4750a96f6b
In the mapped security model, VirtFS server intercepts and maps the file object create and get/set attribute requests. Files on the fileserver will be created with VirtFS servers (QEMU) user credentials and the client-users credentials are stored in extended attributes. On the request to get attributes, server extracts the client-users credentials from extended attributes and sends them to the client. On Host/Fileserver: -rw-------. 2 virfsuid virtfsgid 0 2010-05-11 09:19 afile On Guest/Client: -rw-r--r-- 2 guestuser guestuser 0 2010-05-11 12:19 afile Signed-off-by: Venkateswararao Jujjuri <jvrao@linux.vnet.ibm.com> Signed-off-by: Anthony Liguori <aliguori@us.ibm.com>
81 lines
2.4 KiB
C
81 lines
2.4 KiB
C
/*
|
|
* Virtio 9p
|
|
*
|
|
* Copyright IBM, Corp. 2010
|
|
*
|
|
* Authors:
|
|
* Aneesh Kumar K.V <aneesh.kumar@linux.vnet.ibm.com>
|
|
*
|
|
* This work is licensed under the terms of the GNU GPL, version 2. See
|
|
* the COPYING file in the top-level directory.
|
|
*
|
|
*/
|
|
#ifndef _FILEOP_H
|
|
#define _FILEOP_H
|
|
#include <sys/types.h>
|
|
#include <dirent.h>
|
|
#include <sys/time.h>
|
|
#include <utime.h>
|
|
#include <sys/stat.h>
|
|
#include <sys/uio.h>
|
|
#include <sys/vfs.h>
|
|
#define SM_LOCAL_MODE_BITS 0600
|
|
#define SM_LOCAL_DIR_MODE_BITS 0700
|
|
|
|
typedef enum
|
|
{
|
|
SM_PASSTHROUGH = 1, /* uid/gid set on fileserver files */
|
|
SM_MAPPED, /* uid/gid part of xattr */
|
|
} SecModel;
|
|
|
|
typedef struct FsCred
|
|
{
|
|
uid_t fc_uid;
|
|
gid_t fc_gid;
|
|
mode_t fc_mode;
|
|
dev_t fc_rdev;
|
|
} FsCred;
|
|
|
|
typedef struct FsContext
|
|
{
|
|
char *fs_root;
|
|
SecModel fs_sm;
|
|
uid_t uid;
|
|
} FsContext;
|
|
|
|
extern void cred_init(FsCred *);
|
|
|
|
typedef struct FileOperations
|
|
{
|
|
int (*lstat)(FsContext *, const char *, struct stat *);
|
|
ssize_t (*readlink)(FsContext *, const char *, char *, size_t);
|
|
int (*chmod)(FsContext *, const char *, FsCred *);
|
|
int (*chown)(FsContext *, const char *, FsCred *);
|
|
int (*mknod)(FsContext *, const char *, mode_t, dev_t);
|
|
int (*mksock)(FsContext *, const char *);
|
|
int (*utime)(FsContext *, const char *, const struct utimbuf *);
|
|
int (*remove)(FsContext *, const char *);
|
|
int (*symlink)(FsContext *, const char *, const char *);
|
|
int (*link)(FsContext *, const char *, const char *);
|
|
int (*setuid)(FsContext *, uid_t);
|
|
int (*close)(FsContext *, int);
|
|
int (*closedir)(FsContext *, DIR *);
|
|
DIR *(*opendir)(FsContext *, const char *);
|
|
int (*open)(FsContext *, const char *, int);
|
|
int (*open2)(FsContext *, const char *, int, FsCred *);
|
|
void (*rewinddir)(FsContext *, DIR *);
|
|
off_t (*telldir)(FsContext *, DIR *);
|
|
struct dirent *(*readdir)(FsContext *, DIR *);
|
|
void (*seekdir)(FsContext *, DIR *, off_t);
|
|
ssize_t (*readv)(FsContext *, int, const struct iovec *, int);
|
|
ssize_t (*writev)(FsContext *, int, const struct iovec *, int);
|
|
off_t (*lseek)(FsContext *, int, off_t, int);
|
|
int (*mkdir)(FsContext *, const char *, mode_t);
|
|
int (*fstat)(FsContext *, int, struct stat *);
|
|
int (*rename)(FsContext *, const char *, const char *);
|
|
int (*truncate)(FsContext *, const char *, off_t);
|
|
int (*fsync)(FsContext *, int);
|
|
void *opaque;
|
|
} FileOperations;
|
|
#endif
|