dotlock.c 14.9 KB
Newer Older
Thomas Roessler's avatar
Thomas Roessler committed
1
/*
2 3
 * Copyright (C) 1996-2000 Michael R. Elkins <me@cs.hmc.edu>
 * Copyright (C) 1998-2000 Thomas Roessler <roessler@guug.de>
Thomas Roessler's avatar
Thomas Roessler committed
4 5 6 7 8 9 10 11 12 13 14 15 16
 * 
 *     This program is free software; you can redistribute it and/or modify
 *     it under the terms of the GNU General Public License as published by
 *     the Free Software Foundation; either version 2 of the License, or
 *     (at your option) any later version.
 * 
 *     This program is distributed in the hope that it will be useful,
 *     but WITHOUT ANY WARRANTY; without even the implied warranty of
 *     MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 *     GNU General Public License for more details.
 * 
 *     You should have received a copy of the GNU General Public License
 *     along with this program; if not, write to the Free Software
17
 *     Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA  02111, USA.
Thomas Roessler's avatar
Thomas Roessler committed
18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47
 */ 

/*
 * This module either be compiled into Mutt, or it can be
 * built as a separate program. For building it
 * separately, define the DL_STANDALONE preprocessor
 * macro.
 */

#include <stdio.h>
#include <stdlib.h>
#include <string.h>

#include <unistd.h>
#include <dirent.h>
#include <sys/file.h>
#include <sys/stat.h>
#include <sys/utsname.h>
#include <errno.h>
#include <time.h>
#include <fcntl.h>
#include <limits.h>

#ifndef _POSIX_PATH_MAX
#include <posix1_lim.h>
#endif

#include "dotlock.h"
#include "config.h"

48 49 50 51
#ifdef HAVE_GETOPT_H
#include <getopt.h>
#endif

Thomas Roessler's avatar
Thomas Roessler committed
52
#ifdef DL_STANDALONE
Thomas Roessler's avatar
Thomas Roessler committed
53
# include "reldate.h"
Thomas Roessler's avatar
Thomas Roessler committed
54 55
#endif

Thomas Roessler's avatar
Thomas Roessler committed
56
#define MAXLINKS 1024 /* maximum link depth */
Thomas Roessler's avatar
Thomas Roessler committed
57

Thomas Roessler's avatar
Thomas Roessler committed
58
#ifdef DL_STANDALONE
Thomas Roessler's avatar
Thomas Roessler committed
59 60 61 62

# define LONG_STRING 1024
# define MAXLOCKATTEMPT 5

63
# define strfcpy(A,B,C) strncpy (A,B,C), *(A+(C)-1)=0
Thomas Roessler's avatar
Thomas Roessler committed
64 65 66 67 68 69 70 71 72 73 74 75 76 77 78

# ifdef USE_SETGID

#  ifdef HAVE_SETEGID
#   define SETEGID setegid
#  else
#   define SETEGID setgid
#  endif
#  ifndef S_ISLNK
#   define S_ISLNK(x) (((x) & S_IFMT) == S_IFLNK ? 1 : 0)
#  endif

# endif

# ifndef HAVE_SNPRINTF
79
extern int snprintf (char *, size_t, const char *, ...);
Thomas Roessler's avatar
Thomas Roessler committed
80 81 82 83 84
# endif

#else  /* DL_STANDALONE */

# ifdef USE_SETGID
Thomas Roessler's avatar
Thomas Roessler committed
85
#   error Do not try to compile dotlock as a mutt module when requiring egid switching!
Thomas Roessler's avatar
Thomas Roessler committed
86 87 88 89 90 91 92
# endif

# include "mutt.h"
# include "mx.h"

#endif /* DL_STANDALONE */

93
static int DotlockFlags;
94
static int Retry = MAXLOCKATTEMPT;
Thomas Roessler's avatar
Thomas Roessler committed
95 96 97 98 99 100 101 102 103 104

#ifdef DL_STANDALONE
static char *Hostname;
#endif

#ifdef USE_SETGID
static gid_t UserGid;
static gid_t MailGid;
#endif

105
static int dotlock_deference_symlink (char *, size_t, const char *);
Thomas Roessler's avatar
Thomas Roessler committed
106
static int dotlock_prepare (char *, size_t, const char *, int fd);
Thomas Roessler's avatar
Thomas Roessler committed
107
static int dotlock_check_stats (struct stat *, struct stat *);
Thomas Roessler's avatar
Thomas Roessler committed
108
static int dotlock_dispatch (const char *, int fd);
Thomas Roessler's avatar
Thomas Roessler committed
109 110

#ifdef DL_STANDALONE
111 112
static int dotlock_init_privs (void);
static void usage (const char *);
Thomas Roessler's avatar
Thomas Roessler committed
113 114
#endif

115 116 117
static void dotlock_expand_link (char *, const char *, const char *);
static void BEGIN_PRIVILEGED (void);
static void END_PRIVILEGED (void);
Thomas Roessler's avatar
Thomas Roessler committed
118 119

/* These functions work on the current directory.
120
 * Invoke dotlock_prepare () before and check their
Thomas Roessler's avatar
Thomas Roessler committed
121 122 123
 * return value.
 */

Thomas Roessler's avatar
Thomas Roessler committed
124 125 126 127
static int dotlock_try (void);
static int dotlock_unlock (const char *);
static int dotlock_unlink (const char *);
static int dotlock_lock (const char *);
Thomas Roessler's avatar
Thomas Roessler committed
128 129 130 131


#ifdef DL_STANDALONE

132
#define check_flags(a) if (a & DL_FL_ACTIONS) usage (argv[0])
133 134

int main (int argc, char **argv)
Thomas Roessler's avatar
Thomas Roessler committed
135 136 137 138 139 140 141
{
  int i;
  char *p;
  struct utsname utsname;

  /* first, drop privileges */
  
142
  if (dotlock_init_privs () == -1)
Thomas Roessler's avatar
Thomas Roessler committed
143 144 145 146 147
    return DL_EX_ERROR;


  /* determine the system's host name */
  
148 149
  uname (&utsname);
  if (!(Hostname = strdup (utsname.nodename)))
Thomas Roessler's avatar
Thomas Roessler committed
150
    return DL_EX_ERROR;
151
  if ((p = strchr (Hostname, '.')))
Thomas Roessler's avatar
Thomas Roessler committed
152 153 154 155
    *p = '\0';


  /* parse the command line options. */
156 157 158
  DotlockFlags = 0;
  
  while ((i = getopt (argc, argv, "dtfupr:")) != EOF)
Thomas Roessler's avatar
Thomas Roessler committed
159
  {
160
    switch (i)
Thomas Roessler's avatar
Thomas Roessler committed
161
    {
162 163 164 165 166 167 168 169 170 171 172
      /* actions, mutually exclusive */
      case 't': check_flags (DotlockFlags); DotlockFlags |= DL_FL_TRY; break;
      case 'd': check_flags (DotlockFlags); DotlockFlags |= DL_FL_UNLINK; break;
      case 'u': check_flags (DotlockFlags); DotlockFlags |= DL_FL_UNLOCK; break;

      /* other flags */
      case 'f': DotlockFlags |= DL_FL_FORCE; break;
      case 'p': DotlockFlags |= DL_FL_USEPRIV; break;
      case 'r': DotlockFlags |= DL_FL_RETRY; Retry = atoi (optarg); break;
      
      default: usage (argv[0]);
Thomas Roessler's avatar
Thomas Roessler committed
173 174 175
    }
  }

176 177
  if (optind == argc || Retry < 0)
    usage (argv[0]);
178

Thomas Roessler's avatar
Thomas Roessler committed
179
  return dotlock_dispatch (argv[optind], -1);
180
}
Thomas Roessler's avatar
Thomas Roessler committed
181 182 183 184 185 186 187 188 189 190 191 192 193 194 195


/* 
 * Determine our effective group ID, and drop 
 * privileges.
 * 
 * Return value:
 * 
 *  0 - everything went fine
 * -1 - we couldn't drop privileges.
 * 
 */


static int
196
dotlock_init_privs (void)
Thomas Roessler's avatar
Thomas Roessler committed
197 198 199 200
{

# ifdef USE_SETGID
  
201 202
  UserGid = getgid ();
  MailGid = getegid ();
Thomas Roessler's avatar
Thomas Roessler committed
203

204
  if (SETEGID (UserGid) != 0)
Thomas Roessler's avatar
Thomas Roessler committed
205 206 207 208 209 210 211 212 213 214 215 216
    return -1;

# endif

  return 0;
}
  

#else  /* DL_STANDALONE */

/* 
 * This function is intended to be invoked from within
217
 * mutt instead of mx.c's invoke_dotlock ().
Thomas Roessler's avatar
Thomas Roessler committed
218 219
 */

Thomas Roessler's avatar
Thomas Roessler committed
220
int dotlock_invoke (const char *path, int fd, int flags, int retry)
Thomas Roessler's avatar
Thomas Roessler committed
221 222 223
{
  int currdir;
  int r;
224 225

  DotlockFlags = flags;
Thomas Roessler's avatar
Thomas Roessler committed
226
  
227
  if ((currdir = open (".", O_RDONLY)) == -1)
Thomas Roessler's avatar
Thomas Roessler committed
228
    return DL_EX_ERROR;
229

230
  if (!(DotlockFlags & DL_FL_RETRY) || retry)
Thomas Roessler's avatar
Thomas Roessler committed
231 232 233 234
    Retry = MAXLOCKATTEMPT;
  else
    Retry = 0;
  
Thomas Roessler's avatar
Thomas Roessler committed
235
  r = dotlock_dispatch (path, fd);
Thomas Roessler's avatar
Thomas Roessler committed
236
  
237 238
  fchdir (currdir);
  close (currdir);
Thomas Roessler's avatar
Thomas Roessler committed
239 240 241
  
  return r;
}
242

Thomas Roessler's avatar
Thomas Roessler committed
243
#endif  /* DL_STANDALONE */
244

245

Thomas Roessler's avatar
Thomas Roessler committed
246
static int dotlock_dispatch (const char *f, int fd)
247 248 249 250 251 252 253 254 255 256 257 258 259 260
{
  char realpath[_POSIX_PATH_MAX];

  /* If dotlock_prepare () succeeds [return value == 0],
   * realpath contains the basename of f, and we have
   * successfully changed our working directory to
   * `dirname $f`.  Additionally, f has been opened for
   * reading to verify that the user has at least read
   * permissions on that file.
   * 
   * For a more detailed explanation of all this, see the
   * lengthy comment below.
   */

Thomas Roessler's avatar
Thomas Roessler committed
261
  if (dotlock_prepare (realpath, sizeof (realpath), f, fd) != 0)
262 263 264 265 266 267 268 269 270 271 272 273 274 275 276
    return DL_EX_ERROR;

  /* Actually perform the locking operation. */

  if (DotlockFlags & DL_FL_TRY)
    return dotlock_try ();
  else if (DotlockFlags & DL_FL_UNLOCK)
    return dotlock_unlock (realpath);
  else if (DotlockFlags & DL_FL_UNLINK)
    return dotlock_unlink (realpath);
  else /* lock */
    return dotlock_lock (realpath);
}

  
Thomas Roessler's avatar
Thomas Roessler committed
277 278 279 280 281 282 283
/*
 * Get privileges 
 * 
 * This function re-acquires the privileges we may have
 * if the user told us to do so by giving the "-p"
 * command line option.
 * 
284
 * BEGIN_PRIVILEGES () won't return if an error occurs.
Thomas Roessler's avatar
Thomas Roessler committed
285 286 287 288
 * 
 */

static void
289
BEGIN_PRIVILEGED (void)
Thomas Roessler's avatar
Thomas Roessler committed
290 291
{
#ifdef USE_SETGID
292
  if (DotlockFlags & DL_FL_USEPRIV)
Thomas Roessler's avatar
Thomas Roessler committed
293
  {
294
    if (SETEGID (MailGid) != 0)
Thomas Roessler's avatar
Thomas Roessler committed
295
    {
296 297
      /* perror ("setegid"); */
      exit (DL_EX_ERROR);
Thomas Roessler's avatar
Thomas Roessler committed
298 299 300 301 302 303 304 305 306 307
    }
  }
#endif
}

/*
 * Drop privileges
 * 
 * This function drops the group privileges we may have.
 * 
308
 * END_PRIVILEGED () won't return if an error occurs.
Thomas Roessler's avatar
Thomas Roessler committed
309 310 311 312
 *
 */

static void
313
END_PRIVILEGED (void)
Thomas Roessler's avatar
Thomas Roessler committed
314 315
{
#ifdef USE_SETGID
316
  if (DotlockFlags & DL_FL_USEPRIV)
Thomas Roessler's avatar
Thomas Roessler committed
317
  {
318
    if (SETEGID (UserGid) != 0)
Thomas Roessler's avatar
Thomas Roessler committed
319
    {
320 321
      /* perror ("setegid"); */
      exit (DL_EX_ERROR);
Thomas Roessler's avatar
Thomas Roessler committed
322 323 324 325 326 327 328 329 330 331 332 333 334 335 336
    }
  }
#endif
}

#ifdef DL_STANDALONE

/*
 * Usage information.
 * 
 * This function doesn't return.
 * 
 */

static void 
337
usage (const char *av0)
Thomas Roessler's avatar
Thomas Roessler committed
338
{
339 340
  fprintf (stderr, "dotlock [Mutt %s (%s)]\n", VERSION, ReleaseDate);
  fprintf (stderr, "usage: %s [-t|-f|-u|-d] [-p] [-r <retries>] file\n",
Thomas Roessler's avatar
Thomas Roessler committed
341 342
	  av0);

343
  fputs ("\noptions:"
Thomas Roessler's avatar
Thomas Roessler committed
344 345 346
	"\n  -t\t\ttry"
	"\n  -f\t\tforce"
	"\n  -u\t\tunlock"
Thomas Roessler's avatar
Thomas Roessler committed
347
	"\n  -d\t\tunlink"
Thomas Roessler's avatar
Thomas Roessler committed
348 349 350 351 352 353 354
	"\n  -p\t\tprivileged"
#ifndef USE_SETGID
	" (ignored)"
#endif
	"\n  -r <retries>\tRetry locking"
	"\n", stderr);
  
355
  exit (DL_EX_ERROR);
Thomas Roessler's avatar
Thomas Roessler committed
356 357 358 359 360 361 362 363
}

#endif

/*
 * Access checking: Let's avoid to lock other users' mail
 * spool files if we aren't permitted to read them.
 * 
364
 * Some simple-minded access (2) checking isn't sufficient
Thomas Roessler's avatar
Thomas Roessler committed
365 366 367 368 369 370 371
 * here: The problem is that the user may give us a
 * deeply nested path to a file which has the same name
 * as the file he wants to lock, but different
 * permissions, say, e.g.
 * /tmp/lots/of/subdirs/var/spool/mail/root.
 * 
 * He may then try to replace /tmp/lots/of/subdirs by a
372
 * symbolic link to / after we have invoked access () to
Thomas Roessler's avatar
Thomas Roessler committed
373 374 375 376 377 378 379
 * check the file's permissions.  The lockfile we'd
 * create or remove would then actually be
 * /var/spool/mail/root.
 * 
 * To avoid this attack, we proceed as follows:
 * 
 * - First, follow symbolic links a la
380
 *   dotlock_deference_symlink ().
Thomas Roessler's avatar
Thomas Roessler committed
381 382 383 384 385 386 387 388 389 390 391 392
 * 
 * - get the result's dirname.
 * 
 * - chdir to this directory.  If you can't, bail out.
 * 
 * - try to open the file in question, only using its
 *   basename.  If you can't, bail out.
 * 
 * - fstat that file and compare the result to a
 *   subsequent lstat (only using the basename).  If
 *   the comparison fails, bail out.
 * 
393
 * dotlock_prepare () is invoked from main () directly
Thomas Roessler's avatar
Thomas Roessler committed
394 395 396 397 398 399 400 401 402 403 404 405 406 407
 * after the command line parsing has been done.
 *
 * Return values:
 * 
 * 0 - Evereything's fine.  The program's new current
 *     directory is the contains the file to be locked.
 *     The string pointed to by bn contains the name of
 *     the file to be locked.
 * 
 * -1 - Something failed. Don't continue.
 * 
 * tlr, Jul 15 1998
 */

Thomas Roessler's avatar
Thomas Roessler committed
408 409 410 411 412 413 414 415 416 417 418
static int
dotlock_check_stats (struct stat *fsb, struct stat *lsb)
{
  /* S_ISLNK (fsb->st_mode) should actually be impossible,
   * but we may have mixed up the parameters somewhere.
   * play safe.
   */

  if (S_ISLNK (lsb->st_mode) || S_ISLNK (fsb->st_mode))
    return -1;
  
419
  if ((lsb->st_dev != fsb->st_dev) ||
Thomas Roessler's avatar
Thomas Roessler committed
420 421 422 423 424 425 426 427 428 429 430 431 432 433 434
     (lsb->st_ino != fsb->st_ino) ||
     (lsb->st_mode != fsb->st_mode) ||
     (lsb->st_nlink != fsb->st_nlink) ||
     (lsb->st_uid != fsb->st_uid) ||
     (lsb->st_gid != fsb->st_gid) ||
     (lsb->st_rdev != fsb->st_rdev) ||
     (lsb->st_size != fsb->st_size))
  {
    /* something's fishy */
    return -1;
  }
  
  return 0;
}

Thomas Roessler's avatar
Thomas Roessler committed
435
static int
Thomas Roessler's avatar
Thomas Roessler committed
436
dotlock_prepare (char *bn, size_t l, const char *f, int _fd)
Thomas Roessler's avatar
Thomas Roessler committed
437 438 439 440 441 442 443 444
{
  struct stat fsb, lsb;
  char realpath[_POSIX_PATH_MAX];
  char *basename, *dirname;
  char *p;
  int fd;
  int r;
  
445
  if (dotlock_deference_symlink (realpath, sizeof (realpath), f) == -1)
Thomas Roessler's avatar
Thomas Roessler committed
446 447
    return -1;
  
448
  if ((p = strrchr (realpath, '/')))
Thomas Roessler's avatar
Thomas Roessler committed
449 450 451 452 453 454 455 456 457 458 459
  {
    *p = '\0';
    basename = p + 1;
    dirname = realpath;
  }
  else
  {
    basename = realpath;
    dirname = ".";
  }

460
  if (strlen (basename) + 1 > l)
Thomas Roessler's avatar
Thomas Roessler committed
461 462
    return -1;
  
463
  strfcpy (bn, basename, l);
Thomas Roessler's avatar
Thomas Roessler committed
464
  
465
  if (chdir (dirname) == -1)
Thomas Roessler's avatar
Thomas Roessler committed
466
    return -1;
Thomas Roessler's avatar
Thomas Roessler committed
467 468 469 470

  if (_fd != -1)
    fd = _fd;
  else if ((fd = open (basename, O_RDONLY)) == -1)
Thomas Roessler's avatar
Thomas Roessler committed
471 472
    return -1;
  
473
  r = fstat (fd, &fsb);
Thomas Roessler's avatar
Thomas Roessler committed
474 475 476
  
  if (_fd == -1)
    close (fd);
Thomas Roessler's avatar
Thomas Roessler committed
477
  
478
  if (r == -1)
Thomas Roessler's avatar
Thomas Roessler committed
479 480
    return -1;
  
481
  if (lstat (basename, &lsb) == -1)
Thomas Roessler's avatar
Thomas Roessler committed
482
    return -1;
Thomas Roessler's avatar
Thomas Roessler committed
483 484

  if (dotlock_check_stats (&fsb, &lsb) == -1)
Thomas Roessler's avatar
Thomas Roessler committed
485
    return -1;
Thomas Roessler's avatar
Thomas Roessler committed
486

Thomas Roessler's avatar
Thomas Roessler committed
487 488 489 490 491 492 493 494 495 496 497 498 499 500 501 502 503 504 505 506 507 508 509 510 511 512 513 514 515 516 517 518 519 520 521 522 523 524 525 526 527 528 529 530 531
  return 0;
}

/*
 * Expand a symbolic link.
 * 
 * This function expects newpath to have space for
 * at least _POSIX_PATH_MAX characters.
 *
 */

static void 
dotlock_expand_link (char *newpath, const char *path, const char *link)
{
  const char *lb = NULL;
  size_t len;

  /* link is full path */
  if (*link == '/')
  {
    strfcpy (newpath, link, _POSIX_PATH_MAX);
    return;
  }

  if ((lb = strrchr (path, '/')) == NULL)
  {
    /* no path in link */
    strfcpy (newpath, link, _POSIX_PATH_MAX);
    return;
  }

  len = lb - path + 1;
  memcpy (newpath, path, len);
  strfcpy (newpath + len, link, _POSIX_PATH_MAX - len);
}


/*
 * Deference a chain of symbolic links
 * 
 * The final path is written to d.
 *
 */

static int
532
dotlock_deference_symlink (char *d, size_t l, const char *path)
Thomas Roessler's avatar
Thomas Roessler committed
533 534 535 536 537 538
{
  struct stat sb;
  char realpath[_POSIX_PATH_MAX];
  const char *pathptr = path;
  int count = 0;
  
539
  while (count++ < MAXLINKS)
Thomas Roessler's avatar
Thomas Roessler committed
540
  {
541
    if (lstat (pathptr, &sb) == -1)
Thomas Roessler's avatar
Thomas Roessler committed
542
    {
543
      /* perror (pathptr); */
Thomas Roessler's avatar
Thomas Roessler committed
544 545 546
      return -1;
    }
    
547
    if (S_ISLNK (sb.st_mode))
Thomas Roessler's avatar
Thomas Roessler committed
548 549 550 551 552
    {
      char linkfile[_POSIX_PATH_MAX];
      char linkpath[_POSIX_PATH_MAX];
      int len;

553
      if ((len = readlink (pathptr, linkfile, sizeof (linkfile))) == -1)
Thomas Roessler's avatar
Thomas Roessler committed
554
      {
555
	/* perror (pathptr); */
Thomas Roessler's avatar
Thomas Roessler committed
556 557 558 559
	return -1;
      }
      
      linkfile[len] = '\0';
560 561
      dotlock_expand_link (linkpath, pathptr, linkfile);
      strfcpy (realpath, linkpath, sizeof (realpath));
Thomas Roessler's avatar
Thomas Roessler committed
562 563 564 565 566 567
      pathptr = realpath;
    }
    else
      break;
  }

568
  strfcpy (d, pathptr, l);
Thomas Roessler's avatar
Thomas Roessler committed
569 570 571 572 573 574 575 576
  return 0;
}

/*
 * Dotlock a file.
 * 
 * realpath is assumed _not_ to be an absolute path to
 * the file we are about to lock.  Invoke
577
 * dotlock_prepare () before using this function!
Thomas Roessler's avatar
Thomas Roessler committed
578 579 580
 * 
 */

581 582
#define HARDMAXATTEMPTS 10

Thomas Roessler's avatar
Thomas Roessler committed
583
static int
584
dotlock_lock (const char *realpath)
Thomas Roessler's avatar
Thomas Roessler committed
585 586 587 588 589 590
{
  char lockfile[_POSIX_PATH_MAX + LONG_STRING];
  char nfslockfile[_POSIX_PATH_MAX + LONG_STRING];
  size_t prev_size = 0;
  int fd;
  int count = 0;
591
  int hard_count = 0;
Thomas Roessler's avatar
Thomas Roessler committed
592 593 594
  struct stat sb;
  time_t t;
  
595 596 597
  snprintf (nfslockfile, sizeof (nfslockfile), "%s.%s.%d",
	   realpath, Hostname, (int) getpid ());
  snprintf (lockfile, sizeof (lockfile), "%s.lock", realpath);
Thomas Roessler's avatar
Thomas Roessler committed
598 599

  
600
  BEGIN_PRIVILEGED ();
Thomas Roessler's avatar
Thomas Roessler committed
601

602
  unlink (nfslockfile);
Thomas Roessler's avatar
Thomas Roessler committed
603 604 605

  while ((fd = open (nfslockfile, O_WRONLY | O_EXCL | O_CREAT, 0)) < 0)
  {
606
    END_PRIVILEGED ();
Thomas Roessler's avatar
Thomas Roessler committed
607 608 609 610 611 612 613 614 615

  
    if (errno != EAGAIN)
    {
      /* perror ("cannot open NFS lock file"); */
      return DL_EX_ERROR;
    }

    
616
    BEGIN_PRIVILEGED ();
Thomas Roessler's avatar
Thomas Roessler committed
617 618
  }

619
  END_PRIVILEGED ();
Thomas Roessler's avatar
Thomas Roessler committed
620 621

  
622
  close (fd);
Thomas Roessler's avatar
Thomas Roessler committed
623
  
624
  while (hard_count++ < HARDMAXATTEMPTS)
Thomas Roessler's avatar
Thomas Roessler committed
625 626
  {

627
    BEGIN_PRIVILEGED ();
628
    link (nfslockfile, lockfile);
629
    END_PRIVILEGED ();
Thomas Roessler's avatar
Thomas Roessler committed
630

631
    if (stat (nfslockfile, &sb) != 0)
Thomas Roessler's avatar
Thomas Roessler committed
632
    {
633
      /* perror ("stat"); */
Thomas Roessler's avatar
Thomas Roessler committed
634 635
      return DL_EX_ERROR;
    }
636

637
    if (sb.st_nlink == 2)
Thomas Roessler's avatar
Thomas Roessler committed
638
      break;
639

640
    if (count == 0)
Thomas Roessler's avatar
Thomas Roessler committed
641
      prev_size = sb.st_size;
642

643
    if (prev_size == sb.st_size && ++count > Retry)
Thomas Roessler's avatar
Thomas Roessler committed
644
    {
645
      if (DotlockFlags & DL_FL_FORCE)
Thomas Roessler's avatar
Thomas Roessler committed
646
      {
647 648 649
	BEGIN_PRIVILEGED ();
	unlink (lockfile);
	END_PRIVILEGED ();
Thomas Roessler's avatar
Thomas Roessler committed
650 651 652 653 654 655

	count = 0;
	continue;
      }
      else
      {
656 657 658
	BEGIN_PRIVILEGED ();
	unlink (nfslockfile);
	END_PRIVILEGED ();
Thomas Roessler's avatar
Thomas Roessler committed
659 660 661 662 663 664
	return DL_EX_EXIST;
      }
    }
    
    prev_size = sb.st_size;
    
665
    /* don't trust sleep (3) as it may be interrupted
Thomas Roessler's avatar
Thomas Roessler committed
666 667 668
     * by users sending signals. 
     */
    
669
    t = time (NULL);
Thomas Roessler's avatar
Thomas Roessler committed
670
    do {
671 672
      sleep (1);
    } while (time (NULL) == t);
Thomas Roessler's avatar
Thomas Roessler committed
673
  }
674

675 676 677
  BEGIN_PRIVILEGED ();
  unlink (nfslockfile);
  END_PRIVILEGED ();
Thomas Roessler's avatar
Thomas Roessler committed
678 679 680 681 682 683 684 685

  return DL_EX_OK;
}


/*
 * Unlock a file. 
 * 
686
 * The same comment as for dotlock_lock () applies here.
Thomas Roessler's avatar
Thomas Roessler committed
687 688 689 690
 * 
 */

static int
691
dotlock_unlock (const char *realpath)
Thomas Roessler's avatar
Thomas Roessler committed
692 693 694 695
{
  char lockfile[_POSIX_PATH_MAX + LONG_STRING];
  int i;

696
  snprintf (lockfile, sizeof (lockfile), "%s.lock",
Thomas Roessler's avatar
Thomas Roessler committed
697 698
	   realpath);
  
699 700 701
  BEGIN_PRIVILEGED ();
  i = unlink (lockfile);
  END_PRIVILEGED ();
Thomas Roessler's avatar
Thomas Roessler committed
702
  
703
  if (i == -1)
Thomas Roessler's avatar
Thomas Roessler committed
704 705 706 707 708
    return DL_EX_ERROR;
  
  return DL_EX_OK;
}

Thomas Roessler's avatar
Thomas Roessler committed
709 710 711 712 713
/* remove an empty file */

static int
dotlock_unlink (const char *realpath)
{
714
  struct stat lsb;
715
  int i = -1;
Thomas Roessler's avatar
Thomas Roessler committed
716

717
  if (dotlock_lock (realpath) != DL_EX_OK)
Thomas Roessler's avatar
Thomas Roessler committed
718 719
    return DL_EX_ERROR;

720
  if ((i = lstat (realpath, &lsb)) == 0 && lsb.st_size == 0)
Thomas Roessler's avatar
Thomas Roessler committed
721
    unlink (realpath);
722

723
  dotlock_unlock (realpath);
Thomas Roessler's avatar
Thomas Roessler committed
724 725 726 727

  return (i == 0) ?  DL_EX_OK : DL_EX_ERROR;
}

Thomas Roessler's avatar
Thomas Roessler committed
728 729 730 731

/*
 * Check if a file can be locked at all.
 * 
732
 * The same comment as for dotlock_lock () applies here.
Thomas Roessler's avatar
Thomas Roessler committed
733 734 735 736
 * 
 */

static int
737
dotlock_try (void)
Thomas Roessler's avatar
Thomas Roessler committed
738 739 740 741 742
{
#ifdef USE_SETGID
  struct stat sb;
#endif

743
  if (access (".", W_OK) == 0)
Thomas Roessler's avatar
Thomas Roessler committed
744 745 746
    return DL_EX_OK;

#ifdef USE_SETGID
747
  if (stat (".", &sb) == 0)
Thomas Roessler's avatar
Thomas Roessler committed
748
  {
749
    if ((sb.st_mode & S_IWGRP) == S_IWGRP && sb.st_gid == MailGid)
Thomas Roessler's avatar
Thomas Roessler committed
750 751 752 753 754 755
      return DL_EX_NEED_PRIVS;
  }
#endif

  return DL_EX_IMPOSSIBLE;
}