xref: /freebsd/usr.sbin/newsyslog/newsyslog.c (revision a521f2116473fbd8c09db395518f060a27d02334)
1 /*-
2  * ------+---------+---------+-------- + --------+---------+---------+---------*
3  * This file includes significant modifications done by:
4  * Copyright (c) 2003, 2004  - Garance Alistair Drosehn <gad@FreeBSD.org>.
5  * All rights reserved.
6  *
7  * Redistribution and use in source and binary forms, with or without
8  * modification, are permitted provided that the following conditions
9  * are met:
10  *   1. Redistributions of source code must retain the above copyright
11  *      notice, this list of conditions and the following disclaimer.
12  *   2. Redistributions in binary form must reproduce the above copyright
13  *      notice, this list of conditions and the following disclaimer in the
14  *      documentation and/or other materials provided with the distribution.
15  *
16  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
17  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
18  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
19  * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
20  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
21  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
22  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
23  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
24  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
25  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
26  * SUCH DAMAGE.
27  *
28  * ------+---------+---------+-------- + --------+---------+---------+---------*
29  */
30 
31 /*
32  * This file contains changes from the Open Software Foundation.
33  */
34 
35 /*
36  * Copyright 1988, 1989 by the Massachusetts Institute of Technology
37  *
38  * Permission to use, copy, modify, and distribute this software and its
39  * documentation for any purpose and without fee is hereby granted, provided
40  * that the above copyright notice appear in all copies and that both that
41  * copyright notice and this permission notice appear in supporting
42  * documentation, and that the names of M.I.T. and the M.I.T. S.I.P.B. not be
43  * used in advertising or publicity pertaining to distribution of the
44  * software without specific, written prior permission. M.I.T. and the M.I.T.
45  * S.I.P.B. make no representations about the suitability of this software
46  * for any purpose.  It is provided "as is" without express or implied
47  * warranty.
48  *
49  */
50 
51 /*
52  * newsyslog - roll over selected logs at the appropriate time, keeping the a
53  * specified number of backup files around.
54  */
55 
56 #include <sys/cdefs.h>
57 __FBSDID("$FreeBSD$");
58 
59 #define	OSF
60 
61 #include <sys/param.h>
62 #include <sys/queue.h>
63 #include <sys/sbuf.h>
64 #include <sys/stat.h>
65 #include <sys/wait.h>
66 
67 #include <assert.h>
68 #include <ctype.h>
69 #include <err.h>
70 #include <errno.h>
71 #include <dirent.h>
72 #include <fcntl.h>
73 #include <fnmatch.h>
74 #include <glob.h>
75 #include <grp.h>
76 #include <paths.h>
77 #include <pwd.h>
78 #include <signal.h>
79 #include <stdio.h>
80 #include <libgen.h>
81 #include <stdlib.h>
82 #include <string.h>
83 #include <syslog.h>
84 #include <time.h>
85 #include <unistd.h>
86 
87 #include "pathnames.h"
88 #include "extern.h"
89 
90 /*
91  * Compression types
92  */
93 #define	COMPRESS_TYPES  5	/* Number of supported compression types */
94 
95 #define	COMPRESS_NONE	0
96 #define	COMPRESS_GZIP	1
97 #define	COMPRESS_BZIP2	2
98 #define	COMPRESS_XZ	3
99 #define COMPRESS_ZSTD	4
100 
101 /*
102  * Bit-values for the 'flags' parsed from a config-file entry.
103  */
104 #define	CE_BINARY	0x0008	/* Logfile is in binary, do not add status */
105 				/*    messages to logfile(s) when rotating. */
106 #define	CE_NOSIGNAL	0x0010	/* There is no process to signal when */
107 				/*    trimming this file. */
108 #define	CE_TRIMAT	0x0020	/* trim file at a specific time. */
109 #define	CE_GLOB		0x0040	/* name of the log is file name pattern. */
110 #define	CE_SIGNALGROUP	0x0080	/* Signal a process-group instead of a single */
111 				/*    process when trimming this file. */
112 #define	CE_CREATE	0x0100	/* Create the log file if it does not exist. */
113 #define	CE_NODUMP	0x0200	/* Set 'nodump' on newly created log file. */
114 #define	CE_PID2CMD	0x0400	/* Replace PID file with a shell command.*/
115 #define	CE_PLAIN0	0x0800	/* Do not compress zero'th history file */
116 #define	CE_RFC5424	0x1000	/* Use RFC5424 format rotation message */
117 
118 #define	MIN_PID         5	/* Don't touch pids lower than this */
119 #define	MAX_PID		99999	/* was lower, see /usr/include/sys/proc.h */
120 
121 #define	kbytes(size)  (((size) + 1023) >> 10)
122 
123 #define	DEFAULT_MARKER	"<default>"
124 #define	DEBUG_MARKER	"<debug>"
125 #define	INCLUDE_MARKER	"<include>"
126 #define	DEFAULT_TIMEFNAME_FMT	"%Y%m%dT%H%M%S"
127 
128 #define	MAX_OLDLOGS 65536	/* Default maximum number of old logfiles */
129 
130 struct compress_types {
131 	const char *flag;	/* Flag in configuration file */
132 	const char *suffix;	/* Compression suffix */
133 	const char *path;	/* Path to compression program */
134 	const char **flags;	/* Compression program flags */
135 	int nflags;		/* Program flags count */
136 };
137 
138 static const char *gzip_flags[] = { "-f" };
139 #define bzip2_flags gzip_flags
140 #define xz_flags gzip_flags
141 static const char *zstd_flags[] = { "-q", "--rm" };
142 
143 static const struct compress_types compress_type[COMPRESS_TYPES] = {
144 	{ "", "", "", NULL, 0 },
145 	{ "Z", ".gz", _PATH_GZIP, gzip_flags, nitems(gzip_flags) },
146 	{ "J", ".bz2", _PATH_BZIP2, bzip2_flags, nitems(bzip2_flags) },
147 	{ "X", ".xz", _PATH_XZ, xz_flags, nitems(xz_flags) },
148 	{ "Y", ".zst", _PATH_ZSTD, zstd_flags, nitems(zstd_flags) }
149 };
150 
151 struct conf_entry {
152 	STAILQ_ENTRY(conf_entry) cf_nextp;
153 	char *log;		/* Name of the log */
154 	char *pid_cmd_file;		/* PID or command file */
155 	char *r_reason;		/* The reason this file is being rotated */
156 	int firstcreate;	/* Creating log for the first time (-C). */
157 	int rotate;		/* Non-zero if this file should be rotated */
158 	int fsize;		/* size found for the log file */
159 	uid_t uid;		/* Owner of log */
160 	gid_t gid;		/* Group of log */
161 	int numlogs;		/* Number of logs to keep */
162 	int trsize;		/* Size cutoff to trigger trimming the log */
163 	int hours;		/* Hours between log trimming */
164 	struct ptime_data *trim_at;	/* Specific time to do trimming */
165 	unsigned int permissions;	/* File permissions on the log */
166 	int flags;		/* CE_BINARY */
167 	int compress;		/* Compression */
168 	int sig;		/* Signal to send */
169 	int def_cfg;		/* Using the <default> rule for this file */
170 };
171 
172 struct sigwork_entry {
173 	SLIST_ENTRY(sigwork_entry) sw_nextp;
174 	int	 sw_signum;		/* the signal to send */
175 	int	 sw_pidok;		/* true if pid value is valid */
176 	pid_t	 sw_pid;		/* the process id from the PID file */
177 	const char *sw_pidtype;		/* "daemon" or "process group" */
178 	int	 sw_runcmd;		/* run command or send PID to signal */
179 	char	 sw_fname[1];		/* file the PID was read from or shell cmd */
180 };
181 
182 struct zipwork_entry {
183 	SLIST_ENTRY(zipwork_entry) zw_nextp;
184 	const struct conf_entry *zw_conf;	/* for chown/perm/flag info */
185 	const struct sigwork_entry *zw_swork;	/* to know success of signal */
186 	int	 zw_fsize;		/* size of the file to compress */
187 	char	 zw_fname[1];		/* the file to compress */
188 };
189 
190 struct include_entry {
191 	STAILQ_ENTRY(include_entry) inc_nextp;
192 	const char *file;	/* Name of file to process */
193 };
194 
195 struct oldlog_entry {
196 	char *fname;		/* Filename of the log file */
197 	time_t t;		/* Parsed timestamp of the logfile */
198 };
199 
200 typedef enum {
201 	FREE_ENT, KEEP_ENT
202 }	fk_entry;
203 
204 STAILQ_HEAD(cflist, conf_entry);
205 static SLIST_HEAD(swlisthead, sigwork_entry) swhead =
206     SLIST_HEAD_INITIALIZER(swhead);
207 static SLIST_HEAD(zwlisthead, zipwork_entry) zwhead =
208     SLIST_HEAD_INITIALIZER(zwhead);
209 STAILQ_HEAD(ilist, include_entry);
210 
211 int dbg_at_times;		/* -D Show details of 'trim_at' code */
212 
213 static int archtodir = 0;	/* Archive old logfiles to other directory */
214 static int createlogs;		/* Create (non-GLOB) logfiles which do not */
215 				/*    already exist.  1=='for entries with */
216 				/*    C flag', 2=='for all entries'. */
217 int verbose = 0;		/* Print out what's going on */
218 static int needroot = 1;	/* Root privs are necessary */
219 int noaction = 0;		/* Don't do anything, just show it */
220 static int norotate = 0;	/* Don't rotate */
221 static int nosignal;		/* Do not send any signals */
222 static int enforcepid = 0;	/* If PID file does not exist or empty, do nothing */
223 static int force = 0;		/* Force the trim no matter what */
224 static int rotatereq = 0;	/* -R = Always rotate the file(s) as given */
225 				/*    on the command (this also requires   */
226 				/*    that a list of files *are* given on  */
227 				/*    the run command). */
228 static char *requestor;		/* The name given on a -R request */
229 static char *timefnamefmt = NULL;/* Use time based filenames instead of .0 */
230 static char *archdirname;	/* Directory path to old logfiles archive */
231 static char *destdir = NULL;	/* Directory to treat at root for logs */
232 static const char *conf;	/* Configuration file to use */
233 
234 struct ptime_data *dbg_timenow;	/* A "timenow" value set via -D option */
235 static struct ptime_data *timenow; /* The time to use for checking at-fields */
236 
237 #define	DAYTIME_LEN	16
238 static char daytime[DAYTIME_LEN];/* The current time in human readable form,
239 				  * used for rotation-tracking messages. */
240 
241 /* Another buffer to hold the current time in RFC5424 format. Fractional
242  * seconds are allowed by the RFC, but are not included in the
243  * rotation-tracking messages written by newsyslog and so are not accounted for
244  * in the length below.
245  */
246 #define	DAYTIME_RFC5424_LEN	sizeof("YYYY-MM-DDTHH:MM:SS+00:00")
247 static char daytime_rfc5424[DAYTIME_RFC5424_LEN];
248 
249 static char hostname[MAXHOSTNAMELEN]; /* hostname */
250 static size_t hostname_shortlen;
251 
252 static const char *path_syslogpid = _PATH_SYSLOGPID;
253 
254 static struct cflist *get_worklist(char **files);
255 static void parse_file(FILE *cf, struct cflist *work_p, struct cflist *glob_p,
256 		    struct conf_entry **defconf, struct ilist *inclist);
257 static void add_to_queue(const char *fname, struct ilist *inclist);
258 static char *sob(char *p);
259 static char *son(char *p);
260 static int isnumberstr(const char *);
261 static int isglobstr(const char *);
262 static char *missing_field(char *p, char *errline);
263 static void	 change_attrs(const char *, const struct conf_entry *);
264 static const char *get_logfile_suffix(const char *logfile);
265 static fk_entry	 do_entry(struct conf_entry *);
266 static fk_entry	 do_rotate(const struct conf_entry *);
267 static void	 do_sigwork(struct sigwork_entry *);
268 static void	 do_zipwork(struct zipwork_entry *);
269 static struct sigwork_entry *
270 		 save_sigwork(const struct conf_entry *);
271 static struct zipwork_entry *
272 		 save_zipwork(const struct conf_entry *, const struct
273 		    sigwork_entry *, int, const char *);
274 static void	 set_swpid(struct sigwork_entry *, const struct conf_entry *);
275 static int	 sizefile(const char *);
276 static void expand_globs(struct cflist *work_p, struct cflist *glob_p);
277 static void free_clist(struct cflist *list);
278 static void free_entry(struct conf_entry *ent);
279 static struct conf_entry *init_entry(const char *fname,
280 		struct conf_entry *src_entry);
281 static void parse_args(int argc, char **argv);
282 static int parse_doption(const char *doption);
283 static void usage(void);
284 static int log_trim(const char *logname, const struct conf_entry *log_ent);
285 static int age_old_log(const char *file);
286 static void savelog(char *from, char *to);
287 static void createdir(const struct conf_entry *ent, char *dirpart);
288 static void createlog(const struct conf_entry *ent);
289 static int parse_signal(const char *str);
290 
291 /*
292  * All the following take a parameter of 'int', but expect values in the
293  * range of unsigned char.  Define wrappers which take values of type 'char',
294  * whether signed or unsigned, and ensure they end up in the right range.
295  */
296 #define	isdigitch(Anychar) isdigit((u_char)(Anychar))
297 #define	isprintch(Anychar) isprint((u_char)(Anychar))
298 #define	isspacech(Anychar) isspace((u_char)(Anychar))
299 #define	tolowerch(Anychar) tolower((u_char)(Anychar))
300 
301 int
302 main(int argc, char **argv)
303 {
304 	struct cflist *worklist;
305 	struct conf_entry *p;
306 	struct sigwork_entry *stmp;
307 	struct zipwork_entry *ztmp;
308 
309 	SLIST_INIT(&swhead);
310 	SLIST_INIT(&zwhead);
311 
312 	parse_args(argc, argv);
313 	argc -= optind;
314 	argv += optind;
315 
316 	if (needroot && getuid() && geteuid())
317 		errx(1, "must have root privs");
318 	worklist = get_worklist(argv);
319 
320 	/*
321 	 * Rotate all the files which need to be rotated.  Note that
322 	 * some users have *hundreds* of entries in newsyslog.conf!
323 	 */
324 	while (!STAILQ_EMPTY(worklist)) {
325 		p = STAILQ_FIRST(worklist);
326 		STAILQ_REMOVE_HEAD(worklist, cf_nextp);
327 		if (do_entry(p) == FREE_ENT)
328 			free_entry(p);
329 	}
330 
331 	/*
332 	 * Send signals to any processes which need a signal to tell
333 	 * them to close and re-open the log file(s) we have rotated.
334 	 * Note that zipwork_entries include pointers to these
335 	 * sigwork_entry's, so we can not free the entries here.
336 	 */
337 	if (!SLIST_EMPTY(&swhead)) {
338 		if (noaction || verbose)
339 			printf("Signal all daemon process(es)...\n");
340 		SLIST_FOREACH(stmp, &swhead, sw_nextp)
341 			do_sigwork(stmp);
342 		if (!(rotatereq && nosignal)) {
343 			if (noaction)
344 				printf("\tsleep 10\n");
345 			else {
346 				if (verbose)
347 					printf("Pause 10 seconds to allow "
348 					    "daemon(s) to close log file(s)\n");
349 				sleep(10);
350 			}
351 		}
352 	}
353 	/*
354 	 * Compress all files that we're expected to compress, now
355 	 * that all processes should have closed the files which
356 	 * have been rotated.
357 	 */
358 	if (!SLIST_EMPTY(&zwhead)) {
359 		if (noaction || verbose)
360 			printf("Compress all rotated log file(s)...\n");
361 		while (!SLIST_EMPTY(&zwhead)) {
362 			ztmp = SLIST_FIRST(&zwhead);
363 			do_zipwork(ztmp);
364 			SLIST_REMOVE_HEAD(&zwhead, zw_nextp);
365 			free(ztmp);
366 		}
367 	}
368 	/* Now free all the sigwork entries. */
369 	while (!SLIST_EMPTY(&swhead)) {
370 		stmp = SLIST_FIRST(&swhead);
371 		SLIST_REMOVE_HEAD(&swhead, sw_nextp);
372 		free(stmp);
373 	}
374 
375 	while (wait(NULL) > 0 || errno == EINTR)
376 		;
377 	return (0);
378 }
379 
380 static struct conf_entry *
381 init_entry(const char *fname, struct conf_entry *src_entry)
382 {
383 	struct conf_entry *tempwork;
384 
385 	if (verbose > 4)
386 		printf("\t--> [creating entry for %s]\n", fname);
387 
388 	tempwork = malloc(sizeof(struct conf_entry));
389 	if (tempwork == NULL)
390 		err(1, "malloc of conf_entry for %s", fname);
391 
392 	if (destdir == NULL || fname[0] != '/')
393 		tempwork->log = strdup(fname);
394 	else
395 		asprintf(&tempwork->log, "%s%s", destdir, fname);
396 	if (tempwork->log == NULL)
397 		err(1, "strdup for %s", fname);
398 
399 	if (src_entry != NULL) {
400 		tempwork->pid_cmd_file = NULL;
401 		if (src_entry->pid_cmd_file)
402 			tempwork->pid_cmd_file = strdup(src_entry->pid_cmd_file);
403 		tempwork->r_reason = NULL;
404 		tempwork->firstcreate = 0;
405 		tempwork->rotate = 0;
406 		tempwork->fsize = -1;
407 		tempwork->uid = src_entry->uid;
408 		tempwork->gid = src_entry->gid;
409 		tempwork->numlogs = src_entry->numlogs;
410 		tempwork->trsize = src_entry->trsize;
411 		tempwork->hours = src_entry->hours;
412 		tempwork->trim_at = NULL;
413 		if (src_entry->trim_at != NULL)
414 			tempwork->trim_at = ptime_init(src_entry->trim_at);
415 		tempwork->permissions = src_entry->permissions;
416 		tempwork->flags = src_entry->flags;
417 		tempwork->compress = src_entry->compress;
418 		tempwork->sig = src_entry->sig;
419 		tempwork->def_cfg = src_entry->def_cfg;
420 	} else {
421 		/* Initialize as a "do-nothing" entry */
422 		tempwork->pid_cmd_file = NULL;
423 		tempwork->r_reason = NULL;
424 		tempwork->firstcreate = 0;
425 		tempwork->rotate = 0;
426 		tempwork->fsize = -1;
427 		tempwork->uid = (uid_t)-1;
428 		tempwork->gid = (gid_t)-1;
429 		tempwork->numlogs = 1;
430 		tempwork->trsize = -1;
431 		tempwork->hours = -1;
432 		tempwork->trim_at = NULL;
433 		tempwork->permissions = 0;
434 		tempwork->flags = 0;
435 		tempwork->compress = COMPRESS_NONE;
436 		tempwork->sig = SIGHUP;
437 		tempwork->def_cfg = 0;
438 	}
439 
440 	return (tempwork);
441 }
442 
443 static void
444 free_entry(struct conf_entry *ent)
445 {
446 
447 	if (ent == NULL)
448 		return;
449 
450 	if (ent->log != NULL) {
451 		if (verbose > 4)
452 			printf("\t--> [freeing entry for %s]\n", ent->log);
453 		free(ent->log);
454 		ent->log = NULL;
455 	}
456 
457 	if (ent->pid_cmd_file != NULL) {
458 		free(ent->pid_cmd_file);
459 		ent->pid_cmd_file = NULL;
460 	}
461 
462 	if (ent->r_reason != NULL) {
463 		free(ent->r_reason);
464 		ent->r_reason = NULL;
465 	}
466 
467 	if (ent->trim_at != NULL) {
468 		ptime_free(ent->trim_at);
469 		ent->trim_at = NULL;
470 	}
471 
472 	free(ent);
473 }
474 
475 static void
476 free_clist(struct cflist *list)
477 {
478 	struct conf_entry *ent;
479 
480 	while (!STAILQ_EMPTY(list)) {
481 		ent = STAILQ_FIRST(list);
482 		STAILQ_REMOVE_HEAD(list, cf_nextp);
483 		free_entry(ent);
484 	}
485 
486 	free(list);
487 	list = NULL;
488 }
489 
490 static fk_entry
491 do_entry(struct conf_entry * ent)
492 {
493 #define	REASON_MAX	80
494 	int modtime;
495 	fk_entry free_or_keep;
496 	double diffsecs;
497 	char temp_reason[REASON_MAX];
498 	int oversized;
499 
500 	free_or_keep = FREE_ENT;
501 	if (verbose)
502 		printf("%s <%d%s>: ", ent->log, ent->numlogs,
503 		    compress_type[ent->compress].flag);
504 	ent->fsize = sizefile(ent->log);
505 	oversized = ((ent->trsize > 0) && (ent->fsize >= ent->trsize));
506 	modtime = age_old_log(ent->log);
507 	ent->rotate = 0;
508 	ent->firstcreate = 0;
509 	if (ent->fsize < 0) {
510 		/*
511 		 * If either the C flag or the -C option was specified,
512 		 * and if we won't be creating the file, then have the
513 		 * verbose message include a hint as to why the file
514 		 * will not be created.
515 		 */
516 		temp_reason[0] = '\0';
517 		if (createlogs > 1)
518 			ent->firstcreate = 1;
519 		else if ((ent->flags & CE_CREATE) && createlogs)
520 			ent->firstcreate = 1;
521 		else if (ent->flags & CE_CREATE)
522 			strlcpy(temp_reason, " (no -C option)", REASON_MAX);
523 		else if (createlogs)
524 			strlcpy(temp_reason, " (no C flag)", REASON_MAX);
525 
526 		if (ent->firstcreate) {
527 			if (verbose)
528 				printf("does not exist -> will create.\n");
529 			createlog(ent);
530 		} else if (verbose) {
531 			printf("does not exist, skipped%s.\n", temp_reason);
532 		}
533 	} else {
534 		if (ent->flags & CE_TRIMAT && !force && !rotatereq &&
535 		    !oversized) {
536 			diffsecs = ptimeget_diff(timenow, ent->trim_at);
537 			if (diffsecs < 0.0) {
538 				/* trim_at is some time in the future. */
539 				if (verbose) {
540 					ptime_adjust4dst(ent->trim_at,
541 					    timenow);
542 					printf("--> will trim at %s",
543 					    ptimeget_ctime(ent->trim_at));
544 				}
545 				return (free_or_keep);
546 			} else if (diffsecs >= 3600.0) {
547 				/*
548 				 * trim_at is more than an hour in the past,
549 				 * so find the next valid trim_at time, and
550 				 * tell the user what that will be.
551 				 */
552 				if (verbose && dbg_at_times)
553 					printf("\n\t--> prev trim at %s\t",
554 					    ptimeget_ctime(ent->trim_at));
555 				if (verbose) {
556 					ptimeset_nxtime(ent->trim_at);
557 					printf("--> will trim at %s",
558 					    ptimeget_ctime(ent->trim_at));
559 				}
560 				return (free_or_keep);
561 			} else if (verbose && noaction && dbg_at_times) {
562 				/*
563 				 * If we are just debugging at-times, then
564 				 * a detailed message is helpful.  Also
565 				 * skip "doing" any commands, since they
566 				 * would all be turned off by no-action.
567 				 */
568 				printf("\n\t--> timematch at %s",
569 				    ptimeget_ctime(ent->trim_at));
570 				return (free_or_keep);
571 			} else if (verbose && ent->hours <= 0) {
572 				printf("--> time is up\n");
573 			}
574 		}
575 		if (verbose && (ent->trsize > 0))
576 			printf("size (Kb): %d [%d] ", ent->fsize, ent->trsize);
577 		if (verbose && (ent->hours > 0))
578 			printf(" age (hr): %d [%d] ", modtime, ent->hours);
579 
580 		/*
581 		 * Figure out if this logfile needs to be rotated.
582 		 */
583 		temp_reason[0] = '\0';
584 		if (rotatereq) {
585 			ent->rotate = 1;
586 			snprintf(temp_reason, REASON_MAX, " due to -R from %s",
587 			    requestor);
588 		} else if (force) {
589 			ent->rotate = 1;
590 			snprintf(temp_reason, REASON_MAX, " due to -F request");
591 		} else if (oversized) {
592 			ent->rotate = 1;
593 			snprintf(temp_reason, REASON_MAX, " due to size>%dK",
594 			    ent->trsize);
595 		} else if (ent->hours <= 0 && (ent->flags & CE_TRIMAT)) {
596 			ent->rotate = 1;
597 		} else if ((ent->hours > 0) && ((modtime >= ent->hours) ||
598 		    (modtime < 0))) {
599 			ent->rotate = 1;
600 		}
601 
602 		/*
603 		 * If the file needs to be rotated, then rotate it.
604 		 */
605 		if (ent->rotate && !norotate) {
606 			if (temp_reason[0] != '\0')
607 				ent->r_reason = strdup(temp_reason);
608 			if (verbose)
609 				printf("--> trimming log....\n");
610 			if (noaction && !verbose)
611 				printf("%s <%d%s>: trimming\n", ent->log,
612 				    ent->numlogs,
613 				    compress_type[ent->compress].flag);
614 			free_or_keep = do_rotate(ent);
615 		} else {
616 			if (verbose)
617 				printf("--> skipping\n");
618 		}
619 	}
620 	return (free_or_keep);
621 #undef REASON_MAX
622 }
623 
624 static void
625 parse_args(int argc, char **argv)
626 {
627 	int ch;
628 	char *p;
629 
630 	timenow = ptime_init(NULL);
631 	ptimeset_time(timenow, time(NULL));
632 	strlcpy(daytime, ptimeget_ctime(timenow) + 4, DAYTIME_LEN);
633 	ptimeget_ctime_rfc5424(timenow, daytime_rfc5424, DAYTIME_RFC5424_LEN);
634 
635 	/* Let's get our hostname */
636 	(void)gethostname(hostname, sizeof(hostname));
637 	hostname_shortlen = strcspn(hostname, ".");
638 
639 	/* Parse command line options. */
640 	while ((ch = getopt(argc, argv, "a:d:f:nrst:vCD:FNPR:S:")) != -1)
641 		switch (ch) {
642 		case 'a':
643 			archtodir++;
644 			archdirname = optarg;
645 			break;
646 		case 'd':
647 			destdir = optarg;
648 			break;
649 		case 'f':
650 			conf = optarg;
651 			break;
652 		case 'n':
653 			noaction++;
654 			/* FALLTHROUGH */
655 		case 'r':
656 			needroot = 0;
657 			break;
658 		case 's':
659 			nosignal = 1;
660 			break;
661 		case 't':
662 			if (optarg[0] == '\0' ||
663 			    strcmp(optarg, "DEFAULT") == 0)
664 				timefnamefmt = strdup(DEFAULT_TIMEFNAME_FMT);
665 			else
666 				timefnamefmt = strdup(optarg);
667 			break;
668 		case 'v':
669 			verbose++;
670 			break;
671 		case 'C':
672 			/* Useful for things like rc.diskless... */
673 			createlogs++;
674 			break;
675 		case 'D':
676 			/*
677 			 * Set some debugging option.  The specific option
678 			 * depends on the value of optarg.  These options
679 			 * may come and go without notice or documentation.
680 			 */
681 			if (parse_doption(optarg))
682 				break;
683 			usage();
684 			/* NOTREACHED */
685 		case 'F':
686 			force++;
687 			break;
688 		case 'N':
689 			norotate++;
690 			break;
691 		case 'P':
692 			enforcepid++;
693 			break;
694 		case 'R':
695 			rotatereq++;
696 			requestor = strdup(optarg);
697 			break;
698 		case 'S':
699 			path_syslogpid = optarg;
700 			break;
701 		case 'm':	/* Used by OpenBSD for "monitor mode" */
702 		default:
703 			usage();
704 			/* NOTREACHED */
705 		}
706 
707 	if (force && norotate) {
708 		warnx("Only one of -F and -N may be specified.");
709 		usage();
710 		/* NOTREACHED */
711 	}
712 
713 	if (rotatereq) {
714 		if (optind == argc) {
715 			warnx("At least one filename must be given when -R is specified.");
716 			usage();
717 			/* NOTREACHED */
718 		}
719 		/* Make sure "requestor" value is safe for a syslog message. */
720 		for (p = requestor; *p != '\0'; p++) {
721 			if (!isprintch(*p) && (*p != '\t'))
722 				*p = '.';
723 		}
724 	}
725 
726 	if (dbg_timenow) {
727 		/*
728 		 * Note that the 'daytime' variable is not changed.
729 		 * That is only used in messages that track when a
730 		 * logfile is rotated, and if a file *is* rotated,
731 		 * then it will still rotated at the "real now" time.
732 		 */
733 		ptime_free(timenow);
734 		timenow = dbg_timenow;
735 		fprintf(stderr, "Debug: Running as if TimeNow is %s",
736 		    ptimeget_ctime(dbg_timenow));
737 	}
738 
739 }
740 
741 /*
742  * These debugging options are mainly meant for developer use, such
743  * as writing regression-tests.  They would not be needed by users
744  * during normal operation of newsyslog...
745  */
746 static int
747 parse_doption(const char *doption)
748 {
749 	const char TN[] = "TN=";
750 	int res;
751 
752 	if (strncmp(doption, TN, sizeof(TN) - 1) == 0) {
753 		/*
754 		 * The "TimeNow" debugging option.  This might be off
755 		 * by an hour when crossing a timezone change.
756 		 */
757 		dbg_timenow = ptime_init(NULL);
758 		res = ptime_relparse(dbg_timenow, PTM_PARSE_ISO8601,
759 		    time(NULL), doption + sizeof(TN) - 1);
760 		if (res == -2) {
761 			warnx("Non-existent time specified on -D %s", doption);
762 			return (0);			/* failure */
763 		} else if (res < 0) {
764 			warnx("Malformed time given on -D %s", doption);
765 			return (0);			/* failure */
766 		}
767 		return (1);			/* successfully parsed */
768 
769 	}
770 
771 	if (strcmp(doption, "ats") == 0) {
772 		dbg_at_times++;
773 		return (1);			/* successfully parsed */
774 	}
775 
776 	/* XXX - This check could probably be dropped. */
777 	if ((strcmp(doption, "neworder") == 0) || (strcmp(doption, "oldorder")
778 	    == 0)) {
779 		warnx("NOTE: newsyslog always uses 'neworder'.");
780 		return (1);			/* successfully parsed */
781 	}
782 
783 	warnx("Unknown -D (debug) option: '%s'", doption);
784 	return (0);				/* failure */
785 }
786 
787 static void
788 usage(void)
789 {
790 
791 	fprintf(stderr,
792 	    "usage: newsyslog [-CFNPnrsv] [-a directory] [-d directory] [-f config_file]\n"
793 	    "                 [-S pidfile] [-t timefmt] [[-R tagname] file ...]\n");
794 	exit(1);
795 }
796 
797 /*
798  * Parse a configuration file and return a linked list of all the logs
799  * which should be processed.
800  */
801 static struct cflist *
802 get_worklist(char **files)
803 {
804 	FILE *f;
805 	char **given;
806 	struct cflist *cmdlist, *filelist, *globlist;
807 	struct conf_entry *defconf, *dupent, *ent;
808 	struct ilist inclist;
809 	struct include_entry *inc;
810 	int gmatch, fnres;
811 
812 	defconf = NULL;
813 	STAILQ_INIT(&inclist);
814 
815 	filelist = malloc(sizeof(struct cflist));
816 	if (filelist == NULL)
817 		err(1, "malloc of filelist");
818 	STAILQ_INIT(filelist);
819 	globlist = malloc(sizeof(struct cflist));
820 	if (globlist == NULL)
821 		err(1, "malloc of globlist");
822 	STAILQ_INIT(globlist);
823 
824 	inc = malloc(sizeof(struct include_entry));
825 	if (inc == NULL)
826 		err(1, "malloc of inc");
827 	inc->file = conf;
828 	if (inc->file == NULL)
829 		inc->file = _PATH_CONF;
830 	STAILQ_INSERT_TAIL(&inclist, inc, inc_nextp);
831 
832 	STAILQ_FOREACH(inc, &inclist, inc_nextp) {
833 		if (strcmp(inc->file, "-") != 0)
834 			f = fopen(inc->file, "r");
835 		else {
836 			f = stdin;
837 			inc->file = "<stdin>";
838 		}
839 		if (!f)
840 			err(1, "%s", inc->file);
841 
842 		if (verbose)
843 			printf("Processing %s\n", inc->file);
844 		parse_file(f, filelist, globlist, &defconf, &inclist);
845 		(void) fclose(f);
846 	}
847 
848 	/*
849 	 * All config-file information has been read in and turned into
850 	 * a filelist and a globlist.  If there were no specific files
851 	 * given on the run command, then the only thing left to do is to
852 	 * call a routine which finds all files matched by the globlist
853 	 * and adds them to the filelist.  Then return the worklist.
854 	 */
855 	if (*files == NULL) {
856 		expand_globs(filelist, globlist);
857 		free_clist(globlist);
858 		if (defconf != NULL)
859 			free_entry(defconf);
860 		return (filelist);
861 	}
862 
863 	/*
864 	 * If newsyslog was given a specific list of files to process,
865 	 * it may be that some of those files were not listed in any
866 	 * config file.  Those unlisted files should get the default
867 	 * rotation action.  First, create the default-rotation action
868 	 * if none was found in a system config file.
869 	 */
870 	if (defconf == NULL) {
871 		defconf = init_entry(DEFAULT_MARKER, NULL);
872 		defconf->numlogs = 3;
873 		defconf->trsize = 50;
874 		defconf->permissions = S_IRUSR|S_IWUSR;
875 	}
876 
877 	/*
878 	 * If newsyslog was run with a list of specific filenames,
879 	 * then create a new worklist which has only those files in
880 	 * it, picking up the rotation-rules for those files from
881 	 * the original filelist.
882 	 *
883 	 * XXX - Note that this will copy multiple rules for a single
884 	 *	logfile, if multiple entries are an exact match for
885 	 *	that file.  That matches the historic behavior, but do
886 	 *	we want to continue to allow it?  If so, it should
887 	 *	probably be handled more intelligently.
888 	 */
889 	cmdlist = malloc(sizeof(struct cflist));
890 	if (cmdlist == NULL)
891 		err(1, "malloc of cmdlist");
892 	STAILQ_INIT(cmdlist);
893 
894 	for (given = files; *given; ++given) {
895 		/*
896 		 * First try to find exact-matches for this given file.
897 		 */
898 		gmatch = 0;
899 		STAILQ_FOREACH(ent, filelist, cf_nextp) {
900 			if (strcmp(ent->log, *given) == 0) {
901 				gmatch++;
902 				dupent = init_entry(*given, ent);
903 				STAILQ_INSERT_TAIL(cmdlist, dupent, cf_nextp);
904 			}
905 		}
906 		if (gmatch) {
907 			if (verbose > 2)
908 				printf("\t+ Matched entry %s\n", *given);
909 			continue;
910 		}
911 
912 		/*
913 		 * There was no exact-match for this given file, so look
914 		 * for a "glob" entry which does match.
915 		 */
916 		gmatch = 0;
917 		if (verbose > 2)
918 			printf("\t+ Checking globs for %s\n", *given);
919 		STAILQ_FOREACH(ent, globlist, cf_nextp) {
920 			fnres = fnmatch(ent->log, *given, FNM_PATHNAME);
921 			if (verbose > 2)
922 				printf("\t+    = %d for pattern %s\n", fnres,
923 				    ent->log);
924 			if (fnres == 0) {
925 				gmatch++;
926 				dupent = init_entry(*given, ent);
927 				/* This new entry is not a glob! */
928 				dupent->flags &= ~CE_GLOB;
929 				STAILQ_INSERT_TAIL(cmdlist, dupent, cf_nextp);
930 				/* Only allow a match to one glob-entry */
931 				break;
932 			}
933 		}
934 		if (gmatch) {
935 			if (verbose > 2)
936 				printf("\t+ Matched %s via %s\n", *given,
937 				    ent->log);
938 			continue;
939 		}
940 
941 		/*
942 		 * This given file was not found in any config file, so
943 		 * add a worklist item based on the default entry.
944 		 */
945 		if (verbose > 2)
946 			printf("\t+ No entry matched %s  (will use %s)\n",
947 			    *given, DEFAULT_MARKER);
948 		dupent = init_entry(*given, defconf);
949 		/* Mark that it was *not* found in a config file */
950 		dupent->def_cfg = 1;
951 		STAILQ_INSERT_TAIL(cmdlist, dupent, cf_nextp);
952 	}
953 
954 	/*
955 	 * Free all the entries in the original work list, the list of
956 	 * glob entries, and the default entry.
957 	 */
958 	free_clist(filelist);
959 	free_clist(globlist);
960 	free_entry(defconf);
961 
962 	/* And finally, return a worklist which matches the given files. */
963 	return (cmdlist);
964 }
965 
966 /*
967  * Expand the list of entries with filename patterns, and add all files
968  * which match those glob-entries onto the worklist.
969  */
970 static void
971 expand_globs(struct cflist *work_p, struct cflist *glob_p)
972 {
973 	int gmatch, gres;
974 	size_t i;
975 	char *mfname;
976 	struct conf_entry *dupent, *ent, *globent;
977 	glob_t pglob;
978 	struct stat st_fm;
979 
980 	/*
981 	 * The worklist contains all fully-specified (non-GLOB) names.
982 	 *
983 	 * Now expand the list of filename-pattern (GLOB) entries into
984 	 * a second list, which (by definition) will only match files
985 	 * that already exist.  Do not add a glob-related entry for any
986 	 * file which already exists in the fully-specified list.
987 	 */
988 	STAILQ_FOREACH(globent, glob_p, cf_nextp) {
989 		gres = glob(globent->log, GLOB_NOCHECK, NULL, &pglob);
990 		if (gres != 0) {
991 			warn("cannot expand pattern (%d): %s", gres,
992 			    globent->log);
993 			continue;
994 		}
995 
996 		if (verbose > 2)
997 			printf("\t+ Expanding pattern %s\n", globent->log);
998 		for (i = 0; i < pglob.gl_matchc; i++) {
999 			mfname = pglob.gl_pathv[i];
1000 
1001 			/* See if this file already has a specific entry. */
1002 			gmatch = 0;
1003 			STAILQ_FOREACH(ent, work_p, cf_nextp) {
1004 				if (strcmp(mfname, ent->log) == 0) {
1005 					gmatch++;
1006 					break;
1007 				}
1008 			}
1009 			if (gmatch)
1010 				continue;
1011 
1012 			/* Make sure the named matched is a file. */
1013 			gres = lstat(mfname, &st_fm);
1014 			if (gres != 0) {
1015 				/* Error on a file that glob() matched?!? */
1016 				warn("Skipping %s - lstat() error", mfname);
1017 				continue;
1018 			}
1019 			if (!S_ISREG(st_fm.st_mode)) {
1020 				/* We only rotate files! */
1021 				if (verbose > 2)
1022 					printf("\t+  . skipping %s (!file)\n",
1023 					    mfname);
1024 				continue;
1025 			}
1026 
1027 			if (verbose > 2)
1028 				printf("\t+  . add file %s\n", mfname);
1029 			dupent = init_entry(mfname, globent);
1030 			/* This new entry is not a glob! */
1031 			dupent->flags &= ~CE_GLOB;
1032 
1033 			/* Add to the worklist. */
1034 			STAILQ_INSERT_TAIL(work_p, dupent, cf_nextp);
1035 		}
1036 		globfree(&pglob);
1037 		if (verbose > 2)
1038 			printf("\t+ Done with pattern %s\n", globent->log);
1039 	}
1040 }
1041 
1042 /*
1043  * Parse a configuration file and update a linked list of all the logs to
1044  * process.
1045  */
1046 static void
1047 parse_file(FILE *cf, struct cflist *work_p, struct cflist *glob_p,
1048     struct conf_entry **defconf_p, struct ilist *inclist)
1049 {
1050 	char line[BUFSIZ], *parse, *q;
1051 	char *cp, *errline, *group;
1052 	struct conf_entry *working;
1053 	struct passwd *pwd;
1054 	struct group *grp;
1055 	glob_t pglob;
1056 	int eol, ptm_opts, res, special;
1057 	size_t i;
1058 
1059 	errline = NULL;
1060 	while (fgets(line, BUFSIZ, cf)) {
1061 		if ((line[0] == '\n') || (line[0] == '#') ||
1062 		    (strlen(line) == 0))
1063 			continue;
1064 		if (errline != NULL)
1065 			free(errline);
1066 		errline = strdup(line);
1067 		for (cp = line + 1; *cp != '\0'; cp++) {
1068 			if (*cp != '#')
1069 				continue;
1070 			if (*(cp - 1) == '\\') {
1071 				strcpy(cp - 1, cp);
1072 				cp--;
1073 				continue;
1074 			}
1075 			*cp = '\0';
1076 			break;
1077 		}
1078 
1079 		q = parse = missing_field(sob(line), errline);
1080 		parse = son(line);
1081 		if (!*parse) {
1082 			warnx("malformed line (missing fields):\n%s",
1083 			    errline);
1084 			continue;
1085 		}
1086 		*parse = '\0';
1087 
1088 		/*
1089 		 * Allow people to set debug options via the config file.
1090 		 * (NOTE: debug options are undocumented, and may disappear
1091 		 * at any time, etc).
1092 		 */
1093 		if (strcasecmp(DEBUG_MARKER, q) == 0) {
1094 			q = parse = missing_field(sob(parse + 1), errline);
1095 			parse = son(parse);
1096 			if (!*parse)
1097 				warnx("debug line specifies no option:\n%s",
1098 				    errline);
1099 			else {
1100 				*parse = '\0';
1101 				parse_doption(q);
1102 			}
1103 			continue;
1104 		} else if (strcasecmp(INCLUDE_MARKER, q) == 0) {
1105 			if (verbose)
1106 				printf("Found: %s", errline);
1107 			q = parse = missing_field(sob(parse + 1), errline);
1108 			parse = son(parse);
1109 			if (!*parse) {
1110 				warnx("include line missing argument:\n%s",
1111 				    errline);
1112 				continue;
1113 			}
1114 
1115 			*parse = '\0';
1116 
1117 			if (isglobstr(q)) {
1118 				res = glob(q, GLOB_NOCHECK, NULL, &pglob);
1119 				if (res != 0) {
1120 					warn("cannot expand pattern (%d): %s",
1121 					    res, q);
1122 					continue;
1123 				}
1124 
1125 				if (verbose > 2)
1126 					printf("\t+ Expanding pattern %s\n", q);
1127 
1128 				for (i = 0; i < pglob.gl_matchc; i++)
1129 					add_to_queue(pglob.gl_pathv[i],
1130 					    inclist);
1131 				globfree(&pglob);
1132 			} else
1133 				add_to_queue(q, inclist);
1134 			continue;
1135 		}
1136 
1137 #define badline(msg, ...) do {		\
1138 	warnx(msg, __VA_ARGS__);	\
1139 	goto cleanup;			\
1140 } while (0)
1141 
1142 		special = 0;
1143 		working = init_entry(q, NULL);
1144 		if (strcasecmp(DEFAULT_MARKER, q) == 0) {
1145 			special = 1;
1146 			if (*defconf_p != NULL)
1147 				badline("Ignoring duplicate entry for %s!", q);
1148 			*defconf_p = working;
1149 		}
1150 
1151 		q = parse = missing_field(sob(parse + 1), errline);
1152 		parse = son(parse);
1153 		if (!*parse)
1154 			badline("malformed line (missing fields):\n%s",
1155 			    errline);
1156 		*parse = '\0';
1157 		if ((group = strchr(q, ':')) != NULL ||
1158 		    (group = strrchr(q, '.')) != NULL) {
1159 			*group++ = '\0';
1160 			if (*q) {
1161 				if (!(isnumberstr(q))) {
1162 					if ((pwd = getpwnam(q)) == NULL)
1163 						badline(
1164 				     "error in config file; unknown user:\n%s",
1165 						    errline);
1166 					working->uid = pwd->pw_uid;
1167 				} else
1168 					working->uid = atoi(q);
1169 			} else
1170 				working->uid = (uid_t)-1;
1171 
1172 			q = group;
1173 			if (*q) {
1174 				if (!(isnumberstr(q))) {
1175 					if ((grp = getgrnam(q)) == NULL)
1176 						badline(
1177 				    "error in config file; unknown group:\n%s",
1178 						    errline);
1179 					working->gid = grp->gr_gid;
1180 				} else
1181 					working->gid = atoi(q);
1182 			} else
1183 				working->gid = (gid_t)-1;
1184 
1185 			q = parse = missing_field(sob(parse + 1), errline);
1186 			parse = son(parse);
1187 			if (!*parse)
1188 				badline("malformed line (missing fields):\n%s",
1189 				    errline);
1190 			*parse = '\0';
1191 		} else {
1192 			working->uid = (uid_t)-1;
1193 			working->gid = (gid_t)-1;
1194 		}
1195 
1196 		if (!sscanf(q, "%o", &working->permissions))
1197 			badline("error in config file; bad permissions:\n%s",
1198 			    errline);
1199 		if ((working->permissions & ~DEFFILEMODE) != 0) {
1200 			warnx("File mode bits 0%o changed to 0%o in line:\n%s",
1201 			    working->permissions,
1202 			    working->permissions & DEFFILEMODE, errline);
1203 			working->permissions &= DEFFILEMODE;
1204 		}
1205 
1206 		q = parse = missing_field(sob(parse + 1), errline);
1207 		parse = son(parse);
1208 		if (!*parse)
1209 			badline("malformed line (missing fields):\n%s",
1210 			    errline);
1211 		*parse = '\0';
1212 		if (!sscanf(q, "%d", &working->numlogs) || working->numlogs < 0)
1213 			badline("error in config file; bad value for count of logs to save:\n%s",
1214 			    errline);
1215 
1216 		q = parse = missing_field(sob(parse + 1), errline);
1217 		parse = son(parse);
1218 		if (!*parse)
1219 			badline("malformed line (missing fields):\n%s",
1220 			    errline);
1221 		*parse = '\0';
1222 		if (isdigitch(*q))
1223 			working->trsize = atoi(q);
1224 		else if (strcmp(q, "*") == 0)
1225 			working->trsize = -1;
1226 		else {
1227 			warnx("Invalid value of '%s' for 'size' in line:\n%s",
1228 			    q, errline);
1229 			working->trsize = -1;
1230 		}
1231 
1232 		working->flags = 0;
1233 		working->compress = COMPRESS_NONE;
1234 		q = parse = missing_field(sob(parse + 1), errline);
1235 		parse = son(parse);
1236 		eol = !*parse;
1237 		*parse = '\0';
1238 		{
1239 			char *ep;
1240 			u_long ul;
1241 
1242 			ul = strtoul(q, &ep, 10);
1243 			if (ep == q)
1244 				working->hours = 0;
1245 			else if (*ep == '*')
1246 				working->hours = -1;
1247 			else if (ul > INT_MAX)
1248 				badline("interval is too large:\n%s", errline);
1249 			else
1250 				working->hours = ul;
1251 
1252 			if (*ep == '\0' || strcmp(ep, "*") == 0)
1253 				goto no_trimat;
1254 			if (*ep != '@' && *ep != '$')
1255 				badline("malformed interval/at:\n%s", errline);
1256 
1257 			working->flags |= CE_TRIMAT;
1258 			working->trim_at = ptime_init(NULL);
1259 			ptm_opts = PTM_PARSE_ISO8601;
1260 			if (*ep == '$')
1261 				ptm_opts = PTM_PARSE_DWM;
1262 			ptm_opts |= PTM_PARSE_MATCHDOM;
1263 			res = ptime_relparse(working->trim_at, ptm_opts,
1264 			    ptimeget_secs(timenow), ep + 1);
1265 			if (res == -2)
1266 				badline("nonexistent time for 'at' value:\n%s",
1267 				    errline);
1268 			else if (res < 0)
1269 				badline("malformed 'at' value:\n%s", errline);
1270 		}
1271 no_trimat:
1272 
1273 		if (eol)
1274 			q = NULL;
1275 		else {
1276 			q = parse = sob(parse + 1);	/* Optional field */
1277 			parse = son(parse);
1278 			if (!*parse)
1279 				eol = 1;
1280 			*parse = '\0';
1281 		}
1282 
1283 		for (; q && *q && !isspacech(*q); q++) {
1284 			switch (tolowerch(*q)) {
1285 			case 'b':
1286 				working->flags |= CE_BINARY;
1287 				break;
1288 			case 'c':
1289 				working->flags |= CE_CREATE;
1290 				break;
1291 			case 'd':
1292 				working->flags |= CE_NODUMP;
1293 				break;
1294 			case 'g':
1295 				working->flags |= CE_GLOB;
1296 				break;
1297 			case 'j':
1298 				working->compress = COMPRESS_BZIP2;
1299 				break;
1300 			case 'n':
1301 				working->flags |= CE_NOSIGNAL;
1302 				break;
1303 			case 'p':
1304 				working->flags |= CE_PLAIN0;
1305 				break;
1306 			case 'r':
1307 				working->flags |= CE_PID2CMD;
1308 				break;
1309 			case 't':
1310 				working->flags |= CE_RFC5424;
1311 				break;
1312 			case 'u':
1313 				working->flags |= CE_SIGNALGROUP;
1314 				break;
1315 			case 'w':
1316 				/* Deprecated flag - keep for compatibility purposes */
1317 				break;
1318 			case 'x':
1319 				working->compress = COMPRESS_XZ;
1320 				break;
1321 			case 'y':
1322 				working->compress = COMPRESS_ZSTD;
1323 				break;
1324 			case 'z':
1325 				working->compress = COMPRESS_GZIP;
1326 				break;
1327 			case '-':
1328 				break;
1329 			case 'f':	/* Used by OpenBSD for "CE_FOLLOW" */
1330 			case 'm':	/* Used by OpenBSD for "CE_MONITOR" */
1331 			default:
1332 				badline("illegal flag in config file -- %c",
1333 				    *q);
1334 			}
1335 		}
1336 
1337 		if (eol)
1338 			q = NULL;
1339 		else {
1340 			q = parse = sob(parse + 1);	/* Optional field */
1341 			parse = son(parse);
1342 			if (!*parse)
1343 				eol = 1;
1344 			*parse = '\0';
1345 		}
1346 
1347 		working->pid_cmd_file = NULL;
1348 		if (q && *q) {
1349 			if (*q == '/')
1350 				working->pid_cmd_file = strdup(q);
1351 			else if (isalnum(*q))
1352 				goto got_sig;
1353 			else {
1354 				badline(
1355 			"illegal pid file or signal in config file:\n%s",
1356 				    errline);
1357 			}
1358 		}
1359 		if (eol)
1360 			q = NULL;
1361 		else {
1362 			q = parse = sob(parse + 1);	/* Optional field */
1363 			parse = son(parse);
1364 			*parse = '\0';
1365 		}
1366 
1367 		working->sig = SIGHUP;
1368 		if (q && *q) {
1369 got_sig:
1370 			working->sig = parse_signal(q);
1371 			if (working->sig < 1 || working->sig >= sys_nsig) {
1372 				badline(
1373 				    "illegal signal in config file:\n%s",
1374 				    errline);
1375 			}
1376 		}
1377 
1378 		/*
1379 		 * Finish figuring out what pid-file to use (if any) in
1380 		 * later processing if this logfile needs to be rotated.
1381 		 */
1382 		if ((working->flags & CE_NOSIGNAL) == CE_NOSIGNAL) {
1383 			/*
1384 			 * This config-entry specified 'n' for nosignal,
1385 			 * see if it also specified an explicit pid_cmd_file.
1386 			 * This would be a pretty pointless combination.
1387 			 */
1388 			if (working->pid_cmd_file != NULL) {
1389 				warnx("Ignoring '%s' because flag 'n' was specified in line:\n%s",
1390 				    working->pid_cmd_file, errline);
1391 				free(working->pid_cmd_file);
1392 				working->pid_cmd_file = NULL;
1393 			}
1394 		} else if (working->pid_cmd_file == NULL) {
1395 			/*
1396 			 * This entry did not specify the 'n' flag, which
1397 			 * means it should signal syslogd unless it had
1398 			 * specified some other pid-file (and obviously the
1399 			 * syslog pid-file will not be for a process-group).
1400 			 * Also, we should only try to notify syslog if we
1401 			 * are root.
1402 			 */
1403 			if (working->flags & CE_SIGNALGROUP) {
1404 				warnx("Ignoring flag 'U' in line:\n%s",
1405 				    errline);
1406 				working->flags &= ~CE_SIGNALGROUP;
1407 			}
1408 			if (needroot)
1409 				working->pid_cmd_file = strdup(path_syslogpid);
1410 		}
1411 
1412 		/*
1413 		 * Add this entry to the appropriate list of entries, unless
1414 		 * it was some kind of special entry (eg: <default>).
1415 		 */
1416 		if (special) {
1417 			;			/* Do not add to any list */
1418 		} else if (working->flags & CE_GLOB) {
1419 			STAILQ_INSERT_TAIL(glob_p, working, cf_nextp);
1420 		} else {
1421 			STAILQ_INSERT_TAIL(work_p, working, cf_nextp);
1422 		}
1423 		continue;
1424 cleanup:
1425 		free_entry(working);
1426 #undef badline
1427 	} /* while (fgets(line, BUFSIZ, cf)) */
1428 	if (errline != NULL)
1429 		free(errline);
1430 }
1431 
1432 static char *
1433 missing_field(char *p, char *errline)
1434 {
1435 
1436 	if (!p || !*p)
1437 		errx(1, "missing field in config file:\n%s", errline);
1438 	return (p);
1439 }
1440 
1441 /*
1442  * In our sort we return it in the reverse of what qsort normally
1443  * would do, as we want the newest files first.  If we have two
1444  * entries with the same time we don't really care about order.
1445  *
1446  * Support function for qsort() in delete_oldest_timelog().
1447  */
1448 static int
1449 oldlog_entry_compare(const void *a, const void *b)
1450 {
1451 	const struct oldlog_entry *ola = a, *olb = b;
1452 
1453 	if (ola->t > olb->t)
1454 		return (-1);
1455 	else if (ola->t < olb->t)
1456 		return (1);
1457 	else
1458 		return (0);
1459 }
1460 
1461 /*
1462  * Check whether the file corresponding to dp is an archive of the logfile
1463  * logfname, based on the timefnamefmt format string. Return true and fill out
1464  * tm if this is the case; otherwise return false.
1465  */
1466 static int
1467 validate_old_timelog(int fd, const struct dirent *dp, const char *logfname,
1468     struct tm *tm)
1469 {
1470 	struct stat sb;
1471 	size_t logfname_len;
1472 	char *s;
1473 	int c;
1474 
1475 	logfname_len = strlen(logfname);
1476 
1477 	if (dp->d_type != DT_REG) {
1478 		/*
1479 		 * Some filesystems (e.g. NFS) don't fill out the d_type field
1480 		 * and leave it set to DT_UNKNOWN; in this case we must obtain
1481 		 * the file type ourselves.
1482 		 */
1483 		if (dp->d_type != DT_UNKNOWN ||
1484 		    fstatat(fd, dp->d_name, &sb, AT_SYMLINK_NOFOLLOW) != 0 ||
1485 		    !S_ISREG(sb.st_mode))
1486 			return (0);
1487 	}
1488 	/* Ignore everything but files with our logfile prefix. */
1489 	if (strncmp(dp->d_name, logfname, logfname_len) != 0)
1490 		return (0);
1491 	/* Ignore the actual non-rotated logfile. */
1492 	if (dp->d_namlen == logfname_len)
1493 		return (0);
1494 
1495 	/*
1496 	 * Make sure we created have found a logfile, so the
1497 	 * postfix is valid, IE format is: '.<time>(.[bgx]z)?'.
1498 	 */
1499 	if (dp->d_name[logfname_len] != '.') {
1500 		if (verbose)
1501 			printf("Ignoring %s which has unexpected "
1502 			    "extension '%s'\n", dp->d_name,
1503 			    &dp->d_name[logfname_len]);
1504 		return (0);
1505 	}
1506 	memset(tm, 0, sizeof(*tm));
1507 	if ((s = strptime(&dp->d_name[logfname_len + 1],
1508 	    timefnamefmt, tm)) == NULL) {
1509 		/*
1510 		 * We could special case "old" sequentially named logfiles here,
1511 		 * but we do not as that would require special handling to
1512 		 * decide which one was the oldest compared to "new" time based
1513 		 * logfiles.
1514 		 */
1515 		if (verbose)
1516 			printf("Ignoring %s which does not "
1517 			    "match time format\n", dp->d_name);
1518 		return (0);
1519 	}
1520 
1521 	for (c = 0; c < COMPRESS_TYPES; c++)
1522 		if (strcmp(s, compress_type[c].suffix) == 0)
1523 			/* We're done. */
1524 			return (1);
1525 
1526 	if (verbose)
1527 		printf("Ignoring %s which has unexpected extension '%s'\n",
1528 		    dp->d_name, s);
1529 
1530 	return (0);
1531 }
1532 
1533 /*
1534  * Delete the oldest logfiles, when using time based filenames.
1535  */
1536 static void
1537 delete_oldest_timelog(const struct conf_entry *ent, const char *archive_dir)
1538 {
1539 	char *basebuf, *dirbuf, errbuf[80];
1540 	const char *base, *dir;
1541 	int dir_fd, i, logcnt, max_logcnt;
1542 	struct oldlog_entry *oldlogs;
1543 	struct dirent *dp;
1544 	struct tm tm;
1545 	DIR *dirp;
1546 
1547 	oldlogs = malloc(MAX_OLDLOGS * sizeof(struct oldlog_entry));
1548 	max_logcnt = MAX_OLDLOGS;
1549 	logcnt = 0;
1550 
1551 	if (archive_dir != NULL && archive_dir[0] != '\0') {
1552 		dirbuf = NULL;
1553 		dir = archive_dir;
1554 	} else {
1555 		if ((dirbuf = strdup(ent->log)) == NULL)
1556 			err(1, "strdup()");
1557 		dir = dirname(dirbuf);
1558 	}
1559 
1560 	if ((basebuf = strdup(ent->log)) == NULL)
1561 		err(1, "strdup()");
1562 	base = basename(basebuf);
1563 	if (strcmp(base, "/") == 0)
1564 		errx(1, "Invalid log filename - became '/'");
1565 
1566 	if (verbose > 2)
1567 		printf("Searching for old logs in %s\n", dir);
1568 
1569 	/* First we create a 'list' of all archived logfiles */
1570 	if ((dirp = opendir(dir)) == NULL)
1571 		err(1, "Cannot open log directory '%s'", dir);
1572 	dir_fd = dirfd(dirp);
1573 	while ((dp = readdir(dirp)) != NULL) {
1574 		if (validate_old_timelog(dir_fd, dp, base, &tm) == 0)
1575 			continue;
1576 
1577 		/*
1578 		 * We should now have old an old rotated logfile, so
1579 		 * add it to the 'list'.
1580 		 */
1581 		if ((oldlogs[logcnt].t = timegm(&tm)) == -1)
1582 			err(1, "Could not convert time string to time value");
1583 		if ((oldlogs[logcnt].fname = strdup(dp->d_name)) == NULL)
1584 			err(1, "strdup()");
1585 		logcnt++;
1586 
1587 		/*
1588 		 * It is very unlikely we ever run out of space in the
1589 		 * logfile array from the default size, but lets
1590 		 * handle it anyway...
1591 		 */
1592 		if (logcnt >= max_logcnt) {
1593 			max_logcnt *= 4;
1594 			/* Detect integer overflow */
1595 			if (max_logcnt < logcnt)
1596 				errx(1, "Too many old logfiles found");
1597 			oldlogs = realloc(oldlogs,
1598 			    max_logcnt * sizeof(struct oldlog_entry));
1599 			if (oldlogs == NULL)
1600 				err(1, "realloc()");
1601 		}
1602 	}
1603 
1604 	/* Second, if needed we delete oldest archived logfiles */
1605 	if (logcnt > 0 && logcnt >= ent->numlogs && ent->numlogs > 1) {
1606 		oldlogs = realloc(oldlogs, logcnt *
1607 		    sizeof(struct oldlog_entry));
1608 		if (oldlogs == NULL)
1609 			err(1, "realloc()");
1610 
1611 		/*
1612 		 * We now sort the logs in the order of newest to
1613 		 * oldest.  That way we can simply skip over the
1614 		 * number of records we want to keep.
1615 		 */
1616 		qsort(oldlogs, logcnt, sizeof(struct oldlog_entry),
1617 		    oldlog_entry_compare);
1618 		for (i = ent->numlogs - 1; i < logcnt; i++) {
1619 			if (noaction)
1620 				printf("\trm -f %s/%s\n", dir,
1621 				    oldlogs[i].fname);
1622 			else if (unlinkat(dir_fd, oldlogs[i].fname, 0) != 0) {
1623 				snprintf(errbuf, sizeof(errbuf),
1624 				    "Could not delete old logfile '%s'",
1625 				    oldlogs[i].fname);
1626 				perror(errbuf);
1627 			}
1628 		}
1629 	} else if (verbose > 1)
1630 		printf("No old logs to delete for logfile %s\n", ent->log);
1631 
1632 	/* Third, cleanup */
1633 	closedir(dirp);
1634 	for (i = 0; i < logcnt; i++) {
1635 		assert(oldlogs[i].fname != NULL);
1636 		free(oldlogs[i].fname);
1637 	}
1638 	free(oldlogs);
1639 	free(dirbuf);
1640 	free(basebuf);
1641 }
1642 
1643 /*
1644  * Generate a log filename, when using classic filenames.
1645  */
1646 static void
1647 gen_classiclog_fname(char *fname, size_t fname_sz, const char *archive_dir,
1648     const char *namepart, int numlogs_c)
1649 {
1650 
1651 	if (archive_dir[0] != '\0')
1652 		(void) snprintf(fname, fname_sz, "%s/%s.%d", archive_dir,
1653 		    namepart, numlogs_c);
1654 	else
1655 		(void) snprintf(fname, fname_sz, "%s.%d", namepart, numlogs_c);
1656 }
1657 
1658 /*
1659  * Delete a rotated logfile, when using classic filenames.
1660  */
1661 static void
1662 delete_classiclog(const char *archive_dir, const char *namepart, int numlog_c)
1663 {
1664 	char file1[MAXPATHLEN], zfile1[MAXPATHLEN];
1665 	int c;
1666 
1667 	gen_classiclog_fname(file1, sizeof(file1), archive_dir, namepart,
1668 	    numlog_c);
1669 
1670 	for (c = 0; c < COMPRESS_TYPES; c++) {
1671 		(void) snprintf(zfile1, sizeof(zfile1), "%s%s", file1,
1672 		    compress_type[c].suffix);
1673 		if (noaction)
1674 			printf("\trm -f %s\n", zfile1);
1675 		else
1676 			(void) unlink(zfile1);
1677 	}
1678 }
1679 
1680 /*
1681  * Only add to the queue if the file hasn't already been added. This is
1682  * done to prevent circular include loops.
1683  */
1684 static void
1685 add_to_queue(const char *fname, struct ilist *inclist)
1686 {
1687 	struct include_entry *inc;
1688 
1689 	STAILQ_FOREACH(inc, inclist, inc_nextp) {
1690 		if (strcmp(fname, inc->file) == 0) {
1691 			warnx("duplicate include detected: %s", fname);
1692 			return;
1693 		}
1694 	}
1695 
1696 	inc = malloc(sizeof(struct include_entry));
1697 	if (inc == NULL)
1698 		err(1, "malloc of inc");
1699 	inc->file = strdup(fname);
1700 
1701 	if (verbose > 2)
1702 		printf("\t+ Adding %s to the processing queue.\n", fname);
1703 
1704 	STAILQ_INSERT_TAIL(inclist, inc, inc_nextp);
1705 }
1706 
1707 /*
1708  * Search for logfile and return its compression suffix (if supported)
1709  * The suffix detection is first-match in the order of compress_types
1710  *
1711  * Note: if logfile without suffix exists (uncompressed, COMPRESS_NONE)
1712  * a zero-length string is returned
1713  */
1714 static const char *
1715 get_logfile_suffix(const char *logfile)
1716 {
1717 	struct stat st;
1718 	char zfile[MAXPATHLEN];
1719 	int c;
1720 
1721 	for (c = 0; c < COMPRESS_TYPES; c++) {
1722 		(void) strlcpy(zfile, logfile, MAXPATHLEN);
1723 		(void) strlcat(zfile, compress_type[c].suffix, MAXPATHLEN);
1724 		if (lstat(zfile, &st) == 0)
1725 			return (compress_type[c].suffix);
1726 	}
1727 	return (NULL);
1728 }
1729 
1730 static fk_entry
1731 do_rotate(const struct conf_entry *ent)
1732 {
1733 	char dirpart[MAXPATHLEN], namepart[MAXPATHLEN];
1734 	char file1[MAXPATHLEN], file2[MAXPATHLEN];
1735 	char zfile1[MAXPATHLEN], zfile2[MAXPATHLEN];
1736 	const char *logfile_suffix;
1737 	char datetimestr[30];
1738 	int flags, numlogs_c;
1739 	fk_entry free_or_keep;
1740 	struct sigwork_entry *swork;
1741 	struct stat st;
1742 	struct tm tm;
1743 	time_t now;
1744 
1745 	flags = ent->flags;
1746 	free_or_keep = FREE_ENT;
1747 
1748 	if (archtodir) {
1749 		char *p;
1750 
1751 		/* build complete name of archive directory into dirpart */
1752 		if (*archdirname == '/') {	/* absolute */
1753 			strlcpy(dirpart, archdirname, sizeof(dirpart));
1754 		} else {	/* relative */
1755 			/* get directory part of logfile */
1756 			strlcpy(dirpart, ent->log, sizeof(dirpart));
1757 			if ((p = strrchr(dirpart, '/')) == NULL)
1758 				dirpart[0] = '\0';
1759 			else
1760 				*(p + 1) = '\0';
1761 			strlcat(dirpart, archdirname, sizeof(dirpart));
1762 		}
1763 
1764 		/* check if archive directory exists, if not, create it */
1765 		if (lstat(dirpart, &st))
1766 			createdir(ent, dirpart);
1767 
1768 		/* get filename part of logfile */
1769 		if ((p = strrchr(ent->log, '/')) == NULL)
1770 			strlcpy(namepart, ent->log, sizeof(namepart));
1771 		else
1772 			strlcpy(namepart, p + 1, sizeof(namepart));
1773 	} else {
1774 		/*
1775 		 * Tell utility functions we are not using an archive
1776 		 * dir.
1777 		 */
1778 		dirpart[0] = '\0';
1779 		strlcpy(namepart, ent->log, sizeof(namepart));
1780 	}
1781 
1782 	/* Delete old logs */
1783 	if (timefnamefmt != NULL)
1784 		delete_oldest_timelog(ent, dirpart);
1785 	else {
1786 		/*
1787 		 * Handle cleaning up after legacy newsyslog where we
1788 		 * kept ent->numlogs + 1 files.  This code can go away
1789 		 * at some point in the future.
1790 		 */
1791 		delete_classiclog(dirpart, namepart, ent->numlogs);
1792 
1793 		if (ent->numlogs > 0)
1794 			delete_classiclog(dirpart, namepart, ent->numlogs - 1);
1795 
1796 	}
1797 
1798 	if (timefnamefmt != NULL) {
1799 		/* If time functions fails we can't really do any sensible */
1800 		if (time(&now) == (time_t)-1 ||
1801 		    localtime_r(&now, &tm) == NULL)
1802 			bzero(&tm, sizeof(tm));
1803 
1804 		strftime(datetimestr, sizeof(datetimestr), timefnamefmt, &tm);
1805 		if (archtodir)
1806 			(void) snprintf(file1, sizeof(file1), "%s/%s.%s",
1807 			    dirpart, namepart, datetimestr);
1808 		else
1809 			(void) snprintf(file1, sizeof(file1), "%s.%s",
1810 			    ent->log, datetimestr);
1811 
1812 		/* Don't run the code to move down logs */
1813 		numlogs_c = -1;
1814 	} else {
1815 		gen_classiclog_fname(file1, sizeof(file1), dirpart, namepart,
1816 		    ent->numlogs - 1);
1817 		numlogs_c = ent->numlogs - 2;		/* copy for countdown */
1818 	}
1819 
1820 	/* Move down log files */
1821 	for (; numlogs_c >= 0; numlogs_c--) {
1822 		(void) strlcpy(file2, file1, sizeof(file2));
1823 
1824 		gen_classiclog_fname(file1, sizeof(file1), dirpart, namepart,
1825 		    numlogs_c);
1826 
1827 		logfile_suffix = get_logfile_suffix(file1);
1828 		if (logfile_suffix == NULL)
1829 			continue;
1830 		(void) strlcpy(zfile1, file1, MAXPATHLEN);
1831 		(void) strlcpy(zfile2, file2, MAXPATHLEN);
1832 		(void) strlcat(zfile1, logfile_suffix, MAXPATHLEN);
1833 		(void) strlcat(zfile2, logfile_suffix, MAXPATHLEN);
1834 
1835 		if (noaction)
1836 			printf("\tmv %s %s\n", zfile1, zfile2);
1837 		else {
1838 			/* XXX - Ought to be checking for failure! */
1839 			(void)rename(zfile1, zfile2);
1840 		}
1841 		change_attrs(zfile2, ent);
1842 		if (ent->compress && strlen(logfile_suffix) == 0) {
1843 			/* compress old rotation */
1844 			struct zipwork_entry *zwork;
1845 			size_t sz;
1846 
1847 			sz = sizeof(*zwork) + strlen(zfile2) + 1;
1848 			zwork = calloc(1, sz);
1849 			if (zwork == NULL)
1850 				err(1, "calloc");
1851 
1852 			zwork->zw_conf = ent;
1853 			zwork->zw_fsize = sizefile(zfile2);
1854 			strcpy(zwork->zw_fname, zfile2);
1855 			do_zipwork(zwork);
1856 			free(zwork);
1857 		}
1858 	}
1859 
1860 	if (ent->numlogs > 0) {
1861 		if (noaction) {
1862 			/*
1863 			 * Note that savelog() may succeed with using link()
1864 			 * for the archtodir case, but there is no good way
1865 			 * of knowing if it will when doing "noaction", so
1866 			 * here we claim that it will have to do a copy...
1867 			 */
1868 			if (archtodir)
1869 				printf("\tcp %s %s\n", ent->log, file1);
1870 			else
1871 				printf("\tln %s %s\n", ent->log, file1);
1872 			printf("\ttouch %s\t\t"
1873 			    "# Update mtime for 'when'-interval processing\n",
1874 			    file1);
1875 		} else {
1876 			if (!(flags & CE_BINARY)) {
1877 				/* Report the trimming to the old log */
1878 				log_trim(ent->log, ent);
1879 			}
1880 			savelog(ent->log, file1);
1881 			/*
1882 			 * Interval-based rotations are done using the mtime of
1883 			 * the most recently archived log, so make sure it gets
1884 			 * updated during a rotation.
1885 			 */
1886 			utimes(file1, NULL);
1887 		}
1888 		change_attrs(file1, ent);
1889 	}
1890 
1891 	/* Create the new log file and move it into place */
1892 	if (noaction)
1893 		printf("Start new log...\n");
1894 	createlog(ent);
1895 
1896 	/*
1897 	 * Save all signalling and file-compression to be done after log
1898 	 * files from all entries have been rotated.  This way any one
1899 	 * process will not be sent the same signal multiple times when
1900 	 * multiple log files had to be rotated.
1901 	 */
1902 	swork = NULL;
1903 	if (ent->pid_cmd_file != NULL)
1904 		swork = save_sigwork(ent);
1905 	if (ent->numlogs > 0 && ent->compress > COMPRESS_NONE) {
1906 		if (!(ent->flags & CE_PLAIN0) ||
1907 		    strcmp(&file1[strlen(file1) - 2], ".0") != 0) {
1908 			/*
1909 			 * The zipwork_entry will include a pointer to this
1910 			 * conf_entry, so the conf_entry should not be freed.
1911 			 */
1912 			free_or_keep = KEEP_ENT;
1913 			save_zipwork(ent, swork, ent->fsize, file1);
1914 		}
1915 	}
1916 
1917 	return (free_or_keep);
1918 }
1919 
1920 static void
1921 do_sigwork(struct sigwork_entry *swork)
1922 {
1923 	struct sigwork_entry *nextsig;
1924 	int kres, secs;
1925 	char *tmp;
1926 
1927 	if (swork->sw_runcmd == 0 && (!(swork->sw_pidok) || swork->sw_pid == 0))
1928 		return;			/* no work to do... */
1929 
1930 	/*
1931 	 * If nosignal (-s) was specified, then do not signal any process.
1932 	 * Note that a nosignal request triggers a warning message if the
1933 	 * rotated logfile needs to be compressed, *unless* -R was also
1934 	 * specified.  We assume that an `-sR' request came from a process
1935 	 * which writes to the logfile, and as such, we assume that process
1936 	 * has already made sure the logfile is not presently in use.  This
1937 	 * just sets swork->sw_pidok to a special value, and do_zipwork
1938 	 * will print any necessary warning(s).
1939 	 */
1940 	if (nosignal) {
1941 		if (!rotatereq)
1942 			swork->sw_pidok = -1;
1943 		return;
1944 	}
1945 
1946 	/*
1947 	 * Compute the pause between consecutive signals.  Use a longer
1948 	 * sleep time if we will be sending two signals to the same
1949 	 * daemon or process-group.
1950 	 */
1951 	secs = 0;
1952 	nextsig = SLIST_NEXT(swork, sw_nextp);
1953 	if (nextsig != NULL) {
1954 		if (swork->sw_pid == nextsig->sw_pid)
1955 			secs = 10;
1956 		else
1957 			secs = 1;
1958 	}
1959 
1960 	if (noaction) {
1961 		if (swork->sw_runcmd)
1962 			printf("\tsh -c '%s %d'\n", swork->sw_fname,
1963 			    swork->sw_signum);
1964 		else {
1965 			printf("\tkill -%d %d \t\t# %s\n", swork->sw_signum,
1966 			    (int)swork->sw_pid, swork->sw_fname);
1967 			if (secs > 0)
1968 				printf("\tsleep %d\n", secs);
1969 		}
1970 		return;
1971 	}
1972 
1973 	if (swork->sw_runcmd) {
1974 		asprintf(&tmp, "%s %d", swork->sw_fname, swork->sw_signum);
1975 		if (tmp == NULL) {
1976 			warn("can't allocate memory to run %s",
1977 			    swork->sw_fname);
1978 			return;
1979 		}
1980 		if (verbose)
1981 			printf("Run command: %s\n", tmp);
1982 		kres = system(tmp);
1983 		if (kres) {
1984 			warnx("%s: returned non-zero exit code: %d",
1985 			    tmp, kres);
1986 		}
1987 		free(tmp);
1988 		return;
1989 	}
1990 
1991 	kres = kill(swork->sw_pid, swork->sw_signum);
1992 	if (kres != 0) {
1993 		/*
1994 		 * Assume that "no such process" (ESRCH) is something
1995 		 * to warn about, but is not an error.  Presumably the
1996 		 * process which writes to the rotated log file(s) is
1997 		 * gone, in which case we should have no problem with
1998 		 * compressing the rotated log file(s).
1999 		 */
2000 		if (errno != ESRCH)
2001 			swork->sw_pidok = 0;
2002 		warn("can't notify %s, pid %d = %s", swork->sw_pidtype,
2003 		    (int)swork->sw_pid, swork->sw_fname);
2004 	} else {
2005 		if (verbose)
2006 			printf("Notified %s pid %d = %s\n", swork->sw_pidtype,
2007 			    (int)swork->sw_pid, swork->sw_fname);
2008 		if (secs > 0) {
2009 			if (verbose)
2010 				printf("Pause %d second(s) between signals\n",
2011 				    secs);
2012 			sleep(secs);
2013 		}
2014 	}
2015 }
2016 
2017 static void
2018 do_zipwork(struct zipwork_entry *zwork)
2019 {
2020 	const struct compress_types *ct;
2021 	struct sbuf *command;
2022 	pid_t pidzip, wpid;
2023 	int c, errsav, fcount, zstatus;
2024 	const char **args, *pgm_name, *pgm_path;
2025 	char *zresult;
2026 
2027 	assert(zwork != NULL);
2028 	assert(zwork->zw_conf != NULL);
2029 	assert(zwork->zw_conf->compress > COMPRESS_NONE);
2030 	assert(zwork->zw_conf->compress < COMPRESS_TYPES);
2031 
2032 	if (zwork->zw_swork != NULL && zwork->zw_swork->sw_runcmd == 0 &&
2033 	    zwork->zw_swork->sw_pidok <= 0) {
2034 		warnx(
2035 		    "log %s not compressed because daemon(s) not notified",
2036 		    zwork->zw_fname);
2037 		change_attrs(zwork->zw_fname, zwork->zw_conf);
2038 		return;
2039 	}
2040 
2041 	ct = &compress_type[zwork->zw_conf->compress];
2042 
2043 	/*
2044 	 * execv will be called with the array [ program, flags ... ,
2045 	 * filename, NULL ] so allocate nflags+3 elements for the array.
2046 	 */
2047 	args = calloc(ct->nflags + 3, sizeof(*args));
2048 	if (args == NULL)
2049 		err(1, "calloc");
2050 
2051 	pgm_path = ct->path;
2052 	pgm_name = strrchr(pgm_path, '/');
2053 	if (pgm_name == NULL)
2054 		pgm_name = pgm_path;
2055 	else
2056 		pgm_name++;
2057 
2058 	/* Build the argument array. */
2059 	args[0] = pgm_name;
2060 	for (c = 0; c < ct->nflags; c++)
2061 		args[c + 1] = ct->flags[c];
2062 	args[c + 1] = zwork->zw_fname;
2063 
2064 	/* Also create a space-delimited version if we need to print it. */
2065 	if ((command = sbuf_new_auto()) == NULL)
2066 		errx(1, "sbuf_new");
2067 	sbuf_cpy(command, pgm_path);
2068 	for (c = 1; args[c] != NULL; c++) {
2069 		sbuf_putc(command, ' ');
2070 		sbuf_cat(command, args[c]);
2071 	}
2072 	if (sbuf_finish(command) == -1)
2073 		err(1, "sbuf_finish");
2074 
2075 	/* Determine the filename of the compressed file. */
2076 	asprintf(&zresult, "%s%s", zwork->zw_fname, ct->suffix);
2077 	if (zresult == NULL)
2078 		errx(1, "asprintf");
2079 
2080 	if (verbose)
2081 		printf("Executing: %s\n", sbuf_data(command));
2082 
2083 	if (noaction) {
2084 		printf("\t%s %s\n", pgm_name, zwork->zw_fname);
2085 		change_attrs(zresult, zwork->zw_conf);
2086 		goto out;
2087 	}
2088 
2089 	fcount = 1;
2090 	pidzip = fork();
2091 	while (pidzip < 0) {
2092 		/*
2093 		 * The fork failed.  If the failure was due to a temporary
2094 		 * problem, then wait a short time and try it again.
2095 		 */
2096 		errsav = errno;
2097 		warn("fork() for `%s %s'", pgm_name, zwork->zw_fname);
2098 		if (errsav != EAGAIN || fcount > 5)
2099 			errx(1, "Exiting...");
2100 		sleep(fcount * 12);
2101 		fcount++;
2102 		pidzip = fork();
2103 	}
2104 	if (!pidzip) {
2105 		/* The child process executes the compression command */
2106 		execv(pgm_path, __DECONST(char *const*, args));
2107 		err(1, "execv(`%s')", sbuf_data(command));
2108 	}
2109 
2110 	wpid = waitpid(pidzip, &zstatus, 0);
2111 	if (wpid == -1) {
2112 		/* XXX - should this be a fatal error? */
2113 		warn("%s: waitpid(%d)", pgm_path, pidzip);
2114 		goto out;
2115 	}
2116 	if (!WIFEXITED(zstatus)) {
2117 		warnx("`%s' did not terminate normally", sbuf_data(command));
2118 		goto out;
2119 	}
2120 	if (WEXITSTATUS(zstatus)) {
2121 		warnx("`%s' terminated with a non-zero status (%d)",
2122 		    sbuf_data(command), WEXITSTATUS(zstatus));
2123 		goto out;
2124 	}
2125 
2126 	/* Compression was successful, set file attributes on the result. */
2127 	change_attrs(zresult, zwork->zw_conf);
2128 
2129 out:
2130 	sbuf_delete(command);
2131 	free(args);
2132 	free(zresult);
2133 }
2134 
2135 /*
2136  * Save information on any process we need to signal.  Any single
2137  * process may need to be sent different signal-values for different
2138  * log files, but usually a single signal-value will cause the process
2139  * to close and re-open all of its log files.
2140  */
2141 static struct sigwork_entry *
2142 save_sigwork(const struct conf_entry *ent)
2143 {
2144 	struct sigwork_entry *sprev, *stmp;
2145 	int ndiff;
2146 	size_t tmpsiz;
2147 
2148 	sprev = NULL;
2149 	ndiff = 1;
2150 	SLIST_FOREACH(stmp, &swhead, sw_nextp) {
2151 		ndiff = strcmp(ent->pid_cmd_file, stmp->sw_fname);
2152 		if (ndiff > 0)
2153 			break;
2154 		if (ndiff == 0) {
2155 			if (ent->sig == stmp->sw_signum)
2156 				break;
2157 			if (ent->sig > stmp->sw_signum) {
2158 				ndiff = 1;
2159 				break;
2160 			}
2161 		}
2162 		sprev = stmp;
2163 	}
2164 	if (stmp != NULL && ndiff == 0)
2165 		return (stmp);
2166 
2167 	tmpsiz = sizeof(struct sigwork_entry) + strlen(ent->pid_cmd_file) + 1;
2168 	stmp = malloc(tmpsiz);
2169 
2170 	stmp->sw_runcmd = 0;
2171 	/* If this is a command to run we just set the flag and run command */
2172 	if (ent->flags & CE_PID2CMD) {
2173 		stmp->sw_pid = -1;
2174 		stmp->sw_pidok = 0;
2175 		stmp->sw_runcmd = 1;
2176 	} else {
2177 		set_swpid(stmp, ent);
2178 	}
2179 	stmp->sw_signum = ent->sig;
2180 	strcpy(stmp->sw_fname, ent->pid_cmd_file);
2181 	if (sprev == NULL)
2182 		SLIST_INSERT_HEAD(&swhead, stmp, sw_nextp);
2183 	else
2184 		SLIST_INSERT_AFTER(sprev, stmp, sw_nextp);
2185 	return (stmp);
2186 }
2187 
2188 /*
2189  * Save information on any file we need to compress.  We may see the same
2190  * file multiple times, so check the full list to avoid duplicates.  The
2191  * list itself is sorted smallest-to-largest, because that's the order we
2192  * want to compress the files.  If the partition is very low on disk space,
2193  * then the smallest files are the most likely to compress, and compressing
2194  * them first will free up more space for the larger files.
2195  */
2196 static struct zipwork_entry *
2197 save_zipwork(const struct conf_entry *ent, const struct sigwork_entry *swork,
2198     int zsize, const char *zipfname)
2199 {
2200 	struct zipwork_entry *zprev, *ztmp;
2201 	int ndiff;
2202 	size_t tmpsiz;
2203 
2204 	/* Compute the size if the caller did not know it. */
2205 	if (zsize < 0)
2206 		zsize = sizefile(zipfname);
2207 
2208 	zprev = NULL;
2209 	ndiff = 1;
2210 	SLIST_FOREACH(ztmp, &zwhead, zw_nextp) {
2211 		ndiff = strcmp(zipfname, ztmp->zw_fname);
2212 		if (ndiff == 0)
2213 			break;
2214 		if (zsize > ztmp->zw_fsize)
2215 			zprev = ztmp;
2216 	}
2217 	if (ztmp != NULL && ndiff == 0)
2218 		return (ztmp);
2219 
2220 	tmpsiz = sizeof(struct zipwork_entry) + strlen(zipfname) + 1;
2221 	ztmp = malloc(tmpsiz);
2222 	ztmp->zw_conf = ent;
2223 	ztmp->zw_swork = swork;
2224 	ztmp->zw_fsize = zsize;
2225 	strcpy(ztmp->zw_fname, zipfname);
2226 	if (zprev == NULL)
2227 		SLIST_INSERT_HEAD(&zwhead, ztmp, zw_nextp);
2228 	else
2229 		SLIST_INSERT_AFTER(zprev, ztmp, zw_nextp);
2230 	return (ztmp);
2231 }
2232 
2233 /* Send a signal to the pid specified by pidfile */
2234 static void
2235 set_swpid(struct sigwork_entry *swork, const struct conf_entry *ent)
2236 {
2237 	FILE *f;
2238 	long minok, maxok, rval;
2239 	char *endp, *linep, line[BUFSIZ];
2240 
2241 	minok = MIN_PID;
2242 	maxok = MAX_PID;
2243 	swork->sw_pidok = 0;
2244 	swork->sw_pid = 0;
2245 	swork->sw_pidtype = "daemon";
2246 	if (ent->flags & CE_SIGNALGROUP) {
2247 		/*
2248 		 * If we are expected to signal a process-group when
2249 		 * rotating this logfile, then the value read in should
2250 		 * be the negative of a valid process ID.
2251 		 */
2252 		minok = -MAX_PID;
2253 		maxok = -MIN_PID;
2254 		swork->sw_pidtype = "process-group";
2255 	}
2256 
2257 	f = fopen(ent->pid_cmd_file, "r");
2258 	if (f == NULL) {
2259 		if (errno == ENOENT && enforcepid == 0) {
2260 			/*
2261 			 * Warn if the PID file doesn't exist, but do
2262 			 * not consider it an error.  Most likely it
2263 			 * means the process has been terminated,
2264 			 * so it should be safe to rotate any log
2265 			 * files that the process would have been using.
2266 			 */
2267 			swork->sw_pidok = 1;
2268 			warnx("pid file doesn't exist: %s", ent->pid_cmd_file);
2269 		} else
2270 			warn("can't open pid file: %s", ent->pid_cmd_file);
2271 		return;
2272 	}
2273 
2274 	if (fgets(line, BUFSIZ, f) == NULL) {
2275 		/*
2276 		 * Warn if the PID file is empty, but do not consider
2277 		 * it an error.  Most likely it means the process has
2278 		 * has terminated, so it should be safe to rotate any
2279 		 * log files that the process would have been using.
2280 		 */
2281 		if (feof(f) && enforcepid == 0) {
2282 			swork->sw_pidok = 1;
2283 			warnx("pid/cmd file is empty: %s", ent->pid_cmd_file);
2284 		} else
2285 			warn("can't read from pid file: %s", ent->pid_cmd_file);
2286 		(void)fclose(f);
2287 		return;
2288 	}
2289 	(void)fclose(f);
2290 
2291 	errno = 0;
2292 	linep = line;
2293 	while (*linep == ' ')
2294 		linep++;
2295 	rval = strtol(linep, &endp, 10);
2296 	if (*endp != '\0' && !isspacech(*endp)) {
2297 		warnx("pid file does not start with a valid number: %s",
2298 		    ent->pid_cmd_file);
2299 	} else if (rval < minok || rval > maxok) {
2300 		warnx("bad value '%ld' for process number in %s",
2301 		    rval, ent->pid_cmd_file);
2302 		if (verbose)
2303 			warnx("\t(expecting value between %ld and %ld)",
2304 			    minok, maxok);
2305 	} else {
2306 		swork->sw_pidok = 1;
2307 		swork->sw_pid = rval;
2308 	}
2309 
2310 	return;
2311 }
2312 
2313 /* Log the fact that the logs were turned over */
2314 static int
2315 log_trim(const char *logname, const struct conf_entry *log_ent)
2316 {
2317 	FILE *f;
2318 	const char *xtra;
2319 
2320 	if ((f = fopen(logname, "a")) == NULL)
2321 		return (-1);
2322 	xtra = "";
2323 	if (log_ent->def_cfg)
2324 		xtra = " using <default> rule";
2325 	if (log_ent->flags & CE_RFC5424) {
2326 		if (log_ent->firstcreate) {
2327 			fprintf(f, "<%d>1 %s %s newsyslog %d - - %s%s\n",
2328 			    LOG_MAKEPRI(LOG_USER, LOG_INFO),
2329 			    daytime_rfc5424, hostname, getpid(),
2330 			    "logfile first created", xtra);
2331 		} else if (log_ent->r_reason != NULL) {
2332 			fprintf(f, "<%d>1 %s %s newsyslog %d - - %s%s%s\n",
2333 			    LOG_MAKEPRI(LOG_USER, LOG_INFO),
2334 			    daytime_rfc5424, hostname, getpid(),
2335 			    "logfile turned over", log_ent->r_reason, xtra);
2336 		} else {
2337 			fprintf(f, "<%d>1 %s %s newsyslog %d - - %s%s\n",
2338 			    LOG_MAKEPRI(LOG_USER, LOG_INFO),
2339 			    daytime_rfc5424, hostname, getpid(),
2340 			    "logfile turned over", xtra);
2341 		}
2342 	} else {
2343 		if (log_ent->firstcreate)
2344 			fprintf(f,
2345 			    "%s %.*s newsyslog[%d]: logfile first created%s\n",
2346 			    daytime, (int)hostname_shortlen, hostname, getpid(),
2347 			    xtra);
2348 		else if (log_ent->r_reason != NULL)
2349 			fprintf(f,
2350 			    "%s %.*s newsyslog[%d]: logfile turned over%s%s\n",
2351 			    daytime, (int)hostname_shortlen, hostname, getpid(),
2352 			    log_ent->r_reason, xtra);
2353 		else
2354 			fprintf(f,
2355 			    "%s %.*s newsyslog[%d]: logfile turned over%s\n",
2356 			    daytime, (int)hostname_shortlen, hostname, getpid(),
2357 			    xtra);
2358 	}
2359 	if (fclose(f) == EOF)
2360 		err(1, "log_trim: fclose");
2361 	return (0);
2362 }
2363 
2364 /* Return size in kilobytes of a file */
2365 static int
2366 sizefile(const char *file)
2367 {
2368 	struct stat sb;
2369 
2370 	if (stat(file, &sb) < 0)
2371 		return (-1);
2372 	return (kbytes(sb.st_size));
2373 }
2374 
2375 /*
2376  * Return the mtime of the most recent archive of the logfile, using timestamp
2377  * based filenames.
2378  */
2379 static time_t
2380 mtime_old_timelog(const char *file)
2381 {
2382 	struct stat sb;
2383 	struct tm tm;
2384 	int dir_fd;
2385 	time_t t;
2386 	struct dirent *dp;
2387 	DIR *dirp;
2388 	char *logfname, *logfnamebuf, *dir, *dirbuf;
2389 
2390 	t = -1;
2391 
2392 	if ((dirbuf = strdup(file)) == NULL) {
2393 		warn("strdup() of '%s'", file);
2394 		return (t);
2395 	}
2396 	dir = dirname(dirbuf);
2397 	if ((logfnamebuf = strdup(file)) == NULL) {
2398 		warn("strdup() of '%s'", file);
2399 		free(dirbuf);
2400 		return (t);
2401 	}
2402 	logfname = basename(logfnamebuf);
2403 	if (logfname[0] == '/') {
2404 		warnx("Invalid log filename '%s'", logfname);
2405 		goto out;
2406 	}
2407 
2408 	if ((dirp = opendir(dir)) == NULL) {
2409 		warn("Cannot open log directory '%s'", dir);
2410 		goto out;
2411 	}
2412 	dir_fd = dirfd(dirp);
2413 	/* Open the archive dir and find the most recent archive of logfname. */
2414 	while ((dp = readdir(dirp)) != NULL) {
2415 		if (validate_old_timelog(dir_fd, dp, logfname, &tm) == 0)
2416 			continue;
2417 
2418 		if (fstatat(dir_fd, dp->d_name, &sb, AT_SYMLINK_NOFOLLOW) == -1) {
2419 			warn("Cannot stat '%s'", file);
2420 			continue;
2421 		}
2422 		if (t < sb.st_mtime)
2423 			t = sb.st_mtime;
2424 	}
2425 	closedir(dirp);
2426 
2427 out:
2428 	free(dirbuf);
2429 	free(logfnamebuf);
2430 	return (t);
2431 }
2432 
2433 /* Return the age in hours of the most recent archive of the logfile. */
2434 static int
2435 age_old_log(const char *file)
2436 {
2437 	struct stat sb;
2438 	const char *logfile_suffix;
2439 	static unsigned int suffix_maxlen = 0;
2440 	char *tmp;
2441 	size_t tmpsiz;
2442 	time_t mtime;
2443 	int c;
2444 
2445 	if (suffix_maxlen == 0) {
2446 		for (c = 0; c < COMPRESS_TYPES; c++)
2447 			suffix_maxlen = MAX(suffix_maxlen,
2448 			    strlen(compress_type[c].suffix));
2449 	}
2450 
2451 	tmpsiz = MAXPATHLEN + sizeof(".0") + suffix_maxlen + 1;
2452 	tmp = alloca(tmpsiz);
2453 
2454 	if (archtodir) {
2455 		char *p;
2456 
2457 		/* build name of archive directory into tmp */
2458 		if (*archdirname == '/') {	/* absolute */
2459 			strlcpy(tmp, archdirname, tmpsiz);
2460 		} else {	/* relative */
2461 			/* get directory part of logfile */
2462 			strlcpy(tmp, file, tmpsiz);
2463 			if ((p = strrchr(tmp, '/')) == NULL)
2464 				tmp[0] = '\0';
2465 			else
2466 				*(p + 1) = '\0';
2467 			strlcat(tmp, archdirname, tmpsiz);
2468 		}
2469 
2470 		strlcat(tmp, "/", tmpsiz);
2471 
2472 		/* get filename part of logfile */
2473 		if ((p = strrchr(file, '/')) == NULL)
2474 			strlcat(tmp, file, tmpsiz);
2475 		else
2476 			strlcat(tmp, p + 1, tmpsiz);
2477 	} else {
2478 		(void) strlcpy(tmp, file, tmpsiz);
2479 	}
2480 
2481 	if (timefnamefmt != NULL) {
2482 		mtime = mtime_old_timelog(tmp);
2483 		if (mtime == -1)
2484 			return (-1);
2485 	} else {
2486 		strlcat(tmp, ".0", tmpsiz);
2487 		logfile_suffix = get_logfile_suffix(tmp);
2488 		if (logfile_suffix == NULL)
2489 			return (-1);
2490 		(void) strlcat(tmp, logfile_suffix, tmpsiz);
2491 		if (stat(tmp, &sb) < 0)
2492 			return (-1);
2493 		mtime = sb.st_mtime;
2494 	}
2495 
2496 	return ((int)(ptimeget_secs(timenow) - mtime + 1800) / 3600);
2497 }
2498 
2499 /* Skip Over Blanks */
2500 static char *
2501 sob(char *p)
2502 {
2503 	while (p && *p && isspace(*p))
2504 		p++;
2505 	return (p);
2506 }
2507 
2508 /* Skip Over Non-Blanks */
2509 static char *
2510 son(char *p)
2511 {
2512 	while (p && *p && !isspace(*p))
2513 		p++;
2514 	return (p);
2515 }
2516 
2517 /* Check if string is actually a number */
2518 static int
2519 isnumberstr(const char *string)
2520 {
2521 	while (*string) {
2522 		if (!isdigitch(*string++))
2523 			return (0);
2524 	}
2525 	return (1);
2526 }
2527 
2528 /* Check if string contains a glob */
2529 static int
2530 isglobstr(const char *string)
2531 {
2532 	char chr;
2533 
2534 	while ((chr = *string++)) {
2535 		if (chr == '*' || chr == '?' || chr == '[')
2536 			return (1);
2537 	}
2538 	return (0);
2539 }
2540 
2541 /*
2542  * Save the active log file under a new name.  A link to the new name
2543  * is the quick-and-easy way to do this.  If that fails (which it will
2544  * if the destination is on another partition), then make a copy of
2545  * the file to the new location.
2546  */
2547 static void
2548 savelog(char *from, char *to)
2549 {
2550 	FILE *src, *dst;
2551 	int c, res;
2552 
2553 	res = link(from, to);
2554 	if (res == 0)
2555 		return;
2556 
2557 	if ((src = fopen(from, "r")) == NULL)
2558 		err(1, "can't fopen %s for reading", from);
2559 	if ((dst = fopen(to, "w")) == NULL)
2560 		err(1, "can't fopen %s for writing", to);
2561 
2562 	while ((c = getc(src)) != EOF) {
2563 		if ((putc(c, dst)) == EOF)
2564 			err(1, "error writing to %s", to);
2565 	}
2566 
2567 	if (ferror(src))
2568 		err(1, "error reading from %s", from);
2569 	if ((fclose(src)) != 0)
2570 		err(1, "can't fclose %s", to);
2571 	if ((fclose(dst)) != 0)
2572 		err(1, "can't fclose %s", from);
2573 }
2574 
2575 /* create one or more directory components of a path */
2576 static void
2577 createdir(const struct conf_entry *ent, char *dirpart)
2578 {
2579 	int res;
2580 	char *s, *d;
2581 	char mkdirpath[MAXPATHLEN];
2582 	struct stat st;
2583 
2584 	s = dirpart;
2585 	d = mkdirpath;
2586 
2587 	for (;;) {
2588 		*d++ = *s++;
2589 		if (*s != '/' && *s != '\0')
2590 			continue;
2591 		*d = '\0';
2592 		res = lstat(mkdirpath, &st);
2593 		if (res != 0) {
2594 			if (noaction) {
2595 				printf("\tmkdir %s\n", mkdirpath);
2596 			} else {
2597 				res = mkdir(mkdirpath, 0755);
2598 				if (res != 0)
2599 					err(1, "Error on mkdir(\"%s\") for -a",
2600 					    mkdirpath);
2601 			}
2602 		}
2603 		if (*s == '\0')
2604 			break;
2605 	}
2606 	if (verbose) {
2607 		if (ent->firstcreate)
2608 			printf("Created directory '%s' for new %s\n",
2609 			    dirpart, ent->log);
2610 		else
2611 			printf("Created directory '%s' for -a\n", dirpart);
2612 	}
2613 }
2614 
2615 /*
2616  * Create a new log file, destroying any currently-existing version
2617  * of the log file in the process.  If the caller wants a backup copy
2618  * of the file to exist, they should call 'link(logfile,logbackup)'
2619  * before calling this routine.
2620  */
2621 void
2622 createlog(const struct conf_entry *ent)
2623 {
2624 	int fd, failed;
2625 	struct stat st;
2626 	char *realfile, *slash, tempfile[MAXPATHLEN];
2627 
2628 	fd = -1;
2629 	realfile = ent->log;
2630 
2631 	/*
2632 	 * If this log file is being created for the first time (-C option),
2633 	 * then it may also be true that the parent directory does not exist
2634 	 * yet.  Check, and create that directory if it is missing.
2635 	 */
2636 	if (ent->firstcreate) {
2637 		strlcpy(tempfile, realfile, sizeof(tempfile));
2638 		slash = strrchr(tempfile, '/');
2639 		if (slash != NULL) {
2640 			*slash = '\0';
2641 			failed = stat(tempfile, &st);
2642 			if (failed && errno != ENOENT)
2643 				err(1, "Error on stat(%s)", tempfile);
2644 			if (failed)
2645 				createdir(ent, tempfile);
2646 			else if (!S_ISDIR(st.st_mode))
2647 				errx(1, "%s exists but is not a directory",
2648 				    tempfile);
2649 		}
2650 	}
2651 
2652 	/*
2653 	 * First create an unused filename, so it can be chown'ed and
2654 	 * chmod'ed before it is moved into the real location.  mkstemp
2655 	 * will create the file mode=600 & owned by us.  Note that all
2656 	 * temp files will have a suffix of '.z<something>'.
2657 	 */
2658 	strlcpy(tempfile, realfile, sizeof(tempfile));
2659 	strlcat(tempfile, ".zXXXXXX", sizeof(tempfile));
2660 	if (noaction)
2661 		printf("\tmktemp %s\n", tempfile);
2662 	else {
2663 		fd = mkstemp(tempfile);
2664 		if (fd < 0)
2665 			err(1, "can't mkstemp logfile %s", tempfile);
2666 
2667 		/*
2668 		 * Add status message to what will become the new log file.
2669 		 */
2670 		if (!(ent->flags & CE_BINARY)) {
2671 			if (log_trim(tempfile, ent))
2672 				err(1, "can't add status message to log");
2673 		}
2674 	}
2675 
2676 	/* Change the owner/group, if we are supposed to */
2677 	if (ent->uid != (uid_t)-1 || ent->gid != (gid_t)-1) {
2678 		if (noaction)
2679 			printf("\tchown %u:%u %s\n", ent->uid, ent->gid,
2680 			    tempfile);
2681 		else {
2682 			failed = fchown(fd, ent->uid, ent->gid);
2683 			if (failed)
2684 				err(1, "can't fchown temp file %s", tempfile);
2685 		}
2686 	}
2687 
2688 	/* Turn on NODUMP if it was requested in the config-file. */
2689 	if (ent->flags & CE_NODUMP) {
2690 		if (noaction)
2691 			printf("\tchflags nodump %s\n", tempfile);
2692 		else {
2693 			failed = fchflags(fd, UF_NODUMP);
2694 			if (failed) {
2695 				warn("log_trim: fchflags(NODUMP)");
2696 			}
2697 		}
2698 	}
2699 
2700 	/*
2701 	 * Note that if the real logfile still exists, and if the call
2702 	 * to rename() fails, then "neither the old file nor the new
2703 	 * file shall be changed or created" (to quote the standard).
2704 	 * If the call succeeds, then the file will be replaced without
2705 	 * any window where some other process might find that the file
2706 	 * did not exist.
2707 	 * XXX - ? It may be that for some error conditions, we could
2708 	 *	retry by first removing the realfile and then renaming.
2709 	 */
2710 	if (noaction) {
2711 		printf("\tchmod %o %s\n", ent->permissions, tempfile);
2712 		printf("\tmv %s %s\n", tempfile, realfile);
2713 	} else {
2714 		failed = fchmod(fd, ent->permissions);
2715 		if (failed)
2716 			err(1, "can't fchmod temp file '%s'", tempfile);
2717 		failed = rename(tempfile, realfile);
2718 		if (failed)
2719 			err(1, "can't mv %s to %s", tempfile, realfile);
2720 	}
2721 
2722 	if (fd >= 0)
2723 		close(fd);
2724 }
2725 
2726 /*
2727  * Change the attributes of a given filename to what was specified in
2728  * the newsyslog.conf entry.  This routine is only called for files
2729  * that newsyslog expects that it has created, and thus it is a fatal
2730  * error if this routine finds that the file does not exist.
2731  */
2732 static void
2733 change_attrs(const char *fname, const struct conf_entry *ent)
2734 {
2735 	int failed;
2736 
2737 	if (noaction) {
2738 		printf("\tchmod %o %s\n", ent->permissions, fname);
2739 
2740 		if (ent->uid != (uid_t)-1 || ent->gid != (gid_t)-1)
2741 			printf("\tchown %u:%u %s\n",
2742 			    ent->uid, ent->gid, fname);
2743 
2744 		if (ent->flags & CE_NODUMP)
2745 			printf("\tchflags nodump %s\n", fname);
2746 		return;
2747 	}
2748 
2749 	failed = chmod(fname, ent->permissions);
2750 	if (failed) {
2751 		if (errno != EPERM)
2752 			err(1, "chmod(%s) in change_attrs", fname);
2753 		warn("change_attrs couldn't chmod(%s)", fname);
2754 	}
2755 
2756 	if (ent->uid != (uid_t)-1 || ent->gid != (gid_t)-1) {
2757 		failed = chown(fname, ent->uid, ent->gid);
2758 		if (failed)
2759 			warn("can't chown %s", fname);
2760 	}
2761 
2762 	if (ent->flags & CE_NODUMP) {
2763 		failed = chflags(fname, UF_NODUMP);
2764 		if (failed)
2765 			warn("can't chflags %s NODUMP", fname);
2766 	}
2767 }
2768 
2769 /*
2770  * Parse a signal number or signal name. Returns the signal number parsed or -1
2771  * on failure.
2772  */
2773 static int
2774 parse_signal(const char *str)
2775 {
2776 	int sig, i;
2777 	const char *errstr;
2778 
2779 	sig = strtonum(str, 1, sys_nsig - 1, &errstr);
2780 
2781 	if (errstr == NULL)
2782 		return (sig);
2783 	if (strncasecmp(str, "SIG", 3) == 0)
2784 		str += 3;
2785 
2786 	for (i = 1; i < sys_nsig; i++) {
2787 		if (strcasecmp(str, sys_signame[i]) == 0)
2788 			return (i);
2789 	}
2790 
2791 	return (-1);
2792 }
2793