Section 8: administration and privileged commands
sshd_net_selinux – Security Enhanced Linux Policy for the sshd_net processes Description Security-Enhanced Linux secures the sshd_net processes via flexible mandatory access control. The sshd_net processes execute with the sshd_net_t SELinux type. You can check if you have these processes running by executing the ps command with the -Z qualifier. For example: ps -eZ | grep…
sshd_keygen_selinux – Security Enhanced Linux Policy for the sshd_keygen processes Description Security-Enhanced Linux secures the sshd_keygen processes via flexible mandatory access control. The sshd_keygen processes execute with the sshd_keygen_t SELinux type. You can check if you have these processes running by executing the ps command with the -Z qualifier. For example: ps -eZ | grep…
sshd – OpenSSH daemon Synopsis sshd [-46DdeiqTt [-C connection_spec ] ] [-c host_certificate_file ] [-E log_file ] [-f config_file ] [-g login_grace_time ] [-h host_key_file ] [-o option ] [-p port ] [-u len ] Description sshd (OpenSSH Daemon) is the daemon program for ssh(1). It provides secure encrypted communications between two untrusted hosts over…
ssh_selinux – Security Enhanced Linux Policy for the ssh processes Description Security-Enhanced Linux secures the ssh processes via flexible mandatory access control. The ssh processes execute with the ssh_t SELinux type. You can check if you have these processes running by executing the ps command with the -Z qualifier. For example: ps -eZ | grep…
ssh_keysign_selinux – Security Enhanced Linux Policy for the ssh_keysign processes Description Security-Enhanced Linux secures the ssh_keysign processes via flexible mandatory access control. The ssh_keysign processes execute with the ssh_keysign_t SELinux type. You can check if you have these processes running by executing the ps command with the -Z qualifier. For example: ps -eZ | grep…
ssh_keygen_selinux – Security Enhanced Linux Policy for the ssh_keygen processes Description Security-Enhanced Linux secures the ssh_keygen processes via flexible mandatory access control. The ssh_keygen processes execute with the ssh_keygen_t SELinux type. You can check if you have these processes running by executing the ps command with the -Z qualifier. For example: ps -eZ | grep…
ssh-sk-helper – OpenSSH helper for FIDO authenticator support Synopsis ssh-sk-helper [-v ] Description ssh-sk-helper is used by ssh-agent1 to access keys provided by a FIDO authenticator. ssh-sk-helper is not intended to be invoked by the user, but from ssh-agent1. A single option is supported: -v Verbose mode. Causes ssh-sk-helper to print debugging messages about its…
ssh-pkcs11-helper – OpenSSH helper for PKCS#11 support Synopsis ssh-pkcs11-helper [-v ] Description ssh-pkcs11-helper is used by ssh-agent1 to access keys provided by a PKCS#11 token. ssh-pkcs11-helper is not intended to be invoked by the user, but from ssh-agent1. A single option is supported: -v Verbose mode. Causes ssh-pkcs11-helper to print debugging messages about its progress….
ssh-keysign – OpenSSH helper for host-based authentication Synopsis ssh-keysign Description ssh-keysign is used by ssh(1) to access the local host keys and generate the digital signature required during host-based authentication. ssh-keysign is disabled by default and can only be enabled in the global client configuration file /etc/ssh/ssh_config by setting EnableSSHKeysign to “yes” ssh-keysign is not…
sserver – sample Kerberos version 5 server Synopsis sserver [ -p port ] [ -S keytab ] [ server_port ] Description sserver and sclient(1) are a simple demonstration client/server application. When sclient connects to sserver, it performs a Kerberos authentication, and then sserver returns to sclient the Kerberos principal which was used for the Kerberos…
ss – another utility to investigate sockets Synopsis ss [options] [ FILTER ] Description ss is used to dump socket statistics. It allows showing information similar to netstat. It can display more TCP and state information than other tools. Options When no option is used ss displays a list of open non-listening sockets (e.g. TCP/UNIX/UDP)…
srvsvcd_selinux – Security Enhanced Linux Policy for the srvsvcd processes Description Security-Enhanced Linux secures the srvsvcd processes via flexible mandatory access control. The srvsvcd processes execute with the srvsvcd_t SELinux type. You can check if you have these processes running by executing the ps command with the -Z qualifier. For example: ps -eZ | grep…
srcpd – SRCP speaking daemon Synopsis srcpd [ options ] Description This is not a complete manual. You have to consult the project home page at http://srcpd.sourceforge.net/ for full documentation! srcpd is a UNIX daemon speaking the Simple Railroad Command Protocol (SRCP). Upon start up it reads in the system wide configuration file named srcpd.conf….
squid_selinux – Security Enhanced Linux Policy for the squid processes Description Security-Enhanced Linux secures the squid processes via flexible mandatory access control. The squid processes execute with the squid_t SELinux type. You can check if you have these processes running by executing the ps command with the -Z qualifier. For example: ps -eZ | grep…
squid_script_selinux – Security Enhanced Linux Policy for the squid_script processes Description Security-Enhanced Linux secures the squid_script processes via flexible mandatory access control. The squid_script processes execute with the squid_script_t SELinux type. You can check if you have these processes running by executing the ps command with the -Z qualifier. For example: ps -eZ | grep…
squid_cron_selinux – Security Enhanced Linux Policy for the squid_cron processes Description Security-Enhanced Linux secures the squid_cron processes via flexible mandatory access control. The squid_cron processes execute with the squid_cron_t SELinux type. You can check if you have these processes running by executing the ps command with the -Z qualifier. For example: ps -eZ | grep…
squid – HTTP web proxy caching server Synopsis squid [-dhisrvzCFNRSVYX] [-l facility ] [-f config-file ] [-[au] port ] [-k signal ] [-n service-name ] [-O command-line ] Description squid is a high-performance proxy caching server for web clients, supporting FTP, gopher, ICAP, ICP, HTCP and HTTP data objects. Unlike traditional caching software, Squid handles…
* Name squatter – create SQUAT indexes for mailboxes Synopsis squatter [ -C config-file ] [ -r ] [ -s ] [ -i ] [ -a ] [ -v ] mailbox… Description Squatter creates a new SQUAT index for one or more IMAP mailboxes. The SQUAT index is a unified index of all of the…
sqliterepo_c – Generate sqlite db files for a repository in rpm-md format Synopsis sqliterepo_c [options] <repo_directory> Options -V –version Show program’s version number and exit. -q –quiet Run quietly. -v –verbose Run verbosely. -f –force Overwirte existing DBs. –keep-old Do not remove old DBs. Use only with combination with –force. –xz Use xz for repodata…
sqback – send sagator’s quarantined files back to mail queue Synopsis sqback [–help] [–to RCPT] quarantined_file1 [quarantined_files…] Description This command can be used to deliver emails, quarantined by sagator. Sometimes sagator quarantines an email as virus or spam, which need to be delivered to it’s recipient (or admin). Options –help Display a short help text….