1.\"- 2.\" Copyright (c) 2000 Brian Somers <brian@Awfulhak.org> 3.\" All rights reserved. 4.\" 5.\" Redistribution and use in source and binary forms, with or without 6.\" modification, are permitted provided that the following conditions 7.\" are met: 8.\" 1. Redistributions of source code must retain the above copyright 9.\" notice, this list of conditions and the following disclaimer. 10.\" 2. Redistributions in binary form must reproduce the above copyright 11.\" notice, this list of conditions and the following disclaimer in the 12.\" documentation and/or other materials provided with the distribution. 13.\" 14.\" THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND 15.\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 16.\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 17.\" ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE 18.\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 19.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 20.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 21.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 22.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 23.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 24.\" SUCH DAMAGE. 25.\" 26.\" $FreeBSD: head/share/man/man5/periodic.conf.5 323550 2017-09-13 16:35:16Z gordon $ 27.\" 28.Dd February 5, 2023 29.Dt PERIODIC.CONF 5 30.Os 31.Sh NAME 32.Nm periodic.conf 33.Nd periodic job configuration information 34.Sh DESCRIPTION 35The file 36.Nm 37contains a description of how daily, weekly and monthly system maintenance 38jobs should run. 39It resides in the 40.Pa /etc/defaults 41directory and parts may be overridden by a file of the same name in 42.Pa /etc , 43which itself may be overridden by the 44.Pa /etc/periodic.conf.local 45file. 46.Pp 47The 48.Nm 49file 50is actually sourced as a shell script from each of the periodic scripts 51and is intended to simply provide default configuration variables. 52.Pp 53The following variables are used by 54.Xr periodic 8 55itself: 56.Bl -tag -offset 4n -width 2n 57.It Va local_periodic 58.Pq Vt str 59List of directories to search for periodic scripts. 60This list is always prefixed with 61.Pa /etc/periodic , 62and is only used when an argument to 63.Xr periodic 8 64is not an absolute directory name. 65.It Ao Ar dir Ac Ns Va _output 66.Pq Vt path No or Vt list 67What to do with the output of the scripts executed from 68the directory 69.Ar dir . 70If this variable is set to an absolute path name, output is logged to 71that file, otherwise it is taken as one or more space separated email 72addresses and mailed to those users. 73If this variable is not set or is empty, output is sent to standard output. 74.Pp 75For an unattended machine, suitable values for 76.Va daily_output , 77.Va weekly_output , 78and 79.Va monthly_output 80might be 81.Dq Li /var/log/daily.log , 82.Dq Li /var/log/weekly.log , 83and 84.Dq Li /var/log/monthly.log 85respectively, as 86.Xr newsyslog 8 87will rotate these files (if they exists) at the appropriate times. 88.It Ao Ar dir Ac Ns Va _show_success 89.It Ao Ar dir Ac Ns Va _show_info 90.It Ao Ar dir Ac Ns Va _show_badconfig 91.Pq Vt bool 92These variables control whether 93.Xr periodic 8 94will mask the output of the executed scripts based on their return code 95(where 96.Ar dir 97is the base directory name in which each script resides). 98If the return code of a script is 99.Sq 0 100and 101.Ao Ar dir Ac Ns Va _show_success 102is set to 103.Dq Li NO , 104.Xr periodic 8 105will mask the script's output. 106If the return code of a script is 107.Sq 1 108and 109.Ao Ar dir Ac Ns Va _show_info 110is set to 111.Dq Li NO , 112.Xr periodic 8 113will mask the script's output. 114If the return code of a script is 115.Sq 2 116and 117.Ao Ar dir Ac Ns Va _show_badconfig 118is set to 119.Dq Li NO , 120.Xr periodic 8 121will mask the script's output. 122If these variables are set to neither 123.Dq Li YES 124nor 125.Dq Li NO , 126they default to 127.Dq Li YES . 128.Pp 129Refer to the 130.Xr periodic 8 131manual page for how script return codes are interpreted. 132.It Va anticongestion_sleeptime 133.Pq Vt int 134The maximum number of seconds to randomly sleep in order to smooth bursty loads 135on a shared resource, such as a download mirror. 136.El 137.Pp 138The following variables are used by the standard scripts that reside in 139.Pa /etc/periodic/daily : 140.Bl -tag -offset 4n -width 2n 141.It Va daily_clean_disks_enable 142.Pq Vt bool 143Set to 144.Dq Li YES 145if you want to remove all files matching 146.Va daily_clean_disks_files 147daily. 148.It Va daily_clean_disks_files 149.Pq Vt str 150Set to a list of file names to match. 151Wild cards are permitted. 152.It Va daily_clean_disks_days 153.Pq Vt num 154When 155.Va daily_clean_disks_enable 156is set to 157.Dq Li YES , 158this must also be set to the number of days old that a file's access 159and modification times must be before it is deleted. 160.It Va daily_clean_disks_verbose 161.Pq Vt bool 162Set to 163.Dq Li YES 164if you want the removed files to be reported in your daily output. 165.It Va daily_clean_tmps_enable 166.Pq Vt bool 167Set to 168.Dq Li YES 169if you want to clear temporary directories daily. 170.It Va daily_clean_tmps_dirs 171.Pq Vt str 172Set to the list of directories to clear if 173.Va daily_clean_tmps_enable 174is set to 175.Dq Li YES . 176.It Va daily_clean_tmps_days 177.Pq Vt num 178When 179.Va daily_clean_tmps_enable 180is set, this must also be set to the number of days old that a file's access 181and modification times must be before it is deleted. 182.It Va daily_clean_tmps_ignore 183.Pq Vt str 184Set to the list of files that should not be deleted when 185.Va daily_clean_tmps_enable 186is set to 187.Dq Li YES . 188Wild card characters are permitted. 189.It Va daily_clean_tmps_verbose 190.Pq Vt bool 191Set to 192.Dq Li YES 193if you want the removed files to be reported in your daily output. 194.It Va daily_clean_preserve_enable 195.Pq Vt bool 196Set to 197.Dq Li YES 198if you wish to remove old files from 199.Pa /var/preserve . 200.It Va daily_clean_preserve_days 201.Pq Vt num 202Set to the number of days that files must not have been modified before 203they are deleted. 204.It Va daily_clean_preserve_verbose 205.Pq Vt bool 206Set to 207.Dq Li YES 208if you want the removed files to be reported in your daily output. 209.It Va daily_clean_msgs_enable 210.Pq Vt bool 211Set to 212.Dq Li YES 213if you wish old system messages to be purged. 214.It Va daily_clean_msgs_days 215.Pq Vt num 216Set to the number of days that files must not have been modified before 217they are deleted. 218If this variable is left blank, the 219.Xr msgs 1 220default is used. 221.It Va daily_clean_rwho_enable 222.Pq Vt bool 223Set to 224.Dq Li YES 225if you wish old files in 226.Pa /var/who 227to be purged. 228.It Va daily_clean_rwho_days 229.Pq Vt num 230Set to the number of days that files must not have been modified before 231they are deleted. 232.It Va daily_clean_rwho_verbose 233.Pq Vt bool 234Set to 235.Dq Li YES 236if you want the removed files to be reported in your daily output. 237.It Va daily_clean_hoststat_enable 238.Pq Vt bool 239Set to 240.Dq Li YES 241to run 242.Nm purgestat 243to automatically purge stale entries from 244.Xr sendmail 8 Ns 's 245host status cache. 246Files will be deleted using the same criteria as 247.Xr sendmail 8 248would normally use when determining whether to believe the cached information, 249as configured in 250.Pa /etc/mail/sendmail.cf . 251.It Va daily_clean_hammer_enable 252.Pq Vt bool 253Set to 254.Dq Li YES 255if you want 256.Xr HAMMER 5 257file systems to be snapshot, pruned and reblocked. 258.It Va daily_clean_hammer_verbose 259.Pq Vt bool 260Set to 261.Dq Li YES 262if you wish more verbose output. 263.It Va daily_clean_hammer_pfslist 264.Pq Vt str 265Set to a list of 266.Xr HAMMER 5 267filesystems and pseudo-filesystems to clean. 268If this variable is left blank, the default 269.Xr hammer 8 270.Ic cleanup 271actions occur. 272.It Va daily_clean_hammer2_enable 273.Pq Vt bool 274Set to 275.Dq Li YES 276if you want 277to run 278.Xr hammer2 8 279.Cm cleanup . 280This will e.g.\& 281.Ic bulkfree 282.Xr hammer2 8 283file systems. 284.It Va daily_clean_hammer2_verbose 285.Pq Vt bool 286Set to 287.Dq Li YES 288if you wish more verbose output. 289.It Va daily_clean_hammer2_pfslist 290.Pq Vt str 291Set to a list of 292.Xr hammer2 8 293filesystems and pseudo-filesystems to clean. 294If this variable is left blank, the default 295.Xr hammer2 8 296.Ic cleanup 297actions occur. 298.It Va daily_backup_passwd_enable 299.Pq Vt bool 300Set to 301.Dq Li YES 302if you want the 303.Pa /etc/master.passwd 304and 305.Pa /etc/group 306files backed up and reported on. 307Reporting consists of checking both files for modifications and running 308.Xr chkgrp 8 309on the 310.Pa group 311file. 312.It Va daily_backup_aliases_enable 313.Pq Vt bool 314Set to 315.Dq Li YES 316if you want the 317.Pa /etc/mail/aliases 318file backed up and modifications to be displayed in your daily output. 319.It Va daily_calendar_enable 320.Pq Vt bool 321Set to 322.Dq Li YES 323if you want to run 324.Nm calendar Fl a 325daily. 326.It Va daily_accounting_enable 327.Pq Vt bool 328Set to 329.Dq Li YES 330if you want to rotate your daily process accounting files. 331No rotations are necessary unless 332.Va accounting_enable 333is enabled in 334.Xr rc.conf 5 . 335.It Va daily_accounting_compress 336.Pq Vt bool 337Set to 338.Dq Li YES 339if you want your daily accounting files to be compressed using 340.Xr gzip 1 . 341.It Va daily_accounting_save 342.Pq Vt num 343When 344.Va daily_accounting_enable 345is set, this may also be set to the number of daily accounting files that are 346to be saved. 347The default is 348.Dq Li 3 . 349.It Va daily_accounting_flags 350.Pq Vt str 351Set to the arguments to pass to the 352.Xr sa 8 353utility (in addition to 354.Fl s ) 355when 356.Va daily_accounting_enable 357is set to 358.Dq Li YES . 359The default is 360.Fl q . 361.It Va daily_news_expire_enable 362.Pq Vt bool 363Set to 364.Dq Li YES 365if you want to run 366.Pa /etc/news.expire . 367.It Va daily_snapshot_hammer2_capacity 368.Pq Vt num 369Storage usage threshold, in percents. Snapshots won't be created once 370used capacity exceeds this limit. Default is 90. 371.It Va daily_snapshot_hammer2_dirs 372.Pq Vt str 373Space-separated list of directories on HAMMER2 filesystem(s) to snapshot. 374Default is (a special keyword) "auto" which means snapshots will be created 375for all currently mounted HAMMER2 volumes. 376.It Va daily_snapshot_hammer2_enable 377.Pq Vt bool 378Set to 379.Dq Li YES 380if you want to create daily snapshots of directories on HAMMER2 filesystem(s). 381.It Va daily_snapshot_hammer2_keep 382.Pq Vt num or "auto" 383Maximum number of daily snapshots to keep for each configured HAMMER2 directory. 384If set to "auto", 15 is used as the initial value, but more snapshots can be 385kept actually, according to free storage capacity. 386.It Va daily_snapshot_hammer2_tag 387.Pq Vt str 388Tag to be used for daily snapshots labels. Default is "daily". 389The actual label is then composed adhering to this pattern: 390<path>.<flag>.<year><month><day>.<hour>:<minute> 391.It Va daily_status_disks_enable 392.Pq Vt bool 393Set to 394.Dq Li YES 395if you want to run 396.Xr df 1 397(with the arguments supplied in 398.Va daily_status_disks_df_flags ) 399and 400.Nm dump Fl W . 401.It Va daily_status_disks_df_flags 402.Pq Vt str 403Set to the arguments for the 404.Xr df 1 405utility when 406.Va daily_status_disks_enable 407is set to 408.Dq Li YES . 409.It Va daily_status_mfi_enable 410.Pq Vt bool 411Set to 412.Dq Li YES 413if you want to run 414.Nm mfiutil Cm status 415on your 416.Xr mfi 4 417devices. 418.It Va daily_status_network_enable 419.Pq Vt bool 420Set to 421.Dq Li YES 422if you want to run 423.Nm netstat Fl i . 424.It Va daily_status_network_netstat_flags 425.Pq Vt str 426Set to additional arguments for the 427.Xr netstat 1 428utility when 429.Va daily_status_network_enable 430is set to 431.Dq Li YES . 432The default is 433.Fl d . 434.It Va daily_status_network_usedns 435.Pq Vt bool 436Set to 437.Dq Li YES 438if you want to run 439.Xr netstat 1 440without the 441.Fl n 442option (to do DNS lookups). 443.It Va daily_status_uptime_enable 444.Pq Vt bool 445Set to 446.Dq Li YES 447if you want to run 448.Xr uptime 1 449(or 450.Xr ruptime 1 451if 452.Va rwhod_enable 453is set to 454.Dq Li YES 455in 456.Pa /etc/rc.conf ) . 457.It Va daily_status_mailq_enable 458.Pq Vt bool 459Set to 460.Dq Li YES 461if you want to run 462.Xr mailq 1 . 463.It Va daily_status_mailq_shorten 464.Pq Vt bool 465Set to 466.Dq Li YES 467if you want to shorten the 468.Xr mailq 1 469output when 470.Va daily_status_mailq_enable 471is set to 472.Dq Li YES . 473.It Va daily_status_include_submit_mailq 474.Pq Vt bool 475Set to 476.Dq Li YES 477if you also want to run 478.Xr mailq 1 479on the submit mail queue when 480.Va daily_status_mailq_enable 481is set to 482.Dq Li YES . 483This may not work with MTAs other than 484.Xr sendmail 8 . 485.It Va daily_status_security_enable 486.Pq Vt bool 487Set to 488.Dq Li YES 489if you want to run the security check. 490The security check is another set of 491.Xr periodic 8 492scripts. 493The system defaults are in 494.Pa /etc/periodic/security . 495Local scripts should be placed in 496.Pa /usr/local/etc/periodic/security . 497See the 498.Xr periodic 8 499manual page for more information. 500.It Va daily_status_security_inline 501.Pq Vt bool 502Set to 503.Dq Li YES 504if you want the security check output inline. 505The default is to either mail or log the output according to the value of 506.Va daily_status_security_output . 507.It Va daily_status_security_output 508.Pq Vt str 509Where to send the output of the security check if 510.Va daily_status_security_inline 511is set to 512.Dq Li NO . 513This variable behaves in the same way as the 514.Va *_output 515variables above, namely it can be set either to one or more email addresses 516or to an absolute file name. 517.It Va daily_status_mail_rejects_enable 518.Pq Vt bool 519Set to 520.Dq Li YES 521if you want to summarise mail rejections logged to 522.Pa /var/log/maillog 523for the previous day. 524.It Va daily_status_mail_rejects_logs 525.Pq Vt num 526Set to the number of maillog files that should be checked 527for yesterday's mail rejects. 528.It Va daily_status_mail_rejects_shorten 529.Pq Vt bool 530Set to 531.Dq Li YES 532if you want to shorten the mail rejections output. 533.It Va daily_status_world_kernel 534.Pq Vt bool 535Set to 536.Dq Li YES 537to check if running userland and kernel are in sync. 538.It Va daily_queuerun_enable 539.Pq Vt bool 540Set to 541.Dq Li YES 542if you want to manually run the mail queue at least once a day. 543.It Va daily_submit_queuerun 544.Pq Vt bool 545Set to 546.Dq Li YES 547if you also want to manually run the submit mail queue at least once a day 548when 549.Va daily_queuerun_enable 550is set to 551.Dq Li YES . 552.It Va daily_local 553.Pq Vt str 554Set to a list of extra scripts that should be run after all other 555daily scripts. 556All scripts must be absolute path names. 557.El 558.Pp 559The following variables are used by the standard scripts that reside in 560.Pa /etc/periodic/weekly : 561.Bl -tag -offset 4n -width 2n 562.It Va weekly_locate_enable 563.Pq Vt bool 564Set to 565.Dq Li YES 566if you want to run 567.Pa /usr/libexec/locate.updatedb . 568This script is run using 569.Nm nice Fl 5 570as user 571.Dq Li nobody , 572and generates the table used by the 573.Xr locate 1 574command. 575.It Va weekly_whatis_enable 576.Pq Vt bool 577Set to 578.Dq Li YES 579if you want to run 580.Pa /usr/libexec/makewhatis.local . 581This script regenerates the database used by the 582.Xr apropos 1 583command. 584.It Va weekly_noid_enable 585.Pq Vt bool 586Set to 587.Dq Li YES 588if you want to locate orphaned files on the system. 589An orphaned file is one with an invalid owner or group. 590.It Va weekly_noid_dirs 591.Pq Vt str 592A list of directories under which orphaned files are searched for. 593This would usually be set to 594.Pa / . 595.It Va weekly_snapshot_hammer2_capacity 596.Pq Vt num 597Weekly counterpart of 598.Va daily_snapshot_hammer2_capacity . 599.It Va weekly_snapshot_hammer2_dirs 600.Pq Vt str 601Weekly counterpart of 602.Va daily_snapshot_hammer2_dirs . 603.It Va weekly_snapshot_hammer2_enable 604.Pq Vt bool 605Set to 606.Dq Li YES 607if you want to create weekly snapshots of directories on HAMMER2 filesystem(s). 608.It Va weekly_snapshot_hammer2_keep 609.Pq Vt num or "auto" 610Weekly counterpart of 611.Va daily_snapshot_hammer2_keep . 612If set to "auto", 6 is used as the initial value. 613.It Va weekly_snapshot_hammer2_tag 614.Pq Vt str 615Weekly counterpart of 616.Va daily_snapshot_hammer2_tag . 617Default is "weekly". 618.It Va weekly_status_security_enable 619.Pq Vt bool 620Weekly counterpart of 621.Va daily_status_security_enable . 622.It Va weekly_status_security_inline 623.Pq Vt bool 624Weekly counterpart of 625.Va daily_status_security_inline . 626.It Va weekly_status_security_output 627.Pq Vt str 628Weekly counterpart of 629.Va daily_status_security_output . 630.It Va weekly_local 631.Pq Vt str 632Set to a list of extra scripts that should be run after all other 633weekly scripts. 634All scripts must be absolute path names. 635.El 636.Pp 637The following variables are used by the standard scripts that reside in 638.Pa /etc/periodic/monthly : 639.Bl -tag -offset 4n -width 2n 640.It Va monthly_accounting_enable 641.Pq Vt bool 642Set to 643.Dq Li YES 644if you want to do login accounting using the 645.Xr ac 8 646command. 647.It Va monthly_snapshot_hammer2_capacity 648.Pq Vt num 649Monthly counterpart of 650.Va daily_snapshot_hammer2_capacity . 651.It Va monthly_snapshot_hammer2_dirs 652.Pq Vt str 653Monthly counterpart of 654.Va daily_snapshot_hammer2_dirs . 655.It Va monthly_snapshot_hammer2_enable 656.Pq Vt bool 657Set to 658.Dq Li YES 659if you want to create monthly snapshots of directories on HAMMER2 filesystem(s). 660.It Va monthly_snapshot_hammer2_keep 661.Pq Vt num or "auto" 662Monthly counterpart of 663.Va daily_snapshot_hammer2_keep . 664If set to "auto", 12 is used as the initial value. 665.It Va monthly_snapshot_hammer2_tag 666.Pq Vt str 667Monthly counterpart of 668.Va daily_snapshot_hammer2_tag . 669Default is "monthly". 670.It Va monthly_status_security_enable 671.Pq Vt bool 672Monthly counterpart of 673.Va daily_status_security_enable . 674.It Va monthly_status_security_inline 675.Pq Vt bool 676Monthly counterpart of 677.Va daily_status_security_inline . 678.It Va monthly_status_security_output 679.Pq Vt str 680Monthly counterpart of 681.Va daily_status_security_output . 682.It Va monthly_local 683.Pq Vt str 684Set to a list of extra scripts that should be run after all other 685monthly scripts. 686All scripts must be absolute path names. 687.El 688.Pp 689The following variables are used by the standard scripts that reside in 690.Pa /etc/periodic/security . 691Those scripts are usually run from daily 692.Pq Va daily_status_security_enable , 693weekly 694.Pq Va weekly_status_security_enable , 695and monthly 696.Pq Va monthly_status_security_enable 697periodic hooks. 698The 699.Va ..._period 700of each script can be configured as 701.Dq daily , 702.Dq weekly , 703.Dq monthly 704or 705.Dq NO . 706Note that when periodic security scripts are run from 707.Xr crontab 5 , 708they will be always run unless their 709.Va ..._enable 710or 711.Va ..._period 712variable is set to 713.Dq NO . 714.Bl -tag -offset 4n -width 2n 715.It Va security_status_logdir 716.Pq Vt str 717The directory where the security scripts expect the system's log files. 718The default is 719.Pa /var/log . 720.It Va security_status_diff_flags 721.Pq Vt str 722Set to the arguments to pass to the 723.Xr diff 1 724utility when generating differences. 725The default is 726.Fl b u . 727.It Va security_status_chksetuid_enable 728.Pq Vt bool 729Set to 730.Dq Li YES 731to compare the modes and modification times of setuid executables with 732the previous day's values. 733.It Va security_status_chksetuid_period 734.Pq Vt str 735Set to either 736.Dq Li daily , 737.Dq Li weekly , 738.Dq Li monthly 739or 740.Dq Li NO . 741.It Va security_status_neggrpperm_enable 742.Pq Vt bool 743Set to 744.Dq Li YES 745to check for files where the group of a file has less permissions than 746the world at large. 747When users are in more than 14 supplemental groups these negative 748permissions may not be enforced via NFS shares. 749.It Va security_status_neggrpperm_period 750.Pq Vt str 751Set to either 752.Dq Li daily , 753.Dq Li weekly , 754.Dq Li monthly 755or 756.Dq Li NO . 757.It Va security_status_chkmounts_enable 758.Pq Vt bool 759Set to 760.Dq Li YES 761to check for changes mounted file systems to the previous day's values. 762.It Va security_status_chkmounts_period 763.Pq Vt str 764Set to either 765.Dq Li daily , 766.Dq Li weekly , 767.Dq Li monthly 768or 769.Dq Li NO . 770.It Va security_status_nomfs 771.Pq Vt bool 772Set to 773.Dq Li YES 774if you want to ignore 775.Xr mfs 8 776mounts when comparing against yesterday's file system mounts in the 777.Va security_status_chkmounts_enable 778check. 779.It Va security_status_chkuid0_enable 780.Pq Vt bool 781Set to 782.Dq Li YES 783to check 784.Pa /etc/master.passwd 785for accounts with UID 0. 786.It Va security_status_chkuid0_period 787.Pq Vt str 788Set to either 789.Dq Li daily , 790.Dq Li weekly , 791.Dq Li monthly 792or 793.Dq Li NO . 794.It Va security_status_passwdless_enable 795.Pq Vt bool 796Set to 797.Dq Li YES 798to check 799.Pa /etc/master.passwd 800for accounts with empty passwords. 801.It Va security_status_passwdless_period 802.Pq Vt str 803Set to either 804.Dq Li daily , 805.Dq Li weekly , 806.Dq Li monthly 807or 808.Dq Li NO . 809.It Va security_status_logincheck_enable 810.Pq Vt bool 811Set to 812.Dq Li YES 813to check 814.Pa /etc/login.conf 815ownership, see 816.Xr login.conf 5 817for more information. 818.It Va security_status_logincheck_period 819.Pq Vt str 820Set to either 821.Dq Li daily , 822.Dq Li weekly , 823.Dq Li monthly 824or 825.Dq Li NO . 826.It Va security_status_ipfwdenied_enable 827.Pq Vt bool 828Set to 829.Dq Li YES 830to show log entries for packets denied by 831.Xr ipfw 8 832since yesterday's check. 833.It Va security_status_ipfwdenied_period 834.Pq Vt str 835Set to either 836.Dq Li daily , 837.Dq Li weekly , 838.Dq Li monthly 839or 840.Dq Li NO . 841.It Va security_status_pfdenied_enable 842.Pq Vt bool 843Set to 844.Dq Li YES 845to show log entries for packets denied by 846.Xr pf 4 847since yesterday's check. 848.It Va security_status_pfdenied_period 849.Pq Vt str 850Set to either 851.Dq Li daily , 852.Dq Li weekly , 853.Dq Li monthly 854or 855.Dq Li NO . 856.It Va security_status_ipfwlimit_enable 857.Pq Vt bool 858Set to 859.Dq Li YES 860to display 861.Xr ipfw 8 862rules that have reached their verbosity limit. 863.It Va security_status_ipfwlimit_period 864.Pq Vt str 865Set to either 866.Dq Li daily , 867.Dq Li weekly , 868.Dq Li monthly 869or 870.Dq Li NO . 871.It Va security_status_ip6fwdenied_enable 872.Pq Vt bool 873Set to 874.Dq Li YES 875to show log entries for packets denied by 876.Xr ip6fw 8 877since yesterday's check. 878.It Va security_status_ip6fwdenied_period 879.Pq Vt str 880Set to either 881.Dq Li daily , 882.Dq Li weekly , 883.Dq Li monthly 884or 885.Dq Li NO . 886.It Va security_status_ip6fwlimit_enable 887.Pq Vt bool 888Set to 889.Dq Li YES 890to display 891.Xr ip6fw 8 892rules that have reached their verbosity limit. 893.It Va security_status_ip6fwlimit_period 894.Pq Vt str 895Set to either 896.Dq Li daily , 897.Dq Li weekly , 898.Dq Li monthly 899or 900.Dq Li NO . 901.It Va security_status_kernelmsg_enable 902.Pq Vt bool 903Set to 904.Dq Li YES 905to show new 906.Xr dmesg 8 907entries since yesterday's check. 908.It Va security_status_kernelmsg_period 909.Pq Vt str 910Set to either 911.Dq Li daily , 912.Dq Li weekly , 913.Dq Li monthly 914or 915.Dq Li NO . 916.It Va security_status_loginfail_enable 917.Pq Vt bool 918Set to 919.Dq Li YES 920to display failed logins from 921.Pa /var/log/messages 922in the previous day. 923.It Va security_status_loginfail_period 924.Pq Vt str 925Set to either 926.Dq Li daily , 927.Dq Li weekly , 928.Dq Li monthly 929or 930.Dq Li NO . 931.It Va security_status_tcpwrap_enable 932.Pq Vt bool 933Set to 934.Dq Li YES 935to display connections denied by tcpwrappers (see 936.Xr hosts_access 5 ) 937from 938.Pa /var/log/messages 939during the previous day. 940.It Va security_status_tcpwrap_period 941.Pq Vt str 942Set to either 943.Dq Li daily , 944.Dq Li weekly , 945.Dq Li monthly 946or 947.Dq Li NO . 948.El 949.Sh FILES 950.Bl -tag -width ".Pa /etc/defaults/periodic.conf" 951.It Pa /etc/defaults/periodic.conf 952The default configuration file. 953This file contains all default variables and values. 954.It Pa /etc/periodic.conf 955The usual system specific variable override file. 956.It Pa /etc/periodic.conf.local 957An additional override file, useful when 958.Pa /etc/periodic.conf 959is shared or distributed. 960.El 961.Sh SEE ALSO 962.Xr apropos 1 , 963.Xr calendar 1 , 964.Xr df 1 , 965.Xr diff 1 , 966.Xr gzip 1 , 967.Xr locate 1 , 968.Xr man 1 , 969.Xr msgs 1 , 970.Xr netstat 1 , 971.Xr nice 1 , 972.Xr HAMMER 5 , 973.Xr login.conf 5 , 974.Xr rc.conf 5 , 975.Xr ac 8 , 976.Xr chkgrp 8 , 977.Xr dump 8 , 978.Xr hammer 8 , 979.Xr hammer2 8 , 980.Xr mfs 8 , 981.Xr newsyslog 8 , 982.Xr periodic 8 , 983.Xr sendmail 8 984.Sh HISTORY 985The 986.Nm 987file appeared in 988.Fx 4.1 . 989.Sh AUTHORS 990.An Brian Somers Aq Mt brian@Awfulhak.org 991