rc.conf.5 - OpenGrok cross reference for /freebsd/share/man/man5/rc.conf.5

Lines Matching +full:- +full:- +full:yes
93 to store jail-specific configuration options.
120 .Bl -tag -width indent-two
124 .Dq Li YES ,
141 .Dq Li YES ,
240 .Dq Li YES
268 .Dq Li YES ,
269 auto-jail the service with inherited filesystem and other
281 .Dq Li YES ,
297 .Dq Li YES ,
323 disable auto-loading of kernel modules with
327 A whitespace-separated list of kernel modules to be ignored by
341 A whitespace-separated list of kernel modules to be ignored by
345 A whitespace-separated list of kernel modules to load right after
355 .Dq Li YES
370 .Dq Li YES
381 A semi-colon
394 .Dq Li YES ,
403 .Dq Li YES ,
408 Enable auto-jailing of all services which are not explicitly
418 .Dq Li YES
435 .Dq Li "-S" ,
449 .Dq Li YES
466 .Dq Li "-S" ,
480 .Dq Li YES
498 Set to "YES" to enable saving of the
522 .Pa /var/db/mtree/BSD.var-run.mtree .
536 .Dq Li YES
567 .Pa machine-id
582 .Dq Li -r
587 .Pa machine-id
589 .Pa /etc/machine-id .
609 .Dq Li YES
632 .Dq Li YES
636 This behavior can be overridden on a per-interface basis by replacing
652 .Dq Li YES
675 .Bl -tag -width ".Li workstation" -compact
698 .Dq Li YES
703 .Dq Li YES
711 .Dq Li YES
729 .\" ----- firewall_nat_enable setting --------------------------------
737 .Dq Li YES
743 .Dq Li YES .
758 .Dq Li YES
764 .Dq Li YES .
768 .Dq Li YES
774 .Dq Li YES .
778 .Dq Li YES
784 .Dq Li YES .
788 .Dq Li YES
794 .Dq Li YES .
795 .\" -------------------------------------------------------------------
799 .Dq Li YES
842 .Dq Li YES
847 .Dq Li YES ,
874 .\" ----- ipfilter_enable setting --------------------------------
881 .Dq Li YES
887 .Bd -literal
888 ipfilter_enable="YES"
889 ipnat_enable="YES"
890 ipmon_enable="YES"
891 ipfs_enable="YES"
917 .Bd -literal
924 .\" ----- ipfilter_program setting ------------------------------
931 .\" ----- ipfilter_rules setting --------------------------------
941 .\" ----- ipfilter_flags setting --------------------------------
948 .\" ----- ipnat_enable setting ----------------------------------
955 .Dq Li YES
962 .\" ----- ipnat_program setting ---------------------------------
969 .\" ----- ipnat_rules setting -----------------------------------
980 .\" ----- ipnat_flags setting -----------------------------------
987 .\" ----- ipmon_enable setting ----------------------------------
994 .Dq Li YES
1010 .\" ----- ipmon_program setting ---------------------------------
1017 .\" ----- ipmon_flags setting -----------------------------------
1021 .Dq Li -Ds
1035 .Bd -literal
1038 .\" ----- ipfs_enable setting -----------------------------------
1045 .Dq Li YES
1055 .Dq Li YES
1068 .\" ----- ipfs_program setting ----------------------------------
1075 .\" ----- ipfs_flags setting ------------------------------------
1082 .\" ----- end of added ipf hook ---------------------------------
1089 .Dq Li YES
1096 .Dl pf_enable="YES"
1129 .Dq Li YES ,
1139 .Dq Li YES
1152 .Pa /etc/pf-fallback.conf ) .
1161 .Bd -literal
1175 .Dq Li YES
1186 .Dq Li YES
1218 is set, for each whitespace-separated
1241 .Dq Li YES
1243 .Xr ftp-proxy 8
1251 .Xr ftp-proxy 8
1257 .Xr ftp-proxy 8
1260 should contain a whitespace-separated list of instance names.
1265 should be defined, containing the command-line flags to be passed to the
1266 .Xr ftp-proxy 8
1274 .Dq Li YES
1292 .Dq Li YES .
1323 .Dq Li YES
1354 .Dq Li YES
1366 .Dq Li YES
1377 .Dq Li YES ,
1383 .Dq Li YES
1397 .Dq Li YES
1400 the log messages are not rate-limited, so this option should only be used
1408 .Dq Li YES
1449 .Dq Li .-/+
1460 as well as special case-insensitive keywords described below.
1466 .Bd -literal
1484 .Bd -literal
1490 Inter-Domain Routing
1494 .Li inet 192.0.2.5-23/24
1496 .Li inet6 2001:db8:1-f::1/64 .
1509 .Bd -literal
1514 .Li 192.0.2.5-23/24 ,
1516 addresses 192.0.2.6 to 192.0.2.23 with the non-conflicting prefix length /32 as
1528 .Bd -literal
1530 ifconfig_em0_alias3="inet 192.0.2.1-5/28"
1551 .Bd -literal
1570 .Bd -literal
1616 .Bd -literal
1626 .Bd -literal
1681 .Bd -literal
1702 .Pa /etc/hostapd- Ns Ao Ar interface Ac Ns .conf
1714 .Bd -literal
1729 .Bd -literal
1743 .Dq Li YES ,
1750 .Dq Li YES .
1759 .Dq Li YES ,
1762 will be IPv6-preferred.
1768 will be IPv4-preferred.
1771 This controls initial configuration on IPv6-capable
1776 .Dq YES
1793 .Dq YES ,
1798 for an IPv6-capable interface should be sufficient.
1805 .Dq YES .
1819 .Dq Li YES
1833 .Dq inet6 -no_radr accept_rtadv
1885 daemon using its MIB-2 module.
1903 .Bd -literal
1919 Note that a link-local address will be automatically configured in
1920 addition to the configured global-scope addresses because the IPv6
1929 If only a link-local address is needed on the interface,
1931 .Bd -literal
1935 A link-local address can also be configured manually.
1940 .Bd -literal
1947 addresses based on each prefix and the EUI-64 interface index will be
1954 .Bd -literal
1959 .Bd -literal
1966 These Subnet-Router anycast addresses will be added only when
1968 is YES.
1995 installs a pre-defined policy table described in Section 10.3
1996 .Pq IPv4-preferred
1998 .Pq IPv6-preferred
2013 .Dq Li YES
2014 the IPv6-preferred one is used.
2015 Otherwise IPv4-preferred.
2022 .Dq Li YES
2059 .Dq YES ,
2085 .Bd -literal
2095 .Dq Li YES ,
2103 Also used for per-profile overrides of
2110 .Dq Li .-/+
2135 .Dq Li YES ,
2142 .Dq Li YES .
2179 .Dq Li YES ,
2185 A space-separated list of ZFS pool names for which new pool GUIDs should be
2191 A space-separated list of ZFS pool names for which the version should be
2199 .Dq Li YES ,
2222 Number of times user is asked for the pass-phrase.
2241 .Dq Li YES .
2248 .Dq Li YES
2251 is remounted as read-write if this is set to
2252 .Dq Li YES .
2253 Diskless systems that mount their root file system from a read-only remote
2261 .Dq Li YES ,
2294 List of file system types that are network-based.
2309 a whitespace-separated list of network file system descriptor pairs,
2312 and a human-readable, one-word description,
2320 .Dq Li YES ,
2327 .Dq Li YES
2341 .Dq Li YES ,
2347 .Dq Li YES ,
2362 .Dq Li YES ,
2368 .Dq Li YES ,
2383 .Dq Li YES ,
2389 .Dq Li YES ,
2396 .Dq Li YES
2402 .Dq Li YES
2413 .Dq Li YES ,
2419 .Dq Li YES
2427 .Dq Li YES
2437 .Dq Li YES
2448 .Dq Li YES
2453 .Dq Li YES
2456 the Kerberos 5 Password-Changing Daemon; set to
2464 .Dq Li YES
2465 this is the path to Kerberos 5 Password-Changing Daemon.
2469 .Dq Li YES
2482 .Dq Li YES ,
2491 .Dq Li YES ,
2496 .Dq Li YES ,
2507 .Dq Li YES ,
2514 .Dq Li YES ,
2520 A value of 2-10 seconds will substantially reduce network
2525 .Dq Li YES ,
2532 .Dq Li YES ,
2541 .Dq Li YES
2545 .Dq Li YES ,
2552 .Dq Li YES
2556 .Dq Li YES ,
2565 .Dq Li YES ,
2568 daemon, which is needed for NFS-over-TLS NFS mounts.
2572 .Dq Li YES ,
2577 to support NFS-over-TLS NFS mounts.
2583 .Dq Li YES ,
2589 .Dq Li YES ,
2596 .Dq Li YES ,
2605 .Dq Li YES ,
2612 .Dq Li YES ,
2619 .Dq Li YES ,
2633 .Dq Li YES ,
2640 .Dq Li YES ,
2641 allow services like PCNFSD to make non-privileged mount
2646 .Dq Li YES ,
2660 .Dq Li YES
2669 .Dq Li YES ,
2676 .Dq Li YES
2685 .Dq Li YES ,
2698 .Dq Li YES ,
2707 .Dq Li YES ,
2714 .Dq Li YES ,
2723 .Dq Li YES ,
2730 .Dq Li YES ,
2756 .Dq Li YES .
2760 .Dq Li YES ,
2784 A whitespace-separated list of NTP servers to synchronize with at startup.
2799 .Dq Li YES ,
2806 .Dq Li YES ,
2828 .Dq Li YES ,
2835 .Dq Li YES ,
2853 .Dq Li YES ,
2862 .Dq Li YES ,
2869 .Dq Li YES ,
2878 .Dq Li YES ,
2885 .Dq Li YES ,
2894 .Dq Li YES ,
2901 .Dq Li YES ,
2910 .Dq Li YES ,
2917 .Dq Li YES ,
2926 .Dq Li YES ,
2933 .Dq Li YES ,
2942 .Dq Li YES ,
2949 .Dq Li YES ,
2956 .Dq Li YES ,
2967 .Dq Li YES ,
3000 .Dq Nm arp Cm -S
3003 .Bd -literal
3016 .Dq Nm ndp Cm -s
3019 .Bd -literal
3038 .Bd -literal
3040 route_ext="-net 10.0.0.0/24 -gateway 192.168.0.1"
3041 route_mcast="-net 224.0.0.0/4 -iface gif0"
3042 route_gif0local="-host 169.254.1.1 -iface lo0"
3068 .Dq Li YES ,
3078 .Dq Li YES ,
3089 .Dq Li YES ,
3100 .Dq Li YES ,
3115 .Dq Li YES ,
3124 .Dq Li YES ,
3134 You may want to fine-tune
3141 .Dq Li YES
3146 .Dq Li YES ,
3151 .Dq Li YES
3155 .Dq Li YES ,
3156 source-routed packets are forwarded.
3160 .Dq Li YES ,
3161 the system will accept source-routed packets directed at it.
3165 .Dq Li YES ,
3174 .Dq Li YES ,
3181 .Dq Li YES ,
3190 .Dq Li YES ,
3204 An effective value is 0-31.
3218 .Dq Li YES
3224 .Dq Li YES
3233 .Dq Li YES ,
3264 If set to a non-null string, the virtual console's keyboard input is
3369 .Dq Li YES
3378 .Dq Li YES ,
3388 .Dq Li YES ,
3414 .Bl -tag -width ".Li x10mouseremote" -compact
3471 .Dq Li YES ,
3490 daemon is started for a non-default port, the
3496 is the name of the non-default port, i.e.,\&
3504 .Dq Li "-3"
3518 .Li 0xd0 Ns - Ns Li 0xd3
3538 .Dq Li YES .
3555 .Dq Li YES ,
3570 .Dq Li YES ,
3576 .Dq Li YES ,
3591 .Dq Li YES ,
3600 .Dq Li YES ,
3607 .Dq Li YES ,
3620 .Dq Li YES ,
3625 .Dq Li -d ,
3683 .Dq Li YES
3694 .Dq Li YES
3703 .Dq Li YES ,
3707 .Dq Li YES ,
3712 .Dq Li "-a" ,
3720 .Dq Li YES ,
3725 .Dq Li "-a" ,
3733 .Dq Li YES ,
3738 .Dq Li "-a" ,
3744 .Dq Li YES
3768 .Dq Li YES
3774 .Dq Li YES ,
3779 .Dq Li YES
3802 Set to the list of 32-bit compatibility shared library paths to
3812 .Dq Li YES
3824 Set to the list of local 32-bit compatibility
3833 .Dq Li YES
3840 ranges from \-1 (the compile time default) to 3 (the
3854 .Dq Li YES
3861 .Dq Li YES
3869 .Dq Li YES ,
3881 .Dq Li YES
3884 as a stand-alone daemon at system boot time.
3890 .Dq Li YES ,
3897 .Dq Li YES ,
3909 .Dq Li YES ,
3918 .Dq Li YES ,
3931 .Dq Li YES ,
3935 This timeout will not be set when returning to the single-user mode
3959 Pairs of already-mounted
4029 .Dq Li YES ,
4040 A space-delimited list of jail names.
4055 .Dq Li YES ,
4060 Note that older releases supported per-jail configuration via
4068 These per-jail configuration variables are now obsolete in favor of
4072 when per-jail configuration variables are defined,
4078 The following per-jail parameters are handled by
4086 They must be a semi-colon
4094 .Bl  -tag -width "host.hostname" -offset indent
4186 .\" -----------------------------------------------------
4189 Set to a bit-mask
4228 .Pa /var/db/entropy-file
4252 .Nm save-entropy
4257 .Nm save-entropy
4262 .Dq Li YES
4275 .Dq Li YES
4315 .Dq Li YES
4330 .Dq Li YES ,
4339 .Dq Li YES ,
4344 .Dq Li -CN ,
4430 .Bd -literal
4446 .Bd -literal
4453 .Dq Li YES ,
4458 .Dq Li YES ,
4469 .Dq Li YES ,
4495 .Dq Li YES ,
4513 .Dq Li YES ,
4520 Also used to specify per-profile overrides.
4522 .Dq Li .-/+
4553 if it should register Dial-Up Networking service on the specified
4560 .Dq Li YES ,
4580 .Dq Li YES
4587 .Dq Li YES ,
4588 delays the start of network-reliant services until
4607 This variable contains a space-delimited list of IP addresses to
4637 polled at a 1-second interval.
4642 .Dq Li YES ,
4661 A space-separated list of configuration files used by
4667 .Dq Li YES ,
4680 .Dq Li YES ,
4690 .Dq Li YES ,
4700 .Dq Li YES ,
4708 .Dq Li YES ,
4715 .Dq Li YES ,
4722 .Dq Li YES ,
4731 .Dq Li YES ,
4736 .Dq Li -Aa ,
4743 .Dq Li YES ,
4755 .Dq Li YES ,
4763 .Dq Li YES ,
4769 .Dq Li YES ,
4770 enable auto-loading of encryption keys for encrypted ZFS datasets.
4782 A whitespace-separated list of ZFS datasets to unlock.
4793 .Dq Li YES ,
4819 .Dq Li YES ,
4838 .Dq Li YES
4842 .Dq Li YES ,
4855 .Dq Li YES ,
4862 .Dq Li YES
4874 a localhost-only listening SMTP service required for running
4876 as a non-set-user-ID binary.
4889 .Dq Li YES ,
4896 .Dq Li YES
4922 .Dq Li YES ,
4929 .Dq Li YES ,
4943 .Dq Li YES ,
4951 parent (if you allow child-jails in your jails, service jails
4960 .Bl -tag -width indent-two
5001 All non-network options can be combined with all other options.
5007 .Dq Li YES ,
5010 .Va svcj- Ns Ar name .
5040 .Dq Li YES .
5042 .Bl -tag -width "/etc/defaults/rc.conf" -compact