]>
code.delx.au - gnu-emacs/blob - lib-src/movemail.c
143ee4e29c10b1e235cce112a31e8f68492c0ef1
1 /* movemail foo bar -- move file foo to file bar,
2 locking file foo the way /bin/mail respects.
3 Copyright (C) 1986, 1992, 1993, 1994, 1996, 1999, 2001, 2002, 2003, 2004,
4 2005, 2006, 2007, 2008, 2009, 2010, 2011 Free Software Foundation, Inc.
6 This file is part of GNU Emacs.
8 GNU Emacs is free software: you can redistribute it and/or modify
9 it under the terms of the GNU General Public License as published by
10 the Free Software Foundation, either version 3 of the License, or
11 (at your option) any later version.
13 GNU Emacs is distributed in the hope that it will be useful,
14 but WITHOUT ANY WARRANTY; without even the implied warranty of
15 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
16 GNU General Public License for more details.
18 You should have received a copy of the GNU General Public License
19 along with GNU Emacs. If not, see <http://www.gnu.org/licenses/>. */
22 /* Important notice: defining MAIL_USE_FLOCK or MAIL_USE_LOCKF *will
23 cause loss of mail* if you do it on a system that does not normally
24 use flock as its way of interlocking access to inbox files. The
25 setting of MAIL_USE_FLOCK and MAIL_USE_LOCKF *must agree* with the
26 system's own conventions. It is not a choice that is up to you.
28 So, if your system uses lock files rather than flock, then the only way
29 you can get proper operation is to enable movemail to write lockfiles there.
30 This means you must either give that directory access modes
31 that permit everyone to write lockfiles in it, or you must make movemail
32 a setuid or setgid program. */
35 * Modified January, 1986 by Michael R. Gretzinger (Project Athena)
37 * Added POP (Post Office Protocol) service. When compiled -DMAIL_USE_POP
38 * movemail will accept input filename arguments of the form
39 * "po:username". This will cause movemail to open a connection to
40 * a pop server running on $MAILHOST (environment variable). Movemail
41 * must be setuid to root in order to work with POP.
43 * New module: popmail.c
45 * main - added code within #ifdef MAIL_USE_POP; added setuid (getuid ())
47 * New routines in movemail.c:
48 * get_errmsg - return pointer to system error message
50 * Modified August, 1993 by Jonathan Kamens (OpenVision Technologies)
52 * Move all of the POP code into a separate file, "pop.c".
53 * Use strerror instead of get_errmsg.
58 #include <sys/types.h>
83 #define DIRECTORY_SEP '/'
85 #ifndef IS_DIRECTORY_SEP
86 #define IS_DIRECTORY_SEP(_c_) ((_c_) == DIRECTORY_SEP)
94 #define wait(var) (*(var) = 0)
95 /* Unfortunately, Samba doesn't seem to properly lock Unix files even
96 though the locking call succeeds (and indeed blocks local access from
97 other NT programs). If you have direct file access using an NFS
98 client or something other than Samba, the locking call might work
99 properly - make sure it does before you enable this!
101 [18-Feb-97 andrewi] I now believe my comment above to be incorrect,
102 since it was based on a misunderstanding of how locking calls are
103 implemented and used on Unix. */
104 //#define DISABLE_DIRECT_ACCESS
107 #endif /* WINDOWSNT */
117 #include <sys/locking.h>
120 #ifdef MAIL_USE_LOCKF
121 #define MAIL_USE_SYSTEM_LOCK
124 #ifdef MAIL_USE_FLOCK
125 #define MAIL_USE_SYSTEM_LOCK
129 extern int lk_open (), lk_close ();
132 #if !defined (MAIL_USE_SYSTEM_LOCK) && !defined (MAIL_USE_MMDF) && \
133 (defined (HAVE_LIBMAIL) || defined (HAVE_LIBLOCKFILE)) && \
134 defined (HAVE_MAILLOCK_H)
135 #include <maillock.h>
136 /* We can't use maillock unless we know what directory system mail
139 #define MAIL_USE_MAILLOCK
140 static char *mail_spool_name ();
144 #ifndef HAVE_STRERROR
145 char *strerror (int);
148 static void fatal (const char *s1
, const char *s2
, const char *s3
) NO_RETURN
;
149 static void error (const char *s1
, const char *s2
, const char *s3
);
150 static void pfatal_with_name (char *name
) NO_RETURN
;
151 static void pfatal_and_delete (char *name
) NO_RETURN
;
152 static char *concat (const char *s1
, const char *s2
, const char *s3
);
153 static long *xmalloc (unsigned int size
);
155 static int popmail (char *mailbox
, char *outfile
, int preserve
, char *password
, int reverse_order
);
156 static int pop_retr (popserver server
, int msgno
, FILE *arg
);
157 static int mbx_write (char *line
, int len
, FILE *mbf
);
158 static int mbx_delimit_begin (FILE *mbf
);
159 static int mbx_delimit_end (FILE *mbf
);
162 /* Nonzero means this is name of a lock file to delete on fatal error. */
163 char *delete_lockname
;
166 main (int argc
, char **argv
)
168 char *inname
, *outname
;
172 int c
, preserve_mail
= 0;
174 #ifndef MAIL_USE_SYSTEM_LOCK
181 #endif /* not MAIL_USE_SYSTEM_LOCK */
183 #ifdef MAIL_USE_MAILLOCK
188 int pop_reverse_order
= 0;
190 #else /* ! MAIL_USE_POP */
192 #endif /* MAIL_USE_POP */
194 uid_t real_gid
= getgid();
195 uid_t priv_gid
= getegid();
198 /* Ensure all file i/o is in binary mode. */
204 while ((c
= getopt (argc
, argv
, ARGSTR
)) != EOF
)
209 pop_reverse_order
= 1;
222 (argc
- optind
< 2) || (argc
- optind
> 3)
229 fprintf (stderr
, "Usage: movemail [-p] [-r] inbox destfile%s\n",
232 fprintf (stderr
, "Usage: movemail [-p] inbox destfile%s\n", "");
237 inname
= argv
[optind
];
238 outname
= argv
[optind
+1];
245 fatal ("Destination file name is empty", 0, 0);
248 if (!strncmp (inname
, "po:", 3))
252 status
= popmail (inname
+ 3, outname
, preserve_mail
,
253 (argc
- optind
== 3) ? argv
[optind
+2] : NULL
,
258 if (setuid (getuid ()) < 0)
259 fatal ("Failed to drop privileges", 0, 0);
261 #endif /* MAIL_USE_POP */
263 #ifndef DISABLE_DIRECT_ACCESS
264 #ifndef MAIL_USE_MMDF
265 #ifndef MAIL_USE_SYSTEM_LOCK
266 #ifdef MAIL_USE_MAILLOCK
267 spool_name
= mail_spool_name (inname
);
271 /* Use a lock file named after our first argument with .lock appended:
272 If it exists, the mail file is locked. */
273 /* Note: this locking mechanism is *required* by the mailer
274 (on systems which use it) to prevent loss of mail.
276 On systems that use a lock file, extracting the mail without locking
277 WILL occasionally cause loss of mail due to timing errors!
279 So, if creation of the lock file fails
280 due to access permission on the mail spool directory,
281 you simply MUST change the permission
282 and/or make movemail a setgid program
283 so it can create lock files properly.
285 You might also wish to verify that your system is one
286 which uses lock files for this purpose. Some systems use other methods.
288 If your system uses the `flock' system call for mail locking,
289 define MAIL_USE_SYSTEM_LOCK in config.h or the s-*.h file
290 and recompile movemail. If the s- file for your system
291 should define MAIL_USE_SYSTEM_LOCK but does not, send a bug report
292 to bug-gnu-emacs@prep.ai.mit.edu so we can fix it. */
294 lockname
= concat (inname
, ".lock", "");
295 tempname
= (char *) xmalloc (strlen (inname
) + strlen ("EXXXXXX") + 1);
296 strcpy (tempname
, inname
);
297 p
= tempname
+ strlen (tempname
);
298 while (p
!= tempname
&& !IS_DIRECTORY_SEP (p
[-1]))
301 strcpy (p
, "EXXXXXX");
307 /* Create the lock file, but not under the lock file name. */
308 /* Give up if cannot do that. */
309 desc
= open (tempname
, O_WRONLY
| O_CREAT
| O_EXCL
, 0666);
312 char *message
= (char *) xmalloc (strlen (tempname
) + 50);
313 sprintf (message
, "creating %s, which would become the lock file",
315 pfatal_with_name (message
);
319 tem
= link (tempname
, lockname
);
322 if (tem
< 0 && errno
== EPERM
)
323 fatal ("Unable to create hard link between %s and %s",
332 /* If lock file is five minutes old, unlock it.
333 Five minutes should be good enough to cope with crashes
334 and wedgitude, and long enough to avoid being fooled
335 by time differences between machines. */
336 if (stat (lockname
, &st
) >= 0)
339 if (st
.st_ctime
< now
- 300)
344 delete_lockname
= lockname
;
346 #endif /* not MAIL_USE_SYSTEM_LOCK */
347 #endif /* not MAIL_USE_MMDF */
353 #if defined (MAIL_USE_MAILLOCK) && defined (HAVE_TOUCHLOCK)
354 time_t touched_lock
, now
;
357 if (setuid (getuid ()) < 0 || setregid (-1, real_gid
) < 0)
358 fatal ("Failed to drop privileges", 0, 0);
360 #ifndef MAIL_USE_MMDF
361 #ifdef MAIL_USE_SYSTEM_LOCK
362 indesc
= open (inname
, O_RDWR
);
363 #else /* if not MAIL_USE_SYSTEM_LOCK */
364 indesc
= open (inname
, O_RDONLY
);
365 #endif /* not MAIL_USE_SYSTEM_LOCK */
366 #else /* MAIL_USE_MMDF */
367 indesc
= lk_open (inname
, O_RDONLY
, 0, 0, 10);
368 #endif /* MAIL_USE_MMDF */
371 pfatal_with_name (inname
);
374 /* In case movemail is setuid to root, make sure the user can
375 read the output file. */
376 /* This is desirable for all systems
377 but I don't want to assume all have the umask system call */
378 umask (umask (0) & 0333);
379 #endif /* BSD_SYSTEM */
380 outdesc
= open (outname
, O_WRONLY
| O_CREAT
| O_EXCL
, 0666);
382 pfatal_with_name (outname
);
384 if (setregid (-1, priv_gid
) < 0)
385 fatal ("Failed to regain privileges", 0, 0);
387 /* This label exists so we can retry locking
388 after a delay, if it got EAGAIN or EBUSY. */
391 /* Try to lock it. */
392 #ifdef MAIL_USE_MAILLOCK
395 /* The "0 - " is to make it a negative number if maillock returns
397 status
= 0 - maillock (spool_name
, 1);
398 #ifdef HAVE_TOUCHLOCK
399 touched_lock
= time (0);
404 #endif /* MAIL_USE_MAILLOCK */
406 #ifdef MAIL_USE_SYSTEM_LOCK
407 #ifdef MAIL_USE_LOCKF
408 status
= lockf (indesc
, F_LOCK
, 0);
409 #else /* not MAIL_USE_LOCKF */
411 status
= locking (indesc
, LK_RLCK
, -1L);
413 status
= flock (indesc
, LOCK_EX
);
415 #endif /* not MAIL_USE_LOCKF */
416 #endif /* MAIL_USE_SYSTEM_LOCK */
419 /* If it fails, retry up to 5 times
420 for certain failure codes. */
423 if (++lockcount
<= 5)
441 pfatal_with_name (inname
);
449 nread
= read (indesc
, buf
, sizeof buf
);
451 pfatal_with_name (inname
);
452 if (nread
!= write (outdesc
, buf
, nread
))
454 int saved_errno
= errno
;
457 pfatal_with_name (outname
);
459 if (nread
< sizeof buf
)
461 #if defined (MAIL_USE_MAILLOCK) && defined (HAVE_TOUCHLOCK)
465 if (now
- touched_lock
> 60)
471 #endif /* MAIL_USE_MAILLOCK */
476 if (fsync (outdesc
) < 0)
477 pfatal_and_delete (outname
);
480 /* Prevent symlink attacks truncating other users' mailboxes */
481 if (setregid (-1, real_gid
) < 0)
482 fatal ("Failed to drop privileges", 0, 0);
484 /* Check to make sure no errors before we zap the inbox. */
485 if (close (outdesc
) != 0)
486 pfatal_and_delete (outname
);
488 #ifdef MAIL_USE_SYSTEM_LOCK
491 if (ftruncate (indesc
, 0L) != 0)
492 pfatal_with_name (inname
);
494 #endif /* MAIL_USE_SYSTEM_LOCK */
497 lk_close (indesc
, 0, 0, 0);
502 #ifndef MAIL_USE_SYSTEM_LOCK
505 /* Delete the input file; if we can't, at least get rid of its
507 #ifdef MAIL_UNLINK_SPOOL
508 /* This is generally bad to do, because it destroys the permissions
509 that were set on the file. Better to just empty the file. */
510 if (unlink (inname
) < 0 && errno
!= ENOENT
)
511 #endif /* MAIL_UNLINK_SPOOL */
512 creat (inname
, 0600);
514 #endif /* not MAIL_USE_SYSTEM_LOCK */
516 /* End of mailbox truncation */
517 if (setregid (-1, priv_gid
) < 0)
518 fatal ("Failed to regain privileges", 0, 0);
520 #ifdef MAIL_USE_MAILLOCK
521 /* This has to occur in the child, i.e., in the process that
522 acquired the lock! */
530 if (!WIFEXITED (status
))
532 else if (WRETCODE (status
) != 0)
533 exit (WRETCODE (status
));
535 #if !defined (MAIL_USE_MMDF) && !defined (MAIL_USE_SYSTEM_LOCK)
536 #ifdef MAIL_USE_MAILLOCK
538 #endif /* MAIL_USE_MAILLOCK */
540 #endif /* not MAIL_USE_MMDF and not MAIL_USE_SYSTEM_LOCK */
542 #endif /* ! DISABLE_DIRECT_ACCESS */
547 #ifdef MAIL_USE_MAILLOCK
548 /* This function uses stat to confirm that the mail directory is
549 identical to the directory of the input file, rather than just
550 string-comparing the two paths, because one or both of them might
551 be symbolic links pointing to some other directory. */
553 mail_spool_name (char *inname
)
555 struct stat stat1
, stat2
;
559 if (! (fname
= strrchr (inname
, '/')))
564 if (stat (MAILDIR
, &stat1
) < 0)
567 indir
= (char *) xmalloc (fname
- inname
+ 1);
568 strncpy (indir
, inname
, fname
- inname
);
569 indir
[fname
-inname
] = '\0';
572 status
= stat (indir
, &stat2
);
579 if (stat1
.st_dev
== stat2
.st_dev
580 && stat1
.st_ino
== stat2
.st_ino
)
585 #endif /* MAIL_USE_MAILLOCK */
587 /* Print error message and exit. */
590 fatal (const char *s1
, const char *s2
, const char *s3
)
593 unlink (delete_lockname
);
598 /* Print error message. `s1' is printf control string, `s2' and `s3'
599 are args for it or null. */
602 error (const char *s1
, const char *s2
, const char *s3
)
604 fprintf (stderr
, "movemail: ");
606 fprintf (stderr
, s1
, s2
, s3
);
608 fprintf (stderr
, s1
, s2
);
610 fprintf (stderr
, "%s", s1
);
611 fprintf (stderr
, "\n");
615 pfatal_with_name (char *name
)
617 fatal ("%s for %s", strerror (errno
), name
);
621 pfatal_and_delete (char *name
)
623 char *s
= strerror (errno
);
625 fatal ("%s for %s", s
, name
);
628 /* Return a newly-allocated string whose contents concatenate those of s1, s2, s3. */
631 concat (const char *s1
, const char *s2
, const char *s3
)
633 size_t len1
= strlen (s1
), len2
= strlen (s2
), len3
= strlen (s3
);
634 char *result
= (char *) xmalloc (len1
+ len2
+ len3
+ 1);
637 strcpy (result
+ len1
, s2
);
638 strcpy (result
+ len1
+ len2
, s3
);
639 *(result
+ len1
+ len2
+ len3
) = 0;
644 /* Like malloc but get fatal error if memory is exhausted. */
647 xmalloc (unsigned int size
)
649 long *result
= (long *) malloc (size
);
651 fatal ("virtual memory exhausted", 0, 0);
655 /* This is the guts of the interface to the Post Office Protocol. */
660 #include <sys/socket.h>
661 #include <netinet/in.h>
677 char ibuffer
[BUFSIZ
];
678 char obuffer
[BUFSIZ
];
679 char Errmsg
[200]; /* POP errors, at least, can exceed
680 the original length of 80. */
683 * The full valid syntax for a POP mailbox specification for movemail
684 * is "po:username:hostname". The ":hostname" is optional; if it is
685 * omitted, the MAILHOST environment variable will be consulted. Note
686 * that by the time popmail() is called the "po:" has been stripped
687 * off of the front of the mailbox name.
689 * If the mailbox is in the form "po:username:hostname", then it is
690 * modified by this function -- the second colon is replaced by a
693 * Return a value suitable for passing to `exit'.
697 popmail (char *mailbox
, char *outfile
, int preserve
, char *password
, int reverse_order
)
703 char *getenv (const char *);
705 int start
, end
, increment
;
706 char *user
, *hostname
;
709 if ((hostname
= strchr (mailbox
, ':')))
712 server
= pop_open (hostname
, user
, password
, POP_NO_GETPASS
);
715 error ("Error connecting to POP server: %s", pop_error
, 0);
719 if (pop_stat (server
, &nmsgs
, &nbytes
))
721 error ("Error getting message count from POP server: %s", pop_error
, 0);
731 mbfi
= open (outfile
, O_WRONLY
| O_CREAT
| O_EXCL
, 0666);
735 error ("Error in open: %s, %s", strerror (errno
), outfile
);
738 fchown (mbfi
, getuid (), -1);
740 if ((mbf
= fdopen (mbfi
, "wb")) == NULL
)
743 error ("Error in fdopen: %s", strerror (errno
), 0);
762 for (i
= start
; i
* increment
<= end
* increment
; i
+= increment
)
764 mbx_delimit_begin (mbf
);
765 if (pop_retr (server
, i
, mbf
) != OK
)
767 error ("%s", Errmsg
, 0);
771 mbx_delimit_end (mbf
);
775 error ("Error in fflush: %s", strerror (errno
), 0);
782 /* On AFS, a call to write only modifies the file in the local
783 * workstation's AFS cache. The changes are not written to the server
784 * until a call to fsync or close is made. Users with AFS home
785 * directories have lost mail when over quota because these checks were
786 * not made in previous versions of movemail. */
789 if (fsync (mbfi
) < 0)
791 error ("Error in fsync: %s", strerror (errno
), 0);
796 if (close (mbfi
) == -1)
798 error ("Error in close: %s", strerror (errno
), 0);
803 for (i
= 1; i
<= nmsgs
; i
++)
805 if (pop_delete (server
, i
))
807 error ("Error from POP server: %s", pop_error
, 0);
813 if (pop_quit (server
))
815 error ("Error from POP server: %s", pop_error
, 0);
823 pop_retr (popserver server
, int msgno
, FILE *arg
)
828 if (pop_retrieve_first (server
, msgno
, &line
))
830 char *error
= concat ("Error from POP server: ", pop_error
, "");
831 strncpy (Errmsg
, error
, sizeof (Errmsg
));
832 Errmsg
[sizeof (Errmsg
)-1] = '\0';
837 while ((ret
= pop_retrieve_next (server
, &line
)) >= 0)
842 if (mbx_write (line
, ret
, arg
) != OK
)
844 strcpy (Errmsg
, strerror (errno
));
852 char *error
= concat ("Error from POP server: ", pop_error
, "");
853 strncpy (Errmsg
, error
, sizeof (Errmsg
));
854 Errmsg
[sizeof (Errmsg
)-1] = '\0';
862 /* Do this as a macro instead of using strcmp to save on execution time. */
863 #define IS_FROM_LINE(a) ((a[0] == 'F') \
870 mbx_write (char *line
, int len
, FILE *mbf
)
872 #ifdef MOVEMAIL_QUOTE_POP_FROM_LINES
873 if (IS_FROM_LINE (line
))
875 if (fputc ('>', mbf
) == EOF
)
879 if (line
[0] == '\037')
881 if (fputs ("^_", mbf
) == EOF
)
886 if (fwrite (line
, 1, len
, mbf
) != len
)
888 if (fputc (0x0a, mbf
) == EOF
)
894 mbx_delimit_begin (FILE *mbf
)
898 char fromline
[40] = "From movemail ";
901 ltime
= localtime (&now
);
903 strcat (fromline
, asctime (ltime
));
905 if (fputs (fromline
, mbf
) == EOF
)
911 mbx_delimit_end (FILE *mbf
)
913 if (putc ('\n', mbf
) == EOF
)
918 #endif /* MAIL_USE_POP */
920 #ifndef HAVE_STRERROR
925 extern char *sys_errlist
[];
928 if (errnum
>= 0 && errnum
< sys_nerr
)
929 return sys_errlist
[errnum
];
930 return (char *) "Unknown error";
933 #endif /* ! HAVE_STRERROR */
936 /* movemail.c ends here */