The Linux Manuals (man pages) document is an important part of Linux documents. Linux Manuals are organized as several sections. Each section has a group of commands for a specific area in Linux usage, administration or development.
cfetool import – import the contents of a database from XML format Synopsis cfetool import name –file|-f filename [–path|-p directory name] [–daily|-d] [–weekly|-w] [–yearly|-y] [–verbose|-v] [–help|-h] Description Creates a new database from it’s XML representation, in the format created by rrdtool dump. The -d, -w, and -y options specify which databases to create and look for in…
cfetoolgraph – create graphs from a cfetool database Synopsis cfetoolgraph name [–path|-p directory name] [–daily|-d] [–weekly|-w] [–yearly|-y] [–timestamps|-T] [–resolution|-r] [–help|-h] Description The cfetoolgraph command dumps graphs of averages for visual inspection of the normal state database. The files are in a format viewable by "gnuplot" or "xgmr" or other graphical plotting program. The command generates three…
cfetool dump – dump the contents of a database in XML format Synopsis cfetool dump name [–path|-p directory name] [–file|-f filename] [–daily|-d] [–weekly|-w] [–yearly|-y] [–verbose|-v] [–help|-h] Description Prints the contents of the specified database in XML format, with comments for human readability. This format can be read by cfetool import. The -d, -w, and -y options specify…
cfetool create – Set up a new Database Synopsis cfetool create name [–path|-p directory name] [–step|-s step] [–daily|-d] [–weekly|-w] [–yearly|-y] [–cfenvd|-c] [–histograms|-H] [–verbose|-v] [–file|-f filename] [–help|-h] Description Creates a new database and, optionally, histogram file in a new directory with the name given. If the -p option is specified, it will be created as a subdirectory of the…
cfetool check – Check a new value against the averages currently in the database Synopsis cfetool check name –value|-V value [–path|-p directory name] [–time|-t seconds] [–daily|-d] [–weekly|-w] [–yearly|-y] [–histograms|-H] [–verbose|-v] [–help|-h] Description Takes a new value and checks it against the averages currently in the database specified by name, located at the path specified by the -p argument,…
cfengine – network configuration engine Synopsis /usr/local/sbin/cfenvgraph [options] Command Line Options –help –file Override default input database –erasehistory Erase machine-learned history of named traces. Comma separated list (no spaces) –outputdir override name of output directory –titles Generate titles in output data files for traces –timestamps Add time stamps to output directory –resolution Maximum output resolution…
cfengine – network configuration engine Synopsis /usr/local/sbin/cfenvd Description cfengine is a language based system specifically designed for testing and configuring unix-like systems attached to a TCP/IP network. Cfenvd is part of the anomaly detection subsystem for cfagent. It is a "plug’n’play" module that provides machine learning support to the agent. Cfenvd requires no configuration. It…
cfengine_serverd_selinux – Security Enhanced Linux Policy for the cfengine_serverd processes Description Security-Enhanced Linux secures the cfengine_serverd processes via flexible mandatory access control. The cfengine_serverd processes execute with the cfengine_serverd_t SELinux type. You can check if you have these processes running by executing the ps command with the -Z qualifier. For example: ps -eZ | grep…
cfengine_selinux – Security Enhanced Linux Policy for the cfengine processes Description Security-Enhanced Linux secures the cfengine processes via flexible mandatory access control. Nsswitch Domain If you want to allow users to login using a sssd serve for the cfengine_execd_t, cfengine_monitord_t, cfengine_serverd_t, you must turn on the authlogin_nsswitch_use_ldap boolean. setsebool -P authlogin_nsswitch_use_ldap 1 If you want…
cfengine_monitord_selinux – Security Enhanced Linux Policy for the cfengine_monitord processes Description Security-Enhanced Linux secures the cfengine_monitord processes via flexible mandatory access control. The cfengine_monitord processes execute with the cfengine_monitord_t SELinux type. You can check if you have these processes running by executing the ps command with the -Z qualifier. For example: ps -eZ | grep…
cfengine_execd_selinux – Security Enhanced Linux Policy for the cfengine_execd processes Description Security-Enhanced Linux secures the cfengine_execd processes via flexible mandatory access control. The cfengine_execd processes execute with the cfengine_execd_t SELinux type. You can check if you have these processes running by executing the ps command with the -Z qualifier. For example: ps -eZ | grep…
cfengine – network configuration engine Synopsis /usr/local/sbin/cfagent [options] /usr/local/sbin/cfrun [options] /usr/local/sbin/cfservd /usr/local/sbin/cfexecd /usr/local/sbin/cfenvd /usr/local/sbin/cfkey /usr/local/sbin/cfenvgraph Description cfengine is a language based system specifically designed for testing and configuring unix-like systems attached to a TCP/IP network. You can think of cfengine as a very high level language — much higher level than Perl or shell. A…
cfdisk – display or manipulate a disk partition table Synopsis cfdisk [options] [device] Description cfdisk is a curses-based program for partitioning any block device. The default device is /dev/sda. Note that cfdisk provides basic partitioning functionality with a user-friendly interface. If you need advanced features, use fdisk(8) instead. All disk label changes will remain in…
cfagent – system configuration agent Synopsis /usr/local/sbin/cfagent [options] Description cfengine is a language based system specifically designed for testing and configuring unix-like systems attached to a TCP/IP network. You can think of cfengine as a very high level language — much higher level than Perl or shell. A single statement can result in many hundreds…
certwatch_selinux – Security Enhanced Linux Policy for the certwatch processes Description Security-Enhanced Linux secures the certwatch processes via flexible mandatory access control. The certwatch processes execute with the certwatch_t SELinux type. You can check if you have these processes running by executing the ps command with the -Z qualifier. For example: ps -eZ | grep…
certmonger_unconfined_selinux – Security Enhanced Linux Policy for the certmonger_unconfined processes Description Security-Enhanced Linux secures the certmonger_unconfined processes via flexible mandatory access control. The certmonger_unconfined processes execute with the certmonger_unconfined_t SELinux type. You can check if you have these processes running by executing the ps command with the -Z qualifier. For example: ps -eZ | grep…
certmonger_selinux – Security Enhanced Linux Policy for the certmonger processes Description Security-Enhanced Linux secures the certmonger processes via flexible mandatory access control. The certmonger processes execute with the certmonger_t SELinux type. You can check if you have these processes running by executing the ps command with the -Z qualifier. For example: ps -eZ | grep…
certmonger Synopsis certmonger [-s|-S] [-L|-l] [-P SOCKET] [-b TIMEOUT|-B] [-n|-f] [-d LEVEL] [-p FILE] [-F] [-c cmd] [-v] Description The certmonger daemon monitors certificates for impending expiration, and can optionally refresh soon-to-be-expired certificates with the help of a CA. If told to, it can drive the entire enrollment process from key generation through enrollment and…
scep-submit Synopsis scep-submit -u SERVER-URL [-r ra-cert-file] [-R ca-cert-file] [-I other-certs-file] [-i ca-identifier] [-v] [-n] [-c|-C|-g|-p] [pkimessage-filename] Description scep-submit is the helper which certmonger can use to transmit certificate enrollment and renewal requests to servers using SCEP. It is not normally run interactively, but it can be for troubleshooting purposes. The request which is to…
local-submit Synopsis local-submit [-d state-directory] [-v] [csrfile] Description local-submit is the helper which certmonger uses to implement its local signer. It is not normally run interactively, but it can be for troubleshooting purposes. The signing request which is to be submitted should either be in a file whose name is given as an argument, or…