9pfs: local: metadata file for the VirtFS root
When using the mapped-file security, credentials are stored in a metadata directory located in the parent directory. This is okay for all paths with the notable exception of the root path, since we don't want and probably can't create a metadata directory above the virtfs directory on the host. This patch introduces a dedicated metadata file, sitting in the virtfs root for this purpose. It relies on the fact that the "." name necessarily refers to the virtfs root. As for the metadata directory, we don't want the client to see this file. The current code only cares for readdir() but there are many other places to fix actually. The filtering logic is hence put in a separate function. Before: # ls -ld drwxr-xr-x. 3 greg greg 4096 May 5 12:49 . # chown root.root . chown: changing ownership of '.': Is a directory # ls -ld drwxr-xr-x. 3 greg greg 4096 May 5 12:49 . After: # ls -ld drwxr-xr-x. 3 greg greg 4096 May 5 12:49 . # chown root.root . # ls -ld drwxr-xr-x. 3 root root 4096 May 5 12:50 . and from the host: ls -al .virtfs_metadata_root -rwx------. 1 greg greg 26 May 5 12:50 .virtfs_metadata_root $ cat .virtfs_metadata_root virtfs.uid=0 virtfs.gid=0 Reported-by: Leo Gaspard <leo@gaspard.io> Signed-off-by: Greg Kurz <groug@kaod.org> Reviewed-by: Eric Blake <eblake@redhat.com> Tested-by: Leo Gaspard <leo@gaspard.io> [groug: work around a patchew false positive in local_set_mapped_file_attrat()]
This commit is contained in:
parent
3dbcf27334
commit
81ffbf5ab1
|
@ -107,6 +107,7 @@ static void unlinkat_preserve_errno(int dirfd, const char *path, int flags)
|
||||||
}
|
}
|
||||||
|
|
||||||
#define VIRTFS_META_DIR ".virtfs_metadata"
|
#define VIRTFS_META_DIR ".virtfs_metadata"
|
||||||
|
#define VIRTFS_META_ROOT_FILE VIRTFS_META_DIR "_root"
|
||||||
|
|
||||||
static FILE *local_fopenat(int dirfd, const char *name, const char *mode)
|
static FILE *local_fopenat(int dirfd, const char *name, const char *mode)
|
||||||
{
|
{
|
||||||
|
@ -143,6 +144,7 @@ static void local_mapped_file_attr(int dirfd, const char *name,
|
||||||
char buf[ATTR_MAX];
|
char buf[ATTR_MAX];
|
||||||
int map_dirfd;
|
int map_dirfd;
|
||||||
|
|
||||||
|
if (strcmp(name, ".")) {
|
||||||
map_dirfd = openat_dir(dirfd, VIRTFS_META_DIR);
|
map_dirfd = openat_dir(dirfd, VIRTFS_META_DIR);
|
||||||
if (map_dirfd == -1) {
|
if (map_dirfd == -1) {
|
||||||
return;
|
return;
|
||||||
|
@ -150,6 +152,9 @@ static void local_mapped_file_attr(int dirfd, const char *name,
|
||||||
|
|
||||||
fp = local_fopenat(map_dirfd, name, "r");
|
fp = local_fopenat(map_dirfd, name, "r");
|
||||||
close_preserve_errno(map_dirfd);
|
close_preserve_errno(map_dirfd);
|
||||||
|
} else {
|
||||||
|
fp = local_fopenat(dirfd, VIRTFS_META_ROOT_FILE, "r");
|
||||||
|
}
|
||||||
if (!fp) {
|
if (!fp) {
|
||||||
return;
|
return;
|
||||||
}
|
}
|
||||||
|
@ -227,8 +232,19 @@ static int local_set_mapped_file_attrat(int dirfd, const char *name,
|
||||||
int ret;
|
int ret;
|
||||||
char buf[ATTR_MAX];
|
char buf[ATTR_MAX];
|
||||||
int uid = -1, gid = -1, mode = -1, rdev = -1;
|
int uid = -1, gid = -1, mode = -1, rdev = -1;
|
||||||
int map_dirfd;
|
int map_dirfd = -1, map_fd;
|
||||||
|
bool is_root = !strcmp(name, ".");
|
||||||
|
|
||||||
|
if (is_root) {
|
||||||
|
fp = local_fopenat(dirfd, VIRTFS_META_ROOT_FILE, "r");
|
||||||
|
if (!fp) {
|
||||||
|
if (errno == ENOENT) {
|
||||||
|
goto update_map_file;
|
||||||
|
} else {
|
||||||
|
return -1;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
} else {
|
||||||
ret = mkdirat(dirfd, VIRTFS_META_DIR, 0700);
|
ret = mkdirat(dirfd, VIRTFS_META_DIR, 0700);
|
||||||
if (ret < 0 && errno != EEXIST) {
|
if (ret < 0 && errno != EEXIST) {
|
||||||
return -1;
|
return -1;
|
||||||
|
@ -248,6 +264,7 @@ static int local_set_mapped_file_attrat(int dirfd, const char *name,
|
||||||
return -1;
|
return -1;
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
}
|
||||||
memset(buf, 0, ATTR_MAX);
|
memset(buf, 0, ATTR_MAX);
|
||||||
while (fgets(buf, ATTR_MAX, fp)) {
|
while (fgets(buf, ATTR_MAX, fp)) {
|
||||||
if (!strncmp(buf, "virtfs.uid", 10)) {
|
if (!strncmp(buf, "virtfs.uid", 10)) {
|
||||||
|
@ -264,12 +281,26 @@ static int local_set_mapped_file_attrat(int dirfd, const char *name,
|
||||||
fclose(fp);
|
fclose(fp);
|
||||||
|
|
||||||
update_map_file:
|
update_map_file:
|
||||||
|
if (is_root) {
|
||||||
|
fp = local_fopenat(dirfd, VIRTFS_META_ROOT_FILE, "w");
|
||||||
|
} else {
|
||||||
fp = local_fopenat(map_dirfd, name, "w");
|
fp = local_fopenat(map_dirfd, name, "w");
|
||||||
|
/* We can't go this far with map_dirfd not being a valid file descriptor
|
||||||
|
* but some versions of gcc aren't smart enough to see it.
|
||||||
|
*/
|
||||||
|
if (map_dirfd != -1) {
|
||||||
close_preserve_errno(map_dirfd);
|
close_preserve_errno(map_dirfd);
|
||||||
|
}
|
||||||
|
}
|
||||||
if (!fp) {
|
if (!fp) {
|
||||||
return -1;
|
return -1;
|
||||||
}
|
}
|
||||||
|
|
||||||
|
map_fd = fileno(fp);
|
||||||
|
assert(map_fd != -1);
|
||||||
|
ret = fchmod(map_fd, 0600);
|
||||||
|
assert(ret == 0);
|
||||||
|
|
||||||
if (credp->fc_uid != -1) {
|
if (credp->fc_uid != -1) {
|
||||||
uid = credp->fc_uid;
|
uid = credp->fc_uid;
|
||||||
}
|
}
|
||||||
|
@ -478,7 +509,8 @@ static off_t local_telldir(FsContext *ctx, V9fsFidOpenState *fs)
|
||||||
|
|
||||||
static bool local_is_mapped_file_metadata(FsContext *fs_ctx, const char *name)
|
static bool local_is_mapped_file_metadata(FsContext *fs_ctx, const char *name)
|
||||||
{
|
{
|
||||||
return !strcmp(name, VIRTFS_META_DIR);
|
return
|
||||||
|
!strcmp(name, VIRTFS_META_DIR) || !strcmp(name, VIRTFS_META_ROOT_FILE);
|
||||||
}
|
}
|
||||||
|
|
||||||
static struct dirent *local_readdir(FsContext *ctx, V9fsFidOpenState *fs)
|
static struct dirent *local_readdir(FsContext *ctx, V9fsFidOpenState *fs)
|
||||||
|
@ -495,7 +527,7 @@ again:
|
||||||
entry->d_type = DT_UNKNOWN;
|
entry->d_type = DT_UNKNOWN;
|
||||||
} else if (ctx->export_flags & V9FS_SM_MAPPED_FILE) {
|
} else if (ctx->export_flags & V9FS_SM_MAPPED_FILE) {
|
||||||
if (local_is_mapped_file_metadata(ctx, entry->d_name)) {
|
if (local_is_mapped_file_metadata(ctx, entry->d_name)) {
|
||||||
/* skip the meta data directory */
|
/* skip the meta data */
|
||||||
goto again;
|
goto again;
|
||||||
}
|
}
|
||||||
entry->d_type = DT_UNKNOWN;
|
entry->d_type = DT_UNKNOWN;
|
||||||
|
|
Loading…
Reference in a new issue