1*a90cf9f2SGordon Ross /*
2*a90cf9f2SGordon Ross  * CDDL HEADER START
3*a90cf9f2SGordon Ross  *
4*a90cf9f2SGordon Ross  * The contents of this file are subject to the terms of the
5*a90cf9f2SGordon Ross  * Common Development and Distribution License (the "License").
6*a90cf9f2SGordon Ross  * You may not use this file except in compliance with the License.
7*a90cf9f2SGordon Ross  *
8*a90cf9f2SGordon Ross  * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
9*a90cf9f2SGordon Ross  * or http://www.opensolaris.org/os/licensing.
10*a90cf9f2SGordon Ross  * See the License for the specific language governing permissions
11*a90cf9f2SGordon Ross  * and limitations under the License.
12*a90cf9f2SGordon Ross  *
13*a90cf9f2SGordon Ross  * When distributing Covered Code, include this CDDL HEADER in each
14*a90cf9f2SGordon Ross  * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
15*a90cf9f2SGordon Ross  * If applicable, add the following below this CDDL HEADER, with the
16*a90cf9f2SGordon Ross  * fields enclosed by brackets "[]" replaced with your own identifying
17*a90cf9f2SGordon Ross  * information: Portions Copyright [yyyy] [name of copyright owner]
18*a90cf9f2SGordon Ross  *
19*a90cf9f2SGordon Ross  * CDDL HEADER END
20*a90cf9f2SGordon Ross  */
21*a90cf9f2SGordon Ross 
22*a90cf9f2SGordon Ross /*
23*a90cf9f2SGordon Ross  * Copyright (c) 2007, 2010, Oracle and/or its affiliates. All rights reserved.
24*a90cf9f2SGordon Ross  * Copyright 2014 Nexenta Systems, Inc.  All rights reserved.
25*a90cf9f2SGordon Ross  */
26*a90cf9f2SGordon Ross 
27*a90cf9f2SGordon Ross /*
28*a90cf9f2SGordon Ross  * Dispatch function for SMB2_QUERY_INFO
29*a90cf9f2SGordon Ross  * Similar to smb_nt_transact_security.c
30*a90cf9f2SGordon Ross  */
31*a90cf9f2SGordon Ross 
32*a90cf9f2SGordon Ross #include <smbsrv/smb2_kproto.h>
33*a90cf9f2SGordon Ross #include <smbsrv/smb_fsops.h>
34*a90cf9f2SGordon Ross #include <smbsrv/ntifs.h>
35*a90cf9f2SGordon Ross 
36*a90cf9f2SGordon Ross uint32_t
smb2_qinfo_sec(smb_request_t * sr,smb_queryinfo_t * qi)37*a90cf9f2SGordon Ross smb2_qinfo_sec(smb_request_t *sr, smb_queryinfo_t *qi)
38*a90cf9f2SGordon Ross {
39*a90cf9f2SGordon Ross 	smb_sd_t sd;
40*a90cf9f2SGordon Ross 	uint32_t secinfo = qi->qi_AddlInfo;
41*a90cf9f2SGordon Ross 	uint32_t sdlen;
42*a90cf9f2SGordon Ross 	uint32_t status;
43*a90cf9f2SGordon Ross 
44*a90cf9f2SGordon Ross 	/*
45*a90cf9f2SGordon Ross 	 * secinfo & ...
46*a90cf9f2SGordon Ross 	 * OWNER_SECURITY_INFORMATION,
47*a90cf9f2SGordon Ross 	 * GROUP_SECURITY_INFORMATION,
48*a90cf9f2SGordon Ross 	 * DACL_SECURITY_INFORMATION, ...
49*a90cf9f2SGordon Ross 	 */
50*a90cf9f2SGordon Ross 
51*a90cf9f2SGordon Ross 	if ((sr->fid_ofile->f_node == NULL) ||
52*a90cf9f2SGordon Ross 	    (sr->fid_ofile->f_ftype != SMB_FTYPE_DISK))
53*a90cf9f2SGordon Ross 		return (NT_STATUS_INVALID_PARAMETER);
54*a90cf9f2SGordon Ross 
55*a90cf9f2SGordon Ross 	if (sr->tid_tree->t_acltype != ACE_T) {
56*a90cf9f2SGordon Ross 		/*
57*a90cf9f2SGordon Ross 		 * If target filesystem doesn't support ACE_T acls then
58*a90cf9f2SGordon Ross 		 * don't process SACL
59*a90cf9f2SGordon Ross 		 */
60*a90cf9f2SGordon Ross 		secinfo &= ~SMB_SACL_SECINFO;
61*a90cf9f2SGordon Ross 	}
62*a90cf9f2SGordon Ross 
63*a90cf9f2SGordon Ross 	status = smb_sd_read(sr, &sd, secinfo);
64*a90cf9f2SGordon Ross 	if (status != NT_STATUS_SUCCESS)
65*a90cf9f2SGordon Ross 		return (status);
66*a90cf9f2SGordon Ross 
67*a90cf9f2SGordon Ross 	sdlen = smb_sd_len(&sd, secinfo);
68*a90cf9f2SGordon Ross 	if (sdlen == 0) {
69*a90cf9f2SGordon Ross 		status = NT_STATUS_INVALID_SECURITY_DESCR;
70*a90cf9f2SGordon Ross 		goto out;
71*a90cf9f2SGordon Ross 	}
72*a90cf9f2SGordon Ross 
73*a90cf9f2SGordon Ross 	if (sdlen > sr->raw_data.max_bytes) {
74*a90cf9f2SGordon Ross 		/*
75*a90cf9f2SGordon Ross 		 * The maximum data return count specified by the
76*a90cf9f2SGordon Ross 		 * client is not big enough to hold the security
77*a90cf9f2SGordon Ross 		 * descriptor.  Return the special error that
78*a90cf9f2SGordon Ross 		 * tells the client how much room they need.
79*a90cf9f2SGordon Ross 		 * Error data is the required size.
80*a90cf9f2SGordon Ross 		 */
81*a90cf9f2SGordon Ross 		MBC_FLUSH(&sr->raw_data);
82*a90cf9f2SGordon Ross 		sr->raw_data.max_bytes = 4;
83*a90cf9f2SGordon Ross 		(void) smb_mbc_encodef(&sr->raw_data, "l", sdlen);
84*a90cf9f2SGordon Ross 		status = NT_STATUS_BUFFER_TOO_SMALL;
85*a90cf9f2SGordon Ross 		goto out;
86*a90cf9f2SGordon Ross 	}
87*a90cf9f2SGordon Ross 
88*a90cf9f2SGordon Ross 	smb_encode_sd(&sr->raw_data, &sd, secinfo);
89*a90cf9f2SGordon Ross 	status = 0;
90*a90cf9f2SGordon Ross 
91*a90cf9f2SGordon Ross out:
92*a90cf9f2SGordon Ross 	smb_sd_term(&sd);
93*a90cf9f2SGordon Ross 	return (status);
94*a90cf9f2SGordon Ross }
95