ocfs2: add ocfs2_check_acl
This function is used to enhance permission checking with POSIX ACLs. Signed-off-by: Tiger Yang <tiger.yang@oracle.com> Signed-off-by: Mark Fasheh <mfasheh@suse.com>
This commit is contained in:
parent
929fb014e0
commit
23fc2702be
@ -230,6 +230,21 @@ static int ocfs2_set_acl(handle_t *handle,
|
|||||||
return ret;
|
return ret;
|
||||||
}
|
}
|
||||||
|
|
||||||
|
int ocfs2_check_acl(struct inode *inode, int mask)
|
||||||
|
{
|
||||||
|
struct posix_acl *acl = ocfs2_get_acl(inode, ACL_TYPE_ACCESS);
|
||||||
|
|
||||||
|
if (IS_ERR(acl))
|
||||||
|
return PTR_ERR(acl);
|
||||||
|
if (acl) {
|
||||||
|
int ret = posix_acl_permission(inode, acl, mask);
|
||||||
|
posix_acl_release(acl);
|
||||||
|
return ret;
|
||||||
|
}
|
||||||
|
|
||||||
|
return -EAGAIN;
|
||||||
|
}
|
||||||
|
|
||||||
static size_t ocfs2_xattr_list_acl_access(struct inode *inode,
|
static size_t ocfs2_xattr_list_acl_access(struct inode *inode,
|
||||||
char *list,
|
char *list,
|
||||||
size_t list_len,
|
size_t list_len,
|
||||||
|
@ -26,4 +26,14 @@ struct ocfs2_acl_entry {
|
|||||||
__le32 e_id;
|
__le32 e_id;
|
||||||
};
|
};
|
||||||
|
|
||||||
|
#ifdef CONFIG_OCFS2_FS_POSIX_ACL
|
||||||
|
|
||||||
|
extern int ocfs2_check_acl(struct inode *, int);
|
||||||
|
|
||||||
|
#else /* CONFIG_OCFS2_FS_POSIX_ACL*/
|
||||||
|
|
||||||
|
#define ocfs2_check_acl NULL
|
||||||
|
|
||||||
|
#endif /* CONFIG_OCFS2_FS_POSIX_ACL*/
|
||||||
|
|
||||||
#endif /* OCFS2_ACL_H */
|
#endif /* OCFS2_ACL_H */
|
||||||
|
@ -56,6 +56,7 @@
|
|||||||
#include "suballoc.h"
|
#include "suballoc.h"
|
||||||
#include "super.h"
|
#include "super.h"
|
||||||
#include "xattr.h"
|
#include "xattr.h"
|
||||||
|
#include "acl.h"
|
||||||
|
|
||||||
#include "buffer_head_io.h"
|
#include "buffer_head_io.h"
|
||||||
|
|
||||||
@ -1035,7 +1036,7 @@ int ocfs2_permission(struct inode *inode, int mask)
|
|||||||
goto out;
|
goto out;
|
||||||
}
|
}
|
||||||
|
|
||||||
ret = generic_permission(inode, mask, NULL);
|
ret = generic_permission(inode, mask, ocfs2_check_acl);
|
||||||
|
|
||||||
ocfs2_inode_unlock(inode, 0);
|
ocfs2_inode_unlock(inode, 0);
|
||||||
out:
|
out:
|
||||||
|
Loading…
Reference in New Issue
Block a user