- along with this program; if not, write to the Free Software
- Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
- 02110-1301, USA. */
-
-#ifndef MKFILE_H
-#define MKFILE_H
-
-
-/* Creates a temporary file and stores its name in *FILE_NAME and
- a file descriptor for it in *FD. Returns success. Caller is
- responsible for freeing *FILE_NAME. */
-int make_temp_file (int *fd, char **file_name);
-
-
-/* Creates a temporary file and stores its name in *FILE_NAME and
- a file stream for it in *FP. Returns success. Caller is
- responsible for freeing *FILE_NAME. */
-int make_unique_file_stream (FILE **fp, char **file_name) ;
+ along with this program. If not, see <http://www.gnu.org/licenses/>. */
+
+#ifndef MAKE_FILE_H
+#define MAKE_FILE_H
+
+#include <stdbool.h>
+#include <stdio.h>
+#include <sys/types.h>
+
+/* Prepares to atomically replace a (potentially) existing file
+ by a new file, by creating a temporary file with the given
+ PERMISSIONS bits in the same directory as *FILE_NAME.
+
+ Special files are an exception: they are not atomically
+ replaced but simply opened for writing.
+
+ If successful, stores the temporary file's name in *TMP_NAME
+ and a stream for it opened according to MODE (which should be
+ "w" or "wb") in *FP. Returns a ticket that can be used to
+ commit or abort the file replacement. If neither action has
+ yet been taken, program termination via signal will cause
+ *TMP_FILE to be unlinked.
+
+ The caller is responsible for closing *FP, but *TMP_NAME is
+ owned by the callee. */
+struct replace_file *replace_file_start (const char *file_name,
+ const char *mode, mode_t permissions,
+ FILE **fp, char **tmp_name);
+
+/* Commits or aborts the replacement of a (potentially) existing
+ file by a new file, using the ticket returned by
+ replace_file_start. Returns success. */
+bool replace_file_commit (struct replace_file *);
+bool replace_file_abort (struct replace_file *);