1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
|
/* common.c --- Common routines, constants, etc. Used by all the wrappers.
*
* Copyright (C) 1998 by the Free Software Foundation, Inc.
*
* This program is free software; you can redistribute it and/or
* modify it under the terms of the GNU General Public License
* as published by the Free Software Foundation; either version 2
* of the License, or (at your option) any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* along with this program; if not, write to the Free Software
* Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
*/
#include "common.h"
/* passed in by configure */
#define SCRIPTDIR PREFIX ## "/scripts/" /* trailing slash */
#define MODULEDIR PREFIX /* no trailing slash */
const char* scriptdir = SCRIPTDIR;
const char* moduledir = MODULEDIR;
char* python = PYTHON;
/*
* Some older systems don't define strerror(). Provide a replacement
* that is good enough for our purposes.
*/
#ifndef HAVE_STRERROR
extern char *sys_errlist[];
extern int sys_nerr;
char* strerror(int errno)
{
if(errno < 0 || errno >= sys_nerr) {
return "unknown error";
}
else {
return sys_errlist[errno];
}
}
#endif /* ! HAVE_STRERROR */
/* Report on errors and exit
*/
void
fatal(const char* ident, const char* format, ...)
{
char log_entry[1024];
va_list arg_ptr;
va_start(arg_ptr, format);
vsprintf(log_entry, format, arg_ptr);
va_end(arg_ptr);
/* Write to the console, maillog is often mostly ignored, and root
* should definitely know about any problems.
*/
openlog(ident, LOG_CONS, LOG_MAIL);
syslog(LOG_ERR, "%s", log_entry);
closelog();
exit(1);
}
/* Is the parent process allowed to call us?
*/
void
check_caller(const char* ident, gid_t parentgid)
{
if (parentgid != getgid()) {
fatal(ident,
"Failure to exec script. WANTED gid %d, GOT gid %d. "
"(Reconfigure to take %d?)",
parentgid, getgid(), getgid());
}
}
/* Run a Python script out of the script directory
*
* args[0] should be the abs path to the Python script to execute
* argv[1:] are other args for the script
* env may or may not contain PYTHONPATH, we'll substitute our own
*/
int
run_script(const char* script, int argc, char** argv, char** env)
{
const char envstr[] = "PYTHONPATH=";
const int envlen = strlen(envstr);
int envcnt = 0;
int i, j, status;
char** newenv;
char** newargv;
/* We want to tightly control how the CGI scripts get executed.
* For portability and security, the path to the Python executable
* is hard-coded into this C wrapper, rather than encoded in the #!
* line of the script that gets executed. So we invoke those
* scripts by passing the script name on the command line to the
* Python executable.
*
* We also need to hack on the PYTHONPATH environment variable so
* that the path to the installed Mailman modules will show up
* first on sys.path.
*
*/
for (envcnt = 0; env[envcnt]; envcnt++)
;
/* okay to be a little too big */
newenv = (char**)malloc(sizeof(char*) * (envcnt + 2));
/* filter out any existing PYTHONPATH in the environment */
for (i = 0, j = 0; i < envcnt; i++)
if (strncmp(envstr, env[i], envlen)) {
newenv[i] = env[j];
j++;
}
/* Tack on our own version of PYTHONPATH, which should contain only
* the path to the Mailman package modules.
*
* $(PREFIX)/modules
*/
newenv[j] = (char*)malloc(sizeof(char) * (
strlen(envstr) +
strlen(moduledir) +
1));
strcpy(newenv[j], envstr);
strcat(newenv[j], moduledir);
j++;
newenv[j] = NULL;
/* Now put together argv. This will contain first the absolute path
* to the python executable, then the absolute path to the script,
* then any additional args passed in argv above.
*/
newargv = (char**)malloc(sizeof(char*) * (argc + 2));
newargv[0] = python;
newargv[1] = (char*)malloc(sizeof(char) * (
strlen(scriptdir) +
strlen(script) +
1));
strcpy(newargv[1], scriptdir);
strcat(newargv[1], script);
/* now tack on all the rest of the arguments. we can skip argv's
* first two arguments because, for cgi-wrapper there is only argv[0].
* For mail-wrapper, argv[1] is the mail command (e.g. post,
* mailowner, or mailcmd) and argv[2] is the listname. The mail
* command to execute gets passed in as this function's `script'
* parameter and becomes the argument to the python interpreter. The
* list name therefore should become argv[2] to this process.
*
* TBD: have to make sure this works with alias-wrapper.
*/
for (i = 2; i < argc; i++)
newargv[i] = argv[i];
newargv[i] = NULL;
status = execve(python, &newargv[0], &newenv[0]);
return status;
}
/*
* Local Variables:
* c-file-style: "python"
* End:
*/
|
