rc.conf revision 1.78 1 # $NetBSD: rc.conf,v 1.78 2006/06/19 15:44:35 gdamore Exp $
2 #
3 # /etc/defaults/rc.conf --
4 # default configuration of /etc/rc.conf
5 #
6 # see rc.conf(5) for more information.
7 #
8 # DO NOT EDIT THIS FILE DIRECTLY; IT MAY BE REPLACED DURING A SYSTEM UPGRADE.
9 # EDIT /etc/rc.conf INSTEAD.
10 #
11
12 #
13 # Use program=YES to enable program, NO to disable it. program_flags are
14 # passed to the program on the command line.
15 #
16
17 # Uncomment this if you want to use local paths in rc.
18 #
19 #export PATH=$PATH:/usr/pkg/sbin:/usr/pkg/bin:/usr/local/sbin:/usr/local/bin
20
21 # Uncomment the following to execute each /etc/rc.d script in
22 # the current shell rather than in a subshell. This may be
23 # faster on very slow machines that have an expensive fork(2).
24 # NOTE: USE THIS AT YOUR OWN RISK; A ROGUE COMMAND
25 # MAY INADVERTENTLY PREVENT BOOT TO MULTIUSER.
26 #
27 #rc_fast_and_loose=YES
28
29 # Additional flags to the rcorder(8) that's run by /etc/rc.
30 #
31 rc_rcorder_flags=""
32
33 # If this is set to NO, shutdown(8) will not run /etc/rc.shutdown.
34 #
35 do_rcshutdown=YES
36
37 # Additional flags to the rcorder(8) that's run by /etc/rc.shutdown.
38 #
39 rcshutdown_rcorder_flags=""
40
41 # If this is non-blank, use as the number of seconds to run a watchdog
42 # timer which will terminate /etc/rc.shutdown if the timeout expires.
43 #
44 rcshutdown_timeout=""
45
46
47 # Basic network configuration
48 #
49
50 # Fully Qualified Internet Domain Name (a.k.a. hostname, e.g. foo.baz.edu).
51 # If blank, use /etc/myname.
52 #
53 hostname=""
54
55 # If there's only one way out of your IPv4 network, set this to the hostname
56 # or the IPv4 address of the router that will get your packets off the LAN.
57 # If blank, use /etc/mygate.
58 #
59 defaultroute=""
60
61 # Same thing for IPv6. If blank, use /etc/mygate6.
62 #
63 defaultroute6=""
64
65 # The NIS domain name (formerly known as Yellow Pages); not in any way
66 # related to Internet domain names.
67 # If blank, use /etc/defaultdomain.
68 #
69 domainname=""
70
71 # Filesystems to mount early in boot-up.
72 # Note that `/var' is needed in $critical_filesystems_local (or
73 # implied as part of `/') as certain services that need /var (such as
74 # dhclient) may be needed to get the network operational enough to mount
75 # the $critical_filesystems_remote.
76 #
77 critical_filesystems_local="/var"
78 critical_filesystems_remote="/usr"
79
80 # Swap device controls.
81 #
82 no_swap=NO # Set to YES if you have purposefully setup no swap
83 # partitions and don't want to be warned about it.
84 swapoff=YES # Remove block-type swap partitions upon shutdown
85 # This defaults to yes, so that raids shutdown cleanly
86
87 # Concatenated disk driver.
88 #
89 ccd=YES
90
91 # RAIDframe driver (manually configured devices).
92 #
93 raidframe=YES
94
95 # Crypto file system.
96 #
97 cgd=YES
98
99 # One-time actions and programs on boot-up.
100 #
101 lkm=NO # Run /etc/rc.lkm. /usr needs to be part of /, or
102 # part of critical_filesystems_local.
103
104 savecore=YES savecore_flags="-z"
105 savecore_dir="/var/crash"
106 clear_tmp=YES # clear /tmp after reboot
107 update_motd=YES # updates /etc/motd
108 dmesg=YES dmesg_flags="" # write /var/run/dmesg.boot
109 accounting=NO # uses /var/account/acct
110 newsyslog=NO newsyslog_flags="" # trim log files
111 quota=YES # check and enable quotas
112 ldconfig=YES # rebuild a.out ldconfig cache
113
114 # cope with other OSes using the real time clock at localtime on this
115 # machine (by adjusting kern.rtc_offset at boot)
116 rtclocaltime=NO
117
118 # NOTE: default coredump name now set in /etc/sysctl.conf
119
120 # Automatically check for and repair the botched superblock problem
121 fixsb=YES
122
123 #
124 # File system check flags; default to preen mode, checking filesystems
125 # that are listed in /etc/fstab in parallel as the fsck pass number
126 # permits. Fix minor faults automatically, and exit with non 0 only
127 # when major errors occur.
128 #
129 fsck_flags=-p
130
131 # Security setting. If $securelevel is non-empty, the system securelevel
132 # is set to this value early in the boot sequence. Otherwise the default
133 # action is taken (see init(8)).
134 #
135 securelevel="" # securelevel to set to
136
137 # To set the IP address of an interface either use
138 # ifconfig_xxN="IP-NO"
139 # where xxN is the interface. If this variable is not set then
140 # contents of the file /etc/ifconfig.xxN is used.
141
142 # Networking startup.
143 #
144 ipfilter=NO # uses /etc/ipf.conf
145 ipnat=NO # uses /etc/ipnat.conf
146 ipfs=NO ipfs_flags="" # save/load ipnat and ipf states
147 ipsec=NO # uses /etc/ipsec.conf
148 ipmon=NO ipmon_flags="-Dns" # syslog ipfilter messages
149 pf=NO pf_rules="/etc/pf.conf"
150 pflogd=NO
151 racoon=NO # IKE daemon
152 auto_ifconfig=YES # config all avail. interfaces
153 net_interfaces="" # used only if above is NO
154 flushroutes=YES # flush routes in netstart
155 dhclient=NO # behave as a DHCP client
156 dhclient_flags="" # blank: config all interfaces
157 ntpdate=NO ntpdate_flags="-b -s" # May need '-u' thru firewall
158 ppp_peers="" # /etc/ppp/peers to call
159 ip6mode=host # host, autohost or router
160 ip6uniquelocal=NO # IPv6 unique-local forwarding
161 rtsol=NO rtsol_flags="-a" # for ip6mode=autohost only
162
163 # Special treatment for interfaces that need to be downed on
164 # shutdown (because they might cause unnecessary costs or block resources
165 # on the peer). All pppoe* interfaces are automatically included in this
166 # list, add others here manually.
167 #force_down_interfaces=""
168
169 ifwatchd=NO # execute up/down scripts for in-kernel PPPoE interfaces
170 ifwatchd_flags="-u /etc/ppp/ip-up -d /etc/ppp/ip-down pppoe0"
171
172 # ALTQ configuration/monitoring daemon
173 altqd=NO altqd_flags=""
174
175 # Daemons required by servers. These are not needed for strictly client use.
176 #
177
178 # inetd is used to start the IP-based services enabled in /etc/inetd.conf
179 #
180 inetd=YES inetd_flags="-l" # -l logs libwrap
181
182 # identd
183 #
184 identd=NO identd_flags="-b -l -u nobody"
185
186 # rpcbind (formerly known as 'portmap') is used to look up RPC-based services.
187 #
188 rpcbind=NO rpcbind_flags="-l" # -l logs libwrap
189
190 # Commonly used daemons.
191 #
192 syslogd=YES syslogd_flags="-s" # -s "secure" unix domain only
193 cron=YES
194 named=NO named_flags="" # see below for named_chrootdir
195 timed=NO timed_flags=""
196 ntpd=NO ntpd_flags="" # see below for ntpd_chrootdir
197 postfix=YES
198 lpd=NO lpd_flags="-s" # -s "secure" unix domain only
199 sshd=NO sshd_flags=""
200 ssh_keygen_flags="-b 1024" # generate 1024 bit keys if host keys missing
201 ftpd=NO ftpd_flags="-ll"
202
203 # To run the named(8) DNS server as an unprivileged user under a
204 # chroot(2) cage, uncomment the following after migrating the contents
205 # of /etc/namedb to /var/chroot/named/etc/namedb
206 #
207 #named_chrootdir="/var/chroot/named"
208
209 # To run the ntpd(8) NTP server as an unprivileged user under a
210 # chroot(2) cage, uncomment the following, after ensuring that:
211 # - The kernel has "pseudo-device clockctl" compiled in
212 # - /dev/clockctl is present
213 #
214 #ntpd_chrootdir="/var/chroot/ntpd"
215
216 # Routing daemons.
217 #
218 routed=NO routed_flags="-q"
219 gated=NO
220 mrouted=NO mrouted_flags=""
221 route6d=NO route6d_flags=""
222 rtsold=NO rtsold_flags="" # for ip6mode=autohost only
223
224 # Daemons used to boot other hosts over a network.
225 #
226 rarpd=NO rarpd_flags="-a"
227 bootparamd=NO bootparamd_flags=""
228 dhcpd=NO dhcpd_flags="-q"
229 dhcrelay=NO dhcrelay_flags=""
230 rbootd=NO rbootd_flags=""
231 mopd=NO mopd_flags="-a"
232 ndbootd=NO ndbootd_flags="-s /tftpboot /tftpboot/bootyy"
233 rtadvd=NO rtadvd_flags=""
234
235 # X11 daemons.
236 #
237 xfs=NO xfs_flags="" # X11 font server
238 xdm=NO xdm_flags="" # X11 display manager; needs
239 # wscons=YES for local displays.
240
241 # YP (NIS) daemons.
242 #
243 ypbind=NO ypbind_flags=""
244 ypserv=NO ypserv_flags="-d"
245 yppasswdd=NO yppasswdd_flags=""
246
247 # NFS daemons and parameters.
248 #
249 mountd=NO mountd_flags="" # NFS mount requests daemon
250 nfs_client=NO # enable client daemons
251 nfs_server=NO # enable server daemons
252 nfsd_flags="-6tun 4"
253 lockd=NO lockd_flags=""
254 statd=NO statd_flags=""
255 amd=NO amd_flags="-l syslog -x error,noinfo,nostats"
256 amd_dir=/amd # mount dir
257
258 # Heimdal Kerberos 5 KDC (with Kerberos IV compatibility)
259 kdc=NO kdc_flags=""
260
261 # iSCSI target
262 iscsi_target=NO iscsi_target_flags=""
263
264 # WPA daemons.
265 hostapd=NO hostapd_flags="-B /etc/hostapd.conf"
266
267 # ISDN daemon
268 isdnd=NO isdnd_flags=""
269
270 # Bluetooth daemons
271 btconfig=NO # Bluetooth controller configuration
272 bthcid=NO bthcid_flags="" # Bluetooth HCI daemon
273 sdpd=NO # Service Discovery daemon
274
275 # Other daemons.
276 #
277 rwhod=NO rwhod_flags="-u _rwhod"
278
279 # Hardware daemons.
280 #
281 apmd=NO apmd_flags="" # APM power management daemon.
282 poffd=NO # x68k power switch monitor
283 poffd_flags="'shutdown -p now'"
284 powerd=NO powerd_flags="" # power management daemon
285 screenblank=NO screenblank_flags="" # wscons and FBIO screenblanker
286
287 moused=NO # serial mouse handler
288 moused_flags="-p /dev/tty00"
289
290 wdogctl=NO # watchdog timer control
291 # wdogctl_flags="-k devicename"
292 irdaattach=NO # attach serial lines to IrDA
293 irdaattach_flags="tty00"
294
295 # Configuration of "wscons" console driver virtual screens.
296 #
297 wscons=NO wscons_flags="" # setup wscons from wscons.conf
298
299 # Configuration of "wsmoused" console driver cut-n-paste support
300 #
301 wsmoused=NO wsmoused_flags=""
302
303 # Configuration of "tpctl" touch panel calibration utility
304 #
305 tpctl=NO tpctl_flags=""
306
307 # Mixer setting
308 #
309 mixerctl=NO mixerctl_mixers="" # "mixer0 mixer1" means saving
310 # and restoring their settings
311
312 # Vi recovery notification. Vi(1)'s -r option can recover files which were
313 # accidentally closed. See vi(1) for more details.
314 #
315 virecover=YES
316
317 # Verified exec signature loading.
318 #
319 veriexec=NO
320 veriexec_strict=0
321 veriexec_verbose=0
322