xref: /freebsd/share/man/man5/periodic.conf.5 (revision 3422ca83ba48e5c9174542a2d3ba8225275779a6)
1.\"-
2.\" Copyright (c) 2000 Brian Somers <brian@Awfulhak.org>
3.\" All rights reserved.
4.\"
5.\" Redistribution and use in source and binary forms, with or without
6.\" modification, are permitted provided that the following conditions
7.\" are met:
8.\" 1. Redistributions of source code must retain the above copyright
9.\"    notice, this list of conditions and the following disclaimer.
10.\" 2. Redistributions in binary form must reproduce the above copyright
11.\"    notice, this list of conditions and the following disclaimer in the
12.\"    documentation and/or other materials provided with the distribution.
13.\"
14.\" THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
15.\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
16.\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
17.\" ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
18.\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
19.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
20.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
21.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
22.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
23.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
24.\" SUCH DAMAGE.
25.\"
26.\" $FreeBSD$
27.\"
28.Dd June 16, 2020
29.Dt PERIODIC.CONF 5
30.Os
31.Sh NAME
32.Nm periodic.conf
33.Nd periodic job configuration information
34.Sh DESCRIPTION
35The file
36.Nm
37contains a description of how daily, weekly and monthly system maintenance
38jobs should run.
39It resides in the
40.Pa /etc/defaults
41directory and parts may be overridden by a file of the same name in
42.Pa /etc ,
43which itself may be overridden by the
44.Pa /etc/periodic.conf.local
45file.
46.Pp
47The
48.Nm
49file
50is actually sourced as a shell script from each of the periodic scripts
51and is intended to simply provide default configuration variables.
52.Pp
53The following variables are used by
54.Xr periodic 8
55itself:
56.Bl -tag -offset 4n -width 2n
57.It Va local_periodic
58.Pq Vt str
59List of directories to search for periodic scripts.
60This list is always prefixed with
61.Pa /etc/periodic ,
62and is only used when an argument to
63.Xr periodic 8
64is not an absolute directory name.
65.It Ao Ar dir Ac Ns Va _output
66.Pq Vt path No or Vt list
67What to do with the output of the scripts executed from
68the directory
69.Ar dir .
70If this variable is set to an absolute path name, output is logged to
71that file, otherwise it is taken as one or more space separated email
72addresses and mailed to those users.
73If this variable is not set or is empty, output is sent to standard output.
74.Pp
75For an unattended machine, suitable values for
76.Va daily_output ,
77.Va weekly_output ,
78and
79.Va monthly_output
80might be
81.Dq Li /var/log/daily.log ,
82.Dq Li /var/log/weekly.log ,
83and
84.Dq Li /var/log/monthly.log
85respectively, as
86.Xr newsyslog 8
87will rotate these files (if they exists) at the appropriate times.
88.It Ao Ar dir Ac Ns Va _show_success
89.It Ao Ar dir Ac Ns Va _show_info
90.It Ao Ar dir Ac Ns Va _show_badconfig
91.Pq Vt bool
92These variables control whether
93.Xr periodic 8
94will mask the output of the executed scripts based on their return code
95(where
96.Ar dir
97is the base directory name in which each script resides).
98If the return code of a script is
99.Sq 0
100and
101.Ao Ar dir Ac Ns Va _show_success
102is set to
103.Dq Li NO ,
104.Xr periodic 8
105will mask the script's output.
106If the return code of a script is
107.Sq 1
108and
109.Ao Ar dir Ac Ns Va _show_info
110is set to
111.Dq Li NO ,
112.Xr periodic 8
113will mask the script's output.
114If the return code of a script is
115.Sq 2
116and
117.Ao Ar dir Ac Ns Va _show_badconfig
118is set to
119.Dq Li NO ,
120.Xr periodic 8
121will mask the script's output.
122If these variables are set to neither
123.Dq Li YES
124nor
125.Dq Li NO ,
126they default to
127.Dq Li YES ,
128.Dq Li YES
129and
130.Dq Li NO
131respectively.
132.Pp
133Refer to the
134.Xr periodic 8
135manual page for how script return codes are interpreted.
136.It Va anticongestion_sleeptime
137.Pq Vt int
138The maximum number of seconds to randomly sleep in order to smooth bursty loads
139on a shared resource, such as a download mirror.
140.El
141.Pp
142The following variables are used by the standard scripts that reside in
143.Pa /etc/periodic/daily :
144.Bl -tag -offset 4n -width 2n
145.It Va daily_clean_disks_enable
146.Pq Vt bool
147Set to
148.Dq Li YES
149if you want to remove all files matching
150.Va daily_clean_disks_files
151daily.
152.It Va daily_clean_disks_files
153.Pq Vt str
154Set to a list of file names to match.
155Wild cards are permitted.
156.It Va daily_clean_disks_days
157.Pq Vt num
158When
159.Va daily_clean_disks_enable
160is set to
161.Dq Li YES ,
162this must also be set to the number of days old that a file's access
163and modification times must be before it is deleted.
164.It Va daily_clean_disks_verbose
165.Pq Vt bool
166Set to
167.Dq Li YES
168if you want the removed files to be reported in your daily output.
169.It Va daily_clean_tmps_enable
170.Pq Vt bool
171Set to
172.Dq Li YES
173if you want to clear temporary directories daily.
174.It Va daily_clean_tmps_dirs
175.Pq Vt str
176Set to the list of directories to clear if
177.Va daily_clean_tmps_enable
178is set to
179.Dq Li YES .
180.It Va daily_clean_tmps_days
181.Pq Vt num
182When
183.Va daily_clean_tmps_enable
184is set, this must also be set to the number of days old that a file's access
185and modification times must be before it is deleted.
186.It Va daily_clean_tmps_ignore
187.Pq Vt str
188Set to the list of files that should not be deleted when
189.Va daily_clean_tmps_enable
190is set to
191.Dq Li YES .
192Wild card characters are permitted.
193.It Va daily_clean_tmps_verbose
194.Pq Vt bool
195Set to
196.Dq Li YES
197if you want the removed files to be reported in your daily output.
198.It Va daily_clean_preserve_enable
199.Pq Vt bool
200Set to
201.Dq Li YES
202if you wish to remove old files from
203.Pa /var/preserve .
204.It Va daily_clean_preserve_days
205.Pq Vt num
206Set to the number of days that files must not have been modified before
207they are deleted.
208.It Va daily_clean_preserve_verbose
209.Pq Vt bool
210Set to
211.Dq Li YES
212if you want the removed files to be reported in your daily output.
213.It Va daily_clean_msgs_enable
214.Pq Vt bool
215Set to
216.Dq Li YES
217if you wish old system messages to be purged.
218.It Va daily_clean_msgs_days
219.Pq Vt num
220Set to the number of days that files must not have been modified before
221they are deleted.
222If this variable is left blank, the
223.Xr msgs 1
224default is used.
225.It Va daily_clean_rwho_enable
226.Pq Vt bool
227Set to
228.Dq Li YES
229if you wish old files in
230.Pa /var/who
231to be purged.
232.It Va daily_clean_rwho_days
233.Pq Vt num
234Set to the number of days that files must not have been modified before
235they are deleted.
236.It Va daily_clean_rwho_verbose
237.Pq Vt bool
238Set to
239.Dq Li YES
240if you want the removed files to be reported in your daily output.
241.It Va daily_clean_hoststat_enable
242.Pq Vt bool
243Set to
244.Dq Li YES
245to run
246.Nm sendmail Fl bH
247to automatically purge stale entries from
248.Xr sendmail 8 Ns 's
249host status cache.
250Files will be deleted using the same criteria as
251.Xr sendmail 8
252would normally use when determining whether to believe the cached information,
253as configured in
254.Pa /etc/mail/sendmail.cf .
255.It Va daily_backup_efi_enable
256.Pq Vt bool
257Set to
258.Dq Li YES
259to create backup of EFI System Partion (ESP).
260.It Va daily_backup_gpart_enable
261.Pq Vt bool
262Set to
263.Dq Li YES
264to create backups of partition tables, and bootcode partition contents.
265.It Va daily_backup_gpart_verbose
266.Pq Vt bool
267Set to
268.Dq Li YES
269to be verbose if existing backups for kern.geom.conftxt or the partition tables differ
270from the new backups.
271.It Va daily_backup_passwd_enable
272.Pq Vt bool
273Set to
274.Dq Li YES
275if you want the
276.Pa /etc/master.passwd
277and
278.Pa /etc/group
279files backed up and reported on.
280Reporting consists of checking both files for modifications and running
281.Xr chkgrp 8
282on the
283.Pa group
284file.
285.It Va daily_backup_aliases_enable
286.Pq Vt bool
287Set to
288.Dq Li YES
289if you want the
290.Pa /etc/mail/aliases
291file backed up and modifications to be displayed in your daily output.
292.It Va daily_calendar_enable
293.Pq Vt bool
294Set to
295.Dq Li YES
296if you want to run
297.Nm calendar Fl a
298daily.
299.It Va daily_accounting_enable
300.Pq Vt bool
301Set to
302.Dq Li YES
303if you want to rotate your daily accounting files.
304No rotations are necessary unless
305.Va accounting_enable
306is enabled in
307.Xr rc.conf 5 .
308.It Va daily_accounting_compress
309.Pq Vt bool
310Set to
311.Dq Li YES
312if you want your daily accounting files to be compressed using
313.Xr gzip 1 .
314.It Va daily_accounting_save
315.Pq Vt num
316When
317.Va daily_accounting_enable
318is set, this may also be set to the number of daily accounting files that are
319to be saved.
320The default is
321.Dq Li 3 .
322.It Va daily_accounting_flags
323.Pq Vt str
324Set to the arguments to pass to the
325.Xr sa 8
326utility (in addition to
327.Fl s )
328when
329.Va daily_accounting_enable
330is set to
331.Dq Li YES .
332The default is
333.Fl q .
334.It Va daily_news_expire_enable
335.Pq Vt bool
336Set to
337.Dq Li YES
338if you want to run
339.Pa /etc/news.expire .
340.It Va daily_status_disks_enable
341.Pq Vt bool
342Set to
343.Dq Li YES
344if you want to run
345.Xr df 1
346(with the arguments supplied in
347.Va daily_status_disks_df_flags )
348and
349.Nm dump Fl W .
350.It Va daily_status_disks_df_flags
351.Pq Vt str
352Set to the arguments for the
353.Xr df 1
354utility when
355.Va daily_status_disks_enable
356is set to
357.Dq Li YES .
358The default is
359.Fl l Fl h .
360.It Va daily_status_zfs_enable
361.Pq Vt bool
362Set to
363.Dq Li YES
364if you want to run
365.Nm zpool Cm status
366on your
367.Xr zfs 8
368pools.
369.It Va daily_status_zfs_zpool_list_enable
370.Pq Vt bool
371Set to
372.Dq Li YES
373if you want to run
374.Nm zpool Cm list
375on your
376.Xr zfs 8
377pools.
378Requires
379.Va daily_status_zfs_enable
380to be set to
381.Li YES .
382.It Va daily_status_gmirror_enable
383.Pq Vt bool
384Set to
385.Dq Li YES
386if you want to run
387.Nm gmirror Cm status
388on your
389.Xr gmirror 8
390devices.
391.It Va daily_status_graid3_enable
392.Pq Vt bool
393Set to
394.Dq Li YES
395if you want to run
396.Nm graid3 Cm status
397on your
398.Xr graid3 8
399devices.
400.It Va daily_status_gstripe_enable
401.Pq Vt bool
402Set to
403.Dq Li YES
404if you want to run
405.Nm gstripe Cm status
406on your
407.Xr gstripe 8
408devices.
409.It Va daily_status_gconcat_enable
410.Pq Vt bool
411Set to
412.Dq Li YES
413if you want to run
414.Nm gconcat Cm status
415on your
416.Xr gconcat 8
417devices.
418.It Va daily_status_mfi_enable
419.Pq Vt bool
420Set to
421.Dq Li YES
422if you want to run
423.Nm mfiutil Cm status
424on your
425.Xr mfi 4
426devices.
427.It Va daily_status_network_enable
428.Pq Vt bool
429Set to
430.Dq Li YES
431if you want to run
432.Nm netstat Fl i .
433.It Va daily_status_network_netstat_flags
434.Pq Vt str
435Set to additional arguments for the
436.Xr netstat 1
437utility when
438.Va daily_status_network_enable
439is set to
440.Dq Li YES .
441The default is
442.Fl d .
443.It Va daily_status_network_usedns
444.Pq Vt bool
445Set to
446.Dq Li YES
447if you want to run
448.Xr netstat 1
449without the
450.Fl n
451option (to do DNS lookups).
452.It Va daily_status_uptime_enable
453.Pq Vt bool
454Set to
455.Dq Li YES
456if you want to run
457.Xr uptime 1
458(or
459.Xr ruptime 1
460if
461.Va rwhod_enable
462is set to
463.Dq Li YES
464in
465.Pa /etc/rc.conf ) .
466.It Va daily_status_mailq_enable
467.Pq Vt bool
468Set to
469.Dq Li YES
470if you want to run
471.Xr mailq 1 .
472.It Va daily_status_mailq_shorten
473.Pq Vt bool
474Set to
475.Dq Li YES
476if you want to shorten the
477.Xr mailq 1
478output when
479.Va daily_status_mailq_enable
480is set to
481.Dq Li YES .
482.It Va daily_status_include_submit_mailq
483.Pq Vt bool
484Set to
485.Dq Li YES
486if you also want to run
487.Xr mailq 1
488on the submit mail queue when
489.Va daily_status_mailq_enable
490is set to
491.Dq Li YES .
492This may not work with MTAs other than
493.Xr sendmail 8 .
494.It Va daily_status_security_enable
495.Pq Vt bool
496Set to
497.Dq Li YES
498if you want to run the security check.
499The security check is another set of
500.Xr periodic 8
501scripts.
502The system defaults are in
503.Pa /etc/periodic/security .
504Local scripts should be placed in
505.Pa /usr/local/etc/periodic/security .
506See the
507.Xr periodic 8
508manual page for more information.
509.It Va daily_status_security_inline
510.Pq Vt bool
511Set to
512.Dq Li YES
513if you want the security check output inline.
514The default is to either mail or log the output according to the value of
515.Va daily_status_security_output .
516.It Va daily_status_security_output
517.Pq Vt str
518Where to send the output of the security check if
519.Va daily_status_security_inline
520is set to
521.Dq Li NO .
522This variable behaves in the same way as the
523.Va *_output
524variables above, namely it can be set either to one or more email addresses
525or to an absolute file name.
526.It Va daily_status_mail_rejects_enable
527.Pq Vt bool
528Set to
529.Dq Li YES
530if you want to summarise mail rejections logged to
531.Pa /var/log/maillog
532for the previous day.
533.It Va daily_status_mail_rejects_logs
534.Pq Vt num
535Set to the number of maillog files that should be checked
536for yesterday's mail rejects.
537.It Va daily_status_ntpd_enable
538.Pq Vt bool
539Set to
540.Dq Li YES
541if you want to enable NTP status check.
542.It Va daily_status_world_kernel
543.Pq Vt bool
544Set to
545.Dq Li YES
546to check the running userland and kernel are in sync.
547.It Va daily_queuerun_enable
548.Pq Vt bool
549Set to
550.Dq Li YES
551if you want to manually run the mail queue at least once a day.
552.It Va daily_submit_queuerun
553.Pq Vt bool
554Set to
555.Dq Li YES
556if you also want to manually run the submit mail queue at least once a day
557when
558.Va daily_queuerun_enable
559is set to
560.Dq Li YES .
561.It Va daily_scrub_zfs_enable
562.Pq Vt bool
563Set to
564.Dq Li YES
565if you want to run a zfs scrub periodically.
566.It Va daily_scrub_zfs_pools
567.Pq Vt str
568A space separated list of names of zfs pools to scrub.
569If the list is empty or not set, all zfs pools are scrubbed.
570.It Va daily_scrub_zfs_default_threshold
571.Pq Vt int
572Number of days between a scrub if no pool-specific threshold is set.
573If not set, the default value is 35, corresponding to 5 weeks.
574.It Va daily_scrub_zfs_ Ns Ao Ar poolname Ac Ns Va _threshold
575.Pq Vt int
576The same as
577.Va daily_scrub_zfs_default_threshold
578but specific to the pool
579.Ao Ar poolname Ac Ns .
580.It Va daily_local
581.Pq Vt str
582Set to a list of extra scripts that should be run after all other
583daily scripts.
584All scripts must be absolute path names.
585.El
586.Pp
587The following variables are used by the standard scripts that reside in
588.Pa /etc/periodic/weekly :
589.Bl -tag -offset 4n -width 2n
590.It Va weekly_locate_enable
591.Pq Vt bool
592Set to
593.Dq Li YES
594if you want to run
595.Pa /usr/libexec/locate.updatedb .
596This script is run using
597.Nm nice Fl 5
598as user
599.Dq Li nobody ,
600and generates the table used by the
601.Xr locate 1
602command.
603.It Va weekly_whatis_enable
604.Pq Vt bool
605Set to
606.Dq Li YES
607if you want to run
608.Pa /usr/libexec/makewhatis.local .
609This script regenerates the database used by the
610.Xr apropos 1
611command.
612.It Va weekly_noid_enable
613.Pq Vt bool
614Set to
615.Dq Li YES
616if you want to locate orphaned files on the system.
617An orphaned file is one with an invalid owner or group.
618.It Va weekly_noid_dirs
619.Pq Vt str
620A list of directories under which orphaned files are searched for.
621This would usually be set to
622.Pa / .
623.It Va weekly_status_security_enable
624.Pq Vt bool
625Weekly counterpart of
626.Va daily_status_security_enable .
627.It Va weekly_status_security_inline
628.Pq Vt bool
629Weekly counterpart of
630.Va daily_status_security_inline .
631.It Va weekly_status_security_output
632.Pq Vt str
633Weekly counterpart of
634.Va daily_status_security_output .
635.It Va weekly_status_pkg_enable
636.Pq Vt bool
637Set to
638.Dq Li YES
639if you want to use
640.Xr pkg-version 8
641to list installed packages which are out of date.
642.It Va pkg_version
643.Pq Vt str
644When
645.Va weekly_status_pkg_enable
646is set to
647.Dq Li YES ,
648this variable specifies the program that is used to determine the out of
649date packages.
650If unset, the
651.Xr pkg-version 8
652program is used.
653As an example, this variable might be set to
654.Dq Li portversion
655if the
656.Pa ports/sysutils/portupgrade
657port has been installed.
658.It Va pkg_version_index
659.Pq Vt str
660This variable specifies the
661.Pa INDEX
662file from
663.Pa /usr/ports
664that should be used by
665.Xr pkg-version 8 .
666Because the dependency tree may be substantially different between versions of
667.Fx ,
668there may be more than one
669.Pa INDEX
670file in
671.Pa /usr/ports .
672.Pp
673Note, if the
674.Va pkg_version
675variable is set to
676.Dq Li portversion ,
677it will also be necessary to arrange that the correct
678.Pa INDEX
679file is specified
680using environment variables and that
681.Va pkg_version_index
682is cleared in
683.Pa /etc/periodic.conf
684.Pq Dq Li pkg_version_index= .
685.It Va weekly_local
686.Pq Vt str
687Set to a list of extra scripts that should be run after all other
688weekly scripts.
689All scripts must be absolute path names.
690.El
691.Pp
692The following variables are used by the standard scripts that reside in
693.Pa /etc/periodic/monthly :
694.Bl -tag -offset 4n -width 2n
695.It Va monthly_accounting_enable
696.Pq Vt bool
697Set to
698.Dq Li YES
699if you want to do login accounting using the
700.Xr ac 8
701command.
702.It Va monthly_status_security_enable
703.Pq Vt bool
704Monthly counterpart of
705.Va daily_status_security_enable .
706.It Va monthly_status_security_inline
707.Pq Vt bool
708Monthly counterpart of
709.Va daily_status_security_inline .
710.It Va monthly_status_security_output
711.Pq Vt str
712Monthly counterpart of
713.Va daily_status_security_output .
714.It Va monthly_local
715.Pq Vt str
716Set to a list of extra scripts that should be run after all other
717monthly scripts.
718All scripts must be absolute path names.
719.El
720.Pp
721The following variables are used by the standard scripts that reside in
722.Pa /etc/periodic/security .
723Those scripts are usually run from daily
724.Pq Va daily_status_security_enable ,
725weekly
726.Pq Va weekly_status_security_enable ,
727and monthly
728.Pq Va monthly_status_security_enable
729periodic hooks.
730The
731.Va ..._period
732of each script can be configured as
733.Dq daily ,
734.Dq weekly ,
735.Dq monthly
736or
737.Dq NO .
738Note that when periodic security scripts are run from
739.Xr crontab 5 ,
740they will be always run unless their
741.Va ..._enable
742or
743.Va ..._period
744variable is set to
745.Dq NO .
746.Bl -tag -offset 4n -width 2n
747.It Va security_status_diff_flags
748.Pq Vt str
749Set to the arguments to pass to the
750.Xr diff 1
751utility when generating differences.
752The default is
753.Fl b u .
754.It Va security_status_chksetuid_enable
755.Pq Vt bool
756Set to
757.Dq Li YES
758to compare the modes and modification times of setuid executables with
759the previous day's values.
760.It Va security_status_chksetuid_period
761.Pq Vt str
762Set to either
763.Dq Li daily ,
764.Dq Li weekly ,
765.Dq Li monthly
766or
767.Dq Li NO .
768.It Va security_status_chkportsum_enable
769.Pq Vt bool
770Set to
771.Dq Li YES
772to verify checksums of all installed packages against the known checksums in
773.Pa /var/db/pkg .
774.It Va security_status_chkportsum_period
775.Pq Vt str
776Set to either
777.Dq Li daily ,
778.Dq Li weekly ,
779.Dq Li monthly
780or
781.Dq Li NO .
782.It Va security_status_neggrpperm_enable
783.Pq Vt bool
784Set to
785.Dq Li YES
786to check for files where the group of a file has less permissions than
787the world at large.
788When users are in more than 14 supplemental groups these negative
789permissions may not be enforced via NFS shares.
790.It Va security_status_neggrpperm_period
791.Pq Vt str
792Set to either
793.Dq Li daily ,
794.Dq Li weekly ,
795.Dq Li monthly
796or
797.Dq Li NO .
798.It Va security_status_chkmounts_enable
799.Pq Vt bool
800Set to
801.Dq Li YES
802to check for changes mounted file systems to the previous day's values.
803.It Va security_status_chkmounts_period
804.Pq Vt str
805Set to either
806.Dq Li daily ,
807.Dq Li weekly ,
808.Dq Li monthly
809or
810.Dq Li NO .
811.It Va security_status_noamd
812.Pq Vt bool
813Set to
814.Dq Li YES
815if you want to ignore
816.Xr amd 8
817mounts when comparing against yesterday's file system mounts in the
818.Va security_status_chkmounts_enable
819check.
820.It Va security_status_chkuid0_enable
821.Pq Vt bool
822Set to
823.Dq Li YES
824to check
825.Pa /etc/master.passwd
826for accounts with UID 0.
827.It Va security_status_chkuid0_period
828.Pq Vt str
829Set to either
830.Dq Li daily ,
831.Dq Li weekly ,
832.Dq Li monthly
833or
834.Dq Li NO .
835.It Va security_status_passwdless_enable
836.Pq Vt bool
837Set to
838.Dq Li YES
839to check
840.Pa /etc/master.passwd
841for accounts with empty passwords.
842.It Va security_status_passwdless_period
843.Pq Vt str
844Set to either
845.Dq Li daily ,
846.Dq Li weekly ,
847.Dq Li monthly
848or
849.Dq Li NO .
850.It Va security_status_logincheck_enable
851.Pq Vt bool
852Set to
853.Dq Li YES
854to check
855.Pa /etc/login.conf
856ownership, see
857.Xr login.conf 5
858for more information.
859.It Va security_status_logincheck_period
860.Pq Vt str
861Set to either
862.Dq Li daily ,
863.Dq Li weekly ,
864.Dq Li monthly
865or
866.Dq Li NO .
867.It Va security_status_ipfwdenied_enable
868.Pq Vt bool
869Set to
870.Dq Li YES
871to show log entries for packets denied by
872.Xr ipfw 8
873since yesterday's check.
874.It Va security_status_ipfwdenied_period
875.Pq Vt str
876Set to either
877.Dq Li daily ,
878.Dq Li weekly ,
879.Dq Li monthly
880or
881.Dq Li NO .
882.It Va security_status_ipfdenied_enable
883.Pq Vt bool
884Set to
885.Dq Li YES
886to show log entries for packets denied by
887.Xr ipf 8
888since yesterday's check.
889.It Va security_status_ipfdenied_period
890.Pq Vt str
891Set to either
892.Dq Li daily ,
893.Dq Li weekly ,
894.Dq Li monthly
895or
896.Dq Li NO .
897.It Va security_status_pfdenied_enable
898.Pq Vt bool
899Set to
900.Dq Li YES
901to show log entries for packets denied by
902.Xr pf 4
903since yesterday's check.
904.It Va security_status_pfdenied_period
905.Pq Vt str
906Set to either
907.Dq Li daily ,
908.Dq Li weekly ,
909.Dq Li monthly
910or
911.Dq Li NO .
912.It Va security_status_ipfwlimit_enable
913.Pq Vt bool
914Set to
915.Dq Li YES
916to display
917.Xr ipfw 8
918rules that have reached their verbosity limit.
919.It Va security_status_ipfwlimit_period
920.Pq Vt str
921Set to either
922.Dq Li daily ,
923.Dq Li weekly ,
924.Dq Li monthly
925or
926.Dq Li NO .
927.It Va security_status_kernelmsg_enable
928.Pq Vt bool
929Set to
930.Dq Li YES
931to show new
932.Xr dmesg 8
933entries since yesterday's check.
934.It Va security_status_kernelmsg_period
935.Pq Vt str
936Set to either
937.Dq Li daily ,
938.Dq Li weekly ,
939.Dq Li monthly
940or
941.Dq Li NO .
942.It Va security_status_loginfail_enable
943.Pq Vt bool
944Set to
945.Dq Li YES
946to display failed logins from
947.Pa /var/log/messages
948in the previous day.
949.It Va security_status_loginfail_period
950.Pq Vt str
951Set to either
952.Dq Li daily ,
953.Dq Li weekly ,
954.Dq Li monthly
955or
956.Dq Li NO .
957.It Va security_status_tcpwrap_enable
958.Pq Vt bool
959Set to
960.Dq Li YES
961to display connections denied by tcpwrappers (see
962.Xr hosts_access 5 )
963from
964.Pa /var/log/messages
965during the previous day.
966.It Va security_status_tcpwrap_period
967.Pq Vt str
968Set to either
969.Dq Li daily ,
970.Dq Li weekly ,
971.Dq Li monthly
972or
973.Dq Li NO .
974.El
975.Sh FILES
976.Bl -tag -width ".Pa /etc/defaults/periodic.conf"
977.It Pa /etc/defaults/periodic.conf
978The default configuration file.
979This file contains all default variables and values.
980.It Pa /etc/periodic.conf
981The usual system specific variable override file.
982.It Pa /etc/periodic.conf.local
983An additional override file, useful when
984.Pa /etc/periodic.conf
985is shared or distributed.
986.El
987.Sh SEE ALSO
988.Xr apropos 1 ,
989.Xr calendar 1 ,
990.Xr df 1 ,
991.Xr diff 1 ,
992.Xr gzip 1 ,
993.Xr locate 1 ,
994.Xr man 1 ,
995.Xr msgs 1 ,
996.Xr netstat 1 ,
997.Xr nice 1 ,
998.Xr login.conf 5 ,
999.Xr rc.conf 5 ,
1000.Xr ac 8 ,
1001.Xr chkgrp 8 ,
1002.Xr dump 8 ,
1003.Xr newsyslog 8 ,
1004.Xr periodic 8 ,
1005.Xr pkg-version 8 ,
1006.Xr sendmail 8
1007.Sh HISTORY
1008The
1009.Nm
1010file appeared in
1011.Fx 4.1 .
1012.Sh AUTHORS
1013.An Brian Somers Aq Mt brian@Awfulhak.org
1014