| 1 | #include "idl_types.h"
 | 
|---|
| 2 | 
 | 
|---|
| 3 | /*
 | 
|---|
| 4 |    IDL structures for xattr file attributes
 | 
|---|
| 5 | 
 | 
|---|
| 6 |    this has nothing to do with RPC, we are just using our NDR/IDL
 | 
|---|
| 7 |    infrastructure as a convenient way to store linearised information
 | 
|---|
| 8 |    about a file in a architecture independent manner
 | 
|---|
| 9 | */
 | 
|---|
| 10 | 
 | 
|---|
| 11 | import "security.idl";
 | 
|---|
| 12 | 
 | 
|---|
| 13 | [
 | 
|---|
| 14 |   uuid("12345778-1234-abcd-0001-00000002"),
 | 
|---|
| 15 |   version(0.0),
 | 
|---|
| 16 |   helper("../librpc/ndr/ndr_xattr.h"),
 | 
|---|
| 17 |   pyhelper("librpc/ndr/py_xattr.c"),
 | 
|---|
| 18 |   pointer_default(unique)
 | 
|---|
| 19 | ]
 | 
|---|
| 20 | interface xattr
 | 
|---|
| 21 | {
 | 
|---|
| 22 |         const char *XATTR_DOSATTRIB_NAME = "user.DosAttrib";
 | 
|---|
| 23 |         const int XATTR_DOSATTRIB_ESTIMATED_SIZE = 64;
 | 
|---|
| 24 | 
 | 
|---|
| 25 |         /* we store basic dos attributes in a DosAttrib xattr. By
 | 
|---|
| 26 |            using a union we can cope with new version of this
 | 
|---|
| 27 |            structure more easily */
 | 
|---|
| 28 | 
 | 
|---|
| 29 |         /*
 | 
|---|
| 30 |          * the FFFF level is never really used,
 | 
|---|
| 31 |          * it's used to pass the information from
 | 
|---|
| 32 |          * the old hex string attrib information
 | 
|---|
| 33 |          * we have a handwritten parser which converts
 | 
|---|
| 34 |          * the hex string to the xattr_DosInfoFFFFCompat strucure
 | 
|---|
| 35 |          */
 | 
|---|
| 36 | 
 | 
|---|
| 37 |         typedef struct {
 | 
|---|
| 38 |                 uint32 attrib;
 | 
|---|
| 39 |         } xattr_DosInfoFFFFCompat;
 | 
|---|
| 40 | 
 | 
|---|
| 41 |         typedef struct {
 | 
|---|
| 42 |                 uint32 attrib;
 | 
|---|
| 43 |                 uint32 ea_size;
 | 
|---|
| 44 |                 udlong size;
 | 
|---|
| 45 |                 udlong alloc_size;
 | 
|---|
| 46 |                 NTTIME create_time;
 | 
|---|
| 47 |                 NTTIME change_time;
 | 
|---|
| 48 |         } xattr_DosInfo1;
 | 
|---|
| 49 | 
 | 
|---|
| 50 | /*
 | 
|---|
| 51 |         We use xattrDosInfo1 again when we store values.
 | 
|---|
| 52 |         Because the sticky write time is now stored in the opendb
 | 
|---|
| 53 |         and xattr_DosInfo2Old is only present to parse existing
 | 
|---|
| 54 |         values from disk.
 | 
|---|
| 55 | 
 | 
|---|
| 56 |         const int XATTR_ATTRIB_FLAG_STICKY_WRITE_TIME = 0x1;
 | 
|---|
| 57 | */
 | 
|---|
| 58 |         typedef struct {
 | 
|---|
| 59 |                 uint32     flags;
 | 
|---|
| 60 |                 uint32     attrib;
 | 
|---|
| 61 |                 uint32     ea_size;
 | 
|---|
| 62 |                 udlong     size;
 | 
|---|
| 63 |                 udlong     alloc_size;
 | 
|---|
| 64 |                 NTTIME     create_time;
 | 
|---|
| 65 |                 NTTIME     change_time;
 | 
|---|
| 66 |                 NTTIME     write_time; /* only used when sticky write time is set */
 | 
|---|
| 67 |                 utf8string name;
 | 
|---|
| 68 |         } xattr_DosInfo2Old;
 | 
|---|
| 69 | 
 | 
|---|
| 70 |         typedef [bitmap32bit] bitmap {
 | 
|---|
| 71 |                 XATTR_DOSINFO_ATTRIB            = 0x00000001,
 | 
|---|
| 72 |                 XATTR_DOSINFO_EA_SIZE           = 0x00000002,
 | 
|---|
| 73 |                 XATTR_DOSINFO_SIZE              = 0x00000004,
 | 
|---|
| 74 |                 XATTR_DOSINFO_ALLOC_SIZE        = 0x00000008,
 | 
|---|
| 75 |                 XATTR_DOSINFO_CREATE_TIME       = 0x00000010,
 | 
|---|
| 76 |                 XATTR_DOSINFO_CHANGE_TIME       = 0x00000020
 | 
|---|
| 77 |         } xattr_DosInfoValidFlags;
 | 
|---|
| 78 | 
 | 
|---|
| 79 |         typedef struct {
 | 
|---|
| 80 |                 xattr_DosInfoValidFlags valid_flags;
 | 
|---|
| 81 |                 uint32 attrib;
 | 
|---|
| 82 |                 uint32 ea_size;
 | 
|---|
| 83 |                 udlong size;
 | 
|---|
| 84 |                 udlong alloc_size;
 | 
|---|
| 85 |                 NTTIME create_time;
 | 
|---|
| 86 |                 NTTIME change_time;
 | 
|---|
| 87 |         } xattr_DosInfo3;
 | 
|---|
| 88 | 
 | 
|---|
| 89 |         typedef [public,switch_type(uint16)] union {
 | 
|---|
| 90 |                 [case(0xFFFF)] xattr_DosInfoFFFFCompat compatinfoFFFF;
 | 
|---|
| 91 |                 [case(1)] xattr_DosInfo1 info1;
 | 
|---|
| 92 |                 [case(2)] xattr_DosInfo2Old oldinfo2;
 | 
|---|
| 93 |                 [case(3)] xattr_DosInfo3 info3;
 | 
|---|
| 94 |         } xattr_DosInfo;
 | 
|---|
| 95 | 
 | 
|---|
| 96 |         typedef [public] struct {
 | 
|---|
| 97 |                 uint16 version;
 | 
|---|
| 98 |                 [switch_is(version)] xattr_DosInfo info;
 | 
|---|
| 99 |         } xattr_DosAttrib;
 | 
|---|
| 100 | 
 | 
|---|
| 101 |         typedef [public,nopush,nopull,noprint] struct {
 | 
|---|
| 102 |                 astring attrib_hex;
 | 
|---|
| 103 |                 uint16 version;
 | 
|---|
| 104 |                 [switch_is(version)] xattr_DosInfo info;
 | 
|---|
| 105 |         } xattr_DOSATTRIB;
 | 
|---|
| 106 | 
 | 
|---|
| 107 |         void xattr_parse_DOSATTRIB(
 | 
|---|
| 108 |                 [in] xattr_DOSATTRIB x
 | 
|---|
| 109 |         );
 | 
|---|
| 110 | 
 | 
|---|
| 111 |         /* we store DOS style extended attributes in a DosEAs xattr */
 | 
|---|
| 112 |         const char *XATTR_DOSEAS_NAME = "user.DosEAs";
 | 
|---|
| 113 | 
 | 
|---|
| 114 |         typedef struct {
 | 
|---|
| 115 |                 utf8string name;
 | 
|---|
| 116 |                 DATA_BLOB value;
 | 
|---|
| 117 |         } xattr_EA;
 | 
|---|
| 118 | 
 | 
|---|
| 119 |         typedef [public] struct {
 | 
|---|
| 120 |                 uint16 num_eas;
 | 
|---|
| 121 |                 [size_is(num_eas)] xattr_EA *eas;
 | 
|---|
| 122 |         } xattr_DosEAs;
 | 
|---|
| 123 | 
 | 
|---|
| 124 |         /* Slightly different version, used by the vfs_xattr_tdb module */
 | 
|---|
| 125 |         typedef [public] struct {
 | 
|---|
| 126 |                 uint32 num_eas;
 | 
|---|
| 127 |                 xattr_EA eas[num_eas];
 | 
|---|
| 128 |         } tdb_xattrs;
 | 
|---|
| 129 | 
 | 
|---|
| 130 |         /* we store stream information in this xattr structure. Then
 | 
|---|
| 131 |            the streams themselves are stored in
 | 
|---|
| 132 |            user.DosStream.STREAMNAME or in external files, according
 | 
|---|
| 133 |            to the flags */
 | 
|---|
| 134 |         const char *XATTR_DOSSTREAMS_NAME = "user.DosStreams";
 | 
|---|
| 135 | 
 | 
|---|
| 136 |         const int XATTR_STREAM_FLAG_INTERNAL = 0x00000001;
 | 
|---|
| 137 | 
 | 
|---|
| 138 |         /* stream data is stored in attributes with the given prefix */
 | 
|---|
| 139 |         const char *XATTR_DOSSTREAM_PREFIX = "user.DosStream.";
 | 
|---|
| 140 | 
 | 
|---|
| 141 |         const int XATTR_MAX_STREAM_SIZE     = 0x4000;
 | 
|---|
| 142 |         const int XATTR_MAX_STREAM_SIZE_TDB = 0x100000;
 | 
|---|
| 143 | 
 | 
|---|
| 144 |         typedef struct {
 | 
|---|
| 145 |                 uint32     flags;
 | 
|---|
| 146 |                 udlong     size;
 | 
|---|
| 147 |                 udlong     alloc_size;
 | 
|---|
| 148 |                 utf8string name;
 | 
|---|
| 149 |         } xattr_DosStream;
 | 
|---|
| 150 | 
 | 
|---|
| 151 |         typedef [public] struct {
 | 
|---|
| 152 |                 uint32 num_streams;
 | 
|---|
| 153 |                 [size_is(num_streams)] xattr_DosStream *streams;
 | 
|---|
| 154 |         } xattr_DosStreams;
 | 
|---|
| 155 | 
 | 
|---|
| 156 | 
 | 
|---|
| 157 |         /* we store the NT ACL a NTACL xattr. It is versioned so we
 | 
|---|
| 158 |            can later add other acl attribs (such as posix acl mapping)
 | 
|---|
| 159 | 
 | 
|---|
| 160 |            we put this xattr in the security namespace to ensure that
 | 
|---|
| 161 |            only trusted users can write to the ACL
 | 
|---|
| 162 | 
 | 
|---|
| 163 |            stored in "security.NTACL"
 | 
|---|
| 164 | 
 | 
|---|
| 165 |            Version 1. raw SD stored as Samba4 does it.
 | 
|---|
| 166 |            Version 2. raw SD + last changed hash so we
 | 
|---|
| 167 |                       can discard if this doesn't match the underlying ACL hash.
 | 
|---|
| 168 |         */
 | 
|---|
| 169 | 
 | 
|---|
| 170 |         const char *XATTR_NTACL_NAME = "security.NTACL";
 | 
|---|
| 171 | 
 | 
|---|
| 172 |         const int XATTR_SD_HASH_SIZE = 64;
 | 
|---|
| 173 |         const int XATTR_SD_HASH_TYPE_NONE = 0x0;
 | 
|---|
| 174 |         const int XATTR_SD_HASH_TYPE_SHA256 = 0x1;
 | 
|---|
| 175 | 
 | 
|---|
| 176 |         typedef [public] struct {
 | 
|---|
| 177 |                 security_descriptor *sd;
 | 
|---|
| 178 |                 uint8 hash[16];
 | 
|---|
| 179 |         } security_descriptor_hash_v2; /* Hash never used in this version. */
 | 
|---|
| 180 | 
 | 
|---|
| 181 |         typedef [public] struct {
 | 
|---|
| 182 |                 security_descriptor *sd;
 | 
|---|
| 183 |                 uint16 hash_type;
 | 
|---|
| 184 |                 uint8 hash[64]; /* 64 bytes hash. */
 | 
|---|
| 185 |         } security_descriptor_hash_v3;
 | 
|---|
| 186 | 
 | 
|---|
| 187 |         typedef [switch_type(uint16)] union {
 | 
|---|
| 188 |                 [case(1)] security_descriptor *sd;
 | 
|---|
| 189 |                 [case(2)] security_descriptor_hash_v2 *sd_hs2;
 | 
|---|
| 190 |                 [case(3)] security_descriptor_hash_v3 *sd_hs3;
 | 
|---|
| 191 |         } xattr_NTACL_Info;
 | 
|---|
| 192 | 
 | 
|---|
| 193 |         typedef [public] struct {
 | 
|---|
| 194 |                 uint16 version;
 | 
|---|
| 195 |                 [switch_is(version)] xattr_NTACL_Info info;
 | 
|---|
| 196 |         } xattr_NTACL;
 | 
|---|
| 197 | }
 | 
|---|