Section 1: user commands and tools
NAME ecryptfs-setup-swap – ensure that any swap space is encrypted SYNOPSIS ecryptfs-setup-swap [-f|–force] DESCRIPTION This script will detect existing swap partitions or swap files, and encrypt them, using cryptsetup. Encrypted swap is essential to securing any system using eCryptfs, since decrypted file contents will exist in the system’s memory, which may be swapped to disk…
NAME ecryptfs-setup-private – setup an eCryptfs private directory. SYNOPSIS ecryptfs-setup-private [-f|–force] [-w|–wrapping] [-b|–bootstrap] [-n|–no-fnek] [–nopwcheck] [-u|–username USER] [-l|–loginpass LOGINPASS] [-m|–mountpass MOUNTPASS] OPTIONS Options available for the ecryptfs-setup-private command: -f, –force Force overwriting of an existing setup -w, –wrapping Use an independent wrapping passphrase, different from the login passphrase -u, –username USER User to setup, default…
NAME ecryptfs-rewrite-file – force a file to be rewritten (reencrypted) in the lower filesystem SYNOPSIS ecryptfs-rewrite-file [file1] [file2] [file3] … DESCRIPTION This script takes one or more files/directories/symlinks as arguments, moves each of them to a temporary file, and then moves them back to the original name. This causes the file to be rewritten (and…
NAME ecryptfs-rewrap-passphrase – unwrap an eCryptfs wrapped passphrase, rewrap it with a new passphrase, and write it back to file. SYNOPSIS ecryptfs-rewrap-passphrase [file] printf "%s %s" "old wrapping passphrase" "new wrapping passphrase" | ecryptfs-rewrap-passphrase [file] – DESCRIPTION ecryptfs-rewrap-passphrase is a utility to change the wrapping passphrase on a wrapped passphrase file. SEE ALSO ecryptfs(7), ecryptfs-unwrap-passphrase(1),…
NAME ecryptfs-recover-private – find and mount any encrypted private directories SYNOPSIS ecryptfs-recover-private [–rw] [encrypted private dir] DESCRIPTION This utility is intended to help eCryptfs recover data from their encrypted home or encrypted private partitions. It is useful to run this from a LiveISO or a recovery image. It must run under sudo(8) or with root…
NAME ecryptfs-mount-private – interactive eCryptfs private mount wrapper script. SYNOPSIS ecryptfs-mount-private DESCRIPTION ecryptfs-mount-private is a wrapper script for the mount.ecryptfs_private utility that will interactively prompt for the user’s login password, if necessary. FILES ~/.Private – underlying directory containing encrypted data ~/Private – mountpoint containing decrypted data (when mounted) ~/.ecryptfs/Private.sig – file containing signature of mountpoint…
NAME ecryptfs-insert-wrapped-passphrase-into-keyring – unwrap a wrapped passphrase from file and insert into the kernel keyring. SYNOPSIS ecryptfs-insert-wrapped-passphrase-into-keyring [file] printf "%s" "wrapping passphrase" | ecryptfs-insert-wrapped-passphrase-into-keyring [file] – DESCRIPTION ecryptfs-insert-wrapped-passphrase-into-keyring is a utility to manually unwrap a passphrase from a file, and insert the unwrapped passphrase into the kernel keyring. SEE ALSO ecryptfs(7), keyctl(1) /usr/share/doc/ecryptfs-utils/ecryptfs-faq.html http://ecryptfs.org/ AUTHOR…
NAME ecryptfs-generate-tpm-key – generate an eCryptfs key for TPM hardware. SYNOPSIS ecryptfs-generate-tpm-key -p PCR [-p PCR]… DESCRIPTION ecryptfs-generate-tpm-key is a utility to generate a sealing (storage) key bound to a specified set of PCRs values in the current TPM’s PCR’s. EXAMPLE ecryptfs-generate-tpm-key -p 0 -p 2 -p 3 SEE ALSO ecryptfs(7) /usr/share/doc/ecryptfs-utils/ecryptfs-faq.html http://ecryptfs.org/ AUTHOR This…
NAME ecryptfs-find – use inode numbers to match encrypted/decrypted filenames SYNOPSIS ecryptfs-find cleartext-filename ecryptfs-find ECRYPTFS_FNEK_ENCRYPTED.fwBGx18a.UcYl18CF7VKLMSDuEadV DESCRIPTION This program will attempt to match encrypted filenames to their decrypted counterpart, and attempt to match decrypted filenames to their encrypted counterpart. Notes: – the eCryptfs filesystem must be mounted in order to work – it uses ls(1) in order to…
NAME ecryptfs-add-passphrase – add an eCryptfs mount passphrase to the kernel keyring. SYNOPSIS ecryptfs-add-passphrase [–fnek] printf "%s" "passphrase" | ecryptfs-add-passphrase [–fnek] – DESCRIPTION ecryptfs-add-passphrase is a utility to manually add a passphrase to the kernel keyring. If the –fnek option is specified, the filename encryption key associated with the input passphrase will also be added…
NAME ecpg – embedded SQL C preprocessor SYNOPSIS ecpg [option…] file… DESCRIPTION ecpg is the embedded SQL preprocessor for C programs. It converts C programs with embedded SQL statements to normal C code by replacing the SQL invocations with special function calls. The output files can then be processed with any C compiler tool chain….
NAME ecl – Embeddable Common LISP SYNOPSIS ecl [-dir dir] [-load file] [-eval expr] [-compile file [-o ofile] [-c [cfile]] [-h [hfile]] [-data [datafile]] [-s] [-q]] DESCRIPTION ECL stands for Embeddable Common-Lisp. The ECL project is an effort to modernize Giuseppe Attardi’s ECL environment to produce an implementation of the Common-Lisp language which…
NAME ecl-config – Embeddable Common LISP configuration query SYNOPSIS ecl-config [-cflags] [-libs] [-ldflags] [ LIBS] DESCRIPTION ecl-config will return through the standard output the set of compiler or linker flags needed to build applications that embed ecl. OPTIONS -cflags Output the flags required to compile a C/C++ file. -libs -ldflags Return the linker flags required…
NAME echoscu – DICOM verification (C-ECHO) SCU SYNOPSIS echoscu [options] peer port DESCRIPTION The echoscu application implements a Service Class User (SCU) for the Verification SOP Class. It sends a DICOM C-ECHO message to a Service Class Provider (SCP) and waits for a response. The application can be used to verify basic DICOM connectivity. PARAMETERS…
NAME echoping_whois – echoping plugin which connects to a whois server SYNOPSIS echoping [echoping options] -m whois hostname [-d] request DESCRIPTION whois is an echoping plugin to connect to whois/nicname servers (see RFC 3912). ARGUMENTS request The request to the whois server (typically a domain name) OPTIONS -d, –dump Dumps the result of the request…
NAME echoping_postgresql – echoping plugin which connects to a PostgreSQL RDBMS server SYNOPSIS echoping [echoping options] -m postgresql hostname [-cconninfo] [-e] [-r] [SQL-request] DESCRIPTION postgresql is an echoping plugin to connect to PostgreSQL RDBMS servers. ARGUMENTS [SQL-request] The request to the PostgreSQL server (in SQL). Only SELECT are supported. The default is ‘SELECT now()’. OPTIONS…
NAME echoping_ldap – echoping plugin which connects to a LDAP server SYNOPSIS echoping [echoping options] -m ldap hostname [-bbase] [-rrequest] [-sscope] [-pport] DESCRIPTION ldap is an echoping plugin to connect to LDAP servers. OPTIONS -r request The request to the LDAP server, in LDAP filter language. By default (objectclass=*). -b base Base of the search,…
NAME echoping_dns – echoping plugin which queries a DNS server SYNOPSIS echoping [echoping options] -m dns hostname request DESCRIPTION dns is an echoping plugin, fo testing the performances of DNS (RFC 1034 and 1035) servers. ARGUMENTS request A domain name OPTIONS -t, –type The type of data requested (NS, A, SOA, etc) –no-recurse Do not…
NAME echoping – tests a remote host with TCP or UDP SYNOPSIS echoping [-4] [-6] [-v] [-V] [-ffill] [-ttimeout] [-c] [-d] [-u] [-ssize] [-nnumber] [-wdelay] [-hurl-or-path] [-R] [-iurl] [-ppriority] [-Ptos] [-C] [-S] [-A] [-a] [-mplugin] hostname [:port] [plugin options…] DESCRIPTION echoping is a small program to test (approximatively) performances of a remote Internet host by…
NAME echo – display a line of text SYNOPSIS echo [,SHORT-OPTION/]… [,STRING/]… echo ,LONG-OPTION/ DESCRIPTION Echo the STRING(s) to standard output. -n do not output the trailing newline -e enable interpretation of backslash escapes -E disable interpretation of backslash escapes (default) –help display this help and exit –version output version information and exit If -e…