HardenedBSD/etc/sysconfig

#!/bin/sh
#

# This is sysconfig - a file full of useful variables that you can set 
# to change the default startup behavior of your system.
#
#	$Id: sysconfig,v 1.35 1996/02/09 12:20:40 jkh Exp $

######################### Start Of Local Configuration Section ###########

# Location of local startup directories.
local_startup="/usr/local/etc/rc.d /usr/X11R6/etc/rc.d"

######################### End Of Local Configuration Section #############

######################### Start Of Syscons Section #######################

# Choose keyboard map from /usr/share/syscons/keymaps/* or NO if default.
keymap=NO

# Set keyboard rate to: slow, normal, fast or NO if default.
keyrate=NO

# Change function keys default values (or no change if NO)
# Syntax: "<funkey_number> <new_value> [<funkey_number> <new_value>]..."
keychange=NO

# Desired cursor type {normal|blink|destructive}, NO if no change
cursor=NO

# Choose screen map from /usr/share/syscons/scrnmaps/* (or NO for none)
scrnmap=NO

# Choose font 8x16 from /usr/share/syscons/fonts/* (or NO for default)
font8x16=NO

# Choose font 8x14 from /usr/share/syscons/fonts/* (or NO for default)
font8x14=NO

# Choose font 8x8 from /usr/share/syscons/fonts/* (or NO for default)
font8x8=NO

# Set blank time (in seconds) or "off" to turn it off (or NO for default)
blanktime=NO

# Set to screen saver desired: blank, green, snake, star (or NO for none)
saver=NO

# General Russian setup for example:
# (koi8-r keyboard with cp866 screen font mapped to koi8-r)
#
# keymap=ru.koi8-r
# keyrate=fast
# keychange="61 "
# cursor=destructive
# scrnmap=koi8-r2cp866
# font8x16=cp866b-8x16
# font8x14=cp866-8x14
# font8x8=cp866-8x8
# blanktime=600
# saver=snake

######################### End Of Syscons Section #######################

######################### Start Of Netconfig Section #######################

# Set to the name of your host - this is pretty important!
hostname=myname.my.domain

# Set to the NIS domainname of your host, or NO if none
defaultdomainname=NO

#
# Some broken implementations can't handle the RFC 1323 and RFC 1644
# TCP options.  If TCP connections randomly hang, try disabling this,
# and bug the vendor of the losing equipment.
#
tcp_extensions=YES

# If you're running PCNFSD or anything else which requires mountd to allow
# non-root requests for NFS mounts, set this to YES.
weak_mountd_authentication=NO

#
# Set to the list of network devices on this host.  You must have an
# ifconfig_${network_interface} line for each interface listed here.
# for example:
#
#	network_interfaces="ed0 sl0 lo0"
#	ifconfig_ed0="inet 10.0.0.1 netmask 0xffffff00"
#	ifconfig_sl0="inet 10.0.1.0 netmask 0xffffff00"
#
network_interfaces="lo0"
ifconfig_lo0="inet localhost"

#
# Set to the list of route add lines for this host.  You must have a
# route_${static_routes} line for each static route listed here (unless
# static_routes is set to NO).
#
#static_routes="foo multicast"
#route_foo="woofo woofo-gw"
#route_multicast="224.0.0.0 -netmask 0xf0000000 -interface 10.0.0.1"
static_routes=NO

# Set to the host you'd like set as your default router, or NO for none.
# Note:  If set, this option *overrides* the static_routes variable.
defaultrouter=NO

# This is the routing daemon you want to use.  Possible options are
# currently NO (for none), `routed' and `gated'.  Also see `routerflags'
# for startup flags.
router=routed

# These are the flags you'd like to start the routing daemon with
routerflags=-q

# mrouted flags, or NO if you don't want to start mrouted. Needs kernel
# options enabled before it will work.
mrouted=NO

# timed flags, or NO if you don't want to start the time daemon
timedflags=NO

# xntpd flags, or NO if you don't want to start the xntpd daemon
xntpdflags="NO"

# this is inoperative unless xntpd is enabled; NO to disable
tickadjflags="-Aq"

# Set to the site you'd like to synchronize your clock from (gatekeeper.dec.com,
# for example) or NO for no such site.
ntpdate="NO"

# Set to YES if you want to run rwhod
rwhod=NO

# Set to NO if don't want to run lpd
lpd=YES

# Default sendmail flags.  -bd is pretty mandatory, -q<n>m sets the queue scan
# time in minutes.  If set to NO, don't start sendmail at all.
sendmail_flags="-bd -q30m"

# Set to appropriate flags if you want to use AMD.  The commented-out entry
# provides a reasonable default, using the sample amd.map config file from the
# /usr/src/etc directory.
amdflags="NO"
#amdflags="a /net -c 1800 -k i386 -d my.domain -l syslog /host /etc/amd.map"

# Set to YES if this machine will be an NFS client
nfs_client=NO

# Set to YES if this machine will be an NFS server
nfs_server=NO

# Set to appropriate flags if you want to start NIS for a client
nis_clientflags="NO"

# Name of host to ypset to, if no YP server on this wire
nis_ypsetflags="NO"

# Set to appropriate flags if you want to start NIS for a server
nis_serverflags="NO"

# Set to appropriate flags for yppasswdd, if you wish to run it.
# Typical flags might be "-m /var/yp/master.passwd -s -f"
yppasswddflags="NO"

# Set to appropriate flags for named, if you have a full-time
# connection to the Internet.
# For most hosts, flags should be "-b /etc/namedb/named.boot"
namedflags="NO"

# Set to YES if you want to run the X-10 power controller daemon
xtend=NO

# Set to the name of the device for kernel crashdumps, or `off' to
# disable any statically configured dumpdev, or NO for no change.
# The device should normally be one of the swap devices specified
# in /etc/fstab.
dumpdev=NO

# Set to YES if you want kernel crashdumps to be saved for debugging
savecore=NO

# Set to YES if you want to run Kerberos authentication
kerberos_server=NO

# If you want this host to be a gateway, set to YES.
gateway=NO

# Set to YES if you wish to check quotas.  NOTE:  For now this probably
# doesn't work and should be left disabled.
check_quotas=NO

# Set to YES to turn on accounting.  NOTE: For now this probably
# doesn't work and should be left disabled.
accounting=NO

######################### End Of Netconfig Section #######################

######################### Start Of Misc Section #######################

# Set to YES if you want ibcs2 (SCO) emulation loaded at startup
ibcs2=NO

# Set to YES if you want Linux a.out emulation loaded at startup
linux=NO

# Set to a string representing the interrupts you are going to use
#  for generating entropy in the kernel (or NO to ignore).
#  The keyboard (IRQ 1) is good if it used a lot.
#  If the machine is networked, the Ethernet card is good.
#  The IRQ on an intelligent hard disk controller is good.
#  The IRQ's on most sound devices are good.
#
#  The following choices are BAD:
#  THe IRQ's on COM-ports (SIO devices), the IRQ used by an IDE
#  disk or CDROM, and the IRQ on the system clock.
#
# Experiment with the rest. The best interrupts are the ones that
#  happen fairly irregularly, and never occur in very high-speed bursts.
#
# You'll have it right when you have a good supply of numbers from
#  /dev/random, and no problems on your system, like slow downs,
#  Sluggish net/disk activity, perhaps even errors.

rand_irqs="-s 1"