quotafile.c revision 188604
15331SN/A/*-
25331SN/A * Copyright (c) 2008 Dag-Erling Co��dan Sm��rgrav
35331SN/A * Copyright (c) 2008 Marshall Kirk McKusick
45331SN/A * All rights reserved.
55331SN/A *
65331SN/A * Redistribution and use in source and binary forms, with or without
75331SN/A * modification, are permitted provided that the following conditions
85331SN/A * are met:
95331SN/A * 1. Redistributions of source code must retain the above copyright
105331SN/A *    notice, this list of conditions and the following disclaimer
115331SN/A *    in this position and unchanged.
125331SN/A * 2. Redistributions in binary form must reproduce the above copyright
135331SN/A *    notice, this list of conditions and the following disclaimer in the
145331SN/A *    documentation and/or other materials provided with the distribution.
155331SN/A *
165331SN/A * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
175331SN/A * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
185331SN/A * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
195331SN/A * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
205331SN/A * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
215331SN/A * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
2212508Samw@Sun.COM * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
235331SN/A * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
245331SN/A * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
2511963SAfshin.Ardakani@Sun.COM * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
2611963SAfshin.Ardakani@Sun.COM * SUCH DAMAGE.
275331SN/A *
2811963SAfshin.Ardakani@Sun.COM * $FreeBSD: projects/quota64/lib/libutil/quotafile.c 188604 2009-02-14 08:08:08Z mckusick $
295331SN/A */
305331SN/A
315331SN/A#include <sys/types.h>
325331SN/A#include <sys/endian.h>
335331SN/A#include <sys/mount.h>
345331SN/A#include <sys/stat.h>
355331SN/A
365331SN/A#include <ufs/ufs/quota.h>
3711963SAfshin.Ardakani@Sun.COM
385331SN/A#include <errno.h>
3911963SAfshin.Ardakani@Sun.COM#include <fcntl.h>
405331SN/A#include <fstab.h>
415331SN/A#include <grp.h>
4211963SAfshin.Ardakani@Sun.COM#include <pwd.h>
4311963SAfshin.Ardakani@Sun.COM#include <libutil.h>
4411963SAfshin.Ardakani@Sun.COM#include <stdint.h>
4511963SAfshin.Ardakani@Sun.COM#include <stdio.h>
4611963SAfshin.Ardakani@Sun.COM#include <stdlib.h>
4711963SAfshin.Ardakani@Sun.COM#include <string.h>
4811963SAfshin.Ardakani@Sun.COM#include <unistd.h>
4911963SAfshin.Ardakani@Sun.COM
505331SN/Astruct quotafile {
5111963SAfshin.Ardakani@Sun.COM	int fd;				/* -1 means using quotactl for access */
5211963SAfshin.Ardakani@Sun.COM	int wordsize;			/* 32-bit or 64-bit limits */
5311963SAfshin.Ardakani@Sun.COM	int quotatype;			/* USRQUOTA or GRPQUOTA */
5411963SAfshin.Ardakani@Sun.COM	char fsname[MAXPATHLEN + 1];	/* mount point of filesystem */
5511963SAfshin.Ardakani@Sun.COM	char qfname[MAXPATHLEN + 1];	/* quota file if not using quotactl */
5611963SAfshin.Ardakani@Sun.COM};
5711963SAfshin.Ardakani@Sun.COM
5811963SAfshin.Ardakani@Sun.COMstatic const char *qfextension[] = INITQFNAMES;
5911963SAfshin.Ardakani@Sun.COM
6011963SAfshin.Ardakani@Sun.COM/*
6111963SAfshin.Ardakani@Sun.COM * Check to see if a particular quota is to be enabled.
6211963SAfshin.Ardakani@Sun.COM */
6311963SAfshin.Ardakani@Sun.COMstatic int
6411963SAfshin.Ardakani@Sun.COMhasquota(struct fstab *fs, int type, char *qfnamep, int qfbufsize)
6511963SAfshin.Ardakani@Sun.COM{
6611963SAfshin.Ardakani@Sun.COM	char *opt;
6712508Samw@Sun.COM	char *cp;
6812508Samw@Sun.COM	struct statfs sfb;
6912508Samw@Sun.COM	char buf[BUFSIZ];
7011963SAfshin.Ardakani@Sun.COM	static char initname, usrname[100], grpname[100];
7111963SAfshin.Ardakani@Sun.COM
7211963SAfshin.Ardakani@Sun.COM	if (!initname) {
7311963SAfshin.Ardakani@Sun.COM		(void)snprintf(usrname, sizeof(usrname), "%s%s",
7411963SAfshin.Ardakani@Sun.COM		    qfextension[USRQUOTA], QUOTAFILENAME);
7511963SAfshin.Ardakani@Sun.COM		(void)snprintf(grpname, sizeof(grpname), "%s%s",
7611963SAfshin.Ardakani@Sun.COM		    qfextension[GRPQUOTA], QUOTAFILENAME);
7711963SAfshin.Ardakani@Sun.COM		initname = 1;
7811963SAfshin.Ardakani@Sun.COM	}
7911963SAfshin.Ardakani@Sun.COM	strcpy(buf, fs->fs_mntops);
8011963SAfshin.Ardakani@Sun.COM	for (opt = strtok(buf, ","); opt; opt = strtok(NULL, ",")) {
8111963SAfshin.Ardakani@Sun.COM		if ((cp = index(opt, '=')))
8211963SAfshin.Ardakani@Sun.COM			*cp++ = '\0';
8311963SAfshin.Ardakani@Sun.COM		if (type == USRQUOTA && strcmp(opt, usrname) == 0)
8411963SAfshin.Ardakani@Sun.COM			break;
8511963SAfshin.Ardakani@Sun.COM		if (type == GRPQUOTA && strcmp(opt, grpname) == 0)
865331SN/A			break;
875331SN/A	}
8811963SAfshin.Ardakani@Sun.COM	if (!opt)
895331SN/A		return (0);
9011963SAfshin.Ardakani@Sun.COM	/*
9111963SAfshin.Ardakani@Sun.COM	 * Ensure that the filesystem is mounted.
9211963SAfshin.Ardakani@Sun.COM	 */
9311963SAfshin.Ardakani@Sun.COM	if (statfs(fs->fs_file, &sfb) != 0 ||
9411963SAfshin.Ardakani@Sun.COM	    strcmp(fs->fs_file, sfb.f_mntonname)) {
9511963SAfshin.Ardakani@Sun.COM		return (0);
9611963SAfshin.Ardakani@Sun.COM	}
9711963SAfshin.Ardakani@Sun.COM	if (cp) {
9811963SAfshin.Ardakani@Sun.COM		strncpy(qfnamep, cp, qfbufsize);
9911963SAfshin.Ardakani@Sun.COM	} else {
10011963SAfshin.Ardakani@Sun.COM		(void)snprintf(qfnamep, qfbufsize, "%s/%s.%s", fs->fs_file,
10111963SAfshin.Ardakani@Sun.COM		    QUOTAFILENAME, qfextension[type]);
1025331SN/A	}
10312508Samw@Sun.COM	return (1);
10412508Samw@Sun.COM}
10512508Samw@Sun.COM
10612508Samw@Sun.COMstruct quotafile *
10712508Samw@Sun.COMquota_open(struct fstab *fs, int quotatype, int openflags)
10812508Samw@Sun.COM{
10912508Samw@Sun.COM	struct quotafile *qf;
11012508Samw@Sun.COM	struct dqhdr64 dqh;
11112508Samw@Sun.COM	struct group *grp;
11212508Samw@Sun.COM	int qcmd, serrno;
11312508Samw@Sun.COM
11412508Samw@Sun.COM	if ((qf = calloc(1, sizeof(*qf))) == NULL)
11512508Samw@Sun.COM		return (NULL);
11612508Samw@Sun.COM	qf->quotatype = quotatype;
11712508Samw@Sun.COM	strncpy(qf->fsname, fs->fs_file, sizeof(qf->fsname));
11812508Samw@Sun.COM	qcmd = QCMD(Q_GETQUOTA, quotatype);
11912508Samw@Sun.COM	if (quotactl(fs->fs_file, qcmd, 0, &dqh) == 0) {
12012508Samw@Sun.COM		qf->wordsize = 64;
12112508Samw@Sun.COM		qf->fd = -1;
12212508Samw@Sun.COM		return (qf);
12312508Samw@Sun.COM	}
12412508Samw@Sun.COM	if (!hasquota(fs, quotatype, qf->qfname, sizeof(qf->qfname))) {
12512508Samw@Sun.COM		free(qf);
12612508Samw@Sun.COM		errno = EOPNOTSUPP;
12712508Samw@Sun.COM		return (NULL);
12812508Samw@Sun.COM	}
12912508Samw@Sun.COM	if ((qf->fd = open(qf->qfname, openflags & O_ACCMODE)) < 0 &&
1305331SN/A	    (openflags & O_CREAT) == 0) {
1315331SN/A		serrno = errno;
1325331SN/A		free(qf);
1335331SN/A		errno = serrno;
1345331SN/A		return (NULL);
1355331SN/A	}
1365331SN/A	/* File open worked, so process it */
13711963SAfshin.Ardakani@Sun.COM	if (qf->fd != -1) {
13811963SAfshin.Ardakani@Sun.COM		qf->wordsize = 32;
1395331SN/A		switch (read(qf->fd, &dqh, sizeof(dqh))) {
14011963SAfshin.Ardakani@Sun.COM		case -1:
14111963SAfshin.Ardakani@Sun.COM			serrno = errno;
1425331SN/A			close(qf->fd);
14311963SAfshin.Ardakani@Sun.COM			free(qf);
14411963SAfshin.Ardakani@Sun.COM			errno = serrno;
14511963SAfshin.Ardakani@Sun.COM			return (NULL);
14611963SAfshin.Ardakani@Sun.COM		case sizeof(dqh):
14711963SAfshin.Ardakani@Sun.COM			if (strcmp(dqh.dqh_magic, Q_DQHDR64_MAGIC) != 0) {
14811963SAfshin.Ardakani@Sun.COM				/* no magic, assume 32 bits */
1495331SN/A				qf->wordsize = 32;
15011963SAfshin.Ardakani@Sun.COM				return (qf);
15111963SAfshin.Ardakani@Sun.COM			}
15211963SAfshin.Ardakani@Sun.COM			if (be32toh(dqh.dqh_version) != Q_DQHDR64_VERSION ||
15311963SAfshin.Ardakani@Sun.COM			    be32toh(dqh.dqh_hdrlen) != sizeof(struct dqhdr64) ||
15411963SAfshin.Ardakani@Sun.COM			    be32toh(dqh.dqh_reclen) != sizeof(struct dqblk64)) {
15511963SAfshin.Ardakani@Sun.COM				/* correct magic, wrong version / lengths */
1565331SN/A				close(qf->fd);
15711963SAfshin.Ardakani@Sun.COM				free(qf);
15811963SAfshin.Ardakani@Sun.COM				errno = EINVAL;
15911963SAfshin.Ardakani@Sun.COM				return (NULL);
1605331SN/A			}
16111963SAfshin.Ardakani@Sun.COM			qf->wordsize = 64;
16211963SAfshin.Ardakani@Sun.COM			return (qf);
1635331SN/A		default:
16411963SAfshin.Ardakani@Sun.COM			qf->wordsize = 32;
16511963SAfshin.Ardakani@Sun.COM			return (qf);
1665331SN/A		}
16711963SAfshin.Ardakani@Sun.COM		/* not reached */
16811963SAfshin.Ardakani@Sun.COM	}
1695331SN/A	/* Open failed above, but O_CREAT specified, so create a new file */
17012508Samw@Sun.COM	if ((qf->fd = open(qf->qfname, O_RDWR|O_CREAT|O_TRUNC, 0)) < 0) {
17112508Samw@Sun.COM		serrno = errno;
17212508Samw@Sun.COM		free(qf);
17312508Samw@Sun.COM		errno = serrno;
17412508Samw@Sun.COM		return (NULL);
17512508Samw@Sun.COM	}
1765331SN/A	qf->wordsize = 64;
1775331SN/A	memset(&dqh, 0, sizeof(dqh));
1785331SN/A	memcpy(dqh.dqh_magic, Q_DQHDR64_MAGIC, sizeof(dqh.dqh_magic));
1795331SN/A	dqh.dqh_version = htobe32(Q_DQHDR64_VERSION);
18011963SAfshin.Ardakani@Sun.COM	dqh.dqh_hdrlen = htobe32(sizeof(struct dqhdr64));
181	dqh.dqh_reclen = htobe32(sizeof(struct dqblk64));
182	if (write(qf->fd, &dqh, sizeof(dqh)) != sizeof(dqh)) {
183		serrno = errno;
184		unlink(qf->qfname);
185		close(qf->fd);
186		free(qf);
187		errno = serrno;
188		return (NULL);
189	}
190	grp = getgrnam(QUOTAGROUP);
191	fchown(qf->fd, 0, grp ? grp->gr_gid : 0);
192	fchmod(qf->fd, 0640);
193	return (qf);
194}
195
196void
197quota_close(struct quotafile *qf)
198{
199
200	if (qf->fd != -1)
201		close(qf->fd);
202	free(qf);
203}
204
205static int
206quota_read32(struct quotafile *qf, struct dqblk *dqb, int id)
207{
208	struct dqblk32 dqb32;
209	off_t off;
210
211	off = id * sizeof(struct dqblk32);
212	if (lseek(qf->fd, off, SEEK_SET) == -1)
213		return (-1);
214	switch (read(qf->fd, &dqb32, sizeof(dqb32))) {
215	case 0:
216		memset(&dqb, 0, sizeof(*dqb));
217		return (0);
218	case sizeof(dqb32):
219		dqb->dqb_bhardlimit = dqb32.dqb_bhardlimit;
220		dqb->dqb_bsoftlimit = dqb32.dqb_bsoftlimit;
221		dqb->dqb_curblocks = dqb32.dqb_curblocks;
222		dqb->dqb_ihardlimit = dqb32.dqb_ihardlimit;
223		dqb->dqb_isoftlimit = dqb32.dqb_isoftlimit;
224		dqb->dqb_curinodes = dqb32.dqb_curinodes;
225		dqb->dqb_btime = dqb32.dqb_btime;
226		dqb->dqb_itime = dqb32.dqb_itime;
227		return (0);
228	default:
229		return (-1);
230	}
231}
232
233static int
234quota_read64(struct quotafile *qf, struct dqblk *dqb, int id)
235{
236	struct dqblk64 dqb64;
237	off_t off;
238
239	off = sizeof(struct dqhdr64) + id * sizeof(struct dqblk64);
240	if (lseek(qf->fd, off, SEEK_SET) == -1)
241		return (-1);
242	switch (read(qf->fd, &dqb64, sizeof(dqb64))) {
243	case 0:
244		memset(&dqb, 0, sizeof(*dqb));
245		return (0);
246	case sizeof(dqb64):
247		dqb->dqb_bhardlimit = be64toh(dqb64.dqb_bhardlimit);
248		dqb->dqb_bsoftlimit = be64toh(dqb64.dqb_bsoftlimit);
249		dqb->dqb_curblocks = be64toh(dqb64.dqb_curblocks);
250		dqb->dqb_ihardlimit = be64toh(dqb64.dqb_ihardlimit);
251		dqb->dqb_isoftlimit = be64toh(dqb64.dqb_isoftlimit);
252		dqb->dqb_curinodes = be64toh(dqb64.dqb_curinodes);
253		dqb->dqb_btime = be64toh(dqb64.dqb_btime);
254		dqb->dqb_itime = be64toh(dqb64.dqb_itime);
255		return (0);
256	default:
257		return (-1);
258	}
259}
260
261int
262quota_read(struct quotafile *qf, struct dqblk *dqb, int id)
263{
264	int qcmd;
265
266	if (qf->fd == -1) {
267		qcmd = QCMD(Q_GETQUOTA, qf->quotatype);
268		return (quotactl(qf->fsname, qcmd, id, dqb));
269	}
270	switch (qf->wordsize) {
271	case 32:
272		return quota_read32(qf, dqb, id);
273	case 64:
274		return quota_read64(qf, dqb, id);
275	default:
276		errno = EINVAL;
277		return (-1);
278	}
279	/* not reached */
280}
281
282#define CLIP32(u64) ((u64) > UINT32_MAX ? UINT32_MAX : (uint32_t)(u64))
283
284static int
285quota_write32(struct quotafile *qf, const struct dqblk *dqb, int id)
286{
287	struct dqblk32 dqb32;
288	off_t off;
289
290	dqb32.dqb_bhardlimit = CLIP32(dqb->dqb_bhardlimit);
291	dqb32.dqb_bsoftlimit = CLIP32(dqb->dqb_bsoftlimit);
292	dqb32.dqb_curblocks = CLIP32(dqb->dqb_curblocks);
293	dqb32.dqb_ihardlimit = CLIP32(dqb->dqb_ihardlimit);
294	dqb32.dqb_isoftlimit = CLIP32(dqb->dqb_isoftlimit);
295	dqb32.dqb_curinodes = CLIP32(dqb->dqb_curinodes);
296	dqb32.dqb_btime = CLIP32(dqb->dqb_btime);
297	dqb32.dqb_itime = CLIP32(dqb->dqb_itime);
298
299	off = id * sizeof(struct dqblk32);
300	if (lseek(qf->fd, off, SEEK_SET) == -1)
301		return (-1);
302	if (write(qf->fd, &dqb32, sizeof(dqb32)) == sizeof(dqb32))
303		return (0);
304	return (-1);
305}
306
307static int
308quota_write64(struct quotafile *qf, const struct dqblk *dqb, int id)
309{
310	struct dqblk64 dqb64;
311	off_t off;
312
313	dqb64.dqb_bhardlimit = htobe64(dqb->dqb_bhardlimit);
314	dqb64.dqb_bsoftlimit = htobe64(dqb->dqb_bsoftlimit);
315	dqb64.dqb_curblocks = htobe64(dqb->dqb_curblocks);
316	dqb64.dqb_ihardlimit = htobe64(dqb->dqb_ihardlimit);
317	dqb64.dqb_isoftlimit = htobe64(dqb->dqb_isoftlimit);
318	dqb64.dqb_curinodes = htobe64(dqb->dqb_curinodes);
319	dqb64.dqb_btime = htobe64(dqb->dqb_btime);
320	dqb64.dqb_itime = htobe64(dqb->dqb_itime);
321
322	off = sizeof(struct dqhdr64) + id * sizeof(struct dqblk64);
323	if (lseek(qf->fd, off, SEEK_SET) == -1)
324		return (-1);
325	if (write(qf->fd, &dqb64, sizeof(dqb64)) == sizeof(dqb64))
326		return (0);
327	return (-1);
328}
329
330int
331quota_write_usage(struct quotafile *qf, struct dqblk *dqb, int id)
332{
333	struct dqblk dqbuf;
334	int qcmd;
335
336	if (qf->fd == -1) {
337		qcmd = QCMD(Q_SETUSE, qf->quotatype);
338		return (quotactl(qf->fsname, qcmd, id, dqb));
339	}
340	/*
341	 * Have to do read-modify-write of quota in file.
342	 */
343	if (quota_read(qf, &dqbuf, id) != 0)
344		return (-1);
345	/*
346	 * Reset time limit if have a soft limit and were
347	 * previously under it, but are now over it.
348	 */
349	if (dqbuf.dqb_bsoftlimit && id != 0 &&
350	    dqbuf.dqb_curblocks < dqbuf.dqb_bsoftlimit &&
351	    dqb->dqb_curblocks >= dqbuf.dqb_bsoftlimit)
352		dqbuf.dqb_btime = 0;
353	if (dqbuf.dqb_isoftlimit && id != 0 &&
354	    dqbuf.dqb_curinodes < dqbuf.dqb_isoftlimit &&
355	    dqb->dqb_curinodes >= dqbuf.dqb_isoftlimit)
356		dqbuf.dqb_itime = 0;
357	dqbuf.dqb_curinodes = dqb->dqb_curinodes;
358	dqbuf.dqb_curblocks = dqb->dqb_curblocks;
359	/*
360	 * Write it back.
361	 */
362	switch (qf->wordsize) {
363	case 32:
364		return quota_write32(qf, &dqbuf, id);
365	case 64:
366		return quota_write64(qf, &dqbuf, id);
367	default:
368		errno = EINVAL;
369		return (-1);
370	}
371	/* not reached */
372}
373
374int
375quota_write_limits(struct quotafile *qf, struct dqblk *dqb, int id)
376{
377	struct dqblk dqbuf;
378	int qcmd;
379
380	if (qf->fd == -1) {
381		qcmd = QCMD(Q_SETQUOTA, qf->quotatype);
382		return (quotactl(qf->fsname, qcmd, id, dqb));
383	}
384	/*
385	 * Have to do read-modify-write of quota in file.
386	 */
387	if (quota_read(qf, &dqbuf, id) != 0)
388		return (-1);
389	/*
390	 * Reset time limit if have a soft limit and were
391	 * previously under it, but are now over it
392	 * or if there previously was no soft limit, but
393	 * now have one and are over it.
394	 */
395	if (dqbuf.dqb_bsoftlimit && id != 0 &&
396	    dqbuf.dqb_curblocks < dqbuf.dqb_bsoftlimit &&
397	    dqbuf.dqb_curblocks >= dqb->dqb_bsoftlimit)
398		dqb->dqb_btime = 0;
399	if (dqbuf.dqb_bsoftlimit == 0 && id != 0 &&
400	    dqb->dqb_bsoftlimit > 0 &&
401	    dqbuf.dqb_curblocks >= dqb->dqb_bsoftlimit)
402		dqb->dqb_btime = 0;
403	if (dqbuf.dqb_isoftlimit && id != 0 &&
404	    dqbuf.dqb_curinodes < dqbuf.dqb_isoftlimit &&
405	    dqbuf.dqb_curinodes >= dqb->dqb_isoftlimit)
406		dqb->dqb_itime = 0;
407	if (dqbuf.dqb_isoftlimit == 0 && id !=0 &&
408	    dqb->dqb_isoftlimit > 0 &&
409	    dqbuf.dqb_curinodes >= dqb->dqb_isoftlimit)
410		dqb->dqb_itime = 0;
411	dqb->dqb_curinodes = dqbuf.dqb_curinodes;
412	dqb->dqb_curblocks = dqbuf.dqb_curblocks;
413	/*
414	 * Write it back.
415	 */
416	switch (qf->wordsize) {
417	case 32:
418		return quota_write32(qf, dqb, id);
419	case 64:
420		return quota_write64(qf, dqb, id);
421	default:
422		errno = EINVAL;
423		return (-1);
424	}
425	/* not reached */
426}
427