2005-04-17 05:20:36 +07:00
|
|
|
/*
|
|
|
|
* linux/fs/open.c
|
|
|
|
*
|
|
|
|
* Copyright (C) 1991, 1992 Linus Torvalds
|
|
|
|
*/
|
|
|
|
|
|
|
|
#include <linux/string.h>
|
|
|
|
#include <linux/mm.h>
|
|
|
|
#include <linux/utime.h>
|
|
|
|
#include <linux/file.h>
|
|
|
|
#include <linux/smp_lock.h>
|
|
|
|
#include <linux/quotaops.h>
|
[PATCH] inotify
inotify is intended to correct the deficiencies of dnotify, particularly
its inability to scale and its terrible user interface:
* dnotify requires the opening of one fd per each directory
that you intend to watch. This quickly results in too many
open files and pins removable media, preventing unmount.
* dnotify is directory-based. You only learn about changes to
directories. Sure, a change to a file in a directory affects
the directory, but you are then forced to keep a cache of
stat structures.
* dnotify's interface to user-space is awful. Signals?
inotify provides a more usable, simple, powerful solution to file change
notification:
* inotify's interface is a system call that returns a fd, not SIGIO.
You get a single fd, which is select()-able.
* inotify has an event that says "the filesystem that the item
you were watching is on was unmounted."
* inotify can watch directories or files.
Inotify is currently used by Beagle (a desktop search infrastructure),
Gamin (a FAM replacement), and other projects.
See Documentation/filesystems/inotify.txt.
Signed-off-by: Robert Love <rml@novell.com>
Cc: John McCutchan <ttb@tentacle.dhs.org>
Cc: Christoph Hellwig <hch@lst.de>
Signed-off-by: Andrew Morton <akpm@osdl.org>
Signed-off-by: Linus Torvalds <torvalds@osdl.org>
2005-07-13 04:06:03 +07:00
|
|
|
#include <linux/fsnotify.h>
|
2005-04-17 05:20:36 +07:00
|
|
|
#include <linux/module.h>
|
|
|
|
#include <linux/slab.h>
|
|
|
|
#include <linux/tty.h>
|
|
|
|
#include <linux/namei.h>
|
|
|
|
#include <linux/backing-dev.h>
|
|
|
|
#include <linux/security.h>
|
|
|
|
#include <linux/mount.h>
|
|
|
|
#include <linux/vfs.h>
|
|
|
|
#include <asm/uaccess.h>
|
|
|
|
#include <linux/fs.h>
|
2005-06-23 14:09:58 +07:00
|
|
|
#include <linux/personality.h>
|
2005-04-17 05:20:36 +07:00
|
|
|
#include <linux/pagemap.h>
|
|
|
|
#include <linux/syscalls.h>
|
2005-09-10 03:04:13 +07:00
|
|
|
#include <linux/rcupdate.h>
|
2005-04-17 05:20:36 +07:00
|
|
|
|
|
|
|
#include <asm/unistd.h>
|
|
|
|
|
|
|
|
int vfs_statfs(struct super_block *sb, struct kstatfs *buf)
|
|
|
|
{
|
|
|
|
int retval = -ENODEV;
|
|
|
|
|
|
|
|
if (sb) {
|
|
|
|
retval = -ENOSYS;
|
|
|
|
if (sb->s_op->statfs) {
|
|
|
|
memset(buf, 0, sizeof(*buf));
|
|
|
|
retval = security_sb_statfs(sb);
|
|
|
|
if (retval)
|
|
|
|
return retval;
|
|
|
|
retval = sb->s_op->statfs(sb, buf);
|
|
|
|
if (retval == 0 && buf->f_frsize == 0)
|
|
|
|
buf->f_frsize = buf->f_bsize;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
return retval;
|
|
|
|
}
|
|
|
|
|
|
|
|
EXPORT_SYMBOL(vfs_statfs);
|
|
|
|
|
|
|
|
static int vfs_statfs_native(struct super_block *sb, struct statfs *buf)
|
|
|
|
{
|
|
|
|
struct kstatfs st;
|
|
|
|
int retval;
|
|
|
|
|
|
|
|
retval = vfs_statfs(sb, &st);
|
|
|
|
if (retval)
|
|
|
|
return retval;
|
|
|
|
|
|
|
|
if (sizeof(*buf) == sizeof(st))
|
|
|
|
memcpy(buf, &st, sizeof(st));
|
|
|
|
else {
|
|
|
|
if (sizeof buf->f_blocks == 4) {
|
|
|
|
if ((st.f_blocks | st.f_bfree | st.f_bavail) &
|
|
|
|
0xffffffff00000000ULL)
|
|
|
|
return -EOVERFLOW;
|
|
|
|
/*
|
|
|
|
* f_files and f_ffree may be -1; it's okay to stuff
|
|
|
|
* that into 32 bits
|
|
|
|
*/
|
|
|
|
if (st.f_files != -1 &&
|
|
|
|
(st.f_files & 0xffffffff00000000ULL))
|
|
|
|
return -EOVERFLOW;
|
|
|
|
if (st.f_ffree != -1 &&
|
|
|
|
(st.f_ffree & 0xffffffff00000000ULL))
|
|
|
|
return -EOVERFLOW;
|
|
|
|
}
|
|
|
|
|
|
|
|
buf->f_type = st.f_type;
|
|
|
|
buf->f_bsize = st.f_bsize;
|
|
|
|
buf->f_blocks = st.f_blocks;
|
|
|
|
buf->f_bfree = st.f_bfree;
|
|
|
|
buf->f_bavail = st.f_bavail;
|
|
|
|
buf->f_files = st.f_files;
|
|
|
|
buf->f_ffree = st.f_ffree;
|
|
|
|
buf->f_fsid = st.f_fsid;
|
|
|
|
buf->f_namelen = st.f_namelen;
|
|
|
|
buf->f_frsize = st.f_frsize;
|
|
|
|
memset(buf->f_spare, 0, sizeof(buf->f_spare));
|
|
|
|
}
|
|
|
|
return 0;
|
|
|
|
}
|
|
|
|
|
|
|
|
static int vfs_statfs64(struct super_block *sb, struct statfs64 *buf)
|
|
|
|
{
|
|
|
|
struct kstatfs st;
|
|
|
|
int retval;
|
|
|
|
|
|
|
|
retval = vfs_statfs(sb, &st);
|
|
|
|
if (retval)
|
|
|
|
return retval;
|
|
|
|
|
|
|
|
if (sizeof(*buf) == sizeof(st))
|
|
|
|
memcpy(buf, &st, sizeof(st));
|
|
|
|
else {
|
|
|
|
buf->f_type = st.f_type;
|
|
|
|
buf->f_bsize = st.f_bsize;
|
|
|
|
buf->f_blocks = st.f_blocks;
|
|
|
|
buf->f_bfree = st.f_bfree;
|
|
|
|
buf->f_bavail = st.f_bavail;
|
|
|
|
buf->f_files = st.f_files;
|
|
|
|
buf->f_ffree = st.f_ffree;
|
|
|
|
buf->f_fsid = st.f_fsid;
|
|
|
|
buf->f_namelen = st.f_namelen;
|
|
|
|
buf->f_frsize = st.f_frsize;
|
|
|
|
memset(buf->f_spare, 0, sizeof(buf->f_spare));
|
|
|
|
}
|
|
|
|
return 0;
|
|
|
|
}
|
|
|
|
|
|
|
|
asmlinkage long sys_statfs(const char __user * path, struct statfs __user * buf)
|
|
|
|
{
|
|
|
|
struct nameidata nd;
|
|
|
|
int error;
|
|
|
|
|
|
|
|
error = user_path_walk(path, &nd);
|
|
|
|
if (!error) {
|
|
|
|
struct statfs tmp;
|
|
|
|
error = vfs_statfs_native(nd.dentry->d_inode->i_sb, &tmp);
|
|
|
|
if (!error && copy_to_user(buf, &tmp, sizeof(tmp)))
|
|
|
|
error = -EFAULT;
|
|
|
|
path_release(&nd);
|
|
|
|
}
|
|
|
|
return error;
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
asmlinkage long sys_statfs64(const char __user *path, size_t sz, struct statfs64 __user *buf)
|
|
|
|
{
|
|
|
|
struct nameidata nd;
|
|
|
|
long error;
|
|
|
|
|
|
|
|
if (sz != sizeof(*buf))
|
|
|
|
return -EINVAL;
|
|
|
|
error = user_path_walk(path, &nd);
|
|
|
|
if (!error) {
|
|
|
|
struct statfs64 tmp;
|
|
|
|
error = vfs_statfs64(nd.dentry->d_inode->i_sb, &tmp);
|
|
|
|
if (!error && copy_to_user(buf, &tmp, sizeof(tmp)))
|
|
|
|
error = -EFAULT;
|
|
|
|
path_release(&nd);
|
|
|
|
}
|
|
|
|
return error;
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
asmlinkage long sys_fstatfs(unsigned int fd, struct statfs __user * buf)
|
|
|
|
{
|
|
|
|
struct file * file;
|
|
|
|
struct statfs tmp;
|
|
|
|
int error;
|
|
|
|
|
|
|
|
error = -EBADF;
|
|
|
|
file = fget(fd);
|
|
|
|
if (!file)
|
|
|
|
goto out;
|
|
|
|
error = vfs_statfs_native(file->f_dentry->d_inode->i_sb, &tmp);
|
|
|
|
if (!error && copy_to_user(buf, &tmp, sizeof(tmp)))
|
|
|
|
error = -EFAULT;
|
|
|
|
fput(file);
|
|
|
|
out:
|
|
|
|
return error;
|
|
|
|
}
|
|
|
|
|
|
|
|
asmlinkage long sys_fstatfs64(unsigned int fd, size_t sz, struct statfs64 __user *buf)
|
|
|
|
{
|
|
|
|
struct file * file;
|
|
|
|
struct statfs64 tmp;
|
|
|
|
int error;
|
|
|
|
|
|
|
|
if (sz != sizeof(*buf))
|
|
|
|
return -EINVAL;
|
|
|
|
|
|
|
|
error = -EBADF;
|
|
|
|
file = fget(fd);
|
|
|
|
if (!file)
|
|
|
|
goto out;
|
|
|
|
error = vfs_statfs64(file->f_dentry->d_inode->i_sb, &tmp);
|
|
|
|
if (!error && copy_to_user(buf, &tmp, sizeof(tmp)))
|
|
|
|
error = -EFAULT;
|
|
|
|
fput(file);
|
|
|
|
out:
|
|
|
|
return error;
|
|
|
|
}
|
|
|
|
|
2006-01-08 16:02:39 +07:00
|
|
|
int do_truncate(struct dentry *dentry, loff_t length, unsigned int time_attrs,
|
|
|
|
struct file *filp)
|
2005-04-17 05:20:36 +07:00
|
|
|
{
|
|
|
|
int err;
|
|
|
|
struct iattr newattrs;
|
|
|
|
|
|
|
|
/* Not pretty: "inode->i_size" shouldn't really be signed. But it is. */
|
|
|
|
if (length < 0)
|
|
|
|
return -EINVAL;
|
|
|
|
|
|
|
|
newattrs.ia_size = length;
|
2006-01-08 16:02:39 +07:00
|
|
|
newattrs.ia_valid = ATTR_SIZE | time_attrs;
|
2005-11-07 15:59:49 +07:00
|
|
|
if (filp) {
|
|
|
|
newattrs.ia_file = filp;
|
|
|
|
newattrs.ia_valid |= ATTR_FILE;
|
|
|
|
}
|
2005-04-17 05:20:36 +07:00
|
|
|
|
|
|
|
down(&dentry->d_inode->i_sem);
|
|
|
|
err = notify_change(dentry, &newattrs);
|
|
|
|
up(&dentry->d_inode->i_sem);
|
|
|
|
return err;
|
|
|
|
}
|
|
|
|
|
2006-01-08 16:05:20 +07:00
|
|
|
static long do_sys_truncate(const char __user * path, loff_t length)
|
2005-04-17 05:20:36 +07:00
|
|
|
{
|
|
|
|
struct nameidata nd;
|
|
|
|
struct inode * inode;
|
|
|
|
int error;
|
|
|
|
|
|
|
|
error = -EINVAL;
|
|
|
|
if (length < 0) /* sorry, but loff_t says... */
|
|
|
|
goto out;
|
|
|
|
|
|
|
|
error = user_path_walk(path, &nd);
|
|
|
|
if (error)
|
|
|
|
goto out;
|
|
|
|
inode = nd.dentry->d_inode;
|
|
|
|
|
|
|
|
/* For directories it's -EISDIR, for other non-regulars - -EINVAL */
|
|
|
|
error = -EISDIR;
|
|
|
|
if (S_ISDIR(inode->i_mode))
|
|
|
|
goto dput_and_out;
|
|
|
|
|
|
|
|
error = -EINVAL;
|
|
|
|
if (!S_ISREG(inode->i_mode))
|
|
|
|
goto dput_and_out;
|
|
|
|
|
2005-11-09 12:35:04 +07:00
|
|
|
error = vfs_permission(&nd, MAY_WRITE);
|
2005-04-17 05:20:36 +07:00
|
|
|
if (error)
|
|
|
|
goto dput_and_out;
|
|
|
|
|
|
|
|
error = -EROFS;
|
|
|
|
if (IS_RDONLY(inode))
|
|
|
|
goto dput_and_out;
|
|
|
|
|
|
|
|
error = -EPERM;
|
|
|
|
if (IS_IMMUTABLE(inode) || IS_APPEND(inode))
|
|
|
|
goto dput_and_out;
|
|
|
|
|
|
|
|
/*
|
|
|
|
* Make sure that there are no leases.
|
|
|
|
*/
|
|
|
|
error = break_lease(inode, FMODE_WRITE);
|
|
|
|
if (error)
|
|
|
|
goto dput_and_out;
|
|
|
|
|
|
|
|
error = get_write_access(inode);
|
|
|
|
if (error)
|
|
|
|
goto dput_and_out;
|
|
|
|
|
|
|
|
error = locks_verify_truncate(inode, NULL, length);
|
|
|
|
if (!error) {
|
|
|
|
DQUOT_INIT(inode);
|
2006-01-08 16:02:39 +07:00
|
|
|
error = do_truncate(nd.dentry, length, 0, NULL);
|
2005-04-17 05:20:36 +07:00
|
|
|
}
|
|
|
|
put_write_access(inode);
|
|
|
|
|
|
|
|
dput_and_out:
|
|
|
|
path_release(&nd);
|
|
|
|
out:
|
|
|
|
return error;
|
|
|
|
}
|
|
|
|
|
|
|
|
asmlinkage long sys_truncate(const char __user * path, unsigned long length)
|
|
|
|
{
|
|
|
|
/* on 32-bit boxen it will cut the range 2^31--2^32-1 off */
|
|
|
|
return do_sys_truncate(path, (long)length);
|
|
|
|
}
|
|
|
|
|
2006-01-08 16:05:20 +07:00
|
|
|
static long do_sys_ftruncate(unsigned int fd, loff_t length, int small)
|
2005-04-17 05:20:36 +07:00
|
|
|
{
|
|
|
|
struct inode * inode;
|
|
|
|
struct dentry *dentry;
|
|
|
|
struct file * file;
|
|
|
|
int error;
|
|
|
|
|
|
|
|
error = -EINVAL;
|
|
|
|
if (length < 0)
|
|
|
|
goto out;
|
|
|
|
error = -EBADF;
|
|
|
|
file = fget(fd);
|
|
|
|
if (!file)
|
|
|
|
goto out;
|
|
|
|
|
|
|
|
/* explicitly opened as large or we are on 64-bit box */
|
|
|
|
if (file->f_flags & O_LARGEFILE)
|
|
|
|
small = 0;
|
|
|
|
|
|
|
|
dentry = file->f_dentry;
|
|
|
|
inode = dentry->d_inode;
|
|
|
|
error = -EINVAL;
|
|
|
|
if (!S_ISREG(inode->i_mode) || !(file->f_mode & FMODE_WRITE))
|
|
|
|
goto out_putf;
|
|
|
|
|
|
|
|
error = -EINVAL;
|
|
|
|
/* Cannot ftruncate over 2^31 bytes without large file support */
|
|
|
|
if (small && length > MAX_NON_LFS)
|
|
|
|
goto out_putf;
|
|
|
|
|
|
|
|
error = -EPERM;
|
|
|
|
if (IS_APPEND(inode))
|
|
|
|
goto out_putf;
|
|
|
|
|
|
|
|
error = locks_verify_truncate(inode, file, length);
|
|
|
|
if (!error)
|
2006-01-08 16:02:39 +07:00
|
|
|
error = do_truncate(dentry, length, 0, file);
|
2005-04-17 05:20:36 +07:00
|
|
|
out_putf:
|
|
|
|
fput(file);
|
|
|
|
out:
|
|
|
|
return error;
|
|
|
|
}
|
|
|
|
|
|
|
|
asmlinkage long sys_ftruncate(unsigned int fd, unsigned long length)
|
|
|
|
{
|
|
|
|
return do_sys_ftruncate(fd, length, 1);
|
|
|
|
}
|
|
|
|
|
|
|
|
/* LFS versions of truncate are only needed on 32 bit machines */
|
|
|
|
#if BITS_PER_LONG == 32
|
|
|
|
asmlinkage long sys_truncate64(const char __user * path, loff_t length)
|
|
|
|
{
|
|
|
|
return do_sys_truncate(path, length);
|
|
|
|
}
|
|
|
|
|
|
|
|
asmlinkage long sys_ftruncate64(unsigned int fd, loff_t length)
|
|
|
|
{
|
|
|
|
return do_sys_ftruncate(fd, length, 0);
|
|
|
|
}
|
|
|
|
#endif
|
|
|
|
|
|
|
|
#ifdef __ARCH_WANT_SYS_UTIME
|
|
|
|
|
|
|
|
/*
|
|
|
|
* sys_utime() can be implemented in user-level using sys_utimes().
|
|
|
|
* Is this for backwards compatibility? If so, why not move it
|
|
|
|
* into the appropriate arch directory (for those architectures that
|
|
|
|
* need it).
|
|
|
|
*/
|
|
|
|
|
|
|
|
/* If times==NULL, set access and modification to current time,
|
|
|
|
* must be owner or have write permission.
|
|
|
|
* Else, update from *times, must be owner or super user.
|
|
|
|
*/
|
|
|
|
asmlinkage long sys_utime(char __user * filename, struct utimbuf __user * times)
|
|
|
|
{
|
|
|
|
int error;
|
|
|
|
struct nameidata nd;
|
|
|
|
struct inode * inode;
|
|
|
|
struct iattr newattrs;
|
|
|
|
|
|
|
|
error = user_path_walk(filename, &nd);
|
|
|
|
if (error)
|
|
|
|
goto out;
|
|
|
|
inode = nd.dentry->d_inode;
|
|
|
|
|
|
|
|
error = -EROFS;
|
|
|
|
if (IS_RDONLY(inode))
|
|
|
|
goto dput_and_out;
|
|
|
|
|
|
|
|
/* Don't worry, the checks are done in inode_change_ok() */
|
|
|
|
newattrs.ia_valid = ATTR_CTIME | ATTR_MTIME | ATTR_ATIME;
|
|
|
|
if (times) {
|
|
|
|
error = -EPERM;
|
|
|
|
if (IS_APPEND(inode) || IS_IMMUTABLE(inode))
|
|
|
|
goto dput_and_out;
|
|
|
|
|
|
|
|
error = get_user(newattrs.ia_atime.tv_sec, ×->actime);
|
|
|
|
newattrs.ia_atime.tv_nsec = 0;
|
|
|
|
if (!error)
|
|
|
|
error = get_user(newattrs.ia_mtime.tv_sec, ×->modtime);
|
|
|
|
newattrs.ia_mtime.tv_nsec = 0;
|
|
|
|
if (error)
|
|
|
|
goto dput_and_out;
|
|
|
|
|
|
|
|
newattrs.ia_valid |= ATTR_ATIME_SET | ATTR_MTIME_SET;
|
|
|
|
} else {
|
|
|
|
error = -EACCES;
|
|
|
|
if (IS_IMMUTABLE(inode))
|
|
|
|
goto dput_and_out;
|
|
|
|
|
|
|
|
if (current->fsuid != inode->i_uid &&
|
2005-11-09 12:35:04 +07:00
|
|
|
(error = vfs_permission(&nd, MAY_WRITE)) != 0)
|
2005-04-17 05:20:36 +07:00
|
|
|
goto dput_and_out;
|
|
|
|
}
|
|
|
|
down(&inode->i_sem);
|
|
|
|
error = notify_change(nd.dentry, &newattrs);
|
|
|
|
up(&inode->i_sem);
|
|
|
|
dput_and_out:
|
|
|
|
path_release(&nd);
|
|
|
|
out:
|
|
|
|
return error;
|
|
|
|
}
|
|
|
|
|
|
|
|
#endif
|
|
|
|
|
|
|
|
/* If times==NULL, set access and modification to current time,
|
|
|
|
* must be owner or have write permission.
|
|
|
|
* Else, update from *times, must be owner or super user.
|
|
|
|
*/
|
|
|
|
long do_utimes(char __user * filename, struct timeval * times)
|
|
|
|
{
|
|
|
|
int error;
|
|
|
|
struct nameidata nd;
|
|
|
|
struct inode * inode;
|
|
|
|
struct iattr newattrs;
|
|
|
|
|
|
|
|
error = user_path_walk(filename, &nd);
|
|
|
|
|
|
|
|
if (error)
|
|
|
|
goto out;
|
|
|
|
inode = nd.dentry->d_inode;
|
|
|
|
|
|
|
|
error = -EROFS;
|
|
|
|
if (IS_RDONLY(inode))
|
|
|
|
goto dput_and_out;
|
|
|
|
|
|
|
|
/* Don't worry, the checks are done in inode_change_ok() */
|
|
|
|
newattrs.ia_valid = ATTR_CTIME | ATTR_MTIME | ATTR_ATIME;
|
|
|
|
if (times) {
|
|
|
|
error = -EPERM;
|
|
|
|
if (IS_APPEND(inode) || IS_IMMUTABLE(inode))
|
|
|
|
goto dput_and_out;
|
|
|
|
|
|
|
|
newattrs.ia_atime.tv_sec = times[0].tv_sec;
|
|
|
|
newattrs.ia_atime.tv_nsec = times[0].tv_usec * 1000;
|
|
|
|
newattrs.ia_mtime.tv_sec = times[1].tv_sec;
|
|
|
|
newattrs.ia_mtime.tv_nsec = times[1].tv_usec * 1000;
|
|
|
|
newattrs.ia_valid |= ATTR_ATIME_SET | ATTR_MTIME_SET;
|
|
|
|
} else {
|
|
|
|
error = -EACCES;
|
|
|
|
if (IS_IMMUTABLE(inode))
|
|
|
|
goto dput_and_out;
|
|
|
|
|
|
|
|
if (current->fsuid != inode->i_uid &&
|
2005-11-09 12:35:04 +07:00
|
|
|
(error = vfs_permission(&nd, MAY_WRITE)) != 0)
|
2005-04-17 05:20:36 +07:00
|
|
|
goto dput_and_out;
|
|
|
|
}
|
|
|
|
down(&inode->i_sem);
|
|
|
|
error = notify_change(nd.dentry, &newattrs);
|
|
|
|
up(&inode->i_sem);
|
|
|
|
dput_and_out:
|
|
|
|
path_release(&nd);
|
|
|
|
out:
|
|
|
|
return error;
|
|
|
|
}
|
|
|
|
|
|
|
|
asmlinkage long sys_utimes(char __user * filename, struct timeval __user * utimes)
|
|
|
|
{
|
|
|
|
struct timeval times[2];
|
|
|
|
|
|
|
|
if (utimes && copy_from_user(×, utimes, sizeof(times)))
|
|
|
|
return -EFAULT;
|
|
|
|
return do_utimes(filename, utimes ? times : NULL);
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
/*
|
|
|
|
* access() needs to use the real uid/gid, not the effective uid/gid.
|
|
|
|
* We do this by temporarily clearing all FS-related capabilities and
|
|
|
|
* switching the fsuid/fsgid around to the real ones.
|
|
|
|
*/
|
|
|
|
asmlinkage long sys_access(const char __user * filename, int mode)
|
|
|
|
{
|
|
|
|
struct nameidata nd;
|
|
|
|
int old_fsuid, old_fsgid;
|
|
|
|
kernel_cap_t old_cap;
|
|
|
|
int res;
|
|
|
|
|
|
|
|
if (mode & ~S_IRWXO) /* where's F_OK, X_OK, W_OK, R_OK? */
|
|
|
|
return -EINVAL;
|
|
|
|
|
|
|
|
old_fsuid = current->fsuid;
|
|
|
|
old_fsgid = current->fsgid;
|
|
|
|
old_cap = current->cap_effective;
|
|
|
|
|
|
|
|
current->fsuid = current->uid;
|
|
|
|
current->fsgid = current->gid;
|
|
|
|
|
|
|
|
/*
|
|
|
|
* Clear the capabilities if we switch to a non-root user
|
|
|
|
*
|
|
|
|
* FIXME: There is a race here against sys_capset. The
|
|
|
|
* capabilities can change yet we will restore the old
|
|
|
|
* value below. We should hold task_capabilities_lock,
|
|
|
|
* but we cannot because user_path_walk can sleep.
|
|
|
|
*/
|
|
|
|
if (current->uid)
|
|
|
|
cap_clear(current->cap_effective);
|
|
|
|
else
|
|
|
|
current->cap_effective = current->cap_permitted;
|
|
|
|
|
|
|
|
res = __user_walk(filename, LOOKUP_FOLLOW|LOOKUP_ACCESS, &nd);
|
|
|
|
if (!res) {
|
2005-11-09 12:35:04 +07:00
|
|
|
res = vfs_permission(&nd, mode);
|
2005-04-17 05:20:36 +07:00
|
|
|
/* SuS v2 requires we report a read only fs too */
|
|
|
|
if(!res && (mode & S_IWOTH) && IS_RDONLY(nd.dentry->d_inode)
|
|
|
|
&& !special_file(nd.dentry->d_inode->i_mode))
|
|
|
|
res = -EROFS;
|
|
|
|
path_release(&nd);
|
|
|
|
}
|
|
|
|
|
|
|
|
current->fsuid = old_fsuid;
|
|
|
|
current->fsgid = old_fsgid;
|
|
|
|
current->cap_effective = old_cap;
|
|
|
|
|
|
|
|
return res;
|
|
|
|
}
|
|
|
|
|
|
|
|
asmlinkage long sys_chdir(const char __user * filename)
|
|
|
|
{
|
|
|
|
struct nameidata nd;
|
|
|
|
int error;
|
|
|
|
|
|
|
|
error = __user_walk(filename, LOOKUP_FOLLOW|LOOKUP_DIRECTORY, &nd);
|
|
|
|
if (error)
|
|
|
|
goto out;
|
|
|
|
|
2005-11-09 12:35:04 +07:00
|
|
|
error = vfs_permission(&nd, MAY_EXEC);
|
2005-04-17 05:20:36 +07:00
|
|
|
if (error)
|
|
|
|
goto dput_and_out;
|
|
|
|
|
|
|
|
set_fs_pwd(current->fs, nd.mnt, nd.dentry);
|
|
|
|
|
|
|
|
dput_and_out:
|
|
|
|
path_release(&nd);
|
|
|
|
out:
|
|
|
|
return error;
|
|
|
|
}
|
|
|
|
|
|
|
|
asmlinkage long sys_fchdir(unsigned int fd)
|
|
|
|
{
|
|
|
|
struct file *file;
|
|
|
|
struct dentry *dentry;
|
|
|
|
struct inode *inode;
|
|
|
|
struct vfsmount *mnt;
|
|
|
|
int error;
|
|
|
|
|
|
|
|
error = -EBADF;
|
|
|
|
file = fget(fd);
|
|
|
|
if (!file)
|
|
|
|
goto out;
|
|
|
|
|
|
|
|
dentry = file->f_dentry;
|
|
|
|
mnt = file->f_vfsmnt;
|
|
|
|
inode = dentry->d_inode;
|
|
|
|
|
|
|
|
error = -ENOTDIR;
|
|
|
|
if (!S_ISDIR(inode->i_mode))
|
|
|
|
goto out_putf;
|
|
|
|
|
2005-11-09 12:35:04 +07:00
|
|
|
error = file_permission(file, MAY_EXEC);
|
2005-04-17 05:20:36 +07:00
|
|
|
if (!error)
|
|
|
|
set_fs_pwd(current->fs, mnt, dentry);
|
|
|
|
out_putf:
|
|
|
|
fput(file);
|
|
|
|
out:
|
|
|
|
return error;
|
|
|
|
}
|
|
|
|
|
|
|
|
asmlinkage long sys_chroot(const char __user * filename)
|
|
|
|
{
|
|
|
|
struct nameidata nd;
|
|
|
|
int error;
|
|
|
|
|
|
|
|
error = __user_walk(filename, LOOKUP_FOLLOW | LOOKUP_DIRECTORY | LOOKUP_NOALT, &nd);
|
|
|
|
if (error)
|
|
|
|
goto out;
|
|
|
|
|
2005-11-09 12:35:04 +07:00
|
|
|
error = vfs_permission(&nd, MAY_EXEC);
|
2005-04-17 05:20:36 +07:00
|
|
|
if (error)
|
|
|
|
goto dput_and_out;
|
|
|
|
|
|
|
|
error = -EPERM;
|
|
|
|
if (!capable(CAP_SYS_CHROOT))
|
|
|
|
goto dput_and_out;
|
|
|
|
|
|
|
|
set_fs_root(current->fs, nd.mnt, nd.dentry);
|
|
|
|
set_fs_altroot();
|
|
|
|
error = 0;
|
|
|
|
dput_and_out:
|
|
|
|
path_release(&nd);
|
|
|
|
out:
|
|
|
|
return error;
|
|
|
|
}
|
|
|
|
|
|
|
|
asmlinkage long sys_fchmod(unsigned int fd, mode_t mode)
|
|
|
|
{
|
|
|
|
struct inode * inode;
|
|
|
|
struct dentry * dentry;
|
|
|
|
struct file * file;
|
|
|
|
int err = -EBADF;
|
|
|
|
struct iattr newattrs;
|
|
|
|
|
|
|
|
file = fget(fd);
|
|
|
|
if (!file)
|
|
|
|
goto out;
|
|
|
|
|
|
|
|
dentry = file->f_dentry;
|
|
|
|
inode = dentry->d_inode;
|
|
|
|
|
|
|
|
err = -EROFS;
|
|
|
|
if (IS_RDONLY(inode))
|
|
|
|
goto out_putf;
|
|
|
|
err = -EPERM;
|
|
|
|
if (IS_IMMUTABLE(inode) || IS_APPEND(inode))
|
|
|
|
goto out_putf;
|
|
|
|
down(&inode->i_sem);
|
|
|
|
if (mode == (mode_t) -1)
|
|
|
|
mode = inode->i_mode;
|
|
|
|
newattrs.ia_mode = (mode & S_IALLUGO) | (inode->i_mode & ~S_IALLUGO);
|
|
|
|
newattrs.ia_valid = ATTR_MODE | ATTR_CTIME;
|
|
|
|
err = notify_change(dentry, &newattrs);
|
|
|
|
up(&inode->i_sem);
|
|
|
|
|
|
|
|
out_putf:
|
|
|
|
fput(file);
|
|
|
|
out:
|
|
|
|
return err;
|
|
|
|
}
|
|
|
|
|
|
|
|
asmlinkage long sys_chmod(const char __user * filename, mode_t mode)
|
|
|
|
{
|
|
|
|
struct nameidata nd;
|
|
|
|
struct inode * inode;
|
|
|
|
int error;
|
|
|
|
struct iattr newattrs;
|
|
|
|
|
|
|
|
error = user_path_walk(filename, &nd);
|
|
|
|
if (error)
|
|
|
|
goto out;
|
|
|
|
inode = nd.dentry->d_inode;
|
|
|
|
|
|
|
|
error = -EROFS;
|
|
|
|
if (IS_RDONLY(inode))
|
|
|
|
goto dput_and_out;
|
|
|
|
|
|
|
|
error = -EPERM;
|
|
|
|
if (IS_IMMUTABLE(inode) || IS_APPEND(inode))
|
|
|
|
goto dput_and_out;
|
|
|
|
|
|
|
|
down(&inode->i_sem);
|
|
|
|
if (mode == (mode_t) -1)
|
|
|
|
mode = inode->i_mode;
|
|
|
|
newattrs.ia_mode = (mode & S_IALLUGO) | (inode->i_mode & ~S_IALLUGO);
|
|
|
|
newattrs.ia_valid = ATTR_MODE | ATTR_CTIME;
|
|
|
|
error = notify_change(nd.dentry, &newattrs);
|
|
|
|
up(&inode->i_sem);
|
|
|
|
|
|
|
|
dput_and_out:
|
|
|
|
path_release(&nd);
|
|
|
|
out:
|
|
|
|
return error;
|
|
|
|
}
|
|
|
|
|
|
|
|
static int chown_common(struct dentry * dentry, uid_t user, gid_t group)
|
|
|
|
{
|
|
|
|
struct inode * inode;
|
|
|
|
int error;
|
|
|
|
struct iattr newattrs;
|
|
|
|
|
|
|
|
error = -ENOENT;
|
|
|
|
if (!(inode = dentry->d_inode)) {
|
|
|
|
printk(KERN_ERR "chown_common: NULL inode\n");
|
|
|
|
goto out;
|
|
|
|
}
|
|
|
|
error = -EROFS;
|
|
|
|
if (IS_RDONLY(inode))
|
|
|
|
goto out;
|
|
|
|
error = -EPERM;
|
|
|
|
if (IS_IMMUTABLE(inode) || IS_APPEND(inode))
|
|
|
|
goto out;
|
|
|
|
newattrs.ia_valid = ATTR_CTIME;
|
|
|
|
if (user != (uid_t) -1) {
|
|
|
|
newattrs.ia_valid |= ATTR_UID;
|
|
|
|
newattrs.ia_uid = user;
|
|
|
|
}
|
|
|
|
if (group != (gid_t) -1) {
|
|
|
|
newattrs.ia_valid |= ATTR_GID;
|
|
|
|
newattrs.ia_gid = group;
|
|
|
|
}
|
|
|
|
if (!S_ISDIR(inode->i_mode))
|
|
|
|
newattrs.ia_valid |= ATTR_KILL_SUID|ATTR_KILL_SGID;
|
|
|
|
down(&inode->i_sem);
|
|
|
|
error = notify_change(dentry, &newattrs);
|
|
|
|
up(&inode->i_sem);
|
|
|
|
out:
|
|
|
|
return error;
|
|
|
|
}
|
|
|
|
|
|
|
|
asmlinkage long sys_chown(const char __user * filename, uid_t user, gid_t group)
|
|
|
|
{
|
|
|
|
struct nameidata nd;
|
|
|
|
int error;
|
|
|
|
|
|
|
|
error = user_path_walk(filename, &nd);
|
|
|
|
if (!error) {
|
|
|
|
error = chown_common(nd.dentry, user, group);
|
|
|
|
path_release(&nd);
|
|
|
|
}
|
|
|
|
return error;
|
|
|
|
}
|
|
|
|
|
|
|
|
asmlinkage long sys_lchown(const char __user * filename, uid_t user, gid_t group)
|
|
|
|
{
|
|
|
|
struct nameidata nd;
|
|
|
|
int error;
|
|
|
|
|
|
|
|
error = user_path_walk_link(filename, &nd);
|
|
|
|
if (!error) {
|
|
|
|
error = chown_common(nd.dentry, user, group);
|
|
|
|
path_release(&nd);
|
|
|
|
}
|
|
|
|
return error;
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
asmlinkage long sys_fchown(unsigned int fd, uid_t user, gid_t group)
|
|
|
|
{
|
|
|
|
struct file * file;
|
|
|
|
int error = -EBADF;
|
|
|
|
|
|
|
|
file = fget(fd);
|
|
|
|
if (file) {
|
|
|
|
error = chown_common(file->f_dentry, user, group);
|
|
|
|
fput(file);
|
|
|
|
}
|
|
|
|
return error;
|
|
|
|
}
|
|
|
|
|
[PATCH] open returns ENFILE but creates file anyway
When open(O_CREAT) is called and the error, ENFILE, is returned, the file
may be created anyway. This is counter intuitive, against the SUS V3
specification, and may cause applications to misbehave if they are not
coded correctly to handle this semantic. The SUS V3 specification
explicitly states "No files shall be created or modified if the function
returns -1.".
The error, ENFILE, is used to indicate the system wide open file table is
full and no more file structs can be allocated.
This is due to an ordering problem. The entry in the directory is created
before the file struct is allocated. If the allocation for the file struct
fails, then the system call must return an error, but the directory entry
was already created and can not be safely removed.
The solution to this situation is relatively easy. The file struct should
be allocated before the directory entry is created. If the allocation
fails, then the error can be returned directly. If the creation of the
directory entry fails, then the file struct can be easily freed.
Signed-off-by: Peter Staubach <staubach@redhat.com>
Signed-off-by: Andrew Morton <akpm@osdl.org>
Signed-off-by: Linus Torvalds <torvalds@osdl.org>
2005-09-13 15:25:12 +07:00
|
|
|
static struct file *__dentry_open(struct dentry *dentry, struct vfsmount *mnt,
|
2005-10-19 04:20:16 +07:00
|
|
|
int flags, struct file *f,
|
|
|
|
int (*open)(struct inode *, struct file *))
|
2005-04-17 05:20:36 +07:00
|
|
|
{
|
|
|
|
struct inode *inode;
|
|
|
|
int error;
|
|
|
|
|
|
|
|
f->f_flags = flags;
|
[PATCH] open returns ENFILE but creates file anyway
When open(O_CREAT) is called and the error, ENFILE, is returned, the file
may be created anyway. This is counter intuitive, against the SUS V3
specification, and may cause applications to misbehave if they are not
coded correctly to handle this semantic. The SUS V3 specification
explicitly states "No files shall be created or modified if the function
returns -1.".
The error, ENFILE, is used to indicate the system wide open file table is
full and no more file structs can be allocated.
This is due to an ordering problem. The entry in the directory is created
before the file struct is allocated. If the allocation for the file struct
fails, then the system call must return an error, but the directory entry
was already created and can not be safely removed.
The solution to this situation is relatively easy. The file struct should
be allocated before the directory entry is created. If the allocation
fails, then the error can be returned directly. If the creation of the
directory entry fails, then the file struct can be easily freed.
Signed-off-by: Peter Staubach <staubach@redhat.com>
Signed-off-by: Andrew Morton <akpm@osdl.org>
Signed-off-by: Linus Torvalds <torvalds@osdl.org>
2005-09-13 15:25:12 +07:00
|
|
|
f->f_mode = ((flags+1) & O_ACCMODE) | FMODE_LSEEK |
|
|
|
|
FMODE_PREAD | FMODE_PWRITE;
|
2005-04-17 05:20:36 +07:00
|
|
|
inode = dentry->d_inode;
|
|
|
|
if (f->f_mode & FMODE_WRITE) {
|
|
|
|
error = get_write_access(inode);
|
|
|
|
if (error)
|
|
|
|
goto cleanup_file;
|
|
|
|
}
|
|
|
|
|
|
|
|
f->f_mapping = inode->i_mapping;
|
|
|
|
f->f_dentry = dentry;
|
|
|
|
f->f_vfsmnt = mnt;
|
|
|
|
f->f_pos = 0;
|
|
|
|
f->f_op = fops_get(inode->i_fop);
|
|
|
|
file_move(f, &inode->i_sb->s_files);
|
|
|
|
|
2005-10-19 04:20:16 +07:00
|
|
|
if (!open && f->f_op)
|
|
|
|
open = f->f_op->open;
|
|
|
|
if (open) {
|
|
|
|
error = open(inode, f);
|
2005-04-17 05:20:36 +07:00
|
|
|
if (error)
|
|
|
|
goto cleanup_all;
|
|
|
|
}
|
2005-10-19 04:20:16 +07:00
|
|
|
|
2005-04-17 05:20:36 +07:00
|
|
|
f->f_flags &= ~(O_CREAT | O_EXCL | O_NOCTTY | O_TRUNC);
|
|
|
|
|
|
|
|
file_ra_state_init(&f->f_ra, f->f_mapping->host->i_mapping);
|
|
|
|
|
|
|
|
/* NB: we're sure to have correct a_ops only after f_op->open */
|
|
|
|
if (f->f_flags & O_DIRECT) {
|
2005-06-24 12:05:25 +07:00
|
|
|
if (!f->f_mapping->a_ops ||
|
|
|
|
((!f->f_mapping->a_ops->direct_IO) &&
|
|
|
|
(!f->f_mapping->a_ops->get_xip_page))) {
|
2005-04-17 05:20:36 +07:00
|
|
|
fput(f);
|
|
|
|
f = ERR_PTR(-EINVAL);
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
return f;
|
|
|
|
|
|
|
|
cleanup_all:
|
|
|
|
fops_put(f->f_op);
|
|
|
|
if (f->f_mode & FMODE_WRITE)
|
|
|
|
put_write_access(inode);
|
|
|
|
file_kill(f);
|
|
|
|
f->f_dentry = NULL;
|
|
|
|
f->f_vfsmnt = NULL;
|
|
|
|
cleanup_file:
|
|
|
|
put_filp(f);
|
|
|
|
dput(dentry);
|
|
|
|
mntput(mnt);
|
|
|
|
return ERR_PTR(error);
|
|
|
|
}
|
|
|
|
|
[PATCH] open returns ENFILE but creates file anyway
When open(O_CREAT) is called and the error, ENFILE, is returned, the file
may be created anyway. This is counter intuitive, against the SUS V3
specification, and may cause applications to misbehave if they are not
coded correctly to handle this semantic. The SUS V3 specification
explicitly states "No files shall be created or modified if the function
returns -1.".
The error, ENFILE, is used to indicate the system wide open file table is
full and no more file structs can be allocated.
This is due to an ordering problem. The entry in the directory is created
before the file struct is allocated. If the allocation for the file struct
fails, then the system call must return an error, but the directory entry
was already created and can not be safely removed.
The solution to this situation is relatively easy. The file struct should
be allocated before the directory entry is created. If the allocation
fails, then the error can be returned directly. If the creation of the
directory entry fails, then the file struct can be easily freed.
Signed-off-by: Peter Staubach <staubach@redhat.com>
Signed-off-by: Andrew Morton <akpm@osdl.org>
Signed-off-by: Linus Torvalds <torvalds@osdl.org>
2005-09-13 15:25:12 +07:00
|
|
|
/*
|
|
|
|
* Note that while the flag value (low two bits) for sys_open means:
|
|
|
|
* 00 - read-only
|
|
|
|
* 01 - write-only
|
|
|
|
* 10 - read-write
|
|
|
|
* 11 - special
|
|
|
|
* it is changed into
|
|
|
|
* 00 - no permissions needed
|
|
|
|
* 01 - read-permission
|
|
|
|
* 10 - write-permission
|
|
|
|
* 11 - read-write
|
|
|
|
* for the internal routines (ie open_namei()/follow_link() etc). 00 is
|
|
|
|
* used by symlinks.
|
|
|
|
*/
|
|
|
|
struct file *filp_open(const char * filename, int flags, int mode)
|
|
|
|
{
|
|
|
|
int namei_flags, error;
|
|
|
|
struct nameidata nd;
|
|
|
|
|
|
|
|
namei_flags = flags;
|
|
|
|
if ((namei_flags+1) & O_ACCMODE)
|
|
|
|
namei_flags++;
|
|
|
|
|
|
|
|
error = open_namei(filename, namei_flags, mode, &nd);
|
|
|
|
if (!error)
|
2005-10-19 04:20:16 +07:00
|
|
|
return nameidata_to_filp(&nd, flags);
|
[PATCH] open returns ENFILE but creates file anyway
When open(O_CREAT) is called and the error, ENFILE, is returned, the file
may be created anyway. This is counter intuitive, against the SUS V3
specification, and may cause applications to misbehave if they are not
coded correctly to handle this semantic. The SUS V3 specification
explicitly states "No files shall be created or modified if the function
returns -1.".
The error, ENFILE, is used to indicate the system wide open file table is
full and no more file structs can be allocated.
This is due to an ordering problem. The entry in the directory is created
before the file struct is allocated. If the allocation for the file struct
fails, then the system call must return an error, but the directory entry
was already created and can not be safely removed.
The solution to this situation is relatively easy. The file struct should
be allocated before the directory entry is created. If the allocation
fails, then the error can be returned directly. If the creation of the
directory entry fails, then the file struct can be easily freed.
Signed-off-by: Peter Staubach <staubach@redhat.com>
Signed-off-by: Andrew Morton <akpm@osdl.org>
Signed-off-by: Linus Torvalds <torvalds@osdl.org>
2005-09-13 15:25:12 +07:00
|
|
|
|
|
|
|
return ERR_PTR(error);
|
|
|
|
}
|
|
|
|
EXPORT_SYMBOL(filp_open);
|
|
|
|
|
2005-10-19 04:20:16 +07:00
|
|
|
/**
|
|
|
|
* lookup_instantiate_filp - instantiates the open intent filp
|
|
|
|
* @nd: pointer to nameidata
|
|
|
|
* @dentry: pointer to dentry
|
|
|
|
* @open: open callback
|
|
|
|
*
|
|
|
|
* Helper for filesystems that want to use lookup open intents and pass back
|
|
|
|
* a fully instantiated struct file to the caller.
|
|
|
|
* This function is meant to be called from within a filesystem's
|
|
|
|
* lookup method.
|
|
|
|
* Note that in case of error, nd->intent.open.file is destroyed, but the
|
|
|
|
* path information remains valid.
|
|
|
|
* If the open callback is set to NULL, then the standard f_op->open()
|
|
|
|
* filesystem callback is substituted.
|
|
|
|
*/
|
|
|
|
struct file *lookup_instantiate_filp(struct nameidata *nd, struct dentry *dentry,
|
|
|
|
int (*open)(struct inode *, struct file *))
|
|
|
|
{
|
|
|
|
if (IS_ERR(nd->intent.open.file))
|
|
|
|
goto out;
|
|
|
|
if (IS_ERR(dentry))
|
|
|
|
goto out_err;
|
|
|
|
nd->intent.open.file = __dentry_open(dget(dentry), mntget(nd->mnt),
|
|
|
|
nd->intent.open.flags - 1,
|
|
|
|
nd->intent.open.file,
|
|
|
|
open);
|
|
|
|
out:
|
|
|
|
return nd->intent.open.file;
|
|
|
|
out_err:
|
|
|
|
release_open_intent(nd);
|
|
|
|
nd->intent.open.file = (struct file *)dentry;
|
|
|
|
goto out;
|
|
|
|
}
|
|
|
|
EXPORT_SYMBOL_GPL(lookup_instantiate_filp);
|
|
|
|
|
|
|
|
/**
|
|
|
|
* nameidata_to_filp - convert a nameidata to an open filp.
|
|
|
|
* @nd: pointer to nameidata
|
|
|
|
* @flags: open flags
|
|
|
|
*
|
|
|
|
* Note that this function destroys the original nameidata
|
|
|
|
*/
|
|
|
|
struct file *nameidata_to_filp(struct nameidata *nd, int flags)
|
|
|
|
{
|
|
|
|
struct file *filp;
|
|
|
|
|
|
|
|
/* Pick up the filp from the open intent */
|
|
|
|
filp = nd->intent.open.file;
|
|
|
|
/* Has the filesystem initialised the file for us? */
|
|
|
|
if (filp->f_dentry == NULL)
|
|
|
|
filp = __dentry_open(nd->dentry, nd->mnt, flags, filp, NULL);
|
|
|
|
else
|
|
|
|
path_release(nd);
|
|
|
|
return filp;
|
|
|
|
}
|
|
|
|
|
2005-11-07 15:59:42 +07:00
|
|
|
/*
|
|
|
|
* dentry_open() will have done dput(dentry) and mntput(mnt) if it returns an
|
|
|
|
* error.
|
|
|
|
*/
|
[PATCH] open returns ENFILE but creates file anyway
When open(O_CREAT) is called and the error, ENFILE, is returned, the file
may be created anyway. This is counter intuitive, against the SUS V3
specification, and may cause applications to misbehave if they are not
coded correctly to handle this semantic. The SUS V3 specification
explicitly states "No files shall be created or modified if the function
returns -1.".
The error, ENFILE, is used to indicate the system wide open file table is
full and no more file structs can be allocated.
This is due to an ordering problem. The entry in the directory is created
before the file struct is allocated. If the allocation for the file struct
fails, then the system call must return an error, but the directory entry
was already created and can not be safely removed.
The solution to this situation is relatively easy. The file struct should
be allocated before the directory entry is created. If the allocation
fails, then the error can be returned directly. If the creation of the
directory entry fails, then the file struct can be easily freed.
Signed-off-by: Peter Staubach <staubach@redhat.com>
Signed-off-by: Andrew Morton <akpm@osdl.org>
Signed-off-by: Linus Torvalds <torvalds@osdl.org>
2005-09-13 15:25:12 +07:00
|
|
|
struct file *dentry_open(struct dentry *dentry, struct vfsmount *mnt, int flags)
|
|
|
|
{
|
|
|
|
int error;
|
|
|
|
struct file *f;
|
|
|
|
|
|
|
|
error = -ENFILE;
|
|
|
|
f = get_empty_filp();
|
2005-11-07 15:59:42 +07:00
|
|
|
if (f == NULL) {
|
|
|
|
dput(dentry);
|
|
|
|
mntput(mnt);
|
[PATCH] open returns ENFILE but creates file anyway
When open(O_CREAT) is called and the error, ENFILE, is returned, the file
may be created anyway. This is counter intuitive, against the SUS V3
specification, and may cause applications to misbehave if they are not
coded correctly to handle this semantic. The SUS V3 specification
explicitly states "No files shall be created or modified if the function
returns -1.".
The error, ENFILE, is used to indicate the system wide open file table is
full and no more file structs can be allocated.
This is due to an ordering problem. The entry in the directory is created
before the file struct is allocated. If the allocation for the file struct
fails, then the system call must return an error, but the directory entry
was already created and can not be safely removed.
The solution to this situation is relatively easy. The file struct should
be allocated before the directory entry is created. If the allocation
fails, then the error can be returned directly. If the creation of the
directory entry fails, then the file struct can be easily freed.
Signed-off-by: Peter Staubach <staubach@redhat.com>
Signed-off-by: Andrew Morton <akpm@osdl.org>
Signed-off-by: Linus Torvalds <torvalds@osdl.org>
2005-09-13 15:25:12 +07:00
|
|
|
return ERR_PTR(error);
|
2005-11-07 15:59:42 +07:00
|
|
|
}
|
[PATCH] open returns ENFILE but creates file anyway
When open(O_CREAT) is called and the error, ENFILE, is returned, the file
may be created anyway. This is counter intuitive, against the SUS V3
specification, and may cause applications to misbehave if they are not
coded correctly to handle this semantic. The SUS V3 specification
explicitly states "No files shall be created or modified if the function
returns -1.".
The error, ENFILE, is used to indicate the system wide open file table is
full and no more file structs can be allocated.
This is due to an ordering problem. The entry in the directory is created
before the file struct is allocated. If the allocation for the file struct
fails, then the system call must return an error, but the directory entry
was already created and can not be safely removed.
The solution to this situation is relatively easy. The file struct should
be allocated before the directory entry is created. If the allocation
fails, then the error can be returned directly. If the creation of the
directory entry fails, then the file struct can be easily freed.
Signed-off-by: Peter Staubach <staubach@redhat.com>
Signed-off-by: Andrew Morton <akpm@osdl.org>
Signed-off-by: Linus Torvalds <torvalds@osdl.org>
2005-09-13 15:25:12 +07:00
|
|
|
|
2005-10-19 04:20:16 +07:00
|
|
|
return __dentry_open(dentry, mnt, flags, f, NULL);
|
[PATCH] open returns ENFILE but creates file anyway
When open(O_CREAT) is called and the error, ENFILE, is returned, the file
may be created anyway. This is counter intuitive, against the SUS V3
specification, and may cause applications to misbehave if they are not
coded correctly to handle this semantic. The SUS V3 specification
explicitly states "No files shall be created or modified if the function
returns -1.".
The error, ENFILE, is used to indicate the system wide open file table is
full and no more file structs can be allocated.
This is due to an ordering problem. The entry in the directory is created
before the file struct is allocated. If the allocation for the file struct
fails, then the system call must return an error, but the directory entry
was already created and can not be safely removed.
The solution to this situation is relatively easy. The file struct should
be allocated before the directory entry is created. If the allocation
fails, then the error can be returned directly. If the creation of the
directory entry fails, then the file struct can be easily freed.
Signed-off-by: Peter Staubach <staubach@redhat.com>
Signed-off-by: Andrew Morton <akpm@osdl.org>
Signed-off-by: Linus Torvalds <torvalds@osdl.org>
2005-09-13 15:25:12 +07:00
|
|
|
}
|
2005-04-17 05:20:36 +07:00
|
|
|
EXPORT_SYMBOL(dentry_open);
|
|
|
|
|
|
|
|
/*
|
|
|
|
* Find an empty file descriptor entry, and mark it busy.
|
|
|
|
*/
|
|
|
|
int get_unused_fd(void)
|
|
|
|
{
|
|
|
|
struct files_struct * files = current->files;
|
|
|
|
int fd, error;
|
2005-09-10 03:04:10 +07:00
|
|
|
struct fdtable *fdt;
|
2005-04-17 05:20:36 +07:00
|
|
|
|
|
|
|
error = -EMFILE;
|
|
|
|
spin_lock(&files->file_lock);
|
|
|
|
|
|
|
|
repeat:
|
2005-09-10 03:04:10 +07:00
|
|
|
fdt = files_fdtable(files);
|
|
|
|
fd = find_next_zero_bit(fdt->open_fds->fds_bits,
|
|
|
|
fdt->max_fdset,
|
|
|
|
fdt->next_fd);
|
2005-04-17 05:20:36 +07:00
|
|
|
|
|
|
|
/*
|
|
|
|
* N.B. For clone tasks sharing a files structure, this test
|
|
|
|
* will limit the total number of files that can be opened.
|
|
|
|
*/
|
|
|
|
if (fd >= current->signal->rlim[RLIMIT_NOFILE].rlim_cur)
|
|
|
|
goto out;
|
|
|
|
|
|
|
|
/* Do we need to expand the fd array or fd set? */
|
|
|
|
error = expand_files(files, fd);
|
|
|
|
if (error < 0)
|
|
|
|
goto out;
|
|
|
|
|
|
|
|
if (error) {
|
|
|
|
/*
|
|
|
|
* If we needed to expand the fs array we
|
|
|
|
* might have blocked - try again.
|
|
|
|
*/
|
|
|
|
error = -EMFILE;
|
|
|
|
goto repeat;
|
|
|
|
}
|
|
|
|
|
2005-09-10 03:04:10 +07:00
|
|
|
FD_SET(fd, fdt->open_fds);
|
|
|
|
FD_CLR(fd, fdt->close_on_exec);
|
|
|
|
fdt->next_fd = fd + 1;
|
2005-04-17 05:20:36 +07:00
|
|
|
#if 1
|
|
|
|
/* Sanity check */
|
2005-09-10 03:04:10 +07:00
|
|
|
if (fdt->fd[fd] != NULL) {
|
2005-04-17 05:20:36 +07:00
|
|
|
printk(KERN_WARNING "get_unused_fd: slot %d not NULL!\n", fd);
|
2005-09-10 03:04:10 +07:00
|
|
|
fdt->fd[fd] = NULL;
|
2005-04-17 05:20:36 +07:00
|
|
|
}
|
|
|
|
#endif
|
|
|
|
error = fd;
|
|
|
|
|
|
|
|
out:
|
|
|
|
spin_unlock(&files->file_lock);
|
|
|
|
return error;
|
|
|
|
}
|
|
|
|
|
|
|
|
EXPORT_SYMBOL(get_unused_fd);
|
|
|
|
|
2006-01-08 16:05:20 +07:00
|
|
|
static void __put_unused_fd(struct files_struct *files, unsigned int fd)
|
2005-04-17 05:20:36 +07:00
|
|
|
{
|
2005-09-10 03:04:10 +07:00
|
|
|
struct fdtable *fdt = files_fdtable(files);
|
|
|
|
__FD_CLR(fd, fdt->open_fds);
|
|
|
|
if (fd < fdt->next_fd)
|
|
|
|
fdt->next_fd = fd;
|
2005-04-17 05:20:36 +07:00
|
|
|
}
|
|
|
|
|
|
|
|
void fastcall put_unused_fd(unsigned int fd)
|
|
|
|
{
|
|
|
|
struct files_struct *files = current->files;
|
|
|
|
spin_lock(&files->file_lock);
|
|
|
|
__put_unused_fd(files, fd);
|
|
|
|
spin_unlock(&files->file_lock);
|
|
|
|
}
|
|
|
|
|
|
|
|
EXPORT_SYMBOL(put_unused_fd);
|
|
|
|
|
|
|
|
/*
|
|
|
|
* Install a file pointer in the fd array.
|
|
|
|
*
|
|
|
|
* The VFS is full of places where we drop the files lock between
|
|
|
|
* setting the open_fds bitmap and installing the file in the file
|
|
|
|
* array. At any such point, we are vulnerable to a dup2() race
|
|
|
|
* installing a file in the array before us. We need to detect this and
|
|
|
|
* fput() the struct file we are about to overwrite in this case.
|
|
|
|
*
|
|
|
|
* It should never happen - if we allow dup2() do it, _really_ bad things
|
|
|
|
* will follow.
|
|
|
|
*/
|
|
|
|
|
|
|
|
void fastcall fd_install(unsigned int fd, struct file * file)
|
|
|
|
{
|
|
|
|
struct files_struct *files = current->files;
|
2005-09-10 03:04:10 +07:00
|
|
|
struct fdtable *fdt;
|
2005-04-17 05:20:36 +07:00
|
|
|
spin_lock(&files->file_lock);
|
2005-09-10 03:04:10 +07:00
|
|
|
fdt = files_fdtable(files);
|
2005-09-10 03:04:13 +07:00
|
|
|
BUG_ON(fdt->fd[fd] != NULL);
|
|
|
|
rcu_assign_pointer(fdt->fd[fd], file);
|
2005-04-17 05:20:36 +07:00
|
|
|
spin_unlock(&files->file_lock);
|
|
|
|
}
|
|
|
|
|
|
|
|
EXPORT_SYMBOL(fd_install);
|
|
|
|
|
2005-09-07 05:18:25 +07:00
|
|
|
long do_sys_open(const char __user *filename, int flags, int mode)
|
2005-04-17 05:20:36 +07:00
|
|
|
{
|
2005-09-07 05:18:25 +07:00
|
|
|
char *tmp = getname(filename);
|
|
|
|
int fd = PTR_ERR(tmp);
|
2005-04-17 05:20:36 +07:00
|
|
|
|
|
|
|
if (!IS_ERR(tmp)) {
|
|
|
|
fd = get_unused_fd();
|
|
|
|
if (fd >= 0) {
|
|
|
|
struct file *f = filp_open(tmp, flags, mode);
|
2005-06-23 14:10:33 +07:00
|
|
|
if (IS_ERR(f)) {
|
|
|
|
put_unused_fd(fd);
|
|
|
|
fd = PTR_ERR(f);
|
|
|
|
} else {
|
[PATCH] inotify
inotify is intended to correct the deficiencies of dnotify, particularly
its inability to scale and its terrible user interface:
* dnotify requires the opening of one fd per each directory
that you intend to watch. This quickly results in too many
open files and pins removable media, preventing unmount.
* dnotify is directory-based. You only learn about changes to
directories. Sure, a change to a file in a directory affects
the directory, but you are then forced to keep a cache of
stat structures.
* dnotify's interface to user-space is awful. Signals?
inotify provides a more usable, simple, powerful solution to file change
notification:
* inotify's interface is a system call that returns a fd, not SIGIO.
You get a single fd, which is select()-able.
* inotify has an event that says "the filesystem that the item
you were watching is on was unmounted."
* inotify can watch directories or files.
Inotify is currently used by Beagle (a desktop search infrastructure),
Gamin (a FAM replacement), and other projects.
See Documentation/filesystems/inotify.txt.
Signed-off-by: Robert Love <rml@novell.com>
Cc: John McCutchan <ttb@tentacle.dhs.org>
Cc: Christoph Hellwig <hch@lst.de>
Signed-off-by: Andrew Morton <akpm@osdl.org>
Signed-off-by: Linus Torvalds <torvalds@osdl.org>
2005-07-13 04:06:03 +07:00
|
|
|
fsnotify_open(f->f_dentry);
|
2005-06-23 14:10:33 +07:00
|
|
|
fd_install(fd, f);
|
|
|
|
}
|
2005-04-17 05:20:36 +07:00
|
|
|
}
|
|
|
|
putname(tmp);
|
|
|
|
}
|
|
|
|
return fd;
|
|
|
|
}
|
2005-09-07 05:18:25 +07:00
|
|
|
|
|
|
|
asmlinkage long sys_open(const char __user *filename, int flags, int mode)
|
|
|
|
{
|
|
|
|
if (force_o_largefile())
|
|
|
|
flags |= O_LARGEFILE;
|
|
|
|
|
|
|
|
return do_sys_open(filename, flags, mode);
|
|
|
|
}
|
2005-04-17 05:20:36 +07:00
|
|
|
EXPORT_SYMBOL_GPL(sys_open);
|
|
|
|
|
|
|
|
#ifndef __alpha__
|
|
|
|
|
|
|
|
/*
|
|
|
|
* For backward compatibility? Maybe this should be moved
|
|
|
|
* into arch/i386 instead?
|
|
|
|
*/
|
|
|
|
asmlinkage long sys_creat(const char __user * pathname, int mode)
|
|
|
|
{
|
|
|
|
return sys_open(pathname, O_CREAT | O_WRONLY | O_TRUNC, mode);
|
|
|
|
}
|
|
|
|
|
|
|
|
#endif
|
|
|
|
|
|
|
|
/*
|
|
|
|
* "id" is the POSIX thread ID. We use the
|
|
|
|
* files pointer for this..
|
|
|
|
*/
|
|
|
|
int filp_close(struct file *filp, fl_owner_t id)
|
|
|
|
{
|
2005-06-23 14:10:17 +07:00
|
|
|
int retval = 0;
|
2005-04-17 05:20:36 +07:00
|
|
|
|
|
|
|
if (!file_count(filp)) {
|
|
|
|
printk(KERN_ERR "VFS: Close: file count is 0\n");
|
2005-06-23 14:10:17 +07:00
|
|
|
return 0;
|
2005-04-17 05:20:36 +07:00
|
|
|
}
|
|
|
|
|
2005-06-23 14:10:17 +07:00
|
|
|
if (filp->f_op && filp->f_op->flush)
|
|
|
|
retval = filp->f_op->flush(filp);
|
2005-04-17 05:20:36 +07:00
|
|
|
|
|
|
|
dnotify_flush(filp, id);
|
|
|
|
locks_remove_posix(filp, id);
|
|
|
|
fput(filp);
|
|
|
|
return retval;
|
|
|
|
}
|
|
|
|
|
|
|
|
EXPORT_SYMBOL(filp_close);
|
|
|
|
|
|
|
|
/*
|
|
|
|
* Careful here! We test whether the file pointer is NULL before
|
|
|
|
* releasing the fd. This ensures that one clone task can't release
|
|
|
|
* an fd while another clone is opening it.
|
|
|
|
*/
|
|
|
|
asmlinkage long sys_close(unsigned int fd)
|
|
|
|
{
|
|
|
|
struct file * filp;
|
|
|
|
struct files_struct *files = current->files;
|
2005-09-10 03:04:10 +07:00
|
|
|
struct fdtable *fdt;
|
2005-04-17 05:20:36 +07:00
|
|
|
|
|
|
|
spin_lock(&files->file_lock);
|
2005-09-10 03:04:10 +07:00
|
|
|
fdt = files_fdtable(files);
|
|
|
|
if (fd >= fdt->max_fds)
|
2005-04-17 05:20:36 +07:00
|
|
|
goto out_unlock;
|
2005-09-10 03:04:10 +07:00
|
|
|
filp = fdt->fd[fd];
|
2005-04-17 05:20:36 +07:00
|
|
|
if (!filp)
|
|
|
|
goto out_unlock;
|
2005-09-10 03:04:13 +07:00
|
|
|
rcu_assign_pointer(fdt->fd[fd], NULL);
|
2005-09-10 03:04:10 +07:00
|
|
|
FD_CLR(fd, fdt->close_on_exec);
|
2005-04-17 05:20:36 +07:00
|
|
|
__put_unused_fd(files, fd);
|
|
|
|
spin_unlock(&files->file_lock);
|
|
|
|
return filp_close(filp, files);
|
|
|
|
|
|
|
|
out_unlock:
|
|
|
|
spin_unlock(&files->file_lock);
|
|
|
|
return -EBADF;
|
|
|
|
}
|
|
|
|
|
|
|
|
EXPORT_SYMBOL(sys_close);
|
|
|
|
|
|
|
|
/*
|
|
|
|
* This routine simulates a hangup on the tty, to arrange that users
|
|
|
|
* are given clean terminals at login time.
|
|
|
|
*/
|
|
|
|
asmlinkage long sys_vhangup(void)
|
|
|
|
{
|
|
|
|
if (capable(CAP_SYS_TTY_CONFIG)) {
|
|
|
|
tty_vhangup(current->signal->tty);
|
|
|
|
return 0;
|
|
|
|
}
|
|
|
|
return -EPERM;
|
|
|
|
}
|
|
|
|
|
|
|
|
/*
|
|
|
|
* Called when an inode is about to be open.
|
|
|
|
* We use this to disallow opening large files on 32bit systems if
|
|
|
|
* the caller didn't specify O_LARGEFILE. On 64bit systems we force
|
|
|
|
* on this flag in sys_open.
|
|
|
|
*/
|
|
|
|
int generic_file_open(struct inode * inode, struct file * filp)
|
|
|
|
{
|
|
|
|
if (!(filp->f_flags & O_LARGEFILE) && i_size_read(inode) > MAX_NON_LFS)
|
|
|
|
return -EFBIG;
|
|
|
|
return 0;
|
|
|
|
}
|
|
|
|
|
|
|
|
EXPORT_SYMBOL(generic_file_open);
|
|
|
|
|
|
|
|
/*
|
|
|
|
* This is used by subsystems that don't want seekable
|
|
|
|
* file descriptors
|
|
|
|
*/
|
|
|
|
int nonseekable_open(struct inode *inode, struct file *filp)
|
|
|
|
{
|
|
|
|
filp->f_mode &= ~(FMODE_LSEEK | FMODE_PREAD | FMODE_PWRITE);
|
|
|
|
return 0;
|
|
|
|
}
|
|
|
|
|
|
|
|
EXPORT_SYMBOL(nonseekable_open);
|