xref: /qemu/hw/9pfs/9p-local.c (revision 4f82ce8cd94f2601fb2b2e4cfe0cf5b44131817e)
1 /*
2  * 9p Posix callback
3  *
4  * Copyright IBM, Corp. 2010
5  *
6  * Authors:
7  *  Anthony Liguori   <aliguori@us.ibm.com>
8  *
9  * This work is licensed under the terms of the GNU GPL, version 2.  See
10  * the COPYING file in the top-level directory.
11  */
12 
13 /*
14  * Not so fast! You might want to read the 9p developer docs first:
15  * https://wiki.qemu.org/Documentation/9p
16  */
17 
18 #include "qemu/osdep.h"
19 #include "9p.h"
20 #include "9p-local.h"
21 #include "9p-xattr.h"
22 #include "9p-util.h"
23 #include "fsdev/qemu-fsdev.h"   /* local_ops */
24 #include <arpa/inet.h>
25 #include <pwd.h>
26 #include <grp.h>
27 #include <sys/socket.h>
28 #include <sys/un.h>
29 #include "qemu/xattr.h"
30 #include "qapi/error.h"
31 #include "qemu/cutils.h"
32 #include "qemu/error-report.h"
33 #include "qemu/option.h"
34 #include <libgen.h>
35 #ifdef CONFIG_LINUX
36 #include <linux/fs.h>
37 #ifdef CONFIG_LINUX_MAGIC_H
38 #include <linux/magic.h>
39 #endif
40 #endif
41 #include <sys/ioctl.h>
42 
43 #ifndef XFS_SUPER_MAGIC
44 #define XFS_SUPER_MAGIC  0x58465342
45 #endif
46 #ifndef EXT2_SUPER_MAGIC
47 #define EXT2_SUPER_MAGIC 0xEF53
48 #endif
49 #ifndef REISERFS_SUPER_MAGIC
50 #define REISERFS_SUPER_MAGIC 0x52654973
51 #endif
52 #ifndef BTRFS_SUPER_MAGIC
53 #define BTRFS_SUPER_MAGIC 0x9123683E
54 #endif
55 
56 typedef struct {
57     int mountfd;
58 } LocalData;
59 
60 int local_open_nofollow(FsContext *fs_ctx, const char *path, int flags,
61                         mode_t mode)
62 {
63     LocalData *data = fs_ctx->private;
64     int fd = data->mountfd;
65 
66     while (*path && fd != -1) {
67         const char *c;
68         int next_fd;
69         char *head;
70 
71         /* Only relative paths without consecutive slashes */
72         assert(*path != '/');
73 
74         head = g_strdup(path);
75         c = qemu_strchrnul(path, '/');
76         if (*c) {
77             /* Intermediate path element */
78             head[c - path] = 0;
79             path = c + 1;
80             next_fd = openat_dir(fd, head);
81         } else {
82             /* Rightmost path element */
83             next_fd = openat_file(fd, head, flags, mode);
84             path = c;
85         }
86         g_free(head);
87         if (fd != data->mountfd) {
88             close_preserve_errno(fd);
89         }
90         fd = next_fd;
91     }
92 
93     assert(fd != data->mountfd);
94     return fd;
95 }
96 
97 int local_opendir_nofollow(FsContext *fs_ctx, const char *path)
98 {
99     return local_open_nofollow(fs_ctx, path, O_DIRECTORY | O_RDONLY, 0);
100 }
101 
102 static void renameat_preserve_errno(int odirfd, const char *opath, int ndirfd,
103                                     const char *npath)
104 {
105     int serrno = errno;
106     qemu_renameat(odirfd, opath, ndirfd, npath);
107     errno = serrno;
108 }
109 
110 static void unlinkat_preserve_errno(int dirfd, const char *path, int flags)
111 {
112     int serrno = errno;
113     qemu_unlinkat(dirfd, path, flags);
114     errno = serrno;
115 }
116 
117 #define VIRTFS_META_DIR ".virtfs_metadata"
118 #define VIRTFS_META_ROOT_FILE VIRTFS_META_DIR "_root"
119 
120 static FILE *local_fopenat(int dirfd, const char *name, const char *mode)
121 {
122     int fd, o_mode = 0;
123     FILE *fp;
124     int flags;
125     /*
126      * only supports two modes
127      */
128     if (mode[0] == 'r') {
129         flags = O_RDONLY;
130     } else if (mode[0] == 'w') {
131         flags = O_WRONLY | O_TRUNC | O_CREAT;
132         o_mode = S_IRUSR | S_IWUSR | S_IRGRP | S_IWGRP | S_IROTH | S_IWOTH;
133     } else {
134         return NULL;
135     }
136     fd = openat_file(dirfd, name, flags, o_mode);
137     if (fd == -1) {
138         return NULL;
139     }
140     fp = fdopen(fd, mode);
141     if (!fp) {
142         close(fd);
143     }
144     return fp;
145 }
146 
147 #define ATTR_MAX 100
148 static void local_mapped_file_attr(int dirfd, const char *name,
149                                    struct stat *stbuf)
150 {
151     FILE *fp;
152     char buf[ATTR_MAX];
153     int map_dirfd;
154 
155     if (strcmp(name, ".")) {
156         map_dirfd = openat_dir(dirfd, VIRTFS_META_DIR);
157         if (map_dirfd == -1) {
158             return;
159         }
160 
161         fp = local_fopenat(map_dirfd, name, "r");
162         close_preserve_errno(map_dirfd);
163     } else {
164         fp = local_fopenat(dirfd, VIRTFS_META_ROOT_FILE, "r");
165     }
166     if (!fp) {
167         return;
168     }
169     memset(buf, 0, ATTR_MAX);
170     while (fgets(buf, ATTR_MAX, fp)) {
171         if (!strncmp(buf, "virtfs.uid", 10)) {
172             stbuf->st_uid = atoi(buf + 11);
173         } else if (!strncmp(buf, "virtfs.gid", 10)) {
174             stbuf->st_gid = atoi(buf + 11);
175         } else if (!strncmp(buf, "virtfs.mode", 11)) {
176             stbuf->st_mode = atoi(buf + 12);
177         } else if (!strncmp(buf, "virtfs.rdev", 11)) {
178             stbuf->st_rdev = atoi(buf + 12);
179         }
180         memset(buf, 0, ATTR_MAX);
181     }
182     fclose(fp);
183 }
184 
185 static int local_lstat(FsContext *fs_ctx, V9fsPath *fs_path, struct stat *stbuf)
186 {
187     int err = -1;
188     char *dirpath = g_path_get_dirname(fs_path->data);
189     char *name = g_path_get_basename(fs_path->data);
190     int dirfd;
191 
192     dirfd = local_opendir_nofollow(fs_ctx, dirpath);
193     if (dirfd == -1) {
194         goto out;
195     }
196 
197     err = qemu_fstatat(dirfd, name, stbuf, AT_SYMLINK_NOFOLLOW);
198     if (err) {
199         goto err_out;
200     }
201     if (fs_ctx->export_flags & V9FS_SM_MAPPED) {
202         /* Actual credentials are part of extended attrs */
203         uid_t tmp_uid;
204         gid_t tmp_gid;
205         mode_t tmp_mode;
206         dev_t tmp_dev;
207 
208         if (fgetxattrat_nofollow(dirfd, name, "user.virtfs.uid", &tmp_uid,
209                                  sizeof(uid_t)) > 0) {
210             stbuf->st_uid = le32_to_cpu(tmp_uid);
211         }
212         if (fgetxattrat_nofollow(dirfd, name, "user.virtfs.gid", &tmp_gid,
213                                  sizeof(gid_t)) > 0) {
214             stbuf->st_gid = le32_to_cpu(tmp_gid);
215         }
216         if (fgetxattrat_nofollow(dirfd, name, "user.virtfs.mode", &tmp_mode,
217                                  sizeof(mode_t)) > 0) {
218             stbuf->st_mode = le32_to_cpu(tmp_mode);
219         }
220         if (fgetxattrat_nofollow(dirfd, name, "user.virtfs.rdev", &tmp_dev,
221                                  sizeof(dev_t)) > 0) {
222             stbuf->st_rdev = le64_to_cpu(tmp_dev);
223         }
224     } else if (fs_ctx->export_flags & V9FS_SM_MAPPED_FILE) {
225         local_mapped_file_attr(dirfd, name, stbuf);
226     }
227 
228 err_out:
229     close_preserve_errno(dirfd);
230 out:
231     g_free(name);
232     g_free(dirpath);
233     return err;
234 }
235 
236 static int local_set_mapped_file_attrat(int dirfd, const char *name,
237                                         FsCred *credp)
238 {
239     FILE *fp;
240     int ret;
241     char buf[ATTR_MAX];
242     int uid = -1, gid = -1, mode = -1, rdev = -1;
243     int map_dirfd = -1, map_fd;
244     bool is_root = !strcmp(name, ".");
245 
246     if (is_root) {
247         fp = local_fopenat(dirfd, VIRTFS_META_ROOT_FILE, "r");
248         if (!fp) {
249             if (errno == ENOENT) {
250                 goto update_map_file;
251             } else {
252                 return -1;
253             }
254         }
255     } else {
256         ret = qemu_mkdirat(dirfd, VIRTFS_META_DIR, 0700);
257         if (ret < 0 && errno != EEXIST) {
258             return -1;
259         }
260 
261         map_dirfd = openat_dir(dirfd, VIRTFS_META_DIR);
262         if (map_dirfd == -1) {
263             return -1;
264         }
265 
266         fp = local_fopenat(map_dirfd, name, "r");
267         if (!fp) {
268             if (errno == ENOENT) {
269                 goto update_map_file;
270             } else {
271                 close_preserve_errno(map_dirfd);
272                 return -1;
273             }
274         }
275     }
276     memset(buf, 0, ATTR_MAX);
277     while (fgets(buf, ATTR_MAX, fp)) {
278         if (!strncmp(buf, "virtfs.uid", 10)) {
279             uid = atoi(buf + 11);
280         } else if (!strncmp(buf, "virtfs.gid", 10)) {
281             gid = atoi(buf + 11);
282         } else if (!strncmp(buf, "virtfs.mode", 11)) {
283             mode = atoi(buf + 12);
284         } else if (!strncmp(buf, "virtfs.rdev", 11)) {
285             rdev = atoi(buf + 12);
286         }
287         memset(buf, 0, ATTR_MAX);
288     }
289     fclose(fp);
290 
291 update_map_file:
292     if (is_root) {
293         fp = local_fopenat(dirfd, VIRTFS_META_ROOT_FILE, "w");
294     } else {
295         fp = local_fopenat(map_dirfd, name, "w");
296         /* We can't go this far with map_dirfd not being a valid file descriptor
297          * but some versions of gcc aren't smart enough to see it.
298          */
299         if (map_dirfd != -1) {
300             close_preserve_errno(map_dirfd);
301         }
302     }
303     if (!fp) {
304         return -1;
305     }
306 
307     map_fd = fileno(fp);
308     assert(map_fd != -1);
309     ret = fchmod(map_fd, 0600);
310     assert(ret == 0);
311 
312     if (credp->fc_uid != -1) {
313         uid = credp->fc_uid;
314     }
315     if (credp->fc_gid != -1) {
316         gid = credp->fc_gid;
317     }
318     if (credp->fc_mode != (mode_t)-1) {
319         mode = credp->fc_mode;
320     }
321     if (credp->fc_rdev != -1) {
322         rdev = credp->fc_rdev;
323     }
324 
325     if (uid != -1) {
326         fprintf(fp, "virtfs.uid=%d\n", uid);
327     }
328     if (gid != -1) {
329         fprintf(fp, "virtfs.gid=%d\n", gid);
330     }
331     if (mode != -1) {
332         fprintf(fp, "virtfs.mode=%d\n", mode);
333     }
334     if (rdev != -1) {
335         fprintf(fp, "virtfs.rdev=%d\n", rdev);
336     }
337     fclose(fp);
338 
339     return 0;
340 }
341 
342 static int fchmodat_nofollow(int dirfd, const char *name, mode_t mode)
343 {
344     struct stat stbuf;
345     int fd, ret;
346 
347     /* FIXME: this should be handled with fchmodat(AT_SYMLINK_NOFOLLOW).
348      * Unfortunately, the linux kernel doesn't implement it yet.
349      */
350 
351      /* First, we clear non-racing symlinks out of the way. */
352     if (qemu_fstatat(dirfd, name, &stbuf, AT_SYMLINK_NOFOLLOW)) {
353         return -1;
354     }
355     if (S_ISLNK(stbuf.st_mode)) {
356         errno = ELOOP;
357         return -1;
358     }
359 
360     fd = openat_file(dirfd, name, O_RDONLY | O_PATH_9P_UTIL | O_NOFOLLOW, 0);
361 #if O_PATH_9P_UTIL == 0
362     /* Fallback for systems that don't support O_PATH: we depend on the file
363      * being readable or writable.
364      */
365     if (fd == -1) {
366         /* In case the file is writable-only and isn't a directory. */
367         if (errno == EACCES) {
368             fd = openat_file(dirfd, name, O_WRONLY, 0);
369         }
370         if (fd == -1 && errno == EISDIR) {
371             errno = EACCES;
372         }
373     }
374     if (fd == -1) {
375         return -1;
376     }
377     ret = fchmod(fd, mode);
378 #else
379     /* Access modes are ignored when O_PATH is supported. If name is a symbolic
380      * link, O_PATH | O_NOFOLLOW causes openat(2) to return a file descriptor
381      * referring to the symbolic link.
382      */
383     if (fd == -1) {
384         return -1;
385     }
386 
387     /* Now we handle racing symlinks. */
388     ret = fstat(fd, &stbuf);
389     if (!ret) {
390         if (S_ISLNK(stbuf.st_mode)) {
391             errno = ELOOP;
392             ret = -1;
393         } else {
394             char *proc_path = g_strdup_printf("/proc/self/fd/%d", fd);
395             ret = chmod(proc_path, mode);
396             g_free(proc_path);
397         }
398     }
399 #endif
400     close_preserve_errno(fd);
401     return ret;
402 }
403 
404 static int local_set_xattrat(int dirfd, const char *path, FsCred *credp)
405 {
406     int err;
407 
408     if (credp->fc_uid != -1) {
409         uint32_t tmp_uid = cpu_to_le32(credp->fc_uid);
410         err = fsetxattrat_nofollow(dirfd, path, "user.virtfs.uid", &tmp_uid,
411                                    sizeof(uid_t), 0);
412         if (err) {
413             return err;
414         }
415     }
416     if (credp->fc_gid != -1) {
417         uint32_t tmp_gid = cpu_to_le32(credp->fc_gid);
418         err = fsetxattrat_nofollow(dirfd, path, "user.virtfs.gid", &tmp_gid,
419                                    sizeof(gid_t), 0);
420         if (err) {
421             return err;
422         }
423     }
424     if (credp->fc_mode != (mode_t)-1) {
425         uint32_t tmp_mode = cpu_to_le32(credp->fc_mode);
426         err = fsetxattrat_nofollow(dirfd, path, "user.virtfs.mode", &tmp_mode,
427                                    sizeof(mode_t), 0);
428         if (err) {
429             return err;
430         }
431     }
432     if (credp->fc_rdev != -1) {
433         uint64_t tmp_rdev = cpu_to_le64(credp->fc_rdev);
434         err = fsetxattrat_nofollow(dirfd, path, "user.virtfs.rdev", &tmp_rdev,
435                                    sizeof(dev_t), 0);
436         if (err) {
437             return err;
438         }
439     }
440     return 0;
441 }
442 
443 static int local_set_cred_passthrough(FsContext *fs_ctx, int dirfd,
444                                       const char *name, FsCred *credp)
445 {
446     if (fchownat(dirfd, name, credp->fc_uid, credp->fc_gid,
447                  AT_SYMLINK_NOFOLLOW) < 0) {
448         /*
449          * If we fail to change ownership and if we are
450          * using security model none. Ignore the error
451          */
452         if ((fs_ctx->export_flags & V9FS_SEC_MASK) != V9FS_SM_NONE) {
453             return -1;
454         }
455     }
456 
457     return fchmodat_nofollow(dirfd, name, credp->fc_mode & 07777);
458 }
459 
460 static ssize_t local_readlink(FsContext *fs_ctx, V9fsPath *fs_path,
461                               char *buf, size_t bufsz)
462 {
463     ssize_t tsize = -1;
464 
465     if ((fs_ctx->export_flags & V9FS_SM_MAPPED) ||
466         (fs_ctx->export_flags & V9FS_SM_MAPPED_FILE)) {
467         int fd;
468 
469         fd = local_open_nofollow(fs_ctx, fs_path->data, O_RDONLY, 0);
470         if (fd == -1) {
471             return -1;
472         }
473         tsize = RETRY_ON_EINTR(read(fd, (void *)buf, bufsz));
474         close_preserve_errno(fd);
475     } else if ((fs_ctx->export_flags & V9FS_SM_PASSTHROUGH) ||
476                (fs_ctx->export_flags & V9FS_SM_NONE)) {
477         char *dirpath = g_path_get_dirname(fs_path->data);
478         char *name = g_path_get_basename(fs_path->data);
479         int dirfd;
480 
481         dirfd = local_opendir_nofollow(fs_ctx, dirpath);
482         if (dirfd == -1) {
483             goto out;
484         }
485 
486         tsize = readlinkat(dirfd, name, buf, bufsz);
487         close_preserve_errno(dirfd);
488     out:
489         g_free(name);
490         g_free(dirpath);
491     }
492     return tsize;
493 }
494 
495 static int local_close(FsContext *ctx, V9fsFidOpenState *fs)
496 {
497     return close(fs->fd);
498 }
499 
500 static int local_closedir(FsContext *ctx, V9fsFidOpenState *fs)
501 {
502     return closedir(fs->dir.stream);
503 }
504 
505 static int local_open(FsContext *ctx, V9fsPath *fs_path,
506                       int flags, V9fsFidOpenState *fs)
507 {
508     int fd;
509 
510     fd = local_open_nofollow(ctx, fs_path->data, flags, 0);
511     if (fd == -1) {
512         return -1;
513     }
514     fs->fd = fd;
515     return fs->fd;
516 }
517 
518 static int local_opendir(FsContext *ctx,
519                          V9fsPath *fs_path, V9fsFidOpenState *fs)
520 {
521     int dirfd;
522     DIR *stream;
523 
524     dirfd = local_opendir_nofollow(ctx, fs_path->data);
525     if (dirfd == -1) {
526         return -1;
527     }
528 
529     stream = fdopendir(dirfd);
530     if (!stream) {
531         close(dirfd);
532         return -1;
533     }
534     fs->dir.stream = stream;
535     return 0;
536 }
537 
538 static void local_rewinddir(FsContext *ctx, V9fsFidOpenState *fs)
539 {
540     rewinddir(fs->dir.stream);
541 }
542 
543 static off_t local_telldir(FsContext *ctx, V9fsFidOpenState *fs)
544 {
545     return telldir(fs->dir.stream);
546 }
547 
548 static bool local_is_mapped_file_metadata(FsContext *fs_ctx, const char *name)
549 {
550     return
551         !strcmp(name, VIRTFS_META_DIR) || !strcmp(name, VIRTFS_META_ROOT_FILE);
552 }
553 
554 static struct dirent *local_readdir(FsContext *ctx, V9fsFidOpenState *fs)
555 {
556     struct dirent *entry;
557 
558 again:
559     entry = readdir(fs->dir.stream);
560     if (!entry) {
561         return NULL;
562     }
563 #ifdef CONFIG_DARWIN
564     int off;
565     off = telldir(fs->dir.stream);
566     /* If telldir fails, fail the entire readdir call */
567     if (off < 0) {
568         return NULL;
569     }
570     entry->d_seekoff = off;
571 #endif
572 
573     if (ctx->export_flags & V9FS_SM_MAPPED) {
574         entry->d_type = DT_UNKNOWN;
575     } else if (ctx->export_flags & V9FS_SM_MAPPED_FILE) {
576         if (local_is_mapped_file_metadata(ctx, entry->d_name)) {
577             /* skip the meta data */
578             goto again;
579         }
580         entry->d_type = DT_UNKNOWN;
581     }
582 
583     return entry;
584 }
585 
586 static void local_seekdir(FsContext *ctx, V9fsFidOpenState *fs, off_t off)
587 {
588     seekdir(fs->dir.stream, off);
589 }
590 
591 static ssize_t local_preadv(FsContext *ctx, V9fsFidOpenState *fs,
592                             const struct iovec *iov,
593                             int iovcnt, off_t offset)
594 {
595 #ifdef CONFIG_PREADV
596     return preadv(fs->fd, iov, iovcnt, offset);
597 #else
598     int err = lseek(fs->fd, offset, SEEK_SET);
599     if (err == -1) {
600         return err;
601     } else {
602         return readv(fs->fd, iov, iovcnt);
603     }
604 #endif
605 }
606 
607 static ssize_t local_pwritev(FsContext *ctx, V9fsFidOpenState *fs,
608                              const struct iovec *iov,
609                              int iovcnt, off_t offset)
610 {
611     ssize_t ret;
612 #ifdef CONFIG_PREADV
613     ret = pwritev(fs->fd, iov, iovcnt, offset);
614 #else
615     int err = lseek(fs->fd, offset, SEEK_SET);
616     if (err == -1) {
617         return err;
618     } else {
619         ret = writev(fs->fd, iov, iovcnt);
620     }
621 #endif
622 #ifdef CONFIG_SYNC_FILE_RANGE
623     if (ret > 0 && ctx->export_flags & V9FS_IMMEDIATE_WRITEOUT) {
624         /*
625          * Initiate a writeback. This is not a data integrity sync.
626          * We want to ensure that we don't leave dirty pages in the cache
627          * after write when writeout=immediate is specified.
628          */
629         sync_file_range(fs->fd, offset, ret,
630                         SYNC_FILE_RANGE_WAIT_BEFORE | SYNC_FILE_RANGE_WRITE);
631     }
632 #endif
633     return ret;
634 }
635 
636 static int local_chmod(FsContext *fs_ctx, V9fsPath *fs_path, FsCred *credp)
637 {
638     char *dirpath = g_path_get_dirname(fs_path->data);
639     char *name = g_path_get_basename(fs_path->data);
640     int ret = -1;
641     int dirfd;
642 
643     dirfd = local_opendir_nofollow(fs_ctx, dirpath);
644     if (dirfd == -1) {
645         goto out;
646     }
647 
648     if (fs_ctx->export_flags & V9FS_SM_MAPPED) {
649         ret = local_set_xattrat(dirfd, name, credp);
650     } else if (fs_ctx->export_flags & V9FS_SM_MAPPED_FILE) {
651         ret = local_set_mapped_file_attrat(dirfd, name, credp);
652     } else if (fs_ctx->export_flags & V9FS_SM_PASSTHROUGH ||
653                fs_ctx->export_flags & V9FS_SM_NONE) {
654         ret = fchmodat_nofollow(dirfd, name, credp->fc_mode);
655     }
656     close_preserve_errno(dirfd);
657 
658 out:
659     g_free(dirpath);
660     g_free(name);
661     return ret;
662 }
663 
664 static int local_mknod(FsContext *fs_ctx, V9fsPath *dir_path,
665                        const char *name, FsCred *credp)
666 {
667     int err = -1;
668     int dirfd;
669 
670     if (fs_ctx->export_flags & V9FS_SM_MAPPED_FILE &&
671         local_is_mapped_file_metadata(fs_ctx, name)) {
672         errno = EINVAL;
673         return -1;
674     }
675 
676     dirfd = local_opendir_nofollow(fs_ctx, dir_path->data);
677     if (dirfd == -1) {
678         return -1;
679     }
680 
681     if (fs_ctx->export_flags & V9FS_SM_MAPPED ||
682         fs_ctx->export_flags & V9FS_SM_MAPPED_FILE) {
683         err = qemu_mknodat(dirfd, name, fs_ctx->fmode | S_IFREG, 0);
684         if (err == -1) {
685             goto out;
686         }
687 
688         if (fs_ctx->export_flags & V9FS_SM_MAPPED) {
689             err = local_set_xattrat(dirfd, name, credp);
690         } else {
691             err = local_set_mapped_file_attrat(dirfd, name, credp);
692         }
693         if (err == -1) {
694             goto err_end;
695         }
696     } else if (fs_ctx->export_flags & V9FS_SM_PASSTHROUGH ||
697                fs_ctx->export_flags & V9FS_SM_NONE) {
698         err = qemu_mknodat(dirfd, name, credp->fc_mode, credp->fc_rdev);
699         if (err == -1) {
700             goto out;
701         }
702         err = local_set_cred_passthrough(fs_ctx, dirfd, name, credp);
703         if (err == -1) {
704             goto err_end;
705         }
706     }
707     goto out;
708 
709 err_end:
710     unlinkat_preserve_errno(dirfd, name, 0);
711 out:
712     close_preserve_errno(dirfd);
713     return err;
714 }
715 
716 static int local_mkdir(FsContext *fs_ctx, V9fsPath *dir_path,
717                        const char *name, FsCred *credp)
718 {
719     int err = -1;
720     int dirfd;
721 
722     if (fs_ctx->export_flags & V9FS_SM_MAPPED_FILE &&
723         local_is_mapped_file_metadata(fs_ctx, name)) {
724         errno = EINVAL;
725         return -1;
726     }
727 
728     dirfd = local_opendir_nofollow(fs_ctx, dir_path->data);
729     if (dirfd == -1) {
730         return -1;
731     }
732 
733     if (fs_ctx->export_flags & V9FS_SM_MAPPED ||
734         fs_ctx->export_flags & V9FS_SM_MAPPED_FILE) {
735         err = qemu_mkdirat(dirfd, name, fs_ctx->dmode);
736         if (err == -1) {
737             goto out;
738         }
739         credp->fc_mode = credp->fc_mode | S_IFDIR;
740 
741         if (fs_ctx->export_flags & V9FS_SM_MAPPED) {
742             err = local_set_xattrat(dirfd, name, credp);
743         } else {
744             err = local_set_mapped_file_attrat(dirfd, name, credp);
745         }
746         if (err == -1) {
747             goto err_end;
748         }
749     } else if (fs_ctx->export_flags & V9FS_SM_PASSTHROUGH ||
750                fs_ctx->export_flags & V9FS_SM_NONE) {
751         err = qemu_mkdirat(dirfd, name, credp->fc_mode);
752         if (err == -1) {
753             goto out;
754         }
755         err = local_set_cred_passthrough(fs_ctx, dirfd, name, credp);
756         if (err == -1) {
757             goto err_end;
758         }
759     }
760     goto out;
761 
762 err_end:
763     unlinkat_preserve_errno(dirfd, name, AT_REMOVEDIR);
764 out:
765     close_preserve_errno(dirfd);
766     return err;
767 }
768 
769 static int local_fid_fd(int fid_type, V9fsFidOpenState *fs)
770 {
771     if (fid_type == P9_FID_DIR) {
772         return dirfd(fs->dir.stream);
773     } else {
774         return fs->fd;
775     }
776 }
777 
778 static int local_fstat(FsContext *fs_ctx, int fid_type,
779                        V9fsFidOpenState *fs, struct stat *stbuf)
780 {
781     int err, fd = local_fid_fd(fid_type, fs);
782 
783     err = fstat(fd, stbuf);
784     if (err) {
785         return err;
786     }
787     if (fs_ctx->export_flags & V9FS_SM_MAPPED) {
788         /* Actual credentials are part of extended attrs */
789         uid_t tmp_uid;
790         gid_t tmp_gid;
791         mode_t tmp_mode;
792         dev_t tmp_dev;
793 
794         if (qemu_fgetxattr(fd, "user.virtfs.uid",
795                            &tmp_uid, sizeof(uid_t)) > 0) {
796             stbuf->st_uid = le32_to_cpu(tmp_uid);
797         }
798         if (qemu_fgetxattr(fd, "user.virtfs.gid",
799                            &tmp_gid, sizeof(gid_t)) > 0) {
800             stbuf->st_gid = le32_to_cpu(tmp_gid);
801         }
802         if (qemu_fgetxattr(fd, "user.virtfs.mode",
803                            &tmp_mode, sizeof(mode_t)) > 0) {
804             stbuf->st_mode = le32_to_cpu(tmp_mode);
805         }
806         if (qemu_fgetxattr(fd, "user.virtfs.rdev",
807                            &tmp_dev, sizeof(dev_t)) > 0) {
808             stbuf->st_rdev = le64_to_cpu(tmp_dev);
809         }
810     } else if (fs_ctx->export_flags & V9FS_SM_MAPPED_FILE) {
811         errno = EOPNOTSUPP;
812         return -1;
813     }
814     return err;
815 }
816 
817 static int local_open2(FsContext *fs_ctx, V9fsPath *dir_path, const char *name,
818                        int flags, FsCred *credp, V9fsFidOpenState *fs)
819 {
820     int fd = -1;
821     int err = -1;
822     int dirfd;
823 
824     if (fs_ctx->export_flags & V9FS_SM_MAPPED_FILE &&
825         local_is_mapped_file_metadata(fs_ctx, name)) {
826         errno = EINVAL;
827         return -1;
828     }
829 
830     /*
831      * Mark all the open to not follow symlinks
832      */
833     flags |= O_NOFOLLOW;
834 
835     dirfd = local_opendir_nofollow(fs_ctx, dir_path->data);
836     if (dirfd == -1) {
837         return -1;
838     }
839 
840     /* Determine the security model */
841     if (fs_ctx->export_flags & V9FS_SM_MAPPED ||
842         fs_ctx->export_flags & V9FS_SM_MAPPED_FILE) {
843         fd = openat_file(dirfd, name, flags, fs_ctx->fmode);
844         if (fd == -1) {
845             goto out;
846         }
847         credp->fc_mode = credp->fc_mode | S_IFREG;
848         if (fs_ctx->export_flags & V9FS_SM_MAPPED) {
849             /* Set client credentials in xattr */
850             err = local_set_xattrat(dirfd, name, credp);
851         } else {
852             err = local_set_mapped_file_attrat(dirfd, name, credp);
853         }
854         if (err == -1) {
855             goto err_end;
856         }
857     } else if ((fs_ctx->export_flags & V9FS_SM_PASSTHROUGH) ||
858                (fs_ctx->export_flags & V9FS_SM_NONE)) {
859         fd = openat_file(dirfd, name, flags, credp->fc_mode);
860         if (fd == -1) {
861             goto out;
862         }
863         err = local_set_cred_passthrough(fs_ctx, dirfd, name, credp);
864         if (err == -1) {
865             goto err_end;
866         }
867     }
868     err = fd;
869     fs->fd = fd;
870     goto out;
871 
872 err_end:
873     unlinkat_preserve_errno(dirfd, name,
874                             flags & O_DIRECTORY ? AT_REMOVEDIR : 0);
875     close_preserve_errno(fd);
876 out:
877     close_preserve_errno(dirfd);
878     return err;
879 }
880 
881 
882 static int local_symlink(FsContext *fs_ctx, const char *oldpath,
883                          V9fsPath *dir_path, const char *name, FsCred *credp)
884 {
885     int err = -1;
886     int dirfd;
887 
888     if (fs_ctx->export_flags & V9FS_SM_MAPPED_FILE &&
889         local_is_mapped_file_metadata(fs_ctx, name)) {
890         errno = EINVAL;
891         return -1;
892     }
893 
894     dirfd = local_opendir_nofollow(fs_ctx, dir_path->data);
895     if (dirfd == -1) {
896         return -1;
897     }
898 
899     /* Determine the security model */
900     if (fs_ctx->export_flags & V9FS_SM_MAPPED ||
901         fs_ctx->export_flags & V9FS_SM_MAPPED_FILE) {
902         int fd;
903         ssize_t oldpath_size, write_size;
904 
905         fd = openat_file(dirfd, name, O_CREAT | O_EXCL | O_RDWR,
906                          fs_ctx->fmode);
907         if (fd == -1) {
908             goto out;
909         }
910         /* Write the oldpath (target) to the file. */
911         oldpath_size = strlen(oldpath);
912         write_size = RETRY_ON_EINTR(write(fd, (void *)oldpath, oldpath_size));
913         close_preserve_errno(fd);
914 
915         if (write_size != oldpath_size) {
916             goto err_end;
917         }
918         /* Set client credentials in symlink's xattr */
919         credp->fc_mode = credp->fc_mode | S_IFLNK;
920 
921         if (fs_ctx->export_flags & V9FS_SM_MAPPED) {
922             err = local_set_xattrat(dirfd, name, credp);
923         } else {
924             err = local_set_mapped_file_attrat(dirfd, name, credp);
925         }
926         if (err == -1) {
927             goto err_end;
928         }
929     } else if (fs_ctx->export_flags & V9FS_SM_PASSTHROUGH ||
930                fs_ctx->export_flags & V9FS_SM_NONE) {
931         err = symlinkat(oldpath, dirfd, name);
932         if (err) {
933             goto out;
934         }
935         err = fchownat(dirfd, name, credp->fc_uid, credp->fc_gid,
936                        AT_SYMLINK_NOFOLLOW);
937         if (err == -1) {
938             /*
939              * If we fail to change ownership and if we are
940              * using security model none. Ignore the error
941              */
942             if ((fs_ctx->export_flags & V9FS_SEC_MASK) != V9FS_SM_NONE) {
943                 goto err_end;
944             } else {
945                 err = 0;
946             }
947         }
948     }
949     goto out;
950 
951 err_end:
952     unlinkat_preserve_errno(dirfd, name, 0);
953 out:
954     close_preserve_errno(dirfd);
955     return err;
956 }
957 
958 static int local_link(FsContext *ctx, V9fsPath *oldpath,
959                       V9fsPath *dirpath, const char *name)
960 {
961     char *odirpath = g_path_get_dirname(oldpath->data);
962     char *oname = g_path_get_basename(oldpath->data);
963     int ret = -1;
964     int odirfd, ndirfd;
965 
966     if (ctx->export_flags & V9FS_SM_MAPPED_FILE &&
967         local_is_mapped_file_metadata(ctx, name)) {
968         errno = EINVAL;
969         goto out;
970     }
971 
972     odirfd = local_opendir_nofollow(ctx, odirpath);
973     if (odirfd == -1) {
974         goto out;
975     }
976 
977     ndirfd = local_opendir_nofollow(ctx, dirpath->data);
978     if (ndirfd == -1) {
979         close_preserve_errno(odirfd);
980         goto out;
981     }
982 
983     ret = linkat(odirfd, oname, ndirfd, name, 0);
984     if (ret < 0) {
985         goto out_close;
986     }
987 
988     /* now link the virtfs_metadata files */
989     if (ctx->export_flags & V9FS_SM_MAPPED_FILE) {
990         int omap_dirfd, nmap_dirfd;
991 
992         ret = qemu_mkdirat(ndirfd, VIRTFS_META_DIR, 0700);
993         if (ret < 0 && errno != EEXIST) {
994             goto err_undo_link;
995         }
996 
997         omap_dirfd = openat_dir(odirfd, VIRTFS_META_DIR);
998         if (omap_dirfd == -1) {
999             goto err;
1000         }
1001 
1002         nmap_dirfd = openat_dir(ndirfd, VIRTFS_META_DIR);
1003         if (nmap_dirfd == -1) {
1004             close_preserve_errno(omap_dirfd);
1005             goto err;
1006         }
1007 
1008         ret = linkat(omap_dirfd, oname, nmap_dirfd, name, 0);
1009         close_preserve_errno(nmap_dirfd);
1010         close_preserve_errno(omap_dirfd);
1011         if (ret < 0 && errno != ENOENT) {
1012             goto err_undo_link;
1013         }
1014 
1015         ret = 0;
1016     }
1017     goto out_close;
1018 
1019 err:
1020     ret = -1;
1021 err_undo_link:
1022     unlinkat_preserve_errno(ndirfd, name, 0);
1023 out_close:
1024     close_preserve_errno(ndirfd);
1025     close_preserve_errno(odirfd);
1026 out:
1027     g_free(oname);
1028     g_free(odirpath);
1029     return ret;
1030 }
1031 
1032 static int local_truncate(FsContext *ctx, V9fsPath *fs_path, off_t size)
1033 {
1034     int fd, ret;
1035 
1036     fd = local_open_nofollow(ctx, fs_path->data, O_WRONLY, 0);
1037     if (fd == -1) {
1038         return -1;
1039     }
1040     ret = ftruncate(fd, size);
1041     close_preserve_errno(fd);
1042     return ret;
1043 }
1044 
1045 static int local_chown(FsContext *fs_ctx, V9fsPath *fs_path, FsCred *credp)
1046 {
1047     char *dirpath = g_path_get_dirname(fs_path->data);
1048     char *name = g_path_get_basename(fs_path->data);
1049     int ret = -1;
1050     int dirfd;
1051 
1052     dirfd = local_opendir_nofollow(fs_ctx, dirpath);
1053     if (dirfd == -1) {
1054         goto out;
1055     }
1056 
1057     if ((credp->fc_uid == -1 && credp->fc_gid == -1) ||
1058         (fs_ctx->export_flags & V9FS_SM_PASSTHROUGH) ||
1059         (fs_ctx->export_flags & V9FS_SM_NONE)) {
1060         ret = fchownat(dirfd, name, credp->fc_uid, credp->fc_gid,
1061                        AT_SYMLINK_NOFOLLOW);
1062     } else if (fs_ctx->export_flags & V9FS_SM_MAPPED) {
1063         ret = local_set_xattrat(dirfd, name, credp);
1064     } else if (fs_ctx->export_flags & V9FS_SM_MAPPED_FILE) {
1065         ret = local_set_mapped_file_attrat(dirfd, name, credp);
1066     }
1067 
1068     close_preserve_errno(dirfd);
1069 out:
1070     g_free(name);
1071     g_free(dirpath);
1072     return ret;
1073 }
1074 
1075 static int local_utimensat(FsContext *s, V9fsPath *fs_path,
1076                            const struct timespec *buf)
1077 {
1078     char *dirpath = g_path_get_dirname(fs_path->data);
1079     char *name = g_path_get_basename(fs_path->data);
1080     int dirfd, ret = -1;
1081 
1082     dirfd = local_opendir_nofollow(s, dirpath);
1083     if (dirfd == -1) {
1084         goto out;
1085     }
1086 
1087     ret = qemu_utimensat(dirfd, name, buf, AT_SYMLINK_NOFOLLOW);
1088     close_preserve_errno(dirfd);
1089 out:
1090     g_free(dirpath);
1091     g_free(name);
1092     return ret;
1093 }
1094 
1095 static int local_unlinkat_common(FsContext *ctx, int dirfd, const char *name,
1096                                  int flags)
1097 {
1098     int ret;
1099 
1100     if (ctx->export_flags & V9FS_SM_MAPPED_FILE) {
1101         int map_dirfd;
1102 
1103         /* We need to remove the metadata as well:
1104          * - the metadata directory if we're removing a directory
1105          * - the metadata file in the parent's metadata directory
1106          *
1107          * If any of these are missing (ie, ENOENT) then we're probably
1108          * trying to remove something that wasn't created in mapped-file
1109          * mode. We just ignore the error.
1110          */
1111         if (flags == AT_REMOVEDIR) {
1112             int fd;
1113 
1114             fd = openat_dir(dirfd, name);
1115             if (fd == -1) {
1116                 return -1;
1117             }
1118             ret = qemu_unlinkat(fd, VIRTFS_META_DIR, AT_REMOVEDIR);
1119             close_preserve_errno(fd);
1120             if (ret < 0 && errno != ENOENT) {
1121                 return -1;
1122             }
1123         }
1124         map_dirfd = openat_dir(dirfd, VIRTFS_META_DIR);
1125         if (map_dirfd != -1) {
1126             ret = qemu_unlinkat(map_dirfd, name, 0);
1127             close_preserve_errno(map_dirfd);
1128             if (ret < 0 && errno != ENOENT) {
1129                 return -1;
1130             }
1131         } else if (errno != ENOENT) {
1132             return -1;
1133         }
1134     }
1135 
1136     return qemu_unlinkat(dirfd, name, flags);
1137 }
1138 
1139 static int local_remove(FsContext *ctx, const char *path)
1140 {
1141     struct stat stbuf;
1142     char *dirpath = g_path_get_dirname(path);
1143     char *name = g_path_get_basename(path);
1144     int flags = 0;
1145     int dirfd;
1146     int err = -1;
1147 
1148     dirfd = local_opendir_nofollow(ctx, dirpath);
1149     if (dirfd == -1) {
1150         goto out;
1151     }
1152 
1153     if (qemu_fstatat(dirfd, name, &stbuf, AT_SYMLINK_NOFOLLOW) < 0) {
1154         goto err_out;
1155     }
1156 
1157     if (S_ISDIR(stbuf.st_mode)) {
1158         flags |= AT_REMOVEDIR;
1159     }
1160 
1161     err = local_unlinkat_common(ctx, dirfd, name, flags);
1162 err_out:
1163     close_preserve_errno(dirfd);
1164 out:
1165     g_free(name);
1166     g_free(dirpath);
1167     return err;
1168 }
1169 
1170 static int local_fsync(FsContext *ctx, int fid_type,
1171                        V9fsFidOpenState *fs, int datasync)
1172 {
1173     int fd = local_fid_fd(fid_type, fs);
1174 
1175     if (datasync) {
1176         return qemu_fdatasync(fd);
1177     } else {
1178         return fsync(fd);
1179     }
1180 }
1181 
1182 static int local_statfs(FsContext *s, V9fsPath *fs_path, struct statfs *stbuf)
1183 {
1184     int fd, ret;
1185 
1186     fd = local_open_nofollow(s, fs_path->data, O_RDONLY, 0);
1187     if (fd == -1) {
1188         return -1;
1189     }
1190     ret = fstatfs(fd, stbuf);
1191     close_preserve_errno(fd);
1192     return ret;
1193 }
1194 
1195 static ssize_t local_lgetxattr(FsContext *ctx, V9fsPath *fs_path,
1196                                const char *name, void *value, size_t size)
1197 {
1198     char *path = fs_path->data;
1199 
1200     return v9fs_get_xattr(ctx, path, name, value, size);
1201 }
1202 
1203 static ssize_t local_llistxattr(FsContext *ctx, V9fsPath *fs_path,
1204                                 void *value, size_t size)
1205 {
1206     char *path = fs_path->data;
1207 
1208     return v9fs_list_xattr(ctx, path, value, size);
1209 }
1210 
1211 static int local_lsetxattr(FsContext *ctx, V9fsPath *fs_path, const char *name,
1212                            void *value, size_t size, int flags)
1213 {
1214     char *path = fs_path->data;
1215 
1216     return v9fs_set_xattr(ctx, path, name, value, size, flags);
1217 }
1218 
1219 static int local_lremovexattr(FsContext *ctx, V9fsPath *fs_path,
1220                               const char *name)
1221 {
1222     char *path = fs_path->data;
1223 
1224     return v9fs_remove_xattr(ctx, path, name);
1225 }
1226 
1227 static int local_name_to_path(FsContext *ctx, V9fsPath *dir_path,
1228                               const char *name, V9fsPath *target)
1229 {
1230     if (ctx->export_flags & V9FS_SM_MAPPED_FILE &&
1231         local_is_mapped_file_metadata(ctx, name)) {
1232         errno = EINVAL;
1233         return -1;
1234     }
1235 
1236     if (dir_path) {
1237         if (!strcmp(name, ".")) {
1238             /* "." relative to "foo/bar" is "foo/bar" */
1239             v9fs_path_copy(target, dir_path);
1240         } else if (!strcmp(name, "..")) {
1241             if (!strcmp(dir_path->data, ".")) {
1242                 /* ".." relative to the root is "." */
1243                 v9fs_path_sprintf(target, ".");
1244             } else {
1245                 char *tmp = g_path_get_dirname(dir_path->data);
1246                 /* Symbolic links are resolved by the client. We can assume
1247                  * that ".." relative to "foo/bar" is equivalent to "foo"
1248                  */
1249                 v9fs_path_sprintf(target, "%s", tmp);
1250                 g_free(tmp);
1251             }
1252         } else {
1253             assert(!strchr(name, '/'));
1254             v9fs_path_sprintf(target, "%s/%s", dir_path->data, name);
1255         }
1256     } else if (!strcmp(name, "/") || !strcmp(name, ".") ||
1257                !strcmp(name, "..")) {
1258             /* This is the root fid */
1259         v9fs_path_sprintf(target, ".");
1260     } else {
1261         assert(!strchr(name, '/'));
1262         v9fs_path_sprintf(target, "./%s", name);
1263     }
1264     return 0;
1265 }
1266 
1267 static int local_renameat(FsContext *ctx, V9fsPath *olddir,
1268                           const char *old_name, V9fsPath *newdir,
1269                           const char *new_name)
1270 {
1271     int ret;
1272     int odirfd, ndirfd;
1273 
1274     if (ctx->export_flags & V9FS_SM_MAPPED_FILE &&
1275         (local_is_mapped_file_metadata(ctx, old_name) ||
1276          local_is_mapped_file_metadata(ctx, new_name))) {
1277         errno = EINVAL;
1278         return -1;
1279     }
1280 
1281     odirfd = local_opendir_nofollow(ctx, olddir->data);
1282     if (odirfd == -1) {
1283         return -1;
1284     }
1285 
1286     ndirfd = local_opendir_nofollow(ctx, newdir->data);
1287     if (ndirfd == -1) {
1288         close_preserve_errno(odirfd);
1289         return -1;
1290     }
1291 
1292     ret = qemu_renameat(odirfd, old_name, ndirfd, new_name);
1293     if (ret < 0) {
1294         goto out;
1295     }
1296 
1297     if (ctx->export_flags & V9FS_SM_MAPPED_FILE) {
1298         int omap_dirfd, nmap_dirfd;
1299 
1300         ret = qemu_mkdirat(ndirfd, VIRTFS_META_DIR, 0700);
1301         if (ret < 0 && errno != EEXIST) {
1302             goto err_undo_rename;
1303         }
1304 
1305         omap_dirfd = openat_dir(odirfd, VIRTFS_META_DIR);
1306         if (omap_dirfd == -1) {
1307             goto err;
1308         }
1309 
1310         nmap_dirfd = openat_dir(ndirfd, VIRTFS_META_DIR);
1311         if (nmap_dirfd == -1) {
1312             close_preserve_errno(omap_dirfd);
1313             goto err;
1314         }
1315 
1316         /* rename the .virtfs_metadata files */
1317         ret = qemu_renameat(omap_dirfd, old_name, nmap_dirfd, new_name);
1318         close_preserve_errno(nmap_dirfd);
1319         close_preserve_errno(omap_dirfd);
1320         if (ret < 0 && errno != ENOENT) {
1321             goto err_undo_rename;
1322         }
1323 
1324         ret = 0;
1325     }
1326     goto out;
1327 
1328 err:
1329     ret = -1;
1330 err_undo_rename:
1331     renameat_preserve_errno(ndirfd, new_name, odirfd, old_name);
1332 out:
1333     close_preserve_errno(ndirfd);
1334     close_preserve_errno(odirfd);
1335     return ret;
1336 }
1337 
1338 static void v9fs_path_init_dirname(V9fsPath *path, const char *str)
1339 {
1340     path->data = g_path_get_dirname(str);
1341     path->size = strlen(path->data) + 1;
1342 }
1343 
1344 static int local_rename(FsContext *ctx, const char *oldpath,
1345                         const char *newpath)
1346 {
1347     int err;
1348     char *oname = g_path_get_basename(oldpath);
1349     char *nname = g_path_get_basename(newpath);
1350     V9fsPath olddir, newdir;
1351 
1352     v9fs_path_init_dirname(&olddir, oldpath);
1353     v9fs_path_init_dirname(&newdir, newpath);
1354 
1355     err = local_renameat(ctx, &olddir, oname, &newdir, nname);
1356 
1357     v9fs_path_free(&newdir);
1358     v9fs_path_free(&olddir);
1359     g_free(nname);
1360     g_free(oname);
1361 
1362     return err;
1363 }
1364 
1365 static int local_unlinkat(FsContext *ctx, V9fsPath *dir,
1366                           const char *name, int flags)
1367 {
1368     int ret;
1369     int dirfd;
1370 
1371     if (ctx->export_flags & V9FS_SM_MAPPED_FILE &&
1372         local_is_mapped_file_metadata(ctx, name)) {
1373         errno = EINVAL;
1374         return -1;
1375     }
1376 
1377     dirfd = local_opendir_nofollow(ctx, dir->data);
1378     if (dirfd == -1) {
1379         return -1;
1380     }
1381 
1382     ret = local_unlinkat_common(ctx, dirfd, name, flags);
1383     close_preserve_errno(dirfd);
1384     return ret;
1385 }
1386 
1387 #ifdef FS_IOC_GETVERSION
1388 static int local_ioc_getversion(FsContext *ctx, V9fsPath *path,
1389                                 mode_t st_mode, uint64_t *st_gen)
1390 {
1391     int err;
1392     V9fsFidOpenState fid_open;
1393 
1394     /*
1395      * Do not try to open special files like device nodes, fifos etc
1396      * We can get fd for regular files and directories only
1397      */
1398     if (!S_ISREG(st_mode) && !S_ISDIR(st_mode)) {
1399         errno = ENOTTY;
1400         return -1;
1401     }
1402     err = local_open(ctx, path, O_RDONLY, &fid_open);
1403     if (err < 0) {
1404         return err;
1405     }
1406     err = ioctl(fid_open.fd, FS_IOC_GETVERSION, st_gen);
1407     local_close(ctx, &fid_open);
1408     return err;
1409 }
1410 #endif
1411 
1412 static int local_ioc_getversion_init(FsContext *ctx, LocalData *data, Error **errp)
1413 {
1414 #ifdef FS_IOC_GETVERSION
1415     struct statfs stbuf;
1416 
1417     /*
1418      * use ioc_getversion only if the ioctl is defined
1419      */
1420     if (fstatfs(data->mountfd, &stbuf) < 0) {
1421         error_setg_errno(errp, errno,
1422                          "failed to stat file system at '%s'", ctx->fs_root);
1423         return -1;
1424     }
1425     switch (stbuf.f_type) {
1426     case EXT2_SUPER_MAGIC:
1427     case BTRFS_SUPER_MAGIC:
1428     case REISERFS_SUPER_MAGIC:
1429     case XFS_SUPER_MAGIC:
1430         ctx->exops.get_st_gen = local_ioc_getversion;
1431         break;
1432     }
1433 #endif
1434     return 0;
1435 }
1436 
1437 static int local_init(FsContext *ctx, Error **errp)
1438 {
1439     LocalData *data = g_malloc(sizeof(*data));
1440 
1441     data->mountfd = open(ctx->fs_root, O_DIRECTORY | O_RDONLY);
1442     if (data->mountfd == -1) {
1443         error_setg_errno(errp, errno, "failed to open '%s'", ctx->fs_root);
1444         goto err;
1445     }
1446 
1447     if (local_ioc_getversion_init(ctx, data, errp) < 0) {
1448         close(data->mountfd);
1449         goto err;
1450     }
1451 
1452     if (ctx->export_flags & V9FS_SM_PASSTHROUGH) {
1453         ctx->xops = passthrough_xattr_ops;
1454     } else if (ctx->export_flags & V9FS_SM_MAPPED) {
1455         ctx->xops = mapped_xattr_ops;
1456     } else if (ctx->export_flags & V9FS_SM_NONE) {
1457         ctx->xops = none_xattr_ops;
1458     } else if (ctx->export_flags & V9FS_SM_MAPPED_FILE) {
1459         /*
1460          * xattr operation for mapped-file and passthrough
1461          * remain same.
1462          */
1463         ctx->xops = passthrough_xattr_ops;
1464     }
1465     ctx->export_flags |= V9FS_PATHNAME_FSCONTEXT;
1466 
1467     ctx->private = data;
1468     return 0;
1469 
1470 err:
1471     g_free(data);
1472     return -1;
1473 }
1474 
1475 static void local_cleanup(FsContext *ctx)
1476 {
1477     LocalData *data = ctx->private;
1478 
1479     if (!data) {
1480         return;
1481     }
1482 
1483     close(data->mountfd);
1484     g_free(data);
1485 }
1486 
1487 static void error_append_security_model_hint(Error *const *errp)
1488 {
1489     error_append_hint(errp, "Valid options are: security_model="
1490                       "[passthrough|mapped-xattr|mapped-file|none]\n");
1491 }
1492 
1493 static int local_parse_opts(QemuOpts *opts, FsDriverEntry *fse, Error **errp)
1494 {
1495     ERRP_GUARD();
1496     const char *sec_model = qemu_opt_get(opts, "security_model");
1497     const char *path = qemu_opt_get(opts, "path");
1498     const char *multidevs = qemu_opt_get(opts, "multidevs");
1499 
1500     if (!sec_model) {
1501         error_setg(errp, "security_model property not set");
1502         error_append_security_model_hint(errp);
1503         return -1;
1504     }
1505 
1506     if (!strcmp(sec_model, "passthrough")) {
1507         fse->export_flags |= V9FS_SM_PASSTHROUGH;
1508     } else if (!strcmp(sec_model, "mapped") ||
1509                !strcmp(sec_model, "mapped-xattr")) {
1510         fse->export_flags |= V9FS_SM_MAPPED;
1511     } else if (!strcmp(sec_model, "none")) {
1512         fse->export_flags |= V9FS_SM_NONE;
1513     } else if (!strcmp(sec_model, "mapped-file")) {
1514         fse->export_flags |= V9FS_SM_MAPPED_FILE;
1515     } else {
1516         error_setg(errp, "invalid security_model property '%s'", sec_model);
1517         error_append_security_model_hint(errp);
1518         return -1;
1519     }
1520 
1521     if (multidevs) {
1522         if (!strcmp(multidevs, "remap")) {
1523             fse->export_flags &= ~V9FS_FORBID_MULTIDEVS;
1524             fse->export_flags |= V9FS_REMAP_INODES;
1525         } else if (!strcmp(multidevs, "forbid")) {
1526             fse->export_flags &= ~V9FS_REMAP_INODES;
1527             fse->export_flags |= V9FS_FORBID_MULTIDEVS;
1528         } else if (!strcmp(multidevs, "warn")) {
1529             fse->export_flags &= ~V9FS_FORBID_MULTIDEVS;
1530             fse->export_flags &= ~V9FS_REMAP_INODES;
1531         } else {
1532             error_setg(errp, "invalid multidevs property '%s'",
1533                        multidevs);
1534             error_append_hint(errp, "Valid options are: multidevs="
1535                               "[remap|forbid|warn]\n");
1536             return -1;
1537         }
1538     } else {
1539         fse->export_flags &= ~V9FS_FORBID_MULTIDEVS;
1540         fse->export_flags |= V9FS_REMAP_INODES;
1541     }
1542 
1543     if (!path) {
1544         error_setg(errp, "path property not set");
1545         return -1;
1546     }
1547 
1548     if (fsdev_throttle_parse_opts(opts, &fse->fst, errp)) {
1549         error_prepend(errp, "invalid throttle configuration: ");
1550         return -1;
1551     }
1552 
1553     if (fse->export_flags & V9FS_SM_MAPPED ||
1554         fse->export_flags & V9FS_SM_MAPPED_FILE) {
1555         fse->fmode =
1556             qemu_opt_get_number(opts, "fmode", SM_LOCAL_MODE_BITS) & 0777;
1557         fse->dmode =
1558             qemu_opt_get_number(opts, "dmode", SM_LOCAL_DIR_MODE_BITS) & 0777;
1559     } else {
1560         if (qemu_opt_find(opts, "fmode")) {
1561             error_setg(errp, "fmode is only valid for mapped security modes");
1562             return -1;
1563         }
1564         if (qemu_opt_find(opts, "dmode")) {
1565             error_setg(errp, "dmode is only valid for mapped security modes");
1566             return -1;
1567         }
1568     }
1569 
1570     fse->path = g_strdup(path);
1571 
1572     return 0;
1573 }
1574 
1575 FileOperations local_ops = {
1576     .parse_opts = local_parse_opts,
1577     .init  = local_init,
1578     .cleanup = local_cleanup,
1579     .lstat = local_lstat,
1580     .readlink = local_readlink,
1581     .close = local_close,
1582     .closedir = local_closedir,
1583     .open = local_open,
1584     .opendir = local_opendir,
1585     .rewinddir = local_rewinddir,
1586     .telldir = local_telldir,
1587     .readdir = local_readdir,
1588     .seekdir = local_seekdir,
1589     .preadv = local_preadv,
1590     .pwritev = local_pwritev,
1591     .chmod = local_chmod,
1592     .mknod = local_mknod,
1593     .mkdir = local_mkdir,
1594     .fstat = local_fstat,
1595     .open2 = local_open2,
1596     .symlink = local_symlink,
1597     .link = local_link,
1598     .truncate = local_truncate,
1599     .rename = local_rename,
1600     .chown = local_chown,
1601     .utimensat = local_utimensat,
1602     .remove = local_remove,
1603     .fsync = local_fsync,
1604     .statfs = local_statfs,
1605     .lgetxattr = local_lgetxattr,
1606     .llistxattr = local_llistxattr,
1607     .lsetxattr = local_lsetxattr,
1608     .lremovexattr = local_lremovexattr,
1609     .name_to_path = local_name_to_path,
1610     .renameat  = local_renameat,
1611     .unlinkat = local_unlinkat,
1612 };
1613