tripathysagar/man_text huggingface dataset:
# logoutd

## NAME



           logoutd - enforce login time restrictions
    


## SYNOPSIS



    
           **logoutd**
    


## DESCRIPTION



           **logoutd** enforces the login time and port restrictions specified in
           /etc/porttime.  **logoutd** should be started from /etc/rc. The
           /var/run/utmp file is scanned periodically and each user name is
           checked to see if the named user is permitted on the named port at
           the current time. Any login session which is violating the
           restrictions in /etc/porttime is terminated.
    


## FILES



           /etc/porttime
               File containing port access.
    
           /var/run/utmp
               List of current login sessions.
    


* * *
# rdma-link

## NAME



           rdma-link - rdma link configuration
    


## SYNOPSIS



           **rdma**[ _OPTIONS_ ] **link**{ _COMMAND_ | **help**}
    
           _OPTIONS_ := { **-V**[_ersion_] | **-d**[_etails_] }
    
           **rdma link show**[ _DEV/PORT_INDEX_ ]
    
           **rdma link add NAME type TYPE netdev NETDEV**
    
           **rdma link delete** NAME
    
           **rdma link help**
    


## DESCRIPTION



       **rdma link show - display rdma link attributes**
           _DEV/PORT_INDEX_ - specifies the RDMA link to show.  If this
           argument is omitted all links are listed.
    
       **rdma link add NAME type TYPE netdev NETDEV - add an rdma link for the**
           **specified type to the network device**
           **NAME** - specifies the new name of the rdma link to add
    
           **TYPE** - specifies which rdma type to use.  Link types:
    
                   **rxe** - Soft RoCE driver
    
                   **siw** - Soft iWARP driver
    
           **NETDEV** - specifies the network device to which the link is bound
    
       **rdma link delete NAME - delete an rdma link**
           **NAME** - specifies the name of the rdma link to delete
    


## EXAMPLES



           rdma link show
               Shows the state of all rdma links on the system.
    
           rdma link show mlx5_2/1
               Shows the state of specified rdma link.
    
           rdma link add rxe_eth0 type rxe netdev eth0
               Adds a RXE link named rxe_eth0 to network device eth0
    
           rdma link del rxe_eth0
               Removes RXE link rxe_eth0
    


* * *
# cryptsetup-status

## NAME



           cryptsetup-status - report the status for a mapping
    


## SYNOPSIS



           **cryptsetup** _status_ **[ <options>] <name>**
    


## DESCRIPTION



           Reports the status for the mapping <name>.
    
           **< options> **can be [--header, --disable-locks].
    


## OPTIONS



           **--batch-mode** , **-q**
               Suppresses all confirmation questions. Use with care!
    
               If the --verify-passphrase option is not specified, this
               option also switches off the passphrase verification.
    
           **--debug** or **--debug-json**
               Run in debug mode with full diagnostic logs. Debug output
               lines are always prefixed by **#**.
    
               If --debug-json is used, additional LUKS2 JSON data structures
               are printed.
    
           **--disable-locks**
               Disable lock protection for metadata on disk. This option is
               valid only for LUKS2 and is ignored for other formats.
    
               **WARNING:** Do not use this option unless you run cryptsetup in a
               restricted environment where locking is impossible to perform
               (where /run directory cannot be used).
    
           **--header** _< device or file storing the LUKS header>_
               Use a detached (separated) metadata device or file where the
               LUKS header is stored. This option allows one to store the
               ciphertext and LUKS header on different devices.
    
               For commands that change the LUKS header (e.g., _luksAddKey_),
               specify the device or file with the LUKS header directly as
               the LUKS device.
    
           **--help** , **-?**
               Show help text and default parameters.
    
           **--usage**
               Show short option help.
    
           **--version** , **-V**
               Show the program version.
    


## CRYPTSETUP



           Part of cryptsetup project
           <https://gitlab.com/cryptsetup/cryptsetup/>. This page is part of
           the _Cryptsetup_ ((open-source disk encryption)) project.
           Information about the project can be found at 
           ⟨https://gitlab.com/cryptsetup/cryptsetup⟩. If you have a bug
           report for this manual page, send it to dm-crypt@saout.de. This
           page was obtained from the project's upstream Git repository
           ⟨https://gitlab.com/cryptsetup/cryptsetup.git⟩ on 2025-08-11. (At
           that time, the date of the most recent commit that was found in
           the repository was 2025-08-01.) If you discover any rendering
           problems in this HTML version of the page, or you believe there is
           a better or more up-to-date source for the page, or you have
           corrections or improvements to the information in this COLOPHON
           (which is _not_ part of the original manual page), send a mail to
           man-pages@man7.org
    
    cryptsetup 2.8.1-git            2023-09-13           _CRYPTSETUP-STATUS_(8)
    


* * *
# pam_ftp

## NAME



           pam_ftp - PAM module for anonymous access module
    


## SYNOPSIS



    
           **pam_ftp.so**[debug] [ignore] [users=_XXX,YYY,_...]
    


## DESCRIPTION



           pam_ftp is a PAM module which provides a pluggable anonymous ftp
           mode of access.
    
           This module intercepts the user's name and password. If the name
           is _ftp_ or _anonymous_ , the user's password is broken up at the _@_
           delimiter into a _PAM_RUSER_ and a _PAM_RHOST_ part; these pam-items
           being set accordingly. The username (_PAM_USER_) is set to _ftp_. In
           this case the module succeeds. Alternatively, the module sets the
           _PAM_AUTHTOK_ item with the entered password and fails.
    
           This module is not safe and easily spoofable.
    


## OPTIONS



           **debug**
               Print debug information.
    
           **ignore**
               Pay no attention to the email address of the user (if
               supplied).
    
           **ftp=**_XXX,YYY,..._
               Instead of _ftp_ or _anonymous_ , provide anonymous login to the
               comma separated list of users: _XXX,YYY,..._. Should the
               applicant enter one of these usernames the returned username
               is set to the first in the list: _XXX_.
    


## MODULE TYPES PROVIDED



           Only the **auth** module type is provided.
    


## RETURN VALUES



           PAM_SUCCESS
               The authentication was successful.
    
           PAM_USER_UNKNOWN
               User not known.
    


## EXAMPLES



           Add the following line to /etc/pam.d/ftpd to handle ftp style
           anonymous login:
    
               #
               # ftpd; add ftp-specifics. These lines enable anonymous ftp over
               #       standard UN*X access (the listfile entry blocks access to
               #       users listed in /etc/ftpusers)
               #
               auth    sufficient  pam_ftp.so
               auth    required    pam_unix.so use_first_pass
               auth    required    pam_listfile.so \
                          onerr=succeed item=user sense=deny file=/etc/ftpusers
    


* * *
# unix_update

## NAME



           unix_update - Helper binary that updates the password of a given
           user
    


## SYNOPSIS



    
           **unix_update**[...]
    


## DESCRIPTION



           _unix_update_ is a helper program for the _pam_unix_ module that
           updates the password of a given user. It is not intended to be run
           directly from the command line and logs a security violation if
           done so.
    
           The purpose of the helper is to enable tighter confinement of
           login and password changing services. The helper is thus called
           only when SELinux is enabled on the system.
    
           The interface of the helper - command line options, and
           input/output data format are internal to the _pam_unix_ module and
           it should not be called directly from applications.
    


* * *
# setkeycodes

## NAME



           setkeycodes - load kernel scancode-to-keycode mapping table
           entries
    


## SYNOPSIS



           **setkeycodes**[_options_] _scancode keycode ..._
    


## DESCRIPTION



           The _setkeycodes_ command reads its arguments two at a time, each
           pair of arguments consisting of a scancode (given in hexadecimal)
           and a keycode (given in decimal). For each such pair, it tells the
           kernel keyboard driver to map the specified scancode to the
           specified keycode.
    
           This command is useful only for people with slightly unusual
           keyboards, that have a few keys which produce scancodes that the
           kernel does not recognize.
    


## THEORY



           The usual PC keyboard produces a series of scancodes for each key
           press and key release. (Scancodes are shown by **showkey -s** , see
           showkey(1) ) The kernel parses this stream of scancodes, and
           converts it to a stream of keycodes (key press/release events).
           (Keycodes are shown by **showkey**.)  Apart from a few scancodes with
           special meaning, and apart from the sequence produced by the Pause
           key, and apart from shiftstate related scancodes, and apart from
           the key up/down bit, the stream of scancodes consists of unescaped
           scancodes xx (7 bits) and escaped scancodes e0 xx (8+7 bits).  To
           these scancodes or scancode pairs, a corresponding keycode can be
           assigned (in the range 1-127).  For example, if you have a Macro
           key that produces e0 6f according to showkey(1), the command
                  **setkeycodes e06f 112**
           will assign the keycode 112 to it, and then loadkeys(1) can be
           used to define the function of this key.
    
           Some older kernels might hardwire a low scancode range to the
           equivalent keycodes; setkeycodes will fail when you try to remap
           these.
    


## 2.6 KERNELS



           In 2.6 kernels key codes lie in the range 1-255, instead of 1-127.
           (It might be best to confine oneself to the range 1-239.)
    
           In 2.6 kernels raw mode, or scancode mode, is not very raw at all.
           The code returned by showkey -s will change after use of
           setkeycodes.  A kernel bug. See also showkey(1).
    


## OPTIONS



           **-C** , **--console** =_DEV_
                  the console device to be used.
    
           **-V** , **--version**
                  print version number.
    
           **-h** , **--help**
                  print this usage message.
    


## BUGS



           The keycodes of X have nothing to do with those of Linux.  Unusual
           keys can be made visible under Linux, but not under X.
    


* * *
# dump-acct

## NAME



           dump-acct - print an acct/pacct file in human-readable format
    


## SYNOPSIS



           **dump-acct**[**-r** |**--reverse**] [**-R** |**--raw**] [**-n** |**--num** _recs_] [**--byte-swap**]
           [**--format**] [**--ahz** _freq_] [**-h** |**--help**] [_files_]
    


## DESCRIPTION



           The dump-acct command transforms the output **file** from the accton
           format to the human-readable format: one record per line.  Each
           record consists of severald fields which are separated by
           character "|" (the meaning of concreate field depends on the
           version of kernel package - with which the accton file was
           created).
    


## OPTIONS



           The following options are supported:
    
           **-r, --reverse**
                  Print the output in reverse order.
    
           **-R, --raw**
                  The records will be printed without any parsing.
    
           **-n, --num NUMRECS**
                  Display only the first NUMRECS number of records.
    
           **--byteswap**
                  Swap the bytes (relative to your system's native byte
                  order) in --raw output.
    
           **--format**
                  Set output format with --raw option.
    
           **--ahz FREQ**
                  Set the AHZ (platform dependent frequency in Hertz) to
                  FREQ.
    
           **-h, --help**
                  Print a help message and the default location of the
                  process accounting file and exit.
    


* * *
# rpm-plugin-ima

## NAME



           rpm-plugin-ima - IMA plugin for the RPM Package Manager
    


## Description



           Integrity Measurement Architecture (IMA) and the Linux Extended
           Verification Module (EVM) allow to detect when files have been
           accidentally or maliciously altered.  This plugin puts IMA/EVM
           signatures in the _security.ima_ extended file attribute during
           installation.  This requires packages to contain the signatures -
           typically by being signed with **rpmsign --signfiles**.
    


## Configuration



           The _%_ima_sign_config_files_ macro controls whether signatures
           should also be written for config files.
    
           See rpm-plugins(8) on how to control plugins in general.
    


* * *
# yum-copr

## NAME



           yum-plugin-copr - YUM copr Plugin
    
           Work with Copr & Playground repositories on the local system.
    
           • The **copr** command is used to add or remove Copr repositories to
             the local system
    
           • The **playground** is used to enable or disable the Playground
             repository
    


## SYNOPSIS



           **yum copr [enable|disable|list|search] <parameters>**
    
           **yum playground [enable|disable|upgrade]**
    


## ARGUMENTS (COPR)



           **enable name/project [chroot]**
                  Enable the **name/project** Copr repository with the optional
                  **chroot**.
    
           **disable name/project**
                  Disable the **name/project** Copr repository.
    
           **list name**
                  List available Copr repositories for a given **name**.
    
           **search project**
                  Search for a given **project**.
    


## ARGUMENTS (PLAYGROUND)



           **enable** Enable the Playground repository.
    
           **disable**
                  Disable the Playground repository.
    
           **upgrade**
                  Upgrade the Playground repository settings (same as **disable**
                  and then **enable**).
    


## EXAMPLES



           **copr enable rhscl/perl516 epel-6-x86_64**
                  Enable the **rhscl/perl516** Copr repository, using the
                  **epel-6-x86_64** chroot.
    
           **copr disable rhscl/perl516**
                  Disable the **rhscl/perl516** Copr repository
    
           **copr list rita**
                  List available Copr projects for user **rita**.
    
           **copr search tests**
                  Search for Copr projects named **tests**.
    


* * *
# augenrules

## NAME



           augenrules - a script that merges component audit rule files
    


## SYNOPSIS



           **augenrules**[_--check_] [_--load_]
    


## DESCRIPTION



           **augenrules** is a script that merges all component audit rules
           files, found in the audit rules directory, _/etc/audit/rules.d_ ,
           placing the merged file in _/etc/audit/audit.rules_. Component audit
           rule files, must end in _.rules_ in order to be processed. All other
           files in _/etc/audit/rules.d_ are ignored.
    
           The files are concatenated in order, based on their natural sort
           (see -v option of ls(1)) and stripped of empty and comment (#)
           lines.
    
           The last processed -_D_ directive without an option, if present, is
           always emitted as the first line in the resultant file. Those with
           an option are replicated in place.  The last processed -_b_
           directive, if present, is always emitted as the second line in the
           resultant file.  The last processed -_f_ directive, if present, is
           always emitted as the third line in the resultant file.  The last
           processed -_e_ directive, if present, is always emitted as the last
           line in the resultant file.
    
           The generated file is only copied to _/etc/audit/audit.rules_ , if it
           differs.
    


## OPTIONS



           **--check**
                  test if rules have changed and need updating without
                  overwriting audit.rules.
    
           **--load** load old or newly built rules into the kernel.
    


## FILES



           /etc/audit/rules.d/ /etc/audit/audit.rules
    


* * *
# getenforce

## NAME



           getenforce - get the current mode of SELinux
    


## SYNOPSIS



           **getenforce**
    


## DESCRIPTION



           **getenforce** reports whether SELinux is enforcing, permissive, or
           disabled.
    


* * *
# cupsd-helper

## NAME



           cupsd-helper - cupsd helper programs (deprecated)
    


## SYNOPSIS



           **cups-deviced** _request-id limit user-id options_
           **cups-driverd cat** _ppd-name_
           **cups-driverd list** _request_id limit options_
           **cups-exec** _sandbox-profile_ [ _-g group-id_ ] [ _-n nice-value_ ] [ _-u_
           _user-id_ ] _/path/to/program argv0 ..._  _argvN_
    


## DESCRIPTION



           The **cupsd-helper** programs perform long-running operations on
           behalf of the scheduler, cupsd(8).  The **cups-deviced** helper
           program runs each CUPS backend(7) with no arguments in order to
           discover the available printers.
    
           The **cups-driverd** helper program lists all available printer
           drivers, a subset of "matching" printer drivers, or a copy of a
           specific driver PPD file.
    
           The **cups-exec** helper program runs backends, filters, and other
           programs. On macOS these programs are run in a secure sandbox.
    


## FILES



           The **cups-driverd** program looks for PPD and driver information
           files in the following directories:
    
               _/Library/Printers_
               _/opt/share/ppd_
               _/System/Library/Printers_
               _/usr/local/share/ppd_
               _/usr/share/cups/drv_
               _/usr/share/cups/model_
               _/usr/share/ppd_
    
           PPD files can be compressed using the **gzip**(1) program or placed in
           compressed tar(1) archives to further reduce their size.
    
           Driver information files must conform to the format defined in
           ppdcfile(5).
    


## NOTES



           CUPS printer drivers, backends, and PPD files are deprecated and
           will no longer be supported in a future feature release of CUPS.
           Printers that do not support IPP can be supported using
           applications such as ippeveprinter(1).
    


* * *
# dracut-catimages

## NAME



           dracut-catimages - creates initial ramdisk image by concatenating
           images
    


## SYNOPSIS



           **dracut-catimages**[_OPTION_...] _< initramfs base image>_ [_< image>_...]
    


## DESCRIPTION



           dracut-catimages creates an initial ramdisk image by concatenating
           several images from the command line and /boot/dracut/*.img
    


## OPTIONS



           **-f, --force**
               overwrite existing initramfs file.
    
           **-i, --imagedir**
               Directory with additional images to add (default:
               /boot/dracut/)
    
           **-o, --overlaydir**
               Overlay directory, which contains additional files that will
               be used to create an additional image
    
           **--nooverlay**
               Do not use the overlay directory
    
           **--noimagedir**
               Do not use the additional image directory
    
           **-h, --help**
               display help text and exit.
    
           **--debug**
               output debug information of the build process
    
           **-v, --verbose**
               verbose output during the build process
    


## FILES



           _/boot/dracut/*.img_
               images to work with
    


## AVAILABILITY



           The dracut-catimages command is part of the dracut package and is
           available from **https://github.com/dracut-ng/dracut-ng **
    


* * *
# clockdiff

## NAME



           clockdiff - measure clock difference between hosts
    


## SYNOPSIS



    
           **clockdiff**[**-o**] [**-o1**] [**--time-format** _ctime iso_] [**-V**] {destination}
    


## DESCRIPTION



           **clockdiff** Measures clock difference between us and _destination_
           with 1 msec resolution using ICMP TIMESTAMP [2] packets or,
           optionally, IP TIMESTAMP option [3] added to ICMP ECHO. [1]
    


## OPTIONS



           **-o**
               Use IP TIMESTAMP with ICMP ECHO instead of ICMP TIMESTAMP
               messages. It is useful with some destinations, which do not
               support ICMP TIMESTAMP (f.e. Solaris <2.4).
    
           **-o1**
               Slightly different form of **-o** , namely it uses three-term IP
               TIMESTAMP with prespecified hop addresses instead of four term
               one. What flavor works better depends on target host.
               Particularly, **-o** is better for Linux.
    
           **-T** , **--time-format** _ctime iso_
               Print time stamp in output either ISO-8601 format or classical
               ctime format. The ctime format is default. The ISO time stamp
               includes timezone, and is easier to parse.
    
           **-I**
               Alias of **--time-format** _iso_ option and argument.
    
           **-h** , **--help**
               Print help and exit.
    
           **-V** , **--version**
               Print version and exit.
    


## WARNINGS



               • Some nodes (Cisco) use non-standard timestamps, which is
               allowed by RFC, but makes timestamps mostly useless.
    
               • Some nodes generate messed timestamps (Solaris>2.4), when
               run **xntpd**. Seems, its IP stack uses a corrupted clock source,
               which is synchronized to time-of-day clock periodically and
               jumps randomly making timestamps mostly useless. Good news is
               that you can use NTP in this case, which is even better.
    
               • **clockdiff** shows difference in time modulo 24 days.
    


## REFERENCES



           [1] ICMP ECHO, RFC0792, page 14.
    
           [2] ICMP TIMESTAMP, RFC0792, page 16.
    
           [3] IP TIMESTAMP option, RFC0791, 3.1, page 16.
    


## SECURITY



           **clockdiff** requires CAP_NET_RAW and CAP_SYS_NICE capabilities to be
           executed. It is safe to be used as set-uid root.
    


## AVAILABILITY



           **clockdiff** is part of _iputils_ package.
    


* * *
# rpm-plugin-syslog

## NAME



           rpm-plugin-syslog - Syslog plugin for the RPM Package Manager
    


## Description



           The plugin writes basic information about rpm(8) transactions to
           the syslog - like transactions run and packages installed or
           removed.
    


## Configuration



           There are currently no options for this plugin in particular.  See
           rpm-plugins(8) on how to control plugins in general.
    


* * *
# systemd-hibernate-resume.service

## NAME



           systemd-hibernate-resume.service, systemd-hibernate-clear.service,
           systemd-hibernate-resume - Resume from hibernation
    


## SYNOPSIS



           systemd-hibernate-resume.service
    
           systemd-hibernate-clear.service
    
           /usr/lib/systemd/systemd-hibernate-resume
    


## DESCRIPTION



           systemd-hibernate-resume.service initiates the resume from
           hibernation.
    
           **systemd-hibernate-resume** only supports the in-kernel hibernation
           implementation, see **Swap suspend******[1]. Internally, it works by
           writing the major:minor of selected device node to
           /sys/power/resume, along with the offset in memory pages
           (/sys/power/resume_offset) if supported.
    
           The resume device node is either passed directly through
           arguments, or automatically acquired from kernel command line
           options and/or _HibernateLocation_ EFI variable. The latter will
           normally be cleared by systemd-hibernate-resume.service on
           resumption. If a stale variable is detected, it would be cleared
           by systemd-hibernate-clear.service.
    
           Failing to initiate a resume is not an error condition. It may
           mean that there was no resume image (e. g. if the system has been
           simply powered off and not hibernated). In such cases, the boot is
           ordinarily continued.
    


## NOTES



            1. Swap suspend
               https://docs.kernel.org/power/swsusp.html
    


* * *
# tc-hfsc

## NAME



           HFSC - Hierarchical Fair Service Curve's control under linux
    


## SYNOPSIS



           tc qdisc add ... hfsc [ **default** CLASSID ]
    
           tc class add ... hfsc [ [ **rt** SC ] [ **ls** SC ] | [ **sc** SC ] ] [ **ul** SC ]
    
           **rt** : realtime service curve
           **ls** : linkshare service curve
           **sc** : rt+ls service curve
           **ul** : upperlimit service curve
    
           • at least one of **rt** , **ls** or **sc** must be specified
           • **ul** can only be specified with **ls** or **sc**
    
           SC := [ [ **m1** BPS ] **d** SEC ] **m2** BPS
                  **m1** : slope of the first segment
                  **d** : x-coordinate of intersection
                  **m2** : slope of the second segment
    
           SC := [ [ **umax** BYTE ] **dmax** SEC ] **rate** BPS
                  **umax** : maximum unit of work
                  **dmax** : maximum delay
                  **rate** : rate
    
           For description of BYTE, BPS and SEC - please see **UNITS** section of
           tc(8).
    


## DESCRIPTION (qdisc)



           HFSC qdisc has only one optional parameter - **default**. CLASSID
           specifies the minor part of the default classid, where packets not
           classified by other means (e.g. u32 filter, CLASSIFY target of
           iptables) will be enqueued. If **default** is not specified,
           unclassified packets will be dropped.
    


## DESCRIPTION (class)



           HFSC class is used to create a class hierarchy for HFSC scheduler.
           For explanation of the algorithm, and the meaning behind **rt** , **ls** ,
           **sc** and **ul** service curves - please refer to tc-hfsc(7).
    
           As you can see in **SYNOPSIS** , service curve (SC) can be specified in
           two ways. Either as maximum delay for certain amount of work, or
           as a bandwidth assigned for certain amount of time. Obviously, **m1**
           is simply **umax** /**dmax**.
    
           Both **m2** and **rate** are mandatory. If you omit other parameters, you
           will specify linear service curve.
    


* * *
# systemd-quotacheck@.service

## NAME



           systemd-quotacheck@.service, systemd-quotacheck-root.service,
           systemd-quotacheck - File system quota checker logic
    


## SYNOPSIS



           systemd-quotacheck@.service
    
           systemd-quotacheck-root.service
    
           /usr/lib/systemd/systemd-quotacheck
    


## DESCRIPTION



           systemd-quotacheck@.service and systemd-quotacheck-root.service
           are services responsible for file system quota checks. They run
           once at boot after all necessary file systems are mounted. They
           are pulled in only if at least one file system has quotas enabled.
    


## KERNEL COMMAND LINE



           systemd-quotacheck understands one kernel command line parameter:
    
           _quotacheck.mode=_
               One of "auto", "force", "skip". Controls the mode of
               operation. The default is "auto", and ensures that file system
               quota checks are done when the file system quota checker deems
               them necessary.  "force" unconditionally results in full file
               system quota checks.  "skip" skips any file system quota
               checks.
    
               Added in version 186.
    


## CREDENTIALS



           **systemd-quotacheck** supports the service credentials logic as
           implemented by _ImportCredential=_ /_LoadCredential=_ /_SetCredential=_
           (see systemd.exec(5) for details). The following credentials are
           used when passed in:
    
           _quotacheck.mode_
               The contents of the credential is parsed as same as the kernel
               command line option with the same name. See above for more
               details.
    
               Added in version 258.
    
           Note that by default the systemd-quotacheck@.service and
           systemd-quotacheck-root.service unit files are set up to inherit
           _quotacheck.mode_ credential from the service manager.
    


* * *
# pam_selinux_check

## NAME



           pam_selinux_check - login program to test pam_selinux.so
    


## SYNOPSIS



           **pam_selinux_check [user]**
    


## DESCRIPTION



           With no arguments, **pam_selinux_check** will prompt for user
    


## OPTIONS



           target_user
                  The user to login as.
    


## DIAGNOSTICS



           You must setup a /etc/pam.d/pam_selinux_check file, in order for
           the check to work.
    
           When checking if a selinux is valid, **pam_selinux_check** returns an
           exit code of 0 for success and > 0 on error:
    
           1: Authentication failure
    


## BUGS



           Let's hope not, but if you find any, please email the author.
    


* * *
# ip-fou

## NAME



           ip-fou - Foo-over-UDP receive port configuration
    
           ip-gue - Generic UDP Encapsulation receive port configuration
    


## SYNOPSIS



           **ip**[ _OPTIONS_ ] **fou**{ _COMMAND_ | **help**}
    
           **ip fou add port** _PORT_ { **gue** | **ipproto** _PROTO_  } [ **local** _IFADDR_  ] [
                   **peer** _IFADDR_  ] [ **peer_port** _PORT_  ] [ **dev** _IFNAME_  ]
           **ip fou del port** _PORT_ [ **local** _IFADDR_  ] [ **peer** _IFADDR_  ] [
                   **peer_port** _PORT_  ] [ **dev** _IFNAME_  ]
           **ip fou show**
    


## DESCRIPTION



           The **ip fou** commands are used to create and delete receive ports
           for Foo-over-UDP (FOU) as well as Generic UDP Encapsulation (GUE).
    
           Foo-over-UDP allows encapsulating packets of an IP protocol
           directly over UDP. The receiver infers the protocol of a packet
           received on a FOU UDP port to be the protocol configured for the
           port.
    
           Generic UDP Encapsulation (GUE) encapsulates packets of an IP
           protocol within UDP and an encapsulation header. The encapsulation
           header contains the IP protocol number for the encapsulated
           packet.
    
           When creating a FOU or GUE receive port, the port number is
           specified in _PORT_ argument. If FOU is used, the IP protocol number
           associated with the port is specified in _PROTO_ argument. You can
           bind a port to a local address/interface, by specifying the
           address in the local _IFADDR_ argument or the device in the _IFNAME_
           argument. If you would like to connect the port, you can specify
           the peer address in the peer _IFADDR_ argument and peer port in the
           peer_port _PORT_ argument.
    
           A FOU or GUE receive port is deleted by specifying _PORT_ in the
           delete command, as well as local address/interface or peer
           address/port (if set).
    


## EXAMPLES



       **Configure a FOU receive port for GRE bound to 7777**
           # ip fou add port 7777 ipproto 47
    
       **Configure a FOU receive port for IPIP bound to 8888**
           # ip fou add port 8888 ipproto 4
    
       **Configure a GUE receive port bound to 9999**
           # ip fou add port 9999 gue
    
       **Delete the GUE receive port bound to 9999**
           # ip fou del port 9999
    
       **Configure a FOU receive port for GRE bound to 1.2.3.4:7777**
           # ip fou add port 7777 ipproto 47 local 1.2.3.4
    


* * *
# systemd-rc-local-generator

## NAME



           systemd-rc-local-generator, rc-local.service - Compatibility
           generator and service to start /etc/rc.local during boot
    


## SYNOPSIS



           /usr/lib/systemd/system-generators/systemd-rc-local-generator
    
           rc-local.service
    


## DESCRIPTION



           **systemd-rc-local-generator** is a generator that checks whether
           /etc/rc.local exists and is executable, and if it is, pulls the
           rc-local.service unit into the boot process. This unit is
           responsible for running this script during late boot. The script
           is run after network.target, but in parallel with most other
           regular system services.
    
           Note that rc-local.service runs with slightly different semantics
           than the original System V version, which was executed "last" in
           the boot process, which is a concept that does not translate to
           systemd.
    
           Also note that rc-local.service is ordered after network.target,
           which does not mean that the network is functional, see
           systemd.special(7). If the script requires a configured network
           connection, it may be desirable to pull in and order it after
           network-online.target with a drop-in:
    
               # /etc/systemd/system/rc-local.service.d/network.conf
               [Unit]
               Wants=network-online.target
               After=network-online.target
    
           Support for /etc/rc.local is provided for compatibility with
           specific System V systems only. However, it is strongly
           recommended to avoid using this script today, and instead provide
           proper unit files with appropriate dependencies for any scripts to
           run during the boot process. Note that the path to the script is
           set at compile time and varies between distributions.
    
           systemd-rc-local-generator implements systemd.generator(7).
    


## NOTES



           On systems with SELinux, when creating the file, make sure to set
           the appropriate context, e.g. with "**sudo restorecon -v**
           **/etc/rc.local** ".
    


* * *
# slaptest

## NAME



           slaptest - Check the suitability of the OpenLDAP slapd
           configuration
    


## SYNOPSIS



           **SBINDIR/slaptest**[**-d** _debug-level_] [**-f** _slapd.conf_] [**-F** _confdir_]
           [**-n** _dbnum_] [**-o** _option_[**=**_value_]] [**-Q**] [**-u**] [**-v**]
    


## DESCRIPTION



           **Slaptest** is used to check the conformance of the slapd(8)
           configuration.  It opens the slapd.conf(5) configuration file or
           the slapd-config(5) backend, and parses it according to the
           general and the backend-specific rules, checking its sanity.
    


## OPTIONS



           **-d** _debug-level_
                  enable debugging messages as defined by the specified
                  _debug-level_ ; see slapd(8) for details.
    
           **-f** _slapd.conf_
                  specify an alternative slapd.conf(5) file.
    
           **-F** _confdir_
                  specify a config directory.  If both **-f** and **-F** are
                  specified, the config file will be read and converted to
                  config directory format and written to the specified
                  directory.  If neither option is specified, slaptest will
                  attempt to read the default config directory before trying
                  to use the default config file. If a valid config directory
                  exists then the default config file is ignored. If dry-run
                  mode is also specified, no conversion will occur.
    
           **-n** _dbnum_
                  Just open and test the _dbnum_ -th database listed in the
                  configuration file.  To only test the config database
                  slapd-config(5), use **-n 0** as it is always the first
                  database.
    
           **-o** _option_[**=**_value_]
                  Specify an _option_ with a(n optional) _value_.  Possible
                  generic options/values are:
    
                         syslog=<subsystems>  (see `-s' in slapd(8))
                         syslog-level=<level> (see `-S' in slapd(8))
                         syslog-user=<user>   (see `-l' in slapd(8))
    
           **-Q** Be extremely quiet: only the exit code indicates success
                  (0) or not (any other value).
    
           **-u** enable dry-run mode (i.e. don't fail if databases cannot be
                  opened, but config is fine).
    
           **-v** enable verbose mode.
    


## EXAMPLES



           To check a slapd.conf(5) give the command:
    
                SBINDIR/slaptest -f /ETCDIR/slapd.conf -v
    


## ACKNOWLEDGEMENTS



           **OpenLDAP Software** is developed and maintained by The OpenLDAP
           Project <http://www.openldap.org/>.  **OpenLDAP Software** is derived
           from the University of Michigan LDAP 3.3 Release.
    


* * *
# tc-bfifo

## NAME



           pfifo - Packet limited First In, First Out queue
    
           bfifo - Byte limited First In, First Out queue
    


## SYNOPSIS



           **tc qdisc ... add pfifo [ limit** packets **]**
    
           **tc qdisc ... add bfifo [ limit** bytes **]**
    


## DESCRIPTION



           The pfifo and bfifo qdiscs are unadorned First In, First Out
           queues. They are the simplest queues possible and therefore have
           no overhead.  **pfifo** constrains the queue size as measured in
           packets.  **bfifo** does so as measured in bytes.
    
           Like all non-default qdiscs, they maintain statistics. This might
           be a reason to prefer pfifo or bfifo over the default.
    


## ALGORITHM



           A list of packets is maintained, when a packet is enqueued it gets
           inserted at the tail of a list. When a packet needs to be sent out
           to the network, it is taken from the head of the list.
    
           If the list is too long, no further packets are allowed on. This
           is called 'tail drop'.
    


## PARAMETERS



           limit  Maximum queue size. Specified in bytes for bfifo, in
                  packets for pfifo. For pfifo, defaults to the interface
                  txqueuelen, as specified with ip(8).  The range for this
                  parameter is [0, UINT32_MAX].
    
                  For bfifo, it defaults to the txqueuelen multiplied by the
                  interface MTU.  The range for this parameter is [0,
                  UINT32_MAX] bytes.
    
                  Note: The link layer header was considered when counting
                  packets length.
    


## OUTPUT



           The output of **tc -s qdisc ls** contains the limit, either in packets
           or in bytes, and the number of bytes and packets actually sent. An
           unsent and dropped packet only appears between braces and is not
           counted as 'Sent'.
    
           In this example, the queue length is 100 packets, 45894 bytes were
           sent over 681 packets.  No packets were dropped, and as the pfifo
           queue does not slow down packets, there were also no overlimits:
    
           # tc -s qdisc ls dev eth0
           qdisc pfifo 8001: dev eth0 limit 100p
            Sent 45894 bytes 681 pkts (dropped 0, overlimits 0)
    
           If a backlog occurs, this is displayed as well.
    


* * *
# chkcon

## NAME



           chkcon -  determine if a security context is valid for a given
           binary policy
    


## SYNOPSIS



           chkcon policy_file context
    


## DESCRIPTION



           This utility validates (the string representation of) a security
           context specified by the argument _context_ against configuration
           data read in from a policy database binary representation file
           specified by the argument _policy_file._
    


## FILES



           policy file
    


* * *
# ibcheckportwidth

## NAME



           ibcheckportwidth - validate IB port for 1x link width
    


## SYNOPSIS



           **ibcheckportwidth**[-h] [-v] [-N | -nocolor] [-G] [-C ca_name] [-P
           ca_port] [-t(imeout) timeout_ms]  <lid|guid> <port>
    


## DESCRIPTION



           Check connectivity and check the specified port for 1x link width.
           Port address is a lid unless -G option is used to specify a GUID
           address.
    


## OPTIONS



           -G      use GUID address argument. In most cases, it is the Port
           GUID.
                   Example:
                   "0x08f1040023"
    
           -v      increase the verbosity level
    
           -N | -nocolor use mono rather than color mode
    
           -C <ca_name>    use the specified ca_name.
    
           -P <ca_port>    use the specified ca_port.
    
           -t <timeout_ms> override the default timeout for the solicited
           mads.
    


## EXAMPLE



           ibcheckportwidth 2 3         # check lid 2 port 3
    


* * *
# idmapwb

## NAME



           idmapwb.so - winbind ID mapping plugin for cifs-utils
    


## DESCRIPTION



           This plugin allows the utilities in cifs-utils to work in
           conjuction with the winbind facility of Samba suite. It handles
           several functions including mapping UID and GID to SIDs and vice
           versa.
    
           Utilities are usually configured to use the correct plugin by
           creating a symlink at _/etc/cifs-utils/idmap-plugin_ that points to
           the correct plugin that you wish to use.
    
           This plugin requires that winbindd(8) be properly configured and
           running.
    


* * *
# cupsd

## NAME



           cupsd - cups scheduler
    


## SYNOPSIS



           **cupsd**[ **-c** _cupsd.conf_ ] [ **-f**] [ **-F**] [ **-h**] [ **-l**] [ **-s** _cups-_
           _files.conf_ ] [ **-t**]
    


## DESCRIPTION



           **cupsd** is the scheduler for CUPS. It implements a printing system
           based upon the Internet Printing Protocol, version 2.1, and
           supports most of the requirements for IPP Everywhere. If no
           options are specified on the command-line then the default
           configuration file _/etc/cups/cupsd.conf_ will be used.
    


## OPTIONS



           **-c** _cupsd.conf_
                Uses the named cupsd.conf configuration file.
    
           **-f** Run **cupsd** in the foreground; the default is to run in the
                background as a "daemon".
    
           **-F** Run **cupsd** in the foreground but detach the process from the
                controlling terminal and current directory. This is useful
                for running **cupsd** from **init**(8).
    
           **-h** Shows the program usage.
    
           **-l** This option is passed to **cupsd** when it is run from **launchd**(8)
                or **systemd**(8).
    
           **-s** _cups-files.conf_
                Uses the named cups-files.conf configuration file.
    
           **-t** Test the configuration file for syntax errors.
    


## FILES



           _/etc/cups/classes.conf_
           _/etc/cups/cups-files.conf_
           _/etc/cups/cupsd.conf_
           _/usr/share/cups/mime/mime.convs_
           _/usr/share/cups/mime/mime.types_
           _/etc/cups/printers.conf_
           _/etc/cups/subscriptions.conf_
    


## CONFORMING TO



           **cupsd** implements all of the required IPP/2.1 attributes and
           operations. It also implements several CUPS-specific
           administrative operations.
    


## EXAMPLES



           Run **cupsd** in the background with the default configuration file:
    
               cupsd
    
           Test a configuration file called _test.conf_ :
    
               cupsd -t -c test.conf
    
           Run **cupsd** in the foreground with a test configuration file called
           _test.conf_ :
    
               cupsd -f -c test.conf
    


* * *
# systemd-bsod.service

## NAME



           systemd-bsod.service, systemd-bsod - Displays boot-time emergency
           log message in full screen
    


## SYNOPSIS



           systemd-bsod.service
    
           **/usr/lib/systemd/systemd-bsod**[OPTIONS...]
    


## DESCRIPTION



           systemd-bsod.service is used to display a blue screen which
           contains a message relating to a boot failure, including a QR code
           which can be scanned to get helpful information about the failure.
    


## OPTIONS



           The following options are understood by **systemd-bsod** :
    
           **-h** , **--help**
               Print a short help text and exit.
    
           **--version**
               Print a short version string and exit.
    
           **-c** , **--continuous**
               When specified, **systemd-bsod** waits continuously for changes in
               the journal if it does not find any emergency messages on the
               initial attempt.
    
               Added in version 255.
    
           **--tty=**
               Specify the TTY to output to. By default, **systemd-bsod** will
               automatically find a free VT to display the message on. If
               this option is specified a TTY may be selected explicitly. Use
               **--tty=/dev/tty** to direct output to the terminal the command is
               invoked on.
    
               Added in version 256.
    


## EXIT STATUS



           On success (displaying the journal message successfully), 0 is
           returned, a non-zero failure code otherwise.
    


* * *