2006-10-11 08:20:50 +00:00
|
|
|
/*
|
2006-10-11 08:20:53 +00:00
|
|
|
* linux/fs/ext4/symlink.c
|
2006-10-11 08:20:50 +00:00
|
|
|
*
|
|
|
|
* Only fast symlinks left here - the rest is done by generic code. AV, 1999
|
|
|
|
*
|
|
|
|
* Copyright (C) 1992, 1993, 1994, 1995
|
|
|
|
* Remy Card (card@masi.ibp.fr)
|
|
|
|
* Laboratoire MASI - Institut Blaise Pascal
|
|
|
|
* Universite Pierre et Marie Curie (Paris VI)
|
|
|
|
*
|
|
|
|
* from
|
|
|
|
*
|
|
|
|
* linux/fs/minix/symlink.c
|
|
|
|
*
|
|
|
|
* Copyright (C) 1991, 1992 Linus Torvalds
|
|
|
|
*
|
2006-10-11 08:20:53 +00:00
|
|
|
* ext4 symlink handling code
|
2006-10-11 08:20:50 +00:00
|
|
|
*/
|
|
|
|
|
|
|
|
#include <linux/fs.h>
|
|
|
|
#include <linux/namei.h>
|
2008-04-29 22:13:32 +00:00
|
|
|
#include "ext4.h"
|
2006-10-11 08:20:50 +00:00
|
|
|
#include "xattr.h"
|
|
|
|
|
2015-04-16 05:55:00 +00:00
|
|
|
#ifdef CONFIG_EXT4_FS_ENCRYPTION
|
2015-11-17 15:20:54 +00:00
|
|
|
static const char *ext4_encrypted_get_link(struct dentry *dentry,
|
2015-12-29 20:58:39 +00:00
|
|
|
struct inode *inode,
|
|
|
|
struct delayed_call *done)
|
2015-04-16 05:55:00 +00:00
|
|
|
{
|
|
|
|
struct page *cpage = NULL;
|
|
|
|
char *caddr, *paddr = NULL;
|
|
|
|
struct ext4_str cstr, pstr;
|
|
|
|
struct ext4_encrypted_symlink_data *sd;
|
|
|
|
loff_t size = min_t(loff_t, i_size_read(inode), PAGE_SIZE - 1);
|
|
|
|
int res;
|
|
|
|
u32 plen, max_size = inode->i_sb->s_blocksize;
|
|
|
|
|
2015-11-17 15:20:54 +00:00
|
|
|
if (!dentry)
|
|
|
|
return ERR_PTR(-ECHILD);
|
|
|
|
|
2015-05-31 17:34:22 +00:00
|
|
|
res = ext4_get_encryption_info(inode);
|
ext4 crypto: reorganize how we store keys in the inode
This is a pretty massive patch which does a number of different things:
1) The per-inode encryption information is now stored in an allocated
data structure, ext4_crypt_info, instead of directly in the node.
This reduces the size usage of an in-memory inode when it is not
using encryption.
2) We drop the ext4_fname_crypto_ctx entirely, and use the per-inode
encryption structure instead. This remove an unnecessary memory
allocation and free for the fname_crypto_ctx as well as allowing us
to reuse the ctfm in a directory for multiple lookups and file
creations.
3) We also cache the inode's policy information in the ext4_crypt_info
structure so we don't have to continually read it out of the
extended attributes.
4) We now keep the keyring key in the inode's encryption structure
instead of releasing it after we are done using it to derive the
per-inode key. This allows us to test to see if the key has been
revoked; if it has, we prevent the use of the derived key and free
it.
5) When an inode is released (or when the derived key is freed), we
will use memset_explicit() to zero out the derived key, so it's not
left hanging around in memory. This implies that when a user logs
out, it is important to first revoke the key, and then unlink it,
and then finally, to use "echo 3 > /proc/sys/vm/drop_caches" to
release any decrypted pages and dcache entries from the system
caches.
6) All this, and we also shrink the number of lines of code by around
100. :-)
Signed-off-by: Theodore Ts'o <tytso@mit.edu>
2015-05-18 17:17:47 +00:00
|
|
|
if (res)
|
|
|
|
return ERR_PTR(res);
|
2015-04-16 05:55:00 +00:00
|
|
|
|
|
|
|
if (ext4_inode_is_fast_symlink(inode)) {
|
2015-04-26 22:48:49 +00:00
|
|
|
caddr = (char *) EXT4_I(inode)->i_data;
|
|
|
|
max_size = sizeof(EXT4_I(inode)->i_data);
|
2015-04-16 05:55:00 +00:00
|
|
|
} else {
|
|
|
|
cpage = read_mapping_page(inode->i_mapping, 0, NULL);
|
ext4 crypto: reorganize how we store keys in the inode
This is a pretty massive patch which does a number of different things:
1) The per-inode encryption information is now stored in an allocated
data structure, ext4_crypt_info, instead of directly in the node.
This reduces the size usage of an in-memory inode when it is not
using encryption.
2) We drop the ext4_fname_crypto_ctx entirely, and use the per-inode
encryption structure instead. This remove an unnecessary memory
allocation and free for the fname_crypto_ctx as well as allowing us
to reuse the ctfm in a directory for multiple lookups and file
creations.
3) We also cache the inode's policy information in the ext4_crypt_info
structure so we don't have to continually read it out of the
extended attributes.
4) We now keep the keyring key in the inode's encryption structure
instead of releasing it after we are done using it to derive the
per-inode key. This allows us to test to see if the key has been
revoked; if it has, we prevent the use of the derived key and free
it.
5) When an inode is released (or when the derived key is freed), we
will use memset_explicit() to zero out the derived key, so it's not
left hanging around in memory. This implies that when a user logs
out, it is important to first revoke the key, and then unlink it,
and then finally, to use "echo 3 > /proc/sys/vm/drop_caches" to
release any decrypted pages and dcache entries from the system
caches.
6) All this, and we also shrink the number of lines of code by around
100. :-)
Signed-off-by: Theodore Ts'o <tytso@mit.edu>
2015-05-18 17:17:47 +00:00
|
|
|
if (IS_ERR(cpage))
|
2015-05-02 17:32:22 +00:00
|
|
|
return ERR_CAST(cpage);
|
2015-11-17 06:07:57 +00:00
|
|
|
caddr = page_address(cpage);
|
2015-04-16 05:55:00 +00:00
|
|
|
caddr[size] = 0;
|
|
|
|
}
|
|
|
|
|
|
|
|
/* Symlink is encrypted */
|
|
|
|
sd = (struct ext4_encrypted_symlink_data *)caddr;
|
|
|
|
cstr.name = sd->encrypted_path;
|
2015-11-26 20:20:50 +00:00
|
|
|
cstr.len = le16_to_cpu(sd->len);
|
2015-04-16 05:55:00 +00:00
|
|
|
if ((cstr.len +
|
|
|
|
sizeof(struct ext4_encrypted_symlink_data) - 1) >
|
|
|
|
max_size) {
|
|
|
|
/* Symlink data on the disk is corrupted */
|
2015-10-17 20:16:04 +00:00
|
|
|
res = -EFSCORRUPTED;
|
2015-04-16 05:55:00 +00:00
|
|
|
goto errout;
|
|
|
|
}
|
|
|
|
plen = (cstr.len < EXT4_FNAME_CRYPTO_DIGEST_SIZE*2) ?
|
|
|
|
EXT4_FNAME_CRYPTO_DIGEST_SIZE*2 : cstr.len;
|
|
|
|
paddr = kmalloc(plen + 1, GFP_NOFS);
|
|
|
|
if (!paddr) {
|
|
|
|
res = -ENOMEM;
|
|
|
|
goto errout;
|
|
|
|
}
|
|
|
|
pstr.name = paddr;
|
2015-05-18 17:15:47 +00:00
|
|
|
pstr.len = plen;
|
ext4 crypto: reorganize how we store keys in the inode
This is a pretty massive patch which does a number of different things:
1) The per-inode encryption information is now stored in an allocated
data structure, ext4_crypt_info, instead of directly in the node.
This reduces the size usage of an in-memory inode when it is not
using encryption.
2) We drop the ext4_fname_crypto_ctx entirely, and use the per-inode
encryption structure instead. This remove an unnecessary memory
allocation and free for the fname_crypto_ctx as well as allowing us
to reuse the ctfm in a directory for multiple lookups and file
creations.
3) We also cache the inode's policy information in the ext4_crypt_info
structure so we don't have to continually read it out of the
extended attributes.
4) We now keep the keyring key in the inode's encryption structure
instead of releasing it after we are done using it to derive the
per-inode key. This allows us to test to see if the key has been
revoked; if it has, we prevent the use of the derived key and free
it.
5) When an inode is released (or when the derived key is freed), we
will use memset_explicit() to zero out the derived key, so it's not
left hanging around in memory. This implies that when a user logs
out, it is important to first revoke the key, and then unlink it,
and then finally, to use "echo 3 > /proc/sys/vm/drop_caches" to
release any decrypted pages and dcache entries from the system
caches.
6) All this, and we also shrink the number of lines of code by around
100. :-)
Signed-off-by: Theodore Ts'o <tytso@mit.edu>
2015-05-18 17:17:47 +00:00
|
|
|
res = _ext4_fname_disk_to_usr(inode, NULL, &cstr, &pstr);
|
2015-04-16 05:55:00 +00:00
|
|
|
if (res < 0)
|
|
|
|
goto errout;
|
|
|
|
/* Null-terminate the name */
|
|
|
|
if (res <= plen)
|
|
|
|
paddr[res] = '\0';
|
2015-11-17 06:07:57 +00:00
|
|
|
if (cpage)
|
mm, fs: get rid of PAGE_CACHE_* and page_cache_{get,release} macros
PAGE_CACHE_{SIZE,SHIFT,MASK,ALIGN} macros were introduced *long* time
ago with promise that one day it will be possible to implement page
cache with bigger chunks than PAGE_SIZE.
This promise never materialized. And unlikely will.
We have many places where PAGE_CACHE_SIZE assumed to be equal to
PAGE_SIZE. And it's constant source of confusion on whether
PAGE_CACHE_* or PAGE_* constant should be used in a particular case,
especially on the border between fs and mm.
Global switching to PAGE_CACHE_SIZE != PAGE_SIZE would cause to much
breakage to be doable.
Let's stop pretending that pages in page cache are special. They are
not.
The changes are pretty straight-forward:
- <foo> << (PAGE_CACHE_SHIFT - PAGE_SHIFT) -> <foo>;
- <foo> >> (PAGE_CACHE_SHIFT - PAGE_SHIFT) -> <foo>;
- PAGE_CACHE_{SIZE,SHIFT,MASK,ALIGN} -> PAGE_{SIZE,SHIFT,MASK,ALIGN};
- page_cache_get() -> get_page();
- page_cache_release() -> put_page();
This patch contains automated changes generated with coccinelle using
script below. For some reason, coccinelle doesn't patch header files.
I've called spatch for them manually.
The only adjustment after coccinelle is revert of changes to
PAGE_CAHCE_ALIGN definition: we are going to drop it later.
There are few places in the code where coccinelle didn't reach. I'll
fix them manually in a separate patch. Comments and documentation also
will be addressed with the separate patch.
virtual patch
@@
expression E;
@@
- E << (PAGE_CACHE_SHIFT - PAGE_SHIFT)
+ E
@@
expression E;
@@
- E >> (PAGE_CACHE_SHIFT - PAGE_SHIFT)
+ E
@@
@@
- PAGE_CACHE_SHIFT
+ PAGE_SHIFT
@@
@@
- PAGE_CACHE_SIZE
+ PAGE_SIZE
@@
@@
- PAGE_CACHE_MASK
+ PAGE_MASK
@@
expression E;
@@
- PAGE_CACHE_ALIGN(E)
+ PAGE_ALIGN(E)
@@
expression E;
@@
- page_cache_get(E)
+ get_page(E)
@@
expression E;
@@
- page_cache_release(E)
+ put_page(E)
Signed-off-by: Kirill A. Shutemov <kirill.shutemov@linux.intel.com>
Acked-by: Michal Hocko <mhocko@suse.com>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
2016-04-01 12:29:47 +00:00
|
|
|
put_page(cpage);
|
2015-12-29 20:58:39 +00:00
|
|
|
set_delayed_call(done, kfree_link, paddr);
|
|
|
|
return paddr;
|
2015-04-16 05:55:00 +00:00
|
|
|
errout:
|
2015-11-17 06:07:57 +00:00
|
|
|
if (cpage)
|
mm, fs: get rid of PAGE_CACHE_* and page_cache_{get,release} macros
PAGE_CACHE_{SIZE,SHIFT,MASK,ALIGN} macros were introduced *long* time
ago with promise that one day it will be possible to implement page
cache with bigger chunks than PAGE_SIZE.
This promise never materialized. And unlikely will.
We have many places where PAGE_CACHE_SIZE assumed to be equal to
PAGE_SIZE. And it's constant source of confusion on whether
PAGE_CACHE_* or PAGE_* constant should be used in a particular case,
especially on the border between fs and mm.
Global switching to PAGE_CACHE_SIZE != PAGE_SIZE would cause to much
breakage to be doable.
Let's stop pretending that pages in page cache are special. They are
not.
The changes are pretty straight-forward:
- <foo> << (PAGE_CACHE_SHIFT - PAGE_SHIFT) -> <foo>;
- <foo> >> (PAGE_CACHE_SHIFT - PAGE_SHIFT) -> <foo>;
- PAGE_CACHE_{SIZE,SHIFT,MASK,ALIGN} -> PAGE_{SIZE,SHIFT,MASK,ALIGN};
- page_cache_get() -> get_page();
- page_cache_release() -> put_page();
This patch contains automated changes generated with coccinelle using
script below. For some reason, coccinelle doesn't patch header files.
I've called spatch for them manually.
The only adjustment after coccinelle is revert of changes to
PAGE_CAHCE_ALIGN definition: we are going to drop it later.
There are few places in the code where coccinelle didn't reach. I'll
fix them manually in a separate patch. Comments and documentation also
will be addressed with the separate patch.
virtual patch
@@
expression E;
@@
- E << (PAGE_CACHE_SHIFT - PAGE_SHIFT)
+ E
@@
expression E;
@@
- E >> (PAGE_CACHE_SHIFT - PAGE_SHIFT)
+ E
@@
@@
- PAGE_CACHE_SHIFT
+ PAGE_SHIFT
@@
@@
- PAGE_CACHE_SIZE
+ PAGE_SIZE
@@
@@
- PAGE_CACHE_MASK
+ PAGE_MASK
@@
expression E;
@@
- PAGE_CACHE_ALIGN(E)
+ PAGE_ALIGN(E)
@@
expression E;
@@
- page_cache_get(E)
+ get_page(E)
@@
expression E;
@@
- page_cache_release(E)
+ put_page(E)
Signed-off-by: Kirill A. Shutemov <kirill.shutemov@linux.intel.com>
Acked-by: Michal Hocko <mhocko@suse.com>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
2016-04-01 12:29:47 +00:00
|
|
|
put_page(cpage);
|
2015-04-16 05:55:00 +00:00
|
|
|
kfree(paddr);
|
|
|
|
return ERR_PTR(res);
|
|
|
|
}
|
|
|
|
|
2015-04-27 21:51:30 +00:00
|
|
|
const struct inode_operations ext4_encrypted_symlink_inode_operations = {
|
|
|
|
.readlink = generic_readlink,
|
2015-11-17 15:20:54 +00:00
|
|
|
.get_link = ext4_encrypted_get_link,
|
2015-04-27 21:51:30 +00:00
|
|
|
.setattr = ext4_setattr,
|
|
|
|
.setxattr = generic_setxattr,
|
|
|
|
.getxattr = generic_getxattr,
|
|
|
|
.listxattr = ext4_listxattr,
|
|
|
|
.removexattr = generic_removexattr,
|
|
|
|
};
|
2015-04-16 05:55:00 +00:00
|
|
|
#endif
|
|
|
|
|
2007-02-12 08:55:38 +00:00
|
|
|
const struct inode_operations ext4_symlink_inode_operations = {
|
2006-10-11 08:20:50 +00:00
|
|
|
.readlink = generic_readlink,
|
2015-11-17 15:20:54 +00:00
|
|
|
.get_link = page_get_link,
|
2010-05-16 06:00:00 +00:00
|
|
|
.setattr = ext4_setattr,
|
2006-10-11 08:20:50 +00:00
|
|
|
.setxattr = generic_setxattr,
|
|
|
|
.getxattr = generic_getxattr,
|
2006-10-11 08:20:53 +00:00
|
|
|
.listxattr = ext4_listxattr,
|
2006-10-11 08:20:50 +00:00
|
|
|
.removexattr = generic_removexattr,
|
|
|
|
};
|
|
|
|
|
2007-02-12 08:55:38 +00:00
|
|
|
const struct inode_operations ext4_fast_symlink_inode_operations = {
|
2006-10-11 08:20:50 +00:00
|
|
|
.readlink = generic_readlink,
|
2015-11-17 15:20:54 +00:00
|
|
|
.get_link = simple_get_link,
|
2010-05-16 06:00:00 +00:00
|
|
|
.setattr = ext4_setattr,
|
2006-10-11 08:20:50 +00:00
|
|
|
.setxattr = generic_setxattr,
|
|
|
|
.getxattr = generic_getxattr,
|
2006-10-11 08:20:53 +00:00
|
|
|
.listxattr = ext4_listxattr,
|
2006-10-11 08:20:50 +00:00
|
|
|
.removexattr = generic_removexattr,
|
|
|
|
};
|