master: Flip disallow_root in drop_privileges()

lib: Add restrict_access_flags enum to use with restrict_access[_by_env]() Swap parameter locations in the functions to make sure plugins are updated to use the new api.

Updated copyright notices to include the year 2018.

lib-master: Add log_debug setting lib-master understands only the global log_debug setting, which is passed to it via environment from master process, or alternatively via doveconf when executing standalone programs. Any per-user log_debug settings need to be handled explicitly elsewhere.

global: Use PRI* macros and %zu instead of casting

global: stop including fd-set-nonblock.h & fd-close-on-exec.h directly

global: start relying on timeout_remove(NULL) being a no-op Cleanup performed with the following semantic patch: @@ expression E; @@ - if (E != NULL) { - timeout_remove(&E); - } + timeout_remove(&E);

master: When logging fork() EAGAIN failure, include current ulimit -u value

Updated copyright notices to include the year 2017.

global: Change string position/length from unsigned int to size_t Mainly to avoid truncating >4GB strings, which might potentially cause some security holes. Normally there are other limits, which prevent such excessive strings from being created in the first place. I'm sure this didn't find everything. Maybe everything could be found with compiler warnings. -Wconversion kind of does it, but it gives way too many unnecessary warnings. These were mainly found with: grep " = strlen" egrep "unsigned int.*(size|len)"

master: Removed unused process_exec(extra_args) parameter Removes unnecessarily complicated code marked with @UNSAFE.

global: use dev_null_fd instead of opening /dev/null

master: If chrooted service's core wasn't dumped, suggest to unset the chroot.

master: Added support for stopping specific services. We need to have a per-service fd for detecting a dead master.

global: Require comparisons to be strict boolean expressions * No implicit integer -> boolean or pointer -> boolean conversions * !expr can be used only if expr is boolean type These were checked with a patched clang. It found various actual bugs, which were fixed by the previous commits.

global: freshen copyright git ls-files | xargs perl -p -i -e 's/(\d+)-201[0-5]/$1-2016/g;s/ (201[0-5]) Dovecot/ $1-2016 Dovecot/'

Remove now-unnecessary direct stdlib.h #includes.

lib-master: Added support for HAProxy protocol. Patch by Stephan Bosch - with some small changes.

master: Changed passing of listener settings from master to process to be more flexible. This is needed to allow adding new listener settings, such as `haproxy'. Patch by Stephan Bosch - with some small changes.

log: If too much logging data is sent, show it in process title.

global: freshen copyright Robomatically: git ls-files | xargs perl -p -i -e 's/(\d+)-201[0-4]/$1-2015/g;s/ (201[0-4]) Dovecot/ $1-2015 Dovecot/' Happy 2015 everyone! Signed-off-by: Phil Carmody <phil@dovecot.fi>

master: Added an assert to catch duplicate fork() PIDs. This really shouldn't be happening, but apparently it does sometimes. This should make it easier to debug.

Updated copyright notices to include year 2014.

master: Finished the previous DEBUG_OUTOFMEM -> CORE_OUTOFMEM and CORE_ERROR change.

master: host.domain lookups weren't cached, they were done at the worst possible time. This fixes "net_connect_unix(imap) failed: Resource temporarily unavailable" and various other issues where processes weren't being created fast enough if the host.domain lookup was slow (e.g. done via external DNS).

If DEBUG_OUTOFMEM environment is set, abort() on "out of memory" errors.

master: Added reuse_port setting to inet_listeners, which enables SO_REUSEPORT if available. After forking a new service process, a new listener socket is created for each such inet_listener. Linux v3.9+ added SO_REUSEPORT feature, which should distribute clients more uniformly to the processes. I'm not sure if this makes any difference in BSDs. At least in Linux v3.9 there was still a bug that if the number of listening processes changed, some TCP handshakes might not finish. I don't see if this has already been fixed, so this is probably safe to use only for services whose process count doesn't change (e.g. process_min_avail is set high enough).

master: Pre-fork processes only while master doesn't have more important things to do.

lib-master: Added master_service_get_process_min_avail()

Master looks up system hostdomain now and sends it to child processes via environment. This avoids doing a gethostbyname() lookup at startup for each process that needs it.

Oops :) Update copyrights to 2013 without breaking all .c files.

Updated copyright notices to include year 2013.