Re: [PATCH v4] xfs_growfs: ensure target path is an active xfs mountpoint

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Thu, Apr 27, 2017 at 02:15:50PM -0500, Eric Sandeen wrote:
> On 4/27/17 1:23 PM, Bill O'Donnell wrote:
> > xfs_growfs manpage clearly states that the target path must be
> > an active xfs mountpoint.
> > 
> > Current behavior allows xfs_growfs to proceed if the target path
> > resides anywhere on a mounted xfs filesystem. This could lead to
> > unexpected results. Unless the target path is an active xfs
> > mountpoint, reject it. Create a new fs table lookup function which
> > matches only active xfs mount points, not any file residing within
> > those mountpoints.
> > 
> > Signed-off-by: Bill O'Donnell <billodo@xxxxxxxxxx>
> 
> Looks good, thanks.  And thanks for putting up with my pedantry.
> 
> I will probably queue this for the 4.12 release since it's fairly
> user-visible and 4.11 is close to release (he says, hopefully).

Ofc now that Eryu has accepted the xfstests for this, we'll fail
xfs/289 for a whole release cycle... :)

(Not that I particularly mind, just leaving a breadcrumb in case people
start wondering why we have a test for something that isn't upstream.)

((Which you know will be me in about 3 weeks when I forget that any of
this ever happened. :P))

--D

> 
> Reviewed-by: Eric Sandeen <sandeen@xxxxxxxxxx>
> 
> > ---
> > 
> > v4: improve commit message and subject line. Further improvement
> > of error message for realpath() prior to table lookup in xfs_growfs.
> > 
> > v3: improve error message for realpath failure. Add comments
> > to better document the differences between fs_table_lookup()
> > and fs_table_lookup_mount(). Use realpath() in fs_table_lookup_mount()
> > prior to directory comparison.
> > 
> > v2: in order to properly handle relative pathnames, symlinks,
> > and bind-mounts, use realpath to establish canonical path name.
> > This also requires the introduction of a lookup function based
> > on the target mountpoint.
> > 
> >  growfs/xfs_growfs.c | 10 +++++++++-
> >  include/path.h      |  1 +
> >  libxcmd/paths.c     | 31 +++++++++++++++++++++++++++++++
> >  3 files changed, 41 insertions(+), 1 deletion(-)
> > 
> > diff --git a/growfs/xfs_growfs.c b/growfs/xfs_growfs.c
> > index a294e14..366176b 100644
> > --- a/growfs/xfs_growfs.c
> > +++ b/growfs/xfs_growfs.c
> > @@ -133,6 +133,7 @@ main(int argc, char **argv)
> >  	int			spinodes;
> >  	int			rmapbt_enabled;
> >  	int			reflink_enabled;
> > +	char			rpath[PATH_MAX];
> >  
> >  	progname = basename(argv[0]);
> >  	setlocale(LC_ALL, "");
> > @@ -202,7 +203,14 @@ main(int argc, char **argv)
> >  		aflag = 1;
> >  
> >  	fs_table_initialise(0, NULL, 0, NULL);
> > -	fs = fs_table_lookup(argv[optind], FS_MOUNT_POINT);
> > +
> > +	if (!realpath(argv[optind], rpath)) {
> > +		fprintf(stderr, _("%s: path resolution failed for %s: %s\n"),
> > +			progname, argv[optind], strerror(errno));
> > +		return 1;
> > +	}
> > +
> > +	fs = fs_table_lookup_mount(rpath);
> >  	if (!fs) {
> >  		fprintf(stderr, _("%s: %s is not a mounted XFS filesystem\n"),
> >  			progname, argv[optind]);
> > diff --git a/include/path.h b/include/path.h
> > index d077bac..1d3a902 100644
> > --- a/include/path.h
> > +++ b/include/path.h
> > @@ -56,6 +56,7 @@ extern void fs_table_insert_project_path(char *__dir, uint __projid);
> >  
> >  
> >  extern fs_path_t *fs_table_lookup(const char *__dir, uint __flags);
> > +extern fs_path_t *fs_table_lookup_mount(const char *__dir);
> >  
> >  typedef struct fs_cursor {
> >  	uint		count;		/* total count of mount entries	*/
> > diff --git a/libxcmd/paths.c b/libxcmd/paths.c
> > index 816acc2..b767e9d 100644
> > --- a/libxcmd/paths.c
> > +++ b/libxcmd/paths.c
> > @@ -65,6 +65,9 @@ fs_device_number(
> >   * Find the FS table entry for the given path.  The "flags" argument
> >   * is a mask containing FS_MOUNT_POINT or FS_PROJECT_PATH (or both)
> >   * to indicate the type of table entry sought.
> > + * fs_table_lookup() finds the fs table entry for the filesystem hosting
> > + * the file represented in the "dir" argument. To compare against actual
> > + * mount point entries, use fs_table_lookup_mount() instead.
> >   */
> >  struct fs_path *
> >  fs_table_lookup(
> > @@ -86,6 +89,34 @@ fs_table_lookup(
> >  	return NULL;
> >  }
> >  
> > +/*
> > + * Find the FS table entry describing an actual mount for the given path.
> > + * Unlike fs_table_lookup(), fs_table_lookup_mount() compares the "dir"
> > + * argument to actual mount point entries in the table. Accordingly, it
> > + * will find matches only if the "dir" argument is indeed mounted.
> > + */
> > +struct fs_path *
> > +fs_table_lookup_mount(
> > +	const char	*dir)
> > +{
> > +	uint		i;
> > +	dev_t		dev = 0;
> > +	char		rpath[PATH_MAX];
> > +
> > +	if (fs_device_number(dir, &dev))
> > +		return NULL;
> > +
> > +	for (i = 0; i < fs_count; i++) {
> > +		if (fs_table[i].fs_flags != FS_MOUNT_POINT)
> > +			continue;
> > +		if (!realpath(fs_table[i].fs_dir, rpath))
> > +			continue;
> > +		if (strcmp(rpath, dir) == 0)
> > +			return &fs_table[i];
> > +	}
> > +	return NULL;
> > +}
> > +
> >  static int
> >  fs_table_insert(
> >  	char		*dir,
> > 
> --
> To unsubscribe from this list: send the line "unsubscribe linux-xfs" in
> the body of a message to majordomo@xxxxxxxxxxxxxxx
> More majordomo info at  http://vger.kernel.org/majordomo-info.html
--
To unsubscribe from this list: send the line "unsubscribe linux-xfs" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html



[Index of Archives]     [XFS Filesystem Development (older mail)]     [Linux Filesystem Development]     [Linux Audio Users]     [Yosemite Trails]     [Linux Kernel]     [Linux RAID]     [Linux SCSI]


  Powered by Linux