2000-06-23 01:18:31 +00:00
|
|
|
.\"-
|
|
|
|
.\" Copyright (c) 2000 Brian Somers <brian@Awfulhak.org>
|
|
|
|
.\" All rights reserved.
|
|
|
|
.\"
|
|
|
|
.\" Redistribution and use in source and binary forms, with or without
|
|
|
|
.\" modification, are permitted provided that the following conditions
|
|
|
|
.\" are met:
|
|
|
|
.\" 1. Redistributions of source code must retain the above copyright
|
|
|
|
.\" notice, this list of conditions and the following disclaimer.
|
|
|
|
.\" 2. Redistributions in binary form must reproduce the above copyright
|
|
|
|
.\" notice, this list of conditions and the following disclaimer in the
|
|
|
|
.\" documentation and/or other materials provided with the distribution.
|
|
|
|
.\"
|
|
|
|
.\" THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
|
|
|
|
.\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
|
|
|
.\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
|
|
|
|
.\" ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
|
|
|
|
.\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
|
|
|
|
.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
|
|
|
|
.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
|
|
|
|
.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
|
|
|
|
.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
|
|
|
|
.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
|
|
|
|
.\" SUCH DAMAGE.
|
|
|
|
.\"
|
|
|
|
.\" $FreeBSD$
|
|
|
|
.\"
|
|
|
|
.Dd June 22, 2000
|
|
|
|
.Dt PERIODIC.CONF 5
|
2001-07-10 15:31:11 +00:00
|
|
|
.Os
|
2000-06-23 01:18:31 +00:00
|
|
|
.Sh NAME
|
|
|
|
.Nm periodic.conf
|
2001-04-18 15:54:10 +00:00
|
|
|
.Nd periodic job configuration information
|
2000-06-23 01:18:31 +00:00
|
|
|
.Sh DESCRIPTION
|
|
|
|
The file
|
2000-11-20 18:41:33 +00:00
|
|
|
.Nm
|
2002-01-21 10:28:18 +00:00
|
|
|
contains a description of how daily, weekly and monthly system maintenance
|
2000-06-23 01:18:31 +00:00
|
|
|
jobs should run.
|
|
|
|
It resides in the
|
|
|
|
.Pa /etc/defaults
|
|
|
|
directory and parts may be overridden by a file of the same name in
|
|
|
|
.Pa /etc ,
|
|
|
|
which itself may be overridden by the
|
|
|
|
.Pa /etc/periodic.conf.local
|
|
|
|
file.
|
|
|
|
.Pp
|
|
|
|
.Nm
|
|
|
|
is actually sourced as a shell script from each of the periodic scripts
|
|
|
|
and is intended to simply provide default configuration variables.
|
|
|
|
.Pp
|
2000-09-14 17:19:15 +00:00
|
|
|
The following variables are used by
|
|
|
|
.Xr periodic 8
|
|
|
|
itself:
|
2000-06-23 01:18:31 +00:00
|
|
|
.Bl -tag -offset 4n -width 2n
|
2001-04-29 03:45:04 +00:00
|
|
|
.It Va local_periodic
|
|
|
|
.Pq Vt str
|
|
|
|
List of directories to search for periodic scripts.
|
2000-09-14 17:19:15 +00:00
|
|
|
This list is always prefixed with
|
|
|
|
.Pa /etc/periodic ,
|
|
|
|
and is only used when an argument to
|
|
|
|
.Xr periodic 8
|
|
|
|
is not an absolute directory name.
|
2001-04-29 03:45:04 +00:00
|
|
|
.It Va dir Ns No _output
|
|
|
|
.Pq Vt path No or Vt list
|
2002-01-21 10:28:18 +00:00
|
|
|
What to do with the output of the scripts executed from
|
2000-09-14 17:19:15 +00:00
|
|
|
the directory
|
|
|
|
.Ar dir .
|
|
|
|
If this variable is set to an absolute path name, output is logged to
|
2001-02-06 10:39:38 +00:00
|
|
|
that file, otherwise it is taken as one or more space separated email
|
2000-09-14 17:19:15 +00:00
|
|
|
addresses and mailed to those users.
|
2000-09-19 22:15:00 +00:00
|
|
|
If this variable is not set or is empty, output is sent to standard output.
|
2000-09-14 17:19:15 +00:00
|
|
|
.Pp
|
|
|
|
For an unattended machine, suitable values for
|
2001-04-29 03:45:04 +00:00
|
|
|
.Va daily_output ,
|
|
|
|
.Va weekly_output ,
|
2000-09-14 17:19:15 +00:00
|
|
|
and
|
2001-04-29 03:45:04 +00:00
|
|
|
.Va monthly_output
|
2000-09-14 17:19:15 +00:00
|
|
|
might be
|
|
|
|
.Dq /var/log/daily.log ,
|
|
|
|
.Dq /var/log/weekly.log ,
|
|
|
|
and
|
|
|
|
.Dq /var/log/monthly.log
|
|
|
|
respectively, as
|
|
|
|
.Xr newsyslog 8
|
|
|
|
will rotate these files (if they exists) at the appropriate times.
|
2001-04-29 03:45:04 +00:00
|
|
|
.It Va dir Ns No _show_success
|
|
|
|
.It Va dir Ns No _show_info
|
|
|
|
.It Va dir Ns No _show_badconfig
|
|
|
|
.Pq Vt bool
|
|
|
|
These variables control whether
|
2000-09-14 17:19:15 +00:00
|
|
|
.Xr periodic 8
|
2002-01-21 10:28:18 +00:00
|
|
|
will mask the output of the executed scripts based on their return code
|
2000-09-14 17:19:15 +00:00
|
|
|
(where
|
|
|
|
.Ar dir
|
|
|
|
is the base directory name in which each script resides).
|
|
|
|
If the return code of a script is
|
|
|
|
.Sq 0
|
|
|
|
and
|
2001-04-29 03:45:04 +00:00
|
|
|
.Va dir Ns No _show_success
|
|
|
|
is set to
|
2000-09-14 17:19:15 +00:00
|
|
|
.Dq NO ,
|
|
|
|
.Xr periodic 8
|
|
|
|
will mask the script's output.
|
|
|
|
If the return code of a script is
|
|
|
|
.Sq 1
|
|
|
|
and
|
2001-04-29 03:45:04 +00:00
|
|
|
.Va dir Ns No _show_info
|
|
|
|
is set to
|
2000-09-14 17:19:15 +00:00
|
|
|
.Dq NO ,
|
|
|
|
.Xr periodic 8
|
|
|
|
will mask the script's output.
|
|
|
|
If the return code of a script is
|
|
|
|
.Sq 2
|
|
|
|
and
|
2001-04-29 03:45:04 +00:00
|
|
|
.Va dir Ns No _show_badconfig
|
|
|
|
is set to
|
2000-09-14 17:19:15 +00:00
|
|
|
.Dq NO ,
|
|
|
|
.Xr periodic 8
|
|
|
|
will mask the script's output.
|
|
|
|
If these variables are set to neither
|
|
|
|
.Dq YES
|
|
|
|
nor
|
|
|
|
.Dq NO ,
|
2001-11-27 11:33:32 +00:00
|
|
|
they default to
|
2000-09-14 17:19:15 +00:00
|
|
|
.Dq YES ,
|
|
|
|
.Dq YES
|
|
|
|
and
|
|
|
|
.Dq NO
|
|
|
|
respectively.
|
|
|
|
.Pp
|
|
|
|
Refer to the
|
|
|
|
.Xr periodic 8
|
|
|
|
man page for how script return codes are interpreted.
|
2000-06-23 01:18:31 +00:00
|
|
|
.El
|
|
|
|
.Pp
|
|
|
|
The following variables are used by the standard scripts that reside in
|
|
|
|
.Pa /etc/periodic/daily :
|
|
|
|
.Bl -tag -offset 4n -width 2n
|
2001-04-29 03:45:04 +00:00
|
|
|
.It Va daily_clean_disks_enable
|
|
|
|
.Pq Vt bool
|
|
|
|
Set to
|
2000-06-23 01:18:31 +00:00
|
|
|
.Dq YES
|
|
|
|
if you want to remove all files matching
|
2001-04-29 03:45:04 +00:00
|
|
|
.Va daily_clean_disks_files
|
2000-06-23 01:18:31 +00:00
|
|
|
daily.
|
2001-04-29 03:45:04 +00:00
|
|
|
.It Va daily_clean_disks_files
|
|
|
|
.Pq Vt str
|
|
|
|
Set to a list of file names to match.
|
2000-06-23 01:18:31 +00:00
|
|
|
Wild cards are permitted.
|
2001-04-29 03:45:04 +00:00
|
|
|
.It Va daily_clean_disks_days
|
|
|
|
.Pq Vt num
|
|
|
|
When
|
|
|
|
.Va daily_clean_disks_enable
|
2000-06-23 01:18:31 +00:00
|
|
|
is set to
|
|
|
|
.Dq YES ,
|
|
|
|
this must also be set to the number of days old that a file's access
|
|
|
|
and modification times must be before it's deleted.
|
2001-04-29 03:45:04 +00:00
|
|
|
.It Va daily_clean_disks_verbose
|
|
|
|
.Pq Vt bool
|
|
|
|
Set to
|
2000-06-23 01:18:31 +00:00
|
|
|
.Dq YES
|
|
|
|
if you want the removed files to be reported in your daily output.
|
2001-04-29 03:45:04 +00:00
|
|
|
.It Va daily_clean_tmps_enable
|
|
|
|
.Pq Vt bool
|
|
|
|
Set to
|
2000-06-23 01:18:31 +00:00
|
|
|
.Dq YES
|
|
|
|
if you want to clear temporary directories daily.
|
2001-04-29 03:45:04 +00:00
|
|
|
.It Va daily_clean_tmps_dirs
|
|
|
|
.Pq Vt str
|
|
|
|
Set to the list of directories to clear if
|
|
|
|
.Va daily_clean_tmps_enable
|
2000-06-23 01:18:31 +00:00
|
|
|
is set to
|
|
|
|
.Dq YES .
|
2001-04-29 03:45:04 +00:00
|
|
|
.It Va daily_clean_tmps_days
|
|
|
|
.Pq Vt num
|
|
|
|
When
|
|
|
|
.Va daily_clean_tmps_enable
|
2000-06-23 01:18:31 +00:00
|
|
|
is set, this must also be set to the number of days old that a file's access
|
|
|
|
and modification times must be before it's deleted.
|
2001-04-29 03:45:04 +00:00
|
|
|
.It Va daily_clean_tmps_ignore
|
|
|
|
.Pq Vt str
|
|
|
|
Set to the list of files that should not be deleted when
|
|
|
|
.Va daily_clean_tmps_enable
|
2000-06-23 01:18:31 +00:00
|
|
|
is set to
|
|
|
|
.Dq YES .
|
|
|
|
Wild card characters are permitted.
|
2001-04-29 03:45:04 +00:00
|
|
|
.It Va daily_clean_tmps_verbose
|
|
|
|
.Pq Vt bool
|
|
|
|
Set to
|
2000-06-23 01:18:31 +00:00
|
|
|
.Dq YES
|
|
|
|
if you want the removed files to be reported in your daily output.
|
2001-04-29 03:45:04 +00:00
|
|
|
.It Va daily_clean_preserve_enable
|
|
|
|
.Pq Vt bool
|
|
|
|
Set to
|
2000-06-23 01:18:31 +00:00
|
|
|
.Dq YES
|
|
|
|
if you wish to remove old files from
|
|
|
|
.Pa /var/preserve .
|
2001-04-29 03:45:04 +00:00
|
|
|
.It Va daily_clean_preserve_days
|
|
|
|
.Pq Vt num
|
|
|
|
Set to the number of days that files must not have been modified before
|
2000-06-23 01:18:31 +00:00
|
|
|
they are deleted.
|
2001-04-29 03:45:04 +00:00
|
|
|
.It Va daily_clean_preserve_verbose
|
|
|
|
.Pq Vt bool
|
|
|
|
Set to
|
2000-06-23 01:18:31 +00:00
|
|
|
.Dq YES
|
|
|
|
if you want the removed files to be reported in your daily output.
|
2001-04-29 03:45:04 +00:00
|
|
|
.It Va daily_clean_msgs_enable
|
|
|
|
.Pq Vt bool
|
|
|
|
Set to
|
2000-06-23 01:18:31 +00:00
|
|
|
.Dq YES
|
2001-11-27 11:33:32 +00:00
|
|
|
if you wish old system messages to be purged.
|
2001-04-29 03:45:04 +00:00
|
|
|
.It Va daily_clean_msgs_days
|
|
|
|
.Pq Vt num
|
|
|
|
Set to the number of days that files must not have been modified before
|
2000-06-23 01:18:31 +00:00
|
|
|
they are deleted.
|
|
|
|
If this variable is left blank, the
|
|
|
|
.Xr msgs 1
|
|
|
|
default is used.
|
2001-04-29 03:45:04 +00:00
|
|
|
.It Va daily_clean_rwho_enable
|
|
|
|
.Pq Vt bool
|
|
|
|
Set to
|
2000-06-23 01:18:31 +00:00
|
|
|
.Dq YES
|
|
|
|
if you wish old files in
|
|
|
|
.Pa /var/who
|
|
|
|
to be purged.
|
2001-04-29 03:45:04 +00:00
|
|
|
.It Va daily_clean_rwho_days
|
|
|
|
.Pq Vt num
|
|
|
|
Set to the number of days that files must not have been modified before
|
2000-06-23 01:18:31 +00:00
|
|
|
they are deleted.
|
2001-04-29 03:45:04 +00:00
|
|
|
.It Va daily_clean_rwho_verbose
|
|
|
|
.Pq Vt bool
|
|
|
|
Set to
|
2000-06-23 01:18:31 +00:00
|
|
|
.Dq YES
|
|
|
|
if you want the removed files to be reported in your daily output.
|
2001-04-29 03:45:04 +00:00
|
|
|
.It Va daily_clean_hoststat_enable
|
|
|
|
.Pq Vt bool
|
|
|
|
Set to
|
2000-06-23 01:18:31 +00:00
|
|
|
.Dq YES
|
|
|
|
if you wish old files in
|
|
|
|
.Pa /var/spool/.hoststat
|
|
|
|
to be purged.
|
2001-04-29 03:45:04 +00:00
|
|
|
.It Va daily_clean_hoststat_days
|
|
|
|
.Pq Vt num
|
|
|
|
Set to the number of days that files must not have been modified before
|
2000-06-23 01:18:31 +00:00
|
|
|
they are deleted.
|
2001-04-29 03:45:04 +00:00
|
|
|
.It Va daily_clean_hoststat_verbose
|
|
|
|
.Pq Vt bool
|
|
|
|
Set to
|
2000-06-23 01:18:31 +00:00
|
|
|
.Dq YES
|
|
|
|
if you want the removed files to be reported in your daily output.
|
2001-04-29 03:45:04 +00:00
|
|
|
.It Va daily_backup_passwd_enable
|
|
|
|
.Pq Vt bool
|
|
|
|
Set to
|
2000-06-23 01:18:31 +00:00
|
|
|
.Dq YES
|
|
|
|
if you want the
|
|
|
|
.Pa /etc/master.passwd
|
|
|
|
and
|
|
|
|
.Pa /etc/group
|
|
|
|
files backed up and reported on.
|
|
|
|
Reporting consists of checking both files for modifications and running
|
|
|
|
.Xr chkgrp 8
|
|
|
|
on the
|
|
|
|
.Pa group
|
|
|
|
file.
|
2001-04-29 03:45:04 +00:00
|
|
|
.It Va daily_backup_aliases_enable
|
|
|
|
.Pq Vt bool
|
|
|
|
Set to
|
2000-06-23 01:18:31 +00:00
|
|
|
.Dq YES
|
|
|
|
if you want the
|
2000-08-13 18:38:58 +00:00
|
|
|
.Pa /etc/mail/aliases
|
2000-06-23 01:18:31 +00:00
|
|
|
file backed up and modifications to be displayed in your daily output.
|
2001-04-29 03:45:04 +00:00
|
|
|
.It Va daily_backup_distfile_enable
|
|
|
|
.Pq Vt bool
|
|
|
|
Set to
|
2000-06-23 01:18:31 +00:00
|
|
|
.Dq YES
|
|
|
|
if you want the
|
|
|
|
.Pa /etc/Distfile
|
|
|
|
file backed up and modifications to be displayed in your daily output.
|
2001-04-29 03:45:04 +00:00
|
|
|
.It Va daily_calendar_enable
|
|
|
|
.Pq Vt bool
|
|
|
|
Set to
|
2000-06-23 01:18:31 +00:00
|
|
|
.Dq YES
|
|
|
|
if you want to run
|
|
|
|
.Ic calendar -a
|
|
|
|
daily.
|
2001-04-29 03:45:04 +00:00
|
|
|
.It Va daily_accounting_enable
|
|
|
|
.Pq Vt bool
|
|
|
|
Set to
|
2000-06-23 01:18:31 +00:00
|
|
|
.Dq YES
|
|
|
|
if you want to rotate your daily accounting files.
|
|
|
|
No rotations are necessary unless
|
2001-04-29 03:45:04 +00:00
|
|
|
.Va accounting_enable
|
2000-06-23 01:18:31 +00:00
|
|
|
is enabled in
|
|
|
|
.Xr rc.conf 5 .
|
2001-04-29 03:45:04 +00:00
|
|
|
.It Va daily_accounting_compress
|
|
|
|
.Pq Vt bool
|
|
|
|
Set to
|
2000-06-27 10:52:21 +00:00
|
|
|
.Dq YES
|
|
|
|
if you want your daily accounting files to be compressed using
|
|
|
|
.Xr gzip 1 .
|
2001-07-04 15:02:31 +00:00
|
|
|
.It Va daily_accounting_save
|
|
|
|
.Pq Vt num
|
2001-05-30 16:46:53 +00:00
|
|
|
When
|
2001-07-04 15:02:31 +00:00
|
|
|
.Va daily_accounting_enable
|
2001-05-30 16:46:53 +00:00
|
|
|
is set, this may also be set to the number of daily accounting files that are
|
|
|
|
to be saved.
|
|
|
|
The default is
|
|
|
|
.Dq 3 .
|
2001-07-04 15:02:31 +00:00
|
|
|
.It Va daily_accounting_flags
|
2001-05-30 16:46:53 +00:00
|
|
|
.Pq Vt str
|
|
|
|
Set to the arguments to pass to the
|
2001-08-22 14:16:31 +00:00
|
|
|
.Xr sa 8
|
2001-05-30 16:46:53 +00:00
|
|
|
utility (in addition to
|
|
|
|
.Fl s )
|
|
|
|
when
|
2001-07-04 15:02:31 +00:00
|
|
|
.Va daily_accounting_enable
|
2001-05-30 16:46:53 +00:00
|
|
|
is set to
|
|
|
|
.Dq YES .
|
2001-05-30 20:23:43 +00:00
|
|
|
The default is
|
|
|
|
.Fl q .
|
2001-04-29 03:45:04 +00:00
|
|
|
.It Va daily_distfile_enable
|
|
|
|
.Pq Vt bool
|
|
|
|
Set to
|
2000-06-23 01:18:31 +00:00
|
|
|
.Dq YES
|
|
|
|
if you want to run
|
|
|
|
.Xr rdist 1
|
|
|
|
daily.
|
|
|
|
The
|
|
|
|
.Pa /etc/Distfile
|
|
|
|
file must also exist.
|
2002-01-17 10:35:48 +00:00
|
|
|
.It Va daily_news_expire_enable
|
2001-04-29 03:45:04 +00:00
|
|
|
.Pq Vt bool
|
|
|
|
Set to
|
2000-06-23 01:18:31 +00:00
|
|
|
.Dq YES
|
|
|
|
if you want to run
|
|
|
|
.Pa /etc/news.expire .
|
2001-04-29 03:45:04 +00:00
|
|
|
.It Va daily_status_disks_enable
|
|
|
|
.Pq Vt bool
|
|
|
|
Set to
|
2000-06-23 01:18:31 +00:00
|
|
|
.Dq YES
|
|
|
|
if you want to run
|
2000-07-05 10:47:01 +00:00
|
|
|
.Xr df 1
|
2001-08-07 15:48:51 +00:00
|
|
|
(with the arguments supplied in
|
|
|
|
.Va daily_status_disks_df_flags )
|
2000-06-23 01:18:31 +00:00
|
|
|
and
|
2000-10-24 13:54:17 +00:00
|
|
|
.Ic dump -W .
|
2001-04-29 03:45:04 +00:00
|
|
|
.It Va daily_status_disks_df_flags
|
|
|
|
.Pq Vt str
|
|
|
|
Set to the arguments for the
|
2000-07-05 10:47:01 +00:00
|
|
|
.Xr df 1
|
|
|
|
utility when
|
2001-04-29 03:45:04 +00:00
|
|
|
.Va daily_status_disks_enable
|
2000-07-05 10:47:01 +00:00
|
|
|
is set to
|
|
|
|
.Dq YES .
|
2001-04-29 03:45:04 +00:00
|
|
|
.It Va daily_status_network_enable
|
|
|
|
.Pq Vt bool
|
|
|
|
Set to
|
2000-06-23 01:18:31 +00:00
|
|
|
.Dq YES
|
|
|
|
if you want to run
|
|
|
|
.Ic netstat -i .
|
2001-04-29 03:45:04 +00:00
|
|
|
.It Va daily_status_network_usedns
|
|
|
|
.Pq Vt bool
|
|
|
|
Set to
|
2000-06-23 01:18:31 +00:00
|
|
|
.Dq YES
|
|
|
|
if you want to run
|
|
|
|
.Xr netstat 1
|
|
|
|
without the
|
|
|
|
.Fl n
|
|
|
|
option (to do DNS lookups).
|
2001-04-29 03:45:04 +00:00
|
|
|
.It Va daily_status_rwho_enable
|
|
|
|
.Pq Vt bool
|
|
|
|
Set to
|
2000-06-23 01:18:31 +00:00
|
|
|
.Dq YES
|
|
|
|
if you want to run
|
|
|
|
.Xr uptime 1
|
|
|
|
(or
|
|
|
|
.Xr ruptime 1
|
2001-07-14 19:41:16 +00:00
|
|
|
if
|
2001-04-29 03:45:04 +00:00
|
|
|
.Va rwhod_enable
|
2000-06-23 01:18:31 +00:00
|
|
|
is set to
|
|
|
|
.Dq YES
|
|
|
|
in
|
2001-02-01 16:38:02 +00:00
|
|
|
.Pa /etc/rc.conf ) .
|
2001-04-29 03:45:04 +00:00
|
|
|
.It Va daily_status_mailq_enable
|
|
|
|
.Pq Vt bool
|
|
|
|
Set to
|
2000-06-23 01:18:31 +00:00
|
|
|
.Dq YES
|
|
|
|
if you want to run
|
|
|
|
.Xr mailq 1 .
|
2001-04-29 03:45:04 +00:00
|
|
|
.It Va daily_status_mailq_shorten
|
|
|
|
.Pq Vt bool
|
|
|
|
Set to
|
2000-06-23 01:18:31 +00:00
|
|
|
.Dq YES
|
|
|
|
if you want to shorten the
|
|
|
|
.Nm mailq
|
|
|
|
output when
|
2001-04-29 03:45:04 +00:00
|
|
|
.Va daily_status_mailq_enable
|
2000-06-23 01:18:31 +00:00
|
|
|
is set to
|
|
|
|
.Dq YES .
|
2001-04-29 03:45:04 +00:00
|
|
|
.It Va daily_status_security_enable
|
|
|
|
.Pq Vt bool
|
|
|
|
Set to
|
2000-06-23 01:18:31 +00:00
|
|
|
.Dq YES
|
2001-12-07 23:57:39 +00:00
|
|
|
if you want to run the security check.
|
|
|
|
The security check is another set of
|
|
|
|
.Xr periodic 8
|
|
|
|
scripts.
|
|
|
|
The system defaults are in
|
|
|
|
.Pa /etc/periodic/security .
|
|
|
|
Local scripts should be placed in
|
|
|
|
.Pa /usr/local/etc/periodic/security .
|
|
|
|
See the
|
|
|
|
.Xr periodic 8
|
|
|
|
manual page for more information.
|
2001-04-29 03:45:04 +00:00
|
|
|
.It Va daily_status_security_inline
|
|
|
|
.Pq Vt bool
|
|
|
|
Set to
|
2000-06-23 01:18:31 +00:00
|
|
|
.Dq YES
|
2001-12-07 23:57:39 +00:00
|
|
|
if you want the security check output inline.
|
2001-01-30 10:24:18 +00:00
|
|
|
The default is to either mail or log the output according to the value of
|
2001-04-29 03:45:04 +00:00
|
|
|
.Va daily_status_security_output .
|
|
|
|
.It Va daily_status_security_output
|
|
|
|
.Pq Vt str
|
2001-12-07 23:57:39 +00:00
|
|
|
Where to send the output of the security check if
|
2001-04-29 03:45:04 +00:00
|
|
|
.Va daily_status_security_inline
|
2001-01-30 10:24:18 +00:00
|
|
|
is set to
|
|
|
|
.Dq NO .
|
|
|
|
This variable behaves in the same way as the
|
2001-04-29 03:45:04 +00:00
|
|
|
.Va *_output
|
2001-01-30 10:24:18 +00:00
|
|
|
variables above, namely it can be set either to one or more email addresses
|
|
|
|
or to an absolute file name.
|
2001-12-07 23:57:39 +00:00
|
|
|
.It Va daily_status_security_chksetuid_enable
|
|
|
|
.Pq Vt bool
|
|
|
|
Set to
|
|
|
|
.Dq YES
|
|
|
|
to compare the modes and modification times of setuid executables with
|
|
|
|
the previous day's values.
|
|
|
|
.It Va daily_status_security_chkmounts_enable
|
|
|
|
.Pq Vt bool
|
|
|
|
Set to
|
|
|
|
.Dq YES
|
|
|
|
to check for changes mounted filesystems to the previous day's values.
|
2001-04-29 03:45:04 +00:00
|
|
|
.It Va daily_status_security_noamd
|
|
|
|
.Pq Vt bool
|
|
|
|
Set to
|
2000-06-23 01:18:31 +00:00
|
|
|
.Dq YES
|
|
|
|
if you want to ignore
|
|
|
|
.Xr amd 8
|
2001-12-07 23:57:39 +00:00
|
|
|
mounts when comparing against yesterdays filesystem mounts in the
|
|
|
|
.Va daily_status_security_chkmounts_enable
|
|
|
|
check.
|
|
|
|
.It Va daily_status_security_chkuid0_enable
|
|
|
|
.Pq Vt bool
|
|
|
|
Set to
|
|
|
|
.Dq YES
|
|
|
|
to check
|
|
|
|
.Pa /etc/master.passwd
|
|
|
|
for accounts with uid 0.
|
|
|
|
.It Va daily_status_security_passwdless_enable
|
|
|
|
.Pq Vt bool
|
|
|
|
Set to
|
|
|
|
.Dq YES
|
|
|
|
to check
|
|
|
|
.Pa /etc/master.passwd
|
|
|
|
for accounts with empty passwords.
|
|
|
|
.It Va daily_status_security_ipfwdenied_enable
|
|
|
|
.Pq Vt bool
|
|
|
|
Set to
|
|
|
|
.Dq YES
|
|
|
|
to show log entries for packets denied by
|
|
|
|
.Xr ipfw 8
|
|
|
|
since yesterday's check.
|
|
|
|
.It Va daily_status_security_ipfwlimit_enable
|
|
|
|
.Pq Vt bool
|
|
|
|
Set to
|
|
|
|
.Dq YES
|
|
|
|
to display
|
|
|
|
.Xr ipfw 8
|
|
|
|
rules that have reached their verbosity limit.
|
|
|
|
.It Va daily_status_security_ip6fwdenied_enable
|
|
|
|
.Pq Vt bool
|
|
|
|
Set to
|
|
|
|
.Dq YES
|
|
|
|
to show log entries for packets denied by
|
|
|
|
.Xr ip6fw 8
|
|
|
|
since yesterday's check.
|
|
|
|
.It Va daily_status_security_ip6fwlimit_enable
|
|
|
|
.Pq Vt bool
|
|
|
|
Set to
|
|
|
|
.Dq YES
|
|
|
|
to display
|
|
|
|
.Xr ip6fw 8
|
|
|
|
rules that have reached their verbosity limit.
|
|
|
|
.It Va daily_status_security_kernelmsg_enable
|
|
|
|
.Pq Vt bool
|
|
|
|
Set to
|
|
|
|
.Dq YES
|
|
|
|
to show new
|
|
|
|
.Xr dmesg 8
|
|
|
|
entries since yesterday's check.
|
|
|
|
.It Va daily_status_security_loginfail_enable
|
|
|
|
.Pq Vt bool
|
|
|
|
Set to
|
|
|
|
.Dq YES
|
|
|
|
to display failed logins from
|
|
|
|
.Pa /var/log/messages
|
|
|
|
in the previous day.
|
|
|
|
.It Va daily_status_security_tcpwrap_enable
|
|
|
|
.Pq Vt bool
|
|
|
|
Set to
|
|
|
|
.Dq YES
|
|
|
|
to display connections denied by tcpwrappers (see
|
|
|
|
.Xr hosts_access 5 )
|
|
|
|
from
|
|
|
|
.Pa /var/log/messages
|
|
|
|
during the previous day.
|
2001-04-29 03:45:04 +00:00
|
|
|
.It Va daily_status_mail_rejects_enable
|
|
|
|
.Pq Vt bool
|
|
|
|
Set to
|
2000-06-23 01:18:31 +00:00
|
|
|
.Dq YES
|
|
|
|
if you want to summarise mail rejections logged to
|
|
|
|
.Pa /var/log/maillog
|
|
|
|
for the previous day.
|
2001-04-29 03:45:04 +00:00
|
|
|
.It Va daily_status_mail_rejects_logs
|
|
|
|
.Pq Vt num
|
|
|
|
Set to the number of maillog files that should be checked
|
2000-06-30 11:24:31 +00:00
|
|
|
for yesterday's mail rejects.
|
2001-04-29 03:45:04 +00:00
|
|
|
.It Va daily_status_named_enable
|
|
|
|
.Pq Vt bool
|
|
|
|
Set to
|
2001-04-21 22:36:30 +00:00
|
|
|
.Dq YES
|
|
|
|
if you want to summarise denied zone transfers (AXFR and IXFR)
|
2002-01-21 10:28:18 +00:00
|
|
|
for the previous day.
|
2001-04-29 03:45:04 +00:00
|
|
|
.It Va daily_status_named_usedns
|
|
|
|
.Pq Vt bool
|
|
|
|
Set to
|
2001-04-21 22:36:30 +00:00
|
|
|
.Dq YES
|
|
|
|
if you want to enable reverse DNS lookups.
|
2001-04-29 03:45:04 +00:00
|
|
|
.It Va daily_queuerun_enable
|
|
|
|
.Pq Vt bool
|
|
|
|
Set to
|
2001-02-19 02:47:42 +00:00
|
|
|
.Dq YES
|
|
|
|
if you want to manually run the mail queue at least once a day.
|
2001-04-29 03:45:04 +00:00
|
|
|
.It Va daily_local
|
|
|
|
.Pq Vt str
|
|
|
|
Set to a list of extra scripts that should be run after all other
|
2000-06-23 01:18:31 +00:00
|
|
|
daily scripts.
|
|
|
|
All scripts must be absolute path names.
|
|
|
|
.El
|
|
|
|
.Pp
|
|
|
|
The following variables are used by the standard scripts that reside in
|
|
|
|
.Pa /etc/periodic/weekly :
|
|
|
|
.Bl -tag -offset 4n -width 2n
|
2001-04-29 03:45:04 +00:00
|
|
|
.It Va weekly_clean_kvmdb_enable
|
|
|
|
.Pq Vt bool
|
|
|
|
Set to
|
2000-06-23 01:18:31 +00:00
|
|
|
.Dq YES
|
|
|
|
if you want to purge old
|
|
|
|
.Pa /var/db/kvm_*.db
|
|
|
|
files.
|
|
|
|
The kvm file for the current kernel will not be purged.
|
2001-04-29 03:45:04 +00:00
|
|
|
.It Va weekly_clean_kvmdb_days
|
|
|
|
.Pq Vt num
|
|
|
|
Set to the number of days that the file must not have been accessed
|
2000-06-23 01:18:31 +00:00
|
|
|
before being deleted.
|
2001-04-29 03:45:04 +00:00
|
|
|
.It Va weekly_clean_kvmdb_verbose
|
|
|
|
.Pq Vt bool
|
|
|
|
Set to
|
2000-06-23 01:18:31 +00:00
|
|
|
.Dq YES
|
2000-10-24 13:54:17 +00:00
|
|
|
if you want the removed files to be reported in your weekly output.
|
2001-04-29 03:45:04 +00:00
|
|
|
.It Va weekly_locate_enable
|
|
|
|
.Pq Vt bool
|
|
|
|
Set to
|
2000-06-23 01:18:31 +00:00
|
|
|
.Dq YES
|
|
|
|
if you want to run
|
|
|
|
.Pa /usr/libexec/locate.updatedb .
|
|
|
|
This script is run using
|
|
|
|
.Ic nice -5
|
|
|
|
as user
|
|
|
|
.An nobody ,
|
|
|
|
and generates the table used by the
|
|
|
|
.Xr locate 1
|
|
|
|
command.
|
2001-04-29 03:45:04 +00:00
|
|
|
.It Va weekly_whatis_enable
|
|
|
|
.Pq Vt bool
|
|
|
|
Set to
|
2000-06-23 01:18:31 +00:00
|
|
|
.Dq YES
|
|
|
|
if you want to run
|
|
|
|
.Pa /usr/libexec/makewhatis.local .
|
|
|
|
This script regenerates the database used by the
|
|
|
|
.Xr apropos 1
|
|
|
|
command.
|
2001-04-29 03:45:04 +00:00
|
|
|
.It Va weekly_catman_enable
|
|
|
|
.Pq Vt bool
|
|
|
|
Set to
|
2000-06-23 01:18:31 +00:00
|
|
|
.Dq YES
|
|
|
|
if you want to run
|
|
|
|
.Pa /usr/libexec/catman.local .
|
|
|
|
This script processes all out of date man pages, speeding up the
|
|
|
|
.Xr man 1
|
|
|
|
command at the expense of disk space.
|
2001-04-29 03:45:04 +00:00
|
|
|
.It Va weekly_noid_enable
|
|
|
|
.Pq Vt bool
|
|
|
|
Set to
|
2000-06-23 01:18:31 +00:00
|
|
|
.Dq YES
|
|
|
|
if you want to locate orphaned files on the system.
|
|
|
|
An orphaned file is one with an invalid owner or group.
|
2001-04-29 03:45:04 +00:00
|
|
|
.It Va weekly_noid_dirs
|
|
|
|
.Pq Vt str
|
|
|
|
A list of directories under which orphaned files are searched for.
|
2000-06-23 01:18:31 +00:00
|
|
|
This would usually be set to
|
|
|
|
.Pa / .
|
2001-04-29 03:45:04 +00:00
|
|
|
.It Va weekly_status_pkg_enable
|
|
|
|
.Pq Vt bool
|
|
|
|
Set to
|
2000-06-27 11:20:08 +00:00
|
|
|
.Dq YES
|
2000-06-27 12:04:43 +00:00
|
|
|
if you want to use
|
|
|
|
.Xr pkg_version 1
|
|
|
|
to list installed packages which are out of date.
|
2001-04-29 03:45:04 +00:00
|
|
|
.It Va weekly_local
|
|
|
|
.Pq Vt str
|
|
|
|
Set to a list of extra scripts that should be run after all other
|
2000-06-23 01:18:31 +00:00
|
|
|
weekly scripts.
|
|
|
|
All scripts must be absolute path names.
|
|
|
|
.El
|
|
|
|
.Pp
|
|
|
|
The following variables are used by the standard scripts that reside in
|
|
|
|
.Pa /etc/periodic/monthly :
|
|
|
|
.Bl -tag -offset 4n -width 2n
|
2001-04-29 03:45:04 +00:00
|
|
|
.It Va monthly_accounting_enable
|
|
|
|
.Pq Vt bool
|
|
|
|
Set to
|
2000-06-23 01:18:31 +00:00
|
|
|
.Dq YES
|
|
|
|
if you want to do login accounting using the
|
|
|
|
.Xr ac 8
|
|
|
|
command.
|
2001-04-29 03:45:04 +00:00
|
|
|
.It Va monthly_local
|
|
|
|
.Pq Vt str
|
|
|
|
Set to a list of extra scripts that should be run after all other
|
2000-06-23 01:18:31 +00:00
|
|
|
monthly scripts.
|
|
|
|
All scripts must be absolute path names.
|
|
|
|
.El
|
|
|
|
.Sh FILES
|
|
|
|
.Bl -tag -width /etc/defaults/periodic.conf
|
|
|
|
.It Pa /etc/defaults/periodic.conf
|
|
|
|
The default configuration file.
|
|
|
|
This file contains all default variables and values.
|
|
|
|
.It Pa /etc/periodic.conf
|
|
|
|
The usual system specific variable override file.
|
|
|
|
.It Pa /etc/periodic.conf.local
|
|
|
|
An additional override file, useful when
|
|
|
|
.Pa /etc/periodic.conf
|
|
|
|
is shared or distributed.
|
|
|
|
.El
|
|
|
|
.Sh SEE ALSO
|
|
|
|
.Xr apropos 1 ,
|
|
|
|
.Xr calendar 1 ,
|
|
|
|
.Xr df 1 ,
|
2000-06-27 10:52:21 +00:00
|
|
|
.Xr gzip 1 ,
|
2000-06-23 01:18:31 +00:00
|
|
|
.Xr locate 1 ,
|
|
|
|
.Xr man 1 ,
|
|
|
|
.Xr msgs 1 ,
|
|
|
|
.Xr netstat 1 ,
|
|
|
|
.Xr nice 1 ,
|
2000-06-27 11:20:08 +00:00
|
|
|
.Xr pkg_version 1 ,
|
2000-06-23 01:18:31 +00:00
|
|
|
.Xr rdist 1 ,
|
|
|
|
.Xr rc.conf 5 ,
|
|
|
|
.Xr ac 8 ,
|
|
|
|
.Xr chkgrp 8 ,
|
|
|
|
.Xr dump 8 ,
|
2000-11-11 19:16:05 +00:00
|
|
|
.Xr newsyslog 8 ,
|
2000-11-15 16:00:07 +00:00
|
|
|
.Xr periodic 8
|
2000-06-23 01:18:31 +00:00
|
|
|
.Sh HISTORY
|
|
|
|
The
|
|
|
|
.Nm
|
|
|
|
file appeared in
|
2000-09-14 17:19:15 +00:00
|
|
|
.Fx 4.1 .
|
2000-06-23 01:18:31 +00:00
|
|
|
.Sh AUTHORS
|
|
|
|
.An Brian Somers Aq brian@Awfulhak.org .
|