Commit 23fc2702 authored by Tiger Yang's avatar Tiger Yang Committed by Mark Fasheh

ocfs2: add ocfs2_check_acl

This function is used to enhance permission checking with POSIX ACLs.
Signed-off-by: default avatarTiger Yang <tiger.yang@oracle.com>
Signed-off-by: default avatarMark Fasheh <mfasheh@suse.com>
parent 929fb014
...@@ -230,6 +230,21 @@ static int ocfs2_set_acl(handle_t *handle, ...@@ -230,6 +230,21 @@ static int ocfs2_set_acl(handle_t *handle,
return ret; return ret;
} }
int ocfs2_check_acl(struct inode *inode, int mask)
{
struct posix_acl *acl = ocfs2_get_acl(inode, ACL_TYPE_ACCESS);
if (IS_ERR(acl))
return PTR_ERR(acl);
if (acl) {
int ret = posix_acl_permission(inode, acl, mask);
posix_acl_release(acl);
return ret;
}
return -EAGAIN;
}
static size_t ocfs2_xattr_list_acl_access(struct inode *inode, static size_t ocfs2_xattr_list_acl_access(struct inode *inode,
char *list, char *list,
size_t list_len, size_t list_len,
......
...@@ -26,4 +26,14 @@ struct ocfs2_acl_entry { ...@@ -26,4 +26,14 @@ struct ocfs2_acl_entry {
__le32 e_id; __le32 e_id;
}; };
#ifdef CONFIG_OCFS2_FS_POSIX_ACL
extern int ocfs2_check_acl(struct inode *, int);
#else /* CONFIG_OCFS2_FS_POSIX_ACL*/
#define ocfs2_check_acl NULL
#endif /* CONFIG_OCFS2_FS_POSIX_ACL*/
#endif /* OCFS2_ACL_H */ #endif /* OCFS2_ACL_H */
...@@ -56,6 +56,7 @@ ...@@ -56,6 +56,7 @@
#include "suballoc.h" #include "suballoc.h"
#include "super.h" #include "super.h"
#include "xattr.h" #include "xattr.h"
#include "acl.h"
#include "buffer_head_io.h" #include "buffer_head_io.h"
...@@ -1035,7 +1036,7 @@ int ocfs2_permission(struct inode *inode, int mask) ...@@ -1035,7 +1036,7 @@ int ocfs2_permission(struct inode *inode, int mask)
goto out; goto out;
} }
ret = generic_permission(inode, mask, NULL); ret = generic_permission(inode, mask, ocfs2_check_acl);
ocfs2_inode_unlock(inode, 0); ocfs2_inode_unlock(inode, 0);
out: out:
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment