src/master/service-process.c

	service-process.c revision 077ab4470660b791c2b76eb4bb5663bbafc8177f
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi/* Copyright (c) 2005-2013 Dovecot authors, see the included COPYING file */
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi#include "common.h"
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi#include "array.h"
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi#include "aqueue.h"
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi#include "ioloop.h"
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi#include "istream.h"
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi#include "ostream.h"
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi#include "write-full.h"
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi#include "base64.h"
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi#include "hash.h"
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi#include "str.h"
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi#include "strescape.h"
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi#include "llist.h"
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi#include "hostpid.h"
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi#include "env-util.h"
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi#include "fd-close-on-exec.h"
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi#include "restrict-access.h"
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi#include "restrict-process-size.h"
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi#include "eacces-error.h"
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi#include "master-service.h"
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi#include "master-service-settings.h"
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi#include "dup2-array.h"
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi#include "service.h"
8900b9eb2514c07047541833286428572493a9fdStéphane Graber#include "service-anvil.h"
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi#include "service-listen.h"
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi#include "service-log.h"
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi#include "service-process-notify.h"
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi#include "service-process.h"
faefa7f8584a7d1567df2e6f1f9240a28a6466abStéphane Graber
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi#include <stdlib.h>
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi#include <unistd.h>
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi#include <fcntl.h>
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi#include <syslog.h>
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi#include <signal.h>
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi#include <sys/wait.h>
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumistatic void service_reopen_inet_listeners(struct service *service)
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi{
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi    struct service_listener *const *listeners;
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi    unsigned int i, count;
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi    int old_fd;
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi    listeners = array_get(&service->listeners, &count);
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi    for (i = 0; i < count; i++) {
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi        if (!listeners[i]->reuse_port || listeners[i]->fd == -1)
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi            continue;
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi        old_fd = listeners[i]->fd;
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi        listeners[i]->fd = -1;
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi        if (service_listener_listen(listeners[i]) < 0)
6127da6b3f5815028bee187ac98840cd94313841KATOH Yasufumi            listeners[i]->fd = old_fd;
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi    }
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi}
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumistatic void
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumiservice_dup_fds(struct service *service)
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi{
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi    struct service_listener *const *listeners;
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi    ARRAY_TYPE(dup2) dups;
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi    string_t *listener_names;
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi    int fd = MASTER_LISTEN_FD_FIRST;
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi    unsigned int i, count, socket_listener_count, ssl_socket_count;
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi    /* stdin/stdout is already redirected to /dev/null. Other master fds
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi       should have been opened with fd_close_on_exec() so we don't have to
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi       worry about them.
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi       because the destination fd might be another one's source fd we have
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi       to be careful not to overwrite anything. dup() the fd when needed */
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi        socket_listener_count = 0;
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi    listeners = array_get(&service->listeners, &count);
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi    t_array_init(&dups, count + 10);
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi    listener_names = t_str_new(256);
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi    switch (service->type) {
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi    case SERVICE_TYPE_LOG:
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi        i_assert(fd == MASTER_LISTEN_FD_FIRST);
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi        services_log_dup2(&dups, service->list, fd,
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi                  &socket_listener_count);
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi        fd += socket_listener_count;
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi        break;
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi    case SERVICE_TYPE_ANVIL:
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi        dup2_append(&dups, service_anvil_global->log_fdpass_fd[0],
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi                MASTER_ANVIL_LOG_FDPASS_FD);
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi        /* nonblocking anvil fd must be the first one. anvil treats it
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi           as the master's fd */
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi        dup2_append(&dups, service_anvil_global->nonblocking_fd[0], fd++);
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi        dup2_append(&dups, service_anvil_global->blocking_fd[0], fd++);
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi        socket_listener_count += 2;
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi        break;
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi    default:
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi        break;
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi    }
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi    /* anvil/log fds have no names */
48e49f08c0f0d33d75e42cd1f6bf446f740fff8aKATOH Yasufumi    for (i = MASTER_LISTEN_FD_FIRST; i < (unsigned int)fd; i++)
99282c429a23a2ffa699ca149bb7f9cd5705646aKATOH Yasufumi        str_append_c(listener_names, '\t');
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi
9a97d4e4bdf331bb2c2b8ed14bcefa53358c288fKATOH Yasufumi    /* first add non-ssl listeners */
9a97d4e4bdf331bb2c2b8ed14bcefa53358c288fKATOH Yasufumi    for (i = 0; i < count; i++) {
9a97d4e4bdf331bb2c2b8ed14bcefa53358c288fKATOH Yasufumi        if (listeners[i]->fd != -1 &&
9a97d4e4bdf331bb2c2b8ed14bcefa53358c288fKATOH Yasufumi            (listeners[i]->type != SERVICE_LISTENER_INET ||
9a97d4e4bdf331bb2c2b8ed14bcefa53358c288fKATOH Yasufumi             !listeners[i]->set.inetset.set->ssl)) {
48e49f08c0f0d33d75e42cd1f6bf446f740fff8aKATOH Yasufumi            str_append_tabescaped(listener_names, listeners[i]->name);
9a97d4e4bdf331bb2c2b8ed14bcefa53358c288fKATOH Yasufumi            str_append_c(listener_names, '\t');
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi            dup2_append(&dups, listeners[i]->fd, fd++);
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi            socket_listener_count++;
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi        }
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi    }
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi    /* then ssl-listeners */
e8ea311657f82b91710dfcb8bca656bd5b94c66cKATOH Yasufumi    ssl_socket_count = 0;
e8ea311657f82b91710dfcb8bca656bd5b94c66cKATOH Yasufumi    for (i = 0; i < count; i++) {
e8ea311657f82b91710dfcb8bca656bd5b94c66cKATOH Yasufumi        if (listeners[i]->fd != -1 &&
e8ea311657f82b91710dfcb8bca656bd5b94c66cKATOH Yasufumi            listeners[i]->type == SERVICE_LISTENER_INET &&
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi            listeners[i]->set.inetset.set->ssl) {
e8ea311657f82b91710dfcb8bca656bd5b94c66cKATOH Yasufumi            str_append_tabescaped(listener_names, listeners[i]->name);
e8ea311657f82b91710dfcb8bca656bd5b94c66cKATOH Yasufumi            str_append_c(listener_names, '\t');
48e49f08c0f0d33d75e42cd1f6bf446f740fff8aKATOH Yasufumi            dup2_append(&dups, listeners[i]->fd, fd++);
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi            socket_listener_count++;
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi            ssl_socket_count++;
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi        }
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi    }
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi    if (service->login_notify_fd != -1) {
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi        dup2_append(&dups, service->login_notify_fd,
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi                MASTER_LOGIN_NOTIFY_FD);
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi    }
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi    switch (service->type) {
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi    case SERVICE_TYPE_LOG:
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi    case SERVICE_TYPE_ANVIL:
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi    case SERVICE_TYPE_CONFIG:
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi        dup2_append(&dups, null_fd, MASTER_ANVIL_FD);
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi        break;
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi    case SERVICE_TYPE_UNKNOWN:
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi    case SERVICE_TYPE_LOGIN:
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi    case SERVICE_TYPE_STARTUP:
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi        dup2_append(&dups, service_anvil_global->blocking_fd[1],
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi                MASTER_ANVIL_FD);
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi        break;
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi    }
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi    dup2_append(&dups, service->status_fd[1], MASTER_STATUS_FD);
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi    if (service->type != SERVICE_TYPE_ANVIL) {
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi        dup2_append(&dups, service->list->master_dead_pipe_fd[1],
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi                MASTER_DEAD_FD);
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi    } else {
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi        dup2_append(&dups, global_master_dead_pipe_fd[1],
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi                MASTER_DEAD_FD);
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi    }
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi    if (service->type == SERVICE_TYPE_LOG) {
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi        /* keep stderr as-is. this is especially important when
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi           log_path=/dev/stderr, but might be helpful even in other
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi           situations for logging startup errors */
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi    } else {
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi        /* set log file to stderr. dup2() here immediately so that
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi           we can set up logging to it without causing any log messages
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi           to be lost. */
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi        i_assert(service->log_fd[1] != -1);
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi        env_put("LOG_SERVICE=1");
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi        if (dup2(service->log_fd[1], STDERR_FILENO) < 0)
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi            i_fatal("dup2(log fd) failed: %m");
9a97d4e4bdf331bb2c2b8ed14bcefa53358c288fKATOH Yasufumi        i_set_failure_internal();
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi    }
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi    /* make sure we don't leak syslog fd. try to do it as late as possible,
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi       but also before dup2()s in case syslog fd is one of them. */
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi    closelog();
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi    if (dup2_array(&dups) < 0)
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi        i_fatal("service(%s): dup2s failed", service->set->name);
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi    i_assert(fd == MASTER_LISTEN_FD_FIRST + (int)socket_listener_count);
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi    env_put(t_strdup_printf("SOCKET_COUNT=%d", socket_listener_count));
99282c429a23a2ffa699ca149bb7f9cd5705646aKATOH Yasufumi    env_put(t_strdup_printf("SSL_SOCKET_COUNT=%d", ssl_socket_count));
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi    env_put(t_strdup_printf("SOCKET_NAMES=%s", str_c(listener_names)));
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi}
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumistatic void
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumidrop_privileges(struct service *service)
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi{
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi    struct restrict_access_settings rset;
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi    bool disallow_root;
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi    unsigned int len;
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi    if (service->vsz_limit != 0)
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi        restrict_process_size(service->vsz_limit);
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi    restrict_access_init(&rset);
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi    rset.uid = service->uid;
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi    rset.gid = service->gid;
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi    rset.privileged_gid = service->privileged_gid;
9a97d4e4bdf331bb2c2b8ed14bcefa53358c288fKATOH Yasufumi    rset.chroot_dir = *service->set->chroot == '\0' ? NULL :
9a97d4e4bdf331bb2c2b8ed14bcefa53358c288fKATOH Yasufumi        service->set->chroot;
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi    if (rset.chroot_dir != NULL) {
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi        /* drop trailing / if it exists */
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi        len = strlen(rset.chroot_dir);
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi        if (rset.chroot_dir[len-1] == '/')
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi            rset.chroot_dir = t_strndup(rset.chroot_dir, len-1);
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi    }
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi    rset.extra_groups = service->extra_gids;
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi    restrict_access_set_env(&rset);
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi    if (service->set->drop_priv_before_exec) {
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi        disallow_root = service->type == SERVICE_TYPE_LOGIN;
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi        restrict_access(&rset, NULL, disallow_root);
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi    }
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi}
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi
9a97d4e4bdf331bb2c2b8ed14bcefa53358c288fKATOH Yasufumistatic void service_process_setup_config_environment(struct service *service)
9a97d4e4bdf331bb2c2b8ed14bcefa53358c288fKATOH Yasufumi{
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi    const struct master_service_settings *set = service->list->service_set;
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi    switch (service->type) {
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi    case SERVICE_TYPE_CONFIG:
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi        env_put(t_strconcat(MASTER_CONFIG_FILE_ENV"=",
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi                    service->config_file_path, NULL));
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi        break;
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi    case SERVICE_TYPE_LOG:
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi        /* give the log's configuration directly, so it won't depend
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi           on config process */
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi        env_put("DOVECONF_ENV=1");
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi        env_put(t_strconcat("LOG_PATH=", set->log_path, NULL));
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi        env_put(t_strconcat("INFO_LOG_PATH=", set->info_log_path, NULL));
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi        env_put(t_strconcat("DEBUG_LOG_PATH=", set->debug_log_path, NULL));
f7f1ba77b76e4d4dc18638cfdc859c3dc1750a9eStéphane Graber        env_put(t_strconcat("LOG_TIMESTAMP=", set->log_timestamp, NULL));
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi        env_put(t_strconcat("SYSLOG_FACILITY=", set->syslog_facility, NULL));
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi        env_put("SSL=no");
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi        break;
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi    default:
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi        env_put(t_strconcat(MASTER_CONFIG_FILE_ENV"=",
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi            services_get_config_socket_path(service->list), NULL));
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi        break;
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi    }
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi}
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumistatic void
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumiservice_process_setup_environment(struct service *service, unsigned int uid)
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi{
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi    master_service_env_clean();
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi    env_put(MASTER_IS_PARENT_ENV"=1");
9a97d4e4bdf331bb2c2b8ed14bcefa53358c288fKATOH Yasufumi    service_process_setup_config_environment(service);
9a97d4e4bdf331bb2c2b8ed14bcefa53358c288fKATOH Yasufumi    env_put(t_strdup_printf(MASTER_CLIENT_LIMIT_ENV"=%u",
9a97d4e4bdf331bb2c2b8ed14bcefa53358c288fKATOH Yasufumi                service->client_limit));
9a97d4e4bdf331bb2c2b8ed14bcefa53358c288fKATOH Yasufumi    env_put(t_strdup_printf(MASTER_PROCESS_LIMIT_ENV"=%u",
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi                service->process_limit));
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi    env_put(t_strdup_printf(MASTER_PROCESS_MIN_AVAIL_ENV"=%u",
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi                service->set->process_min_avail));
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi    env_put(t_strdup_printf(MASTER_SERVICE_IDLE_KILL_ENV"=%u",
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi                service->idle_kill));
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi    if (service->set->service_count != 0) {
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi        env_put(t_strdup_printf(MASTER_SERVICE_COUNT_ENV"=%u",
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi                    service->set->service_count));
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi    }
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi    env_put(t_strdup_printf(MASTER_UID_ENV"=%u", uid));
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi    env_put(t_strdup_printf(MY_HOSTNAME_ENV"=%s", my_hostname));
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi    env_put(t_strdup_printf(MY_HOSTDOMAIN_ENV"=%s", my_hostdomain()));
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi    if (!service->set->master_set->version_ignore)
48e49f08c0f0d33d75e42cd1f6bf446f740fff8aKATOH Yasufumi        env_put(MASTER_DOVECOT_VERSION_ENV"="PACKAGE_VERSION);
48e49f08c0f0d33d75e42cd1f6bf446f740fff8aKATOH Yasufumi
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi    if (ssl_manual_key_password != NULL && service->have_inet_listeners) {
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi        /* manually given SSL password. give it only to services
9a97d4e4bdf331bb2c2b8ed14bcefa53358c288fKATOH Yasufumi           that have inet listeners. */
9a97d4e4bdf331bb2c2b8ed14bcefa53358c288fKATOH Yasufumi        env_put(t_strconcat(MASTER_SSL_KEY_PASSWORD_ENV"=",
48e49f08c0f0d33d75e42cd1f6bf446f740fff8aKATOH Yasufumi                    ssl_manual_key_password, NULL));
48e49f08c0f0d33d75e42cd1f6bf446f740fff8aKATOH Yasufumi    }
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi    if (service->type == SERVICE_TYPE_ANVIL &&
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi        service_anvil_global->restarted)
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi        env_put("ANVIL_RESTARTED=1");
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi}
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumistatic void service_process_status_timeout(struct service_process *process)
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi{
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi    service_error(process->service,
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi              "Initial status notification not received in %d "
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi              "seconds, killing the process",
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi              SERVICE_FIRST_STATUS_TIMEOUT_SECS);
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi    if (kill(process->pid, SIGKILL) < 0 && errno != ESRCH) {
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi        service_error(process->service, "kill(%s, SIGKILL) failed: %m",
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi                  dec2str(process->pid));
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi    }
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi    timeout_remove(&process->to_status);
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi}
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumistruct service_process *service_process_create(struct service *service)
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi{
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi    static unsigned int uid_counter = 0;
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi    struct service_process *process;
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi    unsigned int uid = ++uid_counter;
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi    pid_t pid;
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi    bool process_forked;
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi    i_assert(service->status_fd[0] != -1);
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi    if (service->to_throttle != NULL) {
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi        /* throttling service, don't create new processes */
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi        return NULL;
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi    }
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi    if (service->list->destroying) {
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi        /* these services are being destroyed, no point in creating
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi           new processes now */
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi        return NULL;
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi    }
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi    if (service->type == SERVICE_TYPE_ANVIL &&
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi        service_anvil_global->pid != 0) {
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi        pid = service_anvil_global->pid;
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi        uid = service_anvil_global->uid;
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi        process_forked = FALSE;
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi    } else {
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi        pid = fork();
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi        process_forked = TRUE;
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi        service->list->fork_counter++;
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi    }
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi    if (pid < 0) {
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi        service_error(service, "fork() failed: %m");
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi        return NULL;
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi    }
9a97d4e4bdf331bb2c2b8ed14bcefa53358c288fKATOH Yasufumi    if (pid == 0) {
9a97d4e4bdf331bb2c2b8ed14bcefa53358c288fKATOH Yasufumi        /* child */
9a97d4e4bdf331bb2c2b8ed14bcefa53358c288fKATOH Yasufumi        service_process_setup_environment(service, uid);
9a97d4e4bdf331bb2c2b8ed14bcefa53358c288fKATOH Yasufumi        service_reopen_inet_listeners(service);
9a97d4e4bdf331bb2c2b8ed14bcefa53358c288fKATOH Yasufumi        service_dup_fds(service);
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi        drop_privileges(service);
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi        process_exec(service->executable, NULL);
a5ba96715d4ef264c43d4f187251de491ba198c0KATOH Yasufumi    }
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi    process = i_new(struct service_process, 1);
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi    process->service = service;
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi    process->refcount = 1;
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi    process->pid = pid;
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi    process->uid = uid;
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi    if (process_forked) {
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi        process->to_status =
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi            timeout_add(SERVICE_FIRST_STATUS_TIMEOUT_SECS * 1000,
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi                    service_process_status_timeout, process);
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi    }
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi    process->available_count = service->client_limit;
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi    service->process_count++;
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi    service->process_avail++;
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi    DLLIST_PREPEND(&service->processes, process);
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi    service_list_ref(service->list);
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi    hash_table_insert(service_pids, POINTER_CAST(process->pid), process);
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi    if (service->type == SERVICE_TYPE_ANVIL && process_forked)
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi        service_anvil_process_created(process);
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi    return process;
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi}
57da8c32f85c0255efa61ee32e260068afdaa565KATOH Yasufumi
void service_process_destroy(struct service_process *process)
{
    struct service *service = process->service;
    struct service_list *service_list = service->list;

    DLLIST_REMOVE(&service->processes, process);
    hash_table_remove(service_pids, POINTER_CAST(process->pid));

    if (process->available_count > 0)
        service->process_avail--;
    service->process_count--;
    i_assert(service->process_avail <= service->process_count);

    if (process->to_status != NULL)
        timeout_remove(&process->to_status);
    if (process->to_idle != NULL)
        timeout_remove(&process->to_idle);
    if (service->list->log_byes != NULL)
        service_process_notify_add(service->list->log_byes, process);

    process->destroyed = TRUE;
    service_process_unref(process);

    if (service->process_count < service->process_limit &&
        service->type == SERVICE_TYPE_LOGIN)
        service_login_notify(service, FALSE);

    service_list_unref(service_list);
}

void service_process_ref(struct service_process *process)
{
    i_assert(process->refcount > 0);

    process->refcount++;
}

void service_process_unref(struct service_process *process)
{
    i_assert(process->refcount > 0);

    if (--process->refcount > 0)
        return;

    i_assert(process->destroyed);
    i_free(process);
}

static const char *
get_exit_status_message(struct service *service, enum fatal_exit_status status)
{
    string_t *str;

    switch (status) {
    case FATAL_LOGOPEN:
        return "Can't open log file";
    case FATAL_LOGWRITE:
        return "Can't write to log file";
    case FATAL_LOGERROR:
        return "Internal logging error";
    case FATAL_OUTOFMEM:
        str = t_str_new(128);
        str_append(str, "Out of memory");
        if (service->vsz_limit != 0) {
            str_printfa(str, " (service %s { vsz_limit=%u MB }, "
                    "you may need to increase it)",
                    service->set->name,
                    (unsigned int)(service->vsz_limit/1024/1024));
        }
        if (getenv("DEBUG_OUTOFMEM") == NULL)
            str_append(str, " - set DEBUG_OUTOFMEM=1 environment to get core dump");
        return str_c(str);
    case FATAL_EXEC:
        return "exec() failed";

    case FATAL_DEFAULT:
        return "Fatal failure";
    }

    return NULL;
}

static void
log_coredump(struct service *service, string_t *str, int status)
{
#ifdef WCOREDUMP
    int signum = WTERMSIG(status);

    if (WCOREDUMP(status)) {
        str_append(str, " (core dumped)");
        return;
    }

    if (signum != SIGABRT && signum != SIGSEGV && signum != SIGBUS)
        return;

    /* let's try to figure out why we didn't get a core dump */
    if (core_dumps_disabled) {
        str_printfa(str, " (core dumps disabled)");
        return;
    }

#ifndef HAVE_PR_SET_DUMPABLE
    if (!service->set->drop_priv_before_exec && service->uid != 0) {
        str_printfa(str, " (core not dumped - set service %s "
                "{ drop_priv_before_exec=yes })",
                service->set->name);
        return;
    }
    if (*service->set->privileged_group != '\0' && service->uid != 0) {
        str_printfa(str, " (core not dumped - service %s "
                "{ privileged_group } prevented it)",
                service->set->name);
        return;
    }
#else
    if (!service->set->login_dump_core &&
        service->type == SERVICE_TYPE_LOGIN) {
        str_printfa(str, " (core not dumped - add -D parameter to "
                "service %s { executable }", service->set->name);
        return;
    }
#endif

    str_append(str, " (core not dumped)");
#endif
}

static void
service_process_get_status_error(string_t *str, struct service_process *process,
                 int status, bool *default_fatal_r)
{
    struct service *service = process->service;
    const char *msg;

    *default_fatal_r = FALSE;

    str_printfa(str, "service(%s): child %s ", service->set->name,
            dec2str(process->pid));
    if (WIFSIGNALED(status)) {
        str_printfa(str, "killed with signal %d", WTERMSIG(status));
        log_coredump(service, str, status);
        return;
    }
    if (!WIFEXITED(status)) {
        str_printfa(str, "died with status %d", status);
        return;
    }

    status = WEXITSTATUS(status);
    if (status == 0) {
        str_truncate(str, 0);
        return;
    }
    str_printfa(str, "returned error %d", status);

    msg = get_exit_status_message(service, status);
    if (msg != NULL)
        str_printfa(str, " (%s)", msg);

    if (status == FATAL_DEFAULT)
        *default_fatal_r = TRUE;
}

static void service_process_log(struct service_process *process,
                bool default_fatal, const char *str)
{
    const char *data;

    if (process->service->log_fd[1] == -1) {
        i_error("%s", str);
        return;
    }

    /* log it via the log process in charge of handling
       this process's logging */
    data = t_strdup_printf("%d %s %s %s\n",
                   process->service->log_process_internal_fd,
                   dec2str(process->pid),
                   default_fatal ? "DEFAULT-FATAL" : "FATAL", str);
    if (write(process->service->list->master_log_fd[1],
          data, strlen(data)) < 0) {
        i_error("write(log process) failed: %m");
        i_error("%s", str);
    }
}

void service_process_log_status_error(struct service_process *process,
                      int status)
{
    if (WIFEXITED(status) && WEXITSTATUS(status) == 0) {
        /* fast path */
        return;
    }
    T_BEGIN {
        string_t *str = t_str_new(256);
        bool default_fatal;

        service_process_get_status_error(str, process, status,
                         &default_fatal);
        if (str_len(str) > 0)
            service_process_log(process, default_fatal, str_c(str));
    } T_END;
}