usr.sbin/newsyslog/newsyslog.c

   1 /*-
   2  * ------+---------+---------+-------- + --------+---------+---------+---------*
   3  * This file includes significant modifications done by:
   4  * Copyright (c) 2003, 2004  - Garance Alistair Drosehn <gad@FreeBSD.org>.
   5  * All rights reserved.
   6  *
   7  * Redistribution and use in source and binary forms, with or without
   8  * modification, are permitted provided that the following conditions
   9  * are met:
  10  *   1. Redistributions of source code must retain the above copyright
  11  *      notice, this list of conditions and the following disclaimer.
  12  *   2. Redistributions in binary form must reproduce the above copyright
  13  *      notice, this list of conditions and the following disclaimer in the
  14  *      documentation and/or other materials provided with the distribution.
  15  *
  16  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
  17  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  18  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  19  * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
  20  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  21  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  22  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  23  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  24  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  25  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  26  * SUCH DAMAGE.
  27  *
  28  * ------+---------+---------+-------- + --------+---------+---------+---------*
  29  */
  30
  31 /*
  32  * This file contains changes from the Open Software Foundation.
  33  */
  34
  35 /*
  36  * Copyright 1988, 1989 by the Massachusetts Institute of Technology
  37  *
  38  * Permission to use, copy, modify, and distribute this software and its
  39  * documentation for any purpose and without fee is hereby granted, provided
  40  * that the above copyright notice appear in all copies and that both that
  41  * copyright notice and this permission notice appear in supporting
  42  * documentation, and that the names of M.I.T. and the M.I.T. S.I.P.B. not be
  43  * used in advertising or publicity pertaining to distribution of the
  44  * software without specific, written prior permission. M.I.T. and the M.I.T.
  45  * S.I.P.B. make no representations about the suitability of this software
  46  * for any purpose.  It is provided "as is" without express or implied
  47  * warranty.
  48  *
  49  */
  50
  51 /*
  52  * newsyslog - roll over selected logs at the appropriate time, keeping the a
  53  * specified number of backup files around.
  54  */
  55
  56 #include <sys/cdefs.h>
  57 __FBSDID("$FreeBSD$");
  58
  59 #define OSF
  60
  61 #include <sys/param.h>
  62 #include <sys/queue.h>
  63 #include <sys/sbuf.h>
  64 #include <sys/stat.h>
  65 #include <sys/wait.h>
  66
  67 #include <assert.h>
  68 #include <ctype.h>
  69 #include <err.h>
  70 #include <errno.h>
  71 #include <dirent.h>
  72 #include <fcntl.h>
  73 #include <fnmatch.h>
  74 #include <glob.h>
  75 #include <grp.h>
  76 #include <paths.h>
  77 #include <pwd.h>
  78 #include <signal.h>
  79 #include <stdio.h>
  80 #include <libgen.h>
  81 #include <stdlib.h>
  82 #include <string.h>
  83 #include <syslog.h>
  84 #include <time.h>
  85 #include <unistd.h>
  86
  87 #include "pathnames.h"
  88 #include "extern.h"
  89
  90 /*
  91  * Compression types
  92  */
  93 #define COMPRESS_TYPES  5       /* Number of supported compression types */
  94
  95 #define COMPRESS_NONE   0
  96 #define COMPRESS_GZIP   1
  97 #define COMPRESS_BZIP2  2
  98 #define COMPRESS_XZ     3
  99 #define COMPRESS_ZSTD   4
 100
 101 /*
 102  * Bit-values for the 'flags' parsed from a config-file entry.
 103  */
 104 #define CE_BINARY       0x0008  /* Logfile is in binary, do not add status */
 105                                 /*    messages to logfile(s) when rotating. */
 106 #define CE_NOSIGNAL     0x0010  /* There is no process to signal when */
 107                                 /*    trimming this file. */
 108 #define CE_TRIMAT       0x0020  /* trim file at a specific time. */
 109 #define CE_GLOB         0x0040  /* name of the log is file name pattern. */
 110 #define CE_SIGNALGROUP  0x0080  /* Signal a process-group instead of a single */
 111                                 /*    process when trimming this file. */
 112 #define CE_CREATE       0x0100  /* Create the log file if it does not exist. */
 113 #define CE_NODUMP       0x0200  /* Set 'nodump' on newly created log file. */
 114 #define CE_PID2CMD      0x0400  /* Replace PID file with a shell command.*/
 115 #define CE_PLAIN0       0x0800  /* Do not compress zero'th history file */
 116 #define CE_RFC5424      0x1000  /* Use RFC5424 format rotation message */
 117
 118 #define MIN_PID         5       /* Don't touch pids lower than this */
 119 #define MAX_PID         99999   /* was lower, see /usr/include/sys/proc.h */
 120
 121 #define kbytes(size)  (((size) + 1023) >> 10)
 122
 123 #define DEFAULT_MARKER  "<default>"
 124 #define DEBUG_MARKER    "<debug>"
 125 #define INCLUDE_MARKER  "<include>"
 126 #define DEFAULT_TIMEFNAME_FMT   "%Y%m%dT%H%M%S"
 127
 128 #define MAX_OLDLOGS 65536       /* Default maximum number of old logfiles */
 129
 130 struct compress_types {
 131         const char *flag;       /* Flag in configuration file */
 132         const char *suffix;     /* Compression suffix */
 133         const char *path;       /* Path to compression program */
 134         const char **flags;     /* Compression program flags */
 135         int nflags;             /* Program flags count */
 136 };
 137
 138 static const char *gzip_flags[] = { "-f" };
 139 #define bzip2_flags gzip_flags
 140 #define xz_flags gzip_flags
 141 static const char *zstd_flags[] = { "-q", "--rm" };
 142
 143 static const struct compress_types compress_type[COMPRESS_TYPES] = {
 144         { "", "", "", NULL, 0 },
 145         { "Z", ".gz", _PATH_GZIP, gzip_flags, nitems(gzip_flags) },
 146         { "J", ".bz2", _PATH_BZIP2, bzip2_flags, nitems(bzip2_flags) },
 147         { "X", ".xz", _PATH_XZ, xz_flags, nitems(xz_flags) },
 148         { "Y", ".zst", _PATH_ZSTD, zstd_flags, nitems(zstd_flags) }
 149 };
 150
 151 struct conf_entry {
 152         STAILQ_ENTRY(conf_entry) cf_nextp;
 153         char *log;              /* Name of the log */
 154         char *pid_cmd_file;             /* PID or command file */
 155         char *r_reason;         /* The reason this file is being rotated */
 156         int firstcreate;        /* Creating log for the first time (-C). */
 157         int rotate;             /* Non-zero if this file should be rotated */
 158         int fsize;              /* size found for the log file */
 159         uid_t uid;              /* Owner of log */
 160         gid_t gid;              /* Group of log */
 161         int numlogs;            /* Number of logs to keep */
 162         int trsize;             /* Size cutoff to trigger trimming the log */
 163         int hours;              /* Hours between log trimming */
 164         struct ptime_data *trim_at;     /* Specific time to do trimming */
 165         unsigned int permissions;       /* File permissions on the log */
 166         int flags;              /* CE_BINARY */
 167         int compress;           /* Compression */
 168         int sig;                /* Signal to send */
 169         int def_cfg;            /* Using the <default> rule for this file */
 170 };
 171
 172 struct sigwork_entry {
 173         SLIST_ENTRY(sigwork_entry) sw_nextp;
 174         int      sw_signum;             /* the signal to send */
 175         int      sw_pidok;              /* true if pid value is valid */
 176         pid_t    sw_pid;                /* the process id from the PID file */
 177         const char *sw_pidtype;         /* "daemon" or "process group" */
 178         int      sw_runcmd;             /* run command or send PID to signal */
 179         char     sw_fname[1];           /* file the PID was read from or shell cmd */
 180 };
 181
 182 struct zipwork_entry {
 183         SLIST_ENTRY(zipwork_entry) zw_nextp;
 184         const struct conf_entry *zw_conf;       /* for chown/perm/flag info */
 185         const struct sigwork_entry *zw_swork;   /* to know success of signal */
 186         int      zw_fsize;              /* size of the file to compress */
 187         char     zw_fname[1];           /* the file to compress */
 188 };
 189
 190 struct include_entry {
 191         STAILQ_ENTRY(include_entry) inc_nextp;
 192         const char *file;       /* Name of file to process */
 193 };
 194
 195 struct oldlog_entry {
 196         char *fname;            /* Filename of the log file */
 197         time_t t;               /* Parsed timestamp of the logfile */
 198 };
 199
 200 typedef enum {
 201         FREE_ENT, KEEP_ENT
 202 }       fk_entry;
 203
 204 STAILQ_HEAD(cflist, conf_entry);
 205 static SLIST_HEAD(swlisthead, sigwork_entry) swhead =
 206     SLIST_HEAD_INITIALIZER(swhead);
 207 static SLIST_HEAD(zwlisthead, zipwork_entry) zwhead =
 208     SLIST_HEAD_INITIALIZER(zwhead);
 209 STAILQ_HEAD(ilist, include_entry);
 210
 211 int dbg_at_times;               /* -D Show details of 'trim_at' code */
 212
 213 static int archtodir = 0;       /* Archive old logfiles to other directory */
 214 static int createlogs;          /* Create (non-GLOB) logfiles which do not */
 215                                 /*    already exist.  1=='for entries with */
 216                                 /*    C flag', 2=='for all entries'. */
 217 int verbose = 0;                /* Print out what's going on */
 218 static int needroot = 1;        /* Root privs are necessary */
 219 int noaction = 0;               /* Don't do anything, just show it */
 220 static int norotate = 0;        /* Don't rotate */
 221 static int nosignal;            /* Do not send any signals */
 222 static int enforcepid = 0;      /* If PID file does not exist or empty, do nothing */
 223 static int force = 0;           /* Force the trim no matter what */
 224 static int rotatereq = 0;       /* -R = Always rotate the file(s) as given */
 225                                 /*    on the command (this also requires   */
 226                                 /*    that a list of files *are* given on  */
 227                                 /*    the run command). */
 228 static char *requestor;         /* The name given on a -R request */
 229 static char *timefnamefmt = NULL;/* Use time based filenames instead of .0 */
 230 static char *archdirname;       /* Directory path to old logfiles archive */
 231 static char *destdir = NULL;    /* Directory to treat at root for logs */
 232 static const char *conf;        /* Configuration file to use */
 233
 234 struct ptime_data *dbg_timenow; /* A "timenow" value set via -D option */
 235 static struct ptime_data *timenow; /* The time to use for checking at-fields */
 236
 237 #define DAYTIME_LEN     16
 238 static char daytime[DAYTIME_LEN];/* The current time in human readable form,
 239                                   * used for rotation-tracking messages. */
 240
 241 /* Another buffer to hold the current time in RFC5424 format. Fractional
 242  * seconds are allowed by the RFC, but are not included in the
 243  * rotation-tracking messages written by newsyslog and so are not accounted for
 244  * in the length below.
 245  */
 246 #define DAYTIME_RFC5424_LEN     sizeof("YYYY-MM-DDTHH:MM:SS+00:00")
 247 static char daytime_rfc5424[DAYTIME_RFC5424_LEN];
 248
 249 static char hostname[MAXHOSTNAMELEN]; /* hostname */
 250 static size_t hostname_shortlen;
 251
 252 static const char *path_syslogpid = _PATH_SYSLOGPID;
 253
 254 static struct cflist *get_worklist(char **files);
 255 static void parse_file(FILE *cf, struct cflist *work_p, struct cflist *glob_p,
 256                     struct conf_entry *defconf_p, struct ilist *inclist);
 257 static void add_to_queue(const char *fname, struct ilist *inclist);
 258 static char *sob(char *p);
 259 static char *son(char *p);
 260 static int isnumberstr(const char *);
 261 static int isglobstr(const char *);
 262 static char *missing_field(char *p, char *errline);
 263 static void      change_attrs(const char *, const struct conf_entry *);
 264 static const char *get_logfile_suffix(const char *logfile);
 265 static fk_entry  do_entry(struct conf_entry *);
 266 static fk_entry  do_rotate(const struct conf_entry *);
 267 static void      do_sigwork(struct sigwork_entry *);
 268 static void      do_zipwork(struct zipwork_entry *);
 269 static struct sigwork_entry *
 270                  save_sigwork(const struct conf_entry *);
 271 static struct zipwork_entry *
 272                  save_zipwork(const struct conf_entry *, const struct
 273                     sigwork_entry *, int, const char *);
 274 static void      set_swpid(struct sigwork_entry *, const struct conf_entry *);
 275 static int       sizefile(const char *);
 276 static void expand_globs(struct cflist *work_p, struct cflist *glob_p);
 277 static void free_clist(struct cflist *list);
 278 static void free_entry(struct conf_entry *ent);
 279 static struct conf_entry *init_entry(const char *fname,
 280                 struct conf_entry *src_entry);
 281 static void parse_args(int argc, char **argv);
 282 static int parse_doption(const char *doption);
 283 static void usage(void);
 284 static int log_trim(const char *logname, const struct conf_entry *log_ent);
 285 static int age_old_log(const char *file);
 286 static void savelog(char *from, char *to);
 287 static void createdir(const struct conf_entry *ent, char *dirpart);
 288 static void createlog(const struct conf_entry *ent);
 289 static int parse_signal(const char *str);
 290
 291 /*
 292  * All the following take a parameter of 'int', but expect values in the
 293  * range of unsigned char.  Define wrappers which take values of type 'char',
 294  * whether signed or unsigned, and ensure they end up in the right range.
 295  */
 296 #define isdigitch(Anychar) isdigit((u_char)(Anychar))
 297 #define isprintch(Anychar) isprint((u_char)(Anychar))
 298 #define isspacech(Anychar) isspace((u_char)(Anychar))
 299 #define tolowerch(Anychar) tolower((u_char)(Anychar))
 300
 301 int
 302 main(int argc, char **argv)
 303 {
 304         struct cflist *worklist;
 305         struct conf_entry *p;
 306         struct sigwork_entry *stmp;
 307         struct zipwork_entry *ztmp;
 308
 309         SLIST_INIT(&swhead);
 310         SLIST_INIT(&zwhead);
 311
 312         parse_args(argc, argv);
 313         argc -= optind;
 314         argv += optind;
 315
 316         if (needroot && getuid() && geteuid())
 317                 errx(1, "must have root privs");
 318         worklist = get_worklist(argv);
 319
 320         /*
 321          * Rotate all the files which need to be rotated.  Note that
 322          * some users have *hundreds* of entries in newsyslog.conf!
 323          */
 324         while (!STAILQ_EMPTY(worklist)) {
 325                 p = STAILQ_FIRST(worklist);
 326                 STAILQ_REMOVE_HEAD(worklist, cf_nextp);
 327                 if (do_entry(p) == FREE_ENT)
 328                         free_entry(p);
 329         }
 330
 331         /*
 332          * Send signals to any processes which need a signal to tell
 333          * them to close and re-open the log file(s) we have rotated.
 334          * Note that zipwork_entries include pointers to these
 335          * sigwork_entry's, so we can not free the entries here.
 336          */
 337         if (!SLIST_EMPTY(&swhead)) {
 338                 if (noaction || verbose)
 339                         printf("Signal all daemon process(es)...\n");
 340                 SLIST_FOREACH(stmp, &swhead, sw_nextp)
 341                         do_sigwork(stmp);
 342                 if (!(rotatereq && nosignal)) {
 343                         if (noaction)
 344                                 printf("\tsleep 10\n");
 345                         else {
 346                                 if (verbose)
 347                                         printf("Pause 10 seconds to allow "
 348                                             "daemon(s) to close log file(s)\n");
 349                                 sleep(10);
 350                         }
 351                 }
 352         }
 353         /*
 354          * Compress all files that we're expected to compress, now
 355          * that all processes should have closed the files which
 356          * have been rotated.
 357          */
 358         if (!SLIST_EMPTY(&zwhead)) {
 359                 if (noaction || verbose)
 360                         printf("Compress all rotated log file(s)...\n");
 361                 while (!SLIST_EMPTY(&zwhead)) {
 362                         ztmp = SLIST_FIRST(&zwhead);
 363                         do_zipwork(ztmp);
 364                         SLIST_REMOVE_HEAD(&zwhead, zw_nextp);
 365                         free(ztmp);
 366                 }
 367         }
 368         /* Now free all the sigwork entries. */
 369         while (!SLIST_EMPTY(&swhead)) {
 370                 stmp = SLIST_FIRST(&swhead);
 371                 SLIST_REMOVE_HEAD(&swhead, sw_nextp);
 372                 free(stmp);
 373         }
 374
 375         while (wait(NULL) > 0 || errno == EINTR)
 376                 ;
 377         return (0);
 378 }
 379
 380 static struct conf_entry *
 381 init_entry(const char *fname, struct conf_entry *src_entry)
 382 {
 383         struct conf_entry *tempwork;
 384
 385         if (verbose > 4)
 386                 printf("\t--> [creating entry for %s]\n", fname);
 387
 388         tempwork = malloc(sizeof(struct conf_entry));
 389         if (tempwork == NULL)
 390                 err(1, "malloc of conf_entry for %s", fname);
 391
 392         if (destdir == NULL || fname[0] != '/')
 393                 tempwork->log = strdup(fname);
 394         else
 395                 asprintf(&tempwork->log, "%s%s", destdir, fname);
 396         if (tempwork->log == NULL)
 397                 err(1, "strdup for %s", fname);
 398
 399         if (src_entry != NULL) {
 400                 tempwork->pid_cmd_file = NULL;
 401                 if (src_entry->pid_cmd_file)
 402                         tempwork->pid_cmd_file = strdup(src_entry->pid_cmd_file);
 403                 tempwork->r_reason = NULL;
 404                 tempwork->firstcreate = 0;
 405                 tempwork->rotate = 0;
 406                 tempwork->fsize = -1;
 407                 tempwork->uid = src_entry->uid;
 408                 tempwork->gid = src_entry->gid;
 409                 tempwork->numlogs = src_entry->numlogs;
 410                 tempwork->trsize = src_entry->trsize;
 411                 tempwork->hours = src_entry->hours;
 412                 tempwork->trim_at = NULL;
 413                 if (src_entry->trim_at != NULL)
 414                         tempwork->trim_at = ptime_init(src_entry->trim_at);
 415                 tempwork->permissions = src_entry->permissions;
 416                 tempwork->flags = src_entry->flags;
 417                 tempwork->compress = src_entry->compress;
 418                 tempwork->sig = src_entry->sig;
 419                 tempwork->def_cfg = src_entry->def_cfg;
 420         } else {
 421                 /* Initialize as a "do-nothing" entry */
 422                 tempwork->pid_cmd_file = NULL;
 423                 tempwork->r_reason = NULL;
 424                 tempwork->firstcreate = 0;
 425                 tempwork->rotate = 0;
 426                 tempwork->fsize = -1;
 427                 tempwork->uid = (uid_t)-1;
 428                 tempwork->gid = (gid_t)-1;
 429                 tempwork->numlogs = 1;
 430                 tempwork->trsize = -1;
 431                 tempwork->hours = -1;
 432                 tempwork->trim_at = NULL;
 433                 tempwork->permissions = 0;
 434                 tempwork->flags = 0;
 435                 tempwork->compress = COMPRESS_NONE;
 436                 tempwork->sig = SIGHUP;
 437                 tempwork->def_cfg = 0;
 438         }
 439
 440         return (tempwork);
 441 }
 442
 443 static void
 444 free_entry(struct conf_entry *ent)
 445 {
 446
 447         if (ent == NULL)
 448                 return;
 449
 450         if (ent->log != NULL) {
 451                 if (verbose > 4)
 452                         printf("\t--> [freeing entry for %s]\n", ent->log);
 453                 free(ent->log);
 454                 ent->log = NULL;
 455         }
 456
 457         if (ent->pid_cmd_file != NULL) {
 458                 free(ent->pid_cmd_file);
 459                 ent->pid_cmd_file = NULL;
 460         }
 461
 462         if (ent->r_reason != NULL) {
 463                 free(ent->r_reason);
 464                 ent->r_reason = NULL;
 465         }
 466
 467         if (ent->trim_at != NULL) {
 468                 ptime_free(ent->trim_at);
 469                 ent->trim_at = NULL;
 470         }
 471
 472         free(ent);
 473 }
 474
 475 static void
 476 free_clist(struct cflist *list)
 477 {
 478         struct conf_entry *ent;
 479
 480         while (!STAILQ_EMPTY(list)) {
 481                 ent = STAILQ_FIRST(list);
 482                 STAILQ_REMOVE_HEAD(list, cf_nextp);
 483                 free_entry(ent);
 484         }
 485
 486         free(list);
 487         list = NULL;
 488 }
 489
 490 static fk_entry
 491 do_entry(struct conf_entry * ent)
 492 {
 493 #define REASON_MAX      80
 494         int modtime;
 495         fk_entry free_or_keep;
 496         double diffsecs;
 497         char temp_reason[REASON_MAX];
 498         int oversized;
 499
 500         free_or_keep = FREE_ENT;
 501         if (verbose)
 502                 printf("%s <%d%s>: ", ent->log, ent->numlogs,
 503                     compress_type[ent->compress].flag);
 504         ent->fsize = sizefile(ent->log);
 505         oversized = ((ent->trsize > 0) && (ent->fsize >= ent->trsize));
 506         modtime = age_old_log(ent->log);
 507         ent->rotate = 0;
 508         ent->firstcreate = 0;
 509         if (ent->fsize < 0) {
 510                 /*
 511                  * If either the C flag or the -C option was specified,
 512                  * and if we won't be creating the file, then have the
 513                  * verbose message include a hint as to why the file
 514                  * will not be created.
 515                  */
 516                 temp_reason[0] = '\0';
 517                 if (createlogs > 1)
 518                         ent->firstcreate = 1;
 519                 else if ((ent->flags & CE_CREATE) && createlogs)
 520                         ent->firstcreate = 1;
 521                 else if (ent->flags & CE_CREATE)
 522                         strlcpy(temp_reason, " (no -C option)", REASON_MAX);
 523                 else if (createlogs)
 524                         strlcpy(temp_reason, " (no C flag)", REASON_MAX);
 525
 526                 if (ent->firstcreate) {
 527                         if (verbose)
 528                                 printf("does not exist -> will create.\n");
 529                         createlog(ent);
 530                 } else if (verbose) {
 531                         printf("does not exist, skipped%s.\n", temp_reason);
 532                 }
 533         } else {
 534                 if (ent->flags & CE_TRIMAT && !force && !rotatereq &&
 535                     !oversized) {
 536                         diffsecs = ptimeget_diff(timenow, ent->trim_at);
 537                         if (diffsecs < 0.0) {
 538                                 /* trim_at is some time in the future. */
 539                                 if (verbose) {
 540                                         ptime_adjust4dst(ent->trim_at,
 541                                             timenow);
 542                                         printf("--> will trim at %s",
 543                                             ptimeget_ctime(ent->trim_at));
 544                                 }
 545                                 return (free_or_keep);
 546                         } else if (diffsecs >= 3600.0) {
 547                                 /*
 548                                  * trim_at is more than an hour in the past,
 549                                  * so find the next valid trim_at time, and
 550                                  * tell the user what that will be.
 551                                  */
 552                                 if (verbose && dbg_at_times)
 553                                         printf("\n\t--> prev trim at %s\t",
 554                                             ptimeget_ctime(ent->trim_at));
 555                                 if (verbose) {
 556                                         ptimeset_nxtime(ent->trim_at);
 557                                         printf("--> will trim at %s",
 558                                             ptimeget_ctime(ent->trim_at));
 559                                 }
 560                                 return (free_or_keep);
 561                         } else if (verbose && noaction && dbg_at_times) {
 562                                 /*
 563                                  * If we are just debugging at-times, then
 564                                  * a detailed message is helpful.  Also
 565                                  * skip "doing" any commands, since they
 566                                  * would all be turned off by no-action.
 567                                  */
 568                                 printf("\n\t--> timematch at %s",
 569                                     ptimeget_ctime(ent->trim_at));
 570                                 return (free_or_keep);
 571                         } else if (verbose && ent->hours <= 0) {
 572                                 printf("--> time is up\n");
 573                         }
 574                 }
 575                 if (verbose && (ent->trsize > 0))
 576                         printf("size (Kb): %d [%d] ", ent->fsize, ent->trsize);
 577                 if (verbose && (ent->hours > 0))
 578                         printf(" age (hr): %d [%d] ", modtime, ent->hours);
 579
 580                 /*
 581                  * Figure out if this logfile needs to be rotated.
 582                  */
 583                 temp_reason[0] = '\0';
 584                 if (rotatereq) {
 585                         ent->rotate = 1;
 586                         snprintf(temp_reason, REASON_MAX, " due to -R from %s",
 587                             requestor);
 588                 } else if (force) {
 589                         ent->rotate = 1;
 590                         snprintf(temp_reason, REASON_MAX, " due to -F request");
 591                 } else if (oversized) {
 592                         ent->rotate = 1;
 593                         snprintf(temp_reason, REASON_MAX, " due to size>%dK",
 594                             ent->trsize);
 595                 } else if (ent->hours <= 0 && (ent->flags & CE_TRIMAT)) {
 596                         ent->rotate = 1;
 597                 } else if ((ent->hours > 0) && ((modtime >= ent->hours) ||
 598                     (modtime < 0))) {
 599                         ent->rotate = 1;
 600                 }
 601
 602                 /*
 603                  * If the file needs to be rotated, then rotate it.
 604                  */
 605                 if (ent->rotate && !norotate) {
 606                         if (temp_reason[0] != '\0')
 607                                 ent->r_reason = strdup(temp_reason);
 608                         if (verbose)
 609                                 printf("--> trimming log....\n");
 610                         if (noaction && !verbose)
 611                                 printf("%s <%d%s>: trimming\n", ent->log,
 612                                     ent->numlogs,
 613                                     compress_type[ent->compress].flag);
 614                         free_or_keep = do_rotate(ent);
 615                 } else {
 616                         if (verbose)
 617                                 printf("--> skipping\n");
 618                 }
 619         }
 620         return (free_or_keep);
 621 #undef REASON_MAX
 622 }
 623
 624 static void
 625 parse_args(int argc, char **argv)
 626 {
 627         int ch;
 628         char *p;
 629
 630         timenow = ptime_init(NULL);
 631         ptimeset_time(timenow, time(NULL));
 632         strlcpy(daytime, ptimeget_ctime(timenow) + 4, DAYTIME_LEN);
 633         ptimeget_ctime_rfc5424(timenow, daytime_rfc5424, DAYTIME_RFC5424_LEN);
 634
 635         /* Let's get our hostname */
 636         (void)gethostname(hostname, sizeof(hostname));
 637         hostname_shortlen = strcspn(hostname, ".");
 638
 639         /* Parse command line options. */
 640         while ((ch = getopt(argc, argv, "a:d:f:nrst:vCD:FNPR:S:")) != -1)
 641                 switch (ch) {
 642                 case 'a':
 643                         archtodir++;
 644                         archdirname = optarg;
 645                         break;
 646                 case 'd':
 647                         destdir = optarg;
 648                         break;
 649                 case 'f':
 650                         conf = optarg;
 651                         break;
 652                 case 'n':
 653                         noaction++;
 654                         /* FALLTHROUGH */
 655                 case 'r':
 656                         needroot = 0;
 657                         break;
 658                 case 's':
 659                         nosignal = 1;
 660                         break;
 661                 case 't':
 662                         if (optarg[0] == '\0' ||
 663                             strcmp(optarg, "DEFAULT") == 0)
 664                                 timefnamefmt = strdup(DEFAULT_TIMEFNAME_FMT);
 665                         else
 666                                 timefnamefmt = strdup(optarg);
 667                         break;
 668                 case 'v':
 669                         verbose++;
 670                         break;
 671                 case 'C':
 672                         /* Useful for things like rc.diskless... */
 673                         createlogs++;
 674                         break;
 675                 case 'D':
 676                         /*
 677                          * Set some debugging option.  The specific option
 678                          * depends on the value of optarg.  These options
 679                          * may come and go without notice or documentation.
 680                          */
 681                         if (parse_doption(optarg))
 682                                 break;
 683                         usage();
 684                         /* NOTREACHED */
 685                 case 'F':
 686                         force++;
 687                         break;
 688                 case 'N':
 689                         norotate++;
 690                         break;
 691                 case 'P':
 692                         enforcepid++;
 693                         break;
 694                 case 'R':
 695                         rotatereq++;
 696                         requestor = strdup(optarg);
 697                         break;
 698                 case 'S':
 699                         path_syslogpid = optarg;
 700                         break;
 701                 case 'm':       /* Used by OpenBSD for "monitor mode" */
 702                 default:
 703                         usage();
 704                         /* NOTREACHED */
 705                 }
 706
 707         if (force && norotate) {
 708                 warnx("Only one of -F and -N may be specified.");
 709                 usage();
 710                 /* NOTREACHED */
 711         }
 712
 713         if (rotatereq) {
 714                 if (optind == argc) {
 715                         warnx("At least one filename must be given when -R is specified.");
 716                         usage();
 717                         /* NOTREACHED */
 718                 }
 719                 /* Make sure "requestor" value is safe for a syslog message. */
 720                 for (p = requestor; *p != '\0'; p++) {
 721                         if (!isprintch(*p) && (*p != '\t'))
 722                                 *p = '.';
 723                 }
 724         }
 725
 726         if (dbg_timenow) {
 727                 /*
 728                  * Note that the 'daytime' variable is not changed.
 729                  * That is only used in messages that track when a
 730                  * logfile is rotated, and if a file *is* rotated,
 731                  * then it will still rotated at the "real now" time.
 732                  */
 733                 ptime_free(timenow);
 734                 timenow = dbg_timenow;
 735                 fprintf(stderr, "Debug: Running as if TimeNow is %s",
 736                     ptimeget_ctime(dbg_timenow));
 737         }
 738
 739 }
 740
 741 /*
 742  * These debugging options are mainly meant for developer use, such
 743  * as writing regression-tests.  They would not be needed by users
 744  * during normal operation of newsyslog...
 745  */
 746 static int
 747 parse_doption(const char *doption)
 748 {
 749         const char TN[] = "TN=";
 750         int res;
 751
 752         if (strncmp(doption, TN, sizeof(TN) - 1) == 0) {
 753                 /*
 754                  * The "TimeNow" debugging option.  This might be off
 755                  * by an hour when crossing a timezone change.
 756                  */
 757                 dbg_timenow = ptime_init(NULL);
 758                 res = ptime_relparse(dbg_timenow, PTM_PARSE_ISO8601,
 759                     time(NULL), doption + sizeof(TN) - 1);
 760                 if (res == -2) {
 761                         warnx("Non-existent time specified on -D %s", doption);
 762                         return (0);                     /* failure */
 763                 } else if (res < 0) {
 764                         warnx("Malformed time given on -D %s", doption);
 765                         return (0);                     /* failure */
 766                 }
 767                 return (1);                     /* successfully parsed */
 768
 769         }
 770
 771         if (strcmp(doption, "ats") == 0) {
 772                 dbg_at_times++;
 773                 return (1);                     /* successfully parsed */
 774         }
 775
 776         /* XXX - This check could probably be dropped. */
 777         if ((strcmp(doption, "neworder") == 0) || (strcmp(doption, "oldorder")
 778             == 0)) {
 779                 warnx("NOTE: newsyslog always uses 'neworder'.");
 780                 return (1);                     /* successfully parsed */
 781         }
 782
 783         warnx("Unknown -D (debug) option: '%s'", doption);
 784         return (0);                             /* failure */
 785 }
 786
 787 static void
 788 usage(void)
 789 {
 790
 791         fprintf(stderr,
 792             "usage: newsyslog [-CFNPnrsv] [-a directory] [-d directory] [-f config_file]\n"
 793             "                 [-S pidfile] [-t timefmt] [[-R tagname] file ...]\n");
 794         exit(1);
 795 }
 796
 797 /*
 798  * Parse a configuration file and return a linked list of all the logs
 799  * which should be processed.
 800  */
 801 static struct cflist *
 802 get_worklist(char **files)
 803 {
 804         FILE *f;
 805         char **given;
 806         struct cflist *cmdlist, *filelist, *globlist;
 807         struct conf_entry *defconf, *dupent, *ent;
 808         struct ilist inclist;
 809         struct include_entry *inc;
 810         int gmatch, fnres;
 811
 812         defconf = NULL;
 813         STAILQ_INIT(&inclist);
 814
 815         filelist = malloc(sizeof(struct cflist));
 816         if (filelist == NULL)
 817                 err(1, "malloc of filelist");
 818         STAILQ_INIT(filelist);
 819         globlist = malloc(sizeof(struct cflist));
 820         if (globlist == NULL)
 821                 err(1, "malloc of globlist");
 822         STAILQ_INIT(globlist);
 823
 824         inc = malloc(sizeof(struct include_entry));
 825         if (inc == NULL)
 826                 err(1, "malloc of inc");
 827         inc->file = conf;
 828         if (inc->file == NULL)
 829                 inc->file = _PATH_CONF;
 830         STAILQ_INSERT_TAIL(&inclist, inc, inc_nextp);
 831
 832         STAILQ_FOREACH(inc, &inclist, inc_nextp) {
 833                 if (strcmp(inc->file, "-") != 0)
 834                         f = fopen(inc->file, "r");
 835                 else {
 836                         f = stdin;
 837                         inc->file = "<stdin>";
 838                 }
 839                 if (!f)
 840                         err(1, "%s", inc->file);
 841
 842                 if (verbose)
 843                         printf("Processing %s\n", inc->file);
 844                 parse_file(f, filelist, globlist, defconf, &inclist);
 845                 (void) fclose(f);
 846         }
 847
 848         /*
 849          * All config-file information has been read in and turned into
 850          * a filelist and a globlist.  If there were no specific files
 851          * given on the run command, then the only thing left to do is to
 852          * call a routine which finds all files matched by the globlist
 853          * and adds them to the filelist.  Then return the worklist.
 854          */
 855         if (*files == NULL) {
 856                 expand_globs(filelist, globlist);
 857                 free_clist(globlist);
 858                 if (defconf != NULL)
 859                         free_entry(defconf);
 860                 return (filelist);
 861                 /* NOTREACHED */
 862         }
 863
 864         /*
 865          * If newsyslog was given a specific list of files to process,
 866          * it may be that some of those files were not listed in any
 867          * config file.  Those unlisted files should get the default
 868          * rotation action.  First, create the default-rotation action
 869          * if none was found in a system config file.
 870          */
 871         if (defconf == NULL) {
 872                 defconf = init_entry(DEFAULT_MARKER, NULL);
 873                 defconf->numlogs = 3;
 874                 defconf->trsize = 50;
 875                 defconf->permissions = S_IRUSR|S_IWUSR;
 876         }
 877
 878         /*
 879          * If newsyslog was run with a list of specific filenames,
 880          * then create a new worklist which has only those files in
 881          * it, picking up the rotation-rules for those files from
 882          * the original filelist.
 883          *
 884          * XXX - Note that this will copy multiple rules for a single
 885          *      logfile, if multiple entries are an exact match for
 886          *      that file.  That matches the historic behavior, but do
 887          *      we want to continue to allow it?  If so, it should
 888          *      probably be handled more intelligently.
 889          */
 890         cmdlist = malloc(sizeof(struct cflist));
 891         if (cmdlist == NULL)
 892                 err(1, "malloc of cmdlist");
 893         STAILQ_INIT(cmdlist);
 894
 895         for (given = files; *given; ++given) {
 896                 /*
 897                  * First try to find exact-matches for this given file.
 898                  */
 899                 gmatch = 0;
 900                 STAILQ_FOREACH(ent, filelist, cf_nextp) {
 901                         if (strcmp(ent->log, *given) == 0) {
 902                                 gmatch++;
 903                                 dupent = init_entry(*given, ent);
 904                                 STAILQ_INSERT_TAIL(cmdlist, dupent, cf_nextp);
 905                         }
 906                 }
 907                 if (gmatch) {
 908                         if (verbose > 2)
 909                                 printf("\t+ Matched entry %s\n", *given);
 910                         continue;
 911                 }
 912
 913                 /*
 914                  * There was no exact-match for this given file, so look
 915                  * for a "glob" entry which does match.
 916                  */
 917                 gmatch = 0;
 918                 if (verbose > 2 && globlist != NULL)
 919                         printf("\t+ Checking globs for %s\n", *given);
 920                 STAILQ_FOREACH(ent, globlist, cf_nextp) {
 921                         fnres = fnmatch(ent->log, *given, FNM_PATHNAME);
 922                         if (verbose > 2)
 923                                 printf("\t+    = %d for pattern %s\n", fnres,
 924                                     ent->log);
 925                         if (fnres == 0) {
 926                                 gmatch++;
 927                                 dupent = init_entry(*given, ent);
 928                                 /* This new entry is not a glob! */
 929                                 dupent->flags &= ~CE_GLOB;
 930                                 STAILQ_INSERT_TAIL(cmdlist, dupent, cf_nextp);
 931                                 /* Only allow a match to one glob-entry */
 932                                 break;
 933                         }
 934                 }
 935                 if (gmatch) {
 936                         if (verbose > 2)
 937                                 printf("\t+ Matched %s via %s\n", *given,
 938                                     ent->log);
 939                         continue;
 940                 }
 941
 942                 /*
 943                  * This given file was not found in any config file, so
 944                  * add a worklist item based on the default entry.
 945                  */
 946                 if (verbose > 2)
 947                         printf("\t+ No entry matched %s  (will use %s)\n",
 948                             *given, DEFAULT_MARKER);
 949                 dupent = init_entry(*given, defconf);
 950                 /* Mark that it was *not* found in a config file */
 951                 dupent->def_cfg = 1;
 952                 STAILQ_INSERT_TAIL(cmdlist, dupent, cf_nextp);
 953         }
 954
 955         /*
 956          * Free all the entries in the original work list, the list of
 957          * glob entries, and the default entry.
 958          */
 959         free_clist(filelist);
 960         free_clist(globlist);
 961         free_entry(defconf);
 962
 963         /* And finally, return a worklist which matches the given files. */
 964         return (cmdlist);
 965 }
 966
 967 /*
 968  * Expand the list of entries with filename patterns, and add all files
 969  * which match those glob-entries onto the worklist.
 970  */
 971 static void
 972 expand_globs(struct cflist *work_p, struct cflist *glob_p)
 973 {
 974         int gmatch, gres;
 975         size_t i;
 976         char *mfname;
 977         struct conf_entry *dupent, *ent, *globent;
 978         glob_t pglob;
 979         struct stat st_fm;
 980
 981         /*
 982          * The worklist contains all fully-specified (non-GLOB) names.
 983          *
 984          * Now expand the list of filename-pattern (GLOB) entries into
 985          * a second list, which (by definition) will only match files
 986          * that already exist.  Do not add a glob-related entry for any
 987          * file which already exists in the fully-specified list.
 988          */
 989         STAILQ_FOREACH(globent, glob_p, cf_nextp) {
 990                 gres = glob(globent->log, GLOB_NOCHECK, NULL, &pglob);
 991                 if (gres != 0) {
 992                         warn("cannot expand pattern (%d): %s", gres,
 993                             globent->log);
 994                         continue;
 995                 }
 996
 997                 if (verbose > 2)
 998                         printf("\t+ Expanding pattern %s\n", globent->log);
 999                 for (i = 0; i < pglob.gl_matchc; i++) {
1000                         mfname = pglob.gl_pathv[i];
1001
1002                         /* See if this file already has a specific entry. */
1003                         gmatch = 0;
1004                         STAILQ_FOREACH(ent, work_p, cf_nextp) {
1005                                 if (strcmp(mfname, ent->log) == 0) {
1006                                         gmatch++;
1007                                         break;
1008                                 }
1009                         }
1010                         if (gmatch)
1011                                 continue;
1012
1013                         /* Make sure the named matched is a file. */
1014                         gres = lstat(mfname, &st_fm);
1015                         if (gres != 0) {
1016                                 /* Error on a file that glob() matched?!? */
1017                                 warn("Skipping %s - lstat() error", mfname);
1018                                 continue;
1019                         }
1020                         if (!S_ISREG(st_fm.st_mode)) {
1021                                 /* We only rotate files! */
1022                                 if (verbose > 2)
1023                                         printf("\t+  . skipping %s (!file)\n",
1024                                             mfname);
1025                                 continue;
1026                         }
1027
1028                         if (verbose > 2)
1029                                 printf("\t+  . add file %s\n", mfname);
1030                         dupent = init_entry(mfname, globent);
1031                         /* This new entry is not a glob! */
1032                         dupent->flags &= ~CE_GLOB;
1033
1034                         /* Add to the worklist. */
1035                         STAILQ_INSERT_TAIL(work_p, dupent, cf_nextp);
1036                 }
1037                 globfree(&pglob);
1038                 if (verbose > 2)
1039                         printf("\t+ Done with pattern %s\n", globent->log);
1040         }
1041 }
1042
1043 /*
1044  * Parse a configuration file and update a linked list of all the logs to
1045  * process.
1046  */
1047 static void
1048 parse_file(FILE *cf, struct cflist *work_p, struct cflist *glob_p,
1049     struct conf_entry *defconf_p, struct ilist *inclist)
1050 {
1051         char line[BUFSIZ], *parse, *q;
1052         char *cp, *errline, *group;
1053         struct conf_entry *working;
1054         struct passwd *pwd;
1055         struct group *grp;
1056         glob_t pglob;
1057         int eol, ptm_opts, res, special;
1058         size_t i;
1059
1060         errline = NULL;
1061         while (fgets(line, BUFSIZ, cf)) {
1062                 if ((line[0] == '\n') || (line[0] == '#') ||
1063                     (strlen(line) == 0))
1064                         continue;
1065                 if (errline != NULL)
1066                         free(errline);
1067                 errline = strdup(line);
1068                 for (cp = line + 1; *cp != '\0'; cp++) {
1069                         if (*cp != '#')
1070                                 continue;
1071                         if (*(cp - 1) == '\\') {
1072                                 strcpy(cp - 1, cp);
1073                                 cp--;
1074                                 continue;
1075                         }
1076                         *cp = '\0';
1077                         break;
1078                 }
1079
1080                 q = parse = missing_field(sob(line), errline);
1081                 parse = son(line);
1082                 if (!*parse)
1083                         errx(1, "malformed line (missing fields):\n%s",
1084                             errline);
1085                 *parse = '\0';
1086
1087                 /*
1088                  * Allow people to set debug options via the config file.
1089                  * (NOTE: debug options are undocumented, and may disappear
1090                  * at any time, etc).
1091                  */
1092                 if (strcasecmp(DEBUG_MARKER, q) == 0) {
1093                         q = parse = missing_field(sob(parse + 1), errline);
1094                         parse = son(parse);
1095                         if (!*parse)
1096                                 warnx("debug line specifies no option:\n%s",
1097                                     errline);
1098                         else {
1099                                 *parse = '\0';
1100                                 parse_doption(q);
1101                         }
1102                         continue;
1103                 } else if (strcasecmp(INCLUDE_MARKER, q) == 0) {
1104                         if (verbose)
1105                                 printf("Found: %s", errline);
1106                         q = parse = missing_field(sob(parse + 1), errline);
1107                         parse = son(parse);
1108                         if (!*parse) {
1109                                 warnx("include line missing argument:\n%s",
1110                                     errline);
1111                                 continue;
1112                         }
1113
1114                         *parse = '\0';
1115
1116                         if (isglobstr(q)) {
1117                                 res = glob(q, GLOB_NOCHECK, NULL, &pglob);
1118                                 if (res != 0) {
1119                                         warn("cannot expand pattern (%d): %s",
1120                                             res, q);
1121                                         continue;
1122                                 }
1123
1124                                 if (verbose > 2)
1125                                         printf("\t+ Expanding pattern %s\n", q);
1126
1127                                 for (i = 0; i < pglob.gl_matchc; i++)
1128                                         add_to_queue(pglob.gl_pathv[i],
1129                                             inclist);
1130                                 globfree(&pglob);
1131                         } else
1132                                 add_to_queue(q, inclist);
1133                         continue;
1134                 }
1135
1136                 special = 0;
1137                 working = init_entry(q, NULL);
1138                 if (strcasecmp(DEFAULT_MARKER, q) == 0) {
1139                         special = 1;
1140                         if (defconf_p != NULL) {
1141                                 warnx("Ignoring duplicate entry for %s!", q);
1142                                 free_entry(working);
1143                                 continue;
1144                         }
1145                         defconf_p = working;
1146                 }
1147
1148                 q = parse = missing_field(sob(parse + 1), errline);
1149                 parse = son(parse);
1150                 if (!*parse)
1151                         errx(1, "malformed line (missing fields):\n%s",
1152                             errline);
1153                 *parse = '\0';
1154                 if ((group = strchr(q, ':')) != NULL ||
1155                     (group = strrchr(q, '.')) != NULL) {
1156                         *group++ = '\0';
1157                         if (*q) {
1158                                 if (!(isnumberstr(q))) {
1159                                         if ((pwd = getpwnam(q)) == NULL)
1160                                                 errx(1,
1161                                      "error in config file; unknown user:\n%s",
1162                                                     errline);
1163                                         working->uid = pwd->pw_uid;
1164                                 } else
1165                                         working->uid = atoi(q);
1166                         } else
1167                                 working->uid = (uid_t)-1;
1168
1169                         q = group;
1170                         if (*q) {
1171                                 if (!(isnumberstr(q))) {
1172                                         if ((grp = getgrnam(q)) == NULL)
1173                                                 errx(1,
1174                                     "error in config file; unknown group:\n%s",
1175                                                     errline);
1176                                         working->gid = grp->gr_gid;
1177                                 } else
1178                                         working->gid = atoi(q);
1179                         } else
1180                                 working->gid = (gid_t)-1;
1181
1182                         q = parse = missing_field(sob(parse + 1), errline);
1183                         parse = son(parse);
1184                         if (!*parse)
1185                                 errx(1, "malformed line (missing fields):\n%s",
1186                                     errline);
1187                         *parse = '\0';
1188                 } else {
1189                         working->uid = (uid_t)-1;
1190                         working->gid = (gid_t)-1;
1191                 }
1192
1193                 if (!sscanf(q, "%o", &working->permissions))
1194                         errx(1, "error in config file; bad permissions:\n%s",
1195                             errline);
1196                 if ((working->permissions & ~DEFFILEMODE) != 0) {
1197                         warnx("File mode bits 0%o changed to 0%o in line:\n%s",
1198                             working->permissions,
1199                             working->permissions & DEFFILEMODE, errline);
1200                         working->permissions &= DEFFILEMODE;
1201                 }
1202
1203                 q = parse = missing_field(sob(parse + 1), errline);
1204                 parse = son(parse);
1205                 if (!*parse)
1206                         errx(1, "malformed line (missing fields):\n%s",
1207                             errline);
1208                 *parse = '\0';
1209                 if (!sscanf(q, "%d", &working->numlogs) || working->numlogs < 0)
1210                         errx(1, "error in config file; bad value for count of logs to save:\n%s",
1211                             errline);
1212
1213                 q = parse = missing_field(sob(parse + 1), errline);
1214                 parse = son(parse);
1215                 if (!*parse)
1216                         errx(1, "malformed line (missing fields):\n%s",
1217                             errline);
1218                 *parse = '\0';
1219                 if (isdigitch(*q))
1220                         working->trsize = atoi(q);
1221                 else if (strcmp(q, "*") == 0)
1222                         working->trsize = -1;
1223                 else {
1224                         warnx("Invalid value of '%s' for 'size' in line:\n%s",
1225                             q, errline);
1226                         working->trsize = -1;
1227                 }
1228
1229                 working->flags = 0;
1230                 working->compress = COMPRESS_NONE;
1231                 q = parse = missing_field(sob(parse + 1), errline);
1232                 parse = son(parse);
1233                 eol = !*parse;
1234                 *parse = '\0';
1235                 {
1236                         char *ep;
1237                         u_long ul;
1238
1239                         ul = strtoul(q, &ep, 10);
1240                         if (ep == q)
1241                                 working->hours = 0;
1242                         else if (*ep == '*')
1243                                 working->hours = -1;
1244                         else if (ul > INT_MAX)
1245                                 errx(1, "interval is too large:\n%s", errline);
1246                         else
1247                                 working->hours = ul;
1248
1249                         if (*ep == '\0' || strcmp(ep, "*") == 0)
1250                                 goto no_trimat;
1251                         if (*ep != '@' && *ep != '$')
1252                                 errx(1, "malformed interval/at:\n%s", errline);
1253
1254                         working->flags |= CE_TRIMAT;
1255                         working->trim_at = ptime_init(NULL);
1256                         ptm_opts = PTM_PARSE_ISO8601;
1257                         if (*ep == '$')
1258                                 ptm_opts = PTM_PARSE_DWM;
1259                         ptm_opts |= PTM_PARSE_MATCHDOM;
1260                         res = ptime_relparse(working->trim_at, ptm_opts,
1261                             ptimeget_secs(timenow), ep + 1);
1262                         if (res == -2)
1263                                 errx(1, "nonexistent time for 'at' value:\n%s",
1264                                     errline);
1265                         else if (res < 0)
1266                                 errx(1, "malformed 'at' value:\n%s", errline);
1267                 }
1268 no_trimat:
1269
1270                 if (eol)
1271                         q = NULL;
1272                 else {
1273                         q = parse = sob(parse + 1);     /* Optional field */
1274                         parse = son(parse);
1275                         if (!*parse)
1276                                 eol = 1;
1277                         *parse = '\0';
1278                 }
1279
1280                 for (; q && *q && !isspacech(*q); q++) {
1281                         switch (tolowerch(*q)) {
1282                         case 'b':
1283                                 working->flags |= CE_BINARY;
1284                                 break;
1285                         case 'c':
1286                                 working->flags |= CE_CREATE;
1287                                 break;
1288                         case 'd':
1289                                 working->flags |= CE_NODUMP;
1290                                 break;
1291                         case 'g':
1292                                 working->flags |= CE_GLOB;
1293                                 break;
1294                         case 'j':
1295                                 working->compress = COMPRESS_BZIP2;
1296                                 break;
1297                         case 'n':
1298                                 working->flags |= CE_NOSIGNAL;
1299                                 break;
1300                         case 'p':
1301                                 working->flags |= CE_PLAIN0;
1302                                 break;
1303                         case 'r':
1304                                 working->flags |= CE_PID2CMD;
1305                                 break;
1306                         case 't':
1307                                 working->flags |= CE_RFC5424;
1308                                 break;
1309                         case 'u':
1310                                 working->flags |= CE_SIGNALGROUP;
1311                                 break;
1312                         case 'w':
1313                                 /* Deprecated flag - keep for compatibility purposes */
1314                                 break;
1315                         case 'x':
1316                                 working->compress = COMPRESS_XZ;
1317                                 break;
1318                         case 'y':
1319                                 working->compress = COMPRESS_ZSTD;
1320                                 break;
1321                         case 'z':
1322                                 working->compress = COMPRESS_GZIP;
1323                                 break;
1324                         case '-':
1325                                 break;
1326                         case 'f':       /* Used by OpenBSD for "CE_FOLLOW" */
1327                         case 'm':       /* Used by OpenBSD for "CE_MONITOR" */
1328                         default:
1329                                 errx(1, "illegal flag in config file -- %c",
1330                                     *q);
1331                         }
1332                 }
1333
1334                 if (eol)
1335                         q = NULL;
1336                 else {
1337                         q = parse = sob(parse + 1);     /* Optional field */
1338                         parse = son(parse);
1339                         if (!*parse)
1340                                 eol = 1;
1341                         *parse = '\0';
1342                 }
1343
1344                 working->pid_cmd_file = NULL;
1345                 if (q && *q) {
1346                         if (*q == '/')
1347                                 working->pid_cmd_file = strdup(q);
1348                         else if (isalnum(*q))
1349                                 goto got_sig;
1350                         else {
1351                                 errx(1,
1352                         "illegal pid file or signal in config file:\n%s",
1353                                     errline);
1354                         }
1355                 }
1356                 if (eol)
1357                         q = NULL;
1358                 else {
1359                         q = parse = sob(parse + 1);     /* Optional field */
1360                         *(parse = son(parse)) = '\0';
1361                 }
1362
1363                 working->sig = SIGHUP;
1364                 if (q && *q) {
1365 got_sig:
1366                         working->sig = parse_signal(q);
1367                         if (working->sig < 1 || working->sig >= sys_nsig) {
1368                                 errx(1,
1369                                     "illegal signal in config file:\n%s",
1370                                     errline);
1371                         }
1372                 }
1373
1374                 /*
1375                  * Finish figuring out what pid-file to use (if any) in
1376                  * later processing if this logfile needs to be rotated.
1377                  */
1378                 if ((working->flags & CE_NOSIGNAL) == CE_NOSIGNAL) {
1379                         /*
1380                          * This config-entry specified 'n' for nosignal,
1381                          * see if it also specified an explicit pid_cmd_file.
1382                          * This would be a pretty pointless combination.
1383                          */
1384                         if (working->pid_cmd_file != NULL) {
1385                                 warnx("Ignoring '%s' because flag 'n' was specified in line:\n%s",
1386                                     working->pid_cmd_file, errline);
1387                                 free(working->pid_cmd_file);
1388                                 working->pid_cmd_file = NULL;
1389                         }
1390                 } else if (working->pid_cmd_file == NULL) {
1391                         /*
1392                          * This entry did not specify the 'n' flag, which
1393                          * means it should signal syslogd unless it had
1394                          * specified some other pid-file (and obviously the
1395                          * syslog pid-file will not be for a process-group).
1396                          * Also, we should only try to notify syslog if we
1397                          * are root.
1398                          */
1399                         if (working->flags & CE_SIGNALGROUP) {
1400                                 warnx("Ignoring flag 'U' in line:\n%s",
1401                                     errline);
1402                                 working->flags &= ~CE_SIGNALGROUP;
1403                         }
1404                         if (needroot)
1405                                 working->pid_cmd_file = strdup(path_syslogpid);
1406                 }
1407
1408                 /*
1409                  * Add this entry to the appropriate list of entries, unless
1410                  * it was some kind of special entry (eg: <default>).
1411                  */
1412                 if (special) {
1413                         ;                       /* Do not add to any list */
1414                 } else if (working->flags & CE_GLOB) {
1415                         STAILQ_INSERT_TAIL(glob_p, working, cf_nextp);
1416                 } else {
1417                         STAILQ_INSERT_TAIL(work_p, working, cf_nextp);
1418                 }
1419         }
1420         if (errline != NULL)
1421                 free(errline);
1422 }
1423
1424 static char *
1425 missing_field(char *p, char *errline)
1426 {
1427
1428         if (!p || !*p)
1429                 errx(1, "missing field in config file:\n%s", errline);
1430         return (p);
1431 }
1432
1433 /*
1434  * In our sort we return it in the reverse of what qsort normally
1435  * would do, as we want the newest files first.  If we have two
1436  * entries with the same time we don't really care about order.
1437  *
1438  * Support function for qsort() in delete_oldest_timelog().
1439  */
1440 static int
1441 oldlog_entry_compare(const void *a, const void *b)
1442 {
1443         const struct oldlog_entry *ola = a, *olb = b;
1444
1445         if (ola->t > olb->t)
1446                 return (-1);
1447         else if (ola->t < olb->t)
1448                 return (1);
1449         else
1450                 return (0);
1451 }
1452
1453 /*
1454  * Check whether the file corresponding to dp is an archive of the logfile
1455  * logfname, based on the timefnamefmt format string. Return true and fill out
1456  * tm if this is the case; otherwise return false.
1457  */
1458 static int
1459 validate_old_timelog(int fd, const struct dirent *dp, const char *logfname,
1460     struct tm *tm)
1461 {
1462         struct stat sb;
1463         size_t logfname_len;
1464         char *s;
1465         int c;
1466
1467         logfname_len = strlen(logfname);
1468
1469         if (dp->d_type != DT_REG) {
1470                 /*
1471                  * Some filesystems (e.g. NFS) don't fill out the d_type field
1472                  * and leave it set to DT_UNKNOWN; in this case we must obtain
1473                  * the file type ourselves.
1474                  */
1475                 if (dp->d_type != DT_UNKNOWN ||
1476                     fstatat(fd, dp->d_name, &sb, AT_SYMLINK_NOFOLLOW) != 0 ||
1477                     !S_ISREG(sb.st_mode))
1478                         return (0);
1479         }
1480         /* Ignore everything but files with our logfile prefix. */
1481         if (strncmp(dp->d_name, logfname, logfname_len) != 0)
1482                 return (0);
1483         /* Ignore the actual non-rotated logfile. */
1484         if (dp->d_namlen == logfname_len)
1485                 return (0);
1486
1487         /*
1488          * Make sure we created have found a logfile, so the
1489          * postfix is valid, IE format is: '.<time>(.[bgx]z)?'.
1490          */
1491         if (dp->d_name[logfname_len] != '.') {
1492                 if (verbose)
1493                         printf("Ignoring %s which has unexpected "
1494                             "extension '%s'\n", dp->d_name,
1495                             &dp->d_name[logfname_len]);
1496                 return (0);
1497         }
1498         memset(tm, 0, sizeof(*tm));
1499         if ((s = strptime(&dp->d_name[logfname_len + 1],
1500             timefnamefmt, tm)) == NULL) {
1501                 /*
1502                  * We could special case "old" sequentially named logfiles here,
1503                  * but we do not as that would require special handling to
1504                  * decide which one was the oldest compared to "new" time based
1505                  * logfiles.
1506                  */
1507                 if (verbose)
1508                         printf("Ignoring %s which does not "
1509                             "match time format\n", dp->d_name);
1510                 return (0);
1511         }
1512
1513         for (c = 0; c < COMPRESS_TYPES; c++)
1514                 if (strcmp(s, compress_type[c].suffix) == 0)
1515                         /* We're done. */
1516                         return (1);
1517
1518         if (verbose)
1519                 printf("Ignoring %s which has unexpected extension '%s'\n",
1520                     dp->d_name, s);
1521
1522         return (0);
1523 }
1524
1525 /*
1526  * Delete the oldest logfiles, when using time based filenames.
1527  */
1528 static void
1529 delete_oldest_timelog(const struct conf_entry *ent, const char *archive_dir)
1530 {
1531         char *basebuf, *dirbuf, errbuf[80];
1532         const char *base, *dir;
1533         int dir_fd, i, logcnt, max_logcnt;
1534         struct oldlog_entry *oldlogs;
1535         struct dirent *dp;
1536         struct tm tm;
1537         DIR *dirp;
1538
1539         oldlogs = malloc(MAX_OLDLOGS * sizeof(struct oldlog_entry));
1540         max_logcnt = MAX_OLDLOGS;
1541         logcnt = 0;
1542
1543         if (archive_dir != NULL && archive_dir[0] != '\0') {
1544                 dirbuf = NULL;
1545                 dir = archive_dir;
1546         } else {
1547                 if ((dirbuf = strdup(ent->log)) == NULL)
1548                         err(1, "strdup()");
1549                 dir = dirname(dirbuf);
1550         }
1551
1552         if ((basebuf = strdup(ent->log)) == NULL)
1553                 err(1, "strdup()");
1554         base = basename(basebuf);
1555         if (strcmp(base, "/") == 0)
1556                 errx(1, "Invalid log filename - became '/'");
1557
1558         if (verbose > 2)
1559                 printf("Searching for old logs in %s\n", dir);
1560
1561         /* First we create a 'list' of all archived logfiles */
1562         if ((dirp = opendir(dir)) == NULL)
1563                 err(1, "Cannot open log directory '%s'", dir);
1564         dir_fd = dirfd(dirp);
1565         while ((dp = readdir(dirp)) != NULL) {
1566                 if (validate_old_timelog(dir_fd, dp, base, &tm) == 0)
1567                         continue;
1568
1569                 /*
1570                  * We should now have old an old rotated logfile, so
1571                  * add it to the 'list'.
1572                  */
1573                 if ((oldlogs[logcnt].t = timegm(&tm)) == -1)
1574                         err(1, "Could not convert time string to time value");
1575                 if ((oldlogs[logcnt].fname = strdup(dp->d_name)) == NULL)
1576                         err(1, "strdup()");
1577                 logcnt++;
1578
1579                 /*
1580                  * It is very unlikely we ever run out of space in the
1581                  * logfile array from the default size, but lets
1582                  * handle it anyway...
1583                  */
1584                 if (logcnt >= max_logcnt) {
1585                         max_logcnt *= 4;
1586                         /* Detect integer overflow */
1587                         if (max_logcnt < logcnt)
1588                                 errx(1, "Too many old logfiles found");
1589                         oldlogs = realloc(oldlogs,
1590                             max_logcnt * sizeof(struct oldlog_entry));
1591                         if (oldlogs == NULL)
1592                                 err(1, "realloc()");
1593                 }
1594         }
1595
1596         /* Second, if needed we delete oldest archived logfiles */
1597         if (logcnt > 0 && logcnt >= ent->numlogs && ent->numlogs > 1) {
1598                 oldlogs = realloc(oldlogs, logcnt *
1599                     sizeof(struct oldlog_entry));
1600                 if (oldlogs == NULL)
1601                         err(1, "realloc()");
1602
1603                 /*
1604                  * We now sort the logs in the order of newest to
1605                  * oldest.  That way we can simply skip over the
1606                  * number of records we want to keep.
1607                  */
1608                 qsort(oldlogs, logcnt, sizeof(struct oldlog_entry),
1609                     oldlog_entry_compare);
1610                 for (i = ent->numlogs - 1; i < logcnt; i++) {
1611                         if (noaction)
1612                                 printf("\trm -f %s/%s\n", dir,
1613                                     oldlogs[i].fname);
1614                         else if (unlinkat(dir_fd, oldlogs[i].fname, 0) != 0) {
1615                                 snprintf(errbuf, sizeof(errbuf),
1616                                     "Could not delete old logfile '%s'",
1617                                     oldlogs[i].fname);
1618                                 perror(errbuf);
1619                         }
1620                 }
1621         } else if (verbose > 1)
1622                 printf("No old logs to delete for logfile %s\n", ent->log);
1623
1624         /* Third, cleanup */
1625         closedir(dirp);
1626         for (i = 0; i < logcnt; i++) {
1627                 assert(oldlogs[i].fname != NULL);
1628                 free(oldlogs[i].fname);
1629         }
1630         free(oldlogs);
1631         free(dirbuf);
1632         free(basebuf);
1633 }
1634
1635 /*
1636  * Generate a log filename, when using classic filenames.
1637  */
1638 static void
1639 gen_classiclog_fname(char *fname, size_t fname_sz, const char *archive_dir,
1640     const char *namepart, int numlogs_c)
1641 {
1642
1643         if (archive_dir[0] != '\0')
1644                 (void) snprintf(fname, fname_sz, "%s/%s.%d", archive_dir,
1645                     namepart, numlogs_c);
1646         else
1647                 (void) snprintf(fname, fname_sz, "%s.%d", namepart, numlogs_c);
1648 }
1649
1650 /*
1651  * Delete a rotated logfile, when using classic filenames.
1652  */
1653 static void
1654 delete_classiclog(const char *archive_dir, const char *namepart, int numlog_c)
1655 {
1656         char file1[MAXPATHLEN], zfile1[MAXPATHLEN];
1657         int c;
1658
1659         gen_classiclog_fname(file1, sizeof(file1), archive_dir, namepart,
1660             numlog_c);
1661
1662         for (c = 0; c < COMPRESS_TYPES; c++) {
1663                 (void) snprintf(zfile1, sizeof(zfile1), "%s%s", file1,
1664                     compress_type[c].suffix);
1665                 if (noaction)
1666                         printf("\trm -f %s\n", zfile1);
1667                 else
1668                         (void) unlink(zfile1);
1669         }
1670 }
1671
1672 /*
1673  * Only add to the queue if the file hasn't already been added. This is
1674  * done to prevent circular include loops.
1675  */
1676 static void
1677 add_to_queue(const char *fname, struct ilist *inclist)
1678 {
1679         struct include_entry *inc;
1680
1681         STAILQ_FOREACH(inc, inclist, inc_nextp) {
1682                 if (strcmp(fname, inc->file) == 0) {
1683                         warnx("duplicate include detected: %s", fname);
1684                         return;
1685                 }
1686         }
1687
1688         inc = malloc(sizeof(struct include_entry));
1689         if (inc == NULL)
1690                 err(1, "malloc of inc");
1691         inc->file = strdup(fname);
1692
1693         if (verbose > 2)
1694                 printf("\t+ Adding %s to the processing queue.\n", fname);
1695
1696         STAILQ_INSERT_TAIL(inclist, inc, inc_nextp);
1697 }
1698
1699 /*
1700  * Search for logfile and return its compression suffix (if supported)
1701  * The suffix detection is first-match in the order of compress_types
1702  *
1703  * Note: if logfile without suffix exists (uncompressed, COMPRESS_NONE)
1704  * a zero-length string is returned
1705  */
1706 static const char *
1707 get_logfile_suffix(const char *logfile)
1708 {
1709         struct stat st;
1710         char zfile[MAXPATHLEN];
1711         int c;
1712
1713         for (c = 0; c < COMPRESS_TYPES; c++) {
1714                 (void) strlcpy(zfile, logfile, MAXPATHLEN);
1715                 (void) strlcat(zfile, compress_type[c].suffix, MAXPATHLEN);
1716                 if (lstat(zfile, &st) == 0)
1717                         return (compress_type[c].suffix);
1718         }
1719         return (NULL);
1720 }
1721
1722 static fk_entry
1723 do_rotate(const struct conf_entry *ent)
1724 {
1725         char dirpart[MAXPATHLEN], namepart[MAXPATHLEN];
1726         char file1[MAXPATHLEN], file2[MAXPATHLEN];
1727         char zfile1[MAXPATHLEN], zfile2[MAXPATHLEN];
1728         const char *logfile_suffix;
1729         char datetimestr[30];
1730         int flags, numlogs_c;
1731         fk_entry free_or_keep;
1732         struct sigwork_entry *swork;
1733         struct stat st;
1734         struct tm tm;
1735         time_t now;
1736
1737         flags = ent->flags;
1738         free_or_keep = FREE_ENT;
1739
1740         if (archtodir) {
1741                 char *p;
1742
1743                 /* build complete name of archive directory into dirpart */
1744                 if (*archdirname == '/') {      /* absolute */
1745                         strlcpy(dirpart, archdirname, sizeof(dirpart));
1746                 } else {        /* relative */
1747                         /* get directory part of logfile */
1748                         strlcpy(dirpart, ent->log, sizeof(dirpart));
1749                         if ((p = strrchr(dirpart, '/')) == NULL)
1750                                 dirpart[0] = '\0';
1751                         else
1752                                 *(p + 1) = '\0';
1753                         strlcat(dirpart, archdirname, sizeof(dirpart));
1754                 }
1755
1756                 /* check if archive directory exists, if not, create it */
1757                 if (lstat(dirpart, &st))
1758                         createdir(ent, dirpart);
1759
1760                 /* get filename part of logfile */
1761                 if ((p = strrchr(ent->log, '/')) == NULL)
1762                         strlcpy(namepart, ent->log, sizeof(namepart));
1763                 else
1764                         strlcpy(namepart, p + 1, sizeof(namepart));
1765         } else {
1766                 /*
1767                  * Tell utility functions we are not using an archive
1768                  * dir.
1769                  */
1770                 dirpart[0] = '\0';
1771                 strlcpy(namepart, ent->log, sizeof(namepart));
1772         }
1773
1774         /* Delete old logs */
1775         if (timefnamefmt != NULL)
1776                 delete_oldest_timelog(ent, dirpart);
1777         else {
1778                 /*
1779                  * Handle cleaning up after legacy newsyslog where we
1780                  * kept ent->numlogs + 1 files.  This code can go away
1781                  * at some point in the future.
1782                  */
1783                 delete_classiclog(dirpart, namepart, ent->numlogs);
1784
1785                 if (ent->numlogs > 0)
1786                         delete_classiclog(dirpart, namepart, ent->numlogs - 1);
1787
1788         }
1789
1790         if (timefnamefmt != NULL) {
1791                 /* If time functions fails we can't really do any sensible */
1792                 if (time(&now) == (time_t)-1 ||
1793                     localtime_r(&now, &tm) == NULL)
1794                         bzero(&tm, sizeof(tm));
1795
1796                 strftime(datetimestr, sizeof(datetimestr), timefnamefmt, &tm);
1797                 if (archtodir)
1798                         (void) snprintf(file1, sizeof(file1), "%s/%s.%s",
1799                             dirpart, namepart, datetimestr);
1800                 else
1801                         (void) snprintf(file1, sizeof(file1), "%s.%s",
1802                             ent->log, datetimestr);
1803
1804                 /* Don't run the code to move down logs */
1805                 numlogs_c = -1;
1806         } else {
1807                 gen_classiclog_fname(file1, sizeof(file1), dirpart, namepart,
1808                     ent->numlogs - 1);
1809                 numlogs_c = ent->numlogs - 2;           /* copy for countdown */
1810         }
1811
1812         /* Move down log files */
1813         for (; numlogs_c >= 0; numlogs_c--) {
1814                 (void) strlcpy(file2, file1, sizeof(file2));
1815
1816                 gen_classiclog_fname(file1, sizeof(file1), dirpart, namepart,
1817                     numlogs_c);
1818
1819                 logfile_suffix = get_logfile_suffix(file1);
1820                 if (logfile_suffix == NULL)
1821                         continue;
1822                 (void) strlcpy(zfile1, file1, MAXPATHLEN);
1823                 (void) strlcpy(zfile2, file2, MAXPATHLEN);
1824                 (void) strlcat(zfile1, logfile_suffix, MAXPATHLEN);
1825                 (void) strlcat(zfile2, logfile_suffix, MAXPATHLEN);
1826
1827                 if (noaction)
1828                         printf("\tmv %s %s\n", zfile1, zfile2);
1829                 else {
1830                         /* XXX - Ought to be checking for failure! */
1831                         (void)rename(zfile1, zfile2);
1832                         change_attrs(zfile2, ent);
1833                         if (ent->compress && !strlen(logfile_suffix)) {
1834                                 /* compress old rotation */
1835                                 struct zipwork_entry zwork;
1836
1837                                 memset(&zwork, 0, sizeof(zwork));
1838                                 zwork.zw_conf = ent;
1839                                 zwork.zw_fsize = sizefile(zfile2);
1840                                 strcpy(zwork.zw_fname, zfile2);
1841                                 do_zipwork(&zwork);
1842                         }
1843                 }
1844         }
1845
1846         if (ent->numlogs > 0) {
1847                 if (noaction) {
1848                         /*
1849                          * Note that savelog() may succeed with using link()
1850                          * for the archtodir case, but there is no good way
1851                          * of knowing if it will when doing "noaction", so
1852                          * here we claim that it will have to do a copy...
1853                          */
1854                         if (archtodir)
1855                                 printf("\tcp %s %s\n", ent->log, file1);
1856                         else
1857                                 printf("\tln %s %s\n", ent->log, file1);
1858                         printf("\ttouch %s\t\t"
1859                             "# Update mtime for 'when'-interval processing\n",
1860                             file1);
1861                 } else {
1862                         if (!(flags & CE_BINARY)) {
1863                                 /* Report the trimming to the old log */
1864                                 log_trim(ent->log, ent);
1865                         }
1866                         savelog(ent->log, file1);
1867                         /*
1868                          * Interval-based rotations are done using the mtime of
1869                          * the most recently archived log, so make sure it gets
1870                          * updated during a rotation.
1871                          */
1872                         utimes(file1, NULL);
1873                 }
1874                 change_attrs(file1, ent);
1875         }
1876
1877         /* Create the new log file and move it into place */
1878         if (noaction)
1879                 printf("Start new log...\n");
1880         createlog(ent);
1881
1882         /*
1883          * Save all signalling and file-compression to be done after log
1884          * files from all entries have been rotated.  This way any one
1885          * process will not be sent the same signal multiple times when
1886          * multiple log files had to be rotated.
1887          */
1888         swork = NULL;
1889         if (ent->pid_cmd_file != NULL)
1890                 swork = save_sigwork(ent);
1891         if (ent->numlogs > 0 && ent->compress > COMPRESS_NONE) {
1892                 if (!(ent->flags & CE_PLAIN0) ||
1893                     strcmp(&file1[strlen(file1) - 2], ".0") != 0) {
1894                         /*
1895                          * The zipwork_entry will include a pointer to this
1896                          * conf_entry, so the conf_entry should not be freed.
1897                          */
1898                         free_or_keep = KEEP_ENT;
1899                         save_zipwork(ent, swork, ent->fsize, file1);
1900                 }
1901         }
1902
1903         return (free_or_keep);
1904 }
1905
1906 static void
1907 do_sigwork(struct sigwork_entry *swork)
1908 {
1909         struct sigwork_entry *nextsig;
1910         int kres, secs;
1911         char *tmp;
1912
1913         if (swork->sw_runcmd == 0 && (!(swork->sw_pidok) || swork->sw_pid == 0))
1914                 return;                 /* no work to do... */
1915
1916         /*
1917          * If nosignal (-s) was specified, then do not signal any process.
1918          * Note that a nosignal request triggers a warning message if the
1919          * rotated logfile needs to be compressed, *unless* -R was also
1920          * specified.  We assume that an `-sR' request came from a process
1921          * which writes to the logfile, and as such, we assume that process
1922          * has already made sure the logfile is not presently in use.  This
1923          * just sets swork->sw_pidok to a special value, and do_zipwork
1924          * will print any necessary warning(s).
1925          */
1926         if (nosignal) {
1927                 if (!rotatereq)
1928                         swork->sw_pidok = -1;
1929                 return;
1930         }
1931
1932         /*
1933          * Compute the pause between consecutive signals.  Use a longer
1934          * sleep time if we will be sending two signals to the same
1935          * daemon or process-group.
1936          */
1937         secs = 0;
1938         nextsig = SLIST_NEXT(swork, sw_nextp);
1939         if (nextsig != NULL) {
1940                 if (swork->sw_pid == nextsig->sw_pid)
1941                         secs = 10;
1942                 else
1943                         secs = 1;
1944         }
1945
1946         if (noaction) {
1947                 if (swork->sw_runcmd)
1948                         printf("\tsh -c '%s %d'\n", swork->sw_fname,
1949                             swork->sw_signum);
1950                 else {
1951                         printf("\tkill -%d %d \t\t# %s\n", swork->sw_signum,
1952                             (int)swork->sw_pid, swork->sw_fname);
1953                         if (secs > 0)
1954                                 printf("\tsleep %d\n", secs);
1955                 }
1956                 return;
1957         }
1958
1959         if (swork->sw_runcmd) {
1960                 asprintf(&tmp, "%s %d", swork->sw_fname, swork->sw_signum);
1961                 if (tmp == NULL) {
1962                         warn("can't allocate memory to run %s",
1963                             swork->sw_fname);
1964                         return;
1965                 }
1966                 if (verbose)
1967                         printf("Run command: %s\n", tmp);
1968                 kres = system(tmp);
1969                 if (kres) {
1970                         warnx("%s: returned non-zero exit code: %d",
1971                             tmp, kres);
1972                 }
1973                 free(tmp);
1974                 return;
1975         }
1976
1977         kres = kill(swork->sw_pid, swork->sw_signum);
1978         if (kres != 0) {
1979                 /*
1980                  * Assume that "no such process" (ESRCH) is something
1981                  * to warn about, but is not an error.  Presumably the
1982                  * process which writes to the rotated log file(s) is
1983                  * gone, in which case we should have no problem with
1984                  * compressing the rotated log file(s).
1985                  */
1986                 if (errno != ESRCH)
1987                         swork->sw_pidok = 0;
1988                 warn("can't notify %s, pid %d = %s", swork->sw_pidtype,
1989                     (int)swork->sw_pid, swork->sw_fname);
1990         } else {
1991                 if (verbose)
1992                         printf("Notified %s pid %d = %s\n", swork->sw_pidtype,
1993                             (int)swork->sw_pid, swork->sw_fname);
1994                 if (secs > 0) {
1995                         if (verbose)
1996                                 printf("Pause %d second(s) between signals\n",
1997                                     secs);
1998                         sleep(secs);
1999                 }
2000         }
2001 }
2002
2003 static void
2004 do_zipwork(struct zipwork_entry *zwork)
2005 {
2006         const struct compress_types *ct;
2007         struct sbuf *command;
2008         pid_t pidzip, wpid;
2009         int c, errsav, fcount, zstatus;
2010         const char **args, *pgm_name, *pgm_path;
2011         char *zresult;
2012
2013         command = NULL;
2014         assert(zwork != NULL);
2015         assert(zwork->zw_conf != NULL);
2016         assert(zwork->zw_conf->compress > COMPRESS_NONE);
2017         assert(zwork->zw_conf->compress < COMPRESS_TYPES);
2018
2019         if (zwork->zw_swork != NULL && zwork->zw_swork->sw_runcmd == 0 &&
2020             zwork->zw_swork->sw_pidok <= 0) {
2021                 warnx(
2022                     "log %s not compressed because daemon(s) not notified",
2023                     zwork->zw_fname);
2024                 change_attrs(zwork->zw_fname, zwork->zw_conf);
2025                 return;
2026         }
2027
2028         ct = &compress_type[zwork->zw_conf->compress];
2029
2030         /*
2031          * execv will be called with the array [ program, flags ... ,
2032          * filename, NULL ] so allocate nflags+3 elements for the array.
2033          */
2034         args = calloc(ct->nflags + 3, sizeof(*args));
2035         if (args == NULL)
2036                 err(1, "calloc");
2037
2038         pgm_path = ct->path;
2039         pgm_name = strrchr(pgm_path, '/');
2040         if (pgm_name == NULL)
2041                 pgm_name = pgm_path;
2042         else
2043                 pgm_name++;
2044
2045         /* Build the argument array. */
2046         args[0] = pgm_name;
2047         for (c = 0; c < ct->nflags; c++)
2048                 args[c + 1] = ct->flags[c];
2049         args[c + 1] = zwork->zw_fname;
2050
2051         /* Also create a space-delimited version if we need to print it. */
2052         if ((command = sbuf_new_auto()) == NULL)
2053                 errx(1, "sbuf_new");
2054         sbuf_cpy(command, pgm_path);
2055         for (c = 1; args[c] != NULL; c++) {
2056                 sbuf_putc(command, ' ');
2057                 sbuf_cat(command, args[c]);
2058         }
2059         if (sbuf_finish(command) == -1)
2060                 err(1, "sbuf_finish");
2061
2062         /* Determine the filename of the compressed file. */
2063         asprintf(&zresult, "%s%s", zwork->zw_fname, ct->suffix);
2064         if (zresult == NULL)
2065                 errx(1, "asprintf");
2066
2067         if (verbose)
2068                 printf("Executing: %s\n", sbuf_data(command));
2069
2070         if (noaction) {
2071                 printf("\t%s %s\n", pgm_name, zwork->zw_fname);
2072                 change_attrs(zresult, zwork->zw_conf);
2073                 goto out;
2074         }
2075
2076         fcount = 1;
2077         pidzip = fork();
2078         while (pidzip < 0) {
2079                 /*
2080                  * The fork failed.  If the failure was due to a temporary
2081                  * problem, then wait a short time and try it again.
2082                  */
2083                 errsav = errno;
2084                 warn("fork() for `%s %s'", pgm_name, zwork->zw_fname);
2085                 if (errsav != EAGAIN || fcount > 5)
2086                         errx(1, "Exiting...");
2087                 sleep(fcount * 12);
2088                 fcount++;
2089                 pidzip = fork();
2090         }
2091         if (!pidzip) {
2092                 /* The child process executes the compression command */
2093                 execv(pgm_path, __DECONST(char *const*, args));
2094                 err(1, "execv(`%s')", sbuf_data(command));
2095         }
2096
2097         wpid = waitpid(pidzip, &zstatus, 0);
2098         if (wpid == -1) {
2099                 /* XXX - should this be a fatal error? */
2100                 warn("%s: waitpid(%d)", pgm_path, pidzip);
2101                 goto out;
2102         }
2103         if (!WIFEXITED(zstatus)) {
2104                 warnx("`%s' did not terminate normally", sbuf_data(command));
2105                 goto out;
2106         }
2107         if (WEXITSTATUS(zstatus)) {
2108                 warnx("`%s' terminated with a non-zero status (%d)",
2109                     sbuf_data(command), WEXITSTATUS(zstatus));
2110                 goto out;
2111         }
2112
2113         /* Compression was successful, set file attributes on the result. */
2114         change_attrs(zresult, zwork->zw_conf);
2115
2116 out:
2117         if (command != NULL)
2118                 sbuf_delete(command);
2119         free(args);
2120         free(zresult);
2121 }
2122
2123 /*
2124  * Save information on any process we need to signal.  Any single
2125  * process may need to be sent different signal-values for different
2126  * log files, but usually a single signal-value will cause the process
2127  * to close and re-open all of its log files.
2128  */
2129 static struct sigwork_entry *
2130 save_sigwork(const struct conf_entry *ent)
2131 {
2132         struct sigwork_entry *sprev, *stmp;
2133         int ndiff;
2134         size_t tmpsiz;
2135
2136         sprev = NULL;
2137         ndiff = 1;
2138         SLIST_FOREACH(stmp, &swhead, sw_nextp) {
2139                 ndiff = strcmp(ent->pid_cmd_file, stmp->sw_fname);
2140                 if (ndiff > 0)
2141                         break;
2142                 if (ndiff == 0) {
2143                         if (ent->sig == stmp->sw_signum)
2144                                 break;
2145                         if (ent->sig > stmp->sw_signum) {
2146                                 ndiff = 1;
2147                                 break;
2148                         }
2149                 }
2150                 sprev = stmp;
2151         }
2152         if (stmp != NULL && ndiff == 0)
2153                 return (stmp);
2154
2155         tmpsiz = sizeof(struct sigwork_entry) + strlen(ent->pid_cmd_file) + 1;
2156         stmp = malloc(tmpsiz);
2157
2158         stmp->sw_runcmd = 0;
2159         /* If this is a command to run we just set the flag and run command */
2160         if (ent->flags & CE_PID2CMD) {
2161                 stmp->sw_pid = -1;
2162                 stmp->sw_pidok = 0;
2163                 stmp->sw_runcmd = 1;
2164         } else {
2165                 set_swpid(stmp, ent);
2166         }
2167         stmp->sw_signum = ent->sig;
2168         strcpy(stmp->sw_fname, ent->pid_cmd_file);
2169         if (sprev == NULL)
2170                 SLIST_INSERT_HEAD(&swhead, stmp, sw_nextp);
2171         else
2172                 SLIST_INSERT_AFTER(sprev, stmp, sw_nextp);
2173         return (stmp);
2174 }
2175
2176 /*
2177  * Save information on any file we need to compress.  We may see the same
2178  * file multiple times, so check the full list to avoid duplicates.  The
2179  * list itself is sorted smallest-to-largest, because that's the order we
2180  * want to compress the files.  If the partition is very low on disk space,
2181  * then the smallest files are the most likely to compress, and compressing
2182  * them first will free up more space for the larger files.
2183  */
2184 static struct zipwork_entry *
2185 save_zipwork(const struct conf_entry *ent, const struct sigwork_entry *swork,
2186     int zsize, const char *zipfname)
2187 {
2188         struct zipwork_entry *zprev, *ztmp;
2189         int ndiff;
2190         size_t tmpsiz;
2191
2192         /* Compute the size if the caller did not know it. */
2193         if (zsize < 0)
2194                 zsize = sizefile(zipfname);
2195
2196         zprev = NULL;
2197         ndiff = 1;
2198         SLIST_FOREACH(ztmp, &zwhead, zw_nextp) {
2199                 ndiff = strcmp(zipfname, ztmp->zw_fname);
2200                 if (ndiff == 0)
2201                         break;
2202                 if (zsize > ztmp->zw_fsize)
2203                         zprev = ztmp;
2204         }
2205         if (ztmp != NULL && ndiff == 0)
2206                 return (ztmp);
2207
2208         tmpsiz = sizeof(struct zipwork_entry) + strlen(zipfname) + 1;
2209         ztmp = malloc(tmpsiz);
2210         ztmp->zw_conf = ent;
2211         ztmp->zw_swork = swork;
2212         ztmp->zw_fsize = zsize;
2213         strcpy(ztmp->zw_fname, zipfname);
2214         if (zprev == NULL)
2215                 SLIST_INSERT_HEAD(&zwhead, ztmp, zw_nextp);
2216         else
2217                 SLIST_INSERT_AFTER(zprev, ztmp, zw_nextp);
2218         return (ztmp);
2219 }
2220
2221 /* Send a signal to the pid specified by pidfile */
2222 static void
2223 set_swpid(struct sigwork_entry *swork, const struct conf_entry *ent)
2224 {
2225         FILE *f;
2226         long minok, maxok, rval;
2227         char *endp, *linep, line[BUFSIZ];
2228
2229         minok = MIN_PID;
2230         maxok = MAX_PID;
2231         swork->sw_pidok = 0;
2232         swork->sw_pid = 0;
2233         swork->sw_pidtype = "daemon";
2234         if (ent->flags & CE_SIGNALGROUP) {
2235                 /*
2236                  * If we are expected to signal a process-group when
2237                  * rotating this logfile, then the value read in should
2238                  * be the negative of a valid process ID.
2239                  */
2240                 minok = -MAX_PID;
2241                 maxok = -MIN_PID;
2242                 swork->sw_pidtype = "process-group";
2243         }
2244
2245         f = fopen(ent->pid_cmd_file, "r");
2246         if (f == NULL) {
2247                 if (errno == ENOENT && enforcepid == 0) {
2248                         /*
2249                          * Warn if the PID file doesn't exist, but do
2250                          * not consider it an error.  Most likely it
2251                          * means the process has been terminated,
2252                          * so it should be safe to rotate any log
2253                          * files that the process would have been using.
2254                          */
2255                         swork->sw_pidok = 1;
2256                         warnx("pid file doesn't exist: %s", ent->pid_cmd_file);
2257                 } else
2258                         warn("can't open pid file: %s", ent->pid_cmd_file);
2259                 return;
2260         }
2261
2262         if (fgets(line, BUFSIZ, f) == NULL) {
2263                 /*
2264                  * Warn if the PID file is empty, but do not consider
2265                  * it an error.  Most likely it means the process has
2266                  * has terminated, so it should be safe to rotate any
2267                  * log files that the process would have been using.
2268                  */
2269                 if (feof(f) && enforcepid == 0) {
2270                         swork->sw_pidok = 1;
2271                         warnx("pid/cmd file is empty: %s", ent->pid_cmd_file);
2272                 } else
2273                         warn("can't read from pid file: %s", ent->pid_cmd_file);
2274                 (void)fclose(f);
2275                 return;
2276         }
2277         (void)fclose(f);
2278
2279         errno = 0;
2280         linep = line;
2281         while (*linep == ' ')
2282                 linep++;
2283         rval = strtol(linep, &endp, 10);
2284         if (*endp != '\0' && !isspacech(*endp)) {
2285                 warnx("pid file does not start with a valid number: %s",
2286                     ent->pid_cmd_file);
2287         } else if (rval < minok || rval > maxok) {
2288                 warnx("bad value '%ld' for process number in %s",
2289                     rval, ent->pid_cmd_file);
2290                 if (verbose)
2291                         warnx("\t(expecting value between %ld and %ld)",
2292                             minok, maxok);
2293         } else {
2294                 swork->sw_pidok = 1;
2295                 swork->sw_pid = rval;
2296         }
2297
2298         return;
2299 }
2300
2301 /* Log the fact that the logs were turned over */
2302 static int
2303 log_trim(const char *logname, const struct conf_entry *log_ent)
2304 {
2305         FILE *f;
2306         const char *xtra;
2307
2308         if ((f = fopen(logname, "a")) == NULL)
2309                 return (-1);
2310         xtra = "";
2311         if (log_ent->def_cfg)
2312                 xtra = " using <default> rule";
2313         if (log_ent->flags & CE_RFC5424) {
2314                 if (log_ent->firstcreate) {
2315                         fprintf(f, "<%d>1 %s %s newsyslog %d - - %s%s\n",
2316                             LOG_MAKEPRI(LOG_USER, LOG_INFO),
2317                             daytime_rfc5424, hostname, getpid(),
2318                             "logfile first created", xtra);
2319                 } else if (log_ent->r_reason != NULL) {
2320                         fprintf(f, "<%d>1 %s %s newsyslog %d - - %s%s%s\n",
2321                             LOG_MAKEPRI(LOG_USER, LOG_INFO),
2322                             daytime_rfc5424, hostname, getpid(),
2323                             "logfile turned over", log_ent->r_reason, xtra);
2324                 } else {
2325                         fprintf(f, "<%d>1 %s %s newsyslog %d - - %s%s\n",
2326                             LOG_MAKEPRI(LOG_USER, LOG_INFO),
2327                             daytime_rfc5424, hostname, getpid(),
2328                             "logfile turned over", xtra);
2329                 }
2330         } else {
2331                 if (log_ent->firstcreate)
2332                         fprintf(f,
2333                             "%s %.*s newsyslog[%d]: logfile first created%s\n",
2334                             daytime, (int)hostname_shortlen, hostname, getpid(),
2335                             xtra);
2336                 else if (log_ent->r_reason != NULL)
2337                         fprintf(f,
2338                             "%s %.*s newsyslog[%d]: logfile turned over%s%s\n",
2339                             daytime, (int)hostname_shortlen, hostname, getpid(),
2340                             log_ent->r_reason, xtra);
2341                 else
2342                         fprintf(f,
2343                             "%s %.*s newsyslog[%d]: logfile turned over%s\n",
2344                             daytime, (int)hostname_shortlen, hostname, getpid(),
2345                             xtra);
2346         }
2347         if (fclose(f) == EOF)
2348                 err(1, "log_trim: fclose");
2349         return (0);
2350 }
2351
2352 /* Return size in kilobytes of a file */
2353 static int
2354 sizefile(const char *file)
2355 {
2356         struct stat sb;
2357
2358         if (stat(file, &sb) < 0)
2359                 return (-1);
2360         return (kbytes(sb.st_size));
2361 }
2362
2363 /*
2364  * Return the mtime of the most recent archive of the logfile, using timestamp
2365  * based filenames.
2366  */
2367 static time_t
2368 mtime_old_timelog(const char *file)
2369 {
2370         struct stat sb;
2371         struct tm tm;
2372         int dir_fd;
2373         time_t t;
2374         struct dirent *dp;
2375         DIR *dirp;
2376         char *logfname, *logfnamebuf, *dir, *dirbuf;
2377
2378         t = -1;
2379
2380         if ((dirbuf = strdup(file)) == NULL) {
2381                 warn("strdup() of '%s'", file);
2382                 return (t);
2383         }
2384         dir = dirname(dirbuf);
2385         if ((logfnamebuf = strdup(file)) == NULL) {
2386                 warn("strdup() of '%s'", file);
2387                 free(dirbuf);
2388                 return (t);
2389         }
2390         logfname = basename(logfnamebuf);
2391         if (logfname[0] == '/') {
2392                 warnx("Invalid log filename '%s'", logfname);
2393                 goto out;
2394         }
2395
2396         if ((dirp = opendir(dir)) == NULL) {
2397                 warn("Cannot open log directory '%s'", dir);
2398                 goto out;
2399         }
2400         dir_fd = dirfd(dirp);
2401         /* Open the archive dir and find the most recent archive of logfname. */
2402         while ((dp = readdir(dirp)) != NULL) {
2403                 if (validate_old_timelog(dir_fd, dp, logfname, &tm) == 0)
2404                         continue;
2405
2406                 if (fstatat(dir_fd, dp->d_name, &sb, AT_SYMLINK_NOFOLLOW) == -1) {
2407                         warn("Cannot stat '%s'", file);
2408                         continue;
2409                 }
2410                 if (t < sb.st_mtime)
2411                         t = sb.st_mtime;
2412         }
2413         closedir(dirp);
2414
2415 out:
2416         free(dirbuf);
2417         free(logfnamebuf);
2418         return (t);
2419 }
2420
2421 /* Return the age in hours of the most recent archive of the logfile. */
2422 static int
2423 age_old_log(const char *file)
2424 {
2425         struct stat sb;
2426         const char *logfile_suffix;
2427         static unsigned int suffix_maxlen = 0;
2428         char *tmp;
2429         size_t tmpsiz;
2430         time_t mtime;
2431         int c;
2432
2433         if (suffix_maxlen == 0) {
2434                 for (c = 0; c < COMPRESS_TYPES; c++)
2435                         suffix_maxlen = MAX(suffix_maxlen,
2436                             strlen(compress_type[c].suffix));
2437         }
2438
2439         tmpsiz = MAXPATHLEN + sizeof(".0") + suffix_maxlen + 1;
2440         tmp = alloca(tmpsiz);
2441
2442         if (archtodir) {
2443                 char *p;
2444
2445                 /* build name of archive directory into tmp */
2446                 if (*archdirname == '/') {      /* absolute */
2447                         strlcpy(tmp, archdirname, tmpsiz);
2448                 } else {        /* relative */
2449                         /* get directory part of logfile */
2450                         strlcpy(tmp, file, tmpsiz);
2451                         if ((p = strrchr(tmp, '/')) == NULL)
2452                                 tmp[0] = '\0';
2453                         else
2454                                 *(p + 1) = '\0';
2455                         strlcat(tmp, archdirname, tmpsiz);
2456                 }
2457
2458                 strlcat(tmp, "/", tmpsiz);
2459
2460                 /* get filename part of logfile */
2461                 if ((p = strrchr(file, '/')) == NULL)
2462                         strlcat(tmp, file, tmpsiz);
2463                 else
2464                         strlcat(tmp, p + 1, tmpsiz);
2465         } else {
2466                 (void) strlcpy(tmp, file, tmpsiz);
2467         }
2468
2469         if (timefnamefmt != NULL) {
2470                 mtime = mtime_old_timelog(tmp);
2471                 if (mtime == -1)
2472                         return (-1);
2473         } else {
2474                 strlcat(tmp, ".0", tmpsiz);
2475                 logfile_suffix = get_logfile_suffix(tmp);
2476                 if (logfile_suffix == NULL)
2477                         return (-1);
2478                 (void) strlcat(tmp, logfile_suffix, tmpsiz);
2479                 if (stat(tmp, &sb) < 0)
2480                         return (-1);
2481                 mtime = sb.st_mtime;
2482         }
2483
2484         return ((int)(ptimeget_secs(timenow) - mtime + 1800) / 3600);
2485 }
2486
2487 /* Skip Over Blanks */
2488 static char *
2489 sob(char *p)
2490 {
2491         while (p && *p && isspace(*p))
2492                 p++;
2493         return (p);
2494 }
2495
2496 /* Skip Over Non-Blanks */
2497 static char *
2498 son(char *p)
2499 {
2500         while (p && *p && !isspace(*p))
2501                 p++;
2502         return (p);
2503 }
2504
2505 /* Check if string is actually a number */
2506 static int
2507 isnumberstr(const char *string)
2508 {
2509         while (*string) {
2510                 if (!isdigitch(*string++))
2511                         return (0);
2512         }
2513         return (1);
2514 }
2515
2516 /* Check if string contains a glob */
2517 static int
2518 isglobstr(const char *string)
2519 {
2520         char chr;
2521
2522         while ((chr = *string++)) {
2523                 if (chr == '*' || chr == '?' || chr == '[')
2524                         return (1);
2525         }
2526         return (0);
2527 }
2528
2529 /*
2530  * Save the active log file under a new name.  A link to the new name
2531  * is the quick-and-easy way to do this.  If that fails (which it will
2532  * if the destination is on another partition), then make a copy of
2533  * the file to the new location.
2534  */
2535 static void
2536 savelog(char *from, char *to)
2537 {
2538         FILE *src, *dst;
2539         int c, res;
2540
2541         res = link(from, to);
2542         if (res == 0)
2543                 return;
2544
2545         if ((src = fopen(from, "r")) == NULL)
2546                 err(1, "can't fopen %s for reading", from);
2547         if ((dst = fopen(to, "w")) == NULL)
2548                 err(1, "can't fopen %s for writing", to);
2549
2550         while ((c = getc(src)) != EOF) {
2551                 if ((putc(c, dst)) == EOF)
2552                         err(1, "error writing to %s", to);
2553         }
2554
2555         if (ferror(src))
2556                 err(1, "error reading from %s", from);
2557         if ((fclose(src)) != 0)
2558                 err(1, "can't fclose %s", to);
2559         if ((fclose(dst)) != 0)
2560                 err(1, "can't fclose %s", from);
2561 }
2562
2563 /* create one or more directory components of a path */
2564 static void
2565 createdir(const struct conf_entry *ent, char *dirpart)
2566 {
2567         int res;
2568         char *s, *d;
2569         char mkdirpath[MAXPATHLEN];
2570         struct stat st;
2571
2572         s = dirpart;
2573         d = mkdirpath;
2574
2575         for (;;) {
2576                 *d++ = *s++;
2577                 if (*s != '/' && *s != '\0')
2578                         continue;
2579                 *d = '\0';
2580                 res = lstat(mkdirpath, &st);
2581                 if (res != 0) {
2582                         if (noaction) {
2583                                 printf("\tmkdir %s\n", mkdirpath);
2584                         } else {
2585                                 res = mkdir(mkdirpath, 0755);
2586                                 if (res != 0)
2587                                         err(1, "Error on mkdir(\"%s\") for -a",
2588                                             mkdirpath);
2589                         }
2590                 }
2591                 if (*s == '\0')
2592                         break;
2593         }
2594         if (verbose) {
2595                 if (ent->firstcreate)
2596                         printf("Created directory '%s' for new %s\n",
2597                             dirpart, ent->log);
2598                 else
2599                         printf("Created directory '%s' for -a\n", dirpart);
2600         }
2601 }
2602
2603 /*
2604  * Create a new log file, destroying any currently-existing version
2605  * of the log file in the process.  If the caller wants a backup copy
2606  * of the file to exist, they should call 'link(logfile,logbackup)'
2607  * before calling this routine.
2608  */
2609 void
2610 createlog(const struct conf_entry *ent)
2611 {
2612         int fd, failed;
2613         struct stat st;
2614         char *realfile, *slash, tempfile[MAXPATHLEN];
2615
2616         fd = -1;
2617         realfile = ent->log;
2618
2619         /*
2620          * If this log file is being created for the first time (-C option),
2621          * then it may also be true that the parent directory does not exist
2622          * yet.  Check, and create that directory if it is missing.
2623          */
2624         if (ent->firstcreate) {
2625                 strlcpy(tempfile, realfile, sizeof(tempfile));
2626                 slash = strrchr(tempfile, '/');
2627                 if (slash != NULL) {
2628                         *slash = '\0';
2629                         failed = stat(tempfile, &st);
2630                         if (failed && errno != ENOENT)
2631                                 err(1, "Error on stat(%s)", tempfile);
2632                         if (failed)
2633                                 createdir(ent, tempfile);
2634                         else if (!S_ISDIR(st.st_mode))
2635                                 errx(1, "%s exists but is not a directory",
2636                                     tempfile);
2637                 }
2638         }
2639
2640         /*
2641          * First create an unused filename, so it can be chown'ed and
2642          * chmod'ed before it is moved into the real location.  mkstemp
2643          * will create the file mode=600 & owned by us.  Note that all
2644          * temp files will have a suffix of '.z<something>'.
2645          */
2646         strlcpy(tempfile, realfile, sizeof(tempfile));
2647         strlcat(tempfile, ".zXXXXXX", sizeof(tempfile));
2648         if (noaction)
2649                 printf("\tmktemp %s\n", tempfile);
2650         else {
2651                 fd = mkstemp(tempfile);
2652                 if (fd < 0)
2653                         err(1, "can't mkstemp logfile %s", tempfile);
2654
2655                 /*
2656                  * Add status message to what will become the new log file.
2657                  */
2658                 if (!(ent->flags & CE_BINARY)) {
2659                         if (log_trim(tempfile, ent))
2660                                 err(1, "can't add status message to log");
2661                 }
2662         }
2663
2664         /* Change the owner/group, if we are supposed to */
2665         if (ent->uid != (uid_t)-1 || ent->gid != (gid_t)-1) {
2666                 if (noaction)
2667                         printf("\tchown %u:%u %s\n", ent->uid, ent->gid,
2668                             tempfile);
2669                 else {
2670                         failed = fchown(fd, ent->uid, ent->gid);
2671                         if (failed)
2672                                 err(1, "can't fchown temp file %s", tempfile);
2673                 }
2674         }
2675
2676         /* Turn on NODUMP if it was requested in the config-file. */
2677         if (ent->flags & CE_NODUMP) {
2678                 if (noaction)
2679                         printf("\tchflags nodump %s\n", tempfile);
2680                 else {
2681                         failed = fchflags(fd, UF_NODUMP);
2682                         if (failed) {
2683                                 warn("log_trim: fchflags(NODUMP)");
2684                         }
2685                 }
2686         }
2687
2688         /*
2689          * Note that if the real logfile still exists, and if the call
2690          * to rename() fails, then "neither the old file nor the new
2691          * file shall be changed or created" (to quote the standard).
2692          * If the call succeeds, then the file will be replaced without
2693          * any window where some other process might find that the file
2694          * did not exist.
2695          * XXX - ? It may be that for some error conditions, we could
2696          *      retry by first removing the realfile and then renaming.
2697          */
2698         if (noaction) {
2699                 printf("\tchmod %o %s\n", ent->permissions, tempfile);
2700                 printf("\tmv %s %s\n", tempfile, realfile);
2701         } else {
2702                 failed = fchmod(fd, ent->permissions);
2703                 if (failed)
2704                         err(1, "can't fchmod temp file '%s'", tempfile);
2705                 failed = rename(tempfile, realfile);
2706                 if (failed)
2707                         err(1, "can't mv %s to %s", tempfile, realfile);
2708         }
2709
2710         if (fd >= 0)
2711                 close(fd);
2712 }
2713
2714 /*
2715  * Change the attributes of a given filename to what was specified in
2716  * the newsyslog.conf entry.  This routine is only called for files
2717  * that newsyslog expects that it has created, and thus it is a fatal
2718  * error if this routine finds that the file does not exist.
2719  */
2720 static void
2721 change_attrs(const char *fname, const struct conf_entry *ent)
2722 {
2723         int failed;
2724
2725         if (noaction) {
2726                 printf("\tchmod %o %s\n", ent->permissions, fname);
2727
2728                 if (ent->uid != (uid_t)-1 || ent->gid != (gid_t)-1)
2729                         printf("\tchown %u:%u %s\n",
2730                             ent->uid, ent->gid, fname);
2731
2732                 if (ent->flags & CE_NODUMP)
2733                         printf("\tchflags nodump %s\n", fname);
2734                 return;
2735         }
2736
2737         failed = chmod(fname, ent->permissions);
2738         if (failed) {
2739                 if (errno != EPERM)
2740                         err(1, "chmod(%s) in change_attrs", fname);
2741                 warn("change_attrs couldn't chmod(%s)", fname);
2742         }
2743
2744         if (ent->uid != (uid_t)-1 || ent->gid != (gid_t)-1) {
2745                 failed = chown(fname, ent->uid, ent->gid);
2746                 if (failed)
2747                         warn("can't chown %s", fname);
2748         }
2749
2750         if (ent->flags & CE_NODUMP) {
2751                 failed = chflags(fname, UF_NODUMP);
2752                 if (failed)
2753                         warn("can't chflags %s NODUMP", fname);
2754         }
2755 }
2756
2757 /*
2758  * Parse a signal number or signal name. Returns the signal number parsed or -1
2759  * on failure.
2760  */
2761 static int
2762 parse_signal(const char *str)
2763 {
2764         int sig, i;
2765         const char *errstr;
2766
2767         sig = strtonum(str, 1, sys_nsig - 1, &errstr);
2768
2769         if (errstr == NULL)
2770                 return (sig);
2771         if (strncasecmp(str, "SIG", 3) == 0)
2772                 str += 3;
2773
2774         for (i = 1; i < sys_nsig; i++) {
2775                 if (strcasecmp(str, sys_signame[i]) == 0)
2776                         return (i);
2777         }
2778
2779         return (-1);
2780 }