masqmail
view src/masqmail.c @ 386:13c9e0969054
Ignore pointer sign warnings.
| author | markus schnalke <meillo@marmaro.de> |
|---|---|
| date | Sat, 18 Feb 2012 11:43:06 +0100 |
| parents | b27f66555ba8 |
| children | cdd16614c1f5 |
line source
1 /*
2 ** MasqMail
3 ** Copyright (C) 1999-2001 Oliver Kurth
4 ** Copyright (C) 2010 markus schnalke <meillo@marmaro.de>
5 **
6 ** This program is free software; you can redistribute it and/or modify
7 ** it under the terms of the GNU General Public License as published by
8 ** the Free Software Foundation; either version 2 of the License, or
9 ** (at your option) any later version.
10 **
11 ** This program is distributed in the hope that it will be useful,
12 ** but WITHOUT ANY WARRANTY; without even the implied warranty of
13 ** MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
14 ** GNU General Public License for more details.
15 **
16 ** You should have received a copy of the GNU General Public License
17 ** along with this program; if not, write to the Free Software
18 ** Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
19 */
21 #include <stdio.h>
22 #include <errno.h>
23 #include <stdlib.h>
24 #include <string.h>
25 #include <unistd.h>
26 #include <sys/types.h>
27 #include <sys/socket.h>
28 #include <sys/time.h>
29 #include <netinet/in.h>
30 #include <netdb.h>
31 #include <syslog.h>
32 #include <signal.h>
34 #include <glib.h>
36 #include "masqmail.h"
38 /*
39 ** mutually exclusive modes. Note that there is no 'queue daemon' mode.
40 ** It, as well as the distinction beween the two (non exclusive) daemon
41 ** (queue and listen) modes, is handled by flags.
42 */
43 enum mta_mode {
44 MODE_NONE = 0, /* to check if a mode was set */
45 MODE_ACCEPT, /* accept message on stdin (fallback mode) */
46 MODE_DAEMON, /* run as daemon */
47 MODE_RUNQUEUE, /* single queue run, online or offline */
48 MODE_SMTP, /* accept SMTP on stdin */
49 MODE_LIST, /* list queue */
50 MODE_MCMD, /* do queue manipulation */
51 MODE_VERSION, /* show version */
52 MODE_BI, /* fake ;-) */
53 };
54 enum mta_mode mta_mode = MODE_NONE;
56 char *pidfile = NULL;
57 volatile int sigterm_in_progress = 0;
59 static void
60 sigterm_handler(int sig)
61 {
62 if (sigterm_in_progress)
63 raise(sig);
64 sigterm_in_progress = 1;
66 if (pidfile) {
67 uid_t uid = geteuid();
68 if (seteuid(0) != 0) {
69 logwrite(LOG_ALERT, "sigterm_handler: could not set euid to %d: %s\n", 0, strerror(errno));
70 }
71 if (unlink(pidfile) != 0)
72 logwrite(LOG_WARNING, "could not delete pid file %s: %s\n", pidfile, strerror(errno));
73 seteuid(uid); /* we exit anyway after this, just to be sure */
74 }
76 signal(sig, SIG_DFL);
77 raise(sig);
78 }
80 /*
81 ** argv: the original argv
82 ** argp: number of arg (may get modified!)
83 ** cp: pointing to the char after the option
84 ** e.g. `-d 6' `-d6'
85 ** ^ ^
86 */
87 gchar*
88 get_optarg(char *argv[], gint *argp, char *cp)
89 {
90 if (*cp) {
91 /* this kind: -xval */
92 return cp;
93 }
94 cp = argv[*argp+1];
95 if (cp && (*cp != '-')) {
96 /* this kind: -x val */
97 (*argp)++;
98 return cp;
99 }
100 return NULL;
101 }
103 gboolean
104 write_pidfile(gchar *name)
105 {
106 FILE *fptr;
108 if ((fptr = fopen(name, "wt"))) {
109 fprintf(fptr, "%d\n", getpid());
110 fclose(fptr);
111 pidfile = strdup(name);
112 return TRUE;
113 }
114 logwrite(LOG_WARNING, "could not write pid file: %s\n", strerror(errno));
115 return FALSE;
116 }
118 /* on -bd or if -q has an argument */
119 static void
120 mode_daemon(gboolean do_listen, gint queue_interval, char *argv[])
121 {
122 guint pid;
124 /* daemon */
125 if (!conf.run_as_user) {
126 if ((conf.orig_uid != 0) && (conf.orig_uid != conf.mail_uid)) {
127 fprintf(stderr, "must be root or %s for daemon.\n", DEF_MAIL_USER);
128 exit(1);
129 }
130 }
132 /* reparent to init only if init is not already the parent */
133 if (getppid() != 1) {
134 if ((pid = fork()) > 0) {
135 exit(0);
136 } else if (pid < 0) {
137 logwrite(LOG_ALERT, "could not fork!\n");
138 exit(1);
139 }
140 }
142 signal(SIGTERM, sigterm_handler);
143 write_pidfile(PIDFILEDIR "/masqmail.pid");
145 conf.do_verbose = FALSE;
147 /*
148 ** closing and reopening the log ensures that it is open afterwards
149 ** because it is possible that the log is assigned to fd 1 and gets
150 ** thus closes by fclose(stdout). Similar for the debugfile.
151 */
152 logclose();
153 fclose(stdin);
154 fclose(stdout);
155 fclose(stderr);
156 logopen();
158 logwrite(LOG_NOTICE, "%s %s daemon starting\n", PACKAGE, VERSION);
159 listen_port(do_listen ? conf.listen_addresses : NULL, queue_interval, argv);
160 }
162 /* -bs or called as smtpd or in.smtpd */
163 static void
164 mode_smtp()
165 {
166 /* accept smtp message on stdin */
167 /* write responses to stderr. */
169 struct sockaddr_in saddr;
170 gchar *peername = NULL;
171 int dummy = sizeof(saddr);
173 conf.do_verbose = FALSE;
175 if (!conf.run_as_user) {
176 set_euidgid(conf.orig_uid, conf.orig_gid, NULL, NULL);
177 }
179 DEBUG(5) debugf("accepting smtp message on stdin\n");
181 if (getpeername(0, (struct sockaddr *) (&saddr), &dummy) == 0) {
182 peername = g_strdup(inet_ntoa(saddr.sin_addr));
183 } else if (errno != ENOTSOCK)
184 exit(1);
186 smtp_in(stdin, stderr, peername, NULL);
187 }
189 /* default mode if address args or -t is specified, or called as rmail */
190 static void
191 mode_accept(address *return_path, gchar *full_sender_name, guint accept_flags,
192 char **addresses, int addr_cnt)
193 {
194 /* accept message on stdin */
195 accept_error err;
196 message *msg = create_message();
197 gint i;
198 pid_t pid;
200 if (return_path && !is_privileged_user(conf.orig_uid)) {
201 fprintf(stderr, "must be root, %s or in group %s for setting return path.\n", DEF_MAIL_USER, DEF_MAIL_GROUP);
202 exit(1);
203 }
205 if (!conf.run_as_user) {
206 set_euidgid(conf.orig_uid, conf.orig_gid, NULL, NULL);
207 }
209 DEBUG(5) debugf("accepting message on stdin\n");
211 msg->received_prot = PROT_LOCAL;
213 /* warn if -t option and cmdline addr args */
214 if (addr_cnt && (accept_flags & ACC_RCPT_FROM_HEAD)) {
215 logwrite(LOG_ALERT, "command line address arguments are now *added* to the mail header\\\n");
216 logwrite(LOG_ALERT, " recipient addresses (instead of substracted) when -t is given.\\\n");
217 logwrite(LOG_ALERT, " this changed with version 0.3.1\n");
218 }
220 for (i = 0; i < addr_cnt; i++) {
221 if (addresses[i][0] == '|') {
222 logwrite(LOG_ALERT, "no pipe allowed as recipient address: %s\n", addresses[i]);
223 /* should we better ignore this one addr? */
224 exit(1);
225 }
226 msg->rcpt_list = g_list_append(msg->rcpt_list, create_address_qualified(addresses[i], TRUE, conf.host_name));
227 }
229 /* -f option */
230 msg->return_path = return_path;
232 /* -F option */
233 msg->full_sender_name = full_sender_name;
235 err = accept_message(stdin, msg, accept_flags);
237 switch (err) {
238 case AERR_OK:
239 /* to continue; all other cases exit */
240 break;
241 case AERR_EOF:
242 fprintf(stderr, "unexpected EOF.\n");
243 exit(1);
244 case AERR_NORCPT:
245 fprintf(stderr, "no recipients.\n");
246 exit(1);
247 case AERR_SIZE:
248 fprintf(stderr, "max message size exceeded.\n");
249 exit(1);
250 default:
251 /* should never happen: */
252 fprintf(stderr, "Unknown error (%d)\r\n", err);
253 exit(1);
254 }
256 if (!spool_write(msg, TRUE)) {
257 fprintf(stderr, "Could not write spool file\n");
258 exit(1);
259 }
261 /* here the mail is queued and thus in our responsibility */
262 logwrite(LOG_NOTICE, "%s <= %s with %s\n", msg->uid, addr_string(msg->return_path), prot_names[PROT_LOCAL]);
264 if (conf.do_queue) {
265 /* we're finished as we only need to queue it */
266 return;
267 }
269 /* deliver at once */
270 if ((pid = fork()) < 0) {
271 logwrite(LOG_ALERT, "could not fork for delivery, id = %s\n", msg->uid);
272 } else if (pid == 0) {
273 conf.do_verbose = FALSE;
274 fclose(stdin);
275 fclose(stdout);
276 fclose(stderr);
277 if (deliver(msg)) {
278 exit(0);
279 } else {
280 /*
281 ** TODO: Should we really fail here? Because the
282 ** mail is queued already. If we fail the client
283 ** might submit it again. If at-once-delivery
284 ** is seen as an additional best-effort service,
285 ** then we should still exit successful here.
286 */
287 exit(1);
288 }
289 }
290 }
292 /*
293 ** if -Mrm is given
294 **
295 ** currently only the `rm' command is supported
296 ** until this changes, we don't need any facility for further commands
297 ** return success if at least one message had been deleted
298 */
299 static int
300 manipulate_queue(char *cmd, char *id[])
301 {
302 gboolean ok = FALSE;
304 if (strcmp(cmd, "rm") != 0) {
305 fprintf(stderr, "unknown command %s\n", cmd);
306 return FALSE;
307 }
309 set_euidgid(conf.mail_uid, conf.mail_gid, NULL, NULL);
311 /* privileged users may delete any mail */
312 if (is_privileged_user(conf.orig_uid)) {
313 for (; *id; id++) {
314 fprintf(stderr, "id: %s\n", *id);
315 if (queue_delete(*id)) {
316 ok = TRUE;
317 }
318 }
319 return ok;
320 }
322 struct passwd *pw = getpwuid(conf.orig_uid);
323 if (!pw) {
324 fprintf(stderr, "could not find a passwd entry for uid %d: %s\n",
325 conf.orig_uid, strerror(errno));
326 return FALSE;
327 }
329 /* non-privileged users may only delete their own messages */
330 for (; *id; id++) {
331 message *msg = msg_spool_read(*id);
333 fprintf(stderr, "id: %s\n", *id);
335 if (!msg->ident) {
336 fprintf(stderr, "message %s does not have an ident\n", *id);
337 continue;
338 }
339 if (strcmp(pw->pw_name, msg->ident) != 0) {
340 fprintf(stderr, "you do not own message id %s\n", *id);
341 continue;
342 }
344 if (msg->received_host || (msg->received_prot != PROT_LOCAL)) {
345 fprintf(stderr, "message %s was not received locally\n", *id);
346 continue;
347 }
349 ok = queue_delete(*id);
350 }
351 return ok;
352 }
354 /* -qo, -q (without argument), or called as runq */
355 static int
356 run_queue(gboolean do_runq, gboolean do_runq_online, char *route_name)
357 {
358 int ret;
360 /* queue runs */
361 set_identity(conf.orig_uid, "queue run");
363 if (do_runq) {
364 ret = queue_run();
365 }
367 if (do_runq_online) {
368 if (route_name) {
369 conf.online_query = g_strdup_printf("/bin/echo %s", route_name);
370 }
371 /*
372 ** TODO: change behavior of `-qo without argument'?
373 ** Because that behavior is included in -q.
374 */
375 ret = queue_run_online();
376 }
377 return ret;
378 }
380 /* -bV or default mode if neither addr arg nor -t */
381 static void
382 mode_version(void)
383 {
384 gchar *with_resolver = "";
385 gchar *with_auth = "";
387 #ifdef ENABLE_RESOLVER
388 with_resolver = " +resolver";
389 #endif
390 #ifdef ENABLE_AUTH
391 with_auth = " +auth";
392 #endif
394 printf("%s %s%s%s\n", PACKAGE, VERSION, with_resolver, with_auth);
395 }
397 void
398 set_mode(enum mta_mode mode)
399 {
400 if (mta_mode && mta_mode!=mode) {
401 fprintf(stderr, "operation mode was already specified (%d vs. %d)\n", mta_mode, mode);
402 exit(1);
403 }
405 mta_mode = mode;
406 return;
407 }
409 int
410 main(int argc, char *argv[])
411 {
412 gchar *progname;
413 char *opt;
414 gint arg;
416 gboolean do_listen = FALSE;
417 gboolean do_runq = FALSE;
418 gboolean do_runq_online = FALSE;
419 gboolean do_queue = FALSE;
420 gint queue_interval = 0;
421 gchar *M_cmd = NULL;
422 gboolean opt_t = FALSE;
423 gboolean opt_i = FALSE;
424 gchar *conf_file = CONF_FILE;
425 gchar *route_name = NULL;
426 gchar *f_address = NULL;
427 address *return_path = NULL; /* may be changed by -f option */
428 gchar *full_sender_name = NULL;
429 gboolean do_verbose = FALSE;
430 gint debug_level = -1;
432 /* strip the path part */
433 progname = strrchr(argv[0], '/');
434 progname = (progname) ? progname+1 : argv[0];
436 if (strcmp(progname, "mailq") == 0) {
437 mta_mode = MODE_LIST;
438 } else if (strcmp(progname, "mailrm") == 0) {
439 mta_mode = MODE_MCMD;
440 M_cmd = "rm";
441 } else if (strcmp(progname, "newaliases") == 0) {
442 mta_mode = MODE_BI;
443 } else if (strcmp(progname, "rmail") == 0) {
444 /*
445 ** the `rmail' alias should probably be removed now
446 ** that we have the rmail script. But let's keep it
447 ** for some while for compatibility. 2010-06-19
448 */
449 mta_mode = MODE_ACCEPT;
450 opt_i = TRUE;
451 } else if (strcmp(progname, "runq") == 0) {
452 mta_mode = MODE_RUNQUEUE;
453 do_runq = TRUE;
454 } else if (strcmp(progname, "smtpd") == 0
455 || strcmp(progname, "in.smtpd") == 0) {
456 mta_mode = MODE_SMTP;
457 }
459 /* parse cmd line */
460 for (arg=1; arg<argc && argv[arg][0]=='-'; arg++) {
461 opt = argv[arg] + 1; /* points to the char after the dash */
463 if (strcmp(opt, "-") == 0) {
464 /* everything after `--' are address arguments */
465 arg++;
466 break;
468 } else if (strcmp(opt, "bm") == 0) {
469 set_mode(MODE_ACCEPT);
471 } else if (strcmp(opt, "bd") == 0) {
472 set_mode(MODE_DAEMON);
473 do_listen = TRUE;
475 } else if (strcmp(opt, "bi") == 0) {
476 set_mode(MODE_BI);
478 } else if (strcmp(opt, "bs") == 0) {
479 set_mode(MODE_SMTP);
481 } else if (strcmp(opt, "bp") == 0) {
482 set_mode(MODE_LIST);
484 } else if (strcmp(opt, "bV") == 0) {
485 set_mode(MODE_VERSION);
487 } else if (strncmp(opt, "B", 1) == 0) {
488 /* we ignore this and throw the argument away */
489 get_optarg(argv, &arg, opt+1);
491 } else if (strncmp(opt, "C", 1) == 0) {
492 conf_file = get_optarg(argv, &arg, opt+1);
493 if (!conf_file) {
494 fprintf(stderr, "-C requires a filename as argument.\n");
495 exit(1);
496 }
498 } else if (strncmp(opt, "d", 1) == 0) {
499 if (getuid() != 0) {
500 fprintf(stderr, "only root may set the debug level.\n");
501 exit(1);
502 }
503 char *lvl = get_optarg(argv, &arg, opt+1);
504 if (!lvl) {
505 fprintf(stderr, "-d requires a number argument.\n");
506 exit(1);
507 }
508 debug_level = atoi(lvl);
510 } else if (strncmp(opt, "f", 1) == 0) {
511 /* set return path */
512 gchar *address = get_optarg(argv, &arg, opt+1);
513 if (!address) {
514 fprintf(stderr, "-f requires an address argument\n");
515 exit(1);
516 }
517 f_address = g_strdup(address);
519 } else if (strncmp(opt, "F", 1) == 0) {
520 full_sender_name = get_optarg(argv, &arg, opt+1);
521 if (!full_sender_name) {
522 fprintf(stderr, "-F requires a name argument\n");
523 exit(1);
524 }
526 } else if (strcmp(opt, "i") == 0) {
527 opt_i = TRUE;
529 } else if (strcmp(opt, "m") == 0) {
530 /* ignore -m (me too) switch (see man page) */
532 } else if (strcmp(opt, "Mrm") == 0) {
533 set_mode(MODE_MCMD);
534 M_cmd = "rm";
536 } else if (strcmp(opt, "odq") == 0) {
537 do_queue = TRUE;
539 } else if (strcmp(opt, "oi") == 0) {
540 opt_i = TRUE;
542 } else if (strncmp(opt, "o", 1) == 0) {
543 /* ignore all other -oXXX options */
545 } else if (strncmp(opt, "qo", 2) == 0) {
546 /* must be before the `q' check */
547 set_mode(MODE_RUNQUEUE);
548 do_runq_online = TRUE;
549 /* can be NULL, then we use online detection method */
550 /* TODO: behavior might change if it is NULL */
551 route_name = get_optarg(argv, &arg, opt+2);
552 if (!route_name) {
553 fprintf(stderr, "Please do not use -qo without argument anymore; use -q instead.\n");
554 fprintf(stderr, "The behavior for -qo without argument is likely to change.\n");
555 }
557 } else if (strncmp(opt, "q", 1) == 0) {
558 /* must be after the `qo' check */
559 gchar *optarg;
561 optarg = get_optarg(argv, &arg, opt+1);
562 if (optarg) {
563 /* not just one single queue run but regular runs */
564 set_mode(MODE_DAEMON);
565 queue_interval = time_interval(optarg);
566 } else {
567 set_mode(MODE_RUNQUEUE);
568 do_runq = TRUE;
569 }
571 } else if (strcmp(opt, "t") == 0) {
572 opt_t = TRUE;
574 } else if (strcmp(opt, "v") == 0) {
575 do_verbose = TRUE;
577 } else {
578 fprintf(stderr, "unrecognized option `-%s'\n", opt);
579 exit(1);
580 }
581 }
583 if (!mta_mode && arg==argc && !opt_t) {
584 /*
585 ** In this case no rcpts can be found, thus no mail
586 ** can be sent, thus masqmail will always fail. We
587 ** rather do something better instead. This covers
588 ** also the case of calling masqmail without args.
589 */
590 mode_version();
591 exit(0);
592 }
594 if (mta_mode == MODE_VERSION) {
595 mode_version();
596 exit(0);
597 }
599 if (!mta_mode) {
600 mta_mode = MODE_ACCEPT;
601 }
603 /* initialize random generator */
604 srand(time(NULL));
605 /* ignore SIGPIPE signal */
606 signal(SIGPIPE, SIG_IGN);
608 /* close all possibly open file descriptors, except std{in,out,err} */
609 {
610 int i, max_fd = sysconf(_SC_OPEN_MAX);
612 if (max_fd <= 0) {
613 max_fd = 64;
614 }
615 for (i=3; i<max_fd; i++) {
616 close(i);
617 }
618 }
620 init_conf();
622 /*
623 ** if we are not privileged, and the config file was changed we
624 ** implicetely set the the run_as_user flag and give up all
625 ** privileges.
626 **
627 ** So it is possible for a user to run his own daemon without
628 ** breaking security.
629 */
630 if ((strcmp(conf_file, CONF_FILE) != 0) && (conf.orig_uid != 0)) {
631 conf.run_as_user = TRUE;
632 set_euidgid(conf.orig_uid, conf.orig_gid, NULL, NULL);
633 if (setgid(conf.orig_gid)) {
634 logwrite(LOG_ALERT, "could not set gid to %d: %s\n", conf.orig_gid, strerror(errno));
635 exit(1);
636 }
637 if (setuid(conf.orig_uid)) {
638 logwrite(LOG_ALERT, "could not set uid to %d: %s\n", conf.orig_uid, strerror(errno));
639 exit(1);
640 }
641 }
643 conf.log_dir = LOG_DIR;
644 /* FIXME: fails if we run as user */
645 logopen();
646 if (!read_conf(conf_file)) {
647 logwrite(LOG_ALERT, "SHUTTING DOWN due to problems reading config\n");
648 exit(5);
649 }
650 logclose();
652 if (do_queue) {
653 conf.do_queue = TRUE;
654 }
655 if (do_verbose) {
656 conf.do_verbose = TRUE;
657 }
658 if (debug_level >= 0) { /* if >= 0, it was given by argument */
659 conf.debug_level = debug_level;
660 }
662 /*
663 ** It appears that changing to / ensures that we are never in
664 ** a directory which we cannot access. This situation could be
665 ** possible after changing identity.
666 ** Maybe we should only change to / if we not run as user, to
667 ** allow relative paths for log files in test setups for
668 ** instance.
669 */
670 chdir("/");
672 if (!conf.run_as_user) {
673 if (setgid(0) != 0) {
674 fprintf(stderr, "could not set gid to 0. Is the setuid bit set? : %s\n", strerror(errno));
675 exit(1);
676 }
677 if (setuid(0) != 0) {
678 fprintf(stderr, "could not gain root privileges. Is the setuid bit set? : %s\n", strerror(errno));
679 exit(1);
680 }
681 }
683 if (!logopen()) {
684 fprintf(stderr, "could not open log file\n");
685 exit(1);
686 }
688 DEBUG(1) debugf("masqmail %s starting\n", VERSION);
690 DEBUG(5) {
691 gchar **str = argv;
692 debugf("args: \n");
693 while (*str) {
694 debugf("%s \n", *str);
695 str++;
696 }
697 }
698 DEBUG(5) debugf("queue_interval = %d\n", queue_interval);
700 if (f_address) {
701 return_path = create_address_qualified(f_address, TRUE, conf.host_name);
702 g_free(f_address);
703 if (!return_path) {
704 fprintf(stderr, "invalid RFC821 address: %s\n", f_address);
705 exit(1);
706 }
707 }
709 switch (mta_mode) {
710 case MODE_DAEMON:
711 mode_daemon(do_listen, queue_interval, argv);
712 break;
714 case MODE_RUNQUEUE:
715 exit(run_queue(do_runq, do_runq_online, route_name) ? 0 : 1);
716 break;
718 case MODE_SMTP:
719 mode_smtp();
720 break;
722 case MODE_LIST:
723 queue_list();
724 break;
726 case MODE_BI:
727 exit(0);
728 break; /* well... */
730 case MODE_MCMD:
731 exit(manipulate_queue(M_cmd, &argv[arg]) ? 0 : 1);
732 break;
734 case MODE_ACCEPT:
735 {
736 guint accept_flags = (opt_t ? ACC_RCPT_FROM_HEAD : 0)
737 | (opt_i ? ACC_DOT_IGNORE : ACC_NODOT_RELAX);
738 mode_accept(return_path, full_sender_name, accept_flags, &(argv[arg]), argc - arg);
739 exit(0);
740 }
741 break;
743 default:
744 fprintf(stderr, "unknown mode: %d\n", mta_mode);
745 break;
746 }
748 logclose();
750 exit(0);
751 }