aboutsummaryrefslogtreecommitdiff
path: root/etc/defaults
diff options
context:
space:
mode:
authorPawel Jakub Dawidek <pjd@FreeBSD.org>2005-08-05 23:38:51 +0000
committerPawel Jakub Dawidek <pjd@FreeBSD.org>2005-08-05 23:38:51 +0000
commit49ad116fcc61697bdb76c2a29ee51a4b9bbd1621 (patch)
tree9525933ae3f12c9e693f6f7e9051f8f460bd3eb0 /etc/defaults
parente816acc79b99943ac1c215b08b5f92da83f0c979 (diff)
downloadsrc-49ad116fcc61697bdb76c2a29ee51a4b9bbd1621.tar.gz
src-49ad116fcc61697bdb76c2a29ee51a4b9bbd1621.zip
Teach rc.d/encswap script how to use geli(8) for swap encryption.
MFC after: 3 days
Notes
Notes: svn path=/head/; revision=148765
Diffstat (limited to 'etc/defaults')
-rw-r--r--etc/defaults/rc.conf2
1 files changed, 2 insertions, 0 deletions
diff --git a/etc/defaults/rc.conf b/etc/defaults/rc.conf
index 0e2eaf0fbac7..e9d86e46e79d 100644
--- a/etc/defaults/rc.conf
+++ b/etc/defaults/rc.conf
@@ -59,6 +59,8 @@ gbde_devices="NO" # Devices to automatically attach (list, or AUTO)
gbde_attach_attempts="3" # Number of times to attempt attaching gbde devices
gbde_lockdir="/etc" # Where to look for gbde lockfiles
+geli_swap_flags="-a aes -l 256 -s 4096 -d" # Options for GELI-encrypted swap partitions.
+
root_rw_mount="YES" # Set to NO to inhibit remounting root read-write.
fsck_y_enable="NO" # Set to YES to do fsck -y if the initial preen fails.
background_fsck="YES" # Attempt to run fsck in the background where possible.