1  // SPDX-License-Identifier: GPL-2.0-only
2  /*
3   * Syscall interface to knfsd.
4   *
5   * Copyright (C) 1995, 1996 Olaf Kirch <okir@monad.swb.de>
6   */
7  
8  #include <linux/slab.h>
9  #include <linux/namei.h>
10  #include <linux/ctype.h>
11  #include <linux/fs_context.h>
12  
13  #include <linux/sunrpc/svcsock.h>
14  #include <linux/lockd/lockd.h>
15  #include <linux/sunrpc/addr.h>
16  #include <linux/sunrpc/gss_api.h>
17  #include <linux/sunrpc/rpc_pipe_fs.h>
18  #include <linux/sunrpc/svc.h>
19  #include <linux/module.h>
20  #include <linux/fsnotify.h>
21  #include <linux/nfslocalio.h>
22  
23  #include "idmap.h"
24  #include "nfsd.h"
25  #include "cache.h"
26  #include "state.h"
27  #include "netns.h"
28  #include "pnfs.h"
29  #include "filecache.h"
30  #include "trace.h"
31  #include "netlink.h"
32  
33  /*
34   *	We have a single directory with several nodes in it.
35   */
36  enum {
37  	NFSD_Root = 1,
38  	NFSD_List,
39  	NFSD_Export_Stats,
40  	NFSD_Export_features,
41  	NFSD_Fh,
42  	NFSD_FO_UnlockIP,
43  	NFSD_FO_UnlockFS,
44  	NFSD_Threads,
45  	NFSD_Pool_Threads,
46  	NFSD_Pool_Stats,
47  	NFSD_Reply_Cache_Stats,
48  	NFSD_Versions,
49  	NFSD_Ports,
50  	NFSD_MaxBlkSize,
51  	NFSD_MaxConnections,
52  	NFSD_Filecache,
53  	NFSD_Leasetime,
54  	NFSD_Gracetime,
55  	NFSD_RecoveryDir,
56  	NFSD_V4EndGrace,
57  	NFSD_MaxReserved
58  };
59  
60  /*
61   * write() for these nodes.
62   */
63  static ssize_t write_filehandle(struct file *file, char *buf, size_t size);
64  static ssize_t write_unlock_ip(struct file *file, char *buf, size_t size);
65  static ssize_t write_unlock_fs(struct file *file, char *buf, size_t size);
66  static ssize_t write_threads(struct file *file, char *buf, size_t size);
67  static ssize_t write_pool_threads(struct file *file, char *buf, size_t size);
68  static ssize_t write_versions(struct file *file, char *buf, size_t size);
69  static ssize_t write_ports(struct file *file, char *buf, size_t size);
70  static ssize_t write_maxblksize(struct file *file, char *buf, size_t size);
71  static ssize_t write_maxconn(struct file *file, char *buf, size_t size);
72  #ifdef CONFIG_NFSD_V4
73  static ssize_t write_leasetime(struct file *file, char *buf, size_t size);
74  static ssize_t write_gracetime(struct file *file, char *buf, size_t size);
75  #ifdef CONFIG_NFSD_LEGACY_CLIENT_TRACKING
76  static ssize_t write_recoverydir(struct file *file, char *buf, size_t size);
77  #endif
78  static ssize_t write_v4_end_grace(struct file *file, char *buf, size_t size);
79  #endif
80  
81  static ssize_t (*const write_op[])(struct file *, char *, size_t) = {
82  	[NFSD_Fh] = write_filehandle,
83  	[NFSD_FO_UnlockIP] = write_unlock_ip,
84  	[NFSD_FO_UnlockFS] = write_unlock_fs,
85  	[NFSD_Threads] = write_threads,
86  	[NFSD_Pool_Threads] = write_pool_threads,
87  	[NFSD_Versions] = write_versions,
88  	[NFSD_Ports] = write_ports,
89  	[NFSD_MaxBlkSize] = write_maxblksize,
90  	[NFSD_MaxConnections] = write_maxconn,
91  #ifdef CONFIG_NFSD_V4
92  	[NFSD_Leasetime] = write_leasetime,
93  	[NFSD_Gracetime] = write_gracetime,
94  #ifdef CONFIG_NFSD_LEGACY_CLIENT_TRACKING
95  	[NFSD_RecoveryDir] = write_recoverydir,
96  #endif
97  	[NFSD_V4EndGrace] = write_v4_end_grace,
98  #endif
99  };
100  
nfsctl_transaction_write(struct file * file,const char __user * buf,size_t size,loff_t * pos)101  static ssize_t nfsctl_transaction_write(struct file *file, const char __user *buf, size_t size, loff_t *pos)
102  {
103  	ino_t ino =  file_inode(file)->i_ino;
104  	char *data;
105  	ssize_t rv;
106  
107  	if (ino >= ARRAY_SIZE(write_op) || !write_op[ino])
108  		return -EINVAL;
109  
110  	data = simple_transaction_get(file, buf, size);
111  	if (IS_ERR(data))
112  		return PTR_ERR(data);
113  
114  	rv = write_op[ino](file, data, size);
115  	if (rv < 0)
116  		return rv;
117  
118  	simple_transaction_set(file, rv);
119  	return size;
120  }
121  
nfsctl_transaction_read(struct file * file,char __user * buf,size_t size,loff_t * pos)122  static ssize_t nfsctl_transaction_read(struct file *file, char __user *buf, size_t size, loff_t *pos)
123  {
124  	if (! file->private_data) {
125  		/* An attempt to read a transaction file without writing
126  		 * causes a 0-byte write so that the file can return
127  		 * state information
128  		 */
129  		ssize_t rv = nfsctl_transaction_write(file, buf, 0, pos);
130  		if (rv < 0)
131  			return rv;
132  	}
133  	return simple_transaction_read(file, buf, size, pos);
134  }
135  
136  static const struct file_operations transaction_ops = {
137  	.write		= nfsctl_transaction_write,
138  	.read		= nfsctl_transaction_read,
139  	.release	= simple_transaction_release,
140  	.llseek		= default_llseek,
141  };
142  
exports_net_open(struct net * net,struct file * file)143  static int exports_net_open(struct net *net, struct file *file)
144  {
145  	int err;
146  	struct seq_file *seq;
147  	struct nfsd_net *nn = net_generic(net, nfsd_net_id);
148  
149  	err = seq_open(file, &nfs_exports_op);
150  	if (err)
151  		return err;
152  
153  	seq = file->private_data;
154  	seq->private = nn->svc_export_cache;
155  	return 0;
156  }
157  
exports_nfsd_open(struct inode * inode,struct file * file)158  static int exports_nfsd_open(struct inode *inode, struct file *file)
159  {
160  	return exports_net_open(inode->i_sb->s_fs_info, file);
161  }
162  
163  static const struct file_operations exports_nfsd_operations = {
164  	.open		= exports_nfsd_open,
165  	.read		= seq_read,
166  	.llseek		= seq_lseek,
167  	.release	= seq_release,
168  };
169  
export_features_show(struct seq_file * m,void * v)170  static int export_features_show(struct seq_file *m, void *v)
171  {
172  	seq_printf(m, "0x%x 0x%x\n", NFSEXP_ALLFLAGS, NFSEXP_SECINFO_FLAGS);
173  	return 0;
174  }
175  
176  DEFINE_SHOW_ATTRIBUTE(export_features);
177  
nfsd_pool_stats_open(struct inode * inode,struct file * file)178  static int nfsd_pool_stats_open(struct inode *inode, struct file *file)
179  {
180  	struct nfsd_net *nn = net_generic(inode->i_sb->s_fs_info, nfsd_net_id);
181  
182  	return svc_pool_stats_open(&nn->nfsd_info, file);
183  }
184  
185  static const struct file_operations pool_stats_operations = {
186  	.open		= nfsd_pool_stats_open,
187  	.read		= seq_read,
188  	.llseek		= seq_lseek,
189  	.release	= seq_release,
190  };
191  
192  DEFINE_SHOW_ATTRIBUTE(nfsd_reply_cache_stats);
193  
194  DEFINE_SHOW_ATTRIBUTE(nfsd_file_cache_stats);
195  
196  /*----------------------------------------------------------------------------*/
197  /*
198   * payload - write methods
199   */
200  
netns(struct file * file)201  static inline struct net *netns(struct file *file)
202  {
203  	return file_inode(file)->i_sb->s_fs_info;
204  }
205  
206  /*
207   * write_unlock_ip - Release all locks used by a client
208   *
209   * Experimental.
210   *
211   * Input:
212   *			buf:	'\n'-terminated C string containing a
213   *				presentation format IP address
214   *			size:	length of C string in @buf
215   * Output:
216   *	On success:	returns zero if all specified locks were released;
217   *			returns one if one or more locks were not released
218   *	On error:	return code is negative errno value
219   */
write_unlock_ip(struct file * file,char * buf,size_t size)220  static ssize_t write_unlock_ip(struct file *file, char *buf, size_t size)
221  {
222  	struct sockaddr_storage address;
223  	struct sockaddr *sap = (struct sockaddr *)&address;
224  	size_t salen = sizeof(address);
225  	char *fo_path;
226  	struct net *net = netns(file);
227  
228  	/* sanity check */
229  	if (size == 0)
230  		return -EINVAL;
231  
232  	if (buf[size-1] != '\n')
233  		return -EINVAL;
234  
235  	fo_path = buf;
236  	if (qword_get(&buf, fo_path, size) < 0)
237  		return -EINVAL;
238  
239  	if (rpc_pton(net, fo_path, size, sap, salen) == 0)
240  		return -EINVAL;
241  
242  	trace_nfsd_ctl_unlock_ip(net, buf);
243  	return nlmsvc_unlock_all_by_ip(sap);
244  }
245  
246  /*
247   * write_unlock_fs - Release all locks on a local file system
248   *
249   * Experimental.
250   *
251   * Input:
252   *			buf:	'\n'-terminated C string containing the
253   *				absolute pathname of a local file system
254   *			size:	length of C string in @buf
255   * Output:
256   *	On success:	returns zero if all specified locks were released;
257   *			returns one if one or more locks were not released
258   *	On error:	return code is negative errno value
259   */
write_unlock_fs(struct file * file,char * buf,size_t size)260  static ssize_t write_unlock_fs(struct file *file, char *buf, size_t size)
261  {
262  	struct path path;
263  	char *fo_path;
264  	int error;
265  
266  	/* sanity check */
267  	if (size == 0)
268  		return -EINVAL;
269  
270  	if (buf[size-1] != '\n')
271  		return -EINVAL;
272  
273  	fo_path = buf;
274  	if (qword_get(&buf, fo_path, size) < 0)
275  		return -EINVAL;
276  	trace_nfsd_ctl_unlock_fs(netns(file), fo_path);
277  	error = kern_path(fo_path, 0, &path);
278  	if (error)
279  		return error;
280  
281  	/*
282  	 * XXX: Needs better sanity checking.  Otherwise we could end up
283  	 * releasing locks on the wrong file system.
284  	 *
285  	 * For example:
286  	 * 1.  Does the path refer to a directory?
287  	 * 2.  Is that directory a mount point, or
288  	 * 3.  Is that directory the root of an exported file system?
289  	 */
290  	error = nlmsvc_unlock_all_by_sb(path.dentry->d_sb);
291  	nfsd4_revoke_states(netns(file), path.dentry->d_sb);
292  
293  	path_put(&path);
294  	return error;
295  }
296  
297  /*
298   * write_filehandle - Get a variable-length NFS file handle by path
299   *
300   * On input, the buffer contains a '\n'-terminated C string comprised of
301   * three alphanumeric words separated by whitespace.  The string may
302   * contain escape sequences.
303   *
304   * Input:
305   *			buf:
306   *				domain:		client domain name
307   *				path:		export pathname
308   *				maxsize:	numeric maximum size of
309   *						@buf
310   *			size:	length of C string in @buf
311   * Output:
312   *	On success:	passed-in buffer filled with '\n'-terminated C
313   *			string containing a ASCII hex text version
314   *			of the NFS file handle;
315   *			return code is the size in bytes of the string
316   *	On error:	return code is negative errno value
317   */
write_filehandle(struct file * file,char * buf,size_t size)318  static ssize_t write_filehandle(struct file *file, char *buf, size_t size)
319  {
320  	char *dname, *path;
321  	int maxsize;
322  	char *mesg = buf;
323  	int len;
324  	struct auth_domain *dom;
325  	struct knfsd_fh fh;
326  
327  	if (size == 0)
328  		return -EINVAL;
329  
330  	if (buf[size-1] != '\n')
331  		return -EINVAL;
332  	buf[size-1] = 0;
333  
334  	dname = mesg;
335  	len = qword_get(&mesg, dname, size);
336  	if (len <= 0)
337  		return -EINVAL;
338  
339  	path = dname+len+1;
340  	len = qword_get(&mesg, path, size);
341  	if (len <= 0)
342  		return -EINVAL;
343  
344  	len = get_int(&mesg, &maxsize);
345  	if (len)
346  		return len;
347  
348  	if (maxsize < NFS_FHSIZE)
349  		return -EINVAL;
350  	maxsize = min(maxsize, NFS3_FHSIZE);
351  
352  	if (qword_get(&mesg, mesg, size) > 0)
353  		return -EINVAL;
354  
355  	trace_nfsd_ctl_filehandle(netns(file), dname, path, maxsize);
356  
357  	/* we have all the words, they are in buf.. */
358  	dom = unix_domain_find(dname);
359  	if (!dom)
360  		return -ENOMEM;
361  
362  	len = exp_rootfh(netns(file), dom, path, &fh, maxsize);
363  	auth_domain_put(dom);
364  	if (len)
365  		return len;
366  
367  	mesg = buf;
368  	len = SIMPLE_TRANSACTION_LIMIT;
369  	qword_addhex(&mesg, &len, fh.fh_raw, fh.fh_size);
370  	mesg[-1] = '\n';
371  	return mesg - buf;
372  }
373  
374  /*
375   * write_threads - Start NFSD, or report the current number of running threads
376   *
377   * Input:
378   *			buf:		ignored
379   *			size:		zero
380   * Output:
381   *	On success:	passed-in buffer filled with '\n'-terminated C
382   *			string numeric value representing the number of
383   *			running NFSD threads;
384   *			return code is the size in bytes of the string
385   *	On error:	return code is zero
386   *
387   * OR
388   *
389   * Input:
390   *			buf:		C string containing an unsigned
391   *					integer value representing the
392   *					number of NFSD threads to start
393   *			size:		non-zero length of C string in @buf
394   * Output:
395   *	On success:	NFS service is started;
396   *			passed-in buffer filled with '\n'-terminated C
397   *			string numeric value representing the number of
398   *			running NFSD threads;
399   *			return code is the size in bytes of the string
400   *	On error:	return code is zero or a negative errno value
401   */
write_threads(struct file * file,char * buf,size_t size)402  static ssize_t write_threads(struct file *file, char *buf, size_t size)
403  {
404  	char *mesg = buf;
405  	int rv;
406  	struct net *net = netns(file);
407  
408  	if (size > 0) {
409  		int newthreads;
410  		rv = get_int(&mesg, &newthreads);
411  		if (rv)
412  			return rv;
413  		if (newthreads < 0)
414  			return -EINVAL;
415  		trace_nfsd_ctl_threads(net, newthreads);
416  		mutex_lock(&nfsd_mutex);
417  		rv = nfsd_svc(1, &newthreads, net, file->f_cred, NULL);
418  		mutex_unlock(&nfsd_mutex);
419  		if (rv < 0)
420  			return rv;
421  	} else
422  		rv = nfsd_nrthreads(net);
423  
424  	return scnprintf(buf, SIMPLE_TRANSACTION_LIMIT, "%d\n", rv);
425  }
426  
427  /*
428   * write_pool_threads - Set or report the current number of threads per pool
429   *
430   * Input:
431   *			buf:		ignored
432   *			size:		zero
433   *
434   * OR
435   *
436   * Input:
437   *			buf:		C string containing whitespace-
438   *					separated unsigned integer values
439   *					representing the number of NFSD
440   *					threads to start in each pool
441   *			size:		non-zero length of C string in @buf
442   * Output:
443   *	On success:	passed-in buffer filled with '\n'-terminated C
444   *			string containing integer values representing the
445   *			number of NFSD threads in each pool;
446   *			return code is the size in bytes of the string
447   *	On error:	return code is zero or a negative errno value
448   */
write_pool_threads(struct file * file,char * buf,size_t size)449  static ssize_t write_pool_threads(struct file *file, char *buf, size_t size)
450  {
451  	/* if size > 0, look for an array of number of threads per node
452  	 * and apply them  then write out number of threads per node as reply
453  	 */
454  	char *mesg = buf;
455  	int i;
456  	int rv;
457  	int len;
458  	int npools;
459  	int *nthreads;
460  	struct net *net = netns(file);
461  
462  	mutex_lock(&nfsd_mutex);
463  	npools = nfsd_nrpools(net);
464  	if (npools == 0) {
465  		/*
466  		 * NFS is shut down.  The admin can start it by
467  		 * writing to the threads file but NOT the pool_threads
468  		 * file, sorry.  Report zero threads.
469  		 */
470  		mutex_unlock(&nfsd_mutex);
471  		strcpy(buf, "0\n");
472  		return strlen(buf);
473  	}
474  
475  	nthreads = kcalloc(npools, sizeof(int), GFP_KERNEL);
476  	rv = -ENOMEM;
477  	if (nthreads == NULL)
478  		goto out_free;
479  
480  	if (size > 0) {
481  		for (i = 0; i < npools; i++) {
482  			rv = get_int(&mesg, &nthreads[i]);
483  			if (rv == -ENOENT)
484  				break;		/* fewer numbers than pools */
485  			if (rv)
486  				goto out_free;	/* syntax error */
487  			rv = -EINVAL;
488  			if (nthreads[i] < 0)
489  				goto out_free;
490  			trace_nfsd_ctl_pool_threads(net, i, nthreads[i]);
491  		}
492  
493  		/*
494  		 * There must always be a thread in pool 0; the admin
495  		 * can't shut down NFS completely using pool_threads.
496  		 */
497  		if (nthreads[0] == 0)
498  			nthreads[0] = 1;
499  
500  		rv = nfsd_set_nrthreads(i, nthreads, net);
501  		if (rv)
502  			goto out_free;
503  	}
504  
505  	rv = nfsd_get_nrthreads(npools, nthreads, net);
506  	if (rv)
507  		goto out_free;
508  
509  	mesg = buf;
510  	size = SIMPLE_TRANSACTION_LIMIT;
511  	for (i = 0; i < npools && size > 0; i++) {
512  		snprintf(mesg, size, "%d%c", nthreads[i], (i == npools-1 ? '\n' : ' '));
513  		len = strlen(mesg);
514  		size -= len;
515  		mesg += len;
516  	}
517  	rv = mesg - buf;
518  out_free:
519  	kfree(nthreads);
520  	mutex_unlock(&nfsd_mutex);
521  	return rv;
522  }
523  
524  static ssize_t
nfsd_print_version_support(struct nfsd_net * nn,char * buf,int remaining,const char * sep,unsigned vers,int minor)525  nfsd_print_version_support(struct nfsd_net *nn, char *buf, int remaining,
526  		const char *sep, unsigned vers, int minor)
527  {
528  	const char *format = minor < 0 ? "%s%c%u" : "%s%c%u.%u";
529  	bool supported = !!nfsd_vers(nn, vers, NFSD_TEST);
530  
531  	if (vers == 4 && minor >= 0 &&
532  	    !nfsd_minorversion(nn, minor, NFSD_TEST))
533  		supported = false;
534  	if (minor == 0 && supported)
535  		/*
536  		 * special case for backward compatability.
537  		 * +4.0 is never reported, it is implied by
538  		 * +4, unless -4.0 is present.
539  		 */
540  		return 0;
541  	return snprintf(buf, remaining, format, sep,
542  			supported ? '+' : '-', vers, minor);
543  }
544  
__write_versions(struct file * file,char * buf,size_t size)545  static ssize_t __write_versions(struct file *file, char *buf, size_t size)
546  {
547  	char *mesg = buf;
548  	char *vers, *minorp, sign;
549  	int len, num, remaining;
550  	ssize_t tlen = 0;
551  	char *sep;
552  	struct nfsd_net *nn = net_generic(netns(file), nfsd_net_id);
553  
554  	if (size > 0) {
555  		if (nn->nfsd_serv)
556  			/* Cannot change versions without updating
557  			 * nn->nfsd_serv->sv_xdrsize, and reallocing
558  			 * rq_argp and rq_resp
559  			 */
560  			return -EBUSY;
561  		if (buf[size-1] != '\n')
562  			return -EINVAL;
563  		buf[size-1] = 0;
564  		trace_nfsd_ctl_version(netns(file), buf);
565  
566  		vers = mesg;
567  		len = qword_get(&mesg, vers, size);
568  		if (len <= 0) return -EINVAL;
569  		do {
570  			enum vers_op cmd;
571  			unsigned minor;
572  			sign = *vers;
573  			if (sign == '+' || sign == '-')
574  				num = simple_strtol((vers+1), &minorp, 0);
575  			else
576  				num = simple_strtol(vers, &minorp, 0);
577  			if (*minorp == '.') {
578  				if (num != 4)
579  					return -EINVAL;
580  				if (kstrtouint(minorp+1, 0, &minor) < 0)
581  					return -EINVAL;
582  			}
583  
584  			cmd = sign == '-' ? NFSD_CLEAR : NFSD_SET;
585  			switch(num) {
586  #ifdef CONFIG_NFSD_V2
587  			case 2:
588  #endif
589  			case 3:
590  				nfsd_vers(nn, num, cmd);
591  				break;
592  			case 4:
593  				if (*minorp == '.') {
594  					if (nfsd_minorversion(nn, minor, cmd) < 0)
595  						return -EINVAL;
596  				} else if ((cmd == NFSD_SET) != nfsd_vers(nn, num, NFSD_TEST)) {
597  					/*
598  					 * Either we have +4 and no minors are enabled,
599  					 * or we have -4 and at least one minor is enabled.
600  					 * In either case, propagate 'cmd' to all minors.
601  					 */
602  					minor = 0;
603  					while (nfsd_minorversion(nn, minor, cmd) >= 0)
604  						minor++;
605  				}
606  				break;
607  			default:
608  				/* Ignore requests to disable non-existent versions */
609  				if (cmd == NFSD_SET)
610  					return -EINVAL;
611  			}
612  			vers += len + 1;
613  		} while ((len = qword_get(&mesg, vers, size)) > 0);
614  		/* If all get turned off, turn them back on, as
615  		 * having no versions is BAD
616  		 */
617  		nfsd_reset_versions(nn);
618  	}
619  
620  	/* Now write current state into reply buffer */
621  	sep = "";
622  	remaining = SIMPLE_TRANSACTION_LIMIT;
623  	for (num=2 ; num <= 4 ; num++) {
624  		int minor;
625  		if (!nfsd_vers(nn, num, NFSD_AVAIL))
626  			continue;
627  
628  		minor = -1;
629  		do {
630  			len = nfsd_print_version_support(nn, buf, remaining,
631  					sep, num, minor);
632  			if (len >= remaining)
633  				goto out;
634  			remaining -= len;
635  			buf += len;
636  			tlen += len;
637  			minor++;
638  			if (len)
639  				sep = " ";
640  		} while (num == 4 && minor <= NFSD_SUPPORTED_MINOR_VERSION);
641  	}
642  out:
643  	len = snprintf(buf, remaining, "\n");
644  	if (len >= remaining)
645  		return -EINVAL;
646  	return tlen + len;
647  }
648  
649  /*
650   * write_versions - Set or report the available NFS protocol versions
651   *
652   * Input:
653   *			buf:		ignored
654   *			size:		zero
655   * Output:
656   *	On success:	passed-in buffer filled with '\n'-terminated C
657   *			string containing positive or negative integer
658   *			values representing the current status of each
659   *			protocol version;
660   *			return code is the size in bytes of the string
661   *	On error:	return code is zero or a negative errno value
662   *
663   * OR
664   *
665   * Input:
666   *			buf:		C string containing whitespace-
667   *					separated positive or negative
668   *					integer values representing NFS
669   *					protocol versions to enable ("+n")
670   *					or disable ("-n")
671   *			size:		non-zero length of C string in @buf
672   * Output:
673   *	On success:	status of zero or more protocol versions has
674   *			been updated; passed-in buffer filled with
675   *			'\n'-terminated C string containing positive
676   *			or negative integer values representing the
677   *			current status of each protocol version;
678   *			return code is the size in bytes of the string
679   *	On error:	return code is zero or a negative errno value
680   */
write_versions(struct file * file,char * buf,size_t size)681  static ssize_t write_versions(struct file *file, char *buf, size_t size)
682  {
683  	ssize_t rv;
684  
685  	mutex_lock(&nfsd_mutex);
686  	rv = __write_versions(file, buf, size);
687  	mutex_unlock(&nfsd_mutex);
688  	return rv;
689  }
690  
691  /*
692   * Zero-length write.  Return a list of NFSD's current listener
693   * transports.
694   */
__write_ports_names(char * buf,struct net * net)695  static ssize_t __write_ports_names(char *buf, struct net *net)
696  {
697  	struct nfsd_net *nn = net_generic(net, nfsd_net_id);
698  
699  	if (nn->nfsd_serv == NULL)
700  		return 0;
701  	return svc_xprt_names(nn->nfsd_serv, buf, SIMPLE_TRANSACTION_LIMIT);
702  }
703  
704  /*
705   * A single 'fd' number was written, in which case it must be for
706   * a socket of a supported family/protocol, and we use it as an
707   * nfsd listener.
708   */
__write_ports_addfd(char * buf,struct net * net,const struct cred * cred)709  static ssize_t __write_ports_addfd(char *buf, struct net *net, const struct cred *cred)
710  {
711  	char *mesg = buf;
712  	int fd, err;
713  	struct nfsd_net *nn = net_generic(net, nfsd_net_id);
714  	struct svc_serv *serv;
715  
716  	err = get_int(&mesg, &fd);
717  	if (err != 0 || fd < 0)
718  		return -EINVAL;
719  	trace_nfsd_ctl_ports_addfd(net, fd);
720  
721  	err = nfsd_create_serv(net);
722  	if (err != 0)
723  		return err;
724  
725  	serv = nn->nfsd_serv;
726  	err = svc_addsock(serv, net, fd, buf, SIMPLE_TRANSACTION_LIMIT, cred);
727  
728  	if (!serv->sv_nrthreads && list_empty(&nn->nfsd_serv->sv_permsocks))
729  		nfsd_destroy_serv(net);
730  
731  	return err;
732  }
733  
734  /*
735   * A transport listener is added by writing its transport name and
736   * a port number.
737   */
__write_ports_addxprt(char * buf,struct net * net,const struct cred * cred)738  static ssize_t __write_ports_addxprt(char *buf, struct net *net, const struct cred *cred)
739  {
740  	char transport[16];
741  	struct svc_xprt *xprt;
742  	int port, err;
743  	struct nfsd_net *nn = net_generic(net, nfsd_net_id);
744  	struct svc_serv *serv;
745  
746  	if (sscanf(buf, "%15s %5u", transport, &port) != 2)
747  		return -EINVAL;
748  
749  	if (port < 1 || port > USHRT_MAX)
750  		return -EINVAL;
751  	trace_nfsd_ctl_ports_addxprt(net, transport, port);
752  
753  	err = nfsd_create_serv(net);
754  	if (err != 0)
755  		return err;
756  
757  	serv = nn->nfsd_serv;
758  	err = svc_xprt_create(serv, transport, net,
759  			      PF_INET, port, SVC_SOCK_ANONYMOUS, cred);
760  	if (err < 0)
761  		goto out_err;
762  
763  	err = svc_xprt_create(serv, transport, net,
764  			      PF_INET6, port, SVC_SOCK_ANONYMOUS, cred);
765  	if (err < 0 && err != -EAFNOSUPPORT)
766  		goto out_close;
767  
768  	return 0;
769  out_close:
770  	xprt = svc_find_xprt(serv, transport, net, PF_INET, port);
771  	if (xprt != NULL) {
772  		svc_xprt_close(xprt);
773  		svc_xprt_put(xprt);
774  	}
775  out_err:
776  	if (!serv->sv_nrthreads && list_empty(&nn->nfsd_serv->sv_permsocks))
777  		nfsd_destroy_serv(net);
778  
779  	return err;
780  }
781  
__write_ports(struct file * file,char * buf,size_t size,struct net * net)782  static ssize_t __write_ports(struct file *file, char *buf, size_t size,
783  			     struct net *net)
784  {
785  	if (size == 0)
786  		return __write_ports_names(buf, net);
787  
788  	if (isdigit(buf[0]))
789  		return __write_ports_addfd(buf, net, file->f_cred);
790  
791  	if (isalpha(buf[0]))
792  		return __write_ports_addxprt(buf, net, file->f_cred);
793  
794  	return -EINVAL;
795  }
796  
797  /*
798   * write_ports - Pass a socket file descriptor or transport name to listen on
799   *
800   * Input:
801   *			buf:		ignored
802   *			size:		zero
803   * Output:
804   *	On success:	passed-in buffer filled with a '\n'-terminated C
805   *			string containing a whitespace-separated list of
806   *			named NFSD listeners;
807   *			return code is the size in bytes of the string
808   *	On error:	return code is zero or a negative errno value
809   *
810   * OR
811   *
812   * Input:
813   *			buf:		C string containing an unsigned
814   *					integer value representing a bound
815   *					but unconnected socket that is to be
816   *					used as an NFSD listener; listen(3)
817   *					must be called for a SOCK_STREAM
818   *					socket, otherwise it is ignored
819   *			size:		non-zero length of C string in @buf
820   * Output:
821   *	On success:	NFS service is started;
822   *			passed-in buffer filled with a '\n'-terminated C
823   *			string containing a unique alphanumeric name of
824   *			the listener;
825   *			return code is the size in bytes of the string
826   *	On error:	return code is a negative errno value
827   *
828   * OR
829   *
830   * Input:
831   *			buf:		C string containing a transport
832   *					name and an unsigned integer value
833   *					representing the port to listen on,
834   *					separated by whitespace
835   *			size:		non-zero length of C string in @buf
836   * Output:
837   *	On success:	returns zero; NFS service is started
838   *	On error:	return code is a negative errno value
839   */
write_ports(struct file * file,char * buf,size_t size)840  static ssize_t write_ports(struct file *file, char *buf, size_t size)
841  {
842  	ssize_t rv;
843  
844  	mutex_lock(&nfsd_mutex);
845  	rv = __write_ports(file, buf, size, netns(file));
846  	mutex_unlock(&nfsd_mutex);
847  	return rv;
848  }
849  
850  
851  int nfsd_max_blksize;
852  
853  /*
854   * write_maxblksize - Set or report the current NFS blksize
855   *
856   * Input:
857   *			buf:		ignored
858   *			size:		zero
859   *
860   * OR
861   *
862   * Input:
863   *			buf:		C string containing an unsigned
864   *					integer value representing the new
865   *					NFS blksize
866   *			size:		non-zero length of C string in @buf
867   * Output:
868   *	On success:	passed-in buffer filled with '\n'-terminated C string
869   *			containing numeric value of the current NFS blksize
870   *			setting;
871   *			return code is the size in bytes of the string
872   *	On error:	return code is zero or a negative errno value
873   */
write_maxblksize(struct file * file,char * buf,size_t size)874  static ssize_t write_maxblksize(struct file *file, char *buf, size_t size)
875  {
876  	char *mesg = buf;
877  	struct nfsd_net *nn = net_generic(netns(file), nfsd_net_id);
878  
879  	if (size > 0) {
880  		int bsize;
881  		int rv = get_int(&mesg, &bsize);
882  		if (rv)
883  			return rv;
884  		trace_nfsd_ctl_maxblksize(netns(file), bsize);
885  
886  		/* force bsize into allowed range and
887  		 * required alignment.
888  		 */
889  		bsize = max_t(int, bsize, 1024);
890  		bsize = min_t(int, bsize, NFSSVC_MAXBLKSIZE);
891  		bsize &= ~(1024-1);
892  		mutex_lock(&nfsd_mutex);
893  		if (nn->nfsd_serv) {
894  			mutex_unlock(&nfsd_mutex);
895  			return -EBUSY;
896  		}
897  		nfsd_max_blksize = bsize;
898  		mutex_unlock(&nfsd_mutex);
899  	}
900  
901  	return scnprintf(buf, SIMPLE_TRANSACTION_LIMIT, "%d\n",
902  							nfsd_max_blksize);
903  }
904  
905  /*
906   * write_maxconn - Set or report the current max number of connections
907   *
908   * Input:
909   *			buf:		ignored
910   *			size:		zero
911   * OR
912   *
913   * Input:
914   *			buf:		C string containing an unsigned
915   *					integer value representing the new
916   *					number of max connections
917   *			size:		non-zero length of C string in @buf
918   * Output:
919   *	On success:	passed-in buffer filled with '\n'-terminated C string
920   *			containing numeric value of max_connections setting
921   *			for this net namespace;
922   *			return code is the size in bytes of the string
923   *	On error:	return code is zero or a negative errno value
924   */
write_maxconn(struct file * file,char * buf,size_t size)925  static ssize_t write_maxconn(struct file *file, char *buf, size_t size)
926  {
927  	char *mesg = buf;
928  	struct nfsd_net *nn = net_generic(netns(file), nfsd_net_id);
929  	unsigned int maxconn = nn->max_connections;
930  
931  	if (size > 0) {
932  		int rv = get_uint(&mesg, &maxconn);
933  
934  		if (rv)
935  			return rv;
936  		trace_nfsd_ctl_maxconn(netns(file), maxconn);
937  		nn->max_connections = maxconn;
938  	}
939  
940  	return scnprintf(buf, SIMPLE_TRANSACTION_LIMIT, "%u\n", maxconn);
941  }
942  
943  #ifdef CONFIG_NFSD_V4
__nfsd4_write_time(struct file * file,char * buf,size_t size,time64_t * time,struct nfsd_net * nn)944  static ssize_t __nfsd4_write_time(struct file *file, char *buf, size_t size,
945  				  time64_t *time, struct nfsd_net *nn)
946  {
947  	struct dentry *dentry = file_dentry(file);
948  	char *mesg = buf;
949  	int rv, i;
950  
951  	if (size > 0) {
952  		if (nn->nfsd_serv)
953  			return -EBUSY;
954  		rv = get_int(&mesg, &i);
955  		if (rv)
956  			return rv;
957  		trace_nfsd_ctl_time(netns(file), dentry->d_name.name,
958  				    dentry->d_name.len, i);
959  
960  		/*
961  		 * Some sanity checking.  We don't have a reason for
962  		 * these particular numbers, but problems with the
963  		 * extremes are:
964  		 *	- Too short: the briefest network outage may
965  		 *	  cause clients to lose all their locks.  Also,
966  		 *	  the frequent polling may be wasteful.
967  		 *	- Too long: do you really want reboot recovery
968  		 *	  to take more than an hour?  Or to make other
969  		 *	  clients wait an hour before being able to
970  		 *	  revoke a dead client's locks?
971  		 */
972  		if (i < 10 || i > 3600)
973  			return -EINVAL;
974  		*time = i;
975  	}
976  
977  	return scnprintf(buf, SIMPLE_TRANSACTION_LIMIT, "%lld\n", *time);
978  }
979  
nfsd4_write_time(struct file * file,char * buf,size_t size,time64_t * time,struct nfsd_net * nn)980  static ssize_t nfsd4_write_time(struct file *file, char *buf, size_t size,
981  				time64_t *time, struct nfsd_net *nn)
982  {
983  	ssize_t rv;
984  
985  	mutex_lock(&nfsd_mutex);
986  	rv = __nfsd4_write_time(file, buf, size, time, nn);
987  	mutex_unlock(&nfsd_mutex);
988  	return rv;
989  }
990  
991  /*
992   * write_leasetime - Set or report the current NFSv4 lease time
993   *
994   * Input:
995   *			buf:		ignored
996   *			size:		zero
997   *
998   * OR
999   *
1000   * Input:
1001   *			buf:		C string containing an unsigned
1002   *					integer value representing the new
1003   *					NFSv4 lease expiry time
1004   *			size:		non-zero length of C string in @buf
1005   * Output:
1006   *	On success:	passed-in buffer filled with '\n'-terminated C
1007   *			string containing unsigned integer value of the
1008   *			current lease expiry time;
1009   *			return code is the size in bytes of the string
1010   *	On error:	return code is zero or a negative errno value
1011   */
write_leasetime(struct file * file,char * buf,size_t size)1012  static ssize_t write_leasetime(struct file *file, char *buf, size_t size)
1013  {
1014  	struct nfsd_net *nn = net_generic(netns(file), nfsd_net_id);
1015  	return nfsd4_write_time(file, buf, size, &nn->nfsd4_lease, nn);
1016  }
1017  
1018  /*
1019   * write_gracetime - Set or report current NFSv4 grace period time
1020   *
1021   * As above, but sets the time of the NFSv4 grace period.
1022   *
1023   * Note this should never be set to less than the *previous*
1024   * lease-period time, but we don't try to enforce this.  (In the common
1025   * case (a new boot), we don't know what the previous lease time was
1026   * anyway.)
1027   */
write_gracetime(struct file * file,char * buf,size_t size)1028  static ssize_t write_gracetime(struct file *file, char *buf, size_t size)
1029  {
1030  	struct nfsd_net *nn = net_generic(netns(file), nfsd_net_id);
1031  	return nfsd4_write_time(file, buf, size, &nn->nfsd4_grace, nn);
1032  }
1033  
1034  #ifdef CONFIG_NFSD_LEGACY_CLIENT_TRACKING
__write_recoverydir(struct file * file,char * buf,size_t size,struct nfsd_net * nn)1035  static ssize_t __write_recoverydir(struct file *file, char *buf, size_t size,
1036  				   struct nfsd_net *nn)
1037  {
1038  	char *mesg = buf;
1039  	char *recdir;
1040  	int len, status;
1041  
1042  	if (size > 0) {
1043  		if (nn->nfsd_serv)
1044  			return -EBUSY;
1045  		if (size > PATH_MAX || buf[size-1] != '\n')
1046  			return -EINVAL;
1047  		buf[size-1] = 0;
1048  
1049  		recdir = mesg;
1050  		len = qword_get(&mesg, recdir, size);
1051  		if (len <= 0)
1052  			return -EINVAL;
1053  		trace_nfsd_ctl_recoverydir(netns(file), recdir);
1054  
1055  		status = nfs4_reset_recoverydir(recdir);
1056  		if (status)
1057  			return status;
1058  	}
1059  
1060  	return scnprintf(buf, SIMPLE_TRANSACTION_LIMIT, "%s\n",
1061  							nfs4_recoverydir());
1062  }
1063  
1064  /*
1065   * write_recoverydir - Set or report the pathname of the recovery directory
1066   *
1067   * Input:
1068   *			buf:		ignored
1069   *			size:		zero
1070   *
1071   * OR
1072   *
1073   * Input:
1074   *			buf:		C string containing the pathname
1075   *					of the directory on a local file
1076   *					system containing permanent NFSv4
1077   *					recovery data
1078   *			size:		non-zero length of C string in @buf
1079   * Output:
1080   *	On success:	passed-in buffer filled with '\n'-terminated C string
1081   *			containing the current recovery pathname setting;
1082   *			return code is the size in bytes of the string
1083   *	On error:	return code is zero or a negative errno value
1084   */
write_recoverydir(struct file * file,char * buf,size_t size)1085  static ssize_t write_recoverydir(struct file *file, char *buf, size_t size)
1086  {
1087  	ssize_t rv;
1088  	struct nfsd_net *nn = net_generic(netns(file), nfsd_net_id);
1089  
1090  	mutex_lock(&nfsd_mutex);
1091  	rv = __write_recoverydir(file, buf, size, nn);
1092  	mutex_unlock(&nfsd_mutex);
1093  	return rv;
1094  }
1095  #endif
1096  
1097  /*
1098   * write_v4_end_grace - release grace period for nfsd's v4.x lock manager
1099   *
1100   * Input:
1101   *			buf:		ignored
1102   *			size:		zero
1103   * OR
1104   *
1105   * Input:
1106   *			buf:		any value
1107   *			size:		non-zero length of C string in @buf
1108   * Output:
1109   *			passed-in buffer filled with "Y" or "N" with a newline
1110   *			and NULL-terminated C string. This indicates whether
1111   *			the grace period has ended in the current net
1112   *			namespace. Return code is the size in bytes of the
1113   *			string. Writing a string that starts with 'Y', 'y', or
1114   *			'1' to the file will end the grace period for nfsd's v4
1115   *			lock manager.
1116   */
write_v4_end_grace(struct file * file,char * buf,size_t size)1117  static ssize_t write_v4_end_grace(struct file *file, char *buf, size_t size)
1118  {
1119  	struct nfsd_net *nn = net_generic(netns(file), nfsd_net_id);
1120  
1121  	if (size > 0) {
1122  		switch(buf[0]) {
1123  		case 'Y':
1124  		case 'y':
1125  		case '1':
1126  			if (!nn->nfsd_serv)
1127  				return -EBUSY;
1128  			trace_nfsd_end_grace(netns(file));
1129  			nfsd4_end_grace(nn);
1130  			break;
1131  		default:
1132  			return -EINVAL;
1133  		}
1134  	}
1135  
1136  	return scnprintf(buf, SIMPLE_TRANSACTION_LIMIT, "%c\n",
1137  			 nn->grace_ended ? 'Y' : 'N');
1138  }
1139  
1140  #endif
1141  
1142  /*----------------------------------------------------------------------------*/
1143  /*
1144   *	populating the filesystem.
1145   */
1146  
1147  /* Basically copying rpc_get_inode. */
nfsd_get_inode(struct super_block * sb,umode_t mode)1148  static struct inode *nfsd_get_inode(struct super_block *sb, umode_t mode)
1149  {
1150  	struct inode *inode = new_inode(sb);
1151  	if (!inode)
1152  		return NULL;
1153  	/* Following advice from simple_fill_super documentation: */
1154  	inode->i_ino = iunique(sb, NFSD_MaxReserved);
1155  	inode->i_mode = mode;
1156  	simple_inode_init_ts(inode);
1157  	switch (mode & S_IFMT) {
1158  	case S_IFDIR:
1159  		inode->i_fop = &simple_dir_operations;
1160  		inode->i_op = &simple_dir_inode_operations;
1161  		inc_nlink(inode);
1162  		break;
1163  	case S_IFLNK:
1164  		inode->i_op = &simple_symlink_inode_operations;
1165  		break;
1166  	default:
1167  		break;
1168  	}
1169  	return inode;
1170  }
1171  
__nfsd_mkdir(struct inode * dir,struct dentry * dentry,umode_t mode,struct nfsdfs_client * ncl)1172  static int __nfsd_mkdir(struct inode *dir, struct dentry *dentry, umode_t mode, struct nfsdfs_client *ncl)
1173  {
1174  	struct inode *inode;
1175  
1176  	inode = nfsd_get_inode(dir->i_sb, mode);
1177  	if (!inode)
1178  		return -ENOMEM;
1179  	if (ncl) {
1180  		inode->i_private = ncl;
1181  		kref_get(&ncl->cl_ref);
1182  	}
1183  	d_add(dentry, inode);
1184  	inc_nlink(dir);
1185  	fsnotify_mkdir(dir, dentry);
1186  	return 0;
1187  }
1188  
nfsd_mkdir(struct dentry * parent,struct nfsdfs_client * ncl,char * name)1189  static struct dentry *nfsd_mkdir(struct dentry *parent, struct nfsdfs_client *ncl, char *name)
1190  {
1191  	struct inode *dir = parent->d_inode;
1192  	struct dentry *dentry;
1193  	int ret = -ENOMEM;
1194  
1195  	inode_lock(dir);
1196  	dentry = d_alloc_name(parent, name);
1197  	if (!dentry)
1198  		goto out_err;
1199  	ret = __nfsd_mkdir(d_inode(parent), dentry, S_IFDIR | 0600, ncl);
1200  	if (ret)
1201  		goto out_err;
1202  out:
1203  	inode_unlock(dir);
1204  	return dentry;
1205  out_err:
1206  	dput(dentry);
1207  	dentry = ERR_PTR(ret);
1208  	goto out;
1209  }
1210  
1211  #if IS_ENABLED(CONFIG_SUNRPC_GSS)
__nfsd_symlink(struct inode * dir,struct dentry * dentry,umode_t mode,const char * content)1212  static int __nfsd_symlink(struct inode *dir, struct dentry *dentry,
1213  			  umode_t mode, const char *content)
1214  {
1215  	struct inode *inode;
1216  
1217  	inode = nfsd_get_inode(dir->i_sb, mode);
1218  	if (!inode)
1219  		return -ENOMEM;
1220  
1221  	inode->i_link = (char *)content;
1222  	inode->i_size = strlen(content);
1223  
1224  	d_add(dentry, inode);
1225  	inc_nlink(dir);
1226  	fsnotify_create(dir, dentry);
1227  	return 0;
1228  }
1229  
1230  /*
1231   * @content is assumed to be a NUL-terminated string that lives
1232   * longer than the symlink itself.
1233   */
_nfsd_symlink(struct dentry * parent,const char * name,const char * content)1234  static void _nfsd_symlink(struct dentry *parent, const char *name,
1235  			  const char *content)
1236  {
1237  	struct inode *dir = parent->d_inode;
1238  	struct dentry *dentry;
1239  	int ret;
1240  
1241  	inode_lock(dir);
1242  	dentry = d_alloc_name(parent, name);
1243  	if (!dentry)
1244  		goto out;
1245  	ret = __nfsd_symlink(d_inode(parent), dentry, S_IFLNK | 0777, content);
1246  	if (ret)
1247  		dput(dentry);
1248  out:
1249  	inode_unlock(dir);
1250  }
1251  #else
_nfsd_symlink(struct dentry * parent,const char * name,const char * content)1252  static inline void _nfsd_symlink(struct dentry *parent, const char *name,
1253  				 const char *content)
1254  {
1255  }
1256  
1257  #endif
1258  
clear_ncl(struct dentry * dentry)1259  static void clear_ncl(struct dentry *dentry)
1260  {
1261  	struct inode *inode = d_inode(dentry);
1262  	struct nfsdfs_client *ncl = inode->i_private;
1263  
1264  	spin_lock(&inode->i_lock);
1265  	inode->i_private = NULL;
1266  	spin_unlock(&inode->i_lock);
1267  	kref_put(&ncl->cl_ref, ncl->cl_release);
1268  }
1269  
get_nfsdfs_client(struct inode * inode)1270  struct nfsdfs_client *get_nfsdfs_client(struct inode *inode)
1271  {
1272  	struct nfsdfs_client *nc;
1273  
1274  	spin_lock(&inode->i_lock);
1275  	nc = inode->i_private;
1276  	if (nc)
1277  		kref_get(&nc->cl_ref);
1278  	spin_unlock(&inode->i_lock);
1279  	return nc;
1280  }
1281  
1282  /* XXX: cut'n'paste from simple_fill_super; figure out if we could share
1283   * code instead. */
nfsdfs_create_files(struct dentry * root,const struct tree_descr * files,struct nfsdfs_client * ncl,struct dentry ** fdentries)1284  static  int nfsdfs_create_files(struct dentry *root,
1285  				const struct tree_descr *files,
1286  				struct nfsdfs_client *ncl,
1287  				struct dentry **fdentries)
1288  {
1289  	struct inode *dir = d_inode(root);
1290  	struct inode *inode;
1291  	struct dentry *dentry;
1292  	int i;
1293  
1294  	inode_lock(dir);
1295  	for (i = 0; files->name && files->name[0]; i++, files++) {
1296  		dentry = d_alloc_name(root, files->name);
1297  		if (!dentry)
1298  			goto out;
1299  		inode = nfsd_get_inode(d_inode(root)->i_sb,
1300  					S_IFREG | files->mode);
1301  		if (!inode) {
1302  			dput(dentry);
1303  			goto out;
1304  		}
1305  		kref_get(&ncl->cl_ref);
1306  		inode->i_fop = files->ops;
1307  		inode->i_private = ncl;
1308  		d_add(dentry, inode);
1309  		fsnotify_create(dir, dentry);
1310  		if (fdentries)
1311  			fdentries[i] = dentry;
1312  	}
1313  	inode_unlock(dir);
1314  	return 0;
1315  out:
1316  	inode_unlock(dir);
1317  	return -ENOMEM;
1318  }
1319  
1320  /* on success, returns positive number unique to that client. */
nfsd_client_mkdir(struct nfsd_net * nn,struct nfsdfs_client * ncl,u32 id,const struct tree_descr * files,struct dentry ** fdentries)1321  struct dentry *nfsd_client_mkdir(struct nfsd_net *nn,
1322  				 struct nfsdfs_client *ncl, u32 id,
1323  				 const struct tree_descr *files,
1324  				 struct dentry **fdentries)
1325  {
1326  	struct dentry *dentry;
1327  	char name[11];
1328  	int ret;
1329  
1330  	sprintf(name, "%u", id);
1331  
1332  	dentry = nfsd_mkdir(nn->nfsd_client_dir, ncl, name);
1333  	if (IS_ERR(dentry)) /* XXX: tossing errors? */
1334  		return NULL;
1335  	ret = nfsdfs_create_files(dentry, files, ncl, fdentries);
1336  	if (ret) {
1337  		nfsd_client_rmdir(dentry);
1338  		return NULL;
1339  	}
1340  	return dentry;
1341  }
1342  
1343  /* Taken from __rpc_rmdir: */
nfsd_client_rmdir(struct dentry * dentry)1344  void nfsd_client_rmdir(struct dentry *dentry)
1345  {
1346  	simple_recursive_removal(dentry, clear_ncl);
1347  }
1348  
nfsd_fill_super(struct super_block * sb,struct fs_context * fc)1349  static int nfsd_fill_super(struct super_block *sb, struct fs_context *fc)
1350  {
1351  	struct nfsd_net *nn = net_generic(current->nsproxy->net_ns,
1352  							nfsd_net_id);
1353  	struct dentry *dentry;
1354  	int ret;
1355  
1356  	static const struct tree_descr nfsd_files[] = {
1357  		[NFSD_List] = {"exports", &exports_nfsd_operations, S_IRUGO},
1358  		/* Per-export io stats use same ops as exports file */
1359  		[NFSD_Export_Stats] = {"export_stats", &exports_nfsd_operations, S_IRUGO},
1360  		[NFSD_Export_features] = {"export_features",
1361  					&export_features_fops, S_IRUGO},
1362  		[NFSD_FO_UnlockIP] = {"unlock_ip",
1363  					&transaction_ops, S_IWUSR|S_IRUSR},
1364  		[NFSD_FO_UnlockFS] = {"unlock_filesystem",
1365  					&transaction_ops, S_IWUSR|S_IRUSR},
1366  		[NFSD_Fh] = {"filehandle", &transaction_ops, S_IWUSR|S_IRUSR},
1367  		[NFSD_Threads] = {"threads", &transaction_ops, S_IWUSR|S_IRUSR},
1368  		[NFSD_Pool_Threads] = {"pool_threads", &transaction_ops, S_IWUSR|S_IRUSR},
1369  		[NFSD_Pool_Stats] = {"pool_stats", &pool_stats_operations, S_IRUGO},
1370  		[NFSD_Reply_Cache_Stats] = {"reply_cache_stats",
1371  					&nfsd_reply_cache_stats_fops, S_IRUGO},
1372  		[NFSD_Versions] = {"versions", &transaction_ops, S_IWUSR|S_IRUSR},
1373  		[NFSD_Ports] = {"portlist", &transaction_ops, S_IWUSR|S_IRUGO},
1374  		[NFSD_MaxBlkSize] = {"max_block_size", &transaction_ops, S_IWUSR|S_IRUGO},
1375  		[NFSD_MaxConnections] = {"max_connections", &transaction_ops, S_IWUSR|S_IRUGO},
1376  		[NFSD_Filecache] = {"filecache", &nfsd_file_cache_stats_fops, S_IRUGO},
1377  #ifdef CONFIG_NFSD_V4
1378  		[NFSD_Leasetime] = {"nfsv4leasetime", &transaction_ops, S_IWUSR|S_IRUSR},
1379  		[NFSD_Gracetime] = {"nfsv4gracetime", &transaction_ops, S_IWUSR|S_IRUSR},
1380  #ifdef CONFIG_NFSD_LEGACY_CLIENT_TRACKING
1381  		[NFSD_RecoveryDir] = {"nfsv4recoverydir", &transaction_ops, S_IWUSR|S_IRUSR},
1382  #endif
1383  		[NFSD_V4EndGrace] = {"v4_end_grace", &transaction_ops, S_IWUSR|S_IRUGO},
1384  #endif
1385  		/* last one */ {""}
1386  	};
1387  
1388  	ret = simple_fill_super(sb, 0x6e667364, nfsd_files);
1389  	if (ret)
1390  		return ret;
1391  	_nfsd_symlink(sb->s_root, "supported_krb5_enctypes",
1392  		      "/proc/net/rpc/gss_krb5_enctypes");
1393  	dentry = nfsd_mkdir(sb->s_root, NULL, "clients");
1394  	if (IS_ERR(dentry))
1395  		return PTR_ERR(dentry);
1396  	nn->nfsd_client_dir = dentry;
1397  	return 0;
1398  }
1399  
nfsd_fs_get_tree(struct fs_context * fc)1400  static int nfsd_fs_get_tree(struct fs_context *fc)
1401  {
1402  	return get_tree_keyed(fc, nfsd_fill_super, get_net(fc->net_ns));
1403  }
1404  
nfsd_fs_free_fc(struct fs_context * fc)1405  static void nfsd_fs_free_fc(struct fs_context *fc)
1406  {
1407  	if (fc->s_fs_info)
1408  		put_net(fc->s_fs_info);
1409  }
1410  
1411  static const struct fs_context_operations nfsd_fs_context_ops = {
1412  	.free		= nfsd_fs_free_fc,
1413  	.get_tree	= nfsd_fs_get_tree,
1414  };
1415  
nfsd_init_fs_context(struct fs_context * fc)1416  static int nfsd_init_fs_context(struct fs_context *fc)
1417  {
1418  	put_user_ns(fc->user_ns);
1419  	fc->user_ns = get_user_ns(fc->net_ns->user_ns);
1420  	fc->ops = &nfsd_fs_context_ops;
1421  	return 0;
1422  }
1423  
nfsd_umount(struct super_block * sb)1424  static void nfsd_umount(struct super_block *sb)
1425  {
1426  	struct net *net = sb->s_fs_info;
1427  
1428  	nfsd_shutdown_threads(net);
1429  
1430  	kill_litter_super(sb);
1431  	put_net(net);
1432  }
1433  
1434  static struct file_system_type nfsd_fs_type = {
1435  	.owner		= THIS_MODULE,
1436  	.name		= "nfsd",
1437  	.init_fs_context = nfsd_init_fs_context,
1438  	.kill_sb	= nfsd_umount,
1439  };
1440  MODULE_ALIAS_FS("nfsd");
1441  
1442  #ifdef CONFIG_PROC_FS
1443  
exports_proc_open(struct inode * inode,struct file * file)1444  static int exports_proc_open(struct inode *inode, struct file *file)
1445  {
1446  	return exports_net_open(current->nsproxy->net_ns, file);
1447  }
1448  
1449  static const struct proc_ops exports_proc_ops = {
1450  	.proc_open	= exports_proc_open,
1451  	.proc_read	= seq_read,
1452  	.proc_lseek	= seq_lseek,
1453  	.proc_release	= seq_release,
1454  };
1455  
create_proc_exports_entry(void)1456  static int create_proc_exports_entry(void)
1457  {
1458  	struct proc_dir_entry *entry;
1459  
1460  	entry = proc_mkdir("fs/nfs", NULL);
1461  	if (!entry)
1462  		return -ENOMEM;
1463  	entry = proc_create("exports", 0, entry, &exports_proc_ops);
1464  	if (!entry) {
1465  		remove_proc_entry("fs/nfs", NULL);
1466  		return -ENOMEM;
1467  	}
1468  	return 0;
1469  }
1470  #else /* CONFIG_PROC_FS */
create_proc_exports_entry(void)1471  static int create_proc_exports_entry(void)
1472  {
1473  	return 0;
1474  }
1475  #endif
1476  
1477  unsigned int nfsd_net_id;
1478  
nfsd_genl_rpc_status_compose_msg(struct sk_buff * skb,struct netlink_callback * cb,struct nfsd_genl_rqstp * rqstp)1479  static int nfsd_genl_rpc_status_compose_msg(struct sk_buff *skb,
1480  					    struct netlink_callback *cb,
1481  					    struct nfsd_genl_rqstp *rqstp)
1482  {
1483  	void *hdr;
1484  	u32 i;
1485  
1486  	hdr = genlmsg_put(skb, NETLINK_CB(cb->skb).portid, cb->nlh->nlmsg_seq,
1487  			  &nfsd_nl_family, 0, NFSD_CMD_RPC_STATUS_GET);
1488  	if (!hdr)
1489  		return -ENOBUFS;
1490  
1491  	if (nla_put_be32(skb, NFSD_A_RPC_STATUS_XID, rqstp->rq_xid) ||
1492  	    nla_put_u32(skb, NFSD_A_RPC_STATUS_FLAGS, rqstp->rq_flags) ||
1493  	    nla_put_u32(skb, NFSD_A_RPC_STATUS_PROG, rqstp->rq_prog) ||
1494  	    nla_put_u32(skb, NFSD_A_RPC_STATUS_PROC, rqstp->rq_proc) ||
1495  	    nla_put_u8(skb, NFSD_A_RPC_STATUS_VERSION, rqstp->rq_vers) ||
1496  	    nla_put_s64(skb, NFSD_A_RPC_STATUS_SERVICE_TIME,
1497  			ktime_to_us(rqstp->rq_stime),
1498  			NFSD_A_RPC_STATUS_PAD))
1499  		return -ENOBUFS;
1500  
1501  	switch (rqstp->rq_saddr.sa_family) {
1502  	case AF_INET: {
1503  		const struct sockaddr_in *s_in, *d_in;
1504  
1505  		s_in = (const struct sockaddr_in *)&rqstp->rq_saddr;
1506  		d_in = (const struct sockaddr_in *)&rqstp->rq_daddr;
1507  		if (nla_put_in_addr(skb, NFSD_A_RPC_STATUS_SADDR4,
1508  				    s_in->sin_addr.s_addr) ||
1509  		    nla_put_in_addr(skb, NFSD_A_RPC_STATUS_DADDR4,
1510  				    d_in->sin_addr.s_addr) ||
1511  		    nla_put_be16(skb, NFSD_A_RPC_STATUS_SPORT,
1512  				 s_in->sin_port) ||
1513  		    nla_put_be16(skb, NFSD_A_RPC_STATUS_DPORT,
1514  				 d_in->sin_port))
1515  			return -ENOBUFS;
1516  		break;
1517  	}
1518  	case AF_INET6: {
1519  		const struct sockaddr_in6 *s_in, *d_in;
1520  
1521  		s_in = (const struct sockaddr_in6 *)&rqstp->rq_saddr;
1522  		d_in = (const struct sockaddr_in6 *)&rqstp->rq_daddr;
1523  		if (nla_put_in6_addr(skb, NFSD_A_RPC_STATUS_SADDR6,
1524  				     &s_in->sin6_addr) ||
1525  		    nla_put_in6_addr(skb, NFSD_A_RPC_STATUS_DADDR6,
1526  				     &d_in->sin6_addr) ||
1527  		    nla_put_be16(skb, NFSD_A_RPC_STATUS_SPORT,
1528  				 s_in->sin6_port) ||
1529  		    nla_put_be16(skb, NFSD_A_RPC_STATUS_DPORT,
1530  				 d_in->sin6_port))
1531  			return -ENOBUFS;
1532  		break;
1533  	}
1534  	}
1535  
1536  	for (i = 0; i < rqstp->rq_opcnt; i++)
1537  		if (nla_put_u32(skb, NFSD_A_RPC_STATUS_COMPOUND_OPS,
1538  				rqstp->rq_opnum[i]))
1539  			return -ENOBUFS;
1540  
1541  	genlmsg_end(skb, hdr);
1542  	return 0;
1543  }
1544  
1545  /**
1546   * nfsd_nl_rpc_status_get_dumpit - Handle rpc_status_get dumpit
1547   * @skb: reply buffer
1548   * @cb: netlink metadata and command arguments
1549   *
1550   * Returns the size of the reply or a negative errno.
1551   */
nfsd_nl_rpc_status_get_dumpit(struct sk_buff * skb,struct netlink_callback * cb)1552  int nfsd_nl_rpc_status_get_dumpit(struct sk_buff *skb,
1553  				  struct netlink_callback *cb)
1554  {
1555  	int i, ret, rqstp_index = 0;
1556  	struct nfsd_net *nn;
1557  
1558  	mutex_lock(&nfsd_mutex);
1559  
1560  	nn = net_generic(sock_net(skb->sk), nfsd_net_id);
1561  	if (!nn->nfsd_serv) {
1562  		ret = -ENODEV;
1563  		goto out_unlock;
1564  	}
1565  
1566  	rcu_read_lock();
1567  
1568  	for (i = 0; i < nn->nfsd_serv->sv_nrpools; i++) {
1569  		struct svc_rqst *rqstp;
1570  
1571  		if (i < cb->args[0]) /* already consumed */
1572  			continue;
1573  
1574  		rqstp_index = 0;
1575  		list_for_each_entry_rcu(rqstp,
1576  				&nn->nfsd_serv->sv_pools[i].sp_all_threads,
1577  				rq_all) {
1578  			struct nfsd_genl_rqstp genl_rqstp;
1579  			unsigned int status_counter;
1580  
1581  			if (rqstp_index++ < cb->args[1]) /* already consumed */
1582  				continue;
1583  			/*
1584  			 * Acquire rq_status_counter before parsing the rqst
1585  			 * fields. rq_status_counter is set to an odd value in
1586  			 * order to notify the consumers the rqstp fields are
1587  			 * meaningful.
1588  			 */
1589  			status_counter =
1590  				smp_load_acquire(&rqstp->rq_status_counter);
1591  			if (!(status_counter & 1))
1592  				continue;
1593  
1594  			genl_rqstp.rq_xid = rqstp->rq_xid;
1595  			genl_rqstp.rq_flags = rqstp->rq_flags;
1596  			genl_rqstp.rq_vers = rqstp->rq_vers;
1597  			genl_rqstp.rq_prog = rqstp->rq_prog;
1598  			genl_rqstp.rq_proc = rqstp->rq_proc;
1599  			genl_rqstp.rq_stime = rqstp->rq_stime;
1600  			genl_rqstp.rq_opcnt = 0;
1601  			memcpy(&genl_rqstp.rq_daddr, svc_daddr(rqstp),
1602  			       sizeof(struct sockaddr));
1603  			memcpy(&genl_rqstp.rq_saddr, svc_addr(rqstp),
1604  			       sizeof(struct sockaddr));
1605  
1606  #ifdef CONFIG_NFSD_V4
1607  			if (rqstp->rq_vers == NFS4_VERSION &&
1608  			    rqstp->rq_proc == NFSPROC4_COMPOUND) {
1609  				/* NFSv4 compound */
1610  				struct nfsd4_compoundargs *args;
1611  				int j;
1612  
1613  				args = rqstp->rq_argp;
1614  				genl_rqstp.rq_opcnt = args->opcnt;
1615  				for (j = 0; j < genl_rqstp.rq_opcnt; j++)
1616  					genl_rqstp.rq_opnum[j] =
1617  						args->ops[j].opnum;
1618  			}
1619  #endif /* CONFIG_NFSD_V4 */
1620  
1621  			/*
1622  			 * Acquire rq_status_counter before reporting the rqst
1623  			 * fields to the user.
1624  			 */
1625  			if (smp_load_acquire(&rqstp->rq_status_counter) !=
1626  			    status_counter)
1627  				continue;
1628  
1629  			ret = nfsd_genl_rpc_status_compose_msg(skb, cb,
1630  							       &genl_rqstp);
1631  			if (ret)
1632  				goto out;
1633  		}
1634  	}
1635  
1636  	cb->args[0] = i;
1637  	cb->args[1] = rqstp_index;
1638  	ret = skb->len;
1639  out:
1640  	rcu_read_unlock();
1641  out_unlock:
1642  	mutex_unlock(&nfsd_mutex);
1643  
1644  	return ret;
1645  }
1646  
1647  /**
1648   * nfsd_nl_threads_set_doit - set the number of running threads
1649   * @skb: reply buffer
1650   * @info: netlink metadata and command arguments
1651   *
1652   * Return 0 on success or a negative errno.
1653   */
nfsd_nl_threads_set_doit(struct sk_buff * skb,struct genl_info * info)1654  int nfsd_nl_threads_set_doit(struct sk_buff *skb, struct genl_info *info)
1655  {
1656  	int *nthreads, count = 0, nrpools, i, ret = -EOPNOTSUPP, rem;
1657  	struct net *net = genl_info_net(info);
1658  	struct nfsd_net *nn = net_generic(net, nfsd_net_id);
1659  	const struct nlattr *attr;
1660  	const char *scope = NULL;
1661  
1662  	if (GENL_REQ_ATTR_CHECK(info, NFSD_A_SERVER_THREADS))
1663  		return -EINVAL;
1664  
1665  	/* count number of SERVER_THREADS values */
1666  	nlmsg_for_each_attr(attr, info->nlhdr, GENL_HDRLEN, rem) {
1667  		if (nla_type(attr) == NFSD_A_SERVER_THREADS)
1668  			count++;
1669  	}
1670  
1671  	mutex_lock(&nfsd_mutex);
1672  
1673  	nrpools = max(count, nfsd_nrpools(net));
1674  	nthreads = kcalloc(nrpools, sizeof(int), GFP_KERNEL);
1675  	if (!nthreads) {
1676  		ret = -ENOMEM;
1677  		goto out_unlock;
1678  	}
1679  
1680  	i = 0;
1681  	nlmsg_for_each_attr(attr, info->nlhdr, GENL_HDRLEN, rem) {
1682  		if (nla_type(attr) == NFSD_A_SERVER_THREADS) {
1683  			nthreads[i++] = nla_get_u32(attr);
1684  			if (i >= nrpools)
1685  				break;
1686  		}
1687  	}
1688  
1689  	if (info->attrs[NFSD_A_SERVER_GRACETIME] ||
1690  	    info->attrs[NFSD_A_SERVER_LEASETIME] ||
1691  	    info->attrs[NFSD_A_SERVER_SCOPE]) {
1692  		ret = -EBUSY;
1693  		if (nn->nfsd_serv && nn->nfsd_serv->sv_nrthreads)
1694  			goto out_unlock;
1695  
1696  		ret = -EINVAL;
1697  		attr = info->attrs[NFSD_A_SERVER_GRACETIME];
1698  		if (attr) {
1699  			u32 gracetime = nla_get_u32(attr);
1700  
1701  			if (gracetime < 10 || gracetime > 3600)
1702  				goto out_unlock;
1703  
1704  			nn->nfsd4_grace = gracetime;
1705  		}
1706  
1707  		attr = info->attrs[NFSD_A_SERVER_LEASETIME];
1708  		if (attr) {
1709  			u32 leasetime = nla_get_u32(attr);
1710  
1711  			if (leasetime < 10 || leasetime > 3600)
1712  				goto out_unlock;
1713  
1714  			nn->nfsd4_lease = leasetime;
1715  		}
1716  
1717  		attr = info->attrs[NFSD_A_SERVER_SCOPE];
1718  		if (attr)
1719  			scope = nla_data(attr);
1720  	}
1721  
1722  	ret = nfsd_svc(nrpools, nthreads, net, get_current_cred(), scope);
1723  	if (ret > 0)
1724  		ret = 0;
1725  out_unlock:
1726  	mutex_unlock(&nfsd_mutex);
1727  	kfree(nthreads);
1728  	return ret;
1729  }
1730  
1731  /**
1732   * nfsd_nl_threads_get_doit - get the number of running threads
1733   * @skb: reply buffer
1734   * @info: netlink metadata and command arguments
1735   *
1736   * Return 0 on success or a negative errno.
1737   */
nfsd_nl_threads_get_doit(struct sk_buff * skb,struct genl_info * info)1738  int nfsd_nl_threads_get_doit(struct sk_buff *skb, struct genl_info *info)
1739  {
1740  	struct net *net = genl_info_net(info);
1741  	struct nfsd_net *nn = net_generic(net, nfsd_net_id);
1742  	void *hdr;
1743  	int err;
1744  
1745  	skb = genlmsg_new(GENLMSG_DEFAULT_SIZE, GFP_KERNEL);
1746  	if (!skb)
1747  		return -ENOMEM;
1748  
1749  	hdr = genlmsg_iput(skb, info);
1750  	if (!hdr) {
1751  		err = -EMSGSIZE;
1752  		goto err_free_msg;
1753  	}
1754  
1755  	mutex_lock(&nfsd_mutex);
1756  
1757  	err = nla_put_u32(skb, NFSD_A_SERVER_GRACETIME,
1758  			  nn->nfsd4_grace) ||
1759  	      nla_put_u32(skb, NFSD_A_SERVER_LEASETIME,
1760  			  nn->nfsd4_lease) ||
1761  	      nla_put_string(skb, NFSD_A_SERVER_SCOPE,
1762  			  nn->nfsd_name);
1763  	if (err)
1764  		goto err_unlock;
1765  
1766  	if (nn->nfsd_serv) {
1767  		int i;
1768  
1769  		for (i = 0; i < nfsd_nrpools(net); ++i) {
1770  			struct svc_pool *sp = &nn->nfsd_serv->sv_pools[i];
1771  
1772  			err = nla_put_u32(skb, NFSD_A_SERVER_THREADS,
1773  					  sp->sp_nrthreads);
1774  			if (err)
1775  				goto err_unlock;
1776  		}
1777  	} else {
1778  		err = nla_put_u32(skb, NFSD_A_SERVER_THREADS, 0);
1779  		if (err)
1780  			goto err_unlock;
1781  	}
1782  
1783  	mutex_unlock(&nfsd_mutex);
1784  
1785  	genlmsg_end(skb, hdr);
1786  
1787  	return genlmsg_reply(skb, info);
1788  
1789  err_unlock:
1790  	mutex_unlock(&nfsd_mutex);
1791  err_free_msg:
1792  	nlmsg_free(skb);
1793  
1794  	return err;
1795  }
1796  
1797  /**
1798   * nfsd_nl_version_set_doit - set the nfs enabled versions
1799   * @skb: reply buffer
1800   * @info: netlink metadata and command arguments
1801   *
1802   * Return 0 on success or a negative errno.
1803   */
nfsd_nl_version_set_doit(struct sk_buff * skb,struct genl_info * info)1804  int nfsd_nl_version_set_doit(struct sk_buff *skb, struct genl_info *info)
1805  {
1806  	const struct nlattr *attr;
1807  	struct nfsd_net *nn;
1808  	int i, rem;
1809  
1810  	if (GENL_REQ_ATTR_CHECK(info, NFSD_A_SERVER_PROTO_VERSION))
1811  		return -EINVAL;
1812  
1813  	mutex_lock(&nfsd_mutex);
1814  
1815  	nn = net_generic(genl_info_net(info), nfsd_net_id);
1816  	if (nn->nfsd_serv) {
1817  		mutex_unlock(&nfsd_mutex);
1818  		return -EBUSY;
1819  	}
1820  
1821  	/* clear current supported versions. */
1822  	nfsd_vers(nn, 2, NFSD_CLEAR);
1823  	nfsd_vers(nn, 3, NFSD_CLEAR);
1824  	for (i = 0; i <= NFSD_SUPPORTED_MINOR_VERSION; i++)
1825  		nfsd_minorversion(nn, i, NFSD_CLEAR);
1826  
1827  	nlmsg_for_each_attr(attr, info->nlhdr, GENL_HDRLEN, rem) {
1828  		struct nlattr *tb[NFSD_A_VERSION_MAX + 1];
1829  		u32 major, minor = 0;
1830  		bool enabled;
1831  
1832  		if (nla_type(attr) != NFSD_A_SERVER_PROTO_VERSION)
1833  			continue;
1834  
1835  		if (nla_parse_nested(tb, NFSD_A_VERSION_MAX, attr,
1836  				     nfsd_version_nl_policy, info->extack) < 0)
1837  			continue;
1838  
1839  		if (!tb[NFSD_A_VERSION_MAJOR])
1840  			continue;
1841  
1842  		major = nla_get_u32(tb[NFSD_A_VERSION_MAJOR]);
1843  		if (tb[NFSD_A_VERSION_MINOR])
1844  			minor = nla_get_u32(tb[NFSD_A_VERSION_MINOR]);
1845  
1846  		enabled = nla_get_flag(tb[NFSD_A_VERSION_ENABLED]);
1847  
1848  		switch (major) {
1849  		case 4:
1850  			nfsd_minorversion(nn, minor, enabled ? NFSD_SET : NFSD_CLEAR);
1851  			break;
1852  		case 3:
1853  		case 2:
1854  			if (!minor)
1855  				nfsd_vers(nn, major, enabled ? NFSD_SET : NFSD_CLEAR);
1856  			break;
1857  		default:
1858  			break;
1859  		}
1860  	}
1861  
1862  	mutex_unlock(&nfsd_mutex);
1863  
1864  	return 0;
1865  }
1866  
1867  /**
1868   * nfsd_nl_version_get_doit - get the enabled status for all supported nfs versions
1869   * @skb: reply buffer
1870   * @info: netlink metadata and command arguments
1871   *
1872   * Return 0 on success or a negative errno.
1873   */
nfsd_nl_version_get_doit(struct sk_buff * skb,struct genl_info * info)1874  int nfsd_nl_version_get_doit(struct sk_buff *skb, struct genl_info *info)
1875  {
1876  	struct nfsd_net *nn;
1877  	int i, err;
1878  	void *hdr;
1879  
1880  	skb = genlmsg_new(GENLMSG_DEFAULT_SIZE, GFP_KERNEL);
1881  	if (!skb)
1882  		return -ENOMEM;
1883  
1884  	hdr = genlmsg_iput(skb, info);
1885  	if (!hdr) {
1886  		err = -EMSGSIZE;
1887  		goto err_free_msg;
1888  	}
1889  
1890  	mutex_lock(&nfsd_mutex);
1891  	nn = net_generic(genl_info_net(info), nfsd_net_id);
1892  
1893  	for (i = 2; i <= 4; i++) {
1894  		int j;
1895  
1896  		for (j = 0; j <= NFSD_SUPPORTED_MINOR_VERSION; j++) {
1897  			struct nlattr *attr;
1898  
1899  			/* Don't record any versions the kernel doesn't have
1900  			 * compiled in
1901  			 */
1902  			if (!nfsd_support_version(i))
1903  				continue;
1904  
1905  			/* NFSv{2,3} does not support minor numbers */
1906  			if (i < 4 && j)
1907  				continue;
1908  
1909  			attr = nla_nest_start(skb,
1910  					      NFSD_A_SERVER_PROTO_VERSION);
1911  			if (!attr) {
1912  				err = -EINVAL;
1913  				goto err_nfsd_unlock;
1914  			}
1915  
1916  			if (nla_put_u32(skb, NFSD_A_VERSION_MAJOR, i) ||
1917  			    nla_put_u32(skb, NFSD_A_VERSION_MINOR, j)) {
1918  				err = -EINVAL;
1919  				goto err_nfsd_unlock;
1920  			}
1921  
1922  			/* Set the enabled flag if the version is enabled */
1923  			if (nfsd_vers(nn, i, NFSD_TEST) &&
1924  			    (i < 4 || nfsd_minorversion(nn, j, NFSD_TEST)) &&
1925  			    nla_put_flag(skb, NFSD_A_VERSION_ENABLED)) {
1926  				err = -EINVAL;
1927  				goto err_nfsd_unlock;
1928  			}
1929  
1930  			nla_nest_end(skb, attr);
1931  		}
1932  	}
1933  
1934  	mutex_unlock(&nfsd_mutex);
1935  	genlmsg_end(skb, hdr);
1936  
1937  	return genlmsg_reply(skb, info);
1938  
1939  err_nfsd_unlock:
1940  	mutex_unlock(&nfsd_mutex);
1941  err_free_msg:
1942  	nlmsg_free(skb);
1943  
1944  	return err;
1945  }
1946  
1947  /**
1948   * nfsd_nl_listener_set_doit - set the nfs running sockets
1949   * @skb: reply buffer
1950   * @info: netlink metadata and command arguments
1951   *
1952   * Return 0 on success or a negative errno.
1953   */
nfsd_nl_listener_set_doit(struct sk_buff * skb,struct genl_info * info)1954  int nfsd_nl_listener_set_doit(struct sk_buff *skb, struct genl_info *info)
1955  {
1956  	struct net *net = genl_info_net(info);
1957  	struct svc_xprt *xprt, *tmp;
1958  	const struct nlattr *attr;
1959  	struct svc_serv *serv;
1960  	LIST_HEAD(permsocks);
1961  	struct nfsd_net *nn;
1962  	int err, rem;
1963  
1964  	mutex_lock(&nfsd_mutex);
1965  
1966  	err = nfsd_create_serv(net);
1967  	if (err) {
1968  		mutex_unlock(&nfsd_mutex);
1969  		return err;
1970  	}
1971  
1972  	nn = net_generic(net, nfsd_net_id);
1973  	serv = nn->nfsd_serv;
1974  
1975  	spin_lock_bh(&serv->sv_lock);
1976  
1977  	/* Move all of the old listener sockets to a temp list */
1978  	list_splice_init(&serv->sv_permsocks, &permsocks);
1979  
1980  	/*
1981  	 * Walk the list of server_socks from userland and move any that match
1982  	 * back to sv_permsocks
1983  	 */
1984  	nlmsg_for_each_attr(attr, info->nlhdr, GENL_HDRLEN, rem) {
1985  		struct nlattr *tb[NFSD_A_SOCK_MAX + 1];
1986  		const char *xcl_name;
1987  		struct sockaddr *sa;
1988  
1989  		if (nla_type(attr) != NFSD_A_SERVER_SOCK_ADDR)
1990  			continue;
1991  
1992  		if (nla_parse_nested(tb, NFSD_A_SOCK_MAX, attr,
1993  				     nfsd_sock_nl_policy, info->extack) < 0)
1994  			continue;
1995  
1996  		if (!tb[NFSD_A_SOCK_ADDR] || !tb[NFSD_A_SOCK_TRANSPORT_NAME])
1997  			continue;
1998  
1999  		if (nla_len(tb[NFSD_A_SOCK_ADDR]) < sizeof(*sa))
2000  			continue;
2001  
2002  		xcl_name = nla_data(tb[NFSD_A_SOCK_TRANSPORT_NAME]);
2003  		sa = nla_data(tb[NFSD_A_SOCK_ADDR]);
2004  
2005  		/* Put back any matching sockets */
2006  		list_for_each_entry_safe(xprt, tmp, &permsocks, xpt_list) {
2007  			/* This shouldn't be possible */
2008  			if (WARN_ON_ONCE(xprt->xpt_net != net)) {
2009  				list_move(&xprt->xpt_list, &serv->sv_permsocks);
2010  				continue;
2011  			}
2012  
2013  			/* If everything matches, put it back */
2014  			if (!strcmp(xprt->xpt_class->xcl_name, xcl_name) &&
2015  			    rpc_cmp_addr_port(sa, (struct sockaddr *)&xprt->xpt_local)) {
2016  				list_move(&xprt->xpt_list, &serv->sv_permsocks);
2017  				break;
2018  			}
2019  		}
2020  	}
2021  
2022  	/* For now, no removing old sockets while server is running */
2023  	if (serv->sv_nrthreads && !list_empty(&permsocks)) {
2024  		list_splice_init(&permsocks, &serv->sv_permsocks);
2025  		spin_unlock_bh(&serv->sv_lock);
2026  		err = -EBUSY;
2027  		goto out_unlock_mtx;
2028  	}
2029  
2030  	/* Close the remaining sockets on the permsocks list */
2031  	while (!list_empty(&permsocks)) {
2032  		xprt = list_first_entry(&permsocks, struct svc_xprt, xpt_list);
2033  		list_move(&xprt->xpt_list, &serv->sv_permsocks);
2034  
2035  		/*
2036  		 * Newly-created sockets are born with the BUSY bit set. Clear
2037  		 * it if there are no threads, since nothing can pick it up
2038  		 * in that case.
2039  		 */
2040  		if (!serv->sv_nrthreads)
2041  			clear_bit(XPT_BUSY, &xprt->xpt_flags);
2042  
2043  		set_bit(XPT_CLOSE, &xprt->xpt_flags);
2044  		spin_unlock_bh(&serv->sv_lock);
2045  		svc_xprt_close(xprt);
2046  		spin_lock_bh(&serv->sv_lock);
2047  	}
2048  
2049  	spin_unlock_bh(&serv->sv_lock);
2050  
2051  	/* walk list of addrs again, open any that still don't exist */
2052  	nlmsg_for_each_attr(attr, info->nlhdr, GENL_HDRLEN, rem) {
2053  		struct nlattr *tb[NFSD_A_SOCK_MAX + 1];
2054  		const char *xcl_name;
2055  		struct sockaddr *sa;
2056  		int ret;
2057  
2058  		if (nla_type(attr) != NFSD_A_SERVER_SOCK_ADDR)
2059  			continue;
2060  
2061  		if (nla_parse_nested(tb, NFSD_A_SOCK_MAX, attr,
2062  				     nfsd_sock_nl_policy, info->extack) < 0)
2063  			continue;
2064  
2065  		if (!tb[NFSD_A_SOCK_ADDR] || !tb[NFSD_A_SOCK_TRANSPORT_NAME])
2066  			continue;
2067  
2068  		if (nla_len(tb[NFSD_A_SOCK_ADDR]) < sizeof(*sa))
2069  			continue;
2070  
2071  		xcl_name = nla_data(tb[NFSD_A_SOCK_TRANSPORT_NAME]);
2072  		sa = nla_data(tb[NFSD_A_SOCK_ADDR]);
2073  
2074  		xprt = svc_find_listener(serv, xcl_name, net, sa);
2075  		if (xprt) {
2076  			svc_xprt_put(xprt);
2077  			continue;
2078  		}
2079  
2080  		ret = svc_xprt_create_from_sa(serv, xcl_name, net, sa, 0,
2081  					      get_current_cred());
2082  		/* always save the latest error */
2083  		if (ret < 0)
2084  			err = ret;
2085  	}
2086  
2087  	if (!serv->sv_nrthreads && list_empty(&nn->nfsd_serv->sv_permsocks))
2088  		nfsd_destroy_serv(net);
2089  
2090  out_unlock_mtx:
2091  	mutex_unlock(&nfsd_mutex);
2092  
2093  	return err;
2094  }
2095  
2096  /**
2097   * nfsd_nl_listener_get_doit - get the nfs running listeners
2098   * @skb: reply buffer
2099   * @info: netlink metadata and command arguments
2100   *
2101   * Return 0 on success or a negative errno.
2102   */
nfsd_nl_listener_get_doit(struct sk_buff * skb,struct genl_info * info)2103  int nfsd_nl_listener_get_doit(struct sk_buff *skb, struct genl_info *info)
2104  {
2105  	struct svc_xprt *xprt;
2106  	struct svc_serv *serv;
2107  	struct nfsd_net *nn;
2108  	void *hdr;
2109  	int err;
2110  
2111  	skb = genlmsg_new(GENLMSG_DEFAULT_SIZE, GFP_KERNEL);
2112  	if (!skb)
2113  		return -ENOMEM;
2114  
2115  	hdr = genlmsg_iput(skb, info);
2116  	if (!hdr) {
2117  		err = -EMSGSIZE;
2118  		goto err_free_msg;
2119  	}
2120  
2121  	mutex_lock(&nfsd_mutex);
2122  	nn = net_generic(genl_info_net(info), nfsd_net_id);
2123  
2124  	/* no nfs server? Just send empty socket list */
2125  	if (!nn->nfsd_serv)
2126  		goto out_unlock_mtx;
2127  
2128  	serv = nn->nfsd_serv;
2129  	spin_lock_bh(&serv->sv_lock);
2130  	list_for_each_entry(xprt, &serv->sv_permsocks, xpt_list) {
2131  		struct nlattr *attr;
2132  
2133  		attr = nla_nest_start(skb, NFSD_A_SERVER_SOCK_ADDR);
2134  		if (!attr) {
2135  			err = -EINVAL;
2136  			goto err_serv_unlock;
2137  		}
2138  
2139  		if (nla_put_string(skb, NFSD_A_SOCK_TRANSPORT_NAME,
2140  				   xprt->xpt_class->xcl_name) ||
2141  		    nla_put(skb, NFSD_A_SOCK_ADDR,
2142  			    sizeof(struct sockaddr_storage),
2143  			    &xprt->xpt_local)) {
2144  			err = -EINVAL;
2145  			goto err_serv_unlock;
2146  		}
2147  
2148  		nla_nest_end(skb, attr);
2149  	}
2150  	spin_unlock_bh(&serv->sv_lock);
2151  out_unlock_mtx:
2152  	mutex_unlock(&nfsd_mutex);
2153  	genlmsg_end(skb, hdr);
2154  
2155  	return genlmsg_reply(skb, info);
2156  
2157  err_serv_unlock:
2158  	spin_unlock_bh(&serv->sv_lock);
2159  	mutex_unlock(&nfsd_mutex);
2160  err_free_msg:
2161  	nlmsg_free(skb);
2162  
2163  	return err;
2164  }
2165  
2166  /**
2167   * nfsd_nl_pool_mode_set_doit - set the number of running threads
2168   * @skb: reply buffer
2169   * @info: netlink metadata and command arguments
2170   *
2171   * Return 0 on success or a negative errno.
2172   */
nfsd_nl_pool_mode_set_doit(struct sk_buff * skb,struct genl_info * info)2173  int nfsd_nl_pool_mode_set_doit(struct sk_buff *skb, struct genl_info *info)
2174  {
2175  	const struct nlattr *attr;
2176  
2177  	if (GENL_REQ_ATTR_CHECK(info, NFSD_A_POOL_MODE_MODE))
2178  		return -EINVAL;
2179  
2180  	attr = info->attrs[NFSD_A_POOL_MODE_MODE];
2181  	return sunrpc_set_pool_mode(nla_data(attr));
2182  }
2183  
2184  /**
2185   * nfsd_nl_pool_mode_get_doit - get info about pool_mode
2186   * @skb: reply buffer
2187   * @info: netlink metadata and command arguments
2188   *
2189   * Return 0 on success or a negative errno.
2190   */
nfsd_nl_pool_mode_get_doit(struct sk_buff * skb,struct genl_info * info)2191  int nfsd_nl_pool_mode_get_doit(struct sk_buff *skb, struct genl_info *info)
2192  {
2193  	struct net *net = genl_info_net(info);
2194  	char buf[16];
2195  	void *hdr;
2196  	int err;
2197  
2198  	if (sunrpc_get_pool_mode(buf, ARRAY_SIZE(buf)) >= ARRAY_SIZE(buf))
2199  		return -ERANGE;
2200  
2201  	skb = genlmsg_new(GENLMSG_DEFAULT_SIZE, GFP_KERNEL);
2202  	if (!skb)
2203  		return -ENOMEM;
2204  
2205  	err = -EMSGSIZE;
2206  	hdr = genlmsg_iput(skb, info);
2207  	if (!hdr)
2208  		goto err_free_msg;
2209  
2210  	err = nla_put_string(skb, NFSD_A_POOL_MODE_MODE, buf) |
2211  	      nla_put_u32(skb, NFSD_A_POOL_MODE_NPOOLS, nfsd_nrpools(net));
2212  	if (err)
2213  		goto err_free_msg;
2214  
2215  	genlmsg_end(skb, hdr);
2216  	return genlmsg_reply(skb, info);
2217  
2218  err_free_msg:
2219  	nlmsg_free(skb);
2220  	return err;
2221  }
2222  
2223  /**
2224   * nfsd_net_init - Prepare the nfsd_net portion of a new net namespace
2225   * @net: a freshly-created network namespace
2226   *
2227   * This information stays around as long as the network namespace is
2228   * alive whether or not there is an NFSD instance running in the
2229   * namespace.
2230   *
2231   * Returns zero on success, or a negative errno otherwise.
2232   */
nfsd_net_init(struct net * net)2233  static __net_init int nfsd_net_init(struct net *net)
2234  {
2235  	struct nfsd_net *nn = net_generic(net, nfsd_net_id);
2236  	int retval;
2237  	int i;
2238  
2239  	retval = nfsd_export_init(net);
2240  	if (retval)
2241  		goto out_export_error;
2242  	retval = nfsd_idmap_init(net);
2243  	if (retval)
2244  		goto out_idmap_error;
2245  	retval = percpu_counter_init_many(nn->counter, 0, GFP_KERNEL,
2246  					  NFSD_STATS_COUNTERS_NUM);
2247  	if (retval)
2248  		goto out_repcache_error;
2249  	memset(&nn->nfsd_svcstats, 0, sizeof(nn->nfsd_svcstats));
2250  	nn->nfsd_svcstats.program = &nfsd_programs[0];
2251  	for (i = 0; i < sizeof(nn->nfsd_versions); i++)
2252  		nn->nfsd_versions[i] = nfsd_support_version(i);
2253  	for (i = 0; i < sizeof(nn->nfsd4_minorversions); i++)
2254  		nn->nfsd4_minorversions[i] = nfsd_support_version(4);
2255  	nn->nfsd_info.mutex = &nfsd_mutex;
2256  	nn->nfsd_serv = NULL;
2257  	nfsd4_init_leases_net(nn);
2258  	get_random_bytes(&nn->siphash_key, sizeof(nn->siphash_key));
2259  	seqlock_init(&nn->writeverf_lock);
2260  	nfsd_proc_stat_init(net);
2261  #if IS_ENABLED(CONFIG_NFS_LOCALIO)
2262  	INIT_LIST_HEAD(&nn->local_clients);
2263  #endif
2264  	return 0;
2265  
2266  out_repcache_error:
2267  	nfsd_idmap_shutdown(net);
2268  out_idmap_error:
2269  	nfsd_export_shutdown(net);
2270  out_export_error:
2271  	return retval;
2272  }
2273  
2274  #if IS_ENABLED(CONFIG_NFS_LOCALIO)
2275  /**
2276   * nfsd_net_pre_exit - Disconnect localio clients from net namespace
2277   * @net: a network namespace that is about to be destroyed
2278   *
2279   * This invalidated ->net pointers held by localio clients
2280   * while they can still safely access nn->counter.
2281   */
nfsd_net_pre_exit(struct net * net)2282  static __net_exit void nfsd_net_pre_exit(struct net *net)
2283  {
2284  	struct nfsd_net *nn = net_generic(net, nfsd_net_id);
2285  
2286  	nfs_uuid_invalidate_clients(&nn->local_clients);
2287  }
2288  #endif
2289  
2290  /**
2291   * nfsd_net_exit - Release the nfsd_net portion of a net namespace
2292   * @net: a network namespace that is about to be destroyed
2293   *
2294   */
nfsd_net_exit(struct net * net)2295  static __net_exit void nfsd_net_exit(struct net *net)
2296  {
2297  	struct nfsd_net *nn = net_generic(net, nfsd_net_id);
2298  
2299  	nfsd_proc_stat_shutdown(net);
2300  	percpu_counter_destroy_many(nn->counter, NFSD_STATS_COUNTERS_NUM);
2301  	nfsd_idmap_shutdown(net);
2302  	nfsd_export_shutdown(net);
2303  }
2304  
2305  static struct pernet_operations nfsd_net_ops = {
2306  	.init = nfsd_net_init,
2307  #if IS_ENABLED(CONFIG_NFS_LOCALIO)
2308  	.pre_exit = nfsd_net_pre_exit,
2309  #endif
2310  	.exit = nfsd_net_exit,
2311  	.id   = &nfsd_net_id,
2312  	.size = sizeof(struct nfsd_net),
2313  };
2314  
init_nfsd(void)2315  static int __init init_nfsd(void)
2316  {
2317  	int retval;
2318  
2319  	retval = nfsd4_init_slabs();
2320  	if (retval)
2321  		return retval;
2322  	retval = nfsd4_init_pnfs();
2323  	if (retval)
2324  		goto out_free_slabs;
2325  	retval = nfsd_drc_slab_create();
2326  	if (retval)
2327  		goto out_free_pnfs;
2328  	nfsd_lockd_init();	/* lockd->nfsd callbacks */
2329  	retval = create_proc_exports_entry();
2330  	if (retval)
2331  		goto out_free_lockd;
2332  	retval = register_pernet_subsys(&nfsd_net_ops);
2333  	if (retval < 0)
2334  		goto out_free_exports;
2335  	retval = register_cld_notifier();
2336  	if (retval)
2337  		goto out_free_subsys;
2338  	retval = nfsd4_create_laundry_wq();
2339  	if (retval)
2340  		goto out_free_cld;
2341  	retval = register_filesystem(&nfsd_fs_type);
2342  	if (retval)
2343  		goto out_free_all;
2344  	retval = genl_register_family(&nfsd_nl_family);
2345  	if (retval)
2346  		goto out_free_all;
2347  	nfsd_localio_ops_init();
2348  
2349  	return 0;
2350  out_free_all:
2351  	nfsd4_destroy_laundry_wq();
2352  out_free_cld:
2353  	unregister_cld_notifier();
2354  out_free_subsys:
2355  	unregister_pernet_subsys(&nfsd_net_ops);
2356  out_free_exports:
2357  	remove_proc_entry("fs/nfs/exports", NULL);
2358  	remove_proc_entry("fs/nfs", NULL);
2359  out_free_lockd:
2360  	nfsd_lockd_shutdown();
2361  	nfsd_drc_slab_free();
2362  out_free_pnfs:
2363  	nfsd4_exit_pnfs();
2364  out_free_slabs:
2365  	nfsd4_free_slabs();
2366  	return retval;
2367  }
2368  
exit_nfsd(void)2369  static void __exit exit_nfsd(void)
2370  {
2371  	genl_unregister_family(&nfsd_nl_family);
2372  	unregister_filesystem(&nfsd_fs_type);
2373  	nfsd4_destroy_laundry_wq();
2374  	unregister_cld_notifier();
2375  	unregister_pernet_subsys(&nfsd_net_ops);
2376  	nfsd_drc_slab_free();
2377  	remove_proc_entry("fs/nfs/exports", NULL);
2378  	remove_proc_entry("fs/nfs", NULL);
2379  	nfsd_lockd_shutdown();
2380  	nfsd4_free_slabs();
2381  	nfsd4_exit_pnfs();
2382  }
2383  
2384  MODULE_AUTHOR("Olaf Kirch <okir@monad.swb.de>");
2385  MODULE_DESCRIPTION("In-kernel NFS server");
2386  MODULE_LICENSE("GPL");
2387  module_init(init_nfsd)
2388  module_exit(exit_nfsd)
2389