Print this page
    
12505 Answer KEBE question about cred in unexport()
    
      
        | Split | 
	Close | 
      
      | Expand all | 
      | Collapse all | 
    
    
          --- old/usr/src/uts/common/fs/nfs/nfs4_srv_ns.c
          +++ new/usr/src/uts/common/fs/nfs/nfs4_srv_ns.c
   1    1  /*
   2    2   * CDDL HEADER START
   3    3   *
   4    4   * The contents of this file are subject to the terms of the
   5    5   * Common Development and Distribution License (the "License").
   6    6   * You may not use this file except in compliance with the License.
   7    7   *
   8    8   * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
   9    9   * or http://www.opensolaris.org/os/licensing.
  10   10   * See the License for the specific language governing permissions
  11   11   * and limitations under the License.
  12   12   *
  13   13   * When distributing Covered Code, include this CDDL HEADER in each
  14   14   * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
  15   15   * If applicable, add the following below this CDDL HEADER, with the
  16   16   * fields enclosed by brackets "[]" replaced with your own identifying
  17   17   * information: Portions Copyright [yyyy] [name of copyright owner]
  18   18   *
  19   19   * CDDL HEADER END
  20   20   */
  21   21  
  22   22  /*
  23   23   * Copyright (c) 2003, 2010, Oracle and/or its affiliates. All rights reserved.
  24   24   */
  25   25  
  26   26  /*
  27   27   * Copyright 2018 Nexenta Systems, Inc.
  28   28   * Copyright (c) 2015, Joyent, Inc.
  29   29   */
  30   30  
  31   31  #include <sys/systm.h>
  32   32  
  33   33  #include <nfs/nfs.h>
  34   34  #include <nfs/export.h>
  35   35  #include <sys/cmn_err.h>
  36   36  #include <sys/avl.h>
  37   37  
  38   38  #define PSEUDOFS_SUFFIX         " (pseudo)"
  39   39  
  40   40  /*
  41   41   * A version of VOP_FID that deals with a remote VOP_FID for nfs.
  42   42   * If vp is an nfs node, nfs4_fid() returns EREMOTE, nfs3_fid() and nfs_fid()
  43   43   * returns the filehandle of vp as its fid. When nfs uses fid to set the
  44   44   * exportinfo filehandle template, a remote nfs filehandle would be too big for
  45   45   * the fid of the exported directory. This routine remaps the value of the
  46   46   * attribute va_nodeid of vp to be the fid of vp, so that the fid can fit.
  47   47   *
  48   48   * We need this fid mainly for setting up NFSv4 server namespace where an
  49   49   * nfs filesystem is also part of it. Thus, need to be able to setup a pseudo
  50   50   * exportinfo for an nfs node.
  51   51   *
  52   52   * e.g. mount a filesystem on top of a nfs dir, and then share the new mount
  53   53   *      (like exporting a local disk from a "diskless" client)
  54   54   */
  55   55  int
  56   56  vop_fid_pseudo(vnode_t *vp, fid_t *fidp)
  57   57  {
  58   58          struct vattr va;
  59   59          int error;
  60   60  
  61   61          error = VOP_FID(vp, fidp, NULL);
  62   62  
  63   63          /*
  64   64           * XXX nfs4_fid() does nothing and returns EREMOTE.
  65   65           * XXX nfs3_fid()/nfs_fid() returns nfs filehandle as its fid
  66   66           * which has a bigger length than local fid.
  67   67           * NFS_FH4MAXDATA is the size of
  68   68           * fhandle4_t.fh_xdata[NFS_FH4MAXDATA].
  69   69           *
  70   70           * Note: nfs[2,3,4]_fid() only gets called for diskless clients.
  71   71           */
  72   72          if (error == EREMOTE ||
  73   73              (error == 0 && fidp->fid_len > NFS_FH4MAXDATA)) {
  74   74  
  75   75                  va.va_mask = AT_NODEID;
  76   76                  error = VOP_GETATTR(vp, &va, 0, CRED(), NULL);
  77   77                  if (error)
  78   78                          return (error);
  79   79  
  80   80                  fidp->fid_len = sizeof (va.va_nodeid);
  81   81                  bcopy(&va.va_nodeid, fidp->fid_data, fidp->fid_len);
  82   82                  return (0);
  83   83          }
  84   84  
  85   85          return (error);
  86   86  }
  87   87  
  88   88  /*
  89   89   * Get an nfsv4 vnode of the given fid from the visible list of an
  90   90   * nfs filesystem or get the exi_vp if it is the root node.
  91   91   */
  92   92  int
  93   93  nfs4_vget_pseudo(struct exportinfo *exi, vnode_t **vpp, fid_t *fidp)
  94   94  {
  95   95          fid_t exp_fid;
  96   96          struct exp_visible *visp;
  97   97          int error;
  98   98  
  99   99          /* check if the given fid is in the visible list */
 100  100  
 101  101          for (visp = exi->exi_visible; visp; visp = visp->vis_next) {
 102  102                  if (EQFID(fidp, &visp->vis_fid)) {
 103  103                          VN_HOLD(visp->vis_vp);
 104  104                          *vpp = visp->vis_vp;
 105  105                          return (0);
 106  106                  }
 107  107          }
 108  108  
 109  109          /* check if the given fid is the same as the exported node */
 110  110  
 111  111          bzero(&exp_fid, sizeof (exp_fid));
 112  112          exp_fid.fid_len = MAXFIDSZ;
 113  113          error = vop_fid_pseudo(exi->exi_vp, &exp_fid);
 114  114          if (error)
 115  115                  return (error);
 116  116  
 117  117          if (EQFID(fidp, &exp_fid)) {
 118  118                  VN_HOLD(exi->exi_vp);
 119  119                  *vpp = exi->exi_vp;
 120  120                  return (0);
 121  121          }
 122  122  
 123  123          return (ENOENT);
 124  124  }
 125  125  
 126  126  /*
 127  127   * Create a pseudo export entry
 128  128   *
 129  129   * This is an export entry that's created as the
 130  130   * side-effect of a "real" export.  As a part of
 131  131   * a real export, the pathname to the export is
 132  132   * checked to see if all the directory components
 133  133   * are accessible via an NFSv4 client, i.e. are
 134  134   * exported.  If treeclimb_export() finds an unexported
 135  135   * mountpoint along the path, then it calls this
 136  136   * function to export it.
 137  137   *
 138  138   * This pseudo export differs from a real export in that
 139  139   * it only allows read-only access.  A "visible" list of
 140  140   * directories is added to filter lookup and readdir results
 141  141   * to only contain dirnames which lead to descendant shares.
 142  142   *
 143  143   * A visible list has a per-file-system scope.  Any exportinfo
 144  144   * struct (real or pseudo) can have a visible list as long as
 145  145   * a) its export root is VROOT, or is the zone's root for in-zone NFS service
 146  146   * b) a descendant of the export root is shared
 147  147   */
 148  148  struct exportinfo *
 149  149  pseudo_exportfs(nfs_export_t *ne, vnode_t *vp, fid_t *fid,
 150  150      struct exp_visible *vis_head, struct exportdata *exdata)
 151  151  {
 152  152          struct exportinfo *exi;
 153  153          struct exportdata *kex;
 154  154          fsid_t fsid;
 155  155          int vpathlen;
 156  156          int i;
 157  157  
 158  158          ASSERT(RW_WRITE_HELD(&ne->exported_lock));
 159  159  
 160  160          fsid = vp->v_vfsp->vfs_fsid;
 161  161          exi = kmem_zalloc(sizeof (*exi), KM_SLEEP);
 162  162          exi->exi_fsid = fsid;
 163  163          exi->exi_fid = *fid;
 164  164          exi->exi_vp = vp;
 165  165          VN_HOLD(exi->exi_vp);
 166  166          exi->exi_visible = vis_head;
 167  167          exi->exi_count = 1;
 168  168          exi->exi_zoneid = ne->ne_globals->nfs_zoneid;
 169  169          exi->exi_volatile_dev = (vfssw[vp->v_vfsp->vfs_fstype].vsw_flag &
 170  170              VSW_VOLATILEDEV) ? 1 : 0;
 171  171          mutex_init(&exi->exi_lock, NULL, MUTEX_DEFAULT, NULL);
 172  172  
 173  173          /*
 174  174           * Build up the template fhandle
 175  175           */
 176  176          exi->exi_fh.fh_fsid = fsid;
 177  177          ASSERT(exi->exi_fid.fid_len <= sizeof (exi->exi_fh.fh_xdata));
 178  178          exi->exi_fh.fh_xlen = exi->exi_fid.fid_len;
 179  179          bcopy(exi->exi_fid.fid_data, exi->exi_fh.fh_xdata,
 180  180              exi->exi_fid.fid_len);
 181  181          exi->exi_fh.fh_len = sizeof (exi->exi_fh.fh_data);
 182  182  
 183  183          kex = &exi->exi_export;
 184  184          kex->ex_flags = EX_PSEUDO;
 185  185  
 186  186          vpathlen = strlen(vp->v_path);
 187  187          kex->ex_pathlen = vpathlen + strlen(PSEUDOFS_SUFFIX);
 188  188          kex->ex_path = kmem_alloc(kex->ex_pathlen + 1, KM_SLEEP);
 189  189  
 190  190          if (vpathlen)
 191  191                  (void) strncpy(kex->ex_path, vp->v_path, vpathlen);
 192  192          (void) strcpy(kex->ex_path + vpathlen, PSEUDOFS_SUFFIX);
 193  193  
 194  194          /* Transfer the secinfo data from exdata to this new pseudo node */
 195  195          if (exdata)
 196  196                  srv_secinfo_exp2pseu(&exi->exi_export, exdata);
 197  197  
 198  198          /*
 199  199           * Initialize auth cache and auth cache lock
 200  200           */
 201  201          for (i = 0; i < AUTH_TABLESIZE; i++) {
 202  202                  exi->exi_cache[i] = kmem_alloc(sizeof (avl_tree_t), KM_SLEEP);
 203  203                  avl_create(exi->exi_cache[i], nfsauth_cache_clnt_compar,
 204  204                      sizeof (struct auth_cache_clnt),
 205  205                      offsetof(struct auth_cache_clnt, authc_link));
 206  206          }
 207  207          rw_init(&exi->exi_cache_lock, NULL, RW_DEFAULT, NULL);
 208  208  
 209  209          /*
 210  210           * Insert the new entry at the front of the export list
 211  211           */
 212  212          export_link(ne, exi);
 213  213  
 214  214          /*
 215  215           * Initialize exi_id and exi_kstats
 216  216           */
 217  217          mutex_enter(&nfs_exi_id_lock);
 218  218          exi->exi_id = exi_id_get_next();
 219  219          avl_add(&exi_id_tree, exi);
 220  220          mutex_exit(&nfs_exi_id_lock);
 221  221  
 222  222          return (exi);
 223  223  }
 224  224  
 225  225  /*
 226  226   * Free a list of visible directories
 227  227   */
 228  228  void
 229  229  free_visible(struct exp_visible *head)
 230  230  {
 231  231          struct exp_visible *visp, *next;
 232  232  
 233  233          for (visp = head; visp; visp = next) {
 234  234                  if (visp->vis_vp != NULL)
 235  235                          VN_RELE(visp->vis_vp);
 236  236  
 237  237                  next = visp->vis_next;
 238  238                  srv_secinfo_list_free(visp->vis_secinfo, visp->vis_seccnt);
 239  239                  kmem_free(visp, sizeof (*visp));
 240  240          }
 241  241  }
 242  242  
 243  243  /*
 244  244   * Connects newchild (or subtree with newchild in head)
 245  245   * to the parent node. We always add it to the beginning
 246  246   * of sibling list.
 247  247   */
 248  248  static void
 249  249  tree_add_child(treenode_t *parent, treenode_t *newchild)
 250  250  {
 251  251          newchild->tree_parent = parent;
 252  252          newchild->tree_sibling = parent->tree_child_first;
 253  253          parent->tree_child_first = newchild;
 254  254  }
 255  255  
 256  256  /* Look up among direct children a node with the exact tree_vis pointer */
 257  257  static treenode_t *
 258  258  tree_find_child_by_vis(treenode_t *t, exp_visible_t *vis)
 259  259  {
 260  260          for (t = t->tree_child_first; t; t = t->tree_sibling)
 261  261                  if (t->tree_vis == vis)
 262  262                          return (t);
 263  263          return (NULL);
 264  264  }
 265  265  
 266  266  /*
 267  267   * Add new node to the head of subtree pointed by 'n'. n can be NULL.
 268  268   * Interconnects the new treenode with exp_visible and exportinfo
 269  269   * if needed.
 270  270   */
 271  271  static treenode_t *
 272  272  tree_prepend_node(treenode_t *n, exp_visible_t *v, exportinfo_t *e)
 273  273  {
 274  274          treenode_t *tnode = kmem_zalloc(sizeof (*tnode), KM_SLEEP);
 275  275  
 276  276          if (n) {
 277  277                  tnode->tree_child_first = n;
 278  278                  n->tree_parent = tnode;
 279  279          }
 280  280          if (v) {
 281  281                  tnode->tree_vis = v;
 282  282          }
 283  283          if (e) {
 284  284                  tnode->tree_exi = e;
 285  285                  e->exi_tree = tnode;
 286  286          }
 287  287          return (tnode);
 288  288  }
 289  289  
 290  290  /*
 291  291   * Removes node from the tree and frees the treenode struct.
 292  292   * Does not free structures pointed by tree_exi and tree_vis,
 293  293   * they should be already freed.
 294  294   */
 295  295  static void
 296  296  tree_remove_node(nfs_export_t *ne, treenode_t *node)
 297  297  {
 298  298          treenode_t *parent = node->tree_parent;
 299  299          treenode_t *s; /* s for sibling */
 300  300  
 301  301          if (parent == NULL) {
 302  302                  kmem_free(node, sizeof (*node));
 303  303                  ne->ns_root = NULL;
 304  304                  return;
 305  305          }
 306  306          /* This node is first child */
 307  307          if (parent->tree_child_first == node) {
 308  308                  parent->tree_child_first = node->tree_sibling;
 309  309          /* This node is not first child */
 310  310          } else {
 311  311                  s = parent->tree_child_first;
 312  312                  while (s->tree_sibling != node)
 313  313                          s = s->tree_sibling;
 314  314                  s->tree_sibling = s->tree_sibling->tree_sibling;
 315  315          }
 316  316          kmem_free(node, sizeof (*node));
 317  317  }
 318  318  
 319  319  /*
 320  320   * When we export a new directory we need to add a new
 321  321   * path segment through the pseudofs to reach the new
 322  322   * directory. This new path is reflected in a list of
 323  323   * directories added to the "visible" list.
 324  324   *
 325  325   * Here there are two lists of visible fids: one hanging off the
 326  326   * pseudo exportinfo, and the one we want to add.  It's possible
 327  327   * that the two lists share a common path segment
 328  328   * and have some common directories.  We need to combine
 329  329   * the lists so there's no duplicate entries. Where a common
 330  330   * path component is found, the vis_count field is bumped.
 331  331   *
 332  332   * This example shows that the treenode chain (tree_head) and
 333  333   * exp_visible chain (vis_head) can differ in length. The latter
 334  334   * can be shorter. The outer loop must loop over the vis_head chain.
 335  335   *
 336  336   * share /x/a
 337  337   * mount -F ufs /dev/dsk/... /x/y
 338  338   * mkdir -p /x/y/a/b
 339  339   * share  /x/y/a/b
 340  340   *
 341  341   * When more_visible() is called during the second share,
 342  342   * the existing namespace is following:
 343  343   *                                   exp_visible_t
 344  344   *   treenode_t       exportinfo_t      v0     v1
 345  345   * ns_root+---+        +------------+  +---+  +---+
 346  346   *      t0| / |........| E0 pseudo  |->| x |->| a |
 347  347   *        +---+        +------------+  +---+  +---+
 348  348   *          |                           /    /
 349  349   *        +---+                        /    /
 350  350   *      t1| x |------------------------    /
 351  351   *        +---+                           /
 352  352   *          |                            /
 353  353   *        +---+                         /
 354  354   *      t2| a |-------------------------
 355  355   *        +---+........+------------+
 356  356   *                     | E1 real    |
 357  357   *                     +------------+
 358  358   *
 359  359   * This is being added:
 360  360   *
 361  361   *    tree_head  vis_head
 362  362   *        +---+  +---+
 363  363   *      t3| x |->| x |v2
 364  364   *        +---+  +---+
 365  365   *          |      |
 366  366   *        +---+  +---+                     v4     v5
 367  367   *      t4| y |->| y |v3  +------------+  +---+  +---+
 368  368   *        +---+\ +---+    | E2 pseudo  |->| a |->| b |
 369  369   *          |   \....... >+------------+  +---+  +---+
 370  370   *        +---+                           /      /
 371  371   *      t5| a |---------------------------      /
 372  372   *        +---+                                /
 373  373   *          |                                 /
 374  374   *        +---+-------------------------------
 375  375   *      t6| b |           +------------+
 376  376   *        +---+..........>| E3 real    |
 377  377   *                        +------------+
 378  378   *
 379  379   * more_visible() will:
 380  380   * - kmem_free() t3 and v2
 381  381   * - add t4, t5, t6 as a child of t1 (t4 will become sibling of t2)
 382  382   * - add v3 to the end of E0->exi_visible
 383  383   *
 384  384   * Note that v4 and v5 were already processed in pseudo_exportfs() and
 385  385   * added to E2. The outer loop of more_visible() will loop only over v2
 386  386   * and v3. The inner loop of more_visible() always loops over v0 and v1.
 387  387   *
 388  388   * Illustration for this scenario:
 389  389   *
 390  390   * mkdir -p /v/a/b/c
 391  391   * share /v/a/b/c
 392  392   * mkdir /v/a/b/c1
 393  393   * mkdir -p /v/a1
 394  394   * mv /v/a/b /v/a1
 395  395   * share /v/a1/b/c1
 396  396   *
 397  397   *           EXISTING
 398  398   *           treenode
 399  399   *           namespace:    +-----------+   visibles
 400  400   *                         |exportinfo |-->v->a->b->c
 401  401   * connect_point->+---+--->+-----------+
 402  402   *                | / |T0
 403  403   *                +---+
 404  404   *                  |                            NEW treenode chain:
 405  405   *         child->+---+
 406  406   *                | v |T1                          +---+<-curr
 407  407   *                +---+                          N1| v |
 408  408   *                  |                              +---+
 409  409   *                +---+                              |
 410  410   *                | a |T2                          +---+<-tree_head
 411  411   *                +---+                          N2| a1|
 412  412   *                  |                              +---+
 413  413   *                +---+                              |
 414  414   *                | b |T3                          +---+
 415  415   *                +---+                          N3| b |
 416  416   *                  |                              +---+
 417  417   *                +---+                              |
 418  418   *                | c |T4                          +---+
 419  419   *                +---+                          N4| c1|
 420  420   *                                                 +---+
 421  421   *
 422  422   * The picture above illustrates the position of following pointers after line
 423  423   * 'child = tree_find_child_by_vis(connect_point, curr->tree_vis);'
 424  424   * was executed for the first time in the outer 'for' loop:
 425  425   *
 426  426   * connect_point..parent treenode in the EXISTING namespace to which the 'curr'
 427  427   *                should be connected. If 'connect_point' already has a child
 428  428   *                with the same value of tree_vis as the curr->tree_vis is,
 429  429   *                the 'curr' will not be added, but kmem_free()d.
 430  430   * child..........the result of tree_find_child_by_vis()
 431  431   * curr...........currently processed treenode from the NEW treenode chain
 432  432   * tree_head......current head of the NEW treenode chain, in this case it was
 433  433   *                already moved down to its child - preparation for another loop
 434  434   *
 435  435   * What will happen to NEW treenodes N1, N2, N3, N4 in more_visible() later:
 436  436   *
 437  437   * N1: is merged - i.e. N1 is kmem_free()d. T0 has a child T1 with the same
 438  438   *     tree_vis as N1
 439  439   * N2: is added as a new child of T1
 440  440   *     Note: not just N2, but the whole chain N2->N3->N4 is added
 441  441   * N3: not processed separately (it was added together with N2)
 442  442   *     Even that N3 and T3 have same tree_vis, they are NOT merged, but will
 443  443   *     become duplicates.
 444  444   * N4: not processed separately
 445  445   */
 446  446  static void
 447  447  more_visible(struct exportinfo *exi, treenode_t *tree_head)
 448  448  {
 449  449          struct exp_visible *vp1, *vp2, *vis_head, *tail, *next;
 450  450          int found;
 451  451          treenode_t *child, *curr, *connect_point;
 452  452          nfs_export_t *ne = nfs_get_export();
 453  453  
 454  454          vis_head = tree_head->tree_vis;
 455  455          connect_point = exi->exi_tree;
 456  456  
 457  457          /*
 458  458           * If exportinfo doesn't already have a visible
 459  459           * list just assign the entire supplied list.
 460  460           */
 461  461          if (exi->exi_visible == NULL) {
 462  462                  tree_add_child(connect_point, tree_head);
 463  463                  exi->exi_visible = vis_head;
 464  464  
 465  465                  /* Update the change timestamp */
 466  466                  tree_update_change(ne, connect_point, &vis_head->vis_change);
 467  467  
 468  468                  return;
 469  469          }
 470  470  
 471  471          /* The outer loop traverses the supplied list. */
 472  472          for (vp1 = vis_head; vp1; vp1 = next) {
 473  473                  found = 0;
 474  474                  next = vp1->vis_next;
 475  475  
 476  476                  /* The inner loop searches the exportinfo visible list. */
 477  477                  for (vp2 = exi->exi_visible; vp2; vp2 = vp2->vis_next) {
 478  478                          tail = vp2;
 479  479                          if (EQFID(&vp1->vis_fid, &vp2->vis_fid)) {
 480  480                                  found = 1;
 481  481                                  vp2->vis_count++;
 482  482                                  VN_RELE(vp1->vis_vp);
 483  483                                  /* Transfer vis_exported from vp1 to vp2. */
 484  484                                  if (vp1->vis_exported && !vp2->vis_exported)
 485  485                                          vp2->vis_exported = 1;
 486  486                                  kmem_free(vp1, sizeof (*vp1));
 487  487                                  tree_head->tree_vis = vp2;
 488  488                                  break;
 489  489                          }
 490  490                  }
 491  491  
 492  492                  /* If not found - add to the end of the list */
 493  493                  if (! found) {
 494  494                          tail->vis_next = vp1;
 495  495                          vp1->vis_next = NULL;
 496  496                  }
 497  497  
 498  498                  curr = tree_head;
 499  499                  tree_head = tree_head->tree_child_first;
 500  500  
 501  501                  if (! connect_point) /* No longer merging */
 502  502                          continue;
 503  503                  /*
 504  504                   * The inner loop could set curr->tree_vis to the EXISTING
 505  505                   * exp_visible vp2, so we can search among the children of
 506  506                   * connect_point for the curr->tree_vis. No need for EQFID.
 507  507                   */
 508  508                  child = tree_find_child_by_vis(connect_point, curr->tree_vis);
 509  509  
 510  510                  /*
 511  511                   * Merging cannot be done if a valid child->tree_exi would
 512  512                   * be overwritten by a new curr->tree_exi.
 513  513                   */
 514  514                  if (child &&
 515  515                      (child->tree_exi == NULL || curr->tree_exi == NULL)) {
 516  516                          if (curr->tree_exi) { /* Transfer the exportinfo */
 517  517                                  child->tree_exi = curr->tree_exi;
 518  518                                  child->tree_exi->exi_tree = child;
 519  519                          }
 520  520                          kmem_free(curr, sizeof (treenode_t));
 521  521                          connect_point = child;
 522  522                  } else { /* Branching */
 523  523                          tree_add_child(connect_point, curr);
 524  524  
 525  525                          /* Update the change timestamp */
 526  526                          tree_update_change(ne, connect_point,
 527  527                              &curr->tree_vis->vis_change);
 528  528  
 529  529                          connect_point = NULL;
 530  530                  }
 531  531          }
 532  532  }
 533  533  
 534  534  /*
 535  535   * Remove one visible entry from the pseudo exportfs.
 536  536   *
 537  537   * When we unexport a directory, we have to remove path
 538  538   * components from the visible list in the pseudo exportfs
 539  539   * entry. The supplied visible contains one fid of one path
 540  540   * component. The visible list of the export
 541  541   * is checked against provided visible, matching fid has its
 542  542   * reference count decremented.  If a reference count drops to
 543  543   * zero, then it means no paths now use this directory, so its
 544  544   * fid can be removed from the visible list.
 545  545   *
 546  546   * When the last path is removed, the visible list will be null.
 547  547   */
 548  548  static void
 549  549  less_visible(struct exportinfo *exi, struct exp_visible *vp1)
 550  550  {
 551  551          struct exp_visible *vp2;
 552  552          struct exp_visible *prev, *next;
 553  553  
 554  554          for (vp2 = exi->exi_visible, prev = NULL; vp2; vp2 = next) {
 555  555  
 556  556                  next = vp2->vis_next;
 557  557  
 558  558                  if (vp1 == vp2) {
 559  559                          /*
 560  560                           * Decrement the ref count.
 561  561                           * Remove the entry if it's zero.
 562  562                           */
 563  563                          if (--vp2->vis_count <= 0) {
 564  564                                  if (prev == NULL)
 565  565                                          exi->exi_visible = next;
 566  566                                  else
 567  567                                          prev->vis_next = next;
 568  568                                  VN_RELE(vp2->vis_vp);
 569  569                                  srv_secinfo_list_free(vp2->vis_secinfo,
 570  570                                      vp2->vis_seccnt);
 571  571                                  kmem_free(vp2, sizeof (*vp1));
 572  572                          }
 573  573                          break;
 574  574                  }
 575  575                  prev = vp2;
 576  576          }
 577  577  }
 578  578  
 579  579  /*
 580  580   * This function checks the path to a new export to
 581  581   * check whether all the pathname components are
 582  582   * exported. It works by climbing the file tree one
 583  583   * component at a time via "..", crossing mountpoints
 584  584   * if necessary until an export entry is found, or the
 585  585   * system root is reached.
 586  586   *
 587  587   * If an unexported mountpoint is found, then
 588  588   * a new pseudo export is added and the pathname from
 589  589   * the mountpoint down to the export is added to the
 590  590   * visible list for the new pseudo export.  If an existing
 591  591   * pseudo export is found, then the pathname is added
 592  592   * to its visible list.
 593  593   *
 594  594   * Note that there's some tests for exportdir.
 595  595   * The exportinfo entry that's passed as a parameter
 596  596   * is that of the real export and exportdir is set
 597  597   * for this case.
 598  598   *
 599  599   * Here is an example of a possible setup:
 600  600   *
 601  601   * () - a new fs; fs mount point
 602  602   * EXPORT - a real exported node
 603  603   * PSEUDO - a pseudo node
 604  604   * vis - visible list
 605  605   * f# - security flavor#
 606  606   * (f#) - security flavor# propagated from its descendents
 607  607   * "" - covered vnode
 608  608   *
 609  609   *
 610  610   *                 /
 611  611   *                 |
 612  612   *                 (a) PSEUDO (f1,f2)
 613  613   *                 |   vis: b,b,"c","n"
 614  614   *                 |
 615  615   *                 b
 616  616   *        ---------|------------------
 617  617   *        |                          |
 618  618   *        (c) EXPORT,f1(f2)          (n) PSEUDO (f1,f2)
 619  619   *        |   vis: "e","d"           |   vis: m,m,,p,q,"o"
 620  620   *        |                          |
 621  621   *  ------------------          -------------------
 622  622   *  |        |        |         |                  |
 623  623   *  (d)      (e)      f         m EXPORT,f1(f2)    p
 624  624   *  EXPORT   EXPORT             |                  |
 625  625   *  f1       f2                 |                  |
 626  626   *           |                  |                  |
 627  627   *           j                 (o) EXPORT,f2       q EXPORT f2
 628  628   *
 629  629   */
 630  630  int
 631  631  treeclimb_export(struct exportinfo *exip)
 632  632  {
 633  633          vnode_t *dvp, *vp;
 634  634          fid_t fid;
 635  635          int error;
 636  636          int exportdir;
 637  637          struct exportinfo *new_exi = exip;
 638  638          struct exp_visible *visp;
 639  639          struct exp_visible *vis_head = NULL;
 640  640          struct vattr va;
 641  641          treenode_t *tree_head = NULL;
 642  642          timespec_t now;
 643  643          nfs_export_t *ne;
 644  644  
 645  645          ne = exip->exi_ne;
 646  646          ASSERT3P(ne, ==, nfs_get_export());     /* curzone reality check */
 647  647          ASSERT(RW_WRITE_HELD(&ne->exported_lock));
 648  648  
 649  649          gethrestime(&now);
 650  650  
 651  651          vp = exip->exi_vp;
 652  652          VN_HOLD(vp);
  
    | 
      ↓ open down ↓ | 
    652 lines elided | 
    
      ↑ open up ↑ | 
  
 653  653          exportdir = 1;
 654  654  
 655  655          for (;;) {
 656  656  
 657  657                  bzero(&fid, sizeof (fid));
 658  658                  fid.fid_len = MAXFIDSZ;
 659  659                  error = vop_fid_pseudo(vp, &fid);
 660  660                  if (error)
 661  661                          break;
 662  662  
 663      -                /* XXX KEBE ASKS DO WE NEED THIS?!? */
 664  663                  ASSERT3U(exip->exi_zoneid, ==, curzone->zone_id);
 665  664                  /*
 666  665                   * The root of the file system, or the zone's root for
 667  666                   * in-zone NFS service needs special handling
 668  667                   */
 669  668                  if (vp->v_flag & VROOT || vp == EXI_TO_ZONEROOTVP(exip)) {
 670  669                          if (!exportdir) {
 671  670                                  struct exportinfo *exi;
 672  671  
 673  672                                  /*
 674  673                                   * Check if this VROOT dir is already exported.
 675  674                                   * If so, then attach the pseudonodes.  If not,
 676  675                                   * then continue .. traversal until we hit a
 677  676                                   * VROOT export (pseudo or real).
 678  677                                   */
 679  678                                  exi = checkexport4(&vp->v_vfsp->vfs_fsid, &fid,
 680  679                                      vp);
 681  680                                  if (exi != NULL) {
 682  681                                          /*
 683  682                                           * Found an export info
 684  683                                           *
 685  684                                           * Extend the list of visible
 686  685                                           * directories whether it's a pseudo
 687  686                                           * or a real export.
 688  687                                           */
 689  688                                          more_visible(exi, tree_head);
 690  689                                          break;  /* and climb no further */
 691  690                                  }
 692  691  
 693  692                                  /*
 694  693                                   * Found the root directory of a filesystem
 695  694                                   * that isn't exported.  Need to export
 696  695                                   * this as a pseudo export so that an NFS v4
 697  696                                   * client can do lookups in it.
 698  697                                   */
 699  698                                  new_exi = pseudo_exportfs(ne, vp, &fid,
 700  699                                      vis_head, NULL);
 701  700                                  vis_head = NULL;
 702  701                          }
 703  702  
 704  703                          if (VN_IS_CURZONEROOT(vp)) {
 705  704                                  /* at system root */
 706  705                                  /*
 707  706                                   * If sharing "/", new_exi is shared exportinfo
 708  707                                   * (exip). Otherwise, new_exi is exportinfo
 709  708                                   * created by pseudo_exportfs() above.
 710  709                                   */
 711  710                                  ne->ns_root = tree_prepend_node(tree_head, NULL,
 712  711                                      new_exi);
 713  712  
 714  713                                  /* Update the change timestamp */
 715  714                                  tree_update_change(ne, ne->ns_root, &now);
 716  715  
 717  716                                  break;
 718  717                          }
 719  718  
 720  719                          /*
 721  720                           * Traverse across the mountpoint and continue the
 722  721                           * climb on the mounted-on filesystem.
 723  722                           */
 724  723                          vp = untraverse(vp, ne->exi_root->exi_vp);
 725  724                          exportdir = 0;
 726  725                          continue;
 727  726                  }
 728  727  
 729  728                  /*
 730  729                   * Do a getattr to obtain the nodeid (inode num)
 731  730                   * for this vnode.
 732  731                   */
 733  732                  va.va_mask = AT_NODEID;
 734  733                  error = VOP_GETATTR(vp, &va, 0, CRED(), NULL);
 735  734                  if (error)
 736  735                          break;
 737  736  
 738  737                  /*
 739  738                   *  Add this directory fid to visible list
 740  739                   */
 741  740                  visp = kmem_alloc(sizeof (*visp), KM_SLEEP);
 742  741                  VN_HOLD(vp);
 743  742                  visp->vis_vp = vp;
 744  743                  visp->vis_fid = fid;            /* structure copy */
 745  744                  visp->vis_ino = va.va_nodeid;
 746  745                  visp->vis_count = 1;
 747  746                  visp->vis_exported = exportdir;
 748  747                  visp->vis_secinfo = NULL;
 749  748                  visp->vis_seccnt = 0;
 750  749                  visp->vis_change = now;         /* structure copy */
 751  750                  visp->vis_next = vis_head;
 752  751                  vis_head = visp;
 753  752  
 754  753                  /*
 755  754                   * Will set treenode's pointer to exportinfo to
 756  755                   * 1. shared exportinfo (exip) - if first visit here
 757  756                   * 2. freshly allocated pseudo export (if any)
 758  757                   * 3. null otherwise
 759  758                   */
 760  759                  tree_head = tree_prepend_node(tree_head, visp, new_exi);
 761  760                  new_exi = NULL;
 762  761  
 763  762                  /*
 764  763                   * Now, do a ".." to find parent dir of vp.
 765  764                   */
 766  765                  error = VOP_LOOKUP(vp, "..", &dvp, NULL, 0, NULL, CRED(),
 767  766                      NULL, NULL, NULL);
 768  767  
 769  768                  if (error == ENOTDIR && exportdir) {
 770  769                          dvp = exip->exi_dvp;
 771  770                          ASSERT(dvp != NULL);
 772  771                          VN_HOLD(dvp);
 773  772                          error = 0;
 774  773                  }
 775  774  
 776  775                  if (error)
 777  776                          break;
 778  777  
 779  778                  exportdir = 0;
 780  779                  VN_RELE(vp);
 781  780                  vp = dvp;
 782  781          }
 783  782  
 784  783          VN_RELE(vp);
 785  784  
 786  785          /*
 787  786           * We can have set error due to error in:
 788  787           * 1. vop_fid_pseudo()
 789  788           * 2. VOP_GETATTR()
 790  789           * 3. VOP_LOOKUP()
 791  790           * We must free pseudo exportinfos, visibles and treenodes.
 792  791           * Visibles are referenced from treenode_t::tree_vis and
 793  792           * exportinfo_t::exi_visible. To avoid double freeing, only
 794  793           * exi_visible pointer is used, via exi_rele(), for the clean-up.
 795  794           */
 796  795          if (error) {
 797  796                  /* Free unconnected visibles, if there are any. */
 798  797                  if (vis_head)
 799  798                          free_visible(vis_head);
 800  799  
 801  800                  /* Connect unconnected exportinfo, if there is any. */
 802  801                  if (new_exi && new_exi != exip)
 803  802                          tree_head = tree_prepend_node(tree_head, NULL, new_exi);
 804  803  
 805  804                  while (tree_head) {
 806  805                          treenode_t *t2 = tree_head;
 807  806                          exportinfo_t *e  = tree_head->tree_exi;
 808  807                          /* exip will be freed in exportfs() */
 809  808                          if (e && e != exip) {
 810  809                                  mutex_enter(&nfs_exi_id_lock);
 811  810                                  avl_remove(&exi_id_tree, e);
 812  811                                  mutex_exit(&nfs_exi_id_lock);
 813  812                                  export_unlink(ne, e);
 814  813                                  exi_rele(e);
 815  814                          }
 816  815                          tree_head = tree_head->tree_child_first;
 817  816                          kmem_free(t2, sizeof (*t2));
 818  817                  }
 819  818          }
 820  819  
 821  820          return (error);
 822  821  }
 823  822  
 824  823  /*
 825  824   * Walk up the tree and:
 826  825   * 1. release pseudo exportinfo if it has no child
 827  826   * 2. release visible in parent's exportinfo
 828  827   * 3. delete non-exported leaf nodes from tree
 829  828   *
 830  829   * Deleting of nodes will start only if the unshared
 831  830   * node was a leaf node.
 832  831   * Deleting of nodes will finish when we reach a node which
 833  832   * has children or is a real export, then we might still need
 834  833   * to continue releasing visibles, until we reach VROOT or zone's root node.
 835  834   */
 836  835  void
 837  836  treeclimb_unexport(nfs_export_t *ne, struct exportinfo *exip)
 838  837  {
 839  838          treenode_t *tnode, *old_nd;
 840  839          treenode_t *connect_point = NULL;
 841  840  
 842  841          ASSERT(RW_WRITE_HELD(&ne->exported_lock));
 843  842          ASSERT(curzone->zone_id == exip->exi_zoneid ||
 844  843              curzone->zone_id == global_zone->zone_id);
 845  844  
 846  845          /*
 847  846           * exi_tree can be null for the zone root
 848  847           * which means we're already at the "top"
 849  848           * and there's nothing more to "climb".
 850  849           */
 851  850          tnode = exip->exi_tree;
 852  851          if (tnode == NULL) {
 853  852                  /* Should only happen for... */
 854  853                  ASSERT(exip == ne->exi_root);
 855  854                  return;
 856  855          }
 857  856  
 858  857          /*
 859  858           * The unshared exportinfo was unlinked in unexport().
 860  859           * Zeroing tree_exi ensures that we will skip it.
 861  860           */
 862  861          tnode->tree_exi = NULL;
 863  862  
 864  863          if (tnode->tree_vis != NULL) /* system root has tree_vis == NULL */
 865  864                  tnode->tree_vis->vis_exported = 0;
 866  865  
 867  866          while (tnode != NULL) {
 868  867  
 869  868                  /*
 870  869                   * Stop at VROOT (or zone root) node which is exported or has
 871  870                   * child.
 872  871                   */
 873  872                  if (TREE_ROOT(tnode) &&
 874  873                      (TREE_EXPORTED(tnode) || tnode->tree_child_first != NULL))
 875  874                          break;
 876  875  
 877  876                  /* Release pseudo export if it has no child */
 878  877                  if (TREE_ROOT(tnode) && !TREE_EXPORTED(tnode) &&
 879  878                      tnode->tree_child_first == NULL) {
 880  879                          mutex_enter(&nfs_exi_id_lock);
 881  880                          avl_remove(&exi_id_tree, tnode->tree_exi);
 882  881                          mutex_exit(&nfs_exi_id_lock);
 883  882                          export_unlink(ne, tnode->tree_exi);
 884  883                          exi_rele(tnode->tree_exi);
 885  884                          tnode->tree_exi = NULL;
 886  885                  }
 887  886  
 888  887                  /* Release visible in parent's exportinfo */
 889  888                  if (tnode->tree_vis != NULL)
 890  889                          less_visible(vis2exi(tnode), tnode->tree_vis);
 891  890  
 892  891                  /* Continue with parent */
 893  892                  old_nd = tnode;
 894  893                  tnode = tnode->tree_parent;
 895  894  
 896  895                  /* Remove itself, if this is a leaf and non-exported node */
 897  896                  if (old_nd->tree_child_first == NULL &&
 898  897                      !TREE_EXPORTED(old_nd)) {
 899  898                          tree_remove_node(ne, old_nd);
 900  899                          connect_point = tnode;
 901  900                  }
 902  901          }
 903  902  
 904  903          /* Update the change timestamp */
 905  904          if (connect_point != NULL)
 906  905                  tree_update_change(ne, connect_point, NULL);
 907  906  }
 908  907  
 909  908  /*
 910  909   * Traverse backward across mountpoint from the
 911  910   * root vnode of a filesystem to its mounted-on
 912  911   * vnode.
 913  912   */
 914  913  vnode_t *
 915  914  untraverse(vnode_t *vp, vnode_t *zone_rootvp)
 916  915  {
 917  916          vnode_t *tvp, *nextvp;
 918  917  
 919  918          tvp = vp;
 920  919          for (;;) {
 921  920                  if (!(tvp->v_flag & VROOT) && !VN_CMP(tvp, zone_rootvp))
 922  921                          break;
 923  922  
 924  923                  /* lock vfs to prevent unmount of this vfs */
 925  924                  vfs_lock_wait(tvp->v_vfsp);
 926  925  
 927  926                  if ((nextvp = tvp->v_vfsp->vfs_vnodecovered) == NULL) {
 928  927                          vfs_unlock(tvp->v_vfsp);
 929  928                          break;
 930  929                  }
 931  930  
 932  931                  /*
 933  932                   * Hold nextvp to prevent unmount.  After unlock vfs and
 934  933                   * rele tvp, any number of overlays could be unmounted.
 935  934                   * Putting a hold on vfs_vnodecovered will only allow
 936  935                   * tvp's vfs to be unmounted. Of course if caller placed
 937  936                   * extra hold on vp before calling untraverse, the following
 938  937                   * hold would not be needed.  Since prev actions of caller
 939  938                   * are unknown, we need to hold here just to be safe.
 940  939                   */
 941  940                  VN_HOLD(nextvp);
 942  941                  vfs_unlock(tvp->v_vfsp);
 943  942                  VN_RELE(tvp);
 944  943                  tvp = nextvp;
 945  944          }
 946  945  
 947  946          return (tvp);
 948  947  }
 949  948  
 950  949  /*
 951  950   * Given an exportinfo, climb up to find the exportinfo for the VROOT
 952  951   * (or zone root) of the filesystem.
 953  952   *
 954  953   * e.g.         /
 955  954   *              |
 956  955   *              a (VROOT) pseudo-exportinfo
 957  956   *              |
 958  957   *              b
 959  958   *              |
 960  959   *              c  #share /a/b/c
 961  960   *              |
 962  961   *              d
 963  962   *
 964  963   * where c is in the same filesystem as a.
 965  964   * So, get_root_export(*exportinfo_for_c) returns exportinfo_for_a
 966  965   *
 967  966   * If d is shared, then c will be put into a's visible list.
 968  967   * Note: visible list is per filesystem and is attached to the
 969  968   * VROOT exportinfo.  Returned exi does NOT have a new hold.
 970  969   */
 971  970  struct exportinfo *
 972  971  get_root_export(struct exportinfo *exip)
 973  972  {
 974  973          treenode_t *tnode = exip->exi_tree;
 975  974          exportinfo_t *exi = NULL;
 976  975  
 977  976          while (tnode) {
 978  977                  if (TREE_ROOT(tnode)) {
 979  978                          exi = tnode->tree_exi;
 980  979                          break;
 981  980                  }
 982  981                  tnode = tnode->tree_parent;
 983  982          }
 984  983          ASSERT(exi);
 985  984          return (exi);
 986  985  }
 987  986  
 988  987  /*
 989  988   * Return true if the supplied vnode has a sub-directory exported.
 990  989   */
 991  990  int
 992  991  has_visible(struct exportinfo *exi, vnode_t *vp)
 993  992  {
 994  993          struct exp_visible *visp;
 995  994          fid_t fid;
 996  995          bool_t vp_is_exported;
 997  996  
 998  997          vp_is_exported = VN_CMP(vp, exi->exi_vp);
 999  998  
1000  999          /*
1001 1000           * An exported root vnode has a sub-dir shared if it has a visible
1002 1001           * list.  i.e. if it does not have a visible list, then there is no
1003 1002           * node in this filesystem leads to any other shared node.
1004 1003           */
1005 1004          ASSERT3P(curzone->zone_id, ==, exi->exi_zoneid);
1006 1005          if (vp_is_exported &&
1007 1006              ((vp->v_flag & VROOT) || VN_IS_CURZONEROOT(vp))) {
1008 1007                  return (exi->exi_visible ? 1 : 0);
1009 1008          }
1010 1009  
1011 1010          /*
1012 1011           * Only the exportinfo of a fs root node may have a visible list.
1013 1012           * Either it is a pseudo root node, or a real exported root node.
1014 1013           */
1015 1014          exi = get_root_export(exi);
1016 1015  
1017 1016          if (!exi->exi_visible)
1018 1017                  return (0);
1019 1018  
1020 1019          /* Get the fid of the vnode */
1021 1020          bzero(&fid, sizeof (fid));
1022 1021          fid.fid_len = MAXFIDSZ;
1023 1022          if (vop_fid_pseudo(vp, &fid) != 0) {
1024 1023                  return (0);
1025 1024          }
1026 1025  
1027 1026          /*
1028 1027           * See if vp is in the visible list of the root node exportinfo.
1029 1028           */
1030 1029          for (visp = exi->exi_visible; visp; visp = visp->vis_next) {
1031 1030                  if (EQFID(&fid, &visp->vis_fid)) {
1032 1031                          /*
1033 1032                           * If vp is an exported non-root node with only 1 path
1034 1033                           * count (for itself), it indicates no sub-dir shared
1035 1034                           * using this vp as a path.
1036 1035                           */
1037 1036                          if (vp_is_exported && visp->vis_count < 2)
1038 1037                                  break;
1039 1038  
1040 1039                          return (1);
1041 1040                  }
1042 1041          }
1043 1042  
1044 1043          return (0);
1045 1044  }
1046 1045  
1047 1046  /*
1048 1047   * Returns true if the supplied vnode is visible
1049 1048   * in this export.  If vnode is visible, return
1050 1049   * vis_exported in expseudo.
1051 1050   */
1052 1051  int
1053 1052  nfs_visible(struct exportinfo *exi, vnode_t *vp, int *expseudo)
1054 1053  {
1055 1054          struct exp_visible *visp;
1056 1055          fid_t fid;
1057 1056  
1058 1057          /*
1059 1058           * First check to see if vp is export root.
1060 1059           *
1061 1060           * A pseudo export root can never be exported
1062 1061           * (it would be a real export then); however,
1063 1062           * it is always visible.  If a pseudo root object
1064 1063           * was exported by server admin, then the entire
1065 1064           * pseudo exportinfo (and all visible entries) would
1066 1065           * be destroyed.  A pseudo exportinfo only exists
1067 1066           * to provide access to real (descendant) export(s).
1068 1067           *
1069 1068           * Previously, rootdir was special cased here; however,
1070 1069           * the export root special case handles the rootdir
1071 1070           * case also.
1072 1071           */
1073 1072          if (VN_CMP(vp, exi->exi_vp)) {
1074 1073                  *expseudo = 0;
1075 1074                  return (1);
1076 1075          }
1077 1076  
1078 1077          /*
1079 1078           * Only a PSEUDO node has a visible list or an exported VROOT
1080 1079           * node may have a visible list.
1081 1080           */
1082 1081          if (!PSEUDO(exi))
1083 1082                  exi = get_root_export(exi);
1084 1083  
1085 1084          /* Get the fid of the vnode */
1086 1085  
1087 1086          bzero(&fid, sizeof (fid));
1088 1087          fid.fid_len = MAXFIDSZ;
1089 1088          if (vop_fid_pseudo(vp, &fid) != 0) {
1090 1089                  *expseudo = 0;
1091 1090                  return (0);
1092 1091          }
1093 1092  
1094 1093          /*
1095 1094           * We can't trust VN_CMP() above because of LOFS.
1096 1095           * Even though VOP_CMP will do the right thing for LOFS
1097 1096           * objects, VN_CMP will short circuit out early when the
1098 1097           * vnode ops ptrs are different.  Just in case we're dealing
1099 1098           * with LOFS, compare exi_fid/fsid here.
1100 1099           *
1101 1100           * expseudo is not set because this is not an export
1102 1101           */
1103 1102          if (EQFID(&exi->exi_fid, &fid) &&
1104 1103              EQFSID(&exi->exi_fsid, &vp->v_vfsp->vfs_fsid)) {
1105 1104                  *expseudo = 0;
1106 1105                  return (1);
1107 1106          }
1108 1107  
1109 1108  
1110 1109          /* See if it matches any fid in the visible list */
1111 1110  
1112 1111          for (visp = exi->exi_visible; visp; visp = visp->vis_next) {
1113 1112                  if (EQFID(&fid, &visp->vis_fid)) {
1114 1113                          *expseudo = visp->vis_exported;
1115 1114                          return (1);
1116 1115                  }
1117 1116          }
1118 1117  
1119 1118          *expseudo = 0;
1120 1119  
1121 1120          return (0);
1122 1121  }
1123 1122  
1124 1123  /*
1125 1124   * Returns true if the supplied vnode is the
1126 1125   * directory of an export point.
1127 1126   */
1128 1127  int
1129 1128  nfs_exported(struct exportinfo *exi, vnode_t *vp)
1130 1129  {
1131 1130          struct exp_visible *visp;
1132 1131          fid_t fid;
1133 1132  
1134 1133          /*
1135 1134           * First check to see if vp is the export root
1136 1135           * This check required for the case of lookup ..
1137 1136           * where .. is a V_ROOT vnode and a pseudo exportroot.
1138 1137           * Pseudo export root objects do not have an entry
1139 1138           * in the visible list even though every V_ROOT
1140 1139           * pseudonode is visible.  It is safe to compare
1141 1140           * vp here because pseudo_exportfs put a hold on
1142 1141           * it when exi_vp was initialized.
1143 1142           *
1144 1143           * Note: VN_CMP() won't match for LOFS shares, but they're
1145 1144           * handled below w/EQFID/EQFSID.
1146 1145           */
1147 1146          if (VN_CMP(vp, exi->exi_vp))
1148 1147                  return (1);
1149 1148  
1150 1149          /* Get the fid of the vnode */
1151 1150  
1152 1151          bzero(&fid, sizeof (fid));
1153 1152          fid.fid_len = MAXFIDSZ;
1154 1153          if (vop_fid_pseudo(vp, &fid) != 0)
1155 1154                  return (0);
1156 1155  
1157 1156          if (EQFID(&fid, &exi->exi_fid) &&
1158 1157              EQFSID(&vp->v_vfsp->vfs_fsid, &exi->exi_fsid)) {
1159 1158                  return (1);
1160 1159          }
1161 1160  
1162 1161          /* See if it matches any fid in the visible list */
1163 1162  
1164 1163          for (visp = exi->exi_visible; visp; visp = visp->vis_next) {
1165 1164                  if (EQFID(&fid, &visp->vis_fid))
1166 1165                          return (visp->vis_exported);
1167 1166          }
1168 1167  
1169 1168          return (0);
1170 1169  }
1171 1170  
1172 1171  /*
1173 1172   * Returns true if the supplied inode is visible
1174 1173   * in this export.  This function is used by
1175 1174   * readdir which uses inode numbers from the
1176 1175   * directory.
1177 1176   *
1178 1177   * NOTE: this code does not match inode number for ".",
1179 1178   * but it isn't required because NFS4 server rddir
1180 1179   * skips . and .. entries.
1181 1180   */
1182 1181  int
1183 1182  nfs_visible_inode(struct exportinfo *exi, ino64_t ino,
1184 1183      struct exp_visible **visp)
1185 1184  {
1186 1185          /*
1187 1186           * Only a PSEUDO node has a visible list or an exported VROOT
1188 1187           * node may have a visible list.
1189 1188           */
1190 1189          if (!PSEUDO(exi))
1191 1190                  exi = get_root_export(exi);
1192 1191  
1193 1192          for (*visp = exi->exi_visible; *visp != NULL; *visp = (*visp)->vis_next)
1194 1193                  if ((u_longlong_t)ino == (*visp)->vis_ino) {
1195 1194                          return (1);
1196 1195                  }
1197 1196  
1198 1197          return (0);
1199 1198  }
1200 1199  
1201 1200  /*
1202 1201   * Get the change attribute from visible and returns TRUE.
1203 1202   * If the change value is not available returns FALSE.
1204 1203   */
1205 1204  bool_t
1206 1205  nfs_visible_change(struct exportinfo *exi, vnode_t *vp, timespec_t *change)
1207 1206  {
1208 1207          struct exp_visible *visp;
1209 1208          fid_t fid;
1210 1209          treenode_t *node;
1211 1210          nfs_export_t *ne = nfs_get_export();
1212 1211  
1213 1212          /*
1214 1213           * First check to see if vp is export root.
1215 1214           */
1216 1215          if (VN_CMP(vp, exi->exi_vp))
1217 1216                  goto exproot;
1218 1217  
1219 1218          /*
1220 1219           * Only a PSEUDO node has a visible list or an exported VROOT
1221 1220           * node may have a visible list.
1222 1221           */
1223 1222          if (!PSEUDO(exi))
1224 1223                  exi = get_root_export(exi);
1225 1224  
1226 1225          /* Get the fid of the vnode */
1227 1226          bzero(&fid, sizeof (fid));
1228 1227          fid.fid_len = MAXFIDSZ;
1229 1228          if (vop_fid_pseudo(vp, &fid) != 0)
1230 1229                  return (FALSE);
1231 1230  
1232 1231          /*
1233 1232           * We can't trust VN_CMP() above because of LOFS.
1234 1233           * Even though VOP_CMP will do the right thing for LOFS
1235 1234           * objects, VN_CMP will short circuit out early when the
1236 1235           * vnode ops ptrs are different.  Just in case we're dealing
1237 1236           * with LOFS, compare exi_fid/fsid here.
1238 1237           */
1239 1238          if (EQFID(&exi->exi_fid, &fid) &&
1240 1239              EQFSID(&exi->exi_fsid, &vp->v_vfsp->vfs_fsid))
1241 1240                  goto exproot;
1242 1241  
1243 1242          /* See if it matches any fid in the visible list */
1244 1243          for (visp = exi->exi_visible; visp; visp = visp->vis_next) {
1245 1244                  if (EQFID(&fid, &visp->vis_fid)) {
1246 1245                          *change = visp->vis_change;
1247 1246                          return (TRUE);
1248 1247                  }
1249 1248          }
1250 1249  
1251 1250          return (FALSE);
1252 1251  
1253 1252  exproot:
1254 1253          /* The VROOT export have its visible available through treenode */
1255 1254          node = exi->exi_tree;
1256 1255          if (node != ne->ns_root) {
1257 1256                  ASSERT(node->tree_vis != NULL);
1258 1257                  *change = node->tree_vis->vis_change;
1259 1258          } else {
1260 1259                  ASSERT(node->tree_vis == NULL);
1261 1260                  *change = ne->ns_root_change;
1262 1261          }
1263 1262          return (TRUE);
1264 1263  }
1265 1264  
1266 1265  /*
1267 1266   * Update the change attribute value for a particular treenode.  The change
1268 1267   * attribute value is stored in the visible attached to the treenode, or in the
1269 1268   * ns_root_change.
1270 1269   *
1271 1270   * If the change value is not supplied, the current time is used.
1272 1271   */
1273 1272  void
1274 1273  tree_update_change(nfs_export_t *ne, treenode_t *tnode, timespec_t *change)
1275 1274  {
1276 1275          timespec_t *vis_change;
1277 1276  
1278 1277          ASSERT(tnode != NULL);
1279 1278          ASSERT((tnode != ne->ns_root && tnode->tree_vis != NULL) ||
1280 1279              (tnode == ne->ns_root && tnode->tree_vis == NULL));
1281 1280  
1282 1281          vis_change = tnode == ne->ns_root ? &ne->ns_root_change
1283 1282              : &tnode->tree_vis->vis_change;
1284 1283  
1285 1284          if (change != NULL)
1286 1285                  *vis_change = *change;
1287 1286          else
1288 1287                  gethrestime(vis_change);
1289 1288  }
  
    | 
      ↓ open down ↓ | 
    616 lines elided | 
    
      ↑ open up ↑ | 
  
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX