/* * Store Windows ACLs in xattrs. * * Copyright (C) Volker Lendecke, 2008 * Copyright (C) Jeremy Allison, 2008 * * This program is free software; you can redistribute it and/or modify * it under the terms of the GNU General Public License as published by * the Free Software Foundation; either version 3 of the License, or * (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, see <http://www.gnu.org/licenses/>. */ /* NOTE: This is an experimental module, not yet finished. JRA. */ #include "includes.h" #include "librpc/gen_ndr/xattr.h" #include "librpc/gen_ndr/ndr_xattr.h" #include "../lib/crypto/crypto.h" #undef DBGC_CLASS #define DBGC_CLASS DBGC_VFS /* Pull in the common functions. */ #include "modules/vfs_acl_common.c" /******************************************************************* Pull a security descriptor into a DATA_BLOB from a xattr. *******************************************************************/ static NTSTATUS get_acl_blob(TALLOC_CTX *ctx, vfs_handle_struct *handle, files_struct *fsp, const char *name, DATA_BLOB *pblob) { size_t size = 1024; uint8_t *val = NULL; uint8_t *tmp; ssize_t sizeret; int saved_errno = 0; ZERO_STRUCTP(pblob); again: tmp = TALLOC_REALLOC_ARRAY(ctx, val, uint8_t, size); if (tmp == NULL) { TALLOC_FREE(val); return NT_STATUS_NO_MEMORY; } val = tmp; become_root(); if (fsp && fsp->fh->fd != -1) { sizeret = SMB_VFS_FGETXATTR(fsp, XATTR_NTACL_NAME, val, size); } else { sizeret = SMB_VFS_GETXATTR(handle->conn, name, XATTR_NTACL_NAME, val, size); } if (sizeret == -1) { saved_errno = errno; } unbecome_root(); /* Max ACL size is 65536 bytes. */ if (sizeret == -1) { errno = saved_errno; if ((errno == ERANGE) && (size != 65536)) { /* Too small, try again. */ size = 65536; goto again; } /* Real error - exit here. */ TALLOC_FREE(val); return map_nt_error_from_unix(errno); } pblob->data = val; pblob->length = sizeret; return NT_STATUS_OK; } /******************************************************************* Store a DATA_BLOB into an xattr given an fsp pointer. *******************************************************************/ static NTSTATUS store_acl_blob_fsp(vfs_handle_struct *handle, files_struct *fsp, DATA_BLOB *pblob) { int ret; int saved_errno = 0; DEBUG(10,("store_acl_blob_fsp: storing blob length %u on file %s\n", (unsigned int)pblob->length, fsp_str_dbg(fsp))); become_root(); if (fsp->fh->fd != -1) { ret = SMB_VFS_FSETXATTR(fsp, XATTR_NTACL_NAME, pblob->data, pblob->length, 0); } else { ret = SMB_VFS_SETXATTR(fsp->conn, fsp->fsp_name->base_name, XATTR_NTACL_NAME, pblob->data, pblob->length, 0); } if (ret) { saved_errno = errno; } unbecome_root(); if (ret) { errno = saved_errno; DEBUG(5, ("store_acl_blob_fsp: setting attr failed for file %s" "with error %s\n", fsp_str_dbg(fsp), strerror(errno) )); return map_nt_error_from_unix(errno); } return NT_STATUS_OK; } /******************************************************************* Store a DATA_BLOB into an xattr given a pathname. *******************************************************************/ static NTSTATUS store_acl_blob_pathname(vfs_handle_struct *handle, const char *fname, DATA_BLOB *pblob) { connection_struct *conn = handle->conn; int ret; int saved_errno = 0; DEBUG(10,("store_acl_blob_pathname: storing blob " "length %u on file %s\n", (unsigned int)pblob->length, fname)); become_root(); ret = SMB_VFS_SETXATTR(conn, fname, XATTR_NTACL_NAME, pblob->data, pblob->length, 0); if (ret) { saved_errno = errno; } unbecome_root(); if (ret) { errno = saved_errno; DEBUG(5, ("store_acl_blob_pathname: setting attr failed " "for file %s with error %s\n", fname, strerror(errno) )); return map_nt_error_from_unix(errno); } return NT_STATUS_OK; } /********************************************************************* Remove a Windows ACL - we're setting the underlying POSIX ACL. *********************************************************************/ static int sys_acl_set_file_xattr(vfs_handle_struct *handle, const char *name, SMB_ACL_TYPE_T type, SMB_ACL_T theacl) { int ret = SMB_VFS_NEXT_SYS_ACL_SET_FILE(handle, name, type, theacl); if (ret == -1) { return -1; } become_root(); SMB_VFS_REMOVEXATTR(handle->conn, name, XATTR_NTACL_NAME); unbecome_root(); return ret; } /********************************************************************* Remove a Windows ACL - we're setting the underlying POSIX ACL. *********************************************************************/ static int sys_acl_set_fd_xattr(vfs_handle_struct *handle, files_struct *fsp, SMB_ACL_T theacl) { int ret = SMB_VFS_NEXT_SYS_ACL_SET_FD(handle, fsp, theacl); if (ret == -1) { return -1; } become_root(); SMB_VFS_FREMOVEXATTR(fsp, XATTR_NTACL_NAME); unbecome_root(); return ret; } static struct vfs_fn_pointers vfs_acl_xattr_fns = { .mkdir = mkdir_acl_common, .open = open_acl_common, .fget_nt_acl = fget_nt_acl_common, .get_nt_acl = get_nt_acl_common, .fset_nt_acl = fset_nt_acl_common, .sys_acl_set_file = sys_acl_set_file_xattr, .sys_acl_set_fd = sys_acl_set_fd_xattr }; NTSTATUS vfs_acl_xattr_init(void) { return smb_register_vfs(SMB_VFS_INTERFACE_VERSION, "acl_xattr", &vfs_acl_xattr_fns); }