162306a36Sopenharmony_ci// SPDX-License-Identifier: GPL-2.0-only
262306a36Sopenharmony_ci#include <linux/export.h>
362306a36Sopenharmony_ci#include <linux/sched/signal.h>
462306a36Sopenharmony_ci#include <linux/sched/task.h>
562306a36Sopenharmony_ci#include <linux/fs.h>
662306a36Sopenharmony_ci#include <linux/path.h>
762306a36Sopenharmony_ci#include <linux/slab.h>
862306a36Sopenharmony_ci#include <linux/fs_struct.h>
962306a36Sopenharmony_ci#include "internal.h"
1062306a36Sopenharmony_ci
1162306a36Sopenharmony_ci/*
1262306a36Sopenharmony_ci * Replace the fs->{rootmnt,root} with {mnt,dentry}. Put the old values.
1362306a36Sopenharmony_ci * It can block.
1462306a36Sopenharmony_ci */
1562306a36Sopenharmony_civoid set_fs_root(struct fs_struct *fs, const struct path *path)
1662306a36Sopenharmony_ci{
1762306a36Sopenharmony_ci	struct path old_root;
1862306a36Sopenharmony_ci
1962306a36Sopenharmony_ci	path_get(path);
2062306a36Sopenharmony_ci	spin_lock(&fs->lock);
2162306a36Sopenharmony_ci	write_seqcount_begin(&fs->seq);
2262306a36Sopenharmony_ci	old_root = fs->root;
2362306a36Sopenharmony_ci	fs->root = *path;
2462306a36Sopenharmony_ci	write_seqcount_end(&fs->seq);
2562306a36Sopenharmony_ci	spin_unlock(&fs->lock);
2662306a36Sopenharmony_ci	if (old_root.dentry)
2762306a36Sopenharmony_ci		path_put(&old_root);
2862306a36Sopenharmony_ci}
2962306a36Sopenharmony_ci
3062306a36Sopenharmony_ci/*
3162306a36Sopenharmony_ci * Replace the fs->{pwdmnt,pwd} with {mnt,dentry}. Put the old values.
3262306a36Sopenharmony_ci * It can block.
3362306a36Sopenharmony_ci */
3462306a36Sopenharmony_civoid set_fs_pwd(struct fs_struct *fs, const struct path *path)
3562306a36Sopenharmony_ci{
3662306a36Sopenharmony_ci	struct path old_pwd;
3762306a36Sopenharmony_ci
3862306a36Sopenharmony_ci	path_get(path);
3962306a36Sopenharmony_ci	spin_lock(&fs->lock);
4062306a36Sopenharmony_ci	write_seqcount_begin(&fs->seq);
4162306a36Sopenharmony_ci	old_pwd = fs->pwd;
4262306a36Sopenharmony_ci	fs->pwd = *path;
4362306a36Sopenharmony_ci	write_seqcount_end(&fs->seq);
4462306a36Sopenharmony_ci	spin_unlock(&fs->lock);
4562306a36Sopenharmony_ci
4662306a36Sopenharmony_ci	if (old_pwd.dentry)
4762306a36Sopenharmony_ci		path_put(&old_pwd);
4862306a36Sopenharmony_ci}
4962306a36Sopenharmony_ci
5062306a36Sopenharmony_cistatic inline int replace_path(struct path *p, const struct path *old, const struct path *new)
5162306a36Sopenharmony_ci{
5262306a36Sopenharmony_ci	if (likely(p->dentry != old->dentry || p->mnt != old->mnt))
5362306a36Sopenharmony_ci		return 0;
5462306a36Sopenharmony_ci	*p = *new;
5562306a36Sopenharmony_ci	return 1;
5662306a36Sopenharmony_ci}
5762306a36Sopenharmony_ci
5862306a36Sopenharmony_civoid chroot_fs_refs(const struct path *old_root, const struct path *new_root)
5962306a36Sopenharmony_ci{
6062306a36Sopenharmony_ci	struct task_struct *g, *p;
6162306a36Sopenharmony_ci	struct fs_struct *fs;
6262306a36Sopenharmony_ci	int count = 0;
6362306a36Sopenharmony_ci
6462306a36Sopenharmony_ci	read_lock(&tasklist_lock);
6562306a36Sopenharmony_ci	for_each_process_thread(g, p) {
6662306a36Sopenharmony_ci		task_lock(p);
6762306a36Sopenharmony_ci		fs = p->fs;
6862306a36Sopenharmony_ci		if (fs) {
6962306a36Sopenharmony_ci			int hits = 0;
7062306a36Sopenharmony_ci			spin_lock(&fs->lock);
7162306a36Sopenharmony_ci			write_seqcount_begin(&fs->seq);
7262306a36Sopenharmony_ci			hits += replace_path(&fs->root, old_root, new_root);
7362306a36Sopenharmony_ci			hits += replace_path(&fs->pwd, old_root, new_root);
7462306a36Sopenharmony_ci			write_seqcount_end(&fs->seq);
7562306a36Sopenharmony_ci			while (hits--) {
7662306a36Sopenharmony_ci				count++;
7762306a36Sopenharmony_ci				path_get(new_root);
7862306a36Sopenharmony_ci			}
7962306a36Sopenharmony_ci			spin_unlock(&fs->lock);
8062306a36Sopenharmony_ci		}
8162306a36Sopenharmony_ci		task_unlock(p);
8262306a36Sopenharmony_ci	}
8362306a36Sopenharmony_ci	read_unlock(&tasklist_lock);
8462306a36Sopenharmony_ci	while (count--)
8562306a36Sopenharmony_ci		path_put(old_root);
8662306a36Sopenharmony_ci}
8762306a36Sopenharmony_ci
8862306a36Sopenharmony_civoid free_fs_struct(struct fs_struct *fs)
8962306a36Sopenharmony_ci{
9062306a36Sopenharmony_ci	path_put(&fs->root);
9162306a36Sopenharmony_ci	path_put(&fs->pwd);
9262306a36Sopenharmony_ci	kmem_cache_free(fs_cachep, fs);
9362306a36Sopenharmony_ci}
9462306a36Sopenharmony_ci
9562306a36Sopenharmony_civoid exit_fs(struct task_struct *tsk)
9662306a36Sopenharmony_ci{
9762306a36Sopenharmony_ci	struct fs_struct *fs = tsk->fs;
9862306a36Sopenharmony_ci
9962306a36Sopenharmony_ci	if (fs) {
10062306a36Sopenharmony_ci		int kill;
10162306a36Sopenharmony_ci		task_lock(tsk);
10262306a36Sopenharmony_ci		spin_lock(&fs->lock);
10362306a36Sopenharmony_ci		tsk->fs = NULL;
10462306a36Sopenharmony_ci		kill = !--fs->users;
10562306a36Sopenharmony_ci		spin_unlock(&fs->lock);
10662306a36Sopenharmony_ci		task_unlock(tsk);
10762306a36Sopenharmony_ci		if (kill)
10862306a36Sopenharmony_ci			free_fs_struct(fs);
10962306a36Sopenharmony_ci	}
11062306a36Sopenharmony_ci}
11162306a36Sopenharmony_ci
11262306a36Sopenharmony_cistruct fs_struct *copy_fs_struct(struct fs_struct *old)
11362306a36Sopenharmony_ci{
11462306a36Sopenharmony_ci	struct fs_struct *fs = kmem_cache_alloc(fs_cachep, GFP_KERNEL);
11562306a36Sopenharmony_ci	/* We don't need to lock fs - think why ;-) */
11662306a36Sopenharmony_ci	if (fs) {
11762306a36Sopenharmony_ci		fs->users = 1;
11862306a36Sopenharmony_ci		fs->in_exec = 0;
11962306a36Sopenharmony_ci		spin_lock_init(&fs->lock);
12062306a36Sopenharmony_ci		seqcount_spinlock_init(&fs->seq, &fs->lock);
12162306a36Sopenharmony_ci		fs->umask = old->umask;
12262306a36Sopenharmony_ci
12362306a36Sopenharmony_ci		spin_lock(&old->lock);
12462306a36Sopenharmony_ci		fs->root = old->root;
12562306a36Sopenharmony_ci		path_get(&fs->root);
12662306a36Sopenharmony_ci		fs->pwd = old->pwd;
12762306a36Sopenharmony_ci		path_get(&fs->pwd);
12862306a36Sopenharmony_ci		spin_unlock(&old->lock);
12962306a36Sopenharmony_ci	}
13062306a36Sopenharmony_ci	return fs;
13162306a36Sopenharmony_ci}
13262306a36Sopenharmony_ci
13362306a36Sopenharmony_ciint unshare_fs_struct(void)
13462306a36Sopenharmony_ci{
13562306a36Sopenharmony_ci	struct fs_struct *fs = current->fs;
13662306a36Sopenharmony_ci	struct fs_struct *new_fs = copy_fs_struct(fs);
13762306a36Sopenharmony_ci	int kill;
13862306a36Sopenharmony_ci
13962306a36Sopenharmony_ci	if (!new_fs)
14062306a36Sopenharmony_ci		return -ENOMEM;
14162306a36Sopenharmony_ci
14262306a36Sopenharmony_ci	task_lock(current);
14362306a36Sopenharmony_ci	spin_lock(&fs->lock);
14462306a36Sopenharmony_ci	kill = !--fs->users;
14562306a36Sopenharmony_ci	current->fs = new_fs;
14662306a36Sopenharmony_ci	spin_unlock(&fs->lock);
14762306a36Sopenharmony_ci	task_unlock(current);
14862306a36Sopenharmony_ci
14962306a36Sopenharmony_ci	if (kill)
15062306a36Sopenharmony_ci		free_fs_struct(fs);
15162306a36Sopenharmony_ci
15262306a36Sopenharmony_ci	return 0;
15362306a36Sopenharmony_ci}
15462306a36Sopenharmony_ciEXPORT_SYMBOL_GPL(unshare_fs_struct);
15562306a36Sopenharmony_ci
15662306a36Sopenharmony_ciint current_umask(void)
15762306a36Sopenharmony_ci{
15862306a36Sopenharmony_ci	return current->fs->umask;
15962306a36Sopenharmony_ci}
16062306a36Sopenharmony_ciEXPORT_SYMBOL(current_umask);
16162306a36Sopenharmony_ci
16262306a36Sopenharmony_ci/* to be mentioned only in INIT_TASK */
16362306a36Sopenharmony_cistruct fs_struct init_fs = {
16462306a36Sopenharmony_ci	.users		= 1,
16562306a36Sopenharmony_ci	.lock		= __SPIN_LOCK_UNLOCKED(init_fs.lock),
16662306a36Sopenharmony_ci	.seq		= SEQCNT_SPINLOCK_ZERO(init_fs.seq, &init_fs.lock),
16762306a36Sopenharmony_ci	.umask		= 0022,
16862306a36Sopenharmony_ci};
169