/* Copyright 1988,1990,1993,1994 by Paul Vixie
 * All rights reserved
 *
 * Distribute freely, except: don't remove my name from the source or
 * documentation (don't take credit for my work), mark your changes (don't
 * get me blamed for your possible bugs), don't alter or remove this
 * notice.  May be sold if buildable source is provided to buyer.  No
 * warrantee of any kind, express or implied, is included with this
 * software; use at your own risk, responsibility for damages (if any) to
 * anyone resulting from the use of this software rests entirely with the
 * user.
 *
 * Send bug reports, bug fixes, enhancements, requests, flames, etc., and
 * I'll try to keep a version up to date.  I can be reached as follows:
 * Paul Vixie          <paul@vix.com>          uunet!decwrl!vixie!paul
 */

#if !defined(lint) && !defined(LINT)
static char rcsid[] = "$Id: crontab.c,v 2.13 1994/01/17 03:20:37 vixie Exp $";
#endif

/* crontab - install and manage per-user crontab files
 * vix 02may87 [RCS has the rest of the log]
 * vix 26jan87 [original]
 */


#define	MAIN_PROGRAM


#include "cron.h"
#include <errno.h>
#include <fcntl.h>
#include <libgen.h>
#include <signal.h>
#include <stdio.h>
#include <sys/file.h>
#include <sys/stat.h>
#ifdef USE_UTIMES
# include <sys/time.h>
#else
# include <time.h>
# include <utime.h>
#endif
#if defined(POSIX)
# include <locale.h>
#endif

#define COMMENT_COLOR  "\x1B[34m"
#define RESET_COLOR "\x1B[0m"

enum opt_t	{ opt_unknown, opt_list, opt_delete, opt_edit, opt_replace, opt_help };

#if DEBUGGING
static char	*Options[] = { "???", "list", "delete", "edit", "replace" };
#endif


static	PID_T		Pid;
static	char		*User, *RealUser;
static	char		Filename[MAX_FNAME];
static	char		Directory[MAX_FNAME];
static	FILE		*NewCrontab = NULL;
static	int		CheckErrorCount;
static	int		PromptOnDelete;
static  int             dry_run;
static	enum opt_t	Option;
static	struct passwd	*pw;
static	void		list_cmd __P((void)),
			delete_cmd __P((void)),
			edit_cmd __P((void)),
			poke_daemon __P((void)),
			check_error __P((char *)),
			parse_args __P((int c, char *v[]));
static	int		replace_cmd __P((void));

/* Support edit command */
static	int		create_tmp_crontab __P((void));
static	int		open_tmp_crontab __P((struct stat *fsbuf));
static	void		cleanup_tmp_crontab __P((void));

static void
usage(msg)
	char *msg;
{
	if (strlen(msg) > 0)
	    fprintf(stderr, "%s: usage error: %s\n", ProgramName, msg);
	fprintf(stderr, "usage:\t%s [-u user] [-n] file\n", ProgramName);
	fprintf(stderr, "\t%s [ -u user ] [ -i ] { -e | -l | -r }\n\n", ProgramName);
	fprintf(stderr, "\t-h\t(displays this help message)\n\n");
	fprintf(stderr, "\tfile\t(default operation is replace, per 1003.2)\n");
	fprintf(stderr, "\t-n\t(dry run: checks the syntax, then bails out)\n");
	fprintf(stderr, "\t-u user\t(choose the user whose crontab is touched)\n\n");
	fprintf(stderr, "\t-e\t(edit user's crontab)\n");
	fprintf(stderr, "\t-l\t(list user's crontab)\n");
	fprintf(stderr, "\t-r\t(delete user's crontab)\n\n");
	fprintf(stderr, "\t-i\t(prompt before deleting user's crontab)\n");
	exit(ERROR_EXIT);
}


int
main(argc, argv)
	int	argc;
	char	*argv[];
{
	int	exitstatus;

	Pid = getpid();
	ProgramName = basename(argv[0]);

#if defined(POSIX)
	setlocale(LC_ALL, "");
#endif

#if defined(BSD)
	setlinebuf(stderr);
#endif
	if (argv[1] == NULL) {
		argv[1] = "-";
	}
	parse_args(argc, argv);		/* sets many globals, opens a file */
	set_cron_cwd();
	if (!allowed(User)) {
		if (getuid() != 0) {
			fprintf(stderr,
				"You (%s) are not allowed to use this program (%s)\n",
				User, ProgramName);
			fprintf(stderr, "See crontab(1) for more information\n");
			log_it(RealUser, Pid, "AUTH", "crontab command not allowed");
		} else {
		/* If the user is not allowed but root is running the
		* program warn but do not log */
			fprintf(stderr,
				"The user %s cannot use this program (%s)\n",
				User, ProgramName);
		}
		exit(ERROR_EXIT);
	}
	exitstatus = OK_EXIT;
	switch (Option) {
	case opt_list:		list_cmd();
				break;
	case opt_help:          usage("");
				break;
	case opt_delete:	delete_cmd();
				break;
	case opt_edit:		edit_cmd();
				break;
	case opt_replace:	if (replace_cmd() < 0)
					exitstatus = ERROR_EXIT;
				break;
				/* The following was added to shut
				 -Wall up, but it will never be hit,
				 because the option parser will catch
				 it */
	case opt_unknown: usage("unknown option specified");
	                  break;
	}
	exit(exitstatus);
	/*NOTREACHED*/
}

#if DEBUGGING
const char *getoptarg = "u:hnlerix:";
#else
const char *getoptarg = "u:hnleri";
#endif

static void
parse_args(argc, argv)
	int	argc;
	char	*argv[];
{
	int		argch;
	struct stat	statbuf;

	if (!(pw = getpwuid(getuid()))) {
		fprintf(stderr, "%s: your UID isn't in the passwd file.\n",
			ProgramName);
		fprintf(stderr, "bailing out.\n");
		exit(ERROR_EXIT);
	}
	if (((User=strdup(pw->pw_name)) == NULL) ||
			((RealUser=strdup(pw->pw_name)) == NULL)) {
		fprintf(stderr, "Memory allocation error\n");
		exit(ERROR_EXIT);
	}
	Filename[0] = '\0';
	Option = opt_unknown;
	PromptOnDelete = 0;

	while (EOF != (argch = getopt(argc, argv, getoptarg))) {
		switch (argch) {
#if DEBUGGING
		case 'x':
			if (!set_debug_flags(optarg))
				usage("bad debug option");
			break;
#endif
		case 'h':
		  if (Option != opt_unknown)
		    usage("only one operation permitted");
		  Option = opt_help;
		  break;
		case 'n':
		  dry_run = 1;
		  break;
		case 'u':
			if (!(pw = getpwnam(optarg)))
			{
				fprintf(stderr, "%s:  user `%s' unknown\n",
					ProgramName, optarg);
				exit(ERROR_EXIT);
			}
			if ((getuid() != ROOT_UID) &&
				(getuid() != pw->pw_uid))
			{
				fprintf(stderr,
					"must be privileged to use -u\n");
				exit(ERROR_EXIT);
			}
			free(User);
			if ((User=strdup(pw->pw_name)) == NULL) {
			        fprintf(stderr, "Memory allocation error\n");
				exit(ERROR_EXIT);
			}
			break;
		case 'l':
			if (Option != opt_unknown)
				usage("only one operation permitted");
			Option = opt_list;
			break;
		case 'r':
			if (Option != opt_unknown)
				usage("only one operation permitted");
			Option = opt_delete;
			break;
		case 'e':
			if (Option != opt_unknown)
				usage("only one operation permitted");
			Option = opt_edit;
			break;
		case 'i':
			PromptOnDelete = 1;
			break;
		default:
			usage("unrecognized option");
		}
	}

	endpwent();

	if (Option != opt_unknown) {
		if (argv[optind] != NULL) {
			usage("no arguments permitted after this option");
		}
	} else {
		if (argv[optind] != NULL) {
			Option = opt_replace;
			(void) strncpy (Filename, argv[optind], (sizeof Filename)-1);
			Filename[(sizeof Filename)-1] = '\0';

		} else {
			usage("file name must be specified for replace");
		}
	}

	if (Option == opt_replace) {
		/* we have to open the file here because we're going to
		 * chdir(2) into /var/cron before we get around to
		 * reading the file.
		 */
		if (!strcmp(Filename, "-")) {
			NewCrontab = stdin;
		} else {
			/* relinquish the setuid status of the binary during
			 * the open, lest nonroot users read files they should
			 * not be able to read.  we can't use access() here
			 * since there's a race condition.  thanks go out to
			 * Arnt Gulbrandsen <agulbra@pvv.unit.no> for spotting
			 * the race.
			 */

			if (swap_uids() < OK) {
				perror("swapping uids");
				exit(ERROR_EXIT);
			}
			if (!(NewCrontab = fopen(Filename, "r"))) {
				perror(Filename);
				exit(ERROR_EXIT);
			}
			/* Make sure we opened a normal file. */
			if (fstat(fileno(NewCrontab), &statbuf) < 0) {
				perror("fstat");
				exit(ERROR_EXIT);
			}
			if (!S_ISREG(statbuf.st_mode)) {
				fprintf(stderr, "%s: Not a regular file.\n", Filename);
				exit(ERROR_EXIT);
			}
			if (swap_uids_back() < OK) {
				perror("swapping uids back");
				exit(ERROR_EXIT);
			}
		}
	}

	Debug(DMISC, ("user=%s, file=%s, option=%s\n",
		      User, Filename, Options[(int)Option]))
}


static void
list_cmd() {
	char	n[MAX_FNAME];
	FILE	*f;
	int	ch;
	int     new_line = 1;
	int	x;
	char	*ctnh;

	log_it(RealUser, Pid, "LIST", User);
	(void) snprintf(n, MAX_FNAME, CRON_TAB(User));
	if (!(f = fopen(n, "r"))) {
		if (errno == ENOENT)
			fprintf(stderr, "no crontab for %s\n", User);
		else {
			fprintf(stderr, "%s/: fopen: %s\n", n, strerror(errno));
		}
		exit(ERROR_EXIT);
	}

	/* file is open. copy to stdout, close.
	   only exceptions: \b and \r which might be used to obfuscate
	   a listing.
	 */
	Set_LineNum(1)

	/* Don't list header lines unless CRONTAB_NOHEADER is 'N'.
	 *
	 * ignore the top few comments since we probably put them there.
	 */
	if (!(ctnh = getenv("CRONTAB_NOHEADER")) || toupper(*ctnh) != 'N') {
		for (x = 0;  x < NHEADER_LINES;  x++) {
			ch = get_char(f);
			if (EOF == ch) {
				break;
			}

			if ('#' != ch) {
				putchar(ch);
				break;
			}
			while (EOF != (ch = get_char(f))) {
				if (ch == '\n') {
					break;
				}
			}
			if (EOF == ch) {
				break;
			}
		}
	}

	while (EOF != (ch = get_char(f)))
	  switch (ch) {
	  case '\b':
	    putchar('\\'); putchar('b'); break;
	  case '\r':
	    putchar('\\'); putchar('r'); break;
	  default:
	    if(new_line && isatty(STDOUT)){
	      if(ch == '#'){
                printf(COMMENT_COLOR);
	      } else {
                printf(RESET_COLOR);
	      }
	    }
	    putchar(ch);
	    new_line = ch == '\n';
	  }
	fclose(f);
}


static void
delete_cmd() {
	char	n[MAX_FNAME];
	char	q[MAX_TEMPSTR];
	int	ans;
	struct stat fsbuf;

	/* Check if the user has a crontab file first */
	(void) snprintf(n, MAX_FNAME, CRON_TAB(User));
	if (stat(n, &fsbuf) < 0) {
		fprintf(stderr, "no crontab for %s\n", User);
		exit(ERROR_EXIT);
	}

	if (PromptOnDelete == 1) {
		printf("crontab: really delete %s's crontab? (y/n) ", User);
		fflush(stdout);
		ans = 0;
		q[0] = '\0';
		while ( ans == 0 ) {
			(void) fgets(q, sizeof q, stdin);
			switch (islower(q[0]) ? q[0] : tolower(q[0])) {
			case 'y':
			case 'n':
				ans = 1;
				break;
			default:
				fprintf(stderr, "Please enter Y or N: ");
			}
		}
		if ((q[0] == 'N') || (q[0] == 'n')) {
			exit(OK_EXIT);
		}
	}

	log_it(RealUser, Pid, "DELETE", User);
	if (unlink(n)) {
		if (errno == ENOENT)
			fprintf(stderr, "no crontab for %s\n", User);
		else {
			fprintf(stderr, "%s/: unlink: %s\n", CRONDIR, strerror(errno));
		}
		exit(ERROR_EXIT);
	}
	poke_daemon();
}


static void
check_error(msg)
	char	*msg;
{
	CheckErrorCount++;
	fprintf(stderr, "\"%s\":%d: %s\n", Filename, LineNumber-1, msg);
}


/* The next several function implement 'crontab -e' */

/* Returns -1 on error, or fd to tempfile. */
static int
create_tmp_crontab()
{
	const char *template = "/crontab.XXXXXX";
	int nfd;
	char *tmp;

	/* Create the temp directory. Note that since crontab is
	setuid(root), TMPDIR only work for root. */
	if ((tmp=getenv("TMPDIR")) && strlen(tmp) < MAX_FNAME) {
		strcpy(Directory, tmp);
	} else {
		strcpy(Directory,"/tmp");
	}

	if (strlen(Directory) + strlen(template) < MAX_FNAME) {
		strcat(Directory, template);
	} else {
		fprintf(stderr, "TMPDIR value is to long -- exiting\n");
		Directory[0] = '\0';
		return -1;
	}

	if (!mkdtemp(Directory)) {
		perror(Directory);
		Directory[0] = '\0';
		return -1;
	}

	/* Now create the actual temporary crontab file */
	if (snprintf(Filename, MAX_FNAME, "%s/crontab", Directory) >= MAX_FNAME) {
		fprintf(stderr, "Temporary filename too long - aborting\n");
		Filename[0] = '\0';
		return -1;
	}
	if ((nfd=open(Filename, O_CREAT|O_EXCL|O_WRONLY, 0600)) == -1) {
		perror(Filename);
		Filename[0] = '\0';
		return -1;
	}
	return nfd;
}

/* Re-open the new (temporary) crontab, and check to make sure that
   no-one is playing games. Return 0 on success, -1 on error. (Why not
   just fopen() and stat()? Because there's no guarantee that you
   fopen()ed the file you stat()ed.) */
static int
open_tmp_crontab(fsbuf)
	struct stat *fsbuf;
{
	int t;
	struct stat statbuf;

	if ((t=open(Filename, O_RDONLY)) < 0) {
		perror("Can't open tempfile after edit");
		return -1;
	}

	if (fstat(t, &statbuf) < 0) {
		perror("fstat");
		return -1;
	}
	if (statbuf.st_uid != getuid()) {
		fprintf(stderr, "Temporary crontab no longer owned by you.\n");
		return -1;;
	}

	if (!S_ISREG(statbuf.st_mode)) {
		fprintf(stderr, "The temporary crontab must remain a regular file");
		return -1;
	}

	if (statbuf.st_mtime == fsbuf->st_mtime) {
		return 1; /* No change to file */
	}

	NewCrontab = fdopen(t, "r");
	if (!NewCrontab) {
		perror("fdopen(): after edit");
		return -1;
	}
	return 0;
}

/* We can't just delete Filename, because the editor might have
   created other temporary files in there. If there's an error, we
   just bail, and let the user/admin deal with it.*/

static void
cleanup_tmp_crontab(void)
{
	DIR *dp;
	struct dirent *ep;
	char fname[MAX_FNAME];

	if (Directory[0] == '\0') {
		return;
	}

	/* Delete contents */
	dp = opendir (Directory);
	if (dp == NULL) {
		perror(Directory);
		return;
	}

	while ((ep = readdir (dp))) {
		if (!strcmp(ep->d_name, ".") ||
			!strcmp(ep->d_name, "..")) {
			continue;
		}
		if (snprintf(fname, MAX_FNAME, "%s/%s",
				Directory, ep->d_name) >= MAX_FNAME) {
			fprintf(stderr, "filename too long to delete: %s/%s",
				Directory, ep->d_name);
			return;
		}
		if (unlink(fname)) {
			perror(ep->d_name);
			return;
		}
	}
	(void) closedir (dp);

	if (rmdir(Directory)) {
		perror(Directory);
		return;
	}
	return;
}

static void
edit_cmd() {
	char		n[MAX_FNAME], q[MAX_TEMPSTR], *editor;
	FILE		*f;
	int		ch, t, x;
	struct stat	fsbuf;
	WAIT_T		waiter;
	PID_T		pid, xpid;
	mode_t		um;
	int		add_help_text = 0;

	log_it(RealUser, Pid, "BEGIN EDIT", User);
	(void) snprintf(n, MAX_FNAME, CRON_TAB(User));
	if (!(f = fopen(n, "r"))) {
		if (errno != ENOENT) {
			fprintf(stderr, "%s/: fdopen: %s", n, strerror(errno));
			exit(ERROR_EXIT);
		}
		fprintf(stderr, "no crontab for %s - using an empty one\n",
			User);
		if (!(f = fopen("/dev/null", "r"))) {
			perror("/dev/null");
			exit(ERROR_EXIT);
		}
		add_help_text = 1;
	}

	um = umask(077);

        if ((t=create_tmp_crontab()) < 0) {
                fprintf(stderr, "Creation of temporary crontab file failed - aborting\n");
                (void) umask(um);
		goto fatal;
	}

	(void) umask(um);
	if (!(NewCrontab = fdopen(t, "w"))) {
		perror("fdopen");
		goto fatal;
	}

	Set_LineNum(1)

	if (add_help_text) {
		fprintf(NewCrontab,
"# Edit this file to introduce tasks to be run by cron.\n"
"# \n"
"# Each task to run has to be defined through a single line\n"
"# indicating with different fields when the task will be run\n"
"# and what command to run for the task\n"
"# \n"
"# To define the time you can provide concrete values for\n"
"# minute (m), hour (h), day of month (dom), month (mon),\n"
"# and day of week (dow) or use '*' in these fields (for 'any').\n"
"# \n"
"# Notice that tasks will be started based on the cron's system\n"
"# daemon's notion of time and timezones.\n"
"# \n"
"# Output of the crontab jobs (including errors) is sent through\n"
"# email to the user the crontab file belongs to (unless redirected).\n"
"# \n"
"# For example, you can run a backup of all your user accounts\n"
"# at 5 a.m every week with:\n"
"# 0 5 * * 1 tar -zcf /var/backups/home.tgz /home/\n"
"# \n"
"# For more information see the manual pages of crontab(5) and cron(8)\n"
"# \n"
"# m h  dom mon dow   command\n" );
	}

	/* ignore the top few comments since we probably put them there.
	 */
	for (x = 0;  x < NHEADER_LINES;  x++) {
		ch = get_char(f);
		if (EOF == ch)
			break;
		if ('#' != ch) {
			putc(ch, NewCrontab);
			break;
		}
		while (EOF != (ch = get_char(f)))
			if (ch == '\n')
				break;
		if (EOF == ch)
			break;
	}

	/* copy the rest of the crontab (if any) to the temp file.
	 */
	if (EOF != ch)
		while (EOF != (ch = get_char(f)))
			putc(ch, NewCrontab);
	fclose(f);
	if (ferror(NewCrontab)) {
		fprintf(stderr, "%s: error while writing new crontab to %s\n",
			ProgramName, Filename);
	}
	if (fstat(t, &fsbuf) < 0) {
		perror("unable to stat temp file");
		goto fatal;
	}

	if ((!((editor = getenv("VISUAL")) && strlen(editor)))
	 && (!((editor = getenv("EDITOR")) && strlen(editor)))
	    ) {
		editor = EDITOR;
	}


        /*  Close before cleanup_tmp_crontab is called or otherwise
         *  (on NFS mounted /) will get renamed on unlink */
	if (fclose(NewCrontab) != 0) {
		perror(Filename);
                goto fatal;
	}

again: /* Loop point for retrying edit after error */

	/* Turn off signals. */
	(void)signal(SIGHUP, SIG_IGN);
	(void)signal(SIGINT, SIG_IGN);
	(void)signal(SIGQUIT, SIG_IGN);

	switch (pid = fork()) {
	case -1:
		perror("fork");
		goto fatal;
	case 0:
		/* child */
		if (setgid(getgid()) < 0) {
			perror("setgid(getgid())");
			exit(ERROR_EXIT);
		}
		if (setuid(getuid()) < 0) {
			perror("setuid(getuid())");
			exit(ERROR_EXIT);
		}
		if (chdir("/tmp") < 0) {
			perror("chdir(/tmp)");
			exit(ERROR_EXIT);
		}
		if (strlen(editor) + strlen(Filename) + 2 >= MAX_TEMPSTR) {
			fprintf(stderr, "%s: editor or filename too long\n",
				ProgramName);
			exit(ERROR_EXIT);
		}
		snprintf(q, MAX_TEMPSTR, "%s %s", editor, Filename);
		execlp(_PATH_BSHELL, _PATH_BSHELL, "-c", q, NULL);
		perror(editor);
		exit(ERROR_EXIT);
		/*NOTREACHED*/
	default:
		/* parent */
		break;
	}

	/* parent */
	while (1) {
		xpid = waitpid(pid, &waiter, WUNTRACED);
		if (xpid == -1) {
			fprintf(stderr, "%s: waitpid() failed waiting for PID %d from \"%s\": %s\n",
				ProgramName, pid, editor, strerror(errno));
		} else if (xpid != pid) {
			fprintf(stderr, "%s: wrong PID (%d != %d) from \"%s\"\n",
				ProgramName, xpid, pid, editor);
			goto fatal;
		} else if (WIFSTOPPED(waiter)) {
		        /* raise(WSTOPSIG(waiter)); Not needed and breaks in job control shell*/
		} else if (WIFEXITED(waiter) && WEXITSTATUS(waiter)) {
			fprintf(stderr, "%s: \"%s\" exited with status %d\n",
				ProgramName, editor, WEXITSTATUS(waiter));
			goto fatal;
		} else if (WIFSIGNALED(waiter)) {
			fprintf(stderr,
				"%s: \"%s\" killed; signal %d (%score dumped)\n",
				ProgramName, editor, WTERMSIG(waiter),
				WCOREDUMP(waiter) ?"" :"no ");
			goto fatal;
		} else
			break;
	}
	(void)signal(SIGHUP, SIG_DFL);
	(void)signal(SIGINT, SIG_DFL);
	(void)signal(SIGQUIT, SIG_DFL);
	(void)signal(SIGTSTP, SIG_DFL);

	switch (open_tmp_crontab(&fsbuf)) {
	case -1:
		fprintf(stderr, "Error while editing crontab\n");
		goto fatal;
	case 1:
		fprintf(stderr, "No modification made\n");
		goto remove;
	case 0:
		break;
	default:
		fprintf(stderr,
			"cron@packages.debian.org fscked up. Send him a nasty note\n");
		break;
	}

	fprintf(stderr, "%s: installing new crontab\n", ProgramName);
	switch (replace_cmd()) {
	case 0:
		break;
	case -1:
		for (;;) {
			printf("Do you want to retry the same edit? (y/n) ");
			fflush(stdout);
			q[0] = '\0';
			(void) fgets(q, sizeof q, stdin);
			switch (islower(q[0]) ? q[0] : tolower(q[0])) {
			case 'y':
				goto again;
			case 'n':
				goto abandon;
			default:
				fprintf(stderr, "Enter Y or N\n");
			}
		}
		/*NOTREACHED*/
	case -2:
	abandon:
		fprintf(stderr, "%s: edits left in %s\n",
			ProgramName, Filename);
		goto done;
	default:
		fprintf(stderr, "%s: panic: bad switch() in replace_cmd()\n",
			ProgramName);
		goto fatal;
	}

	if (fclose(NewCrontab) != 0) {
		perror(Filename);
	}

 remove:
	cleanup_tmp_crontab();
 done:
	log_it(RealUser, Pid, "END EDIT", User);
        return;
 fatal:
	cleanup_tmp_crontab();
	unlink(Filename);
	exit(ERROR_EXIT);
}

static char tn[MAX_FNAME];

static void sig_handler(int x)
{
	unlink(tn);
	exit(1);
}

/* returns	0	on success
 *		-1	on syntax error
 *		-2	on install error
 */
static int
replace_cmd() {
	char	n[MAX_FNAME], envstr[MAX_ENVSTR];
	FILE	*tmp;
	int	ch, eof, fd;
	int	nl = FALSE;
	entry	*e;
	time_t	now = time(NULL);
	char	**envp = env_init();
	mode_t	um;

	if (envp == NULL) {
		fprintf(stderr, "%s: Cannot allocate memory.\n", ProgramName);
		return (-2);
	}


	/* Assumes Linux-style signal handlers (takes int, returns void) */
	/* Signal handlers, to ensure we do not leave temp files in the
	   spool dir.  We don't remove these on exiting this function;
	   but that's OK, we exit immediately afterwards anyway. */
	signal(SIGHUP, sig_handler);
	signal(SIGINT, sig_handler);
	signal(SIGQUIT, sig_handler);
	signal(SIGTSTP, SIG_IGN);

	(void) snprintf(tn, MAX_FNAME, CRON_TAB("tmp.XXXXXX"));
	um = umask(077);
	fd = mkstemp(tn);
	if (fd < 0) {
		fprintf(stderr, "%s/: mkstemp: %s\n", CRONDIR, strerror(errno));
		return(-2);
	}
	tmp = fdopen(fd, "w+");
	if (!tmp) {
		fprintf(stderr, "%s/: fdopen: %s\n", CRONDIR, strerror(errno));
		return (-2);
	}
	(void) umask(um);

	/* write a signature at the top of the file.
	 *
	 * VERY IMPORTANT: make sure NHEADER_LINES agrees with this code.
	 */
	fprintf(tmp, "# DO NOT EDIT THIS FILE - edit the master and reinstall.\n");
	fprintf(tmp, "# (%s installed on %-24.24s)\n", Filename, ctime(&now));
	fprintf(tmp, "# (Cron version -- %s)\n", rcsid);

	/* copy the crontab to the tmp
	 */
	rewind(NewCrontab);
	Set_LineNum(1)
	while (EOF != (ch = get_char(NewCrontab)))
		putc(ch, tmp);

	if (ferror(tmp) || fflush(tmp) || fsync(fd)) {
		fprintf(stderr, "%s: %s: %s\n",
			ProgramName, tn, strerror(errno));
		fclose(tmp);  unlink(tn);
		return (-2);
	}

	/* check the syntax of the file being installed.
	 */
	rewind(tmp);
	/* BUG: was reporting errors after the EOF if there were any errors
	 * in the file proper -- kludged it by stopping after first error.
	 *		vix 31mar87
	 */
	Set_LineNum(1 - NHEADER_LINES)
	CheckErrorCount = 0;  eof = FALSE;
	while (!CheckErrorCount && !eof && LineNumber < MAX_TAB_LINES + 2) {
		switch (load_env(envstr, tmp)) {
		case ERR:
			eof = TRUE;
			if (envstr[0] == '\0')
				nl = TRUE;
			break;
		case FALSE:
			e = load_entry(tmp, check_error, pw, envp);
			if (e)
				free(e);
			break;
		case TRUE:
			break;
		}
	}

	if (LineNumber >= MAX_TAB_LINES + 2) {
		fprintf(stderr, "crontab is too long; maximum number of lines "
				"is %d.\n", MAX_TAB_LINES);
		fclose(tmp);  unlink(tn);
		return (-1);
	}

	if (CheckErrorCount != 0) {
		fprintf(stderr, "errors in crontab file, can't install.\n");
		fclose(tmp);  unlink(tn);
		return (-1);
	}

	if (nl == FALSE) {
		fprintf(stderr, "new crontab file is missing newline before "
				"EOF, can't install.\n");
		fclose(tmp);  unlink(tn);
		return (-1);
	}

	if (dry_run) {
	    /* the option switch -n was used. Do not write the crontab file */
	    /* instead display a pleasant message.                          */
	    fprintf(stderr, "The syntax of the crontab file was successfully checked.\n");
	    fclose(tmp); unlink(tn);
	    return (0);
	  }
	
#ifdef HAS_FCHMOD
	if (fchmod(fileno(tmp), 0600) < OK)
#else
	if (chmod(tn, 0600) < OK)
#endif
	{
		perror("chmod");
		fclose(tmp);  unlink(tn);
		return (-2);
	}

	if (fclose(tmp) == EOF) {
		perror("fclose");
		unlink(tn);
		return (-2);
	}

	/* Root on behalf of another user must set file owner to that user */
	if (getuid() == ROOT_UID && strcmp(User, RealUser) != 0) {
		if (chown(tn, pw->pw_uid, -1) != 0) {
			perror("chown");
			unlink(tn);
			return -2;
		}
	}

	(void) snprintf(n, sizeof(n), CRON_TAB(User));
	if (rename(tn, n)) {
		fprintf(stderr, "%s: %s: rename: %s\n",
			ProgramName, n, strerror(errno));
		unlink(tn);
		return (-2);
	}
	log_it(RealUser, Pid, "REPLACE", User);

	poke_daemon();

	return (0);
}


static void
poke_daemon() {
#ifdef USE_UTIMES
	struct timeval tvs[2];
	struct timezone tz;

	(void) gettimeofday(&tvs[0], &tz);
	tvs[1] = tvs[0];
	if (utimes(SPOOL_DIR, tvs) < OK) {
		fprintf(stderr, "%s/: utimes: %s", CRONDIR, strerror(errno));
		fputs("crontab: can't update mtime on spooldir\n", stderr);
		return;
	}
#else
	if (utime(SPOOL_DIR, NULL) < OK) {
		fprintf(stderr, "%s: utime: %s\n", CRONDIR, strerror(errno));
		fputs("crontab: can't update mtime on spooldir\n", stderr);
		return;
	}
#endif /*USE_UTIMES*/
}
