Commit a79bff21 authored by Richard Weinberger's avatar Richard Weinberger
Browse files

ubifs: Implement file open operation 



We need ->open() for files to load the crypto key.
If the no key is present and the file is encrypted,
refuse to open.

Signed-off-by: default avatarRichard Weinberger <richard@nod.at>
parent ba40e6a3

fs/ubifs/file.c

+30 −0
Original line number Diff line number Diff line
@@ -1605,6 +1605,35 @@ static int ubifs_file_mmap(struct file *file, struct vm_area_struct *vma) 
	return 0;

}



static int ubifs_file_open(struct inode *inode, struct file *filp)

{

	int ret;

	struct dentry *dir;

	struct ubifs_info *c = inode->i_sb->s_fs_info;



	if (ubifs_crypt_is_encrypted(inode)) {

		ret = fscrypt_get_encryption_info(inode);

		if (ret)

			return -EACCES;

		if (!fscrypt_has_encryption_key(inode))

			return -ENOKEY;

	}



	dir = dget_parent(file_dentry(filp));

	if (ubifs_crypt_is_encrypted(d_inode(dir)) &&

			!fscrypt_has_permitted_context(d_inode(dir), inode)) {

		ubifs_err(c, "Inconsistent encryption contexts: %lu/%lu",

			  (unsigned long) d_inode(dir)->i_ino,

			  (unsigned long) inode->i_ino);

		dput(dir);

		ubifs_ro_mode(c, -EPERM);

		return -EPERM;

	}

	dput(dir);



	return 0;

}



const struct address_space_operations ubifs_file_address_operations = {

	.readpage       = ubifs_readpage,

	.writepage      = ubifs_writepage,
@@ -1647,6 +1676,7 @@ const struct file_operations ubifs_file_operations = { 
	.unlocked_ioctl = ubifs_ioctl,

	.splice_read	= generic_file_splice_read,

	.splice_write	= iter_file_splice_write,

	.open		= ubifs_file_open,

#ifdef CONFIG_COMPAT

	.compat_ioctl   = ubifs_compat_ioctl,

#endif