Archive-Team
/
zfs
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases 103 Wiki Activity

skip permission checks for extended attributes 

zfs_zaccess_trivial() calls the generic_permission() to read
xattr attributes. This causes deadlock if called from
zpl_xattr_set_dir() context as xattr and the dent locks are
already held in this scenario. This commit skips the permissions
checks for extended attributes since the Linux VFS stack already
checks it before passing us the control.

Signed-off-by: Ameer Hamza <ahamza@ixsystems.com>
This commit is contained in:
Ameer Hamza 2022-11-23 01:28:13 +05:00 committed by Brian Behlendorf
parent d0f350c962
commit 75fbe7eb99
4 changed files with 6 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
module/os/linux/zfs/zfs_dir.c
View File

@ -1066,9 +1066,6 @@ zfs_make_xattrdir(znode_t *zp, vattr_t *vap, znode_t **xzpp, cred_t *cr)
*xzpp = NULL; *xzpp = NULL;
if ((error = zfs_zaccess(zp, ACE_WRITE_NAMED_ATTRS, 0, B_FALSE, cr)))
return (error);
if ((error = zfs_acl_ids_create(zp, IS_XATTR, vap, cr, NULL, if ((error = zfs_acl_ids_create(zp, IS_XATTR, vap, cr, NULL,
&acl_ids)) != 0) &acl_ids)) != 0)
return (error); return (error);

3
module/os/linux/zfs/zfs_vnops_os.c
View File

@ -579,6 +579,7 @@ zfs_create(znode_t *dzp, char *name, vattr_t *vap, int excl,
boolean_t fuid_dirtied; boolean_t fuid_dirtied;
boolean_t have_acl = B_FALSE; boolean_t have_acl = B_FALSE;
boolean_t waited = B_FALSE; boolean_t waited = B_FALSE;
boolean_t skip_acl = (flag & ATTR_NOACLCHECK) ? B_TRUE : B_FALSE;
/* /*
* If we have an ephemeral id, ACL, or XVATTR then * If we have an ephemeral id, ACL, or XVATTR then
@ -651,7 +652,7 @@ top:
* Create a new file object and update the directory * Create a new file object and update the directory
* to reference it. * to reference it.
*/ */
if ((error = zfs_zaccess(dzp, ACE_ADD_FILE, 0, B_FALSE, cr))) { if ((error = zfs_zaccess(dzp, ACE_ADD_FILE, 0, skip_acl, cr))) {
if (have_acl) if (have_acl)
zfs_acl_ids_free(&acl_ids); zfs_acl_ids_free(&acl_ids);
goto out; goto out;

2
module/os/linux/zfs/zpl_xattr.c
View File

@ -496,7 +496,7 @@ zpl_xattr_set_dir(struct inode *ip, const char *name, const void *value,
vap->va_gid = crgetgid(cr); vap->va_gid = crgetgid(cr);
error = -zfs_create(dxzp, (char *)name, vap, 0, 0644, &xzp, error = -zfs_create(dxzp, (char *)name, vap, 0, 0644, &xzp,
cr, 0, NULL); cr, ATTR_NOACLCHECK, NULL);
if (error) if (error)
goto out; goto out;
} }

3
tests/zfs-tests/tests/functional/acl/posix/posix_004_pos.ksh
View File

@ -35,6 +35,7 @@
# STRATEGY: # STRATEGY:
# 1. Prepare an appropriate ACL on the test directory # 1. Prepare an appropriate ACL on the test directory
# 2. Change the owner of the directory # 2. Change the owner of the directory
# 3. Reset and set the ACLs for test directory owned by the user
# #
verify_runnable "both" verify_runnable "both"
@ -44,6 +45,8 @@ log_must setfacl -d -m u:$ZFS_ACL_STAFF1:rwx $TESTDIR
log_must setfacl -b $TESTDIR log_must setfacl -b $TESTDIR
log_must chown $ZFS_ACL_STAFF1 $TESTDIR log_must chown $ZFS_ACL_STAFF1 $TESTDIR
log_must setfacl -b $TESTDIR
log_must setfacl -d -m u:$ZFS_ACL_STAFF1:rwx $TESTDIR
log_must chown 0 $TESTDIR log_must chown 0 $TESTDIR
log_pass "chown works with POSIX ACLs" log_pass "chown works with POSIX ACLs"