SAFE public projects git trees. - safe/jmp/linux-2.6/blob - fs/ext4/ioctl.c

   1 /*
   2  * linux/fs/ext4/ioctl.c
   3  *
   4  * Copyright (C) 1993, 1994, 1995
   5  * Remy Card (card@masi.ibp.fr)
   6  * Laboratoire MASI - Institut Blaise Pascal
   7  * Universite Pierre et Marie Curie (Paris VI)
   8  */
   9
  10 #include <linux/fs.h>
  11 #include <linux/jbd2.h>
  12 #include <linux/capability.h>
  13 #include <linux/time.h>
  14 #include <linux/compat.h>
  15 #include <linux/mount.h>
  16 #include <linux/file.h>
  17 #include <asm/uaccess.h>
  18 #include "ext4_jbd2.h"
  19 #include "ext4.h"
  20
  21 long ext4_ioctl(struct file *filp, unsigned int cmd, unsigned long arg)
  22 {
  23         struct inode *inode = filp->f_dentry->d_inode;
  24         struct ext4_inode_info *ei = EXT4_I(inode);
  25         unsigned int flags;
  26
  27         ext4_debug("cmd = %u, arg = %lu\n", cmd, arg);
  28
  29         switch (cmd) {
  30         case EXT4_IOC_GETFLAGS:
  31                 ext4_get_inode_flags(ei);
  32                 flags = ei->i_flags & EXT4_FL_USER_VISIBLE;
  33                 return put_user(flags, (int __user *) arg);
  34         case EXT4_IOC_SETFLAGS: {
  35                 handle_t *handle = NULL;
  36                 int err, migrate = 0;
  37                 struct ext4_iloc iloc;
  38                 unsigned int oldflags;
  39                 unsigned int jflag;
  40
  41                 if (!is_owner_or_cap(inode))
  42                         return -EACCES;
  43
  44                 if (get_user(flags, (int __user *) arg))
  45                         return -EFAULT;
  46
  47                 err = mnt_want_write(filp->f_path.mnt);
  48                 if (err)
  49                         return err;
  50
  51                 flags = ext4_mask_flags(inode->i_mode, flags);
  52
  53                 err = -EPERM;
  54                 mutex_lock(&inode->i_mutex);
  55                 /* Is it quota file? Do not allow user to mess with it */
  56                 if (IS_NOQUOTA(inode))
  57                         goto flags_out;
  58
  59                 oldflags = ei->i_flags;
  60
  61                 /* The JOURNAL_DATA flag is modifiable only by root */
  62                 jflag = flags & EXT4_JOURNAL_DATA_FL;
  63
  64                 /*
  65                  * The IMMUTABLE and APPEND_ONLY flags can only be changed by
  66                  * the relevant capability.
  67                  *
  68                  * This test looks nicer. Thanks to Pauline Middelink
  69                  */
  70                 if ((flags ^ oldflags) & (EXT4_APPEND_FL | EXT4_IMMUTABLE_FL)) {
  71                         if (!capable(CAP_LINUX_IMMUTABLE))
  72                                 goto flags_out;
  73                 }
  74
  75                 /*
  76                  * The JOURNAL_DATA flag can only be changed by
  77                  * the relevant capability.
  78                  */
  79                 if ((jflag ^ oldflags) & (EXT4_JOURNAL_DATA_FL)) {
  80                         if (!capable(CAP_SYS_RESOURCE))
  81                                 goto flags_out;
  82                 }
  83                 if (oldflags & EXT4_EXTENTS_FL) {
  84                         /* We don't support clearning extent flags */
  85                         if (!(flags & EXT4_EXTENTS_FL)) {
  86                                 err = -EOPNOTSUPP;
  87                                 goto flags_out;
  88                         }
  89                 } else if (flags & EXT4_EXTENTS_FL) {
  90                         /* migrate the file */
  91                         migrate = 1;
  92                         flags &= ~EXT4_EXTENTS_FL;
  93                 }
  94
  95                 handle = ext4_journal_start(inode, 1);
  96                 if (IS_ERR(handle)) {
  97                         err = PTR_ERR(handle);
  98                         goto flags_out;
  99                 }
 100                 if (IS_SYNC(inode))
 101                         ext4_handle_sync(handle);
 102                 err = ext4_reserve_inode_write(handle, inode, &iloc);
 103                 if (err)
 104                         goto flags_err;
 105
 106                 flags = flags & EXT4_FL_USER_MODIFIABLE;
 107                 flags |= oldflags & ~EXT4_FL_USER_MODIFIABLE;
 108                 ei->i_flags = flags;
 109
 110                 ext4_set_inode_flags(inode);
 111                 inode->i_ctime = ext4_current_time(inode);
 112
 113                 err = ext4_mark_iloc_dirty(handle, inode, &iloc);
 114 flags_err:
 115                 ext4_journal_stop(handle);
 116                 if (err)
 117                         goto flags_out;
 118
 119                 if ((jflag ^ oldflags) & (EXT4_JOURNAL_DATA_FL))
 120                         err = ext4_change_inode_journal_flag(inode, jflag);
 121                 if (err)
 122                         goto flags_out;
 123                 if (migrate)
 124                         err = ext4_ext_migrate(inode);
 125 flags_out:
 126                 mutex_unlock(&inode->i_mutex);
 127                 mnt_drop_write(filp->f_path.mnt);
 128                 return err;
 129         }
 130         case EXT4_IOC_GETVERSION:
 131         case EXT4_IOC_GETVERSION_OLD:
 132                 return put_user(inode->i_generation, (int __user *) arg);
 133         case EXT4_IOC_SETVERSION:
 134         case EXT4_IOC_SETVERSION_OLD: {
 135                 handle_t *handle;
 136                 struct ext4_iloc iloc;
 137                 __u32 generation;
 138                 int err;
 139
 140                 if (!is_owner_or_cap(inode))
 141                         return -EPERM;
 142
 143                 err = mnt_want_write(filp->f_path.mnt);
 144                 if (err)
 145                         return err;
 146                 if (get_user(generation, (int __user *) arg)) {
 147                         err = -EFAULT;
 148                         goto setversion_out;
 149                 }
 150
 151                 handle = ext4_journal_start(inode, 1);
 152                 if (IS_ERR(handle)) {
 153                         err = PTR_ERR(handle);
 154                         goto setversion_out;
 155                 }
 156                 err = ext4_reserve_inode_write(handle, inode, &iloc);
 157                 if (err == 0) {
 158                         inode->i_ctime = ext4_current_time(inode);
 159                         inode->i_generation = generation;
 160                         err = ext4_mark_iloc_dirty(handle, inode, &iloc);
 161                 }
 162                 ext4_journal_stop(handle);
 163 setversion_out:
 164                 mnt_drop_write(filp->f_path.mnt);
 165                 return err;
 166         }
 167 #ifdef CONFIG_JBD2_DEBUG
 168         case EXT4_IOC_WAIT_FOR_READONLY:
 169                 /*
 170                  * This is racy - by the time we're woken up and running,
 171                  * the superblock could be released.  And the module could
 172                  * have been unloaded.  So sue me.
 173                  *
 174                  * Returns 1 if it slept, else zero.
 175                  */
 176                 {
 177                         struct super_block *sb = inode->i_sb;
 178                         DECLARE_WAITQUEUE(wait, current);
 179                         int ret = 0;
 180
 181                         set_current_state(TASK_INTERRUPTIBLE);
 182                         add_wait_queue(&EXT4_SB(sb)->ro_wait_queue, &wait);
 183                         if (timer_pending(&EXT4_SB(sb)->turn_ro_timer)) {
 184                                 schedule();
 185                                 ret = 1;
 186                         }
 187                         remove_wait_queue(&EXT4_SB(sb)->ro_wait_queue, &wait);
 188                         return ret;
 189                 }
 190 #endif
 191         case EXT4_IOC_GROUP_EXTEND: {
 192                 ext4_fsblk_t n_blocks_count;
 193                 struct super_block *sb = inode->i_sb;
 194                 int err, err2=0;
 195
 196                 if (!capable(CAP_SYS_RESOURCE))
 197                         return -EPERM;
 198
 199                 if (get_user(n_blocks_count, (__u32 __user *)arg))
 200                         return -EFAULT;
 201
 202                 err = mnt_want_write(filp->f_path.mnt);
 203                 if (err)
 204                         return err;
 205
 206                 err = ext4_group_extend(sb, EXT4_SB(sb)->s_es, n_blocks_count);
 207                 if (EXT4_SB(sb)->s_journal) {
 208                         jbd2_journal_lock_updates(EXT4_SB(sb)->s_journal);
 209                         err2 = jbd2_journal_flush(EXT4_SB(sb)->s_journal);
 210                         jbd2_journal_unlock_updates(EXT4_SB(sb)->s_journal);
 211                 }
 212                 if (err == 0)
 213                         err = err2;
 214                 mnt_drop_write(filp->f_path.mnt);
 215
 216                 return err;
 217         }
 218
 219         case EXT4_IOC_MOVE_EXT: {
 220                 struct move_extent me;
 221                 struct file *donor_filp;
 222                 int err;
 223
 224                 if (!(filp->f_mode & FMODE_READ) ||
 225                     !(filp->f_mode & FMODE_WRITE))
 226                         return -EBADF;
 227
 228                 if (copy_from_user(&me,
 229                         (struct move_extent __user *)arg, sizeof(me)))
 230                         return -EFAULT;
 231                 me.moved_len = 0;
 232
 233                 donor_filp = fget(me.donor_fd);
 234                 if (!donor_filp)
 235                         return -EBADF;
 236
 237                 if (!(donor_filp->f_mode & FMODE_WRITE)) {
 238                         err = -EBADF;
 239                         goto mext_out;
 240                 }
 241
 242                 err = mnt_want_write(filp->f_path.mnt);
 243                 if (err)
 244                         goto mext_out;
 245
 246                 err = ext4_move_extents(filp, donor_filp, me.orig_start,
 247                                         me.donor_start, me.len, &me.moved_len);
 248                 mnt_drop_write(filp->f_path.mnt);
 249                 if (me.moved_len > 0)
 250                         file_remove_suid(donor_filp);
 251
 252                 if (copy_to_user((struct move_extent *)arg, &me, sizeof(me)))
 253                         err = -EFAULT;
 254 mext_out:
 255                 fput(donor_filp);
 256                 return err;
 257         }
 258
 259         case EXT4_IOC_GROUP_ADD: {
 260                 struct ext4_new_group_data input;
 261                 struct super_block *sb = inode->i_sb;
 262                 int err, err2=0;
 263
 264                 if (!capable(CAP_SYS_RESOURCE))
 265                         return -EPERM;
 266
 267                 if (copy_from_user(&input, (struct ext4_new_group_input __user *)arg,
 268                                 sizeof(input)))
 269                         return -EFAULT;
 270
 271                 err = mnt_want_write(filp->f_path.mnt);
 272                 if (err)
 273                         return err;
 274
 275                 err = ext4_group_add(sb, &input);
 276                 if (EXT4_SB(sb)->s_journal) {
 277                         jbd2_journal_lock_updates(EXT4_SB(sb)->s_journal);
 278                         err2 = jbd2_journal_flush(EXT4_SB(sb)->s_journal);
 279                         jbd2_journal_unlock_updates(EXT4_SB(sb)->s_journal);
 280                 }
 281                 if (err == 0)
 282                         err = err2;
 283                 mnt_drop_write(filp->f_path.mnt);
 284
 285                 return err;
 286         }
 287
 288         case EXT4_IOC_MIGRATE:
 289         {
 290                 int err;
 291                 if (!is_owner_or_cap(inode))
 292                         return -EACCES;
 293
 294                 err = mnt_want_write(filp->f_path.mnt);
 295                 if (err)
 296                         return err;
 297                 /*
 298                  * inode_mutex prevent write and truncate on the file.
 299                  * Read still goes through. We take i_data_sem in
 300                  * ext4_ext_swap_inode_data before we switch the
 301                  * inode format to prevent read.
 302                  */
 303                 mutex_lock(&(inode->i_mutex));
 304                 err = ext4_ext_migrate(inode);
 305                 mutex_unlock(&(inode->i_mutex));
 306                 mnt_drop_write(filp->f_path.mnt);
 307                 return err;
 308         }
 309
 310         case EXT4_IOC_ALLOC_DA_BLKS:
 311         {
 312                 int err;
 313                 if (!is_owner_or_cap(inode))
 314                         return -EACCES;
 315
 316                 err = mnt_want_write(filp->f_path.mnt);
 317                 if (err)
 318                         return err;
 319                 err = ext4_alloc_da_blocks(inode);
 320                 mnt_drop_write(filp->f_path.mnt);
 321                 return err;
 322         }
 323
 324         default:
 325                 return -ENOTTY;
 326         }
 327 }
 328
 329 #ifdef CONFIG_COMPAT
 330 long ext4_compat_ioctl(struct file *file, unsigned int cmd, unsigned long arg)
 331 {
 332         /* These are just misnamed, they actually get/put from/to user an int */
 333         switch (cmd) {
 334         case EXT4_IOC32_GETFLAGS:
 335                 cmd = EXT4_IOC_GETFLAGS;
 336                 break;
 337         case EXT4_IOC32_SETFLAGS:
 338                 cmd = EXT4_IOC_SETFLAGS;
 339                 break;
 340         case EXT4_IOC32_GETVERSION:
 341                 cmd = EXT4_IOC_GETVERSION;
 342                 break;
 343         case EXT4_IOC32_SETVERSION:
 344                 cmd = EXT4_IOC_SETVERSION;
 345                 break;
 346         case EXT4_IOC32_GROUP_EXTEND:
 347                 cmd = EXT4_IOC_GROUP_EXTEND;
 348                 break;
 349         case EXT4_IOC32_GETVERSION_OLD:
 350                 cmd = EXT4_IOC_GETVERSION_OLD;
 351                 break;
 352         case EXT4_IOC32_SETVERSION_OLD:
 353                 cmd = EXT4_IOC_SETVERSION_OLD;
 354                 break;
 355 #ifdef CONFIG_JBD2_DEBUG
 356         case EXT4_IOC32_WAIT_FOR_READONLY:
 357                 cmd = EXT4_IOC_WAIT_FOR_READONLY;
 358                 break;
 359 #endif
 360         case EXT4_IOC32_GETRSVSZ:
 361                 cmd = EXT4_IOC_GETRSVSZ;
 362                 break;
 363         case EXT4_IOC32_SETRSVSZ:
 364                 cmd = EXT4_IOC_SETRSVSZ;
 365                 break;
 366         case EXT4_IOC_GROUP_ADD:
 367                 break;
 368         default:
 369                 return -ENOIOCTLCMD;
 370         }
 371         return ext4_ioctl(file, cmd, (unsigned long) compat_ptr(arg));
 372 }
 373 #endif