rc.conf revision 1.62 1 # $NetBSD: rc.conf,v 1.62 2004/07/15 03:47:18 atatat Exp $
2 #
3 # /etc/defaults/rc.conf --
4 # default configuration of /etc/rc.conf
5 #
6 # see rc.conf(5) for more information.
7 #
8 # DO NOT EDIT THIS FILE DIRECTLY; IT MAY BE REPLACED DURING A SYSTEM UPGRADE.
9 # EDIT /etc/rc.conf INSTEAD.
10 #
11 # DEVELOPERS: Please edit share/sushi/system/rcconf/form when modifying this
12 # file to keep it in sync.
13
14 #
15 # Use program=YES to enable program, NO to disable it. program_flags are
16 # passed to the program on the command line.
17 #
18
19 # Uncomment this if you want to use local paths in rc.
20 #
21 #export PATH=$PATH:/usr/pkg/sbin:/usr/pkg/bin:/usr/local/sbin:/usr/local/bin
22
23 # Uncomment the following to execute each /etc/rc.d script in
24 # the current shell rather than in a subshell. This may be
25 # faster on very slow machines that have an expensive fork(2).
26 # NOTE: USE THIS AT YOUR OWN RISK; A ROGUE COMMAND
27 # MAY INADVERTENTLY PREVENT BOOT TO MULTIUSER.
28 #
29 #rc_fast_and_loose=YES
30
31 # Additional flags to the rcorder(8) that's run by /etc/rc.
32 #
33 rc_rcorder_flags=""
34
35 # If this is set to NO, shutdown(8) will not run /etc/rc.shutdown.
36 #
37 do_rcshutdown=YES
38
39 # Additional flags to the rcorder(8) that's run by /etc/rc.shutdown.
40 #
41 rcshutdown_rcorder_flags=""
42
43 # If this is non-blank, use as the number of seconds to run a watchdog
44 # timer which will terminate /etc/rc.shutdown if the timeout expires.
45 #
46 rcshutdown_timeout=""
47
48
49 # Basic network configuration
50 #
51
52 # Fully Qualified Internet Domain Name (a.k.a. hostname, e.g. foo.baz.edu).
53 # If blank, use /etc/myname.
54 #
55 hostname=""
56
57 # If there's only one way out of your network, set this to the hostname
58 # or the IP address of the router that will get your packets off the LAN.
59 # If blank, use /etc/mygate.
60 #
61 defaultroute=""
62
63 # The NIS domain name (formerly known as Yellow Pages); not in any way
64 # related to Internet domain names.
65 # If blank, use /etc/defaultdomain.
66 #
67 domainname=""
68
69 # Filesystems to mount early in boot-up.
70 # Note that `/var' is needed in $critical_filesystems_local (or
71 # implied as part of `/') as certain services that need /var (such as
72 # dhclient) may be needed to get the network operational enough to mount
73 # the $critical_filesystems_remote.
74 #
75 critical_filesystems_local="/var"
76 critical_filesystems_remote="/usr"
77
78 # Swap device controls.
79 #
80 no_swap=NO # Set to YES if you have purposefully setup no swap
81 # partitions and don't want to be warned about it.
82 swapoff=NO # Remove block-type swap partitions upon shutdown
83
84 # Concatenated disk driver.
85 #
86 ccd=YES
87
88 # RAIDframe driver (manually configured devices).
89 #
90 raidframe=YES
91
92 # Crypto file system.
93 #
94 cgd=YES
95
96 # One-time actions and programs on boot-up.
97 #
98 lkm=NO # Run /etc/rc.lkm. /usr needs to be part of /, or
99 # part of critical_filesystems_local.
100
101 savecore=YES savecore_flags="-z"
102 savecore_dir="/var/crash"
103 clear_tmp=YES # clear /tmp after reboot
104 update_motd=YES # updates /etc/motd
105 dmesg=YES dmesg_flags="" # write /var/run/dmesg.boot
106 accounting=NO # uses /var/account/acct
107 newsyslog=NO newsyslog_flags="" # trim log files
108 quota=YES # check and enable quotas
109 ldconfig=YES # rebuild a.out ldconfig cache
110
111 # cope with other OSes using the real time clock at localtime on this
112 # machine (by adjusting kern.rtc_offset at boot)
113 rtclocaltime=NO
114
115 # NOTE: default coredump name now set in /etc/sysctl.conf
116
117 # Automatically check for and repair the botched superblock problem
118 fixsb=YES
119
120 #
121 # File system check flags; default to preen mode, checking filesystems
122 # that are listed in /etc/fstab in parallel as the fsck pass number
123 # permits. Fix minor faults automatically, and exit with non 0 only
124 # when major errors occur.
125 #
126 fsck_flags=-p
127
128 # Security setting. If $securelevel is non-empty, the system securelevel
129 # is set to this value early in the boot sequence. Otherwise the default
130 # action is taken (see init(8)).
131 #
132 securelevel="" # securelevel to set to
133
134 # To set the IP address of an interface either use
135 # ifconfig_xxN="IP-NO"
136 # where xxN is the interface. If this variable is not set then
137 # contents of the file /etc/ifconfig.xxN is used.
138
139 # Networking startup.
140 #
141 ipfilter=NO # uses /etc/ipf.conf
142 ipnat=NO # uses /etc/ipnat.conf
143 ipfs=NO ipfs_flags="" # save/load ipnat and ipf states
144 ipsec=NO # uses /etc/ipsec.conf
145 ipmon=NO ipmon_flags="-Dns" # syslog ipfilter messages
146 pf=NO
147 pflogd=NO
148 racoon=NO # IKE daemon
149 auto_ifconfig=YES # config all avail. interfaces
150 net_interfaces="" # used only if above is NO
151 flushroutes=YES # flush routes in netstart
152 dhclient=NO # behave as a DHCP client
153 dhclient_flags="" # blank: config all interfaces
154 ntpdate=NO ntpdate_flags="-b -s" # May need '-u' thru firewall
155 ppp_peers="" # /etc/ppp/peers to call
156 ip6mode=host # host, autohost or router
157 ip6sitelocal=NO # IPv6 sitelocal addrs
158 rtsol=NO rtsol_flags="-a" # for ip6mode=autohost only
159
160 # Special treatment for interfaces that need to be downed on
161 # shutdown (because they might cause unecessary costs or block resources
162 # on the peer). All pppoe* interfaces are automatically included in this
163 # list, add others here manually.
164 #force_down_interfaces=""
165
166 ifwatchd=NO # execute up/down scripts for in-kernel PPPoE interfaces
167 ifwatchd_flags="-u /etc/ppp/ip-up -d /etc/ppp/ip-down pppoe0"
168
169 # ALTQ configuration/monitoring daemon
170 altqd=NO altqd_flags=""
171
172 # Daemons required by servers. These are not needed for strictly client use.
173 #
174
175 # inetd is used to start the IP-based services enabled in /etc/inetd.conf
176 #
177 inetd=YES inetd_flags="-l" # -l logs libwrap
178
179 # identd
180 #
181 identd=NO identd_flags="-b -l -u nobody"
182
183 # rpcbind (formerly known as 'portmap') is used to look up RPC-based services.
184 #
185 rpcbind=NO rpcbind_flags="-l" # -l logs libwrap
186
187 # Commonly used daemons.
188 #
189 syslogd=YES syslogd_flags="-s" # -s "secure" unix domain only
190 cron=YES
191 named=NO named_flags="" # see below for named_chrootdir
192 timed=NO timed_flags=""
193 ntpd=NO ntpd_flags="" # see below for ntpd_chrootdir
194 postfix=NO
195 lpd=NO lpd_flags="-s" # -s "secure" unix domain only
196 sshd=NO sshd_flags=""
197 ssh_keygen_flags="-b 1024" # generate 1024 bit keys if host keys missing
198
199 # sendmail can now be run either as a suid root binary or as a sgid
200 # smmsp binary. In the former case, you must not have the file
201 # /etc/mail/submit.cf, otherwise sendmail will behave as if it was
202 # sgid. This can result in mail not being delivered. You must also
203 # manually set the owner and mode on the sendmail binary.
204 #
205 # The smmsp process is a sendmail helper that periodically flushes the
206 # "client" queue in the sgid case. If you are using sendmail as a
207 # suid root program, then smmsp is not needed.
208 #
209 # The default setting for sendmail here is NO, but gets re-examined by
210 # the rc.d/sendmail startup script when it runs. The script sets
211 # _rc_d_sendmail to "check", and then causes all rc.conf settings to
212 # be re-evaluated. If the value of $sendmail after this is "check",
213 # the script then checks to see if any changes have been made to the
214 # default mailer configuration. If no changes are detected, the value
215 # of $sendmail is set to YES to cause the sendmail daemon to be
216 # started. This is so that local processes can send mail without it
217 # getting left in the submission queue. Changes are defined as any of
218 # the following:
219 #
220 # * path to sendmail in mailer.conf is different
221 # * sendmail not found at the default path
222 # * sendmail_suidroot is yes
223 # * if the binary is not sgid to smmsp
224 #
225 # If $sendmail is set to YES or NO in /etc/rc.conf, these checks are
226 # skipped.
227 #
228 sendmail=${_rc_d_sendmail:-NO}
229 sendmail_flags="-Lsm-mta -bd -q30m"
230 sendmail_suidroot=NO
231 smmsp=NO smmsp_flags="-Lsm-msp-queue -Ac -q30m"
232
233
234 # To run the named(8) DNS server as an unprivileged user under a
235 # chroot(2) cage, uncomment the following after migrating the contents
236 # of /etc/namedb to /var/chroot/named/etc/namedb
237 #
238 #named_chrootdir="/var/chroot/named"
239
240 # To run the ntpd(8) NTP server as an unprivileged user under a
241 # chroot(2) cage, uncomment the following, after ensuring that:
242 # - The kernel has "pseudo-device clockctl" compiled in
243 # - /dev/clockctl is present
244 #
245 #ntpd_chrootdir="/var/chroot/ntpd"
246
247 # Routing daemons.
248 #
249 routed=NO routed_flags="-q"
250 gated=NO
251 mrouted=NO mrouted_flags=""
252 route6d=NO route6d_flags=""
253 rtsold=NO rtsold_flags="" # for ip6mode=autohost only
254
255 # Daemons used to boot other hosts over a network.
256 #
257 rarpd=NO rarpd_flags="-a"
258 bootparamd=NO bootparamd_flags=""
259 dhcpd=NO dhcpd_flags="-q"
260 dhcrelay=NO dhcrelay_flags=""
261 rbootd=NO rbootd_flags=""
262 mopd=NO mopd_flags="-a"
263 ndbootd=NO ndbootd_flags="-s /tftpboot /tftpboot/bootyy"
264 rtadvd=NO rtadvd_flags=""
265
266 # X11 daemons.
267 #
268 xfs=NO xfs_flags="" # X11 font server
269 xdm=NO xdm_flags="" # X11 display manager; needs
270 # wscons=YES for local displays.
271
272 # YP (NIS) daemons.
273 #
274 ypbind=NO ypbind_flags=""
275 ypserv=NO ypserv_flags="-d"
276 yppasswdd=NO yppasswdd_flags=""
277
278 # NFS daemons and parameters.
279 #
280 mountd=NO mountd_flags="" # NFS mount requests daemon
281 nfs_client=NO # enable client daemons
282 nfs_server=NO # enable server daemons
283 nfsd_flags="-6tun 4"
284 lockd=NO lockd_flags=""
285 statd=NO statd_flags=""
286 amd=NO amd_flags="-l syslog -x error,noinfo,nostats"
287 amd_dir=/amd # mount dir
288
289 # Heimdal Kerberos 5 KDC (with Kerberos IV compatibility)
290 kdc=NO kdc_flags=""
291
292 # ISDN daemon
293 isdnd=NO isdnd_flags=""
294
295 # Other daemons.
296 #
297 rwhod=NO
298
299 # Hardware daemons.
300 #
301 apmd=NO apmd_flags="" # APM power management daemon.
302 poffd=NO # x68k power switch monitor
303 poffd_flags="'shutdown -p now'"
304 powerd=NO powerd_flags="" # power management daemon
305 screenblank=NO screenblank_flags="" # wscons and FBIO screenblanker
306
307 moused=NO # serial mouse handler
308 moused_flags="-p /dev/tty00"
309
310 wdogctl=NO # watchdog timer control
311 # wdogctl_flags="-k devicename"
312
313 # Configuration of "wscons" console driver virtual screens.
314 #
315 wscons=NO wscons_flags="" # setup wscons from wscons.conf
316
317 # Configuration of "wsmoused" console driver cut-n-paste support
318 #
319 wsmoused=NO wsmoused_flags=""
320
321 # Configuration of "tpctl" touch panel calibration utility
322 #
323 tpctl=NO tpctl_flags=""
324
325 # Mixer setting
326 #
327 mixerctl=NO mixerctl_mixers="" # "mixer0 mixer1" means saving
328 # and restoring their settings
329
330 # Vi recovery notification. Vi(1)'s -r option can recover files which were
331 # accidentaly closed. See vi(1) for more details.
332 #
333 virecover=YES
334
335 # Verified exec signature loading.
336 #
337 veriexec=NO
338