Index: head/share/man/man5/fstab.5
===================================================================
--- head/share/man/man5/fstab.5	(revision 366614)
+++ head/share/man/man5/fstab.5	(revision 366615)
@@ -1,471 +1,471 @@
 .\" Copyright (c) 1980, 1989, 1991, 1993
 .\"	The Regents of the University of California.  All rights reserved.
 .\"
 .\" Redistribution and use in source and binary forms, with or without
 .\" modification, are permitted provided that the following conditions
 .\" are met:
 .\" 1. Redistributions of source code must retain the above copyright
 .\"    notice, this list of conditions and the following disclaimer.
 .\" 2. Redistributions in binary form must reproduce the above copyright
 .\"    notice, this list of conditions and the following disclaimer in the
 .\"    documentation and/or other materials provided with the distribution.
 .\" 3. Neither the name of the University nor the names of its contributors
 .\"    may be used to endorse or promote products derived from this software
 .\"    without specific prior written permission.
 .\"
 .\" THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
 .\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 .\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
 .\" ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
 .\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
 .\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
 .\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
 .\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
 .\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
 .\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
 .\" SUCH DAMAGE.
 .\"
 .\"     @(#)fstab.5	8.1 (Berkeley) 6/5/93
 .\" $FreeBSD$
 .\"
 .Dd April 14, 2014
 .Dt FSTAB 5
 .Os
 .Sh NAME
 .Nm fstab
 .Nd static information about the file systems
 .Sh SYNOPSIS
 .In fstab.h
 .Sh DESCRIPTION
 The file
 .Nm
 contains descriptive information about the various file
 systems.
 .Nm
 is only read by programs, and not written;
 it is the duty of the system administrator to properly create
 and maintain this file.
 Each file system is described on a separate line;
 fields on each line are separated by tabs or spaces.
 The order of records in
 .Nm
 is important because
 .Xr fsck 8 ,
 .Xr mount 8 ,
 and
 .Xr umount 8
 sequentially iterate through
 .Nm
 doing their thing.
 .Pp
 The first field,
 .Pq Fa fs_spec ,
 describes the special device or
 remote file system to be mounted.
 The contents are decoded by the
 .Xr strunvis 3
 function.
 This allows using spaces or tabs in the device name which would be
 interpreted as field separators otherwise.
 .Pp
 The second field,
 .Pq Fa fs_file ,
 describes the mount point for the file system.
 For swap partitions, this field should be specified as
 .Dq none .
 The contents are decoded by the
 .Xr strunvis 3
 function, as above.
 .Pp
 The third field,
 .Pq Fa fs_vfstype ,
 describes the type of the file system.
 The system can support various file system types.
 Only the root, /usr, and /tmp file systems need be statically
 compiled into the kernel;
 everything else will be automatically loaded at mount
 time.
 (Exception: the FFS cannot currently be demand-loaded.)
 Some people still prefer to statically
 compile other file systems as well.
 .Pp
 The fourth field,
 .Pq Fa fs_mntops ,
 describes the mount options associated with the file system.
 It is formatted as a comma separated list of options.
 It contains at least the type of mount (see
 .Fa fs_type
 below) plus any additional options appropriate to the file system type.
 See the options flag
 .Pq Fl o
 in the
 .Xr mount 8
 page and the file system specific page, such as
 .Xr mount_nfs 8 ,
 for additional options that may be specified.
 All options that can be given to the file system specific mount commands
 can be used in
 .Nm
 as well.
 They just need to be formatted a bit differently.
 The arguments of the
 .Fl o
 option can be used without the preceding
 .Fl o
 flag.
 Other options need both the file system specific flag and its argument,
 separated by an equal sign.
 For example, mounting an
 .Xr msdosfs 5
 filesystem, the options
 .Bd -literal -offset indent
 -o sync -o noatime -m 644 -M 755 -u foo -g bar
 .Ed
 .Pp
 should be written as
 .Bd -literal -offset indent
 sync,noatime,-m=644,-M=755,-u=foo,-g=bar
 .Ed
 .Pp
 in the option field of
 .Nm .
 .Pp
 If the options
 .Dq userquota
 and/or
 .Dq groupquota
 are specified,
 the file system is automatically processed by the
 .Xr quotacheck 8
 command, and user and/or group disk quotas are enabled with
 .Xr quotaon 8 .
 By default,
 file system quotas are maintained in files named
 .Pa quota.user
 and
 .Pa quota.group
 which are located at the root of the associated file system.
 These defaults may be overridden by putting an equal sign
 and an alternative absolute pathname following the quota option.
 Thus, if the user quota file for
 .Pa /tmp
 is stored in
 .Pa /var/quotas/tmp.user ,
 this location can be specified as:
 .Bd -literal -offset indent
 userquota=/var/quotas/tmp.user
 .Ed
 .Pp
 If the option
 .Dq failok
 is specified,
 the system will ignore any error which happens during the mount of that filesystem,
 which would otherwise cause the system to drop into single user mode.
 This option is implemented by the
 .Xr mount 8
 command and will not be passed to the kernel.
 .Pp
 If the option
 .Dq noauto
 is specified, the file system will not be automatically
 mounted at system startup.
 Note that, for network file systems
 of third party types
 (i.e., types supported by additional software
 not included in the base system)
 to be automatically mounted at system startup,
 the
 .Va extra_netfs_types
 .Xr rc.conf 5
 variable must be used to extend the
 .Xr rc 8
 startup script's list of network file system types.
 .Pp
 If the option
 .Dq late
 is specified, the file system will be automatically mounted
 at a stage of system startup after remote mount points are mounted.
 For more detail about this option,
 see the
 .Xr mount 8
 manual page.
 .Pp
 If the option
 .Dq update
 is specified, it indicates that the status of an already mounted file
 system should be changed accordingly.
 This allows, for example, file systems mounted read-only to be upgraded
 read-write and vice-versa.
 By default, an entry corresponding to a file systems that is already
 mounted is going to be skipped over when processing
 .Nm ,
 unless it's a root file system, in which case logic similar to
 .Dq update
 is applied automatically.
 .Pp
 The
 .Dq update
-option is typically used in conjuction with two
+option is typically used in conjunction with two
 .Nm
 files.
 The first
 .Nm
 file is used to set up the initial set of file systems.
 The second
 .Nm
 file is then run to update the initial set of file systems and
 to add additional file systems.
 .Pp
 The type of the mount is extracted from the
 .Fa fs_mntops
 field and stored separately in the
 .Fa fs_type
 field (it is not deleted from the
 .Fa fs_mntops
 field).
 If
 .Fa fs_type
 is
 .Dq rw
 or
 .Dq ro
 then the file system whose name is given in the
 .Fa fs_file
 field is normally mounted read-write or read-only on the
 specified special file.
 .Pp
 If
 .Fa fs_type
 is
 .Dq sw
 then the special file is made available as a piece of swap
 space by the
 .Xr swapon 8
 command at the end of the system reboot procedure.
 For swap devices, the keyword
 .Dq trimonce
 triggers the delivery of a
 .Dv BIO_DELETE
 command to the device.
 This command marks the device's blocks as unused, except those that
 might store a disk label.
 This marking can erase a crash dump.
 To delay
 .Nm swapon
 for a device until after
 .Nm savecore
 has copied the crash dump to another location, use the
 .Dq late
 option.
 For vnode-backed swap spaces,
 .Dq file
 is supported in the
 .Fa fs_mntops
 field.
 When
 .Fa fs_spec
 is an
 .Xr md 4
 device file
 .Pq Do md Dc or Do md[0-9]* Dc
 and
 .Dq file
 is specified in
 .Fa fs_mntopts ,
 an
 .Xr md 4
 device is created with the specified file used as backing store,
 and then the new device is used as swap space.
 Swap entries on
 .Pa .eli
 devices will cause automatic creation of encrypted devices.
 The
 .Dq ealgo ,
 .Dq aalgo ,
 .Dq keylen ,
 .Dq notrim ,
 and
 .Dq sectorsize
 options may be passed to control those
 .Xr geli 8
 parameters.
 The fields other than
 .Fa fs_spec
 and
 .Fa fs_type
 are unused.
 If
 .Fa fs_type
 is specified as
 .Dq xx
 the entry is ignored.
 This is useful to show disk partitions which are currently unused.
 .Pp
 The fifth field,
 .Pq Fa fs_freq ,
 is used for these file systems by the
 .Xr dump 8
 command to determine which file systems need to be dumped.
 If the fifth field is not present, a value of zero is returned and
 .Nm dump
 will assume that the file system does not need to be dumped.
 If the fifth field is greater than 0, then it specifies the number of days
 between dumps for this file system.
 .Pp
 The sixth field,
 .Pq Fa fs_passno ,
 is used by the
 .Xr fsck 8
 and
 .Xr quotacheck 8
 programs to determine the order in which file system and quota
 checks are done at reboot time.
 The
 .Fa fs_passno
 field can be any value between 0 and
 .Ql INT_MAX Ns -1 .
 .Pp
 The root file system should be specified with a
 .Fa fs_passno
 of 1, and other file systems should have a
 .Fa fs_passno
 of 2 or greater.
 A file system with a
 .Fa fs_passno
 value of 1 is always checked sequentially and be completed before
 another file system is processed, and it will be processed before
 all file systems with a larger
 .Fa fs_passno .
 .Pp
 For any given value of
 .Fa fs_passno ,
 file systems within a drive will be checked sequentially,
 but file systems on different drives will be checked at the
 same time to utilize parallelism available in the hardware.
 Once all file system checks are complete for the current
 .Fa fs_passno ,
 the same process will start over for the next
 .Fa fs_passno .
 .Pp
 If the sixth field is not present or is zero,
 a value of zero is returned and
 .Xr fsck 8
 and
 .Xr quotacheck 8
 will assume that the file system does not need to be checked.
 .Pp
 The
 .Fa fs_passno
 field can be used to implement finer control when
 the system utilities may determine that the file system resides
 on a different physical device, when it actually does not, as with a
 .Xr ccd 4
 device.
 All file systems with a lower
 .Fa fs_passno
 value will be completed before starting on file systems with a
 higher
 .Fa fs_passno
 value.
 E.g. all file systems with a
 .Fa fs_passno
 of 2 will be completed before any file systems with a
 .Fa fs_passno
 of 3 or greater are started.
 Gaps are allowed between the different
 .Fa fs_passno
 values.
 E.g. file systems listed in
 .Pa /etc/fstab
 may have
 .Fa fs_passno
 values such as 0, 1, 2, 15, 100, 200, 300, and may appear in any order
 within
 .Pa /etc/fstab .
 .Bd -literal
 #define	FSTAB_RW	"rw"	/* read/write device */
 #define	FSTAB_RQ	"rq"	/* read/write with quotas */
 #define	FSTAB_RO	"ro"	/* read-only device */
 #define	FSTAB_SW	"sw"	/* swap device */
 #define	FSTAB_XX	"xx"	/* ignore totally */
 
 struct fstab {
 	char	*fs_spec;	/* block special device name */
 	char	*fs_file;	/* file system path prefix */
 	char	*fs_vfstype;	/* File system type, ufs, nfs */
 	char	*fs_mntops;	/* Mount options ala -o */
 	char	*fs_type;	/* FSTAB_* from fs_mntops */
 	int	fs_freq;	/* dump frequency, in days */
 	int	fs_passno;	/* pass number on parallel fsck */
 };
 .Ed
 .Pp
 The proper way to read records from
 .Pa fstab
 is to use the routines
 .Xr getfsent 3 ,
 .Xr getfsspec 3 ,
 .Xr getfstype 3 ,
 and
 .Xr getfsfile 3 .
 .Sh FILES
 .Bl -tag -width /etc/fstab -compact
 .It Pa /etc/fstab
 The file
 .Nm
 resides in
 .Pa /etc .
 .El
 .Sh EXAMPLES
 .Bd -literal
 # Device	Mountpoint	FStype	Options		Dump	Pass#
 #
 # UFS file system.
 /dev/da0p2	/		ufs	rw		1	1
 #
 # Swap space on a block device.
 /dev/da0p1	none		swap	sw		0	0
 #
 # Swap space using a block device with GBDE/GELI encyption.
 # aalgo, ealgo, keylen, sectorsize options are available
 # for .eli devices.
 /dev/da1p1.bde	none		swap	sw		0	0
 /dev/da1p2.eli	none		swap	sw		0	0
 #
 # tmpfs.
 tmpfs		/tmp		tmpfs	rw,size=1g,mode=1777	0 0
 #
 # UFS file system on a swap-backed md(4).  /dev/md10 is
 # automatically created.  If it is "md", a unit number
 # will be automatically selected.
 md10		/scratch	mfs	rw,-s1g		0	0
 #
 # Swap space on a vnode-backed md(4).
 md11		none		swap	sw,file=/swapfile	0 0
 #
 # CDROM.  "noauto" option is typically used because the
 # media is removable.
 /dev/cd0	/cdrom		cd9660	ro,noauto	0	0
 #
 # NFS-exported file system.  "serv" is an NFS server name
 # or IP address.
 serv:/export	/nfs		nfs	rw,noinet6	0	0
 .Ed
 .Sh SEE ALSO
 .Xr getfsent 3 ,
 .Xr getvfsbyname 3 ,
 .Xr strunvis 3 ,
 .Xr ccd 4 ,
 .Xr dump 8 ,
 .Xr fsck 8 ,
 .Xr geli 8 ,
 .Xr mount 8 ,
 .Xr quotacheck 8 ,
 .Xr quotaon 8 ,
 .Xr swapon 8 ,
 .Xr umount 8
 .Sh HISTORY
 The
 .Nm
 file format appeared in
 .Bx 4.0 .
Index: head/share/man/man5/mount.conf.5
===================================================================
--- head/share/man/man5/mount.conf.5	(revision 366614)
+++ head/share/man/man5/mount.conf.5	(revision 366615)
@@ -1,252 +1,251 @@
 .\" Copyright (c) 2013 Marcel Moolenaar
 .\" Copyright (c) 2013 Craig Rodrigues
 .\" All rights reserved.
 .\"
 .\" Redistribution and use in source and binary forms, with or without
 .\" modification, are permitted provided that the following conditions
 .\" are met:
 .\" 1. Redistributions of source code must retain the above copyright
 .\"    notice, this list of conditions and the following disclaimer.
 .\" 2. Redistributions in binary form must reproduce the above copyright
 .\"    notice, this list of conditions and the following disclaimer in the
 .\"    documentation and/or other materials provided with the distribution.
 .\"
 .\" THIS SOFTWARE IS PROVIDED BY THE AUTHORS AND CONTRIBUTORS ``AS IS'' AND
 .\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 .\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
 .\" ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHORS OR CONTRIBUTORS BE LIABLE
 .\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
 .\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
 .\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
 .\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
 .\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
 .\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
 .\" SUCH DAMAGE.
 .\"
 .\" $FreeBSD$
 .\"
 .\"
 .Dd October 17, 2013
 .Dt MOUNT.CONF 5
 .Os
 .Sh NAME
 .Nm mount.conf
 .Nd root file system mount configuration file
 .Sh SYNOPSIS
 .Pa /.mount.conf
 .Sh DESCRIPTION
 During the bootup process, the
 .Fx
 kernel will try to mount the root file system
 using the logic in the
 .Fn vfs_mountroot
 function in
 .Pa src/sys/kern/vfs_mountroot.c .
 The root mount logic can be described as follows:
 .Bl -enum
 .It
 The kernel will synthesize in memory a config file
 with default directives for mounting
 the root file system.
 The logic for this is in
 .Fn vfs_mountroot_conf0 .
 .It
 The kernel will first mount
 .Xr devfs 5
 as the root file system.
 .It
 Next, the kernel will parse the in-memory config file created in step 1
 and try to mount the actual root file system.
 See
 .Sx FILE FORMAT
 for the format of the config file.
 .It
 When the actual root file system is mounted,
 .Xr devfs 5
 will be re-mounted on the
 .Pa /dev
 directory.
 .It
 If a
 .Pa /.mount.conf
 file does not exist in the root file system which was
 just mounted, the root mount logic stops here.
 .It
 If a
 .Pa /.mount.conf
 file exists in the root file system which was just mounted,
 this file will be parsed, and the kernel will use this new config
 file to try to re-mount the root file system.
 See
 .Sx FILE FORMAT
 for the format of the config file.
 .It
 If the new root file system has a
 .Pa /.mount
 directory, the old root file system will be re-mounted
 on
 .Pa /.mount .
 .It
 The root mount logic will go back to step 4.
 .El
 .Pp
 The root mount logic is recursive, and step 8 will
 be repeated as long as each new root file system
 which is mounted has a
 .Pa /.mount.conf
 file.
 .Sh FILE FORMAT
 The kernel parses each line in
 .Pa .mount.conf
 and then tries to perform the action specified on that line as soon as it is parsed.
 .Bl -tag -width "XXXXXXXXXX"
 .It Ic #
 A line beginning with a # is a comment and is ignored.
 .It Ic {FS}:{MOUNTPOINT} {OPTIONS}
 The kernel will try to mount this in an
 operation equivalent to:
 .Bd -literal -offset indent
 mount -t {FS} -o {OPTIONS} {MOUNTPOINT} /
 .Ed
 .Pp
 If this is successfully mounted,
 further lines in
 .Pa .mount.conf
 are ignored.
 If all lines in
 .Pa .mount.conf
 have been processed and no root file system has been successfully
 mounted, then the action specified by
 .Ic .onfail
 is performed.
 .It Ic .ask
 When the kernel processes this line, a
 .Li mountroot>
 command-line prompt is displayed.
-At this prompt, the operator can enter the
-the root mount.
+At this prompt, the operator can enter the root mount.
 .It Ic .md Ar file
 Create a memory backed
 .Xr md 4
 virtual disk, using
 .Ar file
 as the backing store.
 .It Ic .onfail Ar [panic|reboot|retry|continue]
 If after parsing all the lines in
 .Pa .mount.conf
 the kernel is unable to mount a root file system,
 the
 .Ic .onfail
 directive tells the kernel what action to perform.
 .It Ic .timeout Ar N
 Before trying to mount a root file system,
 if the root mount device does not exist, wait at most
 .Ar N
 seconds for the device to appear before trying to mount it.
 If
 .Ic .timeout
 is not specified, the default timeout is 3 seconds.
 .El
 .Sh EXAMPLES
 The following example
 .Pa .mount.conf
 will direct the kernel to try mounting the root file system
 first as an ISO CD9660 file system on
 .Pa /dev/cd0 ,
 then if that does not work, as an ISO CD9660 file system on
 .Pa /dev/cd1 ,
 and then if that does not work, as a UFS file system on
 .Pa /dev/ada0s1a .
 If that does not work, a
 .Li mountroot>
 command-line prompt will be displayed where the operator
 can manually enter the root file system to mount.
 Finally if that does not work, the kernel will panic.
 .Bd -literal -offset indent
 .Li .onfail panic
 .Li .timeout 3
 cd9660:/dev/cd0 ro
 .Li .timeout 0
 cd9660:/dev/cd1 ro
 .Li .timeout 3
 ufs:/dev/ada0s1a
 .Li .ask
 .Ed
 .Pp
 The following example
 .Pa .mount.conf
 will direct the kernel to create a
 .Xr md 4
 memory disk attached to the file
 .Pa /data/OS-1.0.iso
 and then mount the ISO CD9660 file system
 on the md device which was just created.
 The last line is a comment which is ignored.
 .Bd -literal -offset indent
 .Li .timeout 3
 .Li .md /data/OS-1.0.iso
 .Li cd9600:/dev/md# ro
 .Li # Can also use cd9660:/dev/md0 ro
 .Ed
 .Pp
 The following example
 .Pa .mount.conf
 will direct the kernel to create a
 .Xr md 4
 memory disk attached to the file
 .Pa /data/base.ufs.uzip
 and then mount the UFS file system
 on the md uzip device which was just created
 by the
 .Xr geom_uzip 4
 driver.
 .Bd -literal -offset indent
 .Li .md /data/base.ufs.uzip
 .Li ufs:/dev/md#.uzip ro
 .Li # Can also use ufs:/dev/md0.uzip ro
 .Ed
 .Pp
 The following example
 .Pa .mount.conf
 will direct the kernel to do a unionfs
 mount on a directory
 .Pa /jail/freebsd-8-stable
 which has a
 .Xr chroot 2
 environment.
 .Bd -literal -offset indent
 .Li .timeout 3
 .Li unionfs:/jail/freebsd-8-stable
 .Ed
 .Sh NOTES
 For each root file system which is mounted, a
 .Pa /dev
 directory
 .Em must
 exist so that the root mount logic can properly re-mount
 .Xr devfs 5 .
 If this directory does not exist, the system
 may hang during the bootup process.
 .Sh SEE ALSO
 .Xr nmount 2 ,
 .Xr md 4 ,
 .Xr boot.config 5 ,
 .Xr fstab 5 ,
 .Xr boot 8 ,
 .Xr loader 8 ,
 .Xr mount 8
 .Sh HISTORY
 The
 .Nm
 file first appeared in
 .Fx 9.0 .
 .Sh AUTHORS
 .An -nosplit
 The root mount logic in the
 .Fx
 kernel which parses
 .Pa /.mount.conf
 was written by
 .An Marcel Moolenaar Aq Mt marcel@FreeBSD.org .
 This man page was written by
 .An Craig Rodrigues Aq Mt rodrigc@FreeBSD.org .
Index: head/share/man/man5/periodic.conf.5
===================================================================
--- head/share/man/man5/periodic.conf.5	(revision 366614)
+++ head/share/man/man5/periodic.conf.5	(revision 366615)
@@ -1,1013 +1,1013 @@
 .\"-
 .\" Copyright (c) 2000 Brian Somers <brian@Awfulhak.org>
 .\" All rights reserved.
 .\"
 .\" Redistribution and use in source and binary forms, with or without
 .\" modification, are permitted provided that the following conditions
 .\" are met:
 .\" 1. Redistributions of source code must retain the above copyright
 .\"    notice, this list of conditions and the following disclaimer.
 .\" 2. Redistributions in binary form must reproduce the above copyright
 .\"    notice, this list of conditions and the following disclaimer in the
 .\"    documentation and/or other materials provided with the distribution.
 .\"
 .\" THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
 .\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 .\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
 .\" ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
 .\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
 .\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
 .\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
 .\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
 .\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
 .\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
 .\" SUCH DAMAGE.
 .\"
 .\" $FreeBSD$
 .\"
 .Dd September 9, 2020
 .Dt PERIODIC.CONF 5
 .Os
 .Sh NAME
 .Nm periodic.conf
 .Nd periodic job configuration information
 .Sh DESCRIPTION
 The file
 .Nm
 contains a description of how daily, weekly and monthly system maintenance
 jobs should run.
 It resides in the
 .Pa /etc/defaults
 directory and parts may be overridden by a file of the same name in
 .Pa /etc ,
 which itself may be overridden by the
 .Pa /etc/periodic.conf.local
 file.
 .Pp
 The
 .Nm
 file
 is actually sourced as a shell script from each of the periodic scripts
 and is intended to simply provide default configuration variables.
 .Pp
 The following variables are used by
 .Xr periodic 8
 itself:
 .Bl -tag -offset 4n -width 2n
 .It Va local_periodic
 .Pq Vt str
 List of directories to search for periodic scripts.
 This list is always prefixed with
 .Pa /etc/periodic ,
 and is only used when an argument to
 .Xr periodic 8
 is not an absolute directory name.
 .It Ao Ar dir Ac Ns Va _output
 .Pq Vt path No or Vt list
 What to do with the output of the scripts executed from
 the directory
 .Ar dir .
 If this variable is set to an absolute path name, output is logged to
 that file, otherwise it is taken as one or more space separated email
 addresses and mailed to those users.
 If this variable is not set or is empty, output is sent to standard output.
 .Pp
 For an unattended machine, suitable values for
 .Va daily_output ,
 .Va weekly_output ,
 and
 .Va monthly_output
 might be
 .Dq Li /var/log/daily.log ,
 .Dq Li /var/log/weekly.log ,
 and
 .Dq Li /var/log/monthly.log
 respectively, as
 .Xr newsyslog 8
 will rotate these files (if they exists) at the appropriate times.
 .It Ao Ar dir Ac Ns Va _show_success
 .It Ao Ar dir Ac Ns Va _show_info
 .It Ao Ar dir Ac Ns Va _show_badconfig
 .Pq Vt bool
 These variables control whether
 .Xr periodic 8
 will mask the output of the executed scripts based on their return code
 (where
 .Ar dir
 is the base directory name in which each script resides).
 If the return code of a script is
 .Sq 0
 and
 .Ao Ar dir Ac Ns Va _show_success
 is set to
 .Dq Li NO ,
 .Xr periodic 8
 will mask the script's output.
 If the return code of a script is
 .Sq 1
 and
 .Ao Ar dir Ac Ns Va _show_info
 is set to
 .Dq Li NO ,
 .Xr periodic 8
 will mask the script's output.
 If the return code of a script is
 .Sq 2
 and
 .Ao Ar dir Ac Ns Va _show_badconfig
 is set to
 .Dq Li NO ,
 .Xr periodic 8
 will mask the script's output.
 If these variables are set to neither
 .Dq Li YES
 nor
 .Dq Li NO ,
 they default to
 .Dq Li YES ,
 .Dq Li YES
 and
 .Dq Li NO
 respectively.
 .Pp
 Refer to the
 .Xr periodic 8
 manual page for how script return codes are interpreted.
 .It Va anticongestion_sleeptime
 .Pq Vt int
 The maximum number of seconds to randomly sleep in order to smooth bursty loads
 on a shared resource, such as a download mirror.
 .El
 .Pp
 The following variables are used by the standard scripts that reside in
 .Pa /etc/periodic/daily :
 .Bl -tag -offset 4n -width 2n
 .It Va daily_clean_disks_enable
 .Pq Vt bool
 Set to
 .Dq Li YES
 if you want to remove all files matching
 .Va daily_clean_disks_files
 daily.
 .It Va daily_clean_disks_files
 .Pq Vt str
 Set to a list of file names to match.
 Wild cards are permitted.
 .It Va daily_clean_disks_days
 .Pq Vt num
 When
 .Va daily_clean_disks_enable
 is set to
 .Dq Li YES ,
 this must also be set to the number of days old that a file's access
 and modification times must be before it is deleted.
 .It Va daily_clean_disks_verbose
 .Pq Vt bool
 Set to
 .Dq Li YES
 if you want the removed files to be reported in your daily output.
 .It Va daily_clean_tmps_enable
 .Pq Vt bool
 Set to
 .Dq Li YES
 if you want to clear temporary directories daily.
 .It Va daily_clean_tmps_dirs
 .Pq Vt str
 Set to the list of directories to clear if
 .Va daily_clean_tmps_enable
 is set to
 .Dq Li YES .
 .It Va daily_clean_tmps_days
 .Pq Vt num
 When
 .Va daily_clean_tmps_enable
 is set, this must also be set to the number of days old that a file's access
 and modification times must be before it is deleted.
 .It Va daily_clean_tmps_ignore
 .Pq Vt str
 Set to the list of files that should not be deleted when
 .Va daily_clean_tmps_enable
 is set to
 .Dq Li YES .
 Wild card characters are permitted.
 .It Va daily_clean_tmps_verbose
 .Pq Vt bool
 Set to
 .Dq Li YES
 if you want the removed files to be reported in your daily output.
 .It Va daily_clean_preserve_enable
 .Pq Vt bool
 Set to
 .Dq Li YES
 if you wish to remove old files from
 .Pa /var/preserve .
 .It Va daily_clean_preserve_days
 .Pq Vt num
 Set to the number of days that files must not have been modified before
 they are deleted.
 .It Va daily_clean_preserve_verbose
 .Pq Vt bool
 Set to
 .Dq Li YES
 if you want the removed files to be reported in your daily output.
 .It Va daily_clean_msgs_enable
 .Pq Vt bool
 Set to
 .Dq Li YES
 if you wish old system messages to be purged.
 .It Va daily_clean_msgs_days
 .Pq Vt num
 Set to the number of days that files must not have been modified before
 they are deleted.
 If this variable is left blank, the
 .Xr msgs 1
 default is used.
 .It Va daily_clean_rwho_enable
 .Pq Vt bool
 Set to
 .Dq Li YES
 if you wish old files in
 .Pa /var/who
 to be purged.
 .It Va daily_clean_rwho_days
 .Pq Vt num
 Set to the number of days that files must not have been modified before
 they are deleted.
 .It Va daily_clean_rwho_verbose
 .Pq Vt bool
 Set to
 .Dq Li YES
 if you want the removed files to be reported in your daily output.
 .It Va daily_clean_hoststat_enable
 .Pq Vt bool
 Set to
 .Dq Li YES
 to run
 .Nm sendmail Fl bH
 to automatically purge stale entries from
 .Xr sendmail 8 Ns 's
 host status cache.
 Files will be deleted using the same criteria as
 .Xr sendmail 8
 would normally use when determining whether to believe the cached information,
 as configured in
 .Pa /etc/mail/sendmail.cf .
 .It Va daily_backup_efi_enable
 .Pq Vt bool
 Set to
 .Dq Li YES
-to create backup of EFI System Partion (ESP).
+to create backup of EFI System Partition (ESP).
 .It Va daily_backup_gpart_enable
 .Pq Vt bool
 Set to
 .Dq Li YES
 to create backups of partition tables, and bootcode partition contents.
 .It Va daily_backup_gpart_verbose
 .Pq Vt bool
 Set to
 .Dq Li YES
 to be verbose if existing backups for kern.geom.conftxt or the partition tables differ
 from the new backups.
 .It Va daily_backup_passwd_enable
 .Pq Vt bool
 Set to
 .Dq Li YES
 if you want the
 .Pa /etc/master.passwd
 and
 .Pa /etc/group
 files backed up and reported on.
 Reporting consists of checking both files for modifications and running
 .Xr chkgrp 8
 on the
 .Pa group
 file.
 .It Va daily_backup_aliases_enable
 .Pq Vt bool
 Set to
 .Dq Li YES
 if you want the
 .Pa /etc/mail/aliases
 file backed up and modifications to be displayed in your daily output.
 .It Va daily_calendar_enable
 .Pq Vt bool
 Set to
 .Dq Li YES
 if you want to run
 .Nm calendar Fl a
 daily.
 .It Va daily_accounting_enable
 .Pq Vt bool
 Set to
 .Dq Li YES
 if you want to rotate your daily accounting files.
 No rotations are necessary unless
 .Va accounting_enable
 is enabled in
 .Xr rc.conf 5 .
 .It Va daily_accounting_compress
 .Pq Vt bool
 Set to
 .Dq Li YES
 if you want your daily accounting files to be compressed using
 .Xr gzip 1 .
 .It Va daily_accounting_save
 .Pq Vt num
 When
 .Va daily_accounting_enable
 is set, this may also be set to the number of daily accounting files that are
 to be saved.
 The default is
 .Dq Li 3 .
 .It Va daily_accounting_flags
 .Pq Vt str
 Set to the arguments to pass to the
 .Xr sa 8
 utility (in addition to
 .Fl s )
 when
 .Va daily_accounting_enable
 is set to
 .Dq Li YES .
 The default is
 .Fl q .
 .It Va daily_news_expire_enable
 .Pq Vt bool
 Set to
 .Dq Li YES
 if you want to run
 .Pa /etc/news.expire .
 .It Va daily_status_disks_enable
 .Pq Vt bool
 Set to
 .Dq Li YES
 if you want to run
 .Xr df 1
 (with the arguments supplied in
 .Va daily_status_disks_df_flags )
 and
 .Nm dump Fl W .
 .It Va daily_status_disks_df_flags
 .Pq Vt str
 Set to the arguments for the
 .Xr df 1
 utility when
 .Va daily_status_disks_enable
 is set to
 .Dq Li YES .
 The default is
 .Fl l Fl h .
 .It Va daily_status_zfs_enable
 .Pq Vt bool
 Set to
 .Dq Li YES
 if you want to run
 .Nm zpool Cm status
 on your
 .Xr zfs 8
 pools.
 .It Va daily_status_zfs_zpool_list_enable
 .Pq Vt bool
 Set to
 .Dq Li YES
 if you want to run
 .Nm zpool Cm list
 on your
 .Xr zfs 8
 pools.
 Requires
 .Va daily_status_zfs_enable
 to be set to
 .Li YES .
 .It Va daily_status_gmirror_enable
 .Pq Vt bool
 Set to
 .Dq Li YES
 if you want to run
 .Nm gmirror Cm status
 on your
 .Xr gmirror 8
 devices.
 .It Va daily_status_graid3_enable
 .Pq Vt bool
 Set to
 .Dq Li YES
 if you want to run
 .Nm graid3 Cm status
 on your
 .Xr graid3 8
 devices.
 .It Va daily_status_gstripe_enable
 .Pq Vt bool
 Set to
 .Dq Li YES
 if you want to run
 .Nm gstripe Cm status
 on your
 .Xr gstripe 8
 devices.
 .It Va daily_status_gconcat_enable
 .Pq Vt bool
 Set to
 .Dq Li YES
 if you want to run
 .Nm gconcat Cm status
 on your
 .Xr gconcat 8
 devices.
 .It Va daily_status_mfi_enable
 .Pq Vt bool
 Set to
 .Dq Li YES
 if you want to run
 .Nm mfiutil Cm status
 on your
 .Xr mfi 4
 devices.
 .It Va daily_status_network_enable
 .Pq Vt bool
 Set to
 .Dq Li YES
 if you want to run
 .Nm netstat Fl i .
 .It Va daily_status_network_netstat_flags
 .Pq Vt str
 Set to additional arguments for the
 .Xr netstat 1
 utility when
 .Va daily_status_network_enable
 is set to
 .Dq Li YES .
 The default is
 .Fl d W .
 .It Va daily_status_network_usedns
 .Pq Vt bool
 Set to
 .Dq Li YES
 if you want to run
 .Xr netstat 1
 without the
 .Fl n
 option (to do DNS lookups).
 .It Va daily_status_uptime_enable
 .Pq Vt bool
 Set to
 .Dq Li YES
 if you want to run
 .Xr uptime 1
 (or
 .Xr ruptime 1
 if
 .Va rwhod_enable
 is set to
 .Dq Li YES
 in
 .Pa /etc/rc.conf ) .
 .It Va daily_status_mailq_enable
 .Pq Vt bool
 Set to
 .Dq Li YES
 if you want to run
 .Xr mailq 1 .
 .It Va daily_status_mailq_shorten
 .Pq Vt bool
 Set to
 .Dq Li YES
 if you want to shorten the
 .Xr mailq 1
 output when
 .Va daily_status_mailq_enable
 is set to
 .Dq Li YES .
 .It Va daily_status_include_submit_mailq
 .Pq Vt bool
 Set to
 .Dq Li YES
 if you also want to run
 .Xr mailq 1
 on the submit mail queue when
 .Va daily_status_mailq_enable
 is set to
 .Dq Li YES .
 This may not work with MTAs other than
 .Xr sendmail 8 .
 .It Va daily_status_security_enable
 .Pq Vt bool
 Set to
 .Dq Li YES
 if you want to run the security check.
 The security check is another set of
 .Xr periodic 8
 scripts.
 The system defaults are in
 .Pa /etc/periodic/security .
 Local scripts should be placed in
 .Pa /usr/local/etc/periodic/security .
 See the
 .Xr periodic 8
 manual page for more information.
 .It Va daily_status_security_inline
 .Pq Vt bool
 Set to
 .Dq Li YES
 if you want the security check output inline.
 The default is to either mail or log the output according to the value of
 .Va daily_status_security_output .
 .It Va daily_status_security_output
 .Pq Vt str
 Where to send the output of the security check if
 .Va daily_status_security_inline
 is set to
 .Dq Li NO .
 This variable behaves in the same way as the
 .Va *_output
 variables above, namely it can be set either to one or more email addresses
 or to an absolute file name.
 .It Va daily_status_mail_rejects_enable
 .Pq Vt bool
 Set to
 .Dq Li YES
 if you want to summarise mail rejections logged to
 .Pa /var/log/maillog
 for the previous day.
 .It Va daily_status_mail_rejects_logs
 .Pq Vt num
 Set to the number of maillog files that should be checked
 for yesterday's mail rejects.
 .It Va daily_status_ntpd_enable
 .Pq Vt bool
 Set to
 .Dq Li YES
 if you want to enable NTP status check.
 .It Va daily_status_world_kernel
 .Pq Vt bool
 Set to
 .Dq Li YES
 to check the running userland and kernel are in sync.
 .It Va daily_queuerun_enable
 .Pq Vt bool
 Set to
 .Dq Li YES
 if you want to manually run the mail queue at least once a day.
 .It Va daily_submit_queuerun
 .Pq Vt bool
 Set to
 .Dq Li YES
 if you also want to manually run the submit mail queue at least once a day
 when
 .Va daily_queuerun_enable
 is set to
 .Dq Li YES .
 .It Va daily_scrub_zfs_enable
 .Pq Vt bool
 Set to
 .Dq Li YES
 if you want to run a zfs scrub periodically.
 .It Va daily_scrub_zfs_pools
 .Pq Vt str
 A space separated list of names of zfs pools to scrub.
 If the list is empty or not set, all zfs pools are scrubbed.
 .It Va daily_scrub_zfs_default_threshold
 .Pq Vt int
 Number of days between a scrub if no pool-specific threshold is set.
 If not set, the default value is 35, corresponding to 5 weeks.
 .It Va daily_scrub_zfs_ Ns Ao Ar poolname Ac Ns Va _threshold
 .Pq Vt int
 The same as
 .Va daily_scrub_zfs_default_threshold
 but specific to the pool
 .Ao Ar poolname Ac Ns .
 .It Va daily_local
 .Pq Vt str
 Set to a list of extra scripts that should be run after all other
 daily scripts.
 All scripts must be absolute path names.
 .El
 .Pp
 The following variables are used by the standard scripts that reside in
 .Pa /etc/periodic/weekly :
 .Bl -tag -offset 4n -width 2n
 .It Va weekly_locate_enable
 .Pq Vt bool
 Set to
 .Dq Li YES
 if you want to run
 .Pa /usr/libexec/locate.updatedb .
 This script is run using
 .Nm nice Fl 5
 as user
 .Dq Li nobody ,
 and generates the table used by the
 .Xr locate 1
 command.
 .It Va weekly_whatis_enable
 .Pq Vt bool
 Set to
 .Dq Li YES
 if you want to run
 .Pa /usr/libexec/makewhatis.local .
 This script regenerates the database used by the
 .Xr apropos 1
 command.
 .It Va weekly_noid_enable
 .Pq Vt bool
 Set to
 .Dq Li YES
 if you want to locate orphaned files on the system.
 An orphaned file is one with an invalid owner or group.
 .It Va weekly_noid_dirs
 .Pq Vt str
 A list of directories under which orphaned files are searched for.
 This would usually be set to
 .Pa / .
 .It Va weekly_status_security_enable
 .Pq Vt bool
 Weekly counterpart of
 .Va daily_status_security_enable .
 .It Va weekly_status_security_inline
 .Pq Vt bool
 Weekly counterpart of
 .Va daily_status_security_inline .
 .It Va weekly_status_security_output
 .Pq Vt str
 Weekly counterpart of
 .Va daily_status_security_output .
 .It Va weekly_status_pkg_enable
 .Pq Vt bool
 Set to
 .Dq Li YES
 if you want to use
 .Xr pkg-version 8
 to list installed packages which are out of date.
 .It Va pkg_version
 .Pq Vt str
 When
 .Va weekly_status_pkg_enable
 is set to
 .Dq Li YES ,
 this variable specifies the program that is used to determine the out of
 date packages.
 If unset, the
 .Xr pkg-version 8
 program is used.
 As an example, this variable might be set to
 .Dq Li portversion
 if the
 .Pa ports/sysutils/portupgrade
 port has been installed.
 .It Va pkg_version_index
 .Pq Vt str
 This variable specifies the
 .Pa INDEX
 file from
 .Pa /usr/ports
 that should be used by
 .Xr pkg-version 8 .
 Because the dependency tree may be substantially different between versions of
 .Fx ,
 there may be more than one
 .Pa INDEX
 file in
 .Pa /usr/ports .
 .Pp
 Note, if the
 .Va pkg_version
 variable is set to
 .Dq Li portversion ,
 it will also be necessary to arrange that the correct
 .Pa INDEX
 file is specified
 using environment variables and that
 .Va pkg_version_index
 is cleared in
 .Pa /etc/periodic.conf
 .Pq Dq Li pkg_version_index= .
 .It Va weekly_local
 .Pq Vt str
 Set to a list of extra scripts that should be run after all other
 weekly scripts.
 All scripts must be absolute path names.
 .El
 .Pp
 The following variables are used by the standard scripts that reside in
 .Pa /etc/periodic/monthly :
 .Bl -tag -offset 4n -width 2n
 .It Va monthly_accounting_enable
 .Pq Vt bool
 Set to
 .Dq Li YES
 if you want to do login accounting using the
 .Xr ac 8
 command.
 .It Va monthly_status_security_enable
 .Pq Vt bool
 Monthly counterpart of
 .Va daily_status_security_enable .
 .It Va monthly_status_security_inline
 .Pq Vt bool
 Monthly counterpart of
 .Va daily_status_security_inline .
 .It Va monthly_status_security_output
 .Pq Vt str
 Monthly counterpart of
 .Va daily_status_security_output .
 .It Va monthly_local
 .Pq Vt str
 Set to a list of extra scripts that should be run after all other
 monthly scripts.
 All scripts must be absolute path names.
 .El
 .Pp
 The following variables are used by the standard scripts that reside in
 .Pa /etc/periodic/security .
 Those scripts are usually run from daily
 .Pq Va daily_status_security_enable ,
 weekly
 .Pq Va weekly_status_security_enable ,
 and monthly
 .Pq Va monthly_status_security_enable
 periodic hooks.
 The
 .Va ..._period
 of each script can be configured as
 .Dq daily ,
 .Dq weekly ,
 .Dq monthly
 or
 .Dq NO .
 Note that when periodic security scripts are run from
 .Xr crontab 5 ,
 they will be always run unless their
 .Va ..._enable
 or
 .Va ..._period
 variable is set to
 .Dq NO .
 .Bl -tag -offset 4n -width 2n
 .It Va security_status_diff_flags
 .Pq Vt str
 Set to the arguments to pass to the
 .Xr diff 1
 utility when generating differences.
 The default is
 .Fl b u .
 .It Va security_status_chksetuid_enable
 .Pq Vt bool
 Set to
 .Dq Li YES
 to compare the modes and modification times of setuid executables with
 the previous day's values.
 .It Va security_status_chksetuid_period
 .Pq Vt str
 Set to either
 .Dq Li daily ,
 .Dq Li weekly ,
 .Dq Li monthly
 or
 .Dq Li NO .
 .It Va security_status_chkportsum_enable
 .Pq Vt bool
 Set to
 .Dq Li YES
 to verify checksums of all installed packages against the known checksums in
 .Pa /var/db/pkg .
 .It Va security_status_chkportsum_period
 .Pq Vt str
 Set to either
 .Dq Li daily ,
 .Dq Li weekly ,
 .Dq Li monthly
 or
 .Dq Li NO .
 .It Va security_status_neggrpperm_enable
 .Pq Vt bool
 Set to
 .Dq Li YES
 to check for files where the group of a file has less permissions than
 the world at large.
 When users are in more than 14 supplemental groups these negative
 permissions may not be enforced via NFS shares.
 .It Va security_status_neggrpperm_period
 .Pq Vt str
 Set to either
 .Dq Li daily ,
 .Dq Li weekly ,
 .Dq Li monthly
 or
 .Dq Li NO .
 .It Va security_status_chkmounts_enable
 .Pq Vt bool
 Set to
 .Dq Li YES
 to check for changes mounted file systems to the previous day's values.
 .It Va security_status_chkmounts_period
 .Pq Vt str
 Set to either
 .Dq Li daily ,
 .Dq Li weekly ,
 .Dq Li monthly
 or
 .Dq Li NO .
 .It Va security_status_noamd
 .Pq Vt bool
 Set to
 .Dq Li YES
 if you want to ignore
 .Xr amd 8
 mounts when comparing against yesterday's file system mounts in the
 .Va security_status_chkmounts_enable
 check.
 .It Va security_status_chkuid0_enable
 .Pq Vt bool
 Set to
 .Dq Li YES
 to check
 .Pa /etc/master.passwd
 for accounts with UID 0.
 .It Va security_status_chkuid0_period
 .Pq Vt str
 Set to either
 .Dq Li daily ,
 .Dq Li weekly ,
 .Dq Li monthly
 or
 .Dq Li NO .
 .It Va security_status_passwdless_enable
 .Pq Vt bool
 Set to
 .Dq Li YES
 to check
 .Pa /etc/master.passwd
 for accounts with empty passwords.
 .It Va security_status_passwdless_period
 .Pq Vt str
 Set to either
 .Dq Li daily ,
 .Dq Li weekly ,
 .Dq Li monthly
 or
 .Dq Li NO .
 .It Va security_status_logincheck_enable
 .Pq Vt bool
 Set to
 .Dq Li YES
 to check
 .Pa /etc/login.conf
 ownership, see
 .Xr login.conf 5
 for more information.
 .It Va security_status_logincheck_period
 .Pq Vt str
 Set to either
 .Dq Li daily ,
 .Dq Li weekly ,
 .Dq Li monthly
 or
 .Dq Li NO .
 .It Va security_status_ipfwdenied_enable
 .Pq Vt bool
 Set to
 .Dq Li YES
 to show log entries for packets denied by
 .Xr ipfw 8
 since yesterday's check.
 .It Va security_status_ipfwdenied_period
 .Pq Vt str
 Set to either
 .Dq Li daily ,
 .Dq Li weekly ,
 .Dq Li monthly
 or
 .Dq Li NO .
 .It Va security_status_ipfdenied_enable
 .Pq Vt bool
 Set to
 .Dq Li YES
 to show log entries for packets denied by
 .Xr ipf 8
 since yesterday's check.
 .It Va security_status_ipfdenied_period
 .Pq Vt str
 Set to either
 .Dq Li daily ,
 .Dq Li weekly ,
 .Dq Li monthly
 or
 .Dq Li NO .
 .It Va security_status_pfdenied_enable
 .Pq Vt bool
 Set to
 .Dq Li YES
 to show log entries for packets denied by
 .Xr pf 4
 since yesterday's check.
 .It Va security_status_pfdenied_period
 .Pq Vt str
 Set to either
 .Dq Li daily ,
 .Dq Li weekly ,
 .Dq Li monthly
 or
 .Dq Li NO .
 .It Va security_status_ipfwlimit_enable
 .Pq Vt bool
 Set to
 .Dq Li YES
 to display
 .Xr ipfw 8
 rules that have reached their verbosity limit.
 .It Va security_status_ipfwlimit_period
 .Pq Vt str
 Set to either
 .Dq Li daily ,
 .Dq Li weekly ,
 .Dq Li monthly
 or
 .Dq Li NO .
 .It Va security_status_kernelmsg_enable
 .Pq Vt bool
 Set to
 .Dq Li YES
 to show new
 .Xr dmesg 8
 entries since yesterday's check.
 .It Va security_status_kernelmsg_period
 .Pq Vt str
 Set to either
 .Dq Li daily ,
 .Dq Li weekly ,
 .Dq Li monthly
 or
 .Dq Li NO .
 .It Va security_status_loginfail_enable
 .Pq Vt bool
 Set to
 .Dq Li YES
 to display failed logins from
 .Pa /var/log/messages
 in the previous day.
 .It Va security_status_loginfail_period
 .Pq Vt str
 Set to either
 .Dq Li daily ,
 .Dq Li weekly ,
 .Dq Li monthly
 or
 .Dq Li NO .
 .It Va security_status_tcpwrap_enable
 .Pq Vt bool
 Set to
 .Dq Li YES
 to display connections denied by tcpwrappers (see
 .Xr hosts_access 5 )
 from
 .Pa /var/log/messages
 during the previous day.
 .It Va security_status_tcpwrap_period
 .Pq Vt str
 Set to either
 .Dq Li daily ,
 .Dq Li weekly ,
 .Dq Li monthly
 or
 .Dq Li NO .
 .El
 .Sh FILES
 .Bl -tag -width ".Pa /etc/defaults/periodic.conf"
 .It Pa /etc/defaults/periodic.conf
 The default configuration file.
 This file contains all default variables and values.
 .It Pa /etc/periodic.conf
 The usual system specific variable override file.
 .It Pa /etc/periodic.conf.local
 An additional override file, useful when
 .Pa /etc/periodic.conf
 is shared or distributed.
 .El
 .Sh SEE ALSO
 .Xr apropos 1 ,
 .Xr calendar 1 ,
 .Xr df 1 ,
 .Xr diff 1 ,
 .Xr gzip 1 ,
 .Xr locate 1 ,
 .Xr man 1 ,
 .Xr msgs 1 ,
 .Xr netstat 1 ,
 .Xr nice 1 ,
 .Xr login.conf 5 ,
 .Xr rc.conf 5 ,
 .Xr ac 8 ,
 .Xr chkgrp 8 ,
 .Xr dump 8 ,
 .Xr newsyslog 8 ,
 .Xr periodic 8 ,
 .Xr pkg-version 8 ,
 .Xr sendmail 8
 .Sh HISTORY
 The
 .Nm
 file appeared in
 .Fx 4.1 .
 .Sh AUTHORS
 .An Brian Somers Aq Mt brian@Awfulhak.org