1.\" Copyright (c) 1995 2.\" Jordan K. Hubbard 3.\" 4.\" Redistribution and use in source and binary forms, with or without 5.\" modification, are permitted provided that the following conditions 6.\" are met: 7.\" 1. Redistributions of source code must retain the above copyright 8.\" notice, this list of conditions and the following disclaimer. 9.\" 2. Redistributions in binary form must reproduce the above copyright 10.\" notice, this list of conditions and the following disclaimer in the 11.\" documentation and/or other materials provided with the distribution. 12.\" 13.\" THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND 14.\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 15.\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 16.\" ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR BE LIABLE 17.\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 18.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 19.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 20.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 21.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 22.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 23.\" SUCH DAMAGE. 24.\" 25.\" $FreeBSD: src/share/man/man5/rc.conf.5,v 1.197 2003/07/28 13:56:00 mbr Exp $ 26.\" 27.Dd July 29, 2014 28.Dt RC.CONF 5 29.Os 30.Sh NAME 31.Nm rc.conf 32.Nd system configuration information 33.Sh DESCRIPTION 34The file 35.Nm 36contains descriptive information about the local host name, configuration 37details for any potential network interfaces and which services should be 38started up at system initial boot time. 39In new installations, the 40.Nm 41file is generally initialized by the installer. 42.Pp 43The purpose of 44.Nm 45is not to run commands or perform system startup actions directly. 46Instead, it is included by the various generic startup scripts in 47.Pa /etc 48which conditionalize their 49internal actions according to the settings found there. 50.Pp 51The 52.Pa /etc/defaults/rc.conf 53file specifies the default settings for all the available options, 54the 55.Pa /etc/rc.conf 56file specifies override settings. 57Options need only be specified in 58.Pa /etc/rc.conf 59when the system administrator wishes to override the defaults. 60The file 61.Pa /etc/rc.conf.local 62is used to override settings in 63.Pa /etc/rc.conf 64for historical reasons. 65In addition to 66.Pa /etc/rc.conf.local 67you can also place smaller configuration files for each 68.Xr rc 8 69script in the 70.Pa /etc/rc.conf.d 71directory, which will be included by the 72.Va load_rc_config 73function. 74For jail configurations you could use the file 75.Pa /etc/rc.conf.d/jail 76to store jail specific configuration options. 77Also see the 78.Va rc_conf_files 79variable below. 80.Pp 81The following list provides a name and short description for each 82variable that can be set in the 83.Nm 84file. 85To set a variable of 86.Vt bool 87type, specify either 88.Dq Li YES , 89.Dq Li TRUE , 90.Dq Li ON , 91or 92.Dq Li 1 . 93To unset, specify 94.Dq Li NO , 95.Dq Li FALSE , 96.Dq Li OFF , 97or 98.Dq Li 0 . 99These values are case insensitive. 100The 101.Va _enable 102postfix in the name of a variable for starting a service can be 103omitted (as in 104.Nx ) . 105.Bl -tag -width indent-two 106.It Va rc_debug 107.Pq Vt bool 108If set to 109.Dq Li YES , 110enable output of debug messages from rc scripts. 111This variable can be helpful in diagnosing mistakes when 112editing or integrating new scripts. 113Beware that this produces copious output to the terminal and 114.Xr syslog 3 . 115.It Va rc_info 116.Pq Vt bool 117If set to 118.Dq Li NO , 119disable informational messages from the rc scripts. 120Informational messages are displayed when 121a condition that is not serious enough to warrant a warning or an error occurs. 122.It Va swapfile 123.Pq Vt str 124If set to 125.Dq Li NO , 126no swapfile is installed, otherwise the value is used as the full 127pathname to a file to use for additional swap space. 128The 129.Xr vn 4 130driver is needed for a swapfile and will be loaded if it is not 131already compiled into the kernel or loaded via 132.Xr loader.conf 5 . 133.It Va apm_enable 134.Pq Vt bool 135If set to 136.Dq Li YES , 137enable support for Automatic Power Management with the 138.Xr apm 8 139command. 140.It Va apmd_enable 141.Pq Vt bool 142Run 143.Xr apmd 8 144to handle APM event from userland. 145This also enables support for APM. 146.It Va apmd_flags 147.Pq Vt str 148If 149.Va apmd_enable 150is set to 151.Dq Li YES , 152these are the flags to pass to the 153.Xr apmd 8 154daemon. 155.It Va battd_enable 156Enable 157.Xr battd 8 158to monitor the status of batteries present in the system. 159This also enables support for APM. 160.It Va battd_flags 161.Pq Vt str 162If 163.Va battd_enable 164is set to 165.Dq Li YES , 166these are the flags to pass to the 167.Xr battd 8 168daemon. 169.It Va devd_enable 170.Pq Vt bool 171Run 172.Xr devd 8 173to handle device added, removed or unknown events from the kernel. 174.It Va devd_flags 175.Pq Vt str 176If 177.Va devd_enable 178is set to 179.Dq Li YES , 180these are the flags to pass to the 181.Xr devd 8 182daemon. 183.It Va powerd_enable 184.Pq Vt bool 185Set to 186.Dq Li NO 187by default. 188Setting this to 189.Dq Li YES 190enables 191.Xr powerd 8 , 192a CPU speed control daemon. 193.It Va sensorsd_enable 194.Pq Vt bool 195Set to 196.Dq Li NO 197by default. 198Setting this to 199.Dq Li YES 200enables 201.Xr sensorsd 8 , 202a sensors monitoring and logging daemon. 203.It Va sensorsd_flags 204.Pq Vt str 205Empty by default. 206Additional flags passed to the 207.Xr sensorsd 8 208program. 209.It Va sysvipcd_enable 210.Pq Vt bool 211Set to 212.Dq Li NO 213by default. 214Setting this to 215.Dq Li YES 216enables 217.Xr sysvipcd 8 , 218a sensors monitoring and logging daemon. 219.It Va sysvipcd_flags 220.Pq Vt str 221Empty by default. 222Additional flags passed to the 223.Xr sysvipcd 8 224program. 225.It Va hotplugd_enable 226.Pq Vt bool 227Set to 228.Dq Li NO 229by default. 230Setting this to 231.Dq Li YES 232enables 233.Xr hotplugd 8 , 234a devices hot plugging monitoring daemon. 235.It Va hotplugd_flags 236.Pq Vt str 237Empty by default. 238Additional flags passed to the 239.Xr hotplugd 8 240program. 241.It Va pccard_ifconfig 242.Pq Vt str 243List of arguments to be passed to 244.Xr ifconfig 8 245at boot time or on insertion of the card (e.g.\& 246.Dq Cm inet Li 192.168.1.1 Cm netmask Li 255.255.255.0 247for a fixed address or 248.Dq Li DHCP 249for a DHCP client). 250.It Va pccard_ether_delay 251.Pq Vt str 252Set the delay before starting 253.Xr dhclient 8 254in the 255.Pa /etc/pccard_ether 256script. 257This defaults to 5 seconds to work around a bug in the 258.Xr ed 4 259driver which can lead to system hangs when using some newer 260.Xr ed 4 261based cards. 262.It Va removable_interfaces 263.Pq Vt str 264List of removable network interfaces to be supported by 265.Pa /etc/pccard_ether . 266.It Va local_startup 267.Pq Vt str 268List of directories to search for startup script files. 269.It Va script_name_sep 270.Pq Vt str 271The field separator to use for breaking down the list of startup script files 272into individual filenames. 273The default is a space. 274It is not necessary to change this unless there are startup scripts with names 275containing spaces. 276.It Va hostapd_enable 277.Pq Vt bool 278Set to 279.Dq Li YES 280to start 281.Xr hostapd 8 282at system boot time. 283.It Va hostname 284.Pq Vt str 285The fully qualified domain name (FQDN) of this host on the network. 286This should almost certainly be set to something meaningful, even if 287there is no network connection. 288If 289.Xr dhclient 8 290is used to set the hostname via DHCP, 291this variable should be set to an empty string. 292.It Va ipv6_enable 293.Pq Vt bool 294Enable support for IPv6 networking. 295Note that this requires that the kernel have been compiled with 296.Cd "options INET6" . 297.It Va nisdomainname 298.Pq Vt str 299The NIS domain name of this host, or 300.Dq Li NO 301if NIS is not used. 302.It Va dhclient_program 303.Pq Vt str 304Path to the DHCP client program 305(default 306.Pa /sbin/dhclient ) . 307.It Va dhclient_flags 308.Pq Vt str 309Additional flags to pass to the DHCP client program. 310.It Va pf_enable 311.Pq Vt bool 312Set to 313.Dq Li YES 314to load 315.Xr pf 4 316at startup. 317If the kernel was not built with 318.Cd "device pf" , 319the 320.Pa pf.ko 321kernel module will be loaded. 322See also 323.Va firewall_enable . 324.It Va pf_rules 325.Pq Vt str 326Path to the 327.Xr pf 4 328ruleset definition file. 329.It Va pf_program 330.Pq Vt str 331Path to 332.Xr pfctl 8 . 333.It Va pf_flags 334.Pq Vt str 335If 336.Va pf_enable 337is set to 338.Dq Li YES , 339these are the flags to pass to 340.Xr pfctl 8 341when loading the ruleset. 342.It Va pflog_enable 343.Pq Vt bool 344Set this to 345.Dq Li YES 346to enable 347.Xr pflogd 8 348which logs packets from 349.Xr pf 4 . 350.It Va pflog_logfile 351.Pq Vt str 352If 353.Va pflog_enable 354is set to 355.Dq Li YES 356this specifies the path of the log file. 357.It Va pflog_program 358.Pq Vt str 359Path to 360.Xr pflogd 8 . 361.It Va pflog_flags 362.Pq Vt str 363If 364.Va pflog_enable 365is set to 366.Dq Li YES , 367these are the flags to pass to 368.Xr pflogd 8 . 369.It Va firewall_enable 370.Pq Vt bool 371Set to 372.Dq Li YES 373to load firewall rules at startup. 374If the kernel was not built with 375.Cd "options IPFIREWALL" , 376the 377.Pa ipfw.ko 378kernel module will be loaded. 379See also 380.Va pf_enable . 381.It Va ipv6_firewall_enable 382.Pq Vt bool 383The IPv6 equivalent of 384.Va firewall_enable . 385Set to 386.Dq Li YES 387to load IPv6 firewall rules at startup. 388If the kernel was not built with 389.Cd "options IPV6FIREWALL" , 390the 391.Pa ip6fw.ko 392kernel module will be loaded. 393.It Va firewall_script 394.Pq Vt str 395The full path to the firewall script to run 396(default 397.Pa /etc/rc.firewall ) . 398.It Va ipv6_firewall_script 399.Pq Vt str 400The IPv6 equivalent of 401.Va firewall_script . 402.It Va firewall_type 403.Pq Vt str 404Names the firewall type from the selection in 405.Pa /etc/rc.firewall , 406or the file which contains the local firewall ruleset. 407Valid selections from 408.Pa /etc/rc.firewall 409are: 410.Pp 411.Bl -tag -width ".Li simple" -compact 412.It Li open 413unrestricted IP access 414.It Li closed 415all IP services disabled, except via 416.Dq Li lo0 417.It Li client 418basic protection for a workstation on a LAN 419.It Li simple 420alias for 421.Li client . 422.El 423.Pp 424If a filename is specified, the full path must be given. 425.It Va firewall_trusted_nets 426.Pq Vt str 427List of trusted networks (if 428.Va firewall_type 429is set to 430.Li client ) . 431.It Va firewall_trusted_interfaces 432.Pq Vt str 433List of trusted network interfaces (if 434.Va firewall_type 435is set to 436.Li client ) . 437.It Va firewall_allowed_icmp_types 438.Pq Vt str 439List of allowed ICMP types (if 440.Va firewall_type 441is set to 442.Li client ) . 443.It Va firewall_open_tcp_ports 444.Pq Vt str 445List of TCP ports to open (if 446.Va firewall_type 447is set to 448.Li client ) . 449.It Va firewall_open_udp_ports 450.Pq Vt str 451List of UDP ports to open (if 452.Va firewall_type 453is set to 454.Li client ) . 455.It Va ipv6_firewall_type 456.Pq Vt str 457The IPv6 equivalent of 458.Va firewall_type . 459.It Va firewall_quiet 460.Pq Vt bool 461Set to 462.Dq Li YES 463to disable the display of firewall rules on the console during boot. 464.It Va ipv6_firewall_quiet 465.Pq Vt bool 466The IPv6 equivalent of 467.Va firewall_quiet . 468.It Va firewall_logging 469.Pq Vt bool 470Set to 471.Dq Li YES 472to enable firewall event logging. 473This is equivalent to the 474.Dv IPFIREWALL_VERBOSE 475kernel option. 476.It Va ipv6_firewall_logging 477.Pq Vt bool 478The IPv6 equivalent of 479.Va firewall_logging . 480.It Va firewall_flags 481.Pq Vt str 482Flags passed to 483.Xr ipfw 8 484if 485.Va firewall_type 486specifies a filename. 487.It Va ipv6_firewall_flags 488.Pq Vt str 489The IPv6 equivalent of 490.Va firewall_flags . 491.It Va natd_program 492.Pq Vt str 493Path to 494.Xr natd 8 . 495.It Va natd_enable 496.Pq Vt bool 497Set to 498.Dq Li YES 499to enable 500.Xr natd 8 . 501.Va firewall_enable 502must also be set to 503.Dq Li YES , 504and 505.Xr divert 4 506sockets must be enabled in the kernel. 507.It Va natd_interface 508.Pq Vt str 509This is the name of the public interface on which 510.Xr natd 8 511should run. 512The interface may be given as an interface name or as an IP address. 513.It Va natd_flags 514.Pq Vt str 515Additional 516.Xr natd 8 517flags should be placed here. 518The 519.Fl n 520or 521.Fl a 522flag is automatically added with the above 523.Va natd_interface 524as an argument. 525.It Va tcp_extensions 526.Pq Vt bool 527Set to 528.Dq Li YES 529by default. 530Setting this to 531.Dq Li NO 532disables certain TCP options as described by 533.Rs 534.%T "RFC 1323" 535.Re 536Setting this to 537.Dq Li NO 538might help remedy such problems with connections as randomly hanging 539or other weird behavior. 540Some network devices are known to be broken with respect to these options. 541.It Va log_in_vain 542.Pq Vt int 543Set to 0 by default. 544The 545.Xr sysctl 8 546variables, 547.Va net.inet.tcp.log_in_vain 548and 549.Va net.inet.udp.log_in_vain , 550as described in 551.Xr tcp 4 552and 553.Xr udp 4 , 554are set to the given value. 555.It Va tcp_keepalive 556.Pq Vt bool 557Set to 558.Dq Li YES 559by default. 560Setting to 561.Dq Li NO 562will disable probing idle TCP connections to verify that the 563peer is still up and reachable. 564.It Va tcp_drop_synfin 565.Pq Vt bool 566Set to 567.Dq Li NO 568by default. 569Setting to 570.Dq Li YES 571will cause the kernel to ignore TCP frames that have both 572the SYN and FIN flags set. 573This prevents OS fingerprinting, but may break some legitimate applications. 574This option is only available if the kernel was built with the 575.Dv TCP_DROP_SYNFIN 576option. 577.It Va icmp_drop_redirect 578.Pq Vt bool 579Set to 580.Dq Li NO 581by default. 582Setting to 583.Dq Li YES 584will cause the kernel to ignore ICMP REDIRECT packets. 585Refer to 586.Xr icmp 4 587for more information. 588.It Va icmp_log_redirect 589.Pq Vt bool 590Set to 591.Dq Li NO 592by default. 593Setting to 594.Dq Li YES 595will cause the kernel to log ICMP REDIRECT packets. 596Note that 597the log messages are not rate-limited, so this option should only be used 598for troubleshooting networks. 599Refer to 600.Xr icmp 4 601for more information. 602.It Va icmp_bmcastecho 603.Pq Vt bool 604Set to 605.Dq Li YES 606to respond to broadcast or multicast ICMP ping packets. 607Refer to 608.Xr icmp 4 609for more information. 610.It Va ip_portrange_first 611.Pq Vt int 612If not set to 613.Dq Li NO , 614this is the first port in the default portrange. 615Refer to 616.Xr ip 4 617for more information. 618.It Va ip_portrange_last 619.Pq Vt int 620If not set to 621.Dq Li NO , 622this is the last port in the default portrange. 623Refer to 624.Xr ip 4 625for more information. 626.\" 627.It Va ifconfig_ Ns Aq Ar interface 628.Pq Vt str 629Configuration for 630.Dq interface . 631Typically includes IP address. 632Assuming that the interface in question was 633.Li ed0 , 634it might look something like this: 635.Bd -literal 636ifconfig_ed0="inet 10.0.0.1 netmask 0xffff0000" 637.Ed 638.Pp 639If the 640.Pa /etc/start_if. Ns Aq Ar interface 641file is present, it is read and executed by the 642.Xr sh 1 643interpreter before configuring the interface as specified in the 644.Va ifconfig_ Ns Aq Ar interface 645and 646.Va ifconfig_ Ns Ao Ar interface Ac Ns Va _alias Ns Aq Ar n 647variables. 648.Pp 649It is possible to bring up an interface with DHCP by adding 650.Dq Li DHCP 651to the 652.Va ifconfig_ Ns Aq Ar interface 653variable. 654For instance, to initialize the 655.Li ed0 656device via DHCP, it is possible to use something like: 657.Bd -literal 658ifconfig_ed0="DHCP" 659.Ed 660.Pp 661If a 662.Va vlans_ Ns Aq Ar interface 663variable is set, 664a 665.Xr vlan 4 666interface will be created for each item in the list with the 667.Ar vlandev 668argument set to 669.Ar interface . 670If a vlan interface's name is a number, 671then that number is used as the vlan tag and the new vlan interface is 672named 673.Ar interface . Ns Ar tag . 674Otherwise, 675the vlan tag must be specified via a 676.Va vlan 677parameter in the 678.Va create_args_ Ns Aq Ar interface 679variable. 680.Pp 681To create a vlan device named 682.Li em0.101 683on 684.Li em0 685with the vlan tag 101 and the optional the IPv4 address 192.0.2.1/24: 686.Bd -literal 687vlans_em0="101" 688ifconfig_em0_101="inet 192.0.2.1/24" 689.Ed 690.Pp 691To create a vlan device named 692.Li myvlan 693on 694.Li em0 695with the vlan tag 102: 696.Bd -literal 697vlans_em0="myvlan" 698create_args_myvlan="vlan 102" 699.Ed 700.Pp 701If a 702.Va wlans_ Ns Aq Ar interface 703variable is set, 704an 705.Xr wlan 4 706interface will be created for each item in the list with the 707.Ar wlandev 708argument set to 709.Ar interface . 710Further wlan cloning arguments may be passed to the 711.Xr ifconfig 8 712.Cm create 713command by setting the 714.Va create_args_ Ns Aq Ar interface 715variable. 716One or more 717.Xr wlan 4 718devices must be created for each wireless devices as of 719.Dx 2.5 . 720Debugging flags for 721.Xr wlan 4 722devices as set by 723.Xr wlandebug 8 724may be specified with an 725.Va wlandebug_ Ns Aq Ar interface 726variable. 727The contents of this variable will be passed directly to 728.Xr wlandebug 8 . 729.Pp 730Also, if your interface needs WPA authentication, it is possible to add 731.Dq Li WPA 732to the 733.Va ifconfig_ Ns Aq Ar interface 734variable. 735This will start 736.Xr wpa_supplicant 8 . 737See 738.Xr wpa_supplicant.conf 5 739for configuring authentication information. 740.Pp 741Finally, you can add 742.Xr ifconfig 8 743options in this variable, in addition to the 744.Pa /etc/start_if. Ns Aq Ar interface 745file. 746For instance, to initialize the 747.Li wi0 748device via DHCP, using WPA authentication and 802.11b mode, it is 749possible to use something like: 750.Bd -literal 751wlans_wi0="wlan0" 752ifconfig_wlan0="up DHCP WPA mode 11b" 753.Ed 754.It Va ifconfig_ Ns Ao Ar interface Ac Ns Va _alias Ns Aq Ar n 755.Pq Vt str 756Configuration to establish an additional network address for 757.Dq interface . 758Assuming that the interface in question was 759.Li ed0 , 760it might look something like this: 761.Bd -literal 762ifconfig_ed0_alias0="inet 127.0.0.253 netmask 0xffffffff" 763ifconfig_ed0_alias1="inet 127.0.0.254 netmask 0xffffffff" 764.Ed 765.Pp 766And so on. 767For each 768.Va ifconfig_ Ns Ao Ar interface Ac Ns Va _alias Ns Aq Ar n 769entry that is found, its contents are passed to 770.Xr ifconfig 8 . 771Execution stops at the first unsuccessful access, so if 772something like this is present: 773.Bd -literal 774ifconfig_ed0_alias0="inet 127.0.0.251 netmask 0xffffffff" 775ifconfig_ed0_alias1="inet 127.0.0.252 netmask 0xffffffff" 776ifconfig_ed0_alias2="inet 127.0.0.253 netmask 0xffffffff" 777ifconfig_ed0_alias4="inet 127.0.0.254 netmask 0xffffffff" 778.Ed 779.Pp 780Then note that alias4 would 781.Em not 782be added since the search would stop with the missing alias3 entry. 783.It Va ifconfig_ Ns Ao Ar interface Ac Ns Va _name 784.Pq Vt str 785New name for 786.Dq interface . 787It is possible to rename interface by doing: 788.Bd -literal 789ifconfig_ed0_name="net0" 790ifconfig_net0="inet 10.0.0.1 netmask 0xffff0000" 791.Ed 792.It Va network_interfaces 793.Pq Vt str 794The list of network interfaces to configure on this host, 795or 796.Dq Li auto 797to configure all network interfaces 798(default 799.Dq Li auto ) . 800For example, if the only network devices to be configured are the loopback device 801.Pq Li lo0 802and a NIC using the 803.Xr ed 4 804driver, this could be set to 805.Dq Li "lo0 ed0" . 806An 807.Va ifconfig_ Ns Aq Ar interface 808variable is assumed to exist for each value of 809.Ar interface . 810.It Va ipv6_network_interfaces 811.Pq Vt str 812This is the IPv6 equivalent of 813.Va network_interfaces . 814Instead of setting the ifconfig variables as 815.Va ifconfig_ Ns Aq Ar interface 816they should be set as 817.Va ipv6_ifconfig_ Ns Aq Ar interface . 818Aliases should be set as 819.Va ipv6_ifconfig_ Ns Ao Ar interface Ac Ns Va _alias Ns Aq Ar n . 820Interfaces that do not have a 821.Va ipv6_ifconfig_ Ns Aq Ar interface 822setting will be auto configured by 823.Xr rtsol 8 824if the 825.Va ipv6_gateway_enable 826is set to 827.Dq Li NO . 828Note that the IPv6 networking code does not support the 829.Pa /etc/start_if. Ns Aq Ar interface 830files. 831.It Va ipv6_prefix_ Ns Aq Ar interface 832.Pq Vt str 833Assign prefix to 834.Ar interface , 835prefixlen 64 is used. 836.It Va ipv6_default_interface 837.Pq Vt str 838If not set to 839.Dq Li NO , 840this is the default output interface for scoped addresses. 841Now this works only for IPv6 link local multicast addresses. 842.It Va cloned_interfaces 843.Pq Vt str 844Set to the list of clonable network interfaces to create on this host. 845Entries in 846.Va cloned_interfaces 847are automatically appended to 848.Va network_interfaces 849for configuration. 850.It Va gif_interfaces 851.Pq Vt str 852Set to the list of 853.Xr gif 4 854tunnel interfaces to configure on this host. 855A 856.Va gifconfig_ Ns Aq Ar interface 857variable is assumed to exist for each value of 858.Ar interface . 859The value of this variable is used to configure the link layer of the 860tunnel according to the syntax of the 861.Cm tunnel 862option to 863.Xr ifconfig 8 . 864Additionally, this option ensures that each listed interface is created via the 865.Cm create 866option to 867.Xr ifconfig 8 868before attempting to configure it. 869.It Va sppp_interfaces 870.Pq Vt str 871Set to the list of 872.Xr sppp 4 873interfaces to configure on this host. 874A 875.Va spppconfig_ Ns Aq Ar interface 876variable is assumed to exist for each value of 877.Ar interface . 878Each interface should also be configured by a general 879.Va ifconfig_ Ns Aq Ar interface 880setting. 881Refer to 882.Xr spppcontrol 8 883for more information about available options. 884.It Va ppp_enable 885.Pq Vt bool 886If set to 887.Dq Li YES , 888run the 889.Xr ppp 8 890daemon. 891.It Va ppp_mode 892.Pq Vt str 893Mode in which to run the 894.Xr ppp 8 895daemon. 896Accepted modes are 897.Dq Li auto , 898.Dq Li ddial , 899.Dq Li direct 900and 901.Dq Li dedicated . 902See the manual for a full description. 903.It Va ppp_nat 904.Pq Vt bool 905If set to 906.Dq Li YES , 907enables network address translation. 908Used in conjunction with 909.Va gateway_enable 910allows hosts on private network addresses access to the Internet using 911this host as a network address translating router. 912.It Va ppp_profile 913.Pq Vt str 914The name of the profile to use from 915.Pa /etc/ppp/ppp.conf . 916Also used for per-profile overrides of 917.Va ppp_ Ns Ao Ar profile Ac Ns _unit . 918Where the profile contains any of the characters 919.Dq Li .-/+ 920they are translated to 921.Dq Li _ 922for the purposes of the override variable names. 923.It Va ppp_ Ns Ao Ar profile Ac Ns _unit 924.Pq Vt int 925Set the unit number to be used for this profile. 926See the manual description of 927.Fl unit Ns Ar N 928in 929.Xr ppp 8 930for details. 931.It Va ppp_user 932.Pq Vt str 933The name of the user under which 934.Xr ppp 8 935should be started. 936By default, 937.Xr ppp 8 938is started as 939.Dq Li root . 940.It Va rc_conf_files 941.Pq Vt str 942This option is used to specify a list of files that will override 943the settings in 944.Pa /etc/defaults/rc.conf . 945The files will be read in the order in which they are specified and should 946include the full path to the file. 947By default, the files specified are 948.Pa /etc/rc.conf 949and 950.Pa /etc/rc.conf.local 951.It Va fsck_y_enable 952.Pq Vt bool 953If set to 954.Dq Li YES , 955.Xr fsck 8 956will be run with the 957.Fl y 958flag if the initial preen of the file systems fails. 959.It Va netfs_types 960.Pq Vt str 961List of file system types that are network-based. 962This list should generally not be modified by end users. 963Use 964.Va extra_netfs_types 965instead. 966.It Va extra_netfs_types 967.Pq Vt str 968If set to something other than 969.Dq Li NO 970(the default), this variable extends the list of file system types 971for which automatic mounting at startup by 972.Xr rc 8 973should be delayed until the network is initialized. 974It should contain 975a whitespace-separated list of network file system descriptor pairs, 976each consisting of a file system type as passed to 977.Xr mount 8 978and a human-readable, one-word description, joined with a colon 979.Pq Ql \&: . 980Extending the default list in this way is only necessary 981when third party file system types are used. 982.It Va devfs_config_files 983.Pq Vt str 984This option is used to specify a list of configuration files containing 985.Xr devfs 5 986rules that will be applied by 987.Xr devfsctl 8 988in the order in which they are specified and must include the full path 989to the file. 990.It Va syslogd_enable 991.Pq Vt bool 992If set to 993.Dq Li YES , 994run the 995.Xr syslogd 8 996daemon. 997.It Va syslogd_program 998.Pq Vt str 999Path to 1000.Xr syslogd 8 1001(default 1002.Pa /usr/sbin/syslogd ) . 1003.It Va syslogd_flags 1004.Pq Vt str 1005If 1006.Va syslogd_enable 1007is set to 1008.Dq Li YES , 1009these are the flags to pass to 1010.Xr syslogd 8 . 1011.It Va inetd_enable 1012.Pq Vt bool 1013If set to 1014.Dq Li YES , 1015run the 1016.Xr inetd 8 1017daemon. 1018.It Va inetd_program 1019.Pq Vt str 1020Path to 1021.Xr inetd 8 1022(default 1023.Pa /usr/sbin/inetd ) . 1024.It Va inetd_flags 1025.Pq Vt str 1026If 1027.Va inetd_enable 1028is set to 1029.Dq Li YES , 1030these are the flags to pass to 1031.Xr inetd 8 . 1032.It Va rwhod_enable 1033.Pq Vt bool 1034If set to 1035.Dq Li YES , 1036run the 1037.Xr rwhod 8 1038daemon at boot time. 1039.It Va rwhod_flags 1040.Pq Vt str 1041If 1042.Va rwhod_enable 1043is set to 1044.Dq Li YES , 1045these are the flags to pass to it. 1046.It Va amd_enable 1047.Pq Vt bool 1048If set to 1049.Dq Li YES , 1050run the 1051.Xr amd 8 1052daemon at boot time. 1053.It Va amd_flags 1054.Pq Vt str 1055If 1056.Va amd_enable 1057is set to 1058.Dq Li YES , 1059these are the flags to pass to it. 1060See the 1061.Xr amd 8 1062manpage for more information. 1063.It Va amd_map_program 1064.Pq Vt str 1065If set, the specified program is run to get the list of 1066.Xr amd 8 1067maps. 1068For example, if the 1069.Xr amd 8 1070maps are stored in NIS, one can set this to run 1071.Xr ypcat 1 1072to get a list of 1073.Xr amd 8 1074maps from the 1075.Pa amd.master 1076NIS map. 1077.It Va update_motd 1078.Pq Vt bool 1079If set to 1080.Dq Li YES , 1081.Pa /etc/motd 1082will be updated at boot time to reflect the kernel release being run. 1083If set to 1084.Dq Li NO , 1085.Pa /etc/motd 1086will not be updated. 1087.It Va nfs_client_enable 1088.Pq Vt bool 1089If set to 1090.Dq Li YES , 1091setup NFS client parameters at boot time. 1092.It Va nfs_access_cache 1093.Pq Vt int 1094If 1095.Va nfs_client_enable 1096is set to 1097.Dq Li YES , 1098this can be set to 1099.Dq Li 0 1100to disable NFS ACCESS RPC caching, or to the number of seconds for which 1101NFS ACCESS results should be cached. 1102A value of 2-10 seconds will substantially reduce network traffic for 1103many NFS operations. 1104The default is 5 seconds. 1105Note that the attribute cache holds stat information only. 1106The NFS data cache is independent of the attribute cache and is only 1107invalidated when the client detects that the server has modified the 1108underlying file. 1109This value specifies a maximum timeout. 1110The NFS client will automatically use a shorter timeout for files which 1111have been recently modified. 1112.It Va nfs_neg_cache 1113.Pq Vt int 1114If 1115.Va nfs_client_enable 1116is set to 1117.Dq Li YES , 1118this can be set to 1119.Dq Li 0 1120to disable the caching of NEGATIVE LOOKUPS (lookups of non-existent 1121filenames), or to the number of seconds for which negative lookups should 1122be cached. 1123A value of 2-10 seconds will substantially reduce network 1124traffic for many NFS operations, especially source code builds. 1125The default is 3 seconds. 1126.It Va nfs_server_enable 1127.Pq Vt bool 1128If set to 1129.Dq Li YES , 1130run the NFS server daemons at boot time. 1131.It Va nfs_server_flags 1132.Pq Vt str 1133If 1134.Va nfs_server_enable 1135is set to 1136.Dq Li YES , 1137these are the flags to pass to the 1138.Xr nfsd 8 1139daemon. 1140.It Va mountd_enable 1141.Pq Vt bool 1142If set to 1143.Dq Li YES , 1144and no 1145.Va nfs_server_enable 1146is set, start 1147.Xr mountd 8 , 1148but not 1149.Xr nfsd 8 1150daemon. 1151It is commonly needed to run CFS without real NFS used. 1152.It Va mountd_flags 1153.Pq Vt str 1154If 1155.Va mountd_enable 1156is set to 1157.Dq Li YES , 1158these are the flags to pass to the 1159.Xr mountd 8 1160daemon. 1161.It Va weak_mountd_authentication 1162.Pq Vt bool 1163If set to 1164.Dq Li YES , 1165allow services like PCNFSD to make non-privileged mount requests. 1166.It Va nfs_reserved_port_only 1167.Pq Vt bool 1168If set to 1169.Dq Li YES , 1170provide NFS services only on a secure port. 1171.It Va nfs_bufpackets 1172.Pq Vt int 1173If set to a number, indicates the number of packets worth of 1174socket buffer space to reserve on an NFS client. 1175The kernel default is typically 4. 1176Using a higher number may be useful on gigabit networks to improve performance. 1177The minimum value is 2 and the maximum is 64. 1178.It Va rpc_umntall_enable 1179.Pq Vt bool 1180If set to 1181.Dq Li YES 1182(default) and we are also an NFS client, run 1183.Xr rpc.umntall 8 1184at boot time to clear out old mounts on remote servers. 1185If set to 1186.Dq Li NO 1187then 1188.Xr rpc.umntall 8 1189will not be run at boot time. 1190.It Va rpc_lockd_enable 1191.Pq Vt bool 1192If set to 1193.Dq Li YES 1194and also an NFS server, run 1195.Xr rpc.lockd 8 1196at boot time. 1197.It Va rpc_lockd_flags 1198.Pq Vt str 1199If 1200.Va rpc_lockd_enable 1201is set to 1202.Dq Li YES , 1203these are the flags to pass to 1204.Xr rpc.lockd 8 . 1205.It Va rpc_statd_enable 1206.Pq Vt bool 1207If set to 1208.Dq Li YES 1209and also an NFS server, run 1210.Xr rpc.statd 8 1211at boot time. 1212.It Va rpc_statd_flags 1213.Pq Vt str 1214If 1215.Va rpc_statd_enable 1216is set to 1217.Dq Li YES , 1218these are the flags to pass to 1219.Xr rpc.statd 8 . 1220.It Va rpcbind_program 1221.Pq Vt str 1222Path to program for rpcbind daemon 1223(default 1224.Pa /usr/sbin/rpcbind ) . 1225.It Va rpcbind_enable 1226.Pq Vt bool 1227If set to 1228.Dq Li YES , 1229run 1230.Va rpcbind_program 1231at boot time. 1232.It Va rpcbind_flags 1233.Pq Vt str 1234If 1235.Va rpcbind_enable 1236is set to 1237.Dq Li YES , 1238these are the flags to pass to 1239.Va rpcbind_program . 1240.It Va keyserv_enable 1241.Pq Vt bool 1242If set to 1243.Dq Li YES , 1244run the 1245.Xr keyserv 8 1246daemon on boot for running Secure RPC. 1247.It Va keyserv_flags 1248.Pq Vt str 1249If 1250.Va keyserv_enable 1251is set to 1252.Dq Li YES , 1253these are the flags to pass to 1254.Xr keyserv 8 1255daemon. 1256.It Va pppoed_enable 1257.Pq Vt bool 1258If set to 1259.Dq Li YES , 1260run the 1261.Xr pppoed 8 1262daemon at boot time to provide PPP over Ethernet services. 1263.It Va pppoed_provider 1264.Pq Vt str 1265.Xr pppoed 8 1266listens to requests to this provider and ultimately runs 1267.Xr ppp 8 1268with a 1269.Ar system 1270argument of the same name. 1271.It Va pppoed_flags 1272.Pq Vt str 1273Additional flags to pass to 1274.Xr pppoed 8 . 1275.It Va pppoed_interface 1276.Pq Vt str 1277The network interface to run 1278.Xr pppoed 8 1279on. 1280This is mandatory when 1281.Va pppoed_enable 1282is set to 1283.Dq Li YES . 1284.It Va timed_enable 1285.Pq Vt bool 1286If set to 1287.Dq Li YES , 1288run the 1289.Xr timed 8 1290service at boot time. 1291This command is intended for networks of machines where a consistent 1292.Dq "network time" 1293for all hosts must be established. 1294This is often useful in large NFS environments where time stamps on 1295files are expected to be consistent network-wide. 1296.It Va timed_flags 1297.Pq Vt str 1298If 1299.Va timed_enable 1300is set to 1301.Dq Li YES , 1302these are the flags to pass to the 1303.Xr timed 8 1304service. 1305.It Va dntpd_enable 1306.Pq Vt bool 1307If set to 1308.Dq Li YES , 1309run 1310.Xr dntpd 8 1311at system boot time. 1312.It Va dntpd_program 1313.Pq Vt str 1314Path to 1315.Xr dntpd 8 1316(default 1317.Pa /usr/sbin/dntpd ) . 1318.It Va dntpd_flags 1319.Pq Vt str 1320If 1321.Va dntpd_enable 1322is set to 1323.Dq Li YES , 1324these are the flags to pass to the 1325.Xr dntpd 8 1326daemon. 1327.It Va btconfig_enable 1328.Pq Vt bool 1329If set to 1330.Dq Li YES , 1331configure Bluetooth devices via 1332.Xr btconfig 8 1333at system boot time. 1334.It Va btconfig_devices 1335.Pq Vt str 1336If 1337.Va btconfig_enable 1338is set to 1339.Dq Li YES , 1340this is the list of Bluetooth devices to configure. 1341If 1342.Va btconfig_devices 1343is not specified, all devices known to the system will be configured. 1344A 1345.Va btconfig_ Ns Aq Ar device 1346variable can be set to specify parameters to be passed to 1347.Ar device . 1348.It Va btconfig_args 1349.Pq Vt str 1350If 1351.Va btconfig_enable 1352is set to 1353.Dq Li YES , 1354this is the list of configuration parameters to pass to all Bluetooth 1355devices. 1356.It Va sdpd_enable 1357.Pq Vt bool 1358If set to 1359.Dq Li YES , 1360run the Service Discovery Profile daemon 1361.Xr ( sdpd 8 ) 1362at system boot time. 1363.It Va sdpd_flags 1364.Pq Vt str 1365If 1366.Va sdpd_enable 1367is set to 1368.Dq Li YES , 1369these are the flags to pass to the 1370.Xr sdpd 8 1371daemon. 1372.It Va bthcid_enable 1373.Pq Vt bool 1374If set to 1375.Dq Li YES , 1376run the Bluetooth Link Key/PIN Code Manager daemon 1377.Xr ( bthcid 8 ) 1378at system boot time. 1379.It Va bthcid_flags 1380.Pq Vt str 1381If 1382.Va bthcid_enable 1383is set to 1384.Dq Li YES , 1385these are the flags to pass to the 1386.Xr bthcid 8 1387daemon. 1388.It Va nis_client_enable 1389.Pq Vt bool 1390If set to 1391.Dq Li YES , 1392run the 1393.Xr ypbind 8 1394service at system boot time. 1395.It Va nis_client_flags 1396.Pq Vt str 1397If 1398.Va nis_client_enable 1399is set to 1400.Dq Li YES , 1401these are the flags to pass to the 1402.Xr ypbind 8 1403service. 1404.It Va nis_ypset_enable 1405.Pq Vt bool 1406If set to 1407.Dq Li YES , 1408run the 1409.Xr ypset 8 1410daemon at system boot time. 1411.It Va nis_ypset_flags 1412.Pq Vt str 1413If 1414.Va nis_ypset_enable 1415is set to 1416.Dq Li YES , 1417these are the flags to pass to the 1418.Xr ypset 8 1419daemon. 1420.It Va nis_server_enable 1421.Pq Vt bool 1422If set to 1423.Dq Li YES , 1424run the 1425.Xr ypserv 8 1426daemon at system boot time. 1427.It Va nis_server_flags 1428.Pq Vt str 1429If 1430.Va nis_server_enable 1431is set to 1432.Dq Li YES , 1433these are the flags to pass to the 1434.Xr ypserv 8 1435daemon. 1436.It Va nis_ypxfrd_enable 1437.Pq Vt bool 1438If set to 1439.Dq Li YES , 1440run the 1441.Xr rpc.ypxfrd 8 1442daemon at system boot time. 1443.It Va nis_ypxfrd_flags 1444.Pq Vt str 1445If 1446.Va nis_ypxfrd_enable 1447is set to 1448.Dq Li YES , 1449these are the flags to pass to the 1450.Xr rpc.ypxfrd 8 1451daemon. 1452.It Va nis_yppasswdd_enable 1453.Pq Vt bool 1454If set to 1455.Dq Li YES , 1456run the 1457.Xr rpc.yppasswdd 8 1458daemon at system boot time. 1459.It Va nis_yppasswdd_flags 1460.Pq Vt str 1461If 1462.Va nis_yppasswdd_enable 1463is set to 1464.Dq Li YES , 1465these are the flags to pass to the 1466.Xr rpc.yppasswdd 8 1467daemon. 1468.It Va rpc_ypupdated_enable 1469.Pq Vt bool 1470If set to 1471.Dq Li YES , 1472run the 1473.Nm rpc.ypupdated 1474daemon at system boot time. 1475.It Va defaultrouter 1476.Pq Vt str 1477If not set to 1478.Dq Li NO , 1479create a default route to this host name or IP address 1480(use an IP address if this router is also required to get to the 1481name server!). 1482.It Va ipv6_defaultrouter 1483.Pq Vt str 1484The IPv6 equivalent of 1485.Va defaultrouter . 1486.It Va static_routes 1487.Pq Vt str 1488Set to the list of static routes that are to be added at system boot time. 1489If not set to 1490.Dq Li NO 1491then for each whitespace separated 1492.Ar element 1493in the value, a 1494.Va route_ Ns Aq Ar element 1495variable is assumed to exist whose contents will later be passed to a 1496.Dq Nm route Cm add 1497operation. 1498.It Va change_routes 1499.Pq Vt str 1500Set to the list of static routes that are to be changed at system boot time 1501(such as those added by the kernel). 1502If not set to 1503.Dq Li NO 1504then for each whitespace separated 1505.Ar element 1506in the value, a 1507.Va change_route_ Ns Aq Ar element 1508variable is assumed to exist whose contents will later be passed to a 1509.Dq Nm route Cm change 1510operation. 1511.It Va ipv6_static_routes 1512.Pq Vt str 1513The IPv6 equivalent of 1514.Va static_routes . 1515If not set to 1516.Dq Li NO 1517then for each whitespace separated 1518.Ar element 1519in the value, a 1520.Va ipv6_route_ Ns Aq Ar element 1521variable is assumed to exist whose contents will later be passed to a 1522.Dq Nm route Cm add Fl inet6 1523operation. 1524.It Va gateway_enable 1525.Pq Vt bool 1526If set to 1527.Dq Li YES , 1528configure host to act as an IP router, e.g. to forward packets 1529between interfaces. 1530.It Va ipv6_gateway_enable 1531.Pq Vt bool 1532The IPv6 equivalent of 1533.Va gateway_enable . 1534.It Va router_enable 1535.Pq Vt bool 1536If set to 1537.Dq Li YES , 1538run a routing daemon of some sort, based on the settings of 1539.Va router_program 1540and 1541.Va router_flags . 1542.It Va ipv6_router_enable 1543.Pq Vt bool 1544The IPv6 equivalent of 1545.Va router_enable . 1546If set to 1547.Dq Li YES , 1548run a routing daemon of some sort, based on the settings of 1549.Va ipv6_router_program 1550and 1551.Va ipv6_router_flags . 1552.It Va router_program 1553.Pq Vt str 1554If 1555.Va router_enable 1556is set to 1557.Dq Li YES , 1558this is the name of the routing daemon to use 1559(default 1560.Pa /sbin/routed ) . 1561.It Va ipv6_router_program 1562.Pq Vt str 1563The IPv6 equivalent of 1564.Va router_program 1565(default 1566.Pa /sbin/route6d ) . 1567.It Va router_flags 1568.Pq Vt str 1569If 1570.Va router_enable 1571is set to 1572.Dq Li YES , 1573these are the flags to pass to the routing daemon. 1574.It Va ipv6_router_flags 1575.Pq Vt str 1576The IPv6 equivalent of 1577.Va router_flags . 1578.It Va mrouted_enable 1579.Pq Vt bool 1580If set to 1581.Dq Li YES , 1582run the multicast routing daemon, 1583.Xr mrouted 8 . 1584.It Va mroute6d_enable 1585.Pq Vt bool 1586The IPv6 equivalent of 1587.Va mrouted_enable . 1588If set to 1589.Dq Li YES , 1590run the IPv6 multicast routing daemon. 1591Note that no IPv6 multicast routing daemon is included in the 1592.Dx 1593base system but 1594.Xr pim6dd 8 1595can be installed from the 1596.Xr pkgsrc 7 1597collection. 1598.It Va mrouted_flags 1599.Pq Vt str 1600If 1601.Va mrouted_enable 1602is set to 1603.Dq Li YES , 1604these are the flags to pass to the 1605.Xr mrouted 8 1606daemon. 1607.It Va mroute6d_flags 1608.Pq Vt str 1609The IPv6 equivalent of 1610.Va mrouted_flags . 1611If 1612.Va mroute6d_enable 1613is set to 1614.Dq Li YES , 1615these are the flags passed to the IPv6 multicast routing daemon. 1616.It Va mroute6d_program 1617.Pq Vt str 1618If 1619.Va mroute6d_enable 1620is set to 1621.Dq Li YES , 1622this is the path to the IPv6 multicast routing daemon. 1623.It Va rtadvd_enable 1624.Pq Vt bool 1625If set to 1626.Dq Li YES , 1627run the 1628.Xr rtadvd 8 1629daemon at boot time. 1630.Xr rtadvd 8 1631will only run if 1632.Va ipv6_gateway_enable 1633is also set to 1634.Dq Li YES . 1635The 1636.Xr rtadvd 8 1637utility sends router advertisement packets to the interfaces specified in 1638.Va rtadvd_interfaces . 1639.Xr rtadvd 8 1640and should only be enabled with great care. 1641You may want to fine-tune 1642.Xr rtadvd.conf 5 . 1643.It Va rtadvd_interfaces 1644.Pq Vt str 1645If 1646.Va rtadvd_enable 1647is set to 1648.Dq Li YES 1649this is the list of interfaces to use. 1650.It Va rtsold_enable 1651.Pq Vt bool 1652If set to 1653.Dq Li YES , 1654run the 1655.Xr rtsold 8 1656daemon at boot time. 1657The 1658.Xr rtsold 8 1659daemon is used for automatic discovery of non-link local addresses. 1660.It Va rtsold_flags 1661.Pq Vt str 1662If 1663.Va rtsold_enable 1664is set to 1665.Dq Li YES , 1666these are the flags to pass to the 1667.Xr rtsold 8 1668daemon. 1669.It Va arpproxy_all 1670.Pq Vt bool 1671If set to 1672.Dq Li YES , 1673enable global proxy ARP. 1674.It Va forward_sourceroute 1675.Pq Vt bool 1676If set to 1677.Dq Li YES 1678and 1679.Va gateway_enable 1680is also set to 1681.Dq Li YES , 1682source-routed packets are forwarded. 1683.It Va accept_sourceroute 1684.Pq Vt bool 1685If set to 1686.Dq Li YES , 1687the system will accept source-routed packets directed at it. 1688.It Va rarpd_enable 1689.Pq Vt bool 1690If set to 1691.Dq Li YES , 1692run the 1693.Xr rarpd 8 1694daemon at system boot time. 1695.It Va rarpd_flags 1696.Pq Vt str 1697If 1698.Va rarpd_enable 1699is set to 1700.Dq Li YES , 1701these are the flags to pass to the 1702.Xr rarpd 8 1703daemon. 1704.It Va bootparamd_enable 1705.Pq Vt bool 1706If set to 1707.Dq Li YES , 1708run the 1709.Xr bootparamd 8 1710daemon at system boot time. 1711.It Va bootparamd_flags 1712.Pq Vt str 1713If 1714.Va bootparamd_enable 1715is set to 1716.Dq Li YES , 1717these are the flags to pass to the 1718.Xr bootparamd 8 1719daemon. 1720.It Va stf_interface_ipv4addr 1721.Pq Vt str 1722If not set to 1723.Dq Li NO , 1724this is the local IPv4 address for 6to4 (IPv6 over IPv4 tunneling interface). 1725Specify this entry to enable the 6to4 interface. 1726.It Va stf_interface_ipv4plen 1727.Pq Vt int 1728Prefix length for 6to4 IPv4 addresses, to limit peer address range. 1729An effective value is 0-31. 1730.It Va stf_interface_ipv6_ifid 1731.Pq Vt str 1732IPv6 interface ID for 1733.Xr stf 4 . 1734This can be set to 1735.Dq Li AUTO . 1736.It Va stf_interface_ipv6_slaid 1737.Pq Vt str 1738IPv6 Site Level Aggregator for 1739.Xr stf 4 . 1740.It Va ipv6_faith_prefix 1741.Pq Vt str 1742If not set to 1743.Dq Li NO , 1744this is the faith prefix to enable a FAITH IPv6-to-IPv4 TCP translator. 1745You also need 1746.Xr faithd 8 1747setup. 1748.It Va ipv6_ipv4mapping 1749.Pq Vt bool 1750If set to 1751.Dq Li YES 1752this enables IPv4 mapped IPv6 address communication (like 1753.Li ::ffff:a.b.c.d ) . 1754.It Va keybell 1755.Pq Vt str 1756The keyboard bell sound. 1757Set to 1758.Dq Li normal , 1759.Dq Li visual , 1760.Dq Li off , 1761or 1762.Dq Li NO 1763if the default behavior is desired. 1764For details, refer to the 1765.Xr kbdcontrol 1 1766manpage. 1767.It Va keymap 1768.Pq Vt str 1769If set to 1770.Dq Li NO , 1771no keymap is installed, otherwise the value is used to install 1772the keymap file in 1773.Pa /usr/share/syscons/keymaps/ Ns Ao Ar value Ac Ns Pa .kbd . 1774.It Va keyrate 1775.Pq Vt str 1776The keyboard repeat speed. 1777Set to 1778.Dq Li slow , 1779.Dq Li normal , 1780.Dq Li fast , 1781or 1782.Dq Li NO 1783if the default behavior is desired. 1784.It Va keychange 1785.Pq Vt str 1786If not set to 1787.Dq Li NO , 1788attempt to program the function keys with the value. 1789The value should be a single string of the form: 1790.Dq Ar funkey_number new_value Op Ar funkey_number new_value ... . 1791.It Va cursor 1792.Pq Vt str 1793Can be set to the value of 1794.Dq Li normal , 1795.Dq Li blink , 1796.Dq Li destructive , 1797or 1798.Dq Li NO 1799to set the cursor behavior explicitly or choose the default behavior. 1800.It Va scrnmap 1801.Pq Vt str 1802If set to 1803.Dq Li NO , 1804no screen map is installed, otherwise the value is used to install 1805the screen map file in 1806.Pa /usr/share/syscons/scrnmaps/ Ns Aq Ar value . 1807.It Va font8x16 1808.Pq Vt str 1809If set to 1810.Dq Li NO , 1811the default 8x16 font value is used for screen size requests, otherwise 1812the value in 1813.Pa /usr/share/syscons/fonts/ Ns Aq Ar value 1814is used. 1815.It Va font8x14 1816.Pq Vt str 1817If set to 1818.Dq Li NO , 1819the default 8x14 font value is used for screen size requests, otherwise 1820the value in 1821.Pa /usr/share/syscons/fonts/ Ns Aq Ar value 1822is used. 1823.It Va font8x8 1824.Pq Vt str 1825If set to 1826.Dq Li NO , 1827the default 8x8 font value is used for screen size requests, otherwise 1828the value in 1829.Pa /usr/share/syscons/fonts/ Ns Aq Ar value 1830is used. 1831.It Va blanktime 1832.Pq Vt int 1833If set to 1834.Dq Li NO , 1835the default screen blanking interval is used, otherwise it is set to 1836.Ar value 1837seconds. 1838.It Va saver 1839.Pq Vt str 1840If not set to 1841.Dq Li NO , 1842this is the actual screen saver to use 1843.Li ( blank , snake , daemon , 1844etc). 1845.It Va moused_enable 1846.Pq Vt str 1847If set to 1848.Dq Li YES , 1849the 1850.Xr moused 8 1851daemon is started for doing cut/paste selection on the console. 1852.It Va moused_type 1853.Pq Vt str 1854This is the protocol type of the mouse connected to this host. 1855This variable must be set if 1856.Va moused_enable 1857is set to 1858.Dq Li YES . 1859The 1860.Xr moused 8 1861daemon 1862is able to detect the appropriate mouse type automatically in many cases. 1863Set this variable to 1864.Dq Li auto 1865to let the daemon detect it, or 1866select one from the following list if the automatic detection fails. 1867.Pp 1868If the mouse is attached to the PS/2 mouse port, choose 1869.Dq Li auto 1870or 1871.Dq Li ps/2 , 1872regardless of the brand and model of the mouse. 1873Likewise, if the mouse is attached to the bus mouse port, choose 1874.Dq Li auto 1875or 1876.Dq Li busmouse . 1877All other protocols are for serial mice and will not work with 1878the PS/2 and bus mice. 1879If this is a USB mouse, 1880.Dq Li auto 1881is the only protocol type which will work. 1882.Pp 1883.Bl -tag -width ".Li x10mouseremote" -compact 1884.It Li microsoft 1885Microsoft mouse (serial) 1886.It Li intellimouse 1887Microsoft IntelliMouse (serial) 1888.It Li mousesystems 1889Mouse systems Corp. mouse (serial) 1890.It Li mmseries 1891MM Series mouse (serial) 1892.It Li logitech 1893Logitech mouse (serial) 1894.It Li busmouse 1895A bus mouse 1896.It Li mouseman 1897Logitech MouseMan and TrackMan (serial) 1898.It Li glidepoint 1899ALPS GlidePoint (serial) 1900.It Li thinkingmouse 1901Kensington ThinkingMouse (serial) 1902.It Li ps/2 1903PS/2 mouse 1904.It Li mmhittab 1905MM HitTablet (serial) 1906.It Li x10mouseremote 1907X10 MouseRemote (serial) 1908.It Li versapad 1909Interlink VersaPad (serial) 1910.El 1911.Pp 1912Even if the mouse is not in the above list, it may be compatible 1913with one in the list. 1914Refer to the man page for 1915.Xr moused 8 1916for compatibility information. 1917.Pp 1918It should also be noted that while this is enabled, any 1919other client of the mouse (such as an X server) should access 1920the mouse through the virtual mouse device, 1921.Pa /dev/sysmouse , 1922and configure it as a 1923.Dq Li sysmouse 1924type mouse, since all 1925mouse data is converted to this single canonical format when using 1926.Xr moused 8 . 1927If the client program does not support the 1928.Dq Li sysmouse 1929type, specify the 1930.Dq Li mousesystems 1931type. 1932It is the second preferred type. 1933.It Va moused_port 1934.Pq Vt str 1935If 1936.Va moused_enable 1937is set to 1938.Dq Li YES , 1939this is the actual port the mouse is on. 1940It might be 1941.Pa /dev/cuaa0 1942for a COM1 serial mouse or 1943.Pa /dev/psm0 1944for a PS/2 mouse, for example. 1945.It Va moused_flags 1946.Pq Vt str 1947If 1948.Va moused_type 1949is set, these are the additional flags to pass to the 1950.Xr moused 8 1951daemon. 1952.It Va mousechar_start 1953.Pq Vt int 1954If set to 1955.Dq Li NO , 1956the default mouse cursor character range 1957.Li 0xd0 Ns - Ns Li 0xd3 1958is used, otherwise the range start is set to 1959.Ar value 1960character, see 1961.Xr vidcontrol 1 . 1962Use if the default range is occupied in the language code table. 1963.It Va vidhistory 1964.Pq Vt int 1965Set the size of the history (scrollback) buffer in lines. 1966.It Va allscreens_flags 1967.Pq Vt str 1968If set, 1969.Xr vidcontrol 1 1970is run with these options for each of the virtual terminals 1971.Pq Pa /dev/ttyv* . 1972For example, 1973.Dq Fl m Cm on 1974will enable the mouse pointer on all virtual terminals if 1975.Va moused_enable 1976is set to 1977.Dq Li YES . 1978.It Va allscreens_kbdflags 1979.Pq Vt str 1980If set, 1981.Xr kbdcontrol 1 1982is run with these options for each of the virtual terminals 1983.Pq Pa /dev/ttyv* . 1984For example, 1985.Dq Fl h Li 200 1986will set the 1987.Xr syscons 4 1988scrollback (history) buffer to 200 lines. 1989.It Va cron_enable 1990.Pq Vt bool 1991If set to 1992.Dq Li YES , 1993run the 1994.Xr cron 8 1995daemon at system boot time. 1996.It Va cron_program 1997.Pq Vt str 1998Path to 1999.Xr cron 8 2000(default 2001.Pa /usr/sbin/cron ) . 2002.It Va cron_flags 2003.Pq Vt str 2004If 2005.Va cron_enable 2006is set to 2007.Dq Li YES , 2008these are the flags to pass to 2009.Xr cron 8 . 2010.It Va lpd_program 2011.Pq Vt str 2012Path to 2013.Xr lpd 8 2014(default 2015.Pa /usr/sbin/lpd ) . 2016.It Va lpd_enable 2017.Pq Vt bool 2018If set to 2019.Dq Li YES , 2020run the 2021.Xr lpd 8 2022daemon at system boot time. 2023.It Va lpd_flags 2024.Pq Vt str 2025If 2026.Va lpd_enable 2027is set to 2028.Dq Li YES , 2029these are the flags to pass to the 2030.Xr lpd 8 2031daemon. 2032.It Va nscd_enable 2033.Pq Vt bool 2034If set to 2035.Dq Li YES , 2036run the 2037.Xr nscd 8 2038daemon at system boot time. 2039.It Va mixer_enable 2040.Pq Vt bool 2041If set to 2042.Dq Li YES , 2043preserve 2044.Xr mixer 8 2045settings across reboots. 2046.It Va mta_start_script 2047.Pq Vt str 2048The full path to the script to run to start 2049a mail transfer agent. 2050The default is 2051.Pa /etc/rc.sendmail . 2052The 2053.Va sendmail_* 2054variables which 2055.Pa /etc/rc.sendmail 2056uses are documented in the 2057.Xr rc.sendmail 8 2058man page. 2059.It Va fixbootfile 2060.Pq Vt bool 2061In a 2062.Sq HAMMER ROOT with UFS /boot 2063setup, the boot loader will not set up the 2064.Va kern.bootfile 2065sysctl correctly. 2066The system will attempt to fix this on its own. 2067Set this variable to 2068.Dq Li NO 2069to turn this behavior off. 2070.It Va dumpdev 2071.Pq Vt str 2072Indicates the device (usually a swap partition) to which a crash dump 2073should be written in the event of a system crash. 2074The value of this variable is passed as the argument to 2075.Xr dumpon 8 2076and 2077.Xr savecore 8 . 2078To disable crash dumps, set this variable to 2079.Dq Li NO . 2080.It Va dumpdir 2081.Pq Vt str 2082When the system reboots after a crash and a crash dump is found on the 2083device specified by the 2084.Va dumpdev 2085variable, 2086.Xr savecore 8 2087will save that crash dump and a copy of the kernel to the directory 2088specified by the 2089.Va dumpdir 2090variable. 2091The default value is 2092.Pa /var/crash . 2093Set to 2094.Dq Li NO 2095to not run 2096.Xr savecore 8 2097at boot time when 2098.Va dumpdir 2099is set. 2100.It Va savecore_flags 2101.Pq Vt str 2102If crash dumps are enabled, these are the flags to pass to the 2103.Xr savecore 8 2104utility. 2105.It Va crashinfo_enable 2106.Pq Vt bool 2107Set to 2108.Dq Li YES 2109to turn on automatic crash dump summary generation using the utility 2110specified by the 2111.Va crashinfo_program 2112variable. 2113.It Va crashinfo_program 2114.Pq Vt str 2115Program to run to generate a crash dump summary if the variable 2116.Va crashinfo_enable 2117is set to 2118.Dq Li YES . 2119The default value is 2120.Pa /usr/sbin/crashinfo . 2121.It Va enable_quotas 2122.Pq Vt bool 2123Set to 2124.Dq Li YES 2125to turn on user disk quotas on system startup via the 2126.Xr quotaon 8 2127command. 2128.It Va check_quotas 2129.Pq Vt bool 2130Set to 2131.Dq Li YES 2132to enable user disk quota checking via the 2133.Xr quotacheck 8 2134command. 2135.It Va accounting_enable 2136.Pq Vt bool 2137Set to 2138.Dq Li YES 2139to enable system accounting through the 2140.Xr accton 8 2141facility. 2142.It Va linux_enable 2143.Pq Vt bool 2144Set to 2145.Dq Li YES 2146to enable Linux/ELF binary emulation at system initial boot time. 2147.\" ----- cleanvar_enable setting-------------------------------- 2148.It Va cleanvar_enable 2149.Pq Vt bool 2150Set to 2151.Dq Li YES 2152to have 2153.Pa /var/run , 2154.Pa /var/spool/lock 2155and 2156.Pa /var/spool/uucp/.Temp/* 2157cleaned at startup. 2158.\" ----- clear_tmp_enable setting------------------------------- 2159.It Va clear_tmp_enable 2160.Pq Vt bool 2161Set to 2162.Dq Li YES 2163to have 2164.Pa /tmp 2165cleaned at startup. 2166.\" ----- ldconfig_paths setting -------------------------------- 2167.It Va ldconfig_paths 2168.Pq Vt str 2169Set to the list of shared library paths to use with 2170.Xr ldconfig 8 . 2171NOTE: 2172.Pa /usr/lib 2173will always be added first, so it need not appear in this list. 2174.It Va ldconfig_insecure 2175.Pq Vt bool 2176The 2177.Xr ldconfig 8 2178utility normally refuses to use directories 2179which are writable by anyone except root. 2180Set this variable to 2181.Dq Li YES 2182to disable that security check during system startup. 2183.It Va ldconfig_local_dirs 2184.Pq Vt str 2185Set to the list of local 2186.Xr ldconfig 8 2187directories. 2188The names of all files in the directories listed will be 2189passed as arguments to 2190.Xr ldconfig 8 . 2191.It Va kern_securelevel 2192.Pq Vt int 2193The kernel security level to set at startup. 2194The allowed range of 2195.Ar value 2196ranges from \-1 (the compile time default) to 3 (the most secure). 2197See 2198.Xr init 8 2199for the list of possible security levels and their effect on system operation. 2200.It Va start_vinum 2201.Pq Vt bool 2202Set to 2203.Dq Li YES 2204to start 2205.Xr vinum 8 2206at system boot time. 2207.It Va sshd_enable 2208.Pq Vt bool 2209Set to 2210.Dq Li YES 2211to start 2212.Xr sshd 8 2213at system boot time. 2214.It Va sshd_program 2215.Pq Vt str 2216Path to the SSH server program 2217(default 2218.Pa /usr/sbin/sshd ) . 2219.It Va sshd_flags 2220.Pq Vt str 2221If 2222.Va sshd_enable 2223is set to 2224.Dq Li YES , 2225these are the flags to pass to the 2226.Xr sshd 8 2227daemon. 2228.It Va ftpd_enable 2229.Pq Vt bool 2230Set to 2231.Dq Li YES 2232to start 2233.Xr ftpd 8 2234at system boot time. 2235.It Va ftpd_flags 2236.Pq Vt str 2237If 2238.Va ftpd_enable 2239is set to 2240.Dq Li YES , 2241these are the flags to pass to the 2242.Xr ftpd 8 2243daemon. 2244.It Va usbd_enable 2245.Pq Vt bool 2246If set to 2247.Dq Li YES , 2248run the 2249.Xr usbd 8 2250daemon at boot time. 2251.It Va usbd_flags 2252.Pq Vt str 2253If 2254.Va usbd_enable 2255is set to 2256.Dq Li YES , 2257these are the flags passed to 2258.Xr usbd 8 2259daemon. 2260.It Va watchdogd_enable 2261.Pq Vt bool 2262If set to 2263.Dq Li YES , 2264start the 2265.Xr watchdogd 8 2266daemon at boot time. 2267This requires that the kernel have been compiled with 2268.Cd "options WATCHDOG" . 2269.It Va jail_enable 2270.Pq Vt bool 2271If set to 2272.Dq Li NO , 2273any configured jails will not be started. 2274.It Va jail_list 2275.Pq Vt str 2276A space separated list of names for jails. 2277This is purely a configuration aid to help identify and 2278configure multiple jails. 2279The names specified in this list will be used to 2280identify settings common to an instance of a jail. 2281Assuming that the jail in question was named 2282.Li vjail , 2283you would have the following dependent variables: 2284.Bd -literal 2285jail_vjail_hostname="jail.example.com" 2286jail_vjail_ip="192.168.1.100" 2287jail_vjail_rootdir="/var/jails/vjail/root" 2288.Ed 2289.It Va jail_flags 2290.Pq Vt str 2291Unset by default. 2292When set, use as default value for 2293.Va jail_ Ns Ao Ar jname Ac Ns Va _flags 2294for every jail in 2295.Va jail_list . 2296.It Va jail_interface 2297.Pq Vt str 2298Unset by default. 2299When set, use as default value for 2300.Va jail_ Ns Ao Ar jname Ac Ns Va _interface 2301for every jail in 2302.Va jail_list . 2303.It Va jail_fstab 2304.Pq Vt str 2305Unset by default. 2306When set, use as default value for 2307.Va jail_ Ns Ao Ar jname Ac Ns Va _fstab 2308for every jail in 2309.Va jail_list . 2310.It Va jail_mount_enable 2311.Pq Vt bool 2312Set to 2313.Dq Li NO 2314by default. 2315When set to 2316.Dq Li YES , 2317sets 2318.Va jail_ Ns Ao Ar jname Ac Ns Va _mount_enable 2319to 2320.Dq Li YES 2321by default for every jail in 2322.Va jail_list . 2323.It Va jail_fdesc_enable 2324.Pq Vt bool 2325Set to 2326.Dq Li NO 2327by default. 2328When set to 2329.Dq Li YES , 2330sets 2331.Va jail_ Ns Ao Ar jname Ac Ns Va _fdesc_enable 2332to 2333.Dq Li YES 2334by default for every jail in 2335.Va jail_list . 2336.It Va jail_procfs_enable 2337.Pq Vt bool 2338Set to 2339.Dq Li NO 2340by default. 2341When set to 2342.Dq Li YES , 2343sets 2344.Va jail_ Ns Ao Ar jname Ac Ns Va _procfs_enable 2345to 2346.Dq Li YES 2347by default for every jail in 2348.Va jail_list . 2349.It Va jail_devfs_enable 2350.Pq Vt bool 2351Set to 2352.Dq Li NO 2353by default. 2354When set to 2355.Dq Li YES , 2356sets 2357.Va jail_ Ns Ao Ar jname Ac Ns Va _devfs_enable 2358to 2359.Dq Li YES 2360by default for every jail in 2361.Va jail_list . 2362.It Va jail_exec_start 2363.Pq Vt str 2364Unset by default. 2365When set, use as default value for 2366.Va jail_ Ns Ao Ar jname Ac Ns Va _exec_start 2367for every jail in 2368.Va jail_list . 2369.It Va jail_exec_stop 2370Unset by default. 2371When set, use as default value for 2372.Va jail_ Ns Ao Ar jname Ac Ns Va _exec_stop 2373for every jail in 2374.Va jail_list . 2375.It Va jail_ Ns Ao Ar jname Ac Ns Va _rootdir 2376.Pq Vt str 2377Unset by default. 2378Set to the root directory used by jail 2379.Va jname . 2380.It Va jail_ Ns Ao Ar jname Ac Ns Va _hostname 2381.Pq Vt str 2382Unset by default. 2383Set to the fully qualified domain name (FQDN) assigned to jail 2384.Va jname . 2385.It Va jail_ Ns Ao Ar jname Ac Ns Va _ip 2386.Pq Vt str 2387Unset by default. 2388Set to the IP address assigned to jail 2389.Va jname . 2390.It Va jail_ Ns Ao Ar jname Ac Ns Va _flags 2391.Pq Vt str 2392Set to 2393.Dq Li -l -U root 2394by default. 2395These are flags to pass to 2396.Xr jail 8 . 2397.It Va jail_ Ns Ao Ar jname Ac Ns Va _interface 2398.Pq Vt str 2399Unset by default. 2400When set, sets the interface to use when setting IP address alias. 2401Note that the alias is created at jail startup and removed at jail shutdown. 2402.It Va jail_ Ns Ao Ar jname Ac Ns Va _fstab 2403.Pq Vt str 2404Set to 2405.Pa /etc/fstab. Ns Aq Ar jname 2406by default. 2407This is the file system information file to use for jail 2408.Va jname . 2409.It Va jail_ Ns Ao Ar jname Ac Ns Va _mount_enable 2410.Pq Vt bool 2411Set to 2412.Dq Li NO 2413by default. 2414When set to 2415.Dq Li YES , 2416mount all file systems from 2417.Va jail_ Ns Ao Ar jname Ac Ns Va _fstab 2418at jail startup. 2419.It Va jail_ Ns Ao Ar jname Ac Ns Va _fdesc_enable 2420.Pq Vt bool 2421Set to 2422.Dq Li NO 2423by default. 2424When set to 2425.Dq Li YES , 2426mount the file-descriptor file system inside jail 2427.Ar jname 2428at jail startup. 2429.It Va jail_ Ns Ao Ar jname Ac Ns Va _procfs_enable 2430.Pq Vt bool 2431Set to 2432.Dq Li NO 2433by default. 2434When set to 2435.Dq Li YES , 2436mount the process file system inside jail 2437.Ar jname 2438at jail startup. 2439.It Va jail_ Ns Ao Ar jname Ac Ns Va _devfs_enable 2440.Pq Vt bool 2441Set to 2442.Dq Li NO 2443by default. 2444When set to 2445.Dq Li YES , 2446mount the device file system inside jail 2447.Ar jname 2448at jail startup. 2449.It Va jail_ Ns Ao Ar jname Ac Ns Va _exec_start 2450.Pq Vt str 2451Set to 2452.Dq Li /bin/sh /etc/rc 2453by default. 2454This is the command executed at jail startup. 2455.It Va jail_ Ns Ao Ar jname Ac Ns Va _exec_stop 2456.Pq Vt str 2457Set to 2458.Dq Li /bin/sh /etc/rc.shutdown 2459by default. 2460This is the command executed at jail shutdown. 2461.It Va jail_set_hostname_allow 2462.Pq Vt bool 2463If set to 2464.Dq Li NO , 2465do not allow the root user in a jail to set its hostname. 2466.It Va jail_socket_unixiproute_only 2467.Pq Vt bool 2468If set to 2469.Dq Li YES , 2470do not allow any sockets, 2471besides UNIX/IP/route sockets, 2472to be used within a jail. 2473.It Va jail_sysvipc_allow 2474.Pq Vt bool 2475If set to 2476.Dq Li YES , 2477allow applications within a jail to use System V IPC. 2478.It Va lvm_enable 2479.Pq Vt bool 2480If set to 2481.Dq Li YES 2482LVM volumes will be discovered and configured on boot. 2483.It Va newsyslog_enable 2484.Pq Vt bool 2485If set to 2486.Dq Li YES , 2487run 2488.Xr newsyslog 8 2489before syslogd starts. 2490.It Va newsyslog_flags 2491.Pq Vt str 2492If 2493.Va newsyslog_enable 2494is set to 2495.Dq Li YES , 2496these are the flags passed to 2497.Xr newsyslog 8 . 2498.It Va resident_enable 2499.Pq Vt bool 2500If set to 2501.Dq Li YES , 2502make the dynamic binaries listed in 2503.Pa /etc/resident.conf 2504resident. 2505.It Va varsym_enable 2506.Pq Vt bool 2507If set to 2508.Dq Li YES , 2509process 2510.Pa /etc/varsym.conf 2511to set system-wide variables for variant symlinks. 2512.It Va rand_irqs 2513.Pq Vt str 2514Set either to 2515.Dq Li NO 2516or a whitespace separated list of IRQ numbers which will be used as a source of 2517randomness. 2518.\" ----------------------------------------------------- 2519.It Va entropy_dir 2520.Pq Vt str 2521Set to 2522.Dq Li NO 2523to disable caching entropy via 2524.Xr cron 8 . 2525Otherwise set to the directory used to store entropy files in. 2526.It Va entropy_file 2527.Pq Vt str 2528Set to 2529.Dq Li NO 2530to disable caching entropy through reboots. 2531Otherwise set to the filename used to store cached entropy through reboots. 2532This file should be located on the root file system to seed the 2533.Xr random 4 2534device as early as possible in the boot process. 2535.It Va entropy_save_sz 2536.Pq Vt int 2537Determines the size of the entropy cache files used for entropy cached 2538through reboots and also entropy cached via 2539.Xr cron 8 . 2540The entropy is fed to the system in blocks of 512 bytes, so this number 2541should be large enough to fill as many of the entropy pools in the kernel 2542CSPRNG as possible. 2543By default, it is set to 16384, which should be able to seed all 32 entropy 2544pools in the Fortuna CSPRNG. 2545.It Va ipsec_enable 2546.Pq Vt bool 2547Set to 2548.Dq Li YES 2549to run 2550.Xr setkey 8 2551on 2552.Va ipsec_file 2553at boot time. 2554.It Va ipsec_file 2555.Pq Vt str 2556Configuration file for 2557.Xr setkey 8 . 2558.It Va dmesg_enable 2559.Pq Vt bool 2560Set to 2561.Dq Li YES 2562to save 2563.Xr dmesg 8 2564to 2565.Pa /var/run/dmesg.boot 2566on boot. 2567.It Va rcshutdown_timeout 2568.Pq Vt int 2569If set, start a watchdog timer in the background which will terminate 2570.Pa rc.shutdown 2571if 2572.Xr shutdown 8 2573has not completed within the specified time (in seconds). 2574Notice that in addition to this soft timeout, 2575.Xr init 8 2576also applies a hard timeout for the execution of 2577.Pa rc.shutdown . 2578This is configured via 2579.Xr sysctl 8 2580variable 2581.Va kern.init_shutdown_timeout 2582and defaults to 120 seconds. Setting the value of 2583.Va rcshutdown_timeout 2584to more than 120 seconds will have no effect until the 2585.Xr sysctl 8 2586variable 2587.Va kern.init_shutdown_timeout 2588is also increased. 2589.It Va udevd_enable 2590.Pq Vt bool 2591If set to 2592.Dq Li YES , 2593the udevd daemon will be started on boot. 2594.It Va vfs_quota_enable 2595.Pq Vt bool 2596If set to 2597.Dq Li YES , 2598vfs quota rc.d scripts will be run on boot. 2599.It Va vfs_quota_sync 2600.Pq Vt str 2601List of mount points whose counters are to be synchronized with on-disk 2602usage during system startup. See also 2603.Xr vquota 8 . 2604.It Va vknetd_enable 2605.Pq Vt bool 2606If set to 2607.Dq Li YES , 2608.Xr vknetd 8 2609will be started on boot. 2610.It Va vknetd_flags 2611.Pq Vt bool 2612Additional flags passed to 2613.Xr vknetd 8 . 2614Usually address/cidrbits is specified here. 2615When no flags are passed, default option 2616.Fl U 2617will be used. 2618.It Va vkernel_enable 2619.Pq Vt bool 2620If set to 2621.Dq Li NO , 2622any configured vkernels will not be started. 2623.It Va vkernel_kill_timeout 2624.Pq Vt int 2625This defines the default number of seconds that we will wait for the 2626vkernel to shut down on it's own. If after this time it's still alive, 2627it will be killed with SIGKILL. 2628.It Va vkernel_bin 2629.Pq Vt str 2630Defines the default path to the vkernel binary. 2631.It Va vkernel_list 2632.Pq Vt str 2633A space separated list of names for vkernels. 2634This is purely a configuration aid to help identify and 2635configure multiple vkernels. 2636The names specified in this list will be used to 2637identify settings common to a vkernel instance. 2638Assuming that the vkernel in question was named 2639.Li example , 2640you would have the following dependent variables 2641(filled with reference values in this text): 2642.Bd -literal 2643vkernel_example_bin="/usr/obj/usr/src/sys/VKERNEL/kernel.debug" 2644vkernel_example_memsize="64m" 2645vkernel_example_rootimg_list="/var/vkernel/rootimg.01" 2646vkernel_example_iface_list="auto:bridge0" 2647vkernel_example_logfile="/dev/null" 2648vkernel_example_flags="-U" 2649vkernel_example_kill_timeout="45" 2650.Ed 2651.Pp 2652The last five are optional. 2653They default to an empty string if not set, except for logfile which defaults to 2654.Pa /dev/null 2655if it is not set. 2656.El 2657.Sh FILES 2658.Bl -tag -width ".Pa /etc/start_if. Ns Aq Ar interface" -compact 2659.It Pa /etc/defaults/rc.conf 2660.It Pa /etc/rc.conf 2661.It Pa /etc/rc.conf.local 2662.It Pa /etc/start_if. Ns Aq Ar interface 2663.El 2664.Sh SEE ALSO 2665.Xr catman 1 , 2666.Xr gdb 1 , 2667.Xr info 1 , 2668.Xr kbdcontrol 1 , 2669.Xr varsym 1 , 2670.Xr vidcontrol 1 , 2671.Xr ip 4 , 2672.Xr ipfw 4 , 2673.Xr kld 4 , 2674.Xr pf 4 , 2675.Xr tcp 4 , 2676.Xr udp 4 , 2677.Xr vlan 4 , 2678.Xr exports 5 , 2679.Xr motd 5 , 2680.Xr resident.conf 5 , 2681.Xr varsym.conf 5 , 2682.Xr accton 8 , 2683.Xr amd 8 , 2684.Xr apm 8 , 2685.Xr btconfig 8 , 2686.Xr bthcid 8 , 2687.Xr cron 8 , 2688.Xr devd 8 , 2689.Xr dhclient 8 , 2690.Xr dntpd 8 , 2691.Xr ftpd 8 , 2692.Xr ifconfig 8 , 2693.Xr inetd 8 , 2694.Xr jail 8 , 2695.Xr lpd 8 , 2696.Xr makewhatis 8 , 2697.Xr mixer 8 , 2698.Xr mountd 8 , 2699.Xr moused 8 , 2700.Xr mrouted 8 , 2701.Xr named 8 , 2702.Xr nfsd 8 , 2703.Xr pcnfsd 8 , 2704.Xr pfctl 8 , 2705.Xr pflogd 8 , 2706.Xr quotacheck 8 , 2707.Xr quotaon 8 , 2708.Xr rc 8 , 2709.Xr rc.sendmail 8 , 2710.Xr resident 8 , 2711.Xr rndcontrol 8 , 2712.Xr route 8 , 2713.Xr routed 8 , 2714.Xr rpcbind 8 , 2715.Xr rpc.lockd 8 , 2716.Xr rpc.statd 8 , 2717.Xr rtadvd 8 , 2718.Xr rtsold 8 , 2719.Xr rwhod 8 , 2720.Xr savecore 8 , 2721.Xr sdpd 8 , 2722.Xr sensorsd 8 , 2723.Xr sshd 8 , 2724.Xr swapon 8 , 2725.Xr sysctl 8 , 2726.Xr syslogd 8 , 2727.Xr sysvipcd 8 , 2728.Xr timed 8 , 2729.Xr usbd 8 , 2730.Xr vinum 8 , 2731.Xr yp 8 , 2732.Xr ypbind 8 , 2733.Xr ypserv 8 , 2734.Xr ypset 8 2735.Sh HISTORY 2736The 2737.Nm 2738file appeared in 2739.Fx 2.2.2 . 2740.Sh AUTHORS 2741.An Jordan K. Hubbard . 2742