b96feb2cb9
In mapped security modes, files are created with very restrictive permissions (600 for files and 700 for directories). This makes file sharing between virtual machines and users on the host rather complicated. Imagine eg. a group of users that need to access data produced by processes on a virtual machine. Giving those users access to the data will be difficult since the group access mode is always 0. This patch makes the default mode for both files and directories configurable. Existing setups that don't know about the new parameters keep using the current secure behavior. Signed-off-by: Tobias Schramm <tobleminer@gmail.com> Signed-off-by: Greg Kurz <groug@kaod.org>
156 lines
4.7 KiB
C
156 lines
4.7 KiB
C
/*
|
|
* 9p
|
|
*
|
|
* Copyright IBM, Corp. 2010
|
|
*
|
|
* Authors:
|
|
* Aneesh Kumar K.V <aneesh.kumar@linux.vnet.ibm.com>
|
|
*
|
|
* This work is licensed under the terms of the GNU GPL, version 2. See
|
|
* the COPYING file in the top-level directory.
|
|
*
|
|
*/
|
|
|
|
#ifndef FILE_OP_9P_H
|
|
#define FILE_OP_9P_H
|
|
|
|
#include <dirent.h>
|
|
#include <utime.h>
|
|
#include <sys/vfs.h>
|
|
#include "qemu-fsdev-throttle.h"
|
|
|
|
#define SM_LOCAL_MODE_BITS 0600
|
|
#define SM_LOCAL_DIR_MODE_BITS 0700
|
|
|
|
typedef struct FsCred
|
|
{
|
|
uid_t fc_uid;
|
|
gid_t fc_gid;
|
|
mode_t fc_mode;
|
|
dev_t fc_rdev;
|
|
} FsCred;
|
|
|
|
struct xattr_operations;
|
|
struct FsContext;
|
|
struct V9fsPath;
|
|
|
|
typedef struct extended_ops {
|
|
int (*get_st_gen)(struct FsContext *, struct V9fsPath *,
|
|
mode_t, uint64_t *);
|
|
} extended_ops;
|
|
|
|
/* export flags */
|
|
#define V9FS_IMMEDIATE_WRITEOUT 0x00000001
|
|
#define V9FS_PATHNAME_FSCONTEXT 0x00000002
|
|
/*
|
|
* uid/gid set on fileserver files
|
|
*/
|
|
#define V9FS_SM_PASSTHROUGH 0x00000004
|
|
/*
|
|
* uid/gid part of xattr
|
|
*/
|
|
#define V9FS_SM_MAPPED 0x00000008
|
|
/*
|
|
* Server will try to set uid/gid.
|
|
* On failure ignore the error.
|
|
*/
|
|
#define V9FS_SM_NONE 0x00000010
|
|
/*
|
|
* uid/gid part of .virtfs_meatadata namespace
|
|
*/
|
|
#define V9FS_SM_MAPPED_FILE 0x00000020
|
|
#define V9FS_RDONLY 0x00000040
|
|
#define V9FS_PROXY_SOCK_FD 0x00000080
|
|
#define V9FS_PROXY_SOCK_NAME 0x00000100
|
|
|
|
#define V9FS_SEC_MASK 0x0000003C
|
|
|
|
|
|
typedef struct FileOperations FileOperations;
|
|
/*
|
|
* Structure to store the various fsdev's passed through command line.
|
|
*/
|
|
typedef struct FsDriverEntry {
|
|
char *fsdev_id;
|
|
char *path;
|
|
int export_flags;
|
|
FileOperations *ops;
|
|
FsThrottle fst;
|
|
mode_t fmode;
|
|
mode_t dmode;
|
|
} FsDriverEntry;
|
|
|
|
typedef struct FsContext
|
|
{
|
|
uid_t uid;
|
|
char *fs_root;
|
|
int export_flags;
|
|
struct xattr_operations **xops;
|
|
struct extended_ops exops;
|
|
FsThrottle *fst;
|
|
/* fs driver specific data */
|
|
void *private;
|
|
mode_t fmode;
|
|
mode_t dmode;
|
|
} FsContext;
|
|
|
|
typedef struct V9fsPath {
|
|
uint16_t size;
|
|
char *data;
|
|
} V9fsPath;
|
|
|
|
typedef union V9fsFidOpenState V9fsFidOpenState;
|
|
|
|
void cred_init(FsCred *);
|
|
|
|
struct FileOperations
|
|
{
|
|
int (*parse_opts)(QemuOpts *, struct FsDriverEntry *);
|
|
int (*init)(struct FsContext *);
|
|
void (*cleanup)(struct FsContext *);
|
|
int (*lstat)(FsContext *, V9fsPath *, struct stat *);
|
|
ssize_t (*readlink)(FsContext *, V9fsPath *, char *, size_t);
|
|
int (*chmod)(FsContext *, V9fsPath *, FsCred *);
|
|
int (*chown)(FsContext *, V9fsPath *, FsCred *);
|
|
int (*mknod)(FsContext *, V9fsPath *, const char *, FsCred *);
|
|
int (*utimensat)(FsContext *, V9fsPath *, const struct timespec *);
|
|
int (*remove)(FsContext *, const char *);
|
|
int (*symlink)(FsContext *, const char *, V9fsPath *,
|
|
const char *, FsCred *);
|
|
int (*link)(FsContext *, V9fsPath *, V9fsPath *, const char *);
|
|
int (*setuid)(FsContext *, uid_t);
|
|
int (*close)(FsContext *, V9fsFidOpenState *);
|
|
int (*closedir)(FsContext *, V9fsFidOpenState *);
|
|
int (*opendir)(FsContext *, V9fsPath *, V9fsFidOpenState *);
|
|
int (*open)(FsContext *, V9fsPath *, int, V9fsFidOpenState *);
|
|
int (*open2)(FsContext *, V9fsPath *, const char *,
|
|
int, FsCred *, V9fsFidOpenState *);
|
|
void (*rewinddir)(FsContext *, V9fsFidOpenState *);
|
|
off_t (*telldir)(FsContext *, V9fsFidOpenState *);
|
|
struct dirent * (*readdir)(FsContext *, V9fsFidOpenState *);
|
|
void (*seekdir)(FsContext *, V9fsFidOpenState *, off_t);
|
|
ssize_t (*preadv)(FsContext *, V9fsFidOpenState *,
|
|
const struct iovec *, int, off_t);
|
|
ssize_t (*pwritev)(FsContext *, V9fsFidOpenState *,
|
|
const struct iovec *, int, off_t);
|
|
int (*mkdir)(FsContext *, V9fsPath *, const char *, FsCred *);
|
|
int (*fstat)(FsContext *, int, V9fsFidOpenState *, struct stat *);
|
|
int (*rename)(FsContext *, const char *, const char *);
|
|
int (*truncate)(FsContext *, V9fsPath *, off_t);
|
|
int (*fsync)(FsContext *, int, V9fsFidOpenState *, int);
|
|
int (*statfs)(FsContext *s, V9fsPath *path, struct statfs *stbuf);
|
|
ssize_t (*lgetxattr)(FsContext *, V9fsPath *,
|
|
const char *, void *, size_t);
|
|
ssize_t (*llistxattr)(FsContext *, V9fsPath *, void *, size_t);
|
|
int (*lsetxattr)(FsContext *, V9fsPath *,
|
|
const char *, void *, size_t, int);
|
|
int (*lremovexattr)(FsContext *, V9fsPath *, const char *);
|
|
int (*name_to_path)(FsContext *, V9fsPath *, const char *, V9fsPath *);
|
|
int (*renameat)(FsContext *ctx, V9fsPath *olddir, const char *old_name,
|
|
V9fsPath *newdir, const char *new_name);
|
|
int (*unlinkat)(FsContext *ctx, V9fsPath *dir, const char *name, int flags);
|
|
void *opaque;
|
|
};
|
|
|
|
#endif
|