rc.conf revision 123532
1#!/bin/sh
2#
3
4# This is rc.conf - a file full of useful variables that you can set
5# to change the default startup behavior of your system.  You should
6# not edit this file!  Put any overrides into one of the ${rc_conf_files}
7# instead and you will be able to update these defaults later without
8# spamming your local configuration information.
9#
10# The ${rc_conf_files} files should only contain values which override
11# values set in this file.  This eases the upgrade path when defaults
12# are changed and new features are added.
13#
14# All arguments must be in double or single quotes.
15#
16# $FreeBSD: head/etc/defaults/rc.conf 123532 2003-12-14 09:42:02Z seanc $
17
18##############################################################
19###  Important initial Boot-time options  ####################
20##############################################################
21
22rc_debug="NO"		# Set to YES to enable debugging output from rc.d
23rc_info="NO"		# Enables display of informational messages at boot.
24rcshutdown_timeout="30" # Seconds to wait before terminating rc.shutdown
25swapfile="NO"		# Set to name of swapfile if aux swapfile desired.
26apm_enable="NO"		# Set to YES to enable APM BIOS functions (or NO).
27apmd_enable="NO"	# Run apmd to handle APM event from userland.
28apmd_flags=""		# Flags to apmd (if enabled).
29devd_enable="NO" 	# Run devd, to trigger programs on device tree changes.
30kldxref_enable="NO"	# Build linker.hints files with kldxref(8).
31kldxref_clobber="NO"	# Overwrite old linker.hints at boot.
32kldxref_module_path=""	# Override kern.module_path. A ';'-delimited list.
33pccard_enable="NO"	# Set to YES if you want to configure PCCARD devices.
34pccard_mem="DEFAULT"	# If pccard_enable=YES, this is card memory address.
35pccard_beep="2"		# pccard beep type.
36pccard_ifconfig="NO"	# Specialized pccard ethernet configuration (or NO).
37pccardd_flags="-z"	# Additional flags for pccardd.
38pccard_conf="/etc/defaults/pccard.conf"	# pccardd(8) config file
39pccard_ether_delay="5"	# Delay before trying to start dhclient in pccard_ether
40removable_interfaces=""	# Removable network interfaces for /etc/pccard_ether.
41local_startup="/usr/local/etc/rc.d /usr/X11R6/etc/rc.d" # startup script dirs.
42script_name_sep=" "	# Change if your startup scripts' names contain spaces
43rc_conf_files="/etc/rc.conf /etc/rc.conf.local"
44
45# Experimental - test before enabling
46gbde_autoattach_all="NO" # YES automatically mounts gbde devices from fstab
47gbde_devices="NO" 	# Devices to automatically attach (list, or AUTO)
48
49fsck_y_enable="NO"	# Set to YES to do fsck -y if the initial preen fails.
50background_fsck="YES"	# Attempt to run fsck in the background where possible.
51background_fsck_delay="60" # Time to wait (seconds) before starting the fsck.
52netfs_types="nfs:NFS smbfs:SMB portalfs:PORTAL nwfs:NWFS" # Net filesystems.
53extra_netfs_types="NO"	# List of network extra filesystem types for delayed
54			# mount at startup (or NO).
55
56# ATA RAID support for startup
57# Example config for a RAID1 set:
58# ataraid_ar0_set="ad2 ad3"	# Creates the RAID set from these drives
59# ataraid_ar0_type="RAID1"	# RAID type for ar0
60ataraid_create_flags="create"	# Flags needed to create a RAID set.
61ataraid_delete_flags="delete"	# Flags needed to delete a RAID set.
62ataraid_status_flags="status"	# Flags needed to get the status on a RAID set.
63ataraid_devices=""      # List of the ata RAID devices. ex: "ar0"
64ataraid_enable="NO"     # Enable software ATA raid support
65ataraid_program="/sbin/atacontrol"      # Path to ata raid program.
66
67
68##############################################################
69###  Network configuration sub-section  ######################
70##############################################################
71
72### Basic network and firewall/security options: ###
73hostname=""			# Set this!
74nisdomainname="NO"		# Set to NIS domain if using NIS (or NO).
75dhclient_program="/sbin/dhclient"	# Path to dhcp client program.
76dhclient_flags=""		# Additional flags to pass to dhcp client.
77background_dhclient="NO"	# Start dhcp client in the background.
78firewall_enable="NO"		# Set to YES to enable firewall functionality
79firewall_script="/etc/rc.firewall" # Which script to run to set up the firewall
80firewall_type="UNKNOWN"		# Firewall type (see /etc/rc.firewall)
81firewall_quiet="NO"		# Set to YES to suppress rule display
82firewall_logging="NO"		# Set to YES to enable events logging
83firewall_flags=""		# Flags passed to ipfw when type is a file
84ip_portrange_first="NO"		# Set first dynamically allocated port
85ip_portrange_last="NO"		# Set last dynamically allocated port
86ike_enable="NO"			# Enable IKE daemon (usually racoon or isakmpd)
87ike_program="/usr/local/sbin/isakmpd"	# Path to IKE daemon
88ike_flags=""			# Additional flags for IKE daemon
89ipsec_enable="NO"		# Set to YES to run setkey on ipsec_file
90ipsec_file="/etc/ipsec.conf"	# Name of config file for setkey
91natd_program="/sbin/natd"	# path to natd, if you want a different one.
92natd_enable="NO"		# Enable natd (if firewall_enable == YES).
93natd_interface=""		# Public interface or IPaddress to use.
94natd_flags=""			# Additional flags for natd.
95ipfilter_enable="NO"		# Set to YES to enable ipfilter functionality
96ipfilter_program="/sbin/ipf"	# where the ipfilter program lives
97ipfilter_rules="/etc/ipf.rules"	# rules definition file for ipfilter, see
98				# /usr/src/contrib/ipfilter/rules for examples
99ipfilter_flags=""		# additional flags for ipfilter
100ipnat_enable="NO"		# Set to YES to enable ipnat functionality
101ipnat_program="/sbin/ipnat"	# where the ipnat program lives
102ipnat_rules="/etc/ipnat.rules"	# rules definition file for ipnat
103ipnat_flags=""			# additional flags for ipnat
104ipmon_enable="NO"		# Set to YES for ipmon; needs ipfilter or ipnat
105ipmon_program="/sbin/ipmon"	# where the ipfilter monitor program lives
106ipmon_flags="-Ds"		# typically "-Ds" or "-D /var/log/ipflog"
107ipfs_enable="NO"		# Set to YES to enable saving and restoring
108				# of state tables at shutdown and boot
109ipfs_program="/sbin/ipfs"	# where the ipfs program lives
110ipfs_flags=""			# additional flags for ipfs
111tcp_extensions="YES"		# Set to NO to turn off RFC1323 extensions.
112log_in_vain="0"			# >=1 to log connects to ports w/o listeners.
113tcp_keepalive="YES"		# Enable stale TCP connection timeout (or NO).
114# For the following option you need to have TCP_DROP_SYNFIN set in your
115# kernel.  Please refer to LINT and NOTES for details.
116tcp_drop_synfin="NO"		# Set to YES to drop TCP packets with SYN+FIN
117				# NOTE: this violates the TCP specification
118icmp_drop_redirect="NO" 	# Set to YES to ignore ICMP REDIRECT packets
119icmp_log_redirect="NO"		# Set to YES to log ICMP REDIRECT packets
120network_interfaces="auto"	# List of network interfaces (or "auto").
121cloned_interfaces=""		# List of cloned network interfaces to create.
122#cloned_interfaces="gif0 gif1 gif2 gif3" # Pre-cloning GENERIC config.
123ifconfig_lo0="inet 127.0.0.1"	# default loopback device configuration.
124#ifconfig_lo0_alias0="inet 127.0.0.254 netmask 0xffffffff" # Sample alias entry.
125#ifconfig_ed0_ipx="ipx 0x00010010"	# Sample IPX address family entry.
126#
127# If you have any sppp(4) interfaces above, you might also want to set
128# the following parameters.  Refer to spppcontrol(8) for their meaning.
129sppp_interfaces=""		# List of sppp interfaces.
130#sppp_interfaces="isp0"		# example: sppp over ISDN
131#spppconfig_isp0="authproto=chap myauthname=foo myauthsecret='top secret' hisauthname=some-gw hisauthsecret='another secret'"
132gif_interfaces="NO"		# List of GIF tunnels (or "NO").
133#gif_interfaces="gif0 gif1"	# Examples typically for a router.
134				# Choose correct tunnel addrs.
135#gifconfig_gif0="10.1.1.1 10.1.2.1"	# Examples typically for a router.
136#gifconfig_gif1="10.1.1.2 10.1.2.2"	# Examples typically for a router.
137
138# User ppp configuration.
139ppp_enable="NO"		# Start user-ppp (or NO).
140ppp_mode="auto"		# Choice of "auto", "ddial", "direct" or "dedicated".
141			# For details see man page for ppp(8). Default is auto.
142ppp_nat="YES"		# Use PPP's internal network address translation or NO.
143ppp_profile="papchap"	# Which profile to use from /etc/ppp/ppp.conf.
144ppp_user="root"		# Which user to run ppp as
145
146### Network daemon (miscellaneous) ###
147syslogd_enable="YES"		# Run syslog daemon (or NO).
148syslogd_program="/usr/sbin/syslogd" # path to syslogd, if you want a different one.
149syslogd_flags="-s"		# Flags to syslogd (if enabled).
150#syslogd_flags="-ss"		# Syslogd flags to not bind an inet socket
151inetd_enable="NO"		# Run the network daemon dispatcher (YES/NO).
152inetd_program="/usr/sbin/inetd"	# path to inetd, if you want a different one.
153inetd_flags="-wW -C 60"		# Optional flags to inetd
154#
155# named.  It may be possible to run named in a sandbox, man security for
156# details.
157#
158named_rcng="NO"			# XXX Temporary. Enable to use new rc
159				#    functionality in support of named. See
160				#    variables below.
161named_enable="NO"		# Run named, the DNS server (or NO).
162named_program="/usr/sbin/named"	# path to named, if you want a different one.
163named_flags="-u bind -g bind"	# Flags for named
164named_pidfile="/var/run/named/pid" # Pid file
165named_chrootdir=""		# Chroot directory (or "" not to auto-chroot it)
166named_chroot_autoupdate="YES"	# Automatically install/update chrooted
167				# components of named. See /etc/rc.d/named.
168named_symlink_enable="YES"	# Symlink ${named_pidfile} and /var/run/ndc
169				# to their chrooted counterparts.
170
171#
172# kerberos. Do not run the admin daemons on slave servers
173#
174kerberos5_server_enable="NO"	# Run a kerberos 5 master server (or NO).
175kerberos5_server="/usr/libexec/kdc"	# path to kerberos 5 KDC
176kadmind5_server_enable="NO"	# Run kadmind (or NO)
177kadmind5_server="/usr/libexec/kadmind"	# path to kerberos 5 admin daemon
178kpasswdd_server_enable="NO"	# Run kpasswdd (or NO)
179kpasswdd_server="/usr/libexec/kpasswdd"	# path to kerberos 5 passwd daemon
180
181rwhod_enable="NO"		# Run the rwho daemon (or NO).
182rwhod_flags=""			# Flags for rwhod
183rarpd_enable="NO"		# Run rarpd (or NO).
184rarpd_flags=""			# Flags to rarpd.
185bootparamd_enable="NO"		# Run bootparamd (or NO).
186bootparamd_flags=""		# Flags to bootparamd
187pppoed_enable="NO"		# Run the PPP over Ethernet daemon.
188pppoed_provider="*"		# Provider and ppp(8) config file entry.
189pppoed_flags="-P /var/run/pppoed.pid"	# Flags to pppoed (if enabled).
190pppoed_interface="fxp0"		# The interface that pppoed runs on.
191sshd_enable="NO"		# Enable sshd
192sshd_program="/usr/sbin/sshd"	# path to sshd, if you want a different one.
193sshd_flags=""			# Additional flags for sshd.
194
195### Network daemon (NFS): All need rpcbind_enable="YES" ###
196amd_enable="NO"			# Run amd service with $amd_flags (or NO).
197amd_flags="-a /.amd_mnt -l syslog /host /etc/amd.map /net /etc/amd.map"
198amd_map_program="NO"		# Can be set to "ypcat -k amd.master"
199nfs_client_enable="NO"		# This host is an NFS client (or NO).
200nfs_access_cache="2"		# Client cache timeout in seconds
201nfs_server_enable="NO"		# This host is an NFS server (or NO).
202nfs_server_flags="-u -t -n 4"	# Flags to nfsd (if enabled).
203mountd_enable="NO"		# Run mountd (or NO).
204mountd_flags="-r"		# Flags to mountd (if NFS server enabled).
205weak_mountd_authentication="NO"	# Allow non-root mount requests to be served.
206nfs_reserved_port_only="NO"	# Provide NFS only on secure port (or NO).
207nfs_bufpackets=""		# bufspace (in packets) for client
208rpc_lockd_enable="NO"		# Run NFS rpc.lockd needed for client/server.
209rpc_statd_enable="NO"		# Run NFS rpc.statd needed for client/server.
210rpcbind_enable="NO"		# Run the portmapper service (YES/NO).
211rpcbind_program="/usr/sbin/rpcbind"	# path to rpcbind, if you want a different one.
212rpcbind_flags=""		# Flags to rpcbind (if enabled).
213rpc_ypupdated_enable="NO"	# Run if NIS master and SecureRPC (or NO).
214keyserv_enable="NO"		# Run the SecureRPC keyserver (or NO).
215keyserv_flags=""		# Flags to keyserv (if enabled).
216
217### Network Time Services options: ###
218timed_enable="NO"		# Run the time daemon (or NO).
219timed_flags=""			# Flags to timed (if enabled).
220ntpdate_enable="NO"		# Run ntpdate to sync time on boot (or NO).
221ntpdate_program="/usr/sbin/ntpdate"	# path to ntpdate, if you want a different one.
222ntpdate_flags="-b"		# Flags to ntpdate (if enabled).
223ntpd_enable="NO"		# Run ntpd Network Time Protocol (or NO).
224ntpd_program="/usr/sbin/ntpd"	# path to ntpd, if you want a different one.
225ntpd_flags="-p /var/run/ntpd.pid -f /var/db/ntpd.drift"
226				# Flags to ntpd (if enabled).
227
228# Network Information Services (NIS) options: All need rpcbind_enable="YES" ###
229nis_client_enable="NO"		# We're an NIS client (or NO).
230nis_client_flags=""		# Flags to ypbind (if enabled).
231nis_ypset_enable="NO"		# Run ypset at boot time (or NO).
232nis_ypset_flags=""		# Flags to ypset (if enabled).
233nis_server_enable="NO"		# We're an NIS server (or NO).
234nis_server_flags=""		# Flags to ypserv (if enabled).
235nis_ypxfrd_enable="NO"		# Run rpc.ypxfrd at boot time (or NO).
236nis_ypxfrd_flags=""		# Flags to rpc.ypxfrd (if enabled).
237nis_yppasswdd_enable="NO"	# Run rpc.yppasswdd at boot time (or NO).
238nis_yppasswdd_flags=""		# Flags to rpc.yppasswdd (if enabled).
239
240### Network routing options: ###
241defaultrouter="NO"		# Set to default gateway (or NO).
242static_routes=""		# Set to static route list (or leave empty).
243natm_static_routes=""		# Set to static route list for NATM (or leave empty).
244gateway_enable="NO"		# Set to YES if this host will be a gateway.
245router_enable="NO"		# Set to YES to enable a routing daemon.
246router="/sbin/routed"		# Name of routing daemon to use if enabled.
247router_flags="-q"		# Flags for routing daemon.
248mrouted_enable="NO"		# Do multicast routing (see /etc/mrouted.conf).
249mrouted_flags=""		# Flags for multicast routing daemon.
250ipxgateway_enable="NO"		# Set to YES to enable IPX routing.
251ipxrouted_enable="NO"		# Set to YES to run the IPX routing daemon.
252ipxrouted_flags=""		# Flags for IPX routing daemon.
253arpproxy_all="NO"		# replaces obsolete kernel option ARP_PROXYALL.
254forward_sourceroute="NO"	# do source routing (only if gateway_enable is set to "YES")
255accept_sourceroute="NO"		# accept source routed packets to us
256
257### ATM interface options: ###
258atm_enable="NO"			# Configure ATM interfaces (or NO).
259#atm_netif_hea0="atm 1"		# Network interfaces for physical interface.
260#atm_sigmgr_hea0="uni31"	# Signalling manager for physical interface.
261#atm_prefix_hea0="ILMI"		# NSAP prefix (UNI interfaces only) (or ILMI).
262#atm_macaddr_hea0="NO"		# Override physical MAC address (or NO).
263#atm_arpserver_atm0="0x47.0005.80.999999.9999.9999.9999.999999999999.00" # ATMARP server address (or local).
264#atm_scsparp_atm0="NO"		# Run SCSP/ATMARP on network interface (or NO).
265atm_pvcs=""			# Set to PVC list (or leave empty).
266atm_arps=""			# Set to permanent ARP list (or leave empty).
267
268### ISDN interface options: (see also: /usr/share/examples/isdn) ###
269isdn_enable="NO"		# Enable the ISDN subsystem (or NO).
270isdn_fsdev="NO"			# Output device for fullscreen mode (or NO for daemon mode).
271isdn_flags="-dn -d0x1f9"	# Flags for isdnd
272isdn_ttype="cons25"		# terminal type for fullscreen mode
273isdn_screenflags="NO"		# screenflags for ${isdn_fsdev}
274isdn_trace="NO"			# Enable the ISDN trace subsystem (or NO).
275isdn_traceflags="-f /var/tmp/isdntrace0"	# Flags for isdntrace
276
277### Miscellaneous network options: ###
278icmp_bmcastecho="NO"	# respond to broadcast ping packets
279
280### IPv6 options: ###
281ipv6_enable="NO"		# Set to YES to set up for IPv6.
282ipv6_network_interfaces="auto"	# List of network interfaces (or "auto").
283ipv6_defaultrouter="NO"		# Set to IPv6 default gateway (or NO).
284#ipv6_defaultrouter="2002:c058:6301::"	# Use this for 6to4 (RFC 3068)
285ipv6_static_routes=""		# Set to static route list (or leave empty).
286#ipv6_static_routes="xxx"	# An example to set fec0:0000:0000:0006::/64
287				#  route toward loopback interface.
288#ipv6_route_xxx="fec0:0000:0000:0006:: -prefixlen 64 ::1"
289ipv6_gateway_enable="NO"	# Set to YES if this host will be a gateway.
290ipv6_router_enable="NO"		# Set to YES to enable an IPv6 routing daemon.
291ipv6_router="/usr/sbin/route6d"	# Name of IPv6 routing daemon.
292ipv6_router_flags=""		# Flags to IPv6 routing daemon.
293#ipv6_router_flags="-l"		# Example for route6d with only IPv6 site local
294				# addrs.
295#ipv6_router_flags="-q"		# If you want to run a routing daemon on an end
296				# node, you should stop advertisement.
297#ipv6_network_interfaces="ed0 ep0"	# Examples for router
298					# or static configuration for end node.
299					# Choose correct prefix value.
300#ipv6_prefix_ed0="fec0:0000:0000:0001 fec0:0000:0000:0002"  # Examples for rtr.
301#ipv6_prefix_ep0="fec0:0000:0000:0003 fec0:0000:0000:0004"  # Examples for rtr.
302#ipv6_ifconfig_ed0="fec0:0:0:5::1 prefixlen 64"	# Sample manual assign entry
303#ipv6_ifconfig_ed0_alias0="fec0:0:0:5::2 prefixlen 64" # Sample alias entry.
304ipv6_default_interface="NO"	# Default output interface for scoped addrs.
305				# Now this works only for IPv6 link local
306				# multicast addrs.
307rtsol_flags=""			# Flags to IPv6 router solicitation.
308rtadvd_enable="NO"		# Set to YES to enable an IPv6 router
309				# advertisement daemon. If set to YES,
310				# this router becomes a possible candidate
311				# IPv6 default router for local subnets.
312rtadvd_interfaces=""		# Interfaces rtadvd sends RA packets.
313mroute6d_enable="NO"		# Do IPv6 multicast routing.
314mroute6d_program="/usr/local/sbin/pim6dd"	# Name of IPv6 multicast
315						# routing daemon.  You need to
316						# install it from package or
317						# port.
318mroute6d_flags=""		# Flags to IPv6 multicast routing daemon.
319stf_interface_ipv4addr=""	# Local IPv4 addr for 6to4 IPv6 over IPv4
320				# tunneling interface. Specify this entry
321				# to enable 6to4 interface.
322stf_interface_ipv4plen="0"	# Prefix length for 6to4 IPv4 addr,
323				# to limit peer addr range. Effective value
324				# is 0-31.
325stf_interface_ipv6_ifid="0:0:0:1"	# IPv6 interface id for stf0.
326				# If you like, you can set "AUTO" for this.
327stf_interface_ipv6_slaid="0000"	# IPv6 Site Level Aggregator for stf0
328ipv6_faith_prefix="NO"		# Set faith prefix to enable a FAITH
329				# IPv6-to-IPv4 TCP translator.  You also need
330				# faithd(8) setup.
331ipv6_ipv4mapping="NO"		# Set to "YES" to enable IPv4 mapped IPv6 addr
332				# communication. (like ::ffff:a.b.c.d)
333ipv6_firewall_enable="NO"	# Set to YES to enable IPv6 firewall
334				# functionality
335ipv6_firewall_script="/etc/rc.firewall6" # Which script to run to set up the IPv6 firewall
336ipv6_firewall_type="UNKNOWN"	# IPv6 Firewall type (see /etc/rc.firewall6)
337ipv6_firewall_quiet="NO"	# Set to YES to suppress rule display
338ipv6_firewall_logging="NO"	# Set to YES to enable events logging
339ipv6_firewall_flags=""		# Flags passed to ip6fw when type is a file
340ipv6_ipfilter_rules="/etc/ipf6.rules"	# rules definition file for ipfilter,
341					# see /usr/src/contrib/ipfilter/rules
342					# for examples
343
344##############################################################
345###  System console options  #################################
346##############################################################
347
348keymap="NO"		# keymap in /usr/share/syscons/keymaps/* (or NO).
349keyrate="NO"		# keyboard rate to: slow, normal, fast (or NO).
350keybell="NO" 		# See kbdcontrol(1) for options.  Use "off" to disable.
351keychange="NO"		# function keys default values (or NO).
352cursor="NO"		# cursor type {normal|blink|destructive} (or NO).
353scrnmap="NO"		# screen map in /usr/share/syscons/scrnmaps/* (or NO).
354font8x16="NO"		# font 8x16 from /usr/share/syscons/fonts/* (or NO).
355font8x14="NO"		# font 8x14 from /usr/share/syscons/fonts/* (or NO).
356font8x8="NO"		# font 8x8 from /usr/share/syscons/fonts/* (or NO).
357blanktime="300"		# blank time (in seconds) or "NO" to turn it off.
358saver="NO"		# screen saver: Uses /boot/kernel/${saver}_saver.ko
359moused_enable="NO"	# Run the mouse daemon.
360moused_type="auto"	# See man page for rc.conf(5) for available settings.
361moused_port="/dev/psm0"	# Set to your mouse port.
362moused_flags=""		# Any additional flags to moused.
363mousechar_start="NO"	# if 0xd0-0xd3 default range is occupied in your
364			# language code table, specify alternative range
365			# start like mousechar_start=3, see vidcontrol(1)
366allscreens_flags=""	# Set this vidcontrol mode for all virtual screens
367allscreens_kbdflags=""	# Set this kbdcontrol mode for all virtual screens
368
369
370##############################################################
371###  pcvt console driver options  ############################
372##############################################################
373
374pcvt_verbose="NO"	# set to YES to enable verbose configuration messages
375pcvt_keymap="NO"	# keyboard map in /usr/share/misc/keycap.pcvt (or NO).
376pcvt_keydel="NO"	# key repeat delay, 0-3 (250,500,750,1000 msec) (or NO).
377pcvt_keyrate="NO"	# keyboard repetition rate 31-0 (2-30 char/sec) (or NO).
378pcvt_keyrepeat="NO"	# keyboard repeat ON or OFF (or NO).
379pcvt_force24="NO"	# force a 24 line display (when 25 possible) (or NO).
380pcvt_hpext="NO"		# use HP extensions (function keys labels) (or NO).
381pcvt_lines="NO"		# lines (25, 28, 40, 50 or NO).
382pcvt_blanktime="NO"	# blank time (in seconds) (or NO).
383pcvt_cursorh="NO"	# cursor top scanline (topmost line is 0) (or NO).
384pcvt_cursorl="NO"	# cursor low scanline (bottom line is 16) (or NO).
385pcvt_monohigh="NO"	# set intensity to high on monochrome monitors (or NO).
386
387
388##############################################################
389###  Mail Transfer Agent (MTA) options  ######################
390##############################################################
391
392mta_start_script="/etc/rc.sendmail"
393			# Script to start your chosen MTA, called by /etc/rc.
394# Settings for /etc/rc.sendmail:
395sendmail_enable="NO"	# Run the sendmail inbound daemon (YES/NO).
396sendmail_flags="-L sm-mta -bd -q30m" # Flags to sendmail (as a server)
397sendmail_submit_enable="YES"	# Start a localhost-only MTA for mail submission
398sendmail_submit_flags="-L sm-mta -bd -q30m -ODaemonPortOptions=Addr=localhost"
399				# Flags for localhost-only MTA
400sendmail_outbound_enable="YES"	# Dequeue stuck mail (YES/NO).
401sendmail_outbound_flags="-L sm-queue -q30m" # Flags to sendmail (outbound only)
402sendmail_msp_queue_enable="YES"	# Dequeue stuck clientmqueue mail (YES/NO).
403sendmail_msp_queue_flags="-L sm-msp-queue -Ac -q30m"
404				# Flags for sendmail_msp_queue daemon.
405
406
407##############################################################
408###  Miscellaneous administrative options  ###################
409##############################################################
410
411cron_enable="YES"	# Run the periodic job daemon.
412cron_program="/usr/sbin/cron"	# Which cron executable to run (if enabled).
413cron_flags=""		# Which options to pass to the cron daemon.
414lpd_enable="NO"		# Run the line printer daemon.
415lpd_program="/usr/sbin/lpd"	# path to lpd, if you want a different one.
416lpd_flags=""		# Flags to lpd (if enabled).
417usbd_enable="NO"	# Run the usbd daemon.
418usbd_flags=""		# Flags to usbd (if enabled).
419dumpdev="NO"		# Device name to crashdump to (or NO).
420dumpdir="/var/crash"	# Directory where crash dumps are to be stored
421savecore_flags=""	# Used if dumpdev is enabled above, and present.
422enable_quotas="NO"	# turn on quotas on startup (or NO).
423check_quotas="YES"	# Check quotas on startup (or NO).
424accounting_enable="NO"	# Turn on process accounting (or NO).
425ibcs2_enable="NO"	# Ibcs2 (SCO) emulation loaded at startup (or NO).
426ibcs2_loaders="coff"	# List of additional Ibcs2 loaders (or NO).
427sysvipc_enable="NO"	# Load System V IPC primitives at startup (or NO).
428linux_enable="NO"	# Linux binary compatibility loaded at startup (or NO).
429svr4_enable="NO"	# SysVR4 emulation loaded at startup (or NO).
430osf1_enable="NO"	# Alpha OSF/1 emulation loaded at startup (or NO).
431clear_tmp_enable="NO"	# Clear /tmp at startup.
432ldconfig_insecure="NO"	# Set to YES to disable ldconfig security checks
433ldconfig_paths="/usr/lib/compat /usr/X11R6/lib /usr/local/lib"
434			# shared library search paths
435ldconfig_paths_aout="/usr/lib/compat/aout /usr/X11R6/lib/aout /usr/local/lib/aout"
436			# a.out shared library search paths
437kern_securelevel_enable="NO"	# kernel security level (see init(8)),
438kern_securelevel="-1"	# range: -1..3 ; `-1' is the most insecure
439lomac_enable="NO"	# start lomac(4) security module at boot
440update_motd="YES"	# update version info in /etc/motd (or NO)
441start_vinum="NO"	# set to YES to start vinum
442unaligned_print="YES"	# print unaligned access warnings on the alpha (or NO).
443entropy_file="/entropy"	# Set to NO to disable caching entropy through reboots.
444			# /var/db/entropy is preferred if / is not available.
445entropy_dir="/var/db/entropy" # Set to NO to disable caching entropy via cron.
446entropy_save_sz="2048"	# Size of the entropy cache files.
447entropy_save_num="8"	# Number of entropy cache files to save.
448harvest_interrupt="YES"	# Entropy device harvests interrupt randomness
449harvest_ethernet="YES"	# Entropy device harvests ethernet randomness
450harvest_p_to_p="YES"	# Entropy device harvests point-to-point randomness
451dmesg_enable="YES"	# Save dmesg(8) to /var/run/dmesg.boot
452watchdogd_enable="NO"	# Start the software watchdog daemon
453devfs_rulesets="/etc/defaults/devfs.rules /etc/devfs.rules" # Files containing
454							    # devfs(8) rules.
455devfs_system_ruleset=""	# The name of a ruleset to apply to /dev
456
457##############################################################
458### Jail Configuration #######################################
459##############################################################
460jail_enable="NO"	# Set to NO to disable starting of any jails
461jail_list=""		# Space separated list of names of jails
462jail_set_hostname_allow="YES" # Allow root user in a jail to change its hostname
463jail_socket_unixiproute_only="YES" # Route only TCP/IP within a jail
464jail_sysvipc_allow="NO"	# Allow SystemV IPC use from within a jail
465jail_stop_jailer="NO"	# Only stop jailer. Requires jail_*_exec be set
466			# to use sysutils/jailer port to start the jail.
467
468#
469# To use rc's built-in jail infrastructure create entries for
470# each jail, specified in jail_list, with the following variables.
471# NOTE: replace 'example' with the jail's name.
472#
473#jail_example_rootdir="/usr/jail/default"	# Jail's root directory
474#jail_example_hostname="default.domain.com"	# Jail's hostname
475#jail_example_ip="192.168.0.10"			# Jail's IP number
476#jail_example_exec="/bin/sh /etc/rc"		# command to execute in jail
477#jail_example_devfs_enable="NO"			# mount devfs in the jail
478#jail_example_fdescfs_enable="NO"		# mount fdescfs in the jail
479#jail_example_procfs_enable="NO"		# mount procfs in jail
480#jail_example_devfs_ruleset="123"		# devfs ruleset to apply to jail
481
482##############################################################
483### Define source_rc_confs, the mechanism used by /etc/rc.* ##
484### scripts to source rc_conf_files overrides safely.	    ##
485##############################################################
486
487if [ -z "${source_rc_confs_defined}" ]; then
488	source_rc_confs_defined=yes
489	source_rc_confs () {
490		local i sourced_files
491		for i in ${rc_conf_files}; do
492			case ${sourced_files} in
493			*:$i:*)
494				;;
495			*)
496				sourced_files="${sourced_files}:$i:"
497				if [ -r $i ]; then
498					. $i
499				fi
500				;;
501			esac
502		done
503	}
504fi
505