1
0
mirror of https://git.FreeBSD.org/src.git synced 2024-12-25 11:37:56 +00:00
freebsd/sys/ufs/ufs
Robert Watson 9e3bf94fd7 Push most UFS ACL behavior behind a check for MNT_ACLS, permitting ACLs
to be administratively disabled as needed on UFS/UFS2 file systems.  This
also has the effect of preventing the slightly more expensive ACL code
from running on non-ACL file systems, avoiding storage allocation for
ACLs that may be read from disk.  MNT_ACLS may be set at mount-time
using mount -o acls, or implicitly by setting the FS_ACLS flag using
tunefs.  On UFS1, you may also have to configure ACL store.

Obtained from:	TrustedBSD Project
Sponsored by:	DARPA, Network Associates Laboratories
2002-10-15 21:28:24 +00:00
..
acl.h Remove __P. 2002-03-19 22:40:48 +00:00
dinode.h Change the name of st_createtime to st_birthtime. This change is 2002-07-16 22:36:00 +00:00
dir.h
dirhash.h Remove the bogus SYSINIT from ufs_dirhash.c and instead add a call 2002-06-30 02:49:39 +00:00
extattr.h More s/file system/filesystem/g 2002-05-16 21:28:32 +00:00
inode.h When creating a snapshot, create a list of initially allocated blocks. 2002-10-09 07:28:35 +00:00
quota.h Introduce typedefs for the member functions of struct vfsops and employ 2002-08-13 10:05:50 +00:00
README.acls More s/file system/filesystem/g 2002-05-16 21:28:32 +00:00
README.extattr More s/file system/filesystem/g 2002-05-16 21:28:32 +00:00
ufs_acl.c Push most UFS ACL behavior behind a check for MNT_ACLS, permitting ACLs 2002-10-15 21:28:24 +00:00
ufs_bmap.c Add support to UFS2 to provide storage for extended attributes. 2002-07-19 07:29:39 +00:00
ufs_dirhash.c Remove the bogus SYSINIT from ufs_dirhash.c and instead add a call 2002-06-30 02:49:39 +00:00
ufs_extattr.c size_t is not a struct (fix mislabelling in a comment). 2002-10-02 05:15:34 +00:00
ufs_extern.h Introduce typedefs for the member functions of struct vfsops and employ 2002-08-13 10:05:50 +00:00
ufs_ihash.c Introduce typedefs for the member functions of struct vfsops and employ 2002-08-13 10:05:50 +00:00
ufs_inode.c Regularize the vop_stdlock'ing protocol across all the filesystems 2002-10-14 03:20:36 +00:00
ufs_lookup.c Fix some harmless mis-indents. 2002-10-01 15:48:31 +00:00
ufs_quota.c Mark two places where an unsigned number is checked "if (foo < 0)" with 2002-10-02 09:11:18 +00:00
ufs_vfsops.c Replace various spelling with FALLTHROUGH which is lint()able 2002-08-25 13:23:09 +00:00
ufs_vnops.c Push most UFS ACL behavior behind a check for MNT_ACLS, permitting ACLs 2002-10-15 21:28:24 +00:00
ufsmount.h This commit adds basic support for the UFS2 filesystem. The UFS2 2002-06-21 06:18:05 +00:00

$FreeBSD$

  UFS Extended Attributes Copyright

The UFS Extended Attributes implementation is copyright Robert Watson, and
is made available under a Berkeley-style license.

  About UFS Extended Attributes

Extended attributes allow the association of additional arbitrary
meta-data with files and directories.  Extended attributes are defined in
the form name=value, where name is an nul-terminated string in the style
of a filename, and value is a binary blob of zero or more bytes. The UFS
extended attribute service layers support for extended attributes onto a
backing file, in the style of the quota implementation, meaning that it
requires no underlying format changes in the filesystem.  This design
choice exchanges simplicity, usability and easy deployment for
performance.  When defined, extended attribute names exist in a series of
disjoint namespaces: currently, two namespaces are defined:
EXTATTR_NAMESPACE_SYSTEM and EXTATTR_NAMESPACE_USER.  The primary
distinction lies in the protection model: USER EAs are protected using the
normal inode protections, whereas SYSTEM EAs require privilege to access
or modify.

  Using UFS Extended Attributes

Support for UFS extended attributes may be enabled by adding:

	options UFS_EXTATTR

to your kernel configuration file.  This allows UFS-based filesystems to
support extended attributes, but requires manual administration of EAs
using the extattrctl tool, including the starting of EA support for each
filesystem, and the enabling of individual attributes for the file
system.  The extattrctl utility may be used to initialize backing files
before first use, to start and stop EA service on a filesystem, and to
enable and disable named attributes.  The command lines for extattrctl
take the following forms:

  extattrctl start [path]
  extattrctl stop [path]
  extattrctl initattr [-f] [-p path] [attrsize] [attrfile]
  extattrctl enable [path] [attrnamespace] [attrname] [attrfile]
  extattrctl disable [path] [attrnamespace] [attrname]

In each case, [path] is used to indicate the mounted filesystem on which
to perform the operation.  [attrnamespace] refers to the namespace in
which the attribute is being manipulated, and may be "system" or "user".  
The [attrname] is the attribute name to use for the operation. The
[attrfile] argument specifies the attribute backing file to use. When
using the "initattr" function to initialize a backing file, the maximum
size of attribute data must be defined in bytes using the [attrsize]
field.  Optionally, the [-p path] argument may be used to indicate to
extattrctl that it should pre-allocate space for EA data, rather than
creating a sparse backing file.  This prevents attribute operations from
failing in low disk-space conditions (which can be important when EAs are
used for security purposes), but pre-allocation will consume space
proportional to the product of the defined maximum attribute size and
number of attributes on the specified filesystem.

Manual configuration increases administrative overhead, but also
introduces the possibility of race conditions during filesystem mount, if
EAs are used to support other features, as starting the EAs manually is
not atomic with the mount operation.  To address this problem, an
additional kernel option may be defined to auto-start EAs on a UFS file
system based on special directories at mount-time:

	options UFS_EXTATTR_AUTOSTART

If this option is defined, UFS will search for a ".attribute"
sub-directory of the filesystem root during the mount operation.  If it
is found, EA support will be started for the filesystem.  UFS will then
search for "system" and "user" sub-directories of the ".attribute"
directory for any potential backing files, and enable an EA for each valid
backing file with the name of the backing file as the attribute name.  
For example, by creating the following tree, the two EAs,
posix1e.acl_access and posix1e.acl_default will be enabled in the system
namespace of the root filesystem, reserving space for attribute data:

  mkdir -p /.attribute/system
  cd /.attribute/system
  extattrctl initattr -p / 388 posix1e.acl_access
  extattrctl initattr -p / 388 posix1e.acl_default

On the next mount of the root filesystem, the attributes will be
automatically started.