postinstall.in revision 1.53 1 #!/bin/sh
2 #
3 # $NetBSD: postinstall.in,v 1.53 2023/08/26 05:59:00 riastradh Exp $
4 #
5 # Copyright (c) 2002-2022 The NetBSD Foundation, Inc.
6 # All rights reserved.
7 #
8 # This code is derived from software contributed to The NetBSD Foundation
9 # by Luke Mewburn.
10 #
11 # Redistribution and use in source and binary forms, with or without
12 # modification, are permitted provided that the following conditions
13 # are met:
14 # 1. Redistributions of source code must retain the above copyright
15 # notice, this list of conditions and the following disclaimer.
16 # 2. Redistributions in binary form must reproduce the above copyright
17 # notice, this list of conditions and the following disclaimer in the
18 # documentation and/or other materials provided with the distribution.
19 #
20 # THIS SOFTWARE IS PROVIDED BY THE NETBSD FOUNDATION, INC. AND CONTRIBUTORS
21 # ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
22 # TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
23 # PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS
24 # BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
25 # CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
26 # SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
27 # INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
28 # CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
29 # ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
30 # POSSIBILITY OF SUCH DAMAGE.
31 #
32 # postinstall
33 # Check for or fix configuration changes that occur
34 # over time as NetBSD evolves.
35 #
36
37 #
38 # NOTE: Be sure to use ${DEST_DIR} prefix before all real file operations.
39 #
40
41 #
42 # checks to add:
43 # - sysctl(8) renames (net.inet6.ip6.bindv6only -> net.inet6.ip6.v6only)
44 # - de* -> tlp* migration (/etc/ifconfig.de*, $ifconfig_de*, ...) ?
45 # - support quiet/verbose mode ?
46 # - differentiate between failures caused by missing source
47 # and real failures
48 # - install moduli into usr/share/examples/ssh and use from there?
49 # - differentiate between "needs fix" versus "can't fix" issues
50 #
51
52 # This script is executed as part of a cross build. Allow the build
53 # environment to override the locations of some tools.
54 : ${AWK:=awk}
55 : ${DB:=db}
56 : ${GREP:=grep}
57 : ${HOST_SH:=sh}
58 : ${MAKE:=make}
59 : ${PWD_MKDB:=/usr/sbin/pwd_mkdb}
60 : ${SED:=sed}
61 : ${SORT:=sort}
62 : ${STAT:=stat}
63
64 #
65 # helper functions
66 #
67
68 err()
69 {
70 exitval=$1
71 shift
72 echo 1>&2 "${PROGNAME}: $*"
73 if [ -n "${SCRATCHDIR}" ]; then
74 /bin/rm -rf "${SCRATCHDIR}"
75 fi
76 exit ${exitval}
77 }
78
79 warn()
80 {
81 echo 1>&2 "${PROGNAME}: $*"
82 }
83
84 msg()
85 {
86 echo " $*"
87 }
88
89 mkdtemp()
90 {
91 # Make sure we don't loop forever if mkdir will always fail.
92 [ -d /tmp ] || err 2 /tmp is not a directory
93 [ -w /tmp ] || err 2 /tmp is not writable
94
95 _base="/tmp/_postinstall.$$"
96 _serial=0
97
98 while true; do
99 _dir="${_base}.${_serial}"
100 mkdir -m 0700 "${_dir}" && break
101 _serial=$((${_serial} + 1))
102 done
103 echo "${_dir}"
104 }
105
106 # Quote args to make them safe in the shell.
107 # Usage: quotedlist="$(shell_quote args...)"
108 #
109 # After building up a quoted list, use it by evaling it inside
110 # double quotes, like this:
111 # eval "set -- $quotedlist"
112 # or like this:
113 # eval "\$command $quotedlist \$filename"
114 #
115 shell_quote()
116 {(
117 local result=''
118 local arg qarg
119 LC_COLLATE=C ; export LC_COLLATE # so [a-zA-Z0-9] works in ASCII
120 for arg in "$@" ; do
121 case "${arg}" in
122 '')
123 qarg="''"
124 ;;
125 *[!-./a-zA-Z0-9]*)
126 # Convert each embedded ' to '\'',
127 # then insert ' at the beginning of the first line,
128 # and append ' at the end of the last line.
129 # Finally, elide unnecessary '' pairs at the
130 # beginning and end of the result and as part of
131 # '\'''\'' sequences that result from multiple
132 # adjacent quotes in he input.
133 qarg="$(printf "%s\n" "$arg" | \
134 ${SED:-sed} -e "s/'/'\\\\''/g" \
135 -e "1s/^/'/" -e "\$s/\$/'/" \
136 -e "1s/^''//" -e "\$s/''\$//" \
137 -e "s/'''/'/g"
138 )"
139 ;;
140 *)
141 # Arg is not the empty string, and does not contain
142 # any unsafe characters. Leave it unchanged for
143 # readability.
144 qarg="${arg}"
145 ;;
146 esac
147 result="${result}${result:+ }${qarg}"
148 done
149 printf "%s\n" "$result"
150 )}
151
152 # Convert arg $1 to a basic regular expression (as in sed)
153 # that will match the arg. This works by inserting backslashes
154 # before characters that are special in basic regular expressions.
155 # It also inserts backslashes before the extra characters specified
156 # in $2 (which defaults to "/,").
157 # XXX: Does not handle embedded newlines.
158 # Usage: regex="$(bre_quote "${string}")"
159 bre_quote()
160 {
161 local arg="$1"
162 local extra="${2-/,}"
163 printf "%s\n" "${arg}" | ${SED} -e 's/[][^$.*\\'"${extra}"']/\\&/g'
164 }
165
166 # unprefix dir
167 # Remove any dir prefix from a list of paths on stdin,
168 # and write the result to stdout. Useful for converting
169 # from ${DEST_DIR}/path to /path.
170 #
171 unprefix()
172 {
173 [ $# -eq 1 ] || err 3 "USAGE: unprefix dir"
174 local prefix="${1%/}"
175 prefix="$(bre_quote "${prefix}")"
176
177 ${SED} -e "s,^${prefix}/,/,"
178 }
179
180 # additem item description
181 # Add item to list of supported items to check/fix,
182 # which are checked/fixed by default if no item is requested by user.
183 #
184 additem()
185 {
186 [ $# -eq 2 ] || err 3 "USAGE: additem item description"
187 defaultitems="${defaultitems}${defaultitems:+ }$1"
188 eval desc_$1=\"\$2\"
189 }
190
191 # adddisableditem item description
192 # Add item to list of supported items to check/fix,
193 # but execute the item only if the user asks for it explicitly.
194 #
195 adddisableditem()
196 {
197 [ $# -eq 2 ] || err 3 "USAGE: adddisableditem item description"
198 otheritems="${otheritems}${otheritems:+ }$1"
199 eval desc_$1=\"\$2\"
200 }
201
202 # checkdir op dir mode
203 # Ensure dir exists, and if not, create it with the appropriate mode.
204 # Returns 0 if ok, 1 otherwise.
205 #
206 check_dir()
207 {
208 [ $# -eq 3 ] || err 3 "USAGE: check_dir op dir mode"
209 _cdop="$1"
210 _cddir="$2"
211 _cdmode="$3"
212 [ -d "${_cddir}" ] && return 0
213 if [ "${_cdop}" = "check" ]; then
214 msg "${_cddir} is not a directory"
215 return 1
216 elif ! mkdir -m "${_cdmode}" "${_cddir}" ; then
217 msg "Can't create missing ${_cddir}"
218 return 1
219 else
220 msg "Missing ${_cddir} created"
221 fi
222 return 0
223 }
224
225 # check_ids op type file srcfile start id ...
226 # Check if file of type "users" or "groups" contains the relevant IDs.
227 # Use srcfile as a reference for the expected contents.
228 # The specified "id" names should be given in numerical order,
229 # with the first name corresponding to numerical value "start",
230 # and with the special name "SKIP" being used to mark gaps in the
231 # sequence.
232 # Returns 0 if ok, 1 otherwise.
233 #
234 check_ids()
235 {
236 [ $# -ge 6 ] || err 3 "USAGE: checks_ids op type file start srcfile id ..."
237 _op="$1"
238 _type="$2"
239 _file="$3"
240 _srcfile="$4"
241 _start="$5"
242 shift 5
243 #_ids="$@"
244
245 if [ ! -f "${_file}" ]; then
246 msg "${_file} doesn't exist; can't check for missing ${_type}"
247 return 1
248 fi
249 if [ ! -r "${_file}" ]; then
250 msg "${_file} is not readable; can't check for missing ${_type}"
251 return 1
252 fi
253 _notfixed=""
254 if [ "${_op}" = "fix" ]; then
255 _notfixed="${NOT_FIXED}"
256 fi
257 _missing="$(${AWK} -v start=$_start -F: '
258 BEGIN {
259 for (x = 1; x < ARGC; x++) {
260 if (ARGV[x] == "SKIP")
261 continue;
262 idlist[ARGV[x]]++;
263 value[ARGV[x]] = start + x - 1;
264 }
265 ARGC=1
266 }
267 {
268 found[$1]++
269 number[$1] = $3
270 }
271 END {
272 for (id in idlist) {
273 if (!(id in found))
274 printf("%s (missing)\n", id)
275 else if (number[id] != value[id])
276 printf("%s (%d != %d)\n", id,
277 number[id], value[id])
278 start++;
279 }
280 }
281 ' "$@" < "${_file}")" || return 1
282 if [ -n "${_missing}" ]; then
283 msg "Error ${_type}${_notfixed}:" $(echo ${_missing})
284 msg "Use the following as a template:"
285 set -- ${_missing}
286 while [ $# -gt 0 ]
287 do
288 ${GREP} -E "^${1}:" ${_srcfile}
289 shift 2
290 done | sort -t: -k3n
291 msg "and adjust if necessary."
292 return 1
293 fi
294 return 0
295 }
296
297 # populate_dir op onlynew src dest mode file ...
298 # Perform op ("check" or "fix") on files in src/ against dest/
299 # If op = "check" display missing or changed files, optionally with diffs.
300 # If op != "check" copies any missing or changed files.
301 # If onlynew evaluates to true, changed files are ignored.
302 # Returns 0 if ok, 1 otherwise.
303 #
304 populate_dir()
305 {
306 [ $# -ge 5 ] || err 3 "USAGE: populate_dir op onlynew src dest mode file ..."
307 _op="$1"
308 _onlynew="$2"
309 _src="$3"
310 _dest="$4"
311 _mode="$5"
312 shift 5
313 #_files="$@"
314
315 if [ ! -d "${_src}" ]; then
316 msg "${_src} is not a directory; skipping check"
317 return 1
318 fi
319 check_dir "${_op}" "${_dest}" 755 || return 1
320
321 _cmpdir_rv=0
322 for f in "$@"; do
323 fs="${_src}/${f}"
324 fd="${_dest}/${f}"
325 _error=""
326 if [ ! -f "${fd}" ]; then
327 _error="${fd} does not exist"
328 elif ! cmp -s "${fs}" "${fd}" ; then
329 if $_onlynew; then # leave existing ${fd} alone
330 continue;
331 fi
332 _error="${fs} != ${fd}"
333 else
334 continue
335 fi
336 if [ "${_op}" = "check" ]; then
337 msg "${_error}"
338 if [ -n "${DIFF_STYLE}" -a -f "${fd}" ]; then
339 diff -${DIFF_STYLE} ${DIFF_OPT} "${fd}" "${fs}"
340 fi
341 _cmpdir_rv=1
342 elif ! rm -f "${fd}" ||
343 ! cp -f "${fs}" "${fd}"; then
344 msg "Can't copy ${fs} to ${fd}"
345 _cmpdir_rv=1
346 elif ! chmod "${_mode}" "${fd}"; then
347 msg "Can't change mode of ${fd} to ${_mode}"
348 _cmpdir_rv=1
349 else
350 msg "Copied ${fs} to ${fd}"
351 fi
352 done
353 return ${_cmpdir_rv}
354 }
355
356 # compare_dir op src dest mode file ...
357 # Perform op ("check" or "fix") on files in src/ against dest/
358 # If op = "check" display missing or changed files, optionally with diffs.
359 # If op != "check" copies any missing or changed files.
360 # Returns 0 if ok, 1 otherwise.
361 #
362 compare_dir()
363 {
364 [ $# -ge 4 ] || err 3 "USAGE: compare_dir op src dest mode file ..."
365 _op="$1"
366 _src="$2"
367 _dest="$3"
368 _mode="$4"
369 shift 4
370 #_files="$@"
371
372 populate_dir "$_op" false "$_src" "$_dest" "$_mode" "$@"
373 }
374
375 # move_file op src dest --
376 # Check (op == "check") or move (op != "check") from src to dest.
377 # Returns 0 if ok, 1 otherwise.
378 #
379 move_file()
380 {
381 [ $# -eq 3 ] || err 3 "USAGE: move_file op src dest"
382 _fm_op="$1"
383 _fm_src="$2"
384 _fm_dest="$3"
385
386 if [ -f "${_fm_src}" -a ! -f "${_fm_dest}" ]; then
387 if [ "${_fm_op}" = "check" ]; then
388 msg "Move ${_fm_src} to ${_fm_dest}"
389 return 1
390 fi
391 if ! mv "${_fm_src}" "${_fm_dest}"; then
392 msg "Can't move ${_fm_src} to ${_fm_dest}"
393 return 1
394 fi
395 msg "Moved ${_fm_src} to ${_fm_dest}"
396 fi
397 return 0
398 }
399
400 # rcconf_is_set op name var [verbose] --
401 # Load the rcconf for name, and check if obsolete rc.conf(5) variable
402 # var is defined or not.
403 # Returns 0 if defined (even to ""), otherwise 1.
404 # If verbose != "", print an obsolete warning if the var is defined.
405 #
406 rcconf_is_set()
407 {
408 [ $# -ge 3 ] || err 3 "USAGE: rcconf_is_set op name var [verbose]"
409 _rcis_op="$1"
410 _rcis_name="$2"
411 _rcis_var="$3"
412 _rcis_verbose="$4"
413 _rcis_notfixed=""
414 if [ "${_rcis_op}" = "fix" ]; then
415 _rcis_notfixed="${NOT_FIXED}"
416 fi
417 (
418 for f in \
419 "${DEST_DIR}/etc/rc.conf" \
420 "${DEST_DIR}/etc/rc.conf.d/${_rcis_name}"; do
421 [ -f "${f}" ] && . "${f}"
422 done
423 eval echo -n \"\${${_rcis_var}}\" 1>&3
424 if eval "[ -n \"\${${_rcis_var}}\" \
425 -o \"\${${_rcis_var}-UNSET}\" != \"UNSET\" ]"; then
426 if [ -n "${_rcis_verbose}" ]; then
427 msg \
428 "Obsolete rc.conf(5) variable '\$${_rcis_var}' found.${_rcis_notfixed}"
429 fi
430 exit 0
431 else
432 exit 1
433 fi
434 )
435 }
436
437 # rcvar_is_enabled var
438 # Check if rcvar is enabled
439 #
440 rcvar_is_enabled()
441 {
442 [ $# -eq 1 ] || err 3 "USAGE: rcvar_is_enabled var"
443 _rcie_var="$1"
444 (
445 [ -f "${DEST_DIR}/etc/rc.conf" ] && . "${DEST_DIR}/etc/rc.conf"
446 eval _rcie_val=\"\${${_rcie_var}}\"
447 case $_rcie_val in
448 # "yes", "true", "on", or "1"
449 [Yy][Ee][Ss]|[Tt][Rr][Uu][Ee]|[Oo][Nn]|1)
450 exit 0
451 ;;
452
453 *)
454 exit 1
455 ;;
456 esac
457 )
458 }
459
460 # find_file_in_dirlist() file message dir1 ... --
461 # Find which directory file is in, and sets ${dir} to match.
462 # Returns 0 if matched, otherwise 1 (and sets ${dir} to "").
463 #
464 # Generally, check the directory for the "checking from source" case,
465 # and then the directory for the "checking from extracted etc.tgz" case.
466 #
467 find_file_in_dirlist()
468 {
469 [ $# -ge 3 ] || err 3 "USAGE: find_file_in_dirlist file msg dir1 ..."
470
471 _file="$1" ; shift
472 _msg="$1" ; shift
473 _dir1st= # first dir in list
474 for dir in "$@"; do
475 : ${_dir1st:="${dir}"}
476 if [ -f "${dir}/${_file}" ]; then
477 if [ "${_dir1st}" != "${dir}" ]; then
478 msg \
479 "(Checking for ${_msg} from ${dir} instead of ${_dir1st})"
480 fi
481 return 0
482 fi
483 done
484 msg "Can't find source directory for ${_msg}"
485 return 1
486 }
487
488 # file_exists_exact path
489 # Returns true if a file exists in the ${DEST_DIR} whose name
490 # is exactly ${path}, interpreted in a case-sensitive way
491 # even if the underlying file system is case-insensitive.
492 #
493 # The path must begin with '/' or './', and is interpreted as
494 # being relative to ${DEST_DIR}.
495 #
496 file_exists_exact()
497 {
498 [ -n "$1" ] || err 3 "USAGE: file_exists_exact path"
499 _path="${1#.}"
500 [ -h "${DEST_DIR}${_path}" ] || \
501 [ -e "${DEST_DIR}${_path}" ] || return 1
502 while [ "${_path}" != "/" -a "${_path}" != "." ] ; do
503 _dirname="$(dirname "${_path}" 2>/dev/null)"
504 _basename="$(basename "${_path}" 2>/dev/null)"
505 ls -fa "${DEST_DIR}${_dirname}" 2> /dev/null \
506 | ${GREP} -F -x "${_basename}" >/dev/null \
507 || return 1
508 _path="${_dirname}"
509 done
510 return 0
511 }
512
513 # obsolete_paths op
514 # Obsolete the list of paths provided on stdin.
515 # Each path should start with '/' or './', and
516 # will be interpreted relative to ${DEST_DIR}.
517 #
518 obsolete_paths()
519 {
520 [ -n "$1" ] || err 3 "USAGE: obsolete_paths fix|check"
521 op="$1"
522
523 failed=0
524 while read ofile; do
525 if ! ${file_exists_exact} "${ofile}"; then
526 continue
527 fi
528 ofile="${DEST_DIR}${ofile#.}"
529 cmd="rm"
530 ftype="file"
531 if [ -h "${ofile}" ]; then
532 ftype="link"
533 elif [ -d "${ofile}" ]; then
534 ftype="directory"
535 cmd="rmdir"
536 elif [ ! -e "${ofile}" ]; then
537 continue
538 fi
539 if [ "${op}" = "check" ]; then
540 msg "Remove obsolete ${ftype} ${ofile}"
541 failed=1
542 elif ! eval "${cmd} \"\${ofile}\""; then
543 msg "Can't remove obsolete ${ftype} ${ofile}"
544 failed=1
545 else
546 msg "Removed obsolete ${ftype} ${ofile}"
547 fi
548 done
549 return ${failed}
550 }
551
552 # obsolete_libs dir
553 # Display the minor/teeny shared libraries in dir that are considered
554 # to be obsolete.
555 #
556 # The implementation supports removing obsolete major libraries
557 # if the awk variable AllLibs is set, although there is no way to
558 # enable that in the enclosing shell function as this time.
559 #
560 obsolete_libs()
561 {
562 [ $# -eq 1 ] || err 3 "USAGE: obsolete_libs dir"
563 dir="$1"
564
565 _obsolete_libs "${dir}"
566 _obsolete_libs "/usr/libdata/debug/${dir}"
567 }
568
569 exclude()
570 {
571 local dollar
572 case "$1" in
573 -t)
574 dollar='$'
575 shift
576 ;;
577 *)
578 dollar=
579 ;;
580 esac
581 if [ -z "$*" ]; then
582 cat
583 else
584 eval ${GREP} -v -E "'(^$(echo $* | \
585 ${SED} -e s/\\./\\\\./g -e 's/ /'${dollar}'|^/'g)${dollar})'"
586 fi
587 }
588
589 #
590 # find all the target symlinks of shared libraries and exclude them
591 # from consideration for removal
592 #
593 exclude_libs()
594 {
595 local target="$(ls -l -d lib*.so.* 2> /dev/null \
596 | ${AWK} '{ print $11; }' \
597 | ${SED} -e 's@.*/@@' | ${SORT} -u)"
598 exclude -t ${target}
599 }
600
601 _obsolete_libs()
602 {
603 dir="$1"
604
605 (
606
607 if [ ! -e "${DEST_DIR}/${dir}" ]
608 then
609 return 0
610 fi
611
612 cd "${DEST_DIR}/${dir}" || err 2 "can't cd to ${DEST_DIR}/${dir}"
613 echo lib*.so.* \
614 | tr ' ' '\n' \
615 | ${AWK} -v LibDir="${dir}/" '
616 #{
617
618 function digit(v, c, n) { return (n <= c) ? v[n] : 0 }
619
620 function checklib(results, line, regex) {
621 if (! match(line, regex))
622 return
623 lib = substr(line, RSTART, RLENGTH)
624 rev = substr($0, RLENGTH+1)
625 if (! (lib in results)) {
626 results[lib] = rev
627 return
628 }
629 orevc = split(results[lib], orev, ".")
630 nrevc = split(rev, nrev, ".")
631 maxc = (orevc > nrevc) ? orevc : nrevc
632 for (i = 1; i <= maxc; i++) {
633 res = digit(orev, orevc, i) - digit(nrev, nrevc, i)
634 if (res < 0) {
635 print LibDir lib results[lib]
636 results[lib] = rev
637 return
638 } else if (res > 0) {
639 print LibDir lib rev
640 return
641 }
642 }
643 }
644
645 /^lib.*\.so\.[0-9]+\.[0-9]+(\.[0-9]+)?(\.debug)?$/ {
646 if (AllLibs)
647 checklib(minor, $0, "^lib.*\\.so\\.")
648 else
649 checklib(found, $0, "^lib.*\\.so\\.[0-9]+\\.")
650 }
651
652 /^lib.*\.so\.[0-9]+$/ {
653 if (AllLibs)
654 checklib(major, $0, "^lib.*\\.so\\.")
655 }
656
657 #}' | exclude_libs
658
659 )
660 }
661
662 # obsolete_stand dir
663 # Prints the names of all obsolete files and subdirs below the
664 # provided dir. dir should be something like /stand/${MACHINE}.
665 # The input dir and all output paths are interpreted
666 # relative to ${DEST_DIR}.
667 #
668 # Assumes that the numerically largest subdir is current, and all
669 # others are obsolete.
670 #
671 obsolete_stand()
672 {
673 [ $# -eq 1 ] || err 3 "USAGE: obsolete_stand dir"
674 local dir="$1"
675 local subdir
676
677 if ! [ -d "${DEST_DIR}${dir}" ]; then
678 msg "${DEST_DIR}${dir} doesn't exist; can't check for obsolete files"
679 return 1
680 fi
681
682 ( cd "${DEST_DIR}${dir}" && ls -1d [0-9]*[0-9]/. ) \
683 | ${GREP} -v '[^0-9./]' \
684 | sort -t. -r -n -k1,1 -k2,2 -k3,3 \
685 | tail -n +2 \
686 | while read subdir ; do
687 subdir="${subdir%/.}"
688 find "${DEST_DIR}${dir}/${subdir}" -depth -print
689 done \
690 | unprefix "${DEST_DIR}"
691 }
692
693 # modify_file op srcfile scratchfile awkprog
694 # Apply awkprog to srcfile sending output to scratchfile, and
695 # if appropriate replace srcfile with scratchfile.
696 #
697 modify_file()
698 {
699 [ $# -eq 4 ] || err 3 "USAGE: modify_file op file scratch awkprog"
700
701 _mfop="$1"
702 _mffile="$2"
703 _mfscratch="$3"
704 _mfprog="$4"
705 _mffailed=0
706
707 ${AWK} "${_mfprog}" < "${_mffile}" > "${_mfscratch}"
708 if ! cmp -s "${_mffile}" "${_mfscratch}"; then
709 diff "${_mffile}" "${_mfscratch}" > "${_mfscratch}.diffs"
710 if [ "${_mfop}" = "check" ]; then
711 msg "${_mffile} needs the following changes:"
712 _mffailed=1
713 elif ! rm -f "${_mffile}" ||
714 ! cp -f "${_mfscratch}" "${_mffile}"; then
715 msg "${_mffile} changes not applied:"
716 _mffailed=1
717 else
718 msg "${_mffile} changes applied:"
719 fi
720 while read _line; do
721 msg " ${_line}"
722 done < "${_mfscratch}.diffs"
723 fi
724 return ${_mffailed}
725 }
726
727
728 # contents_owner op directory user group
729 # Make sure directory and contents are owned (and group-owned)
730 # as specified.
731 #
732 contents_owner()
733 {
734 [ $# -eq 4 ] || err 3 "USAGE: contents_owner op dir user group"
735
736 _op="$1"
737 _dir="$2"
738 _user="$3"
739 _grp="$4"
740
741 if [ "${_op}" = "check" ]; then
742 _files=$(find "${_dir}" \( \( ! -user "${_user}" \) -o \
743 \( ! -group "${_grp}" \) \) )
744 _error=$?
745 if [ ! -z "$_files" ] || [ $_error != 0 ]; then
746 msg "${_dir} and contents not all owned by" \
747 "${_user}:${_grp}"
748 return 1
749 else
750 return 0
751 fi
752 elif [ "${_op}" = "fix" ]; then
753 find "${_dir}" \( \( ! -user "${_user}" \) -o \
754 \( ! -group "${_grp}" \) \) \
755 -exec chown "${_user}:${_grp}" -- {} \;
756 fi
757 }
758
759 # get_makevar var ...
760 # Retrieve the value of a user-settable system make variable
761 get_makevar()
762 {
763 $SOURCEMODE || err 3 "get_makevar must be used in source mode"
764 [ $# -eq 0 ] && err 3 "USAGE: get_makevar var ..."
765
766 for _var in "$@"; do
767 _value="$(echo '.include <bsd.own.mk>' | \
768 ${MAKE} -f - -V "\${${_var}}")"
769
770 eval ${_var}=\"\${_value}\"
771 done
772 }
773
774 # detect_x11
775 # Detect if X11 components should be analysed and set values of
776 # relevant variables.
777 detect_x11()
778 {
779 if $SOURCEMODE; then
780 get_makevar MKX11 X11ROOTDIR X11SRCDIR
781 else
782 if [ -f "${SRC_DIR}/etc/mtree/set.xetc" ]; then
783 MKX11=yes
784 X11ROOTDIR=/this/value/isnt/used/yet
785 else
786 MKX11=no
787 X11ROOTDIR=
788 fi
789 X11SRCDIR=/nonexistent/xsrc
790 fi
791 }
792
793 #
794 # find out where MAKEDEV lives, set MAKEDEV_DIR appropriately
795 #
796 find_makedev()
797 {
798 if [ -e "${DEST_DIR}/dev/MAKEDEV" ]; then
799 MAKEDEV_DIR="${DEST_DIR}/dev"
800 elif [ -e "${DEST_DIR}/etc/MAKEDEV" ]; then
801 MAKEDEV_DIR="${DEST_DIR}/etc"
802 else
803 MAKEDEV_DIR="${DEST_DIR}/dev"
804 fi
805 }
806
807
808 #
809 # items
810 # -----
811 #
812 # NOTE: Keep these items sorted, except for obsolete* which are listed last.
813 #
814
815 #
816 # atf
817 #
818
819 handle_atf_user()
820 {
821 local op="$1"
822 local failed=0
823
824 local conf="${DEST_DIR}/etc/atf/common.conf"
825 if grep '[^#]*unprivileged-user[ \t]*=.*_atf' "${conf}" >/dev/null
826 then
827 if [ "$1" = "fix" ]; then
828 ${SED} -e \
829 "/[^#]*unprivileged-user[\ t]*=/s/_atf/_tests/" \
830 "${conf}" >"${conf}.new"
831 failed=$(( ${failed} + $? ))
832 mv "${conf}.new" "${conf}"
833 failed=$(( ${failed} + $? ))
834 msg "Set unprivileged-user=_tests in ${conf}"
835 else
836 msg "unprivileged-user=_atf in ${conf} should be" \
837 "unprivileged-user=_tests"
838 failed=1
839 fi
840 fi
841
842 return ${failed}
843 }
844
845 additem atf "install missing atf configuration files and validate them"
846 do_atf()
847 {
848 [ -n "$1" ] || err 3 "USAGE: do_atf fix|check"
849 op="$1"
850 failed=0
851
852 # Ensure atf configuration files are in place.
853 if find_file_in_dirlist NetBSD.conf "NetBSD.conf" \
854 "${SRC_DIR}/external/bsd/atf/etc/atf" \
855 "${SRC_DIR}/etc/atf"; then
856 # ${dir} is set by find_file_in_dirlist()
857 populate_dir "${op}" true "${dir}" "${DEST_DIR}/etc/atf" 644 \
858 NetBSD.conf common.conf || failed=1
859 else
860 failed=1
861 fi
862 if find_file_in_dirlist atf-run.hooks "atf-run.hooks" \
863 "${SRC_DIR}/external/bsd/atf/dist/tools/sample" \
864 "${SRC_DIR}/etc/atf"; then
865 # ${dir} is set by find_file_in_dirlist()
866 populate_dir "${op}" true "${dir}" "${DEST_DIR}/etc/atf" 644 \
867 atf-run.hooks || failed=1
868 else
869 failed=1
870 fi
871
872 # Validate the _atf to _tests user/group renaming.
873 if [ -f "${DEST_DIR}/etc/atf/common.conf" ]; then
874 handle_atf_user "${op}" || failed=1
875 else
876 failed=1
877 fi
878
879 return ${failed}
880 }
881
882
883 #
884 # autofsconfig
885 #
886
887 additem autofsconfig "automounter configuration files"
888 do_autofsconfig()
889 {
890 [ -n "$1" ] || err 3 "USAGE: do_autofsconfig fix|check"
891 local autofs_files="
892 include_ldap
893 include_nis
894 special_hosts
895 special_media
896 special_noauto
897 special_null
898 "
899 op="$1"
900 failed=0
901 if [ "$op" = "fix" ]; then
902 mkdir -p "${DEST_DIR}/etc/autofs"
903 fi
904 failed=$(( ${failed} + $? ))
905 populate_dir "$op" true "${SRC_DIR}/etc" \
906 "${DEST_DIR}/etc" \
907 644 \
908 auto_master
909 failed=$(( ${failed} + $? ))
910 populate_dir "$op" true "${SRC_DIR}/etc/autofs" \
911 "${DEST_DIR}/etc/autofs" \
912 644 \
913 ${autofs_files}
914 return ${failed}
915 }
916
917
918 #
919 # blocklist
920 #
921
922 fixblock()
923 {
924 local op="$1"
925 local target="${DEST_DIR}$2"
926
927 if [ ! -f "${target}" ]; then
928 continue
929 fi
930
931 if ${GREP} '[bB]lack' "${target}" > /dev/null; then
932 if [ "$1" = "check" ]; then
933 msg "Fix old configuration file(s)."
934 return 1
935 else
936 local p=$(${STAT} -f %Lp "${target}")
937 chmod u+w "${target}" || return 1
938 if [ "$2" = "/etc/npf.conf" ]; then
939 ${SED} -i -e 's/"blacklistd"/"blocklistd"/g' "${target}"
940 else
941 ${SED} -i -e 's/\([bB]\)lacklist/\1locklist/g' "${target}"
942 fi
943 chmod "${p}" "${target}"
944 fi
945 fi
946 }
947
948 additem blocklist "rename old files to blocklist"
949 do_blocklist()
950 {
951 [ -n "$1" ] || err 3 "USAGE: do_blocklist fix|check"
952 local op="$1"
953
954 # if we are actually using blocklistd
955 for i in /var/db/blacklist.db /etc/blacklistd.conf; do
956 local old="${DEST_DIR}${i}"
957 if [ ! -f "${old}" ]; then
958 continue
959 elif [ "$1" = "check" ]; then
960 msg "Rename old file(s)."
961 return 1
962 fi
963 local new=$(echo "${old}" | ${SED} s/black/block/)
964 mv "${old}" "${new}" || return 1
965 done
966
967 for i in /etc/rc.conf /etc/npf.conf /etc/blocklistd.conf \
968 /etc/defaults/rc.conf; do
969 fixblock "${op}" "${i}" || return 1
970 done
971 }
972
973
974 #
975 # bluetooth
976 #
977
978 additem bluetooth "Bluetooth configuration is up to date"
979 do_bluetooth()
980 {
981 [ -n "$1" ] || err 3 "USAGE: do_bluetooth fix|check"
982 op="$1"
983 failed=0
984
985 populate_dir "${op}" true \
986 "${SRC_DIR}/etc/bluetooth" "${DEST_DIR}/etc/bluetooth" 644 \
987 hosts protocols btattach.conf btdevctl.conf
988 failed=$(( ${failed} + $? ))
989
990 move_file "${op}" "${DEST_DIR}/var/db/btdev.xml" \
991 "${DEST_DIR}/var/db/btdevctl.plist"
992 failed=$(( ${failed} + $? ))
993
994 notfixed=""
995 if [ "${op}" = "fix" ]; then
996 notfixed="${NOT_FIXED}"
997 fi
998 for _v in btattach btconfig btdevctl; do
999 if rcvar_is_enabled "${_v}"; then
1000 msg \
1001 "${_v} is obsolete in rc.conf(5)${notfixed}: use bluetooth=YES"
1002 failed=$(( ${failed} + 1 ))
1003 fi
1004 done
1005
1006 return ${failed}
1007 }
1008
1009
1010 #
1011 # catpages
1012 #
1013
1014 obsolete_catpages()
1015 {
1016 basedir="$2"
1017 section="$3"
1018 mandir="${basedir}/man${section}"
1019 catdir="${basedir}/cat${section}"
1020 test -d "$mandir" || return 0
1021 test -d "$catdir" || return 0
1022 (cd "$mandir" && find . -type f) | {
1023 failed=0
1024 while read manpage; do
1025 manpage="${manpage#./}"
1026 case "$manpage" in
1027 *.Z)
1028 catname="$catdir/${manpage%.*.Z}.0"
1029 ;;
1030 *.gz)
1031 catname="$catdir/${manpage%.*.gz}.0"
1032 ;;
1033 *)
1034 catname="$catdir/${manpage%.*}.0"
1035 ;;
1036 esac
1037 test -e "$catname" -a "$catname" -ot "$mandir/$manpage" || continue
1038 if [ "$1" = "fix" ]; then
1039 rm "$catname"
1040 failed=$(( ${failed} + $? ))
1041 msg "Removed obsolete cat page $catname"
1042 else
1043 msg "Obsolete cat page $catname"
1044 failed=1
1045 fi
1046 done
1047 exit $failed
1048 }
1049 }
1050
1051 additem catpages "remove outdated cat pages"
1052 do_catpages()
1053 {
1054 failed=0
1055 for manbase in /usr/share/man /usr/X11R6/man /usr/X11R7/man; do
1056 for sec in 1 2 3 4 5 6 7 8 9; do
1057 obsolete_catpages "$1" "${DEST_DIR}${manbase}" "${sec}"
1058 failed=$(( ${failed} + $? ))
1059 if [ "$1" = "fix" ]; then
1060 rmdir "${DEST_DIR}${manbase}/cat${sec}"/* \
1061 2>/dev/null
1062 rmdir "${DEST_DIR}${manbase}/cat${sec}" \
1063 2>/dev/null
1064 fi
1065 done
1066 done
1067 return $failed
1068 }
1069
1070
1071 #
1072 # ddbonpanic
1073 #
1074
1075 additem ddbonpanic "verify ddb.onpanic is configured in sysctl.conf"
1076 do_ddbonpanic()
1077 {
1078 [ -n "$1" ] || err 3 "USAGE: do_ddbonpanic fix|check"
1079
1080 if ${GREP} -E '^#*[[:space:]]*ddb\.onpanic[[:space:]]*\??=[[:space:]]*[[:digit:]]+' \
1081 "${DEST_DIR}/etc/sysctl.conf" >/dev/null 2>&1
1082 then
1083 result=0
1084 else
1085 if [ "$1" = check ]; then
1086 msg \
1087 "The ddb.onpanic behaviour is not explicitly specified in /etc/sysctl.conf"
1088 result=1
1089 else
1090 echo >> "${DEST_DIR}/etc/sysctl.conf"
1091 ${SED} < "${SRC_DIR}/etc/sysctl.conf" \
1092 -e '/^ddb\.onpanic/q' | \
1093 ${SED} -e '1,/^$/d' >> \
1094 "${DEST_DIR}/etc/sysctl.conf"
1095 result=$?
1096 fi
1097 fi
1098 return ${result}
1099 }
1100
1101
1102 #
1103 # defaults
1104 #
1105
1106 additem defaults "/etc/defaults/ being up to date"
1107 do_defaults()
1108 {
1109 [ -n "$1" ] || err 3 "USAGE: do_defaults fix|check"
1110 local op="$1"
1111 local failed=0
1112 local etcsets=$(getetcsets)
1113
1114 local rc_exclude_scripts=""
1115 if $SOURCEMODE; then
1116 # For most architectures rc.conf(5) should be the same as the
1117 # one obtained from a source directory, except for the ones
1118 # that have an append file for it.
1119 local rc_conf_app="${SRC_DIR}/etc/etc.${MACHINE}/rc.conf.append"
1120 if [ -f "${rc_conf_app}" ]; then
1121 rc_exclude_scripts="rc.conf"
1122
1123 # Generate and compare the correct rc.conf(5) file
1124 mkdir "${SCRATCHDIR}/defaults"
1125
1126 cat "${SRC_DIR}/etc/defaults/rc.conf" "${rc_conf_app}" \
1127 > "${SCRATCHDIR}/defaults/rc.conf"
1128
1129 compare_dir "${op}" "${SCRATCHDIR}/defaults" \
1130 "${DEST_DIR}/etc/defaults" \
1131 444 \
1132 "rc.conf"
1133 failed=$(( ${failed} + $? ))
1134 fi
1135 fi
1136
1137 find_file_in_dirlist pf.boot.conf "pf.boot.conf" \
1138 "${SRC_DIR}/usr.sbin/pf/etc/defaults" "${SRC_DIR}/etc/defaults" \
1139 || return 1
1140 # ${dir} is set by find_file_in_dirlist()
1141 compare_dir "$op" "${dir}" "${DEST_DIR}/etc/defaults" 444 pf.boot.conf
1142 failed=$(( ${failed} + $? ))
1143
1144 rc_exclude_scripts="${rc_exclude_scripts} pf.boot.conf"
1145
1146 local rc_default_conf_files="$(select_set_files /etc/defaults/ \
1147 "/etc/defaults/\([^[:space:]]*\.conf\)" ${etcsets} | \
1148 exclude ${rc_exclude_scripts})"
1149 compare_dir "$op" "${SRC_DIR}/etc/defaults" "${DEST_DIR}/etc/defaults" \
1150 444 \
1151 ${rc_default_conf_files}
1152 failed=$(( ${failed} + $? ))
1153
1154
1155 return ${failed}
1156 }
1157
1158
1159 #
1160 # dhcpcd
1161 #
1162
1163 additem dhcpcd "dhcpcd configuration is up to date"
1164 do_dhcpcd()
1165 {
1166 [ -n "$1" ] || err 3 "USAGE: do_dhcpcd fix|check"
1167 op="$1"
1168 failed=0
1169
1170 find_file_in_dirlist dhcpcd.conf "dhcpcd.conf" \
1171 "${SRC_DIR}/external/bsd/dhcpcd/dist/src" \
1172 "${SRC_DIR}/etc" || return 1
1173 # ${dir} is set by find_file_in_dirlist()
1174 populate_dir "$op" true "${dir}" "${DEST_DIR}/etc" 644 dhcpcd.conf
1175 failed=$(( ${failed} + $? ))
1176
1177 check_dir "${op}" "${DEST_DIR}/var/db/dhcpcd" 755
1178 failed=$(( ${failed} + $? ))
1179
1180 move_file "${op}" \
1181 "${DEST_DIR}/etc/dhcpcd.duid" \
1182 "${DEST_DIR}/var/db/dhcpcd/duid"
1183 failed=$(( ${failed} + $? ))
1184
1185 move_file "${op}" \
1186 "${DEST_DIR}/etc/dhcpcd.secret" \
1187 "${DEST_DIR}/var/db/dhcpcd/secret"
1188 failed=$(( ${failed} + $? ))
1189
1190 move_file "${op}" \
1191 "${DEST_DIR}/var/db/dhcpcd-rdm.monotonic" \
1192 "${DEST_DIR}/var/db/dhcpcd/rdm_monotonic"
1193 failed=$(( ${failed} + $? ))
1194
1195 for lease in "${DEST_DIR}/var/db/dhcpcd-"*.lease*; do
1196 [ -f "${lease}" ] || continue
1197 new_lease=$(basename "${lease}" | ${SED} -e 's/dhcpcd-//')
1198 new_lease="${DEST_DIR}/var/db/dhcpcd/${new_lease}"
1199 move_file "${op}" "${lease}" "${new_lease}"
1200 failed=$(( ${failed} + $? ))
1201 done
1202
1203 chroot_dir="${DEST_DIR}/var/chroot/dhcpcd"
1204 move_file "${op}" \
1205 "${chroot_dir}/var/db/dhcpcd/duid" \
1206 "${DEST_DIR}/var/db/dhcpcd/duid"
1207 failed=$(( ${failed} + $? ))
1208
1209 move_file "${op}" \
1210 "${chroot_dir}/var/db/dhcpcd/secret" \
1211 "${DEST_DIR}/var/db/dhcpcd/secret"
1212 failed=$(( ${failed} + $? ))
1213
1214 move_file "${op}" \
1215 "${chroot_dir}/var/db/dhcpcd/rdm_monotonic" \
1216 "${DEST_DIR}/var/db/dhcpcd/rdm_monotonic"
1217 failed=$(( ${failed} + $? ))
1218
1219 for lease in "${chroot_dir}/var/db/dhcpcd/"*.lease*; do
1220 [ -f "${lease}" ] || continue
1221 new_lease="${DEST_DIR}/var/db/dhcpcd/$(basename ${lease})"
1222 move_file "${op}" "${lease}" "${new_lease}"
1223 failed=$(( ${failed} + $? ))
1224 done
1225
1226 # Ensure chroot is now empty
1227 for dir in \
1228 $(find ${chroot_dir} ! -type d) \
1229 $(find ${chroot_dir} -type d -mindepth 1 | sort -r)
1230 do
1231 echo "/var/chroot/dhcpcd${dir##${chroot_dir}}"
1232 done | obsolete_paths "${op}"
1233 failed=$(( ${failed} + $? ))
1234
1235 contents_owner "${op}" "${DEST_DIR}/var/db/dhcpcd" root wheel
1236 failed=$(( ${failed} + $? ))
1237
1238 return ${failed}
1239 }
1240
1241
1242 #
1243 # dhcpcdrundir
1244 #
1245
1246 additem dhcpcdrundir "accidentally created /@RUNDIR@ does not exist"
1247 do_dhcpcdrundir()
1248 {
1249 [ -n "$1" ] || err 3 "USAGE: do_dhcpcdrundir fix|check"
1250 op="$1"
1251 failed=0
1252
1253 if [ -d "${DEST_DIR}/@RUNDIR@" ]; then
1254 if [ "${op}" = "check" ]; then
1255 msg "Remove erroneously created /@RUNDIR@"
1256 failed=1
1257 elif ! rm -r "${DEST_DIR}/@RUNDIR@"; then
1258 msg "Failed to remove ${DEST_DIR}/@RUNDIR@"
1259 failed=1
1260 else
1261 msg "Removed erroneously created ${DEST_DIR}/@RUNDIR@"
1262 fi
1263 fi
1264 return ${failed}
1265 }
1266
1267
1268 #
1269 # envsys
1270 #
1271
1272 additem envsys "envsys configuration is up to date"
1273 do_envsys()
1274 {
1275 [ -n "$1" ] || err 3 "USAGE: do_envsys fix|check"
1276 local op="$1"
1277 local failed=0
1278 local etcsets=$(getetcsets)
1279
1280 populate_dir "$op" true "${SRC_DIR}/etc" "${DEST_DIR}/etc" 644 \
1281 envsys.conf
1282 failed=$(( ${failed} + $? ))
1283
1284 local powerd_scripts="$(select_set_files /etc/powerd/scripts/ \
1285 "/etc/powerd/scripts/\([^[:space:]/]*\)" ${etcsets})"
1286
1287 populate_dir "$op" true "${SRC_DIR}/etc/powerd/scripts" \
1288 "${DEST_DIR}/etc/powerd/scripts" \
1289 555 \
1290 ${powerd_scripts}
1291 failed=$(( ${failed} + $? ))
1292
1293 return ${failed}
1294 }
1295
1296
1297 #
1298 # fontconfig
1299 #
1300
1301 additem fontconfig "X11 font configuration is up to date"
1302 do_fontconfig()
1303 {
1304 [ -n "$1" ] || err 3 "USAGE: do_fontconfig fix|check"
1305 op="$1"
1306 failed=0
1307
1308 # First, check for updates we can handle.
1309 if ! $SOURCEMODE; then
1310 FONTCONFIG_DIR="${SRC_DIR}/etc/fonts/conf.avail"
1311 else
1312 FONTCONFIG_DIR="${XSRC_DIR}/external/mit/fontconfig/dist/conf.d"
1313 fi
1314
1315 if [ ! -d "${FONTCONFIG_DIR}" ]; then
1316 msg "${FONTCONFIG_DIR} is not a directory; skipping check"
1317 return 0
1318 fi
1319 local regular_fonts="
1320 10-autohint.conf
1321 10-scale-bitmap-fonts.conf
1322 10-sub-pixel-bgr.conf
1323 10-sub-pixel-none.conf
1324 10-sub-pixel-rgb.conf
1325 10-sub-pixel-vbgr.conf
1326 10-sub-pixel-vrgb.conf
1327 10-unhinted.conf
1328 11-lcdfilter-default.conf
1329 11-lcdfilter-legacy.conf
1330 11-lcdfilter-light.conf
1331 20-unhint-small-vera.conf
1332 25-unhint-nonlatin.conf
1333 30-metric-aliases.conf
1334 40-nonlatin.conf
1335 45-generic.conf
1336 45-latin.conf
1337 49-sansserif.conf
1338 50-user.conf
1339 51-local.conf
1340 60-generic.conf
1341 60-latin.conf
1342 65-fonts-persian.conf
1343 65-khmer.conf
1344 65-nonlatin.conf
1345 69-unifont.conf
1346 70-no-bitmaps.conf
1347 70-yes-bitmaps.conf
1348 80-delicious.conf
1349 90-synthetic.conf
1350 "
1351 populate_dir "$op" false "${FONTCONFIG_DIR}" \
1352 "${DEST_DIR}/etc/fonts/conf.avail" \
1353 444 \
1354 ${regular_fonts}
1355 failed=$(( ${failed} + $? ))
1356
1357 if ! $SOURCEMODE; then
1358 FONTS_DIR="${SRC_DIR}/etc/fonts"
1359 else
1360 FONTS_DIR="${SRC_DIR}/external/mit/xorg/lib/fontconfig/etc"
1361 fi
1362
1363 populate_dir "$op" false "${FONTS_DIR}" "${DEST_DIR}/etc/fonts" 444 \
1364 fonts.conf
1365 failed=$(( ${failed} + $? ))
1366
1367 # We can't modify conf.d easily; someone might have removed a file.
1368
1369 # Look for old files that need to be deleted.
1370 obsolete_fonts="
1371 10-autohint.conf
1372 10-no-sub-pixel.conf
1373 10-sub-pixel-bgr.conf
1374 10-sub-pixel-rgb.conf
1375 10-sub-pixel-vbgr.conf
1376 10-sub-pixel-vrgb.conf
1377 10-unhinted.conf
1378 25-unhint-nonlatin.conf
1379 65-khmer.conf
1380 70-no-bitmaps.conf
1381 70-yes-bitmaps.conf
1382 "
1383 failed_fonts=""
1384 for i in ${obsolete_fonts}; do
1385 if [ -f "${DEST_DIR}/etc/fonts/conf.d/$i" ]; then
1386 conf_d_failed=1
1387 failed_fonts="$failed_fonts $i"
1388 fi
1389 done
1390
1391 if [ -n "$failed_fonts" ]; then
1392 msg \
1393 "Broken fontconfig configuration found; please delete these files:"
1394 msg "[$failed_fonts]"
1395 failed=$(( ${failed} + 1 ))
1396 fi
1397
1398 return ${failed}
1399 }
1400
1401
1402 #
1403 # gid
1404 #
1405
1406 additem gid "required groups in /etc/group"
1407 do_gid()
1408 {
1409 [ -n "$1" ] || err 3 "USAGE: do_gid fix|check"
1410
1411 check_ids "$1" groups "${DEST_DIR}/etc/group" \
1412 "${SRC_DIR}/etc/group" 14 \
1413 named ntpd sshd SKIP _pflogd _rwhod staff _proxy _timedc \
1414 _sdpd _httpd _mdnsd _tests _tcpdump _tss _gpio _rtadvd SKIP \
1415 _unbound _nsd nvmm _dhcpcd
1416 }
1417
1418
1419 #
1420 # gpio
1421 #
1422
1423 additem gpio "gpio configuration is up to date"
1424 do_gpio()
1425 {
1426 [ -n "$1" ] || err 3 "USAGE: do_gpio fix|check"
1427 op="$1"
1428 failed=0
1429
1430 populate_dir "$op" true "${SRC_DIR}/etc" "${DEST_DIR}/etc" 644 \
1431 gpio.conf
1432 failed=$(( ${failed} + $? ))
1433
1434 return ${failed}
1435 }
1436
1437
1438 #
1439 # hosts
1440 #
1441
1442 additem hosts "/etc/hosts being up to date"
1443 do_hosts()
1444 {
1445 [ -n "$1" ] || err 3 "USAGE: do_hosts fix|check"
1446
1447 modify_file "$1" "${DEST_DIR}/etc/hosts" "${SCRATCHDIR}/hosts" '
1448 /^(127\.0\.0\.1|::1)[ ]+[^\.]*$/ {
1449 print $0, "localhost."
1450 next
1451 }
1452 { print }
1453 '
1454 return $?
1455 }
1456
1457
1458 #
1459 # iscsi
1460 #
1461
1462 additem iscsi "/etc/iscsi is populated"
1463 do_iscsi()
1464 {
1465 [ -n "$1" ] || err 3 "USAGE: do_iscsi fix|check"
1466
1467 populate_dir "${op}" true \
1468 "${SRC_DIR}/etc/iscsi" "${DEST_DIR}/etc/iscsi" 600 auths
1469 populate_dir "${op}" true \
1470 "${SRC_DIR}/etc/iscsi" "${DEST_DIR}/etc/iscsi" 644 targets
1471 return $?
1472 }
1473
1474
1475 #
1476 # mailerconf
1477 #
1478
1479 adddisableditem mailerconf "update /etc/mailer.conf after sendmail removal"
1480 do_mailerconf()
1481 {
1482 [ -n "$1" ] || err 3 "USAGE: do_mailterconf fix|check"
1483 op="$1"
1484
1485 failed=0
1486 mta_path="$(${AWK} '/^sendmail[ \t]/{print$2}' \
1487 "${DEST_DIR}/etc/mailer.conf")"
1488 old_sendmail_path="/usr/libexec/sendmail/sendmail"
1489 if [ "${mta_path}" = "${old_sendmail_path}" ]; then
1490 if [ "$op" = check ]; then
1491 msg "mailer.conf points to obsolete ${old_sendmail_path}"
1492 failed=1;
1493 else
1494 populate_dir "${op}" false \
1495 "${SRC_DIR}/etc" "${DEST_DIR}/etc" 644 mailer.conf
1496 failed=$?
1497 fi
1498 fi
1499
1500 return ${failed}
1501 }
1502
1503
1504 #
1505 # makedev
1506 #
1507
1508 additem makedev "/dev/MAKEDEV being up to date"
1509 do_makedev()
1510 {
1511 [ -n "$1" ] || err 3 "USAGE: do_makedev fix|check"
1512 failed=0
1513
1514 if [ -f "${SRC_DIR}/etc/MAKEDEV.tmpl" ]; then
1515 # generate MAKEDEV from source if source is available
1516 env MACHINE="${MACHINE}" \
1517 MACHINE_ARCH="${MACHINE_ARCH}" \
1518 NETBSDSRCDIR="${SRC_DIR}" \
1519 ${AWK} -f "${SRC_DIR}/etc/MAKEDEV.awk" \
1520 "${SRC_DIR}/etc/MAKEDEV.tmpl" > "${SCRATCHDIR}/MAKEDEV"
1521 fi
1522
1523 find_file_in_dirlist MAKEDEV "MAKEDEV" \
1524 "${SCRATCHDIR}" "${SRC_DIR}/dev" \
1525 || return 1
1526 # ${dir} is set by find_file_in_dirlist()
1527 find_makedev
1528 compare_dir "$1" "${dir}" "${MAKEDEV_DIR}" 555 MAKEDEV
1529 failed=$(( ${failed} + $? ))
1530
1531 find_file_in_dirlist MAKEDEV.local "MAKEDEV.local" \
1532 "${SRC_DIR}/etc" "${SRC_DIR}/dev" \
1533 || return 1
1534 # ${dir} is set by find_file_in_dirlist()
1535 compare_dir "$1" "${dir}" "${DEST_DIR}/dev" 555 MAKEDEV.local
1536 failed=$(( ${failed} + $? ))
1537
1538 return ${failed}
1539 }
1540
1541
1542 #
1543 # man.conf
1544 #
1545
1546 additem manconf "check for a mandoc usage in /etc/man.conf"
1547 do_manconf()
1548 {
1549 [ -n "$1" ] || err 3 "USAGE: do_manconf fix|check"
1550 op="$1"
1551 failed=0
1552
1553 [ -f "${DEST_DIR}/etc/man.conf" ] || return 0
1554 if ${GREP} -w "mandoc" "${DEST_DIR}/etc/man.conf" >/dev/null 2>&1;
1555 then
1556 failed=0;
1557 else
1558 failed=1
1559 notfixed=""
1560 if [ "${op}" = "fix" ]; then
1561 notfixed="${NOT_FIXED}"
1562 fi
1563 msg "The file /etc/man.conf has not been adapted to mandoc usage; you"
1564 msg "probably want to copy a new version over. ${notfixed}"
1565 fi
1566
1567 return ${failed}
1568 }
1569
1570
1571 #
1572 # motd
1573 #
1574
1575 additem motd "contents of motd"
1576 do_motd()
1577 {
1578 [ -n "$1" ] || err 3 "USAGE: do_motd fix|check"
1579
1580 if ${GREP} -i 'http://www.NetBSD.org/Misc/send-pr.html' \
1581 "${DEST_DIR}/etc/motd" >/dev/null 2>&1 \
1582 || ${GREP} -i 'https*://www.NetBSD.org/support/send-pr.html' \
1583 "${DEST_DIR}/etc/motd" >/dev/null 2>&1
1584 then
1585 tmp1="$(mktemp /tmp/postinstall.motd.XXXXXXXX)"
1586 tmp2="$(mktemp /tmp/postinstall.motd.XXXXXXXX)"
1587 ${SED} '1,2d' <"${SRC_DIR}/etc/motd" >"${tmp1}"
1588 ${SED} '1,2d' <"${DEST_DIR}/etc/motd" >"${tmp2}"
1589
1590 if [ "$1" = check ]; then
1591 cmp -s "${tmp1}" "${tmp2}"
1592 result=$?
1593 if [ "${result}" -ne 0 ]; then
1594 msg \
1595 "Bug reporting messages do not seem to match the installed release"
1596 fi
1597 else
1598 head -n 2 "${DEST_DIR}/etc/motd" >"${tmp1}"
1599 ${SED} '1,2d' <"${SRC_DIR}/etc/motd" >>"${tmp1}"
1600 cp "${tmp1}" "${DEST_DIR}/etc/motd"
1601 result=0
1602 fi
1603
1604 rm -f "${tmp1}" "${tmp2}"
1605 else
1606 result=0
1607 fi
1608
1609 return ${result}
1610 }
1611
1612
1613 #
1614 # mtree
1615 #
1616
1617 additem mtree "/etc/mtree/ being up to date"
1618 do_mtree()
1619 {
1620 [ -n "$1" ] || err 3 "USAGE: do_mtree fix|check"
1621 failed=0
1622
1623 compare_dir "$1" "${SRC_DIR}/etc/mtree" "${DEST_DIR}/etc/mtree" 444 special
1624 failed=$(( ${failed} + $? ))
1625
1626 if ! $SOURCEMODE; then
1627 MTREE_DIR="${SRC_DIR}/etc/mtree"
1628 else
1629 /bin/rm -rf "${SCRATCHDIR}/obj"
1630 mkdir "${SCRATCHDIR}/obj"
1631 ${MAKE} -s -C "${SRC_DIR}/etc/mtree" TOOL_AWK="${AWK}" \
1632 MAKEOBJDIR="${SCRATCHDIR}/obj" emit_dist_file > \
1633 "${SCRATCHDIR}/NetBSD.dist"
1634 MTREE_DIR="${SCRATCHDIR}"
1635 /bin/rm -rf "${SCRATCHDIR}/obj"
1636 fi
1637 compare_dir "$1" "${MTREE_DIR}" "${DEST_DIR}/etc/mtree" 444 NetBSD.dist
1638 failed=$(( ${failed} + $? ))
1639
1640 return ${failed}
1641 }
1642
1643
1644 #
1645 # named
1646 #
1647
1648 additem named "named configuration update"
1649 do_named()
1650 {
1651 [ -n "$1" ] || err 3 "USAGE: do_named fix|check"
1652 op="$1"
1653
1654 move_file "${op}" \
1655 "${DEST_DIR}/etc/namedb/named.conf" \
1656 "${DEST_DIR}/etc/named.conf"
1657
1658 compare_dir "${op}" "${SRC_DIR}/etc/namedb" "${DEST_DIR}/etc/namedb" \
1659 644 \
1660 root.cache
1661 }
1662
1663
1664 #
1665 # opensslcerts
1666 #
1667
1668 additem opensslcerts "build /etc/openssl/certs cache of HTTPS CA certificates"
1669 do_opensslcerts()
1670 {
1671 [ -n "$1" ] || err 3 "USAGE: do_opensslcerts fix|check"
1672
1673 case $1 in
1674 check) # XXX Anything to check?
1675 return 0
1676 ;;
1677 fix) # This runs openssl(1), which is not available as a
1678 # build-time tool. So for now, restrict it to running
1679 # on the installed system.
1680 case $DEST_DIR in
1681 ''|/) ;;
1682 *) msg "opensslcerts limited to DEST_DIR=/"
1683 return 1
1684 ;;
1685 esac
1686 certctl rehash
1687 return 0
1688 ;;
1689 *) err 3 "USAGE: do_opensslcerts fix|check"
1690 ;;
1691 esac
1692 }
1693
1694
1695 #
1696 # pam
1697 #
1698
1699 additem pam "/etc/pam.d is populated"
1700 do_pam()
1701 {
1702 [ -n "$1" ] || err 3 "USAGE: do_pam fix|check"
1703 op="$1"
1704 failed=0
1705
1706 populate_dir "${op}" true "${SRC_DIR}/etc/pam.d" \
1707 "${DEST_DIR}/etc/pam.d" 644 \
1708 README cron display_manager ftpd gdm imap kde login other \
1709 passwd pop3 ppp racoon rexecd rsh sshd su system telnetd \
1710 xdm xserver
1711
1712 failed=$(( ${failed} + $? ))
1713
1714 return ${failed}
1715 }
1716
1717
1718 #
1719 # periodic
1720 #
1721
1722 additem periodic "/etc/{daily,weekly,monthly,security} being up to date"
1723 do_periodic()
1724 {
1725 [ -n "$1" ] || err 3 "USAGE: do_periodic fix|check"
1726
1727 compare_dir "$1" "${SRC_DIR}/etc" "${DEST_DIR}/etc" 644 \
1728 daily weekly monthly security
1729 }
1730
1731
1732 #
1733 # pf
1734 #
1735
1736 additem pf "pf configuration being up to date"
1737 do_pf()
1738 {
1739 [ -n "$1" ] || err 3 "USAGE: do_pf fix|check"
1740 op="$1"
1741 failed=0
1742
1743 find_file_in_dirlist pf.os "pf.os" \
1744 "${SRC_DIR}/dist/pf/etc" "${SRC_DIR}/etc" \
1745 || return 1
1746 # ${dir} is set by find_file_in_dirlist()
1747 populate_dir "${op}" true \
1748 "${dir}" "${DEST_DIR}/etc" 644 \
1749 pf.conf
1750 failed=$(( ${failed} + $? ))
1751
1752 compare_dir "${op}" "${dir}" "${DEST_DIR}/etc" 444 pf.os
1753 failed=$(( ${failed} + $? ))
1754
1755 return ${failed}
1756 }
1757
1758
1759 #
1760 # ptyfsoldnodes
1761 #
1762
1763 additem ptyfsoldnodes "remove legacy device nodes when using ptyfs"
1764 do_ptyfsoldnodes()
1765 {
1766 [ -n "$1" ] || err 3 "USAGE: do_ptyfsoldnodes fix|check"
1767 _ptyfs_op="$1"
1768
1769 # Check whether ptyfs is in use
1770 failed=0;
1771 if ! ${GREP} -E "^ptyfs" "${DEST_DIR}/etc/fstab" > /dev/null; then
1772 msg "ptyfs is not in use"
1773 return 0
1774 fi
1775
1776 if [ ! -e "${DEST_DIR}/dev/pts" ]; then
1777 msg "ptyfs is not properly configured: missing /dev/pts"
1778 return 1
1779 fi
1780
1781 # Find the device major numbers for the pty master and slave
1782 # devices, by parsing the output from "MAKEDEV -s pty0".
1783 #
1784 # Output from MAKEDEV looks like this:
1785 # ./ttyp0 type=char device=netbsd,5,0 mode=666 gid=0 uid=0
1786 # ./ptyp0 type=char device=netbsd,6,0 mode=666 gid=0 uid=0
1787 #
1788 # Output from awk, used in the eval statement, looks like this:
1789 # maj_ptym=6; maj_ptys=5;
1790 #
1791 find_makedev
1792 eval "$(
1793 ${HOST_SH} "${MAKEDEV_DIR}/MAKEDEV" -s pty0 2>/dev/null \
1794 | ${AWK} '\
1795 BEGIN { before_re = ".*device=[a-zA-Z]*,"; after_re = ",.*"; }
1796 /ptyp0/ { maj_ptym = gensub(before_re, "", 1, $0);
1797 maj_ptym = gensub(after_re, "", 1, maj_ptym); }
1798 /ttyp0/ { maj_ptys = gensub(before_re, "", 1, $0);
1799 maj_ptys = gensub(after_re, "", 1, maj_ptys); }
1800 END { print "maj_ptym=" maj_ptym "; maj_ptys=" maj_ptys ";"; }
1801 '
1802 )"
1803 #msg "Major numbers are maj_ptym=${maj_ptym} maj_ptys=${maj_ptys}"
1804 if [ -z "$maj_ptym" ] || [ -z "$maj_ptys" ]; then
1805 msg "Cannot find device major numbers for pty master and slave"
1806 return 1
1807 fi
1808
1809 # look for /dev/[pt]ty[p-zP-T][0-9a-zA-Z], and check that they
1810 # have the expected device major numbers. ttyv* is typically not a
1811 # pty device, but we check it anyway.
1812 #
1813 # The "for d1" loop is intended to avoid overflowing ARG_MAX;
1814 # otherwise we could have used a single glob pattern.
1815 #
1816 # If there are no files that match a particular pattern,
1817 # then stat prints something like:
1818 # stat: /dev/[pt]tyx?: lstat: No such file or directory
1819 # and we ignore it. XXX: We also ignore other error messages.
1820 #
1821 _ptyfs_tmp="$(mktemp /tmp/postinstall.ptyfs.XXXXXXXX)"
1822 for d1 in p q r s t u v w x y z P Q R S T; do
1823 ${STAT} -f "%Hr %N" "${DEST_DIR}/dev/"[pt]ty${d1}? 2>&1
1824 done \
1825 | while read -r major node ; do
1826 case "$major" in
1827 ${maj_ptym}|${maj_ptys}) echo "$node" ;;
1828 esac
1829 done >"${_ptyfs_tmp}"
1830
1831 _desc="legacy device node"
1832 while read node; do
1833 if [ "${_ptyfs_op}" = "check" ]; then
1834 msg "Remove ${_desc} ${node}"
1835 failed=1
1836 else # "fix"
1837 if rm "${node}"; then
1838 msg "Removed ${_desc} ${node}"
1839 else
1840 warn "Failed to remove ${_desc} ${node}"
1841 failed=1
1842 fi
1843 fi
1844 done < "${_ptyfs_tmp}"
1845 rm "${_ptyfs_tmp}"
1846
1847 return ${failed}
1848 }
1849
1850
1851 #
1852 # pwd_mkdb
1853 #
1854
1855 additem pwd_mkdb "passwd database version"
1856 do_pwd_mkdb()
1857 {
1858 [ -n "$1" ] || err 3 "USAGE: do_pwd_mkdb fix|check"
1859 op="$1"
1860 failed=0
1861
1862 # XXX Ideally, we should figure out the endianness of the
1863 # target machine, and add "-E B"/"-E L" to the db(1) flags,
1864 # and "-B"/"-L" to the pwd_mkdb(8) flags if the target is not
1865 # the same as the host machine. It probably doesn't matter,
1866 # because we don't expect "postinstall fix pwd_mkdb" to be
1867 # invoked during a cross build.
1868
1869 set -- $(${DB} -q -Sb -Ub -To -N hash "${DEST_DIR}/etc/pwd.db" \
1870 'VERSION\0')
1871 case "$2" in
1872 '\001\000\000\000') return 0 ;; # version 1, little-endian
1873 '\000\000\000\001') return 0 ;; # version 1, big-endian
1874 esac
1875
1876 if [ "${op}" = "check" ]; then
1877 msg "Update format of passwd database"
1878 failed=1
1879 elif ! ${PWD_MKDB} -V 1 -d "${DEST_DIR:-/}" \
1880 "${DEST_DIR}/etc/master.passwd";
1881 then
1882 msg "Can't update format of passwd database"
1883 failed=1
1884 else
1885 msg "Updated format of passwd database"
1886 fi
1887
1888 return ${failed}
1889 }
1890
1891
1892 #
1893 # rc
1894 #
1895
1896 # There is no info in src/distrib or /etc/mtree which rc* files
1897 # can be overwritten unconditionally on upgrade. See PR/54741.
1898 rc_644_files="
1899 rc
1900 rc.subr
1901 rc.shutdown
1902 "
1903
1904 rc_obsolete_vars="
1905 amd amd_master
1906 btcontrol btcontrol_devices
1907 critical_filesystems critical_filesystems_beforenet
1908 mountcritlocal mountcritremote
1909 network ip6forwarding
1910 network nfsiod_flags
1911 sdpd sdpd_control
1912 sdpd sdpd_groupname
1913 sdpd sdpd_username
1914 sysctl defcorename
1915 "
1916
1917 update_rc()
1918 {
1919 local op=$1
1920 local dir=$2
1921 local name=$3
1922 local bindir=$4
1923 local rcdir=$5
1924
1925 if [ ! -x "${DEST_DIR}/${bindir}/${name}" ]; then
1926 return 0
1927 fi
1928
1929 if ! find_file_in_dirlist "${name}" "${name}" \
1930 "${rcdir}" "${SRC_DIR}/etc/rc.d"; then
1931 return 1
1932 fi
1933 populate_dir "${op}" false "${dir}" "${DEST_DIR}/etc/rc.d" 555 "${name}"
1934 return $?
1935 }
1936
1937 # select non-obsolete files in a sets file
1938 # $1: directory pattern
1939 # $2: file pattern
1940 # $3: filename
1941 select_set_files()
1942 {
1943 local qdir="$(echo $1 | ${SED} -e s@/@\\\\/@g -e s/\\./\\\\./g)"
1944 ${SED} -n -e /obsolete/d \
1945 -e "/^\.${qdir}/s@^.$2[[:space:]].*@\1@p" $3
1946 }
1947
1948 # select obsolete files in a sets file
1949 # $1: directory pattern
1950 # $2: file pattern
1951 # $3: setname
1952 select_obsolete_files()
1953 {
1954 if $SOURCEMODE; then
1955 ${SED} -n -e "/obsolete/s@\.$1$2[[:space:]].*@\1@p" \
1956 "${SRC_DIR}/distrib/sets/lists/$3/mi"
1957 return
1958 fi
1959
1960 # On upgrade builds we don't extract the "etc" set so we
1961 # try to use the source set instead. See PR/54730 for
1962 # ways to better handle this.
1963
1964 local obsolete_dir
1965
1966 if [ $3 = "etc" ] ;then
1967 obsolete_dir="${SRC_DIR}/var/db/obsolete"
1968 else
1969 obsolete_dir="${DEST_DIR}/var/db/obsolete"
1970 fi
1971 ${SED} -n -e "s@\.$1$2\$@\1@p" "${obsolete_dir}/$3"
1972 }
1973
1974 getetcsets()
1975 {
1976 if $SOURCEMODE; then
1977 echo "${SRC_DIR}/distrib/sets/lists/etc/mi"
1978 else
1979 echo "${SRC_DIR}/etc/mtree/set.etc"
1980 fi
1981 }
1982
1983 additem rc "/etc/rc* and /etc/rc.d/ being up to date"
1984 do_rc()
1985 {
1986 [ -n "$1" ] || err 3 "USAGE: do_rc fix|check"
1987 local op="$1"
1988 local failed=0
1989 local generated_scripts=""
1990 local etcsets=$(getetcsets)
1991 if [ "${MKX11}" != "no" ]; then
1992 generated_scripts="${generated_scripts} xdm xfs"
1993 fi
1994
1995 # Directories of external programs that have rc files (in bsd)
1996 local rc_external_files="blocklist nsd unbound"
1997
1998 # rc* files in /etc/
1999 # XXX: at least rc.conf and rc.local shouldn't be updated. PR/54741
2000 #local rc_644_files="$(select_set_files /etc/rc \
2001 # "/etc/\(rc[^[:space:]/]*\)" ${etcsets})"
2002
2003 # no-obsolete rc files in /etc/rc.d
2004 local rc_555_files="$(select_set_files /etc/rc.d/ \
2005 "/etc/rc\.d/\([^[:space:]]*\)" ${etcsets} | \
2006 exclude ${rc_external_files})"
2007
2008 # obsolete rc file in /etc/rc.d
2009 local rc_obsolete_files="$(select_obsolete_files /etc/rc.d/ \
2010 "\([^[:space:]]*\)" etc)"
2011
2012 compare_dir "${op}" "${SRC_DIR}/etc" "${DEST_DIR}/etc" 644 \
2013 ${rc_644_files}
2014 failed=$(( ${failed} + $? ))
2015
2016 local extra_scripts
2017 if ! $SOURCEMODE; then
2018 extra_scripts="${generated_scripts}"
2019 else
2020 extra_scripts=""
2021 fi
2022
2023 compare_dir "${op}" "${SRC_DIR}/etc/rc.d" "${DEST_DIR}/etc/rc.d" 555 \
2024 ${rc_555_files} \
2025 ${extra_scripts}
2026 failed=$(( ${failed} + $? ))
2027
2028 for i in ${rc_external_files}; do
2029 local rc_file
2030 case $i in
2031 *d) rc_file=${i};;
2032 *) rc_file=${i}d;;
2033 esac
2034
2035 update_rc "${op}" "${dir}" ${rc_file} /sbin \
2036 "${SRC_DIR}/external/bsd/$i/etc/rc.d"
2037 failed=$(( ${failed} + $? ))
2038 done
2039
2040 if $SOURCEMODE && [ -n "${generated_scripts}" ]; then
2041 # generate scripts
2042 mkdir "${SCRATCHDIR}/rc"
2043 for f in ${generated_scripts}; do
2044 ${SED} -e "s,@X11ROOTDIR@,${X11ROOTDIR},g" \
2045 < "${SRC_DIR}/etc/rc.d/${f}.in" \
2046 > "${SCRATCHDIR}/rc/${f}"
2047 done
2048 compare_dir "${op}" "${SCRATCHDIR}/rc" \
2049 "${DEST_DIR}/etc/rc.d" 555 \
2050 ${generated_scripts}
2051 failed=$(( ${failed} + $? ))
2052 fi
2053
2054 # check for obsolete rc.d files
2055 for f in ${rc_obsolete_files}; do
2056 local fd="/etc/rc.d/${f}"
2057 [ -e "${DEST_DIR}${fd}" ] && echo "${fd}"
2058 done | obsolete_paths "${op}"
2059 failed=$(( ${failed} + $? ))
2060
2061 # check for obsolete rc.conf(5) variables
2062 set -- ${rc_obsolete_vars}
2063 while [ $# -gt 1 ]; do
2064 if rcconf_is_set "${op}" "$1" "$2" 1; then
2065 failed=1
2066 fi
2067 shift 2
2068 done
2069
2070 return ${failed}
2071 }
2072
2073
2074 #
2075 # sendmail
2076 #
2077
2078 adddisableditem sendmail "remove obsolete sendmail configuration files and scripts"
2079 do_sendmail()
2080 {
2081 [ -n "$1" ] || err 3 "USAGE: do_sendmail fix|check"
2082 op="$1"
2083 failed=0
2084
2085 # Don't complain if the "sendmail" package is installed because the
2086 # files might still be in use.
2087 if /usr/sbin/pkg_info -qe sendmail >/dev/null 2>&1; then
2088 return 0
2089 fi
2090
2091 for f in /etc/mail/helpfile /etc/mail/local-host-names \
2092 /etc/mail/sendmail.cf /etc/mail/submit.cf /etc/rc.d/sendmail \
2093 /etc/rc.d/smmsp /usr/share/misc/sendmail.hf \
2094 $( ( find "${DEST_DIR}/usr/share/sendmail" -type f ; \
2095 find "${DEST_DIR}/usr/share/sendmail" -type d \
2096 ) | unprefix "${DEST_DIR}" ) \
2097 /var/log/sendmail.st \
2098 /var/spool/clientmqueue \
2099 /var/spool/mqueue
2100 do
2101 [ -e "${DEST_DIR}${f}" ] && echo "${f}"
2102 done | obsolete_paths "${op}"
2103 failed=$(( ${failed} + $? ))
2104
2105 return ${failed}
2106 }
2107
2108
2109 #
2110 # ssh
2111 #
2112
2113 additem ssh "ssh configuration update"
2114 do_ssh()
2115 {
2116 [ -n "$1" ] || err 3 "USAGE: do_ssh fix|check"
2117 op="$1"
2118
2119 failed=0
2120 _etcssh="${DEST_DIR}/etc/ssh"
2121 if ! check_dir "${op}" "${_etcssh}" 755; then
2122 failed=1
2123 fi
2124
2125 if [ ${failed} -eq 0 ]; then
2126 for f in \
2127 ssh_known_hosts ssh_known_hosts2 \
2128 ssh_host_dsa_key ssh_host_dsa_key.pub \
2129 ssh_host_rsa_key ssh_host_rsa_key.pub \
2130 ssh_host_key ssh_host_key.pub \
2131 ; do
2132 if ! move_file "${op}" \
2133 "${DEST_DIR}/etc/${f}" "${_etcssh}/${f}" ; then
2134 failed=1
2135 fi
2136 done
2137 for f in sshd.conf ssh.conf ; do
2138 # /etc/ssh/ssh{,d}.conf -> ssh{,d}_config
2139 #
2140 if ! move_file "${op}" \
2141 "${_etcssh}/${f}" "${_etcssh}/${f%.conf}_config" ;
2142 then
2143 failed=1
2144 fi
2145 # /etc/ssh{,d}.conf -> /etc/ssh/ssh{,d}_config
2146 #
2147 if ! move_file "${op}" \
2148 "${DEST_DIR}/etc/${f}" \
2149 "${_etcssh}/${f%.conf}_config" ;
2150 then
2151 failed=1
2152 fi
2153 done
2154 fi
2155
2156 sshdconf=""
2157 for f in \
2158 "${_etcssh}/sshd_config" \
2159 "${_etcssh}/sshd.conf" \
2160 "${DEST_DIR}/etc/sshd.conf" ; do
2161 if [ -f "${f}" ]; then
2162 sshdconf="${f}"
2163 break
2164 fi
2165 done
2166 if [ -n "${sshdconf}" ]; then
2167 modify_file "${op}" "${sshdconf}" "${SCRATCHDIR}/sshdconf" '
2168 /^[^#$]/ {
2169 kw = tolower($1)
2170 if (kw == "hostkey" &&
2171 $2 ~ /^\/etc\/+ssh_host(_[dr]sa)?_key$/ ) {
2172 sub(/\/etc\/+/, "/etc/ssh/")
2173 }
2174 if (kw == "rhostsauthentication" ||
2175 kw == "verifyreversemapping" ||
2176 kw == "reversemappingcheck") {
2177 sub(/^/, "# DEPRECATED:\t")
2178 }
2179 }
2180 { print }
2181 '
2182 failed=$(( ${failed} + $? ))
2183 fi
2184
2185 if ! find_file_in_dirlist moduli "moduli" \
2186 "${SRC_DIR}/crypto/external/bsd/openssh/dist" "${SRC_DIR}/etc" ; then
2187 failed=1
2188 # ${dir} is set by find_file_in_dirlist()
2189 elif ! compare_dir "${op}" "${dir}" "${DEST_DIR}/etc" 444 moduli; then
2190 failed=1
2191 fi
2192
2193 if ! check_dir "${op}" "${DEST_DIR}/var/chroot/sshd" 755 ; then
2194 failed=1
2195 fi
2196
2197 if rcconf_is_set "${op}" sshd sshd_conf_dir 1; then
2198 failed=1
2199 fi
2200
2201 return ${failed}
2202 }
2203
2204
2205 #
2206 # tcpdumpchroot
2207 #
2208
2209 additem tcpdumpchroot "remove /var/chroot/tcpdump/etc/protocols"
2210 do_tcpdumpchroot()
2211 {
2212 [ -n "$1" ] || err 3 "USAGE: do_tcpdumpchroot fix|check"
2213
2214 failed=0;
2215 if [ -r "${DEST_DIR}/var/chroot/tcpdump/etc/protocols" ]; then
2216 if [ "$1" = "fix" ]; then
2217 rm "${DEST_DIR}/var/chroot/tcpdump/etc/protocols"
2218 failed=$(( ${failed} + $? ))
2219 rmdir "${DEST_DIR}/var/chroot/tcpdump/etc"
2220 failed=$(( ${failed} + $? ))
2221 else
2222 failed=1
2223 fi
2224 fi
2225 return ${failed}
2226 }
2227
2228
2229 #
2230 # uid
2231 #
2232
2233 additem uid "required users in /etc/master.passwd"
2234 do_uid()
2235 {
2236 [ -n "$1" ] || err 3 "USAGE: do_uid fix|check"
2237
2238 check_ids "$1" users "${DEST_DIR}/etc/master.passwd" \
2239 "${SRC_DIR}/etc/master.passwd" 12 \
2240 postfix SKIP named ntpd sshd SKIP _pflogd _rwhod SKIP _proxy \
2241 _timedc _sdpd _httpd _mdnsd _tests _tcpdump _tss SKIP _rtadvd \
2242 SKIP _unbound _nsd SKIP _dhcpcd
2243 }
2244
2245
2246 #
2247 # varrwho
2248 #
2249
2250 additem varrwho "required ownership of files in /var/rwho"
2251 do_varrwho()
2252 {
2253 [ -n "$1" ] || err 3 "USAGE: do_varrwho fix|check"
2254
2255 contents_owner "$1" "${DEST_DIR}/var/rwho" _rwhod _rwhod
2256 }
2257
2258
2259 #
2260 # varshm
2261 #
2262
2263 additem varshm "check for a tmpfs mounted on /var/shm"
2264 do_varshm()
2265 {
2266 [ -n "$1" ] || err 3 "USAGE: do_varshm fix|check"
2267 op="$1"
2268 failed=0
2269
2270 [ -f "${DEST_DIR}/etc/fstab" ] || return 0
2271 if ${GREP} -E "^var_shm_symlink" "${DEST_DIR}/etc/rc.conf" >/dev/null 2>&1;
2272 then
2273 failed=0;
2274 elif ${GREP} -w "/var/shm" "${DEST_DIR}/etc/fstab" >/dev/null 2>&1;
2275 then
2276 failed=0;
2277 else
2278 if [ "${op}" = "check" ]; then
2279 failed=1
2280 msg "No /var/shm mount found in ${DEST_DIR}/etc/fstab"
2281 elif [ "${op}" = "fix" ]; then
2282 printf '\ntmpfs\t/var/shm\ttmpfs\trw,-m1777,-sram%%25\n' \
2283 >> "${DEST_DIR}/etc/fstab"
2284 msg "Added tmpfs with 25% ram limit as /var/shm"
2285
2286 fi
2287 fi
2288
2289 return ${failed}
2290 }
2291
2292
2293 #
2294 # wscons
2295 #
2296
2297 additem wscons "wscons configuration file update"
2298 do_wscons()
2299 {
2300 [ -n "$1" ] || err 3 "USAGE: do_wscons fix|check"
2301 op="$1"
2302
2303 [ -f "${DEST_DIR}/etc/wscons.conf" ] || return 0
2304
2305 failed=0
2306 notfixed=""
2307 if [ "${op}" = "fix" ]; then
2308 notfixed="${NOT_FIXED}"
2309 fi
2310 while read _type _arg1 _rest; do
2311 if [ "${_type}" = "mux" -a "${_arg1}" = "1" ]; then
2312 msg \
2313 "Obsolete wscons.conf(5) entry \""${_type} ${_arg1}"\" found.${notfixed}"
2314 failed=1
2315 fi
2316 done < "${DEST_DIR}/etc/wscons.conf"
2317
2318 return ${failed}
2319 }
2320
2321
2322 #
2323 # x11
2324 #
2325
2326 additem x11 "x11 configuration update"
2327 do_x11()
2328 {
2329 [ -n "$1" ] || err 3 "USAGE: do_x11 fix|check"
2330 op="$1"
2331
2332 failed=0
2333 _etcx11="${DEST_DIR}/etc/X11"
2334 _libx11=""
2335 if [ ! -d "${_etcx11}" ]; then
2336 msg "${_etcx11} is not a directory; skipping check"
2337 return 0
2338 fi
2339 if [ -d "${DEST_DIR}/usr/X11R6/." ]
2340 then
2341 _libx11="${DEST_DIR}/usr/X11R6/lib/X11"
2342 if [ ! -d "${_libx11}" ]; then
2343 msg "${_libx11} is not a directory; skipping check"
2344 return 0
2345 fi
2346 fi
2347
2348 _notfixed=""
2349 if [ "${op}" = "fix" ]; then
2350 _notfixed="${NOT_FIXED}"
2351 fi
2352
2353 # check if /usr/X11R6/lib/X11 needs to migrate to /etc/X11
2354 if [ -n "${_libx11}" ]; then
2355 for d in \
2356 fs lbxproxy proxymngr rstart twm xdm xinit xserver xsm \
2357 ; do
2358 sd="${_libx11}/${d}"
2359 ld="/etc/X11/${d}"
2360 td="${DEST_DIR}${ld}"
2361 if [ -h "${sd}" ]; then
2362 continue
2363 elif [ -d "${sd}" ]; then
2364 tdfiles="$(find "${td}" \! -type d)"
2365 if [ -n "${tdfiles}" ]; then
2366 msg "${sd} exists yet ${td} already" \
2367 "contains files${_notfixed}"
2368 else
2369 msg "Migrate ${sd} to ${td}${_notfixed}"
2370 fi
2371 failed=1
2372 elif [ -e "${sd}" ]; then
2373 msg "Unexpected file ${sd}${_notfixed}"
2374 continue
2375 else
2376 continue
2377 fi
2378 done
2379 fi
2380
2381 # check if xdm resources have been updated
2382 if [ -r ${_etcx11}/xdm/Xresources ] && \
2383 ! ${GREP} 'inpColor:' ${_etcx11}/xdm/Xresources > /dev/null; then
2384 msg "Update ${_etcx11}/xdm/Xresources${_notfixed}"
2385 failed=1
2386 fi
2387
2388 return ${failed}
2389 }
2390
2391
2392 #
2393 # xkb
2394 #
2395 # /usr/X11R7/lib/X11/xkb/symbols/pc used to be a directory, but changed
2396 # to a file on 2009-06-12. Fixing this requires removing the directory
2397 # (which we can do) and re-extracting the xbase set (which we can't do),
2398 # or at least adding that one file (which we may be able to do if X11SRCDIR
2399 # is available).
2400 #
2401
2402 additem xkb "clean up for xkbdata to xkeyboard-config upgrade"
2403 do_xkb()
2404 {
2405 [ -n "$1" ] || err 3 "USAGE: do_xkb fix|check"
2406 op="$1"
2407 failed=0
2408
2409 pcpath="/usr/X11R7/lib/X11/xkb/symbols/pc"
2410 pcsrcdir="${X11SRCDIR}/external/mit/xkeyboard-config/dist/symbols"
2411
2412 filemsg="\
2413 ${pcpath} was a directory, should be a file.
2414 To fix, extract the xbase set again."
2415
2416 _notfixed=""
2417 if [ "${op}" = "fix" ]; then
2418 _notfixed="${NOT_FIXED}"
2419 fi
2420
2421 if [ ! -d "${DEST_DIR}${pcpath}" ]; then
2422 return 0
2423 fi
2424
2425 # Delete obsolete files in the directory, and the directory
2426 # itself. If the directory contains unexpected extra files
2427 # then it will not be deleted.
2428 ( [ -f "${DEST_DIR}"/var/db/obsolete/xbase ] \
2429 && ${SORT} -ru "${DEST_DIR}"/var/db/obsolete/xbase \
2430 | ${GREP} -E "^\\.?${pcpath}/" ;
2431 echo "${pcpath}" ) \
2432 | obsolete_paths "${op}"
2433 failed=$(( ${failed} + $? ))
2434
2435 # If the directory was removed above, then try to replace it with
2436 # a file.
2437 if [ -d "${DEST_DIR}${pcpath}" ]; then
2438 msg "${filemsg}${_notfixed}"
2439 failed=$(( ${failed} + 1 ))
2440 else
2441 if ! find_file_in_dirlist pc "${pcpath}" \
2442 "${pcsrcdir}" "${SRC_DIR}${pcpath%/*}"
2443 then
2444 msg "${filemsg}${_notfixed}"
2445 failed=$(( ${failed} + 1 ))
2446 else
2447 # ${dir} is set by find_file_in_dirlist()
2448 populate_dir "${op}" true \
2449 "${dir}" "${DEST_DIR}${pcpath%/*}" 444 \
2450 pc
2451 failed=$(( ${failed} + $? ))
2452 fi
2453 fi
2454
2455 return $failed
2456 }
2457
2458
2459 #
2460 # obsolete_stand
2461 # obsolete_stand_debug
2462 #
2463
2464 obsolete_stand_internal()
2465 {
2466 local prefix="$1"
2467 shift
2468 [ -n "$1" ] || err 3 "USAGE: do_obsolete_stand fix|check"
2469 local op="$1"
2470 local failed=0
2471
2472 for dir in \
2473 ${prefix}/stand/${MACHINE} \
2474 ${prefix}/stand/${MACHINE}-4xx \
2475 ${prefix}/stand/${MACHINE}-booke \
2476 ${prefix}/stand/${MACHINE}-xen \
2477 ${prefix}/stand/${MACHINE}pae-xen
2478 do
2479 [ -d "${DEST_DIR}${dir}" ] && obsolete_stand "${dir}"
2480 done | obsolete_paths "${op}"
2481 failed=$(( ${failed} + $? ))
2482
2483 return ${failed}
2484 }
2485
2486 adddisableditem obsolete_stand "remove obsolete files from /stand"
2487 do_obsolete_stand()
2488 {
2489 obsolete_stand_internal "" "$@"
2490 return $?
2491 }
2492
2493 adddisableditem obsolete_stand_debug "remove obsolete files from /usr/libdata/debug/stand"
2494 do_obsolete_stand_debug()
2495 {
2496 obsolete_stand_internal "/usr/libdata/debug" "$@"
2497 return $?
2498 }
2499
2500
2501 #
2502 # obsolete
2503 #
2504 # NOTE: This item is last to allow other items to move obsolete files.
2505 #
2506
2507 listarchsubdirs()
2508 {
2509 if ! $SOURCEMODE; then
2510 echo "@ARCHSUBDIRS@"
2511 else
2512 ${SED} -n -e '/ARCHDIR_SUBDIR/s/[[:space:]]//gp' \
2513 "${SRC_DIR}/compat/archdirs.mk"
2514 fi
2515 }
2516
2517 getarchsubdirs()
2518 {
2519 local m
2520 case ${MACHINE_ARCH} in
2521 *arm*|*aarch64*) m=arm;;
2522 x86_64) m=amd64;;
2523 *) m=${MACHINE_ARCH};;
2524 esac
2525
2526 for i in $(listarchsubdirs); do
2527 echo $i
2528 done | ${SORT} -u | ${SED} -n -e "/=${m}/s@.*=${m}/\(.*\)@\1@p"
2529 }
2530
2531 getcompatlibdirs()
2532 {
2533 for i in $(getarchsubdirs); do
2534 if [ -d "${DEST_DIR}/usr/lib/$i" ]; then
2535 echo /usr/lib/$i
2536 fi
2537 done
2538 }
2539
2540 additem obsolete "remove obsolete file sets and minor libraries"
2541 do_obsolete()
2542 {
2543 [ -n "$1" ] || err 3 "USAGE: do_obsolete fix|check"
2544 op="$1"
2545 failed=0
2546
2547 ${SORT} -ru "${DEST_DIR}"/var/db/obsolete/* | obsolete_paths "${op}"
2548 failed=$(( ${failed} + $? ))
2549
2550 (
2551 obsolete_libs /lib
2552 obsolete_libs /usr/lib
2553 obsolete_libs /usr/lib/i18n
2554 obsolete_libs /usr/X11R6/lib
2555 obsolete_libs /usr/X11R7/lib
2556 for i in $(getcompatlibdirs); do
2557 obsolete_libs $i
2558 done
2559 ) | obsolete_paths "${op}"
2560 failed=$(( ${failed} + $? ))
2561
2562 return ${failed}
2563 }
2564
2565
2566 #
2567 # end of items
2568 # ------------
2569 #
2570
2571
2572 help()
2573 {
2574 cat << _USAGE_
2575 Usage: ${PROGNAME} [-a ARCH] [-d DEST_DIR] [-m MACHINE] [-s SRC_ARG] [-x XSRC_DIR] OPERATION ...
2576 ${PROGNAME} -?
2577
2578 Perform post-installation checks and/or fixes on a system's
2579 configuration files.
2580 If no items are provided, a default set of checks or fixes is applied.
2581
2582 Options:
2583 -? Display this help, and exit.
2584 -a ARCH Set \$MACHINE_ARCH to ARCH. [${MACHINE_ARCH}]
2585 -d DEST_DIR Destination directory to check. [${DEST_DIR:-/}]
2586 -m MACHINE Set \$MACHINE to MACHINE. [${MACHINE}]
2587 -s SRC_ARG Location of the source files. This may be any of
2588 the following:
2589 -s SRC_DIR A directory that contains a NetBSD
2590 source tree.
2591 -s TGZ_DIR A directory in which one or both of
2592 "etc.tgz" and "xetc.tgz" have been
2593 extracted.
2594 -s TGZ_FILE A distribution set file such as
2595 "etc.tgz" or "xetc.tgz".
2596 May be specified multipled times.
2597 [${SRC_DIR:-/usr/src}]
2598 -x XSRC_DIR Location of the X11 source files. This must be
2599 a directory that contains a NetBSD xsrc tree.
2600 [${XSRC_DIR:-/usr/src/../xsrc}]
2601
2602 Supported values for OPERATION:
2603 help Display this help, and exit.
2604 list List available items.
2605 check ITEM ... Perform post-installation checks on ITEMs.
2606 diff [-bcenpuw] ITEM ...
2607 Similar to 'check' but also output difference of files,
2608 using diff with the provided options.
2609 fix ITEM ... Apply fixes that 'check' determines need to be applied.
2610 usage Display this help, and exit.
2611 _USAGE_
2612 }
2613
2614 usage()
2615 {
2616 help 1>&2
2617 exit 2
2618 }
2619
2620
2621 list()
2622 {
2623 echo "Default set of items (to apply if no items are provided by user):"
2624 echo " Item Description"
2625 echo " ---- -----------"
2626 for i in ${defaultitems}; do
2627 eval desc=\"\${desc_${i}}\"
2628 printf " %-20s %s\n" "${i}" "${desc}"
2629 done
2630 echo "Items disabled by default (must be requested explicitly):"
2631 echo " Item Description"
2632 echo " ---- -----------"
2633 for i in ${otheritems}; do
2634 eval desc=\"\${desc_${i}}\"
2635 printf " %-20s %s\n" "${i}" "${desc}"
2636 done
2637 }
2638
2639
2640 main()
2641 {
2642 DIRMODE=false # true if "-s" specified a directory
2643 ITEMS= # items to check|diff|fix. [${defaultitems}]
2644 N_SRC_ARGS=0 # number of "-s" args in SRC_ARGLIST
2645 SOURCEMODE=false # true if "-s" specified a source directory
2646 SRC_ARGLIST= # quoted list of one or more "-s" args
2647 SRC_DIR="${SRC_ARG}" # set default value for early usage()
2648 TGZLIST= # quoted list list of tgz files
2649 TGZMODE=false # true if "-s" specifies a tgz file
2650 XSRC_DIR="${SRC_ARG}/../xsrc"
2651 XSRC_DIR_FIX=
2652
2653 case "$(uname -s)" in
2654 Darwin)
2655 # case sensitive match for case insensitive fs
2656 file_exists_exact=file_exists_exact
2657 ;;
2658 *)
2659 file_exists_exact=:
2660 ;;
2661 esac
2662
2663 # Validate options.
2664 #
2665 while getopts :a:d:m:s:x: ch; do
2666 case "${ch}" in
2667 a)
2668 MACHINE_ARCH="${OPTARG}"
2669 ;;
2670 d)
2671 DEST_DIR="${OPTARG}"
2672 ;;
2673 m)
2674 MACHINE="${OPTARG}"
2675 ;;
2676 s)
2677 qarg="$(shell_quote "${OPTARG}")"
2678 N_SRC_ARGS=$(( $N_SRC_ARGS + 1 ))
2679 SRC_ARGLIST="${SRC_ARGLIST}${SRC_ARGLIST:+ }-s ${qarg}"
2680 if [ -f "${OPTARG}" ]; then
2681 # arg refers to a *.tgz file.
2682 # This may happen twice, for both
2683 # etc.tgz and xetc.tgz, so we build up a
2684 # quoted list in TGZLIST.
2685 TGZMODE=true
2686 TGZLIST="${TGZLIST}${TGZLIST:+ }${qarg}"
2687 # Note that, when TGZMODE is true,
2688 # SRC_ARG is used only for printing
2689 # human-readable messages.
2690 SRC_ARG="${TGZLIST}"
2691 elif [ -d "${OPTARG}" ]; then
2692 # arg refers to a directory.
2693 # It might be a source directory, or a
2694 # directory where the sets have already
2695 # been extracted.
2696 DIRMODE=true
2697 SRC_ARG="${OPTARG}"
2698 if [ -f "${OPTARG}/etc/Makefile" ]; then
2699 SOURCEMODE=true
2700 fi
2701 else
2702 err 2 "Invalid argument for -s option"
2703 fi
2704 ;;
2705 x)
2706 if [ -d "${OPTARG}" ]; then
2707 # arg refers to a directory.
2708 XSRC_DIR="${OPTARG}"
2709 XSRC_DIR_FIX="-x ${OPTARG} "
2710 else
2711 err 2 "Not a directory for -x option"
2712 fi
2713 ;;
2714 "?")
2715 if [ "${OPTARG}" = "?" ]; then
2716 help
2717 return # no further processing or validation
2718 fi
2719 warn "Unknown option -${OPTARG}"
2720 usage
2721 ;;
2722
2723 :)
2724 warn "Missing argument for option -${OPTARG}"
2725 usage
2726 ;;
2727
2728 *)
2729 err 3 "Unimplemented option -${ch}"
2730 ;;
2731 esac
2732 done
2733 shift $((${OPTIND} - 1))
2734 if [ $# -eq 0 ] ; then
2735 warn "Missing operation"
2736 usage
2737 fi
2738 op="$1"
2739 shift
2740
2741 if [ "$N_SRC_ARGS" -gt 1 ] && $DIRMODE; then
2742 err 2 "Multiple -s args are allowed only with tgz files"
2743 fi
2744 if [ "$N_SRC_ARGS" -eq 0 ]; then
2745 # The default SRC_ARG was set elsewhere
2746 DIRMODE=true
2747 SOURCEMODE=true
2748 SRC_ARGLIST="-s $(shell_quote "${SRC_ARG}")"
2749 fi
2750
2751 # Validate 'diff' first, as it becomes 'check'
2752 #
2753 case "${op}" in
2754
2755 diff)
2756 op=check
2757 DIFF_STYLE=n # default style is RCS
2758 OPTIND=1
2759 while getopts :bcenpuw ch; do
2760 case "${ch}" in
2761 c|e|n|u)
2762 if [ "${DIFF_STYLE}" != "n" -a \
2763 "${DIFF_STYLE}" != "${ch}" ]; then
2764 warn "diff: conflicting output style: -${ch}"
2765 usage
2766 fi
2767 DIFF_STYLE="${ch}"
2768 ;;
2769 b|p|w)
2770 DIFF_OPT="${DIFF_OPT} -${ch}"
2771 ;;
2772 "?")
2773 # NOTE: not supporting diff -?
2774 warn "diff: Unknown option -${OPTARG}"
2775 usage
2776 ;;
2777 :)
2778 warn "diff: Missing argument for option -${OPTARG}"
2779 usage
2780 ;;
2781 *)
2782 err 3 "diff: Unimplemented option -${ch}"
2783 ;;
2784 esac
2785 done
2786 shift $((${OPTIND} - 1))
2787 ;;
2788
2789 esac
2790
2791 # Validate operation and items.
2792 #
2793 case "${op}" in
2794
2795 check|fix)
2796 ITEMS="$*"
2797 : ${ITEMS:="${defaultitems}"}
2798
2799 # ensure that all supplied items are valid
2800 #
2801 for i in ${ITEMS}; do
2802 eval desc=\"\${desc_${i}}\"
2803 [ -n "${desc}" ] || err 2 "Unsupported ${op} '"${i}"'"
2804 done
2805 ;;
2806
2807 help|usage)
2808 help
2809 return # no further processing or validation
2810 ;;
2811
2812 list)
2813 # processed below
2814 ;;
2815
2816 *)
2817 warn "Unknown operation '"${op}"'"
2818 usage
2819 ;;
2820
2821 esac
2822
2823 #
2824 # If '-s' arg or args specified tgz files, extract them
2825 # to a scratch directory.
2826 #
2827 if $TGZMODE; then
2828 ETCTGZDIR="${SCRATCHDIR}/etc.tgz"
2829 echo "Note: Creating temporary directory ${ETCTGZDIR}"
2830 if ! mkdir "${ETCTGZDIR}"; then
2831 err 2 "Can't create ${ETCTGZDIR}"
2832 fi
2833 ( # subshell to localise changes to "$@"
2834 eval "set -- ${TGZLIST}"
2835 for tgz in "$@"; do
2836 echo "Note: Extracting files from ${tgz}"
2837 cat "${tgz}" | (
2838 cd "${ETCTGZDIR}" &&
2839 tar -zxf -
2840 ) || err 2 "Can't extract ${tgz}"
2841 done
2842 )
2843 SRC_DIR="${ETCTGZDIR}"
2844 else
2845 SRC_DIR="${SRC_ARG}"
2846 fi
2847
2848 [ -d "${SRC_DIR}" ] || err 2 "${SRC_DIR} is not a directory"
2849 [ -d "${DEST_DIR}" ] || err 2 "${DEST_DIR} is not a directory"
2850 [ -n "${MACHINE}" ] || err 2 "\${MACHINE} is not defined"
2851 [ -n "${MACHINE_ARCH}" ] || err 2 "\${MACHINE_ARCH} is not defined"
2852 if ! $SOURCEMODE && ! [ -f "${SRC_DIR}/etc/mtree/set.etc" ]; then
2853 err 2 "Files from the etc.tgz set are missing"
2854 fi
2855
2856 # If directories are /, clear them, so various messages
2857 # don't have leading "//". However, this requires
2858 # the use of ${foo:-/} to display the variables.
2859 #
2860 [ "${SRC_DIR}" = "/" ] && SRC_DIR=""
2861 [ "${DEST_DIR}" = "/" ] && DEST_DIR=""
2862
2863 detect_x11
2864
2865 # Perform operation.
2866 #
2867 case "${op}" in
2868
2869 check|fix)
2870 [ -n "${ITEMS}" ] || err 2 "${op}: missing items"
2871
2872 echo "Source directory: ${SRC_DIR:-/}"
2873 if $TGZMODE; then
2874 echo " (extracted from: ${SRC_ARG})"
2875 fi
2876 echo "Target directory: ${DEST_DIR:-/}"
2877 items_passed=
2878 items_failed=
2879 for i in ${ITEMS}; do
2880 echo "${i} ${op}:"
2881 ( eval do_${i} ${op} )
2882 if [ $? -eq 0 ]; then
2883 items_passed="${items_passed} ${i}"
2884 else
2885 items_failed="${items_failed} ${i}"
2886 fi
2887 done
2888
2889 if [ "${op}" = "check" ]; then
2890 plural="checks"
2891 else
2892 plural="fixes"
2893 fi
2894
2895 echo "${PROGNAME} ${plural} passed:${items_passed}"
2896 echo "${PROGNAME} ${plural} failed:${items_failed}"
2897 if [ -n "${items_failed}" ]; then
2898 exitstatus=1;
2899 if [ "${op}" = "check" ]; then
2900 [ "$MACHINE" = "$(uname -m)" ] && m= || m=" -m $MACHINE"
2901 cat <<_Fix_me_
2902 To fix, run:
2903 ${HOST_SH} ${0} ${SRC_ARGLIST} ${XSRC_DIR_FIX}-d ${DEST_DIR:-/}$m fix${items_failed}
2904 Note that this may overwrite local changes.
2905 _Fix_me_
2906 fi
2907 fi
2908 ;;
2909
2910 list)
2911 echo "Source directory: ${SRC_DIR:-/}"
2912 echo "Target directory: ${DEST_DIR:-/}"
2913 if $TGZMODE; then
2914 echo " (extracted from: ${SRC_ARG})"
2915 fi
2916 list
2917 ;;
2918
2919 *)
2920 # diff, help, usage handled during operation validation
2921 err 3 "Unimplemented operation '"${op}"'"
2922 ;;
2923
2924 esac
2925 }
2926
2927 if [ -n "$POSTINSTALL_FUNCTION" ]; then
2928 eval "$POSTINSTALL_FUNCTION"
2929 exit 0
2930 fi
2931
2932 # defaults
2933 #
2934 PROGNAME="${0##*/}"
2935 SRC_ARG="/usr/src"
2936 DEST_DIR="/"
2937 : ${MACHINE:="$( uname -m )"} # assume native build if $MACHINE is not set
2938 : ${MACHINE_ARCH:="$( uname -p )"}# assume native build if not set
2939
2940 DIFF_STYLE=
2941 DIFF_OPT=
2942 NOT_FIXED=" (FIX MANUALLY)"
2943 SCRATCHDIR="$( mkdtemp )" || err 2 "Can't create scratch directory"
2944 trap "/bin/rm -rf \"\${SCRATCHDIR}\" ; exit 0" 1 2 3 15 # HUP INT QUIT TERM
2945
2946 umask 022
2947 exec 3>/dev/null
2948 exec 4>/dev/null
2949 exitstatus=0
2950
2951 main "$@"
2952 /bin/rm -rf "${SCRATCHDIR}"
2953 exit $exitstatus
2954