mir/sudo
2
0
Fork 0
mirror of https://github.com/sudo-project/sudo.git synced 2025-08-22 01:49:11 +00:00
Code Issues Releases Wiki Activity
sudo/pathnames.h.in

209 lines
5.2 KiB
C
Raw Normal View History

Initial revision
1994-03-10 07:45:06 +00:00
/*
Switch to new time stamp file format. Each user now has a single file which may contain multiple records when per-tty time stamps are in use (the default). The time stamps use a monotonic timer where available and are once again stored in /var/run/sudo. The lecture status is now stored separately from the time stamps in a different directory.
2014-01-30 15:50:40 -07:00
* Copyright (c) 1996, 1998, 1999, 2001, 2004, 2005, 2007-2014
update my email to Todd.Miller@sudo.ws
2017-12-03 17:53:40 -07:00
* Todd C. Miller <Todd.Miller@sudo.ws>.
Initial revision
1994-03-10 07:45:06 +00:00
*
More to a less restrictive, ISC-style license.
2004-02-13 21:36:43 +00:00
* Permission to use, copy, modify, and distribute this software for any
* purpose with or without fee is hereby granted, provided that the above
* copyright notice and this permission notice appear in all copies.
add 4th term to license similar to term 5 in the apache license
1999-07-31 16:19:50 +00:00
*
More to a less restrictive, ISC-style license.
2004-02-13 21:36:43 +00:00
* THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
* WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
* MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
* ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
* WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
* ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
* OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
added copyright header
1994-03-12 18:57:27 +00:00
*
add DARPA credit on affected files
2003-04-16 00:42:10 +00:00
* Sponsored in part by the Defense Advanced Research Projects
* Agency (DARPA) and Air Force Research Laboratory, Air Force
* Materiel Command, USAF, under agreement number F39502-99-1-0512.
added copyright header
1994-03-12 18:57:27 +00:00
*/
/*
* Pathnames to programs and files used by sudo.
Initial revision
1994-03-10 07:45:06 +00:00
*/
#ifdef HAVE_PATHS_H
Whitespace changes.
2014-09-20 09:09:01 -06:00
# include <paths.h>
Initial revision
1994-03-10 07:45:06 +00:00
#endif /* HAVE_PATHS_H */
Add missing include of maillock.h for Solaris
2010-07-22 18:44:48 -04:00
#ifdef HAVE_MAILLOCK_H
Whitespace changes.
2014-09-20 09:09:01 -06:00
# include <maillock.h>
Add missing include of maillock.h for Solaris
2010-07-22 18:44:48 -04:00
#endif /* HAVE_MAILLOCK_H */
added _PATH_DEV
1995-09-03 18:12:00 +00:00
#ifndef _PATH_DEV
Whitespace changes.
2014-09-20 09:09:01 -06:00
# define _PATH_DEV "/dev/"
added _PATH_DEV
1995-09-03 18:12:00 +00:00
#endif /* _PATH_DEV */
convert to pathnames.h.in
1998-09-20 23:10:04 +00:00
#ifndef _PATH_TTY
Use _PATH_DEV consistently
2017-06-29 18:10:53 -06:00
# define _PATH_TTY _PATH_DEV "tty"
convert to pathnames.h.in
1998-09-20 23:10:04 +00:00
#endif /* _PATH_TTY */
Add _PATH_DEVNULL for those without it.
2004-12-16 18:25:54 +00:00
#ifndef _PATH_DEVNULL
Use _PATH_DEV consistently
2017-06-29 18:10:53 -06:00
# define _PATH_DEVNULL _PATH_DEV "null"
Add _PATH_DEVNULL for those without it.
2004-12-16 18:25:54 +00:00
#endif /* _PATH_DEVNULL */
o Remove assumption that PATH and TERM are not listed in env_keep o If no PATH is in the environment use a default value o If TERM is not set in the non-reset case also give it a default value.
2001-12-14 06:24:26 +00:00
#ifndef _PATH_DEFPATH
Whitespace changes.
2014-09-20 09:09:01 -06:00
# define _PATH_DEFPATH "/usr/bin:/bin"
o Remove assumption that PATH and TERM are not listed in env_keep o If no PATH is in the environment use a default value o If TERM is not set in the non-reset case also give it a default value.
2001-12-14 06:24:26 +00:00
#endif /* _PATH_DEFPATH */
Use _PATH_STDPATH instead of _PATH_DEFPATH
2010-07-12 18:07:52 -04:00
#ifndef _PATH_STDPATH
Whitespace changes.
2014-09-20 09:09:01 -06:00
# define _PATH_STDPATH "/usr/bin:/bin:/usr/sbin:/sbin"
Use _PATH_STDPATH instead of _PATH_DEFPATH
2010-07-12 18:07:52 -04:00
#endif /* _PATH_STDPATH */
Add support for reading and /etc/environment file. Still needs to be documented and should probably only applies to OSes that have it (AIX and Linux, maybe others).
2007-12-21 21:53:32 +00:00
#ifndef _PATH_ENVIRONMENT
Whitespace changes.
2014-09-20 09:09:01 -06:00
# define _PATH_ENVIRONMENT "/etc/environment"
Add support for reading and /etc/environment file. Still needs to be documented and should probably only applies to OSes that have it (AIX and Linux, maybe others).
2007-12-21 21:53:32 +00:00
#endif /* _PATH_ENVIRONMENT */
Modular sudo front-end which loads policy and I/O plugins that do most the actual work. Currently relies on dynamic loading using dlopen(). See doc/plugin.pod for the plugin API.
2010-02-20 09:41:49 -05:00
/*
* NOTE: _PATH_SUDO_CONF is usually overridden by the Makefile.
*/
#ifndef _PATH_SUDO_CONF
Whitespace changes.
2014-09-20 09:09:01 -06:00
# define _PATH_SUDO_CONF "/etc/sudo.conf"
Modular sudo front-end which loads policy and I/O plugins that do most the actual work. Currently relies on dynamic loading using dlopen(). See doc/plugin.pod for the plugin API.
2010-02-20 09:41:49 -05:00
#endif /* _PATH_SUDO_CONF */
_PATH_SUDO_SUDOERS & _PATH_SUDO_STMP are now overridden via Makefile
1995-11-17 02:06:25 +00:00
/*
s/overriden/overridden/; from Tobias Stoeckmann
2008-11-10 13:07:38 +00:00
* NOTE: _PATH_SUDOERS is usually overridden by the Makefile.
_PATH_SUDO_SUDOERS & _PATH_SUDO_STMP are now overridden via Makefile
1995-11-17 02:06:25 +00:00
*/
o /etc/stmp -> /etc/sudoers.tmp since solaris uses stmp as shadow temp file o _PATH_SUDO_SUDOERS -> _PATH_SUDOERS and _PATH_SUDO_STMP -> _PATH_SUDOERS_TMP
1999-08-06 09:37:03 +00:00
#ifndef _PATH_SUDOERS
Whitespace changes.
2014-09-20 09:09:01 -06:00
# define _PATH_SUDOERS "/etc/sudoers"
o /etc/stmp -> /etc/sudoers.tmp since solaris uses stmp as shadow temp file o _PATH_SUDO_SUDOERS -> _PATH_SUDOERS and _PATH_SUDO_STMP -> _PATH_SUDOERS_TMP
1999-08-06 09:37:03 +00:00
#endif /* _PATH_SUDOERS */
changed _PATH_* to use _SUDO_PATH_* (which are defined in config.h) as a result, pathnames.h does not need to be run through configure and the user can override the configured values easily.
1995-01-16 21:30:48 +00:00
Add support for setting default options in a config file. In addition to expand_aliases, input_format and output_format, both the initial sudoOrder and the increment when updating sudoOrder for subsequent sudoRole objects can be specified. Command line options have also been added for the start order and increment.
2018-02-24 09:23:14 -07:00
/*
* NOTE: _PATH_CVTSUDOERS_CONF is usually overridden by the Makefile.
*/
#ifndef _PATH_CVTSUDOERS_CONF
# define _PATH_CVTSUDOERS_CONF "/etc/cvtsudoers.conf"
#endif /* _PATH_CVTSUDOERS_CONF */
convert to pathnames.h.in
1998-09-20 23:10:04 +00:00
/*
* The following paths are controlled via the configure script.
*/
added /dev/tty
1994-06-05 21:17:18 +00:00
changed _PATH_* to use _SUDO_PATH_* (which are defined in config.h) as a result, pathnames.h does not need to be run through configure and the user can override the configured values easily.
1995-01-16 21:30:48 +00:00
/*
Switch to new time stamp file format. Each user now has a single file which may contain multiple records when per-tty time stamps are in use (the default). The time stamps use a monotonic timer where available and are once again stored in /var/run/sudo. The lecture status is now stored separately from the time stamps in a different directory.
2014-01-30 15:50:40 -07:00
* Where to store the time stamp files. Defaults to /var/run/sudo/ts,
* /var/db/sudo/ts, /var/lib/sudo/ts, /var/adm/sudo/ts or /usr/adm/sudo/ts
* depending on what exists on the system.
changed _PATH_* to use _SUDO_PATH_* (which are defined in config.h) as a result, pathnames.h does not need to be run through configure and the user can override the configured values easily.
1995-01-16 21:30:48 +00:00
*/
convert to pathnames.h.in
1998-09-20 23:10:04 +00:00
#ifndef _PATH_SUDO_TIMEDIR
Whitespace changes.
2014-09-20 09:09:01 -06:00
# undef _PATH_SUDO_TIMEDIR
convert to pathnames.h.in
1998-09-20 23:10:04 +00:00
#endif /* _PATH_SUDO_TIMEDIR */
changed _PATH_* to use _SUDO_PATH_* (which are defined in config.h) as a result, pathnames.h does not need to be run through configure and the user can override the configured values easily.
1995-01-16 21:30:48 +00:00
Switch to new time stamp file format. Each user now has a single file which may contain multiple records when per-tty time stamps are in use (the default). The time stamps use a monotonic timer where available and are once again stored in /var/run/sudo. The lecture status is now stored separately from the time stamps in a different directory.
2014-01-30 15:50:40 -07:00
/*
* Where to store the lecture status files. Defaults to /var/db/sudo/lectured,
* /var/lib/sudo/lectured, /var/adm/sudo/lectured or /usr/adm/sudo/lectured
* depending on what exists on the system.
*/
#ifndef _PATH_SUDO_LECTURE_DIR
Whitespace changes.
2014-09-20 09:09:01 -06:00
# undef _PATH_SUDO_LECTURE_DIR
Switch to new time stamp file format. Each user now has a single file which may contain multiple records when per-tty time stamps are in use (the default). The time stamps use a monotonic timer where available and are once again stored in /var/run/sudo. The lecture status is now stored separately from the time stamps in a different directory.
2014-01-30 15:50:40 -07:00
#endif /* _PATH_SUDO_LECTURE_DIR */
First cut at session logging for sudo. Still need to write get_pty() for Unix 98 and old-style BSD ptys. Also needs documentation and general cleanup.
2009-08-06 00:04:14 +00:00
/*
Break sudoers transcript feature up into log_input and log_output.
2010-05-30 10:31:38 -04:00
* Where to put the I/O log files. Defaults to /var/log/sudo-io,
* /var/adm/sudo-io or /usr/adm/sudo-io depending on what exists.
First cut at session logging for sudo. Still need to write get_pty() for Unix 98 and old-style BSD ptys. Also needs documentation and general cleanup.
2009-08-06 00:04:14 +00:00
*/
Break sudoers transcript feature up into log_input and log_output.
2010-05-30 10:31:38 -04:00
#ifndef _PATH_SUDO_IO_LOGDIR
Whitespace changes.
2014-09-20 09:09:01 -06:00
# undef _PATH_SUDO_IO_LOGDIR
Break sudoers transcript feature up into log_input and log_output.
2010-05-30 10:31:38 -04:00
#endif /* _PATH_SUDO_IO_LOGDIR */
First cut at session logging for sudo. Still need to write get_pty() for Unix 98 and old-style BSD ptys. Also needs documentation and general cleanup.
2009-08-06 00:04:14 +00:00
_PATH_SUDO_LOGFILE now set based on configure
1995-03-30 02:12:36 +00:00
/*
convert to pathnames.h.in
1998-09-20 23:10:04 +00:00
* Where to put the sudo log file when logging to a file. Defaults to
* /var/log/sudo.log if /var/log exists, else /var/adm/sudo.log.
_PATH_SUDO_LOGFILE now set based on configure
1995-03-30 02:12:36 +00:00
*/
#ifndef _PATH_SUDO_LOGFILE
Whitespace changes.
2014-09-20 09:09:01 -06:00
# undef _PATH_SUDO_LOGFILE
_PATH_SUDO_LOGFILE now set based on configure
1995-03-30 02:12:36 +00:00
#endif /* _PATH_SUDO_LOGFILE */
_PATH_SENDMAIL -> _PATH_SUDO_SENDMAIL so --without-sendmail works on systems that define in paths.h
2001-12-14 06:17:35 +00:00
#ifndef _PATH_SUDO_SENDMAIL
Whitespace changes.
2014-09-20 09:09:01 -06:00
# undef _PATH_SUDO_SENDMAIL
_PATH_SENDMAIL -> _PATH_SUDO_SENDMAIL so --without-sendmail works on systems that define in paths.h
2001-12-14 06:17:35 +00:00
#endif /* _PATH_SUDO_SENDMAIL */
changed _PATH_* to use _SUDO_PATH_* (which are defined in config.h) as a result, pathnames.h does not need to be run through configure and the user can override the configured values easily.
1995-01-16 21:30:48 +00:00
Add _PATH_SUDO_NOEXEC and corresponding --with-noexec configure option. The default value of noexec_file is set to this.
2004-01-05 03:58:39 +00:00
#ifndef _PATH_SUDO_NOEXEC
Whitespace changes.
2014-09-20 09:09:01 -06:00
# undef _PATH_SUDO_NOEXEC
Add _PATH_SUDO_NOEXEC and corresponding --with-noexec configure option. The default value of noexec_file is set to this.
2004-01-05 03:58:39 +00:00
#endif /* _PATH_SUDO_NOEXEC */
Add support for running a helper program to read the password when no tty is present (or when specified with the -A flag). TODO: docs.
2008-03-02 14:31:57 +00:00
#ifndef _PATH_SUDO_ASKPASS
Whitespace changes.
2014-09-20 09:09:01 -06:00
# undef _PATH_SUDO_ASKPASS
Add support for running a helper program to read the password when no tty is present (or when specified with the -A flag). TODO: docs.
2008-03-02 14:31:57 +00:00
#endif /* _PATH_SUDO_ASKPASS */
Modular sudo front-end which loads policy and I/O plugins that do most the actual work. Currently relies on dynamic loading using dlopen(). See doc/plugin.pod for the plugin API.
2010-02-20 09:41:49 -05:00
#ifndef _PATH_SUDO_PLUGIN_DIR
Whitespace changes.
2014-09-20 09:09:01 -06:00
# undef _PATH_SUDO_PLUGIN_DIR
Modular sudo front-end which loads policy and I/O plugins that do most the actual work. Currently relies on dynamic loading using dlopen(). See doc/plugin.pod for the plugin API.
2010-02-20 09:41:49 -05:00
#endif /* _PATH_SUDO_PLUGIN_DIR */
Add a new "devsearch" Path setting to sudo.conf for configuring the /dev paths to traverse instead of hard-coding a list in ttyname.c The default value can be set at configure time.
2017-05-30 10:44:11 -06:00
#ifndef _PATH_SUDO_DEVSEARCH
# undef _PATH_SUDO_DEVSEARCH
#endif /* _PATH_SUDO_DEVSEARCH */
Initial revision
1994-03-10 07:45:06 +00:00
#ifndef _PATH_VI
Whitespace changes.
2014-09-20 09:09:01 -06:00
# undef _PATH_VI
Initial revision
1994-03-10 07:45:06 +00:00
#endif /* _PATH_VI */
added _PATH_PWD
1994-06-04 18:47:00 +00:00
added _PATH_MV
1995-01-13 17:45:15 +00:00
#ifndef _PATH_MV
Whitespace changes.
2014-09-20 09:09:01 -06:00
# undef _PATH_MV
added _PATH_MV
1995-01-13 17:45:15 +00:00
#endif /* _PATH_MV */
added _PATH_BSHELL
1996-02-05 02:58:17 +00:00
#ifndef _PATH_BSHELL
Whitespace changes.
2014-09-20 09:09:01 -06:00
# undef _PATH_BSHELL
added _PATH_BSHELL
1996-02-05 02:58:17 +00:00
#endif /* _PATH_BSHELL */
Add _PATH_TMP, _PATH_VARTMP and _PATH_USRTMP
2004-01-21 21:58:24 +00:00
#ifndef _PATH_TMP
Whitespace changes.
2014-09-20 09:09:01 -06:00
# define _PATH_TMP "/tmp/"
Add _PATH_TMP, _PATH_VARTMP and _PATH_USRTMP
2004-01-21 21:58:24 +00:00
#endif /* _PATH_TMP */
#ifndef _PATH_VARTMP
Whitespace changes.
2014-09-20 09:09:01 -06:00
# define _PATH_VARTMP "/var/tmp/"
Add _PATH_TMP, _PATH_VARTMP and _PATH_USRTMP
2004-01-21 21:58:24 +00:00
#endif /* _PATH_VARTMP */
#ifndef _PATH_USRTMP
Whitespace changes.
2014-09-20 09:09:01 -06:00
# define _PATH_USRTMP "/usr/tmp/"
Add _PATH_TMP, _PATH_VARTMP and _PATH_USRTMP
2004-01-21 21:58:24 +00:00
#endif /* _PATH_USRTMP */
Allow --with-ldap-conf-file option to override LDAP_CONF
2004-08-27 03:44:35 +00:00
If env_reset is enabled, set the MAIL environment variable based on the target user unless MAIL is explicitly preserved in sudoers.
2010-07-19 12:50:59 -04:00
#ifndef _PATH_MAILDIR
Whitespace changes.
2014-09-20 09:09:01 -06:00
# undef _PATH_MAILDIR
If env_reset is enabled, set the MAIL environment variable based on the target user unless MAIL is explicitly preserved in sudoers.
2010-07-19 12:50:59 -04:00
#endif /* _PATH_MAILDIR */
Add check for _PATH_UTMP
2011-03-15 11:56:49 -04:00
#ifndef _PATH_UTMP
Whitespace changes.
2014-09-20 09:09:01 -06:00
# undef _PATH_UTMP
Add check for _PATH_UTMP
2011-03-15 11:56:49 -04:00
#endif /* _PATH_UTMP */
Add support for SELinux RBAC. Sudoers entries may specify a role and type. There are also role and type defaults that may be used. To make sure a transition occurs, when using RBAC commands are executed via the new sesh binary. Based on initial changes from Dan Walsh.
2008-02-09 14:30:06 +00:00
#ifndef _PATH_SUDO_SESH
Whitespace changes.
2014-09-20 09:09:01 -06:00
# undef _PATH_SUDO_SESH
Add support for SELinux RBAC. Sudoers entries may specify a role and type. There are also role and type defaults that may be used. To make sure a transition occurs, when using RBAC commands are executed via the new sesh binary. Based on initial changes from Dan Walsh.
2008-02-09 14:30:06 +00:00
#endif /* _PATH_SUDO_SESH */
Allow --with-ldap-conf-file option to override LDAP_CONF
2004-08-27 03:44:35 +00:00
#ifndef _PATH_LDAP_CONF
Whitespace changes.
2014-09-20 09:09:01 -06:00
# undef _PATH_LDAP_CONF
Allow --with-ldap-conf-file option to override LDAP_CONF
2004-08-27 03:44:35 +00:00
#endif /* _PATH_LDAP_CONF */
_PATH_DEV_SYSTRACE
2004-09-24 00:15:13 +00:00
add _PATH_LDAP_SECRET
2005-06-26 22:36:51 +00:00
#ifndef _PATH_LDAP_SECRET
Whitespace changes.
2014-09-20 09:09:01 -06:00
# undef _PATH_LDAP_SECRET
add _PATH_LDAP_SECRET
2005-06-26 22:36:51 +00:00
#endif /* _PATH_LDAP_SECRET */
First cut at nsswitch.conf support. Further reorganizaton and related changes are forthcoming.
2007-12-28 16:20:45 +00:00
Use the value of ipa_hostname from /etc/sssd/sssd.conf if present instead of the system hostname.
2016-06-04 19:52:10 -06:00
#ifndef _PATH_SSSD_CONF
# undef _PATH_SSSD_CONF
#endif /* _PATH_SSSD_CONF */
Support for using SSSD (http://fedorahosted.org/sssd/) as a sudoers data source. From Daniel Kopecek and Pavel Brezina.
2012-08-10 11:59:26 -04:00
#ifndef _PATH_SSSD_LIB
Whitespace changes.
2014-09-20 09:09:01 -06:00
# undef _PATH_SSSD_LIB
Support for using SSSD (http://fedorahosted.org/sssd/) as a sudoers data source. From Daniel Kopecek and Pavel Brezina.
2012-08-10 11:59:26 -04:00
#endif /* _PATH_SSSD_LIB */
First cut at nsswitch.conf support. Further reorganizaton and related changes are forthcoming.
2007-12-28 16:20:45 +00:00
#ifndef _PATH_NSSWITCH_CONF
Whitespace changes.
2014-09-20 09:09:01 -06:00
# undef _PATH_NSSWITCH_CONF
First cut at nsswitch.conf support. Further reorganizaton and related changes are forthcoming.
2007-12-28 16:20:45 +00:00
#endif /* _PATH_NSSWITCH_CONF */
Add support for AIX netsvc.conf (like nsswitch.conf).
2009-03-10 20:44:05 +00:00
#ifndef _PATH_NETSVC_CONF
Whitespace changes.
2014-09-20 09:09:01 -06:00
# undef _PATH_NETSVC_CONF
Add support for AIX netsvc.conf (like nsswitch.conf).
2009-03-10 20:44:05 +00:00
#endif /* _PATH_NETSVC_CONF */
On AIX, _PATH_BSHELL is /usr/bin/bsh but we want to use /usr/bin/sh (which is usually ksh). This makes sudo's behavior when executing a shell without the #! magic number match execvp() on AIX.
2014-09-20 09:21:51 -06:00
Sanity check the TZ environment variable by special casing it in env_check. The --with-tzdir configure option can be used to specify the zoneinfo directory if configure doesn't find it.
2015-02-06 11:01:05 -07:00
#ifndef _PATH_ZONEINFO
# undef _PATH_ZONEINFO
#endif /* _PATH_ZONEINFO */
Only redefine _PATH_BSHELL on AIX if we included paths.h.
2014-09-20 10:16:46 -06:00
/* On AIX, _PATH_BSHELL in paths.h is /usr/bin/bsh but we want /usr/bin/sh */
On AIX, _PATH_BSHELL is /usr/bin/bsh but we want to use /usr/bin/sh (which is usually ksh). This makes sudo's behavior when executing a shell without the #! magic number match execvp() on AIX.
2014-09-20 09:21:51 -06:00
#ifndef _PATH_SUDO_BSHELL
Only redefine _PATH_BSHELL on AIX if we included paths.h.
2014-09-20 10:16:46 -06:00
# if defined(_AIX) && defined(HAVE_PATHS_H)
On AIX, _PATH_BSHELL is /usr/bin/bsh but we want to use /usr/bin/sh (which is usually ksh). This makes sudo's behavior when executing a shell without the #! magic number match execvp() on AIX.
2014-09-20 09:21:51 -06:00
# define _PATH_SUDO_BSHELL "/usr/bin/sh"
# else
# define _PATH_SUDO_BSHELL _PATH_BSHELL
# endif
#endif /* _PATH_SUDO_BSHELL */
Reference in New Issue Copy Permalink