1.\" Copyright (c) 1995 2.\" Jordan K. Hubbard 3.\" 4.\" Redistribution and use in source and binary forms, with or without 5.\" modification, are permitted provided that the following conditions 6.\" are met: 7.\" 1. Redistributions of source code must retain the above copyright 8.\" notice, this list of conditions and the following disclaimer. 9.\" 2. Redistributions in binary form must reproduce the above copyright 10.\" notice, this list of conditions and the following disclaimer in the 11.\" documentation and/or other materials provided with the distribution. 12.\" 13.\" THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND 14.\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 15.\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 16.\" ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR BE LIABLE 17.\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 18.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 19.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 20.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 21.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 22.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 23.\" SUCH DAMAGE. 24.\" 25.\" $FreeBSD: src/share/man/man5/rc.conf.5,v 1.197 2003/07/28 13:56:00 mbr Exp $ 26.\" 27.Dd January 4, 2014 28.Dt RC.CONF 5 29.Os 30.Sh NAME 31.Nm rc.conf 32.Nd system configuration information 33.Sh DESCRIPTION 34The file 35.Nm 36contains descriptive information about the local host name, configuration 37details for any potential network interfaces and which services should be 38started up at system initial boot time. 39In new installations, the 40.Nm 41file is generally initialized by the installer. 42.Pp 43The purpose of 44.Nm 45is not to run commands or perform system startup actions directly. 46Instead, it is included by the various generic startup scripts in 47.Pa /etc 48which conditionalize their 49internal actions according to the settings found there. 50.Pp 51The 52.Pa /etc/defaults/rc.conf 53file specifies the default settings for all the available options, 54the 55.Pa /etc/rc.conf 56file specifies override settings. 57Options need only be specified in 58.Pa /etc/rc.conf 59when the system administrator wishes to override the defaults. 60The file 61.Pa /etc/rc.conf.local 62is used to override settings in 63.Pa /etc/rc.conf 64for historical reasons. 65In addition to 66.Pa /etc/rc.conf.local 67you can also place smaller configuration files for each 68.Xr rc 8 69script in the 70.Pa /etc/rc.conf.d 71directory, which will be included by the 72.Va load_rc_config 73function. 74For jail configurations you could use the file 75.Pa /etc/rc.conf.d/jail 76to store jail specific configuration options. 77Also see the 78.Va rc_conf_files 79variable below. 80.Pp 81The following list provides a name and short description for each 82variable that can be set in the 83.Nm 84file. 85To set a variable of 86.Vt bool 87type, specify either 88.Dq Li YES , 89.Dq Li TRUE , 90.Dq Li ON , 91or 92.Dq Li 1 . 93To unset, specify 94.Dq Li NO , 95.Dq Li FALSE , 96.Dq Li OFF , 97or 98.Dq Li 0 . 99These values are case insensitive. 100The 101.Va _enable 102postfix in the name of a variable for starting a service can be 103omitted (as in 104.Nx ) . 105.Bl -tag -width indent-two 106.It Va rc_debug 107.Pq Vt bool 108If set to 109.Dq Li YES , 110enable output of debug messages from rc scripts. 111This variable can be helpful in diagnosing mistakes when 112editing or integrating new scripts. 113Beware that this produces copious output to the terminal and 114.Xr syslog 3 . 115.It Va rc_info 116.Pq Vt bool 117If set to 118.Dq Li NO , 119disable informational messages from the rc scripts. 120Informational messages are displayed when 121a condition that is not serious enough to warrant a warning or an error occurs. 122.It Va swapfile 123.Pq Vt str 124If set to 125.Dq Li NO , 126no swapfile is installed, otherwise the value is used as the full 127pathname to a file to use for additional swap space. 128The 129.Xr vn 4 130driver is needed for a swapfile and will be loaded if it is not 131already compiled into the kernel or loaded via 132.Xr loader.conf 5 . 133.It Va apm_enable 134.Pq Vt bool 135If set to 136.Dq Li YES , 137enable support for Automatic Power Management with the 138.Xr apm 8 139command. 140.It Va apmd_enable 141.Pq Vt bool 142Run 143.Xr apmd 8 144to handle APM event from userland. 145This also enables support for APM. 146.It Va apmd_flags 147.Pq Vt str 148If 149.Va apmd_enable 150is set to 151.Dq Li YES , 152these are the flags to pass to the 153.Xr apmd 8 154daemon. 155.It Va battd_enable 156Enable 157.Xr battd 8 158to monitor the status of batteries present in the system. 159This also enables support for APM. 160.It Va battd_flags 161.Pq Vt str 162If 163.Va battd_enable 164is set to 165.Dq Li YES , 166these are the flags to pass to the 167.Xr battd 8 168daemon. 169.It Va devd_enable 170.Pq Vt bool 171Run 172.Xr devd 8 173to handle device added, removed or unknown events from the kernel. 174.It Va devd_flags 175.Pq Vt str 176If 177.Va devd_enable 178is set to 179.Dq Li YES , 180these are the flags to pass to the 181.Xr devd 8 182daemon. 183.It Va powerd_enable 184.Pq Vt bool 185Set to 186.Dq Li NO 187by default. 188Setting this to 189.Dq Li YES 190enables 191.Xr powerd 8 , 192a CPU speed control daemon. 193.It Va sensorsd_enable 194.Pq Vt bool 195Set to 196.Dq Li NO 197by default. 198Setting this to 199.Dq Li YES 200enables 201.Xr sensorsd 8 , 202a sensors monitoring and logging daemon. 203.It Va sensorsd_flags 204.Pq Vt str 205Empty by default. 206Additional flags passed to the 207.Xr sensorsd 8 208program. 209.It Va sysvipcd_enable 210.Pq Vt bool 211Set to 212.Dq Li NO 213by default. 214Setting this to 215.Dq Li YES 216enables 217.Xr sysvipcd 8 , 218a sensors monitoring and logging daemon. 219.It Va sysvipcd_flags 220.Pq Vt str 221Empty by default. 222Additional flags passed to the 223.Xr sysvipcd 8 224program. 225.It Va hotplugd_enable 226.Pq Vt bool 227Set to 228.Dq Li NO 229by default. 230Setting this to 231.Dq Li YES 232enables 233.Xr hotplugd 8 , 234a devices hot plugging monitoring daemon. 235.It Va hotplugd_flags 236.Pq Vt str 237Empty by default. 238Additional flags passed to the 239.Xr hotplugd 8 240program. 241.It Va pccard_ifconfig 242.Pq Vt str 243List of arguments to be passed to 244.Xr ifconfig 8 245at boot time or on insertion of the card (e.g.\& 246.Dq Cm inet Li 192.168.1.1 Cm netmask Li 255.255.255.0 247for a fixed address or 248.Dq Li DHCP 249for a DHCP client). 250.It Va pccard_ether_delay 251.Pq Vt str 252Set the delay before starting 253.Xr dhclient 8 254in the 255.Pa /etc/pccard_ether 256script. 257This defaults to 5 seconds to work around a bug in the 258.Xr ed 4 259driver which can lead to system hangs when using some newer 260.Xr ed 4 261based cards. 262.It Va removable_interfaces 263.Pq Vt str 264List of removable network interfaces to be supported by 265.Pa /etc/pccard_ether . 266.It Va local_startup 267.Pq Vt str 268List of directories to search for startup script files. 269.It Va script_name_sep 270.Pq Vt str 271The field separator to use for breaking down the list of startup script files 272into individual filenames. 273The default is a space. 274It is not necessary to change this unless there are startup scripts with names 275containing spaces. 276.It Va hostapd_enable 277.Pq Vt bool 278Set to 279.Dq Li YES 280to start 281.Xr hostapd 8 282at system boot time. 283.It Va hostname 284.Pq Vt str 285The fully qualified domain name (FQDN) of this host on the network. 286This should almost certainly be set to something meaningful, even if 287there is no network connection. 288If 289.Xr dhclient 8 290is used to set the hostname via DHCP, 291this variable should be set to an empty string. 292.It Va ipv6_enable 293.Pq Vt bool 294Enable support for IPv6 networking. 295Note that this requires that the kernel have been compiled with 296.Cd "options INET6" . 297.It Va nisdomainname 298.Pq Vt str 299The NIS domain name of this host, or 300.Dq Li NO 301if NIS is not used. 302.It Va dhclient_program 303.Pq Vt str 304Path to the DHCP client program 305(default 306.Pa /sbin/dhclient ) . 307.It Va dhclient_flags 308.Pq Vt str 309Additional flags to pass to the DHCP client program. 310.It Va pf_enable 311.Pq Vt bool 312Set to 313.Dq Li YES 314to load 315.Xr pf 4 316at startup. 317If the kernel was not built with 318.Cd "device pf" , 319the 320.Pa pf.ko 321kernel module will be loaded. 322See also 323.Va firewall_enable . 324.It Va pf_rules 325.Pq Vt str 326Path to the 327.Xr pf 4 328ruleset definition file. 329.It Va pf_program 330.Pq Vt str 331Path to 332.Xr pfctl 8 . 333.It Va pf_flags 334.Pq Vt str 335If 336.Va pf_enable 337is set to 338.Dq Li YES , 339these are the flags to pass to 340.Xr pfctl 8 341when loading the ruleset. 342.It Va pflog_enable 343.Pq Vt bool 344Set this to 345.Dq Li YES 346to enable 347.Xr pflogd 8 348which logs packets from 349.Xr pf 4 . 350.It Va pflog_logfile 351.Pq Vt str 352If 353.Va pflog_enable 354is set to 355.Dq Li YES 356this specifies the path of the log file. 357.It Va pflog_program 358.Pq Vt str 359Path to 360.Xr pflogd 8 . 361.It Va pflog_flags 362.Pq Vt str 363If 364.Va pflog_enable 365is set to 366.Dq Li YES , 367these are the flags to pass to 368.Xr pflogd 8 . 369.It Va firewall_enable 370.Pq Vt bool 371Set to 372.Dq Li YES 373to load firewall rules at startup. 374If the kernel was not built with 375.Cd "options IPFIREWALL" , 376the 377.Pa ipfw.ko 378kernel module will be loaded. 379See also 380.Va pf_enable . 381.It Va ipv6_firewall_enable 382.Pq Vt bool 383The IPv6 equivalent of 384.Va firewall_enable . 385Set to 386.Dq Li YES 387to load IPv6 firewall rules at startup. 388If the kernel was not built with 389.Cd "options IPV6FIREWALL" , 390the 391.Pa ip6fw.ko 392kernel module will be loaded. 393.It Va firewall_script 394.Pq Vt str 395The full path to the firewall script to run 396(default 397.Pa /etc/rc.firewall ) . 398.It Va ipv6_firewall_script 399.Pq Vt str 400The IPv6 equivalent of 401.Va firewall_script . 402.It Va firewall_type 403.Pq Vt str 404Names the firewall type from the selection in 405.Pa /etc/rc.firewall , 406or the file which contains the local firewall ruleset. 407Valid selections from 408.Pa /etc/rc.firewall 409are: 410.Pp 411.Bl -tag -width ".Li simple" -compact 412.It Li open 413unrestricted IP access 414.It Li closed 415all IP services disabled, except via 416.Dq Li lo0 417.It Li client 418basic protection for a workstation on a LAN 419.It Li simple 420alias for 421.Li client . 422.El 423.Pp 424If a filename is specified, the full path must be given. 425.It Va firewall_trusted_nets 426.Pq Vt str 427List of trusted networks (if 428.Va firewall_type 429is set to 430.Li client ) . 431.It Va firewall_trusted_interfaces 432.Pq Vt str 433List of trusted network interfaces (if 434.Va firewall_type 435is set to 436.Li client ) . 437.It Va firewall_allowed_icmp_types 438.Pq Vt str 439List of allowed ICMP types (if 440.Va firewall_type 441is set to 442.Li client ) . 443.It Va firewall_open_tcp_ports 444.Pq Vt str 445List of TCP ports to open (if 446.Va firewall_type 447is set to 448.Li client ) . 449.It Va firewall_open_udp_ports 450.Pq Vt str 451List of UDP ports to open (if 452.Va firewall_type 453is set to 454.Li client ) . 455.It Va ipv6_firewall_type 456.Pq Vt str 457The IPv6 equivalent of 458.Va firewall_type . 459.It Va firewall_quiet 460.Pq Vt bool 461Set to 462.Dq Li YES 463to disable the display of firewall rules on the console during boot. 464.It Va ipv6_firewall_quiet 465.Pq Vt bool 466The IPv6 equivalent of 467.Va firewall_quiet . 468.It Va firewall_logging 469.Pq Vt bool 470Set to 471.Dq Li YES 472to enable firewall event logging. 473This is equivalent to the 474.Dv IPFIREWALL_VERBOSE 475kernel option. 476.It Va ipv6_firewall_logging 477.Pq Vt bool 478The IPv6 equivalent of 479.Va firewall_logging . 480.It Va firewall_flags 481.Pq Vt str 482Flags passed to 483.Xr ipfw 8 484if 485.Va firewall_type 486specifies a filename. 487.It Va ipv6_firewall_flags 488.Pq Vt str 489The IPv6 equivalent of 490.Va firewall_flags . 491.It Va natd_program 492.Pq Vt str 493Path to 494.Xr natd 8 . 495.It Va natd_enable 496.Pq Vt bool 497Set to 498.Dq Li YES 499to enable 500.Xr natd 8 . 501.Va firewall_enable 502must also be set to 503.Dq Li YES , 504and 505.Xr divert 4 506sockets must be enabled in the kernel. 507.It Va natd_interface 508.Pq Vt str 509This is the name of the public interface on which 510.Xr natd 8 511should run. 512The interface may be given as an interface name or as an IP address. 513.It Va natd_flags 514.Pq Vt str 515Additional 516.Xr natd 8 517flags should be placed here. 518The 519.Fl n 520or 521.Fl a 522flag is automatically added with the above 523.Va natd_interface 524as an argument. 525.It Va tcp_extensions 526.Pq Vt bool 527Set to 528.Dq Li YES 529by default. 530Setting this to 531.Dq Li NO 532disables certain TCP options as described by 533.Rs 534.%T "RFC 1323" 535.Re 536Setting this to 537.Dq Li NO 538might help remedy such problems with connections as randomly hanging 539or other weird behavior. 540Some network devices are known to be broken with respect to these options. 541.It Va log_in_vain 542.Pq Vt int 543Set to 0 by default. 544The 545.Xr sysctl 8 546variables, 547.Va net.inet.tcp.log_in_vain 548and 549.Va net.inet.udp.log_in_vain , 550as described in 551.Xr tcp 4 552and 553.Xr udp 4 , 554are set to the given value. 555.It Va tcp_keepalive 556.Pq Vt bool 557Set to 558.Dq Li YES 559by default. 560Setting to 561.Dq Li NO 562will disable probing idle TCP connections to verify that the 563peer is still up and reachable. 564.It Va tcp_drop_synfin 565.Pq Vt bool 566Set to 567.Dq Li NO 568by default. 569Setting to 570.Dq Li YES 571will cause the kernel to ignore TCP frames that have both 572the SYN and FIN flags set. 573This prevents OS fingerprinting, but may break some legitimate applications. 574This option is only available if the kernel was built with the 575.Dv TCP_DROP_SYNFIN 576option. 577.It Va icmp_drop_redirect 578.Pq Vt bool 579Set to 580.Dq Li NO 581by default. 582Setting to 583.Dq Li YES 584will cause the kernel to ignore ICMP REDIRECT packets. 585Refer to 586.Xr icmp 4 587for more information. 588.It Va icmp_log_redirect 589.Pq Vt bool 590Set to 591.Dq Li NO 592by default. 593Setting to 594.Dq Li YES 595will cause the kernel to log ICMP REDIRECT packets. 596Note that 597the log messages are not rate-limited, so this option should only be used 598for troubleshooting networks. 599Refer to 600.Xr icmp 4 601for more information. 602.It Va icmp_bmcastecho 603.Pq Vt bool 604Set to 605.Dq Li YES 606to respond to broadcast or multicast ICMP ping packets. 607Refer to 608.Xr icmp 4 609for more information. 610.It Va ip_portrange_first 611.Pq Vt int 612If not set to 613.Dq Li NO , 614this is the first port in the default portrange. 615Refer to 616.Xr ip 4 617for more information. 618.It Va ip_portrange_last 619.Pq Vt int 620If not set to 621.Dq Li NO , 622this is the last port in the default portrange. 623Refer to 624.Xr ip 4 625for more information. 626.\" 627.It Va ifconfig_ Ns Aq Ar interface 628.Pq Vt str 629Configuration for 630.Dq interface . 631Typically includes IP address. 632Assuming that the interface in question was 633.Li ed0 , 634it might look something like this: 635.Bd -literal 636ifconfig_ed0="inet 10.0.0.1 netmask 0xffff0000" 637.Ed 638.Pp 639If the 640.Pa /etc/start_if. Ns Aq Ar interface 641file is present, it is read and executed by the 642.Xr sh 1 643interpreter before configuring the interface as specified in the 644.Va ifconfig_ Ns Aq Ar interface 645and 646.Va ifconfig_ Ns Ao Ar interface Ac Ns Va _alias Ns Aq Ar n 647variables. 648.Pp 649It is possible to bring up an interface with DHCP by adding 650.Dq Li DHCP 651to the 652.Va ifconfig_ Ns Aq Ar interface 653variable. 654For instance, to initialize the 655.Li ed0 656device via DHCP, it is possible to use something like: 657.Bd -literal 658ifconfig_ed0="DHCP" 659.Ed 660.Pp 661If a 662.Va wlans_ Ns Aq Ar interface 663variable is set, 664an 665.Xr wlan 4 666interface will be created for each item in the list with the 667.Ar wlandev 668argument set to 669.Ar interface . 670Further wlan cloning arguments may be passed to the 671.Xr ifconfig 8 672.Cm create 673command by setting the 674.Va create_args_ Ns Aq Ar interface 675variable. 676One or more 677.Xr wlan 4 678devices must be created for each wireless devices as of 679.Dx 2.5 . 680Debugging flags for 681.Xr wlan 4 682devices as set by 683.Xr wlandebug 8 684may be specified with an 685.Va wlandebug_ Ns Aq Ar interface 686variable. 687The contents of this variable will be passed directly to 688.Xr wlandebug 8 . 689.Pp 690Also, if your interface needs WPA authentication, it is possible to add 691.Dq Li WPA 692to the 693.Va ifconfig_ Ns Aq Ar interface 694variable. 695This will start 696.Xr wpa_supplicant 8 . 697See 698.Xr wpa_supplicant.conf 5 699for configuring authentication information. 700.Pp 701Finally, you can add 702.Xr ifconfig 8 703options in this variable, in addition to the 704.Pa /etc/start_if. Ns Aq Ar interface 705file. 706For instance, to initialize the 707.Li wi0 708device via DHCP, using WPA authentication and 802.11b mode, it is 709possible to use something like: 710.Bd -literal 711wlans_wi0="wlan0" 712ifconfig_wlan0="up DHCP WPA mode 11b" 713.Ed 714.It Va ifconfig_ Ns Ao Ar interface Ac Ns Va _alias Ns Aq Ar n 715.Pq Vt str 716Configuration to establish an additional network address for 717.Dq interface . 718Assuming that the interface in question was 719.Li ed0 , 720it might look something like this: 721.Bd -literal 722ifconfig_ed0_alias0="inet 127.0.0.253 netmask 0xffffffff" 723ifconfig_ed0_alias1="inet 127.0.0.254 netmask 0xffffffff" 724.Ed 725.Pp 726And so on. 727For each 728.Va ifconfig_ Ns Ao Ar interface Ac Ns Va _alias Ns Aq Ar n 729entry that is found, its contents are passed to 730.Xr ifconfig 8 . 731Execution stops at the first unsuccessful access, so if 732something like this is present: 733.Bd -literal 734ifconfig_ed0_alias0="inet 127.0.0.251 netmask 0xffffffff" 735ifconfig_ed0_alias1="inet 127.0.0.252 netmask 0xffffffff" 736ifconfig_ed0_alias2="inet 127.0.0.253 netmask 0xffffffff" 737ifconfig_ed0_alias4="inet 127.0.0.254 netmask 0xffffffff" 738.Ed 739.Pp 740Then note that alias4 would 741.Em not 742be added since the search would stop with the missing alias3 entry. 743.It Va ifconfig_ Ns Ao Ar interface Ac Ns Va _name 744.Pq Vt str 745New name for 746.Dq interface . 747It is possible to rename interface by doing: 748.Bd -literal 749ifconfig_ed0_name="net0" 750ifconfig_net0="inet 10.0.0.1 netmask 0xffff0000" 751.Ed 752.It Va network_interfaces 753.Pq Vt str 754The list of network interfaces to configure on this host, 755or 756.Dq Li auto 757to configure all network interfaces 758(default 759.Dq Li auto ) . 760For example, if the only network devices to be configured are the loopback device 761.Pq Li lo0 762and a NIC using the 763.Xr ed 4 764driver, this could be set to 765.Dq Li "lo0 ed0" . 766An 767.Va ifconfig_ Ns Aq Ar interface 768variable is assumed to exist for each value of 769.Ar interface . 770.It Va ipv6_network_interfaces 771.Pq Vt str 772This is the IPv6 equivalent of 773.Va network_interfaces . 774Instead of setting the ifconfig variables as 775.Va ifconfig_ Ns Aq Ar interface 776they should be set as 777.Va ipv6_ifconfig_ Ns Aq Ar interface . 778Aliases should be set as 779.Va ipv6_ifconfig_ Ns Ao Ar interface Ac Ns Va _alias Ns Aq Ar n . 780Interfaces that do not have a 781.Va ipv6_ifconfig_ Ns Aq Ar interface 782setting will be auto configured by 783.Xr rtsol 8 784if the 785.Va ipv6_gateway_enable 786is set to 787.Dq Li NO . 788Note that the IPv6 networking code does not support the 789.Pa /etc/start_if. Ns Aq Ar interface 790files. 791.It Va ipv6_prefix_ Ns Aq Ar interface 792.Pq Vt str 793Assign prefix to 794.Ar interface , 795prefixlen 64 is used. 796.It Va ipv6_default_interface 797.Pq Vt str 798If not set to 799.Dq Li NO , 800this is the default output interface for scoped addresses. 801Now this works only for IPv6 link local multicast addresses. 802.It Va cloned_interfaces 803.Pq Vt str 804Set to the list of clonable network interfaces to create on this host. 805Entries in 806.Va cloned_interfaces 807are automatically appended to 808.Va network_interfaces 809for configuration. 810.It Va gif_interfaces 811.Pq Vt str 812Set to the list of 813.Xr gif 4 814tunnel interfaces to configure on this host. 815A 816.Va gifconfig_ Ns Aq Ar interface 817variable is assumed to exist for each value of 818.Ar interface . 819The value of this variable is used to configure the link layer of the 820tunnel according to the syntax of the 821.Cm tunnel 822option to 823.Xr ifconfig 8 . 824Additionally, this option ensures that each listed interface is created via the 825.Cm create 826option to 827.Xr ifconfig 8 828before attempting to configure it. 829.It Va sppp_interfaces 830.Pq Vt str 831Set to the list of 832.Xr sppp 4 833interfaces to configure on this host. 834A 835.Va spppconfig_ Ns Aq Ar interface 836variable is assumed to exist for each value of 837.Ar interface . 838Each interface should also be configured by a general 839.Va ifconfig_ Ns Aq Ar interface 840setting. 841Refer to 842.Xr spppcontrol 8 843for more information about available options. 844.It Va ppp_enable 845.Pq Vt bool 846If set to 847.Dq Li YES , 848run the 849.Xr ppp 8 850daemon. 851.It Va ppp_mode 852.Pq Vt str 853Mode in which to run the 854.Xr ppp 8 855daemon. 856Accepted modes are 857.Dq Li auto , 858.Dq Li ddial , 859.Dq Li direct 860and 861.Dq Li dedicated . 862See the manual for a full description. 863.It Va ppp_nat 864.Pq Vt bool 865If set to 866.Dq Li YES , 867enables network address translation. 868Used in conjunction with 869.Va gateway_enable 870allows hosts on private network addresses access to the Internet using 871this host as a network address translating router. 872.It Va ppp_profile 873.Pq Vt str 874The name of the profile to use from 875.Pa /etc/ppp/ppp.conf . 876.It Va ppp_user 877.Pq Vt str 878The name of the user under which 879.Xr ppp 8 880should be started. 881By default, 882.Xr ppp 8 883is started as 884.Dq Li root . 885.It Va rc_conf_files 886.Pq Vt str 887This option is used to specify a list of files that will override 888the settings in 889.Pa /etc/defaults/rc.conf . 890The files will be read in the order in which they are specified and should 891include the full path to the file. 892By default, the files specified are 893.Pa /etc/rc.conf 894and 895.Pa /etc/rc.conf.local 896.It Va fsck_y_enable 897.Pq Vt bool 898If set to 899.Dq Li YES , 900.Xr fsck 8 901will be run with the 902.Fl y 903flag if the initial preen of the file systems fails. 904.It Va netfs_types 905.Pq Vt str 906List of file system types that are network-based. 907This list should generally not be modified by end users. 908Use 909.Va extra_netfs_types 910instead. 911.It Va extra_netfs_types 912.Pq Vt str 913If set to something other than 914.Dq Li NO 915(the default), this variable extends the list of file system types 916for which automatic mounting at startup by 917.Xr rc 8 918should be delayed until the network is initialized. 919It should contain 920a whitespace-separated list of network file system descriptor pairs, 921each consisting of a file system type as passed to 922.Xr mount 8 923and a human-readable, one-word description, joined with a colon 924.Pq Ql \&: . 925Extending the default list in this way is only necessary 926when third party file system types are used. 927.It Va devfs_config_files 928.Pq Vt str 929This option is used to specify a list of configuration files containing 930.Xr devfs 5 931rules that will be applied by 932.Xr devfsctl 8 933in the order in which they are specified and must include the full path 934to the file. 935.It Va syslogd_enable 936.Pq Vt bool 937If set to 938.Dq Li YES , 939run the 940.Xr syslogd 8 941daemon. 942.It Va syslogd_program 943.Pq Vt str 944Path to 945.Xr syslogd 8 946(default 947.Pa /usr/sbin/syslogd ) . 948.It Va syslogd_flags 949.Pq Vt str 950If 951.Va syslogd_enable 952is set to 953.Dq Li YES , 954these are the flags to pass to 955.Xr syslogd 8 . 956.It Va inetd_enable 957.Pq Vt bool 958If set to 959.Dq Li YES , 960run the 961.Xr inetd 8 962daemon. 963.It Va inetd_program 964.Pq Vt str 965Path to 966.Xr inetd 8 967(default 968.Pa /usr/sbin/inetd ) . 969.It Va inetd_flags 970.Pq Vt str 971If 972.Va inetd_enable 973is set to 974.Dq Li YES , 975these are the flags to pass to 976.Xr inetd 8 . 977.It Va rwhod_enable 978.Pq Vt bool 979If set to 980.Dq Li YES , 981run the 982.Xr rwhod 8 983daemon at boot time. 984.It Va rwhod_flags 985.Pq Vt str 986If 987.Va rwhod_enable 988is set to 989.Dq Li YES , 990these are the flags to pass to it. 991.It Va amd_enable 992.Pq Vt bool 993If set to 994.Dq Li YES , 995run the 996.Xr amd 8 997daemon at boot time. 998.It Va amd_flags 999.Pq Vt str 1000If 1001.Va amd_enable 1002is set to 1003.Dq Li YES , 1004these are the flags to pass to it. 1005See the 1006.Xr amd 8 1007manpage for more information. 1008.It Va amd_map_program 1009.Pq Vt str 1010If set, the specified program is run to get the list of 1011.Xr amd 8 1012maps. 1013For example, if the 1014.Xr amd 8 1015maps are stored in NIS, one can set this to run 1016.Xr ypcat 1 1017to get a list of 1018.Xr amd 8 1019maps from the 1020.Pa amd.master 1021NIS map. 1022.It Va update_motd 1023.Pq Vt bool 1024If set to 1025.Dq Li YES , 1026.Pa /etc/motd 1027will be updated at boot time to reflect the kernel release being run. 1028If set to 1029.Dq Li NO , 1030.Pa /etc/motd 1031will not be updated. 1032.It Va nfs_client_enable 1033.Pq Vt bool 1034If set to 1035.Dq Li YES , 1036setup NFS client parameters at boot time. 1037.It Va nfs_access_cache 1038.Pq Vt int 1039If 1040.Va nfs_client_enable 1041is set to 1042.Dq Li YES , 1043this can be set to 1044.Dq Li 0 1045to disable NFS ACCESS RPC caching, or to the number of seconds for which 1046NFS ACCESS results should be cached. 1047A value of 2-10 seconds will substantially reduce network traffic for 1048many NFS operations. 1049The default is 5 seconds. 1050Note that the attribute cache holds stat information only. 1051The NFS data cache is independent of the attribute cache and is only 1052invalidated when the client detects that the server has modified the 1053underlying file. 1054This value specifies a maximum timeout. 1055The NFS client will automatically use a shorter timeout for files which 1056have been recently modified. 1057.It Va nfs_neg_cache 1058.Pq Vt int 1059If 1060.Va nfs_client_enable 1061is set to 1062.Dq Li YES , 1063this can be set to 1064.Dq Li 0 1065to disable the caching of NEGATIVE LOOKUPS (lookups of non-existent 1066filenames), or to the number of seconds for which negative lookups should 1067be cached. 1068A value of 2-10 seconds will substantially reduce network 1069traffic for many NFS operations, especially source code builds. 1070The default is 3 seconds. 1071.It Va nfs_server_enable 1072.Pq Vt bool 1073If set to 1074.Dq Li YES , 1075run the NFS server daemons at boot time. 1076.It Va nfs_server_flags 1077.Pq Vt str 1078If 1079.Va nfs_server_enable 1080is set to 1081.Dq Li YES , 1082these are the flags to pass to the 1083.Xr nfsd 8 1084daemon. 1085.It Va mountd_enable 1086.Pq Vt bool 1087If set to 1088.Dq Li YES , 1089and no 1090.Va nfs_server_enable 1091is set, start 1092.Xr mountd 8 , 1093but not 1094.Xr nfsd 8 1095daemon. 1096It is commonly needed to run CFS without real NFS used. 1097.It Va mountd_flags 1098.Pq Vt str 1099If 1100.Va mountd_enable 1101is set to 1102.Dq Li YES , 1103these are the flags to pass to the 1104.Xr mountd 8 1105daemon. 1106.It Va weak_mountd_authentication 1107.Pq Vt bool 1108If set to 1109.Dq Li YES , 1110allow services like PCNFSD to make non-privileged mount requests. 1111.It Va nfs_reserved_port_only 1112.Pq Vt bool 1113If set to 1114.Dq Li YES , 1115provide NFS services only on a secure port. 1116.It Va nfs_bufpackets 1117.Pq Vt int 1118If set to a number, indicates the number of packets worth of 1119socket buffer space to reserve on an NFS client. 1120The kernel default is typically 4. 1121Using a higher number may be useful on gigabit networks to improve performance. 1122The minimum value is 2 and the maximum is 64. 1123.It Va rpc_umntall_enable 1124.Pq Vt bool 1125If set to 1126.Dq Li YES 1127(default) and we are also an NFS client, run 1128.Xr rpc.umntall 8 1129at boot time to clear out old mounts on remote servers. 1130If set to 1131.Dq Li NO 1132then 1133.Xr rpc.umntall 8 1134will not be run at boot time. 1135.It Va rpc_lockd_enable 1136.Pq Vt bool 1137If set to 1138.Dq Li YES 1139and also an NFS server, run 1140.Xr rpc.lockd 8 1141at boot time. 1142.It Va rpc_lockd_flags 1143.Pq Vt str 1144If 1145.Va rpc_lockd_enable 1146is set to 1147.Dq Li YES , 1148these are the flags to pass to 1149.Xr rpc.lockd 8 . 1150.It Va rpc_statd_enable 1151.Pq Vt bool 1152If set to 1153.Dq Li YES 1154and also an NFS server, run 1155.Xr rpc.statd 8 1156at boot time. 1157.It Va rpc_statd_flags 1158.Pq Vt str 1159If 1160.Va rpc_statd_enable 1161is set to 1162.Dq Li YES , 1163these are the flags to pass to 1164.Xr rpc.statd 8 . 1165.It Va rpcbind_program 1166.Pq Vt str 1167Path to program for rpcbind daemon 1168(default 1169.Pa /usr/sbin/rpcbind ) . 1170.It Va rpcbind_enable 1171.Pq Vt bool 1172If set to 1173.Dq Li YES , 1174run 1175.Va rpcbind_program 1176at boot time. 1177.It Va rpcbind_flags 1178.Pq Vt str 1179If 1180.Va rpcbind_enable 1181is set to 1182.Dq Li YES , 1183these are the flags to pass to 1184.Va rpcbind_program . 1185.It Va keyserv_enable 1186.Pq Vt bool 1187If set to 1188.Dq Li YES , 1189run the 1190.Xr keyserv 8 1191daemon on boot for running Secure RPC. 1192.It Va keyserv_flags 1193.Pq Vt str 1194If 1195.Va keyserv_enable 1196is set to 1197.Dq Li YES , 1198these are the flags to pass to 1199.Xr keyserv 8 1200daemon. 1201.It Va pppoed_enable 1202.Pq Vt bool 1203If set to 1204.Dq Li YES , 1205run the 1206.Xr pppoed 8 1207daemon at boot time to provide PPP over Ethernet services. 1208.It Va pppoed_provider 1209.Pq Vt str 1210.Xr pppoed 8 1211listens to requests to this provider and ultimately runs 1212.Xr ppp 8 1213with a 1214.Ar system 1215argument of the same name. 1216.It Va pppoed_flags 1217.Pq Vt str 1218Additional flags to pass to 1219.Xr pppoed 8 . 1220.It Va pppoed_interface 1221.Pq Vt str 1222The network interface to run 1223.Xr pppoed 8 1224on. 1225This is mandatory when 1226.Va pppoed_enable 1227is set to 1228.Dq Li YES . 1229.It Va timed_enable 1230.Pq Vt bool 1231If set to 1232.Dq Li YES , 1233run the 1234.Xr timed 8 1235service at boot time. 1236This command is intended for networks of machines where a consistent 1237.Dq "network time" 1238for all hosts must be established. 1239This is often useful in large NFS environments where time stamps on 1240files are expected to be consistent network-wide. 1241.It Va timed_flags 1242.Pq Vt str 1243If 1244.Va timed_enable 1245is set to 1246.Dq Li YES , 1247these are the flags to pass to the 1248.Xr timed 8 1249service. 1250.It Va dntpd_enable 1251.Pq Vt bool 1252If set to 1253.Dq Li YES , 1254run 1255.Xr dntpd 8 1256at system boot time. 1257.It Va dntpd_program 1258.Pq Vt str 1259Path to 1260.Xr dntpd 8 1261(default 1262.Pa /usr/sbin/dntpd ) . 1263.It Va dntpd_flags 1264.Pq Vt str 1265If 1266.Va dntpd_enable 1267is set to 1268.Dq Li YES , 1269these are the flags to pass to the 1270.Xr dntpd 8 1271daemon. 1272.It Va btconfig_enable 1273.Pq Vt bool 1274If set to 1275.Dq Li YES , 1276configure Bluetooth devices via 1277.Xr btconfig 8 1278at system boot time. 1279.It Va btconfig_devices 1280.Pq Vt str 1281If 1282.Va btconfig_enable 1283is set to 1284.Dq Li YES , 1285this is the list of Bluetooth devices to configure. 1286If 1287.Va btconfig_devices 1288is not specified, all devices known to the system will be configured. 1289A 1290.Va btconfig_ Ns Aq Ar device 1291variable can be set to specify parameters to be passed to 1292.Ar device . 1293.It Va btconfig_args 1294.Pq Vt str 1295If 1296.Va btconfig_enable 1297is set to 1298.Dq Li YES , 1299this is the list of configuration parameters to pass to all Bluetooth 1300devices. 1301.It Va sdpd_enable 1302.Pq Vt bool 1303If set to 1304.Dq Li YES , 1305run the Service Discovery Profile daemon 1306.Xr ( sdpd 8 ) 1307at system boot time. 1308.It Va sdpd_flags 1309.Pq Vt str 1310If 1311.Va sdpd_enable 1312is set to 1313.Dq Li YES , 1314these are the flags to pass to the 1315.Xr sdpd 8 1316daemon. 1317.It Va bthcid_enable 1318.Pq Vt bool 1319If set to 1320.Dq Li YES , 1321run the Bluetooth Link Key/PIN Code Manager daemon 1322.Xr ( bthcid 8 ) 1323at system boot time. 1324.It Va bthcid_flags 1325.Pq Vt str 1326If 1327.Va bthcid_enable 1328is set to 1329.Dq Li YES , 1330these are the flags to pass to the 1331.Xr bthcid 8 1332daemon. 1333.It Va nis_client_enable 1334.Pq Vt bool 1335If set to 1336.Dq Li YES , 1337run the 1338.Xr ypbind 8 1339service at system boot time. 1340.It Va nis_client_flags 1341.Pq Vt str 1342If 1343.Va nis_client_enable 1344is set to 1345.Dq Li YES , 1346these are the flags to pass to the 1347.Xr ypbind 8 1348service. 1349.It Va nis_ypset_enable 1350.Pq Vt bool 1351If set to 1352.Dq Li YES , 1353run the 1354.Xr ypset 8 1355daemon at system boot time. 1356.It Va nis_ypset_flags 1357.Pq Vt str 1358If 1359.Va nis_ypset_enable 1360is set to 1361.Dq Li YES , 1362these are the flags to pass to the 1363.Xr ypset 8 1364daemon. 1365.It Va nis_server_enable 1366.Pq Vt bool 1367If set to 1368.Dq Li YES , 1369run the 1370.Xr ypserv 8 1371daemon at system boot time. 1372.It Va nis_server_flags 1373.Pq Vt str 1374If 1375.Va nis_server_enable 1376is set to 1377.Dq Li YES , 1378these are the flags to pass to the 1379.Xr ypserv 8 1380daemon. 1381.It Va nis_ypxfrd_enable 1382.Pq Vt bool 1383If set to 1384.Dq Li YES , 1385run the 1386.Xr rpc.ypxfrd 8 1387daemon at system boot time. 1388.It Va nis_ypxfrd_flags 1389.Pq Vt str 1390If 1391.Va nis_ypxfrd_enable 1392is set to 1393.Dq Li YES , 1394these are the flags to pass to the 1395.Xr rpc.ypxfrd 8 1396daemon. 1397.It Va nis_yppasswdd_enable 1398.Pq Vt bool 1399If set to 1400.Dq Li YES , 1401run the 1402.Xr rpc.yppasswdd 8 1403daemon at system boot time. 1404.It Va nis_yppasswdd_flags 1405.Pq Vt str 1406If 1407.Va nis_yppasswdd_enable 1408is set to 1409.Dq Li YES , 1410these are the flags to pass to the 1411.Xr rpc.yppasswdd 8 1412daemon. 1413.It Va rpc_ypupdated_enable 1414.Pq Vt bool 1415If set to 1416.Dq Li YES , 1417run the 1418.Nm rpc.ypupdated 1419daemon at system boot time. 1420.It Va defaultrouter 1421.Pq Vt str 1422If not set to 1423.Dq Li NO , 1424create a default route to this host name or IP address 1425(use an IP address if this router is also required to get to the 1426name server!). 1427.It Va ipv6_defaultrouter 1428.Pq Vt str 1429The IPv6 equivalent of 1430.Va defaultrouter . 1431.It Va static_routes 1432.Pq Vt str 1433Set to the list of static routes that are to be added at system boot time. 1434If not set to 1435.Dq Li NO 1436then for each whitespace separated 1437.Ar element 1438in the value, a 1439.Va route_ Ns Aq Ar element 1440variable is assumed to exist whose contents will later be passed to a 1441.Dq Nm route Cm add 1442operation. 1443.It Va change_routes 1444.Pq Vt str 1445Set to the list of static routes that are to be changed at system boot time 1446(such as those added by the kernel). 1447If not set to 1448.Dq Li NO 1449then for each whitespace separated 1450.Ar element 1451in the value, a 1452.Va change_route_ Ns Aq Ar element 1453variable is assumed to exist whose contents will later be passed to a 1454.Dq Nm route Cm change 1455operation. 1456.It Va ipv6_static_routes 1457.Pq Vt str 1458The IPv6 equivalent of 1459.Va static_routes . 1460If not set to 1461.Dq Li NO 1462then for each whitespace separated 1463.Ar element 1464in the value, a 1465.Va ipv6_route_ Ns Aq Ar element 1466variable is assumed to exist whose contents will later be passed to a 1467.Dq Nm route Cm add Fl inet6 1468operation. 1469.It Va gateway_enable 1470.Pq Vt bool 1471If set to 1472.Dq Li YES , 1473configure host to act as an IP router, e.g. to forward packets 1474between interfaces. 1475.It Va ipv6_gateway_enable 1476.Pq Vt bool 1477The IPv6 equivalent of 1478.Va gateway_enable . 1479.It Va router_enable 1480.Pq Vt bool 1481If set to 1482.Dq Li YES , 1483run a routing daemon of some sort, based on the settings of 1484.Va router_program 1485and 1486.Va router_flags . 1487.It Va ipv6_router_enable 1488.Pq Vt bool 1489The IPv6 equivalent of 1490.Va router_enable . 1491If set to 1492.Dq Li YES , 1493run a routing daemon of some sort, based on the settings of 1494.Va ipv6_router_program 1495and 1496.Va ipv6_router_flags . 1497.It Va router_program 1498.Pq Vt str 1499If 1500.Va router_enable 1501is set to 1502.Dq Li YES , 1503this is the name of the routing daemon to use 1504(default 1505.Pa /sbin/routed ) . 1506.It Va ipv6_router_program 1507.Pq Vt str 1508The IPv6 equivalent of 1509.Va router_program 1510(default 1511.Pa /sbin/route6d ) . 1512.It Va router_flags 1513.Pq Vt str 1514If 1515.Va router_enable 1516is set to 1517.Dq Li YES , 1518these are the flags to pass to the routing daemon. 1519.It Va ipv6_router_flags 1520.Pq Vt str 1521The IPv6 equivalent of 1522.Va router_flags . 1523.It Va mrouted_enable 1524.Pq Vt bool 1525If set to 1526.Dq Li YES , 1527run the multicast routing daemon, 1528.Xr mrouted 8 . 1529.It Va mroute6d_enable 1530.Pq Vt bool 1531The IPv6 equivalent of 1532.Va mrouted_enable . 1533If set to 1534.Dq Li YES , 1535run the IPv6 multicast routing daemon. 1536Note that no IPv6 multicast routing daemon is included in the 1537.Dx 1538base system but 1539.Xr pim6dd 8 1540can be installed from the 1541.Xr pkgsrc 7 1542collection. 1543.It Va mrouted_flags 1544.Pq Vt str 1545If 1546.Va mrouted_enable 1547is set to 1548.Dq Li YES , 1549these are the flags to pass to the 1550.Xr mrouted 8 1551daemon. 1552.It Va mroute6d_flags 1553.Pq Vt str 1554The IPv6 equivalent of 1555.Va mrouted_flags . 1556If 1557.Va mroute6d_enable 1558is set to 1559.Dq Li YES , 1560these are the flags passed to the IPv6 multicast routing daemon. 1561.It Va mroute6d_program 1562.Pq Vt str 1563If 1564.Va mroute6d_enable 1565is set to 1566.Dq Li YES , 1567this is the path to the IPv6 multicast routing daemon. 1568.It Va rtadvd_enable 1569.Pq Vt bool 1570If set to 1571.Dq Li YES , 1572run the 1573.Xr rtadvd 8 1574daemon at boot time. 1575.Xr rtadvd 8 1576will only run if 1577.Va ipv6_gateway_enable 1578is also set to 1579.Dq Li YES . 1580The 1581.Xr rtadvd 8 1582utility sends router advertisement packets to the interfaces specified in 1583.Va rtadvd_interfaces . 1584.Xr rtadvd 8 1585and should only be enabled with great care. 1586You may want to fine-tune 1587.Xr rtadvd.conf 5 . 1588.It Va rtadvd_interfaces 1589.Pq Vt str 1590If 1591.Va rtadvd_enable 1592is set to 1593.Dq Li YES 1594this is the list of interfaces to use. 1595.It Va rtsold_enable 1596.Pq Vt bool 1597If set to 1598.Dq Li YES , 1599run the 1600.Xr rtsold 8 1601daemon at boot time. 1602The 1603.Xr rtsold 8 1604daemon is used for automatic discovery of non-link local addresses. 1605.It Va rtsold_flags 1606.Pq Vt str 1607If 1608.Va rtsold_enable 1609is set to 1610.Dq Li YES , 1611these are the flags to pass to the 1612.Xr rtsold 8 1613daemon. 1614.It Va arpproxy_all 1615.Pq Vt bool 1616If set to 1617.Dq Li YES , 1618enable global proxy ARP. 1619.It Va forward_sourceroute 1620.Pq Vt bool 1621If set to 1622.Dq Li YES 1623and 1624.Va gateway_enable 1625is also set to 1626.Dq Li YES , 1627source-routed packets are forwarded. 1628.It Va accept_sourceroute 1629.Pq Vt bool 1630If set to 1631.Dq Li YES , 1632the system will accept source-routed packets directed at it. 1633.It Va rarpd_enable 1634.Pq Vt bool 1635If set to 1636.Dq Li YES , 1637run the 1638.Xr rarpd 8 1639daemon at system boot time. 1640.It Va rarpd_flags 1641.Pq Vt str 1642If 1643.Va rarpd_enable 1644is set to 1645.Dq Li YES , 1646these are the flags to pass to the 1647.Xr rarpd 8 1648daemon. 1649.It Va bootparamd_enable 1650.Pq Vt bool 1651If set to 1652.Dq Li YES , 1653run the 1654.Xr bootparamd 8 1655daemon at system boot time. 1656.It Va bootparamd_flags 1657.Pq Vt str 1658If 1659.Va bootparamd_enable 1660is set to 1661.Dq Li YES , 1662these are the flags to pass to the 1663.Xr bootparamd 8 1664daemon. 1665.It Va stf_interface_ipv4addr 1666.Pq Vt str 1667If not set to 1668.Dq Li NO , 1669this is the local IPv4 address for 6to4 (IPv6 over IPv4 tunneling interface). 1670Specify this entry to enable the 6to4 interface. 1671.It Va stf_interface_ipv4plen 1672.Pq Vt int 1673Prefix length for 6to4 IPv4 addresses, to limit peer address range. 1674An effective value is 0-31. 1675.It Va stf_interface_ipv6_ifid 1676.Pq Vt str 1677IPv6 interface ID for 1678.Xr stf 4 . 1679This can be set to 1680.Dq Li AUTO . 1681.It Va stf_interface_ipv6_slaid 1682.Pq Vt str 1683IPv6 Site Level Aggregator for 1684.Xr stf 4 . 1685.It Va ipv6_faith_prefix 1686.Pq Vt str 1687If not set to 1688.Dq Li NO , 1689this is the faith prefix to enable a FAITH IPv6-to-IPv4 TCP translator. 1690You also need 1691.Xr faithd 8 1692setup. 1693.It Va ipv6_ipv4mapping 1694.Pq Vt bool 1695If set to 1696.Dq Li YES 1697this enables IPv4 mapped IPv6 address communication (like 1698.Li ::ffff:a.b.c.d ) . 1699.It Va atm_enable 1700.Pq Vt bool 1701Set to 1702.Dq Li YES 1703to enable the configuration of ATM interfaces at system boot time. 1704For all of the ATM variables described below, please refer to the 1705.Xr atm 8 1706man page for further details on the available command parameters. 1707Also refer to the files in 1708.Pa /usr/share/examples/atm 1709for more detailed configuration information. 1710.It Va atm_netif_ Ns Aq Ar intf 1711.Pq Vt str 1712For the ATM physical interface 1713.Ar intf , 1714this variable defines the name prefix and count for the ATM network 1715interfaces to be created. 1716The value will be passed as the parameters of an 1717.Dq Nm atm Cm "set netif" Ar intf 1718command. 1719.It Va atm_sigmgr_ Ns Aq Ar intf 1720.Pq Vt str 1721For the ATM physical interface 1722.Ar intf , 1723this variable defines the ATM signalling manager to be used. 1724The value will be passed as the parameters of an 1725.Dq Nm atm Cm attach Ar intf 1726command. 1727.It Va atm_prefix_ Ns Aq Ar intf 1728.Pq Vt str 1729For the ATM physical interface 1730.Ar intf , 1731this variable defines the NSAP prefix for interfaces using a UNI signalling 1732manager. 1733If set to 1734.Dq Li ILMI , 1735the prefix will automatically be set via the 1736.Xr ilmid 8 1737daemon. 1738Otherwise, the value will be passed as the parameters of an 1739.Dq Nm atm Cm "set prefix" Ar intf 1740command. 1741.It Va atm_macaddr_ Ns Aq Ar intf 1742.Pq Vt str 1743For the ATM physical interface 1744.Ar intf , 1745this variable defines the MAC address for interfaces using a UNI signalling 1746manager. 1747If set to 1748.Dq Li NO , 1749the hardware MAC address contained in the ATM interface card will be used. 1750Otherwise, the value will be passed as the parameters of an 1751.Dq Nm atm Cm "set mac" Ar intf 1752command. 1753.It Va atm_arpserver_ Ns Aq Ar netif 1754.Pq Vt str 1755For the ATM network interface 1756.Ar netif , 1757this variable defines the ATM address for a host which is to provide ATMARP 1758service. 1759This variable is only applicable to interfaces using a UNI signalling manager. 1760If set to 1761.Dq Li local , 1762this host will become an ATMARP server. 1763The value will be passed as the parameters of an 1764.Dq Nm atm Cm "set arpserver" Ar netif 1765command. 1766.It Va atm_scsparp_ Ns Aq Ar netif 1767.Pq Vt bool 1768If set to 1769.Dq Li YES , 1770SCSP/ATMARP service for the network interface 1771.Ar netif 1772will be initiated using the 1773.Xr scspd 8 1774and 1775.Xr atmarpd 8 1776daemons. 1777This variable is only applicable if 1778.Va atm_arpserver_ Ns Aq Ar netif 1779is set to 1780.Dq Li local . 1781.It Va atm_arps 1782.Pq Vt str 1783Set to the list of permanent ATM ARP entries to be added at system boot time. 1784For each whitespace separated 1785.Ar element 1786in the value, an 1787.Va atm_arp_ Ns Aq Ar element 1788variable is assumed to exist. 1789The value of each of these variables will be passed as the parameters of an 1790.Dq Nm atm Cm "add arp" 1791command. 1792.It Va keybell 1793.Pq Vt str 1794The keyboard bell sound. 1795Set to 1796.Dq Li normal , 1797.Dq Li visual , 1798.Dq Li off , 1799or 1800.Dq Li NO 1801if the default behavior is desired. 1802For details, refer to the 1803.Xr kbdcontrol 1 1804manpage. 1805.It Va keymap 1806.Pq Vt str 1807If set to 1808.Dq Li NO , 1809no keymap is installed, otherwise the value is used to install 1810the keymap file in 1811.Pa /usr/share/syscons/keymaps/ Ns Ao Ar value Ac Ns Pa .kbd . 1812.It Va keyrate 1813.Pq Vt str 1814The keyboard repeat speed. 1815Set to 1816.Dq Li slow , 1817.Dq Li normal , 1818.Dq Li fast , 1819or 1820.Dq Li NO 1821if the default behavior is desired. 1822.It Va keychange 1823.Pq Vt str 1824If not set to 1825.Dq Li NO , 1826attempt to program the function keys with the value. 1827The value should be a single string of the form: 1828.Dq Ar funkey_number new_value Op Ar funkey_number new_value ... . 1829.It Va cursor 1830.Pq Vt str 1831Can be set to the value of 1832.Dq Li normal , 1833.Dq Li blink , 1834.Dq Li destructive , 1835or 1836.Dq Li NO 1837to set the cursor behavior explicitly or choose the default behavior. 1838.It Va scrnmap 1839.Pq Vt str 1840If set to 1841.Dq Li NO , 1842no screen map is installed, otherwise the value is used to install 1843the screen map file in 1844.Pa /usr/share/syscons/scrnmaps/ Ns Aq Ar value . 1845.It Va font8x16 1846.Pq Vt str 1847If set to 1848.Dq Li NO , 1849the default 8x16 font value is used for screen size requests, otherwise 1850the value in 1851.Pa /usr/share/syscons/fonts/ Ns Aq Ar value 1852is used. 1853.It Va font8x14 1854.Pq Vt str 1855If set to 1856.Dq Li NO , 1857the default 8x14 font value is used for screen size requests, otherwise 1858the value in 1859.Pa /usr/share/syscons/fonts/ Ns Aq Ar value 1860is used. 1861.It Va font8x8 1862.Pq Vt str 1863If set to 1864.Dq Li NO , 1865the default 8x8 font value is used for screen size requests, otherwise 1866the value in 1867.Pa /usr/share/syscons/fonts/ Ns Aq Ar value 1868is used. 1869.It Va blanktime 1870.Pq Vt int 1871If set to 1872.Dq Li NO , 1873the default screen blanking interval is used, otherwise it is set to 1874.Ar value 1875seconds. 1876.It Va saver 1877.Pq Vt str 1878If not set to 1879.Dq Li NO , 1880this is the actual screen saver to use 1881.Li ( blank , snake , daemon , 1882etc). 1883.It Va moused_enable 1884.Pq Vt str 1885If set to 1886.Dq Li YES , 1887the 1888.Xr moused 8 1889daemon is started for doing cut/paste selection on the console. 1890.It Va moused_type 1891.Pq Vt str 1892This is the protocol type of the mouse connected to this host. 1893This variable must be set if 1894.Va moused_enable 1895is set to 1896.Dq Li YES . 1897The 1898.Xr moused 8 1899daemon 1900is able to detect the appropriate mouse type automatically in many cases. 1901Set this variable to 1902.Dq Li auto 1903to let the daemon detect it, or 1904select one from the following list if the automatic detection fails. 1905.Pp 1906If the mouse is attached to the PS/2 mouse port, choose 1907.Dq Li auto 1908or 1909.Dq Li ps/2 , 1910regardless of the brand and model of the mouse. 1911Likewise, if the mouse is attached to the bus mouse port, choose 1912.Dq Li auto 1913or 1914.Dq Li busmouse . 1915All other protocols are for serial mice and will not work with 1916the PS/2 and bus mice. 1917If this is a USB mouse, 1918.Dq Li auto 1919is the only protocol type which will work. 1920.Pp 1921.Bl -tag -width ".Li x10mouseremote" -compact 1922.It Li microsoft 1923Microsoft mouse (serial) 1924.It Li intellimouse 1925Microsoft IntelliMouse (serial) 1926.It Li mousesystems 1927Mouse systems Corp. mouse (serial) 1928.It Li mmseries 1929MM Series mouse (serial) 1930.It Li logitech 1931Logitech mouse (serial) 1932.It Li busmouse 1933A bus mouse 1934.It Li mouseman 1935Logitech MouseMan and TrackMan (serial) 1936.It Li glidepoint 1937ALPS GlidePoint (serial) 1938.It Li thinkingmouse 1939Kensington ThinkingMouse (serial) 1940.It Li ps/2 1941PS/2 mouse 1942.It Li mmhittab 1943MM HitTablet (serial) 1944.It Li x10mouseremote 1945X10 MouseRemote (serial) 1946.It Li versapad 1947Interlink VersaPad (serial) 1948.El 1949.Pp 1950Even if the mouse is not in the above list, it may be compatible 1951with one in the list. 1952Refer to the man page for 1953.Xr moused 8 1954for compatibility information. 1955.Pp 1956It should also be noted that while this is enabled, any 1957other client of the mouse (such as an X server) should access 1958the mouse through the virtual mouse device, 1959.Pa /dev/sysmouse , 1960and configure it as a 1961.Dq Li sysmouse 1962type mouse, since all 1963mouse data is converted to this single canonical format when using 1964.Xr moused 8 . 1965If the client program does not support the 1966.Dq Li sysmouse 1967type, specify the 1968.Dq Li mousesystems 1969type. 1970It is the second preferred type. 1971.It Va moused_port 1972.Pq Vt str 1973If 1974.Va moused_enable 1975is set to 1976.Dq Li YES , 1977this is the actual port the mouse is on. 1978It might be 1979.Pa /dev/cuaa0 1980for a COM1 serial mouse or 1981.Pa /dev/psm0 1982for a PS/2 mouse, for example. 1983.It Va moused_flags 1984.Pq Vt str 1985If 1986.Va moused_type 1987is set, these are the additional flags to pass to the 1988.Xr moused 8 1989daemon. 1990.It Va mousechar_start 1991.Pq Vt int 1992If set to 1993.Dq Li NO , 1994the default mouse cursor character range 1995.Li 0xd0 Ns - Ns Li 0xd3 1996is used, otherwise the range start is set to 1997.Ar value 1998character, see 1999.Xr vidcontrol 1 . 2000Use if the default range is occupied in the language code table. 2001.It Va vidhistory 2002.Pq Vt int 2003Set the size of the history (scrollback) buffer in lines. 2004.It Va allscreens_flags 2005.Pq Vt str 2006If set, 2007.Xr vidcontrol 1 2008is run with these options for each of the virtual terminals 2009.Pq Pa /dev/ttyv* . 2010For example, 2011.Dq Fl m Cm on 2012will enable the mouse pointer on all virtual terminals if 2013.Va moused_enable 2014is set to 2015.Dq Li YES . 2016.It Va allscreens_kbdflags 2017.Pq Vt str 2018If set, 2019.Xr kbdcontrol 1 2020is run with these options for each of the virtual terminals 2021.Pq Pa /dev/ttyv* . 2022For example, 2023.Dq Fl h Li 200 2024will set the 2025.Xr syscons 4 2026scrollback (history) buffer to 200 lines. 2027.It Va cron_enable 2028.Pq Vt bool 2029If set to 2030.Dq Li YES , 2031run the 2032.Xr cron 8 2033daemon at system boot time. 2034.It Va cron_program 2035.Pq Vt str 2036Path to 2037.Xr cron 8 2038(default 2039.Pa /usr/sbin/cron ) . 2040.It Va cron_flags 2041.Pq Vt str 2042If 2043.Va cron_enable 2044is set to 2045.Dq Li YES , 2046these are the flags to pass to 2047.Xr cron 8 . 2048.It Va lpd_program 2049.Pq Vt str 2050Path to 2051.Xr lpd 8 2052(default 2053.Pa /usr/sbin/lpd ) . 2054.It Va lpd_enable 2055.Pq Vt bool 2056If set to 2057.Dq Li YES , 2058run the 2059.Xr lpd 8 2060daemon at system boot time. 2061.It Va lpd_flags 2062.Pq Vt str 2063If 2064.Va lpd_enable 2065is set to 2066.Dq Li YES , 2067these are the flags to pass to the 2068.Xr lpd 8 2069daemon. 2070.It Va nscd_enable 2071.Pq Vt bool 2072If set to 2073.Dq Li YES , 2074run the 2075.Xr nscd 8 2076daemon at system boot time. 2077.It Va mixer_enable 2078.Pq Vt bool 2079If set to 2080.Dq Li YES , 2081preserve 2082.Xr mixer 8 2083settings across reboots. 2084.It Va mta_start_script 2085.Pq Vt str 2086The full path to the script to run to start 2087a mail transfer agent. 2088The default is 2089.Pa /etc/rc.sendmail . 2090The 2091.Va sendmail_* 2092variables which 2093.Pa /etc/rc.sendmail 2094uses are documented in the 2095.Xr rc.sendmail 8 2096man page. 2097.It Va fixbootfile 2098.Pq Vt bool 2099In a 2100.Sq HAMMER ROOT with UFS /boot 2101setup, the boot loader will not set up the 2102.Va kern.bootfile 2103sysctl correctly. 2104The system will attempt to fix this on its own. 2105Set this variable to 2106.Dq Li NO 2107to turn this behavior off. 2108.It Va dumpdev 2109.Pq Vt str 2110Indicates the device (usually a swap partition) to which a crash dump 2111should be written in the event of a system crash. 2112The value of this variable is passed as the argument to 2113.Xr dumpon 8 2114and 2115.Xr savecore 8 . 2116To disable crash dumps, set this variable to 2117.Dq Li NO . 2118.It Va dumpdir 2119.Pq Vt str 2120When the system reboots after a crash and a crash dump is found on the 2121device specified by the 2122.Va dumpdev 2123variable, 2124.Xr savecore 8 2125will save that crash dump and a copy of the kernel to the directory 2126specified by the 2127.Va dumpdir 2128variable. 2129The default value is 2130.Pa /var/crash . 2131Set to 2132.Dq Li NO 2133to not run 2134.Xr savecore 8 2135at boot time when 2136.Va dumpdir 2137is set. 2138.It Va savecore_flags 2139.Pq Vt str 2140If crash dumps are enabled, these are the flags to pass to the 2141.Xr savecore 8 2142utility. 2143.It Va crashinfo_enable 2144.Pq Vt bool 2145Set to 2146.Dq Li YES 2147to turn on automatic crash dump summary generation using the utility 2148specified by the 2149.Va crashinfo_program 2150variable. 2151.It Va crashinfo_program 2152.Pq Vt str 2153Program to run to generate a crash dump summary if the variable 2154.Va crashinfo_enable 2155is set to 2156.Dq Li YES . 2157The default value is 2158.Pa /usr/sbin/crashinfo . 2159.It Va enable_quotas 2160.Pq Vt bool 2161Set to 2162.Dq Li YES 2163to turn on user disk quotas on system startup via the 2164.Xr quotaon 8 2165command. 2166.It Va check_quotas 2167.Pq Vt bool 2168Set to 2169.Dq Li YES 2170to enable user disk quota checking via the 2171.Xr quotacheck 8 2172command. 2173.It Va accounting_enable 2174.Pq Vt bool 2175Set to 2176.Dq Li YES 2177to enable system accounting through the 2178.Xr accton 8 2179facility. 2180.It Va linux_enable 2181.Pq Vt bool 2182Set to 2183.Dq Li YES 2184to enable Linux/ELF binary emulation at system initial boot time. 2185.It Va sysvipc_enable 2186.Pq Vt bool 2187If set to 2188.Dq Li YES , 2189load System V IPC primitives at boot time. 2190.\" ----- cleanvar_enable setting-------------------------------- 2191.It Va cleanvar_enable 2192.Pq Vt bool 2193Set to 2194.Dq Li YES 2195to have 2196.Pa /var/run , 2197.Pa /var/spool/lock 2198and 2199.Pa /var/spool/uucp/.Temp/* 2200cleaned at startup. 2201.\" ----- clear_tmp_enable setting------------------------------- 2202.It Va clear_tmp_enable 2203.Pq Vt bool 2204Set to 2205.Dq Li YES 2206to have 2207.Pa /tmp 2208cleaned at startup. 2209.\" ----- ldconfig_paths setting -------------------------------- 2210.It Va ldconfig_paths 2211.Pq Vt str 2212Set to the list of shared library paths to use with 2213.Xr ldconfig 8 . 2214NOTE: 2215.Pa /usr/lib 2216will always be added first, so it need not appear in this list. 2217.It Va ldconfig_insecure 2218.Pq Vt bool 2219The 2220.Xr ldconfig 8 2221utility normally refuses to use directories 2222which are writable by anyone except root. 2223Set this variable to 2224.Dq Li YES 2225to disable that security check during system startup. 2226.It Va ldconfig_local_dirs 2227.Pq Vt str 2228Set to the list of local 2229.Xr ldconfig 8 2230directories. 2231The names of all files in the directories listed will be 2232passed as arguments to 2233.Xr ldconfig 8 . 2234.It Va kern_securelevel 2235.Pq Vt int 2236The kernel security level to set at startup. 2237The allowed range of 2238.Ar value 2239ranges from \-1 (the compile time default) to 3 (the most secure). 2240See 2241.Xr init 8 2242for the list of possible security levels and their effect on system operation. 2243.It Va start_vinum 2244.Pq Vt bool 2245Set to 2246.Dq Li YES 2247to start 2248.Xr vinum 8 2249at system boot time. 2250.It Va sshd_enable 2251.Pq Vt bool 2252Set to 2253.Dq Li YES 2254to start 2255.Xr sshd 8 2256at system boot time. 2257.It Va sshd_program 2258.Pq Vt str 2259Path to the SSH server program 2260(default 2261.Pa /usr/sbin/sshd ) . 2262.It Va sshd_flags 2263.Pq Vt str 2264If 2265.Va sshd_enable 2266is set to 2267.Dq Li YES , 2268these are the flags to pass to the 2269.Xr sshd 8 2270daemon. 2271.It Va ftpd_enable 2272.Pq Vt bool 2273Set to 2274.Dq Li YES 2275to start 2276.Xr ftpd 8 2277at system boot time. 2278.It Va ftpd_flags 2279.Pq Vt str 2280If 2281.Va ftpd_enable 2282is set to 2283.Dq Li YES , 2284these are the flags to pass to the 2285.Xr ftpd 8 2286daemon. 2287.It Va usbd_enable 2288.Pq Vt bool 2289If set to 2290.Dq Li YES , 2291run the 2292.Xr usbd 8 2293daemon at boot time. 2294.It Va usbd_flags 2295.Pq Vt str 2296If 2297.Va usbd_enable 2298is set to 2299.Dq Li YES , 2300these are the flags passed to 2301.Xr usbd 8 2302daemon. 2303.It Va watchdogd_enable 2304.Pq Vt bool 2305If set to 2306.Dq Li YES , 2307start the 2308.Xr watchdogd 8 2309daemon at boot time. 2310This requires that the kernel have been compiled with 2311.Cd "options WATCHDOG" . 2312.It Va jail_enable 2313.Pq Vt bool 2314If set to 2315.Dq Li NO , 2316any configured jails will not be started. 2317.It Va jail_list 2318.Pq Vt str 2319A space separated list of names for jails. 2320This is purely a configuration aid to help identify and 2321configure multiple jails. 2322The names specified in this list will be used to 2323identify settings common to an instance of a jail. 2324Assuming that the jail in question was named 2325.Li vjail , 2326you would have the following dependent variables: 2327.Bd -literal 2328jail_vjail_hostname="jail.example.com" 2329jail_vjail_ip="192.168.1.100" 2330jail_vjail_rootdir="/var/jails/vjail/root" 2331.Ed 2332.It Va jail_flags 2333.Pq Vt str 2334Unset by default. 2335When set, use as default value for 2336.Va jail_ Ns Ao Ar jname Ac Ns Va _flags 2337for every jail in 2338.Va jail_list . 2339.It Va jail_interface 2340.Pq Vt str 2341Unset by default. 2342When set, use as default value for 2343.Va jail_ Ns Ao Ar jname Ac Ns Va _interface 2344for every jail in 2345.Va jail_list . 2346.It Va jail_fstab 2347.Pq Vt str 2348Unset by default. 2349When set, use as default value for 2350.Va jail_ Ns Ao Ar jname Ac Ns Va _fstab 2351for every jail in 2352.Va jail_list . 2353.It Va jail_mount_enable 2354.Pq Vt bool 2355Set to 2356.Dq Li NO 2357by default. 2358When set to 2359.Dq Li YES , 2360sets 2361.Va jail_ Ns Ao Ar jname Ac Ns Va _mount_enable 2362to 2363.Dq Li YES 2364by default for every jail in 2365.Va jail_list . 2366.It Va jail_fdesc_enable 2367.Pq Vt bool 2368Set to 2369.Dq Li NO 2370by default. 2371When set to 2372.Dq Li YES , 2373sets 2374.Va jail_ Ns Ao Ar jname Ac Ns Va _fdesc_enable 2375to 2376.Dq Li YES 2377by default for every jail in 2378.Va jail_list . 2379.It Va jail_procfs_enable 2380.Pq Vt bool 2381Set to 2382.Dq Li NO 2383by default. 2384When set to 2385.Dq Li YES , 2386sets 2387.Va jail_ Ns Ao Ar jname Ac Ns Va _procfs_enable 2388to 2389.Dq Li YES 2390by default for every jail in 2391.Va jail_list . 2392.It Va jail_devfs_enable 2393.Pq Vt bool 2394Set to 2395.Dq Li NO 2396by default. 2397When set to 2398.Dq Li YES , 2399sets 2400.Va jail_ Ns Ao Ar jname Ac Ns Va _devfs_enable 2401to 2402.Dq Li YES 2403by default for every jail in 2404.Va jail_list . 2405.It Va jail_exec_start 2406.Pq Vt str 2407Unset by default. 2408When set, use as default value for 2409.Va jail_ Ns Ao Ar jname Ac Ns Va _exec_start 2410for every jail in 2411.Va jail_list . 2412.It Va jail_exec_stop 2413Unset by default. 2414When set, use as default value for 2415.Va jail_ Ns Ao Ar jname Ac Ns Va _exec_stop 2416for every jail in 2417.Va jail_list . 2418.It Va jail_ Ns Ao Ar jname Ac Ns Va _rootdir 2419.Pq Vt str 2420Unset by default. 2421Set to the root directory used by jail 2422.Va jname . 2423.It Va jail_ Ns Ao Ar jname Ac Ns Va _hostname 2424.Pq Vt str 2425Unset by default. 2426Set to the fully qualified domain name (FQDN) assigned to jail 2427.Va jname . 2428.It Va jail_ Ns Ao Ar jname Ac Ns Va _ip 2429.Pq Vt str 2430Unset by default. 2431Set to the IP address assigned to jail 2432.Va jname . 2433.It Va jail_ Ns Ao Ar jname Ac Ns Va _flags 2434.Pq Vt str 2435Set to 2436.Dq Li -l -U root 2437by default. 2438These are flags to pass to 2439.Xr jail 8 . 2440.It Va jail_ Ns Ao Ar jname Ac Ns Va _interface 2441.Pq Vt str 2442Unset by default. 2443When set, sets the interface to use when setting IP address alias. 2444Note that the alias is created at jail startup and removed at jail shutdown. 2445.It Va jail_ Ns Ao Ar jname Ac Ns Va _fstab 2446.Pq Vt str 2447Set to 2448.Pa /etc/fstab. Ns Aq Ar jname 2449by default. 2450This is the file system information file to use for jail 2451.Va jname . 2452.It Va jail_ Ns Ao Ar jname Ac Ns Va _mount_enable 2453.Pq Vt bool 2454Set to 2455.Dq Li NO 2456by default. 2457When set to 2458.Dq Li YES , 2459mount all file systems from 2460.Va jail_ Ns Ao Ar jname Ac Ns Va _fstab 2461at jail startup. 2462.It Va jail_ Ns Ao Ar jname Ac Ns Va _fdesc_enable 2463.Pq Vt bool 2464Set to 2465.Dq Li NO 2466by default. 2467When set to 2468.Dq Li YES , 2469mount the file-descriptor file system inside jail 2470.Ar jname 2471at jail startup. 2472.It Va jail_ Ns Ao Ar jname Ac Ns Va _procfs_enable 2473.Pq Vt bool 2474Set to 2475.Dq Li NO 2476by default. 2477When set to 2478.Dq Li YES , 2479mount the process file system inside jail 2480.Ar jname 2481at jail startup. 2482.It Va jail_ Ns Ao Ar jname Ac Ns Va _devfs_enable 2483.Pq Vt bool 2484Set to 2485.Dq Li NO 2486by default. 2487When set to 2488.Dq Li YES , 2489mount the device file system inside jail 2490.Ar jname 2491at jail startup. 2492.It Va jail_ Ns Ao Ar jname Ac Ns Va _exec_start 2493.Pq Vt str 2494Set to 2495.Dq Li /bin/sh /etc/rc 2496by default. 2497This is the command executed at jail startup. 2498.It Va jail_ Ns Ao Ar jname Ac Ns Va _exec_stop 2499.Pq Vt str 2500Set to 2501.Dq Li /bin/sh /etc/rc.shutdown 2502by default. 2503This is the command executed at jail shutdown. 2504.It Va jail_set_hostname_allow 2505.Pq Vt bool 2506If set to 2507.Dq Li NO , 2508do not allow the root user in a jail to set its hostname. 2509.It Va jail_socket_unixiproute_only 2510.Pq Vt bool 2511If set to 2512.Dq Li YES , 2513do not allow any sockets, 2514besides UNIX/IP/route sockets, 2515to be used within a jail. 2516.It Va jail_sysvipc_allow 2517.Pq Vt bool 2518If set to 2519.Dq Li YES , 2520allow applications within a jail to use System V IPC. 2521.It Va lvm_enable 2522.Pq Vt bool 2523If set to 2524.Dq Li YES 2525LVM volumes will be discovered and configured on boot. 2526.It Va newsyslog_enable 2527.Pq Vt bool 2528If set to 2529.Dq Li YES , 2530run 2531.Xr newsyslog 8 2532before syslogd starts. 2533.It Va newsyslog_flags 2534.Pq Vt str 2535If 2536.Va newsyslog_enable 2537is set to 2538.Dq Li YES , 2539these are the flags passed to 2540.Xr newsyslog 8 . 2541.It Va resident_enable 2542.Pq Vt bool 2543If set to 2544.Dq Li YES , 2545make the dynamic binaries listed in 2546.Pa /etc/resident.conf 2547resident. 2548.It Va varsym_enable 2549.Pq Vt bool 2550If set to 2551.Dq Li YES , 2552process 2553.Pa /etc/varsym.conf 2554to set system-wide variables for variant symlinks. 2555.It Va rand_irqs 2556.Pq Vt str 2557Set either to 2558.Dq Li NO 2559or a whitespace separated list of IRQ numbers which will be used as a source of 2560randomness. 2561.\" ----------------------------------------------------- 2562.It Va entropy_dir 2563.Pq Vt str 2564Set to 2565.Dq Li NO 2566to disable caching entropy via 2567.Xr cron 8 . 2568Otherwise set to the directory used to store entropy files in. 2569.It Va entropy_file 2570.Pq Vt str 2571Set to 2572.Dq Li NO 2573to disable caching entropy through reboots. 2574Otherwise set to the filename used to store cached entropy through reboots. 2575This file should be located on the root file system to seed the 2576.Xr random 4 2577device as early as possible in the boot process. 2578.It Va ipsec_enable 2579.Pq Vt bool 2580Set to 2581.Dq Li YES 2582to run 2583.Xr setkey 8 2584on 2585.Va ipsec_file 2586at boot time. 2587.It Va ipsec_file 2588.Pq Vt str 2589Configuration file for 2590.Xr setkey 8 . 2591.It Va dmesg_enable 2592.Pq Vt bool 2593Set to 2594.Dq Li YES 2595to save 2596.Xr dmesg 8 2597to 2598.Pa /var/run/dmesg.boot 2599on boot. 2600.It Va rcshutdown_timeout 2601.Pq Vt int 2602If set, start a watchdog timer in the background which will terminate 2603.Pa rc.shutdown 2604if 2605.Xr shutdown 8 2606has not completed within the specified time (in seconds). 2607Notice that in addition to this soft timeout, 2608.Xr init 8 2609also applies a hard timeout for the execution of 2610.Pa rc.shutdown . 2611This is configured via 2612.Xr sysctl 8 2613variable 2614.Va kern.init_shutdown_timeout 2615and defaults to 120 seconds. Setting the value of 2616.Va rcshutdown_timeout 2617to more than 120 seconds will have no effect until the 2618.Xr sysctl 8 2619variable 2620.Va kern.init_shutdown_timeout 2621is also increased. 2622.It Va udevd_enable 2623.Pq Vt bool 2624If set to 2625.Dq Li YES , 2626the udevd daemon will be started on boot. 2627.It Va vfs_quota_enable 2628.Pq Vt bool 2629If set to 2630.Dq Li YES , 2631vfs quota rc.d scripts will be run on boot. 2632.It Va vfs_quota_sync 2633.Pq Vt str 2634List of mount points whose counters are to be synchronized with on-disk 2635usage during system startup. See also 2636.Xr vquota 8 . 2637.It Va vknetd_enable 2638.Pq Vt bool 2639If set to 2640.Dq Li YES , 2641.Xr vknetd 8 2642will be started on boot. 2643.It Va vknetd_flags 2644.Pq Vt bool 2645Additional flags passed to 2646.Xr vknetd 8 . 2647Usually address/cidrbits is specified here. 2648When no flags are passed, default option 2649.Fl U 2650will be used. 2651.It Va vkernel_enable 2652.Pq Vt bool 2653If set to 2654.Dq Li NO , 2655any configured vkernels will not be started. 2656.It Va vkernel_kill_timeout 2657.Pq Vt int 2658This defines the default number of seconds that we will wait for the 2659vkernel to shut down on it's own. If after this time it's still alive, 2660it will be killed with SIGKILL. 2661.It Va vkernel_bin 2662.Pq Vt str 2663Defines the default path to the vkernel binary. 2664.It Va vkernel_list 2665.Pq Vt str 2666A space separated list of names for vkernels. 2667This is purely a configuration aid to help identify and 2668configure multiple vkernels. 2669The names specified in this list will be used to 2670identify settings common to a vkernel instance. 2671Assuming that the vkernel in question was named 2672.Li example , 2673you would have the following dependent variables 2674(filled with reference values in this text): 2675.Bd -literal 2676vkernel_example_bin="/usr/obj/usr/src/sys/VKERNEL/kernel.debug" 2677vkernel_example_memsize="64m" 2678vkernel_example_rootimg_list="/var/vkernel/rootimg.01" 2679vkernel_example_iface_list="auto:bridge0" 2680vkernel_example_logfile="/dev/null" 2681vkernel_example_flags="-U" 2682vkernel_example_kill_timeout="45" 2683.Ed 2684.Pp 2685The last five are optional. 2686They default to an empty string if not set, except for logfile which defaults to 2687.Pa /dev/null 2688if it is not set. 2689.El 2690.Sh FILES 2691.Bl -tag -width ".Pa /etc/start_if. Ns Aq Ar interface" -compact 2692.It Pa /etc/defaults/rc.conf 2693.It Pa /etc/rc.conf 2694.It Pa /etc/rc.conf.local 2695.It Pa /etc/start_if. Ns Aq Ar interface 2696.El 2697.Sh SEE ALSO 2698.Xr catman 1 , 2699.Xr gdb 1 , 2700.Xr info 1 , 2701.Xr kbdcontrol 1 , 2702.Xr varsym 1 , 2703.Xr vidcontrol 1 , 2704.Xr ip 4 , 2705.Xr ipfw 4 , 2706.Xr kld 4 , 2707.Xr pf 4 , 2708.Xr tcp 4 , 2709.Xr udp 4 , 2710.Xr exports 5 , 2711.Xr motd 5 , 2712.Xr resident.conf 5 , 2713.Xr varsym.conf 5 , 2714.Xr accton 8 , 2715.Xr amd 8 , 2716.Xr apm 8 , 2717.Xr atm 8 , 2718.Xr btconfig 8 , 2719.Xr bthcid 8 , 2720.Xr cron 8 , 2721.Xr devd 8 , 2722.Xr dhclient 8 , 2723.Xr dntpd 8 , 2724.Xr ftpd 8 , 2725.Xr ifconfig 8 , 2726.Xr inetd 8 , 2727.Xr jail 8 , 2728.Xr lpd 8 , 2729.Xr makewhatis 8 , 2730.Xr mixer 8 , 2731.Xr mountd 8 , 2732.Xr moused 8 , 2733.Xr mrouted 8 , 2734.Xr named 8 , 2735.Xr nfsd 8 , 2736.Xr pcnfsd 8 , 2737.Xr pfctl 8 , 2738.Xr pflogd 8 , 2739.Xr quotacheck 8 , 2740.Xr quotaon 8 , 2741.Xr rc 8 , 2742.Xr rc.sendmail 8 , 2743.Xr resident 8 , 2744.Xr rndcontrol 8 , 2745.Xr route 8 , 2746.Xr routed 8 , 2747.Xr rpcbind 8 , 2748.Xr rpc.lockd 8 , 2749.Xr rpc.statd 8 , 2750.Xr rtadvd 8 , 2751.Xr rtsold 8 , 2752.Xr rwhod 8 , 2753.Xr savecore 8 , 2754.Xr sdpd 8 , 2755.Xr sensorsd 8 , 2756.Xr sshd 8 , 2757.Xr swapon 8 , 2758.Xr sysctl 8 , 2759.Xr syslogd 8 , 2760.Xr sysvipcd 8 , 2761.Xr timed 8 , 2762.Xr usbd 8 , 2763.Xr vinum 8 , 2764.Xr yp 8 , 2765.Xr ypbind 8 , 2766.Xr ypserv 8 , 2767.Xr ypset 8 2768.Sh HISTORY 2769The 2770.Nm 2771file appeared in 2772.Fx 2.2.2 . 2773.Sh AUTHORS 2774.An Jordan K. Hubbard . 2775