HardenedBSD/etc/sysconfig

#!/bin/sh
#

# This is sysconfig - a file full of useful variables that you can set 
# to change the default startup behavior of your system.
#
#	$Id: sysconfig,v 1.63 1997/04/09 20:15:01 guido Exp $

######################### Start Of Local Configuration Section ###########

# Location of local startup directories.
local_startup="/usr/local/etc/rc.d /usr/X11R6/etc/rc.d"

######################### End Of Local Configuration Section #############

######################### Start Of Syscons Section #######################

# Choose keyboard map from /usr/share/syscons/keymaps/* or NO if default.
keymap=NO

# Set keyboard rate to: slow, normal, fast or NO if default.
keyrate=NO

# Change function keys default values (or no change if NO)
# Syntax: "<funkey_number> <new_value> [<funkey_number> <new_value>]..."
keychange=NO

# Desired cursor type {normal|blink|destructive}, NO if no change
cursor=NO

# Desired bell type {duration.pitch|normal|visual}, NO if no change
keybell=NO

# Choose screen map from /usr/share/syscons/scrnmaps/* (or NO for none)
scrnmap=NO

# Choose font 8x16 from /usr/share/syscons/fonts/* (or NO for default)
font8x16=NO

# Choose font 8x14 from /usr/share/syscons/fonts/* (or NO for default)
font8x14=NO

# Choose font 8x8 from /usr/share/syscons/fonts/* (or NO for default)
font8x8=NO

# Set blank time (in seconds) or "off" to turn it off (or NO for default)
blanktime=NO

# Set to screen saver desired: blank, green, snake, star (or NO for none)
saver=NO

# Set to
# {microsoft|mousesystems|mmseries|logitech|busmouse|mouseman|ps/2|mmhittab}
# to activate system mouse cursor support (or NO for none)
# Use 'vidcontrol -m on' command to activate it on particular screen
#
# If you give mousedtype a value, you must use the /dev/sysmouse device
# (or a link to it) and the MouseSystems protocol under X.
mousedtype=NO

############## Next block activated only if mousedtype != NO ################

# Set to your mouse port (required)
# Use real device here, because /dev/mouse usually linked with /dev/sysmouse
mousedport=/dev/cuaa0

# Moused options:
# -s: 9600 baud mouse
# -c: enable ChordMiddle
# see moused usage info for complete options list
mousedflags=""

######################### End of moused block ##############################

# General Russian setup for example:
# (koi8-r keyboard with cp866 screen font mapped to koi8-r)
#
# keymap=ru.koi8-r
# keyrate=fast
# keychange="61 "
# cursor=destructive
# scrnmap=koi8-r2cp866
# font8x16=cp866b-8x16
# font8x14=cp866-8x14
# font8x8=cp866-8x8
# blanktime=600
# saver=snake
# mousedtype=mousesystems
# mousedport=/dev/cuaa0
# mousedflags=""

######################### End Of Syscons Section #######################

######################### Start Of Netconfig Section #######################

# Set to the name of your host - this is pretty important!
hostname=myname.my.domain

# Set to the NIS domainname of your host, or NO if none
defaultdomainname=NO

#
# Some broken implementations can't handle the RFC 1323 and RFC 1644
# TCP options.  If TCP connections randomly hang, try disabling this,
# and bug the vendor of the losing equipment.
#
tcp_extensions=YES

# If you're running PCNFSD or anything else which requires mountd to allow
# non-root requests for NFS mounts, set this to YES.
weak_mountd_authentication=NO

#
# Set to the list of network devices on this host.  You must have an
# ifconfig_${network_interface} line for each interface listed here.
# Extra addresses may be specified with sequentual _alias<N> lines. IPX
# addresses may be specified with an ifconfig_${network_interface}_ipx
# line.
#
# for example:
#
#	network_interfaces="ed0 sl0 lo0"
#
#	ifconfig_ed0="inet 10.0.0.1 netmask 0xffffff00"
#	ifconfig_sl0="inet 10.0.1.0 netmask 0xffffff00"
#	ifconfig_lo0="inet 127.0.0.1"
#	ifconfig_ed0_alias0="inet 10.0.2.1 netmask 0xffffff00"
#	ifconfig_ed0_alias1="inet 10.0.2.2 netmask 0xffffffff"
#	ifconfig_ed0_ipx="ipx 0x1234"
#
# Alternatively, /etc/start_if.${network_interface} is run if it exists.
# This script can be used as an alternative to the ifconfig_<xxx> lines.
#
network_interfaces="lo0"

ifconfig_lo0="inet 127.0.0.1"

#
# Set to the list of route add lines for this host.  You must have a
# route_${static_routes} line for each static route listed here (unless
# static_routes is set to "" - do NOT use ``NO'' to denote a lack of static
# routes!).
#
#static_routes="foo multicast"
#route_foo="woofo woofo-gw"
#route_multicast="224.0.0.0 -netmask 0xf0000000 -interface 10.0.0.1"
static_routes=""

# Set to the host you'd like set as your default router, or NO for none.
# This is the same as adding a ``default'' entry to static_routes.
defaultrouter=NO

# This is the routing daemon you want to use.  Possible options are
# currently NO (for none), `routed' and `gated'.  Also see `routerflags'
# for startup flags.
router=routed

# These are the flags you'd like to start the routing daemon with
routerflags=-q

# mrouted flags, or NO if you don't want to start mrouted. Needs kernel
# options enabled before it will work.
mrouted=NO

# YES will switch routing on in the kernel. You need to switch this on
# if this machine has to act as a IPX router. You need to build a
# kernel with IPX support for this to work.
ipxgateway=NO

# IPXrouted flags. NO if you don't want to start it. Do "man IPXrouted"
# to get more information on the flags.
ipxrouted=NO

# timed flags, or NO if you don't want to start the time daemon
timedflags=NO

# portmap flags, or NO if you don't want to start the portmap daemon
portmapflags=""

# xntpd flags, or NO if you don't want to start the xntpd daemon
xntpdflags="NO"

# this is inoperative unless xntpd is enabled; NO to disable
tickadjflags="-Aq"

# Set to the site you'd like to synchronize your clock from (gatekeeper.dec.com,
# for example) or NO for no such site.
ntpdate="NO"

# Set to YES if you want to run rwhod
rwhod=NO

# Set to NO if don't want to run lpd
lpd=YES

# Default sendmail flags.  -bd is pretty mandatory, -q<n>m sets the queue scan
# time in minutes.  If set to NO, don't start sendmail at all.
sendmail_flags="-bd -q30m"

# Set to appropriate flags if you want to use AMD.  The commented-out entry
# provides a reasonable default, using the sample amd.map config file from the
# /usr/src/etc directory.
amdflags="NO"
#amdflags="-a /net -c 1800 -k i386 -d my.domain -l syslog /host /etc/amd.map"

# Set to YES if this machine will be an NFS client
nfs_client=NO

# Set to YES if this machine will be an NFS server
nfs_server=NO

# the following option controls if the nfs server will be only allow
# requests from reserved ports. NB: running mountd with
# weak_mountd_authentication=YES will automatically clear this flag.
# See also mountd(8)
nfs_reserved_port_only=NO

# Set to appropriate flags if you want to start NIS for a client
nis_clientflags="NO"

# Name of host to ypset to, if no YP server on this wire
nis_ypsetflags="NO"

# Set to appropriate flags if you want to start NIS for a server
nis_serverflags="NO"

# Set to appropriate flags for rpc.ypxfrd. This should only be
# run on NIS master servers.
ypxfrdflags="NO"

# Set to appropriate flags for rpc.yppasswdd. This should only be
# run on NIS master servers.
# Typical flags might be "-t /var/yp/master.passwd -s -f"
yppasswddflags="NO"

# syslogd flags, or NO if you don't want to start the syslog daemon
syslogdflags=""

# Set to appropriate flags for named, if you have a full-time
# connection to the Internet.
# For most hosts, flags should be "-b /etc/namedb/named.boot"
namedflags="NO"

# Set to YES if you want to run the X-10 power controller daemon
xtend=NO

# Set to the name of the device for kernel crashdumps, or `off' to
# disable any statically configured dumpdev, or NO for no change.
# The device should normally be one of the swap devices specified
# in /etc/fstab.
dumpdev=NO

# Set to an additional swapfile you'd like to have added to preallocated swap
# space during system boot (or NO for none).
swapfile=NO

# Set to YES if you want to run Kerberos authentication
kerberos_server=NO

# If you want this host to be a gateway, set to YES.
gateway=NO

# If you want this host to be a firewall or otherwise filter IP, set to YES.
firewall=NO

# Set to YES if you wish to check quotas.
check_quotas=NO

# Set to YES to turn on accounting.
accounting=NO

######################### End Of Netconfig Section #######################

######################### Start Of PC-card Section #######################

# If you want to enable APM BIOS driver, set to YES
# (The APM BIOS driver is not configured into GENERIC kernel b/c of bugs)
apm_enable=NO

# If you want to use PC-card package, set to YES
# (PC-card support is not configured in the GENERIC kernel)
pccard_enable=NO

# If you want to specify the address of memory used by PCIC, 
# set this address (DEFAULT=0xd0000)
pccard_mem=DEFAULT

# If you want to use Etnerent PCMCIA cards, specify the ifconfig portion
# here.  (card-specific flags like connector selection should be written in
# the card-specific entry in /etc/pccard.conf).  Set to DHCP if you want to
# use a DHCP server to determine your IP address.  If you want to use DHCP
# please install Wide-DHCP client from ports/packages collection (this
# package requires you to configure and setup BPF (Berkeley Packet Filter)
# in your kernel.
#
# Set to NO if you don't want to configure your PC-CARD ethernet controller.
#
# for example:
#
#      pccard_ifconfig="131.113.32.126 netmask 0xffffff00"
# or
#      pccard_ifconfig="DHCP"
#
pccard_ifconfig=NO

######################### End Of PC-card Section #######################

######################### Start Of Misc Section #######################

# Set to YES if you want ibcs2 (SCO) emulation loaded at startup
ibcs2=NO

# Set to YES if you want Linux a.out emulation loaded at startup
linux=NO

# Set to a string representing the interrupts you are going to use
#  for generating entropy in the kernel (or NO to ignore).
#  If the machine is networked, the Ethernet card IRQ is good.
#  The IRQ on an intelligent hard disk controller is good.
#  The IRQ's on most sound devices are good.
#
#  The following choices are BAD:
#  The IRQ's on COM-ports (SIO devices), the IRQ used by a "classic"
#  IDE disk or cdrom (Intelligent controllers seem to be OK), and
#  the IRQ on the system clock.
#
# Experiment with the rest. The best interrupts are the ones that
#  happen fairly irregularly, and never occur in very high-speed bursts.
#
# You'll have it right when you have a good supply of numbers from
#  /dev/random, and no problems on your system, like slowdowns,
#  Sluggish net/disk activity, perhaps even errors.

# For example - if you have a sound blaster on IRQ5, an ethernet card
# on IRQ10 and a SCSI controller on IRQ11 (eg ADAPTEC 1542) you might
# try this:
#
#	rand_irqs="-s 5 -s 10 -s 11"

rand_irqs="NO"