1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
|
#!/usr/bin/perl -w
#
# $OpenBSD: recover,v 1.5 2000/04/20 15:24:24 millert Exp $
#
# Script to (safely) recover nvi edit sessions.
# NOTE: Assumes we are running *before* users may start processes.
# If that is not the case then the chown and chmod below are not safe.
#
use Fcntl;
$recoverdir = $ARGV[0] || "/var/tmp/vi.recover";
$sendmail = "/usr/sbin/sendmail";
# Make the recovery dir if it does not exist.
if (!lstat($recoverdir)) {
mkdir($recoverdir, 01777) || die "Unable to create $recoverdir: $!\n";
chmod(01777, $recoverdir);
exit(0);
}
# Sanity check the vi recovery dir
if (-l _) {
die "Warning! $recoverdir is a symbolic link! (ignoring)\n";
} elsif (! -d _) {
die "Warning! $recoverdir is not a directory! (ignoring)\n";
} elsif (! -O _) {
warn "Warning! $recoverdir is not owned by root! (fixing)\n";
chown 0, 0, $recoverdir;
}
if (((stat(_))[2] & 07777) != 01777) {
warn "Warning! $recoverdir is not mode 01777! (fixing)\n";
chmod(01777, $recoverdir);
}
chdir($recoverdir) || die "$0: can't chdir to $recoverdir: $!\n";
# Check editor backup files.
opendir(RECDIR, ".") || die "$0: can't open $recoverdir: $!\n";
foreach $file (readdir(RECDIR)) {
next unless $file =~ /^vi\./;
# Unmodified vi editor backup files either have the
# execute bit set or are zero length. Delete them.
# Anything that is not a normal file gets deleted too.
lstat($file) || die "$0: can't stat $file: $!\n";
if (-x _ || ! -s _ || ! -f _) {
unlink($file) unless -d _;
}
}
# It is possible to get incomplete recovery files, if the editor crashes
# at the right time.
rewinddir(RECDIR);
foreach $file (readdir(RECDIR)) {
next unless $file =~ /^recover\./;
# Delete anything that is not a regular file as that is either
# filesystem corruption from fsck or an exploit attempt.
lstat($file) || die "$0: can't stat $file: $!\n";
if (! -f _ || ! -s _) {
unlink($file) unless -d _;
next;
}
# Slurp in the recover.* file and search for X-vi-recover-path
# (which should point to an existing vi.* file).
sysopen(RECFILE, $file, O_RDONLY) || die "$0: can't open $file: $!\n";
@recfile = <RECFILE>;
close(RECFILE);
@backups = grep(s/^X-vi-recover-path:\s*(.*)[\r\n]*$/$1/, @recfile);
# Delete any recovery files that are zero length, corrupted,
# or that have no corresponding backup file. Else send mail
# to the user.
if ($#backups != 0) {
unlink($file);
} elsif (! -s $backups[0]) {
unlink($file, $backups[0]);
} else {
open(SENDMAIL, "|$sendmail -t") ||
die "$0: can't run $sendmail -t: $!\n";
print SENDMAIL @recfile;
close(SENDMAIL);
}
}
closedir(RECDIR);
exit(0);
|