1.\" Copyright (c) 1995 2.\" Jordan K. Hubbard 3.\" 4.\" Redistribution and use in source and binary forms, with or without 5.\" modification, are permitted provided that the following conditions 6.\" are met: 7.\" 1. Redistributions of source code must retain the above copyright 8.\" notice, this list of conditions and the following disclaimer. 9.\" 2. Redistributions in binary form must reproduce the above copyright 10.\" notice, this list of conditions and the following disclaimer in the 11.\" documentation and/or other materials provided with the distribution. 12.\" 13.\" THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND 14.\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 15.\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 16.\" ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR BE LIABLE 17.\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 18.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 19.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 20.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 21.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 22.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 23.\" SUCH DAMAGE. 24.\" 25.\" $FreeBSD$ 26.\" 27.Dd March 3, 2002 28.Dt RC.CONF 5 29.Os 30.Sh NAME 31.Nm rc.conf 32.Nd system configuration information 33.Sh DESCRIPTION 34The file 35.Nm 36contains descriptive information about the local host name, configuration 37details for any potential network interfaces and which services should be 38started up at system initial boot time. 39In new installations, the 40.Nm 41file is generally initialized by the system installation utility, 42.Xr sysinstall 8 . 43.Pp 44The purpose of 45.Nm 46is not to run commands or perform system startup actions 47directly. 48Instead, it is included by the 49various generic startup scripts in 50.Pa /etc 51which conditionalize their 52internal actions according to the settings found there. 53.Pp 54The 55.Pa /etc/rc.conf 56file is included from the file 57.Pa /etc/defaults/rc.conf , 58which specifies the default settings for all the available options. 59Options need only be specified in 60.Pa /etc/rc.conf 61when the system administrator wishes to override these defaults. 62The file 63.Pa /etc/rc.conf.local 64is used to override settings in 65.Pa /etc/rc.conf 66for historical reasons. 67See the 68.Va rc_conf_files 69variable below. 70.Pp 71The following list provides a name and short description for each 72variable that can be set in the 73.Nm 74file: 75.Bl -tag -width indent-two 76.It Va swapfile 77.Pq Vt str 78If set to 79.Dq Li NO , 80no swapfile is installed, otherwise the value is used as the full 81pathname to a file to use for additional swap space. 82.It Va apm_enable 83.Pq Vt bool 84If set to 85.Dq Li YES , 86enable support for Automatic Power Management with 87the 88.Xr apm 8 89command. 90.It Va apmd_enable 91.Pq Vt bool 92Run 93.Xr apmd 8 94to handle APM event from userland. 95This also enables support for APM. 96.It Va apmd_flags 97.Pq Vt str 98If 99.Va apmd_enable 100is set to 101.Dq Li YES , 102these are the flags to pass to the 103.Xr apmd 8 104daemon. 105.It Va pccard_enable 106.Pq Vt bool 107If set to 108.Dq Li YES , 109enable PCCARD support at boot time. 110.It Va pccard_mem 111.Pq Vt str 112Set to PCCARD controller memory address or 113.Dq Li DEFAULT 114for the default value. 115.It Va pccard_ifconfig 116.Pq Vt str 117List of arguments to be passed to 118.Xr ifconfig 8 119at boot time or on 120insertion of the card (e.g.\& 121.Dq Cm inet Li 192.168.1.1 Cm netmask Li 255.255.255.0 122for a fixed address or 123.Dq Li DHCP 124for a DHCP client). 125.It Va pccard_beep 126.Pq Vt int 127If 0, 128set the PCCARD controller to silent mode. 129If 1, 130set it to beep mode. 131If 2, 132set it to melody mode. 133.It Va pccard_conf 134.Pq Vt str 135Path to the configuration file for the 136.Xr pccardd 8 137daemon (e.g.\& 138.Pa /etc/pccard.conf.sample ) . 139.It Va pccardd_flags 140.Pq Vt str 141If 142.Va pccard_enable 143is set to 144.Dq Li YES , 145these are the flags to pass to the 146.Xr pccardd 8 147daemon. 148.It Va pccard_ether_delay 149.Pq Vt str 150Set the delay before starting 151.Xr dhclient 8 152in 153.Xr pccard_ether 8 154script. 155This defaults to 5 seconds to work around a bug in the 156.Xr ed 4 157driver which can lead to system hangs when using some newer 158.Xr ed 4 159based cards. 160.It Va removable_interfaces 161.Pq Vt str 162List of removable network interfaces to be supported by 163.Pa /etc/pccard_ether . 164.It Va local_startup 165.Pq Vt str 166List of directories to search for startup script files. 167.It Va script_name_sep 168.Pq Vt str 169The field separator to use for breaking down the list of startup script files 170into individual filenames. 171The default is a space. 172It is not necessary to change this unless there are startup scripts with names 173containing spaces. 174.It Va hostname 175.Pq Vt str 176The fully qualified domain name (FQDN) of this host on the network. 177This should almost certainly be set to something meaningful, even if 178there is no network connection. 179If 180.Xr dhclient 8 181is used to set the hostname via DHCP, 182this variable should be set to an empty string. 183.It Va nisdomainname 184.Pq Vt str 185The NIS domain name of this host, or 186.Dq Li NO 187if NIS is not used. 188.It Va dhcp_program 189.Pq Vt str 190Path to the DHCP client program 191.Pa ( /sbin/dhclient , 192the ISC DHCP client, 193is the default). 194.It Va dhcp_flags 195.Pq Vt str 196Additional flags to pass to the DHCP client program. 197For the ISC DHCP client, see the 198.Xr dhclient 8 199manpage for a description of the command line options available. 200.It Va firewall_enable 201.Pq Vt bool 202Set to 203.Dq Li YES 204to load firewall rules at startup. 205If the kernel was not built with 206.Cd "options IPFIREWALL" , 207the 208.Pa ipfw.ko 209kernel module will be loaded. 210See also 211.Va ipfilter_enable . 212.It Va firewall_script 213.Pq Vt str 214This variable specifies the full path to the firewall script to run. 215The default is 216.Pa /etc/rc.firewall . 217.It Va firewall_type 218.Pq Vt str 219Names the firewall type from the selection in 220.Pa /etc/rc.firewall , 221or the file which contains the local firewall ruleset. 222Valid selections from 223.Pa /etc/rc.firewall 224are: 225.Pp 226.Bl -tag -width ".Li simple" -compact 227.It Li open 228unrestricted IP access 229.It Li closed 230all IP services disabled, except via 231.Dq Li lo0 232.It Li client 233basic protection for a workstation 234.It Li simple 235basic protection for a LAN. 236.El 237.Pp 238If a filename is specified, the full path 239must be given. 240.It Va firewall_quiet 241.Pq Vt bool 242Set to 243.Dq Li YES 244to disable the display of firewall rules on the console during boot. 245.It Va firewall_logging 246.Pq Vt bool 247Set to 248.Dq Li YES 249to enable firewall event logging. 250This is equivalent to the 251.Dv IPFIREWALL_VERBOSE 252kernel option. 253.It Va firewall_flags 254.Pq Vt str 255Flags passed to 256.Xr ipfw 8 257if 258.Va firewall_type 259specifies a filename. 260.It Va natd_program 261.Pq Vt str 262Path to 263.Xr natd 8 . 264.It Va natd_enable 265.Pq Vt bool 266Set to 267.Dq Li YES 268to enable 269.Xr natd 8 . 270.Va firewall_enable 271must also be set to 272.Dq Li YES , 273and 274.Xr divert 4 275sockets must be enabled in the kernel. 276.It Va natd_interface 277.Pq Vt str 278This is the name of the public interface on which 279.Xr natd 8 280should run. 281The interface may be given as an interface name or as an IP address. 282.It Va natd_flags 283.Pq Vt str 284Additional 285.Xr natd 8 286flags should be placed here. 287The 288.Fl n 289or 290.Fl a 291flag is automatically added with the above 292.Va natd_interface 293as an argument. 294.\" ----- ipfilter_enable setting -------------------------------- 295.It Va ipfilter_enable 296.Pq Vt bool 297Set to 298.Dq Li NO 299by default. 300Setting this to 301.Dq Li YES 302enables 303.Xr ipf 8 304packet filtering. 305.Pp 306Typical usage will require putting 307.Bd -literal 308ipfilter_enable="YES" 309ipnat_enable="YES" 310ipmon_enable="YES" 311ipfs_enable="YES" 312.Ed 313.Pp 314into 315.Pa /etc/rc.conf 316and editing 317.Pa /etc/ipf.rules 318and 319.Pa /etc/ipnat.rules 320appropriately. 321.Pp 322Note that 323.Va ipfilter_enable 324and 325.Va ipnat_enable 326can be enabled independently. 327.Va ipmon_enable 328and 329.Va ipfs_enable 330both require at least one of 331.Va ipfilter_enable 332and 333.Va ipnat_enable 334to be enabled. 335.Pp 336Having 337.Bd -literal 338options IPFILTER 339options IPFILTER_LOG 340options IPFILTER_DEFAULT_BLOCK 341.Ed 342.Pp 343in the kernel configuration file is a good idea, too. 344.\" ----- ipfilter_program setting ------------------------------ 345.It Va ipfilter_program 346.Pq Vt str 347Path to 348.Xr ipf 8 349(default 350.Pa /sbin/ipf ) . 351.\" ----- ipfilter_rules setting -------------------------------- 352.It Va ipfilter_rules 353.Pq Vt str 354Set to 355.Pa /etc/ipf.rules 356by default. 357This variable contains the name of the filter rule definition file. 358The file is expected to be readable for the 359.Xr ipf 8 360command to execute. 361.\" ----- ipfilter_flags setting -------------------------------- 362.It Va ipfilter_flags 363.Pq Vt str 364Empty by default. 365This variable contains flags passed to the 366.Xr ipf 8 367program. 368.\" ----- ipnat_enable setting ---------------------------------- 369.It Va ipnat_enable 370.Pq Vt bool 371Set to 372.Dq Li NO 373by default. 374Set it to 375.Dq Li YES 376to enable 377.Xr ipnat 1 378network address translation. 379See 380.Va ipfilter_enable 381for a detailed discussion. 382.\" ----- ipnat_program setting --------------------------------- 383.It Va ipnat_program 384.Pq Vt str 385Path to 386.Xr ipnat 1 387(default 388.Pa /sbin/ipnat ) . 389.\" ----- ipnat_rules setting ----------------------------------- 390.It Va ipnat_rules 391.Pq Vt str 392Set to 393.Pa /etc/ipnat.rules 394by default. 395This variable contains the name of the file 396holding the network address translation definition. 397This file is expected to be readable for the 398.Xr ipnat 1 399command to execute. 400.\" ----- ipnat_flags setting ----------------------------------- 401.It Va ipnat_flags 402.Pq Vt str 403Empty by default. 404This variable contains flags passed to the 405.Xr ipnat 1 406program. 407.\" ----- ipmon_enable setting ---------------------------------- 408.It Va ipmon_enable 409.Pq Vt bool 410Set to 411.Dq Li NO 412by default. 413Set it to 414.Dq Li YES 415to enable 416.Xr ipmon 8 417monitoring (logging 418.Xr ipf 8 419and 420.Xr ipnat 1 421events). 422Setting this variable needs setting 423.Va ipfilter_enable 424or 425.Va ipnat_enable 426too. 427See 428.Va ipfilter_enable 429for a detailed discussion. 430.\" ----- ipmon_program setting --------------------------------- 431.It Va ipmon_program 432.Pq Vt str 433Path to 434.Xr ipmon 8 435(default 436.Pa /sbin/ipmon ) . 437.\" ----- ipmon_flags setting ----------------------------------- 438.It Va ipmon_flags 439.Pq Vt str 440Set to 441.Dq Li -Ds 442by default. 443This variable contains flags passed to the 444.Xr ipmon 8 445program. 446Another typical example would be 447.Dq Fl D Pa /var/log/ipflog 448to have 449.Xr ipmon 8 450log directly to a file bypassing 451.Xr syslogd 8 . 452Make sure to adjust 453.Pa /etc/newsyslog.conf 454in such case like this: 455.Bd -literal 456/var/log/ipflog 640 10 100 * Z /var/run/ipmon.pid 457.Ed 458.\" ----- ipfs_enable setting ----------------------------------- 459.It Va ipfs_enable 460.Pq Vt bool 461Set to 462.Dq Li NO 463by default. 464Set it to 465.Dq Li YES 466to enable 467.Xr ipfs 8 468saving the filter and NAT state tables during shutdown 469and reloading them during startup again. 470Setting this variable needs setting 471.Va ipfilter_enable 472or 473.Va ipnat_enable 474to 475.Dq Li YES 476too. 477See 478.Va ipfilter_enable 479for a detailed discussion. 480Note that if 481.Va kern_securelevel 482is set to 3, 483.Va ipfs_enable 484cannot be used 485because the raised securelevel will prevent 486.Xr ipfs 8 487from saving the state tables at shutdown time. 488.\" ----- ipfs_program setting ---------------------------------- 489.It Va ipfs_program 490.Pq Vt str 491Path to 492.Xr ipfs 8 493(default 494.Pa /sbin/ipfs ) . 495.\" ----- ipfs_flags setting ------------------------------------ 496.It Va ipfs_flags 497.Pq Vt str 498Empty by default. 499This variable contains flags passed to the 500.Xr ipfs 8 501program. 502.\" ----- end of added ipf hook --------------------------------- 503.It Va tcp_extensions 504.Pq Vt bool 505Set to 506.Dq Li YES 507by default. 508Setting this to 509.Dq Li NO 510disables certain TCP options as described by 511.Rs 512.%T "RFC 1323" 513.Re 514Setting this to 515.Dq Li NO 516might help remedy such problems with connections as randomly hanging 517or other weird behavior. 518Some network devices are known 519to be broken with respect to these options. 520.It Va log_in_vain 521.Pq Vt int 522Set to 0 by default. 523The 524.Xr sysctl 8 525variables, 526.Va net.inet.tcp.log_in_vain 527and 528.Va net.inet.udp.log_in_vain , 529as described in 530.Xr tcp 4 531and 532.Xr udp 4 , 533are set to the given value. 534.It Va tcp_keepalive 535.Pq Vt bool 536Set to 537.Dq Li YES 538by default. 539Setting to 540.Dq Li NO 541will disable probing idle TCP connections to verify that the 542peer is still up and reachable. 543.It Va tcp_drop_synfin 544.Pq Vt bool 545Set to 546.Dq Li NO 547by default. 548Setting to 549.Dq Li YES 550will cause the kernel to ignore TCP frames that have both 551the SYN and FIN flags set. 552This prevents OS fingerprinting, but may 553break some legitimate applications. 554This option is only available if the 555kernel was built with the 556.Dv TCP_DROP_SYNFIN 557option. 558.It Va icmp_drop_redirect 559.Pq Vt bool 560Set to 561.Dq Li NO 562by default. 563Setting to 564.Dq Li YES 565will cause the kernel to ignore ICMP REDIRECT packets. 566.It Va icmp_log_redirect 567.Pq Vt bool 568Set to 569.Dq Li NO 570by default. 571Setting to 572.Dq Li YES 573will cause the kernel to log ICMP REDIRECT packets. 574Note that 575the log messages are not rate-limited, so this option should only be used 576for troubleshooting networks. 577.It Va network_interfaces 578.Pq Vt str 579Set to the list of network interfaces to configure on this host. 580For example, if the only network devices in the system are the loopback 581device 582.Pq Li lo0 583and a NIC using the 584.Xr ed 4 585driver, 586this could be set to 587.Dq Li "lo0 ed0" . 588An 589.Va ifconfig_ Ns Aq Ar interface 590variable is also assumed to exist for each value of 591.Ar interface . 592It is also possible to add IP alias entries here in cases where 593multiple IP addresses registered against a single interface 594are desired. 595Assuming that the interface in question was 596.Li ed0 , 597it might look 598something like this: 599.Bd -literal 600ifconfig_ed0_alias0="inet 127.0.0.253 netmask 0xffffffff" 601ifconfig_ed0_alias1="inet 127.0.0.254 netmask 0xffffffff" 602.Ed 603.Pp 604And so on. 605For each 606.Va ifconfig_ Ns Ao Ar interface Ac Ns Va _alias Ns Aq Ar n 607entry that is found, 608its contents are passed to 609.Xr ifconfig 8 . 610Execution stops at the first unsuccessful access, so if 611something like this is present: 612.Bd -literal 613ifconfig_ed0_alias0="inet 127.0.0.251 netmask 0xffffffff" 614ifconfig_ed0_alias1="inet 127.0.0.252 netmask 0xffffffff" 615ifconfig_ed0_alias2="inet 127.0.0.253 netmask 0xffffffff" 616ifconfig_ed0_alias4="inet 127.0.0.254 netmask 0xffffffff" 617.Ed 618.Pp 619Then note that alias4 would 620.Em not 621be added since the search would 622stop with the missing alias3 entry. 623.Pp 624It is possible to bring up an interface with DHCP by setting the 625.Va ifconfig_ Ns Aq Ar interface 626variable to 627.Dq Li DHCP . 628For instance, to initialize the 629.Li ed0 630device via DHCP, 631it is possible to use something like: 632.Bd -literal 633ifconfig_ed0="DHCP" 634.Ed 635.It Va cloned_interfaces 636.Pq Vt str 637Set to the list of clonable network interfaces to create on this host. 638Entries in 639.Va cloned_interfaces 640are automatically appended to 641.Va network_interfaces 642for configuration. 643.It Va gif_interfaces 644.Pq Vt str 645Set to the list of 646.Xr gif 4 647tunnel interfaces to configure on this host. 648A 649.Va gifconfig_ Ns Aq Ar interface 650variable is assumed to exist for each value of 651.Ar interface . 652The value of this variable is used to configure the link layer of the 653tunnel according to the syntax of the 654.Cm tunnel 655option to 656.Xr ifconfig 8 . 657Additionally, this option ensures that each listed interface is created 658via the 659.Cm create 660option to 661.Xr ifconfig 8 662before attempting to configure it. 663.It Va ppp_enable 664.Pq Vt bool 665If set to 666.Dq Li YES , 667run the 668.Xr ppp 8 669daemon. 670.It Va ppp_mode 671.Pq Vt str 672Mode in which to run the 673.Xr ppp 8 674daemon. 675Accepted modes are 676.Dq Li auto , 677.Dq Li ddial , 678.Dq Li direct 679and 680.Dq Li dedicated . 681See the manual for a full description. 682.It Va ppp_nat 683.Pq Vt bool 684If set to 685.Dq Li YES , 686enables network address translation. 687Used in conjunction with 688.Va gateway_enable 689allows hosts on private network addresses access to the Internet using 690this host as a network address translating router. 691.It Va ppp_profile 692.Pq Vt str 693The name of the profile to use from 694.Pa /etc/ppp/ppp.conf . 695.It Va ppp_user 696.Pq Vt str 697The name of the user under which 698.Xr ppp 8 699should be started. 700By 701default, 702.Xr ppp 8 703is started as 704.Dq Li root . 705.It Va rc_conf_files 706.Pq Vt str 707This option is used to specify a list of files that will override 708the settings in 709.Pa /etc/defaults/rc.conf . 710The files will be read in the order in which they are specified and should 711include the full path to the file. 712By default, the files specified are 713.Pa /etc/rc.conf 714and 715.Pa /etc/rc.conf.local 716.It Va fsck_y_enable 717.Pq Vt bool 718If set to 719.Dq Li YES , 720.Xr fsck 8 721will be run with the 722.Fl y 723flag if the initial preen 724of the filesystems fails. 725.It Va background_fsck 726.Pq Vt bool 727If set to 728.Dq Li YES , 729the system will attempt to run 730.Xr fsck 8 731in the background where possible. 732.It Va extra_netfs_types 733.Pq Vt str 734If set to something other than 735.Dq Li NO 736(the default), 737this variable extends the list of filesystem types 738for which automatic mounting at startup by 739.Xr rc 8 740should be delayed until the network is initialized. 741It should contain 742a whitespace-separated list of network filesystem descriptor pairs, 743each consisting of a filesystem type as passed to 744.Xr mount 8 745and a human-readable, one-word description, 746joined with a colon 747.Pq Ql \&: . 748Extending the default list in this way is only necessary 749when third party filesystem types are used. 750.It Va syslogd_enable 751.Pq Vt bool 752If set to 753.Dq Li YES , 754run the 755.Xr syslogd 8 756daemon. 757.It Va syslogd_program 758.Pq Vt str 759Path to 760.Xr syslogd 8 761(default 762.Pa /usr/sbin/syslogd ) . 763.It Va syslogd_flags 764.Pq Vt str 765If 766.Va syslogd_enable 767is set to 768.Dq Li YES , 769these are the flags to pass to 770.Xr syslogd 8 . 771.It Va inetd_enable 772.Pq Vt bool 773If set to 774.Dq Li YES , 775run the 776.Xr inetd 8 777daemon. 778.It Va inetd_program 779.Pq Vt str 780Path to 781.Xr inetd 8 782(default 783.Pa /usr/sbin/inetd ) . 784.It Va inetd_flags 785.Pq Vt str 786If 787.Va inetd_enable 788is set to 789.Dq Li YES , 790these are the flags to pass to 791.Xr inetd 8 . 792.It Va named_enable 793.Pq Vt bool 794If set to 795.Dq Li YES , 796run the 797.Xr named 8 798daemon. 799.It Va named_program 800.Pq Vt str 801Path to 802.Xr named 8 803(default 804.Pa /usr/sbin/named ) . 805.It Va named_flags 806.Pq Vt str 807If 808.Va named_enable 809is set to 810.Dq Li YES , 811these are the flags to pass to 812.Xr named 8 . 813.It Va kerberos4_server_enable 814.Pq Vt bool 815Set to 816.Dq Li YES 817to start a Kerberos IV authentication server 818at boot time. 819.It Va kadmind4_server_enable 820.Pq Vt bool 821Set to 822.Dq Li YES 823to start 824.Xr kadmind 8 , 825the Kerberos IV Administration Daemon; set to 826.Dq Li NO 827on a slave server. 828.It Va kerberos_stash 829.Pq Vt str 830If 831.Dq Li YES , 832instruct the Kerberos servers to use the stashed master key instead of 833prompting for it (only if 834.Va kerberos_server_enable 835is set to 836.Dq Li YES , 837and is used for both 838.Xr kerberos 1 839and 840.Xr kadmind 8 ) . 841.It Va kerberos5_server_enable 842.Pq Vt bool 843Set to 844.Dq Li YES 845to start a Kerberos 5 authentication server 846at boot time. 847.It Va kadmind5_server_enable 848.Pq Vt bool 849Set to 850.Dq Li YES 851to start 852.Xr k5admind 8 , 853the Kerberos 5 Administration Daemon; set to 854.Dq Li NO 855on a slave server. 856.It Va rwhod_enable 857.Pq Vt bool 858If set to 859.Dq Li YES , 860run the 861.Xr rwhod 8 862daemon at boot time. 863.It Va rwhod_flags 864.Pq Vt str 865If 866.Va rwhod_enable 867is set to 868.Dq Li YES , 869these are the flags to pass to it. 870.It Va amd_enable 871.Pq Vt bool 872If set to 873.Dq Li YES , 874run the 875.Xr amd 8 876daemon at boot time. 877.It Va amd_flags 878.Pq Vt str 879If 880.Va amd_enable 881is set to 882.Dq Li YES , 883these are the flags to pass to it. 884See the 885.Xr amd 8 886manpage for more information. 887.It Va amd_map_program 888.Pq Vt str 889If set, 890the specified program is run to get the list of 891.Xr amd 8 892maps. 893For example, if the 894.Xr amd 8 895maps are stored in NIS, one can set this to 896run 897.Xr ypcat 1 898to get a list of 899.Xr amd 8 900maps from the 901.Pa amd.master 902NIS map. 903.It Va update_motd 904.Pq Vt bool 905If set to 906.Dq Li YES , 907.Pa /etc/motd 908will be updated at boot time to reflect the kernel release 909being run. 910If set to 911.Dq Li NO , 912.Pa /etc/motd 913will not be updated. 914.It Va nfs_client_enable 915.Pq Vt bool 916If set to 917.Dq Li YES , 918run the NFS client daemons at boot time. 919.It Va nfs_access_cache 920.Pq Vt int 921If 922.Va nfs_client_enable 923is set to 924.Dq Li YES , 925this can be set to 926.Dq Li 0 927to disable NFS ACCESS RPC caching, or to the number of seconds for which 928NFS ACCESS 929results should be cached. 930A value of 2-10 seconds will substantially reduce network 931traffic for many NFS operations. 932.It Va nfs_server_enable 933.Pq Vt bool 934If set to 935.Dq Li YES , 936run the NFS server daemons at boot time. 937.It Va nfs_server_flags 938.Pq Vt str 939If 940.Va nfs_server_enable 941is set to 942.Dq Li YES , 943these are the flags to pass to the 944.Xr nfsd 8 945daemon. 946.It Va mountd_enable 947.Pq Vt bool 948If set to 949.Dq Li YES , 950and no 951.Va nfs_server_enable 952is set, start 953.Xr mountd 8 , 954but not 955.Xr nfsd 8 956daemon. 957It is commonly needed to run CFS without real NFS used. 958.It Va weak_mountd_authentication 959.Pq Vt bool 960If set to 961.Dq Li YES , 962allow services like PCNFSD to make non-privileged mount 963requests. 964.It Va nfs_privport 965.Pq Vt bool 966If set to 967.Dq Li YES , 968provide NFS services only on a secure port. 969.It Va nfs_bufpackets 970.Pq Vt int 971If set to a number, indicates the number of packets worth of 972socket buffer space to reserve on an NFS client. 973If set to 974.Dq Li DEFAULT , 975the kernel default is used (typically 4). 976Using a higher number may be 977useful on gigabit networks to improve performance. 978The minimum value is 9792 and the maximum is 64. 980.It Va rpc_lockd_enable 981.Pq Vt bool 982If set to 983.Dq Li YES 984and also an NFS server, run 985.Xr rpc.lockd 8 986at boot time. 987.It Va rpc_statd_enable 988.Pq Vt bool 989If set to 990.Dq Li YES 991and also an NFS server, run 992.Xr rpc.statd 8 993at boot time. 994.It Va rpcbind_program 995.Pq Vt str 996Path to 997.Xr rpcbind 8 998(default 999.Pa /usr/sbin/rpcbind ) . 1000.It Va rpcbind_enable 1001.Pq Vt bool 1002If set to 1003.Dq Li YES , 1004run the 1005.Xr rpcbind 8 1006service at boot time. 1007.It Va rpcbind_flags 1008.Pq Vt str 1009If 1010.Va rpcbind_enable 1011is set to 1012.Dq Li YES , 1013these are the flags to pass to the 1014.Xr rpcbind 8 1015daemon. 1016.It Va xtend_enable 1017.Pq Vt bool 1018If set to 1019.Dq Li YES , 1020run the 1021.Xr xtend 8 1022daemon at boot time. 1023.It Va xtend_flags 1024.Pq Vt str 1025If 1026.Va xtend_enable 1027is set to 1028.Dq Li YES , 1029these are the flags to pass to the 1030.Xr xtend 8 1031daemon. 1032.It Va pppoed_enable 1033.Pq Vt bool 1034If set to 1035.Dq Li YES , 1036run the 1037.Xr pppoed 8 1038daemon at boot time to provide PPP over Ethernet services. 1039.It Va pppoed_ Ns Ar provider 1040.Pq Vt str 1041.Xr pppoed 8 1042listens to requests to this 1043.Ar provider 1044and ultimately runs 1045.Xr ppp 8 1046with a 1047.Ar system 1048argument of the same name. 1049.It Va pppoed_flags 1050.Pq Vt str 1051Additional flags to pass to 1052.Xr pppoed 8 . 1053.It Va pppoed_interface 1054.Pq Vt str 1055The network interface to run 1056.Xr pppoed 8 1057on. 1058This is mandatory when 1059.Va pppoed_enable 1060is set to 1061.Dq Li YES . 1062.It Va timed_enable 1063.Pq Vt boot 1064If set to 1065.Dq Li YES , 1066run the 1067.Xr timed 8 1068service at boot time. 1069This command is intended for networks of 1070machines where a consistent 1071.Dq "network time" 1072for all hosts must be established. 1073This is often useful in large NFS 1074environments where time stamps on files are expected to be consistent 1075network-wide. 1076.It Va timed_flags 1077.Pq Vt str 1078If 1079.Va timed_enable 1080is set to 1081.Dq Li YES , 1082these are the flags to pass to the 1083.Xr timed 8 1084service. 1085.It Va ntpdate_enable 1086.Pq Vt bool 1087If set to 1088.Dq Li YES , 1089run 1090.Xr ntpdate 8 1091at system startup. 1092This command is intended to 1093synchronize the system clock only 1094.Em once 1095from some standard reference. 1096An option to set this up initially 1097(from a list of known servers) is also provided by the 1098.Xr sysinstall 8 1099program when the system is first installed. 1100.It Va ntpdate_program 1101.Pq Vt str 1102Path to 1103.Xr ntpdate 8 1104(default 1105.Pa /usr/sbin/ntpdate ) . 1106.It Va ntpdate_flags 1107.Pq Vt str 1108If 1109.Va ntpdate_enable 1110is set to 1111.Dq Li YES , 1112these are the flags to pass to the 1113.Xr ntpdate 8 1114command (typically a hostname). 1115.It Va ntpd_enable 1116.Pq Vt bool 1117If set to 1118.Dq Li YES , 1119run the 1120.Xr ntpd 8 1121command at boot time. 1122.It Va ntpd_program 1123.Pq Vt str 1124Path to 1125.Xr ntpd 8 1126(default 1127.Pa /usr/sbin/ntpd ) . 1128.It Va ntpd_flags 1129.Pq Vt str 1130If 1131.Va ntpd_enable 1132is set to 1133.Dq Li YES , 1134these are the flags to pass to the 1135.Xr ntpd 8 1136daemon. 1137.It Va nis_client_enable 1138.Pq Vt bool 1139If set to 1140.Dq Li YES , 1141run the 1142.Xr ypbind 8 1143service at system boot time. 1144.It Va nis_client_flags 1145.Pq Vt str 1146If 1147.Va nis_client_enable 1148is set to 1149.Dq Li YES , 1150these are the flags to pass to the 1151.Xr ypbind 8 1152service. 1153.It Va nis_ypset_enable 1154.Pq Vt bool 1155If set to 1156.Dq Li YES , 1157run the 1158.Xr ypset 8 1159daemon at system boot time. 1160.It Va nis_ypset_flags 1161.Pq Vt str 1162If 1163.Va nis_ypset_enable 1164is set to 1165.Dq Li YES , 1166these are the flags to pass to the 1167.Xr ypset 8 1168daemon. 1169.It Va nis_server_enable 1170.Pq Vt bool 1171If set to 1172.Dq Li YES , 1173run the 1174.Xr ypserv 8 1175daemon at system boot time. 1176.It Va nis_server_flags 1177.Pq Vt str 1178If 1179.Va nis_server_enable 1180is set to 1181.Dq Li YES , 1182these are the flags to pass to the 1183.Xr ypserv 8 1184daemon. 1185.It Va nis_ypxfrd_enable 1186.Pq Vt bool 1187If set to 1188.Dq Li YES , 1189run the 1190.Xr rpc.ypxfrd 8 1191daemon at system boot time. 1192.It Va nis_ypxfrd_flags 1193.Pq Vt str 1194If 1195.Va nis_ypxfrd_enable 1196is set to 1197.Dq Li YES , 1198these are the flags to pass to the 1199.Xr rpc.ypxfrd 8 1200daemon. 1201.It Va nis_yppasswdd_enable 1202.Pq Vt bool 1203If set to 1204.Dq Li YES , 1205run the 1206.Xr rpc.yppasswdd 8 1207daemon at system boot time. 1208.It Va nis_yppasswdd_flags 1209.Pq Vt str 1210If 1211.Va nis_yppasswdd_enable 1212is set to 1213.Dq Li YES , 1214these are the flags to pass to the 1215.Xr rpc.yppasswdd 8 1216daemon. 1217.It Va defaultrouter 1218.Pq Vt str 1219If not set to 1220.Dq Li NO , 1221create a default route to this host name or IP address 1222(use an IP address if this router is also required to get to the 1223name server!). 1224.It Va static_routes 1225.Pq Vt str 1226Set to the list of static routes that are to be added at system 1227boot time. 1228If not set to 1229.Dq Li NO 1230then for each whitespace separated 1231.Ar element 1232in the value, a 1233.Va route_ Ns Aq Ar element 1234variable is assumed to exist 1235whose contents will later be passed to a 1236.Dq Nm route Cm add 1237operation. 1238.It Va gateway_enable 1239.Pq Vt bool 1240If set to 1241.Dq Li YES , 1242configure host to act as an IP router, e.g. to forward packets 1243between interfaces. 1244.It Va router_enable 1245.Pq Vt bool 1246If set to 1247.Dq Li YES , 1248run a routing daemon of some sort, based on the 1249settings of 1250.Va router 1251and 1252.Va router_flags . 1253.It Va router 1254.Pq Vt str 1255If 1256.Va router_enable 1257is set to 1258.Dq Li YES , 1259this is the name of the routing daemon to use. 1260.It Va router_flags 1261.Pq Vt str 1262If 1263.Va router_enable 1264is set to 1265.Dq Li YES , 1266these are the flags to pass to the routing daemon. 1267.It Va mrouted_enable 1268.Pq Vt bool 1269If set to 1270.Dq Li YES , 1271run the multicast routing daemon, 1272.Xr mrouted 8 . 1273.It Va mrouted_flags 1274.Pq Vt str 1275If 1276.Va mrouted_enable 1277is set to 1278.Dq Li YES , 1279these are the flags to pass to the 1280.Xr mrouted 8 1281daemon. 1282.It Va ipxgateway_enable 1283.Pq Vt bool 1284If set to 1285.Dq Li YES , 1286enable the routing of IPX traffic. 1287.It Va ipxrouted_enable 1288.Pq Vt bool 1289If set to 1290.Dq Li YES , 1291run the 1292.Xr IPXrouted 8 1293daemon at system boot time. 1294.It Va ipxrouted_flags 1295.Pq Vt str 1296If 1297.Va ipxrouted_enable 1298is set to 1299.Dq Li YES , 1300these are the flags to pass to the 1301.Xr IPXrouted 8 1302daemon. 1303.It Va arpproxy_all 1304.Pq Vt bool 1305If set to 1306.Dq Li YES , 1307enable global proxy ARP. 1308.It Va forward_sourceroute 1309.Pq Vt bool 1310If set to 1311.Dq Li YES 1312and 1313.Va gateway_enable 1314is also set to 1315.Dq Li YES , 1316source-routed packets are forwarded. 1317.It Va accept_sourceroute 1318.Pq Vt bool 1319If set to 1320.Dq Li YES , 1321the system will accept source-routed packets directed at it. 1322.It Va rarpd_enable 1323.Pq Vt bool 1324If set to 1325.Dq Li YES , 1326run the 1327.Xr rarpd 8 1328daemon at system boot time. 1329.It Va rarpd_flags 1330.Pq Vt str 1331If 1332.Va rarpd_enable 1333is set to 1334.Dq Li YES , 1335these are the flags to pass to the 1336.Xr rarpd 8 1337daemon. 1338.It Va bootparamd_enable 1339.Pq Vt bool 1340If set to 1341.Dq Li YES , 1342run the 1343.Xr bootparamd 8 1344daemon at system boot time. 1345.It Va bootparamd_flags 1346.Pq Vt str 1347If 1348.Va bootparamd_enable 1349is set to 1350.Dq Li YES , 1351these are the flags to pass to the 1352.Xr bootparamd 8 1353daemon. 1354.It Va atm_enable 1355.Pq Vt bool 1356Set to 1357.Dq Li YES 1358to enable the configuration of ATM interfaces at system boot time. 1359For all of the ATM variables described below, please refer to the 1360.Xr atm 8 1361man page for further details on the available command parameters. 1362Also refer to the files in 1363.Pa /usr/share/examples/atm 1364for more detailed configuration information. 1365.It Va atm_netif_ Ns Aq Ar intf 1366.Pq Vt str 1367For the ATM physical interface 1368.Ar intf , 1369this variable defines the name prefix and count for the ATM network 1370interfaces to be created. 1371The value will be passed as the parameters of an 1372.Dq Nm atm Cm "set netif" Ar intf 1373command. 1374.It Va atm_sigmgr_ Ns Aq Ar intf 1375.Pq Vt str 1376For the ATM physical interface 1377.Ar intf , 1378this variable defines the ATM signalling manager to be used. 1379The value will be passed as the parameters of an 1380.Dq Nm atm Cm attach Ar intf 1381command. 1382.It Va atm_prefix_ Ns Aq Ar intf 1383.Pq Vt str 1384For the ATM physical interface 1385.Ar intf , 1386this variable defines the NSAP prefix for interfaces using a UNI signalling 1387manager. 1388If set to 1389.Dq Li ILMI , 1390the prefix will automatically be set via the 1391.Xr ilmid 8 1392daemon. 1393Otherwise, the value will be passed as the parameters of an 1394.Dq Nm atm Cm "set prefix" Ar intf 1395command. 1396.It Va atm_macaddr_ Ns Aq Ar intf 1397.Pq Vt str 1398For the ATM physical interface 1399.Ar intf , 1400this variable defines the MAC address for interfaces using a UNI signalling 1401manager. 1402If set to 1403.Dq Li NO , 1404the hardware MAC address contained in the ATM interface card will be used. 1405Otherwise, the value will be passed as the parameters of an 1406.Dq Nm atm Cm "set mac" Ar intf 1407command. 1408.It Va atm_arpserver_ Ns Aq Ar netif 1409.Pq Vt str 1410For the ATM network interface 1411.Ar netif , 1412this variable defines the ATM address for a host which is to provide ATMARP 1413service. 1414This variable is only applicable to interfaces using a UNI signalling 1415manager. 1416If set to 1417.Dq Li local , 1418this host will become an ATMARP server. 1419The value will be passed as the parameters of an 1420.Dq Nm atm Cm "set arpserver" Ar netif 1421command. 1422.It Va atm_scsparp_ Ns Aq Ar netif 1423.Pq Vt bool 1424If set to 1425.Dq Li YES , 1426SCSP/ATMARP service for the network interface 1427.Ar netif 1428will be initiated using the 1429.Xr scspd 8 1430and 1431.Xr atmarpd 8 1432daemons. 1433This variable is only applicable if 1434.Va atm_arpserver_ Ns Aq Ar netif 1435is set to 1436.Dq Li local . 1437.It Va atm_pvcs 1438.Pq Vt str 1439Set to the list of ATM PVCs to be added at system 1440boot time. 1441For each whitespace separated 1442.Ar element 1443in the value, an 1444.Va atm_pvc_ Ns Aq Ar element 1445variable is assumed to exist. 1446The value of each of these variables 1447will be passed as the parameters of an 1448.Dq Nm atm Cm "add pvc" 1449command. 1450.It Va atm_arps 1451.Pq Vt str 1452Set to the list of permanent ATM ARP entries to be added 1453at system boot time. 1454For each whitespace separated 1455.Ar element 1456in the value, an 1457.Va atm_arp_ Ns Aq Ar element 1458variable is assumed to exist. 1459The value of each of these variables 1460will be passed as the parameters of an 1461.Dq Nm atm Cm "add arp" 1462command. 1463.It Va keymap 1464.Pq Vt str 1465If set to 1466.Dq Li NO , 1467no keymap is installed, otherwise the value is used to install 1468the keymap file in 1469.Pa /usr/share/syscons/keymaps/ Ns Ao Ar value Ac Ns Pa .kbd . 1470.It Va keyrate 1471.Pq Vt str 1472The keyboard repeat speed. 1473Set to 1474.Dq Li slow , 1475.Dq Li normal , 1476.Dq Li fast , 1477or 1478.Dq Li NO 1479if the default behavior is desired. 1480.It Va keychange 1481.Pq Vt str 1482If not set to 1483.Dq Li NO , 1484attempt to program the function keys with the value. 1485The value should 1486be a single string of the form: 1487.Dq Ar funkey_number new_value Op Ar funkey_number new_value ... . 1488.It Va cursor 1489.Pq Vt str 1490Can be set to the value of 1491.Dq Li normal , 1492.Dq Li blink , 1493.Dq Li destructive , 1494or 1495.Dq Li NO 1496to set the cursor behavior explicitly or choose the default behavior. 1497.It Va scrnmap 1498.Pq Vt str 1499If set to 1500.Dq Li NO , 1501no screen map is installed, otherwise the value is used to install 1502the screen map file in 1503.Pa /usr/share/syscons/scrnmaps/ Ns Aq Ar value . 1504.It Va font8x16 1505.Pq Vt str 1506If set to 1507.Dq Li NO , 1508the default 8x16 font value is used for screen size requests, otherwise 1509the value in 1510.Pa /usr/share/syscons/fonts/ Ns Aq Ar value 1511is used. 1512.It Va font8x14 1513.Pq Vt str 1514If set to 1515.Dq Li NO , 1516the default 8x14 font value is used for screen size requests, otherwise 1517the value in 1518.Pa /usr/share/syscons/fonts/ Ns Aq Ar value 1519is used. 1520.It Va font8x8 1521.Pq Vt str 1522If set to 1523.Dq Li NO , 1524the default 8x8 font value is used for screen size requests, otherwise 1525the value in 1526.Pa /usr/share/syscons/fonts/ Ns Aq Ar value 1527is used. 1528.It Va blanktime 1529.Pq Vt int 1530If set to 1531.Dq Li NO , 1532the default screen blanking interval is used, otherwise it is set 1533to 1534.Ar value 1535seconds. 1536.It Va saver 1537.Pq Vt str 1538If not set to 1539.Dq Li NO , 1540this is the actual screen saver to use 1541.Li ( blank , snake , daemon , 1542etc). 1543.It Va moused_enable 1544.Pq Vt str 1545If set to 1546.Dq Li YES , 1547the 1548.Xr moused 8 1549daemon is started for doing cut/paste selection on the console. 1550.It Va moused_type 1551.Pq Vt str 1552This is the protocol type of the mouse connected to this host. 1553This variable must be set if 1554.Va moused_enable 1555is set to 1556.Dq Li YES . 1557The 1558.Xr moused 8 1559daemon 1560is able to detect the appropriate mouse type automatically in many cases. 1561Set this variable to 1562.Dq Li auto 1563to let the daemon detect it, or 1564select one from the following list if the automatic detection fails. 1565.Pp 1566If the mouse is attached to the PS/2 mouse port, choose 1567.Dq Li auto 1568or 1569.Dq Li ps/2 , 1570regardless of the brand and model of the mouse. 1571Likewise, if the 1572mouse is attached to the bus mouse port, choose 1573.Dq Li auto 1574or 1575.Dq Li busmouse . 1576All other protocols are for serial mice and will not work with 1577the PS/2 and bus mice. 1578If this is a USB mouse, 1579.Dq Li auto 1580is the only protocol type which will work. 1581.Pp 1582.Bl -tag -width ".Li x10mouseremote" -compact 1583.It Li microsoft 1584Microsoft mouse (serial) 1585.It Li intellimouse 1586Microsoft IntelliMouse (serial) 1587.It Li mousesystems 1588Mouse systems Corp. mouse (serial) 1589.It Li mmseries 1590MM Series mouse (serial) 1591.It Li logitech 1592Logitech mouse (serial) 1593.It Li busmouse 1594A bus mouse 1595.It Li mouseman 1596Logitech MouseMan and TrackMan (serial) 1597.It Li glidepoint 1598ALPS GlidePoint (serial) 1599.It Li thinkingmouse 1600Kensington ThinkingMouse (serial) 1601.It Li ps/2 1602PS/2 mouse 1603.It Li mmhittab 1604MM HitTablet (serial) 1605.It Li x10mouseremote 1606X10 MouseRemote (serial) 1607.It Li versapad 1608Interlink VersaPad (serial) 1609.El 1610.Pp 1611Even if the mouse is not in the above list, it may be compatible 1612with one in the list. 1613Refer to the man page for 1614.Xr moused 8 1615for compatibility information. 1616.Pp 1617It should also be noted that while this is enabled, any 1618other client of the mouse (such as an X server) should access 1619the mouse through the virtual mouse device, 1620.Pa /dev/sysmouse , 1621and configure it as a 1622.Dq Li sysmouse 1623type mouse, since all 1624mouse data is converted to this single canonical format when 1625using 1626.Xr moused 8 . 1627If the client program does not support the 1628.Dq Li sysmouse 1629type, 1630specify the 1631.Dq Li mousesystems 1632type. 1633It is the second preferred type. 1634.It Va moused_port 1635.Pq Vt str 1636If 1637.Va moused_enable 1638is set to 1639.Dq Li YES , 1640this is the actual port the mouse is on. 1641It might be 1642.Pa /dev/cuaa0 1643for a COM1 serial mouse, 1644.Pa /dev/psm0 1645for a PS/2 mouse or 1646.Pa /dev/mse0 1647for a bus mouse, for example. 1648.It Va moused_flags 1649.Pq Vt str 1650If 1651.Va moused_type 1652is set, these are the additional flags to pass to the 1653.Xr moused 8 1654daemon. 1655.It Va mousechar_start 1656.Pq Vt int 1657If set to 1658.Dq Li NO , 1659the default mouse cursor character range 1660.Li 0xd0 Ns - Ns Li 0xd3 1661is used, 1662otherwise the range start is set 1663to 1664.Ar value 1665character, see 1666.Xr vidcontrol 1 . 1667Use if the default range is occupied in the language code table. 1668.It Va allscreens_flags 1669.Pq Vt str 1670If set, 1671.Xr vidcontrol 1 1672is run with these options for each of the virtual terminals 1673.Pq Pa /dev/ttyv* . 1674For example, 1675.Dq Fl m Cm on 1676will enable the mouse pointer on all virtual terminals 1677if 1678.Va moused_enable 1679is set to 1680.Dq Li YES . 1681.It Va allscreens_kbdflags 1682.Pq Vt str 1683If set, 1684.Xr kbdcontrol 1 1685is run with these options for each of the virtual terminals 1686.Pq Pa /dev/ttyv* . 1687For example, 1688.Dq Fl h Li 200 1689will set the 1690.Xr syscons 4 1691scrollback (history) buffer to 200 lines. 1692.It Va cron_enable 1693.Pq Vt bool 1694If set to 1695.Dq Li YES , 1696run the 1697.Xr cron 8 1698daemon at system boot time. 1699.It Va cron_program 1700.Pq Vt str 1701Path to 1702.Xr cron 8 1703(default 1704.Pa /usr/sbin/cron ) . 1705.It Va cron_flags 1706.Pq Vt str 1707If 1708.Va cron_enable 1709is set to 1710.Dq Li YES , 1711these are the flags to pass to 1712.Xr cron 8 . 1713.It Va lpd_program 1714.Pq Vt str 1715Path to 1716.Xr lpd 8 1717(default 1718.Pa /usr/sbin/lpd ) . 1719.It Va lpd_enable 1720.Pq Vt bool 1721If set to 1722.Dq Li YES , 1723run the 1724.Xr lpd 8 1725daemon at system boot time. 1726.It Va lpd_flags 1727.Pq Vt str 1728If 1729.Va lpd_enable 1730is set to 1731.Dq Li YES , 1732these are the flags to pass to the 1733.Xr lpd 8 1734daemon. 1735.It Va mta_start_script 1736.Pq Vt str 1737This variable specifies the full path to the script to run to start 1738a mail transfer agent. 1739The default is 1740.Pa /etc/rc.sendmail . 1741The 1742.Va sendmail_* 1743variables which 1744.Pa /etc/rc.sendmail 1745uses are documented in the 1746.Xr rc.sendmail 8 1747man page. 1748.It Va dumpdev 1749.Pq Vt str 1750Indicates the device (usually a swap partition) to which a crash dump 1751should be written in the event of a system crash. 1752The value of this variable is passed as the argument to 1753.Xr dumpon 8 . 1754To disable crash dumps, set this variable to 1755.Dq Li NO . 1756.It Va dumpdir 1757.Pq Vt str 1758When the system reboots after a crash and a crash dump is found on the 1759device specified by the 1760.Va dumpdev 1761variable, 1762.Xr savecore 8 1763will save that crash dump and a copy of the kernel to the directory 1764specified by the 1765.Va dumpdir 1766variable. 1767The default value is 1768.Pa /var/crash . 1769Set to 1770.Dq Li NO 1771to not run 1772.Xr savecore 8 1773at boot time when 1774.Va dumpdir 1775is set. 1776.It Va savecore_flags 1777.Pq Vt str 1778If crash dumps are enabled, these are the flags to pass to the 1779.Xr savecore 8 1780utility. 1781.It Va enable_quotas 1782.Pq Vt bool 1783Set to 1784.Dq Li YES 1785to turn on user disk quotas on system startup via the 1786.Xr quotaon 8 1787command. 1788.It Va check_quotas 1789.Pq Vt bool 1790Set to 1791.Dq Li YES 1792to enable user disk quota checking via the 1793.Xr quotacheck 8 1794command. 1795.It Va accounting_enable 1796.Pq Vt bool 1797Set to 1798.Dq Li YES 1799to enable system accounting through the 1800.Xr accton 8 1801facility. 1802.It Va ibcs2_enable 1803.Pq Vt bool 1804Set to 1805.Dq Li YES 1806to enable iBCS2 (SCO) binary emulation at system initial boot 1807time. 1808.It Va ibcs2_loaders 1809.Pq Vt str 1810If not set to 1811.Dq Li NO 1812and if 1813.Va ibcs2_enable 1814is set to 1815.Dq Li YES , 1816this specifies a list of additional iBCS2 loaders to enable. 1817.It Va linux_enable 1818.Pq Vt bool 1819Set to 1820.Dq Li YES 1821to enable Linux/ELF binary emulation at system initial 1822boot time. 1823.It Va osf1_enable 1824.Pq Vt bool 1825Set to 1826.Dq Li YES 1827to enable OSF/1 (Digital UNIX) binary emulation at system 1828initial boot time. 1829(alpha) 1830.It Va clear_tmp_enable 1831.Pq Vt bool 1832Set to 1833.Dq Li YES 1834to have 1835.Pa /tmp 1836cleaned at startup. 1837.It Va ldconfig_paths 1838.Pq Vt str 1839Set to the list of shared library paths to use with 1840.Xr ldconfig 8 . 1841NOTE: 1842.Pa /usr/lib 1843will always be added first, so it need not appear in this list. 1844.It Va ldconfig_insecure 1845.Pq Vt bool 1846The 1847.Xr ldconfig 8 1848utility normally refuses to use directories 1849which are writable by anyone except root. 1850Set this variable to 1851.Dq Li YES 1852to disable that security check during system startup. 1853.It Va kern_securelevel_enable 1854.Pq Vt bool 1855Set to 1856.Dq Li YES 1857to set the kernel security level at system startup. 1858.It Va kern_securelevel 1859.Pq Vt int 1860The kernel security level to set at startup. 1861The allowed range of 1862.Ar value 1863ranges from \-1 (the compile time default) to 3 (the 1864most secure). 1865See 1866.Xr init 8 1867for the list of possible security levels and their effect 1868on system operation. 1869.It Va lomac_enable 1870.Pq Vt bool 1871Set to 1872.Dq Li YES 1873to enable Low Watermark Mandatory Access Control (LOMAC) at boot time. 1874This security model enforces integrity constraints for system processes; 1875see 1876.Xr lomac 4 1877for a complete description of the LOMAC model, as well as its impact 1878on system operation. 1879.It Va start_vinum 1880.Pq Vt bool 1881Set to 1882.Dq Li YES 1883to start 1884.Xr vinum 8 1885at system boot time. 1886.It Va sshd_program 1887.Pq Vt str 1888Path to the SSH server program 1889.Pa ( /usr/sbin/sshd 1890is the default). 1891.It Va sshd_enable 1892.Pq Vt bool 1893Set to 1894.Dq Li YES 1895to start 1896.Xr sshd 8 1897at system boot time. 1898.It Va sshd_flags 1899.Pq Vt str 1900If 1901.Va sshd_enable 1902is set to 1903.Dq Li YES , 1904these are the flags to pass to the 1905.Xr sshd 8 1906daemon. 1907.It Va unaligned_print 1908.Pq Vt bool 1909If set to 1910.Dq Li NO , 1911unaligned access warnings will not be printed. 1912(alpha) 1913.\" ----- isdn settings --------------------------------- 1914.It Va isdn_enable 1915.Pq Vt bool 1916Set to 1917.Dq Li NO 1918by default. 1919When set to 1920.Dq Li YES , 1921starts the 1922.Xr isdnd 8 1923daemon 1924at system boot time. 1925.It Va isdn_flags 1926.Pq Vt str 1927Set to 1928.Dq Fl d Ns Cm n Fl d Ns Li 0x1f9 1929by default. 1930Additional flags to pass to 1931.Xr isdnd 8 1932(but see 1933.Va isdn_fsdev 1934and 1935.Va isdn_ttype 1936for certain tunable parameters). 1937.It Va isdn_ttype 1938.Pq Vt str 1939Set to 1940.Dq Li cons25 1941by default. 1942The terminal type of the output device when 1943.Xr isdnd 8 1944operates in full-screen mode. 1945.It Va isdn_screenflags 1946.Pq Vt str 1947Set to 1948.Dq Li NO 1949by default. 1950The video mode for full-screen mode (only for 1951.Xr syscons 4 1952console driver, see 1953.Xr vidcontrol 1 1954for valid modes). 1955.It Va isdn_fsdev 1956.Pq Vt str 1957Set to 1958.Dq Li NO 1959by default. 1960The output device for 1961.Xr isdnd 8 1962in full-screen mode (or 1963.Dq Li NO 1964for daemon mode). 1965.It Va isdn_trace 1966.Pq Vt bool 1967Set to 1968.Dq Li NO 1969by default. 1970When set to 1971.Dq Li YES , 1972enables the ISDN protocol trace utility 1973.Xr isdntrace 8 1974at system boot time. 1975.It Va isdn_traceflags 1976.Pq Vt str 1977Set to 1978.Dq Fl f Pa /var/tmp/isdntrace0 1979by default. 1980Flags for 1981.Xr isdntrace 8 . 1982.\" ----------------------------------------------------- 1983.It Va pcvt_verbose 1984.Pq Vt bool 1985Set to 1986.Dq Li NO 1987by default. 1988When set to 1989.Dq Li YES , 1990verbose messages about the actions done by the start script are displayed. 1991.Em Note: 1992the pcvt driver must be comiled into the kernel before the pcvt related 1993options described here take any effect. 1994.It Va pcvt_keymap 1995.Pq Vt str 1996Set to 1997.Dq Li NO 1998by default. 1999Use this to configure a national keyboard mapping found in the 2000.Pa /usr/share/misc/keycap.pcvt 2001file of keyboard mappings. 2002(see also the manual pages 2003.Xr keycap 5 2004and 2005.Xr keycap 3 2006for usage of pcvt's keycap database and the manual page 2007.Xr kcon 1 2008option -m for national keyboard mapping configuration). 2009.It Va pcvt_keydel 2010.Pq Vt int 2011Set to 2012.Dq Li NO 2013by default. 2014Used to set the keyboard key repeat delay value. Valid values are 2015in the range 0..3 for delay values of 250, 500, 750 and 1000 msec. 2016(See also the 2017.Xr kcon 1 2018manual page). 2019.It Va pcvt_keyrate 2020.Pq Vt int 2021Set to 2022.Dq Li NO 2023by default. 2024Used to set the keyboard key repetition rate value. Valid values are 2025in the range 0..31 for repetition values of 2..30 characters per second. 2026.It Va pcvt_keyrepeat 2027.Pq Vt bool 2028Set to 2029.Dq Li NO 2030by default. 2031Set to 2032.Dq Li YES 2033to enable automatic keyboard key repeating. 2034.It Va pcvt_force24 2035.Pq Vt bool 2036Set to 2037.Dq Li NO 2038by default. 2039Set to 2040.Dq Li YES 2041to force pcvt to use 24 lines only (in 25 lines mode) for compatibility 2042with the original VT220 terminal. 2043.It Va pcvt_hpext 2044.Pq Vt bool 2045Set to 2046.Dq Li NO 2047by default. 2048Set to 2049.Dq Li YES 2050to enable the display and funtionality of function key labels (as found 2051on Hewlett-Packard terminals such as the HP2392A and the HP700/92 in 2052ANSI mode). 2053.It Va pcvt_lines 2054.Pq Vt int 2055Set to 2056.Dq Li NO 2057by default resulting in a value of 25. 2058Used to set the number of lines on the screen. For VGA displays, valid 2059values are 25, 28, 40 and 50 lines. 2060(See also the 2061.Xr scon 1 2062manual page). 2063.It Va pcvt_blanktime 2064.Pq Vt int 2065Set to 2066.Dq Li NO 2067by default. 2068Used to set the screen saver timeout in seconds for values greater than 2069zero. 2070.It Va pcvt_cursorh 2071.Pq Vt int 2072Set to 2073.Dq Li NO 2074by default. 2075Used to set the cursor top scanline. 2076(See also the 2077.Xr cursor 1 2078manual page). 2079.It Va pcvt_cursorl 2080.Pq Vt int 2081Set to 2082.Dq Li NO 2083by default. 2084Used to set the cursor bottom scanline. 2085.It Va pcvt_monohigh 2086.Pq Vt bool 2087Set to 2088.Dq Li NO 2089by default. 2090Set to 2091.Dq Li YES 2092to set intensity to high on monochrome monitors. 2093(See also the 2094.Xr scon 1 2095manual page, option -p, for more information on changing VGA palette 2096values). 2097.El 2098.Sh FILES 2099.Bl -tag -width ".Pa /etc/defaults/rc.conf" -compact 2100.It Pa /etc/defaults/rc.conf 2101.It Pa /etc/rc.conf 2102.It Pa /etc/rc.conf.local 2103.El 2104.Sh SEE ALSO 2105.Xr catman 1 , 2106.Xr gdb 1 , 2107.Xr info 1 , 2108.Xr makewhatis 1 , 2109.Xr vidcontrol 1 , 2110.Xr tcp 4 , 2111.Xr udp 4 , 2112.Xr exports 5 , 2113.Xr motd 5 , 2114.Xr accton 8 , 2115.Xr amd 8 , 2116.Xr apm 8 , 2117.Xr atm 8 , 2118.Xr cron 8 , 2119.Xr dhclient 8 , 2120.Xr gated 8 , 2121.Xr ifconfig 8 , 2122.Xr inetd 8 , 2123.Xr isdnd 8 , 2124.Xr isdntrace 8 , 2125.Xr lpd 8 , 2126.Xr mdconfig 8 , 2127.Xr moused 8 , 2128.Xr mrouted 8 , 2129.Xr named 8 , 2130.Xr nfsd 8 , 2131.Xr ntpd 8 , 2132.Xr ntpdate 8 , 2133.Xr pcnfsd 8 , 2134.Xr quotacheck 8 , 2135.Xr quotaon 8 , 2136.Xr rc 8 , 2137.Xr rc.sendmail 8 , 2138.Xr route 8 , 2139.Xr routed 8 , 2140.Xr rpc.lockd 8 , 2141.Xr rpc.statd 8 , 2142.Xr rpcbind 8 , 2143.Xr rwhod 8 , 2144.Xr savecore 8 , 2145.Xr sshd 8 , 2146.Xr swapon 8 , 2147.Xr sysctl 8 , 2148.Xr syslogd 8 , 2149.Xr timed 8 , 2150.Xr vinum 8 , 2151.Xr xtend 8 , 2152.Xr yp 8 , 2153.Xr ypbind 8 , 2154.Xr ypserv 8 , 2155.Xr ypset 8 2156.Sh HISTORY 2157The 2158.Nm 2159file appeared in 2160.Fx 2.2.2 . 2161.Sh AUTHORS 2162.An Jordan K. Hubbard . 2163