Commit | Line | Data |
---|---|---|
b2441318 | 1 | // SPDX-License-Identifier: GPL-2.0 |
ac27a0ec | 2 | /* |
617ba13b | 3 | * linux/fs/ext4/ioctl.c |
ac27a0ec DK |
4 | * |
5 | * Copyright (C) 1993, 1994, 1995 | |
6 | * Remy Card (card@masi.ibp.fr) | |
7 | * Laboratoire MASI - Institut Blaise Pascal | |
8 | * Universite Pierre et Marie Curie (Paris VI) | |
9 | */ | |
10 | ||
11 | #include <linux/fs.h> | |
ac27a0ec | 12 | #include <linux/capability.h> |
ac27a0ec DK |
13 | #include <linux/time.h> |
14 | #include <linux/compat.h> | |
42a74f20 | 15 | #include <linux/mount.h> |
748de673 | 16 | #include <linux/file.h> |
9b7365fc | 17 | #include <linux/quotaops.h> |
23253068 | 18 | #include <linux/random.h> |
8da4b8c4 | 19 | #include <linux/uuid.h> |
7c0f6ba6 | 20 | #include <linux/uaccess.h> |
783d9485 | 21 | #include <linux/delay.h> |
ee73f9a5 | 22 | #include <linux/iversion.h> |
4db5c2e6 | 23 | #include <linux/fileattr.h> |
3dcf5451 CH |
24 | #include "ext4_jbd2.h" |
25 | #include "ext4.h" | |
0c9ec4be DW |
26 | #include <linux/fsmap.h> |
27 | #include "fsmap.h" | |
28 | #include <trace/events/ext4.h> | |
ac27a0ec | 29 | |
393d1d1d DTB |
30 | /** |
31 | * Swap memory between @a and @b for @len bytes. | |
32 | * | |
33 | * @a: pointer to first memory area | |
34 | * @b: pointer to second memory area | |
35 | * @len: number of bytes to swap | |
36 | * | |
37 | */ | |
38 | static void memswap(void *a, void *b, size_t len) | |
39 | { | |
40 | unsigned char *ap, *bp; | |
393d1d1d DTB |
41 | |
42 | ap = (unsigned char *)a; | |
43 | bp = (unsigned char *)b; | |
44 | while (len-- > 0) { | |
4b7e2db5 | 45 | swap(*ap, *bp); |
393d1d1d DTB |
46 | ap++; |
47 | bp++; | |
48 | } | |
49 | } | |
50 | ||
51 | /** | |
52 | * Swap i_data and associated attributes between @inode1 and @inode2. | |
53 | * This function is used for the primary swap between inode1 and inode2 | |
54 | * and also to revert this primary swap in case of errors. | |
55 | * | |
56 | * Therefore you have to make sure, that calling this method twice | |
57 | * will revert all changes. | |
58 | * | |
59 | * @inode1: pointer to first inode | |
60 | * @inode2: pointer to second inode | |
61 | */ | |
62 | static void swap_inode_data(struct inode *inode1, struct inode *inode2) | |
63 | { | |
64 | loff_t isize; | |
65 | struct ext4_inode_info *ei1; | |
66 | struct ext4_inode_info *ei2; | |
abdc644e | 67 | unsigned long tmp; |
393d1d1d DTB |
68 | |
69 | ei1 = EXT4_I(inode1); | |
70 | ei2 = EXT4_I(inode2); | |
71 | ||
9c5d58fb | 72 | swap(inode1->i_version, inode2->i_version); |
9c5d58fb JL |
73 | swap(inode1->i_atime, inode2->i_atime); |
74 | swap(inode1->i_mtime, inode2->i_mtime); | |
393d1d1d DTB |
75 | |
76 | memswap(ei1->i_data, ei2->i_data, sizeof(ei1->i_data)); | |
abdc644e | 77 | tmp = ei1->i_flags & EXT4_FL_SHOULD_SWAP; |
78 | ei1->i_flags = (ei2->i_flags & EXT4_FL_SHOULD_SWAP) | | |
79 | (ei1->i_flags & ~EXT4_FL_SHOULD_SWAP); | |
80 | ei2->i_flags = tmp | (ei2->i_flags & ~EXT4_FL_SHOULD_SWAP); | |
9c5d58fb | 81 | swap(ei1->i_disksize, ei2->i_disksize); |
cde2d7a7 TT |
82 | ext4_es_remove_extent(inode1, 0, EXT_MAX_BLOCKS); |
83 | ext4_es_remove_extent(inode2, 0, EXT_MAX_BLOCKS); | |
393d1d1d DTB |
84 | |
85 | isize = i_size_read(inode1); | |
86 | i_size_write(inode1, i_size_read(inode2)); | |
87 | i_size_write(inode2, isize); | |
88 | } | |
89 | ||
8016e29f | 90 | void ext4_reset_inode_seed(struct inode *inode) |
18aded17 TT |
91 | { |
92 | struct ext4_inode_info *ei = EXT4_I(inode); | |
93 | struct ext4_sb_info *sbi = EXT4_SB(inode->i_sb); | |
94 | __le32 inum = cpu_to_le32(inode->i_ino); | |
95 | __le32 gen = cpu_to_le32(inode->i_generation); | |
96 | __u32 csum; | |
97 | ||
98 | if (!ext4_has_metadata_csum(inode->i_sb)) | |
99 | return; | |
100 | ||
101 | csum = ext4_chksum(sbi, sbi->s_csum_seed, (__u8 *)&inum, sizeof(inum)); | |
102 | ei->i_csum_seed = ext4_chksum(sbi, csum, (__u8 *)&gen, sizeof(gen)); | |
103 | } | |
104 | ||
393d1d1d DTB |
105 | /** |
106 | * Swap the information from the given @inode and the inode | |
107 | * EXT4_BOOT_LOADER_INO. It will basically swap i_data and all other | |
108 | * important fields of the inodes. | |
109 | * | |
110 | * @sb: the super block of the filesystem | |
14f3db55 | 111 | * @mnt_userns: user namespace of the mount the inode was found from |
393d1d1d DTB |
112 | * @inode: the inode to swap with EXT4_BOOT_LOADER_INO |
113 | * | |
114 | */ | |
115 | static long swap_inode_boot_loader(struct super_block *sb, | |
14f3db55 | 116 | struct user_namespace *mnt_userns, |
393d1d1d DTB |
117 | struct inode *inode) |
118 | { | |
119 | handle_t *handle; | |
120 | int err; | |
121 | struct inode *inode_bl; | |
393d1d1d | 122 | struct ext4_inode_info *ei_bl; |
aa507b5f | 123 | qsize_t size, size_bl, diff; |
124 | blkcnt_t blocks; | |
125 | unsigned short bytes; | |
393d1d1d | 126 | |
8a363970 | 127 | inode_bl = ext4_iget(sb, EXT4_BOOT_LOADER_INO, EXT4_IGET_SPECIAL); |
d8558a29 TT |
128 | if (IS_ERR(inode_bl)) |
129 | return PTR_ERR(inode_bl); | |
393d1d1d DTB |
130 | ei_bl = EXT4_I(inode_bl); |
131 | ||
393d1d1d DTB |
132 | /* Protect orig inodes against a truncate and make sure, |
133 | * that only 1 swap_inode_boot_loader is running. */ | |
375e289e | 134 | lock_two_nondirectories(inode, inode_bl); |
393d1d1d | 135 | |
67a11611 | 136 | if (inode->i_nlink != 1 || !S_ISREG(inode->i_mode) || |
137 | IS_SWAPFILE(inode) || IS_ENCRYPTED(inode) || | |
6e589291 | 138 | (EXT4_I(inode)->i_flags & EXT4_JOURNAL_DATA_FL) || |
67a11611 | 139 | ext4_has_inline_data(inode)) { |
140 | err = -EINVAL; | |
141 | goto journal_err_out; | |
142 | } | |
143 | ||
144 | if (IS_RDONLY(inode) || IS_APPEND(inode) || IS_IMMUTABLE(inode) || | |
14f3db55 | 145 | !inode_owner_or_capable(mnt_userns, inode) || |
21cb47be | 146 | !capable(CAP_SYS_ADMIN)) { |
67a11611 | 147 | err = -EPERM; |
148 | goto journal_err_out; | |
149 | } | |
150 | ||
a46c68a3 | 151 | down_write(&EXT4_I(inode)->i_mmap_sem); |
152 | err = filemap_write_and_wait(inode->i_mapping); | |
153 | if (err) | |
154 | goto err_out; | |
155 | ||
156 | err = filemap_write_and_wait(inode_bl->i_mapping); | |
157 | if (err) | |
158 | goto err_out; | |
159 | ||
393d1d1d | 160 | /* Wait for all existing dio workers */ |
393d1d1d DTB |
161 | inode_dio_wait(inode); |
162 | inode_dio_wait(inode_bl); | |
163 | ||
18aded17 TT |
164 | truncate_inode_pages(&inode->i_data, 0); |
165 | truncate_inode_pages(&inode_bl->i_data, 0); | |
166 | ||
393d1d1d DTB |
167 | handle = ext4_journal_start(inode_bl, EXT4_HT_MOVE_EXTENTS, 2); |
168 | if (IS_ERR(handle)) { | |
169 | err = -EINVAL; | |
a46c68a3 | 170 | goto err_out; |
393d1d1d | 171 | } |
aa75f4d3 | 172 | ext4_fc_start_ineligible(sb, EXT4_FC_REASON_SWAP_BOOT); |
393d1d1d DTB |
173 | |
174 | /* Protect extent tree against block allocations via delalloc */ | |
175 | ext4_double_down_write_data_sem(inode, inode_bl); | |
176 | ||
177 | if (inode_bl->i_nlink == 0) { | |
178 | /* this inode has never been used as a BOOT_LOADER */ | |
179 | set_nlink(inode_bl, 1); | |
180 | i_uid_write(inode_bl, 0); | |
181 | i_gid_write(inode_bl, 0); | |
182 | inode_bl->i_flags = 0; | |
183 | ei_bl->i_flags = 0; | |
ee73f9a5 | 184 | inode_set_iversion(inode_bl, 1); |
393d1d1d DTB |
185 | i_size_write(inode_bl, 0); |
186 | inode_bl->i_mode = S_IFREG; | |
e2b911c5 | 187 | if (ext4_has_feature_extents(sb)) { |
393d1d1d DTB |
188 | ext4_set_inode_flag(inode_bl, EXT4_INODE_EXTENTS); |
189 | ext4_ext_tree_init(handle, inode_bl); | |
190 | } else | |
191 | memset(ei_bl->i_data, 0, sizeof(ei_bl->i_data)); | |
192 | } | |
193 | ||
aa507b5f | 194 | err = dquot_initialize(inode); |
195 | if (err) | |
196 | goto err_out1; | |
197 | ||
198 | size = (qsize_t)(inode->i_blocks) * (1 << 9) + inode->i_bytes; | |
199 | size_bl = (qsize_t)(inode_bl->i_blocks) * (1 << 9) + inode_bl->i_bytes; | |
200 | diff = size - size_bl; | |
393d1d1d DTB |
201 | swap_inode_data(inode, inode_bl); |
202 | ||
eeca7ea1 | 203 | inode->i_ctime = inode_bl->i_ctime = current_time(inode); |
393d1d1d | 204 | |
23253068 TT |
205 | inode->i_generation = prandom_u32(); |
206 | inode_bl->i_generation = prandom_u32(); | |
8016e29f HS |
207 | ext4_reset_inode_seed(inode); |
208 | ext4_reset_inode_seed(inode_bl); | |
393d1d1d | 209 | |
27bc446e | 210 | ext4_discard_preallocations(inode, 0); |
393d1d1d DTB |
211 | |
212 | err = ext4_mark_inode_dirty(handle, inode); | |
213 | if (err < 0) { | |
aa507b5f | 214 | /* No need to update quota information. */ |
393d1d1d DTB |
215 | ext4_warning(inode->i_sb, |
216 | "couldn't mark inode #%lu dirty (err %d)", | |
217 | inode->i_ino, err); | |
218 | /* Revert all changes: */ | |
219 | swap_inode_data(inode, inode_bl); | |
18aded17 | 220 | ext4_mark_inode_dirty(handle, inode); |
aa507b5f | 221 | goto err_out1; |
222 | } | |
223 | ||
224 | blocks = inode_bl->i_blocks; | |
225 | bytes = inode_bl->i_bytes; | |
226 | inode_bl->i_blocks = inode->i_blocks; | |
227 | inode_bl->i_bytes = inode->i_bytes; | |
228 | err = ext4_mark_inode_dirty(handle, inode_bl); | |
229 | if (err < 0) { | |
230 | /* No need to update quota information. */ | |
231 | ext4_warning(inode_bl->i_sb, | |
232 | "couldn't mark inode #%lu dirty (err %d)", | |
233 | inode_bl->i_ino, err); | |
234 | goto revert; | |
235 | } | |
236 | ||
237 | /* Bootloader inode should not be counted into quota information. */ | |
238 | if (diff > 0) | |
239 | dquot_free_space(inode, diff); | |
240 | else | |
241 | err = dquot_alloc_space(inode, -1 * diff); | |
242 | ||
243 | if (err < 0) { | |
244 | revert: | |
245 | /* Revert all changes: */ | |
246 | inode_bl->i_blocks = blocks; | |
247 | inode_bl->i_bytes = bytes; | |
248 | swap_inode_data(inode, inode_bl); | |
249 | ext4_mark_inode_dirty(handle, inode); | |
250 | ext4_mark_inode_dirty(handle, inode_bl); | |
393d1d1d | 251 | } |
aa507b5f | 252 | |
253 | err_out1: | |
393d1d1d | 254 | ext4_journal_stop(handle); |
aa75f4d3 | 255 | ext4_fc_stop_ineligible(sb); |
393d1d1d DTB |
256 | ext4_double_up_write_data_sem(inode, inode_bl); |
257 | ||
a46c68a3 | 258 | err_out: |
259 | up_write(&EXT4_I(inode)->i_mmap_sem); | |
30d29b11 | 260 | journal_err_out: |
375e289e | 261 | unlock_two_nondirectories(inode, inode_bl); |
393d1d1d | 262 | iput(inode_bl); |
393d1d1d DTB |
263 | return err; |
264 | } | |
265 | ||
643fa961 | 266 | #ifdef CONFIG_FS_ENCRYPTION |
9bd8212f MH |
267 | static int uuid_is_zero(__u8 u[16]) |
268 | { | |
269 | int i; | |
270 | ||
271 | for (i = 0; i < 16; i++) | |
272 | if (u[i]) | |
273 | return 0; | |
274 | return 1; | |
275 | } | |
ba679017 | 276 | #endif |
9bd8212f | 277 | |
2e538403 DW |
278 | /* |
279 | * If immutable is set and we are not clearing it, we're not allowed to change | |
280 | * anything else in the inode. Don't error out if we're only trying to set | |
281 | * immutable on an immutable file. | |
282 | */ | |
283 | static int ext4_ioctl_check_immutable(struct inode *inode, __u32 new_projid, | |
284 | unsigned int flags) | |
285 | { | |
286 | struct ext4_inode_info *ei = EXT4_I(inode); | |
287 | unsigned int oldflags = ei->i_flags; | |
288 | ||
289 | if (!(oldflags & EXT4_IMMUTABLE_FL) || !(flags & EXT4_IMMUTABLE_FL)) | |
290 | return 0; | |
291 | ||
292 | if ((oldflags & ~EXT4_IMMUTABLE_FL) != (flags & ~EXT4_IMMUTABLE_FL)) | |
293 | return -EPERM; | |
294 | if (ext4_has_feature_project(inode->i_sb) && | |
295 | __kprojid_val(ei->i_projid) != new_projid) | |
296 | return -EPERM; | |
297 | ||
298 | return 0; | |
299 | } | |
300 | ||
b383a73f IW |
301 | static void ext4_dax_dontcache(struct inode *inode, unsigned int flags) |
302 | { | |
303 | struct ext4_inode_info *ei = EXT4_I(inode); | |
304 | ||
305 | if (S_ISDIR(inode->i_mode)) | |
306 | return; | |
307 | ||
308 | if (test_opt2(inode->i_sb, DAX_NEVER) || | |
309 | test_opt(inode->i_sb, DAX_ALWAYS)) | |
310 | return; | |
311 | ||
312 | if ((ei->i_flags ^ flags) & EXT4_DAX_FL) | |
313 | d_mark_dontcache(inode); | |
314 | } | |
315 | ||
316 | static bool dax_compatible(struct inode *inode, unsigned int oldflags, | |
317 | unsigned int flags) | |
318 | { | |
4811d992 TT |
319 | /* Allow the DAX flag to be changed on inline directories */ |
320 | if (S_ISDIR(inode->i_mode)) { | |
321 | flags &= ~EXT4_INLINE_DATA_FL; | |
322 | oldflags &= ~EXT4_INLINE_DATA_FL; | |
323 | } | |
324 | ||
b383a73f IW |
325 | if (flags & EXT4_DAX_FL) { |
326 | if ((oldflags & EXT4_DAX_MUT_EXCL) || | |
327 | ext4_test_inode_state(inode, | |
328 | EXT4_STATE_VERITY_IN_PROGRESS)) { | |
329 | return false; | |
330 | } | |
331 | } | |
332 | ||
333 | if ((flags & EXT4_DAX_MUT_EXCL) && (oldflags & EXT4_DAX_FL)) | |
334 | return false; | |
335 | ||
336 | return true; | |
337 | } | |
338 | ||
9b7365fc LX |
339 | static int ext4_ioctl_setflags(struct inode *inode, |
340 | unsigned int flags) | |
341 | { | |
342 | struct ext4_inode_info *ei = EXT4_I(inode); | |
343 | handle_t *handle = NULL; | |
fdde368e | 344 | int err = -EPERM, migrate = 0; |
9b7365fc LX |
345 | struct ext4_iloc iloc; |
346 | unsigned int oldflags, mask, i; | |
b886ee3e | 347 | struct super_block *sb = inode->i_sb; |
9b7365fc LX |
348 | |
349 | /* Is it quota file? Do not allow user to mess with it */ | |
02749a4c | 350 | if (ext4_is_quota_file(inode)) |
9b7365fc LX |
351 | goto flags_out; |
352 | ||
353 | oldflags = ei->i_flags; | |
9b7365fc LX |
354 | /* |
355 | * The JOURNAL_DATA flag can only be changed by | |
356 | * the relevant capability. | |
357 | */ | |
fcebc794 | 358 | if ((flags ^ oldflags) & (EXT4_JOURNAL_DATA_FL)) { |
9b7365fc LX |
359 | if (!capable(CAP_SYS_RESOURCE)) |
360 | goto flags_out; | |
361 | } | |
b383a73f IW |
362 | |
363 | if (!dax_compatible(inode, oldflags, flags)) { | |
364 | err = -EOPNOTSUPP; | |
365 | goto flags_out; | |
366 | } | |
367 | ||
9b7365fc LX |
368 | if ((flags ^ oldflags) & EXT4_EXTENTS_FL) |
369 | migrate = 1; | |
370 | ||
b886ee3e GKB |
371 | if ((flags ^ oldflags) & EXT4_CASEFOLD_FL) { |
372 | if (!ext4_has_feature_casefold(sb)) { | |
373 | err = -EOPNOTSUPP; | |
374 | goto flags_out; | |
375 | } | |
376 | ||
377 | if (!S_ISDIR(inode->i_mode)) { | |
378 | err = -ENOTDIR; | |
379 | goto flags_out; | |
380 | } | |
381 | ||
382 | if (!ext4_empty_dir(inode)) { | |
383 | err = -ENOTEMPTY; | |
384 | goto flags_out; | |
385 | } | |
386 | } | |
387 | ||
2e538403 DW |
388 | /* |
389 | * Wait for all pending directio and then flush all the dirty pages | |
390 | * for this file. The flush marks all the pages readonly, so any | |
391 | * subsequent attempt to write to the file (particularly mmap pages) | |
392 | * will come through the filesystem and fail. | |
393 | */ | |
394 | if (S_ISREG(inode->i_mode) && !IS_IMMUTABLE(inode) && | |
395 | (flags & EXT4_IMMUTABLE_FL)) { | |
396 | inode_dio_wait(inode); | |
397 | err = filemap_write_and_wait(inode->i_mapping); | |
398 | if (err) | |
399 | goto flags_out; | |
400 | } | |
401 | ||
9b7365fc LX |
402 | handle = ext4_journal_start(inode, EXT4_HT_INODE, 1); |
403 | if (IS_ERR(handle)) { | |
404 | err = PTR_ERR(handle); | |
405 | goto flags_out; | |
406 | } | |
407 | if (IS_SYNC(inode)) | |
408 | ext4_handle_sync(handle); | |
409 | err = ext4_reserve_inode_write(handle, inode, &iloc); | |
410 | if (err) | |
411 | goto flags_err; | |
412 | ||
b383a73f IW |
413 | ext4_dax_dontcache(inode, flags); |
414 | ||
9b7365fc LX |
415 | for (i = 0, mask = 1; i < 32; i++, mask <<= 1) { |
416 | if (!(mask & EXT4_FL_USER_MODIFIABLE)) | |
417 | continue; | |
f8011d93 JK |
418 | /* These flags get special treatment later */ |
419 | if (mask == EXT4_JOURNAL_DATA_FL || mask == EXT4_EXTENTS_FL) | |
420 | continue; | |
9b7365fc LX |
421 | if (mask & flags) |
422 | ext4_set_inode_flag(inode, i); | |
423 | else | |
424 | ext4_clear_inode_flag(inode, i); | |
425 | } | |
426 | ||
043546e4 IW |
427 | ext4_set_inode_flags(inode, false); |
428 | ||
eeca7ea1 | 429 | inode->i_ctime = current_time(inode); |
9b7365fc LX |
430 | |
431 | err = ext4_mark_iloc_dirty(handle, inode, &iloc); | |
432 | flags_err: | |
433 | ext4_journal_stop(handle); | |
434 | if (err) | |
435 | goto flags_out; | |
436 | ||
fcebc794 | 437 | if ((flags ^ oldflags) & (EXT4_JOURNAL_DATA_FL)) { |
e9072d85 RZ |
438 | /* |
439 | * Changes to the journaling mode can cause unsafe changes to | |
ff694ab6 | 440 | * S_DAX if the inode is DAX |
e9072d85 | 441 | */ |
ff694ab6 | 442 | if (IS_DAX(inode)) { |
e9072d85 RZ |
443 | err = -EBUSY; |
444 | goto flags_out; | |
445 | } | |
446 | ||
fcebc794 IW |
447 | err = ext4_change_inode_journal_flag(inode, |
448 | flags & EXT4_JOURNAL_DATA_FL); | |
e9072d85 RZ |
449 | if (err) |
450 | goto flags_out; | |
451 | } | |
9b7365fc LX |
452 | if (migrate) { |
453 | if (flags & EXT4_EXTENTS_FL) | |
454 | err = ext4_ext_migrate(inode); | |
455 | else | |
456 | err = ext4_ind_migrate(inode); | |
457 | } | |
458 | ||
459 | flags_out: | |
460 | return err; | |
461 | } | |
462 | ||
463 | #ifdef CONFIG_QUOTA | |
4db5c2e6 | 464 | static int ext4_ioctl_setproject(struct inode *inode, __u32 projid) |
9b7365fc | 465 | { |
9b7365fc LX |
466 | struct super_block *sb = inode->i_sb; |
467 | struct ext4_inode_info *ei = EXT4_I(inode); | |
468 | int err, rc; | |
469 | handle_t *handle; | |
470 | kprojid_t kprojid; | |
471 | struct ext4_iloc iloc; | |
472 | struct ext4_inode *raw_inode; | |
079788d0 | 473 | struct dquot *transfer_to[MAXQUOTAS] = { }; |
9b7365fc | 474 | |
0b7b7779 | 475 | if (!ext4_has_feature_project(sb)) { |
9b7365fc LX |
476 | if (projid != EXT4_DEF_PROJID) |
477 | return -EOPNOTSUPP; | |
478 | else | |
479 | return 0; | |
480 | } | |
481 | ||
482 | if (EXT4_INODE_SIZE(sb) <= EXT4_GOOD_OLD_INODE_SIZE) | |
483 | return -EOPNOTSUPP; | |
484 | ||
485 | kprojid = make_kprojid(&init_user_ns, (projid_t)projid); | |
486 | ||
487 | if (projid_eq(kprojid, EXT4_I(inode)->i_projid)) | |
488 | return 0; | |
489 | ||
9b7365fc | 490 | err = -EPERM; |
9b7365fc | 491 | /* Is it quota file? Do not allow user to mess with it */ |
02749a4c | 492 | if (ext4_is_quota_file(inode)) |
dc7ac6c4 | 493 | return err; |
9b7365fc LX |
494 | |
495 | err = ext4_get_inode_loc(inode, &iloc); | |
496 | if (err) | |
dc7ac6c4 | 497 | return err; |
9b7365fc LX |
498 | |
499 | raw_inode = ext4_raw_inode(&iloc); | |
500 | if (!EXT4_FITS_IN_INODE(raw_inode, ei, i_projid)) { | |
c03b45b8 MX |
501 | err = ext4_expand_extra_isize(inode, |
502 | EXT4_SB(sb)->s_want_extra_isize, | |
503 | &iloc); | |
504 | if (err) | |
dc7ac6c4 | 505 | return err; |
c03b45b8 | 506 | } else { |
9b7365fc | 507 | brelse(iloc.bh); |
9b7365fc | 508 | } |
9b7365fc | 509 | |
182a79e0 WS |
510 | err = dquot_initialize(inode); |
511 | if (err) | |
512 | return err; | |
9b7365fc LX |
513 | |
514 | handle = ext4_journal_start(inode, EXT4_HT_QUOTA, | |
515 | EXT4_QUOTA_INIT_BLOCKS(sb) + | |
516 | EXT4_QUOTA_DEL_BLOCKS(sb) + 3); | |
dc7ac6c4 WS |
517 | if (IS_ERR(handle)) |
518 | return PTR_ERR(handle); | |
9b7365fc LX |
519 | |
520 | err = ext4_reserve_inode_write(handle, inode, &iloc); | |
521 | if (err) | |
522 | goto out_stop; | |
523 | ||
079788d0 WS |
524 | transfer_to[PRJQUOTA] = dqget(sb, make_kqid_projid(kprojid)); |
525 | if (!IS_ERR(transfer_to[PRJQUOTA])) { | |
7a9ca53a TE |
526 | |
527 | /* __dquot_transfer() calls back ext4_get_inode_usage() which | |
528 | * counts xattr inode references. | |
529 | */ | |
530 | down_read(&EXT4_I(inode)->xattr_sem); | |
079788d0 | 531 | err = __dquot_transfer(inode, transfer_to); |
7a9ca53a | 532 | up_read(&EXT4_I(inode)->xattr_sem); |
079788d0 WS |
533 | dqput(transfer_to[PRJQUOTA]); |
534 | if (err) | |
535 | goto out_dirty; | |
9b7365fc | 536 | } |
079788d0 | 537 | |
9b7365fc | 538 | EXT4_I(inode)->i_projid = kprojid; |
eeca7ea1 | 539 | inode->i_ctime = current_time(inode); |
9b7365fc LX |
540 | out_dirty: |
541 | rc = ext4_mark_iloc_dirty(handle, inode, &iloc); | |
542 | if (!err) | |
543 | err = rc; | |
544 | out_stop: | |
545 | ext4_journal_stop(handle); | |
9b7365fc LX |
546 | return err; |
547 | } | |
548 | #else | |
4db5c2e6 | 549 | static int ext4_ioctl_setproject(struct inode *inode, __u32 projid) |
9b7365fc LX |
550 | { |
551 | if (projid != EXT4_DEF_PROJID) | |
552 | return -EOPNOTSUPP; | |
553 | return 0; | |
554 | } | |
555 | #endif | |
556 | ||
1a20a630 | 557 | static int ext4_shutdown(struct super_block *sb, unsigned long arg) |
783d9485 TT |
558 | { |
559 | struct ext4_sb_info *sbi = EXT4_SB(sb); | |
560 | __u32 flags; | |
561 | ||
562 | if (!capable(CAP_SYS_ADMIN)) | |
563 | return -EPERM; | |
564 | ||
565 | if (get_user(flags, (__u32 __user *)arg)) | |
566 | return -EFAULT; | |
567 | ||
568 | if (flags > EXT4_GOING_FLAGS_NOLOGFLUSH) | |
569 | return -EINVAL; | |
570 | ||
571 | if (ext4_forced_shutdown(sbi)) | |
572 | return 0; | |
573 | ||
574 | ext4_msg(sb, KERN_ALERT, "shut down requested (%d)", flags); | |
ccf0f32a | 575 | trace_ext4_shutdown(sb, flags); |
783d9485 TT |
576 | |
577 | switch (flags) { | |
578 | case EXT4_GOING_FLAGS_DEFAULT: | |
579 | freeze_bdev(sb->s_bdev); | |
580 | set_bit(EXT4_FLAGS_SHUTDOWN, &sbi->s_ext4_flags); | |
040f04bd | 581 | thaw_bdev(sb->s_bdev); |
783d9485 TT |
582 | break; |
583 | case EXT4_GOING_FLAGS_LOGFLUSH: | |
584 | set_bit(EXT4_FLAGS_SHUTDOWN, &sbi->s_ext4_flags); | |
585 | if (sbi->s_journal && !is_journal_aborted(sbi->s_journal)) { | |
586 | (void) ext4_force_commit(sb); | |
fb7c0244 | 587 | jbd2_journal_abort(sbi->s_journal, -ESHUTDOWN); |
783d9485 TT |
588 | } |
589 | break; | |
590 | case EXT4_GOING_FLAGS_NOLOGFLUSH: | |
591 | set_bit(EXT4_FLAGS_SHUTDOWN, &sbi->s_ext4_flags); | |
a6d9946b | 592 | if (sbi->s_journal && !is_journal_aborted(sbi->s_journal)) |
fb7c0244 | 593 | jbd2_journal_abort(sbi->s_journal, -ESHUTDOWN); |
783d9485 TT |
594 | break; |
595 | default: | |
596 | return -EINVAL; | |
597 | } | |
598 | clear_opt(sb, DISCARD); | |
599 | return 0; | |
600 | } | |
601 | ||
0c9ec4be DW |
602 | struct getfsmap_info { |
603 | struct super_block *gi_sb; | |
604 | struct fsmap_head __user *gi_data; | |
605 | unsigned int gi_idx; | |
606 | __u32 gi_last_flags; | |
607 | }; | |
608 | ||
609 | static int ext4_getfsmap_format(struct ext4_fsmap *xfm, void *priv) | |
610 | { | |
611 | struct getfsmap_info *info = priv; | |
612 | struct fsmap fm; | |
613 | ||
614 | trace_ext4_getfsmap_mapping(info->gi_sb, xfm); | |
615 | ||
616 | info->gi_last_flags = xfm->fmr_flags; | |
617 | ext4_fsmap_from_internal(info->gi_sb, &fm, xfm); | |
618 | if (copy_to_user(&info->gi_data->fmh_recs[info->gi_idx++], &fm, | |
619 | sizeof(struct fsmap))) | |
620 | return -EFAULT; | |
621 | ||
622 | return 0; | |
623 | } | |
624 | ||
625 | static int ext4_ioc_getfsmap(struct super_block *sb, | |
626 | struct fsmap_head __user *arg) | |
627 | { | |
0ba33fac | 628 | struct getfsmap_info info = { NULL }; |
0c9ec4be DW |
629 | struct ext4_fsmap_head xhead = {0}; |
630 | struct fsmap_head head; | |
631 | bool aborted = false; | |
632 | int error; | |
633 | ||
634 | if (copy_from_user(&head, arg, sizeof(struct fsmap_head))) | |
635 | return -EFAULT; | |
636 | if (memchr_inv(head.fmh_reserved, 0, sizeof(head.fmh_reserved)) || | |
637 | memchr_inv(head.fmh_keys[0].fmr_reserved, 0, | |
638 | sizeof(head.fmh_keys[0].fmr_reserved)) || | |
639 | memchr_inv(head.fmh_keys[1].fmr_reserved, 0, | |
640 | sizeof(head.fmh_keys[1].fmr_reserved))) | |
641 | return -EINVAL; | |
642 | /* | |
643 | * ext4 doesn't report file extents at all, so the only valid | |
644 | * file offsets are the magic ones (all zeroes or all ones). | |
645 | */ | |
646 | if (head.fmh_keys[0].fmr_offset || | |
647 | (head.fmh_keys[1].fmr_offset != 0 && | |
648 | head.fmh_keys[1].fmr_offset != -1ULL)) | |
649 | return -EINVAL; | |
650 | ||
651 | xhead.fmh_iflags = head.fmh_iflags; | |
652 | xhead.fmh_count = head.fmh_count; | |
653 | ext4_fsmap_to_internal(sb, &xhead.fmh_keys[0], &head.fmh_keys[0]); | |
654 | ext4_fsmap_to_internal(sb, &xhead.fmh_keys[1], &head.fmh_keys[1]); | |
655 | ||
656 | trace_ext4_getfsmap_low_key(sb, &xhead.fmh_keys[0]); | |
657 | trace_ext4_getfsmap_high_key(sb, &xhead.fmh_keys[1]); | |
658 | ||
659 | info.gi_sb = sb; | |
660 | info.gi_data = arg; | |
661 | error = ext4_getfsmap(sb, &xhead, ext4_getfsmap_format, &info); | |
1fc57ca5 | 662 | if (error == EXT4_QUERY_RANGE_ABORT) |
0c9ec4be | 663 | aborted = true; |
1fc57ca5 | 664 | else if (error) |
0c9ec4be DW |
665 | return error; |
666 | ||
667 | /* If we didn't abort, set the "last" flag in the last fmx */ | |
668 | if (!aborted && info.gi_idx) { | |
669 | info.gi_last_flags |= FMR_OF_LAST; | |
670 | if (copy_to_user(&info.gi_data->fmh_recs[info.gi_idx - 1].fmr_flags, | |
671 | &info.gi_last_flags, | |
672 | sizeof(info.gi_last_flags))) | |
673 | return -EFAULT; | |
674 | } | |
675 | ||
676 | /* copy back header */ | |
677 | head.fmh_entries = xhead.fmh_entries; | |
678 | head.fmh_oflags = xhead.fmh_oflags; | |
679 | if (copy_to_user(arg, &head, sizeof(struct fsmap_head))) | |
680 | return -EFAULT; | |
681 | ||
682 | return 0; | |
683 | } | |
684 | ||
e145b35b AV |
685 | static long ext4_ioctl_group_add(struct file *file, |
686 | struct ext4_new_group_data *input) | |
687 | { | |
688 | struct super_block *sb = file_inode(file)->i_sb; | |
689 | int err, err2=0; | |
690 | ||
691 | err = ext4_resize_begin(sb); | |
692 | if (err) | |
693 | return err; | |
694 | ||
8813587a TT |
695 | if (ext4_has_feature_bigalloc(sb)) { |
696 | ext4_msg(sb, KERN_ERR, | |
697 | "Online resizing not supported with bigalloc"); | |
698 | err = -EOPNOTSUPP; | |
699 | goto group_add_out; | |
700 | } | |
701 | ||
e145b35b AV |
702 | err = mnt_want_write_file(file); |
703 | if (err) | |
704 | goto group_add_out; | |
705 | ||
706 | err = ext4_group_add(sb, input); | |
707 | if (EXT4_SB(sb)->s_journal) { | |
708 | jbd2_journal_lock_updates(EXT4_SB(sb)->s_journal); | |
01d5d965 | 709 | err2 = jbd2_journal_flush(EXT4_SB(sb)->s_journal, 0); |
e145b35b AV |
710 | jbd2_journal_unlock_updates(EXT4_SB(sb)->s_journal); |
711 | } | |
712 | if (err == 0) | |
713 | err = err2; | |
714 | mnt_drop_write_file(file); | |
715 | if (!err && ext4_has_group_desc_csum(sb) && | |
716 | test_opt(sb, INIT_INODE_TABLE)) | |
717 | err = ext4_register_li_request(sb, input->group); | |
718 | group_add_out: | |
719 | ext4_resize_end(sb); | |
720 | return err; | |
721 | } | |
722 | ||
4db5c2e6 | 723 | int ext4_fileattr_get(struct dentry *dentry, struct fileattr *fa) |
dc7ac6c4 | 724 | { |
4db5c2e6 | 725 | struct inode *inode = d_inode(dentry); |
7b0e492e | 726 | struct ext4_inode_info *ei = EXT4_I(inode); |
4db5c2e6 | 727 | u32 flags = ei->i_flags & EXT4_FL_USER_VISIBLE; |
dc7ac6c4 | 728 | |
4db5c2e6 MS |
729 | if (S_ISREG(inode->i_mode)) |
730 | flags &= ~FS_PROJINHERIT_FL; | |
dc7ac6c4 | 731 | |
4db5c2e6 | 732 | fileattr_fill_flags(fa, flags); |
7b0e492e DW |
733 | if (ext4_has_feature_project(inode->i_sb)) |
734 | fa->fsx_projid = from_kprojid(&init_user_ns, ei->i_projid); | |
4db5c2e6 MS |
735 | |
736 | return 0; | |
737 | } | |
738 | ||
739 | int ext4_fileattr_set(struct user_namespace *mnt_userns, | |
740 | struct dentry *dentry, struct fileattr *fa) | |
741 | { | |
742 | struct inode *inode = d_inode(dentry); | |
743 | u32 flags = fa->flags; | |
744 | int err = -EOPNOTSUPP; | |
745 | ||
746 | ext4_fc_start_update(inode); | |
747 | if (flags & ~EXT4_FL_USER_VISIBLE) | |
748 | goto out; | |
749 | ||
750 | /* | |
751 | * chattr(1) grabs flags via GETFLAGS, modifies the result and | |
752 | * passes that to SETFLAGS. So we cannot easily make SETFLAGS | |
753 | * more restrictive than just silently masking off visible but | |
754 | * not settable flags as we always did. | |
755 | */ | |
756 | flags &= EXT4_FL_USER_MODIFIABLE; | |
757 | if (ext4_mask_flags(inode->i_mode, flags) != flags) | |
758 | goto out; | |
759 | err = ext4_ioctl_check_immutable(inode, fa->fsx_projid, flags); | |
760 | if (err) | |
761 | goto out; | |
762 | err = ext4_ioctl_setflags(inode, flags); | |
763 | if (err) | |
764 | goto out; | |
765 | err = ext4_ioctl_setproject(inode, fa->fsx_projid); | |
766 | out: | |
767 | ext4_fc_stop_update(inode); | |
768 | return err; | |
dc7ac6c4 WS |
769 | } |
770 | ||
bb5835ed TT |
771 | /* So that the fiemap access checks can't overflow on 32 bit machines. */ |
772 | #define FIEMAP_MAX_EXTENTS (UINT_MAX / sizeof(struct fiemap_extent)) | |
773 | ||
774 | static int ext4_ioctl_get_es_cache(struct file *filp, unsigned long arg) | |
775 | { | |
776 | struct fiemap fiemap; | |
777 | struct fiemap __user *ufiemap = (struct fiemap __user *) arg; | |
778 | struct fiemap_extent_info fieinfo = { 0, }; | |
779 | struct inode *inode = file_inode(filp); | |
bb5835ed TT |
780 | int error; |
781 | ||
782 | if (copy_from_user(&fiemap, ufiemap, sizeof(fiemap))) | |
783 | return -EFAULT; | |
784 | ||
785 | if (fiemap.fm_extent_count > FIEMAP_MAX_EXTENTS) | |
786 | return -EINVAL; | |
787 | ||
bb5835ed TT |
788 | fieinfo.fi_flags = fiemap.fm_flags; |
789 | fieinfo.fi_extents_max = fiemap.fm_extent_count; | |
790 | fieinfo.fi_extents_start = ufiemap->fm_extents; | |
791 | ||
328e24ae CH |
792 | error = ext4_get_es_cache(inode, &fieinfo, fiemap.fm_start, |
793 | fiemap.fm_length); | |
bb5835ed TT |
794 | fiemap.fm_flags = fieinfo.fi_flags; |
795 | fiemap.fm_mapped_extents = fieinfo.fi_extents_mapped; | |
796 | if (copy_to_user(ufiemap, &fiemap, sizeof(fiemap))) | |
797 | error = -EFAULT; | |
798 | ||
799 | return error; | |
800 | } | |
801 | ||
351a0a3f LR |
802 | static int ext4_ioctl_checkpoint(struct file *filp, unsigned long arg) |
803 | { | |
804 | int err = 0; | |
805 | __u32 flags = 0; | |
806 | unsigned int flush_flags = 0; | |
807 | struct super_block *sb = file_inode(filp)->i_sb; | |
808 | struct request_queue *q; | |
809 | ||
810 | if (copy_from_user(&flags, (__u32 __user *)arg, | |
811 | sizeof(__u32))) | |
812 | return -EFAULT; | |
813 | ||
814 | if (!capable(CAP_SYS_ADMIN)) | |
815 | return -EPERM; | |
816 | ||
817 | /* check for invalid bits set */ | |
818 | if ((flags & ~EXT4_IOC_CHECKPOINT_FLAG_VALID) || | |
819 | ((flags & JBD2_JOURNAL_FLUSH_DISCARD) && | |
820 | (flags & JBD2_JOURNAL_FLUSH_ZEROOUT))) | |
821 | return -EINVAL; | |
822 | ||
823 | if (!EXT4_SB(sb)->s_journal) | |
824 | return -ENODEV; | |
825 | ||
09559019 | 826 | if (flags & ~EXT4_IOC_CHECKPOINT_FLAG_VALID) |
351a0a3f LR |
827 | return -EINVAL; |
828 | ||
829 | q = bdev_get_queue(EXT4_SB(sb)->s_journal->j_dev); | |
830 | if (!q) | |
831 | return -ENXIO; | |
832 | if ((flags & JBD2_JOURNAL_FLUSH_DISCARD) && !blk_queue_discard(q)) | |
833 | return -EOPNOTSUPP; | |
834 | ||
835 | if (flags & EXT4_IOC_CHECKPOINT_FLAG_DRY_RUN) | |
836 | return 0; | |
837 | ||
838 | if (flags & EXT4_IOC_CHECKPOINT_FLAG_DISCARD) | |
839 | flush_flags |= JBD2_JOURNAL_FLUSH_DISCARD; | |
840 | ||
841 | if (flags & EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT) { | |
842 | flush_flags |= JBD2_JOURNAL_FLUSH_ZEROOUT; | |
843 | pr_info_ratelimited("warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow"); | |
844 | } | |
845 | ||
846 | jbd2_journal_lock_updates(EXT4_SB(sb)->s_journal); | |
847 | err = jbd2_journal_flush(EXT4_SB(sb)->s_journal, flush_flags); | |
848 | jbd2_journal_unlock_updates(EXT4_SB(sb)->s_journal); | |
849 | ||
850 | return err; | |
851 | } | |
852 | ||
aa75f4d3 | 853 | static long __ext4_ioctl(struct file *filp, unsigned int cmd, unsigned long arg) |
ac27a0ec | 854 | { |
496ad9aa | 855 | struct inode *inode = file_inode(filp); |
bab08ab9 | 856 | struct super_block *sb = inode->i_sb; |
14f3db55 | 857 | struct user_namespace *mnt_userns = file_mnt_user_ns(filp); |
ac27a0ec | 858 | |
af5bc92d | 859 | ext4_debug("cmd = %u, arg = %lu\n", cmd, arg); |
ac27a0ec DK |
860 | |
861 | switch (cmd) { | |
0c9ec4be DW |
862 | case FS_IOC_GETFSMAP: |
863 | return ext4_ioc_getfsmap(sb, (void __user *)arg); | |
617ba13b MC |
864 | case EXT4_IOC_GETVERSION: |
865 | case EXT4_IOC_GETVERSION_OLD: | |
ac27a0ec | 866 | return put_user(inode->i_generation, (int __user *) arg); |
617ba13b MC |
867 | case EXT4_IOC_SETVERSION: |
868 | case EXT4_IOC_SETVERSION_OLD: { | |
ac27a0ec | 869 | handle_t *handle; |
617ba13b | 870 | struct ext4_iloc iloc; |
ac27a0ec DK |
871 | __u32 generation; |
872 | int err; | |
873 | ||
14f3db55 | 874 | if (!inode_owner_or_capable(mnt_userns, inode)) |
ac27a0ec | 875 | return -EPERM; |
42a74f20 | 876 | |
9aa5d32b | 877 | if (ext4_has_metadata_csum(inode->i_sb)) { |
814525f4 DW |
878 | ext4_warning(sb, "Setting inode version is not " |
879 | "supported with metadata_csum enabled."); | |
880 | return -ENOTTY; | |
881 | } | |
882 | ||
a561be71 | 883 | err = mnt_want_write_file(filp); |
42a74f20 DH |
884 | if (err) |
885 | return err; | |
886 | if (get_user(generation, (int __user *) arg)) { | |
887 | err = -EFAULT; | |
888 | goto setversion_out; | |
889 | } | |
ac27a0ec | 890 | |
5955102c | 891 | inode_lock(inode); |
9924a92a | 892 | handle = ext4_journal_start(inode, EXT4_HT_INODE, 1); |
42a74f20 DH |
893 | if (IS_ERR(handle)) { |
894 | err = PTR_ERR(handle); | |
6c2155b9 | 895 | goto unlock_out; |
42a74f20 | 896 | } |
617ba13b | 897 | err = ext4_reserve_inode_write(handle, inode, &iloc); |
ac27a0ec | 898 | if (err == 0) { |
eeca7ea1 | 899 | inode->i_ctime = current_time(inode); |
ac27a0ec | 900 | inode->i_generation = generation; |
617ba13b | 901 | err = ext4_mark_iloc_dirty(handle, inode, &iloc); |
ac27a0ec | 902 | } |
617ba13b | 903 | ext4_journal_stop(handle); |
6c2155b9 DH |
904 | |
905 | unlock_out: | |
5955102c | 906 | inode_unlock(inode); |
42a74f20 | 907 | setversion_out: |
2a79f17e | 908 | mnt_drop_write_file(filp); |
ac27a0ec DK |
909 | return err; |
910 | } | |
617ba13b MC |
911 | case EXT4_IOC_GROUP_EXTEND: { |
912 | ext4_fsblk_t n_blocks_count; | |
ac046f1d | 913 | int err, err2=0; |
ac27a0ec | 914 | |
8f82f840 YY |
915 | err = ext4_resize_begin(sb); |
916 | if (err) | |
917 | return err; | |
ac27a0ec | 918 | |
014a1770 DH |
919 | if (get_user(n_blocks_count, (__u32 __user *)arg)) { |
920 | err = -EFAULT; | |
921 | goto group_extend_out; | |
922 | } | |
ac27a0ec | 923 | |
8813587a TT |
924 | if (ext4_has_feature_bigalloc(sb)) { |
925 | ext4_msg(sb, KERN_ERR, | |
926 | "Online resizing not supported with bigalloc"); | |
927 | err = -EOPNOTSUPP; | |
928 | goto group_extend_out; | |
929 | } | |
930 | ||
a561be71 | 931 | err = mnt_want_write_file(filp); |
42a74f20 | 932 | if (err) |
014a1770 | 933 | goto group_extend_out; |
42a74f20 | 934 | |
617ba13b | 935 | err = ext4_group_extend(sb, EXT4_SB(sb)->s_es, n_blocks_count); |
ac046f1d PT |
936 | if (EXT4_SB(sb)->s_journal) { |
937 | jbd2_journal_lock_updates(EXT4_SB(sb)->s_journal); | |
01d5d965 | 938 | err2 = jbd2_journal_flush(EXT4_SB(sb)->s_journal, 0); |
ac046f1d PT |
939 | jbd2_journal_unlock_updates(EXT4_SB(sb)->s_journal); |
940 | } | |
7ffe1ea8 HK |
941 | if (err == 0) |
942 | err = err2; | |
2a79f17e | 943 | mnt_drop_write_file(filp); |
014a1770 | 944 | group_extend_out: |
8f82f840 | 945 | ext4_resize_end(sb); |
ac27a0ec DK |
946 | return err; |
947 | } | |
748de673 AF |
948 | |
949 | case EXT4_IOC_MOVE_EXT: { | |
950 | struct move_extent me; | |
2903ff01 AV |
951 | struct fd donor; |
952 | int err; | |
748de673 | 953 | |
4a58579b AF |
954 | if (!(filp->f_mode & FMODE_READ) || |
955 | !(filp->f_mode & FMODE_WRITE)) | |
956 | return -EBADF; | |
957 | ||
748de673 AF |
958 | if (copy_from_user(&me, |
959 | (struct move_extent __user *)arg, sizeof(me))) | |
960 | return -EFAULT; | |
4a58579b | 961 | me.moved_len = 0; |
748de673 | 962 | |
2903ff01 AV |
963 | donor = fdget(me.donor_fd); |
964 | if (!donor.file) | |
748de673 AF |
965 | return -EBADF; |
966 | ||
2903ff01 | 967 | if (!(donor.file->f_mode & FMODE_WRITE)) { |
4a58579b AF |
968 | err = -EBADF; |
969 | goto mext_out; | |
748de673 AF |
970 | } |
971 | ||
e2b911c5 | 972 | if (ext4_has_feature_bigalloc(sb)) { |
bab08ab9 TT |
973 | ext4_msg(sb, KERN_ERR, |
974 | "Online defrag not supported with bigalloc"); | |
399c9b86 AV |
975 | err = -EOPNOTSUPP; |
976 | goto mext_out; | |
73f34a5e RZ |
977 | } else if (IS_DAX(inode)) { |
978 | ext4_msg(sb, KERN_ERR, | |
979 | "Online defrag not supported with DAX"); | |
980 | err = -EOPNOTSUPP; | |
981 | goto mext_out; | |
bab08ab9 TT |
982 | } |
983 | ||
a561be71 | 984 | err = mnt_want_write_file(filp); |
4a58579b AF |
985 | if (err) |
986 | goto mext_out; | |
987 | ||
2903ff01 | 988 | err = ext4_move_extents(filp, donor.file, me.orig_start, |
748de673 | 989 | me.donor_start, me.len, &me.moved_len); |
2a79f17e | 990 | mnt_drop_write_file(filp); |
748de673 | 991 | |
60e6679e | 992 | if (copy_to_user((struct move_extent __user *)arg, |
c437b273 | 993 | &me, sizeof(me))) |
4a58579b AF |
994 | err = -EFAULT; |
995 | mext_out: | |
2903ff01 | 996 | fdput(donor); |
748de673 AF |
997 | return err; |
998 | } | |
999 | ||
617ba13b MC |
1000 | case EXT4_IOC_GROUP_ADD: { |
1001 | struct ext4_new_group_data input; | |
ac27a0ec | 1002 | |
617ba13b | 1003 | if (copy_from_user(&input, (struct ext4_new_group_input __user *)arg, |
e145b35b AV |
1004 | sizeof(input))) |
1005 | return -EFAULT; | |
42a74f20 | 1006 | |
e145b35b | 1007 | return ext4_ioctl_group_add(filp, &input); |
ac27a0ec DK |
1008 | } |
1009 | ||
c14c6fd5 | 1010 | case EXT4_IOC_MIGRATE: |
2a43a878 AK |
1011 | { |
1012 | int err; | |
14f3db55 | 1013 | if (!inode_owner_or_capable(mnt_userns, inode)) |
2a43a878 AK |
1014 | return -EACCES; |
1015 | ||
a561be71 | 1016 | err = mnt_want_write_file(filp); |
2a43a878 AK |
1017 | if (err) |
1018 | return err; | |
1019 | /* | |
1020 | * inode_mutex prevent write and truncate on the file. | |
1021 | * Read still goes through. We take i_data_sem in | |
1022 | * ext4_ext_swap_inode_data before we switch the | |
1023 | * inode format to prevent read. | |
1024 | */ | |
5955102c | 1025 | inode_lock((inode)); |
2a43a878 | 1026 | err = ext4_ext_migrate(inode); |
5955102c | 1027 | inode_unlock((inode)); |
2a79f17e | 1028 | mnt_drop_write_file(filp); |
2a43a878 AK |
1029 | return err; |
1030 | } | |
c14c6fd5 | 1031 | |
ccd2506b TT |
1032 | case EXT4_IOC_ALLOC_DA_BLKS: |
1033 | { | |
1034 | int err; | |
14f3db55 | 1035 | if (!inode_owner_or_capable(mnt_userns, inode)) |
ccd2506b TT |
1036 | return -EACCES; |
1037 | ||
a561be71 | 1038 | err = mnt_want_write_file(filp); |
ccd2506b TT |
1039 | if (err) |
1040 | return err; | |
1041 | err = ext4_alloc_da_blocks(inode); | |
2a79f17e | 1042 | mnt_drop_write_file(filp); |
ccd2506b TT |
1043 | return err; |
1044 | } | |
1045 | ||
393d1d1d | 1046 | case EXT4_IOC_SWAP_BOOT: |
3e67cfad DM |
1047 | { |
1048 | int err; | |
393d1d1d DTB |
1049 | if (!(filp->f_mode & FMODE_WRITE)) |
1050 | return -EBADF; | |
3e67cfad DM |
1051 | err = mnt_want_write_file(filp); |
1052 | if (err) | |
1053 | return err; | |
14f3db55 | 1054 | err = swap_inode_boot_loader(sb, mnt_userns, inode); |
3e67cfad DM |
1055 | mnt_drop_write_file(filp); |
1056 | return err; | |
1057 | } | |
393d1d1d | 1058 | |
19c5246d YY |
1059 | case EXT4_IOC_RESIZE_FS: { |
1060 | ext4_fsblk_t n_blocks_count; | |
19c5246d | 1061 | int err = 0, err2 = 0; |
7f511862 | 1062 | ext4_group_t o_group = EXT4_SB(sb)->s_groups_count; |
19c5246d | 1063 | |
19c5246d YY |
1064 | if (copy_from_user(&n_blocks_count, (__u64 __user *)arg, |
1065 | sizeof(__u64))) { | |
1066 | return -EFAULT; | |
1067 | } | |
1068 | ||
19c5246d YY |
1069 | err = ext4_resize_begin(sb); |
1070 | if (err) | |
1071 | return err; | |
1072 | ||
8cae6f71 | 1073 | err = mnt_want_write_file(filp); |
19c5246d YY |
1074 | if (err) |
1075 | goto resizefs_out; | |
1076 | ||
1077 | err = ext4_resize_fs(sb, n_blocks_count); | |
1078 | if (EXT4_SB(sb)->s_journal) { | |
aa75f4d3 | 1079 | ext4_fc_mark_ineligible(sb, EXT4_FC_REASON_RESIZE); |
19c5246d | 1080 | jbd2_journal_lock_updates(EXT4_SB(sb)->s_journal); |
01d5d965 | 1081 | err2 = jbd2_journal_flush(EXT4_SB(sb)->s_journal, 0); |
19c5246d YY |
1082 | jbd2_journal_unlock_updates(EXT4_SB(sb)->s_journal); |
1083 | } | |
1084 | if (err == 0) | |
1085 | err = err2; | |
8cae6f71 | 1086 | mnt_drop_write_file(filp); |
310a997f | 1087 | if (!err && (o_group < EXT4_SB(sb)->s_groups_count) && |
7f511862 TT |
1088 | ext4_has_group_desc_csum(sb) && |
1089 | test_opt(sb, INIT_INODE_TABLE)) | |
1090 | err = ext4_register_li_request(sb, o_group); | |
1091 | ||
19c5246d YY |
1092 | resizefs_out: |
1093 | ext4_resize_end(sb); | |
1094 | return err; | |
1095 | } | |
1096 | ||
e681c047 LC |
1097 | case FITRIM: |
1098 | { | |
41431792 | 1099 | struct request_queue *q = bdev_get_queue(sb->s_bdev); |
e681c047 LC |
1100 | struct fstrim_range range; |
1101 | int ret = 0; | |
1102 | ||
1103 | if (!capable(CAP_SYS_ADMIN)) | |
1104 | return -EPERM; | |
1105 | ||
41431792 LC |
1106 | if (!blk_queue_discard(q)) |
1107 | return -EOPNOTSUPP; | |
1108 | ||
18915b58 DW |
1109 | /* |
1110 | * We haven't replayed the journal, so we cannot use our | |
1111 | * block-bitmap-guided storage zapping commands. | |
1112 | */ | |
1113 | if (test_opt(sb, NOLOAD) && ext4_has_feature_journal(sb)) | |
1114 | return -EROFS; | |
1115 | ||
e6705f7c | 1116 | if (copy_from_user(&range, (struct fstrim_range __user *)arg, |
e681c047 LC |
1117 | sizeof(range))) |
1118 | return -EFAULT; | |
1119 | ||
5c2ed62f LC |
1120 | range.minlen = max((unsigned int)range.minlen, |
1121 | q->limits.discard_granularity); | |
e681c047 LC |
1122 | ret = ext4_trim_fs(sb, &range); |
1123 | if (ret < 0) | |
1124 | return ret; | |
1125 | ||
e6705f7c | 1126 | if (copy_to_user((struct fstrim_range __user *)arg, &range, |
e681c047 LC |
1127 | sizeof(range))) |
1128 | return -EFAULT; | |
1129 | ||
1130 | return 0; | |
1131 | } | |
7869a4a6 TT |
1132 | case EXT4_IOC_PRECACHE_EXTENTS: |
1133 | return ext4_ext_precache(inode); | |
9bd8212f | 1134 | |
cb29a02d | 1135 | case FS_IOC_SET_ENCRYPTION_POLICY: |
9a200d07 RW |
1136 | if (!ext4_has_feature_encrypt(sb)) |
1137 | return -EOPNOTSUPP; | |
db717d8e | 1138 | return fscrypt_ioctl_set_policy(filp, (const void __user *)arg); |
9a200d07 | 1139 | |
cb29a02d | 1140 | case FS_IOC_GET_ENCRYPTION_PWSALT: { |
643fa961 | 1141 | #ifdef CONFIG_FS_ENCRYPTION |
9bd8212f MH |
1142 | int err, err2; |
1143 | struct ext4_sb_info *sbi = EXT4_SB(sb); | |
1144 | handle_t *handle; | |
1145 | ||
35997d1c | 1146 | if (!ext4_has_feature_encrypt(sb)) |
9bd8212f MH |
1147 | return -EOPNOTSUPP; |
1148 | if (uuid_is_zero(sbi->s_es->s_encrypt_pw_salt)) { | |
1149 | err = mnt_want_write_file(filp); | |
1150 | if (err) | |
1151 | return err; | |
1152 | handle = ext4_journal_start_sb(sb, EXT4_HT_MISC, 1); | |
1153 | if (IS_ERR(handle)) { | |
1154 | err = PTR_ERR(handle); | |
1155 | goto pwsalt_err_exit; | |
1156 | } | |
1157 | err = ext4_journal_get_write_access(handle, sbi->s_sbh); | |
1158 | if (err) | |
1159 | goto pwsalt_err_journal; | |
dfd56c2c | 1160 | lock_buffer(sbi->s_sbh); |
9bd8212f | 1161 | generate_random_uuid(sbi->s_es->s_encrypt_pw_salt); |
dfd56c2c JK |
1162 | ext4_superblock_csum_set(sb); |
1163 | unlock_buffer(sbi->s_sbh); | |
9bd8212f MH |
1164 | err = ext4_handle_dirty_metadata(handle, NULL, |
1165 | sbi->s_sbh); | |
1166 | pwsalt_err_journal: | |
1167 | err2 = ext4_journal_stop(handle); | |
1168 | if (err2 && !err) | |
1169 | err = err2; | |
1170 | pwsalt_err_exit: | |
1171 | mnt_drop_write_file(filp); | |
1172 | if (err) | |
1173 | return err; | |
1174 | } | |
b4ab9e29 FF |
1175 | if (copy_to_user((void __user *) arg, |
1176 | sbi->s_es->s_encrypt_pw_salt, 16)) | |
9bd8212f MH |
1177 | return -EFAULT; |
1178 | return 0; | |
ba679017 EB |
1179 | #else |
1180 | return -EOPNOTSUPP; | |
1181 | #endif | |
9bd8212f | 1182 | } |
cb29a02d | 1183 | case FS_IOC_GET_ENCRYPTION_POLICY: |
0642ea24 CY |
1184 | if (!ext4_has_feature_encrypt(sb)) |
1185 | return -EOPNOTSUPP; | |
db717d8e | 1186 | return fscrypt_ioctl_get_policy(filp, (void __user *)arg); |
9bd8212f | 1187 | |
29b3692e EB |
1188 | case FS_IOC_GET_ENCRYPTION_POLICY_EX: |
1189 | if (!ext4_has_feature_encrypt(sb)) | |
1190 | return -EOPNOTSUPP; | |
1191 | return fscrypt_ioctl_get_policy_ex(filp, (void __user *)arg); | |
1192 | ||
1193 | case FS_IOC_ADD_ENCRYPTION_KEY: | |
1194 | if (!ext4_has_feature_encrypt(sb)) | |
1195 | return -EOPNOTSUPP; | |
1196 | return fscrypt_ioctl_add_key(filp, (void __user *)arg); | |
1197 | ||
1198 | case FS_IOC_REMOVE_ENCRYPTION_KEY: | |
1199 | if (!ext4_has_feature_encrypt(sb)) | |
1200 | return -EOPNOTSUPP; | |
1201 | return fscrypt_ioctl_remove_key(filp, (void __user *)arg); | |
1202 | ||
1203 | case FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS: | |
1204 | if (!ext4_has_feature_encrypt(sb)) | |
1205 | return -EOPNOTSUPP; | |
1206 | return fscrypt_ioctl_remove_key_all_users(filp, | |
1207 | (void __user *)arg); | |
1208 | case FS_IOC_GET_ENCRYPTION_KEY_STATUS: | |
1209 | if (!ext4_has_feature_encrypt(sb)) | |
1210 | return -EOPNOTSUPP; | |
1211 | return fscrypt_ioctl_get_key_status(filp, (void __user *)arg); | |
1212 | ||
7ec9f3b4 EB |
1213 | case FS_IOC_GET_ENCRYPTION_NONCE: |
1214 | if (!ext4_has_feature_encrypt(sb)) | |
1215 | return -EOPNOTSUPP; | |
1216 | return fscrypt_ioctl_get_nonce(filp, (void __user *)arg); | |
1217 | ||
b0c013e2 TT |
1218 | case EXT4_IOC_CLEAR_ES_CACHE: |
1219 | { | |
14f3db55 | 1220 | if (!inode_owner_or_capable(mnt_userns, inode)) |
b0c013e2 TT |
1221 | return -EACCES; |
1222 | ext4_clear_inode_es(inode); | |
1223 | return 0; | |
1224 | } | |
1225 | ||
1ad3ea6e TT |
1226 | case EXT4_IOC_GETSTATE: |
1227 | { | |
1228 | __u32 state = 0; | |
1229 | ||
1230 | if (ext4_test_inode_state(inode, EXT4_STATE_EXT_PRECACHED)) | |
1231 | state |= EXT4_STATE_FLAG_EXT_PRECACHED; | |
1232 | if (ext4_test_inode_state(inode, EXT4_STATE_NEW)) | |
1233 | state |= EXT4_STATE_FLAG_NEW; | |
1234 | if (ext4_test_inode_state(inode, EXT4_STATE_NEWENTRY)) | |
1235 | state |= EXT4_STATE_FLAG_NEWENTRY; | |
1236 | if (ext4_test_inode_state(inode, EXT4_STATE_DA_ALLOC_CLOSE)) | |
1237 | state |= EXT4_STATE_FLAG_DA_ALLOC_CLOSE; | |
1238 | ||
1239 | return put_user(state, (__u32 __user *) arg); | |
1240 | } | |
1241 | ||
bb5835ed TT |
1242 | case EXT4_IOC_GET_ES_CACHE: |
1243 | return ext4_ioctl_get_es_cache(filp, arg); | |
1244 | ||
e9be2ac7 TT |
1245 | case EXT4_IOC_SHUTDOWN: |
1246 | return ext4_shutdown(sb, arg); | |
c93d8f88 EB |
1247 | |
1248 | case FS_IOC_ENABLE_VERITY: | |
1249 | if (!ext4_has_feature_verity(sb)) | |
1250 | return -EOPNOTSUPP; | |
1251 | return fsverity_ioctl_enable(filp, (const void __user *)arg); | |
1252 | ||
1253 | case FS_IOC_MEASURE_VERITY: | |
1254 | if (!ext4_has_feature_verity(sb)) | |
1255 | return -EOPNOTSUPP; | |
1256 | return fsverity_ioctl_measure(filp, (void __user *)arg); | |
1257 | ||
e17fe657 EB |
1258 | case FS_IOC_READ_VERITY_METADATA: |
1259 | if (!ext4_has_feature_verity(sb)) | |
1260 | return -EOPNOTSUPP; | |
1261 | return fsverity_ioctl_read_metadata(filp, | |
1262 | (const void __user *)arg); | |
1263 | ||
351a0a3f LR |
1264 | case EXT4_IOC_CHECKPOINT: |
1265 | return ext4_ioctl_checkpoint(filp, arg); | |
1266 | ||
ac27a0ec DK |
1267 | default: |
1268 | return -ENOTTY; | |
1269 | } | |
1270 | } | |
1271 | ||
aa75f4d3 HS |
1272 | long ext4_ioctl(struct file *filp, unsigned int cmd, unsigned long arg) |
1273 | { | |
1274 | long ret; | |
1275 | ||
1276 | ext4_fc_start_update(file_inode(filp)); | |
1277 | ret = __ext4_ioctl(filp, cmd, arg); | |
1278 | ext4_fc_stop_update(file_inode(filp)); | |
1279 | ||
1280 | return ret; | |
1281 | } | |
1282 | ||
ac27a0ec | 1283 | #ifdef CONFIG_COMPAT |
617ba13b | 1284 | long ext4_compat_ioctl(struct file *file, unsigned int cmd, unsigned long arg) |
ac27a0ec | 1285 | { |
ac27a0ec DK |
1286 | /* These are just misnamed, they actually get/put from/to user an int */ |
1287 | switch (cmd) { | |
617ba13b MC |
1288 | case EXT4_IOC32_GETVERSION: |
1289 | cmd = EXT4_IOC_GETVERSION; | |
ac27a0ec | 1290 | break; |
617ba13b MC |
1291 | case EXT4_IOC32_SETVERSION: |
1292 | cmd = EXT4_IOC_SETVERSION; | |
ac27a0ec | 1293 | break; |
617ba13b MC |
1294 | case EXT4_IOC32_GROUP_EXTEND: |
1295 | cmd = EXT4_IOC_GROUP_EXTEND; | |
ac27a0ec | 1296 | break; |
617ba13b MC |
1297 | case EXT4_IOC32_GETVERSION_OLD: |
1298 | cmd = EXT4_IOC_GETVERSION_OLD; | |
ac27a0ec | 1299 | break; |
617ba13b MC |
1300 | case EXT4_IOC32_SETVERSION_OLD: |
1301 | cmd = EXT4_IOC_SETVERSION_OLD; | |
ac27a0ec | 1302 | break; |
617ba13b MC |
1303 | case EXT4_IOC32_GETRSVSZ: |
1304 | cmd = EXT4_IOC_GETRSVSZ; | |
ac27a0ec | 1305 | break; |
617ba13b MC |
1306 | case EXT4_IOC32_SETRSVSZ: |
1307 | cmd = EXT4_IOC_SETRSVSZ; | |
ac27a0ec | 1308 | break; |
4d92dc0f BH |
1309 | case EXT4_IOC32_GROUP_ADD: { |
1310 | struct compat_ext4_new_group_input __user *uinput; | |
e145b35b | 1311 | struct ext4_new_group_data input; |
4d92dc0f BH |
1312 | int err; |
1313 | ||
1314 | uinput = compat_ptr(arg); | |
1315 | err = get_user(input.group, &uinput->group); | |
1316 | err |= get_user(input.block_bitmap, &uinput->block_bitmap); | |
1317 | err |= get_user(input.inode_bitmap, &uinput->inode_bitmap); | |
1318 | err |= get_user(input.inode_table, &uinput->inode_table); | |
1319 | err |= get_user(input.blocks_count, &uinput->blocks_count); | |
1320 | err |= get_user(input.reserved_blocks, | |
1321 | &uinput->reserved_blocks); | |
1322 | if (err) | |
1323 | return -EFAULT; | |
e145b35b | 1324 | return ext4_ioctl_group_add(file, &input); |
4d92dc0f | 1325 | } |
b684b2ee | 1326 | case EXT4_IOC_MOVE_EXT: |
19c5246d | 1327 | case EXT4_IOC_RESIZE_FS: |
314999dc | 1328 | case FITRIM: |
7869a4a6 | 1329 | case EXT4_IOC_PRECACHE_EXTENTS: |
cb29a02d EB |
1330 | case FS_IOC_SET_ENCRYPTION_POLICY: |
1331 | case FS_IOC_GET_ENCRYPTION_PWSALT: | |
1332 | case FS_IOC_GET_ENCRYPTION_POLICY: | |
29b3692e EB |
1333 | case FS_IOC_GET_ENCRYPTION_POLICY_EX: |
1334 | case FS_IOC_ADD_ENCRYPTION_KEY: | |
1335 | case FS_IOC_REMOVE_ENCRYPTION_KEY: | |
1336 | case FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS: | |
1337 | case FS_IOC_GET_ENCRYPTION_KEY_STATUS: | |
7ec9f3b4 | 1338 | case FS_IOC_GET_ENCRYPTION_NONCE: |
e9be2ac7 | 1339 | case EXT4_IOC_SHUTDOWN: |
0c9ec4be | 1340 | case FS_IOC_GETFSMAP: |
c93d8f88 EB |
1341 | case FS_IOC_ENABLE_VERITY: |
1342 | case FS_IOC_MEASURE_VERITY: | |
e17fe657 | 1343 | case FS_IOC_READ_VERITY_METADATA: |
b0c013e2 | 1344 | case EXT4_IOC_CLEAR_ES_CACHE: |
1ad3ea6e | 1345 | case EXT4_IOC_GETSTATE: |
bb5835ed | 1346 | case EXT4_IOC_GET_ES_CACHE: |
351a0a3f | 1347 | case EXT4_IOC_CHECKPOINT: |
b684b2ee | 1348 | break; |
ac27a0ec DK |
1349 | default: |
1350 | return -ENOIOCTLCMD; | |
1351 | } | |
5cdd7b2d | 1352 | return ext4_ioctl(file, cmd, (unsigned long) compat_ptr(arg)); |
ac27a0ec DK |
1353 | } |
1354 | #endif |