3 # This is defaults/periodic.conf - a file full of useful variables that
4 # you can set to change the default behaviour of periodic jobs on your
5 # system. You should not edit this file! Put any overrides into one of the
6 # $periodic_conf_files instead and you will be able to update these defaults
7 # later without spamming your local configuration information.
9 # The $periodic_conf_files files should only contain values which override
10 # values set in this file. This eases the upgrade path when defaults
11 # are changed and new features are added.
13 # For a more detailed explanation of all the periodic.conf variables, please
14 # refer to the periodic.conf(5) manual page.
16 # $FreeBSD: head/etc/defaults/periodic.conf 324738 2017-10-19 03:17:50Z cy $
19 # What files override these defaults ?
20 periodic_conf_files
="/etc/periodic.conf /etc/periodic.conf.local"
22 # periodic script dirs
23 local_periodic
="/usr/local/etc/periodic"
25 # Max time to sleep to avoid causing congestion on download servers
26 anticongestion_sleeptime
=3600
30 # These options are used by periodic(8) itself to determine what to do
31 # with the output of the sub-programs that are run, and where to send
32 # that output. $daily_output might be set to /var/log/daily.log if you
33 # wish to log the daily output and have the files rotated by newsyslog(8)
35 daily_output
="root" # user or /file
36 daily_show_success
="YES" # scripts returning 0
37 daily_show_info
="YES" # scripts returning 1
38 daily_show_badconfig
="YES" # scripts returning 2
41 daily_clean_disks_enable
="NO" # Delete files daily
42 daily_clean_disks_files
="[#,]* .#* a.out *.core *.CKP .emacs_[0-9]*"
43 daily_clean_disks_days
=3 # If older than this
44 daily_clean_disks_verbose
="YES" # Mention files deleted
47 daily_clean_tmps_enable
="NO" # Delete stuff daily
48 daily_clean_tmps_dirs
="/tmp" # Delete under here
49 daily_clean_tmps_days
="3" # If not accessed for
50 daily_clean_tmps_ignore
=".X*-lock .X11-unix .ICE-unix .font-unix .XIM-unix"
51 daily_clean_tmps_ignore
="$daily_clean_tmps_ignore quota.user quota.group .snap"
52 daily_clean_tmps_ignore
="$daily_clean_tmps_ignore .sujournal"
54 daily_clean_tmps_verbose
="YES" # Mention files deleted
57 daily_clean_preserve_enable
="YES" # Delete files daily
58 daily_clean_preserve_days
=7 # If not modified for
59 daily_clean_preserve_verbose
="YES" # Mention files deleted
62 daily_clean_msgs_enable
="YES" # Delete msgs daily
63 daily_clean_msgs_days
= # If not modified for
66 daily_clean_rwho_enable
="YES" # Delete rwho daily
67 daily_clean_rwho_days
=7 # If not modified for
68 daily_clean_rwho_verbose
="YES" # Mention files deleted
71 daily_clean_hoststat_enable
="YES" # Purge sendmail host
75 daily_clean_hammer_enable
="YES" # HAMMER maintenance
76 daily_clean_hammer_verbose
="NO" # Be verbose
77 daily_clean_hammer_pfslist
="" # default: mounted pfs
80 daily_clean_hammer2_enable
="YES" # HAMMER2 maintenance
81 daily_clean_hammer2_verbose
="NO" # Be verbose
82 daily_clean_hammer2_pfslist
="" # default: all mounted
85 daily_backup_passwd_enable
="YES" # Backup passwd & group
88 daily_backup_aliases_enable
="YES" # Backup mail aliases
90 # 220.snapshot-hammer2
91 daily_snapshot_hammer2_enable
="NO" # HAMMER2 snapshots
92 daily_snapshot_hammer2_tag
="daily" # snapshot tag
93 daily_snapshot_hammer2_keep
="auto" # snapshots history
94 daily_snapshot_hammer2_dirs
="auto" # directories to snap
95 daily_snapshot_hammer2_capacity
=90 # space usage threshold
96 weekly_snapshot_hammer2_enable
="NO"
97 weekly_snapshot_hammer2_tag
="weekly"
98 weekly_snapshot_hammer2_keep
="auto"
99 weekly_snapshot_hammer2_dirs
="auto"
100 weekly_snapshot_hammer2_capacity
=90
101 monthly_snapshot_hammer2_enable
="NO"
102 monthly_snapshot_hammer2_tag
="monthly"
103 monthly_snapshot_hammer2_keep
="auto"
104 monthly_snapshot_hammer2_dirs
="auto"
105 monthly_snapshot_hammer2_capacity
=90
108 daily_calendar_enable
="NO" # Run calendar -a
111 daily_accounting_enable
="YES" # Rotate acct files
112 daily_accounting_compress
="NO" # Gzip rotated files
113 daily_accounting_flags
=-q # Flags to /usr/sbin/sa
114 daily_accounting_save
=3 # How many files to save
117 daily_news_expire_enable
="YES" # Run news.expire
120 daily_status_disks_enable
="YES" # Check disk status
121 daily_status_disks_df_flags
="-l -h" # df(1) flags for check
124 daily_status_mfi_enable
="NO" # Check mfiutil(8)
127 daily_status_network_enable
="YES" # Check network status
128 daily_status_network_usedns
="YES" # DNS lookups are ok
129 daily_status_network_netstat_flags
="-d" # netstat(1) flags
132 daily_status_uptime_enable
="YES" # Check system uptime
135 daily_status_mailq_enable
="YES" # Check mail status
136 daily_status_mailq_shorten
="NO" # Shorten output
137 daily_status_include_submit_mailq
="YES" # Also submit queue
139 # 450.status-security
140 daily_status_security_enable
="YES" # Security check
141 # See also "Security options" below for more options
142 daily_status_security_inline
="NO" # Run inline ?
143 daily_status_security_output
="root" # user or /file
145 # 460.status-mail-rejects
146 daily_status_mail_rejects_enable
="YES" # Check mail rejects
147 daily_status_mail_rejects_logs
=3 # How many logs to check
148 daily_status_mail_rejects_shorten
="NO" # Shorten output
151 daily_queuerun_enable
="YES" # Run mail queue
152 daily_submit_queuerun
="YES" # Also submit queue
154 # 510.status-world-kernel
155 daily_status_world_kernel
="YES" # Check the running
156 # userland/kernel version
158 daily_local
="/etc/daily.local" # Local scripts
163 # These options are used by periodic(8) itself to determine what to do
164 # with the output of the sub-programs that are run, and where to send
165 # that output. $weekly_output might be set to /var/log/weekly.log if you
166 # wish to log the weekly output and have the files rotated by newsyslog(8)
168 weekly_output
="root" # user or /file
169 weekly_show_success
="YES" # scripts returning 0
170 weekly_show_info
="YES" # scripts returning 1
171 weekly_show_badconfig
="YES" # scripts returning 2
174 weekly_locate_enable
="YES" # Update locate weekly
177 weekly_whatis_enable
="YES" # Update whatis weekly
180 weekly_noid_enable
="NO" # Find unowned files
181 weekly_noid_dirs
="/" # Look here
183 # 450.status-security
184 weekly_status_security_enable
="YES" # Security check
185 # See also "Security options" below for more options
186 weekly_status_security_inline
="NO" # Run inline ?
187 weekly_status_security_output
="root" # user or /file
190 weekly_local
="/etc/weekly.local" # Local scripts
195 # These options are used by periodic(8) itself to determine what to do
196 # with the output of the sub-programs that are run, and where to send
197 # that output. $monthly_output might be set to /var/log/monthly.log if you
198 # wish to log the monthly output and have the files rotated by newsyslog(8)
200 monthly_output
="root" # user or /file
201 monthly_show_success
="YES" # scripts returning 0
202 monthly_show_info
="YES" # scripts returning 1
203 monthly_show_badconfig
="YES" # scripts returning 2
206 monthly_accounting_enable
="YES" # Login accounting
208 # 450.status-security
209 monthly_status_security_enable
="YES" # Security check
210 # See also "Security options" below for more options
211 monthly_status_security_inline
="NO" # Run inline ?
212 monthly_status_security_output
="root" # user or /file
215 monthly_local
="/etc/monthly.local" # Local scripts
220 security_show_success
="YES" # scripts returning 0
221 security_show_info
="YES" # scripts returning 1
222 security_show_badconfig
="YES" # scripts returning 2
224 # These options are used by the security periodic(8) scripts spawned in
225 # daily and weekly 450.status-security.
226 security_status_logdir
="/var/log" # Directory for logs
227 security_status_diff_flags
="-b -u" # flags for diff output
229 # Each of the security_status_*_period options below can have one of the
231 # - NO: do not run at all
232 # - daily: only run during the daily security status
233 # - weekly: only run during the weekly security status
234 # - monthly: only run during the monthly security status
235 # Note that if periodic security scripts are run from crontab(5) directly,
236 # they will be run unless _enable or _period is set to "NO".
239 security_status_chksetuid_enable
="YES"
240 security_status_chksetuid_period
="daily"
243 security_status_neggrpperm_enable
="YES"
244 security_status_neggrpperm_period
="daily"
247 security_status_chkmounts_enable
="YES"
248 security_status_chkmounts_period
="daily"
249 #security_status_chkmounts_ignore="^mfs:" # Don't check matching
251 security_status_nomfs
="NO" # Don't check mfs mounts
254 security_status_chkuid0_enable
="YES"
255 security_status_chkuid0_period
="daily"
258 security_status_passwdless_enable
="YES"
259 security_status_passwdless_period
="daily"
262 security_status_logincheck_enable
="YES"
263 security_status_logincheck_period
="daily"
266 security_status_ipfwdenied_enable
="YES"
267 security_status_ipfwdenied_period
="daily"
270 security_status_pfdenied_enable
="YES"
271 security_status_pfdenied_period
="daily"
274 security_status_ipfwlimit_enable
="YES"
275 security_status_ipfwlimit_period
="daily"
278 security_status_ip6fwdenied_enable
="YES"
279 security_status_ip6fwdenied_period
="daily"
282 security_status_ip6fwlimit_enable
="YES"
283 security_status_ip6fwlimit_period
="daily"
286 security_status_kernelmsg_enable
="YES"
287 security_status_kernelmsg_period
="daily"
290 security_status_loginfail_enable
="YES"
291 security_status_loginfail_period
="daily"
294 security_status_tcpwrap_enable
="YES"
295 security_status_tcpwrap_period
="daily"
299 # Define source_periodic_confs, the mechanism used by /etc/periodic/*/*
300 # scripts to source defaults/periodic.conf overrides safely.
302 if [ -z "${source_periodic_confs_defined}" ]; then
303 source_periodic_confs_defined
=yes
304 source_periodic_confs
() {
305 local i sourced_files
307 for i
in ${periodic_conf_files}; do
308 case ${sourced_files} in
312 sourced_files
="${sourced_files}:$i:"
319 # Sleep for a random amount of time in order to mitigate the thundering
320 # herd problem of multiple hosts running periodic simultaneously.
321 # Will not sleep when used interactively.
322 # Will sleep at most once per invocation of periodic
324 [ -n "$PERIODIC_IS_INTERACTIVE" ] && return
325 if [ -f "$PERIODIC_ANTICONGESTION_FILE" ]; then
326 rm -f $PERIODIC_ANTICONGESTION_FILE
327 sleep `jot -r 1 0 ${anticongestion_sleeptime}`
331 # Compatibility with old daily variable names.
332 # They can be removed in stable/11.
333 security_daily_compat_var
() {
334 local var
=$1 dailyvar value
336 dailyvar
=daily_status_security
${var#security_status}
337 periodvar
=${var%enable}period
338 eval value
=\"\$
$dailyvar\"
339 [ -z "$value" ] && return
340 echo "Warning: Variable \$$dailyvar is deprecated," \
341 "use \$$var instead." >&2
345 eval $periodvar=daily
353 check_yesno_period
() {
354 local var
="$1" periodvar value period
356 eval value
=\"\$
$var\"
362 periodvar
=${var%enable}period
363 eval period
=\"\$
$periodvar\"
367 [Dd
][Aa
][Ii
][Ll
][Yy
]) return 0 ;;
373 [Ww
][Ee
][Ee
][Kk
][Ll
][Yy
]) return 0 ;;
379 [Mm
][Oo
][Nn
][Tt
][Hh
][Ll
][Yy
]) return 0 ;;
384 # Run directly from crontab(5).
386 [Nn
][Oo
]) return 1 ;;
391 # Script run manually.
395 echo "ASSERTION FAILED: Unexpected value for" \
396 "\$PERIODIC: '$PERIODIC'" >&2