17c478bd9Sstevel@tonic-gate /*
27c478bd9Sstevel@tonic-gate * CDDL HEADER START
37c478bd9Sstevel@tonic-gate *
47c478bd9Sstevel@tonic-gate * The contents of this file are subject to the terms of the
57c478bd9Sstevel@tonic-gate * Common Development and Distribution License, Version 1.0 only
67c478bd9Sstevel@tonic-gate * (the "License"). You may not use this file except in compliance
77c478bd9Sstevel@tonic-gate * with the License.
87c478bd9Sstevel@tonic-gate *
97c478bd9Sstevel@tonic-gate * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
107c478bd9Sstevel@tonic-gate * or http://www.opensolaris.org/os/licensing.
117c478bd9Sstevel@tonic-gate * See the License for the specific language governing permissions
127c478bd9Sstevel@tonic-gate * and limitations under the License.
137c478bd9Sstevel@tonic-gate *
147c478bd9Sstevel@tonic-gate * When distributing Covered Code, include this CDDL HEADER in each
157c478bd9Sstevel@tonic-gate * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
167c478bd9Sstevel@tonic-gate * If applicable, add the following below this CDDL HEADER, with the
177c478bd9Sstevel@tonic-gate * fields enclosed by brackets "[]" replaced with your own identifying
187c478bd9Sstevel@tonic-gate * information: Portions Copyright [yyyy] [name of copyright owner]
197c478bd9Sstevel@tonic-gate *
207c478bd9Sstevel@tonic-gate * CDDL HEADER END
217c478bd9Sstevel@tonic-gate */
227c478bd9Sstevel@tonic-gate /*
237c478bd9Sstevel@tonic-gate * Copyright 1995 Sun Microsystems, Inc. All rights reserved.
247c478bd9Sstevel@tonic-gate * Use is subject to license terms.
257c478bd9Sstevel@tonic-gate */
267c478bd9Sstevel@tonic-gate
277c478bd9Sstevel@tonic-gate /* Copyright (c) 1984, 1986, 1987, 1988, 1989 AT&T */
287c478bd9Sstevel@tonic-gate /* All Rights Reserved */
297c478bd9Sstevel@tonic-gate
307c478bd9Sstevel@tonic-gate #include "mail.h"
317c478bd9Sstevel@tonic-gate /*
32*2a8bcb4eSToomas Soome If mail file does not exist create it
337c478bd9Sstevel@tonic-gate */
347c478bd9Sstevel@tonic-gate #ifdef OLD
createmf(uid,file)357c478bd9Sstevel@tonic-gate void createmf(uid, file)
367c478bd9Sstevel@tonic-gate uid_t uid;
377c478bd9Sstevel@tonic-gate char *file;
387c478bd9Sstevel@tonic-gate {
397c478bd9Sstevel@tonic-gate int fd;
407c478bd9Sstevel@tonic-gate
417c478bd9Sstevel@tonic-gate void (*istat)(), (*qstat)(), (*hstat)();
427c478bd9Sstevel@tonic-gate
437c478bd9Sstevel@tonic-gate if (access(file, A_EXIST) == CERROR) {
447c478bd9Sstevel@tonic-gate istat = signal(SIGINT, SIG_IGN);
457c478bd9Sstevel@tonic-gate qstat = signal(SIGQUIT, SIG_IGN);
467c478bd9Sstevel@tonic-gate hstat = signal(SIGHUP, SIG_IGN);
477c478bd9Sstevel@tonic-gate umask(0);
487c478bd9Sstevel@tonic-gate if ((fd = creat(file, MFMODE)) == -1)
497c478bd9Sstevel@tonic-gate sav_errno = errno;
507c478bd9Sstevel@tonic-gate else
517c478bd9Sstevel@tonic-gate close(fd);
527c478bd9Sstevel@tonic-gate umask(7);
537c478bd9Sstevel@tonic-gate (void) signal(SIGINT, istat);
547c478bd9Sstevel@tonic-gate (void) signal(SIGQUIT, qstat);
557c478bd9Sstevel@tonic-gate (void) signal(SIGHUP, hstat);
567c478bd9Sstevel@tonic-gate }
577c478bd9Sstevel@tonic-gate }
587c478bd9Sstevel@tonic-gate #else
597c478bd9Sstevel@tonic-gate
607c478bd9Sstevel@tonic-gate #include <sys/stat.h>
617c478bd9Sstevel@tonic-gate #include <fcntl.h>
627c478bd9Sstevel@tonic-gate #include <stdio.h>
637c478bd9Sstevel@tonic-gate
accessmf(path)647c478bd9Sstevel@tonic-gate int accessmf(path)
657c478bd9Sstevel@tonic-gate char *path;
667c478bd9Sstevel@tonic-gate {
677c478bd9Sstevel@tonic-gate
687c478bd9Sstevel@tonic-gate struct stat fsb,sb;
697c478bd9Sstevel@tonic-gate int mbfd;
707c478bd9Sstevel@tonic-gate tryagain:
71*2a8bcb4eSToomas Soome if (lstat(path, &sb)) {
727c478bd9Sstevel@tonic-gate /* file/symlink does not exist, so create one */
737c478bd9Sstevel@tonic-gate mbfd = open(path,
747c478bd9Sstevel@tonic-gate O_APPEND|O_CREAT|O_EXCL|O_WRONLY, S_IRUSR|S_IWUSR|S_IRGRP|S_IWGRP);
75*2a8bcb4eSToomas Soome chmod(path, 0660);
767c478bd9Sstevel@tonic-gate /* if someone create a symlink/file just ahead */
777c478bd9Sstevel@tonic-gate /* of us, the create will failed with EEXIST */
787c478bd9Sstevel@tonic-gate /* This is what we want, because we do not */
797c478bd9Sstevel@tonic-gate /* want someone to re-direct our "create" */
807c478bd9Sstevel@tonic-gate /* request to a another location. */
817c478bd9Sstevel@tonic-gate if (mbfd == -1) {
827c478bd9Sstevel@tonic-gate if (errno == EEXIST)
837c478bd9Sstevel@tonic-gate goto tryagain;
84*2a8bcb4eSToomas Soome }
857c478bd9Sstevel@tonic-gate
867c478bd9Sstevel@tonic-gate /* file/symlink exist, make sure it is not linked */
877c478bd9Sstevel@tonic-gate } else if (sb.st_nlink != 1 || S_ISLNK(sb.st_mode)) {
88*2a8bcb4eSToomas Soome fprintf(stderr,
897c478bd9Sstevel@tonic-gate "%s: security violation, '%s' should not be linked to other file\n", program, path);
907c478bd9Sstevel@tonic-gate sav_errno = errno;
917c478bd9Sstevel@tonic-gate return -1;
927c478bd9Sstevel@tonic-gate } else {
937c478bd9Sstevel@tonic-gate /* if we get here, there is a pre-existing file, */
947c478bd9Sstevel@tonic-gate /* and it is not a symlink... */
957c478bd9Sstevel@tonic-gate /* open it, and make sure it is the same file */
967c478bd9Sstevel@tonic-gate /* we lstat() before... */
977c478bd9Sstevel@tonic-gate /* this is to guard against someone deleting the */
987c478bd9Sstevel@tonic-gate /* old file and creat a new symlink in its place */
99*2a8bcb4eSToomas Soome /* We are not createing a new file here, but we */
1007c478bd9Sstevel@tonic-gate /* do not want append to the worng file either */
1017c478bd9Sstevel@tonic-gate mbfd = open(path, O_APPEND|O_WRONLY, 0);
1027c478bd9Sstevel@tonic-gate if (mbfd != -1 &&
1037c478bd9Sstevel@tonic-gate (fstat(mbfd, &fsb) || fsb.st_nlink != 1 ||
1047c478bd9Sstevel@tonic-gate S_ISLNK(fsb.st_mode) || sb.st_dev != fsb.st_dev ||
1057c478bd9Sstevel@tonic-gate sb.st_ino != fsb.st_ino)) {
1067c478bd9Sstevel@tonic-gate /* file changed after open */
1077c478bd9Sstevel@tonic-gate fprintf(stderr, "%s: security violation, '%s' inode changed after open\n", program, path);
1087c478bd9Sstevel@tonic-gate (void)close(mbfd);
1097c478bd9Sstevel@tonic-gate return -1;
1107c478bd9Sstevel@tonic-gate }
1117c478bd9Sstevel@tonic-gate }
1127c478bd9Sstevel@tonic-gate
1137c478bd9Sstevel@tonic-gate if (mbfd == -1) {
1147c478bd9Sstevel@tonic-gate sav_errno = errno;
1157c478bd9Sstevel@tonic-gate return -1;
1167c478bd9Sstevel@tonic-gate }
117*2a8bcb4eSToomas Soome
1187c478bd9Sstevel@tonic-gate return mbfd;
1197c478bd9Sstevel@tonic-gate }
1207c478bd9Sstevel@tonic-gate #endif
121