Section 8: administration and privileged commands
plotnetcfg – plot diagram of network configuration Synopsis plotnetcfg [options] Description plotnetcfg is a tool that scans networking configuration on the machine and outputs a diagram of the configuration hierarchy. By default, the output is in the dot language. The output can be converted by the dot(1) tool from graphviz(7) package to various formats such…
plmpower – control Insteon/X10 devices via SmartLabs PLM 2412S Synopsis plmpower –device serial-port Description plmpower is a helper program for powerman which enables communication with Insteon/X10 devices via SmartLabs Power Line Modem, model 2412S. It is run interactively by the powerman daemon. It can also be useful as a standalone tool for debugging X10/Insteon networks…
plipconfig – fine tune PLIP device parameters Synopsis plipconfig interface [nibble NN] [trigger NN] plipconfig [-V] [–version] [-h] [–help] Description Plipconfig is used to (hopefully) improve PLIP performance by changing the default timing parameters used by the PLIP protocol. Results are dependent on the parallel port hardware, cable, and the CPU speed of each machine…
plainrsa-gen – generator for Plain RSA keys Synopsis plainrsa-gen -words [-b bits ] [-e pubexp ] [-f outfile ] [-h ] Description plainrsa-gen can be used to generate Plain RSA keys for authentication purposes. Using Plain RSA keys is optional. Other possibilities are Pre-shared keys or X.509 certificates -b bits bit length of the key….
pktsetup – set up and tear down packet device associations Synopsis pktsetup packet_device block_device pktsetup -d packet_device pktsetup -s Description Pktsetup is used to associate packet devices with CD or DVD block devices, so that the packet device can then be mounted and potentially used as a read/write filesystem. This requires kernel support for the…
pklocalauthority – PolicyKit Local Authority Description The Local Authority is the default PolicyKit authority implementation. Configuration for the Local Authority and information pertaining to authorization decisions are read from local files on the disk. One design goal of the Local Authority is to split configuration items into separate files such that 3rd party packages and…
pkla-check-authorization – Evaluate pklocalauthority authorization configuration Synopsis pkla-check-authorization [–help] pkla-check-authorization [–paths paths] {user-name} {is-local} {is-active} {action} Description pkla-check-authorization interprets non-JavaScript configuration files described below to determine the response of polkit(8) to authorization queries. Note: Authorization decision evaluation is driven by JavaScript rules as described in polkit(8). pkla-check-authorization is called by a JavaScript rule file named 49-polkit-pkla-compat.rules;…
pkla-admin-identities – List pklocalauthority-configured polkit administrators Synopsis pkla-admin-identities [–help] pkla-admin-identities [–config-path config-path] Description pkla-admin-identities interprets configuration files described below to determine which users polkit(8) considers administrators, using a non-JavaScript configuration file format described below. Note: Determining which users are considered administrators is driven by JavaScript rules as described in polkit(8). pkla-admin-identities is called by a JavaScript…
pkispawn – Sets up an instance of Certificate Server. Synopsis pkispawn -s <subsystem> -f <config_file> [-h] [-v] [-p <prefix>] Description Sets up a Certificate Server subsystem (CA, KRA, OCSP, TKS, or TPS) in a Tomcat instance. Note: A 389 Directory Server instance must be configured and running before this script can be run. Certificate Server…
pkidestroy – Removes a subsystem from an instance of Certificate Server. Synopsis pkidestroy -s <subsystem> -i <instance> [-u <secutiry domain username>] [-W <security domain password file>] [-h] [-v] [-p <prefix>] Description Removes a subsystem from an instance of Certificate Server. This utility removes any of the Java-based Certificate Server subsystems (CA, KRA, OCSP, and TKS)….
pki_tps_selinux – Security Enhanced Linux Policy for the pki_tps processes Description Security-Enhanced Linux secures the pki_tps processes via flexible mandatory access control. The pki_tps processes execute with the pki_tps_t SELinux type. You can check if you have these processes running by executing the ps command with the -Z qualifier. For example: ps -eZ | grep…
pki_tomcat_selinux – Security Enhanced Linux Policy for the pki_tomcat processes Description Security-Enhanced Linux secures the pki_tomcat processes via flexible mandatory access control. The pki_tomcat processes execute with the pki_tomcat_t SELinux type. You can check if you have these processes running by executing the ps command with the -Z qualifier. For example: ps -eZ | grep…
pki_tomcat_script_selinux – Security Enhanced Linux Policy for the pki_tomcat_script processes Description Security-Enhanced Linux secures the pki_tomcat_script processes via flexible mandatory access control. The pki_tomcat_script processes execute with the pki_tomcat_script_t SELinux type. You can check if you have these processes running by executing the ps command with the -Z qualifier. For example: ps -eZ | grep…
pki_selinux – Security Enhanced Linux Policy for the pki processes Description File Contexts SELinux requires files to have an extended attribute to define the file type. You can see the context of a file using the -Z option to lsP Policy governs the access confined processes have to these files. SELinux pki policy is very…
pki_ra_selinux – Security Enhanced Linux Policy for the pki_ra processes Description Security-Enhanced Linux secures the pki_ra processes via flexible mandatory access control. The pki_ra processes execute with the pki_ra_t SELinux type. You can check if you have these processes running by executing the ps command with the -Z qualifier. For example: ps -eZ | grep…
pki-upgrade – Tool for upgrading system-wide configuration for Certificate System. Synopsis pki-upgrade [OPTIONS] Description There are two parts to upgrading Certificate System: upgrading the system configuration files used by both the client and the server processes and upgrading the server configuration files. When upgrading Certificate System, the existing system configuration files (e.g. /etc/pki/pki.conf) may need…
pki-server – Command-Line Interface for performing administrative tasks on Certificate System subsystems. Synopsis pki-server [CLI options] <command> [command arguments] Description The pki-server command provides a command-line interface allowing administrators to perform various administrative operations on the Certificate System instances. These services include starting/stopping instances, enabling/disabling subsystems, performing certain migrations and enabling/disabling startup using nuxwdog. Operations…
pki-server-upgrade – Tool for upgrading Certificate System server configuration. Synopsis pki-server-upgrade [OPTIONS] Description There are two parts to upgrading Certificate System: upgrading the system configuration files used by both the client and the server processes and upgrading the server configuration files. When upgrading Certificate System, the existing server configuration files (e.g. server.xml, web.xml) may need…
pki-server-subsystem – Command-Line Interface for managing Certificate System subsystems. Synopsis pki-server [CLI options] subsystem pki-server [CLI options] subsystem-find -i <instance ID> pki-server [CLI options] subsystem-show -i <instance ID> <subsystem ID> pki-server [CLI options] subsystem-enable -i <instance ID> <subsystem ID> pki-server [CLI options] subsystem-disable -i <instance ID> <subsystem ID> pki-server [CLI options] subsystem-cert-find -i <instance ID>…
pki-server-nuxwdog – Command-Line Interface for enabling CS instances to start using nuxwdog. Synopsis pki-server [CLI options] nuxwdog pki-server [CLI options] nuxwdog-enable pki-server [CLI options] nuxwdog-disable Description When a Certificate System (CS) instance starts, it reads a plain text configuration file ( /etc/pki/<instance_name>/password.conf) to obtain passwords needed to initialize the server. This could include passwords needed…