Annotation of src/share/man/man5/rc.conf.5, Revision 1.111
1.111 ! wiz 1: .\" $NetBSD: rc.conf.5,v 1.110 2006/12/04 03:52:26 rpaulo Exp $
1.1 mrg 2: .\"
3: .\" Copyright (c) 1996 Matthew R. Green
1.5 cjs 4: .\" Copyright (c) 1997 Curt J. Sampson
1.8 mikel 5: .\" Copyright (c) 1997 Michael W. Long
1.54 lukem 6: .\" Copyright (c) 1998-2002 The NetBSD Foundation, Inc.
1.1 mrg 7: .\" All rights reserved.
8: .\"
1.27 lukem 9: .\" This document is derived from works contributed to The NetBSD Foundation
10: .\" by Luke Mewburn.
11: .\"
1.1 mrg 12: .\" Redistribution and use in source and binary forms, with or without
13: .\" modification, are permitted provided that the following conditions
14: .\" are met:
15: .\" 1. Redistributions of source code must retain the above copyright
16: .\" notice, this list of conditions and the following disclaimer.
17: .\" 2. Redistributions in binary form must reproduce the above copyright
18: .\" notice, this list of conditions and the following disclaimer in the
19: .\" documentation and/or other materials provided with the distribution.
1.12 mrg 20: .\" 3. The name of the author may not be used to endorse or promote products
1.1 mrg 21: .\" derived from this software without specific prior written permission.
22: .\"
23: .\" THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
24: .\" IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
25: .\" OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
26: .\" IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
27: .\" INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING,
28: .\" BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
29: .\" LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED
30: .\" AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
31: .\" OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
32: .\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
33: .\" SUCH DAMAGE.
34: .\"
1.110 rpaulo 35: .Dd December 4, 2006
1.1 mrg 36: .Dt RC.CONF 5
1.21 garbled 37: .Os
1.1 mrg 38: .Sh NAME
39: .Nm rc.conf
40: .Nd system startup configuration file
41: .Sh DESCRIPTION
42: The
43: .Nm
44: file specifies which services are enabled during system startup by
1.35 lukem 45: the startup scripts invoked by
1.67 wiz 46: .Pa /etc/rc
1.58 lukem 47: (see
48: .Xr rc 8 ) ,
49: and the shutdown scripts invoked by
50: .Pa /etc/rc.shutdown .
1.1 mrg 51: The
52: .Nm
53: file is a shell script that is sourced by
1.58 lukem 54: .Xr rc 8 ,
55: meaning that
1.1 mrg 56: .Nm
1.8 mikel 57: must contain valid shell commands.
1.1 mrg 58: .Pp
1.65 abs 59: Listed below are the standard
1.8 mikel 60: .Nm
1.11 mikel 61: variables that may be set, the values to which each may be set,
1.8 mikel 62: a brief description of what each variable does, and a reference to
1.71 grant 63: relevant manual pages.
64: Third party packages may test for additional variables.
1.10 cjs 65: .Pp
66: Most variables are one of two types: enabling variables or flags
1.17 fair 67: variables.
68: Enabling variables, such as
1.10 cjs 69: .Sy inetd ,
70: are generally named after the program or the system they enable,
1.35 lukem 71: and are set to
72: .Sq YES
73: or
74: .Sq NO .
1.17 fair 75: Flags variables, such as
1.10 cjs 76: .Sy inetd_flags
77: have the same name with "_flags" appended, and determine what
78: arguments are passed to the program if it is enabled.
79: .Pp
80: If a variable that
1.58 lukem 81: .Xr rc 8
1.10 cjs 82: expects to be set is not set, or the value is not one of the allowed
83: values, a warning will be printed.
1.58 lukem 84: .Pp
85: By default,
86: .Nm
87: reads
88: .Pa /etc/defaults/rc.conf
89: (if it is readable)
90: to obtain default values for various variables, and the end-user
91: may override these by appending appropriate entries to the end of
1.76 wiz 92: .Nm .
1.58 lukem 93: .Pp
94: .Xr rc.d 8
95: scripts that use
96: .Ic load_rc_config
97: from
98: .Xr rc.subr 8
99: also support sourcing an optional end-user provided per-script override
100: file
101: .Pa /etc/rc.conf.d/ Ns Ar service ,
102: (where
103: .Ar service
104: is the contents of the
105: .Sy name
106: variable in the
107: .Xr rc.d 8
108: script).
109: This may contain variable overrides, including allowing the end-user
110: to override various
111: .Ic run_rc_command
112: .Xr rc.d 8
113: control variables, and thus changing the operation of the script
114: without requiring editing of the script.
1.49 wiz 115: .Ss Overall control
1.35 lukem 116: .Bl -tag -width net_interfaces
1.88 jmmv 117: .It Sy do_rcshutdown
118: .Sq YES
119: or
120: .Sq NO .
121: If set to
122: .Sq NO ,
123: .Xr shutdown 8
124: will not run
125: .Pa /etc/rc.shutdown .
126: .It Sy rcshutdown_rcorder_flags
127: A string.
128: Extra arguments to the
129: .Xr rcorder 8
130: run by
131: .Pa /etc/rc.shutdown .
132: .It Sy rcshutdown_timeout
133: A number.
134: If non-blank, use this as the number of seconds to run a watchdog timer for
135: which will terminate
136: .Pa /etc/rc.shutdown
137: if the timer expires before the shutdown script completes.
1.35 lukem 138: .It Sy rc_configured
1.50 lukem 139: .Sq YES
140: or
141: .Sq NO .
142: If not set to
1.35 lukem 143: .Sq YES
144: then the system will drop into single-user mode during boot.
1.50 lukem 145: .It Sy rc_fast_and_loose
1.54 lukem 146: If set to a non-empty string,
1.50 lukem 147: each script in
148: .Pa /etc/rc.d
149: will be executed in the current shell rather than a sub shell.
150: This may be faster on slow machines that have an expensive
151: .Xr fork 2
152: operation.
153: .Bl -hang
1.51 wiz 154: .It Em Note :
1.50 lukem 155: Use this at your own risk!
156: A rogue command or script may inadvertently prevent boot to multiuser.
157: .El
1.61 lukem 158: .It Sy rc_rcorder_flags
159: A string.
160: Extra arguments to the
161: .Xr rcorder 8
162: run by
163: .Pa /etc/rc .
1.35 lukem 164: .El
1.49 wiz 165: .Ss Basic network configuration
1.11 mikel 166: .Bl -tag -width net_interfaces
1.50 lukem 167: .It Sy defaultroute
168: A string.
1.99 ghen 169: Default IPv4 network route.
1.50 lukem 170: If empty or not set, then the contents of
171: .Pa /etc/mygate
172: (if it exists) are used.
1.99 ghen 173: .It Sy defaultroute6
174: A string.
175: Default IPv6 network route.
176: If empty or not set, then the contents of
177: .Pa /etc/mygate6
178: (if it exists) are used.
1.9 lukem 179: .It Sy domainname
1.50 lukem 180: A string.
1.18 lukem 181: .Tn NIS
182: (YP) domain of host.
1.9 lukem 183: If empty or not set, then the contents of
184: .Pa /etc/defaultdomain
185: (if it exists) are used.
1.74 martin 186: .It Sy force_down_interfaces
187: A space separated list of interface names.
1.75 wiz 188: These interfaces will be configured down when going from multiuser to singleuser
1.74 martin 189: mode or on system shutdown.
190: .Pp
191: This is important for some stateful interfaces, for example PPP over ISDN
192: connections that cost money by connection time or PPPoE interfaces which
1.75 wiz 193: have no direct means of noticing
1.74 martin 194: .Dq disconnect
195: events.
196: .Pp
197: All active
198: .Xr pppoe 4
199: and
200: .Xr ippp 4
201: interfaces will be automatically added to this list.
1.88 jmmv 202: .It Sy hostname
203: A string.
204: Name of host.
205: If empty or not set, then the contents of
206: .Pa /etc/myname
207: (if it exists) are used.
1.15 mrg 208: .El
1.49 wiz 209: .Ss Boottime file-system and swap configuration
1.35 lukem 210: .Bl -tag -width net_interfaces
1.57 lukem 211: .It Sy critical_filesystems_local
1.50 lukem 212: A string.
1.35 lukem 213: File systems mounted very early in the system boot before networking
214: services are available.
215: Usually
216: .Pa /var
217: is part of this, because it is needed by services such as
1.44 wiz 218: .Xr dhclient 8
1.35 lukem 219: which may be required to get the network operational.
1.57 lukem 220: .It Sy critical_filesystems_remote
1.50 lukem 221: A string.
1.35 lukem 222: File systems such as
1.15 mrg 223: .Pa /usr
1.35 lukem 224: that may require network services to be available to mount,
225: that must be available early in the system boot for general services to use.
1.82 martti 226: .It Sy fsck_flags
227: A string.
228: A file system is checked with
229: .Xr fsck 8
230: during boot before mounting it.
231: This option may be used to override the default command-line options
232: passed to the
233: .Xr fsck 8
234: program.
235: .Pp
236: When set to
237: .Fl y ,
238: .Xr fsck 8
239: assumes yes as the answer to all operator questions during file system checks.
240: This might be important with hosts where the administrator does not have
241: access to the console and an unsuccessful shutdown must not make the host
242: unbootable even if the file system checks would fail in preen mode.
1.15 mrg 243: .It Sy no_swap
1.50 lukem 244: .Sq YES
245: or
246: .Sq NO .
1.15 mrg 247: Set the
248: .Sy no_swap
1.35 lukem 249: variable to
250: .Sq YES
251: if you have configured your system with no swap on purpose.
1.50 lukem 252: If not set to
1.35 lukem 253: .Sq YES ,
254: and no swap devices
1.17 fair 255: are configured, the system will warn you.
1.56 lukem 256: .It Sy swapoff
257: .Sq YES
258: or
259: .Sq NO .
260: Remove block-type swap devices at shutdown time.
261: Useful if swapping onto RAIDframe devices.
1.9 lukem 262: .El
1.49 wiz 263: .Ss One-time actions to perform or programs to run on boot-up
1.11 mikel 264: .Bl -tag -width net_interfaces
1.88 jmmv 265: .It Sy accounting
1.35 lukem 266: .Sq YES
267: or
268: .Sq NO .
1.88 jmmv 269: Enables process accounting with
270: .Xr accton 8 .
271: Requires
272: .Pa /var/account/acct
273: to exist.
1.34 enami 274: .It Sy clear_tmp
1.35 lukem 275: .Sq YES
276: or
277: .Sq NO .
1.34 enami 278: Clear /tmp after reboot.
1.27 lukem 279: .It Sy dmesg
1.35 lukem 280: .Sq YES
281: or
282: .Sq NO .
1.27 lukem 283: Create
284: .Pa /var/run/dmesg.boot
285: from the output of
286: .Xr dmesg 8 .
287: Passes
288: .Sy dmesg_flags .
1.88 jmmv 289: .It Sy lkm
290: .Sq YES
291: or
292: .Sq NO .
293: Runs
294: .Pa /etc/rc.lkm .
295: .It Sy mixerctl
1.35 lukem 296: .Sq YES
297: or
298: .Sq NO .
1.88 jmmv 299: Read
300: .Xr mixerctl.conf 5
301: for how to set mixer values.
302: List in
303: .Sy mixerctl_mixers
304: the devices whose settings are to be saved at shutdown and
305: restored at start-up.
1.48 ad 306: .It Sy newsyslog
307: .Sq YES
308: or
309: .Sq NO .
310: Run
311: .Nm newsyslog
1.71 grant 312: to trim logfiles before syslogd starts.
313: Intended for laptop users.
1.50 lukem 314: Passes
315: .Sy newsyslog_flags .
1.88 jmmv 316: .It Sy savecore
317: .Sq YES
318: or
319: .Sq NO .
320: Runs the
321: .Xr savecore 8
322: utility.
323: Passes
324: .Sy savecore_flags .
1.89 atatat 325: The directory where crash dumps are stored is specified by
326: .Sy savecore_dir .
327: The default setting is
1.91 wiz 328: .Dq Pa /var/crash .
1.66 takemura 329: .It Sy tpctl
330: .Sq YES
331: or
332: .Sq NO .
333: Run
334: .Xr tpctl 8
335: to calibrate touch panel device.
336: Passes
337: .Sy tpctl_flags .
1.88 jmmv 338: .It Sy update_motd
339: .Sq YES
340: or
341: .Sq NO .
342: Updates the
343: .Nx
344: version string in the
345: .Pa /etc/motd
346: file to reflect the version of the running kernel.
347: See
348: .Xr motd 5 .
349: .It Sy veriexec
1.80 wiz 350: .Sq YES
351: or
352: .Sq NO .
1.95 elad 353: Load Veriexec fingerprints during startup.
1.80 wiz 354: Read
1.88 jmmv 355: .Xr veriexecctl 8
356: for more information.
1.85 uebayasi 357: .It Sy virecover
358: .Sq YES
359: or
360: .Sq NO .
1.86 uebayasi 361: Send notification mail to users if any recoverable files exist in
1.85 uebayasi 362: .Pa /var/tmp/vi.recover .
1.108 reed 363: Read
364: .Xr virecover 8
365: for more information.
1.19 mrg 366: .El
1.49 wiz 367: .Ss System security setting
1.35 lukem 368: .Bl -tag -width net_interfaces
1.19 mrg 369: .It Sy securelevel
1.34 enami 370: A number.
371: The system securelevel is set to the specified value early
1.19 mrg 372: in the boot process, before any external logins, or other programs
1.34 enami 373: that run users job, are started.
1.46 mjl 374: If set to nothing, the default action is taken, as described in
1.19 mrg 375: .Xr init 8 ,
1.46 mjl 376: which contains definitive information about the system securelevel.
1.55 mrg 377: Note that setting
378: .Sy securelevel
379: to 0 in
380: .Nm
381: will actually result in the system booting with securelevel set to 1, as
382: .Xr init 8
383: will raise the level when
1.58 lukem 384: .Xr rc 8
385: completes.
1.93 elad 386: .It Sy permit_nonalpha
387: Allow passwords to include non-alpha characters, usually to allow
1.94 wiz 388: NIS/YP netgroups.
1.95 elad 389: .It Sy veriexec_strict
390: A number.
391: Controls the strict level of Veriexec.
392: Level 0 is learning mode, used when building the signatures file.
393: It will only output messages but will not enforce anything.
394: Level 1 will only prevent access to files with a fingerprint
1.98 wiz 395: mismatch.
396: Level 2 will also deny writing to and removing of
1.95 elad 397: monitored files, as well as enforce access type (as specified in
1.98 wiz 398: the signatures file).
399: Level 3 will take a step further and prevent
1.95 elad 400: access to files that are not monitored.
401: .It Sy veriexec_verbose
402: A number.
403: Controls the verbosity of Veriexec.
404: Recommended operation is at level 0, verbose output (mostly used when
405: building the signatures file) is at level 1.
406: Level 2 is for debugging only and should not be used.
1.8 mikel 407: .El
1.49 wiz 408: .Ss Networking startup
1.11 mikel 409: .Bl -tag -width net_interfaces
1.88 jmmv 410: .It Sy altqd
411: .Sq YES
412: or
413: .Sq NO .
414: ALTQ configuration/monitoring daemon.
415: Passes
416: .Sy altqd_flags .
417: .It Sy auto_ifconfig
418: .Sq YES
419: or
420: .Sq NO .
421: Sets the
422: .Sy net_interfaces
423: variable (see below) to the output of
424: .Xr ifconfig 8
425: with the
426: .Dq Li -l
427: flag and suppresses warnings about interfaces in this list that
428: do not have an ifconfig file or variable.
429: .It Sy dhclient
430: .Sq YES
431: or
432: .Sq NO .
433: Set to
434: .Sq YES
435: to configure some or all network interfaces using
436: the DHCP client.
437: If you set
438: .Sy dhclient
439: to
440: .Sq YES ,
441: you must either have
442: .Pa /var
443: in
444: .Sy critical_filesystems_local ,
445: as part of
446: .Pa / ,
447: or direct the DHCP client to store the leases file on the root
448: file system by modifying the
449: .Sy dhclient_flags
450: variable.
451: You must not provide ifconfig information or ifaliases
452: information for any interface that is to be configured using the DHCP client.
453: Interface aliases can be set up in the DHCP client configuration
454: file if needed - see
455: .Xr dhclient.conf 5
456: for details.
457: .Pp
458: Passes
459: .Sy dhclient_flags
460: to the DHCP client.
461: See
462: .Xr dhclient 8
463: for complete documentation.
464: If you wish to configure all broadcast
465: network interfaces using the DHCP client, you can leave this blank.
466: To configure only specific interfaces, name the interfaces to be configured
467: on the command line.
468: .Pp
469: If you must run the DHCP client before mounting critical file systems,
470: then you should specify an alternate location for the DHCP client's lease
471: file in the
472: .Sy dhclient_flags
473: variable - for example, "-lf /tmp/dhclient.leases".
474: .It Sy flushroutes
475: .Sq YES
476: or
477: .Sq NO .
478: Flushes the route table on networking startup.
479: Useful when coming up to multiuser mode after going down to
480: single-user mode.
1.100 rpaulo 481: .It Sy hostapd
482: .Sq YES
483: or
484: .Sq NO .
485: Runs
1.101 wiz 486: .Xr hostapd 8 ,
1.100 rpaulo 487: the authenticator for IEEE 802.11 networks.
1.88 jmmv 488: .It Sy ifaliases_*
489: A string.
490: List of
491: .Sq Em "address netmask"
492: pairs to configure additional network addresses for the given
493: configured interface
494: .Dq *
495: (e.g.
496: .Sy ifaliases_le0 ) .
497: If
498: .Em netmask
499: is
500: .Dq - ,
501: then use the default netmask for the interface.
502: .Pp
503: .Sy ifaliases_*
504: covers limited cases only and considered unrecommended.
505: We recommend using
506: .Pa /etc/ifconfig.xxN
507: with multiple lines instead.
508: .It Sy ifwatchd
509: .Sq YES
510: or
511: .Sq NO .
512: Monitor dynamic interfaces and perform actions upon address changes.
513: Passes
514: .Sy ifwatchd_flags .
515: .It Sy ip6mode
516: A string.
517: An IPv6 node can be a router
518: .Pq nodes that forward packet for others
519: or a host
520: .Pq nodes that do not forward .
521: A host can be autoconfigured
522: based on the information advertised by adjacent IPv6 routers.
523: By setting
524: .Sy ip6mode
525: to
526: .Dq Li router ,
527: .Dq Li host ,
528: or
529: .Dq Li autohost ,
530: you can configure your node as a router,
531: a non-autoconfigured host, or an autoconfigured host.
532: Invalid values will be ignored, and the node will be configured as
533: a non-autoconfigured host.
534: You may want to check
535: .Sy rtsol
536: and
537: .Sy rtsold
538: as well, if you set the variable to
539: .Dq Li autohost .
1.96 rpaulo 540: .It Sy ip6uniquelocal
1.88 jmmv 541: .Sq YES
542: or
543: .Sq NO .
1.96 rpaulo 544: If
545: .Sy ip6mode
546: is equal to
547: .Dq Li router
548: and
549: .Sy ip6uniquelocal
550: is set to
551: .Sq NO
552: a reject route will be installed on boot to avoid misconfiguration relating
553: to unique-local addresses.
554: If set to
555: .Sq YES
1.97 wiz 556: the reject route won't be installed.
1.7 cjs 557: .It Sy ipfilter
1.35 lukem 558: .Sq YES
559: or
560: .Sq NO .
1.17 fair 561: Runs
1.7 cjs 562: .Xr ipf 8
1.11 mikel 563: to load in packet filter specifications from
1.7 cjs 564: .Pa /etc/ipf.conf
1.17 fair 565: at network boot time, before any interfaces are configured.
566: See
1.35 lukem 567: .Xr ipf.conf 5 .
1.52 martti 568: .It Sy ipfs
569: .Sq YES
570: or
571: .Sq NO .
572: Runs
573: .Xr ipfs 8
574: to save and restore information for ipnat and ipfilter state tables.
575: The information is stored in
576: .Pa /var/db/ipf/ipstate.ipf
577: and
578: .Pa /var/db/ipf/ipnat.ipf .
579: Passes
580: .Sy ipfs_flags .
1.35 lukem 581: .It Sy ipmon
582: .Sq YES
583: or
584: .Sq NO .
585: Runs
586: .Xr ipmon 8
587: to read
588: .Xr ipf 8
589: packet log information and log it to a file or the system log.
590: Passes
591: .Sy ipmon_flags .
1.70 grant 592: .It Sy ipmon_flags
1.73 wiz 593: A string.
594: Specifies arguments to supply to
1.72 grant 595: .Xr ipmon 8 .
596: Defaults to
597: .Dq Li -ns .
598: A typical example would be
1.70 grant 599: .Dq Fl nD Pa /var/log/ipflog
600: to have
601: .Xr ipmon 8
602: log directly to a file bypassing
603: .Xr syslogd 8 .
1.72 grant 604: If the
605: .Dq -D
606: argument is used, remember to modify
1.70 grant 607: .Pa /etc/newsyslog.conf
1.72 grant 608: accordingly; for example:
1.70 grant 609: .Bd -literal
610: /var/log/ipflog 640 10 100 * Z /var/run/ipmon.pid
611: .Ed
1.88 jmmv 612: .It Sy ipnat
1.50 lukem 613: .Sq YES
614: or
615: .Sq NO .
616: Runs
1.88 jmmv 617: .Xr ipnat 8
618: to load in the IP network address translation (NAT) rules from
619: .Pa /etc/ipnat.conf
620: at network boot time, before any interfaces are configured.
621: See
622: .Xr ipnat.conf 5 .
623: .It Sy ipsec
1.35 lukem 624: .Sq YES
625: or
626: .Sq NO .
1.88 jmmv 627: Runs
628: .Xr setkey 8
629: to load in IPsec manual keys and policies from
630: .Pa /etc/ipsec.conf
631: at network boot time, before any interfaces are configured.
1.10 cjs 632: .It Sy net_interfaces
1.50 lukem 633: A string.
1.10 cjs 634: The list of network interfaces to be configured at boot time.
1.42 itojun 635: For each interface "xxN", the system first looks for ifconfig
1.10 cjs 636: parameters in
1.42 itojun 637: .Pa /etc/ifconfig.xxN
1.10 cjs 638: and then in the variable
1.42 itojun 639: .Sy ifconfig_xxN .
1.10 cjs 640: The contents of the file or the variable are handed to ifconfig
1.17 fair 641: after the interface name.
642: If
1.10 cjs 643: .Sy auto_ifconfig
644: is set to "NO" and neither the file nor the variable is found,
645: a warning is printed.
1.42 itojun 646: Refer to
647: .Xr ifconfig.if 5
648: for more details on
649: .Pa /etc/ifconfig.xxN .
1.10 cjs 650: .It Sy ntpdate
1.35 lukem 651: .Sq YES
652: or
653: .Sq NO .
1.17 fair 654: Runs
1.10 cjs 655: .Xr ntpdate 8
656: to set the system time from one of the hosts in
657: .Sy ntpdate_hosts .
658: If
659: .Sy ntpdate_hosts
660: is empty, it will attempt to find a list of hosts in
661: .Pa /etc/ntp.conf .
1.50 lukem 662: Passes
663: .Sy ntpdate_flags .
1.14 mrg 664: .It Sy ppp_peers
1.50 lukem 665: A string.
1.14 mrg 666: If
667: .Sy ppp_peers
668: is not empty, then
1.50 lukem 669: .Pa /etc/rc.d/ppp
1.14 mrg 670: will check each word in
671: .Sy ppp_peers
1.50 lukem 672: for a corresponding ppp configuration file in
1.14 mrg 673: .Pa /etc/ppp/peers
674: and will call
675: .Xr pppd 8
676: with the
677: .Dq call Sy peer
678: option.
1.88 jmmv 679: .It Sy racoon
1.41 itojun 680: .Sq YES
681: or
682: .Sq NO .
1.88 jmmv 683: Runs
684: .Xr racoon 8 ,
685: the IKE (ISAKMP/Oakley) key management daemon.
1.24 itojun 686: .It Sy rtsol
1.35 lukem 687: .Sq YES
688: or
689: .Sq NO .
1.24 itojun 690: Run
691: .Xr rtsol 8 ,
1.60 lukem 692: router solicitation command for IPv6 hosts.
693: On nomadic hosts like notebook computers, you may want to enable
1.25 itojun 694: .Sy rtsold
695: as well.
1.24 itojun 696: Passes
697: .Sy rtsol_flags .
1.60 lukem 698: This is only for autoconfigured IPv6 hosts, so set
1.29 itojun 699: .Sy ip6mode
1.60 lukem 700: to
701: .Dq Li autohost
1.111 ! wiz 702: if you use it.
1.110 rpaulo 703: .It Sy wpa_supplicant
704: .Sq YES
705: or
706: .Sq NO .
707: Run
708: .Xr wpa_supplicant 8 ,
709: WPA/802.11i Supplicant for wireless network devices.
1.6 perry 710: .El
1.49 wiz 711: .Ss Daemons required by other daemons
1.11 mikel 712: .Bl -tag -width net_interfaces
1.10 cjs 713: .It Sy inetd
1.35 lukem 714: .Sq YES
715: or
716: .Sq NO .
1.17 fair 717: Runs the
1.10 cjs 718: .Xr inetd 8
1.11 mikel 719: daemon to start network server processes (as listed in
1.5 cjs 720: .Pa /etc/inetd.conf )
1.17 fair 721: as necessary.
722: Passes
1.10 cjs 723: .Sy inetd_flags .
724: The
1.40 lukem 725: .Dq Li -l
1.10 cjs 726: flag turns on libwrap connection logging.
1.34 enami 727: .It Sy rpcbind
1.35 lukem 728: .Sq YES
729: or
730: .Sq NO .
1.17 fair 731: The
1.34 enami 732: .Xr rpcbind 8
1.8 mikel 733: daemon is required for any
734: .Xr rpc 3
1.17 fair 735: services.
1.18 lukem 736: These include NFS,
737: .Tn NIS ,
1.5 cjs 738: .Xr bootparamd 8 ,
739: .Xr rstatd 8 ,
740: .Xr rusersd 8 ,
741: and
742: .Xr rwalld 8 .
1.50 lukem 743: Passes
744: .Sy rpcbind_flags .
1.5 cjs 745: .El
1.49 wiz 746: .Ss Commonly used daemons
1.11 mikel 747: .Bl -tag -width net_interfaces
1.88 jmmv 748: .It Sy cron
1.35 lukem 749: .Sq YES
750: or
751: .Sq NO .
1.88 jmmv 752: Run
753: .Xr cron 8 .
754: .It Sy lpd
1.35 lukem 755: .Sq YES
756: or
757: .Sq NO .
1.88 jmmv 758: Runs
759: .Xr lpd 8
760: and passes
761: .Sy lpd_flags .
762: The
763: .Dq Li -l
764: flag will turn on extra logging.
1.10 cjs 765: .It Sy named
1.35 lukem 766: .Sq YES
767: or
768: .Sq NO .
1.17 fair 769: Runs
1.10 cjs 770: .Xr named 8
771: and passes
772: .Sy named_flags .
1.50 lukem 773: .It Sy named_chrootdir
774: A string.
775: If non-blank and
776: .Sy named
777: is
778: .Sq YES ,
779: run
780: .Xr named 8
781: as the unprivileged user and group
782: .Sq named ,
783: .Xr chroot 2 Ns ed
784: to
785: .Sy named_chrootdir .
1.81 wiz 786: .Sy named_chrootdir Ns Pa /var/run/log
1.50 lukem 787: will be added to the list of log sockets that
788: .Xr syslogd 8
789: listens to.
1.34 enami 790: .It Sy ntpd
1.35 lukem 791: .Sq YES
792: or
793: .Sq NO .
1.17 fair 794: Runs
1.34 enami 795: .Xr ntpd 8
1.10 cjs 796: and passes
1.34 enami 797: .Sy ntpd_flags .
1.50 lukem 798: .It Sy ntpd_chrootdir
799: A string.
800: If non-blank and
801: .Sy ntpd
802: is
803: .Sq YES ,
804: run
805: .Xr ntpd 8
806: as the unprivileged user and group
807: .Sq ntpd ,
808: .Xr chroot 2 Ns ed
809: to
810: .Sy ntpd_chrootdir .
1.81 wiz 811: .Sy ntpd_chrootdir Ns Pa /var/run/log
1.50 lukem 812: will be added to the list of log sockets that
813: .Xr syslogd 8
814: listens to.
1.62 lukem 815: This option requires that the kernel has
816: .Dl pseudo-device clockctl
1.63 lukem 817: compiled in, and that
818: .Pa /dev/clockctl
819: is present.
1.88 jmmv 820: .It Sy postfix
821: .Sq YES
822: or
823: .Sq NO .
824: Starts
825: .Xr postfix 1
826: mail system.
827: .It Sy sshd
1.35 lukem 828: .Sq YES
829: or
830: .Sq NO .
1.88 jmmv 831: Runs
832: .Xr sshd 8
833: and passes
834: .Sy sshd_flags .
835: .It Sy syslogd
1.35 lukem 836: .Sq YES
837: or
838: .Sq NO .
1.17 fair 839: Runs
1.88 jmmv 840: .Xr syslogd 8
1.10 cjs 841: and passes
1.88 jmmv 842: .Sy syslogd_flags .
843: .It Sy timed
1.36 lukem 844: .Sq YES
845: or
846: .Sq NO .
847: Runs
1.88 jmmv 848: .Xr timed 8
1.36 lukem 849: and passes
1.88 jmmv 850: .Sy timed_flags .
851: The
852: .Dq Li -M
853: option allows
854: .Xr timed 8
855: to be a master time source as well as a slave.
856: If you are also running
857: .Xr ntpd 8 ,
858: only one machine running both should have the
859: .Dq Li -M
860: flag given to
861: .Xr timed 8 .
1.5 cjs 862: .El
1.49 wiz 863: .Ss Routing daemons
1.11 mikel 864: .Bl -tag -width net_interfaces
1.10 cjs 865: .It Sy mrouted
1.35 lukem 866: .Sq YES
867: or
868: .Sq NO .
1.17 fair 869: Runs
1.10 cjs 870: .Xr mrouted 8 ,
1.17 fair 871: the DVMRP multicast routing protocol daemon.
872: Passes
1.10 cjs 873: .Sy mrouted_flags .
1.24 itojun 874: .It Sy route6d
1.35 lukem 875: .Sq YES
876: or
877: .Sq NO .
1.24 itojun 878: Runs
879: .Xr route6d 8 ,
880: the RIPng routing protocol daemon for IPv6.
881: Passes
882: .Sy route6d_flags .
1.88 jmmv 883: .It Sy routed
884: .Sq YES
885: or
886: .Sq NO .
887: Runs
888: .Xr routed 8 ,
889: the RIP routing protocol daemon.
890: Passes
891: .Sy routed_flags .
892: .\" This should be
893: .\" .Sq NO
894: .\" if
895: .\" .Sy gated
896: .\" is
897: .\" .Sq YES .
1.25 itojun 898: .It Sy rtsold
1.35 lukem 899: .Sq YES
900: or
901: .Sq NO .
1.25 itojun 902: Runs
903: .Xr rtsold 8 ,
904: the IPv6 router solicitation daemon.
905: .Xr rtsold 8
1.60 lukem 906: periodically transmits router solicitation packets
907: to find IPv6 routers on the network.
908: This configuration is mainly for nomadic hosts like notebook computers.
909: Stationary hosts should work fine with just
910: .Sy rtsol .
1.25 itojun 911: Passes
912: .Sy rtsold_flags .
1.60 lukem 913: This is only for autoconfigured IPv6 hosts, so set
1.29 itojun 914: .Sy ip6mode
1.60 lukem 915: to
916: .Dq Li autohost
917: if you use it.
1.5 cjs 918: .El
1.49 wiz 919: .Ss Daemons used to boot other hosts over a network
1.11 mikel 920: .Bl -tag -width net_interfaces
1.10 cjs 921: .It Sy bootparamd
1.35 lukem 922: .Sq YES
923: or
924: .Sq NO .
1.17 fair 925: Runs
1.10 cjs 926: .Xr bootparamd 8 ,
927: the boot parameter server, with
1.11 mikel 928: .Sy bootparamd_flags
1.17 fair 929: as options.
930: Used to boot
1.8 mikel 931: .Nx
1.17 fair 932: and
933: .Tn "SunOS 4.x"
934: systems.
1.10 cjs 935: .It Sy dhcpd
1.35 lukem 936: .Sq YES
937: or
938: .Sq NO .
1.17 fair 939: Runs
1.10 cjs 940: .Xr dhcpd 8 ,
1.17 fair 941: the Dynamic Host Configuration Protocol (DHCP) daemon,
942: for assigning IP addresses to hosts and passing boot information.
943: Passes
1.10 cjs 944: .Sy dhcpd_flags .
1.35 lukem 945: .It Sy dhcrelay
946: .Sq YES
947: or
948: .Sq NO .
949: Runs
950: .Xr dhcrelay 8 .
951: Passes
952: .Sy dhcrelay_flags .
1.10 cjs 953: .It Sy mopd
1.35 lukem 954: .Sq YES
955: or
956: .Sq NO .
1.17 fair 957: Runs
1.10 cjs 958: .Xr mopd 8 ,
1.17 fair 959: the
960: .Tn DEC
961: .Tn MOP
962: protocol daemon; used for booting
963: .Tn VAX
964: and other
965: .Tn DEC
966: machines.
1.10 cjs 967: Passes
968: .Sy mopd_flags .
1.50 lukem 969: .It Sy ndbootd
970: .Sq YES
971: or
972: .Sq NO .
973: Runs
974: .Xr ndbootd 8 ,
975: the Sun Network Disk (ND) Protocol server.
976: Passes
977: .Sy ndbootd_flags .
1.88 jmmv 978: .It Sy rarpd
979: .Sq YES
980: or
981: .Sq NO .
982: Runs
983: .Xr rarpd 8 ,
984: the reverse ARP daemon, often used to boot
985: .Nx
986: and Sun workstations.
987: Passes
988: .Sy rarpd_flags .
989: .It Sy rbootd
990: .Sq YES
991: or
992: .Sq NO .
993: Runs
994: .Xr rbootd 8 ,
995: the
996: .Tn HP
997: boot protocol daemon; used for booting
998: .Tn HP
999: workstations.
1000: Passes
1001: .Sy rbootd_flags .
1.24 itojun 1002: .It Sy rtadvd
1.35 lukem 1003: .Sq YES
1004: or
1005: .Sq NO .
1.24 itojun 1006: Runs
1007: .Xr rtadvd 8 ,
1008: the IPv6 router advertisement daemon, which is used to advertise
1009: information about the subnet to IPv6 end hosts.
1010: Passes
1011: .Sy rtadvd_flags .
1.60 lukem 1012: This is only for IPv6 routers, so set
1013: .Sy ip6mode
1.35 lukem 1014: to
1.60 lukem 1015: .Dq Li router
1.35 lukem 1016: if you use it.
1017: .El
1.49 wiz 1018: .Ss X Window System daemons
1.35 lukem 1019: .Bl -tag -width net_interfaces
1020: .It Sy xdm
1021: .Sq YES
1022: or
1023: .Sq NO .
1024: Runs the
1025: .Xr xdm 1
1026: X display manager.
1027: These X daemons are available only with the optional X distribution of
1028: .Nx .
1.88 jmmv 1029: .It Sy xfs
1030: .Sq YES
1031: or
1032: .Sq NO .
1033: Runs the
1034: .Xr xfs 1
1035: X11 font server, which supplies local X font files to X terminals.
1.5 cjs 1036: .El
1.49 wiz 1037: .Ss NIS (YP) daemons
1.11 mikel 1038: .Bl -tag -width net_interfaces
1.10 cjs 1039: .It Sy ypbind
1.35 lukem 1040: .Sq YES
1041: or
1042: .Sq NO .
1.17 fair 1043: Runs
1.10 cjs 1044: .Xr ypbind 8 ,
1.18 lukem 1045: which lets
1046: .Tn NIS
1047: (YP) clients use information from a
1048: .Tn NIS
1049: server.
1.17 fair 1050: Passes
1.10 cjs 1051: .Sy ypbind_flags .
1.88 jmmv 1052: .It Sy yppasswdd
1053: .Sq YES
1054: or
1055: .Sq NO .
1056: Runs
1057: .Xr yppasswdd 8 ,
1058: which allows remote
1059: .Tn NIS
1060: users to update password on master server.
1061: Passes
1062: .Sy yppasswdd_flags .
1.10 cjs 1063: .It Sy ypserv
1.35 lukem 1064: .Sq YES
1065: or
1066: .Sq NO .
1.17 fair 1067: Runs
1.10 cjs 1068: .Xr ypserv 8 ,
1.18 lukem 1069: the
1070: .Tn NIS
1071: (YP) server for distributing information from certain files in
1.5 cjs 1072: .Pa /etc .
1.10 cjs 1073: Passes
1074: .Sy ypserv_flags .
1075: The
1.40 lukem 1076: .Dq Li -d
1.10 cjs 1077: flag causes it to use DNS for lookups in
1078: .Pa /etc/hosts
1079: that fail.
1.88 jmmv 1080: .El
1081: .Ss NFS daemons and parameters
1082: .Bl -tag -width net_interfaces
1083: .It Sy amd
1084: .Sq YES
1085: or
1086: .Sq NO .
1087: Runs
1088: .Xr amd 8 ,
1089: the automounter daemon, which automatically mounts NFS file systems
1090: whenever a file or directory within that file system is accessed.
1091: Passes
1092: .Sy amd_flags .
1093: .It Sy amd_dir
1094: A string.
1095: The
1096: .Xr amd 8
1097: mount directory.
1098: Used only if
1099: .Sy amd
1100: is set to
1101: .Sq YES .
1102: .It Sy lockd
1.35 lukem 1103: .Sq YES
1104: or
1105: .Sq NO .
1.17 fair 1106: Runs
1.88 jmmv 1107: .Xr rpc.lockd 8
1108: if
1109: .Sy nfs_server
1110: and/or
1111: .Sy nfs_client
1112: are set to
1113: .Sq YES .
1.17 fair 1114: Passes
1.88 jmmv 1115: .Sy lockd_flags .
1.47 lukem 1116: .It Sy mountd
1117: .Sq YES
1118: or
1119: .Sq NO .
1120: Runs
1121: .Xr mountd 8
1122: and passes
1123: .Sy mountd_flags .
1.5 cjs 1124: .It Sy nfs_client
1.35 lukem 1125: .Sq YES
1126: or
1127: .Sq NO .
1.34 enami 1128: The number of local NFS asynchronous I/O server is now controlled via
1129: .Xr sysctl 8 .
1.1 mrg 1130: .It Sy nfs_server
1.35 lukem 1131: .Sq YES
1132: or
1133: .Sq NO .
1.17 fair 1134: Sets up a host to be a NFS server by running
1.47 lukem 1135: .Xr nfsd 8
1.17 fair 1136: and passing
1.47 lukem 1137: .Sy nfsd_flags .
1.10 cjs 1138: .It Sy statd
1.35 lukem 1139: .Sq YES
1140: or
1141: .Sq NO .
1.17 fair 1142: Runs
1.10 cjs 1143: .Xr rpc.statd 8 ,
1144: a status monitoring daemon used when
1.17 fair 1145: .Xr rpc.lockd 8
1.50 lukem 1146: is running, if
1.3 scottr 1147: .Sy nfs_server
1.50 lukem 1148: and/or
1.3 scottr 1149: .Sy nfs_client
1.50 lukem 1150: are set to
1.35 lukem 1151: .Sq YES .
1.17 fair 1152: Passes
1.10 cjs 1153: .Sy statd_flags .
1.13 jonathan 1154: .El
1.104 wiz 1155: .Ss Bluetooth configuration and daemons
1.102 gdamore 1156: .Bl -tag -width net_interfaces
1157: .It Sy btconfig
1158: .Sq YES
1159: or
1160: .Sq NO .
1.104 wiz 1161: Configure bluetooth devices.
1162: If the
1.102 gdamore 1163: .Sy btconfig_devices
1.104 wiz 1164: variable below is not specified, all devices known to the system
1165: will be configured.
1166: For each device, configuration arguments are first looked for
1.102 gdamore 1167: in the
1168: .Sy btconfig_{dev}
1169: variable, otherwise the value of the
1170: .Sy btconfig_args
1171: variable will be used, and if that is not specified the default string is
1172: .Sq enable .
1173: .It Sy btconfig_devices
1174: An optional space separated list of bluetooth devices to be configured at
1175: boot time.
1176: .It Sy btconfig_args
1177: An optional string, containing default arguments for bluetooth devices to
1178: be configured.
1.105 plunky 1179: .It Sy btdevctl
1.103 tron 1180: .Sq YES
1181: or
1182: .Sq NO .
1.107 plunky 1183: Configure Bluetooth devices as listed in the configuration file
1184: .Pa /etc/bluetooth/btdevctl.conf .
1.102 gdamore 1185: .It Sy bthcid
1186: .Sq YES
1187: or
1188: .Sq NO .
1189: Runs
1190: .Xr bthcid 8 ,
1191: the Bluetooth HCI daemon, which manages link keys and PIN codes for
1.104 wiz 1192: Bluetooth links.
1193: Passes
1.102 gdamore 1194: .Sy bthcid_flags .
1195: .It Sy sdpd
1196: .Sq YES
1197: or
1198: .Sq NO .
1.104 wiz 1199: Runs the Service Discovery Profile daemon,
1.102 gdamore 1200: .Xr sdpd 8 .
1201: .It Sy sdpd_control
1202: Optional string specifying the path to the
1203: .Xr sdpd 8
1.104 wiz 1204: control socket.
1205: Defaults to
1.102 gdamore 1206: .Pa /var/run/sdp .
1207: .It Sy sdpd_username
1208: Optional string specifying the username that
1209: .Xr sdpd 8
1.104 wiz 1210: will run as after initialisation.
1211: Defaults to
1.102 gdamore 1212: .Sq nobody .
1213: .It Sy sdpd_groupname
1214: Optional string specifying the groupname that
1215: .Xr sdpd 8
1.104 wiz 1216: will run as after initialisation.
1217: Defaults to
1.102 gdamore 1218: .Sq nobody .
1219: .El
1.49 wiz 1220: .Ss Other daemons
1.11 mikel 1221: .Bl -tag -width net_interfaces
1.50 lukem 1222: .It Sy isdnd
1223: .Sq YES
1224: or
1225: .Sq NO .
1226: Runs
1227: .Xr isdnd 8 ,
1228: the isdn4bsd ISDN connection management daemon.
1229: Passes
1230: .Sy isdnd_flags .
1231: .It Sy isdn_autoupdown
1232: .Sq YES
1233: or
1234: .Sq NO .
1235: Set all configured ISDN interfaces to
1236: .Dq up .
1237: If
1238: .Sy isdn_interfaces
1239: is not blank, only the listed interfaces will be modified.
1240: Used only if
1241: .Sy isdnd
1242: is set to
1243: .Sq YES .
1.88 jmmv 1244: .It Sy kdc
1245: .Sq YES
1246: or
1247: .Sq NO .
1248: Runs the
1249: .Xr kdc 8
1250: Kerberos v4 and v5 server.
1251: This should be run on Kerberos master and slave servers.
1.5 cjs 1252: .It Sy rwhod
1.35 lukem 1253: .Sq YES
1254: or
1255: .Sq NO .
1.17 fair 1256: Runs
1.11 mikel 1257: .Xr rwhod 8
1.10 cjs 1258: to support the
1.11 mikel 1259: .Xr rwho 1
1.17 fair 1260: and
1261: .Xr ruptime 1
1262: commands.
1.35 lukem 1263: .El
1.49 wiz 1264: .Ss Hardware daemons
1.35 lukem 1265: .Bl -tag -width net_interfaces
1266: .It Sy apmd
1267: .Sq YES
1268: or
1269: .Sq NO .
1270: Runs
1271: .Xr apmd 8
1272: and passes
1273: .Sy apmd_flags .
1.100 rpaulo 1274: .It Sy irdaattach
1275: .Sq YES
1276: or
1277: .Sq NO .
1278: Runs
1279: .Xr irdaattach 8
1280: and passes
1281: .Sy irdaattach_flags .
1.88 jmmv 1282: .It Sy moused
1283: .Sq YES
1284: or
1285: .Sq NO .
1286: Runs
1287: .Xr moused 8 ,
1288: to pass serial mouse data to the wscons mouse mux.
1289: Passes
1290: .Sy moused_flags .
1.50 lukem 1291: .It Sy poffd
1292: .Sq YES
1293: or
1294: .Sq NO .
1295: Runs
1296: .Xr poffd 8
1297: x68k shutdown daemon
1298: (only for
1.77 wiz 1299: .Nx Ns /x68k ) .
1.50 lukem 1300: Passes
1301: .Sy poffd_flags .
1.16 mrg 1302: .It Sy screenblank
1.35 lukem 1303: .Sq YES
1304: or
1305: .Sq NO .
1.17 fair 1306: Runs
1307: .Xr screenblank 1
1.16 mrg 1308: and passes
1309: .Sy screenblank_flags .
1.35 lukem 1310: .It Sy wscons
1311: .Sq YES
1312: or
1313: .Sq NO .
1314: Configures the
1315: .Xr wscons 4
1316: console driver, from the configuration file
1317: .Pa /etc/wscons.conf .
1.69 wiz 1318: .It Sy wsmoused
1319: .Sq YES
1320: or
1321: .Sq NO .
1322: Runs
1323: .Xr wsmoused 8 ,
1324: to provide copy and paste text support in wscons displays.
1325: Passes
1326: .Sy wsmoused_flags .
1.1 mrg 1327: .El
1328: .Sh FILES
1.39 lukem 1329: .Bl -tag -width /etc/defaults/rc.conf -compact
1330: .It Pa /etc/rc.conf
1331: The file
1332: .Nm
1333: resides in
1334: .Pa /etc .
1335: .It Pa /etc/defaults/rc.conf
1336: Default settings for
1.76 wiz 1337: .Nm ,
1.58 lukem 1338: sourced by
1339: .Nm
1340: before the end-user configuration section.
1341: .It Pa /etc/rc.conf.d/ Ns Ar foo
1342: .Ar foo Ns No -specific
1343: .Nm
1344: overrides.
1.39 lukem 1345: .El
1.1 mrg 1346: .Sh SEE ALSO
1.8 mikel 1347: .Xr boot 8 ,
1.34 enami 1348: .Xr rc 8 ,
1.88 jmmv 1349: .Xr rc.d 8 ,
1.64 atatat 1350: .Xr rc.subr 8 ,
1.88 jmmv 1351: .Xr rcorder 8
1.1 mrg 1352: .Sh HISTORY
1353: The
1354: .Nm
1355: file appeared in
1356: .Nx 1.3 .
CVSweb <webmaster@jp.NetBSD.org>
![[BACK]](/icons/back.gif){kind=icon}
Return to rc.conf.5 CVS log ![[TXT]](/icons/text.gif){kind=icon}
![[DIR]](/icons/dir.gif){kind=icon}
Up to [cvs.NetBSD.org] / src / share / man / man5