Annotation of src/etc/rc, Revision 1.105
1.105 ! millert 1: # $OpenBSD: rc,v 1.104 1999/08/05 08:10:06 millert Exp $
1.1 deraadt 2:
3: # System startup script run by init on autoboot
4: # or after single-user.
5: # Output and error are redirected to console by init,
6: # and the console is the controlling terminal.
7:
8: stty status '^T'
9:
10: # Set shell to ignore SIGINT (2), but not children;
11: # shell catches SIGQUIT (3) and returns to single user after fsck.
12: trap : 2
13: trap : 3 # shouldn't be needed
14:
15: HOME=/; export HOME
16: PATH=/sbin:/bin:/usr/sbin:/usr/bin
17: export PATH
18:
19: # Configure ccd devices.
1.17 deraadt 20: if [ -f /etc/ccd.conf ]; then
1.1 deraadt 21: ccdconfig -C
22: fi
1.98 jakob 23:
24: # Configure raid devices.
25: for dev in 0 1 2 3; do
26: if [ -f /etc/raid$dev.conf ]; then
27: raidctl -c /etc/raid$dev.conf raid$dev
28: fi
29: done
1.1 deraadt 30:
1.17 deraadt 31: if [ -e /fastboot ]; then
1.1 deraadt 32: echo "Fast boot: skipping disk checks."
1.17 deraadt 33: elif [ $1x = autobootx ]; then
1.1 deraadt 34: echo "Automatic boot in progress: starting file system checks."
1.31 millert 35: fsck -p
1.1 deraadt 36: case $? in
37: 0)
38: ;;
39: 2)
40: exit 1
41: ;;
42: 4)
43: echo "Rebooting..."
44: reboot
45: echo "Reboot failed; help!"
46: exit 1
47: ;;
48: 8)
49: echo "Automatic file system check failed; help!"
50: exit 1
51: ;;
52: 12)
53: echo "Boot interrupted."
54: exit 1
55: ;;
56: 130)
57: # interrupt before catcher installed
58: exit 1
59: ;;
60: *)
61: echo "Unknown error; help!"
62: exit 1
63: ;;
64: esac
65: fi
66:
67: trap "echo 'Boot interrupted.'; exit 1" 3
68:
69: swapon -a
70:
71: umount -a >/dev/null 2>&1
72: mount -a -t nonfs
1.57 niklas 73: mount -uw / # root on nfs requires this, others aren't hurt
1.1 deraadt 74: rm -f /fastboot # XXX (root now writeable)
75:
76: # set flags on ttys. (do early, in case they use tty for SLIP in netstart)
77: echo 'setting tty flags'
78: ttyflags -a
1.77 angelos 79:
1.100 provos 80: # if there's no /var/db/host.random, make one through /dev/urandom
81: if [ ! -f /var/db/host.random ]; then
82: dd if=/dev/urandom of=/var/db/host.random bs=1024 count=64 \
83: >/dev/null 2>&1
84: chmod 600 /var/db/host.random
85: else
86: dd if=/var/db/host.random of=/dev/urandom bs=1024 count=64 \
87: >/dev/null 2>&1
1.77 angelos 88: fi
1.1 deraadt 89:
90: # set hostname, turn on network
91: echo 'starting network'
92: . /etc/netstart
93:
94: mount /usr >/dev/null 2>&1
95: mount /var >/dev/null 2>&1
1.29 deraadt 96:
1.55 deraadt 97: # clean up left-over files
98: rm -f /etc/nologin
99: rm -f /var/spool/lock/LCK.*
100: rm -f /var/spool/uucp/STST/*
101: (cd /var/run && { rm -rf -- *; install -c -m 664 -g utmp /dev/null utmp; })
1.96 alex 102:
103: # save a copy of the boot messages
104: dmesg >/var/run/dmesg.boot
1.55 deraadt 105:
1.58 deraadt 106: echo 'starting system logger'
107: rm -f /dev/log
1.76 millert 108: if [ "X${named_flags}" != X"NO" -a "X${named_chroot}" != "X" ]; then
1.74 millert 109: rm -f ${named_chroot}/dev/log
110: syslogd_flags="${syslogd_flags} -a ${named_chroot}/dev/log"
111: fi
1.65 marc 112: syslogd ${syslogd_flags}
1.58 deraadt 113:
1.89 todd 114: # /etc/ifaliases, if it exists, contains the names of additional IP
115: # addresses for each interface. It is formatted as a series of lines
116: # that contain
117: # interface address netmask
118: if [ -f /etc/ifaliases ]; then
119: (
120: # delete comments and blank lines
121: set -- `sed -e 's/#.*$//' /etc/ifaliases | grep -v '^$'`
122: while [ $# -ge 3 ] ; do
123: ifconfig $1 inet alias $2 netmask $3
124: route -n add -host $2 localhost
125: shift 3
126: done
127: )
128: fi
129:
1.74 millert 130: # $named_flags, $named_user, and $named_chroot are imported from /etc/rc.conf;
1.54 deraadt 131: # if $named_flags != NO, named is run.
132: if [ "X${named_flags}" != X"NO" ]; then
1.74 millert 133: if [ "X${named_user}" != "X" -a "X${named_user}" != X"root" ]; then
134: named_flags="-u ${named_user} ${named_flags}"
135: fi
1.75 millert 136: if [ "X${named_chroot}" != "X" ]; then
1.81 millert 137: if [ ! -c "${named_chroot}/dev/null" ]; then
138: ( cd /dev ; pax -rw -pe null ${named_chroot}/dev )
1.83 millert 139: fi
140: if [ -f /etc/localtime -a -d "${named_chroot}/etc" ]; then
141: cmp -s /etc/localtime "${named_chroot}/etc/localtime" \
142: || cp -p /etc/localtime "${named_chroot}/etc/localtime"
1.81 millert 143: fi
1.74 millert 144: named_flags="-t ${named_chroot} ${named_flags}"
145: fi
1.58 deraadt 146: echo 'starting named'; named $named_flags
1.29 deraadt 147: fi
1.1 deraadt 148:
1.5 dm 149: if [ X"${ipfilter}" = X"YES" -a X"${ipmon_flags}" != X"NO" ]; then
1.43 mickey 150: echo 'starting ipmon'; ipmon ${ipmon_flags}
1.25 deraadt 151: fi
152:
1.52 deraadt 153: # $photurisd_flags is imported from /etc/rc.conf;
1.45 kstailey 154: # If $photurisd_flags == NO or /etc/photuris/photuris.conf doesn't exist, then
1.40 provos 155: # photurisd isn't run.
1.45 kstailey 156: if [ "X${photurisd_flags}" != X"NO" -a -e /etc/photuris/photuris.conf ]; then
1.40 provos 157: echo 'starting photurisd'; photurisd ${photurisd_flags}
1.94 deraadt 158: fi
159:
160: # $isakmpd_flags is imported from /etc/rc.conf;
161: # If $isakmpd_flags == NO or /etc/isakmpd.conf doesn't exist, then
162: # isakmpd isn't run.
163: if [ "X${isakmpd_flags}" != X"NO" -a -e /etc/isakmpd.conf ]; then
164: echo 'starting isakmpd'; isakmpd ${isakmpd_flags}
1.40 provos 165: fi
1.1 deraadt 166:
167: echo -n 'starting rpc daemons:'
1.24 millert 168:
1.52 deraadt 169: # $portmap is imported from /etc/rc.conf;
1.24 millert 170: # if $portmap == YES, the portmapper is started.
171: if [ X"${portmap}" = X"YES" ]; then
1.23 deraadt 172: echo -n ' portmap'; portmap
173: fi
1.1 deraadt 174:
1.9 deraadt 175: if [ -d /var/yp/binding ]; then
1.8 deraadt 176: if [ -d /var/yp/`domainname` ]; then
177: # yp server capabilities needed...
1.36 niklas 178: echo -n ' ypserv'; ypserv ${ypserv_flags}
1.16 deraadt 179: #echo -n ' ypxfrd'; ypxfrd
1.21 deraadt 180: fi
181:
182: echo -n ' ypbind'; ypbind
1.8 deraadt 183:
1.21 deraadt 184: if [ -d /var/yp/`domainname` ]; then
1.8 deraadt 185: # if we are the master server, run rpc.yppasswdd
186: _host1=`ypwhich -m passwd 2> /dev/null`
187: _host2=`hostname`
1.15 deraadt 188: if [ `grep '^lookup' /etc/resolv.conf | grep yp | wc -c` -ne 0 ]; then
1.8 deraadt 189: _host1=`ypmatch $_host1 hosts | cut -d' ' -f2`
190: _host2=`ypmatch $_host2 hosts | cut -d' ' -f2 | head -1`
191: else
192: _host1=`nslookup $_host1 | grep '^Name: ' | \
193: sed -e 's/^Name: //'`
194: _host2=`nslookup $_host2 | grep '^Name: ' | \
195: sed -e 's/^Name: //'`
196: fi
1.13 deraadt 197: if [ "$_host2" = "$_host1" ]; then
1.35 niklas 198: echo -n ' rpc.yppasswdd'
199: rpc.yppasswdd ${yppasswdd_flags}
1.8 deraadt 200: fi
1.7 deraadt 201: fi
1.1 deraadt 202: fi
203:
1.52 deraadt 204: # $nfs_server is imported from /etc/rc.conf;
1.1 deraadt 205: # if $nfs_server == YES, the machine is setup for being an nfs server
1.67 millert 206: if [ X${nfs_server} = X"YES" -a -s /etc/exports -a \
1.47 deraadt 207: `cat /etc/exports | sed -e '/^#/d' | wc -l` -ne 0 ]; then
1.68 millert 208: rm -f /var/db/mountdtab
1.1 deraadt 209: echo -n > /var/db/mountdtab
210: echo -n ' mountd'; mountd
1.42 niklas 211: echo -n ' nfsd'; nfsd ${nfsd_flags}
212: if [ X${lockd} = X"YES" ]; then
213: echo -n ' rpc.lockd'; rpc.lockd
214: fi
1.1 deraadt 215: fi
216:
1.52 deraadt 217: # $nfs_client is imported from /etc/rc.conf;
1.1 deraadt 218: # if $nfs_client == YES, the machine is setup for being an nfs client
219: if [ X${nfs_client} = X"YES" ]; then
1.59 downsj 220: echo -n ' nfsiod'; nfsiod ${nfsiod_flags}
1.1 deraadt 221: fi
222:
1.67 millert 223: if [ X${amd} = X"YES" -a -d ${amd_dir} -a -e ${amd_master} ]; then
1.1 deraadt 224: echo -n ' amd'
225: amd -l syslog -x error,noinfo,nostats -p \
226: -a ${amd_dir} `cat ${amd_master}` > /var/run/amd.pid
227: fi
228:
1.52 deraadt 229: # $timed_flags is imported from /etc/rc.conf;
1.1 deraadt 230: # if $timed_flags == NO, timed isn't run.
231: if [ "X${timed_flags}" != X"NO" ]; then
1.58 deraadt 232: echo -n ' timed'; timed $timed_flags
1.1 deraadt 233: fi
234: echo '.'
1.58 deraadt 235:
236: mount -a -t nfs
1.1 deraadt 237:
238: # /var/crash should be a directory or a symbolic link
239: # to the crash directory if core dumps are to be saved.
240: if [ -d /var/crash ]; then
241: savecore /var/crash
242: fi
243:
1.90 art 244: if [ "X${afs}" = X"YES" -a -c ${afs_device} -a -d ${afs_mount_point} ]; then
245: echo -n 'mounting afs:'
1.91 art 246: mount -t xfs ${afs_device} ${afs_mount_point}
1.90 art 247: /usr/libexec/afsd ${afsd_flags} -d ${afs_device}
248: echo ' done.'
249: fi
250:
1.41 downsj 251: if [ "X${check_quotas}" = X"YES" ]; then
252: echo -n 'checking quotas:'
253: quotacheck -a
254: echo ' done.'
255: quotaon -a
256: fi
1.1 deraadt 257:
258: # build ps databases
1.95 deraadt 259: echo -n 'building ps databases:'
260: echo -n " kvm"
1.88 millert 261: kvm_mkdb
1.95 deraadt 262: echo -n " dev"
1.1 deraadt 263: dev_mkdb
1.95 deraadt 264: echo "."
1.1 deraadt 265:
1.101 deraadt 266: chmod 666 /dev/tty[pqrstuvwxyzPQRST]*
267: chown root.wheel /dev/tty[pqrstuvwxyzPQRST]*
1.1 deraadt 268:
269: # check the password temp/lock file
1.17 deraadt 270: if [ -f /etc/ptmp ]; then
1.1 deraadt 271: logger -s -p auth.err \
272: 'password file may be incorrect -- /etc/ptmp exists'
1.32 deraadt 273: fi
274:
1.49 millert 275: echo clearing /tmp
276:
277: # prune quickly with one rm, then use find to clean up /tmp/[lq]*
278: # (not needed with mfs /tmp, but doesn't hurt there...)
279: (cd /tmp && rm -rf [a-km-pr-zA-Z]* &&
280: find . ! -name . ! -name lost+found ! -name quota.user \
1.103 millert 281: ! -name quota.group -execdir rm -rf -- {} \; -type d -prune)
1.61 deraadt 282:
283: if [ -f /etc/sysctl.conf ]; then
1.62 deraadt 284: (
1.61 deraadt 285: # delete comments and blank lines
286: set -- `sed -e 's/#.*$//' /etc/sysctl.conf | grep -v '^$'`
287: while [ $# -ge 1 ] ; do
288: sysctl -w $1
289: shift 1
290: done
1.68 millert 291: )
1.61 deraadt 292: fi
1.49 millert 293:
1.72 deraadt 294: [ -f /etc/rc.securelevel ] && . /etc/rc.securelevel
1.32 deraadt 295: if [ X${securelevel} != X"" ]; then
1.33 millert 296: echo -n 'setting kernel security level: '
1.32 deraadt 297: sysctl -w kern.securelevel=${securelevel}
1.1 deraadt 298: fi
299:
1.34 deraadt 300: # patch /etc/motd
301: if [ ! -f /etc/motd ]; then
302: install -c -o root -g wheel -m 664 /dev/null /etc/motd
303: fi
1.104 millert 304: T=`mktemp /tmp/_motd.XXXXXXXXXX`
1.105 ! millert 305: if [ $? -eq 0 ]; then
1.102 millert 306: sysctl -n kern.version | sed 1q > $T
307: echo "" >> $T
308: sed '1,/^$/d' < /etc/motd >> $T
309: cmp -s $T /etc/motd || cp $T /etc/motd
310: rm -f $T
311: fi
1.34 deraadt 312:
1.51 millert 313: # nvi file recovery
1.50 millert 314: if [ ! -d /var/tmp/vi.recover ]; then
315: if [ -e /var/tmp/vi.recover ]; then
316: echo "Warning! /var/tmp/vi.recover is not a directory!"
317: else
318: mkdir /var/tmp/vi.recover
319: chmod 1777 /var/tmp/vi.recover
320: fi
321: fi
1.51 millert 322: vibackup=/var/tmp/vi.recover/vi.*
323: if [ "$vibackup" != "/var/tmp/vi.recover/vi.*" ]; then
324: for i in $vibackup; do
325: # Unmodified nvi editor backup files either have the
326: # execute bit set or are zero length. Delete them.
1.72 deraadt 327: if [ -x $i -o ! -s $i ]; then
1.51 millert 328: rm $i
329: fi
330: done
331: fi
1.1 deraadt 332: virecovery=/var/tmp/vi.recover/recover.*
333: if [ "$virecovery" != "/var/tmp/vi.recover/recover.*" ]; then
334: echo preserving editor files
335: for i in $virecovery; do
1.51 millert 336: # Delete any recovery files that are zero length, corrupted,
337: # or that have no corresponding backup file. Else send mail
338: # to the user.
339: recfile=`awk '/^X-vi-recover-path:/{print $2}' < $i`
1.72 deraadt 340: if [ -n "$recfile" -a -s "$recfile" ]; then
1.51 millert 341: sendmail -t < $i
342: else
343: rm $i
344: fi
1.1 deraadt 345: done
346: fi
347:
348: if [ -f /var/account/acct ]; then
349: echo 'turning on accounting'; accton /var/account/acct
350: fi
351:
352: echo -n starting network daemons:
353:
1.52 deraadt 354: # $gated and $routed_flags are imported from /etc/rc.conf.
1.1 deraadt 355: # If $gated == YES, gated is used; otherwise routed.
356: # If $routed_flags == NO, routed isn't run.
1.67 millert 357: if [ X${gated} = X"YES" -a -e /etc/gated.conf ]; then
1.1 deraadt 358: echo -n ' gated'; gated $gated_flags
359: elif [ "X${routed_flags}" != X"NO" ]; then
360: echo -n ' routed'; routed $routed_flags
361: fi
362:
1.52 deraadt 363: # $mrouted_flags is imported from /etc/rc.conf;
1.4 deraadt 364: # If $mrouted_flags == NO, then mrouted isn't run.
365: if [ "X${mrouted_flags}" != X"NO" ]; then
366: echo -n ' mrouted'; mrouted $mrouted_flags
367: fi
1.1 deraadt 368:
1.86 form 369: # $dhcpd_flags is imported from /etc/rc.conf
370: # If $dhcpd_flags == NO or /etc/dhcpd.conf doesn't exist, then dhcpd isn't run.
371: if [ "X${dhcpd_flags}" != X"NO" -a -f /etc/dhcpd.conf ]; then
372: touch /var/db/dhcpd.leases
373: if [ -f /etc/dhcpd.interfaces ]; then
374: dhcpd_ifs=`cat /etc/dhcpd.interfaces | awk -F\# '{ print $1; }'`
375: fi
376: echo -n ' dhcpd'; /usr/sbin/dhcpd ${dhcpd_flags} ${dhcpd_ifs}
377: fi
378:
1.52 deraadt 379: # $rwhod is imported from /etc/rc.conf;
1.1 deraadt 380: # if $rwhod == YES, rwhod is run.
381: if [ X${rwhod} = X"YES" ]; then
382: echo -n ' rwhod'; rwhod
383: fi
384:
1.23 deraadt 385:
386: if [ X${lpd} = X"YES" ]; then
387: echo -n ' printer'; lpd
388: fi
1.1 deraadt 389:
1.52 deraadt 390: # $sendmail_flags is imported from /etc/rc.conf;
1.1 deraadt 391: # If $sendmail_flags == NO or /etc/sendmail.cf doesn't exist, then
1.6 deraadt 392: # sendmail isn't run. We call sendmail with a full path so that
393: # SIGHUP works.
1.67 millert 394: if [ "X${sendmail_flags}" != X"NO" -a -s /etc/sendmail.cf ]; then
1.6 deraadt 395: echo -n ' sendmail'; /usr/sbin/sendmail ${sendmail_flags}
1.69 deraadt 396: fi
397:
398: if [ "X${httpd_flags}" != X"NO" ]; then
399: echo -n ' httpd'; /usr/sbin/httpd ${httpd_flags}
1.93 downsj 400: fi
401:
402: if [ "X${ftpd_flags}" != X"NO" ]; then
403: echo -n ' ftpd'; /usr/libexec/ftpd ${ftpd_flags}
1.1 deraadt 404: fi
1.63 beck 405:
406: # $smtpfwdd_flags is imported from /etc/rc.conf;
407: # If $smtpfwdd_flags == NO, smtpfwdd isn't run.
408: if [ "X${smtpfwdd_flags}" != X"NO" ]; then
409: echo -n ' smtpfwdd'; /usr/libexec/smtpfwdd ${smtpfwdd_flags}
410: fi
411:
1.1 deraadt 412:
1.23 deraadt 413: if [ X${inetd} = X"YES" ]; then
414: echo -n ' inetd'; inetd
415: fi
1.1 deraadt 416:
1.52 deraadt 417: # $rarpd_flags is imported from /etc/rc.conf;
1.1 deraadt 418: # If $rarpd_flags == NO or /etc/ethers doesn't exist, then
419: # rarpd isn't run.
1.67 millert 420: if [ "X${rarpd_flags}" != X"NO" -a -s /etc/ethers ]; then
1.1 deraadt 421: echo -n ' rarpd'; rarpd ${rarpd_flags}
422: fi
423:
1.52 deraadt 424: # $bootparamd_flags is imported from /etc/rc.conf;
1.1 deraadt 425: # If $bootparamd_flags == NO or /etc/bootparams doesn't exist, then
426: # bootparamd isn't run.
1.67 millert 427: if [ "X${bootparamd_flags}" != X"NO" -a -s /etc/bootparams ]; then
1.1 deraadt 428: echo -n ' rpc.bootparamd'; rpc.bootparamd ${bootparamd_flags}
429: fi
430:
1.52 deraadt 431: # $rbootd_flags is imported from /etc/rc.conf;
1.1 deraadt 432: # If $rbootd_flags == NO or /etc/rbootd.conf doesn't exist, then
433: # rbootd isn't run.
1.67 millert 434: if [ "X${rbootd_flags}" != X"NO" -a -s /etc/rbootd.conf ]; then
1.1 deraadt 435: echo -n ' rbootd'; rbootd ${rbootd_flags}
1.56 maja 436: fi
437:
438: # $mopd_flags is imported from /etc/rc.conf;
439: # If $mopd_flags == NO or /tftpboot/mop doesn't exist, then
440: # mopd isn't run.
441: if [ "X${mopd_flags}" != X"NO" -a -d /tftpboot/mop ]; then
442: echo -n ' mopd'; mopd ${mopd_flags}
1.37 deraadt 443: fi
444:
445: if [ -x /usr/sbin/screenblank ]; then
446: echo -n ' screenblank'; /usr/sbin/screenblank
1.1 deraadt 447: fi
448:
449: echo '.'
450:
1.12 deraadt 451: if [ -f /sbin/kbd -a -f /etc/kbdtype ]; then
452: kbd `cat /etc/kbdtype`
453: fi
1.17 deraadt 454:
455: if [ -f /sbin/ldconfig ]; then
456: echo 'creating runtime link editor directory cache.'
1.26 deraadt 457: if [ -d /usr/local/lib ]; then
1.99 millert 458: shlib_dirs="$shlib_dirs /usr/local/lib"
1.26 deraadt 459: fi
460: if [ -d /usr/X11R6/lib ]; then
1.99 millert 461: shlib_dirs="$shlib_dirs /usr/X11R6/lib"
1.26 deraadt 462: fi
1.97 millert 463: ldconfig $shlib_dirs
1.53 deraadt 464: fi
1.17 deraadt 465:
1.66 art 466: # Kerberos runs ONLY on the Kerberos servers
467: # Kadmin is runs only on the main server
1.17 deraadt 468: if [ X${kerberos_server} = X"YES" ]; then
1.30 tholo 469: echo 'kerberos server'
1.60 art 470: /usr/libexec/kerberos >> /var/log/kerberos.log &
471: /usr/libexec/kadmind -n >> /var/log/kadmind.log &
1.66 art 472: fi
473:
474: # Kpropd runs only on Kerberos slave servers
475: if [ X${kerberos_slave} = X"YES" ]; then
476: echo 'kerberos slave server'
477: /usr/libexec/kerberos -s >> /var/log/kerberos.log &
478: /usr/libexec/kpropd -i &
1.17 deraadt 479: fi
480:
1.72 deraadt 481: [ -f /etc/rc.local ] && . /etc/rc.local
1.73 millert 482:
483: echo -n standard daemons:
1.87 marc 484:
485: # $apmd_flags is imported from /etc/rc.conf;
486: # don't run daemon if $apmd_flags == NO or /usr/sbin/apmd doesn't exist
487: if [ "X${apmd_flags}" != X"NO" -a -x /usr/sbin/apmd ]; then
488: echo -n ' apmd'; /usr/sbin/apmd ${apmd_flags}
489: fi
490:
1.73 millert 491: echo -n ' cron'; cron
1.87 marc 492:
1.73 millert 493: echo '.'
1.1 deraadt 494:
495: date
1.71 deraadt 496:
497: # Alternatively, on some architectures, xdm may be started in /etc/ttys.
498: if [ "X${xdm_flags}" != X"NO" ]; then
1.92 downsj 499: echo 'starting xdm...'; /usr/X11R6/bin/xdm ${xdm_flags}
1.71 deraadt 500: fi
501:
1.1 deraadt 502: exit 0
1.90 art 503: