Section 8: administration and privileged commands
systemd_resolved_selinux – Security Enhanced Linux Policy for the systemd_resolved processes Description Security-Enhanced Linux secures the systemd_resolved processes via flexible mandatory access control. The systemd_resolved processes execute with the systemd_resolved_t SELinux type. You can check if you have these processes running by executing the ps command with the -Z qualifier. For example: ps -eZ | grep…
systemd_passwd_agent_selinux – Security Enhanced Linux Policy for the systemd_passwd_agent processes Description Security-Enhanced Linux secures the systemd_passwd_agent processes via flexible mandatory access control. The systemd_passwd_agent processes execute with the systemd_passwd_agent_t SELinux type. You can check if you have these processes running by executing the ps command with the -Z qualifier. For example: ps -eZ | grep…
systemd_notify_selinux – Security Enhanced Linux Policy for the systemd_notify processes Description Security-Enhanced Linux secures the systemd_notify processes via flexible mandatory access control. The systemd_notify processes execute with the systemd_notify_t SELinux type. You can check if you have these processes running by executing the ps command with the -Z qualifier. For example: ps -eZ | grep…
systemd_networkd_selinux – Security Enhanced Linux Policy for the systemd_networkd processes Description Security-Enhanced Linux secures the systemd_networkd processes via flexible mandatory access control. The systemd_networkd processes execute with the systemd_networkd_t SELinux type. You can check if you have these processes running by executing the ps command with the -Z qualifier. For example: ps -eZ | grep…
systemd_machined_selinux – Security Enhanced Linux Policy for the systemd_machined processes Description Security-Enhanced Linux secures the systemd_machined processes via flexible mandatory access control. The systemd_machined processes execute with the systemd_machined_t SELinux type. You can check if you have these processes running by executing the ps command with the -Z qualifier. For example: ps -eZ | grep…
systemd_logind_selinux – Security Enhanced Linux Policy for the systemd_logind processes Description Security-Enhanced Linux secures the systemd_logind processes via flexible mandatory access control. The systemd_logind processes execute with the systemd_logind_t SELinux type. You can check if you have these processes running by executing the ps command with the -Z qualifier. For example: ps -eZ | grep…
systemd_logger_selinux – Security Enhanced Linux Policy for the systemd_logger processes Description Security-Enhanced Linux secures the systemd_logger processes via flexible mandatory access control. The systemd_logger processes execute with the systemd_logger_t SELinux type. You can check if you have these processes running by executing the ps command with the -Z qualifier. For example: ps -eZ | grep…
systemd_localed_selinux – Security Enhanced Linux Policy for the systemd_localed processes Description Security-Enhanced Linux secures the systemd_localed processes via flexible mandatory access control. The systemd_localed processes execute with the systemd_localed_t SELinux type. You can check if you have these processes running by executing the ps command with the -Z qualifier. For example: ps -eZ | grep…
systemd_hwdb_selinux – Security Enhanced Linux Policy for the systemd_hwdb processes Description Security-Enhanced Linux secures the systemd_hwdb processes via flexible mandatory access control. The systemd_hwdb processes execute with the systemd_hwdb_t SELinux type. You can check if you have these processes running by executing the ps command with the -Z qualifier. For example: ps -eZ | grep…
systemd_hostnamed_selinux – Security Enhanced Linux Policy for the systemd_hostnamed processes Description Security-Enhanced Linux secures the systemd_hostnamed processes via flexible mandatory access control. The systemd_hostnamed processes execute with the systemd_hostnamed_t SELinux type. You can check if you have these processes running by executing the ps command with the -Z qualifier. For example: ps -eZ | grep…
systemd-xdg-autostart-generator – User unit generator for XDG autostart files Synopsis /usr/lib/systemd/user-generators/systemd-xdg-autostart-generator Description systemd-xdg-autostart-generator is a generator that creates .service units for m[blue]XDG autostartm[][1] files. This permits desktop environments to delegate startup of these applications to systemd(1) . Units created by systemd-xdg-autostart-generator can be started by the desktop environment using "xdg-desktop-autostart.target". See systemd.special(7) for more details….
systemd-volatile-root.service, systemd-volatile-root – Make the root file system volatile Synopsis systemd-volatile-root.service /lib/systemd/systemd-volatile-root Description systemd-volatile-root.service is a service that replaces the root directory with a volatile memory file system ("tmpfs"), mounting the original (non-volatile) /usr/ inside it read-only. This way, vendor data from /usr/ is available as usual, but all configuration data in /etc/, all state…
systemd-volatile-root.service, systemd-volatile-root – Make the root file system volatile Synopsis systemd-volatile-root.service /lib/systemd/systemd-volatile-root Description systemd-volatile-root.service is a service that replaces the root directory with a volatile memory file system ("tmpfs"), mounting the original (non-volatile) /usr/ inside it read-only. This way, vendor data from /usr/ is available as usual, but all configuration data in /etc/, all state…
systemd-veritysetup [at] .service, systemd-veritysetup – Disk verity protection logic Synopsis systemd-veritysetup [at] .service /lib/systemd/systemd-veritysetup Description systemd-veritysetup [at] .service is a service responsible for setting up verity protection block devices. It should be instantiated for each device that requires verity protection. At early boot and when the system manager configuration is reloaded kernel command line configuration…
systemd-veritysetup [at] .service, systemd-veritysetup – Disk verity protection logic Synopsis systemd-veritysetup [at] .service /lib/systemd/systemd-veritysetup Description systemd-veritysetup [at] .service is a service responsible for setting up verity protection block devices. It should be instantiated for each device that requires verity protection. At early boot and when the system manager configuration is reloaded kernel command line configuration…
systemd-veritysetup-generator – Unit generator for verity protected block devices Synopsis /lib/systemd/system-generators/systemd-veritysetup-generator Description systemd-veritysetup-generator is a generator that translates kernel command line options configuring verity protected block devices into native systemd units early at boot and when configuration of the system manager is reloaded. This will create systemd-veritysetup [at] .service(8) units as necessary. Currently, only a…
systemd-vconsole-setup.service, systemd-vconsole-setup – Configure the virtual console at boot Synopsis systemd-vconsole-setup.service /usr/lib/systemd/systemd-vconsole-setup Description systemd-vconsole-setup.service is an early-boot service that configures the virtual console font and console keymap. Internally it calls loadkeys(1) and setfont(8). See vconsole.conf(5) for information about the configuration files understood by this service. Kernel Command Line A few configuration parameters from vconsole.conf may…
systemd-vconsole-setup.service, systemd-vconsole-setup – Configure the virtual console at boot Synopsis systemd-vconsole-setup.service /usr/lib/systemd/systemd-vconsole-setup Description systemd-vconsole-setup.service is an early-boot service that configures the virtual console font and console keymap. Internally it calls loadkeys(1) and setfont(8). See vconsole.conf(5) for information about the configuration files understood by this service. Kernel Command Line A few configuration parameters from vconsole.conf may…
systemd-user-sessions.service, systemd-user-sessions – Permit user logins after boot, prohibit user logins at shutdown Synopsis systemd-user-sessions.service /lib/systemd/systemd-user-sessions Description systemd-user-sessions.service is a service that controls user logins through pam_nologin(8). After basic system initialization is complete, it removes /run/nologin, thus permitting logins. Before system shutdown, it creates /run/nologin, thus prohibiting further logins. See Also systemd(1), systemd-logind.service(8), pam_nologin(8)
systemd-user-sessions.service, systemd-user-sessions – Permit user logins after boot, prohibit user logins at shutdown Synopsis systemd-user-sessions.service /lib/systemd/systemd-user-sessions Description systemd-user-sessions.service is a service that controls user logins through pam_nologin(8). After basic system initialization is complete, it removes /run/nologin, thus permitting logins. Before system shutdown, it creates /run/nologin, thus prohibiting further logins. See Also systemd(1), systemd-logind.service(8), pam_nologin(8)