xref: /illumos-gate/usr/src/uts/common/nfs/export.h (revision ffdb1639)
1 /*
2  * CDDL HEADER START
3  *
4  * The contents of this file are subject to the terms of the
5  * Common Development and Distribution License (the "License").
6  * You may not use this file except in compliance with the License.
7  *
8  * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
9  * or http://www.opensolaris.org/os/licensing.
10  * See the License for the specific language governing permissions
11  * and limitations under the License.
12  *
13  * When distributing Covered Code, include this CDDL HEADER in each
14  * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
15  * If applicable, add the following below this CDDL HEADER, with the
16  * fields enclosed by brackets "[]" replaced with your own identifying
17  * information: Portions Copyright [yyyy] [name of copyright owner]
18  *
19  * CDDL HEADER END
20  */
21 /*
22  * Copyright 2010 Sun Microsystems, Inc.  All rights reserved.
23  * Use is subject to license terms.
24  */
25 
26 /*	Copyright (c) 1984, 1986, 1987, 1988, 1989 AT&T	*/
27 /*	  All Rights Reserved  	*/
28 
29 #ifndef	_NFS_EXPORT_H
30 #define	_NFS_EXPORT_H
31 
32 #include <nfs/nfs_sec.h>
33 #include <nfs/auth.h>
34 #include <sys/vnode.h>
35 #include <nfs/nfs4.h>
36 #include <sys/kiconv.h>
37 
38 #ifdef	__cplusplus
39 extern "C" {
40 #endif
41 
42 /*
43  * nfs pseudo flavor number is owned by IANA. Need to make sure the
44  * Solaris specific NFS_FLAVOR_NOMAP number will not overlap with any
45  * new IANA defined pseudo flavor numbers. The chance for the overlap
46  * is very small since the growth of new flavor numbers is expected
47  * to be limited.
48  */
49 #define	NFS_FLAVOR_NOMAP	999999	/* no nfs flavor mapping */
50 
51 /*
52  * As duplicate flavors can be passed into exportfs in the arguments, we
53  * allocate a cleaned up array with non duplicate flavors on the stack.
54  * So we need to know how much to allocate.
55  */
56 #define	MAX_FLAVORS		6	/* none, sys, dh, krb5, krb5i krb5p */
57 
58 /*
59  * Note: exported_lock is currently used to ensure the integrity of
60  * the secinfo fields.
61  */
62 struct secinfo {
63 	seconfig_t	s_secinfo;	/* /etc/nfssec.conf entry */
64 	unsigned int	s_flags;	/* flags (see below) */
65 	int32_t		s_refcnt;	/* reference count for tracking */
66 					/* how many children (self included) */
67 					/* use this flavor. */
68 	int 		s_window;	/* window */
69 	uint_t		s_rootid;	/* UID to use for authorized roots */
70 	int		s_rootcnt;	/* count of root names */
71 	caddr_t		*s_rootnames;	/* array of root names */
72 					/* they are strings for AUTH_DES and */
73 					/* rpc_gss_principal_t for RPCSEC_GSS */
74 };
75 
76 #ifdef _SYSCALL32
77 struct secinfo32 {
78 	seconfig32_t	s_secinfo;	/* /etc/nfssec.conf entry */
79 	uint32_t	s_flags;	/* flags (see below) */
80 	int32_t		s_refcnt;	/* reference count for tracking */
81 					/* how many children (self included) */
82 					/* use this flavor. */
83 	int32_t 	s_window;	/* window */
84 	uint32_t	s_rootid;	/* UID to use for authorized roots */
85 	int32_t		s_rootcnt;	/* count of root names */
86 	caddr32_t	s_rootnames;	/* array of root names */
87 					/* they are strings for AUTH_DES and */
88 					/* rpc_gss_principal_t for RPCSEC_GSS */
89 };
90 #endif /* _SYSCALL32 */
91 
92 /*
93  * security negotiation related
94  */
95 
96 #define	SEC_QUERY	0x01	/* query sec modes */
97 
98 struct sec_ol {
99 	int		sec_flags;	/* security nego flags */
100 	uint_t		sec_index;	/* index into sec flavor array */
101 };
102 
103 /*
104  * Per-mode flags (secinfo.s_flags)
105  */
106 #define	M_RO		0x01	/* exported ro to all */
107 #define	M_ROL		0x02	/* exported ro to all listed */
108 #define	M_RW		0x04	/* exported rw to all */
109 #define	M_RWL		0x08	/* exported ro to all listed */
110 #define	M_ROOT		0x10	/* root list is defined */
111 #define	M_4SEC_EXPORTED	0x20	/* this is an explicitly shared flavor */
112 #define	M_NONE		0x40	/* none list is defined */
113 
114 /* invalid secinfo reference count */
115 #define	SEC_REF_INVALID(p) ((p)->s_refcnt < 1)
116 
117 /* last secinfo reference */
118 #define	SEC_REF_LAST(p) ((p)->s_refcnt == 1)
119 
120 /* sec flavor explicitly shared for the exported node */
121 #define	SEC_REF_EXPORTED(p) ((p)->s_flags & M_4SEC_EXPORTED)
122 
123 /* the only reference count left is for referring itself */
124 #define	SEC_REF_SELF(p) (SEC_REF_LAST(p) && SEC_REF_EXPORTED(p))
125 
126 /*
127  * The export information passed to exportfs() (Version 2)
128  */
129 #define	EX_CURRENT_VERSION 2	/* current version of exportdata struct */
130 
131 struct exportdata {
132 	int		ex_version;	/* structure version */
133 	char		*ex_path;	/* exported path */
134 	size_t		ex_pathlen;	/* path length */
135 	int		ex_flags;	/* flags */
136 	unsigned int	ex_anon;	/* uid for unauthenticated requests */
137 	int		ex_seccnt;	/* count of security modes */
138 	struct secinfo	*ex_secinfo;	/* security mode info */
139 	char		*ex_index;	/* index file for public filesystem */
140 	char		*ex_log_buffer;	/* path to logging buffer file */
141 	size_t		ex_log_bufferlen;	/* buffer file path len */
142 	char		*ex_tag;	/* tag used to identify log config */
143 	size_t		ex_taglen;	/* tag length */
144 };
145 
146 #ifdef _SYSCALL32
147 struct exportdata32 {
148 	int32_t		ex_version;	/* structure version */
149 	caddr32_t	ex_path;	/* exported path */
150 	int32_t		ex_pathlen;	/* path length */
151 	int32_t		ex_flags;	/* flags */
152 	uint32_t	ex_anon;	/* uid for unauthenticated requests */
153 	int32_t		ex_seccnt;	/* count of security modes */
154 	caddr32_t	ex_secinfo;	/* security mode info */
155 	caddr32_t	ex_index;	/* index file for public filesystem */
156 	caddr32_t	ex_log_buffer;	/* path to logging buffer file */
157 	int32_t		ex_log_bufferlen;	/* buffer file path len */
158 	caddr32_t	ex_tag;		/* tag used to identify log config */
159 	int32_t		ex_taglen;	/* tag length */
160 };
161 #endif /* _SYSCALL32 */
162 
163 /*
164  * exported vfs flags.
165  */
166 
167 #define	EX_NOSUID	0x01	/* exported with unsetable set[ug]ids */
168 #define	EX_ACLOK	0x02	/* exported with maximal access if acl exists */
169 #define	EX_PUBLIC	0x04	/* exported with public filehandle */
170 #define	EX_NOSUB	0x08	/* no nfs_getfh or MCL below export point */
171 #define	EX_INDEX	0x10	/* exported with index file specified */
172 #define	EX_LOG		0x20	/* logging enabled */
173 #define	EX_LOG_ALLOPS	0x40	/* logging of all RPC operations enabled */
174 				/* by default only operations which affect */
175 				/* transaction logging are enabled */
176 #define	EX_PSEUDO	0x80	/* pseudo filesystem export */
177 #ifdef VOLATILE_FH_TEST
178 #define	EX_VOLFH	0x100	/* XXX nfsv4 fh may expire anytime */
179 #define	EX_VOLRNM	0x200	/* XXX nfsv4 fh expire at rename */
180 #define	EX_VOLMIG	0x400	/* XXX nfsv4 fh expire at migration */
181 #define	EX_NOEXPOPEN	0x800	/* XXX nfsv4 fh no expire with open */
182 #endif /* VOLATILE_FH_TEST */
183 
184 #define	EX_CHARMAP	0x1000	/* NFS may need a character set conversion */
185 #define	EX_NOACLFAB	0x2000	/* If set, NFSv2 and v3 servers doesn't */
186 				/* fabricate ACL for VOP_GETSECATTR OTW call */
187 
188 #ifdef	_KERNEL
189 
190 #define	RPC_IDEMPOTENT	0x1	/* idempotent or not */
191 /*
192  * Be very careful about which NFS procedures get the RPC_ALLOWANON bit.
193  * Right now, it this bit is on, we ignore the results of per NFS request
194  * access control.
195  */
196 #define	RPC_ALLOWANON	0x2	/* allow anonymous access */
197 #define	RPC_MAPRESP	0x4	/* use mapped response buffer */
198 #define	RPC_AVOIDWORK	0x8	/* do work avoidance for dups */
199 #define	RPC_PUBLICFH_OK	0x10	/* allow use of public filehandle */
200 
201 /*
202  * RPC_ALL is an or of all above bits to be used with "don't care"
203  * nfsv4 ops. The flags of an nfsv4 request is the bit-AND of the
204  * per-op flags.
205  */
206 #define	RPC_ALL	(RPC_IDEMPOTENT|RPC_ALLOWANON|RPC_AVOIDWORK|RPC_PUBLICFH_OK)
207 
208 
209 #ifdef VOLATILE_FH_TEST
210 struct ex_vol_rename {
211 	nfs_fh4_fmt_t vrn_fh_fmt;
212 	struct ex_vol_rename *vrn_next;
213 };
214 #endif /* VOLATILE_FH_TEST */
215 
216 /*
217  * An auth cache entry can exist in 4 active states, with the inactive
218  * state being indicated by no entry in the cache.
219  *
220  * A FRESH entry is one which is either new or has been refreshed at
221  * least once.
222  *
223  * A STALE entry is one which has been detected to be too old. The
224  * transistion from FRESH to STALE prevents multiple threads from
225  * submitting refresh requests.
226  *
227  * A REFRESHING entry is one which is actively engaging the user land
228  * mountd code to re-authenticate the cache entry.
229  *
230  * An INVALID entry was one which was either STALE or REFRESHING
231  * and was deleted out of the encapsulating exi. Since we can't
232  * delete it yet, we mark it as INVALID, which lets the refreshq
233  * know not to work on it.
234  *
235  * Note that the auth state of the entry is always valid, even if the
236  * entry is STALE. Just as you can eat stale bread, you can consume
237  * a stale cache entry. The only time the contents change could be
238  * during the transistion from REFRESHING to FRESH.
239  */
240 typedef enum auth_state {
241 	NFS_AUTH_FRESH,
242 	NFS_AUTH_STALE,
243 	NFS_AUTH_REFRESHING,
244 	NFS_AUTH_INVALID
245 } auth_state_t;
246 
247 /*
248  * An authorization cache entry
249  *
250  * Either the state in auth_state will protect the
251  * contents or auth_lock must be held.
252  */
253 struct auth_cache {
254 	struct netbuf		auth_addr;
255 	int			auth_flavor;
256 	int			auth_access;
257 	time_t			auth_time;
258 	time_t			auth_freshness;
259 	auth_state_t		auth_state;
260 	char			*auth_netid;
261 	kmutex_t		auth_lock;
262 	struct auth_cache	*auth_next;
263 };
264 
265 #define	AUTH_TABLESIZE	32
266 
267 /*
268  * Structure containing log file meta-data.
269  */
270 struct log_file {
271 	unsigned int	lf_flags;	/* flags (see below) */
272 	int		lf_writers;	/* outstanding writers */
273 	int		lf_refcnt;	/* references to this struct */
274 	caddr_t		lf_path;	/* buffer file location */
275 	vnode_t		*lf_vp;		/* vnode for the buffer file */
276 	kmutex_t	lf_lock;
277 	kcondvar_t	lf_cv_waiters;
278 };
279 
280 /*
281  * log_file and log_buffer flags.
282  */
283 #define	L_WAITING	0x01		/* flush of in-core data to stable */
284 					/* storage in progress */
285 #define	L_PRINTED	0x02		/* error message printed to console */
286 #define	L_ERROR		0x04		/* error condition detected */
287 
288 /*
289  * The logging buffer information.
290  * This structure may be shared by multiple exportinfo structures,
291  * if they share the same buffer file.
292  * This structure contains the basic information about the buffer, such
293  * as it's location in the filesystem.
294  *
295  * 'lb_lock' protects all the fields in this structure except for 'lb_path',
296  * and 'lb_next'.
297  * 'lb_path' is a write-once/read-many field which needs no locking, it is
298  * set before the structure is linked to any exportinfo structure.
299  * 'lb_next' is protected by the log_buffer_list_lock.
300  */
301 struct log_buffer {
302 	unsigned int	lb_flags;	/* L_ONLIST set? */
303 	int		lb_refcnt;	/* references to this struct */
304 	unsigned int	lb_rec_id;	/* used to generate unique id */
305 	caddr_t		lb_path;	/* buffer file pathname */
306 	struct log_file	*lb_logfile;	/* points to log_file structure */
307 	kmutex_t	lb_lock;
308 	struct log_buffer	*lb_next;
309 	kcondvar_t	lb_cv_waiters;
310 	caddr_t		lb_records;	/* linked list of records to write */
311 	int		lb_num_recs;	/* # of records to write */
312 	ssize_t		lb_size_queued; /* number of bytes queued for write */
313 };
314 
315 #define	LOG_BUFFER_HOLD(lbp)	{ \
316 	mutex_enter(&(lbp)->lb_lock); \
317 	(lbp)->lb_refcnt++; \
318 	mutex_exit(&(lbp)->lb_lock); \
319 }
320 
321 #define	LOG_BUFFER_RELE(lbp)	{ \
322 	log_buffer_rele(lbp); \
323 }
324 
325 /*
326  * Structure for character set conversion mapping based on client address.
327  */
328 struct charset_cache {
329 	struct charset_cache *next;
330 	kiconv_t	inbound;
331 	kiconv_t	outbound;
332 	struct sockaddr	client_addr;
333 };
334 
335 /* Forward declarations */
336 struct exportinfo;
337 struct exp_visible;
338 struct svc_req;
339 
340 /*
341  * Treenodes are used to build tree representing every node which is part
342  * of nfs server pseudo namespace. They are connected with both exportinfo
343  * and exp_visible struct. They were introduced to avoid lookup of ".."
344  * in the underlying file system during unshare, which was failing if the
345  * file system was forcibly unmounted or if the directory was removed.
346  * One exp_visible_t can be shared via several treenode_t, i.e.
347  * different tree_vis can point to the same exp_visible_t.
348  * This will happen if some directory is on two different shared paths:
349  * E.g. after share /tmp/a/b1 and share /tmp/a/b2 there will be two treenodes
350  * corresponding to /tmp/a and both will have same value in tree_vis.
351  *
352  *
353  *
354  *     NEW DATA STRUCT         ORIGINAL DATA STRUCT
355  *
356  * ns_root +---+               +----------+
357  *         | / |               |PSEUDO EXP|-->+---+   +---+   +---+
358  *         +---+---------  ----+----------+   | a |-->| k |-->| b |
359  *          /\                                +---+   +---+   +---+
360  *         /  \                                .       .       .
361  *     +---+...\.........  .....................       .       .
362  *    *| a |    \              +----------+            .       .
363  *     +---+-----\-------  ----|REAL EXP a|            .       .
364  *       /        \            +----------+            .       .
365  *      /        +===+...  .............................       .
366  *     /        *| k |         +----------+                    .
367  *    /          +===+---  ----|REAL EXP k|                    .
368  *   /                         +----------+                    .
369  *  +===+................  .....................................
370  * *| b |                      +----------+
371  *  +===+----------------  ----|REAL EXP b|-->+---+
372  *     \                       +----------+   | d |
373  *     +===+.............  ...................+---+
374  *     | d |                   +----------+
375  *     +===+-------------  ----|PSEUDO EXP|-->+---+   +---+
376  *     /                       +----------+   | e |-->| g |
377  * +---+.................  ...................+---+   +---+
378  * | e |                                              .
379  * +---+                                              .
380  *    \                                               .
381  *    +---+..............  ............................
382  *   *| g |                    +----------+
383  *    +---+--------------  ----|REAL EXP g|
384  *                             +----------+
385  *
386  *
387  *
388  * +===+               +---+                    +---+
389  * | b |..mountpoint   | e |..directory/file   *| a |..node is shared
390  * +===+  (VROOT)      +---+                    +---+
391  *
392  *
393  * Bi-directional interconnect:
394  * treenode_t::tree_exi ---------  exportinfo_t::exi_tree
395  * One-way direction connection:
396  * treenode_t::tree_vis .........> exp_visible_t
397  */
398 /* Access to treenode_t is under protection of exported_lock RW_LOCK */
399 typedef struct treenode {
400 	/* support for generic n-ary trees */
401 	struct treenode *tree_parent;
402 	struct treenode *tree_child_first;
403 	struct treenode *tree_sibling; /* next sibling */
404 	/* private, nfs specific part */
405 	struct exportinfo  *tree_exi;
406 	struct exp_visible *tree_vis;
407 } treenode_t;
408 
409 /*
410  * TREE_ROOT checks if the node corresponds to a filesystem root
411  * TREE_EXPORTED checks if the node is explicitly shared
412  */
413 
414 #define	TREE_ROOT(t) \
415 	((t)->tree_exi && (t)->tree_exi->exi_vp->v_flag & VROOT)
416 
417 #define	TREE_EXPORTED(t) \
418 	((t)->tree_exi && !PSEUDO((t)->tree_exi))
419 
420 /* Root of nfs pseudo namespace */
421 extern treenode_t *ns_root;
422 
423 #define	EXPTABLESIZE	16
424 
425 /*
426  * A node associated with an export entry on the
427  * list of exported filesystems.
428  *
429  * exi_count+exi_lock protects an individual exportinfo from being freed
430  * when in use.
431  *
432  * You must have the writer lock on exported_lock to add/delete an exportinfo
433  * structure to/from the list.
434  *
435  * exi_volatile_dev maps to VSW_VOLATILEDEV.  It means that the
436  * underlying fs devno can change on each mount.  When set, the server
437  * should not use va_fsid for a GETATTR(FATTR4_FSID) reply.  It must
438  * use exi_fsid because it is guaranteed to be persistent.  This isn't
439  * in any way related to NFS4 volatile filehandles.
440  */
441 struct exportinfo {
442 	struct exportdata	exi_export;
443 	fsid_t			exi_fsid;
444 	struct fid		exi_fid;
445 	struct exportinfo	*exi_hash;
446 	struct treenode		*exi_tree;
447 	fhandle_t		exi_fh;
448 	krwlock_t		exi_cache_lock;
449 	kmutex_t		exi_lock;
450 	uint_t			exi_count;
451 	vnode_t			*exi_vp;
452 	vnode_t			*exi_dvp;
453 	struct auth_cache	*exi_cache[AUTH_TABLESIZE];
454 	struct log_buffer	*exi_logbuffer;
455 	struct exp_visible	*exi_visible;
456 	struct charset_cache	*exi_charset;
457 	unsigned		exi_volatile_dev:1;
458 	unsigned		exi_moved:1;
459 #ifdef VOLATILE_FH_TEST
460 	uint32_t		exi_volatile_id;
461 	struct ex_vol_rename	*exi_vol_rename;
462 	kmutex_t		exi_vol_rename_lock;
463 #endif /* VOLATILE_FH_TEST */
464 };
465 
466 typedef struct exportinfo exportinfo_t;
467 typedef struct exportdata exportdata_t;
468 typedef struct secinfo secinfo_t;
469 
470 /*
471  * exp_visible is a visible list per filesystem. It is for filesystems
472  * that may need a limited view of its contents. A pseudo export and
473  * a real export at the mount point (VROOT) which has a subtree shared
474  * has a visible list.
475  *
476  * The exi_visible field is NULL for normal, non=pseudo filesystems
477  * which do not have any subtree exported. If the field is non-null,
478  * it points to a list of visible entries, identified by vis_fid and/or
479  * vis_ino. The presence of a "visible" list means that if this export
480  * can only have a limited view, it can only view the entries in the
481  * exp_visible list. The directories in the fid list comprise paths that
482  * lead to exported directories.
483  *
484  * The vis_count field records the number of paths in this filesystem
485  * that use this directory. The vis_exported field is non-zero if the
486  * entry is an exported directory (leaf node).
487  *
488  * exp_visible itself is not reference counted. Each exp_visible is
489  * referenced twice:
490  * 1) from treenode::tree_vis
491  * 2) linked from exportinfo::exi_visible
492  * The 'owner' of exp_visible is the exportinfo structure. exp_visible should
493  * be always freed only from exportinfo_t, never from treenode::tree_vis.
494  */
495 
496 struct exp_visible {
497 	vnode_t			*vis_vp;
498 	fid_t			vis_fid;
499 	u_longlong_t		vis_ino;
500 	int			vis_count;
501 	int			vis_exported;
502 	struct exp_visible	*vis_next;
503 	struct secinfo		*vis_secinfo;
504 	int			vis_seccnt;
505 };
506 typedef struct exp_visible exp_visible_t;
507 
508 #define	PSEUDO(exi)	((exi)->exi_export.ex_flags & EX_PSEUDO)
509 
510 #define	EQFSID(fsidp1, fsidp2)	\
511 	(((fsidp1)->val[0] == (fsidp2)->val[0]) && \
512 	    ((fsidp1)->val[1] == (fsidp2)->val[1]))
513 
514 #define	EQFID(fidp1, fidp2)	\
515 	((fidp1)->fid_len == (fidp2)->fid_len && \
516 	    bcmp((char *)(fidp1)->fid_data, (char *)(fidp2)->fid_data, \
517 	    (uint_t)(fidp1)->fid_len) == 0)
518 
519 #define	exportmatch(exi, fsid, fid)	\
520 	(EQFSID(&(exi)->exi_fsid, (fsid)) && EQFID(&(exi)->exi_fid, (fid)))
521 
522 /*
523  * Returns true iff exported filesystem is read-only to the given host.
524  *
525  * Note:  this macro should be as fast as possible since it's called
526  * on each NFS modification request.
527  */
528 #define	rdonly(exi, req)  (nfsauth_access(exi, req) & NFSAUTH_RO)
529 #define	rdonly4(exi, vp, req)  \
530 	(vn_is_readonly(vp) || \
531 	    (nfsauth4_access(exi, vp, req) & (NFSAUTH_RO | NFSAUTH_LIMITED)))
532 
533 extern int	nfsauth4_access(struct exportinfo *, vnode_t *,
534 				struct svc_req *);
535 extern int	nfsauth4_secinfo_access(struct exportinfo *,
536 				struct svc_req *, int, int);
537 extern int	nfs_fhhash(fsid_t *, fid_t *);
538 extern int	nfs_fhbcmp(char *, char *, int);
539 extern int	nfs_exportinit(void);
540 extern void	nfs_exportfini(void);
541 extern int	chk_clnt_sec(struct exportinfo *, struct svc_req *req);
542 extern int	makefh(fhandle_t *, struct vnode *, struct exportinfo *);
543 extern int	makefh_ol(fhandle_t *, struct exportinfo *, uint_t);
544 extern int	makefh3(nfs_fh3 *, struct vnode *, struct exportinfo *);
545 extern int	makefh3_ol(nfs_fh3 *, struct exportinfo *, uint_t);
546 extern vnode_t *nfs_fhtovp(fhandle_t *, struct exportinfo *);
547 extern vnode_t *nfs3_fhtovp(nfs_fh3 *, struct exportinfo *);
548 extern vnode_t *lm_fhtovp(fhandle_t *fh);
549 extern vnode_t *lm_nfs3_fhtovp(nfs_fh3 *fh);
550 extern struct	exportinfo *checkexport(fsid_t *, struct fid *);
551 extern struct	exportinfo *checkexport4(fsid_t *, struct fid *, vnode_t *vp);
552 extern void	exi_hold(struct exportinfo *);
553 extern void	exi_rele(struct exportinfo *);
554 extern struct exportinfo *nfs_vptoexi(vnode_t *, vnode_t *, cred_t *, int *,
555     int *, bool_t);
556 extern int	nfs_check_vpexi(vnode_t *, vnode_t *, cred_t *,
557 			struct exportinfo **);
558 extern void	export_link(struct exportinfo *);
559 extern int	export_unlink(fsid_t *, fid_t *, vnode_t *,
560 			struct exportinfo **);
561 extern vnode_t *untraverse(vnode_t *);
562 extern int	vn_is_nfs_reparse(vnode_t *, cred_t *);
563 extern int	client_is_downrev(struct svc_req *);
564 extern char    *build_symlink(vnode_t *, cred_t *, size_t *);
565 
566 /*
567  * Functions that handle the NFSv4 server namespace
568  */
569 extern exportinfo_t *vis2exi(treenode_t *);
570 extern int	treeclimb_export(struct exportinfo *);
571 extern void	treeclimb_unexport(struct exportinfo *);
572 extern int	nfs_visible(struct exportinfo *, vnode_t *, int *);
573 extern int	nfs_visible_inode(struct exportinfo *, ino64_t, int *);
574 extern int	has_visible(struct exportinfo *, vnode_t *);
575 extern void	free_visible(struct exp_visible *);
576 extern int	nfs_exported(struct exportinfo *, vnode_t *);
577 extern int	pseudo_exportfs(vnode_t *, struct exp_visible *,
578     struct exportdata *, struct exportinfo **);
579 extern int	vop_fid_pseudo(vnode_t *, fid_t *fidp);
580 extern int	nfs4_vget_pseudo(struct exportinfo *, vnode_t **, fid_t *);
581 /*
582  * Functions that handle the NFSv4 server namespace security flavors
583  * information.
584  */
585 extern void	srv_secinfo_exp2pseu(struct exportdata *, struct exportdata *);
586 extern void	srv_secinfo_list_free(struct secinfo *, int);
587 
588 /*
589  * "public" and default (root) location for public filehandle
590  */
591 extern struct exportinfo *exi_public, *exi_root;
592 extern fhandle_t nullfh2;	/* for comparing V2 filehandles */
593 extern krwlock_t exported_lock;
594 extern struct exportinfo *exptable[];
595 
596 /*
597  * Two macros for identifying public filehandles.
598  * A v2 public filehandle is 32 zero bytes.
599  * A v3 public filehandle is zero length.
600  */
601 #define	PUBLIC_FH2(fh) \
602 	((fh)->fh_fsid.val[1] == 0 && \
603 	bcmp((fh), &nullfh2, sizeof (fhandle_t)) == 0)
604 
605 #define	PUBLIC_FH3(fh) \
606 	((fh)->fh3_length == 0)
607 
608 extern int	makefh4(nfs_fh4 *, struct vnode *, struct exportinfo *);
609 extern vnode_t *nfs4_fhtovp(nfs_fh4 *, struct exportinfo *, nfsstat4 *);
610 
611 #endif /* _KERNEL */
612 
613 #ifdef	__cplusplus
614 }
615 #endif
616 
617 #endif	/* _NFS_EXPORT_H */
618