Aren
/
NetBSD
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
NetBSD/etc/defaults/daily.conf

35 lines
893 B
Plaintext
Raw Normal View History

Add the fetch_pkg_vulnerabilities option to the daily script to keep the packages vulnerability database up to date. This will only fetch the file from the server if it has changed since the last run. Add the check_pkg_vulnerabilities and check_pkg_signatures options to the security script to check that the installed packages are sane. All of these options are enabled by default but they will only run if there is, at least, one installed package.
2010-01-20 01:08:11 +03:00
# $NetBSD: daily.conf,v 1.12 2010/01/19 22:08:11 jmmv Exp $
move default config files from /etc/default -> /etc/defaults, to be consistent with what FreeBSD uses /etc/defaults for and since SVR4 uses /etc/default for another purpose. as discussed on tech-userlevel, and no objections were made.
2000-10-01 09:46:03 +04:00
#
# /etc/defaults/daily.conf --
# default configuration of /etc/daily.conf
#
# see daily.conf(5) for more information.
#
remind people to edit /etc/*.conf instead of /etc/defaults/*.conf
2000-11-09 02:17:50 +03:00
# DO NOT EDIT THIS FILE DIRECTLY; IT MAY BE REPLACED DURING A SYSTEM UPGRADE.
# EDIT /etc/daily.conf INSTEAD.
#
move default config files from /etc/default -> /etc/defaults, to be consistent with what FreeBSD uses /etc/defaults for and since SVR4 uses /etc/default for another purpose. as discussed on tech-userlevel, and no objections were made.
2000-10-01 09:46:03 +04:00
find_core=YES
Add ptyfs to the file-system types ignored by the find_core check. Ok'ed by Christos Zoulas and Hubert Feyrer.
2005-06-30 22:23:26 +04:00
find_core_ignore_fstypes="!local rdonly fdesc null kernfs procfs ptyfs"
move default config files from /etc/default -> /etc/defaults, to be consistent with what FreeBSD uses /etc/defaults for and since SVR4 uses /etc/default for another purpose. as discussed on tech-userlevel, and no objections were made.
2000-10-01 09:46:03 +04:00
expire_news=NO
purge_accounting=YES
run_msgs=YES
With the recent fixes to cpp(1) and calendar(1), it is now safe to turn on run_calendar by default. Include a note advising users who replace /usr/bin/cpp with a non-basesrc version to turn this off.
2004-11-30 05:03:57 +03:00
# if you have replaced /usr/bin/cpp with a version of cpp which does not understand
# the CPP_RESTRICTED environment variable, calendar -a can be used as a local DOS by
# making an included file a named pipe
run_calendar=YES
move default config files from /etc/default -> /etc/defaults, to be consistent with what FreeBSD uses /etc/defaults for and since SVR4 uses /etc/default for another purpose. as discussed on tech-userlevel, and no objections were made.
2000-10-01 09:46:03 +04:00
check_disks=YES
add show_remote_fs Triggers showing nfs mounted file systems in the nightly report.
2003-12-08 04:14:08 +03:00
show_remote_fs=NO
move default config files from /etc/default -> /etc/defaults, to be consistent with what FreeBSD uses /etc/defaults for and since SVR4 uses /etc/default for another purpose. as discussed on tech-userlevel, and no objections were made.
2000-10-01 09:46:03 +04:00
check_mailq=YES
check_network=YES
add full_netstat=NO
2003-12-08 01:17:54 +03:00
full_netstat=NO
move default config files from /etc/default -> /etc/defaults, to be consistent with what FreeBSD uses /etc/defaults for and since SVR4 uses /etc/default for another purpose. as discussed on tech-userlevel, and no objections were made.
2000-10-01 09:46:03 +04:00
run_fsck=NO
Add a run_fsck_flags variable to daily.conf(5), allowing extra flags to be passed to to daily fsck run. For example, run_fsck_flags="-Tffs:-X" will run the nighly fsck_ffs on a snapshot :)
2008-08-30 14:53:22 +04:00
run_fsck_flags=""
move default config files from /etc/default -> /etc/defaults, to be consistent with what FreeBSD uses /etc/defaults for and since SVR4 uses /etc/default for another purpose. as discussed on tech-userlevel, and no objections were made.
2000-10-01 09:46:03 +04:00
run_rdist=YES
run_security=YES
run_skeyaudit=YES
Add the fetch_pkg_vulnerabilities option to the daily script to keep the packages vulnerability database up to date. This will only fetch the file from the server if it has changed since the last run. Add the check_pkg_vulnerabilities and check_pkg_signatures options to the security script to check that the installed packages are sane. All of these options are enabled by default but they will only run if there is, at least, one installed package.
2010-01-20 01:08:11 +03:00
pkgdb_dir=/var/db/pkg
fetch_pkg_vulnerabilities=YES
Suppress emailing the daily security report if it is empty, unless send_empty_security=YES. Implements change-request PR security/17249 from Takahiro Kambe <taca@sky.yamashina.kyoto.jp>.
2003-02-22 01:35:46 +03:00
send_empty_security=NO