162306a36Sopenharmony_ci// SPDX-License-Identifier: GPL-2.0
262306a36Sopenharmony_ci#define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
362306a36Sopenharmony_ci
462306a36Sopenharmony_ci#include <linux/slab.h>
562306a36Sopenharmony_ci#include <linux/types.h>
662306a36Sopenharmony_ci#include <linux/mm.h>
762306a36Sopenharmony_ci#include <linux/fs.h>
862306a36Sopenharmony_ci#include <linux/miscdevice.h>
962306a36Sopenharmony_ci#include <linux/init.h>
1062306a36Sopenharmony_ci#include <linux/capability.h>
1162306a36Sopenharmony_ci
1262306a36Sopenharmony_ci#include <xen/xen.h>
1362306a36Sopenharmony_ci#include <xen/page.h>
1462306a36Sopenharmony_ci#include <xen/xenbus.h>
1562306a36Sopenharmony_ci#include <xen/xenbus_dev.h>
1662306a36Sopenharmony_ci#include <xen/grant_table.h>
1762306a36Sopenharmony_ci#include <xen/events.h>
1862306a36Sopenharmony_ci#include <asm/xen/hypervisor.h>
1962306a36Sopenharmony_ci
2062306a36Sopenharmony_ci#include "xenbus.h"
2162306a36Sopenharmony_ci
2262306a36Sopenharmony_cistatic int xenbus_backend_open(struct inode *inode, struct file *filp)
2362306a36Sopenharmony_ci{
2462306a36Sopenharmony_ci	if (!capable(CAP_SYS_ADMIN))
2562306a36Sopenharmony_ci		return -EPERM;
2662306a36Sopenharmony_ci
2762306a36Sopenharmony_ci	return nonseekable_open(inode, filp);
2862306a36Sopenharmony_ci}
2962306a36Sopenharmony_ci
3062306a36Sopenharmony_cistatic long xenbus_alloc(domid_t domid)
3162306a36Sopenharmony_ci{
3262306a36Sopenharmony_ci	struct evtchn_alloc_unbound arg;
3362306a36Sopenharmony_ci	int err = -EEXIST;
3462306a36Sopenharmony_ci
3562306a36Sopenharmony_ci	xs_suspend();
3662306a36Sopenharmony_ci
3762306a36Sopenharmony_ci	/* If xenstored_ready is nonzero, that means we have already talked to
3862306a36Sopenharmony_ci	 * xenstore and set up watches. These watches will be restored by
3962306a36Sopenharmony_ci	 * xs_resume, but that requires communication over the port established
4062306a36Sopenharmony_ci	 * below that is not visible to anyone until the ioctl returns.
4162306a36Sopenharmony_ci	 *
4262306a36Sopenharmony_ci	 * This can be resolved by splitting the ioctl into two parts
4362306a36Sopenharmony_ci	 * (postponing the resume until xenstored is active) but this is
4462306a36Sopenharmony_ci	 * unnecessarily complex for the intended use where xenstored is only
4562306a36Sopenharmony_ci	 * started once - so return -EEXIST if it's already running.
4662306a36Sopenharmony_ci	 */
4762306a36Sopenharmony_ci	if (xenstored_ready)
4862306a36Sopenharmony_ci		goto out_err;
4962306a36Sopenharmony_ci
5062306a36Sopenharmony_ci	gnttab_grant_foreign_access_ref(GNTTAB_RESERVED_XENSTORE, domid,
5162306a36Sopenharmony_ci			virt_to_gfn(xen_store_interface), 0 /* writable */);
5262306a36Sopenharmony_ci
5362306a36Sopenharmony_ci	arg.dom = DOMID_SELF;
5462306a36Sopenharmony_ci	arg.remote_dom = domid;
5562306a36Sopenharmony_ci
5662306a36Sopenharmony_ci	err = HYPERVISOR_event_channel_op(EVTCHNOP_alloc_unbound, &arg);
5762306a36Sopenharmony_ci	if (err)
5862306a36Sopenharmony_ci		goto out_err;
5962306a36Sopenharmony_ci
6062306a36Sopenharmony_ci	if (xen_store_evtchn > 0)
6162306a36Sopenharmony_ci		xb_deinit_comms();
6262306a36Sopenharmony_ci
6362306a36Sopenharmony_ci	xen_store_evtchn = arg.port;
6462306a36Sopenharmony_ci
6562306a36Sopenharmony_ci	xs_resume();
6662306a36Sopenharmony_ci
6762306a36Sopenharmony_ci	return arg.port;
6862306a36Sopenharmony_ci
6962306a36Sopenharmony_ci out_err:
7062306a36Sopenharmony_ci	xs_suspend_cancel();
7162306a36Sopenharmony_ci	return err;
7262306a36Sopenharmony_ci}
7362306a36Sopenharmony_ci
7462306a36Sopenharmony_cistatic long xenbus_backend_ioctl(struct file *file, unsigned int cmd,
7562306a36Sopenharmony_ci				 unsigned long data)
7662306a36Sopenharmony_ci{
7762306a36Sopenharmony_ci	if (!capable(CAP_SYS_ADMIN))
7862306a36Sopenharmony_ci		return -EPERM;
7962306a36Sopenharmony_ci
8062306a36Sopenharmony_ci	switch (cmd) {
8162306a36Sopenharmony_ci	case IOCTL_XENBUS_BACKEND_EVTCHN:
8262306a36Sopenharmony_ci		if (xen_store_evtchn > 0)
8362306a36Sopenharmony_ci			return xen_store_evtchn;
8462306a36Sopenharmony_ci		return -ENODEV;
8562306a36Sopenharmony_ci	case IOCTL_XENBUS_BACKEND_SETUP:
8662306a36Sopenharmony_ci		return xenbus_alloc(data);
8762306a36Sopenharmony_ci	default:
8862306a36Sopenharmony_ci		return -ENOTTY;
8962306a36Sopenharmony_ci	}
9062306a36Sopenharmony_ci}
9162306a36Sopenharmony_ci
9262306a36Sopenharmony_cistatic int xenbus_backend_mmap(struct file *file, struct vm_area_struct *vma)
9362306a36Sopenharmony_ci{
9462306a36Sopenharmony_ci	size_t size = vma->vm_end - vma->vm_start;
9562306a36Sopenharmony_ci
9662306a36Sopenharmony_ci	if (!capable(CAP_SYS_ADMIN))
9762306a36Sopenharmony_ci		return -EPERM;
9862306a36Sopenharmony_ci
9962306a36Sopenharmony_ci	if ((size > PAGE_SIZE) || (vma->vm_pgoff != 0))
10062306a36Sopenharmony_ci		return -EINVAL;
10162306a36Sopenharmony_ci
10262306a36Sopenharmony_ci	if (remap_pfn_range(vma, vma->vm_start,
10362306a36Sopenharmony_ci			    virt_to_pfn(xen_store_interface),
10462306a36Sopenharmony_ci			    size, vma->vm_page_prot))
10562306a36Sopenharmony_ci		return -EAGAIN;
10662306a36Sopenharmony_ci
10762306a36Sopenharmony_ci	return 0;
10862306a36Sopenharmony_ci}
10962306a36Sopenharmony_ci
11062306a36Sopenharmony_cistatic const struct file_operations xenbus_backend_fops = {
11162306a36Sopenharmony_ci	.open = xenbus_backend_open,
11262306a36Sopenharmony_ci	.mmap = xenbus_backend_mmap,
11362306a36Sopenharmony_ci	.unlocked_ioctl = xenbus_backend_ioctl,
11462306a36Sopenharmony_ci};
11562306a36Sopenharmony_ci
11662306a36Sopenharmony_cistatic struct miscdevice xenbus_backend_dev = {
11762306a36Sopenharmony_ci	.minor = MISC_DYNAMIC_MINOR,
11862306a36Sopenharmony_ci	.name = "xen/xenbus_backend",
11962306a36Sopenharmony_ci	.fops = &xenbus_backend_fops,
12062306a36Sopenharmony_ci};
12162306a36Sopenharmony_ci
12262306a36Sopenharmony_cistatic int __init xenbus_backend_init(void)
12362306a36Sopenharmony_ci{
12462306a36Sopenharmony_ci	int err;
12562306a36Sopenharmony_ci
12662306a36Sopenharmony_ci	if (!xen_initial_domain())
12762306a36Sopenharmony_ci		return -ENODEV;
12862306a36Sopenharmony_ci
12962306a36Sopenharmony_ci	err = misc_register(&xenbus_backend_dev);
13062306a36Sopenharmony_ci	if (err)
13162306a36Sopenharmony_ci		pr_err("Could not register xenbus backend device\n");
13262306a36Sopenharmony_ci	return err;
13362306a36Sopenharmony_ci}
13462306a36Sopenharmony_cidevice_initcall(xenbus_backend_init);
135