xref: /netbsd-src/external/ibm-public/postfix/dist/src/postalias/postalias.c (revision a5847cc334d9a7029f6352b847e9e8d71a0f9e0c)
1 /*	$NetBSD: postalias.c,v 1.1.1.1 2009/06/23 10:08:51 tron Exp $	*/
2 
3 /*++
4 /* NAME
5 /*	postalias 1
6 /* SUMMARY
7 /*	Postfix alias database maintenance
8 /* SYNOPSIS
9 /* .fi
10 /*	\fBpostalias\fR [\fB-Nfinoprsvw\fR] [\fB-c \fIconfig_dir\fR]
11 /*	[\fB-d \fIkey\fR] [\fB-q \fIkey\fR]
12 /*		[\fIfile_type\fR:]\fIfile_name\fR ...
13 /* DESCRIPTION
14 /*	The \fBpostalias\fR(1) command creates or queries one or more Postfix
15 /*	alias databases, or updates an existing one. The input and output
16 /*	file formats are expected to be compatible with Sendmail version 8,
17 /*	and are expected to be suitable for the use as NIS alias maps.
18 /*
19 /*	If the result files do not exist they will be created with the
20 /*	same group and other read permissions as their source file.
21 /*
22 /*	While a database update is in progress, signal delivery is
23 /*	postponed, and an exclusive, advisory, lock is placed on the
24 /*	entire database, in order to avoid surprises in spectator
25 /*	processes.
26 /*
27 /*	The format of Postfix alias input files is described in
28 /*	\fBaliases\fR(5).
29 /*
30 /*	By default the lookup key is mapped to lowercase to make
31 /*	the lookups case insensitive; as of Postfix 2.3 this case
32 /*	folding happens only with tables whose lookup keys are
33 /*	fixed-case strings such as btree:, dbm: or hash:. With
34 /*	earlier versions, the lookup key is folded even with tables
35 /*	where a lookup field can match both upper and lower case
36 /*	text, such as regexp: and pcre:. This resulted in loss of
37 /*	information with $\fInumber\fR substitutions.
38 /*
39 /*	Options:
40 /* .IP "\fB-c \fIconfig_dir\fR"
41 /*	Read the \fBmain.cf\fR configuration file in the named directory
42 /*	instead of the default configuration directory.
43 /* .IP "\fB-d \fIkey\fR"
44 /*	Search the specified maps for \fIkey\fR and remove one entry per map.
45 /*	The exit status is zero when the requested information was found.
46 /*
47 /*	If a key value of \fB-\fR is specified, the program reads key
48 /*	values from the standard input stream. The exit status is zero
49 /*	when at least one of the requested keys was found.
50 /* .IP \fB-f\fR
51 /*	Do not fold the lookup key to lower case while creating or querying
52 /*	a table.
53 /*
54 /*	With Postfix version 2.3 and later, this option has no
55 /*	effect for regular expression tables. There, case folding
56 /*	is controlled by appending a flag to a pattern.
57 /* .IP \fB-i\fR
58 /*	Incremental mode. Read entries from standard input and do not
59 /*	truncate an existing database. By default, \fBpostalias\fR(1) creates
60 /*	a new database from the entries in \fIfile_name\fR.
61 /* .IP \fB-N\fR
62 /*	Include the terminating null character that terminates lookup keys
63 /*	and values. By default, \fBpostalias\fR(1) does whatever
64 /*	is the default for
65 /*	the host operating system.
66 /* .IP \fB-n\fR
67 /*	Don't include the terminating null character that terminates lookup
68 /*	keys and values. By default, \fBpostalias\fR(1) does whatever
69 /*	is the default for
70 /*	the host operating system.
71 /* .IP \fB-o\fR
72 /*	Do not release root privileges when processing a non-root
73 /*	input file. By default, \fBpostalias\fR(1) drops root privileges
74 /*	and runs as the source file owner instead.
75 /* .IP \fB-p\fR
76 /*	Do not inherit the file access permissions from the input file
77 /*	when creating a new file.  Instead, create a new file with default
78 /*	access permissions (mode 0644).
79 /* .IP "\fB-q \fIkey\fR"
80 /*	Search the specified maps for \fIkey\fR and write the first value
81 /*	found to the standard output stream. The exit status is zero
82 /*	when the requested information was found.
83 /*
84 /*	If a key value of \fB-\fR is specified, the program reads key
85 /*	values from the standard input stream and writes one line of
86 /*	\fIkey: value\fR output for each key that was found. The exit
87 /*	status is zero when at least one of the requested keys was found.
88 /* .IP \fB-r\fR
89 /*	When updating a table, do not complain about attempts to update
90 /*	existing entries, and make those updates anyway.
91 /* .IP \fB-s\fR
92 /*	Retrieve all database elements, and write one line of
93 /*	\fIkey: value\fR output for each element. The elements are
94 /*	printed in database order, which is not necessarily the same
95 /*	as the original input order.
96 /*	This feature is available in Postfix version 2.2 and later,
97 /*	and is not available for all database types.
98 /* .IP \fB-v\fR
99 /*	Enable verbose logging for debugging purposes. Multiple \fB-v\fR
100 /*	options make the software increasingly verbose.
101 /* .IP \fB-w\fR
102 /*	When updating a table, do not complain about attempts to update
103 /*	existing entries, and ignore those attempts.
104 /* .PP
105 /*	Arguments:
106 /* .IP \fIfile_type\fR
107 /*	The database type. To find out what types are supported, use
108 /*	the "\fBpostconf -m\fR" command.
109 /*
110 /*	The \fBpostalias\fR(1) command can query any supported file type,
111 /*	but it can create only the following file types:
112 /* .RS
113 /* .IP \fBbtree\fR
114 /*	The output is a btree file, named \fIfile_name\fB.db\fR.
115 /*	This is available on systems with support for \fBdb\fR databases.
116 /* .IP \fBcdb\fR
117 /*	The output is one file named \fIfile_name\fB.cdb\fR.
118 /*	This is available on systems with support for \fBcdb\fR databases.
119 /* .IP \fBdbm\fR
120 /*	The output consists of two files, named \fIfile_name\fB.pag\fR and
121 /*	\fIfile_name\fB.dir\fR.
122 /*	This is available on systems with support for \fBdbm\fR databases.
123 /* .IP \fBhash\fR
124 /*	The output is a hashed file, named \fIfile_name\fB.db\fR.
125 /*	This is available on systems with support for \fBdb\fR databases.
126 /* .IP \fBsdbm\fR
127 /*	The output consists of two files, named \fIfile_name\fB.pag\fR and
128 /*	\fIfile_name\fB.dir\fR.
129 /*	This is available on systems with support for \fBsdbm\fR databases.
130 /* .PP
131 /*	When no \fIfile_type\fR is specified, the software uses the database
132 /*	type specified via the \fBdefault_database_type\fR configuration
133 /*	parameter.
134 /*	The default value for this parameter depends on the host environment.
135 /* .RE
136 /* .IP \fIfile_name\fR
137 /*	The name of the alias database source file when creating a database.
138 /* DIAGNOSTICS
139 /*	Problems are logged to the standard error stream and to
140 /*	\fBsyslogd\fR(8).  No output means that
141 /*	no problems were detected. Duplicate entries are skipped and are
142 /*	flagged with a warning.
143 /*
144 /*	\fBpostalias\fR(1) terminates with zero exit status in case of success
145 /*	(including successful "\fBpostalias -q\fR" lookup) and terminates
146 /*	with non-zero exit status in case of failure.
147 /* ENVIRONMENT
148 /* .ad
149 /* .fi
150 /* .IP \fBMAIL_CONFIG\fR
151 /*	Directory with Postfix configuration files.
152 /* .IP \fBMAIL_VERBOSE\fR
153 /*	Enable verbose logging for debugging purposes.
154 /* CONFIGURATION PARAMETERS
155 /* .ad
156 /* .fi
157 /*	The following \fBmain.cf\fR parameters are especially relevant to
158 /*	this program.
159 /*
160 /*	The text below provides only a parameter summary. See
161 /*	\fBpostconf\fR(5) for more details including examples.
162 /* .IP "\fBalias_database (see 'postconf -d' output)\fR"
163 /*	The alias databases for \fBlocal\fR(8) delivery that are updated with
164 /*	"\fBnewaliases\fR" or with "\fBsendmail -bi\fR".
165 /* .IP "\fBconfig_directory (see 'postconf -d' output)\fR"
166 /*	The default location of the Postfix main.cf and master.cf
167 /*	configuration files.
168 /* .IP "\fBberkeley_db_create_buffer_size (16777216)\fR"
169 /*	The per-table I/O buffer size for programs that create Berkeley DB
170 /*	hash or btree tables.
171 /* .IP "\fBberkeley_db_read_buffer_size (131072)\fR"
172 /*	The per-table I/O buffer size for programs that read Berkeley DB
173 /*	hash or btree tables.
174 /* .IP "\fBdefault_database_type (see 'postconf -d' output)\fR"
175 /*	The default database type for use in \fBnewaliases\fR(1), \fBpostalias\fR(1)
176 /*	and \fBpostmap\fR(1) commands.
177 /* .IP "\fBsyslog_facility (mail)\fR"
178 /*	The syslog facility of Postfix logging.
179 /* .IP "\fBsyslog_name (see 'postconf -d' output)\fR"
180 /*	The mail system name that is prepended to the process name in syslog
181 /*	records, so that "smtpd" becomes, for example, "postfix/smtpd".
182 /* STANDARDS
183 /*	RFC 822 (ARPA Internet Text Messages)
184 /* SEE ALSO
185 /*	aliases(5), format of alias database input file.
186 /*	local(8), Postfix local delivery agent.
187 /*	postconf(1), supported database types
188 /*	postconf(5), configuration parameters
189 /*	postmap(1), create/update/query lookup tables
190 /*	newaliases(1), Sendmail compatibility interface.
191 /*	syslogd(8), system logging
192 /* README FILES
193 /* .ad
194 /* .fi
195 /*	Use "\fBpostconf readme_directory\fR" or
196 /*	"\fBpostconf html_directory\fR" to locate this information.
197 /* .na
198 /* .nf
199 /*	DATABASE_README, Postfix lookup table overview
200 /* LICENSE
201 /* .ad
202 /* .fi
203 /*	The Secure Mailer license must be distributed with this software.
204 /* AUTHOR(S)
205 /*	Wietse Venema
206 /*	IBM T.J. Watson Research
207 /*	P.O. Box 704
208 /*	Yorktown Heights, NY 10598, USA
209 /*--*/
210 
211 /* System library. */
212 
213 #include <sys_defs.h>
214 #include <sys/stat.h>
215 #include <stdlib.h>
216 #include <unistd.h>
217 #include <fcntl.h>
218 #include <ctype.h>
219 #include <string.h>
220 
221 /* Utility library. */
222 
223 #include <msg.h>
224 #include <mymalloc.h>
225 #include <vstring.h>
226 #include <vstream.h>
227 #include <msg_vstream.h>
228 #include <msg_syslog.h>
229 #include <readlline.h>
230 #include <stringops.h>
231 #include <split_at.h>
232 #include <vstring_vstream.h>
233 #include <set_eugid.h>
234 
235 /* Global library. */
236 
237 #include <tok822.h>
238 #include <mail_conf.h>
239 #include <mail_dict.h>
240 #include <mail_params.h>
241 #include <mail_version.h>
242 #include <mkmap.h>
243 #include <mail_task.h>
244 #include <dict_proxy.h>
245 
246 /* Application-specific. */
247 
248 #define STR	vstring_str
249 
250 #define POSTALIAS_FLAG_AS_OWNER	(1<<0)	/* open dest as owner of source */
251 #define POSTALIAS_FLAG_SAVE_PERM	(1<<1)	/* copy access permission
252 						 * from source */
253 
254 /* postalias - create or update alias database */
255 
256 static void postalias(char *map_type, char *path_name, int postalias_flags,
257 		              int open_flags, int dict_flags)
258 {
259     VSTREAM *source_fp;
260     VSTRING *line_buffer;
261     MKMAP  *mkmap;
262     int     lineno;
263     VSTRING *key_buffer;
264     VSTRING *value_buffer;
265     TOK822 *tok_list;
266     TOK822 *key_list;
267     TOK822 *colon;
268     TOK822 *value_list;
269     struct stat st;
270     mode_t  saved_mask;
271 
272     /*
273      * Initialize.
274      */
275     line_buffer = vstring_alloc(100);
276     key_buffer = vstring_alloc(100);
277     value_buffer = vstring_alloc(100);
278     if ((open_flags & O_TRUNC) == 0) {
279 	source_fp = VSTREAM_IN;
280 	vstream_control(source_fp, VSTREAM_CTL_PATH, "stdin", VSTREAM_CTL_END);
281     } else if (strcmp(map_type, DICT_TYPE_PROXY) == 0) {
282 	msg_fatal("can't create maps via the proxy service");
283     } else if ((source_fp = vstream_fopen(path_name, O_RDONLY, 0)) == 0) {
284 	msg_fatal("open %s: %m", path_name);
285     }
286     if (fstat(vstream_fileno(source_fp), &st) < 0)
287 	msg_fatal("fstat %s: %m", path_name);
288 
289     /*
290      * Turn off group/other read permissions as indicated in the source file.
291      */
292     if ((postalias_flags & POSTALIAS_FLAG_SAVE_PERM) && S_ISREG(st.st_mode))
293 	saved_mask = umask(022 | (~st.st_mode & 077));
294 
295     /*
296      * If running as root, run as the owner of the source file, so that the
297      * result shows proper ownership, and so that a bug in postalias does not
298      * allow privilege escalation.
299      */
300     if ((postalias_flags & POSTALIAS_FLAG_AS_OWNER) && getuid() == 0
301 	&& (st.st_uid != geteuid() || st.st_gid != getegid()))
302 	set_eugid(st.st_uid, st.st_gid);
303 
304 
305     /*
306      * Open the database, create it when it does not exist, truncate it when
307      * it does exist, and lock out any spectators.
308      */
309     mkmap = mkmap_open(map_type, path_name, open_flags, dict_flags);
310 
311     /*
312      * And restore the umask, in case it matters.
313      */
314     if ((postalias_flags & POSTALIAS_FLAG_SAVE_PERM) && S_ISREG(st.st_mode))
315 	umask(saved_mask);
316 
317     /*
318      * Add records to the database.
319      */
320     lineno = 0;
321     while (readlline(line_buffer, source_fp, &lineno)) {
322 
323 	/*
324 	 * Tokenize the input, so that we do the right thing when a quoted
325 	 * localpart contains special characters such as "@", ":" and so on.
326 	 */
327 	if ((tok_list = tok822_scan(STR(line_buffer), (TOK822 **) 0)) == 0)
328 	    continue;
329 
330 	/*
331 	 * Enforce the key:value format. Disallow missing keys, multi-address
332 	 * keys, or missing values. In order to specify an empty string or
333 	 * value, enclose it in double quotes.
334 	 */
335 	if ((colon = tok822_find_type(tok_list, ':')) == 0
336 	    || colon->prev == 0 || colon->next == 0
337 	    || tok822_rfind_type(colon, ',')) {
338 	    msg_warn("%s, line %d: need name:value pair",
339 		     VSTREAM_PATH(source_fp), lineno);
340 	    tok822_free_tree(tok_list);
341 	    continue;
342 	}
343 
344 	/*
345 	 * Key must be local. XXX We should use the Postfix rewriting and
346 	 * resolving services to handle all address forms correctly. However,
347 	 * we can't count on the mail system being up when the alias database
348 	 * is being built, so we're guessing a bit.
349 	 */
350 	if (tok822_rfind_type(colon, '@') || tok822_rfind_type(colon, '%')) {
351 	    msg_warn("%s, line %d: name must be local",
352 		     VSTREAM_PATH(source_fp), lineno);
353 	    tok822_free_tree(tok_list);
354 	    continue;
355 	}
356 
357 	/*
358 	 * Split the input into key and value parts, and convert from token
359 	 * representation back to string representation. Convert the key to
360 	 * internal (unquoted) form, because the resolver produces addresses
361 	 * in internal form. Convert the value to external (quoted) form,
362 	 * because it will have to be re-parsed upon lookup. Discard the
363 	 * token representation when done.
364 	 */
365 	key_list = tok_list;
366 	tok_list = 0;
367 	value_list = tok822_cut_after(colon);
368 	tok822_unlink(colon);
369 	tok822_free(colon);
370 
371 	tok822_internalize(key_buffer, key_list, TOK822_STR_DEFL);
372 	tok822_free_tree(key_list);
373 
374 	tok822_externalize(value_buffer, value_list, TOK822_STR_DEFL);
375 	tok822_free_tree(value_list);
376 
377 	/*
378 	 * Store the value under a case-insensitive key.
379 	 */
380 	mkmap_append(mkmap, STR(key_buffer), STR(value_buffer));
381     }
382 
383     /*
384      * Update or append sendmail and NIS signatures.
385      */
386     if ((open_flags & O_TRUNC) == 0)
387 	mkmap->dict->flags |= DICT_FLAG_DUP_REPLACE;
388 
389     /*
390      * Sendmail compatibility: add the @:@ signature to indicate that the
391      * database is complete. This might be needed by NIS clients running
392      * sendmail.
393      */
394     mkmap_append(mkmap, "@", "@");
395 
396     /*
397      * NIS compatibility: add time and master info. Unlike other information,
398      * this information MUST be written without a trailing null appended to
399      * key or value.
400      */
401     mkmap->dict->flags &= ~DICT_FLAG_TRY1NULL;
402     mkmap->dict->flags |= DICT_FLAG_TRY0NULL;
403     vstring_sprintf(value_buffer, "%010ld", (long) time((time_t *) 0));
404 #if (defined(HAS_NIS) || defined(HAS_NISPLUS))
405     mkmap->dict->flags &= ~DICT_FLAG_FOLD_FIX;
406     mkmap_append(mkmap, "YP_LAST_MODIFIED", STR(value_buffer));
407     mkmap_append(mkmap, "YP_MASTER_NAME", var_myhostname);
408 #endif
409 
410     /*
411      * Close the alias database, and release the lock.
412      */
413     mkmap_close(mkmap);
414 
415     /*
416      * Cleanup. We're about to terminate, but it is a good sanity check.
417      */
418     vstring_free(value_buffer);
419     vstring_free(key_buffer);
420     vstring_free(line_buffer);
421     if (source_fp != VSTREAM_IN)
422 	vstream_fclose(source_fp);
423 }
424 
425 /* postalias_queries - apply multiple requests from stdin */
426 
427 static int postalias_queries(VSTREAM *in, char **maps, const int map_count,
428 			             const int dict_flags)
429 {
430     int     found = 0;
431     VSTRING *keybuf = vstring_alloc(100);
432     DICT  **dicts;
433     const char *map_name;
434     const char *value;
435     int     n;
436 
437     /*
438      * Sanity check.
439      */
440     if (map_count <= 0)
441 	msg_panic("postalias_queries: bad map count");
442 
443     /*
444      * Prepare to open maps lazily.
445      */
446     dicts = (DICT **) mymalloc(sizeof(*dicts) * map_count);
447     for (n = 0; n < map_count; n++)
448 	dicts[n] = 0;
449 
450     /*
451      * Perform all queries. Open maps on the fly, to avoid opening unecessary
452      * maps.
453      */
454     while (vstring_get_nonl(keybuf, in) != VSTREAM_EOF) {
455 	for (n = 0; n < map_count; n++) {
456 	    if (dicts[n] == 0)
457 		dicts[n] = ((map_name = split_at(maps[n], ':')) != 0 ?
458 		       dict_open3(maps[n], map_name, O_RDONLY, dict_flags) :
459 		    dict_open3(var_db_type, maps[n], O_RDONLY, dict_flags));
460 	    if ((value = dict_get(dicts[n], STR(keybuf))) != 0) {
461 		if (*value == 0) {
462 		    msg_warn("table %s:%s: key %s: empty string result is not allowed",
463 			     dicts[n]->type, dicts[n]->name, STR(keybuf));
464 		    msg_warn("table %s:%s should return NO RESULT in case of NOT FOUND",
465 			     dicts[n]->type, dicts[n]->name);
466 		}
467 		vstream_printf("%s:	%s\n", STR(keybuf), value);
468 		found = 1;
469 		break;
470 	    }
471 	}
472     }
473     if (found)
474 	vstream_fflush(VSTREAM_OUT);
475 
476     /*
477      * Cleanup.
478      */
479     for (n = 0; n < map_count; n++)
480 	if (dicts[n])
481 	    dict_close(dicts[n]);
482     myfree((char *) dicts);
483     vstring_free(keybuf);
484 
485     return (found);
486 }
487 
488 /* postalias_query - query a map and print the result to stdout */
489 
490 static int postalias_query(const char *map_type, const char *map_name,
491 			           const char *key, int dict_flags)
492 {
493     DICT   *dict;
494     const char *value;
495 
496     dict = dict_open3(map_type, map_name, O_RDONLY, dict_flags);
497     if ((value = dict_get(dict, key)) != 0) {
498 	if (*value == 0) {
499 	    msg_warn("table %s:%s: key %s: empty string result is not allowed",
500 		     map_type, map_name, key);
501 	    msg_warn("table %s:%s should return NO RESULT in case of NOT FOUND",
502 		     map_type, map_name);
503 	}
504 	vstream_printf("%s\n", value);
505     }
506     vstream_fflush(VSTREAM_OUT);
507     dict_close(dict);
508     return (value != 0);
509 }
510 
511 /* postalias_deletes - apply multiple requests from stdin */
512 
513 static int postalias_deletes(VSTREAM *in, char **maps, const int map_count,
514 			             int dict_flags)
515 {
516     int     found = 0;
517     VSTRING *keybuf = vstring_alloc(100);
518     DICT  **dicts;
519     const char *map_name;
520     int     n;
521     int     open_flags;
522 
523     /*
524      * Sanity check.
525      */
526     if (map_count <= 0)
527 	msg_panic("postalias_deletes: bad map count");
528 
529     /*
530      * Open maps ahead of time.
531      */
532     dicts = (DICT **) mymalloc(sizeof(*dicts) * map_count);
533     for (n = 0; n < map_count; n++) {
534 	map_name = split_at(maps[n], ':');
535 	if (map_name && strcmp(maps[n], DICT_TYPE_PROXY) == 0)
536 	    open_flags = O_RDWR | O_CREAT;	/* XXX */
537 	else
538 	    open_flags = O_RDWR;
539 	dicts[n] = (map_name != 0 ?
540 		    dict_open3(maps[n], map_name, open_flags, dict_flags) :
541 		  dict_open3(var_db_type, maps[n], open_flags, dict_flags));
542     }
543 
544     /*
545      * Perform all requests.
546      */
547     while (vstring_get_nonl(keybuf, in) != VSTREAM_EOF)
548 	for (n = 0; n < map_count; n++)
549 	    found |= (dict_del(dicts[n], STR(keybuf)) == 0);
550 
551     /*
552      * Cleanup.
553      */
554     for (n = 0; n < map_count; n++)
555 	if (dicts[n])
556 	    dict_close(dicts[n]);
557     myfree((char *) dicts);
558     vstring_free(keybuf);
559 
560     return (found);
561 }
562 
563 /* postalias_delete - delete a key value pair from a map */
564 
565 static int postalias_delete(const char *map_type, const char *map_name,
566 			            const char *key, int dict_flags)
567 {
568     DICT   *dict;
569     int     status;
570     int     open_flags;
571 
572     if (strcmp(map_type, DICT_TYPE_PROXY) == 0)
573 	open_flags = O_RDWR | O_CREAT;		/* XXX */
574     else
575 	open_flags = O_RDWR;
576     dict = dict_open3(map_type, map_name, open_flags, dict_flags);
577     status = dict_del(dict, key);
578     dict_close(dict);
579     return (status == 0);
580 }
581 
582 /* postalias_seq - print all map entries to stdout */
583 
584 static void postalias_seq(const char *map_type, const char *map_name,
585 			          int dict_flags)
586 {
587     DICT   *dict;
588     const char *key;
589     const char *value;
590     int     func;
591 
592     if (strcmp(map_type, DICT_TYPE_PROXY) == 0)
593 	msg_fatal("can't sequence maps via the proxy service");
594     dict = dict_open3(map_type, map_name, O_RDONLY, dict_flags);
595     for (func = DICT_SEQ_FUN_FIRST; /* void */ ; func = DICT_SEQ_FUN_NEXT) {
596 	if (dict_seq(dict, func, &key, &value) != 0)
597 	    break;
598 	if (*key == 0) {
599 	    msg_warn("table %s:%s: empty lookup key value is not allowed",
600 		     map_type, map_name);
601 	} else if (*value == 0) {
602 	    msg_warn("table %s:%s: key %s: empty string result is not allowed",
603 		     map_type, map_name, key);
604 	    msg_warn("table %s:%s should return NO RESULT in case of NOT FOUND",
605 		     map_type, map_name);
606 	}
607 	vstream_printf("%s:	%s\n", key, value);
608     }
609     vstream_fflush(VSTREAM_OUT);
610     dict_close(dict);
611 }
612 
613 /* usage - explain */
614 
615 static NORETURN usage(char *myname)
616 {
617     msg_fatal("usage: %s [-Nfinoprsvw] [-c config_dir] [-d key] [-q key] [map_type:]file...",
618 	      myname);
619 }
620 
621 MAIL_VERSION_STAMP_DECLARE;
622 
623 int     main(int argc, char **argv)
624 {
625     char   *path_name;
626     int     ch;
627     int     fd;
628     char   *slash;
629     struct stat st;
630     int     postalias_flags = POSTALIAS_FLAG_AS_OWNER | POSTALIAS_FLAG_SAVE_PERM;
631     int     open_flags = O_RDWR | O_CREAT | O_TRUNC;
632     int     dict_flags = DICT_FLAG_DUP_WARN | DICT_FLAG_FOLD_FIX;
633     char   *query = 0;
634     char   *delkey = 0;
635     int     sequence = 0;
636     int     found;
637 
638     /*
639      * Fingerprint executables and core dumps.
640      */
641     MAIL_VERSION_STAMP_ALLOCATE;
642 
643     /*
644      * Be consistent with file permissions.
645      */
646     umask(022);
647 
648     /*
649      * To minimize confusion, make sure that the standard file descriptors
650      * are open before opening anything else. XXX Work around for 44BSD where
651      * fstat can return EBADF on an open file descriptor.
652      */
653     for (fd = 0; fd < 3; fd++)
654 	if (fstat(fd, &st) == -1
655 	    && (close(fd), open("/dev/null", O_RDWR, 0)) != fd)
656 	    msg_fatal("open /dev/null: %m");
657 
658     /*
659      * Process environment options as early as we can. We are not set-uid,
660      * and we are supposed to be running in a controlled environment.
661      */
662     if (getenv(CONF_ENV_VERB))
663 	msg_verbose = 1;
664 
665     /*
666      * Initialize. Set up logging, read the global configuration file and
667      * extract configuration information.
668      */
669     if ((slash = strrchr(argv[0], '/')) != 0 && slash[1])
670 	argv[0] = slash + 1;
671     msg_vstream_init(argv[0], VSTREAM_ERR);
672     msg_syslog_init(mail_task(argv[0]), LOG_PID, LOG_FACILITY);
673 
674     /*
675      * Parse JCL.
676      */
677     while ((ch = GETOPT(argc, argv, "Nc:d:finopq:rsvw")) > 0) {
678 	switch (ch) {
679 	default:
680 	    usage(argv[0]);
681 	    break;
682 	case 'N':
683 	    dict_flags |= DICT_FLAG_TRY1NULL;
684 	    dict_flags &= ~DICT_FLAG_TRY0NULL;
685 	    break;
686 	case 'c':
687 	    if (setenv(CONF_ENV_PATH, optarg, 1) < 0)
688 		msg_fatal("out of memory");
689 	    break;
690 	case 'd':
691 	    if (sequence || query || delkey)
692 		msg_fatal("specify only one of -s -q or -d");
693 	    delkey = optarg;
694 	    break;
695 	case 'f':
696 	    dict_flags &= ~DICT_FLAG_FOLD_FIX;
697 	    break;
698 	case 'i':
699 	    open_flags &= ~O_TRUNC;
700 	    break;
701 	case 'n':
702 	    dict_flags |= DICT_FLAG_TRY0NULL;
703 	    dict_flags &= ~DICT_FLAG_TRY1NULL;
704 	    break;
705 	case 'o':
706 	    postalias_flags &= ~POSTALIAS_FLAG_AS_OWNER;
707 	    break;
708 	case 'p':
709 	    postalias_flags &= ~POSTALIAS_FLAG_SAVE_PERM;
710 	    break;
711 	case 'q':
712 	    if (sequence || query || delkey)
713 		msg_fatal("specify only one of -s -q or -d");
714 	    query = optarg;
715 	    break;
716 	case 'r':
717 	    dict_flags &= ~(DICT_FLAG_DUP_WARN | DICT_FLAG_DUP_IGNORE);
718 	    dict_flags |= DICT_FLAG_DUP_REPLACE;
719 	    break;
720 	case 's':
721 	    if (query || delkey)
722 		msg_fatal("specify only one of -s or -q or -d");
723 	    sequence = 1;
724 	    break;
725 	case 'v':
726 	    msg_verbose++;
727 	    break;
728 	case 'w':
729 	    dict_flags &= ~(DICT_FLAG_DUP_WARN | DICT_FLAG_DUP_REPLACE);
730 	    dict_flags |= DICT_FLAG_DUP_IGNORE;
731 	    break;
732 	}
733     }
734     mail_conf_read();
735     if (strcmp(var_syslog_name, DEF_SYSLOG_NAME) != 0)
736 	msg_syslog_init(mail_task(argv[0]), LOG_PID, LOG_FACILITY);
737     mail_dict_init();
738 
739     /*
740      * Use the map type specified by the user, or fall back to a default
741      * database type.
742      */
743     if (delkey) {				/* remove entry */
744 	if (optind + 1 > argc)
745 	    usage(argv[0]);
746 	if (strcmp(delkey, "-") == 0)
747 	    exit(postalias_deletes(VSTREAM_IN, argv + optind, argc - optind,
748 				   dict_flags | DICT_FLAG_LOCK) == 0);
749 	found = 0;
750 	while (optind < argc) {
751 	    if ((path_name = split_at(argv[optind], ':')) != 0) {
752 		found |= postalias_delete(argv[optind], path_name, delkey,
753 					  dict_flags | DICT_FLAG_LOCK);
754 	    } else {
755 		found |= postalias_delete(var_db_type, argv[optind], delkey,
756 					  dict_flags | DICT_FLAG_LOCK);
757 	    }
758 	    optind++;
759 	}
760 	exit(found ? 0 : 1);
761     } else if (query) {				/* query map(s) */
762 	if (optind + 1 > argc)
763 	    usage(argv[0]);
764 	if (strcmp(query, "-") == 0)
765 	    exit(postalias_queries(VSTREAM_IN, argv + optind, argc - optind,
766 				   dict_flags | DICT_FLAG_LOCK) == 0);
767 	while (optind < argc) {
768 	    if ((path_name = split_at(argv[optind], ':')) != 0) {
769 		found = postalias_query(argv[optind], path_name, query,
770 					dict_flags | DICT_FLAG_LOCK);
771 	    } else {
772 		found = postalias_query(var_db_type, argv[optind], query,
773 					dict_flags | DICT_FLAG_LOCK);
774 	    }
775 	    if (found)
776 		exit(0);
777 	    optind++;
778 	}
779 	exit(1);
780     } else if (sequence) {
781 	while (optind < argc) {
782 	    if ((path_name = split_at(argv[optind], ':')) != 0) {
783 		postalias_seq(argv[optind], path_name,
784 			      dict_flags | DICT_FLAG_LOCK);
785 	    } else {
786 		postalias_seq(var_db_type, argv[optind],
787 			      dict_flags | DICT_FLAG_LOCK);
788 	    }
789 	    exit(0);
790 	}
791 	exit(1);
792     } else {					/* create/update map(s) */
793 	if (optind + 1 > argc)
794 	    usage(argv[0]);
795 	while (optind < argc) {
796 	    if ((path_name = split_at(argv[optind], ':')) != 0) {
797 		postalias(argv[optind], path_name, postalias_flags,
798 			  open_flags, dict_flags);
799 	    } else {
800 		postalias(var_db_type, argv[optind], postalias_flags,
801 			  open_flags, dict_flags);
802 	    }
803 	    optind++;
804 	}
805 	exit(0);
806     }
807 }
808