1 // SPDX-License-Identifier: GPL-2.0-only
5 * (C) Copyright IBM Corporation 2005.
6 * Author : Ram Pai (linuxram@us.ibm.com)
8 #include <linux/mnt_namespace.h>
9 #include <linux/mount.h>
11 #include <linux/nsproxy.h>
12 #include <uapi/linux/mount.h>
16 /* return the next shared peer mount of @p */
17 static inline struct mount
*next_peer(struct mount
*p
)
19 return list_entry(p
->mnt_share
.next
, struct mount
, mnt_share
);
22 static inline struct mount
*first_slave(struct mount
*p
)
24 return list_entry(p
->mnt_slave_list
.next
, struct mount
, mnt_slave
);
27 static inline struct mount
*last_slave(struct mount
*p
)
29 return list_entry(p
->mnt_slave_list
.prev
, struct mount
, mnt_slave
);
32 static inline struct mount
*next_slave(struct mount
*p
)
34 return list_entry(p
->mnt_slave
.next
, struct mount
, mnt_slave
);
37 static struct mount
*get_peer_under_root(struct mount
*mnt
,
38 struct mnt_namespace
*ns
,
39 const struct path
*root
)
41 struct mount
*m
= mnt
;
44 /* Check the namespace first for optimization */
45 if (m
->mnt_ns
== ns
&& is_path_reachable(m
, m
->mnt
.mnt_root
, root
))
55 * Get ID of closest dominating peer group having a representative
56 * under the given root.
58 * Caller must hold namespace_sem
60 int get_dominating_id(struct mount
*mnt
, const struct path
*root
)
64 for (m
= mnt
->mnt_master
; m
!= NULL
; m
= m
->mnt_master
) {
65 struct mount
*d
= get_peer_under_root(m
, mnt
->mnt_ns
, root
);
67 return d
->mnt_group_id
;
73 static int do_make_slave(struct mount
*mnt
)
75 struct mount
*master
, *slave_mnt
;
77 if (list_empty(&mnt
->mnt_share
)) {
78 if (IS_MNT_SHARED(mnt
)) {
79 mnt_release_group_id(mnt
);
80 CLEAR_MNT_SHARED(mnt
);
82 master
= mnt
->mnt_master
;
84 struct list_head
*p
= &mnt
->mnt_slave_list
;
85 while (!list_empty(p
)) {
86 slave_mnt
= list_first_entry(p
,
87 struct mount
, mnt_slave
);
88 list_del_init(&slave_mnt
->mnt_slave
);
89 slave_mnt
->mnt_master
= NULL
;
96 * slave 'mnt' to a peer mount that has the
97 * same root dentry. If none is available then
98 * slave it to anything that is available.
100 for (m
= master
= next_peer(mnt
); m
!= mnt
; m
= next_peer(m
)) {
101 if (m
->mnt
.mnt_root
== mnt
->mnt
.mnt_root
) {
106 list_del_init(&mnt
->mnt_share
);
107 mnt
->mnt_group_id
= 0;
108 CLEAR_MNT_SHARED(mnt
);
110 list_for_each_entry(slave_mnt
, &mnt
->mnt_slave_list
, mnt_slave
)
111 slave_mnt
->mnt_master
= master
;
112 list_move(&mnt
->mnt_slave
, &master
->mnt_slave_list
);
113 list_splice(&mnt
->mnt_slave_list
, master
->mnt_slave_list
.prev
);
114 INIT_LIST_HEAD(&mnt
->mnt_slave_list
);
115 mnt
->mnt_master
= master
;
120 * vfsmount lock must be held for write
122 void change_mnt_propagation(struct mount
*mnt
, int type
)
124 if (type
== MS_SHARED
) {
129 if (type
!= MS_SLAVE
) {
130 list_del_init(&mnt
->mnt_slave
);
131 mnt
->mnt_master
= NULL
;
132 if (type
== MS_UNBINDABLE
)
133 mnt
->mnt
.mnt_flags
|= MNT_UNBINDABLE
;
135 mnt
->mnt
.mnt_flags
&= ~MNT_UNBINDABLE
;
140 * get the next mount in the propagation tree.
141 * @m: the mount seen last
142 * @origin: the original mount from where the tree walk initiated
144 * Note that peer groups form contiguous segments of slave lists.
145 * We rely on that in get_source() to be able to find out if
146 * vfsmount found while iterating with propagation_next() is
147 * a peer of one we'd found earlier.
149 static struct mount
*propagation_next(struct mount
*m
,
150 struct mount
*origin
)
152 /* are there any slaves of this mount? */
153 if (!IS_MNT_NEW(m
) && !list_empty(&m
->mnt_slave_list
))
154 return first_slave(m
);
157 struct mount
*master
= m
->mnt_master
;
159 if (master
== origin
->mnt_master
) {
160 struct mount
*next
= next_peer(m
);
161 return (next
== origin
) ? NULL
: next
;
162 } else if (m
->mnt_slave
.next
!= &master
->mnt_slave_list
)
163 return next_slave(m
);
170 static struct mount
*skip_propagation_subtree(struct mount
*m
,
171 struct mount
*origin
)
174 * Advance m such that propagation_next will not return
177 if (!IS_MNT_NEW(m
) && !list_empty(&m
->mnt_slave_list
))
183 static struct mount
*next_group(struct mount
*m
, struct mount
*origin
)
188 if (!IS_MNT_NEW(m
) && !list_empty(&m
->mnt_slave_list
))
189 return first_slave(m
);
191 if (m
->mnt_group_id
== origin
->mnt_group_id
) {
194 } else if (m
->mnt_slave
.next
!= &next
->mnt_slave
)
198 /* m is the last peer */
200 struct mount
*master
= m
->mnt_master
;
201 if (m
->mnt_slave
.next
!= &master
->mnt_slave_list
)
202 return next_slave(m
);
203 m
= next_peer(master
);
204 if (master
->mnt_group_id
== origin
->mnt_group_id
)
206 if (master
->mnt_slave
.next
== &m
->mnt_slave
)
215 /* all accesses are serialized by namespace_sem */
216 static struct mount
*last_dest
, *first_source
, *last_source
, *dest_master
;
217 static struct hlist_head
*list
;
219 static inline bool peers(const struct mount
*m1
, const struct mount
*m2
)
221 return m1
->mnt_group_id
== m2
->mnt_group_id
&& m1
->mnt_group_id
;
224 static int propagate_one(struct mount
*m
, struct mountpoint
*dest_mp
)
228 /* skip ones added by this propagate_mnt() */
231 /* skip if mountpoint isn't covered by it */
232 if (!is_subdir(dest_mp
->m_dentry
, m
->mnt
.mnt_root
))
234 if (peers(m
, last_dest
)) {
235 type
= CL_MAKE_SHARED
;
239 for (n
= m
; ; n
= p
) {
241 if (p
== dest_master
|| IS_MNT_MARKED(p
))
245 struct mount
*parent
= last_source
->mnt_parent
;
246 if (peers(last_source
, first_source
))
248 done
= parent
->mnt_master
== p
;
249 if (done
&& peers(n
, parent
))
251 last_source
= last_source
->mnt_master
;
255 /* beginning of peer group among the slaves? */
256 if (IS_MNT_SHARED(m
))
257 type
|= CL_MAKE_SHARED
;
260 child
= copy_tree(last_source
, last_source
->mnt
.mnt_root
, type
);
262 return PTR_ERR(child
);
263 read_seqlock_excl(&mount_lock
);
264 mnt_set_mountpoint(m
, dest_mp
, child
);
265 if (m
->mnt_master
!= dest_master
)
266 SET_MNT_MARK(m
->mnt_master
);
267 read_sequnlock_excl(&mount_lock
);
270 hlist_add_head(&child
->mnt_hash
, list
);
271 return count_mounts(m
->mnt_ns
, child
);
275 * mount 'source_mnt' under the destination 'dest_mnt' at
276 * dentry 'dest_dentry'. And propagate that mount to
277 * all the peer and slave mounts of 'dest_mnt'.
278 * Link all the new mounts into a propagation tree headed at
279 * source_mnt. Also link all the new mounts using ->mnt_list
280 * headed at source_mnt's ->mnt_list
282 * @dest_mnt: destination mount.
283 * @dest_dentry: destination dentry.
284 * @source_mnt: source mount.
285 * @tree_list : list of heads of trees to be attached.
287 int propagate_mnt(struct mount
*dest_mnt
, struct mountpoint
*dest_mp
,
288 struct mount
*source_mnt
, struct hlist_head
*tree_list
)
294 * we don't want to bother passing tons of arguments to
295 * propagate_one(); everything is serialized by namespace_sem,
296 * so globals will do just fine.
298 last_dest
= dest_mnt
;
299 first_source
= source_mnt
;
300 last_source
= source_mnt
;
302 dest_master
= dest_mnt
->mnt_master
;
304 /* all peers of dest_mnt, except dest_mnt itself */
305 for (n
= next_peer(dest_mnt
); n
!= dest_mnt
; n
= next_peer(n
)) {
306 ret
= propagate_one(n
, dest_mp
);
311 /* all slave groups */
312 for (m
= next_group(dest_mnt
, dest_mnt
); m
;
313 m
= next_group(m
, dest_mnt
)) {
314 /* everything in that slave group */
317 ret
= propagate_one(n
, dest_mp
);
324 read_seqlock_excl(&mount_lock
);
325 hlist_for_each_entry(n
, tree_list
, mnt_hash
) {
327 if (m
->mnt_master
!= dest_mnt
->mnt_master
)
328 CLEAR_MNT_MARK(m
->mnt_master
);
330 read_sequnlock_excl(&mount_lock
);
334 static struct mount
*find_topper(struct mount
*mnt
)
336 /* If there is exactly one mount covering mnt completely return it. */
339 if (!list_is_singular(&mnt
->mnt_mounts
))
342 child
= list_first_entry(&mnt
->mnt_mounts
, struct mount
, mnt_child
);
343 if (child
->mnt_mountpoint
!= mnt
->mnt
.mnt_root
)
350 * return true if the refcount is greater than count
352 static inline int do_refcount_check(struct mount
*mnt
, int count
)
354 return mnt_get_count(mnt
) > count
;
358 * propagation_would_overmount - check whether propagation from @from
359 * would overmount @to
360 * @from: shared mount
361 * @to: mount to check
362 * @mp: future mountpoint of @to on @from
364 * If @from propagates mounts to @to, @from and @to must either be peers
365 * or one of the masters in the hierarchy of masters of @to must be a
368 * If the root of the @to mount is equal to the future mountpoint @mp of
369 * the @to mount on @from then @to will be overmounted by whatever is
372 * Context: This function expects namespace_lock() to be held and that
374 * Return: If @from overmounts @to, true is returned, false if not.
376 bool propagation_would_overmount(const struct mount
*from
,
377 const struct mount
*to
,
378 const struct mountpoint
*mp
)
380 if (!IS_MNT_SHARED(from
))
386 if (to
->mnt
.mnt_root
!= mp
->m_dentry
)
389 for (const struct mount
*m
= to
; m
; m
= m
->mnt_master
) {
398 * check if the mount 'mnt' can be unmounted successfully.
399 * @mnt: the mount to be checked for unmount
400 * NOTE: unmounting 'mnt' would naturally propagate to all
401 * other mounts its parent propagates to.
402 * Check if any of these mounts that **do not have submounts**
403 * have more references than 'refcnt'. If so return busy.
405 * vfsmount lock must be held for write
407 int propagate_mount_busy(struct mount
*mnt
, int refcnt
)
409 struct mount
*m
, *child
, *topper
;
410 struct mount
*parent
= mnt
->mnt_parent
;
413 return do_refcount_check(mnt
, refcnt
);
416 * quickly check if the current mount can be unmounted.
417 * If not, we don't have to go checking for all other
420 if (!list_empty(&mnt
->mnt_mounts
) || do_refcount_check(mnt
, refcnt
))
423 for (m
= propagation_next(parent
, parent
); m
;
424 m
= propagation_next(m
, parent
)) {
426 child
= __lookup_mnt(&m
->mnt
, mnt
->mnt_mountpoint
);
430 /* Is there exactly one mount on the child that covers
431 * it completely whose reference should be ignored?
433 topper
= find_topper(child
);
436 else if (!list_empty(&child
->mnt_mounts
))
439 if (do_refcount_check(child
, count
))
446 * Clear MNT_LOCKED when it can be shown to be safe.
448 * mount_lock lock must be held for write
450 void propagate_mount_unlock(struct mount
*mnt
)
452 struct mount
*parent
= mnt
->mnt_parent
;
453 struct mount
*m
, *child
;
455 BUG_ON(parent
== mnt
);
457 for (m
= propagation_next(parent
, parent
); m
;
458 m
= propagation_next(m
, parent
)) {
459 child
= __lookup_mnt(&m
->mnt
, mnt
->mnt_mountpoint
);
461 child
->mnt
.mnt_flags
&= ~MNT_LOCKED
;
465 static void umount_one(struct mount
*mnt
, struct list_head
*to_umount
)
468 mnt
->mnt
.mnt_flags
|= MNT_UMOUNT
;
469 list_del_init(&mnt
->mnt_child
);
470 list_del_init(&mnt
->mnt_umounting
);
471 move_from_ns(mnt
, to_umount
);
475 * NOTE: unmounting 'mnt' naturally propagates to all other mounts its
476 * parent propagates to.
478 static bool __propagate_umount(struct mount
*mnt
,
479 struct list_head
*to_umount
,
480 struct list_head
*to_restore
)
482 bool progress
= false;
486 * The state of the parent won't change if this mount is
487 * already unmounted or marked as without children.
489 if (mnt
->mnt
.mnt_flags
& (MNT_UMOUNT
| MNT_MARKED
))
492 /* Verify topper is the only grandchild that has not been
493 * speculatively unmounted.
495 list_for_each_entry(child
, &mnt
->mnt_mounts
, mnt_child
) {
496 if (child
->mnt_mountpoint
== mnt
->mnt
.mnt_root
)
498 if (!list_empty(&child
->mnt_umounting
) && IS_MNT_MARKED(child
))
500 /* Found a mounted child */
504 /* Mark mounts that can be unmounted if not locked */
508 /* If a mount is without children and not locked umount it. */
509 if (!IS_MNT_LOCKED(mnt
)) {
510 umount_one(mnt
, to_umount
);
513 list_move_tail(&mnt
->mnt_umounting
, to_restore
);
519 static void umount_list(struct list_head
*to_umount
,
520 struct list_head
*to_restore
)
522 struct mount
*mnt
, *child
, *tmp
;
523 list_for_each_entry(mnt
, to_umount
, mnt_list
) {
524 list_for_each_entry_safe(child
, tmp
, &mnt
->mnt_mounts
, mnt_child
) {
526 if (child
->mnt_mountpoint
== mnt
->mnt
.mnt_root
)
527 list_move_tail(&child
->mnt_umounting
, to_restore
);
529 umount_one(child
, to_umount
);
534 static void restore_mounts(struct list_head
*to_restore
)
536 /* Restore mounts to a clean working state */
537 while (!list_empty(to_restore
)) {
538 struct mount
*mnt
, *parent
;
539 struct mountpoint
*mp
;
541 mnt
= list_first_entry(to_restore
, struct mount
, mnt_umounting
);
543 list_del_init(&mnt
->mnt_umounting
);
545 /* Should this mount be reparented? */
547 parent
= mnt
->mnt_parent
;
548 while (parent
->mnt
.mnt_flags
& MNT_UMOUNT
) {
550 parent
= parent
->mnt_parent
;
552 if (parent
!= mnt
->mnt_parent
)
553 mnt_change_mountpoint(parent
, mp
, mnt
);
557 static void cleanup_umount_visitations(struct list_head
*visited
)
559 while (!list_empty(visited
)) {
561 list_first_entry(visited
, struct mount
, mnt_umounting
);
562 list_del_init(&mnt
->mnt_umounting
);
567 * collect all mounts that receive propagation from the mount in @list,
568 * and return these additional mounts in the same list.
569 * @list: the list of mounts to be unmounted.
571 * vfsmount lock must be held for write
573 int propagate_umount(struct list_head
*list
)
576 LIST_HEAD(to_restore
);
577 LIST_HEAD(to_umount
);
580 /* Find candidates for unmounting */
581 list_for_each_entry_reverse(mnt
, list
, mnt_list
) {
582 struct mount
*parent
= mnt
->mnt_parent
;
586 * If this mount has already been visited it is known that it's
587 * entire peer group and all of their slaves in the propagation
588 * tree for the mountpoint has already been visited and there is
589 * no need to visit them again.
591 if (!list_empty(&mnt
->mnt_umounting
))
594 list_add_tail(&mnt
->mnt_umounting
, &visited
);
595 for (m
= propagation_next(parent
, parent
); m
;
596 m
= propagation_next(m
, parent
)) {
597 struct mount
*child
= __lookup_mnt(&m
->mnt
,
598 mnt
->mnt_mountpoint
);
602 if (!list_empty(&child
->mnt_umounting
)) {
604 * If the child has already been visited it is
605 * know that it's entire peer group and all of
606 * their slaves in the propgation tree for the
607 * mountpoint has already been visited and there
608 * is no need to visit this subtree again.
610 m
= skip_propagation_subtree(m
, parent
);
612 } else if (child
->mnt
.mnt_flags
& MNT_UMOUNT
) {
614 * We have come accross an partially unmounted
615 * mount in list that has not been visited yet.
616 * Remember it has been visited and continue
617 * about our merry way.
619 list_add_tail(&child
->mnt_umounting
, &visited
);
623 /* Check the child and parents while progress is made */
624 while (__propagate_umount(child
,
625 &to_umount
, &to_restore
)) {
626 /* Is the parent a umount candidate? */
627 child
= child
->mnt_parent
;
628 if (list_empty(&child
->mnt_umounting
))
634 umount_list(&to_umount
, &to_restore
);
635 restore_mounts(&to_restore
);
636 cleanup_umount_visitations(&visited
);
637 list_splice_tail(&to_umount
, list
);