2 * Copyright (c) 2007 Pawel Jakub Dawidek <pjd@FreeBSD.org>
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that the following conditions
8 * 1. Redistributions of source code must retain the above copyright
9 * notice, this list of conditions and the following disclaimer.
10 * 2. Redistributions in binary form must reproduce the above copyright
11 * notice, this list of conditions and the following disclaimer in the
12 * documentation and/or other materials provided with the distribution.
14 * THIS SOFTWARE IS PROVIDED BY THE AUTHORS AND CONTRIBUTORS ``AS IS'' AND
15 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
16 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
17 * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHORS OR CONTRIBUTORS BE LIABLE
18 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
19 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
20 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
21 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
22 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
23 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
27 #include <sys/cdefs.h>
28 __FBSDID("$FreeBSD$");
30 #include <sys/param.h>
31 #include <sys/kernel.h>
32 #include <sys/systm.h>
35 #include <sys/mutex.h>
37 #include <sys/malloc.h>
38 #include <sys/queue.h>
44 static MALLOC_DEFINE(M_ZONES, "zones_data", "Zones data");
47 * Structure to record list of ZFS datasets exported to a zone.
49 typedef struct zone_dataset {
50 LIST_ENTRY(zone_dataset) zd_next;
54 LIST_HEAD(zone_dataset_head, zone_dataset);
59 zone_dataset_attach(struct ucred *cred, const char *dataset, int jailid)
61 struct zone_dataset_head *head;
62 zone_dataset_t *zd, *zd2;
66 if ((error = priv_check_cred(cred, PRIV_ZFS_JAIL)) != 0)
69 /* Allocate memory before we grab prison's mutex. */
70 zd = malloc(sizeof(*zd) + strlen(dataset) + 1, M_ZONES, M_WAITOK);
72 sx_slock(&allprison_lock);
73 pr = prison_find(jailid); /* Locks &pr->pr_mtx. */
74 sx_sunlock(&allprison_lock);
80 head = osd_jail_get(pr, zone_slot);
83 LIST_FOREACH(zd2, head, zd_next) {
84 if (strcmp(dataset, zd2->zd_dataset) == 0) {
92 prison_hold_locked(pr);
93 mtx_unlock(&pr->pr_mtx);
94 head = malloc(sizeof(*head), M_ZONES, M_WAITOK);
96 mtx_lock(&pr->pr_mtx);
97 error = osd_jail_set(pr, zone_slot, head);
98 KASSERT(error == 0, ("osd_jail_set() failed (error=%d)", error));
100 strcpy(zd->zd_dataset, dataset);
101 LIST_INSERT_HEAD(head, zd, zd_next);
104 prison_free_locked(pr);
106 mtx_unlock(&pr->pr_mtx);
111 zone_dataset_detach(struct ucred *cred, const char *dataset, int jailid)
113 struct zone_dataset_head *head;
118 if ((error = priv_check_cred(cred, PRIV_ZFS_JAIL)) != 0)
121 sx_slock(&allprison_lock);
122 pr = prison_find(jailid);
123 sx_sunlock(&allprison_lock);
126 head = osd_jail_get(pr, zone_slot);
131 LIST_FOREACH(zd, head, zd_next) {
132 if (strcmp(dataset, zd->zd_dataset) == 0)
138 LIST_REMOVE(zd, zd_next);
140 if (LIST_EMPTY(head))
141 osd_jail_del(pr, zone_slot);
145 mtx_unlock(&pr->pr_mtx);
150 * Returns true if the named dataset is visible in the current zone.
151 * The 'write' parameter is set to 1 if the dataset is also writable.
154 zone_dataset_visible(const char *dataset, int *write)
156 struct zone_dataset_head *head;
162 if (dataset[0] == '\0')
164 if (INGLOBALZONE(curthread)) {
169 pr = curthread->td_ucred->cr_prison;
170 mtx_lock(&pr->pr_mtx);
171 head = osd_jail_get(pr, zone_slot);
176 * Walk the list once, looking for datasets which match exactly, or
177 * specify a dataset underneath an exported dataset. If found, return
178 * true and note that it is writable.
180 LIST_FOREACH(zd, head, zd_next) {
181 len = strlen(zd->zd_dataset);
182 if (strlen(dataset) >= len &&
183 bcmp(dataset, zd->zd_dataset, len) == 0 &&
184 (dataset[len] == '\0' || dataset[len] == '/' ||
185 dataset[len] == '@')) {
194 * Walk the list a second time, searching for datasets which are parents
195 * of exported datasets. These should be visible, but read-only.
197 * Note that we also have to support forms such as 'pool/dataset/', with
200 LIST_FOREACH(zd, head, zd_next) {
201 len = strlen(dataset);
202 if (dataset[len - 1] == '/')
203 len--; /* Ignore trailing slash */
204 if (len < strlen(zd->zd_dataset) &&
205 bcmp(dataset, zd->zd_dataset, len) == 0 &&
206 zd->zd_dataset[len] == '/') {
214 mtx_unlock(&pr->pr_mtx);
219 zone_destroy(void *arg)
221 struct zone_dataset_head *head;
225 while ((zd = LIST_FIRST(head)) != NULL) {
226 LIST_REMOVE(zd, zd_next);
233 zone_get_hostid(void *ptr)
236 KASSERT(ptr == NULL, ("only NULL pointer supported in %s", __func__));
238 return ((uint32_t)curthread->td_ucred->cr_prison->pr_hostid);
242 zone_sysinit(void *arg __unused)
245 zone_slot = osd_jail_register(zone_destroy, NULL);
249 zone_sysuninit(void *arg __unused)
252 osd_jail_deregister(zone_slot);
255 SYSINIT(zone_sysinit, SI_SUB_DRIVERS, SI_ORDER_ANY, zone_sysinit, NULL);
256 SYSUNINIT(zone_sysuninit, SI_SUB_DRIVERS, SI_ORDER_ANY, zone_sysuninit, NULL);