fs/smbsrv/smb2_qinfo_sec.c

a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross/*
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross * CDDL HEADER START
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross *
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross * The contents of this file are subject to the terms of the
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross * Common Development and Distribution License (the "License").
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross * You may not use this file except in compliance with the License.
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross *
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross * or http://www.opensolaris.org/os/licensing.
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross * See the License for the specific language governing permissions
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross * and limitations under the License.
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross *
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross * When distributing Covered Code, include this CDDL HEADER in each
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross * If applicable, add the following below this CDDL HEADER, with the
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross * fields enclosed by brackets "[]" replaced with your own identifying
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross * information: Portions Copyright [yyyy] [name of copyright owner]
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross *
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross * CDDL HEADER END
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross */
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross/*
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross * Copyright (c) 2007, 2010, Oracle and/or its affiliates. All rights reserved.
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross * Copyright 2014 Nexenta Systems, Inc.  All rights reserved.
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross */
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross/*
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross * Dispatch function for SMB2_QUERY_INFO
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross * Similar to smb_nt_transact_security.c
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross */
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross#include <smbsrv/smb2_kproto.h>
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross#include <smbsrv/smb_fsops.h>
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross#include <smbsrv/ntifs.h>
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Rossuint32_t
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Rosssmb2_qinfo_sec(smb_request_t *sr, smb_queryinfo_t *qi)
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross{
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross    smb_sd_t sd;
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross    uint32_t secinfo = qi->qi_AddlInfo;
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross    uint32_t sdlen;
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross    uint32_t status;
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross    /*
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross     * secinfo & ...
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross     * OWNER_SECURITY_INFORMATION,
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross     * GROUP_SECURITY_INFORMATION,
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross     * DACL_SECURITY_INFORMATION, ...
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross     */
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross    if ((sr->fid_ofile->f_node == NULL) ||
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross        (sr->fid_ofile->f_ftype != SMB_FTYPE_DISK))
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross        return (NT_STATUS_INVALID_PARAMETER);
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross    if (sr->tid_tree->t_acltype != ACE_T) {
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross        /*
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross         * If target filesystem doesn't support ACE_T acls then
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross         * don't process SACL
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross         */
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross        secinfo &= ~SMB_SACL_SECINFO;
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross    }
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross    status = smb_sd_read(sr, &sd, secinfo);
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross    if (status != NT_STATUS_SUCCESS)
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross        return (status);
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross    sdlen = smb_sd_len(&sd, secinfo);
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross    if (sdlen == 0) {
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross        status = NT_STATUS_INVALID_SECURITY_DESCR;
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross        goto out;
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross    }
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross    if (sdlen > sr->raw_data.max_bytes) {
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross        /*
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross         * The maximum data return count specified by the
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross         * client is not big enough to hold the security
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross         * descriptor.  Return the special error that
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross         * tells the client how much room they need.
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross         * Error data is the required size.
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross         */
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross        MBC_FLUSH(&sr->raw_data);
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross        sr->raw_data.max_bytes = 4;
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross        (void) smb_mbc_encodef(&sr->raw_data, "l", sdlen);
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross        status = NT_STATUS_BUFFER_TOO_SMALL;
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross        goto out;
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross    }
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross    smb_encode_sd(&sr->raw_data, &sd, secinfo);
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross    status = 0;
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Rossout:
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross    smb_sd_term(&sd);
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross    return (status);
a90cf9f29973990687fa61de9f1f6ea22e924e40Gordon Ross}