rc.conf revision 1.103 1 # $NetBSD: rc.conf,v 1.103 2009/04/28 23:30:34 roy Exp $
2 #
3 # /etc/defaults/rc.conf --
4 # default configuration of /etc/rc.conf
5 #
6 # see rc.conf(5) for more information.
7 #
8 # DO NOT EDIT THIS FILE DIRECTLY; IT MAY BE REPLACED DURING A SYSTEM UPGRADE.
9 # EDIT /etc/rc.conf INSTEAD.
10 #
11
12 #
13 # Use program=YES to enable program, NO to disable it. program_flags are
14 # passed to the program on the command line.
15 #
16
17 # Uncomment this if you want to use local paths in rc.
18 #
19 #export PATH=$PATH:/usr/pkg/sbin:/usr/pkg/bin:/usr/local/sbin:/usr/local/bin
20
21 # Uncomment the following to execute each /etc/rc.d script in
22 # the current shell rather than in a subshell. This may be
23 # faster on very slow machines that have an expensive fork(2).
24 # NOTE: USE THIS AT YOUR OWN RISK; A ROGUE COMMAND
25 # MAY INADVERTENTLY PREVENT BOOT TO MULTIUSER.
26 #
27 #rc_fast_and_loose=YES
28
29 # Additional flags to the rcorder(8) that's run by /etc/rc.
30 #
31 rc_rcorder_flags=""
32
33 # The directories searched for rc scripts.
34 # These directories must be part of the root filesystem.
35 rc_directories=/etc/rc.d
36
37 # If this is set to NO, shutdown(8) will not run /etc/rc.shutdown.
38 #
39 do_rcshutdown=YES
40
41 # Additional flags to the rcorder(8) that's run by /etc/rc.shutdown.
42 #
43 rcshutdown_rcorder_flags=""
44
45 # If this is non-blank, use as the number of seconds to run a watchdog
46 # timer which will terminate /etc/rc.shutdown if the timeout expires.
47 #
48 rcshutdown_timeout=""
49
50
51 # Basic network configuration
52 #
53
54 # Fully Qualified Internet Domain Name (a.k.a. hostname, e.g. foo.baz.edu).
55 # If blank, use /etc/myname.
56 #
57 hostname=""
58
59 # If there's only one way out of your IPv4 network, set this to the hostname
60 # or the IPv4 address of the router that will get your packets off the LAN.
61 # If blank, use /etc/mygate.
62 #
63 defaultroute=""
64
65 # Same thing for IPv6. If blank, use /etc/mygate6.
66 #
67 defaultroute6=""
68
69 # The NIS domain name (formerly known as Yellow Pages); not in any way
70 # related to Internet domain names.
71 # If blank, use /etc/defaultdomain.
72 #
73 domainname=""
74
75 # Filesystems to mount early in boot-up.
76 # Note that `/var' is needed in $critical_filesystems_local (or
77 # implied as part of `/') as certain services that need /var (such as
78 # dhclient) may be needed to get the network operational enough to mount
79 # the $critical_filesystems_remote.
80 #
81 critical_filesystems_local="/var"
82 critical_filesystems_remote="/usr"
83
84 # Swap device controls.
85 #
86 no_swap=NO # Set to YES if you have purposefully setup no swap
87 # partitions and don't want to be warned about it.
88 swapoff=YES # Remove block-type swap partitions upon shutdown
89 # This defaults to yes, so that raids shutdown cleanly
90
91 # Concatenated disk driver.
92 #
93 ccd=YES
94
95 # RAIDframe driver (manually configured devices).
96 #
97 raidframe=YES
98
99 # Crypto file system.
100 #
101 cgd=YES
102
103 # Logical Volume Manager
104 #
105 lvm=NO
106
107 # One-time actions and programs on boot-up.
108 #
109 savecore=YES savecore_flags="-z"
110 savecore_dir="/var/crash"
111 per_user_tmp=NO # per-user /tmp directories
112 per_user_tmp_dir="/private/tmp" # real storage for /tmp
113 clear_tmp=YES # clear /tmp after reboot
114 update_motd=YES # updates /etc/motd
115 dmesg=YES dmesg_flags="" # write /var/run/dmesg.boot
116 accounting=NO # uses /var/account/acct
117 newsyslog=NO newsyslog_flags="" # trim log files
118 quota=YES # check and enable quotas
119 ldconfig=YES # rebuild a.out ldconfig cache
120 sysdb=YES # build system databases
121 rndctl=NO rndctl_flags="" # configure rndctl(8)
122
123 # cope with other OSes using the real time clock at localtime on this
124 # machine (by adjusting kern.rtc_offset at boot)
125 rtclocaltime=NO
126
127 # NOTE: default coredump name now set in /etc/sysctl.conf
128
129 #
130 # File system check flags; default to preen mode, checking filesystems
131 # that are listed in /etc/fstab in parallel as the fsck pass number
132 # permits. Fix minor faults automatically, and exit with non 0 only
133 # when major errors occur.
134 #
135 fsck_flags=-p
136
137 # Security setting. If $securelevel is non-empty, the system securelevel
138 # is set to this value early in the boot sequence. Otherwise the default
139 # action is taken (see init(8)).
140 #
141 securelevel="" # securelevel to set to
142
143 # To set the IP address of an interface either use
144 # ifconfig_xxN="IP-NO"
145 # where xxN is the interface. If this variable is not set then
146 # contents of the file /etc/ifconfig.xxN is used.
147
148 # Networking startup.
149 #
150 ipfilter=NO ipfilter_flags="" # uses /etc/ipf.conf
151 ipnat=NO # uses /etc/ipnat.conf
152 ipfs=NO ipfs_flags="" # save/load ipnat and ipf states
153 ipsec=NO # uses /etc/ipsec.conf
154 ipmon=NO ipmon_flags="-Dns" # syslog ipfilter messages
155 pf=NO pf_rules="/etc/pf.conf"
156 pflogd=NO
157 ftp_proxy=NO
158 racoon=NO # IKE daemon
159 auto_ifconfig=YES # config all avail. interfaces
160 net_interfaces="" # used only if above is NO
161 flushroutes=YES # flush routes in netstart
162 dhcpcd=NO
163 dhcpcd_flags="-q" # For ifconfig_XXX=dhcp.
164 dhclient=NO # behave as a DHCP client
165 dhclient_flags="" # blank: config all interfaces
166 ntpdate=NO ntpdate_flags="-b -s" # May need '-u' thru firewall
167 ppp_peers="" # /etc/ppp/peers to call
168 ip6mode=host # host, autohost or router
169 ip6uniquelocal=NO # IPv6 unique-local forwarding
170 rtsol=NO rtsol_flags="-a" # for ip6mode=autohost only
171
172 # Special treatment for interfaces that need to be downed on
173 # shutdown (because they might cause unnecessary costs or block resources
174 # on the peer). All pppoe* interfaces are automatically included in this
175 # list, add others here manually.
176 #force_down_interfaces=""
177
178 ifwatchd=NO # execute up/down scripts for in-kernel PPPoE interfaces
179 ifwatchd_flags="-u /etc/ppp/ip-up -d /etc/ppp/ip-down pppoe0"
180
181 # ALTQ configuration/monitoring daemon
182 altqd=NO altqd_flags=""
183
184 # Daemons required by servers. These are not needed for strictly client use.
185 #
186
187 # inetd is used to start the IP-based services enabled in /etc/inetd.conf
188 #
189 inetd=YES inetd_flags="-l" # -l logs libwrap
190
191 # identd
192 #
193 identd=NO identd_flags="-b -l -u nobody"
194
195 # rpcbind (formerly known as 'portmap') is used to look up RPC-based services.
196 #
197 rpcbind=NO rpcbind_flags="-l" # -l logs libwrap
198
199 # Commonly used daemons.
200 #
201 syslogd=YES syslogd_flags="-s" # -s "secure" unix domain only
202 cron=YES
203 named=NO named_flags="" # see below for named_chrootdir
204 timed=NO timed_flags=""
205 ntpd=NO ntpd_flags="" # see below for ntpd_chrootdir
206 # The default setting for postfix here is YES, but gets re-examined by
207 # the rc.d/postfix startup script when it runs. The script sets
208 # _rc_d_postfix to "check", and then causes all rc.conf settings to
209 # be re-evaluated. If the value of $postfix after this is "check",
210 # the script then checks to see if /etc/mailer.conf selects the system
211 # postfix. If not, it does print a warning and does not start postfix
212 # to avoid conflict with a different MTA.
213 postfix=${_rc_d_postfix:-YES}
214 lpd=NO lpd_flags="-s" # -s "secure" unix domain only
215 sshd=NO sshd_flags=""
216 ssh_keygen_flags="-b 1024" # generate 1024 bit keys if host keys missing
217 ftpd=NO ftpd_flags="-ll"
218 httpd=NO httpd_flags=""
219 httpd_wwwdir="/var/www"
220 httpd_wwwuser="_httpd"
221
222 # To run the named(8) DNS server as an unprivileged user under a
223 # chroot(2) cage, uncomment the following after migrating the contents
224 # of /etc/namedb to /var/chroot/named/etc/namedb
225 #
226 #named_chrootdir="/var/chroot/named"
227
228 # To run the ntpd(8) NTP server as an unprivileged user under a
229 # chroot(2) cage, uncomment the following, after ensuring that:
230 # - The kernel has "pseudo-device clockctl" compiled in
231 # - /dev/clockctl is present
232 #
233 #ntpd_chrootdir="/var/chroot/ntpd"
234
235 # Routing daemons.
236 #
237 routed=NO routed_flags="-q"
238 gated=NO
239 mrouted=NO mrouted_flags=""
240 route6d=NO route6d_flags=""
241 rtsold=NO rtsold_flags="" # for ip6mode=autohost only
242
243 # Daemons used to boot other hosts over a network.
244 #
245 rarpd=NO rarpd_flags="-a"
246 bootparamd=NO bootparamd_flags=""
247 dhcpd=NO dhcpd_flags="-q"
248 dhcrelay=NO dhcrelay_flags=""
249 rbootd=NO rbootd_flags=""
250 mopd=NO mopd_flags="-a"
251 ndbootd=NO ndbootd_flags="-s /tftpboot /tftpboot/bootyy"
252 rtadvd=NO rtadvd_flags=""
253
254 # X11 daemons.
255 #
256 xfs=NO xfs_flags="" # X11 font server
257 xdm=NO xdm_flags="" # X11 display manager; needs
258 # wscons=YES for local displays.
259
260 # YP (NIS) daemons.
261 #
262 ypbind=NO ypbind_flags=""
263 ypserv=NO ypserv_flags="-d"
264 yppasswdd=NO yppasswdd_flags=""
265
266 # NFS daemons and parameters.
267 #
268 mountd=NO mountd_flags="" # NFS mount requests daemon
269 nfs_client=NO # enable client daemons
270 nfs_server=NO # enable server daemons
271 nfsd_flags="-6tun 4"
272 lockd=NO lockd_flags=""
273 statd=NO statd_flags=""
274 amd=NO amd_flags="-l syslog -x error,noinfo,nostats"
275 amd_dir=/amd # mount dir
276
277 # Heimdal Kerberos 5 KDC (with Kerberos IV compatibility)
278 kdc=NO kdc_flags="--detach"
279
280 # iSCSI target
281 iscsi_target=NO iscsi_target_flags=""
282
283 # WPA daemons.
284 hostapd=NO hostapd_flags="-B /etc/hostapd.conf"
285 wpa_supplicant=NO wpa_supplicant_flags="-B" # -i<if> -c<file>
286
287 # ISDN daemon
288 isdnd=NO isdnd_flags=""
289
290 # Bluetooth daemons
291 btattach=NO # Bluetooth attach serial HCI
292 btconfig=NO # Bluetooth controller configuration
293 btdevctl=NO # Bluetooth device configuration
294 bthcid=NO bthcid_flags="" # Bluetooth HCI daemon
295 sdpd=NO sdpd_flags="" # Service Discovery daemon
296
297 # Other daemons.
298 #
299 rwhod=NO rwhod_flags="-u _rwhod"
300 envsys=NO # Set /etc/envsys.conf preferences
301
302 # Hardware daemons.
303 #
304 apmd=NO apmd_flags="" # APM power management daemon.
305 powerd=NO powerd_flags="" # power management daemon
306 screenblank=NO screenblank_flags="" # wscons and FBIO screenblanker
307
308 moused=NO # serial mouse handler
309 moused_flags="-p /dev/tty00"
310
311 wdogctl=NO # watchdog timer control
312 # wdogctl_flags="-k devicename"
313 irdaattach=NO # attach serial lines to IrDA
314 irdaattach_flags="tty00"
315
316 # Configuration of "wscons" console driver virtual screens.
317 #
318 wscons=NO wscons_flags="" # setup wscons from wscons.conf
319
320 # Configuration of "wsmoused" console driver cut-n-paste support
321 #
322 wsmoused=NO wsmoused_flags=""
323
324 # Configuration of "tpctl" touch panel calibration utility
325 #
326 tpctl=NO tpctl_flags=""
327
328 # Mixer setting
329 #
330 mixerctl=NO mixerctl_mixers="" # "mixer0 mixer1" means saving
331 # and restoring their settings
332
333 # Vi recovery notification. Vi(1)'s -r option can recover files which were
334 # accidentally closed. See vi(1) for more details.
335 #
336 virecover=YES
337
338 # Veriexec signature loading.
339 #
340 veriexec=NO
341 veriexec_strict=0
342 veriexec_verbose=0
343 veriexec_flags="-k"
344