1.\" Copyright (c) 1995 2.\" Jordan K. Hubbard 3.\" 4.\" Redistribution and use in source and binary forms, with or without 5.\" modification, are permitted provided that the following conditions 6.\" are met: 7.\" 1. Redistributions of source code must retain the above copyright 8.\" notice, this list of conditions and the following disclaimer. 9.\" 2. Redistributions in binary form must reproduce the above copyright 10.\" notice, this list of conditions and the following disclaimer in the 11.\" documentation and/or other materials provided with the distribution. 12.\" 13.\" THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND 14.\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 15.\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 16.\" ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR BE LIABLE 17.\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 18.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 19.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 20.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 21.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 22.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 23.\" SUCH DAMAGE. 24.\" 25.\" $FreeBSD: src/share/man/man5/rc.conf.5,v 1.197 2003/07/28 13:56:00 mbr Exp $ 26.\" $DragonFly: src/share/man/man5/rc.conf.5,v 1.8 2005/01/11 20:01:07 swildner Exp $ 27.Dd March 3, 2002 28.Dt RC.CONF 5 29.Os 30.Sh NAME 31.Nm rc.conf 32.Nd system configuration information 33.Sh DESCRIPTION 34The file 35.Nm 36contains descriptive information about the local host name, configuration 37details for any potential network interfaces and which services should be 38started up at system initial boot time. 39In new installations, the 40.Nm 41file is generally initialized by the system installation utility, 42.Xr sysinstall 8 . 43.Pp 44The purpose of 45.Nm 46is not to run commands or perform system startup actions 47directly. 48Instead, it is included by the 49various generic startup scripts in 50.Pa /etc 51which conditionalize their 52internal actions according to the settings found there. 53.Pp 54The 55.Pa /etc/rc.conf 56file is included from the file 57.Pa /etc/defaults/rc.conf , 58which specifies the default settings for all the available options. 59Options need only be specified in 60.Pa /etc/rc.conf 61when the system administrator wishes to override these defaults. 62The file 63.Pa /etc/rc.conf.local 64is used to override settings in 65.Pa /etc/rc.conf 66for historical reasons. 67See the 68.Va rc_conf_files 69variable below. 70.Pp 71The following list provides a name and short description for each 72variable that can be set in the 73.Nm 74file: 75.Bl -tag -width indent-two 76.It Va rc_debug 77.Pq Vt bool 78If set to 79.Dq Li YES , 80enable output of debug messages from rc scripts. 81This variable can be helpful in diagnosing mistakes when 82editing or integrating new scripts. 83Beware that this produces copious output to the terminal and 84.Xr syslog 3 . 85.It Va rc_info 86.Pq Vt bool 87If set to 88.Dq Li NO , 89disable informational messages from the rc scripts. 90Informational messages are displayed when 91a condition that is not serious enough to warrant a warning or 92an error occurs. 93.It Va swapfile 94.Pq Vt str 95If set to 96.Dq Li NO , 97no swapfile is installed, otherwise the value is used as the full 98pathname to a file to use for additional swap space. 99.It Va apm_enable 100.Pq Vt bool 101If set to 102.Dq Li YES , 103enable support for Automatic Power Management with 104the 105.Xr apm 8 106command. 107.It Va apmd_enable 108.Pq Vt bool 109Run 110.Xr apmd 8 111to handle APM event from userland. 112This also enables support for APM. 113.It Va apmd_flags 114.Pq Vt str 115If 116.Va apmd_enable 117is set to 118.Dq Li YES , 119these are the flags to pass to the 120.Xr apmd 8 121daemon. 122.It Va devd_enable 123.Pq Vt bool 124Run 125.Xr devd 8 126to handle device added, removed or unknown events from the kernel. 127.It Va pccard_enable 128.Pq Vt bool 129If set to 130.Dq Li YES , 131enable PCCARD support at boot time. 132.It Va pccard_mem 133.Pq Vt str 134Set to PCCARD controller memory address or 135.Dq Li DEFAULT 136for the default value. 137.It Va pccard_ifconfig 138.Pq Vt str 139List of arguments to be passed to 140.Xr ifconfig 8 141at boot time or on 142insertion of the card (e.g.\& 143.Dq Cm inet Li 192.168.1.1 Cm netmask Li 255.255.255.0 144for a fixed address or 145.Dq Li DHCP 146for a DHCP client). 147.It Va pccard_beep 148.Pq Vt int 149If 0, 150set the PCCARD controller to silent mode. 151If 1, 152set it to beep mode. 153If 2, 154set it to melody mode. 155.It Va pccard_conf 156.Pq Vt str 157Path to the configuration file for the 158.Xr pccardd 8 159daemon (e.g.\& 160.Pa /etc/pccard.conf.sample ) . 161.It Va pccardd_flags 162.Pq Vt str 163If 164.Va pccard_enable 165is set to 166.Dq Li YES , 167these are the flags to pass to the 168.Xr pccardd 8 169daemon. 170.It Va pccard_ether_delay 171.Pq Vt str 172Set the delay before starting 173.Xr dhclient 8 174in the 175.Pa /etc/pccard_ether 176script. 177This defaults to 5 seconds to work around a bug in the 178.Xr ed 4 179driver which can lead to system hangs when using some newer 180.Xr ed 4 181based cards. 182.It Va removable_interfaces 183.Pq Vt str 184List of removable network interfaces to be supported by 185.Pa /etc/pccard_ether . 186.It Va local_startup 187.Pq Vt str 188List of directories to search for startup script files. 189.It Va script_name_sep 190.Pq Vt str 191The field separator to use for breaking down the list of startup script files 192into individual filenames. 193The default is a space. 194It is not necessary to change this unless there are startup scripts with names 195containing spaces. 196.It Va hostname 197.Pq Vt str 198The fully qualified domain name (FQDN) of this host on the network. 199This should almost certainly be set to something meaningful, even if 200there is no network connection. 201If 202.Xr dhclient 8 203is used to set the hostname via DHCP, 204this variable should be set to an empty string. 205.It Va ipv6_enable 206.Pq Vt bool 207Enable support for IPv6 networking. 208Note that this requires that the kernel have been compiled with 209.Cd "options INET6" . 210.It Va nisdomainname 211.Pq Vt str 212The NIS domain name of this host, or 213.Dq Li NO 214if NIS is not used. 215.It Va dhclient_program 216.Pq Vt str 217Path to the DHCP client program 218.Pa ( /sbin/dhclient , 219the ISC DHCP client, 220is the default). 221.It Va dhclient_flags 222.Pq Vt str 223Additional flags to pass to the DHCP client program. 224For the ISC DHCP client, see the 225.Xr dhclient 8 226manpage for a description of the command line options available. 227.It Va background_dhclient 228.Pq Vt bool 229Set to 230.Dq Li YES 231to start the dhcp client in background. 232This can cause trouble with applications depending on 233a working network, but it will provide a faster startup 234in many cases. 235.It Va firewall_enable 236.Pq Vt bool 237Set to 238.Dq Li YES 239to load firewall rules at startup. 240If the kernel was not built with 241.Cd "options IPFIREWALL" , 242the 243.Pa ipfw.ko 244kernel module will be loaded. 245See also 246.Va ipfilter_enable . 247.It Va ipv6_firewall_enable 248.Pq Vt bool 249The IPv6 equivalent of 250.Va firewall_enable . 251Set to 252.Dq Li YES 253to load IPv6 firewall rules at startup. 254If the kernel was not built with 255.Cd "options IPV6FIREWALL" , 256the 257.Pa ip6fw.ko 258kernel module will be loaded. 259.It Va firewall_script 260.Pq Vt str 261This variable specifies the full path to the firewall script to run. 262The default is 263.Pa /etc/rc.firewall . 264.It Va ipv6_firewall_script 265.Pq Vt str 266The IPv6 equivalent of 267.Va firewall_script . 268.It Va firewall_type 269.Pq Vt str 270Names the firewall type from the selection in 271.Pa /etc/rc.firewall , 272or the file which contains the local firewall ruleset. 273Valid selections from 274.Pa /etc/rc.firewall 275are: 276.Pp 277.Bl -tag -width ".Li simple" -compact 278.It Li open 279unrestricted IP access 280.It Li closed 281all IP services disabled, except via 282.Dq Li lo0 283.It Li client 284basic protection for a workstation 285.It Li simple 286basic protection for a LAN. 287.El 288.Pp 289If a filename is specified, the full path 290must be given. 291.It Va ipv6_firewall_type 292.Pq Vt str 293The IPv6 equivalent of 294.Va firewall_type . 295.It Va firewall_quiet 296.Pq Vt bool 297Set to 298.Dq Li YES 299to disable the display of firewall rules on the console during boot. 300.It Va ipv6_firewall_quiet 301.Pq Vt bool 302The IPv6 equivalent of 303.Va firewall_quiet . 304.It Va firewall_logging 305.Pq Vt bool 306Set to 307.Dq Li YES 308to enable firewall event logging. 309This is equivalent to the 310.Dv IPFIREWALL_VERBOSE 311kernel option. 312.It Va ipv6_firewall_logging 313.Pq Vt bool 314The IPv6 equivalent of 315.Va firewall_logging . 316.It Va firewall_flags 317.Pq Vt str 318Flags passed to 319.Xr ipfw 8 320if 321.Va firewall_type 322specifies a filename. 323.It Va ipv6_firewall_flags 324.Pq Vt str 325The IPv6 equivalent of 326.Va firewall_flags . 327.It Va natd_program 328.Pq Vt str 329Path to 330.Xr natd 8 . 331.It Va natd_enable 332.Pq Vt bool 333Set to 334.Dq Li YES 335to enable 336.Xr natd 8 . 337.Va firewall_enable 338must also be set to 339.Dq Li YES , 340and 341.Xr divert 4 342sockets must be enabled in the kernel. 343.It Va natd_interface 344.Pq Vt str 345This is the name of the public interface on which 346.Xr natd 8 347should run. 348The interface may be given as an interface name or as an IP address. 349.It Va natd_flags 350.Pq Vt str 351Additional 352.Xr natd 8 353flags should be placed here. 354The 355.Fl n 356or 357.Fl a 358flag is automatically added with the above 359.Va natd_interface 360as an argument. 361.\" ----- ipfilter_enable setting -------------------------------- 362.It Va ipfilter_enable 363.Pq Vt bool 364Set to 365.Dq Li NO 366by default. 367Setting this to 368.Dq Li YES 369enables 370.Xr ipf 8 371packet filtering. 372.Pp 373Typical usage will require putting 374.Bd -literal 375ipfilter_enable="YES" 376ipnat_enable="YES" 377ipmon_enable="YES" 378ipfs_enable="YES" 379.Ed 380.Pp 381into 382.Pa /etc/rc.conf 383and editing 384.Pa /etc/ipf.rules 385and 386.Pa /etc/ipnat.rules 387appropriately. 388.Pp 389Note that 390.Va ipfilter_enable 391and 392.Va ipnat_enable 393can be enabled independently. 394.Va ipmon_enable 395and 396.Va ipfs_enable 397both require at least one of 398.Va ipfilter_enable 399and 400.Va ipnat_enable 401to be enabled. 402.Pp 403Having 404.Bd -literal 405options IPFILTER 406options IPFILTER_LOG 407options IPFILTER_DEFAULT_BLOCK 408.Ed 409.Pp 410in the kernel configuration file is a good idea, too. 411.\" ----- ipfilter_program setting ------------------------------ 412.It Va ipfilter_program 413.Pq Vt str 414Path to 415.Xr ipf 8 416(default 417.Pa /sbin/ipf ) . 418.\" ----- ipfilter_rules setting -------------------------------- 419.It Va ipfilter_rules 420.Pq Vt str 421Set to 422.Pa /etc/ipf.rules 423by default. 424This variable contains the name of the filter rule definition file. 425The file is expected to be readable for the 426.Xr ipf 8 427command to execute. 428.\" ----- ipv6_ipfilter_rules setting --------------------------- 429.It Va ipv6_ipfilter_rules 430.Pq Vt str 431Set to 432.Pa /etc/ipf6.rules 433by default. 434This variable contains the IPv6 filter rule definition file. 435The file is expected to be readable for the 436.Xr ipf 8 437command to execute. 438.\" ----- ipfilter_flags setting -------------------------------- 439.It Va ipfilter_flags 440.Pq Vt str 441Empty by default. 442This variable contains flags passed to the 443.Xr ipf 8 444program. 445.\" ----- ipnat_enable setting ---------------------------------- 446.It Va ipnat_enable 447.Pq Vt bool 448Set to 449.Dq Li NO 450by default. 451Set it to 452.Dq Li YES 453to enable 454.Xr ipnat 1 455network address translation. 456See 457.Va ipfilter_enable 458for a detailed discussion. 459.\" ----- ipnat_program setting --------------------------------- 460.It Va ipnat_program 461.Pq Vt str 462Path to 463.Xr ipnat 1 464(default 465.Pa /sbin/ipnat ) . 466.\" ----- ipnat_rules setting ----------------------------------- 467.It Va ipnat_rules 468.Pq Vt str 469Set to 470.Pa /etc/ipnat.rules 471by default. 472This variable contains the name of the file 473holding the network address translation definition. 474This file is expected to be readable for the 475.Xr ipnat 1 476command to execute. 477.\" ----- ipnat_flags setting ----------------------------------- 478.It Va ipnat_flags 479.Pq Vt str 480Empty by default. 481This variable contains flags passed to the 482.Xr ipnat 1 483program. 484.\" ----- ipmon_enable setting ---------------------------------- 485.It Va ipmon_enable 486.Pq Vt bool 487Set to 488.Dq Li NO 489by default. 490Set it to 491.Dq Li YES 492to enable 493.Xr ipmon 8 494monitoring (logging 495.Xr ipf 8 496and 497.Xr ipnat 1 498events). 499Setting this variable needs setting 500.Va ipfilter_enable 501or 502.Va ipnat_enable 503too. 504See 505.Va ipfilter_enable 506for a detailed discussion. 507.\" ----- ipmon_program setting --------------------------------- 508.It Va ipmon_program 509.Pq Vt str 510Path to 511.Xr ipmon 8 512(default 513.Pa /sbin/ipmon ) . 514.\" ----- ipmon_flags setting ----------------------------------- 515.It Va ipmon_flags 516.Pq Vt str 517Set to 518.Dq Li -Ds 519by default. 520This variable contains flags passed to the 521.Xr ipmon 8 522program. 523Another typical example would be 524.Dq Fl D Pa /var/log/ipflog 525to have 526.Xr ipmon 8 527log directly to a file bypassing 528.Xr syslogd 8 . 529Make sure to adjust 530.Pa /etc/newsyslog.conf 531in such case like this: 532.Bd -literal 533/var/log/ipflog 640 10 100 * Z /var/run/ipmon.pid 534.Ed 535.\" ----- ipfs_enable setting ----------------------------------- 536.It Va ipfs_enable 537.Pq Vt bool 538Set to 539.Dq Li NO 540by default. 541Set it to 542.Dq Li YES 543to enable 544.Xr ipfs 8 545saving the filter and NAT state tables during shutdown 546and reloading them during startup again. 547Setting this variable needs setting 548.Va ipfilter_enable 549or 550.Va ipnat_enable 551to 552.Dq Li YES 553too. 554See 555.Va ipfilter_enable 556for a detailed discussion. 557Note that if 558.Va kern_securelevel 559is set to 3, 560.Va ipfs_enable 561cannot be used 562because the raised securelevel will prevent 563.Xr ipfs 8 564from saving the state tables at shutdown time. 565.\" ----- ipfs_program setting ---------------------------------- 566.It Va ipfs_program 567.Pq Vt str 568Path to 569.Xr ipfs 8 570(default 571.Pa /sbin/ipfs ) . 572.\" ----- ipfs_flags setting ------------------------------------ 573.It Va ipfs_flags 574.Pq Vt str 575Empty by default. 576This variable contains flags passed to the 577.Xr ipfs 8 578program. 579.\" ----- end of added ipf hook --------------------------------- 580.It Va tcp_extensions 581.Pq Vt bool 582Set to 583.Dq Li YES 584by default. 585Setting this to 586.Dq Li NO 587disables certain TCP options as described by 588.Rs 589.%T "RFC 1323" 590.Re 591Setting this to 592.Dq Li NO 593might help remedy such problems with connections as randomly hanging 594or other weird behavior. 595Some network devices are known 596to be broken with respect to these options. 597.It Va log_in_vain 598.Pq Vt int 599Set to 0 by default. 600The 601.Xr sysctl 8 602variables, 603.Va net.inet.tcp.log_in_vain 604and 605.Va net.inet.udp.log_in_vain , 606as described in 607.Xr tcp 4 608and 609.Xr udp 4 , 610are set to the given value. 611.It Va tcp_keepalive 612.Pq Vt bool 613Set to 614.Dq Li YES 615by default. 616Setting to 617.Dq Li NO 618will disable probing idle TCP connections to verify that the 619peer is still up and reachable. 620.It Va tcp_drop_synfin 621.Pq Vt bool 622Set to 623.Dq Li NO 624by default. 625Setting to 626.Dq Li YES 627will cause the kernel to ignore TCP frames that have both 628the SYN and FIN flags set. 629This prevents OS fingerprinting, but may 630break some legitimate applications. 631This option is only available if the 632kernel was built with the 633.Dv TCP_DROP_SYNFIN 634option. 635.It Va icmp_drop_redirect 636.Pq Vt bool 637Set to 638.Dq Li NO 639by default. 640Setting to 641.Dq Li YES 642will cause the kernel to ignore ICMP REDIRECT packets. 643Refer to 644.Xr icmp 4 645for more information. 646.It Va icmp_log_redirect 647.Pq Vt bool 648Set to 649.Dq Li NO 650by default. 651Setting to 652.Dq Li YES 653will cause the kernel to log ICMP REDIRECT packets. 654Note that 655the log messages are not rate-limited, so this option should only be used 656for troubleshooting networks. 657Refer to 658.Xr icmp 4 659for more information. 660.It Va icmp_bmcastecho 661.Pq Vt bool 662Set to 663.Dq Li YES 664to respond to broadcast or multicast ICMP ping packets. 665Refer to 666.Xr icmp 4 667for more information. 668.It Va ip_portrange_first 669.Pq Vt int 670If not set to 671.Dq Li NO , 672this is the first port in the default portrange. 673Refer to 674.Xr ip 4 675for more information. 676.It Va ip_portrange_last 677.Pq Vt int 678If not set to 679.Dq Li NO , 680this is the last port in the default portrange. 681Refer to 682.Xr ip 4 683for more information. 684.It Va network_interfaces 685.Pq Vt str 686Set to the list of network interfaces to configure on this host. 687For example, if the only network devices in the system are the loopback 688device 689.Pq Li lo0 690and a NIC using the 691.Xr ed 4 692driver, 693this could be set to 694.Dq Li "lo0 ed0" . 695An 696.Va ifconfig_ Ns Aq Ar interface 697variable is also assumed to exist for each value of 698.Ar interface . 699It is also possible to add IP alias entries here in cases where 700multiple IP addresses registered against a single interface 701are desired. 702Assuming that the interface in question was 703.Li ed0 , 704it might look 705something like this: 706.Bd -literal 707ifconfig_ed0_alias0="inet 127.0.0.253 netmask 0xffffffff" 708ifconfig_ed0_alias1="inet 127.0.0.254 netmask 0xffffffff" 709.Ed 710.Pp 711And so on. 712For each 713.Va ifconfig_ Ns Ao Ar interface Ac Ns Va _alias Ns Aq Ar n 714entry that is found, 715its contents are passed to 716.Xr ifconfig 8 . 717Execution stops at the first unsuccessful access, so if 718something like this is present: 719.Bd -literal 720ifconfig_ed0_alias0="inet 127.0.0.251 netmask 0xffffffff" 721ifconfig_ed0_alias1="inet 127.0.0.252 netmask 0xffffffff" 722ifconfig_ed0_alias2="inet 127.0.0.253 netmask 0xffffffff" 723ifconfig_ed0_alias4="inet 127.0.0.254 netmask 0xffffffff" 724.Ed 725.Pp 726Then note that alias4 would 727.Em not 728be added since the search would 729stop with the missing alias3 entry. 730.Pp 731If the 732.Pa /etc/start_if. Ns Aq Ar interface 733file is present, it is read and executed by the 734.Xr sh 1 735interpreter 736before configuring the interface as specified in the 737.Va ifconfig_ Ns Aq Ar interface 738and 739.Va ifconfig_ Ns Ao Ar interface Ac Ns Va _alias Ns Aq Ar n 740variables. 741.Pp 742It is possible to bring up an interface with DHCP by setting the 743.Va ifconfig_ Ns Aq Ar interface 744variable to 745.Dq Li DHCP . 746For instance, to initialize the 747.Li ed0 748device via DHCP, 749it is possible to use something like: 750.Bd -literal 751ifconfig_ed0="DHCP" 752.Ed 753.It Va ipv6_network_interfaces 754.Pq Vt str 755This is the IPv6 equivalent of 756.Va network_interfaces . 757Instead of setting the ifconfig variables as 758.Va ifconfig_ Ns Aq Ar interface 759they should be set as 760.Va ipv6_ifconfig_ Ns Aq Ar interface . 761Aliases should be set as 762.Va ipv6_ifconfig_ Ns Ao Ar interface Ac Ns Va _alias Ns Aq Ar n . 763.Va ipv6_prefix_ Ns Aq Ar interface 764does something. 765Interfaces that do not have a 766.Va ipv6_ifconfig_ Ns Aq Ar interface 767setting will be auto configured by 768.Xr rtsol 8 769if the 770.Va ipv6_gateway_enable 771is set to 772.Dq Li NO . 773Note that the IPv6 networking code does not support the 774.Pa /etc/start_if. Ns Aq Ar interface 775files. 776.It Va ipv6_default_interface 777.Pq Vt str 778If not set to 779.Dq Li NO , 780this is the default output interface for scoped addresses. 781Now this works only for IPv6 link local multicast addresses. 782.It Va cloned_interfaces 783.Pq Vt str 784Set to the list of clonable network interfaces to create on this host. 785Entries in 786.Va cloned_interfaces 787are automatically appended to 788.Va network_interfaces 789for configuration. 790.It Va gif_interfaces 791.Pq Vt str 792Set to the list of 793.Xr gif 4 794tunnel interfaces to configure on this host. 795A 796.Va gifconfig_ Ns Aq Ar interface 797variable is assumed to exist for each value of 798.Ar interface . 799The value of this variable is used to configure the link layer of the 800tunnel according to the syntax of the 801.Cm tunnel 802option to 803.Xr ifconfig 8 . 804Additionally, this option ensures that each listed interface is created 805via the 806.Cm create 807option to 808.Xr ifconfig 8 809before attempting to configure it. 810.It Va sppp_interfaces 811.Pq Vt str 812Set to the list of 813.Xr sppp 4 814interfaces to configure on this host. 815A 816.Va spppconfig_ Ns Aq Ar interface 817variable is assumed to exist for each value of 818.Ar interface . 819Each interface should also be configured by a general 820.Va ifconfig_ Ns Aq Ar interface 821setting. 822Refer to 823.Xr spppcontrol 8 824for more information about available options. 825.It Va ppp_enable 826.Pq Vt bool 827If set to 828.Dq Li YES , 829run the 830.Xr ppp 8 831daemon. 832.It Va ppp_mode 833.Pq Vt str 834Mode in which to run the 835.Xr ppp 8 836daemon. 837Accepted modes are 838.Dq Li auto , 839.Dq Li ddial , 840.Dq Li direct 841and 842.Dq Li dedicated . 843See the manual for a full description. 844.It Va ppp_nat 845.Pq Vt bool 846If set to 847.Dq Li YES , 848enables network address translation. 849Used in conjunction with 850.Va gateway_enable 851allows hosts on private network addresses access to the Internet using 852this host as a network address translating router. 853.It Va ppp_profile 854.Pq Vt str 855The name of the profile to use from 856.Pa /etc/ppp/ppp.conf . 857.It Va ppp_user 858.Pq Vt str 859The name of the user under which 860.Xr ppp 8 861should be started. 862By 863default, 864.Xr ppp 8 865is started as 866.Dq Li root . 867.It Va rc_conf_files 868.Pq Vt str 869This option is used to specify a list of files that will override 870the settings in 871.Pa /etc/defaults/rc.conf . 872The files will be read in the order in which they are specified and should 873include the full path to the file. 874By default, the files specified are 875.Pa /etc/rc.conf 876and 877.Pa /etc/rc.conf.local 878.It Va fsck_y_enable 879.Pq Vt bool 880If set to 881.Dq Li YES , 882.Xr fsck 8 883will be run with the 884.Fl y 885flag if the initial preen 886of the file systems fails. 887.It Va netfs_types 888.Pq Vt str 889List of file system types that are network-based. 890This list should generally not be modified by end users. 891Use 892.Va extra_netfs_types 893instead. 894.It Va extra_netfs_types 895.Pq Vt str 896If set to something other than 897.Dq Li NO 898(the default), 899this variable extends the list of file system types 900for which automatic mounting at startup by 901.Xr rc 8 902should be delayed until the network is initialized. 903It should contain 904a whitespace-separated list of network file system descriptor pairs, 905each consisting of a file system type as passed to 906.Xr mount 8 907and a human-readable, one-word description, 908joined with a colon 909.Pq Ql \&: . 910Extending the default list in this way is only necessary 911when third party file system types are used. 912.It Va syslogd_enable 913.Pq Vt bool 914If set to 915.Dq Li YES , 916run the 917.Xr syslogd 8 918daemon. 919.It Va syslogd_program 920.Pq Vt str 921Path to 922.Xr syslogd 8 923(default 924.Pa /usr/sbin/syslogd ) . 925.It Va syslogd_flags 926.Pq Vt str 927If 928.Va syslogd_enable 929is set to 930.Dq Li YES , 931these are the flags to pass to 932.Xr syslogd 8 . 933.It Va inetd_enable 934.Pq Vt bool 935If set to 936.Dq Li YES , 937run the 938.Xr inetd 8 939daemon. 940.It Va inetd_program 941.Pq Vt str 942Path to 943.Xr inetd 8 944(default 945.Pa /usr/sbin/inetd ) . 946.It Va inetd_flags 947.Pq Vt str 948If 949.Va inetd_enable 950is set to 951.Dq Li YES , 952these are the flags to pass to 953.Xr inetd 8 . 954.It Va named_rcng 955.Pq Vt bool 956If set to 957.Dq Li YES 958use new functionality provided in the 959.Pa /etc/rc.d/named 960script to facilitate a 961.Xr chroot 8 962instance of 963.Xr named 8 . 964This variable is experimental. 965It may be removed or changed in the near future. 966.It Va named_enable 967.Pq Vt bool 968If set to 969.Dq Li YES , 970run the 971.Xr named 8 972daemon. 973.It Va named_program 974.Pq Vt str 975Path to 976.Xr named 8 977(default 978.Pa /usr/sbin/named ) . 979.It Va named_flags 980.Pq Vt str 981If 982.Va named_enable 983is set to 984.Dq Li YES , 985these are the flags to pass to 986.Xr named 8 . 987.It Va named_pidfile 988.Pq Vt str 989This is the default path to the 990.Xr named 8 991daemon's PID file. 992Change it if you change the location in 993.Xr named.conf 5 . 994.It Va named_chrootdir 995.Pq Vt str 996The root directory for a name server run in a 997.Xr chroot 8 998environment. 999If left empty 1000.Xr named 8 1001will not be run in a 1002.Xr chroot 8 1003environment. 1004This variable has no effect if 1005.Va named_rcng 1006is not enabled. 1007This variable is experimental. 1008It may be removed or changed in the near future. 1009.It Va named_chroot_autoupdate 1010.Pq Vt bool 1011Set to 1012.Dq Li NO 1013to disable automatic syncing of libraries and 1014other system files between the root file system and the 1015.Xr chroot 8 . 1016This variable has no effect if 1017.Va named_rcng 1018is not enabled. 1019This variable is experimental. 1020It may be removed or changed in the near future. 1021.It Va named_symlink_enable 1022.Pq Vt bool 1023Set to 1024.Dq Li NO 1025to disable symlinking of 1026.Va named_pidfile 1027and 1028.Pa /var/run/ndc 1029into the 1030.Xr chroot 8 1031environment in which 1032.Xr named 8 1033is running. 1034This variable has no effect if 1035.Va named_rcng 1036is not enabled. 1037This variable is experimental. 1038It may be removed or changed in the near future. 1039.It Va kerberos5_server_enable 1040.Pq Vt bool 1041Set to 1042.Dq Li YES 1043to start a Kerberos 5 authentication server 1044at boot time. 1045.It Va kerberos5_server 1046.Pq Vt str 1047If 1048.Va kerberos5_server_enable 1049is set to 1050.Dq Li YES 1051this is the path to Kerberos 5 Authentication Server. 1052.It Va kadmind5_server_enable 1053.Pq Vt bool 1054Set to 1055.Dq Li YES 1056to start 1057.Xr kadmind 8 , 1058the Kerberos 5 Administration Daemon; set to 1059.Dq Li NO 1060on a slave server. 1061.It Va kadmind5_server 1062.Pq Vt str 1063If 1064.Va kadmind5_server_enable 1065is set to 1066.Dq Li YES 1067this is the path to Kerberos 5 Administration Daemon. 1068.It Va kpasswdd_server_enable 1069.Pq Vt bool 1070Set to 1071.Dq Li YES 1072to start 1073.Xr kpasswdd 8 , 1074the Kerberos 5 Password-Changing Daemon; set to 1075.Dq Li NO 1076on a slave server. 1077.It Va kpasswdd_server 1078.Pq Vt str 1079If 1080.Va kpasswdd_server_enable 1081is set to 1082.Dq Li YES 1083this is the path to Kerberos 5 Password-Changing Daemon. 1084.It Va rwhod_enable 1085.Pq Vt bool 1086If set to 1087.Dq Li YES , 1088run the 1089.Xr rwhod 8 1090daemon at boot time. 1091.It Va rwhod_flags 1092.Pq Vt str 1093If 1094.Va rwhod_enable 1095is set to 1096.Dq Li YES , 1097these are the flags to pass to it. 1098.It Va amd_enable 1099.Pq Vt bool 1100If set to 1101.Dq Li YES , 1102run the 1103.Xr amd 8 1104daemon at boot time. 1105.It Va amd_flags 1106.Pq Vt str 1107If 1108.Va amd_enable 1109is set to 1110.Dq Li YES , 1111these are the flags to pass to it. 1112See the 1113.Xr amd 8 1114manpage for more information. 1115.It Va amd_map_program 1116.Pq Vt str 1117If set, 1118the specified program is run to get the list of 1119.Xr amd 8 1120maps. 1121For example, if the 1122.Xr amd 8 1123maps are stored in NIS, one can set this to 1124run 1125.Xr ypcat 1 1126to get a list of 1127.Xr amd 8 1128maps from the 1129.Pa amd.master 1130NIS map. 1131.It Va update_motd 1132.Pq Vt bool 1133If set to 1134.Dq Li YES , 1135.Pa /etc/motd 1136will be updated at boot time to reflect the kernel release 1137being run. 1138If set to 1139.Dq Li NO , 1140.Pa /etc/motd 1141will not be updated. 1142.It Va nfs_client_enable 1143.Pq Vt bool 1144If set to 1145.Dq Li YES , 1146run the NFS client daemons at boot time. 1147.It Va nfs_access_cache 1148.Pq Vt int 1149If 1150.Va nfs_client_enable 1151is set to 1152.Dq Li YES , 1153this can be set to 1154.Dq Li 0 1155to disable NFS ACCESS RPC caching, or to the number of seconds for which 1156NFS ACCESS 1157results should be cached. 1158A value of 2-10 seconds will substantially reduce network 1159traffic for many NFS operations. 1160.It Va nfs_server_enable 1161.Pq Vt bool 1162If set to 1163.Dq Li YES , 1164run the NFS server daemons at boot time. 1165.It Va nfs_server_flags 1166.Pq Vt str 1167If 1168.Va nfs_server_enable 1169is set to 1170.Dq Li YES , 1171these are the flags to pass to the 1172.Xr nfsd 8 1173daemon. 1174.It Va mountd_enable 1175.Pq Vt bool 1176If set to 1177.Dq Li YES , 1178and no 1179.Va nfs_server_enable 1180is set, start 1181.Xr mountd 8 , 1182but not 1183.Xr nfsd 8 1184daemon. 1185It is commonly needed to run CFS without real NFS used. 1186.It Va mountd_flags 1187.Pq Vt str 1188If 1189.Va mountd_enable 1190is set to 1191.Dq Li YES , 1192these are the flags to pass to the 1193.Xr mountd 8 1194daemon. 1195.It Va weak_mountd_authentication 1196.Pq Vt bool 1197If set to 1198.Dq Li YES , 1199allow services like PCNFSD to make non-privileged mount 1200requests. 1201.It Va nfs_reserved_port_only 1202.Pq Vt bool 1203If set to 1204.Dq Li YES , 1205provide NFS services only on a secure port. 1206.It Va nfs_bufpackets 1207.Pq Vt int 1208If set to a number, indicates the number of packets worth of 1209socket buffer space to reserve on an NFS client. 1210The kernel default is typically 4. 1211Using a higher number may be 1212useful on gigabit networks to improve performance. 1213The minimum value is 12142 and the maximum is 64. 1215.It Va rpc_umntall_enable 1216.Pq Vt bool 1217If set to 1218.Dq Li YES 1219(default) and we are also an NFS client, run 1220.Xr rpc.umntall 8 1221at boot time to clear out old mounts on remote servers. 1222If set to 1223.Dq Li NO 1224then 1225.Xr rpc.umntall 8 1226will not be run at boot time. 1227.It Va rpc_lockd_enable 1228.Pq Vt bool 1229If set to 1230.Dq Li YES 1231and also an NFS server, run 1232.Xr rpc.lockd 8 1233at boot time. 1234.It Va rpc_statd_enable 1235.Pq Vt bool 1236If set to 1237.Dq Li YES 1238and also an NFS server, run 1239.Xr rpc.statd 8 1240at boot time. 1241.It Va rpcbind_program 1242.Pq Vt str 1243Path to 1244.Xr rpcbind 8 1245(default 1246.Pa /usr/sbin/rpcbind ) . 1247.It Va rpcbind_enable 1248.Pq Vt bool 1249If set to 1250.Dq Li YES , 1251run the 1252.Xr rpcbind 8 1253service at boot time. 1254.It Va rpcbind_flags 1255.Pq Vt str 1256If 1257.Va rpcbind_enable 1258is set to 1259.Dq Li YES , 1260these are the flags to pass to the 1261.Xr rpcbind 8 1262daemon. 1263.It Va keyserv_enable 1264.Pq Vt bool 1265If set to 1266.Dq Li YES , 1267run the 1268.Xr keyserv 8 1269daemon on boot for running Secure RPC. 1270.It Va keyserv_flags 1271.Pq Vt str 1272If 1273.Va keyserv_enable 1274is set to 1275.Dq Li YES , 1276these are the flags to pass to 1277.Xr keyserv 8 1278daemon. 1279.It Va pppoed_enable 1280.Pq Vt bool 1281If set to 1282.Dq Li YES , 1283run the 1284.Xr pppoed 8 1285daemon at boot time to provide PPP over Ethernet services. 1286.It Va pppoed_ Ns Ar provider 1287.Pq Vt str 1288.Xr pppoed 8 1289listens to requests to this 1290.Ar provider 1291and ultimately runs 1292.Xr ppp 8 1293with a 1294.Ar system 1295argument of the same name. 1296.It Va pppoed_flags 1297.Pq Vt str 1298Additional flags to pass to 1299.Xr pppoed 8 . 1300.It Va pppoed_interface 1301.Pq Vt str 1302The network interface to run 1303.Xr pppoed 8 1304on. 1305This is mandatory when 1306.Va pppoed_enable 1307is set to 1308.Dq Li YES . 1309.It Va timed_enable 1310.Pq Vt bool 1311If set to 1312.Dq Li YES , 1313run the 1314.Xr timed 8 1315service at boot time. 1316This command is intended for networks of 1317machines where a consistent 1318.Dq "network time" 1319for all hosts must be established. 1320This is often useful in large NFS 1321environments where time stamps on files are expected to be consistent 1322network-wide. 1323.It Va timed_flags 1324.Pq Vt str 1325If 1326.Va timed_enable 1327is set to 1328.Dq Li YES , 1329these are the flags to pass to the 1330.Xr timed 8 1331service. 1332.It Va ntpd_enable 1333.Pq Vt bool 1334If set to 1335.Dq Li YES , 1336run the 1337.Xr ntpd 8 1338command at boot time. 1339.It Va ntpd_program 1340.Pq Vt str 1341Path to 1342.Xr ntpd 8 1343(default 1344.Pa /usr/sbin/ntpd ) . 1345.It Va ntpd_flags 1346.Pq Vt str 1347If 1348.Va ntpd_enable 1349is set to 1350.Dq Li YES , 1351these are the flags to pass to the 1352.Xr ntpd 8 1353daemon. Set to 1354.Dq Li -s 1355by default which sets the time immediately at startup if the 1356local clock is off by more than 180 seconds. To prevent 1357.Xr ntpd 8 1358from doing this, set 1359.Va ntpd_flags 1360to 1361.Dq Li -S . 1362.It Va nis_client_enable 1363.Pq Vt bool 1364If set to 1365.Dq Li YES , 1366run the 1367.Xr ypbind 8 1368service at system boot time. 1369.It Va nis_client_flags 1370.Pq Vt str 1371If 1372.Va nis_client_enable 1373is set to 1374.Dq Li YES , 1375these are the flags to pass to the 1376.Xr ypbind 8 1377service. 1378.It Va nis_ypset_enable 1379.Pq Vt bool 1380If set to 1381.Dq Li YES , 1382run the 1383.Xr ypset 8 1384daemon at system boot time. 1385.It Va nis_ypset_flags 1386.Pq Vt str 1387If 1388.Va nis_ypset_enable 1389is set to 1390.Dq Li YES , 1391these are the flags to pass to the 1392.Xr ypset 8 1393daemon. 1394.It Va nis_server_enable 1395.Pq Vt bool 1396If set to 1397.Dq Li YES , 1398run the 1399.Xr ypserv 8 1400daemon at system boot time. 1401.It Va nis_server_flags 1402.Pq Vt str 1403If 1404.Va nis_server_enable 1405is set to 1406.Dq Li YES , 1407these are the flags to pass to the 1408.Xr ypserv 8 1409daemon. 1410.It Va nis_ypxfrd_enable 1411.Pq Vt bool 1412If set to 1413.Dq Li YES , 1414run the 1415.Xr rpc.ypxfrd 8 1416daemon at system boot time. 1417.It Va nis_ypxfrd_flags 1418.Pq Vt str 1419If 1420.Va nis_ypxfrd_enable 1421is set to 1422.Dq Li YES , 1423these are the flags to pass to the 1424.Xr rpc.ypxfrd 8 1425daemon. 1426.It Va nis_yppasswdd_enable 1427.Pq Vt bool 1428If set to 1429.Dq Li YES , 1430run the 1431.Xr rpc.yppasswdd 8 1432daemon at system boot time. 1433.It Va nis_yppasswdd_flags 1434.Pq Vt str 1435If 1436.Va nis_yppasswdd_enable 1437is set to 1438.Dq Li YES , 1439these are the flags to pass to the 1440.Xr rpc.yppasswdd 8 1441daemon. 1442.It Va rpc_ypupdated_enable 1443.Pq Vt bool 1444If set to 1445.Dq Li YES , 1446run the 1447.Nm rpc.ypupdated 1448daemon at system boot time. 1449.It Va defaultrouter 1450.Pq Vt str 1451If not set to 1452.Dq Li NO , 1453create a default route to this host name or IP address 1454(use an IP address if this router is also required to get to the 1455name server!). 1456.It Va ipv6_defaultrouter 1457.Pq Vt str 1458The IPv6 equivalent of 1459.Va defaultrouter . 1460.It Va static_routes 1461.Pq Vt str 1462Set to the list of static routes that are to be added at system 1463boot time. 1464If not set to 1465.Dq Li NO 1466then for each whitespace separated 1467.Ar element 1468in the value, a 1469.Va route_ Ns Aq Ar element 1470variable is assumed to exist 1471whose contents will later be passed to a 1472.Dq Nm route Cm add 1473operation. 1474.It Va ipv6_static_routes 1475.Pq Vt str 1476The IPv6 equivalent of 1477.Va static_routes . 1478If not set to 1479.Dq Li NO 1480then for each whitespace separated 1481.Ar element 1482in the value, a 1483.Va ipv6_route_ Ns Aq Ar element 1484variable is assumed to exist 1485whose contents will later be passed to a 1486.Dq Nm route Cm add Fl inet6 1487operation. 1488.It Va gateway_enable 1489.Pq Vt bool 1490If set to 1491.Dq Li YES , 1492configure host to act as an IP router, e.g. to forward packets 1493between interfaces. 1494.It Va ipv6_gateway_enable 1495.Pq Vt bool 1496The IPv6 equivalent of 1497.Va gateway_enable . 1498.It Va router_enable 1499.Pq Vt bool 1500If set to 1501.Dq Li YES , 1502run a routing daemon of some sort, based on the 1503settings of 1504.Va router 1505and 1506.Va router_flags . 1507.It Va ipv6_router_enable 1508.Pq Vt bool 1509The IPv6 equivalent of 1510.Va router_enable . 1511If set to 1512.Dq Li YES , 1513run a routing daemon of some sort, based on the 1514settings of 1515.Va ipv6_router 1516and 1517.Va ipv6_router_flags . 1518.It Va router 1519.Pq Vt str 1520If 1521.Va router_enable 1522is set to 1523.Dq Li YES , 1524this is the name of the routing daemon to use. 1525.It Va ipv6_router 1526.Pq Vt str 1527The IPv6 equivalent of 1528.Va router . 1529.It Va router_flags 1530.Pq Vt str 1531If 1532.Va router_enable 1533is set to 1534.Dq Li YES , 1535these are the flags to pass to the routing daemon. 1536.It Va ipv6_router_flags 1537.Pq Vt str 1538The IPv6 equivalent of 1539.Va router_flags . 1540.It Va mrouted_enable 1541.Pq Vt bool 1542If set to 1543.Dq Li YES , 1544run the multicast routing daemon, 1545.Xr mrouted 8 . 1546.It Va mroute6d_enable 1547.Pq Vt bool 1548The IPv6 equivalent of 1549.Va mrouted_enable . 1550If set to 1551.Dq Li YES , 1552run the IPv6 multicast routing daemon. 1553Note that no IPv6 multicast routing daemon is included in the 1554.Dx 1555base system but 1556.Xr pim6dd 8 1557can be installed from the 1558.Fx 1559Ports Collection. 1560.It Va mrouted_flags 1561.Pq Vt str 1562If 1563.Va mrouted_enable 1564is set to 1565.Dq Li YES , 1566these are the flags to pass to the 1567.Xr mrouted 8 1568daemon. 1569.It Va mroute6d_flags 1570.Pq Vt str 1571The IPv6 equivalent of 1572.Va mrouted_flags . 1573If 1574.Va mroute6d_enable 1575is set to 1576.Dq Li YES , 1577these are the flags passed to the IPv6 multicast routing daemon. 1578.It Va mroute6d_program 1579.Pq Vt str 1580If 1581.Va mroute6d_enable 1582is set to 1583.Dq Li YES , 1584this is the path to the IPv6 multicast routing daemon. 1585.It Va rtadvd_enable 1586.Pq Vt bool 1587If set to 1588.Dq Li YES , 1589run the 1590.Xr rtadvd 8 1591daemon at boot time. 1592.Xr rtadvd 8 1593will only run if 1594.Va ipv6_gateway_enable 1595is also set to 1596.Dq Li YES . 1597The 1598.Xr rtadvd 8 1599utility sends router advertisement packets to the interfaces specified in 1600.Va rtadvd_interfaces . 1601.Xr rtadvd 8 1602and should only be enabled with great care. 1603You may want to fine-tune 1604.Xr rtadvd.conf 5 . 1605.It Va rtadvd_interfaces 1606.Pq Vt str 1607If 1608.Va rtadvd_enable 1609is set to 1610.Dq Li YES 1611this is the list of interfaces to use. 1612.It Va ipxgateway_enable 1613.Pq Vt bool 1614If set to 1615.Dq Li YES , 1616enable the routing of IPX traffic. 1617.It Va ipxrouted_enable 1618.Pq Vt bool 1619If set to 1620.Dq Li YES , 1621run the 1622.Xr IPXrouted 8 1623daemon at system boot time. 1624.It Va ipxrouted_flags 1625.Pq Vt str 1626If 1627.Va ipxrouted_enable 1628is set to 1629.Dq Li YES , 1630these are the flags to pass to the 1631.Xr IPXrouted 8 1632daemon. 1633.It Va arpproxy_all 1634.Pq Vt bool 1635If set to 1636.Dq Li YES , 1637enable global proxy ARP. 1638.It Va forward_sourceroute 1639.Pq Vt bool 1640If set to 1641.Dq Li YES 1642and 1643.Va gateway_enable 1644is also set to 1645.Dq Li YES , 1646source-routed packets are forwarded. 1647.It Va accept_sourceroute 1648.Pq Vt bool 1649If set to 1650.Dq Li YES , 1651the system will accept source-routed packets directed at it. 1652.It Va rarpd_enable 1653.Pq Vt bool 1654If set to 1655.Dq Li YES , 1656run the 1657.Xr rarpd 8 1658daemon at system boot time. 1659.It Va rarpd_flags 1660.Pq Vt str 1661If 1662.Va rarpd_enable 1663is set to 1664.Dq Li YES , 1665these are the flags to pass to the 1666.Xr rarpd 8 1667daemon. 1668.It Va bootparamd_enable 1669.Pq Vt bool 1670If set to 1671.Dq Li YES , 1672run the 1673.Xr bootparamd 8 1674daemon at system boot time. 1675.It Va bootparamd_flags 1676.Pq Vt str 1677If 1678.Va bootparamd_enable 1679is set to 1680.Dq Li YES , 1681these are the flags to pass to the 1682.Xr bootparamd 8 1683daemon. 1684.It Va stf_interface_ipv4addr 1685.Pq Vt str 1686If not set to 1687.Dq Li NO , 1688this is the local IPv4 address for 6to4 (IPv6 over IPv4 tunneling 1689interface). 1690Specify this entry to enable the 6to4 interface. 1691.It Va stf_interface_ipv4plen 1692.Pq Vt int 1693Prefix length for 6to4 IPv4 addresses, to limit peer address range. 1694An effective value is 0-31. 1695.It Va stf_interface_ipv6_ifid 1696.Pq Vt str 1697IPv6 interface ID for 1698.Xr stf 4 . 1699This can be set to 1700.Dq Li AUTO . 1701.It Va stf_interface_ipv6_slaid 1702.Pq Vt str 1703IPv6 Site Level Aggregator for 1704.Xr stf 4 . 1705.It Va ipv6_faith_prefix 1706.Pq Vt str 1707If not set to 1708.Dq Li NO , 1709this is the faith prefix to enable a FAITH IPv6-to-IPv4 TCP 1710translator. 1711You also need 1712.Xr faithd 8 1713setup. 1714.It Va ipv6_ipv4mapping 1715.Pq Vt bool 1716If set to 1717.Dq Li YES 1718this enables IPv4 mapped IPv6 address communication (like 1719.Li ::ffff:a.b.c.d ) . 1720.It Va atm_enable 1721.Pq Vt bool 1722Set to 1723.Dq Li YES 1724to enable the configuration of ATM interfaces at system boot time. 1725For all of the ATM variables described below, please refer to the 1726.Xr atm 8 1727man page for further details on the available command parameters. 1728Also refer to the files in 1729.Pa /usr/share/examples/atm 1730for more detailed configuration information. 1731.It Va atm_load 1732.Pq Vt str 1733This is a list of physical ATM interface drivers to load. Typical values are 1734.Dq Li hfa_pci 1735and/or 1736.Dq Li hea_pci . 1737.It Va atm_netif_ Ns Aq Ar intf 1738.Pq Vt str 1739For the ATM physical interface 1740.Ar intf , 1741this variable defines the name prefix and count for the ATM network 1742interfaces to be created. 1743The value will be passed as the parameters of an 1744.Dq Nm atm Cm "set netif" Ar intf 1745command. 1746.It Va atm_sigmgr_ Ns Aq Ar intf 1747.Pq Vt str 1748For the ATM physical interface 1749.Ar intf , 1750this variable defines the ATM signalling manager to be used. 1751The value will be passed as the parameters of an 1752.Dq Nm atm Cm attach Ar intf 1753command. 1754.It Va atm_prefix_ Ns Aq Ar intf 1755.Pq Vt str 1756For the ATM physical interface 1757.Ar intf , 1758this variable defines the NSAP prefix for interfaces using a UNI signalling 1759manager. 1760If set to 1761.Dq Li ILMI , 1762the prefix will automatically be set via the 1763.Xr ilmid 8 1764daemon. 1765Otherwise, the value will be passed as the parameters of an 1766.Dq Nm atm Cm "set prefix" Ar intf 1767command. 1768.It Va atm_macaddr_ Ns Aq Ar intf 1769.Pq Vt str 1770For the ATM physical interface 1771.Ar intf , 1772this variable defines the MAC address for interfaces using a UNI signalling 1773manager. 1774If set to 1775.Dq Li NO , 1776the hardware MAC address contained in the ATM interface card will be used. 1777Otherwise, the value will be passed as the parameters of an 1778.Dq Nm atm Cm "set mac" Ar intf 1779command. 1780.It Va atm_arpserver_ Ns Aq Ar netif 1781.Pq Vt str 1782For the ATM network interface 1783.Ar netif , 1784this variable defines the ATM address for a host which is to provide ATMARP 1785service. 1786This variable is only applicable to interfaces using a UNI signalling 1787manager. 1788If set to 1789.Dq Li local , 1790this host will become an ATMARP server. 1791The value will be passed as the parameters of an 1792.Dq Nm atm Cm "set arpserver" Ar netif 1793command. 1794.It Va atm_scsparp_ Ns Aq Ar netif 1795.Pq Vt bool 1796If set to 1797.Dq Li YES , 1798SCSP/ATMARP service for the network interface 1799.Ar netif 1800will be initiated using the 1801.Xr scspd 8 1802and 1803.Xr atmarpd 8 1804daemons. 1805This variable is only applicable if 1806.Va atm_arpserver_ Ns Aq Ar netif 1807is set to 1808.Dq Li local . 1809.It Va atm_pvcs 1810.Pq Vt str 1811Set to the list of ATM PVCs to be added at system 1812boot time. 1813For each whitespace separated 1814.Ar element 1815in the value, an 1816.Va atm_pvc_ Ns Aq Ar element 1817variable is assumed to exist. 1818The value of each of these variables 1819will be passed as the parameters of an 1820.Dq Nm atm Cm "add pvc" 1821command. 1822.It Va atm_arps 1823.Pq Vt str 1824Set to the list of permanent ATM ARP entries to be added 1825at system boot time. 1826For each whitespace separated 1827.Ar element 1828in the value, an 1829.Va atm_arp_ Ns Aq Ar element 1830variable is assumed to exist. 1831The value of each of these variables 1832will be passed as the parameters of an 1833.Dq Nm atm Cm "add arp" 1834command. 1835.It Va natm_interfaces 1836.Pq Vt str 1837Set to the list of 1838.Xr natm 4 1839interfaces that will also be used for HARP through 1840.Xr harp 4 . 1841If this list is not empty all interfaces in the list will be brought up 1842with 1843.Xr ifconfig 9 1844and 1845.Xr harp 4 1846will be loaded. 1847For this to work the interface drivers must be either compiled into the 1848kernel or must reside on the root partition. 1849.It Va keybell 1850.Pq Vt str 1851The keyboard bell sound. 1852Set to 1853.Dq Li normal , 1854.Dq Li visual , 1855.Dq Li off , 1856or 1857.Dq Li NO 1858if the default behavior is desired. 1859For details, refer to the 1860.Xr kbdcontrol 1 1861manpage. 1862.It Va keymap 1863.Pq Vt str 1864If set to 1865.Dq Li NO , 1866no keymap is installed, otherwise the value is used to install 1867the keymap file in 1868.Pa /usr/share/syscons/keymaps/ Ns Ao Ar value Ac Ns Pa .kbd . 1869.It Va keyrate 1870.Pq Vt str 1871The keyboard repeat speed. 1872Set to 1873.Dq Li slow , 1874.Dq Li normal , 1875.Dq Li fast , 1876or 1877.Dq Li NO 1878if the default behavior is desired. 1879.It Va keychange 1880.Pq Vt str 1881If not set to 1882.Dq Li NO , 1883attempt to program the function keys with the value. 1884The value should 1885be a single string of the form: 1886.Dq Ar funkey_number new_value Op Ar funkey_number new_value ... . 1887.It Va cursor 1888.Pq Vt str 1889Can be set to the value of 1890.Dq Li normal , 1891.Dq Li blink , 1892.Dq Li destructive , 1893or 1894.Dq Li NO 1895to set the cursor behavior explicitly or choose the default behavior. 1896.It Va scrnmap 1897.Pq Vt str 1898If set to 1899.Dq Li NO , 1900no screen map is installed, otherwise the value is used to install 1901the screen map file in 1902.Pa /usr/share/syscons/scrnmaps/ Ns Aq Ar value . 1903.It Va font8x16 1904.Pq Vt str 1905If set to 1906.Dq Li NO , 1907the default 8x16 font value is used for screen size requests, otherwise 1908the value in 1909.Pa /usr/share/syscons/fonts/ Ns Aq Ar value 1910is used. 1911.It Va font8x14 1912.Pq Vt str 1913If set to 1914.Dq Li NO , 1915the default 8x14 font value is used for screen size requests, otherwise 1916the value in 1917.Pa /usr/share/syscons/fonts/ Ns Aq Ar value 1918is used. 1919.It Va font8x8 1920.Pq Vt str 1921If set to 1922.Dq Li NO , 1923the default 8x8 font value is used for screen size requests, otherwise 1924the value in 1925.Pa /usr/share/syscons/fonts/ Ns Aq Ar value 1926is used. 1927.It Va blanktime 1928.Pq Vt int 1929If set to 1930.Dq Li NO , 1931the default screen blanking interval is used, otherwise it is set 1932to 1933.Ar value 1934seconds. 1935.It Va saver 1936.Pq Vt str 1937If not set to 1938.Dq Li NO , 1939this is the actual screen saver to use 1940.Li ( blank , snake , daemon , 1941etc). 1942.It Va moused_enable 1943.Pq Vt str 1944If set to 1945.Dq Li YES , 1946the 1947.Xr moused 8 1948daemon is started for doing cut/paste selection on the console. 1949.It Va moused_type 1950.Pq Vt str 1951This is the protocol type of the mouse connected to this host. 1952This variable must be set if 1953.Va moused_enable 1954is set to 1955.Dq Li YES . 1956The 1957.Xr moused 8 1958daemon 1959is able to detect the appropriate mouse type automatically in many cases. 1960Set this variable to 1961.Dq Li auto 1962to let the daemon detect it, or 1963select one from the following list if the automatic detection fails. 1964.Pp 1965If the mouse is attached to the PS/2 mouse port, choose 1966.Dq Li auto 1967or 1968.Dq Li ps/2 , 1969regardless of the brand and model of the mouse. 1970Likewise, if the 1971mouse is attached to the bus mouse port, choose 1972.Dq Li auto 1973or 1974.Dq Li busmouse . 1975All other protocols are for serial mice and will not work with 1976the PS/2 and bus mice. 1977If this is a USB mouse, 1978.Dq Li auto 1979is the only protocol type which will work. 1980.Pp 1981.Bl -tag -width ".Li x10mouseremote" -compact 1982.It Li microsoft 1983Microsoft mouse (serial) 1984.It Li intellimouse 1985Microsoft IntelliMouse (serial) 1986.It Li mousesystems 1987Mouse systems Corp. mouse (serial) 1988.It Li mmseries 1989MM Series mouse (serial) 1990.It Li logitech 1991Logitech mouse (serial) 1992.It Li busmouse 1993A bus mouse 1994.It Li mouseman 1995Logitech MouseMan and TrackMan (serial) 1996.It Li glidepoint 1997ALPS GlidePoint (serial) 1998.It Li thinkingmouse 1999Kensington ThinkingMouse (serial) 2000.It Li ps/2 2001PS/2 mouse 2002.It Li mmhittab 2003MM HitTablet (serial) 2004.It Li x10mouseremote 2005X10 MouseRemote (serial) 2006.It Li versapad 2007Interlink VersaPad (serial) 2008.El 2009.Pp 2010Even if the mouse is not in the above list, it may be compatible 2011with one in the list. 2012Refer to the man page for 2013.Xr moused 8 2014for compatibility information. 2015.Pp 2016It should also be noted that while this is enabled, any 2017other client of the mouse (such as an X server) should access 2018the mouse through the virtual mouse device, 2019.Pa /dev/sysmouse , 2020and configure it as a 2021.Dq Li sysmouse 2022type mouse, since all 2023mouse data is converted to this single canonical format when 2024using 2025.Xr moused 8 . 2026If the client program does not support the 2027.Dq Li sysmouse 2028type, 2029specify the 2030.Dq Li mousesystems 2031type. 2032It is the second preferred type. 2033.It Va moused_port 2034.Pq Vt str 2035If 2036.Va moused_enable 2037is set to 2038.Dq Li YES , 2039this is the actual port the mouse is on. 2040It might be 2041.Pa /dev/cuaa0 2042for a COM1 serial mouse, 2043.Pa /dev/psm0 2044for a PS/2 mouse or 2045.Pa /dev/mse0 2046for a bus mouse, for example. 2047.It Va moused_flags 2048.Pq Vt str 2049If 2050.Va moused_type 2051is set, these are the additional flags to pass to the 2052.Xr moused 8 2053daemon. 2054.It Va mousechar_start 2055.Pq Vt int 2056If set to 2057.Dq Li NO , 2058the default mouse cursor character range 2059.Li 0xd0 Ns - Ns Li 0xd3 2060is used, 2061otherwise the range start is set 2062to 2063.Ar value 2064character, see 2065.Xr vidcontrol 1 . 2066Use if the default range is occupied in the language code table. 2067.It Va allscreens_flags 2068.Pq Vt str 2069If set, 2070.Xr vidcontrol 1 2071is run with these options for each of the virtual terminals 2072.Pq Pa /dev/ttyv* . 2073For example, 2074.Dq Fl m Cm on 2075will enable the mouse pointer on all virtual terminals 2076if 2077.Va moused_enable 2078is set to 2079.Dq Li YES . 2080.It Va allscreens_kbdflags 2081.Pq Vt str 2082If set, 2083.Xr kbdcontrol 1 2084is run with these options for each of the virtual terminals 2085.Pq Pa /dev/ttyv* . 2086For example, 2087.Dq Fl h Li 200 2088will set the 2089.Xr syscons 4 2090scrollback (history) buffer to 200 lines. 2091.It Va cron_enable 2092.Pq Vt bool 2093If set to 2094.Dq Li YES , 2095run the 2096.Xr cron 8 2097daemon at system boot time. 2098.It Va cron_program 2099.Pq Vt str 2100Path to 2101.Xr cron 8 2102(default 2103.Pa /usr/sbin/cron ) . 2104.It Va cron_flags 2105.Pq Vt str 2106If 2107.Va cron_enable 2108is set to 2109.Dq Li YES , 2110these are the flags to pass to 2111.Xr cron 8 . 2112.It Va lpd_program 2113.Pq Vt str 2114Path to 2115.Xr lpd 8 2116(default 2117.Pa /usr/sbin/lpd ) . 2118.It Va lpd_enable 2119.Pq Vt bool 2120If set to 2121.Dq Li YES , 2122run the 2123.Xr lpd 8 2124daemon at system boot time. 2125.It Va lpd_flags 2126.Pq Vt str 2127If 2128.Va lpd_enable 2129is set to 2130.Dq Li YES , 2131these are the flags to pass to the 2132.Xr lpd 8 2133daemon. 2134.It Va mta_start_script 2135.Pq Vt str 2136This variable specifies the full path to the script to run to start 2137a mail transfer agent. 2138The default is 2139.Pa /etc/rc.sendmail . 2140The 2141.Va sendmail_* 2142variables which 2143.Pa /etc/rc.sendmail 2144uses are documented in the 2145.Xr rc.sendmail 8 2146man page. 2147.It Va dumpdev 2148.Pq Vt str 2149Indicates the device (usually a swap partition) to which a crash dump 2150should be written in the event of a system crash. 2151The value of this variable is passed as the argument to 2152.Xr dumpon 8 . 2153To disable crash dumps, set this variable to 2154.Dq Li NO . 2155.It Va dumpdir 2156.Pq Vt str 2157When the system reboots after a crash and a crash dump is found on the 2158device specified by the 2159.Va dumpdev 2160variable, 2161.Xr savecore 8 2162will save that crash dump and a copy of the kernel to the directory 2163specified by the 2164.Va dumpdir 2165variable. 2166The default value is 2167.Pa /var/crash . 2168Set to 2169.Dq Li NO 2170to not run 2171.Xr savecore 8 2172at boot time when 2173.Va dumpdir 2174is set. 2175.It Va savecore_flags 2176.Pq Vt str 2177If crash dumps are enabled, these are the flags to pass to the 2178.Xr savecore 8 2179utility. 2180.It Va enable_quotas 2181.Pq Vt bool 2182Set to 2183.Dq Li YES 2184to turn on user disk quotas on system startup via the 2185.Xr quotaon 8 2186command. 2187.It Va check_quotas 2188.Pq Vt bool 2189Set to 2190.Dq Li YES 2191to enable user disk quota checking via the 2192.Xr quotacheck 8 2193command. 2194.It Va accounting_enable 2195.Pq Vt bool 2196Set to 2197.Dq Li YES 2198to enable system accounting through the 2199.Xr accton 8 2200facility. 2201.It Va ibcs2_enable 2202.Pq Vt bool 2203Set to 2204.Dq Li YES 2205to enable iBCS2 (SCO) binary emulation at system initial boot 2206time. 2207.It Va ibcs2_loaders 2208.Pq Vt str 2209If not set to 2210.Dq Li NO 2211and if 2212.Va ibcs2_enable 2213is set to 2214.Dq Li YES , 2215this specifies a list of additional iBCS2 loaders to enable. 2216.It Va linux_enable 2217.Pq Vt bool 2218Set to 2219.Dq Li YES 2220to enable Linux/ELF binary emulation at system initial 2221boot time. 2222.It Va osf1_enable 2223.Pq Vt bool 2224Set to 2225.Dq Li YES 2226to enable OSF/1 (Digital UNIX) binary emulation at system 2227initial boot time. 2228(alpha) 2229.It Va svr4_enable 2230.Pq Vt bool 2231If set to 2232.Dq Li YES , 2233enable SysVR4 emulation at boot time. 2234.It Va sysvipc_enable 2235.Pq Vt bool 2236If set to 2237.Dq Li YES , 2238load System V IPC primitives at boot time. 2239.It Va clear_tmp_enable 2240.Pq Vt bool 2241Set to 2242.Dq Li YES 2243to have 2244.Pa /tmp 2245cleaned at startup. 2246.It Va ldconfig_paths 2247.Pq Vt str 2248Set to the list of shared library paths to use with 2249.Xr ldconfig 8 . 2250NOTE: 2251.Pa /usr/lib 2252will always be added first, so it need not appear in this list. 2253.It Va ldconfig_paths_aout 2254.Pq Vt str 2255Set to the list of shared library paths to use with 2256.Xr ldconfig 8 2257legacy 2258.Xr a.out 5 2259support. 2260.It Va ldconfig_insecure 2261.Pq Vt bool 2262The 2263.Xr ldconfig 8 2264utility normally refuses to use directories 2265which are writable by anyone except root. 2266Set this variable to 2267.Dq Li YES 2268to disable that security check during system startup. 2269.It Va kern_securelevel_enable 2270.Pq Vt bool 2271Set to 2272.Dq Li YES 2273to set the kernel security level at system startup. 2274.It Va kern_securelevel 2275.Pq Vt int 2276The kernel security level to set at startup. 2277The allowed range of 2278.Ar value 2279ranges from \-1 (the compile time default) to 3 (the 2280most secure). 2281See 2282.Xr init 8 2283for the list of possible security levels and their effect 2284on system operation. 2285.It Va lomac_enable 2286.Pq Vt bool 2287Set to 2288.Dq Li YES 2289to enable Low Watermark Mandatory Access Control (LOMAC) at boot time. 2290This security model enforces integrity constraints for system processes; 2291see 2292.Xr lomac 4 2293for a complete description of the LOMAC model, as well as its impact 2294on system operation. 2295.It Va start_vinum 2296.Pq Vt bool 2297Set to 2298.Dq Li YES 2299to start 2300.Xr vinum 8 2301at system boot time. 2302.It Va sshd_program 2303.Pq Vt str 2304Path to the SSH server program 2305.Pa ( /usr/sbin/sshd 2306is the default). 2307.It Va sshd_enable 2308.Pq Vt bool 2309Set to 2310.Dq Li YES 2311to start 2312.Xr sshd 8 2313at system boot time. 2314.It Va sshd_flags 2315.Pq Vt str 2316If 2317.Va sshd_enable 2318is set to 2319.Dq Li YES , 2320these are the flags to pass to the 2321.Xr sshd 8 2322daemon. 2323.It Va usbd_enable 2324.Pq Vt bool 2325If set to 2326.Dq Li YES , 2327run the 2328.Xr usbd 8 2329daemon at boot time. 2330.It Va usbd_flags 2331.Pq Vt str 2332If 2333.Va usbd_enable 2334is set to 2335.Dq Li YES , 2336these are the flags passed to 2337.Xr usbd 8 2338daemon. 2339.It Va watchdogd_enable 2340.Pq Vt bool 2341If set to 2342.Dq Li YES , 2343start the 2344.Xr watchdogd 8 2345daemon at boot time. 2346This requires that the kernel have been compiled with 2347.Cd "options WATCHDOG" . 2348.It Va jail_enable 2349.Pq Vt bool 2350If set to 2351.Dq Li NO , 2352any configured jails will not be started. 2353.It Va jail_list 2354.Pq Vt str 2355A space separated list of names for jails. 2356This is purely a configuration aid to help identify and 2357configure multiple jails. 2358The names specified in this list will be used to 2359identify settings common to an instance of a jail. 2360Assuming that the jail in question was named 2361.Li vjail , 2362you would have the following dependant variables: 2363.Bd -literal 2364jail_vjail_hostname="jail.example.com" 2365jail_vjail_ip="192.168.1.100" 2366jail_vjail_rootdir="/var/jails/vjail/root" 2367jail_vjail_exec="/bin/sh /etc/rc" 2368.Ed 2369.Pp 2370The last one is optional. 2371It defaults to 2372.Pa /etc/rc 2373if it is not set. 2374.It Va jail_set_hostname_allow 2375.Pq Vt bool 2376If set to 2377.Dq Li NO , 2378do not allow the root user in a jail to set its hostname. 2379.It Va jail_socket_unixiproute_only 2380.Pq Vt bool 2381If set to 2382.Dq Li NO , 2383do not allow any protocol, 2384besides TCP/IP, 2385to be used within a jail. 2386.It Va jail_sysvipc_allow 2387.Pq Vt bool 2388If set to 2389.Dq Li YES , 2390allow applications within a jail to use System V IPC. 2391.It Va unaligned_print 2392.Pq Vt bool 2393If set to 2394.Dq Li NO , 2395unaligned access warnings will not be printed. 2396(alpha) 2397.\" ----- isdn settings --------------------------------- 2398.It Va isdn_enable 2399.Pq Vt bool 2400Set to 2401.Dq Li NO 2402by default. 2403When set to 2404.Dq Li YES , 2405starts the 2406.Xr isdnd 8 2407daemon 2408at system boot time. 2409.It Va isdn_flags 2410.Pq Vt str 2411Set to 2412.Dq Fl d Ns Cm n Fl d Ns Li 0x1f9 2413by default. 2414Additional flags to pass to 2415.Xr isdnd 8 2416(but see 2417.Va isdn_fsdev 2418and 2419.Va isdn_ttype 2420for certain tunable parameters). 2421.It Va isdn_ttype 2422.Pq Vt str 2423Set to 2424.Dq Li cons25 2425by default. 2426The terminal type of the output device when 2427.Xr isdnd 8 2428operates in full-screen mode. 2429.It Va isdn_screenflags 2430.Pq Vt str 2431Set to 2432.Dq Li NO 2433by default. 2434The video mode for full-screen mode (only for 2435.Xr syscons 4 2436console driver, see 2437.Xr vidcontrol 1 2438for valid modes). 2439.It Va isdn_fsdev 2440.Pq Vt str 2441Set to 2442.Dq Li NO 2443by default. 2444The output device for 2445.Xr isdnd 8 2446in full-screen mode (or 2447.Dq Li NO 2448for daemon mode). 2449.It Va isdn_trace 2450.Pq Vt bool 2451Set to 2452.Dq Li NO 2453by default. 2454When set to 2455.Dq Li YES , 2456enables the ISDN protocol trace utility 2457.Xr isdntrace 8 2458at system boot time. 2459.It Va isdn_traceflags 2460.Pq Vt str 2461Set to 2462.Dq Fl f Pa /var/tmp/isdntrace0 2463by default. 2464Flags for 2465.Xr isdntrace 8 . 2466.\" ----------------------------------------------------- 2467.It Va pcvt_verbose 2468.Pq Vt bool 2469Set to 2470.Dq Li NO 2471by default. 2472When set to 2473.Dq Li YES , 2474verbose messages about the actions done by the start script are displayed. 2475.Em Note : 2476the 2477.Xr pcvt 4 2478driver must be compiled into the kernel before the 2479.Xr pcvt 4 2480related 2481options described here take any effect. 2482.It Va pcvt_keymap 2483.Pq Vt str 2484Set to 2485.Dq Li NO 2486by default. 2487Use this to configure a national keyboard mapping found in the 2488.Pa /usr/share/misc/keycap.pcvt 2489file of keyboard mappings. 2490(See also the manual pages 2491.Xr keycap 5 2492and 2493.Xr keycap 3 2494for usage of 2495.Xr pcvt 4 Ns 's 2496keycap database and the manual page 2497.Xr kcon 1 2498option 2499.Fl m 2500for national keyboard mapping configuration.) 2501.It Va pcvt_keydel 2502.Pq Vt int 2503Set to 2504.Dq Li NO 2505by default. 2506Used to set the keyboard key repeat delay value. 2507Valid values are 2508in the range 0..3 for delay values of 250, 500, 750 and 1000 msec. 2509(See also the 2510.Xr kcon 1 2511manual page.) 2512.It Va pcvt_keyrate 2513.Pq Vt int 2514Set to 2515.Dq Li NO 2516by default. 2517Used to set the keyboard key repetition rate value. 2518Valid values are 2519in the range 0..31 for repetition values of 2..30 characters per second. 2520.It Va pcvt_keyrepeat 2521.Pq Vt bool 2522Set to 2523.Dq Li NO 2524by default. 2525Set to 2526.Dq Li YES 2527to enable automatic keyboard key repeating. 2528.It Va pcvt_force24 2529.Pq Vt bool 2530Set to 2531.Dq Li NO 2532by default. 2533Set to 2534.Dq Li YES 2535to force 2536.Xr pcvt 4 2537to use 24 lines only (in 25 lines mode) for compatibility 2538with the original 2539.Tn VT220 2540terminal. 2541.It Va pcvt_hpext 2542.Pq Vt bool 2543Set to 2544.Dq Li NO 2545by default. 2546Set to 2547.Dq Li YES 2548to enable the display and functionality of function key labels (as found 2549on 2550.Tn Hewlett-Packard 2551terminals such as the 2552.Tn HP2392A 2553and the 2554.Tn HP700/92 2555in 2556.Tn ANSI 2557mode). 2558.It Va pcvt_lines 2559.Pq Vt int 2560Set to 2561.Dq Li NO 2562by default resulting in a value of 25. 2563Used to set the number of lines on the screen. 2564For VGA displays, valid 2565values are 25, 28, 40 and 50 lines. 2566(See also the 2567.Xr scon 1 2568manual page.) 2569.It Va pcvt_blanktime 2570.Pq Vt int 2571Set to 2572.Dq Li NO 2573by default. 2574Used to set the screen saver timeout in seconds for values greater than 2575zero. 2576.It Va pcvt_cursorh 2577.Pq Vt int 2578Set to 2579.Dq Li NO 2580by default. 2581Used to set the cursor top scanline. 2582(See also the 2583.Xr cursor 1 2584manual page.) 2585.It Va pcvt_cursorl 2586.Pq Vt int 2587Set to 2588.Dq Li NO 2589by default. 2590Used to set the cursor bottom scanline. 2591.It Va pcvt_monohigh 2592.Pq Vt bool 2593Set to 2594.Dq Li NO 2595by default. 2596Set to 2597.Dq Li YES 2598to set intensity to high on monochrome monitors. 2599(See also the 2600.Xr scon 1 2601manual page, option 2602.Fl p , 2603for more information on changing VGA palette 2604values.) 2605.It Va harvest_interrupt 2606.Pq Vt bool 2607Set to 2608.Dq Li YES 2609to use hardware interrupts as an entropy source. 2610Refer to 2611.Xr random 4 2612for more information. 2613.It Va harvest_ethernet 2614.Pq Vt bool 2615Set to 2616.Dq Li YES 2617to use LAN traffic as an entropy source. 2618Refer to 2619.Xr random 4 2620for more information. 2621.It Va harvest_p_to_p 2622.Pq Vt bool 2623Set to 2624.Dq Li YES 2625to use serial line traffic as an entropy source. 2626Refer to 2627.Xr random 4 2628for more information. 2629.It Va entropy_dir 2630.Pq Vt str 2631Set to 2632.Dq Li NO 2633to disable caching entropy via 2634.Xr cron 8 . 2635Otherwise set to the directory used to store entropy files in. 2636.It Va entropy_file 2637.Pq Vt str 2638Set to 2639.Dq Li NO 2640to disable caching entropy through reboots. 2641Otherwise set to the filename used to store cached entropy through 2642reboots. 2643This file should be located on the root file system to seed the 2644.Xr random 4 2645device as early as possible in the boot process. 2646.It Va entropy_save_sz 2647.Pq Vt int 2648Size of the entropy cache files saved by 2649.Nm save-entropy 2650periodically. 2651.It Va entropy_save_num 2652.Pq Vt int 2653Number of entropy cache files to save by 2654.Nm save-entropy 2655periodically. 2656.It Va ipsec_enable 2657.Pq Vt bool 2658Set to 2659.Dq Li YES 2660to run 2661.Xr setkey 8 2662on 2663.Va ipsec_file 2664at boot time. 2665.It Va ipsec_file 2666.Pq Vt str 2667Configuration file for 2668.Xr setkey 8 . 2669.It Va dmesg_enable 2670.Pq Vt bool 2671Set to 2672.Dq Li YES 2673to save 2674.Xr dmesg 8 2675to 2676.Pa /var/run/dmesg.boot 2677on boot. 2678.It Va rcshutdown_timeout 2679.Pq Vt int 2680If set, start a watchdog timer in the background which will terminate 2681.Pa rc.shutdown 2682if 2683.Xr shutdown 8 2684has not completed within the specified time (in seconds). 2685.El 2686.Sh FILES 2687.Bl -tag -width ".Pa /etc/defaults/rc.conf" -compact 2688.It Pa /etc/defaults/rc.conf 2689.It Pa /etc/rc.conf 2690.It Pa /etc/rc.conf.local 2691.El 2692.Sh SEE ALSO 2693.Xr catman 1 , 2694.Xr gdb 1 , 2695.Xr info 1 , 2696.Xr kbdcontrol 1 , 2697.Xr makewhatis 8 , 2698.Xr vidcontrol 1 , 2699.Xr ip 4 , 2700.Xr kld 4 , 2701.Xr tcp 4 , 2702.Xr udp 4 , 2703.Xr exports 5 , 2704.Xr motd 5 , 2705.Xr accton 8 , 2706.Xr amd 8 , 2707.Xr apm 8 , 2708.Xr atm 8 , 2709.Xr cron 8 , 2710.Xr dhclient 8 , 2711.Xr ifconfig 8 , 2712.Xr inetd 8 , 2713.Xr isdnd 8 , 2714.Xr isdntrace 8 , 2715.Xr kldxref 8 , 2716.Xr lpd 8 , 2717.Xr mdconfig 8 , 2718.Xr mountd 8 , 2719.Xr moused 8 , 2720.Xr mrouted 8 , 2721.Xr named 8 , 2722.Xr nfsd 8 , 2723.Xr ntpd 8 , 2724.Xr pcnfsd 8 , 2725.Xr quotacheck 8 , 2726.Xr quotaon 8 , 2727.Xr rc 8 , 2728.Xr rc.sendmail 8 , 2729.Xr route 8 , 2730.Xr routed 8 , 2731.Xr rpc.lockd 8 , 2732.Xr rpc.statd 8 , 2733.Xr rpcbind 8 , 2734.Xr rwhod 8 , 2735.Xr savecore 8 , 2736.Xr sshd 8 , 2737.Xr swapon 8 , 2738.Xr sysctl 8 , 2739.Xr syslogd 8 , 2740.Xr timed 8 , 2741.Xr usbd 8 , 2742.Xr vinum 8 , 2743.Xr yp 8 , 2744.Xr ypbind 8 , 2745.Xr ypserv 8 , 2746.Xr ypset 8 2747.Sh HISTORY 2748The 2749.Nm 2750file appeared in 2751.Fx 2.2.2 . 2752.Sh AUTHORS 2753.An Jordan K. Hubbard . 2754