xref: /freebsd-12.1/sys/ufs/ufs/ufs_extattr.c (revision 2a3873b3)
1 /*-
2  * SPDX-License-Identifier: BSD-2-Clause-FreeBSD
3  *
4  * Copyright (c) 1999-2002 Robert N. M. Watson
5  * Copyright (c) 2002-2003 Networks Associates Technology, Inc.
6  * All rights reserved.
7  *
8  * This software was developed by Robert Watson for the TrustedBSD Project.
9  *
10  * This software was developed for the FreeBSD Project in part by Network
11  * Associates Laboratories, the Security Research Division of Network
12  * Associates, Inc. under DARPA/SPAWAR contract N66001-01-C-8035 ("CBOSS"),
13  * as part of the DARPA CHATS research program.
14  *
15  * Redistribution and use in source and binary forms, with or without
16  * modification, are permitted provided that the following conditions
17  * are met:
18  * 1. Redistributions of source code must retain the above copyright
19  *    notice, this list of conditions and the following disclaimer.
20  * 2. Redistributions in binary form must reproduce the above copyright
21  *    notice, this list of conditions and the following disclaimer in the
22  *    documentation and/or other materials provided with the distribution.
23  *
24  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
25  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
26  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
27  * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
28  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
29  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
30  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
31  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
32  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
33  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
34  * SUCH DAMAGE.
35  *
36  */
37 
38 /*
39  * Support for filesystem extended attribute: UFS-specific support functions.
40  */
41 
42 #include <sys/cdefs.h>
43 __FBSDID("$FreeBSD$");
44 
45 #include "opt_ufs.h"
46 
47 #include <sys/param.h>
48 #include <sys/systm.h>
49 #include <sys/kernel.h>
50 #include <sys/namei.h>
51 #include <sys/malloc.h>
52 #include <sys/fcntl.h>
53 #include <sys/priv.h>
54 #include <sys/proc.h>
55 #include <sys/vnode.h>
56 #include <sys/mount.h>
57 #include <sys/lock.h>
58 #include <sys/dirent.h>
59 #include <sys/extattr.h>
60 #include <sys/sx.h>
61 #include <sys/sysctl.h>
62 
63 #include <vm/uma.h>
64 
65 #include <ufs/ufs/dir.h>
66 #include <ufs/ufs/extattr.h>
67 #include <ufs/ufs/quota.h>
68 #include <ufs/ufs/ufsmount.h>
69 #include <ufs/ufs/inode.h>
70 #include <ufs/ufs/ufs_extern.h>
71 
72 #ifdef UFS_EXTATTR
73 
74 FEATURE(ufs_extattr, "ufs extended attribute support");
75 
76 static MALLOC_DEFINE(M_UFS_EXTATTR, "ufs_extattr", "ufs extended attribute");
77 
78 static int ufs_extattr_sync = 0;
79 SYSCTL_INT(_debug, OID_AUTO, ufs_extattr_sync, CTLFLAG_RW, &ufs_extattr_sync,
80     0, "");
81 
82 static int	ufs_extattr_valid_attrname(int attrnamespace,
83 		    const char *attrname);
84 static int	ufs_extattr_enable_with_open(struct ufsmount *ump,
85 		    struct vnode *vp, int attrnamespace, const char *attrname,
86 		    struct thread *td);
87 static int	ufs_extattr_enable(struct ufsmount *ump, int attrnamespace,
88 		    const char *attrname, struct vnode *backing_vnode,
89 		    struct thread *td);
90 static int	ufs_extattr_disable(struct ufsmount *ump, int attrnamespace,
91 		    const char *attrname, struct thread *td);
92 static int	ufs_extattr_get(struct vnode *vp, int attrnamespace,
93 		    const char *name, struct uio *uio, size_t *size,
94 		    struct ucred *cred, struct thread *td);
95 static int	ufs_extattr_set(struct vnode *vp, int attrnamespace,
96 		    const char *name, struct uio *uio, struct ucred *cred,
97 		    struct thread *td);
98 static int	ufs_extattr_rm(struct vnode *vp, int attrnamespace,
99 		    const char *name, struct ucred *cred, struct thread *td);
100 #ifdef UFS_EXTATTR_AUTOSTART
101 static int	ufs_extattr_autostart_locked(struct mount *mp,
102 		    struct thread *td);
103 #endif
104 static int	ufs_extattr_start_locked(struct ufsmount *ump,
105 		    struct thread *td);
106 
107 /*
108  * Per-FS attribute lock protecting attribute operations.
109  *
110  * XXXRW: Perhaps something more fine-grained would be appropriate, but at
111  * the end of the day we're going to contend on the vnode lock for the
112  * backing file anyway.
113  */
114 static void
ufs_extattr_uepm_lock(struct ufsmount * ump)115 ufs_extattr_uepm_lock(struct ufsmount *ump)
116 {
117 
118 	sx_xlock(&ump->um_extattr.uepm_lock);
119 }
120 
121 static void
ufs_extattr_uepm_unlock(struct ufsmount * ump)122 ufs_extattr_uepm_unlock(struct ufsmount *ump)
123 {
124 
125 	sx_xunlock(&ump->um_extattr.uepm_lock);
126 }
127 
128 /*-
129  * Determine whether the name passed is a valid name for an actual
130  * attribute.
131  *
132  * Invalid currently consists of:
133  *	 NULL pointer for attrname
134  *	 zero-length attrname (used to retrieve application attribute list)
135  */
136 static int
ufs_extattr_valid_attrname(int attrnamespace,const char * attrname)137 ufs_extattr_valid_attrname(int attrnamespace, const char *attrname)
138 {
139 
140 	if (attrname == NULL)
141 		return (0);
142 	if (strlen(attrname) == 0)
143 		return (0);
144 	return (1);
145 }
146 
147 /*
148  * Locate an attribute given a name and mountpoint.
149  * Must be holding uepm lock for the mount point.
150  */
151 static struct ufs_extattr_list_entry *
ufs_extattr_find_attr(struct ufsmount * ump,int attrnamespace,const char * attrname)152 ufs_extattr_find_attr(struct ufsmount *ump, int attrnamespace,
153     const char *attrname)
154 {
155 	struct ufs_extattr_list_entry *search_attribute;
156 
157 	sx_assert(&ump->um_extattr.uepm_lock, SA_XLOCKED);
158 
159 	for (search_attribute = LIST_FIRST(&ump->um_extattr.uepm_list);
160 	    search_attribute != NULL;
161 	    search_attribute = LIST_NEXT(search_attribute, uele_entries)) {
162 		if (!(strncmp(attrname, search_attribute->uele_attrname,
163 		    UFS_EXTATTR_MAXEXTATTRNAME)) &&
164 		    (attrnamespace == search_attribute->uele_attrnamespace)) {
165 			return (search_attribute);
166 		}
167 	}
168 
169 	return (0);
170 }
171 
172 /*
173  * Initialize per-FS structures supporting extended attributes.  Do not
174  * start extended attributes yet.
175  */
176 void
ufs_extattr_uepm_init(struct ufs_extattr_per_mount * uepm)177 ufs_extattr_uepm_init(struct ufs_extattr_per_mount *uepm)
178 {
179 
180 	uepm->uepm_flags = 0;
181 	LIST_INIT(&uepm->uepm_list);
182 	sx_init(&uepm->uepm_lock, "ufs_extattr_sx");
183 	uepm->uepm_flags |= UFS_EXTATTR_UEPM_INITIALIZED;
184 }
185 
186 /*
187  * Destroy per-FS structures supporting extended attributes.  Assumes
188  * that EAs have already been stopped, and will panic if not.
189  */
190 void
ufs_extattr_uepm_destroy(struct ufs_extattr_per_mount * uepm)191 ufs_extattr_uepm_destroy(struct ufs_extattr_per_mount *uepm)
192 {
193 
194 	if (!(uepm->uepm_flags & UFS_EXTATTR_UEPM_INITIALIZED))
195 		panic("ufs_extattr_uepm_destroy: not initialized");
196 
197 	if ((uepm->uepm_flags & UFS_EXTATTR_UEPM_STARTED))
198 		panic("ufs_extattr_uepm_destroy: called while still started");
199 
200 	/*
201 	 * It's not clear that either order for the next two lines is
202 	 * ideal, and it should never be a problem if this is only called
203 	 * during unmount, and with vfs_busy().
204 	 */
205 	uepm->uepm_flags &= ~UFS_EXTATTR_UEPM_INITIALIZED;
206 	sx_destroy(&uepm->uepm_lock);
207 }
208 
209 /*
210  * Start extended attribute support on an FS.
211  */
212 int
ufs_extattr_start(struct mount * mp,struct thread * td)213 ufs_extattr_start(struct mount *mp, struct thread *td)
214 {
215 	struct ufsmount *ump;
216 	int error = 0;
217 
218 	ump = VFSTOUFS(mp);
219 
220 	ufs_extattr_uepm_lock(ump);
221 	error = ufs_extattr_start_locked(ump, td);
222 	ufs_extattr_uepm_unlock(ump);
223 	return (error);
224 }
225 
226 static int
ufs_extattr_start_locked(struct ufsmount * ump,struct thread * td)227 ufs_extattr_start_locked(struct ufsmount *ump, struct thread *td)
228 {
229 	if (!(ump->um_extattr.uepm_flags & UFS_EXTATTR_UEPM_INITIALIZED))
230 		return (EOPNOTSUPP);
231 	if (ump->um_extattr.uepm_flags & UFS_EXTATTR_UEPM_STARTED)
232 		return (EBUSY);
233 
234 	ump->um_extattr.uepm_flags |= UFS_EXTATTR_UEPM_STARTED;
235 	ump->um_extattr.uepm_ucred = crhold(td->td_ucred);
236 	return (0);
237 }
238 
239 #ifdef UFS_EXTATTR_AUTOSTART
240 /*
241  * Helper routine: given a locked parent directory and filename, return
242  * the locked vnode of the inode associated with the name.  Will not
243  * follow symlinks, may return any type of vnode.  Lock on parent will
244  * be released even in the event of a failure.  In the event that the
245  * target is the parent (i.e., "."), there will be two references and
246  * one lock, requiring the caller to possibly special-case.
247  */
248 #define	UE_GETDIR_LOCKPARENT	1
249 #define	UE_GETDIR_LOCKPARENT_DONT	2
250 static int
ufs_extattr_lookup(struct vnode * start_dvp,int lockparent,char * dirname,struct vnode ** vp,struct thread * td)251 ufs_extattr_lookup(struct vnode *start_dvp, int lockparent, char *dirname,
252     struct vnode **vp, struct thread *td)
253 {
254 	struct vop_cachedlookup_args vargs;
255 	struct componentname cnp;
256 	struct vnode *target_vp;
257 	int error;
258 
259 	bzero(&cnp, sizeof(cnp));
260 	cnp.cn_nameiop = LOOKUP;
261 	cnp.cn_flags = ISLASTCN;
262 	if (lockparent == UE_GETDIR_LOCKPARENT)
263 		cnp.cn_flags |= LOCKPARENT;
264 	cnp.cn_lkflags = LK_EXCLUSIVE;
265 	cnp.cn_thread = td;
266 	cnp.cn_cred = td->td_ucred;
267 	cnp.cn_pnbuf = uma_zalloc(namei_zone, M_WAITOK);
268 	cnp.cn_nameptr = cnp.cn_pnbuf;
269 	error = copystr(dirname, cnp.cn_pnbuf, MAXPATHLEN,
270 	    (size_t *) &cnp.cn_namelen);
271 	if (error) {
272 		if (lockparent == UE_GETDIR_LOCKPARENT_DONT) {
273 			VOP_UNLOCK(start_dvp, 0);
274 		}
275 		uma_zfree(namei_zone, cnp.cn_pnbuf);
276 		printf("ufs_extattr_lookup: copystr failed\n");
277 		return (error);
278 	}
279 	cnp.cn_namelen--;	/* trim nul termination */
280 	vargs.a_gen.a_desc = NULL;
281 	vargs.a_dvp = start_dvp;
282 	vargs.a_vpp = &target_vp;
283 	vargs.a_cnp = &cnp;
284 	error = ufs_lookup(&vargs);
285 	uma_zfree(namei_zone, cnp.cn_pnbuf);
286 	if (error) {
287 		/*
288 		 * Error condition, may have to release the lock on the parent
289 		 * if ufs_lookup() didn't.
290 		 */
291 		if (lockparent == UE_GETDIR_LOCKPARENT_DONT)
292 			VOP_UNLOCK(start_dvp, 0);
293 
294 		/*
295 		 * Check that ufs_lookup() didn't release the lock when we
296 		 * didn't want it to.
297 		 */
298 		if (lockparent == UE_GETDIR_LOCKPARENT)
299 			ASSERT_VOP_LOCKED(start_dvp, "ufs_extattr_lookup");
300 
301 		return (error);
302 	}
303 /*
304 	if (target_vp == start_dvp)
305 		panic("ufs_extattr_lookup: target_vp == start_dvp");
306 */
307 
308 	if (target_vp != start_dvp && lockparent == UE_GETDIR_LOCKPARENT_DONT)
309 		VOP_UNLOCK(start_dvp, 0);
310 
311 	if (lockparent == UE_GETDIR_LOCKPARENT)
312 		ASSERT_VOP_LOCKED(start_dvp, "ufs_extattr_lookup");
313 
314 	/* printf("ufs_extattr_lookup: success\n"); */
315 	*vp = target_vp;
316 	return (0);
317 }
318 #endif /* !UFS_EXTATTR_AUTOSTART */
319 
320 /*
321  * Enable an EA using the passed filesystem, backing vnode, attribute name,
322  * namespace, and proc.  Will perform a VOP_OPEN() on the vp, so expects vp
323  * to be locked when passed in.  The vnode will be returned unlocked,
324  * regardless of success/failure of the function.  As a result, the caller
325  * will always need to vrele(), but not vput().
326  */
327 static int
ufs_extattr_enable_with_open(struct ufsmount * ump,struct vnode * vp,int attrnamespace,const char * attrname,struct thread * td)328 ufs_extattr_enable_with_open(struct ufsmount *ump, struct vnode *vp,
329     int attrnamespace, const char *attrname, struct thread *td)
330 {
331 	int error;
332 
333 	error = VOP_OPEN(vp, FREAD|FWRITE, td->td_ucred, td, NULL);
334 	if (error) {
335 		printf("ufs_extattr_enable_with_open.VOP_OPEN(): failed "
336 		    "with %d\n", error);
337 		VOP_UNLOCK(vp, 0);
338 		return (error);
339 	}
340 
341 	error = VOP_ADD_WRITECOUNT(vp, 1);
342 	if (error != 0) {
343 		VOP_CLOSE(vp, FREAD | FWRITE, td->td_ucred, td);
344 		VOP_UNLOCK(vp, 0);
345 		return (error);
346 	}
347 	CTR3(KTR_VFS, "%s: vp %p v_writecount increased to %d", __func__, vp,
348 	    vp->v_writecount);
349 
350 	vref(vp);
351 
352 	VOP_UNLOCK(vp, 0);
353 
354 	error = ufs_extattr_enable(ump, attrnamespace, attrname, vp, td);
355 	if (error != 0)
356 		vn_close(vp, FREAD|FWRITE, td->td_ucred, td);
357 	return (error);
358 }
359 
360 #ifdef UFS_EXTATTR_AUTOSTART
361 /*
362  * Given a locked directory vnode, iterate over the names in the directory
363  * and use ufs_extattr_lookup() to retrieve locked vnodes of potential
364  * attribute files.  Then invoke ufs_extattr_enable_with_open() on each
365  * to attempt to start the attribute.  Leaves the directory locked on
366  * exit.
367  */
368 static int
ufs_extattr_iterate_directory(struct ufsmount * ump,struct vnode * dvp,int attrnamespace,struct thread * td)369 ufs_extattr_iterate_directory(struct ufsmount *ump, struct vnode *dvp,
370     int attrnamespace, struct thread *td)
371 {
372 	struct vop_readdir_args vargs;
373 	struct dirent *dp, *edp;
374 	struct vnode *attr_vp;
375 	struct uio auio;
376 	struct iovec aiov;
377 	char *dirbuf;
378 	int error, eofflag = 0;
379 
380 	if (dvp->v_type != VDIR)
381 		return (ENOTDIR);
382 
383 	dirbuf = malloc(DIRBLKSIZ, M_TEMP, M_WAITOK);
384 
385 	auio.uio_iov = &aiov;
386 	auio.uio_iovcnt = 1;
387 	auio.uio_rw = UIO_READ;
388 	auio.uio_segflg = UIO_SYSSPACE;
389 	auio.uio_td = td;
390 	auio.uio_offset = 0;
391 
392 	vargs.a_gen.a_desc = NULL;
393 	vargs.a_vp = dvp;
394 	vargs.a_uio = &auio;
395 	vargs.a_cred = td->td_ucred;
396 	vargs.a_eofflag = &eofflag;
397 	vargs.a_ncookies = NULL;
398 	vargs.a_cookies = NULL;
399 
400 	while (!eofflag) {
401 		auio.uio_resid = DIRBLKSIZ;
402 		aiov.iov_base = dirbuf;
403 		aiov.iov_len = DIRBLKSIZ;
404 		error = ufs_readdir(&vargs);
405 		if (error) {
406 			printf("ufs_extattr_iterate_directory: ufs_readdir "
407 			    "%d\n", error);
408 			return (error);
409 		}
410 
411 		edp = (struct dirent *)&dirbuf[DIRBLKSIZ - auio.uio_resid];
412 		for (dp = (struct dirent *)dirbuf; dp < edp; ) {
413 			if (dp->d_reclen == 0)
414 				break;
415 			error = ufs_extattr_lookup(dvp, UE_GETDIR_LOCKPARENT,
416 			    dp->d_name, &attr_vp, td);
417 			if (error) {
418 				printf("ufs_extattr_iterate_directory: lookup "
419 				    "%s %d\n", dp->d_name, error);
420 			} else if (attr_vp == dvp) {
421 				vrele(attr_vp);
422 			} else if (attr_vp->v_type != VREG) {
423 				vput(attr_vp);
424 			} else {
425 				error = ufs_extattr_enable_with_open(ump,
426 				    attr_vp, attrnamespace, dp->d_name, td);
427 				vrele(attr_vp);
428 				if (error) {
429 					printf("ufs_extattr_iterate_directory: "
430 					    "enable %s %d\n", dp->d_name,
431 					    error);
432 				} else if (bootverbose) {
433 					printf("UFS autostarted EA %s\n",
434 					    dp->d_name);
435 				}
436 			}
437 			dp = (struct dirent *) ((char *)dp + dp->d_reclen);
438 			if (dp >= edp)
439 				break;
440 		}
441 	}
442 	free(dirbuf, M_TEMP);
443 
444 	return (0);
445 }
446 
447 /*
448  * Auto-start of extended attributes, to be executed (optionally) at
449  * mount-time.
450  */
451 int
ufs_extattr_autostart(struct mount * mp,struct thread * td)452 ufs_extattr_autostart(struct mount *mp, struct thread *td)
453 {
454 	struct ufsmount *ump;
455 	int error;
456 
457 	ump = VFSTOUFS(mp);
458 	ufs_extattr_uepm_lock(ump);
459 	error = ufs_extattr_autostart_locked(mp, td);
460 	ufs_extattr_uepm_unlock(ump);
461 	return (error);
462 }
463 
464 static int
ufs_extattr_autostart_locked(struct mount * mp,struct thread * td)465 ufs_extattr_autostart_locked(struct mount *mp, struct thread *td)
466 {
467 	struct vnode *rvp, *attr_dvp, *attr_system_dvp, *attr_user_dvp;
468 	struct ufsmount *ump = VFSTOUFS(mp);
469 	int error;
470 
471 	/*
472 	 * UFS_EXTATTR applies only to UFS1, as UFS2 uses native extended
473 	 * attributes, so don't autostart.
474 	 */
475 	if (ump->um_fstype != UFS1)
476 		return (0);
477 
478 	/*
479 	 * Does UFS_EXTATTR_FSROOTSUBDIR exist off the filesystem root?
480 	 * If so, automatically start EA's.
481 	 */
482 	error = VFS_ROOT(mp, LK_EXCLUSIVE, &rvp);
483 	if (error) {
484 		printf("ufs_extattr_autostart.VFS_ROOT() returned %d\n",
485 		    error);
486 		return (error);
487 	}
488 
489 	error = ufs_extattr_lookup(rvp, UE_GETDIR_LOCKPARENT_DONT,
490 	    UFS_EXTATTR_FSROOTSUBDIR, &attr_dvp, td);
491 	if (error) {
492 		/* rvp ref'd but now unlocked */
493 		vrele(rvp);
494 		return (error);
495 	}
496 	if (rvp == attr_dvp) {
497 		/* Should never happen. */
498 		vput(rvp);
499 		vrele(attr_dvp);
500 		return (EINVAL);
501 	}
502 	vrele(rvp);
503 
504 	if (attr_dvp->v_type != VDIR) {
505 		printf("ufs_extattr_autostart: %s != VDIR\n",
506 		    UFS_EXTATTR_FSROOTSUBDIR);
507 		goto return_vput_attr_dvp;
508 	}
509 
510 	error = ufs_extattr_start_locked(ump, td);
511 	if (error) {
512 		printf("ufs_extattr_autostart: ufs_extattr_start failed (%d)\n",
513 		    error);
514 		goto return_vput_attr_dvp;
515 	}
516 
517 	/*
518 	 * Look for two subdirectories: UFS_EXTATTR_SUBDIR_SYSTEM,
519 	 * UFS_EXTATTR_SUBDIR_USER.  For each, iterate over the sub-directory,
520 	 * and start with appropriate type.  Failures in either don't
521 	 * result in an over-all failure.  attr_dvp is left locked to
522 	 * be cleaned up on exit.
523 	 */
524 	error = ufs_extattr_lookup(attr_dvp, UE_GETDIR_LOCKPARENT,
525 	    UFS_EXTATTR_SUBDIR_SYSTEM, &attr_system_dvp, td);
526 	if (!error) {
527 		error = ufs_extattr_iterate_directory(VFSTOUFS(mp),
528 		    attr_system_dvp, EXTATTR_NAMESPACE_SYSTEM, td);
529 		if (error)
530 			printf("ufs_extattr_iterate_directory returned %d\n",
531 			    error);
532 		vput(attr_system_dvp);
533 	}
534 
535 	error = ufs_extattr_lookup(attr_dvp, UE_GETDIR_LOCKPARENT,
536 	    UFS_EXTATTR_SUBDIR_USER, &attr_user_dvp, td);
537 	if (!error) {
538 		error = ufs_extattr_iterate_directory(VFSTOUFS(mp),
539 		    attr_user_dvp, EXTATTR_NAMESPACE_USER, td);
540 		if (error)
541 			printf("ufs_extattr_iterate_directory returned %d\n",
542 			    error);
543 		vput(attr_user_dvp);
544 	}
545 
546 	/* Mask startup failures in sub-directories. */
547 	error = 0;
548 
549 return_vput_attr_dvp:
550 	vput(attr_dvp);
551 
552 	return (error);
553 }
554 #endif /* !UFS_EXTATTR_AUTOSTART */
555 
556 /*
557  * Stop extended attribute support on an FS.
558  */
559 int
ufs_extattr_stop(struct mount * mp,struct thread * td)560 ufs_extattr_stop(struct mount *mp, struct thread *td)
561 {
562 	struct ufs_extattr_list_entry *uele;
563 	struct ufsmount *ump = VFSTOUFS(mp);
564 	int error = 0;
565 
566 	ufs_extattr_uepm_lock(ump);
567 
568 	if (!(ump->um_extattr.uepm_flags & UFS_EXTATTR_UEPM_STARTED)) {
569 		error = EOPNOTSUPP;
570 		goto unlock;
571 	}
572 
573 	while ((uele = LIST_FIRST(&ump->um_extattr.uepm_list)) != NULL) {
574 		ufs_extattr_disable(ump, uele->uele_attrnamespace,
575 		    uele->uele_attrname, td);
576 	}
577 
578 	ump->um_extattr.uepm_flags &= ~UFS_EXTATTR_UEPM_STARTED;
579 
580 	crfree(ump->um_extattr.uepm_ucred);
581 	ump->um_extattr.uepm_ucred = NULL;
582 
583 unlock:
584 	ufs_extattr_uepm_unlock(ump);
585 
586 	return (error);
587 }
588 
589 /*
590  * Enable a named attribute on the specified filesystem; provide an
591  * unlocked backing vnode to hold the attribute data.
592  */
593 static int
ufs_extattr_enable(struct ufsmount * ump,int attrnamespace,const char * attrname,struct vnode * backing_vnode,struct thread * td)594 ufs_extattr_enable(struct ufsmount *ump, int attrnamespace,
595     const char *attrname, struct vnode *backing_vnode, struct thread *td)
596 {
597 	struct ufs_extattr_list_entry *attribute;
598 	struct iovec aiov;
599 	struct uio auio;
600 	int error = 0;
601 
602 	if (!ufs_extattr_valid_attrname(attrnamespace, attrname))
603 		return (EINVAL);
604 	if (backing_vnode->v_type != VREG)
605 		return (EINVAL);
606 
607 	attribute = malloc(sizeof(struct ufs_extattr_list_entry),
608 	    M_UFS_EXTATTR, M_WAITOK);
609 
610 	if (!(ump->um_extattr.uepm_flags & UFS_EXTATTR_UEPM_STARTED)) {
611 		error = EOPNOTSUPP;
612 		goto free_exit;
613 	}
614 
615 	if (ufs_extattr_find_attr(ump, attrnamespace, attrname)) {
616 		error = EEXIST;
617 		goto free_exit;
618 	}
619 
620 	strncpy(attribute->uele_attrname, attrname,
621 	    UFS_EXTATTR_MAXEXTATTRNAME);
622 	attribute->uele_attrnamespace = attrnamespace;
623 	bzero(&attribute->uele_fileheader,
624 	    sizeof(struct ufs_extattr_fileheader));
625 
626 	attribute->uele_backing_vnode = backing_vnode;
627 
628 	auio.uio_iov = &aiov;
629 	auio.uio_iovcnt = 1;
630 	aiov.iov_base = (caddr_t) &attribute->uele_fileheader;
631 	aiov.iov_len = sizeof(struct ufs_extattr_fileheader);
632 	auio.uio_resid = sizeof(struct ufs_extattr_fileheader);
633 	auio.uio_offset = (off_t) 0;
634 	auio.uio_segflg = UIO_SYSSPACE;
635 	auio.uio_rw = UIO_READ;
636 	auio.uio_td = td;
637 
638 	vn_lock(backing_vnode, LK_SHARED | LK_RETRY);
639 	error = VOP_READ(backing_vnode, &auio, IO_NODELOCKED,
640 	    ump->um_extattr.uepm_ucred);
641 
642 	if (error)
643 		goto unlock_free_exit;
644 
645 	if (auio.uio_resid != 0) {
646 		printf("ufs_extattr_enable: malformed attribute header\n");
647 		error = EINVAL;
648 		goto unlock_free_exit;
649 	}
650 
651 	if (attribute->uele_fileheader.uef_magic != UFS_EXTATTR_MAGIC) {
652 		printf("ufs_extattr_enable: invalid attribute header magic\n");
653 		error = EINVAL;
654 		goto unlock_free_exit;
655 	}
656 
657 	if (attribute->uele_fileheader.uef_version != UFS_EXTATTR_VERSION) {
658 		printf("ufs_extattr_enable: incorrect attribute header "
659 		    "version\n");
660 		error = EINVAL;
661 		goto unlock_free_exit;
662 	}
663 
664 	ASSERT_VOP_LOCKED(backing_vnode, "ufs_extattr_enable");
665 	LIST_INSERT_HEAD(&ump->um_extattr.uepm_list, attribute,
666 	    uele_entries);
667 
668 	VOP_UNLOCK(backing_vnode, 0);
669 	return (0);
670 
671 unlock_free_exit:
672 	VOP_UNLOCK(backing_vnode, 0);
673 
674 free_exit:
675 	free(attribute, M_UFS_EXTATTR);
676 	return (error);
677 }
678 
679 /*
680  * Disable extended attribute support on an FS.
681  */
682 static int
ufs_extattr_disable(struct ufsmount * ump,int attrnamespace,const char * attrname,struct thread * td)683 ufs_extattr_disable(struct ufsmount *ump, int attrnamespace,
684     const char *attrname, struct thread *td)
685 {
686 	struct ufs_extattr_list_entry *uele;
687 	int error = 0;
688 
689 	if (!ufs_extattr_valid_attrname(attrnamespace, attrname))
690 		return (EINVAL);
691 
692 	uele = ufs_extattr_find_attr(ump, attrnamespace, attrname);
693 	if (!uele)
694 		return (ENOATTR);
695 
696 	LIST_REMOVE(uele, uele_entries);
697 
698 	vn_lock(uele->uele_backing_vnode, LK_SHARED | LK_RETRY);
699 	ASSERT_VOP_LOCKED(uele->uele_backing_vnode, "ufs_extattr_disable");
700 	VOP_UNLOCK(uele->uele_backing_vnode, 0);
701 	error = vn_close(uele->uele_backing_vnode, FREAD|FWRITE,
702 	    td->td_ucred, td);
703 
704 	free(uele, M_UFS_EXTATTR);
705 
706 	return (error);
707 }
708 
709 /*
710  * VFS call to manage extended attributes in UFS.  If filename_vp is
711  * non-NULL, it must be passed in locked, and regardless of errors in
712  * processing, will be unlocked.
713  */
714 int
ufs_extattrctl(struct mount * mp,int cmd,struct vnode * filename_vp,int attrnamespace,const char * attrname)715 ufs_extattrctl(struct mount *mp, int cmd, struct vnode *filename_vp,
716     int attrnamespace, const char *attrname)
717 {
718 	struct ufsmount *ump = VFSTOUFS(mp);
719 	struct thread *td = curthread;
720 	int error;
721 
722 	/*
723 	 * Processes with privilege, but in jail, are not allowed to
724 	 * configure extended attributes.
725 	 */
726 	error = priv_check(td, PRIV_UFS_EXTATTRCTL);
727 	if (error) {
728 		if (filename_vp != NULL)
729 			VOP_UNLOCK(filename_vp, 0);
730 		return (error);
731 	}
732 
733 	/*
734 	 * We only allow extattrctl(2) on UFS1 file systems, as UFS2 uses
735 	 * native extended attributes.
736 	 */
737 	if (ump->um_fstype != UFS1) {
738 		if (filename_vp != NULL)
739 			VOP_UNLOCK(filename_vp, 0);
740 		return (EOPNOTSUPP);
741 	}
742 
743 	switch(cmd) {
744 	case UFS_EXTATTR_CMD_START:
745 		if (filename_vp != NULL) {
746 			VOP_UNLOCK(filename_vp, 0);
747 			return (EINVAL);
748 		}
749 		if (attrname != NULL)
750 			return (EINVAL);
751 
752 		error = ufs_extattr_start(mp, td);
753 
754 		return (error);
755 
756 	case UFS_EXTATTR_CMD_STOP:
757 		if (filename_vp != NULL) {
758 			VOP_UNLOCK(filename_vp, 0);
759 			return (EINVAL);
760 		}
761 		if (attrname != NULL)
762 			return (EINVAL);
763 
764 		error = ufs_extattr_stop(mp, td);
765 
766 		return (error);
767 
768 	case UFS_EXTATTR_CMD_ENABLE:
769 
770 		if (filename_vp == NULL)
771 			return (EINVAL);
772 		if (attrname == NULL) {
773 			VOP_UNLOCK(filename_vp, 0);
774 			return (EINVAL);
775 		}
776 
777 		/*
778 		 * ufs_extattr_enable_with_open() will always unlock the
779 		 * vnode, regardless of failure.
780 		 */
781 		ufs_extattr_uepm_lock(ump);
782 		error = ufs_extattr_enable_with_open(ump, filename_vp,
783 		    attrnamespace, attrname, td);
784 		ufs_extattr_uepm_unlock(ump);
785 
786 		return (error);
787 
788 	case UFS_EXTATTR_CMD_DISABLE:
789 
790 		if (filename_vp != NULL) {
791 			VOP_UNLOCK(filename_vp, 0);
792 			return (EINVAL);
793 		}
794 		if (attrname == NULL)
795 			return (EINVAL);
796 
797 		ufs_extattr_uepm_lock(ump);
798 		error = ufs_extattr_disable(ump, attrnamespace, attrname,
799 		    td);
800 		ufs_extattr_uepm_unlock(ump);
801 
802 		return (error);
803 
804 	default:
805 		return (EINVAL);
806 	}
807 }
808 
809 /*
810  * Vnode operating to retrieve a named extended attribute.
811  */
812 int
ufs_getextattr(struct vop_getextattr_args * ap)813 ufs_getextattr(struct vop_getextattr_args *ap)
814 /*
815 vop_getextattr {
816 	IN struct vnode *a_vp;
817 	IN int a_attrnamespace;
818 	IN const char *a_name;
819 	INOUT struct uio *a_uio;
820 	OUT size_t *a_size;
821 	IN struct ucred *a_cred;
822 	IN struct thread *a_td;
823 };
824 */
825 {
826 	struct mount *mp = ap->a_vp->v_mount;
827 	struct ufsmount *ump = VFSTOUFS(mp);
828 	int error;
829 
830 	ufs_extattr_uepm_lock(ump);
831 
832 	error = ufs_extattr_get(ap->a_vp, ap->a_attrnamespace, ap->a_name,
833 	    ap->a_uio, ap->a_size, ap->a_cred, ap->a_td);
834 
835 	ufs_extattr_uepm_unlock(ump);
836 
837 	return (error);
838 }
839 
840 /*
841  * Real work associated with retrieving a named attribute--assumes that
842  * the attribute lock has already been grabbed.
843  */
844 static int
ufs_extattr_get(struct vnode * vp,int attrnamespace,const char * name,struct uio * uio,size_t * size,struct ucred * cred,struct thread * td)845 ufs_extattr_get(struct vnode *vp, int attrnamespace, const char *name,
846     struct uio *uio, size_t *size, struct ucred *cred, struct thread *td)
847 {
848 	struct ufs_extattr_list_entry *attribute;
849 	struct ufs_extattr_header ueh;
850 	struct iovec local_aiov;
851 	struct uio local_aio;
852 	struct mount *mp = vp->v_mount;
853 	struct ufsmount *ump = VFSTOUFS(mp);
854 	struct inode *ip = VTOI(vp);
855 	off_t base_offset;
856 	size_t len, old_len;
857 	int error = 0;
858 
859 	if (!(ump->um_extattr.uepm_flags & UFS_EXTATTR_UEPM_STARTED))
860 		return (EOPNOTSUPP);
861 
862 	if (strlen(name) == 0)
863 		return (EINVAL);
864 
865 	error = extattr_check_cred(vp, attrnamespace, cred, td, VREAD);
866 	if (error)
867 		return (error);
868 
869 	attribute = ufs_extattr_find_attr(ump, attrnamespace, name);
870 	if (!attribute)
871 		return (ENOATTR);
872 
873 	/*
874 	 * Allow only offsets of zero to encourage the read/replace
875 	 * extended attribute semantic.  Otherwise we can't guarantee
876 	 * atomicity, as we don't provide locks for extended attributes.
877 	 */
878 	if (uio != NULL && uio->uio_offset != 0)
879 		return (ENXIO);
880 
881 	/*
882 	 * Find base offset of header in file based on file header size, and
883 	 * data header size + maximum data size, indexed by inode number.
884 	 */
885 	base_offset = sizeof(struct ufs_extattr_fileheader) +
886 	    ip->i_number * (sizeof(struct ufs_extattr_header) +
887 	    attribute->uele_fileheader.uef_size);
888 
889 	/*
890 	 * Read in the data header to see if the data is defined, and if so
891 	 * how much.
892 	 */
893 	bzero(&ueh, sizeof(struct ufs_extattr_header));
894 	local_aiov.iov_base = (caddr_t) &ueh;
895 	local_aiov.iov_len = sizeof(struct ufs_extattr_header);
896 	local_aio.uio_iov = &local_aiov;
897 	local_aio.uio_iovcnt = 1;
898 	local_aio.uio_rw = UIO_READ;
899 	local_aio.uio_segflg = UIO_SYSSPACE;
900 	local_aio.uio_td = td;
901 	local_aio.uio_offset = base_offset;
902 	local_aio.uio_resid = sizeof(struct ufs_extattr_header);
903 
904 	/*
905 	 * Acquire locks.
906 	 *
907 	 * Don't need to get a lock on the backing file if the getattr is
908 	 * being applied to the backing file, as the lock is already held.
909 	 */
910 	if (attribute->uele_backing_vnode != vp)
911 		vn_lock(attribute->uele_backing_vnode, LK_SHARED | LK_RETRY);
912 
913 	error = VOP_READ(attribute->uele_backing_vnode, &local_aio,
914 	    IO_NODELOCKED, ump->um_extattr.uepm_ucred);
915 	if (error)
916 		goto vopunlock_exit;
917 
918 	/* Defined? */
919 	if ((ueh.ueh_flags & UFS_EXTATTR_ATTR_FLAG_INUSE) == 0) {
920 		error = ENOATTR;
921 		goto vopunlock_exit;
922 	}
923 
924 	/* Valid for the current inode generation? */
925 	if (ueh.ueh_i_gen != ip->i_gen) {
926 		/*
927 		 * The inode itself has a different generation number
928 		 * than the attribute data.  For now, the best solution
929 		 * is to coerce this to undefined, and let it get cleaned
930 		 * up by the next write or extattrctl clean.
931 		 */
932 		printf("ufs_extattr_get (%s): inode number inconsistency (%d, %ju)\n",
933 		    mp->mnt_stat.f_mntonname, ueh.ueh_i_gen, (uintmax_t)ip->i_gen);
934 		error = ENOATTR;
935 		goto vopunlock_exit;
936 	}
937 
938 	/* Local size consistency check. */
939 	if (ueh.ueh_len > attribute->uele_fileheader.uef_size) {
940 		error = ENXIO;
941 		goto vopunlock_exit;
942 	}
943 
944 	/* Return full data size if caller requested it. */
945 	if (size != NULL)
946 		*size = ueh.ueh_len;
947 
948 	/* Return data if the caller requested it. */
949 	if (uio != NULL) {
950 		/* Allow for offset into the attribute data. */
951 		uio->uio_offset = base_offset + sizeof(struct
952 		    ufs_extattr_header);
953 
954 		/*
955 		 * Figure out maximum to transfer -- use buffer size and
956 		 * local data limit.
957 		 */
958 		len = MIN(uio->uio_resid, ueh.ueh_len);
959 		old_len = uio->uio_resid;
960 		uio->uio_resid = len;
961 
962 		error = VOP_READ(attribute->uele_backing_vnode, uio,
963 		    IO_NODELOCKED, ump->um_extattr.uepm_ucred);
964 		if (error)
965 			goto vopunlock_exit;
966 
967 		uio->uio_resid = old_len - (len - uio->uio_resid);
968 	}
969 
970 vopunlock_exit:
971 
972 	if (uio != NULL)
973 		uio->uio_offset = 0;
974 
975 	if (attribute->uele_backing_vnode != vp)
976 		VOP_UNLOCK(attribute->uele_backing_vnode, 0);
977 
978 	return (error);
979 }
980 
981 /*
982  * Vnode operation to remove a named attribute.
983  */
984 int
ufs_deleteextattr(struct vop_deleteextattr_args * ap)985 ufs_deleteextattr(struct vop_deleteextattr_args *ap)
986 /*
987 vop_deleteextattr {
988 	IN struct vnode *a_vp;
989 	IN int a_attrnamespace;
990 	IN const char *a_name;
991 	IN struct ucred *a_cred;
992 	IN struct thread *a_td;
993 };
994 */
995 {
996 	struct mount *mp = ap->a_vp->v_mount;
997 	struct ufsmount *ump = VFSTOUFS(mp);
998 	int error;
999 
1000 	ufs_extattr_uepm_lock(ump);
1001 
1002 	error = ufs_extattr_rm(ap->a_vp, ap->a_attrnamespace, ap->a_name,
1003 	    ap->a_cred, ap->a_td);
1004 
1005 
1006 	ufs_extattr_uepm_unlock(ump);
1007 
1008 	return (error);
1009 }
1010 
1011 /*
1012  * Vnode operation to set a named attribute.
1013  */
1014 int
ufs_setextattr(struct vop_setextattr_args * ap)1015 ufs_setextattr(struct vop_setextattr_args *ap)
1016 /*
1017 vop_setextattr {
1018 	IN struct vnode *a_vp;
1019 	IN int a_attrnamespace;
1020 	IN const char *a_name;
1021 	INOUT struct uio *a_uio;
1022 	IN struct ucred *a_cred;
1023 	IN struct thread *a_td;
1024 };
1025 */
1026 {
1027 	struct mount *mp = ap->a_vp->v_mount;
1028 	struct ufsmount *ump = VFSTOUFS(mp);
1029 	int error;
1030 
1031 	/*
1032 	 * XXX: No longer a supported way to delete extended attributes.
1033 	 */
1034 	if (ap->a_uio == NULL)
1035 		return (EINVAL);
1036 
1037 	ufs_extattr_uepm_lock(ump);
1038 
1039 	error = ufs_extattr_set(ap->a_vp, ap->a_attrnamespace, ap->a_name,
1040 	    ap->a_uio, ap->a_cred, ap->a_td);
1041 
1042 	ufs_extattr_uepm_unlock(ump);
1043 
1044 	return (error);
1045 }
1046 
1047 /*
1048  * Real work associated with setting a vnode's extended attributes;
1049  * assumes that the attribute lock has already been grabbed.
1050  */
1051 static int
ufs_extattr_set(struct vnode * vp,int attrnamespace,const char * name,struct uio * uio,struct ucred * cred,struct thread * td)1052 ufs_extattr_set(struct vnode *vp, int attrnamespace, const char *name,
1053     struct uio *uio, struct ucred *cred, struct thread *td)
1054 {
1055 	struct ufs_extattr_list_entry *attribute;
1056 	struct ufs_extattr_header ueh;
1057 	struct iovec local_aiov;
1058 	struct uio local_aio;
1059 	struct mount *mp = vp->v_mount;
1060 	struct ufsmount *ump = VFSTOUFS(mp);
1061 	struct inode *ip = VTOI(vp);
1062 	off_t base_offset;
1063 	int error = 0, ioflag;
1064 
1065 	if (vp->v_mount->mnt_flag & MNT_RDONLY)
1066 		return (EROFS);
1067 	if (!(ump->um_extattr.uepm_flags & UFS_EXTATTR_UEPM_STARTED))
1068 		return (EOPNOTSUPP);
1069 	if (!ufs_extattr_valid_attrname(attrnamespace, name))
1070 		return (EINVAL);
1071 
1072 	error = extattr_check_cred(vp, attrnamespace, cred, td, VWRITE);
1073 	if (error)
1074 		return (error);
1075 
1076 	attribute = ufs_extattr_find_attr(ump, attrnamespace, name);
1077 	if (!attribute)
1078 		return (ENOATTR);
1079 
1080 	/*
1081 	 * Early rejection of invalid offsets/length.
1082 	 * Reject: any offset but 0 (replace)
1083 	 *	 Any size greater than attribute size limit
1084  	 */
1085 	if (uio->uio_offset != 0 ||
1086 	    uio->uio_resid > attribute->uele_fileheader.uef_size)
1087 		return (ENXIO);
1088 
1089 	/*
1090 	 * Find base offset of header in file based on file header size, and
1091 	 * data header size + maximum data size, indexed by inode number.
1092 	 */
1093 	base_offset = sizeof(struct ufs_extattr_fileheader) +
1094 	    ip->i_number * (sizeof(struct ufs_extattr_header) +
1095 	    attribute->uele_fileheader.uef_size);
1096 
1097 	/*
1098 	 * Write out a data header for the data.
1099 	 */
1100 	ueh.ueh_len = uio->uio_resid;
1101 	ueh.ueh_flags = UFS_EXTATTR_ATTR_FLAG_INUSE;
1102 	ueh.ueh_i_gen = ip->i_gen;
1103 	local_aiov.iov_base = (caddr_t) &ueh;
1104 	local_aiov.iov_len = sizeof(struct ufs_extattr_header);
1105 	local_aio.uio_iov = &local_aiov;
1106 	local_aio.uio_iovcnt = 1;
1107 	local_aio.uio_rw = UIO_WRITE;
1108 	local_aio.uio_segflg = UIO_SYSSPACE;
1109 	local_aio.uio_td = td;
1110 	local_aio.uio_offset = base_offset;
1111 	local_aio.uio_resid = sizeof(struct ufs_extattr_header);
1112 
1113 	/*
1114 	 * Acquire locks.
1115 	 *
1116 	 * Don't need to get a lock on the backing file if the setattr is
1117 	 * being applied to the backing file, as the lock is already held.
1118 	 */
1119 	if (attribute->uele_backing_vnode != vp)
1120 		vn_lock(attribute->uele_backing_vnode, LK_EXCLUSIVE | LK_RETRY);
1121 
1122 	ioflag = IO_NODELOCKED;
1123 	if (ufs_extattr_sync)
1124 		ioflag |= IO_SYNC;
1125 	error = VOP_WRITE(attribute->uele_backing_vnode, &local_aio, ioflag,
1126 	    ump->um_extattr.uepm_ucred);
1127 	if (error)
1128 		goto vopunlock_exit;
1129 
1130 	if (local_aio.uio_resid != 0) {
1131 		error = ENXIO;
1132 		goto vopunlock_exit;
1133 	}
1134 
1135 	/*
1136 	 * Write out user data.
1137 	 */
1138 	uio->uio_offset = base_offset + sizeof(struct ufs_extattr_header);
1139 
1140 	ioflag = IO_NODELOCKED;
1141 	if (ufs_extattr_sync)
1142 		ioflag |= IO_SYNC;
1143 	error = VOP_WRITE(attribute->uele_backing_vnode, uio, ioflag,
1144 	    ump->um_extattr.uepm_ucred);
1145 
1146 vopunlock_exit:
1147 	uio->uio_offset = 0;
1148 
1149 	if (attribute->uele_backing_vnode != vp)
1150 		VOP_UNLOCK(attribute->uele_backing_vnode, 0);
1151 
1152 	return (error);
1153 }
1154 
1155 /*
1156  * Real work associated with removing an extended attribute from a vnode.
1157  * Assumes the attribute lock has already been grabbed.
1158  */
1159 static int
ufs_extattr_rm(struct vnode * vp,int attrnamespace,const char * name,struct ucred * cred,struct thread * td)1160 ufs_extattr_rm(struct vnode *vp, int attrnamespace, const char *name,
1161     struct ucred *cred, struct thread *td)
1162 {
1163 	struct ufs_extattr_list_entry *attribute;
1164 	struct ufs_extattr_header ueh;
1165 	struct iovec local_aiov;
1166 	struct uio local_aio;
1167 	struct mount *mp = vp->v_mount;
1168 	struct ufsmount *ump = VFSTOUFS(mp);
1169 	struct inode *ip = VTOI(vp);
1170 	off_t base_offset;
1171 	int error = 0, ioflag;
1172 
1173 	if (vp->v_mount->mnt_flag & MNT_RDONLY)
1174 		return (EROFS);
1175 	if (!(ump->um_extattr.uepm_flags & UFS_EXTATTR_UEPM_STARTED))
1176 		return (EOPNOTSUPP);
1177 	if (!ufs_extattr_valid_attrname(attrnamespace, name))
1178 		return (EINVAL);
1179 
1180 	error = extattr_check_cred(vp, attrnamespace, cred, td, VWRITE);
1181 	if (error)
1182 		return (error);
1183 
1184 	attribute = ufs_extattr_find_attr(ump, attrnamespace, name);
1185 	if (!attribute)
1186 		return (ENOATTR);
1187 
1188 	/*
1189 	 * Find base offset of header in file based on file header size, and
1190 	 * data header size + maximum data size, indexed by inode number.
1191 	 */
1192 	base_offset = sizeof(struct ufs_extattr_fileheader) +
1193 	    ip->i_number * (sizeof(struct ufs_extattr_header) +
1194 	    attribute->uele_fileheader.uef_size);
1195 
1196 	/*
1197 	 * Check to see if currently defined.
1198 	 */
1199 	bzero(&ueh, sizeof(struct ufs_extattr_header));
1200 
1201 	local_aiov.iov_base = (caddr_t) &ueh;
1202 	local_aiov.iov_len = sizeof(struct ufs_extattr_header);
1203 	local_aio.uio_iov = &local_aiov;
1204 	local_aio.uio_iovcnt = 1;
1205 	local_aio.uio_rw = UIO_READ;
1206 	local_aio.uio_segflg = UIO_SYSSPACE;
1207 	local_aio.uio_td = td;
1208 	local_aio.uio_offset = base_offset;
1209 	local_aio.uio_resid = sizeof(struct ufs_extattr_header);
1210 
1211 	/*
1212 	 * Don't need to get the lock on the backing vnode if the vnode we're
1213 	 * modifying is it, as we already hold the lock.
1214 	 */
1215 	if (attribute->uele_backing_vnode != vp)
1216 		vn_lock(attribute->uele_backing_vnode, LK_EXCLUSIVE | LK_RETRY);
1217 
1218 	error = VOP_READ(attribute->uele_backing_vnode, &local_aio,
1219 	    IO_NODELOCKED, ump->um_extattr.uepm_ucred);
1220 	if (error)
1221 		goto vopunlock_exit;
1222 
1223 	/* Defined? */
1224 	if ((ueh.ueh_flags & UFS_EXTATTR_ATTR_FLAG_INUSE) == 0) {
1225 		error = ENOATTR;
1226 		goto vopunlock_exit;
1227 	}
1228 
1229 	/* Valid for the current inode generation? */
1230 	if (ueh.ueh_i_gen != ip->i_gen) {
1231 		/*
1232 		 * The inode itself has a different generation number than
1233 		 * the attribute data.  For now, the best solution is to
1234 		 * coerce this to undefined, and let it get cleaned up by
1235 		 * the next write or extattrctl clean.
1236 		 */
1237 		printf("ufs_extattr_rm (%s): inode number inconsistency (%d, %jd)\n",
1238 		    mp->mnt_stat.f_mntonname, ueh.ueh_i_gen, (intmax_t)ip->i_gen);
1239 		error = ENOATTR;
1240 		goto vopunlock_exit;
1241 	}
1242 
1243 	/* Flag it as not in use. */
1244 	ueh.ueh_flags = 0;
1245 	ueh.ueh_len = 0;
1246 
1247 	local_aiov.iov_base = (caddr_t) &ueh;
1248 	local_aiov.iov_len = sizeof(struct ufs_extattr_header);
1249 	local_aio.uio_iov = &local_aiov;
1250 	local_aio.uio_iovcnt = 1;
1251 	local_aio.uio_rw = UIO_WRITE;
1252 	local_aio.uio_segflg = UIO_SYSSPACE;
1253 	local_aio.uio_td = td;
1254 	local_aio.uio_offset = base_offset;
1255 	local_aio.uio_resid = sizeof(struct ufs_extattr_header);
1256 
1257 	ioflag = IO_NODELOCKED;
1258 	if (ufs_extattr_sync)
1259 		ioflag |= IO_SYNC;
1260 	error = VOP_WRITE(attribute->uele_backing_vnode, &local_aio, ioflag,
1261 	    ump->um_extattr.uepm_ucred);
1262 	if (error)
1263 		goto vopunlock_exit;
1264 
1265 	if (local_aio.uio_resid != 0)
1266 		error = ENXIO;
1267 
1268 vopunlock_exit:
1269 	VOP_UNLOCK(attribute->uele_backing_vnode, 0);
1270 
1271 	return (error);
1272 }
1273 
1274 /*
1275  * Called by UFS when an inode is no longer active and should have its
1276  * attributes stripped.
1277  */
1278 void
ufs_extattr_vnode_inactive(struct vnode * vp,struct thread * td)1279 ufs_extattr_vnode_inactive(struct vnode *vp, struct thread *td)
1280 {
1281 	struct ufs_extattr_list_entry *uele;
1282 	struct mount *mp = vp->v_mount;
1283 	struct ufsmount *ump = VFSTOUFS(mp);
1284 
1285 	/*
1286 	 * In that case, we cannot lock. We should not have any active vnodes
1287 	 * on the fs if this is not yet initialized but is going to be, so
1288 	 * this can go unlocked.
1289 	 */
1290 	if (!(ump->um_extattr.uepm_flags & UFS_EXTATTR_UEPM_INITIALIZED))
1291 		return;
1292 
1293 	ufs_extattr_uepm_lock(ump);
1294 
1295 	if (!(ump->um_extattr.uepm_flags & UFS_EXTATTR_UEPM_STARTED)) {
1296 		ufs_extattr_uepm_unlock(ump);
1297 		return;
1298 	}
1299 
1300 	LIST_FOREACH(uele, &ump->um_extattr.uepm_list, uele_entries)
1301 		ufs_extattr_rm(vp, uele->uele_attrnamespace,
1302 		    uele->uele_attrname, NULL, td);
1303 
1304 	ufs_extattr_uepm_unlock(ump);
1305 }
1306 
1307 #endif /* !UFS_EXTATTR */
1308