[BACK]Return to pathnames.h CVS log [TXT][DIR] Up to [local] / src / usr.bin / ssh

Annotation of src/usr.bin/ssh/pathnames.h, Revision 1.21

1.21    ! djm         1: /* $OpenBSD: pathnames.h,v 1.20 2010/08/31 11:54:45 djm Exp $ */
1.2       niklas      2:
1.1       markus      3: /*
                      4:  * Author: Tatu Ylonen <ylo@cs.hut.fi>
                      5:  * Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland
                      6:  *                    All rights reserved
                      7:  *
                      8:  * As far as I am concerned, the code I have written for this software
                      9:  * can be used freely for any purpose.  Any derived versions of this
                     10:  * software must be clearly marked as such, and if the derived work is
                     11:  * incompatible with the protocol description in the RFC file, it must be
                     12:  * called by a name other than "ssh" or "Secure Shell".
                     13:  */
                     14:
                     15: #define ETCDIR                         "/etc"
1.11      deraadt    16: #define SSHDIR                         ETCDIR "/ssh"
1.1       markus     17: #define _PATH_SSH_PIDDIR               "/var/run"
                     18:
                     19: /*
                     20:  * System-wide file containing host keys of known hosts.  This file should be
                     21:  * world-readable.
                     22:  */
1.11      deraadt    23: #define _PATH_SSH_SYSTEM_HOSTFILE      SSHDIR "/ssh_known_hosts"
1.9       markus     24: /* backward compat for protocol 2 */
1.11      deraadt    25: #define _PATH_SSH_SYSTEM_HOSTFILE2     SSHDIR "/ssh_known_hosts2"
1.1       markus     26:
                     27: /*
                     28:  * Of these, ssh_host_key must be readable only by root, whereas ssh_config
                     29:  * should be world-readable.
                     30:  */
1.11      deraadt    31: #define _PATH_SERVER_CONFIG_FILE       SSHDIR "/sshd_config"
                     32: #define _PATH_HOST_CONFIG_FILE         SSHDIR "/ssh_config"
                     33: #define _PATH_HOST_KEY_FILE            SSHDIR "/ssh_host_key"
                     34: #define _PATH_HOST_DSA_KEY_FILE                SSHDIR "/ssh_host_dsa_key"
1.20      djm        35: #define _PATH_HOST_ECDSA_KEY_FILE      SSHDIR "/ssh_host_ecdsa_key"
1.11      deraadt    36: #define _PATH_HOST_RSA_KEY_FILE                SSHDIR "/ssh_host_rsa_key"
1.7       provos     37: #define _PATH_DH_MODULI                        ETCDIR "/moduli"
                     38: /* Backwards compatibility */
1.1       markus     39: #define _PATH_DH_PRIMES                        ETCDIR "/primes"
                     40:
                     41: #define _PATH_SSH_PROGRAM              "/usr/bin/ssh"
                     42:
                     43: /*
                     44:  * The process id of the daemon listening for connections is saved here to
                     45:  * make it easier to kill the correct daemon when necessary.
                     46:  */
                     47: #define _PATH_SSH_DAEMON_PID_FILE      _PATH_SSH_PIDDIR "/sshd.pid"
                     48:
                     49: /*
1.17      stevesk    50:  * The directory in user's home directory in which the files reside. The
1.1       markus     51:  * directory should be world-readable (though not all files are).
                     52:  */
                     53: #define _PATH_SSH_USER_DIR             ".ssh"
                     54:
                     55: /*
                     56:  * Per-user file containing host keys of known hosts.  This file need not be
                     57:  * readable by anyone except the user him/herself, though this does not
                     58:  * contain anything particularly secret.
                     59:  */
                     60: #define _PATH_SSH_USER_HOSTFILE                "~/.ssh/known_hosts"
1.9       markus     61: /* backward compat for protocol 2 */
1.1       markus     62: #define _PATH_SSH_USER_HOSTFILE2       "~/.ssh/known_hosts2"
                     63:
                     64: /*
                     65:  * Name of the default file containing client-side authentication key. This
                     66:  * file should only be readable by the user him/herself.
                     67:  */
                     68: #define _PATH_SSH_CLIENT_IDENTITY      ".ssh/identity"
                     69: #define _PATH_SSH_CLIENT_ID_DSA                ".ssh/id_dsa"
1.20      djm        70: #define _PATH_SSH_CLIENT_ID_ECDSA      ".ssh/id_ecdsa"
1.1       markus     71: #define _PATH_SSH_CLIENT_ID_RSA                ".ssh/id_rsa"
                     72:
                     73: /*
1.17      stevesk    74:  * Configuration file in user's home directory.  This file need not be
1.1       markus     75:  * readable by anyone but the user him/herself, but does not contain anything
1.17      stevesk    76:  * particularly secret.  If the user's home directory resides on an NFS
1.1       markus     77:  * volume where root is mapped to nobody, this may need to be world-readable.
                     78:  */
                     79: #define _PATH_SSH_USER_CONFFILE                ".ssh/config"
                     80:
                     81: /*
                     82:  * File containing a list of those rsa keys that permit logging in as this
                     83:  * user.  This file need not be readable by anyone but the user him/herself,
1.17      stevesk    84:  * but does not contain anything particularly secret.  If the user's home
1.1       markus     85:  * directory resides on an NFS volume where root is mapped to nobody, this
                     86:  * may need to be world-readable.  (This file is read by the daemon which is
                     87:  * running as root.)
                     88:  */
                     89: #define _PATH_SSH_USER_PERMITTED_KEYS  ".ssh/authorized_keys"
                     90:
                     91: /*
                     92:  * Per-user and system-wide ssh "rc" files.  These files are executed with
                     93:  * /bin/sh before starting the shell or command if they exist.  They will be
                     94:  * passed "proto cookie" as arguments if X11 forwarding with spoofing is in
                     95:  * use.  xauth will be run if neither of these exists.
                     96:  */
                     97: #define _PATH_SSH_USER_RC              ".ssh/rc"
1.11      deraadt    98: #define _PATH_SSH_SYSTEM_RC            SSHDIR "/sshrc"
1.1       markus     99:
                    100: /*
                    101:  * Ssh-only version of /etc/hosts.equiv.  Additionally, the daemon may use
                    102:  * ~/.rhosts and /etc/hosts.equiv if rhosts authentication is enabled.
                    103:  */
                    104: #define _PATH_SSH_HOSTS_EQUIV          ETCDIR "/shosts.equiv"
                    105: #define _PATH_RHOSTS_EQUIV             "/etc/hosts.equiv"
                    106:
                    107: /*
                    108:  * Default location of askpass
                    109:  */
                    110: #define _PATH_SSH_ASKPASS_DEFAULT      "/usr/X11R6/bin/ssh-askpass"
1.13      markus    111:
                    112: /* Location of ssh-keysign for hostbased authentication */
1.15      deraadt   113: #define _PATH_SSH_KEY_SIGN             "/usr/libexec/ssh-keysign"
1.18      markus    114:
1.19      djm       115: /* Location of ssh-pkcs11-helper to support keys in tokens */
1.18      markus    116: #define _PATH_SSH_PKCS11_HELPER                "/usr/libexec/ssh-pkcs11-helper"
1.6       markus    117:
                    118: /* xauth for X11 forwarding */
                    119: #define _PATH_XAUTH                    "/usr/X11R6/bin/xauth"
1.10      stevesk   120:
                    121: /* UNIX domain socket for X11 server; displaynum will replace %u */
                    122: #define _PATH_UNIX_X "/tmp/.X11-unix/X%u"
1.1       markus    123:
                    124: /* for scp */
                    125: #define _PATH_CP                       "cp"
1.3       markus    126:
                    127: /* for sftp */
                    128: #define _PATH_SFTP_SERVER              "/usr/libexec/sftp-server"
1.4       stevesk   129: #define _PATH_LS                       "ls"
1.12      stevesk   130:
                    131: /* chroot directory for unprivileged user when UsePrivilegeSeparation=yes */
                    132: #define _PATH_PRIVSEP_CHROOT_DIR       "/var/empty"
1.14      markus    133:
                    134: /* for passwd change */
                    135: #define _PATH_PASSWD_PROG              "/usr/bin/passwd"