/usr/lib/news/control/newgroup.pl is in inn 1:1.7.2q-41build1.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 | ## $Id: newgroup.pl,v 1.3 2001/07/19 00:32:56 rra Exp $
##
## newgroup control message handler.
##
## Copyright 2001 by Marco d'Itri <md@linux.it>
##
## Redistribution and use in source and binary forms, with or without
## modification, are permitted provided that the following conditions
## are met:
##
## 1. Redistributions of source code must retain the above copyright
## notice, this list of conditions and the following disclaimer.
##
## 2. Redistributions in binary form must reproduce the above copyright
## notice, this list of conditions and the following disclaimer in the
## documentation and/or other materials provided with the distribution.
use strict;
sub control_newgroup {
my ($par, $sender, $replyto, $site, $action, $log, $approved,
$headers, $body) = @_;
my ($groupname, $modflag) = @$par;
$modflag ||= '';
my $modcmd = $modflag eq 'moderated' ? 'm' : 'y';
my $errmsg;
$errmsg= local_checkgroupname($groupname) if defined &local_checkgroupname;
if ($errmsg) {
$errmsg = checkgroupname($groupname) if $errmsg eq 'DONE';
}
if ($errmsg) {
if ($log) {
logger($log, "skipping newgroup ($errmsg)", $headers, $body);
} else {
logmsg("skipping newgroup ($errmsg)");
}
return;
}
# Scan active to see what sort of change we are making.
open(ACTIVE, $inn::active) or logdie("Cannot open $inn::active: $!");
my @oldgroup;
while (<ACTIVE>) {
next unless /^(\Q$groupname\E)\s\d+\s\d+\s(\w)/;
@oldgroup = split /\s+/;
last;
}
close ACTIVE;
my $status;
if (@oldgroup) {
if ($oldgroup[3] eq 'm' and $modflag ne 'moderated') {
$status = 'made unmoderated';
} elsif ($oldgroup[3] ne 'm' and $modflag eq 'moderated') {
$status = 'made moderated';
} else {
$status = 'no change';
}
} elsif (not $approved) {
$status = 'unapproved';
} else {
$status = 'created';
}
if ($action eq 'mail' and $status !~ /no change|unapproved/) {
my $mail = sendmail("newgroup $groupname $modcmd $sender");
print $mail <<END;
$sender asks for $groupname
to be $status.
If this is acceptable, type:
$inn::newsbin/ctlinnd newgroup $groupname $modcmd $sender
The control message follows:
END
print $mail map { s/^~/~~/; "$_\n" } @$headers;
print $mail "\n";
print $mail map { s/^~/~~/; "$_\n" } @$body;
close $mail or logdie("Cannot send mail: $!");
} elsif ($action eq 'log') {
if ($log) {
logger($log, "skipping newgroup $groupname $modcmd"
. " $sender (would be $status)", $headers, $body);
} else {
logmsg("skipping newgroup $groupname $modcmd $sender"
. " (would be $status)");
}
} elsif ($action eq 'doit' and $status ne 'unapproved') {
ctlinnd('newgroup', $groupname, $modcmd, $sender)
if $status ne 'no change';
# If there is a tag line, update newsgroups too, even if the group
# did already exist.
my $found = 0;
my $ngline = '';
foreach (@$body) {
if ($found) {
$ngline = $_;
last;
}
$found = 1 if $_ eq 'For your newsgroups file:';
}
my ($ngname, $ngdesc) = split(/\s+/, $ngline, 2);
if ($ngdesc) {
$ngdesc =~ s/\s+$//;
$ngdesc =~ s/\s+\(moderated\)\s*$//i;
$ngdesc .= ' (Moderated)' if $modflag eq 'moderated';
}
update_desc($ngname, $ngdesc) if $ngdesc and $ngname eq $groupname;
logger($log, "newgroup $groupname $modcmd $status $sender",
$headers, $body) if $log;
}
return;
}
sub update_desc {
my ($name, $desc) = @_;
shlock("$inn::locks/LOCK.newsgroups");
my $tempfile = "$inn::newsgroups.$$";
open(NEWSGROUPS, $inn::newsgroups)
or logdie("Cannot open $inn::newsgroups: $!");
open(TEMPFILE, ">$tempfile") or logdie("Cannot open $tempfile: $!");
my $olddesc = '';
while (<NEWSGROUPS>) {
if (/^\Q$name\E\s+(.*)/) {
$olddesc = $1;
next;
}
print TEMPFILE $_;
}
print TEMPFILE "$name\t$desc\n";
close TEMPFILE;
close NEWSGROUPS;
# install the modified file only if the description has changed
if ($desc ne $olddesc) {
rename($tempfile, $inn::newsgroups)
or logdie("Cannot rename $tempfile: $!");
} else {
unlink($tempfile);
}
unlink("$inn::locks/LOCK.newsgroups", $tempfile);
}
# Check the group name. This is partially derived from C News.
# Some checks are commented out if I think they're too strict or
# language-dependent. Your mileage may vary.
sub checkgroupname {
local $_ = shift;
# whole-name checking
return 'Empty group name' if /^$/;
return 'Whitespace in group name' if /\s/;
return 'unsafe group name' if /[\`\/:;]/;
return 'Bad dots in group name' if /^\./ or /\.$/ or /\.\./;
# return 'Group name does not begin/end with alphanumeric'
# if (/^[a-zA-Z0-9].+[a-zA-Z0-9]$/;
return 'Group name begins in control. or junk.' if /^(?:junk|control)\./;
# return 'Group name too long' if length $_ > 128;
my @components = split(/\./);
# prevent alt.a.b.c.d.e.f.g.w.x.y.z...
return 'Too many components' if $#components > 9;
# per-component checking
for (my $i = 0; $i <= $#components; $i++) {
local $_ = $components[$i];
return 'all-numeric name component' if /^[0-9]+$/;
# return 'name component starts with non-alphanumeric' if /^[a-zA-Z0-9]/;
# return 'name component does not contain letter' if not /[a-zA-Z]/;
return "`all' or `ctl' used as name component" if /^(?:all|ctl)$/;
# return 'name component longer than 30 characters' if length $_ > 30;
# return 'uppercase letter(s) in name' if /[A-Z]/;
return 'illegal character(s) in name' if /[^a-z0-9+_\-.]/;
# sigh, c++ etc must be allowed
return 'repeated punctuation in name' if /--|__|\+\+./;
# return 'repeated component(s) in name' if ($i + 2 <= $#components
# and $_ eq $components[$i + 1] and $_ eq $components[$i + 2]);
}
return '';
}
1;
|