1*0Sstevel@tonic-gate /*
2*0Sstevel@tonic-gate * CDDL HEADER START
3*0Sstevel@tonic-gate *
4*0Sstevel@tonic-gate * The contents of this file are subject to the terms of the
5*0Sstevel@tonic-gate * Common Development and Distribution License, Version 1.0 only
6*0Sstevel@tonic-gate * (the "License"). You may not use this file except in compliance
7*0Sstevel@tonic-gate * with the License.
8*0Sstevel@tonic-gate *
9*0Sstevel@tonic-gate * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
10*0Sstevel@tonic-gate * or http://www.opensolaris.org/os/licensing.
11*0Sstevel@tonic-gate * See the License for the specific language governing permissions
12*0Sstevel@tonic-gate * and limitations under the License.
13*0Sstevel@tonic-gate *
14*0Sstevel@tonic-gate * When distributing Covered Code, include this CDDL HEADER in each
15*0Sstevel@tonic-gate * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
16*0Sstevel@tonic-gate * If applicable, add the following below this CDDL HEADER, with the
17*0Sstevel@tonic-gate * fields enclosed by brackets "[]" replaced with your own identifying
18*0Sstevel@tonic-gate * information: Portions Copyright [yyyy] [name of copyright owner]
19*0Sstevel@tonic-gate *
20*0Sstevel@tonic-gate * CDDL HEADER END
21*0Sstevel@tonic-gate */
22*0Sstevel@tonic-gate /*
23*0Sstevel@tonic-gate * Copyright 1995 Sun Microsystems, Inc. All rights reserved.
24*0Sstevel@tonic-gate * Use is subject to license terms.
25*0Sstevel@tonic-gate */
26*0Sstevel@tonic-gate
27*0Sstevel@tonic-gate /* Copyright (c) 1984, 1986, 1987, 1988, 1989 AT&T */
28*0Sstevel@tonic-gate /* All Rights Reserved */
29*0Sstevel@tonic-gate
30*0Sstevel@tonic-gate #pragma ident "%Z%%M% %I% %E% SMI"
31*0Sstevel@tonic-gate
32*0Sstevel@tonic-gate #include "mail.h"
33*0Sstevel@tonic-gate /*
34*0Sstevel@tonic-gate If mail file does not exist create it
35*0Sstevel@tonic-gate */
36*0Sstevel@tonic-gate #ifdef OLD
createmf(uid,file)37*0Sstevel@tonic-gate void createmf(uid, file)
38*0Sstevel@tonic-gate uid_t uid;
39*0Sstevel@tonic-gate char *file;
40*0Sstevel@tonic-gate {
41*0Sstevel@tonic-gate int fd;
42*0Sstevel@tonic-gate
43*0Sstevel@tonic-gate void (*istat)(), (*qstat)(), (*hstat)();
44*0Sstevel@tonic-gate
45*0Sstevel@tonic-gate if (access(file, A_EXIST) == CERROR) {
46*0Sstevel@tonic-gate istat = signal(SIGINT, SIG_IGN);
47*0Sstevel@tonic-gate qstat = signal(SIGQUIT, SIG_IGN);
48*0Sstevel@tonic-gate hstat = signal(SIGHUP, SIG_IGN);
49*0Sstevel@tonic-gate umask(0);
50*0Sstevel@tonic-gate if ((fd = creat(file, MFMODE)) == -1)
51*0Sstevel@tonic-gate sav_errno = errno;
52*0Sstevel@tonic-gate else
53*0Sstevel@tonic-gate close(fd);
54*0Sstevel@tonic-gate umask(7);
55*0Sstevel@tonic-gate (void) signal(SIGINT, istat);
56*0Sstevel@tonic-gate (void) signal(SIGQUIT, qstat);
57*0Sstevel@tonic-gate (void) signal(SIGHUP, hstat);
58*0Sstevel@tonic-gate }
59*0Sstevel@tonic-gate }
60*0Sstevel@tonic-gate #else
61*0Sstevel@tonic-gate
62*0Sstevel@tonic-gate #include <sys/stat.h>
63*0Sstevel@tonic-gate #include <fcntl.h>
64*0Sstevel@tonic-gate #include <stdio.h>
65*0Sstevel@tonic-gate
accessmf(path)66*0Sstevel@tonic-gate int accessmf(path)
67*0Sstevel@tonic-gate char *path;
68*0Sstevel@tonic-gate {
69*0Sstevel@tonic-gate
70*0Sstevel@tonic-gate struct stat fsb,sb;
71*0Sstevel@tonic-gate int mbfd;
72*0Sstevel@tonic-gate tryagain:
73*0Sstevel@tonic-gate if (lstat(path, &sb)) {
74*0Sstevel@tonic-gate /* file/symlink does not exist, so create one */
75*0Sstevel@tonic-gate mbfd = open(path,
76*0Sstevel@tonic-gate O_APPEND|O_CREAT|O_EXCL|O_WRONLY, S_IRUSR|S_IWUSR|S_IRGRP|S_IWGRP);
77*0Sstevel@tonic-gate chmod(path, 0660);
78*0Sstevel@tonic-gate /* if someone create a symlink/file just ahead */
79*0Sstevel@tonic-gate /* of us, the create will failed with EEXIST */
80*0Sstevel@tonic-gate /* This is what we want, because we do not */
81*0Sstevel@tonic-gate /* want someone to re-direct our "create" */
82*0Sstevel@tonic-gate /* request to a another location. */
83*0Sstevel@tonic-gate if (mbfd == -1) {
84*0Sstevel@tonic-gate if (errno == EEXIST)
85*0Sstevel@tonic-gate goto tryagain;
86*0Sstevel@tonic-gate }
87*0Sstevel@tonic-gate
88*0Sstevel@tonic-gate /* file/symlink exist, make sure it is not linked */
89*0Sstevel@tonic-gate } else if (sb.st_nlink != 1 || S_ISLNK(sb.st_mode)) {
90*0Sstevel@tonic-gate fprintf(stderr,
91*0Sstevel@tonic-gate "%s: security violation, '%s' should not be linked to other file\n", program, path);
92*0Sstevel@tonic-gate sav_errno = errno;
93*0Sstevel@tonic-gate return -1;
94*0Sstevel@tonic-gate } else {
95*0Sstevel@tonic-gate /* if we get here, there is a pre-existing file, */
96*0Sstevel@tonic-gate /* and it is not a symlink... */
97*0Sstevel@tonic-gate /* open it, and make sure it is the same file */
98*0Sstevel@tonic-gate /* we lstat() before... */
99*0Sstevel@tonic-gate /* this is to guard against someone deleting the */
100*0Sstevel@tonic-gate /* old file and creat a new symlink in its place */
101*0Sstevel@tonic-gate /* We are not createing a new file here, but we */
102*0Sstevel@tonic-gate /* do not want append to the worng file either */
103*0Sstevel@tonic-gate mbfd = open(path, O_APPEND|O_WRONLY, 0);
104*0Sstevel@tonic-gate if (mbfd != -1 &&
105*0Sstevel@tonic-gate (fstat(mbfd, &fsb) || fsb.st_nlink != 1 ||
106*0Sstevel@tonic-gate S_ISLNK(fsb.st_mode) || sb.st_dev != fsb.st_dev ||
107*0Sstevel@tonic-gate sb.st_ino != fsb.st_ino)) {
108*0Sstevel@tonic-gate /* file changed after open */
109*0Sstevel@tonic-gate fprintf(stderr, "%s: security violation, '%s' inode changed after open\n", program, path);
110*0Sstevel@tonic-gate (void)close(mbfd);
111*0Sstevel@tonic-gate return -1;
112*0Sstevel@tonic-gate }
113*0Sstevel@tonic-gate }
114*0Sstevel@tonic-gate
115*0Sstevel@tonic-gate if (mbfd == -1) {
116*0Sstevel@tonic-gate sav_errno = errno;
117*0Sstevel@tonic-gate return -1;
118*0Sstevel@tonic-gate }
119*0Sstevel@tonic-gate
120*0Sstevel@tonic-gate return mbfd;
121*0Sstevel@tonic-gate }
122*0Sstevel@tonic-gate #endif
123