masqmail-0.2

annotate src/masqmail.c @ 72:ad034b57f3b2

find changesets by author, revision, files, or words in the commit message
fixed Debian bug 536060 (log files are closed after SIGHUP receival) Explanation: When run in daemon mode, first the log files are opened. They get assigned to the file descriptors 3 and 4 usually. Then std{in,out,err} are closed. When SIGHUP comes in, all open files are closes and masqmail reexecutes itself. The new masqmail instance opens the log files at fd 0 and 1 now, but std{in,out,err} are closed afterwards, thus the log files are closed. The fix is to close the log files before std{in,out,err} are closed, in case the log files have higher fds. After std{in,out,err} were closed, the log files get opened again, now. See also: http://bugs.debian.org/536060
author meillo@marmaro.de
date Wed, 16 Jun 2010 10:32:20 +0200
parents 3cb6f383f07e
children 9db75b801dc4
rev   line source
meillo@0 1 /* MasqMail
meillo@0 2 Copyright (C) 1999-2001 Oliver Kurth
meillo@0 3
meillo@0 4 This program is free software; you can redistribute it and/or modify
meillo@0 5 it under the terms of the GNU General Public License as published by
meillo@0 6 the Free Software Foundation; either version 2 of the License, or
meillo@0 7 (at your option) any later version.
meillo@0 8
meillo@0 9 This program is distributed in the hope that it will be useful,
meillo@0 10 but WITHOUT ANY WARRANTY; without even the implied warranty of
meillo@0 11 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
meillo@0 12 GNU General Public License for more details.
meillo@0 13
meillo@0 14 You should have received a copy of the GNU General Public License
meillo@0 15 along with this program; if not, write to the Free Software
meillo@0 16 Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
meillo@0 17 */
meillo@0 18
meillo@0 19 #include <stdio.h>
meillo@0 20 #include <errno.h>
meillo@0 21 #include <stdlib.h>
meillo@0 22 #include <string.h>
meillo@0 23 #include <unistd.h>
meillo@0 24 #include <sys/types.h>
meillo@0 25 #include <sys/socket.h>
meillo@0 26 #include <sys/time.h>
meillo@0 27 #include <netinet/in.h>
meillo@0 28 #include <netdb.h>
meillo@0 29 #include <syslog.h>
meillo@0 30 #include <signal.h>
meillo@0 31
meillo@0 32 #include <glib.h>
meillo@0 33
meillo@0 34 #include "masqmail.h"
meillo@0 35
meillo@0 36 /* mutually exclusive modes. Note that there is neither a 'get' mode
meillo@0 37 nor a 'queue daemon' mode. These, as well as the distinction beween
meillo@0 38 the two (non exclusive) daemon (queue and listen) modes are handled
meillo@0 39 by flags.*/
meillo@10 40 typedef enum _mta_mode {
meillo@10 41 MODE_ACCEPT = 0, /* accept message on stdin */
meillo@10 42 MODE_DAEMON, /* run as daemon */
meillo@10 43 MODE_RUNQUEUE, /* single queue run, online or offline */
meillo@10 44 MODE_GET_DAEMON, /* run as get (retrieve) daemon */
meillo@10 45 MODE_SMTP, /* accept SMTP on stdin */
meillo@10 46 MODE_LIST, /* list queue */
meillo@10 47 MODE_MCMD, /* do queue manipulation */
meillo@10 48 MODE_VERSION, /* show version */
meillo@10 49 MODE_BI, /* fake ;-) */
meillo@10 50 MODE_NONE /* to prevent default MODE_ACCEPT */
meillo@10 51 } mta_mode;
meillo@0 52
meillo@0 53 char *pidfile = NULL;
meillo@0 54 volatile int sigterm_in_progress = 0;
meillo@0 55
meillo@10 56 static void
meillo@10 57 sigterm_handler(int sig)
meillo@0 58 {
meillo@10 59 if (sigterm_in_progress)
meillo@10 60 raise(sig);
meillo@10 61 sigterm_in_progress = 1;
meillo@0 62
meillo@10 63 if (pidfile) {
meillo@10 64 uid_t uid;
meillo@10 65 uid = seteuid(0);
meillo@10 66 if (unlink(pidfile) != 0)
meillo@10 67 logwrite(LOG_WARNING, "could not delete pid file %s: %s\n", pidfile, strerror(errno));
meillo@10 68 seteuid(uid); /* we exit anyway after this, just to be sure */
meillo@10 69 }
meillo@0 70
meillo@10 71 signal(sig, SIG_DFL);
meillo@10 72 raise(sig);
meillo@0 73 }
meillo@0 74
meillo@10 75 #ifdef ENABLE_IDENT /* so far used for that only */
meillo@10 76 static gboolean
meillo@10 77 is_in_netlist(gchar * host, GList * netlist)
meillo@0 78 {
meillo@10 79 guint hostip = inet_addr(host);
meillo@10 80 struct in_addr addr;
meillo@0 81
meillo@10 82 addr.s_addr = hostip;
meillo@10 83 if (addr.s_addr != INADDR_NONE) {
meillo@10 84 GList *node;
meillo@10 85 foreach(netlist, node) {
meillo@10 86 struct in_addr *net = (struct in_addr *) (node->data);
meillo@10 87 if ((addr.s_addr & net->s_addr) == net->s_addr)
meillo@10 88 return TRUE;
meillo@10 89 }
meillo@10 90 }
meillo@10 91 return FALSE;
meillo@0 92 }
meillo@0 93 #endif
meillo@0 94
meillo@10 95 gchar*
meillo@10 96 get_optarg(char *argv[], gint argc, gint * argp, gint * pos)
meillo@0 97 {
meillo@10 98 if (argv[*argp][*pos])
meillo@10 99 return &(argv[*argp][*pos]);
meillo@10 100 else {
meillo@10 101 if (*argp + 1 < argc) {
meillo@10 102 if (argv[(*argp) + 1][0] != '-') {
meillo@10 103 (*argp)++;
meillo@10 104 *pos = 0;
meillo@10 105 return &(argv[*argp][*pos]);
meillo@10 106 }
meillo@10 107 }
meillo@10 108 }
meillo@10 109 return NULL;
meillo@0 110 }
meillo@0 111
meillo@10 112 gchar*
meillo@10 113 get_progname(gchar * arg0)
meillo@0 114 {
meillo@10 115 gchar *p = arg0 + strlen(arg0) - 1;
meillo@10 116 while (p > arg0) {
meillo@10 117 if (*p == '/')
meillo@10 118 return p + 1;
meillo@10 119 p--;
meillo@10 120 }
meillo@10 121 return p;
meillo@0 122 }
meillo@0 123
meillo@10 124 gboolean
meillo@10 125 write_pidfile(gchar * name)
meillo@0 126 {
meillo@10 127 FILE *fptr;
meillo@0 128
meillo@10 129 if ((fptr = fopen(name, "wt"))) {
meillo@10 130 fprintf(fptr, "%d\n", getpid());
meillo@10 131 fclose(fptr);
meillo@10 132 pidfile = strdup(name);
meillo@10 133 return TRUE;
meillo@10 134 }
meillo@10 135 logwrite(LOG_WARNING, "could not write pid file: %s\n", strerror(errno));
meillo@10 136 return FALSE;
meillo@10 137 }
meillo@0 138
meillo@10 139 static void
meillo@10 140 mode_daemon(gboolean do_listen, gint queue_interval, char *argv[])
meillo@10 141 {
meillo@10 142 guint pid;
meillo@0 143
meillo@10 144 /* daemon */
meillo@10 145 if (!conf.run_as_user) {
meillo@10 146 if ((conf.orig_uid != 0) && (conf.orig_uid != conf.mail_uid)) {
meillo@10 147 fprintf(stderr, "must be root or %s for daemon.\n", DEF_MAIL_USER);
meillo@10 148 exit(EXIT_FAILURE);
meillo@10 149 }
meillo@10 150 }
meillo@0 151
meillo@10 152 if ((pid = fork()) > 0) {
meillo@10 153 exit(EXIT_SUCCESS);
meillo@10 154 } else if (pid < 0) {
meillo@10 155 logwrite(LOG_ALERT, "could not fork!");
meillo@10 156 exit(EXIT_FAILURE);
meillo@10 157 }
meillo@0 158
meillo@10 159 signal(SIGTERM, sigterm_handler);
meillo@10 160 write_pidfile(PIDFILEDIR "/masqmail.pid");
meillo@0 161
meillo@10 162 conf.do_verbose = FALSE;
meillo@10 163
meillo@72 164 /* closing and reopening the log ensures that it is open afterwards
meillo@72 165 because it is possible that the log is assigned to fd 1 and gets
meillo@72 166 thus closes by fclose(stdout). Similar for the debugfile.
meillo@72 167 */
meillo@72 168 logclose();
meillo@10 169 fclose(stdin);
meillo@10 170 fclose(stdout);
meillo@10 171 fclose(stderr);
meillo@72 172 logopen();
meillo@10 173
meillo@10 174 listen_port(do_listen ? conf.listen_addresses : NULL, queue_interval, argv);
meillo@0 175 }
meillo@0 176
meillo@0 177 #ifdef ENABLE_POP3
meillo@10 178 static void
meillo@10 179 mode_get_daemon(gint get_interval, char *argv[])
meillo@0 180 {
meillo@10 181 guint pid;
meillo@0 182
meillo@10 183 /* daemon */
meillo@10 184 if (!conf.run_as_user) {
meillo@10 185 if ((conf.orig_uid != 0) && (conf.orig_uid != conf.mail_uid)) {
meillo@10 186 fprintf(stderr, "must be root or %s for daemon.\n", DEF_MAIL_USER);
meillo@10 187 exit(EXIT_FAILURE);
meillo@10 188 }
meillo@10 189 }
meillo@0 190
meillo@10 191 if ((pid = fork()) > 0) {
meillo@10 192 exit(EXIT_SUCCESS);
meillo@10 193 } else if (pid < 0) {
meillo@10 194 logwrite(LOG_ALERT, "could not fork!");
meillo@10 195 exit(EXIT_FAILURE);
meillo@10 196 }
meillo@0 197
meillo@10 198 signal(SIGTERM, sigterm_handler);
meillo@10 199 write_pidfile(PIDFILEDIR "/masqmail-get.pid");
meillo@0 200
meillo@10 201 conf.do_verbose = FALSE;
meillo@0 202
meillo@72 203 /* closing and reopening the log ensures that it is open afterwards
meillo@72 204 because it is possible that the log is assigned to fd 1 and gets
meillo@72 205 thus closes by fclose(stdout). Similar for the debugfile.
meillo@72 206 */
meillo@72 207 logclose();
meillo@10 208 fclose(stdin);
meillo@10 209 fclose(stdout);
meillo@10 210 fclose(stderr);
meillo@72 211 logopen();
meillo@0 212
meillo@10 213 get_daemon(get_interval, argv);
meillo@0 214 }
meillo@0 215 #endif
meillo@0 216
meillo@0 217 #ifdef ENABLE_SMTP_SERVER
meillo@10 218 static void
meillo@10 219 mode_smtp()
meillo@0 220 {
meillo@10 221 /* accept smtp message on stdin */
meillo@10 222 /* write responses to stderr. */
meillo@0 223
meillo@10 224 struct sockaddr_in saddr;
meillo@10 225 gchar *peername = NULL;
meillo@10 226 int dummy = sizeof(saddr);
meillo@0 227
meillo@10 228 conf.do_verbose = FALSE;
meillo@0 229
meillo@10 230 if (!conf.run_as_user) {
meillo@10 231 seteuid(conf.orig_uid);
meillo@10 232 setegid(conf.orig_gid);
meillo@10 233 }
meillo@0 234
meillo@10 235 DEBUG(5) debugf("accepting smtp message on stdin\n");
meillo@0 236
meillo@10 237 if (getpeername(0, (struct sockaddr *) (&saddr), &dummy) == 0) {
meillo@10 238 peername = g_strdup(inet_ntoa(saddr.sin_addr));
meillo@10 239 } else if (errno != ENOTSOCK)
meillo@10 240 exit(EXIT_FAILURE);
meillo@0 241
meillo@10 242 smtp_in(stdin, stderr, peername, NULL);
meillo@0 243 }
meillo@0 244 #endif
meillo@0 245
meillo@10 246 static void
meillo@10 247 mode_accept(address * return_path, gchar * full_sender_name, guint accept_flags, char **addresses, int addr_cnt)
meillo@0 248 {
meillo@10 249 /* accept message on stdin */
meillo@10 250 accept_error err;
meillo@10 251 message *msg = create_message();
meillo@10 252 gint i;
meillo@0 253
meillo@10 254 if (return_path != NULL) {
meillo@10 255 if ((conf.orig_uid != 0)
meillo@10 256 && (conf.orig_uid != conf.mail_uid)
meillo@10 257 && (!is_ingroup(conf.orig_uid, conf.mail_gid))) {
meillo@10 258 fprintf(stderr, "must be in root, %s or in group %s for setting return path.\n", DEF_MAIL_USER, DEF_MAIL_GROUP);
meillo@10 259 exit(EXIT_FAILURE);
meillo@10 260 }
meillo@10 261 }
meillo@0 262
meillo@10 263 if (!conf.run_as_user) {
meillo@10 264 seteuid(conf.orig_uid);
meillo@10 265 setegid(conf.orig_gid);
meillo@10 266 }
meillo@0 267
meillo@10 268 DEBUG(5) debugf("accepting message on stdin\n");
meillo@0 269
meillo@10 270 msg->received_prot = PROT_LOCAL;
meillo@10 271 for (i = 0; i < addr_cnt; i++) {
meillo@10 272 if (addresses[i][0] != '|')
meillo@10 273 msg->rcpt_list = g_list_append(msg->rcpt_list, create_address_qualified(addresses[i], TRUE, conf.host_name));
meillo@10 274 else {
meillo@10 275 logwrite(LOG_ALERT, "no pipe allowed as recipient address: %s\n", addresses[i]);
meillo@10 276 exit(EXIT_FAILURE);
meillo@10 277 }
meillo@10 278 }
meillo@0 279
meillo@10 280 /* -f option */
meillo@10 281 msg->return_path = return_path;
meillo@0 282
meillo@10 283 /* -F option */
meillo@10 284 msg->full_sender_name = full_sender_name;
meillo@0 285
meillo@10 286 if ((err = accept_message(stdin, msg, accept_flags)) == AERR_OK) {
meillo@10 287 if (spool_write(msg, TRUE)) {
meillo@10 288 pid_t pid;
meillo@10 289 logwrite(LOG_NOTICE, "%s <= %s with %s\n", msg->uid, addr_string(msg->return_path), prot_names[PROT_LOCAL]);
meillo@0 290
meillo@10 291 if (!conf.do_queue) {
meillo@10 292 if ((pid = fork()) == 0) {
meillo@10 293 conf.do_verbose = FALSE;
meillo@10 294 fclose(stdin);
meillo@10 295 fclose(stdout);
meillo@10 296 fclose(stderr);
meillo@10 297 if (deliver(msg)) {
meillo@10 298 exit(EXIT_SUCCESS);
meillo@10 299 } else
meillo@10 300 exit(EXIT_FAILURE);
meillo@10 301 } else if (pid < 0) {
meillo@10 302 logwrite(LOG_ALERT, "could not fork for delivery, id = %s", msg->uid);
meillo@10 303 }
meillo@10 304 }
meillo@10 305 } else {
meillo@10 306 fprintf(stderr, "Could not write spool file\n");
meillo@10 307 exit(EXIT_FAILURE);
meillo@10 308 }
meillo@10 309 } else {
meillo@10 310 switch (err) {
meillo@10 311 case AERR_EOF:
meillo@10 312 fprintf(stderr, "unexpected EOF.\n");
meillo@10 313 exit(EXIT_FAILURE);
meillo@10 314 case AERR_NORCPT:
meillo@10 315 fprintf(stderr, "no recipients.\n");
meillo@10 316 exit(EXIT_FAILURE);
meillo@10 317 default:
meillo@10 318 /* should never happen: */
meillo@10 319 fprintf(stderr, "Unknown error (%d)\r\n", err);
meillo@10 320 exit(EXIT_FAILURE);
meillo@10 321 }
meillo@10 322 exit(EXIT_FAILURE);
meillo@0 323 }
meillo@0 324 }
meillo@0 325
meillo@0 326 int
meillo@0 327 main(int argc, char *argv[])
meillo@0 328 {
meillo@10 329 /* cmd line flags */
meillo@10 330 gchar *conf_file = CONF_FILE;
meillo@10 331 gint arg = 1;
meillo@10 332 gboolean do_get = FALSE;
meillo@10 333 gboolean do_get_online = FALSE;
meillo@0 334
meillo@10 335 gboolean do_listen = FALSE;
meillo@10 336 gboolean do_runq = FALSE;
meillo@10 337 gboolean do_runq_online = FALSE;
meillo@0 338
meillo@10 339 gboolean do_queue = FALSE;
meillo@0 340
meillo@10 341 gboolean do_verbose = FALSE;
meillo@10 342 gint debug_level = -1;
meillo@0 343
meillo@10 344 mta_mode mta_mode = MODE_ACCEPT;
meillo@0 345
meillo@10 346 gint queue_interval = 0;
meillo@10 347 gint get_interval = 0;
meillo@10 348 gboolean opt_t = FALSE;
meillo@10 349 gboolean opt_i = FALSE;
meillo@10 350 gboolean opt_odb = FALSE;
meillo@10 351 gboolean opt_oem = FALSE;
meillo@10 352 gboolean exit_failure = FALSE;
meillo@0 353
meillo@10 354 gchar *M_cmd = NULL;
meillo@0 355
meillo@10 356 gint exit_code = EXIT_SUCCESS;
meillo@10 357 gchar *route_name = NULL;
meillo@10 358 gchar *get_name = NULL;
meillo@10 359 gchar *progname;
meillo@10 360 gchar *f_address = NULL;
meillo@10 361 gchar *full_sender_name = NULL;
meillo@10 362 address *return_path = NULL; /* may be changed by -f option */
meillo@0 363
meillo@10 364 progname = get_progname(argv[0]);
meillo@0 365
meillo@10 366 if (strcmp(progname, "mailq") == 0) {
meillo@10 367 mta_mode = MODE_LIST;
meillo@10 368 } else if (strcmp(progname, "mailrm") == 0) {
meillo@10 369 mta_mode = MODE_MCMD;
meillo@10 370 M_cmd = "rm";
meillo@10 371 } else if (strcmp(progname, "runq") == 0) {
meillo@10 372 mta_mode = MODE_RUNQUEUE;
meillo@10 373 do_runq = TRUE;
meillo@10 374 } else if (strcmp(progname, "rmail") == 0) {
meillo@10 375 mta_mode = MODE_ACCEPT;
meillo@10 376 opt_i = TRUE;
meillo@10 377 } else if (strcmp(progname, "smtpd") == 0 || strcmp(progname, "in.smtpd") == 0) {
meillo@10 378 mta_mode = MODE_SMTP;
meillo@10 379 }
meillo@0 380
meillo@10 381 /* parse cmd line */
meillo@10 382 while (arg < argc) {
meillo@10 383 gint pos = 0;
meillo@10 384 if ((argv[arg][pos] == '-') && (argv[arg][pos + 1] != '-')) {
meillo@10 385 pos++;
meillo@10 386 switch (argv[arg][pos++]) {
meillo@10 387 case 'b':
meillo@10 388 switch (argv[arg][pos++]) {
meillo@10 389 case 'd':
meillo@10 390 do_listen = TRUE;
meillo@10 391 mta_mode = MODE_DAEMON;
meillo@10 392 break;
meillo@10 393 case 'i':
meillo@10 394 /* ignored */
meillo@10 395 mta_mode = MODE_BI;
meillo@10 396 break;
meillo@10 397 case 's':
meillo@10 398 mta_mode = MODE_SMTP;
meillo@10 399 break;
meillo@10 400 case 'p':
meillo@10 401 mta_mode = MODE_LIST;
meillo@10 402 break;
meillo@10 403 case 'V':
meillo@10 404 mta_mode = MODE_VERSION;
meillo@10 405 break;
meillo@10 406 default:
meillo@10 407 fprintf(stderr, "unrecognized option '%s'\n", argv[arg]);
meillo@10 408 exit(EXIT_FAILURE);
meillo@10 409 }
meillo@10 410 break;
meillo@10 411 case 'B':
meillo@10 412 /* we ignore this and throw the argument away */
meillo@10 413 get_optarg(argv, argc, &arg, &pos);
meillo@10 414 break;
meillo@10 415 case 'C':
meillo@10 416 if (!(conf_file = get_optarg(argv, argc, &arg, &pos))) {
meillo@10 417 fprintf(stderr, "-C requires a filename as argument.\n");
meillo@10 418 exit(EXIT_FAILURE);
meillo@10 419 }
meillo@10 420 break;
meillo@10 421 case 'F':
meillo@10 422 {
meillo@10 423 full_sender_name = get_optarg(argv, argc, &arg, &pos);
meillo@10 424 if (!full_sender_name) {
meillo@10 425 fprintf(stderr, "-F requires a name as an argument\n");
meillo@10 426 exit(EXIT_FAILURE);
meillo@10 427 }
meillo@10 428 }
meillo@10 429 break;
meillo@10 430 case 'd':
meillo@10 431 if (getuid() == 0) {
meillo@10 432 char *lvl = get_optarg(argv, argc, &arg, &pos);
meillo@10 433 if (lvl)
meillo@10 434 debug_level = atoi(lvl);
meillo@10 435 else {
meillo@10 436 fprintf(stderr, "-d requires a number as an argument.\n");
meillo@10 437 exit(EXIT_FAILURE);
meillo@10 438 }
meillo@10 439 } else {
meillo@10 440 fprintf(stderr, "only root may set the debug level.\n");
meillo@10 441 exit(EXIT_FAILURE);
meillo@10 442 }
meillo@10 443 break;
meillo@10 444 case 'f':
meillo@10 445 /* set return path */
meillo@10 446 {
meillo@10 447 gchar *address;
meillo@10 448 address = get_optarg(argv, argc, &arg, &pos);
meillo@10 449 if (address) {
meillo@10 450 f_address = g_strdup(address);
meillo@10 451 } else {
meillo@10 452 fprintf(stderr, "-f requires an address as an argument\n");
meillo@10 453 exit(EXIT_FAILURE);
meillo@10 454 }
meillo@10 455 }
meillo@10 456 break;
meillo@10 457 case 'g':
meillo@10 458 do_get = TRUE;
meillo@10 459 if (!mta_mode)
meillo@10 460 mta_mode = MODE_NONE; /* to prevent default MODE_ACCEPT */
meillo@10 461 if (argv[arg][pos] == 'o') {
meillo@10 462 pos++;
meillo@10 463 do_get_online = TRUE;
meillo@10 464 /* can be NULL, then we use online detection method */
meillo@10 465 route_name = get_optarg(argv, argc, &arg, &pos);
meillo@10 466
meillo@10 467 if (route_name != NULL) {
meillo@10 468 if (isdigit(route_name[0])) {
meillo@10 469 get_interval = time_interval(route_name, &pos);
meillo@10 470 route_name = get_optarg(argv, argc, &arg, &pos);
meillo@10 471 mta_mode = MODE_GET_DAEMON;
meillo@10 472 do_get = FALSE;
meillo@10 473 }
meillo@10 474 }
meillo@10 475 } else {
meillo@10 476 if ((optarg = get_optarg(argv, argc, &arg, &pos))) {
meillo@10 477 get_name = get_optarg(argv, argc, &arg, &pos);
meillo@10 478 }
meillo@10 479 }
meillo@10 480 break;
meillo@10 481 case 'i':
meillo@10 482 if (argv[arg][pos] == 0) {
meillo@10 483 opt_i = TRUE;
meillo@10 484 exit_failure = FALSE; /* may override -oem */
meillo@10 485 } else {
meillo@10 486 fprintf(stderr, "unrecognized option '%s'\n", argv[arg]);
meillo@10 487 exit(EXIT_FAILURE);
meillo@10 488 }
meillo@10 489 break;
meillo@10 490 case 'M':
meillo@10 491 {
meillo@10 492 mta_mode = MODE_MCMD;
meillo@10 493 M_cmd = g_strdup(&(argv[arg][pos]));
meillo@10 494 }
meillo@10 495 break;
meillo@10 496 case 'o':
meillo@10 497 switch (argv[arg][pos++]) {
meillo@10 498 case 'e':
meillo@10 499 if (argv[arg][pos++] == 'm') /* -oem */
meillo@10 500 if (!opt_i)
meillo@10 501 exit_failure = TRUE;
meillo@10 502 opt_oem = TRUE;
meillo@10 503 break;
meillo@10 504 case 'd':
meillo@10 505 if (argv[arg][pos] == 'b') /* -odb */
meillo@10 506 opt_odb = TRUE;
meillo@10 507 else if (argv[arg][pos] == 'q') /* -odq */
meillo@10 508 do_queue = TRUE;
meillo@10 509 break;
meillo@10 510 case 'i':
meillo@10 511 opt_i = TRUE;
meillo@10 512 exit_failure = FALSE; /* may override -oem */
meillo@10 513 break;
meillo@10 514 }
meillo@10 515 break;
meillo@10 516
meillo@10 517 case 'q':
meillo@10 518 {
meillo@10 519 gchar *optarg;
meillo@10 520
meillo@10 521 do_runq = TRUE;
meillo@10 522 mta_mode = MODE_RUNQUEUE;
meillo@10 523 if (argv[arg][pos] == 'o') {
meillo@10 524 pos++;
meillo@10 525 do_runq = FALSE;
meillo@10 526 do_runq_online = TRUE;
meillo@10 527 /* can be NULL, then we use online detection method */
meillo@10 528 route_name = get_optarg(argv, argc, &arg, &pos);
meillo@10 529 } else
meillo@10 530 if ((optarg = get_optarg(argv, argc, &arg, &pos))) {
meillo@10 531 mta_mode = MODE_DAEMON;
meillo@10 532 queue_interval = time_interval(optarg, &pos);
meillo@10 533 }
meillo@10 534 }
meillo@10 535 break;
meillo@10 536 case 't':
meillo@10 537 if (argv[arg][pos] == 0) {
meillo@10 538 opt_t = TRUE;
meillo@10 539 } else {
meillo@10 540 fprintf(stderr, "unrecognized option '%s'\n", argv[arg]);
meillo@10 541 exit(EXIT_FAILURE);
meillo@10 542 }
meillo@10 543 break;
meillo@10 544 case 'v':
meillo@10 545 do_verbose = TRUE;
meillo@10 546 break;
meillo@10 547 default:
meillo@10 548 fprintf(stderr, "unrecognized option '%s'\n", argv[arg]);
meillo@10 549 exit(EXIT_FAILURE);
meillo@10 550 }
meillo@10 551 } else {
meillo@10 552 if (argv[arg][pos + 1] == '-') {
meillo@10 553 if (argv[arg][pos + 2] != '\0') {
meillo@10 554 fprintf(stderr, "unrecognized option '%s'\n", argv[arg]);
meillo@10 555 exit(EXIT_FAILURE);
meillo@10 556 }
meillo@10 557 arg++;
meillo@10 558 }
meillo@10 559 break;
meillo@10 560 }
meillo@10 561 arg++;
meillo@0 562 }
meillo@0 563
meillo@10 564 if (mta_mode == MODE_VERSION) {
meillo@12 565 gchar *with_resolver = "";
meillo@12 566 gchar *with_smtp_server = "";
meillo@12 567 gchar *with_pop3 = "";
meillo@12 568 gchar *with_auth = "";
meillo@12 569 gchar *with_maildir = "";
meillo@12 570 gchar *with_ident = "";
meillo@12 571 gchar *with_mserver = "";
meillo@0 572
meillo@0 573 #ifdef ENABLE_RESOLVER
meillo@10 574 with_resolver = " +resolver";
meillo@0 575 #endif
meillo@0 576 #ifdef ENABLE_SMTP_SERVER
meillo@10 577 with_smtp_server = " +smtp-server";
meillo@0 578 #endif
meillo@0 579 #ifdef ENABLE_POP3
meillo@10 580 with_pop3 = " +pop3";
meillo@0 581 #endif
meillo@0 582 #ifdef ENABLE_AUTH
meillo@10 583 with_auth = " +auth";
meillo@0 584 #endif
meillo@0 585 #ifdef ENABLE_MAILDIR
meillo@10 586 with_maildir = " +maildir";
meillo@0 587 #endif
meillo@0 588 #ifdef ENABLE_IDENT
meillo@10 589 with_ident = " +ident";
meillo@0 590 #endif
meillo@0 591 #ifdef ENABLE_MSERVER
meillo@10 592 with_mserver = " +mserver";
meillo@0 593 #endif
meillo@0 594
meillo@10 595 printf("%s %s%s%s%s%s%s%s%s\n", PACKAGE, VERSION, with_resolver, with_smtp_server,
meillo@10 596 with_pop3, with_auth, with_maildir, with_ident, with_mserver);
meillo@0 597
meillo@10 598 exit(EXIT_SUCCESS);
meillo@10 599 }
meillo@0 600
meillo@10 601 /* initialize random generator */
meillo@10 602 srand(time(NULL));
meillo@10 603 /* ignore SIGPIPE signal */
meillo@10 604 signal(SIGPIPE, SIG_IGN);
meillo@0 605
meillo@10 606 /* close all possibly open file descriptors */
meillo@10 607 {
meillo@10 608 int i, max_fd = sysconf(_SC_OPEN_MAX);
meillo@0 609
meillo@10 610 if (max_fd <= 0)
meillo@10 611 max_fd = 64;
meillo@10 612 for (i = 3; i < max_fd; i++)
meillo@10 613 close(i);
meillo@10 614 }
meillo@0 615
meillo@10 616 init_conf();
meillo@0 617
meillo@10 618 /* if we are not privileged, and the config file was changed we
meillo@10 619 implicetely set the the run_as_user flag and give up all
meillo@10 620 privileges.
meillo@0 621
meillo@10 622 So it is possible for a user to run his own daemon without
meillo@10 623 breaking security.
meillo@10 624 */
meillo@10 625 if (strcmp(conf_file, CONF_FILE) != 0) {
meillo@10 626 if (conf.orig_uid != 0) {
meillo@10 627 conf.run_as_user = TRUE;
meillo@10 628 seteuid(conf.orig_uid);
meillo@10 629 setegid(conf.orig_gid);
meillo@10 630 setuid(conf.orig_uid);
meillo@10 631 setgid(conf.orig_gid);
meillo@10 632 }
meillo@10 633 }
meillo@0 634
meillo@10 635 read_conf(conf_file);
meillo@0 636
meillo@10 637 if (do_queue)
meillo@10 638 conf.do_queue = TRUE;
meillo@10 639 if (do_verbose)
meillo@10 640 conf.do_verbose = TRUE;
meillo@10 641 if (debug_level >= 0) /* if >= 0, it was given by argument */
meillo@10 642 conf.debug_level = debug_level;
meillo@0 643
meillo@46 644 /* It appears that changing to / ensures that we are never in
meillo@46 645 a directory which we cannot access. This situation could be
meillo@46 646 possible after changing identity.
meillo@46 647 Maybe we should only change to / if we not run as user, to
meillo@46 648 allow relative paths for log files in test setups for
meillo@46 649 instance.
meillo@46 650 */
meillo@10 651 chdir("/");
meillo@0 652
meillo@10 653 if (!conf.run_as_user) {
meillo@10 654 if (setgid(0) != 0) {
meillo@10 655 fprintf(stderr, "could not set gid to 0. Is the setuid bit set? : %s\n", strerror(errno));
meillo@10 656 exit(EXIT_FAILURE);
meillo@10 657 }
meillo@10 658 if (setuid(0) != 0) {
meillo@10 659 fprintf(stderr, "could not gain root privileges. Is the setuid bit set? : %s\n", strerror(errno));
meillo@10 660 exit(EXIT_FAILURE);
meillo@10 661 }
meillo@10 662 }
meillo@0 663
meillo@10 664 if (!logopen()) {
meillo@10 665 fprintf(stderr, "could not open log file\n");
meillo@10 666 exit(EXIT_FAILURE);
meillo@10 667 }
meillo@0 668
meillo@10 669 DEBUG(1) debugf("masqmail %s starting\n", VERSION);
meillo@0 670
meillo@10 671 DEBUG(5) {
meillo@10 672 gchar **str = argv;
meillo@10 673 debugf("args: \n");
meillo@10 674 while (*str) {
meillo@10 675 debugf("%s \n", *str);
meillo@10 676 str++;
meillo@10 677 }
meillo@10 678 }
meillo@10 679 DEBUG(5) debugf("queue_interval = %d\n", queue_interval);
meillo@0 680
meillo@10 681 if (f_address) {
meillo@10 682 return_path = create_address_qualified(f_address, TRUE, conf.host_name);
meillo@10 683 g_free(f_address);
meillo@10 684 if (!return_path) {
meillo@10 685 fprintf(stderr, "invalid RFC821 address: %s\n", f_address);
meillo@10 686 exit(EXIT_FAILURE);
meillo@10 687 }
meillo@10 688 }
meillo@10 689
meillo@10 690 if (do_get) {
meillo@0 691 #ifdef ENABLE_POP3
meillo@10 692 if ((mta_mode == MODE_NONE) || (mta_mode == MODE_RUNQUEUE)) {
meillo@10 693 set_identity(conf.orig_uid, "getting mail");
meillo@10 694 if (do_get_online) {
meillo@10 695 if (route_name != NULL) {
meillo@10 696 conf.online_detect = g_strdup("argument");
meillo@10 697 set_online_name(route_name);
meillo@10 698 }
meillo@10 699 get_online();
meillo@10 700 } else {
meillo@10 701 if (get_name)
meillo@10 702 get_from_name(get_name);
meillo@10 703 else
meillo@10 704 get_all();
meillo@10 705 }
meillo@10 706 } else {
meillo@10 707 logwrite(LOG_ALERT, "get (-g) only allowed alone or together with queue run (-q)\n");
meillo@10 708 }
meillo@10 709 #else
meillo@10 710 fprintf(stderr, "get (pop) support not compiled in\n");
meillo@10 711 #endif
meillo@10 712 }
meillo@0 713
meillo@10 714 switch (mta_mode) {
meillo@10 715 case MODE_DAEMON:
meillo@10 716 mode_daemon(do_listen, queue_interval, argv);
meillo@10 717 break;
meillo@10 718 case MODE_RUNQUEUE:
meillo@10 719 {
meillo@10 720 /* queue runs */
meillo@10 721 set_identity(conf.orig_uid, "queue run");
meillo@0 722
meillo@10 723 if (do_runq)
meillo@10 724 exit_code = queue_run() ? EXIT_SUCCESS : EXIT_FAILURE;
meillo@10 725
meillo@10 726 if (do_runq_online) {
meillo@10 727 if (route_name != NULL) {
meillo@10 728 conf.online_detect = g_strdup("argument");
meillo@10 729 set_online_name(route_name);
meillo@10 730 }
meillo@10 731 exit_code =
meillo@10 732 queue_run_online() ? EXIT_SUCCESS : EXIT_FAILURE;
meillo@10 733 }
meillo@10 734 }
meillo@10 735 break;
meillo@10 736 case MODE_GET_DAEMON:
meillo@10 737 #ifdef ENABLE_POP3
meillo@10 738 if (route_name != NULL) {
meillo@10 739 conf.online_detect = g_strdup("argument");
meillo@10 740 set_online_name(route_name);
meillo@10 741 }
meillo@10 742 mode_get_daemon(get_interval, argv);
meillo@10 743 #endif
meillo@10 744 break;
meillo@10 745
meillo@10 746 case MODE_SMTP:
meillo@10 747 #ifdef ENABLE_SMTP_SERVER
meillo@10 748 mode_smtp();
meillo@10 749 #else
meillo@10 750 fprintf(stderr, "smtp server support not compiled in\n");
meillo@10 751 #endif
meillo@10 752 break;
meillo@10 753
meillo@10 754 case MODE_LIST:
meillo@10 755 queue_list();
meillo@10 756 break;
meillo@10 757
meillo@10 758 case MODE_BI:
meillo@10 759 exit(EXIT_SUCCESS);
meillo@10 760 break; /* well... */
meillo@10 761
meillo@10 762 case MODE_MCMD:
meillo@10 763 if (strcmp(M_cmd, "rm") == 0) {
meillo@10 764 gboolean ok = FALSE;
meillo@10 765
meillo@10 766 set_euidgid(conf.mail_uid, conf.mail_gid, NULL, NULL);
meillo@10 767
meillo@10 768 if (is_privileged_user(conf.orig_uid)) {
meillo@10 769 for (; arg < argc; arg++) {
meillo@10 770 if (queue_delete(argv[arg]))
meillo@10 771 ok = TRUE;
meillo@10 772 }
meillo@10 773 } else {
meillo@10 774 struct passwd *pw = getpwuid(conf.orig_uid);
meillo@10 775 if (pw) {
meillo@10 776 for (; arg < argc; arg++) {
meillo@10 777 message *msg = msg_spool_read(argv[arg], FALSE);
meillo@10 778 #ifdef ENABLE_IDENT
meillo@10 779 if (((msg->received_host == NULL) && (msg->received_prot == PROT_LOCAL))
meillo@10 780 || is_in_netlist(msg->received_host, conf.ident_trusted_nets)) {
meillo@10 781 #else
meillo@10 782 if ((msg->received_host == NULL) && (msg->received_prot == PROT_LOCAL)) {
meillo@10 783 #endif
meillo@10 784 if (msg->ident) {
meillo@10 785 if (strcmp(pw->pw_name, msg->ident) == 0) {
meillo@10 786 if (queue_delete(argv[arg]))
meillo@10 787 ok = TRUE;
meillo@10 788 } else {
meillo@10 789 fprintf(stderr, "you do not own message id %s\n", argv[arg]);
meillo@10 790 }
meillo@10 791 } else
meillo@10 792 fprintf(stderr, "message %s does not have an ident.\n", argv[arg]);
meillo@10 793 } else {
meillo@10 794 fprintf(stderr, "message %s was not received locally or from a trusted network.\n", argv[arg]);
meillo@10 795 }
meillo@10 796 }
meillo@10 797 } else {
meillo@10 798 fprintf(stderr, "could not find a passwd entry for uid %d: %s\n", conf.orig_uid, strerror(errno));
meillo@10 799 }
meillo@10 800 }
meillo@10 801 exit(ok ? EXIT_SUCCESS : EXIT_FAILURE);
meillo@10 802 } else {
meillo@10 803 fprintf(stderr, "unknown command %s\n", M_cmd);
meillo@10 804 exit(EXIT_FAILURE);
meillo@10 805 }
meillo@10 806 break;
meillo@10 807
meillo@10 808 case MODE_ACCEPT:
meillo@10 809 {
meillo@10 810 guint accept_flags = (opt_t ? ACC_DEL_RCPTS | ACC_DEL_BCC | ACC_RCPT_FROM_HEAD : ACC_HEAD_FROM_RCPT)
meillo@10 811 | (opt_i ? ACC_NODOT_TERM : ACC_NODOT_RELAX);
meillo@10 812 mode_accept(return_path, full_sender_name, accept_flags, &(argv[arg]), argc - arg);
meillo@10 813 exit(exit_failure ? EXIT_FAILURE : EXIT_SUCCESS);
meillo@10 814 }
meillo@10 815 break;
meillo@10 816 case MODE_NONE:
meillo@10 817 break;
meillo@10 818 default:
meillo@10 819 fprintf(stderr, "unknown mode: %d\n", mta_mode);
meillo@10 820 break;
meillo@0 821 }
meillo@0 822
meillo@10 823 logclose();
meillo@0 824
meillo@10 825 exit(exit_code);
meillo@0 826 }