security(struct inode *inode,
95 struct inode *dir,
96 const struct qstr *qstr)
97{
98 int err;
99
100 err = hfsplus_init_posix_acl(inode, dir);
101 if (!err)
102 err = hfsplus_init_security(inode, dir, qstr);
103 return err;
104}
105
Vyacheslav Dubeyko127e5f52013-02-27 17:03:03 -0800106const struct xattr_handler hfsplus_xattr_security_handler = {
107 .prefix = XATTR_SECURITY_PREFIX,
108 .list = hfsplus_security_listxattr,
109 .get = hfsplus_security_getxattr,
110 .set = hfsplus_security_setxattr,
111};