modules/nfs4_acls.h

ソースコードを見る。

データ構造
union	_SMB_NFS4_ACEWHOID_T
struct	_SMB_ACE4PROP_T
struct	_SMB4ACL_T
struct	_SMB4ACE_T
型定義
typedef _SMB_NFS4_ACEWHOID_T	SMB_NFS4_ACEWHOID_T
typedef _SMB_ACE4PROP_T	SMB_ACE4PROP_T
typedef _SMB4ACL_T	SMB4ACL_T
typedef _SMB4ACE_T	SMB4ACE_T
typedef BOOL(*)	set_nfs4acl_native_fn_t (files_struct *, SMB4ACL_T *)
関数
SMB4ACL_T *	smb_create_smb4acl (void)
SMB4ACE_T *	smb_add_ace4 (SMB4ACL_T *acl, SMB_ACE4PROP_T *prop)
SMB_ACE4PROP_T *	smb_get_ace4 (SMB4ACE_T *ace)
SMB4ACE_T *	smb_first_ace4 (SMB4ACL_T *acl)
SMB4ACE_T *	smb_next_ace4 (SMB4ACE_T *ace)
uint32	smb_get_naces (SMB4ACL_T *acl)
size_t	smb_get_nt_acl_nfs4 (files_struct *fsp, uint32 security_info, SEC_DESC **ppdesc, SMB4ACL_T *acl)
BOOL	smb_set_nt_acl_nfs4 (files_struct *fsp, uint32 security_info_sent, SEC_DESC *psd, set_nfs4acl_native_fn_t set_nfs4_native)

---

型定義

typedef union _SMB_NFS4_ACEWHOID_T SMB_NFS4_ACEWHOID_T

typedef struct _SMB_ACE4PROP_T SMB_ACE4PROP_T

typedef struct _SMB4ACL_T SMB4ACL_T

typedef struct _SMB4ACE_T SMB4ACE_T

typedef BOOL(*) set_nfs4acl_native_fn_t(files_struct *, SMB4ACL_T *)

nfs4_acls.h の 139 行で定義されています。

---

関数

SMB4ACL_T* smb_create_smb4acl

(

void

)

nfs4_acls.c の 84 行で定義されています。

参照先 errno・_SMB_ACL4_INT_T::magic・main_loop_talloc_get().

参照元 aixjfs2_get_nfs4_acl()・gpfs_get_nfs4_acl()・smbacl4_win2nfs4().

{
        TALLOC_CTX *mem_ctx = main_loop_talloc_get();
        SMB_ACL4_INT_T  *acl = (SMB_ACL4_INT_T *)TALLOC_SIZE(mem_ctx, sizeof(SMB_ACL4_INT_T));
        if (acl==NULL)
        {
                DEBUG(0, ("TALLOC_SIZE failed\n"));
                errno = ENOMEM;
                return NULL;
        }
        memset(acl, 0, sizeof(SMB_ACL4_INT_T));
        acl->magic = SMB_ACL4_INT_MAGIC;
        /* acl->first, last = NULL not needed */
        return (SMB4ACL_T *)acl;
}

SMB4ACE_T* smb_add_ace4	(	SMB4ACL_T *	acl,
		SMB_ACE4PROP_T *	prop
	)

nfs4_acls.c の 100 行で定義されています。

参照先 errno・_SMB_ACL4_INT_T::first・get_validated_aclint()・_SMB_ACL4_INT_T::last・_SMB_ACE4_INT_T::magic・main_loop_talloc_get()・_SMB_ACL4_INT_T::naces・_SMB_ACE4_INT_T::next・_SMB_ACE4_INT_T::prop.

参照元 aixjfs2_get_nfs4_acl()・gpfs_get_nfs4_acl()・smbacl4_win2nfs4().

{
        SMB_ACL4_INT_T *aclint = get_validated_aclint(acl);
        TALLOC_CTX *mem_ctx = main_loop_talloc_get();
        SMB_ACE4_INT_T *ace;

        ace = (SMB_ACE4_INT_T *)TALLOC_SIZE(mem_ctx, sizeof(SMB_ACE4_INT_T));
        if (ace==NULL)
        {
                DEBUG(0, ("TALLOC_SIZE failed\n"));
                errno = ENOMEM;
                return NULL;
        }
        memset(ace, 0, sizeof(SMB_ACE4_INT_T));
        ace->magic = SMB_ACE4_INT_MAGIC;
        /* ace->next = NULL not needed */
        memcpy(&ace->prop, prop, sizeof(SMB_ACE4PROP_T));

        if (aclint->first==NULL)
        {
                aclint->first = ace;
                aclint->last = ace;
        } else {
                aclint->last->next = (void *)ace;
                aclint->last = ace;
        }
        aclint->naces++;

        return (SMB4ACE_T *)ace;
}

SMB_ACE4PROP_T* smb_get_ace4

(

SMB4ACE_T *

ace

)

nfs4_acls.c の 131 行で定義されています。

参照先 get_validated_aceint()・_SMB_ACE4_INT_T::prop.

参照元 aixjfs2_process_smbacl()・gpfsacl_process_smbacl().

{
        SMB_ACE4_INT_T *aceint = get_validated_aceint(ace);
        if (aceint==NULL)
                return NULL;

        return &aceint->prop;
}

SMB4ACE_T* smb_first_ace4

(

SMB4ACL_T *

acl

)

nfs4_acls.c の 149 行で定義されています。

参照先 _SMB_ACL4_INT_T::first・get_validated_aclint().

参照元 aixjfs2_process_smbacl()・gpfsacl_process_smbacl().

{
        SMB_ACL4_INT_T *aclint = get_validated_aclint(acl);
        if (aclint==NULL)
                return NULL;

        return (SMB4ACE_T *)aclint->first;
}

SMB4ACE_T* smb_next_ace4

(

SMB4ACE_T *

ace

)

nfs4_acls.c の 140 行で定義されています。

参照先 get_validated_aceint()・_SMB_ACE4_INT_T::next.

参照元 aixjfs2_process_smbacl()・gpfsacl_process_smbacl().

{
        SMB_ACE4_INT_T *aceint = get_validated_aceint(ace);
        if (aceint==NULL)
                return NULL;

        return (SMB4ACE_T *)aceint->next;
}

uint32 smb_get_naces

(

SMB4ACL_T *

acl

)

nfs4_acls.c の 158 行で定義されています。

参照先 get_validated_aclint()・_SMB_ACL4_INT_T::naces.

参照元 aixjfs2_process_smbacl()・smb_get_nt_acl_nfs4().

{
        SMB_ACL4_INT_T *aclint = get_validated_aclint(acl);
        if (aclint==NULL)
                return 0;

        return aclint->naces;
}

size_t smb_get_nt_acl_nfs4	(	files_struct *	fsp,
		uint32	security_info,
		SEC_DESC **	ppdesc,
		SMB4ACL_T *	acl
	)

nfs4_acls.c の 270 行で定義されています。

参照先 files_struct::fsp_name・gid_to_sid()・main_loop_talloc_get()・make_sec_acl()・make_sec_desc()・smb_get_naces()・smbacl4_GetFileOwner()・smbacl4_nfs42win()・uid_to_sid().

参照元 aixjfs2_get_nt_acl_common()・gpfsacl_get_nt_acl_common().

{
        int     good_aces = 0;
        SMB_STRUCT_STAT sbuf;
        DOM_SID sid_owner, sid_group;
        size_t sd_size = 0;
        SEC_ACE *nt_ace_list = NULL;
        SEC_ACL *psa = NULL;
        TALLOC_CTX *mem_ctx = main_loop_talloc_get();

        DEBUG(10, ("smb_get_nt_acl_nfs4 invoked for %s\n", fsp->fsp_name));

        if (acl==NULL || smb_get_naces(acl)==0)
                return 0; /* special because we shouldn't alloc 0 for win */

        if (smbacl4_GetFileOwner(fsp, &sbuf))
                return 0;

        uid_to_sid(&sid_owner, sbuf.st_uid);
        gid_to_sid(&sid_group, sbuf.st_gid);

        if (smbacl4_nfs42win(acl,
                &sid_owner,
                &sid_group,
                &nt_ace_list,
                &good_aces
                )==False) {
                DEBUG(8,("smbacl4_nfs42win failed\n"));
                return 0;
        }

        psa = make_sec_acl(mem_ctx, NT4_ACL_REVISION,
                good_aces, nt_ace_list);
        if (psa == NULL) {
                DEBUG(2,("make_sec_acl failed\n"));
                return 0;
        }

        DEBUG(10,("after make sec_acl\n"));
        *ppdesc = make_sec_desc(mem_ctx, SEC_DESC_REVISION,
                SEC_DESC_SELF_RELATIVE,
                (security_info & OWNER_SECURITY_INFORMATION)
                ? &sid_owner : NULL,
                (security_info & GROUP_SECURITY_INFORMATION)
                ? &sid_group : NULL,
                NULL, psa, &sd_size);
        if (*ppdesc==NULL) {
                DEBUG(2,("make_sec_desc failed\n"));
                return 0;
        }

        DEBUG(10, ("smb_get_nt_acl_nfs4 successfully exited with sd_size %d\n", sd_size));
        return sd_size;
}

BOOL smb_set_nt_acl_nfs4	(	files_struct *	fsp,
		uint32	security_info_sent,
		SEC_DESC *	psd,
		set_nfs4acl_native_fn_t	set_nfs4_native
	)

nfs4_acls.c の 580 行で定義されています。

参照先 files_struct::conn・current_user・security_descriptor_info::dacl・_smbacl4_vfs_params::do_chown・errno・files_struct::fsp_name・result・smbacl4_dump_nfs4acl()・smbacl4_get_vfs_params()・smbacl4_GetFileOwner()・smbacl4_win2nfs4()・strerror()・try_chown()・_unix_token::uid・unpack_nt_owners()・current_user::ut.

参照元 aixjfs2_set_nt_acl_common()・gpfsacl_set_nt_acl_internal().

{
        smbacl4_vfs_params params;
        SMB4ACL_T *acl = NULL;
        BOOL    result;

        SMB_STRUCT_STAT sbuf;
        BOOL need_chown = False;
        uid_t newUID = (uid_t)-1;
        gid_t newGID = (gid_t)-1;

        DEBUG(10, ("smb_set_nt_acl_nfs4 invoked for %s\n", fsp->fsp_name));

        if ((security_info_sent & (DACL_SECURITY_INFORMATION |
                GROUP_SECURITY_INFORMATION | OWNER_SECURITY_INFORMATION)) == 0)
        {
                DEBUG(9, ("security_info_sent (0x%x) ignored\n",
                        security_info_sent));
                return True; /* won't show error - later to be refined... */
        }

        /* Special behaviours */
        if (smbacl4_get_vfs_params(SMBACL4_PARAM_TYPE_NAME, fsp, &params))
                return False;

        if (smbacl4_GetFileOwner(fsp, &sbuf))
                return False;

        if (params.do_chown) {
                /* chown logic is a copy/paste from posix_acl.c:set_nt_acl */
                if (!unpack_nt_owners(SNUM(fsp->conn), &newUID, &newGID, security_info_sent, psd))
                {
                        DEBUG(8, ("unpack_nt_owners failed"));
                        return False;
                }
                if (((newUID != (uid_t)-1) && (sbuf.st_uid != newUID)) ||
                        ((newGID != (gid_t)-1) && (sbuf.st_gid != newGID))) {
                        need_chown = True;
                }
                if (need_chown) {
                        if ((newUID == (uid_t)-1 || newUID == current_user.ut.uid)) {
                                if(try_chown(fsp->conn, fsp->fsp_name, newUID, newGID)) {
                                        DEBUG(3,("chown %s, %u, %u failed. Error = %s.\n",
                                                fsp->fsp_name, (unsigned int)newUID, (unsigned int)newGID, strerror(errno) ));
                                        return False;
                                }
                                DEBUG(10,("chown %s, %u, %u succeeded.\n",
                                        fsp->fsp_name, (unsigned int)newUID, (unsigned int)newGID));
                                if (smbacl4_GetFileOwner(fsp, &sbuf))
                                        return False;
                                need_chown = False;
                        } else { /* chown is needed, but _after_ changing acl */
                                sbuf.st_uid = newUID; /* OWNER@ in case of e_special */
                                sbuf.st_gid = newGID; /* GROUP@ in case of e_special */
                        }
                }
        }

        if ((security_info_sent & DACL_SECURITY_INFORMATION)!=0 && psd->dacl!=NULL)
        {
                acl = smbacl4_win2nfs4(psd->dacl, &params, sbuf.st_uid, sbuf.st_gid);
                if (!acl)
                        return False;

                smbacl4_dump_nfs4acl(10, acl);

                result = set_nfs4_native(fsp, acl);
                if (result!=True)
                {
                        DEBUG(10, ("set_nfs4_native failed with %s\n", strerror(errno)));
                        return False;
                }
        } else
                DEBUG(10, ("no dacl found; security_info_sent = 0x%x\n", security_info_sent));

        /* Any chown pending? */
        if (need_chown) {
                DEBUG(3,("chown#2 %s. uid = %u, gid = %u.\n",
                        fsp->fsp_name, (unsigned int)newUID, (unsigned int)newGID));
                if (try_chown(fsp->conn, fsp->fsp_name, newUID, newGID)) {
                        DEBUG(2,("chown#2 %s, %u, %u failed. Error = %s.\n",
                                fsp->fsp_name, (unsigned int)newUID, (unsigned int)newGID,
                                strerror(errno)));
                        return False;
                }
                DEBUG(10,("chown#2 %s, %u, %u succeeded.\n",
                        fsp->fsp_name, (unsigned int)newUID, (unsigned int)newGID));
        }

        DEBUG(10, ("smb_set_nt_acl_nfs4 succeeded\n"));
        return True;
}

---