xref: /titanic_41/usr/src/cmd/cron/at.c (revision 6a1af1a67532df169a657cce07140be64bdea084)
1 /*
2  * CDDL HEADER START
3  *
4  * The contents of this file are subject to the terms of the
5  * Common Development and Distribution License (the "License").
6  * You may not use this file except in compliance with the License.
7  *
8  * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
9  * or http://www.opensolaris.org/os/licensing.
10  * See the License for the specific language governing permissions
11  * and limitations under the License.
12  *
13  * When distributing Covered Code, include this CDDL HEADER in each
14  * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
15  * If applicable, add the following below this CDDL HEADER, with the
16  * fields enclosed by brackets "[]" replaced with your own identifying
17  * information: Portions Copyright [yyyy] [name of copyright owner]
18  *
19  * CDDL HEADER END
20  */
21 
22 /*
23  * Copyright 2009 Sun Microsystems, Inc.  All rights reserved.
24  * Use is subject to license terms.
25  */
26 
27 /*	Copyright (c) 1984, 1986, 1987, 1988, 1989 AT&T	*/
28 /*	  All Rights Reserved  	*/
29 
30 #include <sys/resource.h>
31 #include <sys/stat.h>
32 #include <sys/types.h>
33 
34 #include <dirent.h>
35 #include <string.h>
36 #include <stdlib.h>
37 #include <fcntl.h>
38 #include <pwd.h>
39 #include <stdio.h>
40 #include <ctype.h>
41 #include <time.h>
42 #include <signal.h>
43 #include <errno.h>
44 #include <limits.h>
45 #include <ulimit.h>
46 #include <unistd.h>
47 #include <locale.h>
48 #include <libintl.h>
49 #include <tzfile.h>
50 #include <project.h>
51 #include <paths.h>
52 
53 #include "cron.h"
54 
55 #define	TMPFILE		"_at" /* prefix for temporary files	*/
56 /*
57  * Mode for creating files in ATDIR.
58  * Setuid bit on so that if an owner of a file gives that file
59  * away to someone else, the setuid bit will no longer be set.
60  * If this happens, atrun will not execute the file
61  */
62 #define	ATMODE		(S_ISUID | S_IRUSR | S_IRGRP | S_IROTH)
63 #define	ROOT		0	/* user-id of super-user */
64 #define	MAXTRYS		100	/* max trys to create at job file */
65 
66 #define	BADTIME		"bad time specification"
67 #define	BADQUEUE	"queue name must be a single character a-z"
68 #define	NOTCQUEUE	"queue c is reserved for cron entries"
69 #define	BADSHELL	"because your login shell isn't /usr/bin/sh,"\
70 			"you can't use at"
71 #define	WARNSHELL	"commands will be executed using %s\n"
72 #define	CANTCD		"can't change directory to the at directory"
73 #define	CANTCHOWN	"can't change the owner of your job to you"
74 #define	CANTCREATE	"can't create a job for you"
75 #define	INVALIDUSER	"you are not a valid user (no entry in /etc/passwd)"
76 #define	NOOPENDIR	"can't open the at directory"
77 #define	NOTALLOWED	"you are not authorized to use at.  Sorry."
78 #define	USAGE\
79 	"usage: at [-c|-k|-s] [-m] [-f file] [-p project] [-q queuename] "\
80 	    "-t time\n"\
81 	"       at [-c|-k|-s] [-m] [-f file] [-p project] [-q queuename] "\
82 	    "timespec\n"\
83 	"       at -l [-p project] [-q queuename] [at_job_id...]\n"\
84 	"       at -r at_job_id ...\n"
85 
86 #define	FORMAT		"%a %b %e %H:%M:%S %Y"
87 
88 /* Macros used in format for fscanf */
89 #define	AQ(x)		#x
90 #define	BUFFMT(p)		AQ(p)
91 
92 static int leap(int);
93 static int atoi_for2(char *);
94 static int check_queue(char *, int);
95 static int list_jobs(int, char **, int, int);
96 static int remove_jobs(int, char **, char *);
97 static void usage(void);
98 static void catch(int);
99 static void copy(char *, FILE *, int);
100 static void atime(struct tm *, struct tm *);
101 static int not_this_project(char *);
102 static char *mkjobname(time_t);
103 static time_t parse_time(char *);
104 static time_t gtime(struct tm *);
105 void atabort(char *)__NORETURN;
106 void yyerror(void);
107 extern int yyparse(void);
108 
109 extern void	audit_at_delete(char *, char *, int);
110 extern int	audit_at_create(char *, int);
111 extern int	audit_cron_is_anc_name(char *);
112 extern int	audit_cron_delete_anc_file(char *, char *);
113 
114 /*
115  * Error in getdate(3G)
116  */
117 static char 	*errlist[] = {
118 /* 0 */ 	"",
119 /* 1 */	"getdate: The DATEMSK environment variable is not set",
120 /* 2 */	"getdate: Error on \"open\" of the template file",
121 /* 3 */	"getdate: Error on \"stat\" of the template file",
122 /* 4 */	"getdate: The template file is not a regular file",
123 /* 5 */	"getdate: An error is encountered while reading the template",
124 /* 6 */	"getdate: Malloc(3C) failed",
125 /* 7 */	"getdate: There is no line in the template that matches the input",
126 /* 8 */	"getdate: Invalid input specification"
127 };
128 
129 int		gmtflag = 0;
130 int		mday[12] = {31, 29, 31, 30, 31, 30, 31, 31, 30, 31, 30, 31};
131 uid_t		user;
132 struct	tm	*tp, at, rt;
133 static int	cshflag		= 0;
134 static int	kshflag		= 0;
135 static int	shflag		= 0;
136 static int	mflag		= 0;
137 static int	pflag		= 0;
138 static char	*Shell;
139 static char	*tfname;
140 static char	pname[80];
141 static char	pname1[80];
142 static short	jobtype = ATEVENT;	/* set to 1 if batch job */
143 extern char	*argp;
144 extern int	per_errno;
145 static projid_t	project;
146 
147 int
148 main(int argc, char **argv)
149 {
150 	FILE		*inputfile;
151 	int		i, fd;
152 	int		try = 0;
153 	int		fflag = 0;
154 	int		lflag = 0;
155 	int		qflag = 0;
156 	int		rflag = 0;
157 	int		tflag = 0;
158 	int		c;
159 	int		tflen;
160 	char		*file;
161 	char		*login;
162 	char		*job;
163 	char		*jobfile = NULL; /* file containing job to be run */
164 	char		argpbuf[LINE_MAX], timebuf[80];
165 	time_t		now;
166 	time_t		when = 0;
167 	struct	tm	*ct;
168 	char		*proj;
169 	struct project	prj, *pprj;
170 	char		mybuf[PROJECT_BUFSZ];
171 	char		ipbuf[PROJECT_BUFSZ];
172 
173 	(void) setlocale(LC_ALL, "");
174 #if !defined(TEXT_DOMAIN)	/* Should be defined by cc -D */
175 #define	TEXT_DOMAIN "SYS_TEST"	/* Use this only if it weren't */
176 #endif
177 	(void) textdomain(TEXT_DOMAIN);
178 
179 	user = getuid();
180 	login = getuser(user);
181 	if (login == NULL) {
182 		if (per_errno == 2)
183 			atabort(BADSHELL);
184 		else
185 			atabort(INVALIDUSER);
186 	}
187 
188 	if (!allowed(login, ATALLOW, ATDENY))
189 		atabort(NOTALLOWED);
190 
191 	while ((c = getopt(argc, argv, "cklmsrf:p:q:t:")) != EOF)
192 		switch (c) {
193 			case 'c':
194 				cshflag++;
195 				break;
196 			case 'f':
197 				fflag++;
198 				jobfile = optarg;
199 				break;
200 			case 'k':
201 				kshflag++;
202 				break;
203 			case 'l':
204 				lflag++;
205 				break;
206 			case 'm':
207 				mflag++;
208 				break;
209 			case 'p':
210 				proj = optarg;
211 				pprj = &prj;
212 				if ((pprj = getprojbyname(proj, pprj,
213 				    (void *)&mybuf, sizeof (mybuf))) != NULL) {
214 					project = pprj->pj_projid;
215 					if (inproj(login, pprj->pj_name,
216 					    (void *)&ipbuf, sizeof (ipbuf)))
217 						pflag++;
218 					else {
219 						(void) fprintf(stderr,
220 						    gettext("at: user %s is "
221 						    "not a member of "
222 						    "project %s (%d)\n"),
223 						    login, pprj->pj_name,
224 						    project);
225 						exit(2);
226 					}
227 					break;
228 				}
229 				pprj = &prj;
230 				if (isdigit(proj[0]) &&
231 				    (pprj = getprojbyid(atoi(proj), pprj,
232 				    (void *)&mybuf, sizeof (mybuf))) != NULL) {
233 					project = pprj->pj_projid;
234 					if (inproj(login, pprj->pj_name,
235 					    (void *)&ipbuf, sizeof (ipbuf)))
236 						pflag++;
237 					else {
238 						(void) fprintf(stderr,
239 						    gettext("at: user %s is "
240 						    "not a member of "
241 						    "project %s (%d)\n"),
242 						    login, pprj->pj_name,
243 						    project);
244 						exit(2);
245 					}
246 					break;
247 				}
248 				(void) fprintf(stderr, gettext("at: project "
249 				    "%s not found.\n"), proj);
250 				exit(2);
251 				break;
252 			case 'q':
253 				qflag++;
254 				if (optarg[1] != '\0')
255 					atabort(BADQUEUE);
256 				jobtype = *optarg - 'a';
257 				if ((jobtype < 0) || (jobtype > 25))
258 					atabort(BADQUEUE);
259 				if (jobtype == 2)
260 					atabort(NOTCQUEUE);
261 				break;
262 			case 'r':
263 				rflag++;
264 				break;
265 			case 's':
266 				shflag++;
267 				break;
268 			case 't':
269 				tflag++;
270 				when = parse_time(optarg);
271 				break;
272 			default:
273 				usage();
274 		}
275 
276 	argc -= optind;
277 	argv += optind;
278 
279 	if (lflag + rflag > 1)
280 		usage();
281 
282 	if (lflag) {
283 		if (cshflag || kshflag || shflag || mflag ||
284 		    fflag || tflag || rflag)
285 			usage();
286 		return (list_jobs(argc, argv, qflag, jobtype));
287 	}
288 
289 	if (rflag) {
290 		if (cshflag || kshflag || shflag || mflag ||
291 		    fflag || tflag || qflag)
292 			usage();
293 		return (remove_jobs(argc, argv, login));
294 	}
295 
296 	if ((argc + tflag == 0) && (jobtype != BATCHEVENT))
297 		usage();
298 
299 	if (cshflag + kshflag + shflag > 1)
300 		atabort("ambiguous shell request");
301 
302 	time(&now);
303 
304 	if (jobtype == BATCHEVENT)
305 		when = now;
306 
307 	if (when == 0) { /* figure out what time to run the job */
308 		int	argplen = sizeof (argpbuf) - 1;
309 
310 		argpbuf[0] = '\0';
311 		argp = argpbuf;
312 		i = 0;
313 		while (i < argc) {
314 			/* guard against buffer overflow */
315 			argplen -= strlen(argv[i]) + 1;
316 			if (argplen < 0)
317 				atabort(BADTIME);
318 
319 			strcat(argp, argv[i]);
320 			strcat(argp, " ");
321 			i++;
322 		}
323 		if ((file = getenv("DATEMSK")) == 0 || file[0] == '\0') {
324 			tp = localtime(&now);
325 			/*
326 			 * Fix for 1047182 - we have to let yyparse
327 			 * check bounds on mday[] first, then fixup
328 			 * the leap year case.
329 			 */
330 			yyparse();
331 
332 			mday[1] = 28 + leap(at.tm_year);
333 
334 			if (at.tm_mday > mday[at.tm_mon])
335 				atabort("bad date");
336 
337 			atime(&at, &rt);
338 			when = gtime(&at);
339 			if (!gmtflag) {
340 				when += timezone;
341 				if (localtime(&when)->tm_isdst)
342 					when -= (timezone-altzone);
343 			}
344 		} else {	/*   DATEMSK is set  */
345 			if ((ct = getdate(argpbuf)) == NULL)
346 				atabort(errlist[getdate_err]);
347 			else
348 				when = mktime(ct);
349 		}
350 	}
351 
352 	if (when < now)	/* time has already past */
353 		atabort("too late");
354 
355 	tflen = strlen(ATDIR) + 1 + strlen(TMPFILE) +
356 	    10 + 1; /* 10 for an INT_MAX pid */
357 	tfname = xmalloc(tflen);
358 	snprintf(tfname, tflen, "%s/%s%d", ATDIR, TMPFILE, getpid());
359 
360 	/* catch INT, HUP, TERM and QUIT signals */
361 	if (signal(SIGINT, catch) == SIG_IGN)
362 		signal(SIGINT, SIG_IGN);
363 	if (signal(SIGHUP, catch) == SIG_IGN)
364 		signal(SIGHUP, SIG_IGN);
365 	if (signal(SIGQUIT, catch) == SIG_IGN)
366 		signal(SIGQUIT, SIG_IGN);
367 	if (signal(SIGTERM, catch) == SIG_IGN)
368 		signal(SIGTERM, SIG_IGN);
369 	if ((fd = open(tfname, O_CREAT|O_EXCL|O_WRONLY, ATMODE)) < 0)
370 		atabort(CANTCREATE);
371 	if (chown(tfname, user, getgid()) == -1) {
372 		unlink(tfname);
373 		atabort(CANTCHOWN);
374 	}
375 	close(1);
376 	dup(fd);
377 	close(fd);
378 	sprintf(pname, "%s", PROTO);
379 	sprintf(pname1, "%s.%c", PROTO, 'a'+jobtype);
380 
381 	/*
382 	 * Open the input file with the user's permissions.
383 	 */
384 	if (jobfile != NULL) {
385 		if ((seteuid(user) < 0) ||
386 		    (inputfile = fopen(jobfile, "r")) == NULL) {
387 			unlink(tfname);
388 			fprintf(stderr, "at: %s: %s\n", jobfile, errmsg(errno));
389 			exit(1);
390 		}
391 		else
392 			seteuid(0);
393 	} else
394 		inputfile = stdin;
395 
396 	copy(jobfile, inputfile, when);
397 	while (rename(tfname, job = mkjobname(when)) == -1) {
398 		sleep(1);
399 		if (++try > MAXTRYS / 10) {
400 			unlink(tfname);
401 			atabort(CANTCREATE);
402 		}
403 	}
404 	unlink(tfname);
405 	if (audit_at_create(job, 0))
406 		atabort(CANTCREATE);
407 
408 	cron_sendmsg(ADD, login, strrchr(job, '/')+1, AT);
409 	if (per_errno == 2)
410 		fprintf(stderr, gettext(WARNSHELL), Shell);
411 	cftime(timebuf, FORMAT, &when);
412 	fprintf(stderr, gettext("job %s at %s\n"),
413 	    strrchr(job, '/')+1, timebuf);
414 	if (when - MINUTE < HOUR)
415 		fprintf(stderr, gettext(
416 		    "at: this job may not be executed at the proper time.\n"));
417 	return (0);
418 }
419 
420 
421 static char *
422 mkjobname(t)
423 time_t t;
424 {
425 	int i, fd;
426 	char *name;
427 
428 	name = xmalloc(200);
429 	for (i = 0; i < MAXTRYS; i++) {
430 		sprintf(name, "%s/%ld.%c", ATDIR, t, 'a'+jobtype);
431 		/* fix for 1099183, 1116833 - create file here, avoid race */
432 		if ((fd = open(name, O_CREAT | O_EXCL, ATMODE)) > 0) {
433 			close(fd);
434 			return (name);
435 		}
436 		t += 1;
437 	}
438 	atabort("queue full");
439 	/* NOTREACHED */
440 }
441 
442 
443 static void
444 catch(int x)
445 {
446 	unlink(tfname);
447 	exit(1);
448 }
449 
450 
451 void
452 atabort(msg)
453 char *msg;
454 {
455 	fprintf(stderr, "at: %s\n", gettext(msg));
456 
457 	exit(1);
458 }
459 
460 int
461 yywrap(void)
462 {
463 	return (1);
464 }
465 
466 void
467 yyerror(void)
468 {
469 	atabort(BADTIME);
470 }
471 
472 /*
473  * add time structures logically
474  */
475 static void
476 atime(struct tm *a, struct tm *b)
477 {
478 	if ((a->tm_sec += b->tm_sec) >= 60) {
479 		b->tm_min += a->tm_sec / 60;
480 		a->tm_sec %= 60;
481 	}
482 	if ((a->tm_min += b->tm_min) >= 60) {
483 		b->tm_hour += a->tm_min / 60;
484 		a->tm_min %= 60;
485 	}
486 	if ((a->tm_hour += b->tm_hour) >= 24) {
487 		b->tm_mday += a->tm_hour / 24;
488 		a->tm_hour %= 24;
489 	}
490 	a->tm_year += b->tm_year;
491 	if ((a->tm_mon += b->tm_mon) >= 12) {
492 		a->tm_year += a->tm_mon / 12;
493 		a->tm_mon %= 12;
494 	}
495 	a->tm_mday += b->tm_mday;
496 	mday[1] = 28 + leap(a->tm_year);
497 	while (a->tm_mday > mday[a->tm_mon]) {
498 		a->tm_mday -= mday[a->tm_mon++];
499 		if (a->tm_mon > 11) {
500 			a->tm_mon = 0;
501 			mday[1] = 28 + leap(++a->tm_year);
502 		}
503 	}
504 
505 }
506 
507 static int
508 leap(int year)
509 {
510 	return (isleap(year + TM_YEAR_BASE));
511 }
512 
513 /*
514  * return time from time structure
515  */
516 static time_t
517 gtime(tptr)
518 struct	tm *tptr;
519 {
520 	int i;
521 	long	tv;
522 	int	dmsize[12] =
523 	    {31, 28, 31, 30, 31, 30, 31, 31, 30, 31, 30, 31};
524 
525 
526 	tv = 0;
527 	for (i = 1970; i != tptr->tm_year+TM_YEAR_BASE; i++)
528 		tv += (365 + isleap(i));
529 		/*
530 		 * We call isleap since leap() adds
531 		 * 1900 onto any value passed
532 		 */
533 
534 	if (!leap(tptr->tm_year) && at.tm_mday == 29 && at.tm_mon == 1)
535 		atabort("bad date - not a leap year");
536 
537 	if ((leap(tptr->tm_year)) && tptr->tm_mon >= 2)
538 		++tv;
539 
540 	for (i = 0; i < tptr->tm_mon; ++i)
541 		tv += dmsize[i];
542 	tv += tptr->tm_mday - 1;
543 	tv = 24 * tv + tptr->tm_hour;
544 	tv = 60 * tv + tptr->tm_min;
545 	tv = 60 * tv + tptr->tm_sec;
546 	return (tv);
547 }
548 
549 /*
550  * make job file from proto + stdin
551  */
552 static void
553 copy(char *jobfile, FILE *inputfile, int when)
554 {
555 	int c;
556 	FILE *pfp;
557 	FILE *xfp;
558 	char *shell;
559 	char	dirbuf[PATH_MAX + 1];
560 	char	line[LINE_MAX];
561 	char **ep;
562 	mode_t um;
563 	char *val;
564 	extern char **environ;
565 	int pfd[2];
566 	pid_t pid;
567 	uid_t realusr;
568 	int ttyinput;
569 	int ulimit_flag = 0;
570 	struct rlimit rlp;
571 	struct project prj, *pprj;
572 	char pbuf[PROJECT_BUFSZ];
573 	char pbuf2[PROJECT_BUFSZ];
574 	char *user;
575 
576 	/*
577 	 * Fix for 1099381:
578 	 * If the inputfile is from a tty, then turn on prompting, and
579 	 * put out a prompt now, instead of waiting for a lot of file
580 	 * activity to complete.
581 	 */
582 	ttyinput = isatty(fileno(inputfile));
583 	if (ttyinput) {
584 		fputs("at> ", stderr);
585 		fflush(stderr);
586 	}
587 
588 	/*
589 	 * Fix for 1053807:
590 	 * Determine what shell we should use to run the job. If the user
591 	 * didn't explicitly request that his/her current shell be over-
592 	 * ridden (shflag or cshflag), then we use the current shell.
593 	 */
594 	if (cshflag)
595 		Shell = shell = "/bin/csh";
596 	else if (kshflag) {
597 		Shell = shell = "/bin/ksh";
598 		ulimit_flag = 1;
599 	} else if (shflag) {
600 		Shell = shell = "/bin/sh";
601 		ulimit_flag = 1;
602 	} else if (((Shell = val = getenv("SHELL")) != NULL) &&
603 	    (*val != '\0')) {
604 		shell = "$SHELL";
605 		if ((strstr(val, "/sh") != NULL) ||
606 		    (strstr(val, "/ksh") != NULL))
607 			ulimit_flag = 1;
608 	} else {
609 		/* SHELL is NULL or unset, therefore use default */
610 		Shell = shell = _PATH_BSHELL;
611 		ulimit_flag = 1;
612 	}
613 
614 	printf(": %s job\n", jobtype ? "batch" : "at");
615 	printf(": jobname: %.127s\n", (jobfile == NULL) ? "stdin" : jobfile);
616 	printf(": notify by mail: %s\n", (mflag) ? "yes" : "no");
617 
618 	if (pflag) {
619 		(void) printf(": project: %d\n", project);
620 	} else {
621 		/*
622 		 * Check if current user is a member of current project.
623 		 * This check is done here to avoid setproject() failure
624 		 * later when the job gets executed.  If current user does
625 		 * not belong to current project, user's default project
626 		 * will be used instead.  This is achieved by not specifying
627 		 * the project (": project: <project>\n") in the job file.
628 		 */
629 		if ((user = getuser(getuid())) == NULL)
630 			atabort(INVALIDUSER);
631 		project = getprojid();
632 		pprj = getprojbyid(project, &prj, pbuf, sizeof (pbuf));
633 		if (pprj != NULL) {
634 			if (inproj(user, pprj->pj_name, pbuf2, sizeof (pbuf2)))
635 				(void) printf(": project: %d\n", project);
636 		}
637 	}
638 
639 	for (ep = environ; *ep; ep++) {
640 		if (strchr(*ep, '\'') != NULL)
641 			continue;
642 		if ((val = strchr(*ep, '=')) == NULL)
643 			continue;
644 		*val++ = '\0';
645 		printf("export %s; %s='%s'\n", *ep, *ep, val);
646 		*--val = '=';
647 	}
648 	if ((pfp = fopen(pname1, "r")) == NULL &&
649 	    (pfp = fopen(pname, "r")) == NULL)
650 		atabort("no prototype");
651 	/*
652 	 * Put in a line to run the proper shell using the rest of
653 	 * the file as input.  Note that 'exec'ing the shell will
654 	 * cause sh() to leave a /tmp/sh### file around. (1053807)
655 	 */
656 	printf("%s << '...the rest of this file is shell input'\n", shell);
657 
658 	um = umask(0);
659 	while ((c = getc(pfp)) != EOF) {
660 		if (c != '$')
661 			putchar(c);
662 		else switch (c =  getc(pfp)) {
663 		case EOF:
664 			goto out;
665 		case 'd':
666 			/*
667 			 * fork off a child with submitter's permissions,
668 			 * otherwise, when IFS=/, /usr/bin/pwd would be parsed
669 			 * by the shell as file "bin".  The shell would
670 			 * then search according to the submitter's PATH
671 			 * and run the file bin with root permission
672 			 */
673 
674 			(void) fflush(stdout);
675 			dirbuf[0] = NULL;
676 			if (pipe(pfd) != 0)
677 				atabort("pipe open failed");
678 			realusr = getuid(); /* get realusr before the fork */
679 			if ((pid = fork()) == (pid_t)-1)
680 				atabort("fork failed");
681 			if (pid == 0) {			/* child process */
682 				(void) close(pfd[0]);
683 				/* remove setuid for pwd */
684 				(void) setuid(realusr);
685 				if ((xfp = popen("/usr/bin/pwd", "r"))
686 				    != NULL) {
687 					fscanf(xfp, "%" BUFFMT(PATH_MAX) "s",
688 					    dirbuf);
689 					(void) pclose(xfp);
690 					xfp = fdopen(pfd[1], "w");
691 					fprintf(xfp, "%s", dirbuf);
692 					(void) fclose(xfp);
693 				}
694 				_exit(0);
695 			}
696 			(void) close(pfd[1]);		/* parent process */
697 			xfp = fdopen(pfd[0], "r");
698 			fscanf(xfp, "%" BUFFMT(PATH_MAX) "s", dirbuf);
699 			printf("%s", dirbuf);
700 			(void) fclose(xfp);
701 			break;
702 		case 'm':
703 			printf("%o", um);
704 			break;
705 		case '<':
706 			if (ulimit_flag) {
707 				if (getrlimit(RLIMIT_FSIZE, &rlp) == 0) {
708 					if (rlp.rlim_cur == RLIM_INFINITY)
709 						printf("ulimit unlimited\n");
710 					else
711 						printf("ulimit %lld\n",
712 						    rlp.rlim_cur / 512);
713 				}
714 			}
715 			/*
716 			 * fix for 1113572 - use fputs() so that a
717 			 * newline isn't appended to the one returned
718 			 * with fgets(); 1099381 - prompt for input.
719 			 */
720 			while (fgets(line, LINE_MAX, inputfile) != NULL) {
721 				fputs(line, stdout);
722 				if (ttyinput)
723 					fputs("at> ", stderr);
724 			}
725 			if (ttyinput) /* clean up the final output */
726 				fputs("<EOT>\n", stderr);
727 			break;
728 		case 't':
729 			printf(":%lu", when);
730 			break;
731 		default:
732 			putchar(c);
733 		}
734 	}
735 out:
736 	fclose(pfp);
737 	fflush(NULL);
738 }
739 
740 static int
741 remove_jobs(int argc, char **argv, char *login)
742 /* remove jobs that are specified */
743 {
744 	int		i, r;
745 	int		error = 0;
746 	struct stat	buf;
747 	struct passwd *pw;
748 
749 	pw = getpwuid(user);
750 	if (pw == NULL) {
751 		atabort("Invalid user.\n");
752 	}
753 
754 	if (argc == 0)
755 		usage();
756 	if (chdir(ATDIR) == -1)
757 		atabort(CANTCD);
758 	for (i = 0; i < argc; i++)
759 		if (strchr(argv[i], '/') != NULL) {
760 			fprintf(stderr, "at: %s: not a valid job-id\n",
761 					argv[i]);
762 		} else if (stat(argv[i], &buf)) {
763 			fprintf(stderr, "at: %s: ", argv[i]);
764 			perror("");
765 		} else if ((user != buf.st_uid) &&
766 		    (!cron_admin(pw->pw_name))) {
767 			fprintf(stderr, "at: you don't own %s\n",
768 			    argv[i]);
769 			error = 1;
770 		} else {
771 			if (cron_admin(pw->pw_name)) {
772 				login = getuser((uid_t)buf.st_uid);
773 				if (login == NULL) {
774 					if (per_errno == 2)
775 						atabort(BADSHELL);
776 					else
777 						atabort(INVALIDUSER);
778 					}
779 			}
780 			cron_sendmsg(DELETE, login, argv[i], AT);
781 			r = unlink(argv[i]);
782 			audit_at_delete(argv[i], ATDIR, r);
783 		}
784 	return (error);
785 }
786 
787 
788 
789 static int
790 list_jobs(int argc, char **argv, int qflag, int queue)
791 {
792 	DIR		*dir;
793 	int		i;
794 	int		error = 0;
795 	char		*patdir, *atdir, *ptr;
796 	char		timebuf[80];
797 	time_t		t;
798 	struct stat	buf, st1, st2;
799 	struct dirent	*dentry;
800 	struct passwd	*pw;
801 	unsigned int	atdirlen;
802 	int r;
803 	struct passwd	*pwd, pwds;
804 	char buf_pwd[1024];
805 	char job_file[PATH_MAX];
806 
807 	pwd = getpwuid_r(user, &pwds, buf_pwd, sizeof (buf_pwd));
808 	if (pwd == NULL) {
809 		atabort("Invalid user.\n");
810 	}
811 
812 	/* list jobs for user */
813 	if (chdir(ATDIR) == -1)
814 		atabort(CANTCD);
815 
816 	atdirlen = strlen(ATDIR);
817 	atdir = xmalloc(atdirlen + 1);
818 	strcpy(atdir, ATDIR);
819 	patdir = strrchr(atdir, '/');
820 	*patdir = '\0';
821 	if (argc == 0) {
822 		/* list all jobs for a user */
823 		if (stat(ATDIR, &st1) != 0 || stat(atdir, &st2) != 0)
824 			atabort("Can not get status of spooling"
825 			    "directory for at");
826 		if ((dir = opendir(ATDIR)) == NULL)
827 			atabort(NOOPENDIR);
828 		while (1) {
829 			if ((dentry = readdir(dir)) == NULL)
830 				break;
831 			if ((dentry->d_ino == st1.st_ino) ||
832 			    (dentry->d_ino == st2.st_ino))
833 				continue;
834 			if ((r = audit_cron_is_anc_name(dentry->d_name)) == 1)
835 				continue;
836 			if (stat(dentry->d_name, &buf)) {
837 				unlink(dentry->d_name);
838 				audit_cron_delete_anc_file(dentry->d_name,
839 				    NULL);
840 				continue;
841 			}
842 			if ((!cron_admin(pwd->pw_name)) &&
843 			    (buf.st_uid != user))
844 				continue;
845 			ptr = dentry->d_name;
846 			if (((t = num(&ptr)) == 0) || (*ptr != '.'))
847 				continue;
848 			strcpy(job_file, patdir);
849 			strcat(job_file, dentry->d_name);
850 			if (pflag && not_this_project(job_file))
851 				continue;
852 			ascftime(timebuf, FORMAT, localtime(&t));
853 			if ((cron_admin(pwd->pw_name)) &&
854 			    ((pw = getpwuid(buf.st_uid)) != NULL)) {
855 				if (!qflag || (qflag &&
856 				    check_queue(ptr, queue)))
857 					printf("user = %s\t%s\t%s\n",
858 					    pw->pw_name, dentry->d_name,
859 					    timebuf);
860 			} else
861 				if (!qflag || (qflag &&
862 				    check_queue(ptr, queue)))
863 					printf("%s\t%s\n",
864 					    dentry->d_name, timebuf);
865 		}
866 		(void) closedir(dir);
867 	} else	/* list particular jobs for user */
868 		for (i = 0; i < argc; i++) {
869 			ptr = argv[i];
870 			strlcpy(job_file, patdir, PATH_MAX);
871 			strlcat(job_file, ptr, PATH_MAX);
872 			if (((t = num(&ptr)) == 0) || (*ptr != '.')) {
873 				fprintf(stderr, gettext(
874 				    "at: invalid job name %s\n"), argv[i]);
875 				error = 1;
876 			} else if (stat(argv[i], &buf)) {
877 				fprintf(stderr, "at: %s: ", argv[i]);
878 				perror("");
879 				error = 1;
880 			} else if ((user != buf.st_uid) &&
881 			    (!cron_admin(pwd->pw_name))) {
882 				fprintf(stderr, gettext(
883 				    "at: you don't own %s\n"), argv[i]);
884 				error = 1;
885 			} else if (pflag && not_this_project(job_file)) {
886 				continue;
887 			} else {
888 				if (!qflag || (qflag &&
889 				    check_queue(ptr, queue))) {
890 					ascftime(timebuf, FORMAT,
891 					    localtime(&t));
892 					printf("%s\t%s\n", argv[i], timebuf);
893 				}
894 			}
895 		}
896 	return (error);
897 }
898 
899 /*
900  * open the command file and read the project id line
901  * compare to the project number provided via -p on the command line
902  * return 0 if they match, 1 if they don't match or an error occurs.
903  */
904 #define	SKIPCOUNT 3	/* lines to skip to get to project line in file */
905 
906 static int
907 not_this_project(char *filename)
908 {
909 	FILE *fp;
910 	projid_t sproj;
911 	int i;
912 
913 	if ((fp = fopen(filename, "r")) == NULL)
914 		return (1);
915 
916 	for (i = 0; i < SKIPCOUNT; i++)
917 		fscanf(fp, "%*[^\n]\n");
918 
919 	fscanf(fp, ": project: %d\n", &sproj);
920 	fclose(fp);
921 
922 	return (sproj == project ? 0 : 1);
923 }
924 
925 static int
926 check_queue(char *name, int queue)
927 {
928 	if ((name[strlen(name) - 1] - 'a') == queue)
929 		return (1);
930 	else
931 		return (0);
932 }
933 
934 static time_t
935 parse_time(char *t)
936 {
937 	int		century = 0;
938 	int		seconds = 0;
939 	char		*p;
940 	time_t		when	= 0;
941 	struct tm	tm;
942 
943 	/*
944 	 * time in the following format (defined by the touch(1) spec):
945 	 *	[[CC]YY]MMDDhhmm[.SS]
946 	 */
947 	if ((p = strchr(t, '.')) != NULL) {
948 		if (strchr(p+1, '.') != NULL)
949 			atabort(BADTIME);
950 		seconds = atoi_for2(p+1);
951 		*p = '\0';
952 	}
953 
954 	memset(&tm, 0, sizeof (struct tm));
955 	when = time(0);
956 	tm.tm_year = localtime(&when)->tm_year;
957 
958 	switch (strlen(t)) {
959 		case 12:	/* CCYYMMDDhhmm */
960 			century = atoi_for2(t);
961 			t += 2;
962 		case 10:	/* YYMMDDhhmm */
963 			tm.tm_year = atoi_for2(t);
964 			t += 2;
965 			if (century == 0) {
966 				if (tm.tm_year < 69)
967 					tm.tm_year += 100;
968 			} else
969 				tm.tm_year += (century - 19) * 100;
970 		case 8:		/* MMDDhhmm */
971 			tm.tm_mon = atoi_for2(t) - 1;
972 			t += 2;
973 			tm.tm_mday = atoi_for2(t);
974 			t += 2;
975 			tm.tm_hour = atoi_for2(t);
976 			t += 2;
977 			tm.tm_min = atoi_for2(t);
978 			t += 2;
979 			tm.tm_sec = seconds;
980 			break;
981 		default:
982 			atabort(BADTIME);
983 	}
984 
985 	if ((when = mktime(&tm)) == -1)
986 		atabort(BADTIME);
987 	if (tm.tm_isdst)
988 		when -= (timezone-altzone);
989 	return (when);
990 }
991 
992 static int
993 atoi_for2(char *p) {
994 	int value;
995 
996 	value = (*p - '0') * 10 + *(p+1) - '0';
997 	if ((value < 0) || (value > 99))
998 		atabort(BADTIME);
999 	return (value);
1000 }
1001 
1002 static void
1003 usage(void)
1004 {
1005 	fprintf(stderr, USAGE);
1006 	exit(1);
1007 }
1008