HAKERIS 11/HAKERIS 11.ISO/linux/system/LinuxConsole 0.4/linuxconsole0.4install-en.iso/linuxconsole0.4.lcm/etc/postfix/postfix-script

Text File | 2004-03-26 | 5.6 KB | 241 lines

#!/usr/bin/bash

#++
# NAME
#    postfix-script 1
# SUMMARY
#    execute Postfix administrative commands
# SYNOPSIS
#    \fBpostfix-script\fR \fIcommand\fR
# DESCRIPTION
#    The \fBpostfix-script\fR script executes Postfix administrative
#    commands in an environment that is set up by the \fBpostfix\fR(1)
#    command.
# SEE ALSO
#    master(8) Postfix master program
#    postfix(1) Postfix administrative interface
# LICENSE
# .ad
# .fi
#    The Secure Mailer license must be distributed with this software.
# AUTHOR(S)
#    Wietse Venema
#    IBM T.J. Watson Research
#    P.O. Box 704
#    Yorktown Heights, NY 10598, USA
#--

# Avoid POSIX death due to SIGHUP when some parent process exits.

trap '' 1

case $daemon_directory in
"") echo This script must be run by the postfix command. 1>&2
    echo Do not run directly. 1>&2
    exit 1
esac

LOGGER="$command_directory/postlog -t $MAIL_LOGTAG/postfix-script"
INFO="$LOGGER -p info"
WARN="$LOGGER -p warn"
ERROR="$LOGGER -p error"
FATAL="$LOGGER -p fatal"
PANIC="$LOGGER -p panic"

umask 022
SHELL=/usr/bin/bash

#
# Can't do much without these in place.
#
cd $command_directory || {
    $FATAL no Postfix command directory $command_directory!
    exit 1
}
cd $daemon_directory || {
    $FATAL no Postfix daemon directory $daemon_directory!
    exit 1
}
test -f master || {
    $FATAL no Postfix master program $daemon_directory/master!
    exit 1
}
cd $config_directory || {
    $FATAL no Postfix configuration directory $config_directory!
    exit 1
}
cd $queue_directory || {
    $FATAL no Postfix queue directory $queue_directory!
    exit 1
}

#
# Parse JCL
#
case $1 in

start_msg)

    echo "Start postfix"
    ;;

stop_msg)

    echo "Stop postfix"
    ;;

start)

    $daemon_directory/master -t 2>/dev/null || {
        $FATAL the Postfix mail system is already running
        exit 1
    }
    $config_directory/postfix-script check || {
        $FATAL Postfix integrity check failed!
        exit 1
    }
    $INFO starting the Postfix mail system
    $daemon_directory/master &
    ;;

drain)

    $daemon_directory/master -t 2>/dev/null && {
        $FATAL the Postfix mail system is not running
        exit 1
    }
    $INFO stopping the Postfix mail system
    kill -9 `sed 1q pid/master.pid`
    ;;

stop)

    $daemon_directory/master -t 2>/dev/null && {
        $FATAL the Postfix mail system is not running
        exit 1
    }
    $INFO stopping the Postfix mail system
    kill `/usr/local/intranet/bin/sed 1q pid/master.pid`
    ;;

abort)

    $daemon_directory/master -t 2>/dev/null && {
        $FATAL the Postfix mail system is not running
        exit 1
    }
    $INFO aborting the Postfix mail system
    kill `/usr/local/intranet/bin/sed 1q pid/master.pid`
    ;;

reload)

    $daemon_directory/master -t 2>/dev/null && {
        $FATAL the Postfix mail system is not running
        exit 1
    }
    $INFO refreshing the Postfix mail system
    $command_directory/postsuper active || exit 1
    kill -HUP `/usr/local/intranet/bin/sed 1q pid/master.pid`
    $command_directory/postsuper &
    ;;

flush)

    cd $queue_directory || {
        $FATAL no Postfix queue directory $queue_directory!
        exit 1
    }
    $command_directory/postqueue -f
    ;;

check)

    for dir in $daemon_directory $config_directory $queue_directory
    do
        ls -lLd $dir | (grep " root " >/dev/null ||
            $WARN not owned by root: $dir)
    done

    /usr/local/intranet/bin/find $daemon_directory/* $config_directory/* ! -user root \
        -exec $WARN not owned by root: {} \;

    /usr/local/intranet/bin/find $daemon_directory/. $config_directory/. \
        \( -perm -020 -o -perm -002 \) -type f \
        -exec $WARN group or other writable: {} \;

    $SHELL $config_directory/post-install create-missing || {
        $WARN unable to create missing queue directories
        exit 1
    }

    /usr/local/intranet/bin/find `ls -d $queue_directory/* | \
        egrep '/(incoming|active|defer|deferred|bounce|saved|corrupt|public|private|flush)$'` \
        ! \( -type p -o -type s \) ! -user $mail_owner \
        -exec $WARN not owned by $mail_owner: {} \;

    /usr/local/intranet/bin/find $queue_directory/public $queue_directory/maildrop \
        $command_directory/postqueue $command_directory/postdrop \
        -prune ! -group $setgid_group \
        -exec $WARN not owned by group $setgid_group: {} \;

    /usr/local/intranet/bin/find $command_directory/postqueue $command_directory/postdrop \
        -prune ! -perm -02111 \
        -exec $WARN not set-gid: {} \;

    for name in `ls -d $queue_directory/* | \
        egrep '/(bin|etc|lib|usr)$'` ; \
    do \
        /usr/local/intranet/bin/find $name ! -user root \
        -exec $WARN not owned by root: {} \; ; \
    done

    # WARNING: this should not descend into the maildrop directory.
    # maildrop is the least trusted Postfix directory.

    /usr/local/intranet/bin/find $queue_directory/maildrop/. -prune ! -user $mail_owner \
        -exec $WARN not owned by $mail_owner: $queue_directory/maildrop \;

    for dir in bin etc lib sbin usr
    do
        test -d $dir && /usr/local/intranet/bin/find $dir -type f -print | while read path
        do
            cmp -s $path /$path ||
                $WARN $queue_directory/$path and /$path differ
        done
    done

    # Look for incomplete installations.

    test -f $config_directory/master.cf || {
        $FATAL no $config_directory/master.cf file found
        exit 1
    }

    # See if all queue files are in the right place. This is slow.
    # We must scan all queues for mis-named queue files before the
    # mail system can run.

    $command_directory/postsuper || exit 1

    /usr/local/intranet/bin/find corrupt -type f -exec $WARN damaged message: {} \;

    # XXX also: look for weird stuff, weird permissions, etc.

    test -f /usr/sbin/sendmail -a -f /usr/lib/sendmail && {
        cmp -s /usr/sbin/sendmail /usr/lib/sendmail || {
        $WARN /usr/lib/sendmail and /usr/sbin/sendmail differ
        $WARN Replace one by a symbolic link to the other
        }
    }
    exit 0
    ;;

*)

    $FATAL "usage: postfix start (or stop, reload, abort, flush, or check)"
    exit 1
    ;;

esac