Home | History | Annotate | Line # | Download | only in defaults
rc.conf revision 1.95.2.2
      1 #	$NetBSD: rc.conf,v 1.95.2.2 2009/02/06 00:51:41 snj Exp $
      2 #
      3 # /etc/defaults/rc.conf --
      4 #	default configuration of /etc/rc.conf
      5 #
      6 # see rc.conf(5) for more information.
      7 #
      8 # DO NOT EDIT THIS FILE DIRECTLY; IT MAY BE REPLACED DURING A SYSTEM UPGRADE.
      9 # EDIT /etc/rc.conf INSTEAD.
     10 #
     11 
     12 #
     13 # Use program=YES to enable program, NO to disable it. program_flags are
     14 # passed to the program on the command line.
     15 #
     16 
     17 # Uncomment this if you want to use local paths in rc.
     18 #
     19 #export PATH=$PATH:/usr/pkg/sbin:/usr/pkg/bin:/usr/local/sbin:/usr/local/bin
     20 
     21 # Uncomment the following to execute each /etc/rc.d script in
     22 # the current shell rather than in a subshell.  This may be
     23 # faster on very slow machines that have an expensive fork(2).
     24 #	NOTE:	USE THIS AT YOUR OWN RISK; A ROGUE COMMAND
     25 #		MAY INADVERTENTLY PREVENT BOOT TO MULTIUSER.
     26 #
     27 #rc_fast_and_loose=YES
     28 
     29 # Additional flags to the rcorder(8) that's run by /etc/rc.
     30 #
     31 rc_rcorder_flags=""
     32 
     33 # If this is set to NO, shutdown(8) will not run /etc/rc.shutdown.
     34 #
     35 do_rcshutdown=YES
     36 
     37 # Additional flags to the rcorder(8) that's run by /etc/rc.shutdown.
     38 #
     39 rcshutdown_rcorder_flags=""
     40 
     41 # If this is non-blank, use as the number of seconds to run a watchdog
     42 # timer which will terminate /etc/rc.shutdown if the timeout expires.
     43 #
     44 rcshutdown_timeout=""
     45 
     46 
     47 # Basic network configuration
     48 #
     49 
     50 # Fully Qualified Internet Domain Name (a.k.a. hostname, e.g. foo.baz.edu).
     51 # If blank, use /etc/myname.
     52 #
     53 hostname=""
     54 
     55 # If there's only one way out of your IPv4 network, set this to the hostname
     56 # or the IPv4 address of the router that will get your packets off the LAN.
     57 # If blank, use /etc/mygate.
     58 #
     59 defaultroute=""
     60 
     61 # Same thing for IPv6.  If blank, use /etc/mygate6.
     62 #
     63 defaultroute6=""
     64 
     65 # The NIS domain name (formerly known as Yellow Pages); not in any way
     66 # related to Internet domain names.
     67 # If blank, use /etc/defaultdomain.
     68 #
     69 domainname=""
     70 
     71 # Filesystems to mount early in boot-up.
     72 # Note that `/var' is needed in $critical_filesystems_local (or
     73 # implied as part of `/') as certain services that need /var (such as
     74 # dhclient) may be needed to get the network operational enough to mount
     75 # the $critical_filesystems_remote.
     76 #
     77 critical_filesystems_local="/var"
     78 critical_filesystems_remote="/usr"
     79 
     80 # Swap device controls.
     81 #
     82 no_swap=NO		# Set to YES if you have purposefully setup no swap
     83 			# partitions and don't want to be warned about it.
     84 swapoff=YES		# Remove block-type swap partitions upon shutdown
     85 			# This defaults to yes, so that raids shutdown cleanly
     86 
     87 # Concatenated disk driver.
     88 #
     89 ccd=YES
     90 
     91 # RAIDframe driver (manually configured devices).
     92 #
     93 raidframe=YES
     94 
     95 # Crypto file system.
     96 #
     97 cgd=YES
     98 
     99 # One-time actions and programs on boot-up.
    100 #
    101 lkm=NO			# Run /etc/rc.lkm.  /usr needs to be part of /, or
    102 			# part of critical_filesystems_local.
    103 
    104 savecore=YES		savecore_flags="-z"
    105 			savecore_dir="/var/crash"
    106 per_user_tmp=NO					# per-user /tmp directories
    107 per_user_tmp_dir="/private/tmp"			# real storage for /tmp
    108 clear_tmp=YES					# clear /tmp after reboot
    109 update_motd=YES					# updates /etc/motd
    110 dmesg=YES		dmesg_flags=""		# write /var/run/dmesg.boot
    111 accounting=NO					# uses /var/account/acct
    112 newsyslog=NO		newsyslog_flags=""	# trim log files
    113 quota=YES					# check and enable quotas
    114 ldconfig=YES					# rebuild a.out ldconfig cache
    115 sysdb=YES					# build system databases
    116 rndctl=NO		rndctl_flags=""		# configure rndctl(8)
    117 
    118 # cope with other OSes using the real time clock at localtime on this
    119 # machine (by adjusting kern.rtc_offset at boot)
    120 rtclocaltime=NO
    121 
    122 # NOTE: default coredump name now set in /etc/sysctl.conf
    123 
    124 #
    125 # File system check flags; default to preen mode, checking filesystems
    126 # that are listed in /etc/fstab in parallel as the fsck pass number
    127 # permits. Fix minor faults automatically, and exit with non 0 only
    128 # when major errors occur.
    129 #
    130 fsck_flags=-p
    131 
    132 # Security setting.  If $securelevel is non-empty, the system securelevel
    133 # is set to this value early in the boot sequence.  Otherwise the default
    134 # action is taken (see init(8)).
    135 #
    136 securelevel=""					# securelevel to set to
    137 
    138 # To set the IP address of an interface either use
    139 #  ifconfig_xxN="IP-NO"
    140 # where xxN is the interface.  If this variable is not set then
    141 # contents of the file /etc/ifconfig.xxN is used.
    142 
    143 # Networking startup.
    144 #
    145 ipfilter=NO					# uses /etc/ipf.conf
    146 ipnat=NO					# uses /etc/ipnat.conf
    147 ipfs=NO			ipfs_flags=""		# save/load ipnat and ipf states
    148 ipsec=NO					# uses /etc/ipsec.conf
    149 ipmon=NO		ipmon_flags="-Dns"	# syslog ipfilter messages
    150 pf=NO			pf_rules="/etc/pf.conf"
    151 pflogd=NO
    152 ftp_proxy=NO
    153 racoon=NO					# IKE daemon
    154 auto_ifconfig=YES				# config all avail. interfaces
    155 net_interfaces=""				# used only if above is NO
    156 flushroutes=YES					# flush routes in netstart
    157 dhcpcd_flags="-q"				# For ifconfig_XXX=dhcp.
    158 dhclient=NO					# behave as a DHCP client
    159 			dhclient_flags=""	# blank: config all interfaces
    160 ntpdate=NO  		ntpdate_flags="-b -s"	# May need '-u' thru firewall
    161 ppp_peers=""					# /etc/ppp/peers to call
    162 ip6mode=host					# host, autohost or router
    163 ip6uniquelocal=NO				# IPv6 unique-local forwarding
    164 rtsol=NO		rtsol_flags="-a"	# for ip6mode=autohost only
    165 
    166 # Special treatment for interfaces that need to be downed on
    167 # shutdown (because they might cause unnecessary costs or block resources
    168 # on the peer). All pppoe* interfaces are automatically included in this
    169 # list, add others here manually.
    170 #force_down_interfaces=""
    171 
    172 ifwatchd=NO	# execute up/down scripts for in-kernel PPPoE interfaces
    173 	ifwatchd_flags="-u /etc/ppp/ip-up -d /etc/ppp/ip-down pppoe0"
    174 
    175 # ALTQ configuration/monitoring daemon
    176 altqd=NO		altqd_flags=""
    177 
    178 # Daemons required by servers.  These are not needed for strictly client use.
    179 #
    180 
    181 # inetd is used to start the IP-based services enabled in /etc/inetd.conf
    182 #
    183 inetd=YES		inetd_flags="-l"	# -l logs libwrap
    184 
    185 # identd
    186 #
    187 identd=NO		identd_flags="-b -l -u nobody"
    188 
    189 # rpcbind (formerly known as 'portmap') is used to look up RPC-based services.
    190 #
    191 rpcbind=NO		rpcbind_flags="-l"	# -l logs libwrap
    192 
    193 # Commonly used daemons.
    194 #
    195 syslogd=YES		syslogd_flags="-s"	# -s "secure" unix domain only
    196 cron=YES
    197 named=NO		named_flags=""		# see below for named_chrootdir
    198 timed=NO		timed_flags=""
    199 ntpd=NO			ntpd_flags=""		# see below for ntpd_chrootdir
    200 # The default setting for postfix here is YES, but gets re-examined by
    201 # the rc.d/postfix startup script when it runs.  The script sets
    202 # _rc_d_postfix to "check", and then causes all rc.conf settings to
    203 # be re-evaluated.  If the value of $postfix after this is "check",
    204 # the script then checks to see if /etc/mailer.conf selects the system
    205 # postfix. If not, it does print a warning and does not start postfix 
    206 # to avoid conflict with a different MTA.
    207 postfix=${_rc_d_postfix:-YES}
    208 lpd=NO			lpd_flags="-s"		# -s "secure" unix domain only
    209 sshd=NO			sshd_flags=""
    210 ssh_keygen_flags="-b 1024"	# generate 1024 bit keys if host keys missing
    211 ftpd=NO			ftpd_flags="-ll"
    212 httpd=NO		httpd_flags=""
    213 			httpd_wwwdir="/var/www"
    214 			httpd_wwwuser="_httpd"
    215 
    216 # To run the named(8) DNS server as an unprivileged user under a
    217 # chroot(2) cage, uncomment the following after migrating the contents
    218 # of /etc/namedb to /var/chroot/named/etc/namedb
    219 #
    220 #named_chrootdir="/var/chroot/named"
    221 
    222 # To run the ntpd(8) NTP server as an unprivileged user under a
    223 # chroot(2) cage, uncomment the following, after ensuring that:
    224 #	- The kernel has "pseudo-device clockctl" compiled in
    225 #	- /dev/clockctl is present
    226 #
    227 #ntpd_chrootdir="/var/chroot/ntpd"
    228 
    229 # Routing daemons.
    230 #
    231 routed=NO		routed_flags="-q"
    232 gated=NO
    233 mrouted=NO		mrouted_flags=""
    234 route6d=NO		route6d_flags=""
    235 rtsold=NO		rtsold_flags=""		# for ip6mode=autohost only
    236 
    237 # Daemons used to boot other hosts over a network.
    238 #
    239 rarpd=NO		rarpd_flags="-a"
    240 bootparamd=NO		bootparamd_flags=""
    241 dhcpd=NO		dhcpd_flags="-q"
    242 dhcrelay=NO		dhcrelay_flags=""
    243 rbootd=NO		rbootd_flags=""
    244 mopd=NO			mopd_flags="-a"
    245 ndbootd=NO		ndbootd_flags="-s /tftpboot /tftpboot/bootyy"
    246 rtadvd=NO		rtadvd_flags=""
    247 
    248 # X11 daemons.
    249 #
    250 xfs=NO			xfs_flags=""		# X11 font server
    251 xdm=NO			xdm_flags=""		# X11 display manager; needs
    252 						# wscons=YES for local displays.
    253 
    254 # YP (NIS) daemons.
    255 #
    256 ypbind=NO		ypbind_flags=""
    257 ypserv=NO		ypserv_flags="-d"
    258 yppasswdd=NO		yppasswdd_flags=""
    259 
    260 # NFS daemons and parameters.
    261 #
    262 mountd=NO		mountd_flags=""		# NFS mount requests daemon
    263 nfs_client=NO					# enable client daemons
    264 nfs_server=NO					# enable server daemons
    265 			nfsd_flags="-6tun 4"
    266 lockd=NO		lockd_flags=""
    267 statd=NO		statd_flags=""
    268 amd=NO			amd_flags="-l syslog -x error,noinfo,nostats"
    269 			amd_dir=/amd			# mount dir
    270 
    271 # Heimdal Kerberos 5 KDC (with Kerberos IV compatibility)
    272 kdc=NO			kdc_flags="--detach"
    273 
    274 # iSCSI target
    275 iscsi_target=NO		iscsi_target_flags=""
    276 
    277 # WPA daemons.
    278 hostapd=NO		hostapd_flags="-B /etc/hostapd.conf"
    279 wpa_supplicant=NO	wpa_supplicant_flags="-B" # -i<if> -c<file>
    280 
    281 # ISDN daemon
    282 isdnd=NO		isdnd_flags=""
    283 
    284 # Bluetooth daemons
    285 btattach=NO					# Bluetooth attach serial HCI
    286 btconfig=NO					# Bluetooth controller configuration
    287 btdevctl=NO					# Bluetooth device configuration
    288 bthcid=NO		bthcid_flags=""		# Bluetooth HCI daemon
    289 sdpd=NO			sdpd_flags=""		# Service Discovery daemon
    290 
    291 # Other daemons.
    292 #
    293 rwhod=NO		rwhod_flags="-u _rwhod"
    294 envsys=NO					# Set /etc/envsys.conf preferences
    295 
    296 # Hardware daemons.
    297 #
    298 apmd=NO			apmd_flags=""		# APM power management daemon.
    299 poffd=NO					# x68k power switch monitor
    300 			poffd_flags="'shutdown -p now'"
    301 powerd=NO		powerd_flags=""		# power management daemon
    302 screenblank=NO		screenblank_flags=""	# wscons and FBIO screenblanker
    303 
    304 moused=NO					# serial mouse handler
    305 			moused_flags="-p /dev/tty00"
    306 
    307 wdogctl=NO					# watchdog timer control
    308 #			wdogctl_flags="-k devicename"
    309 irdaattach=NO					# attach serial lines to IrDA 
    310 			irdaattach_flags="tty00"
    311 
    312 # Configuration of "wscons" console driver virtual screens.
    313 #
    314 wscons=NO		wscons_flags=""		# setup wscons from wscons.conf
    315 
    316 # Configuration of "wsmoused" console driver cut-n-paste support
    317 #
    318 wsmoused=NO		wsmoused_flags=""
    319 
    320 # Configuration of "tpctl" touch panel calibration utility
    321 #
    322 tpctl=NO		tpctl_flags=""
    323 
    324 # Mixer setting
    325 #
    326 mixerctl=NO		mixerctl_mixers=""	# "mixer0 mixer1" means saving
    327 						# and restoring their settings
    328 
    329 # Vi recovery notification.  Vi(1)'s -r option can recover files which were
    330 # accidentally closed.  See vi(1) for more details.
    331 # 
    332 virecover=YES
    333 
    334 # Veriexec signature loading.
    335 #
    336 veriexec=NO
    337 veriexec_strict=0
    338 veriexec_verbose=0
    339 veriexec_flags="-k"
    340