Commit 5f4eb9d5 authored by Christoph Hellwig's avatar Christoph Hellwig Committed by Jens Axboe

scsi: replace the fmode_t argument to scsi_cmd_allowed with a simple bool

Instead of passing a fmode_t and only checking it for FMODE_WRITE, pass
a bool open_for_write to prepare for callers that won't have the fmode_t.
Signed-off-by: default avatarChristoph Hellwig <hch@lst.de>
Reviewed-by: default avatarMartin K. Petersen <martin.petersen@oracle.com>
Reviewed-by: default avatarHannes Reinecke <hare@suse.de>
Acked-by: default avatarChristian Brauner <brauner@kernel.org>
Link: https://lore.kernel.org/r/20230608110258.189493-19-hch@lst.deSigned-off-by: default avatarJens Axboe <axboe@kernel.dk>
parent 81b1fb7d
...@@ -42,7 +42,7 @@ static int scsi_bsg_sg_io_fn(struct request_queue *q, struct sg_io_v4 *hdr, ...@@ -42,7 +42,7 @@ static int scsi_bsg_sg_io_fn(struct request_queue *q, struct sg_io_v4 *hdr,
if (copy_from_user(scmd->cmnd, uptr64(hdr->request), scmd->cmd_len)) if (copy_from_user(scmd->cmnd, uptr64(hdr->request), scmd->cmd_len))
goto out_put_request; goto out_put_request;
ret = -EPERM; ret = -EPERM;
if (!scsi_cmd_allowed(scmd->cmnd, mode)) if (!scsi_cmd_allowed(scmd->cmnd, mode & FMODE_WRITE))
goto out_put_request; goto out_put_request;
ret = 0; ret = 0;
......
...@@ -248,7 +248,7 @@ static int scsi_send_start_stop(struct scsi_device *sdev, int data) ...@@ -248,7 +248,7 @@ static int scsi_send_start_stop(struct scsi_device *sdev, int data)
* Only a subset of commands are allowed for unprivileged users. Commands used * Only a subset of commands are allowed for unprivileged users. Commands used
* to format the media, update the firmware, etc. are not permitted. * to format the media, update the firmware, etc. are not permitted.
*/ */
bool scsi_cmd_allowed(unsigned char *cmd, fmode_t mode) bool scsi_cmd_allowed(unsigned char *cmd, bool open_for_write)
{ {
/* root can do any command. */ /* root can do any command. */
if (capable(CAP_SYS_RAWIO)) if (capable(CAP_SYS_RAWIO))
...@@ -338,7 +338,7 @@ bool scsi_cmd_allowed(unsigned char *cmd, fmode_t mode) ...@@ -338,7 +338,7 @@ bool scsi_cmd_allowed(unsigned char *cmd, fmode_t mode)
case GPCMD_SET_READ_AHEAD: case GPCMD_SET_READ_AHEAD:
/* ZBC */ /* ZBC */
case ZBC_OUT: case ZBC_OUT:
return (mode & FMODE_WRITE); return open_for_write;
default: default:
return false; return false;
} }
...@@ -354,7 +354,7 @@ static int scsi_fill_sghdr_rq(struct scsi_device *sdev, struct request *rq, ...@@ -354,7 +354,7 @@ static int scsi_fill_sghdr_rq(struct scsi_device *sdev, struct request *rq,
return -EMSGSIZE; return -EMSGSIZE;
if (copy_from_user(scmd->cmnd, hdr->cmdp, hdr->cmd_len)) if (copy_from_user(scmd->cmnd, hdr->cmdp, hdr->cmd_len))
return -EFAULT; return -EFAULT;
if (!scsi_cmd_allowed(scmd->cmnd, mode)) if (!scsi_cmd_allowed(scmd->cmnd, mode & FMODE_WRITE))
return -EPERM; return -EPERM;
scmd->cmd_len = hdr->cmd_len; scmd->cmd_len = hdr->cmd_len;
...@@ -554,7 +554,7 @@ static int sg_scsi_ioctl(struct request_queue *q, fmode_t mode, ...@@ -554,7 +554,7 @@ static int sg_scsi_ioctl(struct request_queue *q, fmode_t mode,
goto error; goto error;
err = -EPERM; err = -EPERM;
if (!scsi_cmd_allowed(scmd->cmnd, mode)) if (!scsi_cmd_allowed(scmd->cmnd, mode & FMODE_WRITE))
goto error; goto error;
/* default. possible overridden later */ /* default. possible overridden later */
......
...@@ -237,7 +237,7 @@ static int sg_allow_access(struct file *filp, unsigned char *cmd) ...@@ -237,7 +237,7 @@ static int sg_allow_access(struct file *filp, unsigned char *cmd)
if (sfp->parentdp->device->type == TYPE_SCANNER) if (sfp->parentdp->device->type == TYPE_SCANNER)
return 0; return 0;
if (!scsi_cmd_allowed(cmd, filp->f_mode)) if (!scsi_cmd_allowed(cmd, filp->f_mode & FMODE_WRITE))
return -EPERM; return -EPERM;
return 0; return 0;
} }
......
...@@ -49,7 +49,7 @@ int scsi_ioctl(struct scsi_device *sdev, fmode_t mode, int cmd, ...@@ -49,7 +49,7 @@ int scsi_ioctl(struct scsi_device *sdev, fmode_t mode, int cmd,
void __user *arg); void __user *arg);
int get_sg_io_hdr(struct sg_io_hdr *hdr, const void __user *argp); int get_sg_io_hdr(struct sg_io_hdr *hdr, const void __user *argp);
int put_sg_io_hdr(const struct sg_io_hdr *hdr, void __user *argp); int put_sg_io_hdr(const struct sg_io_hdr *hdr, void __user *argp);
bool scsi_cmd_allowed(unsigned char *cmd, fmode_t mode); bool scsi_cmd_allowed(unsigned char *cmd, bool open_for_write);
#endif /* __KERNEL__ */ #endif /* __KERNEL__ */
#endif /* _SCSI_IOCTL_H */ #endif /* _SCSI_IOCTL_H */
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment