1.\"- 2.\" Copyright (c) 2000 Brian Somers <brian@Awfulhak.org> 3.\" All rights reserved. 4.\" 5.\" Redistribution and use in source and binary forms, with or without 6.\" modification, are permitted provided that the following conditions 7.\" are met: 8.\" 1. Redistributions of source code must retain the above copyright 9.\" notice, this list of conditions and the following disclaimer. 10.\" 2. Redistributions in binary form must reproduce the above copyright 11.\" notice, this list of conditions and the following disclaimer in the 12.\" documentation and/or other materials provided with the distribution. 13.\" 14.\" THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND 15.\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 16.\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 17.\" ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE 18.\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 19.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 20.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 21.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 22.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 23.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 24.\" SUCH DAMAGE. 25.\" 26.\" $FreeBSD$ 27.\" 28.Dd January 15, 2015 29.Dt PERIODIC.CONF 5 30.Os 31.Sh NAME 32.Nm periodic.conf 33.Nd periodic job configuration information 34.Sh DESCRIPTION 35The file 36.Nm 37contains a description of how daily, weekly and monthly system maintenance 38jobs should run. 39It resides in the 40.Pa /etc/defaults 41directory and parts may be overridden by a file of the same name in 42.Pa /etc , 43which itself may be overridden by the 44.Pa /etc/periodic.conf.local 45file. 46.Pp 47The 48.Nm 49file 50is actually sourced as a shell script from each of the periodic scripts 51and is intended to simply provide default configuration variables. 52.Pp 53The following variables are used by 54.Xr periodic 8 55itself: 56.Bl -tag -offset 4n -width 2n 57.It Va local_periodic 58.Pq Vt str 59List of directories to search for periodic scripts. 60This list is always prefixed with 61.Pa /etc/periodic , 62and is only used when an argument to 63.Xr periodic 8 64is not an absolute directory name. 65.It Ao Ar dir Ac Ns Va _output 66.Pq Vt path No or Vt list 67What to do with the output of the scripts executed from 68the directory 69.Ar dir . 70If this variable is set to an absolute path name, output is logged to 71that file, otherwise it is taken as one or more space separated email 72addresses and mailed to those users. 73If this variable is not set or is empty, output is sent to standard output. 74.Pp 75For an unattended machine, suitable values for 76.Va daily_output , 77.Va weekly_output , 78and 79.Va monthly_output 80might be 81.Dq Li /var/log/daily.log , 82.Dq Li /var/log/weekly.log , 83and 84.Dq Li /var/log/monthly.log 85respectively, as 86.Xr newsyslog 8 87will rotate these files (if they exists) at the appropriate times. 88.It Ao Ar dir Ac Ns Va _show_success 89.It Ao Ar dir Ac Ns Va _show_info 90.It Ao Ar dir Ac Ns Va _show_badconfig 91.Pq Vt bool 92These variables control whether 93.Xr periodic 8 94will mask the output of the executed scripts based on their return code 95(where 96.Ar dir 97is the base directory name in which each script resides). 98If the return code of a script is 99.Sq 0 100and 101.Ao Ar dir Ac Ns Va _show_success 102is set to 103.Dq Li NO , 104.Xr periodic 8 105will mask the script's output. 106If the return code of a script is 107.Sq 1 108and 109.Ao Ar dir Ac Ns Va _show_info 110is set to 111.Dq Li NO , 112.Xr periodic 8 113will mask the script's output. 114If the return code of a script is 115.Sq 2 116and 117.Ao Ar dir Ac Ns Va _show_badconfig 118is set to 119.Dq Li NO , 120.Xr periodic 8 121will mask the script's output. 122If these variables are set to neither 123.Dq Li YES 124nor 125.Dq Li NO , 126they default to 127.Dq Li YES , 128.Dq Li YES 129and 130.Dq Li NO 131respectively. 132.Pp 133Refer to the 134.Xr periodic 8 135manual page for how script return codes are interpreted. 136.El 137.Pp 138The following variables are used by the standard scripts that reside in 139.Pa /etc/periodic/daily : 140.Bl -tag -offset 4n -width 2n 141.It Va daily_clean_disks_enable 142.Pq Vt bool 143Set to 144.Dq Li YES 145if you want to remove all files matching 146.Va daily_clean_disks_files 147daily. 148.It Va daily_clean_disks_files 149.Pq Vt str 150Set to a list of file names to match. 151Wild cards are permitted. 152.It Va daily_clean_disks_days 153.Pq Vt num 154When 155.Va daily_clean_disks_enable 156is set to 157.Dq Li YES , 158this must also be set to the number of days old that a file's access 159and modification times must be before it is deleted. 160.It Va daily_clean_disks_verbose 161.Pq Vt bool 162Set to 163.Dq Li YES 164if you want the removed files to be reported in your daily output. 165.It Va daily_clean_tmps_enable 166.Pq Vt bool 167Set to 168.Dq Li YES 169if you want to clear temporary directories daily. 170.It Va daily_clean_tmps_dirs 171.Pq Vt str 172Set to the list of directories to clear if 173.Va daily_clean_tmps_enable 174is set to 175.Dq Li YES . 176.It Va daily_clean_tmps_days 177.Pq Vt num 178When 179.Va daily_clean_tmps_enable 180is set, this must also be set to the number of days old that a file's access 181and modification times must be before it is deleted. 182.It Va daily_clean_tmps_ignore 183.Pq Vt str 184Set to the list of files that should not be deleted when 185.Va daily_clean_tmps_enable 186is set to 187.Dq Li YES . 188Wild card characters are permitted. 189.It Va daily_clean_tmps_verbose 190.Pq Vt bool 191Set to 192.Dq Li YES 193if you want the removed files to be reported in your daily output. 194.It Va daily_clean_preserve_enable 195.Pq Vt bool 196Set to 197.Dq Li YES 198if you wish to remove old files from 199.Pa /var/preserve . 200.It Va daily_clean_preserve_days 201.Pq Vt num 202Set to the number of days that files must not have been modified before 203they are deleted. 204.It Va daily_clean_preserve_verbose 205.Pq Vt bool 206Set to 207.Dq Li YES 208if you want the removed files to be reported in your daily output. 209.It Va daily_clean_msgs_enable 210.Pq Vt bool 211Set to 212.Dq Li YES 213if you wish old system messages to be purged. 214.It Va daily_clean_msgs_days 215.Pq Vt num 216Set to the number of days that files must not have been modified before 217they are deleted. 218If this variable is left blank, the 219.Xr msgs 1 220default is used. 221.It Va daily_clean_rwho_enable 222.Pq Vt bool 223Set to 224.Dq Li YES 225if you wish old files in 226.Pa /var/who 227to be purged. 228.It Va daily_clean_rwho_days 229.Pq Vt num 230Set to the number of days that files must not have been modified before 231they are deleted. 232.It Va daily_clean_rwho_verbose 233.Pq Vt bool 234Set to 235.Dq Li YES 236if you want the removed files to be reported in your daily output. 237.It Va daily_clean_hoststat_enable 238.Pq Vt bool 239Set to 240.Dq Li YES 241to run 242.Nm sendmail Fl bH 243to automatically purge stale entries from 244.Xr sendmail 8 Ns 's 245host status cache. 246Files will be deleted using the same criteria as 247.Xr sendmail 8 248would normally use when determining whether to believe the cached information, 249as configured in 250.Pa /etc/mail/sendmail.cf . 251.It Va daily_backup_passwd_enable 252.Pq Vt bool 253Set to 254.Dq Li YES 255if you want the 256.Pa /etc/master.passwd 257and 258.Pa /etc/group 259files backed up and reported on. 260Reporting consists of checking both files for modifications and running 261.Xr chkgrp 8 262on the 263.Pa group 264file. 265.It Va daily_backup_aliases_enable 266.Pq Vt bool 267Set to 268.Dq Li YES 269if you want the 270.Pa /etc/mail/aliases 271file backed up and modifications to be displayed in your daily output. 272.It Va daily_calendar_enable 273.Pq Vt bool 274Set to 275.Dq Li YES 276if you want to run 277.Nm calendar Fl a 278daily. 279.It Va daily_accounting_enable 280.Pq Vt bool 281Set to 282.Dq Li YES 283if you want to rotate your daily accounting files. 284No rotations are necessary unless 285.Va accounting_enable 286is enabled in 287.Xr rc.conf 5 . 288.It Va daily_accounting_compress 289.Pq Vt bool 290Set to 291.Dq Li YES 292if you want your daily accounting files to be compressed using 293.Xr gzip 1 . 294.It Va daily_accounting_save 295.Pq Vt num 296When 297.Va daily_accounting_enable 298is set, this may also be set to the number of daily accounting files that are 299to be saved. 300The default is 301.Dq Li 3 . 302.It Va daily_accounting_flags 303.Pq Vt str 304Set to the arguments to pass to the 305.Xr sa 8 306utility (in addition to 307.Fl s ) 308when 309.Va daily_accounting_enable 310is set to 311.Dq Li YES . 312The default is 313.Fl q . 314.It Va daily_news_expire_enable 315.Pq Vt bool 316Set to 317.Dq Li YES 318if you want to run 319.Pa /etc/news.expire . 320.It Va daily_status_disks_enable 321.Pq Vt bool 322Set to 323.Dq Li YES 324if you want to run 325.Xr df 1 326(with the arguments supplied in 327.Va daily_status_disks_df_flags ) 328and 329.Nm dump Fl W . 330.It Va daily_status_disks_df_flags 331.Pq Vt str 332Set to the arguments for the 333.Xr df 1 334utility when 335.Va daily_status_disks_enable 336is set to 337.Dq Li YES . 338.It Va daily_status_zfs_enable 339.Pq Vt bool 340Set to 341.Dq Li YES 342if you want to run 343.Nm zpool Cm status 344on your 345.Xr zfs 8 346pools. 347.It Va daily_status_zfs_zpool_list_enable 348.Pq Vt bool 349Set to 350.Dq Li YES 351if you want to run 352.Nm zpool Cm list 353on your 354.Xr zfs 8 355pools. 356Requires 357.Va daily_status_zfs_enable 358to be set to 359.Li YES . 360.It Va daily_status_gmirror_enable 361.Pq Vt bool 362Set to 363.Dq Li YES 364if you want to run 365.Nm gmirror Cm status 366on your 367.Xr gmirror 8 368devices. 369.It Va daily_status_graid3_enable 370.Pq Vt bool 371Set to 372.Dq Li YES 373if you want to run 374.Nm graid3 Cm status 375on your 376.Xr graid3 8 377devices. 378.It Va daily_status_gstripe_enable 379.Pq Vt bool 380Set to 381.Dq Li YES 382if you want to run 383.Nm gstripe Cm status 384on your 385.Xr gstripe 8 386devices. 387.It Va daily_status_gconcat_enable 388.Pq Vt bool 389Set to 390.Dq Li YES 391if you want to run 392.Nm gconcat Cm status 393on your 394.Xr gconcat 8 395devices. 396.It Va daily_status_network_enable 397.Pq Vt bool 398Set to 399.Dq Li YES 400if you want to run 401.Nm netstat Fl i . 402.It Va daily_status_network_usedns 403.Pq Vt bool 404Set to 405.Dq Li YES 406if you want to run 407.Xr netstat 1 408without the 409.Fl n 410option (to do DNS lookups). 411.It Va daily_status_rwho_enable 412.Pq Vt bool 413Set to 414.Dq Li YES 415if you want to run 416.Xr uptime 1 417(or 418.Xr ruptime 1 419if 420.Va rwhod_enable 421is set to 422.Dq Li YES 423in 424.Pa /etc/rc.conf ) . 425.It Va daily_status_mailq_enable 426.Pq Vt bool 427Set to 428.Dq Li YES 429if you want to run 430.Xr mailq 1 . 431.It Va daily_status_mailq_shorten 432.Pq Vt bool 433Set to 434.Dq Li YES 435if you want to shorten the 436.Xr mailq 1 437output when 438.Va daily_status_mailq_enable 439is set to 440.Dq Li YES . 441.It Va daily_status_include_submit_mailq 442.Pq Vt bool 443Set to 444.Dq Li YES 445if you also want to run 446.Xr mailq 1 447on the submit mail queue when 448.Va daily_status_mailq_enable 449is set to 450.Dq Li YES . 451This may not work with MTAs other than 452.Xr sendmail 8 . 453.It Va daily_status_security_enable 454.Pq Vt bool 455Set to 456.Dq Li YES 457if you want to run the security check. 458The security check is another set of 459.Xr periodic 8 460scripts. 461The system defaults are in 462.Pa /etc/periodic/security . 463Local scripts should be placed in 464.Pa /usr/local/etc/periodic/security . 465See the 466.Xr periodic 8 467manual page for more information. 468.It Va daily_status_security_inline 469.Pq Vt bool 470Set to 471.Dq Li YES 472if you want the security check output inline. 473The default is to either mail or log the output according to the value of 474.Va daily_status_security_output . 475.It Va daily_status_security_output 476.Pq Vt str 477Where to send the output of the security check if 478.Va daily_status_security_inline 479is set to 480.Dq Li NO . 481This variable behaves in the same way as the 482.Va *_output 483variables above, namely it can be set either to one or more email addresses 484or to an absolute file name. 485.It Va daily_status_mail_rejects_enable 486.Pq Vt bool 487Set to 488.Dq Li YES 489if you want to summarise mail rejections logged to 490.Pa /var/log/maillog 491for the previous day. 492.It Va daily_status_mail_rejects_logs 493.Pq Vt num 494Set to the number of maillog files that should be checked 495for yesterday's mail rejects. 496.It Va daily_status_ntpd 497.Pq Vt bool 498Set to 499.Dq Li YES 500if you want to enable NTP status check. 501.It Va daily_status_world_kernel 502.Pq Vt bool 503Set to 504.Dq Li YES 505to check the running userland and kernel are in sync. 506.It Va daily_queuerun_enable 507.Pq Vt bool 508Set to 509.Dq Li YES 510if you want to manually run the mail queue at least once a day. 511.It Va daily_submit_queuerun 512.Pq Vt bool 513Set to 514.Dq Li YES 515if you also want to manually run the submit mail queue at least once a day 516when 517.Va daily_queuerun_enable 518is set to 519.Dq Li YES . 520.It Va daily_scrub_zfs_enable 521.Pq Vt bool 522Set to 523.Dq Li YES 524if you want to run a zfs scrub periodically. 525.It Va daily_scrub_zfs_pools 526.Pq Vt str 527A space separated list of names of zfs pools to scrub. 528If the list is empty or not set, all zfs pools are scrubbed. 529.It Va daily_scrub_zfs_default_threshold 530.Pq Vt int 531Number of days between a scrub if no pool-specific threshold is set. 532If not set, the default value is 35, corresponding to 5 weeks. 533.It Va daily_scrub_zfs_ Ns Ao Ar poolname Ac Ns Va _threshold 534.Pq Vt int 535The same as 536.Va daily_scrub_zfs_default_threshold 537but specific to the pool 538.Ao Ar poolname Ac Ns . 539.It Va daily_local 540.Pq Vt str 541Set to a list of extra scripts that should be run after all other 542daily scripts. 543All scripts must be absolute path names. 544.El 545.Pp 546The following variables are used by the standard scripts that reside in 547.Pa /etc/periodic/weekly : 548.Bl -tag -offset 4n -width 2n 549.It Va weekly_locate_enable 550.Pq Vt bool 551Set to 552.Dq Li YES 553if you want to run 554.Pa /usr/libexec/locate.updatedb . 555This script is run using 556.Nm nice Fl 5 557as user 558.Dq Li nobody , 559and generates the table used by the 560.Xr locate 1 561command. 562.It Va weekly_whatis_enable 563.Pq Vt bool 564Set to 565.Dq Li YES 566if you want to run 567.Pa /usr/libexec/makewhatis.local . 568This script regenerates the database used by the 569.Xr apropos 1 570command. 571.It Va weekly_catman_enable 572.Pq Vt bool 573Set to 574.Dq Li YES 575if you want to run 576.Pa /usr/libexec/catman.local . 577This script processes all out of date manual pages, speeding up the 578.Xr man 1 579command at the expense of disk space. 580.It Va weekly_noid_enable 581.Pq Vt bool 582Set to 583.Dq Li YES 584if you want to locate orphaned files on the system. 585An orphaned file is one with an invalid owner or group. 586.It Va weekly_noid_dirs 587.Pq Vt str 588A list of directories under which orphaned files are searched for. 589This would usually be set to 590.Pa / . 591.It Va weekly_status_security_enable 592.Pq Vt bool 593Weekly counterpart of 594.Va daily_status_securiy_enable . 595.It Va weekly_status_security_inline 596.Pq Vt bool 597Weekly counterpart of 598.Va daily_status_securiy_inline . 599.It Va weekly_status_security_output 600.Pq Vt str 601Weekly counterpart of 602.Va daily_status_securiy_output . 603.It Va weekly_status_pkg_enable 604.Pq Vt bool 605Set to 606.Dq Li YES 607if you want to use 608.Xr pkg_version 1 609to list installed packages which are out of date. 610.It Va pkg_version 611.Pq Vt str 612When 613.Va weekly_status_pkg_enable 614is set to 615.Dq Li YES , 616this variable specifies the program that is used to determine the out of 617date packages. 618If unset, the 619.Xr pkg_version 1 620program is used. 621As an example, this variable might be set to 622.Dq Li portversion 623if the 624.Pa ports/sysutils/portupgrade 625port has been installed. 626.It Va pkg_version_index 627.Pq Vt str 628This variable specifies the 629.Pa INDEX 630file from 631.Pa /usr/ports 632that should be used by 633.Xr pkg_version 1 . 634Because the dependency tree may be substantially different between versions of 635.Fx , 636there may be more than one 637.Pa INDEX 638file in 639.Pa /usr/ports . 640.Pp 641Note, if the 642.Va pkg_version 643variable is set to 644.Dq Li portversion , 645it will also be necessary to arrange that the correct 646.Pa INDEX 647file is specified 648using environment variables and that 649.Va pkg_version_index 650is cleared in 651.Pa /etc/periodic.conf 652.Pq Dq Li pkg_version_index= . 653.It Va weekly_local 654.Pq Vt str 655Set to a list of extra scripts that should be run after all other 656weekly scripts. 657All scripts must be absolute path names. 658.El 659.Pp 660The following variables are used by the standard scripts that reside in 661.Pa /etc/periodic/monthly : 662.Bl -tag -offset 4n -width 2n 663.It Va monthly_accounting_enable 664.Pq Vt bool 665Set to 666.Dq Li YES 667if you want to do login accounting using the 668.Xr ac 8 669command. 670.It Va monthly_status_security_enable 671.Pq Vt bool 672Monthly counterpart of 673.Va daily_status_securiy_enable . 674.It Va monthly_status_security_inline 675.Pq Vt bool 676Monthly counterpart of 677.Va daily_status_securiy_inline . 678.It Va monthly_status_security_output 679.Pq Vt str 680Monthly counterpart of 681.Va daily_status_securiy_output . 682.It Va monthly_local 683.Pq Vt str 684Set to a list of extra scripts that should be run after all other 685monthly scripts. 686All scripts must be absolute path names. 687.El 688.Pp 689The following variables are used by the standard scripts that reside in 690.Pa /etc/periodic/security . 691Those scripts are usually run from daily 692.Pq Va daily_status_security_enable , 693weekly 694.Pq Va weekly_status_security_enable , 695and monthly 696.Pq Va monthly_status_security_enable 697periodic hooks. 698The 699.Va ..._period 700of each script can be configured as 701.Dq daily , 702.Dq weekly , 703.Dq monthly 704or 705.Dq NO . 706Note that when periodic security scripts are run from 707.Xr crontab 5 , 708they will be always run unless their 709.Va ..._enable 710or 711.Va ..._period 712variable is set to 713.Dq NO . 714.Bl -tag -offset 4n -width 2n 715.It Va security_status_diff_flags 716.Pq Vt str 717Set to the arguments to pass to the 718.Xr diff 1 719utility when generating differences. 720The default is 721.Fl b u . 722.It Va security_status_chksetuid_enable 723.Pq Vt bool 724Set to 725.Dq Li YES 726to compare the modes and modification times of setuid executables with 727the previous day's values. 728.It Va security_status_chksetuid_period 729.Pq Vt str 730Set to either 731.Dq Li daily , 732.Dq Li weekly , 733.Dq Li monthly 734or 735.Dq Li NO . 736.It Va security_status_chkportsum_enable 737.Pq Vt bool 738Set to 739.Dq Li YES 740to verify checksums of all installed packages against the known checksums in 741.Pa /var/db/pkg . 742.It Va security_status_chkportsum_period 743.Pq Vt str 744Set to either 745.Dq Li daily , 746.Dq Li weekly , 747.Dq Li monthly 748or 749.Dq Li NO . 750.It Va security_status_neggrpperm_enable 751.Pq Vt bool 752Set to 753.Dq Li YES 754to check for files where the group of a file has less permissions than 755the world at large. 756When users are in more than 14 supplemental groups these negative 757permissions may not be enforced via NFS shares. 758.It Va security_status_neggrpperm_period 759.Pq Vt str 760Set to either 761.Dq Li daily , 762.Dq Li weekly , 763.Dq Li monthly 764or 765.Dq Li NO . 766.It Va security_status_chkmounts_enable 767.Pq Vt bool 768Set to 769.Dq Li YES 770to check for changes mounted file systems to the previous day's values. 771.It Va security_status_chkmounts_period 772.Pq Vt str 773Set to either 774.Dq Li daily , 775.Dq Li weekly , 776.Dq Li monthly 777or 778.Dq Li NO . 779.It Va security_status_noamd 780.Pq Vt bool 781Set to 782.Dq Li YES 783if you want to ignore 784.Xr amd 8 785mounts when comparing against yesterday's file system mounts in the 786.Va security_status_chkmounts_enable 787check. 788.It Va security_status_chkuid0_enable 789.Pq Vt bool 790Set to 791.Dq Li YES 792to check 793.Pa /etc/master.passwd 794for accounts with UID 0. 795.It Va security_status_chkuid0_period 796.Pq Vt str 797Set to either 798.Dq Li daily , 799.Dq Li weekly , 800.Dq Li monthly 801or 802.Dq Li NO . 803.It Va security_status_passwdless_enable 804.Pq Vt bool 805Set to 806.Dq Li YES 807to check 808.Pa /etc/master.passwd 809for accounts with empty passwords. 810.It Va security_status_passwdless_period 811.Pq Vt str 812Set to either 813.Dq Li daily , 814.Dq Li weekly , 815.Dq Li monthly 816or 817.Dq Li NO . 818.It Va security_status_logincheck_enable 819.Pq Vt bool 820Set to 821.Dq Li YES 822to check 823.Pa /etc/login.conf 824ownership, see 825.Xr login.conf 5 826for more information. 827.It Va security_status_logincheck_period 828.Pq Vt str 829Set to either 830.Dq Li daily , 831.Dq Li weekly , 832.Dq Li monthly 833or 834.Dq Li NO . 835.It Va security_status_ipfwdenied_enable 836.Pq Vt bool 837Set to 838.Dq Li YES 839to show log entries for packets denied by 840.Xr ipfw 8 841since yesterday's check. 842.It Va security_status_ipfwdenied_period 843.Pq Vt str 844Set to either 845.Dq Li daily , 846.Dq Li weekly , 847.Dq Li monthly 848or 849.Dq Li NO . 850.It Va security_status_ipfdenied_enable 851.Pq Vt bool 852Set to 853.Dq Li YES 854to show log entries for packets denied by 855.Xr ipf 8 856since yesterday's check. 857.It Va security_status_ipfdenied_period 858.Pq Vt str 859Set to either 860.Dq Li daily , 861.Dq Li weekly , 862.Dq Li monthly 863or 864.Dq Li NO . 865.It Va security_status_pfdenied_enable 866.Pq Vt bool 867Set to 868.Dq Li YES 869to show log entries for packets denied by 870.Xr pf 4 871since yesterday's check. 872.It Va security_status_pfdenied_period 873.Pq Vt str 874Set to either 875.Dq Li daily , 876.Dq Li weekly , 877.Dq Li monthly 878or 879.Dq Li NO . 880.It Va security_status_ipfwlimit_enable 881.Pq Vt bool 882Set to 883.Dq Li YES 884to display 885.Xr ipfw 8 886rules that have reached their verbosity limit. 887.It Va security_status_ipfwlimit_period 888.Pq Vt str 889Set to either 890.Dq Li daily , 891.Dq Li weekly , 892.Dq Li monthly 893or 894.Dq Li NO . 895.It Va security_status_kernelmsg_enable 896.Pq Vt bool 897Set to 898.Dq Li YES 899to show new 900.Xr dmesg 8 901entries since yesterday's check. 902.It Va security_status_kernelmsg_period 903.Pq Vt str 904Set to either 905.Dq Li daily , 906.Dq Li weekly , 907.Dq Li monthly 908or 909.Dq Li NO . 910.It Va security_status_loginfail_enable 911.Pq Vt bool 912Set to 913.Dq Li YES 914to display failed logins from 915.Pa /var/log/messages 916in the previous day. 917.It Va security_status_loginfail_period 918.Pq Vt str 919Set to either 920.Dq Li daily , 921.Dq Li weekly , 922.Dq Li monthly 923or 924.Dq Li NO . 925.It Va security_status_tcpwrap_enable 926.Pq Vt bool 927Set to 928.Dq Li YES 929to display connections denied by tcpwrappers (see 930.Xr hosts_access 5 ) 931from 932.Pa /var/log/messages 933during the previous day. 934.It Va security_status_tcpwrap_period 935.Pq Vt str 936Set to either 937.Dq Li daily , 938.Dq Li weekly , 939.Dq Li monthly 940or 941.Dq Li NO . 942.El 943.Sh FILES 944.Bl -tag -width ".Pa /etc/defaults/periodic.conf" 945.It Pa /etc/defaults/periodic.conf 946The default configuration file. 947This file contains all default variables and values. 948.It Pa /etc/periodic.conf 949The usual system specific variable override file. 950.It Pa /etc/periodic.conf.local 951An additional override file, useful when 952.Pa /etc/periodic.conf 953is shared or distributed. 954.El 955.Sh SEE ALSO 956.Xr apropos 1 , 957.Xr calendar 1 , 958.Xr df 1 , 959.Xr diff 1 , 960.Xr gzip 1 , 961.Xr locate 1 , 962.Xr man 1 , 963.Xr msgs 1 , 964.Xr netstat 1 , 965.Xr nice 1 , 966.Xr pkg_version 1 , 967.Xr login.conf 5 , 968.Xr rc.conf 5 , 969.Xr ac 8 , 970.Xr chkgrp 8 , 971.Xr dump 8 , 972.Xr newsyslog 8 , 973.Xr periodic 8 , 974.Xr sendmail 8 975.Sh HISTORY 976The 977.Nm 978file appeared in 979.Fx 4.1 . 980.Sh AUTHORS 981.An Brian Somers Aq Mt brian@Awfulhak.org 982