1/*-
2 * SPDX-License-Identifier: BSD-3-Clause
3 *
4 * Copyright (c) 2012, 2013 SRI International
5 * Copyright (c) 1987, 1993
6 *	The Regents of the University of California.  All rights reserved.
7 *
8 * Redistribution and use in source and binary forms, with or without
9 * modification, are permitted provided that the following conditions
10 * are met:
11 * 1. Redistributions of source code must retain the above copyright
12 *    notice, this list of conditions and the following disclaimer.
13 * 2. Redistributions in binary form must reproduce the above copyright
14 *    notice, this list of conditions and the following disclaimer in the
15 *    documentation and/or other materials provided with the distribution.
16 * 3. Neither the name of the University nor the names of its contributors
17 *    may be used to endorse or promote products derived from this software
18 *    without specific prior written permission.
19 *
20 * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
21 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
22 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
23 * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
24 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
25 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
26 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
27 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
28 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
29 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
30 * SUCH DAMAGE.
31 */
32
33#ifndef lint
34static const char copyright[] =
35"@(#) Copyright (c) 1987, 1993\n\
36	The Regents of the University of California.  All rights reserved.\n";
37#endif /* not lint */
38
39#if 0
40#ifndef lint
41static char sccsid[] = "@(#)xinstall.c	8.1 (Berkeley) 7/21/93";
42#endif /* not lint */
43#endif
44
45#include <sys/cdefs.h>
46__FBSDID("$FreeBSD$");
47
48#include <sys/param.h>
49#include <sys/mman.h>
50#include <sys/mount.h>
51#include <sys/stat.h>
52#include <sys/time.h>
53#include <sys/wait.h>
54
55#include <err.h>
56#include <errno.h>
57#include <fcntl.h>
58#include <grp.h>
59#include <libgen.h>
60#include <md5.h>
61#include <paths.h>
62#include <pwd.h>
63#include <ripemd.h>
64#include <sha.h>
65#include <sha256.h>
66#include <sha512.h>
67#include <spawn.h>
68#include <stdint.h>
69#include <stdio.h>
70#include <stdlib.h>
71#include <string.h>
72#include <sysexits.h>
73#include <unistd.h>
74#include <vis.h>
75
76#include "mtree.h"
77
78#define MAX_CMP_SIZE	(16 * 1024 * 1024)
79
80#define	LN_ABSOLUTE	0x01
81#define	LN_RELATIVE	0x02
82#define	LN_HARD		0x04
83#define	LN_SYMBOLIC	0x08
84#define	LN_MIXED	0x10
85
86#define	DIRECTORY	0x01		/* Tell install it's a directory. */
87#define	SETFLAGS	0x02		/* Tell install to set flags. */
88#define	NOCHANGEBITS	(UF_IMMUTABLE | UF_APPEND | SF_IMMUTABLE | SF_APPEND)
89#define	BACKUP_SUFFIX	".old"
90
91typedef union {
92	MD5_CTX		MD5;
93	RIPEMD160_CTX	RIPEMD160;
94	SHA1_CTX	SHA1;
95	SHA256_CTX	SHA256;
96	SHA512_CTX	SHA512;
97}	DIGEST_CTX;
98
99static enum {
100	DIGEST_NONE = 0,
101	DIGEST_MD5,
102	DIGEST_RIPEMD160,
103	DIGEST_SHA1,
104	DIGEST_SHA256,
105	DIGEST_SHA512,
106} digesttype = DIGEST_NONE;
107
108extern char **environ;
109
110static gid_t gid;
111static uid_t uid;
112static int dobackup, docompare, dodir, dolink, dopreserve, dostrip, dounpriv,
113    safecopy, verbose;
114static int haveopt_f, haveopt_g, haveopt_m, haveopt_o;
115static mode_t mode = S_IRWXU | S_IRGRP | S_IXGRP | S_IROTH | S_IXOTH;
116static FILE *metafp;
117static const char *group, *owner;
118static const char *suffix = BACKUP_SUFFIX;
119static char *destdir, *digest, *fflags, *metafile, *tags;
120
121static int	compare(int, const char *, size_t, int, const char *, size_t,
122		    char **);
123static char	*copy(int, const char *, int, const char *, off_t);
124static int	create_newfile(const char *, int, struct stat *);
125static int	create_tempfile(const char *, char *, size_t);
126static char	*quiet_mktemp(char *template);
127static char	*digest_file(const char *);
128static void	digest_init(DIGEST_CTX *);
129static void	digest_update(DIGEST_CTX *, const char *, size_t);
130static char	*digest_end(DIGEST_CTX *, char *);
131static int	do_link(const char *, const char *, const struct stat *);
132static void	do_symlink(const char *, const char *, const struct stat *);
133static void	makelink(const char *, const char *, const struct stat *);
134static void	install(const char *, const char *, u_long, u_int);
135static void	install_dir(char *);
136static void	metadata_log(const char *, const char *, struct timespec *,
137		    const char *, const char *, off_t);
138static int	parseid(const char *, id_t *);
139static int	strip(const char *, int, const char *, char **);
140static int	trymmap(int);
141static void	usage(void);
142
143int
144main(int argc, char *argv[])
145{
146	struct stat from_sb, to_sb;
147	mode_t *set;
148	u_long fset;
149	int ch, no_target;
150	u_int iflags;
151	char *p;
152	const char *to_name;
153
154	fset = 0;
155	iflags = 0;
156	group = owner = NULL;
157	while ((ch = getopt(argc, argv, "B:bCcD:df:g:h:l:M:m:N:o:pSsT:Uv")) !=
158	     -1)
159		switch((char)ch) {
160		case 'B':
161			suffix = optarg;
162			/* FALLTHROUGH */
163		case 'b':
164			dobackup = 1;
165			break;
166		case 'C':
167			docompare = 1;
168			break;
169		case 'c':
170			/* For backwards compatibility. */
171			break;
172		case 'D':
173			destdir = optarg;
174			break;
175		case 'd':
176			dodir = 1;
177			break;
178		case 'f':
179			haveopt_f = 1;
180			fflags = optarg;
181			break;
182		case 'g':
183			haveopt_g = 1;
184			group = optarg;
185			break;
186		case 'h':
187			digest = optarg;
188			break;
189		case 'l':
190			for (p = optarg; *p != '\0'; p++)
191				switch (*p) {
192				case 's':
193					dolink &= ~(LN_HARD|LN_MIXED);
194					dolink |= LN_SYMBOLIC;
195					break;
196				case 'h':
197					dolink &= ~(LN_SYMBOLIC|LN_MIXED);
198					dolink |= LN_HARD;
199					break;
200				case 'm':
201					dolink &= ~(LN_SYMBOLIC|LN_HARD);
202					dolink |= LN_MIXED;
203					break;
204				case 'a':
205					dolink &= ~LN_RELATIVE;
206					dolink |= LN_ABSOLUTE;
207					break;
208				case 'r':
209					dolink &= ~LN_ABSOLUTE;
210					dolink |= LN_RELATIVE;
211					break;
212				default:
213					errx(1, "%c: invalid link type", *p);
214					/* NOTREACHED */
215				}
216			break;
217		case 'M':
218			metafile = optarg;
219			break;
220		case 'm':
221			haveopt_m = 1;
222			if (!(set = setmode(optarg)))
223				errx(EX_USAGE, "invalid file mode: %s",
224				     optarg);
225			mode = getmode(set, 0);
226			free(set);
227			break;
228		case 'N':
229			if (!setup_getid(optarg))
230				err(EX_OSERR, "Unable to use user and group "
231				    "databases in `%s'", optarg);
232			break;
233		case 'o':
234			haveopt_o = 1;
235			owner = optarg;
236			break;
237		case 'p':
238			docompare = dopreserve = 1;
239			break;
240		case 'S':
241			safecopy = 1;
242			break;
243		case 's':
244			dostrip = 1;
245			break;
246		case 'T':
247			tags = optarg;
248			break;
249		case 'U':
250			dounpriv = 1;
251			break;
252		case 'v':
253			verbose = 1;
254			break;
255		case '?':
256		default:
257			usage();
258		}
259	argc -= optind;
260	argv += optind;
261
262	/* some options make no sense when creating directories */
263	if (dostrip && dodir) {
264		warnx("-d and -s may not be specified together");
265		usage();
266	}
267
268	if (getenv("DONTSTRIP") != NULL) {
269		warnx("DONTSTRIP set - will not strip installed binaries");
270		dostrip = 0;
271	}
272
273	/* must have at least two arguments, except when creating directories */
274	if (argc == 0 || (argc == 1 && !dodir))
275		usage();
276
277	if (digest != NULL) {
278		if (strcmp(digest, "none") == 0) {
279			digesttype = DIGEST_NONE;
280		} else if (strcmp(digest, "md5") == 0) {
281		       digesttype = DIGEST_MD5;
282		} else if (strcmp(digest, "rmd160") == 0) {
283			digesttype = DIGEST_RIPEMD160;
284		} else if (strcmp(digest, "sha1") == 0) {
285			digesttype = DIGEST_SHA1;
286		} else if (strcmp(digest, "sha256") == 0) {
287			digesttype = DIGEST_SHA256;
288		} else if (strcmp(digest, "sha512") == 0) {
289			digesttype = DIGEST_SHA512;
290		} else {
291			warnx("unknown digest `%s'", digest);
292			usage();
293		}
294	}
295
296	/* need to make a temp copy so we can compare stripped version */
297	if (docompare && dostrip)
298		safecopy = 1;
299
300	/* get group and owner id's */
301	if (group != NULL && !dounpriv) {
302		if (gid_from_group(group, &gid) == -1) {
303			id_t id;
304			if (!parseid(group, &id))
305				errx(1, "unknown group %s", group);
306			gid = id;
307		}
308	} else
309		gid = (gid_t)-1;
310
311	if (owner != NULL && !dounpriv) {
312		if (uid_from_user(owner, &uid) == -1) {
313			id_t id;
314			if (!parseid(owner, &id))
315				errx(1, "unknown user %s", owner);
316			uid = id;
317		}
318	} else
319		uid = (uid_t)-1;
320
321	if (fflags != NULL && !dounpriv) {
322		if (strtofflags(&fflags, &fset, NULL))
323			errx(EX_USAGE, "%s: invalid flag", fflags);
324		iflags |= SETFLAGS;
325	}
326
327	if (metafile != NULL) {
328		if ((metafp = fopen(metafile, "a")) == NULL)
329			warn("open %s", metafile);
330	} else
331		digesttype = DIGEST_NONE;
332
333	if (dodir) {
334		for (; *argv != NULL; ++argv)
335			install_dir(*argv);
336		exit(EX_OK);
337		/* NOTREACHED */
338	}
339
340	to_name = argv[argc - 1];
341	no_target = stat(to_name, &to_sb);
342	if (!no_target && S_ISDIR(to_sb.st_mode)) {
343		if (dolink & LN_SYMBOLIC) {
344			if (lstat(to_name, &to_sb) != 0)
345				err(EX_OSERR, "%s vanished", to_name);
346			if (S_ISLNK(to_sb.st_mode)) {
347				if (argc != 2) {
348					errno = ENOTDIR;
349					err(EX_USAGE, "%s", to_name);
350				}
351				install(*argv, to_name, fset, iflags);
352				exit(EX_OK);
353			}
354		}
355		for (; *argv != to_name; ++argv)
356			install(*argv, to_name, fset, iflags | DIRECTORY);
357		exit(EX_OK);
358		/* NOTREACHED */
359	}
360
361	/* can't do file1 file2 directory/file */
362	if (argc != 2) {
363		if (no_target)
364			warnx("target directory `%s' does not exist",
365			    argv[argc - 1]);
366		else
367			warnx("target `%s' is not a directory",
368			    argv[argc - 1]);
369		usage();
370	}
371
372	if (!no_target && !dolink) {
373		if (stat(*argv, &from_sb))
374			err(EX_OSERR, "%s", *argv);
375		if (!S_ISREG(to_sb.st_mode)) {
376			errno = EFTYPE;
377			err(EX_OSERR, "%s", to_name);
378		}
379		if (to_sb.st_dev == from_sb.st_dev &&
380		    to_sb.st_ino == from_sb.st_ino)
381			errx(EX_USAGE,
382			    "%s and %s are the same file", *argv, to_name);
383	}
384	install(*argv, to_name, fset, iflags);
385	exit(EX_OK);
386	/* NOTREACHED */
387}
388
389static char *
390digest_file(const char *name)
391{
392
393	switch (digesttype) {
394	case DIGEST_MD5:
395		return (MD5File(name, NULL));
396	case DIGEST_RIPEMD160:
397		return (RIPEMD160_File(name, NULL));
398	case DIGEST_SHA1:
399		return (SHA1_File(name, NULL));
400	case DIGEST_SHA256:
401		return (SHA256_File(name, NULL));
402	case DIGEST_SHA512:
403		return (SHA512_File(name, NULL));
404	default:
405		return (NULL);
406	}
407}
408
409static void
410digest_init(DIGEST_CTX *c)
411{
412
413	switch (digesttype) {
414	case DIGEST_NONE:
415		break;
416	case DIGEST_MD5:
417		MD5Init(&(c->MD5));
418		break;
419	case DIGEST_RIPEMD160:
420		RIPEMD160_Init(&(c->RIPEMD160));
421		break;
422	case DIGEST_SHA1:
423		SHA1_Init(&(c->SHA1));
424		break;
425	case DIGEST_SHA256:
426		SHA256_Init(&(c->SHA256));
427		break;
428	case DIGEST_SHA512:
429		SHA512_Init(&(c->SHA512));
430		break;
431	}
432}
433
434static void
435digest_update(DIGEST_CTX *c, const char *data, size_t len)
436{
437
438	switch (digesttype) {
439	case DIGEST_NONE:
440		break;
441	case DIGEST_MD5:
442		MD5Update(&(c->MD5), data, len);
443		break;
444	case DIGEST_RIPEMD160:
445		RIPEMD160_Update(&(c->RIPEMD160), data, len);
446		break;
447	case DIGEST_SHA1:
448		SHA1_Update(&(c->SHA1), data, len);
449		break;
450	case DIGEST_SHA256:
451		SHA256_Update(&(c->SHA256), data, len);
452		break;
453	case DIGEST_SHA512:
454		SHA512_Update(&(c->SHA512), data, len);
455		break;
456	}
457}
458
459static char *
460digest_end(DIGEST_CTX *c, char *buf)
461{
462
463	switch (digesttype) {
464	case DIGEST_MD5:
465		return (MD5End(&(c->MD5), buf));
466	case DIGEST_RIPEMD160:
467		return (RIPEMD160_End(&(c->RIPEMD160), buf));
468	case DIGEST_SHA1:
469		return (SHA1_End(&(c->SHA1), buf));
470	case DIGEST_SHA256:
471		return (SHA256_End(&(c->SHA256), buf));
472	case DIGEST_SHA512:
473		return (SHA512_End(&(c->SHA512), buf));
474	default:
475		return (NULL);
476	}
477}
478
479/*
480 * parseid --
481 *	parse uid or gid from arg into id, returning non-zero if successful
482 */
483static int
484parseid(const char *name, id_t *id)
485{
486	char	*ep;
487	errno = 0;
488	*id = (id_t)strtoul(name, &ep, 10);
489	if (errno || *ep != '\0')
490		return (0);
491	return (1);
492}
493
494/*
495 * quiet_mktemp --
496 *	mktemp implementation used mkstemp to avoid mktemp warnings.  We
497 *	really do need mktemp semantics here as we will be creating a link.
498 */
499static char *
500quiet_mktemp(char *template)
501{
502	int fd;
503
504	if ((fd = mkstemp(template)) == -1)
505		return (NULL);
506	close (fd);
507	if (unlink(template) == -1)
508		err(EX_OSERR, "unlink %s", template);
509	return (template);
510}
511
512/*
513 * do_link --
514 *	make a hard link, obeying dorename if set
515 *	return -1 on failure
516 */
517static int
518do_link(const char *from_name, const char *to_name,
519    const struct stat *target_sb)
520{
521	char tmpl[MAXPATHLEN];
522	int ret;
523
524	if (safecopy && target_sb != NULL) {
525		(void)snprintf(tmpl, sizeof(tmpl), "%s.inst.XXXXXX", to_name);
526		/* This usage is safe. */
527		if (quiet_mktemp(tmpl) == NULL)
528			err(EX_OSERR, "%s: mktemp", tmpl);
529		ret = link(from_name, tmpl);
530		if (ret == 0) {
531			if (target_sb->st_mode & S_IFDIR && rmdir(to_name) ==
532			    -1) {
533				unlink(tmpl);
534				err(EX_OSERR, "%s", to_name);
535			}
536#if HAVE_STRUCT_STAT_ST_FLAGS
537			if (target_sb->st_flags & NOCHANGEBITS)
538				(void)chflags(to_name, target_sb->st_flags &
539				     ~NOCHANGEBITS);
540#endif
541			if (verbose)
542				printf("install: link %s -> %s\n",
543				    from_name, to_name);
544			ret = rename(tmpl, to_name);
545			/*
546			 * If rename has posix semantics, then the temporary
547			 * file may still exist when from_name and to_name point
548			 * to the same file, so unlink it unconditionally.
549			 */
550			(void)unlink(tmpl);
551		}
552		return (ret);
553	} else {
554		if (verbose)
555			printf("install: link %s -> %s\n",
556			    from_name, to_name);
557		return (link(from_name, to_name));
558	}
559}
560
561/*
562 * do_symlink --
563 *	Make a symbolic link, obeying dorename if set. Exit on failure.
564 */
565static void
566do_symlink(const char *from_name, const char *to_name,
567    const struct stat *target_sb)
568{
569	char tmpl[MAXPATHLEN];
570
571	if (safecopy && target_sb != NULL) {
572		(void)snprintf(tmpl, sizeof(tmpl), "%s.inst.XXXXXX", to_name);
573		/* This usage is safe. */
574		if (quiet_mktemp(tmpl) == NULL)
575			err(EX_OSERR, "%s: mktemp", tmpl);
576
577		if (symlink(from_name, tmpl) == -1)
578			err(EX_OSERR, "symlink %s -> %s", from_name, tmpl);
579
580		if (target_sb->st_mode & S_IFDIR && rmdir(to_name) == -1) {
581			(void)unlink(tmpl);
582			err(EX_OSERR, "%s", to_name);
583		}
584#if HAVE_STRUCT_STAT_ST_FLAGS
585		if (target_sb->st_flags & NOCHANGEBITS)
586			(void)chflags(to_name, target_sb->st_flags &
587			     ~NOCHANGEBITS);
588#endif
589		if (verbose)
590			printf("install: symlink %s -> %s\n",
591			    from_name, to_name);
592		if (rename(tmpl, to_name) == -1) {
593			/* Remove temporary link before exiting. */
594			(void)unlink(tmpl);
595			err(EX_OSERR, "%s: rename", to_name);
596		}
597	} else {
598		if (verbose)
599			printf("install: symlink %s -> %s\n",
600			    from_name, to_name);
601		if (symlink(from_name, to_name) == -1)
602			err(EX_OSERR, "symlink %s -> %s", from_name, to_name);
603	}
604}
605
606/*
607 * makelink --
608 *	make a link from source to destination
609 */
610static void
611makelink(const char *from_name, const char *to_name,
612    const struct stat *target_sb)
613{
614	char	src[MAXPATHLEN], dst[MAXPATHLEN], lnk[MAXPATHLEN];
615	struct stat	to_sb;
616
617	/* Try hard links first. */
618	if (dolink & (LN_HARD|LN_MIXED)) {
619		if (do_link(from_name, to_name, target_sb) == -1) {
620			if ((dolink & LN_HARD) || errno != EXDEV)
621				err(EX_OSERR, "link %s -> %s", from_name, to_name);
622		} else {
623			if (stat(to_name, &to_sb))
624				err(EX_OSERR, "%s: stat", to_name);
625			if (S_ISREG(to_sb.st_mode)) {
626				/*
627				 * XXX: hard links to anything other than
628				 * plain files are not metalogged
629				 */
630				int omode;
631				const char *oowner, *ogroup;
632				char *offlags;
633				char *dres;
634
635				/*
636				 * XXX: use underlying perms, unless
637				 * overridden on command line.
638				 */
639				omode = mode;
640				if (!haveopt_m)
641					mode = (to_sb.st_mode & 0777);
642				oowner = owner;
643				if (!haveopt_o)
644					owner = NULL;
645				ogroup = group;
646				if (!haveopt_g)
647					group = NULL;
648				offlags = fflags;
649				if (!haveopt_f)
650					fflags = NULL;
651				dres = digest_file(from_name);
652				metadata_log(to_name, "file", NULL, NULL,
653				    dres, to_sb.st_size);
654				free(dres);
655				mode = omode;
656				owner = oowner;
657				group = ogroup;
658				fflags = offlags;
659			}
660			return;
661		}
662	}
663
664	/* Symbolic links. */
665	if (dolink & LN_ABSOLUTE) {
666		/* Convert source path to absolute. */
667		if (realpath(from_name, src) == NULL)
668			err(EX_OSERR, "%s: realpath", from_name);
669		do_symlink(src, to_name, target_sb);
670		/* XXX: src may point outside of destdir */
671		metadata_log(to_name, "link", NULL, src, NULL, 0);
672		return;
673	}
674
675	if (dolink & LN_RELATIVE) {
676		char *to_name_copy, *cp, *d, *ld, *ls, *s;
677
678		if (*from_name != '/') {
679			/* this is already a relative link */
680			do_symlink(from_name, to_name, target_sb);
681			/* XXX: from_name may point outside of destdir. */
682			metadata_log(to_name, "link", NULL, from_name, NULL, 0);
683			return;
684		}
685
686		/* Resolve pathnames. */
687		if (realpath(from_name, src) == NULL)
688			err(EX_OSERR, "%s: realpath", from_name);
689
690		/*
691		 * The last component of to_name may be a symlink,
692		 * so use realpath to resolve only the directory.
693		 */
694		to_name_copy = strdup(to_name);
695		if (to_name_copy == NULL)
696			err(EX_OSERR, "%s: strdup", to_name);
697		cp = dirname(to_name_copy);
698		if (realpath(cp, dst) == NULL)
699			err(EX_OSERR, "%s: realpath", cp);
700		/* .. and add the last component. */
701		if (strcmp(dst, "/") != 0) {
702			if (strlcat(dst, "/", sizeof(dst)) > sizeof(dst))
703				errx(1, "resolved pathname too long");
704		}
705		strcpy(to_name_copy, to_name);
706		cp = basename(to_name_copy);
707		if (strlcat(dst, cp, sizeof(dst)) > sizeof(dst))
708			errx(1, "resolved pathname too long");
709		free(to_name_copy);
710
711		/* Trim common path components. */
712		ls = ld = NULL;
713		for (s = src, d = dst; *s == *d; ls = s, ld = d, s++, d++)
714			continue;
715		/*
716		 * If we didn't end after a directory separator, then we've
717		 * falsely matched the last component.  For example, if one
718		 * invoked install -lrs /lib/foo.so /libexec/ then the source
719		 * would terminate just after the separator while the
720		 * destination would terminate in the middle of 'libexec',
721		 * leading to a full directory getting falsely eaten.
722		 */
723		if ((ls != NULL && *ls != '/') || (ld != NULL && *ld != '/'))
724			s--, d--;
725		while (*s != '/')
726			s--, d--;
727
728		/* Count the number of directories we need to backtrack. */
729		for (++d, lnk[0] = '\0'; *d; d++)
730			if (*d == '/')
731				(void)strlcat(lnk, "../", sizeof(lnk));
732
733		(void)strlcat(lnk, ++s, sizeof(lnk));
734
735		do_symlink(lnk, to_name, target_sb);
736		/* XXX: Link may point outside of destdir. */
737		metadata_log(to_name, "link", NULL, lnk, NULL, 0);
738		return;
739	}
740
741	/*
742	 * If absolute or relative was not specified, try the names the
743	 * user provided.
744	 */
745	do_symlink(from_name, to_name, target_sb);
746	/* XXX: from_name may point outside of destdir. */
747	metadata_log(to_name, "link", NULL, from_name, NULL, 0);
748}
749
750/*
751 * install --
752 *	build a path name and install the file
753 */
754static void
755install(const char *from_name, const char *to_name, u_long fset, u_int flags)
756{
757	struct stat from_sb, temp_sb, to_sb;
758	struct timespec tsb[2];
759	int devnull, files_match, from_fd, serrno, stripped, target;
760	int tempcopy, temp_fd, to_fd;
761	char backup[MAXPATHLEN], *p, pathbuf[MAXPATHLEN], tempfile[MAXPATHLEN];
762	char *digestresult;
763
764	digestresult = NULL;
765	files_match = stripped = 0;
766	from_fd = -1;
767	to_fd = -1;
768
769	/* If try to install NULL file to a directory, fails. */
770	if (flags & DIRECTORY || strcmp(from_name, _PATH_DEVNULL)) {
771		if (!dolink) {
772			if (stat(from_name, &from_sb))
773				err(EX_OSERR, "%s", from_name);
774			if (!S_ISREG(from_sb.st_mode)) {
775				errno = EFTYPE;
776				err(EX_OSERR, "%s", from_name);
777			}
778		}
779		/* Build the target path. */
780		if (flags & DIRECTORY) {
781			(void)snprintf(pathbuf, sizeof(pathbuf), "%s%s%s",
782			    to_name,
783			    to_name[strlen(to_name) - 1] == '/' ? "" : "/",
784			    (p = strrchr(from_name, '/')) ? ++p : from_name);
785			to_name = pathbuf;
786		}
787		devnull = 0;
788	} else {
789		devnull = 1;
790	}
791
792	target = (lstat(to_name, &to_sb) == 0);
793
794	if (dolink) {
795		if (target && !safecopy) {
796			if (to_sb.st_mode & S_IFDIR && rmdir(to_name) == -1)
797				err(EX_OSERR, "%s", to_name);
798#if HAVE_STRUCT_STAT_ST_FLAGS
799			if (to_sb.st_flags & NOCHANGEBITS)
800				(void)chflags(to_name,
801				    to_sb.st_flags & ~NOCHANGEBITS);
802#endif
803			unlink(to_name);
804		}
805		makelink(from_name, to_name, target ? &to_sb : NULL);
806		return;
807	}
808
809	if (target && !S_ISREG(to_sb.st_mode) && !S_ISLNK(to_sb.st_mode)) {
810		errno = EFTYPE;
811		warn("%s", to_name);
812		return;
813	}
814
815	/* Only copy safe if the target exists. */
816	tempcopy = safecopy && target;
817
818	if (!devnull && (from_fd = open(from_name, O_RDONLY, 0)) < 0)
819		err(EX_OSERR, "%s", from_name);
820
821	/* If we don't strip, we can compare first. */
822	if (docompare && !dostrip && target && S_ISREG(to_sb.st_mode)) {
823		if ((to_fd = open(to_name, O_RDONLY, 0)) < 0)
824			err(EX_OSERR, "%s", to_name);
825		if (devnull)
826			files_match = to_sb.st_size == 0;
827		else
828			files_match = !(compare(from_fd, from_name,
829			    (size_t)from_sb.st_size, to_fd,
830			    to_name, (size_t)to_sb.st_size, &digestresult));
831
832		/* Close "to" file unless we match. */
833		if (!files_match)
834			(void)close(to_fd);
835	}
836
837	if (!files_match) {
838		if (tempcopy) {
839			to_fd = create_tempfile(to_name, tempfile,
840			    sizeof(tempfile));
841			if (to_fd < 0)
842				err(EX_OSERR, "%s", tempfile);
843		} else {
844			if ((to_fd = create_newfile(to_name, target,
845			    &to_sb)) < 0)
846				err(EX_OSERR, "%s", to_name);
847			if (verbose)
848				(void)printf("install: %s -> %s\n",
849				    from_name, to_name);
850		}
851		if (!devnull) {
852			if (dostrip)
853			    stripped = strip(tempcopy ? tempfile : to_name,
854				to_fd, from_name, &digestresult);
855			if (!stripped)
856			    digestresult = copy(from_fd, from_name, to_fd,
857				tempcopy ? tempfile : to_name, from_sb.st_size);
858		}
859	}
860
861	if (dostrip) {
862		if (!stripped)
863			(void)strip(tempcopy ? tempfile : to_name, to_fd,
864			    NULL, &digestresult);
865
866		/*
867		 * Re-open our fd on the target, in case
868		 * we did not strip in-place.
869		 */
870		close(to_fd);
871		to_fd = open(tempcopy ? tempfile : to_name, O_RDONLY, 0);
872		if (to_fd < 0)
873			err(EX_OSERR, "stripping %s", to_name);
874	}
875
876	/*
877	 * Compare the stripped temp file with the target.
878	 */
879	if (docompare && dostrip && target && S_ISREG(to_sb.st_mode)) {
880		temp_fd = to_fd;
881
882		/* Re-open to_fd using the real target name. */
883		if ((to_fd = open(to_name, O_RDONLY, 0)) < 0)
884			err(EX_OSERR, "%s", to_name);
885
886		if (fstat(temp_fd, &temp_sb)) {
887			serrno = errno;
888			(void)unlink(tempfile);
889			errno = serrno;
890			err(EX_OSERR, "%s", tempfile);
891		}
892
893		if (compare(temp_fd, tempfile, (size_t)temp_sb.st_size, to_fd,
894			    to_name, (size_t)to_sb.st_size, &digestresult)
895			    == 0) {
896			/*
897			 * If target has more than one link we need to
898			 * replace it in order to snap the extra links.
899			 * Need to preserve target file times, though.
900			 */
901			if (to_sb.st_nlink != 1) {
902				tsb[0] = to_sb.st_atim;
903				tsb[1] = to_sb.st_mtim;
904				(void)utimensat(AT_FDCWD, tempfile, tsb, 0);
905			} else {
906				files_match = 1;
907				(void)unlink(tempfile);
908			}
909			(void) close(temp_fd);
910		}
911	} else if (dostrip)
912		digestresult = digest_file(tempfile);
913
914	/*
915	 * Move the new file into place if doing a safe copy
916	 * and the files are different (or just not compared).
917	 */
918	if (tempcopy && !files_match) {
919#if HAVE_STRUCT_STAT_ST_FLAGS
920		/* Try to turn off the immutable bits. */
921		if (to_sb.st_flags & NOCHANGEBITS)
922			(void)chflags(to_name, to_sb.st_flags & ~NOCHANGEBITS);
923#endif
924		if (dobackup) {
925			if ((size_t)snprintf(backup, MAXPATHLEN, "%s%s", to_name,
926			    suffix) != strlen(to_name) + strlen(suffix)) {
927				unlink(tempfile);
928				errx(EX_OSERR, "%s: backup filename too long",
929				    to_name);
930			}
931			if (verbose)
932				(void)printf("install: %s -> %s\n", to_name, backup);
933			if (unlink(backup) < 0 && errno != ENOENT) {
934				serrno = errno;
935#if HAVE_STRUCT_STAT_ST_FLAGS
936				if (to_sb.st_flags & NOCHANGEBITS)
937					(void)chflags(to_name, to_sb.st_flags);
938#endif
939				unlink(tempfile);
940				errno = serrno;
941				err(EX_OSERR, "unlink: %s", backup);
942			}
943			if (link(to_name, backup) < 0) {
944				serrno = errno;
945				unlink(tempfile);
946#if HAVE_STRUCT_STAT_ST_FLAGS
947				if (to_sb.st_flags & NOCHANGEBITS)
948					(void)chflags(to_name, to_sb.st_flags);
949#endif
950				errno = serrno;
951				err(EX_OSERR, "link: %s to %s", to_name,
952				     backup);
953			}
954		}
955		if (verbose)
956			(void)printf("install: %s -> %s\n", from_name, to_name);
957		if (rename(tempfile, to_name) < 0) {
958			serrno = errno;
959			unlink(tempfile);
960			errno = serrno;
961			err(EX_OSERR, "rename: %s to %s",
962			    tempfile, to_name);
963		}
964
965		/* Re-open to_fd so we aren't hosed by the rename(2). */
966		(void) close(to_fd);
967		if ((to_fd = open(to_name, O_RDONLY, 0)) < 0)
968			err(EX_OSERR, "%s", to_name);
969	}
970
971	/*
972	 * Preserve the timestamp of the source file if necessary.
973	 */
974	if (dopreserve && !files_match && !devnull) {
975		tsb[0] = from_sb.st_atim;
976		tsb[1] = from_sb.st_mtim;
977		(void)utimensat(AT_FDCWD, to_name, tsb, 0);
978	}
979
980	if (fstat(to_fd, &to_sb) == -1) {
981		serrno = errno;
982		(void)unlink(to_name);
983		errno = serrno;
984		err(EX_OSERR, "%s", to_name);
985	}
986
987	/*
988	 * Set owner, group, mode for target; do the chown first,
989	 * chown may lose the setuid bits.
990	 */
991	if (!dounpriv && ((gid != (gid_t)-1 && gid != to_sb.st_gid) ||
992	    (uid != (uid_t)-1 && uid != to_sb.st_uid) ||
993	    (mode != (to_sb.st_mode & ALLPERMS)))) {
994#if HAVE_STRUCT_STAT_ST_FLAGS
995		/* Try to turn off the immutable bits. */
996		if (to_sb.st_flags & NOCHANGEBITS)
997			(void)fchflags(to_fd, to_sb.st_flags & ~NOCHANGEBITS);
998#endif
999	}
1000
1001	if (!dounpriv &
1002	    (gid != (gid_t)-1 && gid != to_sb.st_gid) ||
1003	    (uid != (uid_t)-1 && uid != to_sb.st_uid))
1004		if (fchown(to_fd, uid, gid) == -1) {
1005			serrno = errno;
1006			(void)unlink(to_name);
1007			errno = serrno;
1008			err(EX_OSERR,"%s: chown/chgrp", to_name);
1009		}
1010
1011	if (mode != (to_sb.st_mode & ALLPERMS)) {
1012		if (fchmod(to_fd,
1013		     dounpriv ? mode & (S_IRWXU|S_IRWXG|S_IRWXO) : mode)) {
1014			serrno = errno;
1015			(void)unlink(to_name);
1016			errno = serrno;
1017			err(EX_OSERR, "%s: chmod", to_name);
1018		}
1019	}
1020#if HAVE_STRUCT_STAT_ST_FLAGS
1021	/*
1022	 * If provided a set of flags, set them, otherwise, preserve the
1023	 * flags, except for the dump flag.
1024	 * NFS does not support flags.  Ignore EOPNOTSUPP flags if we're just
1025	 * trying to turn off UF_NODUMP.  If we're trying to set real flags,
1026	 * then warn if the fs doesn't support it, otherwise fail.
1027	 */
1028	if (!dounpriv & !devnull && (flags & SETFLAGS ||
1029	    (from_sb.st_flags & ~UF_NODUMP) != to_sb.st_flags) &&
1030	    fchflags(to_fd,
1031	    flags & SETFLAGS ? fset : from_sb.st_flags & ~UF_NODUMP)) {
1032		if (flags & SETFLAGS) {
1033			if (errno == EOPNOTSUPP)
1034				warn("%s: chflags", to_name);
1035			else {
1036				serrno = errno;
1037				(void)unlink(to_name);
1038				errno = serrno;
1039				err(EX_OSERR, "%s: chflags", to_name);
1040			}
1041		}
1042	}
1043#endif
1044
1045	(void)close(to_fd);
1046	if (!devnull)
1047		(void)close(from_fd);
1048
1049	metadata_log(to_name, "file", tsb, NULL, digestresult, to_sb.st_size);
1050	free(digestresult);
1051}
1052
1053/*
1054 * compare --
1055 *	Compare two files; non-zero means files differ.
1056 *	Compute digest and return its address in *dresp
1057 *	unless it points to pre-computed digest.
1058 */
1059static int
1060compare(int from_fd, const char *from_name __unused, size_t from_len,
1061	int to_fd, const char *to_name __unused, size_t to_len,
1062	char **dresp)
1063{
1064	char *p, *q;
1065	int rv;
1066	int do_digest, done_compare;
1067	DIGEST_CTX ctx;
1068
1069	rv = 0;
1070	if (from_len != to_len)
1071		return 1;
1072
1073	do_digest = (digesttype != DIGEST_NONE && dresp != NULL &&
1074			*dresp == NULL);
1075	if (from_len <= MAX_CMP_SIZE) {
1076		if (do_digest)
1077			digest_init(&ctx);
1078		done_compare = 0;
1079		if (trymmap(from_fd) && trymmap(to_fd)) {
1080			p = mmap(NULL, from_len, PROT_READ, MAP_SHARED,
1081			    from_fd, (off_t)0);
1082			if (p == MAP_FAILED)
1083				goto out;
1084			q = mmap(NULL, from_len, PROT_READ, MAP_SHARED,
1085			    to_fd, (off_t)0);
1086			if (q == MAP_FAILED) {
1087				munmap(p, from_len);
1088				goto out;
1089			}
1090
1091			rv = memcmp(p, q, from_len);
1092			if (do_digest)
1093				digest_update(&ctx, p, from_len);
1094			munmap(p, from_len);
1095			munmap(q, from_len);
1096			done_compare = 1;
1097		}
1098	out:
1099		if (!done_compare) {
1100			char buf1[MAXBSIZE];
1101			char buf2[MAXBSIZE];
1102			int n1, n2;
1103
1104			rv = 0;
1105			lseek(from_fd, 0, SEEK_SET);
1106			lseek(to_fd, 0, SEEK_SET);
1107			while (rv == 0) {
1108				n1 = read(from_fd, buf1, sizeof(buf1));
1109				if (n1 == 0)
1110					break;		/* EOF */
1111				else if (n1 > 0) {
1112					n2 = read(to_fd, buf2, n1);
1113					if (n2 == n1)
1114						rv = memcmp(buf1, buf2, n1);
1115					else
1116						rv = 1;	/* out of sync */
1117				} else
1118					rv = 1;		/* read failure */
1119				if (do_digest)
1120					digest_update(&ctx, buf1, n1);
1121			}
1122			lseek(from_fd, 0, SEEK_SET);
1123			lseek(to_fd, 0, SEEK_SET);
1124		}
1125	} else
1126		rv = 1;	/* don't bother in this case */
1127
1128	if (do_digest) {
1129		if (rv == 0)
1130			*dresp = digest_end(&ctx, NULL);
1131		else
1132			(void)digest_end(&ctx, NULL);
1133	}
1134
1135	return rv;
1136}
1137
1138/*
1139 * create_tempfile --
1140 *	create a temporary file based on path and open it
1141 */
1142static int
1143create_tempfile(const char *path, char *temp, size_t tsize)
1144{
1145	char *p;
1146
1147	(void)strncpy(temp, path, tsize);
1148	temp[tsize - 1] = '\0';
1149	if ((p = strrchr(temp, '/')) != NULL)
1150		p++;
1151	else
1152		p = temp;
1153	(void)strncpy(p, "INS@XXXX", &temp[tsize - 1] - p);
1154	temp[tsize - 1] = '\0';
1155	return (mkstemp(temp));
1156}
1157
1158/*
1159 * create_newfile --
1160 *	create a new file, overwriting an existing one if necessary
1161 */
1162static int
1163create_newfile(const char *path, int target, struct stat *sbp)
1164{
1165	char backup[MAXPATHLEN];
1166	int saved_errno = 0;
1167	int newfd;
1168
1169	if (target) {
1170		/*
1171		 * Unlink now... avoid ETXTBSY errors later.  Try to turn
1172		 * off the append/immutable bits -- if we fail, go ahead,
1173		 * it might work.
1174		 */
1175#if HAVE_STRUCT_STAT_ST_FLAGS
1176		if (sbp->st_flags & NOCHANGEBITS)
1177			(void)chflags(path, sbp->st_flags & ~NOCHANGEBITS);
1178#endif
1179
1180		if (dobackup) {
1181			if ((size_t)snprintf(backup, MAXPATHLEN, "%s%s",
1182			    path, suffix) != strlen(path) + strlen(suffix)) {
1183				saved_errno = errno;
1184#if HAVE_STRUCT_STAT_ST_FLAGS
1185				if (sbp->st_flags & NOCHANGEBITS)
1186					(void)chflags(path, sbp->st_flags);
1187#endif
1188				errno = saved_errno;
1189				errx(EX_OSERR, "%s: backup filename too long",
1190				    path);
1191			}
1192			(void)snprintf(backup, MAXPATHLEN, "%s%s",
1193			    path, suffix);
1194			if (verbose)
1195				(void)printf("install: %s -> %s\n",
1196				    path, backup);
1197			if (rename(path, backup) < 0) {
1198				saved_errno = errno;
1199#if HAVE_STRUCT_STAT_ST_FLAGS
1200				if (sbp->st_flags & NOCHANGEBITS)
1201					(void)chflags(path, sbp->st_flags);
1202#endif
1203				errno = saved_errno;
1204				err(EX_OSERR, "rename: %s to %s", path, backup);
1205			}
1206		} else
1207			if (unlink(path) < 0)
1208				saved_errno = errno;
1209	}
1210
1211	newfd = open(path, O_CREAT | O_RDWR | O_TRUNC, S_IRUSR | S_IWUSR);
1212	if (newfd < 0 && saved_errno != 0)
1213		errno = saved_errno;
1214	return newfd;
1215}
1216
1217/*
1218 * copy --
1219 *	copy from one file to another
1220 */
1221static char *
1222copy(int from_fd, const char *from_name, int to_fd, const char *to_name,
1223    off_t size)
1224{
1225	int nr, nw;
1226	int serrno;
1227	char *p;
1228	char buf[MAXBSIZE];
1229	int done_copy;
1230	DIGEST_CTX ctx;
1231
1232	/* Rewind file descriptors. */
1233	if (lseek(from_fd, (off_t)0, SEEK_SET) == (off_t)-1)
1234		err(EX_OSERR, "lseek: %s", from_name);
1235	if (lseek(to_fd, (off_t)0, SEEK_SET) == (off_t)-1)
1236		err(EX_OSERR, "lseek: %s", to_name);
1237
1238	digest_init(&ctx);
1239
1240	/*
1241	 * Mmap and write if less than 8M (the limit is so we don't totally
1242	 * trash memory on big files.  This is really a minor hack, but it
1243	 * wins some CPU back.
1244	 */
1245	done_copy = 0;
1246	if (size <= 8 * 1048576 && trymmap(from_fd) &&
1247	    (p = mmap(NULL, (size_t)size, PROT_READ, MAP_SHARED,
1248		    from_fd, (off_t)0)) != MAP_FAILED) {
1249		nw = write(to_fd, p, size);
1250		if (nw != size) {
1251			serrno = errno;
1252			(void)unlink(to_name);
1253			if (nw >= 0) {
1254				errx(EX_OSERR,
1255     "short write to %s: %jd bytes written, %jd bytes asked to write",
1256				    to_name, (uintmax_t)nw, (uintmax_t)size);
1257			} else {
1258				errno = serrno;
1259				err(EX_OSERR, "%s", to_name);
1260			}
1261		}
1262		digest_update(&ctx, p, size);
1263		(void)munmap(p, size);
1264		done_copy = 1;
1265	}
1266	if (!done_copy) {
1267		while ((nr = read(from_fd, buf, sizeof(buf))) > 0) {
1268			if ((nw = write(to_fd, buf, nr)) != nr) {
1269				serrno = errno;
1270				(void)unlink(to_name);
1271				if (nw >= 0) {
1272					errx(EX_OSERR,
1273     "short write to %s: %jd bytes written, %jd bytes asked to write",
1274					    to_name, (uintmax_t)nw,
1275					    (uintmax_t)size);
1276				} else {
1277					errno = serrno;
1278					err(EX_OSERR, "%s", to_name);
1279				}
1280			}
1281			digest_update(&ctx, buf, nr);
1282		}
1283		if (nr != 0) {
1284			serrno = errno;
1285			(void)unlink(to_name);
1286			errno = serrno;
1287			err(EX_OSERR, "%s", from_name);
1288		}
1289	}
1290	if (safecopy && fsync(to_fd) == -1) {
1291		serrno = errno;
1292		(void)unlink(to_name);
1293		errno = serrno;
1294		err(EX_OSERR, "fsync failed for %s", to_name);
1295	}
1296	return (digest_end(&ctx, NULL));
1297}
1298
1299/*
1300 * strip --
1301 *	Use strip(1) to strip the target file.
1302 *	Just invoke strip(1) on to_name if from_name is NULL, else try
1303 *	to run "strip -o to_name -- from_name" and return 0 on failure.
1304 *	Return 1 on success and assign result of digest_file(to_name)
1305 *	to *dresp.
1306 */
1307static int
1308strip(const char *to_name, int to_fd, const char *from_name, char **dresp)
1309{
1310	const char *stripbin;
1311	const char *args[6];
1312	pid_t pid;
1313	int error, serrno, status;
1314
1315	stripbin = getenv("STRIPBIN");
1316	if (stripbin == NULL)
1317		stripbin = "strip";
1318	args[0] = stripbin;
1319	if (from_name == NULL) {
1320		args[1] = to_name;
1321		args[2] = NULL;
1322	} else {
1323		args[1] = "-o";
1324		args[2] = to_name;
1325		args[3] = "--";
1326		args[4] = from_name;
1327		args[5] = NULL;
1328	}
1329	error = posix_spawnp(&pid, stripbin, NULL, NULL,
1330	    __DECONST(char **, args), environ);
1331	if (error != 0) {
1332		(void)unlink(to_name);
1333		errc(error == EAGAIN || error == EPROCLIM || error == ENOMEM ?
1334		    EX_TEMPFAIL : EX_OSERR, error, "spawn %s", stripbin);
1335	}
1336	if (waitpid(pid, &status, 0) == -1) {
1337		error = errno;
1338		(void)unlink(to_name);
1339		errc(EX_SOFTWARE, error, "wait");
1340		/* NOTREACHED */
1341	}
1342	if (status != 0) {
1343		if (from_name != NULL)
1344			return (0);
1345		(void)unlink(to_name);
1346		errx(EX_SOFTWARE, "strip command %s failed on %s",
1347		    stripbin, to_name);
1348	}
1349	if (from_name != NULL && safecopy && fsync(to_fd) == -1) {
1350		serrno = errno;
1351		(void)unlink(to_name);
1352		errno = serrno;
1353		err(EX_OSERR, "fsync failed for %s", to_name);
1354	}
1355	if (dresp != NULL)
1356		*dresp = digest_file(to_name);
1357	return (1);
1358}
1359
1360/*
1361 * install_dir --
1362 *	build directory hierarchy
1363 */
1364static void
1365install_dir(char *path)
1366{
1367	char *p;
1368	struct stat sb;
1369	int ch, tried_mkdir;
1370
1371	for (p = path;; ++p)
1372		if (!*p || (p != path && *p  == '/')) {
1373			tried_mkdir = 0;
1374			ch = *p;
1375			*p = '\0';
1376again:
1377			if (stat(path, &sb) < 0) {
1378				if (errno != ENOENT || tried_mkdir)
1379					err(EX_OSERR, "stat %s", path);
1380				if (mkdir(path, 0755) < 0) {
1381					tried_mkdir = 1;
1382					if (errno == EEXIST)
1383						goto again;
1384					err(EX_OSERR, "mkdir %s", path);
1385				}
1386				if (verbose)
1387					(void)printf("install: mkdir %s\n",
1388					    path);
1389			} else if (!S_ISDIR(sb.st_mode))
1390				errx(EX_OSERR, "%s exists but is not a directory", path);
1391			if (!(*p = ch))
1392				break;
1393 		}
1394
1395	if (!dounpriv) {
1396		if ((gid != (gid_t)-1 || uid != (uid_t)-1) &&
1397		    chown(path, uid, gid))
1398			warn("chown %u:%u %s", uid, gid, path);
1399		/* XXXBED: should we do the chmod in the dounpriv case? */
1400		if (chmod(path, mode))
1401			warn("chmod %o %s", mode, path);
1402	}
1403	metadata_log(path, "dir", NULL, NULL, NULL, 0);
1404}
1405
1406/*
1407 * metadata_log --
1408 *	if metafp is not NULL, output mtree(8) full path name and settings to
1409 *	metafp, to allow permissions to be set correctly by other tools,
1410 *	or to allow integrity checks to be performed.
1411 */
1412static void
1413metadata_log(const char *path, const char *type, struct timespec *ts,
1414	const char *slink, const char *digestresult, off_t size)
1415{
1416	static const char extra[] = { ' ', '\t', '\n', '\\', '#', '\0' };
1417	const char *p;
1418	char *buf;
1419	size_t destlen;
1420	struct flock metalog_lock;
1421
1422	if (!metafp)
1423		return;
1424	/* Buffer for strsvis(3). */
1425	buf = (char *)malloc(4 * strlen(path) + 1);
1426	if (buf == NULL) {
1427		warnx("%s", strerror(ENOMEM));
1428		return;
1429	}
1430
1431	/* Lock log file. */
1432	metalog_lock.l_start = 0;
1433	metalog_lock.l_len = 0;
1434	metalog_lock.l_whence = SEEK_SET;
1435	metalog_lock.l_type = F_WRLCK;
1436	if (fcntl(fileno(metafp), F_SETLKW, &metalog_lock) == -1) {
1437		warn("can't lock %s", metafile);
1438		free(buf);
1439		return;
1440	}
1441
1442	/* Remove destdir. */
1443	p = path;
1444	if (destdir) {
1445		destlen = strlen(destdir);
1446		if (strncmp(p, destdir, destlen) == 0 &&
1447		    (p[destlen] == '/' || p[destlen] == '\0'))
1448			p += destlen;
1449	}
1450	while (*p && *p == '/')
1451		p++;
1452	strsvis(buf, p, VIS_OCTAL, extra);
1453	p = buf;
1454	/* Print details. */
1455	fprintf(metafp, ".%s%s type=%s", *p ? "/" : "", p, type);
1456	if (owner)
1457		fprintf(metafp, " uname=%s", owner);
1458	if (group)
1459		fprintf(metafp, " gname=%s", group);
1460	fprintf(metafp, " mode=%#o", mode);
1461	if (slink) {
1462		strsvis(buf, slink, VIS_CSTYLE, extra);	/* encode link */
1463		fprintf(metafp, " link=%s", buf);
1464	}
1465	if (*type == 'f') /* type=file */
1466		fprintf(metafp, " size=%lld", (long long)size);
1467	if (ts != NULL && dopreserve)
1468		fprintf(metafp, " time=%lld.%09ld",
1469			(long long)ts[1].tv_sec, ts[1].tv_nsec);
1470	if (digestresult && digest)
1471		fprintf(metafp, " %s=%s", digest, digestresult);
1472	if (fflags)
1473		fprintf(metafp, " flags=%s", fflags);
1474	if (tags)
1475		fprintf(metafp, " tags=%s", tags);
1476	fputc('\n', metafp);
1477	/* Flush line. */
1478	fflush(metafp);
1479
1480	/* Unlock log file. */
1481	metalog_lock.l_type = F_UNLCK;
1482	if (fcntl(fileno(metafp), F_SETLKW, &metalog_lock) == -1)
1483		warn("can't unlock %s", metafile);
1484	free(buf);
1485}
1486
1487/*
1488 * usage --
1489 *	print a usage message and die
1490 */
1491static void
1492usage(void)
1493{
1494	(void)fprintf(stderr,
1495"usage: install [-bCcpSsUv] [-f flags] [-g group] [-m mode] [-o owner]\n"
1496"               [-M log] [-D dest] [-h hash] [-T tags]\n"
1497"               [-B suffix] [-l linkflags] [-N dbdir]\n"
1498"               file1 file2\n"
1499"       install [-bCcpSsUv] [-f flags] [-g group] [-m mode] [-o owner]\n"
1500"               [-M log] [-D dest] [-h hash] [-T tags]\n"
1501"               [-B suffix] [-l linkflags] [-N dbdir]\n"
1502"               file1 ... fileN directory\n"
1503"       install -dU [-vU] [-g group] [-m mode] [-N dbdir] [-o owner]\n"
1504"               [-M log] [-D dest] [-h hash] [-T tags]\n"
1505"               directory ...\n");
1506	exit(EX_USAGE);
1507	/* NOTREACHED */
1508}
1509
1510/*
1511 * trymmap --
1512 *	return true (1) if mmap should be tried, false (0) if not.
1513 */
1514static int
1515trymmap(int fd)
1516{
1517/*
1518 * The ifdef is for bootstrapping - f_fstypename doesn't exist in
1519 * pre-Lite2-merge systems.
1520 */
1521#ifdef MFSNAMELEN
1522	struct statfs stfs;
1523
1524	if (fstatfs(fd, &stfs) != 0)
1525		return (0);
1526	if (strcmp(stfs.f_fstypename, "ufs") == 0 ||
1527	    strcmp(stfs.f_fstypename, "cd9660") == 0)
1528		return (1);
1529#endif
1530	return (0);
1531}
1532