1.\"- 2.\" Copyright (c) 2000 Brian Somers <brian@Awfulhak.org> 3.\" All rights reserved. 4.\" 5.\" Redistribution and use in source and binary forms, with or without 6.\" modification, are permitted provided that the following conditions 7.\" are met: 8.\" 1. Redistributions of source code must retain the above copyright 9.\" notice, this list of conditions and the following disclaimer. 10.\" 2. Redistributions in binary form must reproduce the above copyright 11.\" notice, this list of conditions and the following disclaimer in the 12.\" documentation and/or other materials provided with the distribution. 13.\" 14.\" THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND 15.\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 16.\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 17.\" ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE 18.\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 19.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 20.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 21.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 22.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 23.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 24.\" SUCH DAMAGE. 25.\" 26.\" $FreeBSD$ 27.\" 28.Dd March 26, 2015 29.Dt PERIODIC.CONF 5 30.Os 31.Sh NAME 32.Nm periodic.conf 33.Nd periodic job configuration information 34.Sh DESCRIPTION 35The file 36.Nm 37contains a description of how daily, weekly and monthly system maintenance 38jobs should run. 39It resides in the 40.Pa /etc/defaults 41directory and parts may be overridden by a file of the same name in 42.Pa /etc , 43which itself may be overridden by the 44.Pa /etc/periodic.conf.local 45file. 46.Pp 47The 48.Nm 49file 50is actually sourced as a shell script from each of the periodic scripts 51and is intended to simply provide default configuration variables. 52.Pp 53The following variables are used by 54.Xr periodic 8 55itself: 56.Bl -tag -offset 4n -width 2n 57.It Va local_periodic 58.Pq Vt str 59List of directories to search for periodic scripts. 60This list is always prefixed with 61.Pa /etc/periodic , 62and is only used when an argument to 63.Xr periodic 8 64is not an absolute directory name. 65.It Ao Ar dir Ac Ns Va _output 66.Pq Vt path No or Vt list 67What to do with the output of the scripts executed from 68the directory 69.Ar dir . 70If this variable is set to an absolute path name, output is logged to 71that file, otherwise it is taken as one or more space separated email 72addresses and mailed to those users. 73If this variable is not set or is empty, output is sent to standard output. 74.Pp 75For an unattended machine, suitable values for 76.Va daily_output , 77.Va weekly_output , 78and 79.Va monthly_output 80might be 81.Dq Li /var/log/daily.log , 82.Dq Li /var/log/weekly.log , 83and 84.Dq Li /var/log/monthly.log 85respectively, as 86.Xr newsyslog 8 87will rotate these files (if they exists) at the appropriate times. 88.It Ao Ar dir Ac Ns Va _show_success 89.It Ao Ar dir Ac Ns Va _show_info 90.It Ao Ar dir Ac Ns Va _show_badconfig 91.Pq Vt bool 92These variables control whether 93.Xr periodic 8 94will mask the output of the executed scripts based on their return code 95(where 96.Ar dir 97is the base directory name in which each script resides). 98If the return code of a script is 99.Sq 0 100and 101.Ao Ar dir Ac Ns Va _show_success 102is set to 103.Dq Li NO , 104.Xr periodic 8 105will mask the script's output. 106If the return code of a script is 107.Sq 1 108and 109.Ao Ar dir Ac Ns Va _show_info 110is set to 111.Dq Li NO , 112.Xr periodic 8 113will mask the script's output. 114If the return code of a script is 115.Sq 2 116and 117.Ao Ar dir Ac Ns Va _show_badconfig 118is set to 119.Dq Li NO , 120.Xr periodic 8 121will mask the script's output. 122If these variables are set to neither 123.Dq Li YES 124nor 125.Dq Li NO , 126they default to 127.Dq Li YES , 128.Dq Li YES 129and 130.Dq Li NO 131respectively. 132.Pp 133Refer to the 134.Xr periodic 8 135manual page for how script return codes are interpreted. 136.El 137.Pp 138The following variables are used by the standard scripts that reside in 139.Pa /etc/periodic/daily : 140.Bl -tag -offset 4n -width 2n 141.It Va daily_clean_disks_enable 142.Pq Vt bool 143Set to 144.Dq Li YES 145if you want to remove all files matching 146.Va daily_clean_disks_files 147daily. 148.It Va daily_clean_disks_files 149.Pq Vt str 150Set to a list of file names to match. 151Wild cards are permitted. 152.It Va daily_clean_disks_days 153.Pq Vt num 154When 155.Va daily_clean_disks_enable 156is set to 157.Dq Li YES , 158this must also be set to the number of days old that a file's access 159and modification times must be before it is deleted. 160.It Va daily_clean_disks_verbose 161.Pq Vt bool 162Set to 163.Dq Li YES 164if you want the removed files to be reported in your daily output. 165.It Va daily_clean_tmps_enable 166.Pq Vt bool 167Set to 168.Dq Li YES 169if you want to clear temporary directories daily. 170.It Va daily_clean_tmps_dirs 171.Pq Vt str 172Set to the list of directories to clear if 173.Va daily_clean_tmps_enable 174is set to 175.Dq Li YES . 176.It Va daily_clean_tmps_days 177.Pq Vt num 178When 179.Va daily_clean_tmps_enable 180is set, this must also be set to the number of days old that a file's access 181and modification times must be before it is deleted. 182.It Va daily_clean_tmps_ignore 183.Pq Vt str 184Set to the list of files that should not be deleted when 185.Va daily_clean_tmps_enable 186is set to 187.Dq Li YES . 188Wild card characters are permitted. 189.It Va daily_clean_tmps_verbose 190.Pq Vt bool 191Set to 192.Dq Li YES 193if you want the removed files to be reported in your daily output. 194.It Va daily_clean_preserve_enable 195.Pq Vt bool 196Set to 197.Dq Li YES 198if you wish to remove old files from 199.Pa /var/preserve . 200.It Va daily_clean_preserve_days 201.Pq Vt num 202Set to the number of days that files must not have been modified before 203they are deleted. 204.It Va daily_clean_preserve_verbose 205.Pq Vt bool 206Set to 207.Dq Li YES 208if you want the removed files to be reported in your daily output. 209.It Va daily_clean_msgs_enable 210.Pq Vt bool 211Set to 212.Dq Li YES 213if you wish old system messages to be purged. 214.It Va daily_clean_msgs_days 215.Pq Vt num 216Set to the number of days that files must not have been modified before 217they are deleted. 218If this variable is left blank, the 219.Xr msgs 1 220default is used. 221.It Va daily_clean_rwho_enable 222.Pq Vt bool 223Set to 224.Dq Li YES 225if you wish old files in 226.Pa /var/who 227to be purged. 228.It Va daily_clean_rwho_days 229.Pq Vt num 230Set to the number of days that files must not have been modified before 231they are deleted. 232.It Va daily_clean_rwho_verbose 233.Pq Vt bool 234Set to 235.Dq Li YES 236if you want the removed files to be reported in your daily output. 237.It Va daily_clean_hoststat_enable 238.Pq Vt bool 239Set to 240.Dq Li YES 241to run 242.Nm sendmail Fl bH 243to automatically purge stale entries from 244.Xr sendmail 8 Ns 's 245host status cache. 246Files will be deleted using the same criteria as 247.Xr sendmail 8 248would normally use when determining whether to believe the cached information, 249as configured in 250.Pa /etc/mail/sendmail.cf . 251.It Va daily_backup_passwd_enable 252.Pq Vt bool 253Set to 254.Dq Li YES 255if you want the 256.Pa /etc/master.passwd 257and 258.Pa /etc/group 259files backed up and reported on. 260Reporting consists of checking both files for modifications and running 261.Xr chkgrp 8 262on the 263.Pa group 264file. 265.It Va daily_backup_aliases_enable 266.Pq Vt bool 267Set to 268.Dq Li YES 269if you want the 270.Pa /etc/mail/aliases 271file backed up and modifications to be displayed in your daily output. 272.It Va daily_calendar_enable 273.Pq Vt bool 274Set to 275.Dq Li YES 276if you want to run 277.Nm calendar Fl a 278daily. 279.It Va daily_accounting_enable 280.Pq Vt bool 281Set to 282.Dq Li YES 283if you want to rotate your daily accounting files. 284No rotations are necessary unless 285.Va accounting_enable 286is enabled in 287.Xr rc.conf 5 . 288.It Va daily_accounting_compress 289.Pq Vt bool 290Set to 291.Dq Li YES 292if you want your daily accounting files to be compressed using 293.Xr gzip 1 . 294.It Va daily_accounting_save 295.Pq Vt num 296When 297.Va daily_accounting_enable 298is set, this may also be set to the number of daily accounting files that are 299to be saved. 300The default is 301.Dq Li 3 . 302.It Va daily_accounting_flags 303.Pq Vt str 304Set to the arguments to pass to the 305.Xr sa 8 306utility (in addition to 307.Fl s ) 308when 309.Va daily_accounting_enable 310is set to 311.Dq Li YES . 312The default is 313.Fl q . 314.It Va daily_news_expire_enable 315.Pq Vt bool 316Set to 317.Dq Li YES 318if you want to run 319.Pa /etc/news.expire . 320.It Va daily_status_disks_enable 321.Pq Vt bool 322Set to 323.Dq Li YES 324if you want to run 325.Xr df 1 326(with the arguments supplied in 327.Va daily_status_disks_df_flags ) 328and 329.Nm dump Fl W . 330.It Va daily_status_disks_df_flags 331.Pq Vt str 332Set to the arguments for the 333.Xr df 1 334utility when 335.Va daily_status_disks_enable 336is set to 337.Dq Li YES . 338The default is 339.Fl l Fl h . 340.It Va daily_status_zfs_enable 341.Pq Vt bool 342Set to 343.Dq Li YES 344if you want to run 345.Nm zpool Cm status 346on your 347.Xr zfs 8 348pools. 349.It Va daily_status_zfs_zpool_list_enable 350.Pq Vt bool 351Set to 352.Dq Li YES 353if you want to run 354.Nm zpool Cm list 355on your 356.Xr zfs 8 357pools. 358Requires 359.Va daily_status_zfs_enable 360to be set to 361.Li YES . 362.It Va daily_status_gmirror_enable 363.Pq Vt bool 364Set to 365.Dq Li YES 366if you want to run 367.Nm gmirror Cm status 368on your 369.Xr gmirror 8 370devices. 371.It Va daily_status_graid3_enable 372.Pq Vt bool 373Set to 374.Dq Li YES 375if you want to run 376.Nm graid3 Cm status 377on your 378.Xr graid3 8 379devices. 380.It Va daily_status_gstripe_enable 381.Pq Vt bool 382Set to 383.Dq Li YES 384if you want to run 385.Nm gstripe Cm status 386on your 387.Xr gstripe 8 388devices. 389.It Va daily_status_gconcat_enable 390.Pq Vt bool 391Set to 392.Dq Li YES 393if you want to run 394.Nm gconcat Cm status 395on your 396.Xr gconcat 8 397devices. 398.It Va daily_status_network_enable 399.Pq Vt bool 400Set to 401.Dq Li YES 402if you want to run 403.Nm netstat Fl i . 404.It Va daily_status_network_netstat_flags 405.Pq Vt str 406Set to additional arguments for the 407.Xr netstat 1 408utility when 409.Va daily_status_network_enable 410is set to 411.Dq Li YES . 412The default is 413.Fl d . 414.It Va daily_status_network_usedns 415.Pq Vt bool 416Set to 417.Dq Li YES 418if you want to run 419.Xr netstat 1 420without the 421.Fl n 422option (to do DNS lookups). 423.It Va daily_status_rwho_enable 424.Pq Vt bool 425Set to 426.Dq Li YES 427if you want to run 428.Xr uptime 1 429(or 430.Xr ruptime 1 431if 432.Va rwhod_enable 433is set to 434.Dq Li YES 435in 436.Pa /etc/rc.conf ) . 437.It Va daily_status_mailq_enable 438.Pq Vt bool 439Set to 440.Dq Li YES 441if you want to run 442.Xr mailq 1 . 443.It Va daily_status_mailq_shorten 444.Pq Vt bool 445Set to 446.Dq Li YES 447if you want to shorten the 448.Xr mailq 1 449output when 450.Va daily_status_mailq_enable 451is set to 452.Dq Li YES . 453.It Va daily_status_include_submit_mailq 454.Pq Vt bool 455Set to 456.Dq Li YES 457if you also want to run 458.Xr mailq 1 459on the submit mail queue when 460.Va daily_status_mailq_enable 461is set to 462.Dq Li YES . 463This may not work with MTAs other than 464.Xr sendmail 8 . 465.It Va daily_status_security_enable 466.Pq Vt bool 467Set to 468.Dq Li YES 469if you want to run the security check. 470The security check is another set of 471.Xr periodic 8 472scripts. 473The system defaults are in 474.Pa /etc/periodic/security . 475Local scripts should be placed in 476.Pa /usr/local/etc/periodic/security . 477See the 478.Xr periodic 8 479manual page for more information. 480.It Va daily_status_security_inline 481.Pq Vt bool 482Set to 483.Dq Li YES 484if you want the security check output inline. 485The default is to either mail or log the output according to the value of 486.Va daily_status_security_output . 487.It Va daily_status_security_output 488.Pq Vt str 489Where to send the output of the security check if 490.Va daily_status_security_inline 491is set to 492.Dq Li NO . 493This variable behaves in the same way as the 494.Va *_output 495variables above, namely it can be set either to one or more email addresses 496or to an absolute file name. 497.It Va daily_status_mail_rejects_enable 498.Pq Vt bool 499Set to 500.Dq Li YES 501if you want to summarise mail rejections logged to 502.Pa /var/log/maillog 503for the previous day. 504.It Va daily_status_mail_rejects_logs 505.Pq Vt num 506Set to the number of maillog files that should be checked 507for yesterday's mail rejects. 508.It Va daily_status_ntpd 509.Pq Vt bool 510Set to 511.Dq Li YES 512if you want to enable NTP status check. 513.It Va daily_status_world_kernel 514.Pq Vt bool 515Set to 516.Dq Li YES 517to check the running userland and kernel are in sync. 518.It Va daily_queuerun_enable 519.Pq Vt bool 520Set to 521.Dq Li YES 522if you want to manually run the mail queue at least once a day. 523.It Va daily_submit_queuerun 524.Pq Vt bool 525Set to 526.Dq Li YES 527if you also want to manually run the submit mail queue at least once a day 528when 529.Va daily_queuerun_enable 530is set to 531.Dq Li YES . 532.It Va daily_scrub_zfs_enable 533.Pq Vt bool 534Set to 535.Dq Li YES 536if you want to run a zfs scrub periodically. 537.It Va daily_scrub_zfs_pools 538.Pq Vt str 539A space separated list of names of zfs pools to scrub. 540If the list is empty or not set, all zfs pools are scrubbed. 541.It Va daily_scrub_zfs_default_threshold 542.Pq Vt int 543Number of days between a scrub if no pool-specific threshold is set. 544If not set, the default value is 35, corresponding to 5 weeks. 545.It Va daily_scrub_zfs_ Ns Ao Ar poolname Ac Ns Va _threshold 546.Pq Vt int 547The same as 548.Va daily_scrub_zfs_default_threshold 549but specific to the pool 550.Ao Ar poolname Ac Ns . 551.It Va daily_local 552.Pq Vt str 553Set to a list of extra scripts that should be run after all other 554daily scripts. 555All scripts must be absolute path names. 556.El 557.Pp 558The following variables are used by the standard scripts that reside in 559.Pa /etc/periodic/weekly : 560.Bl -tag -offset 4n -width 2n 561.It Va weekly_locate_enable 562.Pq Vt bool 563Set to 564.Dq Li YES 565if you want to run 566.Pa /usr/libexec/locate.updatedb . 567This script is run using 568.Nm nice Fl 5 569as user 570.Dq Li nobody , 571and generates the table used by the 572.Xr locate 1 573command. 574.It Va weekly_whatis_enable 575.Pq Vt bool 576Set to 577.Dq Li YES 578if you want to run 579.Pa /usr/libexec/makewhatis.local . 580This script regenerates the database used by the 581.Xr apropos 1 582command. 583.It Va weekly_catman_enable 584.Pq Vt bool 585Set to 586.Dq Li YES 587if you want to run 588.Pa /usr/libexec/catman.local . 589This script processes all out of date manual pages, speeding up the 590.Xr man 1 591command at the expense of disk space. 592.It Va weekly_noid_enable 593.Pq Vt bool 594Set to 595.Dq Li YES 596if you want to locate orphaned files on the system. 597An orphaned file is one with an invalid owner or group. 598.It Va weekly_noid_dirs 599.Pq Vt str 600A list of directories under which orphaned files are searched for. 601This would usually be set to 602.Pa / . 603.It Va weekly_status_security_enable 604.Pq Vt bool 605Weekly counterpart of 606.Va daily_status_security_enable . 607.It Va weekly_status_security_inline 608.Pq Vt bool 609Weekly counterpart of 610.Va daily_status_security_inline . 611.It Va weekly_status_security_output 612.Pq Vt str 613Weekly counterpart of 614.Va daily_status_security_output . 615.It Va weekly_status_pkg_enable 616.Pq Vt bool 617Set to 618.Dq Li YES 619if you want to use 620.Xr pkg-version 8 621to list installed packages which are out of date. 622.It Va pkg_version 623.Pq Vt str 624When 625.Va weekly_status_pkg_enable 626is set to 627.Dq Li YES , 628this variable specifies the program that is used to determine the out of 629date packages. 630If unset, the 631.Xr pkg-version 8 632program is used. 633As an example, this variable might be set to 634.Dq Li portversion 635if the 636.Pa ports/sysutils/portupgrade 637port has been installed. 638.It Va pkg_version_index 639.Pq Vt str 640This variable specifies the 641.Pa INDEX 642file from 643.Pa /usr/ports 644that should be used by 645.Xr pkg-version 8 . 646Because the dependency tree may be substantially different between versions of 647.Fx , 648there may be more than one 649.Pa INDEX 650file in 651.Pa /usr/ports . 652.Pp 653Note, if the 654.Va pkg_version 655variable is set to 656.Dq Li portversion , 657it will also be necessary to arrange that the correct 658.Pa INDEX 659file is specified 660using environment variables and that 661.Va pkg_version_index 662is cleared in 663.Pa /etc/periodic.conf 664.Pq Dq Li pkg_version_index= . 665.It Va weekly_local 666.Pq Vt str 667Set to a list of extra scripts that should be run after all other 668weekly scripts. 669All scripts must be absolute path names. 670.El 671.Pp 672The following variables are used by the standard scripts that reside in 673.Pa /etc/periodic/monthly : 674.Bl -tag -offset 4n -width 2n 675.It Va monthly_accounting_enable 676.Pq Vt bool 677Set to 678.Dq Li YES 679if you want to do login accounting using the 680.Xr ac 8 681command. 682.It Va monthly_status_security_enable 683.Pq Vt bool 684Monthly counterpart of 685.Va daily_status_security_enable . 686.It Va monthly_status_security_inline 687.Pq Vt bool 688Monthly counterpart of 689.Va daily_status_security_inline . 690.It Va monthly_status_security_output 691.Pq Vt str 692Monthly counterpart of 693.Va daily_status_security_output . 694.It Va monthly_local 695.Pq Vt str 696Set to a list of extra scripts that should be run after all other 697monthly scripts. 698All scripts must be absolute path names. 699.El 700.Pp 701The following variables are used by the standard scripts that reside in 702.Pa /etc/periodic/security . 703Those scripts are usually run from daily 704.Pq Va daily_status_security_enable , 705weekly 706.Pq Va weekly_status_security_enable , 707and monthly 708.Pq Va monthly_status_security_enable 709periodic hooks. 710The 711.Va ..._period 712of each script can be configured as 713.Dq daily , 714.Dq weekly , 715.Dq monthly 716or 717.Dq NO . 718Note that when periodic security scripts are run from 719.Xr crontab 5 , 720they will be always run unless their 721.Va ..._enable 722or 723.Va ..._period 724variable is set to 725.Dq NO . 726.Bl -tag -offset 4n -width 2n 727.It Va security_status_diff_flags 728.Pq Vt str 729Set to the arguments to pass to the 730.Xr diff 1 731utility when generating differences. 732The default is 733.Fl b u . 734.It Va security_status_chksetuid_enable 735.Pq Vt bool 736Set to 737.Dq Li YES 738to compare the modes and modification times of setuid executables with 739the previous day's values. 740.It Va security_status_chksetuid_period 741.Pq Vt str 742Set to either 743.Dq Li daily , 744.Dq Li weekly , 745.Dq Li monthly 746or 747.Dq Li NO . 748.It Va security_status_chkportsum_enable 749.Pq Vt bool 750Set to 751.Dq Li YES 752to verify checksums of all installed packages against the known checksums in 753.Pa /var/db/pkg . 754.It Va security_status_chkportsum_period 755.Pq Vt str 756Set to either 757.Dq Li daily , 758.Dq Li weekly , 759.Dq Li monthly 760or 761.Dq Li NO . 762.It Va security_status_neggrpperm_enable 763.Pq Vt bool 764Set to 765.Dq Li YES 766to check for files where the group of a file has less permissions than 767the world at large. 768When users are in more than 14 supplemental groups these negative 769permissions may not be enforced via NFS shares. 770.It Va security_status_neggrpperm_period 771.Pq Vt str 772Set to either 773.Dq Li daily , 774.Dq Li weekly , 775.Dq Li monthly 776or 777.Dq Li NO . 778.It Va security_status_chkmounts_enable 779.Pq Vt bool 780Set to 781.Dq Li YES 782to check for changes mounted file systems to the previous day's values. 783.It Va security_status_chkmounts_period 784.Pq Vt str 785Set to either 786.Dq Li daily , 787.Dq Li weekly , 788.Dq Li monthly 789or 790.Dq Li NO . 791.It Va security_status_noamd 792.Pq Vt bool 793Set to 794.Dq Li YES 795if you want to ignore 796.Xr amd 8 797mounts when comparing against yesterday's file system mounts in the 798.Va security_status_chkmounts_enable 799check. 800.It Va security_status_chkuid0_enable 801.Pq Vt bool 802Set to 803.Dq Li YES 804to check 805.Pa /etc/master.passwd 806for accounts with UID 0. 807.It Va security_status_chkuid0_period 808.Pq Vt str 809Set to either 810.Dq Li daily , 811.Dq Li weekly , 812.Dq Li monthly 813or 814.Dq Li NO . 815.It Va security_status_passwdless_enable 816.Pq Vt bool 817Set to 818.Dq Li YES 819to check 820.Pa /etc/master.passwd 821for accounts with empty passwords. 822.It Va security_status_passwdless_period 823.Pq Vt str 824Set to either 825.Dq Li daily , 826.Dq Li weekly , 827.Dq Li monthly 828or 829.Dq Li NO . 830.It Va security_status_logincheck_enable 831.Pq Vt bool 832Set to 833.Dq Li YES 834to check 835.Pa /etc/login.conf 836ownership, see 837.Xr login.conf 5 838for more information. 839.It Va security_status_logincheck_period 840.Pq Vt str 841Set to either 842.Dq Li daily , 843.Dq Li weekly , 844.Dq Li monthly 845or 846.Dq Li NO . 847.It Va security_status_ipfwdenied_enable 848.Pq Vt bool 849Set to 850.Dq Li YES 851to show log entries for packets denied by 852.Xr ipfw 8 853since yesterday's check. 854.It Va security_status_ipfwdenied_period 855.Pq Vt str 856Set to either 857.Dq Li daily , 858.Dq Li weekly , 859.Dq Li monthly 860or 861.Dq Li NO . 862.It Va security_status_ipfdenied_enable 863.Pq Vt bool 864Set to 865.Dq Li YES 866to show log entries for packets denied by 867.Xr ipf 8 868since yesterday's check. 869.It Va security_status_ipfdenied_period 870.Pq Vt str 871Set to either 872.Dq Li daily , 873.Dq Li weekly , 874.Dq Li monthly 875or 876.Dq Li NO . 877.It Va security_status_pfdenied_enable 878.Pq Vt bool 879Set to 880.Dq Li YES 881to show log entries for packets denied by 882.Xr pf 4 883since yesterday's check. 884.It Va security_status_pfdenied_period 885.Pq Vt str 886Set to either 887.Dq Li daily , 888.Dq Li weekly , 889.Dq Li monthly 890or 891.Dq Li NO . 892.It Va security_status_ipfwlimit_enable 893.Pq Vt bool 894Set to 895.Dq Li YES 896to display 897.Xr ipfw 8 898rules that have reached their verbosity limit. 899.It Va security_status_ipfwlimit_period 900.Pq Vt str 901Set to either 902.Dq Li daily , 903.Dq Li weekly , 904.Dq Li monthly 905or 906.Dq Li NO . 907.It Va security_status_kernelmsg_enable 908.Pq Vt bool 909Set to 910.Dq Li YES 911to show new 912.Xr dmesg 8 913entries since yesterday's check. 914.It Va security_status_kernelmsg_period 915.Pq Vt str 916Set to either 917.Dq Li daily , 918.Dq Li weekly , 919.Dq Li monthly 920or 921.Dq Li NO . 922.It Va security_status_loginfail_enable 923.Pq Vt bool 924Set to 925.Dq Li YES 926to display failed logins from 927.Pa /var/log/messages 928in the previous day. 929.It Va security_status_loginfail_period 930.Pq Vt str 931Set to either 932.Dq Li daily , 933.Dq Li weekly , 934.Dq Li monthly 935or 936.Dq Li NO . 937.It Va security_status_tcpwrap_enable 938.Pq Vt bool 939Set to 940.Dq Li YES 941to display connections denied by tcpwrappers (see 942.Xr hosts_access 5 ) 943from 944.Pa /var/log/messages 945during the previous day. 946.It Va security_status_tcpwrap_period 947.Pq Vt str 948Set to either 949.Dq Li daily , 950.Dq Li weekly , 951.Dq Li monthly 952or 953.Dq Li NO . 954.El 955.Sh FILES 956.Bl -tag -width ".Pa /etc/defaults/periodic.conf" 957.It Pa /etc/defaults/periodic.conf 958The default configuration file. 959This file contains all default variables and values. 960.It Pa /etc/periodic.conf 961The usual system specific variable override file. 962.It Pa /etc/periodic.conf.local 963An additional override file, useful when 964.Pa /etc/periodic.conf 965is shared or distributed. 966.El 967.Sh SEE ALSO 968.Xr apropos 1 , 969.Xr calendar 1 , 970.Xr df 1 , 971.Xr diff 1 , 972.Xr gzip 1 , 973.Xr locate 1 , 974.Xr man 1 , 975.Xr msgs 1 , 976.Xr netstat 1 , 977.Xr nice 1 , 978.Xr login.conf 5 , 979.Xr rc.conf 5 , 980.Xr ac 8 , 981.Xr chkgrp 8 , 982.Xr dump 8 , 983.Xr newsyslog 8 , 984.Xr periodic 8 , 985.Xr pkg-version 8 , 986.Xr sendmail 8 987.Sh HISTORY 988The 989.Nm 990file appeared in 991.Fx 4.1 . 992.Sh AUTHORS 993.An Brian Somers Aq Mt brian@Awfulhak.org 994