1 /* movemail foo bar -- move file foo to file bar,
2 locking file foo the way /bin/mail respects.
3 Copyright (C) 1986, 1992, 1993, 1994 Free Software Foundation, Inc.
5 This file is part of GNU Emacs.
7 GNU Emacs is free software; you can redistribute it and/or modify
8 it under the terms of the GNU General Public License as published by
9 the Free Software Foundation; either version 2, or (at your option)
12 GNU Emacs is distributed in the hope that it will be useful,
13 but WITHOUT ANY WARRANTY; without even the implied warranty of
14 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15 GNU General Public License for more details.
17 You should have received a copy of the GNU General Public License
18 along with GNU Emacs; see the file COPYING. If not, write to
19 the Free Software Foundation, 675 Mass Ave, Cambridge, MA 02139, USA. */
21 /* Important notice: defining MAIL_USE_FLOCK or MAIL_USE_LOCKF *will
22 cause loss of mail* if you do it on a system that does not normally
23 use flock as its way of interlocking access to inbox files. The
24 setting of MAIL_USE_FLOCK and MAIL_USE_LOCKF *must agree* with the
25 system's own conventions. It is not a choice that is up to you.
27 So, if your system uses lock files rather than flock, then the only way
28 you can get proper operation is to enable movemail to write lockfiles there.
29 This means you must either give that directory access modes
30 that permit everyone to write lockfiles in it, or you must make movemail
31 a setuid or setgid program. */
34 * Modified January, 1986 by Michael R. Gretzinger (Project Athena)
36 * Added POP (Post Office Protocol) service. When compiled -DPOP
37 * movemail will accept input filename arguments of the form
38 * "po:username". This will cause movemail to open a connection to
39 * a pop server running on $MAILHOST (environment variable). Movemail
40 * must be setuid to root in order to work with POP.
42 * New module: popmail.c
44 * main - added code within #ifdef MAIL_USE_POP; added setuid (getuid ())
46 * New routines in movemail.c:
47 * get_errmsg - return pointer to system error message
49 * Modified August, 1993 by Jonathan Kamens (OpenVision Technologies)
51 * Move all of the POP code into a separate file, "pop.c".
52 * Use strerror instead of get_errmsg.
56 #define NO_SHORTNAMES /* Tell config not to load remap.h */
57 #include <../src/config.h>
58 #include <sys/types.h>
63 #include <../src/syswait.h>
88 #include <sys/locking.h>
92 #define MAIL_USE_SYSTEM_LOCK
96 #define MAIL_USE_SYSTEM_LOCK
100 extern int lk_open (), lk_close ();
103 /* Cancel substitutions made by config.h for Emacs. */
116 void pfatal_with_name ();
117 void pfatal_and_delete ();
123 int mbx_delimit_begin ();
124 int mbx_delimit_end ();
126 /* Nonzero means this is name of a lock file to delete on fatal error. */
127 char *delete_lockname
;
134 char *inname
, *outname
;
139 #ifndef MAIL_USE_SYSTEM_LOCK
146 #endif /* not MAIL_USE_SYSTEM_LOCK */
152 fprintf (stderr
, "Usage: movemail inbox destfile");
163 /* Check access to output file. */
164 if (access (outname
, F_OK
) == 0 && access (outname
, W_OK
) != 0)
165 pfatal_with_name (outname
);
167 /* Also check that outname's directory is writeable to the real uid. */
169 char *buf
= (char *) xmalloc (strlen (outname
) + 1);
171 strcpy (buf
, outname
);
172 p
= buf
+ strlen (buf
);
173 while (p
> buf
&& p
[-1] != '/')
177 if (access (buf
, W_OK
) != 0)
178 pfatal_with_name (buf
);
183 if (!strncmp (inname
, "po:", 3))
185 int status
; char *user
;
187 for (user
= &inname
[strlen (inname
) - 1]; user
>= inname
; user
--)
191 status
= popmail (user
, outname
);
196 #endif /* MAIL_USE_POP */
198 /* Check access to input file. */
199 if (access (inname
, R_OK
| W_OK
) != 0)
200 pfatal_with_name (inname
);
202 #ifndef MAIL_USE_MMDF
203 #ifndef MAIL_USE_SYSTEM_LOCK
204 /* Use a lock file named /usr/spool/mail/$USER.lock:
205 If it exists, the mail file is locked. */
206 /* Note: this locking mechanism is *required* by the mailer
207 (on systems which use it) to prevent loss of mail.
209 On systems that use a lock file, extracting the mail without locking
210 WILL occasionally cause loss of mail due to timing errors!
212 So, if creation of the lock file fails
213 due to access permission on /usr/spool/mail,
214 you simply MUST change the permission
215 and/or make movemail a setgid program
216 so it can create lock files properly.
218 You might also wish to verify that your system is one
219 which uses lock files for this purpose. Some systems use other methods.
221 If your system uses the `flock' system call for mail locking,
222 define MAIL_USE_SYSTEM_LOCK in config.h or the s-*.h file
223 and recompile movemail. If the s- file for your system
224 should define MAIL_USE_SYSTEM_LOCK but does not, send a bug report
225 to bug-gnu-emacs@prep.ai.mit.edu so we can fix it. */
227 lockname
= concat (inname
, ".lock", "");
228 tempname
= (char *) xmalloc (strlen (inname
) + strlen ("EXXXXXX") + 1);
229 strcpy (tempname
, inname
);
230 p
= tempname
+ strlen (tempname
);
231 while (p
!= tempname
&& p
[-1] != '/')
234 strcpy (p
, "EXXXXXX");
240 /* Create the lock file, but not under the lock file name. */
241 /* Give up if cannot do that. */
242 desc
= open (tempname
, O_WRONLY
| O_CREAT
| O_EXCL
, 0666);
244 pfatal_with_name ("lock file--see source file lib-src/movemail.c");
247 tem
= link (tempname
, lockname
);
253 /* If lock file is a minute old, unlock it. */
254 if (stat (lockname
, &st
) >= 0)
257 if (st
.st_ctime
< now
- 60)
262 delete_lockname
= lockname
;
263 #endif /* not MAIL_USE_SYSTEM_LOCK */
264 #endif /* not MAIL_USE_MMDF */
270 #ifndef MAIL_USE_MMDF
271 #ifdef MAIL_USE_SYSTEM_LOCK
272 indesc
= open (inname
, O_RDWR
);
273 #else /* if not MAIL_USE_SYSTEM_LOCK */
274 indesc
= open (inname
, O_RDONLY
);
275 #endif /* not MAIL_USE_SYSTEM_LOCK */
276 #else /* MAIL_USE_MMDF */
277 indesc
= lk_open (inname
, O_RDONLY
, 0, 0, 10);
278 #endif /* MAIL_USE_MMDF */
281 pfatal_with_name (inname
);
283 #if defined (BSD) || defined (XENIX)
284 /* In case movemail is setuid to root, make sure the user can
285 read the output file. */
286 /* This is desirable for all systems
287 but I don't want to assume all have the umask system call */
288 umask (umask (0) & 0333);
289 #endif /* BSD or Xenix */
290 outdesc
= open (outname
, O_WRONLY
| O_CREAT
| O_EXCL
, 0666);
292 pfatal_with_name (outname
);
293 #ifdef MAIL_USE_SYSTEM_LOCK
294 #ifdef MAIL_USE_LOCKF
295 if (lockf (indesc
, F_LOCK
, 0) < 0) pfatal_with_name (inname
);
296 #else /* not MAIL_USE_LOCKF */
298 if (locking (indesc
, LK_RLCK
, 0L) < 0) pfatal_with_name (inname
);
300 if (flock (indesc
, LOCK_EX
) < 0) pfatal_with_name (inname
);
302 #endif /* not MAIL_USE_LOCKF */
303 #endif /* MAIL_USE_SYSTEM_LOCK */
310 nread
= read (indesc
, buf
, sizeof buf
);
311 if (nread
!= write (outdesc
, buf
, nread
))
313 int saved_errno
= errno
;
316 pfatal_with_name (outname
);
318 if (nread
< sizeof buf
)
324 if (fsync (outdesc
) < 0)
325 pfatal_and_delete (outname
);
328 /* Check to make sure no errors before we zap the inbox. */
329 if (close (outdesc
) != 0)
330 pfatal_and_delete (outname
);
332 #ifdef MAIL_USE_SYSTEM_LOCK
333 #if defined (STRIDE) || defined (XENIX)
334 /* Stride, xenix have file locking, but no ftruncate. This mess will do. */
335 close (open (inname
, O_CREAT
| O_TRUNC
| O_RDWR
, 0666));
337 ftruncate (indesc
, 0L);
338 #endif /* STRIDE or XENIX */
339 #endif /* MAIL_USE_SYSTEM_LOCK */
342 lk_close (indesc
, 0, 0, 0);
347 #ifndef MAIL_USE_SYSTEM_LOCK
348 /* Delete the input file; if we can't, at least get rid of its
350 #ifdef MAIL_UNLINK_SPOOL
351 /* This is generally bad to do, because it destroys the permissions
352 that were set on the file. Better to just empty the file. */
353 if (unlink (inname
) < 0 && errno
!= ENOENT
)
354 #endif /* MAIL_UNLINK_SPOOL */
355 creat (inname
, 0600);
356 #endif /* not MAIL_USE_SYSTEM_LOCK */
362 if (!WIFEXITED (status
))
364 else if (WRETCODE (status
) != 0)
365 exit (WRETCODE (status
));
367 #if !defined (MAIL_USE_MMDF) && !defined (MAIL_USE_SYSTEM_LOCK)
369 #endif /* not MAIL_USE_MMDF and not MAIL_USE_SYSTEM_LOCK */
373 /* Print error message and exit. */
380 unlink (delete_lockname
);
385 /* Print error message. `s1' is printf control string, `s2' is arg for it. */
391 fprintf (stderr
, "movemail: ");
392 fprintf (stderr
, s1
, s2
, s3
);
393 fprintf (stderr
, "\n");
397 pfatal_with_name (name
)
400 char *s
= concat ("", strerror (errno
), " for %s");
405 pfatal_and_delete (name
)
408 char *s
= concat ("", strerror (errno
), " for %s");
413 /* Return a newly-allocated string whose contents concatenate those of s1, s2, s3. */
419 int len1
= strlen (s1
), len2
= strlen (s2
), len3
= strlen (s3
);
420 char *result
= (char *) xmalloc (len1
+ len2
+ len3
+ 1);
423 strcpy (result
+ len1
, s2
);
424 strcpy (result
+ len1
+ len2
, s3
);
425 *(result
+ len1
+ len2
+ len3
) = 0;
430 /* Like malloc but get fatal error if memory is exhausted. */
436 char *result
= (char *) malloc (size
);
438 fatal ("virtual memory exhausted", 0);
442 /* This is the guts of the interface to the Post Office Protocol. */
446 #include <sys/socket.h>
447 #include <netinet/in.h>
454 /* Cancel substitutions made by config.h for Emacs. */
468 char ibuffer
[BUFSIZ
];
469 char obuffer
[BUFSIZ
];
472 popmail (user
, outfile
)
483 extern char *strerror ();
485 server
= pop_open (0, user
, 0, POP_NO_GETPASS
);
492 if (pop_stat (server
, &nmsgs
, &nbytes
))
504 mbfi
= open (outfile
, O_WRONLY
| O_CREAT
| O_EXCL
, 0666);
508 error ("Error in open: %s, %s", strerror (errno
), outfile
);
511 fchown (mbfi
, getuid (), -1);
513 if ((mbf
= fdopen (mbfi
, "w")) == NULL
)
516 error ("Error in fdopen: %s", strerror (errno
));
522 for (i
= 1; i
<= nmsgs
; i
++)
524 mbx_delimit_begin (mbf
);
525 if (pop_retr (server
, i
, mbx_write
, mbf
) != OK
)
531 mbx_delimit_end (mbf
);
535 error ("Error in fflush: %s", strerror (errno
));
542 /* On AFS, a call to write only modifies the file in the local
543 * workstation's AFS cache. The changes are not written to the server
544 * until a call to fsync or close is made. Users with AFS home
545 * directories have lost mail when over quota because these checks were
546 * not made in previous versions of movemail. */
549 if (fsync (mbfi
) < 0)
551 error ("Error in fsync: %s", strerror (errno
));
556 if (close (mbfi
) == -1)
558 error ("Error in close: %s", strerror (errno
));
562 for (i
= 1; i
<= nmsgs
; i
++)
564 if (pop_delete (server
, i
))
572 if (pop_quit (server
))
581 pop_retr (server
, msgno
, action
, arg
)
585 extern char *strerror ();
589 if (pop_retrieve_first (server
, msgno
, &line
))
591 strncpy (Errmsg
, pop_error
, sizeof (Errmsg
));
592 Errmsg
[sizeof (Errmsg
)-1] = '\0';
596 while (! (ret
= pop_retrieve_next (server
, &line
)))
601 if ((*action
)(line
, arg
) != OK
)
603 strcpy (Errmsg
, strerror (errno
));
611 strncpy (Errmsg
, pop_error
, sizeof (Errmsg
));
612 Errmsg
[sizeof (Errmsg
)-1] = '\0';
619 /* Do this as a macro instead of using strcmp to save on execution time. */
620 #define IS_FROM_LINE(a) ((a[0] == 'F') \
627 mbx_write (line
, mbf
)
631 if (IS_FROM_LINE (line
))
633 if (fputc ('>', mbf
) == EOF
)
636 if (fputs (line
, mbf
) == EOF
)
638 if (fputc (0x0a, mbf
) == EOF
)
644 mbx_delimit_begin (mbf
)
647 if (fputs ("\f\n0, unseen,,\n", mbf
) == EOF
)
652 mbx_delimit_end (mbf
)
655 if (putc ('\037', mbf
) == EOF
)
660 #endif /* MAIL_USE_POP */
662 #ifndef HAVE_STRERROR
667 extern char *sys_errlist
[];
670 if (errnum
>= 0 && errnum
< sys_nerr
)
671 return sys_errlist
[errnum
];
672 return (char *) "Unknown error";
675 #endif /* ! HAVE_STRERROR */