scsi: replace the fmode_t argument to scsi_cmd_allowed with a simple bool
Instead of passing a fmode_t and only checking it for FMODE_WRITE, pass a bool open_for_write to prepare for callers that won't have the fmode_t. Signed-off-by: Christoph Hellwig <hch@lst.de> Reviewed-by: Martin K. Petersen <martin.petersen@oracle.com> Reviewed-by: Hannes Reinecke <hare@suse.de> Acked-by: Christian Brauner <brauner@kernel.org> Link: https://lore.kernel.org/r/20230608110258.189493-19-hch@lst.de Signed-off-by: Jens Axboe <axboe@kernel.dk>
This commit is contained in:
parent
81b1fb7d17
commit
5f4eb9d541
@ -42,7 +42,7 @@ static int scsi_bsg_sg_io_fn(struct request_queue *q, struct sg_io_v4 *hdr,
|
||||
if (copy_from_user(scmd->cmnd, uptr64(hdr->request), scmd->cmd_len))
|
||||
goto out_put_request;
|
||||
ret = -EPERM;
|
||||
if (!scsi_cmd_allowed(scmd->cmnd, mode))
|
||||
if (!scsi_cmd_allowed(scmd->cmnd, mode & FMODE_WRITE))
|
||||
goto out_put_request;
|
||||
|
||||
ret = 0;
|
||||
|
@ -248,7 +248,7 @@ static int scsi_send_start_stop(struct scsi_device *sdev, int data)
|
||||
* Only a subset of commands are allowed for unprivileged users. Commands used
|
||||
* to format the media, update the firmware, etc. are not permitted.
|
||||
*/
|
||||
bool scsi_cmd_allowed(unsigned char *cmd, fmode_t mode)
|
||||
bool scsi_cmd_allowed(unsigned char *cmd, bool open_for_write)
|
||||
{
|
||||
/* root can do any command. */
|
||||
if (capable(CAP_SYS_RAWIO))
|
||||
@ -338,7 +338,7 @@ bool scsi_cmd_allowed(unsigned char *cmd, fmode_t mode)
|
||||
case GPCMD_SET_READ_AHEAD:
|
||||
/* ZBC */
|
||||
case ZBC_OUT:
|
||||
return (mode & FMODE_WRITE);
|
||||
return open_for_write;
|
||||
default:
|
||||
return false;
|
||||
}
|
||||
@ -354,7 +354,7 @@ static int scsi_fill_sghdr_rq(struct scsi_device *sdev, struct request *rq,
|
||||
return -EMSGSIZE;
|
||||
if (copy_from_user(scmd->cmnd, hdr->cmdp, hdr->cmd_len))
|
||||
return -EFAULT;
|
||||
if (!scsi_cmd_allowed(scmd->cmnd, mode))
|
||||
if (!scsi_cmd_allowed(scmd->cmnd, mode & FMODE_WRITE))
|
||||
return -EPERM;
|
||||
scmd->cmd_len = hdr->cmd_len;
|
||||
|
||||
@ -554,7 +554,7 @@ static int sg_scsi_ioctl(struct request_queue *q, fmode_t mode,
|
||||
goto error;
|
||||
|
||||
err = -EPERM;
|
||||
if (!scsi_cmd_allowed(scmd->cmnd, mode))
|
||||
if (!scsi_cmd_allowed(scmd->cmnd, mode & FMODE_WRITE))
|
||||
goto error;
|
||||
|
||||
/* default. possible overridden later */
|
||||
|
@ -237,7 +237,7 @@ static int sg_allow_access(struct file *filp, unsigned char *cmd)
|
||||
|
||||
if (sfp->parentdp->device->type == TYPE_SCANNER)
|
||||
return 0;
|
||||
if (!scsi_cmd_allowed(cmd, filp->f_mode))
|
||||
if (!scsi_cmd_allowed(cmd, filp->f_mode & FMODE_WRITE))
|
||||
return -EPERM;
|
||||
return 0;
|
||||
}
|
||||
|
@ -49,7 +49,7 @@ int scsi_ioctl(struct scsi_device *sdev, fmode_t mode, int cmd,
|
||||
void __user *arg);
|
||||
int get_sg_io_hdr(struct sg_io_hdr *hdr, const void __user *argp);
|
||||
int put_sg_io_hdr(const struct sg_io_hdr *hdr, void __user *argp);
|
||||
bool scsi_cmd_allowed(unsigned char *cmd, fmode_t mode);
|
||||
bool scsi_cmd_allowed(unsigned char *cmd, bool open_for_write);
|
||||
|
||||
#endif /* __KERNEL__ */
|
||||
#endif /* _SCSI_IOCTL_H */
|
||||
|
Loading…
x
Reference in New Issue
Block a user