1 /* vi: set sw=4 ts=4: */
3 * crond -d[#] -c <crondir> -f -b
5 * run as root, but NOT setuid root
7 * Copyright 1994 Matthew Dillon (dillon@apollo.west.oic.com)
9 * Vladimir Oleynik <dzo@simtreas.ru> (C) 2002
11 * Licensed under the GPL v2 or later, see the file LICENSE in this tarball.
17 /* glibc frees previous setenv'ed value when we do next setenv()
18 * of the same variable. uclibc does not do this! */
19 #if (defined(__GLIBC__) && !defined(__UCLIBC__)) /* || OTHER_SAFE_LIBC... */
20 # define SETENV_LEAKS 0
22 # define SETENV_LEAKS 1
26 #define TMPDIR CONFIG_FEATURE_CROND_DIR
27 #define CRONTABS CONFIG_FEATURE_CROND_DIR "/crontabs"
29 # define SENDMAIL "sendmail"
32 # define SENDMAIL_ARGS "-ti"
35 # define CRONUPDATE "cron.update"
38 # define MAXLINES 256 /* max lines in non-root crontabs */
42 typedef struct CronFile {
43 struct CronFile *cf_next;
44 struct CronLine *cf_lines;
46 smallint cf_wants_starting; /* bool: one or more jobs ready */
47 smallint cf_has_running; /* bool: one or more jobs running */
48 smallint cf_deleted; /* marked for deletion (but still has running jobs) */
51 typedef struct CronLine {
52 struct CronLine *cl_next;
53 char *cl_cmd; /* shell command */
54 pid_t cl_pid; /* >0:running, <0:needs to be started in this minute, 0:dormant */
55 #if ENABLE_FEATURE_CROND_CALL_SENDMAIL
56 int cl_empty_mail_size; /* size of mail header only, 0 if no mailfile */
57 char *cl_mailto; /* whom to mail results, may be NULL */
59 /* ordered by size, not in natural order. makes code smaller: */
60 char cl_Dow[7]; /* 0-6, beginning sunday */
61 char cl_Mons[12]; /* 0-11 */
62 char cl_Hrs[24]; /* 0-23 */
63 char cl_Days[32]; /* 1-31 */
64 char cl_Mins[60]; /* 0-59 */
78 OPT_d = (1 << 6) * ENABLE_FEATURE_CROND_D,
80 #if ENABLE_FEATURE_CROND_D
81 # define DebugOpt (option_mask32 & OPT_d)
88 unsigned log_level; /* = 8; */
89 time_t crontab_dir_mtime;
90 const char *log_filename;
91 const char *crontab_dir_name; /* = CRONTABS; */
98 #define G (*(struct globals*)&bb_common_bufsiz1)
99 #define INIT_G() do { \
101 G.crontab_dir_name = CRONTABS; \
105 /* 0 is the most verbose, default 8 */
111 /* level >= 20 is "error" */
114 static void crondlog(const char *ctl, ...) __attribute__ ((format (printf, 1, 2)));
115 static void crondlog(const char *ctl, ...)
118 int level = (ctl[0] & 0x1f);
121 if (level >= (int)G.log_level) {
122 /* Debug mode: all to (non-redirected) stderr, */
123 /* Syslog mode: all to syslog (logmode = LOGMODE_SYSLOG), */
124 if (!DebugOpt && G.log_filename) {
125 /* Otherwise (log to file): we reopen log file at every write: */
126 int logfd = open3_or_warn(G.log_filename, O_WRONLY | O_CREAT | O_APPEND, 0666);
128 xmove_fd(logfd, STDERR_FILENO);
130 /* When we log to syslog, level > 8 is logged at LOG_ERR
131 * syslog level, level <= 8 is logged at LOG_INFO. */
133 bb_verror_msg(ctl + 1, va, /* strerr: */ NULL);
136 vasprintf(&msg, ctl + 1, va);
137 bb_info_msg("%s: %s", applet_name, msg);
146 static const char DowAry[] ALIGN1 =
147 "sun""mon""tue""wed""thu""fri""sat"
148 /* "Sun""Mon""Tue""Wed""Thu""Fri""Sat" */
151 static const char MonAry[] ALIGN1 =
152 "jan""feb""mar""apr""may""jun""jul""aug""sep""oct""nov""dec"
153 /* "Jan""Feb""Mar""Apr""May""Jun""Jul""Aug""Sep""Oct""Nov""Dec" */
156 static void ParseField(char *user, char *ary, int modvalue, int off,
157 const char *names, char *ptr)
158 /* 'names' is a pointer to a set of 3-char abbreviations */
164 // this can't happen due to config_read()
171 /* Handle numeric digit or symbol or '*' */
173 n1 = 0; /* everything will be filled */
177 } else if (isdigit(*ptr)) {
180 n1 = strtol(ptr, &endp, 10) + off;
182 n2 = strtol(ptr, &endp, 10) + off;
184 ptr = endp; /* gcc likes temp var for &endp */
189 for (i = 0; names[i]; i += 3) {
190 /* was using strncmp before... */
191 if (strncasecmp(ptr, &names[i], 3) == 0) {
204 /* handle optional range '-' */
208 if (*ptr == '-' && n2 < 0) {
214 * collapse single-value ranges, handle skipmark, and fill
215 * in the character array appropriately.
222 skip = strtol(ptr + 1, &endp, 10);
223 ptr = endp; /* gcc likes temp var for &endp */
227 * fill array, using a failsafe is the easiest way to prevent
236 n1 = (n1 + 1) % modvalue;
239 ary[n1 % modvalue] = 1;
242 if (--failsafe == 0) {
258 crondlog(WARN9 "user %s: parse error at %s", user, base);
262 if (DebugOpt && (G.log_level <= 5)) { /* like LVL5 */
263 /* can't use crondlog, it inserts '\n' */
265 for (i = 0; i < modvalue; ++i)
266 fprintf(stderr, "%d", (unsigned char)ary[i]);
267 bb_putchar_stderr('\n');
271 static void FixDayDow(CronLine *line)
277 for (i = 0; i < ARRAY_SIZE(line->cl_Dow); ++i) {
278 if (line->cl_Dow[i] == 0) {
283 for (i = 0; i < ARRAY_SIZE(line->cl_Days); ++i) {
284 if (line->cl_Days[i] == 0) {
289 if (weekUsed != daysUsed) {
291 memset(line->cl_Days, 0, sizeof(line->cl_Days));
293 memset(line->cl_Dow, 0, sizeof(line->cl_Dow));
298 * delete_cronfile() - delete user database
300 * Note: multiple entries for same user may exist if we were unable to
301 * completely delete a database due to running processes.
303 //FIXME: we will start a new job even if the old job is running
304 //if crontab was reloaded: crond thinks that "new" job is different from "old"
305 //even if they are in fact completely the same. Example
308 // 0-59 * * * long_running_job2
309 //User edits crontab to:
310 // 0-59 * * * job1_updated
311 // 0-59 * * * long_running_job2
312 //Bug: crond can now start another long_running_job2 even if old one
314 static void delete_cronfile(const char *userName)
316 CronFile **pfile = &G.cron_files;
319 while ((file = *pfile) != NULL) {
320 if (strcmp(userName, file->cf_username) == 0) {
321 CronLine **pline = &file->cf_lines;
324 file->cf_has_running = 0;
325 file->cf_deleted = 1;
327 while ((line = *pline) != NULL) {
328 if (line->cl_pid > 0) {
329 file->cf_has_running = 1;
330 pline = &line->cl_next;
332 *pline = line->cl_next;
337 if (file->cf_has_running == 0) {
338 *pfile = file->cf_next;
339 free(file->cf_username);
344 pfile = &file->cf_next;
348 static void load_crontab(const char *fileName)
350 struct parser_t *parser;
354 #if ENABLE_FEATURE_CROND_CALL_SENDMAIL
358 delete_cronfile(fileName);
360 if (!getpwnam(fileName)) {
361 crondlog(LVL7 "ignoring file '%s' (no such user)", fileName);
365 parser = config_open(fileName);
369 maxLines = (strcmp(fileName, "root") == 0) ? 65535 : MAXLINES;
371 if (fstat(fileno(parser->fp), &sbuf) == 0 && sbuf.st_uid == DAEMON_UID) {
372 CronFile *file = xzalloc(sizeof(CronFile));
376 file->cf_username = xstrdup(fileName);
377 pline = &file->cf_lines;
384 n = config_read(parser, tokens, 6, 1, "# \t", PARSE_NORMAL | PARSE_KEEP_COPY);
389 crondlog(LVL5 "user:%s entry:%s", fileName, parser->data);
391 /* check if line is setting MAILTO= */
392 if (0 == strncmp(tokens[0], "MAILTO=", 7)) {
393 #if ENABLE_FEATURE_CROND_CALL_SENDMAIL
395 mailTo = (tokens[0][7]) ? xstrdup(&tokens[0][7]) : NULL;
396 #endif /* otherwise just ignore such lines */
399 /* check if a minimum of tokens is specified */
402 *pline = line = xzalloc(sizeof(*line));
403 /* parse date ranges */
404 ParseField(file->cf_username, line->cl_Mins, 60, 0, NULL, tokens[0]);
405 ParseField(file->cf_username, line->cl_Hrs, 24, 0, NULL, tokens[1]);
406 ParseField(file->cf_username, line->cl_Days, 32, 0, NULL, tokens[2]);
407 ParseField(file->cf_username, line->cl_Mons, 12, -1, MonAry, tokens[3]);
408 ParseField(file->cf_username, line->cl_Dow, 7, 0, DowAry, tokens[4]);
410 * fix days and dow - if one is not "*" and the other
411 * is "*", the other is set to 0, and vise-versa
414 #if ENABLE_FEATURE_CROND_CALL_SENDMAIL
415 /* copy mailto (can be NULL) */
416 line->cl_mailto = xstrdup(mailTo);
419 line->cl_cmd = xstrdup(tokens[5]);
421 crondlog(LVL5 " command:%s", tokens[5]);
423 pline = &line->cl_next;
424 //bb_error_msg("M[%s]F[%s][%s][%s][%s][%s][%s]", mailTo, tokens[0], tokens[1], tokens[2], tokens[3], tokens[4], tokens[5]);
428 file->cf_next = G.cron_files;
432 crondlog(WARN9 "user %s: too many lines", fileName);
435 config_close(parser);
438 static void process_cron_update_file(void)
443 fi = fopen_for_read(CRONUPDATE);
446 while (fgets(buf, sizeof(buf), fi) != NULL) {
447 /* use first word only */
448 skip_non_whitespace(buf)[0] = '\0';
455 static void rescan_crontab_dir(void)
459 /* Delete all files until we only have ones with running jobs (or none) */
461 for (file = G.cron_files; file; file = file->cf_next) {
462 if (!file->cf_deleted) {
463 delete_cronfile(file->cf_username);
468 /* Remove cron update file */
470 /* Re-chdir, in case directory was renamed & deleted */
471 if (chdir(G.crontab_dir_name) < 0) {
472 crondlog(DIE9 "chdir(%s)", G.crontab_dir_name);
475 /* Scan directory and add associated users */
477 DIR *dir = opendir(".");
481 crondlog(DIE9 "chdir(%s)", "."); /* exits */
482 while ((den = readdir(dir)) != NULL) {
483 if (strchr(den->d_name, '.') != NULL) {
486 load_crontab(den->d_name);
493 /* We set environment *before* vfork (because we want to use vfork),
494 * so we cannot use setenv() - repeated calls to setenv() may leak memory!
495 * Using putenv(), and freeing memory after unsetenv() won't leak */
496 static void safe_setenv(char **pvar_val, const char *var, const char *val)
498 char *var_val = *pvar_val;
501 bb_unsetenv_and_free(var_val);
503 *pvar_val = xasprintf("%s=%s", var, val);
508 static void set_env_vars(struct passwd *pas)
511 safe_setenv(&G.env_var_user, "USER", pas->pw_name);
512 safe_setenv(&G.env_var_home, "HOME", pas->pw_dir);
513 /* if we want to set user's shell instead: */
514 /*safe_setenv(G.env_var_shell, "SHELL", pas->pw_shell);*/
516 xsetenv("USER", pas->pw_name);
517 xsetenv("HOME", pas->pw_dir);
519 /* currently, we use constant one: */
520 /*setenv("SHELL", DEFAULT_SHELL, 1); - done earlier */
523 static void change_user(struct passwd *pas)
525 /* careful: we're after vfork! */
526 change_identity(pas); /* - initgroups, setgid, setuid */
527 if (chdir(pas->pw_dir) < 0) {
528 crondlog(WARN9 "chdir(%s)", pas->pw_dir);
529 if (chdir(TMPDIR) < 0) {
530 crondlog(DIE9 "chdir(%s)", TMPDIR); /* exits */
535 // TODO: sendmail should be _run-time_ option, not compile-time!
536 #if ENABLE_FEATURE_CROND_CALL_SENDMAIL
539 fork_job(const char *user, int mailFd,
541 const char *shell_cmd /* if NULL, we run sendmail */
546 /* prepare things before vfork */
547 pas = getpwnam(user);
549 crondlog(WARN9 "can't get uid for %s", user);
557 /* initgroups, setgid, setuid, and chdir to home or TMPDIR */
560 crondlog(LVL5 "child running %s", prog);
563 xmove_fd(mailFd, shell_cmd ? 1 : 0);
566 /* crond 3.0pl1-100 puts tasks in separate process groups */
568 execlp(prog, prog, (shell_cmd ? "-c" : SENDMAIL_ARGS), shell_cmd, (char *) NULL);
569 crondlog(ERR20 "can't execute '%s' for user %s", prog, user);
571 fdprintf(1, "Exec failed: %s -c %s\n", prog, shell_cmd);
578 crondlog(ERR20 "can't vfork");
581 } /* else: PARENT, FORK SUCCESS */
584 * Close the mail file descriptor.. we can't just leave it open in
585 * a structure, closing it later, because we might run out of descriptors
593 static void start_one_job(const char *user, CronLine *line)
599 line->cl_empty_mail_size = 0;
601 if (line->cl_mailto) {
602 /* Open mail file (owner is root so nobody can screw with it) */
603 snprintf(mailFile, sizeof(mailFile), "%s/cron.%s.%d", TMPDIR, user, getpid());
604 mailFd = open(mailFile, O_CREAT | O_TRUNC | O_WRONLY | O_EXCL | O_APPEND, 0600);
607 fdprintf(mailFd, "To: %s\nSubject: cron: %s\n\n", line->cl_mailto,
609 line->cl_empty_mail_size = lseek(mailFd, 0, SEEK_CUR);
611 crondlog(ERR20 "can't create mail file %s for user %s, "
612 "discarding output", mailFile, user);
616 line->cl_pid = fork_job(user, mailFd, DEFAULT_SHELL, line->cl_cmd);
618 if (line->cl_pid <= 0) {
621 /* rename mail-file based on pid of process */
622 char *mailFile2 = xasprintf("%s/cron.%s.%d", TMPDIR, user, (int)line->cl_pid);
623 rename(mailFile, mailFile2); // TODO: xrename?
630 * process_finished_job - called when job terminates and when mail terminates
632 static void process_finished_job(const char *user, CronLine *line)
645 if (line->cl_empty_mail_size <= 0) {
646 /* End of job and no mail file, or end of sendmail job */
651 * End of primary job - check for mail file.
652 * If size has changed and the file is still valid, we send it.
654 snprintf(mailFile, sizeof(mailFile), "%s/cron.%s.%d", TMPDIR, user, (int)pid);
655 mailFd = open(mailFile, O_RDONLY);
661 if (fstat(mailFd, &sbuf) < 0
662 || sbuf.st_uid != DAEMON_UID
663 || sbuf.st_nlink != 0
664 || sbuf.st_size == line->cl_empty_mail_size
665 || !S_ISREG(sbuf.st_mode)
670 line->cl_empty_mail_size = 0;
671 /* if (line->cl_mailto) - always true if cl_empty_mail_size was nonzero */
672 line->cl_pid = fork_job(user, mailFd, SENDMAIL, NULL);
675 #else /* !ENABLE_FEATURE_CROND_CALL_SENDMAIL */
677 static void start_one_job(const char *user, CronLine *line)
682 pas = getpwnam(user);
684 crondlog(WARN9 "can't get uid for %s", user);
688 /* Prepare things before vfork */
691 /* Fork as the user in question and run program */
695 /* initgroups, setgid, setuid, and chdir to home or TMPDIR */
698 crondlog(LVL5 "child running %s", DEFAULT_SHELL);
700 /* crond 3.0pl1-100 puts tasks in separate process groups */
702 execl(DEFAULT_SHELL, DEFAULT_SHELL, "-c", line->cl_cmd, (char *) NULL);
703 crondlog(ERR20 "can't execute '%s' for user %s", DEFAULT_SHELL, user);
708 crondlog(ERR20 "can't vfork");
715 #define process_finished_job(user, line) ((line)->cl_pid = 0)
717 #endif /* !ENABLE_FEATURE_CROND_CALL_SENDMAIL */
720 * Determine which jobs need to be run. Under normal conditions, the
721 * period is about a minute (one scan). Worst case it will be one
724 static void flag_starting_jobs(time_t t1, time_t t2)
728 /* Find jobs > t1 and <= t2 */
730 for (t = t1 - t1 % 60; t <= t2; t += 60) {
739 for (file = G.cron_files; file; file = file->cf_next) {
741 crondlog(LVL5 "file %s:", file->cf_username);
742 if (file->cf_deleted)
744 for (line = file->cf_lines; line; line = line->cl_next) {
746 crondlog(LVL5 " line %s", line->cl_cmd);
747 if (line->cl_Mins[ptm->tm_min]
748 && line->cl_Hrs[ptm->tm_hour]
749 && (line->cl_Days[ptm->tm_mday] || line->cl_Dow[ptm->tm_wday])
750 && line->cl_Mons[ptm->tm_mon]
753 crondlog(LVL5 " job: %d %s",
754 (int)line->cl_pid, line->cl_cmd);
756 if (line->cl_pid > 0) {
757 crondlog(LVL8 "user %s: process already running: %s",
758 file->cf_username, line->cl_cmd);
759 } else if (line->cl_pid == 0) {
761 file->cf_wants_starting = 1;
769 static void start_jobs(void)
774 for (file = G.cron_files; file; file = file->cf_next) {
775 if (!file->cf_wants_starting)
778 file->cf_wants_starting = 0;
779 for (line = file->cf_lines; line; line = line->cl_next) {
781 if (line->cl_pid >= 0)
784 start_one_job(file->cf_username, line);
786 crondlog(LVL8 "USER %s pid %3d cmd %s",
787 file->cf_username, (int)pid, line->cl_cmd);
789 file->cf_wants_starting = 1;
792 file->cf_has_running = 1;
799 * Check for job completion, return number of jobs still running after
802 static int check_completions(void)
806 int num_still_running = 0;
808 for (file = G.cron_files; file; file = file->cf_next) {
809 if (!file->cf_has_running)
812 file->cf_has_running = 0;
813 for (line = file->cf_lines; line; line = line->cl_next) {
816 if (line->cl_pid <= 0)
819 r = waitpid(line->cl_pid, NULL, WNOHANG);
820 if (r < 0 || r == line->cl_pid) {
821 process_finished_job(file->cf_username, line);
822 if (line->cl_pid == 0) {
823 /* sendmail was not started for it */
826 /* else: sendmail was started, job is still running, fall thru */
828 /* else: r == 0: "process is still running" */
829 file->cf_has_running = 1;
831 //FIXME: if !file->cf_has_running && file->deleted: delete it!
832 //otherwise deleted entries will stay forever, right?
833 num_still_running += file->cf_has_running;
835 return num_still_running;
838 int crond_main(int argc, char **argv) MAIN_EXTERNALLY_VISIBLE;
839 int crond_main(int argc UNUSED_PARAM, char **argv)
848 /* "-b after -f is ignored", and so on for every pair a-b */
849 opt_complementary = "f-b:b-f:S-L:L-S" IF_FEATURE_CROND_D(":d-l")
850 ":l+:d+"; /* -l and -d have numeric param */
851 opts = getopt32(argv, "l:L:fbSc:" IF_FEATURE_CROND_D("d:"),
852 &G.log_level, &G.log_filename, &G.crontab_dir_name
853 IF_FEATURE_CROND_D(,&G.log_level));
854 /* both -d N and -l N set the same variable: G.log_level */
856 if (!(opts & OPT_f)) {
857 /* close stdin, stdout, stderr.
858 * close unused descriptors - don't need them. */
859 bb_daemonize_or_rexec(DAEMON_CLOSE_EXTRA_FDS, argv);
862 if (!(opts & OPT_d) && G.log_filename == NULL) {
863 /* logging to syslog */
864 openlog(applet_name, LOG_CONS | LOG_PID, LOG_CRON);
865 logmode = LOGMODE_SYSLOG;
868 xchdir(G.crontab_dir_name);
869 //signal(SIGHUP, SIG_IGN); /* ? original crond dies on HUP... */
870 xsetenv("SHELL", DEFAULT_SHELL); /* once, for all future children */
871 crondlog(LVL8 "crond (busybox "BB_VER") started, log level %d", G.log_level);
872 rescan_crontab_dir();
873 write_pidfile("/var/run/crond.pid");
886 /* Synchronize to 1 minute, minimum 1 second */
887 sleep(sleep_time - (time(NULL) % sleep_time) + 1);
890 dt = (long)t2 - (long)t1;
893 * The file 'cron.update' is checked to determine new cron
894 * jobs. The directory is rescanned once an hour to deal
897 * Check for time jump. Disparities over an hour either way
898 * result in resynchronization. A negative disparity
899 * less than an hour causes us to effectively sleep until we
900 * match the original time (i.e. no re-execution of jobs that
901 * have just been run). A positive disparity less than
902 * an hour causes intermediate jobs to be run, but only once
905 * When running jobs, the inequality used is greater but not
906 * equal to t1, and less then or equal to t2.
908 if (stat(G.crontab_dir_name, &sbuf) != 0)
909 sbuf.st_mtime = 0; /* force update (once) if dir was deleted */
910 if (G.crontab_dir_mtime != sbuf.st_mtime) {
911 G.crontab_dir_mtime = sbuf.st_mtime;
916 rescan_crontab_dir();
918 process_cron_update_file();
920 crondlog(LVL5 "wakeup dt=%ld", dt);
921 if (dt < -60 * 60 || dt > 60 * 60) {
922 crondlog(WARN9 "time disparity of %ld minutes detected", dt / 60);
923 /* and we do not run any jobs in this case */
925 /* Usual case: time advances forward, as expected */
926 flag_starting_jobs(t1, t2);
928 if (check_completions() > 0) {
929 /* some jobs are still running */
935 /* else: time jumped back, do not run any jobs */
938 return 0; /* not reached */