^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 1) // SPDX-License-Identifier: GPL-2.0-or-later
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 2) /*
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 3) * Copyright (C) 2020, Microsoft Corporation.
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 4) *
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 5) * Author(s): Steve French <stfrench@microsoft.com>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 6) * David Howells <dhowells@redhat.com>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 7) */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 8)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 9) #include "cifsglob.h"
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 10) #include "cifs_debug.h"
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 11) #include "fs_context.h"
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 12)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 13) static const match_table_t cifs_smb_version_tokens = {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 14) { Smb_1, SMB1_VERSION_STRING },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 15) { Smb_20, SMB20_VERSION_STRING},
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 16) { Smb_21, SMB21_VERSION_STRING },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 17) { Smb_30, SMB30_VERSION_STRING },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 18) { Smb_302, SMB302_VERSION_STRING },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 19) { Smb_302, ALT_SMB302_VERSION_STRING },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 20) { Smb_311, SMB311_VERSION_STRING },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 21) { Smb_311, ALT_SMB311_VERSION_STRING },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 22) { Smb_3any, SMB3ANY_VERSION_STRING },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 23) { Smb_default, SMBDEFAULT_VERSION_STRING },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 24) { Smb_version_err, NULL }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 25) };
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 26)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 27) int
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 28) cifs_parse_smb_version(char *value, struct smb_vol *vol, bool is_smb3)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 29) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 30) substring_t args[MAX_OPT_ARGS];
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 31)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 32) switch (match_token(value, cifs_smb_version_tokens, args)) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 33) #ifdef CONFIG_CIFS_ALLOW_INSECURE_LEGACY
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 34) case Smb_1:
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 35) if (disable_legacy_dialects) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 36) cifs_dbg(VFS, "mount with legacy dialect disabled\n");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 37) return 1;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 38) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 39) if (is_smb3) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 40) cifs_dbg(VFS, "vers=1.0 (cifs) not permitted when mounting with smb3\n");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 41) return 1;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 42) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 43) cifs_dbg(VFS, "Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers\n");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 44) vol->ops = &smb1_operations;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 45) vol->vals = &smb1_values;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 46) break;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 47) case Smb_20:
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 48) if (disable_legacy_dialects) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 49) cifs_dbg(VFS, "mount with legacy dialect disabled\n");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 50) return 1;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 51) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 52) if (is_smb3) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 53) cifs_dbg(VFS, "vers=2.0 not permitted when mounting with smb3\n");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 54) return 1;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 55) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 56) vol->ops = &smb20_operations;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 57) vol->vals = &smb20_values;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 58) break;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 59) #else
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 60) case Smb_1:
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 61) cifs_dbg(VFS, "vers=1.0 (cifs) mount not permitted when legacy dialects disabled\n");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 62) return 1;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 63) case Smb_20:
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 64) cifs_dbg(VFS, "vers=2.0 mount not permitted when legacy dialects disabled\n");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 65) return 1;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 66) #endif /* CIFS_ALLOW_INSECURE_LEGACY */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 67) case Smb_21:
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 68) vol->ops = &smb21_operations;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 69) vol->vals = &smb21_values;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 70) break;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 71) case Smb_30:
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 72) vol->ops = &smb30_operations;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 73) vol->vals = &smb30_values;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 74) break;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 75) case Smb_302:
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 76) vol->ops = &smb30_operations; /* currently identical with 3.0 */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 77) vol->vals = &smb302_values;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 78) break;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 79) case Smb_311:
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 80) vol->ops = &smb311_operations;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 81) vol->vals = &smb311_values;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 82) break;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 83) case Smb_3any:
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 84) vol->ops = &smb30_operations; /* currently identical with 3.0 */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 85) vol->vals = &smb3any_values;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 86) break;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 87) case Smb_default:
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 88) vol->ops = &smb30_operations; /* currently identical with 3.0 */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 89) vol->vals = &smbdefault_values;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 90) break;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 91) default:
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 92) cifs_dbg(VFS, "Unknown vers= option specified: %s\n", value);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 93) return 1;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 94) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 95) return 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 96) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 97)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 98) static const match_table_t cifs_secflavor_tokens = {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 99) { Opt_sec_krb5, "krb5" },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 100) { Opt_sec_krb5i, "krb5i" },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 101) { Opt_sec_krb5p, "krb5p" },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 102) { Opt_sec_ntlmsspi, "ntlmsspi" },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 103) { Opt_sec_ntlmssp, "ntlmssp" },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 104) { Opt_ntlm, "ntlm" },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 105) { Opt_sec_ntlmi, "ntlmi" },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 106) { Opt_sec_ntlmv2, "nontlm" },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 107) { Opt_sec_ntlmv2, "ntlmv2" },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 108) { Opt_sec_ntlmv2i, "ntlmv2i" },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 109) { Opt_sec_lanman, "lanman" },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 110) { Opt_sec_none, "none" },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 111)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 112) { Opt_sec_err, NULL }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 113) };
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 114)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 115) int cifs_parse_security_flavors(char *value, struct smb_vol *vol)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 116) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 117)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 118) substring_t args[MAX_OPT_ARGS];
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 119)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 120) /*
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 121) * With mount options, the last one should win. Reset any existing
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 122) * settings back to default.
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 123) */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 124) vol->sectype = Unspecified;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 125) vol->sign = false;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 126)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 127) switch (match_token(value, cifs_secflavor_tokens, args)) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 128) case Opt_sec_krb5p:
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 129) cifs_dbg(VFS, "sec=krb5p is not supported!\n");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 130) return 1;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 131) case Opt_sec_krb5i:
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 132) vol->sign = true;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 133) fallthrough;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 134) case Opt_sec_krb5:
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 135) vol->sectype = Kerberos;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 136) break;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 137) case Opt_sec_ntlmsspi:
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 138) vol->sign = true;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 139) fallthrough;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 140) case Opt_sec_ntlmssp:
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 141) vol->sectype = RawNTLMSSP;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 142) break;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 143) case Opt_sec_ntlmi:
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 144) vol->sign = true;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 145) fallthrough;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 146) case Opt_ntlm:
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 147) vol->sectype = NTLM;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 148) break;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 149) case Opt_sec_ntlmv2i:
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 150) vol->sign = true;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 151) fallthrough;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 152) case Opt_sec_ntlmv2:
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 153) vol->sectype = NTLMv2;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 154) break;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 155) #ifdef CONFIG_CIFS_WEAK_PW_HASH
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 156) case Opt_sec_lanman:
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 157) vol->sectype = LANMAN;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 158) break;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 159) #endif
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 160) case Opt_sec_none:
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 161) vol->nullauth = 1;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 162) break;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 163) default:
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 164) cifs_dbg(VFS, "bad security option: %s\n", value);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 165) return 1;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 166) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 167)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 168) return 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 169) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 170)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 171) static const match_table_t cifs_cacheflavor_tokens = {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 172) { Opt_cache_loose, "loose" },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 173) { Opt_cache_strict, "strict" },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 174) { Opt_cache_none, "none" },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 175) { Opt_cache_ro, "ro" },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 176) { Opt_cache_rw, "singleclient" },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 177) { Opt_cache_err, NULL }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 178) };
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 179)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 180) int
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 181) cifs_parse_cache_flavor(char *value, struct smb_vol *vol)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 182) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 183) substring_t args[MAX_OPT_ARGS];
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 184)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 185) switch (match_token(value, cifs_cacheflavor_tokens, args)) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 186) case Opt_cache_loose:
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 187) vol->direct_io = false;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 188) vol->strict_io = false;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 189) vol->cache_ro = false;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 190) vol->cache_rw = false;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 191) break;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 192) case Opt_cache_strict:
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 193) vol->direct_io = false;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 194) vol->strict_io = true;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 195) vol->cache_ro = false;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 196) vol->cache_rw = false;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 197) break;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 198) case Opt_cache_none:
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 199) vol->direct_io = true;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 200) vol->strict_io = false;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 201) vol->cache_ro = false;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 202) vol->cache_rw = false;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 203) break;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 204) case Opt_cache_ro:
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 205) vol->direct_io = false;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 206) vol->strict_io = false;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 207) vol->cache_ro = true;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 208) vol->cache_rw = false;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 209) break;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 210) case Opt_cache_rw:
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 211) vol->direct_io = false;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 212) vol->strict_io = false;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 213) vol->cache_ro = false;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 214) vol->cache_rw = true;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 215) break;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 216) default:
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 217) cifs_dbg(VFS, "bad cache= option: %s\n", value);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 218) return 1;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 219) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 220) return 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 221) }