2 * SPDX-License-Identifier: BSD-2-Clause
4 * Copyright (c) 2008 Dag-Erling Smørgrav
5 * Copyright (c) 2008 Marshall Kirk McKusick
8 * Redistribution and use in source and binary forms, with or without
9 * modification, are permitted provided that the following conditions
11 * 1. Redistributions of source code must retain the above copyright
12 * notice, this list of conditions and the following disclaimer
13 * in this position and unchanged.
14 * 2. Redistributions in binary form must reproduce the above copyright
15 * notice, this list of conditions and the following disclaimer in the
16 * documentation and/or other materials provided with the distribution.
18 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
19 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
20 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
21 * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
22 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
23 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
24 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
25 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
26 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
27 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
31 #include <sys/types.h>
32 #include <sys/endian.h>
33 #include <sys/mount.h>
36 #include <ufs/ufs/quota.h>
51 int fd; /* -1 means using quotactl for access */
52 int accmode; /* access mode */
53 int wordsize; /* 32-bit or 64-bit limits */
54 int quotatype; /* USRQUOTA or GRPQUOTA */
55 dev_t dev; /* device */
56 char fsname[MAXPATHLEN + 1]; /* mount point of filesystem */
57 char qfname[MAXPATHLEN + 1]; /* quota file if not using quotactl */
60 static const char *qfextension[] = INITQFNAMES;
63 * Check to see if a particular quota is to be enabled.
66 hasquota(struct fstab *fs, int type, char *qfnamep, int qfbufsize)
72 static char initname, usrname[100], grpname[100];
75 * 1) we only need one of these
76 * 2) fstab may specify a different filename
79 (void)snprintf(usrname, sizeof(usrname), "%s%s",
80 qfextension[USRQUOTA], QUOTAFILENAME);
81 (void)snprintf(grpname, sizeof(grpname), "%s%s",
82 qfextension[GRPQUOTA], QUOTAFILENAME);
85 strcpy(buf, fs->fs_mntops);
86 for (opt = strtok(buf, ","); opt; opt = strtok(NULL, ",")) {
87 if ((cp = strchr(opt, '=')))
89 if (type == USRQUOTA && strcmp(opt, usrname) == 0)
91 if (type == GRPQUOTA && strcmp(opt, grpname) == 0)
97 * Ensure that the filesystem is mounted.
99 if (statfs(fs->fs_file, &sfb) != 0 ||
100 strcmp(fs->fs_file, sfb.f_mntonname)) {
104 strlcpy(qfnamep, cp, qfbufsize);
106 (void)snprintf(qfnamep, qfbufsize, "%s/%s.%s", fs->fs_file,
107 QUOTAFILENAME, qfextension[type]);
113 quota_open(struct fstab *fs, int quotatype, int openflags)
115 struct quotafile *qf;
119 int qcmd, serrno = 0;
122 if ((qf = calloc(1, sizeof(*qf))) == NULL)
125 qf->quotatype = quotatype;
126 strlcpy(qf->fsname, fs->fs_file, sizeof(qf->fsname));
127 if (stat(qf->fsname, &st) != 0)
130 qcmd = QCMD(Q_GETQUOTASIZE, quotatype);
131 ufs = strcmp(fs->fs_vfstype, "ufs") == 0;
133 * On UFS, hasquota() fills in qf->qfname. But we only care about
134 * this for UFS. So we need to call hasquota() for UFS, first.
137 serrno = hasquota(fs, quotatype, qf->qfname,
140 if (quotactl(qf->fsname, qcmd, 0, &qf->wordsize) == 0)
145 } else if (serrno == 0) {
149 qf->accmode = openflags & O_ACCMODE;
150 if ((qf->fd = open(qf->qfname, qf->accmode|O_CLOEXEC)) < 0 &&
151 (openflags & O_CREAT) != O_CREAT)
153 /* File open worked, so process it */
156 switch (read(qf->fd, &dqh, sizeof(dqh))) {
160 if (strcmp(dqh.dqh_magic, Q_DQHDR64_MAGIC) != 0) {
161 /* no magic, assume 32 bits */
165 if (be32toh(dqh.dqh_version) != Q_DQHDR64_VERSION ||
166 be32toh(dqh.dqh_hdrlen) != sizeof(struct dqhdr64) ||
167 be32toh(dqh.dqh_reclen) != sizeof(struct dqblk64)) {
168 /* correct magic, wrong version / lengths */
180 /* open failed, but O_CREAT was specified, so create a new file */
181 if ((qf->fd = open(qf->qfname, O_RDWR|O_CREAT|O_TRUNC|O_CLOEXEC, 0)) <
185 memset(&dqh, 0, sizeof(dqh));
186 memcpy(dqh.dqh_magic, Q_DQHDR64_MAGIC, sizeof(dqh.dqh_magic));
187 dqh.dqh_version = htobe32(Q_DQHDR64_VERSION);
188 dqh.dqh_hdrlen = htobe32(sizeof(struct dqhdr64));
189 dqh.dqh_reclen = htobe32(sizeof(struct dqblk64));
190 if (write(qf->fd, &dqh, sizeof(dqh)) != sizeof(dqh)) {
191 /* it was one we created ourselves */
195 grp = getgrnam(QUOTAGROUP);
196 fchown(qf->fd, 0, grp ? grp->gr_gid : 0);
197 fchmod(qf->fd, 0640);
201 /* did we have an open file? */
210 quota_close(struct quotafile *qf)
219 quota_on(struct quotafile *qf)
223 qcmd = QCMD(Q_QUOTAON, qf->quotatype);
224 return (quotactl(qf->fsname, qcmd, 0, qf->qfname));
228 quota_off(struct quotafile *qf)
231 return (quotactl(qf->fsname, QCMD(Q_QUOTAOFF, qf->quotatype), 0, 0));
235 quota_fsname(const struct quotafile *qf)
242 quota_qfname(const struct quotafile *qf)
249 quota_check_path(const struct quotafile *qf, const char *path)
253 if (stat(path, &st) == -1)
255 return (st.st_dev == qf->dev);
259 quota_maxid(struct quotafile *qf)
264 if (stat(qf->qfname, &st) < 0)
266 switch (qf->wordsize) {
268 maxid = st.st_size / sizeof(struct dqblk32) - 1;
271 maxid = st.st_size / sizeof(struct dqblk64) - 2;
277 return (maxid > 0 ? maxid : 0);
281 quota_read32(struct quotafile *qf, struct dqblk *dqb, int id)
283 struct dqblk32 dqb32;
286 off = id * sizeof(struct dqblk32);
287 if (lseek(qf->fd, off, SEEK_SET) == -1)
289 switch (read(qf->fd, &dqb32, sizeof(dqb32))) {
291 memset(dqb, 0, sizeof(*dqb));
294 dqb->dqb_bhardlimit = dqb32.dqb_bhardlimit;
295 dqb->dqb_bsoftlimit = dqb32.dqb_bsoftlimit;
296 dqb->dqb_curblocks = dqb32.dqb_curblocks;
297 dqb->dqb_ihardlimit = dqb32.dqb_ihardlimit;
298 dqb->dqb_isoftlimit = dqb32.dqb_isoftlimit;
299 dqb->dqb_curinodes = dqb32.dqb_curinodes;
300 dqb->dqb_btime = dqb32.dqb_btime;
301 dqb->dqb_itime = dqb32.dqb_itime;
309 quota_read64(struct quotafile *qf, struct dqblk *dqb, int id)
311 struct dqblk64 dqb64;
314 off = sizeof(struct dqhdr64) + id * sizeof(struct dqblk64);
315 if (lseek(qf->fd, off, SEEK_SET) == -1)
317 switch (read(qf->fd, &dqb64, sizeof(dqb64))) {
319 memset(dqb, 0, sizeof(*dqb));
322 dqb->dqb_bhardlimit = be64toh(dqb64.dqb_bhardlimit);
323 dqb->dqb_bsoftlimit = be64toh(dqb64.dqb_bsoftlimit);
324 dqb->dqb_curblocks = be64toh(dqb64.dqb_curblocks);
325 dqb->dqb_ihardlimit = be64toh(dqb64.dqb_ihardlimit);
326 dqb->dqb_isoftlimit = be64toh(dqb64.dqb_isoftlimit);
327 dqb->dqb_curinodes = be64toh(dqb64.dqb_curinodes);
328 dqb->dqb_btime = be64toh(dqb64.dqb_btime);
329 dqb->dqb_itime = be64toh(dqb64.dqb_itime);
337 quota_read(struct quotafile *qf, struct dqblk *dqb, int id)
342 qcmd = QCMD(Q_GETQUOTA, qf->quotatype);
343 return (quotactl(qf->fsname, qcmd, id, dqb));
345 switch (qf->wordsize) {
347 return (quota_read32(qf, dqb, id));
349 return (quota_read64(qf, dqb, id));
357 #define CLIP32(u64) ((u64) > UINT32_MAX ? UINT32_MAX : (uint32_t)(u64))
360 quota_write32(struct quotafile *qf, const struct dqblk *dqb, int id)
362 struct dqblk32 dqb32;
365 dqb32.dqb_bhardlimit = CLIP32(dqb->dqb_bhardlimit);
366 dqb32.dqb_bsoftlimit = CLIP32(dqb->dqb_bsoftlimit);
367 dqb32.dqb_curblocks = CLIP32(dqb->dqb_curblocks);
368 dqb32.dqb_ihardlimit = CLIP32(dqb->dqb_ihardlimit);
369 dqb32.dqb_isoftlimit = CLIP32(dqb->dqb_isoftlimit);
370 dqb32.dqb_curinodes = CLIP32(dqb->dqb_curinodes);
371 dqb32.dqb_btime = CLIP32(dqb->dqb_btime);
372 dqb32.dqb_itime = CLIP32(dqb->dqb_itime);
374 off = id * sizeof(struct dqblk32);
375 if (lseek(qf->fd, off, SEEK_SET) == -1)
377 if (write(qf->fd, &dqb32, sizeof(dqb32)) == sizeof(dqb32))
383 quota_write64(struct quotafile *qf, const struct dqblk *dqb, int id)
385 struct dqblk64 dqb64;
388 dqb64.dqb_bhardlimit = htobe64(dqb->dqb_bhardlimit);
389 dqb64.dqb_bsoftlimit = htobe64(dqb->dqb_bsoftlimit);
390 dqb64.dqb_curblocks = htobe64(dqb->dqb_curblocks);
391 dqb64.dqb_ihardlimit = htobe64(dqb->dqb_ihardlimit);
392 dqb64.dqb_isoftlimit = htobe64(dqb->dqb_isoftlimit);
393 dqb64.dqb_curinodes = htobe64(dqb->dqb_curinodes);
394 dqb64.dqb_btime = htobe64(dqb->dqb_btime);
395 dqb64.dqb_itime = htobe64(dqb->dqb_itime);
397 off = sizeof(struct dqhdr64) + id * sizeof(struct dqblk64);
398 if (lseek(qf->fd, off, SEEK_SET) == -1)
400 if (write(qf->fd, &dqb64, sizeof(dqb64)) == sizeof(dqb64))
406 quota_write_usage(struct quotafile *qf, struct dqblk *dqb, int id)
412 qcmd = QCMD(Q_SETUSE, qf->quotatype);
413 return (quotactl(qf->fsname, qcmd, id, dqb));
416 * Have to do read-modify-write of quota in file.
418 if ((qf->accmode & O_RDWR) != O_RDWR) {
422 if (quota_read(qf, &dqbuf, id) != 0)
425 * Reset time limit if have a soft limit and were
426 * previously under it, but are now over it.
428 if (dqbuf.dqb_bsoftlimit && id != 0 &&
429 dqbuf.dqb_curblocks < dqbuf.dqb_bsoftlimit &&
430 dqb->dqb_curblocks >= dqbuf.dqb_bsoftlimit)
432 if (dqbuf.dqb_isoftlimit && id != 0 &&
433 dqbuf.dqb_curinodes < dqbuf.dqb_isoftlimit &&
434 dqb->dqb_curinodes >= dqbuf.dqb_isoftlimit)
436 dqbuf.dqb_curinodes = dqb->dqb_curinodes;
437 dqbuf.dqb_curblocks = dqb->dqb_curblocks;
441 switch (qf->wordsize) {
443 return (quota_write32(qf, &dqbuf, id));
445 return (quota_write64(qf, &dqbuf, id));
454 quota_write_limits(struct quotafile *qf, struct dqblk *dqb, int id)
460 qcmd = QCMD(Q_SETQUOTA, qf->quotatype);
461 return (quotactl(qf->fsname, qcmd, id, dqb));
464 * Have to do read-modify-write of quota in file.
466 if ((qf->accmode & O_RDWR) != O_RDWR) {
470 if (quota_read(qf, &dqbuf, id) != 0)
473 * Reset time limit if have a soft limit and were
474 * previously under it, but are now over it
475 * or if there previously was no soft limit, but
476 * now have one and are over it.
478 if (dqbuf.dqb_bsoftlimit && id != 0 &&
479 dqbuf.dqb_curblocks < dqbuf.dqb_bsoftlimit &&
480 dqbuf.dqb_curblocks >= dqb->dqb_bsoftlimit)
482 if (dqbuf.dqb_bsoftlimit == 0 && id != 0 &&
483 dqb->dqb_bsoftlimit > 0 &&
484 dqbuf.dqb_curblocks >= dqb->dqb_bsoftlimit)
486 if (dqbuf.dqb_isoftlimit && id != 0 &&
487 dqbuf.dqb_curinodes < dqbuf.dqb_isoftlimit &&
488 dqbuf.dqb_curinodes >= dqb->dqb_isoftlimit)
490 if (dqbuf.dqb_isoftlimit == 0 && id !=0 &&
491 dqb->dqb_isoftlimit > 0 &&
492 dqbuf.dqb_curinodes >= dqb->dqb_isoftlimit)
494 dqb->dqb_curinodes = dqbuf.dqb_curinodes;
495 dqb->dqb_curblocks = dqbuf.dqb_curblocks;
499 switch (qf->wordsize) {
501 return (quota_write32(qf, dqb, id));
503 return (quota_write64(qf, dqb, id));
512 * Convert a quota file from one format to another.
515 quota_convert(struct quotafile *qf, int wordsize)
517 struct quotafile *newqf;
521 int serrno, maxid, id, fd;
524 * Quotas must not be active and quotafile must be open
525 * for reading and writing.
527 if ((qf->accmode & O_RDWR) != O_RDWR || qf->fd == -1) {
531 if ((wordsize != 32 && wordsize != 64) ||
532 wordsize == qf->wordsize) {
536 maxid = quota_maxid(qf);
537 if ((newqf = calloc(1, sizeof(*qf))) == NULL) {
542 snprintf(newqf->qfname, MAXPATHLEN + 1, "%s_%d.orig", qf->qfname,
544 if (rename(qf->qfname, newqf->qfname) < 0) {
548 if ((newqf->fd = open(qf->qfname, O_RDWR|O_CREAT|O_TRUNC|O_CLOEXEC,
553 newqf->wordsize = wordsize;
554 if (wordsize == 64) {
555 memset(&dqh, 0, sizeof(dqh));
556 memcpy(dqh.dqh_magic, Q_DQHDR64_MAGIC, sizeof(dqh.dqh_magic));
557 dqh.dqh_version = htobe32(Q_DQHDR64_VERSION);
558 dqh.dqh_hdrlen = htobe32(sizeof(struct dqhdr64));
559 dqh.dqh_reclen = htobe32(sizeof(struct dqblk64));
560 if (write(newqf->fd, &dqh, sizeof(dqh)) != sizeof(dqh)) {
565 grp = getgrnam(QUOTAGROUP);
566 fchown(newqf->fd, 0, grp ? grp->gr_gid : 0);
567 fchmod(newqf->fd, 0640);
568 for (id = 0; id <= maxid; id++) {
569 if ((quota_read(qf, &dqblk, id)) < 0)
571 switch (newqf->wordsize) {
573 if ((quota_write32(newqf, &dqblk, id)) < 0)
577 if ((quota_write64(newqf, &dqblk, id)) < 0)
590 * Update the passed in quotafile to reference the new file
591 * of the converted format size.
596 qf->wordsize = newqf->wordsize;
600 /* put back the original file */
601 (void) rename(newqf->qfname, qf->qfname);