Return to nfs4acl.c CVS log

Up to [Development] / xfs-cmds / nfs4acl / nfs4acl

Bring in xfs-cmds/acl type infrastructure
Merge of master-melb:xfs-cmds:31778a by kenmcd.

/*
 * Copyright (C) 2006-2008 Andreas Gruenbacher <agruen@suse.de>
 *
 * This program is free software; you can redistribute it and/or modify it
 * under the terms of the GNU General Public License as published by the
 * Free Software Foundation; either version 2, or (at your option) any
 * later version.
 *
 * This program is distributed in the hope that it will be useful, but
 * WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
 * General Public License for more details.
 */

/*
 * FIXME: Make ls show a `+' for nfs4acls (in coreutils).
 */

#define _GNU_SOURCE
#include <stdio.h>
#include <stdlib.h>
#include <stdarg.h>
#include <string.h>
#include <getopt.h>
#include <errno.h>
#include <sys/types.h>
#include <sys/stat.h>
#include <unistd.h>
#include <sys/xattr.h>

#include "nfs4acl.h"
#include "string_buffer.h"

static const char *progname;

void printf_stderr(const char *fmt, ...)
{
	va_list ap;

	va_start(ap, fmt);
	vfprintf(stderr, fmt, ap);
	va_end(ap);
}

int modify_nfs4acl(struct nfs4acl **acl2, struct nfs4acl *acl, int acl_has)
{
	struct nfs4ace *ace2, *ace;

	nfs4acl_for_each_entry(ace, acl) {
		struct nfs4acl *acl3;
		struct nfs4ace *ace3;

		nfs4acl_for_each_entry(ace2, *acl2) {
			if (ace2->e_type == ace->e_type &&
			    nfs4ace_is_same_identifier(ace, ace2)) {
				ace2->e_mask = ace->e_mask;
				ace2->e_flags = ace->e_flags;
				break;
			}
		}
		if (ace2 != (*acl2)->a_entries + (*acl2)->a_count)
			continue;

		acl3 = nfs4acl_alloc((*acl2)->a_count + 1);
		if (!acl3)
			return -1;
		ace3 = acl3->a_entries;
		if (nfs4ace_is_deny(ace)) {
			nfs4acl_for_each_entry(ace2, *acl2) {
				if (!nfs4ace_is_deny(ace2))
					break;
				nfs4ace_copy(ace3++, ace2);
			}
			nfs4ace_copy(ace3++, ace);
			while (ace2 != (*acl2)->a_entries + (*acl2)->a_count)
				nfs4ace_copy(ace3++, ace2++);
		} else {
			nfs4acl_for_each_entry(ace2, *acl2)
				nfs4ace_copy(ace3++, ace2);
			nfs4ace_copy(ace3++, ace);
		}

		nfs4acl_free(*acl2);
		*acl2 = acl3;
	}

	if (acl_has & NFS4ACL_TEXT_FLAGS)
		(*acl2)->a_flags = acl->a_flags;

	if (!((acl_has & NFS4ACL_TEXT_OWNER_MASK) && 
	      (acl_has & NFS4ACL_TEXT_GROUP_MASK) && 
	      (acl_has & NFS4ACL_TEXT_OTHER_MASK)))
		nfs4acl_compute_max_masks(*acl2);
	if (acl_has & NFS4ACL_TEXT_OWNER_MASK)
		(*acl2)->a_owner_mask = acl->a_owner_mask;
	if (acl_has & NFS4ACL_TEXT_GROUP_MASK)
		(*acl2)->a_group_mask = acl->a_group_mask;
	if (acl_has & NFS4ACL_TEXT_OTHER_MASK)
		(*acl2)->a_other_mask = acl->a_other_mask;

	return 0;
}

static struct nfs4acl *get_nfs4acl(const char *file, mode_t mode)
{
	struct nfs4acl *acl;

	acl = nfs4acl_get_file(file);
	if (!acl && (errno == ENODATA || errno == ENOTSUP || errno == ENOSYS)) {
		acl = nfs4acl_from_mode(mode);
	}
	return acl;
}

static int print_nfs4acl(const char *file, struct nfs4acl **acl, int fmt)
{
	char *text;

	if (!(fmt & NFS4ACL_TEXT_SHOW_MASKS)) {
		if (nfs4acl_apply_masks(acl))
			goto fail;
	}
	text = nfs4acl_to_text(*acl, fmt);
	if (!text)
		goto fail;
	printf("%s:\n", file);
	puts(text);
	free(text);
	return 0;

fail:
	return -1;
}

int format_for_mode(mode_t mode)
{
	if (S_ISDIR(mode))
		return NFS4ACL_TEXT_DIRECTORY_CONTEXT;
	else
		return NFS4ACL_TEXT_FILE_CONTEXT;
}

static struct option long_options[] = {
	{"get",			0, 0, 'g'},
	{"modify",		1, 0, 'm'},
	{"modify-file",		1, 0, 'M'},
	{"set",			1, 0, 's'},
	{"set-file",		1, 0, 'S'},
	{"remove",		0, 0, 'r'},
	{"long",		0, 0, 'l'},
	{"raw",			0, 0,  1 },
	{"dry-run",		0, 0,  2 },
	{"version",		0, 0, 'v'},
	{"help",		0, 0, 'h'},
	{ NULL,			0, 0,  0 }
};

static void synopsis(int help)
{
	FILE *file = help ? stdout : stderr;

	fprintf(file, "SYNOPSIS: %s options] {command} file ...\n",
		basename(progname));
	if (!help)
		exit(1);
	fprintf(file,
"\n"
"Commands:\n"
"  --get       Display the ACL of file(s). Multiple ACL entries are separated\n"
"              by newline.\n"
"  --modify acl_entries\n"
"              Modify the ACL of file(s) by replacing existing entries with\n"
"              the entries in acl_entries, and adding all new entries.\n"
"  --set acl   Set the ACL of file(s) to acl. Multiple ACL entries are\n"
"              separated by whitespace or commas.\n"
"  --modify-file acl_entries_file, --set-file acl_file\n"
"              Identical to --modify / --set, but read the ACL from a file\n"
"              instead. If the file is `-', read from standard input.\n"
"  --set-file acl_file\n"
"              Identical to --set, but read the ACL from a file\n"
"              instead. If the file is `-', read from standard input.\n"
"  --delete-acl\n"
"              Delete the ACL of file(s).\n"
"  --version   Display the version of %s and exit.\n"
"  --help      This help text.\n"
"\n"
"Options:\n"
"  --long      Display access masks and flags in their long form.\n"
"\n"
"ACL entries are represented by colon separated <who>:<mask>:<flags>:<type>\n"
"fields. The <who> field may be \"owner@\", \"group@\", \"everyone@\", a user\n"
"name or ID, or a group name or ID. Groups must have the identifier_group(g)\n"
"flag set in the <flags> field. The <type> field may be \"allow\" or \"deny\".\n"
"The <mask> and <flags> fields are lists of single-letter abbreviations or\n"
"slash-separated names, or a combination of both.\n"
"\n"
"The supported <mask> values are:\n"
"\tread_data (r), list_directory (r), write_data (w), add_file (w),\n"
"\tappend_data (a), add_subdirectory (a), read_named_attrs (N),\n"
"\twrite_named_attrs (n), execute (x), delete_child (d),\n"
"\tread_attributes (T), write_attributes (t), delete (D),\n"
"\tread_acl (M), write_acl (m), take_ownership (o), synchronize (s)\n"
"\n"
"The supported <flags> values are:\n"
"\tfile_inherit_ace (f), directory_inherit_ace (d),\n"
"\tno_propagate_inherit_ace (n), inherit_only_ace (i),\n"
"\tidentifier_group (g), inherited_ace (a)\n"
"\n"
"Per-ACL flag values are:\n"
"\tauto_inherit (a), protected (p), defaulted (d), write_through (w)\n",
	basename(progname));
	exit(0);
}

int main(int argc, char *argv[])
{
	int opt_get = 0, opt_remove = 0, opt_dry_run = 0;
	int opt_modify = 0, opt_set = 0;
	char *acl_text = NULL, *acl_file = NULL;
	int format = NFS4ACL_TEXT_SIMPLIFY;
	int status = 0;
	int c;

	struct nfs4acl *acl = NULL;
	int acl_has;

	progname = argv[0];

	while ((c = getopt_long(argc, argv, "gm:M:s:S:nrlvh",
				long_options, NULL)) != -1) {
		switch(c) {
			case 'g':
				opt_get = 1;
				break;
			case 'm':
				opt_modify = 1;
				acl_text = optarg;
				break;

			case 'M':
				opt_modify = 1;
				acl_file = optarg;
				break;
			case 's':
				opt_set = 1;
				acl_text = optarg;
				break;

			case 'S':
				opt_set = 1;
				acl_file = optarg;
				break;

			case 'r':
				opt_remove = 1;
				break;

			case 'l':
				format |= NFS4ACL_TEXT_LONG;
				break;

			case 'v':
				printf("%s %s\n", basename(progname), VERSION);
				exit(0);

			case 'h':
				synopsis(1);
				break;

			case 1:  /* --raw */
				format |= NFS4ACL_TEXT_SHOW_MASKS;
				format &= ~NFS4ACL_TEXT_SIMPLIFY;
				break;

			case 2:  /* --dry-run */
				opt_dry_run = 1;
				break;

			default:
				synopsis(0);
				break;
		}
	}
	if (opt_get + opt_remove + opt_modify + opt_set != 1 ||
	    (acl_text ? 1 : 0) + (acl_file ? 1 : 0) > 1 ||
	    optind == argc)
		synopsis(argc == 1);

	if (acl_text) {
		acl = nfs4acl_from_text(acl_text, &acl_has, printf_stderr);
		if (!acl)
			return 1;
	}

	if (acl_file) {
		struct string_buffer *buffer;
		char buf[4097];
		FILE *file = stdin;
		ssize_t sz;

		buffer = alloc_string_buffer(1024);
		if (!buffer) {
			perror("");
			return 1;
		}

		if (strcmp(acl_file, "-")) {
			file = fopen(acl_file, "r");
			if (!file) {
				perror(acl_file);
				return 1;
			}
		}
		do {
			sz = fread(buf, 1, sizeof(buf) - 1, file);
			buf[sz] = 0;
			buffer_sprintf(buffer, "%s", buf);
		} while (!(feof(file) || ferror(file)));
		fclose(file);
		if (ferror(file)) {
			perror(acl_file);
			return 1;
		}

		acl = nfs4acl_from_text(buffer->buffer, &acl_has, printf_stderr);
		if (!acl)
			return 1;
		free_string_buffer(buffer);
	}

	/* Compute all masks which haven't been set explicitly. */
	if (opt_set && acl && !((acl_has & NFS4ACL_TEXT_OWNER_MASK) &&
				(acl_has & NFS4ACL_TEXT_GROUP_MASK) &&
				(acl_has & NFS4ACL_TEXT_OTHER_MASK))) {
		unsigned int owner_mask = acl->a_owner_mask;
		unsigned int group_mask = acl->a_group_mask;
		unsigned int other_mask = acl->a_other_mask;

		nfs4acl_compute_max_masks(acl);
		if (acl_has & NFS4ACL_TEXT_OWNER_MASK)
			acl->a_owner_mask = owner_mask;
		if (acl_has & NFS4ACL_TEXT_GROUP_MASK)
			acl->a_group_mask = group_mask;
		if (acl_has & NFS4ACL_TEXT_OTHER_MASK)
			acl->a_other_mask = other_mask;
	}

	if (opt_dry_run && opt_set) {
		const char *file = "<no filename>";

		if (print_nfs4acl(file, &acl, format |
				NFS4ACL_TEXT_FILE_CONTEXT |
				NFS4ACL_TEXT_DIRECTORY_CONTEXT)) {
			perror(file);
			return 1;
		}
		return 0;
	}

	for (; optind < argc; optind++) {
		const char *file = argv[optind];
		struct nfs4acl *acl2 = NULL;

		if (opt_set) {
			if (nfs4acl_set_file(file, acl))
				goto fail;
		} else if (opt_modify) {
			struct stat st;

			if (stat(file, &st))
				goto fail;
			acl2 = get_nfs4acl(file, st.st_mode);
			if (!acl2)
				goto fail;
			if (modify_nfs4acl(&acl2, acl, acl_has))
				goto fail;
			if (opt_dry_run) {
				if (print_nfs4acl(file, &acl2, format |
						format_for_mode(st.st_mode)))
					goto fail;
			} else {
				if (nfs4acl_set_file(file, acl2))
					goto fail;
			}
		} else if (opt_remove) {
			if (removexattr(file, "system.nfs4acl")) {
				if (errno != ENODATA)
					goto fail;
			}
		} else {
			struct stat st;

			if (stat(file, &st))
				goto fail;
			acl2 = get_nfs4acl(file, st.st_mode);
			if (!acl2)
				goto fail;
			if (print_nfs4acl(file, &acl2, format |
					format_for_mode(st.st_mode)))
				goto fail;
		}
		nfs4acl_free(acl2);
		continue;

	fail:
		nfs4acl_free(acl2);
		perror(file);
		status = 1;
	}

	nfs4acl_free(acl);
	return status;
}