Section 8: administration and privileged commands
cgdcbxd – control group dcb event net_prio daemon Synopsis cgdcbxd [options] Description cgdcbxd is a daemon used to monitor DCB netlink events and manage the net_prio control group subsystem. The daemon keeps the hierarchy and priority mappings in sync with DCBX Application events. When a DCB netlink event is received cgdcbxd parses the application TLV…
cgconfigparser – setup control group file system Synopsis cgconfigparser [-h] [-l <filename>] [-L <directory>] […] Options -h, –help Displays help. -l, –load=FILE Parses the control groups configuration file Sets up the control group file system defined by the configuration file and mounts mount points defined by the configuration file. The format of the file is…
cgconfig_selinux – Security Enhanced Linux Policy for the cgconfig processes Description Security-Enhanced Linux secures the cgconfig processes via flexible mandatory access control. The cgconfig processes execute with the cgconfig_t SELinux type. You can check if you have these processes running by executing the ps command with the -Z qualifier. For example: ps -eZ | grep…
cgclear_selinux – Security Enhanced Linux Policy for the cgclear processes Description Security-Enhanced Linux secures the cgclear processes via flexible mandatory access control. The cgclear processes execute with the cgclear_t SELinux type. You can check if you have these processes running by executing the ps command with the -Z qualifier. For example: ps -eZ | grep…
cfshow – Dump cfengine databases Synopsis /usr/local/sbin/cfshow [options] Description cfengine is a language based system specifically designed for testing and configuring unix-like systems attached to a TCP/IP network. cfshow is a tool for showing the contents of the internal databases used by cfengine in its operation. Many users will not care about these internal details,…
cfservd – cfengine server daemon Synopsis /usr/local/sbin/cfservd [options] Description cfengine is a language based system specifically designed for testing and configuring unix-like systems attached to a TCP/IP network. Cfservd is a file server and protective wrapper for starting cfengine remotely. It performs access control based on RSA authentication and IP address. The daemon looks for…
cfrun – Execute remote cfagents Synopsis /usr/local/sbin/cfrun [options] Description cfengine is a language based system specifically designed for testing and configuring unix-like systems attached to a TCP/IP network. cfrun is a tool for executing one or more remote agents; it contacts the cfservd daemon running on a remote host, which (in turn) starts an authorized…
cfengine – network configuration engine Synopsis /usr/local/sbin/cfexecd Description cfengine is a language based system specifically designed for testing and configuring unix-like systems attached to a TCP/IP network. Th cfexecd is a wrapper for local execution of cfagent. It may be used to capture cfagent output and send it as mail when run cron cron, e.g….
cfetool update – Update the database with a new value Synopsis cfetool update name –value|-V value [–path|-p directory name] [–time|-t seconds] [–daily|-d] [–weekly|-w] [–yearly|-y] [–cfenvd|-c] [–histograms|-H] [–verbose|-v] [–help|-h] Description Takes a new value and uses it to update the database specified by name, located at the path specified by the -p argument, or the current working directory if…
cfetool info – Get information about a database Synopsis cfetool info name [–path|-p directory name] [–daily|-d] [–weekly|-w] [–yearly|-y] [–verbose|-v] [–help|-h] Description Prints out some basic information about the specified database, including: the location of the database, the location of the histogram file (if there is one), the step interval, the database age, the time it was…
cfetool import – import the contents of a database from XML format Synopsis cfetool import name –file|-f filename [–path|-p directory name] [–daily|-d] [–weekly|-w] [–yearly|-y] [–verbose|-v] [–help|-h] Description Creates a new database from it’s XML representation, in the format created by rrdtool dump. The -d, -w, and -y options specify which databases to create and look for in…
cfetoolgraph – create graphs from a cfetool database Synopsis cfetoolgraph name [–path|-p directory name] [–daily|-d] [–weekly|-w] [–yearly|-y] [–timestamps|-T] [–resolution|-r] [–help|-h] Description The cfetoolgraph command dumps graphs of averages for visual inspection of the normal state database. The files are in a format viewable by "gnuplot" or "xgmr" or other graphical plotting program. The command generates three…
cfetool dump – dump the contents of a database in XML format Synopsis cfetool dump name [–path|-p directory name] [–file|-f filename] [–daily|-d] [–weekly|-w] [–yearly|-y] [–verbose|-v] [–help|-h] Description Prints the contents of the specified database in XML format, with comments for human readability. This format can be read by cfetool import. The -d, -w, and -y options specify…
cfetool create – Set up a new Database Synopsis cfetool create name [–path|-p directory name] [–step|-s step] [–daily|-d] [–weekly|-w] [–yearly|-y] [–cfenvd|-c] [–histograms|-H] [–verbose|-v] [–file|-f filename] [–help|-h] Description Creates a new database and, optionally, histogram file in a new directory with the name given. If the -p option is specified, it will be created as a subdirectory of the…
cfetool check – Check a new value against the averages currently in the database Synopsis cfetool check name –value|-V value [–path|-p directory name] [–time|-t seconds] [–daily|-d] [–weekly|-w] [–yearly|-y] [–histograms|-H] [–verbose|-v] [–help|-h] Description Takes a new value and checks it against the averages currently in the database specified by name, located at the path specified by the -p argument,…
cfengine – network configuration engine Synopsis /usr/local/sbin/cfenvgraph [options] Command Line Options –help –file Override default input database –erasehistory Erase machine-learned history of named traces. Comma separated list (no spaces) –outputdir override name of output directory –titles Generate titles in output data files for traces –timestamps Add time stamps to output directory –resolution Maximum output resolution…
cfengine – network configuration engine Synopsis /usr/local/sbin/cfenvd Description cfengine is a language based system specifically designed for testing and configuring unix-like systems attached to a TCP/IP network. Cfenvd is part of the anomaly detection subsystem for cfagent. It is a "plug’n’play" module that provides machine learning support to the agent. Cfenvd requires no configuration. It…
cfengine_serverd_selinux – Security Enhanced Linux Policy for the cfengine_serverd processes Description Security-Enhanced Linux secures the cfengine_serverd processes via flexible mandatory access control. The cfengine_serverd processes execute with the cfengine_serverd_t SELinux type. You can check if you have these processes running by executing the ps command with the -Z qualifier. For example: ps -eZ | grep…
cfengine_selinux – Security Enhanced Linux Policy for the cfengine processes Description Security-Enhanced Linux secures the cfengine processes via flexible mandatory access control. Nsswitch Domain If you want to allow users to login using a sssd serve for the cfengine_execd_t, cfengine_monitord_t, cfengine_serverd_t, you must turn on the authlogin_nsswitch_use_ldap boolean. setsebool -P authlogin_nsswitch_use_ldap 1 If you want…
cfengine_monitord_selinux – Security Enhanced Linux Policy for the cfengine_monitord processes Description Security-Enhanced Linux secures the cfengine_monitord processes via flexible mandatory access control. The cfengine_monitord processes execute with the cfengine_monitord_t SELinux type. You can check if you have these processes running by executing the ps command with the -Z qualifier. For example: ps -eZ | grep…