1.\"- 2.\" Copyright (c) 2000 Brian Somers <brian@Awfulhak.org> 3.\" All rights reserved. 4.\" 5.\" Redistribution and use in source and binary forms, with or without 6.\" modification, are permitted provided that the following conditions 7.\" are met: 8.\" 1. Redistributions of source code must retain the above copyright 9.\" notice, this list of conditions and the following disclaimer. 10.\" 2. Redistributions in binary form must reproduce the above copyright 11.\" notice, this list of conditions and the following disclaimer in the 12.\" documentation and/or other materials provided with the distribution. 13.\" 14.\" THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND 15.\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 16.\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 17.\" ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE 18.\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 19.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 20.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 21.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 22.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 23.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 24.\" SUCH DAMAGE. 25.\" 26.\" $FreeBSD$ 27.\" 28.Dd May 30, 2012 29.Dt PERIODIC.CONF 5 30.Os 31.Sh NAME 32.Nm periodic.conf 33.Nd periodic job configuration information 34.Sh DESCRIPTION 35The file 36.Nm 37contains a description of how daily, weekly and monthly system maintenance 38jobs should run. 39It resides in the 40.Pa /etc/defaults 41directory and parts may be overridden by a file of the same name in 42.Pa /etc , 43which itself may be overridden by the 44.Pa /etc/periodic.conf.local 45file. 46.Pp 47The 48.Nm 49file 50is actually sourced as a shell script from each of the periodic scripts 51and is intended to simply provide default configuration variables. 52.Pp 53The following variables are used by 54.Xr periodic 8 55itself: 56.Bl -tag -offset 4n -width 2n 57.It Va local_periodic 58.Pq Vt str 59List of directories to search for periodic scripts. 60This list is always prefixed with 61.Pa /etc/periodic , 62and is only used when an argument to 63.Xr periodic 8 64is not an absolute directory name. 65.It Ao Ar dir Ac Ns Va _output 66.Pq Vt path No or Vt list 67What to do with the output of the scripts executed from 68the directory 69.Ar dir . 70If this variable is set to an absolute path name, output is logged to 71that file, otherwise it is taken as one or more space separated email 72addresses and mailed to those users. 73If this variable is not set or is empty, output is sent to standard output. 74.Pp 75For an unattended machine, suitable values for 76.Va daily_output , 77.Va weekly_output , 78and 79.Va monthly_output 80might be 81.Dq Li /var/log/daily.log , 82.Dq Li /var/log/weekly.log , 83and 84.Dq Li /var/log/monthly.log 85respectively, as 86.Xr newsyslog 8 87will rotate these files (if they exists) at the appropriate times. 88.It Ao Ar dir Ac Ns Va _show_success 89.It Ao Ar dir Ac Ns Va _show_info 90.It Ao Ar dir Ac Ns Va _show_badconfig 91.Pq Vt bool 92These variables control whether 93.Xr periodic 8 94will mask the output of the executed scripts based on their return code 95(where 96.Ar dir 97is the base directory name in which each script resides). 98If the return code of a script is 99.Sq 0 100and 101.Ao Ar dir Ac Ns Va _show_success 102is set to 103.Dq Li NO , 104.Xr periodic 8 105will mask the script's output. 106If the return code of a script is 107.Sq 1 108and 109.Ao Ar dir Ac Ns Va _show_info 110is set to 111.Dq Li NO , 112.Xr periodic 8 113will mask the script's output. 114If the return code of a script is 115.Sq 2 116and 117.Ao Ar dir Ac Ns Va _show_badconfig 118is set to 119.Dq Li NO , 120.Xr periodic 8 121will mask the script's output. 122If these variables are set to neither 123.Dq Li YES 124nor 125.Dq Li NO , 126they default to 127.Dq Li YES , 128.Dq Li YES 129and 130.Dq Li NO 131respectively. 132.Pp 133Refer to the 134.Xr periodic 8 135manual page for how script return codes are interpreted. 136.El 137.Pp 138The following variables are used by the standard scripts that reside in 139.Pa /etc/periodic/daily : 140.Bl -tag -offset 4n -width 2n 141.It Va daily_clean_disks_enable 142.Pq Vt bool 143Set to 144.Dq Li YES 145if you want to remove all files matching 146.Va daily_clean_disks_files 147daily. 148.It Va daily_clean_disks_files 149.Pq Vt str 150Set to a list of file names to match. 151Wild cards are permitted. 152.It Va daily_clean_disks_days 153.Pq Vt num 154When 155.Va daily_clean_disks_enable 156is set to 157.Dq Li YES , 158this must also be set to the number of days old that a file's access 159and modification times must be before it is deleted. 160.It Va daily_clean_disks_verbose 161.Pq Vt bool 162Set to 163.Dq Li YES 164if you want the removed files to be reported in your daily output. 165.It Va daily_clean_tmps_enable 166.Pq Vt bool 167Set to 168.Dq Li YES 169if you want to clear temporary directories daily. 170.It Va daily_clean_tmps_dirs 171.Pq Vt str 172Set to the list of directories to clear if 173.Va daily_clean_tmps_enable 174is set to 175.Dq Li YES . 176.It Va daily_clean_tmps_days 177.Pq Vt num 178When 179.Va daily_clean_tmps_enable 180is set, this must also be set to the number of days old that a file's access 181and modification times must be before it is deleted. 182.It Va daily_clean_tmps_ignore 183.Pq Vt str 184Set to the list of files that should not be deleted when 185.Va daily_clean_tmps_enable 186is set to 187.Dq Li YES . 188Wild card characters are permitted. 189.It Va daily_clean_tmps_verbose 190.Pq Vt bool 191Set to 192.Dq Li YES 193if you want the removed files to be reported in your daily output. 194.It Va daily_clean_preserve_enable 195.Pq Vt bool 196Set to 197.Dq Li YES 198if you wish to remove old files from 199.Pa /var/preserve . 200.It Va daily_clean_preserve_days 201.Pq Vt num 202Set to the number of days that files must not have been modified before 203they are deleted. 204.It Va daily_clean_preserve_verbose 205.Pq Vt bool 206Set to 207.Dq Li YES 208if you want the removed files to be reported in your daily output. 209.It Va daily_clean_msgs_enable 210.Pq Vt bool 211Set to 212.Dq Li YES 213if you wish old system messages to be purged. 214.It Va daily_clean_msgs_days 215.Pq Vt num 216Set to the number of days that files must not have been modified before 217they are deleted. 218If this variable is left blank, the 219.Xr msgs 1 220default is used. 221.It Va daily_clean_rwho_enable 222.Pq Vt bool 223Set to 224.Dq Li YES 225if you wish old files in 226.Pa /var/who 227to be purged. 228.It Va daily_clean_rwho_days 229.Pq Vt num 230Set to the number of days that files must not have been modified before 231they are deleted. 232.It Va daily_clean_rwho_verbose 233.Pq Vt bool 234Set to 235.Dq Li YES 236if you want the removed files to be reported in your daily output. 237.It Va daily_clean_hoststat_enable 238.Pq Vt bool 239Set to 240.Dq Li YES 241to run 242.Nm sendmail Fl bH 243to automatically purge stale entries from 244.Xr sendmail 8 Ns 's 245host status cache. 246Files will be deleted using the same criteria as 247.Xr sendmail 8 248would normally use when determining whether to believe the cached information, 249as configured in 250.Pa /etc/mail/sendmail.cf . 251.It Va daily_backup_passwd_enable 252.Pq Vt bool 253Set to 254.Dq Li YES 255if you want the 256.Pa /etc/master.passwd 257and 258.Pa /etc/group 259files backed up and reported on. 260Reporting consists of checking both files for modifications and running 261.Xr chkgrp 8 262on the 263.Pa group 264file. 265.It Va daily_backup_aliases_enable 266.Pq Vt bool 267Set to 268.Dq Li YES 269if you want the 270.Pa /etc/mail/aliases 271file backed up and modifications to be displayed in your daily output. 272.It Va daily_calendar_enable 273.Pq Vt bool 274Set to 275.Dq Li YES 276if you want to run 277.Nm calendar Fl a 278daily. 279.It Va daily_accounting_enable 280.Pq Vt bool 281Set to 282.Dq Li YES 283if you want to rotate your daily accounting files. 284No rotations are necessary unless 285.Va accounting_enable 286is enabled in 287.Xr rc.conf 5 . 288.It Va daily_accounting_compress 289.Pq Vt bool 290Set to 291.Dq Li YES 292if you want your daily accounting files to be compressed using 293.Xr gzip 1 . 294.It Va daily_accounting_save 295.Pq Vt num 296When 297.Va daily_accounting_enable 298is set, this may also be set to the number of daily accounting files that are 299to be saved. 300The default is 301.Dq Li 3 . 302.It Va daily_accounting_flags 303.Pq Vt str 304Set to the arguments to pass to the 305.Xr sa 8 306utility (in addition to 307.Fl s ) 308when 309.Va daily_accounting_enable 310is set to 311.Dq Li YES . 312The default is 313.Fl q . 314.It Va daily_news_expire_enable 315.Pq Vt bool 316Set to 317.Dq Li YES 318if you want to run 319.Pa /etc/news.expire . 320.It Va daily_status_disks_enable 321.Pq Vt bool 322Set to 323.Dq Li YES 324if you want to run 325.Xr df 1 326(with the arguments supplied in 327.Va daily_status_disks_df_flags ) 328and 329.Nm dump Fl W . 330.It Va daily_status_disks_df_flags 331.Pq Vt str 332Set to the arguments for the 333.Xr df 1 334utility when 335.Va daily_status_disks_enable 336is set to 337.Dq Li YES . 338.It Va daily_status_zfs_enable 339.Pq Vt bool 340Set to 341.Dq Li YES 342if you want to run 343.Nm zpool Cm status 344on your 345.Xr zfs 8 346pools. 347.It Va daily_status_zfs_zpool_list_enable 348.Pq Vt bool 349Set to 350.Dq Li YES 351if you want to run 352.Nm zpool Cm list 353on your 354.Xr zfs 8 355pools. 356Requires 357.Va daily_status_zfs_enable 358to be set to 359.Li YES . 360.It Va daily_status_gmirror_enable 361.Pq Vt bool 362Set to 363.Dq Li YES 364if you want to run 365.Nm gmirror Cm status 366on your 367.Xr gmirror 8 368devices. 369.It Va daily_status_graid3_enable 370.Pq Vt bool 371Set to 372.Dq Li YES 373if you want to run 374.Nm graid3 Cm status 375on your 376.Xr graid3 8 377devices. 378.It Va daily_status_gstripe_enable 379.Pq Vt bool 380Set to 381.Dq Li YES 382if you want to run 383.Nm gstripe Cm status 384on your 385.Xr gstripe 8 386devices. 387.It Va daily_status_gconcat_enable 388.Pq Vt bool 389Set to 390.Dq Li YES 391if you want to run 392.Nm gconcat Cm status 393on your 394.Xr gconcat 8 395devices. 396.It Va daily_status_network_enable 397.Pq Vt bool 398Set to 399.Dq Li YES 400if you want to run 401.Nm netstat Fl i . 402.It Va daily_status_network_usedns 403.Pq Vt bool 404Set to 405.Dq Li YES 406if you want to run 407.Xr netstat 1 408without the 409.Fl n 410option (to do DNS lookups). 411.It Va daily_status_rwho_enable 412.Pq Vt bool 413Set to 414.Dq Li YES 415if you want to run 416.Xr uptime 1 417(or 418.Xr ruptime 1 419if 420.Va rwhod_enable 421is set to 422.Dq Li YES 423in 424.Pa /etc/rc.conf ) . 425.It Va daily_status_mailq_enable 426.Pq Vt bool 427Set to 428.Dq Li YES 429if you want to run 430.Xr mailq 1 . 431.It Va daily_status_mailq_shorten 432.Pq Vt bool 433Set to 434.Dq Li YES 435if you want to shorten the 436.Xr mailq 1 437output when 438.Va daily_status_mailq_enable 439is set to 440.Dq Li YES . 441.It Va daily_status_include_submit_mailq 442.Pq Vt bool 443Set to 444.Dq Li YES 445if you also want to run 446.Xr mailq 1 447on the submit mail queue when 448.Va daily_status_mailq_enable 449is set to 450.Dq Li YES . 451This may not work with MTAs other than 452.Xr sendmail 8 . 453.It Va daily_status_security_enable 454.Pq Vt bool 455Set to 456.Dq Li YES 457if you want to run the security check. 458The security check is another set of 459.Xr periodic 8 460scripts. 461The system defaults are in 462.Pa /etc/periodic/security . 463Local scripts should be placed in 464.Pa /usr/local/etc/periodic/security . 465See the 466.Xr periodic 8 467manual page for more information. 468.It Va daily_status_security_inline 469.Pq Vt bool 470Set to 471.Dq Li YES 472if you want the security check output inline. 473The default is to either mail or log the output according to the value of 474.Va daily_status_security_output . 475.It Va daily_status_security_output 476.Pq Vt str 477Where to send the output of the security check if 478.Va daily_status_security_inline 479is set to 480.Dq Li NO . 481This variable behaves in the same way as the 482.Va *_output 483variables above, namely it can be set either to one or more email addresses 484or to an absolute file name. 485.It Va daily_status_mail_rejects_enable 486.Pq Vt bool 487Set to 488.Dq Li YES 489if you want to summarise mail rejections logged to 490.Pa /var/log/maillog 491for the previous day. 492.It Va daily_status_mail_rejects_logs 493.Pq Vt num 494Set to the number of maillog files that should be checked 495for yesterday's mail rejects. 496.It Va daily_status_named_enable 497.Pq Vt bool 498Set to 499.Dq Li YES 500if you want to summarise denied zone transfers (AXFR and IXFR) 501for the previous day. 502.It Va daily_status_named_usedns 503.Pq Vt bool 504Set to 505.Dq Li YES 506if you want to enable reverse DNS lookups. 507.It Va daily_status_ntpd 508.Pq Vt bool 509Set to 510.Dq Li YES 511if you want to enable NTP status check. 512.It Va daily_queuerun_enable 513.Pq Vt bool 514Set to 515.Dq Li YES 516if you want to manually run the mail queue at least once a day. 517.It Va daily_submit_queuerun 518.Pq Vt bool 519Set to 520.Dq Li YES 521if you also want to manually run the submit mail queue at least once a day 522when 523.Va daily_queuerun_enable 524is set to 525.Dq Li YES . 526.It Va daily_scrub_zfs_enable 527.Pq Vt bool 528Set to 529.Dq Li YES 530if you want to run a zfs scrub periodically. 531.It Va daily_scrub_zfs_pools 532.Pq Vt str 533A space separated list of names of zfs pools to scrub. 534If the list is empty or not set, all zfs pools are scrubbed. 535.It Va daily_scrub_zfs_default_threshold 536.Pq Vt int 537Number of days between a scrub if no pool-specific threshold is set. 538If not set, the default value is 35, corresponding to 5 weeks. 539.It Va daily_scrub_zfs_ Ns Ao Ar poolname Ac Ns Va _threshold 540.Pq Vt int 541The same as 542.Va daily_scrub_zfs_default_threshold 543but specific to the pool 544.Ao Ar poolname Ac Ns . 545.It Va daily_local 546.Pq Vt str 547Set to a list of extra scripts that should be run after all other 548daily scripts. 549All scripts must be absolute path names. 550.El 551.Pp 552The following variables are used by the standard scripts that reside in 553.Pa /etc/periodic/weekly : 554.Bl -tag -offset 4n -width 2n 555.It Va weekly_locate_enable 556.Pq Vt bool 557Set to 558.Dq Li YES 559if you want to run 560.Pa /usr/libexec/locate.updatedb . 561This script is run using 562.Nm nice Fl 5 563as user 564.Dq Li nobody , 565and generates the table used by the 566.Xr locate 1 567command. 568.It Va weekly_whatis_enable 569.Pq Vt bool 570Set to 571.Dq Li YES 572if you want to run 573.Pa /usr/libexec/makewhatis.local . 574This script regenerates the database used by the 575.Xr apropos 1 576command. 577.It Va weekly_catman_enable 578.Pq Vt bool 579Set to 580.Dq Li YES 581if you want to run 582.Pa /usr/libexec/catman.local . 583This script processes all out of date manual pages, speeding up the 584.Xr man 1 585command at the expense of disk space. 586.It Va weekly_noid_enable 587.Pq Vt bool 588Set to 589.Dq Li YES 590if you want to locate orphaned files on the system. 591An orphaned file is one with an invalid owner or group. 592.It Va weekly_noid_dirs 593.Pq Vt str 594A list of directories under which orphaned files are searched for. 595This would usually be set to 596.Pa / . 597.It Va weekly_status_security_enable 598.Pq Vt bool 599Weekly counterpart of 600.Va daily_status_securiy_enable . 601.It Va weekly_status_security_inline 602.Pq Vt bool 603Weekly counterpart of 604.Va daily_status_securiy_inline . 605.It Va weekly_status_security_output 606.Pq Vt str 607Weekly counterpart of 608.Va daily_status_securiy_output . 609.It Va weekly_status_pkg_enable 610.Pq Vt bool 611Set to 612.Dq Li YES 613if you want to use 614.Xr pkg_version 1 615to list installed packages which are out of date. 616.It Va pkg_version 617.Pq Vt str 618When 619.Va weekly_status_pkg_enable 620is set to 621.Dq Li YES , 622this variable specifies the program that is used to determine the out of 623date packages. 624If unset, the 625.Xr pkg_version 1 626program is used. 627As an example, this variable might be set to 628.Dq Li portversion 629if the 630.Pa ports/sysutils/portupgrade 631port has been installed. 632.It Va pkg_version_index 633.Pq Vt str 634This variable specifies the 635.Pa INDEX 636file from 637.Pa /usr/ports 638that should be used by 639.Xr pkg_version 1 . 640Because the dependency tree may be substantially different between versions of 641.Fx , 642there may be more than one 643.Pa INDEX 644file in 645.Pa /usr/ports . 646.Pp 647Note, if the 648.Va pkg_version 649variable is set to 650.Dq Li portversion , 651it will also be necessary to arrange that the correct 652.Pa INDEX 653file is specified 654using environment variables and that 655.Va pkg_version_index 656is cleared in 657.Pa /etc/periodic.conf 658.Pq Dq Li pkg_version_index= . 659.It Va weekly_local 660.Pq Vt str 661Set to a list of extra scripts that should be run after all other 662weekly scripts. 663All scripts must be absolute path names. 664.El 665.Pp 666The following variables are used by the standard scripts that reside in 667.Pa /etc/periodic/monthly : 668.Bl -tag -offset 4n -width 2n 669.It Va monthly_accounting_enable 670.Pq Vt bool 671Set to 672.Dq Li YES 673if you want to do login accounting using the 674.Xr ac 8 675command. 676.It Va monthly_status_security_enable 677.Pq Vt bool 678Monthly counterpart of 679.Va daily_status_securiy_enable . 680.It Va monthly_status_security_inline 681.Pq Vt bool 682Monthly counterpart of 683.Va daily_status_securiy_inline . 684.It Va monthly_status_security_output 685.Pq Vt str 686Monthly counterpart of 687.Va daily_status_securiy_output . 688.It Va monthly_local 689.Pq Vt str 690Set to a list of extra scripts that should be run after all other 691monthly scripts. 692All scripts must be absolute path names. 693.El 694.Pp 695The following variables are used by the standard scripts that reside in 696.Pa /etc/periodic/security . 697Those scripts are usually run from daily 698.Pq Va daily_status_security_enable , 699weekly 700.Pq Va weekly_status_security_enable , 701and monthly 702.Pq Va monthly_status_security_enable 703periodic hooks. 704The 705.Va ..._period 706of each script can be configured as 707.Dq daily , 708.Dq weekly , 709.Dq monthly 710or 711.Dq NO . 712Note that when periodic security scripts are run from 713.Xr crontab 5 , 714they will be always run unless their 715.Va ..._enable 716or 717.Va ..._period 718variable is set to 719.Dq No . 720.Bl -tag -offset 4n -width 2n 721.It Va security_status_diff_flags 722.Pq Vt str 723Set to the arguments to pass to the 724.Xr diff 1 725utility when generating differences. 726The default is 727.Fl b u . 728.It Va security_status_chksetuid_enable 729.Pq Vt bool 730Set to 731.Dq Li YES 732to compare the modes and modification times of setuid executables with 733the previous day's values. 734.It Va security_status_chksetuid_period 735.Pq Vt str 736Set to either 737.Dq Li daily , 738.Dq Li weekly , 739.Dq Li monthly 740or 741.Dq Li NO . 742.It Va security_status_chkportsum_enable 743.Pq Vt bool 744Set to 745.Dq Li YES 746to verify checksums of all installed packages against the known checksums in 747.Pa /var/db/pkg . 748.It Va security_status_chkportsum_period 749.Pq Vt str 750Set to either 751.Dq Li daily , 752.Dq Li weekly , 753.Dq Li monthly 754or 755.Dq Li NO . 756.It Va security_status_neggrpperm_enable 757.Pq Vt bool 758Set to 759.Dq Li YES 760to check for files where the group of a file has less permissions than 761the world at large. 762When users are in more than 14 supplemental groups these negative 763permissions may not be enforced via NFS shares. 764.It Va security_status_neggrpperm_period 765.Pq Vt str 766Set to either 767.Dq Li daily , 768.Dq Li weekly , 769.Dq Li monthly 770or 771.Dq Li NO . 772.It Va security_status_chkmounts_enable 773.Pq Vt bool 774Set to 775.Dq Li YES 776to check for changes mounted file systems to the previous day's values. 777.It Va security_status_chkmounts_period 778.Pq Vt str 779Set to either 780.Dq Li daily , 781.Dq Li weekly , 782.Dq Li monthly 783or 784.Dq Li NO . 785.It Va security_status_noamd 786.Pq Vt bool 787Set to 788.Dq Li YES 789if you want to ignore 790.Xr amd 8 791mounts when comparing against yesterday's file system mounts in the 792.Va security_status_chkmounts_enable 793check. 794.It Va security_status_chkuid0_enable 795.Pq Vt bool 796Set to 797.Dq Li YES 798to check 799.Pa /etc/master.passwd 800for accounts with UID 0. 801.It Va security_status_chkuid0_period 802.Pq Vt str 803Set to either 804.Dq Li daily , 805.Dq Li weekly , 806.Dq Li monthly 807or 808.Dq Li NO . 809.It Va security_status_passwdless_enable 810.Pq Vt bool 811Set to 812.Dq Li YES 813to check 814.Pa /etc/master.passwd 815for accounts with empty passwords. 816.It Va security_status_passwdless_period 817.Pq Vt str 818Set to either 819.Dq Li daily , 820.Dq Li weekly , 821.Dq Li monthly 822or 823.Dq Li NO . 824.It Va security_status_logincheck_enable 825.Pq Vt bool 826Set to 827.Dq Li YES 828to check 829.Pa /etc/login.conf 830ownership, see 831.Xr login.conf 5 832for more information. 833.It Va security_status_logincheck_period 834.Pq Vt str 835Set to either 836.Dq Li daily , 837.Dq Li weekly , 838.Dq Li monthly 839or 840.Dq Li NO . 841.It Va security_status_ipfwdenied_enable 842.Pq Vt bool 843Set to 844.Dq Li YES 845to show log entries for packets denied by 846.Xr ipfw 8 847since yesterday's check. 848.It Va security_status_ipfwdenied_period 849.Pq Vt str 850Set to either 851.Dq Li daily , 852.Dq Li weekly , 853.Dq Li monthly 854or 855.Dq Li NO . 856.It Va security_status_ipfdenied_enable 857.Pq Vt bool 858Set to 859.Dq Li YES 860to show log entries for packets denied by 861.Xr ipf 8 862since yesterday's check. 863.It Va security_status_ipfdenied_period 864.Pq Vt str 865Set to either 866.Dq Li daily , 867.Dq Li weekly , 868.Dq Li monthly 869or 870.Dq Li NO . 871.It Va security_status_pfdenied_enable 872.Pq Vt bool 873Set to 874.Dq Li YES 875to show log entries for packets denied by 876.Xr pf 4 877since yesterday's check. 878.It Va security_status_pfdenied_period 879.Pq Vt str 880Set to either 881.Dq Li daily , 882.Dq Li weekly , 883.Dq Li monthly 884or 885.Dq Li NO . 886.It Va security_status_ipfwlimit_enable 887.Pq Vt bool 888Set to 889.Dq Li YES 890to display 891.Xr ipfw 8 892rules that have reached their verbosity limit. 893.It Va security_status_ipfwlimit_period 894.Pq Vt str 895Set to either 896.Dq Li daily , 897.Dq Li weekly , 898.Dq Li monthly 899or 900.Dq Li NO . 901.It Va security_status_kernelmsg_enable 902.Pq Vt bool 903Set to 904.Dq Li YES 905to show new 906.Xr dmesg 8 907entries since yesterday's check. 908.It Va security_status_kernelmsg_period 909.Pq Vt str 910Set to either 911.Dq Li daily , 912.Dq Li weekly , 913.Dq Li monthly 914or 915.Dq Li NO . 916.It Va security_status_loginfail_enable 917.Pq Vt bool 918Set to 919.Dq Li YES 920to display failed logins from 921.Pa /var/log/messages 922in the previous day. 923.It Va security_status_loginfail_period 924.Pq Vt str 925Set to either 926.Dq Li daily , 927.Dq Li weekly , 928.Dq Li monthly 929or 930.Dq Li NO . 931.It Va security_status_tcpwrap_enable 932.Pq Vt bool 933Set to 934.Dq Li YES 935to display connections denied by tcpwrappers (see 936.Xr hosts_access 5 ) 937from 938.Pa /var/log/messages 939during the previous day. 940.It Va security_status_tcpwrap_period 941.Pq Vt str 942Set to either 943.Dq Li daily , 944.Dq Li weekly , 945.Dq Li monthly 946or 947.Dq Li NO . 948.El 949.Sh FILES 950.Bl -tag -width ".Pa /etc/defaults/periodic.conf" 951.It Pa /etc/defaults/periodic.conf 952The default configuration file. 953This file contains all default variables and values. 954.It Pa /etc/periodic.conf 955The usual system specific variable override file. 956.It Pa /etc/periodic.conf.local 957An additional override file, useful when 958.Pa /etc/periodic.conf 959is shared or distributed. 960.El 961.Sh SEE ALSO 962.Xr apropos 1 , 963.Xr calendar 1 , 964.Xr df 1 , 965.Xr diff 1 , 966.Xr gzip 1 , 967.Xr locate 1 , 968.Xr man 1 , 969.Xr msgs 1 , 970.Xr netstat 1 , 971.Xr nice 1 , 972.Xr pkg_version 1 , 973.Xr login.conf 5 , 974.Xr rc.conf 5 , 975.Xr ac 8 , 976.Xr chkgrp 8 , 977.Xr dump 8 , 978.Xr newsyslog 8 , 979.Xr periodic 8 , 980.Xr sendmail 8 981.Sh HISTORY 982The 983.Nm 984file appeared in 985.Fx 4.1 . 986.Sh AUTHORS 987.An Brian Somers Aq brian@Awfulhak.org 988