xref: /netbsd/share/man/man5/rc.conf.5 (revision c4a72b64)
1.\"	$NetBSD: rc.conf.5,v 1.74 2002/12/04 22:59:51 martin Exp $
2.\"
3.\" Copyright (c) 1996 Matthew R. Green
4.\" Copyright (c) 1997 Curt J. Sampson
5.\" Copyright (c) 1997 Michael W. Long
6.\" Copyright (c) 1998-2002 The NetBSD Foundation, Inc.
7.\" All rights reserved.
8.\"
9.\" This document is derived from works contributed to The NetBSD Foundation
10.\" by Luke Mewburn.
11.\"
12.\" Redistribution and use in source and binary forms, with or without
13.\" modification, are permitted provided that the following conditions
14.\" are met:
15.\" 1. Redistributions of source code must retain the above copyright
16.\"    notice, this list of conditions and the following disclaimer.
17.\" 2. Redistributions in binary form must reproduce the above copyright
18.\"    notice, this list of conditions and the following disclaimer in the
19.\"    documentation and/or other materials provided with the distribution.
20.\" 3. The name of the author may not be used to endorse or promote products
21.\"    derived from this software without specific prior written permission.
22.\"
23.\" THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
24.\" IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
25.\" OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
26.\" IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
27.\" INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING,
28.\" BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
29.\" LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED
30.\" AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
31.\" OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
32.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
33.\" SUCH DAMAGE.
34.\"
35.Dd November 25, 2002
36.Dt RC.CONF 5
37.Os
38.\" turn off hyphenation
39.hym 999
40.Sh NAME
41.Nm rc.conf
42.Nd system startup configuration file
43.Sh DESCRIPTION
44The
45.Nm
46file specifies which services are enabled during system startup by
47the startup scripts invoked by
48.Pa /etc/rc
49(see
50.Xr rc 8 ) ,
51and the shutdown scripts invoked by
52.Pa /etc/rc.shutdown .
53The
54.Nm
55file is a shell script that is sourced by
56.Xr rc 8 ,
57meaning that
58.Nm
59must contain valid shell commands.
60.Pp
61Listed below are the standard
62.Nm
63variables that may be set, the values to which each may be set,
64a brief description of what each variable does, and a reference to
65relevant manual pages.
66Third party packages may test for additional variables.
67.Pp
68Most variables are one of two types: enabling variables or flags
69variables.
70Enabling variables, such as
71.Sy inetd ,
72are generally named after the program or the system they enable,
73and are set to
74.Sq YES
75or
76.Sq NO .
77Flags variables, such as
78.Sy inetd_flags
79have the same name with "_flags" appended, and determine what
80arguments are passed to the program if it is enabled.
81.Pp
82If a variable that
83.Xr rc 8
84expects to be set is not set, or the value is not one of the allowed
85values, a warning will be printed.
86.Pp
87By default,
88.Nm
89reads
90.Pa /etc/defaults/rc.conf
91(if it is readable)
92to obtain default values for various variables, and the end-user
93may override these by appending appropriate entries to the end of
94.Nm "" .
95.Pp
96.Xr rc.d 8
97scripts that use
98.Ic load_rc_config
99from
100.Xr rc.subr 8
101also support sourcing an optional end-user provided per-script override
102file
103.Pa /etc/rc.conf.d/ Ns Ar service ,
104(where
105.Ar service
106is the contents of the
107.Sy name
108variable in the
109.Xr rc.d 8
110script).
111This may contain variable overrides, including allowing the end-user
112to override various
113.Ic run_rc_command
114.Xr rc.d 8
115control variables, and thus changing the operation of the script
116without requiring editing of the script.
117.Ss Overall control
118.Bl -tag -width net_interfaces
119.It Sy rc_configured
120.Sq YES
121or
122.Sq NO .
123If not set to
124.Sq YES
125then the system will drop into single-user mode during boot.
126.It Sy rc_fast_and_loose
127If set to a non-empty string,
128each script in
129.Pa /etc/rc.d
130will be executed in the current shell rather than a sub shell.
131This may be faster on slow machines that have an expensive
132.Xr fork 2
133operation.
134.Bl -hang
135.It Em Note :
136Use this at your own risk!
137A rogue command or script may inadvertently prevent boot to multiuser.
138.El
139.It Sy rc_rcorder_flags
140A string.
141Extra arguments to the
142.Xr rcorder 8
143run by
144.Pa /etc/rc .
145.It Sy do_rcshutdown
146.Sq YES
147or
148.Sq NO .
149If set to
150.Sq NO ,
151.Xr shutdown 8
152will not run
153.Pa /etc/rc.shutdown .
154.It Sy rcshutdown_rcorder_flags
155A string.
156Extra arguments to the
157.Xr rcorder 8
158run by
159.Pa /etc/rc.shutdown .
160.It Sy rcshutdown_timeout
161A number.
162If non-blank, use this as the number of seconds to run a watchdog timer for
163which will terminate
164.Pa /etc/rc.shutdown
165if the timer expires before the shutdown script completes.
166.El
167.Ss Basic network configuration
168.Bl -tag -width net_interfaces
169.It Sy hostname
170A string.
171Name of host.
172If empty or not set, then the contents of
173.Pa /etc/myname
174(if it exists) are used.
175.It Sy defaultroute
176A string.
177Default network route.
178If empty or not set, then the contents of
179.Pa /etc/mygate
180(if it exists) are used.
181.It Sy domainname
182A string.
183.Tn NIS
184(YP) domain of host.
185If empty or not set, then the contents of
186.Pa /etc/defaultdomain
187(if it exists) are used.
188.It Sy force_down_interfaces
189A space separated list of interface names.
190This interfaces will be configured down when going from multiuser to singleuser
191mode or on system shutdown.
192.Pp
193This is important for some stateful interfaces, for example PPP over ISDN
194connections that cost money by connection time or PPPoE interfaces which
195have no direct means of noticing
196.Dq disconnect
197events.
198.Pp
199All active
200.Xr pppoe 4
201and
202.Xr ippp 4
203interfaces will be automatically added to this list.
204.El
205.Ss Boottime file-system and swap configuration
206.Bl -tag -width net_interfaces
207.It Sy critical_filesystems_local
208A string.
209File systems mounted very early in the system boot before networking
210services are available.
211Usually
212.Pa /var
213is part of this, because it is needed by services such as
214.Xr dhclient 8
215which may be required to get the network operational.
216.It Sy critical_filesystems_remote
217A string.
218File systems such as
219.Pa /usr
220that may require network services to be available to mount,
221that must be available early in the system boot for general services to use.
222.It Sy no_swap
223.Sq YES
224or
225.Sq NO .
226Set the
227.Sy no_swap
228variable to
229.Sq YES
230if you have configured your system with no swap on purpose.
231If not set to
232.Sq YES ,
233and no swap devices
234are configured, the system will warn you.
235.It Sy swapoff
236.Sq YES
237or
238.Sq NO .
239Remove block-type swap devices at shutdown time.
240Useful if swapping onto RAIDframe devices.
241.El
242.Ss One-time actions to perform or programs to run on boot-up
243.Bl -tag -width net_interfaces
244.It Sy lkm
245.Sq YES
246or
247.Sq NO .
248Runs
249.Pa /etc/rc.lkm .
250.It Sy savecore
251.Sq YES
252or
253.Sq NO .
254Runs the
255.Xr savecore 8
256utility.
257Passes
258.Sy savecore_flags .
259.It Sy clear_tmp
260.Sq YES
261or
262.Sq NO .
263Clear /tmp after reboot.
264.It Sy update_motd
265.Sq YES
266or
267.Sq NO .
268Updates the
269.Nx
270version string in the
271.Pa /etc/motd
272file to reflect the version of the running kernel.
273See
274.Xr motd 5 .
275.It Sy dmesg
276.Sq YES
277or
278.Sq NO .
279Create
280.Pa /var/run/dmesg.boot
281from the output of
282.Xr dmesg 8 .
283Passes
284.Sy dmesg_flags .
285.It Sy accounting
286.Sq YES
287or
288.Sq NO .
289Enables process accounting with
290.Xr accton 8 .
291Requires
292.Pa /var/account/acct
293to exist.
294.It Sy newsyslog
295.Sq YES
296or
297.Sq NO .
298Run
299.Nm newsyslog
300to trim logfiles before syslogd starts.
301Intended for laptop users.
302Passes
303.Sy newsyslog_flags .
304.It Sy tpctl
305.Sq YES
306or
307.Sq NO .
308Run
309.Xr tpctl 8
310to calibrate touch panel device.
311Passes
312.Sy tpctl_flags .
313.El
314.Ss System security setting
315.Bl -tag -width net_interfaces
316.It Sy securelevel
317A number.
318The system securelevel is set to the specified value early
319in the boot process, before any external logins, or other programs
320that run users job, are started.
321If set to nothing, the default action is taken, as described in
322.Xr init 8 ,
323which contains definitive information about the system securelevel.
324Note that setting
325.Sy securelevel
326to 0 in
327.Nm
328will actually result in the system booting with securelevel set to 1, as
329.Xr init 8
330will raise the level when
331.Xr rc 8
332completes.
333.El
334.Ss Networking startup
335.Bl -tag -width net_interfaces
336.It Sy ipfilter
337.Sq YES
338or
339.Sq NO .
340Runs
341.Xr ipf 8
342to load in packet filter specifications from
343.Pa /etc/ipf.conf
344at network boot time, before any interfaces are configured.
345See
346.Xr ipf.conf 5 .
347.It Sy ipnat
348.Sq YES
349or
350.Sq NO .
351Runs
352.Xr ipnat 8
353to load in the IP network address translation (NAT) rules from
354.Pa /etc/ipnat.conf
355at network boot time, before any interfaces are configured.
356See
357.Xr ipnat.conf 5 .
358.It Sy ipfs
359.Sq YES
360or
361.Sq NO .
362Runs
363.Xr ipfs 8
364to save and restore information for ipnat and ipfilter state tables.
365The information is stored in
366.Pa /var/db/ipf/ipstate.ipf
367and
368.Pa /var/db/ipf/ipnat.ipf .
369Passes
370.Sy ipfs_flags .
371.It Sy ipsec
372.Sq YES
373or
374.Sq NO .
375Runs
376.Xr setkey 8
377to load in IPsec manual keys and policies from
378.Pa /etc/ipsec.conf
379at network boot time, before any interfaces are configured.
380.It Sy ipmon
381.Sq YES
382or
383.Sq NO .
384Runs
385.Xr ipmon 8
386to read
387.Xr ipf 8
388packet log information and log it to a file or the system log.
389Passes
390.Sy ipmon_flags .
391.It Sy ipmon_flags
392A string.
393Specifies arguments to supply to
394.Xr ipmon 8 .
395Defaults to
396.Dq Li -ns .
397A typical example would be
398.Dq Fl nD Pa /var/log/ipflog
399to have
400.Xr ipmon 8
401log directly to a file bypassing
402.Xr syslogd 8 .
403If the
404.Dq -D
405argument is used, remember to modify
406.Pa /etc/newsyslog.conf
407accordingly; for example:
408.Bd -literal
409/var/log/ipflog  640  10  100  *  Z  /var/run/ipmon.pid
410.Ed
411.It Sy racoon
412.Sq YES
413or
414.Sq NO .
415Runs
416.Xr racoon 8 ,
417the IKE (ISAKMP/Oakley) key management daemon.
418.It Sy auto_ifconfig
419.Sq YES
420or
421.Sq NO .
422Sets the
423.Sy net_interfaces
424variable (see below) to the output of
425.Xr ifconfig 8
426with the
427.Dq Li -l
428flag and suppresses warnings about interfaces in this list that
429do not have an ifconfig file or variable.
430.It Sy net_interfaces
431A string.
432The list of network interfaces to be configured at boot time.
433For each interface "xxN", the system first looks for ifconfig
434parameters in
435.Pa /etc/ifconfig.xxN
436and then in the variable
437.Sy ifconfig_xxN .
438The contents of the file or the variable are handed to ifconfig
439after the interface name.
440If
441.Sy auto_ifconfig
442is set to "NO" and neither the file nor the variable is found,
443a warning is printed.
444Refer to
445.Xr ifconfig.if 5
446for more details on
447.Pa /etc/ifconfig.xxN .
448.It Sy ifaliases_*
449A string.
450List of
451.Sq Em "address netmask"
452pairs to configure additional network addresses for the given
453configured interface
454.Dq *
455(e.g.
456.Sy ifaliases_le0 ) .
457If
458.Em netmask
459is
460.Dq - ,
461then use the default netmask for the interface.
462.Pp
463.Sy ifaliases_*
464covers limited cases only and considered unrecommended.
465We recommend using
466.Pa /etc/ifconfig.xxN
467with multiple lines instead.
468.It Sy flushroutes
469.Sq YES
470or
471.Sq NO .
472Flushes the route table on networking startup.
473Useful when coming up to multiuser mode after going down to
474single-user mode.
475.It Sy dhclient
476.Sq YES
477or
478.Sq NO .
479Set to
480.Sq YES
481to configure some or all network interfaces using
482the DHCP client.
483If you set
484.Sy dhclient
485to
486.Sq YES ,
487you must either have
488.Pa /var
489in
490.Sy critical_filesystems_local ,
491as part of
492.Pa / ,
493or direct the DHCP client to store the leases file on the root
494file system by modifying the
495.Sy dhclient_flags
496variable.
497You must not provide ifconfig information or ifaliases
498information for any interface that is to be configured using the DHCP client.
499Interface aliases can be set up in the DHCP client configuration
500file if needed - see
501.Xr dhclient.conf 5
502for details.
503.Pp
504Passes
505.Sy dhclient_flags
506to the DHCP client.
507See
508.Xr dhclient 8
509for complete documentation.
510If you wish to configure all broadcast
511network interfaces using the DHCP client, you can leave this blank.
512To configure only specific interfaces, name the interfaces to be configured
513on the command line.
514.Pp
515If you must run the DHCP client before mounting critical file systems,
516then you should specify an alternate location for the DHCP client's lease
517file in the
518.Sy dhclient_flags
519variable - for example, "-lf /tmp/dhclient.leases".
520.It Sy ntpdate
521.Sq YES
522or
523.Sq NO .
524Runs
525.Xr ntpdate 8
526to set the system time from one of the hosts in
527.Sy ntpdate_hosts .
528If
529.Sy ntpdate_hosts
530is empty, it will attempt to find a list of hosts in
531.Pa /etc/ntp.conf .
532Passes
533.Sy ntpdate_flags .
534.It Sy ppp_peers
535A string.
536If
537.Sy ppp_peers
538is not empty, then
539.Pa /etc/rc.d/ppp
540will check each word in
541.Sy ppp_peers
542for a corresponding ppp configuration file in
543.Pa /etc/ppp/peers
544and will call
545.Xr pppd 8
546with the
547.Dq call Sy peer
548option.
549.It Sy ip6mode
550A string.
551An IPv6 node can be a router
552.Pq nodes that forward packet for others
553or a host
554.Pq nodes that do not forward .
555A host can be autoconfigured
556based on the information advertised by adjacent IPv6 routers.
557By setting
558.Sy ip6mode
559to
560.Dq Li router ,
561.Dq Li host ,
562or
563.Dq Li autohost ,
564you can configure your node as a router,
565a non-autoconfigured host, or an autoconfigured host.
566Invalid values will be ignored, and the node will be configured as
567a non-autoconfigured host.
568You may want to check
569.Sy rtsol
570and
571.Sy rtsold
572as well, if you set the variable to
573.Dq Li autohost .
574.It Sy ip6sitelocal
575.Sq YES
576or
577.Sq NO .
578If you intend to use IPv6 site-local addresses in your site, set it to
579.Sq YES .
580Otherwise, reject routes will get installed on boot to avoid misconfiguration
581relating to site-local addresses.
582.It Sy rtsol
583.Sq YES
584or
585.Sq NO .
586Run
587.Xr rtsol 8 ,
588router solicitation command for IPv6 hosts.
589On nomadic hosts like notebook computers, you may want to enable
590.Sy rtsold
591as well.
592Passes
593.Sy rtsol_flags .
594This is only for autoconfigured IPv6 hosts, so set
595.Sy ip6mode
596to
597.Dq Li autohost
598if you use it.
599.It Sy ifwatchd
600.Sq YES
601or
602.Sq NO .
603Monitor dynamic interfaces and perform actions upon address changes.
604Passes
605.Sy ifwatchd_flags .
606.It Sy altq
607.Sq YES
608or
609.Sq NO .
610ALTQ configuration/monitoring daemon.
611Passes
612.Sy altqd_flags .
613.El
614.Ss Daemons required by other daemons
615.Bl -tag -width net_interfaces
616.It Sy inetd
617.Sq YES
618or
619.Sq NO .
620Runs the
621.Xr inetd 8
622daemon to start network server processes (as listed in
623.Pa /etc/inetd.conf )
624as necessary.
625Passes
626.Sy inetd_flags .
627The
628.Dq Li -l
629flag turns on libwrap connection logging.
630.It Sy rpcbind
631.Sq YES
632or
633.Sq NO .
634The
635.Xr rpcbind 8
636daemon is required for any
637.Xr rpc 3
638services.
639These include NFS,
640.Tn NIS ,
641.Xr bootparamd 8 ,
642.Xr rstatd 8 ,
643.Xr rusersd 8 ,
644and
645.Xr rwalld 8 .
646Passes
647.Sy rpcbind_flags .
648.El
649.Ss Commonly used daemons
650.Bl -tag -width net_interfaces
651.It Sy syslogd
652.Sq YES
653or
654.Sq NO .
655Runs
656.Xr syslogd 8
657and passes
658.Sy syslogd_flags .
659.It Sy cron
660.Sq YES
661or
662.Sq NO .
663Run
664.Xr cron 8 .
665.It Sy named
666.Sq YES
667or
668.Sq NO .
669Runs
670.Xr named 8
671and passes
672.Sy named_flags .
673.It Sy named_chrootdir
674A string.
675If non-blank and
676.Sy named
677is
678.Sq YES ,
679run
680.Xr named 8
681as the unprivileged user and group
682.Sq named ,
683.Xr chroot 2 Ns ed
684to
685.Sy named_chrootdir .
686.Pa Sy named_chrootdir Ns /var/run/log
687will be added to the list of log sockets that
688.Xr syslogd 8
689listens to.
690.It Sy timed
691.Sq YES
692or
693.Sq NO .
694Runs
695.Xr timed 8
696and passes
697.Sy timed_flags .
698The
699.Dq Li -M
700option allows
701.Xr timed 8
702to be a master time source as well as a slave.
703If you are also running
704.Xr ntpd 8 ,
705only one machine running both should have the
706.Dq Li -M
707flag given to
708.Xr timed 8 .
709.It Sy ntpd
710.Sq YES
711or
712.Sq NO .
713Runs
714.Xr ntpd 8
715and passes
716.Sy ntpd_flags .
717.It Sy ntpd_chrootdir
718A string.
719If non-blank and
720.Sy ntpd
721is
722.Sq YES ,
723run
724.Xr ntpd 8
725as the unprivileged user and group
726.Sq ntpd ,
727.Xr chroot 2 Ns ed
728to
729.Sy ntpd_chrootdir .
730.Pa Sy ntpd_chrootdir Ns Pa /var/run/log
731will be added to the list of log sockets that
732.Xr syslogd 8
733listens to.
734This option requires that the kernel has
735.Dl pseudo-device clockctl
736compiled in, and that
737.Pa /dev/clockctl
738is present.
739.It Sy sendmail
740.Sq YES
741or
742.Sq NO .
743Runs
744.Xr sendmail 8
745and passes
746.Sy sendmail_flags .
747.It Sy postfix
748.Sq YES
749or
750.Sq NO .
751Starts
752.Xr postfix 1
753mail system.
754.It Sy lpd
755.Sq YES
756or
757.Sq NO .
758Runs
759.Xr lpd 8
760and passes
761.Sy lpd_flags .
762The
763.Dq Li -l
764flag will turn on extra logging.
765.It Sy sshd
766.Sq YES
767or
768.Sq NO .
769Runs
770.Xr sshd 8
771and passes
772.Sy sshd_flags .
773.El
774.Ss Routing daemons
775.Bl -tag -width net_interfaces
776.It Sy routed
777.Sq YES
778or
779.Sq NO .
780Runs
781.Xr routed 8 ,
782the RIP routing protocol daemon.
783Passes
784.Sy routed_flags .
785.\" This should be
786.\" .Sq NO
787.\" if
788.\" .Sy gated
789.\" is
790.\" .Sq YES .
791.It Sy mrouted
792.Sq YES
793or
794.Sq NO .
795Runs
796.Xr mrouted 8 ,
797the DVMRP multicast routing protocol daemon.
798Passes
799.Sy mrouted_flags .
800.It Sy route6d
801.Sq YES
802or
803.Sq NO .
804Runs
805.Xr route6d 8 ,
806the RIPng routing protocol daemon for IPv6.
807Passes
808.Sy route6d_flags .
809.It Sy rtsold
810.Sq YES
811or
812.Sq NO .
813Runs
814.Xr rtsold 8 ,
815the IPv6 router solicitation daemon.
816.Xr rtsold 8
817periodically transmits router solicitation packets
818to find IPv6 routers on the network.
819This configuration is mainly for nomadic hosts like notebook computers.
820Stationary hosts should work fine with just
821.Sy rtsol .
822Passes
823.Sy rtsold_flags .
824This is only for autoconfigured IPv6 hosts, so set
825.Sy ip6mode
826to
827.Dq Li autohost
828if you use it.
829.El
830.Ss Daemons used to boot other hosts over a network
831.Bl -tag -width net_interfaces
832.It Sy rarpd
833.Sq YES
834or
835.Sq NO .
836Runs
837.Xr rarpd 8 ,
838the reverse ARP daemon, often used to boot
839.Nx
840and Sun workstations.
841Passes
842.Sy rarpd_flags .
843.It Sy bootparamd
844.Sq YES
845or
846.Sq NO .
847Runs
848.Xr bootparamd 8 ,
849the boot parameter server, with
850.Sy bootparamd_flags
851as options.
852Used to boot
853.Nx
854and
855.Tn "SunOS 4.x"
856systems.
857.It Sy dhcpd
858.Sq YES
859or
860.Sq NO .
861Runs
862.Xr dhcpd 8 ,
863the Dynamic Host Configuration Protocol (DHCP) daemon,
864for assigning IP addresses to hosts and passing boot information.
865Passes
866.Sy dhcpd_flags .
867.It Sy dhcrelay
868.Sq YES
869or
870.Sq NO .
871Runs
872.Xr dhcrelay 8 .
873Passes
874.Sy dhcrelay_flags .
875.It Sy rbootd
876.Sq YES
877or
878.Sq NO .
879Runs
880.Xr rbootd 8 ,
881the
882.Tn HP
883boot protocol daemon; used for booting
884.Tn HP
885workstations.
886Passes
887.Sy rbootd_flags .
888.It Sy mopd
889.Sq YES
890or
891.Sq NO .
892Runs
893.Xr mopd 8 ,
894the
895.Tn DEC
896.Tn MOP
897protocol daemon; used for booting
898.Tn VAX
899and other
900.Tn DEC
901machines.
902Passes
903.Sy mopd_flags .
904.It Sy ndbootd
905.Sq YES
906or
907.Sq NO .
908Runs
909.Xr ndbootd 8 ,
910the Sun Network Disk (ND) Protocol server.
911Passes
912.Sy ndbootd_flags .
913.It Sy rtadvd
914.Sq YES
915or
916.Sq NO .
917Runs
918.Xr rtadvd 8 ,
919the IPv6 router advertisement daemon, which is used to advertise
920information about the subnet to IPv6 end hosts.
921Passes
922.Sy rtadvd_flags .
923This is only for IPv6 routers, so set
924.Sy ip6mode
925to
926.Dq Li router
927if you use it.
928.El
929.Ss X Window System daemons
930.Bl -tag -width net_interfaces
931.It Sy xfs
932.Sq YES
933or
934.Sq NO .
935Runs the
936.Xr xfs 1
937X11 font server, which supplies local X font files to X terminals.
938.It Sy xdm
939.Sq YES
940or
941.Sq NO .
942Runs the
943.Xr xdm 1
944X display manager.
945These X daemons are available only with the optional X distribution of
946.Nx .
947.El
948.Ss NIS (YP) daemons
949.Bl -tag -width net_interfaces
950.It Sy ypbind
951.Sq YES
952or
953.Sq NO .
954Runs
955.Xr ypbind 8 ,
956which lets
957.Tn NIS
958(YP) clients use information from a
959.Tn NIS
960server.
961Passes
962.Sy ypbind_flags .
963.It Sy ypserv
964.Sq YES
965or
966.Sq NO .
967Runs
968.Xr ypserv 8 ,
969the
970.Tn NIS
971(YP) server for distributing information from certain files in
972.Pa /etc .
973Passes
974.Sy ypserv_flags .
975The
976.Dq Li -d
977flag causes it to use DNS for lookups in
978.Pa /etc/hosts
979that fail.
980.It Sy yppasswdd
981.Sq YES
982or
983.Sq NO .
984Runs
985.Xr yppasswdd 8 ,
986which allows remote
987.Tn NIS
988users to update password on master server.
989Passes
990.Sy yppasswdd_flags .
991.El
992.Ss NFS daemons and parameters
993.Bl -tag -width net_interfaces
994.It Sy mountd
995.Sq YES
996or
997.Sq NO .
998Runs
999.Xr mountd 8
1000and passes
1001.Sy mountd_flags .
1002.It Sy nfs_client
1003.Sq YES
1004or
1005.Sq NO .
1006The number of local NFS asynchronous I/O server is now controlled via
1007.Xr sysctl 8 .
1008.It Sy nfs_server
1009.Sq YES
1010or
1011.Sq NO .
1012Sets up a host to be a NFS server by running
1013.Xr nfsd 8
1014and passing
1015.Sy nfsd_flags .
1016.It Sy lockd
1017.Sq YES
1018or
1019.Sq NO .
1020Runs
1021.Xr rpc.lockd 8
1022if
1023.Sy nfs_server
1024and/or
1025.Sy nfs_client
1026are set to
1027.Sq YES .
1028Passes
1029.Sy lockd_flags .
1030.It Sy statd
1031.Sq YES
1032or
1033.Sq NO .
1034Runs
1035.Xr rpc.statd 8 ,
1036a status monitoring daemon used when
1037.Xr rpc.lockd 8
1038is running, if
1039.Sy nfs_server
1040and/or
1041.Sy nfs_client
1042are set to
1043.Sq YES .
1044Passes
1045.Sy statd_flags .
1046.It Sy amd
1047.Sq YES
1048or
1049.Sq NO .
1050Runs
1051.Xr amd 8 ,
1052the automounter daemon, which automatically mounts NFS file systems
1053whenever a file or directory within that file system is accessed.
1054Passes
1055.Sy amd_flags .
1056.It Sy amd_dir
1057A string.
1058The
1059.Xr amd 8
1060mount directory.
1061Used only if
1062.Sy amd
1063is set to
1064.Sq YES .
1065.El
1066.Ss Other daemons
1067.Bl -tag -width net_interfaces
1068.It Sy kdc
1069.Sq YES
1070or
1071.Sq NO .
1072Runs the
1073.Xr kdc 8
1074Kerberos v4 and v5 server.
1075This should be run on Kerberos master and slave servers.
1076.It Sy isdnd
1077.Sq YES
1078or
1079.Sq NO .
1080Runs
1081.Xr isdnd 8 ,
1082the isdn4bsd ISDN connection management daemon.
1083Passes
1084.Sy isdnd_flags .
1085.It Sy isdn_autoupdown
1086.Sq YES
1087or
1088.Sq NO .
1089Set all configured ISDN interfaces to
1090.Dq up .
1091If
1092.Sy isdn_interfaces
1093is not blank, only the listed interfaces will be modified.
1094Used only if
1095.Sy isdnd
1096is set to
1097.Sq YES .
1098.It Sy rwhod
1099.Sq YES
1100or
1101.Sq NO .
1102Runs
1103.Xr rwhod 8
1104to support the
1105.Xr rwho 1
1106and
1107.Xr ruptime 1
1108commands.
1109.El
1110.Ss Hardware daemons
1111.Bl -tag -width net_interfaces
1112.It Sy apmd
1113.Sq YES
1114or
1115.Sq NO .
1116Runs
1117.Xr apmd 8
1118and passes
1119.Sy apmd_flags .
1120.It Sy poffd
1121.Sq YES
1122or
1123.Sq NO .
1124Runs
1125.Xr poffd 8
1126x68k shutdown daemon
1127(only for
1128.Nx Ns /x86k ) .
1129Passes
1130.Sy poffd_flags .
1131.It Sy screenblank
1132.Sq YES
1133or
1134.Sq NO .
1135Runs
1136.Xr screenblank 1
1137and passes
1138.Sy screenblank_flags .
1139.It Sy moused
1140.Sq YES
1141or
1142.Sq NO .
1143Runs
1144.Xr moused 8 ,
1145to pass serial mouse data to the wscons mouse mux.
1146Passes
1147.Sy moused_flags .
1148.It Sy wscons
1149.Sq YES
1150or
1151.Sq NO .
1152Configures the
1153.Xr wscons 4
1154console driver, from the configuration file
1155.Pa /etc/wscons.conf .
1156.It Sy wsmoused
1157.Sq YES
1158or
1159.Sq NO .
1160Runs
1161.Xr wsmoused 8 ,
1162to provide copy and paste text support in wscons displays.
1163Passes
1164.Sy wsmoused_flags .
1165.El
1166.Sh FILES
1167.Bl -tag -width /etc/defaults/rc.conf -compact
1168.It Pa /etc/rc.conf
1169The file
1170.Nm
1171resides in
1172.Pa /etc .
1173.It Pa /etc/defaults/rc.conf
1174Default settings for
1175.Nm "" ,
1176sourced by
1177.Nm
1178before the end-user configuration section.
1179.It Pa /etc/rc.conf.d/ Ns Ar foo
1180.Ar foo Ns No -specific
1181.Nm
1182overrides.
1183.El
1184.Sh SEE ALSO
1185.Xr ifconfig.if 5 ,
1186.Xr boot 8 ,
1187.Xr rc 8 ,
1188.Xr rc.subr 8 ,
1189.Xr sysctl 8
1190.Sh HISTORY
1191The
1192.Nm
1193file appeared in
1194.Nx 1.3 .
1195