17c478bd9Sstevel@tonic-gate /* 27c478bd9Sstevel@tonic-gate * CDDL HEADER START 37c478bd9Sstevel@tonic-gate * 47c478bd9Sstevel@tonic-gate * The contents of this file are subject to the terms of the 52e538c1cSvv * Common Development and Distribution License (the "License"). 62e538c1cSvv * You may not use this file except in compliance with the License. 77c478bd9Sstevel@tonic-gate * 87c478bd9Sstevel@tonic-gate * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE 97c478bd9Sstevel@tonic-gate * or http://www.opensolaris.org/os/licensing. 107c478bd9Sstevel@tonic-gate * See the License for the specific language governing permissions 117c478bd9Sstevel@tonic-gate * and limitations under the License. 127c478bd9Sstevel@tonic-gate * 137c478bd9Sstevel@tonic-gate * When distributing Covered Code, include this CDDL HEADER in each 147c478bd9Sstevel@tonic-gate * file and include the License file at usr/src/OPENSOLARIS.LICENSE. 157c478bd9Sstevel@tonic-gate * If applicable, add the following below this CDDL HEADER, with the 167c478bd9Sstevel@tonic-gate * fields enclosed by brackets "[]" replaced with your own identifying 177c478bd9Sstevel@tonic-gate * information: Portions Copyright [yyyy] [name of copyright owner] 187c478bd9Sstevel@tonic-gate * 197c478bd9Sstevel@tonic-gate * CDDL HEADER END 207c478bd9Sstevel@tonic-gate */ 21794f0adbSRoger A. Faulkner 227c478bd9Sstevel@tonic-gate /* 236e062f4aSMarcel Telka * Copyright 2015 Nexenta Systems, Inc. All rights reserved. 242f5706a1SWilliam.Johnston * Copyright (c) 1988, 2010, Oracle and/or its affiliates. All rights reserved. 25*e2fc3408SPatrick Mooney * Copyright 2016 Joyent, Inc. 267c478bd9Sstevel@tonic-gate */ 277c478bd9Sstevel@tonic-gate 287c478bd9Sstevel@tonic-gate /* Copyright (c) 1983, 1984, 1985, 1986, 1987, 1988, 1989 AT&T */ 297c478bd9Sstevel@tonic-gate /* All Rights Reserved */ 307c478bd9Sstevel@tonic-gate 317c478bd9Sstevel@tonic-gate /* 327c478bd9Sstevel@tonic-gate * University Copyright- Copyright (c) 1982, 1986, 1988 337c478bd9Sstevel@tonic-gate * The Regents of the University of California 347c478bd9Sstevel@tonic-gate * All Rights Reserved 357c478bd9Sstevel@tonic-gate * 367c478bd9Sstevel@tonic-gate * University Acknowledgment- Portions of this document are derived from 377c478bd9Sstevel@tonic-gate * software developed by the University of California, Berkeley, and its 387c478bd9Sstevel@tonic-gate * contributors. 397c478bd9Sstevel@tonic-gate */ 407c478bd9Sstevel@tonic-gate 417c478bd9Sstevel@tonic-gate #include <sys/types.h> 427c478bd9Sstevel@tonic-gate #include <sys/param.h> 437c478bd9Sstevel@tonic-gate #include <sys/systm.h> 447c478bd9Sstevel@tonic-gate #include <sys/cpuvar.h> 457c478bd9Sstevel@tonic-gate #include <sys/errno.h> 467c478bd9Sstevel@tonic-gate #include <sys/cred.h> 477c478bd9Sstevel@tonic-gate #include <sys/user.h> 487c478bd9Sstevel@tonic-gate #include <sys/uio.h> 497c478bd9Sstevel@tonic-gate #include <sys/vfs.h> 507c478bd9Sstevel@tonic-gate #include <sys/vnode.h> 517c478bd9Sstevel@tonic-gate #include <sys/pathname.h> 527c478bd9Sstevel@tonic-gate #include <sys/proc.h> 537c478bd9Sstevel@tonic-gate #include <sys/vtrace.h> 547c478bd9Sstevel@tonic-gate #include <sys/sysmacros.h> 557c478bd9Sstevel@tonic-gate #include <sys/debug.h> 567c478bd9Sstevel@tonic-gate #include <sys/dirent.h> 577c478bd9Sstevel@tonic-gate #include <c2/audit.h> 587c478bd9Sstevel@tonic-gate #include <sys/zone.h> 597c478bd9Sstevel@tonic-gate #include <sys/dnlc.h> 607c478bd9Sstevel@tonic-gate #include <sys/fs/snode.h> 617c478bd9Sstevel@tonic-gate 627c478bd9Sstevel@tonic-gate /* Controls whether paths are stored with vnodes. */ 637c478bd9Sstevel@tonic-gate int vfs_vnode_path = 1; 647c478bd9Sstevel@tonic-gate 657c478bd9Sstevel@tonic-gate int 667c478bd9Sstevel@tonic-gate lookupname( 677c478bd9Sstevel@tonic-gate char *fnamep, 687c478bd9Sstevel@tonic-gate enum uio_seg seg, 69794f0adbSRoger A. Faulkner int followlink, 707c478bd9Sstevel@tonic-gate vnode_t **dirvpp, 717c478bd9Sstevel@tonic-gate vnode_t **compvpp) 727c478bd9Sstevel@tonic-gate { 737a142be9SCasper H.S. Dik return (lookupnameatcred(fnamep, seg, followlink, dirvpp, compvpp, NULL, 747a142be9SCasper H.S. Dik CRED())); 757c478bd9Sstevel@tonic-gate } 767c478bd9Sstevel@tonic-gate 777c478bd9Sstevel@tonic-gate /* 787c478bd9Sstevel@tonic-gate * Lookup the user file name, 797c478bd9Sstevel@tonic-gate * Handle allocation and freeing of pathname buffer, return error. 807c478bd9Sstevel@tonic-gate */ 817c478bd9Sstevel@tonic-gate int 827a142be9SCasper H.S. Dik lookupnameatcred( 837c478bd9Sstevel@tonic-gate char *fnamep, /* user pathname */ 847c478bd9Sstevel@tonic-gate enum uio_seg seg, /* addr space that name is in */ 85794f0adbSRoger A. Faulkner int followlink, /* follow sym links */ 867c478bd9Sstevel@tonic-gate vnode_t **dirvpp, /* ret for ptr to parent dir vnode */ 877c478bd9Sstevel@tonic-gate vnode_t **compvpp, /* ret for ptr to component vnode */ 887a142be9SCasper H.S. Dik vnode_t *startvp, /* start path search from vp */ 897a142be9SCasper H.S. Dik cred_t *cr) /* credential */ 907c478bd9Sstevel@tonic-gate { 917c478bd9Sstevel@tonic-gate char namebuf[TYPICALMAXPATHLEN]; 927c478bd9Sstevel@tonic-gate struct pathname lookpn; 937c478bd9Sstevel@tonic-gate int error; 947c478bd9Sstevel@tonic-gate 957c478bd9Sstevel@tonic-gate error = pn_get_buf(fnamep, seg, &lookpn, namebuf, sizeof (namebuf)); 967c478bd9Sstevel@tonic-gate if (error == 0) { 977a142be9SCasper H.S. Dik error = lookuppnatcred(&lookpn, NULL, followlink, 987a142be9SCasper H.S. Dik dirvpp, compvpp, startvp, cr); 997c478bd9Sstevel@tonic-gate } 1007c478bd9Sstevel@tonic-gate if (error == ENAMETOOLONG) { 1017c478bd9Sstevel@tonic-gate /* 1027c478bd9Sstevel@tonic-gate * This thread used a pathname > TYPICALMAXPATHLEN bytes long. 1037c478bd9Sstevel@tonic-gate */ 1047c478bd9Sstevel@tonic-gate if (error = pn_get(fnamep, seg, &lookpn)) 1057c478bd9Sstevel@tonic-gate return (error); 1067a142be9SCasper H.S. Dik error = lookuppnatcred(&lookpn, NULL, followlink, 1077a142be9SCasper H.S. Dik dirvpp, compvpp, startvp, cr); 1087c478bd9Sstevel@tonic-gate pn_free(&lookpn); 1097c478bd9Sstevel@tonic-gate } 1107c478bd9Sstevel@tonic-gate 1117c478bd9Sstevel@tonic-gate return (error); 1127c478bd9Sstevel@tonic-gate } 1137c478bd9Sstevel@tonic-gate 1147a142be9SCasper H.S. Dik int 115794f0adbSRoger A. Faulkner lookupnameat(char *fnamep, enum uio_seg seg, int followlink, 1167a142be9SCasper H.S. Dik vnode_t **dirvpp, vnode_t **compvpp, vnode_t *startvp) 1177a142be9SCasper H.S. Dik { 1187a142be9SCasper H.S. Dik return (lookupnameatcred(fnamep, seg, followlink, dirvpp, compvpp, 1197a142be9SCasper H.S. Dik startvp, CRED())); 1207a142be9SCasper H.S. Dik } 1217a142be9SCasper H.S. Dik 1227c478bd9Sstevel@tonic-gate int 1237c478bd9Sstevel@tonic-gate lookuppn( 1247c478bd9Sstevel@tonic-gate struct pathname *pnp, 1257c478bd9Sstevel@tonic-gate struct pathname *rpnp, 126794f0adbSRoger A. Faulkner int followlink, 1277c478bd9Sstevel@tonic-gate vnode_t **dirvpp, 1287c478bd9Sstevel@tonic-gate vnode_t **compvpp) 1297c478bd9Sstevel@tonic-gate { 1307a142be9SCasper H.S. Dik return (lookuppnatcred(pnp, rpnp, followlink, dirvpp, compvpp, NULL, 1317a142be9SCasper H.S. Dik CRED())); 1327c478bd9Sstevel@tonic-gate } 1337c478bd9Sstevel@tonic-gate 1347a142be9SCasper H.S. Dik /* 1357a142be9SCasper H.S. Dik * Lookup the user file name from a given vp, using a specific credential. 1367a142be9SCasper H.S. Dik */ 1377c478bd9Sstevel@tonic-gate int 1387a142be9SCasper H.S. Dik lookuppnatcred( 1397c478bd9Sstevel@tonic-gate struct pathname *pnp, /* pathname to lookup */ 1407c478bd9Sstevel@tonic-gate struct pathname *rpnp, /* if non-NULL, return resolved path */ 141794f0adbSRoger A. Faulkner int followlink, /* (don't) follow sym links */ 1427c478bd9Sstevel@tonic-gate vnode_t **dirvpp, /* ptr for parent vnode */ 1437c478bd9Sstevel@tonic-gate vnode_t **compvpp, /* ptr for entry vnode */ 1447a142be9SCasper H.S. Dik vnode_t *startvp, /* start search from this vp */ 1457a142be9SCasper H.S. Dik cred_t *cr) /* user credential */ 1467c478bd9Sstevel@tonic-gate { 1477c478bd9Sstevel@tonic-gate vnode_t *vp; /* current directory vp */ 1487c478bd9Sstevel@tonic-gate vnode_t *rootvp; 1497c478bd9Sstevel@tonic-gate proc_t *p = curproc; 1507c478bd9Sstevel@tonic-gate 1517c478bd9Sstevel@tonic-gate if (pnp->pn_pathlen == 0) 1527c478bd9Sstevel@tonic-gate return (ENOENT); 1537c478bd9Sstevel@tonic-gate 1547c478bd9Sstevel@tonic-gate mutex_enter(&p->p_lock); /* for u_rdir and u_cdir */ 1557c478bd9Sstevel@tonic-gate if ((rootvp = PTOU(p)->u_rdir) == NULL) 1567c478bd9Sstevel@tonic-gate rootvp = rootdir; 1577c478bd9Sstevel@tonic-gate else if (rootvp != rootdir) /* no need to VN_HOLD rootdir */ 1587c478bd9Sstevel@tonic-gate VN_HOLD(rootvp); 1597c478bd9Sstevel@tonic-gate 1607c478bd9Sstevel@tonic-gate if (pnp->pn_path[0] == '/') { 1617c478bd9Sstevel@tonic-gate vp = rootvp; 1627c478bd9Sstevel@tonic-gate } else { 1637c478bd9Sstevel@tonic-gate vp = (startvp == NULL) ? PTOU(p)->u_cdir : startvp; 1647c478bd9Sstevel@tonic-gate } 1657c478bd9Sstevel@tonic-gate VN_HOLD(vp); 1667c478bd9Sstevel@tonic-gate mutex_exit(&p->p_lock); 1677c478bd9Sstevel@tonic-gate 1687c478bd9Sstevel@tonic-gate /* 1697c478bd9Sstevel@tonic-gate * Skip over leading slashes 1707c478bd9Sstevel@tonic-gate */ 1717c478bd9Sstevel@tonic-gate if (pnp->pn_path[0] == '/') { 1727c478bd9Sstevel@tonic-gate do { 1737c478bd9Sstevel@tonic-gate pnp->pn_path++; 1747c478bd9Sstevel@tonic-gate pnp->pn_pathlen--; 1757c478bd9Sstevel@tonic-gate } while (pnp->pn_path[0] == '/'); 1767c478bd9Sstevel@tonic-gate } 1777c478bd9Sstevel@tonic-gate 1787c478bd9Sstevel@tonic-gate return (lookuppnvp(pnp, rpnp, followlink, dirvpp, 1797a142be9SCasper H.S. Dik compvpp, rootvp, vp, cr)); 1807a142be9SCasper H.S. Dik } 1817a142be9SCasper H.S. Dik 1827a142be9SCasper H.S. Dik int 1837a142be9SCasper H.S. Dik lookuppnat(struct pathname *pnp, struct pathname *rpnp, 184794f0adbSRoger A. Faulkner int followlink, vnode_t **dirvpp, vnode_t **compvpp, 1857a142be9SCasper H.S. Dik vnode_t *startvp) 1867a142be9SCasper H.S. Dik { 1877a142be9SCasper H.S. Dik return (lookuppnatcred(pnp, rpnp, followlink, dirvpp, compvpp, startvp, 1887a142be9SCasper H.S. Dik CRED())); 1897c478bd9Sstevel@tonic-gate } 1907c478bd9Sstevel@tonic-gate 1917c478bd9Sstevel@tonic-gate /* Private flag to do our getcwd() dirty work */ 1927c478bd9Sstevel@tonic-gate #define LOOKUP_CHECKREAD 0x10 1937c478bd9Sstevel@tonic-gate #define LOOKUP_MASK (~LOOKUP_CHECKREAD) 1947c478bd9Sstevel@tonic-gate 1957c478bd9Sstevel@tonic-gate /* 1967c478bd9Sstevel@tonic-gate * Starting at current directory, translate pathname pnp to end. 1977c478bd9Sstevel@tonic-gate * Leave pathname of final component in pnp, return the vnode 1987c478bd9Sstevel@tonic-gate * for the final component in *compvpp, and return the vnode 1997c478bd9Sstevel@tonic-gate * for the parent of the final component in dirvpp. 2007c478bd9Sstevel@tonic-gate * 2017c478bd9Sstevel@tonic-gate * This is the central routine in pathname translation and handles 2027c478bd9Sstevel@tonic-gate * multiple components in pathnames, separating them at /'s. It also 2037c478bd9Sstevel@tonic-gate * implements mounted file systems and processes symbolic links. 2047c478bd9Sstevel@tonic-gate * 2057c478bd9Sstevel@tonic-gate * vp is the vnode where the directory search should start. 2067c478bd9Sstevel@tonic-gate * 2077c478bd9Sstevel@tonic-gate * Reference counts: vp must be held prior to calling this function. rootvp 2087c478bd9Sstevel@tonic-gate * should only be held if rootvp != rootdir. 2097c478bd9Sstevel@tonic-gate */ 2107c478bd9Sstevel@tonic-gate int 2117c478bd9Sstevel@tonic-gate lookuppnvp( 2127c478bd9Sstevel@tonic-gate struct pathname *pnp, /* pathname to lookup */ 2137c478bd9Sstevel@tonic-gate struct pathname *rpnp, /* if non-NULL, return resolved path */ 2147c478bd9Sstevel@tonic-gate int flags, /* follow symlinks */ 2157c478bd9Sstevel@tonic-gate vnode_t **dirvpp, /* ptr for parent vnode */ 2167c478bd9Sstevel@tonic-gate vnode_t **compvpp, /* ptr for entry vnode */ 2177c478bd9Sstevel@tonic-gate vnode_t *rootvp, /* rootvp */ 2187c478bd9Sstevel@tonic-gate vnode_t *vp, /* directory to start search at */ 2197c478bd9Sstevel@tonic-gate cred_t *cr) /* user's credential */ 2207c478bd9Sstevel@tonic-gate { 2217c478bd9Sstevel@tonic-gate vnode_t *cvp; /* current component vp */ 2227c478bd9Sstevel@tonic-gate char component[MAXNAMELEN]; /* buffer for component (incl null) */ 2237c478bd9Sstevel@tonic-gate int error; 2247c478bd9Sstevel@tonic-gate int nlink; 2257c478bd9Sstevel@tonic-gate int lookup_flags; 226da6c28aaSamw struct pathname presrvd; /* case preserved name */ 227da6c28aaSamw struct pathname *pp = NULL; 2287c478bd9Sstevel@tonic-gate vnode_t *startvp; 2297c478bd9Sstevel@tonic-gate vnode_t *zonevp = curproc->p_zone->zone_rootvp; /* zone root */ 2307c478bd9Sstevel@tonic-gate int must_be_directory = 0; 23153ebc32aSVallish Vaidyeshwara boolean_t retry_with_kcred; 232005d3febSMarek Pospisil uint32_t auditing = AU_AUDITING(); 2337c478bd9Sstevel@tonic-gate 2347c478bd9Sstevel@tonic-gate CPU_STATS_ADDQ(CPU, sys, namei, 1); 2357c478bd9Sstevel@tonic-gate nlink = 0; 2367c478bd9Sstevel@tonic-gate cvp = NULL; 2377c478bd9Sstevel@tonic-gate if (rpnp) 2387c478bd9Sstevel@tonic-gate rpnp->pn_pathlen = 0; 239da6c28aaSamw 2407c478bd9Sstevel@tonic-gate lookup_flags = dirvpp ? LOOKUP_DIR : 0; 241da6c28aaSamw if (flags & FIGNORECASE) { 242da6c28aaSamw lookup_flags |= FIGNORECASE; 243da6c28aaSamw pn_alloc(&presrvd); 244da6c28aaSamw pp = &presrvd; 245da6c28aaSamw } 246da6c28aaSamw 247005d3febSMarek Pospisil if (auditing) 2487c478bd9Sstevel@tonic-gate audit_anchorpath(pnp, vp == rootvp); 2497c478bd9Sstevel@tonic-gate 2507c478bd9Sstevel@tonic-gate /* 2517c478bd9Sstevel@tonic-gate * Eliminate any trailing slashes in the pathname. 2527c478bd9Sstevel@tonic-gate * If there are any, we must follow all symlinks. 2537c478bd9Sstevel@tonic-gate * Also, we must guarantee that the last component is a directory. 2547c478bd9Sstevel@tonic-gate */ 2557c478bd9Sstevel@tonic-gate if (pn_fixslash(pnp)) { 2567c478bd9Sstevel@tonic-gate flags |= FOLLOW; 2577c478bd9Sstevel@tonic-gate must_be_directory = 1; 2587c478bd9Sstevel@tonic-gate } 2597c478bd9Sstevel@tonic-gate 2607c478bd9Sstevel@tonic-gate startvp = vp; 2617c478bd9Sstevel@tonic-gate next: 26253ebc32aSVallish Vaidyeshwara retry_with_kcred = B_FALSE; 26353ebc32aSVallish Vaidyeshwara 2647c478bd9Sstevel@tonic-gate /* 2657c478bd9Sstevel@tonic-gate * Make sure we have a directory. 2667c478bd9Sstevel@tonic-gate */ 2677c478bd9Sstevel@tonic-gate if (vp->v_type != VDIR) { 2687c478bd9Sstevel@tonic-gate error = ENOTDIR; 2697c478bd9Sstevel@tonic-gate goto bad; 2707c478bd9Sstevel@tonic-gate } 2717c478bd9Sstevel@tonic-gate 2727c478bd9Sstevel@tonic-gate if (rpnp && VN_CMP(vp, rootvp)) 2737c478bd9Sstevel@tonic-gate (void) pn_set(rpnp, "/"); 2747c478bd9Sstevel@tonic-gate 2757c478bd9Sstevel@tonic-gate /* 2767c478bd9Sstevel@tonic-gate * Process the next component of the pathname. 2777c478bd9Sstevel@tonic-gate */ 2787c478bd9Sstevel@tonic-gate if (error = pn_getcomponent(pnp, component)) { 2797c478bd9Sstevel@tonic-gate goto bad; 2807c478bd9Sstevel@tonic-gate } 2817c478bd9Sstevel@tonic-gate 2827c478bd9Sstevel@tonic-gate /* 2837c478bd9Sstevel@tonic-gate * Handle "..": two special cases. 2847c478bd9Sstevel@tonic-gate * 1. If we're at the root directory (e.g. after chroot or 2857c478bd9Sstevel@tonic-gate * zone_enter) then change ".." to "." so we can't get 2867c478bd9Sstevel@tonic-gate * out of this subtree. 2877c478bd9Sstevel@tonic-gate * 2. If this vnode is the root of a mounted file system, 2887c478bd9Sstevel@tonic-gate * then replace it with the vnode that was mounted on 2897c478bd9Sstevel@tonic-gate * so that we take the ".." in the other file system. 2907c478bd9Sstevel@tonic-gate */ 2917c478bd9Sstevel@tonic-gate if (component[0] == '.' && component[1] == '.' && component[2] == 0) { 2927c478bd9Sstevel@tonic-gate checkforroot: 2937c478bd9Sstevel@tonic-gate if (VN_CMP(vp, rootvp) || VN_CMP(vp, zonevp)) { 2947c478bd9Sstevel@tonic-gate component[1] = '\0'; 2957c478bd9Sstevel@tonic-gate } else if (vp->v_flag & VROOT) { 2967c478bd9Sstevel@tonic-gate vfs_t *vfsp; 2977c478bd9Sstevel@tonic-gate cvp = vp; 2987c478bd9Sstevel@tonic-gate 2997c478bd9Sstevel@tonic-gate /* 3007c478bd9Sstevel@tonic-gate * While we deal with the vfs pointer from the vnode 3017c478bd9Sstevel@tonic-gate * the filesystem could have been forcefully unmounted 3027c478bd9Sstevel@tonic-gate * and the vnode's v_vfsp could have been invalidated 3037c478bd9Sstevel@tonic-gate * by VFS_UNMOUNT. Hence, we cache v_vfsp and use it 3047c478bd9Sstevel@tonic-gate * with vfs_rlock_wait/vfs_unlock. 3057c478bd9Sstevel@tonic-gate * It is safe to use the v_vfsp even it is freed by 3067c478bd9Sstevel@tonic-gate * VFS_UNMOUNT because vfs_rlock_wait/vfs_unlock 3077c478bd9Sstevel@tonic-gate * do not dereference v_vfsp. It is just used as a 3087c478bd9Sstevel@tonic-gate * magic cookie. 3097c478bd9Sstevel@tonic-gate * One more corner case here is the memory getting 3107c478bd9Sstevel@tonic-gate * reused for another vfs structure. In this case 3117c478bd9Sstevel@tonic-gate * lookuppnvp's vfs_rlock_wait will succeed, domount's 3127c478bd9Sstevel@tonic-gate * vfs_lock will fail and domount will bail out with an 3137c478bd9Sstevel@tonic-gate * error (EBUSY). 3147c478bd9Sstevel@tonic-gate */ 3157c478bd9Sstevel@tonic-gate vfsp = cvp->v_vfsp; 3167c478bd9Sstevel@tonic-gate 3177c478bd9Sstevel@tonic-gate /* 3187c478bd9Sstevel@tonic-gate * This lock is used to synchronize 3197c478bd9Sstevel@tonic-gate * mounts/unmounts and lookups. 3207c478bd9Sstevel@tonic-gate * Threads doing mounts/unmounts hold the 3217c478bd9Sstevel@tonic-gate * writers version vfs_lock_wait(). 3227c478bd9Sstevel@tonic-gate */ 3237c478bd9Sstevel@tonic-gate 3247c478bd9Sstevel@tonic-gate vfs_rlock_wait(vfsp); 3257c478bd9Sstevel@tonic-gate 3267c478bd9Sstevel@tonic-gate /* 3277c478bd9Sstevel@tonic-gate * If this vnode is on a file system that 3287c478bd9Sstevel@tonic-gate * has been forcibly unmounted, 3297c478bd9Sstevel@tonic-gate * we can't proceed. Cancel this operation 3307c478bd9Sstevel@tonic-gate * and return EIO. 3317c478bd9Sstevel@tonic-gate * 3327c478bd9Sstevel@tonic-gate * vfs_vnodecovered is NULL if unmounted. 3337c478bd9Sstevel@tonic-gate * Currently, nfs uses VFS_UNMOUNTED to 3347c478bd9Sstevel@tonic-gate * check if it's a forced-umount. Keep the 3357c478bd9Sstevel@tonic-gate * same checking here as well even though it 3367c478bd9Sstevel@tonic-gate * may not be needed. 3377c478bd9Sstevel@tonic-gate */ 3387c478bd9Sstevel@tonic-gate if (((vp = cvp->v_vfsp->vfs_vnodecovered) == NULL) || 3397c478bd9Sstevel@tonic-gate (cvp->v_vfsp->vfs_flag & VFS_UNMOUNTED)) { 3407c478bd9Sstevel@tonic-gate vfs_unlock(vfsp); 3417c478bd9Sstevel@tonic-gate VN_RELE(cvp); 342da6c28aaSamw if (pp) 343da6c28aaSamw pn_free(pp); 3447c478bd9Sstevel@tonic-gate return (EIO); 3457c478bd9Sstevel@tonic-gate } 3467c478bd9Sstevel@tonic-gate VN_HOLD(vp); 3477c478bd9Sstevel@tonic-gate vfs_unlock(vfsp); 3487c478bd9Sstevel@tonic-gate VN_RELE(cvp); 3497c478bd9Sstevel@tonic-gate cvp = NULL; 3502e538c1cSvv /* 3512e538c1cSvv * Crossing mount points. For eg: We are doing 3522e538c1cSvv * a lookup of ".." for file systems root vnode 3532e538c1cSvv * mounted here, and VOP_LOOKUP() (with covered vnode) 3542e538c1cSvv * will be on underlying file systems mount point 3552e538c1cSvv * vnode. Set retry_with_kcred flag as we might end 3562e538c1cSvv * up doing VOP_LOOKUP() with kcred if required. 3572e538c1cSvv */ 3582e538c1cSvv retry_with_kcred = B_TRUE; 3597c478bd9Sstevel@tonic-gate goto checkforroot; 3607c478bd9Sstevel@tonic-gate } 3617c478bd9Sstevel@tonic-gate } 3627c478bd9Sstevel@tonic-gate 3637c478bd9Sstevel@tonic-gate /* 3647c478bd9Sstevel@tonic-gate * LOOKUP_CHECKREAD is a private flag used by vnodetopath() to indicate 3657c478bd9Sstevel@tonic-gate * that we need to have read permission on every directory in the entire 3667c478bd9Sstevel@tonic-gate * path. This is used to ensure that a forward-lookup of a cached value 3677c478bd9Sstevel@tonic-gate * has the same effect as a reverse-lookup when the cached value cannot 3687c478bd9Sstevel@tonic-gate * be found. 3697c478bd9Sstevel@tonic-gate */ 3707c478bd9Sstevel@tonic-gate if ((flags & LOOKUP_CHECKREAD) && 371da6c28aaSamw (error = VOP_ACCESS(vp, VREAD, 0, cr, NULL)) != 0) 3727c478bd9Sstevel@tonic-gate goto bad; 3737c478bd9Sstevel@tonic-gate 3747c478bd9Sstevel@tonic-gate /* 3757c478bd9Sstevel@tonic-gate * Perform a lookup in the current directory. 3767c478bd9Sstevel@tonic-gate */ 3776e062f4aSMarcel Telka error = VOP_LOOKUP(vp, component, &cvp, pnp, lookup_flags, 378da6c28aaSamw rootvp, cr, NULL, NULL, pp); 3792e538c1cSvv 3802e538c1cSvv /* 3812e538c1cSvv * Retry with kcred - If crossing mount points & error is EACCES. 3822e538c1cSvv * 3832e538c1cSvv * If we are crossing mount points here and doing ".." lookup, 3842e538c1cSvv * VOP_LOOKUP() might fail if the underlying file systems 3852e538c1cSvv * mount point has no execute permission. In cases like these, 3862e538c1cSvv * we retry VOP_LOOKUP() by giving as much privilage as possible 3872e538c1cSvv * by passing kcred credentials. 3882e538c1cSvv * 3892e538c1cSvv * In case of hierarchical file systems, passing kcred still may 3902e538c1cSvv * or may not work. 3912e538c1cSvv * For eg: UFS FS --> Mount NFS FS --> Again mount UFS on some 3922e538c1cSvv * directory inside NFS FS. 3932e538c1cSvv */ 3942e538c1cSvv if ((error == EACCES) && retry_with_kcred) 3956e062f4aSMarcel Telka error = VOP_LOOKUP(vp, component, &cvp, pnp, lookup_flags, 396da6c28aaSamw rootvp, zone_kcred(), NULL, NULL, pp); 3972e538c1cSvv 3987c478bd9Sstevel@tonic-gate if (error) { 3997c478bd9Sstevel@tonic-gate cvp = NULL; 4007c478bd9Sstevel@tonic-gate /* 4017c478bd9Sstevel@tonic-gate * On error, return hard error if 4027c478bd9Sstevel@tonic-gate * (a) we're not at the end of the pathname yet, or 4037c478bd9Sstevel@tonic-gate * (b) the caller didn't want the parent directory, or 4047c478bd9Sstevel@tonic-gate * (c) we failed for some reason other than a missing entry. 4057c478bd9Sstevel@tonic-gate */ 4067c478bd9Sstevel@tonic-gate if (pn_pathleft(pnp) || dirvpp == NULL || error != ENOENT) 4077c478bd9Sstevel@tonic-gate goto bad; 408005d3febSMarek Pospisil if (auditing) { /* directory access */ 4094a0fa546SMarek Pospisil if (error = audit_savepath(pnp, vp, vp, error, cr)) 4107c478bd9Sstevel@tonic-gate goto bad_noaudit; 4117c478bd9Sstevel@tonic-gate } 4124a0fa546SMarek Pospisil 4137c478bd9Sstevel@tonic-gate pn_setlast(pnp); 4147c478bd9Sstevel@tonic-gate /* 4157c478bd9Sstevel@tonic-gate * We inform the caller that the desired entry must be 4167c478bd9Sstevel@tonic-gate * a directory by adding a '/' to the component name. 4177c478bd9Sstevel@tonic-gate */ 4187c478bd9Sstevel@tonic-gate if (must_be_directory && (error = pn_addslash(pnp)) != 0) 4197c478bd9Sstevel@tonic-gate goto bad; 4207c478bd9Sstevel@tonic-gate *dirvpp = vp; 4217c478bd9Sstevel@tonic-gate if (compvpp != NULL) 4227c478bd9Sstevel@tonic-gate *compvpp = NULL; 4237c478bd9Sstevel@tonic-gate if (rootvp != rootdir) 4247c478bd9Sstevel@tonic-gate VN_RELE(rootvp); 425da6c28aaSamw if (pp) 426da6c28aaSamw pn_free(pp); 4277c478bd9Sstevel@tonic-gate return (0); 4287c478bd9Sstevel@tonic-gate } 4297c478bd9Sstevel@tonic-gate 4307c478bd9Sstevel@tonic-gate /* 4317c478bd9Sstevel@tonic-gate * Traverse mount points. 4327c478bd9Sstevel@tonic-gate * XXX why don't we need to hold a read lock here (call vn_vfsrlock)? 4337c478bd9Sstevel@tonic-gate * What prevents a concurrent update to v_vfsmountedhere? 4347c478bd9Sstevel@tonic-gate * Possible answer: if mounting, we might not see the mount 4357c478bd9Sstevel@tonic-gate * if it is concurrently coming into existence, but that's 4367c478bd9Sstevel@tonic-gate * really not much different from the thread running a bit slower. 4377c478bd9Sstevel@tonic-gate * If unmounting, we may get into traverse() when we shouldn't, 4387c478bd9Sstevel@tonic-gate * but traverse() will catch this case for us. 4397c478bd9Sstevel@tonic-gate * (For this to work, fetching v_vfsmountedhere had better 4407c478bd9Sstevel@tonic-gate * be atomic!) 4417c478bd9Sstevel@tonic-gate */ 4427c478bd9Sstevel@tonic-gate if (vn_mountedvfs(cvp) != NULL) { 4436e062f4aSMarcel Telka if ((error = traverse(&cvp)) != 0) 4447c478bd9Sstevel@tonic-gate goto bad; 4457c478bd9Sstevel@tonic-gate } 4467c478bd9Sstevel@tonic-gate 4477c478bd9Sstevel@tonic-gate /* 4487c478bd9Sstevel@tonic-gate * If we hit a symbolic link and there is more path to be 4497c478bd9Sstevel@tonic-gate * translated or this operation does not wish to apply 4507c478bd9Sstevel@tonic-gate * to a link, then place the contents of the link at the 4517c478bd9Sstevel@tonic-gate * front of the remaining pathname. 4527c478bd9Sstevel@tonic-gate */ 4537c478bd9Sstevel@tonic-gate if (cvp->v_type == VLNK && ((flags & FOLLOW) || pn_pathleft(pnp))) { 4547c478bd9Sstevel@tonic-gate struct pathname linkpath; 4557c478bd9Sstevel@tonic-gate 4567c478bd9Sstevel@tonic-gate if (++nlink > MAXSYMLINKS) { 4577c478bd9Sstevel@tonic-gate error = ELOOP; 4587c478bd9Sstevel@tonic-gate goto bad; 4597c478bd9Sstevel@tonic-gate } 4607c478bd9Sstevel@tonic-gate pn_alloc(&linkpath); 4617c478bd9Sstevel@tonic-gate if (error = pn_getsymlink(cvp, &linkpath, cr)) { 4627c478bd9Sstevel@tonic-gate pn_free(&linkpath); 4637c478bd9Sstevel@tonic-gate goto bad; 4647c478bd9Sstevel@tonic-gate } 4657c478bd9Sstevel@tonic-gate 466005d3febSMarek Pospisil if (auditing) 4677c478bd9Sstevel@tonic-gate audit_symlink(pnp, &linkpath); 4687c478bd9Sstevel@tonic-gate 4697c478bd9Sstevel@tonic-gate if (pn_pathleft(&linkpath) == 0) 4707c478bd9Sstevel@tonic-gate (void) pn_set(&linkpath, "."); 4717c478bd9Sstevel@tonic-gate error = pn_insert(pnp, &linkpath, strlen(component)); 4727c478bd9Sstevel@tonic-gate pn_free(&linkpath); 4737c478bd9Sstevel@tonic-gate if (error) 4747c478bd9Sstevel@tonic-gate goto bad; 4757c478bd9Sstevel@tonic-gate VN_RELE(cvp); 4767c478bd9Sstevel@tonic-gate cvp = NULL; 4777c478bd9Sstevel@tonic-gate if (pnp->pn_pathlen == 0) { 4787c478bd9Sstevel@tonic-gate error = ENOENT; 4797c478bd9Sstevel@tonic-gate goto bad; 4807c478bd9Sstevel@tonic-gate } 4817c478bd9Sstevel@tonic-gate if (pnp->pn_path[0] == '/') { 4827c478bd9Sstevel@tonic-gate do { 4837c478bd9Sstevel@tonic-gate pnp->pn_path++; 4847c478bd9Sstevel@tonic-gate pnp->pn_pathlen--; 4857c478bd9Sstevel@tonic-gate } while (pnp->pn_path[0] == '/'); 4867c478bd9Sstevel@tonic-gate VN_RELE(vp); 4877c478bd9Sstevel@tonic-gate vp = rootvp; 4887c478bd9Sstevel@tonic-gate VN_HOLD(vp); 4897c478bd9Sstevel@tonic-gate } 490005d3febSMarek Pospisil if (auditing) 4917c478bd9Sstevel@tonic-gate audit_anchorpath(pnp, vp == rootvp); 4927c478bd9Sstevel@tonic-gate if (pn_fixslash(pnp)) { 4937c478bd9Sstevel@tonic-gate flags |= FOLLOW; 4947c478bd9Sstevel@tonic-gate must_be_directory = 1; 4957c478bd9Sstevel@tonic-gate } 4967c478bd9Sstevel@tonic-gate goto next; 4977c478bd9Sstevel@tonic-gate } 4987c478bd9Sstevel@tonic-gate 4997c478bd9Sstevel@tonic-gate /* 5007c478bd9Sstevel@tonic-gate * If rpnp is non-NULL, remember the resolved path name therein. 5017c478bd9Sstevel@tonic-gate * Do not include "." components. Collapse occurrences of 5027c478bd9Sstevel@tonic-gate * "previous/..", so long as "previous" is not itself "..". 5037c478bd9Sstevel@tonic-gate * Exhausting rpnp results in error ENAMETOOLONG. 5047c478bd9Sstevel@tonic-gate */ 5057c478bd9Sstevel@tonic-gate if (rpnp && strcmp(component, ".") != 0) { 5067c478bd9Sstevel@tonic-gate size_t len; 5077c478bd9Sstevel@tonic-gate 5087c478bd9Sstevel@tonic-gate if (strcmp(component, "..") == 0 && 5097c478bd9Sstevel@tonic-gate rpnp->pn_pathlen != 0 && 5107c478bd9Sstevel@tonic-gate !((rpnp->pn_pathlen > 2 && 5117c478bd9Sstevel@tonic-gate strncmp(rpnp->pn_path+rpnp->pn_pathlen-3, "/..", 3) == 0) || 5127c478bd9Sstevel@tonic-gate (rpnp->pn_pathlen == 2 && 5137c478bd9Sstevel@tonic-gate strncmp(rpnp->pn_path, "..", 2) == 0))) { 5147c478bd9Sstevel@tonic-gate while (rpnp->pn_pathlen && 5157c478bd9Sstevel@tonic-gate rpnp->pn_path[rpnp->pn_pathlen-1] != '/') 5167c478bd9Sstevel@tonic-gate rpnp->pn_pathlen--; 5177c478bd9Sstevel@tonic-gate if (rpnp->pn_pathlen > 1) 5187c478bd9Sstevel@tonic-gate rpnp->pn_pathlen--; 5197c478bd9Sstevel@tonic-gate rpnp->pn_path[rpnp->pn_pathlen] = '\0'; 5207c478bd9Sstevel@tonic-gate } else { 5217c478bd9Sstevel@tonic-gate if (rpnp->pn_pathlen != 0 && 5227c478bd9Sstevel@tonic-gate rpnp->pn_path[rpnp->pn_pathlen-1] != '/') 5237c478bd9Sstevel@tonic-gate rpnp->pn_path[rpnp->pn_pathlen++] = '/'; 524da6c28aaSamw if (flags & FIGNORECASE) { 525da6c28aaSamw /* 526da6c28aaSamw * Return the case-preserved name 527da6c28aaSamw * within the resolved path. 528da6c28aaSamw */ 529ab04eb8eStimh error = copystr(pp->pn_buf, 530da6c28aaSamw rpnp->pn_path + rpnp->pn_pathlen, 531da6c28aaSamw rpnp->pn_bufsize - rpnp->pn_pathlen, &len); 532da6c28aaSamw } else { 533da6c28aaSamw error = copystr(component, 534da6c28aaSamw rpnp->pn_path + rpnp->pn_pathlen, 535da6c28aaSamw rpnp->pn_bufsize - rpnp->pn_pathlen, &len); 536da6c28aaSamw } 5377c478bd9Sstevel@tonic-gate if (error) /* copystr() returns ENAMETOOLONG */ 5387c478bd9Sstevel@tonic-gate goto bad; 5397c478bd9Sstevel@tonic-gate rpnp->pn_pathlen += (len - 1); 5407c478bd9Sstevel@tonic-gate ASSERT(rpnp->pn_bufsize > rpnp->pn_pathlen); 5417c478bd9Sstevel@tonic-gate } 5427c478bd9Sstevel@tonic-gate } 5437c478bd9Sstevel@tonic-gate 5447c478bd9Sstevel@tonic-gate /* 5457c478bd9Sstevel@tonic-gate * If no more components, return last directory (if wanted) and 5467c478bd9Sstevel@tonic-gate * last component (if wanted). 5477c478bd9Sstevel@tonic-gate */ 5487c478bd9Sstevel@tonic-gate if (pn_pathleft(pnp) == 0) { 5497c478bd9Sstevel@tonic-gate /* 5507c478bd9Sstevel@tonic-gate * If there was a trailing slash in the pathname, 5517c478bd9Sstevel@tonic-gate * make sure the last component is a directory. 5527c478bd9Sstevel@tonic-gate */ 5537c478bd9Sstevel@tonic-gate if (must_be_directory && cvp->v_type != VDIR) { 5547c478bd9Sstevel@tonic-gate error = ENOTDIR; 5557c478bd9Sstevel@tonic-gate goto bad; 5567c478bd9Sstevel@tonic-gate } 5577c478bd9Sstevel@tonic-gate if (dirvpp != NULL) { 5587c478bd9Sstevel@tonic-gate /* 5597c478bd9Sstevel@tonic-gate * Check that we have the real parent and not 5607c478bd9Sstevel@tonic-gate * an alias of the last component. 5617c478bd9Sstevel@tonic-gate */ 5627c478bd9Sstevel@tonic-gate if (vn_compare(vp, cvp)) { 563005d3febSMarek Pospisil if (auditing) 5644a0fa546SMarek Pospisil (void) audit_savepath(pnp, cvp, vp, 5652e538c1cSvv EINVAL, cr); 5667c478bd9Sstevel@tonic-gate pn_setlast(pnp); 5677c478bd9Sstevel@tonic-gate VN_RELE(vp); 5687c478bd9Sstevel@tonic-gate VN_RELE(cvp); 5697c478bd9Sstevel@tonic-gate if (rootvp != rootdir) 5707c478bd9Sstevel@tonic-gate VN_RELE(rootvp); 571da6c28aaSamw if (pp) 572da6c28aaSamw pn_free(pp); 5737c478bd9Sstevel@tonic-gate return (EINVAL); 5747c478bd9Sstevel@tonic-gate } 5757c478bd9Sstevel@tonic-gate *dirvpp = vp; 5767c478bd9Sstevel@tonic-gate } else 5777c478bd9Sstevel@tonic-gate VN_RELE(vp); 578005d3febSMarek Pospisil if (auditing) 5794a0fa546SMarek Pospisil (void) audit_savepath(pnp, cvp, vp, 0, cr); 5807c478bd9Sstevel@tonic-gate if (pnp->pn_path == pnp->pn_buf) 5817c478bd9Sstevel@tonic-gate (void) pn_set(pnp, "."); 5827c478bd9Sstevel@tonic-gate else 5837c478bd9Sstevel@tonic-gate pn_setlast(pnp); 5847c478bd9Sstevel@tonic-gate if (rpnp) { 5857c478bd9Sstevel@tonic-gate if (VN_CMP(cvp, rootvp)) 5867c478bd9Sstevel@tonic-gate (void) pn_set(rpnp, "/"); 5877c478bd9Sstevel@tonic-gate else if (rpnp->pn_pathlen == 0) 5887c478bd9Sstevel@tonic-gate (void) pn_set(rpnp, "."); 5897c478bd9Sstevel@tonic-gate } 5907c478bd9Sstevel@tonic-gate 5917c478bd9Sstevel@tonic-gate if (compvpp != NULL) 5927c478bd9Sstevel@tonic-gate *compvpp = cvp; 5937c478bd9Sstevel@tonic-gate else 5947c478bd9Sstevel@tonic-gate VN_RELE(cvp); 5957c478bd9Sstevel@tonic-gate if (rootvp != rootdir) 5967c478bd9Sstevel@tonic-gate VN_RELE(rootvp); 597da6c28aaSamw if (pp) 598da6c28aaSamw pn_free(pp); 5997c478bd9Sstevel@tonic-gate return (0); 6007c478bd9Sstevel@tonic-gate } 6017c478bd9Sstevel@tonic-gate 6027c478bd9Sstevel@tonic-gate /* 6037c478bd9Sstevel@tonic-gate * Skip over slashes from end of last component. 6047c478bd9Sstevel@tonic-gate */ 6057c478bd9Sstevel@tonic-gate while (pnp->pn_path[0] == '/') { 6067c478bd9Sstevel@tonic-gate pnp->pn_path++; 6077c478bd9Sstevel@tonic-gate pnp->pn_pathlen--; 6087c478bd9Sstevel@tonic-gate } 6097c478bd9Sstevel@tonic-gate 6107c478bd9Sstevel@tonic-gate /* 6117c478bd9Sstevel@tonic-gate * Searched through another level of directory: 6127c478bd9Sstevel@tonic-gate * release previous directory handle and save new (result 6137c478bd9Sstevel@tonic-gate * of lookup) as current directory. 6147c478bd9Sstevel@tonic-gate */ 6157c478bd9Sstevel@tonic-gate VN_RELE(vp); 6167c478bd9Sstevel@tonic-gate vp = cvp; 6177c478bd9Sstevel@tonic-gate cvp = NULL; 6187c478bd9Sstevel@tonic-gate goto next; 6197c478bd9Sstevel@tonic-gate 6207c478bd9Sstevel@tonic-gate bad: 621005d3febSMarek Pospisil if (auditing) /* reached end of path */ 6224a0fa546SMarek Pospisil (void) audit_savepath(pnp, cvp, vp, error, cr); 6237c478bd9Sstevel@tonic-gate bad_noaudit: 6247c478bd9Sstevel@tonic-gate /* 6257c478bd9Sstevel@tonic-gate * Error. Release vnodes and return. 6267c478bd9Sstevel@tonic-gate */ 6277c478bd9Sstevel@tonic-gate if (cvp) 6287c478bd9Sstevel@tonic-gate VN_RELE(cvp); 6297c478bd9Sstevel@tonic-gate /* 6307c478bd9Sstevel@tonic-gate * If the error was ESTALE and the current directory to look in 6317c478bd9Sstevel@tonic-gate * was the root for this lookup, the root for a mounted file 6327c478bd9Sstevel@tonic-gate * system, or the starting directory for lookups, then 6337c478bd9Sstevel@tonic-gate * return ENOENT instead of ESTALE. In this case, no recovery 6347c478bd9Sstevel@tonic-gate * is possible by the higher level. If ESTALE was returned for 6357c478bd9Sstevel@tonic-gate * some intermediate directory along the path, then recovery 6367c478bd9Sstevel@tonic-gate * is potentially possible and retrying from the higher level 6377c478bd9Sstevel@tonic-gate * will either correct the situation by purging stale cache 6387c478bd9Sstevel@tonic-gate * entries or eventually get back to the point where no recovery 6397c478bd9Sstevel@tonic-gate * is possible. 6407c478bd9Sstevel@tonic-gate */ 6417c478bd9Sstevel@tonic-gate if (error == ESTALE && 6427c478bd9Sstevel@tonic-gate (VN_CMP(vp, rootvp) || (vp->v_flag & VROOT) || vp == startvp)) 6437c478bd9Sstevel@tonic-gate error = ENOENT; 6447c478bd9Sstevel@tonic-gate VN_RELE(vp); 6457c478bd9Sstevel@tonic-gate if (rootvp != rootdir) 6467c478bd9Sstevel@tonic-gate VN_RELE(rootvp); 647da6c28aaSamw if (pp) 648da6c28aaSamw pn_free(pp); 6497c478bd9Sstevel@tonic-gate return (error); 6507c478bd9Sstevel@tonic-gate } 6517c478bd9Sstevel@tonic-gate 6527c478bd9Sstevel@tonic-gate /* 6537c478bd9Sstevel@tonic-gate * Traverse a mount point. Routine accepts a vnode pointer as a reference 6547c478bd9Sstevel@tonic-gate * parameter and performs the indirection, releasing the original vnode. 6557c478bd9Sstevel@tonic-gate */ 6567c478bd9Sstevel@tonic-gate int 6577c478bd9Sstevel@tonic-gate traverse(vnode_t **cvpp) 6587c478bd9Sstevel@tonic-gate { 6597c478bd9Sstevel@tonic-gate int error = 0; 6607c478bd9Sstevel@tonic-gate vnode_t *cvp; 6617c478bd9Sstevel@tonic-gate vnode_t *tvp; 6627c478bd9Sstevel@tonic-gate vfs_t *vfsp; 6637c478bd9Sstevel@tonic-gate 6647c478bd9Sstevel@tonic-gate cvp = *cvpp; 6657c478bd9Sstevel@tonic-gate 6667c478bd9Sstevel@tonic-gate /* 6677c478bd9Sstevel@tonic-gate * If this vnode is mounted on, then we transparently indirect 6687c478bd9Sstevel@tonic-gate * to the vnode which is the root of the mounted file system. 6697c478bd9Sstevel@tonic-gate * Before we do this we must check that an unmount is not in 6707c478bd9Sstevel@tonic-gate * progress on this vnode. 6717c478bd9Sstevel@tonic-gate */ 6727c478bd9Sstevel@tonic-gate 6737c478bd9Sstevel@tonic-gate for (;;) { 6747c478bd9Sstevel@tonic-gate /* 6757c478bd9Sstevel@tonic-gate * Try to read lock the vnode. If this fails because 6767c478bd9Sstevel@tonic-gate * the vnode is already write locked, then check to 6777c478bd9Sstevel@tonic-gate * see whether it is the current thread which locked 6787c478bd9Sstevel@tonic-gate * the vnode. If it is not, then read lock the vnode 6797c478bd9Sstevel@tonic-gate * by waiting to acquire the lock. 6807c478bd9Sstevel@tonic-gate * 6817c478bd9Sstevel@tonic-gate * The code path in domount() is an example of support 6827c478bd9Sstevel@tonic-gate * which needs to look up two pathnames and locks one 6837c478bd9Sstevel@tonic-gate * of them in between the two lookups. 6847c478bd9Sstevel@tonic-gate */ 6857c478bd9Sstevel@tonic-gate error = vn_vfsrlock(cvp); 6867c478bd9Sstevel@tonic-gate if (error) { 6877c478bd9Sstevel@tonic-gate if (!vn_vfswlock_held(cvp)) 6887c478bd9Sstevel@tonic-gate error = vn_vfsrlock_wait(cvp); 6897c478bd9Sstevel@tonic-gate if (error != 0) { 6907c478bd9Sstevel@tonic-gate /* 6917c478bd9Sstevel@tonic-gate * lookuppn() expects a held vnode to be 6927c478bd9Sstevel@tonic-gate * returned because it promptly calls 6937c478bd9Sstevel@tonic-gate * VN_RELE after the error return 6947c478bd9Sstevel@tonic-gate */ 6957c478bd9Sstevel@tonic-gate *cvpp = cvp; 6967c478bd9Sstevel@tonic-gate return (error); 6977c478bd9Sstevel@tonic-gate } 6987c478bd9Sstevel@tonic-gate } 6997c478bd9Sstevel@tonic-gate 7007c478bd9Sstevel@tonic-gate /* 7017c478bd9Sstevel@tonic-gate * Reached the end of the mount chain? 7027c478bd9Sstevel@tonic-gate */ 7037c478bd9Sstevel@tonic-gate vfsp = vn_mountedvfs(cvp); 7047c478bd9Sstevel@tonic-gate if (vfsp == NULL) { 7057c478bd9Sstevel@tonic-gate vn_vfsunlock(cvp); 7067c478bd9Sstevel@tonic-gate break; 7077c478bd9Sstevel@tonic-gate } 7087c478bd9Sstevel@tonic-gate 7097c478bd9Sstevel@tonic-gate /* 7107c478bd9Sstevel@tonic-gate * The read lock must be held across the call to VFS_ROOT() to 7117c478bd9Sstevel@tonic-gate * prevent a concurrent unmount from destroying the vfs. 7127c478bd9Sstevel@tonic-gate */ 7137c478bd9Sstevel@tonic-gate error = VFS_ROOT(vfsp, &tvp); 7147c478bd9Sstevel@tonic-gate vn_vfsunlock(cvp); 7157c478bd9Sstevel@tonic-gate 7167c478bd9Sstevel@tonic-gate if (error) 7177c478bd9Sstevel@tonic-gate break; 7187c478bd9Sstevel@tonic-gate 7197c478bd9Sstevel@tonic-gate VN_RELE(cvp); 7207c478bd9Sstevel@tonic-gate 7217c478bd9Sstevel@tonic-gate cvp = tvp; 7227c478bd9Sstevel@tonic-gate } 7237c478bd9Sstevel@tonic-gate 7247c478bd9Sstevel@tonic-gate *cvpp = cvp; 7257c478bd9Sstevel@tonic-gate return (error); 7267c478bd9Sstevel@tonic-gate } 7277c478bd9Sstevel@tonic-gate 7287c478bd9Sstevel@tonic-gate /* 7297c478bd9Sstevel@tonic-gate * Return the lowermost vnode if this is a mountpoint. 7307c478bd9Sstevel@tonic-gate */ 7317c478bd9Sstevel@tonic-gate static vnode_t * 7327c478bd9Sstevel@tonic-gate vn_under(vnode_t *vp) 7337c478bd9Sstevel@tonic-gate { 7347c478bd9Sstevel@tonic-gate vnode_t *uvp; 7357c478bd9Sstevel@tonic-gate vfs_t *vfsp; 7367c478bd9Sstevel@tonic-gate 7377c478bd9Sstevel@tonic-gate while (vp->v_flag & VROOT) { 7387c478bd9Sstevel@tonic-gate 7397c478bd9Sstevel@tonic-gate vfsp = vp->v_vfsp; 7407c478bd9Sstevel@tonic-gate vfs_rlock_wait(vfsp); 7417c478bd9Sstevel@tonic-gate if ((uvp = vfsp->vfs_vnodecovered) == NULL || 7427c478bd9Sstevel@tonic-gate (vfsp->vfs_flag & VFS_UNMOUNTED)) { 7437c478bd9Sstevel@tonic-gate vfs_unlock(vfsp); 7447c478bd9Sstevel@tonic-gate break; 7457c478bd9Sstevel@tonic-gate } 7467c478bd9Sstevel@tonic-gate VN_HOLD(uvp); 7477c478bd9Sstevel@tonic-gate vfs_unlock(vfsp); 7487c478bd9Sstevel@tonic-gate VN_RELE(vp); 7497c478bd9Sstevel@tonic-gate vp = uvp; 7507c478bd9Sstevel@tonic-gate } 7517c478bd9Sstevel@tonic-gate 7527c478bd9Sstevel@tonic-gate return (vp); 7537c478bd9Sstevel@tonic-gate } 7547c478bd9Sstevel@tonic-gate 7557c478bd9Sstevel@tonic-gate static int 7567c478bd9Sstevel@tonic-gate vnode_match(vnode_t *v1, vnode_t *v2, cred_t *cr) 7577c478bd9Sstevel@tonic-gate { 7587c478bd9Sstevel@tonic-gate vattr_t v1attr, v2attr; 7597c478bd9Sstevel@tonic-gate 7607c478bd9Sstevel@tonic-gate /* 7617c478bd9Sstevel@tonic-gate * If we have a device file, check to see if is a cloned open of the 7627c478bd9Sstevel@tonic-gate * same device. For self-cloning devices, the major numbers will match. 7637c478bd9Sstevel@tonic-gate * For devices cloned through the 'clone' driver, the minor number of 7647c478bd9Sstevel@tonic-gate * the source device will be the same as the major number of the cloned 7657c478bd9Sstevel@tonic-gate * device. 7667c478bd9Sstevel@tonic-gate */ 7677c478bd9Sstevel@tonic-gate if ((v1->v_type == VCHR || v1->v_type == VBLK) && 7687c478bd9Sstevel@tonic-gate v1->v_type == v2->v_type) { 7697c478bd9Sstevel@tonic-gate if ((spec_is_selfclone(v1) || spec_is_selfclone(v2)) && 7707c478bd9Sstevel@tonic-gate getmajor(v1->v_rdev) == getmajor(v2->v_rdev)) 7717c478bd9Sstevel@tonic-gate return (1); 7727c478bd9Sstevel@tonic-gate 7737c478bd9Sstevel@tonic-gate if (spec_is_clone(v1) && 7747c478bd9Sstevel@tonic-gate getmajor(v1->v_rdev) == getminor(v2->v_rdev)) 7757c478bd9Sstevel@tonic-gate return (1); 7767c478bd9Sstevel@tonic-gate 7777c478bd9Sstevel@tonic-gate if (spec_is_clone(v2) && 7787c478bd9Sstevel@tonic-gate getmajor(v2->v_rdev) == getminor(v1->v_rdev)) 7797c478bd9Sstevel@tonic-gate return (1); 7807c478bd9Sstevel@tonic-gate } 7817c478bd9Sstevel@tonic-gate 7827c478bd9Sstevel@tonic-gate v1attr.va_mask = v2attr.va_mask = AT_TYPE; 7837c478bd9Sstevel@tonic-gate 7847c478bd9Sstevel@tonic-gate /* 7857c478bd9Sstevel@tonic-gate * This check for symbolic links handles the pseudo-symlinks in procfs. 7867c478bd9Sstevel@tonic-gate * These particular links have v_type of VDIR, but the attributes have a 7877c478bd9Sstevel@tonic-gate * type of VLNK. We need to avoid these links because otherwise if we 7887c478bd9Sstevel@tonic-gate * are currently in '/proc/self/fd', then '/proc/self/cwd' will compare 7897c478bd9Sstevel@tonic-gate * as the same vnode. 7907c478bd9Sstevel@tonic-gate */ 791da6c28aaSamw if (VOP_GETATTR(v1, &v1attr, 0, cr, NULL) != 0 || 792da6c28aaSamw VOP_GETATTR(v2, &v2attr, 0, cr, NULL) != 0 || 7937c478bd9Sstevel@tonic-gate v1attr.va_type == VLNK || v2attr.va_type == VLNK) 7947c478bd9Sstevel@tonic-gate return (0); 7957c478bd9Sstevel@tonic-gate 7967c478bd9Sstevel@tonic-gate v1attr.va_mask = v2attr.va_mask = AT_TYPE | AT_FSID | AT_NODEID; 7977c478bd9Sstevel@tonic-gate 798da6c28aaSamw if (VOP_GETATTR(v1, &v1attr, ATTR_REAL, cr, NULL) != 0 || 799da6c28aaSamw VOP_GETATTR(v2, &v2attr, ATTR_REAL, cr, NULL) != 0) 8007c478bd9Sstevel@tonic-gate return (0); 8017c478bd9Sstevel@tonic-gate 8027c478bd9Sstevel@tonic-gate return (v1attr.va_fsid == v2attr.va_fsid && 8037c478bd9Sstevel@tonic-gate v1attr.va_nodeid == v2attr.va_nodeid); 8047c478bd9Sstevel@tonic-gate } 8057c478bd9Sstevel@tonic-gate 8067c478bd9Sstevel@tonic-gate 8077c478bd9Sstevel@tonic-gate /* 8087c478bd9Sstevel@tonic-gate * Find the entry in the directory corresponding to the target vnode. 8097c478bd9Sstevel@tonic-gate */ 8107c478bd9Sstevel@tonic-gate int 8117c478bd9Sstevel@tonic-gate dirfindvp(vnode_t *vrootp, vnode_t *dvp, vnode_t *tvp, cred_t *cr, char *dbuf, 8127c478bd9Sstevel@tonic-gate size_t dlen, dirent64_t **rdp) 8137c478bd9Sstevel@tonic-gate { 8147c478bd9Sstevel@tonic-gate size_t dbuflen; 8157c478bd9Sstevel@tonic-gate struct iovec iov; 8167c478bd9Sstevel@tonic-gate struct uio uio; 817fa9e4066Sahrens int error; 8187c478bd9Sstevel@tonic-gate int eof; 8197c478bd9Sstevel@tonic-gate vnode_t *cmpvp; 8207c478bd9Sstevel@tonic-gate struct dirent64 *dp; 8217c478bd9Sstevel@tonic-gate pathname_t pnp; 8227c478bd9Sstevel@tonic-gate 8237c478bd9Sstevel@tonic-gate ASSERT(dvp->v_type == VDIR); 8247c478bd9Sstevel@tonic-gate 8257c478bd9Sstevel@tonic-gate /* 8267c478bd9Sstevel@tonic-gate * This is necessary because of the strange semantics of VOP_LOOKUP(). 8277c478bd9Sstevel@tonic-gate */ 8287c478bd9Sstevel@tonic-gate bzero(&pnp, sizeof (pnp)); 8297c478bd9Sstevel@tonic-gate 8307c478bd9Sstevel@tonic-gate eof = 0; 8317c478bd9Sstevel@tonic-gate 8327c478bd9Sstevel@tonic-gate uio.uio_iov = &iov; 8337c478bd9Sstevel@tonic-gate uio.uio_iovcnt = 1; 8347c478bd9Sstevel@tonic-gate uio.uio_segflg = UIO_SYSSPACE; 8357c478bd9Sstevel@tonic-gate uio.uio_fmode = 0; 8367c478bd9Sstevel@tonic-gate uio.uio_extflg = UIO_COPY_CACHED; 8377c478bd9Sstevel@tonic-gate uio.uio_loffset = 0; 8387c478bd9Sstevel@tonic-gate 839da6c28aaSamw if ((error = VOP_ACCESS(dvp, VREAD, 0, cr, NULL)) != 0) 840fa9e4066Sahrens return (error); 8417c478bd9Sstevel@tonic-gate 8427c478bd9Sstevel@tonic-gate while (!eof) { 8437c478bd9Sstevel@tonic-gate uio.uio_resid = dlen; 8447c478bd9Sstevel@tonic-gate iov.iov_base = dbuf; 8457c478bd9Sstevel@tonic-gate iov.iov_len = dlen; 8467c478bd9Sstevel@tonic-gate 8477c478bd9Sstevel@tonic-gate (void) VOP_RWLOCK(dvp, V_WRITELOCK_FALSE, NULL); 848da6c28aaSamw error = VOP_READDIR(dvp, &uio, cr, &eof, NULL, 0); 8497c478bd9Sstevel@tonic-gate VOP_RWUNLOCK(dvp, V_WRITELOCK_FALSE, NULL); 8507c478bd9Sstevel@tonic-gate 8517c478bd9Sstevel@tonic-gate dbuflen = dlen - uio.uio_resid; 8527c478bd9Sstevel@tonic-gate 853fa9e4066Sahrens if (error || dbuflen == 0) 8547c478bd9Sstevel@tonic-gate break; 8557c478bd9Sstevel@tonic-gate 8567c478bd9Sstevel@tonic-gate dp = (dirent64_t *)dbuf; 8577c478bd9Sstevel@tonic-gate while ((intptr_t)dp < (intptr_t)dbuf + dbuflen) { 8587c478bd9Sstevel@tonic-gate /* 8597c478bd9Sstevel@tonic-gate * Ignore '.' and '..' entries 8607c478bd9Sstevel@tonic-gate */ 8617c478bd9Sstevel@tonic-gate if (strcmp(dp->d_name, ".") == 0 || 8627c478bd9Sstevel@tonic-gate strcmp(dp->d_name, "..") == 0) { 8637c478bd9Sstevel@tonic-gate dp = (dirent64_t *)((intptr_t)dp + 8647c478bd9Sstevel@tonic-gate dp->d_reclen); 8657c478bd9Sstevel@tonic-gate continue; 8667c478bd9Sstevel@tonic-gate } 8677c478bd9Sstevel@tonic-gate 868fa9e4066Sahrens error = VOP_LOOKUP(dvp, dp->d_name, &cmpvp, &pnp, 0, 869da6c28aaSamw vrootp, cr, NULL, NULL, NULL); 8707c478bd9Sstevel@tonic-gate 8717c478bd9Sstevel@tonic-gate /* 8727c478bd9Sstevel@tonic-gate * We only want to bail out if there was an error other 8737c478bd9Sstevel@tonic-gate * than ENOENT. Otherwise, it could be that someone 8747c478bd9Sstevel@tonic-gate * just removed an entry since the readdir() call, and 8757c478bd9Sstevel@tonic-gate * the entry we want is further on in the directory. 8767c478bd9Sstevel@tonic-gate */ 877fa9e4066Sahrens if (error == 0) { 8787c478bd9Sstevel@tonic-gate if (vnode_match(tvp, cmpvp, cr)) { 8797c478bd9Sstevel@tonic-gate VN_RELE(cmpvp); 8807c478bd9Sstevel@tonic-gate *rdp = dp; 8817c478bd9Sstevel@tonic-gate return (0); 8827c478bd9Sstevel@tonic-gate } 8837c478bd9Sstevel@tonic-gate 8847c478bd9Sstevel@tonic-gate VN_RELE(cmpvp); 885fa9e4066Sahrens } else if (error != ENOENT) { 886fa9e4066Sahrens return (error); 8877c478bd9Sstevel@tonic-gate } 8887c478bd9Sstevel@tonic-gate 8897c478bd9Sstevel@tonic-gate dp = (dirent64_t *)((intptr_t)dp + dp->d_reclen); 8907c478bd9Sstevel@tonic-gate } 8917c478bd9Sstevel@tonic-gate } 8927c478bd9Sstevel@tonic-gate 8937c478bd9Sstevel@tonic-gate /* 8947c478bd9Sstevel@tonic-gate * Something strange has happened, this directory does not contain the 8957c478bd9Sstevel@tonic-gate * specified vnode. This should never happen in the normal case, since 896fa9e4066Sahrens * we ensured that dvp is the parent of vp. This is possible in some 897fa9e4066Sahrens * rare conditions (races and the special .zfs directory). 8987c478bd9Sstevel@tonic-gate */ 899fa9e4066Sahrens if (error == 0) { 900da6c28aaSamw error = VOP_LOOKUP(dvp, ".zfs", &cmpvp, &pnp, 0, vrootp, cr, 901da6c28aaSamw NULL, NULL, NULL); 902fa9e4066Sahrens if (error == 0) { 903fa9e4066Sahrens if (vnode_match(tvp, cmpvp, cr)) { 904fa9e4066Sahrens (void) strcpy(dp->d_name, ".zfs"); 905fa9e4066Sahrens dp->d_reclen = strlen(".zfs"); 906fa9e4066Sahrens dp->d_off = 2; 907fa9e4066Sahrens dp->d_ino = 1; 908fa9e4066Sahrens *rdp = dp; 909fa9e4066Sahrens } else { 910fa9e4066Sahrens error = ENOENT; 911fa9e4066Sahrens } 912fa9e4066Sahrens VN_RELE(cmpvp); 913fa9e4066Sahrens } 914fa9e4066Sahrens } 9157c478bd9Sstevel@tonic-gate 916fa9e4066Sahrens return (error); 9177c478bd9Sstevel@tonic-gate } 9187c478bd9Sstevel@tonic-gate 9197c478bd9Sstevel@tonic-gate /* 9207c478bd9Sstevel@tonic-gate * Given a global path (from rootdir), and a vnode that is the current root, 9217c478bd9Sstevel@tonic-gate * return the portion of the path that is beneath the current root or NULL on 9227c478bd9Sstevel@tonic-gate * failure. The path MUST be a resolved path (no '..' entries or symlinks), 9237c478bd9Sstevel@tonic-gate * otherwise this function will fail. 9247c478bd9Sstevel@tonic-gate */ 9257c478bd9Sstevel@tonic-gate static char * 9267c478bd9Sstevel@tonic-gate localpath(char *path, struct vnode *vrootp, cred_t *cr) 9277c478bd9Sstevel@tonic-gate { 9287c478bd9Sstevel@tonic-gate vnode_t *vp; 9297c478bd9Sstevel@tonic-gate vnode_t *cvp; 9307c478bd9Sstevel@tonic-gate char component[MAXNAMELEN]; 9317c478bd9Sstevel@tonic-gate char *ret = NULL; 9327c478bd9Sstevel@tonic-gate pathname_t pn; 9337c478bd9Sstevel@tonic-gate 9347c478bd9Sstevel@tonic-gate /* 9357c478bd9Sstevel@tonic-gate * We use vn_compare() instead of VN_CMP() in order to detect lofs 9367c478bd9Sstevel@tonic-gate * mounts and stacked vnodes. 9377c478bd9Sstevel@tonic-gate */ 9387c478bd9Sstevel@tonic-gate if (vn_compare(vrootp, rootdir)) 9397c478bd9Sstevel@tonic-gate return (path); 9407c478bd9Sstevel@tonic-gate 9417c478bd9Sstevel@tonic-gate if (pn_get(path, UIO_SYSSPACE, &pn) != 0) 9427c478bd9Sstevel@tonic-gate return (NULL); 9437c478bd9Sstevel@tonic-gate 9447c478bd9Sstevel@tonic-gate vp = rootdir; 9457c478bd9Sstevel@tonic-gate VN_HOLD(vp); 9467c478bd9Sstevel@tonic-gate 9475fd6860bSMilan Cermak if (vn_ismntpt(vp) && traverse(&vp) != 0) { 9485fd6860bSMilan Cermak VN_RELE(vp); 9495fd6860bSMilan Cermak pn_free(&pn); 9505fd6860bSMilan Cermak return (NULL); 9515fd6860bSMilan Cermak } 9525fd6860bSMilan Cermak 9537c478bd9Sstevel@tonic-gate while (pn_pathleft(&pn)) { 9547c478bd9Sstevel@tonic-gate pn_skipslash(&pn); 9557c478bd9Sstevel@tonic-gate 9567c478bd9Sstevel@tonic-gate if (pn_getcomponent(&pn, component) != 0) 9577c478bd9Sstevel@tonic-gate break; 9587c478bd9Sstevel@tonic-gate 959da6c28aaSamw if (VOP_LOOKUP(vp, component, &cvp, &pn, 0, rootdir, cr, 960da6c28aaSamw NULL, NULL, NULL) != 0) 9617c478bd9Sstevel@tonic-gate break; 9627c478bd9Sstevel@tonic-gate VN_RELE(vp); 9637c478bd9Sstevel@tonic-gate vp = cvp; 9647c478bd9Sstevel@tonic-gate 9655fd6860bSMilan Cermak if (vn_ismntpt(vp) && traverse(&vp) != 0) 9665fd6860bSMilan Cermak break; 9675fd6860bSMilan Cermak 9687c478bd9Sstevel@tonic-gate if (vn_compare(vp, vrootp)) { 9697c478bd9Sstevel@tonic-gate ret = path + (pn.pn_path - pn.pn_buf); 9707c478bd9Sstevel@tonic-gate break; 9717c478bd9Sstevel@tonic-gate } 9727c478bd9Sstevel@tonic-gate } 9737c478bd9Sstevel@tonic-gate 9747c478bd9Sstevel@tonic-gate VN_RELE(vp); 9757c478bd9Sstevel@tonic-gate pn_free(&pn); 9767c478bd9Sstevel@tonic-gate 9777c478bd9Sstevel@tonic-gate return (ret); 9787c478bd9Sstevel@tonic-gate } 9797c478bd9Sstevel@tonic-gate 980*e2fc3408SPatrick Mooney /* 981*e2fc3408SPatrick Mooney * Clean a stale v_path from a vnode. This is only performed if the v_path has 982*e2fc3408SPatrick Mooney * not been altered since it was found to be stale 983*e2fc3408SPatrick Mooney */ 984*e2fc3408SPatrick Mooney static void 985*e2fc3408SPatrick Mooney vnode_clear_vpath(vnode_t *vp, char *vpath_old) 986*e2fc3408SPatrick Mooney { 987*e2fc3408SPatrick Mooney mutex_enter(&vp->v_lock); 988*e2fc3408SPatrick Mooney if (vp->v_path != vn_vpath_empty && vp->v_path == vpath_old) { 989*e2fc3408SPatrick Mooney vp->v_path = vn_vpath_empty; 990*e2fc3408SPatrick Mooney mutex_exit(&vp->v_lock); 991*e2fc3408SPatrick Mooney kmem_free(vpath_old, strlen(vpath_old) + 1); 992*e2fc3408SPatrick Mooney } else { 993*e2fc3408SPatrick Mooney mutex_exit(&vp->v_lock); 994*e2fc3408SPatrick Mooney } 995*e2fc3408SPatrick Mooney } 996*e2fc3408SPatrick Mooney 997*e2fc3408SPatrick Mooney /* 998*e2fc3408SPatrick Mooney * Validate that a pathname refers to a given vnode. 999*e2fc3408SPatrick Mooney */ 1000*e2fc3408SPatrick Mooney static int 1001*e2fc3408SPatrick Mooney vnode_valid_pn(vnode_t *vp, vnode_t *vrootp, pathname_t *pn, pathname_t *rpn, 1002*e2fc3408SPatrick Mooney int flags, cred_t *cr) 1003*e2fc3408SPatrick Mooney { 1004*e2fc3408SPatrick Mooney vnode_t *compvp; 1005*e2fc3408SPatrick Mooney /* 1006*e2fc3408SPatrick Mooney * If we are in a zone or a chroot environment, then we have to 1007*e2fc3408SPatrick Mooney * take additional steps, since the path to the root might not 1008*e2fc3408SPatrick Mooney * be readable with the current credentials, even though the 1009*e2fc3408SPatrick Mooney * process can legitmately access the file. In this case, we 1010*e2fc3408SPatrick Mooney * do the following: 1011*e2fc3408SPatrick Mooney * 1012*e2fc3408SPatrick Mooney * lookuppnvp() with all privileges to get the resolved path. 1013*e2fc3408SPatrick Mooney * call localpath() to get the local portion of the path, and 1014*e2fc3408SPatrick Mooney * continue as normal. 1015*e2fc3408SPatrick Mooney * 1016*e2fc3408SPatrick Mooney * If the the conversion to a local path fails, then we continue 1017*e2fc3408SPatrick Mooney * as normal. This is a heuristic to make process object file 1018*e2fc3408SPatrick Mooney * paths available from within a zone. Because lofs doesn't 1019*e2fc3408SPatrick Mooney * support page operations, the vnode stored in the seg_t is 1020*e2fc3408SPatrick Mooney * actually the underlying real vnode, not the lofs node itself. 1021*e2fc3408SPatrick Mooney * Most of the time, the lofs path is the same as the underlying 1022*e2fc3408SPatrick Mooney * vnode (for example, /usr/lib/libc.so.1). 1023*e2fc3408SPatrick Mooney */ 1024*e2fc3408SPatrick Mooney if (vrootp != rootdir) { 1025*e2fc3408SPatrick Mooney char *local = NULL; 1026*e2fc3408SPatrick Mooney 1027*e2fc3408SPatrick Mooney VN_HOLD(rootdir); 1028*e2fc3408SPatrick Mooney if (lookuppnvp(pn, rpn, FOLLOW, NULL, &compvp, rootdir, 1029*e2fc3408SPatrick Mooney rootdir, kcred) == 0) { 1030*e2fc3408SPatrick Mooney local = localpath(rpn->pn_path, vrootp, kcred); 1031*e2fc3408SPatrick Mooney VN_RELE(compvp); 1032*e2fc3408SPatrick Mooney } 1033*e2fc3408SPatrick Mooney 1034*e2fc3408SPatrick Mooney /* 1035*e2fc3408SPatrick Mooney * The original pn was changed through lookuppnvp(). 1036*e2fc3408SPatrick Mooney * Set it to local for next validation attempt. 1037*e2fc3408SPatrick Mooney */ 1038*e2fc3408SPatrick Mooney if (local) { 1039*e2fc3408SPatrick Mooney (void) pn_set(pn, local); 1040*e2fc3408SPatrick Mooney } else { 1041*e2fc3408SPatrick Mooney return (1); 1042*e2fc3408SPatrick Mooney } 1043*e2fc3408SPatrick Mooney } 1044*e2fc3408SPatrick Mooney 1045*e2fc3408SPatrick Mooney /* 1046*e2fc3408SPatrick Mooney * We should have a local path at this point, so start the search from 1047*e2fc3408SPatrick Mooney * the root of the current process. 1048*e2fc3408SPatrick Mooney */ 1049*e2fc3408SPatrick Mooney VN_HOLD(vrootp); 1050*e2fc3408SPatrick Mooney if (vrootp != rootdir) 1051*e2fc3408SPatrick Mooney VN_HOLD(vrootp); 1052*e2fc3408SPatrick Mooney if (lookuppnvp(pn, rpn, FOLLOW | flags, NULL, &compvp, vrootp, vrootp, 1053*e2fc3408SPatrick Mooney cr) == 0) { 1054*e2fc3408SPatrick Mooney /* 1055*e2fc3408SPatrick Mooney * Check to see if the returned vnode is the same as the one we 1056*e2fc3408SPatrick Mooney * expect. 1057*e2fc3408SPatrick Mooney */ 1058*e2fc3408SPatrick Mooney if (vn_compare(vp, compvp) || 1059*e2fc3408SPatrick Mooney vnode_match(vp, compvp, cr)) { 1060*e2fc3408SPatrick Mooney VN_RELE(compvp); 1061*e2fc3408SPatrick Mooney return (0); 1062*e2fc3408SPatrick Mooney } 1063*e2fc3408SPatrick Mooney } 1064*e2fc3408SPatrick Mooney 1065*e2fc3408SPatrick Mooney VN_RELE(compvp); 1066*e2fc3408SPatrick Mooney return (1); 1067*e2fc3408SPatrick Mooney } 1068*e2fc3408SPatrick Mooney 1069*e2fc3408SPatrick Mooney /* 1070*e2fc3408SPatrick Mooney * Struct for tracking vnodes with invalidated v_path entries during a 1071*e2fc3408SPatrick Mooney * dirtopath reverse lookup. By keeping adequate state, those vnodes can be 1072*e2fc3408SPatrick Mooney * revisted to populate v_path. 1073*e2fc3408SPatrick Mooney */ 1074*e2fc3408SPatrick Mooney struct dirpath_walk { 1075*e2fc3408SPatrick Mooney struct dirpath_walk *dw_next; 1076*e2fc3408SPatrick Mooney vnode_t *dw_vnode; 1077*e2fc3408SPatrick Mooney vnode_t *dw_pvnode; 1078*e2fc3408SPatrick Mooney size_t dw_len; 1079*e2fc3408SPatrick Mooney char *dw_name; 1080*e2fc3408SPatrick Mooney }; 1081*e2fc3408SPatrick Mooney 10827c478bd9Sstevel@tonic-gate /* 10837c478bd9Sstevel@tonic-gate * Given a directory, return the full, resolved path. This looks up "..", 10847c478bd9Sstevel@tonic-gate * searches for the given vnode in the parent, appends the component, etc. It 10852f5706a1SWilliam.Johnston * is used to implement vnodetopath() and getcwd() when the cached path fails. 10867c478bd9Sstevel@tonic-gate */ 10877c478bd9Sstevel@tonic-gate static int 10887b2df5ebSMilan Cermak dirtopath(vnode_t *vrootp, vnode_t *vp, char *buf, size_t buflen, int flags, 10897b2df5ebSMilan Cermak cred_t *cr) 10907c478bd9Sstevel@tonic-gate { 1091*e2fc3408SPatrick Mooney pathname_t pn, rpn, emptypn; 1092*e2fc3408SPatrick Mooney vnode_t *pvp = NULL, *startvp = vp; 1093*e2fc3408SPatrick Mooney int err = 0; 1094*e2fc3408SPatrick Mooney size_t complen; 1095*e2fc3408SPatrick Mooney dirent64_t *dp; 1096*e2fc3408SPatrick Mooney char *bufloc, *dbuf; 1097*e2fc3408SPatrick Mooney const size_t dlen = DIRENT64_RECLEN(MAXPATHLEN); 1098*e2fc3408SPatrick Mooney struct dirpath_walk *dw_chain = NULL, *dw_entry; 10997c478bd9Sstevel@tonic-gate 11007c478bd9Sstevel@tonic-gate /* Operation only allowed on directories */ 11017c478bd9Sstevel@tonic-gate ASSERT(vp->v_type == VDIR); 11027c478bd9Sstevel@tonic-gate 11037c478bd9Sstevel@tonic-gate /* We must have at least enough space for "/" */ 11047c478bd9Sstevel@tonic-gate if (buflen < 2) 11057c478bd9Sstevel@tonic-gate return (ENAMETOOLONG); 11067c478bd9Sstevel@tonic-gate 11077c478bd9Sstevel@tonic-gate /* Start at end of string with terminating null */ 11087c478bd9Sstevel@tonic-gate bufloc = &buf[buflen - 1]; 11097c478bd9Sstevel@tonic-gate *bufloc = '\0'; 11107c478bd9Sstevel@tonic-gate 11117c478bd9Sstevel@tonic-gate pn_alloc(&pn); 11127c478bd9Sstevel@tonic-gate pn_alloc(&rpn); 11137c478bd9Sstevel@tonic-gate dbuf = kmem_alloc(dlen, KM_SLEEP); 11147c478bd9Sstevel@tonic-gate bzero(&emptypn, sizeof (emptypn)); 11157c478bd9Sstevel@tonic-gate 11167c478bd9Sstevel@tonic-gate /* 11177c478bd9Sstevel@tonic-gate * Begin with an additional reference on vp. This will be decremented 11187c478bd9Sstevel@tonic-gate * during the loop. 11197c478bd9Sstevel@tonic-gate */ 11207c478bd9Sstevel@tonic-gate VN_HOLD(vp); 11217c478bd9Sstevel@tonic-gate 11227c478bd9Sstevel@tonic-gate for (;;) { 1123*e2fc3408SPatrick Mooney int vprivs; 1124*e2fc3408SPatrick Mooney hrtime_t cached_stamp; 1125*e2fc3408SPatrick Mooney 11267c478bd9Sstevel@tonic-gate /* 11277c478bd9Sstevel@tonic-gate * Return if we've reached the root. If the buffer is empty, 11287c478bd9Sstevel@tonic-gate * return '/'. We explicitly don't use vn_compare(), since it 11297c478bd9Sstevel@tonic-gate * compares the real vnodes. A lofs mount of '/' would produce 11307c478bd9Sstevel@tonic-gate * incorrect results otherwise. 11317c478bd9Sstevel@tonic-gate */ 11327c478bd9Sstevel@tonic-gate if (VN_CMP(vrootp, vp)) { 11337c478bd9Sstevel@tonic-gate if (*bufloc == '\0') 11347c478bd9Sstevel@tonic-gate *--bufloc = '/'; 11357c478bd9Sstevel@tonic-gate break; 11367c478bd9Sstevel@tonic-gate } 11377c478bd9Sstevel@tonic-gate 11387c478bd9Sstevel@tonic-gate /* 11397c478bd9Sstevel@tonic-gate * If we've reached the VFS root, something has gone wrong. We 11407c478bd9Sstevel@tonic-gate * should have reached the root in the above check. The only 11417c478bd9Sstevel@tonic-gate * explantation is that 'vp' is not contained withing the given 11427c478bd9Sstevel@tonic-gate * root, in which case we return EPERM. 11437c478bd9Sstevel@tonic-gate */ 11447c478bd9Sstevel@tonic-gate if (VN_CMP(rootdir, vp)) { 11457c478bd9Sstevel@tonic-gate err = EPERM; 11467c478bd9Sstevel@tonic-gate goto out; 11477c478bd9Sstevel@tonic-gate } 11487c478bd9Sstevel@tonic-gate 1149207983b5SMilan Cermak /* 1150207983b5SMilan Cermak * Shortcut: see if this vnode has correct v_path. If so, 1151207983b5SMilan Cermak * we have the work done. 1152207983b5SMilan Cermak */ 1153207983b5SMilan Cermak mutex_enter(&vp->v_lock); 1154*e2fc3408SPatrick Mooney if (vp->v_path != vn_vpath_empty && 1155*e2fc3408SPatrick Mooney pn_set(&pn, vp->v_path) == 0) { 1156*e2fc3408SPatrick Mooney cached_stamp = vp->v_path_stamp; 1157*e2fc3408SPatrick Mooney mutex_exit(&vp->v_lock); 1158*e2fc3408SPatrick Mooney rpn.pn_path = rpn.pn_buf; 1159*e2fc3408SPatrick Mooney 1160*e2fc3408SPatrick Mooney /* Ensure the v_path pointing to correct vnode */ 1161*e2fc3408SPatrick Mooney if (vnode_valid_pn(vp, vrootp, &pn, &rpn, flags, 1162*e2fc3408SPatrick Mooney cr) == 0) { 1163*e2fc3408SPatrick Mooney complen = strlen(rpn.pn_path); 1164*e2fc3408SPatrick Mooney bufloc -= complen; 1165*e2fc3408SPatrick Mooney if (bufloc < buf) { 1166*e2fc3408SPatrick Mooney err = ERANGE; 1167*e2fc3408SPatrick Mooney goto out; 1168207983b5SMilan Cermak } 1169*e2fc3408SPatrick Mooney bcopy(rpn.pn_path, bufloc, complen); 1170*e2fc3408SPatrick Mooney break; 1171207983b5SMilan Cermak } else { 1172*e2fc3408SPatrick Mooney /* 1173*e2fc3408SPatrick Mooney * Immediately nuke cached v_path entries known 1174*e2fc3408SPatrick Mooney * to be invalid. 1175*e2fc3408SPatrick Mooney */ 1176*e2fc3408SPatrick Mooney vn_clearpath(vp, cached_stamp); 1177207983b5SMilan Cermak } 1178207983b5SMilan Cermak } else { 1179207983b5SMilan Cermak mutex_exit(&vp->v_lock); 1180207983b5SMilan Cermak } 1181207983b5SMilan Cermak 11827c478bd9Sstevel@tonic-gate /* 11837c478bd9Sstevel@tonic-gate * Shortcuts failed, search for this vnode in its parent. If 11847c478bd9Sstevel@tonic-gate * this is a mountpoint, then get the vnode underneath. 11857c478bd9Sstevel@tonic-gate */ 11867c478bd9Sstevel@tonic-gate if (vp->v_flag & VROOT) 11877c478bd9Sstevel@tonic-gate vp = vn_under(vp); 1188da6c28aaSamw if ((err = VOP_LOOKUP(vp, "..", &pvp, &emptypn, 0, vrootp, cr, 1189da6c28aaSamw NULL, NULL, NULL)) != 0) 11907c478bd9Sstevel@tonic-gate goto out; 11917c478bd9Sstevel@tonic-gate 11927c478bd9Sstevel@tonic-gate /* 11937c478bd9Sstevel@tonic-gate * With extended attributes, it's possible for a directory to 11947c478bd9Sstevel@tonic-gate * have a parent that is a regular file. Check for that here. 11957c478bd9Sstevel@tonic-gate */ 11967c478bd9Sstevel@tonic-gate if (pvp->v_type != VDIR) { 11977c478bd9Sstevel@tonic-gate err = ENOTDIR; 11987c478bd9Sstevel@tonic-gate goto out; 11997c478bd9Sstevel@tonic-gate } 12007c478bd9Sstevel@tonic-gate 12017c478bd9Sstevel@tonic-gate /* 12027c478bd9Sstevel@tonic-gate * If this is true, something strange has happened. This is 12037c478bd9Sstevel@tonic-gate * only true if we are the root of a filesystem, which should 12047c478bd9Sstevel@tonic-gate * have been caught by the check above. 12057c478bd9Sstevel@tonic-gate */ 12067c478bd9Sstevel@tonic-gate if (VN_CMP(pvp, vp)) { 12077c478bd9Sstevel@tonic-gate err = ENOENT; 12087c478bd9Sstevel@tonic-gate goto out; 12097c478bd9Sstevel@tonic-gate } 12107c478bd9Sstevel@tonic-gate 12117b2df5ebSMilan Cermak /* 12127b2df5ebSMilan Cermak * Check if we have read and search privilege so, that 12137b2df5ebSMilan Cermak * we can lookup the path in the directory 12147b2df5ebSMilan Cermak */ 12157b2df5ebSMilan Cermak vprivs = (flags & LOOKUP_CHECKREAD) ? VREAD | VEXEC : VEXEC; 12167b2df5ebSMilan Cermak if ((err = VOP_ACCESS(pvp, vprivs, 0, cr, NULL)) != 0) { 12177b2df5ebSMilan Cermak goto out; 12187b2df5ebSMilan Cermak } 12197b2df5ebSMilan Cermak 12207c478bd9Sstevel@tonic-gate /* 12217c478bd9Sstevel@tonic-gate * Search the parent directory for the entry corresponding to 12227c478bd9Sstevel@tonic-gate * this vnode. 12237c478bd9Sstevel@tonic-gate */ 12247c478bd9Sstevel@tonic-gate if ((err = dirfindvp(vrootp, pvp, vp, cr, dbuf, dlen, &dp)) 12257c478bd9Sstevel@tonic-gate != 0) 12267c478bd9Sstevel@tonic-gate goto out; 12277c478bd9Sstevel@tonic-gate complen = strlen(dp->d_name); 12287c478bd9Sstevel@tonic-gate bufloc -= complen; 12297c478bd9Sstevel@tonic-gate if (bufloc <= buf) { 12307c478bd9Sstevel@tonic-gate err = ENAMETOOLONG; 12317c478bd9Sstevel@tonic-gate goto out; 12327c478bd9Sstevel@tonic-gate } 12337c478bd9Sstevel@tonic-gate bcopy(dp->d_name, bufloc, complen); 12347c478bd9Sstevel@tonic-gate 12357c478bd9Sstevel@tonic-gate /* Prepend a slash to the current path. */ 12367c478bd9Sstevel@tonic-gate *--bufloc = '/'; 12377c478bd9Sstevel@tonic-gate 1238*e2fc3408SPatrick Mooney /* 1239*e2fc3408SPatrick Mooney * Record the name and directory for later reconstruction and 1240*e2fc3408SPatrick Mooney * link it up with the others. 1241*e2fc3408SPatrick Mooney */ 1242*e2fc3408SPatrick Mooney dw_entry = kmem_alloc(sizeof (*dw_entry), KM_SLEEP); 1243*e2fc3408SPatrick Mooney dw_entry->dw_name = kmem_alloc(complen + 1, KM_SLEEP); 1244*e2fc3408SPatrick Mooney VN_HOLD(dw_entry->dw_vnode = vp); 1245*e2fc3408SPatrick Mooney VN_HOLD(dw_entry->dw_pvnode = pvp); 1246*e2fc3408SPatrick Mooney bcopy(dp->d_name, dw_entry->dw_name, complen + 1); 1247*e2fc3408SPatrick Mooney dw_entry->dw_len = complen; 1248*e2fc3408SPatrick Mooney dw_entry->dw_next = dw_chain; 1249*e2fc3408SPatrick Mooney dw_chain = dw_entry; 1250*e2fc3408SPatrick Mooney 12517c478bd9Sstevel@tonic-gate /* And continue with the next component */ 12527c478bd9Sstevel@tonic-gate VN_RELE(vp); 12537c478bd9Sstevel@tonic-gate vp = pvp; 12547c478bd9Sstevel@tonic-gate pvp = NULL; 12557c478bd9Sstevel@tonic-gate } 12567c478bd9Sstevel@tonic-gate 12577c478bd9Sstevel@tonic-gate /* 12587c478bd9Sstevel@tonic-gate * Place the path at the beginning of the buffer. 12597c478bd9Sstevel@tonic-gate */ 12607c478bd9Sstevel@tonic-gate if (bufloc != buf) 12617c478bd9Sstevel@tonic-gate ovbcopy(bufloc, buf, buflen - (bufloc - buf)); 12627c478bd9Sstevel@tonic-gate 12637c478bd9Sstevel@tonic-gate out: 1264*e2fc3408SPatrick Mooney /* 1265*e2fc3408SPatrick Mooney * Walk over encountered directory entries which were afflicted with a 1266*e2fc3408SPatrick Mooney * stale or absent v_path. If the dirtopath was successful, we should 1267*e2fc3408SPatrick Mooney * possess the necessary information to populate all of them with a 1268*e2fc3408SPatrick Mooney * valid v_path. 1269*e2fc3408SPatrick Mooney * 1270*e2fc3408SPatrick Mooney * While processing this list, it is safe to call vn_setpath despite 1271*e2fc3408SPatrick Mooney * the fact that racing vnode actions may have altered v_path entries 1272*e2fc3408SPatrick Mooney * while the above loopwas still executing. Any updated entries will 1273*e2fc3408SPatrick Mooney * have a newer v_path_stamp value which prevents an invalid overwrite. 1274*e2fc3408SPatrick Mooney * 1275*e2fc3408SPatrick Mooney * If an error was encountered during the search, freeing the chain is 1276*e2fc3408SPatrick Mooney * still required. 1277*e2fc3408SPatrick Mooney */ 1278*e2fc3408SPatrick Mooney dw_entry = dw_chain; 1279*e2fc3408SPatrick Mooney while (dw_entry != NULL) { 1280*e2fc3408SPatrick Mooney struct dirpath_walk *next = dw_entry->dw_next; 1281*e2fc3408SPatrick Mooney 1282*e2fc3408SPatrick Mooney if (err == 0) { 1283*e2fc3408SPatrick Mooney vn_setpath(NULL, dw_entry->dw_pvnode, 1284*e2fc3408SPatrick Mooney dw_entry->dw_vnode, dw_entry->dw_name, 1285*e2fc3408SPatrick Mooney dw_entry->dw_len); 1286*e2fc3408SPatrick Mooney } 1287*e2fc3408SPatrick Mooney 1288*e2fc3408SPatrick Mooney VN_RELE(dw_entry->dw_vnode); 1289*e2fc3408SPatrick Mooney VN_RELE(dw_entry->dw_pvnode); 1290*e2fc3408SPatrick Mooney kmem_free(dw_entry->dw_name, dw_entry->dw_len + 1); 1291*e2fc3408SPatrick Mooney kmem_free(dw_entry, sizeof (*dw_entry)); 1292*e2fc3408SPatrick Mooney dw_entry = next; 1293*e2fc3408SPatrick Mooney } 1294*e2fc3408SPatrick Mooney 12957c478bd9Sstevel@tonic-gate /* 12967c478bd9Sstevel@tonic-gate * If the error was ESTALE and the current directory to look in 12977c478bd9Sstevel@tonic-gate * was the root for this lookup, the root for a mounted file 12987c478bd9Sstevel@tonic-gate * system, or the starting directory for lookups, then 12997c478bd9Sstevel@tonic-gate * return ENOENT instead of ESTALE. In this case, no recovery 13007c478bd9Sstevel@tonic-gate * is possible by the higher level. If ESTALE was returned for 13017c478bd9Sstevel@tonic-gate * some intermediate directory along the path, then recovery 13027c478bd9Sstevel@tonic-gate * is potentially possible and retrying from the higher level 13037c478bd9Sstevel@tonic-gate * will either correct the situation by purging stale cache 13047c478bd9Sstevel@tonic-gate * entries or eventually get back to the point where no recovery 13057c478bd9Sstevel@tonic-gate * is possible. 13067c478bd9Sstevel@tonic-gate */ 13077c478bd9Sstevel@tonic-gate if (err == ESTALE && 13087c478bd9Sstevel@tonic-gate (VN_CMP(vp, vrootp) || (vp->v_flag & VROOT) || vp == startvp)) 13097c478bd9Sstevel@tonic-gate err = ENOENT; 13107c478bd9Sstevel@tonic-gate 13117c478bd9Sstevel@tonic-gate kmem_free(dbuf, dlen); 13127c478bd9Sstevel@tonic-gate VN_RELE(vp); 13137c478bd9Sstevel@tonic-gate if (pvp) 13147c478bd9Sstevel@tonic-gate VN_RELE(pvp); 13157c478bd9Sstevel@tonic-gate pn_free(&pn); 13167c478bd9Sstevel@tonic-gate pn_free(&rpn); 13177c478bd9Sstevel@tonic-gate 13187c478bd9Sstevel@tonic-gate return (err); 13197c478bd9Sstevel@tonic-gate } 13207c478bd9Sstevel@tonic-gate 13217c478bd9Sstevel@tonic-gate /* 1322207983b5SMilan Cermak * The additional flag, LOOKUP_CHECKREAD, is used to enforce artificial 13237c478bd9Sstevel@tonic-gate * constraints in order to be standards compliant. For example, if we have 13247c478bd9Sstevel@tonic-gate * the cached path of '/foo/bar', and '/foo' has permissions 100 (execute 13257c478bd9Sstevel@tonic-gate * only), then we can legitimately look up the path to the current working 13267c478bd9Sstevel@tonic-gate * directory without needing read permission. Existing standards tests, 13277c478bd9Sstevel@tonic-gate * however, assume that we are determining the path by repeatedly looking up 13287c478bd9Sstevel@tonic-gate * "..". We need to keep this behavior in order to maintain backwards 13297c478bd9Sstevel@tonic-gate * compatibility. 13307c478bd9Sstevel@tonic-gate */ 13317c478bd9Sstevel@tonic-gate static int 13327c478bd9Sstevel@tonic-gate vnodetopath_common(vnode_t *vrootp, vnode_t *vp, char *buf, size_t buflen, 13337c478bd9Sstevel@tonic-gate cred_t *cr, int flags) 13347c478bd9Sstevel@tonic-gate { 1335*e2fc3408SPatrick Mooney pathname_t pn; 1336*e2fc3408SPatrick Mooney int ret = 0; 1337*e2fc3408SPatrick Mooney vnode_t *realvp; 1338*e2fc3408SPatrick Mooney boolean_t doclose = B_FALSE; 13397c478bd9Sstevel@tonic-gate 13407c478bd9Sstevel@tonic-gate /* 13417c478bd9Sstevel@tonic-gate * If vrootp is NULL, get the root for curproc. Callers with any other 13427c478bd9Sstevel@tonic-gate * requirements should pass in a different vrootp. 13437c478bd9Sstevel@tonic-gate */ 13447c478bd9Sstevel@tonic-gate if (vrootp == NULL) { 1345*e2fc3408SPatrick Mooney proc_t *p = curproc; 1346*e2fc3408SPatrick Mooney 13477c478bd9Sstevel@tonic-gate mutex_enter(&p->p_lock); 13487c478bd9Sstevel@tonic-gate if ((vrootp = PTOU(p)->u_rdir) == NULL) 13497c478bd9Sstevel@tonic-gate vrootp = rootdir; 13507c478bd9Sstevel@tonic-gate VN_HOLD(vrootp); 13517c478bd9Sstevel@tonic-gate mutex_exit(&p->p_lock); 13527c478bd9Sstevel@tonic-gate } else { 13537c478bd9Sstevel@tonic-gate VN_HOLD(vrootp); 13547c478bd9Sstevel@tonic-gate } 13557c478bd9Sstevel@tonic-gate 13567c478bd9Sstevel@tonic-gate /* 13577c478bd9Sstevel@tonic-gate * This is to get around an annoying artifact of the /proc filesystem, 13587c478bd9Sstevel@tonic-gate * which is the behavior of {cwd/root}. Trying to resolve this path 13597c478bd9Sstevel@tonic-gate * will result in /proc/pid/cwd instead of whatever the real working 13607c478bd9Sstevel@tonic-gate * directory is. We can't rely on VOP_REALVP(), since that will break 13617c478bd9Sstevel@tonic-gate * lofs. The only difference between procfs and lofs is that opening 13627c478bd9Sstevel@tonic-gate * the file will return the underling vnode in the case of procfs. 13637c478bd9Sstevel@tonic-gate */ 1364da6c28aaSamw if (vp->v_type == VDIR && VOP_REALVP(vp, &realvp, NULL) == 0 && 13657c478bd9Sstevel@tonic-gate realvp != vp) { 13667c478bd9Sstevel@tonic-gate VN_HOLD(vp); 1367da6c28aaSamw if (VOP_OPEN(&vp, FREAD, cr, NULL) == 0) 1368*e2fc3408SPatrick Mooney doclose = B_TRUE; 13697c478bd9Sstevel@tonic-gate else 13707c478bd9Sstevel@tonic-gate VN_RELE(vp); 13717c478bd9Sstevel@tonic-gate } 13727c478bd9Sstevel@tonic-gate 13737c478bd9Sstevel@tonic-gate /* 1374*e2fc3408SPatrick Mooney * Check to see if we have a valid cached path in the vnode. 13757c478bd9Sstevel@tonic-gate */ 1376*e2fc3408SPatrick Mooney pn_alloc(&pn); 13777c478bd9Sstevel@tonic-gate mutex_enter(&vp->v_lock); 1378*e2fc3408SPatrick Mooney if (vp->v_path != vn_vpath_empty) { 1379*e2fc3408SPatrick Mooney hrtime_t cached_stamp; 1380*e2fc3408SPatrick Mooney pathname_t rpn; 1381*e2fc3408SPatrick Mooney 1382*e2fc3408SPatrick Mooney cached_stamp = vp->v_path_stamp; 1383ca2c3138Seschrock (void) pn_set(&pn, vp->v_path); 13847c478bd9Sstevel@tonic-gate mutex_exit(&vp->v_lock); 13857c478bd9Sstevel@tonic-gate 13867c478bd9Sstevel@tonic-gate /* We should only cache absolute paths */ 13877c478bd9Sstevel@tonic-gate ASSERT(pn.pn_buf[0] == '/'); 13887c478bd9Sstevel@tonic-gate 1389*e2fc3408SPatrick Mooney pn_alloc(&rpn); 1390*e2fc3408SPatrick Mooney if (vnode_valid_pn(vp, vrootp, &pn, &rpn, flags, cr) == 0) { 1391*e2fc3408SPatrick Mooney /* Return the result, if we're able. */ 1392*e2fc3408SPatrick Mooney if (buflen > rpn.pn_pathlen) { 1393*e2fc3408SPatrick Mooney bcopy(rpn.pn_path, buf, rpn.pn_pathlen + 1); 13947c478bd9Sstevel@tonic-gate } else { 1395*e2fc3408SPatrick Mooney ret = ENAMETOOLONG; 13967c478bd9Sstevel@tonic-gate } 13977c478bd9Sstevel@tonic-gate pn_free(&pn); 13987c478bd9Sstevel@tonic-gate pn_free(&rpn); 1399*e2fc3408SPatrick Mooney goto out; 14007c478bd9Sstevel@tonic-gate } 14017c478bd9Sstevel@tonic-gate pn_free(&rpn); 1402*e2fc3408SPatrick Mooney vn_clearpath(vp, cached_stamp); 14037c478bd9Sstevel@tonic-gate } else { 14047c478bd9Sstevel@tonic-gate mutex_exit(&vp->v_lock); 14057c478bd9Sstevel@tonic-gate } 14067c478bd9Sstevel@tonic-gate pn_free(&pn); 14077c478bd9Sstevel@tonic-gate 14087c478bd9Sstevel@tonic-gate if (vp->v_type != VDIR) { 1409*e2fc3408SPatrick Mooney /* 1410*e2fc3408SPatrick Mooney * The reverse lookup tricks used by dirtopath aren't possible 1411*e2fc3408SPatrick Mooney * for non-directory entries. The best which can be done is 1412*e2fc3408SPatrick Mooney * clearing any stale v_path so later lookups can potentially 1413*e2fc3408SPatrick Mooney * repopulate it with a valid path. 1414*e2fc3408SPatrick Mooney */ 1415f176a0a4SBryan Cantrill ret = ENOENT; 1416f176a0a4SBryan Cantrill } else { 14177b2df5ebSMilan Cermak ret = dirtopath(vrootp, vp, buf, buflen, flags, cr); 1418f176a0a4SBryan Cantrill } 14197c478bd9Sstevel@tonic-gate 1420*e2fc3408SPatrick Mooney out: 14217c478bd9Sstevel@tonic-gate VN_RELE(vrootp); 14227c478bd9Sstevel@tonic-gate if (doclose) { 1423da6c28aaSamw (void) VOP_CLOSE(vp, FREAD, 1, 0, cr, NULL); 14247c478bd9Sstevel@tonic-gate VN_RELE(vp); 14257c478bd9Sstevel@tonic-gate } 14267c478bd9Sstevel@tonic-gate 14277c478bd9Sstevel@tonic-gate return (ret); 14287c478bd9Sstevel@tonic-gate } 14297c478bd9Sstevel@tonic-gate 14307c478bd9Sstevel@tonic-gate int 14317c478bd9Sstevel@tonic-gate vnodetopath(vnode_t *vrootp, vnode_t *vp, char *buf, size_t buflen, cred_t *cr) 14327c478bd9Sstevel@tonic-gate { 14337c478bd9Sstevel@tonic-gate return (vnodetopath_common(vrootp, vp, buf, buflen, cr, 0)); 14347c478bd9Sstevel@tonic-gate } 14357c478bd9Sstevel@tonic-gate 14367c478bd9Sstevel@tonic-gate int 14377c478bd9Sstevel@tonic-gate dogetcwd(char *buf, size_t buflen) 14387c478bd9Sstevel@tonic-gate { 14397c478bd9Sstevel@tonic-gate int ret; 14407c478bd9Sstevel@tonic-gate vnode_t *vp; 14417c478bd9Sstevel@tonic-gate vnode_t *compvp; 14427c478bd9Sstevel@tonic-gate refstr_t *cwd, *oldcwd; 14437c478bd9Sstevel@tonic-gate const char *value; 14447c478bd9Sstevel@tonic-gate pathname_t rpnp, pnp; 14457c478bd9Sstevel@tonic-gate proc_t *p = curproc; 14467c478bd9Sstevel@tonic-gate 14477c478bd9Sstevel@tonic-gate /* 14487c478bd9Sstevel@tonic-gate * Check to see if there is a cached version of the cwd. If so, lookup 14497c478bd9Sstevel@tonic-gate * the cached value and make sure it is the same vnode. 14507c478bd9Sstevel@tonic-gate */ 14517c478bd9Sstevel@tonic-gate mutex_enter(&p->p_lock); 14527c478bd9Sstevel@tonic-gate if ((cwd = PTOU(p)->u_cwd) != NULL) 14537c478bd9Sstevel@tonic-gate refstr_hold(cwd); 14547c478bd9Sstevel@tonic-gate vp = PTOU(p)->u_cdir; 14557c478bd9Sstevel@tonic-gate VN_HOLD(vp); 14567c478bd9Sstevel@tonic-gate mutex_exit(&p->p_lock); 14577c478bd9Sstevel@tonic-gate 14587c478bd9Sstevel@tonic-gate /* 14597c478bd9Sstevel@tonic-gate * Make sure we have permission to access the current directory. 14607c478bd9Sstevel@tonic-gate */ 1461da6c28aaSamw if ((ret = VOP_ACCESS(vp, VEXEC, 0, CRED(), NULL)) != 0) { 14627c478bd9Sstevel@tonic-gate if (cwd != NULL) 14637c478bd9Sstevel@tonic-gate refstr_rele(cwd); 14647c478bd9Sstevel@tonic-gate VN_RELE(vp); 14657c478bd9Sstevel@tonic-gate return (ret); 14667c478bd9Sstevel@tonic-gate } 14677c478bd9Sstevel@tonic-gate 14687c478bd9Sstevel@tonic-gate if (cwd) { 14697c478bd9Sstevel@tonic-gate value = refstr_value(cwd); 14707c478bd9Sstevel@tonic-gate if ((ret = pn_get((char *)value, UIO_SYSSPACE, &pnp)) != 0) { 14717c478bd9Sstevel@tonic-gate refstr_rele(cwd); 14727c478bd9Sstevel@tonic-gate VN_RELE(vp); 14737c478bd9Sstevel@tonic-gate return (ret); 14747c478bd9Sstevel@tonic-gate } 14757c478bd9Sstevel@tonic-gate 14767c478bd9Sstevel@tonic-gate pn_alloc(&rpnp); 14777c478bd9Sstevel@tonic-gate 14787c478bd9Sstevel@tonic-gate if (lookuppn(&pnp, &rpnp, NO_FOLLOW, NULL, &compvp) == 0) { 14797c478bd9Sstevel@tonic-gate 14807c478bd9Sstevel@tonic-gate if (VN_CMP(vp, compvp) && 14817c478bd9Sstevel@tonic-gate strcmp(value, rpnp.pn_path) == 0) { 14827c478bd9Sstevel@tonic-gate VN_RELE(compvp); 14837c478bd9Sstevel@tonic-gate VN_RELE(vp); 14847c478bd9Sstevel@tonic-gate pn_free(&pnp); 14857c478bd9Sstevel@tonic-gate pn_free(&rpnp); 14867c478bd9Sstevel@tonic-gate if (strlen(value) + 1 > buflen) { 14877c478bd9Sstevel@tonic-gate refstr_rele(cwd); 14887c478bd9Sstevel@tonic-gate return (ENAMETOOLONG); 14897c478bd9Sstevel@tonic-gate } 14907c478bd9Sstevel@tonic-gate bcopy(value, buf, strlen(value) + 1); 14917c478bd9Sstevel@tonic-gate refstr_rele(cwd); 14927c478bd9Sstevel@tonic-gate return (0); 14937c478bd9Sstevel@tonic-gate } 14947c478bd9Sstevel@tonic-gate 14957c478bd9Sstevel@tonic-gate VN_RELE(compvp); 14967c478bd9Sstevel@tonic-gate } 14977c478bd9Sstevel@tonic-gate 14987c478bd9Sstevel@tonic-gate pn_free(&rpnp); 14997c478bd9Sstevel@tonic-gate pn_free(&pnp); 15007c478bd9Sstevel@tonic-gate 15017c478bd9Sstevel@tonic-gate refstr_rele(cwd); 15027c478bd9Sstevel@tonic-gate } 15037c478bd9Sstevel@tonic-gate 15047c478bd9Sstevel@tonic-gate ret = vnodetopath_common(NULL, vp, buf, buflen, CRED(), 15057c478bd9Sstevel@tonic-gate LOOKUP_CHECKREAD); 15067c478bd9Sstevel@tonic-gate 15077c478bd9Sstevel@tonic-gate VN_RELE(vp); 15087c478bd9Sstevel@tonic-gate 15097c478bd9Sstevel@tonic-gate /* 15107c478bd9Sstevel@tonic-gate * Store the new cwd and replace the existing cached copy. 15117c478bd9Sstevel@tonic-gate */ 15127c478bd9Sstevel@tonic-gate if (ret == 0) 15137c478bd9Sstevel@tonic-gate cwd = refstr_alloc(buf); 15147c478bd9Sstevel@tonic-gate else 15157c478bd9Sstevel@tonic-gate cwd = NULL; 15167c478bd9Sstevel@tonic-gate 15177c478bd9Sstevel@tonic-gate mutex_enter(&p->p_lock); 15187c478bd9Sstevel@tonic-gate oldcwd = PTOU(p)->u_cwd; 15197c478bd9Sstevel@tonic-gate PTOU(p)->u_cwd = cwd; 15207c478bd9Sstevel@tonic-gate mutex_exit(&p->p_lock); 15217c478bd9Sstevel@tonic-gate 15227c478bd9Sstevel@tonic-gate if (oldcwd) 15237c478bd9Sstevel@tonic-gate refstr_rele(oldcwd); 15247c478bd9Sstevel@tonic-gate 15257c478bd9Sstevel@tonic-gate return (ret); 15267c478bd9Sstevel@tonic-gate } 1527