mirror of
				https://github.com/torvalds/linux.git
				synced 2025-11-04 10:40:15 +02:00 
			
		
		
		
	fs: document and rename fsid helpers
Vivek pointed out that the fs{g,u}id_into_mnt() naming scheme can be
misleading as it could be understood as implying they do the exact same
thing as i_{g,u}id_into_mnt(). The original motivation for this naming
scheme was to signal to callers that the helpers will always take care
to map the k{g,u}id such that the ownership is expressed in terms of the
mnt_users.
Get rid of the confusion by renaming those helpers to something more
sensible. Al suggested mapped_fs{g,u}id() which seems a really good fit.
Usually filesystems don't need to bother with these helpers directly
only in some cases where they allocate objects that carry {g,u}ids which
are either filesystem specific (e.g. xfs quota objects) or don't have a
clean set of helpers as inodes have.
Link: https://lore.kernel.org/r/20210320122623.599086-3-christian.brauner@ubuntu.com
Inspired-by: Vivek Goyal <vgoyal@redhat.com>
Cc: Christoph Hellwig <hch@lst.de>
Cc: Darrick J. Wong <djwong@kernel.org>
Cc: Al Viro <viro@zeniv.linux.org.uk>
Cc: linux-fsdevel@vger.kernel.org
Reviewed-by: Christoph Hellwig <hch@lst.de>
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
			
			
This commit is contained in:
		
							parent
							
								
									1bd66c1a32
								
							
						
					
					
						commit
						a65e58e791
					
				
					 6 changed files with 40 additions and 16 deletions
				
			
		| 
						 | 
					@ -970,7 +970,7 @@ struct inode *__ext4_new_inode(struct user_namespace *mnt_userns,
 | 
				
			||||||
		i_gid_write(inode, owner[1]);
 | 
							i_gid_write(inode, owner[1]);
 | 
				
			||||||
	} else if (test_opt(sb, GRPID)) {
 | 
						} else if (test_opt(sb, GRPID)) {
 | 
				
			||||||
		inode->i_mode = mode;
 | 
							inode->i_mode = mode;
 | 
				
			||||||
		inode->i_uid = fsuid_into_mnt(mnt_userns);
 | 
							inode->i_uid = mapped_fsuid(mnt_userns);
 | 
				
			||||||
		inode->i_gid = dir->i_gid;
 | 
							inode->i_gid = dir->i_gid;
 | 
				
			||||||
	} else
 | 
						} else
 | 
				
			||||||
		inode_init_owner(mnt_userns, inode, dir, mode);
 | 
							inode_init_owner(mnt_userns, inode, dir, mode);
 | 
				
			||||||
| 
						 | 
					
 | 
				
			||||||
| 
						 | 
					@ -2148,7 +2148,7 @@ EXPORT_SYMBOL(init_special_inode);
 | 
				
			||||||
void inode_init_owner(struct user_namespace *mnt_userns, struct inode *inode,
 | 
					void inode_init_owner(struct user_namespace *mnt_userns, struct inode *inode,
 | 
				
			||||||
		      const struct inode *dir, umode_t mode)
 | 
							      const struct inode *dir, umode_t mode)
 | 
				
			||||||
{
 | 
					{
 | 
				
			||||||
	inode->i_uid = fsuid_into_mnt(mnt_userns);
 | 
						inode->i_uid = mapped_fsuid(mnt_userns);
 | 
				
			||||||
	if (dir && dir->i_mode & S_ISGID) {
 | 
						if (dir && dir->i_mode & S_ISGID) {
 | 
				
			||||||
		inode->i_gid = dir->i_gid;
 | 
							inode->i_gid = dir->i_gid;
 | 
				
			||||||
 | 
					
 | 
				
			||||||
| 
						 | 
					@ -2160,7 +2160,7 @@ void inode_init_owner(struct user_namespace *mnt_userns, struct inode *inode,
 | 
				
			||||||
			 !capable_wrt_inode_uidgid(mnt_userns, dir, CAP_FSETID))
 | 
								 !capable_wrt_inode_uidgid(mnt_userns, dir, CAP_FSETID))
 | 
				
			||||||
			mode &= ~S_ISGID;
 | 
								mode &= ~S_ISGID;
 | 
				
			||||||
	} else
 | 
						} else
 | 
				
			||||||
		inode->i_gid = fsgid_into_mnt(mnt_userns);
 | 
							inode->i_gid = mapped_fsgid(mnt_userns);
 | 
				
			||||||
	inode->i_mode = mode;
 | 
						inode->i_mode = mode;
 | 
				
			||||||
}
 | 
					}
 | 
				
			||||||
EXPORT_SYMBOL(inode_init_owner);
 | 
					EXPORT_SYMBOL(inode_init_owner);
 | 
				
			||||||
| 
						 | 
					
 | 
				
			||||||
| 
						 | 
					@ -2830,8 +2830,8 @@ static inline int may_create(struct user_namespace *mnt_userns,
 | 
				
			||||||
	if (IS_DEADDIR(dir))
 | 
						if (IS_DEADDIR(dir))
 | 
				
			||||||
		return -ENOENT;
 | 
							return -ENOENT;
 | 
				
			||||||
	s_user_ns = dir->i_sb->s_user_ns;
 | 
						s_user_ns = dir->i_sb->s_user_ns;
 | 
				
			||||||
	if (!kuid_has_mapping(s_user_ns, fsuid_into_mnt(mnt_userns)) ||
 | 
						if (!kuid_has_mapping(s_user_ns, mapped_fsuid(mnt_userns)) ||
 | 
				
			||||||
	    !kgid_has_mapping(s_user_ns, fsgid_into_mnt(mnt_userns)))
 | 
						    !kgid_has_mapping(s_user_ns, mapped_fsgid(mnt_userns)))
 | 
				
			||||||
		return -EOVERFLOW;
 | 
							return -EOVERFLOW;
 | 
				
			||||||
	return inode_permission(mnt_userns, dir, MAY_WRITE | MAY_EXEC);
 | 
						return inode_permission(mnt_userns, dir, MAY_WRITE | MAY_EXEC);
 | 
				
			||||||
}
 | 
					}
 | 
				
			||||||
| 
						 | 
					@ -3040,8 +3040,8 @@ static int may_o_create(struct user_namespace *mnt_userns,
 | 
				
			||||||
		return error;
 | 
							return error;
 | 
				
			||||||
 | 
					
 | 
				
			||||||
	s_user_ns = dir->dentry->d_sb->s_user_ns;
 | 
						s_user_ns = dir->dentry->d_sb->s_user_ns;
 | 
				
			||||||
	if (!kuid_has_mapping(s_user_ns, fsuid_into_mnt(mnt_userns)) ||
 | 
						if (!kuid_has_mapping(s_user_ns, mapped_fsuid(mnt_userns)) ||
 | 
				
			||||||
	    !kgid_has_mapping(s_user_ns, fsgid_into_mnt(mnt_userns)))
 | 
						    !kgid_has_mapping(s_user_ns, mapped_fsgid(mnt_userns)))
 | 
				
			||||||
		return -EOVERFLOW;
 | 
							return -EOVERFLOW;
 | 
				
			||||||
 | 
					
 | 
				
			||||||
	error = inode_permission(mnt_userns, dir->dentry->d_inode,
 | 
						error = inode_permission(mnt_userns, dir->dentry->d_inode,
 | 
				
			||||||
| 
						 | 
					
 | 
				
			||||||
| 
						 | 
					@ -812,7 +812,7 @@ xfs_init_new_inode(
 | 
				
			||||||
 | 
					
 | 
				
			||||||
	if (dir && !(dir->i_mode & S_ISGID) &&
 | 
						if (dir && !(dir->i_mode & S_ISGID) &&
 | 
				
			||||||
	    (mp->m_flags & XFS_MOUNT_GRPID)) {
 | 
						    (mp->m_flags & XFS_MOUNT_GRPID)) {
 | 
				
			||||||
		inode->i_uid = fsuid_into_mnt(mnt_userns);
 | 
							inode->i_uid = mapped_fsuid(mnt_userns);
 | 
				
			||||||
		inode->i_gid = dir->i_gid;
 | 
							inode->i_gid = dir->i_gid;
 | 
				
			||||||
		inode->i_mode = mode;
 | 
							inode->i_mode = mode;
 | 
				
			||||||
	} else {
 | 
						} else {
 | 
				
			||||||
| 
						 | 
					@ -1007,8 +1007,8 @@ xfs_create(
 | 
				
			||||||
	/*
 | 
						/*
 | 
				
			||||||
	 * Make sure that we have allocated dquot(s) on disk.
 | 
						 * Make sure that we have allocated dquot(s) on disk.
 | 
				
			||||||
	 */
 | 
						 */
 | 
				
			||||||
	error = xfs_qm_vop_dqalloc(dp, fsuid_into_mnt(mnt_userns),
 | 
						error = xfs_qm_vop_dqalloc(dp, mapped_fsuid(mnt_userns),
 | 
				
			||||||
			fsgid_into_mnt(mnt_userns), prid,
 | 
								mapped_fsgid(mnt_userns), prid,
 | 
				
			||||||
			XFS_QMOPT_QUOTALL | XFS_QMOPT_INHERIT,
 | 
								XFS_QMOPT_QUOTALL | XFS_QMOPT_INHERIT,
 | 
				
			||||||
			&udqp, &gdqp, &pdqp);
 | 
								&udqp, &gdqp, &pdqp);
 | 
				
			||||||
	if (error)
 | 
						if (error)
 | 
				
			||||||
| 
						 | 
					@ -1158,8 +1158,8 @@ xfs_create_tmpfile(
 | 
				
			||||||
	/*
 | 
						/*
 | 
				
			||||||
	 * Make sure that we have allocated dquot(s) on disk.
 | 
						 * Make sure that we have allocated dquot(s) on disk.
 | 
				
			||||||
	 */
 | 
						 */
 | 
				
			||||||
	error = xfs_qm_vop_dqalloc(dp, fsuid_into_mnt(mnt_userns),
 | 
						error = xfs_qm_vop_dqalloc(dp, mapped_fsuid(mnt_userns),
 | 
				
			||||||
			fsgid_into_mnt(mnt_userns), prid,
 | 
								mapped_fsgid(mnt_userns), prid,
 | 
				
			||||||
			XFS_QMOPT_QUOTALL | XFS_QMOPT_INHERIT,
 | 
								XFS_QMOPT_QUOTALL | XFS_QMOPT_INHERIT,
 | 
				
			||||||
			&udqp, &gdqp, &pdqp);
 | 
								&udqp, &gdqp, &pdqp);
 | 
				
			||||||
	if (error)
 | 
						if (error)
 | 
				
			||||||
| 
						 | 
					
 | 
				
			||||||
| 
						 | 
					@ -182,8 +182,8 @@ xfs_symlink(
 | 
				
			||||||
	/*
 | 
						/*
 | 
				
			||||||
	 * Make sure that we have allocated dquot(s) on disk.
 | 
						 * Make sure that we have allocated dquot(s) on disk.
 | 
				
			||||||
	 */
 | 
						 */
 | 
				
			||||||
	error = xfs_qm_vop_dqalloc(dp, fsuid_into_mnt(mnt_userns),
 | 
						error = xfs_qm_vop_dqalloc(dp, mapped_fsuid(mnt_userns),
 | 
				
			||||||
			fsgid_into_mnt(mnt_userns), prid,
 | 
								mapped_fsgid(mnt_userns), prid,
 | 
				
			||||||
			XFS_QMOPT_QUOTALL | XFS_QMOPT_INHERIT,
 | 
								XFS_QMOPT_QUOTALL | XFS_QMOPT_INHERIT,
 | 
				
			||||||
			&udqp, &gdqp, &pdqp);
 | 
								&udqp, &gdqp, &pdqp);
 | 
				
			||||||
	if (error)
 | 
						if (error)
 | 
				
			||||||
| 
						 | 
					
 | 
				
			||||||
| 
						 | 
					@ -1658,12 +1658,36 @@ static inline kgid_t kgid_from_mnt(struct user_namespace *mnt_userns,
 | 
				
			||||||
	return KGIDT_INIT(from_kgid(mnt_userns, kgid));
 | 
						return KGIDT_INIT(from_kgid(mnt_userns, kgid));
 | 
				
			||||||
}
 | 
					}
 | 
				
			||||||
 | 
					
 | 
				
			||||||
static inline kuid_t fsuid_into_mnt(struct user_namespace *mnt_userns)
 | 
					/**
 | 
				
			||||||
 | 
					 * mapped_fsuid - return caller's fsuid mapped up into a mnt_userns
 | 
				
			||||||
 | 
					 * @mnt_userns: user namespace of the relevant mount
 | 
				
			||||||
 | 
					 *
 | 
				
			||||||
 | 
					 * Use this helper to initialize a new vfs or filesystem object based on
 | 
				
			||||||
 | 
					 * the caller's fsuid. A common example is initializing the i_uid field of
 | 
				
			||||||
 | 
					 * a newly allocated inode triggered by a creation event such as mkdir or
 | 
				
			||||||
 | 
					 * O_CREAT. Other examples include the allocation of quotas for a specific
 | 
				
			||||||
 | 
					 * user.
 | 
				
			||||||
 | 
					 *
 | 
				
			||||||
 | 
					 * Return: the caller's current fsuid mapped up according to @mnt_userns.
 | 
				
			||||||
 | 
					 */
 | 
				
			||||||
 | 
					static inline kuid_t mapped_fsuid(struct user_namespace *mnt_userns)
 | 
				
			||||||
{
 | 
					{
 | 
				
			||||||
	return kuid_from_mnt(mnt_userns, current_fsuid());
 | 
						return kuid_from_mnt(mnt_userns, current_fsuid());
 | 
				
			||||||
}
 | 
					}
 | 
				
			||||||
 | 
					
 | 
				
			||||||
static inline kgid_t fsgid_into_mnt(struct user_namespace *mnt_userns)
 | 
					/**
 | 
				
			||||||
 | 
					 * mapped_fsgid - return caller's fsgid mapped up into a mnt_userns
 | 
				
			||||||
 | 
					 * @mnt_userns: user namespace of the relevant mount
 | 
				
			||||||
 | 
					 *
 | 
				
			||||||
 | 
					 * Use this helper to initialize a new vfs or filesystem object based on
 | 
				
			||||||
 | 
					 * the caller's fsgid. A common example is initializing the i_gid field of
 | 
				
			||||||
 | 
					 * a newly allocated inode triggered by a creation event such as mkdir or
 | 
				
			||||||
 | 
					 * O_CREAT. Other examples include the allocation of quotas for a specific
 | 
				
			||||||
 | 
					 * user.
 | 
				
			||||||
 | 
					 *
 | 
				
			||||||
 | 
					 * Return: the caller's current fsgid mapped up according to @mnt_userns.
 | 
				
			||||||
 | 
					 */
 | 
				
			||||||
 | 
					static inline kgid_t mapped_fsgid(struct user_namespace *mnt_userns)
 | 
				
			||||||
{
 | 
					{
 | 
				
			||||||
	return kgid_from_mnt(mnt_userns, current_fsgid());
 | 
						return kgid_from_mnt(mnt_userns, current_fsgid());
 | 
				
			||||||
}
 | 
					}
 | 
				
			||||||
| 
						 | 
					
 | 
				
			||||||
		Loading…
	
		Reference in a new issue