lib: Add restrict_access_flags enum to use with restrict_access[_by_env]() Swap parameter locations in the functions to make sure plugins are updated to use the new api.

lib-program-client: Remove extra drop_setuid_root flag copy

lib-program-client: Make an explicit enum for the exit code. Before, the meaning of the code was confusing, since the actual program returns a different set of values.

Updated copyright notices to include the year 2018.

global: start relying on timeout_remove(NULL) being a no-op Cleanup performed with the following semantic patch: @@ expression E; @@ - if (E != NULL) { - timeout_remove(&E); - } + timeout_remove(&E);

lib: lib-signals: Removed explicit notification of ioloop change through lib_signals_reset_ioloop() in favor of implicit method. Before, if the ioloop changed, the application had to explicitly notify lib-signals using lib_signals_reset_ioloop(). This is error-prone and requires doing this all over the Dovecot code base. Now, lib-signals registers an ioloop switch callback that deals with this implicitly. The application can detach lib-signals from the ioloop explicitly if delayed signal handling is not required/desired in the new ioloop. Specific delayed signal handlers can be exempt from this automated behavior using a flag, meaning that such signal handlers need to be moved between ioloops explicitly.

lib-program-client: local: Fixed use of unterminated string array of environment variables in exec_child().

Updated copyright notices to include the year 2017.

global: Make sure *_malloc() calculations won't cause integer overflows.

global: use dev_null_fd instead of opening /dev/null

lib-program-client: Fixed boolean expressions. Problems found with clang -Wstrict-bool.

lib-program-client: Gave variables pointing to a program-client more logical names. Was still based on when it was called the script-client.

lib-program-client: Try drop setuid root by default But not if root privileges are asked for.

lib-program-client: Whitespace fixes

lib-program-client: Add switch_ioloop vfunc This lets program-client backends do their own special io loop switching.

lib-program-client: Use milliseconds in idle timeout

lib-program-client: Use child-wait This makes the client waiting asynchronous.

lib-program-client: Use restrict-access This makes the program-client execution behave more consistent to the rest of the core code.

lib-program-client: Whitespace fix

lib-program-client: Add program-client from pigeonhole