fa9e4066f08beec538e775443c5be79dd423fcabahrens

fa9e4066f08beec538e775443c5be79dd423fcabahrens#include <sys/types.h>

fa9e4066f08beec538e775443c5be79dd423fcabahrens#include <sys/param.h>

fa9e4066f08beec538e775443c5be79dd423fcabahrens#include <sys/time.h>

fa9e4066f08beec538e775443c5be79dd423fcabahrens#include <sys/systm.h>

fa9e4066f08beec538e775443c5be79dd423fcabahrens#include <sys/sysmacros.h>

fa9e4066f08beec538e775443c5be79dd423fcabahrens#include <sys/resource.h>

fa9e4066f08beec538e775443c5be79dd423fcabahrens#include <sys/vfs.h>

fa9e4066f08beec538e775443c5be79dd423fcabahrens#include <sys/vnode.h>

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw#include <sys/sid.h>

fa9e4066f08beec538e775443c5be79dd423fcabahrens#include <sys/file.h>

fa9e4066f08beec538e775443c5be79dd423fcabahrens#include <sys/stat.h>

fa9e4066f08beec538e775443c5be79dd423fcabahrens#include <sys/kmem.h>

fa9e4066f08beec538e775443c5be79dd423fcabahrens#include <sys/cmn_err.h>

fa9e4066f08beec538e775443c5be79dd423fcabahrens#include <sys/errno.h>

fa9e4066f08beec538e775443c5be79dd423fcabahrens#include <sys/unistd.h>

169cdae232f15e542d6af0a9ce30c3f84222bc0fmarks#include <sys/sdt.h>

fa9e4066f08beec538e775443c5be79dd423fcabahrens#include <sys/fs/zfs.h>

fa9e4066f08beec538e775443c5be79dd423fcabahrens#include <sys/mode.h>

fa9e4066f08beec538e775443c5be79dd423fcabahrens#include <sys/policy.h>

fa9e4066f08beec538e775443c5be79dd423fcabahrens#include <sys/zfs_znode.h>

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw#include <sys/zfs_fuid.h>

fa9e4066f08beec538e775443c5be79dd423fcabahrens#include <sys/zfs_acl.h>

fa9e4066f08beec538e775443c5be79dd423fcabahrens#include <sys/zfs_dir.h>

fa9e4066f08beec538e775443c5be79dd423fcabahrens#include <sys/zfs_vfsops.h>

fa9e4066f08beec538e775443c5be79dd423fcabahrens#include <sys/dmu.h>

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw#include <sys/dnode.h>

fa9e4066f08beec538e775443c5be79dd423fcabahrens#include <sys/zap.h>

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum#include <sys/sa.h>

fa9e4066f08beec538e775443c5be79dd423fcabahrens#include "fs/fs_subr.h"

fa9e4066f08beec538e775443c5be79dd423fcabahrens#include <acl/acl_common.h>

fa9e4066f08beec538e775443c5be79dd423fcabahrens

fa9e4066f08beec538e775443c5be79dd423fcabahrens#define ALLOW ACE_ACCESS_ALLOWED_ACE_TYPE

fa9e4066f08beec538e775443c5be79dd423fcabahrens#define DENY ACE_ACCESS_DENIED_ACE_TYPE

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw#define MAX_ACE_TYPE ACE_SYSTEM_ALARM_CALLBACK_OBJECT_ACE_TYPE

003c2582df5b8a57cb0e6f04227f93ccd982f0e5Mark Shellenbaum#define MIN_ACE_TYPE ALLOW

fa9e4066f08beec538e775443c5be79dd423fcabahrens

fa9e4066f08beec538e775443c5be79dd423fcabahrens#define OWNING_GROUP (ACE_GROUP|ACE_IDENTIFIER_GROUP)

fa9e4066f08beec538e775443c5be79dd423fcabahrens#define EVERYONE_ALLOW_MASK (ACE_READ_ACL|ACE_READ_ATTRIBUTES | \

fa9e4066f08beec538e775443c5be79dd423fcabahrens ACE_READ_NAMED_ATTRS|ACE_SYNCHRONIZE)

fa9e4066f08beec538e775443c5be79dd423fcabahrens#define EVERYONE_DENY_MASK (ACE_WRITE_ACL|ACE_WRITE_OWNER | \

fa9e4066f08beec538e775443c5be79dd423fcabahrens ACE_WRITE_ATTRIBUTES|ACE_WRITE_NAMED_ATTRS)

fa9e4066f08beec538e775443c5be79dd423fcabahrens#define OWNER_ALLOW_MASK (ACE_WRITE_ACL | ACE_WRITE_OWNER | \

fa9e4066f08beec538e775443c5be79dd423fcabahrens ACE_WRITE_ATTRIBUTES|ACE_WRITE_NAMED_ATTRS)

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw#define ZFS_CHECKED_MASKS (ACE_READ_ACL|ACE_READ_ATTRIBUTES|ACE_READ_DATA| \

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw ACE_READ_NAMED_ATTRS|ACE_WRITE_DATA|ACE_WRITE_ATTRIBUTES| \

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw ACE_WRITE_NAMED_ATTRS|ACE_APPEND_DATA|ACE_EXECUTE|ACE_WRITE_OWNER| \

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw ACE_WRITE_ACL|ACE_DELETE|ACE_DELETE_CHILD|ACE_SYNCHRONIZE)

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

f52e0e2bdbf77acd45e060be155f7a484e1bf1f9Mark Shellenbaum#define WRITE_MASK_DATA (ACE_WRITE_DATA|ACE_APPEND_DATA|ACE_WRITE_NAMED_ATTRS)

f52e0e2bdbf77acd45e060be155f7a484e1bf1f9Mark Shellenbaum#define WRITE_MASK_ATTRS (ACE_WRITE_ACL|ACE_WRITE_OWNER|ACE_WRITE_ATTRIBUTES| \

f52e0e2bdbf77acd45e060be155f7a484e1bf1f9Mark Shellenbaum ACE_DELETE|ACE_DELETE_CHILD)

f52e0e2bdbf77acd45e060be155f7a484e1bf1f9Mark Shellenbaum#define WRITE_MASK (WRITE_MASK_DATA|WRITE_MASK_ATTRS)

fa9e4066f08beec538e775443c5be79dd423fcabahrens

fa9e4066f08beec538e775443c5be79dd423fcabahrens#define OGE_CLEAR (ACE_READ_DATA|ACE_LIST_DIRECTORY|ACE_WRITE_DATA| \

fa9e4066f08beec538e775443c5be79dd423fcabahrens ACE_ADD_FILE|ACE_APPEND_DATA|ACE_ADD_SUBDIRECTORY|ACE_EXECUTE)

fa9e4066f08beec538e775443c5be79dd423fcabahrens

fa9e4066f08beec538e775443c5be79dd423fcabahrens#define OKAY_MASK_BITS (ACE_READ_DATA|ACE_LIST_DIRECTORY|ACE_WRITE_DATA| \

fa9e4066f08beec538e775443c5be79dd423fcabahrens ACE_ADD_FILE|ACE_APPEND_DATA|ACE_ADD_SUBDIRECTORY|ACE_EXECUTE)

fa9e4066f08beec538e775443c5be79dd423fcabahrens

fa9e4066f08beec538e775443c5be79dd423fcabahrens#define ALL_INHERIT (ACE_FILE_INHERIT_ACE|ACE_DIRECTORY_INHERIT_ACE | \

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw ACE_NO_PROPAGATE_INHERIT_ACE|ACE_INHERIT_ONLY_ACE|ACE_INHERITED_ACE)

fa9e4066f08beec538e775443c5be79dd423fcabahrens

b3d141f8c7a5335d670721a81f797b1834ee327bmarks#define RESTRICTED_CLEAR (ACE_WRITE_ACL|ACE_WRITE_OWNER)

fa9e4066f08beec538e775443c5be79dd423fcabahrens

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw#define V4_ACL_WIDE_FLAGS (ZFS_ACL_AUTO_INHERIT|ZFS_ACL_DEFAULTED|\

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw ZFS_ACL_PROTECTED)

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw#define ZFS_ACL_WIDE_FLAGS (V4_ACL_WIDE_FLAGS|ZFS_ACL_TRIVIAL|ZFS_INHERIT_ACE|\

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw ZFS_ACL_OBJ_ACE)

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

4929fd5ef3f018b490359eb4a2d95d22152325fbTim Haley#define ALL_MODE_EXECS (S_IXUSR | S_IXGRP | S_IXOTH)

4929fd5ef3f018b490359eb4a2d95d22152325fbTim Haley

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amwstatic uint16_t

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amwzfs_ace_v0_get_type(void *acep)

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw{

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw return (((zfs_oldace_t *)acep)->z_type);

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw}

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amwstatic uint16_t

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amwzfs_ace_v0_get_flags(void *acep)

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw{

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw return (((zfs_oldace_t *)acep)->z_flags);

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw}

fa9e4066f08beec538e775443c5be79dd423fcabahrens

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amwstatic uint32_t

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amwzfs_ace_v0_get_mask(void *acep)

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw{

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw return (((zfs_oldace_t *)acep)->z_access_mask);

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw}

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amwstatic uint64_t

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amwzfs_ace_v0_get_who(void *acep)

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw{

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw return (((zfs_oldace_t *)acep)->z_fuid);

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw}

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amwstatic void

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amwzfs_ace_v0_set_type(void *acep, uint16_t type)

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw{

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw ((zfs_oldace_t *)acep)->z_type = type;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw}

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amwstatic void

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amwzfs_ace_v0_set_flags(void *acep, uint16_t flags)

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw{

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw ((zfs_oldace_t *)acep)->z_flags = flags;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw}

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amwstatic void

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amwzfs_ace_v0_set_mask(void *acep, uint32_t mask)

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw{

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw ((zfs_oldace_t *)acep)->z_access_mask = mask;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw}

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amwstatic void

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amwzfs_ace_v0_set_who(void *acep, uint64_t who)

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw{

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw ((zfs_oldace_t *)acep)->z_fuid = who;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw}

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amwstatic size_t

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amwzfs_ace_v0_size(void *acep)

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw{

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw return (sizeof (zfs_oldace_t));

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw}

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amwstatic size_t

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amwzfs_ace_v0_abstract_size(void)

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw{

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw return (sizeof (zfs_oldace_t));

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw}

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amwstatic int

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amwzfs_ace_v0_mask_off(void)

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw{

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw return (offsetof(zfs_oldace_t, z_access_mask));

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw}

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amwstatic int

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amwzfs_ace_v0_data(void *acep, void **datap)

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw{

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw *datap = NULL;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw return (0);

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw}

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amwstatic acl_ops_t zfs_acl_v0_ops = {

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw zfs_ace_v0_get_mask,

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw zfs_ace_v0_set_mask,

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw zfs_ace_v0_get_flags,

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw zfs_ace_v0_set_flags,

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw zfs_ace_v0_get_type,

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw zfs_ace_v0_set_type,

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw zfs_ace_v0_get_who,

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw zfs_ace_v0_set_who,

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw zfs_ace_v0_size,

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw zfs_ace_v0_abstract_size,

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw zfs_ace_v0_mask_off,

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw zfs_ace_v0_data

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw};

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amwstatic uint16_t

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amwzfs_ace_fuid_get_type(void *acep)

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw{

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw return (((zfs_ace_hdr_t *)acep)->z_type);

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw}

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amwstatic uint16_t

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amwzfs_ace_fuid_get_flags(void *acep)

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw{

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw return (((zfs_ace_hdr_t *)acep)->z_flags);

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw}

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amwstatic uint32_t

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amwzfs_ace_fuid_get_mask(void *acep)

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw{

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw return (((zfs_ace_hdr_t *)acep)->z_access_mask);

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw}

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amwstatic uint64_t

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amwzfs_ace_fuid_get_who(void *args)

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw{

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw uint16_t entry_type;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw zfs_ace_t *acep = args;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw entry_type = acep->z_hdr.z_flags & ACE_TYPE_FLAGS;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw if (entry_type == ACE_OWNER || entry_type == OWNING_GROUP ||

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw entry_type == ACE_EVERYONE)

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw return (-1);

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw return (((zfs_ace_t *)acep)->z_fuid);

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw}

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amwstatic void

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amwzfs_ace_fuid_set_type(void *acep, uint16_t type)

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw{

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw ((zfs_ace_hdr_t *)acep)->z_type = type;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw}

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amwstatic void

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amwzfs_ace_fuid_set_flags(void *acep, uint16_t flags)

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw{

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw ((zfs_ace_hdr_t *)acep)->z_flags = flags;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw}

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amwstatic void

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amwzfs_ace_fuid_set_mask(void *acep, uint32_t mask)

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw{

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw ((zfs_ace_hdr_t *)acep)->z_access_mask = mask;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw}

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amwstatic void

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amwzfs_ace_fuid_set_who(void *arg, uint64_t who)

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw{

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw zfs_ace_t *acep = arg;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw uint16_t entry_type = acep->z_hdr.z_flags & ACE_TYPE_FLAGS;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw if (entry_type == ACE_OWNER || entry_type == OWNING_GROUP ||

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw entry_type == ACE_EVERYONE)

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw return;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw acep->z_fuid = who;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw}

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amwstatic size_t

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amwzfs_ace_fuid_size(void *acep)

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw{

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw zfs_ace_hdr_t *zacep = acep;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw uint16_t entry_type;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw switch (zacep->z_type) {

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw case ACE_ACCESS_ALLOWED_OBJECT_ACE_TYPE:

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw case ACE_ACCESS_DENIED_OBJECT_ACE_TYPE:

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw case ACE_SYSTEM_AUDIT_OBJECT_ACE_TYPE:

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw case ACE_SYSTEM_ALARM_OBJECT_ACE_TYPE:

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw return (sizeof (zfs_object_ace_t));

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw case ALLOW:

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw case DENY:

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw entry_type =

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw (((zfs_ace_hdr_t *)acep)->z_flags & ACE_TYPE_FLAGS);

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw if (entry_type == ACE_OWNER ||

1ab996781aab376b5ee79af025ab24ff42a0a3f0Mark Shellenbaum entry_type == OWNING_GROUP ||

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw entry_type == ACE_EVERYONE)

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw return (sizeof (zfs_ace_hdr_t));

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw /*FALLTHROUGH*/

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw default:

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw return (sizeof (zfs_ace_t));

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw }

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw}

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amwstatic size_t

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amwzfs_ace_fuid_abstract_size(void)

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw{

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw return (sizeof (zfs_ace_hdr_t));

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw}

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amwstatic int

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amwzfs_ace_fuid_mask_off(void)

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw{

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw return (offsetof(zfs_ace_hdr_t, z_access_mask));

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw}

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amwstatic int

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amwzfs_ace_fuid_data(void *acep, void **datap)

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw{

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw zfs_ace_t *zacep = acep;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw zfs_object_ace_t *zobjp;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw switch (zacep->z_hdr.z_type) {

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw case ACE_ACCESS_ALLOWED_OBJECT_ACE_TYPE:

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw case ACE_ACCESS_DENIED_OBJECT_ACE_TYPE:

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw case ACE_SYSTEM_AUDIT_OBJECT_ACE_TYPE:

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw case ACE_SYSTEM_ALARM_OBJECT_ACE_TYPE:

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw zobjp = acep;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw *datap = (caddr_t)zobjp + sizeof (zfs_ace_t);

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw return (sizeof (zfs_object_ace_t) - sizeof (zfs_ace_t));

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw default:

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw *datap = NULL;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw return (0);

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw }

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw}

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amwstatic acl_ops_t zfs_acl_fuid_ops = {

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw zfs_ace_fuid_get_mask,

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw zfs_ace_fuid_set_mask,

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw zfs_ace_fuid_get_flags,

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw zfs_ace_fuid_set_flags,

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw zfs_ace_fuid_get_type,

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw zfs_ace_fuid_set_type,

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw zfs_ace_fuid_get_who,

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw zfs_ace_fuid_set_who,

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw zfs_ace_fuid_size,

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw zfs_ace_fuid_abstract_size,

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw zfs_ace_fuid_mask_off,

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw zfs_ace_fuid_data

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw};

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaumzfs_external_acl(znode_t *zp)

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum{

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum zfs_acl_phys_t acl_phys;

1412a1a223b7a94990edf5114c108b0a29c3f881Mark Shellenbaum int error;

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum if (zp->z_is_sa)

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum return (0);

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum

1412a1a223b7a94990edf5114c108b0a29c3f881Mark Shellenbaum /*

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum

1412a1a223b7a94990edf5114c108b0a29c3f881Mark Shellenbaum if ((error = sa_lookup(zp->z_sa_hdl, SA_ZPL_ZNODE_ACL(zp->z_zfsvfs),

1412a1a223b7a94990edf5114c108b0a29c3f881Mark Shellenbaum &acl_phys, sizeof (acl_phys))) == 0)

1412a1a223b7a94990edf5114c108b0a29c3f881Mark Shellenbaum return (acl_phys.z_acl_extern_obj);

1412a1a223b7a94990edf5114c108b0a29c3f881Mark Shellenbaum else {

1412a1a223b7a94990edf5114c108b0a29c3f881Mark Shellenbaum /*

1412a1a223b7a94990edf5114c108b0a29c3f881Mark Shellenbaum VERIFY(zp->z_is_sa && error == ENOENT);

1412a1a223b7a94990edf5114c108b0a29c3f881Mark Shellenbaum return (0);

1412a1a223b7a94990edf5114c108b0a29c3f881Mark Shellenbaum }

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum}

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaumstatic int

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaumzfs_acl_znode_info(znode_t *zp, int *aclsize, int *aclcount,

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum zfs_acl_phys_t *aclphys)

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum{

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum zfsvfs_t *zfsvfs = zp->z_zfsvfs;

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum uint64_t acl_count;

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum int size;

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum int error;

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum

1412a1a223b7a94990edf5114c108b0a29c3f881Mark Shellenbaum ASSERT(MUTEX_HELD(&zp->z_acl_lock));

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum if (zp->z_is_sa) {

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum if ((error = sa_size(zp->z_sa_hdl, SA_ZPL_DACL_ACES(zfsvfs),

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum &size)) != 0)

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum return (error);

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum *aclsize = size;

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum if ((error = sa_lookup(zp->z_sa_hdl, SA_ZPL_DACL_COUNT(zfsvfs),

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum &acl_count, sizeof (acl_count))) != 0)

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum return (error);

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum *aclcount = acl_count;

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum } else {

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum if ((error = sa_lookup(zp->z_sa_hdl, SA_ZPL_ZNODE_ACL(zfsvfs),

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum aclphys, sizeof (*aclphys))) != 0)

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum return (error);

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum if (aclphys->z_acl_version == ZFS_ACL_VERSION_INITIAL) {

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum *aclsize = ZFS_ACL_SIZE(aclphys->z_acl_size);

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum *aclcount = aclphys->z_acl_size;

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum } else {

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum *aclsize = aclphys->z_acl_size;

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum *aclcount = aclphys->z_acl_count;

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum }

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum }

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum return (0);

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum}

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaumzfs_znode_acl_version(znode_t *zp)

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum{

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum zfs_acl_phys_t acl_phys;

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum

1412a1a223b7a94990edf5114c108b0a29c3f881Mark Shellenbaum if (zp->z_is_sa)

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum return (ZFS_ACL_VERSION_FUID);

1412a1a223b7a94990edf5114c108b0a29c3f881Mark Shellenbaum else {

1412a1a223b7a94990edf5114c108b0a29c3f881Mark Shellenbaum int error;

1412a1a223b7a94990edf5114c108b0a29c3f881Mark Shellenbaum

1412a1a223b7a94990edf5114c108b0a29c3f881Mark Shellenbaum /*

1412a1a223b7a94990edf5114c108b0a29c3f881Mark Shellenbaum if ((error = sa_lookup(zp->z_sa_hdl,

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum SA_ZPL_ZNODE_ACL(zp->z_zfsvfs),

1412a1a223b7a94990edf5114c108b0a29c3f881Mark Shellenbaum &acl_phys, sizeof (acl_phys))) == 0)

1412a1a223b7a94990edf5114c108b0a29c3f881Mark Shellenbaum return (acl_phys.z_acl_version);

1412a1a223b7a94990edf5114c108b0a29c3f881Mark Shellenbaum else {

1412a1a223b7a94990edf5114c108b0a29c3f881Mark Shellenbaum /*

1412a1a223b7a94990edf5114c108b0a29c3f881Mark Shellenbaum VERIFY(zp->z_is_sa && error == ENOENT);

1412a1a223b7a94990edf5114c108b0a29c3f881Mark Shellenbaum return (ZFS_ACL_VERSION_FUID);

1412a1a223b7a94990edf5114c108b0a29c3f881Mark Shellenbaum }

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum }

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum}

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amwstatic int

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amwzfs_acl_version(int version)

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw{

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw if (version < ZPL_VERSION_FUID)

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw return (ZFS_ACL_VERSION_INITIAL);

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw else

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw return (ZFS_ACL_VERSION_FUID);

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw}

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amwstatic int

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amwzfs_acl_version_zp(znode_t *zp)

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw{

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw return (zfs_acl_version(zp->z_zfsvfs->z_version));

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw}

fa9e4066f08beec538e775443c5be79dd423fcabahrens

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaumzfs_acl_t *

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amwzfs_acl_alloc(int vers)

fa9e4066f08beec538e775443c5be79dd423fcabahrens{

fa9e4066f08beec538e775443c5be79dd423fcabahrens zfs_acl_t *aclp;

fa9e4066f08beec538e775443c5be79dd423fcabahrens

fa9e4066f08beec538e775443c5be79dd423fcabahrens aclp = kmem_zalloc(sizeof (zfs_acl_t), KM_SLEEP);

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw list_create(&aclp->z_acl, sizeof (zfs_acl_node_t),

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw offsetof(zfs_acl_node_t, z_next));

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw aclp->z_version = vers;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw if (vers == ZFS_ACL_VERSION_FUID)

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw aclp->z_ops = zfs_acl_fuid_ops;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw else

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw aclp->z_ops = zfs_acl_v0_ops;

fa9e4066f08beec538e775443c5be79dd423fcabahrens return (aclp);

fa9e4066f08beec538e775443c5be79dd423fcabahrens}

fa9e4066f08beec538e775443c5be79dd423fcabahrens

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaumzfs_acl_node_t *

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amwzfs_acl_node_alloc(size_t bytes)

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw{

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw zfs_acl_node_t *aclnode;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw aclnode = kmem_zalloc(sizeof (zfs_acl_node_t), KM_SLEEP);

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw if (bytes) {

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw aclnode->z_acldata = kmem_alloc(bytes, KM_SLEEP);

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw aclnode->z_allocdata = aclnode->z_acldata;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw aclnode->z_allocsize = bytes;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw aclnode->z_size = bytes;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw }

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw return (aclnode);

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw}

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amwstatic void

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amwzfs_acl_node_free(zfs_acl_node_t *aclnode)

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw{

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw if (aclnode->z_allocsize)

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw kmem_free(aclnode->z_allocdata, aclnode->z_allocsize);

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw kmem_free(aclnode, sizeof (zfs_acl_node_t));

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw}

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

2459a9eaca6b6525c76289d22ffe4c96be1956d6marksstatic void

2459a9eaca6b6525c76289d22ffe4c96be1956d6markszfs_acl_release_nodes(zfs_acl_t *aclp)

fa9e4066f08beec538e775443c5be79dd423fcabahrens{

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw zfs_acl_node_t *aclnode;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw while (aclnode = list_head(&aclp->z_acl)) {

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw list_remove(&aclp->z_acl, aclnode);

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw zfs_acl_node_free(aclnode);

fa9e4066f08beec538e775443c5be79dd423fcabahrens }

2459a9eaca6b6525c76289d22ffe4c96be1956d6marks aclp->z_acl_count = 0;

2459a9eaca6b6525c76289d22ffe4c96be1956d6marks aclp->z_acl_bytes = 0;

2459a9eaca6b6525c76289d22ffe4c96be1956d6marks}

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

2459a9eaca6b6525c76289d22ffe4c96be1956d6markszfs_acl_free(zfs_acl_t *aclp)

2459a9eaca6b6525c76289d22ffe4c96be1956d6marks{

2459a9eaca6b6525c76289d22ffe4c96be1956d6marks zfs_acl_release_nodes(aclp);

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw list_destroy(&aclp->z_acl);

fa9e4066f08beec538e775443c5be79dd423fcabahrens kmem_free(aclp, sizeof (zfs_acl_t));

fa9e4066f08beec538e775443c5be79dd423fcabahrens}

fa9e4066f08beec538e775443c5be79dd423fcabahrens

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amwstatic boolean_t

003c2582df5b8a57cb0e6f04227f93ccd982f0e5Mark Shellenbaumzfs_acl_valid_ace_type(uint_t type, uint_t flags)

fa9e4066f08beec538e775443c5be79dd423fcabahrens{

003c2582df5b8a57cb0e6f04227f93ccd982f0e5Mark Shellenbaum uint16_t entry_type;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

003c2582df5b8a57cb0e6f04227f93ccd982f0e5Mark Shellenbaum switch (type) {

003c2582df5b8a57cb0e6f04227f93ccd982f0e5Mark Shellenbaum case ALLOW:

003c2582df5b8a57cb0e6f04227f93ccd982f0e5Mark Shellenbaum case DENY:

003c2582df5b8a57cb0e6f04227f93ccd982f0e5Mark Shellenbaum case ACE_SYSTEM_AUDIT_ACE_TYPE:

003c2582df5b8a57cb0e6f04227f93ccd982f0e5Mark Shellenbaum case ACE_SYSTEM_ALARM_ACE_TYPE:

003c2582df5b8a57cb0e6f04227f93ccd982f0e5Mark Shellenbaum entry_type = flags & ACE_TYPE_FLAGS;

003c2582df5b8a57cb0e6f04227f93ccd982f0e5Mark Shellenbaum return (entry_type == ACE_OWNER ||

003c2582df5b8a57cb0e6f04227f93ccd982f0e5Mark Shellenbaum entry_type == OWNING_GROUP ||

003c2582df5b8a57cb0e6f04227f93ccd982f0e5Mark Shellenbaum entry_type == ACE_EVERYONE || entry_type == 0 ||

003c2582df5b8a57cb0e6f04227f93ccd982f0e5Mark Shellenbaum entry_type == ACE_IDENTIFIER_GROUP);

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw default:

003c2582df5b8a57cb0e6f04227f93ccd982f0e5Mark Shellenbaum if (type >= MIN_ACE_TYPE && type <= MAX_ACE_TYPE)

003c2582df5b8a57cb0e6f04227f93ccd982f0e5Mark Shellenbaum return (B_TRUE);

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw }

003c2582df5b8a57cb0e6f04227f93ccd982f0e5Mark Shellenbaum return (B_FALSE);

003c2582df5b8a57cb0e6f04227f93ccd982f0e5Mark Shellenbaum}

fa9e4066f08beec538e775443c5be79dd423fcabahrens

003c2582df5b8a57cb0e6f04227f93ccd982f0e5Mark Shellenbaumstatic boolean_t

003c2582df5b8a57cb0e6f04227f93ccd982f0e5Mark Shellenbaumzfs_ace_valid(vtype_t obj_type, zfs_acl_t *aclp, uint16_t type, uint16_t iflags)

003c2582df5b8a57cb0e6f04227f93ccd982f0e5Mark Shellenbaum{

169cdae232f15e542d6af0a9ce30c3f84222bc0fmarks /*

fa9e4066f08beec538e775443c5be79dd423fcabahrens

003c2582df5b8a57cb0e6f04227f93ccd982f0e5Mark Shellenbaum if (!zfs_acl_valid_ace_type(type, iflags))

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw return (B_FALSE);

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw switch (type) {

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw case ACE_ACCESS_ALLOWED_OBJECT_ACE_TYPE:

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw case ACE_ACCESS_DENIED_OBJECT_ACE_TYPE:

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw case ACE_SYSTEM_AUDIT_OBJECT_ACE_TYPE:

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw case ACE_SYSTEM_ALARM_OBJECT_ACE_TYPE:

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw if (aclp->z_version < ZFS_ACL_VERSION_FUID)

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw return (B_FALSE);

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw aclp->z_hints |= ZFS_ACL_OBJ_ACE;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw }

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

003c2582df5b8a57cb0e6f04227f93ccd982f0e5Mark Shellenbaum /*

003c2582df5b8a57cb0e6f04227f93ccd982f0e5Mark Shellenbaum

b249c65cf0a7400e86a36ddab5c3fce085809859marks if (obj_type == VDIR &&

b249c65cf0a7400e86a36ddab5c3fce085809859marks (iflags & (ACE_FILE_INHERIT_ACE|ACE_DIRECTORY_INHERIT_ACE)))

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw aclp->z_hints |= ZFS_INHERIT_ACE;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw if (iflags & (ACE_INHERIT_ONLY_ACE|ACE_NO_PROPAGATE_INHERIT_ACE)) {

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw if ((iflags & (ACE_FILE_INHERIT_ACE|

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw ACE_DIRECTORY_INHERIT_ACE)) == 0) {

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw return (B_FALSE);

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw }

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw }

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw return (B_TRUE);

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw}

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amwstatic void *

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amwzfs_acl_next_ace(zfs_acl_t *aclp, void *start, uint64_t *who,

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw uint32_t *access_mask, uint16_t *iflags, uint16_t *type)

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw{

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw zfs_acl_node_t *aclnode;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum ASSERT(aclp);

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw if (start == NULL) {

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw aclnode = list_head(&aclp->z_acl);

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw if (aclnode == NULL)

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw return (NULL);

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw aclp->z_next_ace = aclnode->z_acldata;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw aclp->z_curr_node = aclnode;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw aclnode->z_ace_idx = 0;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw }

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw aclnode = aclp->z_curr_node;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw if (aclnode == NULL)

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw return (NULL);

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw if (aclnode->z_ace_idx >= aclnode->z_ace_count) {

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw aclnode = list_next(&aclp->z_acl, aclnode);

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw if (aclnode == NULL)

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw return (NULL);

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw else {

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw aclp->z_curr_node = aclnode;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw aclnode->z_ace_idx = 0;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw aclp->z_next_ace = aclnode->z_acldata;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw }

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw }

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw if (aclnode->z_ace_idx < aclnode->z_ace_count) {

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw void *acep = aclp->z_next_ace;

003c2582df5b8a57cb0e6f04227f93ccd982f0e5Mark Shellenbaum size_t ace_size;

003c2582df5b8a57cb0e6f04227f93ccd982f0e5Mark Shellenbaum

003c2582df5b8a57cb0e6f04227f93ccd982f0e5Mark Shellenbaum /*

003c2582df5b8a57cb0e6f04227f93ccd982f0e5Mark Shellenbaum ace_size = aclp->z_ops.ace_size(acep);

003c2582df5b8a57cb0e6f04227f93ccd982f0e5Mark Shellenbaum

003c2582df5b8a57cb0e6f04227f93ccd982f0e5Mark Shellenbaum if (((caddr_t)acep + ace_size) >

003c2582df5b8a57cb0e6f04227f93ccd982f0e5Mark Shellenbaum ((caddr_t)aclnode->z_acldata + aclnode->z_size)) {

003c2582df5b8a57cb0e6f04227f93ccd982f0e5Mark Shellenbaum return (NULL);

003c2582df5b8a57cb0e6f04227f93ccd982f0e5Mark Shellenbaum }

003c2582df5b8a57cb0e6f04227f93ccd982f0e5Mark Shellenbaum

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw *iflags = aclp->z_ops.ace_flags_get(acep);

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw *type = aclp->z_ops.ace_type_get(acep);

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw *access_mask = aclp->z_ops.ace_mask_get(acep);

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw *who = aclp->z_ops.ace_who_get(acep);

003c2582df5b8a57cb0e6f04227f93ccd982f0e5Mark Shellenbaum aclp->z_next_ace = (caddr_t)aclp->z_next_ace + ace_size;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw aclnode->z_ace_idx++;

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw return ((void *)acep);

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw }

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw return (NULL);

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw}

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amwstatic uint64_t

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amwzfs_ace_walk(void *datap, uint64_t cookie, int aclcnt,

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw uint16_t *flags, uint16_t *type, uint32_t *mask)

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw{

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw zfs_acl_t *aclp = datap;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw zfs_ace_hdr_t *acep = (zfs_ace_hdr_t *)(uintptr_t)cookie;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw uint64_t who;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw acep = zfs_acl_next_ace(aclp, acep, &who, mask,

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw flags, type);

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw return ((uint64_t)(uintptr_t)acep);

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw}

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amwstatic zfs_acl_node_t *

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amwzfs_acl_curr_node(zfs_acl_t *aclp)

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw{

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw ASSERT(aclp->z_curr_node);

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw return (aclp->z_curr_node);

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw}

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

89459e17032b6bb1d59eebd2b7c0d06859d4657cMark Shellenbaumzfs_copy_ace_2_fuid(zfsvfs_t *zfsvfs, vtype_t obj_type, zfs_acl_t *aclp,

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum void *datap, zfs_ace_t *z_acl, uint64_t aclcnt, size_t *size,

89459e17032b6bb1d59eebd2b7c0d06859d4657cMark Shellenbaum zfs_fuid_info_t **fuidp, cred_t *cr)

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw{

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw int i;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw uint16_t entry_type;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw zfs_ace_t *aceptr = z_acl;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw ace_t *acep = datap;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw zfs_object_ace_t *zobjacep;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw ace_object_t *aceobjp;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw for (i = 0; i != aclcnt; i++) {

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw aceptr->z_hdr.z_access_mask = acep->a_access_mask;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw aceptr->z_hdr.z_flags = acep->a_flags;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw aceptr->z_hdr.z_type = acep->a_type;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw entry_type = aceptr->z_hdr.z_flags & ACE_TYPE_FLAGS;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw if (entry_type != ACE_OWNER && entry_type != OWNING_GROUP &&

4c841f6070b4f88f9dc008de526b313bbebd4e32marks entry_type != ACE_EVERYONE) {

89459e17032b6bb1d59eebd2b7c0d06859d4657cMark Shellenbaum aceptr->z_fuid = zfs_fuid_create(zfsvfs, acep->a_who,

89459e17032b6bb1d59eebd2b7c0d06859d4657cMark Shellenbaum cr, (entry_type == 0) ?

89459e17032b6bb1d59eebd2b7c0d06859d4657cMark Shellenbaum ZFS_ACE_USER : ZFS_ACE_GROUP, fuidp);

4c841f6070b4f88f9dc008de526b313bbebd4e32marks }

4c841f6070b4f88f9dc008de526b313bbebd4e32marks

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw /*

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw if (zfs_ace_valid(obj_type, aclp, aceptr->z_hdr.z_type,

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw aceptr->z_hdr.z_flags) != B_TRUE)

be6fd75a69ae679453d9cda5bff3326111e6d1caMatthew Ahrens return (SET_ERROR(EINVAL));

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw switch (acep->a_type) {

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw case ACE_ACCESS_ALLOWED_OBJECT_ACE_TYPE:

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw case ACE_ACCESS_DENIED_OBJECT_ACE_TYPE:

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw case ACE_SYSTEM_AUDIT_OBJECT_ACE_TYPE:

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw case ACE_SYSTEM_ALARM_OBJECT_ACE_TYPE:

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw zobjacep = (zfs_object_ace_t *)aceptr;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw aceobjp = (ace_object_t *)acep;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw bcopy(aceobjp->a_obj_type, zobjacep->z_object_type,

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw sizeof (aceobjp->a_obj_type));

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw bcopy(aceobjp->a_inherit_obj_type,

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw zobjacep->z_inherit_type,

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw sizeof (aceobjp->a_inherit_obj_type));

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw acep = (ace_t *)((caddr_t)acep + sizeof (ace_object_t));

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw break;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw default:

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw acep = (ace_t *)((caddr_t)acep + sizeof (ace_t));

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw }

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw aceptr = (zfs_ace_t *)((caddr_t)aceptr +

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw aclp->z_ops.ace_size(aceptr));

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw }

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw *size = (caddr_t)aceptr - (caddr_t)z_acl;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw return (0);

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw}

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amwstatic void

bda89588bd7667394a834e8a9a34612cce2ae9c3jpzfs_copy_fuid_2_ace(zfsvfs_t *zfsvfs, zfs_acl_t *aclp, cred_t *cr,

bda89588bd7667394a834e8a9a34612cce2ae9c3jp void *datap, int filter)

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw{

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw uint64_t who;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw uint32_t access_mask;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw uint16_t iflags, type;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw zfs_ace_hdr_t *zacep = NULL;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw ace_t *acep = datap;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw ace_object_t *objacep;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw zfs_object_ace_t *zobjacep;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw size_t ace_size;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw uint16_t entry_type;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw while (zacep = zfs_acl_next_ace(aclp, zacep,

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw &who, &access_mask, &iflags, &type)) {

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw switch (type) {

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw case ACE_ACCESS_ALLOWED_OBJECT_ACE_TYPE:

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw case ACE_ACCESS_DENIED_OBJECT_ACE_TYPE:

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw case ACE_SYSTEM_AUDIT_OBJECT_ACE_TYPE:

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw case ACE_SYSTEM_ALARM_OBJECT_ACE_TYPE:

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw if (filter) {

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw continue;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw }

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw zobjacep = (zfs_object_ace_t *)zacep;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw objacep = (ace_object_t *)acep;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw bcopy(zobjacep->z_object_type,

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw objacep->a_obj_type,

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw sizeof (zobjacep->z_object_type));

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw bcopy(zobjacep->z_inherit_type,

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw objacep->a_inherit_obj_type,

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw sizeof (zobjacep->z_inherit_type));

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw ace_size = sizeof (ace_object_t);

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw break;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw default:

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw ace_size = sizeof (ace_t);

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw break;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw }

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw entry_type = (iflags & ACE_TYPE_FLAGS);

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw if ((entry_type != ACE_OWNER &&

1ab996781aab376b5ee79af025ab24ff42a0a3f0Mark Shellenbaum entry_type != OWNING_GROUP &&

e0d35c4478bf9fd4080951b5b9d1f9a38948ba69marks entry_type != ACE_EVERYONE)) {

e0d35c4478bf9fd4080951b5b9d1f9a38948ba69marks acep->a_who = zfs_fuid_map_id(zfsvfs, who,

e0d35c4478bf9fd4080951b5b9d1f9a38948ba69marks cr, (entry_type & ACE_IDENTIFIER_GROUP) ?

e0d35c4478bf9fd4080951b5b9d1f9a38948ba69marks ZFS_ACE_GROUP : ZFS_ACE_USER);

e0d35c4478bf9fd4080951b5b9d1f9a38948ba69marks } else {

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw acep->a_who = (uid_t)(int64_t)who;

e0d35c4478bf9fd4080951b5b9d1f9a38948ba69marks }

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw acep->a_access_mask = access_mask;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw acep->a_flags = iflags;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw acep->a_type = type;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw acep = (ace_t *)((caddr_t)acep + ace_size);

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw }

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw}

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amwstatic int

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amwzfs_copy_ace_2_oldace(vtype_t obj_type, zfs_acl_t *aclp, ace_t *acep,

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw zfs_oldace_t *z_acl, int aclcnt, size_t *size)

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw{

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw int i;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw zfs_oldace_t *aceptr = z_acl;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw for (i = 0; i != aclcnt; i++, aceptr++) {

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw aceptr->z_access_mask = acep[i].a_access_mask;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw aceptr->z_type = acep[i].a_type;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw aceptr->z_flags = acep[i].a_flags;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw aceptr->z_fuid = acep[i].a_who;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw /*

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw if (zfs_ace_valid(obj_type, aclp, aceptr->z_type,

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw aceptr->z_flags) != B_TRUE)

be6fd75a69ae679453d9cda5bff3326111e6d1caMatthew Ahrens return (SET_ERROR(EINVAL));

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw }

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw *size = (caddr_t)aceptr - (caddr_t)z_acl;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw return (0);

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw}

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

89459e17032b6bb1d59eebd2b7c0d06859d4657cMark Shellenbaumzfs_acl_xform(znode_t *zp, zfs_acl_t *aclp, cred_t *cr)

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw{

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw zfs_oldace_t *oldaclp;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw int i;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw uint16_t type, iflags;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw uint32_t access_mask;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw uint64_t who;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw void *cookie = NULL;

2459a9eaca6b6525c76289d22ffe4c96be1956d6marks zfs_acl_node_t *newaclnode;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw ASSERT(aclp->z_version == ZFS_ACL_VERSION_INITIAL);

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw /*

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw oldaclp = kmem_alloc(sizeof (zfs_oldace_t) * aclp->z_acl_count,

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw KM_SLEEP);

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw i = 0;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw while (cookie = zfs_acl_next_ace(aclp, cookie, &who,

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw &access_mask, &iflags, &type)) {

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw oldaclp[i].z_flags = iflags;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw oldaclp[i].z_type = type;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw oldaclp[i].z_fuid = who;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw oldaclp[i++].z_access_mask = access_mask;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw }

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw newaclnode = zfs_acl_node_alloc(aclp->z_acl_count *

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw sizeof (zfs_object_ace_t));

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw aclp->z_ops = zfs_acl_fuid_ops;

89459e17032b6bb1d59eebd2b7c0d06859d4657cMark Shellenbaum VERIFY(zfs_copy_ace_2_fuid(zp->z_zfsvfs, ZTOV(zp)->v_type, aclp,

89459e17032b6bb1d59eebd2b7c0d06859d4657cMark Shellenbaum oldaclp, newaclnode->z_acldata, aclp->z_acl_count,

89459e17032b6bb1d59eebd2b7c0d06859d4657cMark Shellenbaum &newaclnode->z_size, NULL, cr) == 0);

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw newaclnode->z_ace_count = aclp->z_acl_count;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw aclp->z_version = ZFS_ACL_VERSION;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw kmem_free(oldaclp, aclp->z_acl_count * sizeof (zfs_oldace_t));

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw /*

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

2459a9eaca6b6525c76289d22ffe4c96be1956d6marks zfs_acl_release_nodes(aclp);

2459a9eaca6b6525c76289d22ffe4c96be1956d6marks

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw list_insert_head(&aclp->z_acl, newaclnode);

2459a9eaca6b6525c76289d22ffe4c96be1956d6marks

2459a9eaca6b6525c76289d22ffe4c96be1956d6marks aclp->z_acl_bytes = newaclnode->z_size;

2459a9eaca6b6525c76289d22ffe4c96be1956d6marks aclp->z_acl_count = newaclnode->z_ace_count;

2459a9eaca6b6525c76289d22ffe4c96be1956d6marks

fa9e4066f08beec538e775443c5be79dd423fcabahrens}

fa9e4066f08beec538e775443c5be79dd423fcabahrens

fa9e4066f08beec538e775443c5be79dd423fcabahrensstatic uint32_t

fa9e4066f08beec538e775443c5be79dd423fcabahrenszfs_unix_to_v4(uint32_t access_mask)

fa9e4066f08beec538e775443c5be79dd423fcabahrens{

fa9e4066f08beec538e775443c5be79dd423fcabahrens uint32_t new_mask = 0;

fa9e4066f08beec538e775443c5be79dd423fcabahrens

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw if (access_mask & S_IXOTH)

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw new_mask |= ACE_EXECUTE;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw if (access_mask & S_IWOTH)

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw new_mask |= ACE_WRITE_DATA;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw if (access_mask & S_IROTH)

fa9e4066f08beec538e775443c5be79dd423fcabahrens new_mask |= ACE_READ_DATA;

fa9e4066f08beec538e775443c5be79dd423fcabahrens return (new_mask);

fa9e4066f08beec538e775443c5be79dd423fcabahrens}

fa9e4066f08beec538e775443c5be79dd423fcabahrens

fa9e4066f08beec538e775443c5be79dd423fcabahrensstatic void

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amwzfs_set_ace(zfs_acl_t *aclp, void *acep, uint32_t access_mask,

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw uint16_t access_type, uint64_t fuid, uint16_t entry_type)

fa9e4066f08beec538e775443c5be79dd423fcabahrens{

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw uint16_t type = entry_type & ACE_TYPE_FLAGS;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw aclp->z_ops.ace_mask_set(acep, access_mask);

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw aclp->z_ops.ace_type_set(acep, access_type);

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw aclp->z_ops.ace_flags_set(acep, entry_type);

1ab996781aab376b5ee79af025ab24ff42a0a3f0Mark Shellenbaum if ((type != ACE_OWNER && type != OWNING_GROUP &&

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw type != ACE_EVERYONE))

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw aclp->z_ops.ace_who_set(acep, fuid);

fa9e4066f08beec538e775443c5be79dd423fcabahrens}

fa9e4066f08beec538e775443c5be79dd423fcabahrens

27dd1e87cd3d939264769dd4af7e6a529cde001fMark Shellenbaumzfs_mode_compute(uint64_t fmode, zfs_acl_t *aclp,

27dd1e87cd3d939264769dd4af7e6a529cde001fMark Shellenbaum uint64_t *pflags, uint64_t fuid, uint64_t fgid)

fa9e4066f08beec538e775443c5be79dd423fcabahrens{

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw int entry_type;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw mode_t mode;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw mode_t seen = 0;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw zfs_ace_hdr_t *acep = NULL;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw uint64_t who;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw uint16_t iflags, type;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw uint32_t access_mask;

d47621a49c68c359358f6630aa45cc320762f51fTim Haley boolean_t an_exec_denied = B_FALSE;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum mode = (fmode & (S_IFMT | S_ISUID | S_ISGID | S_ISVTX));

fa9e4066f08beec538e775443c5be79dd423fcabahrens

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw while (acep = zfs_acl_next_ace(aclp, acep, &who,

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw &access_mask, &iflags, &type)) {

29a0b7379cd3103841d05e3ed04486412049acccmarks

003c2582df5b8a57cb0e6f04227f93ccd982f0e5Mark Shellenbaum if (!zfs_acl_valid_ace_type(type, iflags))

003c2582df5b8a57cb0e6f04227f93ccd982f0e5Mark Shellenbaum continue;

003c2582df5b8a57cb0e6f04227f93ccd982f0e5Mark Shellenbaum

1ab996781aab376b5ee79af025ab24ff42a0a3f0Mark Shellenbaum entry_type = (iflags & ACE_TYPE_FLAGS);

1ab996781aab376b5ee79af025ab24ff42a0a3f0Mark Shellenbaum

29a0b7379cd3103841d05e3ed04486412049acccmarks /*

de0f1ddb598506a5d9a02946b67e9300b5f2a7cdAlbert Lee if (iflags & ACE_INHERIT_ONLY_ACE)

29a0b7379cd3103841d05e3ed04486412049acccmarks continue;

29a0b7379cd3103841d05e3ed04486412049acccmarks

27dd1e87cd3d939264769dd4af7e6a529cde001fMark Shellenbaum if (entry_type == ACE_OWNER || (entry_type == 0 &&

27dd1e87cd3d939264769dd4af7e6a529cde001fMark Shellenbaum who == fuid)) {

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw if ((access_mask & ACE_READ_DATA) &&

fa9e4066f08beec538e775443c5be79dd423fcabahrens (!(seen & S_IRUSR))) {

fa9e4066f08beec538e775443c5be79dd423fcabahrens seen |= S_IRUSR;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw if (type == ALLOW) {

fa9e4066f08beec538e775443c5be79dd423fcabahrens mode |= S_IRUSR;

fa9e4066f08beec538e775443c5be79dd423fcabahrens }

fa9e4066f08beec538e775443c5be79dd423fcabahrens }

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw if ((access_mask & ACE_WRITE_DATA) &&

fa9e4066f08beec538e775443c5be79dd423fcabahrens (!(seen & S_IWUSR))) {

fa9e4066f08beec538e775443c5be79dd423fcabahrens seen |= S_IWUSR;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw if (type == ALLOW) {

fa9e4066f08beec538e775443c5be79dd423fcabahrens mode |= S_IWUSR;

fa9e4066f08beec538e775443c5be79dd423fcabahrens }

fa9e4066f08beec538e775443c5be79dd423fcabahrens }

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw if ((access_mask & ACE_EXECUTE) &&

fa9e4066f08beec538e775443c5be79dd423fcabahrens (!(seen & S_IXUSR))) {

fa9e4066f08beec538e775443c5be79dd423fcabahrens seen |= S_IXUSR;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw if (type == ALLOW) {

fa9e4066f08beec538e775443c5be79dd423fcabahrens mode |= S_IXUSR;

fa9e4066f08beec538e775443c5be79dd423fcabahrens }

fa9e4066f08beec538e775443c5be79dd423fcabahrens }

27dd1e87cd3d939264769dd4af7e6a529cde001fMark Shellenbaum } else if (entry_type == OWNING_GROUP ||

27dd1e87cd3d939264769dd4af7e6a529cde001fMark Shellenbaum (entry_type == ACE_IDENTIFIER_GROUP && who == fgid)) {

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw if ((access_mask & ACE_READ_DATA) &&

fa9e4066f08beec538e775443c5be79dd423fcabahrens (!(seen & S_IRGRP))) {

fa9e4066f08beec538e775443c5be79dd423fcabahrens seen |= S_IRGRP;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw if (type == ALLOW) {

fa9e4066f08beec538e775443c5be79dd423fcabahrens mode |= S_IRGRP;

fa9e4066f08beec538e775443c5be79dd423fcabahrens }

fa9e4066f08beec538e775443c5be79dd423fcabahrens }

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw if ((access_mask & ACE_WRITE_DATA) &&

fa9e4066f08beec538e775443c5be79dd423fcabahrens (!(seen & S_IWGRP))) {

fa9e4066f08beec538e775443c5be79dd423fcabahrens seen |= S_IWGRP;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw if (type == ALLOW) {

fa9e4066f08beec538e775443c5be79dd423fcabahrens mode |= S_IWGRP;

fa9e4066f08beec538e775443c5be79dd423fcabahrens }

fa9e4066f08beec538e775443c5be79dd423fcabahrens }

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw if ((access_mask & ACE_EXECUTE) &&

fa9e4066f08beec538e775443c5be79dd423fcabahrens (!(seen & S_IXGRP))) {

fa9e4066f08beec538e775443c5be79dd423fcabahrens seen |= S_IXGRP;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw if (type == ALLOW) {

fa9e4066f08beec538e775443c5be79dd423fcabahrens mode |= S_IXGRP;

fa9e4066f08beec538e775443c5be79dd423fcabahrens }

fa9e4066f08beec538e775443c5be79dd423fcabahrens }

fa9e4066f08beec538e775443c5be79dd423fcabahrens } else if (entry_type == ACE_EVERYONE) {

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw if ((access_mask & ACE_READ_DATA)) {

fa9e4066f08beec538e775443c5be79dd423fcabahrens if (!(seen & S_IRUSR)) {

fa9e4066f08beec538e775443c5be79dd423fcabahrens seen |= S_IRUSR;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw if (type == ALLOW) {

fa9e4066f08beec538e775443c5be79dd423fcabahrens mode |= S_IRUSR;

fa9e4066f08beec538e775443c5be79dd423fcabahrens }

fa9e4066f08beec538e775443c5be79dd423fcabahrens }

fa9e4066f08beec538e775443c5be79dd423fcabahrens if (!(seen & S_IRGRP)) {

fa9e4066f08beec538e775443c5be79dd423fcabahrens seen |= S_IRGRP;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw if (type == ALLOW) {

fa9e4066f08beec538e775443c5be79dd423fcabahrens mode |= S_IRGRP;

fa9e4066f08beec538e775443c5be79dd423fcabahrens }

fa9e4066f08beec538e775443c5be79dd423fcabahrens }

fa9e4066f08beec538e775443c5be79dd423fcabahrens if (!(seen & S_IROTH)) {

fa9e4066f08beec538e775443c5be79dd423fcabahrens seen |= S_IROTH;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw if (type == ALLOW) {

fa9e4066f08beec538e775443c5be79dd423fcabahrens mode |= S_IROTH;

fa9e4066f08beec538e775443c5be79dd423fcabahrens }

fa9e4066f08beec538e775443c5be79dd423fcabahrens }

fa9e4066f08beec538e775443c5be79dd423fcabahrens }

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw if ((access_mask & ACE_WRITE_DATA)) {

fa9e4066f08beec538e775443c5be79dd423fcabahrens if (!(seen & S_IWUSR)) {

fa9e4066f08beec538e775443c5be79dd423fcabahrens seen |= S_IWUSR;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw if (type == ALLOW) {

fa9e4066f08beec538e775443c5be79dd423fcabahrens mode |= S_IWUSR;

fa9e4066f08beec538e775443c5be79dd423fcabahrens }

fa9e4066f08beec538e775443c5be79dd423fcabahrens }

fa9e4066f08beec538e775443c5be79dd423fcabahrens if (!(seen & S_IWGRP)) {

fa9e4066f08beec538e775443c5be79dd423fcabahrens seen |= S_IWGRP;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw if (type == ALLOW) {

fa9e4066f08beec538e775443c5be79dd423fcabahrens mode |= S_IWGRP;

fa9e4066f08beec538e775443c5be79dd423fcabahrens }

fa9e4066f08beec538e775443c5be79dd423fcabahrens }

fa9e4066f08beec538e775443c5be79dd423fcabahrens if (!(seen & S_IWOTH)) {

fa9e4066f08beec538e775443c5be79dd423fcabahrens seen |= S_IWOTH;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw if (type == ALLOW) {

fa9e4066f08beec538e775443c5be79dd423fcabahrens mode |= S_IWOTH;

fa9e4066f08beec538e775443c5be79dd423fcabahrens }

fa9e4066f08beec538e775443c5be79dd423fcabahrens }

fa9e4066f08beec538e775443c5be79dd423fcabahrens }

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw if ((access_mask & ACE_EXECUTE)) {

fa9e4066f08beec538e775443c5be79dd423fcabahrens if (!(seen & S_IXUSR)) {

fa9e4066f08beec538e775443c5be79dd423fcabahrens seen |= S_IXUSR;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw if (type == ALLOW) {

fa9e4066f08beec538e775443c5be79dd423fcabahrens mode |= S_IXUSR;

fa9e4066f08beec538e775443c5be79dd423fcabahrens }

fa9e4066f08beec538e775443c5be79dd423fcabahrens }

fa9e4066f08beec538e775443c5be79dd423fcabahrens if (!(seen & S_IXGRP)) {

fa9e4066f08beec538e775443c5be79dd423fcabahrens seen |= S_IXGRP;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw if (type == ALLOW) {

fa9e4066f08beec538e775443c5be79dd423fcabahrens mode |= S_IXGRP;

fa9e4066f08beec538e775443c5be79dd423fcabahrens }

fa9e4066f08beec538e775443c5be79dd423fcabahrens }

fa9e4066f08beec538e775443c5be79dd423fcabahrens if (!(seen & S_IXOTH)) {

fa9e4066f08beec538e775443c5be79dd423fcabahrens seen |= S_IXOTH;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw if (type == ALLOW) {

fa9e4066f08beec538e775443c5be79dd423fcabahrens mode |= S_IXOTH;

fa9e4066f08beec538e775443c5be79dd423fcabahrens }

fa9e4066f08beec538e775443c5be79dd423fcabahrens }

fa9e4066f08beec538e775443c5be79dd423fcabahrens }

d47621a49c68c359358f6630aa45cc320762f51fTim Haley } else {

d47621a49c68c359358f6630aa45cc320762f51fTim Haley /*

d47621a49c68c359358f6630aa45cc320762f51fTim Haley if ((access_mask & ACE_EXECUTE) && type == DENY)

d47621a49c68c359358f6630aa45cc320762f51fTim Haley an_exec_denied = B_TRUE;

fa9e4066f08beec538e775443c5be79dd423fcabahrens }

fa9e4066f08beec538e775443c5be79dd423fcabahrens }

d47621a49c68c359358f6630aa45cc320762f51fTim Haley

4929fd5ef3f018b490359eb4a2d95d22152325fbTim Haley /*

4929fd5ef3f018b490359eb4a2d95d22152325fbTim Haley if (!an_exec_denied &&

4929fd5ef3f018b490359eb4a2d95d22152325fbTim Haley ((seen & ALL_MODE_EXECS) != ALL_MODE_EXECS ||

4929fd5ef3f018b490359eb4a2d95d22152325fbTim Haley (mode & ALL_MODE_EXECS) != ALL_MODE_EXECS))

d47621a49c68c359358f6630aa45cc320762f51fTim Haley an_exec_denied = B_TRUE;

d47621a49c68c359358f6630aa45cc320762f51fTim Haley

d47621a49c68c359358f6630aa45cc320762f51fTim Haley if (an_exec_denied)

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum *pflags &= ~ZFS_NO_EXECS_DENIED;

d47621a49c68c359358f6630aa45cc320762f51fTim Haley else

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum *pflags |= ZFS_NO_EXECS_DENIED;

d47621a49c68c359358f6630aa45cc320762f51fTim Haley

fa9e4066f08beec538e775443c5be79dd423fcabahrens return (mode);

fa9e4066f08beec538e775443c5be79dd423fcabahrens}

fa9e4066f08beec538e775443c5be79dd423fcabahrens

ea8dc4b6d2251b437950c0056bc626b311c73c27eschrockstatic int

1412a1a223b7a94990edf5114c108b0a29c3f881Mark Shellenbaumzfs_acl_node_read(znode_t *zp, boolean_t have_lock, zfs_acl_t **aclpp,

1412a1a223b7a94990edf5114c108b0a29c3f881Mark Shellenbaum boolean_t will_modify)

fa9e4066f08beec538e775443c5be79dd423fcabahrens{

fa9e4066f08beec538e775443c5be79dd423fcabahrens zfs_acl_t *aclp;

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum int aclsize;

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum int acl_count;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw zfs_acl_node_t *aclnode;

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum zfs_acl_phys_t znode_acl;

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum int version;

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum int error;

1412a1a223b7a94990edf5114c108b0a29c3f881Mark Shellenbaum boolean_t drop_lock = B_FALSE;

fa9e4066f08beec538e775443c5be79dd423fcabahrens

fa9e4066f08beec538e775443c5be79dd423fcabahrens ASSERT(MUTEX_HELD(&zp->z_acl_lock));

fa9e4066f08beec538e775443c5be79dd423fcabahrens

4929fd5ef3f018b490359eb4a2d95d22152325fbTim Haley if (zp->z_acl_cached && !will_modify) {

d47621a49c68c359358f6630aa45cc320762f51fTim Haley *aclpp = zp->z_acl_cached;

d47621a49c68c359358f6630aa45cc320762f51fTim Haley return (0);

d47621a49c68c359358f6630aa45cc320762f51fTim Haley }

d47621a49c68c359358f6630aa45cc320762f51fTim Haley

1412a1a223b7a94990edf5114c108b0a29c3f881Mark Shellenbaum /*

1412a1a223b7a94990edf5114c108b0a29c3f881Mark Shellenbaum if (!zp->z_is_sa && !have_lock) {

1412a1a223b7a94990edf5114c108b0a29c3f881Mark Shellenbaum mutex_enter(&zp->z_lock);

1412a1a223b7a94990edf5114c108b0a29c3f881Mark Shellenbaum drop_lock = B_TRUE;

1412a1a223b7a94990edf5114c108b0a29c3f881Mark Shellenbaum }

1412a1a223b7a94990edf5114c108b0a29c3f881Mark Shellenbaum version = zfs_znode_acl_version(zp);

fa9e4066f08beec538e775443c5be79dd423fcabahrens

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum if ((error = zfs_acl_znode_info(zp, &aclsize,

1412a1a223b7a94990edf5114c108b0a29c3f881Mark Shellenbaum &acl_count, &znode_acl)) != 0) {

1412a1a223b7a94990edf5114c108b0a29c3f881Mark Shellenbaum goto done;

1412a1a223b7a94990edf5114c108b0a29c3f881Mark Shellenbaum }

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum aclp = zfs_acl_alloc(version);

fa9e4066f08beec538e775443c5be79dd423fcabahrens

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw aclp->z_acl_count = acl_count;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw aclp->z_acl_bytes = aclsize;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum aclnode = zfs_acl_node_alloc(aclsize);

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum aclnode->z_ace_count = aclp->z_acl_count;

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum aclnode->z_size = aclsize;

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum if (!zp->z_is_sa) {

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum if (znode_acl.z_acl_extern_obj) {

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum error = dmu_read(zp->z_zfsvfs->z_os,

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum znode_acl.z_acl_extern_obj, 0, aclnode->z_size,

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum aclnode->z_acldata, DMU_READ_PREFETCH);

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum } else {

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum bcopy(znode_acl.z_ace_data, aclnode->z_acldata,

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum aclnode->z_size);

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum }

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum } else {

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum error = sa_lookup(zp->z_sa_hdl, SA_ZPL_DACL_ACES(zp->z_zfsvfs),

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum aclnode->z_acldata, aclnode->z_size);

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum }

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum

ea8dc4b6d2251b437950c0056bc626b311c73c27eschrock if (error != 0) {

ea8dc4b6d2251b437950c0056bc626b311c73c27eschrock zfs_acl_free(aclp);

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum zfs_acl_node_free(aclnode);

b87f3af36bb994656da117319f5129ddfd05ed21perrin /* convert checksum errors into IO errors */

b87f3af36bb994656da117319f5129ddfd05ed21perrin if (error == ECKSUM)

be6fd75a69ae679453d9cda5bff3326111e6d1caMatthew Ahrens error = SET_ERROR(EIO);

1412a1a223b7a94990edf5114c108b0a29c3f881Mark Shellenbaum goto done;

ea8dc4b6d2251b437950c0056bc626b311c73c27eschrock }

fa9e4066f08beec538e775443c5be79dd423fcabahrens

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum list_insert_head(&aclp->z_acl, aclnode);

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum

4929fd5ef3f018b490359eb4a2d95d22152325fbTim Haley *aclpp = aclp;

4929fd5ef3f018b490359eb4a2d95d22152325fbTim Haley if (!will_modify)

4929fd5ef3f018b490359eb4a2d95d22152325fbTim Haley zp->z_acl_cached = aclp;

1412a1a223b7a94990edf5114c108b0a29c3f881Mark Shellenbaumdone:

1412a1a223b7a94990edf5114c108b0a29c3f881Mark Shellenbaum if (drop_lock)

1412a1a223b7a94990edf5114c108b0a29c3f881Mark Shellenbaum mutex_exit(&zp->z_lock);

1412a1a223b7a94990edf5114c108b0a29c3f881Mark Shellenbaum return (error);

fa9e4066f08beec538e775443c5be79dd423fcabahrens}

fa9e4066f08beec538e775443c5be79dd423fcabahrens

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaumzfs_acl_data_locator(void **dataptr, uint32_t *length, uint32_t buflen,

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum boolean_t start, void *userdata)

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum{

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum zfs_acl_locator_cb_t *cb = (zfs_acl_locator_cb_t *)userdata;

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum if (start) {

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum cb->cb_acl_node = list_head(&cb->cb_aclp->z_acl);

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum } else {

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum cb->cb_acl_node = list_next(&cb->cb_aclp->z_acl,

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum cb->cb_acl_node);

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum }

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum *dataptr = cb->cb_acl_node->z_acldata;

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum *length = cb->cb_acl_node->z_size;

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum}

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum

27dd1e87cd3d939264769dd4af7e6a529cde001fMark Shellenbaumzfs_acl_chown_setattr(znode_t *zp)

27dd1e87cd3d939264769dd4af7e6a529cde001fMark Shellenbaum{

27dd1e87cd3d939264769dd4af7e6a529cde001fMark Shellenbaum int error;

27dd1e87cd3d939264769dd4af7e6a529cde001fMark Shellenbaum zfs_acl_t *aclp;

27dd1e87cd3d939264769dd4af7e6a529cde001fMark Shellenbaum

1412a1a223b7a94990edf5114c108b0a29c3f881Mark Shellenbaum ASSERT(MUTEX_HELD(&zp->z_lock));

1412a1a223b7a94990edf5114c108b0a29c3f881Mark Shellenbaum ASSERT(MUTEX_HELD(&zp->z_acl_lock));

27dd1e87cd3d939264769dd4af7e6a529cde001fMark Shellenbaum

1412a1a223b7a94990edf5114c108b0a29c3f881Mark Shellenbaum if ((error = zfs_acl_node_read(zp, B_TRUE, &aclp, B_FALSE)) == 0)

27dd1e87cd3d939264769dd4af7e6a529cde001fMark Shellenbaum zp->z_mode = zfs_mode_compute(zp->z_mode, aclp,

f1696b231bb1209e1cea95b7ff29b8c60493daa0Mark Shellenbaum &zp->z_pflags, zp->z_uid, zp->z_gid);

27dd1e87cd3d939264769dd4af7e6a529cde001fMark Shellenbaum return (error);

27dd1e87cd3d939264769dd4af7e6a529cde001fMark Shellenbaum}

27dd1e87cd3d939264769dd4af7e6a529cde001fMark Shellenbaum

89459e17032b6bb1d59eebd2b7c0d06859d4657cMark Shellenbaumzfs_aclset_common(znode_t *zp, zfs_acl_t *aclp, cred_t *cr, dmu_tx_t *tx)

fa9e4066f08beec538e775443c5be79dd423fcabahrens{

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum int error;

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum zfsvfs_t *zfsvfs = zp->z_zfsvfs;

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum dmu_object_type_t otype;

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum zfs_acl_locator_cb_t locate = { 0 };

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum uint64_t mode;

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum sa_bulk_attr_t bulk[5];

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum uint64_t ctime[2];

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum int count = 0;

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum mode = zp->z_mode;

27dd1e87cd3d939264769dd4af7e6a529cde001fMark Shellenbaum

f1696b231bb1209e1cea95b7ff29b8c60493daa0Mark Shellenbaum mode = zfs_mode_compute(mode, aclp, &zp->z_pflags,

f1696b231bb1209e1cea95b7ff29b8c60493daa0Mark Shellenbaum zp->z_uid, zp->z_gid);

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum zp->z_mode = mode;

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum SA_ADD_BULK_ATTR(bulk, count, SA_ZPL_MODE(zfsvfs), NULL,

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum &mode, sizeof (mode));

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum SA_ADD_BULK_ATTR(bulk, count, SA_ZPL_FLAGS(zfsvfs), NULL,

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum &zp->z_pflags, sizeof (zp->z_pflags));

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum SA_ADD_BULK_ATTR(bulk, count, SA_ZPL_CTIME(zfsvfs), NULL,

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum &ctime, sizeof (ctime));

fa9e4066f08beec538e775443c5be79dd423fcabahrens

4929fd5ef3f018b490359eb4a2d95d22152325fbTim Haley if (zp->z_acl_cached) {

d47621a49c68c359358f6630aa45cc320762f51fTim Haley zfs_acl_free(zp->z_acl_cached);

d47621a49c68c359358f6630aa45cc320762f51fTim Haley zp->z_acl_cached = NULL;

d47621a49c68c359358f6630aa45cc320762f51fTim Haley }

d47621a49c68c359358f6630aa45cc320762f51fTim Haley

fa9e4066f08beec538e775443c5be79dd423fcabahrens /*

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw if (!zfsvfs->z_use_fuids) {

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw otype = DMU_OT_OLDACL;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw } else {

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw if ((aclp->z_version == ZFS_ACL_VERSION_INITIAL) &&

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw (zfsvfs->z_version >= ZPL_VERSION_FUID))

89459e17032b6bb1d59eebd2b7c0d06859d4657cMark Shellenbaum zfs_acl_xform(zp, aclp, cr);

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw ASSERT(aclp->z_version >= ZFS_ACL_VERSION_FUID);

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw otype = DMU_OT_ACL;

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw }

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum /*

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum if (zp->z_is_sa) { /* the easy case, just update the ACL attribute */

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum locate.cb_aclp = aclp;

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum SA_ADD_BULK_ATTR(bulk, count, SA_ZPL_DACL_ACES(zfsvfs),

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum zfs_acl_data_locator, &locate, aclp->z_acl_bytes);

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum SA_ADD_BULK_ATTR(bulk, count, SA_ZPL_DACL_COUNT(zfsvfs),

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum NULL, &aclp->z_acl_count, sizeof (uint64_t));

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum } else { /* Painful legacy way */

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum zfs_acl_node_t *aclnode;

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum uint64_t off = 0;

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum zfs_acl_phys_t acl_phys;

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum uint64_t aoid;

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum if ((error = sa_lookup(zp->z_sa_hdl, SA_ZPL_ZNODE_ACL(zfsvfs),

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum &acl_phys, sizeof (acl_phys))) != 0)

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum return (error);

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum aoid = acl_phys.z_acl_extern_obj;

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum if (aclp->z_acl_bytes > ZFS_ACE_SPACE) {

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum /*

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum if (aoid &&

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum aclp->z_version != acl_phys.z_acl_version) {

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum error = dmu_object_free(zfsvfs->z_os, aoid, tx);

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum if (error)

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum return (error);

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum aoid = 0;

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum }

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum if (aoid == 0) {

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum aoid = dmu_object_alloc(zfsvfs->z_os,

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum otype, aclp->z_acl_bytes,

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum otype == DMU_OT_ACL ?

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum DMU_OT_SYSACL : DMU_OT_NONE,

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum otype == DMU_OT_ACL ?

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum DN_MAX_BONUSLEN : 0, tx);

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum } else {

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum (void) dmu_object_set_blocksize(zfsvfs->z_os,

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum aoid, aclp->z_acl_bytes, 0, tx);

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum }

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum acl_phys.z_acl_extern_obj = aoid;

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum for (aclnode = list_head(&aclp->z_acl); aclnode;

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum aclnode = list_next(&aclp->z_acl, aclnode)) {

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum if (aclnode->z_ace_count == 0)

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum continue;

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum dmu_write(zfsvfs->z_os, aoid, off,

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum aclnode->z_size, aclnode->z_acldata, tx);

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum off += aclnode->z_size;

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum }

fa9e4066f08beec538e775443c5be79dd423fcabahrens } else {

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum void *start = acl_phys.z_ace_data;

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum /*

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum if (acl_phys.z_acl_extern_obj) {

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum error = dmu_object_free(zfsvfs->z_os,

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum acl_phys.z_acl_extern_obj, tx);

0a586cea3ceec7e5e50e7e54c745082a7a333ac2Mark Shellenbaum if (error)