4 * Copyright (C) 1995, 1996 Olaf Kirch <okir@monad.swb.de>
7 #include <linux/types.h>
8 #include <linux/sched.h>
9 #include <linux/sunrpc/svc.h>
10 #include <linux/sunrpc/svcauth.h>
11 #include <linux/nfsd/nfsd.h>
12 #include <linux/vserver/xid.h>
14 #define CAP_NFSD_MASK (CAP_FS_MASK|CAP_TO_MASK(CAP_SYS_RESOURCE))
16 int nfsd_setuser(struct svc_rqst *rqstp, struct svc_export *exp)
18 struct svc_cred *cred = &rqstp->rq_cred;
22 if (exp->ex_flags & NFSEXP_ALLSQUASH) {
23 cred->cr_uid = exp->ex_anon_uid;
24 cred->cr_gid = exp->ex_anon_gid;
25 put_group_info(cred->cr_group_info);
26 cred->cr_group_info = groups_alloc(0);
27 } else if (exp->ex_flags & NFSEXP_ROOTSQUASH) {
28 struct group_info *gi;
30 cred->cr_uid = exp->ex_anon_uid;
32 cred->cr_gid = exp->ex_anon_gid;
33 gi = groups_alloc(cred->cr_group_info->ngroups);
35 for (i = 0; i < cred->cr_group_info->ngroups; i++) {
36 if (!GROUP_AT(cred->cr_group_info, i))
37 GROUP_AT(gi, i) = exp->ex_anon_gid;
39 GROUP_AT(gi, i) = GROUP_AT(cred->cr_group_info, i);
41 put_group_info(cred->cr_group_info);
42 cred->cr_group_info = gi;
45 if (cred->cr_uid != (uid_t) -1)
46 current->fsuid = INOXID_UID(XID_TAG_NFSD, cred->cr_uid, cred->cr_gid);
48 current->fsuid = exp->ex_anon_uid;
49 if (cred->cr_gid != (gid_t) -1)
50 current->fsgid = INOXID_GID(XID_TAG_NFSD, cred->cr_uid, cred->cr_gid);
52 current->fsgid = exp->ex_anon_gid;
54 current->xid = INOXID_XID(XID_TAG_NFSD, cred->cr_uid, cred->cr_gid, 0);
56 if (!cred->cr_group_info)
58 ret = set_current_groups(cred->cr_group_info);
59 if (INOXID_UID(XID_TAG_NFSD, cred->cr_uid, cred->cr_gid)) {
60 cap_t(current->cap_effective) &= ~CAP_NFSD_MASK;
62 cap_t(current->cap_effective) |= (CAP_NFSD_MASK &
63 current->cap_permitted);