Differential D22224 Diff 67483 head/sys/cddl/contrib/opensolaris/uts/common/fs/zfs/zfs_acl.c

Changeset View

Standalone View

head/sys/cddl/contrib/opensolaris/uts/common/fs/zfs/zfs_acl.c

	Show First 20 Lines • Show All 2,293 Lines • ▼ Show 20 Lines
	{			{
	if (*working_mode != ACE_WRITE_DATA)			if (*working_mode != ACE_WRITE_DATA)
	return (SET_ERROR(EACCES));			return (SET_ERROR(EACCES));

	return (zfs_zaccess_common(zp, ACE_APPEND_DATA, working_mode,			return (zfs_zaccess_common(zp, ACE_APPEND_DATA, working_mode,
	check_privs, B_FALSE, cr));			check_privs, B_FALSE, cr));
	}			}

				/*
				* Check if VEXEC is allowed.
				*
				* This routine is based on zfs_fastaccesschk_execute which has slowpath
				* calling zfs_zaccess. This would be incorrect on FreeBSD (see
				* zfs_freebsd_access for the difference). Thus this variant let's the
				* caller handle the slowpath (if necessary).
				*
				* We only check for ZFS_NO_EXECS_DENIED and fail early. This routine can
				* be extended to cover more cases, but the flag covers the majority.
				*/
	int			int
				zfs_freebsd_fastaccesschk_execute(struct vnode vp, cred_t cr)
				{
				boolean_t is_attr;
				znode_t *zdp = VTOZ(vp);

				ASSERT_VOP_LOCKED(vp, __func__);

				if (zdp->z_pflags & ZFS_AV_QUARANTINED)
				return (1);

				is_attr = ((zdp->z_pflags & ZFS_XATTR) &&
				(ZTOV(zdp)->v_type == VDIR));
				if (is_attr)
				return (1);

				if (zdp->z_pflags & ZFS_NO_EXECS_DENIED)
				return (0);

				return (1);
				}

				#ifdef illumos
				int
	zfs_fastaccesschk_execute(znode_t zdp, cred_t cr)			zfs_fastaccesschk_execute(znode_t zdp, cred_t cr)
	{			{
	boolean_t owner = B_FALSE;			boolean_t owner = B_FALSE;
	boolean_t groupmbr = B_FALSE;			boolean_t groupmbr = B_FALSE;
	boolean_t is_attr;			boolean_t is_attr;
	uid_t uid = crgetuid(cr);			uid_t uid = crgetuid(cr);
	int error;			int error;

	▲ Show 20 Lines • Show All 49 Lines • ▼ Show 20 Lines

	slow:			slow:
	DTRACE_PROBE(zfs__fastpath__execute__access__miss);			DTRACE_PROBE(zfs__fastpath__execute__access__miss);
	ZFS_ENTER(zdp->z_zfsvfs);			ZFS_ENTER(zdp->z_zfsvfs);
	error = zfs_zaccess(zdp, ACE_EXECUTE, 0, B_FALSE, cr);			error = zfs_zaccess(zdp, ACE_EXECUTE, 0, B_FALSE, cr);
	ZFS_EXIT(zdp->z_zfsvfs);			ZFS_EXIT(zdp->z_zfsvfs);
	return (error);			return (error);
	}			}
				#endif

	/*			/*
	* Determine whether Access should be granted/denied.			* Determine whether Access should be granted/denied.
	*			*
	* The least priv subsystem is always consulted as a basic privilege			* The least priv subsystem is always consulted as a basic privilege
	* can define any form of access.			* can define any form of access.
	*/			*/
	int			int
	▲ Show 20 Lines • Show All 365 Lines • Show Last 20 Lines