Commit | Line | Data |
---|---|---|
d2912cb1 | 1 | // SPDX-License-Identifier: GPL-2.0-only |
d68772b7 MF |
2 | /* |
3 | * Copyright (C) 2012 Red Hat, Inc. | |
4 | * Copyright (C) 2012 Jeremy Kerr <jeremy.kerr@canonical.com> | |
d68772b7 MF |
5 | */ |
6 | ||
7 | #include <linux/efi.h> | |
8 | #include <linux/fs.h> | |
9 | #include <linux/ctype.h> | |
ff04f3b6 | 10 | #include <linux/kmemleak.h> |
20b4fb48 | 11 | #include <linux/slab.h> |
8236431d | 12 | #include <linux/uuid.h> |
d701ea28 | 13 | #include <linux/fileattr.h> |
d68772b7 MF |
14 | |
15 | #include "internal.h" | |
16 | ||
d701ea28 MS |
17 | static const struct inode_operations efivarfs_file_inode_operations; |
18 | ||
d68772b7 | 19 | struct inode *efivarfs_get_inode(struct super_block *sb, |
ed8b0de5 PJ |
20 | const struct inode *dir, int mode, |
21 | dev_t dev, bool is_removable) | |
d68772b7 MF |
22 | { |
23 | struct inode *inode = new_inode(sb); | |
5329aa51 JZ |
24 | struct efivarfs_fs_info *fsi = sb->s_fs_info; |
25 | struct efivarfs_mount_opts *opts = &fsi->mount_opts; | |
d68772b7 MF |
26 | |
27 | if (inode) { | |
5329aa51 JZ |
28 | inode->i_uid = opts->uid; |
29 | inode->i_gid = opts->gid; | |
d68772b7 MF |
30 | inode->i_ino = get_next_ino(); |
31 | inode->i_mode = mode; | |
da06c204 | 32 | simple_inode_init_ts(inode); |
ed8b0de5 | 33 | inode->i_flags = is_removable ? 0 : S_IMMUTABLE; |
d68772b7 MF |
34 | switch (mode & S_IFMT) { |
35 | case S_IFREG: | |
d701ea28 | 36 | inode->i_op = &efivarfs_file_inode_operations; |
d68772b7 MF |
37 | inode->i_fop = &efivarfs_file_operations; |
38 | break; | |
39 | case S_IFDIR: | |
40 | inode->i_op = &efivarfs_dir_inode_operations; | |
41 | inode->i_fop = &simple_dir_operations; | |
42 | inc_nlink(inode); | |
43 | break; | |
44 | } | |
45 | } | |
46 | return inode; | |
47 | } | |
48 | ||
49 | /* | |
50 | * Return true if 'str' is a valid efivarfs filename of the form, | |
51 | * | |
52 | * VariableName-12345678-1234-1234-1234-1234567891bc | |
53 | */ | |
54 | bool efivarfs_valid_name(const char *str, int len) | |
55 | { | |
d68772b7 | 56 | const char *s = str + len - EFI_VARIABLE_GUID_LEN; |
d68772b7 MF |
57 | |
58 | /* | |
59 | * We need a GUID, plus at least one letter for the variable name, | |
60 | * plus the '-' separator | |
61 | */ | |
62 | if (len < EFI_VARIABLE_GUID_LEN + 2) | |
63 | return false; | |
64 | ||
65 | /* GUID must be preceded by a '-' */ | |
66 | if (*(s - 1) != '-') | |
67 | return false; | |
68 | ||
69 | /* | |
70 | * Validate that 's' is of the correct format, e.g. | |
71 | * | |
72 | * 12345678-1234-1234-1234-123456789abc | |
73 | */ | |
8236431d | 74 | return uuid_is_valid(s); |
d68772b7 MF |
75 | } |
76 | ||
6c960e68 | 77 | static int efivarfs_create(struct mnt_idmap *idmap, struct inode *dir, |
549c7297 | 78 | struct dentry *dentry, umode_t mode, bool excl) |
d68772b7 | 79 | { |
cdb46a8a | 80 | struct efivarfs_fs_info *info = dir->i_sb->s_fs_info; |
ed8b0de5 | 81 | struct inode *inode = NULL; |
d68772b7 MF |
82 | struct efivar_entry *var; |
83 | int namelen, i = 0, err = 0; | |
ed8b0de5 | 84 | bool is_removable = false; |
d68772b7 MF |
85 | |
86 | if (!efivarfs_valid_name(dentry->d_name.name, dentry->d_name.len)) | |
87 | return -EINVAL; | |
88 | ||
d68772b7 | 89 | var = kzalloc(sizeof(struct efivar_entry), GFP_KERNEL); |
ed8b0de5 PJ |
90 | if (!var) |
91 | return -ENOMEM; | |
d68772b7 MF |
92 | |
93 | /* length of the variable name itself: remove GUID and separator */ | |
94 | namelen = dentry->d_name.len - EFI_VARIABLE_GUID_LEN - 1; | |
95 | ||
c4326563 AS |
96 | err = guid_parse(dentry->d_name.name + namelen + 1, &var->var.VendorGuid); |
97 | if (err) | |
98 | goto out; | |
63ffb573 JD |
99 | if (guid_equal(&var->var.VendorGuid, &LINUX_EFI_RANDOM_SEED_TABLE_GUID)) { |
100 | err = -EPERM; | |
101 | goto out; | |
102 | } | |
d68772b7 | 103 | |
ed8b0de5 PJ |
104 | if (efivar_variable_is_removable(var->var.VendorGuid, |
105 | dentry->d_name.name, namelen)) | |
106 | is_removable = true; | |
107 | ||
108 | inode = efivarfs_get_inode(dir->i_sb, dir, mode, 0, is_removable); | |
109 | if (!inode) { | |
110 | err = -ENOMEM; | |
111 | goto out; | |
112 | } | |
113 | ||
d68772b7 MF |
114 | for (i = 0; i < namelen; i++) |
115 | var->var.VariableName[i] = dentry->d_name.name[i]; | |
116 | ||
117 | var->var.VariableName[i] = '\0'; | |
118 | ||
119 | inode->i_private = var; | |
ff04f3b6 | 120 | kmemleak_ignore(var); |
d68772b7 | 121 | |
cdb46a8a | 122 | err = efivar_entry_add(var, &info->efivarfs_list); |
21b3ddd3 SC |
123 | if (err) |
124 | goto out; | |
125 | ||
d68772b7 MF |
126 | d_instantiate(dentry, inode); |
127 | dget(dentry); | |
128 | out: | |
129 | if (err) { | |
130 | kfree(var); | |
ed8b0de5 PJ |
131 | if (inode) |
132 | iput(inode); | |
d68772b7 MF |
133 | } |
134 | return err; | |
135 | } | |
136 | ||
137 | static int efivarfs_unlink(struct inode *dir, struct dentry *dentry) | |
138 | { | |
2b0143b5 | 139 | struct efivar_entry *var = d_inode(dentry)->i_private; |
d68772b7 MF |
140 | |
141 | if (efivar_entry_delete(var)) | |
142 | return -EINVAL; | |
143 | ||
2b0143b5 | 144 | drop_nlink(d_inode(dentry)); |
d68772b7 MF |
145 | dput(dentry); |
146 | return 0; | |
147 | }; | |
148 | ||
d68772b7 | 149 | const struct inode_operations efivarfs_dir_inode_operations = { |
6e8cd2cb | 150 | .lookup = simple_lookup, |
d68772b7 MF |
151 | .unlink = efivarfs_unlink, |
152 | .create = efivarfs_create, | |
153 | }; | |
d701ea28 MS |
154 | |
155 | static int | |
156 | efivarfs_fileattr_get(struct dentry *dentry, struct fileattr *fa) | |
157 | { | |
158 | unsigned int i_flags; | |
159 | unsigned int flags = 0; | |
160 | ||
161 | i_flags = d_inode(dentry)->i_flags; | |
162 | if (i_flags & S_IMMUTABLE) | |
163 | flags |= FS_IMMUTABLE_FL; | |
164 | ||
165 | fileattr_fill_flags(fa, flags); | |
166 | ||
167 | return 0; | |
168 | } | |
169 | ||
170 | static int | |
8782a9ae | 171 | efivarfs_fileattr_set(struct mnt_idmap *idmap, |
d701ea28 MS |
172 | struct dentry *dentry, struct fileattr *fa) |
173 | { | |
174 | unsigned int i_flags = 0; | |
175 | ||
176 | if (fileattr_has_fsx(fa)) | |
177 | return -EOPNOTSUPP; | |
178 | ||
179 | if (fa->flags & ~FS_IMMUTABLE_FL) | |
180 | return -EOPNOTSUPP; | |
181 | ||
182 | if (fa->flags & FS_IMMUTABLE_FL) | |
183 | i_flags |= S_IMMUTABLE; | |
184 | ||
185 | inode_set_flags(d_inode(dentry), i_flags, S_IMMUTABLE); | |
186 | ||
187 | return 0; | |
188 | } | |
189 | ||
190 | static const struct inode_operations efivarfs_file_inode_operations = { | |
191 | .fileattr_get = efivarfs_fileattr_get, | |
192 | .fileattr_set = efivarfs_fileattr_set, | |
193 | }; |