]>
diplodocus.org Git - nmh/blob - uip/inc.c
3 * inc.c -- incorporate messages from a maildrop into a folder
7 * This code is Copyright (c) 2002, by the authors of nmh. See the
8 * COPYRIGHT file in the root directory of the nmh distribution for
9 * complete copyright information.
13 /* Revised: Sat Apr 14 17:08:17 PDT 1990 (marvit@hplabs)
14 * Added hpux hacks to set and reset gid to be "mail" as needed. The reset
15 * is necessary so inc'ed mail is the group of the inc'er, rather than
16 * "mail". We setgid to egid only when [un]locking the mail file. This
17 * is also a major security precaution which will not be explained here.
19 * Fri Feb 7 16:04:57 PST 1992 John Romine <bug-mh@ics.uci.edu>
20 * NB: I'm not 100% sure that this setgid stuff is secure even now.
22 * See the *GROUPPRIVS() macros later. I'm reasonably happy with the setgid
23 * attribute. Running setuid root is probably not a terribly good idea, though.
24 * -- Peter Maydell <pmaydell@chiark.greenend.org.uk>, 04/1998
26 * Peter Maydell's patch slightly modified for nmh 0.28-pre2.
27 * Ruud de Rooij <ruud@debian.org> Wed, 22 Jul 1998 13:24:22 +0200
35 # include <h/dropsbr.h>
36 # include <h/popsbr.h>
43 #include <h/fmt_scan.h>
44 #include <h/scansbr.h>
45 #include <h/signals.h>
52 # define POPminc(a) (a)
58 # define RPOPminc(a) (a)
60 # define RPOPminc(a) 0
64 # define APOPminc(a) (a)
66 # define APOPminc(a) 0
70 # define KPOPminc(a) (a)
72 # define KPOPminc(a) 0
76 # define SASLminc(a) (a)
78 # define SASLminc(a) 0
81 static struct swit switches
[] = {
83 { "audit audit-file", 0 },
93 { "form formatfile", 0 },
95 { "format string", 5 },
97 { "host hostname", POPminc (-4) },
99 { "user username", POPminc (-4) },
101 { "pack file", POPminc (-4) },
103 { "nopack", POPminc (-6) },
105 { "apop", APOPminc (-4) },
107 { "noapop", APOPminc (-6) },
109 { "rpop", RPOPminc (-4) },
111 { "norpop", RPOPminc (-6) },
121 { "width columns", 0 },
129 { "kpop", KPOPminc (-4) },
131 { "sasl", SASLminc(-4) },
132 #define SASLMECHSW 25
133 { "saslmech", SASLminc(-8) },
140 * flags for the mail source
146 static int snoop
= 0;
149 extern char response
[];
151 static char *packfile
= NULL
;
157 static int mbx_style
= MMDF_FORMAT
;
158 static int pd
= NOTOK
;
159 static FILE *pf
= NULL
;
162 /* This is an attempt to simplify things by putting all the
163 * privilege ops into macros.
164 * *GROUPPRIVS() is related to handling the setgid MAIL property,
165 * and only applies if MAILGROUP is defined.
166 * *USERPRIVS() is related to handling the setuid root property,
167 * and only applies if POP is defined [why does POP => setuid root?]
168 * Basically, SAVEGROUPPRIVS() is called right at the top of main()
169 * to initialise things, and then DROPGROUPPRIVS() and GETGROUPPRIVS()
170 * do the obvious thing. TRYDROPGROUPPRIVS() has to be safe to call
171 * before DROPUSERPRIVS() is called [this is needed because setgid()
172 * sets both effective and real uids if euid is root.]
174 * There's probably a better implementation if we're allowed to use
175 * BSD-style setreuid() rather than using POSIX saved-ids.
176 * Anyway, if you're euid root it's a bit pointless to drop the group
179 * I'm pretty happy that the security is good provided we aren't setuid root.
180 * The only things we trust with group=mail privilege are lkfopen()
185 * For setting and returning to "mail" gid
188 static int return_gid
;
190 /* easy case; we're not setuid root, so can drop group privs
193 #define TRYDROPGROUPPRIVS() DROPGROUPPRIVS()
194 #else /* POP ie we are setuid root */
195 #define TRYDROPGROUPPRIVS() \
196 if (geteuid() != 0) DROPGROUPPRIVS()
198 #define DROPGROUPPRIVS() setgid(getgid())
199 #define GETGROUPPRIVS() setgid(return_gid)
200 #define SAVEGROUPPRIVS() return_gid = getegid()
202 /* define *GROUPPRIVS() as null; this avoids having lots of "#ifdef MAILGROUP"s */
203 #define TRYDROPGROUPPRIVS()
204 #define DROPGROUPPRIVS()
205 #define GETGROUPPRIVS()
206 #define SAVEGROUPPRIVS()
207 #endif /* not MAILGROUP */
210 #define DROPUSERPRIVS() setuid(getuid())
212 #define DROPUSERPRIVS()
215 /* these variables have to be globals so that done() can correctly clean up the lockfile */
216 static int locked
= 0;
217 static char *newmail
;
223 char *map_name(char *);
227 static int pop_action(char *);
228 static int pop_pack(char *);
229 static int map_count(void);
234 main (int argc
, char **argv
)
236 int chgflag
= 1, trnflag
= 1;
237 int noisy
= 1, width
= 0;
238 int rpop
, i
, hghnum
, msgnum
;
239 int kpop
= 0, sasl
= 0;
240 char *cp
, *maildir
, *folder
= NULL
;
241 char *format
= NULL
, *form
= NULL
;
242 char *host
= NULL
, *user
= NULL
;
243 char *audfile
= NULL
, *from
= NULL
, *saslmech
= NULL
;
244 char buf
[BUFSIZ
], **argp
, *nfs
, **arguments
;
250 int nmsgs
, nbytes
, p
= 0;
252 char *MAILHOST_env_variable
;
260 struct hes_postoffice
*po
;
263 /* absolutely the first thing we do is save our privileges,
264 * and drop them if we can.
270 setlocale(LC_ALL
, "");
272 invo_name
= r1bindex (argv
[0], '/');
274 /* read user profile/context */
277 mts_init (invo_name
);
278 arguments
= getarguments (invo_name
, argc
, argv
, 1);
284 * use MAILHOST environment variable if present,
286 * If that fails, use the default (if any)
287 * provided by mts.conf in mts_init()
289 if ((MAILHOST_env_variable
= getenv("MAILHOST")) != NULL
)
290 pophost
= MAILHOST_env_variable
;
292 else if ((po
= hes_getmailhost(getusername())) != NULL
&&
293 strcmp(po
->po_type
, "POP") == 0)
294 pophost
= po
->po_host
;
297 * If there is a valid "pophost" entry in mts.conf,
298 * then use it as the default host.
300 if (pophost
&& *pophost
)
303 if ((cp
= getenv ("MHPOPDEBUG")) && *cp
)
309 while ((cp
= *argp
++)) {
311 switch (smatch (++cp
, switches
)) {
313 ambigsw (cp
, switches
);
316 adios (NULL
, "-%s unknown", cp
);
319 snprintf (buf
, sizeof(buf
), "%s [+folder] [switches]", invo_name
);
320 print_help (buf
, switches
, 1);
323 print_version(invo_name
);
327 if (!(cp
= *argp
++) || *cp
== '-')
328 adios (NULL
, "missing argument to %s", argp
[-2]);
329 audfile
= getcpy (m_maildir (cp
));
343 * The flag `trnflag' has the value:
345 * 2 if -truncate is given
346 * 1 by default (truncating is default)
347 * 0 if -notruncate is given
357 if (!(cp
= *argp
++) || *cp
== '-')
358 adios (NULL
, "missing argument to %s", argp
[-2]);
359 from
= path (cp
, TFILE
);
362 * If the truncate file is in default state,
363 * change to not truncate.
377 if (!(form
= *argp
++) || *form
== '-')
378 adios (NULL
, "missing argument to %s", argp
[-2]);
382 if (!(format
= *argp
++) || *format
== '-')
383 adios (NULL
, "missing argument to %s", argp
[-2]);
388 if (!(cp
= *argp
++) || *cp
== '-')
389 adios (NULL
, "missing argument to %s", argp
[-2]);
394 if (!(host
= *argp
++) || *host
== '-')
395 adios (NULL
, "missing argument to %s", argp
[-2]);
398 if (!(user
= *argp
++) || *user
== '-')
399 adios (NULL
, "missing argument to %s", argp
[-2]);
404 if (!(cp
= *argp
++) || *cp
== '-')
405 adios (NULL
, "missing argument to %s", argp
[-2]);
407 if (!(packfile
= *argp
++) || *packfile
== '-')
408 adios (NULL
, "missing argument to %s", argp
[-2]);
444 if (!(saslmech
= *argp
++) || *saslmech
== '-')
445 adios (NULL
, "missing argument to %s", argp
[-2]);
449 if (*cp
== '+' || *cp
== '@') {
451 adios (NULL
, "only one folder at a time!");
453 folder
= path (cp
+ 1, *cp
== '+' ? TFOLDER
: TSUBCWF
);
455 adios (NULL
, "usage: %s [+folder] [switches]", invo_name
);
459 /* NOTE: above this point you should use TRYDROPGROUPPRIVS(),
460 * not DROPGROUPPRIVS().
465 if (from
|| !host
|| rpop
<= 0)
469 /* guarantee dropping group priveleges; we might not have done so earlier */
473 * Where are we getting the new mail?
486 * Are we getting the mail from
489 if (inc_type
== INC_POP
) {
491 user
= getusername ();
492 if ( strcmp( POPSERVICE
, "kpop" ) == 0 ) {
495 if (kpop
|| sasl
|| ( rpop
> 0))
496 pass
= getusername ();
498 ruserpass (host
, &user
, &pass
);
501 * initialize POP connection
503 if (pop_init (host
, user
, pass
, snoop
, kpop
? 1 : rpop
, kpop
,
504 sasl
, saslmech
) == NOTOK
)
505 adios (NULL
, "%s", response
);
507 /* Check if there are any messages */
508 if (pop_stat (&nmsgs
, &nbytes
) == NOTOK
)
509 adios (NULL
, "%s", response
);
515 adios (NULL
, "no mail to incorporate");
521 * We will get the mail from a file
522 * (typically the standard maildrop)
525 if (inc_type
== INC_FILE
) {
528 else if ((newmail
= getenv ("MAILDROP")) && *newmail
)
529 newmail
= m_mailpath (newmail
);
530 else if ((newmail
= context_find ("maildrop")) && *newmail
)
531 newmail
= m_mailpath (newmail
);
533 newmail
= concat (MAILDIR
, "/", MAILFIL
, NULL
);
535 if (stat (newmail
, &s1
) == NOTOK
|| s1
.st_size
== 0)
536 adios (NULL
, "no mail to incorporate");
540 /* skip the folder setup */
541 if ((inc_type
== INC_POP
) && packfile
)
545 if (!context_find ("path"))
546 free (path ("./", TFOLDER
));
548 folder
= getfolder (0);
549 maildir
= m_maildir (folder
);
551 if (stat (maildir
, &st
) == NOTOK
) {
553 adios (maildir
, "error on folder");
554 cp
= concat ("Create folder \"", maildir
, "\"? ", NULL
);
555 if (noisy
&& !getanswer (cp
))
558 if (!makedir (maildir
))
559 adios (NULL
, "unable to create folder %s", maildir
);
562 if (chdir (maildir
) == NOTOK
)
563 adios (maildir
, "unable to change directory to");
565 /* read folder and create message structure */
566 if (!(mp
= folder_read (folder
)))
567 adios (NULL
, "unable to read folder %s", folder
);
573 if (inc_type
== INC_FILE
) {
574 if (access (newmail
, W_OK
) != NOTOK
) {
577 SIGNAL (SIGHUP
, SIG_IGN
);
578 SIGNAL (SIGINT
, SIG_IGN
);
579 SIGNAL (SIGQUIT
, SIG_IGN
);
580 SIGNAL (SIGTERM
, SIG_IGN
);
583 GETGROUPPRIVS(); /* Reset gid to lock mail file */
584 in
= lkfopen (newmail
, "r");
587 adios (NULL
, "unable to lock and fopen %s", newmail
);
588 fstat (fileno(in
), &s1
);
591 if ((in
= fopen (newmail
, "r")) == NULL
)
592 adios (newmail
, "unable to read");
596 /* This shouldn't be necessary but it can't hurt. */
600 if ((i
= stat (audfile
, &st
)) == NOTOK
)
601 advise (NULL
, "Creating Receive-Audit: %s", audfile
);
602 if ((aud
= fopen (audfile
, "a")) == NULL
)
603 adios (audfile
, "unable to append to");
605 chmod (audfile
, m_gmprot ());
608 fprintf (aud
, from
? "<<inc>> %s -ms %s\n"
609 : host
? "<<inc>> %s -host %s -user %s%s\n"
611 dtimenow (0), from
? from
: host
, user
,
612 rpop
< 0 ? " -apop" : rpop
> 0 ? " -rpop" : "");
614 fprintf (aud
, from
? "<<inc>> %s -ms %s\n" : "<<inc>> %s\n",
620 if (context_find ("mhe")) {
621 cp
= concat (maildir
, "/++", NULL
);
623 if ((mhe
= fopen (cp
, "a")) == NULL
)
624 admonish (cp
, "unable to append to");
627 chmod (cp
, m_gmprot ());
632 /* Get new format string */
633 nfs
= new_fs (form
, format
, FORMAT
);
636 printf ("Incorporating new mail into %s...\n\n", folder
);
642 * Get the mail from a POP server
644 if (inc_type
== INC_POP
) {
646 packfile
= path (packfile
, TFILE
);
647 if (stat (packfile
, &st
) == NOTOK
) {
649 adios (packfile
, "error on file");
650 cp
= concat ("Create file \"", packfile
, "\"? ", NULL
);
651 if (noisy
&& !getanswer (cp
))
655 msgnum
= map_count ();
656 if ((pd
= mbx_open (packfile
, mbx_style
, getuid(), getgid(), m_gmprot()))
658 adios (packfile
, "unable to open");
659 if ((pf
= fdopen (pd
, "w+")) == NULL
)
660 adios (NULL
, "unable to fdopen %s", packfile
);
662 hghnum
= msgnum
= mp
->hghmsg
;
664 * Check if we have enough message space for all the new
665 * messages. If not, then realloc the folder and add enough
666 * space for all new messages plus 10 additional slots.
668 if (mp
->hghmsg
+ nmsgs
>= mp
->hghoff
669 && !(mp
= folder_realloc (mp
, mp
->lowoff
, mp
->hghmsg
+ nmsgs
+ 10)))
670 adios (NULL
, "unable to allocate folder storage");
673 for (i
= 1; i
<= nmsgs
; i
++) {
676 fseek (pf
, 0L, SEEK_CUR
);
679 fwrite (mmdlm1
, 1, strlen (mmdlm1
), pf
);
682 if (pop_retr (i
, pop_pack
) == NOTOK
)
683 adios (NULL
, "%s", response
);
685 fseek (pf
, 0L, SEEK_CUR
);
688 adios (packfile
, "write error on");
689 fseek (pf
, start
, SEEK_SET
);
691 cp
= getcpy (m_name (msgnum
));
692 if ((pf
= fopen (cp
, "w+")) == NULL
)
693 adios (cp
, "unable to write");
694 chmod (cp
, m_gmprot ());
697 if (pop_retr (i
, pop_action
) == NOTOK
)
698 adios (NULL
, "%s", response
);
701 adios (cp
, "write error on");
702 fseek (pf
, 0L, SEEK_SET
);
704 switch (p
= scan (pf
, msgnum
, 0, nfs
, width
,
705 packfile
? 0 : msgnum
== mp
->hghmsg
+ 1 && chgflag
,
706 1, NULL
, stop
- start
, noisy
)) {
708 printf ("%*d empty\n", DMAXFOLDER
, msgnum
);
714 /* advise (cp, "unable to read"); already advised */
733 clear_msg_flags (mp
, msgnum
);
734 set_exists (mp
, msgnum
);
735 set_unseen (mp
, msgnum
);
736 mp
->msgflags
|= SEQMOD
;
741 fseek (pf
, stop
, SEEK_SET
);
742 fwrite (mmdlm2
, 1, strlen (mmdlm2
), pf
);
743 if (fflush (pf
) || ferror (pf
)) {
747 adios (packfile
, "write error on");
749 map_write (packfile
, pd
, 0, 0L, start
, stop
, pos
, size
, noisy
);
751 if (ferror(pf
) || fclose (pf
)) {
756 adios (cp
, "write error on");
761 if (trnflag
&& pop_dele (i
) == NOTOK
)
762 adios (NULL
, "%s", response
);
765 if (pop_quit () == NOTOK
)
766 adios (NULL
, "%s", response
);
768 mbx_close (packfile
, pd
);
775 * Get the mail from file (usually mail spool)
777 if (inc_type
== INC_FILE
) {
778 m_unknown (in
); /* the MAGIC invocation... */
779 hghnum
= msgnum
= mp
->hghmsg
;
782 * Check if we need to allocate more space for message status.
783 * If so, then add space for an additional 100 messages.
785 if (msgnum
>= mp
->hghoff
786 && !(mp
= folder_realloc (mp
, mp
->lowoff
, mp
->hghoff
+ 100))) {
787 advise (NULL
, "unable to allocate folder storage");
793 /* copy file from spool to tmp file */
794 tmpfilenam
= m_scratch ("", invo_name
);
795 if ((fd
= creat (tmpfilenam
, m_gmprot ())) == NOTOK
)
796 adios (tmpfilenam
, "unable to create");
797 chmod (tmpfilenam
, m_gmprot ());
798 if (!(in2
= fdopen (fd
, "r+")))
799 adios (tmpfilenam
, "unable to access");
802 /* link message into folder */
803 newmsg
= folder_addmsg(mp
, tmpfilenam
);
806 /* create scanline for new message */
807 switch (i
= scan (in
, msgnum
+ 1, msgnum
+ 1, nfs
, width
,
808 msgnum
== hghnum
&& chgflag
, 1, NULL
, 0L, noisy
)) {
815 fputs ("inc aborted!\n", aud
);
816 advise (NULL
, "aborted!"); /* doesn't clean up locks! */
820 advise (NULL
, "BUG in %s, number out of range", invo_name
);
824 advise (NULL
, "BUG in %s, scan() botch (%d)", invo_name
, i
);
840 clear_msg_flags (mp
, msgnum
);
841 set_exists (mp
, msgnum
);
842 set_unseen (mp
, msgnum
);
843 mp
->msgflags
|= SEQMOD
;
851 if (p
< 0) { /* error */
853 if (i
< 0) { /* error */
856 GETGROUPPRIVS(); /* Be sure we can unlock mail file */
857 (void) lkfclose (in
, newmail
); in
= NULL
;
858 DROPGROUPPRIVS(); /* And then return us to normal privileges */
860 fclose (in
); in
= NULL
;
862 adios (NULL
, "failed");
877 if ((inc_type
== INC_POP
) && packfile
)
882 * truncate file we are incorporating from
884 if (inc_type
== INC_FILE
) {
886 if (stat (newmail
, &st
) != NOTOK
&& s1
.st_mtime
!= st
.st_mtime
)
887 advise (NULL
, "new messages have arrived!\007");
889 if ((i
= creat (newmail
, 0600)) != NOTOK
)
892 admonish (newmail
, "error zero'ing");
893 unlink(map_name(newmail
));
897 printf ("%s not zero'd\n", newmail
);
901 if (msgnum
== hghnum
) {
902 admonish (NULL
, "no messages incorporated");
904 context_replace (pfolder
, folder
); /* update current folder */
906 mp
->curmsg
= hghnum
+ 1;
910 if (chgflag
) /* sigh... */
911 seq_setcur (mp
, mp
->curmsg
);
915 * unlock the mail spool
917 if (inc_type
== INC_FILE
) {
919 GETGROUPPRIVS(); /* Be sure we can unlock mail file */
920 (void) lkfclose (in
, newmail
); in
= NULL
;
921 DROPGROUPPRIVS(); /* And then return us to normal privileges */
923 fclose (in
); in
= NULL
;
927 seq_setunseen (mp
, 0); /* set the Unseen-Sequence */
928 seq_save (mp
); /* synchronize sequences */
929 context_save (); /* save the context file */
937 * Copy message message from spool into
938 * temporary file. Massage the "From " line
942 cpymsg (FILE *in
, FILE *out
)
945 char *tmpbuf
, name
[NAMESZ
];
948 state
= m_getfld (state
, name
, tmpbuf
, rlwidth
, in
);
971 if (packfile
&& pd
!= NOTOK
)
972 mbx_close (packfile
, pd
);
977 lkfclose(in
, newmail
);
981 return 1; /* dead code to satisfy the compiler */
988 fprintf (pf
, "%s\n", s
);
989 stop
+= strlen (s
) + 1;
990 return 0; /* Is return value used? This was missing before 1999-07-15. */
999 snprintf (buffer
, sizeof(buffer
), "%s\n", s
);
1000 for (j
= 0; (j
= stringdex (mmdlm1
, buffer
)) >= 0; buffer
[j
]++)
1002 for (j
= 0; (j
= stringdex (mmdlm2
, buffer
)) >= 0; buffer
[j
]++)
1005 size
+= strlen (buffer
) + 1;
1006 return 0; /* Is return value used? This was missing before 1999-07-15. */
1017 if (stat (packfile
, &st
) == NOTOK
)
1019 if ((md
= open (cp
= map_name (packfile
), O_RDONLY
)) == NOTOK
1020 || map_chk (cp
, md
, &d
, (long) st
.st_size
, 1)) {