master: Add default_internal_group setting, defaulting to "dovecot" It's expected that this is the primary group of the default_internal_user. This group will be used to provide access to sockets that are generally required by all Dovecot processes, but aren't safe enough to be allowed completely open access from untrusted processes.

Updated copyright notices to include the year 2018.

master: Move import_environment setting to lib-master's master_service_settings

master: Don't include imap-hibernate when counting auth's max client_limit imap-hibernate doesn't do any auth connections, so it doesn't need it. It's a bit ugly to add an explicit service name comparison here, but there didn't really seem to be many other good choices: * Could have removed protocol=imap from imap-hibernate. I was close to doing this, but maybe it's better that imap-only processes would have their protocol set to "imap". * Could have added a new service type, but seems pretty unnecessary to add some kind of a "nonauth" just for this. A reverse "needs-auth" might have been ok though. Perhaps in future we'll implement proper dependencies across services and those dependencies could be used to calculate this limit more precisely.

Updated copyright notices to include the year 2017.

global: Change string position/length from unsigned int to size_t Mainly to avoid truncating >4GB strings, which might potentially cause some security holes. Normally there are other limits, which prevent such excessive strings from being created in the first place. I'm sure this didn't find everything. Maybe everything could be found with compiler warnings. -Wconversion kind of does it, but it gives way too many unnecessary warnings. These were mainly found with: grep " = strlen" egrep "unsigned int.*(size|len)"

master: Don't unlink login sockets at startup if someone is listening to them. The original check there never worked, because null_fd was always set. Normally the master.pid file would prevent this happening, but if it didn't exist, the sockets would be unlinked and usually also created back.

master: make setting listen empty an error

global: Fixed mismatched bool vs. int/pointer handling I don't think these fix any actual bugs.

master: Give a nicer error if unix/fifo_listener path is empty. The previous error was simply: unlink(/var/run/dovecot/) failed: Is a directory

global: freshen copyright git ls-files | xargs perl -p -i -e 's/(\d+)-201[0-5]/$1-2016/g;s/ (201[0-5]) Dovecot/ $1-2016 Dovecot/'

Replaced unlink() calls with i_unlink*() wherever possible.

Removed SET_IN_PORT_ZERO - SET_IN_PORT now always allows zeros as well. A zero in all the port settings means that the port is disabled, which is also the default. So it shouldn't be an error to explicitly set it to zero in the config file.

Earlier in_port_t fix created problems with service listener configuration. Listeners are disabled with port=0, which was not allowed anymore.

Changed type of internet port values to in_port_t everywhere. Created special SET_IN_PORT setting type for internet port values. Created net_str2port() for parsing internet port values. Removed several atoi() invocations in the process.

lib-master: Added support for HAProxy protocol. Patch by Stephan Bosch - with some small changes.

master: Fixed a check to see if login directory has any unix listeners.

global: freshen copyright Robomatically: git ls-files | xargs perl -p -i -e 's/(\d+)-201[0-4]/$1-2015/g;s/ (201[0-4]) Dovecot/ $1-2015 Dovecot/' Happy 2015 everyone! Signed-off-by: Phil Carmody <phil@dovecot.fi>

Updated copyright notices to include year 2014.

master: Finished the previous DEBUG_OUTOFMEM -> CORE_OUTOFMEM and CORE_ERROR change.

If DEBUG_OUTOFMEM environment is set, abort() on "out of memory" errors.

master: Added reuse_port setting to inet_listeners, which enables SO_REUSEPORT if available. After forking a new service process, a new listener socket is created for each such inet_listener. Linux v3.9+ added SO_REUSEPORT feature, which should distribute clients more uniformly to the processes. I'm not sure if this makes any difference in BSDs. At least in Linux v3.9 there was still a bug that if the number of listening processes changed, some TCP handshakes might not finish. I don't see if this has already been fixed, so this is probably safe to use only for services whose process count doesn't change (e.g. process_min_avail is set high enough).

master: Fixed warning log message.

Oops :) Update copyrights to 2013 without breaking all .c files.

Updated copyright notices to include year 2013.

master: Ignore service {} blocks with empty executable settings.

master: If service { protocol } is set and not included in "protocols", ignore its settings

Renamed network.[ch] to net.[ch]. The function prefixes already started with net_ instead of network_. And icecap wants to use network.h for other purpose. :)