xref: /openbsd/sys/dev/vnd.c (revision 4cfece93)
1 /*	$OpenBSD: vnd.c,v 1.171 2019/11/27 16:12:13 beck Exp $	*/
2 /*	$NetBSD: vnd.c,v 1.26 1996/03/30 23:06:11 christos Exp $	*/
3 
4 /*
5  * Copyright (c) 1988 University of Utah.
6  * Copyright (c) 1990, 1993
7  *	The Regents of the University of California.  All rights reserved.
8  *
9  * This code is derived from software contributed to Berkeley by
10  * the Systems Programming Group of the University of Utah Computer
11  * Science Department.
12  *
13  * Redistribution and use in source and binary forms, with or without
14  * modification, are permitted provided that the following conditions
15  * are met:
16  * 1. Redistributions of source code must retain the above copyright
17  *    notice, this list of conditions and the following disclaimer.
18  * 2. Redistributions in binary form must reproduce the above copyright
19  *    notice, this list of conditions and the following disclaimer in the
20  *    documentation and/or other materials provided with the distribution.
21  * 3. Neither the name of the University nor the names of its contributors
22  *    may be used to endorse or promote products derived from this software
23  *    without specific prior written permission.
24  *
25  * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
26  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
27  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
28  * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
29  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
30  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
31  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
32  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
33  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
34  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
35  * SUCH DAMAGE.
36  */
37 
38 /*
39  * There is a security issue involved with this driver.
40  *
41  * Once mounted all access to the contents of the "mapped" file via
42  * the special file is controlled by the permissions on the special
43  * file, the protection of the mapped file is ignored (effectively,
44  * by using root credentials in all transactions).
45  *
46  */
47 
48 #include <sys/param.h>
49 #include <sys/systm.h>
50 #include <sys/namei.h>
51 #include <sys/proc.h>
52 #include <sys/errno.h>
53 #include <sys/limits.h>
54 #include <sys/buf.h>
55 #include <sys/malloc.h>
56 #include <sys/ioctl.h>
57 #include <sys/disklabel.h>
58 #include <sys/device.h>
59 #include <sys/disk.h>
60 #include <sys/stat.h>
61 #include <sys/vnode.h>
62 #include <sys/fcntl.h>
63 #include <sys/uio.h>
64 #include <sys/conf.h>
65 #include <sys/dkio.h>
66 #include <sys/specdev.h>
67 
68 #include <crypto/blf.h>
69 
70 #include <dev/vndioctl.h>
71 
72 #ifdef VNDDEBUG
73 int vnddebug = 0x00;
74 #define	VDB_FOLLOW	0x01
75 #define	VDB_INIT	0x02
76 #define	VDB_IO		0x04
77 #define	DNPRINTF(f, p...)	do { if ((f) & vnddebug) printf(p); } while (0)
78 #else
79 #define	DNPRINTF(f, p...)	/* nothing */
80 #endif	/* VNDDEBUG */
81 
82 struct vnd_softc {
83 	struct device	 sc_dev;
84 	struct disk	 sc_dk;
85 
86 	char		 sc_file[VNDNLEN];	/* file we're covering */
87 	int		 sc_flags;		/* flags */
88 	size_t		 sc_size;		/* size of vnd in sectors */
89 	size_t		 sc_secsize;		/* sector size in bytes */
90 	size_t		 sc_nsectors;		/* # of sectors per track */
91 	size_t		 sc_ntracks;		/* # of tracks per cylinder */
92 	struct vnode	*sc_vp;			/* vnode */
93 	struct ucred	*sc_cred;		/* credentials */
94 	blf_ctx		*sc_keyctx;		/* key context */
95 };
96 
97 /* sc_flags */
98 #define	VNF_INITED	0x0001
99 #define	VNF_HAVELABEL	0x0002
100 #define	VNF_READONLY	0x0004
101 
102 #define	VNDRW(v)	((v)->sc_flags & VNF_READONLY ? FREAD : FREAD|FWRITE)
103 
104 struct vnd_softc *vnd_softc;
105 int numvnd = 0;
106 
107 /* called by main() at boot time */
108 void	vndattach(int);
109 
110 void	vndclear(struct vnd_softc *);
111 int	vndsetcred(struct vnd_softc *, struct ucred *);
112 int	vndgetdisklabel(dev_t, struct vnd_softc *, struct disklabel *, int);
113 void	vndencrypt(struct vnd_softc *, caddr_t, size_t, daddr_t, int);
114 void	vndencryptbuf(struct vnd_softc *, struct buf *, int);
115 size_t	vndbdevsize(struct vnode *, struct proc *);
116 
117 void
118 vndencrypt(struct vnd_softc *sc, caddr_t addr, size_t size, daddr_t off,
119     int encrypt)
120 {
121 	int i, bsize;
122 	u_char iv[8];
123 
124 	bsize = dbtob(1);
125 	for (i = 0; i < size/bsize; i++) {
126 		memset(iv, 0, sizeof(iv));
127 		memcpy(iv, &off, sizeof(off));
128 		blf_ecb_encrypt(sc->sc_keyctx, iv, sizeof(iv));
129 		if (encrypt)
130 			blf_cbc_encrypt(sc->sc_keyctx, iv, addr, bsize);
131 		else
132 			blf_cbc_decrypt(sc->sc_keyctx, iv, addr, bsize);
133 
134 		addr += bsize;
135 		off++;
136 	}
137 }
138 
139 void
140 vndencryptbuf(struct vnd_softc *sc, struct buf *bp, int encrypt)
141 {
142 	vndencrypt(sc, bp->b_data, bp->b_bcount, bp->b_blkno, encrypt);
143 }
144 
145 void
146 vndattach(int num)
147 {
148 	char *mem;
149 	int i;
150 
151 	if (num <= 0)
152 		return;
153 	mem = mallocarray(num, sizeof(struct vnd_softc), M_DEVBUF,
154 	    M_NOWAIT | M_ZERO);
155 	if (mem == NULL) {
156 		printf("WARNING: no memory for vnode disks\n");
157 		return;
158 	}
159 	vnd_softc = (struct vnd_softc *)mem;
160 	for (i = 0; i < num; i++) {
161 		struct vnd_softc *sc = &vnd_softc[i];
162 
163 		sc->sc_dev.dv_unit = i;
164 		snprintf(sc->sc_dev.dv_xname, sizeof(sc->sc_dev.dv_xname),
165 		    "vnd%d", i);
166 		disk_construct(&sc->sc_dk);
167 		device_ref(&sc->sc_dev);
168 	}
169 	numvnd = num;
170 }
171 
172 int
173 vndopen(dev_t dev, int flags, int mode, struct proc *p)
174 {
175 	int unit = DISKUNIT(dev);
176 	struct vnd_softc *sc;
177 	int error = 0, part;
178 
179 	DNPRINTF(VDB_FOLLOW, "vndopen(%x, %x, %x, %p)\n", dev, flags, mode, p);
180 
181 	if (unit >= numvnd)
182 		return (ENXIO);
183 	sc = &vnd_softc[unit];
184 
185 	if ((error = disk_lock(&sc->sc_dk)) != 0)
186 		return (error);
187 
188 	if ((flags & FWRITE) && (sc->sc_flags & VNF_READONLY)) {
189 		error = EROFS;
190 		goto bad;
191 	}
192 
193 	if ((sc->sc_flags & VNF_INITED) &&
194 	    (sc->sc_flags & VNF_HAVELABEL) == 0 &&
195 	    sc->sc_dk.dk_openmask == 0) {
196 		sc->sc_flags |= VNF_HAVELABEL;
197 		vndgetdisklabel(dev, sc, sc->sc_dk.dk_label, 0);
198 	}
199 
200 	part = DISKPART(dev);
201 	error = disk_openpart(&sc->sc_dk, part, mode,
202 	    (sc->sc_flags & VNF_HAVELABEL) != 0);
203 
204 bad:
205 	disk_unlock(&sc->sc_dk);
206 	return (error);
207 }
208 
209 /*
210  * Load the label information on the named device
211  */
212 int
213 vndgetdisklabel(dev_t dev, struct vnd_softc *sc, struct disklabel *lp,
214     int spoofonly)
215 {
216 	memset(lp, 0, sizeof(struct disklabel));
217 
218 	lp->d_secsize = sc->sc_secsize;
219 	lp->d_nsectors = sc->sc_nsectors;
220 	lp->d_ntracks = sc->sc_ntracks;
221 	lp->d_secpercyl = lp->d_ntracks * lp->d_nsectors;
222 	if (lp->d_secpercyl)
223 		lp->d_ncylinders = sc->sc_size / lp->d_secpercyl;
224 
225 	strncpy(lp->d_typename, "vnd device", sizeof(lp->d_typename));
226 	lp->d_type = DTYPE_VND;
227 	strncpy(lp->d_packname, "fictitious", sizeof(lp->d_packname));
228 	DL_SETDSIZE(lp, sc->sc_size);
229 	lp->d_flags = 0;
230 	lp->d_version = 1;
231 
232 	lp->d_magic = DISKMAGIC;
233 	lp->d_magic2 = DISKMAGIC;
234 	lp->d_checksum = dkcksum(lp);
235 
236 	/* Call the generic disklabel extraction routine */
237 	return readdisklabel(DISKLABELDEV(dev), vndstrategy, lp, spoofonly);
238 }
239 
240 int
241 vndclose(dev_t dev, int flags, int mode, struct proc *p)
242 {
243 	int unit = DISKUNIT(dev);
244 	struct vnd_softc *sc;
245 	int part;
246 
247 	DNPRINTF(VDB_FOLLOW, "vndclose(%x, %x, %x, %p)\n", dev, flags, mode, p);
248 
249 	if (unit >= numvnd)
250 		return (ENXIO);
251 	sc = &vnd_softc[unit];
252 
253 	disk_lock_nointr(&sc->sc_dk);
254 
255 	part = DISKPART(dev);
256 
257 	disk_closepart(&sc->sc_dk, part, mode);
258 
259 #if 0
260 	if (sc->sc_dk.dk_openmask == 0)
261 		sc->sc_flags &= ~VNF_HAVELABEL;
262 #endif
263 
264 	disk_unlock(&sc->sc_dk);
265 	return (0);
266 }
267 
268 void
269 vndstrategy(struct buf *bp)
270 {
271 	int unit = DISKUNIT(bp->b_dev);
272 	struct vnd_softc *sc;
273 	struct partition *p;
274 	off_t off;
275 	long origbcount;
276 	int s;
277 
278 	DNPRINTF(VDB_FOLLOW, "vndstrategy(%p): unit %d\n", bp, unit);
279 
280 	if (unit >= numvnd) {
281 		bp->b_error = ENXIO;
282 		goto bad;
283 	}
284 	sc = &vnd_softc[unit];
285 
286 	if ((sc->sc_flags & VNF_HAVELABEL) == 0) {
287 		bp->b_error = ENXIO;
288 		goto bad;
289 	}
290 
291 	/*
292 	 * Many of the distrib scripts assume they can issue arbitrary
293 	 * sized requests to raw vnd devices irrespective of the
294 	 * emulated disk geometry.
295 	 *
296 	 * To continue supporting this, round the block count up to a
297 	 * multiple of d_secsize for bounds_check_with_label(), and
298 	 * then restore afterwards.
299 	 *
300 	 * We only do this for non-encrypted vnd, because encryption
301 	 * requires operating on blocks at a time.
302 	 */
303 	origbcount = bp->b_bcount;
304 	if (sc->sc_keyctx == NULL) {
305 		u_int32_t secsize = sc->sc_dk.dk_label->d_secsize;
306 		bp->b_bcount = ((origbcount + secsize - 1) & ~(secsize - 1));
307 #ifdef DIAGNOSTIC
308 		if (bp->b_bcount != origbcount) {
309 			struct process *curpr = curproc->p_p;
310 			printf("%s: sloppy %s from proc %d (%s): "
311 			    "blkno %lld bcount %ld\n", sc->sc_dev.dv_xname,
312 			    (bp->b_flags & B_READ) ? "read" : "write",
313 			    curpr->ps_pid, curpr->ps_comm,
314 			    (long long)bp->b_blkno, origbcount);
315 		}
316 #endif
317 	}
318 
319 	if (bounds_check_with_label(bp, sc->sc_dk.dk_label) == -1) {
320 		bp->b_resid = bp->b_bcount = origbcount;
321 		goto done;
322 	}
323 
324 	if (origbcount < bp->b_bcount)
325 		bp->b_bcount = origbcount;
326 
327 	p = &sc->sc_dk.dk_label->d_partitions[DISKPART(bp->b_dev)];
328 	off = DL_GETPOFFSET(p) * sc->sc_dk.dk_label->d_secsize +
329 	    (u_int64_t)bp->b_blkno * DEV_BSIZE;
330 
331 	if (sc->sc_keyctx && !(bp->b_flags & B_READ))
332 		vndencryptbuf(sc, bp, 1);
333 
334 	/*
335 	 * Use IO_NOLIMIT because upper layer has already checked I/O
336 	 * for limits, so there is no need to do it again.
337 	 *
338 	 * We use IO_NOCACHE because this data should be cached at the
339 	 * upper layer, so there is no need to cache it again.
340 	 */
341 	bp->b_error = vn_rdwr((bp->b_flags & B_READ) ? UIO_READ : UIO_WRITE,
342 	    sc->sc_vp, bp->b_data, bp->b_bcount, off, UIO_SYSSPACE,
343 	    IO_NOCACHE | IO_SYNC | IO_NOLIMIT, sc->sc_cred, &bp->b_resid, curproc);
344 	if (bp->b_error)
345 		bp->b_flags |= B_ERROR;
346 
347 	/* Data in buffer cache needs to be in clear */
348 	if (sc->sc_keyctx)
349 		vndencryptbuf(sc, bp, 0);
350 
351 	goto done;
352 
353  bad:
354 	bp->b_flags |= B_ERROR;
355 	bp->b_resid = bp->b_bcount;
356  done:
357 	s = splbio();
358 	biodone(bp);
359 	splx(s);
360 }
361 
362 /* ARGSUSED */
363 int
364 vndread(dev_t dev, struct uio *uio, int flags)
365 {
366 	return (physio(vndstrategy, dev, B_READ, minphys, uio));
367 }
368 
369 /* ARGSUSED */
370 int
371 vndwrite(dev_t dev, struct uio *uio, int flags)
372 {
373 	return (physio(vndstrategy, dev, B_WRITE, minphys, uio));
374 }
375 
376 size_t
377 vndbdevsize(struct vnode *vp, struct proc *p)
378 {
379 	struct partinfo pi;
380 	struct bdevsw *bsw;
381 	dev_t dev;
382 
383 	dev = vp->v_rdev;
384 	bsw = bdevsw_lookup(dev);
385 	if (bsw->d_ioctl == NULL)
386 		return (0);
387 	if (bsw->d_ioctl(dev, DIOCGPART, (caddr_t)&pi, FREAD, p))
388 		return (0);
389 	DNPRINTF(VDB_INIT, "vndbdevsize: size %llu secsize %u\n",
390 	    DL_GETPSIZE(pi.part), pi.disklab->d_secsize);
391 	return (DL_GETPSIZE(pi.part));
392 }
393 
394 /* ARGSUSED */
395 int
396 vndioctl(dev_t dev, u_long cmd, caddr_t addr, int flag, struct proc *p)
397 {
398 	int unit = DISKUNIT(dev);
399 	struct disklabel *lp;
400 	struct vnd_softc *sc;
401 	struct vnd_ioctl *vio;
402 	struct vnd_user *vnu;
403 	struct vattr vattr;
404 	struct nameidata nd;
405 	int error, part, pmask;
406 
407 	DNPRINTF(VDB_FOLLOW, "vndioctl(%x, %lx, %p, %x, %p): unit %d\n",
408 	    dev, cmd, addr, flag, p, unit);
409 
410 	error = suser(p);
411 	if (error)
412 		return (error);
413 	if (unit >= numvnd)
414 		return (ENXIO);
415 
416 	sc = &vnd_softc[unit];
417 	vio = (struct vnd_ioctl *)addr;
418 	switch (cmd) {
419 
420 	case VNDIOCSET:
421 		if (sc->sc_flags & VNF_INITED)
422 			return (EBUSY);
423 
424 		/* Geometry eventually has to fit into label fields */
425 		if (vio->vnd_secsize > UINT_MAX ||
426 		    vio->vnd_secsize == 0 ||
427 		    vio->vnd_ntracks > UINT_MAX ||
428 		    vio->vnd_nsectors > UINT_MAX)
429 			return (EINVAL);
430 
431 		if ((error = disk_lock(&sc->sc_dk)) != 0)
432 			return (error);
433 
434 		if ((error = copyinstr(vio->vnd_file, sc->sc_file,
435 		    sizeof(sc->sc_file), NULL))) {
436 			disk_unlock(&sc->sc_dk);
437 			return (error);
438 		}
439 
440 		/* Set geometry for device. */
441 		sc->sc_secsize = vio->vnd_secsize;
442 		sc->sc_ntracks = vio->vnd_ntracks;
443 		sc->sc_nsectors = vio->vnd_nsectors;
444 
445 		/*
446 		 * Open for read and write first. This lets vn_open() weed out
447 		 * directories, sockets, etc. so we don't have to worry about
448 		 * them.
449 		 */
450 		NDINIT(&nd, 0, 0, UIO_USERSPACE, vio->vnd_file, p);
451 		sc->sc_flags &= ~VNF_READONLY;
452 		error = vn_open(&nd, FREAD|FWRITE, 0);
453 		if (error == EROFS) {
454 			NDINIT(&nd, 0, 0, UIO_USERSPACE, vio->vnd_file, p);
455 			sc->sc_flags |= VNF_READONLY;
456 			error = vn_open(&nd, FREAD, 0);
457 		}
458 		if (error) {
459 			disk_unlock(&sc->sc_dk);
460 			return (error);
461 		}
462 
463 		if (nd.ni_vp->v_type == VBLK)
464 			sc->sc_size = vndbdevsize(nd.ni_vp, p);
465 		else {
466 			error = VOP_GETATTR(nd.ni_vp, &vattr, p->p_ucred, p);
467 			if (error) {
468 				VOP_UNLOCK(nd.ni_vp);
469 				vn_close(nd.ni_vp, VNDRW(sc), p->p_ucred, p);
470 				disk_unlock(&sc->sc_dk);
471 				return (error);
472 			}
473 			sc->sc_size = vattr.va_size / sc->sc_secsize;
474 		}
475 		VOP_UNLOCK(nd.ni_vp);
476 		sc->sc_vp = nd.ni_vp;
477 		if ((error = vndsetcred(sc, p->p_ucred)) != 0) {
478 			(void) vn_close(nd.ni_vp, VNDRW(sc), p->p_ucred, p);
479 			disk_unlock(&sc->sc_dk);
480 			return (error);
481 		}
482 
483 		if (vio->vnd_keylen > 0) {
484 			char key[BLF_MAXUTILIZED];
485 
486 			if (vio->vnd_keylen > sizeof(key))
487 				vio->vnd_keylen = sizeof(key);
488 
489 			if ((error = copyin(vio->vnd_key, key,
490 			    vio->vnd_keylen)) != 0) {
491 				(void) vn_close(nd.ni_vp, VNDRW(sc),
492 				    p->p_ucred, p);
493 				disk_unlock(&sc->sc_dk);
494 				return (error);
495 			}
496 
497 			sc->sc_keyctx = malloc(sizeof(*sc->sc_keyctx), M_DEVBUF,
498 			    M_WAITOK);
499 			blf_key(sc->sc_keyctx, key, vio->vnd_keylen);
500 			explicit_bzero(key, vio->vnd_keylen);
501 		} else
502 			sc->sc_keyctx = NULL;
503 
504 		vio->vnd_size = sc->sc_size * sc->sc_secsize;
505 		sc->sc_flags |= VNF_INITED;
506 
507 		DNPRINTF(VDB_INIT, "vndioctl: SET vp %p size %llx\n",
508 		    sc->sc_vp, (unsigned long long)sc->sc_size);
509 
510 		/* Attach the disk. */
511 		sc->sc_dk.dk_name = sc->sc_dev.dv_xname;
512 		disk_attach(&sc->sc_dev, &sc->sc_dk);
513 
514 		disk_unlock(&sc->sc_dk);
515 
516 		break;
517 
518 	case VNDIOCCLR:
519 		if ((sc->sc_flags & VNF_INITED) == 0)
520 			return (ENXIO);
521 
522 		if ((error = disk_lock(&sc->sc_dk)) != 0)
523 			return (error);
524 
525 		/*
526 		 * Don't unconfigure if any other partitions are open
527 		 * or if both the character and block flavors of this
528 		 * partition are open.
529 		 */
530 		part = DISKPART(dev);
531 		pmask = (1 << part);
532 		if ((sc->sc_dk.dk_openmask & ~pmask) ||
533 		    ((sc->sc_dk.dk_bopenmask & pmask) &&
534 		    (sc->sc_dk.dk_copenmask & pmask))) {
535 			disk_unlock(&sc->sc_dk);
536 			return (EBUSY);
537 		}
538 
539 		vndclear(sc);
540 		DNPRINTF(VDB_INIT, "vndioctl: CLRed\n");
541 
542 		/* Free crypto key */
543 		if (sc->sc_keyctx) {
544 			explicit_bzero(sc->sc_keyctx, sizeof(*sc->sc_keyctx));
545 			free(sc->sc_keyctx, M_DEVBUF, sizeof(*sc->sc_keyctx));
546 		}
547 
548 		/* Detach the disk. */
549 		disk_detach(&sc->sc_dk);
550 		disk_unlock(&sc->sc_dk);
551 		break;
552 
553 	case VNDIOCGET:
554 		vnu = (struct vnd_user *)addr;
555 
556 		if (vnu->vnu_unit == -1)
557 			vnu->vnu_unit = unit;
558 		if (vnu->vnu_unit >= numvnd)
559 			return (ENXIO);
560 		if (vnu->vnu_unit < 0)
561 			return (EINVAL);
562 
563 		sc = &vnd_softc[vnu->vnu_unit];
564 
565 		if (sc->sc_flags & VNF_INITED) {
566 			error = VOP_GETATTR(sc->sc_vp, &vattr, p->p_ucred, p);
567 			if (error)
568 				return (error);
569 
570 			strlcpy(vnu->vnu_file, sc->sc_file,
571 			    sizeof(vnu->vnu_file));
572 			vnu->vnu_dev = vattr.va_fsid;
573 			vnu->vnu_ino = vattr.va_fileid;
574 		} else {
575 			vnu->vnu_dev = 0;
576 			vnu->vnu_ino = 0;
577 		}
578 
579 		break;
580 
581 	case DIOCRLDINFO:
582 		if ((sc->sc_flags & VNF_HAVELABEL) == 0)
583 			return (ENOTTY);
584 		lp = malloc(sizeof(*lp), M_TEMP, M_WAITOK);
585 		vndgetdisklabel(dev, sc, lp, 0);
586 		*(sc->sc_dk.dk_label) = *lp;
587 		free(lp, M_TEMP, sizeof(*lp));
588 		return (0);
589 
590 	case DIOCGPDINFO:
591 		if ((sc->sc_flags & VNF_HAVELABEL) == 0)
592 			return (ENOTTY);
593 		vndgetdisklabel(dev, sc, (struct disklabel *)addr, 1);
594 		return (0);
595 
596 	case DIOCGDINFO:
597 		if ((sc->sc_flags & VNF_HAVELABEL) == 0)
598 			return (ENOTTY);
599 		*(struct disklabel *)addr = *(sc->sc_dk.dk_label);
600 		return (0);
601 
602 	case DIOCGPART:
603 		if ((sc->sc_flags & VNF_HAVELABEL) == 0)
604 			return (ENOTTY);
605 		((struct partinfo *)addr)->disklab = sc->sc_dk.dk_label;
606 		((struct partinfo *)addr)->part =
607 		    &sc->sc_dk.dk_label->d_partitions[DISKPART(dev)];
608 		return (0);
609 
610 	case DIOCWDINFO:
611 	case DIOCSDINFO:
612 		if ((sc->sc_flags & VNF_HAVELABEL) == 0)
613 			return (ENOTTY);
614 		if ((flag & FWRITE) == 0)
615 			return (EBADF);
616 
617 		if ((error = disk_lock(&sc->sc_dk)) != 0)
618 			return (error);
619 
620 		error = setdisklabel(sc->sc_dk.dk_label,
621 		    (struct disklabel *)addr, /* sc->sc_dk.dk_openmask */ 0);
622 		if (error == 0) {
623 			if (cmd == DIOCWDINFO)
624 				error = writedisklabel(DISKLABELDEV(dev),
625 				    vndstrategy, sc->sc_dk.dk_label);
626 		}
627 
628 		disk_unlock(&sc->sc_dk);
629 		return (error);
630 
631 	default:
632 		return (ENOTTY);
633 	}
634 
635 	return (0);
636 }
637 
638 /*
639  * Duplicate the current processes' credentials.  Since we are called only
640  * as the result of a SET ioctl and only root can do that, any future access
641  * to this "disk" is essentially as root.  Note that credentials may change
642  * if some other uid can write directly to the mapped file (NFS).
643  */
644 int
645 vndsetcred(struct vnd_softc *sc, struct ucred *cred)
646 {
647 	void *buf;
648 	size_t size;
649 	int error;
650 
651 	sc->sc_cred = crdup(cred);
652 	buf = malloc(DEV_BSIZE, M_TEMP, M_WAITOK);
653 	size = MIN(DEV_BSIZE, sc->sc_size * sc->sc_secsize);
654 
655 	/* XXX: Horrible kludge to establish credentials for NFS */
656 	error = vn_rdwr(UIO_READ, sc->sc_vp, buf, size, 0, UIO_SYSSPACE, 0,
657 	    sc->sc_cred, NULL, curproc);
658 
659 	free(buf, M_TEMP, DEV_BSIZE);
660 	return (error);
661 }
662 
663 void
664 vndclear(struct vnd_softc *sc)
665 {
666 	struct vnode *vp = sc->sc_vp;
667 	struct proc *p = curproc;		/* XXX */
668 
669 	DNPRINTF(VDB_FOLLOW, "vndclear(%p): vp %p\n", sc, vp);
670 
671 	if (vp == NULL)
672 		panic("vndioctl: null vp");
673 	(void) vn_close(vp, VNDRW(sc), sc->sc_cred, p);
674 	crfree(sc->sc_cred);
675 	sc->sc_flags = 0;
676 	sc->sc_vp = NULL;
677 	sc->sc_cred = NULL;
678 	sc->sc_size = 0;
679 	memset(sc->sc_file, 0, sizeof(sc->sc_file));
680 }
681 
682 daddr_t
683 vndsize(dev_t dev)
684 {
685 	/* We don't support swapping to vnd anymore. */
686 	return (-1);
687 }
688 
689 int
690 vnddump(dev_t dev, daddr_t blkno, caddr_t va, size_t size)
691 {
692 	/* Not implemented. */
693 	return (ENXIO);
694 }
695