plugins/trash/trash-plugin.c

	trash-plugin.c revision 326fb016a23480e4ff8dcc03dc80e76812859bd6
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn/* Copyright (c) 2005-2017 Dovecot authors, see the included COPYING file */
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn#include "lib.h"
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn#include "array.h"
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn#include "unichar.h"
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn#include "istream.h"
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn#include "mail-namespace.h"
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn#include "mail-search-build.h"
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn#include "quota-private.h"
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn#include "quota-plugin.h"
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn#include "trash-plugin.h"
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn#include <unistd.h>
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn#include <fcntl.h>
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn#define INIT_TRASH_MAILBOX_COUNT 4
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn#define MAX_RETRY_COUNT 3
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn#define TRASH_USER_CONTEXT(obj) \
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn    MODULE_CONTEXT(obj, trash_user_module)
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehnstruct trash_mailbox {
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn    const char *name;
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn    int priority; /* lower number = higher priority */
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn    struct mail_namespace *ns;
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn    /* temporarily set while cleaning: */
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn    struct mailbox *box;
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbye    struct mailbox_transaction_context *trans;
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbye    struct mail_search_context *search_ctx;
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn    struct mail *mail;
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn};
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehnstruct trash_user {
6336b638e9afd018de5f6c516eac4775d140fdaeJHKST    union mail_user_module_context module_ctx;
6336b638e9afd018de5f6c516eac4775d140fdaeJHKST
6336b638e9afd018de5f6c516eac4775d140fdaeJHKST    /* ordered by priority, highest first */
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn    ARRAY(struct trash_mailbox) trash_boxes;
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn};
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehnconst char *trash_plugin_version = DOVECOT_ABI_VERSION;
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehnstatic MODULE_CONTEXT_DEFINE_INIT(trash_user_module,
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn                  &mail_user_module_register);
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehnstatic int (*trash_next_quota_test_alloc)(struct quota_transaction_context *,
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn                      uoff_t, bool *);
6336b638e9afd018de5f6c516eac4775d140fdaeJHKST
6336b638e9afd018de5f6c516eac4775d140fdaeJHKSTstatic int trash_clean_mailbox_open(struct trash_mailbox *trash)
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn{
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn    struct mail_search_args *search_args;
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn    trash->box = mailbox_alloc(trash->ns->list, trash->name, 0);
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn    if (mailbox_open(trash->box) < 0) {
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn        mailbox_free(&trash->box);
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn        return 0;
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn    }
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn    if (mailbox_sync(trash->box, MAILBOX_SYNC_FLAG_FULL_READ) < 0)
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn        return -1;
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbye    trash->trans = mailbox_transaction_begin(trash->box, 0);
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn    search_args = mail_search_build_init();
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbye    mail_search_build_add_all(search_args);
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn    trash->search_ctx = mailbox_search_init(trash->trans,
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn                        search_args, NULL,
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn                        MAIL_FETCH_PHYSICAL_SIZE |
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbye                        MAIL_FETCH_RECEIVED_DATE, NULL);
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn    mail_search_args_unref(&search_args);
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbye
3ba66fbb56ef22f183da783a1b2718280c357a4eStanislav Kozina    return mailbox_search_next(trash->search_ctx, &trash->mail) ? 1 : 0;
3ba66fbb56ef22f183da783a1b2718280c357a4eStanislav Kozina}
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbye
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbyestatic int trash_clean_mailbox_get_next(struct trash_mailbox *trash,
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn                    time_t *received_time_r)
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn{
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn    int ret;
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbye
3ba66fbb56ef22f183da783a1b2718280c357a4eStanislav Kozina    if (trash->mail == NULL) {
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbye        if (trash->box == NULL)
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbye            ret = trash_clean_mailbox_open(trash);
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbye        else {
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn            ret = mailbox_search_next(trash->search_ctx,
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn                          &trash->mail) ? 1 : 0;
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbye        }
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbye        if (ret <= 0) {
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbye            *received_time_r = 0;
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbye            return ret;
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbye        }
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbye    }
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbye
3ba66fbb56ef22f183da783a1b2718280c357a4eStanislav Kozina    if (mail_get_received_date(trash->mail, received_time_r) < 0)
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbye        return -1;
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbye    return 1;
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbye}
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbye
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehnstatic int trash_try_clean_mails(struct quota_transaction_context *ctx,
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbye                 uint64_t size_needed,
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn                 unsigned int count_needed)
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbye{
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbye    struct trash_user *tuser = TRASH_USER_CONTEXT(ctx->quota->user);
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn    struct trash_mailbox *trashes;
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn    unsigned int i, j, count, oldest_idx;
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbye    time_t oldest, received = 0;
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn    uint64_t size, size_expunged = 0;
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn    unsigned int expunged_count = 0;
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn    int ret = 0;
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbye
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbye    trashes = array_get_modifiable(&tuser->trash_boxes, &count);
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbye    for (i = 0; i < count; ) {
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn        /* expunge oldest mails first in all trash boxes with
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn           same priority */
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn        oldest_idx = count;
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn        oldest = (time_t)-1;
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn        for (j = i; j < count; j++) {
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn            if (trashes[j].priority != trashes[i].priority)
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbye                break;
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbye            ret = trash_clean_mailbox_get_next(&trashes[j],
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbye                               &received);
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbye            if (ret < 0)
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbye                goto err;
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbye            if (ret > 0) {
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbye                if (oldest == (time_t)-1 || received < oldest) {
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbye                    oldest = received;
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbye                    oldest_idx = j;
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbye                }
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbye            }
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbye        }
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbye
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbye        if (oldest_idx < count) {
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbye            if (mail_get_physical_size(trashes[oldest_idx].mail,
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbye                           &size) < 0) {
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbye                /* maybe expunged already? */
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbye                trashes[oldest_idx].mail = NULL;
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbye                continue;
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbye            }
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbye
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbye            mail_expunge(trashes[oldest_idx].mail);
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbye            expunged_count++;
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbye            size_expunged += size;
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbye            if (size_expunged >= size_needed &&
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbye                expunged_count >= count_needed)
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbye                break;
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbye            trashes[oldest_idx].mail = NULL;
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbye        } else {
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbye            /* find more mails from next priority's mailbox */
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn            i = j;
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbye        }
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn    }
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbye
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbyeerr:
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbye    for (i = 0; i < count; i++) {
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbye        struct trash_mailbox *trash = &trashes[i];
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbye
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn        if (trash->box == NULL)
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbye            continue;
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbye
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbye        trash->mail = NULL;
6336b638e9afd018de5f6c516eac4775d140fdaeJHKST        (void)mailbox_search_deinit(&trash->search_ctx);
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbye        if (size_expunged >= size_needed &&
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbye            expunged_count >= count_needed) {
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbye            (void)mailbox_transaction_commit(&trash->trans);
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbye            (void)mailbox_sync(trash->box, 0);
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbye        } else {
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbye            /* couldn't get enough space, don't expunge anything */
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbye                        mailbox_transaction_rollback(&trash->trans);
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbye        }
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbye
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbye        mailbox_free(&trash->box);
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbye    }
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn    if (size_expunged < size_needed) {
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbye        if (ctx->quota->user->mail_debug) {
5fa2dfe6c5b3512e4b4181ec7a11d400a4837ed0Trond Norbye            i_debug("trash plugin: Failed to remove enough messages "
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn                "(needed %llu bytes, expunged only %llu bytes)",
f76545cf39fa3d24a185f56216eb7c1edb9e1e9eSteven Haehn                (unsigned long long)size_needed,
                (unsigned long long)size_expunged);
        }
        return 0;
    }
    if (expunged_count < count_needed) {
        if (ctx->quota->user->mail_debug) {
            i_debug("trash plugin: Failed to remove enough messages "
                "(needed %u messages, expunged only %u messages)",
                count_needed, expunged_count);
        }
        return 0;
    }

    if (ctx->bytes_over > 0) {
        /* user is over quota. drop the over-bytes first. */
        i_assert(ctx->bytes_over <= size_expunged);
        size_expunged -= ctx->bytes_over;
        ctx->bytes_over = 0;
    }
    if (ctx->count_over > 0) {
        /* user is over quota. drop the over-count first. */
        i_assert(ctx->count_over <= expunged_count);
        expunged_count -= ctx->count_over;
        ctx->count_over = 0;
    }

    if (ctx->bytes_ceil > ((uint64_t)-1 - size_expunged)) {
        ctx->bytes_ceil = (uint64_t)-1;
    } else {
        ctx->bytes_ceil += size_expunged;
    }
    if (ctx->count_ceil < ((uint64_t)-1 - expunged_count)) {
        ctx->count_ceil = (uint64_t)-1;
    } else {
        ctx->count_ceil += expunged_count;
    }
    return 1;
}

static int
trash_quota_test_alloc(struct quota_transaction_context *ctx,
               uoff_t size, bool *too_large_r)
{
    int ret, i;
    uint64_t size_needed = 0;
    unsigned int count_needed = 0;

    for (i = 0; ; i++) {
        ret = trash_next_quota_test_alloc(ctx, size, too_large_r);
        if (ret != 0 || *too_large_r) {
            if (ctx->quota->user->mail_debug && *too_large_r) {
                i_debug("trash plugin: Mail is larger than "
                    "quota, won't even try to handle");
            }
            return ret;
        }

        if (i == MAX_RETRY_COUNT) {
            /* trash_try_clean_mails() should have returned 0 if
               it couldn't get enough space, but allow retrying
               it a couple of times if there was some extra space
               that was needed.. */
            break;
        }

        if (ctx->bytes_ceil != (uint64_t)-1 &&
            ctx->bytes_ceil < size + ctx->bytes_over)
            size_needed = size + ctx->bytes_over - ctx->bytes_ceil;
        if (ctx->count_ceil != (uint64_t)-1 &&
            ctx->count_ceil < 1 + ctx->count_over)
            count_needed = 1 + ctx->count_over - ctx->count_ceil;

        /* not enough space. try deleting some from mailbox. */
        ret = trash_try_clean_mails(ctx, size_needed, count_needed);
        if (ret <= 0)
            return 0;
    }
    return 0;
}

static bool trash_find_storage(struct mail_user *user,
                   struct trash_mailbox *trash)
{
    struct mail_namespace *ns;

    ns = mail_namespace_find(user->namespaces, trash->name);
    if ((ns->flags & NAMESPACE_FLAG_UNUSABLE) != 0)
        return FALSE;

    trash->ns = ns;
    return TRUE;
}

static int trash_mailbox_priority_cmp(const struct trash_mailbox *t1,
                      const struct trash_mailbox *t2)
{
    return t1->priority - t2->priority;
}

static int read_configuration(struct mail_user *user, const char *path)
{
    struct trash_user *tuser = TRASH_USER_CONTEXT(user);
    struct istream *input;
    const char *line, *name;
    struct trash_mailbox *trash;
    int fd, ret = 0;

    fd = open(path, O_RDONLY);
    if (fd == -1) {
        i_error("trash plugin: open(%s) failed: %m", path);
        return -1;
    }

    p_array_init(&tuser->trash_boxes, user->pool, INIT_TRASH_MAILBOX_COUNT);

    input = i_stream_create_fd(fd, (size_t)-1);
    i_stream_set_return_partial_line(input, TRUE);
    while ((line = i_stream_read_next_line(input)) != NULL) {
        /* <priority> <mailbox name> */
        name = strchr(line, ' ');
        if (name == NULL || name[1] == '\0' || *line == '#')
            continue;

        trash = array_append_space(&tuser->trash_boxes);
        trash->name = p_strdup(user->pool, name+1);
        if (str_to_int(t_strdup_until(line, name),
                   &trash->priority) < 0) {
            i_error("trash: Invalid priority for mailbox '%s'",
                trash->name);
            ret = -1;
        }

        if (!uni_utf8_str_is_valid(trash->name)) {
            i_error("trash: Mailbox name not UTF-8: %s",
                trash->name);
            ret = -1;
        }
        if (!trash_find_storage(user, trash)) {
            i_error("trash: Namespace not found for mailbox '%s'",
                trash->name);
            ret = -1;
        }

        if (user->mail_debug) {
            i_debug("trash plugin: Added '%s' with priority %d",
                trash->name, trash->priority);
        }
    }
    i_stream_destroy(&input);
    i_close_fd(&fd);

    array_sort(&tuser->trash_boxes, trash_mailbox_priority_cmp);
    return ret;
}

static void
trash_mail_user_created(struct mail_user *user)
{
    struct quota_user *quser = QUOTA_USER_CONTEXT(user);
    struct trash_user *tuser;
    const char *env;

    env = mail_user_plugin_getenv(user, "trash");
    if (env == NULL) {
        if (user->mail_debug)
            i_debug("trash: No trash setting - plugin disabled");
    } else if (quser == NULL) {
        i_error("trash plugin: quota plugin not initialized");
    } else {
        tuser = p_new(user->pool, struct trash_user, 1);
        MODULE_CONTEXT_SET(user, trash_user_module, tuser);
    }
}

static void
trash_mail_namespaces_created(struct mail_namespace *namespaces)
{
    struct mail_user *user = namespaces->user;
    struct trash_user *tuser = TRASH_USER_CONTEXT(user);
    struct quota_user *quser = QUOTA_USER_CONTEXT(user);
    const char *env = mail_user_plugin_getenv(user, "trash");

    if (tuser != NULL && read_configuration(user, env) == 0) {
        trash_next_quota_test_alloc =
            quser->quota->set->test_alloc;
        quser->quota->set->test_alloc = trash_quota_test_alloc;
    }
}

static struct mail_storage_hooks trash_mail_storage_hooks = {
    .mail_user_created = trash_mail_user_created,
    .mail_namespaces_created = trash_mail_namespaces_created,
};

void trash_plugin_init(struct module *module)
{
    mail_storage_hooks_add(module, &trash_mail_storage_hooks);
}

void trash_plugin_deinit(void)
{
    mail_storage_hooks_remove(&trash_mail_storage_hooks);
}

const char *trash_plugin_dependencies[] = { "quota", NULL };