xref: /freebsd/share/man/man5/rc.conf.5 (revision a3e8fd0b7f663db7eafff527d5c3ca3bcfa8a537)
1.\" Copyright (c) 1995
2.\"	Jordan K. Hubbard
3.\"
4.\" Redistribution and use in source and binary forms, with or without
5.\" modification, are permitted provided that the following conditions
6.\" are met:
7.\" 1. Redistributions of source code must retain the above copyright
8.\"    notice, this list of conditions and the following disclaimer.
9.\" 2. Redistributions in binary form must reproduce the above copyright
10.\"    notice, this list of conditions and the following disclaimer in the
11.\"    documentation and/or other materials provided with the distribution.
12.\"
13.\" THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND
14.\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
15.\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
16.\" ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR BE LIABLE
17.\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
18.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
19.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
20.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
21.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
22.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
23.\" SUCH DAMAGE.
24.\"
25.\" $FreeBSD$
26.\"
27.Dd March 3, 2002
28.Dt RC.CONF 5
29.Os
30.Sh NAME
31.Nm rc.conf
32.Nd system configuration information
33.Sh DESCRIPTION
34The file
35.Nm
36contains descriptive information about the local host name, configuration
37details for any potential network interfaces and which services should be
38started up at system initial boot time.
39In new installations, the
40.Nm
41file is generally initialized by the system installation utility,
42.Xr sysinstall 8 .
43.Pp
44The purpose of
45.Nm
46is not to run commands or perform system startup actions
47directly.
48Instead, it is included by the
49various generic startup scripts in
50.Pa /etc
51which conditionalize their
52internal actions according to the settings found there.
53.Pp
54The
55.Pa /etc/rc.conf
56file is included from the file
57.Pa /etc/defaults/rc.conf ,
58which specifies the default settings for all the available options.
59Options need only be specified in
60.Pa /etc/rc.conf
61when the system administrator wishes to override these defaults.
62The file
63.Pa /etc/rc.conf.local
64is used to override settings in
65.Pa /etc/rc.conf
66for historical reasons.
67See the
68.Va rc_conf_files
69variable below.
70.Pp
71The following list provides a name and short description for each
72variable that can be set in the
73.Nm
74file:
75.Bl -tag -width indent-two
76.It Va swapfile
77.Pq Vt str
78If set to
79.Dq Li NO ,
80no swapfile is installed, otherwise the value is used as the full
81pathname to a file to use for additional swap space.
82.It Va apm_enable
83.Pq Vt bool
84If set to
85.Dq Li YES ,
86enable support for Automatic Power Management with
87the
88.Xr apm 8
89command.
90.It Va apmd_enable
91.Pq Vt bool
92Run
93.Xr apmd 8
94to handle APM event from userland.
95This also enables support for APM.
96.It Va apmd_flags
97.Pq Vt str
98If
99.Va apmd_enable
100is set to
101.Dq Li YES ,
102these are the flags to pass to the
103.Xr apmd 8
104daemon.
105.It Va pccard_enable
106.Pq Vt bool
107If set to
108.Dq Li YES ,
109enable PCCARD support at boot time.
110.It Va pccard_mem
111.Pq Vt str
112Set to PCCARD controller memory address or
113.Dq Li DEFAULT
114for the default value.
115.It Va pccard_ifconfig
116.Pq Vt str
117List of arguments to be passed to
118.Xr ifconfig 8
119at boot time or on
120insertion of the card (e.g.\&
121.Dq Cm inet Li 192.168.1.1 Cm netmask Li 255.255.255.0
122for a fixed address or
123.Dq Li DHCP
124for a DHCP client).
125.It Va pccard_beep
126.Pq Vt int
127If 0,
128set the PCCARD controller to silent mode.
129If 1,
130set it to beep mode.
131If 2,
132set it to melody mode.
133.It Va pccard_conf
134.Pq Vt str
135Path to the configuration file for the
136.Xr pccardd 8
137daemon (e.g.\&
138.Pa /etc/pccard.conf.sample ) .
139.It Va pccardd_flags
140.Pq Vt str
141If
142.Va pccard_enable
143is set to
144.Dq Li YES ,
145these are the flags to pass to the
146.Xr pccardd 8
147daemon.
148.It Va pccard_ether_delay
149.Pq Vt str
150Set the delay before starting
151.Xr dhclient 8
152in
153.Xr pccard_ether 8
154script.
155This defaults to 5 seconds to work around a bug in the
156.Xr ed 4
157driver which can lead to system hangs when using some newer
158.Xr ed 4
159based cards.
160.It Va removable_interfaces
161.Pq Vt str
162List of removable network interfaces to be supported by
163.Pa /etc/pccard_ether .
164.It Va local_startup
165.Pq Vt str
166List of directories to search for startup script files.
167.It Va script_name_sep
168.Pq Vt str
169The field separator to use for breaking down the list of startup script files
170into individual filenames.
171The default is a space.
172It is not necessary to change this unless there are startup scripts with names
173containing spaces.
174.It Va hostname
175.Pq Vt str
176The fully qualified domain name (FQDN) of this host on the network.
177This should almost certainly be set to something meaningful, even if
178there is no network connection.
179If
180.Xr dhclient 8
181is used to set the hostname via DHCP,
182this variable should be set to an empty string.
183.It Va nisdomainname
184.Pq Vt str
185The NIS domain name of this host, or
186.Dq Li NO
187if NIS is not used.
188.It Va dhcp_program
189.Pq Vt str
190Path to the DHCP client program
191.Pa ( /sbin/dhclient ,
192the ISC DHCP client,
193is the default).
194.It Va dhcp_flags
195.Pq Vt str
196Additional flags to pass to the DHCP client program.
197For the ISC DHCP client, see the
198.Xr dhclient 8
199manpage for a description of the command line options available.
200.It Va firewall_enable
201.Pq Vt bool
202Set to
203.Dq Li YES
204to load firewall rules at startup.
205If the kernel was not built with
206.Cd "options IPFIREWALL" ,
207the
208.Pa ipfw.ko
209kernel module will be loaded.
210See also
211.Va ipfilter_enable .
212.It Va firewall_script
213.Pq Vt str
214This variable specifies the full path to the firewall script to run.
215The default is
216.Pa /etc/rc.firewall .
217.It Va firewall_type
218.Pq Vt str
219Names the firewall type from the selection in
220.Pa /etc/rc.firewall ,
221or the file which contains the local firewall ruleset.
222Valid selections from
223.Pa /etc/rc.firewall
224are:
225.Pp
226.Bl -tag -width ".Li simple" -compact
227.It Li open
228unrestricted IP access
229.It Li closed
230all IP services disabled, except via
231.Dq Li lo0
232.It Li client
233basic protection for a workstation
234.It Li simple
235basic protection for a LAN.
236.El
237.Pp
238If a filename is specified, the full path
239must be given.
240.It Va firewall_quiet
241.Pq Vt bool
242Set to
243.Dq Li YES
244to disable the display of firewall rules on the console during boot.
245.It Va firewall_logging
246.Pq Vt bool
247Set to
248.Dq Li YES
249to enable firewall event logging.
250This is equivalent to the
251.Dv IPFIREWALL_VERBOSE
252kernel option.
253.It Va firewall_flags
254.Pq Vt str
255Flags passed to
256.Xr ipfw 8
257if
258.Va firewall_type
259specifies a filename.
260.It Va natd_program
261.Pq Vt str
262Path to
263.Xr natd 8 .
264.It Va natd_enable
265.Pq Vt bool
266Set to
267.Dq Li YES
268to enable
269.Xr natd 8 .
270.Va firewall_enable
271must also be set to
272.Dq Li YES ,
273and
274.Xr divert 4
275sockets must be enabled in the kernel.
276.It Va natd_interface
277.Pq Vt str
278This is the name of the public interface on which
279.Xr natd 8
280should run.
281The interface may be given as an interface name or as an IP address.
282.It Va natd_flags
283.Pq Vt str
284Additional
285.Xr natd 8
286flags should be placed here.
287The
288.Fl n
289or
290.Fl a
291flag is automatically added with the above
292.Va natd_interface
293as an argument.
294.\" ----- ipfilter_enable setting --------------------------------
295.It Va ipfilter_enable
296.Pq Vt bool
297Set to
298.Dq Li NO
299by default.
300Setting this to
301.Dq Li YES
302enables
303.Xr ipf 8
304packet filtering.
305.Pp
306Typical usage will require putting
307.Bd -literal
308ipfilter_enable="YES"
309ipnat_enable="YES"
310ipmon_enable="YES"
311ipfs_enable="YES"
312.Ed
313.Pp
314into
315.Pa /etc/rc.conf
316and editing
317.Pa /etc/ipf.rules
318and
319.Pa /etc/ipnat.rules
320appropriately.
321.Pp
322Note that
323.Va ipfilter_enable
324and
325.Va ipnat_enable
326can be enabled independently.
327.Va ipmon_enable
328and
329.Va ipfs_enable
330both require at least one of
331.Va ipfilter_enable
332and
333.Va ipnat_enable
334to be enabled.
335.Pp
336Having
337.Bd -literal
338options IPFILTER
339options IPFILTER_LOG
340options IPFILTER_DEFAULT_BLOCK
341.Ed
342.Pp
343in the kernel configuration file is a good idea, too.
344.\" ----- ipfilter_program setting ------------------------------
345.It Va ipfilter_program
346.Pq Vt str
347Path to
348.Xr ipf 8
349(default
350.Pa /sbin/ipf ) .
351.\" ----- ipfilter_rules setting --------------------------------
352.It Va ipfilter_rules
353.Pq Vt str
354Set to
355.Pa /etc/ipf.rules
356by default.
357This variable contains the name of the filter rule definition file.
358The file is expected to be readable for the
359.Xr ipf 8
360command to execute.
361.\" ----- ipfilter_flags setting --------------------------------
362.It Va ipfilter_flags
363.Pq Vt str
364Empty by default.
365This variable contains flags passed to the
366.Xr ipf 8
367program.
368.\" ----- ipnat_enable setting ----------------------------------
369.It Va ipnat_enable
370.Pq Vt bool
371Set to
372.Dq Li NO
373by default.
374Set it to
375.Dq Li YES
376to enable
377.Xr ipnat 1
378network address translation.
379See
380.Va ipfilter_enable
381for a detailed discussion.
382.\" ----- ipnat_program setting ---------------------------------
383.It Va ipnat_program
384.Pq Vt str
385Path to
386.Xr ipnat 1
387(default
388.Pa /sbin/ipnat ) .
389.\" ----- ipnat_rules setting -----------------------------------
390.It Va ipnat_rules
391.Pq Vt str
392Set to
393.Pa /etc/ipnat.rules
394by default.
395This variable contains the name of the file
396holding the network address translation definition.
397This file is expected to be readable for the
398.Xr ipnat 1
399command to execute.
400.\" ----- ipnat_flags setting -----------------------------------
401.It Va ipnat_flags
402.Pq Vt str
403Empty by default.
404This variable contains flags passed to the
405.Xr ipnat 1
406program.
407.\" ----- ipmon_enable setting ----------------------------------
408.It Va ipmon_enable
409.Pq Vt bool
410Set to
411.Dq Li NO
412by default.
413Set it to
414.Dq Li YES
415to enable
416.Xr ipmon 8
417monitoring (logging
418.Xr ipf 8
419and
420.Xr ipnat 1
421events).
422Setting this variable needs setting
423.Va ipfilter_enable
424or
425.Va ipnat_enable
426too.
427See
428.Va ipfilter_enable
429for a detailed discussion.
430.\" ----- ipmon_program setting ---------------------------------
431.It Va ipmon_program
432.Pq Vt str
433Path to
434.Xr ipmon 8
435(default
436.Pa /sbin/ipmon ) .
437.\" ----- ipmon_flags setting -----------------------------------
438.It Va ipmon_flags
439.Pq Vt str
440Set to
441.Dq Li -Ds
442by default.
443This variable contains flags passed to the
444.Xr ipmon 8
445program.
446Another typical example would be
447.Dq Fl D Pa /var/log/ipflog
448to have
449.Xr ipmon 8
450log directly to a file bypassing
451.Xr syslogd 8 .
452Make sure to adjust
453.Pa /etc/newsyslog.conf
454in such case like this:
455.Bd -literal
456/var/log/ipflog  640  10  100  *  Z  /var/run/ipmon.pid
457.Ed
458.\" ----- ipfs_enable setting -----------------------------------
459.It Va ipfs_enable
460.Pq Vt bool
461Set to
462.Dq Li NO
463by default.
464Set it to
465.Dq Li YES
466to enable
467.Xr ipfs 8
468saving the filter and NAT state tables during shutdown
469and reloading them during startup again.
470Setting this variable needs setting
471.Va ipfilter_enable
472or
473.Va ipnat_enable
474to
475.Dq Li YES
476too.
477See
478.Va ipfilter_enable
479for a detailed discussion.
480Note that if
481.Va kern_securelevel
482is set to 3,
483.Va ipfs_enable
484cannot be used
485because the raised securelevel will prevent
486.Xr ipfs 8
487from saving the state tables at shutdown time.
488.\" ----- ipfs_program setting ----------------------------------
489.It Va ipfs_program
490.Pq Vt str
491Path to
492.Xr ipfs 8
493(default
494.Pa /sbin/ipfs ) .
495.\" ----- ipfs_flags setting ------------------------------------
496.It Va ipfs_flags
497.Pq Vt str
498Empty by default.
499This variable contains flags passed to the
500.Xr ipfs 8
501program.
502.\" ----- end of added ipf hook ---------------------------------
503.It Va tcp_extensions
504.Pq Vt bool
505Set to
506.Dq Li YES
507by default.
508Setting this to
509.Dq Li NO
510disables certain TCP options as described by
511.Rs
512.%T "RFC 1323"
513.Re
514Setting this to
515.Dq Li NO
516might help remedy such problems with connections as randomly hanging
517or other weird behavior.
518Some network devices are known
519to be broken with respect to these options.
520.It Va log_in_vain
521.Pq Vt int
522Set to 0 by default.
523The
524.Xr sysctl 8
525variables,
526.Va net.inet.tcp.log_in_vain
527and
528.Va net.inet.udp.log_in_vain ,
529as described in
530.Xr tcp 4
531and
532.Xr udp 4 ,
533are set to the given value.
534.It Va tcp_keepalive
535.Pq Vt bool
536Set to
537.Dq Li YES
538by default.
539Setting to
540.Dq Li NO
541will disable probing idle TCP connections to verify that the
542peer is still up and reachable.
543.It Va tcp_drop_synfin
544.Pq Vt bool
545Set to
546.Dq Li NO
547by default.
548Setting to
549.Dq Li YES
550will cause the kernel to ignore TCP frames that have both
551the SYN and FIN flags set.
552This prevents OS fingerprinting, but may
553break some legitimate applications.
554This option is only available if the
555kernel was built with the
556.Dv TCP_DROP_SYNFIN
557option.
558.It Va icmp_drop_redirect
559.Pq Vt bool
560Set to
561.Dq Li NO
562by default.
563Setting to
564.Dq Li YES
565will cause the kernel to ignore ICMP REDIRECT packets.
566.It Va icmp_log_redirect
567.Pq Vt bool
568Set to
569.Dq Li NO
570by default.
571Setting to
572.Dq Li YES
573will cause the kernel to log ICMP REDIRECT packets.
574Note that
575the log messages are not rate-limited, so this option should only be used
576for troubleshooting networks.
577.It Va network_interfaces
578.Pq Vt str
579Set to the list of network interfaces to configure on this host.
580For example, if the only network devices in the system are the loopback
581device
582.Pq Li lo0
583and a NIC using the
584.Xr ed 4
585driver,
586this could be set to
587.Dq Li "lo0 ed0" .
588An
589.Va ifconfig_ Ns Aq Ar interface
590variable is also assumed to exist for each value of
591.Ar interface .
592It is also possible to add IP alias entries here in cases where
593multiple IP addresses registered against a single interface
594are desired.
595Assuming that the interface in question was
596.Li ed0 ,
597it might look
598something like this:
599.Bd -literal
600ifconfig_ed0_alias0="inet 127.0.0.253 netmask 0xffffffff"
601ifconfig_ed0_alias1="inet 127.0.0.254 netmask 0xffffffff"
602.Ed
603.Pp
604And so on.
605For each
606.Va ifconfig_ Ns Ao Ar interface Ac Ns Va _alias Ns Aq Ar n
607entry that is found,
608its contents are passed to
609.Xr ifconfig 8 .
610Execution stops at the first unsuccessful access, so if
611something like this is present:
612.Bd -literal
613ifconfig_ed0_alias0="inet 127.0.0.251 netmask 0xffffffff"
614ifconfig_ed0_alias1="inet 127.0.0.252 netmask 0xffffffff"
615ifconfig_ed0_alias2="inet 127.0.0.253 netmask 0xffffffff"
616ifconfig_ed0_alias4="inet 127.0.0.254 netmask 0xffffffff"
617.Ed
618.Pp
619Then note that alias4 would
620.Em not
621be added since the search would
622stop with the missing alias3 entry.
623.Pp
624It is possible to bring up an interface with DHCP by setting the
625.Va ifconfig_ Ns Aq Ar interface
626variable to
627.Dq Li DHCP .
628For instance, to initialize the
629.Li ed0
630device via DHCP,
631it is possible to use something like:
632.Bd -literal
633ifconfig_ed0="DHCP"
634.Ed
635.It Va cloned_interfaces
636.Pq Vt str
637Set to the list of clonable network interfaces to create on this host.
638Entries in
639.Va cloned_interfaces
640are automatically appended to
641.Va network_interfaces
642for configuration.
643.It Va gif_interfaces
644.Pq Vt str
645Set to the list of
646.Xr gif 4
647tunnel interfaces to configure on this host.
648A
649.Va gifconfig_ Ns Aq Ar interface
650variable is assumed to exist for each value of
651.Ar interface .
652The value of this variable is used to configure the link layer of the
653tunnel according to the syntax of the
654.Cm tunnel
655option to
656.Xr ifconfig 8 .
657Additionally, this option ensures that each listed interface is created
658via the
659.Cm create
660option to
661.Xr ifconfig 8
662before attempting to configure it.
663.It Va ppp_enable
664.Pq Vt bool
665If set to
666.Dq Li YES ,
667run the
668.Xr ppp 8
669daemon.
670.It Va ppp_mode
671.Pq Vt str
672Mode in which to run the
673.Xr ppp 8
674daemon.
675Accepted modes are
676.Dq Li auto ,
677.Dq Li ddial ,
678.Dq Li direct
679and
680.Dq Li dedicated .
681See the manual for a full description.
682.It Va ppp_nat
683.Pq Vt bool
684If set to
685.Dq Li YES ,
686enables network address translation.
687Used in conjunction with
688.Va gateway_enable
689allows hosts on private network addresses access to the Internet using
690this host as a network address translating router.
691.It Va ppp_profile
692.Pq Vt str
693The name of the profile to use from
694.Pa /etc/ppp/ppp.conf .
695.It Va ppp_user
696.Pq Vt str
697The name of the user under which
698.Xr ppp 8
699should be started.
700By
701default,
702.Xr ppp 8
703is started as
704.Dq Li root .
705.It Va rc_conf_files
706.Pq Vt str
707This option is used to specify a list of files that will override
708the settings in
709.Pa /etc/defaults/rc.conf .
710The files will be read in the order in which they are specified and should
711include the full path to the file.
712By default, the files specified are
713.Pa /etc/rc.conf
714and
715.Pa /etc/rc.conf.local
716.It Va fsck_y_enable
717.Pq Vt bool
718If set to
719.Dq Li YES ,
720.Xr fsck 8
721will be run with the
722.Fl y
723flag if the initial preen
724of the filesystems fails.
725.It Va background_fsck
726.Pq Vt bool
727If set to
728.Dq Li YES ,
729the system will attempt to run
730.Xr fsck 8
731in the background where possible.
732.It Va extra_netfs_types
733.Pq Vt str
734If set to something other than
735.Dq Li NO
736(the default),
737this variable extends the list of filesystem types
738for which automatic mounting at startup by
739.Xr rc 8
740should be delayed until the network is initialized.
741It should contain
742a whitespace-separated list of network filesystem descriptor pairs,
743each consisting of a filesystem type as passed to
744.Xr mount 8
745and a human-readable, one-word description,
746joined with a colon
747.Pq Ql \&: .
748Extending the default list in this way is only necessary
749when third party filesystem types are used.
750.It Va syslogd_enable
751.Pq Vt bool
752If set to
753.Dq Li YES ,
754run the
755.Xr syslogd 8
756daemon.
757.It Va syslogd_program
758.Pq Vt str
759Path to
760.Xr syslogd 8
761(default
762.Pa /usr/sbin/syslogd ) .
763.It Va syslogd_flags
764.Pq Vt str
765If
766.Va syslogd_enable
767is set to
768.Dq Li YES ,
769these are the flags to pass to
770.Xr syslogd 8 .
771.It Va inetd_enable
772.Pq Vt bool
773If set to
774.Dq Li YES ,
775run the
776.Xr inetd 8
777daemon.
778.It Va inetd_program
779.Pq Vt str
780Path to
781.Xr inetd 8
782(default
783.Pa /usr/sbin/inetd ) .
784.It Va inetd_flags
785.Pq Vt str
786If
787.Va inetd_enable
788is set to
789.Dq Li YES ,
790these are the flags to pass to
791.Xr inetd 8 .
792.It Va named_enable
793.Pq Vt bool
794If set to
795.Dq Li YES ,
796run the
797.Xr named 8
798daemon.
799.It Va named_program
800.Pq Vt str
801Path to
802.Xr named 8
803(default
804.Pa /usr/sbin/named ) .
805.It Va named_flags
806.Pq Vt str
807If
808.Va named_enable
809is set to
810.Dq Li YES ,
811these are the flags to pass to
812.Xr named 8 .
813.It Va kerberos4_server_enable
814.Pq Vt bool
815Set to
816.Dq Li YES
817to start a Kerberos IV authentication server
818at boot time.
819.It Va kadmind4_server_enable
820.Pq Vt bool
821Set to
822.Dq Li YES
823to start
824.Xr kadmind 8 ,
825the Kerberos IV Administration Daemon; set to
826.Dq Li NO
827on a slave server.
828.It Va kerberos_stash
829.Pq Vt str
830If
831.Dq Li YES ,
832instruct the Kerberos servers to use the stashed master key instead of
833prompting for it (only if
834.Va kerberos_server_enable
835is set to
836.Dq Li YES ,
837and is used for both
838.Xr kerberos 1
839and
840.Xr kadmind 8 ) .
841.It Va kerberos5_server_enable
842.Pq Vt bool
843Set to
844.Dq Li YES
845to start a Kerberos 5 authentication server
846at boot time.
847.It Va kadmind5_server_enable
848.Pq Vt bool
849Set to
850.Dq Li YES
851to start
852.Xr k5admind 8 ,
853the Kerberos 5 Administration Daemon; set to
854.Dq Li NO
855on a slave server.
856.It Va rwhod_enable
857.Pq Vt bool
858If set to
859.Dq Li YES ,
860run the
861.Xr rwhod 8
862daemon at boot time.
863.It Va rwhod_flags
864.Pq Vt str
865If
866.Va rwhod_enable
867is set to
868.Dq Li YES ,
869these are the flags to pass to it.
870.It Va amd_enable
871.Pq Vt bool
872If set to
873.Dq Li YES ,
874run the
875.Xr amd 8
876daemon at boot time.
877.It Va amd_flags
878.Pq Vt str
879If
880.Va amd_enable
881is set to
882.Dq Li YES ,
883these are the flags to pass to it.
884See the
885.Xr amd 8
886manpage for more information.
887.It Va amd_map_program
888.Pq Vt str
889If set,
890the specified program is run to get the list of
891.Xr amd 8
892maps.
893For example, if the
894.Xr amd 8
895maps are stored in NIS, one can set this to
896run
897.Xr ypcat 1
898to get a list of
899.Xr amd 8
900maps from the
901.Pa amd.master
902NIS map.
903.It Va update_motd
904.Pq Vt bool
905If set to
906.Dq Li YES ,
907.Pa /etc/motd
908will be updated at boot time to reflect the kernel release
909being run.
910If set to
911.Dq Li NO ,
912.Pa /etc/motd
913will not be updated.
914.It Va nfs_client_enable
915.Pq Vt bool
916If set to
917.Dq Li YES ,
918run the NFS client daemons at boot time.
919.It Va nfs_access_cache
920.Pq Vt int
921If
922.Va nfs_client_enable
923is set to
924.Dq Li YES ,
925this can be set to
926.Dq Li 0
927to disable NFS ACCESS RPC caching, or to the number of seconds for which
928NFS ACCESS
929results should be cached.
930A value of 2-10 seconds will substantially reduce network
931traffic for many NFS operations.
932.It Va nfs_server_enable
933.Pq Vt bool
934If set to
935.Dq Li YES ,
936run the NFS server daemons at boot time.
937.It Va nfs_server_flags
938.Pq Vt str
939If
940.Va nfs_server_enable
941is set to
942.Dq Li YES ,
943these are the flags to pass to the
944.Xr nfsd 8
945daemon.
946.It Va mountd_enable
947.Pq Vt bool
948If set to
949.Dq Li YES ,
950and no
951.Va nfs_server_enable
952is set, start
953.Xr mountd 8 ,
954but not
955.Xr nfsd 8
956daemon.
957It is commonly needed to run CFS without real NFS used.
958.It Va weak_mountd_authentication
959.Pq Vt bool
960If set to
961.Dq Li YES ,
962allow services like PCNFSD to make non-privileged mount
963requests.
964.It Va nfs_privport
965.Pq Vt bool
966If set to
967.Dq Li YES ,
968provide NFS services only on a secure port.
969.It Va nfs_bufpackets
970.Pq Vt int
971If set to a number, indicates the number of packets worth of
972socket buffer space to reserve on an NFS client.
973If set to
974.Dq Li DEFAULT ,
975the kernel default is used (typically 4).
976Using a higher number may be
977useful on gigabit networks to improve performance.
978The minimum value is
9792 and the maximum is 64.
980.It Va rpc_lockd_enable
981.Pq Vt bool
982If set to
983.Dq Li YES
984and also an NFS server, run
985.Xr rpc.lockd 8
986at boot time.
987.It Va rpc_statd_enable
988.Pq Vt bool
989If set to
990.Dq Li YES
991and also an NFS server, run
992.Xr rpc.statd 8
993at boot time.
994.It Va rpcbind_program
995.Pq Vt str
996Path to
997.Xr rpcbind 8
998(default
999.Pa /usr/sbin/rpcbind ) .
1000.It Va rpcbind_enable
1001.Pq Vt bool
1002If set to
1003.Dq Li YES ,
1004run the
1005.Xr rpcbind 8
1006service at boot time.
1007.It Va rpcbind_flags
1008.Pq Vt str
1009If
1010.Va rpcbind_enable
1011is set to
1012.Dq Li YES ,
1013these are the flags to pass to the
1014.Xr rpcbind 8
1015daemon.
1016.It Va xtend_enable
1017.Pq Vt bool
1018If set to
1019.Dq Li YES ,
1020run the
1021.Xr xtend 8
1022daemon at boot time.
1023.It Va xtend_flags
1024.Pq Vt str
1025If
1026.Va xtend_enable
1027is set to
1028.Dq Li YES ,
1029these are the flags to pass to the
1030.Xr xtend 8
1031daemon.
1032.It Va pppoed_enable
1033.Pq Vt bool
1034If set to
1035.Dq Li YES ,
1036run the
1037.Xr pppoed 8
1038daemon at boot time to provide PPP over Ethernet services.
1039.It Va pppoed_ Ns Ar provider
1040.Pq Vt str
1041.Xr pppoed 8
1042listens to requests to this
1043.Ar provider
1044and ultimately runs
1045.Xr ppp 8
1046with a
1047.Ar system
1048argument of the same name.
1049.It Va pppoed_flags
1050.Pq Vt str
1051Additional flags to pass to
1052.Xr pppoed 8 .
1053.It Va pppoed_interface
1054.Pq Vt str
1055The network interface to run
1056.Xr pppoed 8
1057on.
1058This is mandatory when
1059.Va pppoed_enable
1060is set to
1061.Dq Li YES .
1062.It Va timed_enable
1063.Pq Vt boot
1064If set to
1065.Dq Li YES ,
1066run the
1067.Xr timed 8
1068service at boot time.
1069This command is intended for networks of
1070machines where a consistent
1071.Dq "network time"
1072for all hosts must be established.
1073This is often useful in large NFS
1074environments where time stamps on files are expected to be consistent
1075network-wide.
1076.It Va timed_flags
1077.Pq Vt str
1078If
1079.Va timed_enable
1080is set to
1081.Dq Li YES ,
1082these are the flags to pass to the
1083.Xr timed 8
1084service.
1085.It Va ntpdate_enable
1086.Pq Vt bool
1087If set to
1088.Dq Li YES ,
1089run
1090.Xr ntpdate 8
1091at system startup.
1092This command is intended to
1093synchronize the system clock only
1094.Em once
1095from some standard reference.
1096An option to set this up initially
1097(from a list of known servers) is also provided by the
1098.Xr sysinstall 8
1099program when the system is first installed.
1100.It Va ntpdate_program
1101.Pq Vt str
1102Path to
1103.Xr ntpdate 8
1104(default
1105.Pa /usr/sbin/ntpdate ) .
1106.It Va ntpdate_flags
1107.Pq Vt str
1108If
1109.Va ntpdate_enable
1110is set to
1111.Dq Li YES ,
1112these are the flags to pass to the
1113.Xr ntpdate 8
1114command (typically a hostname).
1115.It Va ntpd_enable
1116.Pq Vt bool
1117If set to
1118.Dq Li YES ,
1119run the
1120.Xr ntpd 8
1121command at boot time.
1122.It Va ntpd_program
1123.Pq Vt str
1124Path to
1125.Xr ntpd 8
1126(default
1127.Pa /usr/sbin/ntpd ) .
1128.It Va ntpd_flags
1129.Pq Vt str
1130If
1131.Va ntpd_enable
1132is set to
1133.Dq Li YES ,
1134these are the flags to pass to the
1135.Xr ntpd 8
1136daemon.
1137.It Va nis_client_enable
1138.Pq Vt bool
1139If set to
1140.Dq Li YES ,
1141run the
1142.Xr ypbind 8
1143service at system boot time.
1144.It Va nis_client_flags
1145.Pq Vt str
1146If
1147.Va nis_client_enable
1148is set to
1149.Dq Li YES ,
1150these are the flags to pass to the
1151.Xr ypbind 8
1152service.
1153.It Va nis_ypset_enable
1154.Pq Vt bool
1155If set to
1156.Dq Li YES ,
1157run the
1158.Xr ypset 8
1159daemon at system boot time.
1160.It Va nis_ypset_flags
1161.Pq Vt str
1162If
1163.Va nis_ypset_enable
1164is set to
1165.Dq Li YES ,
1166these are the flags to pass to the
1167.Xr ypset 8
1168daemon.
1169.It Va nis_server_enable
1170.Pq Vt bool
1171If set to
1172.Dq Li YES ,
1173run the
1174.Xr ypserv 8
1175daemon at system boot time.
1176.It Va nis_server_flags
1177.Pq Vt str
1178If
1179.Va nis_server_enable
1180is set to
1181.Dq Li YES ,
1182these are the flags to pass to the
1183.Xr ypserv 8
1184daemon.
1185.It Va nis_ypxfrd_enable
1186.Pq Vt bool
1187If set to
1188.Dq Li YES ,
1189run the
1190.Xr rpc.ypxfrd 8
1191daemon at system boot time.
1192.It Va nis_ypxfrd_flags
1193.Pq Vt str
1194If
1195.Va nis_ypxfrd_enable
1196is set to
1197.Dq Li YES ,
1198these are the flags to pass to the
1199.Xr rpc.ypxfrd 8
1200daemon.
1201.It Va nis_yppasswdd_enable
1202.Pq Vt bool
1203If set to
1204.Dq Li YES ,
1205run the
1206.Xr rpc.yppasswdd 8
1207daemon at system boot time.
1208.It Va nis_yppasswdd_flags
1209.Pq Vt str
1210If
1211.Va nis_yppasswdd_enable
1212is set to
1213.Dq Li YES ,
1214these are the flags to pass to the
1215.Xr rpc.yppasswdd 8
1216daemon.
1217.It Va defaultrouter
1218.Pq Vt str
1219If not set to
1220.Dq Li NO ,
1221create a default route to this host name or IP address
1222(use an IP address if this router is also required to get to the
1223name server!).
1224.It Va static_routes
1225.Pq Vt str
1226Set to the list of static routes that are to be added at system
1227boot time.
1228If not set to
1229.Dq Li NO
1230then for each whitespace separated
1231.Ar element
1232in the value, a
1233.Va route_ Ns Aq Ar element
1234variable is assumed to exist
1235whose contents will later be passed to a
1236.Dq Nm route Cm add
1237operation.
1238.It Va gateway_enable
1239.Pq Vt bool
1240If set to
1241.Dq Li YES ,
1242configure host to act as an IP router, e.g. to forward packets
1243between interfaces.
1244.It Va router_enable
1245.Pq Vt bool
1246If set to
1247.Dq Li YES ,
1248run a routing daemon of some sort, based on the
1249settings of
1250.Va router
1251and
1252.Va router_flags .
1253.It Va router
1254.Pq Vt str
1255If
1256.Va router_enable
1257is set to
1258.Dq Li YES ,
1259this is the name of the routing daemon to use.
1260.It Va router_flags
1261.Pq Vt str
1262If
1263.Va router_enable
1264is set to
1265.Dq Li YES ,
1266these are the flags to pass to the routing daemon.
1267.It Va mrouted_enable
1268.Pq Vt bool
1269If set to
1270.Dq Li YES ,
1271run the multicast routing daemon,
1272.Xr mrouted 8 .
1273.It Va mrouted_flags
1274.Pq Vt str
1275If
1276.Va mrouted_enable
1277is set to
1278.Dq Li YES ,
1279these are the flags to pass to the
1280.Xr mrouted 8
1281daemon.
1282.It Va ipxgateway_enable
1283.Pq Vt bool
1284If set to
1285.Dq Li YES ,
1286enable the routing of IPX traffic.
1287.It Va ipxrouted_enable
1288.Pq Vt bool
1289If set to
1290.Dq Li YES ,
1291run the
1292.Xr IPXrouted 8
1293daemon at system boot time.
1294.It Va ipxrouted_flags
1295.Pq Vt str
1296If
1297.Va ipxrouted_enable
1298is set to
1299.Dq Li YES ,
1300these are the flags to pass to the
1301.Xr IPXrouted 8
1302daemon.
1303.It Va arpproxy_all
1304.Pq Vt bool
1305If set to
1306.Dq Li YES ,
1307enable global proxy ARP.
1308.It Va forward_sourceroute
1309.Pq Vt bool
1310If set to
1311.Dq Li YES
1312and
1313.Va gateway_enable
1314is also set to
1315.Dq Li YES ,
1316source-routed packets are forwarded.
1317.It Va accept_sourceroute
1318.Pq Vt bool
1319If set to
1320.Dq Li YES ,
1321the system will accept source-routed packets directed at it.
1322.It Va rarpd_enable
1323.Pq Vt bool
1324If set to
1325.Dq Li YES ,
1326run the
1327.Xr rarpd 8
1328daemon at system boot time.
1329.It Va rarpd_flags
1330.Pq Vt str
1331If
1332.Va rarpd_enable
1333is set to
1334.Dq Li YES ,
1335these are the flags to pass to the
1336.Xr rarpd 8
1337daemon.
1338.It Va bootparamd_enable
1339.Pq Vt bool
1340If set to
1341.Dq Li YES ,
1342run the
1343.Xr bootparamd 8
1344daemon at system boot time.
1345.It Va bootparamd_flags
1346.Pq Vt str
1347If
1348.Va bootparamd_enable
1349is set to
1350.Dq Li YES ,
1351these are the flags to pass to the
1352.Xr bootparamd 8
1353daemon.
1354.It Va atm_enable
1355.Pq Vt bool
1356Set to
1357.Dq Li YES
1358to enable the configuration of ATM interfaces at system boot time.
1359For all of the ATM variables described below, please refer to the
1360.Xr atm 8
1361man page for further details on the available command parameters.
1362Also refer to the files in
1363.Pa /usr/share/examples/atm
1364for more detailed configuration information.
1365.It Va atm_netif_ Ns Aq Ar intf
1366.Pq Vt str
1367For the ATM physical interface
1368.Ar intf ,
1369this variable defines the name prefix and count for the ATM network
1370interfaces to be created.
1371The value will be passed as the parameters of an
1372.Dq Nm atm Cm "set netif" Ar intf
1373command.
1374.It Va atm_sigmgr_ Ns Aq Ar intf
1375.Pq Vt str
1376For the ATM physical interface
1377.Ar intf ,
1378this variable defines the ATM signalling manager to be used.
1379The value will be passed as the parameters of an
1380.Dq Nm atm Cm attach Ar intf
1381command.
1382.It Va atm_prefix_ Ns Aq Ar intf
1383.Pq Vt str
1384For the ATM physical interface
1385.Ar intf ,
1386this variable defines the NSAP prefix for interfaces using a UNI signalling
1387manager.
1388If set to
1389.Dq Li ILMI ,
1390the prefix will automatically be set via the
1391.Xr ilmid 8
1392daemon.
1393Otherwise, the value will be passed as the parameters of an
1394.Dq Nm atm Cm "set prefix" Ar intf
1395command.
1396.It Va atm_macaddr_ Ns Aq Ar intf
1397.Pq Vt str
1398For the ATM physical interface
1399.Ar intf ,
1400this variable defines the MAC address for interfaces using a UNI signalling
1401manager.
1402If set to
1403.Dq Li NO ,
1404the hardware MAC address contained in the ATM interface card will be used.
1405Otherwise, the value will be passed as the parameters of an
1406.Dq Nm atm Cm "set mac" Ar intf
1407command.
1408.It Va atm_arpserver_ Ns Aq Ar netif
1409.Pq Vt str
1410For the ATM network interface
1411.Ar netif ,
1412this variable defines the ATM address for a host which is to provide ATMARP
1413service.
1414This variable is only applicable to interfaces using a UNI signalling
1415manager.
1416If set to
1417.Dq Li local ,
1418this host will become an ATMARP server.
1419The value will be passed as the parameters of an
1420.Dq Nm atm Cm "set arpserver" Ar netif
1421command.
1422.It Va atm_scsparp_ Ns Aq Ar netif
1423.Pq Vt bool
1424If set to
1425.Dq Li YES ,
1426SCSP/ATMARP service for the network interface
1427.Ar netif
1428will be initiated using the
1429.Xr scspd 8
1430and
1431.Xr atmarpd 8
1432daemons.
1433This variable is only applicable if
1434.Va atm_arpserver_ Ns Aq Ar netif
1435is set to
1436.Dq Li local .
1437.It Va atm_pvcs
1438.Pq Vt str
1439Set to the list of ATM PVCs to be added at system
1440boot time.
1441For each whitespace separated
1442.Ar element
1443in the value, an
1444.Va atm_pvc_ Ns Aq Ar element
1445variable is assumed to exist.
1446The value of each of these variables
1447will be passed as the parameters of an
1448.Dq Nm atm Cm "add pvc"
1449command.
1450.It Va atm_arps
1451.Pq Vt str
1452Set to the list of permanent ATM ARP entries to be added
1453at system boot time.
1454For each whitespace separated
1455.Ar element
1456in the value, an
1457.Va atm_arp_ Ns Aq Ar element
1458variable is assumed to exist.
1459The value of each of these variables
1460will be passed as the parameters of an
1461.Dq Nm atm Cm "add arp"
1462command.
1463.It Va keymap
1464.Pq Vt str
1465If set to
1466.Dq Li NO ,
1467no keymap is installed, otherwise the value is used to install
1468the keymap file in
1469.Pa /usr/share/syscons/keymaps/ Ns Ao Ar value Ac Ns Pa .kbd .
1470.It Va keyrate
1471.Pq Vt str
1472The keyboard repeat speed.
1473Set to
1474.Dq Li slow ,
1475.Dq Li normal ,
1476.Dq Li fast ,
1477or
1478.Dq Li NO
1479if the default behavior is desired.
1480.It Va keychange
1481.Pq Vt str
1482If not set to
1483.Dq Li NO ,
1484attempt to program the function keys with the value.
1485The value should
1486be a single string of the form:
1487.Dq Ar funkey_number new_value Op Ar funkey_number new_value ... .
1488.It Va cursor
1489.Pq Vt str
1490Can be set to the value of
1491.Dq Li normal ,
1492.Dq Li blink ,
1493.Dq Li destructive ,
1494or
1495.Dq Li NO
1496to set the cursor behavior explicitly or choose the default behavior.
1497.It Va scrnmap
1498.Pq Vt str
1499If set to
1500.Dq Li NO ,
1501no screen map is installed, otherwise the value is used to install
1502the screen map file in
1503.Pa /usr/share/syscons/scrnmaps/ Ns Aq Ar value .
1504.It Va font8x16
1505.Pq Vt str
1506If set to
1507.Dq Li NO ,
1508the default 8x16 font value is used for screen size requests, otherwise
1509the value in
1510.Pa /usr/share/syscons/fonts/ Ns Aq Ar value
1511is used.
1512.It Va font8x14
1513.Pq Vt str
1514If set to
1515.Dq Li NO ,
1516the default 8x14 font value is used for screen size requests, otherwise
1517the value in
1518.Pa /usr/share/syscons/fonts/ Ns Aq Ar value
1519is used.
1520.It Va font8x8
1521.Pq Vt str
1522If set to
1523.Dq Li NO ,
1524the default 8x8 font value is used for screen size requests, otherwise
1525the value in
1526.Pa /usr/share/syscons/fonts/ Ns Aq Ar value
1527is used.
1528.It Va blanktime
1529.Pq Vt int
1530If set to
1531.Dq Li NO ,
1532the default screen blanking interval is used, otherwise it is set
1533to
1534.Ar value
1535seconds.
1536.It Va saver
1537.Pq Vt str
1538If not set to
1539.Dq Li NO ,
1540this is the actual screen saver to use
1541.Li ( blank , snake , daemon ,
1542etc).
1543.It Va moused_enable
1544.Pq Vt str
1545If set to
1546.Dq Li YES ,
1547the
1548.Xr moused 8
1549daemon is started for doing cut/paste selection on the console.
1550.It Va moused_type
1551.Pq Vt str
1552This is the protocol type of the mouse connected to this host.
1553This variable must be set if
1554.Va moused_enable
1555is set to
1556.Dq Li YES .
1557The
1558.Xr moused 8
1559daemon
1560is able to detect the appropriate mouse type automatically in many cases.
1561Set this variable to
1562.Dq Li auto
1563to let the daemon detect it, or
1564select one from the following list if the automatic detection fails.
1565.Pp
1566If the mouse is attached to the PS/2 mouse port, choose
1567.Dq Li auto
1568or
1569.Dq Li ps/2 ,
1570regardless of the brand and model of the mouse.
1571Likewise, if the
1572mouse is attached to the bus mouse port, choose
1573.Dq Li auto
1574or
1575.Dq Li busmouse .
1576All other protocols are for serial mice and will not work with
1577the PS/2 and bus mice.
1578If this is a USB mouse,
1579.Dq Li auto
1580is the only protocol type which will work.
1581.Pp
1582.Bl -tag -width ".Li x10mouseremote" -compact
1583.It Li microsoft
1584Microsoft mouse (serial)
1585.It Li intellimouse
1586Microsoft IntelliMouse (serial)
1587.It Li mousesystems
1588Mouse systems Corp. mouse (serial)
1589.It Li mmseries
1590MM Series mouse (serial)
1591.It Li logitech
1592Logitech mouse (serial)
1593.It Li busmouse
1594A bus mouse
1595.It Li mouseman
1596Logitech MouseMan and TrackMan (serial)
1597.It Li glidepoint
1598ALPS GlidePoint (serial)
1599.It Li thinkingmouse
1600Kensington ThinkingMouse (serial)
1601.It Li ps/2
1602PS/2 mouse
1603.It Li mmhittab
1604MM HitTablet (serial)
1605.It Li x10mouseremote
1606X10 MouseRemote (serial)
1607.It Li versapad
1608Interlink VersaPad (serial)
1609.El
1610.Pp
1611Even if the mouse is not in the above list, it may be compatible
1612with one in the list.
1613Refer to the man page for
1614.Xr moused 8
1615for compatibility information.
1616.Pp
1617It should also be noted that while this is enabled, any
1618other client of the mouse (such as an X server) should access
1619the mouse through the virtual mouse device,
1620.Pa /dev/sysmouse ,
1621and configure it as a
1622.Dq Li sysmouse
1623type mouse, since all
1624mouse data is converted to this single canonical format when
1625using
1626.Xr moused 8 .
1627If the client program does not support the
1628.Dq Li sysmouse
1629type,
1630specify the
1631.Dq Li mousesystems
1632type.
1633It is the second preferred type.
1634.It Va moused_port
1635.Pq Vt str
1636If
1637.Va moused_enable
1638is set to
1639.Dq Li YES ,
1640this is the actual port the mouse is on.
1641It might be
1642.Pa /dev/cuaa0
1643for a COM1 serial mouse,
1644.Pa /dev/psm0
1645for a PS/2 mouse or
1646.Pa /dev/mse0
1647for a bus mouse, for example.
1648.It Va moused_flags
1649.Pq Vt str
1650If
1651.Va moused_type
1652is set, these are the additional flags to pass to the
1653.Xr moused 8
1654daemon.
1655.It Va mousechar_start
1656.Pq Vt int
1657If set to
1658.Dq Li NO ,
1659the default mouse cursor character range
1660.Li 0xd0 Ns - Ns Li 0xd3
1661is used,
1662otherwise the range start is set
1663to
1664.Ar value
1665character, see
1666.Xr vidcontrol 1 .
1667Use if the default range is occupied in the language code table.
1668.It Va allscreens_flags
1669.Pq Vt str
1670If set,
1671.Xr vidcontrol 1
1672is run with these options for each of the virtual terminals
1673.Pq Pa /dev/ttyv* .
1674For example,
1675.Dq Fl m Cm on
1676will enable the mouse pointer on all virtual terminals
1677if
1678.Va moused_enable
1679is set to
1680.Dq Li YES .
1681.It Va allscreens_kbdflags
1682.Pq Vt str
1683If set,
1684.Xr kbdcontrol 1
1685is run with these options for each of the virtual terminals
1686.Pq Pa /dev/ttyv* .
1687For example,
1688.Dq Fl h Li 200
1689will set the
1690.Xr syscons 4
1691scrollback (history) buffer to 200 lines.
1692.It Va cron_enable
1693.Pq Vt bool
1694If set to
1695.Dq Li YES ,
1696run the
1697.Xr cron 8
1698daemon at system boot time.
1699.It Va cron_program
1700.Pq Vt str
1701Path to
1702.Xr cron 8
1703(default
1704.Pa /usr/sbin/cron ) .
1705.It Va cron_flags
1706.Pq Vt str
1707If
1708.Va cron_enable
1709is set to
1710.Dq Li YES ,
1711these are the flags to pass to
1712.Xr cron 8 .
1713.It Va lpd_program
1714.Pq Vt str
1715Path to
1716.Xr lpd 8
1717(default
1718.Pa /usr/sbin/lpd ) .
1719.It Va lpd_enable
1720.Pq Vt bool
1721If set to
1722.Dq Li YES ,
1723run the
1724.Xr lpd 8
1725daemon at system boot time.
1726.It Va lpd_flags
1727.Pq Vt str
1728If
1729.Va lpd_enable
1730is set to
1731.Dq Li YES ,
1732these are the flags to pass to the
1733.Xr lpd 8
1734daemon.
1735.It Va mta_start_script
1736.Pq Vt str
1737This variable specifies the full path to the script to run to start
1738a mail transfer agent.
1739The default is
1740.Pa /etc/rc.sendmail .
1741The
1742.Va sendmail_*
1743variables which
1744.Pa /etc/rc.sendmail
1745uses are documented in the
1746.Xr rc.sendmail 8
1747man page.
1748.It Va dumpdev
1749.Pq Vt str
1750Indicates the device (usually a swap partition) to which a crash dump
1751should be written in the event of a system crash.
1752The value of this variable is passed as the argument to
1753.Xr dumpon 8 .
1754To disable crash dumps, set this variable to
1755.Dq Li NO .
1756.It Va dumpdir
1757.Pq Vt str
1758When the system reboots after a crash and a crash dump is found on the
1759device specified by the
1760.Va dumpdev
1761variable,
1762.Xr savecore 8
1763will save that crash dump and a copy of the kernel to the directory
1764specified by the
1765.Va dumpdir
1766variable.
1767The default value is
1768.Pa /var/crash .
1769Set to
1770.Dq Li NO
1771to not run
1772.Xr savecore 8
1773at boot time when
1774.Va dumpdir
1775is set.
1776.It Va savecore_flags
1777.Pq Vt str
1778If crash dumps are enabled, these are the flags to pass to the
1779.Xr savecore 8
1780utility.
1781.It Va enable_quotas
1782.Pq Vt bool
1783Set to
1784.Dq Li YES
1785to turn on user disk quotas on system startup via the
1786.Xr quotaon 8
1787command.
1788.It Va check_quotas
1789.Pq Vt bool
1790Set to
1791.Dq Li YES
1792to enable user disk quota checking via the
1793.Xr quotacheck 8
1794command.
1795.It Va accounting_enable
1796.Pq Vt bool
1797Set to
1798.Dq Li YES
1799to enable system accounting through the
1800.Xr accton 8
1801facility.
1802.It Va ibcs2_enable
1803.Pq Vt bool
1804Set to
1805.Dq Li YES
1806to enable iBCS2 (SCO) binary emulation at system initial boot
1807time.
1808.It Va ibcs2_loaders
1809.Pq Vt str
1810If not set to
1811.Dq Li NO
1812and if
1813.Va ibcs2_enable
1814is set to
1815.Dq Li YES ,
1816this specifies a list of additional iBCS2 loaders to enable.
1817.It Va linux_enable
1818.Pq Vt bool
1819Set to
1820.Dq Li YES
1821to enable Linux/ELF binary emulation at system initial
1822boot time.
1823.It Va osf1_enable
1824.Pq Vt bool
1825Set to
1826.Dq Li YES
1827to enable OSF/1 (Digital UNIX) binary emulation at system
1828initial boot time.
1829(alpha)
1830.It Va clear_tmp_enable
1831.Pq Vt bool
1832Set to
1833.Dq Li YES
1834to have
1835.Pa /tmp
1836cleaned at startup.
1837.It Va ldconfig_paths
1838.Pq Vt str
1839Set to the list of shared library paths to use with
1840.Xr ldconfig 8 .
1841NOTE:
1842.Pa /usr/lib
1843will always be added first, so it need not appear in this list.
1844.It Va ldconfig_insecure
1845.Pq Vt bool
1846The
1847.Xr ldconfig 8
1848utility normally refuses to use directories
1849which are writable by anyone except root.
1850Set this variable to
1851.Dq Li YES
1852to disable that security check during system startup.
1853.It Va kern_securelevel_enable
1854.Pq Vt bool
1855Set to
1856.Dq Li YES
1857to set the kernel security level at system startup.
1858.It Va kern_securelevel
1859.Pq Vt int
1860The kernel security level to set at startup.
1861The allowed range of
1862.Ar value
1863ranges from \-1 (the compile time default) to 3 (the
1864most secure).
1865See
1866.Xr init 8
1867for the list of possible security levels and their effect
1868on system operation.
1869.It Va lomac_enable
1870.Pq Vt bool
1871Set to
1872.Dq Li YES
1873to enable Low Watermark Mandatory Access Control (LOMAC) at boot time.
1874This security model enforces integrity constraints for system processes;
1875see
1876.Xr lomac 4
1877for a complete description of the LOMAC model, as well as its impact
1878on system operation.
1879.It Va start_vinum
1880.Pq Vt bool
1881Set to
1882.Dq Li YES
1883to start
1884.Xr vinum 8
1885at system boot time.
1886.It Va sshd_program
1887.Pq Vt str
1888Path to the SSH server program
1889.Pa ( /usr/sbin/sshd
1890is the default).
1891.It Va sshd_enable
1892.Pq Vt bool
1893Set to
1894.Dq Li YES
1895to start
1896.Xr sshd 8
1897at system boot time.
1898.It Va sshd_flags
1899.Pq Vt str
1900If
1901.Va sshd_enable
1902is set to
1903.Dq Li YES ,
1904these are the flags to pass to the
1905.Xr sshd 8
1906daemon.
1907.It Va unaligned_print
1908.Pq Vt bool
1909If set to
1910.Dq Li NO ,
1911unaligned access warnings will not be printed.
1912(alpha)
1913.\" ----- isdn settings ---------------------------------
1914.It Va isdn_enable
1915.Pq Vt bool
1916Set to
1917.Dq Li NO
1918by default.
1919When set to
1920.Dq Li YES ,
1921starts the
1922.Xr isdnd 8
1923daemon
1924at system boot time.
1925.It Va isdn_flags
1926.Pq Vt str
1927Set to
1928.Dq Fl d Ns Cm n Fl d Ns Li 0x1f9
1929by default.
1930Additional flags to pass to
1931.Xr isdnd 8
1932(but see
1933.Va isdn_fsdev
1934and
1935.Va isdn_ttype
1936for certain tunable parameters).
1937.It Va isdn_ttype
1938.Pq Vt str
1939Set to
1940.Dq Li cons25
1941by default.
1942The terminal type of the output device when
1943.Xr isdnd 8
1944operates in full-screen mode.
1945.It Va isdn_screenflags
1946.Pq Vt str
1947Set to
1948.Dq Li NO
1949by default.
1950The video mode for full-screen mode (only for
1951.Xr syscons 4
1952console driver, see
1953.Xr vidcontrol 1
1954for valid modes).
1955.It Va isdn_fsdev
1956.Pq Vt str
1957Set to
1958.Dq Li NO
1959by default.
1960The output device for
1961.Xr isdnd 8
1962in full-screen mode (or
1963.Dq Li NO
1964for daemon mode).
1965.It Va isdn_trace
1966.Pq Vt bool
1967Set to
1968.Dq Li NO
1969by default.
1970When set to
1971.Dq Li YES ,
1972enables the ISDN protocol trace utility
1973.Xr isdntrace 8
1974at system boot time.
1975.It Va isdn_traceflags
1976.Pq Vt str
1977Set to
1978.Dq Fl f Pa /var/tmp/isdntrace0
1979by default.
1980Flags for
1981.Xr isdntrace 8 .
1982.\" -----------------------------------------------------
1983.It Va pcvt_verbose
1984.Pq Vt bool
1985Set to
1986.Dq Li NO
1987by default.
1988When set to
1989.Dq Li YES ,
1990verbose messages about the actions done by the start script are displayed.
1991.Em Note:
1992the pcvt driver must be comiled into the kernel before the pcvt related
1993options described here take any effect.
1994.It Va pcvt_keymap
1995.Pq Vt str
1996Set to
1997.Dq Li NO
1998by default.
1999Use this to configure a national keyboard mapping found in the
2000.Pa /usr/share/misc/keycap.pcvt
2001file of keyboard mappings.
2002(see also the manual pages
2003.Xr keycap 5
2004and
2005.Xr keycap 3
2006for usage of pcvt's keycap database and the manual page
2007.Xr kcon 1
2008option -m for national keyboard mapping configuration).
2009.It Va pcvt_keydel
2010.Pq Vt int
2011Set to
2012.Dq Li NO
2013by default.
2014Used to set the keyboard key repeat delay value. Valid values are
2015in the range 0..3 for delay values of 250, 500, 750 and 1000 msec.
2016(See also the
2017.Xr kcon 1
2018manual page).
2019.It Va pcvt_keyrate
2020.Pq Vt int
2021Set to
2022.Dq Li NO
2023by default.
2024Used to set the keyboard key repetition rate value. Valid values are
2025in the range 0..31 for repetition values of 2..30 characters per second.
2026.It Va pcvt_keyrepeat
2027.Pq Vt bool
2028Set to
2029.Dq Li NO
2030by default.
2031Set to
2032.Dq Li YES
2033to enable automatic keyboard key repeating.
2034.It Va pcvt_force24
2035.Pq Vt bool
2036Set to
2037.Dq Li NO
2038by default.
2039Set to
2040.Dq Li YES
2041to force pcvt to use 24 lines only (in 25 lines mode) for compatibility
2042with the original VT220 terminal.
2043.It Va pcvt_hpext
2044.Pq Vt bool
2045Set to
2046.Dq Li NO
2047by default.
2048Set to
2049.Dq Li YES
2050to enable the display and funtionality of function key labels (as found
2051on Hewlett-Packard terminals such as the HP2392A and the HP700/92 in
2052ANSI mode).
2053.It Va pcvt_lines
2054.Pq Vt int
2055Set to
2056.Dq Li NO
2057by default resulting in a value of 25.
2058Used to set the number of lines on the screen. For VGA displays, valid
2059values are 25, 28, 40 and 50 lines.
2060(See also the
2061.Xr scon 1
2062manual page).
2063.It Va pcvt_blanktime
2064.Pq Vt int
2065Set to
2066.Dq Li NO
2067by default.
2068Used to set the screen saver timeout in seconds for values greater than
2069zero.
2070.It Va pcvt_cursorh
2071.Pq Vt int
2072Set to
2073.Dq Li NO
2074by default.
2075Used to set the cursor top scanline.
2076(See also the
2077.Xr cursor 1
2078manual page).
2079.It Va pcvt_cursorl
2080.Pq Vt int
2081Set to
2082.Dq Li NO
2083by default.
2084Used to set the cursor bottom scanline.
2085.It Va pcvt_monohigh
2086.Pq Vt bool
2087Set to
2088.Dq Li NO
2089by default.
2090Set to
2091.Dq Li YES
2092to set intensity to high on monochrome monitors.
2093(See also the
2094.Xr scon 1
2095manual page, option -p, for more information on changing VGA palette
2096values).
2097.El
2098.Sh FILES
2099.Bl -tag -width ".Pa /etc/defaults/rc.conf" -compact
2100.It Pa /etc/defaults/rc.conf
2101.It Pa /etc/rc.conf
2102.It Pa /etc/rc.conf.local
2103.El
2104.Sh SEE ALSO
2105.Xr catman 1 ,
2106.Xr gdb 1 ,
2107.Xr info 1 ,
2108.Xr makewhatis 1 ,
2109.Xr vidcontrol 1 ,
2110.Xr tcp 4 ,
2111.Xr udp 4 ,
2112.Xr exports 5 ,
2113.Xr motd 5 ,
2114.Xr accton 8 ,
2115.Xr amd 8 ,
2116.Xr apm 8 ,
2117.Xr atm 8 ,
2118.Xr cron 8 ,
2119.Xr dhclient 8 ,
2120.Xr gated 8 ,
2121.Xr ifconfig 8 ,
2122.Xr inetd 8 ,
2123.Xr isdnd 8 ,
2124.Xr isdntrace 8 ,
2125.Xr lpd 8 ,
2126.Xr mdconfig 8 ,
2127.Xr moused 8 ,
2128.Xr mrouted 8 ,
2129.Xr named 8 ,
2130.Xr nfsd 8 ,
2131.Xr ntpd 8 ,
2132.Xr ntpdate 8 ,
2133.Xr pcnfsd 8 ,
2134.Xr quotacheck 8 ,
2135.Xr quotaon 8 ,
2136.Xr rc 8 ,
2137.Xr rc.sendmail 8 ,
2138.Xr route 8 ,
2139.Xr routed 8 ,
2140.Xr rpc.lockd 8 ,
2141.Xr rpc.statd 8 ,
2142.Xr rpcbind 8 ,
2143.Xr rwhod 8 ,
2144.Xr savecore 8 ,
2145.Xr sshd 8 ,
2146.Xr swapon 8 ,
2147.Xr sysctl 8 ,
2148.Xr syslogd 8 ,
2149.Xr timed 8 ,
2150.Xr vinum 8 ,
2151.Xr xtend 8 ,
2152.Xr yp 8 ,
2153.Xr ypbind 8 ,
2154.Xr ypserv 8 ,
2155.Xr ypset 8
2156.Sh HISTORY
2157The
2158.Nm
2159file appeared in
2160.Fx 2.2.2 .
2161.Sh AUTHORS
2162.An Jordan K. Hubbard .
2163