/*  MasqMail
    Copyright (C) 1999-2001 Oliver Kurth

    This program is free software; you can redistribute it and/or modify
    it under the terms of the GNU General Public License as published by
    the Free Software Foundation; either version 2 of the License, or
    (at your option) any later version.

    This program is distributed in the hope that it will be useful,
    but WITHOUT ANY WARRANTY; without even the implied warranty of
    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
    GNU General Public License for more details.

    You should have received a copy of the GNU General Public License
    along with this program; if not, write to the Free Software
    Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
*/

#include "masqmail.h"
#include "peopen.h"
#include <sys/wait.h>

static
void message_stream(FILE *out, message *msg, GList *hdr_list, guint flags)
{
  time_t now = time(NULL);
  GList *node;
  
  if(flags & MSGSTR_FROMLINE){
    fprintf(out, "From <%s@%s> %s", msg->return_path->local_part,
	    msg->return_path->domain, ctime(&now));
  }
	  
  foreach(hdr_list, node){
    header *hdr = (header *)(node->data);
    fputs(hdr->header, out);
  }
  putc('\n', out);
  foreach(msg->data_list, node){
    /* From hack: */
    if(flags & MSGSTR_FROMHACK){
      if(strncmp(node->data, "From ", 5) == 0)
	putc('>', out);
    }
    fputs(node->data, out);
  }
  putc('\n', out);
}

gboolean append_file(message *msg, GList *hdr_list, gchar *user)
{
  struct passwd *pw;
  gboolean ok = FALSE;
  
  /* headers may be special for a local delivery */
  if(hdr_list == NULL)
    hdr_list = msg->hdr_list;

  if((pw = getpwnam(user))){
    uid_t saved_uid = geteuid();
    gid_t saved_gid = getegid();
    gboolean uid_ok = TRUE, gid_ok = TRUE;

    if(!conf.run_as_user){
      uid_ok = (seteuid(0) == 0);
      if(uid_ok){
	gid_ok = (setegid(conf.mail_gid) == 0);
	uid_ok = (seteuid(pw->pw_uid) == 0);
      }
    }

    DEBUG(5) debugf("running as euid %d\n", geteuid());
    DEBUG(5) debugf("running as egid %d\n", getegid());

    if(uid_ok && gid_ok){
      gchar *filename;
      FILE *out;

      filename = g_strdup_printf("%s/%s", conf.mail_dir, user);
      if((out = fopen(filename, "a"))){
#ifdef USE_LIBLOCKFILE
        gint err;
        /* lock file using liblockfile */
        err = maillock(user,3);
	if(err == 0){
#else
	/* lock file: */
	struct flock lock;
	lock.l_type = F_WRLCK;
	lock.l_whence = SEEK_END;
	lock.l_start = lock.l_len = 0;
	if(fcntl(fileno(out), F_SETLK, &lock) != -1){
#endif
	  fchmod(fileno(out), 0600);
	  
	  message_stream(out, msg, hdr_list, MSGSTR_FROMLINE|MSGSTR_FROMHACK);

	  ok = TRUE;
	  
	  /* close when still user */
	  fclose(out);
#ifdef USE_LIBLOCKFILE
          mailunlock();
#endif
	}else{
	  fclose(out);
#ifdef USE_LIBLOCKFILE
	  DEBUG(3) debugf("could not lock file %s: error %d\n",
			  filename, err);
	} /* XEmacs indenting convenience... */
#else
	  DEBUG(3) debugf("could not lock file %s: %s\n",
			  filename, strerror(errno));
	}
#endif
      }else{
	logwrite(LOG_ALERT, "could not open file %s: %s\n",
		 filename, strerror(errno));
      }
      g_free(filename);

      if(!conf.run_as_user){
	uid_ok = (seteuid(0) == 0);
	if(uid_ok){
	  gid_ok = (setegid(saved_gid) == 0);
	  uid_ok = (seteuid(saved_uid) == 0);
	}
      }
      
      if(!uid_ok || !gid_ok){
	/* FIXME: if this fails we HAVE to exit, because we shall not run
	   with some users id. But we do not return, and so this message
	   will not be finished, so the user will get the message again
	   next time a delivery is attempted... */
	logwrite(LOG_ALERT,
		 "could not set back uid or gid after local delivery: %s\n",
		 strerror(errno));
	logwrite(LOG_ALERT,
		 "uid=%d, gid=%d, euid=%d, egid=%d, want = %d, %d\n",
		 getuid(), getgid(), geteuid(), getegid(), saved_uid, saved_gid);
	exit(EXIT_FAILURE);
      }
    }else{
      logwrite(LOG_ALERT,
	       "could not set uid or gid for local delivery, uid = %d: %s\n",
	       pw->pw_uid, strerror(errno));
    }
  }else{
    logwrite(LOG_ALERT, "could not find password entry for user %s\n", user);
    errno = ENOENT; /* getpwnam does not set errno correctly */
  }

  return ok;
}

#ifdef ENABLE_MAILDIR
gboolean maildir_out(message *msg, GList *hdr_list, gchar *user, guint flags)
{
  struct passwd *pw;
  gboolean ok = FALSE;
  
  /* headers may be special for a local delivery */
  if(hdr_list == NULL)
    hdr_list = msg->hdr_list;

  if((pw = getpwnam(user))){
    uid_t saved_uid = geteuid();
    gid_t saved_gid = getegid();
    gboolean uid_ok = TRUE, gid_ok = TRUE;

    if(!conf.run_as_user){
      uid_ok = (seteuid(0) == 0);
      if(uid_ok){
	gid_ok = (setegid(conf.mail_gid) == 0);
	uid_ok = (seteuid(pw->pw_uid) == 0);
      }
    }

    DEBUG(5) debugf("running as euid %d\n", geteuid());
    DEBUG(5) debugf("running as egid %d\n", getegid());
    
    if(uid_ok && gid_ok){
      char *path = g_strdup_printf("%s/Maildir", pw->pw_dir);
      struct stat statbuf;
      int ret;

      DEBUG(5) debugf("path = %s\n", path);

      ok = TRUE;
      ret = stat(path, &statbuf);
      if(ret != 0){
	ok = FALSE;
	if(errno == ENOENT){
	  logwrite(LOG_NOTICE, "directory %s does not exist, creating\n", path);
	  if(mkdir(path, 0700) == 0)
	    ok = TRUE;
	}else
	  logwrite(LOG_ALERT, "stat of %s failed: %s\n", path, strerror(errno));
      }
      if(ok){
	ok = FALSE;
	ret = stat(path, &statbuf);
	if(S_ISDIR(statbuf.st_mode)){
	  gchar *subdirs[] = {"tmp", "new", "cur"};
	  int i;
	  for(i = 0; i < 3; i++){
	    char *path1 = g_strdup_printf("%s/%s", path, subdirs[i]);
	    ret = stat(path1, &statbuf);
	    if(ret != 0){
	      if(errno == ENOENT){
		logwrite(LOG_NOTICE, "directory %s does not exist, creating\n", path1);
		if(mkdir(path1, 0700) != 0) break;
	      }
	    }
	    g_free(path1);
	  }
	  if(i == 3){
	    FILE *out;
	    mode_t saved_mode = umask(066);
	    /* the qmail style unique works only if delivering
	       with different process. We do not fork for each delivery,
	       so our uid is more unique. Hope it is compatible with all
	       MUAs.
	    */
	    gchar *filename = g_strdup_printf("%s/tmp/%s.%s", path, msg->uid, conf.host_name);

	    DEBUG(5) debugf("filename = %s\n", filename);
	    
	    if((out = fopen(filename, "w"))){
	      gchar *newname =
		g_strdup_printf("%s/new/%s.%s", path, msg->uid, conf.host_name);
	      message_stream(out, msg, hdr_list, flags);
	      ok = TRUE;
	      if(fflush(out) == EOF) ok = FALSE;
	      else if(fdatasync(fileno(out)) != 0){
		if(errno != EINVAL) /* some fs do not support this..
				       I hope this also means that it is not necessary */
		  ok = FALSE;
	      }
	      fclose(out);
	      if(rename(filename, newname) != 0){
		ok = FALSE;
		logwrite(LOG_ALERT, "moving %s to %s failed: %s",
			 filename, newname, strerror(errno));
	      }
	      g_free(newname);
	    }
	    umask(saved_mode);
	    g_free(filename);
	  }
	}else{
	  logwrite(LOG_ALERT, "%s is not a directory\n", path);
	  errno = ENOTDIR;
	}
      }
      if(!conf.run_as_user){
	uid_ok = (seteuid(0) == 0);
	if(uid_ok){
	  gid_ok = (setegid(saved_gid) == 0);
	  uid_ok = (seteuid(saved_uid) == 0);
	}
      }
      if(!uid_ok || !gid_ok){
	/* FIXME: if this fails we HAVE to exit, because we shall not run
	   with some users id. But we do not return, and so this message
	   will not be finished, so the user will get the message again
	   next time a delivery is attempted... */
	logwrite(LOG_ALERT,
		 "could not set back uid or gid after local delivery: %s\n",
		 strerror(errno));
	exit(EXIT_FAILURE);
      }
      g_free(path);
    }else{
      logwrite(LOG_ALERT,
	       "could not set uid or gid for local delivery, uid = %d: %s\n",
	       pw->pw_uid, strerror(errno));
    }
  }else{
    logwrite(LOG_ALERT, "could not find password entry for user %s\n", user);
    errno = ENOENT; /* getpwnam does not set errno correctly */
  }
  return ok;
}
#endif

gboolean
pipe_out(message *msg, GList *hdr_list, address *rcpt, gchar *cmd, guint flags)
{
  gchar *envp[40];
  FILE *out;
  uid_t saved_uid = geteuid();
  gid_t saved_gid = getegid();
  gboolean ok = FALSE;
  gint i, n;
  pid_t pid;
  void (*old_signal)(int);
  int status;

  /* set uid and gid to the mail ids */
  if(!conf.run_as_user){
    set_euidgid(conf.mail_uid, conf.mail_gid, &saved_uid, &saved_gid);
  }

  /* set environment */
  {
    gint i = 0;
    address *ancestor = addr_find_ancestor(rcpt);

    envp[i++] = g_strdup_printf("SENDER=%s@%s", msg->return_path->local_part, msg->return_path->domain);
    envp[i++] = g_strdup_printf("SENDER_DOMAIN=%s", msg->return_path->domain);
    envp[i++] = g_strdup_printf("SENDER_LOCAL=%s", msg->return_path->local_part);
    envp[i++] = g_strdup_printf("RECEIVED_HOST=%s", msg->received_host ? msg->received_host : "");

    envp[i++] = g_strdup_printf("RETURN_PATH=%s@%s",
				msg->return_path->local_part, msg->return_path->domain);
    envp[i++] = g_strdup_printf("DOMAIN=%s", ancestor->domain);

    envp[i++] = g_strdup_printf("LOCAL_PART=%s", ancestor->local_part);
    envp[i++] = g_strdup_printf("USER=%s", ancestor->local_part);
    envp[i++] = g_strdup_printf("LOGNAME=%s", ancestor->local_part);

    envp[i++] = g_strdup_printf("MESSAGE_ID=%s", msg->uid);
    envp[i++] = g_strdup_printf("QUALIFY_DOMAIN=%s", conf.host_name);

    envp[i] = NULL;
    n = i;
  }

  old_signal = signal(SIGCHLD, SIG_DFL);

  out = peidopen(cmd, "w", envp, &pid, conf.mail_uid, conf.mail_gid);
  if(out != NULL){
    message_stream(out, msg, hdr_list, flags);

    fclose(out);

    waitpid(pid, &status, 0);

    if(WEXITSTATUS(status) != 0){
      int exstat = WEXITSTATUS(status);
      logwrite(LOG_ALERT, "process returned %d (%s)\n", exstat, ext_strerror(1024 + exstat));
      errno = 1024 + exstat;
    }else if(WIFSIGNALED(status)){
      logwrite(LOG_ALERT, "process got signal %d\n", WTERMSIG(status));
    }else
      ok = TRUE;

  }else
    logwrite(LOG_ALERT, "could not open pipe '%s': %s\n", cmd, strerror(errno));

  signal(SIGCHLD, old_signal);

  /* free environment */
  for(i = 0; i < n; i++){
    g_free(envp[i]);
  }

  /* set uid and gid back */
  if(!conf.run_as_user){
    set_euidgid(saved_uid, saved_gid, NULL, NULL);
  }

  return ok;
}