rc.conf revision 1.69
1 # $NetBSD: rc.conf,v 1.69 2005/09/15 03:40:34 tsarna Exp $ 2 # 3 # /etc/defaults/rc.conf -- 4 # default configuration of /etc/rc.conf 5 # 6 # see rc.conf(5) for more information. 7 # 8 # DO NOT EDIT THIS FILE DIRECTLY; IT MAY BE REPLACED DURING A SYSTEM UPGRADE. 9 # EDIT /etc/rc.conf INSTEAD. 10 # 11 # DEVELOPERS: Please edit share/sushi/system/rcconf/form when modifying this 12 # file to keep it in sync. 13 14 # 15 # Use program=YES to enable program, NO to disable it. program_flags are 16 # passed to the program on the command line. 17 # 18 19 # Uncomment this if you want to use local paths in rc. 20 # 21 #export PATH=$PATH:/usr/pkg/sbin:/usr/pkg/bin:/usr/local/sbin:/usr/local/bin 22 23 # Uncomment the following to execute each /etc/rc.d script in 24 # the current shell rather than in a subshell. This may be 25 # faster on very slow machines that have an expensive fork(2). 26 # NOTE: USE THIS AT YOUR OWN RISK; A ROGUE COMMAND 27 # MAY INADVERTENTLY PREVENT BOOT TO MULTIUSER. 28 # 29 #rc_fast_and_loose=YES 30 31 # Additional flags to the rcorder(8) that's run by /etc/rc. 32 # 33 rc_rcorder_flags="" 34 35 # If this is set to NO, shutdown(8) will not run /etc/rc.shutdown. 36 # 37 do_rcshutdown=YES 38 39 # Additional flags to the rcorder(8) that's run by /etc/rc.shutdown. 40 # 41 rcshutdown_rcorder_flags="" 42 43 # If this is non-blank, use as the number of seconds to run a watchdog 44 # timer which will terminate /etc/rc.shutdown if the timeout expires. 45 # 46 rcshutdown_timeout="" 47 48 49 # Basic network configuration 50 # 51 52 # Fully Qualified Internet Domain Name (a.k.a. hostname, e.g. foo.baz.edu). 53 # If blank, use /etc/myname. 54 # 55 hostname="" 56 57 # If there's only one way out of your network, set this to the hostname 58 # or the IP address of the router that will get your packets off the LAN. 59 # If blank, use /etc/mygate. 60 # 61 defaultroute="" 62 63 # The NIS domain name (formerly known as Yellow Pages); not in any way 64 # related to Internet domain names. 65 # If blank, use /etc/defaultdomain. 66 # 67 domainname="" 68 69 # Filesystems to mount early in boot-up. 70 # Note that `/var' is needed in $critical_filesystems_local (or 71 # implied as part of `/') as certain services that need /var (such as 72 # dhclient) may be needed to get the network operational enough to mount 73 # the $critical_filesystems_remote. 74 # 75 critical_filesystems_local="/var" 76 critical_filesystems_remote="/usr" 77 78 # Swap device controls. 79 # 80 no_swap=NO # Set to YES if you have purposefully setup no swap 81 # partitions and don't want to be warned about it. 82 swapoff=YES # Remove block-type swap partitions upon shutdown 83 # This defaults to yes, so that raids shutdown cleanly 84 85 # Concatenated disk driver. 86 # 87 ccd=YES 88 89 # RAIDframe driver (manually configured devices). 90 # 91 raidframe=YES 92 93 # Crypto file system. 94 # 95 cgd=YES 96 97 # One-time actions and programs on boot-up. 98 # 99 lkm=NO # Run /etc/rc.lkm. /usr needs to be part of /, or 100 # part of critical_filesystems_local. 101 102 savecore=YES savecore_flags="-z" 103 savecore_dir="/var/crash" 104 clear_tmp=YES # clear /tmp after reboot 105 update_motd=YES # updates /etc/motd 106 dmesg=YES dmesg_flags="" # write /var/run/dmesg.boot 107 accounting=NO # uses /var/account/acct 108 newsyslog=NO newsyslog_flags="" # trim log files 109 quota=YES # check and enable quotas 110 ldconfig=YES # rebuild a.out ldconfig cache 111 112 # cope with other OSes using the real time clock at localtime on this 113 # machine (by adjusting kern.rtc_offset at boot) 114 rtclocaltime=NO 115 116 # NOTE: default coredump name now set in /etc/sysctl.conf 117 118 # Automatically check for and repair the botched superblock problem 119 fixsb=YES 120 121 # 122 # File system check flags; default to preen mode, checking filesystems 123 # that are listed in /etc/fstab in parallel as the fsck pass number 124 # permits. Fix minor faults automatically, and exit with non 0 only 125 # when major errors occur. 126 # 127 fsck_flags=-p 128 129 # Security setting. If $securelevel is non-empty, the system securelevel 130 # is set to this value early in the boot sequence. Otherwise the default 131 # action is taken (see init(8)). 132 # 133 securelevel="" # securelevel to set to 134 135 # To set the IP address of an interface either use 136 # ifconfig_xxN="IP-NO" 137 # where xxN is the interface. If this variable is not set then 138 # contents of the file /etc/ifconfig.xxN is used. 139 140 # Networking startup. 141 # 142 ipfilter=NO # uses /etc/ipf.conf 143 ipnat=NO # uses /etc/ipnat.conf 144 ipfs=NO ipfs_flags="" # save/load ipnat and ipf states 145 ipsec=NO # uses /etc/ipsec.conf 146 ipmon=NO ipmon_flags="-Dns" # syslog ipfilter messages 147 pf=NO pf_rules="/etc/pf.conf" 148 pflogd=NO 149 racoon=NO # IKE daemon 150 auto_ifconfig=YES # config all avail. interfaces 151 net_interfaces="" # used only if above is NO 152 flushroutes=YES # flush routes in netstart 153 dhclient=NO # behave as a DHCP client 154 dhclient_flags="" # blank: config all interfaces 155 ntpdate=NO ntpdate_flags="-b -s" # May need '-u' thru firewall 156 ppp_peers="" # /etc/ppp/peers to call 157 ip6mode=host # host, autohost or router 158 ip6sitelocal=NO # IPv6 sitelocal addrs 159 rtsol=NO rtsol_flags="-a" # for ip6mode=autohost only 160 161 # Special treatment for interfaces that need to be downed on 162 # shutdown (because they might cause unnecessary costs or block resources 163 # on the peer). All pppoe* interfaces are automatically included in this 164 # list, add others here manually. 165 #force_down_interfaces="" 166 167 ifwatchd=NO # execute up/down scripts for in-kernel PPPoE interfaces 168 ifwatchd_flags="-u /etc/ppp/ip-up -d /etc/ppp/ip-down pppoe0" 169 170 # ALTQ configuration/monitoring daemon 171 altqd=NO altqd_flags="" 172 173 # Daemons required by servers. These are not needed for strictly client use. 174 # 175 176 # inetd is used to start the IP-based services enabled in /etc/inetd.conf 177 # 178 inetd=YES inetd_flags="-l" # -l logs libwrap 179 180 # identd 181 # 182 identd=NO identd_flags="-b -l -u nobody" 183 184 # rpcbind (formerly known as 'portmap') is used to look up RPC-based services. 185 # 186 rpcbind=NO rpcbind_flags="-l" # -l logs libwrap 187 188 # Commonly used daemons. 189 # 190 syslogd=YES syslogd_flags="-s" # -s "secure" unix domain only 191 cron=YES 192 named=NO named_flags="" # see below for named_chrootdir 193 timed=NO timed_flags="" 194 ntpd=NO ntpd_flags="" # see below for ntpd_chrootdir 195 postfix=NO 196 lpd=NO lpd_flags="-s" # -s "secure" unix domain only 197 sshd=NO sshd_flags="" 198 ssh_keygen_flags="-b 1024" # generate 1024 bit keys if host keys missing 199 ftpd=NO ftpd_flags="-ll" 200 201 # sendmail can now be run either as a suid root binary or as a sgid 202 # smmsp binary. In the former case, you must not have the file 203 # /etc/mail/submit.cf, otherwise sendmail will behave as if it was 204 # sgid. This can result in mail not being delivered. You must also 205 # manually set the owner and mode on the sendmail binary. 206 # 207 # The smmsp process is a sendmail helper that periodically flushes the 208 # "client" queue in the sgid case. If you are using sendmail as a 209 # suid root program, then smmsp is not needed. 210 # 211 # The default setting for sendmail here is NO, but gets re-examined by 212 # the rc.d/sendmail startup script when it runs. The script sets 213 # _rc_d_sendmail to "check", and then causes all rc.conf settings to 214 # be re-evaluated. If the value of $sendmail after this is "check", 215 # the script then checks to see if any changes have been made to the 216 # default mailer configuration. If no changes are detected, the value 217 # of $sendmail is set to YES to cause the sendmail daemon to be 218 # started. This is so that local processes can send mail without it 219 # getting left in the submission queue. Changes are defined as any of 220 # the following: 221 # 222 # * path to sendmail in mailer.conf is different 223 # * sendmail not found at the default path 224 # * sendmail_suidroot is yes 225 # * if the binary is not sgid to smmsp 226 # 227 # If $sendmail is set to YES or NO in /etc/rc.conf, these checks are 228 # skipped. 229 # 230 sendmail=${_rc_d_sendmail:-NO} 231 sendmail_flags="-Lsm-mta -bd -q30m" 232 sendmail_suidroot=NO 233 smmsp=NO smmsp_flags="-Lsm-msp-queue -Ac -q30m" 234 235 236 # To run the named(8) DNS server as an unprivileged user under a 237 # chroot(2) cage, uncomment the following after migrating the contents 238 # of /etc/namedb to /var/chroot/named/etc/namedb 239 # 240 #named_chrootdir="/var/chroot/named" 241 242 # To run the ntpd(8) NTP server as an unprivileged user under a 243 # chroot(2) cage, uncomment the following, after ensuring that: 244 # - The kernel has "pseudo-device clockctl" compiled in 245 # - /dev/clockctl is present 246 # 247 #ntpd_chrootdir="/var/chroot/ntpd" 248 249 # Routing daemons. 250 # 251 routed=NO routed_flags="-q" 252 gated=NO 253 mrouted=NO mrouted_flags="" 254 route6d=NO route6d_flags="" 255 rtsold=NO rtsold_flags="" # for ip6mode=autohost only 256 257 # Daemons used to boot other hosts over a network. 258 # 259 rarpd=NO rarpd_flags="-a" 260 bootparamd=NO bootparamd_flags="" 261 dhcpd=NO dhcpd_flags="-q" 262 dhcrelay=NO dhcrelay_flags="" 263 rbootd=NO rbootd_flags="" 264 mopd=NO mopd_flags="-a" 265 ndbootd=NO ndbootd_flags="-s /tftpboot /tftpboot/bootyy" 266 rtadvd=NO rtadvd_flags="" 267 268 # X11 daemons. 269 # 270 xfs=NO xfs_flags="" # X11 font server 271 xdm=NO xdm_flags="" # X11 display manager; needs 272 # wscons=YES for local displays. 273 274 # YP (NIS) daemons. 275 # 276 ypbind=NO ypbind_flags="" 277 ypserv=NO ypserv_flags="-d" 278 yppasswdd=NO yppasswdd_flags="" 279 280 # NFS daemons and parameters. 281 # 282 mountd=NO mountd_flags="" # NFS mount requests daemon 283 nfs_client=NO # enable client daemons 284 nfs_server=NO # enable server daemons 285 nfsd_flags="-6tun 4" 286 lockd=NO lockd_flags="" 287 statd=NO statd_flags="" 288 amd=NO amd_flags="-l syslog -x error,noinfo,nostats" 289 amd_dir=/amd # mount dir 290 291 # Heimdal Kerberos 5 KDC (with Kerberos IV compatibility) 292 kdc=NO kdc_flags="" 293 294 # ISDN daemon 295 isdnd=NO isdnd_flags="" 296 297 # Other daemons. 298 # 299 rwhod=NO rwhod_flags="-u _rwhod" 300 301 # Hardware daemons. 302 # 303 apmd=NO apmd_flags="" # APM power management daemon. 304 poffd=NO # x68k power switch monitor 305 poffd_flags="'shutdown -p now'" 306 powerd=NO powerd_flags="" # power management daemon 307 screenblank=NO screenblank_flags="" # wscons and FBIO screenblanker 308 309 moused=NO # serial mouse handler 310 moused_flags="-p /dev/tty00" 311 312 wdogctl=NO # watchdog timer control 313 # wdogctl_flags="-k devicename" 314 315 # Configuration of "wscons" console driver virtual screens. 316 # 317 wscons=NO wscons_flags="" # setup wscons from wscons.conf 318 319 # Configuration of "wsmoused" console driver cut-n-paste support 320 # 321 wsmoused=NO wsmoused_flags="" 322 323 # Configuration of "tpctl" touch panel calibration utility 324 # 325 tpctl=NO tpctl_flags="" 326 327 # Mixer setting 328 # 329 mixerctl=NO mixerctl_mixers="" # "mixer0 mixer1" means saving 330 # and restoring their settings 331 332 # Vi recovery notification. Vi(1)'s -r option can recover files which were 333 # accidentally closed. See vi(1) for more details. 334 # 335 virecover=YES 336 337 # Verified exec signature loading. 338 # 339 veriexec=NO 340
Indexes created Wed Oct 29 12:09:47 GMT 2025