Home | History | Annotate | Line # | Download | only in defaults
rc.conf revision 1.62
      1 #	$NetBSD: rc.conf,v 1.62 2004/07/15 03:47:18 atatat Exp $
      2 #
      3 # /etc/defaults/rc.conf --
      4 #	default configuration of /etc/rc.conf
      5 #
      6 # see rc.conf(5) for more information.
      7 #
      8 # DO NOT EDIT THIS FILE DIRECTLY; IT MAY BE REPLACED DURING A SYSTEM UPGRADE.
      9 # EDIT /etc/rc.conf INSTEAD.
     10 #
     11 # DEVELOPERS:  Please edit share/sushi/system/rcconf/form when modifying this
     12 # file to keep it in sync.
     13 
     14 #
     15 # Use program=YES to enable program, NO to disable it. program_flags are
     16 # passed to the program on the command line.
     17 #
     18 
     19 # Uncomment this if you want to use local paths in rc.
     20 #
     21 #export PATH=$PATH:/usr/pkg/sbin:/usr/pkg/bin:/usr/local/sbin:/usr/local/bin
     22 
     23 # Uncomment the following to execute each /etc/rc.d script in
     24 # the current shell rather than in a subshell.  This may be
     25 # faster on very slow machines that have an expensive fork(2).
     26 #	NOTE:	USE THIS AT YOUR OWN RISK; A ROGUE COMMAND
     27 #		MAY INADVERTENTLY PREVENT BOOT TO MULTIUSER.
     28 #
     29 #rc_fast_and_loose=YES
     30 
     31 # Additional flags to the rcorder(8) that's run by /etc/rc.
     32 #
     33 rc_rcorder_flags=""
     34 
     35 # If this is set to NO, shutdown(8) will not run /etc/rc.shutdown.
     36 #
     37 do_rcshutdown=YES
     38 
     39 # Additional flags to the rcorder(8) that's run by /etc/rc.shutdown.
     40 #
     41 rcshutdown_rcorder_flags=""
     42 
     43 # If this is non-blank, use as the number of seconds to run a watchdog
     44 # timer which will terminate /etc/rc.shutdown if the timeout expires.
     45 #
     46 rcshutdown_timeout=""
     47 
     48 
     49 # Basic network configuration
     50 #
     51 
     52 # Fully Qualified Internet Domain Name (a.k.a. hostname, e.g. foo.baz.edu).
     53 # If blank, use /etc/myname.
     54 #
     55 hostname=""
     56 
     57 # If there's only one way out of your network, set this to the hostname
     58 # or the IP address of the router that will get your packets off the LAN.
     59 # If blank, use /etc/mygate.
     60 #
     61 defaultroute=""
     62 
     63 # The NIS domain name (formerly known as Yellow Pages); not in any way
     64 # related to Internet domain names.
     65 # If blank, use /etc/defaultdomain.
     66 #
     67 domainname=""
     68 
     69 # Filesystems to mount early in boot-up.
     70 # Note that `/var' is needed in $critical_filesystems_local (or
     71 # implied as part of `/') as certain services that need /var (such as
     72 # dhclient) may be needed to get the network operational enough to mount
     73 # the $critical_filesystems_remote.
     74 #
     75 critical_filesystems_local="/var"
     76 critical_filesystems_remote="/usr"
     77 
     78 # Swap device controls.
     79 #
     80 no_swap=NO		# Set to YES if you have purposefully setup no swap
     81 			# partitions and don't want to be warned about it.
     82 swapoff=NO		# Remove block-type swap partitions upon shutdown
     83 
     84 # Concatenated disk driver.
     85 #
     86 ccd=YES
     87 
     88 # RAIDframe driver (manually configured devices).
     89 #
     90 raidframe=YES
     91 
     92 # Crypto file system.
     93 #
     94 cgd=YES
     95 
     96 # One-time actions and programs on boot-up.
     97 #
     98 lkm=NO			# Run /etc/rc.lkm.  /usr needs to be part of /, or
     99 			# part of critical_filesystems_local.
    100 
    101 savecore=YES		savecore_flags="-z"
    102 			savecore_dir="/var/crash"
    103 clear_tmp=YES					# clear /tmp after reboot
    104 update_motd=YES					# updates /etc/motd
    105 dmesg=YES		dmesg_flags=""		# write /var/run/dmesg.boot
    106 accounting=NO					# uses /var/account/acct
    107 newsyslog=NO		newsyslog_flags=""	# trim log files
    108 quota=YES					# check and enable quotas
    109 ldconfig=YES					# rebuild a.out ldconfig cache
    110 
    111 # cope with other OSes using the real time clock at localtime on this
    112 # machine (by adjusting kern.rtc_offset at boot)
    113 rtclocaltime=NO
    114 
    115 # NOTE: default coredump name now set in /etc/sysctl.conf
    116 
    117 # Automatically check for and repair the botched superblock problem
    118 fixsb=YES
    119 
    120 #
    121 # File system check flags; default to preen mode, checking filesystems
    122 # that are listed in /etc/fstab in parallel as the fsck pass number
    123 # permits. Fix minor faults automatically, and exit with non 0 only
    124 # when major errors occur.
    125 #
    126 fsck_flags=-p
    127 
    128 # Security setting.  If $securelevel is non-empty, the system securelevel
    129 # is set to this value early in the boot sequence.  Otherwise the default
    130 # action is taken (see init(8)).
    131 #
    132 securelevel=""					# securelevel to set to
    133 
    134 # To set the IP address of an interface either use
    135 #  ifconfig_xxN="IP-NO"
    136 # where xxN is the interface.  If this variable is not set then
    137 # contents of the file /etc/ifconfig.xxN is used.
    138 
    139 # Networking startup.
    140 #
    141 ipfilter=NO					# uses /etc/ipf.conf
    142 ipnat=NO					# uses /etc/ipnat.conf
    143 ipfs=NO			ipfs_flags=""		# save/load ipnat and ipf states
    144 ipsec=NO					# uses /etc/ipsec.conf
    145 ipmon=NO		ipmon_flags="-Dns"	# syslog ipfilter messages
    146 pf=NO
    147 pflogd=NO
    148 racoon=NO					# IKE daemon
    149 auto_ifconfig=YES				# config all avail. interfaces
    150 net_interfaces=""				# used only if above is NO
    151 flushroutes=YES					# flush routes in netstart
    152 dhclient=NO					# behave as a DHCP client
    153 			dhclient_flags=""	# blank: config all interfaces
    154 ntpdate=NO  		ntpdate_flags="-b -s"	# May need '-u' thru firewall
    155 ppp_peers=""					# /etc/ppp/peers to call
    156 ip6mode=host					# host, autohost or router
    157 ip6sitelocal=NO					# IPv6 sitelocal addrs
    158 rtsol=NO		rtsol_flags="-a"	# for ip6mode=autohost only
    159 
    160 # Special treatment for interfaces that need to be downed on
    161 # shutdown (because they might cause unecessary costs or block resources
    162 # on the peer). All pppoe* interfaces are automatically included in this
    163 # list, add others here manually.
    164 #force_down_interfaces=""
    165 
    166 ifwatchd=NO	# execute up/down scripts for in-kernel PPPoE interfaces
    167 	ifwatchd_flags="-u /etc/ppp/ip-up -d /etc/ppp/ip-down pppoe0"
    168 
    169 # ALTQ configuration/monitoring daemon
    170 altqd=NO		altqd_flags=""
    171 
    172 # Daemons required by servers.  These are not needed for strictly client use.
    173 #
    174 
    175 # inetd is used to start the IP-based services enabled in /etc/inetd.conf
    176 #
    177 inetd=YES		inetd_flags="-l"	# -l logs libwrap
    178 
    179 # identd
    180 #
    181 identd=NO		identd_flags="-b -l -u nobody"
    182 
    183 # rpcbind (formerly known as 'portmap') is used to look up RPC-based services.
    184 #
    185 rpcbind=NO		rpcbind_flags="-l"	# -l logs libwrap
    186 
    187 # Commonly used daemons.
    188 #
    189 syslogd=YES		syslogd_flags="-s"	# -s "secure" unix domain only
    190 cron=YES
    191 named=NO		named_flags=""		# see below for named_chrootdir
    192 timed=NO		timed_flags=""
    193 ntpd=NO			ntpd_flags=""		# see below for ntpd_chrootdir
    194 postfix=NO
    195 lpd=NO			lpd_flags="-s"		# -s "secure" unix domain only
    196 sshd=NO			sshd_flags=""
    197 ssh_keygen_flags="-b 1024"	# generate 1024 bit keys if host keys missing
    198 
    199 # sendmail can now be run either as a suid root binary or as a sgid
    200 # smmsp binary.  In the former case, you must not have the file
    201 # /etc/mail/submit.cf, otherwise sendmail will behave as if it was
    202 # sgid.  This can result in mail not being delivered.  You must also
    203 # manually set the owner and mode on the sendmail binary.
    204 #
    205 # The smmsp process is a sendmail helper that periodically flushes the
    206 # "client" queue in the sgid case.  If you are using sendmail as a
    207 # suid root program, then smmsp is not needed.
    208 #
    209 # The default setting for sendmail here is NO, but gets re-examined by
    210 # the rc.d/sendmail startup script when it runs.  The script sets
    211 # _rc_d_sendmail to "check", and then causes all rc.conf settings to
    212 # be re-evaluated.  If the value of $sendmail after this is "check",
    213 # the script then checks to see if any changes have been made to the
    214 # default mailer configuration.  If no changes are detected, the value
    215 # of $sendmail is set to YES to cause the sendmail daemon to be
    216 # started.  This is so that local processes can send mail without it
    217 # getting left in the submission queue.  Changes are defined as any of
    218 # the following:
    219 #
    220 #	* path to sendmail in mailer.conf is different
    221 #	* sendmail not found at the default path
    222 #	* sendmail_suidroot is yes
    223 #	* if the binary is not sgid to smmsp
    224 #
    225 # If $sendmail is set to YES or NO in /etc/rc.conf, these checks are
    226 # skipped.
    227 #
    228 sendmail=${_rc_d_sendmail:-NO}
    229 			sendmail_flags="-Lsm-mta -bd -q30m"
    230 sendmail_suidroot=NO
    231 smmsp=NO		smmsp_flags="-Lsm-msp-queue -Ac -q30m"
    232 
    233 
    234 # To run the named(8) DNS server as an unprivileged user under a
    235 # chroot(2) cage, uncomment the following after migrating the contents
    236 # of /etc/namedb to /var/chroot/named/etc/namedb
    237 #
    238 #named_chrootdir="/var/chroot/named"
    239 
    240 # To run the ntpd(8) NTP server as an unprivileged user under a
    241 # chroot(2) cage, uncomment the following, after ensuring that:
    242 #	- The kernel has "pseudo-device clockctl" compiled in
    243 #	- /dev/clockctl is present
    244 #
    245 #ntpd_chrootdir="/var/chroot/ntpd"
    246 
    247 # Routing daemons.
    248 #
    249 routed=NO		routed_flags="-q"
    250 gated=NO
    251 mrouted=NO		mrouted_flags=""
    252 route6d=NO		route6d_flags=""
    253 rtsold=NO		rtsold_flags=""		# for ip6mode=autohost only
    254 
    255 # Daemons used to boot other hosts over a network.
    256 #
    257 rarpd=NO		rarpd_flags="-a"
    258 bootparamd=NO		bootparamd_flags=""
    259 dhcpd=NO		dhcpd_flags="-q"
    260 dhcrelay=NO		dhcrelay_flags=""
    261 rbootd=NO		rbootd_flags=""
    262 mopd=NO			mopd_flags="-a"
    263 ndbootd=NO		ndbootd_flags="-s /tftpboot /tftpboot/bootyy"
    264 rtadvd=NO		rtadvd_flags=""
    265 
    266 # X11 daemons.
    267 #
    268 xfs=NO			xfs_flags=""		# X11 font server
    269 xdm=NO			xdm_flags=""		# X11 display manager; needs
    270 						# wscons=YES for local displays.
    271 
    272 # YP (NIS) daemons.
    273 #
    274 ypbind=NO		ypbind_flags=""
    275 ypserv=NO		ypserv_flags="-d"
    276 yppasswdd=NO		yppasswdd_flags=""
    277 
    278 # NFS daemons and parameters.
    279 #
    280 mountd=NO		mountd_flags=""		# NFS mount requests daemon
    281 nfs_client=NO					# enable client daemons
    282 nfs_server=NO					# enable server daemons
    283 			nfsd_flags="-6tun 4"
    284 lockd=NO		lockd_flags=""
    285 statd=NO		statd_flags=""
    286 amd=NO			amd_flags="-l syslog -x error,noinfo,nostats"
    287 			amd_dir=/amd			# mount dir
    288 
    289 # Heimdal Kerberos 5 KDC (with Kerberos IV compatibility)
    290 kdc=NO			kdc_flags=""
    291 
    292 # ISDN daemon
    293 isdnd=NO		isdnd_flags=""
    294 
    295 # Other daemons.
    296 #
    297 rwhod=NO
    298 
    299 # Hardware daemons.
    300 #
    301 apmd=NO			apmd_flags=""		# APM power management daemon.
    302 poffd=NO					# x68k power switch monitor
    303 			poffd_flags="'shutdown -p now'"
    304 powerd=NO		powerd_flags=""		# power management daemon
    305 screenblank=NO		screenblank_flags=""	# wscons and FBIO screenblanker
    306 
    307 moused=NO					# serial mouse handler
    308 			moused_flags="-p /dev/tty00"
    309 
    310 wdogctl=NO					# watchdog timer control
    311 #			wdogctl_flags="-k devicename"
    312 
    313 # Configuration of "wscons" console driver virtual screens.
    314 #
    315 wscons=NO		wscons_flags=""		# setup wscons from wscons.conf
    316 
    317 # Configuration of "wsmoused" console driver cut-n-paste support
    318 #
    319 wsmoused=NO		wsmoused_flags=""
    320 
    321 # Configuration of "tpctl" touch panel calibration utility
    322 #
    323 tpctl=NO		tpctl_flags=""
    324 
    325 # Mixer setting
    326 #
    327 mixerctl=NO		mixerctl_mixers=""	# "mixer0 mixer1" means saving
    328 						# and restoring their settings
    329 
    330 # Vi recovery notification.  Vi(1)'s -r option can recover files which were
    331 # accidentaly closed.  See vi(1) for more details.
    332 # 
    333 virecover=YES
    334 
    335 # Verified exec signature loading.
    336 #
    337 veriexec=NO
    338