inode.c 4.3 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193
  1. // SPDX-License-Identifier: GPL-2.0-only
  2. /*
  3. * Copyright (C) 2012 Red Hat, Inc.
  4. * Copyright (C) 2012 Jeremy Kerr <jeremy.kerr@canonical.com>
  5. */
  6. #include <linux/efi.h>
  7. #include <linux/fs.h>
  8. #include <linux/ctype.h>
  9. #include <linux/kmemleak.h>
  10. #include <linux/slab.h>
  11. #include <linux/uuid.h>
  12. #include <linux/fileattr.h>
  13. #include "internal.h"
  14. static const struct inode_operations efivarfs_file_inode_operations;
  15. struct inode *efivarfs_get_inode(struct super_block *sb,
  16. const struct inode *dir, int mode,
  17. dev_t dev, bool is_removable)
  18. {
  19. struct inode *inode = new_inode(sb);
  20. struct efivarfs_fs_info *fsi = sb->s_fs_info;
  21. struct efivarfs_mount_opts *opts = &fsi->mount_opts;
  22. if (inode) {
  23. inode->i_uid = opts->uid;
  24. inode->i_gid = opts->gid;
  25. inode->i_ino = get_next_ino();
  26. inode->i_mode = mode;
  27. simple_inode_init_ts(inode);
  28. inode->i_flags = is_removable ? 0 : S_IMMUTABLE;
  29. switch (mode & S_IFMT) {
  30. case S_IFREG:
  31. inode->i_op = &efivarfs_file_inode_operations;
  32. inode->i_fop = &efivarfs_file_operations;
  33. break;
  34. case S_IFDIR:
  35. inode->i_op = &efivarfs_dir_inode_operations;
  36. inode->i_fop = &simple_dir_operations;
  37. inc_nlink(inode);
  38. break;
  39. }
  40. }
  41. return inode;
  42. }
  43. /*
  44. * Return true if 'str' is a valid efivarfs filename of the form,
  45. *
  46. * VariableName-12345678-1234-1234-1234-1234567891bc
  47. */
  48. static bool efivarfs_valid_name(const char *str, int len)
  49. {
  50. const char *s = str + len - EFI_VARIABLE_GUID_LEN;
  51. /*
  52. * We need a GUID, plus at least one letter for the variable name,
  53. * plus the '-' separator
  54. */
  55. if (len < EFI_VARIABLE_GUID_LEN + 2)
  56. return false;
  57. /* GUID must be preceded by a '-' */
  58. if (*(s - 1) != '-')
  59. return false;
  60. /*
  61. * Validate that 's' is of the correct format, e.g.
  62. *
  63. * 12345678-1234-1234-1234-123456789abc
  64. */
  65. return uuid_is_valid(s);
  66. }
  67. static int efivarfs_create(struct mnt_idmap *idmap, struct inode *dir,
  68. struct dentry *dentry, umode_t mode, bool excl)
  69. {
  70. struct efivarfs_fs_info *info = dir->i_sb->s_fs_info;
  71. struct inode *inode = NULL;
  72. struct efivar_entry *var;
  73. int namelen, i = 0, err = 0;
  74. bool is_removable = false;
  75. if (!efivarfs_valid_name(dentry->d_name.name, dentry->d_name.len))
  76. return -EINVAL;
  77. var = kzalloc(sizeof(struct efivar_entry), GFP_KERNEL);
  78. if (!var)
  79. return -ENOMEM;
  80. /* length of the variable name itself: remove GUID and separator */
  81. namelen = dentry->d_name.len - EFI_VARIABLE_GUID_LEN - 1;
  82. err = guid_parse(dentry->d_name.name + namelen + 1, &var->var.VendorGuid);
  83. if (err)
  84. goto out;
  85. if (guid_equal(&var->var.VendorGuid, &LINUX_EFI_RANDOM_SEED_TABLE_GUID)) {
  86. err = -EPERM;
  87. goto out;
  88. }
  89. if (efivar_variable_is_removable(var->var.VendorGuid,
  90. dentry->d_name.name, namelen))
  91. is_removable = true;
  92. inode = efivarfs_get_inode(dir->i_sb, dir, mode, 0, is_removable);
  93. if (!inode) {
  94. err = -ENOMEM;
  95. goto out;
  96. }
  97. for (i = 0; i < namelen; i++)
  98. var->var.VariableName[i] = dentry->d_name.name[i];
  99. var->var.VariableName[i] = '\0';
  100. inode->i_private = var;
  101. kmemleak_ignore(var);
  102. err = efivar_entry_add(var, &info->efivarfs_list);
  103. if (err)
  104. goto out;
  105. d_instantiate(dentry, inode);
  106. dget(dentry);
  107. out:
  108. if (err) {
  109. kfree(var);
  110. if (inode)
  111. iput(inode);
  112. }
  113. return err;
  114. }
  115. static int efivarfs_unlink(struct inode *dir, struct dentry *dentry)
  116. {
  117. struct efivar_entry *var = d_inode(dentry)->i_private;
  118. if (efivar_entry_delete(var))
  119. return -EINVAL;
  120. drop_nlink(d_inode(dentry));
  121. dput(dentry);
  122. return 0;
  123. };
  124. const struct inode_operations efivarfs_dir_inode_operations = {
  125. .lookup = simple_lookup,
  126. .unlink = efivarfs_unlink,
  127. .create = efivarfs_create,
  128. };
  129. static int
  130. efivarfs_fileattr_get(struct dentry *dentry, struct fileattr *fa)
  131. {
  132. unsigned int i_flags;
  133. unsigned int flags = 0;
  134. i_flags = d_inode(dentry)->i_flags;
  135. if (i_flags & S_IMMUTABLE)
  136. flags |= FS_IMMUTABLE_FL;
  137. fileattr_fill_flags(fa, flags);
  138. return 0;
  139. }
  140. static int
  141. efivarfs_fileattr_set(struct mnt_idmap *idmap,
  142. struct dentry *dentry, struct fileattr *fa)
  143. {
  144. unsigned int i_flags = 0;
  145. if (fileattr_has_fsx(fa))
  146. return -EOPNOTSUPP;
  147. if (fa->flags & ~FS_IMMUTABLE_FL)
  148. return -EOPNOTSUPP;
  149. if (fa->flags & FS_IMMUTABLE_FL)
  150. i_flags |= S_IMMUTABLE;
  151. inode_set_flags(d_inode(dentry), i_flags, S_IMMUTABLE);
  152. return 0;
  153. }
  154. static const struct inode_operations efivarfs_file_inode_operations = {
  155. .fileattr_get = efivarfs_fileattr_get,
  156. .fileattr_set = efivarfs_fileattr_set,
  157. };