BSD 4_3_Reno release
[unix-history] / usr / src / usr.sbin / sendmail / src / recipient.c
index 900a3c3..56b26b5 100644 (file)
@@ -1,17 +1,46 @@
+/*
+ * Copyright (c) 1983 Eric P. Allman
+ * Copyright (c) 1988 Regents of the University of California.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms are permitted provided
+ * that: (1) source distributions retain this entire copyright notice and
+ * comment, and (2) distributions including binaries display the following
+ * acknowledgement:  ``This product includes software developed by the
+ * University of California, Berkeley and its contributors'' in the
+ * documentation or other materials provided with the distribution and in
+ * all advertising materials mentioning features or use of this software.
+ * Neither the name of the University nor the names of its contributors may
+ * be used to endorse or promote products derived from this software without
+ * specific prior written permission.
+ * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED
+ * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF
+ * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.
+ */
+
+#ifndef lint
+static char sccsid[] = "@(#)recipient.c        5.18 (Berkeley) 6/1/90";
+#endif /* not lint */
+
+# include <sys/types.h>
+# include <sys/stat.h>
 # include <pwd.h>
 # include "sendmail.h"
 
 # include <pwd.h>
 # include "sendmail.h"
 
-static char SccsId[] = "@(#)recipient.c        3.5     %G%";
-
 /*
 /*
-**  SENDTO -- Designate a send list.
+**  SENDTOLIST -- Designate a send list.
 **
 **     The parameter is a comma-separated list of people to send to.
 **     This routine arranges to send to all of them.
 **
 **     Parameters:
 **             list -- the send list.
 **
 **     The parameter is a comma-separated list of people to send to.
 **     This routine arranges to send to all of them.
 **
 **     Parameters:
 **             list -- the send list.
-**             copyf -- the copy flag; passed to parse.
+**             ctladdr -- the address template for the person to
+**                     send to -- effective uid/gid are important.
+**                     This is typically the alias that caused this
+**                     expansion.
+**             sendq -- a pointer to the head of a queue to put
+**                     these people into.
 **
 **     Returns:
 **             none
 **
 **     Returns:
 **             none
@@ -22,39 +51,84 @@ static char SccsId[] = "@(#)recipient.c     3.5     %G%";
 
 # define MAXRCRSN      10
 
 
 # define MAXRCRSN      10
 
-sendto(list, copyf)
+sendtolist(list, ctladdr, sendq)
        char *list;
        char *list;
-       int copyf;
+       ADDRESS *ctladdr;
+       ADDRESS **sendq;
 {
        register char *p;
 {
        register char *p;
-       register char *q;
-       register char c;
-       ADDRESS *a;
-       bool more;
+       register ADDRESS *al;   /* list of addresses to send to */
+       bool firstone;          /* set on first address sent */
+       bool selfref;           /* set if this list includes ctladdr */
+       char delimiter;         /* the address delimiter */
 
 
-       /* more keeps track of what the previous delimiter was */
-       more = TRUE;
-       for (p = list; more; )
+       if (tTd(25, 1))
        {
        {
-               /* find the end of this address */
-               while (*p == ' ' || *p == '\t')
-                       p++;
-               q = p;
-               while ((c = *p++) != '\0' && c != ',' && c != '\n')
-                       continue;
-               more = c != '\0';
-               *--p = '\0';
-               if (more)
-                       p++;
+               printf("sendto: %s\n   ctladdr=", list);
+               printaddr(ctladdr, FALSE);
+       }
+
+       /* heuristic to determine old versus new style addresses */
+       if (ctladdr == NULL &&
+           (index(list, ',') != NULL || index(list, ';') != NULL ||
+            index(list, '<') != NULL || index(list, '(') != NULL))
+               CurEnv->e_flags &= ~EF_OLDSTYLE;
+       delimiter = ' ';
+       if (!bitset(EF_OLDSTYLE, CurEnv->e_flags) || ctladdr != NULL)
+               delimiter = ',';
+
+       firstone = TRUE;
+       selfref = FALSE;
+       al = NULL;
+
+       for (p = list; *p != '\0'; )
+       {
+               register ADDRESS *a;
+               extern char *DelimChar;         /* defined in prescan */
 
                /* parse the address */
 
                /* parse the address */
-               if ((a = parse(q, (ADDRESS *) NULL, copyf)) == NULL)
+               while (isspace(*p) || *p == ',')
+                       p++;
+               a = parseaddr(p, (ADDRESS *) NULL, 1, delimiter);
+               p = DelimChar;
+               if (a == NULL)
                        continue;
                        continue;
+               a->q_next = al;
+               a->q_alias = ctladdr;
+
+               /* see if this should be marked as a primary address */
+               if (ctladdr == NULL ||
+                   (firstone && *p == '\0' && bitset(QPRIMARY, ctladdr->q_flags)))
+                       a->q_flags |= QPRIMARY;
+
+               /* put on send queue or suppress self-reference */
+               if (ctladdr != NULL && sameaddr(ctladdr, a))
+                       selfref = TRUE;
+               else
+                       al = a;
+               firstone = FALSE;
+       }
 
 
-               /* arrange to send to this person */
-               recipient(a);
+       /* if this alias doesn't include itself, delete ctladdr */
+       if (!selfref && ctladdr != NULL)
+               ctladdr->q_flags |= QDONTSEND;
+
+       /* arrange to send to everyone on the local send list */
+       while (al != NULL)
+       {
+               register ADDRESS *a = al;
+               extern ADDRESS *recipient();
+
+               al = a->q_next;
+               setctladdr(a);
+               a = recipient(a, sendq);
+
+               /* arrange to inherit full name */
+               if (a->q_fullname == NULL && ctladdr != NULL)
+                       a->q_fullname = ctladdr->q_fullname;
        }
        }
-       To = NULL;
+
+       CurEnv->e_to = NULL;
 }
 \f/*
 **  RECIPIENT -- Designate a message recipient
 }
 \f/*
 **  RECIPIENT -- Designate a message recipient
@@ -63,99 +137,133 @@ sendto(list, copyf)
 **
 **     Parameters:
 **             a -- the (preparsed) address header for the recipient.
 **
 **     Parameters:
 **             a -- the (preparsed) address header for the recipient.
+**             sendq -- a pointer to the head of a queue to put the
+**                     recipient in.  Duplicate supression is done
+**                     in this queue.
 **
 **     Returns:
 **
 **     Returns:
-**             none.
+**             The actual address in the queue.  This will be "a" if
+**             the address is not a duplicate, else the original address.
 **
 **     Side Effects:
 **             none.
 */
 
 **
 **     Side Effects:
 **             none.
 */
 
-recipient(a)
+ADDRESS *
+recipient(a, sendq)
        register ADDRESS *a;
        register ADDRESS *a;
+       register ADDRESS **sendq;
 {
        register ADDRESS *q;
 {
        register ADDRESS *q;
+       ADDRESS **pq;
        register struct mailer *m;
        register struct mailer *m;
-       char buf[MAXNAME];
+       register char *p;
+       bool quoted = FALSE;            /* set if the addr has a quote bit */
+       char buf[MAXNAME];              /* unquoted image of the user name */
+       extern ADDRESS *getctladdr();
+       extern bool safefile();
 
 
-       To = a->q_paddr;
-       m = Mailer[a->q_mailer];
+       CurEnv->e_to = a->q_paddr;
+       m = a->q_mailer;
        errno = 0;
        errno = 0;
-# ifdef DEBUG
-       if (Debug)
-               printf("recipient(%s)\n", To);
-# endif DEBUG
+       if (tTd(26, 1))
+       {
+               printf("\nrecipient: ");
+               printaddr(a, FALSE);
+       }
 
        /* break aliasing loops */
        if (AliasLevel > MAXRCRSN)
        {
                usrerr("aliasing/forwarding loop broken");
 
        /* break aliasing loops */
        if (AliasLevel > MAXRCRSN)
        {
                usrerr("aliasing/forwarding loop broken");
-               return;
+               return (a);
        }
 
        /*
        }
 
        /*
-       **  Do sickly crude mapping for program mailing, etc.
+       **  Finish setting up address structure.
        */
 
        */
 
-       if (a->q_mailer == MN_LOCAL)
+       /* set the queue timeout */
+       a->q_timeout = TimeOut;
+
+       /* map user & host to lower case if requested on non-aliases */
+       if (a->q_alias == NULL)
+               loweraddr(a);
+
+       /* get unquoted user for file, program or user.name check */
+       (void) strcpy(buf, a->q_user);
+       for (p = buf; *p != '\0' && !quoted; p++)
+       {
+               if (!isascii(*p) && (*p & 0377) != (SpaceSub & 0377))
+                       quoted = TRUE;
+       }
+       stripquotes(buf, TRUE);
+
+       /* do sickly crude mapping for program mailing, etc. */
+       if (m == LocalMailer && buf[0] == '|')
        {
        {
-               if (a->q_user[0] == '|')
+               a->q_mailer = m = ProgMailer;
+               a->q_user++;
+               if (a->q_alias == NULL && !QueueRun && !ForceMail)
                {
                {
-                       a->q_mailer = MN_PROG;
-                       m = Mailer[MN_PROG];
-                       a->q_user++;
+                       a->q_flags |= QDONTSEND|QBADADDR;
+                       usrerr("Cannot mail directly to programs");
                }
        }
 
        /*
                }
        }
 
        /*
-       **  Look up this person in the recipient list.  If they
-       **  are there already, return, otherwise continue.
-       **  If the list is empty, just add it.
+       **  Look up this person in the recipient list.
+       **      If they are there already, return, otherwise continue.
+       **      If the list is empty, just add it.  Notice the cute
+       **      hack to make from addresses suppress things correctly:
+       **      the QDONTSEND bit will be set in the send list.
+       **      [Please note: the emphasis is on "hack."]
        */
 
        */
 
-       if (m->m_sendq == NULL)
-       {
-               m->m_sendq = a;
-       }
-       else
+       for (pq = sendq; (q = *pq) != NULL; pq = &q->q_next)
        {
        {
-               ADDRESS *pq;
-
-               for (q = m->m_sendq; q != NULL; pq = q, q = q->q_next)
+               if (!ForceMail && sameaddr(q, a))
                {
                {
-                       if (!ForceMail && sameaddr(q, a, FALSE))
+                       if (tTd(26, 1))
                        {
                        {
-# ifdef DEBUG
-                               if (Debug)
-                                       printf("(%s in sendq)\n", a->q_paddr);
-# endif DEBUG
-                               if (Verbose && !bitset(QDONTSEND, a->q_flags))
-                                       message(Arpa_Info, "duplicate supressed");
-                               return;
+                               printf("%s in sendq: ", a->q_paddr);
+                               printaddr(q, FALSE);
                        }
                        }
+                       if (!bitset(QDONTSEND, a->q_flags))
+                               message(Arpa_Info, "duplicate suppressed");
+                       if (!bitset(QPRIMARY, q->q_flags))
+                               q->q_flags |= a->q_flags;
+                       return (q);
                }
                }
-
-               /* add address on list */
-               q = pq;
-               q->q_next = a;
        }
        }
+
+       /* add address on list */
+       *pq = a;
        a->q_next = NULL;
        a->q_next = NULL;
+       CurEnv->e_nrcpts++;
 
        /*
        **  Alias the name and handle :include: specs.
        */
 
 
        /*
        **  Alias the name and handle :include: specs.
        */
 
-       if (a->q_mailer == MN_LOCAL)
+       if (m == LocalMailer && !bitset(QDONTSEND, a->q_flags))
        {
                if (strncmp(a->q_user, ":include:", 9) == 0)
                {
                        a->q_flags |= QDONTSEND;
        {
                if (strncmp(a->q_user, ":include:", 9) == 0)
                {
                        a->q_flags |= QDONTSEND;
-                       if (Verbose)
+                       if (a->q_alias == NULL && !QueueRun && !ForceMail)
+                       {
+                               a->q_flags |= QBADADDR;
+                               usrerr("Cannot mail directly to :include:s");
+                       }
+                       else
+                       {
                                message(Arpa_Info, "including file %s", &a->q_user[9]);
                                message(Arpa_Info, "including file %s", &a->q_user[9]);
-                       include(&a->q_user[9], " sending");
+                               include(&a->q_user[9], " sending", a, sendq);
+                       }
                }
                else
                }
                else
-                       alias(a);
+                       alias(a, sendq);
        }
 
        /*
        }
 
        /*
@@ -166,40 +274,174 @@ recipient(a)
        **  the user (which is probably correct anyway).
        */
 
        **  the user (which is probably correct anyway).
        */
 
-       if (!bitset(QDONTSEND, a->q_flags) && a->q_mailer == MN_LOCAL)
+       if (!bitset(QDONTSEND, a->q_flags) && m == LocalMailer)
        {
        {
-               char buf[MAXNAME];
-
-               strcpy(buf, a->q_user);
-               stripquotes(buf, TRUE);
+               struct stat stb;
+               extern bool writable();
 
                /* see if this is to a file */
 
                /* see if this is to a file */
-               if (index(buf, '/') != NULL)
+               if (buf[0] == '/')
                {
                {
-                       if (access(buf, 2) < 0)
+                       p = rindex(buf, '/');
+                       /* check if writable or creatable */
+                       if (a->q_alias == NULL && !QueueRun && !ForceMail)
+                       {
+                               a->q_flags |= QDONTSEND|QBADADDR;
+                               usrerr("Cannot mail directly to files");
+                       }
+                       else if ((stat(buf, &stb) >= 0) ? (!writable(&stb)) :
+                           (*p = '\0', !safefile(buf, getruid(), S_IWRITE|S_IEXEC)))
                        {
                                a->q_flags |= QBADADDR;
                        {
                                a->q_flags |= QBADADDR;
-                               giveresponse(EX_CANTCREAT, TRUE, m);
+                               giveresponse(EX_CANTCREAT, m, CurEnv);
                        }
                }
                else
                {
                        register struct passwd *pw;
                        }
                }
                else
                {
                        register struct passwd *pw;
-                       extern struct passwd *getpwnam();
-                       pw = getpwnam(buf);
+                       extern struct passwd *finduser();
+
+                       /* warning -- finduser may trash buf */
+                       pw = finduser(buf);
                        if (pw == NULL)
                        {
                                a->q_flags |= QBADADDR;
                        if (pw == NULL)
                        {
                                a->q_flags |= QBADADDR;
-                               giveresponse(EX_NOUSER, TRUE, m);
+                               giveresponse(EX_NOUSER, m, CurEnv);
                        }
                        else
                        {
                        }
                        else
                        {
+                               char nbuf[MAXNAME];
+
+                               if (strcmp(a->q_user, pw->pw_name) != 0)
+                               {
+                                       a->q_user = newstr(pw->pw_name);
+                                       (void) strcpy(buf, pw->pw_name);
+                               }
                                a->q_home = newstr(pw->pw_dir);
                                a->q_home = newstr(pw->pw_dir);
-                               if (strcmp(buf, a->q_user) == 0)
-                                       forward(a);
+                               a->q_uid = pw->pw_uid;
+                               a->q_gid = pw->pw_gid;
+                               a->q_flags |= QGOODUID;
+                               buildfname(pw->pw_gecos, pw->pw_name, nbuf);
+                               if (nbuf[0] != '\0')
+                                       a->q_fullname = newstr(nbuf);
+                               if (!quoted)
+                                       forward(a, sendq);
                        }
                }
        }
                        }
                }
        }
+       return (a);
+}
+\f/*
+**  FINDUSER -- find the password entry for a user.
+**
+**     This looks a lot like getpwnam, except that it may want to
+**     do some fancier pattern matching in /etc/passwd.
+**
+**     This routine contains most of the time of many sendmail runs.
+**     It deserves to be optimized.
+**
+**     Parameters:
+**             name -- the name to match against.
+**
+**     Returns:
+**             A pointer to a pw struct.
+**             NULL if name is unknown or ambiguous.
+**
+**     Side Effects:
+**             may modify name.
+*/
+
+struct passwd *
+finduser(name)
+       char *name;
+{
+       register struct passwd *pw;
+       register char *p;
+       extern struct passwd *getpwent();
+       extern struct passwd *getpwnam();
+
+       /* map upper => lower case */
+       for (p = name; *p != '\0'; p++)
+       {
+               if (isascii(*p) && isupper(*p))
+                       *p = tolower(*p);
+       }
+
+       /* look up this login name using fast path */
+       if ((pw = getpwnam(name)) != NULL)
+               return (pw);
+
+       /* search for a matching full name instead */
+       for (p = name; *p != '\0'; p++)
+       {
+               if (*p == (SpaceSub & 0177) || *p == '_')
+                       *p = ' ';
+       }
+       (void) setpwent();
+       while ((pw = getpwent()) != NULL)
+       {
+               char buf[MAXNAME];
+
+               buildfname(pw->pw_gecos, pw->pw_name, buf);
+               if (index(buf, ' ') != NULL && !strcasecmp(buf, name))
+               {
+                       message(Arpa_Info, "sending to login name %s", pw->pw_name);
+                       return (pw);
+               }
+       }
+       return (NULL);
+}
+\f/*
+**  WRITABLE -- predicate returning if the file is writable.
+**
+**     This routine must duplicate the algorithm in sys/fio.c.
+**     Unfortunately, we cannot use the access call since we
+**     won't necessarily be the real uid when we try to
+**     actually open the file.
+**
+**     Notice that ANY file with ANY execute bit is automatically
+**     not writable.  This is also enforced by mailfile.
+**
+**     Parameters:
+**             s -- pointer to a stat struct for the file.
+**
+**     Returns:
+**             TRUE -- if we will be able to write this file.
+**             FALSE -- if we cannot write this file.
+**
+**     Side Effects:
+**             none.
+*/
+
+bool
+writable(s)
+       register struct stat *s;
+{
+       int euid, egid;
+       int bits;
+
+       if (bitset(0111, s->st_mode))
+               return (FALSE);
+       euid = getruid();
+       egid = getrgid();
+       if (geteuid() == 0)
+       {
+               if (bitset(S_ISUID, s->st_mode))
+                       euid = s->st_uid;
+               if (bitset(S_ISGID, s->st_mode))
+                       egid = s->st_gid;
+       }
+
+       if (euid == 0)
+               return (TRUE);
+       bits = S_IWRITE;
+       if (euid != s->st_uid)
+       {
+               bits >>= 3;
+               if (egid != s->st_gid)
+                       bits >>= 3;
+       }
+       return ((s->st_mode & bits) != 0);
 }
 \f/*
 **  INCLUDE -- handle :include: specification.
 }
 \f/*
 **  INCLUDE -- handle :include: specification.
@@ -207,6 +449,11 @@ recipient(a)
 **     Parameters:
 **             fname -- filename to include.
 **             msg -- message to print in verbose mode.
 **     Parameters:
 **             fname -- filename to include.
 **             msg -- message to print in verbose mode.
+**             ctladdr -- address template to use to fill in these
+**                     addresses -- effective user/group id are
+**                     the important things.
+**             sendq -- a pointer to the head of the send queue
+**                     to put these addresses in.
 **
 **     Returns:
 **             none.
 **
 **     Returns:
 **             none.
@@ -216,13 +463,17 @@ recipient(a)
 **             listed in that file.
 */
 
 **             listed in that file.
 */
 
-include(fname, msg)
+include(fname, msg, ctladdr, sendq)
        char *fname;
        char *msg;
        char *fname;
        char *msg;
+       ADDRESS *ctladdr;
+       ADDRESS **sendq;
 {
        char buf[MAXLINE];
        register FILE *fp;
 {
        char buf[MAXLINE];
        register FILE *fp;
-       char *oldto = To;
+       char *oldto = CurEnv->e_to;
+       char *oldfilename = FileName;
+       int oldlinenumber = LineNumber;
 
        fp = fopen(fname, "r");
        if (fp == NULL)
 
        fp = fopen(fname, "r");
        if (fp == NULL)
@@ -230,23 +481,99 @@ include(fname, msg)
                usrerr("Cannot open %s", fname);
                return;
        }
                usrerr("Cannot open %s", fname);
                return;
        }
+       if (getctladdr(ctladdr) == NULL)
+       {
+               struct stat st;
+
+               if (fstat(fileno(fp), &st) < 0)
+                       syserr("Cannot fstat %s!", fname);
+               ctladdr->q_uid = st.st_uid;
+               ctladdr->q_gid = st.st_gid;
+               ctladdr->q_flags |= QGOODUID;
+       }
 
        /* read the file -- each line is a comma-separated list. */
 
        /* read the file -- each line is a comma-separated list. */
+       FileName = fname;
+       LineNumber = 0;
        while (fgets(buf, sizeof buf, fp) != NULL)
        {
                register char *p = index(buf, '\n');
 
        while (fgets(buf, sizeof buf, fp) != NULL)
        {
                register char *p = index(buf, '\n');
 
+               LineNumber++;
                if (p != NULL)
                        *p = '\0';
                if (buf[0] == '\0')
                        continue;
                if (p != NULL)
                        *p = '\0';
                if (buf[0] == '\0')
                        continue;
-               To = oldto;
-               if (Verbose)
-                       message(Arpa_Info, "%s to %s", msg, buf);
+               CurEnv->e_to = oldto;
+               message(Arpa_Info, "%s to %s", msg, buf);
                AliasLevel++;
                AliasLevel++;
-               sendto(buf, 1);
+               sendtolist(buf, ctladdr, sendq);
                AliasLevel--;
        }
 
                AliasLevel--;
        }
 
-       fclose(fp);
+       (void) fclose(fp);
+       FileName = oldfilename;
+       LineNumber = oldlinenumber;
+}
+\f/*
+**  SENDTOARGV -- send to an argument vector.
+**
+**     Parameters:
+**             argv -- argument vector to send to.
+**
+**     Returns:
+**             none.
+**
+**     Side Effects:
+**             puts all addresses on the argument vector onto the
+**                     send queue.
+*/
+
+sendtoargv(argv)
+       register char **argv;
+{
+       register char *p;
+
+       while ((p = *argv++) != NULL)
+       {
+               if (argv[0] != NULL && argv[1] != NULL && !strcasecmp(argv[0], "at"))
+               {
+                       char nbuf[MAXNAME];
+
+                       if (strlen(p) + strlen(argv[1]) + 2 > sizeof nbuf)
+                               usrerr("address overflow");
+                       else
+                       {
+                               (void) strcpy(nbuf, p);
+                               (void) strcat(nbuf, "@");
+                               (void) strcat(nbuf, argv[1]);
+                               p = newstr(nbuf);
+                               argv += 2;
+                       }
+               }
+               sendtolist(p, (ADDRESS *) NULL, &CurEnv->e_sendqueue);
+       }
+}
+\f/*
+**  GETCTLADDR -- get controlling address from an address header.
+**
+**     If none, get one corresponding to the effective userid.
+**
+**     Parameters:
+**             a -- the address to find the controller of.
+**
+**     Returns:
+**             the controlling address.
+**
+**     Side Effects:
+**             none.
+*/
+
+ADDRESS *
+getctladdr(a)
+       register ADDRESS *a;
+{
+       while (a != NULL && !bitset(QGOODUID, a->q_flags))
+               a = a->q_alias;
+       return (a);
 }
 }