Add support for -bP config
[exim.git] / src / src / readconf.c
1 /*************************************************
2 * Exim - an Internet mail transport agent *
3 *************************************************/
4
5 /* Copyright (c) University of Cambridge 1995 - 2015 */
6 /* See the file NOTICE for conditions of use and distribution. */
7
8 /* Functions for reading the configuration file, and for displaying
9 overall configuration values. Thanks to Brian Candler for the original
10 implementation of the conditional .ifdef etc. */
11
12 #include "exim.h"
13
14 static void fn_smtp_receive_timeout(const uschar * name, const uschar * str);
15 static void save_config_line(const uschar* line);
16 static void save_config_position(const uschar *file, int line);
17 static void print_config(BOOL admin);
18
19 #define CSTATE_STACK_SIZE 10
20
21
22 /* Structure for chain (stack) of .included files */
23
24 typedef struct config_file_item {
25 struct config_file_item *next;
26 uschar *filename;
27 FILE *file;
28 int lineno;
29 } config_file_item;
30
31 /* Structure for chain of configuration lines (-bP config) */
32
33 typedef struct config_line_item {
34 struct config_line_item *next;
35 uschar *line;
36 } config_line_item;
37
38 static config_line_item* config_lines;
39
40 /* Structure of table of conditional words and their state transitions */
41
42 typedef struct cond_item {
43 uschar *name;
44 int namelen;
45 int action1;
46 int action2;
47 int pushpop;
48 } cond_item;
49
50 /* Structure of table of syslog facility names and values */
51
52 typedef struct syslog_fac_item {
53 uschar *name;
54 int value;
55 } syslog_fac_item;
56
57 /* constants */
58 static const char * const hidden = "<value not displayable>";
59
60 /* Static variables */
61
62 static config_file_item *config_file_stack = NULL; /* For includes */
63
64 static uschar *syslog_facility_str = NULL;
65 static uschar next_section[24];
66 static uschar time_buffer[24];
67
68 /* State variables for conditional loading (.ifdef / .else / .endif) */
69
70 static int cstate = 0;
71 static int cstate_stack_ptr = -1;
72 static int cstate_stack[CSTATE_STACK_SIZE];
73
74 /* Table of state transitions for handling conditional inclusions. There are
75 four possible state transitions:
76
77 .ifdef true
78 .ifdef false
79 .elifdef true (or .else)
80 .elifdef false
81
82 .endif just causes the previous cstate to be popped off the stack */
83
84 static int next_cstate[3][4] =
85 {
86 /* State 0: reading from file, or reading until next .else or .endif */
87 { 0, 1, 2, 2 },
88 /* State 1: condition failed, skipping until next .else or .endif */
89 { 2, 2, 0, 1 },
90 /* State 2: skipping until .endif */
91 { 2, 2, 2, 2 },
92 };
93
94 /* Table of conditionals and the states to set. For each name, there are four
95 values: the length of the name (to save computing it each time), the state to
96 set if a macro was found in the line, the state to set if a macro was not found
97 in the line, and a stack manipulation setting which is:
98
99 -1 pull state value off the stack
100 0 don't alter the stack
101 +1 push value onto stack, before setting new state
102 */
103
104 static cond_item cond_list[] = {
105 { US"ifdef", 5, 0, 1, 1 },
106 { US"ifndef", 6, 1, 0, 1 },
107 { US"elifdef", 7, 2, 3, 0 },
108 { US"elifndef", 8, 3, 2, 0 },
109 { US"else", 4, 2, 2, 0 },
110 { US"endif", 5, 0, 0, -1 }
111 };
112
113 static int cond_list_size = sizeof(cond_list)/sizeof(cond_item);
114
115 /* Table of syslog facility names and their values */
116
117 static syslog_fac_item syslog_list[] = {
118 { US"mail", LOG_MAIL },
119 { US"user", LOG_USER },
120 { US"news", LOG_NEWS },
121 { US"uucp", LOG_UUCP },
122 { US"local0", LOG_LOCAL0 },
123 { US"local1", LOG_LOCAL1 },
124 { US"local2", LOG_LOCAL2 },
125 { US"local3", LOG_LOCAL3 },
126 { US"local4", LOG_LOCAL4 },
127 { US"local5", LOG_LOCAL5 },
128 { US"local6", LOG_LOCAL6 },
129 { US"local7", LOG_LOCAL7 },
130 { US"daemon", LOG_DAEMON }
131 };
132
133 static int syslog_list_size = sizeof(syslog_list)/sizeof(syslog_fac_item);
134
135
136
137
138 /*************************************************
139 * Main configuration options *
140 *************************************************/
141
142 /* The list of options that can be set in the main configuration file. This
143 must be in alphabetic order because it is searched by binary chop. */
144
145 static optionlist optionlist_config[] = {
146 { "*set_exim_group", opt_bool|opt_hidden, &exim_gid_set },
147 { "*set_exim_user", opt_bool|opt_hidden, &exim_uid_set },
148 { "*set_system_filter_group", opt_bool|opt_hidden, &system_filter_gid_set },
149 { "*set_system_filter_user", opt_bool|opt_hidden, &system_filter_uid_set },
150 { "accept_8bitmime", opt_bool, &accept_8bitmime },
151 { "acl_not_smtp", opt_stringptr, &acl_not_smtp },
152 #ifdef WITH_CONTENT_SCAN
153 { "acl_not_smtp_mime", opt_stringptr, &acl_not_smtp_mime },
154 #endif
155 { "acl_not_smtp_start", opt_stringptr, &acl_not_smtp_start },
156 { "acl_smtp_auth", opt_stringptr, &acl_smtp_auth },
157 { "acl_smtp_connect", opt_stringptr, &acl_smtp_connect },
158 { "acl_smtp_data", opt_stringptr, &acl_smtp_data },
159 #ifndef DISABLE_PRDR
160 { "acl_smtp_data_prdr", opt_stringptr, &acl_smtp_data_prdr },
161 #endif
162 #ifndef DISABLE_DKIM
163 { "acl_smtp_dkim", opt_stringptr, &acl_smtp_dkim },
164 #endif
165 { "acl_smtp_etrn", opt_stringptr, &acl_smtp_etrn },
166 { "acl_smtp_expn", opt_stringptr, &acl_smtp_expn },
167 { "acl_smtp_helo", opt_stringptr, &acl_smtp_helo },
168 { "acl_smtp_mail", opt_stringptr, &acl_smtp_mail },
169 { "acl_smtp_mailauth", opt_stringptr, &acl_smtp_mailauth },
170 #ifdef WITH_CONTENT_SCAN
171 { "acl_smtp_mime", opt_stringptr, &acl_smtp_mime },
172 #endif
173 { "acl_smtp_notquit", opt_stringptr, &acl_smtp_notquit },
174 { "acl_smtp_predata", opt_stringptr, &acl_smtp_predata },
175 { "acl_smtp_quit", opt_stringptr, &acl_smtp_quit },
176 { "acl_smtp_rcpt", opt_stringptr, &acl_smtp_rcpt },
177 #ifdef SUPPORT_TLS
178 { "acl_smtp_starttls", opt_stringptr, &acl_smtp_starttls },
179 #endif
180 { "acl_smtp_vrfy", opt_stringptr, &acl_smtp_vrfy },
181 { "admin_groups", opt_gidlist, &admin_groups },
182 { "allow_domain_literals", opt_bool, &allow_domain_literals },
183 { "allow_mx_to_ip", opt_bool, &allow_mx_to_ip },
184 { "allow_utf8_domains", opt_bool, &allow_utf8_domains },
185 { "auth_advertise_hosts", opt_stringptr, &auth_advertise_hosts },
186 { "auto_thaw", opt_time, &auto_thaw },
187 #ifdef WITH_CONTENT_SCAN
188 { "av_scanner", opt_stringptr, &av_scanner },
189 #endif
190 { "bi_command", opt_stringptr, &bi_command },
191 #ifdef EXPERIMENTAL_BRIGHTMAIL
192 { "bmi_config_file", opt_stringptr, &bmi_config_file },
193 #endif
194 { "bounce_message_file", opt_stringptr, &bounce_message_file },
195 { "bounce_message_text", opt_stringptr, &bounce_message_text },
196 { "bounce_return_body", opt_bool, &bounce_return_body },
197 { "bounce_return_message", opt_bool, &bounce_return_message },
198 { "bounce_return_size_limit", opt_mkint, &bounce_return_size_limit },
199 { "bounce_sender_authentication",opt_stringptr,&bounce_sender_authentication },
200 { "callout_domain_negative_expire", opt_time, &callout_cache_domain_negative_expire },
201 { "callout_domain_positive_expire", opt_time, &callout_cache_domain_positive_expire },
202 { "callout_negative_expire", opt_time, &callout_cache_negative_expire },
203 { "callout_positive_expire", opt_time, &callout_cache_positive_expire },
204 { "callout_random_local_part",opt_stringptr, &callout_random_local_part },
205 { "check_log_inodes", opt_int, &check_log_inodes },
206 { "check_log_space", opt_Kint, &check_log_space },
207 { "check_rfc2047_length", opt_bool, &check_rfc2047_length },
208 { "check_spool_inodes", opt_int, &check_spool_inodes },
209 { "check_spool_space", opt_Kint, &check_spool_space },
210 { "daemon_smtp_port", opt_stringptr|opt_hidden, &daemon_smtp_port },
211 { "daemon_smtp_ports", opt_stringptr, &daemon_smtp_port },
212 { "daemon_startup_retries", opt_int, &daemon_startup_retries },
213 { "daemon_startup_sleep", opt_time, &daemon_startup_sleep },
214 #ifdef EXPERIMENTAL_DCC
215 { "dcc_direct_add_header", opt_bool, &dcc_direct_add_header },
216 { "dccifd_address", opt_stringptr, &dccifd_address },
217 { "dccifd_options", opt_stringptr, &dccifd_options },
218 #endif
219 { "delay_warning", opt_timelist, &delay_warning },
220 { "delay_warning_condition", opt_stringptr, &delay_warning_condition },
221 { "deliver_drop_privilege", opt_bool, &deliver_drop_privilege },
222 { "deliver_queue_load_max", opt_fixed, &deliver_queue_load_max },
223 { "delivery_date_remove", opt_bool, &delivery_date_remove },
224 #ifdef ENABLE_DISABLE_FSYNC
225 { "disable_fsync", opt_bool, &disable_fsync },
226 #endif
227 { "disable_ipv6", opt_bool, &disable_ipv6 },
228 #ifndef DISABLE_DKIM
229 { "dkim_verify_signers", opt_stringptr, &dkim_verify_signers },
230 #endif
231 #ifdef EXPERIMENTAL_DMARC
232 { "dmarc_forensic_sender", opt_stringptr, &dmarc_forensic_sender },
233 { "dmarc_history_file", opt_stringptr, &dmarc_history_file },
234 { "dmarc_tld_file", opt_stringptr, &dmarc_tld_file },
235 #endif
236 { "dns_again_means_nonexist", opt_stringptr, &dns_again_means_nonexist },
237 { "dns_check_names_pattern", opt_stringptr, &check_dns_names_pattern },
238 { "dns_csa_search_limit", opt_int, &dns_csa_search_limit },
239 { "dns_csa_use_reverse", opt_bool, &dns_csa_use_reverse },
240 { "dns_dnssec_ok", opt_int, &dns_dnssec_ok },
241 { "dns_ipv4_lookup", opt_stringptr, &dns_ipv4_lookup },
242 { "dns_retrans", opt_time, &dns_retrans },
243 { "dns_retry", opt_int, &dns_retry },
244 { "dns_trust_aa", opt_stringptr, &dns_trust_aa },
245 { "dns_use_edns0", opt_int, &dns_use_edns0 },
246 /* This option is now a no-op, retained for compability */
247 { "drop_cr", opt_bool, &drop_cr },
248 /*********************************************************/
249 { "dsn_advertise_hosts", opt_stringptr, &dsn_advertise_hosts },
250 { "dsn_from", opt_stringptr, &dsn_from },
251 { "envelope_to_remove", opt_bool, &envelope_to_remove },
252 { "errors_copy", opt_stringptr, &errors_copy },
253 { "errors_reply_to", opt_stringptr, &errors_reply_to },
254 #ifdef EXPERIMENTAL_EVENT
255 { "event_action", opt_stringptr, &event_action },
256 #endif
257 { "exim_group", opt_gid, &exim_gid },
258 { "exim_path", opt_stringptr, &exim_path },
259 { "exim_user", opt_uid, &exim_uid },
260 { "extra_local_interfaces", opt_stringptr, &extra_local_interfaces },
261 { "extract_addresses_remove_arguments", opt_bool, &extract_addresses_remove_arguments },
262 { "finduser_retries", opt_int, &finduser_retries },
263 { "freeze_tell", opt_stringptr, &freeze_tell },
264 { "gecos_name", opt_stringptr, &gecos_name },
265 { "gecos_pattern", opt_stringptr, &gecos_pattern },
266 #ifdef SUPPORT_TLS
267 { "gnutls_allow_auto_pkcs11", opt_bool, &gnutls_allow_auto_pkcs11 },
268 { "gnutls_compat_mode", opt_bool, &gnutls_compat_mode },
269 /* These three gnutls_require_* options stopped working in Exim 4.80 */
270 /* From 4.83 we log a warning; a future relase will remove them */
271 { "gnutls_require_kx", opt_stringptr, &gnutls_require_kx },
272 { "gnutls_require_mac", opt_stringptr, &gnutls_require_mac },
273 { "gnutls_require_protocols", opt_stringptr, &gnutls_require_proto },
274 #endif
275 { "header_line_maxsize", opt_int, &header_line_maxsize },
276 { "header_maxsize", opt_int, &header_maxsize },
277 { "headers_charset", opt_stringptr, &headers_charset },
278 { "helo_accept_junk_hosts", opt_stringptr, &helo_accept_junk_hosts },
279 { "helo_allow_chars", opt_stringptr, &helo_allow_chars },
280 { "helo_lookup_domains", opt_stringptr, &helo_lookup_domains },
281 { "helo_try_verify_hosts", opt_stringptr, &helo_try_verify_hosts },
282 { "helo_verify_hosts", opt_stringptr, &helo_verify_hosts },
283 { "hold_domains", opt_stringptr, &hold_domains },
284 { "host_lookup", opt_stringptr, &host_lookup },
285 { "host_lookup_order", opt_stringptr, &host_lookup_order },
286 { "host_reject_connection", opt_stringptr, &host_reject_connection },
287 { "hosts_connection_nolog", opt_stringptr, &hosts_connection_nolog },
288 { "hosts_treat_as_local", opt_stringptr, &hosts_treat_as_local },
289 #ifdef LOOKUP_IBASE
290 { "ibase_servers", opt_stringptr, &ibase_servers },
291 #endif
292 { "ignore_bounce_errors_after", opt_time, &ignore_bounce_errors_after },
293 { "ignore_fromline_hosts", opt_stringptr, &ignore_fromline_hosts },
294 { "ignore_fromline_local", opt_bool, &ignore_fromline_local },
295 { "keep_malformed", opt_time, &keep_malformed },
296 #ifdef LOOKUP_LDAP
297 { "ldap_ca_cert_dir", opt_stringptr, &eldap_ca_cert_dir },
298 { "ldap_ca_cert_file", opt_stringptr, &eldap_ca_cert_file },
299 { "ldap_cert_file", opt_stringptr, &eldap_cert_file },
300 { "ldap_cert_key", opt_stringptr, &eldap_cert_key },
301 { "ldap_cipher_suite", opt_stringptr, &eldap_cipher_suite },
302 { "ldap_default_servers", opt_stringptr, &eldap_default_servers },
303 { "ldap_require_cert", opt_stringptr, &eldap_require_cert },
304 { "ldap_start_tls", opt_bool, &eldap_start_tls },
305 { "ldap_version", opt_int, &eldap_version },
306 #endif
307 { "local_from_check", opt_bool, &local_from_check },
308 { "local_from_prefix", opt_stringptr, &local_from_prefix },
309 { "local_from_suffix", opt_stringptr, &local_from_suffix },
310 { "local_interfaces", opt_stringptr, &local_interfaces },
311 { "local_scan_timeout", opt_time, &local_scan_timeout },
312 { "local_sender_retain", opt_bool, &local_sender_retain },
313 { "localhost_number", opt_stringptr, &host_number_string },
314 { "log_file_path", opt_stringptr, &log_file_path },
315 { "log_selector", opt_stringptr, &log_selector_string },
316 { "log_timezone", opt_bool, &log_timezone },
317 { "lookup_open_max", opt_int, &lookup_open_max },
318 { "max_username_length", opt_int, &max_username_length },
319 { "message_body_newlines", opt_bool, &message_body_newlines },
320 { "message_body_visible", opt_mkint, &message_body_visible },
321 { "message_id_header_domain", opt_stringptr, &message_id_domain },
322 { "message_id_header_text", opt_stringptr, &message_id_text },
323 { "message_logs", opt_bool, &message_logs },
324 { "message_size_limit", opt_stringptr, &message_size_limit },
325 #ifdef SUPPORT_MOVE_FROZEN_MESSAGES
326 { "move_frozen_messages", opt_bool, &move_frozen_messages },
327 #endif
328 { "mua_wrapper", opt_bool, &mua_wrapper },
329 #ifdef LOOKUP_MYSQL
330 { "mysql_servers", opt_stringptr, &mysql_servers },
331 #endif
332 { "never_users", opt_uidlist, &never_users },
333 #ifdef SUPPORT_TLS
334 { "openssl_options", opt_stringptr, &openssl_options },
335 #endif
336 #ifdef LOOKUP_ORACLE
337 { "oracle_servers", opt_stringptr, &oracle_servers },
338 #endif
339 { "percent_hack_domains", opt_stringptr, &percent_hack_domains },
340 #ifdef EXIM_PERL
341 { "perl_at_start", opt_bool, &opt_perl_at_start },
342 { "perl_startup", opt_stringptr, &opt_perl_startup },
343 #endif
344 #ifdef LOOKUP_PGSQL
345 { "pgsql_servers", opt_stringptr, &pgsql_servers },
346 #endif
347 { "pid_file_path", opt_stringptr, &pid_file_path },
348 { "pipelining_advertise_hosts", opt_stringptr, &pipelining_advertise_hosts },
349 #ifndef DISABLE_PRDR
350 { "prdr_enable", opt_bool, &prdr_enable },
351 #endif
352 { "preserve_message_logs", opt_bool, &preserve_message_logs },
353 { "primary_hostname", opt_stringptr, &primary_hostname },
354 { "print_topbitchars", opt_bool, &print_topbitchars },
355 { "process_log_path", opt_stringptr, &process_log_path },
356 { "prod_requires_admin", opt_bool, &prod_requires_admin },
357 #ifdef EXPERIMENTAL_PROXY
358 { "proxy_required_hosts", opt_stringptr, &proxy_required_hosts },
359 #endif
360 { "qualify_domain", opt_stringptr, &qualify_domain_sender },
361 { "qualify_recipient", opt_stringptr, &qualify_domain_recipient },
362 { "queue_domains", opt_stringptr, &queue_domains },
363 { "queue_list_requires_admin",opt_bool, &queue_list_requires_admin },
364 { "queue_only", opt_bool, &queue_only },
365 { "queue_only_file", opt_stringptr, &queue_only_file },
366 { "queue_only_load", opt_fixed, &queue_only_load },
367 { "queue_only_load_latch", opt_bool, &queue_only_load_latch },
368 { "queue_only_override", opt_bool, &queue_only_override },
369 { "queue_run_in_order", opt_bool, &queue_run_in_order },
370 { "queue_run_max", opt_int, &queue_run_max },
371 { "queue_smtp_domains", opt_stringptr, &queue_smtp_domains },
372 { "receive_timeout", opt_time, &receive_timeout },
373 { "received_header_text", opt_stringptr, &received_header_text },
374 { "received_headers_max", opt_int, &received_headers_max },
375 { "recipient_unqualified_hosts", opt_stringptr, &recipient_unqualified_hosts },
376 { "recipients_max", opt_int, &recipients_max },
377 { "recipients_max_reject", opt_bool, &recipients_max_reject },
378 #ifdef EXPERIMENTAL_REDIS
379 { "redis_servers", opt_stringptr, &redis_servers },
380 #endif
381 { "remote_max_parallel", opt_int, &remote_max_parallel },
382 { "remote_sort_domains", opt_stringptr, &remote_sort_domains },
383 { "retry_data_expire", opt_time, &retry_data_expire },
384 { "retry_interval_max", opt_time, &retry_interval_max },
385 { "return_path_remove", opt_bool, &return_path_remove },
386 { "return_size_limit", opt_mkint|opt_hidden, &bounce_return_size_limit },
387 { "rfc1413_hosts", opt_stringptr, &rfc1413_hosts },
388 { "rfc1413_query_timeout", opt_time, &rfc1413_query_timeout },
389 { "sender_unqualified_hosts", opt_stringptr, &sender_unqualified_hosts },
390 { "slow_lookup_log", opt_int, &slow_lookup_log },
391 { "smtp_accept_keepalive", opt_bool, &smtp_accept_keepalive },
392 { "smtp_accept_max", opt_int, &smtp_accept_max },
393 { "smtp_accept_max_nonmail", opt_int, &smtp_accept_max_nonmail },
394 { "smtp_accept_max_nonmail_hosts", opt_stringptr, &smtp_accept_max_nonmail_hosts },
395 { "smtp_accept_max_per_connection", opt_int, &smtp_accept_max_per_connection },
396 { "smtp_accept_max_per_host", opt_stringptr, &smtp_accept_max_per_host },
397 { "smtp_accept_queue", opt_int, &smtp_accept_queue },
398 { "smtp_accept_queue_per_connection", opt_int, &smtp_accept_queue_per_connection },
399 { "smtp_accept_reserve", opt_int, &smtp_accept_reserve },
400 { "smtp_active_hostname", opt_stringptr, &raw_active_hostname },
401 { "smtp_banner", opt_stringptr, &smtp_banner },
402 { "smtp_check_spool_space", opt_bool, &smtp_check_spool_space },
403 { "smtp_connect_backlog", opt_int, &smtp_connect_backlog },
404 { "smtp_enforce_sync", opt_bool, &smtp_enforce_sync },
405 { "smtp_etrn_command", opt_stringptr, &smtp_etrn_command },
406 { "smtp_etrn_serialize", opt_bool, &smtp_etrn_serialize },
407 { "smtp_load_reserve", opt_fixed, &smtp_load_reserve },
408 { "smtp_max_synprot_errors", opt_int, &smtp_max_synprot_errors },
409 { "smtp_max_unknown_commands",opt_int, &smtp_max_unknown_commands },
410 { "smtp_ratelimit_hosts", opt_stringptr, &smtp_ratelimit_hosts },
411 { "smtp_ratelimit_mail", opt_stringptr, &smtp_ratelimit_mail },
412 { "smtp_ratelimit_rcpt", opt_stringptr, &smtp_ratelimit_rcpt },
413 { "smtp_receive_timeout", opt_func, &fn_smtp_receive_timeout },
414 { "smtp_reserve_hosts", opt_stringptr, &smtp_reserve_hosts },
415 { "smtp_return_error_details",opt_bool, &smtp_return_error_details },
416 #ifdef EXPERIMENTAL_INTERNATIONAL
417 { "smtputf8_advertise_hosts", opt_stringptr, &smtputf8_advertise_hosts },
418 #endif
419 #ifdef WITH_CONTENT_SCAN
420 { "spamd_address", opt_stringptr, &spamd_address },
421 #endif
422 #ifdef EXPERIMENTAL_SPF
423 { "spf_guess", opt_stringptr, &spf_guess },
424 #endif
425 { "split_spool_directory", opt_bool, &split_spool_directory },
426 { "spool_directory", opt_stringptr, &spool_directory },
427 #ifdef LOOKUP_SQLITE
428 { "sqlite_lock_timeout", opt_int, &sqlite_lock_timeout },
429 #endif
430 #ifdef EXPERIMENTAL_SRS
431 { "srs_config", opt_stringptr, &srs_config },
432 { "srs_hashlength", opt_int, &srs_hashlength },
433 { "srs_hashmin", opt_int, &srs_hashmin },
434 { "srs_maxage", opt_int, &srs_maxage },
435 { "srs_secrets", opt_stringptr, &srs_secrets },
436 { "srs_usehash", opt_bool, &srs_usehash },
437 { "srs_usetimestamp", opt_bool, &srs_usetimestamp },
438 #endif
439 { "strict_acl_vars", opt_bool, &strict_acl_vars },
440 { "strip_excess_angle_brackets", opt_bool, &strip_excess_angle_brackets },
441 { "strip_trailing_dot", opt_bool, &strip_trailing_dot },
442 { "syslog_duplication", opt_bool, &syslog_duplication },
443 { "syslog_facility", opt_stringptr, &syslog_facility_str },
444 { "syslog_processname", opt_stringptr, &syslog_processname },
445 { "syslog_timestamp", opt_bool, &syslog_timestamp },
446 { "system_filter", opt_stringptr, &system_filter },
447 { "system_filter_directory_transport", opt_stringptr,&system_filter_directory_transport },
448 { "system_filter_file_transport",opt_stringptr,&system_filter_file_transport },
449 { "system_filter_group", opt_gid, &system_filter_gid },
450 { "system_filter_pipe_transport",opt_stringptr,&system_filter_pipe_transport },
451 { "system_filter_reply_transport",opt_stringptr,&system_filter_reply_transport },
452 { "system_filter_user", opt_uid, &system_filter_uid },
453 { "tcp_nodelay", opt_bool, &tcp_nodelay },
454 #ifdef USE_TCP_WRAPPERS
455 { "tcp_wrappers_daemon_name", opt_stringptr, &tcp_wrappers_daemon_name },
456 #endif
457 { "timeout_frozen_after", opt_time, &timeout_frozen_after },
458 { "timezone", opt_stringptr, &timezone_string },
459 { "tls_advertise_hosts", opt_stringptr, &tls_advertise_hosts },
460 #ifdef SUPPORT_TLS
461 { "tls_certificate", opt_stringptr, &tls_certificate },
462 { "tls_crl", opt_stringptr, &tls_crl },
463 { "tls_dh_max_bits", opt_int, &tls_dh_max_bits },
464 { "tls_dhparam", opt_stringptr, &tls_dhparam },
465 { "tls_eccurve", opt_stringptr, &tls_eccurve },
466 # ifndef DISABLE_OCSP
467 { "tls_ocsp_file", opt_stringptr, &tls_ocsp_file },
468 # endif
469 { "tls_on_connect_ports", opt_stringptr, &tls_in.on_connect_ports },
470 { "tls_privatekey", opt_stringptr, &tls_privatekey },
471 { "tls_remember_esmtp", opt_bool, &tls_remember_esmtp },
472 { "tls_require_ciphers", opt_stringptr, &tls_require_ciphers },
473 { "tls_try_verify_hosts", opt_stringptr, &tls_try_verify_hosts },
474 { "tls_verify_certificates", opt_stringptr, &tls_verify_certificates },
475 { "tls_verify_hosts", opt_stringptr, &tls_verify_hosts },
476 #endif
477 { "trusted_groups", opt_gidlist, &trusted_groups },
478 { "trusted_users", opt_uidlist, &trusted_users },
479 { "unknown_login", opt_stringptr, &unknown_login },
480 { "unknown_username", opt_stringptr, &unknown_username },
481 { "untrusted_set_sender", opt_stringptr, &untrusted_set_sender },
482 { "uucp_from_pattern", opt_stringptr, &uucp_from_pattern },
483 { "uucp_from_sender", opt_stringptr, &uucp_from_sender },
484 { "warn_message_file", opt_stringptr, &warn_message_file },
485 { "write_rejectlog", opt_bool, &write_rejectlog }
486 };
487
488 static int optionlist_config_size =
489 sizeof(optionlist_config)/sizeof(optionlist);
490
491
492
493 /*************************************************
494 * Find the name of an option *
495 *************************************************/
496
497 /* This function is to aid debugging. Various functions take arguments that are
498 pointer variables in the options table or in option tables for various drivers.
499 For debugging output, it is useful to be able to find the name of the option
500 which is currently being processed. This function finds it, if it exists, by
501 searching the table(s).
502
503 Arguments: a value that is presumed to be in the table above
504 Returns: the option name, or an empty string
505 */
506
507 uschar *
508 readconf_find_option(void *p)
509 {
510 int i;
511 router_instance *r;
512 transport_instance *t;
513
514 for (i = 0; i < optionlist_config_size; i++)
515 if (p == optionlist_config[i].value) return US optionlist_config[i].name;
516
517 for (r = routers; r != NULL; r = r->next)
518 {
519 router_info *ri = r->info;
520 for (i = 0; i < *ri->options_count; i++)
521 {
522 if ((ri->options[i].type & opt_mask) != opt_stringptr) continue;
523 if (p == (char *)(r->options_block) + (long int)(ri->options[i].value))
524 return US ri->options[i].name;
525 }
526 }
527
528 for (t = transports; t != NULL; t = t->next)
529 {
530 transport_info *ti = t->info;
531 for (i = 0; i < *ti->options_count; i++)
532 {
533 optionlist * op = &ti->options[i];
534 if ((op->type & opt_mask) != opt_stringptr) continue;
535 if (p == ( op->type & opt_public
536 ? (char *)t
537 : (char *)t->options_block
538 )
539 + (long int)op->value)
540 return US op->name;
541 }
542 }
543
544 return US"";
545 }
546
547
548
549
550 /*************************************************
551 * Deal with an assignment to a macro *
552 *************************************************/
553
554 /* This function is called when a line that starts with an upper case letter is
555 encountered. The argument "line" should contain a complete logical line, and
556 start with the first letter of the macro name. The macro name and the
557 replacement text are extracted and stored. Redefinition of existing,
558 non-command line, macros is permitted using '==' instead of '='.
559
560 Arguments:
561 s points to the start of the logical line
562
563 Returns: nothing
564 */
565
566 static void
567 read_macro_assignment(uschar *s)
568 {
569 uschar name[64];
570 int namelen = 0;
571 BOOL redef = FALSE;
572 macro_item *m;
573 macro_item *mlast = NULL;
574
575 while (isalnum(*s) || *s == '_')
576 {
577 if (namelen >= sizeof(name) - 1)
578 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN,
579 "macro name too long (maximum is " SIZE_T_FMT " characters)", sizeof(name) - 1);
580 name[namelen++] = *s++;
581 }
582 name[namelen] = 0;
583
584 while (isspace(*s)) s++;
585 if (*s++ != '=')
586 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN, "malformed macro definition");
587
588 if (*s == '=')
589 {
590 redef = TRUE;
591 s++;
592 }
593 while (isspace(*s)) s++;
594
595 /* If an existing macro of the same name was defined on the command line, we
596 just skip this definition. It's an error to attempt to redefine a macro without
597 redef set to TRUE, or to redefine a macro when it hasn't been defined earlier.
598 It is also an error to define a macro whose name begins with the name of a
599 previously defined macro. Note: it is documented that the other way round
600 works. */
601
602 for (m = macros; m != NULL; m = m->next)
603 {
604 int len = Ustrlen(m->name);
605
606 if (Ustrcmp(m->name, name) == 0)
607 {
608 if (!m->command_line && !redef)
609 log_write(0, LOG_CONFIG|LOG_PANIC_DIE, "macro \"%s\" is already "
610 "defined (use \"==\" if you want to redefine it", name);
611 break;
612 }
613
614 if (len < namelen && Ustrstr(name, m->name) != NULL)
615 log_write(0, LOG_CONFIG|LOG_PANIC_DIE, "\"%s\" cannot be defined as "
616 "a macro because previously defined macro \"%s\" is a substring",
617 name, m->name);
618
619 /* We cannot have this test, because it is documented that a substring
620 macro is permitted (there is even an example).
621 *
622 * if (len > namelen && Ustrstr(m->name, name) != NULL)
623 * log_write(0, LOG_CONFIG|LOG_PANIC_DIE, "\"%s\" cannot be defined as "
624 * "a macro because it is a substring of previously defined macro \"%s\"",
625 * name, m->name);
626 */
627
628 mlast = m;
629 }
630
631 /* Check for an overriding command-line definition. */
632
633 if (m != NULL && m->command_line) return;
634
635 /* Redefinition must refer to an existing macro. */
636
637 if (redef)
638 {
639 if (m == NULL)
640 log_write(0, LOG_CONFIG|LOG_PANIC_DIE, "can't redefine an undefined macro "
641 "\"%s\"", name);
642 }
643
644 /* We have a new definition. The macro_item structure includes a final vector
645 called "name" which is one byte long. Thus, adding "namelen" gives us enough
646 room to store the "name" string. */
647
648 else
649 {
650 m = store_get(sizeof(macro_item) + namelen);
651 if (macros == NULL) macros = m; else mlast->next = m;
652 Ustrncpy(m->name, name, namelen);
653 m->name[namelen] = 0;
654 m->next = NULL;
655 m->command_line = FALSE;
656 }
657
658 /* Set the value of the new or redefined macro */
659
660 m->replacement = string_copy(s);
661 }
662
663
664
665
666
667 /*************************************************
668 * Read configuration line *
669 *************************************************/
670
671 /* A logical line of text is read from the configuration file into the big
672 buffer, taking account of macros, .includes, and continuations. The size of
673 big_buffer is increased if necessary. The count of configuration lines is
674 maintained. Physical input lines starting with # (ignoring leading white space,
675 and after macro replacement) and empty logical lines are always ignored.
676 Leading and trailing spaces are removed.
677
678 If we hit a line of the form "begin xxxx", the xxxx is placed in the
679 next_section vector, and the function returns NULL, indicating the end of a
680 configuration section. On end-of-file, NULL is returned with next_section
681 empty.
682
683 Arguments: none
684
685 Returns: a pointer to the first non-blank in the line,
686 or NULL if eof or end of section is reached
687 */
688
689 static uschar *
690 get_config_line(void)
691 {
692 int startoffset = 0; /* To first non-blank char in logical line */
693 int len = 0; /* Of logical line so far */
694 int newlen;
695 uschar *s, *ss;
696 macro_item *m;
697 BOOL macro_found;
698
699 /* Loop for handling continuation lines, skipping comments, and dealing with
700 .include files. */
701
702 for (;;)
703 {
704 if (Ufgets(big_buffer+len, big_buffer_size-len, config_file) == NULL)
705 {
706 if (config_file_stack != NULL) /* EOF inside .include */
707 {
708 (void)fclose(config_file);
709 config_file = config_file_stack->file;
710 config_filename = config_file_stack->filename;
711 config_lineno = config_file_stack->lineno;
712 config_file_stack = config_file_stack->next;
713 if (config_lines)
714 save_config_position(config_filename, config_lineno);
715 continue;
716 }
717
718 /* EOF at top level */
719
720 if (cstate_stack_ptr >= 0)
721 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN,
722 "Unexpected end of configuration file: .endif missing");
723
724 if (len != 0) break; /* EOF after continuation */
725 next_section[0] = 0; /* EOF at start of logical line */
726 return NULL;
727 }
728
729 config_lineno++;
730 newlen = len + Ustrlen(big_buffer + len);
731
732 if (config_lines && config_lineno == 1)
733 save_config_position(config_filename, config_lineno);
734
735 /* Handle pathologically long physical lines - yes, it did happen - by
736 extending big_buffer at this point. The code also copes with very long
737 logical lines. */
738
739 while (newlen == big_buffer_size - 1 && big_buffer[newlen - 1] != '\n')
740 {
741 uschar *newbuffer;
742 big_buffer_size += BIG_BUFFER_SIZE;
743 newbuffer = store_malloc(big_buffer_size);
744
745 /* This use of strcpy is OK because we know that the string in the old
746 buffer is shorter than the new buffer. */
747
748 Ustrcpy(newbuffer, big_buffer);
749 store_free(big_buffer);
750 big_buffer = newbuffer;
751 if (Ufgets(big_buffer+newlen, big_buffer_size-newlen, config_file) == NULL)
752 break;
753 newlen += Ustrlen(big_buffer + newlen);
754 }
755
756 /* Find the true start of the physical line - leading spaces are always
757 ignored. */
758
759 ss = big_buffer + len;
760 while (isspace(*ss)) ss++;
761
762 /* Process the physical line for macros. If this is the start of the logical
763 line, skip over initial text at the start of the line if it starts with an
764 upper case character followed by a sequence of name characters and an equals
765 sign, because that is the definition of a new macro, and we don't do
766 replacement therein. */
767
768 s = ss;
769 if (len == 0 && isupper(*s))
770 {
771 while (isalnum(*s) || *s == '_') s++;
772 while (isspace(*s)) s++;
773 if (*s != '=') s = ss; /* Not a macro definition */
774 }
775
776 /* For each defined macro, scan the line (from after XXX= if present),
777 replacing all occurrences of the macro. */
778
779 macro_found = FALSE;
780 for (m = macros; m != NULL; m = m->next)
781 {
782 uschar *p, *pp;
783 uschar *t = s;
784
785 while ((p = Ustrstr(t, m->name)) != NULL)
786 {
787 int moveby;
788 int namelen = Ustrlen(m->name);
789 int replen = Ustrlen(m->replacement);
790
791 /* Expand the buffer if necessary */
792
793 while (newlen - namelen + replen + 1 > big_buffer_size)
794 {
795 int newsize = big_buffer_size + BIG_BUFFER_SIZE;
796 uschar *newbuffer = store_malloc(newsize);
797 memcpy(newbuffer, big_buffer, newlen + 1);
798 p = newbuffer + (p - big_buffer);
799 s = newbuffer + (s - big_buffer);
800 ss = newbuffer + (ss - big_buffer);
801 t = newbuffer + (t - big_buffer);
802 big_buffer_size = newsize;
803 store_free(big_buffer);
804 big_buffer = newbuffer;
805 }
806
807 /* Shuffle the remaining characters up or down in the buffer before
808 copying in the replacement text. Don't rescan the replacement for this
809 same macro. */
810
811 pp = p + namelen;
812 moveby = replen - namelen;
813 if (moveby != 0)
814 {
815 memmove(p + replen, pp, (big_buffer + newlen) - pp + 1);
816 newlen += moveby;
817 }
818 Ustrncpy(p, m->replacement, replen);
819 t = p + replen;
820 macro_found = TRUE;
821 }
822 }
823
824 /* An empty macro replacement at the start of a line could mean that ss no
825 longer points to the first non-blank character. */
826
827 while (isspace(*ss)) ss++;
828
829 /* Check for comment lines - these are physical lines. */
830
831 if (*ss == '#') continue;
832
833 /* Handle conditionals, which are also applied to physical lines. Conditions
834 are of the form ".ifdef ANYTEXT" and are treated as true if any macro
835 expansion occured on the rest of the line. A preliminary test for the leading
836 '.' saves effort on most lines. */
837
838 if (*ss == '.')
839 {
840 int i;
841
842 /* Search the list of conditional directives */
843
844 for (i = 0; i < cond_list_size; i++)
845 {
846 int n;
847 cond_item *c = cond_list+i;
848 if (Ustrncmp(ss+1, c->name, c->namelen) != 0) continue;
849
850 /* The following character must be white space or end of string */
851
852 n = ss[1 + c->namelen];
853 if (n != ' ' && n != 't' && n != '\n' && n != 0) break;
854
855 /* .ifdef and .ifndef push the current state onto the stack, then set
856 a new one from the table. Stack overflow is an error */
857
858 if (c->pushpop > 0)
859 {
860 if (cstate_stack_ptr >= CSTATE_STACK_SIZE - 1)
861 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN,
862 ".%s nested too deeply", c->name);
863 cstate_stack[++cstate_stack_ptr] = cstate;
864 cstate = next_cstate[cstate][macro_found? c->action1 : c->action2];
865 }
866
867 /* For any of the others, stack underflow is an error. The next state
868 comes either from the stack (.endif) or from the table. */
869
870 else
871 {
872 if (cstate_stack_ptr < 0)
873 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN,
874 ".%s without matching .ifdef", c->name);
875 cstate = (c->pushpop < 0)? cstate_stack[cstate_stack_ptr--] :
876 next_cstate[cstate][macro_found? c->action1 : c->action2];
877 }
878
879 /* Having dealt with a directive, break the loop */
880
881 break;
882 }
883
884 /* If we have handled a conditional directive, continue with the next
885 physical line. Otherwise, fall through. */
886
887 if (i < cond_list_size) continue;
888 }
889
890 /* If the conditional state is not 0 (actively using these lines), ignore
891 this input line. */
892
893 if (cstate != 0) continue; /* Conditional skip */
894
895 /* Handle .include lines - these are also physical lines. */
896
897 if (Ustrncmp(ss, ".include", 8) == 0 &&
898 (isspace(ss[8]) ||
899 (Ustrncmp(ss+8, "_if_exists", 10) == 0 && isspace(ss[18]))))
900 {
901 uschar *t;
902 int include_if_exists = isspace(ss[8])? 0 : 10;
903 config_file_item *save;
904 struct stat statbuf;
905
906 ss += 9 + include_if_exists;
907 while (isspace(*ss)) ss++;
908 t = ss + Ustrlen(ss);
909 while (t > ss && isspace(t[-1])) t--;
910 if (*ss == '\"' && t[-1] == '\"')
911 {
912 ss++;
913 t--;
914 }
915 *t = 0;
916
917 if (*ss != '/')
918 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN, ".include specifies a non-"
919 "absolute path \"%s\"", ss);
920
921 if (include_if_exists != 0 && (Ustat(ss, &statbuf) != 0)) continue;
922
923 if (config_lines)
924 save_config_position(config_filename, config_lineno);
925 save = store_get(sizeof(config_file_item));
926 save->next = config_file_stack;
927 config_file_stack = save;
928 save->file = config_file;
929 save->filename = config_filename;
930 save->lineno = config_lineno;
931
932 config_file = Ufopen(ss, "rb");
933 if (config_file == NULL)
934 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN, "failed to open included "
935 "configuration file %s", ss);
936 config_filename = string_copy(ss);
937 config_lineno = 0;
938 continue;
939 }
940
941 /* If this is the start of the logical line, remember where the non-blank
942 data starts. Otherwise shuffle down continuation lines to remove leading
943 white space. */
944
945 if (len == 0)
946 startoffset = ss - big_buffer;
947 else
948 {
949 s = big_buffer + len;
950 if (ss > s)
951 {
952 memmove(s, ss, (newlen - len) - (ss - s) + 1);
953 newlen -= ss - s;
954 }
955 }
956
957 /* Accept the new addition to the line. Remove trailing white space. */
958
959 len = newlen;
960 while (len > 0 && isspace(big_buffer[len-1])) len--;
961 big_buffer[len] = 0;
962
963 /* We are done if the line does not end in backslash and contains some data.
964 Empty logical lines are ignored. For continuations, remove the backslash and
965 go round the loop to read the continuation line. */
966
967 if (len > 0)
968 {
969 if (big_buffer[len-1] != '\\') break; /* End of logical line */
970 big_buffer[--len] = 0; /* Remove backslash */
971 }
972 } /* Loop for reading multiple physical lines */
973
974 /* We now have a logical line. Test for the end of a configuration section (or,
975 more accurately, for the start of the next section). Place the name of the next
976 section in next_section, and return NULL. If the name given is longer than
977 next_section, truncate it. It will be unrecognized later, because all the known
978 section names do fit. Leave space for pluralizing. */
979
980 s = big_buffer + startoffset; /* First non-space character */
981
982 if (config_lines)
983 save_config_line(s);
984
985 if (strncmpic(s, US"begin ", 6) == 0)
986 {
987 s += 6;
988 while (isspace(*s)) s++;
989 if (big_buffer + len - s > sizeof(next_section) - 2)
990 s[sizeof(next_section) - 2] = 0;
991 Ustrcpy(next_section, s);
992 return NULL;
993 }
994
995 /* Return the first non-blank character. */
996
997 return s;
998 }
999
1000
1001
1002 /*************************************************
1003 * Read a name *
1004 *************************************************/
1005
1006 /* The yield is the pointer to the next uschar. Names longer than the
1007 output space are silently truncated. This function is also used from acl.c when
1008 parsing ACLs.
1009
1010 Arguments:
1011 name where to put the name
1012 len length of name
1013 s input pointer
1014
1015 Returns: new input pointer
1016 */
1017
1018 uschar *
1019 readconf_readname(uschar *name, int len, uschar *s)
1020 {
1021 int p = 0;
1022 while (isspace(*s)) s++;
1023 if (isalpha(*s))
1024 {
1025 while (isalnum(*s) || *s == '_')
1026 {
1027 if (p < len-1) name[p++] = *s;
1028 s++;
1029 }
1030 }
1031 name[p] = 0;
1032 while (isspace(*s)) s++;
1033 return s;
1034 }
1035
1036
1037
1038
1039 /*************************************************
1040 * Read a time value *
1041 *************************************************/
1042
1043 /* This function is also called from outside, to read argument
1044 time values. The format of a time value is:
1045
1046 [<n>w][<n>d][<n>h][<n>m][<n>s]
1047
1048 as long as at least one is present. If a format error is encountered,
1049 return a negative value. The value must be terminated by the given
1050 terminator.
1051
1052 Arguments:
1053 s input pointer
1054 terminator required terminating character
1055 return_msec if TRUE, allow fractional seconds and return milliseconds
1056
1057 Returns: the time value, or -1 on syntax error
1058 value is seconds if return_msec is FALSE
1059 value is milliseconds if return_msec is TRUE
1060 */
1061
1062 int
1063 readconf_readtime(const uschar *s, int terminator, BOOL return_msec)
1064 {
1065 int yield = 0;
1066 for (;;)
1067 {
1068 int value, count;
1069 double fraction;
1070
1071 if (!isdigit(*s)) return -1;
1072 (void)sscanf(CCS s, "%d%n", &value, &count);
1073 s += count;
1074
1075 switch (*s)
1076 {
1077 case 'w': value *= 7;
1078 case 'd': value *= 24;
1079 case 'h': value *= 60;
1080 case 'm': value *= 60;
1081 case 's': s++;
1082 break;
1083
1084 case '.':
1085 if (!return_msec) return -1;
1086 (void)sscanf(CCS s, "%lf%n", &fraction, &count);
1087 s += count;
1088 if (*s++ != 's') return -1;
1089 yield += (int)(fraction * 1000.0);
1090 break;
1091
1092 default: return -1;
1093 }
1094
1095 if (return_msec) value *= 1000;
1096 yield += value;
1097 if (*s == terminator) return yield;
1098 }
1099 /* Control never reaches here. */
1100 }
1101
1102
1103
1104 /*************************************************
1105 * Read a fixed point value *
1106 *************************************************/
1107
1108 /* The value is returned *1000
1109
1110 Arguments:
1111 s input pointer
1112 terminator required terminator
1113
1114 Returns: the value, or -1 on error
1115 */
1116
1117 static int
1118 readconf_readfixed(const uschar *s, int terminator)
1119 {
1120 int yield = 0;
1121 int value, count;
1122 if (!isdigit(*s)) return -1;
1123 (void)sscanf(CS s, "%d%n", &value, &count);
1124 s += count;
1125 yield = value * 1000;
1126 if (*s == '.')
1127 {
1128 int m = 100;
1129 while (isdigit((*(++s))))
1130 {
1131 yield += (*s - '0') * m;
1132 m /= 10;
1133 }
1134 }
1135
1136 return (*s == terminator)? yield : (-1);
1137 }
1138
1139
1140
1141 /*************************************************
1142 * Find option in list *
1143 *************************************************/
1144
1145 /* The lists are always in order, so binary chop can be used.
1146
1147 Arguments:
1148 name the option name to search for
1149 ol the first entry in the option list
1150 last one more than the offset of the last entry in the option list
1151
1152 Returns: pointer to an option entry, or NULL if not found
1153 */
1154
1155 static optionlist *
1156 find_option(uschar *name, optionlist *ol, int last)
1157 {
1158 int first = 0;
1159 while (last > first)
1160 {
1161 int middle = (first + last)/2;
1162 int c = Ustrcmp(name, ol[middle].name);
1163 if (c == 0) return ol + middle;
1164 else if (c > 0) first = middle + 1;
1165 else last = middle;
1166 }
1167 return NULL;
1168 }
1169
1170
1171
1172 /*************************************************
1173 * Find a set flag in option list *
1174 *************************************************/
1175
1176 /* Because some versions of Unix make no restrictions on the values of uids and
1177 gids (even negative ones), we cannot represent "unset" by a special value.
1178 There is therefore a separate boolean variable for each one indicating whether
1179 a value is set or not. This function returns a pointer to the boolean, given
1180 the original option name. It is a major disaster if the flag cannot be found.
1181
1182 Arguments:
1183 name the name of the uid or gid option
1184 oltop points to the start of the relevant option list
1185 last one more than the offset of the last item in the option list
1186 data_block NULL when reading main options => data values in the option
1187 list are absolute addresses; otherwise they are byte offsets
1188 in data_block (used for driver options)
1189
1190 Returns: a pointer to the boolean flag.
1191 */
1192
1193 static BOOL *
1194 get_set_flag(uschar *name, optionlist *oltop, int last, void *data_block)
1195 {
1196 optionlist *ol;
1197 uschar name2[64];
1198 sprintf(CS name2, "*set_%.50s", name);
1199 ol = find_option(name2, oltop, last);
1200 if (ol == NULL) log_write(0, LOG_MAIN|LOG_PANIC_DIE,
1201 "Exim internal error: missing set flag for %s", name);
1202 return (data_block == NULL)? (BOOL *)(ol->value) :
1203 (BOOL *)((uschar *)data_block + (long int)(ol->value));
1204 }
1205
1206
1207
1208
1209 /*************************************************
1210 * Output extra characters message and die *
1211 *************************************************/
1212
1213 /* Called when an option line has junk on the end. Sometimes this is because
1214 the sysadmin thinks comments are permitted.
1215
1216 Arguments:
1217 s points to the extra characters
1218 t1..t3 strings to insert in the log message
1219
1220 Returns: doesn't return; dies
1221 */
1222
1223 static void
1224 extra_chars_error(const uschar *s, const uschar *t1, const uschar *t2, const uschar *t3)
1225 {
1226 uschar *comment = US"";
1227 if (*s == '#') comment = US" (# is comment only at line start)";
1228 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN,
1229 "extra characters follow %s%s%s%s", t1, t2, t3, comment);
1230 }
1231
1232
1233
1234 /*************************************************
1235 * Read rewrite information *
1236 *************************************************/
1237
1238 /* Each line of rewrite information contains:
1239
1240 . A complete address in the form user@domain, possibly with
1241 leading * for each part; or alternatively, a regex.
1242
1243 . A replacement string (which will be expanded).
1244
1245 . An optional sequence of one-letter flags, indicating which
1246 headers etc. to apply this rule to.
1247
1248 All this is decoded and placed into a control block. The OR of the flags is
1249 maintained in a common word.
1250
1251 Arguments:
1252 p points to the string that makes up the rule
1253 existflags points to the overall flag word
1254 isglobal TRUE if reading global rewrite rules
1255
1256 Returns: the control block for the parsed rule.
1257 */
1258
1259 static rewrite_rule *
1260 readconf_one_rewrite(const uschar *p, int *existflags, BOOL isglobal)
1261 {
1262 rewrite_rule *next = store_get(sizeof(rewrite_rule));
1263
1264 next->next = NULL;
1265 next->key = string_dequote(&p);
1266
1267 while (isspace(*p)) p++;
1268 if (*p == 0)
1269 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN,
1270 "missing rewrite replacement string");
1271
1272 next->flags = 0;
1273 next->replacement = string_dequote(&p);
1274
1275 while (*p != 0) switch (*p++)
1276 {
1277 case ' ': case '\t': break;
1278
1279 case 'q': next->flags |= rewrite_quit; break;
1280 case 'w': next->flags |= rewrite_whole; break;
1281
1282 case 'h': next->flags |= rewrite_all_headers; break;
1283 case 's': next->flags |= rewrite_sender; break;
1284 case 'f': next->flags |= rewrite_from; break;
1285 case 't': next->flags |= rewrite_to; break;
1286 case 'c': next->flags |= rewrite_cc; break;
1287 case 'b': next->flags |= rewrite_bcc; break;
1288 case 'r': next->flags |= rewrite_replyto; break;
1289
1290 case 'E': next->flags |= rewrite_all_envelope; break;
1291 case 'F': next->flags |= rewrite_envfrom; break;
1292 case 'T': next->flags |= rewrite_envto; break;
1293
1294 case 'Q': next->flags |= rewrite_qualify; break;
1295 case 'R': next->flags |= rewrite_repeat; break;
1296
1297 case 'S':
1298 next->flags |= rewrite_smtp;
1299 if (next->key[0] != '^' && Ustrncmp(next->key, "\\N^", 3) != 0)
1300 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN,
1301 "rewrite rule has the S flag but is not a regular expression");
1302 break;
1303
1304 default:
1305 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN,
1306 "unknown rewrite flag character '%c' "
1307 "(could be missing quotes round replacement item)", p[-1]);
1308 break;
1309 }
1310
1311 /* If no action flags are set, set all the "normal" rewrites. */
1312
1313 if ((next->flags & (rewrite_all | rewrite_smtp)) == 0)
1314 next->flags |= isglobal? rewrite_all : rewrite_all_headers;
1315
1316 /* Remember which exist, for optimization, and return the rule */
1317
1318 *existflags |= next->flags;
1319 return next;
1320 }
1321
1322
1323
1324
1325 /*************************************************
1326 * Read global rewrite information *
1327 *************************************************/
1328
1329 /* Each line is a single rewrite rule; it is parsed into a control block
1330 by readconf_one_rewrite(), and its flags are ORed into the global flag
1331 word rewrite_existflags. */
1332
1333 void
1334 readconf_rewrites(void)
1335 {
1336 rewrite_rule **chain = &global_rewrite_rules;
1337 uschar *p;
1338
1339 while ((p = get_config_line()) != NULL)
1340 {
1341 rewrite_rule *next = readconf_one_rewrite(p, &rewrite_existflags, TRUE);
1342 *chain = next;
1343 chain = &(next->next);
1344 }
1345 }
1346
1347
1348
1349 /*************************************************
1350 * Read a string *
1351 *************************************************/
1352
1353 /* Strings are read into the normal store pool. As long we aren't too
1354 near the end of the current block, the string will just use what is necessary
1355 on the top of the stacking pool, because string_cat() uses the extension
1356 mechanism.
1357
1358 Argument:
1359 s the rest of the input line
1360 name the option name (for errors)
1361
1362 Returns: pointer to the string
1363 */
1364
1365 static uschar *
1366 read_string(const uschar *s, const uschar *name)
1367 {
1368 uschar *yield;
1369 const uschar *ss;
1370
1371 if (*s != '\"') return string_copy(s);
1372
1373 ss = s;
1374 yield = string_dequote(&s);
1375
1376 if (s == ss+1 || s[-1] != '\"')
1377 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN,
1378 "missing quote at end of string value for %s", name);
1379
1380 if (*s != 0) extra_chars_error(s, US"string value for ", name, US"");
1381
1382 return yield;
1383 }
1384
1385
1386 /*************************************************
1387 * Custom-handler options *
1388 *************************************************/
1389 static void
1390 fn_smtp_receive_timeout(const uschar * name, const uschar * str)
1391 {
1392 if (*str == '$')
1393 smtp_receive_timeout_s = string_copy(str);
1394 else
1395 {
1396 /* "smtp_receive_timeout", opt_time, &smtp_receive_timeout */
1397 smtp_receive_timeout = readconf_readtime(str, 0, FALSE);
1398 if (smtp_receive_timeout < 0)
1399 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN, "invalid time value for %s",
1400 name);
1401 }
1402 }
1403
1404 /*************************************************
1405 * Handle option line *
1406 *************************************************/
1407
1408 /* This function is called from several places to process a line containing the
1409 setting of an option. The first argument is the line to be decoded; it has been
1410 checked not to be empty and not to start with '#'. Trailing newlines and white
1411 space have been removed. The second argument is a pointer to the list of
1412 variable names that are to be recognized, together with their types and
1413 locations, and the third argument gives the number of entries in the list.
1414
1415 The fourth argument is a pointer to a data block. If it is NULL, then the data
1416 values in the options list are absolute addresses. Otherwise, they are byte
1417 offsets in the data block.
1418
1419 String option data may continue onto several lines; this function reads further
1420 data from config_file if necessary.
1421
1422 The yield of this function is normally zero. If a string continues onto
1423 multiple lines, then the data value is permitted to be followed by a comma
1424 or a semicolon (for use in drivers) and the yield is that character.
1425
1426 Arguments:
1427 buffer contains the configuration line to be handled
1428 oltop points to the start of the relevant option list
1429 last one more than the offset of the last item in the option list
1430 data_block NULL when reading main options => data values in the option
1431 list are absolute addresses; otherwise they are byte offsets
1432 in data_block when they have opt_public set; otherwise
1433 they are byte offsets in data_block->options_block.
1434 unknown_txt format string to use in panic message for unknown option;
1435 must contain %s for option name
1436 if given as NULL, don't panic on unknown option
1437
1438 Returns: TRUE if an option was read successfully,
1439 FALSE false for an unknown option if unknown_txt == NULL,
1440 otherwise panic and die on an unknown option
1441 */
1442
1443 static BOOL
1444 readconf_handle_option(uschar *buffer, optionlist *oltop, int last,
1445 void *data_block, uschar *unknown_txt)
1446 {
1447 int ptr = 0;
1448 int offset = 0;
1449 int n, count, type, value;
1450 int issecure = 0;
1451 uid_t uid;
1452 gid_t gid;
1453 BOOL boolvalue = TRUE;
1454 BOOL freesptr = TRUE;
1455 optionlist *ol, *ol2;
1456 struct passwd *pw;
1457 void *reset_point;
1458 int intbase = 0;
1459 uschar *inttype = US"";
1460 uschar *sptr;
1461 uschar *s = buffer;
1462 uschar *saved_condition, *strtemp;
1463 uschar **str_target;
1464 uschar name[64];
1465 uschar name2[64];
1466
1467 /* There may be leading spaces; thereafter, we expect an option name starting
1468 with a letter. */
1469
1470 while (isspace(*s)) s++;
1471 if (!isalpha(*s))
1472 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN, "option setting expected: %s", s);
1473
1474 /* Read the name of the option, and skip any subsequent white space. If
1475 it turns out that what we read was "hide", set the flag indicating that
1476 this is a secure option, and loop to read the next word. */
1477
1478 for (n = 0; n < 2; n++)
1479 {
1480 while (isalnum(*s) || *s == '_')
1481 {
1482 if (ptr < sizeof(name)-1) name[ptr++] = *s;
1483 s++;
1484 }
1485 name[ptr] = 0;
1486 while (isspace(*s)) s++;
1487 if (Ustrcmp(name, "hide") != 0) break;
1488 issecure = opt_secure;
1489 ptr = 0;
1490 }
1491
1492 /* Deal with "no_" or "not_" here for booleans */
1493
1494 if (Ustrncmp(name, "no_", 3) == 0)
1495 {
1496 boolvalue = FALSE;
1497 offset = 3;
1498 }
1499
1500 if (Ustrncmp(name, "not_", 4) == 0)
1501 {
1502 boolvalue = FALSE;
1503 offset = 4;
1504 }
1505
1506 /* Search the list for the given name. A non-existent name, or an option that
1507 is set twice, is a disaster. */
1508
1509 ol = find_option(name + offset, oltop, last);
1510
1511 if (ol == NULL)
1512 {
1513 if (unknown_txt == NULL) return FALSE;
1514 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN, CS unknown_txt, name);
1515 }
1516
1517 if ((ol->type & opt_set) && !(ol->type & (opt_rep_con | opt_rep_str)))
1518 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN,
1519 "\"%s\" option set for the second time", name);
1520
1521 ol->type |= opt_set | issecure;
1522 type = ol->type & opt_mask;
1523
1524 /* Types with data values must be followed by '='; the "no[t]_" prefix
1525 applies only to boolean values. */
1526
1527 if (type < opt_bool || type > opt_bool_last)
1528 {
1529 if (offset != 0)
1530 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN,
1531 "negation prefix applied to a non-boolean option");
1532 if (*s == 0)
1533 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN,
1534 "unexpected end of line (data missing) after %s", name);
1535 if (*s != '=')
1536 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN, "missing \"=\" after %s", name);
1537 }
1538
1539 /* If a boolean wasn't preceded by "no[t]_" it can be followed by = and
1540 true/false/yes/no, or, in the case of opt_expand_bool, a general string that
1541 ultimately expands to one of those values. */
1542
1543 else if (*s != 0 && (offset != 0 || *s != '='))
1544 extra_chars_error(s, US"boolean option ", name, US"");
1545
1546 /* Skip white space after = */
1547
1548 if (*s == '=') while (isspace((*(++s))));
1549
1550 /* If there is a data block and the opt_public flag is not set, change
1551 the data block pointer to the private options block. */
1552
1553 if (data_block != NULL && (ol->type & opt_public) == 0)
1554 data_block = (void *)(((driver_instance *)data_block)->options_block);
1555
1556 /* Now get the data according to the type. */
1557
1558 switch (type)
1559 {
1560 /* If a string value is not enclosed in quotes, it consists of
1561 the rest of the current line, verbatim. Otherwise, string escapes
1562 are processed.
1563
1564 A transport is specified as a string, which is then looked up in the
1565 list of transports. A search type is specified as one of a number of
1566 known strings.
1567
1568 A set or rewrite rules for a driver is specified as a string, which is
1569 then parsed into a suitable chain of control blocks.
1570
1571 Uids and gids are specified as strings which are then looked up in the
1572 passwd file. Lists of uids and gids are similarly specified as colon-
1573 separated strings. */
1574
1575 case opt_stringptr:
1576 case opt_uid:
1577 case opt_gid:
1578 case opt_expand_uid:
1579 case opt_expand_gid:
1580 case opt_uidlist:
1581 case opt_gidlist:
1582 case opt_rewrite:
1583
1584 reset_point = sptr = read_string(s, name);
1585
1586 /* Having read a string, we now have several different ways of using it,
1587 depending on the data type, so do another switch. If keeping the actual
1588 string is not required (because it is interpreted), freesptr is set TRUE,
1589 and at the end we reset the pool. */
1590
1591 switch (type)
1592 {
1593 /* If this was a string, set the variable to point to the new string,
1594 and set the flag so its store isn't reclaimed. If it was a list of rewrite
1595 rules, we still keep the string (for printing), and parse the rules into a
1596 control block and flags word. */
1597
1598 case opt_stringptr:
1599 if (data_block == NULL)
1600 str_target = (uschar **)(ol->value);
1601 else
1602 str_target = (uschar **)((uschar *)data_block + (long int)(ol->value));
1603 if (ol->type & opt_rep_con)
1604 {
1605 /* We already have a condition, we're conducting a crude hack to let
1606 multiple condition rules be chained together, despite storing them in
1607 text form. */
1608 saved_condition = *str_target;
1609 strtemp = string_sprintf("${if and{{bool_lax{%s}}{bool_lax{%s}}}}",
1610 saved_condition, sptr);
1611 *str_target = string_copy_malloc(strtemp);
1612 /* TODO(pdp): there is a memory leak here and just below
1613 when we set 3 or more conditions; I still don't
1614 understand the store mechanism enough to know
1615 what's the safe way to free content from an earlier store.
1616 AFAICT, stores stack, so freeing an early stored item also stores
1617 all data alloc'd after it. If we knew conditions were adjacent,
1618 we could survive that, but we don't. So I *think* we need to take
1619 another bit from opt_type to indicate "malloced"; this seems like
1620 quite a hack, especially for this one case. It also means that
1621 we can't ever reclaim the store from the *first* condition.
1622
1623 Because we only do this once, near process start-up, I'm prepared to
1624 let this slide for the time being, even though it rankles. */
1625 }
1626 else if (ol->type & opt_rep_str)
1627 {
1628 uschar sep_o = Ustrncmp(name, "headers_add", 11)==0 ? '\n' : ':';
1629 int sep_i = -(int)sep_o;
1630 const uschar * list = sptr;
1631 uschar * s;
1632 uschar * list_o = *str_target;
1633
1634 while ((s = string_nextinlist(&list, &sep_i, NULL, 0)))
1635 list_o = string_append_listele(list_o, sep_o, s);
1636 if (list_o)
1637 *str_target = string_copy_malloc(list_o);
1638 }
1639 else
1640 {
1641 *str_target = sptr;
1642 freesptr = FALSE;
1643 }
1644 break;
1645
1646 case opt_rewrite:
1647 if (data_block == NULL)
1648 *((uschar **)(ol->value)) = sptr;
1649 else
1650 *((uschar **)((uschar *)data_block + (long int)(ol->value))) = sptr;
1651 freesptr = FALSE;
1652 if (type == opt_rewrite)
1653 {
1654 int sep = 0;
1655 int *flagptr;
1656 uschar *p = sptr;
1657 rewrite_rule **chain;
1658 optionlist *ol3;
1659
1660 sprintf(CS name2, "*%.50s_rules", name);
1661 ol2 = find_option(name2, oltop, last);
1662 sprintf(CS name2, "*%.50s_flags", name);
1663 ol3 = find_option(name2, oltop, last);
1664
1665 if (ol2 == NULL || ol3 == NULL)
1666 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN,
1667 "rewrite rules not available for driver");
1668
1669 if (data_block == NULL)
1670 {
1671 chain = (rewrite_rule **)(ol2->value);
1672 flagptr = (int *)(ol3->value);
1673 }
1674 else
1675 {
1676 chain = (rewrite_rule **)((uschar *)data_block + (long int)(ol2->value));
1677 flagptr = (int *)((uschar *)data_block + (long int)(ol3->value));
1678 }
1679
1680 while ((p = string_nextinlist(CUSS &sptr, &sep, big_buffer, BIG_BUFFER_SIZE)))
1681 {
1682 rewrite_rule *next = readconf_one_rewrite(p, flagptr, FALSE);
1683 *chain = next;
1684 chain = &(next->next);
1685 }
1686
1687 if ((*flagptr & (rewrite_all_envelope | rewrite_smtp)) != 0)
1688 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN, "rewrite rule specifies a "
1689 "non-header rewrite - not allowed at transport time -");
1690 }
1691 break;
1692
1693 /* If it was an expanded uid, see if there is any expansion to be
1694 done by checking for the presence of a $ character. If there is, save it
1695 in the corresponding *expand_user option field. Otherwise, fall through
1696 to treat it as a fixed uid. Ensure mutual exclusivity of the two kinds
1697 of data. */
1698
1699 case opt_expand_uid:
1700 sprintf(CS name2, "*expand_%.50s", name);
1701 ol2 = find_option(name2, oltop, last);
1702 if (ol2 != NULL)
1703 {
1704 uschar *ss = (Ustrchr(sptr, '$') != NULL)? sptr : NULL;
1705
1706 if (data_block == NULL)
1707 *((uschar **)(ol2->value)) = ss;
1708 else
1709 *((uschar **)((uschar *)data_block + (long int)(ol2->value))) = ss;
1710
1711 if (ss != NULL)
1712 {
1713 *(get_set_flag(name, oltop, last, data_block)) = FALSE;
1714 freesptr = FALSE;
1715 break;
1716 }
1717 }
1718
1719 /* Look up a fixed uid, and also make use of the corresponding gid
1720 if a passwd entry is returned and the gid has not been set. */
1721
1722 case opt_uid:
1723 if (!route_finduser(sptr, &pw, &uid))
1724 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN, "user %s was not found", sptr);
1725 if (data_block == NULL)
1726 *((uid_t *)(ol->value)) = uid;
1727 else
1728 *((uid_t *)((uschar *)data_block + (long int)(ol->value))) = uid;
1729
1730 /* Set the flag indicating a fixed value is set */
1731
1732 *(get_set_flag(name, oltop, last, data_block)) = TRUE;
1733
1734 /* Handle matching gid if we have a passwd entry: done by finding the
1735 same name with terminating "user" changed to "group"; if not found,
1736 ignore. Also ignore if the value is already set. */
1737
1738 if (pw == NULL) break;
1739 Ustrcpy(name+Ustrlen(name)-4, "group");
1740 ol2 = find_option(name, oltop, last);
1741 if (ol2 != NULL && ((ol2->type & opt_mask) == opt_gid ||
1742 (ol2->type & opt_mask) == opt_expand_gid))
1743 {
1744 BOOL *set_flag = get_set_flag(name, oltop, last, data_block);
1745 if (! *set_flag)
1746 {
1747 if (data_block == NULL)
1748 *((gid_t *)(ol2->value)) = pw->pw_gid;
1749 else
1750 *((gid_t *)((uschar *)data_block + (long int)(ol2->value))) = pw->pw_gid;
1751 *set_flag = TRUE;
1752 }
1753 }
1754 break;
1755
1756 /* If it was an expanded gid, see if there is any expansion to be
1757 done by checking for the presence of a $ character. If there is, save it
1758 in the corresponding *expand_user option field. Otherwise, fall through
1759 to treat it as a fixed gid. Ensure mutual exclusivity of the two kinds
1760 of data. */
1761
1762 case opt_expand_gid:
1763 sprintf(CS name2, "*expand_%.50s", name);
1764 ol2 = find_option(name2, oltop, last);
1765 if (ol2 != NULL)
1766 {
1767 uschar *ss = (Ustrchr(sptr, '$') != NULL)? sptr : NULL;
1768
1769 if (data_block == NULL)
1770 *((uschar **)(ol2->value)) = ss;
1771 else
1772 *((uschar **)((uschar *)data_block + (long int)(ol2->value))) = ss;
1773
1774 if (ss != NULL)
1775 {
1776 *(get_set_flag(name, oltop, last, data_block)) = FALSE;
1777 freesptr = FALSE;
1778 break;
1779 }
1780 }
1781
1782 /* Handle freestanding gid */
1783
1784 case opt_gid:
1785 if (!route_findgroup(sptr, &gid))
1786 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN, "group %s was not found", sptr);
1787 if (data_block == NULL)
1788 *((gid_t *)(ol->value)) = gid;
1789 else
1790 *((gid_t *)((uschar *)data_block + (long int)(ol->value))) = gid;
1791 *(get_set_flag(name, oltop, last, data_block)) = TRUE;
1792 break;
1793
1794 /* If it was a uid list, look up each individual entry, and build
1795 a vector of uids, with a count in the first element. Put the vector
1796 in malloc store so we can free the string. (We are reading into
1797 permanent store already.) */
1798
1799 case opt_uidlist:
1800 {
1801 int count = 1;
1802 uid_t *list;
1803 int ptr = 0;
1804 const uschar *p;
1805 const uschar *op = expand_string (sptr);
1806
1807 if (op == NULL)
1808 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN, "failed to expand %s: %s",
1809 name, expand_string_message);
1810
1811 p = op;
1812 if (*p != 0) count++;
1813 while (*p != 0) if (*p++ == ':' && *p != 0) count++;
1814 list = store_malloc(count*sizeof(uid_t));
1815 list[ptr++] = (uid_t)(count - 1);
1816
1817 if (data_block == NULL)
1818 *((uid_t **)(ol->value)) = list;
1819 else
1820 *((uid_t **)((uschar *)data_block + (long int)(ol->value))) = list;
1821
1822 p = op;
1823 while (count-- > 1)
1824 {
1825 int sep = 0;
1826 (void)string_nextinlist(&p, &sep, big_buffer, BIG_BUFFER_SIZE);
1827 if (!route_finduser(big_buffer, NULL, &uid))
1828 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN, "user %s was not found",
1829 big_buffer);
1830 list[ptr++] = uid;
1831 }
1832 }
1833 break;
1834
1835 /* If it was a gid list, look up each individual entry, and build
1836 a vector of gids, with a count in the first element. Put the vector
1837 in malloc store so we can free the string. (We are reading into permanent
1838 store already.) */
1839
1840 case opt_gidlist:
1841 {
1842 int count = 1;
1843 gid_t *list;
1844 int ptr = 0;
1845 const uschar *p;
1846 const uschar *op = expand_string (sptr);
1847
1848 if (op == NULL)
1849 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN, "failed to expand %s: %s",
1850 name, expand_string_message);
1851
1852 p = op;
1853 if (*p != 0) count++;
1854 while (*p != 0) if (*p++ == ':' && *p != 0) count++;
1855 list = store_malloc(count*sizeof(gid_t));
1856 list[ptr++] = (gid_t)(count - 1);
1857
1858 if (data_block == NULL)
1859 *((gid_t **)(ol->value)) = list;
1860 else
1861 *((gid_t **)((uschar *)data_block + (long int)(ol->value))) = list;
1862
1863 p = op;
1864 while (count-- > 1)
1865 {
1866 int sep = 0;
1867 (void)string_nextinlist(&p, &sep, big_buffer, BIG_BUFFER_SIZE);
1868 if (!route_findgroup(big_buffer, &gid))
1869 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN, "group %s was not found",
1870 big_buffer);
1871 list[ptr++] = gid;
1872 }
1873 }
1874 break;
1875 }
1876
1877 /* Release store if the value of the string doesn't need to be kept. */
1878
1879 if (freesptr) store_reset(reset_point);
1880 break;
1881
1882 /* Expanded boolean: if no characters follow, or if there are no dollar
1883 characters, this is a fixed-valued boolean, and we fall through. Otherwise,
1884 save the string for later expansion in the alternate place. */
1885
1886 case opt_expand_bool:
1887 if (*s != 0 && Ustrchr(s, '$') != 0)
1888 {
1889 sprintf(CS name2, "*expand_%.50s", name);
1890 ol2 = find_option(name2, oltop, last);
1891 if (ol2 != NULL)
1892 {
1893 reset_point = sptr = read_string(s, name);
1894 if (data_block == NULL)
1895 *((uschar **)(ol2->value)) = sptr;
1896 else
1897 *((uschar **)((uschar *)data_block + (long int)(ol2->value))) = sptr;
1898 freesptr = FALSE;
1899 break;
1900 }
1901 }
1902 /* Fall through */
1903
1904 /* Boolean: if no characters follow, the value is boolvalue. Otherwise
1905 look for yes/not/true/false. Some booleans are stored in a single bit in
1906 a single int. There's a special fudge for verify settings; without a suffix
1907 they set both xx_sender and xx_recipient. The table points to the sender
1908 value; search subsequently for the recipient. There's another special case:
1909 opt_bool_set also notes when a boolean has been set. */
1910
1911 case opt_bool:
1912 case opt_bit:
1913 case opt_bool_verify:
1914 case opt_bool_set:
1915 if (*s != 0)
1916 {
1917 s = readconf_readname(name2, 64, s);
1918 if (strcmpic(name2, US"true") == 0 || strcmpic(name2, US"yes") == 0)
1919 boolvalue = TRUE;
1920 else if (strcmpic(name2, US"false") == 0 || strcmpic(name2, US"no") == 0)
1921 boolvalue = FALSE;
1922 else log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN,
1923 "\"%s\" is not a valid value for the \"%s\" option", name2, name);
1924 if (*s != 0) extra_chars_error(s, string_sprintf("\"%s\" ", name2),
1925 US"for boolean option ", name);
1926 }
1927
1928 /* Handle single-bit type. */
1929
1930 if (type == opt_bit)
1931 {
1932 int bit = 1 << ((ol->type >> 16) & 31);
1933 int *ptr = (data_block == NULL)?
1934 (int *)(ol->value) :
1935 (int *)((uschar *)data_block + (long int)ol->value);
1936 if (boolvalue) *ptr |= bit; else *ptr &= ~bit;
1937 break;
1938 }
1939
1940 /* Handle full BOOL types */
1941
1942 if (data_block == NULL)
1943 *((BOOL *)(ol->value)) = boolvalue;
1944 else
1945 *((BOOL *)((uschar *)data_block + (long int)(ol->value))) = boolvalue;
1946
1947 /* Verify fudge */
1948
1949 if (type == opt_bool_verify)
1950 {
1951 sprintf(CS name2, "%.50s_recipient", name + offset);
1952 ol2 = find_option(name2, oltop, last);
1953 if (ol2 != NULL)
1954 {
1955 if (data_block == NULL)
1956 *((BOOL *)(ol2->value)) = boolvalue;
1957 else
1958 *((BOOL *)((uschar *)data_block + (long int)(ol2->value))) = boolvalue;
1959 }
1960 }
1961
1962 /* Note that opt_bool_set type is set, if there is somewhere to do so */
1963
1964 else if (type == opt_bool_set)
1965 {
1966 sprintf(CS name2, "*set_%.50s", name + offset);
1967 ol2 = find_option(name2, oltop, last);
1968 if (ol2 != NULL)
1969 {
1970 if (data_block == NULL)
1971 *((BOOL *)(ol2->value)) = TRUE;
1972 else
1973 *((BOOL *)((uschar *)data_block + (long int)(ol2->value))) = TRUE;
1974 }
1975 }
1976 break;
1977
1978 /* Octal integer */
1979
1980 case opt_octint:
1981 intbase = 8;
1982 inttype = US"octal ";
1983
1984 /* Integer: a simple(ish) case; allow octal and hex formats, and
1985 suffixes K and M. The different types affect output, not input. */
1986
1987 case opt_mkint:
1988 case opt_int:
1989 {
1990 uschar *endptr;
1991 long int lvalue;
1992
1993 errno = 0;
1994 lvalue = strtol(CS s, CSS &endptr, intbase);
1995
1996 if (endptr == s)
1997 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN, "%sinteger expected for %s",
1998 inttype, name);
1999
2000 if (errno != ERANGE)
2001 {
2002 if (tolower(*endptr) == 'k')
2003 {
2004 if (lvalue > INT_MAX/1024 || lvalue < INT_MIN/1024) errno = ERANGE;
2005 else lvalue *= 1024;
2006 endptr++;
2007 }
2008 else if (tolower(*endptr) == 'm')
2009 {
2010 if (lvalue > INT_MAX/(1024*1024) || lvalue < INT_MIN/(1024*1024))
2011 errno = ERANGE;
2012 else lvalue *= 1024*1024;
2013 endptr++;
2014 }
2015 }
2016
2017 if (errno == ERANGE || lvalue > INT_MAX || lvalue < INT_MIN)
2018 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN,
2019 "absolute value of integer \"%s\" is too large (overflow)", s);
2020
2021 while (isspace(*endptr)) endptr++;
2022 if (*endptr != 0)
2023 extra_chars_error(endptr, inttype, US"integer value for ", name);
2024
2025 value = (int)lvalue;
2026 }
2027
2028 if (data_block == NULL)
2029 *((int *)(ol->value)) = value;
2030 else
2031 *((int *)((uschar *)data_block + (long int)(ol->value))) = value;
2032 break;
2033
2034 /* Integer held in K: again, allow octal and hex formats, and suffixes K and
2035 M. */
2036
2037 case opt_Kint:
2038 {
2039 uschar *endptr;
2040 errno = 0;
2041 value = strtol(CS s, CSS &endptr, intbase);
2042
2043 if (endptr == s)
2044 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN, "%sinteger expected for %s",
2045 inttype, name);
2046
2047 if (errno != ERANGE)
2048 {
2049 if (tolower(*endptr) == 'm')
2050 {
2051 if (value > INT_MAX/1024 || value < INT_MIN/1024) errno = ERANGE;
2052 else value *= 1024;
2053 endptr++;
2054 }
2055 else if (tolower(*endptr) == 'k')
2056 {
2057 endptr++;
2058 }
2059 else
2060 {
2061 value = (value + 512)/1024;
2062 }
2063 }
2064
2065 if (errno == ERANGE) log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN,
2066 "absolute value of integer \"%s\" is too large (overflow)", s);
2067
2068 while (isspace(*endptr)) endptr++;
2069 if (*endptr != 0)
2070 extra_chars_error(endptr, inttype, US"integer value for ", name);
2071 }
2072
2073 if (data_block == NULL)
2074 *((int *)(ol->value)) = value;
2075 else
2076 *((int *)((uschar *)data_block + (long int)(ol->value))) = value;
2077 break;
2078
2079 /* Fixed-point number: held to 3 decimal places. */
2080
2081 case opt_fixed:
2082 if (sscanf(CS s, "%d%n", &value, &count) != 1)
2083 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN,
2084 "fixed-point number expected for %s", name);
2085
2086 if (value < 0) log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN,
2087 "integer \"%s\" is too large (overflow)", s);
2088
2089 value *= 1000;
2090
2091 if (value < 0) log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN,
2092 "integer \"%s\" is too large (overflow)", s);
2093
2094 if (s[count] == '.')
2095 {
2096 int d = 100;
2097 while (isdigit(s[++count]))
2098 {
2099 value += (s[count] - '0') * d;
2100 d /= 10;
2101 }
2102 }
2103
2104 while (isspace(s[count])) count++;
2105
2106 if (s[count] != 0)
2107 extra_chars_error(s+count, US"fixed-point value for ", name, US"");
2108
2109 if (data_block == NULL)
2110 *((int *)(ol->value)) = value;
2111 else
2112 *((int *)((uschar *)data_block + (long int)(ol->value))) = value;
2113 break;
2114
2115 /* There's a special routine to read time values. */
2116
2117 case opt_time:
2118 value = readconf_readtime(s, 0, FALSE);
2119 if (value < 0)
2120 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN, "invalid time value for %s",
2121 name);
2122 if (data_block == NULL)
2123 *((int *)(ol->value)) = value;
2124 else
2125 *((int *)((uschar *)data_block + (long int)(ol->value))) = value;
2126 break;
2127
2128 /* A time list is a list of colon-separated times, with the first
2129 element holding the size of the list and the second the number of
2130 entries used. */
2131
2132 case opt_timelist:
2133 {
2134 int count = 0;
2135 int *list = (data_block == NULL)?
2136 (int *)(ol->value) :
2137 (int *)((uschar *)data_block + (long int)(ol->value));
2138
2139 if (*s != 0) for (count = 1; count <= list[0] - 2; count++)
2140 {
2141 int terminator = 0;
2142 uschar *snext = Ustrchr(s, ':');
2143 if (snext != NULL)
2144 {
2145 uschar *ss = snext;
2146 while (ss > s && isspace(ss[-1])) ss--;
2147 terminator = *ss;
2148 }
2149 value = readconf_readtime(s, terminator, FALSE);
2150 if (value < 0)
2151 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN, "invalid time value for %s",
2152 name);
2153 if (count > 1 && value <= list[count])
2154 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN,
2155 "time value out of order for %s", name);
2156 list[count+1] = value;
2157 if (snext == NULL) break;
2158 s = snext + 1;
2159 while (isspace(*s)) s++;
2160 }
2161
2162 if (count > list[0] - 2)
2163 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN, "too many time values for %s",
2164 name);
2165 if (count > 0 && list[2] == 0) count = 0;
2166 list[1] = count;
2167 break;
2168 }
2169
2170 case opt_func:
2171 {
2172 void (*fn)() = ol->value;
2173 fn(name, s);
2174 break;
2175 }
2176 }
2177
2178 return TRUE;
2179 }
2180
2181
2182
2183 /*************************************************
2184 * Print a time value *
2185 *************************************************/
2186
2187 /*
2188 Argument: a time value in seconds
2189 Returns: pointer to a fixed buffer containing the time as a string,
2190 in readconf_readtime() format
2191 */
2192
2193 uschar *
2194 readconf_printtime(int t)
2195 {
2196 int s, m, h, d, w;
2197 uschar *p = time_buffer;
2198
2199 if (t < 0)
2200 {
2201 *p++ = '-';
2202 t = -t;
2203 }
2204
2205 s = t % 60;
2206 t /= 60;
2207 m = t % 60;
2208 t /= 60;
2209 h = t % 24;
2210 t /= 24;
2211 d = t % 7;
2212 w = t/7;
2213
2214 if (w > 0) { sprintf(CS p, "%dw", w); while (*p) p++; }
2215 if (d > 0) { sprintf(CS p, "%dd", d); while (*p) p++; }
2216 if (h > 0) { sprintf(CS p, "%dh", h); while (*p) p++; }
2217 if (m > 0) { sprintf(CS p, "%dm", m); while (*p) p++; }
2218 if (s > 0 || p == time_buffer) sprintf(CS p, "%ds", s);
2219
2220 return time_buffer;
2221 }
2222
2223
2224
2225 /*************************************************
2226 * Print an individual option value *
2227 *************************************************/
2228
2229 /* This is used by the -bP option, so prints to the standard output.
2230 The entire options list is passed in as an argument, because some options come
2231 in pairs - typically uid/gid settings, which can either be explicit numerical
2232 values, or strings to be expanded later. If the numerical value is unset,
2233 search for "*expand_<name>" to see if there is a string equivalent.
2234
2235 Arguments:
2236 ol option entry, or NULL for an unknown option
2237 name option name
2238 options_block NULL for main configuration options; otherwise points to
2239 a driver block; if the option doesn't have opt_public
2240 set, then options_block->options_block is where the item
2241 resides.
2242 oltop points to the option list in which ol exists
2243 last one more than the offset of the last entry in optop
2244 no_labels do not show "foo = " at the start.
2245
2246 Returns: nothing
2247 */
2248
2249 static void
2250 print_ol(optionlist *ol, uschar *name, void *options_block,
2251 optionlist *oltop, int last, BOOL no_labels)
2252 {
2253 struct passwd *pw;
2254 struct group *gr;
2255 optionlist *ol2;
2256 void *value;
2257 uid_t *uidlist;
2258 gid_t *gidlist;
2259 uschar *s;
2260 uschar name2[64];
2261
2262 if (ol == NULL)
2263 {
2264 printf("%s is not a known option\n", name);
2265 return;
2266 }
2267
2268 /* Non-admin callers cannot see options that have been flagged secure by the
2269 "hide" prefix. */
2270
2271 if (!admin_user && (ol->type & opt_secure) != 0)
2272 {
2273 if (no_labels)
2274 printf("%s\n", hidden);
2275 else
2276 printf("%s = %s\n", name, hidden);
2277 return;
2278 }
2279
2280 /* Else show the value of the option */
2281
2282 value = ol->value;
2283 if (options_block != NULL)
2284 {
2285 if ((ol->type & opt_public) == 0)
2286 options_block = (void *)(((driver_instance *)options_block)->options_block);
2287 value = (void *)((uschar *)options_block + (long int)value);
2288 }
2289
2290 switch(ol->type & opt_mask)
2291 {
2292 case opt_stringptr:
2293 case opt_rewrite: /* Show the text value */
2294 s = *((uschar **)value);
2295 if (!no_labels) printf("%s = ", name);
2296 printf("%s\n", (s == NULL)? US"" : string_printing2(s, FALSE));
2297 break;
2298
2299 case opt_int:
2300 if (!no_labels) printf("%s = ", name);
2301 printf("%d\n", *((int *)value));
2302 break;
2303
2304 case opt_mkint:
2305 {
2306 int x = *((int *)value);
2307 if (x != 0 && (x & 1023) == 0)
2308 {
2309 int c = 'K';
2310 x >>= 10;
2311 if ((x & 1023) == 0)
2312 {
2313 c = 'M';
2314 x >>= 10;
2315 }
2316 if (!no_labels) printf("%s = ", name);
2317 printf("%d%c\n", x, c);
2318 }
2319 else
2320 {
2321 if (!no_labels) printf("%s = ", name);
2322 printf("%d\n", x);
2323 }
2324 }
2325 break;
2326
2327 case opt_Kint:
2328 {
2329 int x = *((int *)value);
2330 if (!no_labels) printf("%s = ", name);
2331 if (x == 0) printf("0\n");
2332 else if ((x & 1023) == 0) printf("%dM\n", x >> 10);
2333 else printf("%dK\n", x);
2334 }
2335 break;
2336
2337 case opt_octint:
2338 if (!no_labels) printf("%s = ", name);
2339 printf("%#o\n", *((int *)value));
2340 break;
2341
2342 /* Can be negative only when "unset", in which case integer */
2343
2344 case opt_fixed:
2345 {
2346 int x = *((int *)value);
2347 int f = x % 1000;
2348 int d = 100;
2349 if (x < 0) printf("%s =\n", name); else
2350 {
2351 if (!no_labels) printf("%s = ", name);
2352 printf("%d.", x/1000);
2353 do
2354 {
2355 printf("%d", f/d);
2356 f %= d;
2357 d /= 10;
2358 }
2359 while (f != 0);
2360 printf("\n");
2361 }
2362 }
2363 break;
2364
2365 /* If the numerical value is unset, try for the string value */
2366
2367 case opt_expand_uid:
2368 if (! *get_set_flag(name, oltop, last, options_block))
2369 {
2370 sprintf(CS name2, "*expand_%.50s", name);
2371 ol2 = find_option(name2, oltop, last);
2372 if (ol2 != NULL)
2373 {
2374 void *value2 = ol2->value;
2375 if (options_block != NULL)
2376 value2 = (void *)((uschar *)options_block + (long int)value2);
2377 s = *((uschar **)value2);
2378 if (!no_labels) printf("%s = ", name);
2379 printf("%s\n", (s == NULL)? US"" : string_printing(s));
2380 break;
2381 }
2382 }
2383
2384 /* Else fall through */
2385
2386 case opt_uid:
2387 if (!no_labels) printf("%s = ", name);
2388 if (! *get_set_flag(name, oltop, last, options_block))
2389 printf("\n");
2390 else
2391 {
2392 pw = getpwuid(*((uid_t *)value));
2393 if (pw == NULL)
2394 printf("%ld\n", (long int)(*((uid_t *)value)));
2395 else printf("%s\n", pw->pw_name);
2396 }
2397 break;
2398
2399 /* If the numerical value is unset, try for the string value */
2400
2401 case opt_expand_gid:
2402 if (! *get_set_flag(name, oltop, last, options_block))
2403 {
2404 sprintf(CS name2, "*expand_%.50s", name);
2405 ol2 = find_option(name2, oltop, last);
2406 if (ol2 != NULL && (ol2->type & opt_mask) == opt_stringptr)
2407 {
2408 void *value2 = ol2->value;
2409 if (options_block != NULL)
2410 value2 = (void *)((uschar *)options_block + (long int)value2);
2411 s = *((uschar **)value2);
2412 if (!no_labels) printf("%s = ", name);
2413 printf("%s\n", (s == NULL)? US"" : string_printing(s));
2414 break;
2415 }
2416 }
2417
2418 /* Else fall through */
2419
2420 case opt_gid:
2421 if (!no_labels) printf("%s = ", name);
2422 if (! *get_set_flag(name, oltop, last, options_block))
2423 printf("\n");
2424 else
2425 {
2426 gr = getgrgid(*((int *)value));
2427 if (gr == NULL)
2428 printf("%ld\n", (long int)(*((int *)value)));
2429 else printf("%s\n", gr->gr_name);
2430 }
2431 break;
2432
2433 case opt_uidlist:
2434 uidlist = *((uid_t **)value);
2435 if (!no_labels) printf("%s =", name);
2436 if (uidlist != NULL)
2437 {
2438 int i;
2439 uschar sep = ' ';
2440 if (no_labels) sep = '\0';
2441 for (i = 1; i <= (int)(uidlist[0]); i++)
2442 {
2443 uschar *name = NULL;
2444 pw = getpwuid(uidlist[i]);
2445 if (pw != NULL) name = US pw->pw_name;
2446 if (sep != '\0') printf("%c", sep);
2447 if (name != NULL) printf("%s", name);
2448 else printf("%ld", (long int)(uidlist[i]));
2449 sep = ':';
2450 }
2451 }
2452 printf("\n");
2453 break;
2454
2455 case opt_gidlist:
2456 gidlist = *((gid_t **)value);
2457 if (!no_labels) printf("%s =", name);
2458 if (gidlist != NULL)
2459 {
2460 int i;
2461 uschar sep = ' ';
2462 if (no_labels) sep = '\0';
2463 for (i = 1; i <= (int)(gidlist[0]); i++)
2464 {
2465 uschar *name = NULL;
2466 gr = getgrgid(gidlist[i]);
2467 if (gr != NULL) name = US gr->gr_name;
2468 if (sep != '\0') printf("%c", sep);
2469 if (name != NULL) printf("%s", name);
2470 else printf("%ld", (long int)(gidlist[i]));
2471 sep = ':';
2472 }
2473 }
2474 printf("\n");
2475 break;
2476
2477 case opt_time:
2478 if (!no_labels) printf("%s = ", name);
2479 printf("%s\n", readconf_printtime(*((int *)value)));
2480 break;
2481
2482 case opt_timelist:
2483 {
2484 int i;
2485 int *list = (int *)value;
2486 if (!no_labels) printf("%s = ", name);
2487 for (i = 0; i < list[1]; i++)
2488 printf("%s%s", (i == 0)? "" : ":", readconf_printtime(list[i+2]));
2489 printf("\n");
2490 }
2491 break;
2492
2493 case opt_bit:
2494 printf("%s%s\n", ((*((int *)value)) & (1 << ((ol->type >> 16) & 31)))?
2495 "" : "no_", name);
2496 break;
2497
2498 case opt_expand_bool:
2499 sprintf(CS name2, "*expand_%.50s", name);
2500 ol2 = find_option(name2, oltop, last);
2501 if (ol2 != NULL && ol2->value != NULL)
2502 {
2503 void *value2 = ol2->value;
2504 if (options_block != NULL)
2505 value2 = (void *)((uschar *)options_block + (long int)value2);
2506 s = *((uschar **)value2);
2507 if (s != NULL)
2508 {
2509 if (!no_labels) printf("%s = ", name);
2510 printf("%s\n", string_printing(s));
2511 break;
2512 }
2513 /* s == NULL => string not set; fall through */
2514 }
2515
2516 /* Fall through */
2517
2518 case opt_bool:
2519 case opt_bool_verify:
2520 case opt_bool_set:
2521 printf("%s%s\n", (*((BOOL *)value))? "" : "no_", name);
2522 break;
2523 }
2524 }
2525
2526
2527
2528 /*************************************************
2529 * Print value from main configuration *
2530 *************************************************/
2531
2532 /* This function, called as a result of encountering the -bP option,
2533 causes the value of any main configuration variable to be output if the
2534 second argument is NULL. There are some special values:
2535
2536 all print all main configuration options
2537 configure_file print the name of the configuration file
2538 routers print the routers' configurations
2539 transports print the transports' configuration
2540 authenticators print the authenticators' configuration
2541 macros print the macros' configuration
2542 router_list print a list of router names
2543 transport_list print a list of transport names
2544 authenticator_list print a list of authentication mechanism names
2545 macro_list print a list of macro names
2546 +name print a named list item
2547 local_scan print the local_scan options
2548 config print the configuration as it is parsed
2549
2550 If the second argument is not NULL, it must be one of "router", "transport",
2551 "authenticator" or "macro" in which case the first argument identifies the
2552 driver whose options are to be printed.
2553
2554 Arguments:
2555 name option name if type == NULL; else driver name
2556 type NULL or driver type name, as described above
2557 no_labels avoid the "foo = " at the start of an item
2558
2559 Returns: nothing
2560 */
2561
2562 void
2563 readconf_print(uschar *name, uschar *type, BOOL no_labels)
2564 {
2565 BOOL names_only = FALSE;
2566 optionlist *ol;
2567 optionlist *ol2 = NULL;
2568 driver_instance *d = NULL;
2569 macro_item *m;
2570 int size = 0;
2571
2572 if (type == NULL)
2573 {
2574 if (*name == '+')
2575 {
2576 int i;
2577 tree_node *t;
2578 BOOL found = FALSE;
2579 static uschar *types[] = { US"address", US"domain", US"host",
2580 US"localpart" };
2581 static tree_node **anchors[] = { &addresslist_anchor, &domainlist_anchor,
2582 &hostlist_anchor, &localpartlist_anchor };
2583
2584 for (i = 0; i < 4; i++)
2585 {
2586 t = tree_search(*(anchors[i]), name+1);
2587 if (t != NULL)
2588 {
2589 found = TRUE;
2590 if (no_labels)
2591 printf("%s\n", ((namedlist_block *)(t->data.ptr))->string);
2592 else
2593 printf("%slist %s = %s\n", types[i], name+1,
2594 ((namedlist_block *)(t->data.ptr))->string);
2595 }
2596 }
2597
2598 if (!found)
2599 printf("no address, domain, host, or local part list called \"%s\" "
2600 "exists\n", name+1);
2601
2602 return;
2603 }
2604
2605 if (Ustrcmp(name, "configure_file") == 0)
2606 {
2607 printf("%s\n", CS config_main_filename);
2608 return;
2609 }
2610
2611 if (Ustrcmp(name, "all") == 0)
2612 {
2613 for (ol = optionlist_config;
2614 ol < optionlist_config + optionlist_config_size; ol++)
2615 {
2616 if ((ol->type & opt_hidden) == 0)
2617 print_ol(ol, US ol->name, NULL,
2618 optionlist_config, optionlist_config_size,
2619 no_labels);
2620 }
2621 return;
2622 }
2623
2624 if (Ustrcmp(name, "local_scan") == 0)
2625 {
2626 #ifndef LOCAL_SCAN_HAS_OPTIONS
2627 printf("local_scan() options are not supported\n");
2628 #else
2629 for (ol = local_scan_options;
2630 ol < local_scan_options + local_scan_options_count; ol++)
2631 {
2632 print_ol(ol, US ol->name, NULL, local_scan_options,
2633 local_scan_options_count, no_labels);
2634 }
2635 #endif
2636 return;
2637 }
2638
2639 if (Ustrcmp(name, "config") == 0)
2640 {
2641 print_config(admin_user);
2642 return;
2643 }
2644
2645 if (Ustrcmp(name, "routers") == 0)
2646 {
2647 type = US"router";
2648 name = NULL;
2649 }
2650 else if (Ustrcmp(name, "transports") == 0)
2651 {
2652 type = US"transport";
2653 name = NULL;
2654 }
2655
2656 else if (Ustrcmp(name, "authenticators") == 0)
2657 {
2658 type = US"authenticator";
2659 name = NULL;
2660 }
2661
2662 else if (Ustrcmp(name, "macros") == 0)
2663 {
2664 type = US"macro";
2665 name = NULL;
2666 }
2667
2668 else if (Ustrcmp(name, "router_list") == 0)
2669 {
2670 type = US"router";
2671 name = NULL;
2672 names_only = TRUE;
2673 }
2674
2675 else if (Ustrcmp(name, "transport_list") == 0)
2676 {
2677 type = US"transport";
2678 name = NULL;
2679 names_only = TRUE;
2680 }
2681
2682 else if (Ustrcmp(name, "authenticator_list") == 0)
2683 {
2684 type = US"authenticator";
2685 name = NULL;
2686 names_only = TRUE;
2687 }
2688
2689 else if (Ustrcmp(name, "macro_list") == 0)
2690 {
2691 type = US"macro";
2692 name = NULL;
2693 names_only = TRUE;
2694 }
2695
2696 else
2697 {
2698 print_ol(find_option(name, optionlist_config, optionlist_config_size),
2699 name, NULL, optionlist_config, optionlist_config_size, no_labels);
2700 return;
2701 }
2702 }
2703
2704 /* Handle the options for a router or transport. Skip options that are flagged
2705 as hidden. Some of these are options with names starting with '*', used for
2706 internal alternative representations of other options (which the printing
2707 function will sort out). Others are synonyms kept for backward compatibility.
2708 */
2709
2710 if (Ustrcmp(type, "router") == 0)
2711 {
2712 d = (driver_instance *)routers;
2713 ol2 = optionlist_routers;
2714 size = optionlist_routers_size;
2715 }
2716 else if (Ustrcmp(type, "transport") == 0)
2717 {
2718 d = (driver_instance *)transports;
2719 ol2 = optionlist_transports;
2720 size = optionlist_transports_size;
2721 }
2722 else if (Ustrcmp(type, "authenticator") == 0)
2723 {
2724 d = (driver_instance *)auths;
2725 ol2 = optionlist_auths;
2726 size = optionlist_auths_size;
2727 }
2728
2729 else if (Ustrcmp(type, "macro") == 0)
2730 {
2731 /* People store passwords in macros and they were previously not available
2732 for printing. So we have an admin_users restriction. */
2733 if (!admin_user)
2734 {
2735 fprintf(stderr, "exim: permission denied\n");
2736 exit(EXIT_FAILURE);
2737 }
2738 for (m = macros; m != NULL; m = m->next)
2739 {
2740 if (name == NULL || Ustrcmp(name, m->name) == 0)
2741 {
2742 if (names_only)
2743 printf("%s\n", CS m->name);
2744 else
2745 printf("%s=%s\n", CS m->name, CS m->replacement);
2746 if (name != NULL)
2747 return;
2748 }
2749 }
2750 if (name != NULL)
2751 printf("%s %s not found\n", type, name);
2752 return;
2753 }
2754
2755 if (names_only)
2756 {
2757 for (; d != NULL; d = d->next) printf("%s\n", CS d->name);
2758 return;
2759 }
2760
2761 /* Either search for a given driver, or print all of them */
2762
2763 for (; d != NULL; d = d->next)
2764 {
2765 if (name == NULL)
2766 printf("\n%s %s:\n", d->name, type);
2767 else if (Ustrcmp(d->name, name) != 0) continue;
2768
2769 for (ol = ol2; ol < ol2 + size; ol++)
2770 {
2771 if ((ol->type & opt_hidden) == 0)
2772 print_ol(ol, US ol->name, d, ol2, size, no_labels);
2773 }
2774
2775 for (ol = d->info->options;
2776 ol < d->info->options + *(d->info->options_count); ol++)
2777 {
2778 if ((ol->type & opt_hidden) == 0)
2779 print_ol(ol, US ol->name, d, d->info->options, *(d->info->options_count), no_labels);
2780 }
2781 if (name != NULL) return;
2782 }
2783 if (name != NULL) printf("%s %s not found\n", type, name);
2784 }
2785
2786
2787
2788 /*************************************************
2789 * Read a named list item *
2790 *************************************************/
2791
2792 /* This function reads a name and a list (i.e. string). The name is used to
2793 save the list in a tree, sorted by its name. Each entry also has a number,
2794 which can be used for caching tests, but if the string contains any expansion
2795 items other than $key, the number is set negative to inhibit caching. This
2796 mechanism is used for domain, host, and address lists that are referenced by
2797 the "+name" syntax.
2798
2799 Arguments:
2800 anchorp points to the tree anchor
2801 numberp points to the current number for this tree
2802 max the maximum number permitted
2803 s the text of the option line, starting immediately after the name
2804 of the list type
2805 tname the name of the list type, for messages
2806
2807 Returns: nothing
2808 */
2809
2810 static void
2811 read_named_list(tree_node **anchorp, int *numberp, int max, uschar *s,
2812 uschar *tname)
2813 {
2814 BOOL forcecache = FALSE;
2815 uschar *ss;
2816 tree_node *t;
2817 namedlist_block *nb = store_get(sizeof(namedlist_block));
2818
2819 if (Ustrncmp(s, "_cache", 6) == 0)
2820 {
2821 forcecache = TRUE;
2822 s += 6;
2823 }
2824
2825 if (!isspace(*s))
2826 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN, "unrecognized configuration line");
2827
2828 if (*numberp >= max)
2829 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN, "too many named %ss (max is %d)\n",
2830 tname, max);
2831
2832 while (isspace(*s)) s++;
2833 ss = s;
2834 while (isalnum(*s) || *s == '_') s++;
2835 t = store_get(sizeof(tree_node) + s-ss);
2836 Ustrncpy(t->name, ss, s-ss);
2837 t->name[s-ss] = 0;
2838 while (isspace(*s)) s++;
2839
2840 if (!tree_insertnode(anchorp, t))
2841 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN,
2842 "duplicate name \"%s\" for a named %s", t->name, tname);
2843
2844 t->data.ptr = nb;
2845 nb->number = *numberp;
2846 *numberp += 1;
2847
2848 if (*s++ != '=') log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN,
2849 "missing '=' after \"%s\"", t->name);
2850 while (isspace(*s)) s++;
2851 nb->string = read_string(s, t->name);
2852 nb->cache_data = NULL;
2853
2854 /* Check the string for any expansions; if any are found, mark this list
2855 uncacheable unless the user has explicited forced caching. */
2856
2857 if (!forcecache && Ustrchr(nb->string, '$') != NULL) nb->number = -1;
2858 }
2859
2860
2861
2862
2863 /*************************************************
2864 * Unpick data for a rate limit *
2865 *************************************************/
2866
2867 /* This function is called to unpick smtp_ratelimit_{mail,rcpt} into four
2868 separate values.
2869
2870 Arguments:
2871 s string, in the form t,b,f,l
2872 where t is the threshold (integer)
2873 b is the initial delay (time)
2874 f is the multiplicative factor (fixed point)
2875 k is the maximum time (time)
2876 threshold where to store threshold
2877 base where to store base in milliseconds
2878 factor where to store factor in milliseconds
2879 limit where to store limit
2880
2881 Returns: nothing (panics on error)
2882 */
2883
2884 static void
2885 unpick_ratelimit(uschar *s, int *threshold, int *base, double *factor,
2886 int *limit)
2887 {
2888 uschar bstring[16], lstring[16];
2889
2890 if (sscanf(CS s, "%d, %15[0123456789smhdw.], %lf, %15s", threshold, bstring,
2891 factor, lstring) == 4)
2892 {
2893 *base = readconf_readtime(bstring, 0, TRUE);
2894 *limit = readconf_readtime(lstring, 0, TRUE);
2895 if (*base >= 0 && *limit >= 0) return;
2896 }
2897 log_write(0, LOG_MAIN|LOG_PANIC_DIE, "malformed ratelimit data: %s", s);
2898 }
2899
2900
2901
2902
2903 /*************************************************
2904 * Drop privs for checking TLS config *
2905 *************************************************/
2906
2907 /* We want to validate TLS options during readconf, but do not want to be
2908 root when we call into the TLS library, in case of library linkage errors
2909 which cause segfaults; before this check, those were always done as the Exim
2910 runtime user and it makes sense to continue with that.
2911
2912 Assumes: tls_require_ciphers has been set, if it will be
2913 exim_user has been set, if it will be
2914 exim_group has been set, if it will be
2915
2916 Returns: bool for "okay"; false will cause caller to immediately exit.
2917 */
2918
2919 #ifdef SUPPORT_TLS
2920 static BOOL
2921 tls_dropprivs_validate_require_cipher(void)
2922 {
2923 const uschar *errmsg;
2924 pid_t pid;
2925 int rc, status;
2926 void (*oldsignal)(int);
2927
2928 /* If TLS will never be used, no point checking ciphers */
2929
2930 if ( !tls_advertise_hosts
2931 || !*tls_advertise_hosts
2932 || Ustrcmp(tls_advertise_hosts, ":") == 0
2933 )
2934 return TRUE;
2935 else if (!tls_certificate)
2936 log_write(0, LOG_MAIN|LOG_PANIC,
2937 "Warning: No server certificate defined; TLS connections will fail.\n"
2938 " Suggested action: either install a certificate or change tls_advertise_hosts option");
2939
2940 oldsignal = signal(SIGCHLD, SIG_DFL);
2941
2942 fflush(NULL);
2943 if ((pid = fork()) < 0)
2944 log_write(0, LOG_MAIN|LOG_PANIC_DIE, "fork failed for TLS check");
2945
2946 if (pid == 0)
2947 {
2948 /* in some modes, will have dropped privilege already */
2949 if (!geteuid())
2950 exim_setugid(exim_uid, exim_gid, FALSE,
2951 US"calling tls_validate_require_cipher");
2952
2953 errmsg = tls_validate_require_cipher();
2954 if (errmsg)
2955 {
2956 log_write(0, LOG_PANIC_DIE|LOG_CONFIG,
2957 "tls_require_ciphers invalid: %s", errmsg);
2958 }
2959 fflush(NULL);
2960 _exit(0);
2961 }
2962
2963 do {
2964 rc = waitpid(pid, &status, 0);
2965 } while (rc < 0 && errno == EINTR);
2966
2967 DEBUG(D_tls)
2968 debug_printf("tls_validate_require_cipher child %d ended: status=0x%x\n",
2969 (int)pid, status);
2970
2971 signal(SIGCHLD, oldsignal);
2972
2973 return status == 0;
2974 }
2975 #endif /* SUPPORT_TLS */
2976
2977
2978
2979
2980 /*************************************************
2981 * Read main configuration options *
2982 *************************************************/
2983
2984 /* This function is the first to be called for configuration reading. It
2985 opens the configuration file and reads general configuration settings until
2986 it reaches the end of the configuration section. The file is then left open so
2987 that the remaining configuration data can subsequently be read if needed for
2988 this run of Exim.
2989
2990 The configuration file must be owned either by root or exim, and be writeable
2991 only by root or uid/gid exim. The values for Exim's uid and gid can be changed
2992 in the config file, so the test is done on the compiled in values. A slight
2993 anomaly, to be carefully documented.
2994
2995 The name of the configuration file is taken from a list that is included in the
2996 binary of Exim. It can be altered from the command line, but if that is done,
2997 root privilege is immediately withdrawn unless the caller is root or exim.
2998 The first file on the list that exists is used.
2999
3000 For use on multiple systems that share file systems, first look for a
3001 configuration file whose name has the current node name on the end. If that is
3002 not found, try the generic name. For really contorted configurations, that run
3003 multiple Exims with different uid settings, first try adding the effective uid
3004 before the node name. These complications are going to waste resources on most
3005 systems. Therefore they are available only when requested by compile-time
3006 options. */
3007
3008 void
3009 readconf_main(void)
3010 {
3011 int sep = 0;
3012 struct stat statbuf;
3013 uschar *s, *filename;
3014 const uschar *list = config_main_filelist;
3015
3016 /* Loop through the possible file names */
3017
3018 while((filename = string_nextinlist(&list, &sep, big_buffer, big_buffer_size))
3019 != NULL)
3020 {
3021 /* Cut out all the fancy processing unless specifically wanted */
3022
3023 #if defined(CONFIGURE_FILE_USE_NODE) || defined(CONFIGURE_FILE_USE_EUID)
3024 uschar *suffix = filename + Ustrlen(filename);
3025
3026 /* Try for the node-specific file if a node name exists */
3027
3028 #ifdef CONFIGURE_FILE_USE_NODE
3029 struct utsname uts;
3030 if (uname(&uts) >= 0)
3031 {
3032 #ifdef CONFIGURE_FILE_USE_EUID
3033 sprintf(CS suffix, ".%ld.%.256s", (long int)original_euid, uts.nodename);
3034 config_file = Ufopen(filename, "rb");
3035 if (config_file == NULL)
3036 #endif /* CONFIGURE_FILE_USE_EUID */
3037 {
3038 sprintf(CS suffix, ".%.256s", uts.nodename);
3039 config_file = Ufopen(filename, "rb");
3040 }
3041 }
3042 #endif /* CONFIGURE_FILE_USE_NODE */
3043
3044 /* Otherwise, try the generic name, possibly with the euid added */
3045
3046 #ifdef CONFIGURE_FILE_USE_EUID
3047 if (config_file == NULL)
3048 {
3049 sprintf(CS suffix, ".%ld", (long int)original_euid);
3050 config_file = Ufopen(filename, "rb");
3051 }
3052 #endif /* CONFIGURE_FILE_USE_EUID */
3053
3054 /* Finally, try the unadorned name */
3055
3056 if (config_file == NULL)
3057 {
3058 *suffix = 0;
3059 config_file = Ufopen(filename, "rb");
3060 }
3061 #else /* if neither defined */
3062
3063 /* This is the common case when the fancy processing is not included. */
3064
3065 config_file = Ufopen(filename, "rb");
3066 #endif
3067
3068 /* If the file does not exist, continue to try any others. For any other
3069 error, break out (and die). */
3070
3071 if (config_file != NULL || errno != ENOENT) break;
3072 }
3073
3074 /* On success, save the name for verification; config_filename is used when
3075 logging configuration errors (it changes for .included files) whereas
3076 config_main_filename is the name shown by -bP. Failure to open a configuration
3077 file is a serious disaster. */
3078
3079 if (config_file != NULL)
3080 {
3081 uschar *p;
3082 config_filename = config_main_filename = string_copy(filename);
3083
3084 p = Ustrrchr(filename, '/');
3085 config_main_directory = p ? string_copyn(filename, p - filename)
3086 : string_copy(US".");
3087 }
3088 else
3089 {
3090 if (filename == NULL)
3091 log_write(0, LOG_MAIN|LOG_PANIC_DIE, "non-existent configuration file(s): "
3092 "%s", config_main_filelist);
3093 else
3094 log_write(0, LOG_MAIN|LOG_PANIC_DIE, "%s", string_open_failed(errno,
3095 "configuration file %s", filename));
3096 }
3097
3098 /* Check the status of the file we have opened, if we have retained root
3099 privileges and the file isn't /dev/null (which *should* be 0666). */
3100
3101 if (trusted_config && Ustrcmp(filename, US"/dev/null"))
3102 {
3103 if (fstat(fileno(config_file), &statbuf) != 0)
3104 log_write(0, LOG_MAIN|LOG_PANIC_DIE, "failed to stat configuration file %s",
3105 big_buffer);
3106
3107 if ((statbuf.st_uid != root_uid /* owner not root */
3108 #ifdef CONFIGURE_OWNER
3109 && statbuf.st_uid != config_uid /* owner not the special one */
3110 #endif
3111 ) || /* or */
3112 (statbuf.st_gid != root_gid /* group not root & */
3113 #ifdef CONFIGURE_GROUP
3114 && statbuf.st_gid != config_gid /* group not the special one */
3115 #endif
3116 && (statbuf.st_mode & 020) != 0) || /* group writeable */
3117 /* or */
3118 ((statbuf.st_mode & 2) != 0)) /* world writeable */
3119
3120 log_write(0, LOG_MAIN|LOG_PANIC_DIE, "Exim configuration file %s has the "
3121 "wrong owner, group, or mode", big_buffer);
3122 }
3123
3124 /* Process the main configuration settings. They all begin with a lower case
3125 letter. If we see something starting with an upper case letter, it is taken as
3126 a macro definition. */
3127
3128 while ((s = get_config_line()) != NULL)
3129 {
3130 if (isupper(s[0])) read_macro_assignment(s);
3131
3132 else if (Ustrncmp(s, "domainlist", 10) == 0)
3133 read_named_list(&domainlist_anchor, &domainlist_count,
3134 MAX_NAMED_LIST, s+10, US"domain list");
3135
3136 else if (Ustrncmp(s, "hostlist", 8) == 0)
3137 read_named_list(&hostlist_anchor, &hostlist_count,
3138 MAX_NAMED_LIST, s+8, US"host list");
3139
3140 else if (Ustrncmp(s, US"addresslist", 11) == 0)
3141 read_named_list(&addresslist_anchor, &addresslist_count,
3142 MAX_NAMED_LIST, s+11, US"address list");
3143
3144 else if (Ustrncmp(s, US"localpartlist", 13) == 0)
3145 read_named_list(&localpartlist_anchor, &localpartlist_count,
3146 MAX_NAMED_LIST, s+13, US"local part list");
3147
3148 else
3149 (void) readconf_handle_option(s, optionlist_config, optionlist_config_size,
3150 NULL, US"main option \"%s\" unknown");
3151 }
3152
3153
3154 /* If local_sender_retain is set, local_from_check must be unset. */
3155
3156 if (local_sender_retain && local_from_check)
3157 log_write(0, LOG_MAIN|LOG_PANIC_DIE, "both local_from_check and "
3158 "local_sender_retain are set; this combination is not allowed");
3159
3160 /* If the timezone string is empty, set it to NULL, implying no TZ variable
3161 wanted. */
3162
3163 if (timezone_string != NULL && *timezone_string == 0) timezone_string = NULL;
3164
3165 /* The max retry interval must not be greater than 24 hours. */
3166
3167 if (retry_interval_max > 24*60*60) retry_interval_max = 24*60*60;
3168
3169 /* remote_max_parallel must be > 0 */
3170
3171 if (remote_max_parallel <= 0) remote_max_parallel = 1;
3172
3173 /* Save the configured setting of freeze_tell, so we can re-instate it at the
3174 start of a new SMTP message. */
3175
3176 freeze_tell_config = freeze_tell;
3177
3178 /* The primary host name may be required for expansion of spool_directory
3179 and log_file_path, so make sure it is set asap. It is obtained from uname(),
3180 but if that yields an unqualified value, make a FQDN by using gethostbyname to
3181 canonize it. Some people like upper case letters in their host names, so we
3182 don't force the case. */
3183
3184 if (primary_hostname == NULL)
3185 {
3186 const uschar *hostname;
3187 struct utsname uts;
3188 if (uname(&uts) < 0)
3189 log_write(0, LOG_MAIN|LOG_PANIC_DIE, "uname() failed to yield host name");
3190 hostname = US uts.nodename;
3191
3192 if (Ustrchr(hostname, '.') == NULL)
3193 {
3194 int af = AF_INET;
3195 struct hostent *hostdata;
3196
3197 #if HAVE_IPV6
3198 if (!disable_ipv6 && (dns_ipv4_lookup == NULL ||
3199 match_isinlist(hostname, CUSS &dns_ipv4_lookup, 0, NULL, NULL,
3200 MCL_DOMAIN, TRUE, NULL) != OK))
3201 af = AF_INET6;
3202 #else
3203 af = AF_INET;
3204 #endif
3205
3206 for (;;)
3207 {
3208 #if HAVE_IPV6
3209 #if HAVE_GETIPNODEBYNAME
3210 int error_num;
3211 hostdata = getipnodebyname(CS hostname, af, 0, &error_num);
3212 #else
3213 hostdata = gethostbyname2(CS hostname, af);
3214 #endif
3215 #else
3216 hostdata = gethostbyname(CS hostname);
3217 #endif
3218
3219 if (hostdata != NULL)
3220 {
3221 hostname = US hostdata->h_name;
3222 break;
3223 }
3224
3225 if (af == AF_INET) break;
3226 af = AF_INET;
3227 }
3228 }
3229
3230 primary_hostname = string_copy(hostname);
3231 }
3232
3233 /* Set up default value for smtp_active_hostname */
3234
3235 smtp_active_hostname = primary_hostname;
3236
3237 /* If spool_directory wasn't set in the build-time configuration, it must have
3238 got set above. Of course, writing to the log may not work if log_file_path is
3239 not set, but it will at least get to syslog or somewhere, with any luck. */
3240
3241 if (*spool_directory == 0)
3242 log_write(0, LOG_MAIN|LOG_PANIC_DIE, "spool_directory undefined: cannot "
3243 "proceed");
3244
3245 /* Expand the spool directory name; it may, for example, contain the primary
3246 host name. Same comment about failure. */
3247
3248 s = expand_string(spool_directory);
3249 if (s == NULL)
3250 log_write(0, LOG_MAIN|LOG_PANIC_DIE, "failed to expand spool_directory "
3251 "\"%s\": %s", spool_directory, expand_string_message);
3252 spool_directory = s;
3253
3254 /* Expand log_file_path, which must contain "%s" in any component that isn't
3255 the null string or "syslog". It is also allowed to contain one instance of %D
3256 or %M. However, it must NOT contain % followed by anything else. */
3257
3258 if (*log_file_path != 0)
3259 {
3260 const uschar *ss, *sss;
3261 int sep = ':'; /* Fixed for log file path */
3262 s = expand_string(log_file_path);
3263 if (s == NULL)
3264 log_write(0, LOG_MAIN|LOG_PANIC_DIE, "failed to expand log_file_path "
3265 "\"%s\": %s", log_file_path, expand_string_message);
3266
3267 ss = s;
3268 while ((sss = string_nextinlist(&ss,&sep,big_buffer,big_buffer_size)) != NULL)
3269 {
3270 uschar *t;
3271 if (sss[0] == 0 || Ustrcmp(sss, "syslog") == 0) continue;
3272 t = Ustrstr(sss, "%s");
3273 if (t == NULL)
3274 log_write(0, LOG_MAIN|LOG_PANIC_DIE, "log_file_path