1 // SPDX-License-Identifier: GPL-2.0-or-later
3 * eCryptfs: Linux filesystem encryption layer
4 * This is where eCryptfs coordinates the symmetric encryption and
5 * decryption of the file data as it passes between the lower
6 * encrypted file and the upper decrypted file.
8 * Copyright (C) 1997-2003 Erez Zadok
9 * Copyright (C) 2001-2003 Stony Brook University
10 * Copyright (C) 2004-2007 International Business Machines Corp.
11 * Author(s): Michael A. Halcrow <mahalcro@us.ibm.com>
14 #include <linux/pagemap.h>
15 #include <linux/writeback.h>
16 #include <linux/page-flags.h>
17 #include <linux/mount.h>
18 #include <linux/file.h>
19 #include <linux/scatterlist.h>
20 #include <linux/slab.h>
21 #include <linux/xattr.h>
22 #include <asm/unaligned.h>
23 #include "ecryptfs_kernel.h"
26 * ecryptfs_get_locked_page
28 * Get one page from cache or lower f/s, return error otherwise.
30 * Returns locked and up-to-date page (if ok), with increased
33 struct page
*ecryptfs_get_locked_page(struct inode
*inode
, loff_t index
)
35 struct page
*page
= read_mapping_page(inode
->i_mapping
, index
, NULL
);
43 * @page: Page that is locked before this call is made
44 * @wbc: Write-back control structure
46 * Returns zero on success; non-zero otherwise
48 * This is where we encrypt the data and pass the encrypted data to
49 * the lower filesystem. In OpenPGP-compatible mode, we operate on
50 * entire underlying packets.
52 static int ecryptfs_writepage(struct page
*page
, struct writeback_control
*wbc
)
56 rc
= ecryptfs_encrypt_page(page
);
58 ecryptfs_printk(KERN_WARNING
, "Error encrypting "
59 "page (upper index [0x%.16lx])\n", page
->index
);
60 ClearPageUptodate(page
);
63 SetPageUptodate(page
);
69 static void strip_xattr_flag(char *page_virt
,
70 struct ecryptfs_crypt_stat
*crypt_stat
)
72 if (crypt_stat
->flags
& ECRYPTFS_METADATA_IN_XATTR
) {
75 crypt_stat
->flags
&= ~ECRYPTFS_METADATA_IN_XATTR
;
76 ecryptfs_write_crypt_stat_flags(page_virt
, crypt_stat
,
78 crypt_stat
->flags
|= ECRYPTFS_METADATA_IN_XATTR
;
84 * Octets 0-7: Unencrypted file size (big-endian)
85 * Octets 8-15: eCryptfs special marker
87 * Octet 16: File format version number (between 0 and 255)
88 * Octets 17-18: Reserved
89 * Octet 19: Bit 1 (lsb): Reserved
92 * Octets 20-23: Header extent size (big-endian)
93 * Octets 24-25: Number of header extents at front of file
95 * Octet 26: Begin RFC 2440 authentication token packet set
99 * ecryptfs_copy_up_encrypted_with_header
100 * @page: Sort of a ``virtual'' representation of the encrypted lower
101 * file. The actual lower file does not have the metadata in
102 * the header. This is locked.
103 * @crypt_stat: The eCryptfs inode's cryptographic context
105 * The ``view'' is the version of the file that userspace winds up
106 * seeing, with the header information inserted.
109 ecryptfs_copy_up_encrypted_with_header(struct page
*page
,
110 struct ecryptfs_crypt_stat
*crypt_stat
)
112 loff_t extent_num_in_page
= 0;
113 loff_t num_extents_per_page
= (PAGE_SIZE
114 / crypt_stat
->extent_size
);
117 while (extent_num_in_page
< num_extents_per_page
) {
118 loff_t view_extent_num
= ((((loff_t
)page
->index
)
119 * num_extents_per_page
)
120 + extent_num_in_page
);
121 size_t num_header_extents_at_front
=
122 (crypt_stat
->metadata_size
/ crypt_stat
->extent_size
);
124 if (view_extent_num
< num_header_extents_at_front
) {
125 /* This is a header extent */
128 page_virt
= kmap_local_page(page
);
129 memset(page_virt
, 0, PAGE_SIZE
);
130 /* TODO: Support more than one header extent */
131 if (view_extent_num
== 0) {
134 rc
= ecryptfs_read_xattr_region(
135 page_virt
, page
->mapping
->host
);
136 strip_xattr_flag(page_virt
+ 16, crypt_stat
);
137 ecryptfs_write_header_metadata(page_virt
+ 20,
141 kunmap_local(page_virt
);
142 flush_dcache_page(page
);
144 printk(KERN_ERR
"%s: Error reading xattr "
145 "region; rc = [%d]\n", __func__
, rc
);
149 /* This is an encrypted data extent */
150 loff_t lower_offset
=
151 ((view_extent_num
* crypt_stat
->extent_size
)
152 - crypt_stat
->metadata_size
);
154 rc
= ecryptfs_read_lower_page_segment(
155 page
, (lower_offset
>> PAGE_SHIFT
),
156 (lower_offset
& ~PAGE_MASK
),
157 crypt_stat
->extent_size
, page
->mapping
->host
);
159 printk(KERN_ERR
"%s: Error attempting to read "
160 "extent at offset [%lld] in the lower "
161 "file; rc = [%d]\n", __func__
,
166 extent_num_in_page
++;
173 * ecryptfs_read_folio
174 * @file: An eCryptfs file
175 * @folio: Folio from eCryptfs inode mapping into which to stick the read data
177 * Read in a folio, decrypting if necessary.
179 * Returns zero on success; non-zero on error.
181 static int ecryptfs_read_folio(struct file
*file
, struct folio
*folio
)
183 struct page
*page
= &folio
->page
;
184 struct ecryptfs_crypt_stat
*crypt_stat
=
185 &ecryptfs_inode_to_private(page
->mapping
->host
)->crypt_stat
;
188 if (!crypt_stat
|| !(crypt_stat
->flags
& ECRYPTFS_ENCRYPTED
)) {
189 rc
= ecryptfs_read_lower_page_segment(page
, page
->index
, 0,
191 page
->mapping
->host
);
192 } else if (crypt_stat
->flags
& ECRYPTFS_VIEW_AS_ENCRYPTED
) {
193 if (crypt_stat
->flags
& ECRYPTFS_METADATA_IN_XATTR
) {
194 rc
= ecryptfs_copy_up_encrypted_with_header(page
,
197 printk(KERN_ERR
"%s: Error attempting to copy "
198 "the encrypted content from the lower "
199 "file whilst inserting the metadata "
200 "from the xattr into the header; rc = "
201 "[%d]\n", __func__
, rc
);
206 rc
= ecryptfs_read_lower_page_segment(
207 page
, page
->index
, 0, PAGE_SIZE
,
208 page
->mapping
->host
);
210 printk(KERN_ERR
"Error reading page; rc = "
216 rc
= ecryptfs_decrypt_page(page
);
218 ecryptfs_printk(KERN_ERR
, "Error decrypting page; "
225 ClearPageUptodate(page
);
227 SetPageUptodate(page
);
228 ecryptfs_printk(KERN_DEBUG
, "Unlocking page with index = [0x%.16lx]\n",
235 * Called with lower inode mutex held.
237 static int fill_zeros_to_end_of_page(struct folio
*folio
, unsigned int to
)
239 struct inode
*inode
= folio
->mapping
->host
;
240 int end_byte_in_page
;
242 if ((i_size_read(inode
) / PAGE_SIZE
) != folio
->index
)
244 end_byte_in_page
= i_size_read(inode
) % PAGE_SIZE
;
245 if (to
> end_byte_in_page
)
246 end_byte_in_page
= to
;
247 folio_zero_segment(folio
, end_byte_in_page
, PAGE_SIZE
);
253 * ecryptfs_write_begin
254 * @file: The eCryptfs file
255 * @mapping: The eCryptfs object
256 * @pos: The file offset at which to start writing
257 * @len: Length of the write
258 * @foliop: Pointer to return the folio
259 * @fsdata: Pointer to return fs data (unused)
261 * This function must zero any hole we create
263 * Returns zero on success; non-zero otherwise
265 static int ecryptfs_write_begin(struct file
*file
,
266 struct address_space
*mapping
,
267 loff_t pos
, unsigned len
,
268 struct folio
**foliop
, void **fsdata
)
270 pgoff_t index
= pos
>> PAGE_SHIFT
;
272 loff_t prev_page_end_size
;
275 folio
= __filemap_get_folio(mapping
, index
, FGP_WRITEBEGIN
,
276 mapping_gfp_mask(mapping
));
278 return PTR_ERR(folio
);
281 prev_page_end_size
= ((loff_t
)index
<< PAGE_SHIFT
);
282 if (!folio_test_uptodate(folio
)) {
283 struct ecryptfs_crypt_stat
*crypt_stat
=
284 &ecryptfs_inode_to_private(mapping
->host
)->crypt_stat
;
286 if (!(crypt_stat
->flags
& ECRYPTFS_ENCRYPTED
)) {
287 rc
= ecryptfs_read_lower_page_segment(
288 &folio
->page
, index
, 0, PAGE_SIZE
, mapping
->host
);
290 printk(KERN_ERR
"%s: Error attempting to read "
291 "lower page segment; rc = [%d]\n",
293 folio_clear_uptodate(folio
);
296 folio_mark_uptodate(folio
);
297 } else if (crypt_stat
->flags
& ECRYPTFS_VIEW_AS_ENCRYPTED
) {
298 if (crypt_stat
->flags
& ECRYPTFS_METADATA_IN_XATTR
) {
299 rc
= ecryptfs_copy_up_encrypted_with_header(
300 &folio
->page
, crypt_stat
);
302 printk(KERN_ERR
"%s: Error attempting "
303 "to copy the encrypted content "
304 "from the lower file whilst "
305 "inserting the metadata from "
306 "the xattr into the header; rc "
307 "= [%d]\n", __func__
, rc
);
308 folio_clear_uptodate(folio
);
311 folio_mark_uptodate(folio
);
313 rc
= ecryptfs_read_lower_page_segment(
314 &folio
->page
, index
, 0, PAGE_SIZE
,
317 printk(KERN_ERR
"%s: Error reading "
320 folio_clear_uptodate(folio
);
323 folio_mark_uptodate(folio
);
326 if (prev_page_end_size
327 >= i_size_read(mapping
->host
)) {
328 folio_zero_range(folio
, 0, PAGE_SIZE
);
329 folio_mark_uptodate(folio
);
330 } else if (len
< PAGE_SIZE
) {
331 rc
= ecryptfs_decrypt_page(&folio
->page
);
333 printk(KERN_ERR
"%s: Error decrypting "
334 "page at index [%ld]; "
336 __func__
, folio
->index
, rc
);
337 folio_clear_uptodate(folio
);
340 folio_mark_uptodate(folio
);
344 /* If creating a page or more of holes, zero them out via truncate.
345 * Note, this will increase i_size. */
347 if (prev_page_end_size
> i_size_read(mapping
->host
)) {
348 rc
= ecryptfs_truncate(file
->f_path
.dentry
,
351 printk(KERN_ERR
"%s: Error on attempt to "
352 "truncate to (higher) offset [%lld];"
353 " rc = [%d]\n", __func__
,
354 prev_page_end_size
, rc
);
359 /* Writing to a new page, and creating a small hole from start
360 * of page? Zero it out. */
361 if ((i_size_read(mapping
->host
) == prev_page_end_size
)
363 folio_zero_range(folio
, 0, PAGE_SIZE
);
373 * ecryptfs_write_inode_size_to_header
375 * Writes the lower file size to the first 8 bytes of the header.
377 * Returns zero on success; non-zero on error.
379 static int ecryptfs_write_inode_size_to_header(struct inode
*ecryptfs_inode
)
381 char *file_size_virt
;
384 file_size_virt
= kmalloc(sizeof(u64
), GFP_KERNEL
);
385 if (!file_size_virt
) {
389 put_unaligned_be64(i_size_read(ecryptfs_inode
), file_size_virt
);
390 rc
= ecryptfs_write_lower(ecryptfs_inode
, file_size_virt
, 0,
392 kfree(file_size_virt
);
394 printk(KERN_ERR
"%s: Error writing file size to header; "
395 "rc = [%d]\n", __func__
, rc
);
402 struct kmem_cache
*ecryptfs_xattr_cache
;
404 static int ecryptfs_write_inode_size_to_xattr(struct inode
*ecryptfs_inode
)
408 struct dentry
*lower_dentry
=
409 ecryptfs_inode_to_private(ecryptfs_inode
)->lower_file
->f_path
.dentry
;
410 struct inode
*lower_inode
= d_inode(lower_dentry
);
413 if (!(lower_inode
->i_opflags
& IOP_XATTR
)) {
415 "No support for setting xattr in lower filesystem\n");
419 xattr_virt
= kmem_cache_alloc(ecryptfs_xattr_cache
, GFP_KERNEL
);
424 inode_lock(lower_inode
);
425 size
= __vfs_getxattr(lower_dentry
, lower_inode
, ECRYPTFS_XATTR_NAME
,
426 xattr_virt
, PAGE_SIZE
);
429 put_unaligned_be64(i_size_read(ecryptfs_inode
), xattr_virt
);
430 rc
= __vfs_setxattr(&nop_mnt_idmap
, lower_dentry
, lower_inode
,
431 ECRYPTFS_XATTR_NAME
, xattr_virt
, size
, 0);
432 inode_unlock(lower_inode
);
434 printk(KERN_ERR
"Error whilst attempting to write inode size "
435 "to lower file xattr; rc = [%d]\n", rc
);
436 kmem_cache_free(ecryptfs_xattr_cache
, xattr_virt
);
441 int ecryptfs_write_inode_size_to_metadata(struct inode
*ecryptfs_inode
)
443 struct ecryptfs_crypt_stat
*crypt_stat
;
445 crypt_stat
= &ecryptfs_inode_to_private(ecryptfs_inode
)->crypt_stat
;
446 BUG_ON(!(crypt_stat
->flags
& ECRYPTFS_ENCRYPTED
));
447 if (crypt_stat
->flags
& ECRYPTFS_METADATA_IN_XATTR
)
448 return ecryptfs_write_inode_size_to_xattr(ecryptfs_inode
);
450 return ecryptfs_write_inode_size_to_header(ecryptfs_inode
);
455 * @file: The eCryptfs file object
456 * @mapping: The eCryptfs object
457 * @pos: The file position
458 * @len: The length of the data (unused)
459 * @copied: The amount of data copied
460 * @folio: The eCryptfs folio
461 * @fsdata: The fsdata (unused)
463 static int ecryptfs_write_end(struct file
*file
,
464 struct address_space
*mapping
,
465 loff_t pos
, unsigned len
, unsigned copied
,
466 struct folio
*folio
, void *fsdata
)
468 pgoff_t index
= pos
>> PAGE_SHIFT
;
469 unsigned from
= pos
& (PAGE_SIZE
- 1);
470 unsigned to
= from
+ copied
;
471 struct inode
*ecryptfs_inode
= mapping
->host
;
472 struct ecryptfs_crypt_stat
*crypt_stat
=
473 &ecryptfs_inode_to_private(ecryptfs_inode
)->crypt_stat
;
476 ecryptfs_printk(KERN_DEBUG
, "Calling fill_zeros_to_end_of_page"
477 "(page w/ index = [0x%.16lx], to = [%d])\n", index
, to
);
478 if (!(crypt_stat
->flags
& ECRYPTFS_ENCRYPTED
)) {
479 rc
= ecryptfs_write_lower_page_segment(ecryptfs_inode
,
480 &folio
->page
, 0, to
);
483 fsstack_copy_inode_size(ecryptfs_inode
,
484 ecryptfs_inode_to_lower(ecryptfs_inode
));
488 if (!folio_test_uptodate(folio
)) {
489 if (copied
< PAGE_SIZE
) {
493 folio_mark_uptodate(folio
);
495 /* Fills in zeros if 'to' goes beyond inode size */
496 rc
= fill_zeros_to_end_of_page(folio
, to
);
498 ecryptfs_printk(KERN_WARNING
, "Error attempting to fill "
499 "zeros in page with index = [0x%.16lx]\n", index
);
502 rc
= ecryptfs_encrypt_page(&folio
->page
);
504 ecryptfs_printk(KERN_WARNING
, "Error encrypting page (upper "
505 "index [0x%.16lx])\n", index
);
508 if (pos
+ copied
> i_size_read(ecryptfs_inode
)) {
509 i_size_write(ecryptfs_inode
, pos
+ copied
);
510 ecryptfs_printk(KERN_DEBUG
, "Expanded file size to "
512 (unsigned long long)i_size_read(ecryptfs_inode
));
514 rc
= ecryptfs_write_inode_size_to_metadata(ecryptfs_inode
);
516 printk(KERN_ERR
"Error writing inode size to metadata; "
526 static sector_t
ecryptfs_bmap(struct address_space
*mapping
, sector_t block
)
528 struct inode
*lower_inode
= ecryptfs_inode_to_lower(mapping
->host
);
529 int ret
= bmap(lower_inode
, &block
);
536 #include <linux/buffer_head.h>
538 const struct address_space_operations ecryptfs_aops
= {
540 * XXX: This is pretty broken for multiple reasons: ecryptfs does not
541 * actually use buffer_heads, and ecryptfs will crash without
542 * CONFIG_BLOCK. But it matches the behavior before the default for
543 * address_space_operations without the ->dirty_folio method was
544 * cleaned up, so this is the best we can do without maintainer
548 .dirty_folio
= block_dirty_folio
,
549 .invalidate_folio
= block_invalidate_folio
,
551 .writepage
= ecryptfs_writepage
,
552 .read_folio
= ecryptfs_read_folio
,
553 .write_begin
= ecryptfs_write_begin
,
554 .write_end
= ecryptfs_write_end
,
555 .bmap
= ecryptfs_bmap
,