NetBSD/etc/defaults/daily.conf
jmmv 497b5f8044 Add the fetch_pkg_vulnerabilities option to the daily script to keep the
packages vulnerability database up to date.  This will only fetch the
file from the server if it has changed since the last run.

Add the check_pkg_vulnerabilities and check_pkg_signatures options to the
security script to check that the installed packages are sane.

All of these options are enabled by default but they will only run if
there is, at least, one installed package.
2010-01-19 22:08:11 +00:00

35 lines
893 B
Plaintext

# $NetBSD: daily.conf,v 1.12 2010/01/19 22:08:11 jmmv Exp $
#
# /etc/defaults/daily.conf --
# default configuration of /etc/daily.conf
#
# see daily.conf(5) for more information.
#
# DO NOT EDIT THIS FILE DIRECTLY; IT MAY BE REPLACED DURING A SYSTEM UPGRADE.
# EDIT /etc/daily.conf INSTEAD.
#
find_core=YES
find_core_ignore_fstypes="!local rdonly fdesc null kernfs procfs ptyfs"
expire_news=NO
purge_accounting=YES
run_msgs=YES
# if you have replaced /usr/bin/cpp with a version of cpp which does not understand
# the CPP_RESTRICTED environment variable, calendar -a can be used as a local DOS by
# making an included file a named pipe
run_calendar=YES
check_disks=YES
show_remote_fs=NO
check_mailq=YES
check_network=YES
full_netstat=NO
run_fsck=NO
run_fsck_flags=""
run_rdist=YES
run_security=YES
run_skeyaudit=YES
pkgdb_dir=/var/db/pkg
fetch_pkg_vulnerabilities=YES
send_empty_security=NO