etc/defaults/periodic.conf

   1 #!/bin/sh
   2 #
   3 # This is defaults/periodic.conf - a file full of useful variables that
   4 # you can set to change the default behaviour of periodic jobs on your
   5 # system.  You should not edit this file!  Put any overrides into one of the
   6 # $periodic_conf_files instead and you will be able to update these defaults
   7 # later without spamming your local configuration information.
   8 #
   9 # The $periodic_conf_files files should only contain values which override
  10 # values set in this file.  This eases the upgrade path when defaults
  11 # are changed and new features are added.
  12 #
  13 # For a more detailed explanation of all the periodic.conf variables, please
  14 # refer to the periodic.conf(5) manual page.
  15 #
  16 # $FreeBSD$
  17 #
  18
  19 # What files override these defaults ?
  20 periodic_conf_files="/etc/periodic.conf /etc/periodic.conf.local"
  21
  22 # periodic script dirs
  23 local_periodic="/usr/local/etc/periodic"
  24
  25
  26 # Daily options
  27
  28 # These options are used by periodic(8) itself to determine what to do
  29 # with the output of the sub-programs that are run, and where to send
  30 # that output.  $daily_output might be set to /var/log/daily.log if you
  31 # wish to log the daily output and have the files rotated by newsyslog(8)
  32 #
  33 daily_output="root"                                     # user or /file
  34 daily_show_success="YES"                                # scripts returning 0
  35 daily_show_info="YES"                                   # scripts returning 1
  36 daily_show_badconfig="NO"                               # scripts returning 2
  37
  38 # 100.clean-disks
  39 daily_clean_disks_enable="NO"                           # Delete files daily
  40 daily_clean_disks_files="[#,]* .#* a.out *.core *.CKP .emacs_[0-9]*"
  41 daily_clean_disks_days=3                                # If older than this
  42 daily_clean_disks_verbose="YES"                         # Mention files deleted
  43
  44 # 110.clean-tmps
  45 daily_clean_tmps_enable="NO"                            # Delete stuff daily
  46 daily_clean_tmps_dirs="/tmp"                            # Delete under here
  47 daily_clean_tmps_days="3"                               # If not accessed for
  48 daily_clean_tmps_ignore=".X*-lock .X11-unix .ICE-unix .font-unix .XIM-unix"
  49 daily_clean_tmps_ignore="$daily_clean_tmps_ignore quota.user quota.group .snap"
  50 daily_clean_tmps_ignore="$daily_clean_tmps_ignore .sujournal"
  51                                                         # Don't delete these
  52 daily_clean_tmps_verbose="YES"                          # Mention files deleted
  53
  54 # 120.clean-preserve
  55 daily_clean_preserve_enable="YES"                       # Delete files daily
  56 daily_clean_preserve_days=7                             # If not modified for
  57 daily_clean_preserve_verbose="YES"                      # Mention files deleted
  58
  59 # 130.clean-msgs
  60 daily_clean_msgs_enable="YES"                           # Delete msgs daily
  61 daily_clean_msgs_days=                                  # If not modified for
  62
  63 # 140.clean-rwho
  64 daily_clean_rwho_enable="YES"                           # Delete rwho daily
  65 daily_clean_rwho_days=7                                 # If not modified for
  66 daily_clean_rwho_verbose="YES"                          # Mention files deleted
  67
  68 # 150.clean-hoststat
  69 daily_clean_hoststat_enable="YES"                       # Purge sendmail host
  70                                                         # status cache daily
  71
  72 # 200.backup-passwd
  73 daily_backup_passwd_enable="YES"                        # Backup passwd & group
  74
  75 # 210.backup-aliases
  76 daily_backup_aliases_enable="YES"                       # Backup mail aliases
  77
  78 # 300.calendar
  79 daily_calendar_enable="NO"                              # Run calendar -a
  80
  81 # 310.accounting
  82 daily_accounting_enable="YES"                           # Rotate acct files
  83 daily_accounting_compress="NO"                          # Gzip rotated files
  84 daily_accounting_flags=-q                               # Flags to /usr/sbin/sa
  85 daily_accounting_save=3                                 # How many files to save
  86
  87 # 330.news
  88 daily_news_expire_enable="YES"                          # Run news.expire
  89
  90 # 400.status-disks
  91 daily_status_disks_enable="YES"                         # Check disk status
  92 daily_status_disks_df_flags="-l -h"                     # df(1) flags for check
  93
  94 # 401.status-graid
  95 daily_status_graid_enable="NO"                          # Check graid(8)
  96
  97 # 404.status-zfs
  98 daily_status_zfs_enable="NO"                            # Check ZFS
  99 daily_status_zfs_zpool_list_enable="YES"                # List ZFS pools
 100
 101 # 406.status-gmirror
 102 daily_status_gmirror_enable="NO"                        # Check gmirror(8)
 103
 104 # 407.status-graid3
 105 daily_status_graid3_enable="NO"                         # Check graid3(8)
 106
 107 # 408.status-gstripe
 108 daily_status_gstripe_enable="NO"                        # Check gstripe(8)
 109
 110 # 409.status-gconcat
 111 daily_status_gconcat_enable="NO"                        # Check gconcat(8)
 112
 113 # 420.status-network
 114 daily_status_network_enable="YES"                       # Check network status
 115 daily_status_network_usedns="YES"                       # DNS lookups are ok
 116 daily_status_network_netstat_flags="-d"                 # netstat(1) flags
 117
 118 # 430.status-uptime
 119 daily_status_uptime_enable="YES"                        # Check system uptime
 120
 121 # 440.status-mailq
 122 daily_status_mailq_enable="YES"                         # Check mail status
 123 daily_status_mailq_shorten="NO"                         # Shorten output
 124 daily_status_include_submit_mailq="YES"                 # Also submit queue
 125
 126 # 450.status-security
 127 daily_status_security_enable="YES"                      # Security check
 128 # See also "Security options" below for more options
 129 daily_status_security_inline="NO"                       # Run inline ?
 130 daily_status_security_output="root"                     # user or /file
 131
 132 # 460.status-mail-rejects
 133 daily_status_mail_rejects_enable="YES"                  # Check mail rejects
 134 daily_status_mail_rejects_logs=3                        # How many logs to check
 135 daily_status_mail_rejects_shorten="NO"                  # Shorten output
 136
 137 # 480.leapfile-ntpd
 138 daily_ntpd_leapfile_enable="NO"                         # Fetch NTP leapfile
 139 daily_ntpd_avoid_congestion="YES"                       # Avoid congesting
 140                                                         # leapfile sources
 141
 142 # 480.status-ntpd
 143 daily_status_ntpd_enable="NO"                           # Check NTP status
 144
 145 # 500.queuerun
 146 daily_queuerun_enable="YES"                             # Run mail queue
 147 daily_submit_queuerun="YES"                             # Also submit queue
 148
 149 # 510.status-world-kernel
 150 daily_status_world_kernel="YES"                         # Check the running
 151                                                         # userland/kernel version
 152
 153 # 800.scrub-zfs
 154 daily_scrub_zfs_enable="NO"
 155 daily_scrub_zfs_pools=""                        # empty string selects all pools
 156 daily_scrub_zfs_default_threshold="35"          # days between scrubs
 157 #daily_scrub_zfs_${poolname}_threshold="35"     # pool specific threshold
 158
 159 # 999.local
 160 daily_local="/etc/daily.local"                          # Local scripts
 161
 162
 163 # Weekly options
 164
 165 # These options are used by periodic(8) itself to determine what to do
 166 # with the output of the sub-programs that are run, and where to send
 167 # that output.  $weekly_output might be set to /var/log/weekly.log if you
 168 # wish to log the weekly output and have the files rotated by newsyslog(8)
 169 #
 170 weekly_output="root"                                    # user or /file
 171 weekly_show_success="YES"                               # scripts returning 0
 172 weekly_show_info="YES"                                  # scripts returning 1
 173 weekly_show_badconfig="NO"                              # scripts returning 2
 174
 175 # 310.locate
 176 weekly_locate_enable="YES"                              # Update locate weekly
 177
 178 # 320.whatis
 179 weekly_whatis_enable="YES"                              # Update whatis weekly
 180
 181 # 330.catman
 182 weekly_catman_enable="NO"                               # Preformat man pages
 183
 184 # 340.noid
 185 weekly_noid_enable="NO"                                 # Find unowned files
 186 weekly_noid_dirs="/"                                    # Look here
 187
 188 # 450.status-security
 189 weekly_status_security_enable="YES"                     # Security check
 190 # See also "Security options" above for more options
 191 weekly_status_security_inline="NO"                      # Run inline ?
 192 weekly_status_security_output="root"                    # user or /file
 193
 194 # 999.local
 195 weekly_local="/etc/weekly.local"                        # Local scripts
 196
 197
 198 # Monthly options
 199
 200 # These options are used by periodic(8) itself to determine what to do
 201 # with the output of the sub-programs that are run, and where to send
 202 # that output.  $monthly_output might be set to /var/log/monthly.log if you
 203 # wish to log the monthly output and have the files rotated by newsyslog(8)
 204 #
 205 monthly_output="root"                                   # user or /file
 206 monthly_show_success="YES"                              # scripts returning 0
 207 monthly_show_info="YES"                                 # scripts returning 1
 208 monthly_show_badconfig="NO"                             # scripts returning 2
 209
 210 # 200.accounting
 211 monthly_accounting_enable="YES"                         # Login accounting
 212
 213 # 450.status-security
 214 monthly_status_security_enable="YES"                    # Security check
 215 # See also "Security options" above for more options
 216 monthly_status_security_inline="NO"                     # Run inline ?
 217 monthly_status_security_output="root"                   # user or /file
 218
 219 # 999.local
 220 monthly_local="/etc/monthly.local"                      # Local scripts
 221
 222
 223 # Security options
 224
 225 security_show_success="YES"                             # scripts returning 0
 226 security_show_info="YES"                                # scripts returning 1
 227 security_show_badconfig="NO"                            # scripts returning 2
 228
 229 # These options are used by the security periodic(8) scripts spawned in
 230 # daily and weekly 450.status-security.
 231 security_status_logdir="/var/log"                       # Directory for logs
 232 security_status_diff_flags="-b -u"                      # flags for diff output
 233
 234 # Each of the security_status_*_period options below can have one of the
 235 # following values:
 236 # - NO: do not run at all
 237 # - daily: only run during the daily security status
 238 # - weekly: only run during the weekly security status
 239 # - monthly: only run during the monthly security status
 240 # Note that if periodic security scripts are run from crontab(5) directly,
 241 # they will be run unless _enable or _period is set to "NO".
 242
 243 # 100.chksetuid
 244 security_status_chksetuid_enable="YES"
 245 security_status_chksetuid_period="daily"
 246
 247 # 110.neggrpperm
 248 security_status_neggrpperm_enable="YES"
 249 security_status_neggrpperm_period="daily"
 250
 251 # 200.chkmounts
 252 security_status_chkmounts_enable="YES"
 253 security_status_chkmounts_period="daily"
 254 #security_status_chkmounts_ignore="^amd:"               # Don't check matching
 255                                                         # FS types
 256 security_status_noamd="NO"                              # Don't check amd mounts
 257
 258 # 300.chkuid0
 259 security_status_chkuid0_enable="YES"
 260 security_status_chkuid0_period="daily"
 261
 262 # 400.passwdless
 263 security_status_passwdless_enable="YES"
 264 security_status_passwdless_period="daily"
 265
 266 # 410.logincheck
 267 security_status_logincheck_enable="YES"
 268 security_status_logincheck_period="daily"
 269
 270 # 500.ipfwdenied
 271 security_status_ipfwdenied_enable="YES"
 272 security_status_ipfwdenied_period="daily"
 273
 274 # 510.ipfdenied
 275 security_status_ipfdenied_enable="YES"
 276 security_status_ipfdenied_period="daily"
 277
 278 # 520.pfdenied
 279 security_status_pfdenied_enable="YES"
 280 security_status_pfdenied_period="daily"
 281
 282 # 550.ipfwlimit
 283 security_status_ipfwlimit_enable="YES"
 284 security_status_ipfwlimit_period="daily"
 285
 286 # 610.ipf6denied
 287 security_status_ipf6denied_enable="YES"
 288 security_status_ipf6denied_period="daily"
 289
 290 # 700.kernelmsg
 291 security_status_kernelmsg_enable="YES"
 292 security_status_kernelmsg_period="daily"
 293
 294 # 800.loginfail
 295 security_status_loginfail_enable="YES"
 296 security_status_loginfail_period="daily"
 297
 298 # 900.tcpwrap
 299 security_status_tcpwrap_enable="YES"
 300 security_status_tcpwrap_period="daily"
 301
 302
 303
 304 # Define source_periodic_confs, the mechanism used by /etc/periodic/*/*
 305 # scripts to source defaults/periodic.conf overrides safely.
 306
 307 if [ -z "${source_periodic_confs_defined}" ]; then
 308         source_periodic_confs_defined=yes
 309
 310         # Compatibility with old daily variable names.
 311         # They can be removed in stable/11.
 312         security_daily_compat_var() {
 313                 local var=$1 dailyvar value
 314
 315                 dailyvar=daily_status_security${var#security_status}
 316                 periodvar=${var%enable}period
 317                 eval value=\"\$$dailyvar\"
 318                 [ -z "$value" ] && return
 319                 echo "Warning: Variable \$$dailyvar is deprecated," \
 320                     "use \$$var instead." >&2
 321                 case "$value" in
 322                 [Yy][Ee][Ss])
 323                         eval $var=YES
 324                         eval $periodvar=daily
 325                         ;;
 326                 *)
 327                         eval $var=\"$value\"
 328                         ;;
 329                 esac
 330         }
 331
 332         check_yesno_period() {
 333                 local var="$1" periodvar value period
 334
 335                 eval value=\"\$$var\"
 336                 case "$value" in
 337                 [Yy][Ee][Ss]) ;;
 338                 *) return 1 ;;
 339                 esac
 340
 341                 periodvar=${var%enable}period
 342                 eval period=\"\$$periodvar\"
 343                 case "$PERIODIC" in
 344                 "security daily")
 345                         case "$period" in
 346                         [Dd][Aa][Ii][Ll][Yy]) return 0 ;;
 347                         *) return 1 ;;
 348                         esac
 349                         ;;
 350                 "security weekly")
 351                         case "$period" in
 352                         [Ww][Ee][Ee][Kk][Ll][Yy]) return 0 ;;
 353                         *) return 1 ;;
 354                         esac
 355                         ;;
 356                 "security monthly")
 357                         case "$period" in
 358                         [Mm][Oo][Nn][Tt][Hh][Ll][Yy]) return 0 ;;
 359                         *) return 1 ;;
 360                         esac
 361                         ;;
 362                 security)
 363                         # Run directly from crontab(5).
 364                         case "$period" in
 365                         [Nn][Oo]) return 1 ;;
 366                         *) return 0 ;;
 367                         esac
 368                         ;;
 369                 '')
 370                         # Script run manually.
 371                         return 0
 372                         ;;
 373                 *)
 374                         echo "ASSERTION FAILED: Unexpected value for" \
 375                             "\$PERIODIC: '$PERIODIC'" >&2
 376                         exit 127
 377                         ;;
 378                 esac
 379         }
 380
 381         source_periodic_confs() {
 382                 local i sourced_files
 383
 384                 for i in ${periodic_conf_files}; do
 385                         case ${sourced_files} in
 386                         *:$i:*)
 387                                 ;;
 388                         *)
 389                                 sourced_files="${sourced_files}:$i:"
 390                                 [ -r $i ] && . $i
 391                                 ;;
 392                         esac
 393                 done
 394         }
 395 fi