f66e7afa28
scripts may use to source safely overrides in ${rc_conf_files}
files.
This protects users who insist on the bad practice of copying
/etc/defaults/rc.conf to /etc/rc.conf from a recursive loop
that exhausts available file descriptors.
Several people have expressed interest in breaking this function
out into its own shell script. Anyone who wants to embark on
such an undertaking would do well to study the attributed PR.
PR: 17595
Reported by: adrian
Submitted by: Doug Barton <Doug@gorean.org>
314 lines
16 KiB
Bash
314 lines
16 KiB
Bash
#!/bin/sh
|
|
#
|
|
|
|
# This is rc.conf - a file full of useful variables that you can set
|
|
# to change the default startup behavior of your system. You should
|
|
# not edit this file! Put any overrides into one of the ${rc_conf_files}
|
|
# instead and you will be able to update these defaults later without
|
|
# spamming your local configuration information.
|
|
#
|
|
# The ${rc_conf_files} files should only contain values which override
|
|
# values set in this file. This eases the upgrade path when defaults
|
|
# are changed and new features are added.
|
|
#
|
|
# All arguments must be in double or single quotes.
|
|
#
|
|
# $FreeBSD$
|
|
|
|
##############################################################
|
|
### Important initial Boot-time options ####################
|
|
##############################################################
|
|
|
|
swapfile="NO" # Set to name of swapfile if aux swapfile desired.
|
|
apm_enable="NO" # Set to YES to enable APM BIOS functions (or NO).
|
|
apmd_enable="NO" # Run apmd to handle APM event from userland.
|
|
apmd_flags="" # Flags to apmd (if enabled).
|
|
pccard_enable="NO" # Set to YES if you want to configure PCCARD devices.
|
|
pccard_mem="DEFAULT" # If pccard_enable=YES, this is card memory address.
|
|
pccard_beep="1" # pccard beep type.
|
|
pccard_ifconfig="NO" # Specialized pccard ethernet configuration (or NO).
|
|
pccardd_flags="" # Additional flags for pccardd.
|
|
pccard_conf="/etc/defaults/pccard.conf" # pccardd(8) config file
|
|
local_startup="/usr/local/etc/rc.d /usr/X11R6/etc/rc.d" # startup script dirs.
|
|
local_periodic="/usr/local/etc/periodic /usr/X11R6/etc/periodic" # periodic script dirs
|
|
rc_conf_files="/etc/rc.conf /etc/rc.conf.local"
|
|
|
|
##############################################################
|
|
### Network configuration sub-section ######################
|
|
##############################################################
|
|
|
|
### Basic network options: ###
|
|
hostname="" # Set this!
|
|
nisdomainname="NO" # Set to NIS domain if using NIS (or NO).
|
|
dhcp_program="/sbin/dhclient" # Path to dhcp client program.
|
|
dhcp_flags="" # Additional flags to pass to dhcp client.
|
|
firewall_enable="NO" # Set to YES to enable firewall functionality
|
|
firewall_script="/etc/rc.firewall" # Which script to run to set up the firewall
|
|
firewall_type="UNKNOWN" # Firewall type (see /etc/rc.firewall)
|
|
firewall_quiet="NO" # Set to YES to suppress rule display
|
|
firewall_flags="" # Flags passed to ipfw when type is a file
|
|
natd_program="/sbin/natd" # path to natd, if you want a different one.
|
|
natd_enable="NO" # Enable natd (if firewall_enable == YES).
|
|
natd_interface="fxp0" # Public interface or IPaddress to use.
|
|
natd_flags="" # Additional flags for natd.
|
|
tcp_extensions="NO" # Set to YES to turn on RFC1323 extensions.
|
|
log_in_vain="NO" # YES to log connects to ports w/o listeners.
|
|
tcp_keepalive="YES" # Enable stale TCP connection timeout (or NO).
|
|
tcp_drop_synfin="NO" # Set to YES to drop TCP packets with SYN+FIN
|
|
# NOTE: this breaks rfc1644 extensions (T/TCP)
|
|
tcp_restrict_rst="NO" # Set to YES to restrict emission of RST
|
|
icmp_drop_redirect="NO" # Set to YES to ignore ICMP REDIRECT packets
|
|
icmp_log_redirect="NO" # Set to YES to log ICMP REDIRECT packets
|
|
network_interfaces="auto" # List of network interfaces (or "auto").
|
|
ifconfig_lo0="inet 127.0.0.1" # default loopback device configuration.
|
|
#ifconfig_lo0_alias0="inet 127.0.0.254 netmask 0xffffffff" # Sample alias entry.
|
|
#ifconfig_ed0_alias0="inet6 fec0:0000:0000:0005::1 prefixlen 64" # Sample alias entry for IPv6.
|
|
#
|
|
# If you have any sppp(4) interfaces above, you might also want to set
|
|
# the following parameters. Refer to spppcontrol(8) for their meaning.
|
|
sppp_interfaces="" # List of sppp interfaces.
|
|
#sppp_interfaces="isp0" # example: sppp over ISDN
|
|
#spppconfig_isp0="authproto=chap myauthname=foo myauthsecret='top secret' hisauthname=some-gw hisauthsecret='another secret'"
|
|
|
|
# User ppp configuration.
|
|
ppp_enable="NO" # Start user-ppp (or NO).
|
|
ppp_mode="auto" # Choice of "auto", "ddial", "direct" or "dedicated".
|
|
# For details see man page for ppp(8). Default is auto.
|
|
ppp_nat="YES" # Use PPP's internal network address translation or NO.
|
|
ppp_profile="papchap" # Which profile to use from /etc/ppp/ppp.conf.
|
|
|
|
### Network daemon (miscellaneous) & NFS options: ###
|
|
syslogd_enable="YES" # Run syslog daemon (or NO).
|
|
syslogd_flags="-s" # Flags to syslogd (if enabled).
|
|
inetd_enable="YES" # Run the network daemon dispatcher (or NO).
|
|
inetd_flags="-wW" # Optional flags to inetd
|
|
#
|
|
# named. It may be possible to run named in a sandbox, man security for
|
|
# details.
|
|
#
|
|
named_enable="NO" # Run named, the DNS server (or NO).
|
|
named_program="named" # path to named, if you want a different one.
|
|
named_flags="" # Flags for named
|
|
#named_flags="-u bind -g bind" # Flags for named
|
|
|
|
kerberos_server_enable="NO" # Run a kerberos master server (or NO).
|
|
kadmind_server_enable="NO" # Run kadmind (or NO) -- do not run on
|
|
# a slave kerberos server
|
|
kerberos_stash="" # Is the kerberos master key stashed?
|
|
rwhod_enable="NO" # Run the rwho daemon (or NO).
|
|
rwhod_flags="" # Flags for rwhod
|
|
amd_enable="NO" # Run amd service with $amd_flags (or NO).
|
|
amd_flags="-a /.amd_mnt -c 1800 -l syslog /host /etc/amd.map /net /etc/amd.map"
|
|
amd_map_program="NO" # Can be set to "ypcat -k amd.master"
|
|
nfs_client_enable="NO" # This host is an NFS client (or NO).
|
|
nfs_client_flags="-n 4" # Flags to nfsiod (if enabled).
|
|
nfs_access_cache="2" # Client cache timeout in seconds
|
|
nfs_server_enable="NO" # This host is an NFS server (or NO).
|
|
nfs_server_flags="-u -t -n 4" # Flags to nfsd (if enabled).
|
|
single_mountd_enable="NO" # Run mountd only (or NO).
|
|
mountd_flags="-r" # Flags to mountd (if NFS server enabled).
|
|
nfs_reserved_port_only="NO" # Provide NFS only on secure port (or NO).
|
|
nfs_bufpackets="DEFAULT" # bufspace (in packets) for client (or DEFAULT)
|
|
rpc_lockd_enable="NO" # Run NFS rpc.lockd (*broken!*) if nfs_server.
|
|
rpc_statd_enable="YES" # Run NFS rpc.statd if nfs_server (or NO).
|
|
portmap_enable="YES" # Run the portmapper service (or NO).
|
|
portmap_program="/usr/sbin/portmap" # path to portmap, if you want a different one.
|
|
portmap_flags="" # Flags to portmap (if enabled).
|
|
rpc_ypupdated_enable="NO" # Run if NIS master and SecureRPC (or NO).
|
|
keyserv_enable="NO" # Run the SecureRPC keyserver (or NO).
|
|
keyserv_flags="" # Flags to keyserv (if enabled).
|
|
rarpd_enable="NO" # Run rarpd (or NO).
|
|
rarpd_flags="" # Flags to rarpd.
|
|
xtend_enable="NO" # Run the X-10 power controller daemon.
|
|
xtend_flags="" # Flags to xtend (if enabled).
|
|
pppoed_enable="NO" # Run the PPP over Ethernet daemon.
|
|
pppoed_provider="*" # Provider and ppp(8) config file entry.
|
|
pppoed_flags="-P /var/run/pppoed.pid" # Flags to pppoed (if enabled).
|
|
pppoed_interface="fxp0" # The interface that pppoed runs on.
|
|
sshd_program="/usr/sbin/sshd" # path to sshd, if you want a different one.
|
|
sshd_enable="NO" # Enable sshd
|
|
sshd_flags="" # Additional flags for sshd.
|
|
|
|
### Network Time Services options: ###
|
|
timed_enable="NO" # Run the time daemon (or NO).
|
|
timed_flags="" # Flags to timed (if enabled).
|
|
ntpdate_enable="NO" # Run ntpdate to sync time on boot (or NO).
|
|
ntpdate_program="ntpdate" # path to ntpdate, if you want a different one.
|
|
ntpdate_flags="" # Flags to ntpdate (if enabled).
|
|
xntpd_enable="NO" # Run ntpd Network Time Protocol (or NO).
|
|
xntpd_program="ntpd" # path to ntpd, if you want a different one.
|
|
xntpd_flags="-p /var/run/ntpd.pid" # Flags to ntpd (if enabled).
|
|
|
|
# Network Information Services (NIS) options: ###
|
|
nis_client_enable="NO" # We're an NIS client (or NO).
|
|
nis_client_flags="" # Flags to ypbind (if enabled).
|
|
nis_ypset_enable="NO" # Run ypset at boot time (or NO).
|
|
nis_ypset_flags="" # Flags to ypset (if enabled).
|
|
nis_server_enable="NO" # We're an NIS server (or NO).
|
|
nis_server_flags="" # Flags to ypserv (if enabled).
|
|
nis_ypxfrd_enable="NO" # Run rpc.ypxfrd at boot time (or NO).
|
|
nis_ypxfrd_flags="" # Flags to rpc.ypxfrd (if enabled).
|
|
nis_yppasswdd_enable="NO" # Run rpc.yppasswdd at boot time (or NO).
|
|
nis_yppasswdd_flags="" # Flags to rpc.yppasswdd (if enabled).
|
|
|
|
### Network routing options: ###
|
|
defaultrouter="NO" # Set to default gateway (or NO).
|
|
static_routes="" # Set to static route list (or leave empty).
|
|
gateway_enable="NO" # Set to YES if this host will be a gateway.
|
|
router_enable="NO" # Set to YES to enable a routing daemon.
|
|
router="routed" # Name of routing daemon to use if enabled.
|
|
router_flags="-q" # Flags for routing daemon.
|
|
mrouted_enable="NO" # Do multicast routing (see /etc/mrouted.conf).
|
|
mrouted_flags="" # Flags for multicast routing daemon.
|
|
ipxgateway_enable="NO" # Set to YES to enable IPX routing.
|
|
ipxrouted_enable="NO" # Set to YES to run the IPX routing daemon.
|
|
ipxrouted_flags="" # Flags for IPX routing daemon.
|
|
arpproxy_all="" # replaces obsolete kernel option ARP_PROXYALL.
|
|
forward_sourceroute="NO" # do source routing (only if gateway_enable is set to "YES")
|
|
accept_sourceroute="NO" # accept source routed packets to us
|
|
|
|
### ATM interface options: ###
|
|
atm_enable="NO" # Configure ATM interfaces (or NO).
|
|
#atm_netif_hea0="atm 1" # Network interfaces for physical interface.
|
|
#atm_sigmgr_hea0="uni31" # Signalling manager for physical interface.
|
|
#atm_prefix_hea0="ILMI" # NSAP prefix (UNI interfaces only) (or ILMI).
|
|
#atm_macaddr_hea0="NO" # Override physical MAC address (or NO).
|
|
#atm_arpserver_atm0="0x47.0005.80.999999.9999.9999.9999.999999999999.00" # ATMARP server address (or local).
|
|
#atm_scsparp_atm0="NO" # Run SCSP/ATMARP on network interface (or NO).
|
|
atm_pvcs="" # Set to PVC list (or leave empty).
|
|
atm_arps="" # Set to permanent ARP list (or leave empty).
|
|
|
|
### ISDN interface options: ###
|
|
isdn_enable="NO" # Enable the ISDN subsystem (or NO).
|
|
isdn_fsdev="/dev/ttyv4" # Output device for fullscreen mode (or NO for daemon mode).
|
|
isdn_flags="-dn -d0x1f9" # Flags for isdnd
|
|
isdn_trace="NO" # Enable the ISDN trace subsystem (or NO).
|
|
isdn_traceflags="-f /var/tmp/isdntrace0" # Flags for isdntrace
|
|
|
|
### Miscellaneous network options: ###
|
|
icmp_bmcastecho="NO" # respond to broadcast ping packets
|
|
|
|
### IPv6 options: ###
|
|
ipv6_enable="NO" # Set to YES to set up for IPv6.
|
|
ipv6_network_interfaces="auto" # List of network interfaces (or "auto").
|
|
ipv6_static_routes="" # Set to static route list (or leave empty).
|
|
#ipv6_static_routes="xxx" # An example to set fec0:0000:0000:0006::/64
|
|
# route toward loopback interface.
|
|
#ipv6_route_xxx="fec0:0000:0000:0006:: -prefixlen 64 ::1"
|
|
ipv6_gateway_enable="NO" # Set to YES if this host will be a gateway.
|
|
ipv6_router_enable="NO" # Set to YES to enable an IPv6 routing daemon.
|
|
ipv6_router="/usr/sbin/route6d" # Name of IPv6 routing daemon.
|
|
ipv6_router_flags="" # Flags to IPv6 routing daemon.
|
|
#ipv6_router_flags="-l" # Example for route6d with only IPv6 site local
|
|
# addrs.
|
|
#ipv6_network_interfaces="ed0 ep0" # Examples for router.
|
|
# Choose correct prefix value.
|
|
#ipv6_prefix_ed0="fec0:0000:0000:0001 fec0:0000:0000:0002" # Examples for rtr.
|
|
#ipv6_prefix_ep0="fec0:0000:0000:0003 fec0:0000:0000:0004" # Examples for rtr.
|
|
ipv6_default_interface="" # Default output interface for scoped addrs.
|
|
# Now this works only for IPv6 link local
|
|
# multicast addrs.
|
|
prefixcmd_enable="YES" # Use prefix command to assign router prefix.
|
|
rtadvd_enable="YES" # Set to YES to enable an IPv6 router
|
|
# advertisement daemon. If set to YES,
|
|
# this router becomes a possible candidate
|
|
# IPv6 default router for local subnets.
|
|
mroute6d_enable="NO" # Do IPv6 multicast routing.
|
|
mroute6d_program="/usr/sbin/pim6dd" # Name of IPv6 multicast routing
|
|
# daemon.
|
|
mroute6d_flags="" # Flags to IPv6 multicast routing daemon.
|
|
gif_interfaces="NO" # List of GIF tunnels (or "NO").
|
|
#gif_interfaces="gif0 gif1" # Examples typically for a router.
|
|
# Choose correct tunnel addrs.
|
|
#gifconfig_gif0="10.1.1.1 10.1.2.1" # Examples typically for a router.
|
|
#gifconfig_gif1="10.1.1.2 10.1.2.2" # Examples typically for a router.
|
|
stf_interface_ipv4addr="" # Local IPv4 addr for 6to4 IPv6 over IPv4
|
|
# tunneling interface. Specify this entry
|
|
# to enable 6to4 interface.
|
|
stf_interface_ipv4plen="0" # Prefix length for 6to4 IPv4 addr,
|
|
# to limit peer addr range. Effective value
|
|
# is 0-31.
|
|
stf_interface_ipv6_ifid="0:0:0:1" # IPv6 interface id for stf0.
|
|
# If you like, you can set "AUTO" for this.
|
|
stf_interface_ipv6_slaid="0000" # IPv6 Site Level Aggregator for stf0
|
|
ipv6_ipv4mapping="YES"; # Leave empty to disable IPv4 mapped IPv6 addr
|
|
# communication. (like ::ffff:a.b.c.d)
|
|
|
|
##############################################################
|
|
### System console options #################################
|
|
##############################################################
|
|
|
|
keymap="NO" # keymap in /usr/share/syscons/keymaps/* (or NO).
|
|
keyrate="NO" # keyboard rate to: slow, normal, fast (or NO).
|
|
keybell="NO" # bell to duration.pitch or normal or visual (or NO).
|
|
keychange="NO" # function keys default values (or NO).
|
|
cursor="NO" # cursor type {normal|blink|destructive} (or NO).
|
|
scrnmap="NO" # screen map in /usr/share/syscons/scrnmaps/* (or NO).
|
|
font8x16="NO" # font 8x16 from /usr/share/syscons/fonts/* (or NO).
|
|
font8x14="NO" # font 8x14 from /usr/share/syscons/fonts/* (or NO).
|
|
font8x8="NO" # font 8x8 from /usr/share/syscons/fonts/* (or NO).
|
|
blanktime="300" # blank time (in seconds) or "NO" to turn it off.
|
|
saver="NO" # screen saver: Uses /modules/${saver}_saver.ko
|
|
moused_enable="NO" # Run the mouse daemon.
|
|
moused_type="auto" # See man page for rc.conf(5) for available settings.
|
|
moused_port="/dev/psm0" # Set to your mouse port.
|
|
moused_flags="" # Any additional flags to moused.
|
|
allscreens_flags="" # Set this vidcontrol mode for all virtual screens
|
|
|
|
|
|
##############################################################
|
|
### Miscellaneous administrative options ###################
|
|
##############################################################
|
|
|
|
cron_enable="YES" # Run the periodic job daemon.
|
|
lpd_enable="NO" # Run the line printer daemon.
|
|
lpd_program="/usr/sbin/lpd" # path to lpd, if you want a different one.
|
|
lpd_flags="" # Flags to lpd (if enabled).
|
|
usbd_enable="NO" # Run the usbd daemon.
|
|
usbd_flags="" # Flags to usbd (if enabled).
|
|
sendmail_enable="YES" # Run the sendmail daemon (or NO).
|
|
sendmail_flags="-bd -q30m" # Flags to sendmail (if enabled)
|
|
dumpdev="NO" # Device name to crashdump to (or NO).
|
|
enable_quotas="NO" # turn on quotas on startup (or NO).
|
|
check_quotas="YES" # Check quotas on startup (or NO).
|
|
accounting_enable="NO" # Turn on process accounting (or NO).
|
|
ibcs2_enable="NO" # Ibcs2 (SCO) emulation loaded at startup (or NO).
|
|
linux_enable="NO" # Linux binary compatibility loaded at startup (or NO).
|
|
svr4_enable="NO" # SysVR4 emulation loaded at startup (or NO).
|
|
osf1_enable="NO" # Alpha OSF/1 emulation loaded at startup (or NO).
|
|
rand_irqs="NO" # Stir the entropy pool (like "5 11" or NO).
|
|
clear_tmp_enable="NO" # Clear /tmp at startup.
|
|
ldconfig_paths="/usr/lib/compat /usr/X11R6/lib /usr/local/lib"
|
|
# shared library search paths
|
|
ldconfig_paths_aout="/usr/lib/compat/aout /usr/X11R6/lib/aout /usr/local/lib/aout"
|
|
# a.out shared library search paths
|
|
kern_securelevel_enable="NO" # kernel security level (see init(8)),
|
|
kern_securelevel="-1" # range: -1..3 ; `-1' is the most insecure
|
|
update_motd="YES" # update version info in /etc/motd (or NO)
|
|
start_vinum="" # set to YES to start vinum
|
|
|
|
##############################################################
|
|
### Define source_rc_confs, the mechanism used by /etc/rc.* ##
|
|
### scripts to source rc_conf_files overrides safely. ##
|
|
##############################################################
|
|
|
|
if [ -z "${source_rc_confs_defined}" ]; then
|
|
source_rc_confs_defined=yes
|
|
source_rc_confs ( ) {
|
|
local i sourced_files
|
|
for i in ${rc_conf_files}; do
|
|
case ${sourced_files} in
|
|
*:$i:*)
|
|
;;
|
|
*)
|
|
sourced_files="${sourced_files}:$i:"
|
|
if [ -r $i ]; then
|
|
. $i
|
|
fi
|
|
;;
|
|
esac
|
|
done
|
|
}
|
|
fi
|
|
|