s3: VFS: Add SMB_VFS_GET_NT_ACL_AT().
[amitay/samba.git] / source3 / smbd / vfs.c
index 47abf45496bbac79683e95f600a8c3396eaaf031..044a7e1a82550956388be565c9b3644d04a2d3ab 100644 (file)
@@ -31,6 +31,7 @@
 #include "transfer_file.h"
 #include "ntioctl.h"
 #include "lib/util/tevent_unix.h"
+#include "lib/util/tevent_ntstatus.h"
 
 #undef DBGC_CLASS
 #define DBGC_CLASS DBGC_VFS
@@ -364,6 +365,22 @@ bool smbd_vfs_init(connection_struct *conn)
                return True;
        }
 
+       if (lp_widelinks(SNUM(conn))) {
+               /*
+                * As the widelinks logic is now moving into a
+                * vfs_widelinks module, we need to custom load
+                * it after the default module is initialized.
+                * That way no changes to smb.conf files are
+                * needed.
+                */
+               bool ok = vfs_init_custom(conn, "widelinks");
+               if (!ok) {
+                       DBG_ERR("widelinks enabled and vfs_init_custom "
+                               "failed for vfs_widelinks module\n");
+                       return false;
+               }
+       }
+
        vfs_objects = lp_vfs_objects(SNUM(conn));
 
        /* Override VFS functions if 'vfs object' was not specified*/
@@ -398,53 +415,6 @@ NTSTATUS vfs_file_exist(connection_struct *conn, struct smb_filename *smb_fname)
        return NT_STATUS_OBJECT_NAME_NOT_FOUND;
 }
 
-/****************************************************************************
- Write data to a fd on the vfs.
-****************************************************************************/
-
-ssize_t vfs_write_data(struct smb_request *req,
-                       files_struct *fsp,
-                       const char *buffer,
-                       size_t N)
-{
-       size_t total=0;
-       ssize_t ret;
-
-       if (req && req->unread_bytes) {
-               int sockfd = req->xconn->transport.sock;
-               int old_flags;
-               SMB_ASSERT(req->unread_bytes == N);
-               /* VFS_RECVFILE must drain the socket
-                * before returning. */
-               req->unread_bytes = 0;
-               /* Ensure the socket is blocking. */
-               old_flags = fcntl(sockfd, F_GETFL, 0);
-               if (set_blocking(sockfd, true) == -1) {
-                       return (ssize_t)-1;
-               }
-               ret = SMB_VFS_RECVFILE(sockfd,
-                                       fsp,
-                                       (off_t)-1,
-                                       N);
-               if (fcntl(sockfd, F_SETFL, old_flags) == -1) {
-                       return (ssize_t)-1;
-               }
-               return ret;
-       }
-
-       while (total < N) {
-               ret = SMB_VFS_WRITE(fsp, buffer + total, N - total);
-
-               if (ret == -1)
-                       return -1;
-               if (ret == 0)
-                       return total;
-
-               total += ret;
-       }
-       return (ssize_t)total;
-}
-
 ssize_t vfs_pwrite_data(struct smb_request *req,
                        files_struct *fsp,
                        const char *buffer,
@@ -561,10 +531,7 @@ int vfs_allocate_file_space(files_struct *fsp, uint64_t len)
 
                contend_level2_oplocks_begin(fsp, LEVEL2_CONTEND_ALLOC_SHRINK);
 
-               flush_write_cache(fsp, SAMBA_SIZECHANGE_FLUSH);
-               if ((ret = SMB_VFS_FTRUNCATE(fsp, (off_t)len)) != -1) {
-                       set_filelen_write_cache(fsp, len);
-               }
+               ret = SMB_VFS_FTRUNCATE(fsp, (off_t)len);
 
                contend_level2_oplocks_end(fsp, LEVEL2_CONTEND_ALLOC_SHRINK);
 
@@ -631,9 +598,7 @@ int vfs_set_filelen(files_struct *fsp, off_t len)
 
        DEBUG(10,("vfs_set_filelen: ftruncate %s to len %.0f\n",
                  fsp_str_dbg(fsp), (double)len));
-       flush_write_cache(fsp, SAMBA_SIZECHANGE_FLUSH);
        if ((ret = SMB_VFS_FTRUNCATE(fsp, len)) != -1) {
-               set_filelen_write_cache(fsp, len);
                notify_fname(fsp->conn, NOTIFY_ACTION_MODIFIED,
                             FILE_NOTIFY_CHANGE_SIZE
                             | FILE_NOTIFY_CHANGE_ATTRIBUTES,
@@ -722,8 +687,6 @@ int vfs_fill_sparse(files_struct *fsp, off_t len)
 
        contend_level2_oplocks_begin(fsp, LEVEL2_CONTEND_FILL_SPARSE);
 
-       flush_write_cache(fsp, SAMBA_SIZECHANGE_FLUSH);
-
        offset = fsp->fsp_name->st.st_ex_size;
        num_to_write = len - fsp->fsp_name->st.st_ex_size;
 
@@ -749,14 +712,41 @@ int vfs_fill_sparse(files_struct *fsp, off_t len)
 
  out:
 
-       if (ret == 0) {
-               set_filelen_write_cache(fsp, len);
-       }
-
        contend_level2_oplocks_end(fsp, LEVEL2_CONTEND_FILL_SPARSE);
        return ret;
 }
 
+/*******************************************************************************
+ Set a fd into blocking/nonblocking mode through VFS
+*******************************************************************************/
+
+int vfs_set_blocking(files_struct *fsp, bool set)
+{
+       int val;
+#ifdef O_NONBLOCK
+#define FLAG_TO_SET O_NONBLOCK
+#else
+#ifdef SYSV
+#define FLAG_TO_SET O_NDELAY
+#else /* BSD */
+#define FLAG_TO_SET FNDELAY
+#endif
+#endif
+       val = SMB_VFS_FCNTL(fsp, F_GETFL, 0);
+       if (val == -1) {
+               return -1;
+       }
+
+       if (set) {
+               val &= ~FLAG_TO_SET;
+       } else {
+               val |= FLAG_TO_SET;
+       }
+
+       return SMB_VFS_FCNTL(fsp, F_SETFL, val);
+#undef FLAG_TO_SET
+}
+
 /****************************************************************************
  Transfer some data (n bytes) between two file_struct's.
 ****************************************************************************/
@@ -833,8 +823,7 @@ const char *vfs_readdirname(connection_struct *conn, void *p,
 int vfs_ChDir(connection_struct *conn, const struct smb_filename *smb_fname)
 {
        int ret;
-       int saved_errno = 0;
-       struct smb_filename *saved_cwd = NULL;
+       struct smb_filename *cwd = NULL;
 
        if (!LastDir) {
                LastDir = SMB_STRDUP("");
@@ -849,46 +838,31 @@ int vfs_ChDir(connection_struct *conn, const struct smb_filename *smb_fname)
                return 0;
        }
 
-       if (conn->cwd_fname != NULL) {
-               /*
-                * Save off where we are in case we need to return
-                * on vfs_GetWd() failure after successful SMB_VFS_CHDIR().
-                */
-               saved_cwd = cp_smb_filename(conn, conn->cwd_fname);
-               if (saved_cwd == NULL) {
-                       return -1;
-               }
-       }
-
        DEBUG(4,("vfs_ChDir to %s\n", smb_fname->base_name));
 
        ret = SMB_VFS_CHDIR(conn, smb_fname);
        if (ret != 0) {
-               saved_errno = errno;
-               TALLOC_FREE(saved_cwd);
-               errno = saved_errno;
                return -1;
        }
 
        /*
-        * Always replace conn->cwd_fname. We
+        * Always replace conn->cwd_fsp. We
         * don't know if it's been modified by
         * VFS modules in the stack.
         */
 
        /* conn cache. */
-       TALLOC_FREE(conn->cwd_fname);
-       conn->cwd_fname = vfs_GetWd(conn, conn);
-       if (conn->cwd_fname == NULL) {
+       cwd = vfs_GetWd(conn, conn);
+       if (cwd == NULL) {
                /*
                 * vfs_GetWd() failed.
                 * We must be able to read cwd.
                 * Return to original directory
                 * and return -1.
                 */
-               saved_errno = errno;
+               int saved_errno = errno;
 
-               if (saved_cwd == NULL) {
+               if (conn->cwd_fsp->fsp_name == NULL) {
                        /*
                         * Failed on the very first chdir()+getwd()
                         * for this connection. We can't
@@ -900,14 +874,12 @@ int vfs_ChDir(connection_struct *conn, const struct smb_filename *smb_fname)
                }
 
                /* Return to the previous $cwd. */
-               ret = SMB_VFS_CHDIR(conn, saved_cwd);
+               ret = SMB_VFS_CHDIR(conn, conn->cwd_fsp->fsp_name);
                if (ret != 0) {
                        smb_panic("conn->cwd getwd failed\n");
                        /* NOTREACHED */
                        return -1;
                }
-               /* Restore original conn->cwd_fname. */
-               conn->cwd_fname = saved_cwd;
                errno = saved_errno;
                /* And fail the chdir(). */
                return -1;
@@ -918,12 +890,18 @@ int vfs_ChDir(connection_struct *conn, const struct smb_filename *smb_fname)
        SAFE_FREE(LastDir);
        LastDir = SMB_STRDUP(smb_fname->base_name);
 
-       DEBUG(4,("vfs_ChDir got %s\n", conn->cwd_fname->base_name));
+       /*
+        * (Indirect) Callers of vfs_ChDir() may still hold references to the
+        * old conn->cwd_fsp->fsp_name. Move it to talloc_tos(), that way
+        * callers can use it for the lifetime of the SMB request.
+        */
+       talloc_move(talloc_tos(), &conn->cwd_fsp->fsp_name);
+
+       conn->cwd_fsp->fsp_name = talloc_move(conn->cwd_fsp, &cwd);
+       conn->cwd_fsp->fh->fd = AT_FDCWD;
+
+       DBG_INFO("vfs_ChDir got %s\n", fsp_str_dbg(conn->cwd_fsp));
 
-       TALLOC_FREE(saved_cwd);
-       if (saved_errno != 0) {
-               errno = saved_errno;
-       }
        return ret;
 }
 
@@ -945,7 +923,12 @@ struct smb_filename *vfs_GetWd(TALLOC_CTX *ctx, connection_struct *conn)
                goto nocache;
        }
 
-       smb_fname_dot = synthetic_smb_fname(ctx, ".", NULL, NULL, 0);
+       smb_fname_dot = synthetic_smb_fname(ctx,
+                                           ".",
+                                           NULL,
+                                           NULL,
+                                           0,
+                                           0);
        if (smb_fname_dot == NULL) {
                errno = ENOMEM;
                goto out;
@@ -1044,7 +1027,7 @@ struct smb_filename *vfs_GetWd(TALLOC_CTX *ctx, connection_struct *conn)
 
 /*******************************************************************
  Reduce a file name, removing .. elements and checking that
- it is below dir in the heirachy. This uses realpath.
+ it is below dir in the hierarchy. This uses realpath.
  This function must run as root, and will return names
  and valid stat structs that can be checked on open.
 ********************************************************************/
@@ -1057,42 +1040,30 @@ NTSTATUS check_reduced_name_with_privilege(connection_struct *conn,
        TALLOC_CTX *ctx = talloc_tos();
        const char *conn_rootdir;
        size_t rootdir_len;
-       char *dir_name = NULL;
        char *resolved_name = NULL;
-       const char *last_component = NULL;
        struct smb_filename *resolved_fname = NULL;
        struct smb_filename *saved_dir_fname = NULL;
        struct smb_filename *smb_fname_cwd = NULL;
-       struct privilege_paths *priv_paths = NULL;
        int ret;
+       struct smb_filename *parent_name = NULL;
+       struct smb_filename *file_name = NULL;
+       bool ok;
 
        DEBUG(3,("check_reduced_name_with_privilege [%s] [%s]\n",
                        smb_fname->base_name,
                        conn->connectpath));
 
 
-       priv_paths = talloc_zero(smbreq, struct privilege_paths);
-       if (!priv_paths) {
-               status = NT_STATUS_NO_MEMORY;
-               goto err;
-       }
-
-       if (!parent_dirname(ctx, smb_fname->base_name,
-                       &dir_name, &last_component)) {
-               status = NT_STATUS_NO_MEMORY;
-               goto err;
-       }
-
-       priv_paths->parent_name.base_name = talloc_strdup(priv_paths, dir_name);
-       priv_paths->file_name.base_name = talloc_strdup(priv_paths, last_component);
-
-       if (priv_paths->parent_name.base_name == NULL ||
-                       priv_paths->file_name.base_name == NULL) {
+       ok = parent_smb_fname(ctx,
+                             smb_fname,
+                             &parent_name,
+                             &file_name);
+       if (!ok) {
                status = NT_STATUS_NO_MEMORY;
                goto err;
        }
 
-       if (SMB_VFS_STAT(conn, &priv_paths->parent_name) != 0) {
+       if (SMB_VFS_STAT(conn, parent_name) != 0) {
                status = map_nt_error_from_unix(errno);
                goto err;
        }
@@ -1103,12 +1074,17 @@ NTSTATUS check_reduced_name_with_privilege(connection_struct *conn,
                goto err;
        }
 
-       if (vfs_ChDir(conn, &priv_paths->parent_name) == -1) {
+       if (vfs_ChDir(conn, parent_name) == -1) {
                status = map_nt_error_from_unix(errno);
                goto err;
        }
 
-       smb_fname_cwd = synthetic_smb_fname(talloc_tos(), ".", NULL, NULL, 0);
+       smb_fname_cwd = synthetic_smb_fname(talloc_tos(),
+                                           ".",
+                                           NULL,
+                                           NULL,
+                                           parent_name->twrp,
+                                           0);
        if (smb_fname_cwd == NULL) {
                status = NT_STATUS_NO_MEMORY;
                goto err;
@@ -1129,9 +1105,9 @@ NTSTATUS check_reduced_name_with_privilege(connection_struct *conn,
                goto err;
        }
 
-       DEBUG(10,("check_reduced_name_with_privilege: realpath [%s] -> [%s]\n",
-               priv_paths->parent_name.base_name,
-               resolved_name));
+       DBG_DEBUG("realpath [%s] -> [%s]\n",
+                 smb_fname_str_dbg(parent_name),
+                 resolved_name);
 
        /* Now check the stat value is the same. */
        if (SMB_VFS_LSTAT(conn, smb_fname_cwd) != 0) {
@@ -1140,11 +1116,10 @@ NTSTATUS check_reduced_name_with_privilege(connection_struct *conn,
        }
 
        /* Ensure we're pointing at the same place. */
-       if (!check_same_stat(&smb_fname_cwd->st, &priv_paths->parent_name.st)) {
-               DEBUG(0,("check_reduced_name_with_privilege: "
-                       "device/inode/uid/gid on directory %s changed. "
+       if (!check_same_stat(&smb_fname_cwd->st, &parent_name->st)) {
+               DBG_ERR("device/inode/uid/gid on directory %s changed. "
                        "Denying access !\n",
-                       priv_paths->parent_name.base_name));
+                       smb_fname_str_dbg(parent_name));
                status = NT_STATUS_ACCESS_DENIED;
                goto err;
        }
@@ -1177,12 +1152,11 @@ NTSTATUS check_reduced_name_with_privilege(connection_struct *conn,
 
                if (!matched || (resolved_name[rootdir_len] != '/' &&
                                 resolved_name[rootdir_len] != '\0')) {
-                       DEBUG(2, ("check_reduced_name_with_privilege: Bad "
-                               "access attempt: %s is a symlink outside the "
-                               "share path\n",
-                               dir_name));
-                       DEBUGADD(2, ("conn_rootdir =%s\n", conn_rootdir));
-                       DEBUGADD(2, ("resolved_name=%s\n", resolved_name));
+                       DBG_WARNING("%s is a symlink outside the "
+                                   "share path\n",
+                                   smb_fname_str_dbg(parent_name));
+                       DEBUGADD(1, ("conn_rootdir =%s\n", conn_rootdir));
+                       DEBUGADD(1, ("resolved_name=%s\n", resolved_name));
                        status = NT_STATUS_ACCESS_DENIED;
                        goto err;
                }
@@ -1191,30 +1165,28 @@ NTSTATUS check_reduced_name_with_privilege(connection_struct *conn,
        /* Now ensure that the last component either doesn't
           exist, or is *NOT* a symlink. */
 
-       ret = SMB_VFS_LSTAT(conn, &priv_paths->file_name);
+       ret = SMB_VFS_LSTAT(conn, file_name);
        if (ret == -1) {
                /* Errno must be ENOENT for this be ok. */
                if (errno != ENOENT) {
                        status = map_nt_error_from_unix(errno);
-                       DEBUG(2, ("check_reduced_name_with_privilege: "
-                               "LSTAT on %s failed with %s\n",
-                               priv_paths->file_name.base_name,
-                               nt_errstr(status)));
+                       DBG_WARNING("LSTAT on %s failed with %s\n",
+                                   smb_fname_str_dbg(file_name),
+                                   nt_errstr(status));
                        goto err;
                }
        }
 
-       if (VALID_STAT(priv_paths->file_name.st) &&
-                       S_ISLNK(priv_paths->file_name.st.st_ex_mode)) {
-               DEBUG(2, ("check_reduced_name_with_privilege: "
-                       "Last component %s is a symlink. Denying"
-                       "access.\n",
-                       priv_paths->file_name.base_name));
+       if (VALID_STAT(file_name->st) &&
+           S_ISLNK(file_name->st.st_ex_mode))
+       {
+               DBG_WARNING("Last component %s is a symlink. Denying"
+                           "access.\n",
+                           smb_fname_str_dbg(file_name));
                status = NT_STATUS_ACCESS_DENIED;
                goto err;
        }
 
-       smbreq->priv_paths = priv_paths;
        status = NT_STATUS_OK;
 
   err:
@@ -1224,16 +1196,13 @@ NTSTATUS check_reduced_name_with_privilege(connection_struct *conn,
                TALLOC_FREE(saved_dir_fname);
        }
        TALLOC_FREE(resolved_fname);
-       if (!NT_STATUS_IS_OK(status)) {
-               TALLOC_FREE(priv_paths);
-       }
-       TALLOC_FREE(dir_name);
+       TALLOC_FREE(parent_name);
        return status;
 }
 
 /*******************************************************************
  Reduce a file name, removing .. elements and checking that
- it is below dir in the heirachy. This uses realpath.
+ it is below dir in the hierarchy. This uses realpath.
 
  If cwd_name == NULL then fname is a client given path relative
  to the root path of the share.
@@ -1253,7 +1222,9 @@ NTSTATUS check_reduced_name(connection_struct *conn,
        char *resolved_name = NULL;
        char *new_fname = NULL;
        bool allow_symlinks = true;
-       bool allow_widelinks = false;
+       const char *conn_rootdir;
+       size_t rootdir_len;
+       bool ok;
 
        DBG_DEBUG("check_reduced_name [%s] [%s]\n", fname, conn->connectpath);
 
@@ -1268,24 +1239,24 @@ NTSTATUS check_reduced_name(connection_struct *conn,
                                return NT_STATUS_OBJECT_PATH_NOT_FOUND;
                        case ENOENT:
                        {
-                               char *dir_name = NULL;
-                               struct smb_filename dir_fname = {0};
-                               const char *last_component = NULL;
+                               struct smb_filename *dir_fname = NULL;
+                               struct smb_filename *last_component = NULL;
 
                                /* Last component didn't exist.
                                   Remove it and try and canonicalise
                                   the directory name. */
-                               if (!parent_dirname(ctx, fname,
-                                               &dir_name,
-                                               &last_component)) {
+
+                               ok = parent_smb_fname(ctx,
+                                                     smb_fname,
+                                                     &dir_fname,
+                                                     &last_component);
+                               if (!ok) {
                                        return NT_STATUS_NO_MEMORY;
                                }
 
-                               dir_fname = (struct smb_filename)
-                                       { .base_name = dir_name };
                                resolved_fname = SMB_VFS_REALPATH(conn,
                                                        ctx,
-                                                       &dir_fname);
+                                                       dir_fname);
                                if (resolved_fname == NULL) {
                                        NTSTATUS status = map_nt_error_from_unix(errno);
 
@@ -1296,14 +1267,14 @@ NTSTATUS check_reduced_name(connection_struct *conn,
                                        DEBUG(3,("check_reduce_name: "
                                                 "couldn't get realpath for "
                                                 "%s (%s)\n",
-                                               fname,
+                                               smb_fname_str_dbg(dir_fname),
                                                nt_errstr(status)));
                                        return status;
                                }
                                resolved_name = talloc_asprintf(ctx,
                                                "%s/%s",
                                                resolved_fname->base_name,
-                                               last_component);
+                                               last_component->base_name);
                                if (resolved_name == NULL) {
                                        return NT_STATUS_NO_MEMORY;
                                }
@@ -1328,103 +1299,97 @@ NTSTATUS check_reduced_name(connection_struct *conn,
                return NT_STATUS_OBJECT_NAME_INVALID;
        }
 
-       allow_widelinks = lp_widelinks(SNUM(conn));
-       allow_symlinks = lp_follow_symlinks(SNUM(conn));
-
        /* Common widelinks and symlinks checks. */
-       if (!allow_widelinks || !allow_symlinks) {
-               const char *conn_rootdir;
-               size_t rootdir_len;
-
-               conn_rootdir = SMB_VFS_CONNECTPATH(conn, smb_fname);
-               if (conn_rootdir == NULL) {
-                       DEBUG(2, ("check_reduced_name: Could not get "
-                               "conn_rootdir\n"));
+       conn_rootdir = SMB_VFS_CONNECTPATH(conn, smb_fname);
+       if (conn_rootdir == NULL) {
+               DBG_NOTICE("Could not get conn_rootdir\n");
+               TALLOC_FREE(resolved_fname);
+               return NT_STATUS_ACCESS_DENIED;
+       }
+
+       rootdir_len = strlen(conn_rootdir);
+
+       /*
+        * In the case of rootdir_len == 1, we know that
+        * conn_rootdir is "/", and we also know that
+        * resolved_name starts with a slash.  So, in this
+        * corner case, resolved_name is automatically a
+        * sub-directory of the conn_rootdir. Thus we can skip
+        * the string comparison and the next character checks
+        * (which are even wrong in this case).
+        */
+       if (rootdir_len != 1) {
+               bool matched;
+
+               matched = (strncmp(conn_rootdir, resolved_name,
+                               rootdir_len) == 0);
+               if (!matched || (resolved_name[rootdir_len] != '/' &&
+                                resolved_name[rootdir_len] != '\0')) {
+                       DBG_NOTICE("Bad access attempt: %s is a symlink "
+                               "outside the "
+                               "share path\n"
+                               "conn_rootdir =%s\n"
+                               "resolved_name=%s\n",
+                               fname,
+                               conn_rootdir,
+                               resolved_name);
                        TALLOC_FREE(resolved_fname);
                        return NT_STATUS_ACCESS_DENIED;
                }
+       }
 
-               rootdir_len = strlen(conn_rootdir);
+       /* Extra checks if all symlinks are disallowed. */
+       allow_symlinks = lp_follow_symlinks(SNUM(conn));
+       if (!allow_symlinks) {
+               /* fname can't have changed in resolved_path. */
+               const char *p = &resolved_name[rootdir_len];
 
                /*
-                * In the case of rootdir_len == 1, we know that
-                * conn_rootdir is "/", and we also know that
-                * resolved_name starts with a slash.  So, in this
-                * corner case, resolved_name is automatically a
-                * sub-directory of the conn_rootdir. Thus we can skip
-                * the string comparison and the next character checks
-                * (which are even wrong in this case).
+                * UNIX filesystem semantics, names consisting
+                * only of "." or ".." CANNOT be symlinks.
                 */
-               if (rootdir_len != 1) {
-                       bool matched;
-
-                       matched = (strncmp(conn_rootdir, resolved_name,
-                                       rootdir_len) == 0);
-                       if (!matched || (resolved_name[rootdir_len] != '/' &&
-                                        resolved_name[rootdir_len] != '\0')) {
-                               DEBUG(2, ("check_reduced_name: Bad access "
-                                       "attempt: %s is a symlink outside the "
-                                       "share path\n", fname));
-                               DEBUGADD(2, ("conn_rootdir =%s\n",
-                                            conn_rootdir));
-                               DEBUGADD(2, ("resolved_name=%s\n",
-                                            resolved_name));
-                               TALLOC_FREE(resolved_fname);
-                               return NT_STATUS_ACCESS_DENIED;
-                       }
+               if (ISDOT(fname) || ISDOTDOT(fname)) {
+                       goto out;
                }
 
-               /* Extra checks if all symlinks are disallowed. */
-               if (!allow_symlinks) {
-                       /* fname can't have changed in resolved_path. */
-                       const char *p = &resolved_name[rootdir_len];
+               if (*p != '/') {
+                       DBG_NOTICE("logic error (%c) "
+                               "in resolved_name: %s\n",
+                               *p,
+                               fname);
+                       TALLOC_FREE(resolved_fname);
+                       return NT_STATUS_ACCESS_DENIED;
+               }
 
-                       /*
-                        * UNIX filesystem semantics, names consisting
-                        * only of "." or ".." CANNOT be symlinks.
-                        */
-                       if (ISDOT(fname) || ISDOTDOT(fname)) {
-                               goto out;
-                       }
+               p++;
 
-                       if (*p != '/') {
-                               DEBUG(2, ("check_reduced_name: logic error (%c) "
-                                       "in resolved_name: %s\n",
-                                       *p,
-                                       fname));
+               /*
+                * If cwd_name is present and not ".",
+                * then fname is relative to that, not
+                * the root of the share. Make sure the
+                * path we check is the one the client
+                * sent (cwd_name+fname).
+                */
+               if (cwd_name != NULL && !ISDOT(cwd_name)) {
+                       new_fname = talloc_asprintf(ctx,
+                                               "%s/%s",
+                                               cwd_name,
+                                               fname);
+                       if (new_fname == NULL) {
                                TALLOC_FREE(resolved_fname);
-                               return NT_STATUS_ACCESS_DENIED;
-                       }
-
-                       p++;
-
-                       /*
-                        * If cwd_name is present and not ".",
-                        * then fname is relative to that, not
-                        * the root of the share. Make sure the
-                        * path we check is the one the client
-                        * sent (cwd_name+fname).
-                        */
-                       if (cwd_name != NULL && !ISDOT(cwd_name)) {
-                               new_fname = talloc_asprintf(ctx,
-                                                       "%s/%s",
-                                                       cwd_name,
-                                                       fname);
-                               if (new_fname == NULL) {
-                                       TALLOC_FREE(resolved_fname);
-                                       return NT_STATUS_NO_MEMORY;
-                               }
-                               fname = new_fname;
+                               return NT_STATUS_NO_MEMORY;
                        }
+                       fname = new_fname;
+               }
 
-                       if (strcmp(fname, p)!=0) {
-                               DEBUG(2, ("check_reduced_name: Bad access "
-                                       "attempt: %s is a symlink to %s\n",
-                                         fname, p));
-                               TALLOC_FREE(resolved_fname);
-                               TALLOC_FREE(new_fname);
-                               return NT_STATUS_ACCESS_DENIED;
-                       }
+               if (strcmp(fname, p)!=0) {
+                       DBG_NOTICE("Bad access "
+                               "attempt: %s is a symlink to %s\n",
+                               fname,
+                               p);
+                       TALLOC_FREE(resolved_fname);
+                       TALLOC_FREE(new_fname);
+                       return NT_STATUS_ACCESS_DENIED;
                }
        }
 
@@ -1448,7 +1413,8 @@ int vfs_stat_smb_basename(struct connection_struct *conn,
 {
        struct smb_filename smb_fname = {
                .base_name = discard_const_p(char, smb_fname_in->base_name),
-               .flags = smb_fname_in->flags
+               .flags = smb_fname_in->flags,
+               .twrp = smb_fname_in->twrp,
        };
        int ret;
 
@@ -1471,6 +1437,7 @@ int vfs_stat_smb_basename(struct connection_struct *conn,
 NTSTATUS vfs_stat_fsp(files_struct *fsp)
 {
        int ret;
+       struct stat_ex saved_stat = fsp->fsp_name->st;
 
        if(fsp->fh->fd == -1) {
                if (fsp->posix_flags & FSP_POSIX_FLAGS_OPEN) {
@@ -1478,17 +1445,26 @@ NTSTATUS vfs_stat_fsp(files_struct *fsp)
                } else {
                        ret = SMB_VFS_STAT(fsp->conn, fsp->fsp_name);
                }
-               if (ret == -1) {
-                       return map_nt_error_from_unix(errno);
-               }
        } else {
-               if(SMB_VFS_FSTAT(fsp, &fsp->fsp_name->st) != 0) {
-                       return map_nt_error_from_unix(errno);
-               }
+               ret = SMB_VFS_FSTAT(fsp, &fsp->fsp_name->st);
        }
+       if (ret == -1) {
+               return map_nt_error_from_unix(errno);
+       }
+       update_stat_ex_from_saved_stat(&fsp->fsp_name->st, &saved_stat);
        return NT_STATUS_OK;
 }
 
+void init_smb_file_time(struct smb_file_time *ft)
+{
+       *ft = (struct smb_file_time) {
+               .atime = make_omit_timespec(),
+               .ctime = make_omit_timespec(),
+               .mtime = make_omit_timespec(),
+               .create_time = make_omit_timespec()
+       };
+}
+
 /**
  * Initialize num_streams and streams, then call VFS op streaminfo
  */
@@ -1591,13 +1567,34 @@ NTSTATUS smb_vfs_call_get_dfs_referrals(struct vfs_handle_struct *handle,
        return handle->fns->get_dfs_referrals_fn(handle, r);
 }
 
-DIR *smb_vfs_call_opendir(struct vfs_handle_struct *handle,
-                                       const struct smb_filename *smb_fname,
-                                       const char *mask,
-                                       uint32_t attributes)
+NTSTATUS smb_vfs_call_create_dfs_pathat(struct vfs_handle_struct *handle,
+                               struct files_struct *dirfsp,
+                               const struct smb_filename *smb_fname,
+                               const struct referral *reflist,
+                               size_t referral_count)
+{
+       VFS_FIND(create_dfs_pathat);
+       return handle->fns->create_dfs_pathat_fn(handle,
+                                               dirfsp,
+                                               smb_fname,
+                                               reflist,
+                                               referral_count);
+}
+
+NTSTATUS smb_vfs_call_read_dfs_pathat(struct vfs_handle_struct *handle,
+                               TALLOC_CTX *mem_ctx,
+                               struct files_struct *dirfsp,
+                               const struct smb_filename *smb_fname,
+                               struct referral **ppreflist,
+                               size_t *preferral_count)
 {
-       VFS_FIND(opendir);
-       return handle->fns->opendir_fn(handle, smb_fname, mask, attributes);
+       VFS_FIND(read_dfs_pathat);
+       return handle->fns->read_dfs_pathat_fn(handle,
+                                               mem_ctx,
+                                               dirfsp,
+                                               smb_fname,
+                                               ppreflist,
+                                               preferral_count);
 }
 
 DIR *smb_vfs_call_fdopendir(struct vfs_handle_struct *handle,
@@ -1638,19 +1635,16 @@ void smb_vfs_call_rewind_dir(struct vfs_handle_struct *handle,
        handle->fns->rewind_dir_fn(handle, dirp);
 }
 
-int smb_vfs_call_mkdir(struct vfs_handle_struct *handle,
+int smb_vfs_call_mkdirat(struct vfs_handle_struct *handle,
+                       struct files_struct *dirfsp,
                        const struct smb_filename *smb_fname,
                        mode_t mode)
 {
-       VFS_FIND(mkdir);
-       return handle->fns->mkdir_fn(handle, smb_fname, mode);
-}
-
-int smb_vfs_call_rmdir(struct vfs_handle_struct *handle,
-                       const struct smb_filename *smb_fname)
-{
-       VFS_FIND(rmdir);
-       return handle->fns->rmdir_fn(handle, smb_fname);
+       VFS_FIND(mkdirat);
+       return handle->fns->mkdirat_fn(handle,
+                       dirfsp,
+                       smb_fname,
+                       mode);
 }
 
 int smb_vfs_call_closedir(struct vfs_handle_struct *handle,
@@ -1678,7 +1672,7 @@ NTSTATUS smb_vfs_call_create_file(struct vfs_handle_struct *handle,
                                  uint32_t create_options,
                                  uint32_t file_attributes,
                                  uint32_t oplock_request,
-                                 struct smb2_lease *lease,
+                                 const struct smb2_lease *lease,
                                  uint64_t allocation_size,
                                  uint32_t private_flags,
                                  struct security_descriptor *sd,
@@ -1704,13 +1698,6 @@ int smb_vfs_call_close(struct vfs_handle_struct *handle,
        return handle->fns->close_fn(handle, fsp);
 }
 
-ssize_t smb_vfs_call_read(struct vfs_handle_struct *handle,
-                         struct files_struct *fsp, void *data, size_t n)
-{
-       VFS_FIND(read);
-       return handle->fns->read_fn(handle, fsp, data, n);
-}
-
 ssize_t smb_vfs_call_pread(struct vfs_handle_struct *handle,
                           struct files_struct *fsp, void *data, size_t n,
                           off_t offset)
@@ -1775,20 +1762,16 @@ ssize_t SMB_VFS_PREAD_RECV(struct tevent_req *req,
 {
        struct smb_vfs_call_pread_state *state = tevent_req_data(
                req, struct smb_vfs_call_pread_state);
+       ssize_t retval;
 
        if (tevent_req_is_unix_error(req, &vfs_aio_state->error)) {
+               tevent_req_received(req);
                return -1;
        }
        *vfs_aio_state = state->vfs_aio_state;
-       return state->retval;
-}
-
-ssize_t smb_vfs_call_write(struct vfs_handle_struct *handle,
-                          struct files_struct *fsp, const void *data,
-                          size_t n)
-{
-       VFS_FIND(write);
-       return handle->fns->write_fn(handle, fsp, data, n);
+       retval = state->retval;
+       tevent_req_received(req);
+       return retval;
 }
 
 ssize_t smb_vfs_call_pwrite(struct vfs_handle_struct *handle,
@@ -1855,12 +1838,16 @@ ssize_t SMB_VFS_PWRITE_RECV(struct tevent_req *req,
 {
        struct smb_vfs_call_pwrite_state *state = tevent_req_data(
                req, struct smb_vfs_call_pwrite_state);
+       ssize_t retval;
 
        if (tevent_req_is_unix_error(req, &vfs_aio_state->error)) {
+               tevent_req_received(req);
                return -1;
        }
        *vfs_aio_state = state->vfs_aio_state;
-       return state->retval;
+       retval = state->retval;
+       tevent_req_received(req);
+       return retval;
 }
 
 off_t smb_vfs_call_lseek(struct vfs_handle_struct *handle,
@@ -1888,12 +1875,18 @@ ssize_t smb_vfs_call_recvfile(struct vfs_handle_struct *handle, int fromfd,
        return handle->fns->recvfile_fn(handle, fromfd, tofsp, offset, count);
 }
 
-int smb_vfs_call_rename(struct vfs_handle_struct *handle,
+int smb_vfs_call_renameat(struct vfs_handle_struct *handle,
+                       files_struct *srcfsp,
                        const struct smb_filename *smb_fname_src,
+                       files_struct *dstfsp,
                        const struct smb_filename *smb_fname_dst)
 {
-       VFS_FIND(rename);
-       return handle->fns->rename_fn(handle, smb_fname_src, smb_fname_dst);
+       VFS_FIND(renameat);
+       return handle->fns->renameat_fn(handle,
+                               srcfsp,
+                               smb_fname_src,
+                               dstfsp,
+                               smb_fname_dst);
 }
 
 struct smb_vfs_call_fsync_state {
@@ -1948,12 +1941,16 @@ int SMB_VFS_FSYNC_RECV(struct tevent_req *req, struct vfs_aio_state *vfs_aio_sta
 {
        struct smb_vfs_call_fsync_state *state = tevent_req_data(
                req, struct smb_vfs_call_fsync_state);
+       ssize_t retval;
 
        if (tevent_req_is_unix_error(req, &vfs_aio_state->error)) {
+               tevent_req_received(req);
                return -1;
        }
        *vfs_aio_state = state->vfs_aio_state;
-       return state->retval;
+       retval = state->retval;
+       tevent_req_received(req);
+       return retval;
 }
 
 /*
@@ -2025,11 +2022,16 @@ uint64_t smb_vfs_call_get_alloc_size(struct vfs_handle_struct *handle,
        return handle->fns->get_alloc_size_fn(handle, fsp, sbuf);
 }
 
-int smb_vfs_call_unlink(struct vfs_handle_struct *handle,
-                       const struct smb_filename *smb_fname)
+int smb_vfs_call_unlinkat(struct vfs_handle_struct *handle,
+                       struct files_struct *dirfsp,
+                       const struct smb_filename *smb_fname,
+                       int flags)
 {
-       VFS_FIND(unlink);
-       return handle->fns->unlink_fn(handle, smb_fname);
+       VFS_FIND(unlinkat);
+       return handle->fns->unlinkat_fn(handle,
+                       dirfsp,
+                       smb_fname,
+                       flags);
 }
 
 int smb_vfs_call_chmod(struct vfs_handle_struct *handle,
@@ -2047,15 +2049,6 @@ int smb_vfs_call_fchmod(struct vfs_handle_struct *handle,
        return handle->fns->fchmod_fn(handle, fsp, mode);
 }
 
-int smb_vfs_call_chown(struct vfs_handle_struct *handle,
-                       const struct smb_filename *smb_fname,
-                       uid_t uid,
-                       gid_t gid)
-{
-       VFS_FIND(chown);
-       return handle->fns->chown_fn(handle, smb_fname, uid, gid);
-}
-
 int smb_vfs_call_fchown(struct vfs_handle_struct *handle,
                        struct files_struct *fsp, uid_t uid, gid_t gid)
 {
@@ -2072,127 +2065,6 @@ int smb_vfs_call_lchown(struct vfs_handle_struct *handle,
        return handle->fns->lchown_fn(handle, smb_fname, uid, gid);
 }
 
-NTSTATUS vfs_chown_fsp(files_struct *fsp, uid_t uid, gid_t gid)
-{
-       int ret;
-       bool as_root = false;
-       NTSTATUS status;
-
-       if (fsp->fh->fd != -1) {
-               /* Try fchown. */
-               ret = SMB_VFS_FCHOWN(fsp, uid, gid);
-               if (ret == 0) {
-                       return NT_STATUS_OK;
-               }
-               if (ret == -1 && errno != ENOSYS) {
-                       return map_nt_error_from_unix(errno);
-               }
-       }
-
-       as_root = (geteuid() == 0);
-
-       if (as_root) {
-               /*
-                * We are being asked to chown as root. Make
-                * sure we chdir() into the path to pin it,
-                * and always act using lchown to ensure we
-                * don't deref any symbolic links.
-                */
-               char *parent_dir = NULL;
-               const char *final_component = NULL;
-               struct smb_filename *local_smb_fname = NULL;
-               struct smb_filename parent_dir_fname = {0};
-               struct smb_filename *saved_dir_fname = NULL;
-
-               saved_dir_fname = vfs_GetWd(talloc_tos(),fsp->conn);
-               if (!saved_dir_fname) {
-                       status = map_nt_error_from_unix(errno);
-                       DEBUG(0,("vfs_chown_fsp: failed to get "
-                               "current working directory. Error was %s\n",
-                               strerror(errno)));
-                       return status;
-               }
-
-               if (!parent_dirname(talloc_tos(),
-                               fsp->fsp_name->base_name,
-                               &parent_dir,
-                               &final_component)) {
-                       return NT_STATUS_NO_MEMORY;
-               }
-
-               parent_dir_fname = (struct smb_filename) {
-                       .base_name = parent_dir,
-                       .flags = fsp->fsp_name->flags
-               };
-
-               /* cd into the parent dir to pin it. */
-               ret = vfs_ChDir(fsp->conn, &parent_dir_fname);
-               if (ret == -1) {
-                       return map_nt_error_from_unix(errno);
-               }
-
-               local_smb_fname = synthetic_smb_fname(talloc_tos(),
-                                       final_component,
-                                       NULL,
-                                       NULL,
-                                       fsp->fsp_name->flags);
-               if (local_smb_fname == NULL) {
-                       status = NT_STATUS_NO_MEMORY;
-                       goto out;
-               }
-
-               /* Must use lstat here. */
-               ret = SMB_VFS_LSTAT(fsp->conn, local_smb_fname);
-               if (ret == -1) {
-                       status = map_nt_error_from_unix(errno);
-                       goto out;
-               }
-
-               /* Ensure it matches the fsp stat. */
-               if (!check_same_stat(&local_smb_fname->st,
-                               &fsp->fsp_name->st)) {
-                        status = NT_STATUS_ACCESS_DENIED;
-                       goto out;
-                }
-
-               ret = SMB_VFS_LCHOWN(fsp->conn,
-                       local_smb_fname,
-                       uid, gid);
-
-               if (ret == 0) {
-                       status = NT_STATUS_OK;
-               } else {
-                       status = map_nt_error_from_unix(errno);
-               }
-
-  out:
-
-               vfs_ChDir(fsp->conn, saved_dir_fname);
-               TALLOC_FREE(local_smb_fname);
-               TALLOC_FREE(saved_dir_fname);
-               TALLOC_FREE(parent_dir);
-
-               return status;
-       }
-
-       if (fsp->posix_flags & FSP_POSIX_FLAGS_OPEN) {
-               ret = SMB_VFS_LCHOWN(fsp->conn,
-                       fsp->fsp_name,
-                       uid, gid);
-       } else {
-               ret = SMB_VFS_CHOWN(fsp->conn,
-                       fsp->fsp_name,
-                       uid, gid);
-       }
-
-       if (ret == 0) {
-               status = NT_STATUS_OK;
-       } else {
-               status = map_nt_error_from_unix(errno);
-       }
-       return status;
-}
-
 int smb_vfs_call_chdir(struct vfs_handle_struct *handle,
                        const struct smb_filename *smb_fname)
 {
@@ -2241,6 +2113,21 @@ int smb_vfs_call_kernel_flock(struct vfs_handle_struct *handle,
                                         access_mask);
 }
 
+int smb_vfs_call_fcntl(struct vfs_handle_struct *handle,
+                      struct files_struct *fsp, int cmd, ...)
+{
+       int result;
+       va_list cmd_arg;
+
+       VFS_FIND(fcntl);
+
+       va_start(cmd_arg, cmd);
+       result = handle->fns->fcntl_fn(handle, fsp, cmd, cmd_arg);
+       va_end(cmd_arg);
+
+       return result;
+}
+
 int smb_vfs_call_linux_setlease(struct vfs_handle_struct *handle,
                                struct files_struct *fsp, int leasetype)
 {
@@ -2248,38 +2135,60 @@ int smb_vfs_call_linux_setlease(struct vfs_handle_struct *handle,
        return handle->fns->linux_setlease_fn(handle, fsp, leasetype);
 }
 
-int smb_vfs_call_symlink(struct vfs_handle_struct *handle,
-                       const char *link_target,
+int smb_vfs_call_symlinkat(struct vfs_handle_struct *handle,
+                       const struct smb_filename *link_target,
+                       struct files_struct *dirfsp,
                        const struct smb_filename *new_smb_fname)
 {
-       VFS_FIND(symlink);
-       return handle->fns->symlink_fn(handle, link_target, new_smb_fname);
+       VFS_FIND(symlinkat);
+       return handle->fns->symlinkat_fn(handle,
+                               link_target,
+                               dirfsp,
+                               new_smb_fname);
 }
 
-int smb_vfs_call_readlink(struct vfs_handle_struct *handle,
+int smb_vfs_call_readlinkat(struct vfs_handle_struct *handle,
+                       files_struct *dirfsp,
                        const struct smb_filename *smb_fname,
                        char *buf,
                        size_t bufsiz)
 {
-       VFS_FIND(readlink);
-       return handle->fns->readlink_fn(handle, smb_fname, buf, bufsiz);
+       VFS_FIND(readlinkat);
+       return handle->fns->readlinkat_fn(handle,
+                               dirfsp,
+                               smb_fname,
+                               buf,
+                               bufsiz);
 }
 
-int smb_vfs_call_link(struct vfs_handle_struct *handle,
+int smb_vfs_call_linkat(struct vfs_handle_struct *handle,
+                       struct files_struct *srcfsp,
                        const struct smb_filename *old_smb_fname,
-                       const struct smb_filename *new_smb_fname)
+                       struct files_struct *dstfsp,
+                       const struct smb_filename *new_smb_fname,
+                       int flags)
 {
-       VFS_FIND(link);
-       return handle->fns->link_fn(handle, old_smb_fname, new_smb_fname);
+       VFS_FIND(linkat);
+       return handle->fns->linkat_fn(handle,
+                               srcfsp,
+                               old_smb_fname,
+                               dstfsp,
+                               new_smb_fname,
+                               flags);
 }
 
-int smb_vfs_call_mknod(struct vfs_handle_struct *handle,
+int smb_vfs_call_mknodat(struct vfs_handle_struct *handle,
+                       struct files_struct *dirfsp,
                        const struct smb_filename *smb_fname,
                        mode_t mode,
                        SMB_DEV_T dev)
 {
-       VFS_FIND(mknod);
-       return handle->fns->mknod_fn(handle, smb_fname, mode, dev);
+       VFS_FIND(mknodat);
+       return handle->fns->mknodat_fn(handle,
+                               dirfsp,
+                               smb_fname,
+                               mode,
+                               dev);
 }
 
 struct smb_filename *smb_vfs_call_realpath(struct vfs_handle_struct *handle,
@@ -2305,6 +2214,13 @@ struct file_id smb_vfs_call_file_id_create(struct vfs_handle_struct *handle,
        return handle->fns->file_id_create_fn(handle, sbuf);
 }
 
+uint64_t smb_vfs_call_fs_file_id(struct vfs_handle_struct *handle,
+                                const SMB_STRUCT_STAT *sbuf)
+{
+       VFS_FIND(fs_file_id);
+       return handle->fns->fs_file_id_fn(handle, sbuf);
+}
+
 NTSTATUS smb_vfs_call_streaminfo(struct vfs_handle_struct *handle,
                                 struct files_struct *fsp,
                                 const struct smb_filename *smb_fname,
@@ -2318,8 +2234,10 @@ NTSTATUS smb_vfs_call_streaminfo(struct vfs_handle_struct *handle,
 }
 
 int smb_vfs_call_get_real_filename(struct vfs_handle_struct *handle,
-                                  const char *path, const char *name,
-                                  TALLOC_CTX *mem_ctx, char **found_name)
+                                  const struct smb_filename *path,
+                                  const char *name,
+                                  TALLOC_CTX *mem_ctx,
+                                  char **found_name)
 {
        VFS_FIND(get_real_filename);
        return handle->fns->get_real_filename_fn(handle, path, name, mem_ctx,
@@ -2449,6 +2367,107 @@ NTSTATUS smb_vfs_call_offload_write_recv(struct vfs_handle_struct *handle,
        return handle->fns->offload_write_recv_fn(handle, req, copied);
 }
 
+struct smb_vfs_call_get_dos_attributes_state {
+       files_struct *dir_fsp;
+       NTSTATUS (*recv_fn)(struct tevent_req *req,
+                           struct vfs_aio_state *aio_state,
+                           uint32_t *dosmode);
+       struct vfs_aio_state aio_state;
+       uint32_t dos_attributes;
+};
+
+static void smb_vfs_call_get_dos_attributes_done(struct tevent_req *subreq);
+
+struct tevent_req *smb_vfs_call_get_dos_attributes_send(
+                       TALLOC_CTX *mem_ctx,
+                       struct tevent_context *ev,
+                       struct vfs_handle_struct *handle,
+                       files_struct *dir_fsp,
+                       struct smb_filename *smb_fname)
+{
+       struct tevent_req *req = NULL;
+       struct smb_vfs_call_get_dos_attributes_state *state = NULL;
+       struct tevent_req *subreq = NULL;
+
+       req = tevent_req_create(mem_ctx, &state,
+                               struct smb_vfs_call_get_dos_attributes_state);
+       if (req == NULL) {
+               return NULL;
+       }
+
+       VFS_FIND(get_dos_attributes_send);
+
+       *state = (struct smb_vfs_call_get_dos_attributes_state) {
+               .dir_fsp = dir_fsp,
+               .recv_fn = handle->fns->get_dos_attributes_recv_fn,
+       };
+
+       subreq = handle->fns->get_dos_attributes_send_fn(mem_ctx,
+                                                        ev,
+                                                        handle,
+                                                        dir_fsp,
+                                                        smb_fname);
+       if (tevent_req_nomem(subreq, req)) {
+               return tevent_req_post(req, ev);
+       }
+       tevent_req_defer_callback(req, ev);
+
+       tevent_req_set_callback(subreq,
+                               smb_vfs_call_get_dos_attributes_done,
+                               req);
+
+       return req;
+}
+
+static void smb_vfs_call_get_dos_attributes_done(struct tevent_req *subreq)
+{
+       struct tevent_req *req =
+               tevent_req_callback_data(subreq,
+               struct tevent_req);
+       struct smb_vfs_call_get_dos_attributes_state *state =
+               tevent_req_data(req,
+               struct smb_vfs_call_get_dos_attributes_state);
+       NTSTATUS status;
+       bool ok;
+
+       /*
+        * Make sure we run as the user again
+        */
+       ok = change_to_user_and_service_by_fsp(state->dir_fsp);
+       SMB_ASSERT(ok);
+
+       status = state->recv_fn(subreq,
+                               &state->aio_state,
+                               &state->dos_attributes);
+       TALLOC_FREE(subreq);
+       if (tevent_req_nterror(req, status)) {
+               return;
+       }
+
+       tevent_req_done(req);
+}
+
+NTSTATUS smb_vfs_call_get_dos_attributes_recv(
+               struct tevent_req *req,
+               struct vfs_aio_state *aio_state,
+               uint32_t *dos_attributes)
+{
+       struct smb_vfs_call_get_dos_attributes_state *state =
+               tevent_req_data(req,
+               struct smb_vfs_call_get_dos_attributes_state);
+       NTSTATUS status;
+
+       if (tevent_req_is_nterror(req, &status)) {
+               tevent_req_received(req);
+               return status;
+       }
+
+       *aio_state = state->aio_state;
+       *dos_attributes = state->dos_attributes;
+       tevent_req_received(req);
+       return NT_STATUS_OK;
+}
+
 NTSTATUS smb_vfs_call_get_compression(vfs_handle_struct *handle,
                                      TALLOC_CTX *mem_ctx,
                                      struct files_struct *fsp,
@@ -2528,6 +2547,22 @@ NTSTATUS smb_vfs_call_get_nt_acl(struct vfs_handle_struct *handle,
                                ppdesc);
 }
 
+NTSTATUS smb_vfs_call_get_nt_acl_at(struct vfs_handle_struct *handle,
+                       struct files_struct *dirfsp,
+                       const struct smb_filename *smb_fname,
+                       uint32_t security_info,
+                       TALLOC_CTX *mem_ctx,
+                       struct security_descriptor **ppdesc)
+{
+       VFS_FIND(get_nt_acl_at);
+       return handle->fns->get_nt_acl_at_fn(handle,
+                               dirfsp,
+                               smb_fname,
+                               security_info,
+                               mem_ctx,
+                               ppdesc);
+}
+
 NTSTATUS smb_vfs_call_fset_nt_acl(struct vfs_handle_struct *handle,
                                  struct files_struct *fsp,
                                  uint32_t security_info_sent,
@@ -2552,21 +2587,6 @@ NTSTATUS smb_vfs_call_audit_file(struct vfs_handle_struct *handle,
                                          access_denied);
 }
 
-int smb_vfs_call_chmod_acl(struct vfs_handle_struct *handle,
-               const struct smb_filename *smb_fname,
-               mode_t mode)
-{
-       VFS_FIND(chmod_acl);
-       return handle->fns->chmod_acl_fn(handle, smb_fname, mode);
-}
-
-int smb_vfs_call_fchmod_acl(struct vfs_handle_struct *handle,
-                           struct files_struct *fsp, mode_t mode)
-{
-       VFS_FIND(fchmod_acl);
-       return handle->fns->fchmod_acl_fn(handle, fsp, mode);
-}
-
 SMB_ACL_T smb_vfs_call_sys_acl_get_file(struct vfs_handle_struct *handle,
                                        const struct smb_filename *smb_fname,
                                        SMB_ACL_TYPE_T type,
@@ -2639,6 +2659,113 @@ ssize_t smb_vfs_call_getxattr(struct vfs_handle_struct *handle,
        return handle->fns->getxattr_fn(handle, smb_fname, name, value, size);
 }
 
+
+struct smb_vfs_call_getxattrat_state {
+       files_struct *dir_fsp;
+       ssize_t (*recv_fn)(struct tevent_req *req,
+                          struct vfs_aio_state *aio_state,
+                          TALLOC_CTX *mem_ctx,
+                          uint8_t **xattr_value);
+       ssize_t retval;
+       uint8_t *xattr_value;
+       struct vfs_aio_state aio_state;
+};
+
+static void smb_vfs_call_getxattrat_done(struct tevent_req *subreq);
+
+struct tevent_req *smb_vfs_call_getxattrat_send(
+                       TALLOC_CTX *mem_ctx,
+                       struct tevent_context *ev,
+                       struct vfs_handle_struct *handle,
+                       files_struct *dir_fsp,
+                       const struct smb_filename *smb_fname,
+                       const char *xattr_name,
+                       size_t alloc_hint)
+{
+       struct tevent_req *req = NULL;
+       struct smb_vfs_call_getxattrat_state *state = NULL;
+       struct tevent_req *subreq = NULL;
+
+       req = tevent_req_create(mem_ctx, &state,
+                               struct smb_vfs_call_getxattrat_state);
+       if (req == NULL) {
+               return NULL;
+       }
+
+       VFS_FIND(getxattrat_send);
+
+       *state = (struct smb_vfs_call_getxattrat_state) {
+               .dir_fsp = dir_fsp,
+               .recv_fn = handle->fns->getxattrat_recv_fn,
+       };
+
+       subreq = handle->fns->getxattrat_send_fn(mem_ctx,
+                                                ev,
+                                                handle,
+                                                dir_fsp,
+                                                smb_fname,
+                                                xattr_name,
+                                                alloc_hint);
+       if (tevent_req_nomem(subreq, req)) {
+               return tevent_req_post(req, ev);
+       }
+       tevent_req_defer_callback(req, ev);
+
+       tevent_req_set_callback(subreq, smb_vfs_call_getxattrat_done, req);
+       return req;
+}
+
+static void smb_vfs_call_getxattrat_done(struct tevent_req *subreq)
+{
+       struct tevent_req *req = tevent_req_callback_data(
+               subreq, struct tevent_req);
+       struct smb_vfs_call_getxattrat_state *state = tevent_req_data(
+               req, struct smb_vfs_call_getxattrat_state);
+       bool ok;
+
+       /*
+        * Make sure we run as the user again
+        */
+       ok = change_to_user_and_service_by_fsp(state->dir_fsp);
+       SMB_ASSERT(ok);
+
+       state->retval = state->recv_fn(subreq,
+                                      &state->aio_state,
+                                      state,
+                                      &state->xattr_value);
+       TALLOC_FREE(subreq);
+       if (state->retval == -1) {
+               tevent_req_error(req, state->aio_state.error);
+               return;
+       }
+
+       tevent_req_done(req);
+}
+
+ssize_t smb_vfs_call_getxattrat_recv(struct tevent_req *req,
+                                    struct vfs_aio_state *aio_state,
+                                    TALLOC_CTX *mem_ctx,
+                                    uint8_t **xattr_value)
+{
+       struct smb_vfs_call_getxattrat_state *state = tevent_req_data(
+               req, struct smb_vfs_call_getxattrat_state);
+       size_t xattr_size;
+
+       if (tevent_req_is_unix_error(req, &aio_state->error)) {
+               tevent_req_received(req);
+               return -1;
+       }
+
+       *aio_state = state->aio_state;
+       xattr_size = state->retval;
+       if (xattr_value != NULL) {
+               *xattr_value = talloc_move(mem_ctx, &state->xattr_value);
+       }
+
+       tevent_req_received(req);
+       return xattr_size;
+}
+
 ssize_t smb_vfs_call_fgetxattr(struct vfs_handle_struct *handle,
                               struct files_struct *fsp, const char *name,
                               void *value, size_t size)