1.\"- 2.\" Copyright (c) 2000 Brian Somers <brian@Awfulhak.org> 3.\" All rights reserved. 4.\" 5.\" Redistribution and use in source and binary forms, with or without 6.\" modification, are permitted provided that the following conditions 7.\" are met: 8.\" 1. Redistributions of source code must retain the above copyright 9.\" notice, this list of conditions and the following disclaimer. 10.\" 2. Redistributions in binary form must reproduce the above copyright 11.\" notice, this list of conditions and the following disclaimer in the 12.\" documentation and/or other materials provided with the distribution. 13.\" 14.\" THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND 15.\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 16.\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 17.\" ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE 18.\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 19.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 20.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 21.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 22.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 23.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 24.\" SUCH DAMAGE. 25.\" 26.\" $FreeBSD: head/share/man/man5/periodic.conf.5 323550 2017-09-13 16:35:16Z gordon $ 27.\" 28.Dd Oct 18, 2020 29.Dt PERIODIC.CONF 5 30.Os 31.Sh NAME 32.Nm periodic.conf 33.Nd periodic job configuration information 34.Sh DESCRIPTION 35The file 36.Nm 37contains a description of how daily, weekly and monthly system maintenance 38jobs should run. 39It resides in the 40.Pa /etc/defaults 41directory and parts may be overridden by a file of the same name in 42.Pa /etc , 43which itself may be overridden by the 44.Pa /etc/periodic.conf.local 45file. 46.Pp 47The 48.Nm 49file 50is actually sourced as a shell script from each of the periodic scripts 51and is intended to simply provide default configuration variables. 52.Pp 53The following variables are used by 54.Xr periodic 8 55itself: 56.Bl -tag -offset 4n -width 2n 57.It Va local_periodic 58.Pq Vt str 59List of directories to search for periodic scripts. 60This list is always prefixed with 61.Pa /etc/periodic , 62and is only used when an argument to 63.Xr periodic 8 64is not an absolute directory name. 65.It Ao Ar dir Ac Ns Va _output 66.Pq Vt path No or Vt list 67What to do with the output of the scripts executed from 68the directory 69.Ar dir . 70If this variable is set to an absolute path name, output is logged to 71that file, otherwise it is taken as one or more space separated email 72addresses and mailed to those users. 73If this variable is not set or is empty, output is sent to standard output. 74.Pp 75For an unattended machine, suitable values for 76.Va daily_output , 77.Va weekly_output , 78and 79.Va monthly_output 80might be 81.Dq Li /var/log/daily.log , 82.Dq Li /var/log/weekly.log , 83and 84.Dq Li /var/log/monthly.log 85respectively, as 86.Xr newsyslog 8 87will rotate these files (if they exists) at the appropriate times. 88.It Ao Ar dir Ac Ns Va _show_success 89.It Ao Ar dir Ac Ns Va _show_info 90.It Ao Ar dir Ac Ns Va _show_badconfig 91.Pq Vt bool 92These variables control whether 93.Xr periodic 8 94will mask the output of the executed scripts based on their return code 95(where 96.Ar dir 97is the base directory name in which each script resides). 98If the return code of a script is 99.Sq 0 100and 101.Ao Ar dir Ac Ns Va _show_success 102is set to 103.Dq Li NO , 104.Xr periodic 8 105will mask the script's output. 106If the return code of a script is 107.Sq 1 108and 109.Ao Ar dir Ac Ns Va _show_info 110is set to 111.Dq Li NO , 112.Xr periodic 8 113will mask the script's output. 114If the return code of a script is 115.Sq 2 116and 117.Ao Ar dir Ac Ns Va _show_badconfig 118is set to 119.Dq Li NO , 120.Xr periodic 8 121will mask the script's output. 122If these variables are set to neither 123.Dq Li YES 124nor 125.Dq Li NO , 126they default to 127.Dq Li YES , 128.Dq Li YES 129and 130.Dq Li NO 131respectively. 132.Pp 133Refer to the 134.Xr periodic 8 135manual page for how script return codes are interpreted. 136.It Va anticongestion_sleeptime 137.Pq Vt int 138The maximum number of seconds to randomly sleep in order to smooth bursty loads 139on a shared resource, such as a download mirror. 140.El 141.Pp 142The following variables are used by the standard scripts that reside in 143.Pa /etc/periodic/daily : 144.Bl -tag -offset 4n -width 2n 145.It Va daily_clean_disks_enable 146.Pq Vt bool 147Set to 148.Dq Li YES 149if you want to remove all files matching 150.Va daily_clean_disks_files 151daily. 152.It Va daily_clean_disks_files 153.Pq Vt str 154Set to a list of file names to match. 155Wild cards are permitted. 156.It Va daily_clean_disks_days 157.Pq Vt num 158When 159.Va daily_clean_disks_enable 160is set to 161.Dq Li YES , 162this must also be set to the number of days old that a file's access 163and modification times must be before it is deleted. 164.It Va daily_clean_disks_verbose 165.Pq Vt bool 166Set to 167.Dq Li YES 168if you want the removed files to be reported in your daily output. 169.It Va daily_clean_tmps_enable 170.Pq Vt bool 171Set to 172.Dq Li YES 173if you want to clear temporary directories daily. 174.It Va daily_clean_tmps_dirs 175.Pq Vt str 176Set to the list of directories to clear if 177.Va daily_clean_tmps_enable 178is set to 179.Dq Li YES . 180.It Va daily_clean_tmps_days 181.Pq Vt num 182When 183.Va daily_clean_tmps_enable 184is set, this must also be set to the number of days old that a file's access 185and modification times must be before it is deleted. 186.It Va daily_clean_tmps_ignore 187.Pq Vt str 188Set to the list of files that should not be deleted when 189.Va daily_clean_tmps_enable 190is set to 191.Dq Li YES . 192Wild card characters are permitted. 193.It Va daily_clean_tmps_verbose 194.Pq Vt bool 195Set to 196.Dq Li YES 197if you want the removed files to be reported in your daily output. 198.It Va daily_clean_preserve_enable 199.Pq Vt bool 200Set to 201.Dq Li YES 202if you wish to remove old files from 203.Pa /var/preserve . 204.It Va daily_clean_preserve_days 205.Pq Vt num 206Set to the number of days that files must not have been modified before 207they are deleted. 208.It Va daily_clean_preserve_verbose 209.Pq Vt bool 210Set to 211.Dq Li YES 212if you want the removed files to be reported in your daily output. 213.It Va daily_clean_msgs_enable 214.Pq Vt bool 215Set to 216.Dq Li YES 217if you wish old system messages to be purged. 218.It Va daily_clean_msgs_days 219.Pq Vt num 220Set to the number of days that files must not have been modified before 221they are deleted. 222If this variable is left blank, the 223.Xr msgs 1 224default is used. 225.It Va daily_clean_rwho_enable 226.Pq Vt bool 227Set to 228.Dq Li YES 229if you wish old files in 230.Pa /var/who 231to be purged. 232.It Va daily_clean_rwho_days 233.Pq Vt num 234Set to the number of days that files must not have been modified before 235they are deleted. 236.It Va daily_clean_rwho_verbose 237.Pq Vt bool 238Set to 239.Dq Li YES 240if you want the removed files to be reported in your daily output. 241.It Va daily_clean_hoststat_enable 242.Pq Vt bool 243Set to 244.Dq Li YES 245to run 246.Nm sendmail Fl bH 247to automatically purge stale entries from 248.Xr sendmail 8 Ns 's 249host status cache. 250Files will be deleted using the same criteria as 251.Xr sendmail 8 252would normally use when determining whether to believe the cached information, 253as configured in 254.Pa /etc/mail/sendmail.cf . 255.It Va daily_clean_hammer_enable 256.Pq Vt bool 257Set to 258.Dq Li YES 259if you want 260.Xr HAMMER 5 261file systems to be snapshot, pruned and reblocked. 262.It Va daily_clean_hammer_verbose 263.Pq Vt bool 264Set to 265.Dq Li YES 266if you wish more verbose output. 267.It Va daily_clean_hammer_pfslist 268.Pq Vt str 269Set to a list of 270.Xr HAMMER 5 271filesystems and pseudo-filesystems to clean. 272If this variable is left blank, the default 273.Xr hammer 8 274.Ic cleanup 275actions occur. 276.It Va daily_clean_hammer2_enable 277.Pq Vt bool 278Set to 279.Dq Li YES 280if you want 281to run 282.Xr hammer2 8 283.Cm cleanup . 284This will e.g.\& 285.Ic bulkfree 286.Xr hammer2 8 287file systems. 288.It Va daily_clean_hammer2_verbose 289.Pq Vt bool 290Set to 291.Dq Li YES 292if you wish more verbose output. 293.It Va daily_clean_hammer2_pfslist 294.Pq Vt str 295Set to a list of 296.Xr hammer2 8 297filesystems and pseudo-filesystems to clean. 298If this variable is left blank, the default 299.Xr hammer2 8 300.Ic cleanup 301actions occur. 302.It Va daily_backup_passwd_enable 303.Pq Vt bool 304Set to 305.Dq Li YES 306if you want the 307.Pa /etc/master.passwd 308and 309.Pa /etc/group 310files backed up and reported on. 311Reporting consists of checking both files for modifications and running 312.Xr chkgrp 8 313on the 314.Pa group 315file. 316.It Va daily_backup_aliases_enable 317.Pq Vt bool 318Set to 319.Dq Li YES 320if you want the 321.Pa /etc/mail/aliases 322file backed up and modifications to be displayed in your daily output. 323.It Va daily_calendar_enable 324.Pq Vt bool 325Set to 326.Dq Li YES 327if you want to run 328.Nm calendar Fl a 329daily. 330.It Va daily_accounting_enable 331.Pq Vt bool 332Set to 333.Dq Li YES 334if you want to rotate your daily accounting files. 335No rotations are necessary unless 336.Va accounting_enable 337is enabled in 338.Xr rc.conf 5 . 339.It Va daily_accounting_compress 340.Pq Vt bool 341Set to 342.Dq Li YES 343if you want your daily accounting files to be compressed using 344.Xr gzip 1 . 345.It Va daily_accounting_save 346.Pq Vt num 347When 348.Va daily_accounting_enable 349is set, this may also be set to the number of daily accounting files that are 350to be saved. 351The default is 352.Dq Li 3 . 353.It Va daily_accounting_flags 354.Pq Vt str 355Set to the arguments to pass to the 356.Xr sa 8 357utility (in addition to 358.Fl s ) 359when 360.Va daily_accounting_enable 361is set to 362.Dq Li YES . 363The default is 364.Fl q . 365.It Va daily_news_expire_enable 366.Pq Vt bool 367Set to 368.Dq Li YES 369if you want to run 370.Pa /etc/news.expire . 371.It Va daily_snapshot_hammer2_capacity 372.Pq Vt num 373Storage usage threshold, in percents. Snapshots won't be created once 374used capacity exceeds this limit. Default is 90. 375.It Va daily_snapshot_hammer2_dirs 376.Pq Vt str 377Space-separated list of directories on HAMMER2 filesystem(s) to snapshot. 378Default is (a special keyword) "auto" which means snapshots will be created 379for all currently mounted HAMMER2 volumes. 380.It Va daily_snapshot_hammer2_enable 381.Pq Vt bool 382Set to 383.Dq Li YES 384if you want to create daily snapshots of directories on HAMMER2 filesystem(s). 385.It Va daily_snapshot_hammer2_keep 386.Pq Vt num or "auto" 387Maximum number of daily snapshots to keep for each configured HAMMER2 directory. 388If set to "auto", 15 is used as the initial value, but more snapshots can be 389kept actually, according to free storage capacity. 390.It Va daily_snapshot_hammer2_tag 391.Pq Vt str 392Tag to be used for daily snapshots labels. Default is "daily". 393The actual label is then composed adhering to this pattern: 394<path>.<flag>.<year><month><day>.<hour>:<minute> 395.It Va daily_status_disks_enable 396.Pq Vt bool 397Set to 398.Dq Li YES 399if you want to run 400.Xr df 1 401(with the arguments supplied in 402.Va daily_status_disks_df_flags ) 403and 404.Nm dump Fl W . 405.It Va daily_status_disks_df_flags 406.Pq Vt str 407Set to the arguments for the 408.Xr df 1 409utility when 410.Va daily_status_disks_enable 411is set to 412.Dq Li YES . 413.It Va daily_status_mfi_enable 414.Pq Vt bool 415Set to 416.Dq Li YES 417if you want to run 418.Nm mfiutil Cm status 419on your 420.Xr mfi 4 421devices. 422.It Va daily_status_network_enable 423.Pq Vt bool 424Set to 425.Dq Li YES 426if you want to run 427.Nm netstat Fl i . 428.It Va daily_status_network_netstat_flags 429.Pq Vt str 430Set to additional arguments for the 431.Xr netstat 1 432utility when 433.Va daily_status_network_enable 434is set to 435.Dq Li YES . 436The default is 437.Fl d . 438.It Va daily_status_network_usedns 439.Pq Vt bool 440Set to 441.Dq Li YES 442if you want to run 443.Xr netstat 1 444without the 445.Fl n 446option (to do DNS lookups). 447.It Va daily_status_uptime_enable 448.Pq Vt bool 449Set to 450.Dq Li YES 451if you want to run 452.Xr uptime 1 453(or 454.Xr ruptime 1 455if 456.Va rwhod_enable 457is set to 458.Dq Li YES 459in 460.Pa /etc/rc.conf ) . 461.It Va daily_status_mailq_enable 462.Pq Vt bool 463Set to 464.Dq Li YES 465if you want to run 466.Xr mailq 1 . 467.It Va daily_status_mailq_shorten 468.Pq Vt bool 469Set to 470.Dq Li YES 471if you want to shorten the 472.Xr mailq 1 473output when 474.Va daily_status_mailq_enable 475is set to 476.Dq Li YES . 477.It Va daily_status_include_submit_mailq 478.Pq Vt bool 479Set to 480.Dq Li YES 481if you also want to run 482.Xr mailq 1 483on the submit mail queue when 484.Va daily_status_mailq_enable 485is set to 486.Dq Li YES . 487This may not work with MTAs other than 488.Xr sendmail 8 . 489.It Va daily_status_security_enable 490.Pq Vt bool 491Set to 492.Dq Li YES 493if you want to run the security check. 494The security check is another set of 495.Xr periodic 8 496scripts. 497The system defaults are in 498.Pa /etc/periodic/security . 499Local scripts should be placed in 500.Pa /usr/local/etc/periodic/security . 501See the 502.Xr periodic 8 503manual page for more information. 504.It Va daily_status_security_inline 505.Pq Vt bool 506Set to 507.Dq Li YES 508if you want the security check output inline. 509The default is to either mail or log the output according to the value of 510.Va daily_status_security_output . 511.It Va daily_status_security_output 512.Pq Vt str 513Where to send the output of the security check if 514.Va daily_status_security_inline 515is set to 516.Dq Li NO . 517This variable behaves in the same way as the 518.Va *_output 519variables above, namely it can be set either to one or more email addresses 520or to an absolute file name. 521.It Va daily_status_mail_rejects_enable 522.Pq Vt bool 523Set to 524.Dq Li YES 525if you want to summarise mail rejections logged to 526.Pa /var/log/maillog 527for the previous day. 528.It Va daily_status_mail_rejects_logs 529.Pq Vt num 530Set to the number of maillog files that should be checked 531for yesterday's mail rejects. 532.It Va daily_status_mail_rejects_shorten 533.Pq Vt bool 534Set to 535.Dq Li YES 536if you want to shorten the mail rejections output. 537.It Va daily_status_world_kernel 538.Pq Vt bool 539Set to 540.Dq Li YES 541to check if running userland and kernel are in sync. 542.It Va daily_queuerun_enable 543.Pq Vt bool 544Set to 545.Dq Li YES 546if you want to manually run the mail queue at least once a day. 547.It Va daily_submit_queuerun 548.Pq Vt bool 549Set to 550.Dq Li YES 551if you also want to manually run the submit mail queue at least once a day 552when 553.Va daily_queuerun_enable 554is set to 555.Dq Li YES . 556.It Va daily_local 557.Pq Vt str 558Set to a list of extra scripts that should be run after all other 559daily scripts. 560All scripts must be absolute path names. 561.El 562.Pp 563The following variables are used by the standard scripts that reside in 564.Pa /etc/periodic/weekly : 565.Bl -tag -offset 4n -width 2n 566.It Va weekly_locate_enable 567.Pq Vt bool 568Set to 569.Dq Li YES 570if you want to run 571.Pa /usr/libexec/locate.updatedb . 572This script is run using 573.Nm nice Fl 5 574as user 575.Dq Li nobody , 576and generates the table used by the 577.Xr locate 1 578command. 579.It Va weekly_whatis_enable 580.Pq Vt bool 581Set to 582.Dq Li YES 583if you want to run 584.Pa /usr/libexec/makewhatis.local . 585This script regenerates the database used by the 586.Xr apropos 1 587command. 588.It Va weekly_noid_enable 589.Pq Vt bool 590Set to 591.Dq Li YES 592if you want to locate orphaned files on the system. 593An orphaned file is one with an invalid owner or group. 594.It Va weekly_noid_dirs 595.Pq Vt str 596A list of directories under which orphaned files are searched for. 597This would usually be set to 598.Pa / . 599.It Va weekly_snapshot_hammer2_capacity 600.Pq Vt num 601Weekly counterpart of 602.Va daily_snapshot_hammer2_capacity . 603.It Va weekly_snapshot_hammer2_dirs 604.Pq Vt str 605Weekly counterpart of 606.Va daily_snapshot_hammer2_dirs . 607.It Va weekly_snapshot_hammer2_enable 608.Pq Vt bool 609Set to 610.Dq Li YES 611if you want to create weekly snapshots of directories on HAMMER2 filesystem(s). 612.It Va weekly_snapshot_hammer2_keep 613.Pq Vt num or "auto" 614Weekly counterpart of 615.Va daily_snapshot_hammer2_keep . 616If set to "auto", 6 is used as the initial value. 617.It Va weekly_snapshot_hammer2_tag 618.Pq Vt str 619Weekly counterpart of 620.Va daily_snapshot_hammer2_tag . 621Default is "weekly". 622.It Va weekly_status_security_enable 623.Pq Vt bool 624Weekly counterpart of 625.Va daily_status_security_enable . 626.It Va weekly_status_security_inline 627.Pq Vt bool 628Weekly counterpart of 629.Va daily_status_security_inline . 630.It Va weekly_status_security_output 631.Pq Vt str 632Weekly counterpart of 633.Va daily_status_security_output . 634.It Va weekly_local 635.Pq Vt str 636Set to a list of extra scripts that should be run after all other 637weekly scripts. 638All scripts must be absolute path names. 639.El 640.Pp 641The following variables are used by the standard scripts that reside in 642.Pa /etc/periodic/monthly : 643.Bl -tag -offset 4n -width 2n 644.It Va monthly_accounting_enable 645.Pq Vt bool 646Set to 647.Dq Li YES 648if you want to do login accounting using the 649.Xr ac 8 650command. 651.It Va monthly_snapshot_hammer2_capacity 652.Pq Vt num 653Monthly counterpart of 654.Va daily_snapshot_hammer2_capacity . 655.It Va monthly_snapshot_hammer2_dirs 656.Pq Vt str 657Monthly counterpart of 658.Va daily_snapshot_hammer2_dirs . 659.It Va monthly_snapshot_hammer2_enable 660.Pq Vt bool 661Set to 662.Dq Li YES 663if you want to create monthly snapshots of directories on HAMMER2 filesystem(s). 664.It Va monthly_snapshot_hammer2_keep 665.Pq Vt num or "auto" 666Monthly counterpart of 667.Va daily_snapshot_hammer2_keep . 668If set to "auto", 12 is used as the initial value. 669.It Va monthly_snapshot_hammer2_tag 670.Pq Vt str 671Monthly counterpart of 672.Va daily_snapshot_hammer2_tag . 673Default is "monthly". 674.It Va monthly_status_security_enable 675.Pq Vt bool 676Monthly counterpart of 677.Va daily_status_security_enable . 678.It Va monthly_status_security_inline 679.Pq Vt bool 680Monthly counterpart of 681.Va daily_status_security_inline . 682.It Va monthly_status_security_output 683.Pq Vt str 684Monthly counterpart of 685.Va daily_status_security_output . 686.It Va monthly_local 687.Pq Vt str 688Set to a list of extra scripts that should be run after all other 689monthly scripts. 690All scripts must be absolute path names. 691.El 692.Pp 693The following variables are used by the standard scripts that reside in 694.Pa /etc/periodic/security . 695Those scripts are usually run from daily 696.Pq Va daily_status_security_enable , 697weekly 698.Pq Va weekly_status_security_enable , 699and monthly 700.Pq Va monthly_status_security_enable 701periodic hooks. 702The 703.Va ..._period 704of each script can be configured as 705.Dq daily , 706.Dq weekly , 707.Dq monthly 708or 709.Dq NO . 710Note that when periodic security scripts are run from 711.Xr crontab 5 , 712they will be always run unless their 713.Va ..._enable 714or 715.Va ..._period 716variable is set to 717.Dq NO . 718.Bl -tag -offset 4n -width 2n 719.It Va security_status_logdir 720.Pq Vt str 721The directory where the security scripts expect the system's log files. 722The default is 723.Pa /var/log . 724.It Va security_status_diff_flags 725.Pq Vt str 726Set to the arguments to pass to the 727.Xr diff 1 728utility when generating differences. 729The default is 730.Fl b u . 731.It Va security_status_chksetuid_enable 732.Pq Vt bool 733Set to 734.Dq Li YES 735to compare the modes and modification times of setuid executables with 736the previous day's values. 737.It Va security_status_chksetuid_period 738.Pq Vt str 739Set to either 740.Dq Li daily , 741.Dq Li weekly , 742.Dq Li monthly 743or 744.Dq Li NO . 745.It Va security_status_neggrpperm_enable 746.Pq Vt bool 747Set to 748.Dq Li YES 749to check for files where the group of a file has less permissions than 750the world at large. 751When users are in more than 14 supplemental groups these negative 752permissions may not be enforced via NFS shares. 753.It Va security_status_neggrpperm_period 754.Pq Vt str 755Set to either 756.Dq Li daily , 757.Dq Li weekly , 758.Dq Li monthly 759or 760.Dq Li NO . 761.It Va security_status_chkmounts_enable 762.Pq Vt bool 763Set to 764.Dq Li YES 765to check for changes mounted file systems to the previous day's values. 766.It Va security_status_chkmounts_period 767.Pq Vt str 768Set to either 769.Dq Li daily , 770.Dq Li weekly , 771.Dq Li monthly 772or 773.Dq Li NO . 774.It Va security_status_nomfs 775.Pq Vt bool 776Set to 777.Dq Li YES 778if you want to ignore 779.Xr mfs 8 780mounts when comparing against yesterday's file system mounts in the 781.Va security_status_chkmounts_enable 782check. 783.It Va security_status_chkuid0_enable 784.Pq Vt bool 785Set to 786.Dq Li YES 787to check 788.Pa /etc/master.passwd 789for accounts with UID 0. 790.It Va security_status_chkuid0_period 791.Pq Vt str 792Set to either 793.Dq Li daily , 794.Dq Li weekly , 795.Dq Li monthly 796or 797.Dq Li NO . 798.It Va security_status_passwdless_enable 799.Pq Vt bool 800Set to 801.Dq Li YES 802to check 803.Pa /etc/master.passwd 804for accounts with empty passwords. 805.It Va security_status_passwdless_period 806.Pq Vt str 807Set to either 808.Dq Li daily , 809.Dq Li weekly , 810.Dq Li monthly 811or 812.Dq Li NO . 813.It Va security_status_logincheck_enable 814.Pq Vt bool 815Set to 816.Dq Li YES 817to check 818.Pa /etc/login.conf 819ownership, see 820.Xr login.conf 5 821for more information. 822.It Va security_status_logincheck_period 823.Pq Vt str 824Set to either 825.Dq Li daily , 826.Dq Li weekly , 827.Dq Li monthly 828or 829.Dq Li NO . 830.It Va security_status_ipfwdenied_enable 831.Pq Vt bool 832Set to 833.Dq Li YES 834to show log entries for packets denied by 835.Xr ipfw 8 836since yesterday's check. 837.It Va security_status_ipfwdenied_period 838.Pq Vt str 839Set to either 840.Dq Li daily , 841.Dq Li weekly , 842.Dq Li monthly 843or 844.Dq Li NO . 845.It Va security_status_pfdenied_enable 846.Pq Vt bool 847Set to 848.Dq Li YES 849to show log entries for packets denied by 850.Xr pf 4 851since yesterday's check. 852.It Va security_status_pfdenied_period 853.Pq Vt str 854Set to either 855.Dq Li daily , 856.Dq Li weekly , 857.Dq Li monthly 858or 859.Dq Li NO . 860.It Va security_status_ipfwlimit_enable 861.Pq Vt bool 862Set to 863.Dq Li YES 864to display 865.Xr ipfw 8 866rules that have reached their verbosity limit. 867.It Va security_status_ipfwlimit_period 868.Pq Vt str 869Set to either 870.Dq Li daily , 871.Dq Li weekly , 872.Dq Li monthly 873or 874.Dq Li NO . 875.It Va security_status_ip6fwdenied_enable 876.Pq Vt bool 877Set to 878.Dq Li YES 879to show log entries for packets denied by 880.Xr ip6fw 8 881since yesterday's check. 882.It Va security_status_ip6fwdenied_period 883.Pq Vt str 884Set to either 885.Dq Li daily , 886.Dq Li weekly , 887.Dq Li monthly 888or 889.Dq Li NO . 890.It Va security_status_ip6fwlimit_enable 891.Pq Vt bool 892Set to 893.Dq Li YES 894to display 895.Xr ip6fw 8 896rules that have reached their verbosity limit. 897.It Va security_status_ip6fwlimit_period 898.Pq Vt str 899Set to either 900.Dq Li daily , 901.Dq Li weekly , 902.Dq Li monthly 903or 904.Dq Li NO . 905.It Va security_status_kernelmsg_enable 906.Pq Vt bool 907Set to 908.Dq Li YES 909to show new 910.Xr dmesg 8 911entries since yesterday's check. 912.It Va security_status_kernelmsg_period 913.Pq Vt str 914Set to either 915.Dq Li daily , 916.Dq Li weekly , 917.Dq Li monthly 918or 919.Dq Li NO . 920.It Va security_status_loginfail_enable 921.Pq Vt bool 922Set to 923.Dq Li YES 924to display failed logins from 925.Pa /var/log/messages 926in the previous day. 927.It Va security_status_loginfail_period 928.Pq Vt str 929Set to either 930.Dq Li daily , 931.Dq Li weekly , 932.Dq Li monthly 933or 934.Dq Li NO . 935.It Va security_status_tcpwrap_enable 936.Pq Vt bool 937Set to 938.Dq Li YES 939to display connections denied by tcpwrappers (see 940.Xr hosts_access 5 ) 941from 942.Pa /var/log/messages 943during the previous day. 944.It Va security_status_tcpwrap_period 945.Pq Vt str 946Set to either 947.Dq Li daily , 948.Dq Li weekly , 949.Dq Li monthly 950or 951.Dq Li NO . 952.El 953.Sh FILES 954.Bl -tag -width ".Pa /etc/defaults/periodic.conf" 955.It Pa /etc/defaults/periodic.conf 956The default configuration file. 957This file contains all default variables and values. 958.It Pa /etc/periodic.conf 959The usual system specific variable override file. 960.It Pa /etc/periodic.conf.local 961An additional override file, useful when 962.Pa /etc/periodic.conf 963is shared or distributed. 964.El 965.Sh SEE ALSO 966.Xr apropos 1 , 967.Xr calendar 1 , 968.Xr df 1 , 969.Xr diff 1 , 970.Xr gzip 1 , 971.Xr locate 1 , 972.Xr man 1 , 973.Xr msgs 1 , 974.Xr netstat 1 , 975.Xr nice 1 , 976.Xr HAMMER 5 , 977.Xr login.conf 5 , 978.Xr rc.conf 5 , 979.Xr ac 8 , 980.Xr chkgrp 8 , 981.Xr dump 8 , 982.Xr hammer 8 , 983.Xr hammer2 8 , 984.Xr mfs 8 , 985.Xr newsyslog 8 , 986.Xr periodic 8 , 987.Xr sendmail 8 988.Sh HISTORY 989The 990.Nm 991file appeared in 992.Fx 4.1 . 993.Sh AUTHORS 994.An Brian Somers Aq Mt brian@Awfulhak.org 995