]>
diplodocus.org Git - nmh/blob - uip/inc.c
3 * inc.c -- incorporate messages from a maildrop into a folder
5 * This code is Copyright (c) 2002, by the authors of nmh. See the
6 * COPYRIGHT file in the root directory of the nmh distribution for
7 * complete copyright information.
11 /* Revised: Sat Apr 14 17:08:17 PDT 1990 (marvit@hplabs)
12 * Added hpux hacks to set and reset gid to be "mail" as needed. The reset
13 * is necessary so inc'ed mail is the group of the inc'er, rather than
14 * "mail". We setgid to egid only when [un]locking the mail file. This
15 * is also a major security precaution which will not be explained here.
17 * Fri Feb 7 16:04:57 PST 1992 John Romine <bug-mh@ics.uci.edu>
18 * NB: I'm not 100% sure that this setgid stuff is secure even now.
20 * See the *GROUPPRIVS() macros later. I'm reasonably happy with the setgid
21 * attribute. Running setuid root is probably not a terribly good idea, though.
22 * -- Peter Maydell <pmaydell@chiark.greenend.org.uk>, 04/1998
24 * Peter Maydell's patch slightly modified for nmh 0.28-pre2.
25 * Ruud de Rooij <ruud@debian.org> Wed, 22 Jul 1998 13:24:22 +0200
32 #include <h/dropsbr.h>
34 #include <h/fmt_scan.h>
35 #include <h/scansbr.h>
36 #include <h/signals.h>
41 # define SASLminc(a) (a)
43 # define SASLminc(a) 0
46 #define INC_SWITCHES \
47 X("audit audit-file", 0, AUDSW) \
48 X("noaudit", 0, NAUDSW) \
49 X("changecur", 0, CHGSW) \
50 X("nochangecur", 0, NCHGSW) \
51 X("file name", 0, FILESW) \
52 X("form formatfile", 0, FORMSW) \
53 X("format string", 5, FMTSW) \
54 X("host hostname", 0, HOSTSW) \
55 X("user username", 0, USERSW) \
56 X("pack file", 0, PACKSW) \
57 X("nopack", 0, NPACKSW) \
58 X("port name/number", 0, PORTSW) \
59 X("silent", 0, SILSW) \
60 X("nosilent", 0, NSILSW) \
61 X("truncate", 0, TRNCSW) \
62 X("notruncate", 0, NTRNCSW) \
63 X("width columns", 0, WIDTHSW) \
64 X("version", 0, VERSIONSW) \
65 X("help", 0, HELPSW) \
66 X("snoop", -5, SNOOPSW) \
67 X("sasl", SASLminc(-4), SASLSW) \
68 X("nosasl", SASLminc(-6), NOSASLSW) \
69 X("saslmech", SASLminc(-8), SASLMECHSW) \
70 X("proxy command", 0, PROXYSW) \
72 #define X(sw, minchars, id) id,
73 DEFINE_SWITCH_ENUM(INC
);
76 #define X(sw, minchars, id) { sw, minchars, id },
77 DEFINE_SWITCH_ARRAY(INC
, switches
);
81 * flags for the mail source
87 static struct Maildir_entry
{
91 static int num_maildir_entries
= 0;
94 extern char response
[];
99 static int mbx_style
= MMDF_FORMAT
;
100 static int pd
= NOTOK
;
105 static char *packfile
= NULL
;
106 static FILE *pf
= NULL
;
108 /* This is an attempt to simplify things by putting all the
109 * privilege ops into macros.
110 * *GROUPPRIVS() is related to handling the setgid MAIL property,
111 * and only applies if MAILGROUP is defined.
112 * Basically, SAVEGROUPPRIVS() is called right at the top of main()
113 * to initialise things, and then DROPGROUPPRIVS() and GETGROUPPRIVS()
114 * do the obvious thing.
116 * There's probably a better implementation if we're allowed to use
117 * BSD-style setreuid() rather than using POSIX saved-ids.
118 * Anyway, if you're euid root it's a bit pointless to drop the group
121 * I'm pretty happy that the security is good provided we aren't setuid root.
122 * The only things we trust with group=mail privilege are lkfopen()
127 * For setting and returning to "mail" gid
130 static int return_gid
;
131 #define TRYDROPGROUPPRIVS() DROPGROUPPRIVS()
132 #define DROPGROUPPRIVS() setgid(getgid())
133 #define GETGROUPPRIVS() setgid(return_gid)
134 #define SAVEGROUPPRIVS() return_gid = getegid()
136 /* define *GROUPPRIVS() as null; this avoids having lots of "#ifdef MAILGROUP"s */
137 #define TRYDROPGROUPPRIVS()
138 #define DROPGROUPPRIVS()
139 #define GETGROUPPRIVS()
140 #define SAVEGROUPPRIVS()
141 #endif /* not MAILGROUP */
143 /* these variables have to be globals so that done() can correctly clean up the lockfile */
144 static int locked
= 0;
145 static char *newmail
;
151 char *map_name(char *);
153 static void inc_done(int) NORETURN
;
154 static int pop_action(char *);
155 static int pop_pack(char *);
156 static int map_count(void);
159 maildir_srt(const void *va
, const void *vb
)
161 const struct Maildir_entry
*a
= va
, *b
= vb
;
162 if (a
->mtime
> b
->mtime
)
164 else if (a
->mtime
< b
->mtime
)
171 main (int argc
, char **argv
)
173 int chgflag
= 1, trnflag
= 1;
174 int noisy
= 1, width
= 0;
175 int hghnum
= 0, msgnum
= 0;
177 int incerr
= 0; /* <0 if inc hits an error which means it should not truncate mailspool */
178 char *cp
, *maildir
= NULL
, *folder
= NULL
;
179 char *format
= NULL
, *form
= NULL
;
180 char *host
= NULL
, *port
= NULL
, *user
= NULL
, *proxy
= NULL
;
181 char *audfile
= NULL
, *from
= NULL
, *saslmech
= NULL
;
182 char buf
[BUFSIZ
], **argp
, *nfs
, **arguments
;
183 struct msgs
*mp
= NULL
;
186 char b
[PATH_MAX
+ 1];
187 char *maildir_copy
= NULL
; /* copy of mail directory because the static gets overwritten */
190 char *MAILHOST_env_variable
;
194 /* absolutely the first thing we do is save our privileges,
195 * and drop them if we can.
201 setlocale(LC_ALL
, "");
203 invo_name
= r1bindex (argv
[0], '/');
205 /* read user profile/context */
208 mts_init (invo_name
);
209 arguments
= getarguments (invo_name
, argc
, argv
, 1);
214 * use MAILHOST environment variable if present,
216 * If that fails, use the default (if any)
217 * provided by mts.conf in mts_init()
219 if ((MAILHOST_env_variable
= getenv("MAILHOST")) != NULL
)
220 pophost
= MAILHOST_env_variable
;
222 * If there is a valid "pophost" entry in mts.conf,
223 * then use it as the default host.
225 if (pophost
&& *pophost
)
228 while ((cp
= *argp
++)) {
230 switch (smatch (++cp
, switches
)) {
232 ambigsw (cp
, switches
);
235 adios (NULL
, "-%s unknown", cp
);
238 snprintf (buf
, sizeof(buf
), "%s [+folder] [switches]", invo_name
);
239 print_help (buf
, switches
, 1);
242 print_version(invo_name
);
246 if (!(cp
= *argp
++) || *cp
== '-')
247 adios (NULL
, "missing argument to %s", argp
[-2]);
248 audfile
= getcpy (m_maildir (cp
));
262 * The flag `trnflag' has the value:
264 * 2 if -truncate is given
265 * 1 by default (truncating is default)
266 * 0 if -notruncate is given
276 if (!(cp
= *argp
++) || *cp
== '-')
277 adios (NULL
, "missing argument to %s", argp
[-2]);
278 from
= path (cp
, TFILE
);
281 * If the truncate file is in default state,
282 * change to not truncate.
296 if (!(form
= *argp
++) || *form
== '-')
297 adios (NULL
, "missing argument to %s", argp
[-2]);
301 if (!(format
= *argp
++) || *format
== '-')
302 adios (NULL
, "missing argument to %s", argp
[-2]);
307 if (!(cp
= *argp
++) || *cp
== '-')
308 adios (NULL
, "missing argument to %s", argp
[-2]);
313 if (!(host
= *argp
++) || *host
== '-')
314 adios (NULL
, "missing argument to %s", argp
[-2]);
318 if (!(port
= *argp
++) || *port
== '-')
319 adios (NULL
, "missing argument to %s", argp
[-2]);
323 if (!(user
= *argp
++) || *user
== '-')
324 adios (NULL
, "missing argument to %s", argp
[-2]);
328 if (!(packfile
= *argp
++) || *packfile
== '-')
329 adios (NULL
, "missing argument to %s", argp
[-2]);
347 if (!(saslmech
= *argp
++) || *saslmech
== '-')
348 adios (NULL
, "missing argument to %s", argp
[-2]);
351 if (!(proxy
= *argp
++) || *proxy
== '-')
352 adios (NULL
, "missing argument to %s", argp
[-2]);
356 if (*cp
== '+' || *cp
== '@') {
358 adios (NULL
, "only one folder at a time!");
360 folder
= pluspath (cp
);
362 adios (NULL
, "usage: %s [+folder] [switches]", invo_name
);
366 /* NOTE: above this point you should use TRYDROPGROUPPRIVS(),
367 * not DROPGROUPPRIVS().
372 /* guarantee dropping group priveleges; we might not have done so earlier */
376 * Where are we getting the new mail?
386 * Are we getting the mail from
389 if (inc_type
== INC_POP
) {
390 struct nmh_creds creds
= { 0, 0, 0 };
393 * initialize POP connection
395 nmh_get_credentials (host
, user
, sasl
, &creds
);
396 if (pop_init (host
, port
, creds
.user
, creds
.password
, proxy
, snoop
,
397 sasl
, saslmech
) == NOTOK
)
398 adios (NULL
, "%s", response
);
400 /* Check if there are any messages */
401 if (pop_stat (&nmsgs
, &nbytes
) == NOTOK
)
402 adios (NULL
, "%s", response
);
406 adios (NULL
, "no mail to incorporate");
411 * We will get the mail from a file
412 * (typically the standard maildrop)
415 if (inc_type
== INC_FILE
) {
418 else if ((newmail
= getenv ("MAILDROP")) && *newmail
)
419 newmail
= m_mailpath (newmail
);
420 else if ((newmail
= context_find ("maildrop")) && *newmail
)
421 newmail
= m_mailpath (newmail
);
423 newmail
= concat (MAILDIR
, "/", MAILFIL
, NULL
);
425 if (stat (newmail
, &s1
) == NOTOK
|| s1
.st_size
== 0)
426 adios (NULL
, "no mail to incorporate");
427 if (s1
.st_mode
& S_IFDIR
) {
433 cp
= concat (newmail
, "/new", NULL
);
434 if ((md
= opendir(cp
)) == NULL
)
435 adios (NULL
, "unable to open %s", cp
);
436 while ((de
= readdir (md
)) != NULL
) {
437 if (de
->d_name
[0] == '.')
439 if (i
>= num_maildir_entries
) {
440 if ((Maildir
= realloc(Maildir
, sizeof(*Maildir
) * (2*i
+16))) == NULL
)
441 adios(NULL
, "not enough memory for %d messages", 2*i
+16);
442 num_maildir_entries
= 2*i
+16;
444 Maildir
[i
].filename
= concat (cp
, "/", de
->d_name
, NULL
);
445 if (stat(Maildir
[i
].filename
, &ms
) != 0)
446 adios (Maildir
[i
].filename
, "couldn't get delivery time");
447 Maildir
[i
].mtime
= ms
.st_mtime
;
452 cp
= concat (newmail
, "/cur", NULL
);
453 if ((md
= opendir(cp
)) == NULL
)
454 adios (NULL
, "unable to open %s", cp
);
455 while ((de
= readdir (md
)) != NULL
) {
456 if (de
->d_name
[0] == '.')
458 if (i
>= num_maildir_entries
) {
459 if ((Maildir
= realloc(Maildir
, sizeof(*Maildir
) * (2*i
+16))) == NULL
)
460 adios(NULL
, "not enough memory for %d messages", 2*i
+16);
461 num_maildir_entries
= 2*i
+16;
463 Maildir
[i
].filename
= concat (cp
, "/", de
->d_name
, NULL
);
464 if (stat(Maildir
[i
].filename
, &ms
) != 0)
465 adios (Maildir
[i
].filename
, "couldn't get delivery time");
466 Maildir
[i
].mtime
= ms
.st_mtime
;
472 adios (NULL
, "no mail to incorporate");
473 num_maildir_entries
= i
;
474 qsort (Maildir
, num_maildir_entries
, sizeof(*Maildir
), maildir_srt
);
477 if ((cp
= strdup(newmail
)) == (char *)0)
478 adios (NULL
, "error allocating memory to copy newmail");
483 /* skip the folder setup */
484 if ((inc_type
== INC_POP
) && packfile
)
487 if (!context_find ("path"))
488 free (path ("./", TFOLDER
));
490 folder
= getfolder (0);
491 maildir
= m_maildir (folder
);
493 if ((maildir_copy
= strdup(maildir
)) == (char *)0)
494 adios (maildir
, "error allocating memory to copy maildir");
496 if (!folder_exists(maildir
)) {
497 /* If the folder doesn't exist, and we're given the -silent flag,
501 create_folder(maildir
, 0, done
);
506 if (chdir (maildir
) == NOTOK
)
507 adios (maildir
, "unable to change directory to");
509 /* read folder and create message structure */
510 if (!(mp
= folder_read (folder
, 0)))
511 adios (NULL
, "unable to read folder %s", folder
);
515 if (inc_type
== INC_FILE
&& Maildir
== NULL
) {
516 if (access (newmail
, W_OK
) != NOTOK
) {
519 SIGNAL (SIGHUP
, SIG_IGN
);
520 SIGNAL (SIGINT
, SIG_IGN
);
521 SIGNAL (SIGQUIT
, SIG_IGN
);
522 SIGNAL (SIGTERM
, SIG_IGN
);
525 GETGROUPPRIVS(); /* Reset gid to lock mail file */
526 in
= lkfopenspool (newmail
, "r");
529 adios (NULL
, "unable to lock and fopen %s", newmail
);
530 fstat (fileno(in
), &s1
);
533 if ((in
= fopen (newmail
, "r")) == NULL
)
534 adios (newmail
, "unable to read");
538 /* This shouldn't be necessary but it can't hurt. */
543 if ((i
= stat (audfile
, &st
)) == NOTOK
)
544 advise (NULL
, "Creating Receive-Audit: %s", audfile
);
545 if ((aud
= fopen (audfile
, "a")) == NULL
)
546 adios (audfile
, "unable to append to");
548 chmod (audfile
, m_gmprot ());
551 fprintf (aud
, "<<inc>> %s -ms %s\n", dtimenow(0), from
);
554 fprintf (aud
, "<<inc>> %s -host %s -user %s\n", dtimenow(0),
557 fprintf (aud
, "<<inc>> %s\n", dtimenow (0));
561 /* Get new format string */
562 nfs
= new_fs (form
, format
, FORMAT
);
565 printf ("Incorporating new mail into %s...\n\n", folder
);
571 * Get the mail from a POP server
573 if (inc_type
== INC_POP
) {
576 packfile
= path (packfile
, TFILE
);
577 if (stat (packfile
, &st
) == NOTOK
) {
579 adios (packfile
, "error on file");
580 cp
= concat ("Create file \"", packfile
, "\"? ", NULL
);
581 if (noisy
&& !getanswer (cp
))
585 msgnum
= map_count ();
586 if ((pd
= mbx_open (packfile
, mbx_style
, getuid(), getgid(), m_gmprot()))
588 adios (packfile
, "unable to open");
589 if ((pf
= fdopen (pd
, "w+")) == NULL
)
590 adios (NULL
, "unable to fdopen %s", packfile
);
592 hghnum
= msgnum
= mp
->hghmsg
;
595 for (i
= 1; i
<= nmsgs
; i
++) {
598 fseek (pf
, 0L, SEEK_CUR
);
601 fwrite (mmdlm1
, 1, strlen (mmdlm1
), pf
);
604 if (pop_retr (i
, pop_pack
) == NOTOK
)
605 adios (NULL
, "%s", response
);
607 fseek (pf
, 0L, SEEK_CUR
);
610 adios (packfile
, "write error on");
611 fseek (pf
, start
, SEEK_SET
);
613 cp
= getcpy (m_name (msgnum
));
614 if ((pf
= fopen (cp
, "w+")) == NULL
)
615 adios (cp
, "unable to write");
616 chmod (cp
, m_gmprot ());
619 if (pop_retr (i
, pop_action
) == NOTOK
)
620 adios (NULL
, "%s", response
);
623 adios (cp
, "write error on");
624 fseek (pf
, 0L, SEEK_SET
);
626 switch (incerr
= scan (pf
, msgnum
, 0, nfs
, width
,
627 packfile
? 0 : msgnum
== mp
->hghmsg
+ 1 && chgflag
,
628 1, NULL
, stop
- start
, noisy
)) {
630 printf ("%*d empty\n", DMAXFOLDER
, msgnum
);
636 /* advise (cp, "unable to read"); already advised */
653 fseek (pf
, stop
, SEEK_SET
);
654 fwrite (mmdlm2
, 1, strlen (mmdlm2
), pf
);
655 if (fflush (pf
) || ferror (pf
)) {
659 adios (packfile
, "write error on");
661 map_write (packfile
, pd
, 0, 0L, start
, stop
, pos
, size
, noisy
);
663 if (ferror(pf
) || fclose (pf
)) {
668 adios (cp
, "write error on");
673 if (trnflag
&& pop_dele (i
) == NOTOK
)
674 adios (NULL
, "%s", response
);
677 if (pop_quit () == NOTOK
)
678 adios (NULL
, "%s", response
);
680 mbx_close (packfile
, pd
);
686 * Get the mail from file (usually mail spool)
688 if (inc_type
== INC_FILE
&& Maildir
== NULL
) {
689 scan_detect_mbox_style (in
); /* the MAGIC invocation... */
690 hghnum
= msgnum
= mp
->hghmsg
;
692 /* create scanline for new message */
693 switch (incerr
= scan (in
, msgnum
+ 1, msgnum
+ 1, nfs
, width
,
694 msgnum
== hghnum
&& chgflag
, 1, NULL
, 0L, noisy
)) {
701 fputs ("inc aborted!\n", aud
);
702 advise (NULL
, "aborted!"); /* doesn't clean up locks! */
706 advise (NULL
, "BUG in %s, number out of range", invo_name
);
710 advise (NULL
, "BUG in %s, scan() botch (%d)", invo_name
, incerr
);
716 * Run the external program hook on the message.
719 (void)snprintf(b
, sizeof (b
), "%s/%d", maildir_copy
, msgnum
+ 1);
720 (void)ext_hook("add-hook", b
, (char *)0);
730 /* If we get here there was some sort of error from scan(),
731 * so stop processing anything more from the spool.
735 } else if (inc_type
== INC_FILE
) { /* Maildir inbox to process */
740 hghnum
= msgnum
= mp
->hghmsg
;
741 for (i
= 0; i
< num_maildir_entries
; i
++) {
744 sp
= Maildir
[i
].filename
;
745 cp
= getcpy (m_name (msgnum
));
747 if (!trnflag
|| link(sp
, cp
) == -1) {
748 static char buf
[65536];
751 if ((sf
= fopen (sp
, "r")) == NULL
)
752 adios (sp
, "unable to read for copy");
753 if ((pf
= fopen (cp
, "w+")) == NULL
)
754 adios (cp
, "unable to write for copy");
755 while ((nrd
= fread(buf
, 1, sizeof(buf
), sf
)) > 0)
756 if (fwrite(buf
, 1, nrd
, pf
) != nrd
)
758 if (ferror(sf
) || fflush(pf
) || ferror(pf
)) {
760 fclose(pf
); fclose(sf
); unlink(cp
);
762 adios(cp
, "copy error %s -> %s", sp
, cp
);
767 if (pf
== NULL
&& (pf
= fopen (cp
, "r")) == NULL
)
768 adios (cp
, "not available");
769 chmod (cp
, m_gmprot ());
771 fseek (pf
, 0L, SEEK_SET
);
772 switch (incerr
= scan (pf
, msgnum
, 0, nfs
, width
,
773 msgnum
== mp
->hghmsg
+ 1 && chgflag
,
774 1, NULL
, stop
- start
, noisy
)) {
776 printf ("%*d empty\n", DMAXFOLDER
, msgnum
);
782 /* advise (cp, "unable to read"); already advised */
793 * Run the external program hook on the message.
796 (void)snprintf(b
, sizeof (b
), "%s/%d", maildir_copy
, msgnum
+ 1);
797 (void)ext_hook("add-hook", b
, (char *)0);
805 if (ferror(pf
) || fclose (pf
)) {
809 adios (cp
, "write error on");
814 if (trnflag
&& unlink (sp
) == NOTOK
)
815 adios (sp
, "couldn't unlink");
816 free (sp
); /* Free Maildir[i]->filename */
818 free (Maildir
); /* From now on Maildir is just a flag - don't dref! */
823 if (incerr
< 0) { /* error */
825 GETGROUPPRIVS(); /* Be sure we can unlock mail file */
826 (void) lkfclosespool (in
, newmail
); in
= NULL
;
827 DROPGROUPPRIVS(); /* And then return us to normal privileges */
829 fclose (in
); in
= NULL
;
831 adios (NULL
, "failed");
840 if ((inc_type
== INC_POP
) && packfile
)
844 * truncate file we are incorporating from
846 if (inc_type
== INC_FILE
&& Maildir
== NULL
) {
848 if (stat (newmail
, &st
) != NOTOK
&& s1
.st_mtime
!= st
.st_mtime
)
849 advise (NULL
, "new messages have arrived!\007");
852 if ((newfd
= creat (newmail
, 0600)) != NOTOK
)
855 admonish (newmail
, "error zero'ing");
856 unlink(map_name(newmail
));
860 printf ("%s not zero'd\n", newmail
);
864 if (msgnum
== hghnum
) {
865 admonish (NULL
, "no messages incorporated");
868 * Lock the sequence file now, and loop to set the right flags
869 * in the folder structure
875 context_replace (pfolder
, folder
); /* update current folder */
877 if ((mp2
= folder_read(folder
, 1)) == NULL
) {
878 admonish(NULL
, "Unable to reread folder %s", folder
);
883 * Shouldn't happen, but just in case ...
886 if (msgnum
>= mp2
->hghoff
887 && !(mp2
= folder_realloc (mp2
, mp2
->lowoff
, msgnum
+ 1))) {
888 advise (NULL
, "unable to reallocate folder storage");
893 mp2
->curmsg
= hghnum
+ 1;
894 mp2
->hghmsg
= msgnum
;
896 if (mp2
->lowmsg
== 0)
898 if (chgflag
) /* sigh... */
899 seq_setcur (mp2
, mp2
->curmsg
);
901 for (i
= hghnum
+ 1; i
<= msgnum
; i
++) {
902 clear_msg_flags (mp2
, i
);
906 mp2
->msgflags
|= SEQMOD
;
907 seq_setunseen(mp2
, 0); /* Set the Unseen-Sequence */
908 seq_save(mp2
); /* Save the sequence file */
914 * unlock the mail spool
916 if (inc_type
== INC_FILE
&& Maildir
== NULL
) {
918 GETGROUPPRIVS(); /* Be sure we can unlock mail file */
919 (void) lkfclosespool (in
, newmail
); in
= NULL
;
920 DROPGROUPPRIVS(); /* And then return us to normal privileges */
922 fclose (in
); in
= NULL
;
926 context_save (); /* save the context file */
933 inc_done (int status
)
935 if (packfile
&& pd
!= NOTOK
)
936 mbx_close (packfile
, pd
);
940 lkfclosespool(in
, newmail
);
949 fprintf (pf
, "%s\n", s
);
950 stop
+= strlen (s
) + 1;
951 return 0; /* Is return value used? This was missing before 1999-07-15. */
960 snprintf (buffer
, sizeof(buffer
), "%s\n", s
);
961 for (j
= 0; (j
= stringdex (mmdlm1
, buffer
)) >= 0; buffer
[j
]++)
963 for (j
= 0; (j
= stringdex (mmdlm2
, buffer
)) >= 0; buffer
[j
]++)
966 size
+= strlen (buffer
) + 1;
967 return 0; /* Is return value used? This was missing before 1999-07-15. */
978 if (stat (packfile
, &st
) == NOTOK
)
980 if ((md
= open (cp
= map_name (packfile
), O_RDONLY
)) == NOTOK
981 || map_chk (cp
, md
, &d
, (long) st
.st_size
, 1)) {