Section 8: administration and privileged commands
cfengine_execd_selinux – Security Enhanced Linux Policy for the cfengine_execd processes Description Security-Enhanced Linux secures the cfengine_execd processes via flexible mandatory access control. The cfengine_execd processes execute with the cfengine_execd_t SELinux type. You can check if you have these processes running by executing the ps command with the -Z qualifier. For example: ps -eZ | grep…
cfengine – network configuration engine Synopsis /usr/local/sbin/cfagent [options] /usr/local/sbin/cfrun [options] /usr/local/sbin/cfservd /usr/local/sbin/cfexecd /usr/local/sbin/cfenvd /usr/local/sbin/cfkey /usr/local/sbin/cfenvgraph Description cfengine is a language based system specifically designed for testing and configuring unix-like systems attached to a TCP/IP network. You can think of cfengine as a very high level language — much higher level than Perl or shell. A…
cfdisk – display or manipulate a disk partition table Synopsis cfdisk [options] [device] Description cfdisk is a curses-based program for partitioning any block device. The default device is /dev/sda. Note that cfdisk provides basic partitioning functionality with a user-friendly interface. If you need advanced features, use fdisk(8) instead. All disk label changes will remain in…
cfagent – system configuration agent Synopsis /usr/local/sbin/cfagent [options] Description cfengine is a language based system specifically designed for testing and configuring unix-like systems attached to a TCP/IP network. You can think of cfengine as a very high level language — much higher level than Perl or shell. A single statement can result in many hundreds…
certwatch_selinux – Security Enhanced Linux Policy for the certwatch processes Description Security-Enhanced Linux secures the certwatch processes via flexible mandatory access control. The certwatch processes execute with the certwatch_t SELinux type. You can check if you have these processes running by executing the ps command with the -Z qualifier. For example: ps -eZ | grep…
certmonger_unconfined_selinux – Security Enhanced Linux Policy for the certmonger_unconfined processes Description Security-Enhanced Linux secures the certmonger_unconfined processes via flexible mandatory access control. The certmonger_unconfined processes execute with the certmonger_unconfined_t SELinux type. You can check if you have these processes running by executing the ps command with the -Z qualifier. For example: ps -eZ | grep…
certmonger_selinux – Security Enhanced Linux Policy for the certmonger processes Description Security-Enhanced Linux secures the certmonger processes via flexible mandatory access control. The certmonger processes execute with the certmonger_t SELinux type. You can check if you have these processes running by executing the ps command with the -Z qualifier. For example: ps -eZ | grep…
certmonger Synopsis certmonger [-s|-S] [-L|-l] [-P SOCKET] [-b TIMEOUT|-B] [-n|-f] [-d LEVEL] [-p FILE] [-F] [-c cmd] [-v] Description The certmonger daemon monitors certificates for impending expiration, and can optionally refresh soon-to-be-expired certificates with the help of a CA. If told to, it can drive the entire enrollment process from key generation through enrollment and…
scep-submit Synopsis scep-submit -u SERVER-URL [-r ra-cert-file] [-R ca-cert-file] [-I other-certs-file] [-i ca-identifier] [-v] [-n] [-c|-C|-g|-p] [pkimessage-filename] Description scep-submit is the helper which certmonger can use to transmit certificate enrollment and renewal requests to servers using SCEP. It is not normally run interactively, but it can be for troubleshooting purposes. The request which is to…
local-submit Synopsis local-submit [-d state-directory] [-v] [csrfile] Description local-submit is the helper which certmonger uses to implement its local signer. It is not normally run interactively, but it can be for troubleshooting purposes. The signing request which is to be submitted should either be in a file whose name is given as an argument, or…
ipa-submit Synopsis ipa-submit [-h serverHost] [-H serverURL] [-c cafile] [-C capath] [[-K] | [-t keytab] [-k submitterPrincipal]] [-P principalOfRequest] [-T profile] [csrfile] Description ipa-submit is the helper which certmonger uses to make requests to IPA-based CAs. It is not normally run interactively, but it can be for troubleshooting purposes. The signing request which is to…
dogtag-submit Synopsis dogtag-submit -E EE-URL -A AGENT-URL [-d dbdir] [-n nickname] [-i cainfo] [-C capath] [-c certfile] [-k keyfile] [-p pinfile] [-P pin] [-s serial (hex)] [-D serial (decimal)] [-S state] [-T profile] [-O param=value] [-N | -R] [-o option=value] [-a ] [-u username] [-U userdn] [-W userpassword] [-w userpasswordfile] [-Y userpin] [-y userpinfile] [-v]…
dogtag-ipa-renew-agent-submit Synopsis dogtag-ipa-renew-agent-submit -E EE-URL -A AGENT-URL [-d dbdir] [-n nickname] [-i cainfo] [-C capath] [-c certfile] [-k keyfile] [-p pinfile] [-P pin] [-s serial (hex)] [-D serial (decimal)] [-S state] [-T profile] [-O param=value] [-v] [csrfile] Description dogtag-ipa-renew-agent-submit is the helper which certmonger uses to make certificate renewal requests to Dogtag instances running on…
certmaster-submit Synopsis certmaster-submit [-h serverHost] [-c cafile] [-C capath] [csrfile] Description certmaster-submit is the helper which certmonger uses to make requests to certmaster-based CAs. It is not normally run interactively, but it can be for troubleshooting purposes. The signing request which is to be submitted should either be in a file whose name is given…
certmaster_selinux – Security Enhanced Linux Policy for the certmaster processes Description Security-Enhanced Linux secures the certmaster processes via flexible mandatory access control. The certmaster processes execute with the certmaster_t SELinux type. You can check if you have these processes running by executing the ps command with the -Z qualifier. For example: ps -eZ | grep…
ceph – ceph administration tool Synopsis ceph auth [ add | caps | del | export | get | get-key | get-or-create | get-or-create-key | import | list | print-key | print_key ] … ceph compact ceph config-key [ del | exists | get | list | put ] … ceph df {detail} ceph fs…
ceph-syn – ceph synthetic workload generator Synopsis ceph-syn [ -m monaddr:port ] –syn command … Description ceph-syn is a simple synthetic workload generator for the Ceph distributed file system. It uses the userspace client library to generate simple workloads against a currently running file system. The file system need not be mounted via ceph-fuse(8) or…
ceph-rbdnamer – udev helper to name RBD devices Synopsis ceph-rbdnamer num Description ceph-rbdnamer prints the pool and image name for the given RBD devices to stdout. It is used by udev (using a rule like the one below) to set up a device symlink. KERNEL=="rbd[0-9]*", PROGRAM="/usr/bin/ceph-rbdnamer %n", SYMLINK+="rbd/%c{1}/%c{2}" Availability ceph-rbdnamer is part of Ceph, a…
ceph-post-file – post files for ceph developers Synopsis ceph-post-file [-d description] [-u *user] file or dir … Description ceph-post-file will upload files or directories to ceph.com for later analysis by Ceph developers. Each invocation uploads files or directories to a separate directory with a unique tag. That tag can be passed to a developer or…
ceph-dencoder – ceph encoder/decoder utility Synopsis ceph-dencoder [commands…] Description ceph-dencoder is a utility to encode, decode, and dump ceph data structures. It is used for debugging and for testing inter-version compatibility. ceph-dencoder takes a simple list of commands and performs them in order. Commands version Print the version string for the ceph-dencoder binary. import <file>…