source: vendor/3.6.9/source3/modules/vfs_solarisacl.c

Last change on this file was 740, checked in by Silvan Scherrer, 13 years ago

Samba Server: update vendor to 3.6.0
File size: 21.6 KB
Line 
1/*
2 Unix SMB/Netbios implementation.
3 VFS module to get and set Solaris ACLs
4 Copyright (C) Michael Adam 2006,2008
5
6 This program is free software; you can redistribute it and/or modify
7 it under the terms of the GNU General Public License as published by
8 the Free Software Foundation; either version 3 of the License, or
9 (at your option) any later version.
10
11 This program is distributed in the hope that it will be useful,
12 but WITHOUT ANY WARRANTY; without even the implied warranty of
13 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
14 GNU General Public License for more details.
15
16 You should have received a copy of the GNU General Public License
17 along with this program. If not, see <http://www.gnu.org/licenses/>.
18*/
19
20
21#include "includes.h"
22#include "system/filesys.h"
23#include "smbd/smbd.h"
24#include "modules/vfs_solarisacl.h"
25
26/* typedef struct acl SOLARIS_ACE_T; */
27typedef aclent_t SOLARIS_ACE_T;
28typedef aclent_t *SOLARIS_ACL_T;
29typedef int SOLARIS_ACL_TAG_T; /* the type of an ACL entry */
30typedef o_mode_t SOLARIS_PERM_T;
31
32/* for convenience: check if solaris acl entry is a default entry? */
33#define _IS_DEFAULT(ace) ((ace).a_type & ACL_DEFAULT)
34#define _IS_OF_TYPE(ace, type) ( \
35 (((type) == SMB_ACL_TYPE_ACCESS) && !_IS_DEFAULT(ace)) \
36 || \
37 (((type) == SMB_ACL_TYPE_DEFAULT) && _IS_DEFAULT(ace)) \
38)
39
40
41/* prototypes for private functions */
42
43static SOLARIS_ACL_T solaris_acl_init(int count);
44static bool smb_acl_to_solaris_acl(SMB_ACL_T smb_acl,
45 SOLARIS_ACL_T *solariacl, int *count,
46 SMB_ACL_TYPE_T type);
47static SMB_ACL_T solaris_acl_to_smb_acl(SOLARIS_ACL_T solarisacl, int count,
48 SMB_ACL_TYPE_T type);
49static SOLARIS_ACL_TAG_T smb_tag_to_solaris_tag(SMB_ACL_TAG_T smb_tag);
50static SMB_ACL_TAG_T solaris_tag_to_smb_tag(SOLARIS_ACL_TAG_T solaris_tag);
51static bool solaris_add_to_acl(SOLARIS_ACL_T *solaris_acl, int *count,
52 SOLARIS_ACL_T add_acl, int add_count, SMB_ACL_TYPE_T type);
53static bool solaris_acl_get_file(const char *name, SOLARIS_ACL_T *solarisacl,
54 int *count);
55static bool solaris_acl_get_fd(int fd, SOLARIS_ACL_T *solarisacl, int *count);
56static bool solaris_acl_sort(SOLARIS_ACL_T theacl, int count);
57static SMB_ACL_PERM_T solaris_perm_to_smb_perm(const SOLARIS_PERM_T perm);
58static SOLARIS_PERM_T smb_perm_to_solaris_perm(const SMB_ACL_PERM_T perm);
59#if 0
60static bool solaris_acl_check(SOLARIS_ACL_T solaris_acl, int count);
61#endif
62
63/* public functions - the api */
64
65SMB_ACL_T solarisacl_sys_acl_get_file(vfs_handle_struct *handle,
66 const char *path_p,
67 SMB_ACL_TYPE_T type)
68{
69 SMB_ACL_T result = NULL;
70 int count;
71 SOLARIS_ACL_T solaris_acl = NULL;
72
73 DEBUG(10, ("solarisacl_sys_acl_get_file called for file '%s'.\n",
74 path_p));
75
76 if (type != SMB_ACL_TYPE_ACCESS && type != SMB_ACL_TYPE_DEFAULT) {
77 DEBUG(10, ("invalid SMB_ACL_TYPE given (%d)\n", type));
78 errno = EINVAL;
79 goto done;
80 }
81
82 DEBUGADD(10, ("getting %s acl\n",
83 ((type == SMB_ACL_TYPE_ACCESS) ? "access" : "default")));
84
85 if (!solaris_acl_get_file(path_p, &solaris_acl, &count)) {
86 goto done;
87 }
88 result = solaris_acl_to_smb_acl(solaris_acl, count, type);
89 if (result == NULL) {
90 DEBUG(10, ("conversion solaris_acl -> smb_acl failed (%s).\n",
91 strerror(errno)));
92 }
93
94 done:
95 DEBUG(10, ("solarisacl_sys_acl_get_file %s.\n",
96 ((result == NULL) ? "failed" : "succeeded" )));
97 SAFE_FREE(solaris_acl);
98 return result;
99}
100
101
102/*
103 * get the access ACL of a file referred to by a fd
104 */
105SMB_ACL_T solarisacl_sys_acl_get_fd(vfs_handle_struct *handle,
106 files_struct *fsp)
107{
108 SMB_ACL_T result = NULL;
109 int count;
110 SOLARIS_ACL_T solaris_acl = NULL;
111
112 DEBUG(10, ("entering solarisacl_sys_acl_get_fd.\n"));
113
114 if (!solaris_acl_get_fd(fsp->fh->fd, &solaris_acl, &count)) {
115 goto done;
116 }
117 /*
118 * The facl call returns both ACCESS and DEFAULT acls (as present).
119 * The posix acl_get_fd function returns only the
120 * access acl. So we need to filter this out here.
121 */
122 result = solaris_acl_to_smb_acl(solaris_acl, count,
123 SMB_ACL_TYPE_ACCESS);
124 if (result == NULL) {
125 DEBUG(10, ("conversion solaris_acl -> smb_acl failed (%s).\n",
126 strerror(errno)));
127 }
128
129 done:
130 DEBUG(10, ("solarisacl_sys_acl_get_fd %s.\n",
131 ((result == NULL) ? "failed" : "succeeded")));
132 SAFE_FREE(solaris_acl);
133 return result;
134}
135
136int solarisacl_sys_acl_set_file(vfs_handle_struct *handle,
137 const char *name,
138 SMB_ACL_TYPE_T type,
139 SMB_ACL_T theacl)
140{
141 int ret = -1;
142 struct stat_ex s;
143 SOLARIS_ACL_T solaris_acl = NULL;
144 int count;
145
146 DEBUG(10, ("solarisacl_sys_acl_set_file called for file '%s'\n",
147 name));
148
149 if ((type != SMB_ACL_TYPE_ACCESS) && (type != SMB_ACL_TYPE_DEFAULT)) {
150 errno = EINVAL;
151 DEBUG(10, ("invalid smb acl type given (%d).\n", type));
152 goto done;
153 }
154 DEBUGADD(10, ("setting %s acl\n",
155 ((type == SMB_ACL_TYPE_ACCESS) ? "access" : "default")));
156
157 if(!smb_acl_to_solaris_acl(theacl, &solaris_acl, &count, type)) {
158 DEBUG(10, ("conversion smb_acl -> solaris_acl failed (%s).\n",
159 strerror(errno)));
160 goto done;
161 }
162
163 /*
164 * if the file is a directory, there is extra work to do:
165 * since the solaris acl call stores both the access acl and
166 * the default acl as provided, we have to get the acl part
167 * that has not been specified in "type" from the file first
168 * and concatenate it with the acl provided.
169 */
170 if (vfs_stat_smb_fname(handle->conn, name, &s) != 0) {
171 DEBUG(10, ("Error in stat call: %s\n", strerror(errno)));
172 goto done;
173 }
174 if (S_ISDIR(s.st_ex_mode)) {
175 SOLARIS_ACL_T other_acl;
176 int other_count;
177 SMB_ACL_TYPE_T other_type;
178
179 other_type = (type == SMB_ACL_TYPE_ACCESS)
180 ? SMB_ACL_TYPE_DEFAULT
181 : SMB_ACL_TYPE_ACCESS;
182 DEBUGADD(10, ("getting acl from filesystem\n"));
183 if (!solaris_acl_get_file(name, &other_acl, &other_count)) {
184 DEBUG(10, ("error getting acl from directory\n"));
185 goto done;
186 }
187 DEBUG(10, ("adding %s part of fs acl to given acl\n",
188 ((other_type == SMB_ACL_TYPE_ACCESS)
189 ? "access"
190 : "default")));
191 if (!solaris_add_to_acl(&solaris_acl, &count, other_acl,
192 other_count, other_type))
193 {
194 DEBUG(10, ("error adding other acl.\n"));
195 SAFE_FREE(other_acl);
196 goto done;
197 }
198 SAFE_FREE(other_acl);
199 }
200 else if (type != SMB_ACL_TYPE_ACCESS) {
201 errno = EINVAL;
202 goto done;
203 }
204
205 if (!solaris_acl_sort(solaris_acl, count)) {
206 DEBUG(10, ("resulting acl is not valid!\n"));
207 goto done;
208 }
209
210 ret = acl(name, SETACL, count, solaris_acl);
211
212 done:
213 DEBUG(10, ("solarisacl_sys_acl_set_file %s.\n",
214 ((ret != 0) ? "failed" : "succeeded")));
215 SAFE_FREE(solaris_acl);
216 return ret;
217}
218
219/*
220 * set the access ACL on the file referred to by a fd
221 */
222int solarisacl_sys_acl_set_fd(vfs_handle_struct *handle,
223 files_struct *fsp,
224 SMB_ACL_T theacl)
225{
226 SOLARIS_ACL_T solaris_acl = NULL;
227 SOLARIS_ACL_T default_acl = NULL;
228 int count, default_count;
229 int ret = -1;
230
231 DEBUG(10, ("entering solarisacl_sys_acl_set_fd\n"));
232
233 /*
234 * the posix acl_set_fd call sets the access acl of the
235 * file referred to by fd. the solaris facl-SETACL call
236 * sets the access and default acl as provided, so we
237 * have to retrieve the default acl of the file and
238 * concatenate it with the access acl provided.
239 */
240 if (!smb_acl_to_solaris_acl(theacl, &solaris_acl, &count,
241 SMB_ACL_TYPE_ACCESS))
242 {
243 DEBUG(10, ("conversion smb_acl -> solaris_acl failed (%s).\n",
244 strerror(errno)));
245 goto done;
246 }
247 if (!solaris_acl_get_fd(fsp->fh->fd, &default_acl, &default_count)) {
248 DEBUG(10, ("error getting (default) acl from fd\n"));
249 goto done;
250 }
251 if (!solaris_add_to_acl(&solaris_acl, &count,
252 default_acl, default_count,
253 SMB_ACL_TYPE_DEFAULT))
254 {
255 DEBUG(10, ("error adding default acl to solaris acl\n"));
256 goto done;
257 }
258 if (!solaris_acl_sort(solaris_acl, count)) {
259 DEBUG(10, ("resulting acl is not valid!\n"));
260 goto done;
261 }
262
263 ret = facl(fsp->fh->fd, SETACL, count, solaris_acl);
264 if (ret != 0) {
265 DEBUG(10, ("call of facl failed (%s).\n", strerror(errno)));
266 }
267
268 done:
269 DEBUG(10, ("solarisacl_sys_acl_set_fd %s.\n",
270 ((ret == 0) ? "succeeded" : "failed" )));
271 SAFE_FREE(solaris_acl);
272 SAFE_FREE(default_acl);
273 return ret;
274}
275
276/*
277 * delete the default ACL of a directory
278 *
279 * This is achieved by fetching the access ACL and rewriting it
280 * directly, via the solaris system call: the SETACL call on
281 * directories writes both the access and the default ACL as provided.
282 *
283 * XXX: posix acl_delete_def_file returns an error if
284 * the file referred to by path is not a directory.
285 * this function does not complain but the actions
286 * have no effect on a file other than a directory.
287 * But sys_acl_delete_default_file is only called in
288 * smbd/posixacls.c after having checked that the file
289 * is a directory, anyways. So implementing the extra
290 * check is considered unnecessary. --- Agreed? XXX
291 */
292int solarisacl_sys_acl_delete_def_file(vfs_handle_struct *handle,
293 const char *path)
294{
295 SMB_ACL_T smb_acl;
296 int ret = -1;
297 SOLARIS_ACL_T solaris_acl = NULL;
298 int count;
299
300 DEBUG(10, ("entering solarisacl_sys_acl_delete_def_file.\n"));
301
302 smb_acl = solarisacl_sys_acl_get_file(handle, path,
303 SMB_ACL_TYPE_ACCESS);
304 if (smb_acl == NULL) {
305 DEBUG(10, ("getting file acl failed!\n"));
306 goto done;
307 }
308 if (!smb_acl_to_solaris_acl(smb_acl, &solaris_acl, &count,
309 SMB_ACL_TYPE_ACCESS))
310 {
311 DEBUG(10, ("conversion smb_acl -> solaris_acl failed.\n"));
312 goto done;
313 }
314 if (!solaris_acl_sort(solaris_acl, count)) {
315 DEBUG(10, ("resulting acl is not valid!\n"));
316 goto done;
317 }
318 ret = acl(path, SETACL, count, solaris_acl);
319 if (ret != 0) {
320 DEBUG(10, ("settinge file acl failed!\n"));
321 }
322
323 done:
324 DEBUG(10, ("solarisacl_sys_acl_delete_def_file %s.\n",
325 ((ret != 0) ? "failed" : "succeeded" )));
326 SAFE_FREE(smb_acl);
327 return ret;
328}
329
330
331/* private functions */
332
333static SOLARIS_ACL_T solaris_acl_init(int count)
334{
335 SOLARIS_ACL_T solaris_acl =
336 (SOLARIS_ACL_T)SMB_MALLOC(sizeof(aclent_t) * count);
337 if (solaris_acl == NULL) {
338 errno = ENOMEM;
339 }
340 return solaris_acl;
341}
342
343/*
344 * Convert the SMB acl to the ACCESS or DEFAULT part of a
345 * solaris ACL, as desired.
346 */
347static bool smb_acl_to_solaris_acl(SMB_ACL_T smb_acl,
348 SOLARIS_ACL_T *solaris_acl, int *count,
349 SMB_ACL_TYPE_T type)
350{
351 bool ret = False;
352 int i;
353
354 DEBUG(10, ("entering smb_acl_to_solaris_acl\n"));
355
356 *solaris_acl = NULL;
357 *count = 0;
358
359 for (i = 0; i < smb_acl->count; i++) {
360 const struct smb_acl_entry *smb_entry = &(smb_acl->acl[i]);
361 SOLARIS_ACE_T solaris_entry;
362
363 ZERO_STRUCT(solaris_entry);
364
365 solaris_entry.a_type = smb_tag_to_solaris_tag(smb_entry->a_type);
366 if (solaris_entry.a_type == 0) {
367 DEBUG(10, ("smb_tag to solaris_tag failed\n"));
368 goto fail;
369 }
370 switch(solaris_entry.a_type) {
371 case USER:
372 DEBUG(10, ("got tag type USER with uid %u\n",
373 (unsigned int)smb_entry->uid));
374 solaris_entry.a_id = (uid_t)smb_entry->uid;
375 break;
376 case GROUP:
377 DEBUG(10, ("got tag type GROUP with gid %u\n",
378 (unsigned int)smb_entry->gid));
379 solaris_entry.a_id = (uid_t)smb_entry->gid;
380 break;
381 default:
382 break;
383 }
384 if (type == SMB_ACL_TYPE_DEFAULT) {
385 DEBUG(10, ("adding default bit to solaris ace\n"));
386 solaris_entry.a_type |= ACL_DEFAULT;
387 }
388
389 solaris_entry.a_perm =
390 smb_perm_to_solaris_perm(smb_entry->a_perm);
391 DEBUG(10, ("assembled the following solaris ace:\n"));
392 DEBUGADD(10, (" - type: 0x%04x\n", solaris_entry.a_type));
393 DEBUGADD(10, (" - id: %u\n", (unsigned int)solaris_entry.a_id));
394 DEBUGADD(10, (" - perm: o%o\n", solaris_entry.a_perm));
395 if (!solaris_add_to_acl(solaris_acl, count, &solaris_entry,
396 1, type))
397 {
398 DEBUG(10, ("error adding acl entry\n"));
399 goto fail;
400 }
401 DEBUG(10, ("count after adding: %d (i: %d)\n", *count, i));
402 DEBUG(10, ("test, if entry has been copied into acl:\n"));
403 DEBUGADD(10, (" - type: 0x%04x\n",
404 (*solaris_acl)[(*count)-1].a_type));
405 DEBUGADD(10, (" - id: %u\n",
406 (unsigned int)(*solaris_acl)[(*count)-1].a_id));
407 DEBUGADD(10, (" - perm: o%o\n",
408 (*solaris_acl)[(*count)-1].a_perm));
409 }
410
411 ret = True;
412 goto done;
413
414 fail:
415 SAFE_FREE(*solaris_acl);
416 done:
417 DEBUG(10, ("smb_acl_to_solaris_acl %s\n",
418 ((ret == True) ? "succeeded" : "failed")));
419 return ret;
420}
421
422/*
423 * convert either the access or the default part of a
424 * soaris acl to the SMB_ACL format.
425 */
426static SMB_ACL_T solaris_acl_to_smb_acl(SOLARIS_ACL_T solaris_acl, int count,
427 SMB_ACL_TYPE_T type)
428{
429 SMB_ACL_T result;
430 int i;
431
432 if ((result = sys_acl_init(0)) == NULL) {
433 DEBUG(10, ("error allocating memory for SMB_ACL\n"));
434 goto fail;
435 }
436 for (i = 0; i < count; i++) {
437 SMB_ACL_ENTRY_T smb_entry;
438 SMB_ACL_PERM_T smb_perm;
439
440 if (!_IS_OF_TYPE(solaris_acl[i], type)) {
441 continue;
442 }
443 result = SMB_REALLOC(result,
444 sizeof(struct smb_acl_t) +
445 (sizeof(struct smb_acl_entry) *
446 (result->count + 1)));
447 if (result == NULL) {
448 DEBUG(10, ("error reallocating memory for SMB_ACL\n"));
449 goto fail;
450 }
451 smb_entry = &result->acl[result->count];
452 if (sys_acl_set_tag_type(smb_entry,
453 solaris_tag_to_smb_tag(solaris_acl[i].a_type)) != 0)
454 {
455 DEBUG(10, ("invalid tag type given: 0x%04x\n",
456 solaris_acl[i].a_type));
457 goto fail;
458 }
459 /* intentionally not checking return code here: */
460 sys_acl_set_qualifier(smb_entry, (void *)&solaris_acl[i].a_id);
461 smb_perm = solaris_perm_to_smb_perm(solaris_acl[i].a_perm);
462 if (sys_acl_set_permset(smb_entry, &smb_perm) != 0) {
463 DEBUG(10, ("invalid permset given: %d\n",
464 solaris_acl[i].a_perm));
465 goto fail;
466 }
467 result->count += 1;
468 }
469 goto done;
470
471 fail:
472 SAFE_FREE(result);
473 done:
474 DEBUG(10, ("solaris_acl_to_smb_acl %s\n",
475 ((result == NULL) ? "failed" : "succeeded")));
476 return result;
477}
478
479
480
481static SOLARIS_ACL_TAG_T smb_tag_to_solaris_tag(SMB_ACL_TAG_T smb_tag)
482{
483 SOLARIS_ACL_TAG_T solaris_tag = 0;
484
485 DEBUG(10, ("smb_tag_to_solaris_tag\n"));
486 DEBUGADD(10, (" --> got smb tag 0x%04x\n", smb_tag));
487
488 switch (smb_tag) {
489 case SMB_ACL_USER:
490 solaris_tag = USER;
491 break;
492 case SMB_ACL_USER_OBJ:
493 solaris_tag = USER_OBJ;
494 break;
495 case SMB_ACL_GROUP:
496 solaris_tag = GROUP;
497 break;
498 case SMB_ACL_GROUP_OBJ:
499 solaris_tag = GROUP_OBJ;
500 break;
501 case SMB_ACL_OTHER:
502 solaris_tag = OTHER_OBJ;
503 break;
504 case SMB_ACL_MASK:
505 solaris_tag = CLASS_OBJ;
506 break;
507 default:
508 DEBUGADD(10, (" !!! unknown smb tag type 0x%04x\n", smb_tag));
509 break;
510 }
511
512 DEBUGADD(10, (" --> determined solaris tag 0x%04x\n", solaris_tag));
513
514 return solaris_tag;
515}
516
517static SMB_ACL_TAG_T solaris_tag_to_smb_tag(SOLARIS_ACL_TAG_T solaris_tag)
518{
519 SMB_ACL_TAG_T smb_tag = 0;
520
521 DEBUG(10, ("solaris_tag_to_smb_tag:\n"));
522 DEBUGADD(10, (" --> got solaris tag 0x%04x\n", solaris_tag));
523
524 solaris_tag &= ~ACL_DEFAULT;
525
526 switch (solaris_tag) {
527 case USER:
528 smb_tag = SMB_ACL_USER;
529 break;
530 case USER_OBJ:
531 smb_tag = SMB_ACL_USER_OBJ;
532 break;
533 case GROUP:
534 smb_tag = SMB_ACL_GROUP;
535 break;
536 case GROUP_OBJ:
537 smb_tag = SMB_ACL_GROUP_OBJ;
538 break;
539 case OTHER_OBJ:
540 smb_tag = SMB_ACL_OTHER;
541 break;
542 case CLASS_OBJ:
543 smb_tag = SMB_ACL_MASK;
544 break;
545 default:
546 DEBUGADD(10, (" !!! unknown solaris tag type: 0x%04x\n",
547 solaris_tag));
548 break;
549 }
550
551 DEBUGADD(10, (" --> determined smb tag 0x%04x\n", smb_tag));
552
553 return smb_tag;
554}
555
556
557static SMB_ACL_PERM_T solaris_perm_to_smb_perm(const SOLARIS_PERM_T perm)
558{
559 SMB_ACL_PERM_T smb_perm = 0;
560 smb_perm |= ((perm & SMB_ACL_READ) ? SMB_ACL_READ : 0);
561 smb_perm |= ((perm & SMB_ACL_WRITE) ? SMB_ACL_WRITE : 0);
562 smb_perm |= ((perm & SMB_ACL_EXECUTE) ? SMB_ACL_EXECUTE : 0);
563 return smb_perm;
564}
565
566
567static SOLARIS_PERM_T smb_perm_to_solaris_perm(const SMB_ACL_PERM_T perm)
568{
569 SOLARIS_PERM_T solaris_perm = 0;
570 solaris_perm |= ((perm & SMB_ACL_READ) ? SMB_ACL_READ : 0);
571 solaris_perm |= ((perm & SMB_ACL_WRITE) ? SMB_ACL_WRITE : 0);
572 solaris_perm |= ((perm & SMB_ACL_EXECUTE) ? SMB_ACL_EXECUTE : 0);
573 return solaris_perm;
574}
575
576
577static bool solaris_acl_get_file(const char *name, SOLARIS_ACL_T *solaris_acl,
578 int *count)
579{
580 bool result = False;
581
582 DEBUG(10, ("solaris_acl_get_file called for file '%s'\n", name));
583
584 /*
585 * The original code tries some INITIAL_ACL_SIZE
586 * and only did the GETACLCNT call upon failure
587 * (for performance reasons).
588 * For the sake of simplicity, I skip this for now.
589 */
590 *count = acl(name, GETACLCNT, 0, NULL);
591 if (*count < 0) {
592 DEBUG(10, ("acl GETACLCNT failed: %s\n", strerror(errno)));
593 goto done;
594 }
595 *solaris_acl = solaris_acl_init(*count);
596 if (*solaris_acl == NULL) {
597 DEBUG(10, ("error allocating memory for solaris acl...\n"));
598 goto done;
599 }
600 *count = acl(name, GETACL, *count, *solaris_acl);
601 if (*count < 0) {
602 DEBUG(10, ("acl GETACL failed: %s\n", strerror(errno)));
603 goto done;
604 }
605 result = True;
606
607 done:
608 DEBUG(10, ("solaris_acl_get_file %s.\n",
609 ((result == True) ? "succeeded" : "failed" )));
610 return result;
611}
612
613
614static bool solaris_acl_get_fd(int fd, SOLARIS_ACL_T *solaris_acl, int *count)
615{
616 bool ret = False;
617
618 DEBUG(10, ("entering solaris_acl_get_fd\n"));
619
620 /*
621 * see solaris_acl_get_file for comment about omission
622 * of INITIAL_ACL_SIZE...
623 */
624 *count = facl(fd, GETACLCNT, 0, NULL);
625 if (*count < 0) {
626 DEBUG(10, ("facl GETACLCNT failed: %s\n", strerror(errno)));
627 goto done;
628 }
629 *solaris_acl = solaris_acl_init(*count);
630 if (*solaris_acl == NULL) {
631 DEBUG(10, ("error allocating memory for solaris acl...\n"));
632 goto done;
633 }
634 *count = facl(fd, GETACL, *count, *solaris_acl);
635 if (*count < 0) {
636 DEBUG(10, ("facl GETACL failed: %s\n", strerror(errno)));
637 goto done;
638 }
639 ret = True;
640
641 done:
642 DEBUG(10, ("solaris_acl_get_fd %s\n",
643 ((ret == True) ? "succeeded" : "failed")));
644 return ret;
645}
646
647
648
649/*
650 * Add entries to a solaris ACL.
651 *
652 * Entries are directly added to the solarisacl parameter.
653 * if memory allocation fails, this may result in solarisacl
654 * being NULL. if the resulting acl is to be checked and is
655 * not valid, it is kept in solarisacl but False is returned.
656 *
657 * The type of ACEs (access/default) to be added to the ACL can
658 * be selected via the type parameter.
659 * I use the SMB_ACL_TYPE_T type here. Since SMB_ACL_TYPE_ACCESS
660 * is defined as "0", this means that one can only add either
661 * access or default ACEs, not both at the same time. If it
662 * should become necessary to add all of an ACL, one would have
663 * to replace this parameter by another type.
664 */
665static bool solaris_add_to_acl(SOLARIS_ACL_T *solaris_acl, int *count,
666 SOLARIS_ACL_T add_acl, int add_count,
667 SMB_ACL_TYPE_T type)
668{
669 int i;
670
671 if ((type != SMB_ACL_TYPE_ACCESS) && (type != SMB_ACL_TYPE_DEFAULT))
672 {
673 DEBUG(10, ("invalid acl type given: %d\n", type));
674 errno = EINVAL;
675 return False;
676 }
677 for (i = 0; i < add_count; i++) {
678 if (!_IS_OF_TYPE(add_acl[i], type)) {
679 continue;
680 }
681 ADD_TO_ARRAY(NULL, SOLARIS_ACE_T, add_acl[i],
682 solaris_acl, count);
683 if (solaris_acl == NULL) {
684 DEBUG(10, ("error enlarging acl.\n"));
685 errno = ENOMEM;
686 return False;
687 }
688 }
689 return True;
690}
691
692
693/*
694 * sort the ACL and check it for validity
695 *
696 * [original comment from lib/sysacls.c:]
697 *
698 * if it's a minimal ACL with only 4 entries then we
699 * need to recalculate the mask permissions to make
700 * sure that they are the same as the GROUP_OBJ
701 * permissions as required by the UnixWare acl() system call.
702 *
703 * (note: since POSIX allows minimal ACLs which only contain
704 * 3 entries - ie there is no mask entry - we should, in theory,
705 * check for this and add a mask entry if necessary - however
706 * we "know" that the caller of this interface always specifies
707 * a mask, so in practice "this never happens" (tm) - if it *does*
708 * happen aclsort() will fail and return an error and someone will
709 * have to fix it...)
710 */
711static bool solaris_acl_sort(SOLARIS_ACL_T solaris_acl, int count)
712{
713 int fixmask = (count <= 4);
714
715 if (aclsort(count, fixmask, solaris_acl) != 0) {
716 errno = EINVAL;
717 return False;
718 }
719 return True;
720}
721
722#if 0
723/*
724 * acl check function:
725 * unused at the moment but could be used to get more
726 * concrete error messages for debugging...
727 * (acl sort just says that the acl is invalid...)
728 */
729static bool solaris_acl_check(SOLARIS_ACL_T solaris_acl, int count)
730{
731 int check_rc;
732 int check_which;
733
734 check_rc = aclcheck(solaris_acl, count, &check_which);
735 if (check_rc != 0) {
736 DEBUG(10, ("acl is not valid:\n"));
737 DEBUGADD(10, (" - return code: %d\n", check_rc));
738 DEBUGADD(10, (" - which: %d\n", check_which));
739 if (check_which != -1) {
740 DEBUGADD(10, (" - invalid entry:\n"));
741 DEBUGADD(10, (" * type: %d:\n",
742 solaris_acl[check_which].a_type));
743 DEBUGADD(10, (" * id: %d\n",
744 solaris_acl[check_which].a_id));
745 DEBUGADD(10, (" * perm: 0o%o\n",
746 solaris_acl[check_which].a_perm));
747 }
748 return False;
749 }
750 return True;
751}
752#endif
753
754static struct vfs_fn_pointers solarisacl_fns = {
755 .sys_acl_get_file = solarisacl_sys_acl_get_file,
756 .sys_acl_get_fd = solarisacl_sys_acl_get_fd,
757 .sys_acl_set_file = solarisacl_sys_acl_set_file,
758 .sys_acl_set_fd = solarisacl_sys_acl_set_fd,
759 .sys_acl_delete_def_file = solarisacl_sys_acl_delete_def_file,
760};
761
762NTSTATUS vfs_solarisacl_init(void);
763NTSTATUS vfs_solarisacl_init(void)
764{
765 return smb_register_vfs(SMB_VFS_INTERFACE_VERSION, "solarisacl",
766 &solarisacl_fns);
767}
768
769/* ENTE */
Note: See TracBrowser for help on using the repository browser.