xref: /netbsd-src/share/man/man5/rc.conf.5 (revision fad4c9f71477ae11cea2ee75ec82151ac770a534)
1.\"	$NetBSD: rc.conf.5,v 1.102 2006/06/19 15:44:44 gdamore Exp $
2.\"
3.\" Copyright (c) 1996 Matthew R. Green
4.\" Copyright (c) 1997 Curt J. Sampson
5.\" Copyright (c) 1997 Michael W. Long
6.\" Copyright (c) 1998-2002 The NetBSD Foundation, Inc.
7.\" All rights reserved.
8.\"
9.\" This document is derived from works contributed to The NetBSD Foundation
10.\" by Luke Mewburn.
11.\"
12.\" Redistribution and use in source and binary forms, with or without
13.\" modification, are permitted provided that the following conditions
14.\" are met:
15.\" 1. Redistributions of source code must retain the above copyright
16.\"    notice, this list of conditions and the following disclaimer.
17.\" 2. Redistributions in binary form must reproduce the above copyright
18.\"    notice, this list of conditions and the following disclaimer in the
19.\"    documentation and/or other materials provided with the distribution.
20.\" 3. The name of the author may not be used to endorse or promote products
21.\"    derived from this software without specific prior written permission.
22.\"
23.\" THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
24.\" IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
25.\" OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
26.\" IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
27.\" INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING,
28.\" BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
29.\" LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED
30.\" AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
31.\" OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
32.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
33.\" SUCH DAMAGE.
34.\"
35.Dd April 30, 2006
36.Dt RC.CONF 5
37.Os
38.Sh NAME
39.Nm rc.conf
40.Nd system startup configuration file
41.Sh DESCRIPTION
42The
43.Nm
44file specifies which services are enabled during system startup by
45the startup scripts invoked by
46.Pa /etc/rc
47(see
48.Xr rc 8 ) ,
49and the shutdown scripts invoked by
50.Pa /etc/rc.shutdown .
51The
52.Nm
53file is a shell script that is sourced by
54.Xr rc 8 ,
55meaning that
56.Nm
57must contain valid shell commands.
58.Pp
59Listed below are the standard
60.Nm
61variables that may be set, the values to which each may be set,
62a brief description of what each variable does, and a reference to
63relevant manual pages.
64Third party packages may test for additional variables.
65.Pp
66Most variables are one of two types: enabling variables or flags
67variables.
68Enabling variables, such as
69.Sy inetd ,
70are generally named after the program or the system they enable,
71and are set to
72.Sq YES
73or
74.Sq NO .
75Flags variables, such as
76.Sy inetd_flags
77have the same name with "_flags" appended, and determine what
78arguments are passed to the program if it is enabled.
79.Pp
80If a variable that
81.Xr rc 8
82expects to be set is not set, or the value is not one of the allowed
83values, a warning will be printed.
84.Pp
85By default,
86.Nm
87reads
88.Pa /etc/defaults/rc.conf
89(if it is readable)
90to obtain default values for various variables, and the end-user
91may override these by appending appropriate entries to the end of
92.Nm .
93.Pp
94.Xr rc.d 8
95scripts that use
96.Ic load_rc_config
97from
98.Xr rc.subr 8
99also support sourcing an optional end-user provided per-script override
100file
101.Pa /etc/rc.conf.d/ Ns Ar service ,
102(where
103.Ar service
104is the contents of the
105.Sy name
106variable in the
107.Xr rc.d 8
108script).
109This may contain variable overrides, including allowing the end-user
110to override various
111.Ic run_rc_command
112.Xr rc.d 8
113control variables, and thus changing the operation of the script
114without requiring editing of the script.
115.Ss Overall control
116.Bl -tag -width net_interfaces
117.It Sy do_rcshutdown
118.Sq YES
119or
120.Sq NO .
121If set to
122.Sq NO ,
123.Xr shutdown 8
124will not run
125.Pa /etc/rc.shutdown .
126.It Sy rcshutdown_rcorder_flags
127A string.
128Extra arguments to the
129.Xr rcorder 8
130run by
131.Pa /etc/rc.shutdown .
132.It Sy rcshutdown_timeout
133A number.
134If non-blank, use this as the number of seconds to run a watchdog timer for
135which will terminate
136.Pa /etc/rc.shutdown
137if the timer expires before the shutdown script completes.
138.It Sy rc_configured
139.Sq YES
140or
141.Sq NO .
142If not set to
143.Sq YES
144then the system will drop into single-user mode during boot.
145.It Sy rc_fast_and_loose
146If set to a non-empty string,
147each script in
148.Pa /etc/rc.d
149will be executed in the current shell rather than a sub shell.
150This may be faster on slow machines that have an expensive
151.Xr fork 2
152operation.
153.Bl -hang
154.It Em Note :
155Use this at your own risk!
156A rogue command or script may inadvertently prevent boot to multiuser.
157.El
158.It Sy rc_rcorder_flags
159A string.
160Extra arguments to the
161.Xr rcorder 8
162run by
163.Pa /etc/rc .
164.El
165.Ss Basic network configuration
166.Bl -tag -width net_interfaces
167.It Sy defaultroute
168A string.
169Default IPv4 network route.
170If empty or not set, then the contents of
171.Pa /etc/mygate
172(if it exists) are used.
173.It Sy defaultroute6
174A string.
175Default IPv6 network route.
176If empty or not set, then the contents of
177.Pa /etc/mygate6
178(if it exists) are used.
179.It Sy domainname
180A string.
181.Tn NIS
182(YP) domain of host.
183If empty or not set, then the contents of
184.Pa /etc/defaultdomain
185(if it exists) are used.
186.It Sy force_down_interfaces
187A space separated list of interface names.
188These interfaces will be configured down when going from multiuser to singleuser
189mode or on system shutdown.
190.Pp
191This is important for some stateful interfaces, for example PPP over ISDN
192connections that cost money by connection time or PPPoE interfaces which
193have no direct means of noticing
194.Dq disconnect
195events.
196.Pp
197All active
198.Xr pppoe 4
199and
200.Xr ippp 4
201interfaces will be automatically added to this list.
202.It Sy hostname
203A string.
204Name of host.
205If empty or not set, then the contents of
206.Pa /etc/myname
207(if it exists) are used.
208.El
209.Ss Boottime file-system and swap configuration
210.Bl -tag -width net_interfaces
211.It Sy critical_filesystems_local
212A string.
213File systems mounted very early in the system boot before networking
214services are available.
215Usually
216.Pa /var
217is part of this, because it is needed by services such as
218.Xr dhclient 8
219which may be required to get the network operational.
220.It Sy critical_filesystems_remote
221A string.
222File systems such as
223.Pa /usr
224that may require network services to be available to mount,
225that must be available early in the system boot for general services to use.
226.It Sy fsck_flags
227A string.
228A file system is checked with
229.Xr fsck 8
230during boot before mounting it.
231This option may be used to override the default command-line options
232passed to the
233.Xr fsck 8
234program.
235.Pp
236When set to
237.Fl y ,
238.Xr fsck 8
239assumes yes as the answer to all operator questions during file system checks.
240This might be important with hosts where the administrator does not have
241access to the console and an unsuccessful shutdown must not make the host
242unbootable even if the file system checks would fail in preen mode.
243.It Sy no_swap
244.Sq YES
245or
246.Sq NO .
247Set the
248.Sy no_swap
249variable to
250.Sq YES
251if you have configured your system with no swap on purpose.
252If not set to
253.Sq YES ,
254and no swap devices
255are configured, the system will warn you.
256.It Sy swapoff
257.Sq YES
258or
259.Sq NO .
260Remove block-type swap devices at shutdown time.
261Useful if swapping onto RAIDframe devices.
262.El
263.Ss One-time actions to perform or programs to run on boot-up
264.Bl -tag -width net_interfaces
265.It Sy accounting
266.Sq YES
267or
268.Sq NO .
269Enables process accounting with
270.Xr accton 8 .
271Requires
272.Pa /var/account/acct
273to exist.
274.It Sy clear_tmp
275.Sq YES
276or
277.Sq NO .
278Clear /tmp after reboot.
279.It Sy dmesg
280.Sq YES
281or
282.Sq NO .
283Create
284.Pa /var/run/dmesg.boot
285from the output of
286.Xr dmesg 8 .
287Passes
288.Sy dmesg_flags .
289.It Sy lkm
290.Sq YES
291or
292.Sq NO .
293Runs
294.Pa /etc/rc.lkm .
295.It Sy mixerctl
296.Sq YES
297or
298.Sq NO .
299Read
300.Xr mixerctl.conf 5
301for how to set mixer values.
302List in
303.Sy mixerctl_mixers
304the devices whose settings are to be saved at shutdown and
305restored at start-up.
306.It Sy newsyslog
307.Sq YES
308or
309.Sq NO .
310Run
311.Nm newsyslog
312to trim logfiles before syslogd starts.
313Intended for laptop users.
314Passes
315.Sy newsyslog_flags .
316.It Sy savecore
317.Sq YES
318or
319.Sq NO .
320Runs the
321.Xr savecore 8
322utility.
323Passes
324.Sy savecore_flags .
325The directory where crash dumps are stored is specified by
326.Sy savecore_dir .
327The default setting is
328.Dq Pa /var/crash .
329.It Sy tpctl
330.Sq YES
331or
332.Sq NO .
333Run
334.Xr tpctl 8
335to calibrate touch panel device.
336Passes
337.Sy tpctl_flags .
338.It Sy update_motd
339.Sq YES
340or
341.Sq NO .
342Updates the
343.Nx
344version string in the
345.Pa /etc/motd
346file to reflect the version of the running kernel.
347See
348.Xr motd 5 .
349.It Sy veriexec
350.Sq YES
351or
352.Sq NO .
353Load Veriexec fingerprints during startup.
354Read
355.Xr veriexecctl 8
356for more information.
357.It Sy virecover
358.Sq YES
359or
360.Sq NO .
361Send notification mail to users if any recoverable files exist in
362.Pa /var/tmp/vi.recover .
363See
364.Fl r
365option in
366.Xr vi 1
367for details.
368.El
369.Ss System security setting
370.Bl -tag -width net_interfaces
371.It Sy securelevel
372A number.
373The system securelevel is set to the specified value early
374in the boot process, before any external logins, or other programs
375that run users job, are started.
376If set to nothing, the default action is taken, as described in
377.Xr init 8 ,
378which contains definitive information about the system securelevel.
379Note that setting
380.Sy securelevel
381to 0 in
382.Nm
383will actually result in the system booting with securelevel set to 1, as
384.Xr init 8
385will raise the level when
386.Xr rc 8
387completes.
388.It Sy permit_nonalpha
389Allow passwords to include non-alpha characters, usually to allow
390NIS/YP netgroups.
391.It Sy veriexec_strict
392A number.
393Controls the strict level of Veriexec.
394Level 0 is learning mode, used when building the signatures file.
395It will only output messages but will not enforce anything.
396Level 1 will only prevent access to files with a fingerprint
397mismatch.
398Level 2 will also deny writing to and removing of
399monitored files, as well as enforce access type (as specified in
400the signatures file).
401Level 3 will take a step further and prevent
402access to files that are not monitored.
403.It Sy veriexec_verbose
404A number.
405Controls the verbosity of Veriexec.
406Recommended operation is at level 0, verbose output (mostly used when
407building the signatures file) is at level 1.
408Level 2 is for debugging only and should not be used.
409.El
410.Ss Networking startup
411.Bl -tag -width net_interfaces
412.It Sy altqd
413.Sq YES
414or
415.Sq NO .
416ALTQ configuration/monitoring daemon.
417Passes
418.Sy altqd_flags .
419.It Sy auto_ifconfig
420.Sq YES
421or
422.Sq NO .
423Sets the
424.Sy net_interfaces
425variable (see below) to the output of
426.Xr ifconfig 8
427with the
428.Dq Li -l
429flag and suppresses warnings about interfaces in this list that
430do not have an ifconfig file or variable.
431.It Sy dhclient
432.Sq YES
433or
434.Sq NO .
435Set to
436.Sq YES
437to configure some or all network interfaces using
438the DHCP client.
439If you set
440.Sy dhclient
441to
442.Sq YES ,
443you must either have
444.Pa /var
445in
446.Sy critical_filesystems_local ,
447as part of
448.Pa / ,
449or direct the DHCP client to store the leases file on the root
450file system by modifying the
451.Sy dhclient_flags
452variable.
453You must not provide ifconfig information or ifaliases
454information for any interface that is to be configured using the DHCP client.
455Interface aliases can be set up in the DHCP client configuration
456file if needed - see
457.Xr dhclient.conf 5
458for details.
459.Pp
460Passes
461.Sy dhclient_flags
462to the DHCP client.
463See
464.Xr dhclient 8
465for complete documentation.
466If you wish to configure all broadcast
467network interfaces using the DHCP client, you can leave this blank.
468To configure only specific interfaces, name the interfaces to be configured
469on the command line.
470.Pp
471If you must run the DHCP client before mounting critical file systems,
472then you should specify an alternate location for the DHCP client's lease
473file in the
474.Sy dhclient_flags
475variable - for example, "-lf /tmp/dhclient.leases".
476.It Sy flushroutes
477.Sq YES
478or
479.Sq NO .
480Flushes the route table on networking startup.
481Useful when coming up to multiuser mode after going down to
482single-user mode.
483.It Sy hostapd
484.Sq YES
485or
486.Sq NO .
487Runs
488.Xr hostapd 8 ,
489the authenticator for IEEE 802.11 networks.
490.It Sy ifaliases_*
491A string.
492List of
493.Sq Em "address netmask"
494pairs to configure additional network addresses for the given
495configured interface
496.Dq *
497(e.g.
498.Sy ifaliases_le0 ) .
499If
500.Em netmask
501is
502.Dq - ,
503then use the default netmask for the interface.
504.Pp
505.Sy ifaliases_*
506covers limited cases only and considered unrecommended.
507We recommend using
508.Pa /etc/ifconfig.xxN
509with multiple lines instead.
510.It Sy ifwatchd
511.Sq YES
512or
513.Sq NO .
514Monitor dynamic interfaces and perform actions upon address changes.
515Passes
516.Sy ifwatchd_flags .
517.It Sy ip6mode
518A string.
519An IPv6 node can be a router
520.Pq nodes that forward packet for others
521or a host
522.Pq nodes that do not forward .
523A host can be autoconfigured
524based on the information advertised by adjacent IPv6 routers.
525By setting
526.Sy ip6mode
527to
528.Dq Li router ,
529.Dq Li host ,
530or
531.Dq Li autohost ,
532you can configure your node as a router,
533a non-autoconfigured host, or an autoconfigured host.
534Invalid values will be ignored, and the node will be configured as
535a non-autoconfigured host.
536You may want to check
537.Sy rtsol
538and
539.Sy rtsold
540as well, if you set the variable to
541.Dq Li autohost .
542.It Sy ip6uniquelocal
543.Sq YES
544or
545.Sq NO .
546If
547.Sy ip6mode
548is equal to
549.Dq Li router
550and
551.Sy ip6uniquelocal
552is set to
553.Sq NO
554a reject route will be installed on boot to avoid misconfiguration relating
555to unique-local addresses.
556If set to
557.Sq YES
558the reject route won't be installed.
559.It Sy ipfilter
560.Sq YES
561or
562.Sq NO .
563Runs
564.Xr ipf 8
565to load in packet filter specifications from
566.Pa /etc/ipf.conf
567at network boot time, before any interfaces are configured.
568See
569.Xr ipf.conf 5 .
570.It Sy ipfs
571.Sq YES
572or
573.Sq NO .
574Runs
575.Xr ipfs 8
576to save and restore information for ipnat and ipfilter state tables.
577The information is stored in
578.Pa /var/db/ipf/ipstate.ipf
579and
580.Pa /var/db/ipf/ipnat.ipf .
581Passes
582.Sy ipfs_flags .
583.It Sy ipmon
584.Sq YES
585or
586.Sq NO .
587Runs
588.Xr ipmon 8
589to read
590.Xr ipf 8
591packet log information and log it to a file or the system log.
592Passes
593.Sy ipmon_flags .
594.It Sy ipmon_flags
595A string.
596Specifies arguments to supply to
597.Xr ipmon 8 .
598Defaults to
599.Dq Li -ns .
600A typical example would be
601.Dq Fl nD Pa /var/log/ipflog
602to have
603.Xr ipmon 8
604log directly to a file bypassing
605.Xr syslogd 8 .
606If the
607.Dq -D
608argument is used, remember to modify
609.Pa /etc/newsyslog.conf
610accordingly; for example:
611.Bd -literal
612/var/log/ipflog  640  10  100  *  Z  /var/run/ipmon.pid
613.Ed
614.It Sy ipnat
615.Sq YES
616or
617.Sq NO .
618Runs
619.Xr ipnat 8
620to load in the IP network address translation (NAT) rules from
621.Pa /etc/ipnat.conf
622at network boot time, before any interfaces are configured.
623See
624.Xr ipnat.conf 5 .
625.It Sy ipsec
626.Sq YES
627or
628.Sq NO .
629Runs
630.Xr setkey 8
631to load in IPsec manual keys and policies from
632.Pa /etc/ipsec.conf
633at network boot time, before any interfaces are configured.
634.It Sy net_interfaces
635A string.
636The list of network interfaces to be configured at boot time.
637For each interface "xxN", the system first looks for ifconfig
638parameters in
639.Pa /etc/ifconfig.xxN
640and then in the variable
641.Sy ifconfig_xxN .
642The contents of the file or the variable are handed to ifconfig
643after the interface name.
644If
645.Sy auto_ifconfig
646is set to "NO" and neither the file nor the variable is found,
647a warning is printed.
648Refer to
649.Xr ifconfig.if 5
650for more details on
651.Pa /etc/ifconfig.xxN .
652.It Sy ntpdate
653.Sq YES
654or
655.Sq NO .
656Runs
657.Xr ntpdate 8
658to set the system time from one of the hosts in
659.Sy ntpdate_hosts .
660If
661.Sy ntpdate_hosts
662is empty, it will attempt to find a list of hosts in
663.Pa /etc/ntp.conf .
664Passes
665.Sy ntpdate_flags .
666.It Sy ppp_peers
667A string.
668If
669.Sy ppp_peers
670is not empty, then
671.Pa /etc/rc.d/ppp
672will check each word in
673.Sy ppp_peers
674for a corresponding ppp configuration file in
675.Pa /etc/ppp/peers
676and will call
677.Xr pppd 8
678with the
679.Dq call Sy peer
680option.
681.It Sy racoon
682.Sq YES
683or
684.Sq NO .
685Runs
686.Xr racoon 8 ,
687the IKE (ISAKMP/Oakley) key management daemon.
688.It Sy rtsol
689.Sq YES
690or
691.Sq NO .
692Run
693.Xr rtsol 8 ,
694router solicitation command for IPv6 hosts.
695On nomadic hosts like notebook computers, you may want to enable
696.Sy rtsold
697as well.
698Passes
699.Sy rtsol_flags .
700This is only for autoconfigured IPv6 hosts, so set
701.Sy ip6mode
702to
703.Dq Li autohost
704if you use it.
705.El
706.Ss Daemons required by other daemons
707.Bl -tag -width net_interfaces
708.It Sy inetd
709.Sq YES
710or
711.Sq NO .
712Runs the
713.Xr inetd 8
714daemon to start network server processes (as listed in
715.Pa /etc/inetd.conf )
716as necessary.
717Passes
718.Sy inetd_flags .
719The
720.Dq Li -l
721flag turns on libwrap connection logging.
722.It Sy rpcbind
723.Sq YES
724or
725.Sq NO .
726The
727.Xr rpcbind 8
728daemon is required for any
729.Xr rpc 3
730services.
731These include NFS,
732.Tn NIS ,
733.Xr bootparamd 8 ,
734.Xr rstatd 8 ,
735.Xr rusersd 8 ,
736and
737.Xr rwalld 8 .
738Passes
739.Sy rpcbind_flags .
740.El
741.Ss Commonly used daemons
742.Bl -tag -width net_interfaces
743.It Sy cron
744.Sq YES
745or
746.Sq NO .
747Run
748.Xr cron 8 .
749.It Sy lpd
750.Sq YES
751or
752.Sq NO .
753Runs
754.Xr lpd 8
755and passes
756.Sy lpd_flags .
757The
758.Dq Li -l
759flag will turn on extra logging.
760.It Sy named
761.Sq YES
762or
763.Sq NO .
764Runs
765.Xr named 8
766and passes
767.Sy named_flags .
768.It Sy named_chrootdir
769A string.
770If non-blank and
771.Sy named
772is
773.Sq YES ,
774run
775.Xr named 8
776as the unprivileged user and group
777.Sq named ,
778.Xr chroot 2 Ns ed
779to
780.Sy named_chrootdir .
781.Sy named_chrootdir Ns Pa /var/run/log
782will be added to the list of log sockets that
783.Xr syslogd 8
784listens to.
785.It Sy ntpd
786.Sq YES
787or
788.Sq NO .
789Runs
790.Xr ntpd 8
791and passes
792.Sy ntpd_flags .
793.It Sy ntpd_chrootdir
794A string.
795If non-blank and
796.Sy ntpd
797is
798.Sq YES ,
799run
800.Xr ntpd 8
801as the unprivileged user and group
802.Sq ntpd ,
803.Xr chroot 2 Ns ed
804to
805.Sy ntpd_chrootdir .
806.Sy ntpd_chrootdir Ns Pa /var/run/log
807will be added to the list of log sockets that
808.Xr syslogd 8
809listens to.
810This option requires that the kernel has
811.Dl pseudo-device clockctl
812compiled in, and that
813.Pa /dev/clockctl
814is present.
815.It Sy postfix
816.Sq YES
817or
818.Sq NO .
819Starts
820.Xr postfix 1
821mail system.
822.It Sy sendmail
823.Sq YES
824or
825.Sq NO .
826Runs
827.Xr sendmail 8
828and passes
829.Sy sendmail_flags .
830The default setting for this calls on a function to determine if
831sendmail is actually needed, which means the
832.Xr rc.d 8
833script that starts sendmail will check to see if
834.Xr sendmail 8
835needs to run in order to facilitate local mail delivery.
836See
837.Pa /etc/defaults/rc.conf ,
838.Pa /etc/mailer.conf ,
839and
840.Xr mailer.conf 5
841for more details.
842.It Sy sendmail_suidroot
843.Sq YES
844or
845.Sq NO .
846Asserts that sendmail is being used as a setuid root binary and adjusts
847some precmd checks accordingly.
848If this is set to
849.Sq YES ,
850you can remove the submit.cf file, and then turn off the
851.Sy smmsp
852process.
853Note that setting this to
854.Sq YES
855does not change or remove anything; you must still change the mode of
856the sendmail binary and remove the submit.cf file manually.
857.It Sy smmsp
858.Sq YES
859or
860.Sq NO .
861Runs
862.Xr sendmail 8
863as a client queue runner and passes
864.Sy smmsp_flags .
865Note that the smmsp process is not a full-featured SMTP daemon.
866Its main purpose is to flush locally collected mail from the queue, but
867it can also be used as a non-privileged
868.Dq nullclient
869that forwards to a more functional SMTP gateway.
870.It Sy sshd
871.Sq YES
872or
873.Sq NO .
874Runs
875.Xr sshd 8
876and passes
877.Sy sshd_flags .
878.It Sy syslogd
879.Sq YES
880or
881.Sq NO .
882Runs
883.Xr syslogd 8
884and passes
885.Sy syslogd_flags .
886.It Sy timed
887.Sq YES
888or
889.Sq NO .
890Runs
891.Xr timed 8
892and passes
893.Sy timed_flags .
894The
895.Dq Li -M
896option allows
897.Xr timed 8
898to be a master time source as well as a slave.
899If you are also running
900.Xr ntpd 8 ,
901only one machine running both should have the
902.Dq Li -M
903flag given to
904.Xr timed 8 .
905.El
906.Ss Routing daemons
907.Bl -tag -width net_interfaces
908.It Sy mrouted
909.Sq YES
910or
911.Sq NO .
912Runs
913.Xr mrouted 8 ,
914the DVMRP multicast routing protocol daemon.
915Passes
916.Sy mrouted_flags .
917.It Sy route6d
918.Sq YES
919or
920.Sq NO .
921Runs
922.Xr route6d 8 ,
923the RIPng routing protocol daemon for IPv6.
924Passes
925.Sy route6d_flags .
926.It Sy routed
927.Sq YES
928or
929.Sq NO .
930Runs
931.Xr routed 8 ,
932the RIP routing protocol daemon.
933Passes
934.Sy routed_flags .
935.\" This should be
936.\" .Sq NO
937.\" if
938.\" .Sy gated
939.\" is
940.\" .Sq YES .
941.It Sy rtsold
942.Sq YES
943or
944.Sq NO .
945Runs
946.Xr rtsold 8 ,
947the IPv6 router solicitation daemon.
948.Xr rtsold 8
949periodically transmits router solicitation packets
950to find IPv6 routers on the network.
951This configuration is mainly for nomadic hosts like notebook computers.
952Stationary hosts should work fine with just
953.Sy rtsol .
954Passes
955.Sy rtsold_flags .
956This is only for autoconfigured IPv6 hosts, so set
957.Sy ip6mode
958to
959.Dq Li autohost
960if you use it.
961.El
962.Ss Daemons used to boot other hosts over a network
963.Bl -tag -width net_interfaces
964.It Sy bootparamd
965.Sq YES
966or
967.Sq NO .
968Runs
969.Xr bootparamd 8 ,
970the boot parameter server, with
971.Sy bootparamd_flags
972as options.
973Used to boot
974.Nx
975and
976.Tn "SunOS 4.x"
977systems.
978.It Sy dhcpd
979.Sq YES
980or
981.Sq NO .
982Runs
983.Xr dhcpd 8 ,
984the Dynamic Host Configuration Protocol (DHCP) daemon,
985for assigning IP addresses to hosts and passing boot information.
986Passes
987.Sy dhcpd_flags .
988.It Sy dhcrelay
989.Sq YES
990or
991.Sq NO .
992Runs
993.Xr dhcrelay 8 .
994Passes
995.Sy dhcrelay_flags .
996.It Sy mopd
997.Sq YES
998or
999.Sq NO .
1000Runs
1001.Xr mopd 8 ,
1002the
1003.Tn DEC
1004.Tn MOP
1005protocol daemon; used for booting
1006.Tn VAX
1007and other
1008.Tn DEC
1009machines.
1010Passes
1011.Sy mopd_flags .
1012.It Sy ndbootd
1013.Sq YES
1014or
1015.Sq NO .
1016Runs
1017.Xr ndbootd 8 ,
1018the Sun Network Disk (ND) Protocol server.
1019Passes
1020.Sy ndbootd_flags .
1021.It Sy rarpd
1022.Sq YES
1023or
1024.Sq NO .
1025Runs
1026.Xr rarpd 8 ,
1027the reverse ARP daemon, often used to boot
1028.Nx
1029and Sun workstations.
1030Passes
1031.Sy rarpd_flags .
1032.It Sy rbootd
1033.Sq YES
1034or
1035.Sq NO .
1036Runs
1037.Xr rbootd 8 ,
1038the
1039.Tn HP
1040boot protocol daemon; used for booting
1041.Tn HP
1042workstations.
1043Passes
1044.Sy rbootd_flags .
1045.It Sy rtadvd
1046.Sq YES
1047or
1048.Sq NO .
1049Runs
1050.Xr rtadvd 8 ,
1051the IPv6 router advertisement daemon, which is used to advertise
1052information about the subnet to IPv6 end hosts.
1053Passes
1054.Sy rtadvd_flags .
1055This is only for IPv6 routers, so set
1056.Sy ip6mode
1057to
1058.Dq Li router
1059if you use it.
1060.El
1061.Ss X Window System daemons
1062.Bl -tag -width net_interfaces
1063.It Sy xdm
1064.Sq YES
1065or
1066.Sq NO .
1067Runs the
1068.Xr xdm 1
1069X display manager.
1070These X daemons are available only with the optional X distribution of
1071.Nx .
1072.It Sy xfs
1073.Sq YES
1074or
1075.Sq NO .
1076Runs the
1077.Xr xfs 1
1078X11 font server, which supplies local X font files to X terminals.
1079.El
1080.Ss NIS (YP) daemons
1081.Bl -tag -width net_interfaces
1082.It Sy ypbind
1083.Sq YES
1084or
1085.Sq NO .
1086Runs
1087.Xr ypbind 8 ,
1088which lets
1089.Tn NIS
1090(YP) clients use information from a
1091.Tn NIS
1092server.
1093Passes
1094.Sy ypbind_flags .
1095.It Sy yppasswdd
1096.Sq YES
1097or
1098.Sq NO .
1099Runs
1100.Xr yppasswdd 8 ,
1101which allows remote
1102.Tn NIS
1103users to update password on master server.
1104Passes
1105.Sy yppasswdd_flags .
1106.It Sy ypserv
1107.Sq YES
1108or
1109.Sq NO .
1110Runs
1111.Xr ypserv 8 ,
1112the
1113.Tn NIS
1114(YP) server for distributing information from certain files in
1115.Pa /etc .
1116Passes
1117.Sy ypserv_flags .
1118The
1119.Dq Li -d
1120flag causes it to use DNS for lookups in
1121.Pa /etc/hosts
1122that fail.
1123.El
1124.Ss NFS daemons and parameters
1125.Bl -tag -width net_interfaces
1126.It Sy amd
1127.Sq YES
1128or
1129.Sq NO .
1130Runs
1131.Xr amd 8 ,
1132the automounter daemon, which automatically mounts NFS file systems
1133whenever a file or directory within that file system is accessed.
1134Passes
1135.Sy amd_flags .
1136.It Sy amd_dir
1137A string.
1138The
1139.Xr amd 8
1140mount directory.
1141Used only if
1142.Sy amd
1143is set to
1144.Sq YES .
1145.It Sy lockd
1146.Sq YES
1147or
1148.Sq NO .
1149Runs
1150.Xr rpc.lockd 8
1151if
1152.Sy nfs_server
1153and/or
1154.Sy nfs_client
1155are set to
1156.Sq YES .
1157Passes
1158.Sy lockd_flags .
1159.It Sy mountd
1160.Sq YES
1161or
1162.Sq NO .
1163Runs
1164.Xr mountd 8
1165and passes
1166.Sy mountd_flags .
1167.It Sy nfs_client
1168.Sq YES
1169or
1170.Sq NO .
1171The number of local NFS asynchronous I/O server is now controlled via
1172.Xr sysctl 8 .
1173.It Sy nfs_server
1174.Sq YES
1175or
1176.Sq NO .
1177Sets up a host to be a NFS server by running
1178.Xr nfsd 8
1179and passing
1180.Sy nfsd_flags .
1181.It Sy statd
1182.Sq YES
1183or
1184.Sq NO .
1185Runs
1186.Xr rpc.statd 8 ,
1187a status monitoring daemon used when
1188.Xr rpc.lockd 8
1189is running, if
1190.Sy nfs_server
1191and/or
1192.Sy nfs_client
1193are set to
1194.Sq YES .
1195Passes
1196.Sy statd_flags .
1197.El
1198.Ss Bluetooth configuration and daemons.
1199.Bl -tag -width net_interfaces
1200.It Sy btconfig
1201.Sq YES
1202or
1203.Sq NO .
1204Configure bluetooth devices. If the
1205.Sy btconfig_devices
1206variable below is not specified, all devices known to the system will be
1207configured. For each device, configuration arguments are first looked for
1208in the
1209.Sy btconfig_{dev}
1210variable, otherwise the value of the
1211.Sy btconfig_args
1212variable will be used, and if that is not specified the default string is
1213.Sq enable .
1214.It Sy btconfig_devices
1215An optional space separated list of bluetooth devices to be configured at
1216boot time.
1217.It Sy btconfig_args
1218An optional string, containing default arguments for bluetooth devices to
1219be configured.
1220.It Sy bthcid
1221.Sq YES
1222or
1223.Sq NO .
1224Runs
1225.Xr bthcid 8 ,
1226the Bluetooth HCI daemon, which manages link keys and PIN codes for
1227Bluetooth links. Passes
1228.Sy bthcid_flags .
1229.It Sy sdpd
1230.Sq YES
1231or
1232.Sq NO .
1233Runs the Service Discovery Profile daemon,
1234.Xr sdpd 8 .
1235.It Sy sdpd_control
1236Optional string specifying the path to the
1237.Xr sdpd 8
1238control socket. Defaults to
1239.Pa /var/run/sdp .
1240.It Sy sdpd_username
1241Optional string specifying the username that
1242.Xr sdpd 8
1243will run as after initialisation. Defaults to
1244.Sq nobody .
1245.It Sy sdpd_groupname
1246Optional string specifying the groupname that
1247.Xr sdpd 8
1248will run as after initialisation. Defaults to
1249.Sq nobody .
1250.El
1251.Ss Other daemons
1252.Bl -tag -width net_interfaces
1253.It Sy isdnd
1254.Sq YES
1255or
1256.Sq NO .
1257Runs
1258.Xr isdnd 8 ,
1259the isdn4bsd ISDN connection management daemon.
1260Passes
1261.Sy isdnd_flags .
1262.It Sy isdn_autoupdown
1263.Sq YES
1264or
1265.Sq NO .
1266Set all configured ISDN interfaces to
1267.Dq up .
1268If
1269.Sy isdn_interfaces
1270is not blank, only the listed interfaces will be modified.
1271Used only if
1272.Sy isdnd
1273is set to
1274.Sq YES .
1275.It Sy kdc
1276.Sq YES
1277or
1278.Sq NO .
1279Runs the
1280.Xr kdc 8
1281Kerberos v4 and v5 server.
1282This should be run on Kerberos master and slave servers.
1283.It Sy rwhod
1284.Sq YES
1285or
1286.Sq NO .
1287Runs
1288.Xr rwhod 8
1289to support the
1290.Xr rwho 1
1291and
1292.Xr ruptime 1
1293commands.
1294.El
1295.Ss Hardware daemons
1296.Bl -tag -width net_interfaces
1297.It Sy apmd
1298.Sq YES
1299or
1300.Sq NO .
1301Runs
1302.Xr apmd 8
1303and passes
1304.Sy apmd_flags .
1305.It Sy irdaattach
1306.Sq YES
1307or
1308.Sq NO .
1309Runs
1310.Xr irdaattach 8
1311and passes
1312.Sy irdaattach_flags .
1313.It Sy moused
1314.Sq YES
1315or
1316.Sq NO .
1317Runs
1318.Xr moused 8 ,
1319to pass serial mouse data to the wscons mouse mux.
1320Passes
1321.Sy moused_flags .
1322.It Sy poffd
1323.Sq YES
1324or
1325.Sq NO .
1326Runs
1327.Xr poffd 8
1328x68k shutdown daemon
1329(only for
1330.Nx Ns /x68k ) .
1331Passes
1332.Sy poffd_flags .
1333.It Sy screenblank
1334.Sq YES
1335or
1336.Sq NO .
1337Runs
1338.Xr screenblank 1
1339and passes
1340.Sy screenblank_flags .
1341.It Sy wscons
1342.Sq YES
1343or
1344.Sq NO .
1345Configures the
1346.Xr wscons 4
1347console driver, from the configuration file
1348.Pa /etc/wscons.conf .
1349.It Sy wsmoused
1350.Sq YES
1351or
1352.Sq NO .
1353Runs
1354.Xr wsmoused 8 ,
1355to provide copy and paste text support in wscons displays.
1356Passes
1357.Sy wsmoused_flags .
1358.El
1359.Sh FILES
1360.Bl -tag -width /etc/defaults/rc.conf -compact
1361.It Pa /etc/rc.conf
1362The file
1363.Nm
1364resides in
1365.Pa /etc .
1366.It Pa /etc/defaults/rc.conf
1367Default settings for
1368.Nm ,
1369sourced by
1370.Nm
1371before the end-user configuration section.
1372.It Pa /etc/rc.conf.d/ Ns Ar foo
1373.Ar foo Ns No -specific
1374.Nm
1375overrides.
1376.El
1377.Sh SEE ALSO
1378.Xr boot 8 ,
1379.Xr rc 8 ,
1380.Xr rc.d 8 ,
1381.Xr rc.subr 8 ,
1382.Xr rcorder 8
1383.Sh HISTORY
1384The
1385.Nm
1386file appeared in
1387.Nx 1.3 .
1388