libc/posix1e: Add acl_equiv_mode_np() function.
Reviewed by: kib, debdrup, gbe Approved by: kib Differential Revision: https://reviews.freebsd.org/D28255
This commit is contained in:
parent
937f807a36
commit
d81d5b2f2c
@ -17,6 +17,7 @@ SRCS+= acl_branding.c \
|
|||||||
acl_delete.c \
|
acl_delete.c \
|
||||||
acl_delete_entry.c \
|
acl_delete_entry.c \
|
||||||
acl_entry.c \
|
acl_entry.c \
|
||||||
|
acl_equiv_mode_np.c \
|
||||||
acl_flag.c \
|
acl_flag.c \
|
||||||
acl_free.c \
|
acl_free.c \
|
||||||
acl_from_mode_np.c \
|
acl_from_mode_np.c \
|
||||||
@ -56,6 +57,7 @@ MAN+= acl.3 \
|
|||||||
acl_delete_flag_np.3 \
|
acl_delete_flag_np.3 \
|
||||||
acl_delete_perm.3 \
|
acl_delete_perm.3 \
|
||||||
acl_dup.3 \
|
acl_dup.3 \
|
||||||
|
acl_equiv_mode_np.3 \
|
||||||
acl_free.3 \
|
acl_free.3 \
|
||||||
acl_from_mode_np.3 \
|
acl_from_mode_np.3 \
|
||||||
acl_from_text.3 \
|
acl_from_text.3 \
|
||||||
|
@ -87,5 +87,6 @@ FBSD_1.1 {
|
|||||||
|
|
||||||
FBSD_1.7 {
|
FBSD_1.7 {
|
||||||
acl_cmp_np;
|
acl_cmp_np;
|
||||||
|
acl_equiv_mode_np;
|
||||||
acl_from_mode_np;
|
acl_from_mode_np;
|
||||||
};
|
};
|
||||||
|
95
lib/libc/posix1e/acl_equiv_mode_np.3
Normal file
95
lib/libc/posix1e/acl_equiv_mode_np.3
Normal file
@ -0,0 +1,95 @@
|
|||||||
|
.\"-
|
||||||
|
.\" Copyright (c) 2021 Gleb Popov
|
||||||
|
.\" All rights reserved.
|
||||||
|
.\"
|
||||||
|
.\" Redistribution and use in source and binary forms, with or without
|
||||||
|
.\" modification, are permitted provided that the following conditions
|
||||||
|
.\" are met:
|
||||||
|
.\" 1. Redistributions of source code must retain the above copyright
|
||||||
|
.\" notice, this list of conditions and the following disclaimer.
|
||||||
|
.\" 2. Redistributions in binary form must reproduce the above copyright
|
||||||
|
.\" notice, this list of conditions and the following disclaimer in the
|
||||||
|
.\" documentation and/or other materials provided with the distribution.
|
||||||
|
.\"
|
||||||
|
.\" THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
|
||||||
|
.\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
||||||
|
.\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
|
||||||
|
.\" ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
|
||||||
|
.\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
|
||||||
|
.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
|
||||||
|
.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
|
||||||
|
.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
|
||||||
|
.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
|
||||||
|
.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
|
||||||
|
.\" SUCH DAMAGE.
|
||||||
|
.\"
|
||||||
|
.Dd January 20, 2021
|
||||||
|
.Dt ACL_EQUIV_MODE_NP 3
|
||||||
|
.Os
|
||||||
|
.Sh NAME
|
||||||
|
.Nm acl_equiv_mode_np
|
||||||
|
.Nd check if ACL can be represented as UNIX permissions
|
||||||
|
.Sh LIBRARY
|
||||||
|
.Lb libc
|
||||||
|
.Sh SYNOPSIS
|
||||||
|
.In sys/types.h
|
||||||
|
.In sys/acl.h
|
||||||
|
.Ft int
|
||||||
|
.Fn acl_equiv_mode_np "acl_t acl" "mode_t* mode_p"
|
||||||
|
.Sh DESCRIPTION
|
||||||
|
The
|
||||||
|
.Fn acl_equiv_mode_np
|
||||||
|
function is a non-portable call which checks that entries contained in the
|
||||||
|
.Va acl
|
||||||
|
argument use only the ACL_USER_OBJ, ACL_GROUP_OBJ, and ACL_OTHER tag types, and that
|
||||||
|
permissions contained in these entries consist only of ACL_READ, ACL_WRITE and
|
||||||
|
ACL_EXECUTE.
|
||||||
|
If the check succeeds, the ACL can be represented as traditional UNIX
|
||||||
|
file permissions bits set.
|
||||||
|
.Pp
|
||||||
|
If
|
||||||
|
.Va mode_p
|
||||||
|
is not NULL and the check succeeds, the function fills the argument with a mode
|
||||||
|
value corresponding to permissions contained in the ACL.
|
||||||
|
.Sh RETURN VALUES
|
||||||
|
Upon successful completion, the function returns 0 if the ACL can be represented
|
||||||
|
as UNIX permissions and 1 if it is not possible.
|
||||||
|
Otherwise, a value
|
||||||
|
of
|
||||||
|
.Va -1
|
||||||
|
is returned, and
|
||||||
|
.Va errno
|
||||||
|
is set to indicate the error.
|
||||||
|
.Sh ERRORS
|
||||||
|
If any of the following conditions occur, the
|
||||||
|
.Fn acl_equiv_mode_np
|
||||||
|
function returns a value of
|
||||||
|
.Va -1
|
||||||
|
and set
|
||||||
|
.Va errno
|
||||||
|
to the corresponding value:
|
||||||
|
.Bl -tag -width Er
|
||||||
|
.It Bq Er EINVAL
|
||||||
|
Argument
|
||||||
|
.Fa acl
|
||||||
|
does not point to a valid ACL.
|
||||||
|
.El
|
||||||
|
.Sh SEE ALSO
|
||||||
|
.Xr acl 3 ,
|
||||||
|
.Xr acl_from_mode_np 3 ,
|
||||||
|
.Xr posix1e 3
|
||||||
|
.Sh STANDARDS
|
||||||
|
POSIX.1e is described in IEEE POSIX.1e draft 17.
|
||||||
|
Discussion
|
||||||
|
of the draft continues on the cross-platform POSIX.1e implementation
|
||||||
|
mailing list.
|
||||||
|
To join this list, see the
|
||||||
|
.Fx
|
||||||
|
POSIX.1e implementation
|
||||||
|
page for more information.
|
||||||
|
.Sh HISTORY
|
||||||
|
POSIX.1e support was introduced in
|
||||||
|
.Fx 4.0 ,
|
||||||
|
and development continues.
|
||||||
|
.Sh AUTHORS
|
||||||
|
.An Gleb Popov
|
101
lib/libc/posix1e/acl_equiv_mode_np.c
Normal file
101
lib/libc/posix1e/acl_equiv_mode_np.c
Normal file
@ -0,0 +1,101 @@
|
|||||||
|
/*-
|
||||||
|
* SPDX-License-Identifier: BSD-2-Clause-FreeBSD
|
||||||
|
*
|
||||||
|
* Copyright (c) 2021 Gleb Popov
|
||||||
|
* All rights reserved.
|
||||||
|
*
|
||||||
|
* Redistribution and use in source and binary forms, with or without
|
||||||
|
* modification, are permitted provided that the following conditions
|
||||||
|
* are met:
|
||||||
|
* 1. Redistributions of source code must retain the above copyright
|
||||||
|
* notice, this list of conditions and the following disclaimer.
|
||||||
|
* 2. Redistributions in binary form must reproduce the above copyright
|
||||||
|
* notice, this list of conditions and the following disclaimer in the
|
||||||
|
* documentation and/or other materials provided with the distribution.
|
||||||
|
*
|
||||||
|
* THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
|
||||||
|
* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
||||||
|
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
|
||||||
|
* ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
|
||||||
|
* FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
|
||||||
|
* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
|
||||||
|
* OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
|
||||||
|
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
|
||||||
|
* LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
|
||||||
|
* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
|
||||||
|
* SUCH DAMAGE.
|
||||||
|
*/
|
||||||
|
/*
|
||||||
|
* acl_equiv_mode_np: Check if an ACL can be represented as a mode_t.
|
||||||
|
*/
|
||||||
|
|
||||||
|
#include <sys/cdefs.h>
|
||||||
|
__FBSDID("$FreeBSD$");
|
||||||
|
|
||||||
|
#include <sys/types.h>
|
||||||
|
#include <sys/param.h>
|
||||||
|
#include <sys/errno.h>
|
||||||
|
#include <sys/stat.h>
|
||||||
|
#include <sys/acl.h>
|
||||||
|
|
||||||
|
#include "acl_support.h"
|
||||||
|
|
||||||
|
int
|
||||||
|
acl_equiv_mode_np(acl_t acl, mode_t *mode_p)
|
||||||
|
{
|
||||||
|
mode_t ret_mode = 0;
|
||||||
|
|
||||||
|
if (acl == NULL) {
|
||||||
|
errno = EINVAL;
|
||||||
|
return (-1);
|
||||||
|
}
|
||||||
|
|
||||||
|
/* Linux returns 0 for ACL returned by acl_init() */
|
||||||
|
if (_acl_brand(acl) == ACL_BRAND_UNKNOWN && acl->ats_acl.acl_cnt == 0)
|
||||||
|
return (0);
|
||||||
|
|
||||||
|
// TODO: Do we want to handle ACL_BRAND_NFS4 in this function? */
|
||||||
|
if (_acl_brand(acl) != ACL_BRAND_POSIX)
|
||||||
|
return (1);
|
||||||
|
|
||||||
|
for (int cur_entry = 0; cur_entry < acl->ats_acl.acl_cnt; cur_entry++) {
|
||||||
|
acl_entry_t entry = &acl->ats_acl.acl_entry[cur_entry];
|
||||||
|
|
||||||
|
if ((entry->ae_perm & ACL_PERM_BITS) != entry->ae_perm)
|
||||||
|
return (1);
|
||||||
|
|
||||||
|
switch (entry->ae_tag) {
|
||||||
|
case ACL_USER_OBJ:
|
||||||
|
if (entry->ae_perm & ACL_READ)
|
||||||
|
ret_mode |= S_IRUSR;
|
||||||
|
if (entry->ae_perm & ACL_WRITE)
|
||||||
|
ret_mode |= S_IWUSR;
|
||||||
|
if (entry->ae_perm & ACL_EXECUTE)
|
||||||
|
ret_mode |= S_IXUSR;
|
||||||
|
break;
|
||||||
|
case ACL_GROUP_OBJ:
|
||||||
|
if (entry->ae_perm & ACL_READ)
|
||||||
|
ret_mode |= S_IRGRP;
|
||||||
|
if (entry->ae_perm & ACL_WRITE)
|
||||||
|
ret_mode |= S_IWGRP;
|
||||||
|
if (entry->ae_perm & ACL_EXECUTE)
|
||||||
|
ret_mode |= S_IXGRP;
|
||||||
|
break;
|
||||||
|
case ACL_OTHER:
|
||||||
|
if (entry->ae_perm & ACL_READ)
|
||||||
|
ret_mode |= S_IROTH;
|
||||||
|
if (entry->ae_perm & ACL_WRITE)
|
||||||
|
ret_mode |= S_IWOTH;
|
||||||
|
if (entry->ae_perm & ACL_EXECUTE)
|
||||||
|
ret_mode |= S_IXOTH;
|
||||||
|
break;
|
||||||
|
default:
|
||||||
|
return (1);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
if (mode_p != NULL)
|
||||||
|
*mode_p = ret_mode;
|
||||||
|
|
||||||
|
return (0);
|
||||||
|
}
|
@ -379,6 +379,7 @@ int acl_delete_def_link_np(const char *_path_p);
|
|||||||
int acl_delete_flag_np(acl_flagset_t _flagset_d, acl_flag_t _flag);
|
int acl_delete_flag_np(acl_flagset_t _flagset_d, acl_flag_t _flag);
|
||||||
int acl_delete_perm(acl_permset_t _permset_d, acl_perm_t _perm);
|
int acl_delete_perm(acl_permset_t _permset_d, acl_perm_t _perm);
|
||||||
acl_t acl_dup(acl_t _acl);
|
acl_t acl_dup(acl_t _acl);
|
||||||
|
int acl_equiv_mode_np(acl_t acl, mode_t *mode_p);
|
||||||
int acl_free(void *_obj_p);
|
int acl_free(void *_obj_p);
|
||||||
acl_t acl_from_mode_np(const mode_t mode);
|
acl_t acl_from_mode_np(const mode_t mode);
|
||||||
acl_t acl_from_text(const char *_buf_p);
|
acl_t acl_from_text(const char *_buf_p);
|
||||||
|
Loading…
Reference in New Issue
Block a user