sudo/pathnames.h.in

/*
 * Copyright (c) 1996, 1998, 1999, 2001, 2004, 2005, 2007-2010
 *	Todd C. Miller <Todd.Miller@courtesan.com>.
 *
 * Permission to use, copy, modify, and distribute this software for any
 * purpose with or without fee is hereby granted, provided that the above
 * copyright notice and this permission notice appear in all copies.
 *
 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
 * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
 * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
 * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
 *
 * Sponsored in part by the Defense Advanced Research Projects
 * Agency (DARPA) and Air Force Research Laboratory, Air Force
 * Materiel Command, USAF, under agreement number F39502-99-1-0512.
 */

/*
 *  Pathnames to programs and files used by sudo.
 */

#ifdef HAVE_PATHS_H
#include <paths.h>
#endif /* HAVE_PATHS_H */

#ifdef HAVE_MAILLOCK_H
#include <maillock.h>
#endif /* HAVE_MAILLOCK_H */

#ifndef _PATH_DEV
#define _PATH_DEV		"/dev/"
#endif /* _PATH_DEV */

#ifndef _PATH_TTY
#define _PATH_TTY		"/dev/tty"
#endif /* _PATH_TTY */

#ifndef _PATH_DEVNULL
#define _PATH_DEVNULL		"/dev/null"
#endif /* _PATH_DEVNULL */

#ifndef _PATH_DEFPATH
#define _PATH_DEFPATH		"/usr/bin:/bin"
#endif /* _PATH_DEFPATH */

#ifndef _PATH_STDPATH
#define _PATH_STDPATH		"/usr/bin:/bin:/usr/sbin:/sbin"
#endif /* _PATH_STDPATH */

#ifndef _PATH_ENVIRONMENT
#define _PATH_ENVIRONMENT	"/etc/environment"
#endif /* _PATH_ENVIRONMENT */

/*
 * NOTE: _PATH_SUDO_CONF is usually overridden by the Makefile.
 */
#ifndef _PATH_SUDO_CONF
#define _PATH_SUDO_CONF		"/etc/sudo.conf"
#endif /* _PATH_SUDO_CONF */

/*
 * NOTE: _PATH_SUDOERS is usually overridden by the Makefile.
 */
#ifndef _PATH_SUDOERS
#define _PATH_SUDOERS		"/etc/sudoers"
#endif /* _PATH_SUDOERS */

/*
 * The following paths are controlled via the configure script.
 */

/*
 * Where to put the timestamp files.  Defaults to /var/run/sudo,
 * /var/adm/sudo or /usr/adm/sudo depending on what exists.
 */
#ifndef _PATH_SUDO_TIMEDIR
#undef _PATH_SUDO_TIMEDIR
#endif /* _PATH_SUDO_TIMEDIR */

/*
 * Where to put the I/O log files.  Defaults to /var/log/sudo-io,
 * /var/adm/sudo-io or /usr/adm/sudo-io depending on what exists.
 */
#ifndef _PATH_SUDO_IO_LOGDIR
#undef _PATH_SUDO_IO_LOGDIR
#endif /* _PATH_SUDO_IO_LOGDIR */

/*
 * Where to put the sudo log file when logging to a file.  Defaults to
 * /var/log/sudo.log if /var/log exists, else /var/adm/sudo.log.
 */
#ifndef _PATH_SUDO_LOGFILE
#undef _PATH_SUDO_LOGFILE
#endif /* _PATH_SUDO_LOGFILE */

#ifndef _PATH_SUDO_SENDMAIL
#undef _PATH_SUDO_SENDMAIL
#endif /* _PATH_SUDO_SENDMAIL */

#ifndef _PATH_SUDO_NOEXEC
#undef _PATH_SUDO_NOEXEC
#endif /* _PATH_SUDO_NOEXEC */

#ifndef _PATH_SUDO_ASKPASS
#undef _PATH_SUDO_ASKPASS
#endif /* _PATH_SUDO_ASKPASS */

#ifndef _PATH_SUDO_PLUGIN_DIR
#undef _PATH_SUDO_PLUGIN_DIR
#endif /* _PATH_SUDO_PLUGIN_DIR */

#ifndef _PATH_VI
#undef _PATH_VI
#endif /* _PATH_VI */

#ifndef _PATH_MV
#undef _PATH_MV
#endif /* _PATH_MV */

#ifndef _PATH_BSHELL
#undef _PATH_BSHELL
#endif /* _PATH_BSHELL */

#ifndef _PATH_TMP
#define	_PATH_TMP	"/tmp/"
#endif /* _PATH_TMP */

#ifndef _PATH_VARTMP
#define	_PATH_VARTMP	"/var/tmp/"
#endif /* _PATH_VARTMP */

#ifndef _PATH_USRTMP
#define	_PATH_USRTMP	"/usr/tmp/"
#endif /* _PATH_USRTMP */

#ifndef _PATH_MAILDIR
#undef _PATH_MAILDIR
#endif /* _PATH_MAILDIR */

#ifndef _PATH_UTMP
#undef _PATH_UTMP
#endif /* _PATH_UTMP */

#ifndef _PATH_SUDO_SESH
#undef _PATH_SUDO_SESH
#endif /* _PATH_SUDO_SESH */

#ifndef _PATH_LDAP_CONF
#undef	_PATH_LDAP_CONF
#endif /* _PATH_LDAP_CONF */

#ifndef _PATH_LDAP_SECRET
#undef	_PATH_LDAP_SECRET
#endif /* _PATH_LDAP_SECRET */

#ifndef _PATH_NSSWITCH_CONF
#undef	_PATH_NSSWITCH_CONF
#endif /* _PATH_NSSWITCH_CONF */

#ifndef _PATH_NETSVC_CONF
#undef	_PATH_NETSVC_CONF
#endif /* _PATH_NETSVC_CONF */
Initial revision 1994-03-10 07:45:06 +00:00			`/*`
Update copyright year 2010-06-14 12:19:49 -04:00			`* Copyright (c) 1996, 1998, 1999, 2001, 2004, 2005, 2007-2010`
More to a less restrictive, ISC-style license. 2004-02-13 21:36:43 +00:00			`* Todd C. Miller <Todd.Miller@courtesan.com>.`
Initial revision 1994-03-10 07:45:06 +00:00			`*`
More to a less restrictive, ISC-style license. 2004-02-13 21:36:43 +00:00			`* Permission to use, copy, modify, and distribute this software for any`
			`* purpose with or without fee is hereby granted, provided that the above`
			`* copyright notice and this permission notice appear in all copies.`
add 4th term to license similar to term 5 in the apache license 1999-07-31 16:19:50 +00:00			`*`
More to a less restrictive, ISC-style license. 2004-02-13 21:36:43 +00:00			`* THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES`
			`* WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF`
			`* MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR`
			`* ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES`
			`* WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN`
			`* ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF`
			`* OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.`
added copyright header 1994-03-12 18:57:27 +00:00			`*`
add DARPA credit on affected files 2003-04-16 00:42:10 +00:00			`* Sponsored in part by the Defense Advanced Research Projects`
			`* Agency (DARPA) and Air Force Research Laboratory, Air Force`
			`* Materiel Command, USAF, under agreement number F39502-99-1-0512.`
added copyright header 1994-03-12 18:57:27 +00:00			`*/`

			`/*`
			`* Pathnames to programs and files used by sudo.`
Initial revision 1994-03-10 07:45:06 +00:00			`*/`

			`#ifdef HAVE_PATHS_H`
			`#include <paths.h>`
			`#endif /* HAVE_PATHS_H */`

Add missing include of maillock.h for Solaris 2010-07-22 18:44:48 -04:00			`#ifdef HAVE_MAILLOCK_H`
			`#include <maillock.h>`
			`#endif /* HAVE_MAILLOCK_H */`

added _PATH_DEV 1995-09-03 18:12:00 +00:00			`#ifndef _PATH_DEV`
			`#define _PATH_DEV "/dev/"`
			`#endif /* _PATH_DEV */`

convert to pathnames.h.in 1998-09-20 23:10:04 +00:00			`#ifndef _PATH_TTY`
			`#define _PATH_TTY "/dev/tty"`
			`#endif /* _PATH_TTY */`

Add _PATH_DEVNULL for those without it. 2004-12-16 18:25:54 +00:00			`#ifndef _PATH_DEVNULL`
			`#define _PATH_DEVNULL "/dev/null"`
			`#endif /* _PATH_DEVNULL */`

o Remove assumption that PATH and TERM are not listed in env_keep o If no PATH is in the environment use a default value o If TERM is not set in the non-reset case also give it a default value. 2001-12-14 06:24:26 +00:00			`#ifndef _PATH_DEFPATH`
			`#define _PATH_DEFPATH "/usr/bin:/bin"`
			`#endif /* _PATH_DEFPATH */`

Use _PATH_STDPATH instead of _PATH_DEFPATH 2010-07-12 18:07:52 -04:00			`#ifndef _PATH_STDPATH`
			`#define _PATH_STDPATH "/usr/bin:/bin:/usr/sbin:/sbin"`
			`#endif /* _PATH_STDPATH */`

Add support for reading and /etc/environment file. Still needs to be documented and should probably only applies to OSes that have it (AIX and Linux, maybe others). 2007-12-21 21:53:32 +00:00			`#ifndef _PATH_ENVIRONMENT`
			`#define _PATH_ENVIRONMENT "/etc/environment"`
			`#endif /* _PATH_ENVIRONMENT */`

Modular sudo front-end which loads policy and I/O plugins that do most the actual work. Currently relies on dynamic loading using dlopen(). See doc/plugin.pod for the plugin API. 2010-02-20 09:41:49 -05:00			`/*`
			`* NOTE: _PATH_SUDO_CONF is usually overridden by the Makefile.`
			`*/`
			`#ifndef _PATH_SUDO_CONF`
			`#define _PATH_SUDO_CONF "/etc/sudo.conf"`
			`#endif /* _PATH_SUDO_CONF */`

_PATH_SUDO_SUDOERS & _PATH_SUDO_STMP are now overridden via Makefile 1995-11-17 02:06:25 +00:00			`/*`
s/overriden/overridden/; from Tobias Stoeckmann 2008-11-10 13:07:38 +00:00			`* NOTE: _PATH_SUDOERS is usually overridden by the Makefile.`
_PATH_SUDO_SUDOERS & _PATH_SUDO_STMP are now overridden via Makefile 1995-11-17 02:06:25 +00:00			`*/`
o /etc/stmp -> /etc/sudoers.tmp since solaris uses stmp as shadow temp file o _PATH_SUDO_SUDOERS -> _PATH_SUDOERS and _PATH_SUDO_STMP -> _PATH_SUDOERS_TMP 1999-08-06 09:37:03 +00:00			`#ifndef _PATH_SUDOERS`
			`#define _PATH_SUDOERS "/etc/sudoers"`
			`#endif /* _PATH_SUDOERS */`
changed _PATH_* to use _SUDO_PATH_* (which are defined in config.h) as a result, pathnames.h does not need to be run through configure and the user can override the configured values easily. 1995-01-16 21:30:48 +00:00
convert to pathnames.h.in 1998-09-20 23:10:04 +00:00			`/*`
			`* The following paths are controlled via the configure script.`
			`*/`
added /dev/tty 1994-06-05 21:17:18 +00:00
changed _PATH_* to use _SUDO_PATH_* (which are defined in config.h) as a result, pathnames.h does not need to be run through configure and the user can override the configured values easily. 1995-01-16 21:30:48 +00:00			`/*`
No longer use /tmp/.odus as a possible timestamp dir unless specifically configured to do so. Instead, if no /var/run exists, use /var/adm/sudo or /usr/adm/sudo. 2004-05-17 20:28:54 +00:00			`* Where to put the timestamp files. Defaults to /var/run/sudo,`
			`* /var/adm/sudo or /usr/adm/sudo depending on what exists.`
changed _PATH_* to use _SUDO_PATH_* (which are defined in config.h) as a result, pathnames.h does not need to be run through configure and the user can override the configured values easily. 1995-01-16 21:30:48 +00:00			`*/`
convert to pathnames.h.in 1998-09-20 23:10:04 +00:00			`#ifndef _PATH_SUDO_TIMEDIR`
			`#undef _PATH_SUDO_TIMEDIR`
			`#endif /* _PATH_SUDO_TIMEDIR */`
changed _PATH_* to use _SUDO_PATH_* (which are defined in config.h) as a result, pathnames.h does not need to be run through configure and the user can override the configured values easily. 1995-01-16 21:30:48 +00:00
First cut at session logging for sudo. Still need to write get_pty() for Unix 98 and old-style BSD ptys. Also needs documentation and general cleanup. 2009-08-06 00:04:14 +00:00			`/*`
Break sudoers transcript feature up into log_input and log_output. 2010-05-30 10:31:38 -04:00			`* Where to put the I/O log files. Defaults to /var/log/sudo-io,`
			`* /var/adm/sudo-io or /usr/adm/sudo-io depending on what exists.`
First cut at session logging for sudo. Still need to write get_pty() for Unix 98 and old-style BSD ptys. Also needs documentation and general cleanup. 2009-08-06 00:04:14 +00:00			`*/`
Break sudoers transcript feature up into log_input and log_output. 2010-05-30 10:31:38 -04:00			`#ifndef _PATH_SUDO_IO_LOGDIR`
			`#undef _PATH_SUDO_IO_LOGDIR`
			`#endif /* _PATH_SUDO_IO_LOGDIR */`
First cut at session logging for sudo. Still need to write get_pty() for Unix 98 and old-style BSD ptys. Also needs documentation and general cleanup. 2009-08-06 00:04:14 +00:00
_PATH_SUDO_LOGFILE now set based on configure 1995-03-30 02:12:36 +00:00			`/*`
convert to pathnames.h.in 1998-09-20 23:10:04 +00:00			`* Where to put the sudo log file when logging to a file. Defaults to`
			`* /var/log/sudo.log if /var/log exists, else /var/adm/sudo.log.`
_PATH_SUDO_LOGFILE now set based on configure 1995-03-30 02:12:36 +00:00			`*/`
			`#ifndef _PATH_SUDO_LOGFILE`
convert to pathnames.h.in 1998-09-20 23:10:04 +00:00			`#undef _PATH_SUDO_LOGFILE`
_PATH_SUDO_LOGFILE now set based on configure 1995-03-30 02:12:36 +00:00			`#endif /* _PATH_SUDO_LOGFILE */`

_PATH_SENDMAIL -> _PATH_SUDO_SENDMAIL so --without-sendmail works on systems that define in paths.h 2001-12-14 06:17:35 +00:00			`#ifndef _PATH_SUDO_SENDMAIL`
			`#undef _PATH_SUDO_SENDMAIL`
			`#endif /* _PATH_SUDO_SENDMAIL */`
changed _PATH_* to use _SUDO_PATH_* (which are defined in config.h) as a result, pathnames.h does not need to be run through configure and the user can override the configured values easily. 1995-01-16 21:30:48 +00:00
Add _PATH_SUDO_NOEXEC and corresponding --with-noexec configure option. The default value of noexec_file is set to this. 2004-01-05 03:58:39 +00:00			`#ifndef _PATH_SUDO_NOEXEC`
			`#undef _PATH_SUDO_NOEXEC`
			`#endif /* _PATH_SUDO_NOEXEC */`

Add support for running a helper program to read the password when no tty is present (or when specified with the -A flag). TODO: docs. 2008-03-02 14:31:57 +00:00			`#ifndef _PATH_SUDO_ASKPASS`
			`#undef _PATH_SUDO_ASKPASS`
			`#endif /* _PATH_SUDO_ASKPASS */`

Modular sudo front-end which loads policy and I/O plugins that do most the actual work. Currently relies on dynamic loading using dlopen(). See doc/plugin.pod for the plugin API. 2010-02-20 09:41:49 -05:00			`#ifndef _PATH_SUDO_PLUGIN_DIR`
			`#undef _PATH_SUDO_PLUGIN_DIR`
			`#endif /* _PATH_SUDO_PLUGIN_DIR */`

Initial revision 1994-03-10 07:45:06 +00:00			`#ifndef _PATH_VI`
convert to pathnames.h.in 1998-09-20 23:10:04 +00:00			`#undef _PATH_VI`
Initial revision 1994-03-10 07:45:06 +00:00			`#endif /* _PATH_VI */`
added _PATH_PWD 1994-06-04 18:47:00 +00:00
added _PATH_MV 1995-01-13 17:45:15 +00:00			`#ifndef _PATH_MV`
convert to pathnames.h.in 1998-09-20 23:10:04 +00:00			`#undef _PATH_MV`
added _PATH_MV 1995-01-13 17:45:15 +00:00			`#endif /* _PATH_MV */`
added _PATH_BSHELL 1996-02-05 02:58:17 +00:00
			`#ifndef _PATH_BSHELL`
convert to pathnames.h.in 1998-09-20 23:10:04 +00:00			`#undef _PATH_BSHELL`
added _PATH_BSHELL 1996-02-05 02:58:17 +00:00			`#endif /* _PATH_BSHELL */`
Add _PATH_TMP, _PATH_VARTMP and _PATH_USRTMP 2004-01-21 21:58:24 +00:00
			`#ifndef _PATH_TMP`
			`#define _PATH_TMP "/tmp/"`
			`#endif /* _PATH_TMP */`

			`#ifndef _PATH_VARTMP`
			`#define _PATH_VARTMP "/var/tmp/"`
			`#endif /* _PATH_VARTMP */`

			`#ifndef _PATH_USRTMP`
			`#define _PATH_USRTMP "/usr/tmp/"`
			`#endif /* _PATH_USRTMP */`
Allow --with-ldap-conf-file option to override LDAP_CONF 2004-08-27 03:44:35 +00:00
If env_reset is enabled, set the MAIL environment variable based on the target user unless MAIL is explicitly preserved in sudoers. 2010-07-19 12:50:59 -04:00			`#ifndef _PATH_MAILDIR`
			`#undef _PATH_MAILDIR`
			`#endif /* _PATH_MAILDIR */`

Add check for _PATH_UTMP 2011-03-15 11:56:49 -04:00			`#ifndef _PATH_UTMP`
			`#undef _PATH_UTMP`
			`#endif /* _PATH_UTMP */`

Add support for SELinux RBAC. Sudoers entries may specify a role and type. There are also role and type defaults that may be used. To make sure a transition occurs, when using RBAC commands are executed via the new sesh binary. Based on initial changes from Dan Walsh. 2008-02-09 14:30:06 +00:00			`#ifndef _PATH_SUDO_SESH`
			`#undef _PATH_SUDO_SESH`
			`#endif /* _PATH_SUDO_SESH */`

Allow --with-ldap-conf-file option to override LDAP_CONF 2004-08-27 03:44:35 +00:00			`#ifndef _PATH_LDAP_CONF`
Rename read_nss -> sudo_read_nss Add --with-nsswitch to allow users to specify nsswitch.conf path or disable it. If --with-nsswitch=no but --with-ldap, order is LDAP, then sudoers. Fix --with-ldap-conf-file and --with-ldap-secret-file 2008-01-01 18:22:03 +00:00			`#undef _PATH_LDAP_CONF`
Allow --with-ldap-conf-file option to override LDAP_CONF 2004-08-27 03:44:35 +00:00			`#endif /* _PATH_LDAP_CONF */`
_PATH_DEV_SYSTRACE 2004-09-24 00:15:13 +00:00
add _PATH_LDAP_SECRET 2005-06-26 22:36:51 +00:00			`#ifndef _PATH_LDAP_SECRET`
Rename read_nss -> sudo_read_nss Add --with-nsswitch to allow users to specify nsswitch.conf path or disable it. If --with-nsswitch=no but --with-ldap, order is LDAP, then sudoers. Fix --with-ldap-conf-file and --with-ldap-secret-file 2008-01-01 18:22:03 +00:00			`#undef _PATH_LDAP_SECRET`
add _PATH_LDAP_SECRET 2005-06-26 22:36:51 +00:00			`#endif /* _PATH_LDAP_SECRET */`
First cut at nsswitch.conf support. Further reorganizaton and related changes are forthcoming. 2007-12-28 16:20:45 +00:00
			`#ifndef _PATH_NSSWITCH_CONF`
Rename read_nss -> sudo_read_nss Add --with-nsswitch to allow users to specify nsswitch.conf path or disable it. If --with-nsswitch=no but --with-ldap, order is LDAP, then sudoers. Fix --with-ldap-conf-file and --with-ldap-secret-file 2008-01-01 18:22:03 +00:00			`#undef _PATH_NSSWITCH_CONF`
First cut at nsswitch.conf support. Further reorganizaton and related changes are forthcoming. 2007-12-28 16:20:45 +00:00			`#endif /* _PATH_NSSWITCH_CONF */`
Add support for AIX netsvc.conf (like nsswitch.conf). 2009-03-10 20:44:05 +00:00
			`#ifndef _PATH_NETSVC_CONF`
			`#undef _PATH_NETSVC_CONF`
			`#endif /* _PATH_NETSVC_CONF */`