Section 8: administration and privileged commands
lcp_crtpollist – create an Intel(R) TXT policy list Synopsis lcp_crtpollist COMMAND [OPTION] Description lcp_crtpollist is used to create an Intel(R) TXT policy list. Options –create Create an TXT policy list. The following options are available: –out file policy list file [–ver version] version [file]… policy element files –sigh Sign an TXT policy list. –pub key-file PEM file…
lcp_crtpolelt – create an Intel(R) TXT policy element of specified type. Synopsis lcp_crtpolelt COMMAND [OPTION] Description lcp_crtpolelt is used to create an Intel(R) TXT policy element of specified type. Options –create create an policy element –type type type of element; must be first option; see below for type strings and their options –out file output file name…
lcp_crtpol2 – create an Intel(R) TXT policy (and policy data file) Synopsis lcp_crtpol2 COMMAND [OPTION] Description lcp_crtpol2 is used to create an Intel(R) TXT policy (and policy data file) for platforms produced after 2008. Options –create Create an TXT policy. The following options are available: –type any|list type –pol file policy file [–ver version] version [–minver ver] SINITMinVersion [–rev ctr1,ctrN]…
lcp_crtpol – create a TXT v1 Launch Control Policy Synopsis lcp_crtpol -t policy-type [-a hashalg] [-v version] [-sr SINIT-revocation-counter] [-s srtm-file] [-m mle-file] [-o policy-file] [-b policy-data-file] [-pcf policy-control-field] [-h] Description lcp_crtpol is used to create a TXT v1 LCP policy (and optionally policy data), which can later be written to the TPM. The policy…
lcp_crtpconf – create a platform configuration measurement for v1 policies Synopsis lcp_crtpconf -p PCR-index1,PCR-index2,…,PCR-indexN [-f file-name] [-h] Description lcp_crtpconf is used to create a platform configuration measurement. The produced platform configuration measurement will be appended to the input file in binary mode. Options -p PCR-index1,PCR-index2,…,PCR-indexN Index values can be 0-23. -f file-name File name to which the…
latencytop – a tool for developers to visualize system latencies Synopsis latencytop [–unknown] [processes…] Description This manual page documents briefly the latencytop command. latencytop is a Linux* tool for software developers (both kernel and userspace), aimed at identifying where in the system latency is happening, and what kind of operation/action is causing the latency to…
lastlog – reports the most recent login of all users or of a given user Synopsis lastlog [options] Description lastlog formats and prints the contents of the last login log /var/log/lastlog file. The login-name, port, and last login time will be printed. The default (no flags) causes lastlog entries to be printed, sorted by their…
laptop-detect – attempt to detect a laptop Synopsis laptop-detect [-h|–help|-v|–verbose|-V|–version] Description Laptop-detect attempts to determine whether it is being run on a laptop or a desktop and appraises its caller of this. Options -h –help Output help information and exit. -v –verbose be verbose (messages go to STDOUT) -V –version Output version information and exit….
l2tpd_selinux – Security Enhanced Linux Policy for the l2tpd processes Description Security-Enhanced Linux secures the l2tpd processes via flexible mandatory access control. The l2tpd processes execute with the l2tpd_t SELinux type. You can check if you have these processes running by executing the ps command with the -Z qualifier. For example: ps -eZ | grep…
l2ping – Send L2CAP echo request and receive answer Synopsis l2ping [-i <hciX>] [-s size] [-c count] [-t timeout] [-d delay] [-f] [-r] [-v] bd_addr Description L2ping sends a L2CAP echo request to the Bluetooth MAC address bd_addr given in dotted hex notation. Options -i <hciX> The command is applied to device hciX , which…
ktalkd_selinux – Security Enhanced Linux Policy for the ktalkd processes Description Security-Enhanced Linux secures the ktalkd processes via flexible mandatory access control. The ktalkd processes execute with the ktalkd_t SELinux type. You can check if you have these processes running by executing the ps command with the -Z qualifier. For example: ps -eZ | grep…
kstash – store the KDC master password in a file Synopsis -words [-e string | –-enctype= string ] [-k file | –-key-file= file ] [–convert-file ] [–random-key ] [–master-key-fd= fd ] [–random-key ] [-h | –help ] [–version ] Description reads the Kerberos master key and stores it in a file that will be used…
ksplice-view – View in-kernel or on-disk Ksplice kernel updates Synopsis ksplice-view ksplice-view –id=KSPLICE_ID ksplice-view –file={UPDATE_TARBALL | UPDATE_TREE} Description When called with no arguments, ksplice-view lists the identification tags of all of the Ksplice updates that are currently present in the running kernel, along with their descriptions. ksplice-view can report about a specific Ksplice update when…
ksplice-undo – Undo a Ksplice update that has been applied to the running kernel Synopsis ksplice-undo [OPTIONS] KSPLICE_ID Description ksplice-undo takes as input a Ksplice identification tag, as reported by ksplice-view(8), and it reverses that update within the running binary kernel. Options –debug Reverses the update with debugging output enabled. Recommended only for debugging. –debugfile=filename…
ksplice-create – Create a set of kernel modules for a rebootless kernel update Synopsis ksplice-create [OPTIONS] –patch=PATCH_FILE KERNEL_SOURCE ksplice-create [OPTIONS] –diffext=EXTENSION KERNEL_SOURCE ksplice-create [OPTIONS] –git=COMMIT KERNEL_SOURCE ksplice-create [OPTIONS] –prebuild KERNEL_SOURCE Description ksplice-create creates a set of Ksplice kernel modules that, when loaded, will apply a user-specified source code patch to the running binary kernel. Before…
ksplice-apply – Apply an on-disk Ksplice update to the running kernel Synopsis ksplice-apply [OPTIONS] {UPDATE_TARBALL | UPDATE_TREE} Description ksplice-apply takes as input a Ksplice update, as generated by ksplice-create(8), and it applies the update to the running binary kernel. The update may be supplied in the form of a tarball or an unpacked tree. The…
ksmtuned_selinux – Security Enhanced Linux Policy for the ksmtuned processes Description Security-Enhanced Linux secures the ksmtuned processes via flexible mandatory access control. The ksmtuned processes execute with the ksmtuned_t SELinux type. You can check if you have these processes running by executing the ps command with the -Z qualifier. For example: ps -eZ | grep…
krb5kdc_selinux – Security Enhanced Linux Policy for the krb5kdc processes Description Security-Enhanced Linux secures the krb5kdc processes via flexible mandatory access control. The krb5kdc processes execute with the krb5kdc_t SELinux type. You can check if you have these processes running by executing the ps command with the -Z qualifier. For example: ps -eZ | grep…
krb5kdc – Kerberos V5 KDC Synopsis krb5kdc [-x db_args] [-d dbname] [-k keytype] [-M mkeyname] [-p portnum] [-m] [-r realm] [-n] [-w numworkers] [-P pid_file] [-T time_offset] Description krb5kdc is the Kerberos version 5 Authentication Service and Key Distribution Center (AS/KDC). Options The -r realm option specifies the realm for which the server should provide…
kproplog – display the contents of the Kerberos principal update log Synopsis kproplog [-h] [-e num] [-v] kproplog [-R] Description The kproplog command displays the contents of the KDC database update log to standard output. It can be used to keep track of incremental updates to the principal database. The update log file contains the…