]> CyberLeo.Net >> Repos - FreeBSD/stable/8.git/blob - etc/defaults/periodic.conf
Document SA-15:11.bind.
[FreeBSD/stable/8.git] / etc / defaults / periodic.conf
1 #!/bin/sh
2 #
3 # This is defaults/periodic.conf - a file full of useful variables that
4 # you can set to change the default behaviour of periodic jobs on your
5 # system.  You should not edit this file!  Put any overrides into one of the
6 # $periodic_conf_files instead and you will be able to update these defaults
7 # later without spamming your local configuration information.
8 #
9 # The $periodic_conf_files files should only contain values which override
10 # values set in this file.  This eases the upgrade path when defaults
11 # are changed and new features are added.
12 #
13 # For a more detailed explanation of all the periodic.conf variables, please
14 # refer to the periodic.conf(5) manual page.
15 #
16 # $FreeBSD$
17 #
18
19 # What files override these defaults ?
20 periodic_conf_files="/etc/periodic.conf /etc/periodic.conf.local"
21
22 # periodic script dirs
23 local_periodic="/usr/local/etc/periodic"
24
25
26 # Daily options
27
28 # These options are used by periodic(8) itself to determine what to do
29 # with the output of the sub-programs that are run, and where to send
30 # that output.  $daily_output might be set to /var/log/daily.log if you
31 # wish to log the daily output and have the files rotated by newsyslog(8)
32 #
33 daily_output="root"                                     # user or /file
34 daily_show_success="YES"                                # scripts returning 0
35 daily_show_info="YES"                                   # scripts returning 1
36 daily_show_badconfig="NO"                               # scripts returning 2
37
38 # 100.clean-disks
39 daily_clean_disks_enable="NO"                           # Delete files daily
40 daily_clean_disks_files="[#,]* .#* a.out *.core *.CKP .emacs_[0-9]*"
41 daily_clean_disks_days=3                                # If older than this
42 daily_clean_disks_verbose="YES"                         # Mention files deleted
43
44 # 110.clean-tmps
45 daily_clean_tmps_enable="NO"                            # Delete stuff daily
46 daily_clean_tmps_dirs="/tmp"                            # Delete under here
47 daily_clean_tmps_days="3"                               # If not accessed for
48 daily_clean_tmps_ignore=".X*-lock .X11-unix .ICE-unix .font-unix .XIM-unix"
49 daily_clean_tmps_ignore="$daily_clean_tmps_ignore quota.user quota.group .snap"
50                                                         # Don't delete these
51 daily_clean_tmps_verbose="YES"                          # Mention files deleted
52
53 # 120.clean-preserve
54 daily_clean_preserve_enable="YES"                       # Delete files daily
55 daily_clean_preserve_days=7                             # If not modified for
56 daily_clean_preserve_verbose="YES"                      # Mention files deleted
57
58 # 130.clean-msgs
59 daily_clean_msgs_enable="YES"                           # Delete msgs daily
60 daily_clean_msgs_days=                                  # If not modified for
61
62 # 140.clean-rwho
63 daily_clean_rwho_enable="YES"                           # Delete rwho daily
64 daily_clean_rwho_days=7                                 # If not modified for
65 daily_clean_rwho_verbose="YES"                          # Mention files deleted
66
67 # 150.clean-hoststat
68 daily_clean_hoststat_enable="YES"                       # Purge sendmail host
69                                                         # status cache daily
70
71 # 200.backup-passwd
72 daily_backup_passwd_enable="YES"                        # Backup passwd & group
73
74 # 210.backup-aliases
75 daily_backup_aliases_enable="YES"                       # Backup mail aliases
76
77 # 220.backup-pkgdb
78 daily_backup_pkgdb_enable="YES"                         # Backup /var/db/pkg
79 daily_backup_pkgdb_dir="/var/backups"
80
81 # 300.calendar
82 daily_calendar_enable="NO"                              # Run calendar -a
83
84 # 310.accounting
85 daily_accounting_enable="YES"                           # Rotate acct files
86 daily_accounting_compress="NO"                          # Gzip rotated files
87 daily_accounting_flags=-q                               # Flags to /usr/sbin/sa
88 daily_accounting_save=3                                 # How many files to save
89
90 # 330.news
91 daily_news_expire_enable="YES"                          # Run news.expire
92
93 # 400.status-disks
94 daily_status_disks_enable="YES"                         # Check disk status
95 daily_status_disks_df_flags="-l -h"             # df(1) flags for check
96
97 # 404.status-zfs
98 daily_status_zfs_enable="NO"                            # Check ZFS
99 daily_status_zfs_zpool_list_enable="YES"                # List ZFS pools
100
101 # 405.status-ata_raid
102 daily_status_ata_raid_enable="NO"                       # Check ATA raid status
103
104 # 406.status-gmirror
105 daily_status_gmirror_enable="NO"                        # Check gmirror(8)
106
107 # 407.status-graid3
108 daily_status_graid3_enable="NO"                         # Check graid3(8)
109
110 # 408.status-gstripe
111 daily_status_gstripe_enable="NO"                        # Check gstripe(8)
112
113 # 409.status-gconcat
114 daily_status_gconcat_enable="NO"                        # Check gconcat(8)
115
116 # 420.status-network
117 daily_status_network_enable="YES"                       # Check network status
118 daily_status_network_usedns="YES"                       # DNS lookups are ok
119
120 # 430.status-rwho
121 daily_status_rwho_enable="YES"                          # Check system status
122
123 # 440.status-mailq
124 daily_status_mailq_enable="YES"                         # Check mail status
125 daily_status_mailq_shorten="NO"                         # Shorten output
126 daily_status_include_submit_mailq="YES"                 # Also submit queue
127
128 # 450.status-security
129 daily_status_security_enable="YES"                      # Security check
130 # See "Security options" below for more options
131
132 # 460.status-mail-rejects
133 daily_status_mail_rejects_enable="YES"                  # Check mail rejects
134 daily_status_mail_rejects_logs=3                        # How many logs to check
135 daily_status_mail_rejects_shorten="NO"                  # Shorten output
136
137 # 470.status-named
138 daily_status_named_enable="YES"
139 daily_status_named_usedns="YES"                         # DNS lookups are ok
140
141 # 480.status-ntpd
142 daily_status_ntpd_enable="NO"                           # Check NTP status
143
144 # 500.queuerun
145 daily_queuerun_enable="YES"                             # Run mail queue
146 daily_submit_queuerun="YES"                             # Also submit queue
147
148 # 800.scrub-zfs
149 daily_scrub_zfs_enable="NO"
150 daily_scrub_zfs_pools=""                        # empty string selects all pools
151 daily_scrub_zfs_default_threshold="35"          # days between scrubs
152 #daily_scrub_zfs_${poolname}_threshold="35"     # pool specific threshold
153
154 # 999.local
155 daily_local="/etc/daily.local"                          # Local scripts
156
157
158 # Security options
159
160 # These options are used by the security periodic(8) scripts spawned in
161 # 450.status-security above.
162 daily_status_security_inline="NO"                       # Run inline ?
163 daily_status_security_output="root"                     # user or /file
164 daily_status_security_noamd="NO"                        # Don't check amd mounts
165 daily_status_security_logdir="/var/log"                 # Directory for logs
166 daily_status_security_diff_flags="-b -u"                # flags for diff output
167
168 # 100.chksetuid
169 daily_status_security_chksetuid_enable="YES"
170
171 # 110.neggrpperm
172 daily_status_security_neggrpperm_enable="NO"
173
174 # 200.chkmounts
175 daily_status_security_chkmounts_enable="YES"
176 #daily_status_security_chkmounts_ignore="^amd:"         # Don't check matching
177                                                         # FS types
178
179 # 300.chkuid0
180 daily_status_security_chkuid0_enable="YES"
181
182 # 400.passwdless
183 daily_status_security_passwdless_enable="YES"
184
185 # 410.logincheck
186 daily_status_security_logincheck_enable="YES"
187
188 # 460.chkportsum
189 daily_status_security_chkportsum_enable="NO"    # Check ports w/ wrong checksum
190
191 # 500.ipfwdenied
192 daily_status_security_ipfwdenied_enable="YES"
193
194 # 510.ipfdenied
195 daily_status_security_ipfdenied_enable="YES"
196
197 # 520.pfdenied
198 daily_status_security_pfdenied_enable="YES"
199
200 # 550.ipfwlimit
201 daily_status_security_ipfwlimit_enable="YES"
202
203 # 610.ipf6denied
204 daily_status_security_ipf6denied_enable="YES"
205
206 # 700.kernelmsg
207 daily_status_security_kernelmsg_enable="YES"
208
209 # 800.loginfail
210 daily_status_security_loginfail_enable="YES"
211
212 # 900.tcpwrap
213 daily_status_security_tcpwrap_enable="YES"
214
215
216 # Weekly options
217
218 # These options are used by periodic(8) itself to determine what to do
219 # with the output of the sub-programs that are run, and where to send
220 # that output.  $weekly_output might be set to /var/log/weekly.log if you
221 # wish to log the weekly output and have the files rotated by newsyslog(8)
222 #
223 weekly_output="root"                                    # user or /file
224 weekly_show_success="YES"                               # scripts returning 0
225 weekly_show_info="YES"                                  # scripts returning 1
226 weekly_show_badconfig="NO"                              # scripts returning 2
227
228 # 310.locate
229 weekly_locate_enable="YES"                              # Update locate weekly
230
231 # 320.whatis
232 weekly_whatis_enable="YES"                              # Update whatis weekly
233
234 # 330.catman
235 weekly_catman_enable="NO"                               # Preformat man pages
236
237 # 340.noid
238 weekly_noid_enable="NO"                                 # Find unowned files
239 weekly_noid_dirs="/"                                    # Look here
240
241 # 400.status-pkg
242 weekly_status_pkg_enable="NO"                           # Find out-of-date pkgs
243 pkg_version=pkg_version                                 # Use this program
244 pkg_version_index=/usr/ports/INDEX-8                    # Use this index file
245
246 # 999.local
247 weekly_local="/etc/weekly.local"                        # Local scripts
248
249
250 # Monthly options
251
252 # These options are used by periodic(8) itself to determine what to do
253 # with the output of the sub-programs that are run, and where to send
254 # that output.  $monthly_output might be set to /var/log/monthly.log if you
255 # wish to log the monthly output and have the files rotated by newsyslog(8)
256 #
257 monthly_output="root"                                   # user or /file
258 monthly_show_success="YES"                              # scripts returning 0
259 monthly_show_info="YES"                                 # scripts returning 1
260 monthly_show_badconfig="NO"                             # scripts returning 2
261
262 # 200.accounting
263 monthly_accounting_enable="YES"                         # Login accounting
264
265 # 999.local
266 monthly_local="/etc/monthly.local"                      # Local scripts
267
268
269 # Define source_periodic_confs, the mechanism used by /etc/periodic/*/*
270 # scripts to source defaults/periodic.conf overrides safely.
271
272 if [ -z "${source_periodic_confs_defined}" ]; then
273         source_periodic_confs_defined=yes
274         source_periodic_confs () {
275                 local i sourced_files
276
277                 for i in ${periodic_conf_files}; do
278                         case ${sourced_files} in
279                         *:$i:*)
280                                 ;;
281                         *)
282                                 sourced_files="${sourced_files}:$i:"
283                                 [ -r $i ] && . $i
284                                 ;;
285                         esac
286                 done
287         }
288 fi