1# $NetBSD: rc.conf,v 1.100 2009/01/14 22:07:55 haad Exp $ 2# 3# /etc/defaults/rc.conf -- 4# default configuration of /etc/rc.conf 5# 6# see rc.conf(5) for more information. 7# 8# DO NOT EDIT THIS FILE DIRECTLY; IT MAY BE REPLACED DURING A SYSTEM UPGRADE. 9# EDIT /etc/rc.conf INSTEAD. 10# 11 12# 13# Use program=YES to enable program, NO to disable it. program_flags are 14# passed to the program on the command line. 15# 16 17# Uncomment this if you want to use local paths in rc. 18# 19#export PATH=$PATH:/usr/pkg/sbin:/usr/pkg/bin:/usr/local/sbin:/usr/local/bin 20 21# Uncomment the following to execute each /etc/rc.d script in 22# the current shell rather than in a subshell. This may be 23# faster on very slow machines that have an expensive fork(2). 24# NOTE: USE THIS AT YOUR OWN RISK; A ROGUE COMMAND 25# MAY INADVERTENTLY PREVENT BOOT TO MULTIUSER. 26# 27#rc_fast_and_loose=YES 28 29# Additional flags to the rcorder(8) that's run by /etc/rc. 30# 31rc_rcorder_flags="" 32 33# If this is set to NO, shutdown(8) will not run /etc/rc.shutdown. 34# 35do_rcshutdown=YES 36 37# Additional flags to the rcorder(8) that's run by /etc/rc.shutdown. 38# 39rcshutdown_rcorder_flags="" 40 41# If this is non-blank, use as the number of seconds to run a watchdog 42# timer which will terminate /etc/rc.shutdown if the timeout expires. 43# 44rcshutdown_timeout="" 45 46 47# Basic network configuration 48# 49 50# Fully Qualified Internet Domain Name (a.k.a. hostname, e.g. foo.baz.edu). 51# If blank, use /etc/myname. 52# 53hostname="" 54 55# If there's only one way out of your IPv4 network, set this to the hostname 56# or the IPv4 address of the router that will get your packets off the LAN. 57# If blank, use /etc/mygate. 58# 59defaultroute="" 60 61# Same thing for IPv6. If blank, use /etc/mygate6. 62# 63defaultroute6="" 64 65# The NIS domain name (formerly known as Yellow Pages); not in any way 66# related to Internet domain names. 67# If blank, use /etc/defaultdomain. 68# 69domainname="" 70 71# Filesystems to mount early in boot-up. 72# Note that `/var' is needed in $critical_filesystems_local (or 73# implied as part of `/') as certain services that need /var (such as 74# dhclient) may be needed to get the network operational enough to mount 75# the $critical_filesystems_remote. 76# 77critical_filesystems_local="/var" 78critical_filesystems_remote="/usr" 79 80# Swap device controls. 81# 82no_swap=NO # Set to YES if you have purposefully setup no swap 83 # partitions and don't want to be warned about it. 84swapoff=YES # Remove block-type swap partitions upon shutdown 85 # This defaults to yes, so that raids shutdown cleanly 86 87# Concatenated disk driver. 88# 89ccd=YES 90 91# RAIDframe driver (manually configured devices). 92# 93raidframe=YES 94 95# Crypto file system. 96# 97cgd=YES 98 99# Logical Volume Manager 100# 101lvm=NO 102 103# One-time actions and programs on boot-up. 104# 105savecore=YES savecore_flags="-z" 106 savecore_dir="/var/crash" 107per_user_tmp=NO # per-user /tmp directories 108per_user_tmp_dir="/private/tmp" # real storage for /tmp 109clear_tmp=YES # clear /tmp after reboot 110update_motd=YES # updates /etc/motd 111dmesg=YES dmesg_flags="" # write /var/run/dmesg.boot 112accounting=NO # uses /var/account/acct 113newsyslog=NO newsyslog_flags="" # trim log files 114quota=YES # check and enable quotas 115ldconfig=YES # rebuild a.out ldconfig cache 116sysdb=YES # build system databases 117rndctl=NO rndctl_flags="" # configure rndctl(8) 118 119# cope with other OSes using the real time clock at localtime on this 120# machine (by adjusting kern.rtc_offset at boot) 121rtclocaltime=NO 122 123# NOTE: default coredump name now set in /etc/sysctl.conf 124 125# 126# File system check flags; default to preen mode, checking filesystems 127# that are listed in /etc/fstab in parallel as the fsck pass number 128# permits. Fix minor faults automatically, and exit with non 0 only 129# when major errors occur. 130# 131fsck_flags=-p 132 133# Security setting. If $securelevel is non-empty, the system securelevel 134# is set to this value early in the boot sequence. Otherwise the default 135# action is taken (see init(8)). 136# 137securelevel="" # securelevel to set to 138 139# To set the IP address of an interface either use 140# ifconfig_xxN="IP-NO" 141# where xxN is the interface. If this variable is not set then 142# contents of the file /etc/ifconfig.xxN is used. 143 144# Networking startup. 145# 146ipfilter=NO # uses /etc/ipf.conf 147ipnat=NO # uses /etc/ipnat.conf 148ipfs=NO ipfs_flags="" # save/load ipnat and ipf states 149ipsec=NO # uses /etc/ipsec.conf 150ipmon=NO ipmon_flags="-Dns" # syslog ipfilter messages 151pf=NO pf_rules="/etc/pf.conf" 152pflogd=NO 153ftp_proxy=NO 154racoon=NO # IKE daemon 155auto_ifconfig=YES # config all avail. interfaces 156net_interfaces="" # used only if above is NO 157flushroutes=YES # flush routes in netstart 158dhcpcd_flags="-q" # For ifconfig_XXX=dhcp. 159dhclient=NO # behave as a DHCP client 160 dhclient_flags="" # blank: config all interfaces 161ntpdate=NO ntpdate_flags="-b -s" # May need '-u' thru firewall 162ppp_peers="" # /etc/ppp/peers to call 163ip6mode=host # host, autohost or router 164ip6uniquelocal=NO # IPv6 unique-local forwarding 165rtsol=NO rtsol_flags="-a" # for ip6mode=autohost only 166 167# Special treatment for interfaces that need to be downed on 168# shutdown (because they might cause unnecessary costs or block resources 169# on the peer). All pppoe* interfaces are automatically included in this 170# list, add others here manually. 171#force_down_interfaces="" 172 173ifwatchd=NO # execute up/down scripts for in-kernel PPPoE interfaces 174 ifwatchd_flags="-u /etc/ppp/ip-up -d /etc/ppp/ip-down pppoe0" 175 176# ALTQ configuration/monitoring daemon 177altqd=NO altqd_flags="" 178 179# Daemons required by servers. These are not needed for strictly client use. 180# 181 182# inetd is used to start the IP-based services enabled in /etc/inetd.conf 183# 184inetd=YES inetd_flags="-l" # -l logs libwrap 185 186# identd 187# 188identd=NO identd_flags="-b -l -u nobody" 189 190# rpcbind (formerly known as 'portmap') is used to look up RPC-based services. 191# 192rpcbind=NO rpcbind_flags="-l" # -l logs libwrap 193 194# Commonly used daemons. 195# 196syslogd=YES syslogd_flags="-s" # -s "secure" unix domain only 197cron=YES 198named=NO named_flags="" # see below for named_chrootdir 199timed=NO timed_flags="" 200ntpd=NO ntpd_flags="" # see below for ntpd_chrootdir 201# The default setting for postfix here is YES, but gets re-examined by 202# the rc.d/postfix startup script when it runs. The script sets 203# _rc_d_postfix to "check", and then causes all rc.conf settings to 204# be re-evaluated. If the value of $postfix after this is "check", 205# the script then checks to see if /etc/mailer.conf selects the system 206# postfix. If not, it does print a warning and does not start postfix 207# to avoid conflict with a different MTA. 208postfix=${_rc_d_postfix:-YES} 209lpd=NO lpd_flags="-s" # -s "secure" unix domain only 210sshd=NO sshd_flags="" 211ssh_keygen_flags="-b 1024" # generate 1024 bit keys if host keys missing 212ftpd=NO ftpd_flags="-ll" 213httpd=NO httpd_flags="" 214 httpd_wwwdir="/var/www" 215 httpd_wwwuser="_httpd" 216 217# To run the named(8) DNS server as an unprivileged user under a 218# chroot(2) cage, uncomment the following after migrating the contents 219# of /etc/namedb to /var/chroot/named/etc/namedb 220# 221#named_chrootdir="/var/chroot/named" 222 223# To run the ntpd(8) NTP server as an unprivileged user under a 224# chroot(2) cage, uncomment the following, after ensuring that: 225# - The kernel has "pseudo-device clockctl" compiled in 226# - /dev/clockctl is present 227# 228#ntpd_chrootdir="/var/chroot/ntpd" 229 230# Routing daemons. 231# 232routed=NO routed_flags="-q" 233gated=NO 234mrouted=NO mrouted_flags="" 235route6d=NO route6d_flags="" 236rtsold=NO rtsold_flags="" # for ip6mode=autohost only 237 238# Daemons used to boot other hosts over a network. 239# 240rarpd=NO rarpd_flags="-a" 241bootparamd=NO bootparamd_flags="" 242dhcpd=NO dhcpd_flags="-q" 243dhcrelay=NO dhcrelay_flags="" 244rbootd=NO rbootd_flags="" 245mopd=NO mopd_flags="-a" 246ndbootd=NO ndbootd_flags="-s /tftpboot /tftpboot/bootyy" 247rtadvd=NO rtadvd_flags="" 248 249# X11 daemons. 250# 251xfs=NO xfs_flags="" # X11 font server 252xdm=NO xdm_flags="" # X11 display manager; needs 253 # wscons=YES for local displays. 254 255# YP (NIS) daemons. 256# 257ypbind=NO ypbind_flags="" 258ypserv=NO ypserv_flags="-d" 259yppasswdd=NO yppasswdd_flags="" 260 261# NFS daemons and parameters. 262# 263mountd=NO mountd_flags="" # NFS mount requests daemon 264nfs_client=NO # enable client daemons 265nfs_server=NO # enable server daemons 266 nfsd_flags="-6tun 4" 267lockd=NO lockd_flags="" 268statd=NO statd_flags="" 269amd=NO amd_flags="-l syslog -x error,noinfo,nostats" 270 amd_dir=/amd # mount dir 271 272# Heimdal Kerberos 5 KDC (with Kerberos IV compatibility) 273kdc=NO kdc_flags="--detach" 274 275# iSCSI target 276iscsi_target=NO iscsi_target_flags="" 277 278# WPA daemons. 279hostapd=NO hostapd_flags="-B /etc/hostapd.conf" 280wpa_supplicant=NO wpa_supplicant_flags="-B" # -i<if> -c<file> 281 282# ISDN daemon 283isdnd=NO isdnd_flags="" 284 285# Bluetooth daemons 286btattach=NO # Bluetooth attach serial HCI 287btconfig=NO # Bluetooth controller configuration 288btdevctl=NO # Bluetooth device configuration 289bthcid=NO bthcid_flags="" # Bluetooth HCI daemon 290sdpd=NO sdpd_flags="" # Service Discovery daemon 291 292# Other daemons. 293# 294rwhod=NO rwhod_flags="-u _rwhod" 295envsys=NO # Set /etc/envsys.conf preferences 296 297# Hardware daemons. 298# 299apmd=NO apmd_flags="" # APM power management daemon. 300powerd=NO powerd_flags="" # power management daemon 301screenblank=NO screenblank_flags="" # wscons and FBIO screenblanker 302 303moused=NO # serial mouse handler 304 moused_flags="-p /dev/tty00" 305 306wdogctl=NO # watchdog timer control 307# wdogctl_flags="-k devicename" 308irdaattach=NO # attach serial lines to IrDA 309 irdaattach_flags="tty00" 310 311# Configuration of "wscons" console driver virtual screens. 312# 313wscons=NO wscons_flags="" # setup wscons from wscons.conf 314 315# Configuration of "wsmoused" console driver cut-n-paste support 316# 317wsmoused=NO wsmoused_flags="" 318 319# Configuration of "tpctl" touch panel calibration utility 320# 321tpctl=NO tpctl_flags="" 322 323# Mixer setting 324# 325mixerctl=NO mixerctl_mixers="" # "mixer0 mixer1" means saving 326 # and restoring their settings 327 328# Vi recovery notification. Vi(1)'s -r option can recover files which were 329# accidentally closed. See vi(1) for more details. 330# 331virecover=YES 332 333# Veriexec signature loading. 334# 335veriexec=NO 336veriexec_strict=0 337veriexec_verbose=0 338veriexec_flags="-k" 339