2 * Copyright (c) 1983, 1989, 1993
3 * The Regents of the University of California. All rights reserved.
4 * (c) UNIX System Laboratories, Inc.
5 * All or some portions of this file are derived from material licensed
6 * to the University of California by American Telephone and Telegraph
7 * Co. or Unix System Laboratories, Inc. and are reproduced herein with
8 * the permission of UNIX System Laboratories, Inc.
11 * Redistribution and use in source and binary forms, with or without
12 * modification, are permitted provided that the following conditions
14 * 1. Redistributions of source code must retain the above copyright
15 * notice, this list of conditions and the following disclaimer.
16 * 2. Redistributions in binary form must reproduce the above copyright
17 * notice, this list of conditions and the following disclaimer in the
18 * documentation and/or other materials provided with the distribution.
19 * 3. All advertising materials mentioning features or use of this software
20 * must display the following acknowledgement:
21 * This product includes software developed by the University of
22 * California, Berkeley and its contributors.
23 * 4. Neither the name of the University nor the names of its contributors
24 * may be used to endorse or promote products derived from this software
25 * without specific prior written permission.
27 * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
28 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
29 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
30 * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
31 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
32 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
33 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
34 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
35 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
36 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
39 * @(#) Copyright (c) 1983, 1989, 1993 The Regents of the University of California. All rights reserved.
40 * @(#)from: lpr.c 8.4 (Berkeley) 4/28/95
41 * $FreeBSD: src/usr.sbin/lpr/lpr/lpr.c,v 1.32.2.11 2002/04/28 23:40:23 gad Exp $
42 * $DragonFly: src/usr.sbin/lpr/lpr/lpr.c,v 1.4 2004/12/18 22:48:03 swildner Exp $
46 * lpr -- off line print
48 * Allows multiple printers and printers on remote machines by
49 * using information from a printer data base.
52 #include <sys/param.h>
55 #include <netinet/in.h> /* N_BADMAG uses ntohl() */
73 #include "pathnames.h"
75 static char *cfname; /* daemon control files, linked from tf's */
76 static char *class = local_host; /* class title on header page */
77 static char *dfname; /* data files */
78 static char *fonts[4]; /* troff font names */
79 static char format = 'f'; /* format char for printing files */
80 static int hdr = 1; /* print header or not (default is yes) */
81 static int iflag; /* indentation wanted */
82 static int inchar; /* location to increment char in file names */
83 static int indent; /* amount to indent */
84 static const char *jobname; /* job name on header page */
85 static int mailflg; /* send mail */
86 static int nact; /* number of jobs to act on */
87 static int ncopies = 1; /* # of copies to make */
88 static char *lpr_username; /* person sending the print job(s) */
89 static int qflag; /* q job, but don't exec daemon */
90 static int rflag; /* remove files upon completion */
91 static int sflag; /* symbolic link flag */
92 static int tfd; /* control file descriptor */
93 static char *tfname; /* tmp copy of cf before linking */
94 static char *title; /* pr'ing title */
95 static char *locale; /* pr'ing locale */
96 static int userid; /* user id */
97 static char *Uflag; /* user name specified with -U flag */
98 static char *width; /* width for versatec printing */
99 static char *Zflag; /* extra filter options for LPRng servers */
101 static struct stat statb;
103 static void card(int _c, const char *_p2);
104 static int checkwriteperm(const char *_file, const char *_directory);
105 static void chkprinter(const char *_ptrname, struct printer *_pp);
106 static void cleanup(int _signo);
107 static void copy(const struct printer *_pp, int _f, const char _n[]);
108 static char *itoa(int _i);
109 static const char *linked(const char *_file);
110 int main(int _argc, char *_argv[]);
111 static char *lmktemp(const struct printer *_pp, const char *_id,
113 static void mktemps(const struct printer *_pp);
114 static int nfile(char *_n);
115 static int test(const char *_file);
116 static void usage(void);
121 main(int argc, char *argv[])
125 const char *arg, *cp, *printer;
131 struct stat statb1, statb2;
132 struct printer myprinter, *pp = &myprinter;
138 if (signal(SIGHUP, SIG_IGN) != SIG_IGN)
139 signal(SIGHUP, cleanup);
140 if (signal(SIGINT, SIG_IGN) != SIG_IGN)
141 signal(SIGINT, cleanup);
142 if (signal(SIGQUIT, SIG_IGN) != SIG_IGN)
143 signal(SIGQUIT, cleanup);
144 if (signal(SIGTERM, SIG_IGN) != SIG_IGN)
145 signal(SIGTERM, cleanup);
148 gethostname(local_host, sizeof(local_host));
149 openlog("lpd", 0, LOG_LPR);
152 while ((c = getopt(argc, argv,
153 ":#:1:2:3:4:C:J:L:P:T:U:Z:cdfghi:lnmprstvw:"))
156 case '#': /* n copies */
157 i = strtol(optarg, &p, 10);
159 errx(1, "Bad argument to -#, number expected");
164 case '1': /* troff fonts */
168 fonts[optopt - '1'] = optarg;
171 case 'C': /* classification spec */
176 case 'J': /* job name */
181 case 'P': /* specifiy printer name */
185 case 'L': /* pr's locale */
189 case 'T': /* pr's title line */
193 case 'U': /* user name */
202 case 'c': /* print cifplot output */
203 case 'd': /* print tex output (dvi files) */
204 case 'g': /* print graph(1G) output */
205 case 'l': /* literal output */
206 case 'n': /* print ditroff output */
207 case 't': /* print troff output (cat files) */
208 case 'p': /* print using ``pr'' */
209 case 'v': /* print vplot output */
213 case 'f': /* print fortran output */
217 case 'h': /* nulifiy header page */
221 case 'i': /* indent output */
223 indent = strtol(optarg, &p, 10);
225 errx(1, "Bad argument to -i, number expected");
228 case 'm': /* send mail when done */
232 case 'q': /* just queue job */
236 case 'r': /* remove file when done */
240 case 's': /* try to link files */
244 case 'w': /* versatec page width */
248 case ':': /* catch "missing argument" error */
250 iflag++; /* -i without args is valid */
263 if (printer == NULL && (printer = getenv("PRINTER")) == NULL)
265 chkprinter(printer, pp);
266 if (pp->no_copies && ncopies > 1)
267 errx(1, "multiple copies are not allowed");
268 if (pp->max_copies > 0 && ncopies > pp->max_copies)
269 errx(1, "only %ld copies are allowed", pp->max_copies);
271 * Get the identity of the person doing the lpr using the same
272 * algorithm as lprm. Actually, not quite -- lprm will override
273 * the login name with "root" if the user is running as root;
274 * the daemon actually checks for the string "root" in its
275 * permission checking. Sigh.
279 if (userid != 0 && userid != pp->daemon_user)
280 errx(1, "only privileged users may use the `-U' flag");
281 lpr_username = Uflag; /* -U person doing 'lpr' */
283 lpr_username = getlogin(); /* person doing 'lpr' */
284 if (userid != pp->daemon_user || lpr_username == 0) {
285 if ((pw = getpwuid(userid)) == NULL)
286 errx(1, "Who are you?");
287 lpr_username = pw->pw_name;
292 * Check for restricted group access.
294 if (pp->restrict_grp != NULL && userid != pp->daemon_user) {
295 if ((gptr = getgrnam(pp->restrict_grp)) == NULL)
296 errx(1, "Restricted group specified incorrectly");
297 if (gptr->gr_gid != getgid()) {
298 while (*gptr->gr_mem != NULL) {
299 if ((strcmp(lpr_username, *gptr->gr_mem)) == 0)
303 if (*gptr->gr_mem == NULL)
304 errx(1, "Not a member of the restricted group");
308 * Check to make sure queuing is enabled if userid is not root.
310 lock_file_name(pp, buf, sizeof buf);
311 if (userid && stat(buf, &stb) == 0 && (stb.st_mode & LFM_QUEUE_DIS))
312 errx(1, "Printer queue is disabled");
314 * Initialize the control file.
319 fchown(tfd, pp->daemon_user, -1);
320 /* owned by daemon for protection */
322 card('H', local_host);
323 card('P', lpr_username);
325 if (hdr && !pp->no_header) {
326 if (jobname == NULL) {
330 jobname = ((arg = strrchr(argv[0], '/'))
331 ? arg + 1 : argv[0]);
334 card('L', lpr_username);
336 if (format != 'p' && Zflag != 0)
339 card('I', itoa(indent));
341 card('M', lpr_username);
342 if (format == 't' || format == 'n' || format == 'd')
343 for (i = 0; i < 4; i++)
344 if (fonts[i] != NULL)
345 card('1'+i, fonts[i]);
350 * Our use of `Z' here is incompatible with LPRng's
351 * use. We assume that the only use of our existing
352 * `Z' card is as shown for `p' format (pr) files.
359 else if ((s = setlocale(LC_TIME, "")) != NULL)
364 * Read the files and spool them.
368 else while (argc--) {
369 if (argv[0][0] == '-' && argv[0][1] == '\0') {
375 if ((f = test(arg = *argv++)) < 0)
376 continue; /* file unreasonable */
378 if (sflag && (cp = linked(arg)) != NULL) {
379 snprintf(buf, sizeof(buf), "%d %d", statb.st_dev,
383 card('T', title ? title : arg);
384 for (i = 0; i < ncopies; i++)
385 card(format, &dfname[inchar-2]);
386 card('U', &dfname[inchar-2]);
395 printf("%s: %s: not linked, copying instead\n",
400 * The user wants the file removed after it is copied
401 * to the spool area, so see if the file can be moved
402 * instead of copy/unlink'ed. This is much faster and
403 * uses less spool space than copying the file. This
404 * can be very significant when running services like
405 * samba, pcnfs, CAP, et al.
410 * There are several things to check to avoid any
411 * security issues. Some of these are redundant
412 * under BSD's, but are necessary when lpr is built
413 * under some other OS's (which I do do...)
415 if (lstat(arg, &statb1) < 0)
417 if (S_ISLNK(statb1.st_mode))
419 if (link(arg, dfname) != 0)
423 * Make sure the user hasn't tried to trick us via
424 * any race conditions
426 if (lstat(dfname, &statb2) < 0)
428 if (statb1.st_dev != statb2.st_dev)
430 if (statb1.st_ino != statb2.st_ino)
433 * Skip if the file already had multiple hard links,
434 * because changing the owner and access-bits would
435 * change ALL versions of the file
437 if (statb2.st_nlink > 2)
440 * If we can access and remove the original file
441 * without special setuid-ness then this method is
442 * safe. Otherwise, abandon the move and fall back
443 * to the (usual) copy method.
446 ret = access(dfname, R_OK);
453 * Unlink of user file was successful. Change the
454 * owner and permissions, add entries to the control
455 * file, and skip the file copying step.
457 chown(dfname, pp->daemon_user, getegid());
458 chmod(dfname, S_IRUSR | S_IWUSR | S_IRGRP | S_IWGRP);
461 card('T', title ? title : arg);
462 for (i = 0; i < ncopies; i++)
463 card(format, &dfname[inchar-2]);
464 card('U', &dfname[inchar-2]);
471 seteuid(uid); /* restore old uid */
474 if ((i = open(arg, O_RDONLY)) < 0) {
475 printf("%s: cannot open %s\n", progname, arg);
479 if (f && unlink(arg) < 0)
480 printf("%s: %s: not removed\n", progname, arg);
488 * Touch the control file to fix position in the queue.
491 if ((tfd = open(tfname, O_RDWR)) >= 0) {
494 if (read(tfd, &touch_c, 1) == 1 &&
495 lseek(tfd, (off_t)0, 0) == 0 &&
496 write(tfd, &touch_c, 1) != 1) {
497 printf("%s: cannot touch %s\n", progname,
504 if (link(tfname, cfname) < 0) {
505 printf("%s: cannot rename %s\n", progname, cfname);
511 if (qflag) /* just q things up */
513 if (!startdaemon(pp))
514 printf("jobs queued, but cannot start daemon.\n");
523 * Create the file n and copy from file descriptor f.
526 copy(const struct printer *pp, int f, const char n[])
532 card('T', title ? title : n);
533 for (i = 0; i < ncopies; i++)
534 card(format, &dfname[inchar-2]);
535 card('U', &dfname[inchar-2]);
539 while ((i = read(f, buf, BUFSIZ)) > 0) {
540 if (write(fd, buf, i) != i) {
541 printf("%s: %s: temp file write error\n", progname, n);
548 if (pp->max_blocks > 0 && nr > pp->max_blocks) {
549 printf("%s: %s: copy file is too large\n",
557 printf("%s: %s: empty input file\n", progname,
564 * Try and link the file to dfname. Return a pointer to the full
565 * path name if successful.
568 linked(const char *file)
571 static char buf[MAXPATHLEN];
575 if (getcwd(buf, sizeof(buf)) == NULL)
577 while (file[0] == '.') {
583 if (file[2] == '/') {
584 if ((cp = strrchr(buf, '/')) != NULL)
592 strncat(buf, "/", sizeof(buf) - strlen(buf) - 1);
593 strncat(buf, file, sizeof(buf) - strlen(buf) - 1);
597 ret = symlink(file, dfname);
599 return(ret ? NULL : file);
603 * Put a line into the control file.
606 card(int c, const char *p2)
613 while ((c = *p2++) != '\0' && len < sizeof(buf)) {
614 *p1++ = (c == '\n') ? ' ' : c;
618 write(tfd, buf, len);
622 * Create a new file in the spool directory.
628 int oldumask = umask(0); /* should block signals */
631 f = open(n, O_WRONLY | O_EXCL | O_CREAT, FILMOD);
634 printf("%s: cannot create %s\n", progname, n);
637 if (fchown(f, userid, -1) < 0) {
638 printf("%s: cannot chown %s\n", progname, n);
639 cleanup(0); /* cleanup does exit */
642 if (++n[inchar] > 'z') {
643 if (++n[inchar-2] == 't') {
644 printf("too many files - break up the job\n");
648 } else if (n[inchar] == '[')
654 * Cleanup after interrupts and errors.
657 cleanup(int signo __unused)
661 signal(SIGHUP, SIG_IGN);
662 signal(SIGINT, SIG_IGN);
663 signal(SIGQUIT, SIG_IGN);
664 signal(SIGTERM, SIG_IGN);
670 while (tfname[i]-- != 'A');
674 while (cfname[i]-- != 'A');
679 while (dfname[i]-- != 'A');
681 } while (dfname[i-2]-- != 'd');
686 * Test to see if this is a printable file.
687 * Return -1 if it is not, 0 if its printable, and 1 if
688 * we should remove it after printing.
691 test(const char *file)
698 if (access(file, 4) < 0) {
699 printf("%s: cannot access %s\n", progname, file);
702 if (stat(file, &statb) < 0) {
703 printf("%s: cannot stat %s\n", progname, file);
706 if ((statb.st_mode & S_IFMT) == S_IFDIR) {
707 printf("%s: %s is a directory\n", progname, file);
710 if (statb.st_size == 0) {
711 printf("%s: %s is an empty file\n", progname, file);
714 if ((fd = open(file, O_RDONLY)) < 0) {
715 printf("%s: cannot open %s\n", progname, file);
719 * XXX Shall we add a similar test for ELF?
721 if (read(fd, &execb, sizeof(execb)) == sizeof(execb) &&
723 printf("%s: %s is an executable program", progname, file);
729 * aside: note that 'cp' is technically a 'const char *'
730 * (because it points into 'file'), even though strrchr
731 * returns a value of type 'char *'.
733 if ((cp = strrchr(file, '/')) == NULL) {
734 if (checkwriteperm(file,".") == 0)
738 fd = checkwriteperm(file,"/");
740 /* strlcpy will change the '/' to '\0' */
741 dlen = cp - file + 1;
742 dirpath = malloc(dlen);
743 strlcpy(dirpath, file, dlen);
744 fd = checkwriteperm(file, dirpath);
750 printf("%s: %s: is not removable by you\n", progname, file);
755 printf(" and is unprintable\n");
761 checkwriteperm(const char *file, const char *directory)
764 if (access(directory, W_OK) == 0) {
765 stat(directory, &stats);
766 if (stats.st_mode & S_ISVTX) {
768 if(stats.st_uid == userid) {
777 * itoa - integer to string conversion
782 static char b[10] = "########";
793 * Perform lookup for printer name or abbreviation --
796 chkprinter(const char *ptrname, struct printer *pp)
801 status = getprintcap(ptrname, pp);
805 errx(1, "%s: %s", ptrname, pcaperr(status));
806 case PCAPERR_NOTFOUND:
807 errx(1, "%s: unknown printer", ptrname);
809 warnx("%s: unresolved tc= reference(s)", ptrname);
814 * Tell the user what we wanna get.
819 fprintf(stderr, "%s\n",
820 "usage: lpr [-Pprinter] [-#num] [-C class] [-J job] [-T title] [-U user]\n"
821 "\t[-Z daemon-options] [-i[numcols]] [-i[numcols]] [-1234 font]\n"
822 "\t[-L locale] [-wnum] [-cdfghlnmprstv] [name ...]");
828 * Make the temp files.
831 mktemps(const struct printer *pp)
837 snprintf(buf, sizeof(buf), "%s/.seq", pp->spool_dir);
839 if ((fd = open(buf, O_RDWR|O_CREAT, 0661)) < 0) {
840 printf("%s: cannot create %s\n", progname, buf);
843 if (flock(fd, LOCK_EX)) {
844 printf("%s: cannot lock %s\n", progname, buf);
849 if ((len = read(fd, buf, sizeof(buf))) > 0) {
850 for (cp = buf; len--; ) {
851 if (*cp < '0' || *cp > '9')
853 n = n * 10 + (*cp++ - '0');
856 len = strlen(pp->spool_dir) + strlen(local_host) + 8;
857 tfname = lmktemp(pp, "tf", n, len);
858 cfname = lmktemp(pp, "cf", n, len);
859 dfname = lmktemp(pp, "df", n, len);
860 inchar = strlen(pp->spool_dir) + 3;
862 lseek(fd, (off_t)0, 0);
863 snprintf(buf, sizeof(buf), "%03d\n", n);
864 write(fd, buf, strlen(buf));
865 close(fd); /* unlocks as well */
869 * Make a temp file name.
872 lmktemp(const struct printer *pp, const char *id, int num, int len)
876 if ((s = malloc(len)) == NULL)
877 errx(1, "out of memory");
878 snprintf(s, len, "%s/%sA%03d%s", pp->spool_dir, id, num, local_host);