lib: Add restrict_access_flags enum to use with restrict_access[_by_env]() Swap parameter locations in the functions to make sure plugins are updated to use the new api.

lib: Flip drop_setuid_root in restrict_access_settings

lib: restrict_access_by_env() - Preserve RESTRICT_SETEXTRAGROUPS if root isn't dropped This way service { extra_groups } is preserved for the whole duration of the process lifetime (e.g. lmtp, doveadm)

lib: Add restrict_access_get/set_dumpable

Updated copyright notices to include the year 2018.

lib: Call prctl(PR_SET_DUMPABLE) only when PR_SET_DUMPABLE env variable is set

lib: Add logging of prctl(PR_SET_DUMPABLE) failure.

lib: chdir to / after chroot Makes static analyzers more happy

Updated copyright notices to include the year 2017.

global: Replaced all instances of memset(p, 0, sizeof(*p)) with the new i_zero() macro. Used the following script: C_FILES=`git ls-files *.c` H_FILES=`git ls-files *.h` for F in "$C_FILES $H_FILES"; do echo "$F" perl -p -i -e 's/safe_memset\(&\(?([^,]*)\)?,\s*0,\s*sizeof\(\g1\)\)/i_zero_safe(&$1)/g' $F perl -p -i -e 's/safe_memset\(([^,]*),\s*0,\s*sizeof\(\*\g1\)\)/i_zero_safe($1)/g' $F perl -p -i -e 's/memset\(&\(?([^,]*)\)?,\s*0,\s*sizeof\(\g1\)\)/i_zero(&$1)/g' $F perl -p -i -e 's/memset\(([^,]*),\s*0,\s*sizeof\(\*\g1\)\)/i_zero($1)/g' $F done

lib: Copy target_uid from restrict_access_settings One cannot assign to set->uid, causing compile error.

lib: Add drop_setuid_root for restrict_access drop_setuid_root, when set to true, will detect and try to drop getuid()==0. This is done by recovering current effective UID to set->uid if set->uid == -1, and then doing seteuid(0). It will also drop out any other extra privileges, such as extra groups not requested for.

global: Use only explicit int -> bool conversions These were checked with a patched clang.

global: freshen copyright git ls-files | xargs perl -p -i -e 's/(\d+)-201[0-5]/$1-2016/g;s/ (201[0-5]) Dovecot/ $1-2016 Dovecot/'

Remove now-unnecessary direct stdlib.h #includes.

global: freshen copyright Robomatically: git ls-files | xargs perl -p -i -e 's/(\d+)-201[0-4]/$1-2015/g;s/ (201[0-4]) Dovecot/ $1-2015 Dovecot/' Happy 2015 everyone! Signed-off-by: Phil Carmody <phil@dovecot.fi>

Updated copyright notices to include year 2014.

Oops :) Update copyrights to 2013 without breaking all .c files.

Updated copyright notices to include year 2013.