Ben Lindstrom | 5eabda3 | 2001-04-12 23:34:34 +0000 | [diff] [blame^] | 1 | /* $OpenBSD: pathnames.h,v 1.5 2001/04/12 19:15:24 markus Exp $ */ |
Ben Lindstrom | 36579d3 | 2001-01-29 07:39:26 +0000 | [diff] [blame] | 2 | |
Ben Lindstrom | 226cfa0 | 2001-01-22 05:34:40 +0000 | [diff] [blame] | 3 | /* |
| 4 | * Author: Tatu Ylonen <ylo@cs.hut.fi> |
| 5 | * Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland |
| 6 | * All rights reserved |
| 7 | * |
| 8 | * As far as I am concerned, the code I have written for this software |
| 9 | * can be used freely for any purpose. Any derived versions of this |
| 10 | * software must be clearly marked as such, and if the derived work is |
| 11 | * incompatible with the protocol description in the RFC file, it must be |
| 12 | * called by a name other than "ssh" or "Secure Shell". |
| 13 | */ |
| 14 | |
| 15 | #ifndef ETCDIR |
| 16 | #define ETCDIR "/etc" |
| 17 | #endif |
| 18 | |
| 19 | #ifndef _PATH_SSH_PIDDIR |
| 20 | #define _PATH_SSH_PIDDIR "/var/run" |
| 21 | #endif |
| 22 | |
| 23 | /* |
| 24 | * System-wide file containing host keys of known hosts. This file should be |
| 25 | * world-readable. |
| 26 | */ |
| 27 | #define _PATH_SSH_SYSTEM_HOSTFILE ETCDIR "/ssh_known_hosts" |
| 28 | #define _PATH_SSH_SYSTEM_HOSTFILE2 ETCDIR "/ssh_known_hosts2" |
| 29 | |
| 30 | /* |
| 31 | * Of these, ssh_host_key must be readable only by root, whereas ssh_config |
| 32 | * should be world-readable. |
| 33 | */ |
Ben Lindstrom | 226cfa0 | 2001-01-22 05:34:40 +0000 | [diff] [blame] | 34 | #define _PATH_SERVER_CONFIG_FILE ETCDIR "/sshd_config" |
| 35 | #define _PATH_HOST_CONFIG_FILE ETCDIR "/ssh_config" |
Ben Lindstrom | 5eabda3 | 2001-04-12 23:34:34 +0000 | [diff] [blame^] | 36 | #define _PATH_HOST_KEY_FILE ETCDIR "/ssh_host_key" |
Ben Lindstrom | 226cfa0 | 2001-01-22 05:34:40 +0000 | [diff] [blame] | 37 | #define _PATH_HOST_DSA_KEY_FILE ETCDIR "/ssh_host_dsa_key" |
Ben Lindstrom | 5eabda3 | 2001-04-12 23:34:34 +0000 | [diff] [blame^] | 38 | #define _PATH_HOST_RSA_KEY_FILE ETCDIR "/ssh_host_rsa_key" |
Ben Lindstrom | 226cfa0 | 2001-01-22 05:34:40 +0000 | [diff] [blame] | 39 | #define _PATH_DH_PRIMES ETCDIR "/primes" |
| 40 | |
Ben Lindstrom | 27eebe6 | 2001-01-25 23:04:22 +0000 | [diff] [blame] | 41 | #ifndef _PATH_SSH_PROGRAM |
Ben Lindstrom | 226cfa0 | 2001-01-22 05:34:40 +0000 | [diff] [blame] | 42 | #define _PATH_SSH_PROGRAM "/usr/bin/ssh" |
Ben Lindstrom | 27eebe6 | 2001-01-25 23:04:22 +0000 | [diff] [blame] | 43 | #endif |
Ben Lindstrom | 226cfa0 | 2001-01-22 05:34:40 +0000 | [diff] [blame] | 44 | |
| 45 | /* |
| 46 | * The process id of the daemon listening for connections is saved here to |
| 47 | * make it easier to kill the correct daemon when necessary. |
| 48 | */ |
| 49 | #define _PATH_SSH_DAEMON_PID_FILE _PATH_SSH_PIDDIR "/sshd.pid" |
| 50 | |
| 51 | /* |
| 52 | * The directory in user\'s home directory in which the files reside. The |
| 53 | * directory should be world-readable (though not all files are). |
| 54 | */ |
| 55 | #define _PATH_SSH_USER_DIR ".ssh" |
| 56 | |
| 57 | /* |
| 58 | * Per-user file containing host keys of known hosts. This file need not be |
| 59 | * readable by anyone except the user him/herself, though this does not |
| 60 | * contain anything particularly secret. |
| 61 | */ |
| 62 | #define _PATH_SSH_USER_HOSTFILE "~/.ssh/known_hosts" |
| 63 | #define _PATH_SSH_USER_HOSTFILE2 "~/.ssh/known_hosts2" |
| 64 | |
| 65 | /* |
| 66 | * Name of the default file containing client-side authentication key. This |
| 67 | * file should only be readable by the user him/herself. |
| 68 | */ |
| 69 | #define _PATH_SSH_CLIENT_IDENTITY ".ssh/identity" |
| 70 | #define _PATH_SSH_CLIENT_ID_DSA ".ssh/id_dsa" |
| 71 | #define _PATH_SSH_CLIENT_ID_RSA ".ssh/id_rsa" |
| 72 | |
| 73 | /* |
| 74 | * Configuration file in user\'s home directory. This file need not be |
| 75 | * readable by anyone but the user him/herself, but does not contain anything |
| 76 | * particularly secret. If the user\'s home directory resides on an NFS |
| 77 | * volume where root is mapped to nobody, this may need to be world-readable. |
| 78 | */ |
| 79 | #define _PATH_SSH_USER_CONFFILE ".ssh/config" |
| 80 | |
| 81 | /* |
| 82 | * File containing a list of those rsa keys that permit logging in as this |
| 83 | * user. This file need not be readable by anyone but the user him/herself, |
| 84 | * but does not contain anything particularly secret. If the user\'s home |
| 85 | * directory resides on an NFS volume where root is mapped to nobody, this |
| 86 | * may need to be world-readable. (This file is read by the daemon which is |
| 87 | * running as root.) |
| 88 | */ |
| 89 | #define _PATH_SSH_USER_PERMITTED_KEYS ".ssh/authorized_keys" |
| 90 | #define _PATH_SSH_USER_PERMITTED_KEYS2 ".ssh/authorized_keys2" |
| 91 | |
| 92 | /* |
| 93 | * Per-user and system-wide ssh "rc" files. These files are executed with |
| 94 | * /bin/sh before starting the shell or command if they exist. They will be |
| 95 | * passed "proto cookie" as arguments if X11 forwarding with spoofing is in |
| 96 | * use. xauth will be run if neither of these exists. |
| 97 | */ |
| 98 | #define _PATH_SSH_USER_RC ".ssh/rc" |
| 99 | #define _PATH_SSH_SYSTEM_RC ETCDIR "/sshrc" |
| 100 | |
| 101 | /* |
| 102 | * Ssh-only version of /etc/hosts.equiv. Additionally, the daemon may use |
| 103 | * ~/.rhosts and /etc/hosts.equiv if rhosts authentication is enabled. |
| 104 | */ |
| 105 | #define _PATH_SSH_HOSTS_EQUIV ETCDIR "/shosts.equiv" |
| 106 | #define _PATH_RHOSTS_EQUIV "/etc/hosts.equiv" |
| 107 | |
| 108 | /* |
| 109 | * Default location of askpass |
| 110 | */ |
Ben Lindstrom | cb57733 | 2001-01-22 21:06:19 +0000 | [diff] [blame] | 111 | #ifndef _PATH_SSH_ASKPASS_DEFAULT |
Ben Lindstrom | 226cfa0 | 2001-01-22 05:34:40 +0000 | [diff] [blame] | 112 | #define _PATH_SSH_ASKPASS_DEFAULT "/usr/X11R6/bin/ssh-askpass" |
Ben Lindstrom | cb57733 | 2001-01-22 21:06:19 +0000 | [diff] [blame] | 113 | #endif |
Ben Lindstrom | 226cfa0 | 2001-01-22 05:34:40 +0000 | [diff] [blame] | 114 | |
| 115 | /* for scp */ |
| 116 | #ifndef _PATH_CP |
| 117 | #define _PATH_CP "cp" |
| 118 | #endif |
| 119 | |
Damien Miller | d7686fd | 2001-02-10 00:40:03 +1100 | [diff] [blame] | 120 | /* for sftp */ |
| 121 | #ifndef _PATH_SFTP_SERVER |
| 122 | #define _PATH_SFTP_SERVER "/usr/libexec/sftp-server" |
| 123 | #endif |
Damien Miller | 896b88a | 2001-02-27 14:42:48 +1100 | [diff] [blame] | 124 | #ifndef _PATH_LS |
Damien Miller | d7686fd | 2001-02-10 00:40:03 +1100 | [diff] [blame] | 125 | #define _PATH_LS "ls" |
Damien Miller | 896b88a | 2001-02-27 14:42:48 +1100 | [diff] [blame] | 126 | #endif |
Damien Miller | d7686fd | 2001-02-10 00:40:03 +1100 | [diff] [blame] | 127 | |
Ben Lindstrom | 226cfa0 | 2001-01-22 05:34:40 +0000 | [diff] [blame] | 128 | /* path to login program */ |
| 129 | #ifndef LOGIN_PROGRAM |
| 130 | # ifdef LOGIN_PROGRAM_FALLBACK |
| 131 | # define LOGIN_PROGRAM LOGIN_PROGRAM_FALLBACK |
| 132 | # else |
| 133 | # define LOGIN_PROGRAM "/usr/bin/login" |
| 134 | # endif |
| 135 | #endif /* LOGIN_PROGRAM */ |
| 136 | |
| 137 | /* Askpass program define */ |
| 138 | #ifndef ASKPASS_PROGRAM |
| 139 | #define ASKPASS_PROGRAM "/usr/lib/ssh/ssh-askpass" |
| 140 | #endif /* ASKPASS_PROGRAM */ |
| 141 | |
| 142 | /* |
| 143 | * Relevant only when using builtin PRNG. |
| 144 | */ |
| 145 | #ifndef SSH_PRNG_SEED_FILE |
Ben Lindstrom | cb57733 | 2001-01-22 21:06:19 +0000 | [diff] [blame] | 146 | # define SSH_PRNG_SEED_FILE _PATH_SSH_USER_DIR"/prng_seed" |
Ben Lindstrom | 226cfa0 | 2001-01-22 05:34:40 +0000 | [diff] [blame] | 147 | #endif /* SSH_PRNG_SEED_FILE */ |
| 148 | #ifndef SSH_PRNG_COMMAND_FILE |
| 149 | # define SSH_PRNG_COMMAND_FILE ETCDIR "/ssh_prng_cmds" |
| 150 | #endif /* SSH_PRNG_COMMAND_FILE */ |
| 151 | |