2005-04-17 02:20:36 +04:00
|
|
|
/*
|
|
|
|
* include/linux/nfsd/export.h
|
|
|
|
*
|
|
|
|
* Public declarations for NFS exports. The definitions for the
|
|
|
|
* syscall interface are in nfsctl.h
|
|
|
|
*
|
|
|
|
* Copyright (C) 1995-1997 Olaf Kirch <okir@monad.swb.de>
|
|
|
|
*/
|
|
|
|
|
|
|
|
#ifndef NFSD_EXPORT_H
|
|
|
|
#define NFSD_EXPORT_H
|
|
|
|
|
|
|
|
# include <linux/types.h>
|
2009-01-30 17:33:06 +03:00
|
|
|
#ifdef __KERNEL__
|
2009-12-03 21:28:59 +03:00
|
|
|
# include <linux/nfsd/nfsfh.h>
|
2005-04-17 02:20:36 +04:00
|
|
|
#endif
|
|
|
|
|
|
|
|
/*
|
|
|
|
* Important limits for the exports stuff.
|
|
|
|
*/
|
|
|
|
#define NFSCLNT_IDMAX 1024
|
|
|
|
#define NFSCLNT_ADDRMAX 16
|
|
|
|
#define NFSCLNT_KEYMAX 32
|
|
|
|
|
|
|
|
/*
|
|
|
|
* Export flags.
|
|
|
|
*/
|
|
|
|
#define NFSEXP_READONLY 0x0001
|
|
|
|
#define NFSEXP_INSECURE_PORT 0x0002
|
|
|
|
#define NFSEXP_ROOTSQUASH 0x0004
|
|
|
|
#define NFSEXP_ALLSQUASH 0x0008
|
|
|
|
#define NFSEXP_ASYNC 0x0010
|
|
|
|
#define NFSEXP_GATHERED_WRITES 0x0020
|
|
|
|
/* 40 80 100 currently unused */
|
|
|
|
#define NFSEXP_NOHIDE 0x0200
|
|
|
|
#define NFSEXP_NOSUBTREECHECK 0x0400
|
|
|
|
#define NFSEXP_NOAUTHNLM 0x0800 /* Don't authenticate NLM requests - just trust */
|
2011-01-11 22:07:12 +03:00
|
|
|
#define NFSEXP_MSNFS 0x1000 /* do silly things that MS clients expect; no longer supported */
|
2005-04-17 02:20:36 +04:00
|
|
|
#define NFSEXP_FSID 0x2000
|
|
|
|
#define NFSEXP_CROSSMOUNT 0x4000
|
|
|
|
#define NFSEXP_NOACL 0x8000 /* reserved for possible ACL related use */
|
nfsd: introduce export flag for v4 pseudoroot
NFSv4 differs from v2 and v3 in that it presents a single unified
filesystem tree, whereas v2 and v3 exported multiple filesystem (whose
roots could be found using a separate mount protocol).
Our original NFSv4 server implementation asked the administrator to
designate a single filesystem as the NFSv4 root, then to mount
filesystems they wished to export underneath. (Often using bind mounts
of already-existing filesystems.)
This was conceptually simple, and allowed easy implementation, but
created a serious obstacle to upgrading between v2/v3: since the paths
to v4 filesystems were different, administrators would have to adjust
all the paths in client-side mount commands when switching to v4.
Various workarounds are possible. For example, the administrator could
export "/" and designate it as the v4 root. However, the security risks
of that approach are obvious, and in any case we shouldn't be requiring
the administrator to take extra steps to fix this problem; instead, the
server should present consistent paths across different versions by
default.
These patches take a modified version of that approach: we provide a new
export option which exports only a subset of a filesystem. With this
flag, it becomes safe for mountd to export "/" by default, with no need
for additional configuration.
We begin just by defining the new flag.
Signed-off-by: Steve Dickson <steved@redhat.com>
Signed-off-by: J. Bruce Fields <bfields@citi.umich.edu>
2009-09-09 22:58:22 +04:00
|
|
|
/*
|
|
|
|
* The NFSEXP_V4ROOT flag causes the kernel to give access only to NFSv4
|
|
|
|
* clients, and only to the single directory that is the root of the
|
|
|
|
* export; further lookup and readdir operations are treated as if every
|
|
|
|
* subdirectory was a mountpoint, and ignored if they are not themselves
|
|
|
|
* exported. This is used by nfsd and mountd to construct the NFSv4
|
|
|
|
* pseudofilesystem, which provides access only to paths leading to each
|
|
|
|
* exported filesystem.
|
|
|
|
*/
|
|
|
|
#define NFSEXP_V4ROOT 0x10000
|
2009-12-14 20:53:32 +03:00
|
|
|
/* All flags that we claim to support. (Note we don't support NOACL.) */
|
2009-12-15 22:09:03 +03:00
|
|
|
#define NFSEXP_ALLFLAGS 0x17E3F
|
2005-04-17 02:20:36 +04:00
|
|
|
|
2007-07-17 15:04:42 +04:00
|
|
|
/* The flags that may vary depending on security flavor: */
|
2007-07-17 15:04:52 +04:00
|
|
|
#define NFSEXP_SECINFO_FLAGS (NFSEXP_READONLY | NFSEXP_ROOTSQUASH \
|
2009-12-09 02:15:52 +03:00
|
|
|
| NFSEXP_ALLSQUASH \
|
|
|
|
| NFSEXP_INSECURE_PORT)
|
2005-04-17 02:20:36 +04:00
|
|
|
|
|
|
|
#ifdef __KERNEL__
|
|
|
|
|
2006-10-04 13:16:18 +04:00
|
|
|
/*
|
|
|
|
* FS Locations
|
|
|
|
*/
|
|
|
|
|
|
|
|
#define MAX_FS_LOCATIONS 128
|
|
|
|
|
|
|
|
struct nfsd4_fs_location {
|
|
|
|
char *hosts; /* colon separated list of hosts */
|
|
|
|
char *path; /* slash separated list of path components */
|
|
|
|
};
|
|
|
|
|
|
|
|
struct nfsd4_fs_locations {
|
|
|
|
uint32_t locations_count;
|
|
|
|
struct nfsd4_fs_location *locations;
|
|
|
|
/* If we're not actually serving this data ourselves (only providing a
|
|
|
|
* list of replicas that do serve it) then we set "migrated": */
|
|
|
|
int migrated;
|
|
|
|
};
|
|
|
|
|
2007-07-17 15:04:42 +04:00
|
|
|
/*
|
|
|
|
* We keep an array of pseudoflavors with the export, in order from most
|
2011-03-31 05:57:33 +04:00
|
|
|
* to least preferred. For the foreseeable future, we don't expect more
|
2007-07-17 15:04:42 +04:00
|
|
|
* than the eight pseudoflavors null, unix, krb5, krb5i, krb5p, skpm3,
|
|
|
|
* spkm3i, and spkm3p (and using all 8 at once should be rare).
|
|
|
|
*/
|
|
|
|
#define MAX_SECINFO_LIST 8
|
|
|
|
|
|
|
|
struct exp_flavor_info {
|
|
|
|
u32 pseudoflavor;
|
|
|
|
u32 flags;
|
|
|
|
};
|
|
|
|
|
2005-04-17 02:20:36 +04:00
|
|
|
struct svc_export {
|
|
|
|
struct cache_head h;
|
|
|
|
struct auth_domain * ex_client;
|
|
|
|
int ex_flags;
|
2008-02-15 06:38:39 +03:00
|
|
|
struct path ex_path;
|
2005-04-17 02:20:36 +04:00
|
|
|
uid_t ex_anon_uid;
|
|
|
|
gid_t ex_anon_gid;
|
|
|
|
int ex_fsid;
|
2007-02-14 11:33:12 +03:00
|
|
|
unsigned char * ex_uuid; /* 16 byte fsid */
|
2006-10-04 13:16:18 +04:00
|
|
|
struct nfsd4_fs_locations ex_fslocs;
|
2007-07-17 15:04:42 +04:00
|
|
|
int ex_nflavors;
|
|
|
|
struct exp_flavor_info ex_flavors[MAX_SECINFO_LIST];
|
2012-03-28 19:09:08 +04:00
|
|
|
struct cache_detail *cd;
|
2005-04-17 02:20:36 +04:00
|
|
|
};
|
|
|
|
|
|
|
|
/* an "export key" (expkey) maps a filehandlefragement to an
|
2007-02-14 11:33:12 +03:00
|
|
|
* svc_export for a given client. There can be several per export,
|
|
|
|
* for the different fsid types.
|
2005-04-17 02:20:36 +04:00
|
|
|
*/
|
|
|
|
struct svc_expkey {
|
|
|
|
struct cache_head h;
|
|
|
|
|
|
|
|
struct auth_domain * ek_client;
|
|
|
|
int ek_fsidtype;
|
2007-02-14 11:33:12 +03:00
|
|
|
u32 ek_fsid[6];
|
2005-04-17 02:20:36 +04:00
|
|
|
|
2008-02-15 06:38:41 +03:00
|
|
|
struct path ek_path;
|
2005-04-17 02:20:36 +04:00
|
|
|
};
|
|
|
|
|
|
|
|
#define EX_ISSYNC(exp) (!((exp)->ex_flags & NFSEXP_ASYNC))
|
|
|
|
#define EX_NOHIDE(exp) ((exp)->ex_flags & NFSEXP_NOHIDE)
|
|
|
|
#define EX_WGATHER(exp) ((exp)->ex_flags & NFSEXP_GATHERED_WRITES)
|
|
|
|
|
2007-07-19 12:49:20 +04:00
|
|
|
int nfsexp_flags(struct svc_rqst *rqstp, struct svc_export *exp);
|
2007-07-17 15:04:48 +04:00
|
|
|
__be32 check_nfsd_access(struct svc_export *exp, struct svc_rqst *rqstp);
|
2005-04-17 02:20:36 +04:00
|
|
|
|
|
|
|
/*
|
|
|
|
* Function declarations
|
|
|
|
*/
|
2012-04-11 15:13:14 +04:00
|
|
|
int nfsd_export_init(struct net *);
|
|
|
|
void nfsd_export_shutdown(struct net *);
|
2012-04-11 15:13:21 +04:00
|
|
|
void nfsd_export_flush(struct net *);
|
2007-07-17 15:04:44 +04:00
|
|
|
struct svc_export * rqst_exp_get_by_name(struct svc_rqst *,
|
2009-04-18 10:42:05 +04:00
|
|
|
struct path *);
|
2007-07-17 15:04:44 +04:00
|
|
|
struct svc_export * rqst_exp_parent(struct svc_rqst *,
|
2009-04-18 11:00:46 +04:00
|
|
|
struct path *);
|
2011-09-13 03:37:06 +04:00
|
|
|
struct svc_export * rqst_find_fsidzero_export(struct svc_rqst *);
|
2012-04-11 15:13:21 +04:00
|
|
|
int exp_rootfh(struct net *, struct auth_domain *,
|
2005-04-17 02:20:36 +04:00
|
|
|
char *path, struct knfsd_fh *, int maxsize);
|
2007-07-17 15:04:43 +04:00
|
|
|
__be32 exp_pseudoroot(struct svc_rqst *, struct svc_fh *);
|
2006-10-20 10:28:54 +04:00
|
|
|
__be32 nfserrno(int errno);
|
2005-04-17 02:20:36 +04:00
|
|
|
|
|
|
|
static inline void exp_put(struct svc_export *exp)
|
|
|
|
{
|
2012-03-28 19:09:15 +04:00
|
|
|
cache_put(&exp->h, exp->cd);
|
2005-04-17 02:20:36 +04:00
|
|
|
}
|
|
|
|
|
|
|
|
static inline void exp_get(struct svc_export *exp)
|
|
|
|
{
|
|
|
|
cache_get(&exp->h);
|
|
|
|
}
|
2007-07-17 15:04:44 +04:00
|
|
|
struct svc_export * rqst_exp_find(struct svc_rqst *, int, u32 *);
|
2005-04-17 02:20:36 +04:00
|
|
|
|
|
|
|
#endif /* __KERNEL__ */
|
|
|
|
|
|
|
|
#endif /* NFSD_EXPORT_H */
|
|
|
|
|