From: Miklos Szeredi <mszeredi@redhat.com>
To: Christian Brauner <christian@brauner.io>
Cc: linux-api@vger.kernel.org, linux-man@vger.kernel.org,
linux-security-module@vger.kernel.org,
Karel Zak <kzak@redhat.com>,
linux-fsdevel@vger.kernel.org, Ian Kent <raven@themaw.net>,
David Howells <dhowells@redhat.com>,
Al Viro <viro@zeniv.linux.org.uk>
Subject: [PATCH 1/4] listmount: rip out flags
Date: Tue, 28 Nov 2023 17:03:32 +0100 [thread overview]
Message-ID: <20231128160337.29094-2-mszeredi@redhat.com> (raw)
In-Reply-To: <20231128160337.29094-1-mszeredi@redhat.com>
LISTMOUNT_UNREACHABLE will be achieved differently in a following patch.
LISTMOUNT_RECURSIVE becomes the default. If non-recursive listing turns
out to be needed, it can be added later.
Signed-off-by: Miklos Szeredi <mszeredi@redhat.com>
---
fs/namespace.c | 49 +++++++++++++-------------------------
include/uapi/linux/mount.h | 4 ----
2 files changed, 16 insertions(+), 37 deletions(-)
diff --git a/fs/namespace.c b/fs/namespace.c
index cb338ab18db9..9b4cb25c25ed 100644
--- a/fs/namespace.c
+++ b/fs/namespace.c
@@ -5004,18 +5004,13 @@ static struct mount *listmnt_first(struct mount *root)
return list_first_entry_or_null(&root->mnt_mounts, struct mount, mnt_child);
}
-static struct mount *listmnt_next(struct mount *curr, struct mount *root, bool recurse)
+static struct mount *listmnt_next(struct mount *curr, struct mount *root)
{
- if (recurse)
- return next_mnt(curr, root);
- if (!list_is_head(curr->mnt_child.next, &root->mnt_mounts))
- return list_next_entry(curr, mnt_child);
- return NULL;
+ return next_mnt(curr, root);
}
static ssize_t do_listmount(struct vfsmount *mnt, u64 __user *buf,
- size_t bufsize, const struct path *root,
- unsigned int flags)
+ size_t bufsize, const struct path *root)
{
struct mount *r, *m = real_mount(mnt);
struct path rootmnt = {
@@ -5023,26 +5018,17 @@ static ssize_t do_listmount(struct vfsmount *mnt, u64 __user *buf,
.dentry = root->mnt->mnt_root
};
ssize_t ctr;
- bool reachable_only = true;
- bool recurse = flags & LISTMOUNT_RECURSIVE;
int err;
- if (flags & LISTMOUNT_UNREACHABLE) {
- if (!capable(CAP_SYS_ADMIN))
- return -EPERM;
- reachable_only = false;
- }
-
- if (reachable_only && !is_path_reachable(m, mnt->mnt_root, &rootmnt))
+ if (!is_path_reachable(m, mnt->mnt_root, &rootmnt))
return capable(CAP_SYS_ADMIN) ? 0 : -EPERM;
err = security_sb_statfs(mnt->mnt_root);
if (err)
return err;
- for (ctr = 0, r = listmnt_first(m); r; r = listmnt_next(r, m, recurse)) {
- if (reachable_only &&
- !is_path_reachable(r, r->mnt.mnt_root, root))
+ for (ctr = 0, r = listmnt_first(m); r; r = listmnt_next(r, m)) {
+ if (!is_path_reachable(r, r->mnt.mnt_root, root))
continue;
if (ctr >= bufsize)
@@ -5065,7 +5051,7 @@ SYSCALL_DEFINE4(listmount, const struct mnt_id_req __user *, req,
u64 mnt_id;
ssize_t ret;
- if (flags & ~(LISTMOUNT_UNREACHABLE | LISTMOUNT_RECURSIVE))
+ if (flags)
return -EINVAL;
if (copy_from_user(&kreq, req, sizeof(kreq)))
@@ -5075,20 +5061,17 @@ SYSCALL_DEFINE4(listmount, const struct mnt_id_req __user *, req,
mnt_id = kreq.mnt_id;
down_read(&namespace_sem);
- if (mnt_id == LSMT_ROOT)
- mnt = ¤t->nsproxy->mnt_ns->root->mnt;
- else
- mnt = lookup_mnt_in_ns(mnt_id, current->nsproxy->mnt_ns);
- if (!mnt) {
- up_read(&namespace_sem);
- return -ENOENT;
- }
-
get_fs_root(current->fs, &root);
- /* Skip unreachable for LSMT_ROOT */
- if (mnt_id == LSMT_ROOT && !(flags & LISTMOUNT_UNREACHABLE))
+ if (mnt_id == LSMT_ROOT) {
mnt = root.mnt;
- ret = do_listmount(mnt, buf, bufsize, &root, flags);
+ } else {
+ ret = -ENOENT;
+ mnt = lookup_mnt_in_ns(mnt_id, current->nsproxy->mnt_ns);
+ if (!mnt)
+ goto err;
+ }
+ ret = do_listmount(mnt, buf, bufsize, &root);
+err:
path_put(&root);
up_read(&namespace_sem);
return ret;
diff --git a/include/uapi/linux/mount.h b/include/uapi/linux/mount.h
index 7a5bd0b24a62..f6b35a15b7dd 100644
--- a/include/uapi/linux/mount.h
+++ b/include/uapi/linux/mount.h
@@ -191,10 +191,6 @@ struct mnt_id_req {
#define STATMOUNT_MNT_POINT 0x00000010U /* Want/got mnt_point */
#define STATMOUNT_FS_TYPE 0x00000020U /* Want/got fs_type */
-/* listmount(2) flags */
-#define LISTMOUNT_UNREACHABLE 0x01U /* List unreachable mounts too */
-#define LISTMOUNT_RECURSIVE 0x02U /* List a mount tree */
-
/*
* Special @mnt_id values that can be passed to listmount
*/
--
2.41.0
next prev parent reply other threads:[~2023-11-28 16:03 UTC|newest]
Thread overview: 11+ messages / expand[flat|nested] mbox.gz Atom feed top
2023-11-28 16:03 [PATCH 0/4] listmount changes Miklos Szeredi
2023-11-28 16:03 ` Miklos Szeredi [this message]
2023-11-28 16:03 ` [PATCH 2/4] listmount: list mounts in ID order Miklos Szeredi
2023-11-28 16:03 ` [PATCH 3/4] listmount: small changes in semantics Miklos Szeredi
2023-12-06 19:58 ` Serge E. Hallyn
2023-12-06 20:24 ` Miklos Szeredi
2023-12-08 13:07 ` Christian Brauner
2023-11-28 16:03 ` [PATCH 4/4] listmount: allow continuing Miklos Szeredi
2023-11-29 9:52 ` [PATCH 0/4] listmount changes Christian Brauner
2023-11-29 10:22 ` Miklos Szeredi
2023-11-29 10:40 ` Christian Brauner
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20231128160337.29094-2-mszeredi@redhat.com \
--to=mszeredi@redhat.com \
--cc=christian@brauner.io \
--cc=dhowells@redhat.com \
--cc=kzak@redhat.com \
--cc=linux-api@vger.kernel.org \
--cc=linux-fsdevel@vger.kernel.org \
--cc=linux-man@vger.kernel.org \
--cc=linux-security-module@vger.kernel.org \
--cc=raven@themaw.net \
--cc=viro@zeniv.linux.org.uk \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).